last executing test programs: 2m33.280755645s ago: executing program 0 (id=11835): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0) 2m33.182544056s ago: executing program 0 (id=11837): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, 0xffffffffffffffff) 2m33.082836797s ago: executing program 0 (id=11839): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") lchown(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0) 2m32.775644833s ago: executing program 0 (id=11842): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) 2m32.577441165s ago: executing program 0 (id=11844): syz_mount_image$gfs2(&(0x7f0000000400), &(0x7f0000012500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@quota_account}, {@suiddir}, {}, {@errors_withdraw}, {@norgrplvb}, {@data_writeback}, {@discard}, {@quota_on}, {@loccookie}, {@statfs_percent={'statfs_percent', 0x3d, 0x3}}, {@noacl}, {@statfs_quantum={'statfs_quantum', 0x3d, 0x3}}, {}, {@nosuiddir}]}, 0x1, 0x125bb, &(0x7f0000037080)="$eJzs/XkUqHO9P3zva97KPCRCKSQlIqEkYyWRIRlSCYWoCGUoQ0rSQCpjKpQpSZIyhDILkSmVsaQQkUSFZ53nvPd9rue+r1/X/Tv3Os+61vO8Xn+cz7V2fPPHWev9fu+tvWcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAjBkziucttOt/nN4Pbf+fp5ttxoxul//8nvs//s/svb+m/M8zc6H/xbP5a2dbcpcPb7fzez704f84/61/vt333ue1u++9z3/r7/2/42WPbrzaTxd62/OOesMZZy169U/W+R/7LwIAAAAAAACA/0H59f+y90NX/Z/+km7GjJlz/p9+bL4ZM2bOPmNGWV1z3fd+/v/kv3/zzfj/a3979v/J//sAAADwf1P2f937kcP7/3HufDNmHHjA/+XH/48fmdn+x//d7uOPPj50e56fv/75//VD5f/l43/Q/LkL5D4vd8H/z38+AAAA+P8t2f9N70f6m33W/75/4dwX5C6Su2juYrkvzH1R7uK5L859Se4S/3n+j8m/VO5Lc5fOfVnuMrkvz31F7rK5r8xdLnf53FflrpC7Yu6rc1fKfU3uyrmr5K6a+9rc1+Wulvv63NVz35C7Ru6auWvlrp076/cZWDf3jblvyn1z7nq5b8ldP/etuRvkbpj7ttyNcjfO3SR309y3526W+47czXO3yN0yd6vcd+Zunfuu3Hfnvid3m9z35m6bu11ufo+JGe/LfX/uDrk75u6U+4HcWb+JRH5fihkfzP1Q7odzd83dLfcjubvn7pG7Z+5Hcz+Wu1fu3rmzfgOKfXM/nvuJ3P1y98+d9TNjB+Z+Mveg3E/lfjr34NzP5B6S+9ncQ3M/l/v53C/kfjH3sNxZP4f3pdwjcr+c+5Xcr+YemXtU7tG5x+Qem3tc7tdyj8/9eu43cr+Ze0Luibkn5X4r99u5J+eekntq7mm5p+d+J/eM3O/mnpn7vdyzcr+fe3buD3LPyf1h7rm5P8r9ce55uefnXpB7Ye5Pci/KvTj3ktyf5v4s99Lcy3Ivz70i98rcWf8O1tW51+TO+netrs29Lvf63F/k3pB7Y+4vc2/KvTn3ltxbc2/L/VXu7bm/zv1N7m9z78i9M/eu3Ltz78m9N/d3ub/PvS/3D7n35/4x90+5D+Q+mPtQ7p9zH859JPcvuY/mPpb719xZGfe33Cdy/577ZO5Tuf/I/Wfuv3Kfzn0mN/8y06yfNi/yUSToiio3P99eJHeLNrfLnZk7W+5zcp+bm99fp5gjN/9+XjFX7ty58+TOmztfbn4evMjPgxf5efAiPw9e5OfBi+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9YMjf5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/Z/0aXpH8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfJ/1sYtkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/s/atWXyv8wPlMn/MvlfJv/L5H+Z/C+T/2Xyv0z+l8n/MvlfJv/L5H+Z/C+T/2Xyv0z+l8n/MvlfLvDv93+ZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5Szfl4gvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8pkX5leUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBYn/GVV6QZVeUOU/qNILquRxlV5QpRdU6QVVekGVXlClF1TpBVV6QZVeUKUXVOkFVXpBlV5QpRdU6QVVfl6gSv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf9Z/5p9nfyvk/918r/OX1An/+vkf538r5P/dfK/Tv7Xyf86+V8n/+vkf538r5P/dfK/nvff7/86vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTibW6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV4wK36b9IImvaBJL2jSC5r8hU16QZNe0KQXNOkFTXpBk17QpBc06QVNekGTXtCkFzTpBU1+XqBJ/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/4nxGm/xvk/9t8r9N/rfJ/zZ/Q5v8b5P/bfK/Tf63yf82+d8m/9vkfzvXv9//bXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbbKyTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaP+zF7RtekHifUaXXtClF3TpBV16QZf87tILuvyNXXpBl17QpRd06QVdekGXXtClF3T5eYEu+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f872b9WdXJ/y753yX/u+R/l/zvkv9d8n/Wn2/dJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+7/LxAl/xPfM+YmfyfOevP3U/+z0z+z0z+z0z+z0z+z8wDM5P/M5P/M5P/M2f/9/t/ZnrBrN//f2Z6wcz0gpnpBTPTC2amF8xML5iZXjAzvWBmesFMv88eAAAA/H9R9v/M//qRWf8bvRn/71/fO+C/fjOjGafcMfd9S6y+0woDz8z6fQLn+5/8ZwUAAAD+e0b2/1d7+79Y9AWPPW+dw1+/5MAzs/58APsfAAAAJmhk/x/Z2//lbIvftNbRG//2MwPPzPpzAe1/AAAAmKCR/X9Ub/9XP7j/Vd//9LVffe7AM/l9fOx/AAAAmKKR/X90b//XV6575x5bzrHHaQPP5Pfvtf8BAABgikb2/zG9/d984qDVPrPqSS+6aOCZ/Lk99j8AAABM0cj+P7a3/9udzlv0pvu2/ekiA8/kz+u1/wEAAGCKRvb/cb393920/7Mvmn+By/4y8Mysv8f+BwAAgAka2f9f6+3/mbv9ZP7zr7p5yU0Gnlk81/4HAACACRrZ/8f39v9sP9/3ifVO3We3dQeeeXGu/Q8AAAATNLL/v97b/8+5a83bFt3jgsPvH3jmJbn2PwAAAEzQyP7/Rm//P/d9n1np4Z2Wun3ngWeWyLX/AQAAYIJG9v83e/t/9qVv2+2MH96/ytUDzyyZa/8DAADABI3s/xN6+3+OI+b58ntuWW+XOweeWSrX/gcAAIAJGtn/J/b2/5wHv/zs5852yBc+PvDMS3PtfwAAAJigkf1/Um//z7Xanzd68uHdn71i4Jmlc+1/AAAAmKCR/f+t3v6f+5lfvOLuFc5ebPuBZ16Wa/8DAADABI3s/2/39v8868x2/XybLPKW3QeeWSbX/gcAAIAJGtn/J/f2/7wbrfjIm754x3duHHjm5bn2PwAAAEzQyP4/pbf/53vgb3Oc8+U17n3XwDOvmPXX/I/+wwIAAAD/LSP7/9Te/p//65vfu9vbDqyeHXhm2Vz7HwAAACZoZP+f1tv/CyzxpRmfXG65zf848Mwrc+1/AAAAmKCR/X96b/8/b/nvLH7rXx8+9y0DzyyXa/8DAADABI3s/+/09v+Ch37w0iXvW+myDw48s3yu/Q8AAAATNLL/z+jt/+cv/b2lL1718SV/MfDMq3LtfwAAAJigkf3/3d7+X+iIna5565Zb7fargWdWyLX/AQAAYIJG9v+Zvf2/8MGbPvj8Tx93+D4Dz6yYa/8DAADABI3s/+/19v8LVvvqbA8e3d7+xMAzr861/wEAAGCCRvb/Wb39v8h73r//putcucrbB55ZKdf+BwAAgAka2f/f7+3/Re/75vHfXGKnXdYeeOY1ufY/AAAATNDI/j+7t/8Xe/TYCx9/8tQv3DPwzMq59j8AAABM0Mj+/0Fv/79w/a3f3b1w02ffOfDMKrn2PwAAAEzQyP4/p7f/X/Tmi+d4waVHLPbUwDOr5tr/AAAAMEEj+/+Hvf2/+GN7P/LHk1Z7y8MDz7w21/4HAACACRrZ/+f29v+L/7D29Rfu//R33jrwzOty7X8AAACYoJH9/6Pe/n/J1p9+xdu23ebeSwaeWS3X/gcAAIAJGtn/P+7t/yWWfumlh150QrXtwDOvz7X/AQAAYIJG9v95vf2/5BH3LL73nXNtvufAM6vn2v8AAAAwQSP7//ze/l/q4N/MWLa8/tzbBp55Q679DwAAABM0sv8v6O3/l6626L13rjrHMlsPPLNGrv0PAAAAEzSy/y/s7f+lv37XbOvcd+3Pnxl4Zs1c+x8AAAAmaGT//6S3/1+2xEIP/ujT237jTwPPrJVr/wMAAMAEjez/i3r7f5nlX3LN77Y8ab/1B55ZO9f+BwAAgAka2f8X9/b/yw+9b+m511l95SsHnlkn1/4HAACACRrZ/5f09v8rjv3rbCcf/eyt7xt4Zt1c+x8AAAAmaGT//7S3/5d90UoPbvbkxp/8yMAzb8y1/wEAAGCCRvb/z3r7/5WvnuuaYonDt7th4Jk35dr/AAAAMEEj+//S3v5f7otXL/3YpTvP84GBZ96ca/8DAADABI3s/8t6+3/5tz749gdeePpfrhp4Zr1c+x8AAAAmaGT/X97b/696YtlzF9q//tZdA8+8Jdf+BwAAgAka2f9X9Pb/CvcueNQGJ12+7icGnlk/1/4HAACACRrZ/1f29v+KW9y450UXbTH7owPPvDXX/gcAAIAJGtn/V/X2/6tfsfux+257zJ83HXhmg1z7HwAAACZoZP9f3dv/Kx35w70OKVc+b52BZzbMtf8BAABggkb2/zW9/f+aTx625W/vfGKLPww887Zc+x8AAAAmaGT//7y3/1deZb0Llrtq2WV+OvDMRrn2PwAAAEzQyP6/trf/Vzn2cxv9cP6Hfr7dwDMb59r/AAAAMEEj+/+63v5f9UUbnP3GPdb6xh4Dz2ySa/8DAADABI3s/+t7+/+1r/7Yl+c99aD9bh14ZtafCWD/AwAAwASN7P9f9Pb/6774/d3u+eFiK2818Mzbc+1/AAAAmKCR/X/DrP1f50d2uuvWJwee2SzX/gcAAIAJGtn/N/Z+/f/1m3/qvtNn2+2Tjww8845c+x8AAAAmaGT//7K3/1df+6LLnrnlrO02GHhm81z7HwAAACZoZP/f1Nv/b3hqr6XmWGH9ef4+8MwWufY/AAAATNDI/r+5t//XOHHHZbd4+NC/bDbwzJa59j8AAABM0Mj+v6W3/9d8/pm/+M4Xl/jWWgPPzPozAex/AAAAmKCR/X9rb/+vNftXHn52k/vWvXvgmXfm2v8AAAAwQSP7/7be/l/73E1mn/1te82+y8AzW+fa/wAAADBBI/v/V739v87P/vK7q7983p+vH3jmXbn2PwAAAEzQyP6/vbf/193rNcVr/7rgebcPPPPuXPsfAAAAJmhk//+6t//fuMvsL/rQcrduse/AM+/Jtf8BAABggkb2/296+/9Nt17zs+PvPOFdRw08s02u/Q8AAAATNLL/f9vb/2/eY+bLunKbC1caeOa9ufY/AAAATNDI/r+jt//Xu/76nz++7fV/fPHAM9vm2v8AAAAwQSP7/87e/n/Lrx9/4JsXzTXbAQPPbJdr/wMAAMAEjez/u3r7f/1tVpi56UlHrDH7wDPb59r/AAAAMEEj+//u3v5/67LbvnWe/Tc94cyBZ96Xa/8DAADABI3s/3t6+3+Do7515r0vfPpv5w088/5c+x8AAAAmaGT/39vb/xse9PXDzr10tflfMPDMDrn2PwAAAEzQyP7/XW//v23VLT647hJXvv+EgWd2zLX/AQAAYIJG9v/ve/t/o3/uM8+7nmw/Uw08s1Ou/Q8AAAATNLL/7+vt/43XvPCvZx596k3zDzzzgVz7HwAAACZoZP//obf/N9ns4F/+Y52dVjh34Jmdc+1/AAAAmKCR/X9/b/9v+sgay8+25eP7vnbgmV1y7X8AAACYoJH9/8fe/n/7cffede2nVzr26IFnPphr/wMAAMAEjez/P/X2/2aLL/H6N9x33PWHDTzzoVz7HwAAACZoZP8/0Nv/71hpsUV2XnWr5ZYdeObDufY/AAAATNDI/n+wt/83P+xXzxy93IHves7AM7vm2v8AAAAwQSP7/6He/t9i2YUXKP+6xoWnDjyzW679DwAAABM0sv//3Nv/Wx71278/+uWH/3jxwDMfybX/AQAAYIJG9v/Dvf2/1UF/uPXbb1tutkUHntk91/4HAACACRrZ/4/09v87V33Rq9+xydlrfGngmT1y7X8AAACYoJH9/5fe/t96q5vWeviLu5+w4sAze+ba/wAAADBBI/v/0d7+f9fdC3xz0Yfv+NsSA898NNf+BwAAgAka2f+P9fb/ux9f7sD1Vlhk/oMHnvlYrv0PAAAAEzSy///a2//v2fBP251/y/3vX23gmb1y7X8AAACYoJH9/3hv/2+zwXOWP3m2pT7z9YFn9s61/wEAAGCCRvb/33r7/71/v/aXm+10yE2fHXhmn1z7HwAAACZoZP8/0dv/2/7uib8WP1xvhZcPPLNvrv0PAAAAEzSy///e2//bbbn8PI+devO+pww88/Fc+x8AAAAmaGT/P9nb/9sve8QzK++xwLHNwDOfyLX/AQAAYIJG9v9Tvf3/vqPevshl819w/bwDz+yXa/8DAADABI3s/3/09v/7D/rQ6w+/ap/lzhp4Zv9c+x8AAAAmaGT//7O3/3dY9dS7tttutb/XA88ckGv/AwAAwASN7P9/9fb/jsd94NVPXfz0804eeObAXPsfAAAAJmhk/z/d2/87LX7Grc+5a9O1vj/wzCdz7X8AAACYoJH9/0xv/39gpSP//u7qiJOGNv5BufY/AAAATNDI/n+2t/93PmyjBb672FwPfGPgmU/l2v8AAAAwQf9+/3czevt/l2uOXm/en13/3NcPPPPp3PH9P/S7BwIAAAD/o0b2f9Hb/x/c9d3fuefEbd6zzMAzB+f69X8AAACYoJH9X/b2/4e23/7QH+53wkWHDDzzmVz7HwAAACZoZP9Xvf3/4TtP3PGNx2x17QoDz8z6OQH7HwAAACZoZP/Xvf2/6yIHzP/udY9b9vCBZz6ba/8DAADABI3s/6a3/3c7+Y1PfHfJlfb+zMAzh+ba/wAAADBBI/u/7e3/j5z98dueeurxo5cceOZzufY/AAAATNDI/u96+3/3meev9Jzf73TjaQPPfD7X/gcAAIAJGtn/M3v7f4+PP//Xv1jl1OWfO/DMF3LtfwAAAJigkf0/W2//73nFnaustkW7/SIDz3wx1/4HAACACRrZ/8/p7f+P/vL3C+34qSs/fdHAM4fl2v8AAAAwQSP7/7m9/f+xHV/8z+OOWOTvxww8M+vPBLT/AQAAYIJG9v/svf2/1zV3z11seMfzXjfwzJdy7X8AAACYoJH9P0dv/++961KPPfbK3dd6xcAzR+Ta/wAAADBBI/t/zt7+32f7RW46+bGzT/riwDNfzrX/AQAAYIJG9v9cvf2/752/ftVmjyz3QDnwzFdy7X8AAACYoJH9P3dv/3/8Jy97059XfPi53xx45qu59j8AAABM0Mj+n6e3/z/RPfLtxTZd4z0/GnjmyFz7HwAAACZoZP/P29v/+813y6fectiBFy0w8MxRufY/AAAATNDI/p+vt//3P22+95+34z7Xfm/gmaNz7X8AAACYoJH9P39v/x+w9n137HfOBcvOMfDMMbn2PwAAAEzQyP5foLf/D3zqJW/4ws0L7L3wwDPH5tr/AAAAMEEj+/95vf3/yT8vtNjtM28++scDzxyXa/8DAADABI3s/wV7+/+gze/61zILrHfjqwee+Vqu/Q8AAAATNLL/n9/b/596ySfme+TqQ5Y/cuCZ43PtfwAAAJigkf2/UG//f/qYCx5d5LSltj9w4Jmv59r/AAAAMEEj+3/h3v4/+AsH3vDmPe//9EsGnvlGrv0PAAAAEzSy/1/Q2/+fWflNK1zwqcMP+MXAM9/Mtf8BAABggkb2/yK9/X/IVz99++JbbPzeDw48c0Ku/Q8AAAATNLL/F+3t/88ut/brfrnKsyvtM/DMibn2PwAAAEzQyP5frLf/D33d3gsf/PvVb/7VwDMn5dr/AAAAMEEj+/+Fvf3/uQMvfnLPp046/u0Dz3wr1/4HAACACRrZ/y/q7f/PX/vIhSsvue3Hnxh45tu59j8AAABM0Mj+X7y3/7/w0Ze9+7J1r136noFnTs61/wEAAGCCRvb/i3v7/4vbzrf/4cfMcfXaA8+ckmv/AwAAwASN7P+X9Pb/Yb+65fjt9nvigqcGnjk11/4HAACACRrZ/0v09v/hC//9nn1PXHmrdw48c1qu/Q8AAAATNLL/l+zt/y9981XVIT87Zs63Djxzeq79DwAAABM0sv+X6u3/I8557ot/u9gWjzw88Mx3cu1/AAAAmKCR/f/S3v7/8pzXXbJcdfnJ2w48c0au/Q8AAAATNLL/l+7t/6/s8+HlHrirftMlA898N9f+BwAAgAka2f8v6+3/r15y2nULXXz6fLcNPHNmrv0PAAAAEzSy/5fp7f8jb/7yQxtst/Njew48871c+x8AAAAmaGT/v7y3/4/60GZzXrTnWQdsMvDMWbn2PwAAAEzQyP5/RW//H33tUfctcdpu7/3LwDPfz7X/AQAAYIJG9v+yvf1/zEc37m67+q6V7h945uxc+x8AAAAmaGT/v7K3/4/dduelDlpgsZvXHXjmB7n2PwAAAEzQyP5frrf/j/vVdy/bdeZBx1898Mw5ufY/AAAATNDI/l++t/+/dsG7z77q5rU+vvPAMz/Mtf8BAABggkb2/6t6+//44uiNXnfOQ0t/fOCZc3PtfwAAAJigkf2/Qm//f32BE3f78I7LXn3nwDM/yrX/AQAAYIJG9v+Kvf3/je9t/+WvHXbrBdsPPPPjXPsfAAAAJmhk/7+6t/+/ecZnLjlg0wW3umLgmfNy7X8AAACYoJH9v1Jv/5/wvDVfvPuK581548Az5+fa/wAAADBBI/v/Nb39f2K5b/XSR/Z6ZPeBZy7Itf8BAABggkb2/8q9/X/Sj39yz82P3XfyswPPXJhr/wMAAMAEjez/VXr7/1vXvnDOeV65xJveNfDMT3LtfwAAAJigkf2/am//f/ujtz9074aHzveWgWcuyrX/AQAAYIJG9v9re/v/5G1/d925R6z/2B8Hnrk41/4HAACACRrZ/6/r7f9TfrXkcuuedsiHtht45pJc+x8AAAAmaGT/r9bb/6fuc/9ld+253mE/HXhm1o/Z/wAAADBBI/v/9b39f9oliy/1igXu/82tA8/8LNf+BwAAgAka2f+r9/b/6Te/oNvr6qVeu8fAM5fm2v8AAAAwQSP7/w29/f+dD91x3+duvmD3JweeuSzX/gcAAIAJGtn/a/T2/xn7/fyy18/c54itBp65PNf+BwAAgAka2f9r9vb/dy+bY6nrd7z5ig0Gnrki1/4HAACACRrZ/2v19v+ZN6zcHXvOAi99ZOCZK3PtfwAAAJigkf2/dm//f+8Dj96306YPb7bZwDNX5dr/AAAAMEEj+3+d3v4/69SbjtntsOXO+fvAM1fn2v8AAAAwQSP7f93e/v/+vAvs+8lHDrz77oFnrsm1/wEAAGCCRvb/G3v7/+x2ua1uXXGNYq2BZ36ea/8DAADABI3s/zf19v8PLvzTj5d85R1vvn7gmWtz7X8AAACYoJH9/+be/j/nqvU3v/uxRU7bZeCZ63LtfwAAAJigkf2/Xm////AjX/jhfEec/fS+A8/M+ncC7H8AAACYoJH9/5be/j/3/T/6yps23H2R2wee+UWu/Q8AAAATNLL/1+/t/x/9drePnrPFqR96ZuCZG3LtfwAAAJigkf3/1t7+//F+Pzj+lZ/a6bCtB565Mdf+BwAAgAka2f8b9Pb/eZftuf8dv7/yN+sPPPPLXPsfAAAAJmhk/2/Y2//n3/C2d392lfa1fxp45qZc+x8AAAAmaGT/v623/y/4wGcv3GfJ43Z/38AzN+fa/wAAADBBI/t/o97+v3C2fa752VNbHXHlwDO35Nr/AAAAMEEj+3/j3v7/yQ8uXPpVxzx+xQ0Dz9yaa/8DAADABI3s/016+/+iUw6e7X3rrvTSjww8c1uu/Q8AAAATNLL/N+3t/4sXXePBI0+8frOrBp75Va79DwAAABM0sv/f3tv/l7xxo7sv3W+ucz4w8MztufY/AAAATNDI/t+st/9/+q8jy+UXO+HuTww88+tc+x8AAAAmaGT/v6O3/3/2xzNesv3PtinuGnjmN7n2PwAAAEzQyP7fvLf/L93kAz896q6n37zpwDO/zbX/AQAAYIJG9v8Wvf1/2VJXvXKTarXTHh145o5c+x8AAAAmaGT/b9nb/5d/bc5rT9juiKf/MPDMnbn2PwAAAEzQyP7fqrf/rzjk1X/+28WbLrLOwDOzfk8A+x8AAAAmaGT/v7O3/69c4bG52g2XWOjUgWfuzrX/AQAAYIJG9v/Wvf1/1eHL//5rR9z35HMGnrkn1/4HAACACRrZ/+/q7f+rl3mi/fBj65+x6MAz9+ba/wAAADBBI/v/3b39f83q1770da88dIOLB575Xa79DwAAABM0sv/f09v/P//Ucy6/asUF6xUHnvl9rv0PAAAAEzSy/7fp7f9rr97qwEMfufW+Lw08c1+u/Q8AAAATNLL/39vb/9ft/rXt9j5sr+8fPPDMH3LtfwAAAJigkf2/bW//X7/DyWstu+l5Gy0x8Mz9ufY/AAAATNDI/t+ut/9/ccc237zznLVe/PWBZ/6Ya/8DAADABP2v9v9//kC3fW//3/DCtX57xY4HXbrawDN/yrX/AQAAYIJGfv3/fb39f+O3P7X6SjOXPerlA888kGv/AwAAwASN7P/39/b/L79/0Qvfe/NDH/3swDMP5tr/AAAAMEEj+3+H3v6/6bl7PX3E1bu9oRl45qFc+x8AAAAmaGT/79jb/zfv/+t5N1/grDtPGXjmz7n2PwAAAEzQyP7fqbf/b7l8kb98a8/FDj1r4JmHc+1/AAAAmKCR/f+B3v6/9calbvzLaXftPO/AM4/k2v8AAAAwQSP7f+fe/r9t57tXrC6uF1pp4Jm/5Nr/AAAAMEEj+3+X3v7/1dUv/tUx213+5FEDzzyaa/8DAADABI3s/w/29v/tu//+tR+odj7jgIFnHsu1/wEAAGCCRvb/h3r7/9c73PmC1e86fYMXDzzz11z7HwAAACZoZP9/uLf/f3PH85+67mcr12cOPPN4rv0PAAAAEzSy/3ft7f/fXvTgYXsu9sR9sw8887dc+x8AAAAmaGT/79bb/3fUy37w4P22+P4LBp55Itf+BwAAgAka2f8f6e3/O+de8K2/PPGYjc4beObvufY/AAAATNDI/t+9t//vOv3GMxdfd9sXVwPPPJlr/wMAAMAEjez/PXr7/+7TVnj69cecdOkJA888lWv/AwAAwAQVz1uo/Tf7f8/e/r9nvsdfeP1Tcxx17sAz/8i1/wEAAGCCRn79/6O9/X9vd/3qxy557UfnH3jmn7n2PwAAAEzQyP7/WG///+4nM3+70yobv+HogWf+lWv/AwAAwASN7P+9evv/91efvuIZvz/8ztcOPPN0rv0PAAAAEzSy//fu7f/7dt/lxvd8avVDlx145plc+x8AAAAmaGT/79Pb/3/Y4R1/ee4Wz+582MAzz+ba/wAAADBBI/t/397+v/+Ow+d98qwFfvS5gVdmfdj/AAAAMEEj+//jvf3/x/03eWrbXW5+x8sGXpn119j/AAAAMEEj+/8Tvf3/p8u/8oIvzb5PufrAK2U+7H8AAACYoJH9v19v/z9w45mvvfyGC373tYFXqnzY/wAAADBBI/t//97+f3DnHX/1muuWOn3ugVfqfNj/AAAAMEEj+/+A3v5/6KePrbDjPPevf/bAK00+7H8AAACYoJH9f2Bv//9531ffcNxu673w2wOvtPmw/wEAAGCCRvb/J3v7/+EPz/noL757yDPdwCuzfsz+BwAAgAka2f8H9fb/I7dcNd9qb9n98z8ZeGXW32//AwAAwASN7P9P9fb/XxZ84MNLHHn2B1848Mps+bD/AQAAYIJG9v+ne/v/0e++4gu3PbHIqjMHXnlOPux/AAAAmKCR/X9wb/8/dt7zzjhomTt+dfrAK8/Nh/0PAAAAEzSy/z/T2/9/rW7YcNeV1/jSUgOvzJ4P+x8AAAAmaGT/H9Lb/49/7CMn/PDBA3f91MArc+TD/gcAAIAJGtn/n+3t/79dd87ab/zcckt8eeCVOfPxv7H/q//mPzEAAADwv2tk/x/a2/9P3P7Fbefd/OHLXzXwylz58Ov/AAAAMEEj+/9zvf3/9+3efMA9a670o+cNvDJ3Pux/AAAAmKCR/f/53v5/8qeH7rzv8Y+/45yBV+bJh/0PAAAAEzSy/7/Q2/9P7fvWzx7y9FblSQOvzJsP+x8AAAAmaGT/f7G3///x4Y+e+tvFj/tdMfDKrN1v/wMAAMAEjez/w3r7/5+3nPWW5VZrT//CwCvz58P+BwAAgAka2f+H9/b/v85de7Wj7r5y/eUGXlkgH/Y/AAAATNDI/v9Sb/8/Pfun79z+gJ1euMrQK/mw/wEAAGCCRvb/Eb39/8zzL352+a1PfebYgVcWzIf9DwAAABM0sv+/3Nv/z56496KXXrDp51808Mrz82H/AwAAwASN7P+v/Nf+L2YcdNOeJ+xwxAc/OfDKQvmw/wEAAGCCRvb/V3v7v1h1gaM26VZb9asDryycD/sfAAAAJmhk/x/Z2//lssud2/7m6V+tPPDKC/Jh/wMAAMAEjez/o3r7vzrqT2//2xXbfOmCgVcWyYf9DwAAABM0sv+P7u3/+nfrX7D8wifsutDAK4vmw/4HAACACRrZ/8f09n+z5Re2vHSfuZaYc+CVxfJh/wMAAMAEjez/Y3v7v93gR3sddfL1l58x8MoL82H/AwAAwASN7P/jevu/+/tux26/+XmXrDHwyqy/x/4HAACACRrZ/1/r7f+Zm/1gt2c+t9fi9w68sng+7H8AAACYoJH9f3xv/8/2yJ5fnuPBW/f828ArL86H/Q8AAAATNLL/v97b/8/559vO3nLlBb+y+cArL8mH/Q8AAAATNLL/v9Hb/89d87Mbnb7MoXf8ZuCVJfJh/wMAAMAEjez/b/b2/+yz3z7/H59Yf7W9B15ZMh/2PwAAAEzQyP4/obf/5zj3hU+84Mj7dvzQwCtL5cP+BwAAgAka2f8n9vb/nCcuedvb3rLEZ68deOWl+bD/AQAAYIJG9v9Jvf0/1/N/t9KF373rnx8deGXpfNj/AAAAMEEj+/9bvf0/969/ut63dlts4ZsHXnlZPux/AAAAmKCR/f/t3v6fZ5vuO5vPc9aGlw68skw+7H8AAACYoJH9f3Jv/8+7x+sPra7b7XvvHXjl5fmw/wEAAGCCRvb/Kb39P9/1/9zxLzc89Ic/D7zyinzY/wAAADBBI/v/1N7+n//8LT+z0uzLdm8beGXZfNj/AAAAMEEj+/+03v5fYMY33nfFLgdtusXAK6/Mh/0PAAAAEzSy/0/v7f/nzf/tdY44a62z/zHwynL5sP8BAABggkb2/3d6+3/BM7c7+b0nH3PJHQOvLJ8P+x8AAAAmaGT/n9Hb/8+f/YQN/rnPFovvP/DKq/Jh/wMAAMAEjez/7/b2/0Ln7vC9mQs/seeOA6+skA/7HwAAACZoZP+f2dv/C5/4ri9ufcXKX7lm4JUV82H/AwAAwASN7P/v9fb/C2b+r195dT7sfwAAAJigkf1/Vm//L7Lvjgsv2O282u8HXlkpH/Y/AAAATNDI/v9+b/8v+tMzn/z9Dpfv+NeBV16TD/sfAAAAJmhk/5/d2/+L3fKV28+6oP7sxgOvrJwP+x8AAAAmaGT//6C3/1/44U1et/bWz/7zwYFXVsmH/Q8AAAATNLL/z+nt/xft8v0d33PA6guvN/DKqvmw/wEAAGCCRvb/D3v7f/FbP3boGXcfvuG7B155bT7sfwAAAJigkf1/bm//v/hnG3znydU2/t6/Bl55XT7sfwAAAJigkf3/o97+f8len1vvuYtf+4ddB15ZLR/2PwAAAEzQyP7/cW//LzH7y06+/uk5ul8OvPL6fNj/AAAAMEEj+/+83v5f8txH1nn98SdtevnAK6vnw/4HAACACRrZ/+f39v9SJ97yvp3W3PbsHQZeeUM+7H8AAACYoJH9f0Fv/7/0+fN95th9TnjlQwOvrJEP+x8AAAAmaGT/X9jb/0uff+MuM07e5hcbDryyZj6y/8v/yX9kAAAA4H/TyP7/SW//v2zGgl/86xXXH7flwCtr5cOv/wMAAMAEjez/i3r7f5n5l/3eKQvPtc8/B15ZOx/2PwAAAEzQyP6/uLf/X37mgxu8vTtixY8NvLJOPux/AAAAmKCR/X9Jb/+/4qKnd7n3N5v+8paBV9bNh/0PAAAAEzSy/3/a2//L1q/74jwXPH3wzwZeeWM+7H8AAACYoJH9/7Pe/n/l3MX31t1htR22GXjlTfmw/wEAAGCCRvb/pb39v9zpV25w7gFXLvDrgVfenA/7HwAAACZoZP9f1tv/y+9436vO3Lp9fK+BV9bLh/0PAAAAEzSy/y/v7f9X/fIlN71rtVO/+eGBV96SD/sfAAAAJmhk/1/R2/8rXLHQY7PdvdOa1w28sn4+7H8AAACYoJH9f2Vv/6/48bvm/sfTj89cc+CVt+bD/gcAAIAJGtn/V/X2/6tnfuLZNyy+0p9+N/DKBvmw/wEAAGCCRvb/1b39v9LZFyx67ZrH/eTxgVc2zIf9DwAAABM0sv+v6e3/15x84GpHH7/V1u8YeOVt+bD/AQAAYIJG9v/Pe/t/5UXedOfOnzvwlbsNvLJRPux/AAAAmKCR/X9tb/+vctGnV3p08zV+cdPAKxvnw/4HAACACRrZ/9f19v+q9dq3lSs/fNxlA69skg/7HwAAACZoZP9f39v/r5177yfe8eBy+7x/4JVN82H/AwAAwASN7P9f9Pb/606/eP5vP3H2ig8MvPL2fNj/AAAAMEEj+/+G3v5f7eq3brvoMrv/8s0Dr2yWD/sfAAAAJmhk/9/Y2/+v3/3QAx5+yx0Hv2fglVl/JqD9DwAAABM0sv9/2dv/q+9w1gnnH7nIDk8PvLJ5Pux/AAAAmKCR/X9Tb/+/4Y6Prr3ebvcv8KaBV7bIh/0PAAAAEzSy/2/u7f81Dn7/mxf57lKP3zfwypb5sP8BAABggkb2/y29/b/mat88/ZHrDvnmYwOvbJUP+x8AAAAmaGT/39rb/2stfeznLphnvTU3Gnjlnfmw/wEAAGCCRvb/bb39v/YRW+/05tlvnvnbgVe2zof9DwAAABM0sv9/1dv/6/zhmYO/cMMCf9pv4JV35cP+BwAAgAka2f+39/b/uluvsv1+Z13wk50GXnl3Pux/AAAAmKCR/f/r3v5/45vLdZfZZZ+tfz7wynvyYf8DAADABI3s/9/09v+bHrvslNuPn2PLlw68sk0+7H8AAACYoJH9/9ve/n/zRu1b117z2h9/euCV9+bD/gcAAIAJGtn/d/T2/3oPXHLmWYtv+9ARA69smw/7HwAAACZoZP/f2dv/b3nmH4f9/umT5lh+4JXt8mH/AwAAwASN7P+7evt//XVW++CCd6++zoUDr2yfD/sfAAAAJmhk/9/d2/9vnW2Xl2222rPfXmzglfflw/4HAACACRrZ//f09v8GPzj95ydvvfGjsw288v582P8AAAAwQSP7/97e/t/wlMMfeOyAw+f+zsArO+TD/gcAAIAJGtn/v+vt/7ct+o6ZxQ47bzvPwCs75sP+BwAAgAn69/v/vufO+K/9v9Fde+yx0AWnH/SDgVd2yof9DwAAABM08uv/9/V+/X/j95195AO/qW/71sArH8iH/Q8AAAATNLL//9Db/5vsdsiPLuouf0078MrO+bD/AQAAYIJG9v/9vf2/6c833GyDhbfY/9CBV3bJh/0PAAAAEzSy///Y2/9vv/ih8w+54pivLz3wygfzYf8DAADABI3s/z/19v9mzTJb7Hvyyte8YeCVD+XD/gcAAIAJGtn/D/T2/zvmmXvv5fZ54uXHD7zy4XzY/wAAADBBI/v/wd7+3/w7tx73212W3fL8gVd2zYf9DwAAABM0sv8f6u3/LWabf9c3nvXQj58/8Mpu+bD/AQAAYIJG9v+fe/t/yx/88ogf3rDWQ3MNvPKRfNj/AAAAMEEj+//h3v7f6pQ//uCe2Q+a47sDr+yeD/sfAAAAJmhk/z/S2//vXPSVG887z2LrLD7wyh75sP8BAABggkb2/196+3/r/e546enX3fXtgwZe2TMf9j8AAABM0Mj+f7S3/9912Qsu3/K7uz36lYFXPpoP+x8AAAAmaGT/P9bb/+++YfHfz7HbWXO/ZuCVj+XD/gcAAIAJGtn/f+3t//d84P72mSPX3/bzA6/slQ/7HwAAACZoZP8/3tv/2+xUb3bvWw496JUDr+ydD/sfAAAAJmhk//+tt//fe9PPfjTPMkvcturAK/vkw/4HAACACRrZ/0/09v+2Vz555LpP3Pea4wZe2Tcf9j8AAABM0Mj+/3tv/2/3idX3OPfBvfZfcOCVj+fD/gcAAIAJGtn/T/b2//azfe243Vc+7+s/HHjlE/mw/wEAAGCCRvb/U739/74fbLX3AZsveM2JA6/slw/7HwAAACZoZP//o7f/33/KNlvc/LlbXz70yv75sP8BAABggkb2/z97+3+HRU8+/6UvOvyv5wy8ckA+7H8AAACYoJH9/6/e/t/x4u03/sm/Np73eQOvHJgP+x8AAAAmaGT/P93b/zs1J/5gw689+8Zi4JVP5sP+BwAAgAka2f/P9Pb/B+Y5+oiF11j9lJMGXjkoH/Y/AAAATNDI/n+2t/93/s67d/3Tu056eLmBVz6VD/sfAAAAJujf7/8ZM3r7f5e7Hzj8pgO3nesLA698Oh/2PwAAAEzQyP4vevv/g1u94iMvuufadx478MrB+bD/AQAAYIJG9n/Z2/8f2vB5m+7x+jnOX2Xglc/kw/4HAACACRrZ/1Vv/3/48Ru+/5lfP3HVJwdeOSQf9j8AAABM0Mj+r3v7f9fXPHbdN9qVX/aigVc+mw/7HwAAACZoZP83vf2/2+dfvdwu7z/mEysPvHJoPux/AAAAmKCR/d/29v9Hjp5zzlXO3+JrXx145XP5sP8BAABggkb2f9fb/7u/+KqHfn7K5bcsNPDK5/Nh/wMAAMAEjez/mb39v8c7PlDNuW/96gsGXvlCPux/AAAAmKCR/T9bb//v+dAZ9zz9gtO3OWPglS/mw/4HAACACRrZ/8/p7f+PPnnkJaddufOBcw68clg+7H8AAACYoJH9/9ze/v/YWhu9eKsbz/rrywZeOTwf9j8AAABM0Mj+n723//e6+4irL5ljt3k/N/DKl/Jh/wMAAMAEjez/OXr7f++t3v7yFT941xu/NvDKEfmw/wEAAGCCRvb/nL39v8+GH3rODt9f7JTVB175cj7sfwAAAJigkf0/V2//7/v4qX/8yhkHPXz2wCtfyYf9DwAAABM0sv/n7u3/jx/1zq+/Yte15pp74JWv5sP+BwAAgAka2f/z9Pb/J5Y9/uN3zf3QO7uBV47Mh/0PAAAAEzSy/+ft7f//F3t3Gn71+P/9Pp9lyjxkylSEkimJzFNmCSFDMs8yZ8iQKRG/oij9yEyZMsWPDKlQKELGTFGGIoSSon1jn67rvPa5juvc/72v/3GcNx6PO72P7/Fdr2PdfX7XWq3Lth5y5PXjNx5xf52VgeHQ/wAAAFCgTP+vGPV/j6uOGXlhyw/GrV1n5dZ/fv+/99kCAAAA/19k+r9R1P+XnzJw4ZFzVmnxYp2VQeHQ/wAAAFCgTP+vFPX/Fe8d8M2+A5+79KE6K/8Oh/4HAACAAmX6f+Wo/68ce9rYVfe58PbF66zcFg79DwAAAAXK9P8qUf9fdemj6804ZNr7V9dZuT0c+h8AAAAKlOn/VaP+v7rhsm9s0rvZFuvXWRkcDv0PAAAABcr0/2pR//d86vXmn03vfXSrOit3hEP/AwAAQIEy/d846v9rhvza8Lot97mif52VO8Oh/wEAAKBAmf5fPer/Xmu2mdF97HZX96izclc49D8AAAAUKNP/a0T9f+3IOQ2+XP2vEz6rs3J3OPQ/AAAAFCjT/2tG/X/dIq2+WvHijq3eqLNyTzj0PwAAABQo0/9rRf3fe/klx+wxpN/Ek+us3BsO/Q8AAAAFyvT/2lH/X//whKbDRyw7aGqdlfvCof8BAACgQJn+bxL1/w3fDD5h9olvXbh7nZX7w6H/AQAAoECZ/m8a9f+/Oh/Ra5FFj97ogDorD4RD/wMAAECBMv2/TtT/ffY85oEDPrl7wq91VoaEQ/8DAABAgTL9v27U/31nDWl3z/aHj9yrzsrQcOh/AAAAKFCm/5tF/X/jZj3bjphyW5cZdVYeDIf+BwAAgAJl+n+9qP9v6r3rJ3td0WaJ+XVWHgqH/gcAAIACZfp//aj/+91x0bw1j/xtRpc6Kw+HQ/8DAABAgTL9v0HU//2bjVxt5k6n3PNunZVHwqH/AQAAoECZ/m8e9f/N+685u+XtQ3c9q87Ko+HQ/wAAAFCgTP+3iPr/lumTG300f9FVTqqzMiwc+h8AAAAKlOn/DaP+H/D3lDY3NBk7+9U6K4+FQ/8DAABAgTL93zLq/4HtNviwx5ZrXP1VnZXHw6H/AQAAoECZ/t8o6v9bv5m23bTpn52wU52VJ8Kh/wEAAKBAmf7fOOr/QZ3X/Xzl3ue26lRn5clw6H8AAAAoUKb/N4n6/997rrZgl0OenPh7nZWnwqH/AQAAoECZ/t806v/bZn2x5hP7bDroojorw8Oh/wEAAKBAmf7fLOr/22/a6LSGA2deOLnOytPh0P8AAABQoEz/t4r6f3DL6df9OWenjcbXWXkmHPofAAAACpTp/82j/r9jx4lDh7W8YsIZdVb+Ew79DwAAAAXK9H/rqP/v7Lny3keO7z5yUp2VZ8Oh/wEAAKBAmf7fIur/u675fbWdl3u+y/l1Vp4Lh/4HAACAAmX6v03U/3dv13rek2ettMQxdVZGhEP/AwAAQIEy/b9l1P/3NG/4yTePTJoxps7K8+HQ/wAAAFCgTP9vFfX/vf3ebrvSE3vd06HOygvh0P8AAABQoEz/t436/75vun44seu1u/5YZ+XFcOh/AAAAKFCm/7eO+v/+zg+3WXfp9Vf5s87KS+HQ/wAAAFCgTP9vE/X/A3ve1OiCd76dfWidlZHh0P8AAABQoEz/bxv1/5BZnWZfPb3Zqe/VWXk5HPofAAAACpTp/+2i/h+6/y1rrrXltOvPrrMyKhz6HwAAAAqU6f/to/5/cHrHBT8ess8XJ9ZZGR0O/Q8AAAAFyvT/DlH/P/T3KZ8/17v3Dq/UWRkTDv0PAAAABcr0/45R/z/c7rHt9h64ygV71ln5528C+h8AAAAKlOn/naL+f+Sg59acv88HA6bXWXk1HPofAAAACpTp/52j/n90Zo8Fy7a8cPRfdVZeC4f+BwAAgAJl+n+XqP+H/bnb50fMeW7do+qsjA2H/gcAAIACZfp/16j/H9vpqu2GLrfLAdPqrIwLh/4HAACAAmX6v13U/49fefdOj4+/6vE96qy8Hg79DwAAAAXK9P9uUf8/0fake3Z9ZOOp+9dZeSMc+h8AAAAKlOn/3aP+f3KjI69a5awfFplVZ+XNcOh/AAAAKFCm//eI+v+pAbcdM7Xr2fteVmdlfDj0PwAAABQo0/97Rv0//Kut+zR94vFHP62zMiEc+h8AAAAKlOn/vaL+f/rQBae/+85ac9+ss/JWOPQ/AAAAFCjT/3tH/f/Mvq+2v2bpL1Y9pc7K2+HQ/wAAAFCgTP/vE/X/f2bXHuu2+sKn7ldnZWI49D8AAAAUKNP/+0b9/+xBo9r9NPbV63+os/JOOPQ/AAAAFCjT/+2j/n9u5mIPrDHktC/m1Vl5Nxz6HwAAAAqU6f/9ov4f8ef2vfa8+KEdDquz8l449D8AAAAUKNP/HaL+f36neSc8f+JWF7xfZ2VSOPQ/AAAAFCjT//tH/f/CuouvWBsxe8AFdVb++ZuA/gcAAIACZfr/gKj/Xxz01i8/f3Lo6KPrrHwQjv+l/xf/b3nGAAAAwH9Vpv8PjPr/pX/9NvG+RQetO7rOyofh8Po/AAAAFCjT/x2j/h+51eabd5py7AEX1ln5KBz6HwAAAAqU6f+Dov5/+fR1tq62v/fxT+qsfBwO/Q8AAAAFyvT/wVH/j/pg6uRfjlx66oQ6K//8TUD/AwAAQIEy/X9I1P+jR3/+5/1XjF/kzDork8Oh/wEAAKBAmf7vFPX/mAtXXfWQ2w/Y9+s6K5+GQ/8DAABAgTL9f2jU/68sNWJO/51ufHTnOiufhUP/AwAAQIEy/X9Y1P+vPnPJSkc32WHuIXVWPg+H/gcAAIACZfr/8Kj/X7tn9y22mL9g1d/qrHwRDv0PAAAABcr0/xFR/49d9fIPxi597Zqr1ln5Mhz6HwAAAAqU6f/OUf+PG7HL9ke+s9f8EXVWpoRD/wMAAECBMv1/ZNT/rze4+othT3w79NE6K1+FQ/8DAABAgTL93yXq/zcavfT3n13X32vZOiv/fCeg/gcAAIACZfr/qKj/3xx24RoNz3q+wVV1VqaGQ/8DAABAgTL9f3TU/+O/bn7oPo90n9K0zsq0cOh/AAAAKFCm/4+J+n/CYTNHPDt+0tNb1ln5Jhz6HwAAAAqU6f9jo/5/q/2k235YbqWDbq6z8m049D8AAAAUKNP/x0X9//acFS5ae87M9Teps/JdOPQ/AAAAFCjT/8dH/T+xzWaLLNZy07E31Fn5Phz6HwAAAAqU6f8Tov5/p+/sb3/b54r+t9VZmR4O/Q8AAAAFyvT/iVH/v3vb+NfuGrjTOVvXWZkRDv0PAAAABcr0/0lR/7/XdIlmHXt/tu3TdVZ+CIf+BwAAgAJl+v/kqP8nHTz0zQGHrPHJKnVWfgyH/gcAAIACZfr/lKj/3//pjBYnbPlkn3orM8Oh/wEAAKBAmf4/Ner/D+YdtHir6eeeeU+dlZ/Cof8BAACgQJn+Py3q/w937jd99Pyha/ass/JzOPQ/AAAAFCjT/6dH/f/R1/svdGiTU+ZvUGfll3DofwAAAChQpv+7Rv3/8WEDvn54p7FDN6uzMisc+h8AAAAKlOn/M6L+/6T9I6MX3L7oXv3qrPwaDv0PAAAABcr0/5lR/0+ec2qTpa64rcFadVZ+C4f+BwAAgAJl+v+sqP8/vXnQIcOPPHzKC3VWfg+H/gcAAIACZfr/7Kj/P9vkqOF7bP/b0w/XWZkdDv0PAAAABcr0/zlR/3++zQm3rDilzUEN66zMCYf+BwAAgAJl+v/cqP+/uPzeC75c9K31n6qz8kc49D8AAAAUKNP/50X9/+VVOzWb/8myY5evszI3HPofAAAACpTp/25R/0/Z+prXlh1xd/9F66z8GQ79DwAAAAXK9P/5Uf9/tfEL3x5x4tHn3FdnZV449D8AAAAUKNP/F0T9//XA7osMvfivbZvXWZkfDv0PAAAABcr0/4VR/0/9+qPpXYds90nvOit/hUP/AwAAQIEy/X9R1P/TDltr8TvG9uszuM7K3+HQ/wAAAFCgTP93j/r/m/bNWryxesczd6yzsiAc+h8AAAAKlOn/i6P+/3bOV29ufd6UEUekK9U/h/4HAACAAmX6/5Ko/787uEmTe4c2OWJuulKF39H/AAAAUKJM/18a9f/3P30zev9xfZadma5U/7wBQP8DAABAgTL9f1nU/9Pnffr1wo06zNw3Xalq4dD/AAAAUKBM//eI+n/Gzo0XmtPw3SEvpyvVwuHQ/wAAAFCgTP9fHvX/DzMun/Hg+yvufmy6Ui0SDv0PAAAABcr0/xVR//94wO4ND3/6xRW6pSvVouHQ/wAAAFCgTP9fGfX/zN0uab7MKZf8+mG6Ui0WDv0PAAAABcr0/1VR//+0YMQbf/XpdUXXdKX65/H6HwAAAAqU6f+ro/7/eftbn5l24O5Hv52uVA3Dof8BAACgQJn+7xn1/y+9uhy08ubfbfFRulItEQ79DwAAAAXK9P81Uf/P6n98t11mtni/e7pSLRkO/Q8AAAAFyvR/r6j/f21xz8Anfh1+++x0pVoqHPofAAAACpTp/2uj/v/tyAYXnrdpt0sPSleqpcOh/wEAAKBAmf6/Lur/37997d+9OkxusWu6Ui0TDv0PAAAABcr0f++o/2f/Ov/59/o3HjclXamWDYf+BwAAgAJl+v/6qP/n7LXNYU16jhrxWrpSLRcO/Q8AAAAFyvT/DVH//zHjjydHHNbgiOPTlWr5cOh/AAAAKFCm//8V9f/cA3bYf6+thy17brpSrRAO/Q8AAAAFyvR/n6j//9xt4bPXnHbmzHfSleqf7tf/AAAAUKBM//eN+n/egtH9Z/4xa8iR6UrVKBz6HwAAAAqU6f8bo/6ff3uraYc0a737gnSlWikc+h8AAAAKlOn/m6L+/2v9OYvd327wCt+lK9XK4dD/AAAAUKBM//eL+v/vzSes/8utnX/dO12pVgmH/gcAAIACZfq/f9T/C65d8pWqx5Arfk5XqlXDof8BAACgQJn+v/l/9n/VYOopS59274lHH5iuVKuFQ/8DAABAgTL9f0vU/wt1eeynW8eM22K3dKVqHA79DwAAAAXK9P+AqP+rvW95a/zaDd//Nl2pVg+H/gcAAIACZfp/YNT/tZ87brRjdfPtp6Ur1Rrh0P8AAABQoEz/3xr1/8JX/zLmz88PvvT1dKVaMxz6HwAAAAqU6f9BUf8vssNWTRu+NK/F5+lKtVY49D8AAAAUKNP//476f9ENl25w5LHbjLskXanWDof+BwAAgAJl+v+2qP8Xu/HNr4b1bz/hxnSl+ucx+h8AAAAKlOn/26P+X3zzhg236HDDRpunK1XTcOh/AAAAKFCm/wdH/d/w2rdnjN10nQvXS1eqdcKh/wEAAKBAmf6/I+r/JW7//Y3+v349qFe6Uq0bDv0PAAAABcr0/51R/y+5fuvmR8+8bOKS6UrVLBz6HwAAAAqU6f+7ov5f6rTjTl9n85GtHkxXqn8+E6D/AQAAoECZ/r876v+l37m/zzsHLn/CS+lKtX449D8AAAAUKNP/90T9v8yrdz7Ws8/Eq9dIV6oNwqH/AQAAoECZ/r836v9lexzW/vxTWs5+IF2pmodD/wMAAECBMv1/X9T/y714casznp6+ysLpStUiHPofAAAACpTp//uj/l9+sRffG/x+u13rNH61YTj0PwAAABQo0/8PRP2/woq9Zr3esOc9T6QrVctw6H8AAAAoUKb/h0T9v+KDOy+3TaNVZ2yfrlQbhUP/AwAAQIEy/T806v9Gn329YMG4j5e4M12pNg6H/gcAAIACZfr/waj/VzppvTWXGnpBl2vTlWqTcOh/AAAAKFCm/x+K+n/lc9fe7tDznhm5YbpSbRoO/Q8AAAAFyvT/w1H/r/L6x58/fGzXCUunK9Vm4dD/AAAAUKBM/z8S9f+qp63eptVLj2z0WLpStQqH/gcAAIACZfr/0aj/V3vnsw9Hf15d+Gy6Um0eDv0PAAAABcr0/7Co/xu/+u3sAdWYQY3Tlap1OPQ/AAAAFCjT/49F/b96j6aNTli7y8QB6Uq1RTj0PwAAABQo0/+PR/2/xhrvHvvZmDtbbZGuVG3Cof8BAACgQJn+fyLq/zUfaHT5Jve2OmHddKXaMhz6HwAAAAqU6f8no/5f68lN7u7e4+err0hXqq3Cof8BAACgQJn+fyrq/7UX/27X625dcva26UrVNhz6HwAAAAqU6f/hUf83WXLJ5W5p98Yqg9KVautw6H8AAAAoUKb/n476v+kTE2ad2Oz4XfukK9U24dD/AAAAUKBM/z8T9f869895b/M/7r9no3Sl+uczAfofAAAACvT/6P/dlm3QIO7//0T9v+7arVqNmtZ2xl3pSrVdOPQ/AAAAFCjz+v+zUf83O63/5wtvPXeJKl2ptg+H/gcAAIACZfr/uaj/13vn4O3mHNapy0rpSrVDOPQ/AAAAFCjT/yOi/l//1TPXvLfngJH/SVeqHcOh/wEAAKBAmf5/Pur/DXo8uGD/lw5ed7t0pdopHPofAAAACpTp/xei/m/+2WmN3jj25tF3pCvVzuHQ/wAAAFCgTP+/GPV/i5Menb11tc2A69KVapdw6H8AAAAoUKb/X4r6f8NzB37Y9fN5F7RMV6pdw6H/AQAAoECZ/h8Z9X/L1w9oc8eYE3cYkq5U7cKh/wEAAKBAmf5/Oer/jT7eo1HztYd8sUi6Uu0WDv0PAAAABcr0/6io/zc+7orZk3s0vH6FdKXaPRz6HwAAAAqU6f/RUf9vcsHzH/a9d9ypj6cr1R7h0P8AAABQoEz/j4n6f9MJl7a5pF3rVZdIV6o9w6H/AQAAoECZ/n8l6v/Nlj1qr+NvnTV3aLpS7RUO/Q8AAAAFyvT/q1H/t3p60MMD/+j86Mh0pdo7HPofAAAACpTp/9ei/t/87nt7j2k2eN8105Vqn3DofwAAAChQpv/HRv3fevUTTt5s6waL3JSuVPuGQ/8DAABAgTL9Py7q/y3OHNvr92mjprZOV6r24dD/AAAAUKBM/78e9X+b9xc6YdGeZz7eLF2p9guH/gcAAIACZfr/jaj/txy1bbsDDxt2wDXpStUhHPofAAAACpTp/zej/t/q4r8euLtDt3XvTleq/cOh/wEAAKBAmf4fH/V/2493bL9t/+Gja+lKdUA49D8AAAAUKNP/E6L+3/q4uY+N+7XxgEbpSnVgOPQ/AAAAFCjT/29F/b/NBWP63L7p5AueSVeqjuHQ/wAAAFCgTP+/HfX/thMWOf3MzXffYZt0pTooHPofAAAACpTp/4lR/283bHbjD2f2+uLWdKU6OBz6HwAAAAqU6f93ov7fvtFmfzTr0+L6vulKdUg49D8AAAAUKNP/70b9v0ODJT4+68DvTt04Xak6hUP/AwAAQIEy/f9e1P87jhi/7VVPr7jqwHSlOjQc+h8AAAAKlOn/SVH/7zTl080+OOXduW3SleqwcOh/AAAAKFCm/9+P+n/nIxq/u17DSx5dJ12pDg+H/gcAAIACZfr/g6j/d+nQ5Nez339x38vTleqIcOh/AAAAKFCm/z+M+n/X379Z/spxTRZZKl2pOodD/wMAAECBMv3/UdT/7a5o9/cejaZMHZauVEeGQ/8DAABAgTL9/3HU/7tte+Uaw8/r8Phz6UrVJRz6HwAAAAqU6f9Pov7ffdNnt/9yaJ8DVk9XqqPCof8BAACgQJn+nxz1/x63XPbFiofNPWhOulIdHQ79DwAAAAXK9P+nUf/vudULW1zXs+3TB6cr1THh0P8AAABQoEz/fxb1/17/6v5B92kDpuySrlTHhkP/AwAAQIEy/f951P97D9ppziZbd2rwZbpSHRcO/Q8AAAAFyvT/F1H/77PuNSt91uyNvU5PV6rjw6H/AQAAoECZ/v8y6v99z/jggDv/WHLoW+lKdUI49D8AAAAUKNP/U6L+bz9puadOv/X++R+nK9WJ4dD/AAAAUKBM/38V9f9+L2/Yr22749e8OF2pTgqH/gcAAIACZfr/66j/O3T/4aw3773zzFHpSnVyOPQ/AAAAFCjT/1Oj/t//2beWeq9Hlz7HpSvVKeHQ/wAAAFCgTP9Pi/r/gGrxmU3W/vmT89KV6tRw6H8AAAAoUKb/v4n6/8CVN3/7vDGttv0gXalOC4f+BwAAgAJl+v/bqP87PvLbxr0+f+Scw9OV6vRw6H8AAAAoUKb/v4v6/6CPDhm9S9W1/x/pStU1HPofAAAACpTp/++j/j/42BubPHHsmLE/pSvVGeHQ/wAAAFCgTP9Pj/r/kPMfWmjaS9X67dOV6sxw6H8AAAAoUKb/Z0T932n86V+vPPTjg05NV6qzwqH/AQAAoECZ/v8h6v9Dzxi2+A3nrfr0uHSlOjsc+h8AAAAKlOn/H6P+P2zSydN7NHpmyhfpSnVOOPQ/AAAAFCjT/zOj/j/85QPfbDnuggaXpivVueHQ/wAAAFCgTP//FPX/Ed1vbvHR+9P3+iVdqc4Lh/4HAACAAmX6/+eo/zuvdtJRRzdsObRjulJ1C4f+BwAAgAJl+v+XqP+PvPfuF/uf0nN+u3SlOj8c+h8AAAAKlOn/WVH/d/nPbbePfbrdmt+kK9UF4dD/AAAAUKBM//8a9f9RSx952RYHjjyzc7pSXRgO/Q8AAAAFyvT/b1H/H73MSxs373NZn7/TleqicOh/AAAAKFCm/3+P+v+Y4Re+PXnmxE++T1eq7uHQ/wAAAFCgTP/Pjvr/2Lt2mdl38+W33SddqS4Oh/4HAACAAmX6f07U/8c1vnqpSza94Zyx6Up1STj0PwAAABQo0/9/RP1//Bnrf/3cr+37n5CuVJeGQ/8DAABAgTL9Pzfq/xMmfbnQ3v2/HntOulJdFg79DwAAAAXK9P+fUf+f+PInTdbqsM76E9OVqkc49D8AAAAUKNP/86L+P6n7GqN/nHr838enK9Xl4dD/AAAAUKBM/8+P+v/kjz5vcUHb+9d+LV2prgiH/gcAAIACZfr/r6j/Tzl21TevPnTJfd5JV6orw6H/AQAAoECZ/v876v9Tz19n+sSr33jo3HSluioc+h8AAAAKlOn/BVH/nzZ+6uLrDur09YJ0pbo6HPofAAAACvS/7/+FGkT9f/p1Gx10+24DqiPTlapnOPQ/AAAAFCjT/wtF/d+19fRnzlyv7SF7pyvVNeHQ/wAAAFCgTP9XUf+fscHEgdvOnfuf79KVqlc49D8AAAAUKNP/taj/zxy8crdxa1WvHpiuVNeGQ/8DAABAgTL9v3DU/2cdtUXDiaPHNPs5XamuC4f+BwAAgAJl+n+RqP/PnjZrxrr3dD3r23Sl6h0O/Q8AAAAFyvT/olH/n/PLuDcuuOyRm3ZLV6rrw6H/AQAAoECZ/l8s6v9z91mm+dXHtfro9XSluiEc+h8AAAAKlOn/xaP+P2/HR8buPPLnrU9LV6p/hUP/AwAAQIEy/d8w6v9uPU9d78kvunS9JF2p+oRD/wMAAECBMv2/RNT/59+0/8Lf1O684fN0peobDv0PAAAABcr0/5JR/1/QcsA3K63U7u+56Up1Yzj0PwAAABQo0/9LRf1/4XUHLd339Z5rH5GuVDeFQ/8DAABAgTL9v3TU/xe17vfTJQ+23GffdKXqFw79DwAAAAXK9P8yUf9332DoW827TX9oZrpS9Q+H/gcAAIACZfp/2aj/Lx58xkaTT77g62PTlermcOh/AAAAKFCm/5eL+v+SvwcfftzwZ6qX05XqlnDofwAAAChQpv+Xj/r/0nZHPHvjpFUP+TBdqQaEQ/8DAABAgTL9v0LU/5ftf8ygVxb/+D/d0pVqYDj0PwAAABQo0/8rRv3fY/qQi7f6aZ1X305XqlvDof8BAACgQJn+bxT1/+UNDnj559ZfN+uarlSDwqH/AQAAoECZ/l8p6v8rRgxcp9ax/Vnd05Xq3+HQ/wAAAFCgTP+vHPX/lcMerXXqe8NNH6Ur1W3h0P8AAABQoEz/rxL1/1WNTptyX7/lPzooXaluD4f+BwAAgAJl+n/VqP+vPvr1ZY7Zb+LWs9OVanA49D8AAAAUKNP/q0X93/OTZX/ot8llXaekK9Ud4dD/AAAAUKBM/zeO+v+at9pMeG3WyBt2TVeqO8Oh/wEAAKBAmf5fPer/Xuf9ummb2rjrHktXqrvCof8BAACgQJn+XyPq/2s/aPXKY180PHnpdKW6Oxz6HwAAAAqU6f81o/6/7vQ563ceOWS7xulKdU849D8AAAAUKNP/a0X93/vCCYstftyJnz2brlT3hkP/AwAAQIEy/b921P/Xj15y2rzL5t28RbpS3RcO/Q8AAAAFyvR/k6j/b+h7xN3P3bNNtwHpSnV/OPQ/AAAAFCjT/02j/v9Xm8G77j365qZXpCvVA+HQ/wAAAFCgTP+vE/V/n6ZDjl1rrYNfXjddqYaEQ/8DAABAgf5H/y9YEH7yv/T/ulH/973tmMt/nDvsyUHpSjU0HPofAAAACpR5/b9Z1P83Hrbr/N/XO7PjtulK9WA49D8AAAAUKNP/60X9f9PXPddadLdRi22UrlQPhUP/AwAAQIEy/b9+1P/95ozc8cBBDb7pk65UD4dD/wMAAECBMv2/QdT//dtf9NndVw9+rEpXqkfCof8BAACgQJn+bx71/81bT978+EM773dXulI9Gg79DwAAAAXK9H+LqP9vuWrNiQPbzmr8n3SlGhYO/Q8AAAAFyvT/hlH/Dxi4wS9jpraet1K6Uj0WDv0PAAAABcr0f8uo/wduPGXFzWZ9d93m6Ur1eDj0PwAAABQo0/8bRf1/a991/3hokxYn35iuVE+EQ/8DAABAgTL9v3HU/4PaTGt82H69tuuVrlRPhkP/AwAAQIEy/b9J1P//bvrFtkv32/2z9dKV6qlw6H8AAAAoUKb/N436/7bbVvv4776Tb34wXamGh0P/AwAAQIEy/b9Z1P+3/zH9sd07Nu62ZLpSPR0O/Q8AAAAFyvR/q6j/B++yUfunWw9vuka6Uj0TDv0PAAAABcr0/+ZR/99xyMqnT/mp28svpSvVf8Kh/wEAAKBAmf5vHfX/nT9M7LPC4n2eXDhdqZ4Nh/4HAACAAmX6f4uo/+/6qfVny0zq0PGBdKV6Lhz6HwAAAAqU6f82Uf/fffDvO/41fMpiT6Qr1Yhw6H8AAAAoUKb/t4z6/56d317rwZObfFOn8avnw6H/AQAAoECZ/t8q6v975zWcf3i3Fx+7M12pXgiH/gcAAIACZfq/bdT/9/V9eMU7H7xkv+3TlerFcOh/AAAAKFCm/7eO+v/+Nl1/Of31dxtvmK5U/3wnoP4HAACAAmX6f5uo/x9o2mli25VWnHdtulKNDIf+BwAAgAJl+n/bqP+H3HbT5m9uMvGkWrpSvRwO/Q8AAAAFyvT/dlH/D92648cHzFr+mrvTlWpUOPQ/AAAAFCjT/9tH/f/gVbdse0+/ke8+k65Uo8Oh/wEAAKBAmf7fIer/hwY+1nj2fpe1bpSuVGPCof8BAACgQJn+3zHq/4c3PuWPRTp+3f3WdKV6JRz6HwAAAAqU6f+dov5/ZPseHz/Vd53btklXqlfDof8BAACgQJn+3znq/0d7PbftTj/d8PbG6Ur1Wjj0PwAAABQo0/+7RP0/rP9VjRu1br9J33SlGhsO/Q8AAAAFyvT/rlH/P9Zitz++nfRM5zbpSjUuHPofAAAACpTp/3ZR/z8+46SrFyx+wYsD05Xq9XDofwAAAChQpv93i/r/iQPuPnGpkz/+/vJ0pXojHPofAAAACpTp/92j/n9yt9v2OHT4qouvk65Ub4ZD/wMAAECBMv2/R9T/Ty048v6HH+y587B0pRofDv0PAAAABcr0/55R/w+/fsHeZ3Rrd9dS6Uo1IRz6HwAAAAqU6f+9ov5/utXWQwevNP231dOV6q1w6H8AAAAoUKb/9476/5n1ate9/nrLlZ5LV6q3w6H/AQAAoECZ/t8n6v//3Pnqadt88fNJd6Qr1cRw6H8AAAAoUKb/9436/9ntF7v8rlqra7ZLV6p3wqH/AQAAoECZ/m8f9f9zvUYd2/G4O99tma5U74ZD/wMAAECBMv2/X9T/I/rP23WxkV1aX5euVO+FQ/8DAABAgTL93yHq/+dbbH/3b/eM6b5IulJNCof+BwAAgAJl+n//qP9f2PutD/e9rLptSLpSvR8O/Q8AAAAFyvT/AVH/v/jz4m1GrvXI24+nK9UH4dD/AAAAUKBM/x8Y9f9LUzdvNGN0101WSFeqD8Oh/wEAAKBAmf7vGPX/yC6/zV51vQGdh6Yr1Ufh0P8AAABQoEz/HxT1/8uLTP2r/dxOLy6RrlQfh0P/AwAAQIEy/X9w1P+jRq6z9kuD5n6/ZrpSfRIO/Q8AAAAFyvT/IVH/j3541R2m79Z28ZHpSjU5HPofAAAACpTp/05R/49Z/vNPVzv0/p1bpyvVp+HQ/wAAAFCgTP8fGvX/Kydc0vrTq4+/66Z0pfosHPofAAAACpTp/8Oi/n/1ixHvbDr1jd+uSVeqz8Oh/wEAAKBAmf4/POr/1968/OeL2y65UrN0pfoiHPofAAAACpTp/yOi/h979u4rXPv6JcuNS1eqL8Oh/wEAAKBAmf7vHPX/uPeunrvCSi/+cmq6Uk0Jh/4HAACAAmX6/8io/18/ZZfVp3Rb8f5L05Xqq3DofwAAAChQpv+7RP3/xqUXbvP0g++2+yJdqb4Oh/4HAACAAmX6/6io/98c+9JHuw/vsHTHdKWaGg79DwAAAAXK9P/RUf+P7z3z9oVP7vPDL+lKNS0c+h8AAAAKlOn/Y6L+n7BZ88vmLN7k2W/Sleqfn+l/AAAAKFCm/4+N+v+tZiscde+kKYe1S1eqb8Oh/wEAAKBAmf4/Lur/t++Y9OL+rRu3/Dtdqb4Lh/4HAACAAmX6//io/yd2nj1qz58mv9E5Xam+D4f+BwAAgAJl+v+EqP/f+WazdZ/v2+2OfdKVano49D8AAAAUKNP/J0b9/+6sJaqfOg7v8X26Us0Ih/4HAACAAmX6/6So/9/bc/yXa+zXYssT0pXqh3DofwAAAChQpv9Pjvp/0nZnLPtxv+8+HJuuVD+GQ/8DAABAgTL9f0rU/+9fM/THDWftftXEdKWaGQ79DwAAAAXK9P+pUf9/0K/f+Ms26XXsOelK9VM46vT/gv/TTxkAAAD4L8r0/2lR/3/Y/KBN/tW283IHpyvVz+Hw+j8AAAAUKNP/p0f9/1HvAa+uMnXwL3PSleqXcOh/AAAAKFCm/7tG/f/xZvtvMPXq1vd/ma5Us8Kh/wEAAKBAmf4/I+r/T5qduujjh85qt0u6Uv0aDv0PAAAABcr0/5lR/0++45Gpu+525tJvpSvVb+HQ/wAAAFCgTP+fFfX/p38d1W/eoGE/nJ6uVL+HQ/8DAABAgTL9f3bU/5/tMeisxec2ePbidKWaHQ79DwAAAAXK9P85Uf9/3vHeAzqvN+qwj9OV6p/vBFixQYOG/83PGAAAAPivyvT/uVH/f/H9CU89NnqblselK9Uf4VixQYMvF/zf/pufOAAAAPD/Wqb/z4v6/8vp13z51Frz3hiVrlRzw+H9/wAAAFCgTP93i/p/yv47VTtddvAdH6Qr1Z/h0P8AAABQoEz/nx/1/1ftuq/b6J6be5yXrlTzwqH/AQAAoECZ/r8g6v+v/35h1LcjG275R7pSzQ+H/gcAAIACZfr/wqj/p/Zea5N1jhv34eHpSvVXOPQ/AAAAFCjT/xdF/T9ts4/Gv1M78ar26Ur1dzj0PwAAABQo0//do/7/ptlXP/b8YsixP6Ur1T/f9qf/AQAAoECZ/r846v9v72i27PlbtX9pRrpS++fQ/wAAAFCgTP9fEvX/d9t9M/WHGTcctVe6Ugu/o/8BAACgRJn+vzTq/++vabLo2tevs2SXdKVWhUP/AwAAQIEy/X9Z1P/T+zXeYJ9OX0+fn67U/vkAgP4HAACAAmX6v0fU/zOaf/rqs3tfdu9Z6Upt4XDofwAAAChQpv8vj/r/hyt33/SbASN3eTddqS0SDv0PAAAABcr0/xVR///Y9vIJK81efuVX05XaouHQ/wAAAFCgTP9fGfX/zI1G/LDzhhPnnJSu1BYLh/4HAACAAmX6/6qo/38acMkyT05o2fOzdKX2z+P1PwAAABQo0/9XR/3/80Fdznlo+enH90hXag3Dof8BAACgQJn+7xn1/y8zb73xsLPbbXZyulJbIhz6HwAAAAqU6f9rov6f9ec9Tyz9aM933khXakuGQ/8DAABAgTL93yvq/193Or7j34+veuvu6UptqXDofwAAAChQpv+vjfr/ty1ee2Hb0z++aGq6Uls6HPofAAAACpTp/+ui/v+9T4Mu45a6YONf05XaMuHQ/wAAAFCgTP/3jvp/9r+36XH7xGfGH5Cu1JYNh/4HAACAAmX6//qo/+c0mT/4zNe6vnR+ulJbLhz6HwAAAAqU6f8bov7/48odzv+98SNHTUpXasuHQ/8DAABAgTL9/6+o/+e2/ePmRbtXS45JV2orhEP/AwAAQIEy/d8n6v8/Nxr99IEPjJl+TLpS+6f79T8AAAAUKNP/faP+nzdg4U53P9/l3h/TlVqjcOh/AAAAKFCm/2+M+n/+73OarnbSnbt0SFdqK4VD/wMAAECBMv1/U9T/f3VoNWb6Yq1WPjRdqa0cjmz/L/b//ykDAAAA/0WZ/u8X9f/fRyz51UuTf57zZ7pSWyUcXv8HAACAAmX6v3/U/wumTGjQfrsle+6UrtRWDYf+BwAAgAJl+v/m/9n/tQYvn3Typl++cfxX6UpttXDofwAAAChQpv9vifp/oe539/708uM3+z1dqTUOh/4HAACAAmX6f0DU/9UZtz18bef73+mUrtRWD4f+BwAAgAJl+n9g1P+1SUfudfHObW+dnK7U1giH/gcAAIACZfr/1qj/F75rwQMvDZ570UXpSm3NcOh/AAAAKFCm/wdF/b9I463btf+r08ZnpCu1tcKh/wEAAKBAmf7/d9T/iy5TO2G1pgPGj09XamuHQ/8DAABAgTL9f1vU/4sNf7XX9IlTXm+SrvyPx+h/AAAAKFCm/2+P+n/xlRc7/aylmjS/Ml2pNQ2H/gcAAIACZfp/cNT/DR8Z1eeq0/tccku6UlsnHPofAAAACpTp/zui/l/i2XmPffh4h8FbpSu1dcOh/wEAAKBAmf6/M+r/Javt2zd79N1Jz6crtWbh0P8AAABQoEz/3xX1/1IdujY88ewV26yWrtTWC4f+BwAAgAJl+v/uqP+X/v3hGbcs/+Ixy6QrtfXDof8BAACgQJn+vyfq/2Wm3PTGqAmXXP5IulLbIBz6HwAAAAqU6f97o/5f9ohOzTffsNesldOVWvNw6H8AAAAoUKb/74v6f7lB3Q7acPbuKw5PV2otwqH/AQAAoECZ/r8/6v/l133qmY8HfLfHvelKbcNw6H8AAAAoUKb/H4j6f4Wtrhv4r71bPLBQulJrGQ79DwAAAAXK9P+QqP9X/FeHbpd1Gv7Tv6KHLxz+3Sj8q/8BAACgQJn+Hxr1f6O5P/77+eu7LbNpulLbOBz6HwAAAAqU6f8Ho/5fadeWF+45Y/LhbdOV2ibh0P8AAABQoEz/PxT1/8qdlj9sja0aP//vdKX2z3sC9D8AAAAUKNP/D0f9v8qPHz7/U9NRr7+YrtQ2C4f+BwAAgAJl+v+RqP9X7bDS/t3+atB87XSl1ioc+h8AAAAKlOn/R6P+X+339568ZvCwSxZPV2qbh0P/AwAAQIEy/T8s6v/GU77v/+7OZw5+KF2ptQ6H/gcAAIACZfr/saj/Vz9i07Obdp41af10pbZFOPQ/AAAAFCjT/49H/b9G208XG3R56zZXpyu1NuHQ/wAAAFCgTP8/EfX/mlc2nnbql4OP6Z+u1LYMh/4HAACAAmX6/8mo/9ca0OSVHbbrfHmrdKW2VTj0PwAAABQo0/9PRf2/9kbfrD9h8pBZ16crtbbh0P8AAABQoEz/D4/6v8mmi3R7Z7ETV2yRrtS2Dof+BwAAgAJl+v/pqP+b3jJm4Donjdtjh3Sltk049D8AAAAUKNP/z0T9v84Vc585//mGD9yertS2DYf+BwAAgAJl+v8/Uf+vu+2OB/V84OaflktXatuFQ/8DAABAgTL9/2zU/806DH5+p+4HL/NkulLbPhz6HwAAAAqU6f/nov5f7/cjDnuq8bzD709Xav/8nwD6HwAAAAqU6f8RUf+vP+WYC799bZvnF0tXajuGQ/8DAABAgTL9/3zU/xscMeTfjf6au8EN6Uptp3DofwAAAChQpv9fiPq/+dwTzu7TtO1rm6QrtZ3Dof8BAACgQJn+fzHq/xa73tv/0p0H9Ns6XantEg79DwAAAAXK9P9LUf9v2GnQky0Gdzr3tnSltms49D8AAAAUKNP/I6P+b/njUft/cvkb26ySrtTahUP/AwAAQIEy/f9y1P8b/bXX2ad3XnLy0+lKbbdw6H8AAAAoUKb/R0X9v/Eeffvfud39fe9JV2q7h0P/AwAAQIEy/T866v9NOj795JtfHn9GnZXaHuHQ/wAAAFCgTP+Pifp/0+/P3b/tYneuMSJdqe0ZDv0PAAAABcr0/ytR/2/W8oCNmkzu8teq6Uptr3DofwAAAChQpv9fjfq/1U0D33rv+Z8fXDZdqe0dDv0PAAAABcr0/2tR/2/e89Gfep3Uas9H05XaPuHQ/wAAAFCgTP+Pjfq/9Y6nLX1e90cWapqu1PYNh/4HAACAAmX6f1zU/1vs8/pXTzzQ9cur0pVa+3DofwAAAChQpv9fj/q/zS/LNtjltTHDb05XavuFQ/8DAABAgTL9/0bU/1tOa9N05cbVwVumK7UO4dD/AAAAUKBM/78Z9f9WR/06ZtpSH2+wfLpS2z8c+h8AAAAKlOn/8VH/t/2rVfMeE1d97al0pXZAOPQ/AAAAFCjT/xOi/t96jzlv3PD4M/3uS1dqB4ZD/wMAAECBMv3/VtT/23ScMOOj0y84d9F0pdYxHPofAAAACpTp/7ej/t/2+yUbtjx7+ja905XaQeHQ/wAAAFCgTP9PjPp/u95/9Oj/aMvJzdOV2sHh0P8AAABQoEz/vxP1//ab7TD46Ak9++6YrtQOCYf+BwAAgAJl+v/dqP93aLbwC1ss3+6MwelKrVM49D8AAAAUKNP/70X9v+Mdo7uMnT1yjQ3Sldqh4dD/AAAAUKBM/0+K+n+nV989uN+Gl/3VM12pHRYO/Q8AAAAFyvT/+1H/79yj0X+O2Xvig/3Sldrh4dD/AAAAUKBM/38Q9f8up20yoM2A5ffcLF2pHREO/Q8AAAAFyvT/h1H/7/rOd+e9dv0NC72QrtQ6h0P/AwAAQIEy/f9R1P/t7t/7tlqn9l+ula7UjgyH/gcAAIACZfr/46j/d1v7hot+3urr4Q3TlVqXcOh/AAAAKFCm/z+J+n/3JZ859L4Z6xz8cLpSOyoc+h8AAAAKlOn/yVH/7/HEWSM6NT54/z3SldrR4dD/AAAAUKBM/38a9f+eKz55wITXbn5iWrpSOyYc+h8AAAAKlOn/z6L+3+vB857a4YFtps1KV2rHhkP/AwAAQIEy/f951P97v7hfv1O7z1t4/3Sldlw49D8AAAAUKNP/X0T9v89i15416KQT23+artSOD4f+BwAAgAJl+v/LqP/33fujLSY/P+SRy9KV2gnh0P8AAABQoEz/T4n6v/3Pa33QfHLDP05JV2onhkP/AwAAQIEy/f9V1P/7TW0255LFxq32ZrpSOykc+h8AAAAKlOn/r6P+79Dlq5X6ftn6tLPTldrJ4dD/AAAAUKBM/0+N+n//218+ZeB2s3q/l67U/vlMgP4HAACAAmX6f1rU/wesv+j1x3fu/Pkr6Urt1HDofwAAAChQpv+/ifr/wM23e2izywfveGK6UjstHPofAAAACpTp/2+j/u947Z97jhnc4Pzp6Urt9HDofwAAAChQpv+/i/r/oPmHDll051ED90xXal3Dof8BAACgQJn+/z7q/4N3v2O335ueOeaodKV2Rjj0PwAAABQo0//To/4/5MD7jr/7r2Hr/JWu1M4Mh/4HAACAAmX6f0bU/52+O/aaA2d02/+TdKV2Vjj0PwAAABQo0/8/RP1/6N53dR231fAnLkxXameHQ/8DAABAgTL9/2PU/4f9fGLfbTs1nnZmulI7Jxz6HwAAAAqU6f+ZUf8fPrXzsDOvn7zwhHSldm449D8AAAAUKNP/P0X9f0SXf+97+4Dd2++crtTOC4f+BwAAgAJl+v/nqP87b3/KNs327vXI1+lKrVs49D8AAAAUKNP/v0T9f2Svxz76cMMWf/yWrtTOD4f+BwAAgAJl+n9W1P9d+t8y96rZ3612SLpSuyAc+h8AAAAKlOn/X6P+P6pFx9XPWn7F035IV2r/fCeg/gcAAIACZfr/t6j/j97w8T1Pn/Bu7/3SldpF4dD/AAAAUKBM//8e9f8xN57/0J2PXvL5YelKrXs49D8AAAAUKNP/s6P+P/bqfa9/8+wXd5yXrtQuDof+BwAAgAJl+n9O1P/H7dD7lLanNzn/gnSldkk49D8AAAAUKNP/f0T9f/zeza/56/EpA99PV2qXhkP/AwAAQIEy/T836v8Tfp55/DITO4wZna7ULguH/gcAAIACZfr/z6j/T5w6abfDl+qzztHpSq1HOPQ/AAAAFCjT//Oi/j+pywpDHhwy7s9J6Urt8nDofwAAAChQpv/nR/1/8vyJ+7a+uOHq56crtSvCof8BAACgQJn+/yvq/1N2X3nYy6sP6XBMulK7Mhz6HwAAAAqU6f+/o/4/9cCN+t489sRhY9KV2lXh0P8AAABQoEz/L4j6/7Tvpnc96ZN533ZIV2pXh0P/AwAAQIH+9/1fNYj6//Shsw8/YtFtFv0xXan1DIf+BwAAgAJl+n+hqP+7rrDZs0NPvPnAP9OV2jXh0P8AAABQoEz/V1H/n7HoEoPmjzj4qUPTlVqvcOh/AAAAKFCm/2tR/5/5wviLlz1y2Kiv0pXateHQ/wAAAFCgTP8vHPX/WZfNXGyVK85sslO6UrsuHPofAAAACpTp/0Wi/j/7lebTpk4ZdV6ndKXWOxz6HwAAAAqU6f9Fo/4/Z+IKrzy+fYNbfk9XateHQ/8DAABAgTL9v1jU/+eeOmn9XZsM/vSidKV2Qzj0PwAAABQo0/+LR/1/3lrnv37N/M7bT05Xav8Kh/4HAACAAmX6v2HU/93ue7xlt9tnnTI+Xan1CYf+BwAAgAJl+n+JqP/Pf7z3Ek13an3tGelKrW849D8AAAAUKNP/S0b9f8ES+3737iHf/blXulK7MRz6HwAAAAqU6f+lov6/cGif2p69W6w+I12p3RQO/Q8AAAAFyvT/0lH/X7TCnlOen96rw/x0pdYvHPofAAAACpTp/2Wi/u++6Dkv/7Tl7sO6pCu1/uHQ/wAAAFCgTP8vG/X/xS8MX2eNlpO/fTddqd0cDv0PAAAABcr0/3JR/1/yxR4H3Ten8aJnpSu1W8Kh/wEAAKBAmf5fPur/S0+44plOA4cfeFK6UhsQDv0PAAAABcr0/wpR/1929vMDa/t0e+rVdKU2MBz6HwAAAAqU6f8Vo/7v8eal3X5+pM+oHulK7dZw6H8AAAAoUKb/G0X9f3nT69/a6qwOTT5LV2qDwqH/AQAAoECZ/l8p6v8rbmu/0f/F3p1HXz3+fd+n/dkRhShDyJwxmTOERKZMGcv8K1MyRUiIjMmUjClDIpEhM5HMGTJG5jKUIYQQId3ruq+j6zyudZz3eazfue5zreOPx+Of3r6r/Vr73+f3k71fWOLz3q+mK7Ubw6H/AQAAoECZ/l866v/zrjy9yaCJK197TLpSGxoO/Q8AAAAFyvT/MlH/n7/pAz92f3vcJ9PSldqwcOh/AAAAKFCm/5eN+v+C7ZZaYGSTs7beMV2p3RQO/Q8AAAAFyvT/clH/X/jXe1/sd/w7PTqnK7Wbw6H/AQAAoECZ/m8R9f9FP/74/IIPLDXgl3Sldks49D8AAAAUKNP/y0f9f/F+a68yq/0Rl6+UrtRuDYf+BwAAgAJl+n+FqP8H/P7dq8cMu+O4celKbXg49D8AAAAUKNP/K0b9f8nurdca+veim9+drtRuC4f+BwAAgAJl+r9l1P8Duy7T6M2VX/1w4XSlNiIc+h8AAAAKlOn/laL+v/TLt79rt/UBgy5IV2q3h0P/AwAAQIEy/b9y1P+X3df//n6fX9erVbpSuyMc+h8AAAAKlOn/VaL+v7zZTrtf3n/zNTZMV2ojw6H/AQAAoECZ/l816v8rFjj7uA8PmfPC1elK7c5w6H8AAAAoUKb/V4v6/8qxT16xztgGj66drtRGhUP/AwAAQIEy/b961P+D+gyZtdFRzx9wabpSuysc+h8AAAAKlOn/NaL+v+q5w5Z4tuHxtWHpSu3ucOh/AAAAKFCm/1tF/T948pEbXvvRPV9sk67URodD/wMAAECBMv2/ZtT/Vx83YtJREzYc/WC6UrsnHPofAAAACpTp/7Wi/r9m2QXbjVj+p12XSFdq94ZD/wMAAECBMv2/dtT/1942YcpeZx7acqF0pXZfOPQ/AAAAFCjT/+tE/X/do3PnVXfeMu+OdKV2fzj0PwAAABQo0//rRv1/feOtVvz9gR0uPy9dqY0Jh/4HAACAAmX6f72o/2+4b87s44+/8LiV05XaA+HQ/wAAAFCgTP+3jvp/SLNtm93cZN3N26YrtfnfCaD/AQAAoECZ/l8/6v8bF6hv+urbMz68Nl2pPRQO/Q8AAAAFyvR/m6j/h459/v0tJp4+aLl0pfZwOPQ/AAAAFCjT/xtE/T/sww2G91/i0V5Ppiu1R8Kh/wEAAKBAmf7fMOr/m7rP3v7kk5Zd4550pfZoOPQ/AAAAFCjT/xtF/X/z6RO7tbrnwxcWS1dqj4VD/wMAAECBMv2/8YLV/+n/W15f5Nz3Oq366MPpSu3xcOh/AAAAKFCm/zeJnv/f+sa3k165/ssDlk5Xak+EQ/8DAABAgTL9v2nU/8N7t9lwy993ry2YrtTGhkP/AwAAQIEy/b9Z1P+3Hd58iRPWveyLEelKbf53Auh/AAAAKFCm/9tG/T/io0mzbtqs6eg26UrtqXDofwAAAChQpv83j/r/9vt6rdhlxlu7Xp6u1MaFQ/8DAABAgTL9v0XU/3c0e2ze6IH9Wt6YrtSeDof+BwAAgAJl+n/LqP9HLnD5lHn7j5+3ebpSGx8O/Q8AAAAFyvT/VlH/3zm2U7vGx5/V/aF0pfZMOPQ/AAAAFCjT/+2i/h+17CXvX/fAuPOapiu1Z8Oh/wEAAKBAmf7fOur/u27bc9Mj315qcsN0pfZcOPQ/AAAAFCjT/9tE/X/3o6c227DJO21vT1dqz4dD/wMAAECBMv2/bdT/oxs/NPu5Jfbst1a6UnshHPofAAAACpTp//ZR/9+zwh3v9554xS0D05Xai+HQ/wAAAFCgTP9vF/X/vSO7b3rxPSu/dlO6UnspHPofAAAACpTp/w5R/9/3YNdmk076fJ1t05XahHDofwAAAChQpv+3j/r//oVvmb3y9S26XJiu1F4Oh/4HAACAAmX6f4eo/8e8Om7g5p0+fmLNdKX2Sjj0PwAAABQo0/8do/5/4KQzj3lt3VN/2CBdqb0aDv0PAAAABcr0/45R/z94xHa73PL7w40Hpyu118Kh/wEAAKBAmf7fKer/h6ZcPPq4GWt3bJmu1CaGQ/8DAABAgTL9v3PU/w/fvcYOd232ze1PpSu118Oh/wEAAKBAmf7fJer/R5b4cuSB++/40+h0pfZGOPQ/AAAAFCjT/7tG/f9o9eHFiw28uGmjdKX2Zjj0PwAAABQo0/+dov5/7OmVjpw77ODu66crtbfCof8BAACgQJn+3y3q/8dX+PSKo9vfdN5l6Urt7XDofwAAAChQpv93j/r/iZHLH3fNyhtPHpqu1N4Jh/4HAACAAmX6f4+o/8c+uMruz/w9q+0W6UptUjj0PwAAABQo0/97Rv3/5MJf37/x5yf2eyRdqb0bDv0PAAAABcr0/15R/z/Vs9mHl2593y3LpCu198Kh/wEAAKBAmf7vHPX/uLff2arPIQu89p+s1CaHQ/8DAABAgTL9v3fU/0+/+E2L9fo/u85t6Urt/XDofwAAAChQpv/3ifp//Dnr/zH1qC27LJuu1D4Ih/4HAACAAmX6f9+o/59ZfZtfBo7964mx6Urtw3DofwAAAChQpv/3i/r/2Zv/aHrGR/v9cG+6UvsoHPofAAAACpTp//2j/n9u4HMbtG54TePF05Xax+HQ/wAAAFCgTP8fEPX/8xtU70xZvlHH89OV2ifh0P8AAABQoEz/d4n6/4UdRm69/ISXb18lXal9Gg79DwAAAAXK9H/XqP9f/Ofwqd/cedRPm6UrtSnh0P8AAABQoEz/Hxj1/0szDvznqTPvbHpNulKbGg79DwAAAAXK9P9BUf9P2GvYCnsOfKtZn3Sl9lk49D8AAAAUKNP/B0f9//KsQ39/b/+mv32UrtQ+D4f+BwAAgAJl+v+QqP9f2fmG5q02Gz/89XSl9kU49D8AAAAUKNP/h0b9/+rBt21y8ox+7U9MV2pfhkP/AwAAQIEy/X9Y1P+vfXXE5P6/f9noy3SlNi0c+h8AAAAKlOn/w6P+nzh6k8HPr7vqN9ulK7Xp4dD/AAAAUKBM//8r6v/Xm846aYNOlz21f7pS+yoc+h8AAAAK9F/0f8MFFmjQLer/N+ovdz7i+t0P+TVdqX0dDv0PAAAABco8/+8e9f+b4xd76PqTHm2zR7pS+yYc+h8AAAAKlOn/I6L+f+vs9d688p7T3/g+Xal9Gw79DwAAAAXK9P+RUf+/PWFG67MmfnjjX+lKbUY49D8AAAAUKNP/R0X9/86ktxqvtcSyZ3ZNV2rfhUP/AwAAQIEy/X901P+Teiw98+MmF270XrpSm///BOh/AAAAKFCm/4+J+v/dFR9esOXbO0w6PV2p/RAO/Q8AAAAFyvR/j6j/37vz5C9/eGDGxYenK7WZ4dD/AAAAUKBM/x8b9f/kh3Z+7onj1z3quXSl9mM49D8AAAAUKNP/PaP+f7/RFSvveuZPzaanK7WfwqH/AQAAoECZ/j8u6v8PRu/22lt3bvjbTulK7edw6H8AAAAoUKb/j4/6/8OmA9debcItw/dKV2qzwqH/AQAAoECZ/j8h6v+P6mMWPn35Q9vPSldqv4RD/wMAAECBMv1/YtT/H48/bcYFDZ9v1C9dqf0aDv0PAAAABcr0/0lR/3/yyYXD2n3U4JtP0pXab+HQ/wAAAFCgTP/3ivr/06O27/fm2Hueei1dqc0Oh/4HAACAAmX6/+So/6ecfMZhQ486/pAe6Urt93DofwAAAChQpv9Pifp/6svjxx3T/7o2k9KV2h/h0P8AAABQoEz/9476/7PXDp7Z+5AD3uiVrtTmhEP/AwAAQIEy/X9q1P+f97qx8cVbz7nxqHSl9mc49D8AAAAUKNP/p0X9/8WRt7ae9PnmZ76QrtT+Cof+BwAAgAJl+v/0qP+/nHrUmyv/fcdGO6crtb/Dof8BAACgQJn+7xP1/7TRL6w8feUjJs1IV2pzw/H/1f9n9///8T0DAAAA/55M/58R9f/0pg2eW7r9qxfPTVdq/4TD838AAAAoUKb/+0b9/1V98y87DFv0qMPSldq8cPzv/p/3P/qWAQAAgH9Tpv/PjPr/6/H/LPjAH9PfXyRdqeYfnv8DAABAgTL9f1bU/9+s2G7GuquvvtmodKUKf0f/AwAAQIky/X921P/f3vnnwh/sMLDb+HSlahAO/Q8AAAAFyvR/v6j/Zzz0zNqX3dDp/BXTlaoWDv0PAAAABcr0/zlR/3/XqOFr51w4+dWr0pVq/gcA6H8AAAAoUKb/z436//sRw1ZZpesy626crlT1cOh/AAAAKFCm//tH/f/Dcgc+/84WT5yzerpSNQyH/gcAAIACZfr/vKj/ZzY5/IuLpve5+aJ0pVooHPofAAAACpTp//Oj/v/xsZELnNrg/O/bpSvV/NfrfwAAAChQpv8viPr/p1MvOOv4KR2a3JyuVI3Cof8BAACgQJn+vzDq/5/f7HDzzU9/3/WSdKVaJBz6HwAAAAqU6f+Lov6f9XGf8a92a/34uulKtWg49D8AAAAUKNP/F0f9/8u/nj5ki3PG/HxnulI1Dof+BwAAgAJl+n9A1P+/Nl/hwb9H9Fqinq5UTcKh/wEAAKBAmf6/5D/6/49593+01+LPT91hyXSlWiwc+h8AAAAKlOn/gdHz/9lPftbroJVa3jEmXakWD4f+BwAAgAJl+v/SqP9/X7DV1aMavfj+9elKtUQ49D8AAAAUKNP/l0X9/8eIaX02eq/abNN0pWoaDv0PAAAABcr0/+VR/89ZbtUbn33k7m6rpivV/M8E0P8AAABQoEz/XxH1/59Nln3y2h49zz83Xanmd7/+BwAAgAJl+v/KqP//emxK16N6z361cbpSNQuH/gcAAIACZfp/UNT/f7/bus2UUW3XvS9dqZqHQ/8DAABAgTL9f1XU/3NP+O711i8POeeJdKVaOhz6HwAAAAqU6f/BUf//0/ft789o1uXm5dOVaplw6H8AAAAoUKb/r476f94zyyw28JcR3w9PV6plw6H/AQAAoECZ/r/mP/q/WqDttAt/a9OtSS1dqZYLh/4HAACAAmX6/9qo/xe8fNWjG+45sWuzdKVqEQ79DwAAAAXK9P91Uf83GLLsjntf3eTxR9OVav5nAuh/AAAAKFCm/6+P+r+22pTbh18x6Oct05VqhXDofwAAAChQpv9viPq/OuCsTkfs3XmJG9KVasVw6H8AAAAoUKb/h0T9X/9h7F3XbzRvhyvTlaplOPQ/AAAAFCjT/zdG/d9wzrkDnp+5zR2t05VqpXDofwAAAChQpv+HRv2/0PY7HrvBSrvc+my6Us1/jf4HAACAAmX6f1jU/wt/fkH/u58fsF33dKVaJRz6HwAAAAqU6f+bov5vdFCH7l1HtGreO12pVg2H/gcAAIACZfr/5qj/F9mzT4cm53z96+R0pVotHPofAAAACpTp/1ui/l/0t6dv/adb33EHpivV6uHQ/wAAAFCgTP/fGvV/48dnTnvq6ScP/iNdqdYIh/4HAACAAmX6f3jU/00arNVwzynNF/4xXalahUP/AwAAQIEy/X9b1P+LLb3kmss3ePfb3dOVas1w6H8AAAAoUKb/R0T9v/g97774zfQ2Q39PV6q1wqH/AQAAoECZ/r896v8lTpj9xE9bzOy7X7pSrR0O/Q8AAAAFyvT/HVH/N313g4NqXduv3yFdqdYJh/4HAACAAmX6f2TU/0s+s0jfAy7s/+Zn6Uq1bjj0PwAAABQo0/93Rv2/VN+JN9x+wwoXHZeuVOuFQ/8DAABAgTL9Pyrq/2aLnXD6v3b49Og30pWqdTj0PwAAABQo0/93Rf3f/OFR1w5e/ZSNP0xXqvXDof8BAACgQJn+vzvq/6VvHfzwS388+M6Z6UrVJhz6HwAAAAqU6f/RUf8v02Lf/Ted2ePWg9OVaoNw6H8AAAAoUKb/74n6f9nHrxt3/0ajtvsnXak2DIf+BwAAgAJl+v/eqP+Xa7DXYQfv3bD5t+lKtVE49D8AAAAUKNP/90X932LpY/stfMWEXzulK9XG4dD/AAAAUKBM/98f9f/y99wz7K+rDxw3IV2pNgmH/gcAAIACZfp/TNT/K7x52Izt9xx68JHpSrVpOPQ/AAAAFCjT/w9E/b/iqUMWHtNm04VPTleqzcKh/wEAAKBAmf5/MOr/lv8asfa0X3799q10pWobDv0PAAAABcr0/0NR/6/08ZGvLdNs8aHHpivV5uHQ/wAAAFCgTP8/HPX/yh9cdMOiL7/R9+V0pdoiHPofAAAACpTp/0ei/l+lW/u+f4w6fP2p6Uq1ZTj0PwAAABQo0/+PRv2/6ml9D7qn9/A3z05Xqq3Cof8BAACgQJn+fyzq/9UmPvXEYT3aXfRzulK1C4f+BwAAgAJl+v/xqP9Xf7zl/jc+MvfofdKVautw6H8AAAAoUKb/n4j6f40GHzzc4719Nt4hXam2CYf+BwAAgAJl+n9s1P+tlv7i2q0bDX7nq3Sl2jYc+h8AAAAKlOn/J6P+X/Oe1U9/Y6POexyfrlTtw6H/AQAAoECZ/n8q6v+1Fvtq2L4zB93/ZrpSbRcO/Q8AAAAFyvT/uKj/13545X53XrHNXx+kK1WHcOh/AAAAKFCm/5+O+n+dW1sc9sve81r0TVeq7cOh/wEAAKBAmf4fH/X/ui0+GbfAnt32mZ2uVPO/E0D/AwAAQIEy/f9M1P/rLfLqsEevHvHgvulK1TEc+h8AAAAKlOn/Z6P+bz2mcb+OvzT5avt0pdoxHPofAAAACpTp/+ei/l//9s0Oa9pm4kKfpyvVTuHQ/wAAAFCgTP8/H/V/m5Y/jfvi5banHpSuVDuHQ/8DAABAgTL9/0LU/xt88s6zfzabfc2cdKXaJRz6HwAAAAqU6f8Xo/7f8KhmqzXq3eWZmelKtWs49D8AAAAUKNP/L0X9v9HJ6zc4ZNSQVXZLV6pO4dD/AAAAUKBM/0+I+n/jl7/57L5HqmOeSVeq+b8T0P8AAABQoEz/vxz1/yZP7bp4zx4vXtItXal2D4f+BwAAgAJl+v+VqP83bXjZDzc06vnpqelKtUc49D8AAAAUKNP/r0b9v9mSj06c+N7d7d5PV6o9w6H/AQAAoECZ/n8t6v+2o05af9vne+3xU7pS7RUO/Q8AAAAFyvT/xKj/N1/kwRfvWGnM/XunK1XncOh/AAAAKFCm/1+P+n+LMb3X3P+cln91TFeq+b8T0P8AAABQoEz/vxH1/5a379GwwYipLb5OV6p9wqH/AQAAoECZ/n8z6v+tWg6Y9vPTHfbpma5U+4ZD/wMAAECBMv3/VtT/7c4+c/Au3c5/8JV0pdovHPofAAAACpTp/7ej/t96wriTxjZo/dWUdKXaPxz6HwAAAAqU6f93ov7fZtLFnWdO+X6hs9KV6oBw6H8AAAAoUKb/J0X9v22P7R5acYtlTn0pXam6hEP/AwAAQIEy/f9u1P/tN+r8+M7TJ19zRLpSdQ2H/gcAAIACZfr/vaj/txtw/YFPXtjnmVPSlerAcOh/AAAAKFCm/ydH/d9h2L1n/tj1iVXeTleqg8Kh/wEAAKBAmf5/P+r/7Vv1HLLCDqsfc0i6Uh0cDv0PAAAABcr0/wdR/++w9yunfXjD9EvmpSvV/N8J6H8AAAAoUKb/P4z6v+M3i1+zzh+dPv0mXakODYf+BwAAgAJl+v+jqP93/HvTR/qtPrDdrulKdVg49D8AAAAUKNP/H0f9v9OOvxxw+XtztxiZrlSHh0P/AwAAQIEy/f9J1P87T9vwqWUatfugSleqf4VD/wMAAECBMv3/adT/uxz6+6HTegy+7D9p/KpbOPQ/AAAAFCjT/1Oi/t9119fPGfPIPsc/kK5U3cOh/wEAAKBAmf6fGvV/p58WvWn7UW+svnW6Uh0RDv0PAAAABcr0/2dR/+827qAPF+y9+Iu3pCvVkeHQ/wAAAFCgTP9/HvX/7gvdtNWsZsOvGpCuVEeFQ/8DAABAgTL9/0XU/3ssdWeLkS8fftI66Up1dDj0PwAAABQo0/9fRv2/513/+mO/NkMbDEpXqmPCof8BAACgQJn+nxb1/149t79g918O/HKjdKXqEQ79DwAAAAXK9P/0qP87v33hUU9f/etja6Qr1bHh0P8AAABQoEz/fxX1/94vjt9pxp6b7n9xulL1DIf+BwAAgAJl+v/rqP/3OeeMO5bbe9RKi6Yr1XHh0P8AAABQoEz/fxP1/76LfrzrJ1f0+OeudKU6Phz6HwAAAAqU6f9vo/7f74EVR7WZOeHup9OV6oRw6H8AAAAoUKb/Z0T9v/8da15y5kYNO62QrlQnhkP/AwAAQIEy/f9d1P8HrPR5zwGrf7rFVulKdVI49D8AAAAUKNP/30f932Xcaucu+ccKHwxJV6pe4dD/AAAAUKBM//8Q9X/XhaZ3+/yGBy+7Il2pTg6H/gcAAIACZfp/ZtT/By41dftHdjjl+PXSleqUcOh/AAAAKFCm/3+M+v+gu5YbvmPXmavfmq5UvcOh/wEAAKBAmf7/Ker/g1+d8f4/F7Z5sUG6Up0aDv0PAAAABcr0/89R/x9y0nqbNpne/6rm6Up1Wjj0PwAAABQo0/+zov4/9Iilm3Xdov1Jj6Ur1enh0P8AAABQoEz//xL1/2FT3pp995QnGzRJV6o+4dD/AAAAUKBM//8a9f/hn258x6MN+n55f7pSnREO/Q8AAAAFyvT/b1H//+vo33bq2O3dxx5PV6q+4dD/AAAAUKBM/8+O+r/bKW8e1fTp5vu3SFeqM8Oh/wEAAKBAmf7/Per/7q80uuCLEQNWui5dqc4Kh/4HAACAAmX6/4+o/48YN7rnmufs8s8m6Up1djj0PwAAABQo0/9zov4/cqHjL3l3pa/vXi1dqfqFQ/8DAABAgTL9/2fU/0ctdcCoc59v1al/ulKdEw79DwAAAAXK9P9fUf8ffddVu55yzOFXb5quVOeGQ/8DAABAgTL9/3fU/8csus/wbx8efvL16Uo1/98E6H8AAAAoUKb/50b93+OBa7dv8e7irc5NV6rzwqH/AQAAoECZ/v8n6v9j77i/2x4LvzFh1XSlOj8c+h8AAAAKlOn/eVH/91ypx7njmu9zxX3pSnVBOPQ/AAAAFOi/7v/aAlH/H3fg8E8avDL4xMbpSnVhOPQ/AAAAFCjT/wtG/X/8Z0dv8/Nd7bZaPl2pLgqH/gcAAIACZfq/QdT/J/x6yEp3nDr3oyfSlericOh/AAAAKFCm/2tR/5+4x9C5+w9uOKqWrlQDwqH/AQAAoECZ/q+i/j/psif677HHhF2GpyvVJeHQ/wAAAFCgTP/Xo/7vtdk53cet32PFR9OVamA49D8AAAAUKNP/DaP+P3nVjh2+nTXq72bpSnVpOPQ/AAAAFCjT/wtF/X/KDeff2uLHTR+5IV2pLguH/gcAAIACZfp/4aj/e3+/yp5TN/513y3TlerycOh/AAAAKFCm/xtF/X/q/l/fu94+By7QOl2prgiH/gcAAIACZfp/kaj/T+vw6WV9rhz6+ZXpSjX/Z/ofAAAACpTp/0Wj/j/9j+VPuHRI+6tHpSvVoHDofwAAAChQpv8bR/3f58APL2zasf/Ji6Qr1VXh0P8AAABQoEz/N4n6/4zPVjr6izXatFoxXakGh0P/AwAAQIEy/b9Y1P99f11jx0fnzJwwPl2prg6H/gcAAIACZfp/8aj/z9zjy9s7Tjvlio3TleqacOh/AAAAKFCm/5eI+v+s1ku8M3fzB0+8Kl2prg2H/gcAAIACZfq/adT/Z18/eYPFuqyw1UXpSnVdOPQ/AAAAFCjT/0tG/d/v/O+bHnjBpx+tnq5U14dD/wMAAECBMv2/VNT/52yxzi93dW816uZ0pbohHPofAAAACpTp/2ZR/5876ZOdTxj/9S7t0pVqSDj0PwAAABQo0//No/7v36PF3TdN3WXFddOV6sZw6H8AAAAoUKb/l476/7yzV770ldqAvy9JV6qh4dD/AAAAUKBM/y8T9f/5E77qsWXL5o/U05VqWDj0PwAAABQo0//LRv1/wUM7XDTvuXf3vTNdqW4Kh/4HAACAAmX6f7mo/y9sdN4RjW/ru8CYdKWa/50A+h8AAAAKlOn/FlH/X7Ti4x279Hvy8yXTleqWcOh/AAAAKFCm/5eP+v/iO/vdOfrKidP+SVeqW8Oh/wEAAKBAmf5fIer/AfWndttwnyb1g9OVang49D8AAAAUKNP/K0b9f8n4vvc9t/GIzp3Sleq2cOh/AAAAKFCm/1tG/T9wdPsrr/ux25hv05VqRDj0PwAAABQo0/8rRf1/adOLjj9y1rw5R6Yr1e3h0P8AAABQoEz/rxz1/2UHT157zfW3WXZCulLdEQ79DwAAAAXK9P8qUf9f/tUSr727x6Dd3kpXqpHh0P8AAABQoEz/rxr1/xWz1plx7uDO956crlR3hkP/AwAAQIEy/b9a1P9X7vz9wqecevfUl9OValQ49D8AAAAUKNP/q0f9P2jgG7173tVzm2PTlequcOh/AAAAKFCm/9eI+v+qDRa+7oZXXjz27HSlujsc+h8AAAAKlOn/VlH/D159o8cmNq8unZquVKPDof8BAACgQJn+XzPq/6tv/nW/bRce8tw+6Up1Tzj0PwAAABQo0/9rRf1/zYz9x/75bpfVfk5XqnvDof8BAACgQJn+Xzvq/2v3GtSl0cOzT/8qXanuC8f/6f+G/3NvGQAAAPg3Zfp/naj/r9vh7jMOOabtdTukK9X94fD8HwAAAAqU6f91o/6//p/jht7X7/tp3dOVakw49D8AAAAUKNP/60X9f8PB9520yW2t68+mK9UD4dD/AAAAUKBM/7eO+n/IV8cMnvDc+Z0npyvVg+HQ/wAAAFCgTP+vH/X/jbP2fujqlh3G9E5XqofCof8BAACgQJn+bxP1/9Cdr+l8eG3qnD/SlerhcOh/AAAAKFCm/zeI+n/Yukev+cHUlssemK5Uj4RD/wMAAECBMv2/YdT/N101/MV1x4/Zbfd0pXo0HPofAAAACpTp/42i/r/5wqHTzune694f05XqsXDofwAAAChQpv83jvr/lm0PaXjZBQOn7peuVI+HQ/8DAABAgTL9v0nU/7e2e3q/QV06bfN7ulI9EQ79DwAAAAXK9P+mUf8Pv6jPY903n37sZ+lKNTYc+h8AAAAKlOn/zaL+v21wh+vaTlv90g7pSvVkOPQ/AAAAFCjT/22j/h+x1gW9X5jzxHNvpCvVU+HQ/wAAAFCgTP9vHvX/7Qe3GrrgGn1WOy5dqcaFQ/8DAABAgTL9v0XU/3d89dkZszpOPv3MdKV6Ohz6HwAAAAqU6f8to/4fOeujLiOHLHPdh+lKNT4c+h8AAAAKlOn/raL+v3PnFcbud9u7i+ydrlTPhEP/AwAAQIEy/d8u6v9RM6Z0frNf8+9+SleqZ8Oh/wEAAKBAmf7fOur/u/Za9qF2LZ8c/3W6Uj0XDv0PAAAABcr0/zZR/9+9w6qDj3mu76Ed05Xq+XDofwAAAChQpv+3jfp/9D/TTho69etlXklXqhf+958L/U+/XQAAAOC/IdP/7aP+v2fmrM6ta61m90xXqhfD4fk/AAAAFCjT/9tF/X/vvps8NKX7gNvOSleql8Kh/wEAAKBAmf7vEPX/fe0XGzxw/C7bT0lXqgnh0P8AAABQoEz/bx/1//1/vnzSGV0e3PCIdKV6ORz6HwAAAAqU6f8dov4fs/mMxv+64JS3XkpXqvmfCaj/AQAAoECZ/u8Y9f8D5603c/C0Ty94O12pXg2H/gcAAIACZfp/x6j/H7xu6Tdf2nyFI09JV6rXwqH/AQAAoECZ/t8p6v+H1nur9aZr9F9vXrpSTQyH/gcAAIACZfp/56j/H+5y8nM/zWn/+iHpSvV6OPQ/AAAAFCjT/7tE/f/IFw+vXBsyc8iu6Ur1Rjj0PwAAABQo0/+7Rv3/6OwrFjygY5s+36Qr1Zvh0P8AAABQoEz/d4r6/7Hddv7y9n1+XeTNdKV6Kxz6HwAAAAqU6f/dov5/fObAhbe5ctPvjk9XqvnfCaj/AQAAoECZ/t896v8n9t1txus/Dh3fN12p3gmH/gcAAIACZfp/j6j/x7Y/7bUhGx946AfpSjUpHPofAAAACpTp/z2j/n/yzzFrH7v+hGX2TVeqd8Oh/wEAAKBAmf7fK+r/p4Zsf9g7sxrOnp2uVO+FQ/8DAABAgTL93znq/3GrXThulcGjbvs8Xakmh0P/AwAAQIEy/b931P9Ptx0/7NQ9emy/fbpSvR8O/Q8AAAAFyvT/PlH/j7/8jH4X3TV4wznpSjX/MwH1PwAAABQo0//7Rv3/zOQep046dZ+3DkpXqg/Dof8BAACgQJn+3y/q/2ePu//6lZvPvWC3dKX6KBz6HwAAAAqU6f/9o/5/rs+1j/Z+pd2RM9OV6uNw6H8AAAAoUKb/D4j6//nn9tn34neHr9ctXak+CYf+BwAAgAJl+r9L1P8vPPrzkx0WPvz1Z9KV6tNw6H8AAAAoUKb/u0b9/2Ljtl0fOOaNIe+nK9WUcOh/AAAAKFCm/w+M+v+lZZv0mf7w4n1OTVeqqeHQ/wAAAFCgTP8fFPX/hNteu3Hpjn3OHpKuVJ+FQ/8DAABAgTL9f3DU/y8v0KjXZUOeGLZVulJ9Hg79DwAAAAXK9P8hUf+/MvbNq8+Zs8zL66Ur1Rfh0P8AAABQoEz/Hxr1/6v3/fbgumtMXvuKdKX6Mhz6HwAAAAqU6f/D/nf///a/Gv+1Zhvv9cHmnQ5vkK5U08Kh/wEAAKBAmf4/PHr+P7Fr92Y3ThvY/9Z0pZoeDv0PAAAABcr0/7+i/n/9yztm97hg9fceS1eqr8Kh/wEAAKBAmf7vFvX/G7/f8v7WXaZv0jxdqb4Oh/4HAACAAmX6v3vU/2/u3nXTN8a33PH+dKX6Jhz6HwAAAAqU6f8jov5/68ozd5ncfeqdTdKV6ttw6H8AAAAoUKb/j4z6/+1Nx41eo9brlxbpSjUjHPofAAAACpTp/6Oi/n9nlYsH9po6ZsnH05Xqu3DofwAAAChQpv+Pjvp/0tDtjjnvudYHbZKuVN+HQ/8DAABAgTL9f0zU/+/++OXFO7X8fux16Ur1Qzj0PwAAABQo0/89ov5/b781jny4X4eZ/dOVamY49D8AAAAUKNP/x0b9P3m7lXb47LbzF18tXal+DIf+BwAAgAJl+r9n1P/v//XhyKUe7nJ2la5UP4VD/wMAAECBMv1/XNT/H3RdfvdLjhkybGS6Uv0cjn+z/8/577xlAAAA4N+U6f/jo/7/8MtP7++7cNuXH0hXqlnh8PwfAAAACpTp/xOi/v/o96+vWP/d2Wv/J41f/RIO/Q8AAAAFyvT/iVH/f7z7Ksd9+krPw29JV6pfw6H/AQAAoECZ/j8p6v9P1n+nxZHN7+6/dbpS/RYO/Q8AAAAFyvR/r6j/P72m2R/XnVq9t066Us0Oh/4HAACAAmX6/+So/6ecu/6Hz9314iYD0pXq93DofwAAAChQpv9Pifp/6pbfbLXhHtvsuFG6Uv0RDv0PAAAABcr0f++o/z/bYtFjWg+ed+egdKWaEw79DwAAAAXK9P+pUf9/fv7rA6fM6vzLxelK9Wc49D8AAAAUKNP/p0X9/8X1v48euP6gJddIV6q/wqH/AQAAoECZ/j896v8vW2+4yxkbNznornSl+jsc+h8AAAAKlOn/PlH/T+t69cinfpw4dtF0pZobDv0PAAAABcr0/xlR/0//cr8d9ryy28wV0pXqn3DofwAAAChQpv/7Rv3/1e8nHrn8PiMWfzpdqeaFQ/8DAABAgTL9f2bU/1/vftfF3zy5y6Sx6Up9/qH/AQAAoECZ/j8r6v9vfux53MlHD9ho2XSlHv6O/gcAAIASZfr/7Kj/v93v3iv6L9TqqMXTlXqDcPy7/b/wf+MtAwAAAP+mTP/3i/p/xnbX3//ex19ffG+6Uq+Fw/N/AAAAKFCm/8+J+v+7vzrv3uqlvm+skq7Uq3DofwAAAChQpv/Pjfr/+86v3dmnxZNtzk9X6vM/AFD/AwAAQIEy/d8/6v8fvmvS8dK+zc+8Jl2pNwyH/gcAAIACZfr/vKj/Z85re8TUke/euFm6Ul8oHPofAAAACpTp//Oj/v+x488Xrbddm28uS1fq81+v/wEAAKBAmf6/IOr/ny6e9OcmN81stH66Um8UDv0PAAAABcr0/4VR//+8dfNlJ8xtf8gW6Up9kXDofwAAAChQpv8vivp/1tpttrh6lf5PDU1X6ouGQ/8DAABAgTL9f3HU/79c/e3Hh7db4bdl0pV643DofwAAAChQpv8HRP3/69edNrnjs0+bPZKu1JuEQ/8DAABAgTL9f0nU/78dcvnk/c89pf1t6Up9sXDofwAAAChQpv8HRv0/e5fHfm9w8IPD/5OV+uLh0P8AAABQoEz/Xxr1/++/9Gr+8649Jq2ZrtSXCIf+BwAAgAJl+v+yqP//6PzQPz2vG7XRhelKvWk49D8AAAAUKNP/l0f9P+e7U1e4YXbDowanK/Ulw6H/AQAAoECZ/r8i6v8/5+259cR1Jly8QbpSn9/9+h8AAAAKlOn/K6P+/6vjJVO3bXvgG0+lK/Vm4dD/AAAAUKBM/w+K+v/vVn3vuvi7oW1apiv15uHQ/wAAAFCgTP9fFfX/3GFPdep96aZnNkpX6kuHQ/8DAABAgTL9Pzjq/38GXHTsygf8euPodKW+TDj0PwAAABQo0/9XR/0/b6P2AyaNWfybpulKfdlw6H8AAAAoUKb/r/mP/q8vsNSMzx447o1GD6Ur9eXCof8BAACgQJn+vzbq/wXvWq9Bh8aHH3J7ulJvEQ79DwAAAAXK9P91Uf83GLf0aku/NfyphulKfflw6H8AAAAoUKb/r4/6v7bQW89Of73dbwPTlfoK4dD/AAAAUKBM/98Q9X91ysnrr9x0brO10pX6iuHQ/wAAAFCgTP8Pifq//srDEyf12qf9tulKvWU49D8AAAAUKNP/N0b93/DTK364+N7Bw29KV+orhUP/AwAAQIEy/T806v+Fjt558d4HT7+9V7pSn/8a/Q8AAAAFyvT/sKj/F35x4LSZ567ecVK6Ul8lHPofAAAACpTp/5ui/m90zm4NV/xsYNMX0pX6quHQ/wAAAFCgTP/fHPX/Ij1PW3OXdp1+Oipdqa8WDv0PAAAABcr0/y1R/y/69pgXx64y+YkZ6Up99XDofwAAAChQpv9vjfq/8bDP+v8xd5kuO6cr9TXCof8BAACgQP/R/w3CT/6v/h8e9X+TVq26L3rTE40PS1fqrcKh/wEAAKBAmef/t0X9v9hGK3Q4bLs+P8xNV+prhkP/AwAAQIEy/T8i6v/FB3x06z0jz79lp3SlvlY49D8AAAAUKNP/t0f9v8Suf3zycN8O/aanK/W1w6H/AQAAoECZ/r8j6v+mP22zzU4tvl9nVrpSXycc+h8AAAAKlOn/kVH/LzmtWmmpl1q/tle6Ul83HPofAAAACpTp/zuj/l/q0OfmfvbxmPM+SVfq64VD/wMAAECBMv0/Kur/ZuscvuQaC/Xq3i9dqbcOh/4HAACAAmX6/66o/5sPGvnT5KOntu2RrtTXD4f+BwAAgAJl+v/uqP+XvmDY2+c92XLya+lKvU049D8AAAAUKNP/o6P+X2abAzfude+Lt3+frtQ3CIf+BwAAgAJl+v+eqP+XHXbDB9/1qjruka7UNwyH/gcAAIACZfr/3qj/l2t16JbLNr27add0pb5ROPQ/AAAAFCjT//dF/d9ioyOW3+31nj/9la7UNw6H/gcAAIACZfr//qj/lx9w25zxb81+4vR0pb5JOPQ/AAAAFCjT/2Oi/l/hu85XLtS4bZf30pX6puHQ/wAAAFCgTP8/EPX/ip2vP/7X44Y0fi5dqW8WDv0PAAAABcr0/4NR/7fseO9ut47p8sPh6Uq9bTj0PwAAABQo0/8PRf2/0rye9+1zwIhbPkpX6puHQ/8DAABAgTL9/3DU/yv/PWDunpd269cnXalvEQ79DwAAAAXK9P8jUf+vsuMeKz313cR1TkxX6luGQ/8DAABAgTL9/2jU/6vu3Xubb9o2ee31dKW+VTj0PwAAABQo0/+PRf2/2jcPfrL8OoPO2y5dqbcLh/4HAACAAmX6//Go/1cftsTGU2Z37v5lulLfOhz6HwAAAAqU6f8nov5fo9Xkt1tfN6/tr+lKfZtw6H8AAAAoUKb/x0b932qj7386Y9dtJu+frtS3DYf+BwAAgAJl+v/JqP/XHLDOkgN7zd3103Sl3j4c+h8AAAAKlOn/p6L+X2udb+YscW+70eekK/X5nwmo/wEAAKBAmf4fF/X/2oPWX/7L1wfPOyZdqXcIh/4HAACAAmX6/+mo/9e5oNmWjzXdp+Wr6Up9+3DofwAAAChQpv/HR/2/7jbvfLBD4zcO2DFdqe8QDv0PAAAABcr0/zNR/6+3/gtzZr21+KPT0pV6x3DofwAAAChQpv+fjfq/9TUNll9wzPAvfklX6vP/TYD+BwAAgAJl+v+5qP/XP3fzLfc77vBa53SlvlM49D8AAAAUKNP/z0f932bLfz4YeenQXt+lK/Wdw6H/AQAAoECZ/n8h6v8N/vjk9qcPOHDQLulKff7P9D8AAAAUKNP/L0b9v2GHFjvu3vbXFw5NV+q7hkP/AwAAQIEy/f9S1P8b7b/y0ct9t+kaf6cr9U7h0P8AAABQoEz/T4j6f+Pvv7pwxuxRx52UrtR3C4f+BwAAgAJl+v/lqP83uWGHY9us0+Pyd9KV+u7h0P8AAABQoEz/vxL1/6arnjfgk10nfPhiulLfIxz6HwAAAAqU6f9Xo/7fbLPH7xpwXcPNj05X6nuGQ/8DAABAgTL9/1rU/20v69fpzHM/3bV9ulLfKxz6HwAAAAqU6f+JUf9vvv5Tt35+8Aqjv0hX6p3Dof8BAACgQJn+fz3q/y2u6dthyXYPzvvtf/1X1/9rpb53OPQ/AAAAFCjT/29E/b/lue277/jZKS0PSFfq+4RD/wMAAECBMv3/ZtT/W215Uf9H5s484ON0pb5vOPQ/AAAAFCjT/29F/d+u66m/N1mlzaNnpCv1/cKh/wEAAKBAmf5/O+r/rb98qPk/2/X/4oR0pb5/OPQ/AAAAFCjT/+9E/b/N75dscvdN7WsT05X6/M8E0P8AAABQoEz/T4r6f9vd95zcte+TvU5LV+pdwqH/AQAAoECZ/n836v/2Sx/2aeORfQe9m67U538doP4HAACAAmX6/72o/7e7Z8i2815694Xn05X6geHQ/wAAAFCgTP9Pjvq/w+MjWo5u0XyNf6Ur9YPCof8BAACgQJn+fz/q/+0bHPl3l4UGHPdDulI/OBz6HwAAAAqU6f8Pov7f4bQJS9308S6X75mu1A8Jh/4HAACAAmX6/8Oo/ztOXPDnE578+sMu6Ur90HDofwAAAChQpv8/ivp/xw+2emvLo1tt/me6Uj8sHPofAAAACpTp/4+j/t+p29yNXrmu89ZLpyv1w8Oh/wEAAKBAmf7/JOr/nZ/Z9sN9dh30ycPpSn3+dwLofwAAAChQpv8/jfp/l75ztrp1nW0GjEhX6t3Cof8BAACgQJn+nxL1/64nPN/i19nzeiyYrtS7h0P/AwAAQIEy/T816v9O79b/WOi7bitfnq7UjwiH/gcAAIACZfr/s6j/dxuy31Md2454tk26Uj8yHPofAAAACpTp/8+j/t99tasPffSAJtdunq7UjwqH/gcAAIACZfr/i6j/92h71zlfXDqx943pSv3ocOh/AAAAKFCm/7+M+n/Py0+8qelxbRuunK7UjwmH/gcAAIACZfp/WtT/e+25++eNxsz++rx0pd4jHPofAAAACpTp/+lR/3f+7dLan291eejadKV+bDj0PwAAABQo0/9fRf2/9+cPrHpf4yF7t01X6j3/3z8W+h9/uwAAAMB/Q6b/v476f5+DTn/mkKbV8k+mK/XjwuH5PwAAABQo0//fRP2/b5v32tzw+ot/Lpeu1I8Ph/4HAACAAmX6/9uo//e7dqnXe97b877F0pX6CeHQ/wAAAFCgTP/PiPp///5rf79tr7v3vCddqZ8YDv0PAAAABcr0/3dR/x+w1Y+LTTy619aXpiv1k8Kh/wEAAKBAmf7/Pur/LkNaT9//yTGfrJ2u1HuFQ/8DAABAgTL9/0PU/11X+26hOz5uOWCbdKV+cjj0PwAAABQo0/8zo/4/sO3brX5eaGqPYelK/ZRw6H8AAAAoUKb/f4z6/6DLl3mhQYsOKy+RrtR7h0P/AwAAQIEy/f9T1P8Hz5z24NiXzn/2wXSlfmo49D8AAAAUKNP/P0f9f8i+q+61y8jW196RrtRPC4f+BwAAgAJl+n9W1P+Htl+214p9v+9dS1fqp4dD/wMAAECBMv3/S9T/h/055eqZNy3TcFy6Uu8TDv0PAAAABcr0/69R/x8+Z+tnZm03+euV0pX6GeHQ/wAAAFCgTP//FvX/v7b/a9UFV+nz0MLpSr1vOPQ/AAAAFCjT/7Oj/u92wLO1/eY+sffd6Ur9zHDofwAAAChQpv9/j/q/+w8LfT7ys9WXb5Wu1M8Kh/4HAACAAmX6/4+o/48Ycsdi3dtN//OCdKV+djj0PwAAABQo0/9zov4/crXu3w86uNN9V6cr9X7h0P8AAABQoEz//xn1/1Ftu77+wrkD99wwXamfEw79DwAAAAXK9P9fUf8fffktbdquO/H6C9OV+rnh0P8AAABQoEz//x31/zFtDnnh3t+bnLZmulLvHw79DwAAAAXK9P/cqP97XDu01aHXj1h1g3Slfl449D8AAAAUKNP//0T9f2z/4Qst0qnb84PTlfr54dD/AAAAUKBM/8+L+r/nVkdPn7P/vIEt05X6/O8E1P8AAABQoP+6/6sFov4/7qRJ9ecHbtPzqXSlPv8zAfU/AAAAFCjT/wtG/X/8q82/3mDGoG1Hpyv1i8Kh/wEAAKBAmf5vEPX/CVPavHTEZp2nNEpX6heHQ/8DAABAgTL9X4v6/8Qjvl39+rfvvuehdKU+IBz6HwAAAAqU6f8q6v+TRr7W5comPXdvmq7ULwmH/gcAAIACZfq/HvV/rxWajD3r+BeXa5iu1AeGQ/8DAABAgTL93zDq/5MXbjt0rQeqP25PV+qXhkP/AwAAQIEy/b9Q1P+nPPjzGR/fM+SBtdKV+mXh0P8AAABQoEz/Lxz1f++X9rmu5Uld9hqYrtQvD4f+BwAAgAJl+r9R1P+nnnVt7x+WmF3dlK7UrwiH/gcAAIACZfp/kaj/Tzvm/v2emNh2+rbpSv3KcOh/AAAAKFCm/xeN+v/0d3o8tutH31+/bLpSHxQO/Q8AAAAFyvR/46j/+5w0+uC3GrY+bWy6Ur8qHPofAAAACpTp/yZR/5/x6vFPr3bU+avem67UB4dD/wMAAECBMv2/WNT/facccMvpYzs8v3i6Ur86HPofAAAACpTp/8Wj/j/ziKvOvuDOqQPPT1fq14RD/wMAAECBMv2/RNT/Zy3UbdF2Z7bsuUq6Ur82HPofAAAACpTp/6ZR/5897vZv31x+zLabpSv168Kh/wEAAKBAmf5fMur/fnfd/PLQCb2mXJOu1K8Ph/4HAACAAmX6f6mo/89Zqss6x6w88J7105X6DeHQ/wAAAFCgTP83i/r/3Dn3XXX/3512vyxdqQ8Jh/4HAACAAmX6v3nU//23P+aUg/8f9v40+urx7///if3aUoaQIfM8ZCxDMpN5iEiGTEnGJGRWQmbyCQlFxopEZEiSZAihyBgqhE+mZEgS/yuH9T3OdZzrPNZ/rd+F48Ltdum59nrvx+rqvf3e79fAWavcla7U7gyH/gcAAIACZfp/xaj/L+/Qrt0Su673x/bpSu3f/xPQ/wAAAFCgTP+vFPX/FT/c+viCY0aPfCpdqQ0Mh/4HAACAAmX6f+Wo/6+8Y9vjdu59wcErpSu1QeHQ/wAAAFCgTP+vEvV/n3XnjH1r5geL/y8rtbvDof8BAACgQJn+bxb1/1XbvTHwjp1WmnVfulK7Jxz6HwAAAAqU6f9Vo/6/+sbGPU+bdPyMg9KV2uBw6H8AAAAoUKb/V4v6/5ot3r5tzrL3Lvp9ulK7Nxz6HwAAAAqU6f/Vo/6/9rYlzl/srGXaL0hXav9+J0D/AwAAQIEy/b9G1P/X9W5xeIfhb486Ml2p3R8O/Q8AAAAFyvT/mlH/X7/Dr6MeGHnowvfTldoD4dD/AAAAUKBM/68V9f8N5z0w5+uu/VY7P12pPRgO/Q8AAAAFyvT/2lH/3zip03JNl9pxn+PTldpD4dD/AAAAUKBM/68T9f9NHx3RcrcpC4e9lK7UhoRD/wMAAECBMv2/btT/fTvdPeWJbatpF6QrtaHh0P8AAABQoEz/rxf1/82Dn3/04dmvtf4kXakNC4f+BwAAgAJl+n/9qP//0+yitkded+qZb6UrtYfDof8BAACgQJn+3yDq/35L73rmUocP7dstXak9Eg79DwAAAAXK9P+GUf/fMuqqG/7ef5tXv0xXasPDof8BAACgQJn+3yjq/1tfXO/EHW7/dcPd0pXao+HQ/wAAAFCgTP9vHPX/bRd90XvivKPOOTxdqY0Ih/4HAACAAmX6f5Oo//uf+dHggc3v6vdrulJ7LBz6HwAAAAqU6f/mUf/fPnWN3bvttOuM99KV2uPh0P8AAABQoEz/bxr1/4DzPh3228zei3ZPV2ojw6H/AQAAoECLrrjIsv/zlf/R/5tF/X/HpGb7V723aN8lXak9EQ79DwAAAAXKfP6/edT/d3601mntjvlx1MvpSu3JcOh/AAAAKFCm/7eI+v+uTl9fc++u5yzcJ12pjQqH/gcAAIACZfp/y6j/By7a9O9VBj6x2ux0pfZUOPQ/AAAAFCjT/1tF/T9ozHurzf5rtX0Wpiu1p8Oh/wEAAKBAmf5vEfX/3Y/9d6cX1vps2HHpSu2ZcOh/AAAAKFCm/1tG/X9P0y2mH/jaBtNmpSu1Z8Oh/wEAAKBAmf7fOur/wStOuuGQVb9pvXe6UhsdDv0PAAAABcr0/zZR/987fMkz77t43zMPTldqz4VD/wMAAECBMv2/bdT/9z27Zdvfh1zTd266UhsTDv0PAAAABcr0/3ZR/9/f4PdHa881fbVnulJ7Phz6HwAAAAqU6f9WUf8/cN5hu7/YZeqGn6YrtbHh0P8AAABQoEz/bx/1/4OT+g1uWV10zpvpSu2FcOh/AAAAKFCm/1tH/f/QR0N7n/zJmH6npiu1ceHQ/wAAAFCgTP/vEPX/kE5nnnjrzAuW/iJdqb0YDv0PAAAABcr0/45R/w99cfg1S+80+qdd05Xa+HDofwAAAChQpv93ivp/2EWnnbbwmJXGdEhXai+FQ/8DAABAgTL9v3PU/w+fefD+w3p/cNRv6UptQjj0PwAAABQo0/+7RP3/yNT+w44auP/yF6YrtZfDof8BAACgQJn+3zXq/+EvX3bN97teN3daulJ7JRz6HwAAAAqU6f/dov5/tOdep6251noPTUpXaq+GQ/8DAABAgTL9v3vU/yNOu2T//f+atfeZ6UrttXDofwAAAChQpv/3iPr/scnPDXt21TW2mZqu1CaGQ/8DAABAgTL93ybq/8eXG/D+4NemTz0vXam9Hg79DwAAAAXK9P+eUf+PHHrsdocO6X7ZCelK7Y1w6H8AAAAoUKb/94r6/4nnO69Yv/jxEyakK7U3w6H/AQAAoECZ/t876v8nq/t+/bXLZhu1TVdq/z4TQP8DAABAgTL9v0/U/6POXmTVrZ77/vUf0pXaW+HQ/wAAAFCgTP/vG/X/UxNfnf/SJ7sP+jNdqb0dDv0PAAAABcr0/35R/z/96V8f9a+uuOSIdKX2Tjj0PwAAABQo0//7R/3/TJfWrU9a9oile6Urtcnh0P8AAABQoEz/HxD1/7Mv/zHln0l3/PRZulKbEg79DwAAAAXK9P+BUf+P7rlzy8bDtxvzRrpSezcc+h8AAAAKlOn/g6L+f+60xZc74qzfjzolXam9Fw79DwAAAAXK9H/bqP/HTH5pziNdT1/+q3SlNjUc+h8AAAAKlOn/g6P+f/7Jra5afuTDc/dKV2rvh0P/AwAAQIEy/X9I1P9jG87rPGPK4g8dkq7UPgiH/gcAAIACZfq/XdT/L6z+1p6jlnpl71/SldqH4dD/AAAAUKBM/x8a9f+4IY2G7D175232XWSRRe5b6n+s1D4Kh/4HAACAAmX6/7Co/1/8a9Xhy237z9Tv0pXax+HQ/wAAAFCgTP+3j/p//F6fHTTz8EMu+ytdqX0SDv0PAAAABcr0/+FR/7/U7ptuT1138wnHpiu1aeHQ/wAAAFCgTP93iPp/wrdr37jX7Utt9G66Uvs0HPofAAAACpTp/yOi/n954BWdrth/0utnpSu1z8Kh/wEAAKBAmf4/Mur/VzbY87KzmncadHK6Uvs8HPofAAAACpTp/6Oi/n+1Ra9715t3/yWvpCu16eHQ/wAAAFCgTP8fHfX/a9eM3uPDauqFG6crtRnh0P8AAABQoEz/d4z6f+ImFw898JOmA65PV2ozw6H/AQAAoECZ/j8m6v/Xbx673wvPjZk0MF2pfREO/Q8AAAAFyvT/sVH/v3Hl1afP7nLRZjunK7Uvw6H/AQAAoECZ/j8u6v83d97t2lUu/qbzE+lK7atw6H8AAAAoUKb/j4/6f9I5Td46esgGfZZNV2qzwqH/AQAAoECZ/j8h6v+3Xv9wi6GvXTOlnq7Uvg6H/gcAAIACZfq/U9T/b3/2w9J/rbrvlg+mK7VvwqH/AQAAoECZ/j8x6v93Tm7+/TJ/PbH7mulK7dtw6H8AAAAoUKb/O0f9P/nBhjevtNY5949NV2r/DYf+BwAAgAJl+v+kqP+nrPnO2V/t+tm8h9OV2uxw6H8AAAAoUKb/u0T9/26j3w59fOBqKy6RrtS+C4f+BwAAgAJl+v/kqP/fG9ly5B69ex93ZbpS+z4c+h8AAAAKlOn/U6L+n/rKf4696phdX9ggXan9EA79DwAAAAXK9P+pUf+/36vD8z12+nH2VulK7cdw6H8AAAAoUKb/T4v6/4PTuw5ae+YWjW5JV2o/hUP/AwAAQIEy/X961P8fTnmk17vzFv4zKl2pzQmH/gcAAIACZfr/jKj/Pzrn1Fv3ab7NgBXTldrP4dD/AAAAUKBM/3eN+v/j1x87b8z+d01aNF2pzQ2H/gcAAIACZfr/zKj/P/nstg4/3X7UZvenK7VfwqH/AQAAoECZ/u8W9f+0kw99arXrXuu8RbpS+zUc+h8AAAAKlOn/s6L+/3TxwRMeOLzqc2O6UvstHPofAAAACpTp/+5R/3/2Qpe1O2w7dMqd6Urt93DofwAAAChQpv/Pjvr/84c7LrLY7FO3bJWu1OaFQ/8DAABAgTL9f07U/9OXvfOLOUv12/3ydKX2Rzj0PwAAABQo0//nRv0/Y/kLR34/5dD710pXavPDof8BAACgQJn+7xH1/8xh4w5dc+TCedulK7U/w6H/AQAAoECZ/j8v6v8vxvY5e/+uO654W7pSWxAO/Q8AAAAFyvT/+VH/f1nf4+Znz7r3uFXSldpf4dD/AAAAUKBM/18Q9f9X58zsdenw418Yk67UFoZD/wMAAECBMv1/YdT/s17fcNBNk96ePTxdqf0dDv0PAAAABcr0/0VR/3/92erPf7LsMo2WTldq/4RD/wMAAECBMv1/cdT/35w87diNe439/LR0pfr30P8AAABQoEz/XxL1/7evrPLUk/dfssvEdKUKP6P/AQAAoESZ/r806v//9preYdcJ754+PV2pGoRD/wMAAECBMv3fM+r/2afPOm+FNZe/7tJ0pVosHPofAAAACpTp/15R/383Zd1bv2lw04Sf05Vq8XDofwAAAChQpv8vi/r/+4tH9xz9edt1Dk1Xqlo49D8AAAAUKNP/vaP+/2F8r4H7vTDzvDbpSvXvAwD0PwAAABQo0/+XR/3/4/t7jl2j01q3f52uVPVw6H8AAAAoUKb/r4j6/6duVxz3Q59pszqmK9W/79f/AAAAUKBM/18Z9f+cR+9d97cjmy3+d7pSNQyH/gcAAIACZfq/T9T/P6908vhq+1EH/zddqZYMh/4HAACAAmX6/6qo/+cudsyMdrN6jNw/XakahUP/AwAAQIEy/X911P+/jL6rwb1/fPvHa+lK1Tgc+h8AAAAKlOn/a6L+//Wt7X/ovN7Gq5yUrlRLhUP/AwAAQIEy/X9t1P+/nf/PMre3ufrAs9OVaulw6H8AAAAoUKb/r4v6//cTX9l8woC9hk9OV6plwqH/AQAAoECZ/r8+6v95Hy82acubBn0+L12plg2H/gcAAIACZfr/hqj//7h4/IYPt+u4S/t0pWoSDv0PAAAABcr0/41R/88fX3/lyBZzT989XamWC4f+BwAAgAJl+v+mqP//fH+nr5b6seV1M9KV6t/u1/8AAABQoEz/9436f0G3BdXfv4yYcEa6Uq0QDv0PAAAABcr0/81R///VeImz9tqi2zpvpytV03DofwAAAChQpv//E/X/wqff7vdU2/HnfZyuVCuGQ/8DAABAgTL93y/q/7/v+/XJmbcscvvF6Uq1Ujj0PwAAABQo0/+3RP3/z8otDlnu3AWzxqcr1crh0P8AAABQoEz/3/r/+r9a5NyDB1w8tPXiJ6Yr1Srh0P8AAABQoEz/3xb1/6Jv97/omom3HnxuulI1C4f+BwAAgAJl+r9/1P8NPhl+9KcrtB/5QbpSrRoO/Q8AAAAFyvT/7VH/L3b8aaO3aDjxj6PSlWq1cOh/AAAAKFCm/wdE/b/4ChMPn/1+w1X+SFeq1cOh/wEAAKBAmf6/I+r/2oilR63y1JADf0pXqjXCof8BAACgQJn+vzPq/+q5rW878NQuww9MV6o1w6H/AQAAoECZ/r8r6v/6InPPf2FAk2H3pivVv+/R/wAAAFCgTP8PjPp/ifu2HLhem8n7LJauVGuHQ/8DAABAgTL9Pyjq/4Yr/97zw/V6rrZCulKtEw79DwAAAAXK9P/dUf8v2XjScVf8MW7h0+lKtW449D8AAAAUKNP/90T93+jpJceeNWudUa3TlWq9cOh/AAAAKFCm/wdH/d94wVHzW2z/ZfsB6Uq1fjj0PwAAABQo0//3Rv2/1G4DVx1/5IGL9k1Xqg3Cof8BAACgQJn+vy/q/6XbP9T6tj43zNgsXak2DIf+BwAAgAJl+v/+qP+X+en4j7p0Or/f7elKtVE49D8AAAAUKNP/D0T9v+xmuz/Q84Wnz9kmXak2Dof+BwAAgAJl+v/BqP+b3H7lXjd+vvKG66Qr1Sbh0P8AAABQoEz/PxT1/3JXvHDyxw0+fvWydKVqHg79DwAAAAXK9P+QqP+X3/6CPpus2aZv43Sl2jQc+h8AAAAKlOn/oVH/r3DgJ6f9NKHPmSPSlerfZwLofwAAAChQpv+HRf3fdN5q16x2f/PWo9OVavNw6H8AAAAoUKb/H476f8UvNxi2T6/Z01ZNV6otwqH/AQAAoECZ/n8k6v+Vjpyx/5hTtxq2Y7pSbRkO/Q8AAAAFyvT/8Kj/V16wzuC1n5qzz93pSrVVOPQ/AAAAFCjT/49G/b/Kbl/t/u77x652bbpStQiH/gcAAIACZfp/RNT/zdp/fuJVDe9Z2DxdqVqGQ/8DAABAgTL9/1jU/6v+tHLvHis0GDUkXam2Dof+BwAAgAJl+v/xqP9Xu+G7eW9NnNC+lq5U24RD/wMAAECBMv0/Mur/1bfdrOnOQ7suuly6Um0bDv0PAAAABcr0/xNR/6+xzkpbn3bu8BmPpyvVduHQ/wAAAFCgTP8/GfX/mgOmfHDHLR36LZmuVK3Cof8BAACgQJn+HxX1/1p3tejTp23/c4amK9X24dD/AAAAUKBM/z8V9f/aa/968nlbtNpwXLpStQ6H/gcAAIACZfr/6aj/19nm7b3W+WX+q6unK9UO4dD/AAAAUKBM/z8T9f+6fZd4YMqPnfv+J12pdgyH/gcAAIACZfr/2aj/F1/w8P4rtHjwzJbpSrVTOPQ/AAAAFCjT/6Oj/l9/tzOGfdOuUev10pVq53DofwAAAChQpv+fi/p/g/aHX/PkTW9MuypdqXYJh/4HAACAAmX6f0zU/xv+dPNpuz7VcO+l0pVq13DofwAAAChQpv+fj/p/owPb9f7k1IkPPZauVLuFQ/8DAABAgTL9Pzbq/43n3Xrixg27zH02Xal2D4f+BwAAgAJl+v+FqP83+XLE7pe+P2T5ZulKtUc49D8AAAAUKNP/46L+b37kKYNvmtj6qP7pStUmHPofAAAACpTp/xej/t903569W62wYMzW6Uq1Zzj0PwAAABQo0//jo/7f7JdnT3zz3PY/rZuuVHuFQ/8DAABAgTL9/1LU/5t/c/nu9wy9dene6Uq1dzj0PwAAABQo0/8Tov7f4pg2g89o2+2SHdKVap9w6H8AAAAoUKb/X476f8t7unx67i0jBt2RrlT7hkP/AwAAQIEy/f9K1P9brT9456t/WeT1m9KVar9w6H8AAAAoUKb/X436v8VWd6753hbjN9o0Xan2D4f+BwAAgAJl+v+1qP9bXt9x4VotOp4wOF2pDgiH/gcAAIACZfp/YtT/W//z93Kzfhx0WYN0pTowHPofAAAACpTp/9ej/t9mz1ZzVryp5dSm6Up1UDj0PwAAABQo0/9vRP2/7SENpuzebu42z6QrVdtw6H8AAAAoUKb/34z6f7vvXm45ss3Ge9+crlQHh0P/AwAAQIEy/T8p6v9W+1YfNR/w7UMt0pXqkHDofwAAAChQpv/fivp/+19ebP3RH3vNXT9dqdqFQ/8DAABAgTL9/3bU/62/+XPVG9a7evmr05Xq0HDofwAAAChQpv/fifp/h2N2nN9r+2ZHNUpXqsPCof8BAACgQJn+nxz1/447v9P3tVnTxgxLV6r24dD/AAAAUKBM/0+J+n+nKxt23bpPj59eSFeqw8Oh/wEAAKBAmf5/N+r/nW9uecDxR45aerV0peoQDv0PAAAABcr0/3tR/++yyW8jbnmh7SUPpSvVEeHQ/wAAAFCgTP9Pjfp/1+6zHny1002DFk9XqiPDof8BAACgQJn+fz/q/93eXHfvbRqs9fr/0vjVUeHQ/wAAAFCgTP9/EPX/7tNX6XLC5zM3GpmuVEeHQ/8DAABAgTL9/2HU/3ucNP3KfhMuOWGndKXqGA79DwAAAAXK9P9HUf+3aXLp6R3WHHvZPelKdUw49D8AAAAUKNP/H0f9v+cjY659oNfyU69JV6pjw6H/AQAAoECZ/v8k6v+9xvUeOuf+d7fZJF2pjguH/gcAAIACZfp/WtT/e9f23m+xdg9u+Wq6Uh0fDv0PAAAABcr0/6dR/+8zpM+9d9zUeUrndKU6IRz6HwAAAAqU6f/Pov7fd/U99jjtxzf6nJOuVJ3Cof8BAACgQJn+/zzq//0aXthp5xaNOk9JV6oTw6H/AQAAoECZ/p8e9f/+T4677K0t+m92TLpS/fudAP0PAAAABcr0/4yo/w/4+6eX+/7SYdI/6Up1Ujj0PwAAABQo0/8zo/4/sM3GG1xyy/wB36YrVZdw6H8AAAAoUKb/v4j6/6CDl69v1LbVhfulK9XJ4dD/AAAAUKBM/38Z9X/b2e/PmjZ0QqM56Up1Sjj0PwAAABQo0/9fRf1/8Ebz7phwboPZ7dKV6tRw6H8AAAAoUKb/Z0X9f0i/rS7ecoXhL+yZrlSnhUP/AwAAQIH+7/7foP2Kvf69q3ZXNTqq88Sux32TrlSnh0P/AwAAQIEyn/9/E33+f+iObz17+/tzVjw9XanOCIf+BwAAgAJl+v/bqP8P26dbh3YNt5r3erpSdQ2H/gcAAIACZfr/v1H/t5877Kl7T73n/s/TlerMcOh/AAAAKFCm/2dH/X/417fc+ttTx+5+SbpSdQuH/gcAAIACZfr/u6j/O3Rsf151f58tj05XqrPCof8BAACgQJn+/z7q/yP+vn3QwF5tpsxPV6ru4dD/AAAAUKBM//8Q9f+RbQ7p1W3N2X1+TFeqs8Oh/wEAAKBAmf7/Mer/ow4+/dgdJjTvfEC6Up0TDv0PAAAABcr0/09R/x89+9HnJ37+9GYvpivVueHQ/wAAAFCgTP/Pifq/47XHvnFWg/MndUpXqh7h0P8AAABQoEz//xz1/zEtB2x0RaePB/RIV6rzwqH/AQAAoECZ/p8b9f+xG97X8MMXVr7ww3SlOj8c+h8AAAAKlOn/X6L+P25Q5+/WO/LLRl3TleqCcOh/AAAAKFCm/3+N+v/4u69+tlWfdWa/k65UF4ZD/wMAAECBMv3/W9T/J6y321FvzrrhhY/SleqicOh/AAAAKFCm/3+P+r/TlhdffM/2Bx53UbpSXRwO/Q8AAAAFyvT/vKj/T7xu7B1nrDd5xd/TleqScOh/AAAAKFCm//+I+r/z32ueN+yPJvMOS1eqS8Oh/wEAAKBAmf6fH/X/SW0+vvWoAePu3yNdqXqGQ/8DAABAgTL9/2fU/10O/vKppdv03H1mulL1Cof+BwAAgAJl+n9B1P8nz16/w8KfWt3ZPl2pLguH/gcAAIACZfr/r6j/T9nnm+dPbjn/4nnpStU7HPofAAAACpTp/4VR/586d+1jbz20wxYz0pXq8nDofwAAAChQpv//jvr/tK9X7fVi3/5v756uVFeEQ/8DAABAgTL9/0/U/6d3/GxQy36Nrn47XamuDIf+BwAAgAL93/1fWyTq/zNWaTr+hoPe6HJGulL1CYf+BwAAgAJl+n/RqP+73v/eur0279zi4nSluioc+h8AAAAKlOn/BlH/n/nMfxs0n/vgex+nK9XV4dD/AAAAUKBM/y8W9X+3pbaY8VHTY+89MV2prgmH/gcAAIACZfp/8aj/z3pnqYEvvn7PruPTleracOh/AAAAKFCm/2tR/3fv8WbPlsO2WuGDdKW6Lhz6HwAAAAqU6f8q6v+zT/j5uJN7zPnt3HSluj4c+h8AAAAKlOn/etT/50zbbuytp3R9/o90pbohHPofAAAACpTp/yWi/j/3sdvaHTJq+DFHpSvVjeHQ/wAAAFCgTP83jPq/R9NDH79vaoOGB6Yr1U3h0P8AAABQoEz/Lxn1/3mLnvqf35eY8O1P6UrVNxz6HwAAAAqU6f9GUf+fP+axc2prrHznxHSlujkc+h8AAAAKlOn/xlH/X7BK1wH3vPTxxaelK9V/wqH/AQAAoECZ/l8q6v8L73/kojPuO3+LS9OVql849D8AAAAUKNP/S0f9f9Ez/zm6Vc+n356erlS3hEP/AwAAQIEy/b9M1P8XL9Vh9JsnNr/60HSlujUc+h8AAAAKlOn/ZaP+v+TMB945Z9zsLj+nK9Vt4dD/AAAAUKD/vf8XC3etSdT/l07ttNll09u0+DpdqfqHQ/8DAABAgTKf/y8X9X/PF49oPHWxPu+1SVeq28Oh/wEAAKBAmf5fPur/Xhfd/eOGX/W89+90pRoQDv0PAAAABcr0/wpR/1928yntZ7Qat2vHdKW6Ixz6HwAAAAqU6f+mUf/33mTEM8sf0WSF/dOV6s5w6H8AAAAoUKb/V4z6//Kdb+2/95WTf/tvulLdFQ79DwAAAAXK9P9KUf9fcWW7c0fdceDzJ6Ur1cBw6H8AAAAoUKb/V476/8o5c+7qvucNx7yWrlSDwqH/AQAAoECZ/l8l6v8++2174eXrr9NwcrpS3R0O/Q8AAAAFyvR/s6j/rzq28REfzP/y27PTleqecOh/AAAAKFCm/1eN+v/qr954bv0lbv3h7nSlGhwO/Q8AAAAFyvT/alH/X7PXEoeMm9q+8Y7pSnVvOPQ/AAAAFCjT/6tH/X/tX28/ecCoBUc0T1eq+8Kh/wEAAKBAmf5fI+r/6779td/Kp7QefW26Ut0fDv0PAAAABcr0/5pR/1/frsVZ3/UYMqeWrlQPhEP/AwAAQIEy/b9W1P83rNlp62HDujQZkq5UD4ZD/wMAAECBMv2/dtT/Nz74wAdHvT5xz8fTleqhcOh/AAAAKFCm/9eJ+v+mkXfPW7ppwweWS1eqf38nQP8DAABAgTL9v27U/30bHdF04dy5HwxNV6p/X9P/AAAAUKBM/68X9f/Nr1906qzNW263ZLpSDQuH/gcAAIACZfp//aj//3PO89eveNCgE1dPV6qHw6H/AQAAoECZ/t8g6v9+J1/18O79Ol4+Ll2pHgmH/gcAAIACZfp/w6j/b/ls131G9h3/Zst0pRoeDv0PAAAABcr0/0ZR/9867Ish5x66yCb/SVeqR8Oh/wEAAKBAmf7fOOr/25Zfb8+rW47oeVW6Uo0Ih/4HAACAAmX6f5Oo//vX1+j83k/d7lkvXakeC4f+BwAAgAJl+r951P+3j/3oqrXmj/phsXSlejwc+h8AAAAKlOn/TaP+H7Bms67Prd+j8b3pSjUyHPofAAAACpTp/82i/r/jwU/77rvntCOeTleqJ8Kh/wEAAKBAmf7fPOr/O0d+PWL1O5qNXiFdqZ4Mh/4HAACAAmX6f4uo/+9qtNYBP1559ZwB6Uo1Khz6HwAAAAqU6f8to/4feMp7rQ8/Yq8mrdOV6qlw6H8AAAAoUKb/t4r6f9C7TT96sNW3e26WrlT//k0A/Q8AAAAFyvR/i6j/7351i/k/f7XxA33TleqZcOh/AAAAKFCm/1tG/X/PJf9dtcFi736wTbpSPRsO/Q8AAAAFyvT/1lH/D+615D5rTF9+u9vTlWp0OPQ/AAAAFCjT/9tE/X/vK5Me/mHc2BMvS1eq58Kh/wEAAKBAmf7fNur/+6b8fv3oEy+5fJ10pRoTDv0PAAAABcr0/3ZR/99/+pan7tdz5psj0pXq+XDofwAAAChQpv9bRf3/wJr9rup731qbNE5XqrHh0P8AAABQoEz/bx/1/4MPHtb5kpdu6rlqulK9EA79DwAAAAXK9H/rqP8fGnnmnhut0fae0elKNS4c+h8AAAAKlOn/HaL+H9Jo6JBp69+wWIt0pXoxHPofAAAACpTp/x2j/h867LQDdpt/4Bc3pyvV+HDofwAAAChQpv93ivp/2PLDRzxxx5dPX52uVC+FQ/8DAABAgTL9v3PU/w/X+/f9es91OqyfrlQTwqH/AQAAoECZ/t8l6v9Hxh7ctekR49YYlq5UL4dD/wMAAECBMv2/a9T/wx/d64D7r+z5T6N0pXolHPofAAAACpTp/92i/n90pctGHPzV5EdWS1eqV8Oh/wEAAKBAmf7fPer/EYs913fxVk32eyFdqV4Lh/4HAACAAmX6f4+o/x8bfUnXedNnt1o8XakmhkP/AwAAQIEy/d8m6v/HLz62yU+LNf/4oXSlej0c+h8AAAAKlOn/PaP+Hzl+wC+rndjnxpHpSvVGOPQ/AAAAFCjT/3tF/f/E+/e9u8+4Nmf8L41fvRkO/Q8AAAAFyvT/3lH/P9mt85Zj7vt4/XvSlWpSOPQ/AAAAFCjT//tE/T9q1Ven9+y58ss7pSvVW+HQ/wAAAFCgTP/vG/X/U/custONazx98ybpSvV2OPQ/AAAAFCjT//tF/f/0U61X+/il87tfk65U74RD/wMAAECBMv2/f9T/zyzz19+bTB2+2GPpSjU5HPofAAAACpTp/wOi/n/20Z2bPr5E1y+WSleqKeHQ/wAAAFCgTP8fGPX/6JX+mLfHKROebpauVO+GQ/8DAABAgTL9f1DU/88t9tIHK41q0OHZdKV6Lxz6HwAAAAqU6f+2Uf+PGb341l8Nu2eNrdOVamo49D8AAAAUKNP/B0f9//wn83bv2OPYf/qnK9X74dD/AAAAUKBM/x8S9f/Y47ca/FjTOY/0TleqD8Kh/wEAAKBAmf5vF/X/C+c26r3g9a32WzddqT4Mh/4HAACAAmX6/9Co/8e9/daJS2z+Rqs70pXqo3DofwAAAChQpv8Pi/r/xds+O+WYuY0+3iFdqT4Oh/4HAACAAmX6v33U/+O3WPW6Ef0evHHTdKX6JBz6HwAAAAqU6f/Do/5/aYe1H/nzoM5n3JSuVNPCof8BAACgQJn+7xD1/4Te3+zb8ND56zdIV6pPw6H/AQAAoECZ/j8i6v+Xf9vzoUl9W708OF2pPguH/gcAAIACZfr/yKj/X2l7RZtdfup/8zPpSvV5OPQ/AAAAFCjT/0dF/f/q0aNPOr1lh+5N05Vqejj0PwAAABQo0/9HR/3/2sxeVw94aa1z56cr1Yxw6H8AAAAoUKb/O0b9P3GPsWc0WGPmbUenK9XMcOh/AAAAKFCm/4+J+v/1+Rff9HPPtuMPSFeqL8Kh/wEAAKBAmf4/Nur/N37Y7bEH77tprR/TlerLcOh/AAAAKFCm/4+L+v/NDlcfePi45U/tlK5UX4VD/wMAAECBMv1/fNT/k5p92HCFE9+95sV0pZoVDv0PAAAABcr0/wlR/781uMl33yx2yacfpivV1+HQ/wAAAFCgTP93ivr/7VHN33hy+tideqQr1Tfh0P8AAABQoEz/nxj1/ztL/7DRrq32avtOulJ9Gw79DwAAAAXK9H/nqP8nT3rnsCO+unpE13Sl+m849D8AAAAUKNP/J0X9P+W8hk8/cuXGf16UrlSzw6H/AQAAoECZ/u8S9f+7nVre/s8R3676UbpSfRcO/Q8AAAAFyvT/yVH/v/fRbz0a79mj3WHpSvV9OPQ/AAAAFCjT/6dE/T91eIc7X79j1JO/pyvVD+H43/p/0f+P/8kAAADA/58y/X9q1P/vr/ifC1rPb/bNzHSl+jEcPv8HAACAAmX6/7So/z9o8MiRZ64/rdojXal+Cof+BwAAgAJl+v/0qP8/fLbrmEEtFzm3c7pSzQmH/gcAAIACZfr/jKj/P2r22MH1n8bf9mq6Uv0cDv0PAAAABcr0f9eo/z8efOoTv/btNn5KulLNDYf+BwAAgAJl+v/MqP8/GXXoLYMPHbHWOelK9Us49D8AAAAUKNP/3aL+n7b0bd0PPajlqf+kK9Wv4dD/AAAAUKBM/58V9f+nXbvUv+s395pj0pXqt3DofwAAAChQpv+7R/3/2YeDZ608t+On+6Ur1e/h0P8AAABQoEz/nx31/+cT7nz5gM0H7fRtulLNC4f+BwAAgAJl+v+cqP+nX9hxg3Gvd2nbLl2p/giH/gcAAIACZfr/3Kj/Z1w0rsf9TYeMmJOuVPPDof8BAACgQJn+7xH1/8wXL7z94B4N//wmXan+DIf+BwAAgAJl+v+8qP+/mLrH04sPm7jqnulKtSAc+h8AAAAKlOn/86P+//LMPofNG9W+3evpSvVXOPQ/AAAAFCjT/xdE/f9Vsw3HtDjl1idPT1eqheHQ/wAAAFCgTP9fGPX/rMEzjxy/ROtvLklXqr/Dof8BAACgQJn+vyjq/69HTbvgtqkLqs/TleqfcOh/AAAAKFCm/y+O+v+bpVe/s8uOTT75JF2p/3vofwAAAChQpv8vifr/2+HTu/81Y/IOF6Qr9fAz+h8AAABKlOn/S6P+/++Kq9yyzGU9u3VLV+oNwqH/AQAAoECZ/u8Z9f/sBus+cXTHcTe9la7UFwuH/gcAAIACZfq/V9T/3z076+Chu63z2m7pSn3xcOh/AAAAKFCm/y+L+v/75Xo99/ugLzf4Ml2p18Kh/wEAAKBAmf7vHfX/D0NHH1FbeODZv6Yr9Soc+h8AAAAKlOn/y6P+//H5Ky48ZO0bbjk8Xan/+wBA/Q8AAAAFyvT/FVH//1Ttedd9r54/8/t0pf7v+/U/AAAAFCjT/1dG/T/n5ZO/ea7Z04sclK7UG4ZD/wMAAECBMv3fJ+r/n3veW9v3opUPOzJdqS8ZDv0PAAAABcr0/1VR/8897a71Vn/o46cWpCv1RuHQ/wAAAFCgTP9fHfX/L5OPefXHMW3+Oj9dqTcOh/4HAACAAmX6/5qo/3994J+Nm5/cZ/X305X6UuHQ/wAAAFCgTP9fG/X/b2ts/+ZH9eb7vpSu1JcOh/4HAACAAmX6/7qo/39fcrHZN0ybPfT4dKW+TDj0PwAAABQo0//XR/0/7/FXluj11laf7J2u1JcNh/4HAACAAmX6/4ao//9Yrv7lrCZzdpiVrtSbhEP/AwAAQIEy/X9j1P/zh45fdMXux3abm67UlwuH/gcAAIACZfr/pqj//3x+wVq7P3rPTQenK/V/u1//AwAAQIEy/d836v8F1U4vjXy8wWufpiv1FcKh/wEAAKBAmf6/Oer/v056e1TDMyZs0DNdqTcNh/4HAACAAmX6/z9R/y+cvsThfzbuevap6Up9xXDofwAAAChQpv/7Rf3/95stzh8xefgtb6Yr9ZXCof8BAACgQJn+vyXq/3+6/3rbMdt1mNk9XamvHA79DwAAAAXK9P+t/6//64scfOzCXb7rv8h76Up9lXDofwAAAChQpv9vi/p/0dkD1px0favDXk5X6s3Cof8BAACgQJn+7x/1f4O/79t5QIf5T3VJV+qrhkP/AwAAQIEy/X971P+Lten86en7df5rdrpSXy0c+h8AAAAKlOn/AVH/L77lqy1H9H9w9X3Slfrq4dD/AAAAUKBM/98R9X/tukWmHPN7o32PS1fqa4RD/wMAAECBMv1/Z9T/1d2t5zTc5I2hC9OV+prh0P8AAABQoEz/3xX1f329v5b7c9rYR5ukK/V/36P/AQAAoECZ/h8Y9f8SV+08//j6JQc8ma7U1w6H/gcAAIACZfp/UNT/DXf8Y9VbTn535QfSlfo64dD/AAAAUKBM/98d9f+SG73U+rUxy8+v0pX6uuHQ/wAAAFCgTP/fE/V/o36Lf7T1Qzc9fl26Ul8vHPofAAAACpTp/8FR/zeeftjA8y5qe8hG6Up9/XDofwAAAChQpv/vjfp/qZP69ezTbGZtl3SlvkE49D8AAAAUKNP/90X9v3T3ocdNeXWtrwalK/UNw6H/AQAAoECZ/r8/6v9l3jxz7DprT+u/YbpS//c7AfofAAAACpTp/wei/l+24QHjWy9sdn6fdKW+cTj0PwAAABQo0/8PRv3f5Mnr1n190Kh1+6Ur9U3Cof8BAACgQJn+fyjq/+WGPN5g0G49XtoyXak3D4f+BwAAgAJl+n9I1P/Lr37ejDM7fnv98+lKfdNw6H8AAAAoUKb/h0b9v8KpU5d55LKNT1sjXalvFg79DwAAAAXK9P+wqP+bvrfcD0fMuHrnhulKffNw6H8AAAAoUKb/H476f8XXNprUeMe9pj+SrtS3CIf+BwAAgAJl+v+RqP9XuvTHzf/ZZNCjN6Qr9X//JqD+BwAAgAJl+n941P8rT9/0lZN+73jA5ulKfatw6H8AAAAoUKb/H436f5WTZm/Yv//clbdPV+otwqH/AQAAoECZ/h8R9X+z7pOrl/ZrOf+udKXeMhz6HwAAAAqU6f/Hov5f9c0Vv9qqw4jHV0pX6luHQ/8DAABAgTL9/3jU/6sNndXv2uu7HfJUulLfJhz6HwAAAAqU6f+RUf+vvty6Z1303fjafelKfdtw6H8AAAAoUKb/n4j6f41qlUM2326Rr/6Xlfp24dD/AAAAUKBM/z8Z9f+az09/8rPJC/o/l67UW4VD/wMAAECBMv0/Kur/tcbtOGN849bnr5yu1P99JqD+BwAAgAJl+v+pqP/Xrv3ZoMUZt667TLpSbx0O/Q8AAAAFyvT/01H/r9PkxXW7PN7+pUfTlfoO4dD/AAAAUKBM/z8T9f+6j1Tjb3t04vVrpyv1HcOh/wEAAKBAmf5/Nur/9aY/sPnB3RuedkW6Ut8pHPofAAAACpTp/9FR/69/UqdJ9zcZsvOt6Up953DofwAAAChQpv+fi/p/g+5H/DDvrS7Tt01X6ruEQ/8DAABAgTL9Pybq/w3fvHuZxX9/cI+x6Up913DofwAAAChQpv+fj/p/o1M7fnX3Jp3vWzNdqe8WDv0PAAAABcr0/9io/zd+786q635v/L5EulLfPRz6HwAAAAqU6f8Xov7f5LXBG27fv9FKD6cr9T3Cof8BAACgQJn+Hxf1f/NLu7zyxvX9j90gXam3CYf+BwAAgAJl+v/FqP837XrWV5d06DDuynSlvmc49D8AAAAUKNP/46P+3+zDp6u+283/7pZ0pb5XOPQ/AAAAFCjT/y9F/b/5hBs2nPZdqyW3Slfqe4dD/wMAAECBMv0/Ier/LS7c75WNGk+44Pp0pb5POPQ/AAAAFCjT/y9H/b/lmFNGbzm5wR0bpyv1fcOh/wEAAKBAmf5/Jer/rRYdcfSEx4e/tXO6Ut8vHPofAAAACpTp/1ej/m/R9NaLbj+j66YD05X6/uHQ/wAAAFCgTP+/FvV/y8faDejcfc5Jy6Yr9QPCof8BAACgQJn+nxj1/9bT5px/76NbXflEulI/MBz6HwAAAAqU6f/Xo/7f5oRtb2v31j2TH0xX6geFQ/8DAABAgTL9/0bU/9v2aDyqanLsVvV0pd42HPofAAAACpTp/zej/t/unTcO/63eZ4+10pX6weHQ/wAAAFCgTP9Pivq/Vdclxnab1ua+y9OV+iHh0P8AAABQoEz/vxX1//Yfvn3cwDGzf78tXam3C4f+BwAAgAJl+v/tqP9bT/i158STm6+0XbpSPzQc+h8AAAAKlOn/d6L+3+HCFgN3uOjpY8ekK/XDwqH/AQAAoECZ/p8c9f+OzcbPvuKh88etkq7U24dD/wMAAECBMv0/Jer/nQbXlzjr1Y+/WzpdqR8eDv0PAAAABcr0/7tR/+88aqeN12u28pLD05V6h3DofwAAAChQpv/fi/p/l6UXvPnhwi8vWDFdqR8RDv0PAAAABcr0/9So/3dt/92Ll6+9zh2j0pX6keHQ/wAAAFCgTP+/H/X/bj9ttk733W546/50pX5UOPQ/AAAAFCjT/x9E/b/7gpUWW3/QgZsumq7Ujw6H/gcAAIACZfr/w6j/99htyswPLpt80o3pSr1jOPQ/AAAAFCjT/x9F/d9mm3OWXr5jkyu3SFfqx4RD/wMAAECBMv3/cdT/e/Z96vsZO46b3CpdqR8bDv0PAAAABcr0/ydR/+91V9+3Rs3oudWd6Ur9uHDofwAAAChQpv+nRf2/99r7brF3k4Zbn5eu1I8Ph/4HAACAAmX6/9Oo//e54vqXP3tr4vtT05X6CeHQ/wAAAFCgTP9/FvX/vtsfuMHmj3bpPSFdqXcKh/4HAACAAmX6//Oo//fb7Pz6Rd2HHH9CulI/MRz6HwAAAAqU6f/pUf/vf/vIWdee0XrjH9KVeudw6H8AAAAoUKb/Z0T9f8AnM+998/EFE9umK/WTwqH/AQAAoECZ/p8Z9f+Bx2+4R6vJ7Qceka7Uu4RD/wMAAECBMv3/RdT/B527eqczGt966Z/pSv3kcOh/AAAAKFCm/7+M+r/t29Muu+e7bsvsmq7UTwmH/gcAAIACZfr/q6j/D248/6+rtxvx4xfpSv3UcOh/AAAAKFCm/2dF/X/I07uscW6HRZ77LV2pnxYO/Q8AAAAFyvT/11H/t7uvtsta148/ukO6Uj89HPofAAAACpTp/2+i/j905Qmfvde/43LT0pX6GeHQ/wAAAFCgTP9/G/X/YWec0GLF/Qb9cmG6Uu8aDv0PAAAABcr0/3+j/m//wZDJszZpOeTMdKX+72v6HwAAAAqU6f/ZUf8f/tKgn0f+PnevSelKvVs49D8AAAAUKNP/30X93+GCo5fffcbGW3+XrtTPCof+BwAAgAJl+v/7qP+P+OSOPz7a8dv3901X6t3Dof8BAACgQJn+/yHq/yOPP65Z84579T42XamfHQ79DwAAAAXK9P+PUf8fde5JO/S67Orj/0pX6ueEQ/8DAABAgTL9/1PU/0e/ff/HNwxqtvFZ6Ur93HDofwAAAChQpv/nRP3f8dGDH9t6t2kT301X6j3Cof8BAACgQJn+/znq/2NW6n/ga2v3GPhKulI/Lxz6HwAAAAqU6f+5Uf8fu9jwM25ZOOrSk9OV+vnh0P8AAABQoEz//xL1/3GjT7vp+GZtl/ksfv8//3NO/wMAAECBMv3/a9T/xz937WeXvHrTj73SlfqF4dD/AAAAUKBM//8W9f8Ji7Tdpe9Daz13SrpSvygc+h8AAAAKlOn/36P+77RCjzWmXTTz6DfSlfrF4dD/AAAAUKBM/8+L+v/EEU/+tdHJlyy3V7pSvyQc+h8AAAAKlOn/P6L+7/xJk+V/GDP2l6/Slfql4dD/AAAAUKBM/8+P+v+k4z/8eY1pyw/5JV2p9wyH/gcAAIACZfr/z6j/u5z7w+T96u/udUi6Uv/3mQD6HwAAAAqU6f8FUf+f/HbzFqOH33r3rHSlflk49D8AAAAUKNP/f0X9f8oZ//143bPa99o7Xan3Dof+BwAAgAJl+n9h1P+nfrDFDpOXXdD84HSlfnk49D8AAAAUKNP/f0f9f9pLTZtdOan1G3PTlfoV4dD/AAAAUKBM//8T9f/pF7z3x/lThlzRM12pXxkO/Q8AAAAF+r/7v1ok6v8zWr3zzv5Lden0abpS7xMO/Q8AAAAFyvT/olH/d7284WbPdp247ZvpSv2qcOh/AAAAKFCm/xtE/X9m/5aNvx/Z8MNT05X61eHQ/wAAAFCgTP8vFvV/t01/+3HNw+c++F66Ur8mHPofAAAACpTp/8Wj/j/rxw/71a9r2aZ7ulK/Nhz6HwAAAAqU6f9a1P/dD2ty1q+zBy3bJV2pXxcO/Q8AAAAFyvR/FfX/2bs2P2Twth1/fjldqV8fDv0PAAAABcr0fz3q/3P+/OHJQ5uPf3afdKV+Qzj0PwAAABQo0/9LRP1/7k1tO/aft8iRs9OV+o3h0P8AAABQoEz/N4z6v8fW175w0u0jllqYrtRvCof+BwAAgAJl+n/JqP/PW+vJe7bav9v3x6Ur9b7h0P8AAABQoEz/N4r6//w7e1z60jGj7r4gXanfHA79DwAAAAXK9H/jqP8vaPVM/yN69+j1SbpS/0849D8AAAAUKNP/S0X9f+Hl3c99ZOa05m+lK/V+4dD/AAAAUKBM/y8d9f9F/fdv/89Ozd7olq7UbwmH/gcAAIACZfp/maj/L970xmcar3X1FV+mK/Vbw6H/AQAAoECZ/l826v9L2vYcP+qvvTrtlq7UbwuH/gcAAIACZfq/SdT/l/727Lp7D/x228PTlXr/cOh/AAAAKFCm/5eL+r/nzMsbLL/rxh/+mq7Ubw+H/gcAAIACZfp/+aj/ex3dZsaMIe8+eFC6Uh8QDv0PAAAABcr0/wpR/1828omjN7x4+Tbfpyv1O8Kh/wEAAKBAmf5vGvV/70bnjp666thlF6Qr9f8fe3cet+WcNn78qqHzuseUZTAGMy32ZRLNk50yxhgZZpNlKERhlDUhW5Q120z2GhmyTWPfFZFGaFBZsyZLIstYksLvhaOcOes5ecScr+/v/f7nOO676z66r3m9nief7rvrPj8W/Q8AAAAVVNL/S+f6/9jm25x7zL1HvL1j8Up2QSz6HwAAACqopP9/lOv/44aeePhBEyfd8mjxSjYoFv0PAAAAFVTS/8vk+r/fuNXPuqlJix17F69kg2PR/wAAAFBBJf3/41z/9//z671/2e20prsWr2R/i0X/AwAAQAWV9P+yuf4//ujHOi1+27av3128kl0Yi/4HAACACirp/+Vy/X/C6MVueKHjeq+2Ll7JhsSi/wEAAKCCSvp/+Vz/n9h9fJdDz5lRH1C8kl0Ui/4HAACACirp/5/k+v+kZ5Ycccr07Xe+oHgl+3ss+h8AAAAqqKT/f5rr/5Pvaz3ouTXOHrF+8Up2cSz6HwAAACqopP+b5/r/lIOmHLVmu0XevbF4JbskFv0PAAAAFVTS/y1y/T9gk1s26Dn1/qV+VLySDY1F/wMAAEAFlfR/y1z/n9rvqCcGn7xHh3lcyS6NRf8DAABABZX0f6tc/592xuYz7us0dMjfi1eyy2LR/wAAAFBBJf2/Qq7/T1/92OU2uLbz+GWKV7LLY9H/AAAAUEEl/b9irv/PmDKke6seF7a9rXgluyIW/Q8AAAAVVNL/K+X6/8zfd+s/runa3f9ZvJJdGYv+BwAAgAr63/q/oVar5fr/L1vsfEn/cW8dv2jxSvaPWPQ/AAAAVFDJ1/9XyfX/X2edv8UhY3s8dFzxSjYsFv0PAAAAFVTS/6vm+n/gietdcf1iw1q3LF7JZv+bAP0PAAAAFVTS/6vl+v+sdT7u2H7/xoe3K17JropF/wMAAEAFlfT/6rn+P3vle/ZZctioCwYWr2RXx6L/AQAAoIJK+n+NXP+fM6jxia/ctsyr1xevZNfEov8BAACggkr6f81c/5+7yciuR3Z7sr548Up2bSz6HwAAACqopP9/luv/8/o16Xtak947Nyleya6LRf8DAABABZX0f+tc/59/xkZDJk68acQlxSvZ7H8ToP8BAACggkr6f61c/1+w+oebrXbvGu+uWryS3RCL/gcAAIAKKun/Nrn+H/Trhp+fudzUpU4uXslujEX/AwAAQAWV9P/auf4f/M5Dj+3eZ/MOg4tXspti0f8AAABQQSX9v06u///2ynvT213Wf8imxSvZzbHofwAAAKigkv5vm+v/C3dpu9To9keN71+8kt0Si/4HAACACirp/5/n+n9I54e3eHLQnW1XKV7Jbo1F/wMAAEAFlfT//+T6/6IXl75k9VmLd29TvJLdFov+BwAAgAoq6f92uf7/+1tr9j+qxcPH/6V4Jbs9Fv0PAAAAFVTS/+vm+v/iraZ2P3Xj3zz00+KVbHgs+h8AAAAqqKT/18v1/yWbbHnilpMGtB5evJKNiEX/AwAAQAWV9P/6uf4f2u+0fW7v2+rwfxSvZHfEov8BAACggkr6f4Nc/196xg0d39xl8gUNxSvZnbHofwAAAKigkv7fMNf/l61+4BXLd2uRHVu8ko2MRf8DAABABZX0/0a5/r/8xGs2O/62SS+3KF7J7opF/wMAAEAFlfT/xrn+v2KdQ4b0mrjtdesWr2R3x6L/AQAAoIJK+n+TXP9fufLWfVs2Oe0PZxWvZKNi0f8AAABQQSX9v2mu//8x6OSu45f74bI/Ll7J7olF/wMAAEAFlfR/+1z/DxswaLM97h0/8/bilWx0LPofAAAAKqik/zvk+v+f7XYacs5lR1w9rHgl+1cs+h8AAAAqqKT/N8v1/1Wtdu07qs+IbZoVr2T3xqL/AQAAoIJK+v8Xuf6/+txLu7YZtMVGNxSvZGNi0f8AAABQQSX9v3mu/6/ZqV/zVduf8MzSxSvZfbHofwAAAKigkv7/Za7/r31+s4+earHaSY2KV7L7Y9H/AAAAUEEl/b9Frv+ve/fQp0+fNWWvi4tXsgdi0f8AAABQQSX9/6tc/1+/zR2bHDGpV8u1ileysbHofwAAAKigkv7fMtf/N2yw/LhbN75h5KnFK9m/Y9H/AAAAUEEl/f/rXP/feMzEtlvtsuzA84tXsgdj0f8AAABQQSX9v1Wu/28a+PwSP+37VK/1ileyh2LR/wAAAFBBJf3fMdf/N7de+a1p59Sy5sUr2cOx6H8AAACooJL+3zrX/7cMeHG53h3venlE8Uo2Lhb9DwAAABVU0v+/yfX/re1azei3xn7XXVm8ko2PRf8DAABABZX0/za5/r+t1TJPPDz9qj/Ui1eyCbHofwAAAKigkv7fNtf/t5/77AYrTG27bL/ileyRWPQ/AAAAVFBJ//821//DZ/5s6wva/WfmysUr2aOx6H8AAACooJL+/12u/0d0eO2qvTrtfPXaxSvZY7HofwAAAKigkv7/fa7/79hu3OkbnTx4m78Wr2SPx6L/AQAAoIJK+v8Puf6/880f9XioR7eNViteyZ6IRf8DAABABZX0/x9z/T/yhqzb+dde9swpxSvZk7HofwAAAKigkv7fLtf/dzW7q9/e4xpOGlS8kk2MRf8DAABABZX0f6dc/9+97MyhGzcds9cmxSvZU7HofwAAAKigkv7fPtf/o4Zs/KsHF9uu5XXFK9nTseh/AAAAqKCS/t8h1//3PHLh5YuMHThyseKV7JlY9D8AAABUUEn/75jr/9E9d9zqg2EbDMyKV7JnY9H/AAAAUEEl/b9Trv//dXjXPw/bf2avocUr2XOx6H8AAACooJL+/1Ou/+8dOfSkLn0H7P/r4pXs+Vj0PwAAAFRQSf/vnOv/Mbt33330Lr8587XilWxSLPofAAAAKqik/3fJ9f99T1x0TLuNJ4+eVbySvRCL/gcAAIAKKun/zrn+v3/sBRftPqnVip2LV7LJseh/AAAAqKCS/u+S6/8HDtnlF2fOurPH+OKV7MVY9D8AAABUUEn/75rr/7EbNs0mtDhqwP7FK9lLseh/AAAAqKCS/t8t1///7vvASy3aP/xE9+KV7OVY9D8AAABUUEn/757r/wfPevuegwctvv7o4pXslVj0PwAAAFRQSf93zfX/Q2utu/IJfaZ2PLp4JZsSi/4HAACACirp/z1y/f/wtKV2uvCyNa58pnglezUW/Q8AAAAVVNL/e+b6f9z2E27Z997+H99fvJJNjUX/AwAAQAWV9H+3XP+P/8Wr56233ObN9ypeyV6LRf8DAABABZX0f/dc/0+YsVafB5o82enF4pXs9Vj0PwAAAFRQSf/vlev/R049dWCzicvcvEXxSjYtFv0PAAAAFVTS/3vn+v/RdTse8tFtN03+XfFK9kYs+h8AAAAqqKT/98n1/2MrHLD9Fd16N36neCV7Mxb9DwAAABVU0v9/zvX/4+fdfONO+w/b/5HileytWPQ/AAAAVFBJ/++b6/8nNuzVeeSwHmceUrySvR2L/gcAAIAKKun/Hrn+f7Lv9cPbjh01erfilew/seh/AAAAqKCS/u+Z6/+JZ500uPtijVccVbySzX5NAP0PAAAAFVTS//vl+v+ptbY9emDTC3tsW7ySvRuL/gcAAIAKKun//XP9//TWwxvWHNd5wLTiley9WPQ/AAAAVFBJ/x+Q6/9n3j/8teeufeuJD4tXsvdj0f8AAABQQSX9f2Cu/599of39p/RYe/0diley6bHofwAAAKigkv4/KNf/z+1w/KqHnnx/xxeKV7IPYtH/AAAAUEEl/X9wrv+f/9OeffbotMiV7YtXshmx6H8AAACooJL+75Xr/0mTLj7vnHZDP96+eCWb/ZoA+h8AAAAqqKT/D8n1/wvvnXfLqKl7NH+veCWbGYv+BwAAgAoq6f/euf6fvG2XndpMn9HpsOKVbFYs+h8AAAAqqKT/D831/4sbfnTje2usd/NTxSvZR7HofwAAAKigkv4/LNf/L/XdcPsmHc+ePLZ4Jfs4Fv0PAAAAFVTS/4fn+v/lsxod8vtztm/cs3gl+yQW/Q8AAAAVVNL/fXL9/8pa9w686KVGfXYsXpnz4fofAAAAKqik/4/I9f+UUxc+esP1R54/s3ilHo/R/wAAAFBFJf1/ZK7/X1131OAxO/Z88PXilXrjWPQ/AAAAVFBJ/x+V6/+pK8wYPqj/1WttU7xS/14s+h8AAAAqqKT/j871/2vnbdp5v3PX6XZ38Up9oVj0PwAAAFRQSf8fk+v/19sOvWHtzd85Ydf4xelfPK6+cCz6HwAAACqopP/75vp/2kldO9294i4Tehev1JvEov8BAACggkr6/9hc/78xeMfeZ38waJ1Hi1fqWSz6HwAAACqopP+Py/X/m6tceNaezbu33694pT774/U/AAAAVFBJ//fL9f9bL4149chRl1707+KVekMs+h8AAAAqqKT/++f6/+0ufRY57eL6exOLV+rfj0X/AwAAQAWV9P/xuf7/T8cOq088+r4lDy1eqS8Si/4HAACACirp/xNy/f/O2yeMWW33P+7ybvFK/Qex6H8AAACooJL+PzHX/+/2X2mV1+84a3in4pV601j0PwAAAFRQSf+flOv/9zadPLr5sxtO6VC8Um8Wi/4HAACACirp/5Nz/f/+Gk++2LHxhw2Ti1fqi8ai/wEAAKCCSvr/lFz/Tz+zeZNblmzZ557ilfpiseh/AAAAqKCS/h+Q6/8P2j4zrdWY58/vVrxSXzwW/Q8AAAAVVNL/p+b6f8ZJyy067vJtHjygeKW+RCz6HwAAACqopP9Py/X/h4Nbtu5/8OlrTSheqc/ufv0PAAAAFVTS/6fn+n/mKq+MPWTvJbp1KV6pLxmL/gcAAIAKKun/M3L9P2vzJW978MYJJ3xUvFJfKhb9DwAAABVU0v9n5vr/o4/H77Dxo0dOmFq8Ul86Fv0PAAAAFVTS/3/J9f/HU6cctnfD8HW2LF6p/ygW/Q8AAAAVVNL/f831/ye/bX3B+W/8qv1/ilfqy8Si/wEAAKCCov8Xyr3njNwvN/581H9cq3WYlnt/PH7R2d3/2d8RdD3i7XfnNb/w6Z38/Oy3aFSrLXTNlz6t+jd7VvM15/k0e+SFzWptao3yz/xTrefz+LPrSy9fa1NrXHj83B/wvXj8sp1n/eS4Wptaky8/fp+9e+6x56Fz3oxfrS+3Zc831qm1qdW//Pj99zywS8/99tgz3oz/XRpabr7X4q/W2tQW+vL/Unv37NUj92ZDjFbLvrniaZ99Pl96/EEH73Zwt4PmvPn9ePwK1x42uNe8Hn/g3J//IvH4FfddftFpTcfUFv7y4w/otd/Bu9UAAAD4byvp/zk9W6t1GJl7f3Tx1+7/Zeeetfn1//e+2bOarznP51vq//heidoPZ/X+5WvNbqnVv9zD++zX68Ceu+3bZgE8FwAAAPjKSvp/ztenF1D/Lzf3rM2v/xf+Zs9qvuY8n2+p/+Pzri8/6aMTHq6tV1tkXl+f73Lgbj277znXXwE0iY/7ySLDXzqstl6t2by/Tt+l615zf2gWH/fTI9//3YXNtqw1nefX3wsfBgAAwP9vSvp/Ts/Wan2PyX9YzMXyb3+F/l9+7lmL/gcAAAC+TSX9P+fr0vPp/6/79f+fzD1r+h8AAAC+AyX9P+f7y+fZ/4vNefMr9n9Diy/uzdZ47pvfqnrLmK1irhBzxZgrxVw55ioxV425WszZryOwRsw1Y/4sZvyrgPpaMeNb7+trx1wnZtuYP4/5PzHbxVw35nox14+5QcwNY24Uc+OYm8TcNGb7mB1ibhbzFzE3j/nLmFvE/FXM+JmP9V/H3Cpmx5hbx/xNzG1ibhvztzF/F/P3Mf8Q848xt4vZKeb2MXeIuWPMnWL+KebOMXeJ2Tlml5i7xoyXIqzvHrNrzD1ixuss1rvF7B5zr5h7x9wn5p9j7hszXnux3jPmfjH3j3lAzANjxisv1g+O2SvmITF7x4xXXKwfFvPwmH1iHhHzyJhHxTw6Zvzfbr1vzGNjHhezX8z+MY+PeULME2OeFPPkmKfEHBDz1JinxTw9Zvz/lPqZMf8S868xB8Y8K+bZMc+JeW7M82KeH/OCmINiDo75t5gXxhwS86KYf495ccxLYg6NeWnMy2JeHvOKmFfG/EfMYTH/GfOqmFfHjH/fVL825nUxr495Q8wbY94U8+aYt8S8NeZtMW+POTzmiJh3xLwzZvzbrfpdMe+OOSrmPTFHx/xXzHtjjol5X8z7Yz4Qc2zMf8d8MOZDMR+OOS7m+JgTYj4S89GYj8V8POYTMZ+MOTHmUzGfjvlMzGdjPhfz+ZiTYr4Qc3LMF2O+FPPlmK/EnBLz1ZhTY74W8/WY8Rq59TdivhnzrZhvx4yfoVN/J2b8OVl/L+b7MafH/CDmjJgfxpwZc1bMj2J+HPOTz2e8DGytIf6MbYg/dBviz7GG+PO/Ib7fryH+3r8h/vxvmP26s7NfT3b268TOfv3XH8RsGrNZzEVjxn8pNCwec4mY8fOCGpaMuVTMpWPGzxVuiK8zNMTrBjfE6wc1xL8jbIjvJ2yIrys0xH9fNDSPmfuZRgAAAAAAkL74+n/j3LvGfLE2eXzer8VXb1mrZU/Xao2mjxh83Rbf5Pff7hv65Nv6SQEAAACQkOj/Zl+8Z+FD/5ufDwAAALDg6X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEjfPPt/of/mZwQAAAAsaL7+DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp+5r9/8n3votPCgAAAFigfP0fAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSF/2/UO49Z+R+uf75aGhZq/U9Jv9hc//65293PeLtd+c1v/Dpnfz8VONGC+zJlGv6Hf5eAAAAUBkl/d8Qo9V8+n+Z/Ntfof9bzT1r33H/Lzrl89nk8XjHD7673xsAAAD+e0r6//ufj4YV5tP/I/Nvf4X+X2HuWYv+X2jrBfaE/ndL5D73T/2wVqv/oFZr/L0Fc77eYu779Za1WvZ0rdZo+oK5DwAAAP83Jf2/yOejYcX59P81+be/Qv+vOPesRf8v/PQCe0JfT6MdF6r/sfPRtdqu2zf/bE55KftsznHshrde2ejGOX8/Mftxzy/VfO7HfTd3AQAA4P+kpP/j++MbVqrVOkzLvb/x52PRr/v9/yvNPWd/7ELXfOnTavyNntT8zXk+zR55YbNam1qj/DP/VOv5PP7s+tLLN5tSa1x4fOtv6TMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4fO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADmCgAA//+879/f") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000001a80)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000006140)={0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff01}) 2m30.619251196s ago: executing program 0 (id=11871): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) 2m16.587997132s ago: executing program 32 (id=11871): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) 2.62274546s ago: executing program 2 (id=14822): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001080), 0x88000, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000011c0)={0x4, 0x2000, 0x0, 0x0, 0x0, 0x0}) 2.476319662s ago: executing program 2 (id=14824): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f00000000c0)={0x0, 0x7, @name="123000007d000000000000e2322995090000e200"}) 2.310854144s ago: executing program 2 (id=14827): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002000000000000000000000006001e"], 0x2c}}, 0x0) 2.114710718s ago: executing program 2 (id=14832): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="4200000003"], 0x42) 1.97495188s ago: executing program 2 (id=14834): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) 1.916774691s ago: executing program 5 (id=14836): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000042004003c002b8008000800", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="0a000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="080003000100000008000800", @ANYRES32, @ANYBLOB="08001b"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.851285802s ago: executing program 1 (id=14838): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) 1.730330414s ago: executing program 1 (id=14839): r0 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x0, 'macvtap0\x00', {0xffffffff}, 0x8}) 1.571796766s ago: executing program 1 (id=14842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000}) 1.483748187s ago: executing program 1 (id=14843): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000000000000007, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x0, 0x0, 0x34325842}}) 1.408477309s ago: executing program 5 (id=14845): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5f35, &(0x7f0000006180)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x8000) 1.2967157s ago: executing program 1 (id=14847): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000140)={"aa64153ccdac01e0ebac6b96ac8989d6f6465fa66814efd82676444cc4fb", 0xfffffffc}) 1.177527072s ago: executing program 1 (id=14851): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)={0x40, 0x0, 0x4, "59d11c5f"}, 0x0, 0x0, 0x0, 0x0}) 1.081234844s ago: executing program 4 (id=14853): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}) 1.009949375s ago: executing program 4 (id=14854): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0xfd, 0xfe, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000640)="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", 0x0, 0xfffffff9, 0x0, 0x1, 0x0}) 914.521197ms ago: executing program 4 (id=14856): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x9, 0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) 812.105868ms ago: executing program 4 (id=14859): r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3fe, 0x143a81) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) 635.497351ms ago: executing program 4 (id=14863): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000003e00), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_overlay={0xfffffff9, 0xc, 0x4, 0x70000, 0xa, {}, {0x1, 0x1, 0x6, 0x94, 0x8, 0x9, "d20e5bd4"}, 0x4, 0x3, {0x0}, 0x2}) 536.769272ms ago: executing program 4 (id=14864): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000000c0)={[{@intr}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@resv_level={'resv_level', 0x3d, 0x6}}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@commit={'commit', 0x3d, 0x60262b80}}]}, 0x1, 0x4434, &(0x7f0000008940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 536.622632ms ago: executing program 3 (id=14865): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) 486.791843ms ago: executing program 3 (id=14866): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) 414.665184ms ago: executing program 5 (id=14867): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x280408a, &(0x7f000001c380)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c636f6465706167653d3837342c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c726f6469722c73686f72746e616d653d77696e6e742c646973636172642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d69736f383835392d362c73686f72746e616d653d6d697865642c726f6469722c7569643d6e4ad8c43b1100c0344de5741a26aab12236c332332194bd77ef64fb4717db829730779da1ecad20a6cc9fce05bebfe6069c2be726472ef871d8ee192966e4932b15af666d4b1e6276e99d45706129bb5bd87be3c0c495d72155b0f4478eb0e8043c0799390cf1371a63f7eba9c846d0a0d12e041671ac7fc36b3d9ab0da8935c15000f2aadd2023d0122b2172a54dbef3f19d0912c8ec28868e8c957de4682b9578d4a642112b0082c497e263b2f17efe44900d41a04365d3a00ef997ff6464de4a454ca7c273d7a059038c6770931336f89068425b84a8ea1d81cc84a8cc4631c746", @ANYRESHEX, @ANYRESHEX=0x0], 0x97, 0x2b9, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) 352.805645ms ago: executing program 3 (id=14868): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100001e000100000000000000000001"], 0x114}], 0x1}, 0x0) 305.063895ms ago: executing program 5 (id=14869): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200000d1, &(0x7f0000000140), 0x1) 276.595086ms ago: executing program 3 (id=14870): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a}, {0x4, 0x1b}}]}]}, 0x50}}, 0x0) 206.358097ms ago: executing program 5 (id=14871): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x800000000001, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x3c}, 0xb, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) 130.832409ms ago: executing program 2 (id=14872): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x7ffffffe, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x3, 0x0, 0x1}}, 0x26) 130.278369ms ago: executing program 3 (id=14873): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000180)=""/160, &(0x7f00000000c0)=0xa0) 55.73799ms ago: executing program 5 (id=14874): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xa, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64d0, &(0x7f0000000280)) 0s ago: executing program 3 (id=14875): r0 = syz_open_dev$amidi(&(0x7f0000000100), 0x2, 0x8e01) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000240)="fd5905a31bc57999eda740408be47fedf6fc", 0x12}, {0x0, 0xaea}, {&(0x7f0000000280)="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", 0x9c}, {&(0x7f0000000000)="3e3a7eaea8e42c832b20fbe2fef72e13c6c6e7be48be4f23e8e98acd62604bbfbafb6deb4321555c28ab232fc7aa4749a7d68ee8401c11170ba8164edebee59d08f8d2553ab80d1d0f46b5c4c373580df315863eaa826847d78cc4185e362731e85750a35430630ef95f37c723ff01d8c7d0f831cb5b5c71a914aa9b3b272d7e41115ad6df9739629cefff144350ac108df99aaec55200b21ed8364393a933a0abda65e1e01ad6a0b70a15", 0xab}, {0x0}, {&(0x7f0000001540)="03b9212f46fac8e2aa12c67dc00e4d69a24d84f0948aaed118d050e41e76839d251405c310bde13855d070fdd0ad0d5fa52a094f147da9cc3ae2b23577834f1c2e8220c0f1bba31717c5f527edaf5d98ec6c8dc0d2598818bd7afad6558bb795cdfce4544723d3f6fa6be07c8ce3bb01f227e68b171334dc8f3f82a95221ab159228c8a3d3111f252a4a15023a07cbf0f500eea78fb03c13187cb06291d09c26e78892cba60b9b1d35ad02591c05ef7a4e476507e44c957c54db222388d58c974b48e35e666ee46d38153ada36", 0xcd}, {&(0x7f0000002ac0)="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", 0xf18}], 0x7) kernel console output (not intermixed with test programs): decompress -5 in[4096, 0] out[4096] [ 1027.719631][ T801] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 1027.828962][ T812] loop1: detected capacity change from 0 to 4096 [ 1027.906518][ T812] ntfs: volume version 3.1. [ 1028.356793][ T845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12895'. [ 1028.402118][ T845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12895'. [ 1028.678595][ T874] loop4: detected capacity change from 0 to 256 [ 1028.725430][ T878] loop5: detected capacity change from 0 to 16 [ 1028.769604][ T874] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1028.791750][ T878] erofs: (device loop5): mounted with root inode @ nid 36. [ 1028.825813][ T871] loop2: detected capacity change from 0 to 8192 [ 1028.899411][ T882] ipt_ECN: cannot use operation on non-tcp rule [ 1028.935834][ T871] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1029.193541][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1029.272910][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1029.318784][ T900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1029.805058][ T355] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1029.910789][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1029.946695][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1029.969058][ T954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1029.981465][ T952] loop2: detected capacity change from 0 to 4096 [ 1030.054950][ T952] __ntfs_error: 8 callbacks suppressed [ 1030.054969][ T952] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1030.110752][ T952] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1030.149894][ T952] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1030.248380][ T952] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1030.299012][ T355] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1030.317470][ T355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.378189][ T355] usb 5-1: Product: syz [ 1030.394707][ T952] ntfs: volume version 3.1. [ 1030.399669][ T355] usb 5-1: Manufacturer: syz [ 1030.408072][ T970] xt_CONNSECMARK: invalid mode: 0 [ 1030.412530][ T355] usb 5-1: SerialNumber: syz [ 1030.483161][ T355] usb 5-1: config 0 descriptor?? [ 1030.570871][ T355] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 035 [ 1030.765308][ T355] (null): failure setting delay to 10us [ 1030.771061][ T355] i2c-tiny-usb: probe of 5-1:0.0 failed with error -5 [ 1030.831758][ T355] usb 5-1: USB disconnect, device number 35 [ 1030.864305][ T985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12959'. [ 1030.966922][ T984] device ~ÿ entered promiscuous mode [ 1031.132475][ T998] netlink: 160 bytes leftover after parsing attributes in process `syz.3.12969'. [ 1031.149469][ T997] netlink: 420 bytes leftover after parsing attributes in process `syz.1.12968'. [ 1031.165998][ T1000] loop5: detected capacity change from 0 to 64 [ 1031.273512][ T1004] loop3: detected capacity change from 0 to 512 [ 1031.336996][ T1008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12976'. [ 1031.352371][ T1008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12976'. [ 1031.361551][ T1008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12976'. [ 1031.415668][ T1015] netlink: 'syz.5.12975': attribute type 1 has an invalid length. [ 1031.435364][ T1008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12976'. [ 1031.441570][ T1015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12975'. [ 1031.462442][ T1004] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1031.485741][ T1008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12976'. [ 