last executing test programs: 3.105150167s ago: executing program 2 (id=3760): r0 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.981798448s ago: executing program 2 (id=3763): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000140)=0x1, 0x4) 2.804534502s ago: executing program 2 (id=3768): futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0x5, 0x1000000, 0x0, &(0x7f0000048000)=0x2000, 0x5000003) 1.826726379s ago: executing program 3 (id=3788): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002740), 0x40400, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000027c0)={{0x1, 0x1, 0xf}, './file0/file0\x00'}) 1.721857941s ago: executing program 2 (id=3790): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x278, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1a8, 0x20a, 0x278, 0x1a8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0xffffff00, 0xff], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2b, 0x7, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8) 1.689283838s ago: executing program 0 (id=3792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 1.677205248s ago: executing program 3 (id=3793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.525259409s ago: executing program 0 (id=3796): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.50237745s ago: executing program 2 (id=3797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x75a71, 0x5722a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x200}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.500607174s ago: executing program 3 (id=3798): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) pause() 1.400960038s ago: executing program 4 (id=3800): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x2, 0x0, 0x2}) 1.347541068s ago: executing program 0 (id=3801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}]}, 0x48}}, 0x4000000) 1.340073743s ago: executing program 2 (id=3802): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$gfs2(&(0x7f0000000400), &(0x7f0000012500)='./file0\x00', 0x4000, &(0x7f0000000280)={[{@nodiscard}, {@quota_quiet}, {@noacl}, {@meta}, {@quota_quiet}, {@data_writeback}, {@loccookie}, {@commit={'commit', 0x3d, 0x40}}, {@ignore_local_fs}, {@nosuiddir}, {@errors_withdraw}, {@barrier}, {@locktable={'locktable', 0x3d, '['}}, {@locktable={'locktable', 0x3d, 'commit'}}]}, 0x4, 0x125ec, &(0x7f0000024b00)="$eJzs/XkYqHO9N/6ue17KPCRCKSQlIqEkYyWRIRlSCYWoCGUoQ0rSQCpjKpQpSZIyhDILkSmVsaQQkUSFc+2z3+vs+/zO/XT/nv1c+1z3dc7r9Uef+1mbb/54ruv9fq+ltWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAjBkziucttOt/nN4Pbf+fp3vOjBndLv/5Pfd//Mfsvb+m/M8zc6H/xbP5a2dbcpcPb7fzez704f84/61/vt333ue1u++9z3/r7/2/42WPbrzaTxd62/OOesMZZy169U/W+R/7LwIAAAAAAACA/0H59f+y90NX/V/+km7GjJlz/l9+bL4ZM2bOPmNGWV1z3fd+/n/y37/5Zvz/tb89+3/y/30AAAD4vyn7v+79yOH9/3PufDNmHHjAwI/HzPY//nO7jz/6+NDteX7++uf/1w+V/x8f/4Pmz10g93m5C/6///MBAADA/2/J/m96P9Lf7LP+9/0L574gd5HcRXMXy31h7otyF899ce5Lcpf4z/P/mvxL5b40d+ncl+Uuk/vy3FfkLpv7ytzlcpfPfVXuCrkr5r46d6Xc1+SunLtK7qq5r819Xe5qua/PXT33Dblr5K6Zu1bu2rmzfp+BdXPfmPum3Dfnrpf7ltz1c9+au0Huhrlvy90od+PcTXI3zX177ma578jdPHeL//iPw2bM2DL/761y35m7de67ct+d+57cbXLfm7tt7na5+T0mZrwv9/25O+TumLtT7gdyZ/0mEvl9KWZ8MPdDuR/O3TV3t9yP5O6eu0funrkfzf1Y7l65e+fO+g0o9s39eO4ncvfL3T931s+VHZj7ydyDcj+V++ncg3M/k3tI7mdzD839XO7nc7+Q+8Xcw3Jn/Rzel3KPyP1y7ldyv5p7ZO5RuUfnHpN7bO5xuV/LPT7367nfyP1m7gm5J+aelPut3G/nnpx7Su6puaflnp77ndwzcr+be2bu93LPyv1+7tm5P8g9J/eHuefm/ij3x7nn5Z6fe0Huhbk/yb0o9+LcS3J/mvuz3EtzL8u9PPeK3CtzZ/07WFfnXpM769+1ujb3utzrc3+Re0Pujbm/zL0p9+bcW3Jvzb0t91e5t+f+Ovc3ub/NvSP3zty7cu/OvSf33tzf5f4+977cP+Ten/vH3D/lPpD7YO5DuX/OfTj3kdy/5D6a+1juX3NnZdzfcp/I/Xvuk7lP5f4j95+5/8p9OveZ3PzLTLN+erzIR5GgK6rc/Hx7kdwt2twud2bubLnPyX1ubn5/nWKO3Pz7ecVcuXPnzpM7b+58ufl58CI/D17k58GL/Dx4kZ8HL5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf9iydzkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L7bITf4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/s34Nr0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/Ivk/a+MWyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/2ft2jL5X+YHyuR/mfwvk/9l8r9M/pfJ/zL5Xyb/y+R/mfwvk/9l8r9M/pfJ/zL5Xyb/y+R/mfwvF/j3+79MLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8pZPy+QXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBWWyr0wvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gsT/jCq9oEovqPJ/qNILquRxlV5QpRdU6QVVekGVXlClF1TpBVV6QZVeUKUXVOkFVXpBlV5QpRdU6QVVfl6gSv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf9Z/5p9nfyvk/918r/OX1An/+vkf538r5P/dfK/Tv7Xyf86+V8n/+vkf538r5P/dfK/nvff7/86vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTibW6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV4wK36b9IImvaBJL2jSC5r8hU16QZNe0KQXNOkFTXpBk17QpBc06QVNekGTXtCkFzTpBU1+XqBJ/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/4nxGm/xvk/9t8r9N/rfJ/zZ/Q5v8b5P/bfK/Tf63yf82+d8m/9vkfzvXv9//bXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbbKyTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaP+zF7RtekHifUaXXtClF3TpBV16QZf87tILuvyNXXpBl17QpRd06QVdekGXXtClF3T5eYEu+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f872b9WdXJ/y753yX/u+R/l/zvkv9d8n/Wn2/dJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+7/LxAl/xPfM+YmfyfOevP3U/+z0z+z0z+z0z+z0z+z8wDM5P/M5P/M5P/M2f/9/t/ZnrBrN//f2Z6wcz0gpnpBTPTC2amF8xML5iZXjAzvWBmesFMv88eAAAA/H9R9v/M//qRWf8bvRn/z1/fO6D3e/2fcsfc9y2x+k4rDDwz6/cJnO9/8p8VAAAA+O8Z2f9f7e3/YtEXPPa8dQ5//ZIDz8z68wHsfwAAAJigkf1/ZG//l7MtftNaR2/8288MPDPrzwW0/wEAAGCCRvb/Ub39X/3g/ld9/9PXfvW5A8/k9/Gx/wEAAGCKRvb/0b39X1+57p17bDnHHqcNPJPfv9f+BwAAgCka2f/H9PZ/84mDVvvMqie96KKBZ/Ln9tj/AAAAMEUj+//Y3v5vdzpv0Zvu2/aniww8kz+v1/4HAACAKRrZ/8f19n930/7Pvmj+BS77y8Azs/4e+x8AAAAmaGT/f623/2fu9pP5z7/q5iU3GXhm8Vz7HwAAACZoZP8f39v/s/183yfWO3Wf3dYdeObFufY/AAAATNDI/v96b/8/5641b1t0jwsOv3/gmZfk2v8AAAAwQSP7/xu9/f/c931mpYd3Wur2nQeeWSLX/gcAAIAJGtn/3+zt/9mXvm23M354/ypXDzyzZK79DwAAABM0sv9P6O3/OY6Y58vvuWW9Xe4ceGapXPsfAAAAJmhk/5/Y2/9zHvzys5872yFf+PjAMy/Ntf8BAABggkb2/0m9/T/Xan/e6MmHd3/2ioFnls61/wEAAGCCRvb/t3r7f+5nfvGKu1c4e7HtB555Wa79DwAAABM0sv+/3dv/86wz2/XzbbLIW3YfeGaZXPsfAAAAJmhk/5/c2//zbrTiI2/64h3fuXHgmZfn2v8AAAAwQSP7/5Te/p/vgb/Ncc6X17j3XQPPvGLWX/M/+g8LAAAA/LeM7P9Te/t//q9vfu9ubzuwenbgmWVz7X8AAACYoJH9f1pv/y+wxJdmfHK55Tb/48Azr8y1/wEAAGCCRvb/6b39/7zlv7P4rX99+Ny3DDyzXK79DwAAABM0sv+/09v/Cx76wUuXvG+lyz448MzyufY/AAAATNDI/j+jt/+fv/T3lr541ceX/MXAM6/Ktf8BAABggkb2/3d7+3+hI3a65q1bbrXbrwaeWSHX/gcAAIAJGtn/Z/b2/8IHb/rg8z993OH7DDyzYq79DwAAABM0sv+/19v/L1jtq7M9eHR7+xMDz7w61/4HAACACRrZ/2f19v8i73n//puuc+Uqbx94ZqVc+x8AAAAmaGT/f7+3/xe975vHf3OJnXZZe+CZ1+Ta/wAAADBBI/v/7N7+X+zRYy98/MlTv3DPwDMr59r/AAAAMEEj+/8Hvf3/wvW3fnf3wk2ffefAM6vk2v8AAAAwQSP7/5ze/n/Rmy+e4wWXHrHYUwPPrJpr/wMAAMAEjez/H/b2/+KP7f3IH09a7S0PDzzz2lz7HwAAACZoZP+f29v/L/7D2tdfuP/T33nrwDOvy7X/AQAAYIJG9v+Pevv/JVt/+hVv23abey8ZeGa1XPsfAAAAJmhk//+4t/+XWPqllx560QnVtgPPvD7X/gcAAIAJGtn/5/X2/5JH3LP43nfOtfmeA8+snmv/AwAAwASN7P/ze/t/qYN/M2PZ8vpzbxt45g259j8AAABM0Mj+v6C3/1+62qL33rnqHMtsPfDMGrn2PwAAAEzQyP6/sLf/l/76XbOtc9+1P39m4Jk1c+1/AAAAmKCR/f+T3v5/2RILPfijT2/7jT8NPLNWrv0PAAAAEzSy/y/q7f9lln/JNb/b8qT91h94Zu1c+x8AAAAmaGT/X9zb/y8/9L6l515n9ZWvHHhmnVz7HwAAACZoZP9f0tv/rzj2r7OdfPSzt75v4Jl1c+1/AAAAmKCR/f/T3v5f9kUrPbjZkxt/8iMDz7wx1/4HAACACRrZ/z/r7f9Xvnqua4olDt/uhoFn3pRr/wMAAMAEjez/S3v7f7kvXr30Y5fuPM8HBp55c679DwAAABM0sv8v6+3/5d/64NsfeOHpf7lq4Jn1cu1/AAAAmKCR/X95b/+/6ollz11o//pbdw0885Zc+x8AAAAmaGT/X9Hb/yvcu+BRG5x0+bqfGHhm/Vz7HwAAACZoZP9f2dv/K25x454XXbTF7I8OPPPWXPsfAAAAJmhk/1/V2/+vfsXux+677TF/3nTgmQ1y7X8AAACYoJH9f3Vv/6905A/3OqRc+bx1Bp7ZMNf+BwAAgAka2f/X9Pb/az552Ja/vfOJLf4w8Mzbcu1/AAAAmKCR/f/z3v5feZX1LljuqmWX+enAMxvl2v8AAAAwQSP7/9re/l/l2M9t9MP5H/r5dgPPbJxr/wMAAMAEjez/63r7f9UXbXD2G/dY6xt7DDyzSa79DwAAABM0sv+v7+3/1776Y1+e99SD9rt14JlZfyaA/Q8AAAATNLL/f9Hb/6/74vd3u+eHi6281cAzb8+1/wEAAGCCRvb/DbP2f50f2emuW58ceGazXPsfAAAAJmhk/9/Y+/X/12/+qftOn223Tz4y8Mw7cu1/AAAAmKCR/f/L3v5ffe2LLnvmlrO222Dgmc1z7X8AAACYoJH9f1Nv/7/hqb2WmmOF9ef5+8AzW+Ta/wAAADBBI/v/5t7+X+PEHZfd4uFD/7LZwDNb5tr/AAAAMEEj+/+W3v5f8/ln/uI7X1ziW2sNPDPrzwSw/wEAAGCCRvb/rb39v9bsX3n42U3uW/fugWfemWv/AwAAwASN7P/bevt/7XM3mX32t+01+y4Dz2yda/8DAADABI3s/1/19v86P/vL767+8nl/vn7gmXfl2v8AAAAwQSP7//be/l93r9cUr/3rgufdPvDMu3PtfwAAAJigkf3/697+f+Mus7/oQ8vdusW+A8+8J9f+BwAAgAka2f+/6e3/N916zc+Ov/OEdx018Mw2ufY/AAAATNDI/v9tb/+/eY+ZL+vKbS5caeCZ9+ba/wAAADBBI/v/jt7+X+/663/++LbX//HFA89sm2v/AwAAwASN7P87e/v/Lb9+/IFvXjTXbAcMPLNdrv0PAAAAEzSy/+/q7f/1t1lh5qYnHbHG7APPbJ9r/wMAAMAEjez/u3v7/63LbvvWefbf9IQzB555X679DwAAABM0sv/v6e3/DY761pn3vvDpv5038Mz7c+1/AAAAmKCR/X9vb/9veNDXDzv30tXmf8HAMzvk2v8AAAAwQSP7/3e9/f+2Vbf44LpLXPn+Ewae2THX/gcAAIAJGtn/v+/t/43+uc8873qy/Uw18MxOufY/AAAATNDI/r+vt/83XvPCv5559Kk3zT/wzAdy7X8AAACYoJH9/4fe/t9ks4N/+Y91dlrh3IFnds61/wEAAGCCRvb//b39v+kjayw/25aP7/vagWd2ybX/AQAAYIJG9v8fe/v/7cfde9e1n17p2KMHnvlgrv0PAAAAEzSy///U2/+bLb7E699w33HXHzbwzIdy7X8AAACYoJH9/0Bv/79jpcUW2XnVrZZbduCZD+fa/wAAADBBI/v/wd7+3/ywXz1z9HIHvus5A8/smmv/AwAAwASN7P+Hevt/i2UXXqD86xoXnjrwzG659j8AAABM0Mj+/3Nv/2951G///uiXH/7jxQPPfCTX/gcAAIAJGtn/D/f2/1YH/eHWb79tudkWHXhm91z7HwAAACZoZP8/0tv/71z1Ra9+xyZnr/GlgWf2yLX/AQAAYIJG9v9fevt/661uWuvhL+5+wooDz+yZa/8DAADABI3s/0d7+/9ddy/wzUUfvuNvSww889Fc+x8AAAAmaGT/P9bb/+9+fLkD11thkfkPHnjmY7n2PwAAAEzQyP7/a2//v2fDP213/i33v3+1gWf2yrX/AQAAYIJG9v/jvf2/zQbPWf7k2Zb6zNcHntk71/4HAACACRrZ/3/r7f/3/v3aX2620yE3fXbgmX1y7X8AAACYoJH9/0Rv/2/7uyf+WvxwvRVePvDMvrn2PwAAAEzQyP7/e2//b7fl8vM8durN+54y8MzHc+1/AAAAmKCR/f9kb/9vv+wRz6y8xwLHNgPPfCLX/gcAAIAJGtn/T/X2//uOevsil81/wfXzDjyzX679DwAAABM0sv//0dv/7z/oQ68//Kp9ljtr4Jn9c+1/AAAAmKCR/f/P3v7fYdVT79puu9X+Xg88c0Cu/Q8AAAATNLL//9Xb/zse94FXP3Xx0887eeCZA3PtfwAAAJigkf3/dG//77T4Gbc+565N1/r+wDOfzLX/AQAAYIJG9v8zvf3/gZWO/Pu7qyNOGtr4B+Xa/wAAADBBI/v/2d7+3/mwjRb47mJzPfCNgWc+lWv/AwAAwAT9+/3fzejt/12uOXq9eX92/XNfP/DMp3PH9//Q7x4IAAAA/I8a2f9Fb/9/cNd3f+eeE7d5zzIDzxyc69f/AQAAYIJG9n/Z2/8f2n77Q3+43wkXHTLwzGdy7X8AAACYoJH9X/X2/4fvPHHHNx6z1bUrDDwz6+cE7H8AAACYoJH9X/f2/66LHDD/u9c9btnDB575bK79DwAAABM0sv+b3v7f7eQ3PvHdJVfa+zMDzxyaa/8DAADABI3s/7a3/z9y9sdve+qpx49ecuCZz+Xa/wAAADBBI/u/6+3/3Weev9Jzfr/TjacNPPP5XPsfAAAAJmhk/8/s7f89Pv78X/9ilVOXf+7AM1/Itf8BAABggkb2/2y9/b/nFXeustoW7faLDDzzxVz7HwAAACZoZP8/p7f/P/rL3y+046eu/PRFA88clmv/AwAAwASN7P/n9vb/x3Z88T+PO2KRvx8z8MysPxPQ/gcAAIAJGtn/s/f2/17X3D13seEdz3vdwDNfyrX/AQAAYIJG9v8cvf2/965LPfbYK3df6xUDzxyRa/8DAADABI3s/zl7+3+f7Re56eTHzj7piwPPfDnX/gcAAIAJGtn/c/X2/753/vpVmz2y3APlwDNfybX/AQAAYIJG9v/cvf3/8Z+87E1/XvHh535z4Jmv5tr/AAAAMEEj+3+e3v7/RPfItxfbdI33/GjgmSNz7X8AAACYoJH9P29v/+833y2festhB160wMAzR+Xa/wAAADBBI/t/vt7+3/+0+d5/3o77XPu9gWeOzrX/AQAAYIJG9v/8vf1/wNr33bHfORcsO8fAM8fk2v8AAAAwQSP7f4He/j/wqZe84Qs3L7D3wgPPHJtr/wMAAMAEjez/5/X2/yf/vNBit8+8+egfDzxzXK79DwAAABM0sv8X7O3/gza/61/LLLDeja8eeOZrufY/AAAATNDI/n9+b/9/6iWfmO+Rqw9Z/siBZ47Ptf8BAABggkb2/0K9/f/pYy54dJHTltr+wIFnvp5r/wMAAMAEjez/hXv7/+AvHHjDm/e8/9MvGXjmG7n2PwAAAEzQyP5/QW//f2blN61wwacOP+AXA898M9f+BwAAgAka2f+L9Pb/IV/99O2Lb7Hxez848MwJufY/AAAATNDI/l+0t/8/u9zar/vlKs+utM/AMyfm2v8AAAAwQSP7f7He/j/0dXsvfPDvV7/5VwPPnJRr/wMAAMAEjez/F/b2/+cOvPjJPZ866fi3DzzzrVz7HwAAACZoZP+/qLf/P3/tIxeuvOS2H39i4Jlv59r/AAAAMEEj+3/x3v7/wkdf9u7L1r126XsGnjk51/4HAACACRrZ/y/u7f8vbjvf/ocfM8fVaw88c0qu/Q8AAAATNLL/X9Lb/4f96pbjt9vviQueGnjm1Fz7HwAAACZoZP8v0dv/hy/893v2PXHlrd458MxpufY/AAAATNDI/l+yt/+/9M1XVYf87Jg53zrwzOm59j8AAABM0Mj+X6q3/48457kv/u1iWzzy8MAz38m1/wEAAGCCRvb/S3v7/8tzXnfJctXlJ2878MwZufY/AAAATNDI/l+6t/+/ss+Hl3vgrvpNlww8891c+x8AAAAmaGT/v6y3/796yWnXLXTx6fPdNvDMmbn2PwAAAEzQyP5fprf/j7z5yw9tsN3Oj+058Mz3cu1/AAAAmKCR/f/y3v4/6kObzXnRnmcdsMnAM2fl2v8AAAAwQSP7/xW9/X/0tUfdt8Rpu733LwPPfD/X/gcAAIAJGtn/y/b2/zEf3bi77eq7Vrp/4Jmzc+1/AAAAmKCR/f/K3v4/dtudlzpogcVuXnfgmR/k2v8AAAAwQSP7f7ne/j/uV9+9bNeZBx1/9cAz5+Ta/wAAADBBI/t/+d7+/9oF7z77qpvX+vjOA8/8MNf+BwAAgAka2f+v6u3/44ujN3rdOQ8t/fGBZ87Ntf8BAABggkb2/wq9/f/1BU7c7cM7Lnv1nQPP/CjX/gcAAIAJGtn/K/b2/ze+t/2Xv3bYrRdsP/DMj3PtfwAAAJigkf3/6t7+/+YZn7nkgE0X3OqKgWfOy7X/AQAAYIJG9v9Kvf1/wvPWfPHuK543540Dz5yfa/8DAADABI3s/9f09v+J5b7VSx/Z65HdB565INf+BwAAgAka2f8r9/b/ST/+yT03P3bfyc8OPHNhrv0PAAAAEzSy/1fp7f9vXfvCOed55RJvetfAMz/Jtf8BAABggkb2/6q9/f/tj97+0L0bHjrfWwaeuSjX/gcAAIAJGtn/r+3t/5O3/d115x6x/mN/HHjm4lz7HwAAACZoZP+/rrf/T/nVksute9ohH9pu4JlLcu1/AAAAmKCR/b9ab/+fus/9l92153qH/XTgmVk/Zv8DAADABI3s/9f39v9plyy+1CsWuP83tw4887Nc+x8AAAAmaGT/r97b/6ff/IJur6uXeu0eA89cmmv/AwAAwASN7P839Pb/dz50x32fu/mC3Z8ceOayXPsfAAAAJmhk/6/R2/9n7Pfzy14/c58jthp45vJc+x8AAAAmaGT/r9nb/9+9bI6lrt/x5is2GHjmilz7HwAAACZoZP+v1dv/Z96wcnfsOQu89JGBZ67Mtf8BAABggkb2/9q9/f+9Dzx6306bPrzZZgPPXJVr/wMAAMAEjez/dXr7/6xTbzpmt8OWO+fvA89cnWv/AwAAwASN7P91e/v/+/MusO8nHznw7rsHnrkm1/4HAACACRrZ/2/s7f+z2+W2unXFNYq1Bp75ea79DwAAABM0sv/f1Nv/P7jwTz9e8pV3vPn6gWeuzbX/AQAAYIJG9v+be/v/nKvW3/zuxxY5bZeBZ67Ltf8BAABggkb2/3q9/f/Dj3zhh/MdcfbT+w48M+vfCbD/AQAAYIJG9v9bevv/3Pf/6Ctv2nD3RW4feOYXufY/AAAATNDI/l+/t/9/9NvdPnrOFqd+6JmBZ27Itf8BAABggkb2/1t7+//H+/3g+Fd+aqfDth545sZc+x8AAAAmaGT/b9Db/+ddtuf+d/z+yt+sP/DML3PtfwAAAJigkf2/YW//n3/D29792VXa1/5p4Jmbcu1/AAAAmKCR/f+23v6/4AOfvXCfJY/b/X0Dz9yca/8DAADABI3s/416+//C2fa55mdPbXXElQPP3JJr/wMAAMAEjez/jXv7/yc/uHDpVx3z+BU3DDxza679DwAAABM0sv836e3/i045eLb3rbvSSz8y8MxtufY/AAAATNDI/t+0t/8vXnSNB4888frNrhp45le59j8AAABM0Mj+f3tv/1/yxo3uvnS/uc75wMAzt+fa/wAAADBBI/t/s97+/+m/jiyXX+yEuz8x8Myvc+1/AAAAmKCR/f+O3v7/2R/PeMn2P9umuGvgmd/k2v8AAAAwQSP7f/Pe/r90kw/89Ki7nn7zpgPP/DbX/gcAAIAJGtn/W/T2/2VLXfXKTarVTnt04Jk7cu1/AAAAmKCR/b9lb/9f/rU5rz1huyOe/sPAM3fm2v8AAAAwQSP7f6ve/r/ikFf/+W8Xb7rIOgPPzPo9Aex/AAAAmKCR/f/O3v6/coXH5mo3XGKhUweeuTvX/gcAAIAJGtn/W/f2/1WHL//7rx1x35PPGXjmnlz7HwAAACZoZP+/q7f/r17mifbDj61/xqIDz9yba/8DAADABI3s/3f39v81q1/70te98tANLh545ne59j8AAABM0Mj+f09v///8U8+5/KoVF6xXHHjm97n2PwAAAEzQyP7fprf/r716qwMPfeTW+7408Mx9ufY/AAAATNDI/n9vb/9ft/vXttv7sL2+f/DAM3/Itf8BAABggkb2/7a9/X/9Dievteym5220xMAz9+fa/wAAADBBI/t/u97+/8Ud23zzznPWevHXB575Y679DwAAABP0v9r///kD3fa9/X/DC9f67RU7HnTpagPP/CnX/gcAAIAJGvn1//f19v+N3/7U6ivNXPaolw8880Cu/Q8AAAATNLL/39/b/7/8/kUvfO/ND330swPPPJhr/wMAAMAEjez/HXr7/6bn7vX0EVfv9oZm4JmHcu1/AAAAmKCR/b9jb//fvP+v5918gbPuPGXgmT/n2v8AAAAwQSP7f6fe/r/l8kX+8q09Fzv0rIFnHs61/wEAAGCCRvb/B3r7/9Ybl7rxL6fdtfO8A888kmv/AwAAwASN7P+de/v/tp3vXrG6uF5opYFn/pJr/wMAAMAEjez/XXr7/1dXv/hXx2x3+ZNHDTzzaK79DwAAABM0sv8/2Nv/t+/++9d+oNr5jAMGnnks1/4HAACACRrZ/x/q7f9f73DnC1a/6/QNXjzwzF9z7X8AAACYoJH9/+He/v/NHc9/6rqfrVyfOfDM47n2PwAAAEzQyP7ftbf/f3vRg4ftudgT980+8Mzfcu1/AAAAmKCR/b9bb//fUS/7wYP32+L7Lxh45olc+x8AAAAmaGT/f6S3/++ce8G3/vLEYzY6b+CZv+fa/wAAADBBI/t/997+v+v0G89cfN1tX1wNPPNkrv0PAAAAEzSy//fo7f+7T1vh6dcfc9KlJww881Su/Q8AAAATVDxvofbf7P89e/v/nvkef+H1T81x1LkDz/wj1/4HAACACRr59f+P9vb/vd31qx+75LUfnX/gmX/m2v8AAAAwQSP7/2O9/f+7n8z87U6rbPyGowee+Veu/Q8AAAATNLL/9+rt/99fffqKZ/z+8DtfO/DM07n2PwAAAEzQyP7fu7f/79t9lxvf86nVD1124Jlncu1/AAAAmKCR/b9Pb///YYd3/OW5Wzy782EDzzyba/8DAADABI3s/317+//+Ow6f98mzFvjR5wZemfVh/wMAAMAEjez/j/f2/x/33+SpbXe5+R0vG3hl1l9j/wMAAMAEjez/T/T2/58u/8oLvjT7PuXqA6+U+bD/AQAAYIJG9v9+vf3/wI1nvvbyGy743dcGXqnyYf8DAADABI3s//17+//BnXf81WuuW+r0uQdeqfNh/wMAAMAEjez/A3r7/6GfPrbCjvPcv/7ZA680+bD/AQAAYIJG9v+Bvf3/531ffcNxu633wm8PvNLmw/4HAACACRrZ/5/s7f+HPzzno7/47iHPdAOvzPox+x8AAAAmaGT/H9Tb/4/cctV8q71l98//ZOCVWX+//Q8AAAATNLL/P9Xb/39Z8IEPL3Hk2R984cArs+XD/gcAAIAJGtn/n+7t/0e/+4ov3PbEIqvOHHjlOfmw/wEAAGCCRvb/wb39/9h5zzvjoGXu+NXpA688Nx/2PwAAAEzQyP7/TG///7W6YcNdV17jS0sNvDJ7Pux/AAAAmKCR/X9Ib/8//rGPnPDDBw/c9VMDr8yRD/sfAAAAJmhk/3+2t///dt05a7/xc8st8eWBV+bMx//G/q/+m//EAAAAwP+ukf1/aG//P3H7F7edd/OHL3/VwCtz5cOv/wMAAMAEjez/z/X2/9+3e/MB96y50o+eN/DK3Pmw/wEAAGCCRvb/53v7/8mfHrrzvsc//o5zBl6ZJx/2PwAAAEzQyP7/Qm//P7XvWz97yNNblScNvDJvPux/AAAAmKCR/f/F3v7/x4c/eupvFz/ud8XAK7N2v/0PAAAAEzSy/w/r7f9/3nLWW5ZbrT39CwOvzJ8P+x8AAAAmaGT/H97b//86d+3Vjrr7yvWXG3hlgXzY/wAAADBBI/v/S739//Tsn75z+wN2euEqQ6/kw/4HAACACRrZ/0f09v8zz7/42eW3PvWZYwdeWTAf9j8AAABM0Mj+/3Jv/z974t6LXnrBpp9/0cArz8+H/Q8AAAATNLL/v/Jf+7+YcdBNe56wwxEf/OTAKwvlw/4HAACACRrZ/1/t7f9i1QWO2qRbbdWvDryycD7sfwAAAJigkf1/ZG//l8sud277m6d/tfLAKy/Ih/0PAAAAEzSy/4/q7f/qqD+9/W9XbPOlCwZeWSQf9j8AAABM0Mj+P7q3/+vfrX/B8gufsOtCA68smg/7HwAAACZoZP8f09v/zZZf2PLSfeZaYs6BVxbLh/0PAAAAEzSy/4/t7f92gx/tddTJ119+xsArL8yH/Q8AAAATNLL/j+vt/+7vux27/ebnXbLGwCuz/h77HwAAACZoZP9/rbf/Z272g92e+dxei9878Mri+bD/AQAAYIJG9v/xvf0/2yN7fnmOB2/d828Dr7w4H/Y/AAAATNDI/v96b/8/559vO3vLlRf8yuYDr7wkH/Y/AAAATNDI/v9Gb/8/d83PbnT6Mofe8ZuBV5bIh/0PAAAAEzSy/7/Z2/+zz377/H98Yv3V9h54Zcl82P8AAAAwQSP7/4Te/p/j3Bc+8YIj79vxQwOvLJUP+x8AAAAmaGT/n9jb/3OeuORtb3vLEp+9duCVl+bD/gcAAIAJGtn/J/X2/1zP/91KF373rn9+dOCVpfNh/wMAAMAEjez/b/X2/9y//ul639ptsYVvHnjlZfmw/wEAAGCCRvb/t3v7f55tuu9sPs9ZG1468Moy+bD/AQAAYIJG9v/Jvf0/7x6vP7S6brfvvXfglZfnw/4HAACACRrZ/6f09v981/9zx7/c8NAf/jzwyivyYf8DAADABI3s/1N7+3/+87f8zEqzL9u9beCVZfNh/wMAAMAEjez/03r7f4EZ33jfFbsctOkWA6+8Mh/2PwAAAEzQyP4/vbf/nzf/t9c54qy1zv7HwCvL5cP+BwAAgAka2f/f6e3/Bc/c7uT3nnzMJXcMvLJ8Pux/AAAAmKCR/X9Gb/8/f/YTNvjnPlssvv/AK6/Kh/0PAAAAEzSy/7/b2/8LnbvD92Yu/MSeOw68skI+7H8AAACYoJH9f2Zv/y984ru+uPUVK3/lmoFXVsyH/Q8AAAATNLL/v9fb/y+Y+b9+5dX5sP8BAABggkb2/1m9/b/IvjsuvGC382q/H3hlpXzY/wAAADBBI/v/+739v+hPz3zy9ztcvuNfB155TT7sfwAAAJigkf1/dm//L3bLV24/64L6sxsPvLJyPux/AAAAmKCR/f+D3v5/4Yc3ed3aWz/7zwcHXlklH/Y/AAAATNDI/j+nt/9ftMv3d3zPAasvvN7AK6vmw/4HAACACRrZ/z/s7f/Fb/3YoWfcffiG7x545bX5sP8BAABggkb2/7m9/f/in23wnSdX2/h7/xp45XX5sP8BAABggkb2/496+/8le31uvecufu0fdh14ZbV82P8AAAAwQSP7/8e9/b/E7C87+fqn5+h+OfDK6/Nh/wMAAMAEjez/83r7f8lzH1nn9ceftOnlA6+sng/7HwAAACZoZP+f39v/S514y/t2WnPbs3cYeOUN+bD/AQAAYIJG9v8Fvf3/0ufP95lj9znhlQ8NvLJGPux/AAAAmKCR/X9hb/8vff6Nu8w4eZtfbDjwypr5yP4v/yf/kQEAAID/TSP7/ye9/f+yGQt+8a9XXH/clgOvrJUPv/4PAAAAEzSy/y/q7f9l5l/2e6csPNc+/xx4Ze182P8AAAAwQSP7/+Le/n/5mQ9u8PbuiBU/NvDKOvmw/wEAAGCCRvb/Jb39/4qLnt7l3t9s+stbBl5ZNx/2PwAAAEzQyP7/aW//L1u/7ovzXPD0wT8beOWN+bD/AQAAYIJG9v/Pevv/lXMX31t3h9V22GbglTflw/4HAACACRrZ/5f29v9yp1+5wbkHXLnArwdeeXM+7H8AAACYoJH9f1lv/y+/432vOnPr9vG9Bl5ZLx/2PwAAAEzQyP6/vLf/X/XLl9z0rtVO/eaHB155Sz7sfwAAAJigkf1/RW//r3DFQo/NdvdOa1438Mr6+bD/AQAAYIJG9v+Vvf2/4sfvmvsfTz8+c82BV96aD/sfAAAAJmhk/1/V2/+vnvmJZ9+w+Ep/+t3AKxvkw/4HAACACRrZ/1f39v9KZ1+w6LVrHveTxwde2TAf9j8AAABM0Mj+v6a3/19z8oGrHX38Vlu/Y+CVt+XD/gcAAIAJGtn/P+/t/5UXedOdO3/uwFfuNvDKRvmw/wEAAGCCRvb/tb39v8pFn17p0c3X+MVNA69snA/7HwAAACZoZP9f19v/q9Zr31au/PBxlw28skk+7H8AAACYoJH9f31v/7927r2feMeDy+3z/oFXNs2H/Q8AAAATNLL/f9Hb/687/eL5v/3E2Ss+MPDK2/Nh/wMAAMAEjez/G3r7f7Wr37rtosvs/ss3D7yyWT7sfwAAAJigkf1/Y2//v373Qw94+C13HPyegVdm/ZmA9j8AAABM0Mj+/2Vv/6++w1knnH/kIjs8PfDK5vmw/wEAAGCCRvb/Tb39/4Y7Prr2ervdv8CbBl7ZIh/2PwAAAEzQyP6/ubf/1zj4/W9e5LtLPX7fwCtb5sP+BwAAgAka2f+39Pb/mqt98/RHrjvkm48NvLJVPux/AAAAmKCR/X9rb/+vtfSxn7tgnvXW3GjglXfmw/4HAACACRrZ/7f19v/aR2y905tnv3nmbwde2Tof9j8AAABM0Mj+/1Vv/6/zh2cO/sINC/xpv4FX3pUP+x8AAAAmaGT/397b/+tuvcr2+511wU92Gnjl3fmw/wEAAGCCRvb/r3v7/41vLtddZpd9tv75wCvvyYf9DwAAABM0sv9/09v/b3rsslNuP36OLV868Mo2+bD/AQAAYIJG9v9ve/v/zRu1b117zWt//OmBV96bD/sfAAAAJmhk/9/R2//rPXDJmWctvu1DRwy8sm0+7H8AAACYoJH9f2dv/7/lmX8c9vunT5pj+YFXtsuH/Q8AAAATNLL/7+rt//XXWe2DC969+joXDryyfT7sfwAAAJigkf1/d2//v3W2XV622WrPfnuxgVfelw/7HwAAACZoZP/f09v/G/zg9J+fvPXGj8428Mr782H/AwAAwASN7P97e/t/w1MOf+CxAw6f+zsDr+yQD/sfAAAAJmhk//+ut//ftug7ZhY77LztPAOv7JgP+x8AAAAm6N/v//ueO+O/9v9Gd+2xx0IXnH7QDwZe2Skf9j8AAABM0Miv/9/X+/X/jd939pEP/Ka+7VsDr3wgH/Y/AAAATNDI/v9Db/9vstshP7qou/w17cArO+fD/gcAAIAJGtn/9/f2/6Y/33CzDRbeYv9DB17ZJR/2PwAAAEzQyP7/Y2//v/3ih84/5Ipjvr70wCsfzIf9DwAAABM0sv//1Nv/mzXLbLHvyStf84aBVz6UD/sfAAAAJmhk/z/Q2//vmGfuvZfb54mXHz/wyofzYf8DAADABI3s/wd7+3/z79x63G93WXbL8wde2TUf9j8AAABM0Mj+f6i3/7eYbf5d33jWQz9+/sAru+XD/gcAAIAJGtn/f+7t/y1/8MsjfnjDWg/NNfDKR/Jh/wMAAMAEjez/h3v7f6tT/viDe2Y/aI7vDryyez7sfwAAAJigkf3/SG//v3PRV2487zyLrbP4wCt75MP+BwAAgAka2f9/6e3/rfe746WnX3fXtw8aeGXPfNj/AAAAMEEj+//R3v5/12UvuHzL7+726FcGXvloPux/AAAAmKCR/f9Yb/+/+4bFfz/HbmfN/ZqBVz6WD/sfAAAAJmhk//+1t//f84H722eOXH/bzw+8slc+7H8AAACYoJH9/3hv/2+zU73ZvW859KBXDryydz7sfwAAAJigkf3/t97+f+9NP/vRPMsscduqA6/skw/7HwAAACZoZP8/0dv/21755JHrPnHfa44beGXffNj/AAAAMEEj+//vvf2/3SdW3+PcB/faf8GBVz6eD/sfAAAAJmhk/z/Z2//bz/a143Zf+byv/3DglU/kw/4HAACACRrZ/0/19v/7frDV3gdsvuA1Jw68sl8+7H8AAACYoJH9/4/e/n//KdtscfPnbn350Cv758P+BwAAgAka2f//7O3/HRY9+fyXvujwv54z8MoB+bD/AQAAYIJG9v+/evt/x4u33/gn/9p43ucNvHJgPux/AAAAmKCR/f90b//v1Jz4gw2/9uwbi4FXPpkP+x8AAAAmaGT/P9Pb/x+Y5+gjFl5j9VNOGnjloHzY/wAAADBBI/v/2d7+3/k77971T+866eHlBl75VD7sfwAAAJigf7//Z8zo7f9d7n7g8JsO3HauLwy88ul82P8AAAAwQSP7v+jt/w9u9YqPvOiea9957MArB+fD/gcAAIAJGtn/ZW//f2jD5226x+vnOH+VgVc+kw/7HwAAACZoZP9Xvf3/4cdv+P5nfv3EVZ8ceOWQfNj/AAAAMEEj+7/u7f9dX/PYdd9oV37ZiwZe+Ww+7H8AAACYoJH93/T2/26ff/Vyu7z/mE+sPPDKofmw/wEAAGCCRvZ/29v/Hzl6zjlXOX+Lr3114JXP5cP+BwAAgAka2f9db//v/uKrHvr5KZffstDAK5/Ph/0PAAAAEzSy/2f29v8e7/hANee+9asvGHjlC/mw/wEAAGCCRvb/bL39v+dDZ9zz9AtO3+aMgVe+mA/7HwAAACZoZP8/p7f/P/rkkZecduXOB8458Mph+bD/AQAAYIJG9v9ze/v/Y2tt9OKtbjzrry8beOXwfNj/AAAAMEEj+3/23v7f6+4jrr5kjt3m/dzAK1/Kh/0PAAAAEzSy/+fo7f+9t3r7y1f84F1v/NrAK0fkw/4HAACACRrZ/3P29v8+G37oOTt8f7FTVh945cv5sP8BAABggkb2/1y9/b/v46f+8StnHPTw2QOvfCUf9j8AAABM0Mj+n7u3/z9+1Du//opd15pr7oFXvpoP+x8AAAAmaGT/z9Pb/59Y9viP3zX3Q+/sBl45Mh/2PwAAAEzQyP7/f7D3p2Fbj/+/95/PYco8ZMpUhJIpicxTZgkhQzLPMmfIkCkR36IofclMmTLFlwypUChCxkxRhiKEkqL/jf9urX1d+7Gtff2udf22bb/xeNzpvZ3beby2z93neZxnxwpR/1+29ZAjrx+/8Yj766wMDIf+BwAAgAJl+n/FqP97XHXMyAtbfjBu7Tort/7z/f+9TwsAAAD8v5Hp/0ZR/19+ysCFR85ZpcWLdVYGhUP/AwAAQIEy/b9S1P9XvHfAN/sOfO7Sh+qs/Dsc+h8AAAAKlOn/laP+v3LsaWNX3efC2xevs3JbOPQ/AAAAFCjT/6tE/X/VpY+uN+OQae9fXWfl9nDofwAAAChQpv9Xjfr/6obLvrFJ72ZbrF9nZXA49D8AAAAUKNP/q0X93/Op15t/Nr330a3qrNwRDv0PAAAABcr0f+Oo/68Z8mvD67bc54r+dVbuDIf+BwAAgAJl+n/1qP97rdlmRvex213do87KXeHQ/wAAAFCgTP+vEfX/tSPnNPhy9b9O+KzOyt3h0P8AAABQoEz/rxn1/3WLtPpqxYs7tnqjzso94dD/AAAAUKBM/68V9X/v5Zccs8eQfhNPrrNybzj0PwAAABQo0/9rR/1//cMTmg4fseygqXVW7guH/gcAAIACZfq/SdT/N3wz+ITZJ7514e51Vu4Ph/4HAACAAmX6v2nU///qfESvRRY9eqMD6qw8EA79DwAAAAXK9P86Uf/32fOYBw745O4Jv9ZZGRIO/Q8AAAAFyvT/ulH/9501pN092x8+cq86K0PDof8BAACgQJn+bxb1/42b9Ww7YsptXWbUWXkwHPofAAAACpTp//Wi/r+p966f7HVFmyXm11l5KBz6HwAAAAqU6f/1o/7vd8dF89Y88rcZXeqsPBwO/Q8AAAAFyvT/BlH/9282crWZO51yz7t1Vh4Jh/4HAACAAmX6v3nU/zfvv+bslrcP3fWsOiuPhkP/AwAAQIEy/d8i6v9bpk9u9NH8RVc5qc7KsHDofwAAAChQpv83jPp/wN9T2tzQZOzsV+usPBYO/Q8AAAAFyvR/y6j/B7bb4MMeW65x9Vd1Vh4Ph/4HAACAAmX6f6Oo/2/9Ztp206Z/dsJOdVaeCIf+BwAAgAJl+n/jqP8HdV7385V7n9uqU52VJ8Oh/wEAAKBAmf7fJOr/f++52oJdDnly4u91Vp4Kh/4HAACAAmX6f9Oo/2+b9cWaT+yz6aCL6qwMD4f+BwAAgAJl+n+zqP9vv2mj0xoOnHnh5DorT4dD/wMAAECBMv3fKur/wS2nX/fnnJ02Gl9n5Zlw6H8AAAAoUKb/N4/6/44dJw4d1vKKCWfUWflPOPQ/AAAAFCjT/62j/r+z58p7Hzm++8hJdVaeDYf+BwAAgAJl+n+LqP/vuub31XZe7vku59dZeS4c+h8AAAAKlOn/NlH/371d63lPnrXSEsfUWRkRDv0PAAAABcr0/5ZR/9/TvOEn3zwyacaYOivPh0P/AwAAQIEy/b9V1P/39nu77UpP7HVPhzorL4RD/wMAAECBMv3fNur/+77p+uHErtfu+mOdlRfDof8BAACgQJn+3zrq//s7P9xm3aXXX+XPOisvhUP/AwAAQIEy/b9N1P8P7HlTowve+Xb2oXVWRoZD/wMAAECBMv2/bdT/Q2Z1mn319Ganvldn5eVw6H8AAAAoUKb/t4v6f+j+t6y51pbTrj+7zsqocOh/AAAAKFCm/7eP+v/B6R0X/HjIPl+cWGdldDj0PwAAABQo0/87RP3/0N+nfP5c7947vFJnZUw49D8AAAAUKNP/O0b9/3C7x7bbe+AqF+xZZ+WfnwnofwAAAChQpv93ivr/kYOeW3P+Ph8MmF5n5dVw6H8AAAAoUKb/d476/9GZPRYs2/LC0X/VWXktHPofAAAACpTp/12i/h/2526fHzHnuXWPqrMyNhz6HwAAAAqU6f9do/5/bKerthu63C4HTKuzMi4c+h8AAAAKlOn/dlH/P37l3Ts9Pv6qx/eos/J6OPQ/AAAAFCjT/7tF/f9E25Pu2fWRjafuX2fljXDofwAAAChQpv93j/r/yY2OvGqVs35YZFadlTfDof8BAACgQJn+3yPq/6cG3HbM1K5n73tZnZXx4dD/AAAAUKBM/+8Z9f/wr7bu0/SJxx/9tM7KhHDofwAAAChQpv/3ivr/6UMXnP7uO2vNfbPOylvh0P8AAABQoEz/7x31/zP7vtr+mqW/WPWUOitvh0P/AwAAQIEy/b9P1P//mV17rNvqC5+6X52VieHQ/wAAAFCgTP/vG/X/sweNavfT2Fev/6HOyjvh0P8AAABQoEz/t4/6/7mZiz2wxpDTvphXZ+XdcOh/AAAAKFCm//eL+n/En9v32vPih3Y4rM7Ke+HQ/wAAAFCgTP93iPr/+Z3mnfD8iVtd8H6dlUnh0P8AAABQoEz/7x/1/wvrLr5ibcTsARfUWfnnZwL6HwAAAAqU6f8Dov5/cdBbv/z8yaGjj66z8kE4/pf+X/y/5YkBAACA/6pM/x8Y9f9L//pt4n2LDlp3dJ2VD8Ph/X8AAAAoUKb/O0b9P3KrzTfvNOXYAy6ss/JROPQ/AAAAFCjT/wdF/f/y6etsXW1/7+Of1Fn5OBz6HwAAAAqU6f+Do/4f9cHUyb8cufTUCXVW/vmZgP4HAACAAmX6/5Co/0eP/vzP+68Yv8iZdVYmh0P/AwAAQIEy/d8p6v8xF6666iG3H7Dv13VWPg2H/gcAAIACZfr/0Kj/X1lqxJz+O9346M51Vj4Lh/4HAACAAmX6/7Co/1995pKVjm6yw9xD6qx8Hg79DwAAAAXK9P/hUf+/ds/uW2wxf8Gqv9VZ+SIc+h8AAAAKlOn/I6L+H7vq5R+MXfraNVets/JlOPQ/AAAAFCjT/52j/h83Ypftj3xnr/kj6qxMCYf+BwAAgAJl+v/IqP9fb3D1F8Oe+Hboo3VWvgqH/gcAAIACZfq/S9T/bzR66e8/u66/17J1Vv75TED9DwAAAAXK9P9RUf+/OezCNRqe9XyDq+qsTA2H/gcAAIACZfr/6Kj/x3/d/NB9Huk+pWmdlWnh0P8AAABQoEz/HxP1/4TDZo54dvykp7ess/JNOPQ/AAAAFCjT/8dG/f9W+0m3/bDcSgfdXGfl23DofwAAAChQpv+Pi/r/7TkrXLT2nJnrb1Jn5btw6H8AAAAoUKb/j4/6f2KbzRZZrOWmY2+os/J9OPQ/AAAAFCjT/ydE/f9O39nf/rbPFf1vq7MyPRz6HwAAAAqU6f8To/5/97bxr901cKdztq6zMiMc+h8AAAAKlOn/k6L+f6/pEs069v5s26frrPwQDv0PAAAABcr0/8lR/086eOibAw5Z45NV6qz8GA79DwAAAAXK9P8pUf+//9MZLU7Y8sk+9VZmhkP/AwAAQIEy/X9q1P8fzDto8VbTzz3znjorP4VD/wMAAECBMv1/WtT/H+7cb/ro+UPX7Fln5edw6H8AAAAoUKb/T4/6/6Ov91/o0CanzN+gzsov4dD/AAAAUKBM/3eN+v/jwwZ8/fBOY4duVmdlVjj0PwAAABQo0/9nRP3/SftHRi+4fdG9+tVZ+TUc+h8AAAAKlOn/M6P+nzzn1CZLXXFbg7XqrPwWDv0PAAAABcr0/1lR/39686BDhh95+JQX6qz8Hg79DwAAAAXK9P/ZUf9/tslRw/fY/renH66zMjsc+h8AAAAKlOn/c6L+/3ybE25ZcUqbgxrWWZkTDv0PAAAABcr0/7lR/39x+b0XfLnoW+s/VWflj3DofwAAAChQpv/Pi/r/y6t2ajb/k2XHLl9nZW449D8AAAAUKNP/3aL+n7L1Na8tO+Lu/ovWWfkzHPofAAAACpTp//Oj/v9q4xe+PeLEo8+5r87KvHDofwAAAChQpv8viPr/64HdFxl68V/bNq+zMj8c+h8AAAAKlOn/C6P+n/r1R9O7Dtnuk951Vv4Kh/4HAACAAmX6/6Ko/6cdttbid4zt12dwnZW/w6H/AQAAoECZ/u8e9f837Zu1eGP1jmfuWGdlQTj0PwAAABQo0/8XR/3/7Zyv3tz6vCkjjkhXqn8O/Q8AAAAFyvT/JVH/f3dwkyb3Dm1yxNx0pQrfo/8BAACgRJn+vzTq/+9/+mb0/uP6LDszXan++QUA/Q8AAAAFyvT/ZVH/T5/36dcLN+owc990paqFQ/8DAABAgTL93yPq/xk7N15oTsN3h7ycrlQLh0P/AwAAQIEy/X951P8/zLh8xoPvr7j7selKtUg49D8AAAAUKNP/V0T9/+MBuzc8/OkXV+iWrlSLhkP/AwAAQIEy/X9l1P8zd7uk+TKnXPLrh+lKtVg49D8AAAAUKNP/V0X9/9OCEW/81afXFV3Tleqf1+t/AAAAKFCm/6+O+v/n7W99ZtqBux/9drpSNQyH/gcAAIACZfq/Z9T/v/TqctDKm3+3xUfpSrVEOPQ/AAAAFCjT/9dE/T+r//HddpnZ4v3u6Uq1ZDj0PwAAABQo0/+9ov7/tcU9A5/4dfjts9OVaqlw6H8AAAAoUKb/r436/7cjG1x43qbdLj0oXamWDof+BwAAgAJl+v+6qP9///a1f/fqMLnFrulKtUw49D8AAAAUKNP/vaP+n/3r/Off69943JR0pVo2HPofAAAACpTp/+uj/p+z1zaHNek5asRr6Uq1XDj0PwAAABQo0/83RP3/x4w/nhxxWIMjjk9XquXDof8BAACgQJn+/1fU/3MP2GH/vbYetuy56Uq1Qjj0PwAAABQo0/99ov7/c7eFz15z2pkz30lXqn+6X/8DAABAgTL93zfq/3kLRvef+cesIUemK1WjcOh/AAAAKFCm/2+M+n/+7a2mHdKs9e4L0pVqpXDofwAAAChQpv9vivr/r/XnLHZ/u8ErfJeuVCuHQ/8DAABAgTL93y/q/783n7D+L7d2/nXvdKVaJRz6HwAAAAqU6f/+Uf8vuHbJV6oeQ674OV2pVg2H/gcAAIACZfr/5v/Z/1WDqacsfdq9Jx59YLpSrRYO/Q8AAAAFyvT/LVH/L9TlsZ9uHTNui93SlapxOPQ/AAAAFCjT/wOi/q/2vuWt8Ws3fP/bdKVaPRz6HwAAAAqU6f+BUf/Xfu640Y7Vzbeflq5Ua4RD/wMAAECBMv1/a9T/C1/9y5g/Pz/40tfTlWrNcOh/AAAAKFCm/wdF/b/IDls1bfjSvBafpyvVWuHQ/wAAAFCgTP//O+r/RTdcusGRx24z7pJ0pVo7HPofAAAACpTp/9ui/l/sxje/Gta//YQb05Xqn9fofwAAAChQpv9vj/p/8c0bNtyiww0bbZ6uVE3Dof8BAACgQJn+Hxz1f8Nr354xdtN1LlwvXanWCYf+BwAAgAJl+v+OqP+XuP33N/r/+vWgXulKtW449D8AAAAUKNP/d0b9v+T6rZsfPfOyiUumK1WzcOh/AAAAKFCm/++K+n+p0447fZ3NR7Z6MF2p/vmbAP0PAAAABcr0/91R/y/9zv193jlw+RNeSleq9cOh/wEAAKBAmf6/J+r/ZV6987GefSZevUa6Um0QDv0PAAAABcr0/71R/y/b47D255/ScvYD6UrVPBz6HwAAAAqU6f/7ov5f7sWLW53x9PRVFk5Xqhbh0P8AAABQoEz/3x/1//KLvfje4Pfb7Vqn8asNw6H/AQAAoECZ/n8g6v8VVuw16/WGPe95Il2pWoZD/wMAAECBMv0/JOr/FR/cebltGq06Y/t0pdooHPofAAAACpTp/6FR/zf67OsFC8Z9vMSd6Uq1cTj0PwAAABQo0/8PRv2/0knrrbnU0Au6XJuuVJuEQ/8DAABAgTL9/1DU/yufu/Z2h573zMgN05Vq03DofwAAAChQpv8fjvp/ldc//vzhY7tOWDpdqTYLh/4HAACAAmX6/5Go/1c9bfU2rV56ZKPH0pWqVTj0PwAAABQo0/+PRv2/2juffTj68+rCZ9OVavNw6H8AAAAoUKb/h0X93/jVb2cPqMYMapyuVK3Dof8BAACgQJn+fyzq/9V7NG10wtpdJg5IV6otwqH/AQAAoECZ/n886v811nj32M/G3Nlqi3SlahMO/Q8AAAAFyvT/E1H/r/lAo8s3ubfVCeumK9WW4dD/AAAAUKBM/z8Z9f9aT25yd/ceP199RbpSbRUO/Q8AAAAFyvT/U1H/r734d7ted+uSs7dNV6q24dD/AAAAUKBM/w+P+r/Jkksud0u7N1YZlK5UW4dD/wMAAECBMv3/dNT/TZ+YMOvEZsfv2iddqbYJh/4HAACAAmX6/5mo/9e5f857m/9x/z0bpSvVP38ToP8BAACgQP+P/t9t2QYN4v7/T9T/667dqtWoaW1n3JWuVNuFQ/8DAABAgTLv/z8b9X+z0/p/vvDWc5eo0pVq+3DofwAAAChQpv+fi/p/vXcO3m7OYZ26rJSuVDuEQ/8DAABAgTL9PyLq//VfPXPNe3sOGPmfdKXaMRz6HwAAAAqU6f/no/7foMeDC/Z/6eB1t0tXqp3Cof8BAACgQJn+fyHq/+afNWzwxrE3j74jXal2Dof+BwAAgAJl+v/FqP9bnPTo7K2rbQZcl65Uu4RD/wMAAECBMv3/UtT/G5478MOun8+7oGW6Uu0aDv0PAAAABcr0/8io/1u+fkCbO8acuMOQdKVqFw79DwAAAAXK9P/LUf9v9PEejZqvPeSLRdKVardw6H8AAAAoUKb/R0X9v/FxV8ye3KPh9SukK9Xu4dD/AAAAUKBM/4+O+n+TC57/sO+94059PF2p9giH/gcAAIACZfp/TNT/m064tM0l7VqvukS6Uu0ZDv0PAAAABcr0/ytR/2+27FF7HX/rrLlD05Vqr3DofwAAAChQpv9fjfq/1dODHh74R+dHR6Yr1d7h0P8AAABQoEz/vxb1/+Z339t7TLPB+66ZrlT7hEP/AwAAQIEy/T826v/Wq59w8mZbN1jkpnSl2jcc+h8AAAAKlOn/cVH/b3Hm2F6/Txs1tXW6UrUPh/4HAACAAmX6//Wo/9u8v9AJi/Y88/Fm6Uq1Xzj0PwAAABQo0/9vRP2/5aht2x142LADrklXqg7h0P8AAABQoEz/vxn1/1YX//XA3R26rXt3ulLtHw79DwAAAAXK9P/4qP/bfrxj+237Dx9dS1eqA8Kh/wEAAKBAmf6fEPX/1sfNfWzcr40HNEpXqgPDof8BAACgQJn+fyvq/20uGNPn9k0nX/BMulJ1DIf+BwAAgAJl+v/tqP+3nbDI6WduvvsO26Qr1UHh0P8AAABQoEz/T4z6f7thsxt/OLPXF7emK9XB4dD/AAAAUKBM/78T9f/2jTb7o1mfFtf3TVeqQ8Kh/wEAAKBAmf5/N+r/HRos8fFZB3536sbpStUpHPofAAAACpTp//ei/t9xxPhtr3p6xVUHpivVoeHQ/wAAAFCgTP9Pivp/pymfbvbBKe/ObZOuVIeFQ/8DAABAgTL9/37U/zsf0fjd9Rpe8ug66Up1eDj0PwAAABQo0/8fRP2/S4cmv579/ov7Xp6uVEeEQ/8DAABAgTL9/2HU/7v+/s3yV45rsshS6UrVORz6HwAAAAqU6f+Pov5vd0W7v/doNGXqsHSlOjIc+h8AAAAKlOn/j6P+323bK9cYfl6Hx59LV6ou4dD/AAAAUKBM/38S9f/umz67/ZdD+xywerpSHRUO/Q8AAAAFyvT/5Kj/97jlsi9WPGzuQXPSlerocOh/AAAAKFCm/z+N+n/PrV7Y4rqebZ8+OF2pjgmH/gcAAIACZfr/s6j/9/pX9w+6TxswZZd0pTo2HPofAAAACpTp/8+j/t970E5zNtm6U4Mv05XquHDofwAAAChQpv+/iPp/n3WvWemzZm/sdXq6Uh0fDv0PAAAABcr0/5dR/+97xgcH3PnHkkPfSleqE8Kh/wEAAKBAmf6fEvV/+0nLPXX6rffP/zhdqU4Mh/4HAACAAmX6/6uo//d7ecN+bdsdv+bF6Up1Ujj0PwAAABQo0/9fR/3fofsPZ715751njkpXqpPDof8BAACgQJn+nxr1//7PvrXUez269DkuXalOCYf+BwAAgAJl+n9a1P8HVIvPbLL2z5+cl65Up4ZD/wMAAECBMv3/TdT/B668+dvnjWm17QfpSnVaOPQ/AAAAFCjT/99G/d/xkd827vX5I+ccnq5Up4dD/wMAAECBMv3/XdT/B310yOhdqq79/0hXqq7h0P8AAABQoEz/fx/1/8HH3tjkiWPHjP0pXanOCIf+BwAAgAJl+n961P+HnP/QQtNeqtZvn65UZ4ZD/wMAAECBMv0/I+r/TuNP/3rloR8fdGq6Up0VDv0PAAAABcr0/w9R/x96xrDFbzhv1afHpSvV2eHQ/wAAAFCgTP//GPX/YZNOnt6j0TNTvkhXqnPCof8BAACgQJn+nxn1/+EvH/hmy3EXNLg0XanODYf+BwAAgAJl+v+nqP+P6H5zi4/en77XL+lKdV449D8AAAAUKNP/P0f933m1k446umHLoR3TlapbOPQ/AAAAFCjT/79E/X/kvXe/2P+UnvPbpSvV+eHQ/wAAAFCgTP/Pivq/y39uu33s0+3W/CZdqS4Ih/4HAACAAmX6/9eo/49a+sjLtjhw5Jmd05XqwnDofwAAAChQpv9/i/r/6GVe2rh5n8v6/J2uVBeFQ/8DAABAgTL9/3vU/8cMv/DtyTMnfvJ9ulJ1D4f+BwAAgAJl+n921P/H3rXLzL6bL7/tPulKdXE49D8AAAAUKNP/c6L+P67x1UtdsukN54xNV6pLwqH/AQAAoECZ/v8j6v/jz1j/6+d+bd//hHSlujQc+h8AAAAKlOn/uVH/nzDpy4X27v/12HPSleqycOh/AAAAKFCm//+M+v/Elz9pslaHddafmK5UPcKh/wEAAKBAmf6fF/X/Sd3XGP3j1OP/Pj5dqS4Ph/4HAACAAmX6f37U/yd/9HmLC9rev/Zr6Up1RTj0PwAAABQo0/9/Rf1/yrGrvnn1oUvu8066Ul0ZDv0PAAAABcr0/99R/596/jrTJ179xkPnpivVVeHQ/wAAAFCgTP8viPr/tPFTF193UKevF6Qr1dXh0P8AAABQoP99/y/UIOr/06/b6KDbdxtQHZmuVD3Dof8BAACgQJn+Xyjq/66tpz9z5nptD9k7XamuCYf+BwAAgAJl+r+K+v+MDSYO3Hbu3P98l65UvcKh/wEAAKBAmf6vRf1/5uCVu41bq3r1wHSlujYc+h8AAAAKlOn/haP+P+uoLRpOHD2m2c/pSnVdOPQ/AAAAFCjT/4tE/X/2tFkz1r2n61nfpitV73DofwAAAChQpv8Xjfr/nF/GvXHBZY/ctFu6Ul0fDv0PAAAABcr0/2JR/5+7zzLNrz6u1UevpyvVDeHQ/wAAAFCgTP8vHvX/eTs+MnbnkT9vfVq6Uv0rHPofAAAACpTp/4ZR/3freep6T37Rpesl6UrVJxz6HwAAAAqU6f8lov4//6b9F/6mducNn6crVd9w6H8AAAAoUKb/l4z6/4KWA75ZaaV2f89NV6obw6H/AQAAoECZ/l8q6v8Lrzto6b6v91z7iHSluikc+h8AAAAKlOn/paP+v6h1v58uebDlPvumK1W/cOh/AAAAKFCm/5eJ+r/7BkPfat5t+kMz05Wqfzj0PwAAABQo0//LRv1/8eAzNpp88gVfH5uuVDeHQ/8DAABAgTL9v1zU/5f8Pfjw44Y/U72crlS3hEP/AwAAQIEy/b981P+Xtjvi2RsnrXrIh+lKNSAc+h8AAAAKlOn/FaL+v2z/Ywa9svjH/+mWrlQDw6H/AQAAoECZ/l8x6v8e04dcvNVP67z6drpS3RoO/Q8AAAAFyvR/o6j/L29wwMs/t/66Wdd0pRoUDv0PAAAABcr0/0pR/18xYuA6tY7tz+qerlT/Dof+BwAAgAJl+n/lqP+vHPZorVPfG276KF2pbguH/gcAAIACZfp/laj/r2p02pT7+i3/0UHpSnV7OPQ/AAAAFCjT/6tG/X/10a8vc8x+E7eena5Ug8Oh/wEAAKBAmf5fLer/np8s+0O/TS7rOiVdqe4Ih/4HAACAAmX6v3HU/9e81WbCa7NG3rBrulLdGQ79DwAAAAXK9P/qUf/3Ou/XTdvUxl33WLpS3RUO/Q8AAAAFyvT/GlH/X/tBq1ce+6LhyUunK9Xd4dD/AAAAUKBM/68Z9f91p89Zv/PIIds1Tleqe8Kh/wEAAKBAmf5fK+r/3hdOWGzx40787Nl0pbo3HPofAAAACpTp/7Wj/r9+9JLT5l027+Yt0pXqvnDofwAAAChQpv+bRP1/Q98j7n7unm26DUhXqvvDof8BAACgQJn+bxr1/7/aDN5179E3N70iXakeCIf+BwAAgAJl+n+dqP/7NB1y7FprHfzyuulKNSQc+h8AAAAK9D/6f8GC8JX/pf/Xjfq/723HXP7j3GFPDkpXqqHh0P8AAABQoMz7/82i/r/xsF3n/77emR23TVeqB8Oh/wEAAKBAmf5fL+r/m77uudaiu41abKN0pXooHPofAAAACpTp//Wj/u83Z+SOBw5q8E2fdKV6OBz6HwAAAAqU6f8Nov7v3/6iz+6+evBjVbpSPRIO/Q8AAAAFyvR/86j/b9568ubHH9p5v7vSlerRcOh/AAAAKFCm/1tE/X/LVWtOHNh2VuP/pCvVsHDofwAAAChQpv83jPp/wMANfhkztfW8ldKV6rFw6H8AAAAoUKb/W0b9P3DjKStuNuu76zZPV6rHw6H/AQAAoECZ/t8o6v9b+677x0ObtDj5xnSleiIc+h8AAAAKlOn/jaP+H9RmWuPD9uu1Xa90pXoyHPofAAAACpTp/02i/v930y+2Xbrf7p+tl65UT4VD/wMAAECBMv2/adT/t9222sd/951884PpSjU8HPofAAAACpTp/82i/r/9j+mP7d6xcbcl05Xq6XDofwAAAChQpv9bRf0/eJeN2j/denjTNdKV6plw6H8AAAAoUKb/N4/6/45DVj59yk/dXn4pXan+Ew79DwAAAAXK9H/rqP/v/GFinxUW7/PkwulK9Ww49D8AAAAUKNP/W0T9f9dPrT9bZlKHjg+kK9Vz4dD/AAAAUKBM/7eJ+v/ug3/f8a/hUxZ7Il2pRoRD/wMAAECBMv2/ZdT/9+z89loPntzkmzqNXz0fDv0PAAAABcr0/1ZR/987r+H8w7u9+Nid6Ur1Qjj0PwAAABQo0/9to/6/r+/DK9754CX7bZ+uVC+GQ/8DAABAgTL9v3XU//e36frL6a+/23jDdKX65zMB9T8AAAAUKNP/20T9/0DTThPbrrTivGvTlWpkOPQ/AAAAFCjT/9tG/T/ktps2f3OTiSfV0pXq5XDofwAAAChQpv+3i/p/6NYdPz5g1vLX3J2uVKPCof8BAACgQJn+3z7q/wevumXbe/qNfPeZdKUaHQ79DwAAAAXK9P8OUf8/NPCxxrP3u6x1o3SlGhMO/Q8AAAAFyvT/jlH/P7zxKX8s0vHr7remK9Ur4dD/AAAAUKBM/+8U9f8j2/f4+Km+69y2TbpSvRoO/Q8AAAAFyvT/zlH/P9rruW13+umGtzdOV6rXwqH/AQAAoECZ/t8l6v9h/a9q3Kh1+036pivV2HDofwAAAChQpv93jfr/sRa7/fHtpGc6t0lXqnHh0P8AAABQoEz/t4v6//EZJ129YPELXhyYrlSvh0P/AwAAQIEy/b9b1P9PHHD3iUud/PH3l6cr1Rvh0P8AAABQoEz/7x71/5O73bbHocNXXXyddKV6Mxz6HwAAAAqU6f89ov5/asGR9z/8YM+dh6Ur1fhw6H8AAAAoUKb/94z6f/j1C/Y+o1u7u5ZKV6oJ4dD/AAAAUKBM/+8V9f/TrbYeOnil6b+tnq5Ub4VD/wMAAECBMv2/d9T/z6xXu+7111uu9Fy6Ur0dDv0PAAAABcr0/z5R///nzldP2+aLn0+6I12pJoZD/wMAAECBMv2/b9T/z26/2OV31Vpds126Ur0TDv0PAAAABcr0f/uo/5/rNerYjsfd+W7LdKV6Nxz6HwAAAAqU6f/9ov4f0X/erouN7NL6unSlei8c+h8AAAAKlOn/DlH/P99i+7t/u2dM90XSlWpSOPQ/AAAAFCjT//tH/f/C3m99uO9l1W1D0pXq/XDofwAAAChQpv8PiPr/xZ8XbzNyrUfefjxdqT4Ih/4HAACAAmX6/8Co/1+aunmjGaO7brJCulJ9GA79DwAAAAXK9H/HqP9Hdvlt9qrrDeg8NF2pPgqH/gcAAIACZfr/oKj/X15k6l/t53Z6cYl0pfo4HPofAAAACpTp/4Oj/h81cp21Xxo09/s105Xqk3DofwAAAChQpv8Pifp/9MOr7jB9t7aLj0xXqsnh0P8AAABQoEz/d4r6f8zyn3+62qH379w6Xak+DYf+BwAAgAJl+v/QqP9fOeGS1p9effxdN6Ur1Wfh0P8AAABQoEz/Hxb1/6tfjHhn06lv/HZNulJ9Hg79DwAAAAXK9P/hUf+/9ublP1/cdsmVmqUr1Rfh0P8AAABQoEz/HxH1/9izd1/h2tcvWW5culJ9GQ79DwAAAAXK9H/nqP/HvXf13BVWevGXU9OVako49D8AAAAUKNP/R0b9//opu6w+pduK91+arlRfhUP/AwAAQIEy/d8l6v83Lr1wm6cffLfdF+lK9XU49D8AAAAUKNP/R0X9/+bYlz7afXiHpTumK9XUcOh/AAAAKFCm/4+O+n9875m3L3xynx9+SVeqaeHQ/wAAAFCgTP8fE/X/hM2aXzZn8SbPfpOuVP98Tf8DAABAgTL9f2zU/281W+GoeydNOaxdulJ9Gw79DwAAAAXK9P9xUf+/fcekF/dv3bjl3+lK9V049D8AAAAUKNP/x0f9P7Hz7FF7/jT5jc7pSvV9OPQ/AAAAFCjT/ydE/f/ON5ut+3zfbnfsk65U08Oh/wEAAKBAmf4/Mer/d2ctUf3UcXiP79OVakY49D8AAAAUKNP/J0X9/96e479cY78WW56QrlQ/hEP/AwAAQIEy/X9y1P+Ttjtj2Y/7fffh2HSl+jEc+h8AAAAKlOn/U6L+f/+aoT9uOGv3qyamK9XMcOh/AAAAKFCm/0+N+v+Dfv3GX7ZJr2PPSVeqn8JRp/8X/H/9yAAAAMB/Uab/T4v6/8PmB23yr7adlzs4Xal+Dof3/wEAAKBAmf4/Per/j3oPeHWVqYN/mZOuVL+EQ/8DAABAgTL93zXq/48323+DqVe3vv/LdKWaFQ79DwAAAAXK9P8ZUf9/0uzURR8/dFa7XdKV6tdw6H8AAAAoUKb/z4z6f/Idj0zddbczl34rXal+C4f+BwAAgAJl+v+sqP8//euofvMGDfvh9HSl+j0c+h8AAAAKlOn/s6P+/2yPQWctPrfBsxenK9XscOh/AAAAKFCm/8+J+v/zjvce0Hm9UYd9nK5U/3wmwIoNGjT8b35iAAAA4L8q0//nRv3/xfcnPPXY6G1aHpeuVH+EY8UGDb5c8P/33/zgAAAAwP+xTP+fF/X/l9Ov+fKptea9MSpdqeaGw+//AwAAQIEy/d8t6v8p++9U7XTZwXd8kK5Uf4ZD/wMAAECBMv1/ftT/X7Xrvm6je27ucV66Us0Lh/4HAACAAmX6/4Ko/7/++4VR345suOUf6Uo1Pxz6HwAAAAqU6f8Lo/6f2nutTdY5btyHh6cr1V/h0P8AAABQoEz/XxT1/7TNPhr/Tu3Eq9qnK9Xf4dD/AAAAUKBM/3eP+v+bZl/92POLIcf+lK5U/3zan/4HAACAAmX6/+Ko/7+9o9my52/V/qUZ6Urtn0P/AwAAQIEy/X9J1P/fbffN1B9m3HDUXulKLXyP/gcAAIASZfr/0qj/v7+myaJrX7/Okl3SlVoVDv0PAAAABcr0/2VR/0/v13iDfTp9PX1+ulL75w8A9D8AAAAUKNP/PaL+n9H801ef3fuye89KV2oLh0P/AwAAQIEy/X951P8/XLn7pt8MGLnLu+lKbZFw6H8AAAAoUKb/r4j6/8e2l09YafbyK7+artQWDYf+BwAAgAJl+v/KqP9nbjTih503nDjnpHSltlg49D8AAAAUKNP/V0X9/9OAS5Z5ckLLnp+lK7V/Xq//AQAAoECZ/r866v+fD+pyzkPLTz++R7pSaxgO/Q8AAAAFyvR/z6j/f5l5642Hnd1us5PTldoS4dD/AAAAUKBM/18T9f+sP+95YulHe77zRrpSWzIc+h8AAAAKlOn/XlH//7rT8R3/fnzVW3dPV2pLhUP/AwAAQIEy/X9t1P+/bfHaC9ue/vFFU9OV2tLh0P8AAABQoEz/Xxf1/+99GnQZt9QFG/+artSWCYf+BwAAgAJl+r931P+z/71Nj9snPjP+gHSltmw49D8AAAAUKNP/10f9P6fJ/MFnvtb1pfPTldpy4dD/AAAAUKBM/98Q9f8fV+5w/u+NHzlqUrpSWz4c+h8AAAAKlOn/f0X9P7ftHzcv2r1acky6UlshHPofAAAACpTp/z5R//+50einD3xgzPRj0pXaP92v/wEAAKBAmf7vG/X/vAELd7r7+S73/piu1BqFQ/8DAABAgTL9f2PU//N/n9N0tZPu3KVDulJbKRz6HwAAAAqU6f+bov7/q0OrMdMXa7XyoelKbeVwZPt/sf/7RwYAAAD+izL93y/q/7+PWPKrlyb/POfPdKW2Sji8/w8AAAAFyvR//6j/F0yZ0KD9dkv23Cldqa0aDv0PAAAABcr0/83/s/9rDV4+6eRNv3zj+K/Sldpq4dD/AAAAUKBM/98S9f9C3e/u/enlx2/2e7pSaxwO/Q8AAAAFyvT/gKj/qzNue/jazve/0yldqa0eDv0PAAAABcr0/8Co/2uTjtzr4p3b3jo5XamtEQ79DwAAAAXK9P+tUf8vfNeCB14aPPeii9KV2prh0P8AAABQoEz/D4r6f5HGW7dr/1enjc9IV2prhUP/AwAAQIEy/f/vqP8XXaZ2wmpNB4wfn67U1g6H/gcAAIACZfr/tqj/Fxv+aq/pE6e83iRd+R+v0f8AAABQoEz/3x71/+IrL3b6WUs1aX5lulJrGg79DwAAAAXK9P/gqP8bPjKqz1Wn97nklnSltk449D8AAAAUKNP/d0T9v8Sz8x778PEOg7dKV2rrhkP/AwAAQIEy/X9n1P9LVtu3b/bou5OeT1dqzcKh/wEAAKBAmf6/K+r/pTp0bXji2Su2WS1dqa0XDv0PAAAABcr0/91R/y/9+8Mzbln+xWOWSVdq64dD/wMAAECBMv1/T9T/y0y56Y1REy65/JF0pbZBOPQ/AAAAFCjT//dG/b/sEZ2ab75hr1krpyu15uHQ/wAAAFCgTP/fF/X/coO6HbTh7N1XHJ6u1FqEQ/8DAABAgTL9f3/U/8uv+9QzHw/4bo9705XahuHQ/wAAAFCgTP8/EPX/CltdN/Bfe7d4YKF0pdYyHPofAAAACpTp/yFR/6/4rw7dLus0/Kd/RS9fOPy7UfhX/wMAAECBMv0/NOr/RnN//Pfz13dbZtN0pbZxOPQ/AAAAFCjT/w9G/b/Sri0v3HPG5MPbpiu1TcKh/wEAAKBAmf5/KOr/lTstf9gaWzV+/t/pSu2f3wnQ/wAAAFCgTP8/HPX/Kj9++PxPTUe9/mK6UtssHPofAAAACpTp/0ei/l+1w0r7d/urQfO105Vaq3DofwAAAChQpv8fjfp/td/fe/KawcMuWTxdqW0eDv0PAAAABcr0/7Co/xtP+b7/uzufOfihdKXWOhz6HwAAAAqU6f/Hov5f/YhNz27aedak9dOV2hbh0P8AAABQoEz/Px71/xptP11s0OWt21ydrtTahEP/AwAAQIEy/f9E1P9rXtl42qlfDj6mf7pS2zIc+h8AAAAKlOn/J6P+X2tAk1d22K7z5a3SldpW4dD/AAAAUKBM/z8V9f/aG32z/oTJQ2Zdn67U2oZD/wMAAECBMv0/POr/Jpsu0u2dxU5csUW6Uts6HPofAAAACpTp/6ej/m96y5iB65w0bo8d0pXaNuHQ/wAAAFCgTP8/E/X/OlfMfeb85xs+cHu6Uts2HP+H/b/I/80jAwAAAP9Fmf7/T9T/626740E9H7j5p+XSldp24fD+PwAAABQo0//PRv3frMPg53fqfvAyT6Yrte3Dof8BAACgQJn+fy7q//V+P+KwpxrPO/z+dKX2z/8JoP8BAACgQJn+HxH1//pTjrnw29e2eX6xdKW2Yzj0PwAAABQo0//PR/2/wRFD/t3or7kb3JCu1HYKh/4HAACAAmX6/4Wo/5vPPeHsPk3bvrZJulLbORz6HwAAAAqU6f8Xo/5vseu9/S/deUC/rdOV2i7h0P8AAABQoEz/vxT1/4adBj3ZYnCnc29LV2q7hkP/AwAAQIEy/T8y6v+WPx61/yeXv7HNKulKrV049D8AAAAUKNP/L0f9v9Ffe519euclJz+drtR2C4f+BwAAgAJl+n9U1P8b79G3/53b3d/3nnSltns49D8AAAAUKNP/o6P+36Tj00+++eXxZ9RZqe0RDv0PAAAABcr0/5io/zf9/tz92y525xoj0pXanuHQ/wAAAFCgTP+/EvX/Zi0P2KjJ5C5/rZqu1PYKh/4HAACAAmX6/9Wo/1vdNPCt957/+cFl05Xa3uHQ/wAAAFCgTP+/FvX/5j0f/anXSa32fDRdqe0TDv0PAAAABcr0/9io/1vveNrS53V/ZKGm6Upt33DofwAAAChQpv/HRf2/xT6vf/XEA12/vCpdqbUPh/4HAACAAmX6//Wo/9v8smyDXV4bM/zmdKW2Xzj0PwAAABQo0/9vRP2/5bQ2TVduXB28ZbpS6xAO/Q8AAAAFyvT/m1H/b3XUr2OmLfXxBsunK7X9w6H/AQAAoECZ/h8f9X/bv1o17zFx1deeSldqB4RD/wMAAECBMv0/Ier/rfeY88YNjz/T7750pXZgOPQ/AAAAFCjT/29F/b9NxwkzPjr9gnMXTVdqHcOh/wEAAKBAmf5/O+r/bb9fsmHLs6dv0ztdqR0UDv0PAAAABcr0/8So/7fr/UeP/o+2nNw8XakdHA79DwAAAAXK9P87Uf9vv9kOg4+e0LPvjulK7ZBw6H8AAAAoUKb/3436f4dmC7+wxfLtzhicrtQ6hUP/AwAAQIEy/f9e1P873jG6y9jZI9fYIF2pHRoO/Q8AAAAFyvT/pKj/d3r13YP7bXjZXz3Tldph4dD/AAAAUKBM/78f9f/OPRr955i9Jz7YL12pHR4O/Q8AAAAFyvT/B1H/73LaJgPaDFh+z83SldoR4dD/AAAAUKBM/38Y9f+u73x33mvX37DQC+lKrXM49D8AAAAUKNP/H0X93+7+vW+rdWr/5VrpSu3IcOh/AAAAKFCm/z+O+n+3tW+46Oetvh7eMF2pdQmH/gcAAIACZfr/k6j/d1/ymUPvm7HOwQ+nK7WjwqH/AQAAoECZ/p8c9f8eT5w1olPjg/ffI12pHR0O/Q8AAAAFyvT/p1H/77nikwdMeO3mJ6alK7VjwqH/AQAAoECZ/v8s6v+9HjzvqR0e2GbarHSldmw49D8AAAAUKNP/n0f9v/eL+/U7tfu8hfdPV2rHhUP/AwAAQIEy/f9F1P/7LHbtWYNOOrH9p+lK7fhw6H8AAAAoUKb/v4z6f9+9P9pi8vNDHrksXamdEA79DwAAAAXK9P+UqP/b/7zWB80nN/zjlHSldmI49D8AAAAUKNP/X0X9v9/UZnMuWWzcam+mK7WTwqH/AQAAoECZ/v866v8OXb5aqe+XrU87O12pnRwO/Q8AAAAFyvT/1Kj/97/95VMGbjer93vpSu2fvwnQ/wAAAFCgTP9Pi/r/gPUXvf74zp0/fyVdqZ0aDv0PAAAABcr0/zdR/x+4+XYPbXb54B1PTFdqp4VD/wMAAECBMv3/bdT/Ha/9c88xgxucPz1dqZ0eDv0PAAAABcr0/3dR/x80/9Ahi+48auCe6Uqtazj0PwAAABQo0//fR/1/8O537PZ70zPHHJWu1M4Ih/4HAACAAmX6f3rU/4cceN/xd/81bJ2/0pXameHQ/wAAAFCgTP/PiPq/03fHXnPgjG77f5Ku1M4Kh/4HAACAAmX6/4eo/w/d+66u47Ya/sSF6Urt7HDofwAAAChQpv9/jPr/sJ9P7Lttp8bTzkxXaueEQ/8DAABAgTL9PzPq/8Ondh525vWTF56QrtTODYf+BwAAgAJl+v+nqP+P6PLvfW8fsHv7ndOV2nnh0P8AAABQoEz//xz1f+ftT9mm2d69Hvk6Xal1C4f+BwAAgAJl+v+XqP+P7PXYRx9u2OKP39KV2vnh0P8AAABQoEz/z4r6v0v/W+ZeNfu71Q5JV2oXhEP/AwAAQIEy/f9r1P9Htei4+lnLr3jaD+lK7Z/PBNT/AAAAUKBM//8W9f/RGz6+5+kT3u29X7pSuygc+h8AAAAKlOn/36P+P+bG8x+689FLPj8sXal1D4f+BwAAgAJl+n921P/HXr3v9W+e/eKO89KV2sXh0P8AAABQoEz/z4n6/7gdep/S9vQm51+QrtQuCYf+BwAAgAJl+v+PqP+P37v5NX89PmXg++lK7dJw6H8AAAAoUKb/50b9f8LPM49fZmKHMaPTldpl4dD/AAAAUKBM//8Z9f+JUyftdvhSfdY5Ol2p9QiH/gcAAIACZfp/XtT/J3VZYciDQ8b9OSldqV0eDv0PAAAABcr0//yo/0+eP3Hf1hc3XP38dKV2RTj0PwAAABQo0/9/Rf1/yu4rD3t59SEdjklXaleGQ/8DAABAgTL9/3fU/6ceuFHfm8eeOGxMulK7Khz6HwAAAAqU6f8FUf+f9t30rid9Mu/bDulK7epw6H8AAAAo0P++/6sGUf+fPnT24Ucsus2iP6YrtZ7h0P8AAABQoEz/LxT1f9cVNnt26Ik3H/hnulK7Jhz6HwAAAAqU6f8q6v8zFl1i0PwRBz91aLpS6xUO/Q8AAAAFyvR/Ler/M18Yf/GyRw4b9VW6Urs2HPofAAAACpTp/4Wj/j/rspmLrXLFmU12Sldq14VD/wMAAECBMv2/SNT/Z7/SfNrUKaPO65Su1HqHQ/8DAABAgTL9v2jU/+dMXOGVx7dvcMvv6Urt+nDofwAAAChQpv8Xi/r/3FMnrb9rk8GfXpSu1G4Ih/4HAACAAmX6f/Go/89b6/zXr5nfefvJ6UrtX+HQ/wAAAFCgTP83jPq/232Pt+x2+6xTxqcrtT7h0P8AAABQoEz/LxH1//mP916i6U6trz0jXan1DYf+BwAAgAJl+n/JqP8vWGLf79495Ls/90pXajeGQ/8DAABAgTL9v1TU/xcO7VPbs3eL1WekK7WbwqH/AQAAoECZ/l866v+LVthzyvPTe3WYn67U+oVD/wMAAECBMv2/TNT/3Rc95+Wfttx9WJd0pdY/HPofAAAACpTp/2Wj/r/4heHrrNFy8rfvpiu1m8Oh/wEAAKBAmf5fLur/S77Y46D75jRe9Kx0pXZLOPQ/AAAAFCjT/8tH/X/pCVc802ng8ANPSldqA8Kh/wEAAKBAmf5fIer/y85+fmBtn25PvZqu1AaGQ/8DAABAgTL9v2LU/z3evLTbz4/0GdUjXandGg79DwAAAAXK9H+jqP8vb3r9W1ud1aHJZ+lKbVA49D8AAAAUKNP/K/3/2PvzqK3Hv+//pv2zRxSiDCFzxmTOEBKZMmUs87dMyRQhITImUzKmDIlEhsxEMmfIGJnLUIYQQoR0r+u+tq5zu9Z23ud2f8/f71xr++Px+Kd3xzqO19r/fR6f2veo//sP3X29F5b4vPer6UrtxnDofwAAAChQpv+Xjvr/vCtPbzJo4srXHpOu1IaGQ/8DAABAgTL9v0zU/+dv+sCP3d8e98m0dKU2LBz6HwAAAAqU6f9lo/6/YLulFhjZ5Kytd0xXajeFQ/8DAABAgTL9v1zU/xf+9d4X+x3/To/O6Urt5nDofwAAAChQpv9bRP1/0Y8/Pr/gA0sN+CVdqd0Sjv9/+3/h/wcvGQAAAPg3Zfp/+aj/L95v7VVmtT/i8pXSldqt4fD8HwAAAAqU6f8Vov4f8Pt3rx4z7I7jxqUrteHh0P8AAABQoEz/rxj1/yW7t15r6N+Lbn53ulK7LRz6HwAAAAqU6f+WUf8P7LpMozdXfvXD/+T/7tdGhEP/AwAAQIEy/b9S1P+Xfvn2d+22PmDQBelK7fZw6H8AAAAoUKb/V476/7L7+t/f7/PrerVKV2p3hEP/AwAAQIEy/b9K1P+XN9tp98v7b77GhulKbWQ49D8AAAAUKNP/q0b9f8UCZx/34SFzXrg6XandGQ79DwAAAAXK9P9qUf9fOfbJK9YZ2+DRtdOV2qhw6H8AAAAoUKb/V4/6f1CfIbM2Our5Ay5NV2p3hUP/AwAAQIEy/b9G1P9XPXfYEs82PL42LF2p3R0O/Q8AAAAFyvR/q6j/B08+csNrP7rni23SldrocOh/AAAAKFCm/9eM+v/q40ZMOmrChqMfTFdq94RD/wMAAECBMv2/VtT/1yy7YLsRy/+06xLpSu3ecOh/AAAAKFCm/9eO+v/a2yZM2evMQ1sulK7U7guH/gcAAIACZfp/naj/r3t07rzqzlvm3ZGu1O4Ph/4HAACAAmX6f92o/69vvNWKvz+ww+XnpSu1MeHQ/wAAAFCgTP+vF/X/DffNmX388Rcet3K6UnsgHPofAAAACpTp/9ZR/w9ptm2zm5usu3nbdKU2/zMB9D8AAAAUKNP/60f9f+MC9U1ffXvGh9emK7WHwqH/AQAAoECZ/m8T9f/Qsc+/v8XE0wctl67UHg6H/gcAAIACZfp/g6j/h324wfD+Szza68l0pfZIOPQ/AAAAFCjT/xtG/X9T99nbn3zSsmvck67UHg2H/gcAAIACZfp/o6j/bz59YrdW93z4wmLpSu2xcOh/AAAAKFCm/zdesPo//X/L64uc+16nVR99OF2pPR4O/Q8AAAAFyvT/JtHz/1vf+HbSK9d/ecDS6UrtiXDofwAAAChQpv83jfp/eO82G275++61BdOV2thw6H8AAAAoUKb/N4v6/7bDmy9xwrqXfTEiXanN/0wA/Q8AAAAFyvR/26j/R3w0adZNmzUd3SZdqT0VDv0PAAAABcr0/+ZR/99+X68Vu8x4a9fL05XauHDofwAAAChQpv+3iPr/jmaPzRs9sF/LG9OV2tPh0P8AAABQoEz/bxn1/8gFLp8yb//x8zZPV2rjw6H/AQAAoECZ/t8q6v87x3Zq1/j4s7o/lK7UngmH/gcAAIACZfq/XdT/o5a95P3rHhh3XtN0pfZsOPQ/AAAAFCjT/1tH/X/XbXtueuTbS01umK7UnguH/gcAAIACZfp/m6j/73701GYbNnmn7e3pSu35cOh/AAAAKFCm/7eN+n9044dmP7fEnv3WSldqL4RD/wMAAECBMv3fPur/e1a44/3eE6+4ZWC6UnsxHPofAAAACpTp/+2i/r93ZPdNL75n5dduSldqL4VD/wMAAECBMv3fIer/+x7s2mzSSZ+vs226UpsQDv0PAAAABcr0//ZR/9+/8C2zV76+RZcL05Xay+HQ/wAAAFCgTP/vEPX/mFfHDdy808dPrJmu1F4Jh/4HAACAAmX6v2PU/w+cdOYxr6176g8bpCu1V8Oh/wEAAKBAmf7fMer/B4/Ybpdbfn+48eB0pfZaOPQ/AAAAFCjT/ztF/f/QlItHHzdj7Y4t05XaxHDofwAAAChQpv93jvr/4bvX2OGuzb65/al0pfZ6OPQ/AAAAFCjT/7tE/f/IEl+OPHD/HX8ana7U3giH/gcAAIACZfp/16j/H60+vHixgRc3bZSu1N4Mh/4HAACAAmX6v1PU/489vdKRc4cd3H39dKX2Vjj0PwAAABQo0/+7Rf3/+AqfXnF0+5vOuyxdqb0dDv0PAAAABcr0/+5R/z8xcvnjrll548lD05XaO+HQ/wAAAFCgTP/vEfX/2AdX2f2Zv2e13SJdqU0Kh/4HAACAAmX6f8+o/59c+Ov7N/78xH6PpCu1d8Oh/wEAAKBAmf7fK+r/p3o2+/DSre+7ZZl0pfZeOPQ/AAAAFCjT/52j/h/39jtb9Tlkgdf+k5Xa5HDofwAAAChQpv/3jvr/6Re/abFe/2fXuS1dqb0fDv0PAAAABcr0/z5R/48/Z/0/ph61ZZdl05XaB+HQ/wAAAFCgTP/vG/X/M6tv88vAsX89MTZdqX0YDv0PAAAABcr0/35R/z978x9Nz/hovx/uTVdqH4VD/wMAAECBMv2/f9T/zw18boPWDa9pvHi6Uvs4HPofAAAACpTp/wOi/n9+g+qdKcs36nh+ulL7JBz6HwAAAAqU6f8uUf+/sMPIrZef8PLtq6QrtU/Dof8BAACgQJn+7xr1/4v/HD71mzuP+mmzdKU2JRz6HwAAAAqU6f8Do/5/acaB/zx15p1Nr0lXalPDof8BAACgQJn+Pyjq/wl7DVthz4FvNeuTrtQ+C4f+BwAAgAJl+v/gqP9fnnXo7+/t3/S3j9KV2ufh0P8AAABQoEz/HxL1/ys739C81Wbjh7+ertS+CIf+BwAAgAJl+v/QqP9fPfi2TU6e0a/9ielK7ctw6H8AAAAoUKb/D4v6/7Wvjpjc//cvG32ZrtSmhUP/AwAAQIEy/X941P8TR28y+Pl1V/1mu3SlNj0c+h8AAAAKlOn/f0X9/3rTWSdt0Omyp/ZPV2pfhUP/AwAAQIH+i/5vuMACDbpF/f9G/eXOR1y/+yG/piu1r8Oh/wEAAKBAmef/3aP+f3P8Yg9df9KjbfZIV2rfhEP/AwAAQIEy/X9E1P9vnb3em1fec/ob36crtW/Dof8BAACgQJn+PzLq/7cnzGh91sQPb/wrXanNCIf+BwAAgAJl+v+oqP/fmfRW47WWWPbMrulK7btw6H8AAAAoUKb/j476f1KPpWd+3OTCjd5LV2rz/0+A/gcAAIACZfr/mKj/313x4QVbvr3DpNPTldoP4dD/AAAAUKBM//eI+v+9O0/+8ocHZlx8eLpSmxkO/Q8AAAAFyvT/sVH/T35o5+eeOH7do55LV2o/hkP/AwAAQIEy/d8z6v/3G12x8q5n/tRserpS+ykc+h8AAAAKlOn/46L+/2D0bq+9deeGv+2UrtR+Dof+BwAAgAJl+v/4qP8/bDpw7dUm3DJ8r3SlNisc+h8AAAAKlOn/E6L+/6g+ZuHTlz+0/ax0pfZLOPQ/AAAAFCjT/ydG/f/x+NNmXNDw+Ub90pXar+HQ/wAAAFCgTP+fFPX/J59cOKzdRw2++SRdqf0WDv0PAAAABcr0f6+o/z89avt+b46956nX0pXa7HDofwAAAChQpv9Pjvp/yslnHDb0qOMP6ZGu1H4Ph/4HAACAAmX6/5So/6e+PH7cMf2vazMpXan9EQ79DwAAAAXK9H/vqP8/e+3gmb0POeCNXulKbU449D8AAAAUKNP/p0b9/3mvGxtfvPWcG49KV2p/hkP/AwAAQIEy/X9a1P9fHHlr60mfb37mC+lK7a9w6H8AAAAoUKb/T4/6/8upR7258t93bLRzulL7Oxz6HwAAAAqU6f8+Uf9PG/3CytNXPmLSjHSlNjcc/7/6/+z+/y++ZgAAAODfk+n/M6L+n960wXNLt3/14rnpSu2fcHj+DwAAAAXK9H/fqP+/qm/+ZYdhix51WLpSmxeO/93/8/5HXzIAAADwb8r0/5lR/389/p8FH/hj+vuLpCvV/MPzfwAAAChQpv/Pivr/mxXbzVh39dU3G5WuVOF79D8AAACUKNP/Z0f9/+2dfy78wQ4Du41PV6oG4dD/AAAAUKBM//eL+n/GQ8+sfdkNnc5fMV2pauHQ/wAAAFCgTP+fE/X/d40avnbOhZNfvSpdqea/AYD+BwAAgAJl+v/cqP+/HzFslVW6LrPuxulKVQ+H/gcAAIACZfq/f9T/Pyx34PPvbPHEOaunK1XDcOh/AAAAKFCm/8+L+n9mk8O/uGh6n5svSleqhcKh/wEAAKBAmf4/P+r/Hx8bucCpDc7/vl26Us3/ef0PAAAABcr0/wVR//906gVnHT+lQ5Ob05WqUTj0PwAAABQo0/8XRv3/85sdbr756e+7XpKuVIuEQ/8DAABAgTL9f1HU/7M+7jP+1W6tH183XakWDYf+BwAAgAJl+v/iqP9/+dfTh2xxzpif70xXqsbh0P8AAABQoEz/D4j6/9fmKzz494heS9TTlapJOPQ/AAAAFCjT/5f8R///Me/+j/Za/PmpOyyZrlSLhUP/AwAAQIEy/T8wev4/+8nPeh20Uss7xqQr1eLh0P8AAABQoEz/Xxr1/+8Ltrp6VKMX378+XamWCIf+BwAAgAJl+v+yqP//GDGtz0bvVZttmq5UTcOh/wEAAKBAmf6/POr/OcuteuOzj9zdbdV0pZr/ngD6HwAAAAqU6f8rov7/s8myT17bo+f556Yr1fzu1/8AAABQoEz/Xxn1/1+PTel6VO/ZrzZOV6pm4dD/AAAAUKBM/w+K+v/vd1u3mTKq7br3pStV83DofwAAAChQpv+vivp/7gnfvd765SHnPJGuVEuHQ/8DAABAgTL9Pzjq/3/6vv39Gc263Lx8ulItEw79DwAAAAXK9P/VUf/Pe2aZxQb+MuL74elKtWw49D8AAAAUKNP/1/xH/1cLtJ124W9tujWppSvVcuHQ/wAAAFCgTP9fG/X/gpevenTDPSd2bZauVC3Cof8BAACgQJn+vy7q/wZDlt1x76ubPP5oulLNf08A/Q8AAAAFyvT/9VH/11abcvvwKwb9vGW6Uq0QDv0PAAAABcr0/w1R/1cHnNXpiL07L3FDulKtGA79DwAAAAXK9P+QqP/rP4y96/qN5u1wZbpStQyH/gcAAIACZfr/xqj/G845d8DzM7e5o3W6Uq0UDv0PAAAABcr0/9Co/xfafsdjN1hpl1ufTVeq+T+j/wEAAKBAmf4fFvX/wp9f0P/u5wds1z1dqVYJh/4HAACAAmX6/6ao/xsd1KF71xGtmvdOV6pVw6H/AQAAoECZ/r856v9F9uzTock5X/86OV2pVguH/gcAAIACZfr/lqj/F/3t6Vv/6dZ33IHpSrV6OPQ/AAAAFCjT/7dG/d/48ZnTnnr6yYP/SFeqNcKh/wEAAKBAmf4fHvV/kwZrNdxzSvOFf0xXqlbh0P8AAABQoEz/3xb1/2JLL7nm8g3e/Xb3dKVaMxz6HwAAAAqU6f8RUf8vfs+7L34zvc3Q39OVaq1w6H8AAAAoUKb/b4/6f4kTZj/x0xYz++6XrlRrh0P/AwAAQIEy/X9H1P9N393goFrX9ut3SFeqdcKh/wEAAKBAmf4fGfX/ks8s0veAC/u/+Vm6Uq0bDv0PAAAABcr0/51R/y/Vd+INt9+wwkXHpSvVeuHQ/wAAAFCgTP+Pivq/2WInnP6vHT49+o10pWodDv0PAAAABcr0/11R/zd/eNS1g1c/ZeMP05Vq/XDofwAAAChQpv/vjvp/6VsHP/zSHw++c2a6UrUJh/4HAACAAmX6f3TU/8u02Hf/TWf2uPXgdKXaIBz6HwAAAAqU6f97ov5f9vHrxt2/0ajt/klXqg3Dof8BAACgQJn+vzfq/+Ua7HXYwXs3bP5tulJtFA79DwAAAAXK9P99Uf+3WPrYfgtfMeHXTulKtXE49D8AAAAUKNP/90f9v/w99wz76+oDx01IV6pNwqH/AQAAoECZ/h8T9f8Kbx42Y/s9hx58ZLpSbRoO/Q8AAAAFyvT/A1H/r3jqkIXHtNl04ZPTlWqzcOh/AAAAKFCm/x+M+r/lv0asPe2XX799K12p2oZD/wMAAECBMv3/UNT/K3185GvLNFt86LHpSrV5OPQ/AAAAFCjT/w9H/b/yBxfdsOjLb/R9OV2ptgiH/gcAAIACZfr/kaj/V+nWvu8fow5ff2q6Um0ZDv0PAAAABcr0/6NR/696Wt+D7uk9/M2z05Vqq3DofwAAAChQpv8fi/p/tYlPPXFYj3YX/ZyuVO3Cof8BAACgQJn+fzzq/9Ufb7n/jY/MPXqfdKXaOhz6HwAAAAqU6f8nov5fo8EHD/d4b5+Nd0hXqm3Cof8BAACgQJn+Hxv1f6ulv7h260aD3/kqXam2DYf+BwAAgAJl+v/JqP/XvGf109/YqPMex6crVftw6H8AAAAoUKb/n4r6f63Fvhq278xB97+ZrlTbhUP/AwAAQIEy/T8u6v+1H165351XbPPXB+lK1SEc+h8AAAAKlOn/p6P+X+fWFof9sve8Fn3TlWr7cOh/AAAAKFCm/8dH/b9ui0/GLbBnt31mpyvV/M8E0P8AAABQoEz/PxP1/3qLvDrs0atHPLhvulJ1DIf+BwAAgAJl+v/ZqP9bj2ncr+MvTb7aPl2pdgyH/gcAAIACZfr/uaj/1799s8Oatpm40OfpSrVTOPQ/AAAAFCjT/89H/d+m5U/jvni57akHpSvVzuHQ/wAAAFCgTP+/EPX/Bp+88+yfzWZfMyddqXYJh/4HAACAAmX6/8Wo/zc8qtlqjXp3eWZmulLtGg79DwAAAAXK9P9LUf9vdPL6DQ4ZNWSV3dKVqlM49D8AAAAUKNP/E6L+3/jlbz6775HqmGfSlWr+7wT0PwAAABQo0/8vR/2/yVO7Lt6zx4uXdEtXqt3Dof8BAACgQJn+fyXq/00bXvbDDY16fnpqulLtEQ79DwAAAAXK9P+rUf9vtuSjEye+d3e799OVas9w6H8AAAAoUKb/X4v6v+2ok9bf9vlee/yUrlR7hUP/AwAAQIEy/T8x6v/NF3nwxTtWGnP/3ulK1Tkc+h8AAAAKlOn/16P+32JM7zX3P6flXx3TlWr+7wT0PwAAABQo0/9vRP2/5e17NGwwYmqLr9OVap9w6H8AAAAoUKb/34z6f6uWA6b9/HSHfXqmK9W+4dD/AAAAUKBM/78V9X+7s88cvEu38x98JV2p9guH/gcAAIACZfr/7aj/t54w7qSxDVp/NSVdqfYPh/4HAACAAmX6/52o/7eZdHHnmVO+X+isdKU6IBz6HwAAAAqU6f9JUf9v22O7h1bcYplTX0pXqi7h0P8AAABQoEz/vxv1f/uNOj++8/TJ1xyRrlRdw6H/AQAAoECZ/n8v6v/tBlx/4JMX9nnmlHSlOjAc+h8AAAAKlOn/yVH/dxh275k/dn1ilbfTleqgcOh/AAAAKFCm/9+P+n/7Vj2HrLDD6scckq5UB4dD/wMAAECBMv3/QdT/O+z9ymkf3jD9knnpSjX/dwL6HwAAAAqU6f8Po/7v+M3i16zzR6dPv0lXqkPDof8BAACgQJn+/yjq/x3/3vSRfqsPbLdrulIdFg79DwAAAAXK9P/HUf/vtOMvB1z+3twtRqYr1eHh0P8AAABQoEz/fxL1/87TNnxqmUbtPqjSlepf4dD/AAAAUKBM/38a9f8uh/5+6LQegy/7Txq/6hYO/Q8AAAAFyvT/lKj/d9319XPGPLLP8Q+kK1X3cOh/AAAAKFCm/6dG/d/pp0Vv2n7UG6tvna5UR4RD/wMAAECBMv3/WdT/u4076MMFey/+4i3pSnVkOPQ/AAAAFCjT/59H/b/7QjdtNavZ8KsGpCvVUeHQ/wAAAFCgTP9/EfX/Hkvd2WLky4eftE66Uh0dDv0PAAAABcr0/5dR/+9517/+2K/N0AaD0pXqmHDofwAAAChQpv+nRf2/V8/tL9j9lwO/3ChdqXqEQ/8DAABAgTL9Pz3q/85vX3jU01f/+tga6Up1bDj0PwAAABQo0/9fRf2/94vjd5qx56b7X5yuVD3Dof8BAACgQJn+/zrq/33OOeOO5fYetdKi6Up1XDj0PwAAABQo0//fRP2/76If7/rJFT3+uStdqY4Ph/4HAACAAmX6/9uo//d7YMVRbWZOuPvpdKU6IRz6HwAAAAqU6f8ZUf/vf8eal5y5UcNOK6Qr1Ynh0P8AAABQoEz/fxf1/wErfd5zwOqfbrFVulKd9H++DQAAAChOpv+/j/q/y7jVzl3yjxU+GJKuVL3C4fk/AAAAFCjT/z9E/d91oendPr/hwcuuSFeqk8Oh/wEAAKBAmf6fGfX/gUtN3f6RHU45fr10pTolHPofAAAACpTp/x+j/j/oruWG79h15uq3pitV73DofwAAAChQpv9/ivr/4FdnvP/PhW1ebJCuVKeGQ/8DAABAgTL9/3PU/4ectN6mTab3v6p5ulKdFg79DwAAAAXK9P+sqP8PPWLpZl23aH/SY+lKdXo49D8AAAAUKNP/v0T9f9iUt2bfPeXJBk3SlapPOPQ/AAAAFCjT/79G/X/4pxvf8WiDvl/en65UZ4RD/wMAAECBMv3/W9T//zr6t506dnv3scfTlapvOPQ/AAAAFCjT/7Oj/u92yptHNX26+f4t0pXqzHDofwAAAChQpv9/j/q/+yuNLvhixICVrktXqrPCof8BAACgQJn+/yPq/yPGje655jm7/LNJulKdHQ79DwAAAAXK9P+cqP+PXOj4S95d6eu7V0tXqn7h0P8AAABQoEz//xn1/1FLHTDq3OdbdeqfrlTnhEP/AwAAQIEy/f9X1P9H33XVrqccc/jVm6Yr1bnh0P8AAABQoEz//x31/zGL7jP824eHn3x9ulLN/zcB+h8AAAAKlOn/uVH/93jg2u1bvLt4q3PTleq8cOh/AAAAKFCm//+J+v/YO+7vtsfCb0xYNV2pzg+H/gcAAIACZfp/XtT/PVfqce645vtccV+6Ul0QDv0PAAAABfqv+7+2QNT/xx04/JMGrww+sXG6Ul0YDv0PAAAABcr0/4JR/x//2dHb/HxXu62WT1eqi8Kh/wEAAKBAmf5vEPX/Cb8estIdp8796Il0pbo4HPofAAAACpTp/1rU/yfuMXTu/oMbjqqlK9WAcOh/AAAAKFCm/6uo/0+67In+e+wxYZfh6Up1STj0PwAAABQo0//1qP97bXZO93Hr91jx0XSlGhgO/Q8AAAAFyvR/w6j/T161Y4dvZ436u1m6Ul0aDv0PAAAABcr0/0JR/59yw/m3tvhx00duSFeqy8Kh/wEAAKBAmf5fOOr/3t+vsufUjX/dd8t0pbo8HPofAAAACpTp/0ZR/5+6/9f3rrfPgQu0TleqK8Kh/wEAAKBAmf5fJOr/0zp8elmfK4d+fmW6Us3/mv4HAACAAmX6f9Go/0//Y/kTLh3S/upR6Uo1KBz6HwAAAAqU6f/GUf/3OfDDC5t27H/yIulKdVU49D8AAAAUKNP/TaL+P+OzlY7+Yo02rVZMV6rB4dD/AAAAUKBM/y8W9X/fX9fY8dE5MyeMT1eqq8Oh/wEAAKBAmf5fPOr/M/f48vaO0065YuN0pbomHPofAAAACpTp/yWi/j+r9RLvzN38wROvSleqa8Oh/wEAAKBAmf5vGvX/2ddP3mCxLitsdVG6Ul0XDv0PAAAABcr0/5JR//c7//umB17w6UerpyvV9eHQ/wAAAFCgTP8vFfX/OVus88td3VuNujldqW4Ih/4HAACAAmX6v1nU/+dO+mTnE8Z/vUu7dKUaEg79DwAAAAXK9H/zqP/792hx901Td1lx3XSlujEc+h8AAAAKlOn/paP+P+/slS99pTbg70vSlWpoOPQ/AAAAFCjT/8tE/X/+hK96bNmy+SP1dKUaFg79DwAAAAXK9P+yUf9f8NAOF8177t1970xXqpvCof8BAACgQJn+Xy7q/wsbnXdE49v6LjAmXanmfyaA/gcAAIACZfq/RdT/F634eMcu/Z78fMl0pbolHPofAAAACpTp/+Wj/r/4zn53jr5y4rR/0pXq1nDofwAAAChQpv9XiPp/QP2p3Tbcp0n94HSlGh4O/Q8AAAAFyvT/ilH/XzK+733PbTyic6d0pbotHPofAAAACpTp/5ZR/w8c3f7K637sNubbdKUaEQ79DwAAAAXK9P9KUf9f2vSi44+cNW/OkelKdXs49D8AAAAUKNP/K0f9f9nBk9dec/1tlp2QrlR3hEP/AwAAQIEy/b9K1P+Xf7XEa+/uMWi3t9KVamQ49D8AAAAUKNP/q0b9f8WsdWacO7jzvSenK9Wd4dD/AAAAUKBM/68W9f+VO3+/8Cmn3j315XSlGhUO/Q8AAAAFyvT/6lH/Dxr4Ru+ed/Xc5th0pborHPofAAAACpTp/zWi/r9qg4Wvu+GVF489O12p7g6H/gcAAIACZfq/VdT/g1ff6LGJzatLp6Yr1ehw6H8AAAAoUKb/14z6/+qbf91v24WHPLdPulLdEw79DwAAAAXK9P9aUf9fM2P/sX++22W1n9OV6t5w6H8AAAAoUKb/1476/9q9BnVp9PDs079KV6r7wvF/+r/h/9xLBgAAAP5Nmf5fJ+r/63a4+4xDjml73Q7pSnV/ODz/BwAAgAJl+n/dqP+v/+e4off1+35a93SlGhMO/Q8AAAAFyvT/elH/33DwfSdtclvr+rPpSvVAOPQ/AAAAFCjT/62j/h/y1TGDJzx3fufJ6Ur1YDj0PwAAABQo0//rR/1/46y9H7q6ZYcxvdOV6qFw6H8AAAAoUKb/20T9P3TnazofXps65490pXo4HPofAAAACpTp/w2i/h+27tFrfjC15bIHpivVI+HQ/wAAAFCgTP9vGPX/TVcNf3Hd8WN22z1dqR4Nh/4HAACAAmX6f6Oo/2++cOi0c7r3uvfHdKV6LBz6HwAAAAqU6f+No/6/ZdtDGl52wcCp+6Ur1ePh0P8AAABQoEz/bxL1/63tnt5vUJdO2/yerlRPhEP/AwAAQIEy/b9p1P/DL+rzWPfNpx/7WbpSjQ2H/gcAAIACZfp/s6j/bxvc4bq201a/tEO6Uj0ZDv0PAAAABcr0f9uo/0esdUHvF+Y88dwb6Ur1VDj0PwAAABQo0/+bR/1/+8Gthi64Rp/VjktXqnHh0P8AAABQoEz/bxH1/x1ffXbGrI6TTz8zXameDof+BwAAgAJl+n/LqP9Hzvqoy8ghy1z3YbpSjQ+H/gcAAIACZfp/q6j/