last executing test programs: 5.825515218s ago: executing program 0 (id=6410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) 5.757027344s ago: executing program 0 (id=6413): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) accept(r0, 0x0, 0x0) 5.670455266s ago: executing program 0 (id=6414): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="030000000a004e000000000cff010000000000000000000000000001ffffff7f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000070000000a004e23"], 0x40c) 5.634978459s ago: executing program 0 (id=6415): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000670000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6207005d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe5682159fbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d94462d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1d8497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf1218459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce2b0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d0116c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec46edc18d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8adef4de2076bd538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9745b3cabc908e623403c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e2112f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d06c790000087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267d2cee905cc075b859a57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2fa90c68166396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7258e9fc818ab3d76ab660a254d998592c31017f816"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.303257148s ago: executing program 0 (id=6420): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) 5.199714913s ago: executing program 1 (id=6422): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010003b15000000007e00000000000000", @ANYRES32=0x0, @ANYBLOB="9a007d0c000000002400128009000100626f6e64000000001400028008000a00ff"], 0x44}}, 0x0) 4.411509668s ago: executing program 1 (id=6431): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10}, {{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x6e6bb8}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x2}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4.30145369s ago: executing program 1 (id=6433): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x34, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1, 0x300}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xfff}}, @RTA_NH_ID={0x8, 0x1e, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.174591463s ago: executing program 1 (id=6435): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000300)={[{@overriderock}, {@check_strict}, {@check_strict}, {}, {@dmode={'dmode', 0x3d, 0x4}}, {@map_off}, {@check_strict}, {@nocompress}, {@utf8}, {@showassoc}]}, 0x0, 0x406, &(0x7f0000000800)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2168834, &(0x7f00000001c0)={[], [], 0x2f}) 3.981679168s ago: executing program 1 (id=6437): syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000012500)='./file0\x00', 0x1000800, &(0x7f0000000180)=ANY=[], 0xfe, 0x1258b, &(0x7f0000037080)="$eJzs/XsUqHO9LnzP+zzLOaQQyaEiFDkVcq4oQiLnKIdQpIOQCCUqUilJOZSQCikkOYUUoiSRyDmJkkjIO9Ze13zX/e59P+t+9tpjve893ufz+aPvvWf8MsZeY1zXNZnmDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgxY0bx/Bfu/W+n90Pv/PfTPXfGjG7Pf/+e+9/+Y/beH1P++5n5gv+LZ/PHPmeJPd+78x47vOe9/3b+S399+354/9fs++H9/0t/7v8dr1pp7w3PffXGx5xbPe/yJ9dd/8D/tv8hAAAA+P+h7P+y90M//Z/+kGrGjJnP/Z9+7HkzZsycOWNGWR7x64/N/3/yv7/lFvw/2t//T/6vBwAAgP+7sv/r3o8c0/+vc583Y8YhB/8vP/7//pGZ7b/9584H/vWxoduzQP74Bf7jh8r/5eO/0by58+XO+rmL5/9//vUBAADA/3/J/m96P9Lf7LP++f4X5i6Yu1Duwrkvyl0kd9HcF+culvuS3MVzl8hdMnep3Jfmviz35blL5y6T+4rcZXOXy13+f/rzX5W7Qu6Kua/OXSl35dxVclfNXS33NbmvzV09d43cNXNfl7tW7tq56+Sum7te7vq5G+S+PvcNuW/M3TB3o9w35b45d+PcTXLfkrtp7ma5m+e+NXeL3Lflbpm7Ve7bc7fO3SZ329ztcrfP3SF3x9x35O6Uu3Nufq3JjHfl7pK7a+5uubvnvjt31i8mya9PmbFX7nty35u7d+4+ue/L3Tf3/bkfyP1g7ody98v9cO6sX4hyQO6sXy/ykdyDcj+aO+tnyA7J/VjuobmH5R6e+/HcT+QekfvJ3CNzj8r9VO6ncz+Te3TurJ/L+2zusbmfy/187hdyj8v9Yu6Xco/P/XLuCblfyT0x96u5X8s9Kffk3FNyT839eu43ck/L/Wbu6bln5J6Z+63cs3K/nfud3O/mnp17Tu65ud/LPS/3+7k/yD0/94LcC3N/mHtR7o9yL879ce4luZfmXpZ7ee4VuT/JvTL3qtyrc2f9s1jX5P4s9+e51+Zel3t97i9yb8i9MfeXub/KvSn317k35/4m95bc3+bemntb7u9yb8/9fe4duXfm/iH3rty7c+/JvTf3vtz7cx/I/WPug7l/yn0o98+5D+c+kvuX3L/mPpr7t9xZWTfrn0J6PPeJ3H/kPpn7z9yncp/OfSb3X7nP/vuZ9dPnRT6K/Bx3UeXm592L5G/R5na5M3Ofk5t/Dq+YLTe/zq6YI3fO3Lly586dJ/d5ufl58CI/D17k58GL/Dx4kZ8HL5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5LfRfK/SP4Xyf8i+V8k/4vkf5H8L16Zm/wvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/Z/29vCL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+T/rK1bJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/J/1t7TL5H+ZHyiT/2Xyv0z+l8n/MvlfJv/L5H+Z/C+T/2Xyv0z+l8n/MvlfJv/L5H+Z/C+T/+V8//n+L9MLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMBpbpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXpD4n1GlF1TpBVX+iyq9oEouV+kFVXpBlV5QpRdU6QVVekGVXlClF1TpBVV6QZVeUKUXVOkFVXpBlZ8XqJL/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv7P+sft6+R/nfyvk/91/oA6+V8n/+vkf538r5P/dfK/Tv7Xyf86+V8n/+vkf538r+f5z/d/nV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekH9mhkz/u3/6+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOtlYpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXrBrBhu0gua9IImvaBJL2jyBzbpBU16QZNe0KQXNOkFTXpBk17QpBc06QVNekGTXtDk5wWa5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b/LxAk/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/8T5jDb53yb/2+R/m/xvk/9t/oQ2+d8m/9vkf5v8b5P/bfK/Tf63c/7n+79NL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2iTmW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmFyTeZ3TpBV16QZde0KUXdMnxLr2gy5/YpRd06QVdekGXXtClF3TpBV1+XqBL/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/N+v3rEr+d8n/LvnfJf+75H+X/O+S/7N+n6su+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf+J7xszk/8xZv/9e8n9m8n9m8n9m8n9m8n9mHpiZ/J/17/OfOdt/vv9nphfMTC+YmV4wM71gZnrBzPSCmekFM9MLZqYXzEwvmJleMNO/Zw8AAAD+vyj7f+Z//MisX5v3P5x98H/8S4xmPPbcC7c4a64Lbxh4Zta/J/B5/41/qQAAAMB/0cj+P6e3/4uNr93mtL2v3+p9A8/M+v0B7H8AAACYoJH9f25v/5dbP77/o3PvOPu7Bp6Z9fsC2v8AAAAwQSP7/3u9/V/d+covFdee/OerB57Jv8fH/gcAAIApGtn/5/X2f/2+j6269Y2rf32jgWfy7++1/wEAAGCKRvb/93v7v/npereeMccz6/9x4Jn8vj32PwAAAEzRyP7/QW//t7876Kln9tp8nn8NPJPfr9f+BwAAgCka2f/n9/Z/t8sFL5zznGP/su3AM4vm2v8AAAAwQSP7/4Le/p/5kndf/Ny17v372QPPzPpz7H8AAACYoJH9f2Fv/z/nS2ft8ORXlphvaOMvlmv/AwAAwASN7P8f9vb/cz913EHffvrItZqBZ16Sa/8DAADABI3s/4t6+3+2ld/yle1fvNHJ3xx4ZvFc+x8AAAAmaGT//6i3/2f/+l2rN2vc/MAyA88skWv/AwAAwASN7P+Le/t/jkWW+P3jf1jgOZ8ceGbJXPsfAAAAJmhk//+4t//nfO4iz55yyIXbfXXgmaVy7X8AAACYoJH9f0lv/8919i0v2nS7/X60+sAzL821/wEAAGCCRvb/pb39P/dftr/z6z889PqPDzzzslz7HwAAACZoZP9f1tv/82z4pXLLXdZZfomBZ16ea/8DAADABI3s/8t7+/952/928ap96IAVB55ZetYf89/51woAAAD814zs/yt6+3/ee9552V9uXfbLnx14ZtbvCWj/AwAAwASN7P+f9Pb/fB+8+R3fuvrsX71o4JlX5Nr/AAAAMEEj+//K3v6f/9q5D91qoX1WuGTgmWVz7X8AAACYoJH9f1Vv/z//lqVPmf2AO3Y5feCZ5XLtfwAAAJigkf1/dW//L7DTQ2s9+81FPvHcgWeWz7X/AQAAYIJG9v9Pe/v/BUutec9T51z592UHnnllrv0PAAAAEzSy/6/p7f8XfuUf7cy96vmOHnjmVbn2PwAAAEzQyP7/WW//L3jE5S/ddo4z1/rSwDMr5Nr/AAAAMEEj+//nvf2/0Ar1ld+9cY+TXzPwzIq59j8AAABM0Mj+v7a3/xc+6Qfveuzaxx/4wcAzr861/wEAAGCCRvb/db39/6IF9/5EN/cqz5lv4JmVcu1/AAAAmKCR/X99b/8vMueGp22+9/HbVQPPrJxr/wMAAMAEjez/X/T2/6LnfWq9k87a6kcnDzyzSq79DwAAABM0sv9v6O3/F2+w3GU7bHTq9QsNPLNqrv0PAAAAEzSy/2/s7f/Fnn5g8bO+uNPyFw48s1qu/Q8AAAATNLL/f9nb/y954JflP5649oDvDDwz6/cEtP8BAABggkb2/696+3/xzea7c7Zl5vjy7APPvDbX/gcAAIAJGtn/N/X2/xKXnrbWW1Y+5lcHDzyzeq79DwAAABM0sv9/3dv/S+6/4ymnPrjpCi8ZeGaNXPsfAAAAJmhk/9/c2/9LvWfrQ5848tldVhp4Zs1c+x8AAAAmaGT//6a3/19601feUb9tzU98ceCZ1+Xa/wAAADBBI/v/lt7+f9kxG185Y69nFlp44Jm1cu1/AAAAmKCR/f/b3v5/+dJHvPRv56z+zx8PPLN2rv0PAAAAEzSy/2/t7f+l1zy3/eaNx37njIFn1sm1/wEAAGCCRvb/bb39v8xh77/nrXNsvslsA8+sm2v/AwAAwASN7P/f/Y/9X/+P71c8/6r15pr7+vYTA8+sl2v/AwAAwASN7P/be3//f9mzZpz29LVz3b/kwDPr59r/AAAAMEEj+//3vf2/3AWv+cTpZ538vRUGntkg1/4HAACACRrZ/3f09v/y5dPv2mbvHTc7ZuCZ1+fa/wAAADBBI/v/zt7+f+Wiqz+z9RdPePHSA8+8Idf+BwAAgAka2f9/6O3/V33jn4uesdHWlx0x8Mwbc+1/AAAAmKCR/X9Xb/+vcM6laz6zzGNf+NrAMxvm2v8AAAAwQSP7/+7e/l9xtvZ3cz6x0vvXGHhmo1z7HwAAACZoZP/f09v/rz7+vAO3ePD0Nc4ZeOZNufY/AAAATNDI/r+3t/9XWvx9Xz1t5d1/N+/AM2/Otf8BAABggkb2/329/b/yKm+45NG3XX1EPfDMxrn2PwAAAEzQyP6/v7f/V/n0Z7Yrjmx3P23gmU1y7X8AAACYoJH9/0Bv/696zbZPNl+5faFDBp55S679DwAAABM0sv//2Nv/q+375YUeX2vhfy4+8MymufY/AAAATNDI/n+wt/9fs+tJrznlxed+59UDz2yWa/8DAADABI3s/z/19v9rb9/llk2f3neT4wae2TzX/gcAAIAJGtn/D/X2/+qb3LTfc//wcLvgwDNvzbX/AQAAYIJG9v+fe/t/jb8/78tPrrH8/RcMPLNFrv0PAAAAEzSy/x/u7f81//Cyi7693SHf++7AM2/Ltf8BAABggkb2/yO9/f+6bR5++/aHrLXZHAPPbJlr/wMAAMAEjez/v/T2/1p/veSwB3a56MXnDzyzVa79DwAAABM0sv//2tv/a2/04V0W+uH+l80/8Mzbc+1/AAAAmKCR/f9ob/+vs8O6r9/k1pu+UA48s3Wu/Q8AAAATNLL//9bb/+vee/g3ftTO//6TBp7ZJtf+BwAAgAka2f+P9fb/eh9apbl/oSPWeMXAM9vm2v8AAAAwQSP7/++9/b/+dX+9f76r3/i7zww8s12u/Q8AAAATNLL/H+/t/w1++/Or1vrm/UccP/DM9rn2PwAAAEzQyP5/orf/X7/zHEt874Cldn/twDM75Nr/AAAAMEEj+/8fvf3/hpfecfD5R266528Gntkx1/4HAACACRrZ/0/29v8bT3zhTuu97ZhPf2DgmXfk2v8AAAAwQSP7/5+9/b/hJxdfd+6V1/ztTgPPzPox+x8AAAAmaGT/P9Xb/xuteO/Jdz/47KqXDjyzc679DwAAABM0sv+f7u3/N528ZXHBEzvt86aBZ96Za/8DAADABI3s/2d6+//NC3327o2WOfWYhweeeVeu/Q8AAAATNLL//9Xb/xvP9a3LF91ojp88OfDMLrn2PwAAAEzQyP5/trf/N/n+Xi9+6IvXLrnNwDO75tr/AAAAMEH/+f4vZvT2/1tOWumkufdeZcs/DDyzW679DwAAABM0sv+L3v7fdMG/rXP3WY//YN2BZ3bPtf8BAABggkb2f9nb/5vNec3O51+71V1vHXjm3bn2PwAAAEzQyP6vevt/8/PmOmS9uY+vHh94Zo9c+x8AAAAmaGT/1739/9alLl5s0TnqDfcfeGbPXPsfAAAAJmhk/ze9/b/FVw644qEbr/zWLQPP7JVr/wMAAMAEjez/trf/33bE2nddcM4ez/5i4Jn35Nr/AAAAMEEj+7/r7f8tV/jEjI32OnORvQaeeW+u/Q8AAAATNLL/Z/b2/1Yf3OLrmxywz54bDjyzd679DwAAABM0sv+f09v/b7/2cxv86Jtnf/qBgWf2ybX/AQAAYIJG9v9ze/t/61vO2PWBqxf57bMDz7wv1/4HAACACRrZ/7P19v82O7338IUWumPV7Qae2TfX/gcAAIAJGtn/s/f2/7Z/uX3Jtdp19rlx4Jn359r/AAAAMEEj+3+O3v7fbsOFrv7erYces+/AMx/Itf8BAABggkb2/5y9/b/99ovdd/8Pl/3JOwee+WCu/Q8AAAATNLL/5+rt/x3uub+eb5eHlrxq4JkP5dr/AAAAMEEj+3/u3v7f8fnrH/KnQxbY8sCBZ/bLtf8BAABggkb2/zy9/f+Osw7d+QXb3fyD3w888+Fc+x8AAAAmaGT/P6+3/3e64MJ13rTGfnddM/DM/rn2PwAAAEzQyP6ft7f/dy4/etIlf7iw2mPgmQNy7X8AAACYoJH9P19v/7/zmOtm3PP0EhveP/DMrH8ngP0PAAAAEzSy/+fv7f93LT3bXQu8+N5vrT/wzEdy7X8AAACYoJH9//ze/t9lzVddse5aGz272cAzB+Xa/wAAADBBI/t/gd7+3/WwJxY7+ytHLvKXgWc+mmv/AwAAwASN7P8X9Pb/bpcuefh5q1x71XoDzxyca/8DAADABI3s/xf29v/u+9+96+v/NMdL7xt45pBc+x8AAAAmaGT/L9jb/+9+z283mPeoU/f968AzH8u1/wEAAGCCRvb/Qr39v8dNi379zi13OnbzgWcOzbX/AQAAYIJG9v/Cvf2/5wbfri/a8Nnb7hh45rBc+x8AAAAmaGT/v6i3//d6eo/73nDcmq/5yP/ySDvj8HzZ/wAAADBBI/t/kd7+f88Dm1698OPHvOfdA898PNf+BwAAgAka2f+L9vb/ezf74pKPLL3p0T8deOYTufY/AAAATNDI/n9xb//vvcmWFz983ZnPvG/gmSNy7X8AAACYoJH9v1hv/+/z98/u8KJ59lj4hoFnPplr/wMAAMAEjez/l/T2//v+8K2D3rjPlW+4euCZI3PtfwAAAJigkf2/eG//77vNXl/54bfrM9418MxRufY/AAAATNDI/l+it//ff80dq//h7OPv/OPAM5/Ktf8BAABggkb2/5K9/f+BfV/4++ftuVWx0cAzn861/wEAAGCCRvb/Ur39/8FdF392g9kf32LbgWc+k2v/AwAAwASN7P+X9vb/h26/90Xfv2GV8/418MzRufY/AAAATNDI/n9Zb//vd/wqF55z1UNX/XbgmWNy7X8AAACYoJH9//Le/v/w4n/dZp0Fl33pAQPPfDbX/gcAAIAJGtn/S/f2//6r/Hz/5+9/6L57DjxzbK79DwAAABM0sv+X6e3/Az49x5fuPW2dY68feOZzufY/AAAATNDI/n9Fb/8fuOglq/74ojtuW2fgmc/n2v8AAAAwQSP7f9ne/v/INz5865t3XeQ1dw4884Vc+x8AAAAmaGT/L9fb/weds+5TL+zOfs8TA88cl2v/AwAAwASN7P/le/v/o7Md/sIHb9vn6C0Gnvlirv0PAAAAEzSy/1/Z2/8Hz73C+69f/chnHhl45ku59j8AAABM0Mj+f1Vv/x9y5mPHrXHnRgu/eeCZ43PtfwAAAJigkf2/Qm//f+zH15+/+8H3vmHrgWe+nGv/AwAAwASN7P8Ve/v/0HrmFl/edokz/jHwzAm59j8AAABM0Mj+f3Vv/x923A//ftnaF975/oFnvpJr/wMAAMAEjez/lXr7//BXHLjACifuV9w88MyJufY/AAAATNDI/l+5t/8/vuoGK+/yzM1bXDbwzFdz7X8AAACYoJH9v0pv/3/iYwff9IXFFjhv54FnvpZr/wMAAMAEjez/VXv7/4irNtv7szfseM7RA8+clGv/AwAAwASN7P/Vevv/kwd+/tidZj/5LcsOPHNyrv0PAAAAEzSy/1/T2/9H7vad762851z1a/p/fvfv55T8P+1/AAAAmKCR/f/a3v4/6pe7bXrl2dff+6WBZ07Ntf8BAABggkb2/+q9/f+ptW7961e/vflZ8w088/Vc+x8AAAAmaGT/r9Hb/5/+58Lz7rXPsW/+wcAz38i1/wEAAGCCRvb/mr39/5mHl1phtXlWf+HJA8+clmv/AwAAwASN7P/X9fb/0W+984afXffMP6qBZ76Za/8DAADABI3s/7V6+/+Y+XZZ9nVLt0deOPDM6bn2PwAAAEzQyP5fu7f/P/udk35x7eNX77HQwDNn5Nr/AAAAMEEj+3+d3v4/9odffvhLx+3+utkHnjkz1/4HAACACRrZ/+v29v/nZmw7+x4bnv777ww8861c+x8AAAAmaGT/r9fb/58/9uGzXrnlSl98ycAzZ+Xa/wAAADBBI/t//d7+/8LLXrbxFUc99sGDB575dq79DwAAABM0sv836O3/41Z/3nu/+KetX/LFgWdm/ZoA+x8AAAAmaGT/v763/7/48Zs+/c5VTrhipYFnvptr/wMAAMAEjez/N/T2/5cub1++42JrnTO08c/Otf8BAABggkb2/xt7+//4/S79+eeeOeQtZw88c06u/Q8AAAATNLL/N+zt/y/v+c8Hrz5x+fqbA8+cm2v/AwAAwASN7P+Nevv/hJtXn/nqtR++txl45nu59j8AAABM0Mj+f1Nv/39lvc+c/t5t9z3rkwPPnJdr/wMAAMAEjez/N/f2/4n/esOGXzn43DcvM/DM93PtfwAAAJigkf2/cW//f/XB9+3x0zsXfuHqA8/8INf+BwAAgAka2f+b9Pb/195y3idfu/rt//jqwDPn59r/AAAAMEEj+/8tvf1/0inPn/0nty115BIDz1yQa/8DAADABI3s/017+//kF9zw8Crd/Xt8fOCZC3PtfwAAAJigkf2/WW//nzL7g7/Yedc3vu6zA8/8MNf+BwAAgAka2f+b9/b/qT94xbLHXHTE71cceOaiXPsfAAAAJmhk/7+1t/+/vsRXP/3z0+b/4iUDz/wo1/4HAACACRrZ/1v09v83vrrVe1fd/6YPvmjgmYtz7X8AAACYoJH9/7be/j/tyJ023nPB/V/y3IFnfpxr/wMAAMAEjez/LXv7/5uv/PpZX7vqoitOH3hm1q8JsP8BAABggkb2/1a9/X/6+z8484Rn9tth8YFnLs21/wEAAGCCRvb/23v7/4zrz35wt8Uu/PEhA89clmv/AwAAwASN7P+te/v/zFuP/Pnqay/w4HEDz1yea/8DAADABI3s/216+/9bO77p5b848ebZXj3wzBW59j8AAABM0Mj+37a3/8969F+f/PzBG61zwcAzP8l99qPPPvvf+tcLAAAA/O8b2f/b9fb/t9+w6h67bnvkqQsOPHNlrr//DwAAABM0sv+37+3/72xbbrji6ks8McfAM1fl2v8AAAAwQSP7f4fe/v/ufT85/dI7733+dweeuTrX/gcAAIAJGtn/O/b2/9lP1a+8rFvknfMPPPPTXPsfAAAAJmhk/7+jt//PWfvyX65w2x2Hnz/wzDW59j8AAABM0Mj+36m3/8/d4h9/2+WifW48aeCZn+Xa/wAAADBBI/t/597+/94ja87zhV3PfmU58MzPc+1/AAAAmKCR/f/O3v4/7yOfOuf6/Zf98GcGnrk21/4HAACACRrZ/+/q7f/vX73h5muc9tCXXjHwzHW59j8AAABM0Mj+36W3/3/wq73ft/tV61z72oFnrs+1/wEAAGCCRvb/rr39f/7uPzjmywseuuzxA8/8Itf+BwAAgAka2f+79fb/Bcu+89VfnX2rHX488MwNufY/AAAATNDI/t+9t/8v/OIpN+91w/E/XnjgmRtz7X8AAACYoJH9/+7e/v/hoV96YrWzV3lwtoFnfplr/wMAAMAEjez/PXr7/6LVtp//Z3s+PtsZA8/8Ktf+BwAAgAka2f979vb/j7710Pc/u88e6yw58MxNufY/AAAATNDI/t+rt/8vnmfpLXf69pmnfmLgmV/n2v8AAAAwQSP7/z29/f/jZu4Prnxd/cQxA8/cnGv/AwAAwASN7P/39vb/JZfc/Pkr57ny+SsMPPObXPsfAAAAJmhk/+/d2/+Xzv+JN+77+JrvPGLgmVty7X8AAACYoJH9v09v/1/23bW/dfDSzx6+9MAzv821/wEAAGCCRvb/+3r7//KLDjjypg03vXGNgWduzbX/AQAAYIJG9v++vf1/RXHxbi897phXfm3gmdty7X8AAACYoJH9//7e/v/J5+b66YFHzfHheQee+V2u/Q8AAAATNLL/P9Db/1e+/Jqlj97y2i+dM/DM7bn2PwAAAEzQyP7/YG//X7XG32a7bZWdrj1t4Jnf59r/AAAAMEEj+/9Dvf1/9SdW+uPL/nTqsvXAM3fk2v8AAAAwQSP7f7/e/v/pFfe/+RUL3vSyBwaeuTPX/gcAAIAJGtn/H+7t/2s+vNh377hq/ms2HHjmD7n2PwAAAEzQyP7fv7f/f7bXQp856rSLTtxu4Jm7cu1/AAAAmKCR/X9Ab////De377nf/vsf+OzAM3fn2v8AAAAwQSP7/8De/r92/fdeu/iu96+078Az9+Ta/wAAADBBI/v/I739f92zZyx3w0VL3XTjwDP35tr/AAAAMEEj+/+g3v6//k+fm+uw2444+KqBZ+7Ltf8BAABggkb2/0d7+/8Xm27x5w91b3zHOweeuT/X/gcAAIAJGtn/B/f2/w3f2uG2d9957ry/H3jmgVz7HwAAACZoZP8f0tv/N85z/GrHr77vowcOPPPHXPsfAAAAJmhk/3+st/9/2Zz6guu2vf20PQaeeTDX/gcAAIAJGtn/h/b2/68uedc/1zx44ddfM/DMn3LtfwAAAJigkf1/WG//37Tsb7Z+14mHzLn+wDMP5dr/AAAAMEEj+//w3v7/9RfnueC4tdd65P6BZ/6ca/8DAADABI3s/4/39v/Nhy5z/OWLPXzRXwaeeTjX/gcAAIAJGtn/n+jt/9+s9ucDXvXM8ltvNvDMI7n2PwAAAEzQyP4/orf/b/nI6+5Y6U+PvewDA8/M+mcC7H8AAACYoJH9/8ne/v/t1U+ucdUqK13zm4Fn/ppr/wMAAMAEjez/I3v7/9ZfXbHwsVuecOKlA888mmv/AwAAwASN7P+jevv/tt2bf73jqK0P3Gngmb/l2v8AAAAwQSP7/1O9/f+7p87f/jXHXb3SwwPPPJZr/wMAAMAEjez/T/f2/+1r7/OjazZsb3rTwDN/z7X/AQAAYIJG9v9nevv/91tsdOKJS59+8DYDzzyea/8DAADABI3s/6N7+/+ORz790fc8vvs7nhx45olc+x8AAAAmaGT/H9Pb/3e+aPl/fnaeY+ddd+CZf+Ta/wAAADBBI/v/s739/4dv/vEFO123+aN/GHhm1j8TYP8DAADABI3s/2N7+/+u7/1qtZW//cxpjw88889c+x8AAAAmaGT/f663/+9+zvy3XbnP6q9/68AzT+Xa/wAAADBBI/v/8739f88J3zzgq3uePOctA888nWv/AwAAwASN7P8v9Pb/vYu94/i9zt7xkf0Hnnkm1/4HAACACRrZ/8f19v99K21zwWo3XH/RXgPP/CvX/gcAAIAJGtn/X+zt//uPPnHrn80+19a/GHjm2Vz7HwAAACZoZP9/qbf/H/j5Jv+6/p57P/7zgVdmfdj/AAAAMEEj+//43v7/4z6fXHiNVZfYdfeBV2b9MfY/AAAATNDI/v9yb/8/+K7vrbH7VkeueNDAK2U+7H8AAACYoJH9f0Jv///pjg/c8eXDNvrl7wZeqfJh/wMAAMAEjez/r/T2/0Nvvvqjlx1/8wlvGXilzof9DwAAABM0sv9P7O3/Pz9RnLjC+gvs/+jAK00+7H8AAACYoJH9/9Xe/n/47tf+aJclL1zu3oFX2nzY/wAAADBBI/v/a739/8jbn9n+C0/u94vXD7zS5cP+BwAAgAka2f8n9fb/X9Zb46rPL3Loxc8MvDLrz7f/AQAAYIJG9v/Jvf3/1389tcSul6+z7Q4DrzwnH/Y/AAAATNDI/j+lt/8fffCyZsVTHpr5hoFXnpsP+x8AAAAmaGT/n9rb/397S3f/pQct+8cHB16ZLR/2PwAAAEzQyP7/em//P3b5919/ws5nn7TLwCuz58P+BwAAgAka2f/f6O3/v++37zd2u2SftX8y8Moc+bD/AQAAYIJG9v9pvf3/+J5vPGz1O+6Y/1cDr8yZD/sfAAAAJmhk/3+zt/+fuPnoXX5RLfLYPgOvzJUP+x8AAAAmaGT/n97b//84drvLfz7/lR9/28Arc+fD/gcAAIAJGtn/Z/T2/5MvO+HFq15T7/rYwCvz5MP+BwAAgAka2f9n9vb/P1c/udjzjDNXvHvglVm73/4HAACACRrZ/9/q7f+nPr7r3V/7wB6/XHvglXnzYf8DAADABI3s/7N6+//p+X697k92e/yE6wZemS8f9j8AAABM0Mj+/3Zv/z/znXlPXuW8VfZ/78Ar8+fD/gcAAIAJGtn/3+nt/3/98OUH73zT8cvtN/RKPux/AAAAmKCR/f/d3v5/dsYjOx0zc6tf3DrwygL5sP8BAABggkb2/9n/sf+LGTfUv5vnkVMv3nHglRfkw/4HAACACRrZ/+f09n/x7svXvGvFnba9fOCVF+bD/gcAAIAJGtn/5/b2f3nQPxb9webXzvz1wCsL5sP+BwAAgAka2f/f6+3/6idrPrP+0XP88UMDryyUD/sfAAAAJmhk/5/X2//12z613SLHHnPSUwOvLJwP+x8AAAAmaGT/f7+3/5uHNrzkzxtvuvbbB155UT7sfwAAAJigkf3/g97+b/+x91cvXO7Z+TceeGWRfNj/AAAAMEEj+//83v7v1vnBgRs+uuZjDw28smg+7H8AAACYoJH9f0Fv/89sZ8z9f/XKrD/H/gcAAIAJGtn/F/b2/3N+dMprLr7jiLlPGXhlsXzY/wAAADBBI/v/h739/9zTv7TQHy9Zar3vD7zyknzY/wAAADBBI/v/ot7+n+152z+54M73f2OBgVcWz4f9DwAAABM0sv9/1Nv/sx/80NvXPmj/h04YeGWJfNj/AAAAMEEj+//i3v6f4zVLX3TuKRfNsdrAK0vmw/4HAACACRrZ/z/u7f85l5v7y/ddPv/blxt4Zal82P8AAAAwQSP7/5Le/p/r8zfvN/8iN13wqYFXXpoP+x8AAAAmaGT/X9rb/3Pf9JbD73xy+Z+tPPDKy/Jh/wMAAMAEjez/y3r7f573HLfrvEs+vMznB155eT7sfwAAAJigkf1/eW//P2//szZ4/fprffTQgVeWzof9DwAAABM0sv+v6O3/eS9999fPO/6Qry428Moy+bD/AQAAYIJG9v9Pevt/vs1uqR85bOHffHvglVfkw/4HAACACRrZ/1f29v/8Dyxy38Jb3b7yXAOvLJsP+x8AAAAmaGT/X9Xb/89/eomr37Dqvju9YOCV5fJh/wMAAMAEjez/q3v7f4EN7lryonvOPfSHA68snw/7HwAAACZoZP//tLf/X1C+8pBLHt39rycOvPLKfNj/AAAAMEEj+/+a3v5/4QWP7/ym5U6f+3UDr7wqH/Y/AAAATNDI/v9Zb/8veNa167xg43a9lw28skI+7H8AAACYoJH9//Pe/l/o+c896U/HXv2NIwdeWTEf9j8AAABM0Mj+v7a3/xc+7IIZZx+99UPtwCuvzof9DwAAABM0sv+v6+3/F6150F3rbn7CHF8feGWlfNj/AAAAMEEj+//63v5fZOn1rlhgxZXe/r2BV1bOh/0PAAAAEzSy/3/R2/+LHvOxxe555LEL5hl4ZZV82P8AAAAwQSP7/4be/n/xTi/++kIz5/rZtwZeWTUf9j8AAABM0Mj+v7G3/xe75b4NHrjp+mWeM/DKavmw/wEAAGCCRvb/L3v7/yXX/m7XH52340cXGXjlNfmw/wEAAGCCRvb/r3r7f/EPLnj4Jrud/NUfDbzy2nzY/wAAADBBI/v/pt7+X+Ke05ec7wOr/+aVA6+sng/7HwAAACZoZP//urf/l9z+PVfff8YzKx878Moa+bD/AQAAYIJG9v/Nvf2/1IZvve9712y+0+EDr6yZD/sfAAAAJmhk//+mt/9f+pdj67XmP/bQlw688rp82P8AAAAwQSP7/5be/n/ZeWudtN5ymy561sAra+XD/gcAAIAJGtn/v+3t/5fP+fF1zn/0mH/NOfDK2vmw/wEAAGCCRvb/rb39v/SCP9r57mPXPPOFA6+skw/7HwAAACZoZP/f1tv/y5y0/yFzb/zsRhcNvLJuPux/AAAAmKCR/f+73v5/xQo/XWyjzXcqVxl4Zb182P8AAAAwQSP7//be/l/2iDmvuODoU+/+wsAr6+fD/gcAAIAJGtn/v+/t/+W+8uq7HnpkjvM/NvDKBvmw/wEAAGCCRvb/Hb39v/xSj85YdMVr3/bigVdenw/7HwAAACZoZP/f2dv/r3ztCl9a5KZVlvjywCtvyIf9DwAAABM0sv//0Nv/rzrksf3/PPPxK1cdeOWN+bD/AQAAYIJG9v9dvf2/wheu3+bC3bb67PIDr2yYD/sfAAAAJmhk/9/d2/8rLj/zwg3PO37vTw+8slE+7H8AAACYoJH9f09v/7/64h++cJ4z6tWKgVfelA/7HwAAACZoZP/f29v/K3UHPnXXB6685dSBV96cD/sfAAAAJmhk/9/X2/8rz7vBrT+Yf49PnTfwysb5sP8BAABggkb2//29/b/KGQevuv41Z+71/IFXNsmH/Q8AAAATNLL/H+jt/1X/vNlX1r5jn0VfNfDKW/Jh/wMAAMAEjez/P/b2/2pbfv6gc6uz//W5gVc2zYf9DwAAABM0sv8f7O3/16z7nR3u23mRMw8beGWzfNj/AAAAMEEj+/9Pvf3/2id3u3j+S+7YaKmBVzbPh/0PAAAAEzSy/x/q7f/V97j1RRufsk555sArb82H/Q8AAAATNLL//9zb/2vcuPCzFx906N0zB17ZIh/2PwAAAEzQyP5/uLf/17xyqd//cZFlz1904JW35cP+BwAAgAka2f+P9Pb/6z565+oLXv7Q2y4eeGXLfNj/AAAAMEEj+/8vvf2/1q/P+cNZSy6wRDfwylb5sP8BAABggkb2/197+3/t936o2uHJm6/8xsArb8+H/Q8AAAATNLL/H+3t/3UOePNLZjt+v8+eO/DK1vmw/wEAAGCCRvb/33r7f93Ljrr0H+tfuPfcA69skw/7HwAAACZoZP8/1tv/622+2o6nbrXEal8ZeGXbfNj/AAAAMEEj+//vvf2//h+f/dhbDrv3ljUHXtkuH/Y/AAAATNDI/n+8t/83eObKU+t7NvrUywde2T4f9j8AAABM0Mj+f6K3/1//+mrtJ1Y9cq+jBl7ZIR/2PwAAAEzQyP7/R2//v6G68d6/XfPMbrsOvLJjPux/AAAAmKCR/f9kb/+/8cIFuhnzr/7JKwdeeUc+7H8AAACYoJH9/8/e/t/w28su9dYPHHv7Lwde2Skf9j8AAABM0Mj+f6q3/zda4E8/+eYZm6++98ArO+fD/gcAAIAJGtn/T/f2/5sOf/s7nz7v+g88PfDKO/Nh/wMAAMAEjez/Z3r7/82v+9rH59ptrs9vP/DKu/Jh/wMAAMAEjez/f/X2/8bLfOOb28w8+dI3DryySz7sfwAAAJigkf3/bG//b/LZndc//aYdF/vTwCuzfk9A+x8AAAAm6D/f/+WM3v5/yyGPfOc3K56w+aYDr+yWD/sfAAAAJmhk/xe9/b/pa1/+piUe2frcvw28sns+7H8AAACYoJH9X/b2/2bLz7vX3kc/dt89A6+8Ox/2PwAAAEzQyP6vevt/8y/8+uhDN1+p22DglT3yYf8DAADABI3s/7q3/9/a7br8LRufvvHPBl7ZMx/2PwAAAEzQyP5vevt/i4tPvm6ZY3f/7m4Dr+yVD/sfAAAAJmhk/7e9/f+2M0546KOPXv3URwdeeU8+7H8AAACYoJH93/X2/5bzbjfnp5ZrF7x91n8753+88t582P8AAAAwQSP7f2Zv/2+15dFnHrHq7bv9c+CVvfNh/wMAAMAEjez/5/T2/9v//MY3HHDPwp/cauCVffJh/wMAAMAEjez/5/b2/9ZP7rv78oede/smA6+8Lx/2PwAAAEzQyP6frbf/t1n3+0f9bqt9V//zwCv75sP+BwAAgAka2f+z9/b/tjd2y3xi/Yc/8I6BV96fD/sfAAAAJmhk/8/R2//b7XHZNe8/fvnPXzHwygfyYf8DAADABI3s/zl7+3/7jz71wIufPOTSmwZe+WA+7H8AAACYoJH9P1dv/+9w5RrP/dWSay32wYFXPpQP+x8AAAAmaGT/z93b/zuu8rWjX3H5RZtfO/DKfvmw/wEAAGCCRvb/PL39/45Pv32vOxbZ/9z3DLzy4XzY/wAAADBBI/v/eb39v9PxO7/pqINuuu/DA6/snw/7HwAAACZoZP/P29v/Oy/+je/sd8r83W0DrxyQD/sfAAAAJmhk/8/X2//vPGeBORe/5IiNtxx45cB82P8AAAAwQSP7f/7e/n/XbDc+dMPOb/zu3wde+Ug+7H8AAACYoJH9//ze/t9l0T9dd1h1/1N3DbxyUD7sfwAAAJigkf2/QG//7/qNZZf/0B1LLbjWwCsfzYf9DwAAABM0sv9f0Nv/u/3h2aP2ff+Olz828MrB+bD/AQAAYIJG9v8Le/t/921W2/3g009e/G0DrxySD/sfAAAAJmhk/y/Y2//v3qR6w00/netDaw+88rF82P8AAAAwQSP7f6He/t/j71ee+dL5rj/u7oFXDs2H/Q8AAAATNLL/F+7t/z13/dBzD3zO5ne8d+CVw/Jh/wMAAMAEjez/F/X2/163n/PA0b8+ds3rBl45PB/2PwAAAEzQyP5fpLf/33PNUdfc9v3V333rwCsfz4f9DwAAABM0sv8X7e3/9+775mVetvszR+038Mon8vFv+7/6b/5LBgAAAP43jez/F/f2/97v+fT3Xv6Z9snLB145Ih/+/j8AAABM0Mj+X6y3//e5aaNNb93s6hfsOPDKJ/Nh/wMAAMAEjez/l/T2//su3Wfvz6yw+5s+NPDKkfmw/wEAAGCCRvb/4r39v+/+5x/7kYdP//avB145Kh/2PwAAAEzQyP5forf/3/9As8JSf1vpnrcPvPKpfNj/AAAAMEEj+3/J3v7/wGZX3PDr5R9rnhp45dP5sP8BAABggkb2/1K9/f/BDZ786yGbbL3pQwOvfCYf9j8AAABM0Mj+f2lv/3/o6dfN+77PnXD2xgOvHJ0P+x8AAAAmaGT/v6y3//e74M/nf/DwtS7ffeCVY/Jh/wMAAMAEjez/l/f2/4fLZbY4/O2HLP7zgVc+mw/7HwAAACZoZP8v3dv/+z9/nvffuNryH/rdwCvH5sP+BwAAgAka2f/L9Pb/AWf95riX3PvwcQcNvPK5fNj/AAAAMEEj+/8Vvf1/4JrvWvnD/9j3jkcHXvl8Pux/AAAAmKCR/b9sb/9/5LBTbzpyiXPXfMvAK1/Ih/0PAAAAEzSy/5fr7f+Djjn+779fb+F3v37glf8Xe3catfX4//+ez2mKQjIkU8iYKZnnIbPMZMiUeUii8A2ZyhBCUaIMkUIIFTKEDEnIPGRKmQolRDLstf/r6P8/1j7O9Tv2b639W/u48Xjceq+r63qt8+7z+pydV79w6H8AAAAoUKb/N476/5L1j11hw1s/u/brOiv9w6H/AQAAoECZ/t8k6v9LW33XrcEla889ts7KreHQ/wAAAFCgTP+3ivr/sms3uvXPe75t+nedlQHh0P8AAABQoEz/bxr1/+V3LvvUw+P22nd6nZXbwqH/AQAAoECZ/m8d9f8Va71z1NGrXf3QnnVWbg+H/gcAAIACZfp/s6j/ezxx3LxFquWmvVRnZWA49D8AAAAUKNP/m0f937PRfSv+9vl7C59cZ2VQOPQ/AAAAFCjT/1tE/X/ligO3uvu5bgd2rrNyRzj0PwAAABQo0/9bRv1/1T1HfnJQh6dHvFtn5c5w6H8AAAAoUKb/t4r6/+pvr+5+WN+Jo3ass3JXOPQ/AAAAFCjT/1tH/X/N0fsNHLJ/o0MG1Vm5Oxz6HwAAAAqU6f9tov7vtVeXZ3/e+J4FetVZGRwO/Q8AAAAFyvT/tlH/X/vLY8dWv3SYsm6dlXvCof8BAACgQJn+3y7q/+uOX+DfI376d9i9dVbmf03/AwAAQIEy/b991P/XT35llQc23WGvReqsDAmH/gcAAIACZfp/h6j/e7/113b/HHTjKo3rrNwXDv0PAAAABcr0/45R/9/QdZvPG/U+8K/H66wMDYf+BwAAgAJl+n+nqP9v3PyZNf847YHeDeqsDAuH/gcAAIACZfp/56j/b7qh2wtLjDqj04N1Vu4Ph/4HAACAAmX6f5eo//vcvtOXx77/8rbP1Fl5IBz6HwAAAAqU6f9do/7vu/qV1fAGC32yap2V+e8J0P8AAABQoEz/t4n6/+bHNxv8+7ID+vapszI8HPofAAAACpTp/92i/r+lweydFhp/+Dmb1Fl5KBz6HwAAAAqU6f/do/7vt8r44w8YNmftdeqsPBwO/Q8AAAAFyvT/HlH/9x+65BX3dNny1Z51Vh4Jh/4HAACAAmX6f8+o/2+d+uk6Qzv8MGpwnZUR4dD/AAAAUKBM/+8V9f+AI5q9fMhzGx5Sb+XRcOh/AAAAKFCm//eO+v+2ts2nLfD5FQusUGflsXDofwAAAChQpv/3ifr/9t+/WeSXapcpo+qsPB4O/Q8AAAAFyvT/vlH/DzzpkPuGrfbFsK3rrIwMh/4HAACAAmX6v23U/4O+6NPmqHGr7nV7nZX57wnQ/wAAAFCgTP/vF/X/Ha8PO2mpe0ascl2dldHh0P8AAABQoEz/7x/1/52dz7rqr0s6/7VRnZUnwqH/AQAAoECZ/j8g6v+7rphY1W7t1fvmOitPhkP/AwAAQIEy/X9g1P93b734l7Pa7NNpizorT4VD/wMAAECBMv1/UNT/gzfc5IV7W3y97ep1VsaEQ/8DAABAgTL9f3DU//f0n7Nmuz9afHJFnZWnw6H/AQAAoECZ/j8k6v97F25zRcOvn+q7VJ2VZ8Kh/wEAAKBAmf4/NOr/IWMvP/7frS8456E6K8+GQ/8DAABAgTL9f1jU//c9+ORODx7xwdpj6qw8Fw79DwAAAAXK9H+7qP+HNu4++PCeK7zatM7K2HDofwAAAChQpv8Pj/p/2KHDF2n/3HtH9a2z8nw49D8AAAAUKNP/R0T9f//M06c90mG5Ma3qrLwQDv0PAAAABcr0/5FR/z8w74CX51VP/7R2nZUXw6H/AQAAoECZ/j8q6v8Hd+63zmKfd1uqR52VceHQ/wAAAFCgTP+3j/p/+Lstrjp43Le7L1Zn5aVw6H8AAAAoUKb/j476/6HTvjrprtXWHvpAnZWXw6H/AQAAoECZ/j8m6v+HL/6oza+XXP3Ls3VWXgmH/gcAAIACZfr/2Kj/H3l11fsWvWevZVars/JqOPQ/AAAAFCjT/8dF/T/ik893WKTNY8cNqbMyPhz6HwAAAAqU6f/jo/5/9Limn/5267mXLVpn5bVw6H8AAAAoUKb/O0T9/1iXNf6++4/P3l+6zsqEcOh/AAAAKFCm/0+I+v/xN6etdlCLlTd7rM7K6+HQ/wAAAFCgTP+fGPX/yPaHjW2w9WUX71BnZWI49D8AAAAUKNP/J0X9P+qbG4/+8+udBg6ss/JGOPQ/AAAAFCjT/ydH/T969gMXPdzzp/HX1ll5Mxz6HwAAAAqU6f9Tov5/Ys8z7zj6iI3XW6/Oylvh0P8AAABQoEz/nxr1/5MNn9vmiP1/PWrJOiuTwqH/AQAAoECZ/j8t6v+nRl/w0QN9Nx8zvM7K2+HQ/wAAAFCgTP+fHvX/mMG7zP3nl9t/errOyjvh+N/9v81S/3OvGQAAAPjvyfT/GVH/P920x0qNNj5yqRXrrLwbDs//AQAAoECZ/j8z6v9nem3x9GGbvrr7LXVW3guH/gcAAIACZfq/Y9T/z24y64ghPy0ydMs6K++HQ/8DAABAgTL9f1bU/8+1mHDBz72H/dK8zsoH4dD/AAAAUKBM/3eK+n/sHQ1vqw46bZnL66x8GA79DwAAAAXK9P/ZUf8/v9nRe4wc1ee4reqsfBQO/Q8AAAAFyvR/56j/X+h9+5A9Tjv4stvqrHwcDv0PAAAABcr0/zlR/7942909mjT4+/3r66x8Eg79DwAAAAXK9P+5Uf+Pa37KyV++v91mG9dZmRwO/Q8AAAAFyvR/l6j/X3rs/VeeHn/3xffUWfk0HPofAAAACpTp/65R/7+8WJMWey573MAF66x8Fg79DwAAAAVK+/+16F+r86L+f2Xl9RZeucub45evs/J5OPQ/AAAAFCjz/P/8qP9fvW/mtzOHLbXeyDorX4RD/wMAAECBMv1/QdT/47/aftcZR1ywweF1Vr4Mh/4HAACAAmX6/z9R/792+Ly7m/Z86o0/66xMCYf+BwAAgAJl+r9b1P8T9n3h0n2/XmHAj3VWvgqH/gcAAIACZfr/wqj/X5+zaIexW39wwf51VqaGQ/8DAABAgTL9f1HU/xNPHPXitBb7tBpXZ2VaOPQ/AAAAFCjT/xdH/f/G5+c2X+GPXpOOr7PydTj0PwAAABQo0//do/5/c8JeC+56a4se59VZ+SYc+h8AAAAKlOn/S6L+f+vsG6aOaPP1Se/VWfk2HPofAAAACpTp/0uj/p/Uq+f7D92z6gpn1Vn5Lhz6HwAAAAqU6f/Lov5/e5Ndtzzmki/mTKyz8n049D8AAAAUKNP/l0f9/06L/yy/+GqdB0+uszI9HPofAAAACpTp/yui/n/3jrG/zh03Ytf/1FmZEQ79DwAAAAXK9H+PqP/fa9jokMGfb7j4b3VWfgiH/gcAAIACZfq/Z9T/749+ffSB1Q8z2tVZ+TEc+h8AAAAKlOn/K6P+/2Dwz/0X7rDL2J3qrPwUDv0PAAAABcr0/1VR/3/YdMuuc5674piv6qzMDIf+BwAAgAJl+v/qqP8/av/127OHHb7By3VWZoVD/wMAAECBMv1/TdT/H3+zZusFuwx445Q6Kz+HQ/8DAABAgTL93yvq/09mr7jMoctuOeDsOiuzw6H/AQAAoECZ/r826v/Je34x677xcy54p87KL+HQ/wAAAFCgTP9fF/X/p590PODv989odUydlV/Dof8BAACgQJn+vz7q/8+Oe/CxJRs8MOmvOiu/hUP/AwAAQIEy/d876v/Pu9zU98jTFuoxo87KnHDofwAAAChQpv9viPr/izfbdb5/1Msn7VVn5fdw6H8AAAAoUKb/b4z6/8vtfvv1sIN2WOGXOit/hEP/AwAAQIEy/X9T1P9Trmy9/JDe/845sM7K3HDofwAAAChQpv/7RP3/VZ8GW/7804GDd6+z8mc49D8AAAAUKNP/faP+n7ruW+9Xm96467Q6K/PCof8BAACgQJn+vznq/2ljLu56xMaNFj+1zsr8vwmo/wEAAKBAmf6/Jer/rxd4uv8Dv0ycMaHOyt/h0P8AAABQoEz/94v6/5tlLxv9T98OYz+rs/JPOPQ/AAAAFCjT//2j/v/24T0OabT/PcdcUmfl33DofwAAAChQpv9vjfr/u+m3zGrQvPG1K6Ur1fxD/wMAAECBMv0/IOr/7w84eJk//5p0+lPpShW+R/8DAABAiTL9f1vU/9PbnNb64YHdd3g4XanmvwFA/wMAAECBMv1/e9T/M/555O2jdxr7RcN0paqFQ/8DAABAgTL9PzDq/x/OXKXzIkev0e/SdKVaKBz6HwAAAAqU6f9BUf//+MHkvr9dNvX8NdKVauFw6H8AAAAoUKb/74j6/6cXpzx295S2a26erlSLhEP/AwAAQIEy/X9n1P8zL1jngIO2v+7F/ulKtWg49D8AAAAUKNP/d0X9P+ukb8cf/Mn5IzZMV6r5P6//AQAAoECZ/r876v+fv1h9/bsWGX3gDelK1SAc+h8AAAAKlOn/wVH/z359pSV+PbnpwremK9Xi4dD/AAAAUKBM/98T9f8vnT/7ftExH0/bJl2plgiH/gcAAIACZfr/3qj/f53aaa/2Q9s8NDpdqRqGQ/8DAABAgTL9PyTq/9+OuP/BRy7sue+y6UrVKBz6HwAAAAqU6f/7ov6f07Zvr3krtWxaS1eqJcOh/wEAAKBAmf4fGvX/778feupir06fe3e6Ui0VDv0PAAAABcr0/7Co//94/KqJDd9ude2V6Uq1dDj0PwAAABQo0//3R/0/t8HOG/3baNbpLdKVqnE49D8AAAAUKNP/D0T9/+cqFy71YMdjdmidrlTzu1//AwAAQIEy/f9g1P/zhj774+GP3vnFTelK1SQc+h8AAAAKlOn/4VH//7X5Um1rw6t+q6Qr1fy/Cfj/qv/r/AEBAAAA4H9Qpv8fivr/7xtee2TW2ePOH5uuVMuFw/N/AAAAKFCm/x+O+v+f23/pfe/SHdcclq5Uy4dD/wMAAECBMv3/SNT//66++ZntJg5/cfF0pVohHPofAAAACpTp/xH/p/+rBZ5Z/tzPWrYbMSJdqZqGQ/8DAABAgTL9/2jU/wsuMummjX7vd2Cdxq9WDIf+BwAAgAJl+v+xqP+rZaaP6NZ/q4UXTleqZuHQ/wAAAFCgTP8/HvV/bdgGB12zz9xpQ9OVaqVw6H8AAAAoUKb/R0b9v9A2d8x+57ATH2qZrlQrh0P/AwAAQIEy/T8q6v+FLz186dV7Ddn3mnSlWiUc+h8AAAAKlOn/0VH/L3Jzh1Zdpy/R9I50pVo1HPofAAAACpTp/yei/l90o3vfvXKLCXO3S1eq1cKh/wEAAKBAmf5/Mur/xU4/7/zLX332r0npSjX/Z/Q/AAAAFCjT/09F/d9g0ohbOq900SrnpCvV6uHQ/wAAAFCgTP+Pifp/8Zd6jVzrwnf2OildqdYIh/4HAACAAmX6/+mo/5fovu9hHwxtMuzVdKVaMxz6HwAAAAqU6f9nov5v+MM/c64f03vKPulK1SIc+h8AAAAKlOn/Z6P+b3TYVst2P3n/Bb5PV6q1wqH/AQAAoECZ/n8u6v8ld6k2X3+RKYf8k65Ua4dD/wMAAECBMv0/Nur/pf546cOPP2k+qn26Uq0TDv0PAAAABcr0//NR/y/95C7rb7D95Fe/SVeqdcOh/wEAAKBAmf5/Ier/xlWP8V9MabZ2m3SlWi8c+h8AAAAKlOn/F6P+X2b5576/9rKR5xycrlTrh0P/AwAAQIEy/T8u6v8mwy9Y4oKju/b9OV2pWoZD/wMAAECBMv3/UtT/y+4w4cE1d/ruk4vTlWqDcOh/AAAAKFCm/1+O+n+5Hg33mjRwvW2/SFeqDcOh/wEAAKBAmf5/Jer/5W/c4tQef13VaXy6Um0UDv0PAAAABcr0/6tR/6+w/qxe5zffvffp6Uq1cTj0PwAAABQo0//jo/5vetYaG527xaC/2qYr1Sbh0P8AAABQoEz/vxb1/4rvTZt46fT2q8xMV6pW4dD/AAAAUKBM/0+I+r/Z85//+F6v2Xv9ka5Um4ZD/wMAAECBMv3/etT/K3VrutQ6h7UedmS6UrUOh/4HAACAAmX6f2LU/yt/98AjF+3z8JQP0pVqs3DofwAAAChQpv/fiPp/lYPObHtD/04LdElXqs3Dof8BAACgQJn+fzPq/1V3P+zMyb+/cMgJ6Uq1RTj0PwAAABQo0/9vRf2/2l839l635QKjXkhXqi3Dof8BAACgQJn+nxT1f/MlN13iw4nzXr0wXam2Cof+BwAAgAJl+v/tqP9XH/nr9y2W3mbtj9OVautw6H8AAAAoUKb/34n6f4273hx/9tk3n/NmulJtEw79DwAAAAXK9P+7Uf+v2Wyx9a8YfmjfM9OVattw6H8AAAAoUKb/34v6v8XVY3p99Oj4T75MV6rtwqH/AQAAoECZ/n8/6v+1Nr3o1JYdG2y7S7pSbR8O/Q8AAAAFyvT/B1H/r7327ntd0mhop0PTlWqHcOh/AAAAKFCm/z+M+n+dgZc+eN3bJ/f+PV2pdgyH/gcAAIACZfr/o6j/1/3ooKWunj5kmYvSlWqncOh/AAAAKFCm/z+O+n+9Djf/eOEWJ/7yebpS7RwO/Q8AAAAFyvT/J1H/r3/ewxM3PmzC0NfSlWr+ZwLqfwAAAChQpv8nR/3fcuKpG33aa4ndz0hXql3DUa//F/z/+CUDAAAA/02Z/v806v8Njvmk91X9+y31bbpStQmH5/8AAABQoEz/fxb1/4bTVj6zyz7tftotXanmf03/AwAAQIEy/f951P8bzVq7bfOWc8cclK5Uu4dD/wMAAECBMv3/RdT/G+/95SPv/r7VUbPSlWqPcOh/AAAAKFCm/7+M+n+Tds23fGfpcevtna5Ue4ZD/wMAAECBMv0/Jer/Vj9+8/7qE6vx36Ur1V7h0P8AAABQoEz/fxX1/6ZzP/216/DhA/9NV6r57wnQ/wAAAFCgTP9Pjfq/9a7Nlr/y7I4XH52uVPuEQ/8DAABAgTL9Py3q/83eHjb6s46zNns7Xan2DYf+BwAAgAJl+v/rqP83P+OsQzZ6tNX756YrVdtw6H8AAAAoUKb/v4n6f4tLDuna7e07LzsxXan2C4f+BwAAgAJl+v/bqP+3fLlP/2saHXPcK+lKtX849D8AAAAUKNP/30X9v9VlO7W+fqWey0xJV6oDwqH/AQAAoECZ/v8+6v+tt73y7e6vtvll13SlOjAc+h8AAAAKlOn/6VH/b7PxM7PWHzp96CHpSnVQOPQ/AAAAFCjT/zOi/t/2lm7LfHxhy93npCvVweHQ/wAAAFCgTP//EPX/douOf+zyk0cv1S1dqea/J0D/AwAAQIEy/f9j1P/bP7vkAZ3HnP/TR+lKdWg49D8AAAAUKNP/P0X9v8P9m3Ve65OPx7yVrlSHhUP/AwAAQIEy/T8z6v8dm8zu+8EiTY/qmK5U7cKh/wEAAKBAmf6fFfX/Tk/ds99xU6au92G6Uh0eDv0PAAAABcr0/89R/+9cO2l43+3XGN81XamOCIf+BwAAgAJl+n921P+7rHDs9a8efd3ADulKdWQ49D8AAAAUKNP/v0T9v+tDAzptdlnbi59PV6qjwqH/AQAAoECZ/v816v82O7Z8q9PASZvtm65U7cOh/wEAAKBAmf7/Ler/3Xr+uOHAnRq//1O6Uh0dDv0PAAAABcr0/5yo/3e/6cOG45uPvWxuulIdEw79DwAAAAXK9P/vUf/v0bLxT9v+1f24o9KV6thw6H8AAAAoUKb//4j6f89O4/besVGDk55IV6rjwqH/AQAAoECZ/p8b9f9e7y88bOLb43ssl65Ux4dD/wMAAECBMv3/Z9T/e7+w4zW3PnrypCpdqTqEQ/8DAABAgTL9Py/q/30unHvGGR2HtrorXalOCIf+BwAAgAJl+v+vqP/3/X6f1zc5e5sLNkhXqhPDof8BAACgQJn+/zvq/7YHX7/euOHzBvROV6qTwqH/AQAAoECZ/v8n6v/99nhisf4TD31jQLpSnRyO0P91PiIAAAAA+P9Npv//jfp//787Tz9x6Zs32DZdqU4Jh+f/AAAAUKD/uv9rC0T9f8B3651+6++djrksXalODYf+BwAAgAJl+n/BqP8PPGjm1We0fHjsmulKdVo49D8AAAAUKNP/VdT/B+3+/v077rPAjM3Sler0cOh/AAAAKFCm/2tR/x/8V5N9JvZ/YfF+6Up1Rjj0PwAAABQo0/8LRf1/yFl3z+jfq/2uzdKV6sxw6H8AAAAoUKb/F476/9D3Tmlw4mGDBj+ZrlQdw6H/AQAAoECZ/l8k6v/Dnj963U22aD3nkXSlOisc+h8AAAAKlOn/RaP+b9ft9gnjps9eoVG6UnUKh/4HAACAAmX6f7Go/w/fYa+zXv1rvZPWT1eqs8Oh/wEAAKBAmf5vEPX/ET1uuG6z5t/1uDpdqTqHQ/8DAABAgTL9v3jU/0feOOqh43bafdKd6Up1Tjj0PwAAABQo0/9LRP1/1Prn7t934FWttk9XqnPDof8BAACgQJn+bxj1f/snX5g5/rJmFzyarlRdwqH/AQAAoECZ/m8U9f/R1aKNtj168oAm6UrVNRz6HwAAAAqU6f8lo/4/ZvntN+i0fdc3FkpXqvPCof8BAACgQJn+Xyrq/2OHz3tz4JSRG9yXrlTnh0P/AwAAQIEy/b901P/HHXPEPicssv8xK6cr1QXh0P8AAABQoEz/N476//hpd95/4ye9xz6XrlT/CYf+BwAAgAJl+n+ZqP87zBpy9Utjms+4P12puoVD/wMAAECBMv3fJOr/E/Y+4fQtT56y+BLpSnVhOPQ/AAAAFCjT/8tG/X/iR29POPPCi3a9Kl2pLgqH/gcAAIACZfp/uaj/T+qwwrp3Dn128FrpSnVxOPQ/AAAAFCjT/8tH/X/yeRs2eP3VJnM2TVeq7uHQ/wAAAFCgTP+vEPX/KRNnzNhqpXdWuDFdqS4Jh/4HAACAAmX6v2nU/6devfX+2424+a0W6Up1aTj0PwAAABQo0/8rRv1/2qb/PvTWmYdudGW6Ul0WDv0PAAAABfqv+r/51FqzqP9PX/vl625vOK/bTelKdXk49D8AAAAUKPP8f6Wo/88YWDvr1Enb3N46XamuCIf+BwAAgAJl+n/lqP/PXPLRN1u/MfSdselK1SMc+h8AAAAKlOn/VaL+7zjy/A2eb3xy61XSlapnOPQ/AAAAFCjT/6tG/X/WXW0b3dx5/CmLpyvV/M8E1P8AAABQoEz/rxb1f6dm18485aEGVw5LV6qrwqH/AQAAoECZ/m8e9f/Zi+5z/sl7z/61TuNXV4dD/wMAAECBMv2/etT/nZ+9/pZb+rVebkS6Ul0TDv0PAAAABcr0/xpR/59z/xMjX5gzaOeh6UrVKxz6HwAAAAqU6f81o/4/t0nnwzZdv/1dC6cr1bXh0P8AAABQoEz/t4j6v8tl4+actuUL31+TrlTXhUP/AwAAQIEy/b9W1P9dt1142dtmLLBYy3Sluj4c+h8AAAAKlOn/taP+P2/jHTd/89qH22+XrlS9w6H/AQAAoECZ/l8n6v/zb5n74fbtOj17R7pS3RAO/Q8AAAAFyvT/ulH/X/B2y3O33nnkW0+lK9WN4dD/AAAAUKBM/68X9f9/zvjxpgmDum60UrpS3RQO/Q8AAAAFyvT/+lH/d7vkwxF3/D25W8N0peoTDv0PAAAABcr0f8uo/y98ufFBHVdvdvvD6UrVNxz6HwAAAAqU6f8Nov6/qN09s7fY7qp31khXqpvDof8BAACgQJn+3zDq/4t/PGnpl7/cvfWl6Up1Szj0PwAAABQo0/8bRf3ffe6xrW669LtT+qcrVb9w6H8AAAAoUKb/N476/5JdB7zbof16V26erlTzfyeg/wEAAKBAmf7fJOr/Sw/f6Lndn37n1xvSlerWcOh/AAAAKFCm/1tF/X/ZV9+1H3VKk+U2TFeqAeHQ/wAAAFCgTP9vGvX/5XPeuXjKos/uvE26Ut0WDv0PAAAABcr0f+uo/6/Yd9k7l5l80V23pivV7eHQ/wAAAFCgTP9vFvV/j8/v23GvV6Z8v2y6Ug0Mh/4HAACAAmX6f/Oo/3ueeNxnY5o1X2x0ulINCof+BwAAgAJl+n+LqP+vPPvIv37q1rv93elKdUc49D8AAAAUKNP/W0b9f9WEgauuct/+z9bSlerOcOh/AAAAKFCm/7eK+v/q3vuNWbHdVk/OTFequ8Kh/wEAAKBAmf7fOur/aza7+vDp1849om26Us3/PwH6HwAAAAqU6f9tov7v1fyx/zw3o12jI9OVanA49D8AAAAUKNP/20b9f+1tXW5vu2W/H/5IV6p7wqH/AQAAoECZ/t8u6v/rFntl2+XXX2JIl3Slujcc+h8AAAAKlOn/7aP+v/6xBT7+es6ENh+kK9WQcOh/AAAAKFCm/3eI+r/3fdv88Wi/E5d+IV2p7guH/gcAAIACZfp/x6j/b1j5r2a77D3k5xPSlWpoOPQ/AAAAFCjT/ztF/X9j+27fPvHQMVd8nK5Uw8Kh/wEAAKBAmf7fOer/m755ZuE2ne/scGG6Ut0fDv0PAAAABcr0/y5R//eZfWWLpRu32uLMdKV6IBz6HwAAAAqU6f9do/7vu+dOr0x9Y9aHb6Yr1YPh0P8AAABQoEz/t4n6/+ZPZp/85KSOd+ySrlTDw6H/AQAAoECZ/t8t6v9bjtusxz4Nh1/yZbpSPRQO/Q8AAAAFyvT/7lH/9+uy5JDVzqxa/p6uVA+HQ/8DAABAgTL9v0fU//3fHL/HDyPGTTg0XakeCYf+BwAAgAJl+n/PqP9v7dVs6nf3NX3ynHSlGhEO/Q8AAAAFyvT/XlH/D9jk0wVX6vbxEZPSlerRcOh/AAAAKFCm//eO+v+2Ft8037/Z+Y1eTVeqx8Kh/wEAAKBAmf7fJ+r/2+9o/uIzr4z+4aR0pXo8HPofAAAACpTp/32j/h/YsE+Hbye3HPJ9ulKNDIf+BwAAgAJl+r9t1P+DRh9y6bKLTm+zT7pSjQqH/gcAAIACZfp/v6j/7xh81t07ndJm6fbpSjU6HPofAAAACpTp//2j/r+z6bBdH3+658//pCvVE+HQ/wAAAFCgTP8fEPX/XdMXf2Xf9t2vaJOuVE+GQ/8DAABAgTL9f2DU/3cfMLHF2EvHdvgmXameCof+BwAAgAJl+v+gqP8Ht5mz8IwvG2/xc7pSjQmH/gcAAIACZfr/4Kj/7/lnk2+bbjfpw4PTlerpcOh/AAAAKFCm/w+J+v/eMy/fY9fV297xRbpSPRMO/Q8AAAAFyvT/oVH/D/mgzZARf193ycXpSvVsOPQ/AAAAFCjT/4dF/X/fi917TBu0RsvT05XquXDofwAAAChQpv/bRf0/9IInT15h56kTxqcr1dhw6H8AAAAoUKb/D4/6f9h2p7/YpFvzw3ZNV6rnw6H/AQAAoECZ/j8i6v/7rxze/Mv7pjwxJV2pXgiH/gcAAIACZfr/yKj/H+jTb8GRr+w/dU66Ur0YDv0PAAAABcr0/1FR/z+47gFT92jWuzokXanGhUP/AwAAQIEy/d8+6v/hY77adeVFm+zzUbpSvRQO/Q8AAAAFyvT/0VH/P7RAi7tnTn7ngW7pSvVyOPQ/AAAAFCjT/8dE/f/wsqte+vTTF/3TMV2pXgmH/gcAAIACZfr/2Kj/H3n4ow57nvLsam+lK9Wr4dD/AAAAUKBM/x8X9f+Ix5v+udelu3fsmq5U48Oh/wEAAKBAmf4/Pur/Rxt83nRM+6uu+zBdqV4Lh/4HAACAAmX6v0PU/4+tMm3rn7Zb76Pn05VqQjj0PwAAABQo0/8nRP3/+NA1Jq/y5Xdbd0hXqtfDof8BAACgQJn+PzHq/5Gb33jh7n93PfundKWaGA79DwAAAAXK9P9JUf+PuuGwAaNWH3nTvulK9UY49D8AAAAUKNP/J0f9P/r2M5+csnOzl49KV6o3w6H/AQAAoECZ/j8l6v8nVn/gyGUGTW4xN12p3gqH/gcAAIACZfr/1Kj/nzzpgn+Wv3aBwz5PV6pJ4dD/AAAAUKBM/58W9f9TXzy38tftXnjionSlejsc+h8AAAAKlOn/06P+H/N6j+0f3bLT1DPSleqdcOh/AAAAKFCm/8+I+v/pzrt8scuMh6vX0pXq3XDofwAAAChQpv/PjPr/mamzLllxTut9dktXqvfCof8BAACgQJn+7xj1/7NHbDFo+vqzH/g2XaneD4f+BwAAgAJl+v+sqP+fa9vwmef2bv/PrHSl+iAc+h8AAAAKlOn/TlH/j/19wjFt+w1a7aB0pfowHPofAAAACpTp/7Oj/n/+6NuvmNf55I7fpSvVR+HQ/wAAAFCgTP93jvr/hW+PPn6xh4Zet3e6Un0cDv0PAAAABcr0/zlR/7/4yyk7tX+jwUdHpyvVJ+HQ/wAAAFCgTP+fG/X/uL3uHvxI4/Fb/5uuVJPDof8BAACgQJn+7xL1/0uTm1S/Njz07HPTlerTcOh/AAAAKFCm/7tG/f/y8e9/ueikm296O12pPguH/gcAAIACZfr/vKj/X+k684WDR2zz8ivpSvV5OPQ/AAAAFCjT/+dH/f/qW+utedeZ81qcmK5UX4RD/wMAAECBMv1/QdT/46+dd9W9g65b/ep0pfoyHPofAAAACpTp//9E/f9aq+1Pardz2+fXT1eqKeHQ/wAAAFCgTP93i/p/wlqLtqmtPvXm7dOV6qtw6H8AAAAoUKb/L4z6//U7X7hv1t9rdL0zXammhkP/AwAAQIEy/X9R1P8TG527yINfjt2uSbpSTQuH/gcAAIACZfr/4qj/33hi1LTDt+v+2aPpSvV1OPQ/AAAAFCjT/92j/n/znhtebth+0jX3pSvVN+HQ/wAAAFCgTP9fEvX/Wyvutc6/lzY+daF0pfo2HPofAAAACpTp/0uj/p80ddfGX50yvdlz6Ur1XTj0PwAAABQo0/+XRf3/9hE9f2n8dMt5K6cr1ffh0P8AAABQoEz/Xx71/zttx76z2+SejyyRrlTTw6H/AQAAoECZ/r8i6v93f//PJqMXbbPf/elKNSMc+h8AAAAKlOn/HlH/v3fS6zf+2OzjRddKV6ofwqH/AQAAoECZ/u8Z9f/7XzQ6Z9VXmn5zVbpS/RgO/Q8AAAAFyvT/lVH/f/D6lgfvfd/ox25MV6qfwqH/AQAAoECZ/r8q6v8PO//86FPdzj9403SlmhkO/Q8AAAAFyvT/1VH/f7T5mss9e+bw1ZdLV6pZ4dD/AAAAUKBM/18T9f/HN3z9+34jOj7/RLpS/RwO/Q8AAAAFyvR/r6j/P7n9iw+aTRp3813pSjU7HPofAAAACpTp/2uj/p+8+oqbfd+w6lqlK9Uv4dD/AAAAUKBM/18X9f+njz9482ON79yud7pS/RoO/Q8AAAAFyvT/9VH/f9ag43k7v3HMZxukK9Vv4dD/AAAAUKBM//eO+v/zVdq1W+6hWddsm65Uc8Kh/wEAAKBAmf6/Ier/L4beNOqbzq1OHZCuVL+HQ/8DAABAgTL9f2PU/18e2nqTFftNaLZmulL9EQ79DwAAAAXK9P9NUf9PmfnbO9P3XmLeZelKNTcc+h8AAAAKlOn/PlH/fzXvrV+eW3/II/3SlerPcPyv/j/pf/YlAwAAAP9Nmf7vG/X/1J0bNG4758T9NktXqnnh8PwfAAAACpTp/5uj/p/27tOPLj9j7qJPpivVX+HQ/wAAAFCgTP/fEvX/16ddfPDXW271TbN0pfo7HPofAAAACpTp/35R/39z8R7nPNqu32ON0pXqn3DofwAAAChQpv/7R/3/7auX3bjLte0OfiRdqf4Nh/4HAACAAmX6/9ao/7+74uDNdj/h2RseTFdq8w/9DwAAAAXK9P+AqP+/3/qWD0aNveisBulKLXyP/gcAAIASZfr/tqj/p2/4yO9Tvnhnm1XTlVoVDv0PAAAABcr0/+1R/8/of9pyy9SaTH4mXanN/w8A+h8AAAAKlOn/gVH//7Dw5FF7rdq7zybpSm2hcOh/AAAAKFCm/wdF/f/j2FXajXlx/3P7pCu1hcOh/wEAAKBAmf6/I+r/nx5c57yfBk9Zp2e6UlskHPofAAAACpTp/zuj/p/ZeMrNq3Rv/so66Upt0XDofwAAAChQpv/vivp/VsPVG648YPLIQelKbf7P638AAAAoUKb/7476/+fR3/40c7dmh+6YrtQahEP/AwAAQIEy/T846v/Zgz976+m1Ri64brpSWzwc+h8AAAAKlOn/e6L+/6XpShvuObfrl73SldoS4dD/AAAAUKBM/98b9f+vve6/vsm07+5fJF2pNQyH/gcAAIACZfp/SNT/v23SqdOXW623573pSq1ROPQ/AAAAFCjT//dF/T+nxaH7jTz8qpUfT1dqS4ZD/wMAAECBMv0/NOr/3+/oO3yPHrv/3ThdqS0VDv0PAAAABcr0/7Co///4ZOfFdu0z6IYt0pXa0uHQ/wAAAFCgTP/fH/X/3OOumj5iv/Zn3Zyu1Oa/J0D/AwAAQIEy/f9A1P9/dnn29Wkbzd7minSlNr/79T8AAAAUKNP/D0b9P+/NC9dbYXbryaunK7Um4dD/AAAAUKBM/w+P+v+v9q9ds+/Mh/s8lK7Ulg2H/gcAAIACZfr/oaj///5mqTPGtu507lLpSm25cOh/AAAAKFCm/x+O+v+f2ZvvPePgF9Zpmq7Ulg+H/gcAAIACZfr/kaj//93zl2FNb1jglTHpSm2FcOh/AAAAKFCm/0f8n/6vLXBr0+UHnDpvZJ2V2vz3BOh/AAAAKFCm/x+N+n/BNT7/9fSR2xw6OF2prRgO/Q8AAAAFyvT/Y1H/V1tMe3+H925ecFS6UmsWDv0PAAAABcr0/+NR/9euW2PLNxY79MsV0pXaSuHQ/wAAAFCgTP+PjPp/oVVv7N9vufH3356u1FYOh/4HAACAAmX6f1TU/wvfe1jXk15rsOfW6UptlXDofwAAAChQpv9HR/2/yIgzD2l1/9CVN0pXaquGQ/8DAABAgTL9/0TU/4su/sDoF7ue/Pd16UpttXDofwAAAChQpv+fjPp/sf0uWOaVHo3/OC5d+d8/o/8BAACgQJn+fyrq/wa/Pjdr88MnrfhiulJbPRz6HwAAAAqU6f8xUf8v/mWPt4/fqnvb99OV2hrh0P8AAABQoEz/Px31/xJH7tK6z7Sxw89PV2prhkP/AwAAQIEy/f9M1P8Nx8/q+9rcNb6el67UWoRD/wMAAECBMv3/bNT/jc7ZovM2a01d6Ih0pbZWOPQ/AAAAFCjT/89F/b/kyQ0POGu3tgfsl67U1g6H/gcAAIACZfp/bNT/S3064bFBA6579Id0pbZOOPQ/AAAAFCjT/89H/b/0wH33P7X7+eMOS1dq64ZD/wMAAECBMv3/QtT/jdfu9dDtg0ev8Wu6UlsvHPofAAAACpTp/xej/l9m0xHXvfVi0/Ompiu19cOh/wEAAKBAmf4fF/V/k6vPO2u7VT/uv3O6UmsZDv0PAAAABcr0/0tR/y/b7KU3T6m1+fyNdKW2QTj0PwAAABQo0/8vR/2/3F3VBjd/0XPHTulKbcNw6H8AAAAoUKb/X4n6f/mRWzV6fmzLMy5IV2obhUP/AwAAQIEy/f9q1P8rLPnPzNYnTO/1SbpS2zgc+h8AAAAKlOn/8VH/N917g3227Nrqj7/Tldom4dD/AAAAUKBM/78W9f+Ks6bf/9L9s1Y8Nl2ptQqH/gcAAIACZfp/QtT/zaZNuvrG145pu2e6Uts0HPofAAAACpTp/9ej/l/pmOVPP2G5O4dPT1dqrcOh/wEAAKBAmf6fGPX/yhPvnbDVYtXXJ6crtc3Cof8BAACgQJn+fyPq/1XO67Du6++NW+ildKW2eTj0PwAAABQo0/9vRv2/aofDG9w5suMB76YrtS3Cof8BAACgQJn+fyvq/9U+umPGmacOf7RzulLbMhz6HwAAAAqU6f9JUf83X3+7s/re0G7c6+lKbatw6H8AAAAoUKb/3476f/Ub/7zuuIP7rXFaulLbOhz6HwAAAAqU6f93ov5fo8fzD23WeqvzuqcrtW3Cof8BAACgQJn+fzfq/zV3WGT/V2fO7f9pulLbNhz6HwAAAAqU6f/3ov5vMXzkzIGzT/z8gHSltl049D8AAAAUKNP/70f9v9by5zTqtNGQHWenK7Xtw6H/AQAAoECZ/v8g6v+1qz032Ha/Jc74Ol2p7RAO/Q8AAAAFyvT/h1H/r/Nk7zfH95nQa490pbZjOPQ/AAAAFCjT/x9F/b/uX+1Pn3h/g+Unpiu1ncKh/wEAAKBAmf7/OOr/9Xa/7eodu47//ax0pbZzOPQ/AAAAFCjT/59E/b/+QXfdf8ZyJ9/zn3Sltks49D8AAAAUKNP/k6P+b/ndyfvc+trQXSanK7Vdw6H/AQAAoECZ/v806v8Nur03Y9x72yzRLl2ptQmH/gcAAIACZfr/s6j/N3x+mQabLDZv+m/pSm23cOh/AAAAKFCm/z+P+n+j99Zd98RTD33uq3Sltns49D8AAAAUKNP/X0T9v/FZP03oP/LmY3dKV2p7hEP/AwAAQIEy/f9l1P+bnLvRQf0O7rThn+lKbc9w6H8AAAAoUKb/p0T93+q170acdMPDEw9PV2p7hUP/AwAAQIEy/f9V1P+bfvbOTa1mLnDr/ulKbe9w6H8AAAAoUKb/p0b93/qUZc99sfUL//kxXantEw79DwAAAAXK9P+0qP83++2+dwds1H6T49OV2r7h0P8AAABQoEz/fx31/+b7H9fq9NmD3h6XrtTahkP/AwAAQIEy/f9N1P9bHHXk0jv0ad3zvXSltl849D8AAAAUKNP/30b9v+WUgbPf2G/2ieelK7X5nwmo/wEAAKBAmf7/Lur/rYbsd9hrh6+3/IHpSu2AcOh/AAAAKFCm/7+P+n/r1a4euU2P737/JV2pzf+dgP4HAACAAmX6f3rU/9ss8dgtZ03b/Z5p6UrtoHDofwAAAChQpv9nRP2/7aNdzh+01VW77J6u1A4Oh/4HAACAAmX6/4eo/7db85UPX1mr2RIT0pXaIeHQ/wAAAFCgTP//GPX/9gMW2HzzuZOnn5qu1A4Nh/4HAACAAmX6/6eo/3e4fptljx/Q9blL0pXaYeHQ/wAAAFCgTP/PjPp/xy3/mtNnt5HHfpau1NqFQ/8DAABAgTL9Pyvq/50GPdSyxeD9NzwlXakdHg79DwAAAAXK9P/PUf/vvM4Zr33YvffEl9OV2hHh0P8AAABQoEz/z476f5fWB353xarNb30nXakdGQ79DwAAAAXK9P8vUf/vek3/xc9+ccp/zk5XakeFQ/8DAABAgTL9/2vU/21WWuuBll9ctMlf6UqtfTj0PwAAABQo0/+/Rf2/291T9/yo9uzbx6QrtaPDof8BAACgQJn+nxP1/+6jPj7tuhOa9NwrXanN/52A/gcAAIACZfr/96j/91hqtWsvGfvOiTPSldqx4dD/AAAAUKBM//8R9f+e+7yx8YX7DTl+0XSldlw49D8AAAAUKNP/c6P+3+vnJd64us+Jlw5JV2rHh0P/AwAAQIEy/f9n1P97f93qh09nT3jvsXSl1iEc+h8AAAAKlOn/eVH/73Ps70tuvNESmy+drtROCIf+BwAAgAJl+v+vqP/3fWO3h7u07nfRwHSldmI49D8AAAAUKNP/f0f93/b8K/a9ama7QTuEf1wk+r6TwqH/AQAAoECZ/v8n6v/9Tniq47s3zH1tvXSldnI49D8AAAAUKNP//0b9v//Hl9zQ/OCt1r02XamdEg79DwAAAAX6r/t/oQWi/j/gxaMeP2LkuCNbpSu1U8Oh/wEAAKBAmf5fMOr/Ay8YdOADp1ZP901XaqeFQ/8DAABAgTL9X0X9f9CZQ8/+Z7HhM3ukK7XTw6H/AQAAoECZ/q9F/X/wB8f3afRexyXXTldqZ4RD/wMAAECBMv2/UNT/h7R5d9PDXpu1xwPpSu3McOh/AAAAKFCm/xeO+v/Qf5abNGS5Vvctlq7UOoZD/wMAAECBMv2/SNT/h03f+Oefu945e7V0pXZWOPQ/AAAAFCjT/4tG/d/ugO+bVPcf0+TZdKXWKRz6HwAAAAqU6f/Fov4/fNltn1hkbM/jb0tXameHQ/8DAABAgTL93yDq/yMe/vvQ305oc+lW6Uqtczj0PwAAABQo0/+LR/1/5JhXu9xdm/7exulK7Zxw6H8AAAAoUKb/l4j6/6gFFux30BctN78+XamdGw79DwAAAAXK9H/DqP/b93l8iwYvjr5owXSl1iUc+h8AAAAKlOn/RlH/H71u1/f+XPX8QfekK7Wu4dD/AAAAUKBM/y8Z9f8x2+3/28PdP35tZLpSOy8c+h8AAAAKlOn/pf7v/v+39r++fuyV16xw9OCm6y6frtTOD4f+BwAAgAJl+n/p6Pn/cV1a9hm829Qjh6crtQvCof8BAACgQJn+bxz1//Fv/nj2gQPWeHrJdKX2n3DofwAAAChQpv+Xifq/wycfHrjw3Otmrpiu1LqFQ/8DAABAgTL93yTq/xOOa/z4nLXaLvl0ulK7MBz6HwAAAAqU6f9lo/4/cfY9TR7aatIeW6YrtYvCof8BAACgQJn+Xy7q/5P2POnnY6Y1vu+WdKV2cTj0PwAAABQo0//LR/1/cvtjJy3eY+zsy9OVWvdw6H8AAAAoUKb/V4j6/5RvBmw69/DuTZqnK7VLwqH/AQAAoECZ/m8a9f+pg/fp9/cvW71+c7pSuzQc+h8AAAAKlOn/FaP+P63p9V2W3Hju+lukK7XLwqH/AQAAoECZ/m8W9f/pDZ849Mj923VfPV2pzf9MAP0PAAAABcr0/0pR/58xuvMT9/ftd+cV6Upt/tf0PwAAABQo0/8rR/1/ZotxK8zuvcQHS6UrtR7h0P8AAABQoEz/rxL1f8c7Fv5twYMmbPlQulLrGQ79DwAAAAXK9P+qUf+f1WvH9w7d9MQTxqQrtSvDof8BAACgQJn+Xy3q/06bzN3ivp+GXN40XaldFQ79DwAAAAXK9H/zqP/P3nDrh4c2OGbW4HSldnU49D8AAAAUKNP/q0f937n/v/se8v6djeus1K4Jh/4HAACAAmX6f42o/8+54uWOC4xqtdsK6UqtVzj0PwAAABQo0/9rRv1/7ta1G345bda9o9KV2rXh0P8AAABQoEz/t4j6v8uDj248rEvHH7dOV2rXhUP/AwAAQIEy/b9W1P9dG5//xlHDhje8PV2pXR8O/Q8AAAAFyvT/2lH/n7dw2x+WGl8dfl26UusdDv0PAAAABcr0/zpR/58/9tol/1p23FMbpSu1G8Kh/wEAAKBAmf5fN+r/C+Yd8cAfVdPXG6QrtRvD8f/o/4X+J14yAAAA8N+U6f/1ov7/z8537rnE5x+v/2C6UrspHJ7/AwAAQIEy/b9+1P/dDh1y2rHPnd/9mXSl1icc+h8AAAAKlOn/llH/XzjzhGuHdxh956rpSq1vOPQ/AAAAFCjT/xtE/X/RxW+3/P2Slh/0SVdqN4dD/wMAAECBMv2/YdT/F7+6wmsL3TN9y03Sldot4dD/AAAAUKBM/28U9X/3dzf87oBxbU5YJ12p9QuH/gcAAIACZfp/46j/LzltxuL3rNbz8p7pSq1/OPQ/AAAAFCjT/5tE/X/pOe1PueqP7rN2TFdqt4ZD/wMAAECBMv3fKur/y8bf1rNLi7GNB6UrtQHh0P8AAAD/F3t3Fnb1+P/939f6rBKSofA1ZErIkDlDyEwhCiUhGSNDEikkGRKSjMmUUOaQMfOUIZmSIck8C0lE8d853fd5HOfvf5/HfW+dG4/H1vviWq+j3eexrvVZUKBM/28a9f+5H9186+q7LLPrsHSldl049D8AAAAUKNP/m0X9P+Too3d759o3b103XamNDof+BwAAgAJl+n/zqP/Pmzvtq6Hn7/3jrelK7fpw6H8AAAAoUKb/t4j6//x9lq0GHnTJkg3Sldq/zwTQ/wAAAFCgTP9vGfX/Bd3WXbv11mt2XSZdqd0YDv0PAAAABcr0f5uo/y/8ZPbkj778/LEH05XaTeHQ/wAAAFCgTP9vFfX/0FvbHvF+0yufOCxdqd0cDv0PAAAABcr0/9ZR/1/U/M/B6798wCEL05XamHDofwAAAChQpv+3ifp/2OLP3Dxo/F+NvktXareEQ/8DAABAgTL9v23U/xdPaLDTJadu880e6UptbDj0PwAAABQo0/9to/6/ZM2Jn73Xa9yYF9KV2q3h0P8AAABQoEz/bxf1/6XXnrJIi4eObnd0ulK7LRz6HwAAAAqU6f/to/4ffskea5z87stN+6QrtdvDof8BAACgQJn+3yHq/8u2HP78kEaNfnsnXamNC4f+BwAAgAJl+r9d1P8jTlts+9Nmz7mwV7pSGx8O/Q8AAAAFyvT/jlH/Xz5l6kfnb7rZ0a+lK7U7wqH/AQAAoECZ/t8p6v+R789d+FanGzb9KF2p3RkO/Q8AAAAFyvT/zlH/X9Fz09XWHN79nbPTldpd4dD/AAAAUKBM/+8S9f+VP5/z9BlXPHvdnHSldnc49D8AAAAUKNP/u0b9f1X73Q4Z1nGRgfumK7V7wqH/AQAAoECZ/t8t6v+rDz3zzI9b39t693Sldm849D8AAAAUKNP/u0f9f80Xj9+44a8nTf0yXandFw79DwAAAAXK9P8eUf9fe/Ox26z35cQnnktXahPCof8BAACgQJn+3zPq/1Er3fv+h1v3O6RHulK7Pxz6HwAAAAqU6f/2Uf9ft9SV84cfNKPR6elK7YFw6H8AAAAoUKb/O0T9P3pip5XPOn+lb95NV2oPhkP/AwAAQIEy/b9X1P/Xt/xkUstrLxxzULpSmxgO/Q8AAAAFyvT/3lH/33B9y4Pe3WW3dn+lK7WHwqH/AQAAoECZ/t8n6v8bh67Sf3CLb5r+kK7UHg6H/gcAAIACZfq/Y9T/N2364XWn/LHeb/ukK7VHwqH/AQAAoECZ/t836v+bn+m/2qWrvX3h3HSl9mg49D8AAAAUKNP/+0X9P2bAUwvPfn65ow9MV2qPhUP/AwAAQIEy/d8p6v9bTjzvo1Zjn9x0x3Sl9ng49D8AAAAUKNP/naP+Hzttp+0/GHTmO5+nK7VJ4dD/AAAAUKBM/+8f9f+tu/1847k9P73upHSl9kQ49D8AAAAUKNP/B0T9f9uCLc/s89TqA19PV2pPhkP/AwAAQIEy/X9g1P+3f7PkIWt/PLz1h+lK7alw6H8AAAAoUKb/u0T9P67Tq09PX7Tj1P7pSu3pcOh/AAAAKFCm/7tG/T9++RVXfnvrSzr9mq7UngmH/gcAAIACZfr/oKj/77j74/lrfLn3g/ulK7Vnw6H/AQAAoECZ/u8W9f+dj37xfr/zP/96t3Sl9lw49D8AAAAUKNP/B0f9f9eia25zwUFrNvgiXak9Hw79DwAAAAXK9H/3qP/vHjHiupm7PN3x2HSl9kI49D8AAAAUKNP/h0T9f0+rA/tvdO3Z976artReDIf+BwAAgAJl+v/QqP/v3b73QQP+ePPPmelK7aVw6H8AAAAoUKb/D4v6/77z7px0UYtlVh6UrtQmh0P/AwAAQIEy/d8j6v8Jo45ba+jz3/V6MV2pvRwO/Q8AAAAFyvT/4VH/37/W3c8OXG39ocekK7VXwqH/AQAAoECZ/u8Z9f8Dba7+pPWg8z86OV2p/ftMQP0PAAAABcr0/xFR/z946b6LfjR2l+3eTldqr4VD/wMAAECBMv1/ZNT/E///V2pTwqH/AQAAoECZ/j8q6v+HbmvR7tSeK161IF2pvR4O/Q8AAAAFyvT/0VH/P3x/88NXX/ThZ79PV2pTw6H/AQAAoECZ/j8m6v9Hlnh/yDsfn776nulK7Y1w6H8AAAAoUKb/j436/9GOi6/z3st3dzoxXam9GQ79DwAAAAXK9H+vqP8f+23Kiy2anvDglHSl9lY49D8AAAAUKNP/x0X9//in8744+dTnv56RrtT+/U5A/Q8AAAAFyvT/8VH/Tzp44wZDxi/a4Ix0pfZOOPQ/AAAAFCjT/72j/n/ilXNvf/+hmzr+lq7UpoVD/wMAAECBMv1/QtT/T/bdZZf1ex16b5d0pfZuOPQ/AAAAFCjT/ydG/f/UMWcfNajRz3+2S1dq08Oh/wEAAKBAmf4/Ker/p2c+euEl726y8mfpSu29cOh/AAAAKFCm/0+O+v+Z07/tts2mr/bqmq7U3g+H/gcAAIACZfq/T9T/z77e+tFXZi8x9M90pfZBOPQ/AAAAFCjT/6dE/f/cB81G3TD8to9+TFdqH4ZD/wMAAECBMv3fN+r/5494Z+CJnY7crmO6UpsRDv0PAAAABcr0/6lR/7/wy+Eztug4/9Tn05XaR+HQ/wAAAFCgTP/3i/r/xQ7jtn7piq2uOjxdqc0Mh/4HAACAAmX6/7So/1867IYVR/569bOnpSu1j8Oh/wEAAKBAmf4/Per/yV8e/OfhrbusPi1dqc0Kh/4HAACAAmX6v3/U/y+PuejQoz5efe2t0pXaJ+HQ/wAAAFCgTP+fEfX/Kyt3fOLqRT994bp0pfZpOPQ/AAAAFCjT/wOi/n+1Sb8bnuvZccSl6Urts3DofwAAAChQpv8HRv3/2kMPDtrkqeF9Wqcrtc/Dof8BAACgQJn+PzPq/ynr/GfWcWOX22psulL7Ihz6HwAAAAqU6f+zov5//YbJ240a9PYH/0lXal+GQ/8DAABAgTL9f3bU/1MvWrjK66udeeny6Urtq3DofwAAAChQpv8HRf3/xmbb/r3980/2npiu1L4Oh/4HAACAAmX6/5yo/998ZZOX12qxW/Ol0pXaN+HQ/wAAAFCgTP8Pjvr/rb6/t3rzjwv/uTtdqX0bDv0PAAAABcr0/7nnLLJIFX54+5jXlzjv2vXumpSu1L4Lh/4HAACAAmX6f0j0/v87M5f49vRdvmn/33Sl9n049D8AAAAUKNP/50X9P63jY3tucFC/2lXpSu2HcOh/AAAAKFCm/8+P+v/d3wbdNev8iZ+1SVdqP4ZD/wMAAECBMv1/QdT/0z/dddjFX6708OrpSm12OPQ/AAAAFCjT/xdG/f/ewUOO7b/1jC7npiu1n8Kh/wEAAKBAmf4fGvX/+6vtN+XM1ousfVu6Uvs5HPofAAAACpTp/4ui/v/gtms2uuzXZ19omK7UfgmH/gcAAIACZfp/WNT/H95/T5MZV5w0Yul0pTYnHPofAAAACpTp/4uj/p+xxPE/rtvx3j4PpCu1X8Oh/wEAAKBAmf6/JOr/j0Z9sHffTptttX26UpsbDv0PAAAABcr0/6VR/89ca7X7zhk+54Pr05Xab+HQ/wAAAFCgTP8Pj/r/4zZrD582u/ulF6crtXnh0P8AAABQoEz/Xxb1/6xLP++9zqY39F4vXan9Hg79DwAAAAXK9P+IqP8/GbTjt++/e3TzK9KV2h/h0P8AAABQoEz/Xx71/6cvXrjE+o3G/bNJulKbHw79DwAAAAXK9P/IqP8/e+vJVoN6NbqrZbpS+zMc+h8AAAAKlOn/K6L+//z4gS9f8tDL7c9LV2p/hUP/AwAAQIEy/X9l1P9fzH/l2PfGH1BbLF2pLQiH/gcAAIACZfr/qqj/v9y5ybAWp1752Z3pSm1hOPQ/AAAAFCjT/1dH/f9Vly3uOrnpNg8/ma7U/g6H/gcAAIACZfr/mqj/v/7x1z2HvPxXl9XSldo/4dD/AAAAUKBM/18b9f83d6zx44V3N/uqfbpS/XvofwAAAChQpv9HRf3/7XJfNzn15GkNv0lXqvA7+h8AAABKlOn/66L+/67hzI1WX3pA53/SlWrRcOh/AAAAKFCm/0dH/f/9kytPeWfKpAcOSVeqWjj0PwAAABQo0//XR/3/Q+s7eg99q+Vfb6Ur1b8PAND/AAAAUKBM/98Q9f+PV500fGDjr1fqm65U9XDofwAAAChQpv9vjPp/9uAD7mt9wp77HJmuVA3Cof8BAACgQJn+vynq/5+2vWLvj+4fet9L6UrVMBz6HwAAAAqU6f+bo/7/uWXnd2ce2HfmmelK9e/r9T8AAAAUKNP/Y6L+/+X6q9psNOyBth+nK1WjcOh/AAAAKFCm/2+J+n/O0PuWH/DdKse+kq5Ui4dD/wMAAECBMv0/Nur/XzftNfeiLWdedHy6Ui0RDv0PAAAABcr0/61R/8+9ecb+b6/f7pmv05VqyXDofwAAAChQpv9vi/r/t5VWfXiN3wevsWu6UjUOh/4HAACAAmX6//ao/+cttc41/a5p3a9TulItFQ79DwAAAAXK9P+4qP9/n/hpvws6zL7y53SlahIO/Q8AAAAFyvT/+Kj///h5s7fOPWSLr95LV6qlw6H/AQAAoECZ/r8j6v/57X/brM/guQ37pSvVMuHQ/wAAAFCgTP/fGfX/n4e+sezan3br3DNdqf7tfv0PAAAABcr0/11R///1RaOfp283+oFn0pVquXDofwAAAChQpv/vjvp/wWmT9r109QZ/7ZWuVE3Dof8BAACgQJn+vyfq/4VTznrg7AWTV5qdrlTNwqH/AQAAoECZ/r836v+/39/9ilbX99pnfrpSLR8O/Q8AAAAFyvT/fVH//9NzcJ8P2o2/7+B0pVohHPofAAAACpTp/wn/u/+rRY7cbINdx3We+Wm6Uq0YDv0PAAAABcr0//1R///n49+mPjxwZNud05Xqv+HQ/wAAAFCgTP8/EPX/oq++8dNnK7c9dv90pVopHPofAAAACpTp/wej/q+d3KjxMpMXXjQvXalWDof+BwAAgAJl+n9i1P/VZ5Puaf9hj2cGpCvVKuHQ/wAAAFCgTP8/FPV/vetZHR9rMGaN99OVatVw6H8AAAAoUKb/H476v8Feu5/449FN+r2RrlTNw6H/AQAAoECZ/n8k6v+G8wZf0vzxqVeekK5Uq4VD/wMAAECBMv3/aNT/iz3Qed2VOjx2+eB0pfr3NfofAAAACpTp/8ei/m+02FWvfntN/5PXSleqNcKh/wEAAKBAmf5/POr/xVe57/snf5/eYvN0pVozHPofAAAACpTp/0lR/y9xe69G+6y/wotXpyvVv38ToP8BAACgQJn+fyLq/yU3n3FHsy2HXbJSulK1CIf+BwAAgAJl+v/JqP8bD1+1w1ffdTjh0XSlWjsc+h8AAAAKlOn/p6L+X+q6dY57YNiXW9+XrlQtw6H/AQAAoECZ/n866v8mq386dMcDW7zfOF2p1gmH/gcAAIACZfr/maj/l+5xTL+J98+685F0pVo3HPofAAAACpTp/2ej/l/mwzHX7H5C8w7N0pVqvXDofwAAAChQpv+fi/p/2amjH16u8YTVFk1Xqlbh0P8AAABQoEz/Px/1/3KnHrL/J2/1+fvm//W/G/6v31s/HPofAAAACpTp/xei/m/61U9zJ0354ZEN0pXq3/+m/wEAAKBAmf5/Mer/Zt3XW36PpTc8cHi6Um0YDv0PAAAABcr0/0tR/y+/x3JtVjl5yKKj0pVqo3DofwAAAChQpv8nR/2/wpx33/3p7p0+3zZdqVqHQ/8DAABAgTL9/3LU/ys+3LDP94+PunyVdKXaOBz6HwAAAAqU6f9Xov7/75LPXrHi0V1PfipdqTYJh/4HAACAAmX6/9Wo/1da8a8H9mowr8Ud6Uq1aTj0PwAAABQo0/+vRf2/8i3b7fv0h21eXCJdqTYLh/4HAACAAmX6f0rU/6tsfNnPX0y+85IL05Vq83DofwAAAChQpv9fj/p/1WF7LrvCysefsHa6Um0RDv0PAAAABcr0/9So/5vf2HeznQe+uPWm6Uq1ZTj0PwAAABQo0/9vRP2/WouH3powrnp/RLpStQmH/gcAAIACZfr/zaj/V5++wv4d2/1zZ6t0pdoqHPofAAAACpTp/7ei/l+j91sPP3H99h2GpivV1uHQ/wAAAFCgTP+/HfX/mv2/v+abBSNWuyldqbYJh/4HAACAAmX6/52o/9d6bsN+K6++39/bpSvVtuHQ/wAAAFCgTP9Pi/q/xb43vdtuuymP3J+uVG3Dof8BAACgQJn+fzfq/7W/O6jNg582PnC5dKX6928C9D8AAAAUKNP/06P+b/n3Ect/PXjsolW6Um0fDv0PAAAABcr0/3tR/6+zy21zmx7S8/Pb05Vqh3DofwAAAChQpv/fj/p/3UVO33fpo8cM2jBdqdqFQ/8DAABAgTL9/0HU/+s9fv8Dnz/e48bL0pVqx3DofwAAAChQpv8/jPq/1b0XX/HIh1NfvTZdqXYKh/4HAACAAmX6f0bU/+s33bvPLg2arL9NulLtHA79DwAAAAXK9P9HUf9vcME/b6228sieD6cr1S7h0P8AAABQoEz/z4z6f8O2W2/2w+TOQ5qmK9Wu4dD/AAAAUKBM/38c9f9G69aWfXTcwvdq6Uq1Wzj0PwAAABQo0/+zov5vPfLFnzsMbLvlmHSl2j0c+h8AAAAKlOn/T6L+3/iy+rHtr5+8y8rpSrVHOPQ/AAAAFCjT/59G/b/JFs8Pe6xdg9seS1eqPcOh/wEAAKBAmf7/LOr/TdeYf9ePq4//5d50pWofDv0PAAAABcr0/+dR/282eoc9my/otfSS6UrVIRz6HwAAAAqU6f8vov7fvNGl3+766dyDzklXqr3Cof8BAACgQJn+/zLq/y0e7LDEw9tt8eia6Uq1dzj0PwAAABQo0/9fRf2/5bg+rT47ZPQPW6Qr1T7h0P8AAABQoEz/fx31f5tVH3l5mcHdGl+TrlQdw6H/AQAAoECZ/v8m6v+tDjqqd7NrBg+akK5U+4ZD/wMAAECBMv3/bdT/W38+dvhXHdrd+D80frVfOPQ/AAAAFCjT/99F/b/N76MaLLLIIq/W05WqUzj0PwAAABQo0//fR/2/7d6H7b3j763XH5euVJ3Dof8BAACgQJn+/yHq/7azfvxxpe8e6Ll+ulLtHw79DwAAAAXK9P+PUf9vd9T6Tb7dsu+Qi9KV6oBw6H8AAAAoUKb/Z0f9v32fZTZ68sCZ792YrlQHhkP/AwAAQIEy/f9T1P87vPbelH2GrbJl23Sl6hIO/Q8AAAAFyvT/z1H/tzv8gmX+OOHrXS5IV6qu4dD/AAAAUKBM//8S9f+OM9r9usT9LW9rka5UB4VD/wMAAECBMv0/J+r/nd4Y8PZhbw39ZbN0peoWDv0PAAAABcr0/69R/+/c74mN726859KXpyvVweHQ/wAAAFCgTP/Pjfp/l6+XGvH70tMOWjVdqbqHQ/8DAABAgTL9/1vU/7se8vIp1ZRmjz6drlSHhEP/AwAAQIEy/T8v6v/d9pzTed+7J/0wPl2pDg2H/gcAAIACZfr/96j/d/918/vHnjyg8eLpSnVYOPQ/AAAAFCjT/39E/b/HI181Gze48WJfpStVj3DofwAAAChQpv/nR/2/Z+PVf9//kCnf7pKuVIeHQ/8DAABAgTL9/2fU/+3/u9L0Rbbr+WTndKXqGQ79DwAAAAXK9P9fUf93GPvR5r9+Orb7L+lKdUQ49D8AAAAUKNP/C6L+32uTE68cv2D7ZmelK9WR4dD/AAAAUKBM/y+M+n/vi8efdvDq/8ydla5UR4VD/wMAAECBMv3/d9T/+9w0skuTdvvd/HK6Uh0dDv0PAAAABcr0/z9R/3dce/+HFlw/Ysfj0pXqmHDofwAAACjQ/7n/64tE/b/vxktuscjA4zd7M12pjg2H/gcAAIACZfr/P1H/7zfs1fd+HXfn26ekK1WvcOh/AAAAKFCm/xeN+r/TjT/PGze5uuCodKX69zMB+h8AAAAKlOn/WtT/nVts2XT/lV88ZnK6Uh0fDv0PAAAABcr0fxX1//4PnzexSYOuG3VIV6re4dD/AAAAUKBM/9ej/j9gyZ0OXPDhqDe+TVeqE8Kh/wEAAKBAmf5vEPX/gSv2P338421G/52uVCeGQ/8DAABAgTL93zDq/y63PHXVwUfPG9A9XalOCof+BwAAgAJl+n+xqP+7ftV7k8NO3nCxgelKdXI49D8AAAAUKNP/jaL+P6j7ne/cffcP336QrlR9wqH/AQAAoECZ/l886v9ue4yY88eUnZ6cmq5Up4RD/wMAAECBMv2/RNT/B885cOkllh7SvXe6UvUNh/4HAACAAmX6f8mo/7v3+GLCvo2bN/skXalODYf+BwAAgAJl+r9x1P+HfLhmp7FvzZq7U7pS9QuH/gcAAIACZfp/qaj/D526Yt/f7+9z8wHpSnVaOPQ/AAAAFCjT/02i/j/s1I8vr06YsOPv6Up1ejj0PwAAABQo0/9LR/3f44Izm/41rMNme6crVf9w6H8AAAAoUKb/l4n6//C2j89b7MBhb/+UrlRnhEP/AwAAQIEy/b9s1P891z3nve5btrjgj3SlGhAO/Q8AAAAFyvT/clH/HzFyty3u++7LY7qlK9XAcOh/AAAAKFCm/5tG/X/kInOvmvt7/42mpyvVmeHQ/wAAAFCgTP83i/r/qMc3Pb3h+o+9cWq6Up0VDv0PAAAABcr0//JR/x9972IHdu6wwugj0pXq7HDofwAAAChQpv9XiPr/mKZTJ958zfQBz6Yr1aBw6H8AAAAoUKb/V4z6/9h9V1n61rYjbumXrlTnhEP/AwAAQIEy/f/fqP97fffhnC6f7Lfze+lKNTgc+h8AAAAKlOn/laL+P+7vT96pnfPPCs+kK9W54dD/AAAAUKBM/68c9f/xu7Tc5Ofu28/rma5UQ8Kh/wEAAKBAmf5fJer/3tOvvPyuHcc+PTtdqc4Lh/4HAACAAmX6f9Wo/0/o3alv1xt6HrpXulKdHw79DwAAAAXK9H/zqP9P7H9spyUXTln84HSluiAc+h8AAAAKlOn/1aL+P+m5eyf8s0bj7+enK9WF4dD/AAAAUKBM/68e9f/Js05c9++X5o3aOV2phoZD/wMAAECBMv2/RtT/fY4a/2rjldr0/zRdqS4Kh/4HAACAAmX6f82o/0/pM/L7gwaM2mBeulINC4f+BwAAgAJl+n+tqP/7vrZ/oztv7/r6/ulKdXE49D8AAAAUKNP/LaL+P/Wgr+74ZdKL572frlSXhEP/AwAAQIEy/b921P/9Pl+9w6LHVEcNSFeqS8Oh/wEAAKBAmf5vGfX/ab+vdNyBDe/c5IR0pRoeDv0PAAAABcr0/zpR/5++90dDb5tx/JtvpCvVZeHQ/wAAAFCgTP+vG/V//0ZLbTDm9Qm3fJOuVCPCof8BAACgQJn+Xy/q/zMefHlqp2X67Nw+XakuD4f+BwAAgAJl+r9V1P8Dxs35qUGfWSsckq5UI8Oh/wEAAKBAmf5fP+r/gatu3vi3e5rP+yddqa4Ih/4HAACAAmX6f4Oo/8+87IJ77p0w5Om+6Up1ZTj0PwAAABQo0/8bRv1/1hbtOh7Se6dD30pXqqvCof8BAACgQJn+3yjq/7PXGHBioyV/WPyldKW6Ohz6HwAAAAqU6f/WUf8PGv3EJX++ueH3R6Yr1TXh0P8AAABQoEz/bxz1/znnLPHpx22mj/o4XamuDYf+BwAAgAJl+n+TqP8Hb/N6bcPvV+h/ZrpSjQqH/gcAAIACZfp/06j/z93o9zXPuPixDY5PV6rrwqH/AQAAoECZ/t8s6v8hV27yzLAu/V9/JV2pRodD/wMAAECBMv2/edT/5zUY0uOt9l+et2u6Ul0fDv0PAAAABcr0/xZR/5//xK7nrnl1i6O+TleqG8Kh/wEAAKBAmf7fMur/C8YPGnvavGGb/JyuVDeGQ/8DAABAgTL93ybq/wuXfWzH81t1eLNTulLdFA79DwAAAAXK9P9WUf8PPfD4LwfPaPvuU+lKdXM49D8AAAAUKNP/W0f9f9EP9zQ8peHCzVdJV6ox4dD/AAAAUKBM/28T9f+wP65p2fKYzj2WSFeqW8Kh/wEAAKBAmf7fNur/i3fa74V3J40cfEe6Uo0Nh/4HAACAAmX6v23U/5e8+fmRw29v8vLa6Up1azj0PwAAABQo0//bRf1/6XFrX3DWgKnrXZiuVLeFQ/8DAABAgTL9v33U/8PPXm3ceiv1OGtEulLdHg79DwAAAAXK9P8OUf9f9sIHu3740pjrN01XqnHh0P8AAABQoEz/t4v6f8R5hz3aeo1us4emK9X4cOh/AAAAKFCm/3eM+v/y7Ud1+2jh6Cat0pXq3+8E0P8AAABQoEz/7xT1/8hWYwcOvWGLg7dLV6o7w6H/AQAAoECZ/t856v8rRhw1auCOcx+/KV2p7gqH/gcAAIACZfp/l6j/r1z0va1X797r1+XSlerucOh/AAAAKFCm/3eN+v+qR5eZ8c4545e9P12p7gmH/gcAAIACZfp/t6j/r757/T8v/KTBbrenK9W94dD/AAAAUKBM/+8e9f81y/+44qltJ4+r0pXqvnDofwAAAChQpv/3iPr/2k47PHFyq1XeXStdqSaEQ/8DAABAgTL9v2fU/6O+mX/okHkzNx+crlT/PhNA/wMAAECBMv3fPur/6xY8P+i9q/v2uDpdqR4Ih/4HAACAAmX6v0PU/6N3q9/Qov0DgzdPV6oHw6H/AQAAoECZ/t8r6v/rpz2y3aAurV9+NF2pJoZD/wMAAECBMv2/d9T/N5zYZ9YlF89eb6V0pXooHPofAAAACpTp/32i/r9xQIe/3/++3VmN05Xq4XDofwAAAChQpv87Rv1/0zOXrrJ+m8HX35euVI+EQ/8DAABAgTL9v2/U/zdv2nrUtDcHzG6WrlT/PhNA/wMAAECBMv2/X9T/Y4Z+O3CdJSc1eSRdqR4Lh/4HAACAAmX6v1PU/7dc/063vr2bHXxzulI9Hg79DwAAAAXK9H/nqP/Htmz26DkTpj2+aLpSTQqH/gcAAIACZfp//6j/b504bsUZ9+z56/B0pXoiHPofAAAACpTp/wOi/r9tqcP/XLfP0GU3SFeqJ8Oh/wEAAKBAmf4/MOr/21c6eMaZy7Tcbdt0pXoqHPofAAAACpTp/y5R/4+7+YatL3v963Gj0pXq6XDofwAAAChQpv+7Rv0//ouON1w8r8W2/0PjV8+EQ/8DAABAgTL9f1DU/3ccetGg/q2+/HBCulI9Gw79DwAAAAXK9H+3qP/vbP/goRu07zB8XLpSPRcO/Q8AAAAFyvT/wVH/3/VzvydmXT3spHq6Uj0fDv0PAAAABcr0f/eo/+/uOXmV8y5eoeVF6Ur1Qjj0PwAAABQo0/+HRP1/z/v/+fv0LtMnr5+uVC+GQ/8DAABAgTL9f2jU//dO2XbWWm36X9E2XaleCof+BwAAgAJl+v+wqP/vO23hdm9+/9gpN6Yr1eRw6H8AAAAoUKb/e0T9P+H47W57a8mdFmmRrlQvh0P/AwAAQIEy/X941P/3v/XX7mu+OeTTC9KV6pVw6H8AAAAoUKb/e0b9/8CLzx592oQNH7o8XaleDYf+BwAAgAJl+v+IqP8fHNTwvPN7/7D/ZulK9Vo49D8AAAAUKNP/R0b9P/HHh1p83KfPqk+nK9WUcOh/AAAAKFCm/4+K+v+hLn1f2vCeCQtWTVeq18Oh/wEAAKBAmf4/Our/h3