last executing test programs: 32.196241734s ago: executing program 4 (id=838): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) setuid(0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 32.052783099s ago: executing program 4 (id=841): r0 = socket$tipc(0x1e, 0x5, 0x0) unshare(0x20040400) shutdown(r0, 0x1) 31.953730967s ago: executing program 4 (id=843): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000001e40)=ANY=[], 0x1, 0x60c4, &(0x7f0000001f80)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 31.250698484s ago: executing program 4 (id=854): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000012f80)='./file1\x00', 0x80, &(0x7f0000012ec0)={[{@nls={'nls', 0x3d, 'macgreek'}}, {@nobarrier}, {@type={'type', 0x3d, "3d21b0c7"}}, {@uid}, {@barrier}, {@uid}, {@creator={'creator', 0x3d, "f1e65f73"}}, {@nobarrier}, {@force}, {@gid}, {@gid}]}, 0x1, 0x6ff, &(0x7f0000000500)="$eJzs3U1sHGf5APBn1uu1N5XcbZu0/f+FFKsRETSQ2F5KgoREqBDyoUKRuPS6JE5jee1GtoucCBEXKBzhhHLooQiZQ0+oB6QiDohyRkLiinKPxD3iwKKZnVnvh73ebfyRhN9Pmp13Zt6PZ57OvN6dbbQB/M9afDsmtyOJxQtvbaXbD3bqzQc79dWiHBFTEVGKKLdXkaxFJJ9FXI32Ev+X7sy7S/Yb542Hn354/v7H9fZWOV+y+qVh7Xa1hoywnS8xGxET+XpM5f36ux5vDvR3b6yuk07cacLOFYmDk9YasD1O8xHuW+BJdy9iYnKP/bWIUxExnb8PiHx2KB1zeIdurFkOAAAAnkwTB1V4/lE8iq2YOZ5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NmQtH8zMMmXUlGejaT4/f9Kvi9VqZxwvMN95YDjH9w8pkAAAAAAAAAA4Eh8kn9xf/ZRPIqtmCn2t5LsO//Xso3T2etz8V5sxFKsx8XYikZsxmasx3zE5ExXh5Wtxubm+vxgy19H2rLVat3LWy5ERG2g5cI+gZYO+cQBAAAAAAAA4Nn0k1iMmZMOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuiURE+1VtpwuyrUolSNiOiIqab3tiD8V5afZn086AAAAADh61Xw9k/ynXWgl2Wf+l7PP/dPxXqzFZizHZjRjKW5kzwLan/pLf9+uNx/s1FfTZbDjb/9rrDiyHiNiIt7fZ+S5rMaZTovF+G58Py7EbFyL9ViOH0YjNmMpZqOankQ0Iolatf30olbEuXe8V3u2rvXHdrZv+9UskmrcjOUstotxvRLtxybZOaRjvto12h8qEX0jvp9mJ/lWbsQc3ej67/Wr/LlMrvX8iH0cjVp25pOdjMyluc+z8cLw3I95nfSPNB+lzjOo07ujpJv9IxU5/8E4OT/VXk2nLz/vzflhG/NRWn8mFqKUX30RL/fm/PYX77/Y2/jL//jLtVultZVbNzcuHOEpPY7ZgypMFoX+TNS7MvHK8Ksvz0QzzcT26JmY7N8xPWrLo1XJs5FNRSPOlt/JSo14resSfDduxFJcjrmYjysxF9+Ihah3rrB0OdOT13J9tTcn2b1WGpzfqkOCP/elrkq/OKDy8Urz8kJXXrtnulp2LN9z9Zcx13X1vTj86hv7r0A6/v/n5XSMn3b+4jwJejKRz81FdC8Nz8RvWunrRnNtZf1W4/aI453P1+lt+0Hv3Pzb0aPu/+t+GNLrJZ1xy9lWlpNqcb2kx17qRNubr0r+jUu7XWng2JnOsVrMxHJ8b987tZK/hxvsqX3sle5j/9ydOSv5+5viWM+7nHg3mtm7kD4HTtUAHLNTr5+qVB9W/1b9qPqz6q3qW9NvTl2Z+kIlJv9a/uPE70u/K30zeT0+ih/HzElHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4KNO3dXGs3m0nqnENP9ex63UNl3rOGFKB1YZ+e50TqMWsTwsZK8UDncc38aC9Xo21P8wtLj9vxJRAypU3ns4JOxr7GxC2keDqXDVqud1GxPa2KM5uWi1d51yrExHSuNpLzHHTe1exdEbaXR/Herp3k1um4Z4Bl3aXP19qWNO3e/urzaeGfpnaW1hSuXr1yuf33+a5duLjeX5tqvJx0lcBQ27tyd2GP3wC/dAgAAAAAAAAAAAE+O/P/+3/zc/5ihfECdyvrG3iOfPe5TBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5Si2/H5HYkMT93cS7dfrBTb6ZLUd6tWY6IUkQkP4pIPou4Gu0lal3dJfuN88bDTz88f//j+m5f5aJ+aVi70WznS8xGxES+PtjUHt0M9ne9q7/tzxVe0jnDNGHnisTBSftvAAAA//9u//cB") syz_mount_image$exfat(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$cgroup2(0x0, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000001c0), 0x4000, 0x0) 30.072253803s ago: executing program 4 (id=872): r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b80)) 29.556424661s ago: executing program 4 (id=878): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESTART(r0, 0x40101287, 0x0) 29.218504444s ago: executing program 32 (id=878): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESTART(r0, 0x40101287, 0x0) 5.437632074s ago: executing program 3 (id=1088): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.410312274s ago: executing program 2 (id=1091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 4.996383374s ago: executing program 2 (id=1093): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000240)={0x1, 0x4, 0x4, 0x0, 0x2}) 4.793512009s ago: executing program 2 (id=1096): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), 0x4) 4.523857684s ago: executing program 2 (id=1098): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x143442, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) 4.108167652s ago: executing program 3 (id=1102): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x18) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) 3.861191252s ago: executing program 3 (id=1106): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006) 3.660128991s ago: executing program 1 (id=1109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6638a, 0x1001}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) 3.065840547s ago: executing program 2 (id=1112): syz_mount_image$gfs2(&(0x7f0000000400), &(0x7f0000012500)='./file0\x00', 0x200001, &(0x7f0000000180)={[{@norecovery}, {@suiddir}, {@noloccookie}, {}, {@quota_off}, {@data_writeback}, {@quota}, {@upgrade}, {@loccookie}, {@nodebug}, {@lockproto_nolock}, {@errors_withdraw}, {}, {@norecovery}]}, 0x1, 0x125bb, &(0x7f0000037080)="$eJzs/XkUqHO9P3zva97KPCRCKSQlIqEkYyWRIRlSCYWoCGUoQ0rSQCpjKpQpSZIyhDILkSmVsaQQkUSFZ53nvPd9rue+r1/X/Tv3Os+61vO8Xn+cz7V2fPPHWev9fu+tvWcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAjBkziucttOt/nN4Pbf+fp5ttxoxul//8nvs//s/svb+m/M8zc6H/xbP5a2dbcpcPb7fzez704f84/61/vt333ue1u++9z3/r7/2/42WPbrzaTxd62/OOesMZZy169U/W+R/7LwIAAAAAAACA/0H59f+y90NX/Z/+km7GjJlz/p9+bL4ZM2bOPmNGWV1z3fd+/v/kv3/zzfj/a3979v/J//sAAADwf1P2f937kcP7/3HufDNmHHjA/+XH/48fmdn+x//d7uOPPj50e56fv/75//VD5f/l43/Q/LkL5D4vd8H/z38+AAAA+P8t2f9N70f6m33W/75/4dwX5C6Su2juYrkvzH1R7uK5L859Se4S/3n+j8m/VO5Lc5fOfVnuMrkvz31F7rK5r8xdLnf53FflrpC7Yu6rc1fKfU3uyrmr5K6a+9rc1+Wulvv63NVz35C7Ru6auWvlrp076/cZWDf3jblvyn1z7nq5b8ldP/etuRvkbpj7ttyNcjfO3SR309y3526W+47czXO3yN0yd6vcd+Zunfuu3Hfnvid3m9z35m6bu11ufo+JGe/LfX/uDrk75u6U+4HcWb+JRH5fihkfzP1Q7odzd83dLfcjubvn7pG7Z+5Hcz+Wu1fu3rmzfgOKfXM/nvuJ3P1y98+d9TNjB+Z+Mveg3E/lfjr34NzP5B6S+9ncQ3M/l/v53C/kfjH3sNxZP4f3pdwjcr+c+5Xcr+YemXtU7tG5x+Qem3tc7tdyj8/9eu43cr+Ze0Luibkn5X4r99u5J+eekntq7mm5p+d+J/eM3O/mnpn7vdyzcr+fe3buD3LPyf1h7rm5P8r9ce55uefnXpB7Ye5Pci/KvTj3ktyf5v4s99Lcy3Ivz70i98rcWf8O1tW51+TO+netrs29Lvf63F/k3pB7Y+4vc2/KvTn3ltxbc2/L/VXu7bm/zv1N7m9z78i9M/eu3Ltz78m9N/d3ub/PvS/3D7n35/4x90+5D+Q+mPtQ7p9zH859JPcvuY/mPpb719xZGfe33Cdy/577ZO5Tuf/I/Wfuv3Kfzn0mN/8y06yfNi/yUSToiio3P99eJHeLNrfLnZk7W+5zcp+bm99fp5gjN/9+XjFX7ty58+TOmztfbn4evMjPgxf5efAiPw9e5OfBi+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9YMjf5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/Z/0aXpH8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfJ/1sYtkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/s/atWXyv8wPlMn/MvlfJv/L5H+Z/C+T/2Xyv0z+l8n/MvlfJv/L5H+Z/C+T/2Xyv0z+l8n/MvlfLvDv93+ZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5Szfl4gvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8pkX5leUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBYn/GVV6QZVeUOU/qNILquRxlV5QpRdU6QVVekGVXlClF1TpBVV6QZVeUKUXVOkFVXpBlV5QpRdU6QVVfl6gSv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf9Z/5p9nfyvk/918r/OX1An/+vkf538r5P/dfK/Tv7Xyf86+V8n/+vkf538r5P/dfK/nvff7/86vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTibW6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV4wK36b9IImvaBJL2jSC5r8hU16QZNe0KQXNOkFTXpBk17QpBc06QVNekGTXtCkFzTpBU1+XqBJ/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/4nxGm/xvk/9t8r9N/rfJ/zZ/Q5v8b5P/bfK/Tf63yf82+d8m/9vkfzvXv9//bXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbbKyTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaP+zF7RtekHifUaXXtClF3TpBV16QZf87tILuvyNXXpBl17QpRd06QVdekGXXtClF3T5eYEu+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f872b9WdXJ/y753yX/u+R/l/zvkv9d8n/Wn2/dJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+7/LxAl/xPfM+YmfyfOevP3U/+z0z+z0z+z0z+z0z+z8wDM5P/M5P/M5P/M2f/9/t/ZnrBrN//f2Z6wcz0gpnpBTPTC2amF8xML5iZXjAzvWBmesFMv88eAAAA/H9R9v/M//qRWf8bvRn/71/fO+C/fjOjGafcMfd9S6y+0woDz8z6fQLn+5/8ZwUAAAD+e0b2/1d7+79Y9AWPPW+dw1+/5MAzs/58APsfAAAAJmhk/x/Z2//lbIvftNbRG//2MwPPzPpzAe1/AAAAmKCR/X9Ub/9XP7j/Vd//9LVffe7AM/l9fOx/AAAAmKKR/X90b//XV6575x5bzrHHaQPP5Pfvtf8BAABgikb2/zG9/d984qDVPrPqSS+6aOCZ/Lk99j8AAABM0cj+P7a3/9udzlv0pvu2/ekiA8/kz+u1/wEAAGCKRvb/cb393920/7Mvmn+By/4y8Mysv8f+BwAAgAka2f9f6+3/mbv9ZP7zr7p5yU0Gnlk81/4HAACACRrZ/8f39v9sP9/3ifVO3We3dQeeeXGu/Q8AAAATNLL/v97b/8+5a83bFt3jgsPvH3jmJbn2PwAAAEzQyP7/Rm//P/d9n1np4Z2Wun3ngWeWyLX/AQAAYIJG9v83e/t/9qVv2+2MH96/ytUDzyyZa/8DAADABI3s/xN6+3+OI+b58ntuWW+XOweeWSrX/gcAAIAJGtn/J/b2/5wHv/zs5852yBc+PvDMS3PtfwAAAJigkf1/Um//z7Xanzd68uHdn71i4Jmlc+1/AAAAmKCR/f+t3v6f+5lfvOLuFc5ebPuBZ16Wa/8DAADABI3s/2/39v8868x2/XybLPKW3QeeWSbX/gcAAIAJGtn/J/f2/7wbrfjIm754x3duHHjm5bn2PwAAAEzQyP4/pbf/53vgb3Oc8+U17n3XwDOvmPXX/I/+wwIAAAD/LSP7/9Te/p//65vfu9vbDqyeHXhm2Vz7HwAAACZoZP+f1tv/CyzxpRmfXG65zf848Mwrc+1/AAAAmKCR/X96b/8/b/nvLH7rXx8+9y0DzyyXa/8DAADABI3s/+/09v+Ch37w0iXvW+myDw48s3yu/Q8AAAATNLL/z+jt/+cv/b2lL1718SV/MfDMq3LtfwAAAJigkf3/3d7+X+iIna5565Zb7fargWdWyLX/AQAAYIJG9v+Zvf2/8MGbPvj8Tx93+D4Dz6yYa/8DAADABI3s/+/19v8LVvvqbA8e3d7+xMAzr861/wEAAGCCRvb/Wb39v8h73r//putcucrbB55ZKdf+BwAAgAka2f/f7+3/Re/75vHfXGKnXdYeeOY1ufY/AAAATNDI/j+7t/8Xe/TYCx9/8tQv3DPwzMq59j8AAABM0Mj+/0Fv/79w/a3f3b1w02ffOfDMKrn2PwAAAEzQyP4/p7f/X/Tmi+d4waVHLPbUwDOr5tr/AAAAMEEj+/+Hvf2/+GN7P/LHk1Z7y8MDz7w21/4HAACACRrZ/+f29v+L/7D29Rfu//R33jrwzOty7X8AAACYoJH9/6Pe/n/J1p9+xdu23ebeSwaeWS3X/gcAAIAJGtn/P+7t/yWWfumlh150QrXtwDOvz7X/AQAAYIJG9v95vf2/5BH3LL73nXNtvufAM6vn2v8AAAAwQSP7//ze/l/q4N/MWLa8/tzbBp55Q679DwAAABM0sv8v6O3/l6626L13rjrHMlsPPLNGrv0PAAAAEzSy/y/s7f+lv37XbOvcd+3Pnxl4Zs1c+x8AAAAmaGT//6S3/1+2xEIP/ujT237jTwPPrJVr/wMAAMAEjez/i3r7f5nlX3LN77Y8ab/1B55ZO9f+BwAAgAka2f8X9/b/yw+9b+m511l95SsHnlkn1/4HAACACRrZ/5f09v8rjv3rbCcf/eyt7xt4Zt1c+x8AAAAmaGT//7S3/5d90UoPbvbkxp/8yMAzb8y1/wEAAGCCRvb/z3r7/5WvnuuaYonDt7th4Jk35dr/AAAAMEEj+//S3v5f7otXL/3YpTvP84GBZ96ca/8DAADABI3s/8t6+3/5tz749gdeePpfrhp4Zr1c+x8AAAAmaGT/X97b/696YtlzF9q//tZdA8+8Jdf+BwAAgAka2f9X9Pb/CvcueNQGJ12+7icGnlk/1/4HAACACRrZ/1f29v+KW9y450UXbTH7owPPvDXX/gcAAIAJGtn/V/X2/6tfsfux+257zJ83HXhmg1z7HwAAACZoZP9f3dv/Kx35w70OKVc+b52BZzbMtf8BAABggkb2/zW9/f+aTx625W/vfGKLPww887Zc+x8AAAAmaGT//7y3/1deZb0Llrtq2WV+OvDMRrn2PwAAAEzQyP6/trf/Vzn2cxv9cP6Hfr7dwDMb59r/AAAAMEEj+/+63v5f9UUbnP3GPdb6xh4Dz2ySa/8DAADABI3s/+t7+/+1r/7Yl+c99aD9bh14ZtafCWD/AwAAwASN7P9f9Pb/6774/d3u+eFiK2818Mzbc+1/AAAAmKCR/X/DrP1f50d2uuvWJwee2SzX/gcAAIAJGtn/N/Z+/f/1m3/qvtNn2+2Tjww8845c+x8AAAAmaGT//7K3/1df+6LLnrnlrO02GHhm81z7HwAAACZoZP/f1Nv/b3hqr6XmWGH9ef4+8MwWufY/AAAATNDI/r+5t//XOHHHZbd4+NC/bDbwzJa59j8AAABM0Mj+v6W3/9d8/pm/+M4Xl/jWWgPPzPozAex/AAAAmKCR/X9rb/+vNftXHn52k/vWvXvgmXfm2v8AAAAwQSP7/7be/l/73E1mn/1te82+y8AzW+fa/wAAADBBI/v/V739v87P/vK7q7983p+vH3jmXbn2PwAAAEzQyP6/vbf/193rNcVr/7rgebcPPPPuXPsfAAAAJmhk//+6t//fuMvsL/rQcrduse/AM+/Jtf8BAABggkb2/296+/9Nt17zs+PvPOFdRw08s02u/Q8AAAATNLL/f9vb/2/eY+bLunKbC1caeOa9ufY/AAAATNDI/r+jt//Xu/76nz++7fV/fPHAM9vm2v8AAAAwQSP7/87e/n/Lrx9/4JsXzTXbAQPPbJdr/wMAAMAEjez/u3r7f/1tVpi56UlHrDH7wDPb59r/AAAAMEEj+//u3v5/67LbvnWe/Tc94cyBZ96Xa/8DAADABI3s/3t6+3+Do7515r0vfPpv5w088/5c+x8AAAAmaGT/39vb/xse9PXDzr10tflfMPDMDrn2PwAAAEzQyP7/XW//v23VLT647hJXvv+EgWd2zLX/AQAAYIJG9v/ve/t/o3/uM8+7nmw/Uw08s1Ou/Q8AAAATNLL/7+vt/43XvPCvZx596k3zDzzzgVz7HwAAACZoZP//obf/N9ns4F/+Y52dVjh34Jmdc+1/AAAAmKCR/X9/b/9v+sgay8+25eP7vnbgmV1y7X8AAACYoJH9/8fe/n/7cffede2nVzr26IFnPphr/wMAAMAEjez/P/X2/2aLL/H6N9x33PWHDTzzoVz7HwAAACZoZP8/0Nv/71hpsUV2XnWr5ZYdeObDufY/AAAATNDI/n+wt/83P+xXzxy93IHves7AM7vm2v8AAAAwQSP7/6He/t9i2YUXKP+6xoWnDjyzW679DwAAABM0sv//3Nv/Wx71278/+uWH/3jxwDMfybX/AQAAYIJG9v/Dvf2/1UF/uPXbb1tutkUHntk91/4HAACACRrZ/4/09v87V33Rq9+xydlrfGngmT1y7X8AAACYoJH9/5fe/t96q5vWeviLu5+w4sAze+ba/wAAADBBI/v/0d7+f9fdC3xz0Yfv+NsSA898NNf+BwAAgAka2f+P9fb/ux9f7sD1Vlhk/oMHnvlYrv0PAAAAEzSy///a2//v2fBP251/y/3vX23gmb1y7X8AAACYoJH9/3hv/2+zwXOWP3m2pT7z9YFn9s61/wEAAGCCRvb/33r7/71/v/aXm+10yE2fHXhmn1z7HwAAACZoZP8/0dv/2/7uib8WP1xvhZcPPLNvrv0PAAAAEzSy///e2//bbbn8PI+devO+pww88/Fc+x8AAAAmaGT/P9nb/9sve8QzK++xwLHNwDOfyLX/AQAAYIJG9v9Tvf3/vqPevshl819w/bwDz+yXa/8DAADABI3s/3/09v/7D/rQ6w+/ap/lzhp4Zv9c+x8AAAAmaGT//7O3/3dY9dS7tttutb/XA88ckGv/AwAAwASN7P9/9fb/jsd94NVPXfz0804eeObAXPsfAAAAJmhk/z/d2/87LX7Grc+5a9O1vj/wzCdz7X8AAACYoJH9/0xv/39gpSP//u7qiJOGNv5BufY/AAAATNDI/n+2t/93PmyjBb672FwPfGPgmU/l2v8AAAAwQf9+/3czevt/l2uOXm/en13/3NcPPPPp3PH9P/S7BwIAAAD/o0b2f9Hb/x/c9d3fuefEbd6zzMAzB+f69X8AAACYoJH9X/b2/4e23/7QH+53wkWHDDzzmVz7HwAAACZoZP9Xvf3/4TtP3PGNx2x17QoDz8z6OQH7HwAAACZoZP/Xvf2/6yIHzP/udY9b9vCBZz6ba/8DAADABI3s/6a3/3c7+Y1PfHfJlfb+zMAzh+ba/wAAADBBI/u/7e3/j5z98dueeurxo5cceOZzufY/AAAATNDI/u96+3/3meev9Jzf73TjaQPPfD7X/gcAAIAJGtn/M3v7f4+PP//Xv1jl1OWfO/DMF3LtfwAAAJigkf0/W2//73nFnaustkW7/SIDz3wx1/4HAACACRrZ/8/p7f+P/vL3C+34qSs/fdHAM4fl2v8AAAAwQSP7/7m9/f+xHV/8z+OOWOTvxww8M+vPBLT/AQAAYIJG9v/svf2/1zV3z11seMfzXjfwzJdy7X8AAACYoJH9P0dv/++961KPPfbK3dd6xcAzR+Ta/wAAADBBI/t/zt7+32f7RW46+bGzT/riwDNfzrX/AQAAYIJG9v9cvf2/752/ftVmjyz3QDnwzFdy7X8AAACYoJH9P3dv/3/8Jy97059XfPi53xx45qu59j8AAABM0Mj+n6e3/z/RPfLtxTZd4z0/GnjmyFz7HwAAACZoZP/P29v/+813y6fectiBFy0w8MxRufY/AAAATNDI/p+vt//3P22+95+34z7Xfm/gmaNz7X8AAACYoJH9P39v/x+w9n137HfOBcvOMfDMMbn2PwAAAEzQyP5foLf/D3zqJW/4ws0L7L3wwDPH5tr/AAAAMEEj+/95vf3/yT8vtNjtM28++scDzxyXa/8DAADABI3s/wV7+/+gze/61zILrHfjqwee+Vqu/Q8AAAATNLL/n9/b/596ySfme+TqQ5Y/cuCZ43PtfwAAAJigkf2/UG//f/qYCx5d5LSltj9w4Jmv59r/AAAAMEEj+3/h3v4/+AsH3vDmPe//9EsGnvlGrv0PAAAAEzSy/1/Q2/+fWflNK1zwqcMP+MXAM9/Mtf8BAABggkb2/yK9/X/IVz99++JbbPzeDw48c0Ku/Q8AAAATNLL/F+3t/88ut/brfrnKsyvtM/DMibn2PwAAAEzQyP5frLf/D33d3gsf/PvVb/7VwDMn5dr/AAAAMEEj+/+Fvf3/uQMvfnLPp046/u0Dz3wr1/4HAACACRrZ/y/q7f/PX/vIhSsvue3Hnxh45tu59j8AAABM0Mj+X7y3/7/w0Ze9+7J1r136noFnTs61/wEAAGCCRvb/i3v7/4vbzrf/4cfMcfXaA8+ckmv/AwAAwASN7P+X9Pb/Yb+65fjt9nvigqcGnjk11/4HAACACRrZ/0v09v/hC//9nn1PXHmrdw48c1qu/Q8AAAATNLL/l+zt/y9981XVIT87Zs63Djxzeq79DwAAABM0sv+X6u3/I8557ot/u9gWjzw88Mx3cu1/AAAAmKCR/f/S3v7/8pzXXbJcdfnJ2w48c0au/Q8AAAATNLL/l+7t/6/s8+HlHrirftMlA898N9f+BwAAgAka2f8v6+3/r15y2nULXXz6fLcNPHNmrv0PAAAAEzSy/5fp7f8jb/7yQxtst/Njew48871c+x8AAAAmaGT/v7y3/4/60GZzXrTnWQdsMvDMWbn2PwAAAEzQyP5/RW//H33tUfctcdpu7/3LwDPfz7X/AQAAYIJG9v+yvf1/zEc37m67+q6V7h945uxc+x8AAAAmaGT/v7K3/4/dduelDlpgsZvXHXjmB7n2PwAAAEzQyP5frrf/j/vVdy/bdeZBx1898Mw5ufY/AAAATNDI/l++t/+/dsG7z77q5rU+vvPAMz/Mtf8BAABggkb2/6t6+//44uiNXnfOQ0t/fOCZc3PtfwAAAJigkf2/Qm//f32BE3f78I7LXn3nwDM/yrX/AQAAYIJG9v+Kvf3/je9t/+WvHXbrBdsPPPPjXPsfAAAAJmhk/7+6t/+/ecZnLjlg0wW3umLgmfNy7X8AAACYoJH9v1Jv/5/wvDVfvPuK581548Az5+fa/wAAADBBI/v/Nb39f2K5b/XSR/Z6ZPeBZy7Itf8BAABggkb2/8q9/X/Sj39yz82P3XfyswPPXJhr/wMAAMAEjez/VXr7/1vXvnDOeV65xJveNfDMT3LtfwAAAJigkf2/am//f/ujtz9074aHzveWgWcuyrX/AQAAYIJG9v9re/v/5G1/d925R6z/2B8Hnrk41/4HAACACRrZ/6/r7f9TfrXkcuuedsiHtht45pJc+x8AAAAmaGT/r9bb/6fuc/9ld+253mE/HXhm1o/Z/wAAADBBI/v/9b39f9oliy/1igXu/82tA8/8LNf+BwAAgAka2f+r9/b/6Te/oNvr6qVeu8fAM5fm2v8AAAAwQSP7/w29/f+dD91x3+duvmD3JweeuSzX/gcAAIAJGtn/a/T2/xn7/fyy18/c54itBp65PNf+BwAAgAka2f9r9vb/dy+bY6nrd7z5ig0Gnrki1/4HAACACRrZ/2v19v+ZN6zcHXvOAi99ZOCZK3PtfwAAAJigkf2/dm//f+8Dj96306YPb7bZwDNX5dr/AAAAMEEj+3+d3v4/69SbjtntsOXO+fvAM1fn2v8AAAAwQSP7f93e/v/+vAvs+8lHDrz77oFnrsm1/wEAAGCCRvb/G3v7/+x2ua1uXXGNYq2BZ36ea/8DAADABI3s/zf19v8PLvzTj5d85R1vvn7gmWtz7X8AAACYoJH9/+be/j/nqvU3v/uxRU7bZeCZ63LtfwAAAJigkf2/Xm////AjX/jhfEec/fS+A8/M+ncC7H8AAACYoJH9/5be/j/3/T/6yps23H2R2wee+UWu/Q8AAAATNLL/1+/t/x/9drePnrPFqR96ZuCZG3LtfwAAAJigkf3/1t7+//F+Pzj+lZ/a6bCtB565Mdf+BwAAgAka2f8b9Pb/eZftuf8dv7/yN+sPPPPLXPsfAAAAJmhk/2/Y2//n3/C2d392lfa1fxp45qZc+x8AAAAmaGT/v623/y/4wGcv3GfJ43Z/38AzN+fa/wAAADBBI/t/o97+v3C2fa752VNbHXHlwDO35Nr/AAAAMEEj+3/j3v7/yQ8uXPpVxzx+xQ0Dz9yaa/8DAADABI3s/016+/+iUw6e7X3rrvTSjww8c1uu/Q8AAAATNLL/N+3t/4sXXePBI0+8frOrBp75Va79DwAAABM0sv/f3tv/l7xxo7sv3W+ucz4w8MztufY/AAAATNDI/t+st/9/+q8jy+UXO+HuTww88+tc+x8AAAAmaGT/v6O3/3/2xzNesv3PtinuGnjmN7n2PwAAAEzQyP7fvLf/L93kAz896q6n37zpwDO/zbX/AQAAYIJG9v8Wvf1/2VJXvXKTarXTHh145o5c+x8AAAAmaGT/b9nb/5d/bc5rT9juiKf/MPDMnbn2PwAAAEzQyP7fqrf/rzjk1X/+28WbLrLOwDOzfk8A+x8AAAAmaGT/v7O3/69c4bG52g2XWOjUgWfuzrX/AQAAYIJG9v/Wvf1/1eHL//5rR9z35HMGnrkn1/4HAACACRrZ/+/q7f+rl3mi/fBj65+x6MAz9+ba/wAAADBBI/v/3b39f83q1770da88dIOLB575Xa79DwAAABM0sv/f09v/P//Ucy6/asUF6xUHnvl9rv0PAAAAEzSy/7fp7f9rr97qwEMfufW+Lw08c1+u/Q8AAAATNLL/39vb/9ft/rXt9j5sr+8fPPDMH3LtfwAAAJigkf2/bW//X7/DyWstu+l5Gy0x8Mz9ufY/AAAATNDI/t+ut/9/ccc237zznLVe/PWBZ/6Ya/8DAADABP2v9v9//kC3fW//3/DCtX57xY4HXbrawDN/yrX/AQAAYIJGfv3/fb39f+O3P7X6SjOXPerlA888kGv/AwAAwASN7P/39/b/L79/0Qvfe/NDH/3swDMP5tr/AAAAMEEj+3+H3v6/6bl7PX3E1bu9oRl45qFc+x8AAAAmaGT/79jb/zfv/+t5N1/grDtPGXjmz7n2PwAAAEzQyP7fqbf/b7l8kb98a8/FDj1r4JmHc+1/AAAAmKCR/f+B3v6/9calbvzLaXftPO/AM4/k2v8AAAAwQSP7f+fe/r9t57tXrC6uF1pp4Jm/5Nr/AAAAMEEj+3+X3v7/1dUv/tUx213+5FEDzzyaa/8DAADABI3s/w/29v/tu//+tR+odj7jgIFnHsu1/wEAAGCCRvb/h3r7/9c73PmC1e86fYMXDzzz11z7HwAAACZoZP9/uLf/f3PH85+67mcr12cOPPN4rv0PAAAAEzSy/3ft7f/fXvTgYXsu9sR9sw8887dc+x8AAAAmaGT/79bb/3fUy37w4P22+P4LBp55Itf+BwAAgAka2f8f6e3/O+de8K2/PPGYjc4beObvufY/AAAATNDI/t+9t//vOv3GMxdfd9sXVwPPPJlr/wMAAMAEjez/PXr7/+7TVnj69cecdOkJA888lWv/AwAAwAQVz1uo/Tf7f8/e/r9nvsdfeP1Tcxx17sAz/8i1/wEAAGCCRn79/6O9/X9vd/3qxy557UfnH3jmn7n2PwAAAEzQyP7/WG///+4nM3+70yobv+HogWf+lWv/AwAAwASN7P+9evv/91efvuIZvz/8ztcOPPN0rv0PAAAAEzSy//fu7f/7dt/lxvd8avVDlx145plc+x8AAAAmaGT/79Pb/3/Y4R1/ee4Wz+582MAzz+ba/wAAADBBI/t/397+v/+Ow+d98qwFfvS5gVdmfdj/AAAAMEEj+//jvf3/x/03eWrbXW5+x8sGXpn119j/AAAAMEEj+/8Tvf3/p8u/8oIvzb5PufrAK2U+7H8AAACYoJH9v19v/z9w45mvvfyGC373tYFXqnzY/wAAADBBI/t//97+f3DnHX/1muuWOn3ugVfqfNj/AAAAMEEj+/+A3v5/6KePrbDjPPevf/bAK00+7H8AAACYoJH9f2Bv//9531ffcNxu673w2wOvtPmw/wEAAGCCRvb/J3v7/+EPz/noL757yDPdwCuzfsz+BwAAgAka2f8H9fb/I7dcNd9qb9n98z8ZeGXW32//AwAAwASN7P9P9fb/XxZ84MNLHHn2B1848Mps+bD/AQAAYIJG9v+ne/v/0e++4gu3PbHIqjMHXnlOPux/AAAAmKCR/X9wb/8/dt7zzjhomTt+dfrAK8/Nh/0PAAAAEzSy/z/T2/9/rW7YcNeV1/jSUgOvzJ4P+x8AAAAmaGT/H9Lb/49/7CMn/PDBA3f91MArc+TD/gcAAIAJGtn/n+3t/79dd87ab/zcckt8eeCVOfPxv7H/q//mPzEAAADwv2tk/x/a2/9P3P7Fbefd/OHLXzXwylz58Ov/AAAAMEEj+/9zvf3/9+3efMA9a670o+cNvDJ3Pux/AAAAmKCR/f/53v5/8qeH7rzv8Y+/45yBV+bJh/0PAAAAEzSy/7/Q2/9P7fvWzx7y9FblSQOvzJsP+x8AAAAmaGT/f7G3///x4Y+e+tvFj/tdMfDKrN1v/wMAAMAEjez/w3r7/5+3nPWW5VZrT//CwCvz58P+BwAAgAka2f+H9/b/v85de7Wj7r5y/eUGXlkgH/Y/AAAATNDI/v9Sb/8/Pfun79z+gJ1euMrQK/mw/wEAAGCCRvb/Eb39/8zzL352+a1PfebYgVcWzIf9DwAAABM0sv+/3Nv/z56496KXXrDp51808Mrz82H/AwAAwASN7P+v/Nf+L2YcdNOeJ+xwxAc/OfDKQvmw/wEAAGCCRvb/V3v7v1h1gaM26VZb9asDryycD/sfAAAAJmhk/x/Z2//lssud2/7m6V+tPPDKC/Jh/wMAAMAEjez/o3r7vzrqT2//2xXbfOmCgVcWyYf9DwAAABM0sv+P7u3/+nfrX7D8wifsutDAK4vmw/4HAACACRrZ/8f09n+z5Re2vHSfuZaYc+CVxfJh/wMAAMAEjez/Y3v7v93gR3sddfL1l58x8MoL82H/AwAAwASN7P/jevu/+/tux26/+XmXrDHwyqy/x/4HAACACRrZ/1/r7f+Zm/1gt2c+t9fi9w68sng+7H8AAACYoJH9f3xv/8/2yJ5fnuPBW/f828ArL86H/Q8AAAATNLL/v97b/8/559vO3nLlBb+y+cArL8mH/Q8AAAATNLL/v9Hb/89d87Mbnb7MoXf8ZuCVJfJh/wMAAMAEjez/b/b2/+yz3z7/H59Yf7W9B15ZMh/2PwAAAEzQyP4/obf/5zj3hU+84Mj7dvzQwCtL5cP+BwAAgAka2f8n9vb/nCcuedvb3rLEZ68deOWl+bD/AQAAYIJG9v9Jvf0/1/N/t9KF373rnx8deGXpfNj/AAAAMEEj+/9bvf0/969/ut63dlts4ZsHXnlZPux/AAAAmKCR/f/t3v6fZ5vuO5vPc9aGlw68skw+7H8AAACYoJH9f3Jv/8+7x+sPra7b7XvvHXjl5fmw/wEAAGCCRvb/Kb39P9/1/9zxLzc89Ic/D7zyinzY/wAAADBBI/v/1N7+n//8LT+z0uzLdm8beGXZfNj/AAAAMEEj+/+03v5fYMY33nfFLgdtusXAK6/Mh/0PAAAAEzSy/0/v7f/nzf/tdY44a62z/zHwynL5sP8BAABggkb2/3d6+3/BM7c7+b0nH3PJHQOvLJ8P+x8AAAAmaGT/n9Hb/8+f/YQN/rnPFovvP/DKq/Jh/wMAAMAEjez/7/b2/0Ln7vC9mQs/seeOA6+skA/7HwAAACZoZP+f2dv/C5/4ri9ufcXKX7lm4JUV82H/AwAAwASN7P/v9fb/C2b+r195dT7sfwAAAJigkf1/Vm//L7Lvjgsv2O282u8HXlkpH/Y/AAAATNDI/v9+b/8v+tMzn/z9Dpfv+NeBV16TD/sfAAAAJmhk/5/d2/+L3fKV28+6oP7sxgOvrJwP+x8AAAAmaGT//6C3/1/44U1et/bWz/7zwYFXVsmH/Q8AAAATNLL/z+nt/xft8v0d33PA6guvN/DKqvmw/wEAAGCCRvb/D3v7f/FbP3boGXcfvuG7B155bT7sfwAAAJigkf1/bm//v/hnG3znydU2/t6/Bl55XT7sfwAAAJigkf3/o97+f8len1vvuYtf+4ddB15ZLR/2PwAAAEzQyP7/cW//LzH7y06+/uk5ul8OvPL6fNj/AAAAMEEj+/+83v5f8txH1nn98SdtevnAK6vnw/4HAACACRrZ/+f39v9SJ97yvp3W3PbsHQZeeUM+7H8AAACYoJH9f0Fv/7/0+fN95th9TnjlQwOvrJEP+x8AAAAmaGT/X9jb/0uff+MuM07e5hcbDryyZj6y/8v/yX9kAAAA4H/TyP7/SW//v2zGgl/86xXXH7flwCtr5cOv/wMAAMAEjez/i3r7f5n5l/3eKQvPtc8/B15ZOx/2PwAAAEzQyP6/uLf/X37mgxu8vTtixY8NvLJOPux/AAAAmKCR/X9Jb/+/4qKnd7n3N5v+8paBV9bNh/0PAAAAEzSy/3/a2//L1q/74jwXPH3wzwZeeWM+7H8AAACYoJH9/7Pe/n/l3MX31t1htR22GXjlTfmw/wEAAGCCRvb/pb39v9zpV25w7gFXLvDrgVfenA/7HwAAACZoZP9f1tv/y+9436vO3Lp9fK+BV9bLh/0PAAAAEzSy/y/v7f9X/fIlN71rtVO/+eGBV96SD/sfAAAAJmhk/1/R2/8rXLHQY7PdvdOa1w28sn4+7H8AAACYoJH9f2Vv/6/48bvm/sfTj89cc+CVt+bD/gcAAIAJGtn/V/X2/6tnfuLZNyy+0p9+N/DKBvmw/wEAAGCCRvb/1b39v9LZFyx67ZrH/eTxgVc2zIf9DwAAABM0sv+v6e3/15x84GpHH7/V1u8YeOVt+bD/AQAAYIJG9v/Pe/t/5UXedOfOnzvwlbsNvLJRPux/AAAAmKCR/X9tb/+vctGnV3p08zV+cdPAKxvnw/4HAACACRrZ/9f19v+q9dq3lSs/fNxlA69skg/7HwAAACZoZP9f39v/r5177yfe8eBy+7x/4JVN82H/AwAAwASN7P9f9Pb/606/eP5vP3H2ig8MvPL2fNj/AAAAMEEj+/+G3v5f7eq3brvoMrv/8s0Dr2yWD/sfAAAAJmhk/9/Y2/+v3/3QAx5+yx0Hv2fglVl/JqD9DwAAABM0sv9/2dv/q+9w1gnnH7nIDk8PvLJ5Pux/AAAAmKCR/X9Tb/+/4Y6Prr3ebvcv8KaBV7bIh/0PAAAAEzSy/2/u7f81Dn7/mxf57lKP3zfwypb5sP8BAABggkb2/y29/b/mat88/ZHrDvnmYwOvbJUP+x8AAAAmaGT/39rb/2stfeznLphnvTU3Gnjlnfmw/wEAAGCCRvb/bb39v/YRW+/05tlvnvnbgVe2zof9DwAAABM0sv9/1dv/6/zhmYO/cMMCf9pv4JV35cP+BwAAgAka2f+39/b/uluvsv1+Z13wk50GXnl3Pux/AAAAmKCR/f/r3v5/45vLdZfZZZ+tfz7wynvyYf8DAADABI3s/9/09v+bHrvslNuPn2PLlw68sk0+7H8AAACYoJH9/9ve/n/zRu1b117z2h9/euCV9+bD/gcAAIAJGtn/d/T2/3oPXHLmWYtv+9ARA69smw/7HwAAACZoZP/f2dv/b3nmH4f9/umT5lh+4JXt8mH/AwAAwASN7P+7evt//XVW++CCd6++zoUDr2yfD/sfAAAAJmhk/9/d2/9vnW2Xl2222rPfXmzglfflw/4HAACACRrZ//f09v8GPzj95ydvvfGjsw288v582P8AAAAwQSP7/97e/t/wlMMfeOyAw+f+zsArO+TD/gcAAIAJGtn/v+vt/7ct+o6ZxQ47bzvPwCs75sP+BwAAgAn69/v/vufO+K/9v9Fde+yx0AWnH/SDgVd2yof9DwAAABM08uv/9/V+/X/j95195AO/qW/71sArH8iH/Q8AAAATNLL//9Db/5vsdsiPLuouf0078MrO+bD/AQAAYIJG9v/9vf2/6c833GyDhbfY/9CBV3bJh/0PAAAAEzSy///Y2/9vv/ih8w+54pivLz3wygfzYf8DAADABI3s/z/19v9mzTJb7Hvyyte8YeCVD+XD/gcAAIAJGtn/D/T2/zvmmXvv5fZ54uXHD7zy4XzY/wAAADBBI/v/wd7+3/w7tx73212W3fL8gVd2zYf9DwAAABM0sv8f6u3/LWabf9c3nvXQj58/8Mpu+bD/AQAAYIJG9v+fe/t/yx/88ogf3rDWQ3MNvPKRfNj/AAAAMEEj+//h3v7f6pQ//uCe2Q+a47sDr+yeD/sfAAAAJmhk/z/S2//vXPSVG887z2LrLD7wyh75sP8BAABggkb2/196+3/r/e546enX3fXtgwZe2TMf9j8AAABM0Mj+f7S3/9912Qsu3/K7uz36lYFXPpoP+x8AAAAmaGT/P9bb/+++YfHfz7HbWXO/ZuCVj+XD/gcAAIAJGtn/f+3t//d84P72mSPX3/bzA6/slQ/7HwAAACZoZP8/3tv/2+xUb3bvWw496JUDr+ydD/sfAAAAJmhk//+tt//fe9PPfjTPMkvcturAK/vkw/4HAACACRrZ/0/09v+2Vz555LpP3Pea4wZe2Tcf9j8AAABM0Mj+/3tv/2/3idX3OPfBvfZfcOCVj+fD/gcAAIAJGtn/T/b2//azfe243Vc+7+s/HHjlE/mw/wEAAGCCRvb/U739/74fbLX3AZsveM2JA6/slw/7HwAAACZoZP//o7f/33/KNlvc/LlbXz70yv75sP8BAABggkb2/z97+3+HRU8+/6UvOvyv5wy8ckA+7H8AAACYoJH9/6/e/t/x4u03/sm/Np73eQOvHJgP+x8AAAAmaGT/P93b/zs1J/5gw689+8Zi4JVP5sP+BwAAgAka2f/P9Pb/B+Y5+oiF11j9lJMGXjkoH/Y/AAAATNDI/n+2t/93/s67d/3Tu056eLmBVz6VD/sfAAAAJujf7/8ZM3r7f5e7Hzj8pgO3nesLA698Oh/2PwAAAEzQyP4vevv/g1u94iMvuufadx478MrB+bD/AQAAYIJG9n/Z2/8f2vB5m+7x+jnOX2Xglc/kw/4HAACACRrZ/1Vv/3/48Ru+/5lfP3HVJwdeOSQf9j8AAABM0Mj+r3v7f9fXPHbdN9qVX/aigVc+mw/7HwAAACZoZP83vf2/2+dfvdwu7z/mEysPvHJoPux/AAAAmKCR/d/29v9Hjp5zzlXO3+JrXx145XP5sP8BAABggkb2f9fb/7u/+KqHfn7K5bcsNPDK5/Nh/wMAAMAEjez/mb39v8c7PlDNuW/96gsGXvlCPux/AAAAmKCR/T9bb//v+dAZ9zz9gtO3OWPglS/mw/4HAACACRrZ/8/p7f+PPnnkJaddufOBcw68clg+7H8AAACYoJH9/9ze/v/YWhu9eKsbz/rrywZeOTwf9j8AAABM0Mj+n723//e6+4irL5ljt3k/N/DKl/Jh/wMAAMAEjez/OXr7f++t3v7yFT941xu/NvDKEfmw/wEAAGCCRvb/nL39v8+GH3rODt9f7JTVB175cj7sfwAAAJigkf0/V2//7/v4qX/8yhkHPXz2wCtfyYf9DwAAABM0sv/n7u3/jx/1zq+/Yte15pp74JWv5sP+BwAAgAka2f/z9Pb/J5Y9/uN3zf3QO7uBV47Mh/0PAAAAEzSy/+ft7f//F3t3Gn71+P/9Pp9lyjxkylSEkimJzFNmCSFDMs8yZ8iQKRG/oij9yEyZMsWPDKlQKELGTFGGIoSSon1jn67rvPa5juvc/72v/3GcNx6PO72P7/Fdr2PdfX7XWq3Lth5y5PXjNx5xf52VgeHQ/wAAAFCgTP+vGPV/j6uOGXlhyw/GrV1n5dZ/fv+/99kCAAAA/19k+r9R1P+XnzJw4ZFzVmnxYp2VQeHQ/wAAAFCgTP+vFPX/Fe8d8M2+A5+79KE6K/8Oh/4HAACAAmX6f+Wo/68ce9rYVfe58PbF66zcFg79DwAAAAXK9P8qUf9fdemj6804ZNr7V9dZuT0c+h8AAAAKlOn/VaP+v7rhsm9s0rvZFuvXWRkcDv0PAAAABcr0/2pR//d86vXmn03vfXSrOit3hEP/AwAAQIEy/d846v9rhvza8Lot97mif52VO8Oh/wEAAKBAmf5fPer/Xmu2mdF97HZX96izclc49D8AAAAUKNP/a0T9f+3IOQ2+XP2vEz6rs3J3OPQ/AAAAFCjT/2tG/X/dIq2+WvHijq3eqLNyTzj0PwAAABQo0/9rRf3fe/klx+wxpN/Ek+us3BsO/Q8AAAAFyvT/2lH/X//whKbDRyw7aGqdlfvCof8BAACgQJn+bxL1/w3fDD5h9olvXbh7nZX7w6H/AQAAoECZ/m8a9f+/Oh/Ra5FFj97ogDorD4RD/wMAAECBMv2/TtT/ffY85oEDPrl7wq91VoaEQ/8DAABAgTL9v27U/31nDWl3z/aHj9yrzsrQcOh/AAAAKFCm/5tF/X/jZj3bjphyW5cZdVYeDIf+BwAAgAJl+n+9qP9v6r3rJ3td0WaJ+XVWHgqH/gcAAIACZfp//aj/+91x0bw1j/xtRpc6Kw+HQ/8DAABAgTL9v0HU//2bjVxt5k6n3PNunZVHwqH/AQAAoECZ/m8e9f/N+685u+XtQ3c9q87Ko+HQ/wAAAFCgTP+3iPr/lumTG300f9FVTqqzMiwc+h8AAAAKlOn/DaP+H/D3lDY3NBk7+9U6K4+FQ/8DAABAgTL93zLq/4HtNviwx5ZrXP1VnZXHw6H/AQAAoECZ/t8o6v9bv5m23bTpn52wU52VJ8Kh/wEAAKBAmf7fOOr/QZ3X/Xzl3ue26lRn5clw6H8AAAAoUKb/N4n6/997rrZgl0OenPh7nZWnwqH/AQAAoECZ/t806v/bZn2x5hP7bDroojorw8Oh/wEAAKBAmf7fLOr/22/a6LSGA2deOLnOytPh0P8AAABQoEz/t4r6f3DL6df9OWenjcbXWXkmHPofAAAACpTp/82j/r9jx4lDh7W8YsIZdVb+Ew79DwAAAAXK9H/rqP/v7Lny3keO7z5yUp2VZ8Oh/wEAAKBAmf7fIur/u675fbWdl3u+y/l1Vp4Lh/4HAACAAmX6v03U/3dv13rek2ettMQxdVZGhEP/AwAAQIEy/b9l1P/3NG/4yTePTJoxps7K8+HQ/wAAAFCgTP9vFfX/vf3ebrvSE3vd06HOygvh0P8AAABQoEz/t436/75vun44seu1u/5YZ+XFcOh/AAAAKFCm/7eO+v/+zg+3WXfp9Vf5s87KS+HQ/wAAAFCgTP9vE/X/A3ve1OiCd76dfWidlZHh0P8AAABQoEz/bxv1/5BZnWZfPb3Zqe/VWXk5HPofAAAACpTp/+2i/h+6/y1rrrXltOvPrrMyKhz6HwAAAAqU6f/to/5/cHrHBT8ess8XJ9ZZGR0O/Q8AAAAFyvT/DlH/P/T3KZ8/17v3Dq/UWRkTDv0PAAAABcr0/45R/z/c7rHt9h64ygV71ln5528C+h8AAAAKlOn/naL+f+Sg59acv88HA6bXWXk1HPofAAAACpTp/52j/n90Zo8Fy7a8cPRfdVZeC4f+BwAAgAJl+n+XqP+H/bnb50fMeW7do+qsjA2H/gcAAIACZfp/16j/H9vpqu2GLrfLAdPqrIwLh/4HAACAAmX6v13U/49fefdOj4+/6vE96qy8Hg79DwAAAAXK9P9uUf8/0fake3Z9ZOOp+9dZeSMc+h8AAAAKlOn/3aP+f3KjI69a5awfFplVZ+XNcOh/AAAAKFCm//eI+v+pAbcdM7Xr2fteVmdlfDj0PwAAABQo0/97Rv0//Kut+zR94vFHP62zMiEc+h8AAAAKlOn/vaL+f/rQBae/+85ac9+ss/JWOPQ/AAAAFCjT/3tH/f/Mvq+2v2bpL1Y9pc7K2+HQ/wAAAFCgTP/vE/X/f2bXHuu2+sKn7ldnZWI49D8AAAAUKNP/+0b9/+xBo9r9NPbV63+os/JOOPQ/AAAAFCjT/+2j/n9u5mIPrDHktC/m1Vl5Nxz6HwAAAAqU6f/9ov4f8ef2vfa8+KEdDquz8l449D8AAAAUKNP/HaL+f36neSc8f+JWF7xfZ2VSOPQ/AAAAFCjT//tH/f/CuouvWBsxe8AFdVb++ZuA/gcAAIACZfr/gKj/Xxz01i8/f3Lo6KPrrHwQjv+l/xf/b3nGAAAAwH9Vpv8PjPr/pX/9NvG+RQetO7rOyofh8Po/AAAAFCjT/x2j/h+51eabd5py7AEX1ln5KBz6HwAAAAqU6f+Dov5/+fR1tq62v/fxT+qsfBwO/Q8AAAAFyvT/wVH/j/pg6uRfjlx66oQ6K//8TUD/AwAAQIEy/X9I1P+jR3/+5/1XjF/kzDork8Oh/wEAAKBAmf7vFPX/mAtXXfWQ2w/Y9+s6K5+GQ/8DAABAgTL9f2jU/68sNWJO/51ufHTnOiufhUP/AwAAQIEy/X9Y1P+vPnPJSkc32WHuIXVWPg+H/gcAAIACZfr/8Kj/X7tn9y22mL9g1d/qrHwRDv0PAAAABcr0/xFR/49d9fIPxi597Zqr1ln5Mhz6HwAAAAqU6f/OUf+PG7HL9ke+s9f8EXVWpoRD/wMAAECBMv1/ZNT/rze4+othT3w79NE6K1+FQ/8DAABAgTL93yXq/zcavfT3n13X32vZOiv/fCeg/gcAAIACZfr/qKj/3xx24RoNz3q+wVV1VqaGQ/8DAABAgTL9f3TU/+O/bn7oPo90n9K0zsq0cOh/AAAAKFCm/4+J+n/CYTNHPDt+0tNb1ln5Jhz6HwAAAAqU6f9jo/5/q/2k235YbqWDbq6z8m049D8AAAAUKNP/x0X9//acFS5ae87M9Teps/JdOPQ/AAAAFCjT/8dH/T+xzWaLLNZy07E31Fn5Phz6HwAAAAqU6f8Tov5/p+/sb3/b54r+t9VZmR4O/Q8AAAAFyvT/iVH/v3vb+NfuGrjTOVvXWZkRDv0PAAAABcr0/0lR/7/XdIlmHXt/tu3TdVZ+CIf+BwAAgAJl+v/kqP8nHTz0zQGHrPHJKnVWfgyH/gcAAIACZfr/lKj/3//pjBYnbPlkn3orM8Oh/wEAAKBAmf4/Ner/D+YdtHir6eeeeU+dlZ/Cof8BAACgQJn+Py3q/w937jd99Pyha/ass/JzOPQ/AAAAFCjT/6dH/f/R1/svdGiTU+ZvUGfll3DofwAAAChQpv+7Rv3/8WEDvn54p7FDN6uzMisc+h8AAAAKlOn/M6L+/6T9I6MX3L7oXv3qrPwaDv0PAAAABcr0/5lR/0+ec2qTpa64rcFadVZ+C4f+BwAAgAJl+v+sqP8/vXnQIcOPPHzKC3VWfg+H/gcAAIACZfr/7Kj/P9vkqOF7bP/b0w/XWZkdDv0PAAAABcr0/zlR/3++zQm3rDilzUEN66zMCYf+BwAAgAJl+v/cqP+/uPzeC75c9K31n6qz8kc49D8AAAAUKNP/50X9/+VVOzWb/8myY5evszI3HPofAAAACpTp/25R/0/Z+prXlh1xd/9F66z8GQ79DwAAAAXK9P/5Uf9/tfEL3x5x4tHn3FdnZV449D8AAAAUKNP/F0T9//XA7osMvfivbZvXWZkfDv0PAAAABcr0/4VR/0/9+qPpXYds90nvOit/hUP/AwAAQIEy/X9R1P/TDltr8TvG9uszuM7K3+HQ/wAAAFCgTP93j/r/m/bNWryxesczd6yzsiAc+h8AAAAKlOn/i6P+/3bOV29ufd6UEUekK9U/h/4HAACAAmX6/5Ko/787uEmTe4c2OWJuulKF39H/AAAAUKJM/18a9f/3P30zev9xfZadma5U/7wBQP8DAABAgTL9f1nU/9Pnffr1wo06zNw3Xalq4dD/AAAAUKBM//eI+n/Gzo0XmtPw3SEvpyvVwuHQ/wAAAFCgTP9fHvX/DzMun/Hg+yvufmy6Ui0SDv0PAAAABcr0/xVR//94wO4ND3/6xRW6pSvVouHQ/wAAAFCgTP9fGfX/zN0uab7MKZf8+mG6Ui0WDv0PAAAABcr0/1VR//+0YMQbf/XpdUXXdKX65/H6HwAAAAqU6f+ro/7/eftbn5l24O5Hv52uVA3Dof8BAACgQJn+7xn1/y+9uhy08ubfbfFRulItEQ79DwAAAAXK9P81Uf/P6n98t11mtni/e7pSLRkO/Q8AAAAFyvR/r6j/f21xz8Anfh1+++x0pVoqHPofAAAACpTp/2uj/v/tyAYXnrdpt0sPSleqpcOh/wEAAKBAmf6/Lur/37997d+9OkxusWu6Ui0TDv0PAAAABcr0f++o/2f/Ov/59/o3HjclXamWDYf+BwAAgAJl+v/6qP/n7LXNYU16jhrxWrpSLRcO/Q8AAAAFyvT/DVH//zHjjydHHNbgiOPTlWr5cOh/AAAAKFCm//8V9f/cA3bYf6+thy17brpSrRAO/Q8AAAAFyvR/n6j//9xt4bPXnHbmzHfSleqf7tf/AAAAUKBM//eN+n/egtH9Z/4xa8iR6UrVKBz6HwAAAAqU6f8bo/6ff3uraYc0a737gnSlWikc+h8AAAAKlOn/m6L+/2v9OYvd327wCt+lK9XK4dD/AAAAUKBM//eL+v/vzSes/8utnX/dO12pVgmH/gcAAIACZfq/f9T/C65d8pWqx5Arfk5XqlXDof8BAACgQJn+v/l/9n/VYOopS59274lHH5iuVKuFQ/8DAABAgTL9f0vU/wt1eeynW8eM22K3dKVqHA79DwAAAAXK9P+AqP+rvW95a/zaDd//Nl2pVg+H/gcAAIACZfp/YNT/tZ87brRjdfPtp6Ur1Rrh0P8AAABQoEz/3xr1/8JX/zLmz88PvvT1dKVaMxz6HwAAAAqU6f9BUf8vssNWTRu+NK/F5+lKtVY49D8AAAAUKNP//476f9ENl25w5LHbjLskXanWDof+BwAAgAJl+v+2qP8Xu/HNr4b1bz/hxnSl+ucx+h8AAAAKlOn/26P+X3zzhg236HDDRpunK1XTcOh/AAAAKFCm/wdH/d/w2rdnjN10nQvXS1eqdcKh/wEAAKBAmf6/I+r/JW7//Y3+v349qFe6Uq0bDv0PAAAABcr0/51R/y+5fuvmR8+8bOKS6UrVLBz6HwAAAAqU6f+7ov5f6rTjTl9n85GtHkxXqn8+E6D/AQAAoECZ/r876v+l37m/zzsHLn/CS+lKtX449D8AAAAUKNP/90T9v8yrdz7Ws8/Eq9dIV6oNwqH/AQAAoECZ/r836v9lexzW/vxTWs5+IF2pmodD/wMAAECBMv1/X9T/y714casznp6+ysLpStUiHPofAAAACpTp//uj/l9+sRffG/x+u13rNH61YTj0PwAAABQo0/8PRP2/woq9Zr3esOc9T6QrVctw6H8AAAAoUKb/h0T9v+KDOy+3TaNVZ2yfrlQbhUP/AwAAQIEy/T806v9Gn329YMG4j5e4M12pNg6H/gcAAIACZfr/waj/VzppvTWXGnpBl2vTlWqTcOh/AAAAKFCm/x+K+n/lc9fe7tDznhm5YbpSbRoO/Q8AAAAFyvT/w1H/r/L6x58/fGzXCUunK9Vm4dD/AAAAUKBM/z8S9f+qp63eptVLj2z0WLpStQqH/gcAAIACZfr/0aj/V3vnsw9Hf15d+Gy6Um0eDv0PAAAABcr0/7Co/xu/+u3sAdWYQY3Tlap1OPQ/AAAAFCjT/49F/b96j6aNTli7y8QB6Uq1RTj0PwAAABQo0/+PR/2/xhrvHvvZmDtbbZGuVG3Cof8BAACgQJn+fyLq/zUfaHT5Jve2OmHddKXaMhz6HwAAAAqU6f8no/5f68lN7u7e4+err0hXqq3Cof8BAACgQJn+fyrq/7UX/27X625dcva26UrVNhz6HwAAAAqU6f/hUf83WXLJ5W5p98Yqg9KVautw6H8AAAAoUKb/n476v+kTE2ad2Oz4XfukK9U24dD/AAAAUKBM/z8T9f869895b/M/7r9no3Sl+uczAfofAAAACvT/6P/dlm3QIO7//0T9v+7arVqNmtZ2xl3pSrVdOPQ/AAAAFCjz+v+zUf83O63/5wtvPXeJKl2ptg+H/gcAAIACZfr/uaj/13vn4O3mHNapy0rpSrVDOPQ/AAAAFCjT/yOi/l//1TPXvLfngJH/SVeqHcOh/wEAAKBAmf5/Pur/DXo8uGD/lw5ed7t0pdopHPofAAAACpTp/xei/m/+2WmN3jj25tF3pCvVzuHQ/wAAAFCgTP+/GPV/i5Menb11tc2A69KVapdw6H8AAAAoUKb/X4r6f8NzB37Y9fN5F7RMV6pdw6H/AQAAoECZ/h8Z9X/L1w9oc8eYE3cYkq5U7cKh/wEAAKBAmf5/Oer/jT7eo1HztYd8sUi6Uu0WDv0PAAAABcr0/6io/zc+7orZk3s0vH6FdKXaPRz6HwAAAAqU6f/RUf9vcsHzH/a9d9ypj6cr1R7h0P8AAABQoEz/j4n6f9MJl7a5pF3rVZdIV6o9w6H/AQAAoECZ/n8l6v/Nlj1qr+NvnTV3aLpS7RUO/Q8AAAAFyvT/q1H/t3p60MMD/+j86Mh0pdo7HPofAAAACpTp/9ei/t/87nt7j2k2eN8105Vqn3DofwAAAChQpv/HRv3fevUTTt5s6waL3JSuVPuGQ/8DAABAgTL9Py7q/y3OHNvr92mjprZOV6r24dD/AAAAUKBM/78e9X+b9xc6YdGeZz7eLF2p9guH/gcAAIACZfr/jaj/txy1bbsDDxt2wDXpStUhHPofAAAACpTp/zej/t/q4r8euLtDt3XvTleq/cOh/wEAAKBAmf4fH/V/2493bL9t/+Gja+lKdUA49D8AAAAUKNP/E6L+3/q4uY+N+7XxgEbpSnVgOPQ/AAAAFCjT/29F/b/NBWP63L7p5AueSVeqjuHQ/wAAAFCgTP+/HfX/thMWOf3MzXffYZt0pTooHPofAAAACpTp/4lR/283bHbjD2f2+uLWdKU6OBz6HwAAAAqU6f93ov7fvtFmfzTr0+L6vulKdUg49D8AAAAUKNP/70b9v0ODJT4+68DvTt04Xak6hUP/AwAAQIEy/f9e1P87jhi/7VVPr7jqwHSlOjQc+h8AAAAKlOn/SVH/7zTl080+OOXduW3SleqwcOh/AAAAKFCm/9+P+n/nIxq/u17DSx5dJ12pDg+H/gcAAIACZfr/g6j/d+nQ5Nez339x38vTleqIcOh/AAAAKFCm/z+M+n/X379Z/spxTRZZKl2pOodD/wMAAECBMv3/UdT/7a5o9/cejaZMHZauVEeGQ/8DAABAgTL9/3HU/7tte+Uaw8/r8Phz6UrVJRz6HwAAAAqU6f9Pov7ffdNnt/9yaJ8DVk9XqqPCof8BAACgQJn+nxz1/x63XPbFiofNPWhOulIdHQ79DwAAAAXK9P+nUf/vudULW1zXs+3TB6cr1THh0P8AAABQoEz/fxb1/17/6v5B92kDpuySrlTHhkP/AwAAQIEy/f951P97D9ppziZbd2rwZbpSHRcO/Q8AAAAFyvT/F1H/77PuNSt91uyNvU5PV6rjw6H/AQAAoECZ/v8y6v99z/jggDv/WHLoW+lKdUI49D8AAAAUKNP/U6L+bz9puadOv/X++R+nK9WJ4dD/AAAAUKBM/38V9f9+L2/Yr22749e8OF2pTgqH/gcAAIACZfr/66j/O3T/4aw3773zzFHpSnVyOPQ/AAAAFCjT/1Oj/t//2beWeq9Hlz7HpSvVKeHQ/wAAAFCgTP9Pi/r/gGrxmU3W/vmT89KV6tRw6H8AAAAoUKb/v4n6/8CVN3/7vDGttv0gXalOC4f+BwAAgAJl+v/bqP87PvLbxr0+f+Scw9OV6vRw6H8AAAAoUKb/v4v6/6CPDhm9S9W1/x/pStU1HPofAAAACpTp/++j/j/42BubPHHsmLE/pSvVGeHQ/wAAAFCgTP9Pj/r/kPMfWmjaS9X67dOV6sxw6H8AAAAoUKb/Z0T932n86V+vPPTjg05NV6qzwqH/AQAAoECZ/v8h6v9Dzxi2+A3nrfr0uHSlOjsc+h8AAAAKlOn/H6P+P2zSydN7NHpmyhfpSnVOOPQ/AAAAFCjT/zOj/j/85QPfbDnuggaXpivVueHQ/wAAAFCgTP//FPX/Ed1vbvHR+9P3+iVdqc4Lh/4HAACAAmX6/+eo/zuvdtJRRzdsObRjulJ1C4f+BwAAgAJl+v+XqP+PvPfuF/uf0nN+u3SlOj8c+h8AAAAKlOn/WVH/d/nPbbePfbrdmt+kK9UF4dD/AAAAUKBM//8a9f9RSx952RYHjjyzc7pSXRgO/Q8AAAAFyvT/b1H/H73MSxs373NZn7/TleqicOh/AAAAKFCm/3+P+v+Y4Re+PXnmxE++T1eq7uHQ/wAAAFCgTP/Pjvr/2Lt2mdl38+W33SddqS4Oh/4HAACAAmX6f07U/8c1vnqpSza94Zyx6Up1STj0PwAAABQo0/9/RP1//Bnrf/3cr+37n5CuVJeGQ/8DAABAgTL9Pzfq/xMmfbnQ3v2/HntOulJdFg79DwAAAAXK9P+fUf+f+PInTdbqsM76E9OVqkc49D8AAAAUKNP/86L+P6n7GqN/nHr838enK9Xl4dD/AAAAUKBM/8+P+v/kjz5vcUHb+9d+LV2prgiH/gcAAIACZfr/r6j/Tzl21TevPnTJfd5JV6orw6H/AQAAoECZ/v876v9Tz19n+sSr33jo3HSluioc+h8AAAAKlOn/BVH/nzZ+6uLrDur09YJ0pbo6HPofAAAACvS/7/+FGkT9f/p1Gx10+24DqiPTlapnOPQ/AAAAFCjT/wtF/d+19fRnzlyv7SF7pyvVNeHQ/wAAAFCgTP9XUf+fscHEgdvOnfuf79KVqlc49D8AAAAUKNP/taj/zxy8crdxa1WvHpiuVNeGQ/8DAABAgTL9v3DU/2cdtUXDiaPHNPs5XamuC4f+BwAAgAJl+n+RqP/PnjZrxrr3dD3r23Sl6h0O/Q8AAAAFyvT/olH/n/PLuDcuuOyRm3ZLV6rrw6H/AQAAoECZ/l8s6v9z91mm+dXHtfro9XSluiEc+h8AAAAKlOn/xaP+P2/HR8buPPLnrU9LV6p/hUP/AwAAQIEy/d8w6v9uPU9d78kvunS9JF2p+oRD/wMAAECBMv2/RNT/59+0/8Lf1O684fN0peobDv0PAAAABcr0/5JR/1/QcsA3K63U7u+56Up1Yzj0PwAAABQo0/9LRf1/4XUHLd339Z5rH5GuVDeFQ/8DAABAgTL9v3TU/xe17vfTJQ+23GffdKXqFw79DwAAAAXK9P8yUf9332DoW827TX9oZrpS9Q+H/gcAAIACZfp/2aj/Lx58xkaTT77g62PTlermcOh/AAAAKFCm/5eL+v+SvwcfftzwZ6qX05XqlnDofwAAAChQpv+Xj/r/0nZHPHvjpFUP+TBdqQaEQ/8DAABAgTL9v0LU/5ftf8ygVxb/+D/d0pVqYDj0PwAAABQo0/8rRv3fY/qQi7f6aZ1X305XqlvDof8BAACgQJn+bxT1/+UNDnj559ZfN+uarlSDwqH/AQAAoECZ/l8p6v8rRgxcp9ax/Vnd05Xq3+HQ/wAAAFCgTP+vHPX/lcMerXXqe8NNH6Ur1W3h0P8AAABQoEz/rxL1/1WNTptyX7/lPzooXaluD4f+BwAAgAJl+n/VqP+vPvr1ZY7Zb+LWs9OVanA49D8AAAAUKNP/q0X93/OTZX/ot8llXaekK9Ud4dD/AAAAUKBM/zeO+v+at9pMeG3WyBt2TVeqO8Oh/wEAAKBAmf5fPer/Xuf9ummb2rjrHktXqrvCof8BAACgQJn+XyPq/2s/aPXKY180PHnpdKW6Oxz6HwAAAAqU6f81o/6/7vQ563ceOWS7xulKdU849D8AAAAUKNP/a0X93/vCCYstftyJnz2brlT3hkP/AwAAQIEy/b921P/Xj15y2rzL5t28RbpS3RcO/Q8AAAAFyvR/k6j/b+h7xN3P3bNNtwHpSnV/OPQ/AAAAFCjT/02j/v9Xm8G77j365qZXpCvVA+HQ/wAAAFCgTP+vE/V/n6ZDjl1rrYNfXjddqYaEQ/8DAABAgf5H/y9YEH7yv/T/ulH/973tmMt/nDvsyUHpSjU0HPofAAAACpR5/b9Z1P83Hrbr/N/XO7PjtulK9WA49D8AAAAUKNP/60X9f9PXPddadLdRi22UrlQPhUP/AwAAQIEy/b9+1P/95ozc8cBBDb7pk65UD4dD/wMAAECBMv2/QdT//dtf9NndVw9+rEpXqkfCof8BAACgQJn+bx71/81bT978+EM773dXulI9Gg79DwAAAAXK9H+LqP9vuWrNiQPbzmr8n3SlGhYO/Q8AAAAFyvT/hlH/Dxi4wS9jpraet1K6Uj0WDv0PAAAABcr0f8uo/wduPGXFzWZ9d93m6Ur1eDj0PwAAABQo0/8bRf1/a991/3hokxYn35iuVE+EQ/8DAABAgTL9v3HU/4PaTGt82H69tuuVrlRPhkP/AwAAQIEy/b9J1P//bvrFtkv32/2z9dKV6qlw6H8AAAAoUKb/N436/7bbVvv4776Tb34wXamGh0P/AwAAQIEy/b9Z1P+3/zH9sd07Nu62ZLpSPR0O/Q8AAAAFyvR/q6j/B++yUfunWw9vuka6Uj0TDv0PAAAABcr0/+ZR/99xyMqnT/mp28svpSvVf8Kh/wEAAKBAmf5vHfX/nT9M7LPC4n2eXDhdqZ4Nh/4HAACAAmX6f4uo/+/6qfVny0zq0PGBdKV6Lhz6HwAAAAqU6f82Uf/fffDvO/41fMpiT6Qr1Yhw6H8AAAAoUKb/t4z6/56d317rwZObfFOn8avnw6H/AQAAoECZ/t8q6v975zWcf3i3Fx+7M12pXgiH/gcAAIACZfq/bdT/9/V9eMU7H7xkv+3TlerFcOh/AAAAKFCm/7eO+v/+Nl1/Of31dxtvmK5U/3wnoP4HAACAAmX6f5uo/x9o2mli25VWnHdtulKNDIf+BwAAgAJl+n/bqP+H3HbT5m9uMvGkWrpSvRwO/Q8AAAAFyvT/dlH/D92648cHzFr+mrvTlWpUOPQ/AAAAFCjT/9tH/f/gVbdse0+/ke8+k65Uo8Oh/wEAAKBAmf7fIer/hwY+1nj2fpe1bpSuVGPCof8BAACgQJn+3zHq/4c3PuWPRTp+3f3WdKV6JRz6HwAAAAqU6f+dov5/ZPseHz/Vd53btklXqlfDof8BAACgQJn+3znq/0d7PbftTj/d8PbG6Ur1Wjj0PwAAABQo0/+7RP0/rP9VjRu1br9J33SlGhsO/Q8AAAAFyvT/rlH/P9Zitz++nfRM5zbpSjUuHPofAAAACpTp/3ZR/z8+46SrFyx+wYsD05Xq9XDofwAAAChQpv93i/r/iQPuPnGpkz/+/vJ0pXojHPofAAAACpTp/92j/n9yt9v2OHT4qouvk65Ub4ZD/wMAAECBMv2/R9T/Ty048v6HH+y587B0pRofDv0PAAAABcr0/55R/w+/fsHeZ3Rrd9dS6Uo1IRz6HwAAAAqU6f+9ov5/utXWQwevNP231dOV6q1w6H8AAAAoUKb/9476/5n1ate9/nrLlZ5LV6q3w6H/AQAAoECZ/t8n6v//3Pnqadt88fNJd6Qr1cRw6H8AAAAoUKb/9436/9ntF7v8rlqra7ZLV6p3wqH/AQAAoECZ/m8f9f9zvUYd2/G4O99tma5U74ZD/wMAAECBMv2/X9T/I/rP23WxkV1aX5euVO+FQ/8DAABAgTL93yHq/+dbbH/3b/eM6b5IulJNCof+BwAAgAJl+n//qP9f2PutD/e9rLptSLpSvR8O/Q8AAAAFyvT/AVH/v/jz4m1GrvXI24+nK9UH4dD/AAAAUKBM/x8Y9f9LUzdvNGN0101WSFeqD8Oh/wEAAKBAmf7vGPX/yC6/zV51vQGdh6Yr1Ufh0P8AAABQoEz/HxT1/8uLTP2r/dxOLy6RrlQfh0P/AwAAQIEy/X9w1P+jRq6z9kuD5n6/ZrpSfRIO/Q8AAAAFyvT/IVH/j3541R2m79Z28ZHpSjU5HPofAAAACpTp/05R/49Z/vNPVzv0/p1bpyvVp+HQ/wAAAFCgTP8fGvX/Kydc0vrTq4+/66Z0pfosHPofAAAACpTp/8Oi/n/1ixHvbDr1jd+uSVeqz8Oh/wEAAKBAmf4/POr/1968/OeL2y65UrN0pfoiHPofAAAACpTp/yOi/h979u4rXPv6JcuNS1eqL8Oh/wEAAKBAmf7vHPX/uPeunrvCSi/+cmq6Uk0Jh/4HAACAAmX6/8io/18/ZZfVp3Rb8f5L05Xqq3DofwAAAChQpv+7RP3/xqUXbvP0g++2+yJdqb4Oh/4HAACAAmX6/6io/98c+9JHuw/vsHTHdKWaGg79DwAAAAXK9P/RUf+P7z3z9oVP7vPDL+lKNS0c+h8AAAAKlOn/Y6L+n7BZ88vmLN7k2W/Sleqfn+l/AAAAKFCm/4+N+v+tZiscde+kKYe1S1eqb8Oh/wEAAKBAmf4/Lur/t++Y9OL+rRu3/Dtdqb4Lh/4HAACAAmX6//io/yd2nj1qz58mv9E5Xam+D4f+BwAAgAJl+v+EqP/f+WazdZ/v2+2OfdKVano49D8AAAAUKNP/J0b9/+6sJaqfOg7v8X26Us0Ih/4HAACAAmX6/6So/9/bc/yXa+zXYssT0pXqh3DofwAAAChQpv9Pjvp/0nZnLPtxv+8+HJuuVD+GQ/8DAABAgTL9f0rU/+9fM/THDWftftXEdKWaGQ79DwAAAAXK9P+pUf9/0K/f+Ms26XXsOelK9VM46vT/gv/TTxkAAAD4L8r0/2lR/3/Y/KBN/tW283IHpyvVz+Hw+j8AAAAUKNP/p0f9/1HvAa+uMnXwL3PSleqXcOh/AAAAKFCm/7tG/f/xZvtvMPXq1vd/ma5Us8Kh/wEAAKBAmf4/I+r/T5qduujjh85qt0u6Uv0aDv0PAAAABcr0/5lR/0++45Gpu+525tJvpSvVb+HQ/wAAAFCgTP+fFfX/p38d1W/eoGE/nJ6uVL+HQ/8DAABAgTL9f3bU/5/tMeisxec2ePbidKWaHQ79DwAAAAXK9P85Uf9/3vHeAzqvN+qwj9OV6p/vBFixQYOG/83PGAAAAPivyvT/uVH/f/H9CU89NnqblselK9Uf4VixQYMvF/zf/pufOAAAAPD/Wqb/z4v6/8vp13z51Frz3hiVrlRzw+H9/wAAAFCgTP93i/p/yv47VTtddvAdH6Qr1Z/h0P8AAABQoEz/nx/1/1ftuq/b6J6be5yXrlTzwqH/AQAAoECZ/r8g6v+v/35h1LcjG275R7pSzQ+H/gcAAIACZfr/wqj/p/Zea5N1jhv34eHpSvVXOPQ/AAAAFCjT/xdF/T9ts4/Gv1M78ar26Ur1dzj0PwAAABQo0//do/7/ptlXP/b8YsixP6Ur1T/f9qf/AQAAoECZ/r846v9v72i27PlbtX9pRrpS++fQ/wAAAFCgTP9fEvX/d9t9M/WHGTcctVe6Ugu/o/8BAACgRJn+vzTq/++vabLo2tevs2SXdKVWhUP/AwAAQIEy/X9Z1P/T+zXeYJ9OX0+fn67U/vkAgP4HAACAAmX6v0fU/zOaf/rqs3tfdu9Z6Upt4XDofwAAAChQpv8vj/r/hyt33/SbASN3eTddqS0SDv0PAAAABcr0/xVR///Y9vIJK81efuVX05XaouHQ/wAAAFCgTP9fGfX/zI1G/LDzhhPnnJSu1BYLh/4HAACAAmX6/6qo/38acMkyT05o2fOzdKX2z+P1PwAAABQo0/9XR/3/80Fdznlo+enH90hXag3Dof8BAACgQJn+7xn1/y8zb73xsLPbbXZyulJbIhz6HwAAAAqU6f9rov6f9ec9Tyz9aM933khXakuGQ/8DAABAgTL93yvq/193Or7j34+veuvu6UptqXDofwAAAChQpv+vjfr/ty1ee2Hb0z++aGq6Uls6HPofAAAACpTp/+ui/v+9T4Mu45a6YONf05XaMuHQ/wAAAFCgTP/3jvp/9r+36XH7xGfGH5Cu1JYNh/4HAACAAmX6//qo/+c0mT/4zNe6vnR+ulJbLhz6HwAAAAqU6f8bov7/48odzv+98SNHTUpXasuHQ/8DAABAgTL9/6+o/+e2/ePmRbtXS45JV2orhEP/AwAAQIEy/d8n6v8/Nxr99IEPjJl+TLpS+6f79T8AAAAUKNP/faP+nzdg4U53P9/l3h/TlVqjcOh/AAAAKFCm/2+M+n/+73OarnbSnbt0SFdqK4VD/wMAAECBMv1/U9T/f3VoNWb6Yq1WPjRdqa0cjmz/L/b//ykDAAAA/0WZ/u8X9f/fRyz51UuTf57zZ7pSWyUcXv8HAACAAmX6v3/U/wumTGjQfrsle+6UrtRWDYf+BwAAgAJl+v/m/9n/tQYvn3Typl++cfxX6UpttXDofwAAAChQpv9vifp/oe539/708uM3+z1dqTUOh/4HAACAAmX6f0DU/9UZtz18bef73+mUrtRWD4f+BwAAgAJl+n9g1P+1SUfudfHObW+dnK7U1giH/gcAAIACZfr/1qj/F75rwQMvDZ570UXpSm3NcOh/AAAAKFCm/wdF/b9I463btf+r08ZnpCu1tcKh/wEAAKBAmf7/d9T/iy5TO2G1pgPGj09XamuHQ/8DAABAgTL9f1vU/4sNf7XX9IlTXm+SrvyPx+h/AAAAKFCm/2+P+n/xlRc7/aylmjS/Ml2pNQ2H/gcAAIACZfp/cNT/DR8Z1eeq0/tccku6UlsnHPofAAAACpTp/zui/l/i2XmPffh4h8FbpSu1dcOh/wEAAKBAmf6/M+r/Javt2zd79N1Jz6crtWbh0P8AAABQoEz/3xX1/1IdujY88ewV26yWrtTWC4f+BwAAgAJl+v/uqP+X/v3hGbcs/+Ixy6QrtfXDof8BAACgQJn+vyfq/2Wm3PTGqAmXXP5IulLbIBz6HwAAAAqU6f97o/5f9ohOzTffsNesldOVWvNw6H8AAAAoUKb/74v6f7lB3Q7acPbuKw5PV2otwqH/AQAAoECZ/r8/6v/l133qmY8HfLfHvelKbcNw6H8AAAAoUKb/H4j6f4Wtrhv4r71bPLBQulJrGQ79DwAAAAXK9P+QqP9X/FeHbpd1Gv7Tv6KHLxz+3Sj8q/8BAACgQJn+Hxr1f6O5P/77+eu7LbNpulLbOBz6HwAAAAqU6f8Ho/5fadeWF+45Y/LhbdOV2ibh0P8AAABQoEz/PxT1/8qdlj9sja0aP//vdKX2z3sC9D8AAAAUKNP/D0f9v8qPHz7/U9NRr7+YrtQ2C4f+BwAAgAJl+v+RqP9X7bDS/t3+atB87XSl1ioc+h8AAAAKlOn/R6P+X+339568ZvCwSxZPV2qbh0P/AwAAQIEy/T8s6v/GU77v/+7OZw5+KF2ptQ6H/gcAAIACZfr/saj/Vz9i07Obdp41af10pbZFOPQ/AAAAFCjT/49H/b9G208XG3R56zZXpyu1NuHQ/wAAAFCgTP8/EfX/mlc2nnbql4OP6Z+u1LYMh/4HAACAAmX6/8mo/9ca0OSVHbbrfHmrdKW2VTj0PwAAABQo0/9PRf2/9kbfrD9h8pBZ16crtbbh0P8AAABQoEz/D4/6v8mmi3R7Z7ETV2yRrtS2Dof+BwAAgAJl+v/pqP+b3jJm4Donjdtjh3Sltk049D8AAAAUKNP/z0T9v84Vc585//mGD9yertS2DYf+BwAAgAJl+v8/Uf+vu+2OB/V84OaflktXatuFQ/8DAABAgTL9/2zU/806DH5+p+4HL/NkulLbPhz6HwAAAAqU6f/nov5f7/cjDnuq8bzD709Xav/8nwD6HwAAAAqU6f8RUf+vP+WYC799bZvnF0tXajuGQ/8DAABAgTL9/3zU/xscMeTfjf6au8EN6Uptp3DofwAAAChQpv9fiPq/+dwTzu7TtO1rm6QrtZ3Dof8BAACgQJn+fzHq/xa73tv/0p0H9Ns6XantEg79DwAAAAXK9P9LUf9v2GnQky0Gdzr3tnSltms49D8AAAAUKNP/I6P+b/njUft/cvkb26ySrtTahUP/AwAAQIEy/f9y1P8b/bXX2ad3XnLy0+lKbbdw6H8AAAAoUKb/R0X9v/Eeffvfud39fe9JV2q7h0P/AwAAQIEy/T866v9NOj795JtfHn9GnZXaHuHQ/wAAAFCgTP+Pifp/0+/P3b/tYneuMSJdqe0ZDv0PAAAABcr0/ytR/2/W8oCNmkzu8teq6Uptr3DofwAAAChQpv9fjfq/1U0D33rv+Z8fXDZdqe0dDv0PAAAABcr0/2tR/2/e89Gfep3Uas9H05XaPuHQ/wAAAFCgTP+Pjfq/9Y6nLX1e90cWapqu1PYNh/4HAACAAmX6f1zU/1vs8/pXTzzQ9cur0pVa+3DofwAAAChQpv9fj/q/zS/LNtjltTHDb05XavuFQ/8DAABAgTL9/0bU/1tOa9N05cbVwVumK7UO4dD/AAAAUKBM/78Z9f9WR/06ZtpSH2+wfLpS2z8c+h8AAAAKlOn/8VH/t/2rVfMeE1d97al0pXZAOPQ/AAAAFCjT/xOi/t96jzlv3PD4M/3uS1dqB4ZD/wMAAECBMv3/VtT/23ScMOOj0y84d9F0pdYxHPofAAAACpTp/7ej/t/2+yUbtjx7+ja905XaQeHQ/wAAAFCgTP9PjPp/u95/9Oj/aMvJzdOV2sHh0P8AAABQoEz/vxP1//ab7TD46Ak9++6YrtQOCYf+BwAAgAJl+v/dqP93aLbwC1ss3+6MwelKrVM49D8AAAAUKNP/70X9v+Mdo7uMnT1yjQ3Sldqh4dD/AAAAUKBM/0+K+n+nV989uN+Gl/3VM12pHRYO/Q8AAAAFyvT/+1H/79yj0X+O2Xvig/3Sldrh4dD/AAAAUKBM/38Q9f8up20yoM2A5ffcLF2pHREO/Q8AAAAFyvT/h1H/7/rOd+e9dv0NC72QrtQ6h0P/AwAAQIEy/f9R1P/t7t/7tlqn9l+ula7UjgyH/gcAAIACZfr/46j/d1v7hot+3urr4Q3TlVqXcOh/AAAAKFCm/z+J+n/3JZ859L4Z6xz8cLpSOyoc+h8AAAAKlOn/yVH/7/HEWSM6NT54/z3SldrR4dD/AAAAUKBM/38a9f+eKz55wITXbn5iWrpSOyYc+h8AAAAKlOn/z6L+3+vB857a4YFtps1KV2rHhkP/AwAAQIEy/f951P97v7hfv1O7z1t4/3Sldlw49D8AAAAUKNP/X0T9v89i15416KQT23+artSOD4f+BwAAgAJl+v/LqP/33fujLSY/P+SRy9KV2gnh0P8AAABQoEz/T4n6v/3Pa33QfHLDP05JV2onhkP/AwAAQIEy/f9V1P/7TW0255LFxq32ZrpSOykc+h8AAAAKlOn/r6P+79Dlq5X6ftn6tLPTldrJ4dD/AAAAUKBM/0+N+n//218+ZeB2s3q/l67U/vlMgP4HAACAAmX6f1rU/wesv+j1x3fu/Pkr6Urt1HDofwAAAChQpv+/ifr/wM23e2izywfveGK6UjstHPofAAAACpTp/2+j/u947Z97jhnc4Pzp6Urt9HDofwAAAChQpv+/i/r/oPmHDll051ED90xXal3Dof8BAACgQJn+/z7q/4N3v2O335ueOeaodKV2Rjj0PwAAABQo0//To/4/5MD7jr/7r2Hr/JWu1M4Mh/4HAACAAmX6f0bU/52+O/aaA2d02/+TdKV2Vjj0PwAAABQo0/8/RP1/6N53dR231fAnLkxXameHQ/8DAABAgTL9/2PU/4f9fGLfbTs1nnZmulI7Jxz6HwAAAAqU6f+ZUf8fPrXzsDOvn7zwhHSldm449D8AAAAUKNP/P0X9f0SXf+97+4Dd2++crtTOC4f+BwAAgAJl+v/nqP87b3/KNs327vXI1+lKrVs49D8AAAAUKNP/v0T9f2Svxz76cMMWf/yWrtTOD4f+BwAAgAJl+n9W1P9d+t8y96rZ3612SLpSuyAc+h8AAAAKlOn/X6P+P6pFx9XPWn7F035IV2r/fCeg/gcAAIACZfr/t6j/j97w8T1Pn/Bu7/3SldpF4dD/AAAAUKBM//8e9f8xN57/0J2PXvL5YelKrXs49D8AAAAUKNP/s6P+P/bqfa9/8+wXd5yXrtQuDof+BwAAgAJl+n9O1P/H7dD7lLanNzn/gnSldkk49D8AAAAUKNP/f0T9f/zeza/56/EpA99PV2qXhkP/AwAAQIEy/T836v8Tfp55/DITO4wZna7ULguH/gcAAIACZfr/z6j/T5w6abfDl+qzztHpSq1HOPQ/AAAAFCjT//Oi/j+pywpDHhwy7s9J6Urt8nDofwAAAChQpv/nR/1/8vyJ+7a+uOHq56crtSvCof8BAACgQJn+/yvq/1N2X3nYy6sP6XBMulK7Mhz6HwAAAAqU6f+/o/4/9cCN+t489sRhY9KV2lXh0P8AAABQoEz/L4j6/7Tvpnc96ZN533ZIV2pXh0P/AwAAQIH+9/1fNYj6//Shsw8/YtFtFv0xXan1DIf+BwAAgAJl+n+hqP+7rrDZs0NPvPnAP9OV2jXh0P8AAABQoEz/V1H/n7HoEoPmjzj4qUPTlVqvcOh/AAAAKFCm/2tR/5/5wviLlz1y2Kiv0pXateHQ/wAAAFCgTP8vHPX/WZfNXGyVK85sslO6UrsuHPofAAAACpTp/0Wi/j/7lebTpk4ZdV6ndKXWOxz6HwAAAAqU6f9Fo/4/Z+IKrzy+fYNbfk9XateHQ/8DAABAgTL9v1jU/+eeOmn9XZsM/vSidKV2Qzj0PwAAABQo0/+LR/1/3lrnv37N/M7bT05Xav8Kh/4HAACAAmX6v2HU/93ue7xlt9tnnTI+Xan1CYf+BwAAgAJl+n+JqP/Pf7z3Ek13an3tGelKrW849D8AAAAUKNP/S0b9f8ES+3737iHf/blXulK7MRz6HwAAAAqU6f+lov6/cGif2p69W6w+I12p3RQO/Q8AAAAFyvT/0lH/X7TCnlOen96rw/x0pdYvHPofAAAACpTp/2Wi/u++6Dkv/7Tl7sO6pCu1/uHQ/wAAAFCgTP8vG/X/xS8MX2eNlpO/fTddqd0cDv0PAAAABcr0/3JR/1/yxR4H3Ten8aJnpSu1W8Kh/wEAAKBAmf5fPur/S0+44plOA4cfeFK6UhsQDv0PAAAABcr0/wpR/1929vMDa/t0e+rVdKU2MBz6HwAAAAqU6f8Vo/7v8eal3X5+pM+oHulK7dZw6H8AAAAoUKb/G0X9f3nT69/a6qwOTT5LV2qDwqH/AQAAoECZ/l8p6v8rbmu/0f/F3p1HXz3+fd+n/dkRhShDyJwxmTOERKZMGcv8K1MyRUiIjMmUjClDIpEhM5HMGTJG5jKUIYQQId3ruq+j6zyudZz3eazfue5zreOPx+Of3r6r/Vr73+f3k71fWOLz3q+mK7Ubw6H/AQAAoECZ/l866v/zrjy9yaCJK197TLpSGxoO/Q8AAAAFyvT/MlH/n7/pAz92f3vcJ9PSldqwcOh/AAAAKFCm/5eN+v+C7ZZaYGSTs7beMV2p3RQO/Q8AAAAFyvT/clH/X/jXe1/sd/w7PTqnK7Wbw6H/AQAAoECZ/m8R9f9FP/74/IIPLDXgl3Sldks49D8AAAAUKNP/y0f9f/F+a68yq/0Rl6+UrtRuDYf+BwAAgAJl+n+FqP8H/P7dq8cMu+O4celKbXg49D8AAAAUKNP/K0b9f8nurdca+veim9+drtRuC4f+BwAAgAJl+r9l1P8Duy7T6M2VX/1w4XSlNiIc+h8AAAAKlOn/laL+v/TLt79rt/UBgy5IV2q3h0P/AwAAQIEy/b9y1P+X3df//n6fX9erVbpSuyMc+h8AAAAKlOn/VaL+v7zZTrtf3n/zNTZMV2ojw6H/AQAAoECZ/l816v8rFjj7uA8PmfPC1elK7c5w6H8AAAAoUKb/V4v6/8qxT16xztgGj66drtRGhUP/AwAAQIEy/b961P+D+gyZtdFRzx9wabpSuysc+h8AAAAKlOn/NaL+v+q5w5Z4tuHxtWHpSu3ucOh/AAAAKFCm/1tF/T948pEbXvvRPV9sk67URodD/wMAAECBMv2/ZtT/Vx83YtJREzYc/WC6UrsnHPofAAAACpTp/7Wi/r9m2QXbjVj+p12XSFdq94ZD/wMAAECBMv2/dtT/1942YcpeZx7acqF0pXZfOPQ/AAAAFCjT/+tE/X/do3PnVXfeMu+OdKV2fzj0PwAAABQo0//rRv1/feOtVvz9gR0uPy9dqY0Jh/4HAACAAmX6f72o/2+4b87s44+/8LiV05XaA+HQ/wAAAFCgTP+3jvp/SLNtm93cZN3N26YrtfnfCaD/AQAAoECZ/l8/6v8bF6hv+urbMz68Nl2pPRQO/Q8AAAAFyvR/m6j/h459/v0tJp4+aLl0pfZwOPQ/AAAAFCjT/xtE/T/sww2G91/i0V5Ppiu1R8Kh/wEAAKBAmf7fMOr/m7rP3v7kk5Zd4550pfZoOPQ/AAAAFCjT/xtF/X/z6RO7tbrnwxcWS1dqj4VD/wMAAECBMv2/8YLV/+n/W15f5Nz3Oq366MPpSu3xcOh/AAAAKFCm/zeJnv/f+sa3k165/ssDlk5Xak+EQ/8DAABAgTL9v2nU/8N7t9lwy993ry2YrtTGhkP/AwAAQIEy/b9Z1P+3Hd58iRPWveyLEelKbf53Auh/AAAAKFCm/9tG/T/io0mzbtqs6eg26UrtqXDofwAAAChQpv83j/r/9vt6rdhlxlu7Xp6u1MaFQ/8DAABAgTL9v0XU/3c0e2ze6IH9Wt6YrtSeDof+BwAAgAJl+n/LqP9HLnD5lHn7j5+3ebpSGx8O/Q8AAAAFyvT/VlH/3zm2U7vGx5/V/aF0pfZMOPQ/AAAAFCjT/+2i/h+17CXvX/fAuPOapiu1Z8Oh/wEAAKBAmf7fOur/u27bc9Mj315qcsN0pfZcOPQ/AAAAFCjT/9tE/X/3o6c227DJO21vT1dqz4dD/wMAAECBMv2/bdT/oxs/NPu5Jfbst1a6UnshHPofAAAACpTp//ZR/9+zwh3v9554xS0D05Xai+HQ/wAAAFCgTP9vF/X/vSO7b3rxPSu/dlO6UnspHPofAAAACpTp/w5R/9/3YNdmk076fJ1t05XahHDofwAAAChQpv+3j/r//oVvmb3y9S26XJiu1F4Oh/4HAACAAmX6f4eo/8e8Om7g5p0+fmLNdKX2Sjj0PwAAABQo0/8do/5/4KQzj3lt3VN/2CBdqb0aDv0PAAAABcr0/45R/z94xHa73PL7w40Hpyu118Kh/wEAAKBAmf7fKer/h6ZcPPq4GWt3bJmu1CaGQ/8DAABAgTL9v3PU/w/fvcYOd232ze1PpSu118Oh/wEAAKBAmf7fJer/R5b4cuSB++/40+h0pfZGOPQ/AAAAFCjT/7tG/f9o9eHFiw28uGmjdKX2Zjj0PwAAABQo0/+dov5/7OmVjpw77ODu66crtbfCof8BAACgQJn+3y3q/8dX+PSKo9vfdN5l6Urt7XDofwAAAChQpv93j/r/iZHLH3fNyhtPHpqu1N4Jh/4HAACAAmX6f4+o/8c+uMruz/w9q+0W6UptUjj0PwAAABQo0/97Rv3/5MJf37/x5yf2eyRdqb0bDv0PAAAABcr0/15R/z/Vs9mHl2593y3LpCu198Kh/wEAAKBAmf7vHPX/uLff2arPIQu89p+s1CaHQ/8DAABAgTL9v3fU/0+/+E2L9fo/u85t6Urt/XDofwAAAChQpv/3ifp//Dnr/zH1qC27LJuu1D4Ih/4HAACAAmX6f9+o/59ZfZtfBo7964mx6Urtw3DofwAAAChQpv/3i/r/2Zv/aHrGR/v9cG+6UvsoHPofAAAACpTp//2j/n9u4HMbtG54TePF05Xax+HQ/wAAAFCgTP8fEPX/8xtU70xZvlHH89OV2ifh0P8AAABQoEz/d4n6/4UdRm69/ISXb18lXal9Gg79DwAAAAXK9H/XqP9f/Ofwqd/cedRPm6UrtSnh0P8AAABQoEz/Hxj1/0szDvznqTPvbHpNulKbGg79DwAAAAXK9P9BUf9P2GvYCnsOfKtZn3Sl9lk49D8AAAAUKNP/B0f9//KsQ39/b/+mv32UrtQ+D4f+BwAAgAJl+v+QqP9f2fmG5q02Gz/89XSl9kU49D8AAAAUKNP/h0b9/+rBt21y8ox+7U9MV2pfhkP/AwAAQIEy/X9Y1P+vfXXE5P6/f9noy3SlNi0c+h8AAAAKlOn/w6P+nzh6k8HPr7vqN9ulK7Xp4dD/AAAAUKBM//8r6v/Xm846aYNOlz21f7pS+yoc+h8AAAAK9F/0f8MFFmjQLer/N+ovdz7i+t0P+TVdqX0dDv0PAAAABco8/+8e9f+b4xd76PqTHm2zR7pS+yYc+h8AAAAKlOn/I6L+f+vs9d688p7T3/g+Xal9Gw79DwAAAAXK9P+RUf+/PWFG67MmfnjjX+lKbUY49D8AAAAUKNP/R0X9/86ktxqvtcSyZ3ZNV2rfhUP/AwAAQIEy/X901P+Teiw98+MmF270XrpSm///BOh/AAAAKFCm/4+J+v/dFR9esOXbO0w6PV2p/RAO/Q8AAAAFyvR/j6j/37vz5C9/eGDGxYenK7WZ4dD/AAAAUKBM/x8b9f/kh3Z+7onj1z3quXSl9mM49D8AAAAUKNP/PaP+f7/RFSvveuZPzaanK7WfwqH/AQAAoECZ/j8u6v8PRu/22lt3bvjbTulK7edw6H8AAAAoUKb/j4/6/8OmA9debcItw/dKV2qzwqH/AQAAoECZ/j8h6v+P6mMWPn35Q9vPSldqv4RD/wMAAECBMv1/YtT/H48/bcYFDZ9v1C9dqf0aDv0PAAAABcr0/0lR/3/yyYXD2n3U4JtP0pXab+HQ/wAAAFCgTP/3ivr/06O27/fm2Hueei1dqc0Oh/4HAACAAmX6/+So/6ecfMZhQ486/pAe6Urt93DofwAAAChQpv9Pifp/6svjxx3T/7o2k9KV2h/h0P8AAABQoEz/9476/7PXDp7Z+5AD3uiVrtTmhEP/AwAAQIEy/X9q1P+f97qx8cVbz7nxqHSl9mc49D8AAAAUKNP/p0X9/8WRt7ae9PnmZ76QrtT+Cof+BwAAgAJl+v/0qP+/nHrUmyv/fcdGO6crtb/Dof8BAACgQJn+7xP1/7TRL6w8feUjJs1IV2pzw/H/1f9n9///8T0DAAAA/55M/58R9f/0pg2eW7r9qxfPTVdq/4TD838AAAAoUKb/+0b9/1V98y87DFv0qMPSldq8cPzv/p/3P/qWAQAAgH9Tpv/PjPr/6/H/LPjAH9PfXyRdqeYfnv8DAABAgTL9f1bU/9+s2G7GuquvvtmodKUKf0f/AwAAQIky/X921P/f3vnnwh/sMLDb+HSlahAO/Q8AAAAFyvR/v6j/Zzz0zNqX3dDp/BXTlaoWDv0PAAAABcr0/zlR/3/XqOFr51w4+dWr0pVq/gcA6H8AAAAoUKb/z436//sRw1ZZpesy626crlT1cOh/AAAAKFCm//tH/f/Dcgc+/84WT5yzerpSNQyH/gcAAIACZfr/vKj/ZzY5/IuLpve5+aJ0pVooHPofAAAACpTp//Oj/v/xsZELnNrg/O/bpSvV/NfrfwAAAChQpv8viPr/p1MvOOv4KR2a3JyuVI3Cof8BAACgQJn+vzDq/5/f7HDzzU9/3/WSdKVaJBz6HwAAAAqU6f+Lov6f9XGf8a92a/34uulKtWg49D8AAAAUKNP/F0f9/8u/nj5ki3PG/HxnulI1Dof+BwAAgAJl+n9A1P+/Nl/hwb9H9Fqinq5UTcKh/wEAAKBAmf6/5D/6/49593+01+LPT91hyXSlWiwc+h8AAAAKlOn/gdHz/9lPftbroJVa3jEmXakWD4f+BwAAgAJl+v/SqP9/X7DV1aMavfj+9elKtUQ49D8AAAAUKNP/l0X9/8eIaX02eq/abNN0pWoaDv0PAAAABcr0/+VR/89ZbtUbn33k7m6rpivV/M8E0P8AAABQoEz/XxH1/59Nln3y2h49zz83Xanmd7/+BwAAgAJl+v/KqP//emxK16N6z361cbpSNQuH/gcAAIACZfp/UNT/f7/bus2UUW3XvS9dqZqHQ/8DAABAgTL9f1XU/3NP+O711i8POeeJdKVaOhz6HwAAAAqU6f/BUf//0/ft789o1uXm5dOVaplw6H8AAAAoUKb/r476f94zyyw28JcR3w9PV6plw6H/AQAAoECZ/r/mP/q/WqDttAt/a9OtSS1dqZYLh/4HAACAAmX6/9qo/xe8fNWjG+45sWuzdKVqEQ79DwAAAAXK9P91Uf83GLLsjntf3eTxR9OVav5nAuh/AAAAKFCm/6+P+r+22pTbh18x6Oct05VqhXDofwAAAChQpv9viPq/OuCsTkfs3XmJG9KVasVw6H8AAAAoUKb/h0T9X/9h7F3XbzRvhyvTlaplOPQ/AAAAFCjT/zdG/d9wzrkDnp+5zR2t05VqpXDofwAAAChQpv+HRv2/0PY7HrvBSrvc+my6Us1/jf4HAACAAmX6f1jU/wt/fkH/u58fsF33dKVaJRz6HwAAAAqU6f+bov5vdFCH7l1HtGreO12pVg2H/gcAAIACZfr/5qj/F9mzT4cm53z96+R0pVotHPofAAAACpTp/1ui/l/0t6dv/adb33EHpivV6uHQ/wAAAFCgTP/fGvV/48dnTnvq6ScP/iNdqdYIh/4HAACAAmX6f3jU/00arNVwzynNF/4xXalahUP/AwAAQIEy/X9b1P+LLb3kmss3ePfb3dOVas1w6H8AAAAoUKb/R0T9v/g97774zfQ2Q39PV6q1wqH/AQAAoECZ/r896v8lTpj9xE9bzOy7X7pSrR0O/Q8AAAAFyvT/HVH/N313g4NqXduv3yFdqdYJh/4HAACAAmX6f2TU/0s+s0jfAy7s/+Zn6Uq1bjj0PwAAABQo0/93Rv2/VN+JN9x+wwoXHZeuVOuFQ/8DAABAgTL9Pyrq/2aLnXD6v3b49Og30pWqdTj0PwAAABQo0/93Rf3f/OFR1w5e/ZSNP0xXqvXDof8BAACgQJn+vzvq/6VvHfzwS388+M6Z6UrVJhz6HwAAAAqU6f/RUf8v02Lf/Ted2ePWg9OVaoNw6H8AAAAoUKb/74n6f9nHrxt3/0ajtvsnXak2DIf+BwAAgAJl+v/eqP+Xa7DXYQfv3bD5t+lKtVE49D8AAAAUKNP/90X932LpY/stfMWEXzulK9XG4dD/AAAAUKBM/98f9f/y99wz7K+rDxw3IV2pNgmH/gcAAIACZfp/TNT/K7x52Izt9xx68JHpSrVpOPQ/AAAAFCjT/w9E/b/iqUMWHtNm04VPTleqzcKh/wEAAKBAmf5/MOr/lv8asfa0X3799q10pWobDv0PAAAABcr0/0NR/6/08ZGvLdNs8aHHpivV5uHQ/wAAAFCgTP8/HPX/yh9cdMOiL7/R9+V0pdoiHPofAAAACpTp/0ei/l+lW/u+f4w6fP2p6Uq1ZTj0PwAAABQo0/+PRv2/6ml9D7qn9/A3z05Xqq3Cof8BAACgQJn+fyzq/9UmPvXEYT3aXfRzulK1C4f+BwAAgAJl+v/xqP9Xf7zl/jc+MvfofdKVautw6H8AAAAoUKb/n4j6f40GHzzc4719Nt4hXam2CYf+BwAAgAJl+n9s1P+tlv7i2q0bDX7nq3Sl2jYc+h8AAAAKlOn/J6P+X/Oe1U9/Y6POexyfrlTtw6H/AQAAoECZ/n8q6v+1Fvtq2L4zB93/ZrpSbRcO/Q8AAAAFyvT/uKj/13545X53XrHNXx+kK1WHcOh/AAAAKFCm/5+O+n+dW1sc9sve81r0TVeq7cOh/wEAAKBAmf4fH/X/ui0+GbfAnt32mZ2uVPO/E0D/AwAAQIEy/f9M1P/rLfLqsEevHvHgvulK1TEc+h8AAAAKlOn/Z6P+bz2mcb+OvzT5avt0pdoxHPofAAAACpTp/+ei/l//9s0Oa9pm4kKfpyvVTuHQ/wAAAFCgTP8/H/V/m5Y/jfvi5banHpSuVDuHQ/8DAABAgTL9/0LU/xt88s6zfzabfc2cdKXaJRz6HwAAAAqU6f8Xo/7f8KhmqzXq3eWZmelKtWs49D8AAAAUKNP/L0X9v9HJ6zc4ZNSQVXZLV6pO4dD/AAAAUKBM/0+I+n/jl7/57L5HqmOeSVeq+b8T0P8AAABQoEz/vxz1/yZP7bp4zx4vXtItXal2D4f+BwAAgAJl+v+VqP83bXjZDzc06vnpqelKtUc49D8AAAAUKNP/r0b9v9mSj06c+N7d7d5PV6o9w6H/AQAAoECZ/n8t6v+2o05af9vne+3xU7pS7RUO/Q8AAAAFyvT/xKj/N1/kwRfvWGnM/XunK1XncOh/AAAAKFCm/1+P+n+LMb3X3P+cln91TFeq+b8T0P8AAABQoEz/vxH1/5a379GwwYipLb5OV6p9wqH/AQAAoECZ/n8z6v+tWg6Y9vPTHfbpma5U+4ZD/wMAAECBMv3/VtT/7c4+c/Au3c5/8JV0pdovHPofAAAACpTp/7ej/t96wriTxjZo/dWUdKXaPxz6HwAAAAqU6f93ov7fZtLFnWdO+X6hs9KV6oBw6H8AAAAoUKb/J0X9v22P7R5acYtlTn0pXam6hEP/AwAAQIEy/f9u1P/tN+r8+M7TJ19zRLpSdQ2H/gcAAIACZfr/vaj/txtw/YFPXtjnmVPSlerAcOh/AAAAKFCm/ydH/d9h2L1n/tj1iVXeTleqg8Kh/wEAAKBAmf5/P+r/7Vv1HLLCDqsfc0i6Uh0cDv0PAAAABcr0/wdR/++w9yunfXjD9EvmpSvV/N8J6H8AAAAoUKb/P4z6v+M3i1+zzh+dPv0mXakODYf+BwAAgAJl+v+jqP93/HvTR/qtPrDdrulKdVg49D8AAAAUKNP/H0f9v9OOvxxw+XtztxiZrlSHh0P/AwAAQIEy/f9J1P87T9vwqWUatfugSleqf4VD/wMAAECBMv3/adT/uxz6+6HTegy+7D9p/KpbOPQ/AAAAFCjT/1Oi/t9119fPGfPIPsc/kK5U3cOh/wEAAKBAmf6fGvV/p58WvWn7UW+svnW6Uh0RDv0PAAAABcr0/2dR/+827qAPF+y9+Iu3pCvVkeHQ/wAAAFCgTP9/HvX/7gvdtNWsZsOvGpCuVEeFQ/8DAABAgTL9/0XU/3ssdWeLkS8fftI66Up1dDj0PwAAABQo0/9fRv2/513/+mO/NkMbDEpXqmPCof8BAACgQJn+nxb1/149t79g918O/HKjdKXqEQ79DwAAAAXK9P/0qP87v33hUU9f/etja6Qr1bHh0P8AAABQoEz/fxX1/94vjt9pxp6b7n9xulL1DIf+BwAAgAJl+v/rqP/3OeeMO5bbe9RKi6Yr1XHh0P8AAABQoEz/fxP1/76LfrzrJ1f0+OeudKU6Phz6HwAAAAqU6f9vo/7f74EVR7WZOeHup9OV6oRw6H8AAAAoUKb/Z0T9v/8da15y5kYNO62QrlQnhkP/AwAAQIEy/f9d1P8HrPR5zwGrf7rFVulKdVI49D8AAAAUKNP/30f932Xcaucu+ccKHwxJV6pe4dD/AAAAUKBM//8Q9X/XhaZ3+/yGBy+7Il2pTg6H/gcAAIACZfp/ZtT/By41dftHdjjl+PXSleqUcOh/AAAAKFCm/3+M+v+gu5YbvmPXmavfmq5UvcOh/wEAAKBAmf7/Ker/g1+d8f4/F7Z5sUG6Up0aDv0PAAAABcr0/89R/x9y0nqbNpne/6rm6Up1Wjj0PwAAABQo0/+zov4/9Iilm3Xdov1Jj6Ur1enh0P8AAABQoEz//xL1/2FT3pp995QnGzRJV6o+4dD/AAAAUKBM//8a9f/hn258x6MN+n55f7pSnREO/Q8AAAAFyvT/b1H//+vo33bq2O3dxx5PV6q+4dD/AAAAUKBM/8+O+r/bKW8e1fTp5vu3SFeqM8Oh/wEAAKBAmf7/Per/7q80uuCLEQNWui5dqc4Kh/4HAACAAmX6/4+o/48YN7rnmufs8s8m6Up1djj0PwAAABQo0/9zov4/cqHjL3l3pa/vXi1dqfqFQ/8DAABAgTL9/2fU/0ctdcCoc59v1al/ulKdEw79DwAAAAXK9P9fUf8ffddVu55yzOFXb5quVOeGQ/8DAABAgTL9/3fU/8csus/wbx8efvL16Uo1/98E6H8AAAAoUKb/50b93+OBa7dv8e7irc5NV6rzwqH/AQAAoECZ/v8n6v9j77i/2x4LvzFh1XSlOj8c+h8AAAAKlOn/eVH/91ypx7njmu9zxX3pSnVBOPQ/AAAAFOi/7v/aAlH/H3fg8E8avDL4xMbpSnVhOPQ/AAAAFCjT/wtG/X/8Z0dv8/Nd7bZaPl2pLgqH/gcAAIACZfq/QdT/J/x6yEp3nDr3oyfSlericOh/AAAAKFCm/2tR/5+4x9C5+w9uOKqWrlQDwqH/AQAAoECZ/q+i/j/psif677HHhF2GpyvVJeHQ/wAAAFCgTP/Xo/7vtdk53cet32PFR9OVamA49D8AAAAUKNP/DaP+P3nVjh2+nTXq72bpSnVpOPQ/AAAAFCjT/wtF/X/KDeff2uLHTR+5IV2pLguH/gcAAIACZfp/4aj/e3+/yp5TN/513y3TlerycOh/AAAAKFCm/xtF/X/q/l/fu94+By7QOl2prgiH/gcAAIACZfp/kaj/T+vw6WV9rhz6+ZXpSjX/Z