79x5hbH73fbuInunK9Uz4dD/AAAAUKBM/7eL+n/UjCmd3+zX/Luf0pXq2XDofwAAAChQpv+3jvr/rr2WfahdyyfHf52uVM+FQ/8DAABAgTL9v03U/3fvsOrgY57re2jHdKV6Phz6HwAAAAqU6f9to/4f/c+0k4ZO/XqZV9KV6oX//edC/9MvFwAAAPhvyPR/+6j/75k5q3PrWqvZPdOV6sVweP4PAAAABcr0/3ZR/9+77yYPTek+4Laz0pXqpXDofwAAAChQpv87RP1/X/vFBg8cv8v2U9KVakI49D8AAAAUKNP/20f9f/+fL590RpcHNzwiXaleDof+BwAAgAJl+n+HqP/HbD6j8b8uOOWtl9KVav57Aup/AAAAKFCm/ztG/f/AeevNHDzt0wveTleqV8Oh/wEAAKBAmf7fMer/B69b+s2XNl/hyFPSleq1cOh/AAAAKFCm/3eK+v+h9d5qveka/debl65UE8Oh/wEAAKBAmf7fOer/h7uc/NxPc9q/fki6Ur0eDv0PAAAABcr0/y5R/z/yxcMr14bMHLJrulK9EQ79DwAAAAXK9P+uUf8/OvuKBQ/o2KbPN+lK9WY49D8AAAAUKNP/naL+f2y3nb+8fZ9fF3kzXaneCof+BwAAgAJl+n+3qP8fnzlw4W2u3PS749OVav5nAup/AAAAKFCm/3eP+v+JfXeb8fqPQ8f3TVeqd8Kh/wEAAKBAmf7fI+r/se1Pe23Ixgce+kG6Uk0Kh/4HAACAAmX6f8+o/5/8c8zax64/YZl905Xq3XDofwAAAChQpv/3ivr/qSHbH/bOrIazZ6cr1Xvh0P8AAABQoEz/d476f9xqF45bZfCo2z5PV6rJ4dD/AAAAUKBM/+8d9f/TbccPO3WPHttvn65U74dD/wMAAECBMv2/T9T/4y8/o99Fdw3ecE66Us1/T0D9DwAAAAXK9P++Uf8/M7nHqZNO3eetg9KV6sNw6H8AAAAoUKb/94v6/9nj7r9+5eZzL9gtXak+Cof+BwAAgAJl+n//qP+f63Pto71faXfkzHSl+jgc+h8AAAAKlOn/A6L+f/65ffa9+N3h63VLV6pPwqH/AQAAoECZ/u8S9f8Lj/78ZIeFD3/9mXSl+jQc+h8AAAAKlOn/rlH/v9i4bdcHjnljyPvpSjUlHPofAAAACpTp/wOj/n9p2SZ9pj+8eJ9T05Vqajj0PwAAABQo0/8HRf0/4bbXbly6Y5+zh6Qr1Wfh0P8AAABQoEz/Hxz1/8sLNOp12ZAnhm2VrlSfh0P/AwAAQIEy/X9I1P+vjH3z6nPmLPPyeulK9UU49D8AAAAUKNP/h0b9/+p9vz247hqT174iXam+DIf+BwAAgAJl+v+w/93/v/2vxn+t2cZ7fbB5p8MbpCvVtHDofwAAAChQpv8Pj57/T+zavdmN0wb2vzVdqaaHQ/8DAABAgTL9/6+o/1//8o7ZPS5Y/b3H0pXqq3DofwAAAChQpv+7Rf3/xu+3vL91l+mbNE9Xqq/Dof8BAACgQJn+7x71/5u7d930jfEtd7w/Xam+CYf+BwAAgAJl+v+IqP/fuvLMXSZ3n3pnk3Sl+jYc+h8AAAAKlOn/I6P+f3vTcaPXqPX6pUW6Us0Ih/4HAACAAmX6/6io/99Z5eKBvaaOWfLxdKX6Lhz6HwAAAAqU6f+jo/6fNHS7Y857rvVBm6Qr1ffh0P8AAABQoEz/HxP1/7s/fnnxTi2/H3tdulL9EA79DwAAAAXK9H+PqP/f22+NIx/u12Fm/3SlmhkO/Q8AAAAFyvT/sVH/T95upR0+u+38xVdLV6ofw6H/AQAAoECZ/u8Z9f/7f304cqmHu5xdpSvVT+HQ/wAAAFCgTP8fF/X/B12X3/2SY4YMG5muVD+H49/s/3P+Oy8ZAAAA+Ddl+v/4qP8//PLT+/su3PblB9KValY4PP8HAACAAmX6/4So/z/6/esr1n939tr/SeNXv4RD/wMAAECBMv1/YtT/H+++ynGfvtLz8FvSlerXcOh/AAAAKFCm/0+K+v+T9d9pcWTzu/tvna5Uv4VD/wMAAECBMv3fK+r/T69p9sd1p1bvrZOuVLPDof8BAACgQJn+Pznq/ynnrv/hc3e9uMmAdKX6PRz6HwAAAAqU6f9Tov6fuuU3W224xzY7bpSuVH+EQ/8DAABAgTL93zvq/8+2WPSY1oPn3TkoXanmhEP/AwAAQIEy/X9q1P+fn//6wCmzOv9ycbpS/RkO/Q8AAAAFyvT/aVH/f3H976MHrj9oyTXSleqvcOh/AAAAKFCm/0+P+v/L1hvucsbGTQ66K12p/g6H/gcAAIACZfq/T9T/07pePfKpHyeOXTRdqeaGQ/8DAABAgTL9f0bU/9O/3G+HPa/sNnOFdKX6Jxz6HwAAAAqU6f++Uf9/9fuJRy6/z4jFn05Xqnnh0P8AAABQoEz/nxn1/9e733XxN0/uMmlsulKff+h/AAAAKFCm/8+K+v+bH3sed/LRAzZaNl2ph+/R/wAAAFCiTP+fHfX/t/vde0X/hVodtXi6Um8Qjn+3/xf+b7xkAAAA4N+U6f9+Uf/P2O76+9/7+OuL701X6rVweP4PAAAABcr0/zlR/3/3V+fdW73U941V0pV6FQ79DwAAAAXK9P+5Uf9/3/m1O/u0eLLN+elKff4bAOp/AAAAKFCm//tH/f/Dd006Xtq3+ZnXpCv1huHQ/wAAAFCgTP+fF/X/zHltj5g68t0bN0tX6guFQ/8DAABAgTL9f37U/z92/Pmi9bZr881l6Up9/s/rfwAAAChQpv8viPr/p4sn/bnJTTMbrZ+u1BuFQ/8DAABAgTL9f2HU/z9v3XzZCXPbH7JFulJfJBz6HwAAAAqU6f+Lov6ftXabLa5epf9TQ9OV+qLh0P8AAABQoEz/Xxz1/y9Xf/vx4e1W+G2ZdKXeOBz6HwAAAAqU6f8BUf//+nWnTe747NNmj6Qr9Sbh0P8AAABQoEz/XxL1/2+HXD55/3NPaX9bulJfLBz6HwAAAAqU6f+BUf/P3uWx3xsc/ODw/2Slvng49D8AAAAUKNP/l0b9//svvZr/vGuPSWumK/UlwqH/AQAAoECZ/r8s6v8/Oj/0T8/rRm10YbpSbxoO/Q8AAAAFyvT/5VH/z/nu1BVumN3wqMHpSn3JcOh/AAAAKFCm/6+I+v/PeXtuPXGdCRdvkK7U53e//gcAAIACZfr/yqj//+p4ydRt2x74xlPpSr1ZOPQ/AAAAFCjT/4Oi/v+7Vd+7Lv5uaJuW6Uq9eTj0PwAAABQo0/9XRf0/d9hTnXpfuumZjdKV+tLh0P8AAABQoEz/D476/58BFx278gG/3jg6XakvEw79DwAAAAXK9P/VUf/P26j9gEljFv+mabpSXzYc+h8AAAAKlOn/a/6j/+sLLDXjsweOe6PRQ+lKfblw6H8AAAAoUKb/r436f8G71mvQofHhh9yertRbhEP/AwAAQIEy/X9d1P8Nxi292tJvDX+qYbpSXz4c+h8AAAAKlOn/66P+ry301rPTX2/328B0pb5COPQ/AAAAFCjT/zdE/V+dcvL6Kzed22ytdKW+Yjj0PwAAABQo0/9Dov6vv/LwxEm99mm/bbpSbxkO/Q8AAAAFyvT/jVH/N/z0ih8uvnfw8JvSlfpK4dD/AAAAUKBM/w+N+n+ho3devPfB02/vla7U5/+M/gcAAIACZfp/WNT/C784cNrMc1fvOCldqa8SDv0PAAAABcr0/01R/zc6Z7eGK342sOkL6Up91XDofwAAAChQpv9vjvp/kZ6nrblLu04/HZWu1FcLh/4HAACAAmX6/5ao/xd9e8yLY1eZ/MSMdKW+ejj0PwAAABQo0/+3Rv3feNhn/f+Yu0yXndOV+hrh0P8AAABQoP/o/wbhK/9X/w+P+r9Jq1bdF73picaHpSv1VuHQ/wAAAFCgzPP/26L+X2yjFToctl2fH+amK/U1w6H/AQAAoECZ/h8R9f/iAz669Z6R59+yU7pSXysc+h8AAAAKlOn/26P+X2LXPz55uG+HftPTlfra4dD/AAAAUKBM/98R9X/Tn7bZZqcW368zK12prxMO/Q8AAAAFyvT/yKj/l5xWrbTUS61f2ytdqa8bDv0PAAAABcr0/51R/y916HNzP/t4zHmfpCv19cKh/wEAAKBAmf4fFfV/s3UOX3KNhXp175eu1FuHQ/8DAABAgTL9f1fU/80Hjfxp8tFT2/ZIV+rrh0P/AwAAQIEy/X931P9LXzDs7fOebDn5tXSl3iYc+h8AAAAKlOn/0VH/L7PNgRv3uvfF279PV+obhEP/AwAAQIEy/X9P1P/LDrvhg+96VR33SFfqG4ZD/wMAAECBMv1/b9T/y7U6dMtlm97dtGu6Ut8oHPofAAAACpTp//ui/m+x0RHL7/Z6z5/+SlfqG4dD/wMAAECBMv1/f9T/yw+4bc74t2Y/cXq6Ut8kHPofAAAACpTp/zFR/6/wXecrF2rctst76Up903DofwAAAChQpv8fiPp/xc7XH//rcUMaP5eu1DcLh/4HAACAAmX6/8Go/1t2vHe3W8d0+eHwdKXeNhz6HwAAAAqU6f+Hov5faV7P+/Y5YMQtH6Ur9c3Dof8BAACgQJn+fzjq/5X/HjB3z0u79euTrtS3CIf+BwAAgAJl+v+RqP9X2XGPlZ76buI6J6Yr9S3Dof8BAACgQJn+fzTq/1X37r3NN22bvPZ6ulLfKhz6HwAAAAqU6f/Hov5f7ZsHP1l+nUHnbZeu1NuFQ/8DAABAgTL9/3jU/6sPW2LjKbM7d/8yXalvHQ79DwAAAAXK9P8TUf+v0Wry262vm9f213Slvk049D8AAAAUKNP/Y6P+b7XR9z+dses2k/dPV+rbhkP/AwAAQIEy/f9k1P9rDlhnyYG95u76abpSbx8O/Q8AAAAFyvT/U1H/r7XON3OWuLfd6HPSlfr89wTU/wAAAFCgTP+Pi/p/7UHrL//l64PnHZOu1DuEQ/8DAABAgTL9/3TU/+tc0GzLx5ru0/LVdKW+fTj0PwAAABQo0//jo/5fd5t3Ptih8RsH7Jiu1HcIh/4HAACAAmX6/5mo/9db/4U5s95a/NFp6Uq9Yzj0PwAAABQo0//PRv3f+poGyy84ZvgXv6Qr9fn/JkD/AwAAQIEy/f9c1P/rn7v5lvsdd3itc7pS3ykc+h8AAAAKlOn/56P+b7PlPx+MvHRor+/SlfrO4dD/AAAAUKBM/78Q9f8Gf3xy+9MHHDhol3SlPv9r+h8AAAAKlOn/F6P+37BDix13b/vrC4emK/Vdw6H/AQAAoECZ/n8p6v+N9l/56OW+23SNv9OVeqdw6H8AAAAoUKb/J0T9v/H3X104Y/ao405KV+q7hUP/AwAAQIEy/f9y1P+b3LDDsW3W6XH5O+lKffdw6H8AAAAoUKb/X4n6f9NVzxvwya4TPnwxXanvEQ79DwAAAAXK9P+rUf9vttnjdw24ruHmR6cr9T3Dof8BAACgQJn+fy3q/7aX9et05rmf7to+XanvFQ79DwAAAAXK9P/EqP83X/+pWz8/eIXRX6Qr9c7h0P8AAABQoEz/vx71/xbX9O2wZLsH5/32v/7W9f9aqe8dDv0PAAAABcr0/xtR/295bvvuO352SssD0pX6PuHQ/wAAAFCgTP+/GfX/Vlte1P+RuTMP+Dhdqe8bDv0PAAAABcr0/1tR/7freurvTVZp8+gZ6Up9v3DofwAAAChQpv/fjvp/6y8fav7Pdv2/OCFdqe8fDv0PAAAABcr0/ztR/2/z+yWb3H1T+9rEdKU+/z0B9D8AAAAUKNP/k6L+33b3PSd37ftkr9PSlXqXcOh/AAAAKFCm/9+N+r/90od92nhk30Hvpiv1+R8HqP8BAACgQJn+fy/q/+3uGbLtvJfefeH5dKV+YDj0PwAAABQo0/+To/7v8PiIlqNbNF/jX+lK/aBw6H8AAAAoUKb/34/6f/sGR/7dZaEBx/2QrtQPDof+BwAAgAJl+v+DqP93OG3CUjd9vMvle6Yr9UPCof8BAACgQJn+/zDq/44TF/z5hCe//rBLulI/NBz6HwAAAAqU6f+Pov7f8YOt3try6Fab/5mu1A8Lh/4HAACAAmX6/+Oo/3fqNnejV67rvPXS6Ur98HDofwAAAChQpv8/ifp/52e2/XCfXQd98nC6Up//mQD6HwAAAAqU6f9Po/7fpe+crW5dZ5sBI9KVerdw6H8AAAAoUKb/p0T9v+sJz7f4dfa8HgumK/Xu4dD/AAAAUKBM/0+N+r/Tu/U/Fvqu28qXpyv1I8Kh/wEAAKBAmf7/LOr/3Ybs91THtiOebZOu1I8Mh/4HAACAAmX6//Oo/3df7epDHz2gybWbpyv1o8Kh/wEAAKBAmf7/Iur/Pdredc4Xl07sfWO6Uj86HPofAAAACpTp/y+j/t/z8hNvanpc24Yrpyv1Y8Kh/wEAAKBAmf6fFvX/Xnvu/nmjMbO/Pi9dqfcIh/4HAACAAmX6f3rU/51/u7T251tdHro2XakfGw79DwAAAAXK9P9XUf/v/fkDq97XeMjebdOVes//7x8L/Y+/XAAAAOC/IdP/X0f9v89Bpz9zSNNq+SfTlfpx4fD8HwAAAAqU6f9vov7ft817bW54/cU/l0tX6seHQ/8DAABAgTL9/23U//tdu9TrPe/ted9i6Ur9hHDofwAAAChQpv9nRP2/f/+1v9+219173pOu1E8Mh/4HAACAAmX6/7uo/w/Y6sfFJh7da+tL05X6SeHQ/wAAAFCgTP9/H/V/lyGtp+//5JhP1k5X6r3Cof8BAACgQP9l//9e+yHq/66rfbfQHR+3HLBNulI/ORz6HwAAAAqUef4/M+r/A9u+3ernhab2GJau1E8Jh/4HAACAAmX6/8eo/w+6fJkXGrTosPIS6Uq9dzj0PwAAABQo0/8/Rf1/8MxpD4596fxnH0xX6qeGQ/8DAABAgTL9/3PU/4fsu+peu4xsfe0d6Ur9tHDofwAAAChQpv9nRf1/aPtle63Y9/vetXSlfno49D8AAAAUKNP/v0T9f9ifU66eedMyDcelK/U+4dD/AAAAUKBM//8a9f/hc7Z+ZtZ2k79eKV2pnxEO/Q8AAAAFyvT/b1H//2v7v1ZdcJU+Dy2crtT7hkP/AwAAQIEy/T876v9uBzxb22/uE3vfna7UzwyH/gcAAIACZfr/96j/u/+w0OcjP1t9+VbpSv2scOh/AAAAKFCm//+I+v+IIXcs1r3d9D8vSFfqZ4dD/wMAAECBMv0/J+r/I1fr/v2ggzvdd3W6Uu8XDv0PAAAABcr0/59R/x/VtuvrL5w7cM8N05X6OeHQ/wAAAFCgTP//FfX/0Zff0qbtuhOvvzBdqZ8bDv0PAAAABcr0/99R/x/T5pAX7v29yWlrpiv1/uHQ/wAAAFCgTP/Pjfq/x7VDWx16/YhVN0hX6ueFQ/8DAABAgTL9/0/U/8f2H77QIp26PT84XamfHw79DwAAAAXK9P+8qP97bnX09Dn7zxvYMl2pz/9MQP0PAAAABfqv+79aIOr/406aVH9+4DY9n0pX6vPfE1D/AwAAQIEy/b9g1P/Hv9r86w1mDNp2dLpSvygc+h8AAAAKlOn/BlH/nzClzUtHbNZ5SqN0pX5xOPQ/AAAAFCjT/7Wo/0884tvVr3/77nseSlfqA8Kh/wEAAKBAmf6vov4/aeRrXa5s0nP3pulK/ZJw6H8AAAAoUKb/61H/91qhydizjn9xuYbpSn1gOPQ/AAAAFCjT/w2j/j954bZD13qg+uP2dKV+aTj0PwAAABQo0/8LRf1/yoM/n/HxPUMeWCtdqV8WDv0PAAAABcr0/8JR//d+aZ/rWp7UZa+B6Ur98nDofwAAAChQpv8bRf1/6lnX9v5hidnVTelK/Ypw6H8AAAAoUKb/F4n6/7Rj7t/viYltp2+brtSvDIf+BwAAgAJl+n/RqP9Pf6fHY7t+9P31y6Yr9UHh0P8AAABQoEz/N476v89Jow9+q2Hr08amK/WrwqH/AQAAoECZ/m8S9f8Zrx7/9GpHnb/qvelKfXA49D8AAAAUKNP/i0X933fKAbecPrbD84unK/Wrw6H/AQAAoECZ/l886v8zj7jq7AvunDrw/HSlfk049D8AAAAUKNP/S0T9f9ZC3RZtd2bLnqukK/Vrw6H/AQAAoECZ/m8a9f/Z427/9s3lx2y7WbpSvy4c+h8AAAAKlOn/JaP+73fXzS8PndBryjXpSv36cOh/AAAAKFCm/5eK+v+cpbqsc8zKA+9ZP12p3xAO/Q8AAAAFyvR/s6j/z51z31X3/91p98vSlfqQcOh/AAAA+P+w96dRW47/3/9PHPshMoQMmechYxmSmcxDRDJkSjImIbMSMiufJKHIWJGIDEmSDCGUmVAhfDIlQ0L872yta/uu7buubV1r/X9rbTcej1vvdS7Ha513n/aOcy9Qpv+bRP3fa89Tz+0waNaqd6YrtTvCof8BAACgQJn+Xynq/yvat227xG7r/7FDulJb+P8E9D8AAAAUKNP/K0f9f+UP/R/769gxo55MV2qDwqH/AQAAoECZ/l8l6v+rbt/u+F16XXjIyulKbXA49D8AAAAUKNP/q0b933u9OePenPnB4v/LSu2ucOh/AAAAKFCm/5tG/X/19q8Pun3nlWfdm67U7g6H/gcAAIACZfp/taj/r7mpUY/TJ58w4+B0pTYkHPofAAAACpTp/9Wj/r92y7dunbPcPYt+n67U7gmH/gcAAIACZfp/jaj/r7t1iQsWO3vZdn+lK7WF3wnQ/wAAAFCgTP+vGfX/9b2aH9F+xFujj0pXaveFQ/8DAABAgTL9v1bU/zfs+Ovo+0cdtuD9dKV2fzj0PwAAABQo0/9rR/1/4/n3z/m6S7/VL0hXag+EQ/8DAABAgTL9v07U/zdN7rh8k6V32veEdKX2YDj0PwAAABQo0//rRv3f56MjW+w+dcHwF9OV2tBw6H8AAAAoUKb/14v6v2/Hu6Y+vl017cJ0pTYsHPofAAAACpTp//Wj/r95yHOPPDT71VafpCu14eHQ/wAAAFCgTP9vEPX/f5pe3Oao60876810pfZQOPQ/AAAAFCjT/xtG/d9vmd3OWvqIYX27piu1h8Oh/wEAAKBAmf7fKOr/W0ZffeM/B2z7ypfpSm1EOPQ/AAAAFCjT/xtH/d//hfVP2vG2XzfaPV2pPRIO/Q8AAAAFyvT/JlH/33rxF70mzTv63CPSldrIcOh/AAAAKFCm/zeN+n/AWR8NGdTszn6/piu1R8Oh/wEAAKBAmf5vFvX/be+tuUfXnXeb8W66UnssHPofAAAACpTp/82i/h94/qfDf5vZa9Fu6UptVDj0PwAAABRo0ZUWWe5//uR/9P/mUf/fPrnpAVWvLdt1Tldqj4dD/wMAAECBMs//t4j6/46P1j697bE/jn4pXak9EQ79DwAAAAXK9P+WUf/f2fHra+/Z7dwF+6YrtdHh0P8AAABQoEz/bxX1/6BFm/yz6qDHV5+drtSeDIf+BwAAgAJl+n/rqP8Hj3139dl/r77vgnSl9lQ49D8AAAAUKNP/zaP+v+vR/+78/NqfDT8+Xak9HQ79DwAAAAXK9H+LqP/vbrLl9INe3XDarHSl9kw49D8AAAAUKNP/20T9P2SlyTceuto3rfZJV2pjwqH/AQAAoECZ/t826v97Rix51r2X7HfWIelK7dlw6H8AAAAoUKb/t4v6/95ntmrz+9Br+85NV2pjw6H/AQAAoECZ/t8+6v/7Gvz+SO3ZJq/0SFdqz4VD/wMAAECBMv3fMur/+88/fI8XOr+30afpSm1cOPQ/AAAAFCjT/ztE/f/A5H5DWlQXn/tGulJ7Phz6HwAAAAqU6f9WUf8/+NGwXqd8MrbfaelKbXw49D8AAAAUKNP/O0b9P7TjWSf1n3nhMl+kK7UXwqH/AQAAoECZ/t8p6v9hL4y4dpmdx/y0W7pSmxAO/Q8AAAAFyvT/zlH/D7/49NMXHLvy2PbpSu3FcOh/AAAAKFCm/3eJ+v+hsw45YHivD47+LV2pTQyH/gcAAIACZfp/16j/H35vwPCjBx2wwkXpSu2lcOh/AAAAKFCm/3eL+n/ES5df+/1u18+dlq7UXg6H/gcAAIACZfp/96j/H+mx9+lrrb3+g5PTldor4dD/AAAAUKBM/+8R9f/I0y894IC/Z+1zVrpSezUc+h8AAAAKlOn/PaP+f3TKs8OfWW3Nbd9LV2qTwqH/AQAAoECZ/m8d9f9jyw98f8ir0987P12pvRYO/Q8AAAAFyvT/XlH/jxp23PaHDe12+YnpSu31cOh/AAAAKFCm//eO+v/x5zqtVL/ksRMnpiu1N8Kh/wEAAKBAmf7fJ+r/J6p7f/218+Ybt0lXagvfCaD/AQAAoECZ/t836v/R5yyy2tbPfv/aD+lK7c1w6H8AAAAoUKb/94v6/8lJr8x/8ZM9Bv+ZrtTeCof+BwAAgAJl+n//qP+f+vTvjwZUV156ZLpSezsc+h8AAAAKlOn/A6L+f7pzq1YnL3fkMj3TldqUcOh/AAAAKFCm/w+M+v+Zl/6Y+u/k23/6LF2pTQ2H/gcAAIACZfr/oKj/x/TYpUWjEduPfT1dqb0TDv0PAAAABcr0/8FR/z97+uLLH3n270efmq7U3g2H/gcAAIACZfq/TdT/Y6e8OOfhLmes8FW6UnsvHPofAAAACpTp/0Oi/n/uia2vXmHUQ3P3Tldq74dD/wMAAECBMv1/aNT/4xrO6zRj6uIPHpqu1D4Ih/4HAACAAmX6v23U/8+v8eZeo5d+eZ9f0pXah+HQ/wAAAFCgTP8fFvX/+KFLDd1n9i7b7rfIIovcu/T/WKl9FA79DwAAAAXK9P/hUf+/8PdqI5bf7t/3vktXah+HQ/8DAABAgTL93y7q/wl7f3bwzCMOvfzvdKX2STj0PwAAABQo0/9HRP3/Yttvuj55/c0nHpeu1KaFQ/8DAABAgTL93z7q/4nfrnPT3rctvfE76Urt03DofwAAAChQpv+PjPr/pUFXdrzygMmvnZ2u1D4Lh/4HAACAAmX6/6io/1/ecK/Lz27WcfAp6Urt83DofwAAAChQpv+Pjvr/leY971l/3n2Xvpyu1KaHQ/8DAABAgTL9f0zU/69eO2bPD6v3LtokXanNCIf+BwAAgAJl+r9D1P+TNr1k2EGfNBl4Q7pSmxkO/Q8AAAAFyvT/sVH/v3bzuP2ff3bs5EHpSu2LcOh/AAAAKFCm/4+L+v/1q645Y3bnizffJV2pfRkO/Q8AAAAFyvT/8VH/v7HL7tetesk3nR5PV2pfhUP/AwAAQIEy/X9C1P+Tz2385jFDN+y9XLpSmxUO/Q8AAAAFyvT/iVH/v/nah1sOe/XaqfV0pfZ1OPQ/AAAAFCjT/x2j/n/rsx+W+Xu1/bZ6IF2pfRMO/Q8AAAAFyvT/SVH/v31Ks++X/fvxPdZKV2rfhkP/AwAAQIEy/d8p6v8pDzS8eeW1z71vXLpS+2849D8AAAAUKNP/J0f9P3Wtt8/5arfP5j2UrtRmh0P/AwAAQIEy/d856v93lvrtsMcGrb7SEulK7btw6H8AAAAoUKb/T4n6/91RLUbt2avX8VelK7Xvw6H/AQAAoECZ/j816v/3Xv7PcVcfu9vzG6YrtR/Cof8BAACgQJn+Py3q//d7tn+u+84/zt46Xan9GA79DwAAAAXK9P/pUf9/cEaXwevM3HKpW9KV2k/h0P8AAABQoEz/nxH1/4dTH+75zrwF/45OV2pzwqH/AQAAoECZ/j8z6v+Pzj2t/77Nth24UrpS+zkc+h8AAAAKlOn/LlH/f/zao+ePPeDOyYumK7W54dD/AAAAUKBM/58V9f8nn93a/qfbjt78vnSl9ks49D8AAAAUKNP/XaP+n3bKYU+ufv2rnbZMV2q/hkP/AwAAQIEy/X921P+fLj5k4v1HVL1vSldqv4VD/wMAAECBMv3fLer/z57vvE777YZNvSNdqf0eDv0PAAAABcr0/zlR/3/+UIdFFpt92lYt05XavHDofwAAAChQpv/Pjfp/+nJ3fDFn6X57XJGu1P4Ih/4HAACAAmX6/7yo/2escNGo76cedt/a6Uptfjj0PwAAABQo0//do/6fOXz8YWuNWjBv+3Sl9mc49D8AAAAUKNP/50f9/8W43ucc0GWnlW5NV2p/hUP/AwAAQIEy/X9B1P9f1ve8+Zmz7zl+1XSl9nc49D8AAAAUKNP/F0b9/9W5M3teNuKE58emK7UF4dD/AAAAUKBM/18U9f+s1zYa3GfyW7NHpCu1f8Kh/wEAAKBAmf6/OOr/rz9b47lPllt2qWXSldq/4dD/AAAAUKBM/18S9f83p0w7bpOe4z4/PV2pFh76HwAAAAqU6f9Lo/7/9uVVn3zivkt3nZSuVOG/0f8AAABQokz/Xxb1/397Tm+/28R3zpierlQNwqH/AQAAoECZ/u8R9f/sM2adv+JaK1x/WbpSLRYO/Q8AAAAFyvR/z6j/v5u6Xv9vGvSZ+HO6Ui0eDv0PAAAABcr0/+VR/39/yZgeYz5vs+5h6UpVC4f+BwAAgAJl+r9X1P8/TOg5aP/nZ57fOl2pFr4AQP8DAABAgTL9f0XU/z++v9e4NTuufdvX6UpVD4f+BwAAgAJl+v/KqP9/6nrl8T/0njarQ7pSLfy8/gcAAIACZfr/qqj/5zxyz3q/HdV08X/SlaphOPQ/AAAAFCjT/72j/v955VMmVDuMPuS/6Uq1ZDj0PwAAABQo0/9XR/0/d7FjZ7Sd1X3UAelKtVQ49D8AAAAUKNP/10T9/8uYOxvc88e3f7yarlSNwqH/AQAAoECZ/r826v9f39zhh07rb7LqyelKtXQ49D8AAAAUKNP/10X9/9sF/y57W+trDjonXamWCYf+BwAAgAJl+v/6qP9/P+nlLSYO3HvElHSlWjYc+h8AAAAKlOn/G6L+n/fxYpO36jP483npSrVcOPQ/AAAAFCjT/zdG/f/HJRM2eqhth13bpStV43DofwAAAChQpv9vivp//oT6y0c1n3vGHulKtXw49D8AAAAUKNP/faL+//P9nb9a+scW189IV6qF3a//AQAAoECZ/u8b9f9fXf+q/vll5MQz05VqxXDofwAAAChQpv9vjvr/70ZLnL33ll3XfStdqZqEQ/8DAABAgTL9/5+o/xc89Va/J9tMOP/jdKVaKRz6HwAAAAqU6f9+Uf//c++vT8y8ZZHbLklXqpXDof8BAACgQJn+vyXq/39XaX7o8uf9NWtCulKtEg79DwAAAAXK9H///9P/1SLnHTLwkmGtFj8pXalWDYf+BwAAgAJl+v/WqP8XfWvAxddO6n/IeelK1TQc+h8AAAAKlOn/AVH/N/hkxDGfrthu1AfpSrVaOPQ/AAAAFCjT/7dF/b/YCaeP2bLhpD+OTleq1cOh/wEAAKBAmf4fGPX/4itOOmL2+w1X/SNdqdYIh/4HAACAAmX6//ao/2sjlxm96pNDD/opXanWDIf+BwAAgAJl+v+OqP+rZ7e59aDTOo84KF2p1gqH/gcAAIACZfr/zqj/64vMveD5gY2H35OuVAs/o/8BAACgQJn+HxT1/xL3bjVo/dZT9l0sXanWCYf+BwAAgAJl+n9w1P8NV/m9x4fr91h9xXSlWjcc+h8AAAAKlOn/u6L+X7LR5OOv/GP8gqfSlWq9cOh/AAAAKFCm/++O+n+pp5Ycd/asdUe3Sleq9cOh/wEAAKBAmf4fEvV/o7+Ont98hy/bDUxXqg3Cof8BAACgQJn+vyfq/6V3H7TahKMOWrRvulJtGA79DwAAAAXK9P+9Uf8v0+7BVrf2vnHG5ulKtVE49D8AAAAUKNP/90X9v+xPJ3zUueMF/W5LV6qNw6H/AQAAoECZ/r8/6v/lNt/j/h7PP3XutulKtUk49D8AAAAUKNP/D0T93/i2q/a+6fNVNlo3Xak2DYf+BwAAgAJl+v/BqP+Xv/L5Uz5u8PErl6crVbNw6H8AAAAoUKb/h0b9v8IOF/bedK3WfRulK9Vm4dD/AAAAUKBM/w+L+n/Fgz45/aeJvc8ama5UC98JoP8BAACgQJn+Hx71f5N5q1+7+n3NWo1JV6otwqH/AQAAoECZ/n8o6v+Vvtxw+L49Z09bLV2ptgyH/gcAAIACZfr/4aj/Vz5qxgFjT9t6+E7pSrVVOPQ/AAAAFCjT/yOi/l/lr3WHrPPknH3vSleqrcOh/wEAAKBAmf5/JOr/VXf/ao933j9u9evSlap5OPQ/AAAAFCjT/yOj/m/a7vOTrm5494Jm6UrVIhz6HwAAAAqU6f9Ho/5f7adVenVfscHooelKtU049D8AAAAUKNP/j0X9v/qN3817c9LEdrV0pdo2HPofAAAACpTp/1FR/6+x3eZNdhnWZdHl05Vqu3DofwAAAChQpv8fj/p/zXVX3ub080bMeCxdqbYPh/4HAACAAmX6/4mo/9caOPWD229p32/JdKVqGQ79DwAAAAXK9P/oqP/XvrN5795tBpw7LF2pdgiH/gcAAIACZfr/yaj/11nn11PO37LlRuPTlapVOPQ/AAAAFCjT/09F/b/utm/tve4v819ZI12pdgyH/gcAAIACZfr/6aj/1+u7xP1Tf+zU9z/pSrVTOPQ/AAAAFCjT/89E/b/4Xw8dsGLzB85qka5UO4dD/wMAAECBMv0/Jur/DXY/c/g3bZdqtX66Uu0SDv0PAAAABcr0/7NR/2/Y7ohrn+jz+rSr05Vq13DofwAAAChQpv/HRv2/0U83n77bkw33WTpdqXYLh/4HAACAAmX6/7mo/zc+qG2vT06b9OCj6Uq1ezj0PwAAABQo0//jov7fZF7/kzZp2HnuM+lKtUc49D8AAAAUKNP/z0f9v+mXI/e47P2hKzRNV6o9w6H/AQAAoECZ/h8f9X+zo04d0mdSq6MHpCtV63DofwAAAChQpv9fiPp/s/169Gq54l9jt0lXqr3Cof8BAACgQJn+nxD1/+a/PHPSG+e1+2m9dKXaOxz6HwAAAAqU6f8Xo/7f4psr9rh7WP9leqUr1T7h0P8AAABQoEz/T4z6f8tjWw85s03XS3dMV6p9w6H/AQAAoECZ/n8p6v+t7u786Xm3jBx8e7pS7RcO/Q8AAAAFyvT/y1H/b73BkF2u+WWR1/qkK9X+4dD/AAAAUKBM/78S9X/zre9Y690tJ2y8WbpSHRAO/Q8AAAAFyvT/q1H/t7ihw4K1m3c4cUi6Uh0YDv0PAAAABcr0/6So/7f595/lZ/04+PIG6Up1UDj0PwAAABQo0/+vRf2/7V4t56zUp8V7TdKV6uBw6H8AAAAoUKb/X4/6f7tDG0zdo+3cbZ9OV6o24dD/AAAAUKBM/78R9f/2373UYlTrTfa5OV2pDgmH/gcAAIACZfp/ctT/LferPmo28NsHm6cr1aHh0P8AAABQoEz/vxn1/w6/vNDqoz/2nrtBulK1DYf+BwAAgAJl+v+tqP9bffPnajeuf80K16Qr1WHh0P8AAABQoEz/vx31/47H7jS/5w5Nj14qXakOD4f+BwAAgAJl+n9K1P877fJ231dnTRs7PF2p2oVD/wMAAECBMv0/Ner/na9q2GWb3t1/ej5dqY4Ih/4HAACAAmX6/52o/3e5ucWBJxw1epnV05WqfTj0PwAAABQo0//vRv2/66a/jbzl+TaXPpiuVEeGQ/8DAABAgTL9/17U/7t1m/XAKx37DF48XamOCof+BwAAgAJl+v/9qP93f2O9fbZtsPZr/0vjV0eHQ/8DAABAgTL9/0HU/3tMX7XziZ/P3HhUulIdEw79DwAAAAXK9P+HUf/vefL0q/pNvPTEndOVqkM49D8AAAAUKNP/H0X937rxZWe0X2vc5XenK9Wx4dD/AAAAUKBM/38c9f9eD4+97v6eK7x3bbpSHRcO/Q8AAAAFyvT/J1H/7z2+17A5972z7abpSnV8OPQ/AAAAFCjT/9Oi/t+nts/+i7V9YKtX0pXqhHDofwAAAChQpv8/jfp/36G977m9T6epndKV6sRw6H8AAAAoUKb/P4v6f7819tzz9B9f731uulJ1DIf+BwAAgAJl+v/zqP/3b3hRx12aL9VparpSnRQO/Q8AAAAFyvT/9Kj/D3hi/OVvbjlg82PTlWrhdwL0PwAAABQo0/8zov4/8J+fXur7S/vJ/6Yr1cnh0P8AAABQoEz/z4z6/6DWm2x46S3zB36brlSdw6H/AQAAoECZ/v8i6v+DD1mhvnGblhftn65Up4RD/wMAAECBMv3/ZdT/bWa/P2vasIlLzUlXqlPDof8BAACgQJn+/yrq/0M2nnf7xPMazG6brlSnhUP/AwAAQIEy/T8r6v9D+219yVYrjnh+r3SlOj0c+h8AAAAK9H/v/w3brdRz4V21vXqpoztN6nL8N+lKdUY49D8AAAAUKPP8/5vo+f9hO735zG3vz1npjHSlOjMc+h8AAAAKlOn/b6P+P3zfru3bNtx63mvpStUlHPofAAAACpTp//9G/d9u7vAn7znt7vs+T1eqs8Kh/wEAAKBAmf6fHfX/EV/f0v+3J4/b49J0peoaDv0PAAAABcr0/3dR/7fv0O786r7eWx2TrlRnh0P/AwAAQIEy/f991P9H/nPb4EE9W0+dn65U3cKh/wEAAKBAmf7/Ier/o1of2rPrWrN7/5iuVOeEQ/8DAABAgTL9/2PU/0cfcsZxO05s1unAdKU6Nxz6HwAAAAqU6f+fov4/ZvYjz036/KnNX0hXqvPCof8BAACgQJn+nxP1f4frjnv97AYXTO6YrlTdw6H/AQAAoECZ/v856v9jWwzc+MqOHw/snq5U54dD/wMAAECBMv0/N+r/4za6t+GHz69y0YfpSnVBOPQ/AAAAFCjT/79E/X/84E7frX/Ul0t1SVeqC8Oh/wEAAKBAmf7/Ner/E+665pmWvded/Xa6Ul0UDv0PAAAABcr0/29R/5+4/u5HvzHrxuc/Sleqi8Oh/wEAAKBAmf7/Per/jltdcsndOxx0/MXpSnVJOPQ/AAAAFCjT//Oi/j/p+nG3n7n+lJV+T1eqS8Oh/wEAAKBAmf7/I+r/Tv+sdf7wPxrPOzxdqS4Lh/4HAACAAmX6f37U/ye3/rj/0QPH37dnulL1CIf+BwAAgAJl+v/PqP87H/Llk8u07rHHzHSl6hkO/Q8AAAAFyvT/X1H/nzJ7g/YLfmp5R7t0pbo8HPofAAAACpTp/7+j/j9132+eO6XF/EvmpStVr3DofwAAAChQpv8XRP1/2tx1jut/WPstZ6Qr1RXh0P8AAABQoEz//xP1/+lfr9bzhb4D3tojXamuDIf+BwAAgAJl+v/fqP/P6PDZ4Bb9lrrmrXSluioc+h8AAAAK9H/v/9oiUf+fuWqTCTce/HrnM9OVqnc49D8AAAAUKNP/i0b93+W+d9fruUWn5pekK9XV4dD/AAAAUKBM/zeI+v+sp//boNncB979OF2prgmH/gcAAIACZfp/saj/uy695YyPmhx3z0npSnVtOPQ/AAAAFCjT/4tH/X/220sPeuG1u3ebkK5U14VD/wMAAECBMv1fi/q/W/c3erQYvvWKH6Qr1fXh0P8AAABQoEz/V1H/n3Piz8ef0n3Ob+elK9UN4dD/AAAAUKBM/9ej/j932vbj+p/a5bk/0pXqxnDofwAAAChQpv+XiPr/vEdvbXvo6BHHHp2uVDeFQ/8DAABAgTL93zDq/+5NDnvs3vcaNDwoXan6hEP/AwAAQIEy/b9k1P/nL3raf35fYuK3P6UrVd9w6H8AAAAoUKb/l4r6/4Kxj55bW3OVOyalK9XN4dD/AAAAUKBM/zeK+v/CVbsMvPvFjy85PV2p/hMO/Q8AAAAFyvT/0lH/X3Tfwxefee8FW16WrlT9wqH/AQAAoECZ/l8m6v+Ln/7PMS17PPXW9HSluiUc+h8AAAAKlOn/ZaP+v2Tp9mPeOKnZNYelK1X/cOh/AAAAKFCm/5eL+v/Ss+5/+9zxszv/nK5Ut4ZD/wMAAECB/vf+XyzctcZR/1/2XsfNL5/euvnX6Uo1IBz6HwAAAAqUef6/fNT/PV44stF7i/V+t3W6Ut0WDv0PAAAABcr0/wpR//e8+K4fN/qqxz3/pCvVwHDofwAAAChQpv9XjPr/8ptPbTej5fjdOqQr1e3h0P8AAABQoEz/N4n6v9emI59e4cjGKx6QrlR3hEP/AwAAQIEy/b9S1P9X7NJ/wD5XTfntv+lKdWc49D8AAAAUKNP/K0f9f+VVbc8bfftBz52crlSDwqH/AQAAoECZ/l8l6v+r5sy5s9teNx77arpSDQ6H/gcAAIACZfp/1aj/e++/3UVXbLBuwynpSnVXOPQ/AAAAFCjT/02j/r/6uEZHfjD/y2/PSVequ8Oh/wEAAKBAmf5fLer/a756/dkNluj/w13pSjUkHPofAAAACpTp/9Wj/r927yUOHf9eu0Y7pSvVPeHQ/wAAAFCgTP+vEfX/dX+/9cSBo/86slm6Ut0bDv0PAAAABcr0/5pR/1//7a/9Vjm11Zjr0pXqvnDofwAAAChQpv/Xivr/hrbNz/6u+9A5tXSluj8c+h8AAAAKlOn/taP+v3GtjtsMH9658dB0pXogHPofAAAACpTp/3Wi/r/pgfs/OPq1SXs9lq5UD4ZD/wMAAECBMv2/btT/fUbdNW+ZJg3vXz5dqRb+mwD9DwAAAAXK9P96Uf/3XerIJgvmzv1gWLpSLfyZ/gcAAIACZfp//aj/b37t4tNmbdFi+yXTlWp4OPQ/AAAAFCjT/xtE/f+fc5+7YaWDB5+0RrpSPRQO/Q8AAAAFyvT/hlH/9zvl6of26NfhivHpSvVwOPQ/AAAAFCjT/xtF/X/LZ7vtO6rvhDdapCvViHDofwAAAChQpv83jvq///Avhp532CKb/iddqR4Jh/4HAACAAmX6f5Oo/29dYf29rmkxssfV6Uo1Mhz6HwAAAAqU6f9No/4fUF+z07s/db17/XSlejQc+h8AAAAKlOn/ZlH/3zbuo6vXnj/6h8XSleqxcOh/AAAAKFCm/zeL+n/gWk27PLtB90b3pCvVqHDofwAAAChQpv83j/r/9gc+7bvfXtOOfCpdqR4Ph/4HAACAAmX6f4uo/+8Y9fXINW5vOmbFdKV6Ihz6HwAAAAqU6f8to/6/c6m1D/zxqmvmDExXqtHh0P8AAABQoEz/bxX1/6BT3211xJF7N26VrlRPhkP/AwAAQIEy/b911P+D32ny0QMtv91r83SlWvg3AfQ/AAAAFCjT/82j/r/rlS3n//zVJvf3TVeqp8Oh/wEAAKBAmf5vEfX/3Zf+d7UGi73zwbbpSvVMOPQ/AAAAFCjT/9tE/T+k55L7rjl9he1vS1eqMeHQ/wAAAFCgTP9vG/X/PS9PfuiH8eNOujxdqZ4Nh/4HAACAAmX6f7uo/++d+vsNY0669Ip105VqbDj0PwAAABQo0//bR/1/3xlbnbZ/j5lvjExXqufCof8BAACgQJn+bxn1//1r9bu6771rb9ooXanGhUP/AwAAQIEy/b9D1P8PPHB4p0tf7NNjtXSlej4c+h8AAAAKlOn/VlH/PzjqrL02XrPN3WPSlWp8OPQ/AAAAFCjT/ztG/T90qWFDp21w42LN05XqhXDofwAAAChQpv93ivp/2PDTD9x9/kFf3JyuVBPCof8BAACgQJn+3znq/+ErjBj5+O1fPnVNulK9GA79DwAAAAXK9P8uUf8/VB/Q9+u91m2/QbpSTQyH/gcAAIACZfp/16j/Hx53SJcmR45fc3i6Ur0UDv0PAAAABcr0/25R/494ZO8D77uqx79LpSvVy+HQ/wAAAFCgTP/vHvX/IytfPvKQr6Y8vHq6Ur0SDv0PAAAABcr0/x5R/49c7Nm+i7dsvP/z6Ur1ajj0PwAAABQo0/97Rv3/6JhLu8ybPrvl4ulKNSkc+h8AAAAKlOn/1lH/P3bJcY1/WqzZxw+mK9Vr4dD/AAAAUKBM/+8V9f+oCQN/Wf2k3jeNSleq18Oh/wEAAKBAmf7fO+r/x9+/9519x7c+839p/OqNcOh/AAAAKFCm//eJ+v+Jrp22Gnvvxxvcna5Uk8Oh/wEAAKBAmf7fN+r/0au9Mr1Hj1Ve2jldqd4Mh/4HAACAAmX6f7+o/5+8Z5Gdb1rzqZs3TVeqt8Kh/wEAAKBAmf7fP+r/p55stfrHL17Q7dp0pXo7HPofAAAACpTp/wOi/n962b//2fS9EYs9mq5UU8Kh/wEAAKBAmf4/MOr/Zx7ZpcljS3T5Yul0pZoaDv0PAAAABcr0/0FR/49Z+Y95e5468amm6Ur1Tjj0PwAAABQo0/8HR/3/7GIvfrDy6Abtn0lXqnfDof8BAACgQJn+bxP1/9gxi2/z1fC719wmXaneC4f+BwAAgAJl+v+QqP+f+2TeHh26H/fvgHSlej8c+h8AAAAKlOn/Q6P+H3fC1kMebTLn4V7pSvVBOPQ/AAAAFCjT/22j/n/+vKV6/fXa1vuvl65UH4ZD/wMAAECBMv1/WNT/499686Qltni95e3pSvVROPQ/AAAAFCjT/4dH/f/CrZ+deuzcpT7eMV2pPg6H/gcAAIACZfq/XdT/E7Zc7fqR/R64abN0pfokHPofAAAACpTp/yOi/n9xx3Ue/vPgTmf2SVeqaeHQ/wAAAFCgTP+3j/p/Yq9v9mt42PwNGqQr1afh0P8AAABQoEz/Hxn1/0u/7fXg5L4tXxqSrlSfhUP/AwAAQIEy/X9U1P8vt7my9a4/Dbj56XSl+jwc+h8AAAAKlOn/o6P+f+WYMSef0aJ9tybpSjU9HPofAAAACpTp/2Oi/n91Zs9rBr649nnz05VqRjj0PwAAABQo0/8dov6ftOe4MxusOfPWY9KVamY49D8AAAAUKNP/x0b9/9r8S/r83KPNhAPTleqLcOh/AAAAKFCm/4+L+v/1H3Z/9IF7+6z9Y7pSfRkO/Q8AAAAFyvT/8VH/v9H+moOOGL/CaR3TleqrcOh/AAAAKFCm/0+I+n9y0w8brnjSO9e+kK5Us8Kh/wEAAKBAmf4/Mer/N4c0/u6bxS799MN0pfo6HPofAAAACpTp/45R/781utnrT0wft3P3dKX6Jhz6HwAAAAqU6f+Tov5/e5kfNt6t5d5t3k5Xqm/Dof8BAACgQJn+7xT1/5TJbx9+5FfXjOySrlT/DYf+BwAAgAJl+v/kqP+nnt/wqYev2uTPi9OVanY49D8AAAAUKNP/naP+f6dji9v+PfLb1T5KV6rvwqH/AQAAoECZ/j8l6v93P/qte6O9urc9PF2pvg+H/gcAAIACZfr/1Kj/3xvR/o7Xbh/9xO/pSvVDOP63/l/0/8+/MgAAAPD/KNP/p0X9//5K/7mw1fym38xMV6ofw+H5PwAAABQo0/+nR/3/QYOHjzprg2nVnulK9VM49D8AAAAUKNP/Z0T9/+EzXcYObrHIeZ3SlWpOOPQ/AAAAFCjT/2dG/f9R00cPqf804dZX0pXq53DofwAAAChQpv+7RP3/8ZDTHv+1b9cJU9OVam449D8AAAAUKNP/Z0X9/8now24ZctjItc9NV6pfwqH/AQAAoECZ/u8a9f+0ZW7tdtjBLU77N12pfg2H/gcAAIACZfr/7Kj/P+3Suf5dv7nXHpuuVL+FQ/8DAABAgTL93y3q/88+HDJrlbkdPt0/Xal+D4f+BwAAgAJl+v+cqP8/n3jHSwduMXjnb9OVal449D8AAAAUKNP/50b9P/2iDhuOf61zm7bpSvVHOPQ/AAAAFCjT/+dF/T/j4vHd72sydOScdKWaHw79DwAAAAXK9H/3qP9nvnDRbYd0b/jnN+lK9Wc4/kf/L/r/za8MAAAA/D/K9P/5Uf9/8d6eTy0+fNJqe6Ur1V/h8PwfAAAACpTp/wui/v/yrN6Hzxvdru1r6Ur1dzj0PwAAABQo0/8XRv3/VdONxjY/tf8TZ6Qr1YJw6H8AAAAoUKb/L4r6f9aQmUdNWKLVN5emK9U/4dD/AAAAUKBM/18c9f/Xo6ddeOt7f1WfpyvVv+HQ/wAAAFCgTP9fEvX/N8uscUfnnRp/8km6Ul946H8AAAAoUKb/L436/9sR07v9PWPKjhemK/WFr/rT/wAAAFCgTP9fFvX/f1da9ZZlL+/RtWu6Um8QDv0PAAAABcr0f4+o/2c3WO/xYzqM7/NmulJfLBz6HwAAAAqU6f+eUf9/98ysQ4btvu6ru6cr9cXDof8BAACgQJn+vzzq/++X7/ns74O/3PDLdKVeC4f+BwAAgAJl+r9X1P8/DBtzZG3BQef8mq7Uq3DofwAAAChQpv+viPr/x+euvOjQdW685Yh0pb7wBYD6HwAAAAqU6f8ro/7/qdrrzntfuWDm9+lKfeHn9T8AAAAUKNP/V0X9P+elU755tulTixycrtQbhkP/AwAAQIEy/d876v+fe9xT2+/iVQ4/Kl2pLxkO/Q8AAAAFyvT/1VH/zz39zvXXePDjJ/9KV+pLhUP/AwAAQIEy/X9N1P+/TDn2lR/Htv77gnSl3igc+h8AAAAKlOn/a6P+//X+fzdpdkrvNd5PV+pLh0P/AwAAQIEy/X9d1P+/rbnDGx/Vm+33YrpSXyYc+h8AAAAKlOn/66P+/33JxWbfOG32sBPSlfqy4dD/AAAAUKBM/98Q9f+8x15eouebW3+yT7pSXy4c+h8AAAAKlOn/G6P+/2P5+pezGs/ZcVa6Um8cDv0PAAAABcr0/01R/88fNmHRlbod13VuulJfPhz6HwAAAAqU6f8+Uf//+dxfa+/xyN19DklX6gu7X/8DAABAgTL93zfq/7+qnV8c9ViDVz9NV+orhkP/AwAAQIEy/X9z1P9/n/zW6IZnTtywR7pSbxIO/Q8AAAAFyvT/f6L+XzB9iSP+bNTlnNPSlfpK4dD/AAAAUKBM//eL+v+fN5pfMHLKiFveSFfqK4dD/wMAAECBMv1/S9T//3b79dZjt28/s1u6Ul8lHPofAAAACpTp//7/p//rixxy3IJdvxuwyLvpSn3VcOh/AAAAKFCm/2+N+n/R2QPXmnxDy8NfSlfqTcOh/wEAAKBAmf4fEPV/g3/u3WVg+/lPdk5X6quFQ/8DAABAgTL9f1vU/4u17vTpGft3+nt2ulJfPRz6HwAAAAqU6f+BUf8vvtUrLUYOeGCNfdOV+hrh0P8AAABQoEz/3x71f+36RaYe+/tS+x2frtTXDIf+BwAAgAJl+v+OqP+ru1rNabjp68MWpCv1tcKh/wEAAKBAmf6/M+r/+vp/L//ntHGPNE5X6gs/o/8BAACgQJn+HxT1/xJX7zL/hPqlBz6RrtTXCYf+BwAAgAJl+n9w1P8Nd/pjtVtOeWeV+9OV+rrh0P8AAABQoEz/3xX1/5Ibv9jq1bErzK/Slfp64dD/AAAAUKBM/98d9f9S/Rb/aJsH+zx2fbpSXz8c+h8AAAAKlOn/IVH/N5p++KDzL25z6MbpSn2DcOh/AAAAKFCm/++J+n/pk/v16N10Zm3XdKW+YTj0PwAAABQo0//3Rv2/TLdhx099Ze2vBqcr9Y3Cof8BAACgQJn+vy/q/2XfOGvcuutMG7BRulJf+J0A/Q8AAAAFyvT//VH/L9fwwAmtFjS9oHe6Ut8kHPofAAAACpTp/wei/m/8xPXrvTZ49Hr90pX6puHQ/wAAAFCgTP8/GPX/8kMfazB49+4vbpWu1JuFQ/8DAABAgTL9PzTq/xXWOH/GWR2+veG5dKW+WTj0PwAAABQo0//Dov5f8bT3ln348k1OXzNdqW8eDv0PAAAABcr0//Co/5u8u/wPR864ZpeG6Up9i3DofwAAAChQpv8fivp/pVc3ntxop72nP5yu1LcMh/4HAACAAmX6/+Go/1e+7Mct/t108CM3piv1hX8TUP8DAABAgTL9PyLq/1Wmb/byyb93OHCLdKW+dTj0PwAAABQo0/+PRP2/6smzNxowYO4qO6Qr9ebh0P8AAABQoEz/j4z6v2m3KdWL+7eYf2e6Um8RDv0PAAAABcr0/6NR/6/2xkpfbd1+5GMrpyv1bcKh/wEAAKBAmf5/LOr/1YfN6nfdDV0PfTJdqW8bDv0PAAAABcr0/6io/9dYfr2zL/5uQu3edKW+XTj0PwAAABQo0/+PR/2/ZrXqoVtsv8hX/8tKfftw6H8AAAAoUKb/n4j6f63npj/x2ZS/BjybrtRbhkP/AwAAQIEy/T866v+1x+80Y0KjVheskq7UF74TUP8DAABAgTL9/2TU/+vU/mzQ/Mz+6y2brtRbhUP/AwAAQIEy/f9U1P/rNn5hvc6PtXvxkXSlvmM49D8AAAAUKNP/T0f9v97D1YRbH5l0wzrpSn2ncOh/AAAAKFCm/5+J+n/96fdvcUi3hqdfma7Udw6H/gcAAIACZfp/TNT/G5zccfJ9jYfu0j9dqe8SDv0PAAAABcr0/7NR/2/Y7cgf5r3Zefp26Up913DofwAAAChQpv/HRv2/0Rt3Lbv47w/sOS5dqe8WDv0PAAAABcr0/3NR/298Woev7tq0071rpSv13cOh/wEAAKBAmf4fF/X/Ju/eUXXZ//Xfl0hX6nuEQ/8DAABAgTL9/3zU/5u+OmSjHQYstfJD6Up9z3DofwAAAChQpv/HR/3f7LLOL79+w4DjNkxX6q3Dof8BAACgQJn+fyHq/826nP3Vpe3bj78qXanvFQ79DwAAAAXK9P+EqP83//Cpqu/287+7JV2p7x0O/Q8AAAAFyvT/i1H/bzHxxo2mfddyya3Tlfo+4dD/AAAAUKBM/0+M+n/Li/Z/eeNGEy+8IV2p7xsO/Q8AAAAFyvT/S1H/bzX21DFbTWlw+ybpSn2/cOh/AAAAKFCm/1+O+n/rRUceM/GxEW/ukq7U9w+H/gcAAIACZfr/laj/mzfpf/FtZ3bZbFC6Uj8gHPofAAAACpTp/1ej/m/xaNuBnbrNOXm5dKV+YDj0PwAAABQo0/+Tov7fZtqcC+55ZOurHk9X6geFQ/8DAABAgTL9/1rU/9ueuN2tbd+8e8oD6Ur94HDofwAAAChQpv9fj/p/u+6NRleNj9u6nq7U24RD/wMAAECBMv3/RtT/27/9+hG/1XvvuXa6Uj8kHPofAAAACpTp/8lR/7fsssS4rtNa33tFulI/NBz6HwAAAAqU6f83o/7f4cO3jh80dvbvt6Yr9bbh0P8AAABQoEz/vxX1f6uJv/aYdEqzlbdPV+qHhUP/AwAAQIEy/f921P87XtR80I4XP3Xc2HSlfng49D8AAAAUKNP/U6L+36nphNlXPnjB+FXTlXq7cOh/AAAAKFCm/6dG/b/zkPoSZ7/y8XfLpCv1I8Kh/wEAAKBAmf5/J+r/XUbvvMn6TVdZckS6Um8fDv0PAAAABcr0/7tR/++6zF9vfLjgywtXSlfqR4ZD/wMAAECBMv3/XtT/u7X77oUr1ln39tHpSv2ocOh/AAAAKFCm/9+P+n/3nzZft9vuN755X7pSPzoc+h8AAAAKlOn/D6L+3+OvlRfbYPBBmy2artSPCYf+BwAAgAJl+v/DqP/33H3qzA8un3LyTelKvUM49D8AAAAUKNP/H0X933rbc5dZoUPjq7ZMV+rHhkP/AwAAQIEy/f9x1P979X3y+xk7jZ/