last executing test programs: 2m53.323619883s ago: executing program 2 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x20040600) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000140)=r0) 2m53.191186843s ago: executing program 2 (id=278): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000380)={0x0, 0xe, 0x2, '#\t'}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 2m50.804393156s ago: executing program 2 (id=304): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 2m50.502080356s ago: executing program 2 (id=308): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xff, @empty, 0x0, 0x9}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) 2m50.302326203s ago: executing program 2 (id=311): syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000012500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1, 0x12588, &(0x7f0000024ac0)="$eJzs/Xv8cHO9Lvze43yXc0ghkkNFKHIq5FxRhETOUQ6hSAchEUpUpFJCOZSQCikkOYUUoiSRyDmJkkjIfq1nXveaY69nPHM8e6299h6vvd/vP+ZnrHvynf5Yva7r+oV7BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyYMaN44Yv3/m+n90vv/o/TPW/GjG7P//ie+7/9j9l7f0z5H2fmi/4vns0f+7wl9nz/znvs8L73/7fzP/XXt+9H93/dvh/d/3/qz/2/4zUr7b3hea/d+Jjzqhdc8dS66x/4v+3/EAAAAPx/UfZ/2fuln/0Pf0g1Y8bM5/8Pv/aCGTNmzpwxoyyP+M0n5v9f+b+/5Rb8/7V//K/8/x4AAAD+78r+r3u/ckz/f537ghkzDjn4//Tr//1XZrb/7X/ufODfHh+6PQvkj1/gP3+p/D99/G80b+58ubN+dvHC/+e/PgAAAPj/Ldn/Te9X+pt91t/f/+LcBXMXyl049yW5i+QumvvS3MVyX5a7eO4SuUvmLpX78txX5L4yd+ncZXJflbts7nK5y/8Pf/5rclfIXTH3tbkr5a6cu0ruqrmr5b4u9/W5q+eukbtm7hty18pdO3ed3HVz18tdP3eD3Dfmvin3zbkb5m6U+5bct+ZunLtJ7ttyN83dLHfz3LfnbpH7jtwtc7fKfWfu1rnb5G6bu13u9rk75O6Y+67cnXJ3zs0/azLjPbm75O6au1vu7rnvzZ31D5Pkn0+ZsVfu+3Lfn7t37j65H8jdN/eDuR/K/XDuR3L3y/1o7qx/EOWA3Fn/vMjHcg/K/XjurJ+QHZL7idxDcw/LPTz3k7mfyj0i99O5R+YelfuZ3M/mfi736NxZP8v7fO6xuV/I/WLul3KPy/1y7ldyj8/9au4JuSfmnpT7tdyv556ce0ruqbmn5X4j95u5p+d+K/eM3DNzz8r9du7Zud/J/W7u93LPyT0397zc7+een/uD3B/mXpB7Ye5FuT/KvTj3x7mX5P4k99Lcy3Ivz70i98rcn+ZelXt17jW5s/5erGtzf577i9zrcq/PvSH3l7k35t6U+6vcX+fenPub3Ftyf5t7a+7vcm/LvT3397l35P4h987cu3L/mHt37j259+bel3t/7gO5D+b+Kfeh3D/nPpz7l9xHch/N/Wvu33Ify/177qysm/V3IT2R+2TuP3Ofyv1X7tO5z+Q+m/vv3Of+48z68XmRjyI/4y6q3PzcvUj+Fm1ulzsz93m5+fvwitly88/ZFXPkzpk7V+7cufPkviA3Pwcv8nPwIj8HL/Jz8CI/By+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S30Xyv0j+F8n/IvlfJP+L5H+R/C9enZv8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/2f9d3lF8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/1lbt0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/Ivk/67/SLpP/ZX6hTP6Xyf8y+V8m/8vkf5n8L5P/ZfK/TP6Xyf8y+V8m/8vkf5n8L5P/ZfK/TP6X8/3X+79MLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMhlYpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpB4n9GlV5QpRdU+V9U6QVVcrlKL6jSC6r0giq9oEovqNILqvSCKr2gSi+o0guq9IIqvaBKL6jSC6r8XKBK/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5P+tvt6+T/3Xyv07+1/kD6uR/nfyvk/918r9O/tfJ/zr5Xyf/6+R/nfyvk/918r+e57/e/3V6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlAnG+v0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL5gVw016QZNe0KQXNOkFTf7AJr2gSS9o0gua9IImvaBJL2jSC5r0gia9oEkvaNILmvxcoEn+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G8O/o//4DfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8j9xPqNN/rfJ/zb53yb/2+R/mz+hTf63yf82+d8m/9vkf5v8b5P/7Zz/9f5v0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r8XKBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva/6MX/Oe/eKNNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNpn53/M7vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9IvM/o0gu6/Ee2Sy/o0gu65HiXv5Auf2KXXtClF3TpBV16QZde0KUXdPm5QJf875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf/uP/J/1t8WMaNL/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvZv2eVcn/LvnfJf+75H+X/O+S/13yf9bvc9Ul/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53+blAl58LdMn/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d/m5QJf875L/XfK/S/53yf8u+d8l/7vkf5f875L/ie8ZM5P/M2f9/ntJzJnJ/5nJ/5nJ/5nJ/5l5YGbyf9a/z3/mbP/1/p+ZXjAzvWBmesHM9IKZ6QUz0wtmphfMTC+YmV4wM71gZnrBTP+ePQAAAPj/oOz/mf/5K7P+2bz/wzkH/+e/xGjG48+/aIuz57roxoFnZv17Al/wv/EvFQAAAPifNLL/z+3t/2Lj67Y5fe8btvrAwDOzfn8A+x8AAAAmaGT/n9fb/+XWT+z/2Nw7zv6egWdm/b6A9j8AAABM0Mj+/35v/1d3vforxXWn/OWagWfy7/Gx/wEAAGCKRvb/+b39X3/gE6tufdPq39ho4Jn8+/vtfwAAAJiikf3/g97+b3623m1nzvHs+n8aeCa/b5/9DwAAAFM0sv9/2Nv/7e8PevrZvTaf598Dz+T367X/AQAAYIpG9v8Fvf3f7XLhi+c899i/bjvwzKK59j8AAABM0Mj+v7C3/2e+7L2XPH+t+/5xzsAzs/4c+x8AAAAmaGT/X9Tb/8/7ytk7PHXiEvMNbfzFcu1/AAAAmKCR/f+j3v5//meOO+g7zxy5VjPwzMty7X8AAACYoJH9f3Fv/8+28ttO3P6lG53yrYFnFs+1/wEAAGCCRvb/j3v7f/Zv3L16s8YtDy4z8MwSufY/AAAATNDI/r+kt//nWGSJPzzxxwWe9+mBZ5bMtf8BAABggkb2/096+3/O5y/y3KmHXLTd1waeWSrX/gcAAIAJGtn/l/b2/1zn3PqSTbfb78erDzzz8lz7HwAAACZoZP9f1tv/c/91+7u+8aNDb/jkwDOvyLX/AQAAYIJG9v/lvf0/z4ZfKbfcZZ3llxh45pW59j8AAABM0Mj+v6K3/1+w/e8Wr9qHD1hx4JmlZ/0x/zv/WgEAAID/OSP7/8re/p/33ndf/tfblv3q5weemfV7Atr/AAAAMEEj+/+nvf0/34dvede3rznn1y8ZeOZVufY/AAAATNDI/r+qt//nv27uQ7daaJ8VLh14Ztlc+x8AAAAmaGT/X93b/y+8delTZz/gzl3OGHhmuVz7HwAAACZoZP9f09v/C+z08FrPfWuRTz3/P/6fbzls2w3/+x+3fK79DwAAABM0sv9/1tv/L1pqzXufPveqfyw78Myrc+1/AAAAmKCR/X9tb/+/+MR/tjP3quc7euCZ1+Ta/wAAADBBI/v/5739v+ARV7x82znOWusrA8+skGv/AwAAwASN7P9f9Pb/QivUV33vpj1Oed3AMyvm2v8AAAAwQSP7/7re/l/45B++5/HrnnjwhwPPvDbX/gcAAIAJGtn/1/f2/0sW3PtT3dyrPG++gWdWyrX/AQAAYIJG9v8Nvf2/yJwbnr753sdvVw08s3Ku/Q8AAAATNLL/f9nb/4ue/5n1Tj57qx+fMvDMKrn2PwAAAEzQyP6/sbf/X7rBcpfvsNFpNyw08MyqufY/AAAATNDI/r+pt/8Xe+bBxc/+8k7LXzTwzGq59j8AAABM0Mj+/1Vv/7/swV+V/3zyugO+O/DMrN8T0P4HAACACRrZ/7/u7f/FN5vvrtmWmeOrsw888/pc+x8AAAAmaGT/39zb/0tcdvpab1v5mF8fPPDM6rn2PwAAAEzQyP7/TW//L7n/jqee9tCmK7xs4Jk1cu1/AAAAmKCR/X9Lb/8v9b6tD33yyOd2WWngmTVz7X8AAACYoJH9/9ve/n/5zSe+q37Hmp/68sAzb8i1/wEAAGCCRvb/rb39/4pjNr5qxl7PLrTwwDNr5dr/AAAAMEEj+/93vf3/yqWPePnfz139Xz8ZeGbtXPsfAAAAJmhk/9/W2/9Lr3le+62bjv3umQPPrJNr/wMAAMAEjez/23v7f5nDPnjv2+fYfJPZBp5ZN9f+BwAAgAka2f+/7+3/V73w6vXmmvuG9lMDz6yXa/8DAADABI3s/zt6+3/Zs2ec/sx1cz2w5MAz6+fa/wAAADBBI/v/D739v9yFr/vUGWef8v0VBp7ZINf+BwAAgAka2f939vb/8uUz79lm7x03O2bgmTfm2v8AAAAwQSP7/67e/n/1oqs/u/WXT3jp0gPPvCnX/gcAAIAJGtn/f+zt/9d881+LnrnR1pcfMfDMm3PtfwAAAJigkf1/d2//r3DuZWs+u8zjX/r6wDMb5tr/AAAAMEEj+/+e3v5fcbb293M+udIH1xh4ZqNc+x8AAAAmaGT/39vb/689/vwDt3jojDXOHXjmLbn2PwAAAEzQyP6/r7f/V1r8A187feXdfz/vwDNvzbX/AQAAYIJG9v/9vf2/8ipvuvSxd1xzRD3wzMa59j8AAABM0Mj+f6C3/1f57Oe2K45sdz994JlNcu1/AAAAmKCR/f9gb/+veu22TzUn3rHQIQPPvC3X/gcAAIAJGtn/f+rt/9X2/epCT6y18L8WH3hm01z7HwAAACZoZP8/1Nv/r9v15Ned+tLzvvvagWc2y7X/AQAAYIJG9v+fe/v/9Xfscuumz+y7yXEDz2yea/8DAADABI3s/4d7+3/1TW7e7/l/fKRdcOCZt+fa/wAAADBBI/v/L739v8Y/XvDVp9ZY/oELB57ZItf+BwAAgAka2f+P9Pb/mn98xcXf2e6Q739v4Jl35Nr/AAAAMEEj+//R3v5/wzaPvHP7Q9babI6BZ7bMtf8BAABggkb2/197+3+tv1162IO7XPzSCwae2SrX/gcAAIAJGtn/f+vt/7U3+uguC/1o/8vnH3jmnbn2PwAAAEzQyP5/rLf/19lh3TductvNXyoHntk61/4HAACACRrZ/3/v7f917zv8mz9u5//gyQPPbJNr/wMAAMAEjez/x3v7f72PrNI8sNARa7xq4Jltc+1/AAAAmKCR/f+P3v5f//q/PTDfNW/+/ecGntku1/4HAACACRrZ/0/09v8Gv/vF1Wt964Ejjh94Zvtc+x8AAAAmaGT/P9nb/2/ceY4lvn/AUru/fuCZHXLtfwAAAJigkf3/z97+f9PL7zz4giM33fO3A8/smGv/AwAAwASN7P+nevv/zSe9eKf13nHMZz808My7cu1/AAAAmKCR/f+v3v7f8NOLrzv3ymv+bqeBZ2b9mv0PAAAAEzSy/5/u7f+NVrzvlHseem7Vywae2TnX/gcAAIAJGtn/z/T2/1tO2bK48Mmd9nnLwDPvzrX/AQAAYIJG9v+zvf3/1oU+f89Gy5x2zCMDz7wn1/4HAACACRrZ///u7f+N5/r2FYtuNMdPnxp4Zpdc+x8AAAAmaGT/P9fb/5v8YK+XPvzl65bcZuCZXXPtfwAAAJig/3r/FzN6+/9tJ6908tx7r7LlHwee2S3X/gcAAIAJGtn/RW//b7rg39e55+wnfrjuwDO759r/AAAAMEEj+7/s7f/N5rx25wuu2+rutw88895c+x8AAAAmaGT/V739v/n5cx2y3tzHV08MPLNHrv0PAAAAEzSy/+ve/n/7Upcstugc9Yb7DzyzZ679DwAAABM0sv+b3v7f4sQDrnz4pqu+fevAM3vl2v8AAAAwQSP7v+3t/3ccsfbdF567x3O/HHjmfbn2PwAAAEzQyP7vevt/yxU+NWOjvc5aZK+BZ96fa/8DAADABI3s/5m9/b/Vh7f4xiYH7LPnhgPP7J1r/wMAAMAEjez/5/X2/zuv+8IGP/7WOZ99cOCZfXLtfwAAAJigkf3//N7+3/rWM3d98JpFfvfcwDMfyLX/AQAAYIJG9v9svf2/zU7vP3yhhe5cdbuBZ/bNtf8BAABggkb2/+y9/b/tX+9Ycq12nX1uGnjmg7n2PwAAAEzQyP6fo7f/t9twoWu+f9uhx+w78MyHcu1/AAAAmKCR/T9nb/9vv/1i9z/wo2V/+u6BZz6ca/8DAADABI3s/7l6+3+Hex+o59vl4SWvHnjmI7n2PwAAAEzQyP6fu7f/d3zh+of8+ZAFtjxw4Jn9cu1/AAAAmKCR/T9Pb/+/6+xDd37Rdrf88A8Dz3w01/4HAACACRrZ/y/o7f+dLrxonbessd/d1w48s3+u/Q8AAAATNLL/5+3t/53Lj5986R8vqvYYeOaAXPsfAAAAJmhk/8/X2//vPub6Gfc+s8SGDww8M+vfCWD/AwAAwASN7P/5e/v/PUvPdvcCL73v2+sPPPOxXPsfAAAAJmhk/7+wt/93WfM1V6671kbPbTbwzEG59j8AAABM0Mj+X6C3/3c97MnFzjnxyEX+OvDMx3PtfwAAAJigkf3/ot7+3+2yJQ8/f5Xrrl5v4JmDc+1/AAAAmKCR/f/i3v7fff97dn3jn+d4+f0DzxySa/8DAADABI3s/wV7+/+97/vdBvMeddq+fxt45hO59j8AAABM0Mj+X6i3//e4edFv3LXlTsduPvDMobn2PwAAAEzQyP5fuLf/99zgO/XFGz53+50DzxyWa/8DAADABI3s/5f09v9ez+xx/5uOW/N1Hxt45vBc+x8AAAAmaGT/L9Lb/+97cNNrFn7imPe9d+CZT+ba/wAAADBBI/t/0d7+f/9mX17y0aU3PfpnA898Ktf+BwAAgAka2f8v7e3/vTfZ8pJHrj/r2Q8MPHNErv0PAAAAEzSy/xfr7f99/vH5HV4yzx4L3zjwzKdz7X8AAACYoJH9/7Le/v/AH7990Jv3uepN1ww8c2Su/Q8AAAATNLL/F+/t/3232evEH32nPvM9A88clWv/AwAAwASN7P8levv/g9feufofzzn+rj8NPPOZXPsfAAAAJmhk/y/Z2/8f2vfFf3jBnlsVGw0889lc+x8AAAAmaGT/L9Xb/x/edfHnNpj9iS22HXjmc7n2PwAAAEzQyP5/eW//f+SO+17ygxtXOf/fA88cnWv/AwAAwASN7P9X9Pb/fsevctG5Vz989e8Gnjkm1/4HAACACRrZ/6/s7f+PLv63bdZZcNmXHzDwzOdz7X8AAACYoJH9v3Rv/++/yi/2f+H+h+6758Azx+ba/wAAADBBI/t/md7+P+Czc3zlvtPXOfaGgWe+kGv/AwAAwASN7P9X9fb/gYteuupPLr7z9nUGnvlirv0PAAAAEzSy/5ft7f+PffOjt71110Ved9fAM1/Ktf8BAABggkb2/3K9/X/Ques+/eLunPc9OfDMcbn2PwAAAEzQyP5fvrf/Pz7b4S9+6PZ9jt5i4Jkv59r/AAAAMEEj+//Vvf1/8NwrfPCG1Y989tGBZ76Sa/8DAADABI3s/9f09v8hZz1+3Bp3bbTwWweeOT7X/gcAAIAJGtn/K/T2/yd+csMFux9835u2Hnjmq7n2PwAAAEzQyP5fsbf/D61nbvHVbZc4858Dz5yQa/8DAADABI3s/9f29v9hx/3oH5evfdFdHxx45sRc+x8AAAAmaGT/r9Tb/4e/6sAFVjhpv+KWgWdOyrX/AQAAYIJG9v/Kvf3/yVU3WHmXZ2/Z4vKBZ76Wa/8DAADABI3s/1V6+/9Tnzj45i8ttsD5Ow888/Vc+x8AAAAmaGT/r9rb/0dcvdnen79xx3OPHnjm5Fz7HwAAACZoZP+v1tv/nz7wi8fuNPspb1t24JlTcu1/AAAAmKCR/f+63v4/crfvfn/lPeeqXzfwzKm59j8AAABM0Mj+f31v/x/1q902veqcG+77ysAzp+Xa/wAAADBBI/t/9d7+/8xat/3ta9/Z/Oz5Bp75Rq79DwAAABM0sv/X6O3/z/5r4Xn32ufYt/5w4Jlv5tr/AAAAMEEj+3/N3v7/3CNLrbDaPKu/+JSBZ07Ptf8BAABggkb2/xt6+//ot99148+vf/af1cAz38q1/wEAAGCCRvb/Wr39f8x8uyz7hqXbIy8aeOaMXPsfAAAAJmhk/6/d2/+f/+7Jv7zuiWv2WGjgmTNz7X8AAACYoJH9v05v/x/7o68+8pXjdn/D7APPnJVr/wMAAMAEjez/dXv7/wsztp19jw3P+MN3B575dq79DwAAABM0sv/X6+3/Lx77yNmv3nKlL79s4Jmzc+1/AAAAmKCR/b9+b/9/6RWv2PjKox7/8MEDz3wn1/4HAACACRrZ/xv09v9xq7/g/V/+89Yv+/LAM7P+mQD7HwAAACZoZP+/sbf/v/zJmz/77lVOuHKlgWe+l2v/AwAAwASN7P839fb/V65oX7njYmudO7Txz8m1/wEAAGCCRvb/m3v7//j9LvvFF5495G3nDDxzbq79DwAAABM0sv837O3/r+75r4euOWn5+lsDz5yXa/8DAADABI3s/416+/+EW1af+dq1H7mvGXjm+7n2PwAAAEzQyP5/S2//n7je5854/7b7nv3pgWfOz7X/AQAAYIJG9v9be/v/pH+/acMTDz7vrcsMPPODXPsfAAAAJmhk/2/c2/9fe+gDe/zsroVfvPrAMz/Mtf8BAABggkb2/ya9/f/1t53/6devfsc/vzbwzAW59j8AAABM0Mj+f1tv/5986gtn/+ntSx25xMAzF+ba/wAAADBBI/t/097+P+VFNz6ySvfAHp8ceOaiXPsfAAAAJmhk/2/W2/+nzv7QL3fe9c1v+PzAMz/Ktf8BAABggkb2/+a9/X/aD1+17DEXH/GHFQeeuTjX/gcAAIAJGtn/b+/t/28s8bXP/uL0+b986cAzP861/wEAAGCCRvb/Fr39/82vbfX+Vfe/+cMvGXjmklz7HwAAACZoZP+/o7f/Tz9yp433XHD/lz1/4Jmf5Nr/AAAAMEEj+3/L3v7/1qu/cfbXr774yjMGnpn1zwTY/wAAADBBI/t/q97+P+ODH555wrP77bD4wDOX5dr/AAAAMEEj+/+dvf1/5g3nPLTbYhf95JCBZy7Ptf8BAABggkb2/9a9/X/WbUf+YvW1F3jouIFnrsi1/wEAAGCCRvb/Nr39/+0d3/LKX550y2yvHXjmylz7HwAAACZoZP9v29v/Zz/2709/8eCN1rlw4Jmf5tr/AAAAMEEj+3+73v7/zptW3WPXbY88bcGBZ67Ktf8BAABggkb2//a9/f/dbcsNV1x9iSfnGHjm6lz7HwAAACZoZP/v0Nv/37v/p2dcdtd9L/zewDPX5Nr/AAAAMEEj+3/H3v4/5+n61Zd3i7x7/oFnfpZr/wMAAMAEjez/d/X2/7lrX/GrFW6/8/ALBp65Ntf+BwAAgAka2f879fb/eVv88++7XLzPTScPPPPzXPsfAAAAJmhk/+/c2//ff3TNeb606zmvLgee+UWu/Q8AAAATNLL/393b/+d/7DPn3rD/sh/93MAz1+Xa/wAAADBBI/v/Pb39/4NrNtx8jdMf/sqrBp65Ptf+BwAAgAka2f+79Pb/D3+99wd2v3qd614/8MwNufY/AAAATNDI/t+1t/8v2P2Hx3x1wUOXPX7gmV/m2v8AAAAwQSP7f7fe/r9w2Xe/9muzb7XDTwaeuTHX/gcAAIAJGtn/u/f2/0VfPvWWvW48/icLDzxzU679DwAAABM0sv/f29v/Pzr0K0+uds4qD8028Myvcu1/AAAAmKCR/b9Hb/9fvNr28/98zydmO3PgmV/n2v8AAAAwQSP7f8/e/v/xtx/+wef32WOdJQeeuTnX/gcAAIAJGtn/e/X2/yXzLL3lTt8567RPDTzzm1z7HwAAACZoZP+/r7f/f9LM/eGVr6+fPGbgmVty7X8AAACYoJH9//7e/r/00lu+eNU8V71whYFnfptr/wMAAMAEjez/vXv7/7L5P/XmfZ9Y891HDDxza679DwAAABM0sv/36e3/y7+39rcPXvq5w5ceeOZ3ufY/AAAATNDI/v9Ab/9fcfEBR9684aY3rTHwzG259j8AAABM0Mj+37e3/68sLtnt5ccd8+qvDzxze679DwAAABM0sv8/2Nv/P/3CXD878Kg5PjrvwDO/z7X/AQAAYIJG9v+Hevv/qldeu/TRW173lXMHnrkj1/4HAACACRrZ/x/u7f+r1/j7bLevstN1pw8884dc+x8AAAAmaGT/f6S3/6/51Ep/esWfT1u2Hnjmzlz7HwAAACZoZP/v19v/P7vygbe+asGbX/HgwDN35dr/AAAAMEEj+/+jvf1/7UcX+96dV89/7YYDz/wx1/4HAACACRrZ//v39v/P91roc0edfvFJ2w08c3eu/Q8AAAATNLL/D+jt/1/89o4999t//wOfG3jmnlz7HwAAACZoZP8f2Nv/163//usW3/WBlfYdeObeXPsfAAAAJmhk/3+st/+vf+7M5W68eKmbbxp45r5c+x8AAAAmaGT/H9Tb/zf8+QtzHXb7EQdfPfDM/bn2PwAAAEzQyP7/eG///3LTLf7yke7N73r3wDMP5Nr/AAAAMEEj+//g3v6/8ds73P7eu86b9w8DzzyYa/8DAADABI3s/0N6+/+meY5f7fjV933swIFn/pRr/wMAAMAEjez/T/T2/6+a0150/bZ3nL7HwDMP5dr/AAAAMEEj+//Q3v7/9aXv+deaBy/8xmsHnvlzrv0PAAAAEzSy/w/r7f+bl/3t1u856ZA51x945uFc+x8AAAAmaGT/H97b/7/58jwXHrf2Wo8+MPDMX3LtfwAAAJigkf3/yd7+v+XQZY6/YrFHLv7rwDOP5Nr/AAAAMEEj+/9Tvf3/29X+csBrnl1+680Gnnk01/4HAACACRrZ/0f09v+tH3vDnSv9+fFXfGjgmVl/T4D9DwAAABM0sv8/3dv/v7vmqTWuXmWla3878Mzfcu1/AAAAmKCR/X9kb//f9usrFz52yxNOumzgmcdy7X8AAACYoJH9f1Rv/9++e/Pvdx219YE7DTzz91z7HwAAACZoZP9/prf/f//0Bdu/7rhrVnpk4JnHc+1/AAAAmKCR/f/Z3v6/Y+19fnzthu3Nbxl45h+59j8AAABM0Mj+/1xv//9hi41OOmnpMw7eZuCZJ3LtfwAAAJigkf1/dG//3/noZz/+vid2f9dTA888mWv/AwAAwASN7P9jevv/rpcs/6/Pz3PsvOsOPPPPXPsfAAAAJmhk/3++t///+K0/vWin6zd/7I8Dz8z6ewLsfwAAAJigkf1/bG//3/39X6+28neePf2JgWf+lWv/AwAAwASN7P8v9Pb/Pc+b//ar9ln9jW8feObpXPsfAAAAJmhk/3+xt//vPeFbB3xtz1PmvHXgmWdy7X8AAACYoJH9/6Xe/r9vsXcdv9c5Oz66/8Azz+ba/wAAADBBI/v/uN7+v3+lbS5c7cYbLt5r4Jl/59r/AAAAMEEj+//Lvf3/wNEnbf3z2efa+pcDzzyXa/8DAADABI3s/6/09v+Dv9jk3zfce98nfzHwyqwP+x8AAAAmaGT/H9/b/3/a59MLr7HqErvuPvDKrD/G/gcAAIAJGtn/X+3t/4fe8/01dt/qyBUPGnilzIf9DwAAABM0sv9P6O3/P9/5oTu/ethGv/r9wCtVPux/AAAAmKCR/X9ib/8//NZrPn758bec8LaBV+p82P8AAAAwQSP7/6Te/v/Lk8VJK6y/wP6PDbzS5MP+BwAAgAka2f9f6+3/R+55/Y93WfKi5e4beKXNh/0PAAAAEzSy/7/e2/+PvvPZ7b/01H6/fOPAK10+7H8AAACYoJH9f3Jv//91vTWu/uIih17y7MArs/58+x8AAAAmaGT/n9Lb/3/799NL7HrFOtvuMPDK8/Jh/wMAAMAEjez/U3v7/7GHLm9WPPXhmW8aeOX5+bD/AQAAYIJG9v9pvf3/97d1D1x20LJ/emjgldnyYf8DAADABI3s/2/09v/jV/zgjSfsfM7Juwy8Mns+7H8AAACYoJH9/83e/v/Hfvt+c7dL91n7pwOvzJEP+x8AAAAmaGT/n97b/0/s+ebDVr/zzvl/PfDKnPmw/wEAAGCCRvb/t3r7/8lbjt7ll9Uij+8z8Mpc+bD/AQAAYIJG9v8Zvf3/z2O3u+IX81/1yXcMvDJ3Pux/AAAAmKCR/X9mb/8/9YoTXrrqtfWujw+8Mk8+7H8AAACYoJH9f1Zv//9r9VOKPc88a8V7Bl6ZtfvtfwAAAJigkf3/7d7+f/qTu97z9Q/t8au1B16ZNx/2PwAAAEzQyP4/u7f/n5nvN+v+dLcnTrh+4JX58mH/AwAAwASN7P/v9Pb/s9+d95RVzl9l//cPvDJ/Pux/AAAAmKCR/f/d3v7/949eefDONx+/3H5Dr+TD/gcAAIAJGtn/3+vt/+dmPLrTMTO3+uVtA68skA/7HwAAACZoZP+f85/7v5hxY/37eR497ZIdB155UT7sfwAAAJigkf1/bm//F++9Ys27V9xp2ysGXnlxPux/AAAAmKCR/X9eb/+XB/1z0R9uft3M3wy8smA+7H8AAACYoJH9//3e/q9+uuaz6x89x58+MvDKQvmw/wEAAGCCRvb/+b39X7/jM9stcuwxJz898MrC+bD/AQAAYIJG9v8Pevu/eXjDS/+y8aZrv3PglZfkw/4HAACACRrZ/z/s7f/2n3t/7aLlnpt/44FXFsmH/Q8AAAATNLL/L+jt/26dHx644WNrPv7wwCuL5sP+BwAAgAka2f8X9vb/zHbG3P9Xr8z6c+x/AAAAmKCR/X9Rb/8/78envu6SO4+Y+9SBVxbLh/0PAAAAEzSy/3/U2//PP+MrC/3p0qXW+8HAKy/Lh/0PAAAAEzSy/y/u7f/ZXrD9Uwvu/MA3Fxh4ZfF82P8AAAAwQSP7/8e9/T/7wQ+/c+2D9n/4hIFXlsiH/Q8AAAATNLL/L+nt/zlet/TF55168RyrDbyyZD7sfwAAAJigkf3/k97+n3O5ub96/xXzv3O5gVeWyof9DwAAABM0sv8v7e3/ub54y37zL3LzhZ8ZeOXl+bD/AQAAYIJG9v9lvf0/981vO/yup5b/+coDr7wiH/Y/AAAATNDI/r+8t//ned9xu8675CPLfHHglVfmw/4HAACACRrZ/1f09v8L9j97gzeuv9bHDx14Zel82P8AAAAwQSP7/8re/p/3svd+4/zjD/naYgOvLJMP+x8AAAAmaGT//7S3/+fb7Nb60cMW/u13Bl55VT7sfwAAAJigkf1/VW//z//gIvcvvNUdK8818Mqy+bD/AQAAYIJG9v/Vvf3/wmeWuOZNq+6704sGXlkuH/Y/AAAATNDI/r+mt/8X2ODuJS++97xDfzTwyvL5sP8BAABggkb2/896+/9F5asPufSx3f920sArr86H/Q8AAAATNLL/r+3t/xdf+MTOb1nujLnfMPDKa/Jh/wMAAMAEjez/n/f2/4JnX7fOizZu13vFwCsr5MP+BwAAgAka2f+/6O3/hV74/JP/fOw13zxy4JUV82H/AwAAwASN7P/revt/4cMunHHO0Vs/3A688tp82P8AAAAwQSP7//re/n/Jmgfdve7mJ8zxjYFXVsqH/Q8AAAATNLL/b+jt/0WWXu/KBVZc6Z3fH3hl5XzY/wAAADBBI/v/l739v+gxn1js3kcfv3CegVdWyYf9DwAAABM0sv9v7O3/l+700m8sNHOun3974JVV82H/AwAAwASN7P+bevt/sVvv3+DBm29Y5nkDr6yWD/sfAAAAJmhk//+qt/9fdt3vd/3x+Tt+fJGBV16XD/sfAAAAJmhk//+6t/8X//CCh2+y2ylf+/HAK6/Ph/0PAAAAEzSy/2/u7f8l7j1jyfk+tPpvXz3wyur5sP8BAABggkb2/296+3/J7d93zQNnPrvysQOvrJEP+x8AAAAmaGT/39Lb/0tt+Pb7v3/t5jsdPvDKmvmw/wEAAGCCRvb/b3v7/+V/PbZea/5jD335wCtvyIf9DwAAABM0sv9v7e3/V5y/1snrLbfpomcPvLJWPux/AAAAmKCR/f+73v5/5ZyfXOeCx47595wDr6ydD/sfAAAAJmhk/9/W2/9LL/jjne85ds2zXjzwyjr5sP8BAABggkb2/+29/b/MyfsfMvfGz2108cAr6+bD/gcAAIAJGtn/v+/t/1et8LPFNtp8p3KVgVfWy4f9DwAAABM0sv/v6O3/ZY+Y88oLjz7tni8NvLJ+Pux/AAAAmKCR/f+H3v5f7sTX3v3wo3Nc8ImBVzbIh/0PAAAAEzSy/+/s7f/ll3psxqIrXveOlw688sZ82P8AAAAwQSP7/67e/n/161f4yiI3r7LEVwdeeVM+7H8AAACYoJH9/8fe/n/NIY/v/5eZT1y16sArb86H/Q8AAAATNLL/7+7t/xW+dMM2F+221eeXH3hlw3wM7f/nqv83/zUDAAAA/68Z2f/39Pb/isvPvGjD84/f+7MDr2yUD//9PwAAAEzQyP6/t7f/X3vJj148z5n1asXAK2/Jh/0PAAAAEzSy/+/r7f+VugOfvvtDV9162sArb82H/Q8AAAATNLL/7+/t/5Xn3eC2H86/x2fOH3hl43zY/wAAADBBI/v/gd7+X+XMg1dd/9qz9nrhwCub5MP+BwAAgAka2f8P9vb/qn/Z7MS179xn0dcMvPK2fNj/AAAAMEEj+/9Pvf2/2pZfPOi86px/f2HglU3zYf8DAADABI3s/4d6+/916353h/t3XuSswwZe2Swf9j8AAABM0Mj+/3Nv/7/+qd0umf/SOzdaauCVzfNh/wMAAMAEjez/h3v7f/U9bnvJxqeuU5418Mrb82H/AwAAwASN7P+/9Pb/Gjct/NwlBx16z8yBV7bIh/0PAAAAEzSy/x/p7f81r1rqD39aZNkLFh145R35sP8BAABggkb2/6O9/f+Gj9+1+oJXPPyOSwZe2TIf9j8AAABM0Mj+/2tv/6/1m3P/ePaSCyzRDbyyVT7sfwAAAJigkf3/t97+X/v9H6l2eOqWq7458Mo782H/AwAAwASN7P/Hevt/nQPe+rLZjt/v8+cNvLJ1Pux/AAAAmKCR/f/33v5f9/KjLvvn+hftPffAK9vkw/4HAACACRrZ/4/39v96m6+242lbLbHaiQOvbJsP+x8AAAAmaGT//6O3/9f/03OfeNth99265sAr2+XD/gcAAIAJGtn/T/T2/wbPXnVafe9Gn3nlwCvb58P+BwAAgAka2f9P9vb/G99Yrf3kqkfuddTAKzvkw/4HAACACRrZ///s7f83VTfd9/drn91t14FXdsyH/Q8AAAATNLL/n+rt/zdftEA3Y/7VP33VwCvvyof9DwAAABM0sv//1dv/G35n2aXe/qFj7/jVwCs75cP+BwAAgAka2f9P9/b/Rgv8+affOnPz1fceeGXnfNj/AAAAMEEj+/+Z3v5/y+HvfPcz59/woWcGXnl3Pux/AAAAmKCR/f9sb/+/9Q1f/+Rcu831xe0HXnlPPux/AAAAmKCR/f/v3v7feJlvfmubmadc9uaBV3bJh/0PAAAAEzSy/5/r7f9NPr/z+mfcvONifx54ZdbvCWj/AwAAwAT91/u/nNHb/2875NHv/nbFEzbfdOCV3fJh/wMAAMAEjez/orf/N339K9+yxKNbn/f3gVd2z4f9DwAAABM0sv/L3v7fbPl599r76Mfvv3fglffmw/4HAACACRrZ/1Vv/2/+pd8cfejmK3UbDLyyRz7sfwAAAJigkf1f9/b/27tdl7914zM2/vnAK3vmw/4HAACACRrZ/01v/29xySnXL3Ps7t/bbeCVvfJh/wMAAMAEjez/trf/33HmCQ9//LFrnv74wCvvy4f9DwAAABM0sv+73v7fct7t5vzMcu2Cdwy88v582P8AAAAwQSP7f2Zv/2+15dFnHbHqHbv9a+CVvfNh/wMAAMAEjez/5/X2/zv/8uY3HXDvwp/eauCVffJh/wMAAMAEjez/5/f2/9ZP7bv78oedd8cmA698IB/2PwAAAEzQyP6frbf/t1n3B0f9fqt9V//LwCv75sP+BwAAgAka2f+z9/b/tjd1y3xq/Uc+9K6BVz6YD/sfAAAAJmhk/8/R2//b7XH5tR88fvkvXjnwyofyYf8DAADABI3s/zl7+3/7jz/94EufOuSymwde+XA+7H8AAACYoJH9P1dv/+9w1RrP//WSay324YFXPpIP+x8AAAAmaGT/z93b/zuu8vWjX3XFxZtfN/DKfvmw/wEAAGCCRvb/PL39/67PvnOvOxfZ/7z3Dbzy0XzY/wAAADBBI/v/Bb39v9PxO7/lqINuvv+jA6/snw/7HwAAACZoZP/P29v/Oy/+ze/ud+r83e0DrxyQD/sfAAAAJmhk/8/X2//vPneBORe/9IiNtxx45cB82P8AAAAwQSP7f/7e/n/PbDc9fOPOb/7ePwZe+Vg+7H8AAACYoJH9/8Le/t9l0T9ff1j1wNN3D7xyUD7sfwAAAJigkf2/QG//7/rNZZf/yJ1LLbjWwCsfz4f9DwAAABM0sv9f1Nv/u/3xuaP2/eCOVzw+8MrB+bD/AQAAYIJG9v+Le/t/921W2/3gM05Z/B0DrxySD/sfAAAAJmhk/y/Y2//v3aR6080/m+sjaw+88ol82P8AAAAwQSP7f6He/t/jH1ed9fL5bjjunoFXDs2H/Q8AAAATNLL/F+7t/z13/cjzD3ze5ne+f+CVw/Jh/wMAAMAEjez/l/T2/153nPvg0b85ds3rB145PB/2PwAAAEzQyP5fpLf/33ftUdfe/oPV33vbwCufzIf9DwAAABM0sv8X7e3/9+/71mVesfuzR+038Mqn8mH/AwAAwASN7P+X9vb/3u/77Pdf+bn2qSsGXjkiH/Y/AAAATNDI/l+st//3uXmjTW/b7JoX7TjwyqfzYf8DAADABI3s/5f19v8HLttn78+tsPtbPjLwypH5sP8BAABggkb2/+K9/b/v/hcc+7FHzvjObwZeOSof9j8AAABM0Mj+X6K3/z/4YLPCUn9f6d53DrzymXzY/wAAADBBI/t/yd7+/9BmV974m+Ufb54eeOWz+bD/AQAAYIJG9v9Svf3/4Q2e+tshm2y96cMDr3wuH/Y/AAAATNDI/n95b/9/5Jk3zPuBL5xwzsYDrxydD/sfAAAAJmhk/7+it//3u/AvF3z48LWu2H3glWPyYf8DAADABI3s/1f29v9Hy2W2OPydhyz+i4FXPp8P+x8AAAAmaGT/L93b//u/cJ4P3rTa8h/5/cArx+bD/gcAAIAJGtn/y/T2/wFn//a4l933yHEHDbzyhXzY/wAAADBBI/v/Vb39f+Ca71n5o//c987HBl75Yj7sfwAAAJigkf2/bG//f+yw024+conz1nzbwCtfyof9DwAAABM0sv+X6+3/g445/h9/WG/h975x4JXj8mH/AwDw/2DvTqOvHuP/3/PZpigkQzKFjJmSeR4yy0yGTJmHJMoQMpUhhKJEGSKFECpkCBmSkHnIFJkKJUQKZ51zrs7/Wuva53+t/1q/G9eNx+PWe+3ar9Xd53d/2l8ACpTp/42j/r90/WNX2PC2z6/7ts5K/3DofwAAAChQpv83ifr/slY/dGtw6dpzjq2zcls49D8AAAAUKNP/raL+v/y6jW77+97vm/5TZ2VAOPQ/AAAAFCjT/5tG/X/FXcs+/ci4vfadVmfl9nDofwAAAChQpv9bR/1/5VrvHnX0atc8vGedlTvCof8BAACgQJn+3yzq/x5PHjd3kWq5qS/XWRkYDv0PAAAABcr0/+ZR//dsdP+Kf3zx/sIn11kZFA79DwAAAAXK9P8WUf9fteLAre55vtuBneus3BkO/Q8AAAAFyvT/llH/X33vkZ8e1OGZEe/VWbkrHPofAAAACpTp/62i/r/m+2u6H9Z34qgd66zcHQ79DwAAAAXK9P/WUf9fe/R+A4fs3+iQQXVW7gmH/gcAAIACZfp/m6j/e+3V5blfN753gV51VgaHQ/8DAABAgTL9v23U/9f99vix1W8dpqxbZ+XecOh/AAAAKFCm/7eL+v/64xf474hf/ht2X52V+a/pfwAAAChQpv+3j/r/hsmvrvLgpjvstUidlSHh0P8AAABQoEz/7xD1f++3523370E3rdK4zsr94dD/AAAAUKBM/+8Y9f+NXbf5olHvA+c9UWdlaDj0PwAAABQo0/87Rf1/0+bPrvnXaQ/2blBnZVg49D8AAAAUKNP/O0f9f/ON3V5cYtQZnR6qs/JAOPQ/AAAAFCjT/7tE/d/njp2+OvaDV7Z9ts7Kg+HQ/wAAAFCgTP/vGvV/39WvqoY3WOjTVeuszH8mQP8DAABAgTL93ybq/1ue2Gzwn8sO6NunzsrwcOh/AAAAKFCm/3eL+v/WBrN2Wmj84edsUmfl4XDofwAAAChQpv93j/q/3yrjjz9g2Oy116mz8kg49D8AAAAUKNP/e0T933/oklfe22XL13rWWXk0HPofAAAACpTp/z2j/r/tm8/WGdrhp1GD66yMCIf+BwAAgAJl+n+vqP8HHNHslUOe3/CQeiuPhUP/AwAAQIEy/b931P+3t20+dYEvrlxghTorj4dD/wMAAECBMv2/T9T/d/z53SK/VbtMGVVn5Ylw6H8AAAAoUKb/9436f+BJh9w/bLUvh21dZ2VkOPQ/AAAAFCjT/22j/h/0ZZ82R41bda876qzMfyZA/wMAAECBMv2/X9T/d74x7KSl7h2xyvV1VkaHQ/8DAABAgTL9v3/U/3d1PuvqeZd2nrdRnZUnw6H/AQAAoECZ/j8g6v+7r5xY1W7r1fuWOitPhUP/AwAAQIEy/X9g1P/3bL34VzPb7NNpizorT4dD/wMAAECBMv1/UNT/gzfc5MX7Wny77ep1VsaEQ/8DAABAgTL9f3DU//f2n71mu79afHplnZVnwqH/AQAAoECZ/j8k6v/7Fm5zZcNvn+67VJ2VZ8Oh/wEAAKBAmf4/NOr/IWOvOP6/rS845+E6K8+FQ/8DAABAgTL9f1jU//c/9NRODx3x4dpj6qw8Hw79DwAAAAXK9H+7qP+HNu4++PCeK7zWtM7K2HDofwAAAChQpv8Pj/p/2KHDF2n//PtH9a2z8kI49D8AAAAUKNP/R0T9/8CM06c+2mG5Ma3qrLwYDv0PAAAABcr0/5FR/z8494BX5lbP/LJ2nZWXwqH/AQAAoECZ/j8q6v+Hdu63zmJfdFuqR52VceHQ/wAAAFCgTP+3j/p/+Hstrj543Pe7L1Zn5eVw6H8AAAAoUKb/j476/+HTvj7p7tXWHvpgnZVXwqH/AQAAoECZ/j8m6v9HLvm4ze+XXvPbc3VWXg2H/gcAAIACZfr/2Kj/H31t1fsXvXevZVars/JaOPQ/AAAAFCjT/8dF/T/i0y92WKTN48cNqbMyPhz6HwAAAAqU6f/jo/5/7Limn/1x27mXL1pn5fVw6H8AAAAoUKb/O0T9/3iXNf6556/PP1i6zsqEcOh/AAAAKFCm/0+I+v+Jt6audlCLlTd7vM7KG+HQ/wAAAFCgTP+fGPX/yPaHjW2w9eWX7FBnZWI49D8AAAAUKNP/J0X9P+q7m47++9udBg6ss/JmOPQ/AAAAFCjT/ydH/T961oMXP9Lzl/HX1Vl5Kxz6HwAAAAqU6f9Tov5/cs8z7zz6iI3XW6/Oytvh0P8AAABQoEz/nxr1/1MNn9/miP1/P2rJOiuTwqH/AQAAoECZ/j8t6v+nR1/w8YN9Nx8zvM7KO+HQ/wAAAFCgTP+fHvX/mMG7zPn3tzt+eabOyrvh0P8AAABQoEz/nxH1/zNNe6zUaOMjl1qxzsp74dD/AAAAUKBM/58Z9f+zvbZ45rBNX9v91jor74dD/wMAAECBMv3fMer/5zaZecSQXxYZumWdlQ/Cof8BAACgQJn+Pyvq/+dbTLjg197DfmteZ+XDcOh/AAAAKFCm/ztF/T/2zoa3VwedtswVdVY+Cof+BwAAgAJl+v/sqP9f2OzoPUaO6nPcVnVWPg6H/gcAAIACZfq/c9T/L/a+Y8gepx18+e11Vj4Jh/4HAACAAmX6/5yo/1+6/Z4eTRr888ENdVY+DUem/+f99z/xbwYAAAD+z2T6/9yo/8c1P+Xkrz7YbrON66xMDofP/wEAAKBAmf7vEvX/y49/8Ooz4++55N46K5+FQ/8DAABAgTL93zXq/1cWa9Jiz2WPG7hgnZXPw6H/AQAAoEBp/78e/Wl1XtT/r6683sIrd3lr/PJ1Vr4Ih/4HAACAAmU+/z8/6v/X7p/x/YxhS603ss7Kl+HQ/wAAAFCgTP9fEPX/+K+333X6ERdscHidla/Cof8BAACgQJn+vzDq/9cPn3tP055Pv/l3nZUp4dD/AAAAUKBM/3eL+n/Cvi9etu+3Kwz4uc7K1+HQ/wAAAFCgTP9fFPX/G7MX7TB26w8v2L/Oyjfh0P8AAABQoEz/Xxz1/8QTR700tcU+rcbVWZkaDv0PAAAABcr0/yVR/7/5xbnNV/ir16Tj66x8Gw79DwAAAAXK9H/3qP/fmrDXgrve1qLHeXVWvguH/gcAAIACZfr/0qj/3z77xm9GtPn2pPfrrHwfDv0PAAAABcr0/2VR/0/q1fODh+9ddYWz6qz8EA79DwAAAAXK9P/lUf+/s8muWx5z6ZezJ9ZZ+TEc+h8AAAAKlOn/K6L+f7fFhcsvvlrnwZPrrEwLh/4HAACAAmX6/8qo/9+7c+zvc8aN2PXCOivTw6H/AQAAoECZ/u8R9f/7DRsdMviLDRf/o87KT+HQ/wAAAFCgTP/3jPr/g9FvjD6w+ml6uzorP4dD/wMAAECBMv1/VdT/Hw7+tf/CHXYZu1OdlV/Cof8BAACgQJn+vzrq/4+abtl19vNXHvN1nZUZ4dD/AAAAUKBM/18T9f/H7b99Z9awwzd4pc7KzHDofwAAAChQpv+vjfr/k+/WbL1glwFvnlJn5ddw6H8AAAAoUKb/e0X9/+msFZc5dNktB5xdZ2VWOPQ/AAAAFCjT/9dF/T95zy9n3j9+9gXv1ln5LRz6HwAAAAqU6f/ro/7/7NOOB/zzwRmtjqmz8ns49D8AAAAUKNP/N0T9//lxDz2+ZIMHJ82rs/JHOPQ/AAAAFCjT/72j/v+iy819jzxtoR7T66zMDof+BwAAgAJl+v/GqP+/fKtd5wdGvXLSXnVW/gyH/gcAAIACZfr/pqj/v9ruj98PO2iHFX6rs/JXOPQ/AAAAFCjT/zdH/T/lqtbLD+n93+wD66zMCYf+BwAAgAJl+r9P1P9f92mw5a+/HDh49zorf4dD/wMAAECBMv3fN+r/b9Z9+4Nq05t2nVpnZW449D8AAAAUKNP/t0T9P3XMJV2P2LjR4qfWWZn/OwH1PwAAABQo0/+3Rv3/7QLP9H/wt4nTJ9RZ+Scc+h8AAAAKlOn/flH/f7fs5aP/7dth7Od1Vv4Nh/4HAACAAmX6v3/U/98/sschjfa/95hL66z8Fw79DwAAAAXK9P9tUf//MO3WmQ2aN75upXSlmn/ofwAAAChQpv8HRP3/4wEHL/P3vEmnP52uVOHv6H8AAAAoUab/b4/6f1qb01o/MrD7Do+kK9X8BwD0PwAAABQo0/93RP0//d9H3zl6p7FfNkxXqlo49D8AAAAUKNP/A6P+/+nMVTovcvQa/S5LV6qFwqH/AQAAoECZ/h8U9f/PH07u+8fl35y/RrpSLRwO/Q8AAAAFyvT/nVH///LSlMfvmdJ2zc3TlWqRcOh/AAAAKFCm/++K+n/GBesccND217/UP12pFg2H/gcAAIACZfr/7qj/Z570/fiDPz1/xIbpSjX//fofAAAACpTp/3ui/v/1y9XXv3uR0QfemK5UDcKh/wEAAKBAmf4fHPX/rDdWWuL3k5sufFu6Ui0eDv0PAAAABcr0/71R///W+fMfFx3zydRt0pVqiXDofwAAAChQpv/vi/r/92867dV+aJuHR6crVcNw6H8AAAAoUKb/h0T9/8cRDzz06EU99102XakahUP/AwAAQIEy/X9/1P+z2/btNXellk1r6Uq1ZDj0PwAAABQo0/9Do/7/889DT13stWlz7klXqqXCof8BAACgQJn+Hxb1/19PXD2x4TutrrsqXamWDof+BwAAgAJl+v+BqP/nNNh5o/8azTy9RbpSNQ6H/gcAAIACZfr/waj//17loqUe6njMDq3TlWp+9+t/AAAAKFCm/x+K+n/u0Od+Pvyxu768OV2pmoRD/wMAAECBMv0/POr/eZsv1bY2vOq3SrpSzf+dgPofAAAACpTp/4ej/v/nxtcfnXn2uPPHpivVcuHQ/wAAAFCgTP8/EvX/v3f81vu+pTuuOSxdqZYPh/4HAACAAmX6/9Go//9bffMz200c/tLi6Uq1Qjj0PwAAABQo0/8j/lf/Vws8u/y5n7dsN2JEulI1DYf+BwAAgAJl+v+xqP8XXGTSzRv92e/AOo1frRgO/Q8AAAAFyvT/41H/V8tMG9Gt/1YLL5yuVM3Cof8BAACgQJn+fyLq/9qwDQ66dp85U4emK9VK4dD/AAAAUKBM/4+M+n+hbe6c9e5hJz7cMl2pVg6H/gcAAIACZfp/VNT/C192+NKr9xqy77XpSrVKOPQ/AAAAFCjT/6Oj/l/klg6tuk5boumd6Uq1ajj0PwAAABQo0/9PRv2/6Eb3vXfVFhPmbJeuVKuFQ/8DAABAgTL9/1TU/4udft75V7z23LxJ6Uo1/z36HwAAAAqU6f+no/5vMGnErZ1XuniVc9KVavVw6H8AAAAoUKb/x0T9v/jLvUauddG7e52UrlRrhEP/AwAAQIEy/f9M1P9LdN/3sA+HNhn2WrpSrRkO/Q8AAAAFyvT/s1H/N/zp39k3jOk9ZZ90pWoRDv0PAAAABcr0/3NR/zc6bKtlu5+8/wI/pivVWuHQ/wAAAFCgTP8/H/X/krtUm6+/yJRD/k1XqrXDof8BAACgQJn+Hxv1/1J/vfzRJ582H9U+XanWCYf+BwAAgAJl+v+FqP+XfmqX9TfYfvJr36Ur1brh0P8AAABQoEz/vxj1f+Oqx/gvpzRbu026Uq0XDv0PAAAABcr0/0tR/y+z/PM/Xnf5yHMOTleq9cOh/wEAAKBAmf4fF/V/k+EXLHHB0V37/pquVC3Dof8BAACgQJn+fznq/2V3mPDQmjv98Okl6Uq1QTj0PwAAABQo0/+vRP2/XI+Ge00auN62X6Yr1Ybh0P8AAABQoEz/vxr1//I3bXFqj3lXdxqfrlQbhUP/AwAAQIEy/f9a1P8rrD+z1/nNd+99erpSbRwO/Q8AAAAFyvT/+Kj/m561xkbnbjFoXtt0pdokHPofAAAACpTp/9ej/l/x/akTL5vWfpUZ6UrVKhz6HwAAAAqU6f8JUf83e+GLn9/vNWuvv9KVatNw6H8AAAAoUKb/34j6f6VuTZda57DWw45MV6rW4dD/AAAAUKBM/0+M+n/lHx589OJ9HpnyYbpSbRYO/Q8AAAAFyvT/m1H/r3LQmW1v7N9pgS7pSrV5OPQ/AAAAFGjB/7f8///6/62o/1fd/bAzJ//54iEnpCvVFuHQ/wAAAFCgzOf/b0f9v9q8m3qv23KBUS+mK9WW4dD/AAAAUKBM/0+K+r/5kpsu8dHEua9dlK5UW4VD/wMAAECBMv3/TtT/q4/8/ccWS2+z9ifpSrV1OPQ/AAAAFCjT/+9G/b/G3W+NP/vsW855K12ptgmH/gcAAIACZfr/vaj/12y22PpXDj+075npSrVtOPQ/AAAAFCjT/+9H/d/imjG9Pn5s/KdfpSvVduHQ/wAAAFCgTP9/EPX/WptefGrLjg223SVdqbYPh/4HAACAAmX6/8Oo/9dee/e9Lm00tNOh6Uq1Qzj0PwAAABQo0/8fRf2/zsDLHrr+nZN7/5muVDuGQ/8DAABAgTL9/3HU/+t+fNBS10wbsszF6Uq1Uzj0PwAAABQo0/+fRP2/Xodbfr5oixN/+yJdqXYOh/4HAACAAmX6/9Oo/9c/75GJGx82Yejr6Uo1/zsB9T8AAAAUKNP/k6P+bznx1I0+67XE7mekK9Wu4ajX/wv+D/+TAQAAgP9Dmf7/LOr/DY75tPfV/fst9X26UrUJh8//AQAAoECZ/v886v8Np658Zpd92v2yW7pSzX9N/wMAAECBMv3/RdT/G81cu23zlnPGHJSuVLuHQ/8DAABAgTL9/2XU/xvv/dWj7/251VEz05Vqj3DofwAAAChQpv+/ivp/k3bNt3x36XHr7Z2uVHuGQ/8DAABAgTL9PyXq/1Y/f/fB6hOr8T+kK9Ve4dD/AAAAUKBM/38d9f+mcz77vevw4QP/S1eq+c8E6H8AAAAoUKb/v4n6v/WuzZa/6uyOlxydrlT7hEP/AwAAQIEy/T816v/N3hk2+vOOMzd7J12p9g2H/gcAAIACZfr/26j/Nz/jrEM2eqzVB+emK1XbcOh/AAAAKFCm/7+L+n+LSw/p2u2duy4/MV2p9guH/gcAAIACZfr/+6j/t3ylT/9rGx1z3KvpSrV/OPQ/AAAAFCjT/z9E/b/V5Tu1vmGlnstMSVeqA8Kh/wEAAKBAmf7/Mer/rbe96p3ur7X5bdd0pTowHPofAAAACpTp/2lR/2+z8bMz1x86begh6Up1UDj0PwAAABQo0//To/7f9tZuy3xyUcvdZ6cr1cHh0P8AAABQoEz//xT1/3aLjn/8ipNHL9UtXanmPxOg/wEAAKBAmf7/Oer/7Z9b8oDOY87/5eN0pTo0HPofAAAACpTp/1+i/t/hgc06r/XpJ2PeTleqw8Kh/wEAAKBAmf6fEfX/jk1m9f1wkaZHdUxXqnbh0P8AAABQoEz/z4z6f6en793vuCnfrPdRulIdHg79DwAAAAXK9P+vUf/vXDtpeN/t1xjfNV2pjgiH/gcAAIACZfp/VtT/u6xw7A2vHX39wA7pSnVkOPQ/AAAAFCjT/79F/b/rwwM6bXZ520teSFeqo8Kh/wEAAKBAmf7/Per/Nju2fLvTwEmb7ZuuVO3Dof8BAACgQJn+/yPq/916/rzhwJ0af/BLulIdHQ79DwAAAAXK9P/sqP93v/mjhuObj718TrpSHRMO/Q8AAAAFyvT/n1H/79Gy8S/bzut+3FHpSnVsOPQ/AAAAFCjT/39F/b9np3F779iowUlPpivVceHQ/wAAAFCgTP/Pifp/rw8WHjbxnfE9lktXquPDof8BAACgQJn+/zvq/71f3PHa2x47eVKVrlQdwqH/AQAAoECZ/p8b9f8+F80544yOQ1vdna5UJ4RD/wMAAECBMv0/L+r/fX/c541Nzt7mgg3SlerEcOh/AAAAKFCm//+J+r/twTesN2743AG905XqpHDofwAAAChQpv//jfp/vz2eXKz/xEPfHJCuVCeHQ/8DAABAgTL9/1/U//v/03naiUvfssG26Up1Sjj0PwAAABTof9//tQWi/j/gh/VOv+3PTsdcnq5Up4ZD/wMAAECBMv2/YNT/Bx4045ozWj4yds10pTotHPofAAAACpTp/yrq/4N2/+CBHfdZYPpm6Up1ejj0PwAAABQo0/+1qP8Pntdkn4n9X1y8X7pSnREO/Q8AAAAFyvT/QlH/H3LWPdP792q/a7N0pTozHPofAAAACpTp/4Wj/j/0/VManHjYoMFPpStVx3DofwAAAChQpv8Xifr/sBeOXneTLVrPfjRdqc4Kh/4HAACAAmX6f9Go/9t1u2PCuGmzVmiUrlSdwqH/AQAAoECZ/l8s6v/Dd9jrrNfmrXfS+ulKdXY49D8AAAAUKNP/DaL+P6LHjddv1vyHHtekK1XncOh/AAAAKFCm/xeP+v/Im0Y9fNxOu0+6K12pzgmH/gcAAIACZfp/iaj/j1r/3P37Dry61fbpSnVuOPQ/AAAAFCjT/w2j/m//1Iszxl/e7ILH0pWqSzj0PwAAABQo0/+Nov4/ulq00bZHTx7QJF2puoZD/wMAAECBMv2/ZNT/xyy//Qadtu/65kLpSnVeOPQ/AAAAFCjT/0tF/X/s8LlvDZwycoP705Xq/HDofwAAAChQpv+Xjvr/uGOO2OeERfY/ZuV0pbogHPofAAAACpTp/8ZR/x8/9a4Hbvq099jn05XqwnDofwAAAChQpv+Xifq/w8wh17w8pvn0B9KVqls49D8AAAAUKNP/TaL+P2HvE07f8uQpiy+RrlQXhUP/AwAAQIEy/b9s1P8nfvzOhDMvunjXq9OV6uJw6H8AAAAoUKb/l4v6/6QOK6x719DnBq+VrlSXhEP/AwAAQIEy/b981P8nn7dhgzdeazJ703Sl6h4O/Q8AAAAFyvT/ClH/nzJx+vStVnp3hZvSlerScOh/AAAAKFCm/5tG/X/qNVvvv92IW95uka5Ul4VD/wMAAECBMv2/YtT/p23638Nvn3noRlelK9Xl4dD/AAAAUKBM/zeL+v/0tV+5/o6Gc7vdnK5UV4RD/wMAAECBMv2/UtT/ZwysnXXqpG3uaJ2uVFeGQ/8DAABAgTL9v3LU/2cu+dhbrd8c+u7YdKXqEQ79DwAAAAXK9P8qUf93HHn+Bi80Prn1KulK1TMc+h8AAAAKlOn/VaP+P+vuto1u6Tz+lMXTlWr+dwLqfwAAAChQpv9Xi/q/U7PrZpzycIOrhqUr1dXh0P8AAABQoEz/N4/6/+xF9zn/5L1n/V6n8atrwqH/AQAAoECZ/l896v/Oz91w6639Wi83Il2prg2H/gcAAIACZfp/jaj/z3ngyZEvzh6089B0peoVDv0PAAAABcr0/5pR/5/bpPNhm67f/u6F05XqunDofwAAAChQpv9bRP3f5fJxs0/b8sUfr01XquvDof8BAACgQJn+Xyvq/67bLrzs7dMXWKxlulLdEA79DwAAAAXK9P/aUf+ft/GOm7913SPtt0tXqt7h0P8AAABQoEz/rxP1//m3zvlo+3adnrszXaluDIf+BwAAgAJl+n/dqP8veKfluVvvPPLtp9OV6qZw6H8AAAAoUKb/14v6/8Izfr55wqCuG62UrlQ3h0P/AwAAQIEy/b9+1P/dLv1oxJ3/TO7WMF2p+oRD/wMAAECBMv3fMur/i15pfFDH1Zvd8Ui6UvUNh/4HAACAAmX6f4Oo/y9ud++sLba7+t010pXqlnDofwAAAChQpv83jPr/kp9PWvqVr3ZvfVm6Ut0aDv0PAAAABcr0/0ZR/3efc2yrmy/74ZT+6UrVLxz6HwAAAAqU6f+No/6/dNcB73Vov95Vm6cr1fyfCeh/AAAAKFCm/zeJ+v+ywzd6fvdn3v39xnSlui0c+h8AAAAKlOn/VlH/X/71D+1HndJkuQ3TlWpAOPQ/AAAAFCjT/5tG/X/F7HcvmbLocztvk65Ut4dD/wMAAECBMv3fOur/K/dd9q5lJl98923pSnVHOPQ/AAAAFCjT/5tF/d/ji/t33OvVKT8um65UA8Oh/wEAAKBAmf7fPOr/nice9/mYZs0XG52uVIPCof8BAACgQJn+3yLq/6vOPnLeL916t78nXanuDIf+BwAAgAJl+n/LqP+vnjBw1VXu3/+5WrpS3RUO/Q8AAAAFyvT/VlH/X9N7vzErttvqqRnpSnV3OPQ/AAAAFCjT/1tH/X/tZtccPu26OUe0TVeq+f8nQP8DAABAgTL9v03U/72aP37h89PbNToyXakGh0P/AwAAQIEy/b9t1P/X3d7ljrZb9vvpr3Slujcc+h8AAAAKlOn/7aL+v36xV7ddfv0lhnRJV6r7FvjrvwX0PwAAAJQp0//bR/1/w+MLfPLt7AltPkxXqiHh0P8AAABQoEz/7xD1f+/7t/nrsX4nLv1iulLdHw79DwAAAAXK9P+OUf/fuPK8ZrvsPeTXE9KVamg49D8AAAAUKNP/O0X9f1P7bt8/+fAxV36SrlTDwqH/AQAAoECZ/t856v+bv3t24Tad7+pwUbpSPRAO/Q8AAAAFyvT/LlH/95l1VYulG7fa4sx0pXowHPofAAAACpTp/12j/u+7506vfvPmzI/eSleqh8Kh/wEAAKBAmf5vE/X/LZ/OOvmpSR3v3CVdqYaHQ/8DAABAgTL9v1vU/7cet1mPfRoOv/SrdKV6OBz6HwAAAAqU6f/do/7v12XJIaudWbX8M12pHgmH/gcAAIACZfp/j6j/+781fo+fRoybcGi6Uj0aDv0PAAAABcr0/55R/9/Wq9k3P9zf9Klz0pVqRDj0PwAAABQo0/97Rf0/YJPPFlyp2ydHTEpXqsfCof8BAACgQJn+3zvq/9tbfNd8/2bnN3otXakeD4f+BwAAgAJl+n+fqP/vuLP5S8++Ovqnk9KV6olw6H8AAAAoUKb/9436f2DDPh2+n9xyyI/pSjUyHPofAAAACpTp/7ZR/w8afchlyy46rc0+6Uo1Khz6HwAAAAqU6f/9ov6/c/BZ9+x0Spul26cr1ehw6H8AAAAoUKb/94/6/66mw3Z94pmev/6brlRPhkP/AwAAQIEy/X9A1P93T1v81X3bd7+yTbpSPRUO/Q8AAAAFyvT/gVH/33PAxBZjLxvb4bt0pXo6HPofAAAACpTp/4Oi/h/cZvbC079qvMWv6Uo1Jhz6HwAAAAqU6f+Do/6/999Nvm+63aSPDk5XqmfCof8BAACgQJn+PyTq//vOvGKPXVdve+eX6Ur1bDj0PwAAABQo0/+HRv0/5MM2Q0b8c/2ll6Qr1XPh0P8AAABQoEz/Hxb1//0vde8xddAaLU9PV6rnw6H/AQAAoECZ/m8X9f/QC546eYWdv5kwPl2pxoZD/wMAAECBMv1/eNT/w7Y7/aUm3Zoftmu6Ur0QDv0PAAAABcr0/xFR/z9w1fDmX90/5ckp6Ur1Yjj0PwAAABQo0/9HRv3/YJ9+C458df9vZqcr1Uvh0P8AAABQoEz/HxX1/0PrHvDNHs16V4ekK9W4cOh/AAAAKFCm/9tH/T98zNe7rrxok30+Tleql8Oh/wEAAKBAmf4/Our/hxdocc+Mye8+2C1dqV4Jh/4HAACAAmX6/5io/x9ZdtXLnnnm4n87pivVq+HQ/wAAAFCgTP8fG/X/o4983GHPU55b7e10pXotHPofAAAACpTp/+Oi/h/xRNO/97ps945d05VqfDj0PwAAABQo0//HR/3/WIMvmo5pf/X1H6Ur1evh0P8AAABQoEz/d4j6//FVpm79y3brffxCulJNCIf+BwAAgAJl+v+EqP+fGLrG5FW++mHrDulK9UY49D8AAAAUKNP/J0b9P3Lzmy7a/Z+uZ/+SrlQTw6H/AQAAoECZ/j8p6v9RNx42YNTqI2/eN12p3gyH/gcAAIACZfr/5Kj/R99x5lNTdm72ylHpSvVWOPQ/AAAAFCjT/6dE/f/k6g8eucygyS3mpCvV2+HQ/wAAAFCgTP+fGvX/Uydd8O/y1y1w2BfpSjUpHPofAAAACpTp/9Oi/n/6y+dX/rbdi09enK5U74RD/wMAAECBMv1/etT/Y97osf1jW3b65ox0pXo3HPofAAAACpTp/zOi/n+m8y5f7jL9ker1dKV6Lxz6HwAAAAqU6f8zo/5/9puZl644u/U+u6Ur1fvh0P8AAABQoEz/d4z6/7kjthg0bf1ZD36frlQfhEP/AwAAQIEy/X9W1P/Pt2347PN7t/93ZrpSfRgO/Q8AAAAFyvR/p6j/x/454Zi2/QatdlC6Un0UDv0PAAAABcr0/9lR/79w9B1Xzu18cscf0pXq43DofwAAAChQpv87R/3/4vdHH7/Yw0Ov3ztdqT4Jh/4HAACAAmX6/5yo/1/67ZSd2r/Z4OOj05Xq03DofwAAAChQpv/Pjfp/3F73DH608fit/0tXqsnh0P8AAABQoEz/d4n6/+XJTarfGx569rnpSvVZOPQ/AAAAFCjT/12j/n/l+A++WnTSLTe/k65Un4dD/wMAAECBMv1/XtT/r3ad8eLBI7Z55dV0pfoiHPofAAAACpTp//Oj/n/t7fXWvPvMuS1OTFeqL8Oh/wEAAKBAmf6/IOr/8dfNvfq+Qdevfk26Un0VDv0PAAAABcr0/4VR/7/eavuT2u3c9oX105VqSjj0PwAAABQo0//dov6fsNaibWqrf3PL9ulK9XU49D8AAAAUKNP/F0X9/8ZdL94/8581ut6VrlTfhEP/AwAAQIEy/X9x1P8TG527yENfjd2uSbpSTQ2H/gcAAIACZfr/kqj/33xy1NTDt+v++WPpSvVtOPQ/AAAAFCjT/92j/n/r3htfadh+0rX3pyvVd+HQ/wAAAFCgTP9fGvX/2yvutc5/lzU+daF0pfo+HPofAAAACpTp/8ui/p/0za6Nvz5lWrPn05Xqh3DofwAAAChQpv8vj/r/nSN6/tb4mZZzV05Xqh/Dof8BAACgQJn+vyLq/3fbjn13t8k9H10iXammhUP/AwAAQIEy/X9l1P/v/XnhJqMXbbPfA+lKNT0c+h8AAAAKlOn/HlH/v3/SGzf93OyTRddKV6qfwqH/AQAAoECZ/u8Z9f8HXzY6Z9VXm353dbpS/RwO/Q8AAAAFyvT/VVH/f/jGlgfvff/ox29KV6pfwqH/AQAAoECZ/r866v+POv/62NPdzj9403SlmhEO/Q8AAAAFyvT/NVH/f7z5mss9d+bw1ZdLV6qZ4dD/AAAAUKBM/18b9f8nN377534jOr7wZLpS/RoO/Q8AAAAFyvR/r6j/P73jyw+bTRp3y93pSjUrHPofAAAACpTp/+ui/p+8+oqb/diw6lqlK9Vv4dD/AAAAUKBM/18f9f9nTzx0y+ON79qud7pS/R4O/Q8AAAAFyvT/DVH/f96g43k7v3nM5xukK9Uf4dD/AAAAUKBM//eO+v+LVdq1W+7hmddum65Us8Oh/wEAAKBAmf6/Mer/L4fePOq7zq1OHZCuVH+GQ/8DAABAgTL9f1PU/18d2nqTFftNaLZmulL9FQ79DwAAAAXK9P/NUf9PmfHHu9P2XmLu5elKNScc+h8AAAAKlOn/PlH/fz337d+eX3/Io/3SlervcOh/AAAAKFCm//tG/f/Nzg0at5194n6bpSvV3HDofwAAAChQpv9vifp/6nvPPLb89DmLPpWuVPPCof8BAACgQJn+vzXq/29Pu+Tgb7fc6rtm6Ur1Tzj0PwAAABQo0//9ov7/7pI9znmsXb/HG6Ur1b/h0P8AAABQoEz/94/6//vXLr9pl+vaHfxoulL9Fw79DwAAAAXK9P9tUf//cOXBm+1+wnM3PpSu1OYf+h8AAAAKlOn/AVH//7j1rR+OGnvxWQ3SlVr4O/ofAAAASpTp/9uj/p+24aN/Tvny3W1WTVdqVTj0PwAAABQo0/93RP0/vf9pyy1TazL52XSlNv8/AOh/AAAAKFCm/wdG/f/TwpNH7bVq7z6bpCu1hcKh/wEAAKBAmf4fFPX/z2NXaTfmpf3P7ZOu1BYOh/4HAACAAmX6/86o/395aJ3zfhk8ZZ2e6UptkXDofwAAAChQpv/vivp/RuMpt6zSvfmr66QrtUXDof8BAACgQJn+vzvq/5kNV2+48oDJIwelK7X579f/AAAAUKBM/98T9f+vo7//ZcZuzQ7dMV2pNQiH/gcAAIACZfp/cNT/swZ//vYza41ccN10pbZ4OPQ/AAAAFCjT//dG/f9b05U23HNO1696pSu1JcKh/wEAAKBAmf6/L+r/33s9cEOTqT88sEi6UmsYDv0PAAAABcr0/5Co///YpFOnr7Zab8/70pVao3DofwAAAChQpv/vj/p/dotD9xt5+NUrP5Gu1JYMh/4HAACAAmX6f2jU/3/e2Xf4Hj12/6dxulJbKhz6HwAAAAqU6f9hUf//9enOi+3aZ9CNW6QrtaXDof8BAACgQJn+fyDq/znHXT1txH7tz7olXanNfyZA/wMAAECBMv3/YNT/f3d57o2pG83a5sp0pTa/+/U/AAAAFCjT/w9F/T/3rYvWW2FW68mrpyu1JuHQ/wAAAFCgTP8Pj/p/XvvXr913xiN9Hk5XasuGQ/8DAABAgTL9/3DU//98t9QZY1t3OnepdKW2XDj0PwAAABQo0/+PRP3/76zN955+8IvrNE1XasuHQ/8DAABAgTL9/2jU///t+duwpjcu8OqYdKW2Qjj0PwAAABQo0/8j/lf/1xa4renyA06dO7LOSm3+MwH6HwAAAAqU6f/Hov5fcI0vfj995DaHDk5XaiuGQ/8DAABAgTL9/3jU/9UWUz/Y4f1bFhyVrtSahUP/AwAAQIEy/f9E1P+169fY8s3FDv1qhXSltlI49D8AAAAUKNP/I6P+X2jVm/r3W278A3ekK7WVw6H/AQAAoECZ/h8V9f/C9x3W9aTXG+y5dbpSWyUc+h8AAAAKlOn/0VH/LzLizENaPTB05Y3Sldqq4dD/AAAAUKBM/z8Z9f+iiz84+qWuJ/9zfbpSWy0c+h8AAAAKlOn/p6L+X2y/C5Z5tUfjv45LV/6/9+h/AAAAKFCm/5+O+r/B78/P3PzwSSu+lK7UVg+H/gcAAIACZfp/TNT/i3/V453jt+re9oN0pbZGOPQ/AAAAFCjT/89E/b/Ekbu07jN17PDz05XamuHQ/wAAAFCgTP8/G/V/w/Ez+74+Z41v56YrtRbh0P8AAABQoEz/Pxf1f6Nztui8zVrfLHREulJbKxz6HwAAAAqU6f/no/5f8uSGB5y1W9sD9ktXamuHQ/8DAABAgTL9Pzbq/6U+m/D4oAHXP/ZTulJbJxz6HwAAAAqU6f8Xov5feuC++5/a/fxxh6UrtXXDof8BAACgQJn+fzHq/8Zr93r4jsGj1/g9XamtFw79DwAAAAXK9P9LUf8vs+mI699+qel536QrtfXDof8BAACgQJn+Hxf1f5Nrzjtru1U/6b9zulJrGQ79DwAAAAXK9P/LUf8v2+zlt06ptfnizXSltkE49D8AAAAUKNP/r0T9v9zd1Qa3fNlzx07pSm3DcOh/AAAAKFCm/1+N+n/5kVs1emFsyzMuSFdqG4VD/wMAAECBMv3/WtT/Kyz574zWJ0zr9Wm6Uts4HPofAAAACpTp//FR/zfde4N9tuza6q9/0pXaJuHQ/wAAAFCgTP+/HvX/ijOnPfDyAzNXPDZdqbUKh/4HAACAAmX6f0LU/82mTrrmptePabtnulLbNBz6HwAAAAqU6f83ov5f6ZjlTz9hubuGT0tXaq3Dof8BAACgQJn+nxj1/8oT75uw1WLVtyenK7XNwqH/AQAAoECZ/n8z6v9Vzuuw7hvvj1vo5XSltnk49D8AAAAUKNP/b0X9v2qHwxvcNbLjAe+lK7UtwqH/AQAAoECZ/n876v/VPr5z+pmnDn+sc7pS2zIc+h8AAAAKlOn/SVH/N19/u7P63thu3BvpSm2rcOh/AAAAKFCm/9+J+n/1m/6+/riD+61xWrpS2zoc+h8AAAAKlOn/d6P+X6PHCw9v1nqr87qnK7VtwqH/AQAAoECZ/n8v6v81d1hk/9dmzOn/WbpS2zYc+h8AAAAKlOn/96P+bzF85IyBs0784oB0pbZdOPQ/AAAAFCjT/x9E/b/W8uc06rTRkB1npSu17cOh/wEAAKBAmf7/MOr/tas9N9h2vyXO+DZdqe0QDv0PAAAABcr0/0dR/6/zVO+3xveZ0GuPdKW2Yzj0PwAAABQo0/8fR/2/7rz2p098oMHyE9OV2k7h0P8AAABQoEz/fxL1/3q7337Njl3H/3lWulLbORz6HwAAAAqU6f9Po/5f/6C7HzhjuZPvvTBdqe0SDv0PAAAABcr0/+So/1v+cPI+t70+dJfJ6Upt13DofwAAAChQpv8/i/p/g27vTx/3/jZLtEtXam3Cof8BAACgQJn+/zzq/w1fWKbBJovNnfZHulLbLRz6HwAAAAqU6f8vov7f6P111z3x1EOf/zpdqe0eDv0PAAAABcr0/5dR/2981i8T+o+85did0pXaHuHQ/wAAAFCgTP9/FfX/JududFC/gztt+He6UtszHPofAAAACpTp/ylR/7d6/YcRJ934yMTD05XaXuHQ/wAAAFCgTP9/HfX/pp+/e3OrGQvctn+6Uts7HPofAAAACpTp/2+i/m99yrLnvtT6xQt/Tldq+4RD/wMAAECBMv0/Ner/zf64/70BG7Xf5Ph0pbZvOPQ/AAAAFCjT/99G/b/5/se1On3WoHfGpSu1tuHQ/wAAAFCgTP9/F/X/FkcdufQOfVr3fD9dqe0XDv0PAAAABcr0//dR/285ZeCsN/ebdeJ56Upt/ncC6n8AAAAoUKb/f4j6f6sh+x32+uHrLX9gulI7IBz6HwAAAAqU6f8fo/7ferVrRm7T44c/f0tXavN/JqD/AQAAoECZ/p8W9f82Szx+61lTd793arpSOygc+h8AAAAKlOn/6VH/b/tYl/MHbXX1LrunK7WDw6H/AQAAoECZ/v8p6v/t1nz1o1fXarbEhHSldkg49D8AAAAUKNP/P0f9v/2ABTbffM7kaaemK7VDw6H/AQAAoECZ/v8l6v8dbthm2eMHdH3+0nSldlg49D8AAAAUKNP/M6L+33HLebP77Dby2M/TlVq7cOh/AAAAKFCm/2dG/b/ToIdbthi8/4anpCu1w8Oh/wEAAKBAmf7/Ner/ndc54/WPuvee+Eq6UjsiHPofAAAACpTp/1lR/+/S+sAfrly1+W3vpiu1I8Oh/wEAAKBAmf7/Ler/Xa/tv/jZL0258Ox0pXZUOPQ/AAAAFCjT/79H/d9mpbUebPnlxZvMS1dq7cOh/wEAAKBAmf7/I+r/3e75Zs+Pa8+9c0y6Ujs6HPofAAAACpTp/9lR/+8+6pPTrj+hSc+90pXa/J8J6H8AAAAoUKb//4z6f4+lVrvu0rHvnjg9XakdGw79DwAAAAXK9P9fUf/vuc+bG1+035DjF01XaseFQ/8DAABAgTL9Pyfq/71+XeLNa/qceNmQdKV2fDj0PwAAABQo0/9/R/2/97etfvps1oT3H09Xah3Cof8BAACgQJn+nxv1/z7H/rnkxhstsfnS6UrthHDofwAAAChQpv/nRf2/75u7PdKldb+LB6YrtRPDof8BAACgQJn+/yfq/7bnX7nv1TPaDdohXamdFA79DwAAAAXK9P+/Uf/vd8LTHd+7cc7r66UrtZPDof8BAACgQJn+/y/q//0/ufTG5gdvte516UrtlHDofwAAACjQ/77/F1og6v8DXjrqiSNGjjuyVbpSOzUc+h8AAAAKlOn/BaP+P/CCQQc+eGr1TN90pXZaOPQ/AAAAFCjT/1XU/wedOfTsfxcbPqNHulI7PRz6HwAAAAqU6f9a1P8Hf3h8n0bvd1xy7XSldkY49D8AAAAUKNP/C0X9f0ib9zY97PWZezyYrtTODIf+BwAAgAJl+n/hqP8P/Xe5SUOWa3X/YulKrWM49D8AAAAUKNP/i0T9f9i0jX/9tetds1ZLV2pnhUP/AwAAQIEy/b9o1P/tDvixSfXAMU2eS1dqncKh/wEAAKBAmf5fLOr/w5fd9slFxvY8/vZ0pXZ2OPQ/AAAAFCjT/w2i/j/ikX8O/eOENpdtla7UOodD/wMAAECBMv2/eNT/R455rcs9tWnvb5yu1M4Jh/4HAACAAmX6f4mo/49aYMF+B33ZcvMb0pXaueHQ/wAAAFCgTP83jPq/fZ8ntmjw0uiLF0xXal3Cof8BAACgQJn+bxT1/9Hrdn3/71XPH3RvulLrGg79DwAAAAXK9P+SUf8fs93+fzzS/ZPXR6YrtfPCof8BAACgQJn+X+r/7v//av/P68dede0KRw9uuu7y6Urt/HDofwAAAChQpv+Xjj7/P65Lyz6Dd/vmyOHpSu2CcOh/AAAAKFC9/m+y+Px7ocZR/x//1s9nHzhgjWeWTFdqF4ZD/wMAAECBMp//LxP1f4dPPzpw4TnXz1gxXal1C4f+BwAAgAJl+r9J1P8nHNf4idlrtV3ymXSldlE49D8AAAAUKNP/y0b9f+Kse5s8vNWkPbZMV2oXh0P/AwAAQIEy/b9c1P8n7XnSr8dMbXz/relK7ZJw6H8AAAAoUKb/l4/6/+T2x05avMfYWVekK7Xu4dD/AAAAUKBM/68Q9f8p3w3YdM7h3Zs0T1dql4ZD/wMAAECBMv3fNOr/Uwfv0++f37Z645Z0pXZZOPQ/AAAAFCjT/ytG/X9a0xu6LLnxnPW3SFdql4dD/wMAAECBMv3fLOr/0xs+eeiR+7frvnq6Upv/nQD6HwAAAAqU6f+Vov4/Y3TnJx/o2++uK9OV2vzX9D8AAAAUKNP/K0f9f2aLcSvM6r3Eh0ulK7Ue4dD/AAAAUKBM/68S9X/HOxf+Y8GDJmz5cLpS6xkO/Q8AAAAFyvT/qlH/n9Vrx/cP3fTEE8akK7WrwqH/AQAAoECZ/l8t6v9Om8zZ4v5fhlzRNF2pXR0O/Q8AAAAFyvR/86j/z95w60eGNjhm5uB0pXZNOPQ/AAAAFCjT/6tH/d+5/3/7HvLBXY3rrNSuDYf+BwAAgAJl+n+NqP/PufKVjguMarXbCulKrVc49D8AAAAUKNP/a0b9f+7WtRt/O23mfaPSldp14dD/AAAAUKBM/7eI+r/LQ49tPKxLx5+3Tldq14dD/wMAAECBMv2/VtT/XRuf/+ZRw4Y3vCNdqd0QDv0PAAAABcr0/9pR/5+3cNuflhpfHX59ulLrHQ79DwAAAAXK9P86Uf+fP/a6JectO+7pjdKV2o3h0P8AAABQoEz/rxv1/wVzj3jwr6rpGw3SldpN4dD/AAAAUKBM/68X9f+FO9+15xJffLL+Q+lK7eZw6H8AAAAoUKb/14/6v9uhQ0479vnzuz+brtT6hEP/AwAAQIEy/d8y6v+LZpxw3fAOo+9aNV2p9Q2H/gcAAIACZfp/g6j/L77knZZ/Xtrywz7pSu2WcOh/AAAAKFCm/zeM+v+S11Z4faF7p225SbpSuzUc+h8AAAAKlOn/jaL+7/7ehj8cMK7NCeukK7V+4dD/AAAAUKBM/28c9f+lp01f/N7Vel7RM12p9Q+H/gcAAIACZfp/k6j/Lzun/SlX/9V95o7pSu22cOh/AAAAKFCm/1tF/X/5+Nt7dmkxtvGgdKU2IBz6HwAAAAqU6f9No/6/4rO772vepvFuvdKV2v/F3p9GbT3+/d8/9s8eIRkKX0OmhAyZM4TMQ4hCSUjGyJBECkmGhCRjMiWUOcmYecqQTMmQZJ6FJKL4r/9am3Vu57Wd129b51rXb63txuNx613Hsb/Wcfe59mP/HNeHQ/8DAABAgTL9v1nU/4OOOWa3d65787Z105XayHDofwAAAChQpv83j/r//DlTvxp8wT4/3pau1G4Ih/4HAACAAmX6f4uo/y/Yd9mq/8GXLtkgXan9+0wA/Q8AAAAFyvT/llH/X9hl3bVbbb1m52XSldpN4dD/AAAAUKBM/7eO+v+iT2ZN+ujLzx97MF2p3RyO/97/1f+VHxkAAAD4X8r0/1ZR/w++rc2R7ze56onD05XaLeHw/j8AAAAUKNP/W0f9f3GzPweu//KBhy5IV2qjwqH/AQAAoECZ/t8m6v8hiz9zy4CxfzX8Ll2p3RoO/Q8AAAAFyvT/tlH/XzKuwU6XnrbNN3ukK7XR4dD/AAAAUKBM/7eJ+v/SNSd89l6PMaNeSFdqt4VD/wMAAECBMv2/XdT/l1136kLNHzqm7THpSu32cOh/AAAAKFCm/7eP+n/opXusccq7Lzfpla7U7giH/gcAAIACZfp/h6j/L99y6PODGjb87Z10pTYmHPofAAAACpTp/7ZR/w87fbHtT581+6Ie6UptbDj0PwAAABQo0/87Rv1/xeQpH12w6WbHvJau1O4Mh/4HAACAAmX6f6eo/4e/P2fBWx1u3PSjdKV2Vzj0PwAAABQo0/87R/1/ZfdNV1tzaNd3zklXaneHQ/8DAABAgTL9v0vU/1f9fO7TZ1757PWz05XaPeHQ/wAAAFCgTP/vGvX/1XvtduiQ9gv13y9dqd0bDv0PAAAABcr0/25R/19z2Flnfdzqvla7pyu1+8Kh/wEAAKBAmf7fPer/a794/KYNfz15ypfpSu3+cOh/AAAAKFCm//eI+v+6W47bZr0vJzzxXLpSGxcO/Q8AAAAFyvT/nlH/j1jpvvc/3LrPod3SldoD4dD/AAAAUKBM/+8V9f/1S101b+jB0xueka7UxodD/wMAAECBMv3fLur/kRM6rHz2BSt98266UnswHPofAAAACpTp/72j/r+hxScTW1x30aiD05XahHDofwAAAChQpv/3ifr/xhtaHPzuLru1/StdqT0UDv0PAAAABcr0/75R/980eJW+A5t/0+SHdKX2cDj0PwAAABQo0//to/6/edMPrz/1j/V+2zddqT0SDv0PAAAABcr0/35R/9/yTN/VLlvt7YvmpCu1R8Oh/wEAAKBAmf7fP+r/Uf2eWnDO88sdc1C6UnssHPofAAAACpTp/w5R/9960vkftRz95KY7piu1x8Oh/wEAAKBAmf7vGPX/6Kk7bf/BgLPe+TxdqU0Mh/4HAACAAmX6/4Co/2/b7eebzuv+6fUnpyu1J8Kh/wEAAKBAmf4/MOr/2+dveVavp1bv/3q6UnsyHPofAAAACpTp/4Oi/r/jmyUPXfvjoa0+TFdqT4VD/wMAAECBMv3fKer/MR1efXraIu2n9E1Xak+HQ/8DAABAgTL93znq/7HLr7jy21tf2uHXdKX2TDj0PwAAABQo0/8HR/1/5z0fz1vjy30e3D9dqT0bDv0PAAAABcr0f5eo/+969Iv3+1zw+de7pSu158Kh/wEAAKBAmf4/JOr/uxdZc5sLD16zwRfpSu35cOh/AAAAKFCm/7tG/X/PsGHXz9jl6fbHpSu1F8Kh/wEAAKBAmf4/NOr/e1se1Hej686579V0pfZiOPQ/AAAAFCjT/4dF/X/f9j0P7vfHm3/OSFdqL4VD/wMAAECBMv1/eNT/959/18SLmy+z8oB0pTYpHPofAAAACpTp/25R/48bcfxag5//rseL6Urt5XDofwAAAChQpv+PiPr/gbXuebb/ausPPjZdqb0SDv0PAAAABcr0f/eo/8e3vuaTVgMu+OiUdKX27zMB9T8AAAAUKNP/R0b9/+Bl+y3y0ehdtns7Xam9Fg79DwAAAAXK9P9RUf9P+H9fqU0Oh/4HAACAAmX6/+io/x+6vXnb07qvePX8dKX2ejj0PwAAABQo0//HRP3/8APNjlh9kYef/T5dqU0Jh/4HAACAAmX6/9io/x9Z4v1B73x8xup7piu1N8Kh/wEAAKBAmf4/Lur/R9svvs57L9/T4aR0pfZmOPQ/AAAAFCjT/z2i/n/st8kvNm9y4oOT05XaW+HQ/wAAAFCgTP8fH/X/45/O/eKU057/enq6Uvv3bwLqfwAAAChQpv9PiPp/4iEbNxg0dpEGZ6YrtXfCof8BAACgQJn+7xn1/xOvnHfH+w/d3P63dKU2NRz6HwAAAAqU6f8To/5/svcuu6zf47D7OqUrtXfDof8BAACgQJn+Pynq/6eOPefoAQ1//rNtulKbFg79DwAAAAXK9P/JUf8/PePRiy59d5OVP0tXau+FQ/8DAABAgTL9f0rU/8+c8W2XbTZ9tUfndKX2fjj0PwAAABQo0/+9ov5/9vVWj74ya4nBf6YrtQ/Cof8BAACgQJn+PzXq/+c+aDrixqG3f/RjulL7MBz6HwAAAAqU6f/eUf8/f+Q7/U/qcNR27dOV2vRw6H8AAAAoUKb/T4v6/4Vfjpi+Rft5pz2frtQ+Cof+BwAAgAJl+r9P1P8vthuz9UtXbnX1EelKbUY49D8AAAAUKNP/p0f9/9LhN644/Ndrnj09Xal9HA79DwAAAAVaePlNG/33//lv/X9G1P+TvjzkzyNadVp9arpSmxkO/Q8AAAAFyrz/3zfq/5dHXXzY0R+vvvZW6Urtk3DofwAAAChQpv/PjPr/lZXbP3HNIp++cH26Uvs0HPofAAAACpTp/35R/7/auM+Nz3VvP+yydKX2WTj0PwAAABQo0//9o/5/7aEHB2zy1NBerdKV2ufh0P8AAABQoEz/nxX1/+R1Fp55/OjlthqdrtS+CIf+BwAAgAJl+v/sqP9fv3HSdiMGvP3BwulK7ctw6H8AAAAoUKb/z4n6f8rFC1Z5fbWzLls+Xal9FQ79DwAAAAXK9P+AqP/f2Gzbv7d//smeE9KV2tfh0P8AAABQoEz/nxv1/5uvbPLyWs13a7ZUulL7Jhz6HwAAAAqU6f+BUf+/1fv3lm/+cdE/96QrtW/Dof8BAACgQJn+Py/q/7ePfX2J869b7+6J6Urtu3DofwAAAChQpv8HRf3/zowlvj1jl2/2+k+6Uvs+HPofAAAACpTp//Oj/p/a/rE9Nzi4T+3qdKX2Qzj0PwAAABQo0/8XRP3/7m8D7p55wYTPWqcrtR/Dof8BAACgQJn+vzDq/2mf7jrkki9Xenj1dKU2Kxz6HwAAAAqU6f+Lov5/75BBx/Xdenqn89KV2k/h0P8AAABQoEz/D476//3V9p98VquF1r49Xan9HA79DwAAAAXK9P/FUf9/cPu1G13+67MvLJqu1H4Jh/4HAACAAmX6f0jU/x8+cG/j6VeePGzpdKU2Oxz6HwAAAAqU6f9Lov6fvsQJP67b/r5e49OV2q/h0P8AAABQoEz/Xxr1/0cjPtind4fNtto+XanNCYf+BwAAgAJl+v+yqP9nrLXa/ecOnf3BDelK7bdw6H8AAAAoUKb/h0b9/3HrtYdOndX1skvSldrccOh/AAAAKFCm/y+P+n/mZZ/3XGfTG3uul67Ufg+H/gcAAIACZfp/WNT/nwzY8dv33z2m2ZXpSu2PcOh/AAAAKFCm/6+I+v/TFy9aYv2GY/7ZJF2pzQuH/gcAAIACZfp/eNT/n731ZMsBPRre3SJdqf0ZDv0PAAAABcr0/5VR/39+Qv+XL33o5b3OT1dqf4VD/wMAAECBMv1/VdT/X8x75bj3xh5YWyxdqc0Px/+//8cu8X/5ZwYAAAD+dzL9f3XU/1/u3HhI89Ou+uyudKW2IBze/wcAAIACZfr/mqj/v+q0xd2nNNnm4SfTldrf4dD/AAAAUKBM/18b9f/XP/6656CX/+q0WrpS+ycc+h8AAAAKlOn/66L+/+bONX686J6mX+2VrlT/HvofAAAACpTp/xFR/3+73NeNTztl6qLfpCtV+B79DwAAACXK9P/1Uf9/t+iMjVZful/Hf9KVapFw6H8AAAAoUKb/R0b9//2TK09+Z/LE8YemK1UtHPofAAAACpTp/xui/v+h1Z09B7/V4q+30pXq3wcA6H8AAAAoUKb/b4z6/8erTx7av9HXK/VOV6p6OPQ/AAAAFCjT/zdF/T9r4IH3tzpxz32PSleqBuHQ/wAAAFCgTP/fHPX/T9teuc9HDwy+/6V0pVo0HPofAAAACpTp/1ui/v+5Rcd3ZxzUe8ZZ6Ur17+v1PwAAABQo0/+jov7/5YarW280ZHybj9OVqmE49D8AAAAUKNP/t0b9P3vw/cv3+26V415JV6rFw6H/AQAAoECZ/h8d9f+vm/aYc/GWMy4+IV2plgiH/gcAAIACZfr/tqj/59wy/YC312/7zNfpSrVkOPQ/AAAAFCjT/7dH/f/bSqs+vMbvA9fYNV2pGoVD/wMAAECBMv1/R9T/c5da59o+17bq0yF88Z+F/+v7lgqH/gcAAIACZfp/TNT/v0/4tM+F7WZd9XO6UjUOh/4HAACAAmX6f2zU/3/8vNlb5x26xVfvpSvV0uHQ/wAAAFCgTP/fGfX/vL1+26zXwDmL9klXqmXCof8BAACgQJn+vyvq/z8Pe2PZtT/t0rF7ulL92/36HwAAAAqU6f+7o/7/64uGP0/bbuT4Z9KVarlw6H8AAAAoUKb/74n6f/7pE/e7bPUGf+2drlRNwqH/AQAAoECZ/r836v8Fk88ef878SSvNSleqpuHQ/wAAAFCgTP/fF/X/3+/vfmXLG3rsOy9dqZYPh/4HAACAAmX6//6o///pPrDXB23H3n9IulKtEA79DwAAAAXK9P+4/+r/aqGjNttg1zEdZ3yarlQrhkP/AwAAQIEy/f9A1P8Lf/zblIf7D2+zc7pS/Scc+h8AAAAKlOn/8VH/L/LqGz99tnKb4w5IV6qVwqH/AQAAoECZ/n8w6v/aKQ0bLTNpwcVz05Vq5XDofwAAAChQpv8nRP1ffTbx3r0+7PZMv3SlWiUc+h8AAAAKlOn/h6L+r3c+u/1jDUat8X66Uq0aDv0PAAAABcr0/8NR/zfYe/eTfjymcZ830pWqWTj0PwAAABQo0/+PRP2/6NyBlzZ7fMpVJ6Yr1Wrh0P8AAABQoEz/Pxr1/2LjO667UrvHrhiYrlT/vkb/AwAAQIEy/f9Y1P8NF7v61W+v7XvKWulKtUY49D8AAAAUKNP/j0f9v/gq93//5O/Tmm+erlRrhkP/AwAAQIEy/T8x6v8l7ujRcN/1V3jxmnSl+vd3AvQ/AAAAFCjT/09E/b/k5tPvbLrlkEtXSleq5uHQ/wAAAFCgTP8/GfV/o6Grtvvqu3YnPpquVGuHQ/8DAABAgTL9/1TU/0tdv87x44d8ufX96UrVIhz6HwAAAAqU6f+no/5vvPqng3c8qPn7jdKVap1w6H8AAAAoUKb/n4n6f+lux/aZ8MDMux5JV6p1w6H/AQAAoECZ/n826v9lPhx17e4nNmvXNF2p1guH/gcAAIACZfr/uaj/l50y8uHlGo1bbZF0pWoZDv0PAAAABcr0//NR/y932qEHfPJWr79vSVeq9cOh/wEAAKBAmf5/Ier/Jl/9NGfi5B8e2SBdqf79P/0PAAAABcr0/4tR/zftut7yeyy94UFD05Vqw3DofwAAAChQpv9fivp/+T2Wa73KKYMWGZGuVBuFQ/8DAABAgTL9Pynq/xVmv/vuT/fs9Pm26UrVKhz6HwAAAAqU6f+Xo/5f8eFFe33/+IgrVklXqo3Dof8BAACgQJn+fyXq//8s+eyVKx7T+ZSn0pVqk3DofwAAAChQpv9fjfp/pRX/Gr93g7nN70xXqk3Dof8BAACgQJn+fy3q/5Vv3W6/pz9s/eIS6Uq1WTj0PwAAABQo0/+To/5fZePLf/5i0l2XXpSuVJuHQ/8DAABAgTL9/3rU/6sO2XPZFVY+4cS105Vqi3DofwAAAChQpv+nRP3f7Kbem+3c/8WtN01Xqi3Dof8BAACgQJn+fyPq/9WaP/TWuDHV+8PSlap1OPQ/AAAAFCjT/29G/b/6tBUOaN/2n7tapivVVuHQ/wAAAFCgTP+/FfX/Gj3feviJG7ZvNzhdqbYOh/4HAACAAmX6/+2o/9fs+/2138wfttrN6Uq1TTj0PwAAABQo0//vRP2/1nMb9ll59f3/3i5dqbYNh/4HAACAAmX6f2rU/833u/ndtttNfuSBdKVqEw79DwAAAAXK9P+7Uf+v/d3BrR/8tNFBy6Ur1b+/E6D/AQAAoECZ/p8W9X+Lv49c/uuBoxep0pVq+3DofwAAAChQpv/fi/p/nV1un9Pk0O6f35GuVDuEQ/8DAABAgTL9/37U/+sudMZ+Sx8zasCG6UrVNhz6HwAAAAqU6f8Pov5f7/EHxn/+eLebLk9Xqh3Dof8BAACgQJn+/zDq/5b3XXLlIx9OefW6dKXaKRz6HwAAAAqU6f/pUf+v32SfXrs0aLz+NulKtXM49D8AAAAUKNP/H0X9v8GF/7y12srDuz+crlS7hEP/AwAAQIEy/T8j6v8N22y92Q+TOg5qkq5Uu4ZD/wMAAECBMv3/cdT/G61bW/bRMQveq6Ur1W7h0P8AAABQoEz/z4z6v9XwF39u17/NlqPSlWr3cOh/AAAAKFCm/z+J+n/jy+vH7XXDpF1WTleqPcKh/wEAAKBAmf7/NOr/TbZ4fshjbRvc/li6Uu0ZDv0PAAAABcr0/2dR/2+6xry7f1x97C/3pSvVXuHQ/wAAAFCgTP9/HvX/ZiN32LPZ/B5LL5muVO3Cof8BAACgQJn+/yLq/80bXvbtrp/OOfjcdKXaOxz6HwAAAAqU6f8vo/7f4sF2Szy83RaPrpmuVPuEQ/8DAABAgTL9/1XU/1uO6dXys0NH/rBFulLtGw79DwAAAAXK9P/XUf+3XvWRl5cZ2KXRtelK1T4c+h8AAAAKlOn/b6L+3+rgo3s2vXbggHHpSrVfOPQ/AAAAFCjT/99G/b/156OHftWu7U3/Q+NX+4dD/wMAAECBMv3/XdT/2/w+4v7x6896tZ6uVB3Cof8BAACgQJn+/z7q/233OXyfHX9vtf6YdKXqGA79DwAAAAXK9P8PUf+3mfnjjyt9N777+ulKdUA49D8AAAAUKNP/P0b9v93R6zf+dsvegy5OV6oDw6H/AQAAoECZ/p8V9f/2vZbZ6MmDZrx3U7pSHRQO/Q8AAAAFyvT/T1H/7/Dae5P3HbLKlm3SlapTOPQ/AAAAFCjT/z9H/d/2iAuX+ePEr3e5MF2pOodD/wMAAECBMv3/S9T/O05v++sSD7S4vXm6Uh0cDv0PAAAABcr0/+yo/3d6o9/bh781+JfN0pWqSzj0PwAAABQo0/+/Rv2/c58nNr6n0Z5LX5GuVIeEQ/8DAABAgTL9Pyfq/12+XmrY70tPPXjVdKXqGg79DwAAAAXK9P9vUf/veujLp1aTmz76dLpSHRoO/Q8AAAAFyvT/3Kj/d9tzdsf97pn4w9h0pTosHPofAAAACpTp/9+j/t/9180fGH1Kv0aLpyvV4eHQ/wAAAFCgTP//EfX/Ho981XTMwEaLfZWuVN3Cof8BAACgQJn+nxf1/56NVv/9gEMnf7tLulIdEQ79DwAAAAXK9P+fUf/v9Z+Vpi20XfcnO6YrVfdw6H8AAAAoUKb//4r6v93ojzb/9dPRXX9JV6ojw6H/AQAAoECZ/p8f9f/em5x01dj52zc9O12pjgqH/gcAAIACZfp/QdT/+1wy9vRDVv9nzsx0pTo6HPofAAAACpTp/7+j/t/35uGdGrfd/5aX05XqmHDofwAAAChQpv//ifq//doHPDT/hmE7Hp+uVMeGQ/8DAABAgf7P/V9fKOr//TZecouF+p+w2ZvpSnVcOPQ/AAAAFCjT/wtH/b//kFff+3XMXW+fmq5UPcKh/wEAAKBAmf5fJOr/Djf9PHfMpOrCo9OV6t/PBOh/AAAAKFCm/2tR/3dsvmWTA1Z+8dhJ6Up1Qjj0PwAAABQo0/9V1P8HPHz+hMYNOm/ULl2peoZD/wMAAECBMv1fj/r/wCV3Omj+hyPe+DZdqU4Mh/4HAACAAmX6v0HU/wet2PeMsY+3Hvl3ulKdFA79DwAAAAXK9P+iUf93uvWpqw85Zm6/rulKdXI49D8AAAAUKNP/i0X93/mrnpscfsqGi/VPV6pTwqH/AQAAoECZ/m8Y9f/BXe965557fvj2g3Sl6hUO/Q8AAAAFyvT/4lH/d9lj2Ow/Ju/05JR0pTo1HPofAAAACpTp/yWi/j9k9kFLL7H0oK4905Wqdzj0PwAAABQo0/9LRv3ftdsX4/Zr1KzpJ+lKdVo49D8AAAAUKNP/jaL+P/TDNTuMfmvmnJ3SlapPOPQ/AAAAFCjT/0tF/X/YlBV7//5Ar1sOTFeq08Oh/wEAAKBAmf5vHPX/4ad9fEV14rgdf09XqjPCof8BAACgQJn+Xzrq/24XntXkryHtNtsnXan6hkP/AwAAQIEy/b9M1P9HtHl87mIHDXn7p3SlOjMc+h8AAAAKlOn/ZaP+777uue913bL5hX+kK1W/cOh/AAAAKFCm/5eL+v/I4bttcf93Xx7bJV2p+odD/wMAAECBMv3fJOr/oxaac/Wc3/tuNC1dqc4Kh/4HAACAAmX6v2nU/0c/vukZi67/2BunpSvV2eHQ/wAAAFCgTP8vH/X/MfctdlDHdiuMPDJdqc4Jh/4HAACAAmX6f4Wo/49tMmXCLddO6/dsulINCIf+BwAAgAJl+n/FqP+P22+VpW9rM+zWPulKdW449D8AAAAUKNP//4n6v8d3H87u9Mn+O7+XrlQDw6H/AQAAoECZ/l8p6v/j//7kndq5/6zwTLpSnRcO/Q8AAAAFyvT/ylH/n7BLi01+7rr93O7pSjUoHPofAAAACpTp/1Wi/u857aor7t5x9NOz0pXq/HDofwAAAChQpv9Xjfr/xJ4dene+sfthe6cr1QXh0P8AAABQoEz/N4v6/6S+x3VYcsHkxQ9JV6oLw6H/AQAAoECZ/l8t6v+Tn7tv3D9rNPp+XrpSXRQO/Q8AAAAFyvT/6lH/nzLzpHX/fmnuiJ3TlWpwOPQ/AAAAFCjT/2tE/d/r6LGvNlqpdd9P05Xq4nDofwAAAChQpv/XjPr/1F7Dvz+434gN5qYr1ZBw6H8AAAAoUKb/14r6v/drBzS8647Orx+QrlSXhEP/AwAAQIEy/d886v/TDv7qzl8mvnj+++lKdWk49D8AAAAUKNP/a0f93+fz1dstcmx1dL90pbosHPofAAAACpTp/xZR/5/++0rHH7ToXZucmK5UQ8Oh/wEAAKBAmf5fJ+r/M/b5aPDt00948410pbo8HPofAAAACpTp/3Wj/u/bcKkNRr0+7tZv0pVqWDj0PwAAABQo0//rRf1/5oMvT+mwTK+d90pXqivCof8BAACgQJn+bxn1f78xs39q0GvmCoemK9XwcOh/AAAAKFCm/9eP+r//qps3+u3eZnP/SVeqK8Oh/wEAAKBAmf7fIOr/sy6/8N77xg16une6Ul0VDv0PAAAABcr0/4ZR/5+9Rdv2h/bc6bC30pXq6nDofwAAAChQpv83ivr/nDX6ndRwyR8Wfyldqa4Jh/4HAACAAmX6v1XU/wNGPnHpn29u+P1R6Up1bTj0PwAAABQo0/8bR/1/7rlLfPpx62kjPk5XquvCof8BAACgQJn+3yTq/4HbvF7b8PsV+p6VrlQjwqH/AQAAoECZ/t806v/zNvp9zTMveWyDE9KV6vpw6H8AAAAoUKb/N4v6f9BVmzwzpFPf119JV6qR4dD/AAAAUKBM/28e9f/5DQZ1e2uvL8/fNV2pbgiH/gcAAIACZfp/i6j/L3hi1/PWvKb50V+nK9WN4dD/AAAAUKBM/28Z9f+FYweMPn3ukE1+Tleqm8Kh/wEAAKBAmf5vHfX/Rcs+tuMFLdu92SFdqW4Oh/4HAACAAmX6f6uo/wcfdMKXA6e3efepdKW6JRz6HwAAAAqU6f+to/6/+Id7Fz110QWbr5KuVKPCof8BAACgQJn+3ybq/yF/XNuixbEduy2RrlS3hkP/AwAAQIEy/b9t1P+X7LT/C+9OHD7wznSlGh0O/Q8AAAAFyvR/m6j/L33z86OG3tH45bXTleq2cOh/AAAAKFCm/7eL+v+y49e+8Ox+U9a7KF2pbg+H/gcAAIACZfp/+6j/h56z2pj1Vup29rB0pbojHPofAAAACpTp/x2i/r/8hQ92/fClUTdsmq5UY8Kh/wEAAKBAmf5vG/X/sPMPf7TVGl1mDU5XqrHh0P8AAABQoEz/7xj1/xXbj+jy0YKRjVumK9W/fxNA/wMAAECBMv2/U9T/w1uO7j/4xi0O2S5dqe4Kh/4HAACAAmX6f+eo/68cdvSI/jvOefzmdKW6Oxz6HwAAAAqU6f9dov6/apH3tl69a49fl0tXqnvCof8BAACgQJn+3zXq/6sfXWb6O+eOXfaBdKW6Nxz6HwAAAAqU6f/dov6/5p71/7zokwa73ZGuVPeFQ/8DAABAgTL9v3vU/9cu/+OKp7WZNKZKV6r7w6H/AQAAoECZ/t8j6v/rOuzwxCktV3l3rXSlGhcO/Q8AAAAFyvT/nlH/j/hm3mGD5s7YfGC6Uv37TAD9DwAAAAXK9P9eUf9fP//5Ae9d07vbNelKNT4c+h8AAAAKlOn/dlH/j9ytfmPzvcYP3DxdqR4Mh/4HAACAAmX6f++o/2+Y+sh2Azq1evnRdKWaEA79DwAAAAXK9P8+Uf/feFKvmZdeMmu9ldKV6qFw6H8AAAAoUKb/9436/6Z+7f5+//u2ZzdKV6qHw6H/AQAAoECZ/m8f9f/Nz1y2yvqtB95wf7pSPRIO/Q8AAAAFyvT/flH/37JpqxFT3+w3q2m6Uv37TAD9DwAAAAXK9P/+Uf+PGvxt/3WWnNj4kXSleiwc+h8AAAAKlOn/DlH/33rDO11692x6yC3pSvV4OPQ/AAAAFCjT/x2j/h/doumj546b+vgi6Uo1MRz6HwAAAAqU6f8Dov6/bcKYFaffu+evQ9OV6olw6H8AAAAoUKb/D4z6//aljvhz3V6Dl90gXameDIf+BwAAgAJl+v+gqP/vWOmQ6Wct02K3bdOV6qlw6H8AAAAoUKb/O0X9P+aWG7e+/PWvx4xIV6qnw6H/AQAAoECZ/u8c9f/YL9rfeMnc5tv+D41fPRMO/Q8AAAAFyvT/wVH/33nYxQP6tvzyw3HpSvVsOPQ/AAAAFCjT/12i/r9rrwcP22CvdkPHpCvVc+HQ/wAAAFCgTP8fEvX/3T/3eWLmNUNOrqcr1fPh0P8AAABQoEz/d436/57uk1Y5/5IVWlycrlQvhEP/AwAAQIEy/X9o1P/3vr/w32d0mjZp/XSlejEc+h8AAAAKlOn/w6L+v2/ytjPXat33yjbpSvVSOPQ/AAAAFCjT/4dH/X//6Qu2e/P7x069KV2pJoVD/wMAAECBMv3fLer/cSdsd/tbS+60UPN0pXo5HPofAAAACpTp/yOi/n/grb92X/PNQZ9emK5Ur4RD/wMAAECBMv3fPer/8S8+e8zp4zZ86Ip0pXo1HPofAAAACpTp/yOj/n9wwKLnX9DzhwM2S1eq18Kh/wEAAKBAmf4/Kur/CT8+1PzjXr1WfTpdqSaHQ/8DAABAgTL9f3TU/w916v3ShveOm79qulK9Hg79DwAAAAXK9P8xUf8/vPOeX5/5erOxi6cr1ZRw6H8AAAAoUKb/j436/5F5l9eHLDNzz7HpSvVGOPQ/AAAAFCjT/8dF/f/ok4eOGrpote3l6Ur1Zjj0PwAAABQo0/89ov5/bNGRO589/cUPN0xXqrfCof8BAACgQJn+Pz7q/8eXG9V9vYknDN0mXaneDof+BwAAgAJl+v+EqP8n3nnsuR8ee9fJ16Ur1Tvh0P8AAABQoEz/94z6/4lt3119YL/WLZqkK9XUcOh/AAAAKFCm/0+M+v/Jgcs9d+odcyc9nK5U74ZD/wMAAECBMv1/UtT/T1293uctXup85ah0pZoWDv0PAAAABcr0/8lR/z/d6qeF311pxKm1dKV6Lxz6HwAAAAqU6f9Tov5/5oKnPjpyQfeFHktXqvfDof8BAACgQJn+7xX1/7M79N1+2BqjP105Xak+CIf+BwAAgAJl+v/UqP+fW3+n1V7YsdFDS6Yr1Yfh0P8AAABQoEz/9476//krzl/Q+sbJB9yXrlTTw6H/AQAAoECZ/j8t6v8Xalse2vPc/VddM12pPgqH/gcAAIACZfq/T9T/Lz7289M3dx02/9x0pZoRDv0PAAAABcr0/+lR/79076s3vdZm+7HXpivVx+HQ/wAAAFCgTP+fEfX/pBWWPGurT/7Zc4t0pZoZDv0PAAAABcr0f9+o/1/u+PH7bZYZvPcH6Ur1STj0PwAAABQo0/9nRv3/yrcrbvPG63ve2z9dqT4Nh/4HAACAAmX6v1/U/68uWHPlkfd+Pa9nulJ9Fg79DwAAAAXK9H//qP9f2/2Lecf1arHilHSl+jwc+h8AAAAKlOn/s6L+n/zuQQdv1nPi/julK9UX4dD/AAAAUKD/R/8v8t+/Wj876v/XTx428Zlx/cZ9kq5UX4ZD/wMAAECBMu//nxP1/5T+d11/1ZtTv/g9Xam+Cof+BwAAgAJl+n9A1P9vPNuz77FLNq0fmK5UX4dD/wMAAECBMv1/7rkLLbRo+Meb2x6zb7/vZ53xU7pSfRMO/Q8AAAAFyvT/wOj9/7cG3nLPxa1bXbNPulJ9Gw79DwAAAAXK9P95Uf+/ffX1l83oNPC5LulK9V049D8AAAAUKNP/g6L+f6dV15M3uqTtWn+kK9X34dD/AAAAUKBM/58f9f/UJ2e90eeaGceflq5UP4RD/wMAAECBMv1/QdT/7y667oYX7rXKJdPSlerHcOh/AAAAKFCm/y+M+n/acssu+XbL8TOfTVeqWeHQ/wAAAFCgTP9fFPX/e3dOnbXG3N7bH5muVP/+TUD9DwAAAAXK9P/gqP/f/7HBXmt/MnbvXdKV6udw6H8AAAAoUKb/L476/4NOz4yd1qbHvV+lK9Uv4dD/AAAAUKBM/w+J+v/Dnf+8+Lyuk+b9kq5Us8Oh/wEAAKBAmf6/JOr/6fPanNDr3AYrdkxXql/Dof8BAACgQJn+vzTq/49OGPpayxtH7j8zXanmhEP/AwAAQIEy/X9Z1P8z3tpjvQ927DLu7HSl+i0c+h8AAAAKlOn/oVH/f/ziqYtdtsacL45PV6q54dD/AAAAUKBM/18e9f/MARO+O2fBFvWX05Xq93DofwAAAChQpv+HRf3/yWXLnzxwpSlnnJquVH+EQ/8DAABAgTL9f0XU/5+2fvOyU19qfM2b6Uo1Lxz6HwAAAAqU6f/hUf9/ttZ397S4Y9Rzk9KV6s9w6H8AAAAoUKb/r4z6//MRG+z7br9uax2drlR/hUP/AwAAQIEy/X9V1P9fLHHTrKHHLjj+23Slmh8O/Q8AAAAFyvT/1VH/f/lA5yXPntjmknbpSrUgHPofAAAACpTp/2ui/v/q9u4brjd9+Myu6Ur1dzj0PwAAABQo0//XRv3/9Wq3vfHhoh23/ztdqf4Jh/4HAACAAmX6/7qo/7855PQTPv7psc/+TFfq/x76HwAAAAqU6f8RUf9/++m4izfcrG+tc7pSD9+j/wEAAKBEmf6/Pur/734bMvbMjtM6tU9X6ouE43/q/wb/H//IAAAAwP9Spv9HRv3/ffu99xpy+QoP/5iu1Gvh8P4/AAAAFCjT/zdE/f/DjL+/e2v4kH+OSFfqVTj0PwAAABQo0/83Rv3/47FbLbbmvu2aPZ+u1P99AKD+BwAAgAJl+v+mqP9n9V5kvdM3+nKvqelK/d/P+Ot/AAAAKFCm/2+O+v+nV1547YLZze8+PV2pLxoO/Q8AAAAFyvT/LVH//zy16nh+05kfTE5X6v++Xv8DAABAgTL9Pyrq/19Oeu6BM15pttVJ6Uq9YTj0PwAAABQo0/+3Rv0/u98fw9a6c1zPM9OV+uLh0P8AAABQoEz/j476/9dntj/1zT69LpuertSXCIf+BwAAgAJl+v+2qP/ndLj07UuO++GFTulKfclw6H8AAAAoUKb/b4/6/7dv9tq474QN1/4tXak3Cof+BwAAgAJl+v+OqP/nzj9lmQ2mDur1WbpSXyoc+h8AAAAKlOn/MVH//77bw7/OXGynYW3TlXrjcOh/AAAAKFCm/8dG/f/HIkd1mt5sxGfHpiv1pcOh/wEAAKBAmf6/M+r/eY/e+tC6z3WuvZiu1JcJh/4HAACAAmX6/66o//+857qrzrp1bqe305X6v92v/wEAAKBAmf6/O+r/v5Y/7PTLz2n98CnpSn25cOh/AAAAKFCm/++J+n/++T9Mm3rkXf/MT1fqTcKh/wEAAKBAmf6/N+r/Bdu33Hydp09odli6Um8aDv0PAAAABcr0/31R///dcummvWe+uNee6Up9+XDofwAAAChQpv/vj