1031.495752][ T1008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12976'. [ 1031.505193][ T1004] ext4 filesystem being mounted at /2526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.722809][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1031.742659][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1031.752116][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1032.227804][ T1049] loop5: detected capacity change from 0 to 1024 [ 1032.330695][ T1049] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1032.350684][ T1049] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 1032.437209][ T1049] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1032.475517][ T1010] loop4: detected capacity change from 0 to 32768 [ 1032.533681][ T1049] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,sysvgroups,resuid=0x0000000000000000,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1032.624392][ T1010] find_entry called with index >= next_index [ 1032.697088][ T1010] find_entry called with index >= next_index [ 1032.733230][ T1010] find_entry called with index >= next_index [ 1033.789532][ T1095] loop2: detected capacity change from 0 to 32768 [ 1034.175626][ T1147] loop4: detected capacity change from 0 to 2048 [ 1034.301201][ T1155] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1034.459845][ T1157] loop1: detected capacity change from 0 to 4096 [ 1034.543345][ T1157] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1034.602931][ T1157] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1034.661143][ T1157] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1034.711351][ T1157] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1034.750187][ T1157] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1034.763666][ T1157] ntfs: volume version 3.1. [ 1034.770848][ T1171] loop4: detected capacity change from 0 to 1024 [ 1034.800970][ T1157] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1034.837545][ T1157] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1034.903752][ T1157] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1034.949929][ T1157] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1034.964213][ T1171] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1035.025224][ T1157] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1035.062945][ T1145] loop5: detected capacity change from 0 to 32768 [ 1035.081025][ T1157] ntfs: (device loop1): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 1035.094556][ T1157] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 1035.108604][ T1157] ntfs: (device loop1): load_and_init_quota(): Failed to load $Quota/$Q index. [ 1035.117581][ T1157] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 1035.483895][ T1206] netlink: del zone limit has 4 unknown bytes [ 1035.567334][ T1209] __nla_validate_parse: 16 callbacks suppressed [ 1035.567353][ T1209] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13051'. [ 1035.627250][ T1209] netlink: 'syz.4.13051': attribute type 1 has an invalid length. [ 1035.821477][ T1222] loop5: detected capacity change from 0 to 64 [ 1035.959602][ T1219] loop2: detected capacity change from 0 to 4096 [ 1035.983731][ T1233] netlink: 'syz.1.13062': attribute type 12 has an invalid length. [ 1036.041366][ T1219] ntfs3: Invalid value for gid. [ 1036.323321][ T1252] loop5: detected capacity change from 0 to 256 [ 1036.342575][ T1253] loop4: detected capacity change from 0 to 512 [ 1036.417528][ T1253] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,inode_readahead_blks=0x0000000000000800,minixdf,quota,,errors=continue. Quota mode: writeback. [ 1036.417799][ T1263] loop2: detected capacity change from 0 to 64 [ 1036.479791][ T1252] FAT-fs (loop5): Directory bread(block 64) failed [ 1036.492422][ T1252] FAT-fs (loop5): Directory bread(block 65) failed [ 1036.494157][ T1253] ext4 filesystem being mounted at /2651/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.511291][ T1260] loop1: detected capacity change from 0 to 1024 [ 1036.530206][ T1252] FAT-fs (loop5): Directory bread(block 66) failed [ 1036.584624][ T1260] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1036.597750][ T1252] FAT-fs (loop5): Directory bread(block 67) failed [ 1036.618094][ T1252] FAT-fs (loop5): Directory bread(block 68) failed [ 1036.625254][ T1260] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1036.634476][ T1260] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1036.655939][ T1252] FAT-fs (loop5): Directory bread(block 69) failed [ 1036.664339][ T1260] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,sysvgroups,resuid=0x0000000000000000,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1036.702103][ T1252] FAT-fs (loop5): Directory bread(block 70) failed [ 1036.717964][ T1252] FAT-fs (loop5): Directory bread(block 71) failed [ 1036.727317][ T1252] FAT-fs (loop5): Directory bread(block 72) failed [ 1036.734640][ T1252] FAT-fs (loop5): Directory bread(block 73) failed [ 1036.879546][ T6758] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1037.177729][ T6845] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1037.438267][ T6845] usb 3-1: Using ep0 maxpacket: 32 [ 1037.465389][ T6758] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1037.480768][ T6758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.489544][T32356] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1037.498367][ T6758] usb 4-1: Product: syz [ 1037.502684][ T6758] usb 4-1: Manufacturer: syz [ 1037.507926][ T6758] usb 4-1: SerialNumber: syz [ 1037.515820][ T6758] usb 4-1: config 0 descriptor?? [ 1037.550651][ T6845] usb 3-1: config 0 has an invalid interface number: 242 but max is 0 [ 1037.560588][ T6758] hub 4-1:0.0: bad descriptor, ignoring hub [ 1037.566631][ T6758] hub: probe of 4-1:0.0 failed with error -5 [ 1037.566969][ T6845] usb 3-1: config 0 has no interface number 0 [ 1037.576782][ T6758] f81232 4-1:0.0: f81534a converter detected [ 1037.712705][ T1283] loop1: detected capacity change from 0 to 32768 [ 1037.736955][T32356] usb 5-1: Using ep0 maxpacket: 8 [ 1037.737577][ T6845] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=eb.4e [ 1037.751486][ T1283] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.13084 (1283) [ 1037.758066][ T6845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.766325][ T6758] usb 4-1: f81534a converter now attached to ttyUSB0 [ 1037.781525][ T6845] usb 3-1: Product: syz [ 1037.787379][ T6845] usb 3-1: Manufacturer: syz [ 1037.792186][ T6845] usb 3-1: SerialNumber: syz [ 1037.834009][ T6845] usb 3-1: config 0 descriptor?? [ 1037.848733][ T1283] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1037.867653][T32356] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1037.894330][ T1283] BTRFS info (device loop1): using free space tree [ 1037.901374][T32356] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1037.910402][ T1283] BTRFS info (device loop1): has skinny extents [ 1038.081908][ T6845] cdc_subset: probe of 3-1:0.242 failed with error -22 [ 1038.110617][ T5758] usb 4-1: USB disconnect, device number 40 [ 1038.128827][T32356] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1038.145162][ T5758] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 1038.172907][T32356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.184931][ T1283] BTRFS info (device loop1): enabling ssd optimizations [ 1038.204457][ T5758] f81232 4-1:0.0: device disconnected [ 1038.210044][T32356] usb 5-1: Product: syz [ 1038.215727][T32356] usb 5-1: Manufacturer: syz [ 1038.244650][T32356] usb 5-1: SerialNumber: syz [ 1038.263229][T32356] usb 5-1: config 0 descriptor?? [ 1038.273673][ T6845] usb 3-1: USB disconnect, device number 53 [ 1038.318137][T32356] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1038.444781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.513123][T32356] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1038.533859][T32356] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 1038.584338][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.624861][ T13] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1038.722992][ T6845] usb 5-1: USB disconnect, device number 36 [ 1038.995576][ T13] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 1039.004271][ T13] usb 6-1: config 0 has no interface number 0 [ 1039.044770][ T13] usb 6-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1039.131603][ T1351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13108'. [ 1039.228580][ T13] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 1039.269410][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.298359][ T13] usb 6-1: Product: syz [ 1039.298430][ T1359] netlink: 'syz.1.13111': attribute type 1 has an invalid length. [ 1039.302577][ T13] usb 6-1: Manufacturer: syz [ 1039.302612][ T13] usb 6-1: SerialNumber: syz [ 1039.310591][ T13] usb 6-1: config 0 descriptor?? [ 1039.416532][ T13] usb 6-1: Found UVC 0.00 device syz (05ac:8501) [ 1039.423087][ T13] usb 6-1: No valid video chain found. [ 1039.460944][ T1359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13111'. [ 1039.549626][ T1365] loop3: detected capacity change from 0 to 4096 [ 1039.607657][ T13] usb 6-1: USB disconnect, device number 6 [ 1039.653824][ T1365] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1039.960522][ T1396] netlink: 'syz.4.13130': attribute type 2 has an invalid length. [ 1039.961918][ T1394] loop3: detected capacity change from 0 to 512 [ 1040.014693][ T1399] smc: removing ib device syz0 [ 1040.126015][ T1394] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000002000,inode_readahead_blks=0x0000000000000800,minixdf,quota,,errors=continue. Quota mode: writeback. [ 1040.152690][ T1394] ext4 filesystem being mounted at /2559/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.494564][ C1] vkms_vblank_simulate: vblank timer overrun [ 1040.616515][ T6845] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1040.654463][ T1427] loop1: detected capacity change from 0 to 16 [ 1040.709795][ T1427] erofs: (device loop1): mounted with root inode @ nid 36. [ 1040.793561][ T1427] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 46 [ 1040.890520][ T1410] loop5: detected capacity change from 0 to 32768 [ 1040.952683][ T6845] usb 5-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 1040.970179][ T1435] loop3: detected capacity change from 0 to 1024 [ 1040.998624][ T1410] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.13135 (1410) [ 1041.000739][ T6845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.069377][ T1410] BTRFS: Invalid seeding and uuid-changed device detected [ 1041.094362][ T1435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1041.130520][ T6845] ums-cypress 5-1:1.0: USB Mass Storage device detected [ 1041.185648][ T5040] udevd[5040]: incorrect btrfs checksum on /dev/loop5 [ 1041.336894][ T6335] usb 5-1: USB disconnect, device number 37 [ 1042.086888][ T1477] loop3: detected capacity change from 0 to 512 [ 1042.138006][ T1410] loop5: detected capacity change from 0 to 32768 [ 1042.188741][ T1477] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1042.259066][ T1410] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1042.278816][ T1410] BTRFS error (device loop5): superblock metadata_uuid doesn't match metadata uuid of fs_devices: 3d39d0ba-bdae-447e-827b-b091e1a68885 != 00000000-0000-0000-0000-000000000000 [ 1042.296175][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.302928][T11654] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1042.313353][ T1477] EXT4-fs (loop3): 1 truncate cleaned up [ 1042.313892][ T1410] BTRFS error (device loop5): dev_item UUID does not match metadata fsid: 00000000-0000-0000-0000-000000000000 != 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1042.319032][ T1477] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1042.373773][ T1410] BTRFS error (device loop5): superblock contains fatal errors [ 1042.382511][ T1410] BTRFS error (device loop5): open_ctree failed: -22 [ 1042.524159][ T5040] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by udevd (5040) [ 1042.556010][T11654] usb 5-1: Using ep0 maxpacket: 16 [ 1042.685941][T11654] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.706373][T11654] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 34, changing to 9 [ 1042.733020][T11654] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.769905][T11654] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1042.863718][T11654] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1042.891206][T11654] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1042.899369][T11654] usb 5-1: Manufacturer: syz [ 1042.930954][T11654] usb 5-1: config 0 descriptor?? [ 1043.094325][ T1514] loop1: detected capacity change from 0 to 1024 [ 1043.184808][T11654] usb 5-1: USB disconnect, device number 38 [ 1043.489903][ T1531] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13189'. [ 1043.802867][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1043.802885][ T26] audit: type=1400 audit(1753099712.837:249): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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loop5: detected capacity change from 0 to 256 [ 1044.069392][ C1] vkms_vblank_simulate: vblank timer overrun [ 1044.106542][ T1552] loop4: detected capacity change from 0 to 4096 [ 1044.116143][ T1539] loop1: detected capacity change from 0 to 8192 [ 1044.168621][ T1539] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1044.196428][ T1539] REISERFS (device loop1): using ordered data mode [ 1044.201233][ T1556] FAT-fs (loop5): bogus logical sector size 2238 [ 1044.222843][ T1539] reiserfs: using flush barriers [ 1044.225377][ T1556] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1044.233956][ T1552] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1044.267150][ T1539] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1044.271917][ T1552] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1044.298223][ T1539] REISERFS (device loop1): checking transaction log (loop1) [ 1044.307221][ T1552] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1044.323436][ T1552] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1044.392638][ T1556] binder: Bad value for 'stats' [ 1044.469017][ T1552] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1044.554775][ T1568] loop5: detected capacity change from 0 to 16 [ 1044.570278][ T1552] ntfs: volume version 3.1. [ 1044.623248][ T1568] erofs: (device loop5): mounted with root inode @ nid 36. [ 1044.643254][ T1552] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1044.684749][ T1539] REISERFS (device loop1): Using tea hash to sort names [ 1044.692564][ T1552] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1044.717654][ T1539] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1044.753179][ T1552] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1044.772300][ T1539] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1044.802398][ T1552] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 1044.900919][ T1578] loop5: detected capacity change from 0 to 512 [ 1045.181034][ T1578] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 1045.267927][ T1578] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.481997][ T1597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13221'. [ 1045.750939][ T1609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13227'. [ 1045.907888][ T1617] loop1: detected capacity change from 0 to 8 [ 1046.077260][ T1617] SQUASHFS error: xz decompression failed, data probably corrupt [ 1046.106925][ T6845] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1046.140892][ T1617] SQUASHFS error: Failed to read block 0xa8: -5 [ 1046.163641][ T1617] SQUASHFS error: xz decompression failed, data probably corrupt [ 1046.180239][ T1617] SQUASHFS error: Failed to read block 0xa8: -5 [ 1046.232521][ T1632] netlink: 5284 bytes leftover after parsing attributes in process `syz.2.13236'. [ 1046.330724][ T6845] usb 5-1: Using ep0 maxpacket: 32 [ 