SMl2pHxcO/Q8AAAAFyvT/J1H/731n3zdHz+ix9R3pSv34cOh/AAAAKFCm/6dF/b/POvttuU/jhtucn67UTwiH/gcAAIACZfr/06j/973yhpc+e3PS+++lK/UTw6H/AQAAoECZ/v8s6v/9djhowy0e6dxrYrpS7xgO/Q8AAAAFyvT/51H/77/5BfWLuw094cR0pX5SOPQ/AAAAFCjT/9Oj/j/gtlGzrjuz1SY/pCv1TuHQ/wAAAFCgTP/PiPr/wE9m3vPGY39NapOu1E8Oh/4HAACAAmX6f2bU/wedsNGeLae0G3RkulLvHA79DwAAAAXK9P8XUf8ffN4aHc9s1P+yP9OV+inh0P8AAABQoEz/fxn1f5u3pl1+93ddl90tXamfGg79DwAAAAXK9P9XUf8f0mj+39dsP/LHL9KV+mnh0P8AAABQoEz/z4r6/9Cndl3zvPaLPPtbulI/PRz6HwAAAAqU6f+vo/5ve29t17VvmHBM+3SlfkY49D8AAAAUKNP/30T9f9gqEz97d0CH5aelK/Uzw6H/AQAAoECZ/v826v/Dzzyx+Ur7D/7lonSl3iUc+h8AAAAKlOn//0b93+6DoVNmbdpi6FnpSn3hz/Q/AAAAFCjT/7Oj/j/ixcE/j/p97t6T05V613DofwAAAChQpv+/i/q//YXHrLDHjE22+S5dqZ8dDv0PAAAABcr0//dR/x/5ye1/fLTTt+/vl67Uu4VD/wMAAECBMv3/Q9T/R51wfNNmHfbudVy6Uj8nHPofAAAACpTp/x+j/j/6vJN37Hn5NSf8na7Uzw2H/gcAAIACZfr/p6j/j3nrvo9vHNx0k7PTlfp54dD/AAAAUKBM/8+J+r/DI4c8us3u0ya9k67Uu4dD/wMAAECBMv3/c9T/x6484KBX1+k+6OV0pX5+OPQ/AAAAFCjT/3Oj/j9usRFn3rJg9GWnpCv1C8Kh/wEAAKBAmf7/Jer/48ec3ueEpm2W/Sz+/L//c07/AwAAQIEy/f9r1P8nPHvdZ5e+0ufHnulK/aJw6H8AAAAoUKb/f4v6/8RF2uza98G1nz01XalfHA79DwAAAAXK9P/vUf93XLH7mtMunnnM6+lK/ZJw6H8AAAAoUKb/50X9f9LIJ/7e+JRLl987XalfGg79DwAAAAXK9P8fUf93+qTxCj+MHffLV+lK/bJw6H8AAAAoUKb/50f9f/IJH/685rQVhv6SrtR7hEP/AwAAQIEy/f9n1P+dz/thyv71d/Y+NF2pL3wngP4HAACAAmX6/6+o/095q1nzMSP63zUrXalfHg79DwAAAAXK9P/fUf+feuZ/P17v7HY990lX6r3Cof8BAACgQJn+XxD1/2kfbLnjlOX+anZIulK/Ihz6HwAAAAqU6f9/ov4//cUmTa+a3Or1uelK/cpw6H8AAAAoUKb//436/4wL3/3jgqlDr+yRrtSvCof+BwAAgAL93/u/WiTq/zNbvv32AUt37vhpulLvHQ79DwAAAAXK9P+iUf93uaLh5s90mbTdG+lK/epw6H8AAAAoUKb/G0T9f9aAFo2+H9Xww9PSlfo14dD/AAAAUKBM/y8W9X/XzX77ca0j5j7wbrpSvzYc+h8AAAAKlOn/xaP+P/vHD/vVr2/Rulu6Ur8uHPofAAAACpTp/1rU/90Ob3z2r7MHL9c5XalfHw79DwAAAAXK9H8V9f85uzU7dMh2HX5+KV2p3xAO/Q8AAAAFyvR/Per/c//84YnDmk14Zt90pX5jOPQ/AAAAFCjT/0tE/X9enzYdBsxb5KjZ6Ur9pnDofwAAAChQpv8bRv3ffZvrnj/5tpFLL0hX6n3Cof8BAACgQJn+XzLq//PXfuLurQ/o+v3x6Uq9bzj0PwAAABQo0/9LRf1/wR3dL3vx2NF3XZiu1G8Oh/4HAACAAmX6v1HU/xe2fHrAkb269/wkXan/Jxz6HwAAAAqU6f+lo/6/6Ipu5z08c1qzN9OVer9w6H8AAAAoUKb/l4n6/+IBB7T7d+emr3dNV+q3hEP/AwAAQIEy/b9s1P+XbHbT043WvubKL9OVev9w6H8AAAAoUKb/l4v6/9I2PSaM/nvvjrunK/Vbw6H/AQAAoECZ/m8c9f9lvz2z3j6Dvt3uiHSlPiAc+h8AAAAKlOn/5aP+7zHzigYr7LbJh7+mK/XbwqH/AQAAoECZ/l8h6v+ex7SeMWPoOw8cnK7UB4ZD/wMAAECBMv2/YtT/l496/JiNLlmh9ffpSv32cOh/AAAAKFCm/5v8/9i787gt57Tx41cNndc9TVkGY2Smxb5MonmyU8YYI8NssgxlLYxikJAtypptJnuNDNmmse+KSCM0qBhkTZZElrEkhd8LRzlz1nPyiDlf39/7/c9x3HfXfXRf83o9Tz5ddZXr/35ND771kRYjF59VvJKdH4v+BwAAgAoq6f9lcv1/bMttzj3m3iPe2rF4JbsgFv0PAAAAFVTS/z/I9f9xw048/KBJk295tHglGxyL/gcAAIAKKun/ZXP933/86mfd1KTVjn2KV7Ihseh/AAAAqKCS/v9hrv8H/PG1Pj/vflqzXYtXsr/Gov8BAACggkr6f7lc/x9/9L+7LHHbtq/dXbySXRiL/gcAAIAKKun/Frn+P2HM4jc833m9V9oWr2RDY9H/AAAAUEEl/b98rv9P7DGh26HnzKwPLF7JLopF/wMAAEAFlfT/j3L9f9LTS408Zcb2O19QvJL9LRb9DwAAABVU0v8/zvX/yfe1HfzsGmePXL94Jbs4Fv0PAAAAFVTS/y1z/X/KQVOPWrND03duLF7JLolF/wMAAEAFlfR/q1z/D9zklg16Tbt/6R8Ur2TDYtH/AAAAUEEl/d861/+n9j/q8SEn79lpPleyS2PR/wAAAFBBJf3fJtf/p52x+cz7ugwb+rfileyyWPQ/AAAAVFBJ/6+Q6//TVz+2xQbXdp2wbPFKdnks+h8AAAAqqKT/V8z1/xlTh/Zo0/PC9rcVr2RXxKL/AQAAoIJK+n+lXP+f+dvuA8Y3W7vHP4pXsitj0f8AAABQQf9b/zfUarVc//95i50vGTD+zeMXK17J/h6L/gcAAIAKKnn9f5Vc//9l9vlbHDKu50PHFa9kw2PR/wAAAFBBJf2/aq7/B5243hXXLz68bevilWzO3wnQ/wAAAFBBJf2/Wq7/z1rno84dD2h8eIfileyqWPQ/AAAAVFBJ/6+e6/+zV75n36WGj75gUPFKdnUs+h8AAAAqqKT/18j1/zmDG5/48m3LvnJ98Up2TSz6HwAAACqopP/XzPX/uY1rtVr3J+pLFK9k18ai/wEAAKCCSvr/J7n+P69/k36nNemzc5Piley6WPQ/AAAAVFBJ/7fN9f/5Z2w0dNKkm0ZeUrySzfk7AfofAAAAKqik/9fK9f8Fq3+w2Wr3rvHOqsUr2Q2x6H8AAACooJL+b5fr/8G/bPjpmS2mLX1y8Up2Yyz6HwAAACqopP/XzvX/kLcf+vfufTfvNKR4JbspFv0PAAAAFVTS/+vk+v+vL787o8NlA4ZuWryS3RyL/gcAAIAKKun/9rn+v3CX9kuP6XjUhAHFK9ktseh/AAAAqKCS/v9prv+Hdn14iycG39l+leKV7NZY9D8AAABUUEn//0+u/y96YZlLVp+9RI92xSvZbbHofwAAAKigkv7vkOv/v7255oCjWj18/J+LV7LbY9H/AAAAUEEl/b9urv8v3mpaj1M3/tVDPy5eyUbEov8BAACggkr6f71c/1+yyZYnbjl5YNsRxSvZyFj0PwAAAFRQSf+vn+v/Yf1P2/f2fm0O/3vxSnZHLPofAAAAKqik/zfI9f+lZ9zQ+Y1dplzQULyS3RmL/gcAAIAKKun/DXP9f9nqB16xfPdW2bHFK9moWPQ/AAAAVFBJ/2+U6//LT7xms+Nvm/xSq+KV7K5Y9D8AAABUUEn/b5zr/yvWOWRo70nbXrdu8Up2dyz6HwAAACqopP83yfX/lStv3a91k9N+d1bxSjY6Fv0PAAAAFVTS/5vm+v/vg0/eY0KL7y/3w+KV7J5Y9D8AAABUUEn/d8z1//CBgzfb894Js24vXsnGxKL/AQAAoIJK+r9Trv//0WGnoedcdsTVw4tXsn/Gov8BAACggkr6f7Nc/1/VZtd+o/uO3KZ58Up2byz6HwAAACqopP9/luv/q8+9dI92g7fY6IbilWxsLPofAAAAKqik/zfP9f81O/VvuWrHE55epngluy8W/Q8AAAAVVNL/P8/1/7XPbfbhk61WO6lR8Up2fyz6HwAAACqopP+3yPX/de8c+tTps6fufXHxSvZALPofAAAAKqik/3+R6//rt7ljkyMm9269VvFKNi4W/Q8AAAAVVNL/W+b6/4YNlh9/68Y3jDq1eCX7Vyz6HwAAACqopP9/mev/G4+Z1H6rXZYbdH7xSvZgLPofAAAAKqik/7fK9f9Ng55b8sf9nuy9XvFK9lAs+h8AAAAqqKT/O+f6/+a2K785/Zxa1rJ4JXs4Fv0PAAAAFVTS/1vn+v+WgS+06NP5rpdGFq9k42PR/wAAAFBBJf3/q1z/39qhzcz+a+x/3ZXFK9mEWPQ/AAAAVFBJ/2+T6//b2iz7+MMzrvpdvXglmxiL/gcAAIAKKun/bXP9f/u5z2ywwrT2y/UvXskeiUX/AwAAQAWV9P+vc/0/YtZPtr6gw39mrVy8kj0ai/4HAACACirp/9/k+n9kp1ev2rvLzlevXbyS/TsW/Q8AAAAVVNL/v831/x3bjT99o5OHbPOX4pXssVj0PwAAAFRQSf//Ltf/d77xg54P9ey+0WrFK9njseh/AAAAqKCS/v99rv9H3ZB1P//ay54+pXgleyIW/Q8AAAAVVNL/2+X6/67md/XfZ3zDSYOLV7JJseh/AAAAqKCS/u+S6/+7l5s1bONmY/fepHglezIW/Q8AAAAVVNL/2+f6f/TQjX/x4OLbtb6ueCV7Khb9DwAAABVU0v875Pr/nkcuvLzpuEGjFi9eyZ6ORf8DAABABZX0/465/h/Ta8et3h++waCseCV7Jhb9DwAAABVU0v875fr/n4fv8cfhB8zqPax4JXs2Fv0PAAAAFVTS/3/I9f+9o4ad1K3fwAN+WbySPReL/gcAAIAKKun/nXP9P3b3HruP2eVXZ75avJJNjkX/AwAAQAWV9P8uuf6/7/GLjumw8ZQxs4tXsudj0f8AAABQQSX93zXX//ePu+Ci3Se3WbFr8Uo2JRb9DwAAABVU0v/dcv3/wCG7/OzM2Xf2nFC8kr0Qi/4HAACACirp/11z/T9uw2bZxFZHDTygeCV7MRb9DwAAABVU0v+75fr/X/0eeLFVx4cf71G8kr0Ui/4HAACACirp/91z/f/gWW/dc/DgJdYfU7ySvRyL/gcAAIAKKun/PXL9/9Ba6658Qt9pnY8uXsmmxqL/AQAAoIJK+n/PXP8/PH3pnS68bI0rny5eyV6JRf8DAABABZX0/165/h+//cRb9rt3wEf3F69k02LR/wAAAFBBJf3fPdf/E372ynnrtdi85d7FK9mrseh/AAAAqKCS/u+R6/+JM9fq+0CTJ7q8ULySvRaL/gcAAIAKKun/vXP9/8ippw5qPmnZm7coXsmmx6L/AQAAoIJK+n+fXP8/um7nQz687aYpvyleyV6PRf8DAABABZX0/77R//F7AMdc0b1P47eLV7I3YtH/AAAAUEEl/f/H3Ov/j5138407HTD8gEeKV7I3Y9H/AAAAUEEl/b9frv8f37B311HDe555SPFK9lYs+h8AAAAqqKT/e+b6/4l+149oP270mN2KV7L/xKL/AQAAoIJK+r9Xrv8nnXXSkB6LN15xdPFKNuc9AfQ/AAAAVFBJ/++f6/8n19r26EHNLuy5bfFK9k4s+h8AAAAqqKT/D8j1/1Nbj2hYc3zXgdOLV7J3Y9H/AAAAUEEl/f+nXP8//d7hrz577ZuPf1C8kr0Xi/4HAACACirp/wNz/f/M8x3vP6Xn2uvvULySzYhF/wMAAEAFlfT/Qbn+f3aH41c99OT7Oz9fvJK9H4v+BwAAgAoq6f+Dc/3/3B/26rtnl6ZXdixeyWbGov8BAACggkr6v3eu/ydPvvi8czoM+2j74pVsznsC6H8AAACooJL+PyTX/8+/e94to6ft2fLd4pVsViz6HwAAACqopP/75Pp/yrbddmo3Y2aXw4pXstmx6H8AAACooJL+PzTX/y9s+OGN766x3s1PFq9kH8ai/wEAAKCCSvr/sFz/v9hvw+2bdD57yrjileyjWPQ/AAAAVFBJ/x+e6/+Xzmp0yG/P2b5xr+KV7ONY9D8AAABUUEn/9831/8tr3Tvoohcb9d2xeGXul+t/AAAAqKCS/j8i1/9TT1306A3XH3X+rOKVejxG/wMAAEAVlfT/kbn+f2Xd0UPG7tjrwdeKV+qNY9H/AAAAUEEl/X9Urv+nrTBzxOABV6+1TfFK/Tux6H8AAACooJL+PzrX/6+et2nX/c9dp/vdxSv1RWLR/wAAAFBBJf1/TK7/X2s/7Ia1N3/7hF3jB2d8/rj6orHofwAAAKigkv7vl+v/6Sft0eXuFXeZ2Kd4pd4kFv0PAAAAFVTS/8fm+v/1ITv2Ofv9wes8WrxSz2LR/wAAAFBBJf1/XK7/31jlwrP2atmj4/7FK/U5X6//AQAAoIJK+r9/rv/ffHHkK0eOvvSifxWv1Bti0f8AAABQQSX9PyDX/29169v0tIvr704qXql/Nxb9DwAAABVU0v/H5/r/P507rT7p6PuWOrR4pd40Fv0PAAAAFVTS/yfk+v/tt04Yu9ruv9/lneKV+vdi0f8AAABQQSX9f2Ku/98ZsNIqr91x1oguxSv1ZrHofwAAAKigkv4/Kdf/7246ZUzLZzac2ql4pd48Fv0PAAAAFVTS/yfn+v+9NZ54oXPjDxqmFK/UF4tF/wMAAEAFlfT/Kbn+n3Fmyya3LNW67z3FK/XFY9H/AAAAUEEl/T8w1//vt396epuxz53fvXilvkQs+h8AAAAqqKT/T831/8yTWiw2/vJtHvxT8Up9yVj0PwAAAFRQSf+fluv/D4a0bjvg4NPXmli8Up/T/fofAAAAKqik/0/P9f+sVV4ed8g+S3bvVrxSXyoW/Q8AAAAVVNL/Z+T6f/bmS9324I0TT/iweKW+dCz6HwAAACqopP/PzPX/hx9N2GHjR4+cOK14pb5MLPofAAAAKqik//+c6/+Ppk09bJ+GEetsWbxS/0Es+h8AAAAqqKT//5Lr/49/3faC81//Rcf/FK/Ul41F/wMAAEAFRf8vkvvMGbkfbvzZqP+wVus0Pff5ePxic7r/098j2OOIt96Z3/zcJ3fy89OfolGttsg1X/i26l/vWS3Q3OfT/JHnN6u1qzXKP/NPtF3A48+uL7N8rV2tceHx837Bd+Lxy3Wd/aPjau1qTb74+H336bXnXofO/TB+tN5iy16vr1NrV6t/8fEH7HVgt17777lXfBj/uzS03nzvJV6ptast8sX/pfbp1btn7sOGGG2We2PF0z79fr7w+IMO3u3g7gfN/fC78fgVrj1sSO/5Pf7Aeb//pvH4FfdbfrHpzcbWFv3i4//Ue/+Dd6sBAADw3xb93yT3mXz/z+3ZWq3TqNzno4u/cv8vN++sLaj/v/P1ntUCzX0+31D/x5+VqH1/dp+fv9r8llr9iz287/69D+y1237tFsJzAQAAgC+t5PX/ua9PL6T+bzHvrC2o/xf9es9qgeY+n2+o/+P7ri8/+cMTHq6tV2s6v9fnux24W68ee83zWwDx+y/1HzUd8eJhtfVqzef/On23Pfae90uz+LofH/neby5svmWt2Xxffy98GQAAAP+/Ken/uT1bq/U7Jv9lMRfPf/wl+n/5eWct+h8AAAD4JpX0/9zXpRfQ/1/19f8fzTtr+h8AAAC+BSX9P/fPl8+3/xef++GX7P+GVp/fm6PxvDe/UfXWMdvEXCHmijFXirlyzFVirhpztZhz3kdgjZhrxvxJzPhbAfW1YsYfva+vHXOdmO1j/jTm/8TsEHPdmOvFXD/mBjE3jLlRzI1jbhJz05gdY3aKuVnMn8XcPObPY24R8xcx4998rP8y5lYxO8fcOuavYm4Tc9uYv475m5i/jfm7mL+PuV3MLjG3j7lDzB1j7hTzDzF3jrlLzK4xu8XcNWa8FWF995h7xNwzZrzPYr17zB4x9465T8x9Y/4x5n4x470X671i7h/zgJh/inlgzHjnxfrBMXvHPCRmn5jxjov1w2IeHrNvzCNiHhnzqJhHx4z/2633i3lszONi9o85IObxMU+IeWLMk2KeHPOUmANjnhrztJinx4z/n1I/M+afY/4l5qCYZ8U8O+Y5Mc+NeV7M82NeEHNwzCEx/xrzwphDY14U828xL455ScxhMS+NeVnMy2NeEfPKmH+POTzmP2JeFfPqmPH3m+rXxrwu5vUxb4h5Y8ybYt4c85aYt8a8LebtMUfEHBnzjph3xoy/u1W/K+bdMUfHvCfmmJj/jHlvzLEx74t5f8wHYo6L+a+YD8Z8KObDMcfHnBBzYsxHYj4a898xH4v5eMwnYk6K+WTMp2I+HfOZmM/GfC7m5JjPx5wS84WYL8Z8KebLMafGfCXmtJivxnwtZrxHbv31mG/EfDPmWzHj39Cpvx0zfp2svxvzvZgzYr4fc2bMD2LOijk75ocxP4r58Wcz3ga21hC/xjbEL7oN8etYQ/z63xB/3q8hft+/IX79b5jzvrNz3k92zvvEznn/1+/FbBazeczFYsZ/KTQsEXPJmPHvBTUsFXPpmMvEjH9XuCFeZ2iI9w1uiPcPaoi/R9gQf56wIV5XaIj/vmhoGTP3bxoBAAAAAED64vX/xrlPjf18bfLY/N+Lr966VsueqtUazRg55Lotvs7Pv93X9PE39S8FAAAAQEKi/5t//plFD/1vfj8AAADAwqf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffPt/0X+m98RAAAAsLB5/R8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSN7f/szmf0f8AAACQGq//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPq+Yv9//J1v45sCAAAAFiqv/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPr0PwAAAKRP/wMAAED69D8AAACkT/8DAABA+vQ/AAAApE//AwAAQPqi/xfJfeaM3A/XPxsNrWu1fsfkv2zeH//s4z2OeOud+c3PfXInPz/RuNFCezLlmn2LPxcAAABURkn/N8Ros4D+Xzb/8Zfo/zbzztq33P+LTf1sNnksPvG9b+/nBgAAgP+ekv7/7mejYYUF9P+o/Mdfov9XmHfWov8X2XqhPaH/3ZK57/0T36/V6t+r1Rp/Z+Gcr7ea9369da2WPVWrNZqxcO4DAADA/01J/zf9bDSsuID+vyb/8Zfo/xXnnbXo/0WfWmhP6KtptOMi9d93PbpW23X7lp/OqS9mn865jt3w1isb3Tj39yfmPO65pVvO+7hv5y4AAAD8n5T0f/z5+IaVarVO03Ofb/zZWOyr/vn/leadc752kWu+8G01/lpPasHmPp/mjzy/Wa1drVH+mX+i7QIef3Z9meWbT601Ljy+7Tf0nQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHMFAAD//4Lz3VI=") 1.214502738s ago: executing program 0 (id=3804): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xfc, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) 1.130018894s ago: executing program 1 (id=3805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x20000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x9507, 0x20a80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4014) 1.129932234s ago: executing program 4 (id=3806): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000004c00)=""/4090, 0xffa}, {0x0}], 0x2) 1.012157899s ago: executing program 4 (id=3807): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="9f77c9e509f02ef643b88157bc888cf0d18b56b6628b6651809e6c21416d1b5d2ed9175c598b1074e1de55eb259d58e5e3283a83fa319994bd46e53ee3d006a125a57129ed697fa1f527acc8c71550737202f9fa67cc0ce0189fbf274950f85a8d031d8c3fd69f9d4c84b170fa80455fd5bd416a4d03cfb4e99817e07bd55faa5f6159eec75228951df677a4716f591c354199b71434a0094cfb154472a52559", @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") utimes(&(0x7f0000000400)='.\x00', 0x0) 968.160865ms ago: executing program 1 (id=3808): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 830.397917ms ago: executing program 0 (id=3809): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x80000000, 0xbb46, 0x34324142, 0x0, 0x0, 0x2c9, 0x0, 0xfffffffd}}) 806.820354ms ago: executing program 1 (id=3810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8080, 0x8400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x4000}]}}}]}, 0x48}}, 0x0) 755.159115ms ago: executing program 4 (id=3811): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383363030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b2f38f0106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f330000000000000003d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9870af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xa75}}, 0x1006) 687.251817ms ago: executing program 0 (id=3812): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000a00)='./bus\x00', 0x10000, &(0x7f00000009c0)=ANY=[], 0x2, 0x62d2, &(0x7f0000006e00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1247002, 0x0, 0x40, 0x0, &(0x7f0000000240)) 606.6059ms ago: executing program 1 (id=3813): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f00000003c0)={0x631, 0xfffffffffffffffe, 0x0, 0x9f11}) 488.71707ms ago: executing program 1 (id=3814): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@can_delroute={0x34, 0x19, 0x1, 0x70bd28, 0x25dfdbff, {0x1d, 0x1, 0x4}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "54f213a46a133acd"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7, 0x6, 0xfffffffffffffff8, 0xcb}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x400008c) 476.821877ms ago: executing program 3 (id=3815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000089a000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000380001800c000100636f756e74657200040002800800034000000107"], 0xc8}}, 0x20050800) 342.015373ms ago: executing program 3 (id=3816): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 290.548099ms ago: executing program 1 (id=3817): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x8}]}}}]}, 0x44}}, 0x0) 282.404088ms ago: executing program 4 (id=3818): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 101.743825ms ago: executing program 3 (id=3819): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002600)={0x14, 0x4e, 0x101, 0x70bd29, 0x0, "", [@generic="ad"]}, 0x14}], 0x1}, 0x0) 0s ago: executing program 4 (id=3820): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x20, 0xf5, 0xc, 0xfffff01c}, {0x6, 0x4, 0x0, 0x5}]}, 0x10) kernel console output (not intermixed with test programs): scuous mode [ 291.105376][T11289] FAT-fs (loop2): Directory bread(block 65) failed [ 291.111184][ T5887] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 291.112180][T11289] FAT-fs (loop2): Directory bread(block 66) failed [ 291.131201][T11295] netlink: 'syz.1.2250': attribute type 3 has an invalid length. [ 291.139279][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.139941][T11289] FAT-fs (loop2): Directory bread(block 67) failed [ 291.154556][T11293] team_slave_0: entered promiscuous mode [ 291.167931][ T5887] usb 4-1: Product: syz [ 291.178116][T11289] FAT-fs (loop2): Directory bread(block 68) failed [ 291.186626][T11289] FAT-fs (loop2): Directory bread(block 69) failed [ 291.192443][ T5887] usb 4-1: Manufacturer: syz [ 291.195369][T11289] FAT-fs (loop2): Directory bread(block 70) failed [ 291.197905][ T5887] usb 4-1: SerialNumber: syz [ 291.199795][T11293] team_slave_1: entered promiscuous mode [ 291.205084][T11289] FAT-fs (loop2): Directory bread(block 71) failed [ 291.213238][ T5887] usb 4-1: config 0 descriptor?? [ 291.232666][T11289] FAT-fs (loop2): Directory bread(block 72) failed [ 291.250527][T11289] FAT-fs (loop2): Directory bread(block 73) failed [ 291.258173][T11263] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 291.314179][ T5887] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 291.340857][ T30] audit: type=1326 audit(1760357769.249:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.1.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfb18eec9 code=0x7ffc0000 [ 291.421832][ T30] audit: type=1326 audit(1760357769.285:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.1.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7efcfb18eec9 code=0x7ffc0000 [ 291.458158][ T30] audit: type=1326 audit(1760357769.285:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.1.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfb18eec9 code=0x7ffc0000 [ 291.482743][ T30] audit: type=1326 audit(1760357769.285:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11298 comm="syz.1.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfb18eec9 code=0x7ffc0000 [ 291.551131][ T182] usb 4-1: USB disconnect, device number 71 [ 291.558952][ T49] usb 4-1: Failed to submit usb control message: -71 [ 291.587993][ T49] usb 4-1: unable to send the bmi data to the device: -71 [ 291.613539][ T49] usb 4-1: unable to get target info from device [ 291.613600][ T49] usb 4-1: could not get target info (-71) [ 291.613632][ T49] usb 4-1: could not probe fw (-71) [ 291.968128][T11316] bond1 (unregistering): Released all slaves [ 292.060513][T11330] Cannot find del_set index 1 as target [ 292.089920][ T24] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 292.103433][T11328] loop0: detected capacity change from 0 to 4096 [ 292.144243][T11328] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 292.237539][T11332] loop2: detected capacity change from 0 to 512 [ 292.275664][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 292.299879][T11332] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 292.302871][ T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 292.327159][ T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 292.375333][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 292.400536][ T24] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 292.415519][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.444028][ T24] usb 5-1: Product: syz [ 292.456423][ T24] usb 5-1: Manufacturer: syz [ 292.475223][ T24] usb 5-1: SerialNumber: syz [ 292.535106][ T24] usb 5-1: config 0 descriptor?? [ 292.615725][T11342] loop0: detected capacity change from 0 to 2048 [ 292.698834][T11342] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 292.741421][T11350] loop1: detected capacity change from 0 to 512 [ 292.756217][T11350] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 292.788488][T11342] UDF-fs: unknown compression code (0) [ 292.821437][T11350] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #17: comm syz.1.2274: inode has both inline data and extents flags [ 292.840250][T11354] geneve2: entered promiscuous mode [ 292.845508][T11354] geneve2: entered allmulticast mode [ 292.893471][T11350] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2274: couldn't read orphan inode 17 (err -117) [ 292.944210][T11350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.055800][ T182] usb 5-1: USB disconnect, device number 59 [ 293.098812][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.210666][T11367] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 293.455551][T11379] process 'syz.0.2288' launched './file0' with NULL argv: empty string added [ 293.801058][T11397] loop3: detected capacity change from 0 to 512 [ 293.847389][T11397] EXT4-fs (loop3): orphan cleanup on readonly fs [ 293.931795][T11397] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2297: bg 0: block 248: padding at end of block bitmap is not set [ 293.967317][T11397] Quota error (device loop3): write_blk: dquota write failed [ 294.001454][T11397] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 294.036055][T11397] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2297: Failed to acquire dquot type 1 [ 294.066620][T11397] EXT4-fs (loop3): 1 truncate cleaned up [ 294.138703][T11397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.216314][T11397] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.2297: deleted inode referenced: 12 [ 294.497559][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.221298][T11449] loop3: detected capacity change from 0 to 128 [ 295.245550][T11449] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 295.282895][T11449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.567655][ T5887] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 295.739348][T11469] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2331'. [ 295.761589][T11471] loop3: detected capacity change from 0 to 256 [ 295.764408][ T5887] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 295.785225][ T5887] usb 5-1: config 0 has no interface number 0 [ 295.791739][ T5887] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 295.847104][ T5887] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 295.852943][T11471] FAT-fs (loop3): Directory bread(block 64) failed [ 295.868123][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.902227][T11471] FAT-fs (loop3): Directory bread(block 65) failed [ 295.904816][ T5887] usb 5-1: Product: syz [ 295.913890][T11471] FAT-fs (loop3): Directory bread(block 66) failed [ 295.940723][ T5887] usb 5-1: Manufacturer: syz [ 295.945418][ T5887] usb 5-1: SerialNumber: syz [ 295.965147][T11471] FAT-fs (loop3): Directory bread(block 67) failed [ 295.979679][ T5887] usb 5-1: config 0 descriptor?? [ 295.990511][T11471] FAT-fs (loop3): Directory bread(block 68) failed [ 295.997079][T11471] FAT-fs (loop3): Directory bread(block 69) failed [ 296.019076][T11471] FAT-fs (loop3): Directory bread(block 70) failed [ 296.033508][T11471] FAT-fs (loop3): Directory bread(block 71) failed [ 296.040437][T11471] FAT-fs (loop3): Directory bread(block 72) failed [ 296.069679][T11471] FAT-fs (loop3): Directory bread(block 73) failed [ 296.168274][ T30] audit: type=1400 audit(1760357773.707:19): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=11485 comm="syz.2.2338" [ 296.391553][T11493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2344'. [ 296.436855][ T5887] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 296.478680][ T5887] usb 5-1: USB disconnect, device number 60 [ 296.805216][T11513] loop2: detected capacity change from 0 to 8 [ 296.847839][T11513] SQUASHFS error: Failed to read block 0x636: -5 [ 296.854590][T11513] SQUASHFS error: Unable to read metadata cache entry [634] [ 296.878770][T11513] SQUASHFS error: Unable to read metadata cache entry [634] [ 296.882721][T11518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2353'. [ 296.886295][T11513] SQUASHFS error: Unable to read directory block [629:0] [ 296.977996][T11516] bond1: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3) [ 297.065725][T11516] bond1 (unregistering): Released all slaves [ 297.190264][T11526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.225280][T11531] comedi comedi1: pcl711: I/O port conflict (0x2,16) [ 297.230299][T11526] bond0: (slave rose0): Enslaving as an active interface with an up link [ 297.687712][T11555] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2370'. [ 298.141861][T11579] netlink: 'syz.0.2380': attribute type 8 has an invalid length. [ 298.237728][T11581] loop1: detected capacity change from 0 to 2048 [ 298.282232][T11583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2382'. [ 298.287166][T11581] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 298.353210][ T5827] udevd[5827]: incorrect nilfs2 checksum on /dev/loop1 [ 298.380525][T11581] syz.1.2381: attempt to access beyond end of device [ 298.380525][T11581] loop1: rw=524288, sector=65534, nr_sectors = 2 limit=2048 [ 298.384367][T11587] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.525708][T11581] syz.1.2381: attempt to access beyond end of device [ 298.525708][T11581] loop1: rw=0, sector=65534, nr_sectors = 2 limit=2048 [ 298.599995][T11581] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 298.656909][T11581] NILFS (loop1): error -5 reading inode: ino=12 [ 298.835618][T11556] loop2: detected capacity change from 0 to 32768 [ 298.919438][T11556] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2371 (11556) [ 298.998191][T11556] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 299.023661][T11556] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 299.262930][T11556] BTRFS info (device loop2): enabling ssd optimizations [ 299.321761][T11556] BTRFS info (device loop2): enabling free space tree [ 299.336422][T11628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.600494][T11642] loop0: detected capacity change from 0 to 256 [ 299.642866][ T5835] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 299.764116][T11642] FAT-fs (loop0): Directory bread(block 64) failed [ 299.770711][T11642] FAT-fs (loop0): Directory bread(block 65) failed [ 299.808836][T11642] FAT-fs (loop0): Directory bread(block 66) failed [ 299.866036][T11642] FAT-fs (loop0): Directory bread(block 67) failed [ 299.892719][T11642] FAT-fs (loop0): Directory bread(block 68) failed [ 299.921398][T11642] FAT-fs (loop0): Directory bread(block 69) failed [ 299.964064][T11642] FAT-fs (loop0): Directory bread(block 70) failed [ 299.981994][T11642] FAT-fs (loop0): Directory bread(block 71) failed [ 300.003982][T11642] FAT-fs (loop0): Directory bread(block 72) failed [ 300.033401][T11642] FAT-fs (loop0): Directory bread(block 73) failed [ 300.156656][T11657] loop1: detected capacity change from 0 to 256 [ 300.178662][ T182] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 300.245895][T11657] FAT-fs (loop1): Directory bread(block 64) failed [ 300.279418][T11657] FAT-fs (loop1): Directory bread(block 65) failed [ 300.291294][ T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 300.303045][T11657] FAT-fs (loop1): Directory bread(block 66) failed [ 300.325625][T11657] FAT-fs (loop1): Directory bread(block 67) failed [ 300.356439][T11657] FAT-fs (loop1): Directory bread(block 68) failed [ 300.378071][T11657] FAT-fs (loop1): Directory bread(block 69) failed [ 300.379033][ T182] usb 5-1: Using ep0 maxpacket: 8 [ 300.384789][T11657] FAT-fs (loop1): Directory bread(block 70) failed [ 300.414777][T11657] FAT-fs (loop1): Directory bread(block 71) failed [ 300.428305][ T182] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.444975][T11657] FAT-fs (loop1): Directory bread(block 72) failed [ 300.457608][ T182] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.462613][T11657] FAT-fs (loop1): Directory bread(block 73) failed [ 300.487257][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 300.512051][ T182] usb 5-1: config 0 interface 0 has no altsetting 0 [ 300.519248][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 300.540365][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.547563][ T182] usb 5-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 300.561827][ T182] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.574580][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 300.583880][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.602877][ T10] usb 4-1: Product: syz [ 300.611067][ T10] usb 4-1: Manufacturer: syz [ 300.615708][ T10] usb 4-1: SerialNumber: syz [ 300.631743][ T182] usb 5-1: config 0 descriptor?? [ 300.652314][ T10] usb 4-1: config 0 descriptor?? [ 300.674596][ T10] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 300.748444][T11672] loop2: detected capacity change from 0 to 1764 [ 300.761762][T11673] loop0: detected capacity change from 0 to 1024 [ 300.820279][T11672] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 300.872828][ T182] usbhid 5-1:0.0: can't add hid device: -71 [ 300.909431][ T182] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 300.934902][ T10] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 300.950409][ T182] usb 5-1: USB disconnect, device number 61 [ 300.957148][ T10] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 300.972985][ T10] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 301.175724][ T10] usb 4-1: USB disconnect, device number 72 [ 301.390668][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2412'. [ 301.390711][T11689] netlink: 'syz.0.2412': attribute type 5 has an invalid length. [ 301.390750][T11689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2412'. [ 301.418892][T11689] geneve2: entered promiscuous mode [ 301.418927][T11689] geneve2: entered allmulticast mode [ 301.424620][ T60] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 301.424822][ T60] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 301.424854][ T60] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 301.424883][ T60] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 302.071842][T11718] netlink: 'syz.4.2425': attribute type 32 has an invalid length. [ 302.744801][T11747] netlink: 'syz.0.2438': attribute type 1 has an invalid length. [ 302.894897][T11753] netlink: 'syz.1.2441': attribute type 3 has an invalid length. [ 302.894970][T11753] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2441'. [ 303.042357][T11759] loop1: detected capacity change from 0 to 128 [ 303.290972][T11768] netlink: zone id is out of range [ 303.306990][T11768] netlink: get zone limit has 4 unknown bytes [ 304.107507][T11809] ip6gre2: entered allmulticast mode [ 304.841601][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 304.902535][T11856] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 305.033579][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 305.061068][ T24] usb 3-1: config index 0 descriptor too short (expected 44, got 36) [ 305.090842][ T24] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 305.099079][ T24] usb 3-1: config 0 has no interface number 0 [ 305.138740][ T24] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 305.177451][ T24] usb 3-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 305.201769][ T24] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 305.247282][ T24] usb 3-1: config 0 interface 126 has no altsetting 0 [ 305.284263][ T24] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 305.311384][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.328236][ T24] usb 3-1: Product: syz [ 305.344355][ T24] usb 3-1: Manufacturer: syz [ 305.359409][ T24] usb 3-1: SerialNumber: syz [ 305.388546][ T24] usb 3-1: config 0 descriptor?? [ 305.418966][T11836] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 305.741904][ T24] ir_usb 3-1:0.126: IR Dongle converter detected [ 305.749766][ T24] usb 3-1: IRDA class descriptor not found, device not bound [ 305.810703][ T24] usb 3-1: USB disconnect, device number 65 [ 305.881933][T11886] delete_channel: no stack [ 306.433509][T11879] loop1: detected capacity change from 0 to 32768 [ 306.478680][T11879] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2498 (11879) [ 306.532886][T11879] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 306.584033][T11917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 306.596289][T11879] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 306.789268][T11879] BTRFS info (device loop1): enabling ssd optimizations [ 306.835130][T11879] BTRFS info (device loop1): enabling free space tree [ 307.055709][T11948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2514'. [ 307.108884][ T5826] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.153362][T11953] loop4: detected capacity change from 0 to 256 [ 307.264163][T11957] netlink: 'syz.3.2519': attribute type 11 has an invalid length. [ 307.322943][T11953] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 307.766892][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 307.891189][T11979] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 307.938851][T11979] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 307.958055][T11979] overlayfs: missing 'lowerdir' [ 307.977733][ T24] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 308.000019][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.046812][T11984] kAFS: unable to lookup cell 'mS²jQ€·”œ­=È A4Z1Ë¡8' [ 308.048345][ T24] usb 3-1: config 0 descriptor?? [ 308.296558][ T24] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 308.305953][T11993] loop3: detected capacity change from 0 to 8 [ 308.366317][T11993] SQUASHFS error: Unable to read inode 0xa7 [ 308.515360][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 308.589620][ T24] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 308.632686][ T24] [drm] Initialized udl on minor 2 [ 308.654236][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 308.702631][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 308.713227][ T5887] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 308.745974][ T24] usb 3-1: USB disconnect, device number 66 [ 308.759517][T11966] loop0: detected capacity change from 0 to 32768 [ 308.764217][ T5887] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 308.814771][T11966] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 308.832027][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 308.846138][T11966] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 308.870126][T11966] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 309.035574][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 309.045104][ T10] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 309.056084][ T10] usb 2-1: config 4 has no interface number 0 [ 309.062227][ T10] usb 2-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 309.076657][T11966] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 309.083126][ T10] usb 2-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 309.134914][ T10] usb 2-1: config 4 interface 51 has no altsetting 0 [ 309.155796][ T10] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 309.156921][T12020] netlink: 'syz.4.2548': attribute type 2 has an invalid length. [ 309.165024][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.181090][ T10] usb 2-1: Product: syz [ 309.185298][ T10] usb 2-1: Manufacturer: syz [ 309.190170][ T182] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 309.200104][ T10] usb 2-1: SerialNumber: syz [ 309.238366][T12001] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 309.247319][T12001] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 309.363898][ T182] usb 4-1: Using ep0 maxpacket: 32 [ 309.377262][ T182] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 309.392024][ T182] usb 4-1: config 0 has no interface number 0 [ 309.409316][ T182] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.431837][ T182] usb 4-1: config 0 interface 2 has no altsetting 0 [ 309.460046][ T182] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 309.494013][T12001] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 309.494695][ T182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.509565][T12001] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 309.528247][ T182] usb 4-1: Product: syz [ 309.532460][ T182] usb 4-1: Manufacturer: syz [ 309.554582][ T182] usb 4-1: SerialNumber: syz [ 309.569446][ T10] cdc_eem 2-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.1-1, CDC EEM Device, be:23:d5:6d:1b:bc [ 309.598743][ T182] usb 4-1: config 0 descriptor?? [ 309.772887][ T10] usb 2-1: USB disconnect, device number 56 [ 309.804552][ T10] cdc_eem 2-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.1-1, CDC EEM Device [ 309.847283][ T182] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 310.142325][ T182] usb 4-1: USB disconnect, device number 73 [ 310.219780][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.454092][T12060] netlink: 'syz.0.2564': attribute type 1 has an invalid length. [ 311.031901][T12087] loop4: detected capacity change from 0 to 256 [ 311.252051][T12054] loop2: detected capacity change from 0 to 32768 [ 311.385681][T12098] loop0: detected capacity change from 0 to 1024 [ 312.111377][ T10] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 312.259196][T12139] loop0: detected capacity change from 0 to 164 [ 312.296578][T12139] rock: directory entry would overflow storage [ 312.317270][T12139] rock: sig=0x66, size=4, remaining=3 [ 312.341738][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.345169][T12139] rock: directory entry would overflow storage [ 312.365792][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.366925][T12139] rock: sig=0x66, size=4, remaining=3 [ 312.418119][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 312.437302][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2594'. [ 312.452481][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 312.486488][ T10] usb 5-1: SerialNumber: syz [ 312.518674][T12149] loop3: detected capacity change from 0 to 256 [ 312.537732][ T10] usb 5-1: 0:2 : does not exist [ 312.605171][T12149] FAT-fs (loop3): Directory bread(block 64) failed [ 312.631755][T12149] FAT-fs (loop3): Directory bread(block 65) failed [ 312.638448][T12149] FAT-fs (loop3): Directory bread(block 66) failed [ 312.661872][T12149] FAT-fs (loop3): Directory bread(block 67) failed [ 312.675219][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2596'. [ 312.685955][T12149] FAT-fs (loop3): Directory bread(block 68) failed [ 312.710265][T12149] FAT-fs (loop3): Directory bread(block 69) failed [ 312.717021][T12149] FAT-fs (loop3): Directory bread(block 70) failed [ 312.802386][T12149] FAT-fs (loop3): Directory bread(block 71) failed [ 312.820465][T12149] FAT-fs (loop3): Directory bread(block 72) failed [ 312.848193][T12149] FAT-fs (loop3): Directory bread(block 73) failed [ 313.022104][T12149] syz.3.2595: attempt to access beyond end of device [ 313.022104][T12149] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 313.036720][ T182] usb 5-1: USB disconnect, device number 62 [ 313.100316][T12149] syz.3.2595: attempt to access beyond end of device [ 313.100316][T12149] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 313.163343][ T30] audit: type=1800 audit(1760357789.388:20): pid=12149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2595" name="file0" dev="loop3" ino=1048613 res=0 errno=0 [ 313.257645][T12174] netlink: 'syz.0.2605': attribute type 1 has an invalid length. [ 313.403314][ T30] audit: type=1400 audit(1760357789.619:21): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=12179 comm="syz.3.2608" [ 313.521977][T12186] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2611'. [ 313.827391][T12202] loop0: detected capacity change from 0 to 1024 [ 313.888502][T12202] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 313.897032][T12208] loop2: detected capacity change from 0 to 64 [ 313.939291][T12202] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 313.967387][T12212] loop1: detected capacity change from 0 to 64 [ 313.983220][T12202] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 314.050922][T12202] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: inode #5: comm syz.0.2615: unexpected bad inode w/o EXT4_IGET_BAD [ 314.071235][T12212] Trying to free block not in datazone [ 314.118573][T12212] Trying to free block not in datazone [ 314.124164][T12212] Trying to free block not in datazone [ 314.126829][T12202] EXT4-fs (loop0): no journal found [ 314.177150][T12202] EXT4-fs (loop0): can't get journal size [ 314.181743][T12212] Trying to free block not in datazone [ 314.210750][T12202] EXT4-fs (loop0): too many log groups per flexible block group [ 314.238637][T12212] minix_free_block (loop1:6): bit already cleared [ 314.261315][T12202] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 314.270792][T12202] EXT4-fs (loop0): mount failed [ 314.289454][T12212] Trying to free block not in datazone [ 314.325827][T12212] Trying to free block not in datazone [ 314.473519][T12230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2627'. [ 315.032881][T12257] loop4: detected capacity change from 0 to 256 [ 315.171687][T12267] overlayfs: missing 'lowerdir' [ 315.225777][T12258] loop0: detected capacity change from 0 to 4096 [ 315.271920][T12269] loop3: detected capacity change from 0 to 512 [ 315.292801][T12269] EXT4-fs: Ignoring removed nobh option [ 315.333367][T12269] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.2644: corrupted inode contents [ 315.466134][T12269] EXT4-fs (loop3): Remounting filesystem read-only [ 315.482984][T12269] Quota error (device loop3): write_blk: dquota write failed [ 315.497583][T12269] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota [ 315.513922][T12269] EXT4-fs (loop3): 1 truncate cleaned up [ 315.515248][T12281] loop2: detected capacity change from 0 to 256 [ 315.535989][T12269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.567630][T12269] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.695743][T12281] FAT-fs (loop2): Directory bread(block 64) failed [ 315.715736][T12281] FAT-fs (loop2): Directory bread(block 65) failed [ 315.730012][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 315.730076][T12281] FAT-fs (loop2): Directory bread(block 66) failed [ 315.755789][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.766439][T12281] FAT-fs (loop2): Directory bread(block 67) failed [ 315.773088][T12281] FAT-fs (loop2): Directory bread(block 68) failed [ 315.782107][T12286] cgroup: name respecified [ 315.782451][T12281] FAT-fs (loop2): Directory bread(block 69) failed [ 315.793526][T12281] FAT-fs (loop2): Directory bread(block 70) failed [ 315.801583][T12281] FAT-fs (loop2): Directory bread(block 71) failed [ 315.839249][T12281] FAT-fs (loop2): Directory bread(block 72) failed [ 315.863567][T12281] FAT-fs (loop2): Directory bread(block 73) failed [ 315.910852][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 315.945197][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.979354][ T24] usb 2-1: Product: syz [ 315.983566][ T24] usb 2-1: Manufacturer: syz [ 316.004102][T12290] : entered promiscuous mode [ 316.010525][ T24] usb 2-1: SerialNumber: syz [ 316.052060][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 316.118347][ T5887] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 316.177887][T12296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.516026][T12304] netlink: 'syz.3.2660': attribute type 37 has an invalid length. [ 316.594624][ T10] usb 2-1: USB disconnect, device number 57 [ 316.753905][T12312] netlink: 'syz.2.2664': attribute type 13 has an invalid length. [ 316.946969][T12320] loop2: detected capacity change from 0 to 512 [ 316.961996][T12316] loop3: detected capacity change from 0 to 4096 [ 316.988404][T12316] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 316.997827][T12320] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 317.008195][T12320] FAT-fs (loop2): Filesystem has been set read-only [ 317.034600][T12320] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 317.089168][T12316] ntfs3(loop3): ino=19, mi_enum_attr [ 317.094699][T12316] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 317.120875][T12322] loop4: detected capacity change from 0 to 16 [ 317.139713][T12316] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 317.148137][T12322] erofs (device loop4): mounted with root inode @ nid 36. [ 317.355143][ T5887] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 317.388023][ T5887] ath9k_htc: Failed to initialize the device [ 317.400148][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 317.411530][T12326] tmpfs: Bad value for 'mpol' [ 317.476283][T12328] loop4: detected capacity change from 0 to 64 [ 317.609345][T12324] loop1: detected capacity change from 0 to 4096 [ 317.988053][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2678'. [ 318.061254][T12341] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 318.087873][T12341] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2678'. [ 318.108958][T12345] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2681'. [ 318.148738][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2681'. [ 318.208653][T12345] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2681'. [ 318.231462][T12345] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2681'. [ 318.271184][T12345] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2681'. [ 318.368891][T12354] loop3: detected capacity change from 0 to 16 [ 318.403989][T12354] erofs (device loop3): mounted with root inode @ nid 36. [ 318.768381][T12364] xt_CT: No such helper "pptp" [ 319.039985][T12383] loop0: detected capacity change from 0 to 256 [ 319.089143][T12383] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 319.275047][T12393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2703'. [ 319.288317][T12393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2703'. [ 319.395361][T12397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2706'. [ 319.444036][T12397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2706'. [ 319.516407][T12405] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2710'. [ 319.768872][T12415] loop4: detected capacity change from 0 to 1024 [ 319.817996][T12421] netlink: 'syz.0.2718': attribute type 6 has an invalid length. [ 319.840212][T12415] hfsplus: keylen 65060 too large [ 319.840488][T12415] hfsplus: keylen 65060 too large [ 320.172290][T12435] loop4: detected capacity change from 0 to 256 [ 320.249311][T12440] loop2: detected capacity change from 0 to 256 [ 320.359672][T12440] FAT-fs (loop2): Directory bread(block 64) failed [ 320.410388][T12440] FAT-fs (loop2): Directory bread(block 65) failed [ 320.417140][T12440] FAT-fs (loop2): Directory bread(block 66) failed [ 320.448849][T12445] netlink: 'syz.3.2731': attribute type 9 has an invalid length. [ 320.459709][T12440] FAT-fs (loop2): Directory bread(block 67) failed [ 320.486721][T12440] FAT-fs (loop2): Directory bread(block 68) failed [ 320.499423][T12440] FAT-fs (loop2): Directory bread(block 69) failed [ 320.517451][T12440] FAT-fs (loop2): Directory bread(block 70) failed [ 320.524115][ T24] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 320.540455][T12440] FAT-fs (loop2): Directory bread(block 71) failed [ 320.562188][T12440] FAT-fs (loop2): Directory bread(block 72) failed [ 320.592122][T12440] FAT-fs (loop2): Directory bread(block 73) failed [ 320.656247][T12455] loop0: detected capacity change from 0 to 256 [ 320.713730][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 320.722594][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 320.733868][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.771629][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 320.812828][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.843832][T12455] FAT-fs (loop0): Directory bread(block 64) failed [ 320.855505][T12455] FAT-fs (loop0): Directory bread(block 65) failed [ 320.866023][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.887294][T12455] FAT-fs (loop0): Directory bread(block 66) failed [ 320.893906][T12455] FAT-fs (loop0): Directory bread(block 67) failed [ 320.915109][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 320.933675][T12455] FAT-fs (loop0): Directory bread(block 68) failed [ 320.939101][T12464] loop3: detected capacity change from 0 to 512 [ 320.952387][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.967145][T12455] FAT-fs (loop0): Directory bread(block 69) failed [ 320.995611][T12455] FAT-fs (loop0): Directory bread(block 70) failed [ 321.013241][T12455] FAT-fs (loop0): Directory bread(block 71) failed [ 321.034396][T12455] FAT-fs (loop0): Directory bread(block 72) failed [ 321.044123][T12455] FAT-fs (loop0): Directory bread(block 73) failed [ 321.058803][T12464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.081582][T12464] ext4 filesystem being mounted at /489/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 321.130148][T12464] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.2739: corrupted xattr block 33: invalid ea_ino [ 321.147689][T12464] EXT4-fs (loop3): Remounting filesystem read-only [ 321.200854][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.213391][ T3001] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 321.256836][ T3001] Quota error (device loop3): write_blk: dquota write failed [ 321.273230][ T3001] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 321.294098][ T3001] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 321.310564][ T3001] Quota error (device loop3): write_blk: dquota write failed [ 321.318050][ T3001] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 321.329152][ T3001] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 321.339599][ T3001] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 321.396715][T12478] loop2: detected capacity change from 0 to 16 [ 321.433590][T12478] erofs (device loop2): mounted with root inode @ nid 36. [ 321.480981][ T24] usb 2-1: USB disconnect, device number 58 [ 321.550303][T12486] loop3: detected capacity change from 0 to 128 [ 322.305328][T12523] loop3: detected capacity change from 0 to 22 [ 322.321731][T12523] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 322.371915][T12523] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 322.473014][T12528] loop1: detected capacity change from 0 to 64 [ 322.541520][T12533] loop4: detected capacity change from 0 to 1024 [ 322.626734][T12533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.660355][T12533] ext4 filesystem being mounted at /585/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.900405][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.988750][T12551] random: crng reseeded on system resumption [ 323.093198][T12553] loop0: detected capacity change from 0 to 512 [ 323.239081][T12553] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.2774: inode has both inline data and extents flags [ 323.296926][T12553] EXT4-fs (loop0): Remounting filesystem read-only [ 323.335832][T12553] EXT4-fs (loop0): get root inode failed [ 323.346983][T12553] EXT4-fs (loop0): mount failed [ 324.152395][T12609] netlink: 'syz.2.2800': attribute type 4 has an invalid length. [ 324.191622][ T981] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 324.311199][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 324.380044][ T981] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 324.389977][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.408755][ T981] usb 5-1: Product: syz [ 324.413074][ T981] usb 5-1: Manufacturer: syz [ 324.423953][ T981] usb 5-1: SerialNumber: syz [ 324.452004][ T981] usb 5-1: config 0 descriptor?? [ 324.460461][ T981] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 324.495965][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 324.511064][ T9] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 324.528013][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.536811][ T9] usb 2-1: Product: syz [ 324.545973][T12623] loop0: detected capacity change from 0 to 4096 [ 324.552638][ T9] usb 2-1: Manufacturer: syz [ 324.557250][ T9] usb 2-1: SerialNumber: syz [ 324.566809][ T9] usb 2-1: config 0 descriptor?? [ 324.599422][T12623] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 324.696788][T12623] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 324.818520][ T9] usb 2-1: can't set first interface for hiFace device. [ 324.850296][ T9] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 324.899606][ T9] usb 2-1: USB disconnect, device number 59 [ 324.915388][ T981] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 324.961014][ T981] sq905c 5-1:0.0: Reading version command failed [ 324.975078][ T981] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 325.010255][ T981] usb 5-1: USB disconnect, device number 63 [ 325.824796][T12682] loop2: detected capacity change from 0 to 65 [ 325.885715][T12682] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 326.432603][ T30] audit: type=1326 audit(1760357801.637:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2c58eec9 code=0x7ffc0000 [ 326.549060][ T30] audit: type=1326 audit(1760357801.637:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f3b2c58eec9 code=0x7ffc0000 [ 326.627206][ T30] audit: type=1326 audit(1760357801.637:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2c58eec9 code=0x7ffc0000 [ 326.705546][ T30] audit: type=1326 audit(1760357801.637:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2c58eec9 code=0x7ffc0000 [ 326.741331][T12720] netlink: 'syz.2.2853': attribute type 1 has an invalid length. [ 326.746299][T12678] loop4: detected capacity change from 0 to 32768 [ 326.802461][T12678] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2832 (12678) [ 326.853201][T12678] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 326.890027][T12678] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 326.898643][T12678] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 327.156721][T12678] BTRFS info (device loop4): rebuilding free space tree [ 327.201558][T12678] BTRFS info (device loop4): disabling free space tree [ 327.246797][T12678] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 327.290525][T12678] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 327.375224][T12678] BTRFS info (device loop4): enabling ssd optimizations [ 327.385380][T12678] BTRFS info (device loop4): enabling disk space caching [ 327.408673][T12716] loop3: detected capacity change from 0 to 32768 [ 327.413575][T12678] BTRFS info (device loop4): force clearing of disk cache [ 327.429417][T12678] BTRFS info (device loop4): enabling auto defrag [ 327.462154][T12678] BTRFS info (device loop4): max_inline set to 0 [ 327.492141][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.499693][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.556374][T12716] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 327.610663][T12764] loop1: detected capacity change from 0 to 736 [ 327.628056][ T5830] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 327.677792][T12716] XFS (loop3): Ending clean mount [ 327.699573][T12716] XFS (loop3): Quotacheck needed: Please wait. [ 327.788755][T12716] XFS (loop3): Quotacheck: Done. [ 328.035155][ T5834] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 328.044994][T12781] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 328.969529][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 329.013037][T12814] loop4: detected capacity change from 0 to 2048 [ 329.096839][T12814] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.142804][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 329.152288][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 329.168592][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.197909][ T24] usb 4-1: Product: syz [ 329.205751][ T24] usb 4-1: Manufacturer: syz [ 329.227949][T12800] loop2: detected capacity change from 0 to 32768 [ 329.229080][ T24] usb 4-1: SerialNumber: syz [ 329.273289][ T24] usb 4-1: config 0 descriptor?? [ 329.288040][T12800] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 329.324129][ T24] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 329.398007][T12800] XFS (loop2): Ending clean mount [ 329.518601][ T5835] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 329.629731][T12838] loop4: detected capacity change from 0 to 1024 [ 329.736933][ T24] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 329.769014][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 329.826087][ T24] usb 4-1: USB disconnect, device number 74 [ 329.864816][ T12] hfsplus: b-tree write err: -5, ino 4 [ 330.058610][T12852] loop4: detected capacity change from 0 to 16 [ 330.344628][T12858] loop0: detected capacity change from 0 to 4096 [ 330.518369][T12868] comedi comedi3: pcl724: I/O port conflict (0x8,4) [ 330.530392][T12852] erofs (device loop4): mounted with root inode @ nid 36. [ 330.632773][T12858] ntfs3(loop0): new label is too long [ 330.712924][T12874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.783539][ T30] audit: type=1326 audit(1760357805.642:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.3.