/r/n2HTfj+3Vt39fbpSXyEc+h8AAAAKlOn/cf/V//WF2m6358Jf/PPB/ulKfcVw6H8AAAAoUKb/H4j6f+E//7p79lbbb/VrulL/Tzj0PwAAABQo0//jo/5fZNazQ+7oPKznF+lKfaVw6H8AAAAoUKb/H4z6v3bAoscdeP7+l+2WrtRXDof+BwAAgAJl+n9C1P/VSw+9vNSIyS+8mq7UVwmH/gcAAIACZfr/oaj/62f1brlg10ZrH5eu1FcNh/4HAACAAmX6/+Go/xsct+cSd649uteAdKXeLBz6HwAAAAqU6f9Hov5f9O3Lv+0yr/uwGelKfbVw6H8AAAAoUKb/H436f7FrDt3nsMWaXr1JulL/9zX6HwAAAAqU6f/Hov5vuMHI+++dOvW0K9OV+hrh0P8AAABQoEz/Px71/+JbjRo6b0K/1c9PV+prhkP/AwAAQIEy/T8x6v8lzju25+LHTXy2RbpSXysc+h8AAAAKlOn/J6L+X3Lpdyfv36fF4LvSlXrzcOh/AAAAKFCm/5+M+r/RXcttdOudX/dYLF2prx0O/Q8AAAAFyvT/U1H/L/XUeo3nvrLndqulK/V/PxOg/wEAAKBAmf5/Our/xtVPP9abDv7oyXSlvk449D8AAAAUKNP/z0T9v/QuPZb+eXbv+xZNV+rrhkP/AwAAQIEy/f9s1P/L/H3/7NpG49vfnq7U1wuH/gcAAIACZfr/uaj/l/3u6nc67bvKyuPTlXrLcOh/AAAAKFCm/5+P+n+5/TpuctvwGX8una7U1w+H/gcAAIACZfr/haj/mzz36RX/XN72wRvSlfoG4dD/AAAAUKBM/78Y9X/Tvuv0XrLjwA7bpyv1DcOh/wEAAKBAmf5/Ker/5Xuu2qHzZq0arJeu1DcKh/4HAACAAmX6f1LU/ytMmz7u7p9mfX1JulJvFQ79DwAAAAXK9P/LUf+vOLxhk/vnbXH1PelKfeNw6H8AAAAoUKb/X4n6/z/rvjG369pzTlsqXalvEg79DwAAAAXK9P+rUf+v1Oa39xbbtcvq/0lX6puGQ/8DAABAgTL9/1rU/ytfuNkWf40Y+ezEdKW+WTj0PwAAABQo0/+To/5fpcnAq285v8Hg1ulKffNw6H8AAAAoUKb/X4/6f9X7dj+jY+dJPa5OV+pbhEP/AwAAQIEy/T8l6v9mj5990KJb9djuvHSlvmU49D8AAAAUKNP/b0T9v9pCEyfM+WLsR6unK/V/PxOg/wEAAKBAmf5/M+r/1Wf/Z5Mlah3vuz5dqW8VDv0PAAAABcr0/1tR/6+xx8x3/pg5vP1W6Up963DofwAAAChQpv/fjvp/za5fzr7n6TYrt0pX6tuEQ/8DAABAgTL9/07U/2t9tdbShx+54M/L0pX6tuHQ/wAAAFCgTP9Pjfq/+WlXjKvO6fbgwulKvU049D8AAAAUKNP/70b9v/aUTh1+v3VUh9HpSn27cOh/AAAAKFCm/6dF/d/iwxN7j36ucYMJ6Up9+3DofwAAAChQpv/fi/p/nW53X7FfsylfL5+u1HcIh/4HAACAAmX6//2o/9dtfuYWB6zdqP+N6Uq9bTj0PwAAABQo0/8fRP2/3k1Pvzdm3uTrd0hX6juGQ/8DAABAgTL9/2HU/y2HXDD31xHdp6ybrtR3Cof+BwAAgAJl+n961P/rb7xzk4V2Hd1qSLpS3zkc+h8AAAAKlOn/j6L+3+DWXyYc0nn7YxqkK/VdwqH/AQAAoECZ/p8R9f+GK7Y+aOz5/1x0W7pS3zUc+h8AAAAKlOn/j6P+32jJRmfM/2L/dx5MV+q7hUP/AwAAQIEy/T8z6v9WD792deOthm26TLpS3z0c+h8AAAAKlOn/T6L+3/juJRotNfOEtnenK/U9wqH/AQAAoECZ/v806v9Nlnn9pwW1u0Y1TFfqe4ZD/wMAAECBMv3/WdT/m9Z/n3LnkdVvzdKV+l7h0P8AAABQoEz/fx71/2ZPb7JBl6dfbPJEulJvFw79DwAAAAXK9P8XUf9vvuGgSxe+tfOhG6cr9b3Dof8BAACgQJn+/zLq/y2u3fWk2eeMeGJ4ulLfJxz6HwAAAAqU6f+vov7fctCA9nc0a/3NBelKfd9w6H8AAAAoUKb/v476v/XWj9174HNzG66TrtTbh0P/AwAAQIEy/f9N1P9bnX1Cw/2nbtj/f1ip7xcO/Q8AAAAFyvT/t1H/bz3p3u9vXeyH629NV+r7h0P/AwAAQIEy/f9d1P/bvHPtq3OP22nKQ+lKvUM49D8AAAAUKNP/30f9v22P/detTxjUaoV0pd4xHPofAAAACpTp/x+i/m/z1+eDD7uz2TEj05X6AeHQ/wAAAFCgTP//GPX/djuuffy9fWZetHW6Uj8wHPofAAAACpTp/1lR/29/4Grt5jXt9c5G6Ur9oHDofwAAAChQpv9/ivp/h58+uHPxV8Ztemm6Uu8UDv0PAAAABcr0/89R/7fddfBpT2zUru2W6Uq9czj0PwAAABQo0/+/RP2/4z/7XtN+9pBRV6Ur9YPDof8BAACgQJn+nx31/07fn/bIysOb/zYoXal3CYf+BwAAgAJl+v/XqP933n/8gd/s+2WTNdKV+iHh0P8AAABQoEz/z4n6f5fnF/rtwY59D703Xal3DYf+BwAAgAJl+v+3qP93PfOlFdpe/tgTjdOV+qHh0P8AAABQoEz/z436f7cT52/Z5KcVvlkxXakfFg79DwAAAAXK9P/vUf/v/t42U7/ebFrDx9OV+uHh0P8AAABQoEz//xH1/x5XfnPK58+NWvKgdKXeLRz6HwAAAAqU6f95Uf/vud5Gw5du1u3HOelK/Yhw6H8AAAAoUKb//4z6f6/tmjy4yzlTHvs8Xal3D4f+BwAAgAJl+v+vqP/bXfT2/o/c2rjzjulK/chw6H8AAAAoUKb/50f9v3fTbr/88PTwZV5PV+pHhUP/AwAAQIEy/b8g6v997r9judWO7PjzyelK/ehw6H8AAAAoUKb//476f9+JN2zarrbgtr7pSv2YcOh/AAAAKFCm//+J+r/9wl3efHRmm10/TFfqx4ZD/wMAAECB/s/932ChqP/3W2batpO2mtS6W7pSPy4c+h8AAAAKlOn/haP+3//upT/Y/IsG055LV+o9wqH/AQAAoECZ/l8k6v8OT7f8o9v5Y897N12pHx8O/Q8AAAAFyvR/Ler/jvUfVrqyc48jz0hX6ieEQ/8DAABAgTL9X0X9f8C1hz3+8q5zWv6VrtR7hkP/AwAAQIEy/V+P+v/ADa/rvO2ILV47OF2pnxgO/Q8AAAAFyvR/g6j/D9r61jNPnjfy5n3TlfpJ4dD/AAAAUKBM/y8a9X+nQUeNvGHtLuf8kK7UTw6H/gcAAIACZfp/saj/O096eIfrNhu45GvpSv2UcOh/AAAAKFCm/xtG/X/w2afMOOGntj/2SFfqvcKh/wEAAKBAmf5fPOr/Lj32mr/D5bMeOyddqZ8aDv0PAAAABcr0/xJR/x/yzqXNJnds1fmjdKXeOxz6HwAAAAqU6f8lo/7vuuP2T1277/hl9ktX6qeFQ/8DAABAgTL93yjq/0P/+qPrUcN7/zw7Xan3CYf+BwAAgAJl+n+pqP8P++m5szeePeO2L9OV+unh0P8AAABQoEz/N476//ADq5uf32iVXXdPV+pnhEP/AwAAQIEy/b901P/dxtyxUptXvm69IF2p9w2H/gcAAIACZfp/maj/j1i12x9vNG0x7fB0pX5mOPQ/AAAAFCjT/8tG/d+9YZcPRvYZfN4e6Uq9Xzj0PwAAABQo0//LRf1/5IM3bHvcnXse+V26Uu8fDv0PAAAABcr0f5Oo/49aY6ORm02Y2vKYdKV+Vjj0PwAAABQo0/9No/4/euQ3Zz5zXNPXXkhX6meHQ/8DAABAgTL9v3zU/8dc/nbnqxabePM76Ur9nHDofwAAAChQpv9XiPr/2C2aPH7s1H7n9EpX6gPCof8BAACgQJn+XzHq/+N6vdTsyAFt7ngxXamfGw79DwAAAAXK9P9/ov7v8dpC84eNXrD7selKfWA49D8AAAAUKNP/K0X9f/zMbWa88HzH5U5JV+rnhUP/AwAAQIEy/b9y1P8nHD1/h9arDZ/9drpSHxQO/Q8AAAAFyvT/KlH/9/x935t7LtJ44mHpSv38cOh/AAAAKFCm/1eN+v/EfQafffPHU7rMT1fqF4RD/wMAAECBMv3fLOr/kw4e3/W1p7ot9X26Ur8wHPofAAAACpTp/9Wi/j/589Oe2qr7qJ/2TFfqF4VD/wMAAECBMv2/etT/p/w9ocXWF3S58dd0pT44HPofAAAACpTp/zWi/u+1y6kvvHrwyLP2T1fqF4dD/wMAAECBMv2/ZtT/p+63x5c3bb3FurulK/Uh4dD/AAAAUKBM/68V9X/v74YueuKXc175Il2pXxIO/Q8AAAAFyvR/86j/T+vbZsyWf/Q497h0pX5pOPQ/AAAAFCjT/2tH/d/nuT93fbH52CNeTVfql4VD/wMAAECBMv3fIur/06c9c9QVuzTYYka6Uh8aDv0PAAAABcr0/zpR/5/Rs8GF3a+bNHVAulK/PBz6HwAAAAqU6f91o/7vu+7UNY8ZusodndOV+rBw6H8AAAAoUKb/14v6/8zhyz5zdYcZu/+ZrtSvCIf+BwAAgAJl+r9l1P/9Llz302c37b3cj+lKfXg49D8AAAAUKNP/60f937/NrNqms8bPbp+u1K8Mh/4HAACAAmX6f4Oo/8+6r+voHr+2mvh8ulK/Khz6HwAAAAqU6f8No/4/u8n1O17falaXI9KV+tXh0P8AAABQoEz/bxT1/zkL3dJtSvu2S52ertSvCYf+BwAAgAJl+r9V1P8DHj/mvO2uHPjT1HSlfm049D8AAAAUKNP/G0f9f+6ot376z2n9bjwpXalfFw79DwAAAAXK9P8mUf8PXHmFRt+NnXjW5HSlPiIc+h8AAAAKlOn/TaP+P6/xhhs89XLTdaenK/Xrw6H/AeD/x96fRm89/v/+f+J8nZIpYzIl8xhCSeaESOYMyZTMs8wyJmN8DA2UoSSRIZIhCRmKDJnJUBTJlIzJ8F///Tv67WP/ju/ax/rutfZax4Xb7dKzt/f5WOfV+/tcXicAQIEy/d8q6v/LH//2jU7LvTvpvHSldns49D8AAAAUKNP/W0T9f8W6B5+yQqPdL/k1XakNCof+BwAAgAJl+n/LqP97D77zupnvXXVkl3SlNjgc+h8AAAAKlOn/raL+v/LqYQ+OenydLXdIV2p3hEP/AwAAQIEy/d866v8+rY7uvNPxX7/7RbpSuzMc+h8AAAAKlOn/NlH/X3XOqG87DLhxypLpSu2ucOh/AAAAKFCm/7eO+v/q189p9Hj7fTYdma7U7g6H/gcAAIACZfq/bdT/13zUab3pa/3bfWy6UhsSDv0PAAAABcr0/zZR/1979LWvLvPHdr1XSldqQ8Oh/wEAAKBAmf5vF/X/dT9tfcLuM4dOvjVdqd0TDv0PAAAABcr0/7ZR/1+/x79XPb31URu3Tldqw8Kh/wEAAKBAmf7fLur/voe/NOKHgyef1zxdqd0bDv0PAAAABcr0//ZR/98wc+E9Vu29xIDL0pXa8HDofwAAAChQpv93iPr/xmG9x8w66rfZbdKV2n3h0P8AAABQoEz/7xj1/39W33n/lZ9t3fi2dKU2Ihz6HwAAAAqU6f+dov6/qfF5PTt/NvDw69OV2v3h0P8AAABQoEz/7xz1/82jxvd/puFBz7ZMV2oPhEP/AwAAQIEy/d8+6v9b1lyi9derv/T70HSlNjIc+h8AAAAKlOn/XaL+v3Xga+8tN2GRFRZKV2oPhkP/AwAAQIEy/d8h6v9+1//0yw5D799phXSl9lA49D8AAAAUKNP/u0b937916xUeu/jEoaPTldrD4dD/AAAAUKBM/+8W9f+AM2c++sTxj0y5OV2pPRIO/Q8AAAAFyvT/7lH/D5y05t7tHz99083SldqocOh/AAAAKFCm/ztG/X/bpyudvvR7n3dfJ12pPRoO/Q8AAAAFyvT/HlH/337s5zd/2Wi13lekK7XHwqH/AQAAoECZ/t8z6v9Bv57c6snlLp+8aLpSW/BMQP0PAAAABcr0f6eo/wd3fmDKHhN32vj+dKX2eDj0PwAAABQo0/97Rf1/x6H/mbP6fd+dNy5dqY0Jh/4HAACAAmX6v3PU/3dO77LMd2dtPGD1dKX2RDj0PwAAABQo0/97R/1/17K/9l/25vdnD0tXak+GQ/8DAABAgTL9v0/U/3ePaNVzWucVG9fTldpT4dD/AAAAUKBM/+8b9f+QcY32H93yqcOXTldqT4dD/wMAAECBMv2/X9T/Q+tvjtn153OffTRdqY0Nh/4HAACAAmX6f/+o/++59aIVVvlh5u/bpSu1Z8Kh/wEAAKBAmf4/IOr/YS3H/vLj5mutMChdqS34TkD9DwAAAAXK9P+BUf/fu82l743d95qdrk1Xas+GQ/8DAABAgTL93yXq/+GX7tp6t757DF0/XamND4f+BwAAgAJl+v+gqP/ve+nWm/d8/Krth6QrtefCof8BAACgQJn+Pzjq/xEX73f6+ON3/+y/WKk9Hw79DwAAAAXK9P8hUf/ff+Lxe3/b6OtrVkxXai+EQ/8DAABAgTL9f2jU/w9MefjRpu+tc+Lj6UptQjj0PwAAABQo0/9do/4fufOqy+w8cWyLrdOV2ovh0P8AAABQoEz/Hxb1/4Pzps55ZLnzJ9yertReCof+BwAAgAJl+r9b1P8PfT99yoyz3u1/XbpSezkc+h8AAAAKlOn/w6P+f7jLuq1WvG/5szdJV2qvhEP/AwAAQIEy/X9E1P+PdPz6gRU6/7DILelKbWI49D8AAAAUKNP/R0b9P2rOGrvPvLnlzK3SldqkcOh/AAAAKFCm/4+K+v/RGSsfN+rnS0etka7UXg2H/gcAAIACZfr/6Kj/H+v26TU7tdxh78vTldpr4dD/AAAAUKBM/3eP+n/05FM3WGnzT1daKl2pTQ6H/gcAAIACZfr/mKj/Hz97xMTZP6zyx4PpSu31cOh/AAAAKFCm/3tE/T/mqJu/ebbvoyOfTldqb4RD/wMAAECBMv1/bNT/T3x4QONO+57ZqWm6UnszHPofAAAACpTp/+Oi/n9yUJ+Hd29/3/bbpyu1t8Kh/wEAAKBAmf4/Pur/p9bZsdPTA47/bHC6UpsSDv0PAAAABcr0/wlR/z+9+QUn/fDHK9dck67U3g6H/gcAAIACZfr/xKj/x141ru+qa1Unrpeu1N4Jh/4HAACAAmX6/6So/59pttQmHba+vcU96Urt3XDofwAAAChQpv9Pjvp/3F2TJj8+85AJVbpSey8c+h8AAAAKlOn/U6L+f3b0z99P7/1L/ybpSu39cOh/AAAAKFCm/0+N+n/8klsutczBW579WLpS+yAc+h8AAAAKlOn/06L+f+6e7m/f8+wbizRKV2ofhkP/AwAAQIEy/X961P/PrzZk0y5HLTXzgXSl9lE49D8AAAAUKNP/Z0T9/8JiA5os3PDuUc+kK7WPw6H/AQAAoECZ/j8z6v8Jj3T7ec5nR+y9WrpSmxoO/Q8AAAAFyvT/WVH/v9jiu/0emPD3Sjc1aNCg4f+6UvskHPofAAAACpTp/55R/780YINRB63e7o9N05Xap+HQ/wAAAFCgTP+fHfX/y9ctfePiF980ct10pfZZOPQ/AAAAFCjT/+dE/f/KVu+f8e/Q/Tr1Tldqn4dD/wMAAECBMv1/btT/E89Y5P35+6612/HpSm1aOPQ/AAAAFCjT/+dF/T9p4gtbLNp35ojX0pXa9HDofwAAAChQpv/Pj/r/1U/+WL7rD3v8/Um6UvsiHPofAAAACpTp/wui/n+tx3a/P7z5Nav0SldqX4ZD/wMAAECBMv1/YdT/k3+5rssvLVc8YG66UpsRDv0PAAAABcr0/0VR/7++V8fH6z+/P3rvdKU2Mxz6HwAAAAqU6f9eUf+/cchpt+x387nTdk1Xal+FQ/8DAABAgTL9f3HU/29OG3P2XZ2fWmhmulL7Ohz6HwAAAAqU6f9Lov5/q9kzO4y7b6czD09XarPCof8BAACgQJn+vzTq/yl3nT9kr7Muv+nvdKX2TTj0PwAAABQo0/+XRf3/9ugdLm+23MYvz05Xagt+pv8BAACgQJn+vzzq/3eWvPLIbyZ+t+5u6Urt23DofwAAAChQpv+viPr/3UFbPP/oe6ef8mK6UvsuHPofAAAACpTp/95R/7+3ztw1d2z0yA090pXa9+HQ/wAAAFCgTP9fGfX/+5tPbLj88atNPT1dqf0QDv0PAAAABcr0f5+o/z+4aslpXz3+edt30pXaj+HQ/wAAAFCgTP9fFfX/h5M/af/F0EV2+yVdqc0Jh/4HAACAAsX93/B//OR/6f+ro/7/6Oxm9za5+KURB6YrtZ/Cof8BAACgQJnP/6+J+v/jo5r32WX1E//eMV2pzQ2H/gcAAIACZfr/2qj/p3741TFjJty/ypfpSu3ncOh/AAAAKFCm/6+L+v+Tjvu/9P1nrQ84NV2pLXgmgP4HAACAAmX6//qo/z+dc9O6qzX8bfTr6Urt13DofwAAAChQpv/7Rv3/2Yz7qo5HHTTt43Sl9ls49D8AAAAUKNP/N0T9/3m3U2Y89ezAhc5NV2q/h0P/AwAAQIEy/X9j1P/TRk4+ssPBR535QrpS+yMc+h8AAAAKlOn//0T9P32FxS5/vPfQm45IV2rzwqH/AQAAoECZ/r8p6v8vGm46ZPrMJV4+J12p/RkO/Q8AAAAFyvT/zVH/f/nkbzsss/Xkdd9LV2rzw6H/AQAAoECZ/r8l6v8ZG7Sftvta+5xycLpS+ysc+h8AAAAKlOn/W6P+n3njZQ2f/uPGG+anK7W/w6H/AQAAoECZ/u8X9f9XVzy55g8Dtpv6XbpS+ycc+h8AAAAKlOn//lH/f71dr+dXbf9v273Sldq/4dD/AAAAUKBM/w+I+n/W+SOPWWnDTj9ukK5UCw79DwAAAAXK9P/AqP+/ee6EPrN/v27Jq9KVKvyO/gcAAIASZfr/tqj/Z7+7973P9m9xyJ3pStUwHPofAAAACpTp/9uj/v/2lH7tO+3x5dht05Vq4XDofwAAAChQpv8HRf3/3V9rzVjhwF5zR6Ur1SLh0P8AAABQoEz/D476//sOX1Qzrxm/7LLpSlULh/4HAACAAmX6/46o/3/Y98N1R81ususi6Uq14AsA9D8AAAAUKNP/d0b9/+Os1V7aaau37r03Xanq4dD/AAAAUKBM/98V9f+cXz87bOcpG767SrpSLXi9/gcAAIACZfr/7qj/f+rcdPwjS8ze8tl0pWoUDv0PAAAABcr0/5Co/+ce2uKOGSe3P3JEulItFg79DwAAAAXK9P/QqP9/nj7jwhVH9b6kcbpSLfiZ/gcAAIACZfr/nqj/fznzwE/2HNl0Up90pVo8HPofAAAACpTp/2FR//866cbtxp/20XprpyvVEuHQ/wAAAFCgTP/fG/X/b5/ev/q3S59z4ebpSrVkOPQ/AAAAFCjT/8Oj/v/92JP+bjp5zOAb05VqqXDofwAAAChQpv/vi/r/jzWfPXiVj0/+8Yl0pVo6HPofAAAACpTp/xFR/88beO7YH6uRSy6frlRNwqH/AQAAoECZ/r8/6v8/r9/ptrE9Gh7SMF2pFnS//gcAAIACZfr/gaj/57e+4tzdnp4w9q50pVo2HPofAAAACpTp/5FR//81bKsPlx3ebe5G6Uq1XDj0PwAAABQo0/8PRv3/9+pz2k674M5l+6Yr1YJnAuh/AAAAKFCm/x+K+v+fxq+uPHrlzXYdmK5UK4RD/wMAAECBMv3/cNT//45afN6ur8y5d5t0pVoxHPofAAAACpTp/0f+Z/9XDTZq+dXrzRu/e2m6UjUNh/4HAACAAmX6f1TU/wv1+2aR7f56dcs105VqpXDofwAAAChQpv8fjfq/4WXvrH3CoO5HbpGuVM3Cof8BAACgQJn+fyzq/4XbLP/KwB2GXdIvXalWDof+BwAAgAJl+n901P+L3D/82BcOazOpWbpSrRIO/Q8AAAAFyvT/41H/15Y+svdml85b78l0pVo1HPofAAAACpTp/zFR/1eLHHrPMdO7XPhwulKtFg79DwAAAAXK9P8TUf/Xnx3cod+2/QYvka5Uq4dD/wMAAECBMv3/ZNT/i/7Z+YubJk8fMD1dqRa8Rv8DAABAgTL9/1TU/412uLrBkUs3P2/ndKVaIxz6HwAAAAqU6f+no/5fbP/H1tjytL4b75+uVC3Cof8BAACgQJn+Hxv1f+Mfek54eWTnyb+lK9Wa4dD/AAAAUKBM/z8T9f/iF75y9OBRb/c+P12p1gqH/gcAAIACZfp/XNT/S7y80KWnnLxs9w/TlWrtcOh/AAAAKFCm/5+N+n/Jt7e5q+0S4zZ9M12p1gmH/gcAAIACZfp/fNT/Sx33906Tplw45eR0pVo3HPofAAAACpTp/+ei/l96vQvGt9uqz9AP0pVqvXD8z/6/5P/aWwYAAAD+mzL9/3zU/01uGnfYm7M77NQzXanWD4fP/wEAAKBAmf5/Ier/Za7sc+Ht18xa4ah0pdogHPofAAAACpTp/wlR/y/bbsc7jjtw/d+fS1eqDcOh/wEAAKBAmf5/Mer/5R76ebtWe4x+ds90pdooHPofAAAACpTp/5ei/l9+uS0/ea5/z8N/SFeqjcOh/wEAAKBAmf5/Oer/FRos9fctv09tPC9dqTYJh/4HAACAAmX6/5Wo/1d8etLqx27YbPah6UrVMhz6HwAAAAqU6f+JUf83/WflsUdv+/yAC9OVatNw6H8AAAAoUKb/J0X9v1L7Tw++cXqD8z5LV6rNwqH/AQAAoECZ/n816v9me3997ouXPrTxpHSl2jwc+h8AAAAKlOn/16L+X3n2Gre1PuzUySemK1WrcOh/AAAAKFCm/ydH/b/KuTe3PWmHub2/TleqLcKh/wEAAKBAmf5/Per/VV844MM7B7Xqvku6Um0ZDv0PAAAABcr0/xtR/6/2/qnzXvtr8Kb7pivVVuHQ/wAAAFCgTP+/GfX/6ieNWLlN865T5qQrVetw6H8AAAAoUKb/34r6v/kdje945ZXhQzumK1WbcOh/AAAAKFCm/6dE/b/GWq9fuMXKPXaala5UW4dD/wMAAECBMv3/dtT/LTb9/bAjLpi4wr/pStU2HPofAAAACpTp/3ei/l/zms3G3zy80e+HpSvVNuHQ/wAAAFCgTP+/G/X/Wk0vX33i07c8OyVdqdqFQ/8DAABAgTL9/17U/2sP2eXvbXoccPiZ6Uq1bTj0PwAAABQo0//vR/2/zpiLPzm1mt+4e7pSbRcO/Q8AAAAFyvT/B1H/r7v4U9sN+rjt7JfTlWr7cOh/AAAAKFCm/z+M+n+93U68bcD0eWd3SleqHcKh/wEAAKBAmf7/KOr/9ec+eO6J27bp/2O6Uu0YDv0PAAAABcr0/8dR/2/wVf+Dtz+s34Q/0pVqp3DofwAAAChQpv+nRv2/Ydd9xk6+tEuLQ9KVaudw6H8AAAAoUKb/P4n6f6M3vly5/6BXT3w/Xanah0P/AwAAQIEy/f9p1P8bn7X2vO47NL7mrHSl2iUc+h8AAAAKlOn/z6L+3+SI1T/ctPmwz45OV6oO4dD/AAAAUKBM/38e9X/Ljz9qO+Gv7ts/n65Uu4ZD/wMAAECBMv0/Ler/TV9ZacgLK9/Z6YJ0pdotHPofAAAACpTp/+lR/2920ec7bPZKt5EfpSvV7uHQ/wAAAFCgTP9/EfX/5sfPPPKY4XP+eCNdqTqGQ/8DAABAgTL9/2XU/63eWfPyfhdsttJJ6Uq1Rzj0PwAAABQo0/8zov7fYsf/rPl6j5F7T0tXqj3Dof8BAACgQJn+nxn1/5bzuzy/3dMnj9opXak6hUP/AwAAQIEy/f9V1P9b/XjytBM+njDzgHSl2isc+h8AAAAKlOn/r6P+b33AAw0HVg0X+T1dqTqHQ/8DAABAgTL9Pyvq/zZNzrt38NIfnf1WulLtHQ79DwAAAAXK9P83Uf9v/cD49qdMbtr/jHSl2icc+h8AAAAKlOn/2VH/tx3f+5i2I8dMOCZdqfYNh/4HAACAAmX6/9uo/7ep7dxn0mnntHglXan2C4f+BwAAgAJl+v+7qP/b9f9p3ZtOnn3iHulKtX849D8AAAAUKNP/30f9v+3GrV86ctSG13yTrlQLvhNQ/wMAAECBMv3/Q9T/2229xIwtp/T+7J90pTowHPofAAAACpTp/x+j/t/+8teql5dov33XdKXqEg79DwAAAAXK9P+cqP93WP+2qafNHt/pq3SlOigc+h8AAAAKlOn/n6L+3/HmrltfvlWvke3TlergcOh/AAAAKFCm/+dG/b9Tnx5NPzjwrT/2S1eqQ8Kh/wEAAKBAmf7/Oer/nbe968+1rmmy0k/pSnVoOPQ/AAAAFCjT/79E/d/+4WUOubj/dXtflK5UC54JqP8BAACgQJn+/zXq/12Wf/fJ6/boNOrzdKU6LBz6HwAAAAqU6f/fov7vsNAPAz/c8MuZE9OVqls49D8AAAAUKNP/v0f9v+vY9S7Y8PcWi5yQrlSHh0P/AwAAQIEy/f9H1P+7/fvn5y2rAxa6Ml2pjgiH/gcAAIACZfp/XtT/u+/SbttPPr5l2lrpSnVkOPQ/AAAAFCjT/39G/d9xn2qVq55uO7pVulIdFQ79DwAAAAXK9P/8qP/3+Pa5fy7oMf+A/6Qr1dHh0P8AAABQoEz//xX1/57nndGt+QU9Vlk1Xam6h0P/AwAAQIEy/f931P+dJox+5p3hw/8en65Ux4RD/wMAAECBMv3/T9T/e33Qd3CfVxqNuC9dqXqEQ/8DAABAgTL9/2/U/51P3u3is1aeuNti6Up1bDj0PwAAABTof9//9QZR/+997tL/XvVXq7aPpCvVceHQ/wAAAFCgTP8vFPX/Pi+8v+oFzedO/S8avzo+HPofAAAACpTp/4ZR/+/7/nftWu7Q9YZaulKdEA79DwAAAAXK9P/CUf/vd9IGn30yaPApw9OV6sRw6H8AAAAoUKb/F4n6f/9/BvTqc2mDdTdMV6qTwqH/AQAAoECZ/q9F/X9A+26Dzjrs+ZevTleqk8Oh/wEAAKBAmf6vov4/cO/u45pve+pNd6Qr1Snh0P8AAABQoEz/16P+7zJ7yOHvTH/ozHbpSnVqOPQ/AAAAFCjT/4tG/X/QQ6fN/+D3ngutnK5Up4VD/wMAAECBMv3fKOr/g5cbs9JaG46e9lS6Up0eDv0PAAAABcr0/2JR/x/S4Lo2p+3RbPRD6Up1Rjj0PwAAABQo0/+No/4/9OmOH1/ef+oBi6cr1Znh0P8AAABQoEz/Lx71f9f1/jj/w2s6rHJJulKdFQ79DwAAAAXK9P8SUf8fdtN2AzY8sM/fLdKVqmc49D8AAAAUKNP/S0b93+3KRZ66eKv1R2yZrlRnh0P/AwAAQIEy/b9U1P+Ht3vh0Otmz9qtf7pSnRMO/Q8AAAAFyvT/0lH/H/HGEZ+ducSybTdOV6pzw6H/AQAAoECZ/m8S9f+RZ93b7pIpb0+9IV2pzguH/gcAAIACZfp/maj/jzpi0KrvjrrwhgHpSnV+OPQ/AAAAFCjT/8tG/X/0x4f8u+7J405pm65UF4RD/wMAAECBMv2/XNT/3XebdfiFpzVfd0y6Ul0YDv0PAAAABcr0//JR/x8zd5NxN4yc/vJy6Up1UTj0PwAAABQo0/8rRP3f46vlBk2d3PmmhdOVqlc49D8AAAAUKNP/K0b9f2zXt3utt3TfM+9OV6qLw6H/AQAAoECZ/m8a9f9xTRt8vNHYiQ8sn65Ul4RD/wMAAECBMv2/UtT/xw95uc3nxzbq+ES6Ul0aDv0PAAAABcr0f7Oo/08Y89dK19aHr3ZXulJdFg79DwAAAAXK9P/KUf+fuHjb+edO7fFvw3Slujwc+h8AAAAKlOn/VaL+P+mOqw5d8+X5Y/qmK9UV4dD/AAAAUKBM/68a9f/Ja+311FvN2nbZKF2peodD/wMAAECBMv2/WtT/p2x61oArzr9l4W3SlerKcOh/AAAAKFCm/1eP+v/Uax49/5x7D/hiYLpS9QmH/gcAAIACZfq/edT/p/U/44uzd3zoxjXTleqqcOh/AAAAKFCm/9eI+v/0jUc36D341NMvTVeqq8Oh/wEAAKBAmf5vEfX/GVv3XWPK38+v3S9dqa4Jh/4HAACAAmX6f82o/8+8fLcJLdZo8OIW6Up1bTj0PwAAABQo0/9rRf1/VpM/jz6v3eDrn0xXquvCof8BAACgQJn+Xzvq/54PtLv0mmldT2qWrlTXh0P/AwAAQIEy/b9O1P9nj6/u+uySuW2WSFeqvuHQ/wAAAFCgTP+vG/X/ObXndtq4a6uPHk5XqhvCof8BAACgQJn+Xy/q/3N3XOar9TvOeuCqdKW6MRz6HwAAAAqU6f/1o/4/b/67i3zcb/2OG6Qr1X/Cof8BAACgQJn+3yDq//N//GHtvr/1WW3bdKW6KRz6HwAAAAqU6f8No/6/4ID1Xrlogw7/3pmuVDeHQ/8DAABAgTL9v1HU/xe+ctux67SeOmbZdKW6JRz6HwAAAAqU6f+No/6/6KKuvd/7tlmXUelKdWs49D8AAAAUKNP/m0T93+v4Hvdceu3ohe9NV6p+4dD/AAAAUKBM/7eM+v/id+7qcEaXnl8skq5U/cOh/wEAAKBAmf7fNOr/SyauuOGBj/S98dl0pRoQDv0PAAAABcr0/2ZR/196xpRJw07qfPoq6Uo1MBz6HwAAAAqU6f/No/6/rMe3s35afPrajdOV6rZw6H8AAAAoUKb/W0X9f/knGy/W8K3mL45IV6rbw6H/AQAAoECZ/t8i6v8r9rrz/oNfH3f92ulKNSgc+h8AAAAKlOn/LaP+7/3Lwbvd3+TCk/qkK9XgcOh/AAAAKFCm/7eK+v/KaUcf/8/pb7e5MV2p7giH/gcAAIACZfq/ddT/fQ4Zdu0SDy770ebpSnVnOPQ/AAAAFCjT/22i/r9qtXNaNura/ZPP0pXqrnDofwAAAChQpv+3jvr/6ntGvf7nJcO2vTBdqe4Oh/4HAACAAmX6v23U/9c8cu13D01rfPyJ6Uo1JBz6HwAAAAqU6f9tov6/drFOSx7W7tWrJqUr1dBw6H8AAAAoUKb/20X9f92Afx+q1ujy/C7pSnVPOPQ/AAAAFCjT/9tG/X99i633/PXvfs2/TleqYeHQ/wAAAFCgTP9vF/V/360WPvnuwW3OmpOuVPeGQ/8DAABAgTL9v33U/zdc99IN++4479Z905VqeDj0PwAAABQo0/87RP1/4+Sdzxh+b8OvZ6Ur1X3h0P8AAABQoEz/7xj1/3/O7n3j/udPqDqmK9WIcOh/AAAAKFCm/3eK+v+mo8aPatDs5H0PS1eq+8Oh/wEAAKBAmf7fOer/mz88b7+fXx752L/pSvVAOPQ/AAAAFCjT/+2j/r+l42s/3zd1sz/PTFeqkeHQ/wAAAFCgTP/vEvX/rXOWaHJofc7KU9KV6sFw6H8AAAAoUKb/O0T9329G602XOrZb55fTleqhcOh/AAAAKFCm/3eN+r9/t5/e/mvsnQ91T1eqh8Oh/wEAAKBAmf7fLer/Ac3WPPuPB9t/snO6Uj0SDv0PAAAABcr0/+5R/w+8a+YtjU/vve30dKUaFQ79DwAAAAXK9H/HqP9vG/3544c32fD439KV6tFw6H8AAAAoUKb/94j6//YlV+oy8vXZV+2frlSPhUP/AwAAQIEy/b9n1P+DBj3w++9vnfP8h+lKNToc+h8AAAAKlOn/TlH/D17n5OUXWXxM8/PTlerxcOh/AAAAKFCm//eK+v+OzbtssfdJTc86OV2pxoRD/wMAAECBMv3fOer/O6/6z/tDH/no1jfTleqJcOh/AAAAKFCm//eO+v+u81vt17VLi697pivVk+HQ/wAAAFCgTP/vE/X/3c/9Ourha7+sPkhXqqfCof8BAACgQJn+3zfq/yHvvnnj/G877ftculI9HQ79DwAAAAXK9P9+Uf8PPaXRGYu2vu6xo9KVamw49D8AAAAUKNP/+0f9f89fY9/eb4Mmf/6QrlTPhEP/AwAAQIEy/X9A1P/DOly06V2/vbXynulKNS4c+h8AAAAKlOn/A6P+v3ffXZv80q9X50PTlerZcOh/AAAAKFCm/7tE/T981qU/1zuOf2heulKND4f+BwAAgAJl+v+gqP/vG7lfl4VPv3DzM9KVasF3Auh/AAAAKFCm/w+O+n/ECrc+PufBce+8la5Uz4dD/wMAAECBMv1/SNT/9zd8+JZ7Xl+2zyvpSvVCOPQ/AAAAFCjT/4dG/f/Ak8ef3aXJ2z2OSVeqCeHQ/wAAAFCgTP93jfp/5AZT31988c4tv0lXqhfDof8BAACgQJn+Pyzq/wdvXHWLf9/q+8Ye6Ur1Ujj0PwAAABQo0//dov5/6Ip1l3/gkea3df1//n1CtFK9HA79DwAAAAXK9P/hUf8/vN303w86afoF/6Qr1YJnAup/AAAAKFCm/4+I+v+RNdc49eBrmzVqn65UE8Oh/wEAAKBAmf4/Mur/UQO/vv7+LlNnfZWuVJPCof8BAACgQGn/N4r+a/2oqP8fvf7Tkf+07vnMT+lK9Wo49D8AAAAUKPP5/9FR/z/WeuW9lvh29GH7pSvVa+HQ/wAAAFCgTP93j/p/9LARPxz42/rLfZ6uVJPDof8BAACgQJn+Pybq/8dXP3XxYRvM+vWidKV6PRz6HwAAAAqU6f8eUf+PaXzAxj917HD3CelK9UY49D8AAAAUKNP/x0b9/8Som99s2K/PDhPTlerNcOh/AAAAKFCm/4+L+v/JX3c8sbqk6+Y/pivVW+HQ/wAAAFCgTP8fH/X/U537XP1r18HvdEpXqinh0P8AAABQoEz/nxD1/9OHjrvv7nat+hySrlRvh0P/AwAAQIEy/X9i1P9jp1/Qcd9pc3v8ka5U74RD/wMAAECBMv1/UtT/z5w5aXajv09teVa6Ur0bDv0PAAAABcr0/8lR/4+btNSif67x0BvvpyvVe+HQ/wAAAFCgTP+fEvX/s59uuf5DOza47fl0pVrwNwH9DwAAAAXK9P+pUf+PP/bn1w4b/PwFR6cr1Qfh0P8AAABQoEz/nxb1/3OvD1nh2/PbNvooXak+DIf+BwAAgAJl+v/0qP+fP6f7L03vnT/rgnSlWvA3Af0PAAAABcr0/xlR/79wdLf39nz5gGdOSleqj8Oh/wEAAKBAmf4/M+r/CR8NaD2+2S2HvZGuVFPDof8BAACgQJn+Pyvq/xf32KD/jHqj5XZKV6pPwqH/AQAAoECZ/u8Z9f9LP33Xc8WpE3+dlq5Un4ZD/wMAAECBMv1/dtT/L898f/+dx/a4+/d0pfosHPofAAAACpTp/3Oi/n/l8KXHPHLs8B0OSFeqz8Oh/wEAAKBAmf4/N+r/iSu/sMzofm/t8lS6Ui34fwL0PwAAABQo0//nRf0/6e5F5uzasck9K6cr1fRw6H8AAAAoUKb/z4/6/9XHt5uy7Abj5yyerlRfhEP/AwAAQIEy/X9B1P+vLfVHq2m/9WryULpSfRkO/Q8AAAAFyvT/hVH/Tx7c8eax3355UIt0pZoRDv0PAAAABcr0/0VR/7++7nWn79a6xVOXpCvVzHDofwAAAChQpv97Rf3/Rqsxe6/S5brv+6cr1Vfh0P8AAABQoEz/Xxz1/5tXn/boj9d2WnzLdKX6Ohz6HwAAAAqU6f9Lov5/68zzr5h70pheN6Qr1axw6H8AAAAoUKb/L436f8qkZ3os9Mg5d26crlTfhEP/AwAAQIEy/X9Z1P9vf3rlrge89dFrbdOVanY49D8AAAAUKNP/l0f9/86xOwy7d/GmGwxIV6pvw6H/AQAAoECZ/r8i6v93f51b+7tJ76OXS1eq78Kh/wEAAKBAmf7vHfX/e523+HrJ19tfNiZdqb4Ph/4HAACAAmX6/8qo/98/dMmXD3lw9vt3pyvVD+HQ/wAAAFCgTP/3ifr/g+kT1xpx+oatF05Xqh/Dof8BAACgQJn+vyrq/w+HNbvkwWPn7LJWulLNCYf+BwAAgAJl+v/qqP8/Wv2To7qN3eyeK9OV6qdw/P/7f4n/y28ZAAAA+G/K9P81Uf9/3PirnRebeuec/6Qr1dxw+PwfAAAACpTp/2uj/p86qvnd8+rdmrRKV6qfw6H/AQAAoECZ/r8u6v9P1rxpoSHNJhw0Pl2pfgmH/gcAAIACZfr/+qj/Px24/5f7vNzwqVXTlerXcOh/AAAAKFCm//tG/f/Z9ae8ULt35PeLpSvVb+HQ/wAAAFCgTP/fEPX/563va/7b+Scvfl+6Uv0eDv0PAAAABcr0/41R/097abFhjQb36/VfNH71Rzj0PwAAABQo0///ifp/+sWTd/1zxy53PpKuVPPCof8BAACgQJn+vynq/y9O/K3HQ2vMe214ulL9GQ79DwAAAAXK9P/NUf9/OWXTKw77u80GtXSlmh8O/Q8AAAAFyvT/LVH/z9j5srWqacOOvjpdqf4Kh/4HAACAAmX6/9ao/2fOa//yr+26X7ZhulL9HQ79DwAAAAXK9H+/qP+/+r7X13d3ffX9dulK9U849D8AAAAUKNP//aP+/7rLk7V9L2nc+o50pfo3HPofAAAACpTp/wFR/89a9oS7Dzxu+re3pSv1BYf+BwAAgAJl+n9g1P/fjBi587DRzRdrk67Uw+/ofwAAAChRpv9vi/p/9rh+R/30bt9uLdOVesNw6H8AAAAoUKb/b4/6/9v63pc0XLTz+OvTlfrC4dD/AAAAUKBM/w+K+v+7W79ofvDyb/+2ULpSXyQc+h8AAAAKlOn/wVH/f99yrRfun7TsikPTlXotHPofAAAACpTp/zui/v9hm9W+/GfEuJ1Hpyv1Khz6HwAAAAqU6f87o/7/8dIPF1qi54VDVkhX6gu+AFD/AwAAQIEy/X9X1P9zBjUduPhNfd4ama7UF7xe/wMAAECBMv1/d9T/P63z2QX/7tVhsyXTlXqjcOh/AAAAKFCm/4dE/T938xmHPLDJrGNWSlfqi4VD/wMAAECBMv0/NOr/n69q8eRBc9e/Ymy6Um8cDv0PAAAABcr0/z1R///S7MamC/84+vXW6Up98XDofwAAAChQpv+HRf3/610H/jmnVc+Nbk1X6kuEQ/8DAABAgTL9f2/U/7+NPmnqPftNPfeydKW+4JmA+h8AAAAKlOn/4VH//77k/Vt3uaHZwOYNPt7k/7NSXyoc+h8AAAAKlOn/+6L+/6PjuYP3G/j8t/V0pb50OPQ/AAAAFCjT/yOi/p8359mL79qlwWLD0pV6k3DofwAAAChQpv/vj/r/zxlXdPtl7Ye6PZqu1Bd0v/4HAACAAmX6/4Go/+d32+mZ+rxTxy+drtSXDYf+BwAAgAJl+n9k1P9/TZ6zStcZc38blK7UlwuH/gcAAIACZfr/waj//z57q38ebtNqxe3Slfry4dD/AAAAUKBM/z8U9f8/Ry3++fyDBu+8frpSXyEc+h8AAAAKlOn/h6P+//fDV7dd9IquQ65NV+orhkP/AwAAQIEy/f/I/+z/eoNF17j86qOHv7VZulJvGg79DwAAAAXK9P+oqP8XevTrI88f32Ozm9OV+krh0P8AAABQoEz/Pxr1f8N7P91hk88nHnNFulJvFg79DwAAAAXK9P9jUf8vvMrKQz5duNEV66Qr9ZXDof8BAACgQJn+Hx31/yJ9RzS8crVbXr8/XamvEg79DwAAAAXK9P/jUf/Xtjh1Ws8XDtho0XSlvmo49D8AAAAUKNP/Y6L+r5of8PwaQ+afu3q6Ul8tHPofAAAACpTp/yei/q/fdvOab/dqO3BculJf8DcB/Q8AAAAFyvT/k1H/L/rZjn3ev6HToH3SlfqC1+h/AAAAKFCm/5+K+r9R9z7HrL3fdRf9nK7U1wiH/gcAAIACZfr/6aj/FzttXPvTW7VYf0a6Um8RDv0PAAAABcr0/9io/xu/esG9l/345cQO6Up9zXDofwAAAChQpv+fifp/8YMmVR/N7XXpq+lKfa1w6H8AAAAoUKb/x0X9v8QXS83YYJPxRxyXrtTXDof+BwAAgAJl+v/ZqP+X/G3Ll3rt1WSLi9OV+jrh0P8AAABQoEz/j4/6f6k9f173+pveeu/TdKW+bjj0PwAAABQo0//PRf2/9OI9Pz6354bDj01X6uuFQ/8DAABAgTL9/3zU/03GPNbm2hGzO7yUrtTXD4f+BwAAgAJl+v+FqP+XGXL1Sp9Par/M2+lKfYNw6H8AAAAoUKb/J0T9v2zTzvM3Wr73z6elK/UNw6H/AQAAoECZ/n8x6v/lrvn70HMWbfr0X+lKfaNw6H8AAAAoUKb/X4r6f/lNt3nqinc/OrRbulLfOBz6HwAAAAqU6f+Xo/5fYa2FBrw1+pyldk9X6puEQ/8DAABAgTL9/0rU/yve8cr5ax435odv05V6y3DofwAAAChQpv8nRv3f9OPlP1u318mDJqcr9U3Dof8BAACgQJn+nxT1/0pHvNPu3SEjLzolXalvFg79DwAAAAXK9P+rUf83O+ubVS95oeH656Ur9c3Dof8BAACgQJn+fy3q/5XfaPnvmatNmDg1Xam3Cof+BwAAgAJl+n9y1P+rdB18+HoLd7u0S7pS3yIc+h8AAAAKlOn/16P+X/WrQ8dN/fzOI35NV+pbhkP/AwAAQIEy/f9G1P+rzT1y0A3jN9vii3SlvlU49D8AAAAUKNP/b0b9v/puw3tdePSc93ZIV+qtw6H/AQAAoECZ/n8r6v/mT9fmX35F4+F/piv1NuHQ/wAAAFCgTP9Pifp/jQYTVjrtoFc7HJSu1LcOh/4HAACAAmX6/+2o/1ssN6/NWm26L9M5Xam3DYf+BwAAgAJl+v+dqP/XfGj7jz+YMezn79OV+jbh0P8AAABQoEz/vxv1/1rtrj//unltnj4yXam3C4f+BwAAgAJl+v+9qP/XvnKPARevPe/QCelKfdtw6H8AAAAoUKb/34/6f52bTn9qw126LPVuulLfLhz6HwAAAAqU6f8Pov5fd70nDv1wYL8fzk5X6tuHQ/8DAABAgTL9/2HU/+uddMy/nww54Iy/05X6DuHQ/wAAAFCgTP9/FPX/+u8PXbVlr1tuPjxdqe8YDv0PAAAABcr0/8dR/2/wwsB2F6zW9pXd0pX6TuHQ/wAAAFCgTP9Pjfp/w3MP/+yqF+avMztdqe8cDv0PAAAABcr0/ydR/280+/te73ze49Qe6Uq9fTj0PwAAABQo0/+fRv2/8d4bDmq+8PC+L6Yr9V3Cof8BAACgQJn+/yzq/03aNxl31tGNPn4nXal3CIf+BwAAgAJl+v/zqP9b/vPB4X3GT9zm9HSlvms49D8AAAAUKNP/06L+3/TLFV+58qBWu7+WrtQXfCeA/gcAAIACZfp/etT/mx08Ze2eV8y97/h0pb57OPQ/AAAAFCjT/19E/b95p28XWWNG1796pSv1juHQ/wAAAFCgTP9/GfV/q983/urtNoNX/SRdqe8RDv0PAAAABcr0/4yo/7c45s4OV6/dYP+905X6nuHQ/wAAAFCgTP/PjPp/y88Pvuf8ec8/PjddqXcKh/4HAACAAmX6/6uo/7d67ejemww8dfrMdKW+Vzj0PwAAABQo0/9fR/3f+vRhx366y0MNdk1X6p3Dof8BAACgQJn+nxX1f5stz5nw0X49zzgiXakveCaA/gcAAIACZfr/m6j/t75h1Bob3DD65hfSlfo+4dD/AAAAUKBM/8+O+r/t7dc26PVjs1feS1fq+4ZD/wMAAECBMv3/bdT/26zR6YvrW01d55x0pb5fOPQ/AAAAFCjT/99F/d/usX93en+TDqfOT1fq+4dD/wMAAECBMv3/fdT/2zba+q615/bpe3C6Uj8gHPofAAAACpTp/x+i/t9u1YUvPf2m9T/eK12pHxgO/Q8AAAAFyvT/j1H/bz/8paMv22vWNt+lK/Uu4dD/AAAAUKBM/8+J+n+HJW55dosRy+5+YLpSPygc+h8AAAAKlOn/n6L+3/GJfbu+0vPt+35JV+oLngmg/wEAAKBAmf6fG/X/TkOPu+jm5S/868t0pX5IOPQ/AAAAFCjT/z9H/b/zSg/decSkcavumK7UDw2H/gcAAIACZfr/l6j/21+7yvbbvNt8/9fTlXrXcOh/AAAAKFCm/3+N+n+XzT7+dOKi0x8/NV2pHxYO/Q8AAAAFyvT/b1H/d1h72l+Djus8/dx0pd4tHPofAAAACpTp/9+j/t/1znVWO3V03wYfpyv1w8Oh/wEAAKBAmf7/I+r/3ab+8vSJu8yrbZWu1I8Ih/4HAACAAmX6f17U/7sfuflBAwa2mXFLulI/Mhz6HwAAAAqU6f8/o/7v2HPR8ybP6/fI5elK/ahw6H8AAAAoUKb/50f9v8ebb9y+/dpd9lkjXakfHQ79DwAAAAXK9P9fUf/vediF23Rv82rTB9OVevdw6H8AAAAoUKb//476v9PXT3/Uf0bjeUulK/VjwqH/AQAAoECZ/v8n6v+9fr7kjwlXDHuwabpS7xEO/Q8AAAAFyvT/v1H/d969Q7NND+q+59PpSv3YcOh/AAAAKND/vv8bNIj6f+99j1pn9/F3bvdfrNSPC4f+BwAAgAJl+n+hqP/3mXXPi08f3e3zIelK/fhw6H8AAAAoUKb/G0b9v+9fd8z8YeE51z6ertRPCMd/q//r/0fvGAAAAPjvyvT/wlH/79fhoPqqn292worpSv3EcPj8HwAAAAqU6f9Fov7f/93Zwzu8MHLN29OV+knh0P8AAABQoEz/16L+P+CUjXZ5fLWTX9g6XamfHA79DwAAAAXK9H8V9f+B56/QfXqvCf02SVfqp4RD/wMAAECBMv1fj/q/y3NvXbnMkIbnXJeu1E8Nh/4HAACAAmX6f9Go/w+6omGLFUZ/VHsgXamfFg79DwAAAAXK9H+jqP8P3u7F52Ye13RGo3Slfno49D8AAAAUKNP/i0X9f8gG/0wfteiYR1ZLV+pnhEP/AwAAQIEy/d846v9Db2yz8E7vnrPPM+lK/cxw6H8AAAAoUKb/F4/6v2vDa4auNGl2003TlfpZ4dD/AAAAUKBM/y8R9f9hT+654+zlN5x3U7pS7xkO/Q8AAAAFyvT/klH/dxt59hHP9uz9YO90pX52OPQ/AAAAFCjT/0tF/X/4Co9c1mlE+z3XTVfq54RD/wMAAECBMv2/dNT/R8xYpv7oXuO3G5yu1M8Nh/4HAACAAmX6v0nU/0d2e3fmjjf1+nz7dKV+Xjj0PwAAABQo0//LRP1/VMcfXlx+7lvXrpeu1M9f8Pv/d98tAAAA8H8i0//LRv1/9Jz11vlqkyYnXJOu1C8Ih/4HAACAAmX6f7mo/7sfdduV41pdt2aVrtQvDIf+BwAAgAJl+n/5qP+P+bBr971+7PTCPelK/aJw6H8AAAAoUKb/V4j6v8fkHrs0u+HLfo/9j382ilfqvcKh/wEAAKBAmf5fMer/Y8++a/g3+7U4p0m6Ur84HPofAAAACpTp/6ZR/x+3+RkLf/9H94eHpSv1S8Kh/wEAAKBAmf5fKer/468aPX21tYbtVU9X6peGQ/8DAABAgTL93yzq/xMG9X2uY/vGzZZOV+qXhUP/AwAAQIEy/b9y1P8nrrNbi6cGvDr/0XSlfnk49D8AAAAUKNP/q0T9f9LoPy/7oneXR7dLV+pXhEP/AwAAQIEy/b9q1P8nL9nuiCYH99tvULpS7x0O/Q8AAAAFyvT/alH/n9Ks2nGXrdvUr01X6leGQ/8DAABAgTL9v3rU/6fe9dzQMTPnfbV+ulLvEw79DwAAAAXK9H/zqP9PG9dgmycaNrzl5nSlflU49D8AAAAUKNP/a0T9f3r95Y/afzah52bpSv3qcOh/AAAAKFCm/1tE/X/Gsn/9sfSzJ6+xTrpSvyYc+h8AAAAKlOn/NaP+P3NE22ZfHjXyuSvSlf/3mYD6HwAAAAqU6f+1ov4/a5urnn7y4s2uXjRdqV8XDv0PAAAABcr0/9pR//e8dK+D9hg657j705X69eHQ/wAAAFCgTP+vE/X/2beedd7qE7q1G5eu1PuGQ/8DAABAgTL9v27U/+e0fPT271a/89PV05X6DeHQ/wAAAFCgTP+vF/X/uScesf2sRu0fbpOu1G8Mh/4HAACAAmX6f/2o/8+bcu+nK7/Xe6/b0pX6f8Kh/wEAAKBAmf7fIOr/818a9Ffnxzdsdn26Ur8pHPofAAAACpTp/w2j/r/g4kNWe+b42fNbpiv1m8Oh/wEAAKBAmf7fKOr/C7+f9ezXZ53z6NB0pX5LOPQ/AAAAFCjT/xtH/X9Rl026LnffmP0WSlfqt4ZD/wMAAECBMv2/SdT/vXZe7qIdJjatr5Cu1PuFQ/8DAABAgTL93zLq/4vnvX3nY8t99NXodKXePxz6HwAAAAqU6f9No/6/5Itj5vb/ucUtS6Yr9QHh0P8AAABQoEz/bxb1/6UHDV26e8sve45MV+oDw6H/AQAAoECZ/t886v/L9hy42aadO60xNl2p3xYO/Q8AAPz/2LvzcDvnc+HjSwzP2oaEFqWGGKKTU0JMQREnVWMNrSHnmIIgRCKa1FCkxFApMQQxJdRMzHNNQQwRMc8ziTEkhgQxvxfuxC8eOY+20T7X7/18/uh975217+zlus6Rr712NlBDFf3fIen//u9v9/CIQUfesmD5SnFqLPofAAAAaqii/1dI+v+Qncb/4aSB8xxxQvlKcVos+h8AAABqqKL/V0z6/9Dnlj52980e2HXl8pViSCz6HwAAAGqoov9XSvr/sFHzXLbm8geuvlj5SjE0Fv0PAAAANVTR/ysn/X/4no9vNnrC8GcPLl8pTo9F/wMAAEANVfT/Kkn//2WFWd8f2XbkEz3LV4ozYtH/AAAAUEMV/d8x6f8jBo6Yd7URLR1Hl68Uf4tF/wMAAEANVfT/qkn/DzjlwxV7nXXeHk+XrxRnxqL/AQAAoIYq+n+1pP//utiaj5/Wb+cj9y1fKc6KRf8DAABADVX0/+pJ/x95xVF737XDx3e8V75SnB2L/gcAAIAaquj/XyX9f1RzgxNWuHnVdluWrxTnxKL/AQAAoIYq+n+NpP8HLtz7qu2fO37PtcpXinNj0f8AAABQQxX9v2bS/0efe+0Wg1ptfuyY8pXivFj0PwAAANRQRf+vlfT/Ma8sN2znly8Zu1X5SnF+LPofAAAAaqii/zsl/X/s1h+sd0LHXq0+Kl8pLohF/wMAAEANVfT/2kn/H7fuvbve2uXWLcaXrxQXxqL/AQAAoIYq+v+/k/4f9O4cA5Y/tHHtxuUrxbBY9D8AAADUUEX/d076//jt//6L7icN+WxE+UpxUSz6HwAAAGqoov9/nfT/CU/1G3lK563bdi1fKS6ORf8DAABADVX0/zpJ/594369fv6/duxv8sXyluCQW/Q8AAAA1VNH/v0n6f3Cf/nP8anKHCx8pXykujUX/AwAAQA1V9P+6Sf+f1H7TSztOeO2JieUrxWWx6H8AAACooYr+Xy/p/5MHDN5o1PI/77hp+UpxeSz6HwAAAGqoov/XT/r/lKEX9xi62eF7rFO+UlwRi/4HAACAGqro/w2S/j+13e4D9xi4zpEvla8UV8ai/wEAAKCGKvp/w6T/T7vmyWVWGvT0HbuWrxRXxaL/AQAAoIYq+n+jpP+HzNl29B0b/7jdqPKV4upY9D8AAADUUEX//zbp/6ELLDX+2GWv2vPZ8pXimlj0PwAAANRQRf9vnPT/6WeObbPDxL7H9itfKa6NRf8DAABADVX0/yZJ/5+xSacBQ+YdOPaO8pXiulj0PwAAANRQRf9vmvT/38YdvmvPkRu32qV8pfh7LPofAAAAaqii/zdL+v/Mz25ab9XzX9xiz/KV4vpY9D8AAADUUEX//y7p/7M6/2nY3X0Wu/ah8pXihlj0PwAAANRQRf//Pun/sx+7e47jut/02bblK8WNseh/AAAAqKGK/t886f9zerR5vevV+7f9pHyluCkW/Q8AAAA1VNH/WyT9f+4+K45c8dGHNnijfKW4ORb9DwAAADVU0f9bJv1/3m0Tf3Fnyw8vXK98pRgei/4HAACAGqro/62S/j//sMUH3rb8AyvdVr5S3BKL/gcAAIAaquj/Lkn/X7D6qz2WmzDP49uXrxS3xqL/AQAAoIYq+v9/kv6/8GfPbtRt4PD+e5evFFNeE6D/AQAAoIYq+v9/k/4fdtxCl5642YE7PFq+UoyIRf8DAABADVX0/9ZJ/1/UuKDNvRuPXbpL+Upxeyz6HwAAAGqoov+3Sfr/4ut7jV9j0BKjPi5fKe6IRf8DAABADVX0/7ZJ/19yyeajd5t45NA3y1eKO2PR/wAAAFBDFf2/XdL/l847aJmTl92o32/LV4q7YtH/AAAAUEMV/b990v+XtfzumpNGXjPXpPKVYmQs+h8AAABqqKL/uyb9f/mVJ/x+93n3fnOL8pXi7lj0PwAAANRQRf/vkPT/Fedd2nfNPk9e16l8pRgVi/4HAACAGqro/x2T/r9yke6DR5+/QJex5SvFPbHofwAAAKihiv7fKen/q45+euXBVx86d6/ylWJ0LPofAAAAaqii/7sl/X/1ios8ulP3zu/cW75STHmf/gcAAIAaquj/nZP+v2bxn05q3zLunKfKV4r7YtH/AAAAUEMV/b9L0v/Xnvri/CMeXbrzPuUrxf2x6H8AAACooYr+3zXp/+ue73DFXSPeXmm78pXigVj0PwAAANRQRf93T/r/793e22SFtss9/mn5SvFgLPofAAAAaqii/3dL+v/63vf33r7f6f3Hla8UD8Wi/wEAAKCGKvp/96T/b7inZdCgs7bdYd3yleLhWPQ/AAAA1FBF//dI+v/GLjd0GHnziKVvL18pHolF/wMAAEANVfT/Hkn/3zT2gAdX26HVqJ3LV4pHY9H/AAAAUEMV/d8z6f+bP/jN271aXTS0d/lK8Vgs+h8AAABqqKL/eyX9P3yjg35w2nN79Hu4fKV4PBb9DwAAADVU0f97Jv1/y6sP3P+LjifO1b18pXgiFv0PAAAANVTR/72T/r91m/l/+eTLW755T/lK8WQs+h8AAABqqKL/90r6/7b1/mvOow798LpnyleKp2LR/wAAAFBDFf3/h6T/R0wcN+HALqt0ObB8pXg6Fv0PAAAANVTR/32S/r+961a/XarzOXO/W75STHlNgP4HAACAGqro/75J/9/x9NCLHjtpp3c2KV8pno1F/wMAAEANVfT/H5P+v/P+s486ePKoc35TvlI8F4v+BwAAgBqq6P+9k/6/q+8OvXq3m6Pzy+UrxfOx6H8AAACooYr+3yfp/5HLXXZP30f379RSvlK8EIv+BwAAgBqq6P99k/6/+69//PlhLTedMax8pXgxFv0PAAAANVTR//sl/T/q9A2bD3X/4aQby1eKMbHofwAAAKihiv7/U9L/9yw1YNziVz8036LlK8XYWPQ/AAAA1FBF/++f9P/oa1dZf7/zN976uNKRYuqm/wEAAKCGKvr/gKT/753rs/OP6DPwpvblK8WUnwmg/wEAAKCGKvr/wKT/71vw9iOenXex139avlK8Eov+BwAAgBqq6P9+Sf/ff1ar3ZcZ+WLz0PKV4tVY9D8AAADUUEX//znp/we6NLfpsOyP91uzfKV4LRb9DwAAADVU0f8HJf3/4Nj7ht8y8elTh5SvFK/Hov8BAACghir6/+Ck/x/6YNLQ4wf1vX9A+UoxLhb9DwAAADVU0f/9k/5/eKPl999l46uW+Vn5SvFGLPofAAAAaqii/w9J+v+R5//8zOqb/XyXs8tXijdj0f8AAABQQxX9f2jS/492W2eN+we+dths5SvF+Fj0PwAAANRQRf8flvT/Y733b3vqhHUemqd8pZgQi/4HAACAGqro/8OT/n/8nus/3XX5wztcWb5SvBWL/gcAAIAaquj/vyT9/8TRu3bp0W7rTseXrxRvx6L/AQAAoIYq+v+IpP+fXPGSG06fPOSMlcpXindi0f8AAABQQxX9PyDp/6cWP/6Ue07qMGnx8pXi3Vj0PwAAANRQRf//Nen/p0/dbJ9VOr87X//ylWJiLPofAAAAaqii/49M+v+Zlhee2LFLr63blK8Uk2LR/wAAAFBDFf1/VNL/z175k1WPOfSSmy4uXynei0X/AwAAQA1V9P/ApP+fO2/hhW5/ufH69eUrxfux6H8AAACooYr+Pzrp/+cXeerDlTve2lygfKX4IBb9DwAAADVU0f/HJP3/wlv77D/yuVX3O7N8pZgci/4HAACAGqro/2OT/n9x85uHrtbq41O/5UrxYSz6HwAAAGqoov+PS/p/TKdDhvfaYfP7f1S+UnwUi/4HAACAGqro/0FJ/4/9eO1tTrv5+GWuLl8pPo5F/wMAAEANVfT/8Un/v9T97U/vOqtll47lK8Unseh/AAAAqKGK/j8h6f+XH16p7Qr9Rh72LX8BQPFpLPofAAAAaqii/09M+v+Vu+ZcY/u2Oz90ZPlK8Vks+h8AAABqqKL/Byf9/+oBo54ZNOK8DsuUrxSfx6L/AQAAoIYq+v+kpP9f67jAPoMvf2f9BctXpn64/gcAAIAaquj/k5P+f73/c6fstEf7YTeUrzTjMfofAAAA6qii/09J+n/c4JduaD/X0M8vKl9ptopF/wMAAEANVfT/qUn/v/HLJbqMeHC7RVuXrzRnjkX/AwAAQA1V9P9pSf+/OfyYD08afduWB5evNGeJRf8DAABADVX0/5Ck/8fPusVCu8898zWLla80Z41F/wMAAEANVfT/0KT/J8zTY9U197x4zMrlK83ZYtH/AAAAUEMV/X960v9vDbvwidEX9Zj5hPKVZhGL/gcAAIAaquj/M5L+f/ua3da6d4PBvZctX2lO+Xj9DwAAADVU0f9/S/r/nTkvOnONwVscc1T5SrMlFv0PAAAANVTR/2cm/f/uAif23+2DybefUr7SnD0W/Q8AAAA1VNH/ZyX9P/HMTbqevHTHpVYpX2nOEYv+BwAAgBqq6P+zk/6f1H7MrbetdHaPq8pXmnPGov8BAACghir6/5yk/98b0G7J5cZ1O2r+8pXmXLHofwAAAKihiv4/N+n/94cu2qrbgHuenKl8pdk6Fv0PAAAANVTR/+cl/f9BuydeOHGL2Vc5q3yl2SYW/Q8AAAA1VNH/5yf9P3n72Tsft9aD6x9SvtKcOxb9DwAAADVU0f8XJP3/4VOjz+162tzDflK+0pwnFv0PAAAANVTR/xcm/f/Rfe8fvuInN3++XPlKc0r3638AAACooYr+H5b0/8d92ne7c7F+iw4qX2n+MBb9DwAAADVU0f8XJf3/ySsH3zHkV2O2bFu+0pw3Fv0PAAAANVTR/xcn/f/p1p1/2vPFJa+5qXylOV8s+h8AAABqqKL/L0n6/7N1D5xt1YOOGnNh+Upz/lj0PwAAANRQRf9fmvT/5+9e99Ld22w4c7N8pfmjWPQ/AAAA1FD0/yzJe45JfrnVV6O5QKPRaXzy/nh8mwWmfNAX/7Pj/u9M+rb5teYC084vf4uZGo1ZLvvGp/Ut/41hhpj6fFo/MmbtRvvGTOkz/8Iy03n8ic35F260b7QqPX7aD5g5Hr/gtp8s0r/RvjHbNx+/W/eeO3XbZ+qb8avNhdftOWH5RvtG85uP37PbXtv17LVTt3gz/rm0LHb5vkP6Nto3ZvnmP6nuPfvukbzZEmPxH7/VbuCXn883Hv+HPl377PyHqW/OHo9fIu6XHr/XtJ//HPH4JXss3Gb8XCMbsy447cMbvfv26tO1AQAAwH9aRf9P7dlGo9Mtyfuji//h/l9w2tmYXv/P/K89q+ma+ny+p/6P10o0fvDJ3r9+o/V1jeY3+3m3Xn336tm1R/sZ8FwAAAAAAAAAYKr4+n+r5F0jv15ne/zr15Cnmgs3GsULjcZMk7d6+aNn/pXf//PN/0Wff18vFQAAAIB8VLz+f+r3p8+g1/8vPO1sTO/1/7P+a89quqY+n+/p9f/xeTcXefHTwx9orNKY49u+P3+7vbr23KXbNN8CMFt83KJz3Pjyvo1VGq2//fv0t9tx12k/tIiPa3vA+5ue3nrdxlzf/Lgvv/++9GEAAAD8/6ai/6f2bKNx0J/TD4s5d/r2d+j/Raadjeh/AAAA4PtU0f9Tvy49nf7/R7/+v+i0s/F/9P9s/9wTAgAAAEoq+n/q68u/tf/nnvrmd+z/lrZf35ui1bQ3v1fNxWIuHnOJmEvGbBdzqZg/ifnTmD+L+fOYv4i5dMz/ivnLmPHdAc1lY8ZL8JvLxVw+ZoeYK8RcMeZKMVeOuUrMjjFXjblazNVj/irmGjHXjLlWzE4x14753zE7x/x1zHVi/ibmujHXi7l+zA1ibhhzo5i/jblxzE1ibhpzs5i/i/n7mJvH3CLmljG3itkl5v/E/N+YW8fcJua2MbeLuX3M+JGEzR1i7hhzp5jx8xabO8fcJeauMbvH3C3m7jF7xIyfwdjsGbNXzD1j9o65V8z4CYzNPjH7xvxjzL1jxk9ebO4bc7+Yf4q5f8wDYh4Ys1/M+L/h5kExD47ZP+YhMQ+NeVjMw2P+JeYRMQfE/GvMI2MeFXNgzKNjxv9vaR4b87iYg2IeH/OEmCfGHBzzpJgnxzwl5qkxT4s5JObQmKfHPCPm32KeGfOsmGfHPCfmuTHPi3l+zAtiXhhzWMyLYl4c85KYl8aM73NqXh7ziphXxrwq5tUxr4l5bczrYv495vUxb4h5Y8ybYt4cc3jM+B6u5q0xb4s5IubtMe+IeWfMu2LG3w3TvDvmqJj3xBwd896Y98W8P+YDMR+M+VDMh2M+EvPRmI/FfDzmEzGfjPlUzKdjxt9F03w25nMxn4/5QswXY46JOTbmSzFfjvlKzFdjvhbz9ZjjYr4R882Y8bNymxNivhXz7ZjvxHw35sSY8e/L5nsx34/5QczJMT+M+VHMj2N+EvPTmJ/F/PyrOeWv8mmJf9e2xL98W+Iv0WmJPwe0xOv+WuI/wrfEnwNapvz82Sk/V3bKz4ud8nNg54w5V8zWMdvEjD8xtMwT8wcxfxhz3pjzxZw/5o9ixtcbWuLnB7X8OOZCMeP7Clvi9YUt8XWGluTPGwBA9H/rr98z6z7/yc8HAAAAmPH0PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+pvZ/7ynv0f8AAACQG1//BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMjf9Pt/5v/Y5wQAAADMWL7+DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD5i/6fJXnPMckvN78aLYs1Ggf9Of2waX/9q7d33P+dSd82v/bFnXR+odVMM+zJVJvr3/h7AQAAQG1U9H9LjMWn0/8LpG9/h/5ffNrZ+Df3f5vXvpqzPR7vmPPf93sDAADAf05F/8/+1WhZYjr9f0v69nfo/yWmnY3o/1k2nGFP6P82T/K5f+EHjUaz2Wi0ajVjzjcXSu5/cXPhRqN4odGYafKMuQ8AAAD/nIr+n+PL/21pWXI6/X9Z+vZ36P8lp52N6P9Zn5lxz+gfMlOXWc5/tHO/RmP7LYd/OV97+bwv51Svb3Zrh36ju015c8rjXphv+LSP+/fcBQAAgH9KRf/H6+Nb2jUancYn74+vl7f5R1//327aOeVjZ7nsG5/WDPp6fMnU59P6kTFrN9o3Zkqf+ReWmc7jT2zOv3Dr1xqtSo9f5nv6TAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/8cOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzBQAA///fNc5N") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xc}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 2m48.596887332s ago: executing program 2 (id=324): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) 2m33.266508419s ago: executing program 32 (id=324): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) 2m9.505323795s ago: executing program 1 (id=601): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) 2m9.27541873s ago: executing program 1 (id=603): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) exit(0xffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) r1 = epoll_create1(0x80000) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000014}) 2m8.300068483s ago: executing program 1 (id=610): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0x60d3, 0x8, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001700)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x28, 0x0, 0x0) 2m7.711375278s ago: executing program 1 (id=616): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x5, 0x2}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m6.96813495s ago: executing program 1 (id=620): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m5.788250846s ago: executing program 1 (id=630): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/169, 0xfffffd51}], 0x1) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") 2m5.288264707s ago: executing program 33 (id=630): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/169, 0xfffffd51}], 0x1) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") 6.634486043s ago: executing program 5 (id=1412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x82000000, 0x0, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x10, 0x2, r2}) 6.448250791s ago: executing program 5 (id=1413): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000240)="a38d6b0eab0c21b17056167a96acd43252b9bec2424c06aa44746f483d7e19acfb55406fd5378a810d0bb1e3aab98a0d26262ed5797e32f72d786e8cb1d6a25f8ca319810c9d033e4cba4bc9605ce8d544826dfb8f0b52d28507a1984b08114b3771f96d57acd053d4713d28b86a57e4d2001136822a", 0xffffffea) 5.362019988s ago: executing program 0 (id=1420): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f00000000c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0xe) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000140)={0x8, 0x26}) 4.808883675s ago: executing program 4 (id=1424): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000200)=0x40) 3.839480475s ago: executing program 0 (id=1429): unshare(0x2a020400) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)=0x5) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ppoll(&(0x7f0000000040)=[{r1, 0x8147}], 0x1, 0x0, 0x0, 0x0) 3.332983969s ago: executing program 5 (id=1430): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = creat(&(0x7f00000004c0)='./file1\x00', 0x32) unlink(&(0x7f0000000040)='./file1\x00') write$UHID_INPUT(r0, &(0x7f0000001680)={0x8, {"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", 0x1000}}, 0x1006) close(r0) 3.332673116s ago: executing program 4 (id=1431): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x71d4, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0xe, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x8001, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x2, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x0, 0x8, 0x129432e3, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f33, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xd, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x4, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0x400c8, 0x3, 0x3, 0xfffe, 0x3, 0x9, 0xfd, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x8c, 0x200, 0xffff3441, 0xff]}, 0x45c) unshare(0x2000400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.33212047s ago: executing program 0 (id=1440): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x64}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3.14375404s ago: executing program 4 (id=1433): r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.103622473s ago: executing program 0 (id=1435): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) 2.930542343s ago: executing program 6 (id=1436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000480)={@val={0x70}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x4000, 0x0, 0x2f, 0x0, @empty, @empty}, {0x0, 0x883e, 0x1d, 0x0, @gue={{0x2, 0x0, 0x1, 0x2, 0x100}, "313324ce34eab4f9322deb1886"}}}}}}}, 0x43) 2.535186091s ago: executing program 6 (id=1438): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r1, 0x0, &(0x7f0000000800)="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", 0x800, 0x9}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000380)={0x28, 0x3, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000300)}) close(0x3) 2.123698459s ago: executing program 6 (id=1439): r0 = userfaultfd(0x801) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000480)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000140)=0x99, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.915668244s ago: executing program 6 (id=1441): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000002a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf6, &(0x7f0000002b80)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 1.887071331s ago: executing program 3 (id=1442): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x8, 0x5c8c, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x80, 0x0, 0x0, 0x20000001}}) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.80119265s ago: executing program 5 (id=1443): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x15}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000500)={0x0, 0x7395, 0x80, 0x0, 0x26e}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x24, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.702909675s ago: executing program 3 (id=1444): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r0, &(0x7f0000000200)=""/4096, 0x1000) lseek(r0, 0x7, 0x1) 1.637412966s ago: executing program 0 (id=1445): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.293005484s ago: executing program 4 (id=1446): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0x2a3, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) sendfile(r0, r0, 0x0, 0x252c000000000000) 1.2095331s ago: executing program 3 (id=1447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x1000009, 0x7fffffff, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3], 0xeeee0000, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.033118513s ago: executing program 4 (id=1448): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 973.38997ms ago: executing program 6 (id=1449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08f503400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 777.271846ms ago: executing program 3 (id=1450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22204, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x4) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000001c0)) 616.51801ms ago: executing program 6 (id=1451): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_io_uring_setup(0x49b, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x146}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 517.906982ms ago: executing program 5 (id=1452): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 420.145256ms ago: executing program 3 (id=1453): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) 208.937839ms ago: executing program 4 (id=1454): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x800003d, 0x407ff) lseek(r0, 0xcbb, 0x3) 191.568171ms ago: executing program 5 (id=1455): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf0ff) 39.196224ms ago: executing program 0 (id=1456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x9, 0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) io_destroy(r1) 0s ago: executing program 3 (id=1457): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) kernel console output (not intermixed with test programs): 90.120265][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 190.130050][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.138352][ T8126] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 190.147729][ T8126] loop4: lost filesystem error report for type 5 error -117 [ 190.152794][ T24] usb 4-1: Product: syz [ 190.179750][ T24] usb 4-1: Manufacturer: syz [ 190.184834][ T8126] EXT4-fs (loop4): 1 truncate cleaned up [ 190.200429][ T8126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.213171][ T24] usb 4-1: SerialNumber: syz [ 190.223498][ T24] usb 4-1: config 0 descriptor?? [ 190.231359][ T8126] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.255273][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 190.257720][ T8140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.279343][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 190.293392][ T8140] bond0 (unregistering): Released all slaves [ 190.372553][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.458967][ T5948] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 190.628031][ T5948] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.651369][ T5948] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.651373][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 190.654454][ T5948] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 190.680887][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.689350][ T5948] usb 1-1: SerialNumber: syz [ 190.923451][ T5948] usb 1-1: 0:2 : does not exist [ 191.045035][ T5948] usb 1-1: USB disconnect, device number 12 [ 191.093068][ T24] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 191.135209][ T24] em28xx 4-1:0.132: board has no eeprom [ 191.146751][ T7211] udevd[7211]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.349961][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 191.368104][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 191.378603][ T5987] em28xx 4-1:0.132: Registering V4L2 extension [ 191.417195][ T24] usb 4-1: USB disconnect, device number 5 [ 191.449234][ T24] em28xx 4-1:0.132: Disconnecting em28xx [ 191.787442][ T5987] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 191.805695][ T5987] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 191.830153][ T5987] em28xx 4-1:0.132: No AC97 audio processor [ 191.857887][ T5987] usb 4-1: Decoder not found [ 191.883364][ T5987] em28xx 4-1:0.132: failed to create media graph [ 191.905430][ T5987] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 191.987084][ T5987] em28xx 4-1:0.132: Remote control support is not available for this card. [ 192.019119][ T24] em28xx 4-1:0.132: Closing input extension [ 192.305621][ T24] em28xx 4-1:0.132: Freeing device [ 193.297372][ T8218] input: syz0 as /devices/virtual/input/input12 [ 193.903412][ T8247] mmap: syz.3.739 (8247) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.003386][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.011710][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.031788][ T8269] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 195.061671][ T8269] overlayfs: failed to set xattr on upper [ 195.096285][ T8269] overlayfs: ...falling back to redirect_dir=nofollow. [ 195.123299][ T8269] overlayfs: ...falling back to index=off. [ 195.147506][ T8269] overlayfs: ...falling back to uuid=null. [ 195.180727][ T8269] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 196.137449][ T8287] cgroup: fork rejected by pids controller in /syz0 [ 196.398960][ T807] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 196.529352][ T8298] loop4: detected capacity change from 0 to 512 [ 196.558808][ T8298] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.752: iget: bad i_size value: 38620345925642 [ 196.573227][ T8298] fserror_report: 2 callbacks suppressed [ 196.573244][ T8298] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 196.581489][ T807] usb 4-1: Using ep0 maxpacket: 32 [ 196.589005][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 196.602291][ C0] EXT4-fs (loop4): initial error at time 1773833274: ext4_orphan_get:1391: inode 15 [ 196.611728][ C0] EXT4-fs (loop4): last error at time 1773833274: ext4_orphan_get:1391: inode 15 [ 196.665258][ T8298] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.752: couldn't read orphan inode 15 (err -117) [ 196.700414][ T807] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 196.762382][ T807] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.769134][ T8298] loop4: lost filesystem error report for type 5 error -117 [ 196.783445][ T8298] EXT4-fs (loop4): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.820357][ T807] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 196.846919][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.914593][ T807] usb 4-1: config 0 descriptor?? [ 196.937738][ T8298] EXT4-fs error (device loop4): ext4_check_dx_root:2201: inode #2: comm syz.4.752: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 197.178200][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 197.518987][ T8316] input: syz0 as /devices/virtual/input/input13 [ 197.550473][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'. [ 197.573051][ T8319] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 197.593130][ T8319] overlayfs: failed to set xattr on upper [ 197.616705][ T8319] overlayfs: ...falling back to redirect_dir=nofollow. [ 197.625370][ T8319] overlayfs: ...falling back to index=off. [ 197.643189][ T8319] overlayfs: ...falling back to uuid=null. [ 197.649611][ T8319] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 197.811245][ T807] corsair-psu 0003:1B1C:1C09.0008: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 197.841061][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'. [ 197.860887][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.902270][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.922723][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.934238][ T807] corsair-psu 0003:1B1C:1C09.0008: unable to initialize device (-95) [ 197.976110][ T5166] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.987011][ T807] corsair-psu 0003:1B1C:1C09.0008: probe with driver corsair-psu failed with error -95 [ 198.011328][ T58] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.029739][ T5166] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.040066][ T5166] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.057506][ T5166] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.069043][ T5166] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.173698][ T807] usb 4-1: USB disconnect, device number 6 [ 198.941846][ T1346] bridge_slave_1: left allmulticast mode [ 198.961684][ T1346] bridge_slave_1: left promiscuous mode [ 198.972486][ T1346] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.999480][ T1346] bridge_slave_0: left allmulticast mode [ 199.012485][ T8364] capability: warning: `syz.5.769' uses deprecated v2 capabilities in a way that may be insecure [ 199.027683][ T1346] bridge_slave_0: left promiscuous mode [ 199.044556][ T1346] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.230430][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.770'. [ 199.468749][ T1346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.481369][ T1346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.491623][ T1346] bond0 (unregistering): Released all slaves [ 199.521107][ T5948] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 199.698016][ T5948] usb 6-1: Using ep0 maxpacket: 16 [ 199.711632][ T5948] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 199.721557][ T5948] usb 6-1: config 1 has no interface number 0 [ 199.728175][ T5948] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 199.738777][ T5948] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 199.756940][ T5948] usb 6-1: config 1 interface 105 has no altsetting 0 [ 199.786184][ T5948] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 199.798472][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 199.808199][ T5948] usb 6-1: Product: syz [ 199.812771][ T5948] usb 6-1: Manufacturer: syz [ 199.817462][ T5948] usb 6-1: SerialNumber: syz [ 199.851764][ T8371] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 199.870083][ T8371] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 200.152752][ T5859] Bluetooth: hci1: command tx timeout [ 200.315683][ T8371] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 200.359020][ T8371] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 200.564289][ T1346] hsr_slave_0: left promiscuous mode [ 200.594364][ T1346] hsr_slave_1: left promiscuous mode [ 200.618704][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.664863][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.709874][ T8399] loop3: detected capacity change from 0 to 1024 [ 200.723759][ T8399] EXT4-fs: inline encryption not supported [ 200.807767][ T8399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 200.814591][ T5948] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 200.843464][ T8402] loop6: detected capacity change from 0 to 512 [ 200.852094][ T8399] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.911810][ T30] audit: type=1800 audit(1773833278.769:12): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.782" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 200.946429][ T8399] EXT4-fs error (device loop3): ext4_map_blocks:821: inode #15: comm syz.3.782: lblock 0 mapped to illegal pblock 0 (length 1) [ 200.975211][ T8399] EXT4-fs error (device loop3): ext4_ext_remove_space:2954: inode #15: comm syz.3.782: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 201.098500][ T5948] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 201.134244][ T983] EXT4-fs error (device loop3): ext4_map_blocks:821: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1) [ 201.168068][ T983] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 201.186335][ T983] EXT4-fs (loop3): This should not happen!! Data will be lost [ 201.186335][ T983] [ 201.198431][ T8411] sctp: [Deprecated]: syz.6.784 (pid 8411) Use of int in max_burst socket option. [ 201.198431][ T8411] Use struct sctp_assoc_value instead [ 201.228248][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 201.586173][ T1346] team0 (unregistering): Port device team_slave_1 removed [ 201.620512][ T1346] team0 (unregistering): Port device team_slave_0 removed [ 201.886240][ T8433] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 202.231827][ T5859] Bluetooth: hci1: command tx timeout [ 202.451698][ T5948] aqc111 6-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, c6:33:be:b9:d8:e4 [ 202.465668][ T8328] chnl_net:caif_netlink_parms(): no params data found [ 202.498933][ T5948] usb 6-1: USB disconnect, device number 4 [ 202.541960][ T5948] aqc111 6-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 202.729665][ T5948] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 202.777852][ T5948] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 202.817357][ T5948] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 203.051105][ T8454] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.795'. [ 203.076315][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.088442][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.096641][ T8328] bridge_slave_0: entered allmulticast mode [ 203.106243][ T8328] bridge_slave_0: entered promiscuous mode [ 203.131047][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.140514][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.148356][ T8328] bridge_slave_1: entered allmulticast mode [ 203.157475][ T8328] bridge_slave_1: entered promiscuous mode [ 203.292777][ T8328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.324038][ T8328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.685653][ T8472] netlink: 'syz.4.800': attribute type 4 has an invalid length. [ 203.704794][ T8328] team0: Port device team_slave_0 added [ 203.727083][ T8328] team0: Port device team_slave_1 added [ 203.791166][ T8475] netlink: 'syz.4.800': attribute type 4 has an invalid length. [ 203.951913][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.973151][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.002393][ T8328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.016532][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.038985][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.106348][ T8328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.150144][ T8488] pim6reg1: entered promiscuous mode [ 204.158995][ T8488] pim6reg1: entered allmulticast mode [ 204.349363][ T51] Bluetooth: hci1: command tx timeout [ 204.405925][ T8497] tls_set_device_offload: netdev not found [ 205.147463][ T8494] loop4: detected capacity change from 0 to 131072 [ 205.158339][ T8501] loop6: detected capacity change from 0 to 32768 [ 205.194262][ T8501] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.808 (8501) [ 205.292939][ T8494] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 205.303809][ T8494] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 205.394339][ T8501] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.426069][ T8501] BTRFS info (device loop6): using crc32c checksum