fe8+szXm8+fvF0pZoaDv0PAAAABcr0/zFR/z8y/7L6sGVm7Tk+XaneCIf+BwAAgAJl+v/YqP8fffKQMcMbVttelq5Ub4ZD/wMAAECBMv3fK+r/xxqO3vmsGS9+uGG6Ur0VDv0PAAAABcr0/3FR/z++3Jie6006fvg26Ur1djj0PwAAABQo0//HR/0/6Y5jzvnwmDtPujZdqd4Jh/4HAACAAmX6v3fU/09s++7qgwe0adk0XammhUP/AwAAQIEy/X9C1P9PDl7uuVNunzf54XSlejcc+h8AAAAKlOn/E6P+f+qq9T5v+VLXK8akK9X0cOh/AAAAKFCm/0+K+v/p1j/9592VRp1SS1eq98Kh/wEAAKBAmf4/Oer/Z85/6qMjFvZc5LF0pXo/HPofAAAACpTp/z5R/z+7Q//tR6wx9tOV05Xqg3DofwAAAChQpv9Pifr/ufV3Wu2FHRs/tGS6Un0YDv0PAAAABcr0f9+o/5+//LyFbW6Ysv+96Uo1Ixz6HwAAAAqU6f9To/5/obblIb3P2W/VNdOV6qNw6H8AAAAoUKb/+0X9/+JjPz99U/cRC85JV6qZ4dD/AAAAUKBM/58W9f9L97x642tttx9/TbpSfRwO/Q8AAAAFyvT/6VH/T15hyTO3+uSfPbdIV6pZ4dD/AAAAUKBM//eP+v/lzh+/33aZoXt9kK5Un4RD/wMAAECBMv1/RtT/r3y74jZvvL7nPQPTlerTcOh/AAAAKFCm/wdE/f/qwjVXHn3P1/N7pyvVZ+HQ/wAAAFCgTP8PjPr/td2/mH9sn5YrTk1Xqs/Dof8BAACgQJn+PzPq/ynvHnjQZr0n7bdTulJ9EQ79DwAAAAXK9P9ZUf+/ftKISc9MGDDhk3Sl+jIc+h8AAAAKlOn/s6P+nzrwzuuufHPaF7+nK9VX4dD/AAAAUKBM/w+K+v+NZ3v3P2bJZvUD0pXq63DofwAAAChQpv/POWeRRRqGH97c9uh9Bnw/+/Sf0pXqm3DofwAAAChQpv8HR+//vzX45rsvatP66r3TlerbcOh/AAAAKFCm/8+N+v/tq667dGaXwc91S1eq78Kh/wEAAKBAmf4fEvX/O627n7TRxe3W+iNdqb4Ph/4HAACAAmX6/7yo/6c9OfuNflfPPO7UdKX6IRz6HwAAAAqU6f/zo/5/t+G6G17QfpWLp6cr1Y/h0P8AAABQoEz/XxD1//Tlll3y7VYPzHo2Xalmh0P/AwAAQIEy/X9h1P/v3TFt9hrz+m5/RLpS/fudgPofAAAACpTp/6FR/7//Y4P2a38yfq9d0pXq53DofwAAAChQpv8vivr/gy7PjJ/ettc9X6Ur1S/h0P8AAABQoEz/D4v6/8Od/7zo3O6T5/+SrlRzwqH/AQAAoECZ/r846v8Z89se3+ecBit2TleqX8Oh/wEAAKBAmf6/JOr/j44f/lqrG0bvNytdqeaGQ/8DAABAgTL9f2nU/zPf2mO9D3bsNuGsdKX6LRz6HwAAAAqU6f/hUf9//OIpi126xtwvjktXqnnh0P8AAABQoEz/Xxb1/6xBE787e+EW9ZfTler3cOh/AAAAKFCm/0dE/f/JpcufNHilqaefkq5Uf4RD/wMAAECBMv1/edT/n7Z589JTXmpy9ZvpSjU/HPofAAAACpTp/5FR/3+21nd3t7x9zHOT05Xqz3DofwAAAChQpv+viPr/81Eb7PPugB5rHZWuVH+FQ/8DAABAgTL9f2XU/18scePs4ccsPO7bdKVaEA79DwAAAAXK9P9VUf9/eX/XJc+a1PbiDulKtTAc+h8AAAAKlOn/q6P+/+q2nhuuN2PkrO7pSvV3OPQ/AAAAFCjT/9dE/f/1are+8WHDztv/na5U/4RD/wMAAECBMv1/bdT/3xx82vEf//TYZ3+mK/V/D/0PAAAABcr0/6io/7/9dMJFG27Wv9Y1XamH39H/AAAAUKJM/18X9f93vw0bf0bn6V06piv1RcOh/wEAAKBAmf4fHfX/9x33aj/sshUe/jFdqdfCof8BAACgQJn+vz7q/x9m/v3dWyOH/XN4ulKvwqH/AQAAoECZ/r8h6v8fj9lqsTX36dD8+XSl/u8DAPU/AAAAFCjT/zdG/T+776LrnbbRl+2npSv1BuHQ/wAAAFCgTP/fFPX/T6+88Nr5c1rcdVq6Um8YDv0PAAAABcr0/81R//88rep8XrNZH0xJV+r/vl7/AwAAQIEy/T8m6v9fTnzu/tNfab7VielKvVE49D8AAAAUKNP/t0T9P2fAHyPWumNC7zPSlfri4dD/AAAAUKBM/4+N+v/XZ7Y/5c1+fS6dka7UlwiH/gcAAIACZfr/1qj/53a65O2Lj/3hhS7pSn3JcOh/AAAAKFCm/2+L+v+3b9pv3H/ihmv/lq7UG4dD/wMAAECBMv1/e9T/8xacvMwG04b0+SxdqS8VDv0PAAAABcr0/7io/3/f7eFfZy2204h26Uq9STj0PwAAABQo0//jo/7/Y9Eju8xoPuqzY9KV+tLh0P8AAABQoEz/3xH1//xHb3lo3ee61l5MV+rLhEP/AwAAQIEy/X9n1P9/3n3tlWfeMq/L2+lK/d/u1/8AAABQoEz/3xX1/1/LH3raZWe3efjkdKW+XDj0PwAAABQo0/93R/2/4Lwfpk874s5/FqQr9abh0P8AAABQoEz/3xP1/8LtW22+ztPHNz80Xak3C4f+BwAAgAJl+v/eqP//brV0s76zXmy/Z7pSXz4c+h8AAAAKlOn/+6L+/2fE9N/PqVV3fZ+u1FcIh/4HAACAAmX6f8L/7v/6Iu222/M/X/zzwX7pSn3FcOh/AAAAKFCm/++P+v8/f/5115yttt/q13Sl/t9w6H8AAAAoUKb/H4j6f9HZzw67veuI3l+kK/WVwqH/AQAAoECZ/n8w6v/a/g2PPeC8/S7dLV2prxwO/Q8AAAAFyvT/xKj/q5ceenmpUVNeeDVdqa8SDv0PAAAABcr0/0NR/9fP7Ntq4a6N1z42XamvGg79DwAAAAXK9P/DUf83OHbPJe5Ye2yfQelKvXk49D8AAAAUKNP/j0T93/Dty77tNr/niJnpSn21cOh/AAAAKFCm/x+N+n+xqw/Z+9DFml21SbpS//c1+h8AAAAKlOn/x6L+b7TB6PvumTbt1CvSlfoa4dD/AAAAUKBM/z8e9f/iW40ZPn/igNXPS1fqa4ZD/wMAAECBMv0/Ker/Jc49pvfix056tmW6Ul8rHPofAAAACpTp/yei/l9y6Xen7Nev5dA705V6i3DofwAAAChQpv+fjPq/8Z3LbXTLHV/3Wixdqa8dDv0PAAAABcr0/1NR/y/11HpN5r2y53arpSv1fz8ToP8BAACgQJn+fzrq/ybVTz/Wmw396Ml0pb5OOPQ/AAAAFCjT/89E/b/0Lr2W/nlO33sbpiv1dcOh/wEAAKBAmf5/Nur/Zf6+b05towc63pau1NcLh/4HAACAAmX6/7mo/5f97qp3uuyzysoPpCv1VuHQ/wAAAFCgTP8/H/X/cvt23uTWkTP/XDpdqa8fDv0PAAAABcr0/wtR/zd97tPL/7ms3YPXpyv1DcKh/wEAAKBAmf5/Mer/Zv3X6btk58Gdtk9X6huGQ/8DAABAgTL9/1LU/8v3XrVT181aN1gvXalvFA79DwAAAAXK9P/kqP9XmD5jwl0/zf764nSl3joc+h8AAAAKlOn/l6P+X3Fko6b3zd/iqrvTlfrG4dD/AAAAUKBM/78S9f9/131jXve15566VLpS3yQc+h8AAAAKlOn/V6P+X6ntb+8ttmu31f+brtQ3DYf+BwAAgAJl+v+1qP9XvmCzLf4aNfrZSelKfbNw6H8AAAAoUKb/p0T9v0rTwVfdfF6DoW3Slfrm4dD/AAAAUKBM/78e9f+q9+5+eueuk3tdla7UtwiH/gcAAIACZfp/atT/zR8/68CGW/Xa7tx0pb5lOPQ/AAAAFCjT/29E/b/aIpMmzv1i/Eerpyv1fz8ToP8BAACgQJn+fzPq/9Xn/HeTJWqd770uXalvFQ79DwAAAAXK9P9bUf+vscesd/6YNbLjVulKfetw6H8AAAAoUKb/3476f83uX865++m2K7dOV+rbhEP/AwAAQIEy/f9O1P9rfbXW0ocdsfDPS9OV+rbh0P8AAABQoEz/T4v6v8Wpl0+ozu7x4H/SlXrbcOh/AAAAKFCm/9+N+n/tqV06/X7LmE5j05X6duHQ/wAAAFCgTP9Pj/q/5Ycn9B37XJMGE9OV+vbh0P8AAABQoEz/vxf1/zo97rp83+ZTv14+XanvEA79DwAAAAXK9P/7Uf+v2+KMLfZfu/HAG9KVertw6H8AAAAoUKb/P4j6f70bn35v3Pwp1+2QrtR3DIf+BwAAgAJl+v/DqP9bDTt/3q+jek5dN12p7xQO/Q8AAAAFyvT/jKj/199456aL7Dq29bB0pb5zOPQ/AAAAFCjT/x9F/b/BLb9MPLjr9kc3SFfqu4RD/wMAAECBMv0/M+r/DVdsc+D48/658NZ0pb5rOPQ/AAAAFCjT/x9H/b/Rko1PX/DFfu88mK7UdwuH/gcAAIACZfp/VtT/rR9+7aomW43YdJl0pb57OPQ/AAAAFCjT/59E/b/xXUs0XmrW8e3uSlfqe4RD/wMAAECBMv3/adT/myzz+k8La3eOaZSu1PcMh/4HAACAAmX6/7Oo/zet/z71jiOq35qnK/X24dD/AAAAUKBM/38e9f9mT2+yQbenX2z6RLpS7xAO/Q8AAAAFyvT/F1H/b77hkEv+c0vXQzZOV+p7hUP/AwAAQIEy/f9l1P9bXLPriXPOHvXEyHSlvnc49D8AAAAUKNP/X0X9v+WQQR1vb97mm/PTlfo+4dD/AAAAUKBM/38d9X+brR+754Dn5jVaJ12pdwyH/gcAAIACZfr/m6j/tzrr+Eb7Tdtw4P+wUt83HPofAAAACpTp/2+j/t968j3f37LYD9fdkq7U9wuH/gcAAIACZfr/u6j/t3nnmlfnHbvT1IfSlXqncOh/AAAAKFCm/7+P+n/bXvutW584pPUK6Uq9czj0PwAAABQo0/8/RP3f9q/Phx56R/OjR6cr9f3Dof8BAACgQJn+/zHq/+12XPu4e/rNunDrdKV+QDj0PwAAABQo0/+zo/7f/oDVOsxv1uedjdKV+oHh0P8AAABQoEz//xT1/w4/fXDH4q9M2PSSdKXeJRz6HwAAAAqU6f+fo/5vt+vQU5/YqEO7LdOVetdw6H8AAAAoUKb/f4n6f8d/9rm645xhY65MV+oHhUP/AwAAQIEy/T8n6v+dvj/1kZVHtvhtSLpS7xYO/Q8AAAAFyvT/r1H/77zfAwd8s8+XTddIV+oHh0P/AwAAQIEy/T836v9dnl/ktwc79z/knnSl3j0c+h8AAAAKlOn/36L+3/WMl1Zod9ljTzRJV+qHhEP/AwAAQIEy/T8v6v/dTliwZdOfVvhmxXSlfmg49D8AAAAUKNP/v0f9v/t720z7erPpjR5PV+qHhUP/AwAAQIEy/f9H1P97XPHNyZ8/N2bJA9OVeo9w6H8AAAAoUKb/50f9v+d6G41cunmPH+emK/XDw6H/AQAAoECZ/v8z6v/22zV9cJezpz72ebpS7xkO/Q8AAAAFyvT/X1H/d7jw7f0euaVJ1x3TlfoR4fi/6f///D/+kwEAAID/S5n+XxD1/17Nevzyw9Mjl3k9XakfGQ7v/wMAAECBMv2/MOr/ve+7fbnVjuj880npSv2ocOh/AAAAKFCm//+O+n+fSddv2qG28Nb+6Ur96HDofwAAAChQpv//ifq/43+6vfnorLa7fpiu1I8Jh/4HAACAAv2f+7/BIlH/77vM9G0nbzW5TY90pX5sOPQ/AAAAFCjT//+J+n+/u5b+YPMvGkx/Ll2p9wqH/gcAAIACZfp/0aj/Oz3d6o8e540/9910pX5cOPQ/AAAAFCjT/7Wo/zvXf1jpiq69jjg9XakfHw79DwAAAAXK9H8V9f/+1xz6+Mu7zm31V7pS7x0O/Q8AAAAFyvR/Per/Aza8tuu2o7Z47aB0pX5COPQ/AAAAFCjT/w2i/j9w61vOOGn+6Jv2SVfqJ4ZD/wMAAECBMv3fMOr/LkOOHH392t3O/iFdqZ8UDv0PAAAABcr0/2JR/3ed/PAO1242eMnX0pX6yeHQ/wAAAFCgTP83ivr/oLNOnnn8T+1+7JWu1PuEQ/8DAABAgTL9v3jU/916tV+ww2WzHzs7XamfEg79DwAAAAXK9P8SUf8f/M4lzad0bt31o3Sl3jcc+h8AAAAKlOn/JaP+777j9k9ds88Dy+ybrtRPDYf+BwAAgAJl+r9x1P+H/PVH9yNH9v15TrpS7xcO/Q8AAAAFyvT/UlH/H/rTc2dtPGfmrV+mK/XTwqH/AQAAoECZ/m8S9f9hB1Q3Pb/RKrvunq7UTw+H/gcAAIACZfp/6aj/e4y7faW2r3zdZmG6Uu8fDv0PAAAABcr0/zJR/x++ao8/3mjWcvph6Ur9jHDofwAAAChQpv+Xjfq/Z6NuH4zuN/TcPdKV+oBw6H8AAAAoUKb/l4v6/4gHr9/22Dv2POK7dKU+MBz6HwAAAAqU6f+mUf8fucZGozebOK3V0elK/cxw6H8AAAAoUKb/m0X9f9Tob8545thmr72QrtTPCof+BwAAgAJl+n/5qP+PvuztrlcuNummd9KV+tnh0P8AAABQoEz/rxD1/zFbNH38mGkDzu6TrtQHhUP/AwAAQIEy/b9i1P/H9nmp+RGD2t7+YrpSPycc+h8AAAAKlOn//0b93+u1RRaMGLtw92PSlfrgcOh/AAAAKFCm/1eK+v+4WdvMfOH5zsudnK7Uzw2H/gcAAIACZfp/5aj/jz9qwQ5tVhs55+10pT4kHPofAAAACpTp/1Wi/u/9+z439V60yaRD05X6eeHQ/wAAAFCgTP+vGvX/CXsPPeumj6d2W5Cu1M8Ph/4HAACAAmX6v3nU/yce9ED3157qsdT36Ur9gnDofwAAAChQpv9Xi/r/pM9PfWqrnmN+2jNdqV8YDv0PAAAABcr0/+pR/5/898SWW5/f7YZf05X60HDofwAAAChQpv/XiPq/zy6nvPDqQaPP3C9dqV8UDv0PAAAABcr0/5pR/5+y7x5f3rj1Fuvulq7Uh4VD/wMAAECBMv2/VtT/fb8b3vCEL+e+8kW6Ur84HPofAAAACpTp/xZR/5/av+24Lf/odc6x6Ur9knDofwAAAChQpv/Xjvq/33N/7vpii/GHv5qu1C8Nh/4HAACAAmX6v2XU/6dNf+bIy3dpsMXMdKU+PBz6HwAAAAqU6f91ov4/vXeDC3peO3naoHSlflk49D8AAAAUKNP/60b933/daWsePXyV27umK/UR4dD/AAAAUKBM/68X9f8ZI5d95qpOM3f/M12pXx4O/Q8AAAAFyvR/q6j/B1yw7qfPbtp3uR/TlfrIcOh/AAAAKFCm/9eP+n9g29m1TWc/MKdjulK/Ihz6HwAAAAqU6f8Nov4/897uY3v92nrS8+lK/cpw6H8AAAAoUKb/N4z6/6ym1+14XevZ3Q5PV+pXhUP/AwAAQIEy/b9R1P9nL3Jzj6kd2y11WrpSvzoc+h8AAAAKlOn/1lH/D3r86HO3u2LwT9PSlfo14dD/AAAAUKBM/28c9f85Y9766b+nDrjhxHSlfm049D8AAAAUKNP/m0T9P3jlFRp/N37SmVPSlfqocOh/AAAAKFCm/zeN+v/cJhtu8NTLzdadka7UrwuH/v//2PvT6KvH/+//J/ZrS6aMyZTMYwglmRMimTMkUzLPMsuYjPExNFCGkkSGSIYkZCgyZCZUFMmUjMnwv3Ae/c/j9zu+63us81y/71rHhdvtiud6r/d+rH31/t56bQAAAChQpv9bRv1/xRPfvtlx+fcmnp+u1O4Ih/4HAACAAmX6f8uo/69c75BTV2y4x6W/piu1geHQ/wAAAFCgTP9vFfV/r0F3XT/z/auP6pyu1AaFQ/8DAABAgTL9v3XU/1ddM/ShkU+su9WO6UrtznDofwAAAChQpv9bRf3fu+UxnXY+4ev3vkhXaneFQ/8DAABAgTL93zrq/6vPHflt+/43TV4qXandHQ79DwAAAAXK9P82Uf9f88a5DZ9ot+9mI9KV2j3h0P8AAABQoEz/t4n6/9qPO64/fe1/u41JV2qDw6H/AQAAoECZ/t826v/rjrnutWX/2L7XyulKbUg49D8AAAAUKNP/baP+v/6nbU7cY+aQSbelK7V7w6H/AQAAoECZ/t8u6v8b9vz36me2OXqTVulKbWg49D8AAAAUKNP/20f93+eIl4f/cMik85ulK7X7wqH/AQAAoECZ/t8h6v8bZy6y52q9lux/ebpSGxYO/Q8AAAAFyvT/jlH/3zS01+hZR/82u3W6Urs/HPofAAAACpTp/52i/v/PGrscsMpzrRrdnq7UhodD/wMAAECBMv2/c9T/Nzc6v0enzwcccUO6UnsgHPofAAAACpTp/12i/r9l5Lh+zzY4+LkW6UrtwXDofwAAAChQpv/bRf1/61pLtvp6jZd/H5Ku1EaEQ/8DAABAgTL9v2vU/7cNeP395ccvuuLC6UrtoXDofwAAAChQpv/bR/3f94afftlxyAM7r5iu1B4Oh/4HAACAAmX6f7eo//u1arXi45ecNGRUulJ7JBz6HwAAAAqU6f/do/7vf9bMx5484dHJt6QrtUfDof8BAACgQJn+3yPq/wET19qn3RNnbLZ5ulIbGQ79DwAAAAXK9H+HqP9v/2zlM5Z5f2q3ddOV2mPh0P8AAABQoEz/7xn1/x3HTb3ly4ar97oyXak9Hg79DwAAAAXK9P9eUf8P/PWUlk8tf8WkxdKV2oJnAup/AAAAKFCm/ztG/T+o04OT95yw8yYPpCu1J8Kh/wEAAKBAmf7fO+r/Ow/7z5w17v/u/LHpSm10OPQ/AAAAFCjT/52i/r9reudlvzt7k/5rpCu1J8Oh/wEAAKBAmf7fJ+r/u5f7td9yt3wwe2i6UnsqHPofAAAACpTp/32j/r9neMse0zqt1KiertSeDof+BwAAgAJl+n+/qP8Hj214wKgWTx+xTLpSeyYc+h8AAAAKlOn//aP+H1J/a/RuP5/33GPpSm1MOPQ/AAAAFCjT/wdE/X/vbRevuOoPM3/fPl2pPRsO/Q8AAAAFyvT/gVH/D20x5pcft1h7xYHpSm3BdwLqfwAAAChQpv8Pivr/vm0ve3/MftfufF26UnsuHPofAAAACpTp/85R/w+7bLdWu/fZc8gG6UptXDj0PwAAABQo0/8HR/1//8u33bLXE1fvMDhdqT0fDv0PAAAABcr0/yFR/w+/ZP8zxp2wx+f/xUrthXDofwAAAChQpv8Pjfr/gZNO2Ofbhl9fu1K6UnsxHPofAAAACpTp/8Oi/n9w8iOPNXl/3ZOeSFdq48Oh/wEAAKBAmf7vEvX/iF1WW3aXCWOab5Ou1F4Kh/4HAACAAmX6//Co/x+aN2XOo8tfMP6OdKX2cjj0PwAAABQo0/9do/5/+Pvpk2ec/V6/69OV2ivh0P8AAABQoEz/HxH1/yOd12u50v0rnLNpulJ7NRz6HwAAAAqU6f8jo/5/tMPXD67Y6YdFb01XahPCof8BAACgQJn+Pyrq/5Fz1txj5i0tZm6drtQmhkP/AwAAQIEy/X901P+PzVjl+JE/XzZyzXSl9lo49D8AAAAUKNP/x0T9/3jXz67ducWO+1yRrtReD4f+BwAAgAJl+r9b1P+jJp224cpbfLby0ulKbVI49D8AAAAUKNP/x0b9/8Q5wyfM/mHVPx5KV2pvhEP/AwAAQIEy/d896v/RR9/yzXN9HhvxTLpSezMc+h8AAAAKlOn/46L+f/KjAxt13O+sjk3Sldpb4dD/AAAAUKBM/x8f9f9TA3s/ske7+3fYIV2pvR0O/Q8AAAAFyvT/CVH/P73uTh2f6X/C54PSldrkcOh/AAAAKFCm/0+M+v+ZLS48+Yc/Xr322nSl9k449D8AAAAUKNP/J0X9P+bqsX1WW7s6af10pfZuOPQ/AAAAFCjT/ydH/f9s06U3bb/NHc3vTVdq74VD/wMAAECBMv1/StT/Y++eOOmJmYeOr9KV2vvh0P8AAABQoEz/nxr1/3Ojfv5+eq9f+jVOV2ofhEP/AwAAQIEy/X9a1P/jltpq6WUP2eqcx9OV2ofh0P8AAABQoEz/nx71//P3dnvn3ufeXLRhulL7KBz6HwAAAAqU6f8zov5/YfXBm3U+eumZD6YrtY/Dof8BAACgQJn+PzPq/xcX7994kQb3jHw2Xal9Eg79DwAAAAXK9P9ZUf+Pf7Trz3M+P3Kf1dOV2pRw6H8AAAAoUKb/z476/6Xm3+3/4Pi/V745Xal9Gg79DwAAAAXK9H+PqP9f7r/hyIPXaPvHZulK7bNw6H8AAAAoUKb/z4n6/5Xrl7lpiUtuHrFeulL7PBz6HwAAAAqU6f9zo/5/desPzvx3yP4de6Urtanh0P8AAABQoEz/nxf1/4QzF/1g/n5r735CulKbFg79DwAAAAXK9P/5Uf9PnPDilov1mTn89XSlNj0c+h8AAAAKlOn/C6L+f+3TP1bo8sOef3+artS+CIf+BwAAgAJl+v/CqP9f7779749sce2qPdOV2pfh0P8AAABQoEz/XxT1/6Rfru/8S4uVDpybrtRmhEP/AwAAQIEy/X9x1P9v7N3hifrPH4zaJ12pzQyH/gcAAIACZfq/Z9T/bx56+q3733LetN3SldpX4dD/AAAAUKBM/18S9f9b00afc3enpxeema7Uvg6H/gcAAIACZfr/0qj/32767I5j79/5rCPSldqscOh/AAAAKFCm/y+L+n/y3RcM3vvsK27+O12pfRMO/Q8AAAAFyvT/5VH/vzNqxyuaLr/JK7PTldqCn+l/AAAAKFCm/6+I+v/dpa466psJ3623e7pS+zYc+h8AAAAKlOn/K6P+f2/gli889v4Zp76UrtS+C4f+BwAAgAJl+r9X1P/vrzt3rZ0aPnpj93Sl9n049D8AAAAUKNP/V0X9/8EWExqscMLqU85IV2o/hEP/AwAAQIEy/d876v8Pr15q2ldPTG3zbrpS+zEc+h8AAAAKlOn/q6P+/2jSp+2+GLLo7r+kK7U54dD/AAAAUKBM/18T9f/H5zS9r/ElLw8/KF2p/RQO/Q8AAAAFyvT/tVH/f3J0s967rnHS3zulK7W54dD/AAAAUKBM/18X9f+Uj746dvT4B1b9Ml2p/RwO/Q8AAAAFyvT/9VH/f9rhgJe//7zVgaelK7UFzwTQ/wAAAFCgTP/fEPX/Z3NuXm/1Br+NeiNdqf0aDv0PAAAABcr0f5+o/z+fcX/V4eiDp32SrtR+C4f+BwAAgAJl+v/GqP+ndj11xtPPDVj4vHSl9ns49D8AAAAUKNP/N0X9P23EpKPaH3L0WS+mK7U/wqH/AQAAoECZ/v9P1P/TV1z8iid6Dbn5yHSlNi8c+h8AAAAKlOn/m6P+/6LBZoOnz1zylXPTldqf4dD/AAAAUKBM/98S9f+XT/2247LbTFrv/XSlNj8c+h8AAAAKlOn/W6P+n7Fhu2l7rL3vqYekK7W/wqH/AQAAoECZ/r8t6v+ZN13e4Jk/brpxfrpS+zsc+h8AAAAKlOn/vlH/f3XlU2v90H/7Kd+lK7V/wqH/AQAAoECZ/u8X9f/X2/d8YbV2/7bZO12p/RsO/Q8AAAAFyvR//6j/Z10w4tiVN+r444bpSrXg0P8AAABQoEz/D4j6/5vnT+w9+/frl7o6XanC7+h/AAAAKFGm/2+P+n/2e/vc91y/5ofela5UDcKh/wEAAKBAmf6/I+r/b0/t267jnl+O2S5dqRYJh/4HAACAAmX6f2DU/9/9tfaMFQ/qOXdkulItGg79DwAAAAXK9P+gqP+/b/9FNfPaccstl65UtXDofwAAAChQpv/vjPr/h/0+Wm/k7Ma7LZquVAu+AED/AwAAQIEy/X9X1P8/zlr95Z23fvu++9KVqh4O/Q8AAAAFyvT/3VH/z/n188N3mbzRe6umK9WC1+t/AAAAKFCm/++J+v+nTk3GPbrk7K2eS1eqhuHQ/wAAAFCgTP8Pjvp/7mHN75xxSrujhqcr1eLh0P8AAABQoEz/D4n6/+fpMy5aaWSvSxulK9WCn+l/AAAAKFCm/++N+v+Xsw76dK8RTSb2TleqJcKh/wEAAKBAmf4fGvX/rxNv2n7c6R+vv066Ui0ZDv0PAAAABcr0/31R///22QNrfLvMuRdtka5US4VD/wMAAECBMv0/LOr/3487+e8mk0YPuildqZYOh/4HAACAAmX6//6o//9Y67lDVv3klB+fTFeqZcKh/wEAAKBAmf4fHvX/vAHnjfmxGrHUCulK1Tgc+h8AAAAKlOn/B6L+//OGnW8f073BoQ3SlWpB9+t/AAAAKFCm/x+M+n9+qyvP2/2Z8WPuTleq5cKh/wEAAKBAmf4fEfX/X0O3/mi5YV3nbpyuVMuHQ/8DAABAgTL9/1DU/3+vMafNtAvvWq5PulIteCaA/gcAAIACZfr/4aj//2n02iqjVtl8twHpSrViOPQ/AAAAFCjT/49E/f/vyCXm7fbqnPu2TVeqlcKh/wEAAKBAmf5/9H/3f7XQxi2+eqNZo/cuS1eqJuHQ/wAAAFCgTP+PjPp/4b7fLLr9X69ttVa6Uq0cDv0PAAAABcr0/2NR/ze4/N11ThzY7agt05WqaTj0PwAAABQo0/+PR/2/SOsVXh2w49BL+6Yr1Srh0P8AAABQoEz/j4r6f9EHhh334uGtJzZNV6pVw6H/AQAAoECZ/n8i6v/aMkf12vyyees/la5Uq4VD/wMAAECBMv0/Our/atHD7j12eueLHklXqtXDof8BAACgQJn+fzLq//pzg9r33a7voCXTlWqNcOh/AAAAKFCm/5+K+n+xPzt9cfOk6f2npyvVgtfofwAAAChQpv+fjvq/4Y7XLHTUMs3O3yVdqdYMh/4HAACAAmX6/5mo/xc/4PE1tzq9zyYHpCtV83DofwAAAChQpv/HRP3f6Ice418Z0WnSb+lKtVY49D8AAAAUKNP/z0b9v8RFrx4zaOQ7vS5IV6q1w6H/AQAAoECZ/h8b9f+Sryx82amnLNfto3SlWicc+h8AAAAKlOn/56L+X+qdbe9us+TYzd5KV6p1w6H/AQAAoECZ/h8X9f/Sx/+988TJF00+JV2p1guH/gcAAIACZfr/+aj/l1n/wnFtt+495MN0pVo/HP+7/y/9H3vLAAAAwP+hTP+/EPV/45vHHv7W7PY790hXqg3C4fN/AAAAKFCm/1+M+n/Zq3pfdMe1s1Y8Ol2pNgyH/gcAAIACZfp/fNT/y7Xd6c7jD9rg9+fTlWqjcOh/AAAAKFCm/1+K+n/5h3/evuWeo57bK12pNg6H/gcAAIACZfr/5aj/V1h+q0+f79fjiB/SlWqTcOh/AAAAKFCm/1+J+n/FhZb++9bfpzSal65Um4ZD/wMAAECBMv3/atT/Kz0zcY3jNmo6+7B0pWoRDv0PAAAABcr0/4So/5v8s8qYY7Z7of9F6Uq1WTj0PwAAABQo0/8To/5fud1nh9w0faHzP09Xqs3Dof8BAACgQJn+fy3q/6b7fH3eS5c9vMnEdKXaIhz6HwAAAAqU6f/Xo/5fZfaat7c6/LRJJ6UrVctw6H8AAAAoUKb/J0X9v+p5t7Q5ece5vb5OV6otw6H/AQAAoECZ/n8j6v/VXjzwo7sGtuy2a7pSbRUO/Q8AAAAFyvT/m1H/r/7BafNe/2vQZvulK9XW4dD/AAAAUKBM/78V9f8aJw9fpXWzLpPnpCtVq3DofwAAAChQpv/fjvq/2Z2N7nz11WFDOqQrVetw6H8AAAAoUKb/J0f9v+bab1y05Srdd56VrlTbhEP/AwAAQIEy/f9O1P/NN/v98CMvnLDiv+lK1SYc+h8AAAAKlOn/d6P+X+vazcfdMqzh74enK9W24dD/AAAAUKBM/78X9f/aTa5YY8Iztz43OV2p2oZD/wMAAECBMv3/ftT/6wze9e9tux94xFnpSrVdOPQ/AAAAFCjT/x9E/b/u6Es+Pa2a36hbulJtHw79DwAAAAXK9P+HUf+vt8TT2w/8pM3sV9KVaodw6H8AAAAoUKb/P4r6f/3dT7q9//R553RMV6od/9d/6//TbxcAAAD4v5Dp/4+j/t9g7kPnnbRd634/pivVTuHw+T8AAAAUKNP/n0T9v+FX/Q7Z4fC+4/9IV6qdw/Hf9n+D/2/eMgAAAPB/KNP/U6L+36jLvmMmXda5+aHpSrVLOHz+DwAAAAXK9P+nUf9v/OaXq/Qb+NpJH6QrVbtw6H8AAAAoUKb/P4v6f5Oz15nXbcdG156drlS7hkP/AwAAQIEy/f951P+bHrnGR5s1G/r5MelK1T4c+h8AAAAKlOn/qVH/t/jk4zbj/+q2wwvpSrVbOPQ/AAAAFCjT/9Oi/t/s1ZUHv7jKXR0vTFeq3cOh/wEAAKBAmf6fHvX/5hdP3XHzV7uO+DhdqfYIh/4HAACAAmX6/4uo/7c4YeZRxw6b88eb6UrVIRz6HwAAAAqU6f8vo/5v+e5aV/S9cPOVT05Xqj3Dof8BAACgQJn+nxH1/5Y7/WetN7qP2GdaulLtFQ79DwAAAAXK9P/MqP+3mt/5he2fOWXkzulK1TEc+h8AAAAKlOn/r6L+3/rHU6ad+Mn4mQemK9Xe4dD/AAAAUKBM/38d9X+rAx9sMKBqsOjv6UrVKRz6HwAAAAqU6f9ZUf+3bnz+fYOW+fict9OVap9w6H8AAAAoUKb/v4n6f5sHx7U7dVKTfmemK9W+4dD/AAAAUKBM/8+O+r/NuF7Hthkxevyx6Uq1Xzj0PwAAABQo0//fRv2/bW2X3hNPP7f5q+lKtX849D8AAAAUKNP/30X937bfT+vdfMrsk/ZMV6oDwqH/AQAAoECZ/v8+6v/tNmn18lEjN7r2m3SlWvCdgPofAAAACpTp/x+i/t9+myVnbDW51+f/pCvVQeHQ/wAAAFCgTP//GPX/Dle8Xr2yZLsduqQrVedw6H8AAAAoUKb/50T9v+MGt085ffa4jl+lK9XB4dD/AAAAUKBM//8U9f9Ot3TZ5oqte45ol65Uh4RD/wMAAECBMv0/N+r/nXt3b/LhQW//sX+6Uh0aDv0PAAAABcr0/89R/++y3d1/rn1t45V/Sleqw8Kh/wEAAKBAmf7/Jer/do8se+gl/a7f5+J0pVrwTED9DwAAAAXK9P+vUf/vusJ7T12/Z8eRU9OV6vBw6H8AAAAoUKb/f4v6v/3CPwz4aKMvZ05IV6qu4dD/AAAAUKBM//8e9f9uY9a/cKPfmy96YrpSHREO/Q8AAAAFyvT/H1H/7/7vn1NbVAcufFW6Uh0ZDv0PAAAABcr0/7yo//fYte12n35y67S105XqqHDofwAAAChQpv//jPq/w77Vqlc/02ZUy3SlOjoc+h8AAAAKlOn/+VH/7/nt8/9c2H3+gf9JV6pjwqH/AQAAoECZ/v8r6v+9zj+za7MLu6+6WrpSdQuH/gcAAIACZfr/76j/O44f9ey7w4b9PS5dqY4Nh/4HAACAAmX6/5+o//f+sM+g3q82HH5/ulJ1D4f+BwAAgAJl+v/fqP87nbL7JWevMmH3xdOV6rhw6H8AAAAo0H/f//WFov7f57xl/r36r5ZtHk1XquPDof8BAACgQJn+Xzjq/31f/GC1C5vNnfJfNH51Qjj0PwAAABQo0/8Nov7f74Pv2rbYscuNtXSlOjEc+h8AAAAKlOn/RaL+3//kDT//dOCgU4elK9VJ4dD/AAAAUKBM/y8a9f8B//Tv2fuyhdbbKF2pTg6H/gcAAIACZfq/FvX/ge26Djz78BdeuSZdqU4Jh/4HAACAAmX6v4r6/6B9uo1ttt1pN9+ZrlSnhkP/AwAAQIEy/V+P+r/z7MFHvDv94bPapivVaeHQ/wAAAFCgTP8vFvX/wQ+fPv/D33ssvEq6Up0eDv0PAAAABcr0f8Oo/w9ZfvTKa280atrT6Up1Rjj0PwAAABQo0/+LR/1/6ELXtz59z6ajHk5XqjPDof8BAACgQJn+bxT1/2HPdPjkin5TDlwiXanOCof+BwAAgAJl+n+JqP+7rP/HBR9d237VS9OV6uxw6H8AAAAoUKb/l4z6//Cbt++/0UG9/26erlQ9wqH/AQAAoECZ/l8q6v+uVy369CVbbzB8q3SlOicc+h8AAAAKFPf///of+/8f/b901P9HtH3xsOtnz9q9X7pSnRsO/Q8AAAAFynz+v0zU/0e+eeTnZy25XJtN0pXqvHDofwAAAChQpv8bR/1/1Nn3tb108jtTbkxXqvPDof8BAACgQJn+Xzbq/6OPHLjaeyMvurF/ulJdEA79DwAAAAXK9P9yUf8f88mh/653ythT26Qr1YXh0P8AAABQoEz/Lx/1f7fdZx1x0enN1hudrlQXhUP/AwAAQIEy/b9C1P/Hzt107I0jpr+yfLpSXRwO/Q8AAAAFyvT/ilH/d/9q+YFTJnW6eZF0peoZDv0PAAAABcr0/0pR/x/X5Z2e6y/T56x70pXqknDofwAAAChQpv+bRP1/fJOFPtl4zIQHV0hXqkvDof8BAACgQJn+Xznq/xMGv9J66nENOzyZrlSXhUP/AwAAQIEy/d806v8TR/+18nX1Yavfna5Ul4dD/wMAAECBMv2/StT/Jy3RZv55U7r/2yBdqa4Ih/4HAACAAmX6f9Wo/0++8+rD1npl/ug+6Up1ZTj0PwAAABQo0/+rRf1/ytp7P/120zadN05Xql7h0P8AAABQoEz/rx71/6mbnd3/ygtuXWTbdKW6Khz6HwAAAAqU6f81ov4/7drHLjj3vgO/GJCuVL3Dof8BAACgQJn+bxb1/+n9zvzinJ0evmmtdKW6Ohz6HwAAAAqU6f81o/4/Y5NRC/UadNoZl6Ur1TXh0P8AAABQoEz/N4/6/8xt+qw5+e8X1umbrlTXhkP/AwAAQIEy/b9W1P9nXbH7+OZrLvTSlulKdV049D8AAAAUKNP/a0f9f3bjP485v+2gG55KV6rrw6H/AQAAoECZ/l8n6v8eD7a97NppXU5umq5UN4RD/wMAAECBMv2/btT/54yr7v780rmtl0xXqj7h0P8AAABQoEz/rxf1/7m153fepEvLjx9JV6obw6H/AQAAoECZ/l8/6v/zdlr2qw06zHrw6nSluikc+h8AAAAKlOn/DaL+P3/+e4t+0neDDhumK9V/wqH/AQAAoECZ/t8w6v8LfvxhnT6/9V59u3Slujkc+h8AAAAKlOn/jaL+v/DA9V+9eMP2/96VrlS3hEP/AwAAQIEy/b9x1P8XvXr7ceu2mjJ6uXSlujUc+h8AAAAKlOn/TaL+v/jiLr3e/7Zp55HpSnVbOPQ/AAAAFCjT/5tG/d/zhO73XnbdqEXuS1eqvuHQ/wAAAFCgTP+3iPr/knfvbn9m5x5fLJquVP3Cof8BAACgQJn+3yzq/0snrLTRQY/2uem5dKXqHw79DwAAAAXK9P/mUf9fdubkiUNP7nTGqulKNSAc+h8AAAAKlOn/LaL+v7z7t7N+WmL6Oo3Sler2cOh/AAAAKFCm/1tG/X/Fp5ss3uDtZi8NT1eqO8Kh/wEAAKBAmf7fMur/K/e+64FD3hh7wzrpSjUwHPofAAAACpTp/62i/u/1yyG7P9D4opN7pyvVoHDofwAAAChQpv+3jvr/qmnHnPDPGe+0vildqe4Mh/4HAACAAmX6v1XU/70PHXrdkg8t9/EW6Up1Vzj0PwAAABQo0/+to/6/evVzWzTs0u3Tz9OV6u5w6H8AAAAoUKb/t4n6/5p7R77x56VDt7soXanuCYf+BwAAgAJl+r9N1P/XPnrddw9Pa3TCSelKNTgc+h8AAAAKlOn/baP+v27xjksd3va1qyemK9WQcOh/AAAAKFCm/9tG/X99/38frtbs/MKu6Up1bzj0PwAAABQo0//bRf1/Q/Nt9vr1777Nvk5XqqHh0P8AAABQoEz/bx/1f5+tFznlnkGtz56TrlT3hUP/AwAAQIEy/b9D1P83Xv/yjfvtNO+2/dKValg49D8AAAAUKNP/O0b9f9OkXc4cdl+Dr2elK9X94dD/AAAAUKBM/+8U9f9/zul10wEXjK86pCvV8HDofwAAAChQpv93jvr/5qPHjVyo6Sn7HZ6uVA+EQ/8DAABAgTL9v0vU/7d8dP7+P78y4vF/05XqwXDofwAAAChQpv/bRf1/a4fXf75/yuZ/npWuVCPCof8BAACgQJn+3zXq/9vmLNn4sPqcVSanK9VD4dD/AAAAUKBM/7eP+r/vjFabLX1c106vpCvVw+HQ/wAAAFCgTP/vFvV/v64/vfPXmLse7pauVI+EQ/8DAABAgTL9v3vU//2brnXOHw+1+3SXdKV6NBz6HwAAAAqU6f89ov4fcPfMWxud0Wu76elKNTIc+h8AAAAKlOn/DlH/3z5q6hNHNN7ohN/SleqxcOh/AAAAKFCm//eM+v+OpVbuPOKN2VcfkK5Uj4dD/wMAAECBMv2/V9T/Awc++Pvvb5/7wkfpSjUqHPofAAAACpTp/45R/w9a95QVFl1idLML0pXqiXDofwAAAChQpv/3jvr/zi06b7nPyU3OPiVdqUaHQ/8DAABAgTL93ynq/7uu/s8HQx79+La30pXqyXDofwAAAChQpv/3ifr/7gta7t+lc/Ove6Qr1VPh0P8AAABQoEz/7xv1/z3P/zrykeu+rD5MV6qnw6H/AQAAoECZ/t8v6v/B77110/xvO+73fLpSPRMO/Q8AAAAFyvT//lH/Dzm14ZmLtbr+8aPTlWpMOPQ/AAAAFCjT/wdE/X/vX2Pe2X/Dxn/+kK5Uz4ZD/wMAAECBMv1/YNT/Q9tfvNndv729yl7pSjU2HPofAAAACpTp/4Oi/r9vv90a/9K3Z6fD0pXquXDofwAAAChQpv87R/0/bNZlP9c7jHt4XrpSjQuH/gcAAIACZfr/4Kj/7x+xf+dFzrhoizPTlWrBdwLofwAAAChQpv8Pifp/+Iq3PTHnobHvvp2uVC+EQ/8DAABAgTL9f2jU/w80eOTWe99Yrver6Ur1Yjj0PwAAABQo0/+HRf3/4FMnnNO58Tvdj01XqvHh0P8AAABQoEz/d4n6f8SGUz5YYolOLb5JV6qXwqH/AQAAoECZ/j886v+Hblpty3/f7vPmnulK9XI49D8AAAAUKNP/XaP+f/jK9VZ48NFmt3dJV6pXwqH/AQAAoECZ/j8i6v9Htp/++8EnT7/wn3SlWvBMQP0PAAAABcr0/5FR/z+61pqnHXJd04bt0pVqQjj0PwAAABQo0/9HRf0/csDXNzzQecqsr9KVamI49D8AAAAUKNP/R0f9/9gNn434p1WPZ39KV6rXwqH/AQAAoECZ/j8m6v/HW62y95Lfjjp8/3Slej0c+h8AAAAKlOn/blH/jxo6/IeDfttg+anpSjUpHPofAAAACpTp/2Oj/n9ijdOWGLrhrF8vTleqN8Kh/wEAAKBAmf7vHvX/6EYHbvJTh/b3nJiuVG+GQ/8DAABAgTL9f1zU/0+OvOWtBn177zghXaneCof+BwAAgAJl+v/4qP+f+nWnk6pLu2zxY7pSvR0O/Q8AAAAFyvT/CVH/P92p9zW/dhn0bsd0pZocDv0PAAAABcr0/4lR/z9z2Nj772nbsveh6Ur1Tjj0PwAAABQo0/8nRf0/ZvqFHfabNrf7H+lK9W449D8AAAAUKNP/J0f9/+xZE2c3/Pu0FmenK9V74dD/AAAAUKBM/58S9f/YiUsv9ueaD7/5QbpSvR8O/Q8AAAAFyvT/qVH/P/fZVhs8vNNCt7+QrlQL/iag/wEAAKBAmf4/Ler/ccf9/Prhg1648Jh0pfowHPofAAAACpTp/9Oj/n/+jcErfntBm4YfpyvVR+HQ/wAAAFCgTP+fEfX/C+d2+6XJffNnXZiuVAv+JqD/AQAAoECZ/j8z6v8Xj+n6/l6vHPjsyelK9Uk49D8AAAAUKNP/Z0X9P/7j/q3GNb318DfTlWpKOPQ/AAAAFCjT/2dH/f/Snhv2m1FvuPzO6Ur1aTj0PwAAABQo0/89ov5/+afveqw0ZcKv09KV6rNw6H8AAAAoUKb/z4n6/5WZHxywy5ju9/yerlSfh0P/AwAAQIEy/X9u1P+vHrHM6EePG7bjgelKNTUc+h8AAAAKlOn/86L+n7DKi8uO6vv2rk+nK9WCfxOg/wEAAKBAmf4/P+r/ifcsOme3Do3vXSVdqaaHQ/8DAABAgTL9f0HU/689sf3k5TYcN2eJdKX6Ihz6HwAAAAqU6f8Lo/5/fek/Wk77rWfjh//fG4suVH0ZTv0PAAAABcr0/0VR/08a1OGWMd9+eXDzdKWaEQ79DwAAAAXK9P/FUf+/sd71Z+zeqvnTl6Yr1cxw6H8AAAAoUKb/e0b9/2bL0fus2vn67/ulK9VX4dD/AAAAUKBM/18S9f9b15z+2I/XdVxiq3Sl+joc+h8AAAAKlOn/S6P+f/usC66ce/LonjemK9WscOh/AAAAKFCm/y+L+n/yxGe7L/zouXdtkq5U34RD/wMAAECBMv1/edT/73x21W4Hvv3x623SlWp2OPQ/AAAAFCjT/1dE/f/ucTsOvW+JJhv2T1eqb8Oh/wEAAKBAmf6/Mur/936dW/u7ca9jlk9Xqu/Cof8BAACgQJn+7xX1//udtvx6qTfaXT46Xam+D4f+BwAAgAJl+v+qqP8/OGypVw59aPYH96Qr1Q/h0P8AAABQoEz/9476/8PpE9YefsZGrRZJV6ofw6H/AQAAoECZ/r866v+Phja99KHj5uy6drpSzQmH/gcAAIACZfr/mqj/P17j06O7jtn83qvSleqncOh/AAAAKFCm/6+N+v+TRl/tsviUu+b8J12p5oZD/wMAAECBMv1/XdT/U0Y2u2devWvjlulK9XM49D8AAAAUKNP/10f9/+laNy88uOn4g8elK9Uv4dD/AAAAUKBM/98Q9f9nAw74ct9XGjy9WrpS/RoO/Q8AAAAFyvR/n6j/P7/h1Bdr9434fvF0pfotHPofAAAACpTp/xuj/p/a6v5mv11wyhL3pyvV7+HQ/wAAAFCgTP/fFPX/tJcXH9pwUN+e/0XjV3+EQ/8DAABAgTL9/5+o/6dfMmm3P3fqfNej6Uo1Lxz6HwAAAAqU6f+bo/7/4qTfuj+85rzXh6Ur1Z/h0P8AAABQoEz/3xL1/5eTN7vy8L9bb1hLV6r54dD/AAAAUKBM/98a9f+MXS5fu5o29Jhr0pXqr3DofwAAAChQpv9vi/p/5rx2r/zattvlG6Ur1d/h0P8AAABQoEz/9436/6vve359T5fXPmibrlT/hEP/AwAAQIEy/d8v6v+vOz9V2+/SRq3uTFeqf8Oh/wEAAKBAmf7vH/X/rOVOvOeg46d/e3u6Ul9w6H8AAAAoUKb/B0T9/83wEbsMHdVs8dbpSj38jv4HAACAEmX6//ao/2eP7Xv0T+/16doiXak3CIf+BwAAgAJl+v+OqP+/re9zaYPFOo27IV2pLxIO/Q8AAAAFyvT/wKj/v7vti2aHrPDObwunK/VFw6H/AQAAoECZ/h8U9f/3LdZ+8YGJy600JF2p18Kh/wEAAKBAmf6/M+r/H7Zd/ct/ho/dZVS6Uq/Cof8BAACgQJn+vyvq/x8v+2jhJXtcNHjFdKW+4AsA9T8AAAAUKNP/d0f9P2dgkwFL3Nz77RHpSn3B6/U/AAAAFCjT//dE/f/Tup9f+O/e7TdfKl2pNwyH/gcAAIACZfp/cNT/c7eYceiDm846duV0pb54OPQ/AAAAFCjT/0Oi/v/56uZPHTx3gyvHpCv1RuHQ/wAAAFCgTP/fG/X/L01varLIj6PeaJWu1JcIh/4HAACAAmX6f2jU/7/efdCfc1r22Pi2dKW+ZDj0PwAAABQo0//3Rf3/26iTp9y7/5TzLk9X6gueCaj/AQAAoECZ/h8W9f/vSz2wTecbmw5olq7Ulw6H/gcAAIACZfr//qj//+hw3qD9B7zwbT1dqS8TDv0PAAAABcr0//Co/+fNee6Su3ddaPGh6Uq9cTj0PwAAABQo0/8PRP3/54wru/6yzsNdH0tX6gu6X/8DAABAgTL9/2DU//O77vxsfd5p45ZJV+rLhUP/AwAAQIEy/T8i6v+/Js1ZtcuMub8NTFfqy4dD/wMAAECBMv3/UNT/f5+z9T+PtG650vbpSn2FcOh/AAAAKFCm/x+O+v+fo5eYOv/gQbtskK7UVwyH/gcAAIACZfr/kaj///3ote0Wu7LL4OvSlfpK4dD/AAAAUKBM/z/6v/u/vtBia15xzTHD3t48Xak3CYf+BwAAgAJl+n9k1P8LP/b1UReM6775LelKfeVw6H8AAAAoUKb/H4v6v8F9n+246dQJx16ZrtSbhkP/AwAAQIEy/f941P+LrLrK4M8WaXjluulKfZVw6H8AAAAoUKb/R0X9v2if4Q2uWv3WNx5IV+qrhkP/AwAAQIEy/f9E1P+1LU+b1uPFAzdeLF2prxYO/Q8AAAAFyvT/6Kj/q2YHvrDm4PnnrZGu1FcPh/4HAACAAmX6/8mo/+u337LWOz3bDBibrtQX/E1A/wMAAECBMv3/VNT/i32+U+8Pbuw4cN90pb7gNfofAAAACpTp/6ej/m/Yrfex6+x//cU/pyv1NcOh/wEAAKBAmf5/Jur/xU8f2+6Mls03mJGu1JuHQ/8DAABAgTL9Pybq/0avXXjf5T9+OaF9ulJfKxz6HwAAAAqU6f9no/5f4uCJ1cdze172WrpSXzsc+h8AAAAKlOn/sVH/L/nF0jM23HTckcenK/V1wqH/AQAAoECZ/n8u6v+lftvq5Z57N97yknSlvm449D8AAAAUKNP/46L+X3qvn9e74ea33/8sXamvFw79DwAAAAXK9P/zUf8vs0SPT87rsdGw49KV+vrh0P8AAABQoEz/vxD1f+PRj7e+bvjs9i+nK/UNwqH/AQAAoECZ/n8x6v9lB1+z8tSJ7ZZ9J12pbxgO/Q8AAAAFyvT/+Kj/l2vSaf7GK/T6+fR0pb5ROPQ/AAAAFCjT/y9F/b/8tX8fdu5iTZ75K12pbxwO/Q8AAAAFyvT/y1H/r7DZtk9f+d7Hh3VNV+qbhEP/AwAAQIEy/f9K1P8rrr1w/7dHnbv0HulKfdNw6H8AAAAoUKb/X436f6U7X71greNH//BtulJvEQ79DwAAAAXK9P+EqP+bfLLC5+v1PGXgpHSlvlk49D8AAAAUKNP/E6P+X/nId9u+N3jExaemK/XNw6H/AQAAoECZ/n8t6v+mZ3+z2qUvNtjg/HSlvkU49D8AAAAUKNP/r0f9v8qbLf49a/XxE6akK/WW4dD/AAAAUKBM/0+K+n/VLoOOWH+Rrpd1TlfqW4ZD/wMAAECBMv3/RtT/q3112NgpU+868td0pb5VOPQ/AAAAFCjT/29G/b/63KMG3jhu8y2/SFfqW4dD/wMAAECBMv3/VtT/a+w+rOdFx8x5f8d0pd4qHPofAAAACpTp/7ej/m/2TG3+FVc2GvZnulJvHQ79DwAAAAXK9P/kqP/XXGj8yqcf/Fr7g9OV+jbh0P8AAABQoEz/vxP1f/Pl57Veu3W3ZTulK/U24dD/AAAAUKBM/78b9f9aD+/wyYczhv78fbpS3zYc+h8AAAAKlOn/96L+X7vtDRdcP6/1M0elK/W24dD/AAAAUKBM/78f9f86V+3Z/5J15h02Pl2pbxcO/Q8AAAAFyvT/B1H/r3vzGU9vtGvnpd9LV+rbh0P/AwAAQIEy/f9h1P/rrf/kYR8N6PvDOelKfYdw6H8AAAAoUKb/P4r6f/2Tj/3308EHnvl3ulLfMRz6HwAAAAqU6f+Po/7f4IMhq7XoeestR6Qr9Z3Cof8BAACgQJn+/yTq/w1fHND2wtXbvLp7ulLfORz6HwAAAAqU6f8pUf9vdN4Rn1/94vx1Z6cr9V3Cof8BAACgQJn+/zTq/41nf9/z3andT+uertTbhUP/AwAAQIEy/f9Z1P+b7LPRwGaLDOvzUrpS3zUc+h8AAAAKlOn/z6P+37Rd47FnH9Pwk3fTlXr7cOh/AAAAKFCm/6dG/d/inw+P6D1uwrZnpCv13cKh/wEAAKBAmf6fFvX/Zl+u9OpVB7fc4/V0pb7gOwH0PwAAABQo0//To/7f/JDJ6/S4cu79J6Qr9T3Cof8BAACgQJn+/yLq/y06frvomjO6/NUzXal3CIf+BwAAgAJl+v/LqP9b/r7JV++0HrTap+lKfc9w6H8AAAAoUKb/Z0T9v+Wxd7W/Zp2FDtgnXanvFQ79DwAAAAXK9P/MqP+3mnrIvRfMe+GJuelKvWM49D8AAAAUKNP/X0X9v/Xrx/TadMBp02emK/W9w6H/AQAAoECZ/v866v9WZww97rNdH15ot3Sl3ikc+h8AAAAKlOn/WVH/t97q3PEf79/jzCPTlfqCZwLofwAAAChQpv+/ifp/mxtHrrnhjaNueTFdqe8bDv0PAAAABcr0/+yo/9vccd1CPX9s+ur76Up9v3DofwAAAChQpv+/jfp/2zU7fnFDyynrnpuu1PcPh/4HAACAAmX6/7uo/9s+/u/OH2za/rT56Ur9gHDofwAAAChQpv+/j/p/u4bb3L3O3N59DklX6geGQ/8DAABAgTL9/0PU/9uvtshlZ9y8wSd7pyv1g8Kh/wEAAKBAmf7/Mer/HYa9fMzle8/a9rt0pd45HPofAAAACpTp/zlR/++45K3PbTl8uT0OSlfqB4dD/wMAAECBMv3/U9T/Oz25X5dXe7xz/y/pSn3BMwH0PwAAABQo0/9zo/7fecjxF9+ywkV/fZmu1A8Nh/4HAACAAmX6/+eo/3dZ+eG7jpw4drWd0pX6YeHQ/wAAAFCgTP//EvV/u+tW3WHb95od8Ea6Uu8SDv0PAAAABcr0/69R/++6+SefTVhs+hOnpSv1w8Oh/wEAAKBAmf7/Ler/9utM+2vg8Z2mn5eu1LuGQ/8DAABAgTL9/3vU/7vdte7qp43qs9An6Ur9iHDofwAAAChQpv//iPp/9ym/PHPSrvNqW6cr9SPDof8BAACgQJn+nxf1/x5HbXFw/wGtZ9yartSPCof+BwAAgAJl+v/PqP879Fjs/Enz+j56RbpSPzoc+h8AAAAKlOn/+VH/7/nWm3fssE7nfddMV+rHhEP/AwAAQIEy/f9X1P97HX7Rtt1av9bkoXSl3i0c+h8AAAAKlOn/v6P+7/j1Mx/3m9Fo3tLpSv3YcOh/AAAAKFCm//+J+n/vny/9Y/yVQx9qkq7Uu4dD/wMAAECBMv3/b9T/nfZo33Szg7vt9Uy6Uj8uHPofAAAACvTf9/9CC0X9v89+R6+7x7i7tv8vVurHh0P/AwAAQIEy/b9w1P/7zrr3pWeO6Tp1cLpSPyEc+h8AAAAKlOn/BlH/7/fXnTN/WGTOdU+kK/UTw6H/AQAAoECZ/l8k6v/92x9cX23q5ieulK7UTwqH/gcAAIACZfp/0aj/D3hv9rD2L45Y6450pX5yOPQ/AAAAFCjT/7Wo/w88deNdn1j9lBe3SVfqp4RD/wMAAECBMv1fRf1/0AUrdpvec3zfTdOV+qnh0P8AAABQoEz/16P+7/z821ctO7jBudenK/XTwqH/AQAAoECZ/l8s6v+Dr2zQfMVRH9ceTFfqp4dD/wMAAECBMv3fMOr/Q7Z/6fmZxzeZ0TBdqZ8RDv0PAAAABcr0/+JR/x+64T/TRy42+tHV05X6meHQ/wAAAFCgTP83ivr/sJtaL7Lze+fu+2y6Uj8rHPofAAAACpTp/yWi/u/S4NohK0+c3WSzdKV+djj0PwAAABQo0/9LRv1/+FN77TR7hY3m3Zyu1HuEQ/8DAABAgTL9v1TU/11HnHPkcz16PdQrXamfEw79DwAAAAXK9P/SUf8fseKjl3cc3m6v9dKV+rnh0P8AAABQoEz/LxP1/5Ezlq0/tve47QelK/XzwqH/AQAAoECZ/m8c9f9RXd+budPNPafukK7Uzw+H/gcAAIACZfp/2aj/j+7ww0srzH37uvXTlfoFC37/f/bdAgAAAP83Mv2/XNT/x8xZf92vNm184rXpSv3CcOh/AAAAKFCm/5eP+r/b0bdfNbbl9WtV6Ur9onDofwAAAChQpv9XiPr/2I+6dNv7x44v3puu1C8Oh/4HAACAAmX6f8Wo/7tP6r5r0xu/7Pt4ulLvGQ79DwAAAAXK9P9KUf8fd87dw77Zv/m5jdOV+iXh0P8AAABQoEz/N4n6//gtzlzk+z+6PTI0XalfGg79DwAAAAXK9P/KUf+fcPWo6auvPXTverpSvywc+h8AAAAKlOn/plH/nziwz/Md2jVquky6Ur88HPofAAAACpTp/1Wi/j9p3d2bP93/tfmPpSv1K8Kh/wEAAKBAmf5fNer/k0f9efkXvTo/tn26Ur8yHPofAAAACpTp/9Wi/j9lqbZHNj6k7/4D05V6r3DofwAAAChQpv9Xj/r/1KbVTrtu07p+XbpSvyoc+h8AAAAKlOn/NaL+P+3u54eMnjnvqw3SlXrvcOh/AAAAKFCm/5tF/X/62IW2fbJBg1tvSVfqV4dD/wMAAECBMv2/ZtT/Z9Rf+bjd5+N7bJ6u1K8Jh/4HAACAAmX6v3nU/2cu99cfyzx3yprrpiv1a8Oh/wEAAKBAmf5fK+r/s4a3afrl0SOevzJd+f8/E1D/AwAAQIEy/b921P9nb3v1M09dsvk1i6Ur9evDof8BAACgQJn+Xyfq/x6X7X3wnkPmHP9AulK/IRz6HwAAAAqU6f91o/4/57azz19jfNe2Y9OVep9w6H8AAAAoUKb/14v6/9wWj93x3Rp3fbZGulK/MRz6HwAAAAqU6f/1o/4/76Qjd5jVsN0jrdOV+k3h0P8AAABQoEz/bxD1//mT7/tslfd77X17ulL/Tzj0PwAAABQo0/8bRv1/wcsD/+r0xEZNb0hX6jeHQ/8DAABAgTL9v1HU/xdecujqz54we36LdKV+Szj0PwAAABQo0/8bR/1/0feznvv67HMfG5Ku1G8Nh/4HAACAAmX6f5Oo/y/uvGmX5e8fvf/C6Ur9tnDofwAAAChQpv83jfq/5y7LX7zjhCb1FdOVet9w6H8AAAAoUKb/W0T9f8m8d+56fPmPvxqVrtT7hUP/AwAAQIEy/b9Z1P+XfnHs3H4/N791qXSl3j8c+h8AAAAKlOn/zaP+v+zgIct0a/FljxHpSn1AOPQ/AAAAFCjT/1tE/X/5XgM236xTxzXHpCv128Oh/wEAAKBAmf5vGfX/Ff8/9u47Xu/5bvz4Jcb3OkZCi1IjRnS5S2xBEXeqZo3WyH1bQRAiEU1qFKldKTGCWAm1ib1rBTEiYu9NYpMYCWL/HngnPsdXfl/a0O/jcz+ff3i/zznXeeccj0ebvJzr5Ly39YMjBh1+07zlK8XJseh/AAAAqKGK/l826f+Dth/3pxMGznHYceUrxSmx6H8AAACooYr+Xy7p/4OfWfzoXTa+b6cVyleKIbHofwAAAKihiv5fPun/Q0bNcclqS++3ykLlK8XQWPQ/AAAA1FBF/6+Q9P+huz268ejxw58+oHylODUW/Q8AAAA1VNH/Kyb9/7dlZ3xvZPuRj/UqXylOi0X/AwAAQA1V9H+npP8PGzhizpVHtHQaXb5S/CMW/Q8AAAA1VNH/KyX9P+CkD5brfcY5uz5ZvlKcHov+BwAAgBqq6P+Vk/7/+0KrPXpK/x0O36t8pTgjlqn2/2anTbMPGQAAAPiOKvp/laT/D7/siD3u2Paj294tXynOjOX/8/X/GafRRwwAAAB8VxX9/5uk/49ornvcsjeu1GGz8pXirFg8/x8AAABqqKL/V036f+D8fa7Y5pljd1u9fKU4Oxb9DwAAADVU0f+rJf1/5NlXbzqozSZHjylfKc6JRf8DAABADVX0/+pJ/x/10lLDdnjxorGbl68U58ai/wEAAKCGKvq/c9L/R2/x/trHderd5sPyleK8WPQ/AAAA1FBF/6+R9P8xa929081db950XPlKcX4s+h8AAABqqKL//zvp/0HvzDJg6YMbV29QvlIMi0X/AwAAQA1V9H+XpP+P3eafv+pxwpBPR5SvFBfEov8BAACghir6/7dJ/x/3RP+RJ3XZon238pXiwlj0PwAAANRQRf+vmfT/8ff89tV7Oryz7p/LV4qLYtH/AAAAUEMV/f+7pP8H9z1wlt9MWub8h8pXiotj0f8AAABQQxX9v1bS/yd03OjiTuNfeWxC+UpxSSz6HwAAAGqoov/XTvr/xAGD1x+19C87bVS+Ulwai/4HAACAGqro/3WS/j9p6IU9h2586K5rlq8Ul8Wi/wEAAKCGKvp/3aT/T+6wy8BdB655+AvlK8Xlseh/AAAAqKGK/l8v6f9Trnp8ieUHPXnbTuUrxRWx6H8AAACooYr+Xz/p/yGzth992wY/7TCqfKW4Mhb9DwAAADVU0f+/T/p/6DyLjTt6ySt2e7p8pbgqFv0PAAAANVTR/xsk/X/q6WPbbTuh39H9y1eKq2PR/wAAAFBDFf2/YdL/p23YecCQOQeOva18pbgmFv0PAAAANVTR/xsl/f+P1w7dqdfIDdrsWL5S/DMW/Q8AAAA1VNH/Gyf9f/qnN6y90rnPb7pb+UpxbSz6HwAAAGqoov//kPT/GV3+MuzOvgtd/UD5SnFdLPofAAAAaqii//+Y9P+Zj9w5yzE9bvh0q/KV4vpY9D8AAADUUEX/b5L0/1k9273a7cp92n9cvlLcEIv+BwAAgBqq6P9Nk/4/e8/lRi738APrvl6+UtwYi/4HAACAGqro/82S/j/nlgm/ur3lx+evXb5SDI9F/wMAAEANVfT/5kn/n3vIwgNvWfq+5W8pXyluikX/AwAAQA1V9H/XpP/PW+XlnkuNn+PRbcpXiptj0f8AAABQQxX9/z9J/5//i6fX7z5w+IF7lK8Uk58ToP8BAACghir6/3+T/h92zHwXH7/xfts+XL5SjIhF/wMAAEANVfT/Fkn/X9A4r93dG4xdvGv5SnFrLPofAAAAaqii/7dM+v/Ca3uPW3XQIqM+Kl8pbotF/wMAAEANVfT/Vkn/X3TRJqN3nnD40DfKV4rbY9H/AAAAUEMV/b910v8XzzloiROXXL//78tXijti0f8AAABQQxX9v03S/5e0/OGqE0ZeNdvE8pViZCz6HwAAAGqoov+7Jf1/6eXH/XGXOfd4Y9PyleLOWPQ/AAAA1FBF/2+b9P9l51zcb7W+j1/TOXn7Qe2+fNuoeFn/AwAAQA1V9P92Sf9fvkCPwaPPnafr2PKV4q5Y9D8AAADUUEX/b5/0/xVHPrnC4CsPnr13+UoxOhb9DwAAADVU0f/dk/6/crkFHt6+R5e37y5fKSa/Tv8DAABADVX0/w5J/1+18M8ndmx57awnyleKe2LR/wAAAFBDFf2/Y9L/V5/8/NwjHl68y57lK8W9seh/AAAAqKGK/t8p6f9rnl3msjtGvLX81uUrxX2x6H8AAACooYr+75H0/z+7v7vhsu2XevST8pXi/lj0PwAAANRQRf/vnPT/tX3u7bNN/1MPfK18pXggFv0PAAAANVTR/7sk/X/dXS2DBp2x1bZrla8UD8ai/wEAAKCGKvq/Z9L/13e9bpmRN45Y/NbyleKhWPQ/AAAA1FBF/++a9P8NY/e9f+Vt24zaoXyleDgW/Q8AAAA1VNH/vZL+v/H9373Vu80FQ/uUrxSPxKL/AQAAoIYq+r930v/D19//R6c8s2v/B8tXikdj0f8AAABQQxX9v1vS/ze9fN+9v+p0/Gw9yleKx2LR/wAAAFBDFf3fJ+n/m7ec+9ePv7jZG3eVrxSPx6L/AQAAoIYq+n/3pP9vWfu/Zj3i4A+ueap8pXgiFv0PAAAANVTR/39K+n/EhNfG79d1xa77la8UT8ai/wEAAKCGKvq/b9L/t3bb/PeLdTlr9nfKV4rJzwnQ/wAAAFBDFf3fL+n/254cesEjJ2z/9oblK8XTseh/AAAAqKGK/v9z0v+333vmEQdMGnXW78pXimdi0f8AAABQQxX9v0fS/3f027Z3nw6zdHmxfKV4Nhb9DwAAADVU0f97Jv0/cqlL7ur38D6dW8pXiudi0f8AAABQQxX9v1fS/3f+/c+/PKTlhtOGla8Uz8ei/wEAAKCGKvp/76T/R526XvOBHj+eeH35SjEmFv0PAAAANVTR/39J+v+uxQa8tvCVD8y1YPlKMTYW/Q8AAAA1VNH/+yT9P/rqFdfZ+9wNtjimfKV4IRb9DwAAADVU0f/7Jv1/92yfnntY34E3dCxfKSb/TAD9DwAAADVU0f/7Jf1/z7y3Hvb0nAu9+vPyleKlWPQ/AAAA1FBF//dP+v/eM9rsssTI55sHl68UL8ei/wEAAKCGKvr/r0n/39e1ueUyS/5079XKV4pXYtH/AAAAUEMV/b9/0v/3j71n+E0Tnjx5SPlK8Wos+h8AAABqqKL/D0j6/4H3Jw49dlC/eweUrxSvxaL/AQAAoIYq+v/ApP8fXH/pfXbc4IolflG+Urwei/4HAACAGqro/4OS/n/o2b8+tcrGv9zxzPKV4o1Y9D8AAADUUEX/H5z0/8Pd11z13oGvHDJT+UoxLhb9DwAAADVU0f+HJP3/SJ992p88fs0H5ihfKcbHov8BAACghir6/9Ck/x+969pPdlr60GUuL18p3oxF/wMAAEANVfT/35L+f+zInbr27LBF52PLV4q3YtH/AAAAUEMV/X9Y0v+PL3fRdadOGnLa8uUrxdux6H8AAACooYr+H5D0/xMLH3vSXScsM3Hh8pXinVj0PwAAANRQRf//Pen/J0/eeM8Vu7wz14HlK8WEWPQ/AAAA1FBF/x+e9P9TLc89tl3X3lu0K18pJsai/wEAAKCGKvr/iKT/n778ZysddfBFN1xYvlK8G4v+BwAAgBqq6P+BSf8/c8788936YuPVa8tXivdi0f8AAABQQxX9f2TS/88u8MQHK3S6uTlP+Urxfiz6HwAAAGqoov+PSvr/uTf33GfkMyvtfXr5SjEpFv0PAAAANVTR/0cn/f/8JjcOXbnNRyd/w5Xig1j0PwAAANRQRf8fk/T/mM4HDe+97Sb3/qR8pfgwFv0PAAAANVTR/4OS/h/70RpbnnLjsUtcWb5SfBSL/gcAAIAaquj/Y5P+f6HHW5/ccUbLjp3KV4qPY9H/AAAAUEMV/X9c0v8vPrh8+2X7jzzkG/4CgOKTWPQ/AAAA1FBF/x+f9P9Ld8y66jbtd3jg8PKV4tNY9D8AAADUUEX/D076/+V9Rz01aMQ5yyxRvlJ8Fov+BwAAgBqq6P8Tkv5/pdM8ew6+9O115i1fmfLu+h8AAABqqKL/T0z6/9UDnzlp+107DruufKUZj9H/AAAAUEcV/X9S0v+vDX7huo6zDf3sgvKVZptY9D8AAADUUEX/n5z0/+u/XqTriPu3XrBt+Upz+lj0PwAAANRQRf+fkvT/G8OP+uCE0bdsdkD5SnOGWPQ/AAAA1FBF/w9J+n/cjJvOt8vs01+1UPlKc8ZY9D8AAADUUEX/D036f/wcPVdabbcLx6xQvtKcKRb9DwAAADVU0f+nJv3/5rDzHxt9Qc/pjytfaRax6H8AAACooYr+Py3p/7eu2nn1u9cd3GfJ8pXm5PfX/wAAAFBDFf3/j6T/3571gtNXHbzpUUeUrzRbYtH/AAAAUEMV/X960v/vzHP8gTu/P+nWk8pXmjPHov8BAACghir6/4yk/yecvmG3ExfvtNiK5SvNWWLR/wAAAFBDFf1/ZtL/EzuOufmW5c/seUX5SnPWWPQ/AAAA1FBF/5+V9P+7AzosutRr3Y+Yu3ylOVss+h8AAABqqKL/z076/72hC7bpPuCux6crX2m2jUX/AwAAQA1V9P85Sf+/3+Gx547fdOYVzyhfabaLRf8DAABADVX0/7lJ/0/aZuYux6x+/zoHla80Z49F/wMAAEANVfT/eUn/f/DE6LO7nTL7sJ+VrzTniEX/AwAAQA1V9P/5Sf9/eM97hy738Y2fLVW+0pzc/fofAAAAaqii/4cl/f9R347db1+o/4KDyleaP45F/wMAAEANVfT/BUn/f/zSAbcN+c2YzdqXrzTnjEX/AwAAQA1V9P+FSf9/skWXn/d6ftGrbihfac4Vi/4HAACAGqro/4uS/v90rf1mWmn/I8acX77SnDsW/Q8AAAA1VNH/Fyf9/9k717xw55brTd8sX2n+JBb9DwAAADUU/T9D8pqjkje3+XI052k0Oo9LXh+PbzfP5Hf6/B/b7fP2xG+aX2nO03p+8UtM12jMcMnXPqxv+G8M08SUz6ftQ2PWaHRsTJd+5p9bYiqPP7459/yNjo02pce3fofp4/HzbvXxAgc2OjZm+vrjd+7Ra/vue055Md7anH+tXuOXbnRsNL/++N267751r97bd48X499Ly0KX7jWkX6NjY4av/5vq0avfrsmLLTEW/umbHQZ+8fF87fF/6tut7w5/mvLizPH4ReJ+6fG7t/74Z4nHL9pz/nbjZhvZmHHe1g9v9OnXu2+3BgAAAP9pFf0/pWcbjc43Ja+PLv7O/T9v69mYWv9P/+99VlM15fP5nvo/nivR+NHHe/z29bbXNJpf7+ede/fbvVe3nh2nwecCAAAAAAAAAFPE1//bJK8a+dU606NfPYc81Zy/0SieazSmm7T5ix8+9e/8+p9t8m/67Pt6qgAAAADko+L5/1O+P30aPf9//tazMbXn/8/4731WUzXl8/menv8fH3dzgec/OfS+xoqNWb7p+/O33r1brx27t/oWgJni/Rac5foX92qs2Gj7zd+nv/V2O7V+1yLer/2+7210atu1GrN9/f2++P770rsBAADwf01F/0/p2UZj/7+m7xZz9vTlb9H/C7Sejeh/AAAA4PtU0f9Tvi49lf7/rl//X7D1bOh/AAAA+AFU9P+U55d/Y//PPuXFb9n/Le2/ujdZm9Y3v1fNhWIuHHORmIvG7BBzsZg/i/nzmL+I+cuYv4q5eMz/ivnrmPHdAc0lY8ZT8JtLxVw65jIxl425XMzlY64Qc8WYnWKuFHPlmKvE/E3MVWOuFnP1mJ1jrhHzv2N2ifnbmGvG/F3MtWKuHXOdmOvGXC/m+jF/H3ODmBvG3CjmxjH/EPOPMTeJuWnMzWJuHrNrzP+J+b8xt4i5ZcytYm4dc5uY8SMJm9vG3C7m9jHj5y02d4i5Y8ydYvaIuXPMXWL2jBk/g7HZK2bvmLvF7BNz95jxExibfWP2i/nnmHvEjJ+82Nwr5t4x/xJzn5j7xtwvZv+Y8b/h5v4xD4h5YMyDYh4c85CYh8b8W8zDYg6I+feYh8c8IubAmEfGjP9vaR4d85iYg2IeG/O4mMfHHBzzhJgnxjwp5skxT4k5JObQmKfGPC3mP2KeHvOMmGfGPCvm2THPiXluzPNinh9zWMwLYl4Y86KYF8eM73NqXhrzspiXx7wi5pUxr4p5dcxrYv4z5rUxr4t5fcwbYt4Yc3jM+B6u5s0xb4k5IuatMW+LeXvMO2LG3w3TvDPmqJh3xRwd8+6Y98S8N+Z9Me+P+UDMB2M+FPPhmI/EfDTmYzEfj/lEzCdjxt9F03w65jMxn435XMznY46JOTbmCzFfjPlSzJdjvhLz1ZivxXw95hsx42flNsfHfDPmWzHfjvlOzAkx4/fL5rsx34v5fsxJMT+I+WHMj2J+HPOTmJ/G/OzLOfmv8mmJ32tb4jfflvhLdFrizwEt8by/lvjv/y3x54CWyT9/dvLPlZ3882In/xzYWWPOFrNtzHYx408MLXPE/FHMH8ecM+ZcMeeO+ZOY8fWGlvj5QS0/jTlfzPi+wpZ4fmFLfJ2hJfnzBgAQ/d/2q9fMuOd/8uMBAAAApj39DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJC/Kf3fZ/Jr9D8AAADkxtf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/fuf9n/P4/JgAAAGDa8vV/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPyV+7+h/wEAACAzvv4PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPmbev9P/x/7mAAAAIBpy9f/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/+h8AAADyp/8BAAAgf/ofAAAA8qf/AQAAIH/6HwAAAPKn/wEAACB/0f8zJK85Knlz88vRslCjsf9f03dr/fYvX95un7cnftP8yud30vm5NtNNs0+m2mw/4K8FAAAAtVHR/y0xFp5K/8+Tvvwt+n/h1rPxA/d/u1e+nDM9Gq+Y9Yf7tQEAAOA/p6L/Z/5ytCwylf6/KX35W/T/Iq1nI/p/hvWm2Sc0NdN/8c85ko/9cz9qNJrNRqNNm2nzizTna32/OX+jUTzXaEw3adrcBwAAgH9NRf/P8uVoWXQq/X9J+vK36P9FW89G9P+MT02zT+i7ma7rDOc+3KV/o7HNZsO/mK+8eM4Xc4pXN755mf6ju09+cfLjnptreOvH/TB3AQAA4F9S0f/x/PiWDo1G53HJ6+Pr5e2+6/P/O7Sek993hku+9mFNo6/Hl0z5fNo+NGaNRsfGdOln/rklpvL445tzz9/2lUab0uOX+J4+UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBcAQAA//+XMc0O") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) 3.446732091s ago: executing program 4 (id=6443): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000000000)='./file0\x00', 0xa10808, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc}) 2.23779967s ago: executing program 3 (id=6451): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) fcntl$setlease(r0, 0x403, 0x0) 2.041794219s ago: executing program 1 (id=6452): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 1.986556493s ago: executing program 3 (id=6453): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500004001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000400010002081000418e00000004fcff", 0x58}], 0x1) 1.875012375s ago: executing program 3 (id=6454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_STP_STATE={0x8}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x3fb}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x56}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.872938114s ago: executing program 2 (id=6455): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x5, 0x80000002, 0x7b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x3c20, 0x2f00, 0x0, 0x8}}) 1.35280772s ago: executing program 3 (id=6456): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x200000002}) 1.331537194s ago: executing program 4 (id=6457): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0218000014000000000000000000000005000600000000000a00000200000000000000000000000000000000000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000000000000000000000000000000fe80000080000000000000000000000005000500000000000a"], 0xa0}}, 0x0) 1.191471462s ago: executing program 3 (id=6458): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0x1, 0x6216, &(0x7f000000cb40)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x3) 1.014924056s ago: executing program 2 (id=6459): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x18080c0, &(0x7f0000000140)={[{@file_umask={'file_umask', 0x3d, 0x53}}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@creator={'creator', 0x3d, "0691aaf6"}}, {@umask={'umask', 0x3d, 0xeb}}, {@dir_umask={'dir_umask', 0x3d, 0x4550}}, {@codepage={'codepage', 0x3d, 'macinuit'}}, {@uid}]}, 0x7, 0x32c, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) 797.518811ms ago: executing program 2 (id=6460): r0 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], &(0x7f0000002480)=[0x2]}, 0x20) 791.431325ms ago: executing program 4 (id=6461): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) alarm(0x1000000001) 664.522034ms ago: executing program 4 (id=6462): r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000200)=""/17) 511.780633ms ago: executing program 2 (id=6463): r0 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x1, 0x3, 0x1b}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) 511.315481ms ago: executing program 4 (id=6464): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') lseek(r0, 0x2000, 0x0) 399.391766ms ago: executing program 4 (id=6465): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f0000000100)={[{@utf8no}, {@uni_xlateno}, {@shortname_winnt}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@shortname_lower}, {@rodir}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@rodir}, {@uni_xlate}, {@numtail}, {@shortname_winnt}, {@numtail}]}, 0x25, 0x365, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) 152.783352ms ago: executing program 0 (id=6466): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000500)="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", 0x202}, {0x0}], 0x2) 95.874461ms ago: executing program 2 (id=6467): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='\x00}K\x00\x02', 0x0) 87.852742ms ago: executing program 3 (id=6468): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) 0s ago: executing program 2 (id=6469): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x7c, 0x100}) kernel console output (not intermixed with test programs): 25] BTRFS info (device loop1): turning on async discard [ 551.511110][T17825] BTRFS info (device loop1): enabling free space tree [ 551.526128][T17872] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 551.628283][T17872] syz.0.5090: attempt to access beyond end of device [ 551.628283][T17872] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 551.643291][T17892] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 551.708738][T17872] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=32, inode=11, rec_len=151, name_len=6 [ 551.762119][ T5883] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 551.779957][T17872] Remounting filesystem read-only [ 552.179594][T17910] loop0: detected capacity change from 0 to 8 [ 552.874095][ T10] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 552.920567][T17934] loop0: detected capacity change from 0 to 64 [ 553.066741][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 553.067435][T17913] loop3: detected capacity change from 0 to 32768 [ 553.088720][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 553.109086][T17913] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5101 (17913) [ 553.139996][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 553.156943][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 553.177207][T17905] loop4: detected capacity change from 0 to 32768 [ 553.193128][T17913] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 553.199714][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 553.211089][T17913] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 553.285216][T17905] JBD2: Ignoring recovery information on journal [ 553.296915][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.324545][ T10] usb 3-1: config 0 descriptor?? [ 553.441396][T17905] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 553.460952][T17913] BTRFS info (device loop3): enabling ssd optimizations [ 553.478939][T17913] BTRFS info (device loop3): turning on async discard [ 553.489766][T17913] BTRFS info (device loop3): enabling free space tree [ 553.580050][ T10] hdpvr 3-1:0.0: firmware version 0x19 dated :‡¨*‘]œqŸ®uÍIcV2%\=Üõ”>_ãF [ 553.580050][ T10] I6¼ãÇ~ã¹™Ëc² [ 553.602996][ T10] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 553.631055][T17905] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 553.663219][T17905] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 553.673072][T17905] OCFS2: File system is now read-only. [ 553.714491][ T5886] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 553.725547][T17905] (syz.4.5100,17905,1):ocfs2_search_chain:1817 ERROR: status = -30 [ 553.752551][ T30] audit: type=1326 audit(1760700423.050:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.0.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cef8efc9 code=0x7ffc0000 [ 553.781791][T17905] (syz.4.5100,17905,1):ocfs2_search_chain:1940 ERROR: status = -30 [ 553.790137][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 553.800308][ T10] hdpvr 3-1:0.0: device init failed [ 553.805731][ T10] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 553.814363][ T30] audit: type=1326 audit(1760700423.050:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.0.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cef8efc9 code=0x7ffc0000 [ 553.849844][T17905] (syz.4.5100,17905,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30 [ 553.855427][ T10] usb 3-1: USB disconnect, device number 122 [ 553.906058][T17905] (syz.4.5100,17905,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 553.916843][ T30] audit: type=1326 audit(1760700423.050:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.0.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f87cef8efc9 code=0x7ffc0000 [ 553.941245][ T30] audit: type=1326 audit(1760700423.050:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.0.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cef8efc9 code=0x7ffc0000 [ 553.942223][T17905] (syz.4.5100,17905,0):__ocfs2_claim_clusters:2438 ERROR: status = -30 [ 553.964616][ T30] audit: type=1326 audit(1760700423.050:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.0.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cef8efc9 code=0x7ffc0000 [ 554.083496][T17905] (syz.4.5100,17905,1):__ocfs2_claim_clusters:2446 ERROR: status = -30 [ 554.133037][T17905] (syz.4.5100,17905,0):ocfs2_block_group_alloc_contig:437 ERROR: status = -30 [ 554.175710][T17977] netlink: 'syz.1.5120': attribute type 25 has an invalid length. [ 554.186454][T17905] (syz.4.5100,17905,1):ocfs2_block_group_alloc:711 ERROR: status = -30 [ 554.216399][T17905] (syz.4.5100,17905,1):ocfs2_block_group_alloc:764 ERROR: status = -30 [ 554.249139][T17905] (syz.4.5100,17905,1):ocfs2_reserve_suballoc_bits:839 ERROR: status = -30 [ 554.290840][T17905] (syz.4.5100,17905,1):ocfs2_reserve_suballoc_bits:856 ERROR: status = -30 [ 554.318969][T17905] (syz.4.5100,17905,0):ocfs2_reserve_new_metadata_blocks:996 ERROR: status = -30 [ 554.345161][T17905] (syz.4.5100,17905,0):ocfs2_reserve_new_metadata_blocks:1019 ERROR: status = -30 [ 554.393605][T17905] (syz.4.5100,17905,0):ocfs2_expand_inline_dir:2855 ERROR: status = -30 [ 554.475162][T17905] (syz.4.5100,17905,1):ocfs2_extend_dir:3219 ERROR: status = -30 [ 554.507216][T17905] (syz.4.5100,17905,1):ocfs2_prepare_dir_for_insert:4329 ERROR: status = -30 [ 554.516063][T17905] (syz.4.5100,17905,1):ocfs2_mknod:301 ERROR: status = -30 [ 554.560677][T17905] (syz.4.5100,17905,1):ocfs2_mknod:505 ERROR: status = -30 [ 554.589769][T17905] (syz.4.5100,17905,1):ocfs2_mkdir:661 ERROR: status = -30 [ 554.745365][T17995] loop1: detected capacity change from 0 to 256 [ 554.791212][ T5889] ocfs2: Unmounting device (7,4) on (node local) [ 554.802827][T17995] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 555.060813][T18007] loop1: detected capacity change from 0 to 256 [ 555.378665][T18020] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5141'. [ 555.433599][T18024] netlink: 'syz.3.5143': attribute type 32 has an invalid length. [ 555.734098][T18037] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 555.753582][T18037] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 555.827872][T18045] loop0: detected capacity change from 0 to 256 [ 555.982645][T18051] netlink: 'syz.3.5157': attribute type 21 has an invalid length. [ 555.996208][ T30] audit: type=1326 audit(1760700425.155:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18052 comm="syz.4.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194258efc9 code=0x7ffc0000 [ 556.020624][T18051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5157'. [ 556.102488][ T30] audit: type=1326 audit(1760700425.155:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18052 comm="syz.4.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194258efc9 code=0x7ffc0000 [ 556.165166][ T30] audit: type=1326 audit(1760700425.202:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18052 comm="syz.4.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f194258efc9 code=0x7ffc0000 [ 556.189381][ T30] audit: type=1326 audit(1760700425.202:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18052 comm="syz.4.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194258efc9 code=0x7ffc0000 [ 556.211521][T18057] efs: cannot read volume header [ 556.287728][ T30] audit: type=1326 audit(1760700425.202:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18052 comm="syz.4.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194258efc9 code=0x7ffc0000 [ 557.075625][ T5881] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 557.285131][T18109] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5184'. [ 557.312035][T18107] loop2: detected capacity change from 0 to 512 [ 557.350246][T18107] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 557.388412][T18111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5186'. [ 557.431013][T18107] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.5185: iget: bogus i_mode (5) [ 557.481369][T18107] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.5185: couldn't read orphan inode 15 (err -117) [ 557.569404][T18107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.602005][T18107] ext2 filesystem being mounted at /1038/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.625043][T18121] netlink: 'syz.3.5189': attribute type 2 has an invalid length. [ 557.728290][T18107] EXT4-fs error (device loop2): ext4_add_entry:2417: inode #2: comm syz.2.5185: Directory hole found for htree leaf block 0 [ 557.871495][T18068] loop1: detected capacity change from 0 to 65536 [ 557.877175][ T5879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.966509][T18068] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 558.077999][T18068] XFS (loop1): Ending clean mount [ 558.246857][T18119] loop4: detected capacity change from 0 to 32768 [ 558.331200][ T5883] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 558.405066][T18119] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 558.500040][T18119] ocfs2: Unmounting device (7,4) on (node local) [ 558.619681][T18157] loop0: detected capacity change from 0 to 2048 [ 558.706512][T18157] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 558.783227][T18165] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 558.822487][ T6457] udevd[6457]: incorrect nilfs2 checksum on /dev/loop0 [ 559.003214][T18157] syz.0.5203 (18157) used greatest stack depth: 18648 bytes left [ 559.086328][T18173] netlink: 'syz.4.5210': attribute type 13 has an invalid length. [ 559.148485][T18173] gretap0: refused to change device tx_queue_len [ 559.181206][T18173] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 559.231611][ T30] audit: type=1326 audit(1760700428.186:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18175 comm="syz.0.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cef8efc9 code=0x7ffc0000 [ 559.282872][ T30] audit: type=1326 audit(1760700428.186:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18175 comm="syz.0.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f87cef8efc9 code=0x7ffc0000 [ 559.350313][ T30] audit: type=1326 audit(1760700428.186:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18175 comm="syz.0.