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfdf8eec9 code=0x7ffc0000 [ 330.813494][ T30] audit: type=1326 audit(1760357805.642:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.3.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfdf8eec9 code=0x7ffc0000 [ 330.888820][ T30] audit: type=1326 audit(1760357805.689:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.3.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f2dfdf8eec9 code=0x7ffc0000 [ 331.061324][T12888] __nla_validate_parse: 4 callbacks suppressed [ 331.061341][T12888] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2921'. [ 331.348092][T12898] netlink: 'syz.2.2926': attribute type 10 has an invalid length. [ 331.396521][T12898] batman_adv: batadv0: Adding interface: netdevsim0 [ 331.409301][T12898] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.453622][ T981] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 331.456735][T12898] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 331.491265][T12904] netlink: 'syz.1.2928': attribute type 5 has an invalid length. [ 331.513396][T12904] netlink: 'syz.1.2928': attribute type 1 has an invalid length. [ 331.634853][ T981] usb 1-1: Using ep0 maxpacket: 8 [ 331.661242][ T981] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 331.670824][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.699782][ T981] usb 1-1: Product: syz [ 331.703986][ T981] usb 1-1: Manufacturer: syz [ 331.708592][ T981] usb 1-1: SerialNumber: syz [ 331.729850][ T981] usb 1-1: config 0 descriptor?? [ 331.776169][ T5887] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 331.813021][T12918] openvswitch: netlink: IP tunnel dst address not specified [ 331.949113][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 331.968204][ T981] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 331.984294][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.009951][ T5887] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 332.030755][ T5887] usb 5-1: config 1 has no interface number 1 [ 332.068181][ T5887] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 332.100579][ T5887] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.129208][ T5887] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 332.143971][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.163071][ T5887] usb 5-1: Product: syz [ 332.173630][ T5887] usb 5-1: Manufacturer: syz [ 332.178707][ T5887] usb 5-1: SerialNumber: syz [ 332.205869][ T981] usb write operation failed. (-71) [ 332.231849][ T981] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 332.252065][ T981] dvbdev: DVB: registering new adapter (Terratec H7) [ 332.262302][ T981] usb 1-1: media controller created [ 332.274899][ T981] usb read operation failed. (-71) [ 332.280611][ T981] usb write operation failed. (-71) [ 332.300088][ T981] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 332.323887][ T981] usb 1-1: USB disconnect, device number 57 [ 332.452172][ T5887] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 332.476835][ T5887] usb 5-1: 2:1 : invalid channels 0 [ 332.514973][ T5887] usb 5-1: USB disconnect, device number 64 [ 332.583509][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.771379][T12930] loop3: detected capacity change from 0 to 32768 [ 332.800969][T12930] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2941 (12930) [ 332.849546][T12930] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 332.883298][T12930] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 333.000713][ T5887] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 333.026396][T12963] loop0: detected capacity change from 0 to 2048 [ 333.069071][T12963] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.089967][T12930] BTRFS info (device loop3): enabling ssd optimizations [ 333.108259][T12930] BTRFS info (device loop3): enabling free space tree [ 333.167072][T12970] loop4: detected capacity change from 0 to 256 [ 333.184940][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 333.196737][T12970] FAT-fs (loop4): Directory bread(block 64) failed [ 333.224460][ T5887] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 333.226925][T12970] FAT-fs (loop4): Directory bread(block 65) failed [ 333.244620][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.282631][ T5887] usb 3-1: Product: syz [ 333.294229][T12970] FAT-fs (loop4): Directory bread(block 66) failed [ 333.301303][ T5834] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 333.305468][T12970] FAT-fs (loop4): Directory bread(block 67) failed [ 333.334688][ T5887] usb 3-1: Manufacturer: syz [ 333.350022][T12970] FAT-fs (loop4): Directory bread(block 68) failed [ 333.350467][ T5887] usb 3-1: SerialNumber: syz [ 333.356597][T12970] FAT-fs (loop4): Directory bread(block 69) failed [ 333.405022][T12970] FAT-fs (loop4): Directory bread(block 70) failed [ 333.416355][ T5887] usb 3-1: config 0 descriptor?? [ 333.417767][T12970] FAT-fs (loop4): Directory bread(block 71) failed [ 333.432529][T12970] FAT-fs (loop4): Directory bread(block 72) failed [ 333.432559][T12970] FAT-fs (loop4): Directory bread(block 73) failed [ 333.447080][ T5887] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 333.679968][ T5887] gspca_ov534_9: reg_w failed -71 [ 333.793571][T12984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2959'. [ 333.865864][T12984] ip6tnl2: entered promiscuous mode [ 334.016342][T12990] nbd: couldn't find device at index -373156329 [ 334.127985][ T5887] gspca_ov534_9: Unknown sensor 0000 [ 334.128078][ T5887] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 334.188678][ T5887] usb 3-1: USB disconnect, device number 67 [ 334.689059][T13026] loop3: detected capacity change from 0 to 128 [ 334.751634][T13026] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 334.832011][T13026] ext4 filesystem being mounted at /531/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 334.920765][T13026] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 335.050630][ T5834] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 335.238363][T13046] sctp: [Deprecated]: syz.3.2986 (pid 13046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.238363][T13046] Use struct sctp_sack_info instead [ 335.347060][T13022] loop4: detected capacity change from 0 to 32768 [ 335.405284][T13052] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2991'. [ 335.714153][T13066] netlink: 'syz.4.2996': attribute type 248 has an invalid length. [ 336.089682][T13084] loop3: detected capacity change from 0 to 16 [ 336.120412][T13084] erofs (device loop3): mounted with root inode @ nid 36. [ 336.164222][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 336.383621][ T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 336.395696][ T24] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 336.415637][ T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 336.443949][ T24] usb 2-1: config 220 has no interface number 2 [ 336.465267][ T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 336.479869][T13097] loop3: detected capacity change from 0 to 8 [ 336.495882][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 336.505385][T13097] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 336.529431][ T24] usb 2-1: config 220 interface 76 has no altsetting 0 [ 336.552080][ T5837] udevd[5837]: incorrect cramfs checksum on /dev/loop3 [ 336.553253][T13097] cramfs: Error -3 while decompressing! [ 336.561522][ T24] usb 2-1: config 220 interface 1 has no altsetting 0 [ 336.601580][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 336.610678][T13097] cramfs: ffffffff99afff28(26)->ffff88806cc06000(4096) [ 336.610713][T13097] cramfs: bad data blocksize 524314 [ 336.610767][T13097] cramfs: bad data blocksize 4294442596 [ 336.610801][T13097] cramfs: Error -3 while decompressing! [ 336.610812][T13097] cramfs: ffffffff99afff28(26)->ffff88806cc06000(4096) [ 336.620864][ T5827] udevd[5827]: incorrect cramfs checksum on /dev/loop3 [ 336.651654][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.659762][ T24] usb 2-1: Product: syz [ 336.667651][ T24] usb 2-1: Manufacturer: syz [ 336.672289][ T24] usb 2-1: SerialNumber: syz [ 336.724890][T13105] random: crng reseeded on system resumption [ 336.748815][T13108] loop0: detected capacity change from 0 to 256 [ 336.939105][ T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 336.960792][ T24] uvcvideo 2-1:220.0: No valid video chain found. [ 336.981890][ T24] usb 2-1: selecting invalid altsetting 0 [ 337.044567][ T24] usb 2-1: selecting invalid altsetting 0 [ 337.050440][ T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 337.091871][ T24] usb 2-1: USB disconnect, device number 60 [ 337.225721][ T182] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 337.228058][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3026'. [ 337.389403][ T182] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 337.408753][ T182] usb 1-1: config 5 has no interface number 0 [ 337.417710][ T182] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 337.433673][ T182] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 337.444839][ T182] usb 1-1: config 5 interface 123 has no altsetting 0 [ 337.454397][ T182] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 337.471938][ T182] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.485114][ T182] usb 1-1: Product: syz [ 337.489357][ T182] usb 1-1: Manufacturer: syz [ 337.505124][ T182] usb 1-1: SerialNumber: syz [ 337.509854][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 337.575608][T13136] loop3: detected capacity change from 0 to 16 [ 337.713846][ T9] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 337.745211][ T9] usb 5-1: config 0 has no interface number 0 [ 337.754485][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 337.785202][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.810550][ T182] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 337.819199][ T9] usb 5-1: Product: syz [ 337.830123][ T9] usb 5-1: Manufacturer: syz [ 337.842065][ T182] usb 1-1: USB disconnect, device number 58 [ 337.848247][ T9] usb 5-1: SerialNumber: syz [ 337.882685][ T9] usb 5-1: config 0 descriptor?? [ 337.921106][T13132] loop2: detected capacity change from 0 to 32768 [ 337.941373][T13132] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3030 (13132) [ 337.991209][T13136] erofs (device loop3): mounted with root inode @ nid 36. [ 337.998850][T13132] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 338.013841][T13132] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 338.141779][ T9] uvcvideo 5-1:0.64: Found Unit with invalid ID 0 [ 338.164761][ T9] uvcvideo 5-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 338.194113][ T9] uvcvideo 5-1:0.64: Entity type for entity Output 65535 was not initialized! [ 338.208513][T13132] BTRFS info (device loop2): enabling ssd optimizations [ 338.230671][ T9] uvcvideo 5-1:0.64: Failed to create links for entity 65535 [ 338.250499][T13132] BTRFS info (device loop2): enabling free space tree [ 338.283451][ T9] uvcvideo 5-1:0.64: Failed to register entities (-22). [ 338.328772][ T9] usb 5-1: USB disconnect, device number 65 [ 338.439961][ T5835] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 339.124887][T13185] netlink: 'syz.0.3047': attribute type 30 has an invalid length. [ 339.803880][T13210] comedi comedi3: 8255: I/O port conflict (0x1a,4) [ 339.832782][T13210] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 339.859945][T13210] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 339.877543][T13210] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 339.899495][T13210] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 339.921202][T13210] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 339.941252][T13210] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 339.957822][T13210] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 339.984270][T13181] loop3: detected capacity change from 0 to 32768 [ 340.388707][ T5887] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 340.509201][T13234] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 340.605383][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 340.616098][ T5887] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 340.629911][T13218] loop2: detected capacity change from 0 to 32768 [ 340.639452][ T5887] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 340.641060][T13218] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3063 (13218) [ 340.674375][ T5887] usb 1-1: config 6 has no interface number 0 [ 340.678182][T13218] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 340.680507][ T5887] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 340.721518][T13218] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 340.746254][ T5887] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 340.767874][ T5887] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.831136][ T5887] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 340.864089][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.876613][ T5887] usb 1-1: Product: syz [ 340.881075][ T5887] usb 1-1: Manufacturer: syz [ 340.885762][ T5887] usb 1-1: SerialNumber: syz [ 340.959983][ T5887] hso 1-1:6.2: Failed to find INT IN ep [ 340.971229][T13218] BTRFS info (device loop2): enabling ssd optimizations [ 340.979652][T13218] BTRFS info (device loop2): enabling free space tree [ 341.150059][T13218] BTRFS info (device loop2): balance: start -susage=1..2,limit=38654705664,limit=0..9 [ 341.191342][T13218] BTRFS info (device loop2): balance: ended with status: 0 [ 341.229766][T13270] loop4: detected capacity change from 0 to 256 [ 341.240498][ T981] usb 1-1: USB disconnect, device number 59 [ 341.369588][ T5835] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 341.917708][T13292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3092'. [ 342.100728][T13296] netlink: zone id is out of range [ 342.105881][T13296] netlink: zone id is out of range [ 342.137755][T13300] program syz.2.3095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.158225][T13296] netlink: zone id is out of range [ 342.163373][T13296] netlink: zone id is out of range [ 342.240943][T13306] syz.0.3099 uses old SIOCAX25GETINFO [ 342.561298][T13321] netlink: 'syz.1.3104': attribute type 1 has an invalid length. [ 342.590825][T13321] netlink: 'syz.1.3104': attribute type 1 has an invalid length. [ 342.711265][T13282] loop4: detected capacity change from 0 to 40427 [ 342.744213][T13282] F2FS-fs (loop4): build fault injection rate: 174 [ 342.793954][T13282] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 342.826081][T13282] F2FS-fs (loop4): invalid crc value [ 343.149529][T13282] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 343.192500][T13282] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 343.297994][T13282] syz.4.3088: attempt to access beyond end of device [ 343.297994][T13282] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 343.299780][T13352] loop3: detected capacity change from 0 to 512 [ 343.347574][T13352] EXT4-fs: Ignoring removed oldalloc option [ 343.375544][T13352] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 343.429563][T13352] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3121: inode has both inline data and extents flags [ 343.459363][T13352] EXT4-fs (loop3): Remounting filesystem read-only [ 343.471688][ T5830] syz-executor: attempt to access beyond end of device [ 343.471688][ T5830] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 343.497273][T13352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.514442][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 343.514492][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.514504][ T5830] Call Trace: [ 343.514512][ T5830] [ 343.514522][ T5830] dump_stack_lvl+0x189/0x250 [ 343.514552][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.514572][ T5830] ? __pfx_queue_work_on+0x10/0x10 [ 343.514595][ T5830] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 343.514617][ T5830] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 343.514651][ T5830] f2fs_handle_critical_error+0x37c/0x540 [ 343.514682][ T5830] f2fs_write_end_io+0x886/0xb60 [ 343.514726][ T5830] __submit_merged_bio+0x27a/0x6a0 [ 343.514756][ T5830] __submit_merged_write_cond+0x255/0x530 [ 343.514786][ T5830] f2fs_write_data_pages+0x261d/0x3000 [ 343.514851][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 343.514936][ T5830] ? check_path+0x21/0x40 [ 343.514966][ T5830] ? check_noncircular+0xe0/0x160 [ 343.515053][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 343.515077][ T5830] do_writepages+0x32e/0x550 [ 343.515110][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 343.515135][ T5830] filemap_fdatawrite+0x199/0x240 [ 343.515155][ T5830] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 343.515231][ T5830] ? do_raw_spin_unlock+0x122/0x240 [ 343.515256][ T5830] f2fs_sync_dirty_inodes+0x31f/0x830 [ 343.515303][ T5830] f2fs_write_checkpoint+0x93e/0x2440 [ 343.515327][ T5830] ? __lock_acquire+0xab9/0xd20 [ 343.515384][ T5830] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 343.515475][ T5830] kill_f2fs_super+0x2cc/0x6d0 [ 343.515507][ T5830] ? __pfx_kill_f2fs_super+0x10/0x10 [ 343.515553][ T5830] ? shrinker_free+0x2ce/0x3e0 [ 343.515581][ T5830] deactivate_locked_super+0xbc/0x130 [ 343.515611][ T5830] cleanup_mnt+0x425/0x4c0 [ 343.515635][ T5830] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.515656][ T5830] task_work_run+0x1d4/0x260 [ 343.515675][ T5830] ? __pfx_task_work_run+0x10/0x10 [ 343.515692][ T5830] ? __x64_sys_umount+0x122/0x160 [ 343.515716][ T5830] ? exit_to_user_mode_loop+0x40/0x130 [ 343.515742][ T5830] exit_to_user_mode_loop+0xe9/0x130 [ 343.515765][ T5830] do_syscall_64+0x2bd/0xfa0 [ 343.515785][ T5830] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.515805][ T5830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.515823][ T5830] ? clear_bhb_loop+0x60/0xb0 [ 343.515847][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.515864][ T5830] RIP: 0033:0x7efd3db901f7 [ 343.515902][ T5830] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 343.515917][ T5830] RSP: 002b:00007ffe30c10fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 343.515937][ T5830] RAX: 0000000000000000 RBX: 00007efd3dc11d7d RCX: 00007efd3db901f7 [ 343.515950][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe30c11070 [ 343.515961][ T5830] RBP: 00007ffe30c11070 R08: 0000000000000000 R09: 0000000000000000 [ 343.515973][ T5830] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe30c12100 [ 343.515984][ T5830] R13: 00007efd3dc11d7d R14: 000000000005100a R15: 00007ffe30c12140 [ 343.516021][ T5830] [ 343.516029][ T5830] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 343.840777][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.856104][T13346] loop1: detected capacity change from 0 to 32768 [ 344.332605][ T5922] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 344.385144][T13373] loop2: detected capacity change from 0 to 4096 [ 344.490488][T13379] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3134'. [ 344.507597][T13382] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.527398][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 344.541934][ T5922] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 344.561712][ T5922] usb 1-1: config 0 has no interface number 0 [ 344.567866][ T5922] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 344.630966][ T5922] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 344.679046][ T5922] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 344.717153][ T5922] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 344.754893][ T5922] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 344.801459][ T5922] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 344.837165][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.885977][ T5922] usb 1-1: config 0 descriptor?? [ 344.922848][ T5922] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 345.158292][T13365] ldusb 1-1:0.55: Couldn't submit interrupt_in_urb -90 [ 345.206664][ T5922] usb 1-1: USB disconnect, device number 60 [ 345.251692][ T5922] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 345.751803][ T981] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 345.782404][T13410] loop1: detected capacity change from 0 to 32768 [ 345.832037][T13410] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 345.854445][T13395] loop3: detected capacity change from 0 to 32768 [ 345.905291][T13395] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 345.926706][ T981] usb 3-1: config 201 has an invalid interface number: 249 but max is 0 [ 345.939093][ T981] usb 3-1: config 201 has no interface number 0 [ 345.941908][T13410] XFS (loop1): Ending clean mount [ 345.945423][ T981] usb 3-1: config 201 interface 249 has no altsetting 0 [ 345.982387][T13395] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 345.998125][T13410] XFS (loop1): Quotacheck needed: Please wait. [ 346.038622][ T981] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 346.063172][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.079426][ T981] usb 3-1: Product: syz [ 346.085649][ T981] usb 3-1: Manufacturer: syz [ 346.090349][ T981] usb 3-1: SerialNumber: syz [ 346.108547][T13410] XFS (loop1): Quotacheck: Done. [ 346.129117][T13417] loop4: detected capacity change from 0 to 32768 [ 346.156502][T13395] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 346.217574][ T5922] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 346.224391][ T5922] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 346.231747][T13417] ERROR: (device loop4): dbAllocAG: unable to allocate blocks [ 346.231747][T13417] [ 346.318037][T13437] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 346.323093][ T5826] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 346.375101][ T981] ath6kl: Failed to submit usb control message: -71 [ 346.417872][ T5922] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 178ms [ 346.418905][ T981] ath6kl: unable to send the bmi data to the device: -71 [ 346.441004][ T5922] gfs2: fsid=syz:syz.0: jid=0: Done [ 346.447421][T13395] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 346.484888][ T981] ath6kl: Unable to send get target