/ofAAAACpTp/0Wj/j/9j+VPuHRI+6tHpSvVoHDofwAAAChQpv8bR/3f58APL2zasf/Ji6Qr1VXh0P8AAABQoEz/N4n6/4zPVjr6izXatFoxXakGh0P/AwAAQIEy/b9Y1P99f11jx0fnzJwwPl2prg6H/gcAAIACZfp/8aj/z9zjy9s7Tjvlio3TleqacOh/AAAAKFCm/5eI+v+s1ku8M3fzB0+8Kl2prg2H/gcAAIACZfq/adT/Z18/eYPFuqyw1UXpSnVdOPQ/AAAAFCjT/0tG/d/v/O+bHnjBpx+tnq5U14dD/wMAAECBMv2/VNT/52yxzi93dW816uZ0pbohHPofAAAACpTp/2ZR/5876ZOdTxj/9S7t0pVqSDj0PwAAABQo0//No/7v36PF3TdN3WXFddOV6sZw6H8AAAAoUKb/l476/7yzV770ldqAvy9JV6qh4dD/AAAAUKBM/y8T9f/5E77qsWXL5o/U05VqWDj0PwAAABQo0//LRv1/wUM7XDTvuXf3vTNdqW4Kh/4HAACAAmX6f7mo/y9sdN4RjW/ru8CYdKWa/50A+h8AAAAKlOn/FlH/X7Ti4x279Hvy8yXTleqWcOh/AAAAKFCm/5eP+v/iO/vdOfrKidP+SVeqW8Oh/wEAAKBAmf5fIer/AfWndttwnyb1g9OVang49D8AAAAUKNP/K0b9f8n4vvc9t/GIzp3Sleq2cOh/AAAAKFCm/1tG/T9wdPsrr/ux25hv05VqRDj0PwAAABQo0/8rRf1/adOLjj9y1rw5R6Yr1e3h0P8AAABQoEz/rxz1/2UHT157zfW3WXZCulLdEQ79DwAAAAXK9P8qUf9f/tUSr727x6Dd3kpXqpHh0P8AAABQoEz/rxr1/xWz1plx7uDO956crlR3hkP/AwAAQIEy/b9a1P9X7vz9wqecevfUl9OValQ49D8AAAAUKNP/q0f9P2jgG7173tVzm2PTlequcOh/AAAAKFCm/9eI+v+qDRa+7oZXXjz27HSlujsc+h8AAAAKlOn/VlH/D159o8cmNq8unZquVKPDof8BAACgQJn+XzPq/6tv/nW/bRce8tw+6Up1Tzj0PwAAABQo0/9rRf1/zYz9x/75bpfVfk5XqnvDof8BAACgQJn+Xzvq/2v3GtSl0cOzT/8qXanuC8f/6f+G/3NvGQAAAPg3Zfp/naj/r9vh7jMOOabtdTukK9X94fD8HwAAAAqU6f91o/6//p/jht7X7/tp3dOVakw49D8AAAAUKNP/60X9f8PB9520yW2t68+mK9UD4dD/AAAAUKBM/7eO+n/IV8cMnvDc+Z0npyvVg+HQ/wAAAFCgTP+vH/X/jbP2fujqlh3G9E5XqofCof8BAACgQJn+bxP1/9Cdr+l8eG3qnD/SlerhcOh/AAAAKFCm/zeI+n/Yukev+cHUlssemK5Uj4RD/wMAAECBMv2/YdT/N101/MV1x4/Zbfd0pXo0HPofAAAACpTp/42i/r/5wqHTzune694f05XqsXDofwAAAChQpv83jvr/lm0PaXjZBQOn7peuVI+HQ/8DAABAgTL9v0nU/7e2e3q/QV06bfN7ulI9EQ79DwAAAAXK9P+mUf8Pv6jPY903n37sZ+lKNTYc+h8AAAAKlOn/zaL+v21wh+vaTlv90g7pSvVkOPQ/AAAAFCjT/22j/h+x1gW9X5jzxHNvpCvVU+HQ/wAAAFCgTP9vHvX/7Qe3GrrgGn1WOy5dqcaFQ/8DAABAgTL9v0XU/3d89dkZszpOPv3MdKV6Ohz6HwAAAAqU6f8to/4fOeujLiOHLHPdh+lKNT4c+h8AAAAKlOn/raL+v3PnFcbud9u7i+ydrlTPhEP/AwAAQIEy/d8u6v9RM6Z0frNf8+9+SleqZ8Oh/wEAAKBAmf7fOur/u/Za9qF2LZ8c/3W6Uj0XDv0PAAAABcr0/zZR/9+9w6qDj3mu76Ed05Xq+XDofwAAAChQpv+3jfp/9D/TTho69etlXklXqhf+958L/U+/XQAAAOC/IdP/7aP+v2fmrM6ta61m90xXqhfD4fk/AAAAFCjT/9tF/X/vvps8NKX7gNvOSleql8Kh/wEAAKBAmf7vEPX/fe0XGzxw/C7bT0lXqgnh0P8AAABQoEz/bx/1//1/vnzSGV0e3PCIdKV6ORz6HwAAAAqU6f8dov4fs/mMxv+64JS3XkpXqvmfCaj/AQAAoECZ/u8Y9f8D5603c/C0Ty94O12pXg2H/gcAAIACZfp/x6j/H7xu6Tdf2nyFI09JV6rXwqH/AQAAoECZ/t8p6v+H1nur9aZr9F9vXrpSTQyH/gcAAIACZfp/56j/H+5y8nM/zWn/+iHpSvV6OPQ/AAAAFCjT/7tE/f/IFw+vXBsyc8iu6Ur1Rjj0PwAAABQo0/+7Rv3/6OwrFjygY5s+36Qr1Zvh0P8AAABQoEz/d4r6/7Hddv7y9n1+XeTNdKV6Kxz6HwAAAAqU6f/dov5/fObAhbe5ctPvjk9XqvnfCaj/AQAAoECZ/t896v8n9t1txus/Dh3fN12p3gmH/gcAAIACZfp/j6j/x7Y/7bUhGx946AfpSjUpHPofAAAACpTp/z2j/n/yzzFrH7v+hGX2TVeqd8Oh/wEAAKBAmf7fK+r/p4Zsf9g7sxrOnp2uVO+FQ/8DAABAgTL93znq/3GrXThulcGjbvs8Xakmh0P/AwAAQIEy/b931P9Ptx0/7NQ9emy/fbpSvR8O/Q8AAAAFyvT/PlH/j7/8jH4X3TV4wznpSjX/MwH1PwAAABQo0//7Rv3/zOQep046dZ+3DkpXqg/Dof8BAACgQJn+3y/q/2ePu//6lZvPvWC3dKX6KBz6HwAAAAqU6f/9o/5/rs+1j/Z+pd2RM9OV6uNw6H8AAAAoUKb/D4j6//nn9tn34neHr9ctXak+CYf+BwAAgAJl+r9L1P8vPPrzkx0WPvz1Z9KV6tNw6H8AAAAoUKb/u0b9/2Ljtl0fOOaNIe+nK9WUcOh/AAAAKFCm/w+M+v+lZZv0mf7w4n1OTVeqqeHQ/wAAAFCgTP8fFPX/hNteu3Hpjn3OHpKuVJ+FQ/8DAABAgTL9f3DU/y8v0KjXZUOeGLZVulJ9Hg79DwAAAAXK9P8hUf+/MvbNq8+Zs8zL66Ur1Rfh0P8AAABQoEz/Hxr1/6v3/fbgumtMXvuKdKX6Mhz6HwAAAAqU6f/D/nf///a/Gv+1Zhvv9cHmnQ5vkK5U08Kh/wEAAKBAmf4/PHr+P7Fr92Y3ThvY/9Z0pZoeDv0PAAAABcr0/7+i/n/9yztm97hg9fceS1eqr8Kh/wEAAKBAmf7vFvX/G7/f8v7WXaZv0jxdqb4Oh/4HAACAAmX6v3vU/2/u3nXTN8a33PH+dKX6Jhz6HwAAAAqU6f8jov5/68ozd5ncfeqdTdKV6ttw6H8AAAAoUKb/j4z6/+1Nx41eo9brlxbpSjUjHPofAAAACpTp/6Oi/n9nlYsH9po6ZsnH05Xqu3DofwAAAChQpv+Pjvp/0tDtjjnvudYHbZKuVN+HQ/8DAABAgTL9f0zU/+/++OXFO7X8fux16Ur1Qzj0PwAAABQo0/89ov5/b781jny4X4eZ/dOVamY49D8AAAAUKNP/x0b9P3m7lXb47LbzF18tXal+DIf+BwAAgAJl+r9n1P/v//XhyKUe7nJ2la5UP4VD/wMAAECBMv1/XNT/H3RdfvdLjhkybGS6Uv0cjn+z/8/577xlAAAA4N+U6f/jo/7/8MtP7++7cNuXH0hXqlnh8PwfAAAACpTp/xOi/v/o96+vWP/d2Wv/J41f/RIO/Q8AAAAFyvT/iVH/f7z7Ksd9+krPw29JV6pfw6H/AQAAoECZ/j8p6v9P1n+nxZHN7+6/dbpS/RYO/Q8AAAAFyvR/r6j/P72m2R/XnVq9t066Us0Oh/4HAACAAmX6/+So/6ecu/6Hz9314iYD0pXq93DofwAAAChQpv9Pifp/6pbfbLXhHtvsuFG6Uv0RDv0PAAAABcr0f++o/z/bYtFjWg+ed+egdKWaEw79DwAAAAXK9P+pUf9/fv7rA6fM6vzLxelK9Wc49D8AAAAUKNP/p0X9/8X1v48euP6gJddIV6q/wqH/AQAAoECZ/j896v8vW2+4yxkbNznornSl+jsc+h8AAAAKlOn/PlH/T+t69cinfpw4dtF0pZobDv0PAAAABcr0/xlR/0//cr8d9ryy28wV0pXqn3DofwAAAChQpv/7Rv3/1e8nHrn8PiMWfzpdqeaFQ/8DAABAgTL9f2bU/1/vftfF3zy5y6Sx6Up9/qH/AQAAoECZ/j8r6v9vfux53MlHD9ho2XSlHv6O/gcAAIASZfr/7Kj/v93v3iv6L9TqqMXTlXqDcPy7/b/wf+MtAwAAAP+mTP/3i/p/xnbX3//ex19ffG+6Uq+Fw/N/AAAAKFCm/8+J+v+7vzrv3uqlvm+skq7Uq3DofwAAAChQpv/Pjfr/+86v3dmnxZNtzk9X6vM/AFD/AwAAQIEy/d8/6v8fvmvS8dK+zc+8Jl2pNwyH/gcAAIACZfr/vKj/Z85re8TUke/euFm6Ul8oHPofAAAACpTp//Oj/v+x488Xrbddm28uS1fq81+v/wEAAKBAmf6/IOr/ny6e9OcmN81stH66Um8UDv0PAAAABcr0/4VR//+8dfNlJ8xtf8gW6Up9kXDofwAAAChQpv8vivp/1tpttrh6lf5PDU1X6ouGQ/8DAABAgTL9f3HU/79c/e3Hh7db4bdl0pV643DofwAAAChQpv8HRP3/69edNrnjs0+bPZKu1JuEQ/8DAABAgTL9f0nU/78dcvnk/c89pf1t6Up9sXDofwAAAChQpv8HRv0/e5fHfm9w8IPD/5OV+uLh0P8AAABQoEz/Xxr1/++/9Gr+8649Jq2ZrtSXCIf+BwAAgAJl+v+yqP//6PzQPz2vG7XRhelKvWk49D8AAAAUKNP/l0f9P+e7U1e4YXbDowanK/Ulw6H/AQAAoECZ/r8i6v8/5+259cR1Jly8QbpSn9/9+h8AAAAKlOn/K6P+/6vjJVO3bXvgG0+lK/Vm4dD/AAAAUKBM/w+K+v/vVn3vuvi7oW1apiv15uHQ/wAAAFCgTP9fFfX/3GFPdep96aZnNkpX6kuHQ/8DAABAgTL9Pzjq/38GXHTsygf8euPodKW+TDj0PwAAABQo0/9XR/0/b6P2AyaNWfybpulKfdlw6H8AAAAoUKb/r/mP/q8vsNSMzx447o1GD6Ur9eXCof8BAACgQJn+vzbq/wXvWq9Bh8aHH3J7ulJvEQ79DwAAAAXK9P91Uf83GLf0aku/NfyphulKfflw6H8AAAAoUKb/r4/6v7bQW89Of73dbwPTlfoK4dD/AAAAUKBM/98Q9X91ysnrr9x0brO10pX6iuHQ/wAAAFCgTP8Pifq//srDEyf12qf9tulKvWU49D8AAAAUKNP/N0b93/DTK364+N7Bw29KV+orhUP/AwAAQIEy/T806v+Fjt558d4HT7+9V7pSn/8a/Q8AAAAFyvT/sKj/F35x4LSZ567ecVK6Ul8lHPofAAAACpTp/5ui/m90zm4NV/xsYNMX0pX6quHQ/wAAAFCgTP/fHPX/Ij1PW3OXdp1+Oipdqa8WDv0PAAAABcr0/y1R/y/69pgXx64y+YkZ6Up99XDofwAAAChQpv9vjfq/8bDP+v8xd5kuO6cr9TXCof8BAACgQP/R/w3CT/6v/h8e9X+TVq26L3rTE40PS1fqrcKh/wEAAKBAmef/t0X9v9hGK3Q4bLs+P8xNV+prhkP/AwAAQIEy/T8i6v/FB3x06z0jz79lp3SlvlY49D8AAAAUKNP/t0f9v8Suf3zycN8O/aanK/W1w6H/AQAAoECZ/r8j6v+mP22zzU4tvl9nVrpSXycc+h8AAAAKlOn/kVH/LzmtWmmpl1q/tle6Ul83HPofAAAACpTp/zuj/l/q0OfmfvbxmPM+SVfq64VD/wMAAECBMv0/Kur/ZuscvuQaC/Xq3i9dqbcOh/4HAACAAmX6/66o/5sPGvnT5KOntu2RrtTXD4f+BwAAgAJl+v/uqP+XvmDY2+c92XLya+lKvU049D8AAAAUKNP/o6P+X2abAzfude+Lt3+frtQ3CIf+BwAAgAJl+v+eqP+XHXbDB9/1qjruka7UNwyH/gcAAIACZfr/3qj/l2t16JbLNr27add0pb5ROPQ/AAAAFCjT//dF/d9ioyOW3+31nj/9la7UNw6H/gcAAIACZfr//qj/lx9w25zxb81+4vR0pb5JOPQ/AAAAFCjT/2Oi/l/hu85XLtS4bZf30pX6puHQ/wAAAFCgTP8/EPX/ip2vP/7X44Y0fi5dqW8WDv0PAAAABcr0/4NR/7fseO9ut47p8sPh6Uq9bTj0PwAAABQo0/8PRf2/0rye9+1zwIhbPkpX6puHQ/8DAABAgTL9/3DU/yv/PWDunpd269cnXalvEQ79DwAAAAXK9P8jUf+vsuMeKz313cR1TkxX6luGQ/8DAABAgTL9/2jU/6vu3Xubb9o2ee31dKW+VTj0PwAAABQo0/+PRf2/2jcPfrL8OoPO2y5dqbcLh/4HAACAAmX6//Go/1cftsTGU2Z37v5lulLfOhz6HwAAAAqU6f8nov5fo9Xkt1tfN6/tr+lKfZtw6H8AAAAoUKb/x0b932qj7386Y9dtJu+frtS3DYf+BwAAgAJl+v/JqP/XHLDOkgN7zd3103Sl3j4c+h8AAAAKlOn/p6L+X2udb+YscW+70eekK/X5nwmo/wEAAKBAmf4fF/X/2oPWX/7L1wfPOyZdqXcIh/4HAACAAmX6/+mo/9e5oNmWjzXdp+Wr6Up9+3DofwAAAChQpv/HR/2/7jbvfLBD4zcO2DFdqe8QDv0PAAAABcr0/zNR/6+3/gtzZr21+KPT0pV6x3DofwAAAChQpv+fjfq/9TUNll9wzPAvfklX6vP/TYD+BwAAgAJl+v+5qP/XP3fzLfc77vBa53SlvlM49D8AAAAUKNP/z0f932bLfz4YeenQXt+lK/Wdw6H/AQAAoECZ/n8h6v8N/vjk9qcPOHDQLulKff7P9D8AAAAUKNP/L0b9v2GHFjvu3vbXFw5NV+q7hkP/AwAAQIEy/f9S1P8b7b/y0ct9t+kaf6cr9U7h0P8AAABQoEz/T4j6f+Pvv7pwxuxRx52UrtR3C4f+BwAAgAJl+v/lqP83uWGHY9us0+Pyd9KV+u7h0P8AAABQoEz/vxL1/6arnjfgk10nfPhiulLfIxz6HwAAAAqU6f9Xo/7fbLPH7xpwXcPNj05X6nuGQ/8DAABAgTL9/1rU/20v69fpzHM/3bV9ulLfKxz6HwAAAAqU6f+JUf9vvv5Tt35+8Aqjv0hX6p3Dof8BAACgQJn+fz3q/y2u6dthyXYPzvvtf/1X1/9rpb53OPQ/AAAAFCjT/29E/b/lue277/jZKS0PSFfq+4RD/wMAAECBMv3/ZtT/W215Uf9H5s484ON0pb5vOPQ/AAAAFCjT/29F/d+u66m/N1mlzaNnpCv1/cKh/wEAAKBAmf5/O+r/rb98qPk/2/X/4oR0pb5/OPQ/AAAAFCjT/+9E/b/N75dscvdN7WsT05X6/M8E0P8AAABQoEz/T4r6f9vd95zcte+TvU5LV+pdwqH/AQAAoECZ/n836v/2Sx/2aeORfQe9m67U538doP4HAACAAmX6/72o/7e7Z8i2815694Xn05X6geHQ/wAAAFCgTP9Pjvq/w+MjWo5u0XyNf6Ur9YPCof8BAACgQJn+fz/q/+0bHPl3l4UGHPdDulI/OBz6HwAAAAqU6f8Pov7f4bQJS9308S6X75mu1A8Jh/4HAACAAmX6/8Oo/ztOXPDnE578+sMu6Ur90HDofwAAAChQpv8/ivp/xw+2emvLo1tt/me6Uj8sHPofAAAACpTp/4+j/t+p29yNXrmu89ZLpyv1w8Oh/wEAAKBAmf7/JOr/nZ/Z9sN9dh30ycPpSn3+dwLofwAAAChQpv8/jfp/l75ztrp1nW0GjEhX6t3Cof8BAACgQJn+nxL1/64nPN/i19nzeiyYrtS7h0P/AwAAQIEy/T816v9O79b/WOi7bitfnq7UjwiH/gcAAIACZfr/s6j/dxuy31Md2454tk26Uj8yHPofAAAACpTp/8+j/t99tasPffSAJtdunq7UjwqH/gcAAIACZfr/i6j/92h71zlfXDqx943pSv3ocOh/AAAAKFCm/7+M+n/Py0+8qelxbRuunK7UjwmH/gcAAIACZfp/WtT/e+25++eNxsz++rx0pd4jHPofAAAACpTp/+lR/3f+7dLan291eejadKV+bDj0PwAAABQo0/9fRf2/9+cPrHpf4yF7t01X6j3/3z8W+h9/uwAAAMB/Q6b/v476f5+DTn/mkKbV8k+mK/XjwuH5PwAAABQo0//fRP2/b5v32tzw+ot/Lpeu1I8Ph/4HAACAAmX6/9uo//e7dqnXe97b877F0pX6CeHQ/wAAAFCgTP/PiPp///5rf79tr7v3vCddqZ8YDv0PAAAABcr0/3dR/x+w1Y+LTTy619aXpiv1k8Kh/wEAAKBAmf7/Pur/LkNaT9//yTGfrJ2u1HuFQ/8DAABAgTL9/0PU/11X+26hOz5uOWCbdKV+cjj0PwAAABQo0/8zo/4/sO3brX5eaGqPYelK/ZRw6H8AAAAoUKb/f4z6/6DLl3mhQYsOKy+RrtR7h0P/AwAAQIEy/f9T1P8Hz5z24NiXzn/2wXSlfmo49D8AAAAUKNP/P0f9f8i+q+61y8jW196RrtRPC4f+BwAAgAJl+n9W1P+Htl+214p9v+9dS1fqp4dD/wMAAECBMv3/S9T/h/055eqZNy3TcFy6Uu8TDv0PAAAABcr0/69R/x8+Z+tnZm03+euV0pX6GeHQ/wAAAFCgTP//FvX/v7b/a9UFV+nz0MLpSr1vOPQ/AAAAFCjT/7Oj/u92wLO1/eY+sffd6Ur9zHDofwAAAChQpv9/j/q/+w8LfT7ys9WXb5Wu1M8Kh/4HAACAAmX6/4+o/48Ycsdi3dtN//OCdKV+djj0PwAAABQo0/9zov4/crXu3w86uNN9V6cr9X7h0P8AAABQoEz//xn1/1Ftu77+wrkD99wwXamfEw79DwAAAAXK9P9fUf8fffktbdquO/H6C9OV+rnh0P8AAABQoEz//x31/zFtDnnh3t+bnLZmulLvHw79DwAAAAXK9P/cqP97XDu01aHXj1h1g3Slfl449D8AAAAUKNP//0T9f2z/4Qst0qnb84PTlfr54dD/AAAAUKBM/8+L+r/nVkdPn7P/vIEt05X6/O8E1P8AAABQoP+6/6sFov4/7qRJ9ecHbtPzqXSlPv8zAfU/AAAAFCjT/wtG/X/8q82/3mDGoG1Hpyv1i8Kh/wEAAKBAmf5vEPX/CVPavHTEZp2nNEpX6heHQ/8DAABAgTL9X4v6/8Qjvl39+rfvvuehdKU+IBz6HwAAAAqU6f8q6v+TRr7W5comPXdvmq7ULwmH/gcAAIACZfq/HvV/rxWajD3r+BeXa5iu1AeGQ/8DAABAgTL93zDq/5MXbjt0rQeqP25PV+qXhkP/AwAAQIEy/b9Q1P+nPPjzGR/fM+SBtdKV+mXh0P8AAABQoEz/Lxz1f++X9rmu5Uld9hqYrtQvD4f+BwAAgAJl+r9R1P+nnnVt7x+WmF3dlK7UrwiH/gcAAIACZfp/kaj/Tzvm/v2emNh2+rbpSv3KcOh/AAAAKFCm/xeN+v/0d3o8tutH31+/bLpSHxQO/Q8AAAAFyvR/46j/+5w0+uC3GrY+bWy6Ur8qHPofAAAACpTp/yZR/5/x6vFPr3bU+avem67UB4dD/wMAAECBMv2/WNT/facccMvpYzs8v3i6Ur86HPofAAAACpTp/8Wj/j/ziKvOvuDOqQPPT1fq14RD/wMAAECBMv2/RNT/Zy3UbdF2Z7bsuUq6Ur82HPofAAAACpTp/6ZR/5897vZv31x+zLabpSv168Kh/wEAAKBAmf5fMur/fnfd/PLQCb2mXJOu1K8Ph/4HAACAAmX6f6mo/89Zqss6x6w88J7105X6DeHQ/wAAAFCgTP83i/r/3Dn3XXX/3512vyxdqQ8Jh/4HAACAAmX6v3nU//23P+aUg/8f9v40+urx7///if3aUoaQIfM8ZCxDMpN5iEiGTEnGJGRWQmbyCQlFxopEZEiSZAihyBgqhE+mZEgS/yuH9T3OdZzrPNZ/rd+F48Ltdum59nrvx+rqvf3e79fAWavcla7U7gyH/gcAAIACZfp/xaj/L+/Qrt0Su673x/bpSu3f/xPQ/wAAAFCgTP+vFPX/FT/c+viCY0aPfCpdqQ0Mh/4HAACAAmX6f+Wo/6+8Y9vjdu59wcErpSu1QeHQ/wAAAFCgTP+vEvV/n3XnjH1r5geL/y8rtbvDof8BAACgQJn+bxb1/1XbvTHwjp1WmnVfulK7Jxz6HwAAAAqU6f9Vo/6/+sbGPU+bdPyMg9KV2uBw6H8AAAAoUKb/V4v6/5ot3r5tzrL3Lvp9ulK7Nxz6HwAAAAqU6f/Vo/6/9rYlzl/srGXaL0hXav9+J0D/AwAAQIEy/b9G1P/X9W5xeIfhb486Ml2p3R8O/Q8AAAAFyvT/mlH/X7/Dr6MeGHnowvfTldoD4dD/AAAAUKBM/68V9f8N5z0w5+uu/VY7P12pPRgO/Q8AAAAFyvT/2lH/3zip03JNl9pxn+PTldpD4dD/AAAAUKBM/68T9f9NHx3RcrcpC4e9lK7UhoRD/wMAAECBMv2/btT/fTvdPeWJbatpF6QrtaHh0P8AAABQoEz/rxf1/82Dn3/04dmvtf4kXakNC4f+BwAAgAJl+n/9qP//0+yitkded+qZb6UrtYfDof8BAACgQJn+3yDq/35L73rmUocP7dstXak9Eg79DwAAAAXK9P+GUf/fMuqqG/7ef5tXv0xXasPDof8BAACgQJn+3yjq/1tfXO/EHW7/dcPd0pXao+HQ/wAAAFCgTP9vHPX/bRd90XvivKPOOTxdqY0Ih/4HAACAAmX6f5Oo//uf+dHggc3v6vdrulJ7LBz6HwAAAAqU6f/mUf/fPnWN3bvttOuM99KV2uPh0P8AAABQoEz/bxr1/4DzPh3228zei3ZPV2ojw6H/AQAAoECLrrjIsv/zlf/R/5tF/X/HpGb7V723aN8lXak9EQ79DwAAAAXKfP6/edT/d3601mntjvlx1MvpSu3JcOh/AAAAKFCm/7eI+v+uTl9fc++u5yzcJ12pjQqH/gcAAIACZfp/y6j/By7a9O9VBj6x2ux0pfZUOPQ/AAAAFCjT/1tF/T9ozHurzf5rtX0Wpiu1p8Oh/wEAAKBAmf5vEfX/3Y/9d6cX1vps2HHpSu2ZcOh/AAAAKFCm/1tG/X9P0y2mH/jaBtNmpSu1Z8Oh/wEAAKBAmf7fOur/wStOuuGQVb9pvXe6UhsdDv0PAAAABcr0/zZR/987fMkz77t43zMPTldqz4VD/wMAAECBMv2/bdT/9z27Zdvfh1zTd266UhsTDv0PAAAABcr0/3ZR/9/f4PdHa881fbVnulJ7Phz6HwAAAAqU6f9WUf8/cN5hu7/YZeqGn6YrtbHh0P8AAABQoEz/bx/1/4OT+g1uWV10zpvpSu2FcOh/AAAAKFCm/1tH/f/QR0N7n/zJmH6npiu1ceHQ/wAAAFCgTP/vEPX/kE5nnnjrzAuW/iJdqb0YDv0PAAAABcr0/45R/w99cfg1S+80+qdd05Xa+HDofwAAAChQpv93ivp/2EWnnbbwmJXGdEhXai+FQ/8DAABAgTL9v3PU/w+fefD+w3p/cNRv6UptQjj0PwAAABQo0/+7RP3/yNT+w44auP/yF6YrtZfDof8BAACgQJn+3zXq/+EvX3bN97teN3daulJ7JRz6HwAAAAqU6f/dov5/tOdep6251noPTUpXaq+GQ/8DAABAgTL9v3vU/yNOu2T//f+atfeZ6UrttXDofwAAAChQpv/3iPr/scnPDXt21TW2mZqu1CaGQ/8DAABAgTL93ybq/8eXG/D+4NemTz0vXam9Hg79DwAAAAXK9P+eUf+PHHrsdocO6X7ZCelK7Y1w6H8AAAAoUKb/94r6/4nnO69Yv/jxEyakK7U3w6H/AQAAoECZ/t876v8nq/t+/bXLZhu1TVdq/z4TQP8DAABAgTL9v0/U/6POXmTVrZ77/vUf0pXaW+HQ/wAAAFCgTP/vG/X/UxNfnf/SJ7sP+jNdqb0dDv0PAAAABcr0/35R/z/96V8f9a+uuOSIdKX2Tjj0PwAAABQo0//7R/3/TJfWrU9a9oile6Urtcnh0P8AAABQoEz/HxD1/7Mv/zHln0l3/PRZulKbEg79DwAAAAXK9P+BUf+P7rlzy8bDtxvzRrpSezcc+h8AAAAKlOn/g6L+f+60xZc74qzfjzolXam9Fw79DwAAAAXK9H/bqP/HTH5pziNdT1/+q3SlNjUc+h8AAAAKlOn/g6P+f/7Jra5afuTDc/dKV2rvh0P/AwAAQIEy/X9I1P9jG87rPGPK4g8dkq7UPgiH/gcAAIACZfq/XdT/L6z+1p6jlnpl71/SldqH4dD/AAAAUKBM/x8a9f+4IY2G7D175232XWSRRe5b6n+s1D4Kh/4HAACAAmX6/7Co/1/8a9Xhy237z9Tv0pXax+HQ/wAAAFCgTP+3j/p//F6fHTTz8EMu+ytdqX0SDv0PAAAABcr0/+FR/7/U7ptuT1138wnHpiu1aeHQ/wAAAFCgTP93iPp/wrdr37jX7Utt9G66Uvs0HPofAAAACpTp/yOi/n954BWdrth/0utnpSu1z8Kh/wEAAKBAmf4/Mur/VzbY87KzmncadHK6Uvs8HPofAAAACpTp/6Oi/n+1Ra9715t3/yWvpCu16eHQ/wAAAFCgTP8fHfX/a9eM3uPDauqFG6crtRnh0P8AAABQoEz/d4z6f+ImFw898JOmA65PV2ozw6H/AQAAoECZ/j8m6v/Xbx673wvPjZk0MF2pfREO/Q8AAAAFyvT/sVH/v3Hl1afP7nLRZjunK7Uvw6H/AQAAoECZ/j8u6v83d97t2lUu/qbzE+lK7atw6H8AAAAoUKb/j4/6f9I5Td46esgGfZZNV2qzwqH/AQAAoECZ/j8h6v+3Xv9wi6GvXTOlnq7Uvg6H/gcAAIACZfq/U9T/b3/2w9J/rbrvlg+mK7VvwqH/AQAAoECZ/j8x6v93Tm7+/TJ/PbH7mulK7dtw6H8AAAAoUKb/O0f9P/nBhjevtNY5949NV2r/DYf+BwAAgAJl+v+kqP+nrPnO2V/t+tm8h9OV2uxw6H8AAAAoUKb/u0T9/26j3w59fOBqKy6RrtS+C4f+BwAAgAJl+v/kqP/fG9ly5B69ex93ZbpS+z4c+h8AAAAKlOn/U6L+n/rKf4696phdX9ggXan9EA79DwAAAAXK9P+pUf+/36vD8z12+nH2VulK7cdw6H8AAAAoUKb/T4v6/4PTuw5ae+YWjW5JV2o/hUP/AwAAQIEy/X961P8fTnmk17vzFv4zKl2pzQmH/gcAAIACZfr/jKj/Pzrn1Fv3ab7NgBXTldrP4dD/AAAAUKBM/3eN+v/j1x87b8z+d01aNF2pzQ2H/gcAAIACZfr/zKj/P/nstg4/3X7UZvenK7VfwqH/AQAAoECZ/u8W9f+0kw99arXrXuu8RbpS+zUc+h8AAAAKlOn/s6L+/3TxwRMeOLzqc2O6UvstHPofAAAACpTp/+5R/3/2Qpe1O2w7dMqd6Urt93DofwAAAChQpv/Pjvr/84c7LrLY7FO3bJWu1OaFQ/8DAABAgTL9f07U/9OXvfOLOUv12/3ydKX2Rzj0PwAAABQo0//nRv0/Y/kLR34/5dD710pXavPDof8BAACgQJn+7xH1/8xh4w5dc+TCedulK7U/w6H/AQAAoECZ/j8v6v8vxvY5e/+uO654W7pSWxAO/Q8AAAAFyvT/+VH/f1nf4+Znz7r3uFXSldpf4dD/AAAAUKBM/18Q9f9X58zsdenw418Yk67UFoZD/wMAAECBMv1/YdT/s17fcNBNk96ePTxdqf0dDv0PAAAABcr0/0VR/3/92erPf7LsMo2WTldq/4RD/wMAAECBMv1/cdT/35w87diNe439/LR0pfr30P8AAABQoEz/XxL1/7evrPLUk/dfssvEdKUKP6P/AQAAoESZ/r806v//9preYdcJ754+PV2pGoRD/wMAAECBMv3fM+r/2afPOm+FNZe/7tJ0pVosHPofAAAACpTp/15R/383Zd1bv2lw04Sf05Vq8XDofwAAAChQpv8vi/r/+4tH9xz9edt1Dk1Xqlo49D8AAAAUKNP/vaP+/2F8r4H7vTDzvDbpSvXvAwD0PwAAABQo0/+XR/3/4/t7jl2j01q3f52uVPVw6H8AAAAoUKb/r4j6/6duVxz3Q59pszqmK9W/79f/AAAAUKBM/18Z9f+cR+9d97cjmy3+d7pSNQyH/gcAAIACZfq/T9T/P6908vhq+1EH/zddqZYMh/4HAACAAmX6/6qo/+cudsyMdrN6jNw/XakahUP/AwAAQIEy/X911P+/jL6rwb1/fPvHa+lK1Tgc+h8AAAAKlOn/a6L+//Wt7X/ovN7Gq5yUrlRLhUP/AwAAQIEy/X9t1P+/nf/PMre3ufrAs9OVaulw6H8AAAAoUKb/r4v6//cTX9l8woC9hk9OV6plwqH/AQAAoECZ/r8+6v95Hy82acubBn0+L12plg2H/gcAAIACZfr/hqj//7h4/IYPt+u4S/t0pWoSDv0PAAAABcr0/41R/88fX3/lyBZzT989XamWC4f+BwAAgAJl+v+mqP//fH+nr5b6seV1M9KV6t/u1/8AAABQoEz/9436f0G3BdXfv4yYcEa6Uq0QDv0PAAAABcr0/81R///VeImz9tqi2zpvpytV03DofwAAAChQpv//E/X/wqff7vdU2/HnfZyuVCuGQ/8DAABAgTL93y/q/7/v+/XJmbcscvvF6Uq1Ujj0PwAAABQo0/+3RP3/z8otDlnu3AWzxqcr1crh0P8AAABQoEz/3/r/+r9a5NyDB1w8tPXiJ6Yr1Srh0P8AAABQoEz/3xb1/6Jv97/omom3HnxuulI1C4f+BwAAgAJl+r9/1P8NPhl+9KcrtB/5QbpSrRoO/Q8AAAAFyvT/7VH/L3b8aaO3aDjxj6PSlWq1cOh/AAAAKFCm/wdE/b/4ChMPn/1+w1X+SFeq1cOh/wEAAKBAmf6/I+r/2oilR63y1JADf0pXqjXCof8BAACgQJn+vzPq/+q5rW878NQuww9MV6o1w6H/AQAAoECZ/r8r6v/6InPPf2FAk2H3pivVv+/R/wAAAFCgTP8PjPp/ifu2HLhem8n7LJauVGuHQ/8DAABAgTL9Pyjq/4Yr/97zw/V6rrZCulKtEw79DwAAAAXK9P/dUf8v2XjScVf8MW7h0+lKtW449D8AAAAUKNP/90T93+jpJceeNWudUa3TlWq9cOh/AAAAKFCm/wdH/d94wVHzW2z/ZfsB6Uq1fjj0PwAAABQo0//3Rv2/1G4DVx1/5IGL9k1Xqg3Cof8BAACgQJn+vy/q/6XbP9T6tj43zNgsXak2DIf+BwAAgAJl+v/+qP+X+en4j7p0Or/f7elKtVE49D8AAAAUKNP/D0T9v+xmuz/Q84Wnz9kmXak2Dof+BwAAgAJl+v/BqP+b3H7lXjd+vvKG66Qr1Sbh0P8AAABQoEz/PxT1/3JXvHDyxw0+fvWydKVqHg79DwAAAAXK9P+QqP+X3/6CPpus2aZv43Sl2jQc+h8AAAAKlOn/oVH/r3DgJ6f9NKHPmSPSlerfZwLofwAAAChQpv+HRf3fdN5q16x2f/PWo9OVavNw6H8AAAAoUKb/H476f8UvNxi2T6/Z01ZNV6otwqH/AQAAoECZ/n8k6v+Vjpyx/5hTtxq2Y7pSbRkO/Q8AAAAFyvT/8Kj/V16wzuC1n5qzz93pSrVVOPQ/AAAAFCjT/49G/b/Kbl/t/u77x652bbpStQiH/gcAAIACZfp/RNT/zdp/fuJVDe9Z2DxdqVqGQ/8DAABAgTL9/1jU/6v+tHLvHis0GDUkXam2Dof+BwAAgAJl+v/xqP9Xu+G7eW9NnNC+lq5U24RD/wMAAECBMv0/Mur/1bfdrOnOQ7suuly6Um0bDv0PAAAABcr0/xNR/6+xzkpbn3bu8BmPpyvVduHQ/wAAAFCgTP8/GfX/mgOmfHDHLR36LZmuVK3Cof8BAACgQJn+HxX1/1p3tejTp23/c4amK9X24dD/AAAAUKBM/z8V9f/aa/968nlbtNpwXLpStQ6H/gcAAIACZfr/6aj/19nm7b3W+WX+q6unK9UO4dD/AAAAUKBM/z8T9f+6fZd4YMqPnfv+J12pdgyH/gcAAIACZfr/2aj/F1/w8P4rtHjwzJbpSrVTOPQ/AAAAFCjT/6Oj/l9/tzOGfdOuUev10pVq53DofwAAAChQpv+fi/p/g/aHX/PkTW9MuypdqXYJh/4HAACAAmX6f0zU/xv+dPNpuz7VcO+l0pVq13DofwAAAChQpv+fj/p/owPb9f7k1IkPPZauVLuFQ/8DAABAgTL9Pzbq/43n3Xrixg27zH02Xal2D4f+BwAAgAJl+v+FqP83+XLE7pe+P2T5ZulKtUc49D8AAAAUKNP/46L+b37kKYNvmtj6qP7pStUmHPofAAAACpTp/xej/t903569W62wYMzW6Uq1Zzj0PwAAABQo0//jo/7f7JdnT3zz3PY/rZuuVHuFQ/8DAABAgTL9/1LU/5t/c/nu9wy9dene6Uq1dzj0PwAAABQo0/8Tov7f4pg2g89o2+2SHdKVap9w6H8AAAAoUKb/X476f8t7unx67i0jBt2RrlT7hkP/AwAAQIEy/f9K1P9brT9456t/WeT1m9KVar9w6H8AAAAoUKb/X436v8VWd6753hbjN9o0Xan2D4f+BwAAgAJl+v+1qP9bXt9x4VotOp4wOF2pDgiH/gcAAIACZfp/YtT/W//z93Kzfhx0WYN0pTowHPofAAAACpTp/9ej/t9mz1ZzVryp5dSm6Up1UDj0PwAAABQo0/9vRP2/7SENpuzebu42z6QrVdtw6H8AAAAoUKb/34z6f7vvXm45ss3Ge9+crlQHh0P/AwAAQIEy/T8p6v9W+1YfNR/w7UMt0pXqkHDofwAAAChQpv/fivp/+19ebP3RH3vNXT9dqdqFQ/8DAABAgTL9/3bU/62/+XPVG9a7evmr05Xq0HDofwAAAChQpv/fifp/h2N2nN9r+2ZHNUpXqsPCof8BAACgQJn+nxz1/447v9P3tVnTxgxLV6r24dD/AAAAUKBM/0+J+n+nKxt23bpPj59eSFeqw8Oh/wEAAKBAmf5/N+r/nW9uecDxR45aerV0peoQDv0PAAAABcr0/3tR/++yyW8jbnmh7SUPpSvVEeHQ/wAAAFCgTP9Pjfp/1+6zHny1002DFk9XqiPDof8BAACgQJn+fz/q/93eXHfvbRqs9fr/0vjVUeHQ/wAAAFCgTP9/EPX/7tNX6XLC5zM3GpmuVEeHQ/8DAABAgTL9/2HU/3ucNP3KfhMuOWGndKXqGA79DwAAAAXK9P9HUf+3aXLp6R3WHHvZPelKdUw49D8AAAAUKNP/H0f9v+cjY659oNfyU69JV6pjw6H/AQAAoECZ/v8k6v+9xvUeOuf+d7fZJF2pjguH/gcAAIACZfp/WtT/e9f23m+xdg9u+Wq6Uh0fDv0PAAAABcr0/6dR/+8zpM+9d9zUeUrndKU6IRz6HwAAAAqU6f/Pov7fd/U99jjtxzf6nJOuVJ3Cof8BAACgQJn+/zzq//0aXthp5xaNOk9JV6oTw6H/AQAAoECZ/p8e9f/+T4677K0t+m92TLpS/fudAP0PAAAABcr0/4yo/w/4+6eX+/7SYdI/6Up1Ujj0PwAAABQo0/8zo/4/sM3GG1xyy/wB36YrVZdw6H8AAAAoUKb/v4j6/6CDl69v1LbVhfulK9XJ4dD/AAAAUKBM/38Z9X/b2e/PmjZ0QqM56Up1Sjj0PwAAABQo0/9fRf1/8Ebz7phwboPZ7dKV6tRw6H8AAAAoUKb/Z0X9f0i/rS7ecoXhL+yZrlSnhUP/AwAAQIH+7/7foP2Kvf69q3ZXNTqq88Sux32TrlSnh0P/AwAAQIEyn/9/E33+f+iObz17+/tzVjw9XanOCIf+BwAAgAJl+v/bqP8P26dbh3YNt5r3erpSdQ2H/gcAAIACZfr/v1H/t5877Kl7T73n/s/TlerMcOh/AAAAKFCm/2dH/X/417fc+ttTx+5+SbpSdQuH/gcAAIACZfr/u6j/O3Rsf151f58tj05XqrPCof8BAACgQJn+/z7q/yP+vn3QwF5tpsxPV6ru4dD/AAAAUKBM//8Q9f+RbQ7p1W3N2X1+TFeqs8Oh/wEAAKBAmf7/Mer/ow4+/dgdJjTvfEC6Up0TDv0PAAAABcr0/09R/x89+9HnJ37+9GYvpivVueHQ/wAAAFCgTP/Pifq/47XHvnFWg/MndUpXqh7h0P8AAABQoEz//xz1/zEtB2x0RaePB/RIV6rzwqH/AQAAoECZ/p8b9f+xG97X8MMXVr7ww3SlOj8c+h8AAAAKlOn/X6L+P25Q5+/WO/LLRl3TleqCcOh/AAAAKFCm/3+N+v/4u69+tlWfdWa/k65UF4ZD/wMAAECBMv3/W9T/J6y321FvzrrhhY/SleqicOh/AAAAKFCm/3+P+r/TlhdffM/2Bx53UbpSXRwO/Q8AAAAFyvT/vKj/T7xu7B1nrDd5xd/TleqScOh/AAAAKFCm//+I+r/z32ueN+yPJvMOS1eqS8Oh/wEAAKBAmf6fH/X/SW0+vvWoAePu3yNdqXqGQ/8DAABAgTL9/2fU/10O/vKppdv03H1mulL1Cof+BwAAgAJl+n9B1P8nz16/w8KfWt3ZPl2pLguH/gcAAIACZfr/r6j/T9nnm+dPbjn/4nnpStU7HPofAAAACpTp/4VR/586d+1jbz20wxYz0pXq8nDofwAAAChQpv//jvr/tK9X7fVi3/5v756uVFeEQ/8DAABAgTL9/0/U/6d3/GxQy36Nrn47XamuDIf+BwAAgAL93/1fWyTq/zNWaTr+hoPe6HJGulL1CYf+BwAAgAJl+n/RqP+73v/eur0279zi4nSluioc+h8AAAAKlOn/BlH/n/nMfxs0n/vgex+nK9XV4dD/AAAAUKBM/y8W9X+3pbaY8VHTY+89MV2prgmH/gcAAIACZfp/8aj/z3pnqYEvvn7PruPTleracOh/AAAAKFCm/2tR/3fv8WbPlsO2WuGDdKW6Lhz6HwAAAAqU6f8q6v+zT/j5uJN7zPnt3HSluj4c+h8AAAAKlOn/etT/50zbbuytp3R9/o90pbohHPofAAAACpTp/yWi/j/3sdvaHTJq+DFHpSvVjeHQ/wAAAFCgTP83jPq/R9NDH79vaoOGB6Yr1U3h0P8AAABQoEz/Lxn1/3mLnvqf35eY8O1P6UrVNxz6HwAAAAqU6f9GUf+fP+axc2prrHznxHSlujkc+h8AAAAKlOn/xlH/X7BK1wH3vPTxxaelK9V/wqH/AQAAoECZ/l8q6v8L73/kojPuO3+LS9OVql849D8AAAAUKNP/S0f9f9Ez/zm6Vc+n356erlS3hEP/AwAAQIEy/b9M1P8XL9Vh9JsnNr/60HSlujUc+h8AAAAKlOn/ZaP+v+TMB945Z9zsLj+nK9Vt4dD/AAAAUKD/vf8XC3etSdT/l07ttNll09u0+DpdqfqHQ/8DAABAgTKf/y8X9X/PF49oPHWxPu+1SVeq28Oh/wEAAKBAmf5fPur/Xhfd/eOGX/W89+90pRoQDv0PAAAABcr0/wpR/1928yntZ7Qat2vHdKW6Ixz6HwAAAAqU6f+mUf/33mTEM8sf0WSF/dOV6s5w6H8AAAAoUKb/V4z6//Kdb+2/95WTf/tvulLdFQ79DwAAAAXK9P9KUf9fcWW7c0fdceDzJ6Ur1cBw6H8AAAAoUKb/V476/8o5c+7qvucNx7yWrlSDwqH/AQAAoECZ/l8l6v8++2174eXrr9NwcrpS3R0O/Q8AAAAFyvR/s6j/rzq28REfzP/y27PTleqecOh/AAAAKFCm/1eN+v/qr954bv0lbv3h7nSlGhwO/Q8AAAAFyvT/alH/X7PXEoeMm9q+8Y7pSnVvOPQ/AAAAFCjT/6tH/X/tX28/ecCoBUc0T1eq+8Kh/wEAAKBAmf5fI+r/6779td/Kp7QefW26Ut0fDv0PAAAABcr0/5pR/1/frsVZ3/UYMqeWrlQPhEP/AwAAQIEy/b9W1P83rNlp62HDujQZkq5UD4ZD/wMAAECBMv2/dtT/Nz74wAdHvT5xz8fTleqhcOh/AAAAKFCm/9eJ+v+mkXfPW7ppwweWS1eqf38nQP8DAABAgTL9v27U/30bHdF04dy5HwxNV6p/X9P/AAAAUKBM/68X9f/Nr1906qzNW263ZLpSDQuH/gcAAIACZfp//aj//3PO89eveNCgE1dPV6qHw6H/AQAAoECZ/t8g6v9+J1/18O79Ol4+Ll2pHgmH/gcAAIACZfp/w6j/b/ls131G9h3/Zst0pRoeDv0PAAAABcr0/0ZR/9867Ish5x66yCb/SVeqR8Oh/wEAAKBAmf7fOOr/25Zfb8+rW47oeVW6Uo0Ih/4HAACAAmX6f5Oo//vX1+j83k/d7lkvXakeC4f+BwAAgAJl+r951P+3j/3oqrXmj/phsXSlejwc+h8AAAAKlOn/TaP+H7Bms67Prd+j8b3pSjUyHPofAAAACpTp/82i/r/jwU/77rvntCOeTleqJ8Kh/wEAAKBAmf7fPOr/O0d+PWL1O5qNXiFdqZ4Mh/4HAACAAmX6f4uo/+9qtNYBP1559ZwB6Uo1Khz6HwAAAAqU6f8to/4feMp7rQ8/Yq8mrdOV6qlw6H8AAAAoUKb/t4r6f9C7TT96sNW3e26WrlT//k0A/Q8AAAAFyvR/i6j/7351i/k/f7XxA33TleqZcOh/AAAAKFCm/1tG/X/PJf9dtcFi736wTbpSPRsO/Q8AAAAFyvT/1lH/D+615D5rTF9+u9vTlWp0OPQ/AAAAFCjT/9tE/X/vK5Me/mHc2BMvS1eq58Kh/wEAAKBAmf7fNur/+6b8fv3oEy+5fJ10pRoTDv0PAAAABcr0/3ZR/99/+pan7tdz5psj0pXq+XDofwAAAChQpv9bRf3/wJr9rup731qbNE5XqrHh0P8AAABQoEz/bx/1/4MPHtb5kpdu6rlqulK9EA79DwAAAAXK9H/rqP8fGnnmnhut0fae0elKNS4c+h8AAAAKlOn/HaL+H9Jo6JBp69+wWIt0pXoxHPofAAAACpTp/x2j/h867LQDdpt/4Bc3pyvV+HDofwAAAChQpv93ivp/2PLDRzxxx5dPX52uVC+FQ/8DAABAgTL9v3PU/w/X+/f9es91OqyfrlQTwqH/AQAAoECZ/t8l6v9Hxh7ctekR49YYlq5UL4dD/wMAAECBMv2/a9T/wx/d64D7r+z5T6N0pXolHPofAAAACpTp/92i/n90pctGHPzV5EdWS1eqV8Oh/wEAAKBAmf7fPer/EYs913fxVk32eyFdqV4Lh/4HAACAAmX6f4+o/x8bfUnXedNnt1o8XakmhkP/AwAAQIEy/d8m6v/HLz62yU+LNf/4oXSlej0c+h8AAAAKlOn/PaP+Hzl+wC+rndjnxpHpSvVGOPQ/AAAAFCjT/3tF/f/E+/e9u8+4Nmf8L41fvRkO/Q8AAAAFyvT/3lH/P9mt85Zj7vt4/XvSlWpSOPQ/AAAAFCjT//tE/T9q1Ven9+y58ss7pSvVW+HQ/wAAAFCgTP/vG/X/U/custONazx98ybpSvV2OPQ/AAAAFCjT//tF/f/0U61X+/il87tfk65U74RD/wMAAECBMv2/f9T/zyzz19+bTB2+2GPpSjU5HPofAAAACpTp/wOi/n/20Z2bPr5E1y+WSleqKeHQ/wAAAFCgTP8fGPX/6JX+mLfHKROebpauVO+GQ/8DAABAgTL9f1DU/88t9tIHK41q0OHZdKV6Lxz6HwAAAAqU6f+2Uf+PGb341l8Nu2eNrdOVamo49D8AAAAUKNP/B0f9//wn83bv2OPYf/qnK9X74dD/AAAAUKBM/x8S9f/Y47ca/FjTOY/0TleqD8Kh/wEAAKBAmf5vF/X/C+c26r3g9a32WzddqT4Mh/4HAACAAmX6/9Co/8e9/daJS2z+Rqs70pXqo3DofwAAAChQpv8Pi/r/xds+O+WYuY0+3iFdqT4Oh/4HAACAAmX6v33U/+O3WPW6Ef0evHHTdKX6JBz6HwAAAAqU6f/Do/5/aYe1H/nzoM5n3JSuVNPCof8BAACgQJn+7xD1/4Te3+zb8ND56zdIV6pPw6H/AQAAoECZ/j8i6v+Xf9vzoUl9W708OF2pPguH/gcAAIACZfr/yKj/X2l7RZtdfup/8zPpSvV5OPQ/AAAAFCjT/0dF/f/q0aNPOr1lh+5N05Vqejj0PwAAABQo0/9HR/3/2sxeVw94aa1z56cr1Yxw6H8AAAAoUKb/O0b9P3GPsWc0WGPmbUenK9XMcOh/AAAAKFCm/4+J+v/1+Rff9HPPtuMPSFeqL8Kh/wEAAKBAmf4/Nur/N37Y7bEH77tprR/TlerLcOh/AAAAKFCm/4+L+v/NDlcfePi45U/tlK5UX4VD/wMAAECBMv1/fNT/k5p92HCFE9+95sV0pZoVDv0PAAAABcr0/wlR/781uMl33yx2yacfpivV1+HQ/wAAAFCgTP93ivr/7VHN33hy+tideqQr1Tfh0P8AAABQoEz/nxj1/ztL/7DRrq32avtOulJ9Gw79DwAAAAXK9H/nqP8nT3rnsCO+unpE13Sl+m849D8AAAAUKNP/J0X9P+W8hk8/cuXGf16UrlSzw6H/AQAAoECZ/u8S9f+7nVre/s8R3676UbpSfRcO/Q8AAAAFyvT/yVH/v/fRbz0a79mj3WHpSvV9OPQ/AAAAFCjT/6dE/T91eIc7X79j1JO/pyvVD+H43/p/0f+P/8kAAADA/58y/X9q1P/vr/ifC1rPb/bNzHSl+jEcPv8HAACAAmX6/7So/z9o8MiRZ64/rdojXal+Cof+BwAAgAJl+v/0qP8/fLbrmEEtFzm3c7pSzQmH/gcAAIACZfr/jKj/P2r22MH1n8bf9mq6Uv0cDv0PAAAABcr0f9eo/z8efOoTv/btNn5KulLNDYf+BwAAgAJl+v/MqP8/GXXoLYMPHbHWOelK9Us49D8AAAAUKNP/3aL+n7b0bd0PPajlqf+kK9Wv4dD/AAAAUKBM/58V9f+nXbvUv+s395pj0pXqt3DofwAAAChQpv+7R/3/2YeDZ608t+On+6Ur1e/h0P8AAABQoEz/nx31/+cT7nz5gM0H7fRtulLNC4f+BwAAgAJl+v+cqP+nX9hxg3Gvd2nbLl2p/giH/gcAAIACZfr/3Kj/Z1w0rsf9TYeMmJOuVPPDof8BAACgQJn+7xH1/8wXL7z94B4N//wmXan+DIf+BwAAgAJl+v+8qP+/mLrH04sPm7jqnulKtSAc+h8AAAAKlOn/86P+//LMPofNG9W+3evpSvVXOPQ/AAAAFCjT/xdE/f9Vsw3HtDjl1idPT1eqheHQ/wAAAFCgTP9fGPX/rMEzjxy/ROtvLklXqr/Dof8BAACgQJn+vyjq/69HTbvgtqkLqs/TleqfcOh/AAAAKFCm/y+O+v+bpVe/s8uOTT75JF2p/3vofwAAAChQpv8vifr/2+HTu/81Y/IOF6Qr9fAz+h8AAABKlOn/S6P+/++Kq9yyzGU9u3VLV+oNwqH/AQAAoECZ/u8Z9f/sBus+cXTHcTe9la7UFwuH/gcAAIACZfq/V9T/3z076+Chu63z2m7pSn3xcOh/AAAAKFCm/y+L+v/75Xo99/ugLzf4Ml2p18Kh/wEAAKBAmf7vHfX/D0NHH1FbeODZv6Yr9Soc+h8AAAAKlOn/y6P+//H5Ky48ZO0bbjk8Xan/+wBA/Q8AAAAFyvT/FVH//1Ttedd9r54/8/t0pf7v+/U/AAAAFCjT/1dG/T/n5ZO/ea7Z04sclK7UG4ZD/wMAAECBMv3fJ+r/n3veW9v3opUPOzJdqS8ZDv0PAAAABcr0/1VR/8897a71Vn/o46cWpCv1RuHQ/wAAAFCgTP9fHfX/L5OPefXHMW3+Oj9dqTcOh/4HAACAAmX6/5qo/3994J+Nm5/cZ/X305X6UuHQ/wAAAFCgTP9fG/X/b2ts/+ZH9eb7vpSu1JcOh/4HAACAAmX6/7qo/39fcrHZN0ybPfT4dKW+TDj0PwAAABQo0//XR/0/7/FXluj11laf7J2u1JcNh/4HAACAAmX6/4ao//9Yrv7lrCZzdpiVrtSbhEP/AwAAQIEy/X9j1P/zh45fdMXux3abm67UlwuH/gcAAIACZfr/pqj//3x+wVq7P3rPTQenK/V/u1//AwAAQIEy/d836v8F1U4vjXy8wWufpiv1FcKh/wEAAKBAmf6/Oer/v056e1TDMyZs0DNdqTcNh/4HAACAAmX6/z9R/y+cvsThfzbuevap6Up9xXDofwAAAChQpv/7Rf3/95stzh8xefgtb6Yr9ZXCof8BAACgQJn+vyXq/3+6/3rbMdt1mNk9XamvHA79DwAAAAXK9P+t/6//64scfOzCXb7rv8h76Up9lXDofwAAAChQpv9vi/p/0dkD1px0favDXk5X6s3Cof8BAACgQJn+7x/1f4O/79t5QIf5T3VJV+qrhkP/AwAAQIEy/X971P+Lten86en7df5rdrpSXy0c+h8AAAAKlOn/AVH/L77lqy1H9H9w9X3Slfrq4dD/AAAAUKBM/98R9X/tukWmHPN7o32PS1fqa4RD/wMAAECBMv1/Z9T/1d2t5zTc5I2hC9OV+prh0P8AAABQoEz/3xX1f329v5b7c9rYR5ukK/V/36P/AQAAoECZ/h8Y9f8SV+08//j6JQc8ma7U1w6H/gcAAIACZfp/UNT/DXf8Y9VbTn535QfSlfo64dD/AAAAUKBM/98d9f+SG73U+rUxy8+v0pX6uuHQ/wAAAFCgTP/fE/V/o36Lf7T1Qzc9fl26Ul8vHPofAAAACpTp/8FR/zeeftjA8y5qe8hG6Up9/XDofwAAAChQpv/vjfp/qZP69ezTbGZtl3SlvkE49D8AAAAUKNP/90X9v3T3ocdNeXWtrwalK/UNw6H/AQAAoECZ/r8/6v9l3jxz7DprT+u/YbpS//c7AfofAAAACpTp/wei/l+24QHjWy9sdn6fdKW+cTj0PwAAABQo0/8PRv3f5Mnr1n190Kh1+6Ur9U3Cof8BAACgQJn+fyjq/+WGPN5g0G49XtoyXak3D4f+BwAAgAJl+n9I1P/Lr37ejDM7fnv98+lKfdNw6H8AAAAoUKb/h0b9v8KpU5d55LKNT1sjXalvFg79DwAAAAXK9P+wqP+bvrfcD0fMuHrnhulKffNw6H8AAAAoUKb/H476f8XXNprUeMe9pj+SrtS3CIf+BwAAgAJl+v+RqP9XuvTHzf/ZZNCjN6Qr9X//JqD+BwAAgAJl+n941P8rT9/0lZN+73jA5ulKfatw6H8AAAAoUKb/H436f5WTZm/Yv//clbdPV+otwqH/AQAAoECZ/h8R9X+z7pOrl/ZrOf+udKXeMhz6HwAAAAqU6f/Hov5f9c0Vv9qqw4jHV0pX6luHQ/8DAABAgTL9/3jU/6sNndXv2uu