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cef8efc9 code=0x7ffc0000 [ 559.408187][T18181] netlink: 'syz.0.5214': attribute type 1 has an invalid length. [ 559.435367][ T30] audit: type=1326 audit(1760700428.186:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18175 comm="syz.0.5212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cef8efc9 code=0x7ffc0000 [ 559.666099][T18189] loop0: detected capacity change from 0 to 512 [ 559.691452][T18189] EXT4-fs: Ignoring removed i_version option [ 559.720306][T18189] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 559.747359][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5220'. [ 559.760604][T18189] EXT4-fs (loop0): 1 truncate cleaned up [ 559.793970][T18189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.816371][T18169] loop3: detected capacity change from 0 to 32768 [ 559.923396][T18169] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 559.954600][ T5876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.991170][T18203] loop1: detected capacity change from 0 to 764 [ 560.007245][T18169] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 30265 but max bitmap bits of 2048 [ 560.087790][T18169] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 560.097890][T18203] Symlink component flag not implemented [ 560.132440][T18169] OCFS2: File system is now read-only. [ 560.148989][T18169] (syz.3.5209,18169,1):ocfs2_search_chain:1817 ERROR: status = -30 [ 560.162574][T18169] (syz.3.5209,18169,1):ocfs2_search_chain:1940 ERROR: status = -30 [ 560.179401][T18169] (syz.3.5209,18169,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30 [ 560.219005][T18169] (syz.3.5209,18169,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 560.267783][T18169] (syz.3.5209,18169,1):ocfs2_claim_new_inode:2298 ERROR: status = -30 [ 560.281083][T18169] (syz.3.5209,18169,1):ocfs2_claim_new_inode:2313 ERROR: status = -30 [ 560.302531][T18169] (syz.3.5209,18169,1):ocfs2_mknod_locked:641 ERROR: status = -30 [ 560.312208][T18210] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5227'. [ 560.332597][T18169] (syz.3.5209,18169,1):ocfs2_mknod:388 ERROR: status = -30 [ 560.343652][T18169] (syz.3.5209,18169,1):ocfs2_mknod:505 ERROR: status = -30 [ 560.362490][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5229'. [ 560.385146][T18212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5229'. [ 560.456357][ T5886] ocfs2: Unmounting device (7,3) on (node local) [ 560.907151][T18235] loop4: detected capacity change from 0 to 1024 [ 560.968954][T18235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.067080][T18235] EXT4-fs error (device loop4): ext4_empty_dir:3109: inode #11: block 623: comm syz.4.5239: Attempting to read directory block (623) that is past i_size (638464) [ 561.232120][ T5889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.571494][T18270] program syz.0.5255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.918390][T18286] netlink: 'syz.0.5263': attribute type 21 has an invalid length. [ 561.927442][T18278] loop1: detected capacity change from 0 to 4096 [ 561.943496][T18278] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 562.009574][T18278] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 562.019308][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5263'. [ 562.046722][T18278] ntfs3(loop1): ino=19, mi_enum_attr [ 562.107829][T18278] ntfs3(loop1): failed to convert "c46c" to maccyrillic [ 562.141159][T18278] ntfs3(loop1): ino=20, mi_enum_attr [ 562.284041][T18296] loop3: detected capacity change from 0 to 64 [ 562.645973][T18298] loop0: detected capacity change from 0 to 8192 [ 562.749193][T18258] loop2: detected capacity change from 0 to 32768 [ 562.798194][T18258] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 562.859197][T18258] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 563.009030][T18321] netlink: 'syz.4.5279': attribute type 11 has an invalid length. [ 563.025107][T18258] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 563.027628][T18321] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5279'. [ 563.082387][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 563.089236][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 563.330238][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 225ms [ 563.360078][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 563.387041][T18258] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 563.497525][T18332] x_tables: unsorted entry at hook 2 [ 563.517639][T18306] loop1: detected capacity change from 0 to 32768 [ 563.541410][T18306] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5273 (18306) [ 563.610122][T18306] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 563.655798][T18306] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 563.766242][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5286'. [ 563.799818][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5286'. [ 563.895873][T18306] BTRFS info (device loop1): enabling ssd optimizations [ 563.935588][T18306] BTRFS info (device loop1): turning on async discard [ 563.979021][T18306] BTRFS info (device loop1): enabling free space tree [ 564.235928][ T5883] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 564.424269][T18325] loop0: detected capacity change from 0 to 32768 [ 564.432394][T18325] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5281 (18325) [ 564.502115][T18325] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 564.555528][T18325] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 564.678915][T18388] loop3: detected capacity change from 0 to 512 [ 564.693060][T18388] EXT4-fs: Ignoring removed nobh option [ 564.768933][T18388] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.5296: corrupted inode contents [ 564.815862][T18325] BTRFS info (device loop0): enabling ssd optimizations [ 564.822475][T18388] EXT4-fs (loop3): Remounting filesystem read-only [ 564.855174][T18325] BTRFS info (device loop0): turning on async discard [ 564.877134][T18325] BTRFS info (device loop0): enabling free space tree [ 564.889177][T18388] Quota error (device loop3): write_blk: dquota write failed [ 564.896724][T18388] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota [ 564.943815][T18388] EXT4-fs (loop3): 1 truncate cleaned up [ 564.951206][T18388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.042675][T18404] vlan0: entered promiscuous mode [ 565.066590][T18388] ext4 filesystem being mounted at /1080/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.100736][T18409] loop1: detected capacity change from 0 to 256 [ 565.129804][ T5876] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 565.243989][T18409] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 565.296347][ T5886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.594335][T18423] tmpfs: Bad value for 'mpol' [ 566.128217][T18439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5308'. [ 566.138179][T18439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5308'. [ 566.448766][T18447] loop0: detected capacity change from 0 to 256 [ 566.904451][T18461] usb usb1: usbfs: process 18461 (syz.0.5316) did not claim interface 1 before use [ 566.935351][T18463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 567.782201][ T4492] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.065462][T18459] loop2: detected capacity change from 0 to 32768 [ 568.634284][T18459] XFS (loop2): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 568.749385][T18459] XFS (loop2): ro->rw transition prohibited on norecovery mount [ 568.790419][T18534] random: crng reseeded on system resumption [ 568.970445][ T5879] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 569.282763][ T5934] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 569.337675][T18551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5348'. [ 569.466979][ T5934] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 569.487114][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.516850][ T5934] usb 5-1: Product: syz [ 569.527735][ T5934] usb 5-1: Manufacturer: syz [ 569.548260][ T5934] usb 5-1: SerialNumber: syz [ 569.595349][ T5934] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 569.611235][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 569.694714][ T30] audit: type=1326 audit(1760700437.970:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788a18efc9 code=0x7ffc0000 [ 569.771983][ T30] audit: type=1326 audit(1760700437.970:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788a18efc9 code=0x7ffc0000 [ 569.831599][ T30] audit: type=1326 audit(1760700438.007:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f788a18efc9 code=0x7ffc0000 [ 569.878833][ T30] audit: type=1326 audit(1760700438.007:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788a18efc9 code=0x7ffc0000 [ 569.916827][ T30] audit: type=1326 audit(1760700438.007:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.5353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788a18efc9 code=0x7ffc0000 [ 570.112234][ T5975] usb 5-1: USB disconnect, device number 2 [ 570.148625][T18581] netlink: 'syz.0.5362': attribute type 4 has an invalid length. [ 570.155484][T18578] xt_NFQUEUE: number of total queues is 0 [ 570.156471][T18581] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5362'. [ 570.306580][T18589] comedi comedi4: bad chanlist[0]=0x00004658 chan=18008 range length=2 [ 570.553440][T18601] loop1: detected capacity change from 0 to 16 [ 570.583684][T18601] erofs (device loop1): mounted with root inode @ nid 36. [ 570.801245][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 570.830789][ T24] ath9k_htc: Failed to initialize the device [ 570.862075][ T5975] usb 5-1: ath9k_htc: USB layer deinitialized [ 571.264076][T18597] loop2: detected capacity change from 0 to 32768 [ 571.302241][T18597] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5369 (18597) [ 571.366887][T18597] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 571.409372][T18597] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 571.447845][T18597] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 571.528625][T18635] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 571.592466][T18597] BTRFS info (device loop2): rebuilding free space tree [ 571.653371][T18597] BTRFS info (device loop2): disabling free space tree [ 571.678213][T18597] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 571.742154][T18597] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 571.782426][T18597] BTRFS info (device loop2): setting nodatasum [ 571.813573][T18597] BTRFS info (device loop2): disabling tree log [ 571.824586][T18657] tmpfs: Bad value for 'mpol' [ 571.857903][T18597] BTRFS info (device loop2): turning on async discard [ 571.864882][T18597] BTRFS info (device loop2): enabling disk space caching [ 571.893611][T18597] BTRFS info (device loop2): force clearing of disk cache [ 571.933114][T18597] BTRFS info (device loop2): force zlib compression, level 3 [ 572.064374][T18626] loop3: detected capacity change from 0 to 32768 [ 572.117761][T18626] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 572.128425][ T5879] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 572.245246][T18679] netlink: 'syz.1.5396': attribute type 3 has an invalid length. [ 572.277574][T18679] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5396'. [ 572.290126][T18626] XFS (loop3): Ending clean mount [ 572.340948][T18626] XFS (loop3): Quotacheck needed: Please wait. [ 572.435413][T18626] XFS (loop3): Quotacheck: Done. [ 572.600710][T18691] xt_l2tp: invalid flags combination: c [ 572.634000][ T5886] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 573.032791][T18700] loop0: detected capacity change from 0 to 4096 [ 573.059640][T18700] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 573.152073][T18700] ntfs3(loop0): ino=18, mi_enum_attr [ 573.188525][T18700] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 573.277504][T18700] ntfs3(loop0): ino=0, attr_set_size [ 573.383228][T18711] unsupported nla_type 52263 [ 573.887176][T18727] loop4: detected capacity change from 0 to 2048 [ 573.956910][T18727] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 574.288237][T18747] loop3: detected capacity change from 0 to 256 [ 574.288458][T18751] loop4: detected capacity change from 0 to 256 [ 574.358702][T18747] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 574.414677][T18747] FAT-fs (loop3): Filesystem has been set read-only [ 574.450027][T18751] FAT-fs (loop4): Directory bread(block 64) failed [ 574.509148][T18751] FAT-fs (loop4): Directory bread(block 65) failed [ 574.553097][T18751] FAT-fs (loop4): Directory bread(block 66) failed [ 574.561629][T18751] FAT-fs (loop4): Directory bread(block 67) failed [ 574.584168][T18751] FAT-fs (loop4): Directory bread(block 68) failed [ 574.590744][T18751] FAT-fs (loop4): Directory bread(block 69) failed [ 574.635139][T18751] FAT-fs (loop4): Directory bread(block 70) failed [ 574.669673][T18751] FAT-fs (loop4): Directory bread(block 71) failed [ 574.676318][T18751] FAT-fs (loop4): Directory bread(block 72) failed [ 574.721465][T18751] FAT-fs (loop4): Directory bread(block 73) failed [ 574.800310][T18772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5433'. [ 574.833719][T18772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5433'. [ 574.856186][T18775] netlink: 'syz.1.5434': attribute type 4 has an invalid length. [ 575.018070][T18778] netlink: 'syz.2.5436': attribute type 2 has an invalid length. [ 575.117982][T18786] loop4: detected capacity change from 0 to 512 [ 575.237904][T18786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.350332][T18801] netlink: 'syz.1.5441': attribute type 4 has an invalid length. [ 575.357752][T18786] ext4 filesystem being mounted at /1060/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.370547][T18801] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.5441'. [ 575.619133][ T5889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.641449][ T30] audit: type=1326 audit(1760700443.536:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18809 comm="syz.1.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788a18efc9 code=0x7ffc0000 [ 575.729256][ T30] audit: type=1326 audit(1760700443.536:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18809 comm="syz.1.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788a18efc9 code=0x7ffc0000 [ 575.853863][ T30] audit: type=1326 audit(1760700443.564:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18809 comm="syz.1.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f788a18efc9 code=0x7ffc0000 [ 575.942319][ T30] audit: type=1326 audit(1760700443.564:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18809 comm="syz.1.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788a18efc9 code=0x7ffc0000 [ 576.014407][ T30] audit: type=1326 audit(1760700443.564:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18809 comm="syz.1.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788a18efc9 code=0x7ffc0000 [ 576.153098][T18769] loop3: detected capacity change from 0 to 32768 [ 576.263063][T18769] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 576.287262][T18835] netlink: 'syz.2.5456': attribute type 10 has an invalid length. [ 576.330493][T18835] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5456'. [ 576.340686][T18835] veth0_vlan: entered allmulticast mode [ 576.347138][T18835] bridge0: port 3(veth0_vlan) entered blocking state [ 576.363906][T18835] bridge0: port 3(veth0_vlan) entered disabled state [ 576.430934][T18835] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 576.465355][T18769] XFS (loop3): Ending clean mount [ 576.549505][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 576.555909][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.612863][T18854] loop1: detected capacity change from 0 to 16 [ 576.680686][T18854] erofs (device loop1): mounted with root inode @ nid 36. [ 576.703327][ T5886] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 576.756655][T18854] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 576.769643][T18860] loop2: detected capacity change from 0 to 1024 [ 576.829306][T18854] erofs (device loop1): read error -117 @ 43 of nid 36 [ 577.022293][ T12] hfsplus: b-tree write err: -5, ino 4 [ 577.269148][T18871] loop0: detected capacity change from 0 to 2048 [ 577.334224][T18871] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 577.421821][T18880] usb usb8: usbfs: process 18880 (syz.2.5471) did not claim interface 0 before use [ 577.683582][T18900] netlink: 'syz.1.5477': attribute type 11 has an invalid length. [ 577.739197][T18900] netlink: 'syz.1.5477': attribute type 11 has an invalid length. [ 577.774176][T18900] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5477'. [ 577.987410][T18912] loop3: detected capacity change from 0 to 16 [ 578.014188][T18912] erofs (device loop3): mounted with root inode @ nid 36. [ 578.032350][T18914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5483'. [ 578.073403][T18912] erofs (device loop3): inline data across blocks @ nid 36 [ 578.588706][T18935] loop3: detected capacity change from 0 to 512 [ 578.756130][T18935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.849827][T18935] ext4 filesystem being mounted at /1109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.910234][T18908] loop0: detected capacity change from 0 to 32768 [ 578.953075][T18908] [ 578.953075][T18908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 578.953075][T18908] [ 578.953320][T18940] loop4: detected capacity change from 0 to 4096 [ 579.022176][T18908] JFS: metapage_get_blocks failed [ 579.040584][T18940] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 579.057185][ T5886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.067477][T18908] ERROR: (device loop0): release_metapage: metapage_write_one() failed [ 579.067477][T18908] [ 579.123986][T18908] ERROR: (device loop0): diWrite: ixpxd invalid [ 579.123986][T18908] [ 579.155558][T18940] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 579.195878][T18908] ERROR: (device loop0): txCommit: [ 579.195878][T18908] [ 579.208113][T18940] ntfs3(loop4): ino=19, mi_enum_attr [ 579.243204][T18918] loop2: detected capacity change from 0 to 32768 [ 579.307918][T18918] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5485 (18918) [ 579.328408][T18940] ntfs3(loop4): failed to convert "c46c" to default [ 579.378650][T18918] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 579.401228][T18940] ntfs3(loop4): ino=20, mi_enum_attr [ 579.413806][T18918] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 579.429463][ T5876] [ 579.429463][ T5876] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 579.429463][ T5876] [ 579.454830][ T5876] [ 579.454830][ T5876] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 579.454830][ T5876] [ 579.685220][T18918] BTRFS info (device loop2): enabling ssd optimizations [ 579.692233][T18918] BTRFS info (device loop2): turning on async discard [ 579.705639][T18918] BTRFS info (device loop2): enabling free space tree [ 579.887999][T18983] netlink: 'syz.4.5502': attribute type 5 has an invalid length. [ 579.951451][T18983] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.5502'. [ 579.961612][ T5879] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 580.215821][T18997] netlink: 'syz.4.5507': attribute type 4 has an invalid length. [ 580.228829][T18998] binder: 18996:18998 ioctl c018620c 200000000380 returned -22 [ 580.270008][T18997] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5507'. [ 580.334584][T18997] wlan1: mtu less than device minimum [ 580.500378][T19008] bridge3: entered promiscuous mode [ 580.546028][T19010] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.5512'. [ 581.009183][ T5975] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 581.206058][ T5975] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 581.243314][ T5975] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 581.253017][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.274374][ T5975] usb 2-1: Product: syz [ 581.287479][ T5975] usb 2-1: Manufacturer: syz [ 581.292123][ T5975] usb 2-1: SerialNumber: syz [ 581.352661][T19049] loop4: detected capacity change from 0 to 128 [ 581.408856][T19049] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 581.445626][T19053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5532'. [ 581.463018][T19053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5532'. [ 581.533470][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 581.561073][ T5975] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 581.599994][ T5975] usb 2-1: USB disconnect, device number 7 [ 581.625541][ T5975] usblp0: removed [ 581.806766][T19067] xt_l2tp: missing protocol rule (udp|l2tpip) [ 582.289452][T19086] loop1: detected capacity change from 0 to 128 [ 582.605107][T19073] loop0: detected capacity change from 0 to 32768 [ 582.649471][T19073] (syz.0.5542,19073,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 582.713515][T19073] (syz.0.5542,19073,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 582.779108][T19073] JBD2: Ignoring recovery information on journal [ 582.884064][T19073] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 582.887199][T19107] netlink: 'syz.1.5558': attribute type 11 has an invalid length. [ 582.903146][T19107] netlink: 'syz.1.5558': attribute type 11 has an invalid length. [ 582.911031][T19107] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5558'. [ 583.248731][ T5876] ocfs2: Unmounting device (7,0) on (node local) [ 583.707693][T19139] netlink: 'syz.2.5570': attribute type 10 has an invalid length. [ 583.750005][T19139] hsr0: entered promiscuous mode [ 583.789618][T19139] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 583.821823][T19139] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 583.843300][T19139] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 583.886747][ T30] audit: type=1400 audit(1760700451.243:78): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=19146 comm="syz.0.5563" [ 584.375598][T19172] netlink: 'syz.4.5581': attribute type 2 has an invalid length. [ 584.430555][T19172] : entered promiscuous mode [ 584.537745][ T5975] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 584.708612][ T5975] usb 2-1: Using ep0 maxpacket: 32 [ 584.715565][ T5975] usb 2-1: config index 0 descriptor too short (expected 12546, got 36) [ 584.740194][ T5975] usb 2-1: config 85 has too many interfaces: 125, using maximum allowed: 32 [ 584.782995][ T5975] usb 2-1: config 85 contains an unexpected descriptor of type 0x2, skipping [ 584.796831][T19188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5590'. [ 584.802716][ T5975] usb 2-1: config 85 has an invalid descriptor of length 0, skipping remainder of the config [ 584.846362][ T5975] usb 2-1: config 85 has 0 interfaces, different from the descriptor's value: 125 [ 584.847398][T19190] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 584.868848][ T5975] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 584.879633][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.887683][ T5975] usb 2-1: Product: syz [ 584.887965][T19190] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 584.900603][ T5975] usb 2-1: Manufacturer: syz [ 584.943425][ T5975] usb 2-1: SerialNumber: syz [ 585.222384][ T5975] usb 2-1: USB disconnect, device number 8 [ 585.372262][T19171] loop0: detected capacity change from 0 to 32768 [ 585.383362][T19171] gfs2: fsid=commit: Trying to join cluster "lock_nolock", "commit" [ 585.391522][T19171] gfs2: fsid=commit: Now mounting FS (format 1802)... [ 585.412105][T19217] sctp: [Deprecated]: syz.2.5602 (pid 19217) Use of int in maxseg socket option. [ 585.412105][T19217] Use struct sctp_assoc_value instead [ 585.434097][T19171] gfs2: fsid=commit.0: journal 0 mapped with 7 extents in 0ms [ 585.443297][T11826] gfs2: fsid=commit.0: jid=0, already locked for use [ 585.450111][T11826] gfs2: fsid=commit.0: jid=0: Looking at journal... [ 585.460539][T11826] kworker/0:7: attempt to access beyond end of device [ 585.460539][T11826] loop0: rw=0, sector=19193135816, nr_sectors = 8 limit=32768 [ 585.554475][T11826] gfs2: fsid=commit.0: jid=0: Failed [ 585.569134][T19171] gfs2: fsid=commit.0: error recovering journal 0: -5 [ 585.886563][T19232] openvswitch: netlink: Tunnel attr 246 out of range max 16 [ 586.104073][T19239] loop0: detected capacity change from 0 to 2048 [ 586.161289][T19239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.269317][T19239] EXT4-fs error (device loop0): __ext4_iget:5443: inode #12: block 2: comm syz.0.5612: invalid block [ 586.324451][T19253] : renamed from veth0_to_bond (while UP) [ 586.422771][ T5876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.470807][T19259] loop2: detected capacity change from 0 to 256 [ 586.515775][T19259] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 586.554958][T19266] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5621'. [ 586.820542][ T5975] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 586.921363][ T30] audit: type=1326 audit(1760700454.087:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19276 comm="syz.4.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194258efc9 code=0x7ffc0000 [ 586.980854][ T30] audit: type=1326 audit(1760700454.106:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19276 comm="syz.4.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f194258efc9 code=0x7ffc0000 [ 587.027787][ T5975] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 587.036151][ T5975] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 587.056595][ T5975] usb 3-1: config 8 has no interface number 0 [ 587.067424][ T30] audit: type=1326 audit(1760700454.106:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19276 comm="syz.4.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194258efc9 code=0x7ffc0000 [ 587.072244][ T5975] usb 3-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 587.123741][ T30] audit: type=1326 audit(1760700454.106:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19276 comm="syz.4.