info: -71 [ 346.500480][ T981] ath6kl: Failed to init ath6kl core: -71 [ 346.515716][ T981] ath6kl_usb 3-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 346.555984][ T981] usb 3-1: USB disconnect, device number 68 [ 347.007817][T13454] random: crng reseeded on system resumption [ 347.294992][T13466] loop2: detected capacity change from 0 to 512 [ 347.364195][T13466] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 347.989080][T13489] netlink: 'syz.1.3178': attribute type 41 has an invalid length. [ 348.030518][T13492] netlink: 'syz.2.3180': attribute type 1 has an invalid length. [ 348.045640][T13492] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3180'. [ 348.173793][T13464] loop0: detected capacity change from 0 to 32768 [ 348.204984][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3171'. [ 348.230396][T13500] xt_TCPMSS: Only works on TCP SYN packets [ 348.231044][T13464] (syz.0.3167,13464,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 348.267433][T13464] (syz.0.3167,13464,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 348.340789][T13497] bond1 (unregistering): Released all slaves [ 348.385651][T13464] JBD2: Ignoring recovery information on journal [ 348.605677][T13464] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 348.788884][T13521] loop3: detected capacity change from 0 to 256 [ 348.873321][ T5842] ocfs2: Unmounting device (7,0) on (node local) [ 348.964848][T13521] FAT-fs (loop3): Directory bread(block 64) failed [ 349.003309][T13521] FAT-fs (loop3): Directory bread(block 65) failed [ 349.010074][T13521] FAT-fs (loop3): Directory bread(block 66) failed [ 349.065026][T13521] FAT-fs (loop3): Directory bread(block 67) failed [ 349.103423][T13521] FAT-fs (loop3): Directory bread(block 68) failed [ 349.133954][T13521] FAT-fs (loop3): Directory bread(block 69) failed [ 349.141071][T13521] FAT-fs (loop3): Directory bread(block 70) failed [ 349.195284][T13521] FAT-fs (loop3): Directory bread(block 71) failed [ 349.218757][T13521] FAT-fs (loop3): Directory bread(block 72) failed [ 349.225310][T13521] FAT-fs (loop3): Directory bread(block 73) failed [ 349.373145][ T30] audit: type=1400 audit(1760358078.811:29): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=263A0AE1 pid=13536 comm="syz.0.3196" [ 349.583253][T13543] loop0: detected capacity change from 0 to 512 [ 349.595959][T13547] loop3: detected capacity change from 0 to 8 [ 349.633672][T13543] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 349.661414][T13547] SQUASHFS error: Failed to read block 0x4e8: -5 [ 349.692609][ T30] audit: type=1800 audit(1760358079.106:30): pid=13547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3203" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 349.716721][T13543] EXT4-fs (loop0): orphan cleanup on readonly fs [ 349.719756][T13525] loop4: detected capacity change from 0 to 32768 [ 349.744412][T13543] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.3204: bad orphan inode 15 [ 349.755797][T13552] capability: warning: `syz.2.3207' uses deprecated v2 capabilities in a way that may be insecure [ 349.775739][T13543] ext4_test_bit(bit=14, block=18) = 1 [ 349.782952][T13543] is_bad_inode(inode)=0 [ 349.789704][T13543] NEXT_ORPHAN(inode)=1023 [ 349.794313][T13543] max_ino=32 [ 349.797523][T13543] i_nlink=0 [ 349.806549][T13543] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2967: inode #15: comm syz.0.3204: corrupted xattr block 19: e_value size too large [ 349.825306][T13543] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 349.848783][T13543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 ro without journal. Quota mode: none. [ 350.090075][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 350.100593][T13561] vivid-000: ================= START STATUS ================= [ 350.139536][T13561] vivid-000: Generate PTS: true [ 350.156833][T13561] vivid-000: Generate SCR: true [ 350.172293][T13561] tpg source WxH: 1920x1080 (R'G'B) [ 350.177535][T13561] tpg field: 1 [ 350.218848][T13561] tpg crop: (0,0)/1920x1080 [ 350.226341][T13561] tpg compose: (0,0)/1920x1080 [ 350.234422][T13561] tpg colorspace: 8 [ 350.243927][T13561] tpg transfer function: 0/0 [ 350.258903][T13561] tpg quantization: 0/0 [ 350.277188][T13566] loop1: detected capacity change from 0 to 256 [ 350.280593][T13561] tpg RGB range: 0/2 [ 350.287471][T13561] vivid-000: ================== END STATUS ================== [ 350.595083][ T981] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 350.719568][T13578] openvswitch: netlink: Message has 2 unknown bytes. [ 350.738082][T13558] loop3: detected capacity change from 0 to 32768 [ 350.742860][T13578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.793782][ T981] usb 1-1: Using ep0 maxpacket: 8 [ 350.810685][T13558] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 350.840913][ T981] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 350.854643][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.873698][ T981] usb 1-1: Product: syz [ 350.888223][ T981] usb 1-1: Manufacturer: syz [ 350.893330][ T981] usb 1-1: SerialNumber: syz [ 351.005651][T13596] netlink: 'syz.1.3224': attribute type 5 has an invalid length. [ 351.171421][T13558] XFS (loop3): Ending clean mount [ 351.298977][ T5834] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 351.439680][ T981] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 351.448406][ T981] mxuport 1-1:254.0: probe with driver mxuport failed with error -5 [ 351.468825][ T981] usb 1-1: USB disconnect, device number 61 [ 351.729784][T13619] loop1: detected capacity change from 0 to 1024 [ 351.795132][T13619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 351.822051][T13619] ext4 filesystem being mounted at /702/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.844195][T13619] EXT4-fs warning (device loop1): ext4_empty_dir:3099: inode #12: comm syz.1.3236: directory missing '..' [ 351.919218][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 352.179590][T13638] warning: `syz.0.3243' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 352.952430][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 353.083409][T13684] loop2: detected capacity change from 0 to 256 [ 353.135863][T13684] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 353.153373][ T9] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 353.172653][ T9] usb 5-1: config 0 has no interface number 0 [ 353.197262][ T9] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 353.208794][T13684] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 1) [ 353.218689][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 353.248965][T13684] exFAT-fs (loop2): failed to load alloc-bitmap [ 353.262206][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.265521][T13684] exFAT-fs (loop2): failed to recognize exfat type [ 353.299753][ T9] usb 5-1: config 0 descriptor?? [ 353.316414][T13692] loop0: detected capacity change from 0 to 64 [ 353.329916][ T9] ttusbir 5-1:0.83: cannot find expected altsetting [ 353.362546][T13692] syz.0.3269: attempt to access beyond end of device [ 353.362546][T13692] loop0: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 353.438654][T13692] Buffer I/O error on dev loop0, logical block 32767, async page read [ 353.750691][ T30] audit: type=1326 audit(1760358082.854:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13708 comm="syz.2.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa78b8eec9 code=0x7ffc0000 [ 353.801380][T13674] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 353.828535][T13674] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 353.850449][ T30] audit: type=1326 audit(1760358082.854:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13708 comm="syz.2.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa78b8eec9 code=0x7ffc0000 [ 353.938633][ T30] audit: type=1326 audit(1760358082.881:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13708 comm="syz.2.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7ffa78b8eec9 code=0x7ffc0000 [ 353.995888][T13674] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 354.013266][T13674] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 354.042503][ T30] audit: type=1326 audit(1760358082.881:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13708 comm="syz.2.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa78b8eec9 code=0x7ffc0000 [ 354.081272][T13674] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 354.096689][ T30] audit: type=1326 audit(1760358082.881:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13708 comm="syz.2.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa78b8eec9 code=0x7ffc0000 [ 354.121170][T13674] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 354.284543][T13729] loop2: detected capacity change from 0 to 1024 [ 354.382519][ T24] usb 5-1: USB disconnect, device number 66 [ 355.572838][ T30] audit: type=1326 audit(1760358084.534:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.4.3306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd3db8eec9 code=0x0 [ 355.603637][T13777] loop2: detected capacity change from 0 to 4096 [ 355.671106][T13777] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 355.791655][T13795] loop3: detected capacity change from 0 to 1764 [ 355.859997][T13777] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 355.897401][T13777] ntfs3(loop2): ino=19, mi_enum_attr [ 355.988562][T13777] ntfs3(loop2): failed to convert "c46c" to cp863 [ 356.018135][T13777] ntfs3(loop2): ino=20, mi_enum_attr [ 356.374610][T13827] loop4: detected capacity change from 0 to 512 [ 356.434694][T13827] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 356.518431][T13827] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 356.531744][T13827] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 356.551064][T13827] System zones: 0-1, 15-15, 18-18, 34-34 [ 356.564491][T13827] EXT4-fs (loop4): orphan cleanup on readonly fs [ 356.570970][T13827] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 356.607779][T13827] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 356.693507][T13827] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 356.719398][T13827] EXT4-fs (loop4): 1 truncate cleaned up [ 356.806277][T13827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 356.855195][T13827] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 357.013556][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.076669][T13861] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3333'. [ 357.904689][T13897] loop1: detected capacity change from 0 to 256 [ 357.996558][T13897] exFAT-fs (loop1): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 358.076211][T13906] loop4: detected capacity change from 0 to 128 [ 358.167578][T13906] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.245481][T13906] ext4 filesystem being mounted at /667/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 358.644400][ T981] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 358.819279][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 358.841426][ T981] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xCF, changing to 0x8F [ 358.884784][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 62919, setting to 1024 [ 358.897185][ T981] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 358.925869][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3367'. [ 358.934736][ T981] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 358.934763][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.934801][ T981] usb 5-1: Product: syz [ 358.934815][ T981] usb 5-1: Manufacturer: syz [ 358.934828][ T981] usb 5-1: SerialNumber: syz [ 358.937612][ T981] usb 5-1: config 0 descriptor?? [ 359.030025][T13906] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 359.054428][ T981] hub 5-1:0.0: bad descriptor, ignoring hub [ 359.069877][ T981] hub 5-1:0.0: probe with driver hub failed with error -5 [ 359.134781][ T981] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 359.377797][ T981] usb 5-1: USB disconnect, device number 67 [ 359.378902][T13960] loop1: detected capacity change from 0 to 4096 [ 359.409494][T13960] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 359.596712][T13960] ntfs3(loop1): ino=0, attr_set_size [ 359.611966][ T5922] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 359.794971][T13978] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 359.838747][ T5922] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 359.863130][ T5922] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 359.896364][ T5922] usb 1-1: config 220 has no interface number 2 [ 359.908729][ T5922] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 359.912081][ T981] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 359.931454][ T5922] usb 1-1: config 220 interface 0 has no altsetting 0 [ 359.941455][ T5922] usb 1-1: config 220 interface 76 has no altsetting 0 [ 359.950193][ T5922] usb 1-1: config 220 interface 1 has no altsetting 0 [ 359.961774][ T5922] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 359.977638][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.985935][ T5922] usb 1-1: Product: syz [ 359.993567][ T5922] usb 1-1: Manufacturer: syz [ 359.998564][ T5922] usb 1-1: SerialNumber: syz [ 360.021181][ T5830] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 360.052902][ T182] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 360.133145][ T981] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 360.149944][ T981] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 360.183096][ T981] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 360.194563][ T981] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 360.221471][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 360.268460][ T5922] usb 1-1: selecting invalid altsetting 0 [ 360.269560][ T981] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 360.287405][ T182] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 360.299659][ T5922] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 360.315704][ T182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.333894][ T5922] uvcvideo 1-1:220.0: No valid video chain found. [ 360.340765][ T182] usb 3-1: Product: syz [ 360.342433][ T981] usb 4-1: string descriptor 0 read error: -22 [ 360.344970][ T182] usb 3-1: Manufacturer: syz [ 360.359586][ T182] usb 3-1: SerialNumber: syz [ 360.370460][ T5922] usb 1-1: selecting invalid altsetting 0 [ 360.376222][ T5922] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 360.377720][ T981] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 360.395520][ T182] usb 3-1: config 0 descriptor?? [ 360.421306][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.430558][ T5922] usb 1-1: USB disconnect, device number 62 [ 360.449810][ T182] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 360.509625][ T981] usb 4-1: config 0 descriptor?? [ 360.542541][T13973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.551335][ T981] hub 4-1:0.0: bad descriptor, ignoring hub [ 360.557278][ T981] hub 4-1:0.0: probe with driver hub failed with error -5 [ 360.619944][ T981] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input37 [ 360.916176][ T5922] usb 3-1: USB disconnect, device number 69 [ 360.952304][ T5880] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 360.983238][ T9] usb 4-1: USB disconnect, device number 75 [ 361.137240][ T5880] usb 2-1: Using ep0 maxpacket: 8 [ 361.162390][ T5880] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 361.191265][ T5880] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 361.226257][ T5880] usb 2-1: Product: syz [ 361.230474][ T5880] usb 2-1: Manufacturer: syz [ 361.255824][ T5880] usb 2-1: SerialNumber: syz [ 361.268017][ T5880] usb 2-1: config 0 descriptor?? [ 361.293317][ T5880] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 361.334305][T14034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3395'. [ 361.476119][T14041] loop0: detected capacity change from 0 to 512 [ 361.505664][T14041] EXT4-fs: Ignoring removed orlov option [ 361.544825][T14038] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.580998][T14038] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.588274][T14038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.623092][T14041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.677006][T14041] ext4 filesystem being mounted at /701/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.756185][ T5880] gspca_zc3xx: reg_r err -71 [ 361.781351][ T5880] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 361.842038][ T5880] usb 2-1: USB disconnect, device number 61 [ 361.915756][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.932729][T14052] loop4: detected capacity change from 0 to 4096 [ 361.973542][T14052] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 362.090503][T14062] loop0: detected capacity change from 0 to 512 [ 362.171085][T14062] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 362.189675][T14052] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 362.200204][T14066] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3404'. [ 362.214633][T14062] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 362.227275][T14062] System zones: 1-12 [ 362.232434][T14062] EXT4-fs (loop0): orphan cleanup on readonly fs [ 362.239313][T14062] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3403: invalid indirect mapped block 12 (level 1) [ 362.255700][T14066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.256298][T14062] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3403: invalid indirect mapped block 2 (level 2) [ 362.376940][T14069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3405'. [ 362.382795][T14062] EXT4-fs (loop0): 1 truncate cleaned up [ 362.410500][T14062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 362.453863][ T3001] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 362.494231][ T5830] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 362.500811][ T5830] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 362.533944][ T5830] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 362.540807][ T3018] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 362.638964][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 362.734109][T14081] netlink: 'syz.4.3408': attribute type 1 has an invalid length. [ 362.793546][T14081] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3408'. [ 363.101309][T14060] loop3: detected capacity change from 0 to 32768 [ 363.234841][T14104] loop2: detected capacity change from 0 to 512 [ 363.274951][T14104] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 363.293640][T14106] loop4: detected capacity change from 0 to 256 [ 363.323753][T14106] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 363.385807][T14104] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 363.472030][T14104] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3418: bg 0: block 248: padding at end of block bitmap is not set [ 363.495742][T14104] Quota error (device loop2): write_blk: dquota write failed [ 363.505643][T14104] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 363.533158][T14104] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3418: Failed to acquire dquot type 1 [ 363.591291][T14104] EXT4-fs (loop2): 1 truncate cleaned up [ 363.647690][T14104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 363.866936][T14113] loop3: detected capacity change from 0 to 8192 [ 363.918387][T14113] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 363.949772][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 363.965786][ T3018] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 363.978214][T14113] FAT-fs (loop3): Filesystem has been set read-only [ 363.984872][T14113] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 364.010488][T14130] tmpfs: Bad value for 'mpol' [ 364.018546][ T3018] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:10: Failed to release dquot type 1 [ 364.023238][T14113] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 364.078955][T14113] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 364.108683][T14113] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 364.164466][T14113] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 364.188148][T14113] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 364.231066][T14113] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 364.271265][T14113] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 364.310846][T14113] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 364.342618][T14113] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 364.396379][ T30] audit: type=1800 audit(1760358092.674:37): pid=14113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3421" name="file2" dev="loop3" ino=1048643 res=0 errno=0 [ 364.419107][ T981] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 364.630437][ T981] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 364.672966][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.701209][ T981] usb 2-1: Product: syz [ 364.703397][T14153] netlink: 'syz.0.3437': attribute type 11 has an invalid length. [ 364.716505][ T981] usb 2-1: Manufacturer: syz [ 364.721141][ T981] usb 2-1: SerialNumber: syz [ 364.761674][ T981] usb 2-1: config 0 descriptor?? [ 364.946839][T14163] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.246489][ T5880] usb 2-1: USB disconnect, device number 62 [ 365.247091][T14143] loop2: detected capacity change from 0 to 32768 [ 365.363493][T14143] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 365.454542][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3447'. [ 365.587767][T14143] XFS (loop2): Ending clean mount [ 365.771515][T14204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.782747][ T5835] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 366.256383][T14211] loop4: detected capacity change from 0 to 4096 [ 366.296849][T14219] netlink: 'syz.0.3458': attribute type 2 has an invalid length. [ 366.306959][T14211] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 366.399373][T14211] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 366.460412][T14211] ntfs3(loop4): mft corrupted [ 366.465215][T14211] ntfs3(loop4): Failed to load $Extend (-22). [ 366.510603][T14211] ntfs3(loop4): Failed to initialize $Extend. [ 366.570838][T14211] ntfs3(loop4): ino=1e, mi_enum_attr [ 366.610129][T14211] ntfs3(loop4): ino=1e, mi_enum_attr [ 366.743988][T14238] loop0: detected capacity change from 0 to 1024 [ 366.814768][T14238] hfsplus: invalid extent max_key_len 0 [ 366.820554][T14238] hfsplus: failed to load extents file [ 366.956713][T14244] capability: warning: `syz.1.3469' uses 32-bit capabilities (legacy support in use) [ 367.111081][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3473'. [ 367.120277][ T5922] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 367.156367][T14252] loop3: detected capacity change from 0 to 1764 [ 367.238787][T14252] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 367.301799][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 367.315701][ T5922] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 367.331107][ T5922] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 367.351228][ T5922] usb 1-1: config 8 has an invalid descriptor of length 156, skipping remainder of the config [ 367.417072][ T5922] usb 1-1: config 8 has no interface number 0 [ 367.456762][ T5922] usb 1-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 367.492097][T14267] 8021q: adding VLAN 0 to HW filter on device bond2 [ 367.512759][ T5922] usb 1-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 367.582764][ T5922] usb 1-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.641397][ T5880] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 367.641813][ T5922] usb 1-1: config 8 interface 223 has no altsetting 0 [ 367.683345][ T5922] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 367.708474][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.727678][ T5922] usb 1-1: Product: syz [ 367.742890][ T5922] usb 1-1: Manufacturer: syz [ 367.756211][ T5922] usb 1-1: SerialNumber: syz [ 367.776276][T14238] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 367.833721][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 367.875171][ T5880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 367.882106][T14286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3484'. [ 367.918688][ T5880] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 367.927771][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 367.955784][ T5880] usb 5-1: SerialNumber: syz [ 367.985941][ T5880] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 368.009048][ T5880] usb-storage 5-1:1.0: USB Mass Storage device detected [ 368.061562][ T5880] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 368.069991][ T5922] usb 1-1: USB disconnect, device number 63 [ 368.087953][ T5880] scsi host1: usb-storage 5-1:1.0 [ 368.127081][T14298] loop3: detected capacity change from 0 to 8 [ 368.172453][T14298] SQUASHFS error: lzo decompression failed, data probably corrupt [ 368.241040][T14298] SQUASHFS error: Failed to read block 0x91: -5 [ 368.266703][T14298] SQUASHFS error: Unable to read metadata cache entry [8f] [ 368.295937][T14298] SQUASHFS error: Unable to read inode 0x11f [ 368.444713][T14309] netlink: 1100 bytes leftover after parsing attributes in process `syz.2.3491'. [ 368.463232][T14311] netlink: 'syz.3.3490': attribute type 11 has an invalid length. [ 368.525228][ T5922] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 368.606773][T14316] netlink: 'syz.2.3492': attribute type 10 has an invalid length. [ 368.670550][T14316] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 368.719133][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 368.761007][ T5922] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 368.781196][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 368.803845][ T5922] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 368.831132][ T5922] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 368.855132][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.906652][ T5922] usb 2-1: config 0 descriptor?? [ 369.125704][T14339] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3499'. [ 369.164299][ T5922] hdpvr 2-1:0.0: firmware version 0xd dated Dõ)ŸR'ÚCåZÑšV+|ùQl•;îÊ’#Ö ùÇå[¬Ük41Ïz ÷š§½ [ 369.291688][T14348] loop2: detected capacity change from 0 to 16 [ 369.420036][ T5922] hdpvr 2-1:0.0: device init failed [ 369.457056][ T5922] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 369.497811][ T182] usb 5-1: USB disconnect, device number 68 [ 369.528474][ T5922] usb 2-1: USB disconnect, device number 63 [ 369.689653][T14364] binder: 14362:14364 ioctl c018620c 200000000000 returned -22 [ 370.210016][T14382] loop3: detected capacity change from 0 to 4096 [ 370.224924][T14382] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 370.463165][T14382] ntfs3(loop3): Failed to load $Extend (-22). [ 370.469719][T14382] ntfs3(loop3): Failed to initialize $Extend. [ 370.683011][T14406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3527'. [ 370.768784][T14404] loop4: detected capacity change from 0 to 4096 [ 371.027682][T14380] loop0: detected capacity change from 0 to 32768 [ 371.080019][T14416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3531'. [ 371.106220][T14416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3531'. [ 371.147207][T14380] ERROR: (device loop0): dbAllocAG: unable to allocate blocks [ 371.147207][T14380] [ 371.173592][ T30] audit: type=1326 audit(1760358098.932:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14418 comm="syz.1.