7HfJUulLfJhz6HwAAAAqU6f+RUf+vvty6Z1303fjafelKfdtw6H8AAAAoUKb/n4j6f41qlUM2326Rr/6Xlfp24dD/AAAAUKBM/z8Z9f+az09/8rPJC/o/l67UW4VD/wMAAECBMv0/Kur/tcbtOGN849bnr5yu1P99JqD+BwAAgAJl+v+pqP/Xrv3ZoMUZt667TLpSbx0O/Q8AAAAFyvT/01H/r9PkxXW7PN7+pUfTlfoO4dD/AAAAUKBM/z8T9f+6j1Tjb3t04vVrpyv1HcOh/wEAAKBAmf5/Nur/9aY/sPnB3RuedkW6Ut8pHPofAAAACpTp/9FR/69/UqdJ9zcZsvOt6Up953DofwAAAChQpv+fi/p/g+5H/DDvrS7Tt01X6ruEQ/8DAABAgTL9Pybq/w3fvHuZxX9/cI+x6Up913DofwAAAChQpv+fj/p/o1M7fnX3Jp3vWzNdqe8WDv0PAAAABcr0/9io/zd+786q635v/L5EulLfPRz6HwAAAAqU6f8Xov7f5LXBG27fv9FKD6cr9T3Cof8BAACgQJn+Hxf1f/NLu7zyxvX9j90gXam3CYf+BwAAgAJl+v/FqP837XrWV5d06DDuynSlvmc49D8AAAAUKNP/46P+3+zDp6u+283/7pZ0pb5XOPQ/AAAAFCjT/y9F/b/5hBs2nPZdqyW3Slfqe4dD/wMAAECBMv0/Ier/LS7c75WNGk+44Pp0pb5POPQ/AAAAFCjT/y9H/b/lmFNGbzm5wR0bpyv1fcOh/wEAAKBAmf5/Jer/rRYdcfSEx4e/tXO6Ut8vHPofAAAACpTp/1ej/m/R9NaLbj+j66YD05X6/uHQ/wAAAFCgTP+/FvV/y8faDejcfc5Jy6Yr9QPCof8BAACgQJn+nxj1/9bT5px/76NbXflEulI/MBz6HwAAAAqU6f/Xo/7f5oRtb2v31j2TH0xX6geFQ/8DAABAgTL9/0bU/9v2aDyqanLsVvV0pd42HPofAAAACpTp/zej/t/unTcO/63eZ4+10pX6weHQ/wAAAFCgTP9Pivq/Vdclxnab1ua+y9OV+iHh0P8AAABQoEz/vxX1//Yfvn3cwDGzf78tXam3C4f+BwAAgAJl+v/tqP9bT/i158STm6+0XbpSPzQc+h8AAAAKlOn/d6L+3+HCFgN3uOjpY8ekK/XDwqH/AQAAoECZ/p8c9f+OzcbPvuKh88etkq7U24dD/wMAAECBMv0/Jer/nQbXlzjr1Y+/WzpdqR8eDv0PAAAABcr0/7tR/+88aqeN12u28pLD05V6h3DofwAAAChQpv/fi/p/l6UXvPnhwi8vWDFdqR8RDv0PAAAABcr0/9So/3dt/92Ll6+9zh2j0pX6keHQ/wAAAFCgTP+/H/X/bj9ttk733W546/50pX5UOPQ/AAAAFCjT/x9E/b/7gpUWW3/QgZsumq7Ujw6H/gcAAIACZfr/w6j/99htyswPLpt80o3pSr1jOPQ/AAAAFCjT/x9F/d9mm3OWXr5jkyu3SFfqx4RD/wMAAECBMv3/cdT/e/Z96vsZO46b3CpdqR8bDv0PAAAABcr0/ydR/+91V9+3Rs3oudWd6Ur9uHDofwAAAChQpv+nRf2/99r7brF3k4Zbn5eu1I8Ph/4HAACAAmX6/9Oo//e54vqXP3tr4vtT05X6CeHQ/wAAAFCgTP9/FvX/vtsfuMHmj3bpPSFdqXcKh/4HAACAAmX6//Oo//fb7Pz6Rd2HHH9CulI/MRz6HwAAAAqU6f/pUf/vf/vIWdee0XrjH9KVeudw6H8AAAAoUKb/Z0T9f8AnM+998/EFE9umK/WTwqH/AQAAoECZ/p8Z9f+Bx2+4R6vJ7Qceka7Uu4RD/wMAAECBMv3/RdT/B527eqczGt966Z/pSv3kcOh/AAAAKFCm/7+M+r/t29Muu+e7bsvsmq7UTwmH/gcAAIACZfr/q6j/D248/6+rtxvx4xfpSv3UcOh/AAAAKFCm/2dF/X/I07uscW6HRZ77LV2pnxYO/Q8AAAAFyvT/11H/t7uvtsta148/ukO6Uj89HPofAAAACpTp/2+i/j905Qmfvde/43LT0pX6GeHQ/wAAAFCgTP9/G/X/YWec0GLF/Qb9cmG6Uu8aDv0PAAAABcr0/3+j/m//wZDJszZpOeTMdKX+72v6HwAAAAqU6f/ZUf8f/tKgn0f+PnevSelKvVs49D8AAAAUKNP/30X93+GCo5fffcbGW3+XrtTPCof+BwAAgAJl+v/7qP+P+OSOPz7a8dv3901X6t3Dof8BAACgQJn+/yHq/yOPP65Z84579T42XamfHQ79DwAAAAXK9P+PUf8fde5JO/S67Orj/0pX6ueEQ/8DAABAgTL9/1PU/0e/ff/HNwxqtvFZ6Ur93HDofwAAAChQpv/nRP3f8dGDH9t6t2kT301X6j3Cof8BAACgQJn+/znq/2NW6n/ga2v3GPhKulI/Lxz6HwAAAAqU6f+5Uf8fu9jwM25ZOOrSk9OV+vnh0P8AAABQoEz//xL1/3GjT7vp+GZtl/ksfv8//3NO/wMAAECBMv3/a9T/xz937WeXvHrTj73SlfqF4dD/AAAAUKBM//8W9f8Ji7Tdpe9Daz13SrpSvygc+h8AAAAKlOn/36P+77RCjzWmXTTz6DfSlfrF4dD/AAAAUKBM/8+L+v/EEU/+tdHJlyy3V7pSvyQc+h8AAAAKlOn/P6L+7/xJk+V/GDP2l6/Slfql4dD/AAAAUKBM/8+P+v+k4z/8eY1pyw/5JV2p9wyH/gcAAIACZfr/z6j/u5z7w+T96u/udUi6Uv/3mQD6HwAAAAqU6f8FUf+f/HbzFqOH33r3rHSlflk49D8AAAAUKNP/f0X9f8oZ//143bPa99o7Xan3Dof+BwAAgAJl+n9h1P+nfrDFDpOXXdD84HSlfnk49D8AAAAUKNP/f0f9f9pLTZtdOan1G3PTlfoV4dD/AAAAUKBM//8T9f/pF7z3x/lThlzRM12pXxkO/Q8AAAAF+r/7v1ok6v8zWr3zzv5Lden0abpS7xMO/Q8AAAAFyvT/olH/d7284WbPdp247ZvpSv2qcOh/AAAAKFCm/xtE/X9m/5aNvx/Z8MNT05X61eHQ/wAAAFCgTP8vFvV/t01/+3HNw+c++F66Ur8mHPofAAAACpTp/8Wj/j/rxw/71a9r2aZ7ulK/Nhz6HwAAAAqU6f9a1P/dD2ty1q+zBy3bJV2pXxcO/Q8AAAAFyvR/FfX/2bs2P2Twth1/fjldqV8fDv0PAAAABcr0fz3q/3P+/OHJQ5uPf3afdKV+Qzj0PwAAABQo0/9LRP1/7k1tO/aft8iRs9OV+o3h0P8AAABQoEz/N4z6v8fW175w0u0jllqYrtRvCof+BwAAgAJl+n/JqP/PW+vJe7bav9v3x6Ur9b7h0P8AAABQoEz/N4r6//w7e1z60jGj7r4gXanfHA79DwAAAAXK9H/jqP8vaPVM/yN69+j1SbpS/0849D8AAAAUKNP/S0X9f+Hl3c99ZOa05m+lK/V+4dD/AAAAUKBM/y8d9f9F/fdv/89Ozd7olq7UbwmH/gcAAIACZfp/maj/L970xmcar3X1FV+mK/Vbw6H/AQAAoECZ/l826v9L2vYcP+qvvTrtlq7UbwuH/gcAAIACZfq/SdT/l/727Lp7D/x228PTlXr/cOh/AAAAKFCm/5eL+r/nzMsbLL/rxh/+mq7Ubw+H/gcAAIACZfp/+aj/ex3dZsaMIe8+eFC6Uh8QDv0PAAAABcr0/wpR/1828omjN7x4+Tbfpyv1O8Kh/wEAAKBAmf5vGvV/70bnjp666thlF6Qr9f8fe3cet+WcNn78qqHzuseUZTAGMy32ZRLNk50yxhgZZpNlKERhlDUhW5Q120z2GhmyTWPfFZFGaFBZsyZLIstYksLvhaOcOes5ecScr+/v/f7nOO676z66r3m9nief7rvrPj8W/Q8AAAAVVNL/S+f6/9jm25x7zL1HvL1j8Up2QSz6HwAAACqopP9/lOv/44aeePhBEyfd8mjxSjYoFv0PAAAAFVTS/8vk+r/fuNXPuqlJix17F69kg2PR/wAAAFBBJf3/41z/9//z671/2e20prsWr2R/i0X/AwAAQAWV9P+yuf4//ujHOi1+27av3128kl0Yi/4HAACACirp/+Vy/X/C6MVueKHjeq+2Ll7JhsSi/wEAAKCCSvp/+Vz/n9h9fJdDz5lRH1C8kl0Ui/4HAACACirp/5/k+v+kZ5Ycccr07Xe+oHgl+3ss+h8AAAAqqKT/f5rr/5Pvaz3ouTXOHrF+8Up2cSz6HwAAACqopP+b5/r/lIOmHLVmu0XevbF4JbskFv0PAAAAFVTS/y1y/T9gk1s26Dn1/qV+VLySDY1F/wMAAEAFlfR/y1z/n9rvqCcGn7xHh3lcyS6NRf8DAABABZX0f6tc/592xuYz7us0dMjfi1eyy2LR/wAAAFBBJf2/Qq7/T1/92OU2uLbz+GWKV7LLY9H/AAAAUEEl/b9irv/PmDKke6seF7a9rXgluyIW/Q8AAAAVVNL/K+X6/8zfd+s/runa3f9ZvJJdGYv+BwAAgAr63/q/oVar5fr/L1vsfEn/cW8dv2jxSvaPWPQ/AAAAVFDJ1/9XyfX/X2edv8UhY3s8dFzxSjYsFv0PAAAAFVTS/6vm+n/gietdcf1iw1q3LF7JZv+bAP0PAAAAFVTS/6vl+v+sdT7u2H7/xoe3K17JropF/wMAAEAFlfT/6rn+P3vle/ZZctioCwYWr2RXx6L/AQAAoIJK+n+NXP+fM6jxia/ctsyr1xevZNfEov8BAACggkr6f81c/5+7yciuR3Z7sr548Up2bSz6HwAAACqopP9/luv/8/o16Xtak947Nyleya6LRf8DAABABZX0f+tc/59/xkZDJk68acQlxSvZ7H8ToP8BAACggkr6f61c/1+w+oebrXbvGu+uWryS3RCL/gcAAIAKKun/Nrn+H/Trhp+fudzUpU4uXslujEX/AwAAQAWV9P/auf4f/M5Dj+3eZ/MOg4tXspti0f8AAABQQSX9v06u///2ynvT213Wf8imxSvZzbHofwAAAKigkv5vm+v/C3dpu9To9keN71+8kt0Si/4HAACACirp/5/n+n9I54e3eHLQnW1XKV7Jbo1F/wMAAEAFlfT//+T6/6IXl75k9VmLd29TvJLdFov+BwAAgAoq6f92uf7/+1tr9j+qxcPH/6V4Jbs9Fv0PAAAAFVTS/+vm+v/iraZ2P3Xj3zz00+KVbHgs+h8AAAAqqKT/18v1/yWbbHnilpMGtB5evJKNiEX/AwAAQAWV9P/6uf4f2u+0fW7v2+rwfxSvZHfEov8BAACggkr6f4Nc/196xg0d39xl8gUNxSvZnbHofwAAAKigkv7fMNf/l61+4BXLd2uRHVu8ko2MRf8DAABABZX0/0a5/r/8xGs2O/62SS+3KF7J7opF/wMAAEAFlfT/xrn+v2KdQ4b0mrjtdesWr2R3x6L/AQAAoIJK+n+TXP9fufLWfVs2Oe0PZxWvZKNi0f8AAABQQSX9v2mu//8x6OSu45f74bI/Ll7J7olF/wMAAEAFlfR/+1z/DxswaLM97h0/8/bilWx0LPofAAAAKqik/zvk+v+f7XYacs5lR1w9rHgl+1cs+h8AAAAqqKT/N8v1/1Wtdu07qs+IbZoVr2T3xqL/AQAAoIJK+v8Xuf6/+txLu7YZtMVGNxSvZGNi0f8AAABQQSX9v3mu/6/ZqV/zVduf8MzSxSvZfbHofwAAAKigkv7/Za7/r31+s4+earHaSY2KV7L7Y9H/AAAAUEEl/b9Frv+ve/fQp0+fNWWvi4tXsgdi0f8AAABQQSX9/6tc/1+/zR2bHDGpV8u1ileysbHofwAAAKigkv7fMtf/N2yw/LhbN75h5KnFK9m/Y9H/AAAAUEEl/f/rXP/feMzEtlvtsuzA84tXsgdj0f8AAABQQSX9v1Wu/28a+PwSP+37VK/1ileyh2LR/wAAAFBBJf3fMdf/N7de+a1p59Sy5sUr2cOx6H8AAACooJL+3zrX/7cMeHG53h3venlE8Uo2Lhb9DwAAABVU0v+/yfX/re1azei3xn7XXVm8ko2PRf8DAABABZX0/za5/r+t1TJPPDz9qj/Ui1eyCbHofwAAAKigkv7fNtf/t5/77AYrTG27bL/ileyRWPQ/AAAAVFBJ//821//DZ/5s6wva/WfmysUr2aOx6H8AAACooJL+/12u/0d0eO2qvTrtfPXaxSvZY7HofwAAAKigkv7/fa7/79hu3OkbnTx4m78Wr2SPx6L/AQAAoIJK+v8Puf6/880f9XioR7eNViteyZ6IRf8DAABABZX0/x9z/T/yhqzb+dde9swpxSvZk7HofwAAAKigkv7fLtf/dzW7q9/e4xpOGlS8kk2MRf8DAABABZX0f6dc/9+97MyhGzcds9cmxSvZU7HofwAAAKigkv7fPtf/o4Zs/KsHF9uu5XXFK9nTseh/AAAAqKCS/t8h1//3PHLh5YuMHThyseKV7JlY9D8AAABUUEn/75jr/9E9d9zqg2EbDMyKV7JnY9H/AAAAUEEl/b9Trv//dXjXPw/bf2avocUr2XOx6H8AAACooJL+/1Ou/+8dOfSkLn0H7P/r4pXs+Vj0PwAAAFRQSf/vnOv/Mbt33330Lr8587XilWxSLPofAAAAKqik/3fJ9f99T1x0TLuNJ4+eVbySvRCL/gcAAIAKKun/zrn+v3/sBRftPqnVip2LV7LJseh/AAAAqKCS/u+S6/8HDtnlF2fOurPH+OKV7MVY9D8AAABUUEn/75rr/7EbNs0mtDhqwP7FK9lLseh/AAAAqKCS/t8t1///7vvASy3aP/xE9+KV7OVY9D8AAABUUEn/757r/wfPevuegwctvv7o4pXslVj0PwAAAFRQSf93zfX/Q2utu/IJfaZ2PLp4JZsSi/4HAACACirp/z1y/f/wtKV2uvCyNa58pnglezUW/Q8AAAAVVNL/e+b6f9z2E27Z997+H99fvJJNjUX/AwAAQAWV9H+3XP+P/8Wr56233ObN9ypeyV6LRf8DAABABZX0f/dc/0+YsVafB5o82enF4pXs9Vj0PwAAAFRQSf/vlev/R049dWCzicvcvEXxSjYtFv0PAAAAFVTS/3vn+v/RdTse8tFtN03+XfFK9kYs+h8AAAAqqKT/98n1/2MrHLD9Fd16N36neCV7Mxb9DwAAABVU0v9/zvX/4+fdfONO+w/b/5HileytWPQ/AAAAVFBJ/++b6/8nNuzVeeSwHmceUrySvR2L/gcAAIAKKun/Hrn+f7Lv9cPbjh01erfilew/seh/AAAAqKCS/u+Z6/+JZ500uPtijVccVbySzX5NAP0PAAAAFVTS//vl+v+ptbY9emDTC3tsW7ySvRuL/gcAAIAKKun//XP9//TWwxvWHNd5wLTiley9WPQ/AAAAVFBJ/x+Q6/9n3j/8teeufeuJD4tXsvdj0f8AAABQQSX9f2Cu/599of39p/RYe/0diley6bHofwAAAKigkv4/KNf/z+1w/KqHnnx/xxeKV7IPYtH/AAAAUEEl/X9wrv+f/9OeffbotMiV7YtXshmx6H8AAACooJL+75Xr/0mTLj7vnHZDP96+eCWb/ZoA+h8AAAAqqKT/D8n1/wvvnXfLqKl7NH+veCWbGYv+BwAAgAoq6f/euf6fvG2XndpMn9HpsOKVbFYs+h8AAAAqqKT/D831/4sbfnTje2usd/NTxSvZR7HofwAAAKigkv4/LNf/L/XdcPsmHc+ePLZ4Jfs4Fv0PAAAAFVTS/4fn+v/lsxod8vtztm/cs3gl+yQW/Q8AAAAVVNL/fXL9/8pa9w686KVGfXYsXpnz4fofAAAAKqik/4/I9f+UUxc+esP1R54/s3ilHo/R/wAAAFBFJf1/ZK7/X1131OAxO/Z88PXilXrjWPQ/AAAAVFBJ/x+V6/+pK8wYPqj/1WttU7xS/14s+h8AAAAqqKT/j871/2vnbdp5v3PX6XZ38Up9oVj0PwAAAFRQSf8fk+v/19sOvWHtzd85Ydf4xelfPK6+cCz6HwAAACqopP/75vp/2kldO9294i4Tehev1JvEov8BAACggkr6/9hc/78xeMfeZ38waJ1Hi1fqWSz6HwAAACqopP+Py/X/m6tceNaezbu33694pT774/U/AAAAVFBJ//fL9f9bL4149chRl1707+KVekMs+h8AAAAqqKT/++f6/+0ufRY57eL6exOLV+rfj0X/AwAAQAWV9P/xuf7/T8cOq088+r4lDy1eqS8Si/4HAACACirp/xNy/f/O2yeMWW33P+7ybvFK/Qex6H8AAACooJL+PzHX/+/2X2mV1+84a3in4pV601j0PwAAAFRQSf+flOv/9zadPLr5sxtO6VC8Um8Wi/4HAACACirp/5Nz/f/+Gk++2LHxhw2Ti1fqi8ai/wEAAKCCSvr/lFz/Tz+zeZNblmzZ557ilfpiseh/AAAAqKCS/h+Q6/8P2j4zrdWY58/vVrxSXzwW/Q8AAAAVVNL/p+b6f8ZJyy067vJtHjygeKW+RCz6HwAAACqopP9Py/X/h4Nbtu5/8OlrTSheqc/ufv0PAAAAFVTS/6fn+n/mKq+MPWTvJbp1KV6pLxmL/gcAAIAKKun/M3L9P2vzJW978MYJJ3xUvFJfKhb9DwAAABVU0v9n5vr/o4/H77Dxo0dOmFq8Ul86Fv0PAAAAFVTS/3/J9f/HU6cctnfD8HW2LF6p/ygW/Q8AAAAVVNL/f831/ye/bX3B+W/8qv1/ilfqy8Si/wEAAKCCov8Xyr3njNwvN/581H9cq3WYlnt/PH7R2d3/2d8RdD3i7XfnNb/w6Z38/Oy3aFSrLXTNlz6t+jd7VvM15/k0e+SFzWptao3yz/xTrefz+LPrSy9fa1NrXHj83B/wvXj8sp1n/eS4Wptaky8/fp+9e+6x56Fz3oxfrS+3Zc831qm1qdW//Pj99zywS8/99tgz3oz/XRpabr7X4q/W2tQW+vL/Unv37NUj92ZDjFbLvrniaZ99Pl96/EEH73Zwt4PmvPn9ePwK1x42uNe8Hn/g3J//IvH4FfddftFpTcfUFv7y4w/otd/Bu9UAAAD4byvp/zk9W6t1GJl7f3Tx1+7/Zeeetfn1//e+2bOarznP51vq//heidoPZ/X+5WvNbqnVv9zD++zX68Ceu+3bZgE8FwAAAPjKSvp/ztenF1D/Lzf3rM2v/xf+Zs9qvuY8n2+p/+Pzri8/6aMTHq6tV1tkXl+f73Lgbj277znXXwE0iY/7ySLDXzqstl6t2by/Tt+l615zf2gWH/fTI9//3YXNtqw1nefX3wsfBgAAwP9vSvp/Ts/Wan2PyX9YzMXyb3+F/l9+7lmL/gcAAAC+TSX9P+fr0vPp/6/79f+fzD1r+h8AAAC+AyX9P+f7y+fZ/4vNefMr9n9Diy/uzdZ47pvfqnrLmK1irhBzxZgrxVw55ioxV425WszZryOwRsw1Y/4sZvyrgPpaMeNb7+trx1wnZtuYP4/5PzHbxVw35nox14+5QcwNY24Uc+OYm8TcNGb7mB1ibhbzFzE3j/nLmFvE/FXM+JmP9V/H3Cpmx5hbx/xNzG1ibhvztzF/F/P3Mf8Q848xt4vZKeb2MXeIuWPMnWL+KebOMXeJ2Tlml5i7xoyXIqzvHrNrzD1ixuss1rvF7B5zr5h7x9wn5p9j7hszXnux3jPmfjH3j3lAzANjxisv1g+O2SvmITF7x4xXXKwfFvPwmH1iHhHzyJhHxTw6Zvzfbr1vzGNjHhezX8z+MY+PeULME2OeFPPkmKfEHBDz1JinxTw9Zvz/lPqZMf8S868xB8Y8K+bZMc+JeW7M82KeH/OCmINiDo75t5gXxhwS86KYf495ccxLYg6NeWnMy2JeHvOKmFfG/EfMYTH/GfOqmFfHjH/fVL825nUxr495Q8wbY94U8+aYt8S8NeZtMW+POTzmiJh3xLwzZvzbrfpdMe+OOSrmPTFHx/xXzHtjjol5X8z7Yz4Qc2zMf8d8MOZDMR+OOS7m+JgTYj4S89GYj8V8POYTMZ+MOTHmUzGfjvlMzGdjPhfz+ZiTYr4Qc3LMF2O+FPPlmK/EnBLz1ZhTY74W8/WY8Rq59TdivhnzrZhvx4yfoVN/J2b8OVl/L+b7MafH/CDmjJgfxpwZc1bMj2J+HPOTz2e8DGytIf6MbYg/dBviz7GG+PO/Ib7fryH+3r8h/vxvmP26s7NfT3b268TOfv3XH8RsGrNZzEVjxn8pNCwec4mY8fOCGpaMuVTMpWPGzxVuiK8zNMTrBjfE6wc1xL8jbIjvJ2yIrys0xH9fNDSPmfuZRgAAAAAAkL74+n/j3LvGfLE2eXzer8VXb1mrZU/Xao2mjxh83Rbf5Pff7hv65Nv6SQEAAACQkOj/Zl+8Z+FD/5ufDwAAALDg6X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEjfPPt/of/mZwQAAAAsaL7+DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp+5r9/8n3votPCgAAAFigfP0fAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSF/2/UO49Z+R+uf75aGhZq/U9Jv9hc//65293PeLtd+c1v/Dpnfz8VONGC+zJlGv6Hf5eAAAAUBkl/d8Qo9V8+n+Z/Ntfof9bzT1r33H/Lzrl89nk8XjHD7673xsAAAD+e0r6//ufj4YV5tP/I/Nvf4X+X2HuWYv+X2jrBfaE/ndL5D73T/2wVqv/oFZr/L0Fc77eYu779Za1WvZ0rdZo+oK5DwAAAP83Jf2/yOejYcX59P81+be/Qv+vOPesRf8v/PQCe0JfT6MdF6r/sfPRtdqu2zf/bE55KftsznHshrde2ejGOX8/Mftxzy/VfO7HfTd3AQAA4P+kpP/j++MbVqrVOkzLvb/x52PRr/v9/yvNPWd/7ELXfOnTavyNntT8zXk+zR55YbNam1qj/DP/VOv5PP7s+tLLN5tSa1x4fOtv6TMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4fO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADmCgAA//+879/f") r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) 2.846336686s ago: executing program 0 (id=1113): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x800) 2.618629717s ago: executing program 3 (id=1114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_open_dev$usbmon(&(0x7f0000000080), 0x9ee, 0x44200) 2.468256021s ago: executing program 0 (id=1115): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x41001, 0x0) setreuid(0x0, 0xee01) ioctl$BLKROSET(r0, 0x401070cd, 0x0) 2.350161636s ago: executing program 0 (id=1117): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001900010028bd7000fcdbdf251d01020008000900", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) 2.284003916s ago: executing program 3 (id=1118): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f00000000c0)=0xc) 2.17183542s ago: executing program 3 (id=1119): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000180)='\x00', 0x1}], 0x2) 2.003769405s ago: executing program 1 (id=1120): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="db9063a5f12b400000a3529de2db", 0xfffffd0c}, {&(0x7f00000005c0)="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"}, {&(0x7f0000000900)="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"}, {&(0x7f0000000380)="f2003c9f4470d75916"}, {&(0x7f0000000740)="6b9e35b0dc1cbe029c907ce2f9982f19e8f8a6b1a13bd80ae6915a324910b1cdabf00cbe1da78bc5f541d813224909db55c615b88c668dfc8b1bc1d814520a5441f5b97ab3d2bd001732385892ebf60e3189d7a91e1a1e2232f5f725e1bc1bd694414e718b1ae37e98a389dfd2cce354c8b5da37dda52307ed1351df4853f6f582767ac83352463f8965a93da6310e365623c91c"}], 0x1}, 0x4091) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) 1.827064005s ago: executing program 0 (id=1121): r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0x66a8, 0x4000, 0xf, 0x0, 0x18) 1.644836773s ago: executing program 0 (id=1123): syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000002d40)=ANY=[], 0x1, 0xee7, &(0x7f0000001e40)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') 1.59633075s ago: executing program 5 (id=1124): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70000000000067db000008000300", @ANYRES32=0x0, @ANYBLOB="0c0001"], 0x34}}, 0x8080) 1.330037511s ago: executing program 5 (id=1125): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000bc0)={0x28, 0x0, 0xffffffff, @local}, 0x10) connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) 1.101138737s ago: executing program 0 (id=1126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x551a, &(0x7f0000010800)="$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") 1.08047647s ago: executing program 5 (id=1127): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c"], 0x92fc}}, 0x0) 1.068985136s ago: executing program 1 (id=1128): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) 869.335626ms ago: executing program 5 (id=1129): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) writev(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)="d3", 0x1}], 0x2) 825.742412ms ago: executing program 1 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffff8000, 0x4, 0x0, 0x1000000}}}}, 0x30}}, 0x2c040090) 588.342852ms ago: executing program 5 (id=1131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 539.169882ms ago: executing program 1 (id=1132): r0 = socket(0x23, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000000}) 501.007784ms ago: executing program 2 (id=1133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 45.934179ms ago: executing program 5 (id=1134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}}, 0x0) 0s ago: executing program 1 (id=1135): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x522, 0x42200) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000240)={r1, 0x8, {0x0, 0x0, 0x0, 0xf, 0x5, 0x0, 0x9, 0x1e, 0x0, "dd4ec9b49e9c5f11d236da6fa09024376e3a26cf7af115c74e0d85c4437104abc351b0de2b202c8a7399169ef9edc876009d2c723646fee95d9d213cbe213e8f", "0c0607e3db0e61de925b656122e85515b5540fccfbe7e21526948cb51e3e5c7613377b57ade664df33ee009af1f183cbe0935d95b53bbad3a3343e4927705814", "020b2a6014348cad904ee596cca29d45b5a46167016e3087f2d0415bf64db2b7", [0xfffffffffffffff8, 0x5]}}) kernel console output (not intermixed with test programs): ocess `syz.2.263'. [ 115.167357][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'. [ 115.181711][ T6718] netlink: 52 bytes leftover after parsing attributes in process `syz.2.263'. [ 115.214246][ T6721] loop3: detected capacity change from 0 to 64 [ 115.222528][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'. [ 115.245747][ T6718] netlink: 52 bytes leftover after parsing attributes in process `syz.2.263'. [ 115.466647][ T6725] netlink: 36 bytes leftover after parsing attributes in process `syz.3.266'. [ 115.487795][ T6725] netlink: 'syz.3.266': attribute type 10 has an invalid length. [ 115.593475][ T6727] loop2: detected capacity change from 0 to 64 [ 115.607363][ T6719] loop4: detected capacity change from 0 to 32768 [ 115.656974][ T6719] JBD2: Ignoring recovery information on journal [ 115.675455][ T6730] loop3: detected capacity change from 0 to 2048 [ 115.735345][ T6719] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 115.790800][ T6730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.860062][ T6730] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.268: inline data xattr refers to an external xattr inode [ 115.882466][ T5860] ocfs2: Unmounting device (7,4) on (node local) [ 115.940256][ T6736] loop2: detected capacity change from 0 to 64 [ 115.966322][ T6730] EXT4-fs (loop3): Remounting filesystem read-only [ 116.086352][ T6743] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.133344][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.192167][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 116.231857][ T6745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.544044][ T6756] ALSA: seq fatal error: cannot create timer (-19) [ 116.584611][ T6762] loop2: detected capacity change from 0 to 256 [ 116.594321][ T6762] exfat: Deprecated parameter 'namecase' [ 116.614939][ T6761] loop3: detected capacity change from 0 to 1024 [ 116.626996][ T6762] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 116.828770][ T1097] hfsplus: b-tree write err: -5, ino 4 [ 117.347218][ T44] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.396594][ T6766] loop4: detected capacity change from 0 to 32768 [ 117.472255][ T6766] (syz.4.282,6766,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.517917][ T6766] (syz.4.282,6766,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.547286][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 117.564562][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.607433][ T44] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 117.658766][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.682045][ T6766] JBD2: Ignoring recovery information on journal [ 117.735038][ T44] usb 3-1: config 0 descriptor?? [ 117.801441][ T6766] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 117.876916][ T6766] (syz.4.282,6766,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 118.110575][ T5860] ocfs2: Unmounting device (7,4) on (node local) [ 118.181722][ T44] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 118.200851][ T44] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 118.228178][ T44] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 118.235269][ T44] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 118.305128][ T44] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 118.346040][ T44] corsair 0003:1B1C:1B3E.0005: hidraw0: USB HID v0.05 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 118.395670][ T44] usb 3-1: USB disconnect, device number 5 [ 118.434575][ T6816] loop1: detected capacity change from 0 to 1024 [ 118.582191][ T6817] fido_id[6817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 118.583544][ T79] hfsplus: b-tree write err: -5, ino 4 [ 118.625037][ T6823] loop4: detected capacity change from 0 to 164 [ 118.748346][ T6821] loop3: detected capacity change from 0 to 4096 [ 119.103342][ T6833] loop1: detected capacity change from 0 to 2048 [ 119.179576][ T6837] loop0: detected capacity change from 0 to 2048 [ 119.218549][ T6837] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.262876][ T6837] NILFS (loop0): mounting unchecked fs [ 119.271032][ T6833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.376108][ T6837] NILFS (loop0): recovery complete [ 119.401794][ T6848] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.315961][ T6884] loop0: detected capacity change from 0 to 64 [ 120.470768][ T980] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.616240][ T6896] xt_hashlimit: size too large, truncated to 1048576 [ 120.655474][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 120.675616][ T980] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 120.710009][ T980] usb 4-1: config 0 has no interface number 0 [ 120.739158][ T980] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 120.751664][ T6898] loop0: detected capacity change from 0 to 1024 [ 120.767335][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.795642][ T980] usb 4-1: Product: syz [ 120.816339][ T980] usb 4-1: Manufacturer: syz [ 120.816557][ T30] audit: type=1800 audit(1752755691.589:28): pid=6898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.344" name="file2" dev="loop0" ino=21 res=0 errno=0 [ 120.841816][ T980] usb 4-1: SerialNumber: syz [ 120.844579][ T980] usb 4-1: config 0 descriptor?? [ 121.116820][ T980] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 121.191364][ T6886] loop4: detected capacity change from 0 to 32768 [ 121.317657][ T980] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 121.324710][ T980] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 121.334851][ T980] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 121.400568][ T6886] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=xxhash,data_checksum=none,compression=lz4,wide_macs,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 121.400592][ T6886] allowing incompatible features above 0.0: (unknown version) [ 121.400604][ T6886] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 121.505058][ T6886] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 121.518499][ T6886] bcachefs (loop4): recovering from clean shutdown, journal seq 13 [ 121.532802][ T6909] loop2: detected capacity change from 0 to 256 [ 121.542582][ T980] peak_usb 4-1:0.56: probe with driver peak_usb failed with error -22 [ 121.567035][ T6909] exfat: Deprecated parameter 'utf8' [ 121.588266][ T980] usb 4-1: USB disconnect, device number 3 [ 121.673267][ T6909] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 121.696315][ T6886] bcachefs (loop4): accounting_read... done [ 121.753570][ T6886] bcachefs (loop4): alloc_read... done [ 121.784005][ T6886] bcachefs (loop4): snapshots_read... done [ 121.834236][ T6886] bcachefs (loop4): journal_replay... done [ 121.858190][ T6886] bcachefs (loop4): resume_logged_ops... done [ 121.887312][ T6886] bcachefs (loop4): delete_dead_inodes... done [ 121.917645][ T6845] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 121.974353][ T6916] loop0: detected capacity change from 0 to 24 [ 122.002615][ T6916] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 122.043653][ T6916] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 122.128510][ T6917] loop2: detected capacity change from 0 to 2048 [ 122.221648][ T6917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.245389][ T6917] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.454147][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.547320][ T2155] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.720838][ T2155] usb 4-1: Using ep0 maxpacket: 8 [ 122.733092][ T2155] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.752915][ T2155] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 122.785089][ T2155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.845655][ T30] audit: type=1326 audit(1752755693.619:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47738e929 code=0x7ffc0000 [ 122.869129][ T2155] usb 4-1: config 0 descriptor?? [ 122.883390][ T30] audit: type=1326 audit(1752755693.629:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff47738e929 code=0x7ffc0000 [ 122.904754][ T6934] loop2: detected capacity change from 0 to 2048 [ 122.925070][ T30] audit: type=1326 audit(1752755693.629:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff47738e963 code=0x7ffc0000 [ 122.956728][ T30] audit: type=1326 audit(1752755693.629:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff47738d3df code=0x7ffc0000 [ 122.985597][ T30] audit: type=1326 audit(1752755693.669:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff47738e9b7 code=0x7ffc0000 [ 123.014099][ T30] audit: type=1326 audit(1752755693.679:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff47738d290 code=0x7ffc0000 [ 123.047392][ T30] audit: type=1326 audit(1752755693.679:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff47738e52b code=0x7ffc0000 [ 123.070203][ T5852] loop2: p1 < > p4 [ 123.079165][ T5852] loop2: p4 size 8388608 extends beyond EOD, truncated [ 123.096822][ T30] audit: type=1326 audit(1752755693.709:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff47738d58a code=0x7ffc0000 [ 123.125298][ T30] audit: type=1326 audit(1752755693.709:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff47738e52b code=0x7ffc0000 [ 123.132616][ T6934] loop2: p1 < > p4 [ 123.153363][ T6934] loop2: p4 size 8388608 extends beyond EOD, truncated [ 123.360445][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 123.362073][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 123.415957][ T6944] loop2: detected capacity change from 0 to 2048 [ 123.438469][ T6944] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.541403][ T2155] usb 4-1: USB disconnect, device number 4 [ 123.713923][ T6953] hub 8-0:1.0: USB hub found [ 123.719462][ T6953] hub 8-0:1.0: 1 port detected [ 123.806008][ T6955] capability: warning: `syz.1.369' uses 32-bit capabilities (legacy support in use) [ 123.877550][ T980] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 124.040096][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 124.051860][ T980] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 124.061185][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.080341][ T980] usb 3-1: config 0 descriptor?? [ 124.090116][ T6948] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.107369][ T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.224207][ T6968] loop4: detected capacity change from 0 to 1024 [ 124.256557][ T6969] loop3: detected capacity change from 0 to 2048 [ 124.280814][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.292660][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.299961][ T5852] loop3: p1 < > p4 [ 124.303112][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.313687][ T5852] loop3: p4 size 8388608 extends beyond EOD, truncated [ 124.323464][ T5948] hfsplus: b-tree write err: -5, ino 4 [ 124.334352][ T44] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 124.349517][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.369710][ T6969] loop3: p1 < > p4 [ 124.374999][ T44] usb 2-1: config 0 descriptor?? [ 124.390838][ T6969] loop3: p4 size 8388608 extends beyond EOD, truncated [ 124.455326][ T5214] loop3: p1 < > p4 [ 124.468813][ T5214] loop3: p4 size 8388608 extends beyond EOD, truncated [ 124.554870][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 124.563634][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 124.570539][ T980] belkin 0003:050D:3201.0007: unbalanced collection at end of report description [ 124.611063][ T980] belkin 0003:050D:3201.0007: parse failed [ 124.633428][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 124.638254][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 124.647246][ T980] belkin 0003:050D:3201.0007: probe with driver belkin failed with error -22 [ 124.715025][ T6977] loop3: detected capacity change from 0 to 256 [ 124.759234][ T980] usb 3-1: USB disconnect, device number 6 [ 124.805418][ T44] hid-udraw 0003:20D6:CB17.0008: item fetching failed at offset 5/7 [ 124.814753][ T6977] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 124.832936][ T44] hid-udraw 0003:20D6:CB17.0008: parse failed [ 124.840612][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 124.841852][ T44] hid-udraw 0003:20D6:CB17.0008: probe with driver hid-udraw failed with error -22 [ 124.852629][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 125.032800][ T980] usb 2-1: USB disconnect, device number 4 [ 125.051875][ T6983] loop4: detected capacity change from 0 to 64 [ 125.522883][ T6993] loop2: detected capacity change from 0 to 512 [ 125.546520][ T6993] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.570074][ T6989] loop3: detected capacity change from 0 to 32768 [ 125.593584][ T6989] gfs2: fsid=norecovery: Trying to join cluster "lock_nolock", "norecovery" [ 125.602554][ T6989] gfs2: fsid=norecovery: Now mounting FS (format 0)... [ 125.629501][ T6989] syz.3.386: attempt to access beyond end of device [ 125.629501][ T6989] loop3: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 125.645311][ T6989] gfs2: fsid=norecovery.s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 125.661351][ T6989] gfs2: fsid=norecovery.s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:2 [ 125.670763][ T6989] gfs2: fsid=norecovery.s: H: s:SH f:eEcH e:0 p:6989 [syz.3.386] init_journal+0x17f8/0x2260 [ 125.681189][ T6989] gfs2: fsid=norecovery.