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194258efc9 code=0x7ffc0000 [ 587.195167][ T5975] usb 3-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 587.205861][T19289] loop1: detected capacity change from 0 to 1024 [ 587.234168][T19291] netlink: 'syz.0.5636': attribute type 28 has an invalid length. [ 587.244444][ T5975] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x8A has invalid maxpacket 45699, setting to 64 [ 587.263258][T19291] netlink: 'syz.0.5636': attribute type 3 has an invalid length. [ 587.271014][T19291] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5636'. [ 587.280149][ T5975] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 587.306550][ T5975] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 587.331123][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.364609][T19259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 587.399144][T19293] loop4: detected capacity change from 0 to 2048 [ 587.413682][ T5975] usb 3-1: NFC: intf ffff888079e15000 id ffffffff8eb1f620 [ 587.472655][T19293] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 587.491270][ T5975] nfcmrvl 3-1:8.80: NFC: registered with nci successfully [ 587.548358][T19293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 587.634047][ T5975] usb 3-1: USB disconnect, device number 123 [ 587.652967][ T5975] usb 3-1: NFC: intf ffff888079e15000 [ 587.852141][T19312] loop0: detected capacity change from 0 to 2048 [ 587.952422][T19317] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 588.019241][T19312] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 588.045796][T19312] Remounting filesystem read-only [ 588.132640][ T5876] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 588.421156][T19338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5657'. [ 588.661989][T19352] loop4: detected capacity change from 0 to 16 [ 588.681344][T19352] erofs (device loop4): mounted with root inode @ nid 36. [ 588.732524][T19352] syz.4.5663: attempt to access beyond end of device [ 588.732524][T19352] loop4: rw=524288, sector=128, nr_sectors = 8 limit=16 [ 588.820651][T19352] syz.4.5663: attempt to access beyond end of device [ 588.820651][T19352] loop4: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 588.867320][T19352] erofs (device loop4): read error -95 @ 0 of nid 89 [ 588.888631][ T30] audit: type=1800 audit(1760700455.930:83): pid=19352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5663" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 588.974360][T19361] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 589.019758][T19351] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 589.030955][T19351] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 589.124707][T19351] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 589.141671][T19351] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 589.214911][T19351] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 589.253103][T19351] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 589.284322][T19351] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 589.308159][T19375] netlink: 'syz.4.5675': attribute type 10 has an invalid length. [ 589.369496][T19375] hsr0: entered promiscuous mode [ 589.402315][T19375] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 589.444488][T19375] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 589.509253][T19375] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 589.528376][T19379] netlink: 'syz.1.5677': attribute type 46 has an invalid length. [ 589.585264][T19384] loop2: detected capacity change from 0 to 64 [ 589.968961][T19400] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5687'. [ 590.025483][T19402] loop4: detected capacity change from 0 to 256 [ 590.059011][T19402] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 590.241344][T19404] loop2: detected capacity change from 0 to 4096 [ 590.274258][T19404] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 590.315055][T19413] loop1: detected capacity change from 0 to 256 [ 590.320049][T19414] program syz.4.5693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.357254][T19404] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 590.401556][T19404] ntfs3(loop2): ino=19, mi_enum_attr [ 590.410133][T19413] FAT-fs (loop1): Directory bread(block 64) failed [ 590.416707][T19413] FAT-fs (loop1): Directory bread(block 65) failed [ 590.459899][T19413] FAT-fs (loop1): Directory bread(block 66) failed [ 590.483100][T19404] ntfs3(loop2): failed to convert "c46c" to cp860 [ 590.502610][T19404] ntfs3(loop2): ino=20, mi_enum_attr [ 590.509422][T19413] FAT-fs (loop1): Directory bread(block 67) failed [ 590.553163][T19413] FAT-fs (loop1): Directory bread(block 68) failed [ 590.577974][T19413] FAT-fs (loop1): Directory bread(block 69) failed [ 590.586927][T19413] FAT-fs (loop1): Directory bread(block 70) failed [ 590.629395][T19418] loop4: detected capacity change from 0 to 2048 [ 590.635970][T19413] FAT-fs (loop1): Directory bread(block 71) failed [ 590.662925][T19413] FAT-fs (loop1): Directory bread(block 72) failed [ 590.669495][T19413] FAT-fs (loop1): Directory bread(block 73) failed [ 590.719528][T19418] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 591.156820][ T5881] Bluetooth: hci0: command 0x0c1a tx timeout [ 591.222412][T19440] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 591.222682][T19406] loop3: detected capacity change from 0 to 32768 [ 591.305445][T19442] netlink: 'syz.0.5710': attribute type 4 has an invalid length. [ 591.330084][ T5881] Bluetooth: hci1: command 0x0406 tx timeout [ 591.383694][T19448] loop4: detected capacity change from 0 to 256 [ 591.411298][ T5881] Bluetooth: hci3: command 0x0406 tx timeout [ 591.496748][ T5881] Bluetooth: hci4: command 0x0406 tx timeout [ 591.754734][ T5934] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 591.848529][T19462] loop3: detected capacity change from 0 to 4096 [ 591.882231][T19462] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 591.947847][T19468] loop2: detected capacity change from 0 to 128 [ 591.959145][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 591.996587][ T5934] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 592.014989][ T5934] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 592.050758][ T5934] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 592.086379][ T5934] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 592.104227][T19473] loop1: detected capacity change from 0 to 512 [ 592.130109][ T5934] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.166569][ T5934] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 592.178100][T19473] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 592.187467][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.304875][T19473] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 592.418571][T19473] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5723: bg 0: block 248: padding at end of block bitmap is not set [ 592.461078][T19473] Quota error (device loop1): write_blk: dquota write failed [ 592.489523][T19473] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 592.520279][T19473] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.5723: Failed to acquire dquot type 1 [ 592.554881][T19473] EXT4-fs (loop1): 1 truncate cleaned up [ 592.576996][T19473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 592.654403][T19473] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 592.683694][T19473] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 592.703530][ T5934] usb 1-1: USB disconnect, device number 126 [ 592.725970][T19473] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.5723: Failed to acquire dquot type 1 [ 592.743356][T19494] loop4: detected capacity change from 0 to 1024 [ 592.871289][ T5883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 592.886694][ T13] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 592.896662][ T13] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 593.004355][ T10] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 593.056843][T19505] loop4: detected capacity change from 0 to 1764 [ 593.084310][T19508] loop1: detected capacity change from 0 to 65 [ 593.096879][T19508] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 593.141985][T19505] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 593.207560][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 593.228643][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 593.274210][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 128, setting to 64 [ 593.345644][ T10] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 593.377596][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.388981][ T5881] Bluetooth: hci0: command 0x0c1a tx timeout [ 593.397071][ T10] usb 3-1: Product: syz [ 593.446422][T19513] loop0: detected capacity change from 0 to 64 [ 593.447366][ T10] usb 3-1: Manufacturer: syz [ 593.505168][ T10] usb 3-1: SerialNumber: syz [ 593.509157][T19513] Trying to free block not in datazone [ 593.526507][T19513] Trying to free block not in datazone [ 593.536567][ T10] usb 3-1: config 0 descriptor?? [ 593.550506][ T5881] Bluetooth: hci1: command 0x0406 tx timeout [ 593.566704][T19513] Trying to free block not in datazone [ 593.566997][T19498] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 593.588326][T19513] Trying to free block not in datazone [ 593.593930][T19513] Trying to free block not in datazone [ 593.604911][T19513] minix_free_block (loop0:6): bit already cleared [ 593.634935][ T5881] Bluetooth: hci3: command 0x0406 tx timeout [ 593.656500][T19513] Trying to free block not in datazone [ 593.690899][T19513] Trying to free block not in datazone [ 593.741704][ T10] rc_core: IR keymap rc-streamzap not found [ 593.747677][ T10] Registered IR keymap rc-empty [ 593.775265][ T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 593.892915][T19522] loop1: detected capacity change from 0 to 4096 [ 593.897242][ T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input60 [ 593.923274][T19522] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 593.974771][ T10] usb 3-1: USB disconnect, device number 124 [ 594.066836][T19522] ntfs3(loop1): ino=0, attr_set_size [ 594.372620][T19546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5757'. [ 594.392629][T19546] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5757'. [ 594.433925][T19546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5757'. [ 594.589217][T19552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.790733][T19561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5764'. [ 594.813730][T19562] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 594.922120][T19561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5764'. [ 595.111634][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 595.296603][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 595.315985][ T24] usb 4-1: config 1 has an invalid descriptor of length 92, skipping remainder of the config [ 595.355990][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 595.386545][ T24] usb 4-1: config 1 has no interface number 0 [ 595.405287][ T24] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 595.439849][ T24] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 595.483570][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 595.504325][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.516302][ T24] usb 4-1: Product: syz [ 595.520502][ T24] usb 4-1: Manufacturer: syz [ 595.539281][ T24] usb 4-1: SerialNumber: syz [ 595.579698][ T24] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 595.603559][ T24] cdc_ncm 4-1:1.1: bind() failure [ 595.791403][ T5934] usb 4-1: USB disconnect, device number 9 [ 595.876480][T19582] loop1: detected capacity change from 0 to 32768 [ 595.894152][T19582] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5774 (19582) [ 595.930785][T19582] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 595.933350][ T5986] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 595.959307][T19582] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 595.972266][T19606] xt_CT: No such helper "netbios-ns" [ 596.116496][ T5986] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 596.197459][T19582] BTRFS info (device loop1): enabling ssd optimizations [ 596.206975][ T5986] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 596.233406][T19582] BTRFS info (device loop1): turning on async discard [ 596.243170][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.260099][T19582] BTRFS info (device loop1): enabling free space tree [ 596.271551][ T5986] usb 3-1: Product: syz [ 596.284299][ T5986] usb 3-1: Manufacturer: syz [ 596.291624][ T5986] usb 3-1: SerialNumber: syz [ 596.310821][ T5986] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 596.337206][T11826] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 596.387167][T19582] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 596.547373][T19638] loop3: detected capacity change from 0 to 64 [ 596.607737][ T5883] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 596.621865][ C0] usb 3-1: ath9k_htc: invalid pkt_len (fffb) [ 596.667931][T19642] netlink: 'syz.0.5794': attribute type 10 has an invalid length. [ 596.702635][T19642] hsr0: entered promiscuous mode [ 596.756237][T19642] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 596.792939][T19642] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 596.823683][T19642] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 596.837478][ T5934] usb 3-1: USB disconnect, device number 125 [ 597.108522][T19654] netlink: 'syz.1.5795': attribute type 10 has an invalid length. [ 597.129301][T19656] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5801'. [ 597.138742][T19656] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5801'. [ 597.186749][T19654] team0: Port device syz_tun added [ 597.238371][T19660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5804'. [ 597.322280][T19664] loop1: detected capacity change from 0 to 512 [ 597.360563][T19664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.382416][T19664] ext4 filesystem being mounted at /1102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.473281][ T5975] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 597.489227][T11826] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 597.489231][T19664] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 3: comm syz.1.5806: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 597.527783][T11826] ath9k_htc: Failed to initialize the device [ 597.566156][ T5934] usb 3-1: ath9k_htc: USB layer deinitialized [ 597.632985][ T5883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.643839][ T5975] usb 1-1: Using ep0 maxpacket: 8 [ 597.674175][ T5975] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 597.685797][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.712149][ T5975] usb 1-1: Product: syz [ 597.716384][ T5975] usb 1-1: Manufacturer: syz [ 597.750672][ T5975] usb 1-1: SerialNumber: syz [ 597.777916][ T5975] usb 1-1: config 0 descriptor?? [ 598.025877][ T5975] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 598.249147][ T5975] usb write operation failed. (-71) [ 598.268208][ T5975] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 598.279627][T19701] loop4: detected capacity change from 0 to 4096 [ 598.296891][ T5975] dvbdev: DVB: registering new adapter (Terratec H7) [ 598.334017][ T5975] usb 1-1: media controller created [ 598.344593][ T5975] usb read operation failed. (-71) [ 598.356187][ T5975] usb write operation failed. (-71) [ 598.388647][ T5975] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 598.390043][T19708] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 598.411353][ T5975] usb 1-1: USB disconnect, device number 127 [ 598.423215][T19701] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 598.961242][T19724] loop0: detected capacity change from 0 to 8 [ 598.986433][T19724] SQUASHFS error: Failed to read block 0x2fc: -5 [ 598.994163][T19724] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 599.001780][T19724] SQUASHFS error: Unable to read directory block [247:26] [ 599.022956][T11826] usb 3-1: new low-speed USB device number 126 using dummy_hcd [ 599.035543][ T5975] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 599.187354][T11826] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 599.205760][T11826] usb 3-1: string descriptor 0 read error: -22 [ 599.212477][T11826] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.222126][T11826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.237743][T11826] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 599.247081][ T5975] usb 5-1: Using ep0 maxpacket: 16 [ 599.263497][ T5975] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 599.290165][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.298190][ T5975] usb 5-1: Product: syz [ 599.311473][ T5975] usb 5-1: Manufacturer: syz [ 599.316108][ T5975] usb 5-1: SerialNumber: syz [ 599.329835][ T5975] r8152-cfgselector 5-1: Unknown version 0x0000 [ 599.345009][ T5975] r8152-cfgselector 5-1: config 0 descriptor?? [ 599.401770][T19726] loop0: detected capacity change from 0 to 32768 [ 599.435316][T19726] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 599.473893][T11826] usb 3-1: USB disconnect, device number 126 [ 599.544241][T19726] XFS (loop0): Ending clean mount [ 599.559350][T19726] XFS (loop0): Quotacheck needed: Please wait. [ 599.617913][T19726] XFS (loop0): Quotacheck: Done. [ 599.695055][ T5876] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 599.717410][T19728] loop1: detected capacity change from 0 to 32768 [ 599.773016][T19728] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 599.818945][ T5955] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 599.885830][T19728] XFS (loop1): Ending clean mount [ 599.904016][T19728] XFS (loop1): Quotacheck needed: Please wait. [ 599.944189][T19728] XFS (loop1): Quotacheck: Done. [ 599.994833][ T5883] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 600.528456][T19768] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5846'. [ 600.901856][T19786] loop2: detected capacity change from 0 to 736 [ 601.042600][T19794] netlink: zone id is out of range [ 601.056904][T19794] netlink: get zone limit has 4 unknown bytes [ 601.467157][T19812] loop4: detected capacity change from 0 to 22 [ 601.487549][T19812] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 601.510392][T19812] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 601.577967][ T5975] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 601.603816][T19823] loop1: detected capacity change from 0 to 256 [ 601.660358][T19823] FAT-fs (loop1): Directory bread(block 64) failed [ 601.687635][T19823] FAT-fs (loop1): Directory bread(block 65) failed [ 601.704431][T19823] FAT-fs (loop1): Directory bread(block 66) failed [ 601.712035][T19823] FAT-fs (loop1): Directory bread(block 67) failed [ 601.721942][T19823] FAT-fs (loop1): Directory bread(block 68) failed [ 601.729856][T19823] FAT-fs (loop1): Directory bread(block 69) failed [ 601.736645][T19823] FAT-fs (loop1): Directory bread(block 70) failed [ 601.759742][T19823] FAT-fs (loop1): Directory bread(block 71) failed [ 601.771073][ T5975] usb 1-1: Using ep0 maxpacket: 32 [ 601.772893][T19823] FAT-fs (loop1): Directory bread(block 72) failed [ 601.795040][ T5975] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 601.803677][T19823] FAT-fs (loop1): Directory bread(block 73) failed [ 601.826212][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.866079][ T5975] usb 1-1: config 0 descriptor?? [ 601.895321][ T5975] gspca_main: sq930x-2.14.0 probing 041e:403c [ 601.895708][T19823] syz.1.5874: attempt to access beyond end of device [ 601.895708][T19823] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 601.922497][T19823] syz.1.5874: attempt to access beyond end of device [ 601.922497][T19823] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 601.972302][ T30] audit: type=1800 audit(1760700468.165:84): pid=19823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5874" name="file0" dev="loop1" ino=1048656 res=0 errno=0 [ 602.324113][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5882'. [ 602.329080][ T5975] gspca_sq930x: ucbus_write failed -71 [ 602.334692][T11826] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 602.371469][ T5975] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 602.392216][ T5975] usb 1-1: USB disconnect, device number 2 [ 602.570958][T11826] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 602.589840][T11826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.611933][T11826] usb 5-1: Product: syz [ 602.620272][T19848] loop3: detected capacity change from 0 to 2048 [ 602.652969][T11826] usb 5-1: Manufacturer: syz [ 602.662790][T19851] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 602.667016][T11826] usb 5-1: SerialNumber: syz [ 602.700421][T19848] NILFS (loop3): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 602.718277][T19848] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 602.732788][T11826] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 602.759945][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 602.780574][T19848] Remounting filesystem read-only [ 602.797947][T19848] NILFS (loop3): error -5 truncating bmap (ino=16) [ 602.879698][ T5886] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 602.993065][ C0] usb 5-1: ath: unknown panic pattern! [ 603.045351][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5890'. [ 603.075005][ T5934] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 603.200356][T19863] loop0: detected capacity change from 0 to 1024 [ 603.216025][ T5935] usb 5-1: USB disconnect, device number 4 [ 603.247435][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 603.254619][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 603.256867][T19863] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 603.270317][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 603.286137][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 603.307062][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 603.319792][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 603.336109][ T5934] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 603.359722][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.379357][ T5934] usb 2-1: Product: syz [ 603.382913][T19863] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.5892: lblock 2 mapped to illegal pblock 2 (length 1) [ 603.394609][ T5934] usb 2-1: Manufacturer: syz [ 603.402109][ T5934] usb 2-1: SerialNumber: syz [ 603.410633][ T5934] usb 2-1: config 0 descriptor?? [ 603.416567][T19855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 603.426044][T19863] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 603.439993][ T5934] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input62 [ 603.457323][ T5183] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 603.487747][T19863] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.5892: lblock 0 mapped to illegal pblock 48 (length 1) [ 603.545665][ T5183] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 603.562796][T19863] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 603.593144][ T5183] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 603.614766][T19863] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.5892: Failed to acquire dquot type 0 [ 603.634177][ T5183] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 603.662700][T19863] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 603.678203][ T6457] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 603.695928][T19863] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.5892: mark_inode_dirty error [ 603.730613][T19863] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 603.748324][ T5183] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 603.778077][T19863] EXT4-fs (loop0): 1 orphan inode deleted [ 603.794885][ T12] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 603.806435][T19863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.823705][T19855] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 603.882528][ T5183] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 603.883634][ T12] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 603.920057][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 603.942317][ T10] ath9k_htc: Failed to initialize the device [ 603.947978][ T5934] usb 2-1: USB disconnect, device number 9 [ 603.976116][ T5935] usb 5-1: ath9k_htc: USB layer deinitialized [ 603.985637][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 604.109952][ T5876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.135664][ T60] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 604.183381][ T60] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 604.208236][ T60] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 604.262380][ T5876] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 604.293468][ T5876] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 604.311540][ T5876] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 604.878363][T19917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5917'. [ 605.206405][T19897] loop3: detected capacity change from 0 to 32768 [ 605.298669][T19897] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 605.511308][T19897] XFS (loop3): Ending clean mount [ 605.651725][ T5886] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 605.666830][ T5955] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 605.784104][T19955] binder: 19954:19955 ioctl 40046210 0 returned -14 [ 605.843476][ T10] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 605.864931][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 605.875148][ T5955] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 605.905597][ T5955] usb 2-1: config 179 has no interface number 0 [ 605.940115][ T5955] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 605.977793][ T5955] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 605.995885][T19959] netlink: 'syz.0.5936': attribute type 1 has an invalid length. [ 606.014991][ T5955] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 606.052174][ T5955] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 606.066608][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 606.079575][T19959] netlink: 'syz.0.5936': attribute type 1 has an invalid length. [ 606.090880][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 606.103785][ T5955] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 606.119901][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.133850][ T5955] usb 2-1: config 179 interface 65 has no altsetting 0 [ 606.140794][ T5955] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 606.150350][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 606.165977][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.174133][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 606.195418][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 606.217759][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 606.229668][ T5955] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input63 [ 606.266728][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.307356][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 606.347939][T19966] loop0: detected capacity change from 0 to 512 [ 606.354825][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 606.412582][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 606.423652][T19966] EXT4-fs: Ignoring removed mblk_io_submit option [ 606.430975][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 606.443722][ T5935] usb 2-1: USB disconnect, device number 10 [ 606.454857][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.508440][T19966] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 606.530552][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 606.551991][T19966] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.5938: attempt to clear invalid blocks 2 len 1 [ 606.585932][T19966] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 606.586468][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 606.605176][T19966] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5938: invalid indirect mapped block 1819239214 (level 0) [ 606.650659][T19966] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5938: invalid indirect mapped block 1819239214 (level 1) [ 606.681129][ T10] usb 3-1: string descriptor 0 read error: -22 [ 606.691327][T19966] EXT4-fs (loop0): 1 truncate cleaned up [ 606.698389][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 606.708971][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.722519][T19966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.758429][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 606.849730][ T5876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.103249][T19967] loop4: detected capacity change from 0 to 32768 [ 607.119269][T19967] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 607.121832][ T5934] usb 3-1: USB disconnect, device number 127 [ 607.199240][T19967] XFS (loop4): Ending clean mount [ 607.208785][T19967] XFS (loop4): Quotacheck needed: Please wait. [ 607.297771][T19967] XFS (loop4): Quotacheck: Done. [ 607.378374][T19994] tmpfs: Bad value for 'mpol' [ 607.416225][ T5889] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 608.138704][T19990] loop3: detected capacity change from 0 to 32768 [ 608.177904][T20025] loop4: detected capacity change from 0 to 8 [ 608.184839][T19990] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5946 (19990) [ 608.205216][T20025] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 608.243331][ T6125] udevd[6125]: incorrect cramfs checksum on /dev/loop4 [ 