algorithm [ 205.568308][ T8501] BTRFS info (device loop6): enabling ssd optimizations [ 205.594088][ T8328] hsr_slave_0: entered promiscuous mode [ 205.602357][ T8328] hsr_slave_1: entered promiscuous mode [ 205.609964][ T8328] debugfs: 'hsr0' already exists in 'hsr' [ 205.615860][ T8328] Cannot create hsr debugfs directory [ 205.639026][ T8501] BTRFS info (device loop6): turning on flush-on-commit [ 205.667133][ T8501] BTRFS info (device loop6): enabling free space tree [ 205.705359][ T8501] BTRFS info (device loop6): enabling auto defrag [ 205.735250][ T8501] BTRFS info (device loop6): use lzo compression, level 1 [ 205.747978][ T8532] loop5: detected capacity change from 0 to 2048 [ 205.776834][ T8501] BTRFS info (device loop6): max_inline set to 4096 [ 205.790438][ T8532] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=27485, location=27485 [ 205.814041][ T8532] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.907248][ T30] audit: type=1800 audit(1773833283.759:13): pid=8532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.814" name="file1" dev="loop5" ino=1367 res=0 errno=0 [ 206.389394][ T5864] Bluetooth: hci0: command 0x0406 tx timeout [ 206.391642][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 206.399355][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 206.407468][ T5859] Bluetooth: hci1: command tx timeout [ 206.699935][ T30] audit: type=1800 audit(1773833284.549:14): pid=8543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.808" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 206.827557][ T8541] syzkaller0: entered promiscuous mode [ 206.839042][ T8541] syzkaller0: entered allmulticast mode [ 206.915358][ T7810] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.478375][ T8540] loop5: detected capacity change from 0 to 32768 [ 207.609157][ T8540] JBD2: Ignoring recovery information on journal [ 207.784020][ T8540] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 208.147901][ T7212] ocfs2: Unmounting device (7,5) on (node local) [ 209.137306][ T8585] input: syz0 as /devices/virtual/input/input14 [ 209.897280][ T8588] loop4: detected capacity change from 0 to 40427 [ 209.909390][ T8588] F2FS-fs (loop4): build fault injection rate: 174 [ 209.916005][ T8588] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 209.931617][ T8588] F2FS-fs (loop4): invalid crc value [ 210.016613][ T8588] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 210.037802][ T8588] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 210.134352][ T8588] syz.4.828: attempt to access beyond end of device [ 210.134352][ T8588] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 210.160307][ T8588] syz.4.828: attempt to access beyond end of device [ 210.160307][ T8588] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 210.216038][ T8602] syz.4.828: attempt to access beyond end of device [ 210.216038][ T8602] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 210.277774][ T5846] syz-executor: attempt to access beyond end of device [ 210.277774][ T5846] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 210.292350][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 210.292376][ T5846] Tainted: [L]=SOFTLOCKUP [ 210.292382][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.292392][ T5846] Call Trace: [ 210.292399][ T5846] [ 210.292406][ T5846] dump_stack_lvl+0xe8/0x150 [ 210.292435][ T5846] f2fs_handle_critical_error+0x37c/0x540 [ 210.292463][ T5846] f2fs_write_end_io+0x1274/0x1740 [ 210.292509][ T5846] __submit_merged_bio+0x256/0x700 [ 210.292537][ T5846] __submit_merged_write_cond+0x3c9/0x4e0 [ 210.292567][ T5846] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 210.292611][ T5846] f2fs_write_data_pages+0x287e/0x34f0 [ 210.292634][ T5846] ? is_bpf_text_address+0x26/0x2b0 [ 210.292691][ T5846] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 210.292729][ T5846] ? do_raw_spin_lock+0x12b/0x2f0 [ 210.292776][ T5846] ? do_raw_spin_unlock+0xf5/0x210 [ 210.292802][ T5846] ? __lock_acquire+0x6b5/0x2cf0 [ 210.292844][ T5846] ? __lock_acquire+0x6b5/0x2cf0 [ 210.292873][ T5846] ? do_raw_spin_lock+0x12b/0x2f0 [ 210.292903][ T5846] ? do_raw_spin_unlock+0xf5/0x210 [ 210.292924][ T5846] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 210.292949][ T5846] do_writepages+0x32e/0x550 [ 210.292980][ T5846] ? do_raw_spin_unlock+0xf5/0x210 [ 210.293005][ T5846] filemap_fdatawrite+0x1e9/0x2f0 [ 210.293029][ T5846] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 210.293093][ T5846] ? do_raw_spin_unlock+0xf5/0x210 [ 210.293117][ T5846] f2fs_sync_dirty_inodes+0x30e/0x860 [ 210.293158][ T5846] f2fs_write_checkpoint+0x9df/0x26a0 [ 210.293206][ T5846] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 210.293280][ T5846] kill_f2fs_super+0x314/0x720 [ 210.293311][ T5846] ? __pfx_kill_f2fs_super+0x10/0x10 [ 210.293356][ T5846] ? lockdep_hardirqs_on+0x7a/0x110 [ 210.293390][ T5846] deactivate_locked_super+0xbc/0x130 [ 210.293416][ T5846] cleanup_mnt+0x437/0x4d0 [ 210.293432][ T5846] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.293454][ T5846] task_work_run+0x1d9/0x270 [ 210.293477][ T5846] ? __pfx_task_work_run+0x10/0x10 [ 210.293509][ T5846] exit_to_user_mode_loop+0xed/0x480 [ 210.293530][ T5846] ? rcu_is_watching+0x15/0xb0 [ 210.293551][ T5846] do_syscall_64+0x32d/0xf80 [ 210.293569][ T5846] ? trace_irq_disable+0x3b/0x150 [ 210.293588][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.293604][ T5846] ? clear_bhb_loop+0x40/0x90 [ 210.293625][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.293641][ T5846] RIP: 0033:0x7f12a9b9d9d7 [ 210.293658][ T5846] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 210.293672][ T5846] RSP: 002b:00007ffde1f38dd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 210.293689][ T5846] RAX: 0000000000000000 RBX: 00007f12a9c32050 RCX: 00007f12a9b9d9d7 [ 210.293700][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde1f38e90 [ 210.293710][ T5846] RBP: 00007ffde1f38e90 R08: 00007ffde1f39e90 R09: 00000000ffffffff [ 210.293720][ T5846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde1f39f20 [ 210.293730][ T5846] R13: 00007f12a9c32050 R14: 0000000000033523 R15: 00007ffde1f39f60 [ 210.293758][ T5846] [ 210.294395][ T5846] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 212.123595][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.832'. [ 212.137357][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.832'. [ 212.170886][ T5913] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 212.262393][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.832'. [ 212.271887][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.832'. [ 212.295063][ T1019] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.310571][ T1019] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.342957][ T5913] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 212.363563][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.375739][ T5913] usb 5-1: Product: syz [ 212.383326][ T5913] usb 5-1: Manufacturer: syz [ 212.397222][ T5913] usb 5-1: SerialNumber: syz [ 212.425467][ T5913] usb 5-1: config 0 descriptor?? [ 212.448779][ T8612] loop6: detected capacity change from 0 to 512 [ 212.469408][ T5948] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 212.508847][ T1019] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.527842][ T8612] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.837: invalid indirect mapped block 256 (level 2) [ 212.543951][ T1019] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.573483][ T8612] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.579529][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 212.595141][ C1] EXT4-fs (loop6): initial error at time 1773833290: ext4_free_branches:1023: inode 11 [ 212.604862][ C1] EXT4-fs (loop6): last error at time 1773833290: ext4_free_branches:1023: inode 11 [ 212.619924][ T8612] EXT4-fs (loop6): 2 truncates cleaned up [ 212.627551][ T8612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.644109][ T5948] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.654798][ T5948] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.668567][ T5948] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.678052][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.689073][ T5948] usb 4-1: Product: syz [ 212.693305][ T5948] usb 4-1: Manufacturer: syz [ 212.697910][ T5948] usb 4-1: SerialNumber: syz [ 212.738693][ T5948] usb 4-1: 0:2 : does not exist [ 212.783911][ T7810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.875877][ T5913] usb 5-1: Firmware: major: 50, minor: 195, hardware type: UNKNOWN (85) [ 212.963133][ T5948] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 213.078192][ T5913] usb 5-1: failed to fetch extended address, random address set [ 213.095779][ T5913] usb 5-1: atusb_probe: initialization failed, error = -524 [ 213.114062][ T5913] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 213.137222][ T5948] usb 4-1: USB disconnect, device number 7 [ 213.313714][ T5904] usb 5-1: USB disconnect, device number 12 [ 213.327372][ T7260] udevd[7260]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.461704][ T8328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.483472][ T8328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.516093][ T8328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.572738][ T8328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.689829][ T8640] binder: 8639:8640 ioctl c0306201 2000000003c0 returned -14 [ 214.052680][ T8328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.098129][ T8657] loop3: detected capacity change from 0 to 128 [ 214.110697][ T8328] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.167040][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.174265][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.246832][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.254065][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.531895][ T8667] loop6: detected capacity change from 0 to 128 [ 214.567347][ T8661] loop5: detected capacity change from 0 to 8192 [ 214.589872][ T8667] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 214.648159][ T8667] hpfs: filesystem error: improperly stopped [ 214.715531][ T8667] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 214.762553][ T8667] hpfs: You really don't want any checks? You are crazy... [ 214.788087][ T8667] hpfs: hpfs_map_sector(): read error [ 214.813405][ T8667] hpfs: code page support is disabled [ 214.850576][ T8667] hpfs: hpfs_map_4sectors(): unaligned read [ 214.887478][ T8667] hpfs: hpfs_map_4sectors(): unaligned read [ 214.901677][ T8676] loop3: detected capacity change from 0 to 1024 [ 214.923555][ T8667] hpfs: filesystem error: unable to find root dir [ 215.086798][ T8667] hpfs: hpfs_map_4sectors(): unaligned read [ 215.141257][ T8667] hpfs: hpfs_map_sector(): read error [ 215.190100][ T30] audit: type=1800 audit(1773833293.049:15): pid=8676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.851" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 215.233608][ T8680] hpfs: hpfs_map_4sectors(): unaligned read [ 215.264850][ T8680] hpfs: hpfs_map_sector(): read error [ 215.362286][ T8328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.475376][ T8652] loop4: detected capacity change from 0 to 40427 [ 215.516870][ T8652] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 215.561243][ T8652] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 215.625965][ T8652] F2FS-fs (loop4): invalid crc value [ 215.648470][ T8690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.737595][ T8690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.805812][ T1346] hfsplus: b-tree write err: -5, ino 25 [ 215.820329][ T8690] bond0 (unregistering): Released all slaves [ 215.833982][ T1346] hfsplus: b-tree write err: -5, ino 4 [ 215.853234][ T1346] hfsplus: b-tree write err: -5, ino 2 [ 215.986538][ T8652] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 216.071027][ T8652] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 216.088653][ T8652] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 216.148218][ T8328] veth0_vlan: entered promiscuous mode [ 216.223158][ T8328] veth1_vlan: entered promiscuous mode [ 216.422402][ T8328] veth0_macvtap: entered promiscuous mode [ 216.493062][ T8328] veth1_macvtap: entered promiscuous mode [ 216.602069][ T8328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.688147][ T8328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.774998][ T1346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.801378][ T1346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.823311][ T1346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.881031][ T1346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.309459][ T1346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.363709][ T1346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.496601][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.540535][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.637722][ T8719] loop3: detected capacity change from 0 to 131072 [ 217.659480][ T8719] F2FS-fs (loop3): invalid crc value [ 217.751056][ T8719] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 217.765425][ T8719] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 218.320253][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 218.508362][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 218.560675][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.599179][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.621330][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 218.668500][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 218.694817][ T10] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 218.725433][ T10] usb 6-1: Manufacturer: syz [ 218.753514][ T10] usb 6-1: config 0 descriptor?? [ 218.891147][ T8769] input: syz1 as /devices/virtual/input/input15 [ 219.020042][ T8767] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 219.146572][ T8767] bond1: (slave lo): Enslaving as an active interface with an up link [ 219.171748][ T8767] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 219.210529][ T10] hid_parser_main: 4007 callbacks suppressed [ 219.210553][ T10] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 219.316930][ T10] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 219.417148][ T8772] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 220.102114][ T10] usb 6-1: USB disconnect, device number 5 [ 220.501986][ T8798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.919173][ T5904] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 221.079906][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 221.093964][ T5904] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.124696][ T5904] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.153071][ T5904] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 221.206804][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.283728][ T5904] usb 5-1: config 0 descriptor?? [ 221.828460][ T5904] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 222.065154][ T8815] loop6: detected capacity change from 0 to 131072 [ 222.077773][ T8815] F2FS-fs (loop6): Test dummy encryption mode enabled [ 222.085660][ T8815] F2FS-fs (loop6): invalid crc value [ 222.199359][ T8815] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 222.214013][ T8815] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 222.294260][ T5920] usb 5-1: USB disconnect, device number 13 [ 222.534146][ T8811] loop5: detected capacity change from 0 to 32768 [ 222.615019][ T8811] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 222.675289][ T8811] XFS (loop5): Ending clean mount [ 222.716261][ T8811] XFS (loop5): Quotacheck needed: Please wait. [ 222.976669][ T8811] XFS (loop5): Quotacheck: Done. [ 223.697066][ T7212] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 223.749179][ T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 223.945214][ T10] usb 1-1: config 0 has no interfaces? [ 223.962876][ T10] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 224.001407][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.036670][ T10] usb 1-1: config 0 descriptor?? [ 224.251821][ T8865] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 224.301131][ T8856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.344889][ T8856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.369595][ T8867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.380446][ T5904] usb 1-1: USB disconnect, device number 13 [ 224.828992][ T5904] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 224.992836][ T8877] loop6: detected capacity change from 0 to 128 [ 225.010055][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 225.018455][ T8877] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 225.024060][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.059245][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.082388][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 225.115727][ T5904] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 225.140722][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.158114][ T8877] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 225.172040][ T5904] usb 1-1: config 0 descriptor?? [ 225.382335][ T8871] loop4: detected capacity change from 0 to 40427 [ 225.400609][ T8871] F2FS-fs (loop4): Image doesn't support compression [ 225.409061][ T8871] F2FS-fs (loop4): build fault injection rate: 690 [ 225.423817][ T8871] F2FS-fs (loop4): invalid crc value [ 225.605728][ T5904] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 225.641140][ T5904] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 225.692953][ T5904] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 225.729904][ T8871] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 225.742347][ T5904] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 225.769519][ T5904] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 225.780536][ T8871] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 225.811168][ T5904] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 225.846820][ T5904] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 225.855140][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.862887][ T8884] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.883578][ T5904] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 225.913483][ T5904] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 225.931304][ T5904] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 225.939994][ T30] audit: type=1800 audit(1773833303.799:16): pid=8871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.906" name="file0" dev="loop4" ino=10 res=0 errno=0 [ 225.982216][ T8871] syz.4.906: attempt to access beyond end of device [ 225.982216][ T8871] loop4: rw=524288, sector=77824, nr_sectors = 16 limit=40427 [ 226.004968][ T8871] syz.4.906: attempt to access beyond end of device [ 226.004968][ T8871] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 226.006688][ T30] audit: type=1804 audit(1773833303.839:17): pid=8871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.906" name="/newroot/191/bus/file0" dev="loop4" ino=10 res=1 errno=0 [ 226.022178][ T5904] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf3 found [ 226.051057][ T5904] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf4 found [ 226.104064][ T5904] usb 1-1: USB disconnect, device number 14 [ 226.107503][ T30] audit: type=1800 audit(1773833303.909:18): pid=8871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.906" name="file0" dev="loop4" ino=10 res=0 errno=0 [ 226.215655][ T5846] syz-executor: attempt to access beyond end of device [ 226.215655][ T5846] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.248320][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 226.248349][ T5846] Tainted: [L]=SOFTLOCKUP [ 226.248355][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.248365][ T5846] Call Trace: [ 226.248371][ T5846] [ 226.248379][ T5846] dump_stack_lvl+0xe8/0x150 [ 226.248412][ T5846] f2fs_handle_critical_error+0x37c/0x540 [ 226.248444][ T5846] f2fs_write_end_io+0x1274/0x1740 [ 226.248495][ T5846] __submit_merged_bio+0x256/0x700 [ 226.248526][ T5846] __submit_merged_write_cond+0x3c9/0x4e0 [ 226.248559][ T5846] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 226.248608][ T5846] f2fs_write_data_pages+0x287e/0x34f0 [ 226.248673][ T5846] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 226.248750][ T5846] ? kernel_text_address+0xa5/0xe0 [ 226.248779][ T5846] ? __lock_acquire+0x6b5/0x2cf0 [ 226.248822][ T5846] ? __lock_acquire+0x6b5/0x2cf0 [ 226.248856][ T5846] ? do_raw_spin_lock+0x12b/0x2f0 [ 226.248888][ T5846] ? do_raw_spin_unlock+0xf5/0x210 [ 226.248911][ T5846] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 226.248954][ T5846] do_writepages+0x32e/0x550 [ 226.249021][ T5846] ? do_raw_spin_unlock+0xf5/0x210 [ 226.249053][ T5846] filemap_fdatawrite+0x1e9/0x2f0 [ 226.249084][ T5846] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 226.249169][ T5846] ? do_raw_spin_unlock+0xf5/0x210 [ 226.249201][ T5846] f2fs_sync_dirty_inodes+0x30e/0x860 [ 226.249260][ T5846] f2fs_write_checkpoint+0x9df/0x26a0 [ 226.249323][ T5846] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 226.249414][ T5846] kill_f2fs_super+0x314/0x720 [ 226.249453][ T5846] ? __pfx_kill_f2fs_super+0x10/0x10 [ 226.249502][ T5846] ? lockdep_hardirqs_on+0x7a/0x110 [ 226.249546][ T5846] deactivate_locked_super+0xbc/0x130 [ 226.249579][ T5846] cleanup_mnt+0x437/0x4d0 [ 226.249600][ T5846] ? _raw_spin_unlock_irq+0x23/0x50 [ 226.249627][ T5846] task_work_run+0x1d9/0x270 [ 226.249658][ T5846] ? __pfx_task_work_run+0x10/0x10 [ 226.249699][ T5846] exit_to_user_mode_loop+0xed/0x480 [ 226.249728][ T5846] ? rcu_is_watching+0x15/0xb0 [ 226.249755][ T5846] do_syscall_64+0x32d/0xf80 [ 226.249779][ T5846] ? trace_irq_disable+0x3b/0x150 [ 226.249803][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.249824][ T5846] ? clear_bhb_loop+0x40/0x90 [ 226.249851][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.249871][ T5846] RIP: 0033:0x7f12a9b9d9d7 [ 226.249892][ T5846] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 226.249909][ T5846] RSP: 002b:00007ffde1f38dd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 226.249931][ T5846] RAX: 0000000000000000 RBX: 00007f12a9c32050 RCX: 00007f12a9b9d9d7 [ 226.249945][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde1f38e90 [ 226.249957][ T5846] RBP: 00007ffde1f38e90 R08: 00007ffde1f39e90 R09: 00000000ffffffff [ 226.249971][ T5846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde1f39f20 [ 226.249983][ T5846] R13: 00007f12a9c32050 R14: 00000000000372ee R15: 00007ffde1f39f60 [ 226.250021][ T5846] [ 226.574543][ T5846] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 226.678194][ T8879] loop3: detected capacity change from 0 to 40427 [ 226.712747][ T8879] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 226.722102][ T8879] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 226.773221][ T8879] F2FS-fs (loop3): invalid crc value [ 226.803354][ T8884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.906938][ T8884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.128014][ T8879] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 227.162585][ T8879] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 227.171959][ T8879] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 227.237607][ T30] audit: type=1800 audit(1773833305.089:19): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.909" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=10 res=0 errno=0 [ 227.342676][ T8879] syz.3.909: attempt to access beyond end of device [ 227.342676][ T8879] loop3: rw=8423425, sector=78248, nr_sectors = 4 limit=40427 [ 227.502550][ T5848] syz-executor: attempt to access beyond end of device [ 227.502550][ T5848] loop3: rw=8390659, sector=77824, nr_sectors = 432 limit=40427 [ 227.569376][ T5848] F2FS-fs (loop3): Issue discard(9728, 9728, 54) failed, ret: -5 [ 227.598948][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 227.619902][ T12] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.651836][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.687556][ T12] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.729474][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.757074][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 227.767392][ T24] usb 1-1: string descriptor 0 read error: -22 [ 227.777976][ T24] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 227.789427][ T12] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.816555][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.827113][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.858249][ T12] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.895511][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.239683][ T8902] loop4: detected capacity change from 0 to 32768 [ 228.293434][ T30] audit: type=1800 audit(1773833306.149:20): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.915" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 228.562235][ T24] uclogic 0003:5543:006E.000C: failed retrieving string descriptor #200: -71 [ 228.592450][ T24] uclogic 0003:5543:006E.000C: failed retrieving pen parameters: -71 [ 228.620932][ T24] uclogic 0003:5543:006E.000C: failed probing pen v2 parameters: -71 [ 228.647799][ T24] uclogic 0003:5543:006E.000C: failed probing parameters: -71 [ 228.673479][ T8904] loop6: detected capacity change from 0 to 32768 [ 228.681703][ T24] uclogic 0003:5543:006E.000C: probe with driver uclogic failed with error -71 [ 228.720151][ T24] usb 1-1: USB disconnect, device number 15 [ 228.745138][ T8904] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 228.802450][ T8904] JBD2: Ignoring recovery information on journal [ 229.004716][ T8904] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 229.743052][ T7810] ocfs2: Unmounting device (7,6) on (node local) [ 230.062778][ T8932] syzkaller1: entered promiscuous mode [ 230.068608][ T8932] syzkaller1: entered allmulticast mode [ 230.515353][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'. [ 230.525490][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'. [ 230.640151][ T5934] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 230.684821][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.936'. [ 230.809521][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 230.821593][ T5934] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 230.835949][ T5934] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 