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 125.690040][ T6989] gfs2: fsid=norecovery.s: about to withdraw this file system [ 125.697813][ T6989] gfs2: fsid=norecovery.s: Journal recovery skipped for jid 0 until next mount. [ 125.706851][ T6989] gfs2: fsid=norecovery.s: Glock dequeues delayed: 0 [ 125.714777][ T6989] gfs2: fsid=norecovery.s: File system withdrawn [ 125.721216][ T6989] CPU: 1 UID: 0 PID: 6989 Comm: syz.3.386 Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 125.721239][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.721256][ T6989] Call Trace: [ 125.721264][ T6989] [ 125.721274][ T6989] dump_stack_lvl+0x189/0x250 [ 125.721304][ T6989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.721326][ T6989] ? __pfx__printk+0x10/0x10 [ 125.721352][ T6989] ? kobject_uevent_env+0x36b/0x8c0 [ 125.721379][ T6989] gfs2_withdraw+0xb30/0x1430 [ 125.721418][ T6989] ? __pfx_gfs2_withdraw+0x10/0x10 [ 125.721444][ T6989] ? __pfx_wake_up_bit+0x10/0x10 [ 125.721476][ T6989] ? gfs2_consist_inode_i+0xf5/0x110 [ 125.721502][ T6989] gfs2_jdesc_check+0x17d/0x2f0 [ 125.721532][ T6989] check_journal_clean+0x158/0x310 [ 125.721556][ T6989] ? __pfx_check_journal_clean+0x10/0x10 [ 125.721581][ T6989] ? init_journal+0x17f8/0x2260 [ 125.721612][ T6989] ? do_raw_spin_unlock+0x122/0x240 [ 125.721647][ T6989] ? _raw_spin_unlock+0x28/0x50 [ 125.721667][ T6989] ? gfs2_jdesc_find+0xab/0xc0 [ 125.721694][ T6989] init_journal+0x17f8/0x2260 [ 125.721728][ T6989] ? init_inodes+0xdb/0x320 [ 125.721755][ T6989] ? __pfx_init_journal+0x10/0x10 [ 125.721778][ T6989] ? vsnprintf+0xe11/0xf00 [ 125.721807][ T6989] ? snprintf+0xda/0x120 [ 125.721827][ T6989] ? init_inodes+0xdb/0x320 [ 125.721849][ T6989] ? __pfx_snprintf+0x10/0x10 [ 125.721869][ T6989] ? gfs2_glock_nq_num+0x13d/0x170 [ 125.721898][ T6989] init_inodes+0xdb/0x320 [ 125.721923][ T6989] gfs2_fill_super+0x1923/0x20d0 [ 125.721961][ T6989] ? __pfx_gfs2_fill_super+0x10/0x10 [ 125.721987][ T6989] ? init_locking+0xb8/0x210 [ 125.722008][ T6989] ? sb_set_blocksize+0x104/0x180 [ 125.722033][ T6989] ? setup_bdev_super+0x4c1/0x5b0 [ 125.722059][ T6989] get_tree_bdev_flags+0x40b/0x4d0 [ 125.722082][ T6989] ? __pfx_gfs2_fill_super+0x10/0x10 [ 125.722104][ T6989] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 125.722130][ T6989] ? rcu_is_watching+0x15/0xb0 [ 125.722154][ T6989] gfs2_get_tree+0x51/0x1e0 [ 125.722181][ T6989] vfs_get_tree+0x8f/0x2b0 [ 125.722206][ T6989] do_new_mount+0x2a2/0x9e0 [ 125.722235][ T6989] ? ns_capable+0x8a/0xf0 [ 125.722252][ T6989] ? __pfx_do_new_mount+0x10/0x10 [ 125.722276][ T6989] ? path_mount+0x61c/0xfe0 [ 125.722299][ T6989] ? user_path_at+0x44/0x60 [ 125.722328][ T6989] __se_sys_mount+0x317/0x410 [ 125.722360][ T6989] ? __pfx___se_sys_mount+0x10/0x10 [ 125.722390][ T6989] ? do_syscall_64+0xbe/0x3b0 [ 125.722413][ T6989] ? __x64_sys_mount+0x20/0xc0 [ 125.722441][ T6989] do_syscall_64+0xfa/0x3b0 [ 125.722464][ T6989] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.722487][ T6989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.722504][ T6989] ? clear_bhb_loop+0x60/0xb0 [ 125.722526][ T6989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.722543][ T6989] RIP: 0033:0x7f6adfb900ca [ 125.722568][ T6989] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.722583][ T6989] RSP: 002b:00007f6ae0989e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.722603][ T6989] RAX: ffffffffffffffda RBX: 00007f6ae0989ef0 RCX: 00007f6adfb900ca [ 125.722622][ T6989] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f6ae0989eb0 [ 125.722636][ T6989] RBP: 0000200000000400 R08: 00007f6ae0989ef0 R09: 0000000000200001 [ 125.722648][ T6989] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 125.722659][ T6989] R13: 00007f6ae0989eb0 R14: 00000000000125bb R15: 0000200000000180 [ 125.722688][ T6989] [ 125.722696][ T6989] gfs2: fsid=norecovery.s: Error checking journal for spectator mount. [ 125.787722][ T6993] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 126.139829][ T6993] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.388: attempt to clear invalid blocks 2 len 1 [ 126.179562][ T6993] EXT4-fs (loop2): Remounting filesystem read-only [ 126.217998][ T6993] EXT4-fs (loop2): 1 truncate cleaned up [ 126.258815][ T6993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.426802][ T6993] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work [ 126.540506][ T6991] loop4: detected capacity change from 0 to 32768 [ 126.574773][ T6991] XFS: noikeep mount option is deprecated. [ 126.595316][ T6991] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.689514][ T6991] XFS (loop4): Ending clean mount [ 126.720349][ T6991] XFS (loop4): Quotacheck needed: Please wait. [ 126.734190][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.775371][ T6991] XFS (loop4): Quotacheck: Done. [ 126.982385][ T5860] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.022635][ T7029] loop3: detected capacity change from 0 to 512 [ 127.076069][ T7029] EXT4-fs (loop3): Test dummy encryption mode enabled [ 127.109535][ T7029] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 127.167992][ T7029] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.274109][ T7029] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.398: bad orphan inode 131083 [ 127.324923][ T7029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.401935][ T7029] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 127.519761][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.704138][ T7048] netlink: 'syz.2.407': attribute type 7 has an invalid length. [ 127.749163][ T7025] loop0: detected capacity change from 0 to 40427 [ 127.821013][ T7025] F2FS-fs (loop0): invalid crc value [ 128.008183][ T7056] loop2: detected capacity change from 0 to 4096 [ 128.037996][ T7056] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 128.094585][ T7058] loop3: detected capacity change from 0 to 256 [ 128.139881][ T7058] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 128.149597][ T7025] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 128.198988][ T7056] ntfs3(loop2): failed to convert "c46c" to iso8859-3 [ 128.199165][ T7025] F2FS-fs (loop0): Start checkpoint disabled! [ 128.229344][ T7058] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 128.249450][ T7058] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 128.270348][ T7056] ntfs3(loop2): ino=20, mi_enum_attr [ 128.272453][ T7058] UDF-fs: Scanning with blocksize 512 failed [ 128.275703][ T7056] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 128.295656][ T7025] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 128.305759][ T7058] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 128.350906][ T7058] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.484115][ T7043] loop4: detected capacity change from 0 to 32768 [ 128.510883][ T7043] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.399 (7043) [ 128.601599][ T5948] kworker/u8:8: attempt to access beyond end of device [ 128.601599][ T5948] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.627096][ T7043] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.642803][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: kworker/u8:8 Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 128.642827][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.642839][ T5948] Workqueue: writeback wb_workfn (flush-7:0) [ 128.642865][ T5948] Call Trace: [ 128.642872][ T5948] [ 128.642880][ T5948] dump_stack_lvl+0x189/0x250 [ 128.642907][ T5948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.642928][ T5948] ? __pfx_queue_work_on+0x10/0x10 [ 128.642944][ T5948] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 128.642967][ T5948] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 128.643002][ T5948] f2fs_handle_critical_error+0x37c/0x540 [ 128.643035][ T5948] f2fs_write_end_io+0x886/0xb60 [ 128.643083][ T5948] __submit_merged_bio+0x27a/0x6a0 [ 128.643115][ T5948] __submit_merged_write_cond+0x255/0x530 [ 128.643147][ T5948] f2fs_write_data_pages+0x261d/0x3000 [ 128.643213][ T5948] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 128.643237][ T5948] ? __local_bh_enable_ip+0x12d/0x1c0 [ 128.643270][ T5948] ? rcu_is_watching+0x15/0xb0 [ 128.643347][ T5948] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 128.643365][ T5948] ? rcu_is_watching+0x15/0xb0 [ 128.643401][ T5948] ? kvm_sched_clock_read+0x11/0x20 [ 128.643421][ T5948] ? sched_clock+0x3f/0x60 [ 128.643444][ T5948] ? sched_clock_cpu+0x74/0x430 [ 128.643479][ T5948] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 128.643506][ T5948] do_writepages+0x32e/0x550 [ 128.643534][ T5948] ? reacquire_held_locks+0x127/0x1d0 [ 128.643553][ T5948] ? writeback_sb_inodes+0x384/0x1010 [ 128.643585][ T5948] __writeback_single_inode+0x145/0xff0 [ 128.643608][ T5948] ? do_raw_spin_unlock+0x122/0x240 [ 128.643635][ T5948] writeback_sb_inodes+0x6c7/0x1010 [ 128.643659][ T5948] ? __lock_acquire+0xab9/0xd20 [ 128.643710][ T5948] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 128.643781][ T5948] ? rcu_is_watching+0x15/0xb0 [ 128.643810][ T5948] wb_writeback+0x43b/0xaf0 [ 128.643842][ T5948] ? queue_io+0x341/0x590 [ 128.643868][ T5948] ? __pfx_wb_writeback+0x10/0x10 [ 128.643901][ T5948] ? _raw_spin_unlock_irq+0x23/0x50 [ 128.643928][ T5948] wb_workfn+0x409/0xef0 [ 128.643964][ T5948] ? __pfx_wb_workfn+0x10/0x10 [ 128.643989][ T5948] ? __lock_acquire+0xab9/0xd20 [ 128.644028][ T5948] ? process_scheduled_works+0x9ef/0x17b0 [ 128.644063][ T5948] ? _raw_spin_unlock_irq+0x23/0x50 [ 128.644082][ T5948] ? process_scheduled_works+0x9ef/0x17b0 [ 128.644108][ T5948] ? process_scheduled_works+0x9ef/0x17b0 [ 128.644137][ T5948] process_scheduled_works+0xae1/0x17b0 [ 128.644199][ T5948] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.644247][ T5948] worker_thread+0x8a0/0xda0 [ 128.644269][ T5948] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 128.644300][ T5948] ? __kthread_parkme+0x7b/0x200 [ 128.644331][ T5948] kthread+0x70e/0x8a0 [ 128.644356][ T5948] ? __pfx_worker_thread+0x10/0x10 [ 128.644378][ T5948] ? __pfx_kthread+0x10/0x10 [ 128.644402][ T5948] ? _raw_spin_unlock_irq+0x23/0x50 [ 128.644423][ T5948] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.644442][ T5948] ? __pfx_kthread+0x10/0x10 [ 128.644465][ T5948] ret_from_fork+0x3f9/0x770 [ 128.644487][ T5948] ? __pfx_ret_from_fork+0x10/0x10 [ 128.644512][ T5948] ? __switch_to_asm+0x39/0x70 [ 128.644532][ T5948] ? __switch_to_asm+0x33/0x70 [ 128.644552][ T5948] ? __pfx_kthread+0x10/0x10 [ 128.644575][ T5948] ret_from_fork_asm+0x1a/0x30 [ 128.644616][ T5948] [ 128.644624][ T5948] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 128.687458][ T7043] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 129.047599][ T7043] BTRFS info (device loop4): using free-space-tree [ 129.513890][ T7091] loop2: detected capacity change from 0 to 256 [ 129.551366][ T7091] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.587798][ T7091] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 129.636912][ T7091] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 129.709370][ T1097] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 129.875849][ T5860] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.264141][ T7115] netlink: 48 bytes leftover after parsing attributes in process `syz.4.423'. [ 130.301411][ T7118] loop0: detected capacity change from 0 to 128 [ 130.353508][ T7118] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.368288][ T7118] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.490162][ T980] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.587009][ T5843] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.671346][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 130.692479][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.721383][ T980] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 130.777459][ T980] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 130.806912][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.853359][ T980] usb 3-1: config 0 descriptor?? [ 131.121774][ T7148] loop0: detected capacity change from 0 to 512 [ 131.300347][ T980] ortek 0003:1223:3F07.0009: unknown main item tag 0x6 [ 131.317212][ T980] ortek 0003:1223:3F07.0009: report_id 29495 is invalid [ 131.340016][ T980] ortek 0003:1223:3F07.0009: item 0 2 1 8 parsing failed [ 131.370492][ T980] ortek 0003:1223:3F07.0009: probe with driver ortek failed with error -22 [ 131.518714][ T5935] usb 3-1: USB disconnect, device number 7 [ 131.708462][ T7172] loop0: detected capacity change from 0 to 128 [ 131.727985][ T7172] EXT4-fs: Ignoring removed nobh option [ 131.785724][ T7172] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.813411][ T7172] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.895726][ T7172] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 131.914492][ T7184] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 131.963731][ T7183] loop4: detected capacity change from 0 to 512 [ 131.992856][ T7186] loop3: detected capacity change from 0 to 4096 [ 132.008558][ T7183] EXT4-fs (loop4): orphan cleanup on readonly fs [ 132.016308][ T7183] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 132.048393][ T7183] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 132.065606][ T7183] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.461: attempt to clear invalid blocks 2 len 1 [ 132.084582][ T5843] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.118373][ T7183] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.461: invalid indirect mapped block 1819239214 (level 0) [ 132.140728][ T7183] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.461: invalid indirect mapped block 1819239214 (level 1) [ 132.224684][ T7183] EXT4-fs (loop4): 1 truncate cleaned up [ 132.258824][ T7183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.373041][ T7183] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 132.421331][ T7183] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.461: Abort forced by user [ 132.452242][ T7183] EXT4-fs (loop4): Remounting filesystem read-only [ 132.488415][ T7183] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 132.577367][ T5860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.635440][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.643569][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.664148][ T7206] program syz.1.470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.718758][ T7208] Bluetooth: MGMT ver 1.23 [ 132.752290][ T7212] loop4: detected capacity change from 0 to 2048 [ 132.848878][ T7212] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 132.901293][ T7219] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.137920][ T7227] loop4: detected capacity change from 0 to 512 [ 133.153320][ T7227] EXT4-fs: Invalid want_extra_isize 95 [ 133.415659][ T7231] loop3: detected capacity change from 0 to 1024 [ 133.465965][ T7231] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.644371][ T7245] loop0: detected capacity change from 0 to 512 [ 133.673013][ T7245] EXT4-fs: Ignoring removed orlov option [ 133.705221][ T7245] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.785016][ T7245] EXT4-fs (loop0): 1 orphan inode deleted [ 133.801183][ T7243] loop2: detected capacity change from 0 to 4096 [ 133.809223][ T7245] EXT4-fs (loop0): 1 truncate cleaned up [ 133.810531][ T7243] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 133.816888][ T7245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.851122][ T7245] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #12: block 7: comm syz.0.488: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0 [ 133.887218][ T7248] loop3: detected capacity change from 0 to 512 [ 133.894470][ T7248] EXT4-fs: Ignoring removed i_version option [ 133.903493][ T7248] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.955979][ T7248] EXT4-fs (loop3): Test dummy encryption mode enabled [ 134.008742][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.021986][ T7248] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.489: inode #13: comm syz.3.489: iget: illegal inode # [ 134.072015][ T7243] ntfs3(loop2): ino=1f, "file2" failed to open parent directory r=5 to update [ 134.155426][ T7248] EXT4-fs (loop3): Remounting filesystem read-only [ 134.214526][ T7248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.245295][ T1097] ntfs3(loop2): ino=1f, failed to open parent directory r=5 to update [ 134.292115][ T7236] loop4: detected capacity change from 0 to 32768 [ 134.429160][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.641770][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 134.648204][ T5164] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.657799][ T7236] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 134.657823][ T7236] allowing incompatible features above 0.0: (unknown version) [ 134.657835][ T7236] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 134.783092][ T7266] tipc: Started in network mode [ 134.783131][ T7266] tipc: Node identity ac14140f, cluster identity 4711 [ 134.783542][ T7266] tipc: New replicast peer: 10.1.1.2 [ 134.784366][ T7266] tipc: Enabled bearer , priority 10 [ 134.973636][ T7236] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 134.985872][ T7236] bcachefs (loop4): initializing new filesystem [ 135.074765][ T7236] bcachefs (loop4): going read-write [ 135.143508][ T7236] bcachefs (loop4): initializing freespace [ 135.356117][ T5860] bcachefs (loop4): clean shutdown complete, journal seq 8 [ 135.715329][ T9] tipc: Node number set to 2886997007 [ 135.735021][ T7302] veth1_macvtap: left promiscuous mode [ 135.740511][ T7302] macsec0: entered promiscuous mode [ 135.756839][ T7302] macsec0: entered allmulticast mode [ 135.787105][ T7302] veth1_macvtap: entered promiscuous mode [ 135.794792][ T7302] veth1_macvtap: entered allmulticast mode [ 135.807674][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.815411][ T7302] macsec0: left promiscuous mode [ 135.824565][ T7304] loop2: detected capacity change from 0 to 1024 [ 135.825469][ T7302] macsec0: left allmulticast mode [ 135.839921][ T7302] veth1_macvtap: left allmulticast mode [ 135.916259][ T1097] hfsplus: b-tree write err: -5, ino 4 [ 135.965462][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 135.974063][ T10] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.994630][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 136.008454][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 136.018200][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.038916][ T10] usb 4-1: config 0 descriptor?? [ 136.161013][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 136.335457][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.349505][ T9] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 136.371414][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.388595][ T9] usb 2-1: Product: syz [ 136.392891][ T9] usb 2-1: Manufacturer: syz [ 136.398198][ T9] usb 2-1: SerialNumber: syz [ 136.411674][ T9] usb 2-1: config 0 descriptor?? [ 136.429156][ T9] imon_raw 2-1:0.0: IR endpoint missing [ 136.445534][ T10] hid-retrode 0003:0403:97C1.000A: unknown main item tag 0x0 [ 136.478244][ T10] hid-retrode 0003:0403:97C1.000A: unknown main item tag 0x0 [ 136.496908][ T10] hid-retrode 0003:0403:97C1.000A: unknown main item tag 0x0 [ 136.504370][ T10] hid-retrode 0003:0403:97C1.000A: unknown main item tag 0x0 [ 136.514061][ T10] hid-retrode 0003:0403:97C1.000A: unknown main item tag 0x0 [ 136.541230][ T10] hid-retrode 0003:0403:97C1.000A: hidraw0: USB HID v0.02 Device [HID 0403:97c1] on usb-dummy_hcd.3-1/input0 [ 136.612180][ T10] usb 2-1: USB disconnect, device number 5 [ 136.687171][ T9] usb 4-1: USB disconnect, device number 5 [ 137.098132][ T7333] loop4: detected capacity change from 0 to 512 [ 137.111627][ T7333] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 137.131797][ T7333] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 137.140316][ T7333] System zones: 1-12 [ 137.154898][ T7333] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 137.214836][ T7333] EXT4-fs error (device loop4): ext4_do_update_inode:5652: inode #11: comm syz.4.524: corrupted inode contents [ 137.240058][ T7333] EXT4-fs error (device loop4): ext4_dirty_inode:6537: inode #11: comm syz.4.524: mark_inode_dirty error [ 137.272683][ T7333] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.524: invalid indirect mapped block 1 (level 1) [ 137.296739][ T7333] EXT4-fs error (device loop4): ext4_do_update_inode:5652: inode #11: comm syz.4.524: corrupted inode contents [ 137.313817][ T7333] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 137.323679][ T7333] EXT4-fs error (device loop4): ext4_do_update_inode:5652: inode #11: comm syz.4.524: corrupted inode contents [ 137.336658][ T7333] EXT4-fs error (device loop4): ext4_truncate:4665: inode #11: comm syz.4.524: mark_inode_dirty error [ 137.360335][ T7333] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 137.388340][ T7333] EXT4-fs (loop4): 1 truncate cleaned up [ 137.423789][ T7333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.620028][ T5860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.992979][ T7366] loop4: detected capacity change from 0 to 1024 [ 138.099909][ T59] hfsplus: b-tree write err: -5, ino 4 [ 138.733833][ T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.882648][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 138.909072][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.917246][ T7373] loop2: detected capacity change from 0 to 32768 [ 138.930026][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.936734][ T7373] btrfs: Deprecated parameter 'usebackuproot' [ 138.945316][ T44] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 138.957943][ T7373] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 139.005642][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.019695][ T7373] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.543 (7373) [ 139.047512][ T44] usb 2-1: config 0 descriptor?? [ 139.065354][ T7373] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.088711][ T7373] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 139.122393][ T7373] BTRFS info (device loop2): using free-space-tree [ 139.262470][ T13] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 139.336101][ T7373] BTRFS error (device loop2): failed to load root extent [ 139.370227][ T7373] BTRFS warning (device loop2): try to load backup roots slot 1 [ 139.418942][ T13] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 139.474999][ T44] glorious 0003:258A:0033.000B: unknown main item tag 0x2 [ 139.484796][ T7373] BTRFS warning (device loop2): couldn't read tree root [ 139.509093][ T7373] BTRFS warning (device loop2): try to load backup roots slot 2 [ 139.541862][ T44] glorious 0003:258A:0033.000B: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.1-1/input0 [ 139.566759][ T13] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 139.606562][ T7373] BTRFS warning (device loop2): couldn't read tree root [ 139.619064][ T7373] BTRFS warning (device loop2): try to load backup roots slot 3 [ 139.660416][ T2155] usb 2-1: USB disconnect, device number 6 [ 139.699205][ T7431] fido_id[7431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 139.734503][ T7373] BTRFS info (device loop2): rebuilding free space tree [ 139.818006][ T7373] BTRFS info (device loop2): checking UUID tree [ 140.018093][ T7444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.033175][ T5845] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.379135][ T7430] loop0: detected capacity change from 0 to 32768 [ 140.439666][ T7448] loop3: detected capacity change from 0 to 4096 [ 140.469939][ T7448] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 140.578449][ T7448] ntfs3(loop3): ino=19, mi_enum_attr [ 140.601882][ T7448] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 140.987190][ T7468] netlink: 56 bytes leftover after parsing attributes in process `syz.3.579'. [ 141.009100][ T7468] netlink: 'syz.3.579': attribute type 5 has an invalid length. [ 141.574639][ T7487] loop4: detected capacity change from 0 to 1024 [ 141.730901][ T1097] hfsplus: b-tree write err: -5, ino 4 [ 141.902890][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 141.930282][ T7497] netlink: 'syz.3.594': attribute type 2 has an invalid length. [ 141.948509][ T7497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.594'. [ 142.102506][ T7471] loop2: detected capacity change from 0 to 40427 [ 142.119676][ T7471] F2FS-fs: heap/no_heap options were deprecated [ 142.174964][ T7471] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (4285726721, 24) [ 142.240717][ T7471] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 142.338703][ T7471] F2FS-fs (loop2): invalid crc value [ 142.348691][ T7509] loop0: detected capacity change from 0 to 4096 [ 142.422981][ T7513] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.544642][ T7516] loop4: detected capacity change from 0 to 2364 [ 142.599937][ T7471] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 142.692476][ T7471] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 142.709579][ T7521] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 142.741687][ T7471] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.751147][ T7521] netlink: 144 bytes leftover after parsing attributes in process `syz.3.604'. [ 142.760107][ T7521] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 142.797831][ T7521] netlink: 76 bytes leftover after parsing attributes in process `syz.3.604'. [ 143.064297][ T7531] netlink: 'syz.4.608': attribute type 3 has an invalid length. [ 143.125010][ T7536] loop0: detected capacity change from 0 to 16 [ 143.178667][ T7536] erofs (device loop0): mounted with root inode @ nid 36. [ 143.466792][ T7547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.615'. [ 143.467033][ T7545] [U] „ [ 144.040627][ T7542] loop4: detected capacity change from 0 to 32768 [ 144.089396][ T7542] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.614 (7542) [ 144.187153][ T7542] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.223013][ T7542] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 144.232866][ T7542] BTRFS info (device loop4): using free-space-tree [ 144.421452][ T7542] BTRFS info (device loop4): rebuilding free space tree [ 144.720965][ T7553] loop0: detected capacity change from 0 to 40427 [ 144.734812][ T5860] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.753527][ T7553] F2FS-fs (loop0): invalid crc value [ 145.133056][ T7553] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 145.183611][ T7553] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 145.252380][ T7618] loop2: detected capacity change from 0 to 256 [ 145.262068][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 145.262084][ T30] audit: type=1800 audit(1752755716.970:75): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.620" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 145.355059][ T7618] FAT-fs (loop2): Directory bread(block 64) failed [ 145.387115][ T7618] FAT-fs (loop2): Directory bread(block 65) failed [ 145.421275][ T7618] FAT-fs (loop2): Directory bread(block 66) failed [ 145.436985][ T5843] syz-executor: attempt to access beyond end of device [ 145.436985][ T5843] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.464777][ T7620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.466269][ T7618] FAT-fs (loop2): Directory bread(block 67) failed [ 145.482981][ T7618] FAT-fs (loop2): Directory bread(block 68) failed [ 145.489529][ T7618] FAT-fs (loop2): Directory bread(block 69) failed [ 145.524266][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 145.524289][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.524299][ T5843] Call Trace: [ 145.524307][ T5843] [ 145.524314][ T5843] dump_stack_lvl+0x189/0x250 [ 145.524340][ T5843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.524358][ T5843] ? __pfx_queue_work_on+0x10/0x10 [ 145.524372][ T5843] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 145.524391][ T5843] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 145.524419][ T5843] f2fs_handle_critical_error+0x37c/0x540 [ 145.524446][ T5843] f2fs_write_end_io+0x886/0xb60 [ 145.524484][ T5843] __submit_merged_bio+0x27a/0x6a0 [ 145.524509][ T5843] __submit_merged_write_cond+0x255/0x530 [ 145.524535][ T5843] f2fs_write_data_pages+0x261d/0x3000 [ 145.524585][ T5843] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 145.524665][ T5843] ? __lock_acquire+0xab9/0xd20 [ 145.524695][ T5843] ? do_raw_spin_lock+0x121/0x290 [ 145.524722][ T5843] ? do_raw_spin_unlock+0x122/0x240 [ 145.524740][ T5843] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 145.524762][ T5843] do_writepages+0x32e/0x550 [ 145.524790][ T5843] ? do_raw_spin_unlock+0x122/0x240 [ 145.524812][ T5843] filemap_fdatawrite+0x199/0x240 [ 145.524831][ T5843] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 145.524888][ T5843] ? do_raw_spin_unlock+0x122/0x240 [ 145.524910][ T5843] f2fs_sync_dirty_inodes+0x31f/0x830 [ 145.524937][ T5843] f2fs_write_checkpoint+0x95a/0x1df0 [ 145.524973][ T5843] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 145.525026][ T5843] ? kill_f2fs_super+0x298/0x6c0 [ 145.525045][ T5843] kill_f2fs_super+0x2c3/0x6c0 [ 145.525064][ T5843] ? __pfx_kill_f2fs_super+0x10/0x10 [ 145.525076][ T5843] ? radix_tree_delete_item+0x2b6/0x400 [ 145.525102][ T5843] ? shrinker_free+0x2ce/0x3e0 [ 145.525119][ T5843] deactivate_locked_super+0xbc/0x130 [ 145.525138][ T5843] cleanup_mnt+0x425/0x4c0 [ 145.525154][ T5843] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.525183][ T5843] task_work_run+0x1d1/0x260 [ 145.525206][ T5843] ? __pfx_task_work_run+0x10/0x10 [ 145.525223][ T5843] ? __x64_sys_umount+0x122/0x160 [ 145.525246][ T5843] ? exit_to_user_mode_loop+0x40/0x110 [ 145.525271][ T5843] exit_to_user_mode_loop+0xec/0x110 [ 145.525292][ T5843] do_syscall_64+0x2bd/0x3b0 [ 145.525312][ T5843] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.525330][ T5843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.525344][ T5843] ? clear_bhb_loop+0x60/0xb0 [ 145.525362][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.525376][ T5843] RIP: 0033:0x7f5169b8fc57 [ 145.525390][ T5843] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 145.525403][ T5843] RSP: 002b:00007fffd4bcbfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 145.525419][ T5843] RAX: 0000000000000000 RBX: 00007f5169c10a8d RCX: 00007f5169b8fc57 [ 145.525429][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd4bcc0a0 [ 145.525438][ T5843] RBP: 00007fffd4bcc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 145.525447][ T5843] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd4bcd130 [ 145.525456][ T5843] R13: 00007f5169c10a8d R14: 0000000000023b37 R15: 00007fffd4bcd170 [ 145.525481][ T5843] [ 145.525488][ T5843] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 145.565508][ T7618] FAT-fs (loop2): Directory bread(block 70) failed [ 145.883073][ T7618] FAT-fs (loop2): Directory bread(block 71) failed [ 145.890101][ T7618] FAT-fs (loop2): Directory bread(block 72) failed [ 145.897369][ T7618] FAT-fs (loop2): Directory bread(block 73) failed [ 147.899919][ T7627] loop3: detected capacity change from 0 to 262144 [ 147.909232][ T7627] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.643 (7627) [ 147.955567][ T7660] loop0: detected capacity change from 0 to 512 [ 147.973035][ T7627] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 147.983227][ T7627] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 147.992660][ T7627] BTRFS info (device loop3): using free-space-tree [ 148.087560][ T7660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.105043][ T7660] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.154335][ T42] BTRFS warning (device loop3): checksum verify failed on logical 30654464 mirror 1 wanted 0x6191332ca3bfabbd found 0x6358b6e0e1b1f455 level 0 [ 148.203205][ T42] BTRFS warning (device loop3): checksum verify failed on logical 30654464 mirror 2 wanted 0x6191332ca3bfabbd found 0x17096f30a0eb4fbb level 0 [ 148.206995][ T7660] EXT4-fs error (device loop0): ext4_nfs_get_inode:1525: inode #14: comm syz.0.641: invalid fast symlink length 39 [ 148.218973][ T7627] BTRFS warning (device loop3): couldn't read tree root [ 148.307261][ T7627] BTRFS error (device loop3): open_ctree failed: -5 [ 148.428996][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.825387][ T7658] loop4: detected capacity change from 0 to 32768 [ 148.836620][ T7653] loop2: detected capacity change from 0 to 40427 [ 148.892228][ T7653] F2FS-fs (loop2): build fault injection type: 0x7 [ 148.954551][ T7653] F2FS-fs (loop2): invalid crc value [ 149.307871][ T7653] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 149.385505][ T7653] F2FS-fs (loop2): Start checkpoint disabled! [ 149.458110][ T7653] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 149.643816][ T7713] netlink: 'syz.1.676': attribute type 2 has an invalid length. [ 149.685150][ T59] kworker/u8:4: attempt to access beyond end of device [ 149.685150][ T59] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.722745][ T7713] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.676'. [ 149.730553][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 149.730582][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.730598][ T59] Workqueue: writeback wb_workfn (flush-7:2) [ 149.730631][ T59] Call Trace: [ 149.730639][ T59] [ 149.730648][ T59] dump_stack_lvl+0x189/0x250 [ 149.730679][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.730702][ T59] ? __pfx_queue_work_on+0x10/0x10 [ 149.730719][ T59] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 149.730744][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 149.730783][ T59] f2fs_handle_critical_error+0x37c/0x540 [ 149.730819][ T59] f2fs_write_end_io+0x886/0xb60 [ 149.730872][ T59] __submit_merged_bio+0x27a/0x6a0 [ 149.730906][ T59] __submit_merged_write_cond+0x255/0x530 [ 149.730942][ T59] f2fs_write_data_pages+0x261d/0x3000 [ 149.731013][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 149.731060][ T59] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 149.731124][ T59] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 149.731152][ T59] ? look_up_lock_class+0x74/0x170 [ 149.731188][ T59] ? trace_f2fs_writepages+0x7f/0x200 [ 149.731217][ T59] ? f2fs_write_node_pages+0x478/0x6e0 [ 149.731250][ T59] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 149.731293][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 149.731324][ T59] do_writepages+0x32e/0x550 [ 149.731355][ T59] ? reacquire_held_locks+0x127/0x1d0 [ 149.731375][ T59] ? writeback_sb_inodes+0x384/0x1010 [ 149.731410][ T59] __writeback_single_inode+0x145/0xff0 [ 149.731436][ T59] ? do_raw_spin_unlock+0x122/0x240 [ 149.731467][ T59] writeback_sb_inodes+0x6c7/0x1010 [ 149.731531][ T59] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 149.731608][ T59] ? rcu_is_watching+0x15/0xb0 [ 149.731641][ T59] wb_writeback+0x43b/0xaf0 [ 149.731676][ T59] ? queue_io+0x341/0x590 [ 149.731705][ T59] ? __pfx_wb_writeback+0x10/0x10 [ 149.731740][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 149.731769][ T59] wb_workfn+0x409/0xef0 [ 149.731808][ T59] ? __pfx_wb_workfn+0x10/0x10 [ 149.731833][ T59] ? __lock_acquire+0xab9/0xd20 [ 149.731877][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 149.731917][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 149.731939][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 149.731966][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 149.732000][ T59] process_scheduled_works+0xae1/0x17b0 [ 149.732067][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 149.732120][ T59] worker_thread+0x8a0/0xda0 [ 149.732143][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 149.732177][ T59] ? __kthread_parkme+0x7b/0x200 [ 149.732210][ T59] kthread+0x70e/0x8a0 [ 149.732239][ T59] ? __pfx_worker_thread+0x10/0x10 [ 149.732257][ T59] ? __pfx_kthread+0x10/0x10 [ 149.732282][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 149.732304][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.732327][ T59] ? __pfx_kthread+0x10/0x10 [ 149.732351][ T59] ret_from_fork+0x3f9/0x770 [ 149.732375][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 149.732404][ T59] ? __switch_to_asm+0x39/0x70 [ 149.732427][ T59] ? __switch_to_asm+0x33/0x70 [ 149.732449][ T59] ? __pfx_kthread+0x10/0x10 [ 149.732474][ T59] ret_from_fork_asm+0x1a/0x30 [ 149.732524][ T59] [ 149.747693][ T59] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 150.236565][ T7723] nbd: socks must be embedded in a SOCK_ITEM attr [ 150.335577][ T7727] loop4: detected capacity change from 0 to 1024 [ 150.502609][ T7731] mmap: syz.1.685 (7731) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.541846][ T79] hfsplus: b-tree write err: -5, ino 4 [ 150.953052][ T44] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.127642][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 151.138056][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.150962][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.187062][ T44] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 151.228032][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.261447][ T44] usb 4-1: config 0 descriptor?? [ 151.357545][ T7754] loop0: detected capacity change from 0 to 64 [ 151.364325][ T7756] loop2: detected capacity change from 0 to 256 [ 151.480535][ T7756] FAT-fs (loop2): Directory bread(block 64) failed [ 151.503229][ T7756] FAT-fs (loop2): Directory bread(block 65) failed [ 151.509958][ T7756] FAT-fs (loop2): Directory bread(block 66) failed [ 151.558027][ T7756] FAT-fs (loop2): Directory bread(block 67) failed [ 151.590381][ T7756] FAT-fs (loop2): Directory bread(block 68) failed [ 151.625847][ T7756] FAT-fs (loop2): Directory bread(block 69) failed [ 151.652279][ T7756] FAT-fs (loop2): Directory bread(block 70) failed [ 151.658871][ T7756] FAT-fs (loop2): Directory bread(block 71) failed [ 151.686699][ T7763] loop0: detected capacity change from 0 to 64 [ 151.700474][ T44] corsair-cpro 0003:1B1C:1D00.000C: item fetching failed at offset 1/5 [ 151.718678][ T7756] FAT-fs (loop2): Directory bread(block 72) failed [ 151.723352][ T44] corsair-cpro 0003:1B1C:1D00.000C: probe with driver corsair-cpro failed with error -22 [ 151.766512][ T7756] FAT-fs (loop2): Directory bread(block 73) failed [ 151.897156][ T5935] usb 4-1: USB disconnect, device number 6 [ 152.289875][ T7744] loop4: detected capacity change from 0 to 40427 [ 152.333794][ T7744] F2FS-fs (loop4): Image doesn't support compression [ 152.340541][ T7744] F2FS-fs (loop4): build fault injection rate: 690 [ 152.372435][ T7744] F2FS-fs (loop4): invalid crc value [ 152.509217][ T5935] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 152.523827][ T7744] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 152.566563][ T7744] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 152.640548][ T30] audit: type=1800 audit(1752755724.877:76): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.690" name="file2" dev="loop4" ino=10 res=0 errno=0 [ 152.683000][ T5860] syz-executor: attempt to access beyond end of device [ 152.683000][ T5860] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.697926][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 152.699950][ T5860] CPU: 0 UID: 0 PID: 5860 Comm: syz-executor Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 152.699979][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.699992][ T5860] Call Trace: [ 152.700001][ T5860] [ 152.700011][ T5860] dump_stack_lvl+0x189/0x250 [ 152.700046][ T5860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.700071][ T5860] ? __pfx_queue_work_on+0x10/0x10 [ 152.700107][ T5860] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 152.700136][ T5860] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 152.700182][ T5860] f2fs_handle_critical_error+0x37c/0x540 [ 152.700222][ T5860] f2fs_write_end_io+0x886/0xb60 [ 152.700287][ T5860] __submit_merged_bio+0x27a/0x6a0 [ 152.700324][ T5860] __submit_merged_write_cond+0x255/0x530 [ 152.700366][ T5860] f2fs_write_data_pages+0x261d/0x3000 [ 152.700448][ T5860] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 152.700544][ T5860] ? __mod_zone_page_state+0xd7/0x140 [ 152.700597][ T5860] ? folios_put_refs+0x560/0x640 [ 152.700639][ T5860] ? __lock_acquire+0xab9/0xd20 [ 152.700685][ T5860] ? do_raw_spin_lock+0x121/0x290 [ 152.700742][ T5860] ? do_raw_spin_unlock+0x122/0x240 [ 152.700768][ T5860] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 152.700801][ T5860] do_writepages+0x32e/0x550 [ 152.700845][ T5860] ? do_raw_spin_unlock+0x122/0x240 [ 152.700879][ T5860] filemap_fdatawrite+0x199/0x240 [ 152.700908][ T5860] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 152.701007][ T5860] ? do_raw_spin_unlock+0x122/0x240 [ 152.701038][ T5860] f2fs_sync_dirty_inodes+0x31f/0x830 [ 152.701077][ T5860] f2fs_write_checkpoint+0x95a/0x1df0 [ 152.701126][ T5860] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 152.701205][ T5860] ? kill_f2fs_super+0x298/0x6c0 [ 152.701232][ T5860] kill_f2fs_super+0x2c3/0x6c0 [ 152.701258][ T5860] ? __pfx_kill_f2fs_super+0x10/0x10 [ 152.701275][ T5860] ? radix_tree_delete_item+0x2b6/0x400 [ 152.701309][ T5860] ? shrinker_free+0x2ce/0x3e0 [ 152.701332][ T5860] deactivate_locked_super+0xbc/0x130 [ 152.701358][ T5860] cleanup_mnt+0x425/0x4c0 [ 152.701380][ T5860] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.701411][ T5860] task_work_run+0x1d1/0x260 [ 152.701441][ T5860] ? __pfx_task_work_run+0x10/0x10 [ 152.701464][ T5860] ? __x64_sys_umount+0x122/0x160 [ 152.701495][ T5860] ? exit_to_user_mode_loop+0x40/0x110 [ 152.701527][ T5860] exit_to_user_mode_loop+0xec/0x110 [ 152.701562][ T5860] do_syscall_64+0x2bd/0x3b0 [ 152.701587][ T5860] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.701613][ T5860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.701632][ T5860] ? clear_bhb_loop+0x60/0xb0 [ 152.701656][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.701676][ T5860] RIP: 0033:0x7f7d31d8fc57 [ 152.701694][ T5860] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 152.701710][ T5860] RSP: 002b:00007ffdc803f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 152.701732][ T5860] RAX: 0000000000000000 RBX: 00007f7d31e10a8d RCX: 00007f7d31d8fc57 [ 152.701744][ T5860] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc803f2d0 [ 152.701756][ T5860] RBP: 00007ffdc803f2d0 R08: 0000000000000000 R09: 0000000000000000 [ 152.701768][ T5860] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdc8040360 [ 152.701781][ T5860] R13: 00007f7d31e10a8d R14: 00000000000259fc R15: 00007ffdc80403a0 [ 152.701816][ T5860] [ 152.703150][ T5860] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 152.727463][ T5935] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 153.065000][ T5935] usb 2-1: config 0 has no interface number 0 [ 153.071247][ T5935] usb 2-1: config 0 interface 184 has no altsetting 0 [ 153.085832][ T5935] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 153.099548][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.107677][ T5935] usb 2-1: Product: syz [ 153.111929][ T5935] usb 2-1: Manufacturer: syz [ 153.116644][ T5935] usb 2-1: SerialNumber: syz [ 153.161122][ T5935] usb 2-1: config 0 descriptor?? [ 153.171408][ T5935] smsc75xx v1.0.0 [ 153.526972][ T7799] loop3: detected capacity change from 0 to 4096 [ 153.743363][ T5935] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 153.758128][ T5935] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 153.799356][ T5935] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 153.820275][ T5935] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 153.869235][ T7808] loop4: detected capacity change from 0 to 256 [ 153.884730][ T5935] usb 2-1: USB disconnect, device number 7 [ 153.965235][ T7808] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 154.170883][ T7804] loop2: detected capacity change from 0 to 32768 [ 154.183997][ T7804] XFS: attr2 mount option is deprecated. [ 154.257288][ T7804] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.423448][ T7804] XFS (loop2): Ending clean mount [ 154.451649][ T7804] XFS (loop2): Quotacheck needed: Please wait. [ 154.516922][ T7804] XFS (loop2): Quotacheck: Done. [ 154.570863][ T5845] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.792393][ T7814] loop3: detected capacity change from 0 to 32768 [ 154.804129][ T7814] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.721 (7814) [ 154.870286][ T7814] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 154.887768][ T7814] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 154.887828][ T7814] BTRFS info (device loop3): using free-space-tree [ 155.326557][ T5844] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.333651][ T5935] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 155.350337][ T7873] netlink: 'syz.2.737': attribute type 2 has an invalid length. [ 155.524080][ T5935] usb 5-1: config 0 has no interfaces? [ 155.540379][ T5935] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.556832][ T7878] netlink: 'syz.3.738': attribute type 6 has an invalid length. [ 155.567242][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.582661][ T5935] usb 5-1: Product: syz [ 155.590058][ T5935] usb 5-1: Manufacturer: syz [ 155.597451][ T7881] netlink: 'syz.3.738': attribute type 6 has an invalid length. [ 155.613248][ T5935] usb 5-1: config 0 descriptor?? [ 155.624897][ T7881] Zero length message leads to an empty skb [ 155.696619][ T5915] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 155.841499][ T44] usb 5-1: USB disconnect, device number 3 [ 155.847469][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 155.873530][ T5915] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.895728][ T5915] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.938540][ T5915] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.959895][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 155.960070][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'. [ 156.009122][ T5915] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 156.025098][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.065843][ T5915] usb 3-1: config 0 descriptor?? [ 156.255701][ T7895] loop0: detected capacity change from 0 to 4096 [ 156.300087][ T7895] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 156.323611][ T7895] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 156.387458][ T7897] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.441457][ T7895] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 156.483559][ T7895] Remounting filesystem read-only [ 156.494270][ T5915] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 156.522040][ T5915] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 156.556163][ T5843] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 156.574040][ T5915] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 156.581479][ T5915] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 156.621121][ T5915] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 156.638545][ T5915] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 156.656097][ T5915] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 156.685111][ T5915] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 156.711203][ T5915] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 156.742565][ T5915] hid-generic 0003:045E:05DA.000D: unknown main item tag 0x0 [ 156.766251][ T5915] hid-generic 0003:045E:05DA.000D: unbalanced collection at end of report description [ 156.802808][ T5915] hid-generic 0003:045E:05DA.000D: probe with driver hid-generic failed with error -22 [ 156.859106][ T5915] usb 3-1: USB disconnect, device number 8 [ 156.869510][ T7909] devtmpfs: Cannot disable swap on remount [ 157.185019][ T7921] loop3: detected capacity change from 0 to 16 [ 157.219698][ T7921] erofs (device loop3): mounted with root inode @ nid 36. [ 157.447806][ T7924] Invalid ELF header magic: != ELF [ 157.628264][ T7934] loop0: detected capacity change from 0 to 256 [ 157.675759][ T7941] loop2: detected capacity change from 0 to 1024 [ 157.724827][ T7934] FAT-fs (loop0): Directory bread(block 64) failed [ 157.756452][ T7934] FAT-fs (loop0): Directory bread(block 65) failed [ 157.781947][ T7934] FAT-fs (loop0): Directory bread(block 66) failed [ 157.812045][ T7934] FAT-fs (loop0): Directory bread(block 67) failed [ 157.848827][ T7934] FAT-fs (loop0): Directory bread(block 68) failed [ 157.896240][ T7934] FAT-fs (loop0): Directory bread(block 69) failed [ 157.926973][ T7934] FAT-fs (loop0): Directory bread(block 70) failed [ 