608.252533][T20030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5963'. [ 608.253412][T20025] cramfs: Error -5 while decompressing! [ 608.286048][T19990] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 608.304275][T20025] cramfs: ffffffff99b07ef8(42)->ffff888030963000(4096) [ 608.311296][T19990] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 608.351124][ T6457] udevd[6457]: incorrect cramfs checksum on /dev/loop4 [ 608.430257][T20034] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 608.475970][T20036] loop0: detected capacity change from 0 to 512 [ 608.483112][T20036] EXT4-fs: Ignoring removed bh option [ 608.546065][T20036] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 608.617465][T20036] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 608.636083][T19990] BTRFS info (device loop3): enabling ssd optimizations [ 608.656350][T19990] BTRFS info (device loop3): turning on async discard [ 608.663259][T19990] BTRFS info (device loop3): enabling free space tree [ 608.701391][T20036] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 608.765577][T20036] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 608.793822][T19990] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 608.831243][T20036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.907356][T20065] tmpfs: Bad value for 'mpol' [ 608.948166][ T5886] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 608.960083][T20068] netlink: 'syz.4.5972': attribute type 21 has an invalid length. [ 608.973368][T20068] netlink: 'syz.4.5972': attribute type 1 has an invalid length. [ 608.984793][T20068] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5972'. [ 609.002054][ T5876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.073344][T20072] program syz.0.5976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 609.202822][ T30] audit: type=1400 audit(1760700474.937:85): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=20073 comm="syz.2.5978" [ 609.341121][T20081] Scaler: ================= START STATUS ================= [ 609.349076][T20081] Scaler: ================== END STATUS ================== [ 609.361731][T20079] loop1: detected capacity change from 0 to 1024 [ 609.871355][T20104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5992'. [ 609.882256][T20104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5992'. [ 609.891749][T20104] netlink: 21 bytes leftover after parsing attributes in process `syz.4.5992'. [ 609.930075][ T5955] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 609.993514][T20102] loop3: detected capacity change from 0 to 4096 [ 610.036119][T20110] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 610.043128][T20108] loop4: detected capacity change from 0 to 512 [ 610.103410][T20108] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 610.119863][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 610.159518][ T5955] usb 2-1: unable to get BOS descriptor or descriptor too short [ 610.175118][ T5955] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 610.183260][ T5955] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 610.192645][T20102] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 610.213945][T20108] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 610.265468][ T5955] usb 2-1: config 17 has no interface number 0 [ 610.276036][ T5955] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 610.312573][ T5955] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 32959, setting to 1024 [ 610.336451][ T5955] usb 2-1: config 17 interface 8 has no altsetting 0 [ 610.359595][ T5955] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 610.369338][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.401685][ T5955] usb 2-1: Product: syz [ 610.422306][ T5955] usb 2-1: Manufacturer: syz [ 610.427245][ T5955] usb 2-1: SerialNumber: syz [ 610.597892][T20122] ipt_rpfilter: unknown options [ 610.724950][ T5955] usb 2-1: selecting invalid altsetting 0 [ 610.822422][ T5955] usb 2-1: USB disconnect, device number 11 [ 610.927028][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.957492][T20134] PKCS8: Unsupported PKCS#8 version [ 611.064197][T20114] loop2: detected capacity change from 0 to 32768 [ 611.162547][T20114] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 611.218877][T20114] XFS (loop2): Ending clean mount [ 611.222464][T20114] XFS (loop2): Quotacheck needed: Please wait. [ 611.278958][T20114] XFS (loop2): Quotacheck: Done. [ 611.421946][ T5879] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 611.524989][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 611.706049][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 611.746588][ T10] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 611.761746][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.770898][ T10] usb 5-1: Product: syz [ 611.775103][ T10] usb 5-1: Manufacturer: syz [ 611.817610][ T10] usb 5-1: SerialNumber: syz [ 612.034629][T20177] loop2: detected capacity change from 0 to 4096 [ 612.064836][T20177] ntfs3(loop2): ino=3, Correct links count -> 2. [ 612.137953][T20181] geneve3: entered promiscuous mode [ 612.169151][T20181] geneve3: entered allmulticast mode [ 612.301982][ T10] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 612.316454][ T10] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 612.336740][T20185] loop3: detected capacity change from 0 to 256 [ 612.360864][ T10] usb 5-1: USB disconnect, device number 5 [ 612.379347][T20185] FAT-fs (loop3): Directory bread(block 1285) failed [ 612.418477][T20185] FAT-fs (loop3): Directory bread(block 1286) failed [ 612.425227][T20185] FAT-fs (loop3): Directory bread(block 1287) failed [ 612.463535][T20185] FAT-fs (loop3): Directory bread(block 1288) failed [ 612.505197][T20185] FAT-fs (loop3): Directory bread(block 1285) failed [ 612.513519][T20185] FAT-fs (loop3): Directory bread(block 1286) failed [ 612.545973][T20185] FAT-fs (loop3): Directory bread(block 1287) failed [ 612.553648][T20185] FAT-fs (loop3): Directory bread(block 1288) failed [ 612.563376][T20185] FAT-fs (loop3): Directory bread(block 1285) failed [ 612.570498][T20185] FAT-fs (loop3): Directory bread(block 1286) failed [ 612.681064][T20173] loop0: detected capacity change from 0 to 32768 [ 612.695214][T20175] loop1: detected capacity change from 0 to 32768 [ 612.718940][T20173] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6022 (20173) [ 612.761704][T20175] BTRFS info: device /dev/loop1 (7:1) using temp-fsid aad4e0a1-ac6f-4fbf-b02a-45b060f55766 [ 612.794193][T20175] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6024 (20175) [ 612.827094][T20193] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6032'. [ 612.853872][T20193] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6032'. [ 612.859938][T20175] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 612.881449][T20173] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 612.899353][T20193] netlink: 'syz.2.6032': attribute type 6 has an invalid length. [ 612.904496][T20191] loop3: detected capacity change from 0 to 4096 [ 612.914694][T20193] netlink: 'syz.2.6032': attribute type 5 has an invalid length. [ 612.914732][T20175] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 612.931367][T20193] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6032'. [ 612.933948][T20173] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 613.255540][T20175] BTRFS info (device loop1): enabling ssd optimizations [ 613.284488][T20175] BTRFS info (device loop1): turning on async discard [ 613.291319][T20175] BTRFS info (device loop1): enabling free space tree [ 613.317737][T20173] BTRFS info (device loop0): enabling ssd optimizations [ 613.324731][T20173] BTRFS info (device loop0): turning on async discard [ 613.379815][T20173] BTRFS info (device loop0): enabling free space tree [ 613.488902][T20173] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 613.511571][T20233] loop3: detected capacity change from 0 to 1024 [ 613.631226][ T5883] BTRFS info (device loop1): last unmount of filesystem aad4e0a1-ac6f-4fbf-b02a-45b060f55766 [ 613.737685][ T5876] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 614.363974][T20235] loop4: detected capacity change from 0 to 32768 [ 614.410039][T20235] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6037 (20235) [ 614.496875][T20235] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 614.547249][T20235] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 614.825413][T20235] BTRFS info (device loop4): rebuilding free space tree [ 614.888026][T20235] BTRFS info (device loop4): enabling ssd optimizations [ 614.936752][T20235] BTRFS info (device loop4): turning on async discard [ 614.952371][T20235] BTRFS info (device loop4): enabling free space tree [ 614.959409][T20235] BTRFS info (device loop4): force clearing of disk cache [ 615.231175][ T5889] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 616.095244][T20264] loop1: detected capacity change from 0 to 40427 [ 616.111611][T20323] netlink: 'syz.2.6071': attribute type 5 has an invalid length. [ 616.142567][T20323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6071'. [ 616.181531][T20264] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(218103808) [ 616.195217][T20264] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 616.232569][T20264] F2FS-fs (loop1): invalid crc value [ 616.277537][ T5935] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 616.407832][T20333] netlink: 'syz.2.6075': attribute type 46 has an invalid length. [ 616.436057][T20264] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 616.460697][T20264] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 616.477640][T20264] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 616.502331][ T5935] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 616.512487][ T5935] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 616.554144][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.603840][ T5935] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 616.986043][T20358] loop4: detected capacity change from 0 to 256 [ 617.024774][T20358] FAT-fs (loop4): Directory bread(block 64) failed [ 617.045369][T20358] FAT-fs (loop4): Directory bread(block 65) failed [ 617.064919][T20358] FAT-fs (loop4): Directory bread(block 66) failed [ 617.080497][T20358] FAT-fs (loop4): Directory bread(block 67) failed [ 617.111885][T20358] FAT-fs (loop4): Directory bread(block 68) failed [ 617.118448][T20358] FAT-fs (loop4): Directory bread(block 69) failed [ 617.143010][T20358] FAT-fs (loop4): Directory bread(block 70) failed [ 617.153733][T20358] FAT-fs (loop4): Directory bread(block 71) failed [ 617.163096][T20362] loop2: detected capacity change from 0 to 256 [ 617.184776][T20358] FAT-fs (loop4): Directory bread(block 72) failed [ 617.193041][T20362] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 617.212379][T20358] FAT-fs (loop4): Directory bread(block 73) failed [ 617.230323][T20362] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 617.267951][T20362] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 617.641823][T20367] loop1: detected capacity change from 0 to 4096 [ 617.655819][T20367] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 617.695345][ T5934] kernel read not supported for file /2435/coredump_filter (pid: 5934 comm: kworker/1:3) [ 617.708380][ T24] kernel write not supported for file /2435/coredump_filter (pid: 24 comm: kworker/1:0) [ 617.719806][T20367] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 617.739143][T20367] ntfs3(loop1): ino=19, mi_enum_attr [ 617.753840][ T5935] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 617.788365][T20367] ntfs3(loop1): failed to convert "c46c" to cp874 [ 617.820139][T20367] ntfs3(loop1): ino=20, mi_enum_attr [ 617.838120][T20354] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.845759][T20354] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.969214][ T5935] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 617.991482][ T5935] stv0680 1-1:4.0: last error: 132, command = 0x14 [ 618.001627][T20373] loop4: detected capacity change from 0 to 2048 [ 618.002639][T20375] x_tables: unsorted underflow at hook 2 [ 618.021163][ T5935] usb 1-1: USB disconnect, device number 3 [ 618.051781][T20376] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 618.111245][T20373] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 618.140446][T20373] Remounting filesystem read-only [ 618.365950][T20382] loop4: detected capacity change from 0 to 2048 [ 618.383166][T20382] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 618.415357][T20382] syz.4.6098: attempt to access beyond end of device [ 618.415357][T20382] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 618.430451][T20383] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 618.476149][T20382] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 618.496360][T20382] Remounting filesystem read-only [ 618.692836][T20389] loop4: detected capacity change from 0 to 1764 [ 618.774595][T20389] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 618.785996][T20354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.805130][T20354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.300043][T20415] loop0: detected capacity change from 0 to 4096 [ 619.314237][T20415] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 619.405399][T20354] geneve3: left promiscuous mode [ 619.410445][T20354] geneve3: left allmulticast mode [ 619.417389][T20415] ntfs3(loop0): ino=18, mi_enum_attr [ 619.423257][T20415] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 619.460007][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.507984][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.559664][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.568587][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.633500][T20420] loop2: detected capacity change from 0 to 1024 [ 619.658715][T20425] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.6109' sets config #0 [ 619.724485][T20420] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 619.798619][T20420] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 619.824640][T20420] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.6108: Failed to acquire dquot type 0 [ 619.872788][T20420] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 619.937256][T20437] xt_TCPMSS: Only works on TCP SYN packets [ 619.944511][T20420] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.6108: corrupted inode contents [ 620.000195][T20420] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #13: comm syz.2.6108: mark_inode_dirty error [ 620.050283][T20420] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.6108: corrupted inode contents [ 620.128963][T20420] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.6108: mark_inode_dirty error [ 620.152385][T20420] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.6108: corrupted inode contents [ 620.182205][T20420] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 620.217694][T20420] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.6108: corrupted inode contents [ 620.248628][T20420] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.6108: mark_inode_dirty error [ 620.291456][T20420] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 620.319553][T20420] EXT4-fs (loop2): 1 truncate cleaned up [ 620.326807][T20420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.455457][T20455] bond1: option arp_interval: invalid value (18446744073709551615) [ 620.463604][T20455] bond1: option arp_interval: allowed values 0 - 2147483647 [ 620.472266][T20420] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 620.506672][T20455] bond1 (unregistering): Released all slaves [ 620.513436][T20420] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 620.523232][T20420] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.6108: Failed to acquire dquot type 0 [ 620.642834][ T5879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.858231][T20441] loop4: detected capacity change from 0 to 32768 [ 620.942896][T20441] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 621.077946][T20441] XFS (loop4): Ending clean mount [ 621.087064][T20493] netlink: 348 bytes leftover after parsing attributes in process `syz.3.6139'. [ 621.098856][T20441] XFS (loop4): Quotacheck needed: Please wait. [ 621.189954][T20441] XFS (loop4): Quotacheck: Done. [ 621.349625][ T5889] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 621.556233][T20509] netlink: 'syz.2.6147': attribute type 1 has an invalid length. [ 621.586390][T20509] netlink: 'syz.2.6147': attribute type 1 has an invalid length. [ 621.643251][T20513] loop1: detected capacity change from 0 to 256 [ 621.797271][T20516] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6151'. [ 621.832182][T20513] FAT-fs (loop1): Directory bread(block 64) failed [ 621.853756][T20513] FAT-fs (loop1): Directory bread(block 65) failed [ 621.879595][T20513] FAT-fs (loop1): Directory bread(block 66) failed [ 621.903174][T20513] FAT-fs (loop1): Directory bread(block 67) failed [ 621.922501][T20513] FAT-fs (loop1): Directory bread(block 68) failed [ 621.954255][T20513] FAT-fs (loop1): Directory bread(block 69) failed [ 621.960947][T20513] FAT-fs (loop1): Directory bread(block 70) failed [ 621.989770][T20513] FAT-fs (loop1): Directory bread(block 71) failed [ 621.996424][T20513] FAT-fs (loop1): Directory bread(block 72) failed [ 622.031546][T20513] FAT-fs (loop1): Directory bread(block 73) failed [ 622.287820][ T797] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 622.356981][T20542] netlink: 'syz.4.6164': attribute type 4 has an invalid length. [ 622.483879][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 622.510128][ T797] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 622.519830][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 622.562345][ T797] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 622.579318][ T797] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 622.606827][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.634215][ T797] usb 4-1: config 0 descriptor?? [ 622.873110][ T797] hdpvr 4-1:0.0: firmware version 0x1e dated [ 622.953527][T20570] No source specified [ 623.007866][T20572] netdevsim0: mtu less than device minimum [ 623.085050][ T797] hdpvr 4-1:0.0: device init failed [ 623.095802][ T797] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 623.107311][T20578] netlink: 'syz.4.6180': attribute type 21 has an invalid length. [ 623.119011][ T797] usb 4-1: USB disconnect, device number 10 [ 623.119857][T20385] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 623.128195][T20578] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6180'. [ 623.160203][T20578] netlink: 'syz.4.6180': attribute type 4 has an invalid length. [ 623.175103][T20578] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6180'. [ 623.324658][T20385] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 623.333593][T20385] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.360965][T20385] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 623.400608][T20385] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.424995][T20385] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.455931][T20385] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 623.480461][T20385] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 623.493669][T20385] usb 3-1: Product: syz [ 623.502055][T20385] usb 3-1: Manufacturer: syz [ 623.512982][T20385] cdc_wdm 3-1:1.0: skipping garbage [ 623.518597][T20385] cdc_wdm 3-1:1.0: skipping garbage [ 623.531134][T20385] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 623.541001][T20385] cdc_wdm 3-1:1.0: Unknown control protocol [ 623.657767][T20599] loop0: detected capacity change from 0 to 256 [ 623.732199][T20565] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 623.754288][T20385] usb 3-1: USB disconnect, device number 2 [ 623.996262][ T797] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 624.170650][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 624.194372][ T797] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 624.210672][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.224339][ T797] usb 2-1: Product: syz [ 624.228540][ T797] usb 2-1: Manufacturer: syz [ 624.234122][ T797] usb 2-1: SerialNumber: syz [ 624.245860][ T797] usb 2-1: config 0 descriptor?? [ 624.635455][T20635] pimreg: entered allmulticast mode [ 624.699543][T20405] usb 2-1: USB disconnect, device number 12 [ 624.745360][T20416] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 624.860116][T20645] netlink: 'syz.2.6214': attribute type 1 has an invalid length. [ 624.882621][T20645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6214'. [ 624.961877][T20416] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 624.977044][T20416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.998507][T20416] usb 4-1: config 0 descriptor?? [ 625.029723][T20416] gspca_main: spca508-2.14.0 probing 8086:0110 [ 625.451583][T20416] gspca_spca508: reg_read err -71 [ 625.464356][T20416] gspca_spca508: reg_read err -71 [ 625.482293][T20416] gspca_spca508: reg_read err -71 [ 625.509484][T20416] gspca_spca508: reg_read err -71 [ 625.530094][T20416] gspca_spca508: reg write: error -71 [ 625.546277][T20416] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 625.586462][T20416] usb 4-1: USB disconnect, device number 11 [ 625.835014][T20385] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 625.867042][T20405] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 625.996218][T20385] usb 5-1: Using ep0 maxpacket: 16 [ 626.013196][T20385] usb 5-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 626.027720][T20405] usb 1-1: Using ep0 maxpacket: 8 [ 626.028032][T20385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.039621][T20405] usb 1-1: unable to get BOS descriptor or descriptor too short [ 626.050441][T20385] usb 5-1: Product: syz [ 626.059585][T20385] usb 5-1: Manufacturer: syz [ 626.064231][T20385] usb 5-1: SerialNumber: syz [ 626.073041][T20405] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 626.101575][T20405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 626.103223][T20385] usb 5-1: config 0 descriptor?? [ 626.139914][T20405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 626.167883][T20405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 626.195227][T20704] loop3: detected capacity change from 0 to 2048 [ 626.208615][T20405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 626.220612][T20405] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 626.243037][T20405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 626.253175][T20704] loop3: p1 < > p3 p4 < > [ 626.262847][T20704] loop3: partition table partially beyond EOD, truncated [ 626.270010][T20405] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 626.292651][T20704] loop3: p1 start 8388352 is beyond EOD, truncated [ 626.299386][T20405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.312547][T20704] loop3: p3 size 50331648 extends beyond EOD, truncated [ 626.322048][T20405] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 626.332115][T20405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.346843][T20405] usb 1-1: Product: syz [ 626.352324][T20405] usb 1-1: Manufacturer: syz [ 626.369460][T20405] usb 1-1: SerialNumber: syz [ 626.369795][T20385] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 626.387086][ T5198] loop3: p1 < > p3 p4 < > [ 626.392129][ T5198] loop3: partition table partially beyond EOD, truncated [ 626.399777][ T5198] loop3: p1 start 8388352 is beyond EOD, truncated [ 626.407770][ T5198] loop3: p3 size 50331648 extends beyond EOD, truncated [ 626.411259][T20405] usb 1-1: config 0 descriptor?? [ 626.441780][T20405] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.457449][T20715] xt_TPROXY: Can be used only with -p tcp or -p udp [ 626.528010][ T5890] udevd[5890]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 626.621732][T20405] usb 5-1: USB disconnect, device number 6 [ 626.692088][ T5890] udevd[5890]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 626.711338][T20721] bond0: (slave bond_slave_1): Releasing backup interface [ 626.791456][ T6255] udevd[6255]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.808796][T20385] usb 1-1: USB disconnect, device number 4 [ 627.092570][T20735] loop1: detected capacity change from 0 to 512 [ 627.119767][T20735] EXT4-fs: Ignoring removed bh option [ 627.154872][T20735] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 627.199029][T20735] EXT4-fs (loop1): 1 truncate cleaned up [ 627.210428][T20735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.312696][ T5883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.980497][T20770] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 628.000861][T20770] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 628.981035][ T5868] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 629.166281][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 629.178754][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.213400][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 629.247232][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 629.269386][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 629.296710][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 629.320353][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.356006][ T5868] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 629.376497][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.398080][ T5868] usb 5-1: Product: syz [ 629.404706][ T5868] usb 5-1: Manufacturer: syz [ 629.427008][ T5868] usb 5-1: SerialNumber: syz [ 629.460000][ T5868] usb 5-1: config 0 descriptor?? [ 629.475822][T20810] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 629.951188][T20405] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 629.965527][T20834] loop2: detected capacity change from 0 to 32768 [ 630.047564][T20834] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 630.077533][T20834] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 630.095853][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6316'. [ 630.102283][T20834] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 