230.883499][ T5934] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 230.934703][ T5934] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 230.951519][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.960755][ T5934] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 230.969994][ T5934] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 230.999015][ T5934] usb 4-1: Product: syz [ 231.010995][ T5934] usb 4-1: Manufacturer: syz [ 231.026228][ T5934] usb 4-1: SerialNumber: syz [ 231.080549][ T5934] usb 4-1: config 0 descriptor?? [ 231.125689][ T5934] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 231.144469][ T5934] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 231.774505][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 231.781063][ T5946] usb 4-1: USB disconnect, device number 8 [ 231.815521][ T5946] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 232.391050][ T8948] kexec: Could not allocate control_code_buffer [ 233.587401][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.6.950'. [ 233.880559][ T5934] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 234.062278][ T5934] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.090518][ T5934] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.113804][ T5934] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 234.139057][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 234.147182][ T5934] usb 7-1: SerialNumber: syz [ 234.385088][ T5934] usb 7-1: 0:2 : does not exist [ 234.521043][ T5934] usb 7-1: USB disconnect, device number 3 [ 234.613446][ T7260] udevd[7260]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.201578][ T9015] tipc: Started in network mode [ 235.218348][ T9015] tipc: Node identity ac14140f, cluster identity 4711 [ 235.239342][ T9015] tipc: New replicast peer: 255.255.255.255 [ 235.260276][ T9015] tipc: Enabled bearer , priority 10 [ 235.369146][ T5946] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 235.532400][ T5946] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.569259][ T5946] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 235.592953][ T5946] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.616419][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.644794][ T9013] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 235.677210][ T5946] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.095379][ T9021] loop0: detected capacity change from 0 to 32768 [ 236.125621][ T9021] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.964 (9021) [ 236.196662][ T9021] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 236.232372][ T9021] BTRFS info (device loop0): using blake2b checksum algorithm [ 236.272166][ T24] tipc: Node number set to 2886997007 [ 236.299238][ T5946] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 236.358846][ T24] usb 4-1: USB disconnect, device number 9 [ 236.385175][ T9025] loop5: detected capacity change from 0 to 40427 [ 236.399923][ T9025] F2FS-fs: heap/no_heap options were deprecated [ 236.435702][ T9025] F2FS-fs (loop5): build fault injection rate: 19 [ 236.457035][ T9021] BTRFS info (device loop0): enabling ssd optimizations [ 236.464471][ T9025] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 236.471915][ T9021] BTRFS info (device loop0): turning on async discard [ 236.485697][ T5946] usb 7-1: unable to get BOS descriptor or descriptor too short [ 236.499035][ T9021] BTRFS info (device loop0): enabling free space tree [ 236.507810][ T5946] usb 7-1: not running at top speed; connect to a high speed hub [ 236.526435][ T9025] F2FS-fs (loop5): invalid crc value [ 236.530792][ T9021] BTRFS info (device loop0): use zstd compression, level 3 [ 236.539814][ T5946] usb 7-1: config 1 interface 0 has no altsetting 0 [ 236.554321][ T5946] usb 7-1: string descriptor 0 read error: -22 [ 236.571490][ T9025] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 236.584887][ T5946] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 236.604593][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.627614][ T30] audit: type=1800 audit(1773833314.479:21): pid=9021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.964" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 236.820287][ T9025] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 236.884876][ T9025] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 236.931159][ T9025] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 237.089487][ T9025] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x911/0x2060 [ 237.128429][ T5946] hid-picolcd 0003:04D8:C002.000D: unexpected long global item [ 237.170225][ T5946] hid-picolcd 0003:04D8:C002.000D: device report parse failed [ 237.183040][ T8328] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 237.211033][ T5946] hid-picolcd 0003:04D8:C002.000D: probe with driver hid-picolcd failed with error -22 [ 237.246165][ T9058] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80 [ 237.298270][ T30] audit: type=1800 audit(1773833315.149:22): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.966" name="file1" dev="loop5" ino=14 res=0 errno=0 [ 237.329303][ T5913] usb 7-1: USB disconnect, device number 4 [ 237.364734][ T9025] F2FS-fs (loop5): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x361/0xd80 [ 237.517254][ T7212] syz-executor: attempt to access beyond end of device [ 237.517254][ T7212] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 237.562774][ T7212] CPU: 0 UID: 0 PID: 7212 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 237.562803][ T7212] Tainted: [L]=SOFTLOCKUP [ 237.562809][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.562820][ T7212] Call Trace: [ 237.562826][ T7212] [ 237.562834][ T7212] dump_stack_lvl+0xe8/0x150 [ 237.562866][ T7212] f2fs_handle_critical_error+0x37c/0x540 [ 237.562897][ T7212] f2fs_write_end_io+0x1274/0x1740 [ 237.562947][ T7212] __submit_merged_bio+0x256/0x700 [ 237.562978][ T7212] __submit_merged_write_cond+0x3c9/0x4e0 [ 237.563011][ T7212] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 237.563061][ T7212] f2fs_write_data_pages+0x287e/0x34f0 [ 237.563127][ T7212] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 237.563169][ T7212] ? __lock_acquire+0x6b5/0x2cf0 [ 237.563235][ T7212] ? __lock_acquire+0x6b5/0x2cf0 [ 237.563277][ T7212] ? __lock_acquire+0x6b5/0x2cf0 [ 237.563309][ T7212] ? do_raw_spin_lock+0x12b/0x2f0 [ 237.563343][ T7212] ? do_raw_spin_unlock+0xf5/0x210 [ 237.563366][ T7212] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 237.563418][ T7212] do_writepages+0x32e/0x550 [ 237.563454][ T7212] ? do_raw_spin_unlock+0xf5/0x210 [ 237.563483][ T7212] filemap_fdatawrite+0x1e9/0x2f0 [ 237.563510][ T7212] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 237.563586][ T7212] ? do_raw_spin_unlock+0xf5/0x210 [ 237.563615][ T7212] f2fs_sync_dirty_inodes+0x30e/0x860 [ 237.563663][ T7212] f2fs_write_checkpoint+0x9df/0x26a0 [ 237.563721][ T7212] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 237.563806][ T7212] kill_f2fs_super+0x314/0x720 [ 237.563842][ T7212] ? __pfx_kill_f2fs_super+0x10/0x10 [ 237.563886][ T7212] ? lockdep_hardirqs_on+0x7a/0x110 [ 237.563925][ T7212] deactivate_locked_super+0xbc/0x130 [ 237.563956][ T7212] cleanup_mnt+0x437/0x4d0 [ 237.563975][ T7212] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.563999][ T7212] task_work_run+0x1d9/0x270 [ 237.564028][ T7212] ? __pfx_task_work_run+0x10/0x10 [ 237.564065][ T7212] exit_to_user_mode_loop+0xed/0x480 [ 237.564090][ T7212] ? rcu_is_watching+0x15/0xb0 [ 237.564115][ T7212] do_syscall_64+0x32d/0xf80 [ 237.564136][ T7212] ? trace_irq_disable+0x3b/0x150 [ 237.564158][ T7212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.564178][ T7212] ? clear_bhb_loop+0x40/0x90 [ 237.564202][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.564220][ T7212] RIP: 0033:0x7f048b39d9d7 [ 237.564238][ T7212] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 237.564253][ T7212] RSP: 002b:00007fff72716288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 237.564272][ T7212] RAX: 0000000000000000 RBX: 00007f048b432050 RCX: 00007f048b39d9d7 [ 237.564285][ T7212] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff72716340 [ 237.564297][ T7212] RBP: 00007fff72716340 R08: 00007fff72717340 R09: 00000000ffffffff [ 237.564309][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff727173d0 [ 237.564321][ T7212] R13: 00007f048b432050 R14: 0000000000039f40 R15: 00007fff72717410 [ 237.564357][ T7212] [ 237.567853][ T7212] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 238.166456][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 238.190757][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'. [ 238.219369][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 238.271460][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.280831][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 238.294133][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.303435][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'. [ 238.314872][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.342488][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.410879][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.458565][ T24] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 238.505473][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.537755][ T24] usb 7-1: config 0 descriptor?? [ 238.563124][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 239.060938][ T9084] loop5: detected capacity change from 0 to 65536 [ 239.080738][ T24] pwc: send_video_command error -71 [ 239.087513][ T9084] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 239.099453][ T24] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 239.137453][ T9084] XFS (loop5): Ending clean mount [ 239.148127][ T9084] XFS (loop5): Quotacheck needed: Please wait. [ 239.174590][ T24] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 239.287139][ T9084] XFS (loop5): Quotacheck: Done. [ 239.300557][ T24] usb 7-1: USB disconnect, device number 5 [ 239.740510][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 239.893879][ T7212] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 239.981157][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.011330][ T24] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 240.023861][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.059543][ T24] usb 7-1: config 0 descriptor?? [ 240.081693][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 240.508053][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 240.598210][ T9119] loop5: detected capacity change from 0 to 1024 [ 240.617202][ T9119] EXT4-fs: inline encryption not supported [ 240.646195][ T9119] EXT4-fs: Ignoring removed bh option [ 240.754416][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 240.848093][ T9119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.848571][ T9114] loop3: detected capacity change from 0 to 32768 [ 240.861870][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 240.862298][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 240.862798][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 240.890057][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 240.896950][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 240.910282][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 240.922694][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 240.934574][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 240.945019][ T30] audit: type=1800 audit(1773833318.789:23): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.987" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 240.954029][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 240.973635][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 240.982203][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 240.991991][ T9114] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.990 (9114) [ 241.006642][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 241.029025][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 241.057986][ T9114] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 241.086031][ T9114] BTRFS info (device loop3): using blake2b checksum algorithm [ 241.100801][ T24] pwc: Registered as video103. [ 241.132379][ T7212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.137660][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input16 [ 241.292303][ T24] usb 7-1: USB disconnect, device number 6 [ 241.607752][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 241.630881][ T9143] netlink: 60 bytes leftover after parsing attributes in process `syz.4.994'. [ 241.661791][ T9143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.994'. [ 241.720475][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 241.756730][ T9114] BTRFS info (device loop3): enabling ssd optimizations [ 241.775897][ T9114] BTRFS info (device loop3): turning on async discard [ 241.824719][ T9114] BTRFS info (device loop3): enabling free space tree [ 241.839345][ T9146] loop6: detected capacity change from 0 to 4096 [ 241.871999][ T9114] BTRFS info (device loop3): use zstd compression, level 3 [ 241.888630][ T9146] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.944219][ T9146] EXT4-fs (loop6): Test dummy encryption mode enabled [ 242.016171][ T9146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.034290][ T30] audit: type=1800 audit(1773833319.889:24): pid=9114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.990" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 242.124159][ T9151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.443248][ T5848] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 243.374253][ T30] audit: type=1326 audit(1773833321.219:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.0.1005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732e99c799 code=0x0 [ 243.439288][ T9159] loop4: detected capacity change from 0 to 32768 [ 243.461446][ T9159] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.999 (9159) [ 243.576051][ T9159] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 243.606231][ T9159] BTRFS info (device loop4): using blake2b checksum algorithm [ 243.734560][ T9167] loop3: detected capacity change from 0 to 40427 [ 243.748050][ T9159] BTRFS info (device loop4): enabling ssd optimizations [ 243.757961][ T9167] F2FS-fs: heap/no_heap options were deprecated [ 243.771296][ T9159] BTRFS info (device loop4): turning on async discard [ 243.785299][ T9159] BTRFS info (device loop4): enabling free space tree [ 243.793422][ T9167] F2FS-fs (loop3): Image doesn't support compression [ 243.800291][ T9167] F2FS-fs (loop3): build fault injection rate: 690 [ 243.807050][ T9159] BTRFS info (device loop4): use zstd compression, level 3 [ 243.816079][ T9167] F2FS-fs (loop3): build fault injection type: 0x4 [ 243.847070][ T9167] F2FS-fs (loop3): invalid crc value [ 243.945995][ T30] audit: type=1800 audit(1773833321.799:26): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.999" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 244.052861][ T5846] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 244.152089][ T9167] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 244.195880][ T9167] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 244.409728][ T9205] team_slave_0: entered promiscuous mode [ 244.417054][ T9205] team_slave_1: entered promiscuous mode [ 244.432028][ T30] audit: type=1800 audit(1773833322.289:27): pid=9167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1000" name="bus" dev="loop3" ino=14 res=0 errno=0 [ 244.455990][ T9205] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 244.485847][ T9205] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 244.522397][ T9167] syz.3.1000: attempt to access beyond end of device [ 244.522397][ T9167] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 244.592871][ T9153] overlayfs: failed index dir cleanup (-512) [ 244.624063][ T9153] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 244.741306][ T5848] syz-executor: attempt to access beyond end of device [ 244.741306][ T5848] loop3: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 244.792227][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 244.792256][ T5848] Tainted: [L]=SOFTLOCKUP [ 244.792263][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.792284][ T5848] Call Trace: [ 244.792292][ T5848] [ 244.792300][ T5848] dump_stack_lvl+0xe8/0x150 [ 244.792333][ T5848] f2fs_handle_critical_error+0x37c/0x540 [ 244.792363][ T5848] f2fs_write_end_io+0x1274/0x1740 [ 244.792410][ T5848] __submit_merged_bio+0x256/0x700 [ 244.792442][ T5848] __submit_merged_write_cond+0x3c9/0x4e0 [ 244.792475][ T5848] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 244.792520][ T5848] f2fs_write_data_pages+0x287e/0x34f0 [ 244.792582][ T5848] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 244.792626][ T5848] ? __pfx_css_rstat_updated+0x10/0x10 [ 244.792682][ T5848] ? mod_memcg_lruvec_state+0x208/0x220 [ 244.792710][ T5848] ? __lock_acquire+0x6b5/0x2cf0 [ 244.792754][ T5848] ? __lock_acquire+0x6b5/0x2cf0 [ 244.792787][ T5848] ? do_raw_spin_lock+0x12b/0x2f0 [ 244.792822][ T5848] ? do_raw_spin_unlock+0xf5/0x210 [ 244.792857][ T5848] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 244.792883][ T5848] do_writepages+0x32e/0x550 [ 244.792921][ T5848] ? do_raw_spin_unlock+0xf5/0x210 [ 244.792946][ T5848] filemap_fdatawrite+0x1e9/0x2f0 [ 244.792971][ T5848] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 244.793034][ T5848] ? do_raw_spin_unlock+0xf5/0x210 [ 244.793060][ T5848] f2fs_sync_dirty_inodes+0x30e/0x860 [ 244.793102][ T5848] f2fs_write_checkpoint+0x9df/0x26a0 [ 244.793150][ T5848] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 244.793205][ T5848] ? kfree+0x1c5/0x650 [ 244.793229][ T5848] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 244.793256][ T5848] kill_f2fs_super+0x314/0x720 [ 244.793288][ T5848] ? __pfx_kill_f2fs_super+0x10/0x10 [ 244.793327][ T5848] ? lockdep_hardirqs_on+0x7a/0x110 [ 244.793360][ T5848] deactivate_locked_super+0xbc/0x130 [ 244.793388][ T5848] cleanup_mnt+0x437/0x4d0 [ 244.793406][ T5848] ? _raw_spin_unlock_irq+0x23/0x50 [ 244.793428][ T5848] task_work_run+0x1d9/0x270 [ 244.793454][ T5848] ? __pfx_task_work_run+0x10/0x10 [ 244.793486][ T5848] exit_to_user_mode_loop+0xed/0x480 [ 244.793510][ T5848] ? rcu_is_watching+0x15/0xb0 [ 244.793533][ T5848] do_syscall_64+0x32d/0xf80 [ 244.793552][ T5848] ? trace_irq_disable+0x3b/0x150 [ 244.793573][ T5848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.793591][ T5848] ? clear_bhb_loop+0x40/0x90 [ 244.793612][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.793629][ T5848] RIP: 0033:0x7f589719d9d7 [ 244.793646][ T5848] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 244.793660][ T5848] RSP: 002b:00007ffeabb987e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 244.793678][ T5848] RAX: 0000000000000000 RBX: 00007f5897232050 RCX: 00007f589719d9d7 [ 244.793689][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeabb988a0 [ 244.793699][ T5848] RBP: 00007ffeabb988a0 R08: 00007ffeabb998a0 R09: 00000000ffffffff [ 244.793711][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeabb99930 [ 244.793721][ T5848] R13: 00007f5897232050 R14: 000000000003bb7b R15: 00007ffeabb99970 [ 244.793750][ T5848] [ 244.849292][ T5848] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 245.019422][ T7810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.171498][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 245.171528][ T5848] Tainted: [L]=SOFTLOCKUP [ 245.171535][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.171546][ T5848] Call Trace: [ 245.171553][ T5848] [ 245.171561][ T5848] dump_stack_lvl+0xe8/0x150 [ 245.171593][ T5848] f2fs_handle_critical_error+0x37c/0x540 [ 245.171624][ T5848] f2fs_write_end_io+0x1274/0x1740 [ 245.171673][ T5848] __submit_merged_bio+0x256/0x700 [ 245.171704][ T5848] __submit_merged_write_cond+0x3c9/0x4e0 [ 245.171738][ T5848] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 245.171786][ T5848] f2fs_write_data_pages+0x287e/0x34f0 [ 245.171848][ T5848] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 245.171896][ T5848] ? __pfx_css_rstat_updated+0x10/0x10 [ 245.171952][ T5848] ? mod_memcg_lruvec_state+0x208/0x220 [ 245.171980][ T5848] ? __lock_acquire+0x6b5/0x2cf0 [ 245.172022][ T5848] ? __lock_acquire+0x6b5/0x2cf0 [ 245.172055][ T5848] ? do_raw_spin_lock+0x12b/0x2f0 [ 245.172090][ T5848] ? do_raw_spin_unlock+0xf5/0x210 [ 245.172113][ T5848] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 245.172142][ T5848] do_writepages+0x32e/0x550 [ 245.172175][ T5848] ? do_raw_spin_unlock+0xf5/0x210 [ 245.172202][ T5848] filemap_fdatawrite+0x1e9/0x2f0 [ 245.172238][ T5848] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 245.172302][ T5848] ? do_raw_spin_unlock+0xf5/0x210 [ 245.172329][ T5848] f2fs_sync_dirty_inodes+0x30e/0x860 [ 245.172388][ T5848] f2fs_write_checkpoint+0x9df/0x26a0 [ 245.172438][ T5848] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 245.172498][ T5848] ? kfree+0x1c5/0x650 [ 245.172523][ T5848] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 245.172553][ T5848] kill_f2fs_super+0x314/0x720 [ 245.172587][ T5848] ? __pfx_kill_f2fs_super+0x10/0x10 [ 245.172628][ T5848] ? lockdep_hardirqs_on+0x7a/0x110 [ 245.172664][ T5848] deactivate_locked_super+0xbc/0x130 [ 245.172692][ T5848] cleanup_mnt+0x437/0x4d0 [ 245.172710][ T5848] ? _raw_spin_unlock_irq+0x23/0x50 [ 245.172733][ T5848] task_work_run+0x1d9/0x270 [ 245.172761][ T5848] ? __pfx_task_work_run+0x10/0x10 [ 245.172795][ T5848] exit_to_user_mode_loop+0xed/0x480 [ 245.172821][ T5848] ? rcu_is_watching+0x15/0xb0 [ 245.172845][ T5848] do_syscall_64+0x32d/0xf80 [ 245.172870][ T5848] ? trace_irq_disable+0x3b/0x150 [ 245.172900][ T5848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.172918][ T5848] ? clear_bhb_loop+0x40/0x90 [ 245.172940][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.172959][ T5848] RIP: 0033:0x7f589719d9d7 [ 245.172977][ T5848] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 245.172992][ T5848] RSP: 002b:00007ffeabb987e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 245.173011][ T5848] RAX: 0000000000000000 RBX: 00007f5897232050 RCX: 00007f589719d9d7 [ 245.173024][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeabb988a0 [ 245.173034][ T5848] RBP: 00007ffeabb988a0 R08: 00007ffeabb998a0 R09: 00000000ffffffff [ 245.173046][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeabb99930 [ 245.173057][ T5848] R13: 00007f5897232050 R14: 000000000003bb7b R15: 00007ffeabb99970 [ 245.173088][ T5848] [ 245.174621][ T5848] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 246.363720][ T5920] IPVS: starting estimator thread 0... [ 246.450548][ T9234] overlayfs: overlapping lowerdir path [ 246.500488][ T9228] IPVS: using max 27 ests per chain, 64800 per kthread [ 247.054207][ T9250] loop3: detected capacity change from 0 to 4096 [ 247.071978][ T9250] EXT4-fs: inline encryption not supported [ 247.085437][ T9250] EXT4-fs (loop3): Test dummy encryption mode enabled [ 247.097881][ T9250] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 247.107501][ T9250] System zones: 0-5 [ 247.127836][ T9250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.288677][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.703395][ T9251] loop0: detected capacity change from 0 to 32768 [ 247.782340][ T30] audit: type=1800 audit(1773833325.639:28): pid=9251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1028" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 249.352684][ T9308] loop3: detected capacity change from 0 to 32768 [ 249.405912][ T9308] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 249.422454][ T5920] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 249.496518][ T9308] XFS (loop3): Ending clean mount [ 249.554971][ T9308] XFS (loop3): Quotacheck needed: Please wait. [ 249.609244][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 249.648244][ T5920] usb 5-1: config 1 interface 0 has no altsetting 0 [ 249.694026][ T5920] usb 5-1: string descriptor 0 read error: -22 [ 249.715804][ T5920] usb 5-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.40 [ 249.756925][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.916403][ T9308] XFS (loop3): Quotacheck: Done. [ 249.972563][ T9312] loop6: detected capacity change from 0 to 32768 [ 249.980613][ T9312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1051 (9312) [ 249.999938][ T9312] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.010605][ T9312] BTRFS info (device loop6): using crc32c checksum algorithm [ 250.091228][ T36] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 250.134241][ T9312] BTRFS warning (device loop6): couldn't read tree root [ 250.150945][ T9312] BTRFS warning (device loop6): try to load backup roots slot 1 [ 250.166849][ T1019] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 250.226962][ T9312] BTRFS warning (device loop6): couldn't read tree root [ 250.254466][ T9312] BTRFS warning (device loop6): try to load backup roots slot 2 [ 250.262678][ T5920] hid_parser_main: 28 callbacks suppressed [ 250.262697][ T5920] ortek 0003:05A4:1700.000E: unknown main item tag 0x0 [ 250.286999][ T1019] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 250.310304][ T5920] ortek 0003:05A4:1700.000E: unknown main item tag 0x0 [ 250.320481][ T9312] BTRFS warning (device loop6): couldn't read tree root [ 250.329354][ T5920] ortek 0003:05A4:1700.000E: unknown main item tag 0x0 [ 250.340080][ T5920] ortek 0003:05A4:1700.000E: unknown main item tag 0x0 [ 250.342029][ T9312] BTRFS warning (device loop6): try to load backup roots slot 3 [ 250.355495][ T5920] ortek 0003:05A4:1700.000E: unknown main item tag 0x0 [ 250.359284][ T5946] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 250.379060][ T5920] ortek 0003:05A4:1700.000E: unknown main item tag 0x0 [ 250.394823][ T5920] ortek 0003:05A4:1700.000E: unknown main item tag 0x0 [ 250.401956][ T5848] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.410516][ T5920] ortek 0003:05A4:1700.000E: unknown main item tag 0x0 [ 250.410549][ T5920] ortek 0003:05A4:1700.000E: unknown main item tag 0x0 [ 250.410576][ T5920] ortek 0003:05A4:1700.000E: unknown main item tag 0x0 [ 250.443191][ T9312] BTRFS info (device loop6): checking UUID tree [ 250.465559][ T9312] BTRFS info (device loop6): setting nodatasum [ 250.490366][ T9312] BTRFS info (device loop6): enabling ssd optimizations [ 250.528693][ T9312] BTRFS info (device loop6): turning on flush-on-commit [ 250.554170][ T9312] BTRFS info (device loop6): turning on async discard [ 250.580176][ T9312] BTRFS info (device loop6): enabling free space tree [ 250.588322][ T5946] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.605666][ T5946] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.645009][ T9312] BTRFS info (device loop6): trying to use backup root at mount time [ 250.653699][ T5946] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 250.663012][ T9312] BTRFS info (device loop6): max_inline set to 0 [ 250.669541][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.721004][ T5920] ortek 0003:05A4:1700.000E: hidraw0: USB HID vff.7f Device [HID 05a4:1700] on usb-dummy_hcd.4-1/input0 [ 250.796784][ T5920] usb 5-1: USB disconnect, device number 14 [ 250.934417][ T5946] usb 6-1: usb_control_msg returned -32 [ 250.954124][ T5946] usbtmc 6-1:16.0: can't read capabilities [ 251.057046][ T9367] fido_id[9367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 251.229502][ T7810] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 251.405069][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 251.545615][ T5920] usb 6-1: USB disconnect, device number 6 [ 251.839506][ T5946] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 252.013782][ T5946] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.070466][ T5946] usb 4-1: config 1 interface 0 has no altsetting 0 [ 252.096213][ T5946] usb 4-1: string descriptor 0 read error: -22 [ 252.119126][ T5946] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.40 [ 252.139021][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.250728][ T9396] bond1: option mode: unable to set because the bond device has slaves [ 252.286664][ T9396] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 252.505503][ T9409] loop0: detected capacity change from 0 to 512 [ 252.597795][ T9409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.643022][ T9409] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.669702][ T9409] EXT4-fs error (device loop0): ext4_do_update_inode:5572: inode #2: comm syz.0.1080: corrupted inode contents [ 252.717226][ T9409] EXT4-fs error (device loop0): ext4_dirty_inode:6453: inode #2: comm syz.0.1080: mark_inode_dirty error [ 252.751325][ T9409] EXT4-fs error (device loop0): ext4_do_update_inode:5572: inode #2: comm syz.0.1080: corrupted inode contents [ 252.767223][ T9409] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.1080: mark_inode_dirty error [ 252.821375][ T9409] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.1080: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 252.821375][ T9409] [ 252.884436][ T5946] lenovo 0003:17EF:60A4.000F: hidraw0: USB HID v0.01 Device [HID 17ef:60a4] on usb-dummy_hcd.3-1/input0 [ 252.940491][ T5946] usb 4-1: USB disconnect, device number 10 [ 253.021954][ T9420] fido_id[9420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 253.095047][ T8328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.063158][ T9449] loop6: detected capacity change from 0 to 512 [ 254.150587][ T9449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.502025][ T7810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.917241][ T9462] loop3: detected capacity change from 0 to 32768 [ 254.990161][ T7260] loop3: p9 p11 p16 [ 255.095640][ T9462] loop3: p9 p11 p16 [ 255.437574][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.446454][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.867748][ T7260] udevd[7260]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 255.870289][ T7209] udevd[7209]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 255.886731][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 256.014837][ T7209] udevd[7209]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 256.028421][ T7250] udevd[7250]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 256.038795][ T7211] udevd[7211]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 256.128534][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 256.642992][ T9518] netlink: 'syz.0.1121': attribute type 2 has an invalid length. [ 256.903325][ T9497] loop5: detected capacity change from 0 to 32768 [ 256.998842][ T9497] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 257.208089][ T9497] XFS (loop5): Ending clean mount [ 257.233996][ T9497] XFS (loop5): Quotacheck needed: Please wait. [ 257.503973][ T9497] XFS (loop5): Quotacheck: Done. [ 257.617134][ T9520] loop6: detected capacity change from 0 to 32768 [ 257.755961][ T9520] (syz.6.1122,9520,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 257.826192][ T9520] (syz.6.1122,9520,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 258.009390][ T7212] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 258.198573][ T9520] JBD2: Ignoring recovery information on journal [ 258.376186][ T9520] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 259.026313][ T9551] loop4: detected capacity change from 0 to 40427 [ 259.067914][ T9551] F2FS-fs (loop4): invalid crc value [ 259.087436][ T9520] (syz.6.1122,9520,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 259.377032][ T9551] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 259.422523][ T9551] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 259.555322][ T5846] syz-executor: attempt to access beyond end of device [ 259.555322][ T5846] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 259.586826][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 259.586858][ T5846] Tainted: [L]=SOFTLOCKUP [ 259.586866][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.586877][ T5846] Call Trace: [ 259.586885][ T5846] [ 259.586895][ T5846] dump_stack_lvl+0xe8/0x150 [ 259.586932][ T5846] f2fs_handle_critical_error+0x37c/0x540 [ 259.586967][ T5846] f2fs_write_end_io+0x1274/0x1740 [ 259.587022][ T5846] __submit_merged_bio+0x256/0x700 [ 259.587057][ T5846] __submit_merged_write_cond+0x3c9/0x4e0 [ 259.587094][ T5846] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 259.587147][ T5846] f2fs_write_data_pages+0x287e/0x34f0 [ 259.587176][ T5846] ? is_bpf_text_address+0x26/0x2b0 [ 259.587245][ T5846] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 259.587291][ T5846] ? do_raw_spin_lock+0x12b/0x2f0 [ 259.587347][ T5846] ? do_raw_spin_unlock+0xf5/0x210 [ 259.587380][ T5846] ? __lock_acquire+0x6b5/0x2cf0 [ 259.587427][ T5846] ? __lock_acquire+0x6b5/0x2cf0 [ 259.587472][ T5846] ? do_raw_spin_lock+0x12b/0x2f0 [ 259.587510][ T5846] ? do_raw_spin_unlock+0xf5/0x210 [ 259.587537][ T5846] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 259.587569][ T5846] do_writepages+0x32e/0x550 [ 259.587605][ T5846] ? do_raw_spin_unlock+0xf5/0x210 [ 259.587637][ T5846] filemap_fdatawrite+0x1e9/0x2f0 [ 259.587666][ T5846] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 259.587742][ T5846] ? do_raw_spin_unlock+0xf5/0x210 [ 259.587774][ T5846] f2fs_sync_dirty_inodes+0x30e/0x860 [ 259.587837][ T5846] f2fs_write_checkpoint+0x9df/0x26a0 [ 259.587907][ T5846] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 259.587993][ T5846] kill_f2fs_super+0x314/0x720 [ 259.588027][ T5846] ? __pfx_kill_f2fs_super+0x10/0x10 [ 259.588069][ T5846] ? lockdep_hardirqs_on+0x7a/0x110 [ 259.588104][ T5846] deactivate_locked_super+0xbc/0x130 [ 259.588134][ T5846] cleanup_mnt+0x437/0x4d0 [ 259.588152][ T5846] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.588176][ T5846] task_work_run+0x1d9/0x270 [ 259.588203][ T5846] ? __pfx_task_work_run+0x10/0x10 [ 259.588238][ T5846] exit_to_user_mode_loop+0xed/0x480 [ 259.588263][ T5846] ? rcu_is_watching+0x15/0xb0 [ 259.588286][ T5846] do_syscall_64+0x32d/0xf80 [ 259.588307][ T5846] ? trace_irq_disable+0x3b/0x150 [ 259.588329][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.588348][ T5846] ? clear_bhb_loop+0x40/0x90 [ 259.588371][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.588407][ T5846] RIP: 0033:0x7f12a9b9d9d7 [ 259.588427][ T5846] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 259.588443][ T5846] RSP: 002b:00007ffde1f38dd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 259.588481][ T5846] RAX: 0000000000000000 RBX: 00007f12a9c32050 RCX: 00007f12a9b9d9d7 [ 259.588493][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde1f38e90 [ 259.588504][ T5846] RBP: 00007ffde1f38e90 R08: 00007ffde1f39e90 R09: 00000000ffffffff [ 259.588517][ T5846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde1f39f20 [ 259.588528][ T5846] R13: 00007f12a9c32050 R14: 000000000003f593 R15: 00007ffde1f39f60 [ 259.588559][ T5846] [ 259.588589][ T5846] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 259.729119][ T5904] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 259.736182][ T7810] ocfs2: Unmounting device (7,6) on (node local) [ 260.001583][ T5904] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.063418][ T5904] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 260.121506][ T5904] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 260.162818][ T5904] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 260.200756][ T5904] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 260.237643][ T5904] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.263718][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.286971][ T5904] usb 4-1: Product: syz [ 260.304404][ T5904] usb 4-1: Manufacturer: syz [ 260.330523][ T5904] usb 4-1: SerialNumber: syz [ 260.901500][ T9619] loop6: detected capacity change from 0 to 32768 [ 260.928358][ T9619] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1146 (9619) [ 260.991149][ T5946] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 260.993226][ T9619] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.038918][ T9619] BTRFS info (device loop6): using crc32c checksum algorithm [ 261.182797][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.194700][ T9619] BTRFS info (device loop6): enabling ssd optimizations [ 261.205388][ T9619] BTRFS info (device loop6): turning on flush-on-commit [ 261.214304][ T9619] BTRFS info (device loop6): enabling free space tree [ 261.223844][ T9619] BTRFS info (device loop6): enabling auto defrag [ 261.234551][ T9619] BTRFS info (device loop6): use lzo compression, level 1 [ 261.252155][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.285120][ T9619] BTRFS info (device loop6): max_inline set to 4096 [ 261.307178][ T5946] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.376230][ T5904] cdc_ncm 4-1:1.0: bind() failure [ 261.391600][ T30] audit: type=1800 audit(1773833595.242:29): pid=9619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1146" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 261.412286][ T5946] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.423699][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.500552][ T5946] usb 5-1: config 0 descriptor?? [ 261.507053][ T5904] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 261.539916][ T5904] cdc_ncm 4-1:1.1: bind() failure [ 261.598787][ T5904] usb 4-1: USB disconnect, device number 11 [ 262.019444][ T5946] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 262.342386][ T7810] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 262.556626][ T9666] loop5: detected capacity change from 0 to 512 [ 262.609033][ T9666] EXT4-fs error (device loop5): ext4_quota_enable:7192: inode #4: comm syz.5.1159: iget: immutable or append flags not allowed on symlinks [ 262.674830][ T9666] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 262.675339][ T9666] EXT4-fs error (device loop5): ext4_quota_enable:7195: comm syz.5.1159: Bad quota inode: 4, type: 1 [ 262.684511][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 262.684530][ C1] EXT4-fs (loop5): initial error at time 1773833596: ext4_quota_enable:7192: inode 4 [ 262.684563][ C1] EXT4-fs (loop5): last error at time 1773833596: ext4_quota_enable:7192: inode 4 [ 262.748974][ T9666] loop5: lost filesystem error report for type 5 error -117 [ 262.753946][ T9666] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 262.783316][ T9666] EXT4-fs (loop5): mount failed [ 263.169487][ T5913] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 263.294981][ C0] plantronics 0003:047F:FFFF.0010: usb_submit_urb(ctrl) failed: -1 [ 263.328778][ T807] usb 5-1: USB disconnect, device number 15 [ 263.337082][ T5913] usb 7-1: Using ep0 maxpacket: 32 [ 263.355372][ T5913] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 263.387554][ T5913] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 263.422858][ T5913] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 263.463067][ T5913] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 263.497537][ T5913] usb 7-1: config 0 interface 0 has no altsetting 0 [ 263.510702][ T5913] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 263.526495][ T5913] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 263.563295][ T5913] usb 7-1: Product: syz [ 263.574167][ T5913] usb 7-1: Manufacturer: syz [ 263.590623][ T5913] usb 7-1: SerialNumber: syz [ 263.609340][ T5913] usb 7-1: config 0 descriptor?? [ 263.623488][ T5913] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 263.638672][ T5913] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 263.744200][ T9690] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 264.317759][ T5933] usb 7-1: USB disconnect, device number 7 [ 264.323363][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 264.345875][ T5933] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 265.930173][ T5933] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 266.111039][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 266.131402][ T5933] usb 4-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 266.152605][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.181706][ T5933] usb 4-1: Product: syz [ 266.196683][ T5933] usb 4-1: Manufacturer: syz [ 266.218604][ T5933] usb 4-1: SerialNumber: syz [ 266.544134][ T9753] block nbd6: shutting down sockets [ 266.984295][ T5933] usb 4-1: USB disconnect, device number 12 [ 267.638734][ T9757] loop4: detected capacity change from 0 to 32768 [ 267.699145][ T9757] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 267.740572][ T9757] JBD2: Ignoring recovery information on journal [ 267.936161][ T9757] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 268.071137][ T9785] loop0: detected capacity change from 0 to 2048 [ 268.164870][ T9789] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.317476][ T30] audit: type=1800 audit(1773833602.162:30): pid=9785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1205" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 268.346213][ T9793] loop3: detected capacity change from 0 to 4096 [ 268.378334][ T9793] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.428741][ T9793] EXT4-fs (loop3): Test dummy encryption mode enabled [ 268.476018][ T5846] ocfs2: Unmounting device (7,4) on (node local) [ 268.486927][ T9793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.711580][ T9789] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 268.763549][ T9789] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 268.811600][ T9789] Remounting filesystem read-only [ 268.900397][ T8328] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 268.943048][ T9804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1210'. [ 269.127623][ T9809] loop0: detected capacity change from 0 to 2048 [ 269.206659][ T9809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.279153][ T5913] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 269.336530][ T8328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.451344][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.493890][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.521848][ T5913] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 269.532140][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.546342][ T5913] usb 6-1: config 0 descriptor?? [ 269.650791][ T9824] loop6: detected capacity change from 0 to 128 [ 269.684183][ T9824] EXT4-fs: Ignoring removed i_version option [ 269.733421][ T9824] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0003] [ 269.761167][ T9824] System zones: 1-3, 19-19, 35-36 [ 269.811050][ T9824] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.828279][ T9793] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 269.841305][ T9824] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 270.001260][ T5913] hid_parser_main: 8024 callbacks suppressed [ 270.001282][ T5913] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x2 [ 270.066746][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.068787][ T5913] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 270.106354][ T7810] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 270.803065][ T5913] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 270.827140][ T5913] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 270.854971][ T5913] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -71 [ 270.893728][ T5913] usb 6-1: USB disconnect, device number 7 [ 270.987253][ T9837] loop6: detected capacity change from 0 to 32768 [ 271.940121][ T9870] loop6: detected capacity change from 0 to 8 [ 272.068433][ T9870] SQUASHFS error: Unknown LZ4 version [ 272.122528][ T9870] squashfs image failed sanity check [ 272.438620][ T9861] loop0: detected capacity change from 0 to 32768 [ 272.513156][ T9861] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 272.640743][ T9861] XFS (loop0): Ending clean mount [ 272.669966][ T9861] XFS (loop0): Quotacheck needed: Please wait. [ 272.819308][ T5933] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 272.869226][ T5166] Bluetooth: hci5: command 0x0406 tx timeout [ 272.938149][ T9861] XFS (loop0): Quotacheck: Done. [ 273.011789][ T5933] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.057595][ T5933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.100747][ T5933] usb 4-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 273.125695][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 273.147660][ T5933] usb 4-1: SerialNumber: syz [ 273.222475][ T8328] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 273.378128][ T5933] usb 4-1: 0:2 : does not exist [ 273.383884][ T5904] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 273.491424][ T5933] usb 4-1: USB disconnect, device number 13 [ 273.542312][ T7260] udevd[7260]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.558489][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 273.570517][ T5904] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.587220][ T5904] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.614377][ T5904] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 273.625260][ T5904] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 273.636802][ T5904] usb 5-1: Product: syz [ 273.643220][ T5904] usb 5-1: Manufacturer: syz [ 273.660329][ T5904] hub 5-1:4.0: USB hub found [ 273.866234][ T5904] hub 5-1:4.0: 5 ports detected [ 273.872577][ T5904] hub 5-1:4.0: insufficient power available to use all downstream ports [ 273.945596][ T9910] loop5: detected capacity change from 0 to 32768 [ 273.964712][ T9910] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1252 (9910) [ 274.042772][ T9910] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 274.066980][ T9910] BTRFS info (device loop5): using blake2b checksum algorithm [ 274.207027][ T9910] BTRFS info (device loop5): enabling ssd optimizations [ 274.247292][ T9910] BTRFS info (device loop5): turning on async discard [ 274.290708][ T9910] BTRFS info (device loop5): enabling free space tree [ 274.340331][ T9910] BTRFS info (device loop5): use zstd compression, level 3 [ 274.438699][ T30] audit: type=1800 audit(1773833608.282:31): pid=9910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1252" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 274.664827][ T7212] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 274.780882][ T9914] loop0: detected capacity change from 0 to 32768 [ 274.925397][ T9914] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 275.054349][ T9914] JBD2: Ignoring recovery information on journal [ 275.121829][ T5904] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 275.156932][ T5904] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 275.218916][ T5933] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 275.234857][ T9914] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 275.389153][ T5913] usb 5-1: USB disconnect, device number 16 [ 275.411033][ T5933] usb 6-1: Using ep0 maxpacket: 16 [ 275.457013][ T5933] usb 6-1: unable to get BOS descriptor or descriptor too short [ 275.484716][ T5933] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 275.511147][ T5933] usb 6-1: can't read configurations, error -71 [ 275.602716][ T8328] ocfs2: Unmounting device (7,0) on (node local) [ 275.800487][ T9954] loop3: detected capacity change from 0 to 32768 [ 275.819869][ T9954] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 275.894824][ T9954] XFS (loop3): Ending clean mount [ 275.932853][ T9954] XFS (loop3): Quotacheck needed: Please wait. [ 275.978792][ T9978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1267'. [ 275.990252][ T5904] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 276.018745][ T807] libceph: connect (1)[c::]:6789 error -101 [ 276.026126][ T807] libceph: mon0 (1)[c::]:6789 connect error [ 276.077806][ T807] libceph: connect (1)[c::]:6789 error -101 [ 276.089125][ T807] libceph: mon0 (1)[c::]:6789 connect error [ 276.101328][ T5946] libceph: connect (1)[c::]:6789 error -101 [ 276.131732][ T5946] libceph: mon0 (1)[c::]:6789 connect error [ 276.159217][ T9954] XFS (loop3): Quotacheck: Done. [ 276.189559][ T5904] usb 7-1: Using ep0 maxpacket: 16 [ 276.209531][ T5904] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 276.232868][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.250923][ T5904] usb 7-1: config 0 descriptor?? [ 276.268174][ T5904] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 276.365112][ T807] libceph: connect (1)[c::]:6789 error -101 [ 276.383820][ T807] libceph: mon0 (1)[c::]:6789 connect error [ 276.401115][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 276.407135][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 276.483238][ T5848] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 276.673234][ T9968] ceph: No mds server is up or the cluster is laggy [ 276.702044][ T9990] loop4: detected capacity change from 0 to 128 [ 276.720233][ T9974] ceph: No mds server is up or the cluster is laggy [ 276.778137][ T9990] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 276.867807][ T9990] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.920669][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 276.932598][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 276.999874][ T5946] libceph: connect (1)[c::]:6789 error -101 [ 277.013632][ T5946] libceph: mon0 (1)[c::]:6789 connect error [ 277.113723][ T5846] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.496890][ T5904] gspca_sonixj: reg_w1 err -71 [ 277.518988][ T5904] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 277.520219][ T5913] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 277.575979][ T5904] usb 7-1: USB disconnect, device number 8 [ 277.718172][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.760743][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.776672][ T5987] IPVS: starting estimator thread 0... [ 277.787209][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.815349][ T5913] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.829543][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.853447][ T5913] usb 1-1: config 0 descriptor?? [ 277.879180][T10024] IPVS: using max 34 ests per chain, 81600 per kthread [ 278.334843][ T5913] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 278.382269][T10021] loop4: detected capacity change from 0 to 40427 [ 278.399062][ T5987] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 278.399730][ T5946] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 278.580800][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.590383][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 278.602739][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.616482][ T5946] usb 6-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.638763][ T5987] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.642320][ T5946] usb 6-1: config 1 interface 0 has no altsetting 0 [ 278.673725][ T5946] usb 6-1: string descriptor 0 read error: -22 [ 278.674503][ T5987] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.681567][ T5946] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.40 [ 278.698278][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.717511][ T5987] usb 4-1: config 0 descriptor?? [ 278.725748][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.152797][T10046] xt_hashlimit: size too large, truncated to 1048576 [ 279.242358][ T5987] plantronics 0003:047F:FFFF.0013: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 279.256067][ T5946] cypress 0003:04B4:DE64.0014: unknown main item tag 0x0 [ 279.256100][ T5946] cypress 0003:04B4:DE64.0014: unknown main item tag 0x0 [ 279.302939][ T5946] cypress 0003:04B4:DE64.0014: unknown main item tag 0x0 [ 279.318313][ T5946] cypress 0003:04B4:DE64.0014: unknown main item tag 0x0 [ 279.327171][ T5946] cypress 0003:04B4:DE64.0014: unknown main item tag 0x0 [ 279.358772][ T5946] cypress 0003:04B4:DE64.0014: unknown main item tag 0x0 [ 279.391281][ T5946] cypress 0003:04B4:DE64.0014: unknown main item tag 0x0 [ 279.430227][ T5946] cypress 0003:04B4:DE64.0014: unknown main item tag 0x0 [ 279.476481][ T5946] cypress 0003:04B4:DE64.0014: unknown main item tag 0x0 [ 279.515401][ T5946] cypress 0003:04B4:DE64.0014: unknown main item tag 0x0 [ 279.663233][ C1] plantronics 0003:047F:FFFF.0012: usb_submit_urb(ctrl) failed: -1 [ 279.724035][ T5946] cypress 0003:04B4:DE64.0014: hidraw2: USB HID v0.04 Device [HID 04b4:de64] on usb-dummy_hcd.5-1/input0 [ 279.761176][ T5920] usb 4-1: USB disconnect, device number 14 [ 279.858943][ T5946] usb 6-1: USB disconnect, device number 10 [ 279.964292][T10044] loop4: detected capacity change from 0 to 32768 [ 279.973515][T10051] fido_id[10051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 279.997102][T10044] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1294 (10044) [ 280.075246][T10044] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.108066][T10044] BTRFS info (device loop4): using crc32c checksum algorithm [ 280.160872][T10055] loop5: detected capacity change from 0 to 512 [ 280.198986][T10055] EXT4-fs: Ignoring removed