157.933537][ T7934] FAT-fs (loop0): Directory bread(block 71) failed [ 157.958304][ T7938] loop4: detected capacity change from 0 to 8192 [ 157.963759][ T7934] FAT-fs (loop0): Directory bread(block 72) failed [ 158.006018][ T7938] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.006616][ T7934] FAT-fs (loop0): Directory bread(block 73) failed [ 158.315891][ T7957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.776'. [ 158.446766][ T5915] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.590639][ T7967] netlink: 'syz.3.781': attribute type 1 has an invalid length. [ 158.616521][ T5915] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 158.632273][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.654079][ T5915] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 158.683908][ T5915] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 158.733579][ T5915] usb 3-1: Manufacturer: syz [ 158.746316][ T5915] usb 3-1: config 0 descriptor?? [ 158.893643][ T5915] rc_core: IR keymap rc-hauppauge not found [ 158.899593][ T5915] Registered IR keymap rc-empty [ 158.933658][ T5915] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 158.970898][ T5915] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 159.286851][ C1] igorplugusb 3-1:0.0: receive overflow invalid: 64 [ 159.338893][ T7997] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.794'. [ 159.420157][ T8001] loop3: detected capacity change from 0 to 1024 [ 159.499248][ T44] usb 3-1: USB disconnect, device number 9 [ 159.505539][ T8001] hfsplus: bad catalog entry type [ 159.624415][ T36] hfsplus: b-tree write err: -5, ino 4 [ 159.686489][ T5915] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 159.866163][ T5915] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 159.882124][ T5915] usb 2-1: config 0 has no interface number 0 [ 159.898241][ T5915] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 159.930990][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.954141][ T5915] usb 2-1: config 0 descriptor?? [ 160.016782][ T5915] usb 2-1: selecting invalid altsetting 1 [ 160.025328][ T5915] dvb_ttusb_budget: ttusb_init_controller: error [ 160.057378][ T5915] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 160.305338][ T5915] DVB: Unable to find symbol cx22700_attach() [ 160.426946][ T5915] DVB: Unable to find symbol tda10046_attach() [ 160.434871][ T8038] loop4: detected capacity change from 0 to 16 [ 160.447504][ T5915] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 160.471714][ T5915] usb 2-1: USB disconnect, device number 8 [ 160.513193][ T8038] erofs (device loop4): mounted with root inode @ nid 36. [ 160.811978][ T8052] loop4: detected capacity change from 0 to 2048 [ 160.900095][ T8052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.968073][ T8049] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 160.986773][ T8049] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 161.000780][ T8049] EXT4-fs (loop4): This should not happen!! Data will be lost [ 161.000780][ T8049] [ 161.013169][ T8049] EXT4-fs (loop4): Total free blocks count 0 [ 161.019583][ T8049] EXT4-fs (loop4): Free/Dirty block details [ 161.025669][ T8049] EXT4-fs (loop4): free_blocks=2415919104 [ 161.033470][ T8049] EXT4-fs (loop4): dirty_blocks=16 [ 161.039071][ T8049] EXT4-fs (loop4): Block reservation details [ 161.045095][ T8049] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 161.078284][ T5860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.180022][ T8065] loop3: detected capacity change from 0 to 256 [ 161.652604][ T2155] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 161.838925][ T2155] usb 4-1: Using ep0 maxpacket: 32 [ 161.859392][ T2155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.882915][ T2155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.896845][ T2155] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 161.918429][ T2155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.941128][ T2155] usb 4-1: config 0 descriptor?? [ 161.995018][ T2155] hub 4-1:0.0: USB hub found [ 162.160925][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 162.188451][ T2155] hub 4-1:0.0: 1 port detected [ 162.202902][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 162.224377][ T8089] netlink: 'syz.2.836': attribute type 11 has an invalid length. [ 162.239281][ T8089] netlink: 'syz.2.836': attribute type 13 has an invalid length. [ 162.329602][ T8093] ucma_write: process 331 (syz.4.838) changed security contexts after opening file descriptor, this is not allowed. [ 162.379938][ T2155] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 162.414217][ T2155] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 162.433773][ T2155] usbhid 4-1:0.0: can't add hid device: -71 [ 162.450332][ T2155] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 162.526329][ T2155] usb 4-1: USB disconnect, device number 7 [ 163.109246][ T8103] loop4: detected capacity change from 0 to 32768 [ 163.395186][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'. [ 163.423670][ T8130] netlink: 66 bytes leftover after parsing attributes in process `syz.1.857'. [ 163.437241][ T8115] loop2: detected capacity change from 0 to 32768 [ 163.480827][ T8115] (syz.2.849,8115,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.520427][ T8115] (syz.2.849,8115,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.561026][ T8115] JBD2: Ignoring recovery information on journal [ 163.707090][ T8115] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 164.004709][ T5845] ocfs2: Unmounting device (7,2) on (node local) [ 164.205691][ T8152] loop4: detected capacity change from 0 to 1024 [ 164.342378][ T5860] hfsplus: bad catalog entry type [ 164.435241][ T8135] loop3: detected capacity change from 0 to 32768 [ 164.499789][ T8159] can0: slcan on ttyprintk. [ 164.554916][ T8135] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 164.675453][ T8157] can0 (unregistered): slcan off ttyprintk. [ 164.780297][ T59] hfsplus: b-tree write err: -5, ino 4 [ 164.820277][ T5844] ocfs2: Unmounting device (7,3) on (node local) [ 165.042546][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.162572][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.318168][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.576204][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.938135][ T8205] loop2: detected capacity change from 0 to 24 [ 165.951366][ T8204] loop3: detected capacity change from 0 to 128 [ 166.050985][ T8204] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.063478][ T13] bridge_slave_1: left allmulticast mode [ 166.069386][ T13] bridge_slave_1: left promiscuous mode [ 166.136182][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.173499][ T8204] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 166.248935][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.259335][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.269706][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.294786][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.316846][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.328499][ T13] bridge_slave_0: left allmulticast mode [ 166.335057][ T13] bridge_slave_0: left promiscuous mode [ 166.342198][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.455569][ T5844] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.979419][ T8216] loop2: detected capacity change from 0 to 40427 [ 166.997790][ T8216] F2FS-fs (loop2): invalid crc value [ 167.102619][ T8228] loop3: detected capacity change from 0 to 512 [ 167.130196][ T8228] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.157094][ T8228] EXT4-fs: Ignoring removed i_version option [ 167.228949][ T8228] EXT4-fs (loop3): 1 orphan inode deleted [ 167.258942][ T8228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.299909][ T8216] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 167.314055][ T8216] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 167.390436][ T5845] syz-executor: attempt to access beyond end of device [ 167.390436][ T5845] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 167.406048][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 167.406072][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.406083][ T5845] Call Trace: [ 167.406091][ T5845] [ 167.406098][ T5845] dump_stack_lvl+0x189/0x250 [ 167.406127][ T5845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.406149][ T5845] ? __pfx_queue_work_on+0x10/0x10 [ 167.406165][ T5845] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 167.406188][ T5845] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 167.406223][ T5845] f2fs_handle_critical_error+0x37c/0x540 [ 167.406257][ T5845] f2fs_write_end_io+0x886/0xb60 [ 167.406304][ T5845] __submit_merged_bio+0x27a/0x6a0 [ 167.406336][ T5845] __submit_merged_write_cond+0x255/0x530 [ 167.406368][ T5845] f2fs_write_data_pages+0x261d/0x3000 [ 167.406434][ T5845] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 167.406521][ T5845] ? unwind_next_frame+0xa5/0x2390 [ 167.406539][ T5845] ? rcu_is_watching+0x15/0xb0 [ 167.406555][ T5845] ? __kasan_check_byte+0x12/0x40 [ 167.406592][ T5845] ? __lock_acquire+0xab9/0xd20 [ 167.406628][ T5845] ? do_raw_spin_lock+0x121/0x290 [ 167.406663][ T5845] ? do_raw_spin_unlock+0x122/0x240 [ 167.406686][ T5845] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 167.406714][ T5845] do_writepages+0x32e/0x550 [ 167.406750][ T5845] ? do_raw_spin_unlock+0x122/0x240 [ 167.406778][ T5845] filemap_fdatawrite+0x199/0x240 [ 167.406801][ T5845] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 167.406877][ T5845] ? do_raw_spin_unlock+0x122/0x240 [ 167.406904][ T5845] f2fs_sync_dirty_inodes+0x31f/0x830 [ 167.406940][ T5845] f2fs_write_checkpoint+0x95a/0x1df0 [ 167.406990][ T5845] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 167.407062][ T5845] ? kill_f2fs_super+0x298/0x6c0 [ 167.407086][ T5845] kill_f2fs_super+0x2c3/0x6c0 [ 167.407110][ T5845] ? __pfx_kill_f2fs_super+0x10/0x10 [ 167.407125][ T5845] ? radix_tree_delete_item+0x2b6/0x400 [ 167.407156][ T5845] ? shrinker_free+0x2ce/0x3e0 [ 167.407176][ T5845] deactivate_locked_super+0xbc/0x130 [ 167.407200][ T5845] cleanup_mnt+0x425/0x4c0 [ 167.407220][ T5845] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.407246][ T5845] task_work_run+0x1d1/0x260 [ 167.407274][ T5845] ? __pfx_task_work_run+0x10/0x10 [ 167.407294][ T5845] ? __x64_sys_umount+0x122/0x160 [ 167.407323][ T5845] ? exit_to_user_mode_loop+0x40/0x110 [ 167.407353][ T5845] exit_to_user_mode_loop+0xec/0x110 [ 167.407379][ T5845] do_syscall_64+0x2bd/0x3b0 [ 167.407401][ T5845] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.407423][ T5845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.407440][ T5845] ? clear_bhb_loop+0x60/0xb0 [ 167.407462][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.407479][ T5845] RIP: 0033:0x7ff47738fc57 [ 167.407494][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 167.407509][ T5845] RSP: 002b:00007ffc27d26ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 167.407527][ T5845] RAX: 0000000000000000 RBX: 00007ff477410a8d RCX: 00007ff47738fc57 [ 167.407539][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc27d26fa0 [ 167.407549][ T5845] RBP: 00007ffc27d26fa0 R08: 0000000000000000 R09: 0000000000000000 [ 167.407560][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc27d28030 [ 167.407571][ T5845] R13: 00007ff477410a8d R14: 000000000002979a R15: 00007ffc27d28070 [ 167.407603][ T5845] [ 167.407610][ T5845] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 167.415174][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.420369][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.720202][ T5915] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 167.798544][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.816110][ T13] bond0 (unregistering): Released all slaves [ 167.979991][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.020096][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.058481][ T5915] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 168.112520][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.170757][ T5915] usb 4-1: config 0 descriptor?? [ 168.270468][ T5164] Bluetooth: hci4: command tx timeout [ 168.582547][ T5915] hid_parser_main: 21 callbacks suppressed [ 168.582574][ T5915] cypress 0003:04B4:DE61.000E: unknown main item tag 0x0 [ 168.607202][ T5915] cypress 0003:04B4:DE61.000E: unknown main item tag 0x0 [ 168.614273][ T5915] cypress 0003:04B4:DE61.000E: unknown main item tag 0x0 [ 168.624108][ T5915] cypress 0003:04B4:DE61.000E: unknown main item tag 0x0 [ 168.632685][ T5915] cypress 0003:04B4:DE61.000E: unknown main item tag 0x0 [ 168.671398][ T5915] cypress 0003:04B4:DE61.000E: unknown main item tag 0x0 [ 168.705866][ T5915] cypress 0003:04B4:DE61.000E: unknown main item tag 0x0 [ 168.781731][ T5915] cypress 0003:04B4:DE61.000E: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.3-1/input0 [ 168.854437][ T5915] usb 4-1: USB disconnect, device number 8 [ 168.990753][ T8267] fido_id[8267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 169.203623][ T8268] netlink: 'syz.2.913': attribute type 29 has an invalid length. [ 169.222128][ T8269] netlink: 'syz.2.913': attribute type 29 has an invalid length. [ 169.304782][ T13] hsr_slave_0: left promiscuous mode [ 169.327178][ T13] hsr_slave_1: left promiscuous mode [ 169.353795][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.405078][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.445988][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.466407][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.591692][ T13] veth1_macvtap: left promiscuous mode [ 169.607037][ T13] veth0_macvtap: left promiscuous mode [ 169.618920][ T13] veth1_vlan: left promiscuous mode [ 169.628311][ T13] veth0_vlan: left promiscuous mode [ 169.991471][ T13] ipvlan1 (unregistering): left allmulticast mode [ 170.003844][ T13] veth0_vlan (unregistering): left allmulticast mode [ 170.219639][ T5164] Bluetooth: hci4: command tx timeout [ 170.675152][ T5915] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 170.779912][ T8304] fuse: Bad value for 'group_id' [ 170.786032][ T8304] fuse: Bad value for 'group_id' [ 170.835049][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 170.849219][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.869719][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.897829][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 170.911250][ T5915] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 170.929060][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.960873][ T5915] usb 4-1: config 0 descriptor?? [ 171.003240][ T13] team0 (unregistering): Port device team_slave_1 removed [ 171.041330][ T13] team0 (unregistering): Port device team_slave_0 removed [ 171.378222][ T5915] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 171.390183][ T5915] microsoft 0003:045E:07DA.000F: no inputs found [ 171.402328][ T5915] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 171.492128][ T8302] @ÿ`Ž: renamed from veth0_vlan (while UP) [ 171.518307][ T8211] chnl_net:caif_netlink_parms(): no params data found [ 171.590258][ T44] usb 4-1: USB disconnect, device number 9 [ 171.703831][ T8315] netlink: 64 bytes leftover after parsing attributes in process `syz.1.933'. [ 171.862663][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.882636][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.898970][ T8211] bridge_slave_0: entered allmulticast mode [ 171.923916][ T8211] bridge_slave_0: entered promiscuous mode [ 171.956920][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.977946][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.989874][ T8328] loop2: detected capacity change from 0 to 256 [ 172.005710][ T8211] bridge_slave_1: entered allmulticast mode [ 172.040360][ T8211] bridge_slave_1: entered promiscuous mode [ 172.113133][ T8328] FAT-fs (loop2): Directory bread(block 64) failed [ 172.148015][ T8328] FAT-fs (loop2): Directory bread(block 65) failed [ 172.154648][ T8328] FAT-fs (loop2): Directory bread(block 66) failed [ 172.161498][ T5164] Bluetooth: hci4: command tx timeout [ 172.218666][ T8328] FAT-fs (loop2): Directory bread(block 67) failed [ 172.269183][ T8328] FAT-fs (loop2): Directory bread(block 68) failed [ 172.272927][ T8334] rdma_op ffff888031f251f0 conn xmit_rdma 0000000000000000 [ 172.282154][ T8328] FAT-fs (loop2): Directory bread(block 69) failed [ 172.306765][ T8328] FAT-fs (loop2): Directory bread(block 70) failed [ 172.331098][ T8328] FAT-fs (loop2): Directory bread(block 71) failed [ 172.345656][ T8211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.361216][ T8328] FAT-fs (loop2): Directory bread(block 72) failed [ 172.369143][ T8328] FAT-fs (loop2): Directory bread(block 73) failed [ 172.425948][ T8211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.568036][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'. [ 172.578473][ T8345] openvswitch: netlink: Unknown nsh attribute 0 [ 172.600036][ T8345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.780308][ T8211] team0: Port device team_slave_0 added [ 172.821378][ T8211] team0: Port device team_slave_1 added [ 172.851348][ T8357] loop3: detected capacity change from 0 to 1024 [ 172.941140][ T8357] hfsplus: bad catalog entry type [ 173.037655][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.089399][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.093983][ T1097] hfsplus: b-tree write err: -5, ino 4 [ 173.155762][ T8211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.279668][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.312999][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.404936][ T8211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.726652][ T8211] hsr_slave_0: entered promiscuous mode [ 173.752244][ T8211] hsr_slave_1: entered promiscuous mode [ 173.758606][ T8211] debugfs: 'hsr0' already exists in 'hsr' [ 173.784534][ T8211] Cannot create hsr debugfs directory [ 174.086456][ T8391] process 'syz.0.960' launched './file0' with NULL argv: empty string added [ 174.095358][ T5164] Bluetooth: hci4: command tx timeout [ 174.146617][ T8354] loop2: detected capacity change from 0 to 40427 [ 174.210691][ T8354] F2FS-fs (loop2): Image doesn't support compression [ 174.241983][ T8354] F2FS-fs (loop2): build fault injection rate: 690 [ 174.303692][ T8354] F2FS-fs (loop2): invalid crc value [ 174.328193][ T2155] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 174.364876][ T2155] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 174.387816][ T2155] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 174.447542][ T2155] hid-generic 0000:0004:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 174.643992][ T8354] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 174.707523][ T8403] fido_id[8403]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.720870][ T8354] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 174.769990][ T8211] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.825220][ T8211] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.876070][ T8211] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.953430][ T8211] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 175.344375][ T8211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.376905][ T8393] loop3: detected capacity change from 0 to 32768 [ 175.405021][ T8429] netlink: 'syz.1.969': attribute type 2 has an invalid length. [ 175.463954][ T8211] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.506189][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.513512][ T5948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.601162][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.608405][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.155666][ T8423] loop0: detected capacity change from 0 to 32768 [ 176.230393][ T8423] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.968 (8423) [ 176.376792][ T8423] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 176.437191][ T8423] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 176.486720][ T8423] BTRFS info (device loop0): using free-space-tree [ 176.574463][ T8211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.761893][ T8477] loop2: detected capacity change from 0 to 1024 [ 176.800772][ T8423] BTRFS info (device loop0): rebuilding free space tree [ 177.120235][ T5948] hfsplus: b-tree write err: -5, ino 4 [ 177.278930][ T5843] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 177.747485][ T8211] veth0_vlan: entered promiscuous mode [ 177.801658][ T8211] veth1_vlan: entered promiscuous mode [ 177.823093][ T8505] sctp: [Deprecated]: syz.2.982 (pid 8505) Use of int in max_burst socket option. [ 177.823093][ T8505] Use struct sctp_assoc_value instead [ 177.893555][ T8211] veth0_macvtap: entered promiscuous mode [ 177.950781][ T8211] veth1_macvtap: entered promiscuous mode [ 178.030716][ T8211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.081126][ T8211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.136472][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.198915][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.239853][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.324679][ T8483] loop3: detected capacity change from 0 to 40427 [ 178.360628][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.703486][ T8483] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 178.720983][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.745579][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.755846][ T8483] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 178.837236][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.880413][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.938087][ T5844] syz-executor: attempt to access beyond end of device [ 178.938087][ T5844] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.951165][ T8526] loop0: detected capacity change from 0 to 128 [ 179.002894][ T8526] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.007166][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 179.007204][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.007218][ T5844] Call Trace: [ 179.007226][ T5844] [ 179.007235][ T5844] dump_stack_lvl+0x189/0x250 [ 179.007270][ T5844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.007297][ T5844] ? __pfx_queue_work_on+0x10/0x10 [ 179.007316][ T5844] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 179.007342][ T5844] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 179.007380][ T5844] f2fs_handle_critical_error+0x37c/0x540 [ 179.007416][ T5844] f2fs_write_end_io+0x886/0xb60 [ 179.007469][ T5844] __submit_merged_bio+0x27a/0x6a0 [ 179.007503][ T5844] __submit_merged_write_cond+0x255/0x530 [ 179.007538][ T5844] f2fs_write_data_pages+0x261d/0x3000 [ 179.007567][ T5844] ? __lock_acquire+0xab9/0xd20 [ 179.007634][ T5844] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.007712][ T5844] ? __mod_zone_page_state+0xd7/0x140 [ 179.007753][ T5844] ? folios_put_refs+0x560/0x640 [ 179.007788][ T5844] ? __lock_acquire+0xab9/0xd20 [ 179.007826][ T5844] ? do_raw_spin_lock+0x121/0x290 [ 179.007864][ T5844] ? do_raw_spin_unlock+0x122/0x240 [ 179.007890][ T5844] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.007922][ T5844] do_writepages+0x32e/0x550 [ 179.007959][ T5844] ? do_raw_spin_unlock+0x122/0x240 [ 179.007990][ T5844] filemap_fdatawrite+0x199/0x240 [ 179.008017][ T5844] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 179.008096][ T5844] ? do_raw_spin_unlock+0x122/0x240 [ 179.008127][ T5844] f2fs_sync_dirty_inodes+0x31f/0x830 [ 179.008163][ T5844] f2fs_write_checkpoint+0x95a/0x1df0 [ 179.008216][ T5844] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 179.008288][ T5844] ? kill_f2fs_super+0x298/0x6c0 [ 179.008314][ T5844] kill_f2fs_super+0x2c3/0x6c0 [ 179.008360][ T5844] ? __pfx_kill_f2fs_super+0x10/0x10 [ 179.008379][ T5844] ? radix_tree_delete_item+0x2b6/0x400 [ 179.008417][ T5844] ? shrinker_free+0x2ce/0x3e0 [ 179.008443][ T5844] deactivate_locked_super+0xbc/0x130 [ 179.008472][ T5844] cleanup_mnt+0x425/0x4c0 [ 179.008498][ T5844] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.008531][ T5844] task_work_run+0x1d1/0x260 [ 179.008564][ T5844] ? __pfx_task_work_run+0x10/0x10 [ 179.008593][ T5844] ? __x64_sys_umount+0x122/0x160 [ 179.008631][ T5844] ? exit_to_user_mode_loop+0x40/0x110 [ 179.008671][ T5844] exit_to_user_mode_loop+0xec/0x110 [ 179.008705][ T5844] do_syscall_64+0x2bd/0x3b0 [ 179.008735][ T5844] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.008763][ T5844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.008787][ T5844] ? clear_bhb_loop+0x60/0xb0 [ 179.008814][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.008836][ T5844] RIP: 0033:0x7f6adfb8fc57 [ 179.008858][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 179.008877][ T5844] RSP: 002b:00007ffc4873cd38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.008900][ T5844] RAX: 0000000000000000 RBX: 00007f6adfc10a8d RCX: 00007f6adfb8fc57 [ 179.008917][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4873cdf0 [ 179.008932][ T5844] RBP: 00007ffc4873cdf0 R08: 0000000000000000 R09: 0000000000000000 [ 179.008945][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4873de80 [ 179.008960][ T5844] R13: 00007f6adfc10a8d R14: 000000000002c7b6 R15: 00007ffc4873dec0 [ 179.008998][ T5844] [ 179.147527][ T5844] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 179.216234][ T8526] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.555639][ T8513] loop2: detected capacity change from 0 to 32768 [ 179.623443][ T8513] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.662935][ T5843] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.940677][ T8556] loop0: detected capacity change from 0 to 256 [ 180.049122][ T8513] XFS (loop2): Ending clean mount [ 180.067935][ T8556] exFAT-fs (loop0): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 180.144830][ T8556] exFAT-fs (loop0): error, in sector 160, dentry 11 should be unused, but 0xc1 [ 180.197522][ T8556] exFAT-fs (loop0): Filesystem has been set read-only [ 180.257225][ T8566] exFAT-fs (loop0): valid_size(10) is greater than size(0) [ 180.331552][ T5845] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 180.598938][ T8578] Bluetooth: MGMT ver 1.23 [ 180.629499][ T44] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 180.691621][ T8579] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 180.807594][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 180.835795][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 180.885741][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 180.931076][ T44] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 180.950165][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.974443][ T44] usb 4-1: Product: syz [ 180.988674][ T44] usb 4-1: Manufacturer: syz [ 180.998786][ T8593] loop0: detected capacity change from 0 to 512 [ 181.007714][ T44] usb 4-1: SerialNumber: syz [ 181.024501][ T44] usb 4-1: config 0 descriptor?? [ 181.035151][ T8593] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.053023][ T8572] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 181.085866][ T8572] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 181.125760][ T8593] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 181.152388][ T44] usb 4-1: ucan: probing device on interface #0 [ 181.202471][ T8593] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 181.216079][ T8593] EXT4-fs (loop0): 1 truncate cleaned up [ 181.223806][ T8593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.266349][ T8593] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 4: comm syz.0.1007: lblock 0 mapped to illegal pblock 4 (length 1) [ 181.418339][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.734026][ T44] ucan 4-1:0.0: probe with driver ucan failed with error -71 [ 181.790533][ T44] usb 4-1: USB disconnect, device number 10 [ 182.635633][ T8645] loop5: detected capacity change from 0 to 1024 [ 182.750017][ T8645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.880893][ T8645] EXT4-fs: Ignoring sb option on remount [ 182.941083][ T8645] EXT4-fs: Ignoring removed orlov option [ 182.986308][ T8645] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.995203][ T8659] loop3: detected capacity change from 0 to 1024 [ 183.022106][ T8645] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 183.098305][ T8645] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 183.255661][ T8211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.755101][ T8686] pim6reg: entered allmulticast mode [ 183.791602][ T8686] pim6reg: left allmulticast mode [ 183.867893][ T8689] ipvlan2: entered promiscuous mode [ 184.059546][ T8665] loop2: detected capacity change from 0 to 40427 [ 184.104505][ T8697] loop5: detected capacity change from 0 to 64 [ 184.120787][ T8665] F2FS-fs (loop2): invalid crc value [ 184.361089][ T30] audit: type=1800 audit(1752755758.910:77): pid=8697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1039" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 184.395648][ T8665] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 184.463462][ T8665] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 184.505501][ T8684] loop3: detected capacity change from 0 to 32768 [ 184.554102][ T8684] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1035 (8684) [ 184.630007][ T8684] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.704393][ T8684] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 184.720931][ T8684] BTRFS info (device loop3): using free-space-tree [ 184.737582][ T5845] syz-executor: attempt to access beyond end of device [ 184.737582][ T5845] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.820518][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 184.820544][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.820556][ T5845] Call Trace: [ 184.820562][ T5845] [ 184.820570][ T5845] dump_stack_lvl+0x189/0x250 [ 184.820599][ T5845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.820620][ T5845] ? __pfx_queue_work_on+0x10/0x10 [ 184.820637][ T5845] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 184.820659][ T5845] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 184.820692][ T5845] f2fs_handle_critical_error+0x37c/0x540 [ 184.820723][ T5845] f2fs_write_end_io+0x886/0xb60 [ 184.820767][ T5845] __submit_merged_bio+0x27a/0x6a0 [ 184.820797][ T5845] __submit_merged_write_cond+0x255/0x530 [ 184.820828][ T5845] f2fs_write_data_pages+0x261d/0x3000 [ 184.820893][ T5845] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.820962][ T5845] ? __mod_zone_page_state+0xd7/0x140 [ 184.820994][ T5845] ? folios_put_refs+0x560/0x640 [ 184.821024][ T5845] ? __lock_acquire+0xab9/0xd20 [ 184.821059][ T5845] ? do_raw_spin_lock+0x121/0x290 [ 184.821092][ T5845] ? do_raw_spin_unlock+0x122/0x240 [ 184.821115][ T5845] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.821142][ T5845] do_writepages+0x32e/0x550 [ 184.821174][ T5845] ? do_raw_spin_unlock+0x122/0x240 [ 184.821201][ T5845] filemap_fdatawrite+0x199/0x240 [ 184.821223][ T5845] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 184.821290][ T5845] ? do_raw_spin_unlock+0x122/0x240 [ 184.821317][ T5845] f2fs_sync_dirty_inodes+0x31f/0x830 [ 184.821349][ T5845] f2fs_write_checkpoint+0x95a/0x1df0 [ 184.821389][ T5845] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 184.821457][ T5845] ? kill_f2fs_super+0x298/0x6c0 [ 184.821479][ T5845] kill_f2fs_super+0x2c3/0x6c0 [ 184.821502][ T5845] ? __pfx_kill_f2fs_super+0x10/0x10 [ 184.821517][ T5845] ? radix_tree_delete_item+0x2b6/0x400 [ 184.821547][ T5845] ? shrinker_free+0x2ce/0x3e0 [ 184.821568][ T5845] deactivate_locked_super+0xbc/0x130 [ 184.821590][ T5845] cleanup_mnt+0x425/0x4c0 [ 184.821609][ T5845] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.821634][ T5845] task_work_run+0x1d1/0x260 [ 184.821661][ T5845] ? __pfx_task_work_run+0x10/0x10 [ 184.821682][ T5845] ? __x64_sys_umount+0x122/0x160 [ 184.821710][ T5845] ? exit_to_user_mode_loop+0x40/0x110 [ 184.821739][ T5845] exit_to_user_mode_loop+0xec/0x110 [ 184.821765][ T5845] do_syscall_64+0x2bd/0x3b0 [ 184.821788][ T5845] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.821810][ T5845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.821827][ T5845] ? clear_bhb_loop+0x60/0xb0 [ 184.821849][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.821866][ T5845] RIP: 0033:0x7ff47738fc57 [ 184.821881][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 184.821897][ T5845] RSP: 002b:00007ffc27d26ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 184.821916][ T5845] RAX: 0000000000000000 RBX: 00007ff477410a8d RCX: 00007ff47738fc57 [ 184.821928][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc27d26fa0 [ 184.821938][ T5845] RBP: 00007ffc27d26fa0 R08: 0000000000000000 R09: 0000000000000000 [ 184.821949][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc27d28030 [ 184.821961][ T5845] R13: 00007ff477410a8d R14: 000000000002dff3 R15: 00007ffc27d28070 [ 184.821990][ T5845] [ 184.821997][ T5845] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 184.890586][ T8716] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1042'. [ 185.190263][ T8716] tipc: Enabling of bearer rejected, failed to enable media [ 185.320019][ T8684] BTRFS info (device loop3): rebuilding free space tree [ 185.487712][ T8736] CUSE: DEVNAME unspecified [ 185.550025][ T5844] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.857090][ T8741] loop5: detected capacity change from 0 to 2048 [ 186.027654][ T8741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.136039][ T8741] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.278102][ T8741] EXT4-fs error (device loop5): __ext4_new_inode:1279: comm syz.5.1048: failed to insert inode 15: doubly allocated? [ 186.468748][ T8211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.081665][ T8787] : entered promiscuous mode [ 187.153473][ T5935] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 187.314134][ T5935] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 187.333264][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.361862][ T5935] usb 2-1: config 0 descriptor?? [ 187.406389][ T8798] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 187.506607][ T8778] loop3: detected capacity change from 0 to 32768 [ 187.547782][ T8778] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 187.716111][ T8778] XFS (loop3): Ending clean mount [ 187.757503][ T5935] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 187.759944][ T8778] XFS (loop3): Quotacheck needed: Please wait. [ 187.777911][ T5935] elan 0003:04F3:0755.0011: item fetching failed at offset 3/5 [ 187.817861][ T5935] elan 0003:04F3:0755.0011: Hid Parse failed [ 187.831892][ T5935] elan 0003:04F3:0755.0011: probe with driver elan failed with error -22 [ 187.853779][ T8778] XFS (loop3): Quotacheck: Done. [ 187.892447][ T8820] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 187.953328][ T5935] usb 2-1: USB disconnect, device number 9 [ 188.053542][ T5844] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 188.065818][ T8827] netlink: 'syz.2.1076': attribute type 2 has an invalid length. [ 188.073635][ T8827] netlink: 784 bytes leftover after parsing attributes in process `syz.2.1076'. [ 188.459848][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 188.472647][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 188.492073][ T8841] netlink: 'syz.3.1078': attribute type 6 has an invalid length. [ 188.501611][ T8841] netlink: 'syz.3.1078': attribute type 5 has an invalid length. [ 188.615085][ T8839] loop2: detected capacity change from 0 to 4096 [ 188.643181][ T8839] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 188.846052][ T8839] ntfs3(loop2): Failed to load $Extend (-22). [ 188.873576][ T8839] ntfs3(loop2): Failed to initialize $Extend. [ 188.939732][ T8839] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 189.120035][ T980] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 189.274954][ T980] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.293898][ T8860] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1091'. [ 189.304572][ T980] usb 4-1: config 0 has no interface number 0 [ 189.325342][ T980] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 189.345691][ T980] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 189.404383][ T980] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.432124][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.476403][ T980] usb 4-1: config 0 descriptor?? [ 189.507351][ T8853] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 189.568369][ T980] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 189.603902][ T8866] loop5: detected capacity change from 0 to 128 [ 189.667163][ T8854] loop0: detected capacity change from 0 to 32768 [ 189.690763][ T8866] syz.5.1094: attempt to access beyond end of device [ 189.690763][ T8866] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 189.728871][ T8866] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 189.738776][ T8866] syz.5.1094: attempt to access beyond end of device [ 189.738776][ T8866] loop5: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 189.758807][ T8854] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.769618][ T8866] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 189.776577][ T980] usb 4-1: USB disconnect, device number 11 [ 189.782818][ T8866] syz.5.1094: attempt to access beyond end of device [ 189.782818][ T8866] loop5: rw=2049, sector=138, nr_sectors = 1 limit=128 [ 189.798225][ T8866] Buffer I/O error on dev loop5, logical block 138, lost async page write [ 189.806891][ T8866] syz.5.1094: attempt to access beyond end of device [ 189.806891][ T8866] loop5: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 189.820430][ T8866] Buffer I/O error on dev loop5, logical block 139, lost async page write [ 189.829179][ T8866] syz.5.1094: attempt to access beyond end of device [ 189.829179][ T8866] loop5: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 189.842758][ T8866] Buffer I/O error on dev loop5, logical block 146, lost async page write [ 189.866048][ T8866] syz.5.1094: attempt to access beyond end of device [ 189.866048][ T8866] loop5: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 189.876992][ T8854] XFS (loop0): Ending clean mount [ 189.913438][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.919746][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.920939][ T8866] Buffer I/O error on dev loop5, logical block 147, lost async page write [ 189.946954][ T8854] XFS (loop0): Quotacheck needed: Please wait. [ 189.987189][ T8866] syz.5.1094: attempt to access beyond end of device [ 189.987189][ T8866] loop5: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 190.021577][ T8866] Buffer I/O error on dev loop5, logical block 148, lost async page write [ 190.036274][ T8866] syz.5.1094: attempt to access beyond end of device [ 190.036274][ T8866] loop5: rw=2049, sector=149, nr_sectors = 1 limit=128 [ 190.068898][ T8854] XFS (loop0): Quotacheck: Done. [ 190.083801][ T8866] Buffer I/O error on dev loop5, logical block 149, lost async page write [ 190.113050][ T8866] syz.5.1094: attempt to access beyond end of device [ 190.113050][ T8866] loop5: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 190.175042][ T8866] Buffer I/O error on dev loop5, logical block 150, lost async page write [ 190.194522][ T5843] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 190.209127][ T8866] syz.5.1094: attempt to access beyond end of device [ 190.209127][ T8866] loop5: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 190.243510][ T8866] Buffer I/O error on dev loop5, logical block 151, lost async page write [ 190.790911][ T8902] loop0: detected capacity change from 0 to 128 [ 190.803199][ T8902] EXT4-fs (loop0): Test dummy encryption mode enabled [ 190.864700][ T8902] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.865248][ T8902] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.876617][ T8882] loop2: detected capacity change from 0 to 32768 [ 190.894635][ T8882] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1098 (8882) [ 190.904414][ T8882] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.904478][ T8882] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 190.904520][ T8882] BTRFS info (device loop2): disk space caching is enabled [ 190.904535][ T8882] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 190.944915][ T8906] loop5: detected capacity change from 0 to 4096 [ 191.041284][ T5843] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.166511][ T8912] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.168334][ T8912] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.245281][ T8882] BTRFS info (device loop2): rebuilding free space tree [ 191.276356][ T8882] BTRFS info (device loop2): disabling free space tree [ 191.276443][ T8882] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 191.276500][ T8882] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 191.340645][ T8906] ntfs3(loop5): failed to convert name for inode 1e. [ 191.341925][ T8906] ntfs3(loop5): ino=1f, mi_enum_attr [ 191.446983][ T8912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.453157][ T8912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.519888][ T5845] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.663312][ T8931] loop5: detected capacity change from 0 to 512 [ 191.744264][ T8931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.744374][ T8931] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.076478][ T8211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.251066][ T8949] loop0: detected capacity change from 0 to 512 [ 192.318076][ T8949] EXT4-fs: Ignoring removed oldalloc option [ 192.331125][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.377283][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.415254][ T8949] EXT4-fs (loop0): 1 truncate cleaned up [ 192.470666][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.510277][ T8949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.537535][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.637425][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.709064][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 192.748496][ T8963] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1122'. [ 192.876315][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 192.922994][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 192.931800][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.938073][ T8971] netlink: 'syz.5.1124': attribute type 1 has an invalid length. [ 192.960699][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.973240][ T8969] loop0: detected capacity change from 0 to 4096 [ 192.979878][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.981493][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1124'. [ 193.043255][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 193.069033][ T8972] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.083191][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 193.090624][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 193.138663][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.154433][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 193.166267][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 193.180232][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 193.193402][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 193.222844][ T8969] NILFS (loop0): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed [ 193.244239][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.280073][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 193.312242][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 193.350965][ T9] usb 4-1: string descriptor 0 read error: -22 [ 193.358343][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 193.374807][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.406561][ T8940] loop2: detected capacity change from 0 to 32768 [ 193.436279][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 193.470747][ T8940] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 193.490752][ T8940] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 193.494828][ T8980] netlink: 'syz.5.1127': attribute type 1 has an invalid length. [ 193.551924][ T8940] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 193.743374][ T8940] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 193.999672][ T8985] loop0: detected capacity change from 0 to 40427 [ 194.081121][ T8985] F2FS-fs (loop0): access invalid blkaddr:8 [ 194.087066][ T8985] CPU: 1 UID: 0 PID: 8985 Comm: syz.0.1126 Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 194.087092][ T8985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.087103][ T8985] Call Trace: [ 194.087111][ T8985] [ 194.087119][ T8985] dump_stack_lvl+0x189/0x250 [ 194.087149][ T8985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.087171][ T8985] ? __pfx___get_meta_folio+0x10/0x10 [ 194.087209][ T8985] __f2fs_is_valid_blkaddr+0xe52/0x14f0 [ 194.087245][ T8985] f2fs_get_node_info+0x39c/0xff0 [ 194.087280][ T8985] read_node_folio+0x20a/0x3f0 [ 194.087306][ T8985] ? __pfx_read_node_folio+0x10/0x10 [ 194.087339][ T8985] ? __filemap_get_folio+0x79f/0xaf0 [ 194.087374][ T8985] __get_node_folio+0x22a/0x1410 [ 194.087402][ T8985] ? do_raw_spin_lock+0x121/0x290 [ 194.087428][ T8985] ? __pfx___get_node_folio+0x10/0x10 [ 194.087453][ T8985] ? do_raw_spin_unlock+0x122/0x240 [ 194.087479][ T8985] ? _raw_spin_unlock+0x28/0x50 [ 194.087498][ T8985] ? iget_locked+0x522/0x570 [ 194.087519][ T8985] f2fs_iget+0x77c/0x5550 [ 194.087545][ T8985] ? do_raw_spin_lock+0x121/0x290 [ 194.087585][ T8985] ? f2fs_build_stats+0xb2f/0x1220 [ 194.087612][ T8985] ? f2fs_fill_super+0x4858/0x6ff0 [ 194.087634][ T8985] f2fs_fill_super+0x494a/0x6ff0 [ 194.087698][ T8985] get_tree_bdev_flags+0x40b/0x4d0 [ 194.087723][ T8985] ? __pfx_f2fs_fill_super+0x10/0x10 [ 194.087741][ T8985] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 194.087777][ T8985] vfs_get_tree+0x8f/0x2b0 [ 194.087802][ T8985] do_new_mount+0x2a2/0x9e0 [ 194.087831][ T8985] ? ns_capable+0x8a/0xf0 [ 194.087848][ T8985] ? __pfx_do_new_mount+0x10/0x10 [ 194.087874][ T8985] ? path_mount+0x61c/0xfe0 [ 194.087897][ T8985] ? user_path_at+0x44/0x60 [ 194.087925][ T8985] __se_sys_mount+0x317/0x410 [ 194.087957][ T8985] ? __pfx___se_sys_mount+0x10/0x10 [ 194.087990][ T8985] ? do_syscall_64+0xbe/0x3b0 [ 194.088013][ T8985] ? __x64_sys_mount+0x20/0xc0 [ 194.088041][ T8985] do_syscall_64+0xfa/0x3b0 [ 194.088063][ T8985] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.088087][ T8985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.088105][ T8985] ? clear_bhb_loop+0x60/0xb0 [ 194.088127][ T8985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.088144][ T8985] RIP: 0033:0x7f5169b900ca [ 194.088160][ T8985] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.088177][ T8985] RSP: 002b:00007f516aa75e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 194.088196][ T8985] RAX: ffffffffffffffda RBX: 00007f516aa75ef0 RCX: 00007f5169b900ca [ 194.088210][ T8985] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 00007f516aa75eb0 [ 194.088223][ T8985] RBP: 0000200000000140 R08: 00007f516aa75ef0 R09: 0000000000000400 [ 194.088235][ T8985] R10: 0000000000000400 R11: 0000000000000246 R12: 0000200000000080 [ 194.088247][ T8985] R13: 00007f516aa75eb0 R14: 000000000000551a R15: 00002000000004c0 [ 194.088294][ T8985] [ 194.418132][ T8985] F2FS-fs (loop0): f2fs_get_node_info of read_node_folio+0x20a/0x3f0: inconsistent nat entry, ino:3, nid:3, blkaddr:8, ver:0, flag:0 [ 194.438986][ T8985] F2FS-fs (loop0): Failed to read root inode [ 194.490354][ T97] gfs2: fsid=syz:syz.s: G: s:UN n:2/81a f:a t:UN d:EX/0 a:0 v:0 r:-128 m:20 p:1 [ 194.500889][ T97] ------------[ cut here ]------------ [ 194.506366][ T97] kernel BUG at fs/gfs2/glock.c:274! [ 194.511821][ T97] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 194.518075][ T97] CPU: 0 UID: 0 PID: 97 Comm: kworker/0:1H Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 194.529546][ T97] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.539612][ T97] Workqueue: gfs2-glock/syz:syz glock_work_func [ 194.545857][ T97] RIP: 0010:__gfs2_glock_put+0x384/0x3e0 [ 194.551491][ T97] Code: 3f 48 89 de e8 ed 0e ff ff eb 26 e8 b6 b7 c9 fd e9 30 fe ff ff e8 ac b7 c9 fd 31 ff 48 89 de ba 01 00 00 00 e8 9d de ff ff 90 <0f> 0b e8 95 b7 c9 fd 31 f6 65 ff 0d 5c 56 ae 0e 40 0f 94 c5 40 0f [ 194.571095][ T97] RSP: 0018:ffffc9000211fa48 EFLAGS: 00010246 [ 194.577163][ T97] RAX: 70b20f40a45e7900 RBX: ffff888057f04fd8 RCX: ffff88801e7f8000 [ 194.585140][ T97] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.593110][ T97] RBP: 0000000000000000 R08: ffffc9000211f307 R09: 1ffff92000423e60 [ 194.601074][ T97] R10: dffffc0000000000 R11: fffff52000423e61 R12: dffffc0000000000 [ 194.609050][ T97] R13: 1ffff1100f649815 R14: ffff88807b24c000 R15: ffff888057f052c8 [ 194.617019][ T97] FS: 0000000000000000(0000) GS:ffff888125bd9000(0000) knlGS:0000000000000000 [ 194.625939][ T97] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.632513][ T97] CR2: 00007f1088dd537b CR3: 0000000072e0e000 CR4: 00000000003526f0 [ 194.640498][ T97] Call Trace: [ 194.643772][ T97] [ 194.646699][ T97] ? process_scheduled_works+0x9ef/0x17b0 [ 194.652421][ T97] process_scheduled_works+0xae1/0x17b0 [ 194.657983][ T97] ? __pfx_process_scheduled_works+0x10/0x10 [ 194.663966][ T97] worker_thread+0x8a0/0xda0 [ 194.668559][ T97] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 194.674895][ T97] ? __kthread_parkme+0x7b/0x200 [ 194.679827][ T97] kthread+0x70e/0x8a0 [ 194.683915][ T97] ? __pfx_worker_thread+0x10/0x10 [ 194.689020][ T97] ? __pfx_kthread+0x10/0x10 [ 194.693611][ T97] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.698806][ T97] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.704009][ T97] ? __pfx_kthread+0x10/0x10 [ 194.708599][ T97] ret_from_fork+0x3f9/0x770 [ 194.713191][ T97] ? __pfx_ret_from_fork+0x10/0x10 [ 194.718313][ T97] ? __switch_to_asm+0x39/0x70 [ 194.723078][ T97] ? __switch_to_asm+0x33/0x70 [ 194.727839][ T97] ? __pfx_kthread+0x10/0x10 [ 194.732426][ T97] ret_from_fork_asm+0x1a/0x30 [ 194.737194][ T97] [ 194.740205][ T97] Modules linked in: [ 194.745757][ T97] ---[ end trace 0000000000000000 ]--- [ 194.751997][ T97] RIP: 0010:__gfs2_glock_put+0x384/0x3e0 [ 194.757655][ T97] Code: 3f 48 89 de e8 ed 0e ff ff eb 26 e8 b6 b7 c9 fd e9 30 fe ff ff e8 ac b7 c9 fd 31 ff 48 89 de ba 01 00 00 00 e8 9d de ff ff 90 <0f> 0b e8 95 b7 c9 fd 31 f6 65 ff 0d 5c 56 ae 0e 40 0f 94 c5 40 0f [ 194.777385][ T97] RSP: 0018:ffffc9000211fa48 EFLAGS: 00010246 [ 194.783527][ T97] RAX: 70b20f40a45e7900 RBX: ffff888057f04fd8 RCX: ffff88801e7f8000 [ 194.794172][ T97] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.807537][ T97] RBP: 0000000000000000 R08: ffffc9000211f307 R09: 1ffff92000423e60 [ 194.816126][ T97] R10: dffffc0000000000 R11: fffff52000423e61 R12: dffffc0000000000 [ 194.816942][ T8996] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 194.824199][ T97] R13: 1ffff1100f649815 R14: ffff88807b24c000 R15: ffff888057f052c8 [ 194.841424][ T97] FS: 0000000000000000(0000) GS:ffff888125bd9000(0000) knlGS:0000000000000000 [ 194.850567][ T97] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.857276][ T97] CR2: 000055556008a808 CR3: 0000000075e14000 CR4: 00000000003526f0 [ 194.865391][ T97] Kernel panic - not syncing: Fatal exception [ 194.871773][ T97] Kernel Offset: disabled [ 194.876095][ T97] Rebooting in 86400 seconds..