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfb18eec9 code=0x7ffc0000 [ 371.257483][ T30] audit: type=1326 audit(1760358098.951:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14418 comm="syz.1.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfb18eec9 code=0x7ffc0000 [ 371.348263][ T30] audit: type=1326 audit(1760358098.951:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14418 comm="syz.1.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7efcfb18eec9 code=0x7ffc0000 [ 371.395073][T14424] loop1: detected capacity change from 0 to 1024 [ 371.447125][ T30] audit: type=1326 audit(1760358098.951:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14418 comm="syz.1.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfb18eec9 code=0x7ffc0000 [ 371.492302][T14427] netlink: 'syz.0.3534': attribute type 1 has an invalid length. [ 371.509581][ T30] audit: type=1326 audit(1760358098.951:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14418 comm="syz.1.3533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfb18eec9 code=0x7ffc0000 [ 371.549185][T14427] netlink: 'syz.0.3534': attribute type 2 has an invalid length. [ 372.608420][T14462] loop0: detected capacity change from 0 to 1024 [ 372.861113][T14444] loop2: detected capacity change from 0 to 32768 [ 372.967309][T14444] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 372.967309][T14444] [ 373.203472][T14476] loop4: detected capacity change from 0 to 8 [ 373.235781][T14476] SQUASHFS error: Failed to read block 0x63a: -5 [ 373.269389][T14476] SQUASHFS error: Unable to read metadata cache entry [638] [ 373.303861][T14476] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 373.682556][T14484] netlink: 23 bytes leftover after parsing attributes in process `syz.0.3566'. [ 374.018185][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 374.108861][T14502] binder: 14501:14502 ioctl c0306201 2000000001c0 returned -22 [ 374.214813][ T9] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 374.223273][ T9] usb 3-1: config 0 has no interface number 0 [ 374.240889][ T9] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 374.267708][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 374.279152][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.311930][ T9] usb 3-1: config 0 descriptor?? [ 374.365021][ T9] ttusbir 3-1:0.83: cannot find expected altsetting [ 375.011682][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3592'. [ 375.142062][T14530] loop4: detected capacity change from 0 to 8192 [ 375.186509][T14530] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 375.289202][ T5880] usb 3-1: USB disconnect, device number 70 [ 375.317329][T14542] loop0: detected capacity change from 0 to 4096 [ 375.362896][T14542] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 375.452186][T14542] ntfs3(loop0): Failed to load $Extend (-22). [ 375.481257][T14542] ntfs3(loop0): Failed to initialize $Extend. [ 375.612890][T14555] loop1: detected capacity change from 0 to 512 [ 375.639704][T14555] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3601: inode has both inline data and extents flags [ 375.640034][T14555] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3601: couldn't read orphan inode 15 (err -117) [ 375.645897][T14555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.671554][T14555] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.3601: Directory hole found for htree leaf block 0 [ 375.755119][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.497489][T14560] loop4: detected capacity change from 0 to 32768 [ 376.512025][T14581] bond1: option ad_actor_sys_prio: invalid value (0) [ 376.518738][T14581] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 376.551873][T14581] bond1 (unregistering): Released all slaves [ 376.567933][T14560] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 376.697450][T14560] XFS (loop4): Ending clean mount [ 376.817702][T14560] XFS (loop4): Quotacheck needed: Please wait. [ 376.875849][T14560] XFS (loop4): Quotacheck: Done. [ 376.997645][ T30] audit: type=1326 audit(1760358104.304:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14604 comm="syz.3.3620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dfdf8eec9 code=0x0 [ 377.057229][T14577] loop1: detected capacity change from 0 to 32768 [ 377.067257][ T5830] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 377.126049][T14577] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong [ 377.126049][T14577] [ 377.189657][T14577] ERROR: (device loop1): remounting filesystem as read-only [ 377.216092][T14577] ialloc: diAlloc returned -5! [ 378.061196][T14635] loop4: detected capacity change from 0 to 8 [ 378.092915][T14635] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 378.137836][T14635] cramfs: Error -3 while decompressing! [ 378.143637][T14635] cramfs: ffffffff99b03f28(1306)->ffff88806a68b000(4096) [ 378.144249][T14639] loop1: detected capacity change from 0 to 2048 [ 378.154853][ T5827] udevd[5827]: incorrect cramfs checksum on /dev/loop4 [ 378.168439][T14635] cramfs: bad data blocksize 3221485966 [ 378.174536][T14635] cramfs: Error -3 while decompressing! [ 378.191270][ T5827] udevd[5827]: incorrect cramfs checksum on /dev/loop4 [ 378.226794][T14635] cramfs: ffffffff99b03f28(1306)->ffff88806a68b000(4096) [ 378.235645][ T30] audit: type=1800 audit(1760358105.458:44): pid=14635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3634" name="file3" dev="loop4" ino=348 res=0 errno=0 [ 378.282233][T14639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.349229][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.368316][ T9] hid-generic 000B:0002:0009.0001: item fetching failed at offset 0/1 [ 378.375736][T14619] loop3: detected capacity change from 0 to 32768 [ 378.377885][ T9] hid-generic 000B:0002:0009.0001: probe with driver hid-generic failed with error -22 [ 378.451322][T14619] read_mapping_page failed! [ 378.455919][T14619] jfs_mount: diMount failed w/rc = -5 [ 378.484283][T14619] Mount JFS Failure: -5 [ 378.488487][T14619] jfs_mount failed w/return code = -5 [ 378.556370][T14652] QAT: failed to copy from user. [ 378.695049][T14656] vivid-000: disconnect [ 378.719742][T14654] vivid-000: reconnect [ 378.998355][T14638] loop0: detected capacity change from 0 to 32768 [ 379.019473][T14638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3635 (14638) [ 379.099462][T14638] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 379.124979][T14638] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 379.344404][T14638] BTRFS info (device loop0): enabling ssd optimizations [ 379.393756][T14638] BTRFS info (device loop0): enabling free space tree [ 379.580646][T14638] BTRFS info (device loop0): balance: start -susage=1..2,limit=38654705664,limit=0..9 [ 379.630614][T14638] BTRFS info (device loop0): balance: ended with status: 0 [ 379.650322][T14704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.797352][T14714] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[14714] [ 379.837309][ T5842] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 380.717057][T14747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3680'. [ 380.732082][T14747] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3680'. [ 380.913690][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3684'. [ 381.072044][ T9] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 381.075536][T14733] loop1: detected capacity change from 0 to 32768 [ 381.113345][T14733] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3674 (14733) [ 381.161602][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3691'. [ 381.183153][T14733] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 381.190597][T14770] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3691'. [ 381.215457][T14733] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 381.218699][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3691'. [ 381.260448][ T9] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 381.294804][ T9] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 381.325402][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 381.343135][T14733] BTRFS info (device loop1): enabling ssd optimizations [ 381.347375][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 381.373074][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 381.373495][T14733] BTRFS info (device loop1): enabling free space tree [ 381.405013][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 381.442402][ T9] usb 3-1: string descriptor 0 read error: -22 [ 381.448814][ T9] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 381.487681][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.531288][ T9] usb 3-1: config 0 descriptor?? [ 381.544901][T14753] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 381.652455][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 381.670073][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 381.682585][ T5826] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 381.703818][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input40 [ 381.978123][ T9] usb 3-1: USB disconnect, device number 71 [ 381.984135][ C0] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -19 [ 382.459262][T14831] netlink: 'syz.4.3712': attribute type 4 has an invalid length. [ 382.591220][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3714'. [ 382.611139][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3714'. [ 382.653387][T14835] netlink: 'syz.1.3714': attribute type 6 has an invalid length. [ 383.164076][T14864] loop1: detected capacity change from 0 to 8 [ 383.178675][T14836] loop0: detected capacity change from 0 to 32768 [ 383.188990][T14864] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 383.212886][ T5827] udevd[5827]: incorrect cramfs checksum on /dev/loop1 [ 383.224074][T14864] cramfs: Error -3 while decompressing! [ 383.239245][T14836] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3713 (14836) [ 383.252378][T14864] cramfs: ffffffff99b03f28(26)->ffff88807e863000(4096) [ 383.259306][T14864] cramfs: Error -3 while decompressing! [ 383.308467][T14864] cramfs: ffffffff99b03f42(26)->ffff888054a15000(4096) [ 383.316775][ T5827] udevd[5827]: incorrect cramfs checksum on /dev/loop1 [ 383.331852][T14836] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 383.348313][T14864] cramfs: Error -3 while decompressing! [ 383.379013][T14864] cramfs: ffffffff99b03f5c(16)->ffff88807e867000(4096) [ 383.387272][T14836] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 383.410990][T14864] cramfs: Error -3 while decompressing! [ 383.419037][T14864] cramfs: ffffffff99b03f28(26)->ffff88807e863000(4096) [ 383.427233][ T30] audit: type=1800 audit(1760358110.248:45): pid=14864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3728" name="file3" dev="loop1" ino=348 res=0 errno=0 [ 383.492605][T14877] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 383.639857][T14836] BTRFS info (device loop0): turning off barriers [ 383.646339][T14836] BTRFS info (device loop0): turning on flush-on-commit [ 383.708013][T14836] BTRFS info (device loop0): enabling free space tree [ 383.882443][ T5842] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 383.905913][T14911] loop3: detected capacity change from 0 to 128 [ 383.920660][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 384.082892][T14915] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3746'. [ 384.099472][T14915] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3746'. [ 384.115667][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 384.154194][ T9] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 384.192293][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.221046][ T9] usb 5-1: Product: syz [ 384.242116][ T9] usb 5-1: Manufacturer: syz [ 384.247185][ T9] usb 5-1: SerialNumber: syz [ 384.290082][ T9] usb 5-1: config 0 descriptor?? [ 384.358848][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 384.540618][T14927] netlink: 'syz.1.3751': attribute type 10 has an invalid length. [ 384.603784][T14927] bridge0: port 3(netdevsim0) entered blocking state [ 384.610828][T14927] bridge0: port 3(netdevsim0) entered disabled state [ 384.647426][T14927] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 384.688633][T14927] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 384.754221][ T9] gspca_ov534_9: reg_w failed -71 [ 385.097743][ T182] IPVS: starting estimator thread 0... [ 385.129785][ T30] audit: type=1326 audit(1760358111.808:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14949 comm="syz.0.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2c58eec9 code=0x7ffc0000 [ 385.217824][ T30] audit: type=1326 audit(1760358111.808:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14949 comm="syz.0.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2c58eec9 code=0x7ffc0000 [ 385.242483][T14956] IPVS: using max 38 ests per chain, 91200 per kthread [ 385.253239][ T9] gspca_ov534_9: Unknown sensor 0000 [ 385.253324][ T9] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 385.290081][ T9] usb 5-1: USB disconnect, device number 69 [ 385.318031][ T30] audit: type=1326 audit(1760358111.817:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14949 comm="syz.0.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f3b2c58eec9 code=0x7ffc0000 [ 385.371961][ T30] audit: type=1326 audit(1760358111.817:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14949 comm="syz.0.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2c58eec9 code=0x7ffc0000 [ 385.518682][ T30] audit: type=1326 audit(1760358112.177:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.1.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfb18eec9 code=0x7ffc0000 [ 385.555388][ T30] audit: type=1326 audit(1760358112.177:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.1.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfb18eec9 code=0x7ffc0000 [ 385.642124][ T30] audit: type=1326 audit(1760358112.205:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.1.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7efcfb18eec9 code=0x7ffc0000 [ 385.682094][ T30] audit: type=1326 audit(1760358112.205:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.1.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfb18eec9 code=0x7ffc0000 [ 385.708784][ T30] audit: type=1326 audit(1760358112.205:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.1.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfb18eec9 code=0x7ffc0000 [ 385.767543][T14982] loop4: detected capacity change from 0 to 1024 [ 385.826630][T14982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.061030][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.402120][T15012] xt_TCPMSS: Only works on TCP SYN packets [ 386.951916][T15044] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.963265][T15044] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.970578][T15044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.084008][T15049] loop4: detected capacity change from 0 to 128 [ 387.723839][T15036] loop2: detected capacity change from 0 to 32768 [ 387.769744][T15036] gfs2: fsid=commit: Trying to join cluster "lock_nolock", "commit" [ 387.842804][T15036] gfs2: fsid=commit: Now mounting FS (format 1802)... [ 387.942614][T15036] gfs2: fsid=commit.0: fatal: invalid metadata block - bh = 2074 (type: exp=4, found=6), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 387.961860][T15036] CPU: 1 UID: 0 PID: 15036 Comm: syz.2.3802 Not tainted syzkaller #0 PREEMPT(full) [ 387.961887][T15036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.961903][T15036] Call Trace: [ 387.961911][T15036] [ 387.961921][T15036] dump_stack_lvl+0x189/0x250 [ 387.961950][T15036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.961968][T15036] ? gfs2_meta_read+0x775/0x8b0 [ 387.961998][T15036] ? __pfx_gfs2_meta_read+0x10/0x10 [ 387.962029][T15036] gfs2_withdraw+0xc8/0x160 [ 387.962051][T15036] gfs2_meta_buffer+0x250/0x2e0 [ 387.962082][T15036] inode_go_instantiate+0xdf/0x1260 [ 387.962099][T15036] ? __pfx_bit_wait+0x10/0x10 [ 387.962132][T15036] ? __pfx_bit_wait+0x10/0x10 [ 387.962152][T15036] ? out_of_line_wait_on_bit+0x123/0x170 [ 387.962176][T15036] ? __pfx_inode_go_instantiate+0x10/0x10 [ 387.962198][T15036] ? __pfx_wake_bit_function+0x10/0x10 [ 387.962227][T15036] gfs2_instantiate+0x168/0x220 [ 387.962247][T15036] gfs2_glock_wait+0x1d4/0x2a0 [ 387.962269][T15036] init_journal+0x2a2/0x2180 [ 387.962291][T15036] ? __pfx_number+0x10/0x10 [ 387.962319][T15036] ? init_inodes+0xdb/0x320 [ 387.962336][T15036] ? format_decode+0x5a3/0xe30 [ 387.962364][T15036] ? __pfx_init_journal+0x10/0x10 [ 387.962381][T15036] ? vsnprintf+0xe11/0xf00 [ 387.962414][T15036] ? snprintf+0xda/0x120 [ 387.962434][T15036] ? init_inodes+0xdb/0x320 [ 387.962452][T15036] ? __pfx_snprintf+0x10/0x10 [ 387.962471][T15036] ? gfs2_glock_nq_num+0x13d/0x170 [ 387.962494][T15036] init_inodes+0xdb/0x320 [ 387.962516][T15036] gfs2_fill_super+0x1a67/0x2230 [ 387.962551][T15036] ? __pfx_gfs2_fill_super+0x10/0x10 [ 387.962574][T15036] ? init_locking+0xb8/0x210 [ 387.962591][T15036] ? sb_set_blocksize+0x104/0x180 [ 387.962612][T15036] ? setup_bdev_super+0x4c1/0x5b0 [ 387.962636][T15036] get_tree_bdev_flags+0x40e/0x4d0 [ 387.962657][T15036] ? __pfx_gfs2_fill_super+0x10/0x10 [ 387.962676][T15036] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 387.962693][T15036] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 387.962728][T15036] gfs2_get_tree+0x51/0x1e0 [ 387.962751][T15036] vfs_get_tree+0x92/0x2b0 [ 387.962775][T15036] do_new_mount+0x302/0xa10 [ 387.962793][T15036] ? apparmor_capable+0x137/0x1b0 [ 387.962823][T15036] ? __pfx_do_new_mount+0x10/0x10 [ 387.962845][T15036] ? ns_capable+0x8a/0xf0 [ 387.962872][T15036] ? kmem_cache_free+0x19b/0x690 [ 387.962904][T15036] __se_sys_mount+0x313/0x410 [ 387.962931][T15036] ? __pfx___se_sys_mount+0x10/0x10 [ 387.962956][T15036] ? do_syscall_64+0xbe/0xfa0 [ 387.962975][T15036] ? __x64_sys_mount+0x20/0xc0 [ 387.962997][T15036] do_syscall_64+0xfa/0xfa0 [ 387.963017][T15036] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.963038][T15036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.963056][T15036] ? clear_bhb_loop+0x60/0xb0 [ 387.963079][T15036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.963104][T15036] RIP: 0033:0x7ffa78b9066a [ 387.963130][T15036] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.963146][T15036] RSP: 002b:00007ffa79a68e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 387.963165][T15036] RAX: ffffffffffffffda RBX: 00007ffa79a68ef0 RCX: 00007ffa78b9066a [ 387.963180][T15036] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007ffa79a68eb0 [ 387.963194][T15036] RBP: 0000200000000400 R08: 00007ffa79a68ef0 R09: 0000000000004000 [ 387.963206][T15036] R10: 0000000000004000 R11: 0000000000000246 R12: 0000200000012500 [ 387.963219][T15036] R13: 00007ffa79a68eb0 R14: 00000000000125ec R15: 0000200000000280 [ 387.963251][T15036] [ 387.963362][T15036] gfs2: fsid=commit.0: about to withdraw this file system [ 387.984195][T15073] bond3: option tlb_dynamic_lb: invalid value (8) [ 387.986502][T15060] loop0: detected capacity change from 0 to 32768 [ 388.020606][ T182] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000011: 0000 [#1] SMP KASAN PTI [ 388.342183][ T182] KASAN: null-ptr-deref in range [0x0000000000000088-0x000000000000008f] [ 388.350590][ T182] CPU: 0 UID: 0 PID: 182 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 388.359857][ T182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 388.369900][ T182] Workqueue: events gfs2_withdraw_func [ 388.375375][ T182] RIP: 0010:gfs2_log_is_empty+0x73/0xd0 [ 388.380907][ T182] Code: f0 09 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd f9 28 fe 41 be 8c 00 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 34 41 8b 1e 89 ef 89 de e8 c8 51 c3 fd 39 [ 388.400508][ T182] RSP: 0018:ffffc90002f678d8 EFLAGS: 00010207 [ 388.406568][ T182] RAX: 0000000000000011 RBX: ffff888021f389f0 RCX: ffffffff83fcf3b0 [ 388.414545][ T182] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888021f38d70 [ 388.422499][ T182] RBP: 0000000000000000 R08: ffff888021f38d73 R09: 1ffff110043e71ae [ 388.430455][ T182] R10: dffffc0000000000 R11: ffffed10043e71af R12: 1ffff920005ecf24 [ 388.438408][ T182] R13: 1ffff110043e7000 R14: 000000000000008c R15: dffffc0000000000 [ 388.446366][ T182] FS: 0000000000000000(0000) GS:ffff888125d08000(0000) knlGS:0000000000000000 [ 388.455276][ T182] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.461850][ T182] CR2: 00007efd3e9156c0 CR3: 000000004e4dc000 CR4: 00000000003526f0 [ 388.469819][ T182] Call Trace: [ 388.473099][ T182] [ 388.476030][ T182] do_withdraw+0x15f/0x320 [ 388.480437][ T182] ? __pfx_do_withdraw+0x10/0x10 [ 388.485361][ T182] ? process_scheduled_works+0x9ef/0x17b0 [ 388.491073][ T182] gfs2_withdraw_func+0x2f3/0x430 [ 388.496082][ T182] ? process_scheduled_works+0x9ef/0x17b0 [ 388.501790][ T182] process_scheduled_works+0xae1/0x17b0 [ 388.507344][ T182] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.513409][ T182] worker_thread+0x8a0/0xda0 [ 388.517992][ T182] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 388.524311][ T182] ? __kthread_parkme+0x7b/0x200 [ 388.529247][ T182] kthread+0x711/0x8a0 [ 388.533303][ T182] ? __pfx_worker_thread+0x10/0x10 [ 388.538403][ T182] ? __pfx_kthread+0x10/0x10 [ 388.542977][ T182] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.548159][ T182] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.553342][ T182] ? __pfx_kthread+0x10/0x10 [ 388.557911][ T182] ret_from_fork+0x4bc/0x870 [ 388.562489][ T182] ? __pfx_ret_from_fork+0x10/0x10 [ 388.567584][ T182] ? __switch_to_asm+0x39/0x70 [ 388.572427][ T182] ? __switch_to_asm+0x33/0x70 [ 388.577262][ T182] ? __pfx_kthread+0x10/0x10 [ 388.581831][ T182] ret_from_fork_asm+0x1a/0x30 [ 388.586586][ T182] [ 388.589599][ T182] Modules linked in: [ 388.593569][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.601139][ T182] ---[ end trace 0000000000000000 ]--- [ 388.611002][T15073] bond3 (unregistering): Released all slaves [ 388.632250][T15036] gfs2: fsid=commit.0: can't read journal index: -5 [ 388.675572][ T182] RIP: 0010:gfs2_log_is_empty+0x73/0xd0 [ 388.681312][ T182] Code: f0 09 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd f9 28 fe 41 be 8c 00 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 34 41 8b 1e 89 ef 89 de e8 c8 51 c3 fd 39 [ 388.699139][T15060] [ 388.699139][T15060] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.699139][T15060] [ 388.701354][ T182] RSP: 0018:ffffc90002f678d8 EFLAGS: 00010207 [ 388.717606][ T182] RAX: 0000000000000011 RBX: ffff888021f389f0 RCX: ffffffff83fcf3b0 [ 388.726712][ T182] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888021f38d70 [ 388.735115][ T182] RBP: 0000000000000000 R08: ffff888021f38d73 R09: 1ffff110043e71ae [ 388.743529][ T182] R10: dffffc0000000000 R11: ffffed10043e71af R12: 1ffff920005ecf24 [ 388.751711][ T182] R13: 1ffff110043e7000 R14: 000000000000008c R15: dffffc0000000000 [ 388.762059][ T182] FS: 0000000000000000(0000) GS:ffff888125d08000(0000) knlGS:0000000000000000 [ 388.771976][ T182] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.778798][ T182] CR2: 00007efd3ddb4198 CR3: 0000000028520000 CR4: 00000000003526f0 [ 388.783125][T15060] [ 388.783125][T15060] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.783125][T15060] [ 388.796399][ T182] Kernel panic - not syncing: Fatal exception [ 388.797467][ T182] Kernel Offset: disabled