orlov option [ 280.223952][ T1346] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 280.250416][T10044] BTRFS warning (device loop4): couldn't read tree root [ 280.259063][T10055] EXT4-fs: Ignoring removed i_version option [ 280.276771][T10044] BTRFS warning (device loop4): try to load backup roots slot 1 [ 280.287699][T10055] EXT4-fs error (device loop5): ext4_iget_extra_inode:5028: inode #15: comm syz.5.1297: corrupted in-inode xattr: e_value size too large [ 280.311203][T10055] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 280.312952][T10055] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1297: couldn't read orphan inode 15 (err -117) [ 280.320170][ T1337] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 280.322271][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 280.352774][T10044] BTRFS warning (device loop4): couldn't read tree root [ 280.353507][ C1] EXT4-fs (loop5): initial error at time 1773833614: ext4_iget_extra_inode:5028: inode 15 [ 280.370397][ C1] EXT4-fs (loop5): last error at time 1773833614: ext4_iget_extra_inode:5028: inode 15 [ 280.381128][T10044] BTRFS warning (device loop4): try to load backup roots slot 2 [ 280.404971][ T1346] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 280.424016][T10044] BTRFS warning (device loop4): couldn't read tree root [ 280.439323][T10055] loop5: lost filesystem error report for type 5 error -117 [ 280.456047][T10044] BTRFS warning (device loop4): try to load backup roots slot 3 [ 280.480206][T10055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.495575][ T5987] usb 1-1: USB disconnect, device number 16 [ 280.560145][T10044] BTRFS info (device loop4): checking UUID tree [ 280.593278][T10044] BTRFS info (device loop4): setting nodatasum [ 280.621022][T10044] BTRFS info (device loop4): enabling ssd optimizations [ 280.628627][T10044] BTRFS info (device loop4): turning on flush-on-commit [ 280.651341][T10044] BTRFS info (device loop4): turning on async discard [ 280.683708][T10044] BTRFS info (device loop4): enabling free space tree [ 280.717114][T10078] EXT4-fs error (device loop5): ext4_map_blocks:779: inode #2: block 12: comm syz.5.1297: lblock 3 mapped to illegal pblock 12 (length 1) [ 280.718996][T10044] BTRFS info (device loop4): trying to use backup root at mount time [ 280.755071][T10044] BTRFS info (device loop4): max_inline set to 0 [ 280.871025][ T5987] page_pool_release_retry() stalled pool shutdown: id 64, 1 inflight 60 sec [ 280.988122][ T7212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.028499][T10083] 9p: Bad value for 'rfdno' [ 281.060618][T10087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.116427][ T5846] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.287217][T10092] loop5: detected capacity change from 0 to 512 [ 281.501616][T10092] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1303: bg 0: block 5: invalid block bitmap [ 281.549880][T10092] loop5: lost filesystem error report for type 5 error -117 [ 281.559087][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 281.572918][ C0] EXT4-fs (loop5): initial error at time 1773833615: ext4_validate_block_bitmap:432 [ 281.582370][ C0] EXT4-fs (loop5): last error at time 1773833615: ext4_validate_block_bitmap:432 [ 281.644129][T10092] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 281.719003][T10092] loop5: lost filesystem error report for type 5 error -117 [ 281.719488][T10092] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1303: invalid indirect mapped block 3 (level 2) [ 281.793818][T10092] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 281.829630][T10092] EXT4-fs (loop5): 1 orphan inode deleted [ 281.857708][T10092] EXT4-fs (loop5): 1 truncate cleaned up [ 281.867509][T10092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.100572][T10111] loop0: detected capacity change from 0 to 1024 [ 282.156721][T10111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.298434][ T7212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.441361][T10111] EXT4-fs error (device loop0): ext4_xattr_set_entry:1670: inode #15: comm syz.0.1313: corrupted xattr entries [ 282.496696][T10111] EXT4-fs (loop0): Remounting filesystem read-only [ 282.517145][T10111] EXT4-fs warning (device loop0): ext4_xattr_block_set:2200: inode #19: comm syz.0.1313: dec ref error=-30 [ 282.650797][ T8328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.347729][T10141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.408724][T10141] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 283.499401][ T807] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 283.679596][ T807] usb 7-1: Using ep0 maxpacket: 8 [ 283.697660][ T807] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 283.725068][ T807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.762586][ T807] usb 7-1: Product: syz [ 283.773228][ T807] usb 7-1: Manufacturer: syz [ 283.786850][ T807] usb 7-1: SerialNumber: syz [ 283.824463][ T807] usb 7-1: config 0 descriptor?? [ 283.867213][ T807] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 284.639288][T10164] loop3: detected capacity change from 0 to 32768 [ 284.719174][T10164] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 284.757031][T10164] JBD2: Ignoring recovery information on journal [ 284.853705][T10173] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1337'. [ 284.938450][T10164] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 285.083852][ T807] gspca_sonixj: reg_w1 err -71 [ 285.149470][ T807] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 285.186639][ T807] usb 7-1: USB disconnect, device number 9 [ 285.266881][T10181] loop0: detected capacity change from 0 to 64 [ 285.632325][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 285.654277][ T5848] ocfs2: Unmounting device (7,3) on (node local) [ 285.858731][T10176] loop5: detected capacity change from 0 to 32768 [ 285.882966][T10176] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 286.019304][T10176] XFS (loop5): Ending clean mount [ 286.035870][T10184] bond2: Unable to set down delay as MII monitoring is disabled [ 286.045314][T10176] XFS (loop5): Quotacheck needed: Please wait. [ 286.186441][T10184] bond2 (unregistering): Released all slaves [ 286.328322][T10176] XFS (loop5): Quotacheck: Done. [ 286.424320][T10205] syzkaller1: entered promiscuous mode [ 286.438504][T10205] syzkaller1: entered allmulticast mode [ 286.752307][ T7212] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 287.827766][T10228] loop0: detected capacity change from 0 to 32768 [ 288.005084][T10246] syz.0.1355: attempt to access beyond end of device [ 288.005084][T10246] loop0: rw=8388609, sector=4680032, nr_sectors = 8 limit=32768 [ 288.029913][T10246] metapage_write_end_io: I/O error [ 288.053026][T10246] ERROR: (device loop0): release_metapage: metapage_write_one() failed [ 288.053026][T10246] [ 288.081911][T10246] ERROR: (device loop0): remounting filesystem as read-only [ 288.100025][ T117] blkno = 8ed2c, nblocks = 1 [ 288.111005][ T117] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 288.111005][ T117] [ 288.137825][T10246] blkno = 8ed2c, nblocks = 1 [ 288.162279][T10246] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 288.162279][T10246] [ 288.185582][T10246] Bad maxslot:44 in dtpage (expected 128) [ 288.185582][T10246] [ 288.236960][T10246] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 288.236960][T10246] [ 288.282738][T10246] jfs_mkdir: dtSearch returned -5 [ 288.345135][T10228] Bad maxslot:44 in dtpage (expected 128) [ 288.345135][T10228] [ 288.423580][T10228] ERROR: (device loop0): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 288.423580][T10228] [ 288.456194][T10228] jfs_readdir: unexpected rc = -5 from dtReadNext [ 288.584664][ T8328] syz-executor: attempt to access beyond end of device [ 288.584664][ T8328] loop0: rw=8388609, sector=4680032, nr_sectors = 8 limit=32768 [ 288.697749][ T8328] metapage_write_end_io: I/O error [ 288.744058][ T8328] JFS: metapage_get_blocks failed [ 288.776062][ T8328] JFS: metapage_get_blocks failed [ 288.793067][ T8328] JFS: metapage_get_blocks failed [ 288.810505][ T8328] JFS: metapage_get_blocks failed [ 289.496600][T10279] trusted_key: syz.5.1375 sent an empty control message without MSG_MORE. [ 289.576056][T10283] loop4: detected capacity change from 0 to 128 [ 289.600047][T10283] EXT4-fs: Ignoring removed nobh option [ 289.687296][T10283] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.729153][T10283] ext4 filesystem being mounted at /289/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.111881][ T5846] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.357235][T10301] loop4: detected capacity change from 0 to 2048 [ 290.428817][T10301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.819155][T10312] block nbd0: shutting down sockets [ 291.148489][T10297] loop3: detected capacity change from 0 to 32768 [ 291.222949][T10297] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 291.302325][T10297] XFS (loop3): Ending clean mount [ 291.363784][T10297] XFS (loop3): Quotacheck needed: Please wait. [ 291.555937][ T9566] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 291.598239][ T9566] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 352 with error 28 [ 291.614559][ T9566] EXT4-fs (loop4): This should not happen!! Data will be lost [ 291.614559][ T9566] [ 291.626710][T10297] XFS (loop3): Quotacheck: Done. [ 291.650016][ T9566] EXT4-fs (loop4): Total free blocks count 0 [ 291.656153][ T9566] EXT4-fs (loop4): Free/Dirty block details [ 291.662223][ T9566] EXT4-fs (loop4): free_blocks=4096 [ 291.667832][ T9566] EXT4-fs (loop4): dirty_blocks=368 [ 291.674391][ T9566] EXT4-fs (loop4): Block reservation details [ 291.680904][ T9566] EXT4-fs (loop4): i_reserved_data_blocks=23 [ 291.702864][ T9566] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 291.892655][ T30] audit: type=1326 audit(1773833625.732:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b39c799 code=0x7ffc0000 [ 291.996055][ T30] audit: type=1326 audit(1773833625.782:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b39c799 code=0x7ffc0000 [ 292.009623][ T5987] hid_parser_main: 4007 callbacks suppressed [ 292.009682][ T5987] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 292.085483][ T5848] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 292.102492][ T30] audit: type=1326 audit(1773833625.792:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f048b39c799 code=0x7ffc0000 [ 292.127159][ T30] audit: type=1326 audit(1773833625.792:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b39c799 code=0x7ffc0000 [ 292.151538][ T30] audit: type=1326 audit(1773833625.792:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b39c799 code=0x7ffc0000 [ 292.175436][ T30] audit: type=1326 audit(1773833625.792:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f048b39c799 code=0x7ffc0000 [ 292.198213][ T5987] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 292.250823][ T30] audit: type=1326 audit(1773833625.792:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b39c799 code=0x7ffc0000 [ 292.275290][ T30] audit: type=1326 audit(1773833625.792:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b39c799 code=0x7ffc0000 [ 292.326677][ T30] audit: type=1326 audit(1773833625.792:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f048b39c799 code=0x7ffc0000 [ 292.394548][ T30] audit: type=1326 audit(1773833625.792:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.5.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b39c799 code=0x7ffc0000 [ 292.449885][T10347] loop5: detected capacity change from 0 to 512 [ 292.473640][T10347] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 292.581176][T10347] EXT4-fs (loop5): 1 truncate cleaned up [ 292.670026][T10347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.754454][ T7212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.801186][T10376] loop0: detected capacity change from 0 to 32768 [ 293.859584][T10376] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 293.894780][T10378] loop4: detected capacity change from 0 to 32768 [ 293.912261][T10378] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1410 (10378) [ 293.969965][T10378] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 293.980547][T10378] BTRFS info (device loop4): using crc32c checksum algorithm [ 294.037662][T10376] XFS (loop0): Ending clean mount [ 294.075524][T10376] XFS (loop0): Quotacheck needed: Please wait. [ 294.156098][T10378] BTRFS info (device loop4): enabling ssd optimizations [ 294.163690][T10378] BTRFS info (device loop4): turning on flush-on-commit [ 294.170811][T10378] BTRFS info (device loop4): enabling free space tree [ 294.177814][T10378] BTRFS info (device loop4): enabling auto defrag [ 294.184602][T10378] BTRFS info (device loop4): use lzo compression, level 1 [ 294.193959][T10378] BTRFS info (device loop4): max_inline set to 4096 [ 294.343164][T10415] loop3: detected capacity change from 0 to 512 [ 294.466971][T10415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.531570][T10415] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.575901][T10376] XFS (loop0): Quotacheck: Done. [ 294.704272][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.920115][ T8328] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 295.132196][ T5846] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 296.204362][T10473] kvm: user requested TSC rate below hardware speed [ 296.315483][T10476] loop3: detected capacity change from 0 to 256 [ 296.971798][T10483] loop6: detected capacity change from 0 to 128 [ 297.012696][T10487] input: syz0 as /devices/virtual/input/input17 [ 297.234436][ T5904] kernel write not supported for file bpf-prog (pid: 5904 comm: kworker/0:3) [ 297.347681][T10493] block nbd4: shutting down sockets [ 297.780401][T10489] loop5: detected capacity change from 0 to 32768 [ 297.822031][T10489] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 297.865210][T10489] JBD2: Ignoring recovery information on journal [ 297.897107][T10503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.957168][T10495] loop0: detected capacity change from 0 to 32768 [ 297.977628][T10495] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 298.062716][T10489] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 298.098835][T10495] XFS (loop0): Ending clean mount [ 298.476249][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 298.507292][T10520] loop6: detected capacity change from 0 to 2048 [ 298.624017][ T7212] ocfs2: Unmounting device (7,5) on (node local) [ 298.649190][T10523] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.673829][ T8328] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 298.970367][T10523] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 299.017933][T10523] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 299.087211][T10530] loop4: detected capacity change from 0 to 512 [ 299.089208][T10523] Remounting filesystem read-only [ 299.113716][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 299.113732][ T30] audit: type=1800 audit(2000000005.520:45): pid=10530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1446" name="file2" dev="loop4" ino=1048648 res=0 errno=0 [ 299.146785][T10530] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960) [ 299.156128][T10530] FAT-fs (loop4): Filesystem has been set read-only [ 299.254573][ T30] audit: type=1800 audit(2000000005.580:46): pid=10527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1441" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 299.344047][ T7810] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 299.570361][T10543] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1449'. [ 300.229531][ T31] INFO: task kworker/1:0H:25 blocked in I/O wait for more than 143 seconds. [ 300.248337][ T31] Tainted: G L syzkaller #0 [ 300.258960][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.283129][ T31] task:kworker/1:0H state:D stack:26128 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 300.319781][ T31] Workqueue: gfs2-glock/syz:syz glock_work_func [ 300.345043][ T31] Call Trace: [ 300.353967][ T31] [ 300.364283][ T31] __schedule+0x1665/0x5590 [ 300.377513][ T31] ? lockdep_unlock+0x5d/0xd0 [ 300.405809][ T31] ? __lock_acquire+0x146e/0x2cf0 [ 300.416295][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 300.427983][ T31] ? __pfx___schedule+0x10/0x10 [ 300.438663][ T31] ? schedule+0x90/0x360 [ 300.453427][ T31] schedule+0x164/0x360 [ 300.465733][ T31] io_schedule+0x7f/0xd0 [ 300.475601][ T31] bit_wait_io+0x11/0xd0 [ 300.484852][ T31] __wait_on_bit_lock+0xec/0x4e0 [ 300.495434][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 300.506018][ T31] out_of_line_wait_on_bit_lock+0x13b/0x190 [ 300.520680][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 300.525897][ T31] ? __pfx_out_of_line_wait_on_bit_lock+0x10/0x10 [ 300.532939][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 300.538572][ T31] ? block_invalidate_folio+0x30b/0x730 [ 300.547541][ T31] block_invalidate_folio+0x370/0x730 [ 300.560611][ T31] ? shmem_mapping+0xd/0x50 [ 300.565371][ T31] ? __pfx_block_invalidate_folio+0x10/0x10 [ 300.571872][ T31] ? folio_mapping+0x16f/0x1f0 [ 300.576804][ T31] ? __pfx_block_invalidate_folio+0x10/0x10 [ 300.587751][ T31] truncate_cleanup_folio+0xcb/0x190 [ 300.593326][ T31] truncate_inode_pages_range+0x2ce/0xe30 [ 300.599381][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 300.604475][ T31] ? rcu_is_watching+0x15/0xb0 [ 300.609609][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 300.616033][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 300.622373][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 300.627533][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 300.633810][ T31] inode_go_inval+0x13c/0x360 [ 300.638606][ T31] ? __pfx_inode_go_inval+0x10/0x10 [ 300.645045][ T31] do_xmote+0x289/0x760 [ 300.652224][ T31] glock_work_func+0x2a8/0x580 [ 300.657286][ T31] ? process_one_work+0x8bb/0x1780 [ 300.685240][ T31] process_one_work+0x9ab/0x1780 [ 300.697926][ T31] ? __pfx_process_one_work+0x10/0x10 [ 300.711022][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 300.722398][ T31] worker_thread+0xba8/0x11e0 [ 300.733288][ T31] kthread+0x388/0x470 [ 300.743258][ T31] ? __pfx_worker_thread+0x10/0x10 [ 300.756441][ T31] ? __pfx_kthread+0x10/0x10 [ 300.767032][ T31] ret_from_fork+0x51e/0xb90 [ 300.778682][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 300.793235][ T31] ? __switch_to+0xc7d/0x1450 [ 300.808926][ T31] ? __pfx_kthread+0x10/0x10 [ 300.815185][ T31] ret_from_fork_asm+0x1a/0x30 [ 300.825321][ T31] [ 300.831103][ T31] INFO: task syz-executor:5847 blocked in I/O wait for more than 143 seconds. [ 300.842547][ T31] Tainted: G L syzkaller #0 [ 300.849269][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.860032][ T31] task:syz-executor state:D stack:21096 pid:5847 tgid:5847 ppid:1 task_flags:0x400140 flags:0x00080002 [ 300.874897][ T31] Call Trace: [ 300.878247][ T31] [ 300.883272][ T31] __schedule+0x1665/0x5590 [ 300.887837][ T31] ? check_noncircular+0xda/0x150 [ 300.895644][ T31] ? __pfx___schedule+0x10/0x10 [ 300.901238][ T31] ? schedule+0x90/0x360 [ 300.905545][ T31] schedule+0x164/0x360 [ 300.910747][ T31] io_schedule+0x7f/0xd0 [ 300.915062][ T31] bit_wait_io+0x11/0xd0 [ 300.919569][ T31] __wait_on_bit+0xb9/0x310 [ 300.924133][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 300.929328][ T31] out_of_line_wait_on_bit+0x13b/0x190 [ 300.934842][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 300.940085][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 300.946145][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 300.952838][ T31] ? glock_clear_object+0x6a/0xe0 [ 300.960334][ T31] gfs2_evict_inode+0xa04/0x1130 [ 300.965377][ T31] ? inode_wait_for_writeback+0x16d/0x3b0 [ 300.971587][ T31] ? __pfx_gfs2_evict_inode+0x10/0x10 [ 300.977026][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 300.983250][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 300.988415][ T31] ? __pfx_gfs2_evict_inode+0x10/0x10 [ 300.995135][ T31] evict+0x61e/0xb10 [ 301.001314][ T31] ? __pfx_evict+0x10/0x10 [ 301.005787][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 301.011843][ T31] ? _raw_spin_unlock+0x28/0x50 [ 301.016776][ T31] ? iput+0xb25/0xe80 [ 301.023352][ T31] gfs2_put_super+0x635/0x860 [ 301.038643][ T31] ? __pfx_gfs2_put_super+0x10/0x10 [ 301.049879][ T31] generic_shutdown_super+0x13d/0x2d0 [ 301.064121][ T31] kill_block_super+0x44/0x90 [ 301.072320][ T31] deactivate_locked_super+0xbc/0x130 [ 301.077799][ T31] cleanup_mnt+0x437/0x4d0 [ 301.082756][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.087501][T10558] loop4: detected capacity change from 0 to 40427 [ 301.088171][ T31] task_work_run+0x1d9/0x270 [ 301.101525][ T31] ? __pfx_task_work_run+0x10/0x10 [ 301.106706][ T31] exit_to_user_mode_loop+0xed/0x480 [ 301.116381][T10558] F2FS-fs (loop4): build fault injection rate: 174 [ 301.119601][ T31] ? rcu_is_watching+0x15/0xb0 [ 301.127835][ T31] do_syscall_64+0x32d/0xf80 [ 301.129102][T10558] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 301.139631][ T31] ? trace_irq_disable+0x3b/0x150 [ 301.149119][T10558] F2FS-fs (loop4): invalid crc value [ 301.159359][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.174142][ T31] ? clear_bhb_loop+0x40/0x90 [ 301.185006][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.197032][ T31] RIP: 0033:0x7f64fbf9d9d7 [ 301.205394][ T31] RSP: 002b:00007ffd93d469f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 301.216166][ T31] RAX: 0000000000000000 RBX: 00007f64fc032050 RCX: 00007f64fbf9d9d7 [ 301.225439][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd93d46ab0 [ 301.233589][ T31] RBP: 00007ffd93d46ab0 R08: 00007ffd93d47ab0 R09: 00000000ffffffff [ 301.241717][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd93d47b40 [ 301.249876][ T31] R13: 00007f64fc032050 R14: 00000000000201c6 R15: 00007ffd93d47b80 [ 301.257902][ T31] [ 301.272689][ T31] [ 301.272689][ T31] Showing all locks held in the system: [ 301.411599][ T31] 2 locks held by kworker/1:0H/25: [ 301.416752][ T31] #0: ffff8880567a1540 ((wq_completion)gfs2-glock/syz:syz){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 301.446602][T10558] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 301.458205][ T31] #1: ffffc900001f7c40 ((work_completion)(&(&gl->gl_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 301.471423][ T31] 1 lock held by khungtaskd/31: [ 301.472588][T10558] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 301.486267][ T31] #0: ffffffff8e75d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 301.496249][ T31] 2 locks held by getty/5607: [ 301.503347][ T31] #0: ffff888037a770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 301.520633][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 301.544385][ T31] 1 lock held by syz-executor/5847: [ 301.550033][ T31] #0: ffff88801ff140d8 (&type->s_umount_key#90){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 301.561919][ T31] [ 301.564303][ T31] ============================================= [ 301.564303][ T31] [ 301.575685][ T31] NMI backtrace for cpu 0 [ 301.575705][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 301.575732][ T31] Tainted: [L]=SOFTLOCKUP [ 301.575738][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.575749][ T31] Call Trace: [ 301.575757][ T31] [ 301.575766][ T31] dump_stack_lvl+0xe8/0x150 [ 301.575802][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 301.575833][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 301.575864][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 301.575909][ T31] sys_info+0x135/0x170 [ 301.575934][ T31] watchdog+0x1002/0x1060 [ 301.575970][ T31] ? watchdog+0x1da/0x1060 [ 301.575998][ T31] kthread+0x388/0x470 [ 301.576022][ T31] ? __pfx_watchdog+0x10/0x10 [ 301.576043][ T31] ? __pfx_kthread+0x10/0x10 [ 301.576067][ T31] ret_from_fork+0x51e/0xb90 [ 301.576098][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 301.576124][ T31] ? __switch_to+0xc7d/0x1450 [ 301.576152][ T31] ? __pfx_kthread+0x10/0x10 [ 301.576176][ T31] ret_from_fork_asm+0x1a/0x30 [ 301.576212][ T31] [ 301.576237][ T31] Sending NMI from CPU 0 to CPUs 1: [ 301.694774][ C1] NMI backtrace for cpu 1 [ 301.694793][ C1] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 301.694817][ C1] Tainted: [L]=SOFTLOCKUP [ 301.694823][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.694834][ C1] RIP: 0033:0x7f1407d2b9d0 [ 301.694851][ C1] Code: 0f 05 bf 7f 00 00 00 b8 e7 00 00 00 0f 05 e9 23 ff ff ff 0f 1f 80 00 00 00 00 48 c7 c0 e8 ff ff ff 64 48 03 04 25 00 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 53 48 83 ec 38 [ 301.694867][ C1] RSP: 002b:00007ffd7471ab28 EFLAGS: 00000207 [ 301.694882][ C1] RAX: 00005555778c1528 RBX: 0000000000000000 RCX: 00007f1407d9d2f3 [ 301.694901][ C1] RDX: 0000000000000000 RSI: 00007ffd7471ab3c RDI: 0000000000000003 [ 301.694911][ C1] RBP: 00007ffd7471afe0 R08: 0000000000000000 R09: 0000000000000000 [ 301.694922][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 301.694933][ C1] R13: 00007ffd7471ab3c R14: 00007ffd7471abd0 R15: 0000000000000000 [ 301.694944][ C1] FS: 00005555778c1540 GS: 0000000000000000 [ 301.742946][T10558] F2FS-fs (loop4): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90 [ 301.750491][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 301.750510][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 301.750535][ T31] Tainted: [L]=SOFTLOCKUP [ 301.750542][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.750553][ T31] Call Trace: [ 301.750560][ T31] [ 301.750568][ T31] vpanic+0x56c/0xa60 [ 301.750599][ T31] ? __pfx___schedule+0x10/0x10 [ 301.750620][ T31] ? __pfx_vpanic+0x10/0x10 [ 301.750646][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 301.750680][ T31] panic+0xc5/0xd0 [ 301.750704][ T31] ? __pfx_panic+0x10/0x10 [ 301.750730][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 301.750756][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 301.750786][ T31] watchdog+0x105b/0x1060 [ 301.750814][ T31] ? watchdog+0x1da/0x1060 [ 301.750840][ T31] kthread+0x388/0x470 [ 301.750861][ T31] ? __pfx_watchdog+0x10/0x10 [ 301.750880][ T31] ? __pfx_kthread+0x10/0x10 [ 301.750902][ T31] ret_from_fork+0x51e/0xb90 [ 301.750930][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 301.750954][ T31] ? __switch_to+0xc7d/0x1450 [ 301.750980][ T31] ? __pfx_kthread+0x10/0x10 [ 301.751001][ T31] ret_from_fork_asm+0x1a/0x30 [ 301.751033][ T31] [ 301.751619][ T31] Kernel Offset: disabled