630.117577][T20834] OCFS2: File system is now read-only. [ 630.127207][T20834] (syz.2.6305,20834,0):ocfs2_find_leaf:1948 ERROR: status = -30 [ 630.136504][T20405] usb 4-1: Using ep0 maxpacket: 16 [ 630.143876][T20834] (syz.2.6305,20834,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 630.164913][T20834] (syz.2.6305,20834,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 630.178237][T20405] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 630.187676][T20405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.194731][T20834] (syz.2.6305,20834,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 630.195694][T20405] usb 4-1: Product: syz [ 630.195713][T20405] usb 4-1: Manufacturer: syz [ 630.195730][T20405] usb 4-1: SerialNumber: syz [ 630.210154][T20405] usb 4-1: config 0 descriptor?? [ 630.260887][T20834] (syz.2.6305,20834,1):ocfs2_read_virt_blocks:1005 ERROR: status = -30 [ 630.281664][T20834] (syz.2.6305,20834,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 630.316156][T20834] (syz.2.6305,20834,1):ocfs2_find_dir_space_el:3519 ERROR: status = -5 [ 630.346444][T20834] (syz.2.6305,20834,1):ocfs2_prepare_dir_for_insert:4315 ERROR: status = -5 [ 630.366973][T20834] (syz.2.6305,20834,1):ocfs2_mknod:301 ERROR: status = -5 [ 630.377503][T20834] (syz.2.6305,20834,1):ocfs2_mknod:505 ERROR: status = -5 [ 630.411075][T20834] (syz.2.6305,20834,1):ocfs2_create:678 ERROR: status = -5 [ 630.481414][T20405] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 630.492320][ T5879] ocfs2: Unmounting device (7,2) on (node local) [ 630.518709][T20405] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 630.721947][T20405] usb 4-1: USB disconnect, device number 12 [ 630.973199][ T5868] rc_core: IR keymap rc-snapstream-firefly not found [ 630.997346][ T5868] Registered IR keymap rc-empty [ 631.019746][ T5868] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 631.042010][ T5868] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input64 [ 631.076900][ T5868] input: syz syz mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input65 [ 631.087118][ T797] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 631.155946][ C0] ati_remote 5-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 631.163958][ T5868] usb 5-1: USB disconnect, device number 7 [ 631.289858][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 631.309554][ T797] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 631.326310][T20903] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6337'. [ 631.348896][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 631.390168][ T797] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 631.432935][ T797] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 631.448622][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.479662][ T797] usb 1-1: Product: syz [ 631.490533][ T797] usb 1-1: Manufacturer: syz [ 631.506848][ T797] usb 1-1: SerialNumber: syz [ 631.530253][ T797] usb 1-1: config 0 descriptor?? [ 631.560838][ T797] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 631.725267][T20915] veth3: entered allmulticast mode [ 631.770621][T20917] netlink: 'syz.4.6343': attribute type 1 has an invalid length. [ 631.810095][T20917] netlink: 'syz.4.6343': attribute type 1 has an invalid length. [ 631.860196][ T797] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22 [ 632.029943][ T797] usb 1-1: USB disconnect, device number 5 [ 633.130596][T20899] syz.2.6336 (20899): drop_caches: 2 [ 633.284938][T20961] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.292446][T20961] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.630419][T20961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.655323][T20961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.675799][T20983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6376'. [ 633.840259][T20967] loop3: detected capacity change from 0 to 32768 [ 634.537910][T20961] bond1: left promiscuous mode [ 634.544777][T20961] bridge3: left promiscuous mode [ 634.550609][T20961] veth3: left allmulticast mode [ 634.608540][ T3483] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.641274][ T3483] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.671337][ T3483] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.687250][ T3483] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.803734][T21001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6387'. [ 634.828625][T21004] netlink: 'syz.2.6390': attribute type 7 has an invalid length. [ 635.498350][T21039] loop1: detected capacity change from 0 to 512 [ 635.538279][T21039] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 635.597148][T21039] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.6405: Invalid block bitmap block 0 in block_group 0 [ 635.681988][T21039] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 635.728640][T21039] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.6405: attempt to clear invalid blocks 983261 len 1 [ 635.777439][T21059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6411'. [ 635.788484][ T5934] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 635.808816][T21059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6411'. [ 635.821293][T21039] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.6405: Invalid inode table block 0 in block_group 0 [ 635.868335][T21039] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 635.928638][T21039] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 635.951754][T21039] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.6405: Invalid inode table block 0 in block_group 0 [ 635.981948][T21039] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 636.002416][T21039] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.6405: mark_inode_dirty error [ 636.024015][T21039] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 636.025382][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.043165][T21039] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.6405: Invalid inode table block 0 in block_group 0 [ 636.043597][T21039] EXT4-fs (loop1): 1 truncate cleaned up [ 636.104482][ T5934] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 636.111582][T21039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.116760][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.147082][T21039] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.6405: Invalid inode bitmap blk 0 in block_group 0 [ 636.205414][ T5934] usb 4-1: config 0 descriptor?? [ 636.207809][T21071] vxcan1 speed is unknown, defaulting to 1000 [ 636.253235][T21071] vxcan1 speed is unknown, defaulting to 1000 [ 636.256602][ T5883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.295910][T21071] vxcan1 speed is unknown, defaulting to 1000 [ 636.464943][T21076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6422'. [ 636.488675][T21078] ieee802154 phy0 wpan0: encryption failed: -22 [ 636.664590][T21076] bond2: option arp_all_targets: invalid value (255) [ 636.724331][ T5934] usb 4-1: USB disconnect, device number 13 [ 636.749667][T21076] bond2 (unregistering): Released all slaves [ 636.882780][T21071] infiniband syz2: set active [ 636.887852][T21071] infiniband syz2: added vxcan1 [ 636.894111][ T797] vxcan1 speed is unknown, defaulting to 1000 [ 636.967787][T21071] RDS/IB: syz2: added [ 636.972694][T21071] smc: adding ib device syz2 with port count 1 [ 636.979691][T21071] smc: ib device syz2 port 1 has no pnetid [ 637.010006][ T5934] vxcan1 speed is unknown, defaulting to 1000 [ 637.050935][T21071] vxcan1 speed is unknown, defaulting to 1000 [ 637.349237][T21104] loop1: detected capacity change from 0 to 136 [ 637.495778][T21102] loop2: detected capacity change from 0 to 4096 [ 637.510103][T21091] loop4: detected capacity change from 0 to 32768 [ 637.542723][T21102] ntfs3(loop2): ino=0, mi_enum_attr [ 637.585464][T21091] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 637.606585][T21102] ntfs3(loop2): ino=0, mi_enum_attr [ 637.611841][T21102] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 637.803424][T21091] XFS (loop4): Ending clean mount [ 637.866791][T21091] XFS: no-recovery mounts must be read-only. [ 637.975828][T21071] vxcan1 speed is unknown, defaulting to 1000 [ 638.014370][ T5889] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 638.332539][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6445'. [ 638.562070][T21115] loop1: detected capacity change from 0 to 32768 [ 638.648771][T21115] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 638.667932][T21115] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 638.729968][T21115] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 638.757355][T21071] vxcan1 speed is unknown, defaulting to 1000 [ 638.781880][ T797] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 638.792059][ T797] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 638.923585][T21128] loop2: detected capacity change from 0 to 32768 [ 638.976113][T21128] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6444 (21128) [ 638.995228][ T797] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 190ms [ 639.008156][ T797] gfs2: fsid=syz:syz.0: jid=0: Done [ 639.029929][T21115] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 639.059245][T21128] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 639.091569][T21128] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 639.178037][T21115] gfs2: fsid=syz:syz.0: found 1 quota changes [ 639.316282][T21128] BTRFS info (device loop2): enabling ssd optimizations [ 639.369306][T21128] BTRFS info (device loop2): turning on async discard [ 639.376161][T21128] BTRFS info (device loop2): enabling free space tree [ 639.392770][T21132] loop4: detected capacity change from 0 to 32768 [ 639.459921][T21132] (syz.4.6443,21132,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 639.506723][ T5883] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 639.522079][T21132] (syz.4.6443,21132,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 639.533830][ T5883] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 639.554597][ T5883] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5883 [syz-executor] gfs2_quota_sync+0x359/0x460 [ 639.571215][ T5879] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 639.582467][ T5883] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 639.629213][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 639.629239][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 639.629257][ T5883] Call Trace: [ 639.629265][ T5883] [ 639.629273][ T5883] dump_stack_lvl+0x189/0x250 [ 639.629302][ T5883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.629338][ T5883] gfs2_withdraw+0xc8/0x160 [ 639.629363][ T5883] inode_go_instantiate+0xaf7/0x1260 [ 639.629383][ T5883] ? __pfx_bit_wait+0x10/0x10 [ 639.629415][ T5883] ? __pfx_inode_go_instantiate+0x10/0x10 [ 639.629439][ T5883] ? __pfx_wake_bit_function+0x10/0x10 [ 639.629466][ T5883] gfs2_instantiate+0x168/0x220 [ 639.629492][ T5883] gfs2_glock_wait+0x1d4/0x2a0 [ 639.629520][ T5883] do_sync+0x46f/0xc60 [ 639.629546][ T5883] ? _raw_spin_unlock+0x28/0x50 [ 639.629565][ T5883] ? gfs2_quota_sync+0x359/0x460 [ 639.629609][ T5883] ? __pfx_do_sync+0x10/0x10 [ 639.629649][ T5883] ? gfs2_quota_sync+0x359/0x460 [ 639.629672][ T5883] ? do_raw_spin_unlock+0x122/0x240 [ 639.629699][ T5883] gfs2_quota_sync+0x359/0x460 [ 639.629729][ T5883] gfs2_sync_fs+0x4c/0xb0 [ 639.629759][ T5883] sync_filesystem+0xee/0x230 [ 639.629793][ T5883] generic_shutdown_super+0x6f/0x2c0 [ 639.629818][ T5883] kill_block_super+0x44/0x90 [ 639.629844][ T5883] deactivate_locked_super+0xbc/0x130 [ 639.629868][ T5883] cleanup_mnt+0x425/0x4c0 [ 639.629887][ T5883] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.629914][ T5883] task_work_run+0x1d4/0x260 [ 639.629940][ T5883] ? __pfx_task_work_run+0x10/0x10 [ 639.629961][ T5883] ? __x64_sys_umount+0x122/0x160 [ 639.629988][ T5883] ? exit_to_user_mode_loop+0x40/0x130 [ 639.630019][ T5883] exit_to_user_mode_loop+0xe9/0x130 [ 639.630045][ T5883] do_syscall_64+0x2bd/0xfa0 [ 639.630068][ T5883] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.630091][ T5883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.630110][ T5883] ? clear_bhb_loop+0x60/0xb0 [ 639.630135][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.630155][ T5883] RIP: 0033:0x7f788a1902f7 [ 639.630173][ T5883] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 639.630191][ T5883] RSP: 002b:00007fff87eb1928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 639.630212][ T5883] RAX: 0000000000000000 RBX: 00007f788a211d7d RCX: 00007f788a1902f7 [ 639.630226][ T5883] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff87eb19e0 [ 639.630239][ T5883] RBP: 00007fff87eb19e0 R08: 0000000000000000 R09: 0000000000000000 [ 639.630258][ T5883] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff87eb2a70 [ 639.630271][ T5883] R13: 00007f788a211d7d R14: 0000000000097b71 R15: 00007fff87eb2ab0 [ 639.630305][ T5883] [ 639.630313][ T5883] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 639.646061][T21132] JBD2: Ignoring recovery information on journal [ 639.667538][T21071] vxcan1 speed is unknown, defaulting to 1000 [ 639.878710][T21132] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 640.156591][ T5889] ocfs2: Unmounting device (7,4) on (node local) [ 640.475899][T21071] vxcan1 speed is unknown, defaulting to 1000 [ 640.527792][T21178] loop2: detected capacity change from 0 to 64 [ 640.684476][ T30] audit: type=1326 audit(1760700504.374:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.4.6461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194258efc9 code=0x7ffc0000 [ 640.738512][ T30] audit: type=1326 audit(1760700504.374:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.4.6461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194258efc9 code=0x7ffc0000 [ 640.824115][ T30] audit: type=1326 audit(1760700504.402:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.4.6461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f194258efc9 code=0x7ffc0000 [ 640.846790][ T30] audit: type=1326 audit(1760700504.402:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.4.6461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194258efc9 code=0x7ffc0000 [ 640.876703][ T30] audit: type=1326 audit(1760700504.402:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21181 comm="syz.4.6461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194258efc9 code=0x7ffc0000 [ 641.004609][T21176] loop3: detected capacity change from 0 to 32768 [ 641.095703][T21176] [ 641.095703][T21176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 641.095703][T21176] [ 641.126236][T21193] loop4: detected capacity change from 0 to 256 [ 641.158176][T21176] [ 641.158176][T21176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 641.158176][T21176] [ 641.230247][T21176] [ 641.230247][T21176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 641.230247][T21176] [ 641.256545][ T113] [ 641.256545][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 641.256545][ T113] [ 641.351603][T21193] FAT-fs (loop4): Directory bread(block 64) failed [ 641.359344][T21193] FAT-fs (loop4): Directory bread(block 65) failed [ 641.365957][T21193] FAT-fs (loop4): Directory bread(block 66) failed [ 641.380203][ T13] [ 641.380203][ T13] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 641.380203][ T13] [ 641.401685][T21193] FAT-fs (loop4): Directory bread(block 67) failed [ 641.406195][ T13] [ 641.406195][ T13] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 641.406195][ T13] [ 641.408769][T21193] FAT-fs (loop4): Directory bread(block 68) failed [ 641.430395][T21193] FAT-fs (loop4): Directory bread(block 69) failed [ 641.438422][ T5886] [ 641.438422][ T5886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 641.438422][ T5886] [ 641.440865][T21193] FAT-fs (loop4): Directory bread(block 70) failed [ 641.453743][ T5886] [ 641.453743][ T5886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 641.453743][ T5886] [ 641.491771][ T114] ================================================================== [ 641.499892][ T114] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0xa7/0xf0 [ 641.508060][ T114] Read of size 1 at addr ffff888027e2a8d8 by task jfsCommit/114 [ 641.515701][ T114] [ 641.518040][ T114] CPU: 1 UID: 0 PID: 114 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 641.518065][ T114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 641.518078][ T114] Call Trace: [ 641.518087][ T114] [ 641.518097][ T114] dump_stack_lvl+0x189/0x250 [ 641.518123][ T114] ? rcu_is_watching+0x15/0xb0 [ 641.518154][ T114] ? __kasan_check_byte+0x12/0x40 [ 641.518184][ T114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.518206][ T114] ? rcu_is_watching+0x15/0xb0 [ 641.518238][ T114] ? lock_release+0x4b/0x3e0 [ 641.518267][ T114] ? __virt_addr_valid+0x1c8/0x5c0 [ 641.518286][ T114] ? __virt_addr_valid+0x4a5/0x5c0 [ 641.518305][ T114] print_report+0xca/0x240 [ 641.518326][ T114] ? _raw_spin_lock_irqsave+0xa7/0xf0 [ 641.518341][ T114] kasan_report+0x118/0x150 [ 641.518363][ T114] ? _raw_spin_lock_irqsave+0xa7/0xf0 [ 641.518388][ T114] ? __mutex_lock+0x3d1/0x1350 [ 641.518405][ T114] __kasan_check_byte+0x2a/0x40 [ 641.518426][ T114] lock_acquire+0x8d/0x360 [ 641.518449][ T114] _raw_spin_lock_irqsave+0xa7/0xf0 [ 641.518464][ T114] ? __mutex_lock+0x3d1/0x1350 [ 641.518482][ T114] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 641.518499][ T114] ? schedule+0x16f/0x360 [ 641.518515][ T114] ? __mutex_lock+0x37a/0x1350 [ 641.518533][ T114] __mutex_lock+0x3d1/0x1350 [ 641.518551][ T114] ? do_raw_spin_lock+0x121/0x290 [ 641.518570][ T114] ? jfs_syncpt+0x25/0x90 [ 641.518590][ T114] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 641.518625][ T114] ? __pfx___mutex_lock+0x10/0x10 [ 641.518644][ T114] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 641.518661][ T114] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 641.518685][ T114] jfs_syncpt+0x25/0x90 [ 641.518706][ T114] txEnd+0x2e5/0x530 [ 641.518730][ T114] jfs_lazycommit+0x5ba/0xa90 [ 641.518757][ T114] ? __pfx_jfs_lazycommit+0x10/0x10 [ 641.518781][ T114] ? __pfx_default_wake_function+0x10/0x10 [ 641.518803][ T114] ? __kthread_parkme+0x7b/0x200 [ 641.518839][ T114] ? __kthread_parkme+0x1a1/0x200 [ 641.518864][ T114] kthread+0x711/0x8a0 [ 641.518880][ T114] ? __pfx_jfs_lazycommit+0x10/0x10 [ 641.518903][ T114] ? __pfx_kthread+0x10/0x10 [ 641.518918][ T114] ? _raw_spin_unlock_irq+0x23/0x50 [ 641.518934][ T114] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.518950][ T114] ? __pfx_kthread+0x10/0x10 [ 641.518965][ T114] ret_from_fork+0x4bc/0x870 [ 641.518990][ T114] ? __pfx_ret_from_fork+0x10/0x10 [ 641.519021][ T114] ? __switch_to_asm+0x39/0x70 [ 641.519045][ T114] ? __switch_to_asm+0x33/0x70 [ 641.519069][ T114] ? __pfx_kthread+0x10/0x10 [ 641.519090][ T114] ret_from_fork_asm+0x1a/0x30 [ 641.519123][ T114] [ 641.519131][ T114] [ 641.774953][ T114] Allocated by task 21176: [ 641.779366][ T114] kasan_save_track+0x3e/0x80 [ 641.784044][ T114] __kasan_kmalloc+0x93/0xb0 [ 641.788634][ T114] __kmalloc_cache_noprof+0x3e2/0x700 [ 641.794010][ T114] lmLogOpen+0x2d1/0xfa0 [ 641.798263][ T114] jfs_mount_rw+0xe9/0x670 [ 641.802683][ T114] jfs_fill_super+0x754/0xd80 [ 641.807367][ T114] get_tree_bdev_flags+0x40e/0x4d0 [ 641.812480][ T114] vfs_get_tree+0x92/0x2b0 [ 641.816891][ T114] do_new_mount+0x302/0xa10 [ 641.821397][ T114] __se_sys_mount+0x313/0x410 [ 641.826082][ T114] do_syscall_64+0xfa/0xfa0 [ 641.830595][ T114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.836489][ T114] [ 641.838806][ T114] Freed by task 5886: [ 641.842777][ T114] kasan_save_track+0x3e/0x80 [ 641.847451][ T114] __kasan_save_free_info+0x46/0x50 [ 641.852642][ T114] __kasan_slab_free+0x5c/0x80 [ 641.857407][ T114] kfree+0x19a/0x6d0 [ 641.861299][ T114] lmLogClose+0x297/0x520 [ 641.865633][ T114] jfs_umount+0x2ef/0x3c0 [ 641.869965][ T114] jfs_put_super+0x8c/0x190 [ 641.874464][ T114] generic_shutdown_super+0x135/0x2c0 [ 641.879833][ T114] kill_block_super+0x44/0x90 [ 641.884508][ T114] deactivate_locked_super+0xbc/0x130 [ 641.889873][ T114] cleanup_mnt+0x425/0x4c0 [ 641.894280][ T114] task_work_run+0x1d4/0x260 [ 641.898880][ T114] exit_to_user_mode_loop+0xe9/0x130 [ 641.904163][ T114] do_syscall_64+0x2bd/0xfa0 [ 641.908756][ T114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.914643][ T114] [ 641.916958][ T114] The buggy address belongs to the object at ffff888027e2a800 [ 641.916958][ T114] which belongs to the cache kmalloc-1k of size 1024 [ 641.931007][ T114] The buggy address is located 216 bytes inside of [ 641.931007][ T114] freed 1024-byte region [ffff888027e2a800, ffff888027e2ac00) [ 641.944914][ T114] [ 641.947239][ T114] The buggy address belongs to the physical page: [ 641.953644][ T114] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27e28 [ 641.962400][ T114] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 641.970894][ T114] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 641.978872][ T114] page_type: f5(slab) [ 641.982853][ T114] raw: 00fff00000000040 ffff88813fe26dc0 0000000000000000 dead000000000001 [ 641.991432][ T114] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 642.000022][ T114] head: 00fff00000000040 ffff88813fe26dc0 0000000000000000 dead000000000001 [ 642.008693][ T114] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 642.017381][ T114] head: 00fff00000000003 ffffea00009f8a01 00000000ffffffff 00000000ffffffff [ 642.026048][ T114] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 642.034706][ T114] page dumped because: kasan: bad access detected [ 642.041114][ T114] page_owner tracks the page as allocated [ 642.046823][ T114] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10642090567, free_ts 0 [ 642.066528][ T114] post_alloc_hook+0x240/0x2a0 [ 642.071299][ T114] get_page_from_freelist+0x2365/0x2440 [ 642.076852][ T114] __alloc_frozen_pages_noprof+0x181/0x370 [ 642.082684][ T114] alloc_pages_mpol+0x232/0x4a0 [ 642.087536][ T114] allocate_slab+0x96/0x3a0 [ 642.092041][ T114] ___slab_alloc+0xe94/0x18a0 [ 642.096728][ T114] __slab_alloc+0x65/0x100 [ 642.101148][ T114] __kmalloc_noprof+0x47d/0x800 [ 642.106003][ T114] usb_get_configuration+0x11a/0x5360 [ 642.111378][ T114] usb_new_device+0x146/0x16f0 [ 642.116145][ T114] register_root_hub+0x275/0x590 [ 642.121080][ T114] usb_add_hcd+0xba1/0x1050 [ 642.125591][ T114] dummy_hcd_probe+0x134/0x270 [ 642.130383][ T114] platform_probe+0xf9/0x190 [ 642.134978][ T114] really_probe+0x26d/0x9e0 [ 642.139489][ T114] __driver_probe_device+0x18c/0x2f0 [ 642.144779][ T114] page_owner free stack trace missing [ 642.150146][ T114] [ 642.152473][ T114] Memory state around the buggy address: [ 642.158189][ T114] ffff888027e2a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 642.166249][ T114] ffff888027e2a800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 642.174308][ T114] >ffff888027e2a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 642.182372][ T114] ^ [ 642.189314][ T114] ffff888027e2a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 642.197376][ T114] ffff888027e2a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 642.205430][ T114] ================================================================== [ 642.213502][ T114] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 642.220708][ T114] CPU: 1 UID: 0 PID: 114 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 642.229830][ T114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 642.239915][ T114] Call Trace: [ 642.243193][ T114] [ 642.246124][ T114] dump_stack_lvl+0x99/0x250 [ 642.250717][ T114] ? __asan_memcpy+0x40/0x70 [ 642.255313][ T114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.260517][ T114] ? __pfx__printk+0x10/0x10 [ 642.265135][ T114] vpanic+0x237/0x6d0 [ 642.269124][ T114] ? __pfx_vpanic+0x10/0x10 [ 642.273636][ T114] panic+0xb9/0xc0 [ 642.277362][ T114] ? __pfx_panic+0x10/0x10 [ 642.281787][ T114] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 642.287690][ T114] ? _raw_spin_lock_irqsave+0xa7/0xf0 [ 642.293068][ T114] check_panic_on_warn+0x89/0xb0 [ 642.298007][ T114] ? _raw_spin_lock_irqsave+0xa7/0xf0 [ 642.303375][ T114] end_report+0x78/0x160 [ 642.307622][ T114] kasan_report+0x129/0x150 [ 642.312132][ T114] ? _raw_spin_lock_irqsave+0xa7/0xf0 [ 642.317510][ T114] ? __mutex_lock+0x3d1/0x1350 [ 642.322275][ T114] __kasan_check_byte+0x2a/0x40 [ 642.327152][ T114] lock_acquire+0x8d/0x360 [ 642.331579][ T114] _raw_spin_lock_irqsave+0xa7/0xf0 [ 642.336778][ T114] ? __mutex_lock+0x3d1/0x1350 [ 642.341542][ T114] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 642.347437][ T114] ? schedule+0x16f/0x360 [ 642.351784][ T114] ? __mutex_lock+0x37a/0x1350 [ 642.356556][ T114] __mutex_lock+0x3d1/0x1350 [ 642.361152][ T114] ? do_raw_spin_lock+0x121/0x290 [ 642.366186][ T114] ? jfs_syncpt+0x25/0x90 [ 642.370524][ T114] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 642.376455][ T114] ? __pfx___mutex_lock+0x10/0x10 [ 642.381479][ T114] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 642.387376][ T114] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 642.393709][ T114] jfs_syncpt+0x25/0x90 [ 642.397871][ T114] txEnd+0x2e5/0x530 [ 642.401864][ T114] jfs_lazycommit+0x5ba/0xa90 [ 642.406554][ T114] ? __pfx_jfs_lazycommit+0x10/0x10 [ 642.411788][ T114] ? __pfx_default_wake_function+0x10/0x10 [ 642.417600][ T114] ? __kthread_parkme+0x7b/0x200 [ 642.422544][ T114] ? __kthread_parkme+0x1a1/0x200 [ 642.427575][ T114] kthread+0x711/0x8a0 [ 642.431648][ T114] ? __pfx_jfs_lazycommit+0x10/0x10 [ 642.436854][ T114] ? __pfx_kthread+0x10/0x10 [ 642.441447][ T114] ? _raw_spin_unlock_irq+0x23/0x50 [ 642.446648][ T114] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.451865][ T114] ? __pfx_kthread+0x10/0x10 [ 642.456450][ T114] ret_from_fork+0x4bc/0x870 [ 642.461045][ T114] ? __pfx_ret_from_fork+0x10/0x10 [ 642.466178][ T114] ? __switch_to_asm+0x39/0x70 [ 642.470953][ T114] ? __switch_to_asm+0x33/0x70 [ 642.475724][ T114] ? __pfx_kthread+0x10/0x10 [ 642.480312][ T114] ret_from_fork_asm+0x1a/0x30 [ 642.485086][ T114] [ 642.488477][ T114] Kernel Offset: disabled [ 642.492801][ T114] Rebooting in 86400 seconds..