1046.424916][ T1638] loop3: detected capacity change from 0 to 8 [ 1046.461167][ T6845] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1046.470424][ T6845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.494751][ T6845] usb 5-1: config 0 descriptor?? [ 1046.530990][ T1648] loop2: detected capacity change from 0 to 2048 [ 1046.538885][ T6845] rndis_host: probe of 5-1:0.0 failed with error -22 [ 1046.548502][ T1638] SQUASHFS error: xz decompression failed, data probably corrupt [ 1046.562545][ T1638] SQUASHFS error: Failed to read block 0x108: -5 [ 1046.569657][ T1638] SQUASHFS error: Unable to read metadata cache entry [106] [ 1046.577419][ T1638] SQUASHFS error: Unable to read inode 0x11f [ 1046.638659][ T1648] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1046.746314][T11654] usb 5-1: USB disconnect, device number 39 [ 1047.039448][ T1663] netlink: 'syz.2.13251': attribute type 1 has an invalid length. [ 1047.597701][ T1644] loop1: detected capacity change from 0 to 40427 [ 1047.747530][ T21] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1047.893130][ T1711] loop2: detected capacity change from 0 to 512 [ 1048.030442][ T1722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13281'. [ 1048.073337][ T1711] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1048.121062][ T1711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 1048.148420][ T21] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1048.166742][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.177493][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1048.189825][ T1711] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1048.194932][ T21] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1048.206001][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.221442][ T21] usb 5-1: config 0 descriptor?? [ 1048.237706][ T1727] netlink: 'syz.5.13283': attribute type 3 has an invalid length. [ 1048.254723][ T1711] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.13275: bg 0: block 361: padding at end of block bitmap is not set [ 1048.257996][ T1731] netlink: 136 bytes leftover after parsing attributes in process `syz.3.13285'. [ 1048.299397][ T21] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1048.328647][ T21] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1048.349527][ T1711] EXT4-fs (loop2): Remounting filesystem read-only [ 1048.388086][ T1711] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1048.406412][ T1739] netlink: 'syz.5.13288': attribute type 28 has an invalid length. [ 1048.422775][ T1711] EXT4-fs (loop2): Remounting filesystem read-only [ 1048.453296][ T1711] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.13275: attempt to clear invalid blocks 33619980 len 1 [ 1048.516348][ T1711] EXT4-fs (loop2): Remounting filesystem read-only [ 1048.550763][ T1711] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.13275: invalid indirect mapped block 1811939328 (level 0) [ 1048.567697][ T6845] usb 5-1: USB disconnect, device number 40 [ 1048.595550][ T1711] EXT4-fs (loop2): Remounting filesystem read-only [ 1048.602148][ T1711] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.13275: invalid indirect mapped block 2185560079 (level 1) [ 1048.740157][ T1711] EXT4-fs (loop2): Remounting filesystem read-only [ 1048.754450][ T1711] EXT4-fs (loop2): 1 truncate cleaned up [ 1048.770188][ T1711] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none. [ 1049.310286][ T1786] i2c i2c-0: Invalid block write size 33 [ 1049.517589][ T21] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1049.602215][ T1807] netlink: 84 bytes leftover after parsing attributes in process `syz.4.13322'. [ 1049.751025][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 1049.879807][ T21] usb 2-1: config 0 has no interfaces? [ 1049.917600][ T1831] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1050.049752][ T21] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1050.078409][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.086610][ T1841] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1050.110166][ T21] usb 2-1: Product: syz [ 1050.132552][ T21] usb 2-1: Manufacturer: syz [ 1050.137670][ T21] usb 2-1: SerialNumber: syz [ 1050.164892][ T21] r8152-cfgselector 2-1: config 0 descriptor?? [ 1050.254801][ T1852] openvswitch: netlink: Message has 4 unknown bytes. [ 1050.320164][ T1855] nfs4: Bad value for 'source' [ 1050.423029][ T21] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 1050.436840][ T6758] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1050.459406][T11654] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1050.614438][ T21] usb 2-1: USB disconnect, device number 36 [ 1050.695347][T11654] usb 5-1: Using ep0 maxpacket: 16 [ 1050.765211][ T1874] loop2: detected capacity change from 0 to 512 [ 1050.814860][T11654] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1050.825686][T11654] usb 5-1: config 0 has no interface number 0 [ 1050.851889][ T6758] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1050.868186][ T6758] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1050.912338][ T1874] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 1050.952401][ T1874] ext4 filesystem being mounted at /2751/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1050.992239][ T1887] tc_dump_action: action bad kind [ 1051.037881][T11654] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1051.063501][T11654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.080813][T11654] usb 5-1: Product: syz [ 1051.085924][ T6758] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1051.108103][T11654] usb 5-1: Manufacturer: syz [ 1051.127413][ T6758] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1051.145121][T11654] usb 5-1: SerialNumber: syz [ 1051.153148][ T6758] usb 6-1: Product: syz [ 1051.157362][ T6758] usb 6-1: Manufacturer: syz [ 1051.171911][T11654] usb 5-1: config 0 descriptor?? [ 1051.180052][ T6758] usb 6-1: SerialNumber: syz [ 1051.217118][T11654] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1051.245088][ T6758] usb 6-1: config 0 descriptor?? [ 1051.283996][ T6758] usb 6-1: selecting invalid altsetting 0 [ 1051.399159][ T1895] loop3: detected capacity change from 0 to 4096 [ 1051.445167][ T1895] __ntfs_error: 6 callbacks suppressed [ 1051.445184][ T1895] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1051.491030][ T1895] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 1051.516736][ T1895] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1051.545125][ T1895] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1051.554573][ T6758] usb 6-1: USB disconnect, device number 7 [ 1051.578520][ T1895] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1051.606616][ T1895] ntfs: volume version 3.1. [ 1051.618048][ T1895] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1051.630129][T11654] gspca_spca1528: reg_w err -71 [ 1051.636291][ T1895] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1051.655112][ T1895] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1051.670667][T11654] spca1528: probe of 5-1:0.1 failed with error -71 [ 1051.684057][T11654] usb 5-1: USB disconnect, device number 41 [ 1051.690344][ T1895] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1051.702728][ T1907] netlink: 'syz.1.13369': attribute type 1 has an invalid length. [ 1051.713129][ T1895] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1051.769927][ T1909] netlink: 'syz.1.13370': attribute type 1 has an invalid length. [ 1051.918616][ T1914] netlink: 'syz.1.13372': attribute type 8 has an invalid length. [ 1052.321760][ T1932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1052.346936][ T1932] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1052.381990][ T1932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1052.426961][ T1932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1052.468759][ T1932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.522853][ T1932] device bridge_slave_1 left promiscuous mode [ 1052.564162][ T1932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.600825][ T1932] bond0: (slave bond_slave_1): Releasing backup interface [ 1052.743329][ T1932] team0: Port device team_slave_0 removed [ 1052.809985][ T1953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13392'. [ 1052.838918][ T1932] team0: Port device team_slave_1 removed [ 1052.856060][ T1932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.892549][ T1932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.922075][ T1932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1052.949045][ T1932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.008583][ T1933] netlink: 156 bytes leftover after parsing attributes in process `syz.5.13382'. [ 1053.029668][ T1919] loop1: detected capacity change from 0 to 32768 [ 1053.293578][ T1973] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13402'. [ 1053.703626][ T1993] loop2: detected capacity change from 0 to 1024 [ 1053.877432][ T1993] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,grpquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 1053.931771][ T2015] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13421'. [ 1053.957204][ T2015] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1053.983044][ T2015] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1054.001363][ T2015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1054.051968][ T2008] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 1054.348848][ T2034] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1054.393993][ T2036] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1054.578402][ T2036] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1054.591975][ T2052] loop4: detected capacity change from 0 to 256 [ 1054.702489][ T2052] FAT-fs (loop4): Directory bread(block 64) failed [ 1054.775044][ T2052] FAT-fs (loop4): Directory bread(block 65) failed [ 1054.781714][ T2052] FAT-fs (loop4): Directory bread(block 66) failed [ 1054.849448][ T2052] FAT-fs (loop4): Directory bread(block 67) failed [ 1054.856122][ T2052] FAT-fs (loop4): Directory bread(block 68) failed [ 1054.920476][ T2052] FAT-fs (loop4): Directory bread(block 69) failed [ 1054.927565][ T2062] loop2: detected capacity change from 0 to 16 [ 1054.947563][ T2052] FAT-fs (loop4): Directory bread(block 70) failed [ 1054.980324][ T2052] FAT-fs (loop4): Directory bread(block 71) failed [ 1054.987021][ T2052] FAT-fs (loop4): Directory bread(block 72) failed [ 1055.008332][ T2062] erofs: (device loop2): mounted with root inode @ nid 36. [ 1055.048766][ T2052] FAT-fs (loop4): Directory bread(block 73) failed [ 1055.122237][ T2073] netlink: 'syz.3.13447': attribute type 21 has an invalid length. [ 1055.162091][ T2075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13449'. [ 1055.510155][ T2092] loop1: detected capacity change from 0 to 64 [ 1055.592675][ T2098] netlink: 'syz.2.13461': attribute type 1 has an invalid length. [ 1055.923237][ T2118] loop4: detected capacity change from 0 to 1024 [ 1055.993855][ T2118] EXT4-fs (loop4): Ignoring removed orlov option [ 1056.008174][ T2118] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1056.035452][ T2118] EXT4-fs (loop4): error: journal path ./file0 is not a block device [ 1056.375719][ T2155] netlink: 'syz.3.13489': attribute type 2 has an invalid length. [ 1056.436606][ T2161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13491'. [ 1056.446255][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1056.510152][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1056.533781][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1056.571478][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1056.667684][ T2162] bond0: (slave bond_slave_1): Releasing backup interface [ 1056.823867][ T2162] team0: Port device team_slave_0 removed [ 1056.875895][ T2192] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1056.913847][ T2162] team0: Port device team_slave_1 removed [ 1056.947908][ T2162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.967117][ T2162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.985325][ T2162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.050649][ T2198] IPVS: length: 212 != 24 [ 1057.068737][ T2162] team0: Port device geneve0 removed [ 1057.093776][ T2162] bond0: (slave netdevsim0): Releasing backup interface [ 1057.291570][ T2202] netlink: 'syz.1.13513': attribute type 1 has an invalid length. [ 1057.329209][ T2202] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13513'. [ 1057.504783][ T2208] loop3: detected capacity change from 0 to 8192 [ 1057.616639][ T2208] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1057.678399][ T2208] REISERFS (device loop3): using ordered data mode [ 1057.731225][ T2208] reiserfs: using flush barriers [ 1057.748249][ T6845] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1057.756162][ T2208] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1057.773019][ T2208] REISERFS (device loop3): checking transaction log (loop3) [ 1058.075478][ T2208] REISERFS (device loop3): Using tea hash to sort names [ 1058.082784][ T2208] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1058.083735][ T6845] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1058.141679][ T6845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.173760][ T6845] usb 5-1: config 0 has no interface number 0 [ 1058.210687][ T6845] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1058.250177][ T6845] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1058.295457][ T2234] kAFS: No cell specified [ 1058.342723][ T2236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1058.379488][ T2236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1058.399540][ T2232] loop1: detected capacity change from 0 to 4096 [ 1058.409983][ T2236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1058.437783][ T6845] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1058.453225][ T2236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.462379][ T6845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.483572][ T2236] device bridge_slave_1 left promiscuous mode [ 1058.493398][ T6845] usb 5-1: Product: syz [ 1058.493922][ T2236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.525095][ T6845] usb 5-1: Manufacturer: syz [ 1058.534843][ T6845] usb 5-1: SerialNumber: syz [ 1058.545393][ T6845] usb 5-1: config 0 descriptor?? [ 1058.586339][ T2236] bond0: (slave bond_slave_0): Releasing backup interface [ 1058.690770][ T2236] bond0: (slave bond_slave_1): Releasing backup interface [ 1058.980665][ T2236] team0: Port device team_slave_0 removed [ 1058.991691][ T4262] usb 5-1: USB disconnect, device number 42 [ 1059.038013][ T2236] team0: Port device team_slave_1 removed [ 1059.053902][ T2236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.061394][ T2236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.069642][T11654] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1059.096970][ T2236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1059.109569][ T2236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1059.409367][ T2270] loop5: detected capacity change from 0 to 1024 [ 1059.444628][T11654] usb 4-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 1059.462912][T11654] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 1059.491178][T11654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1059.552863][ T2274] misc userio: No port type given on /dev/userio [ 1059.703525][ T2284] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.13552'. [ 1059.718557][ C1] vkms_vblank_simulate: vblank timer overrun [ 1059.742903][T11654] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1059.763546][T11654] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1059.797126][T11654] usb 4-1: Product: syz [ 1059.809551][T11654] usb 4-1: Manufacturer: syz [ 1059.827287][T11654] usb 4-1: SerialNumber: syz [ 1059.847277][T11654] usb 4-1: config 0 descriptor?? [ 1060.129831][T11654] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 1060.278646][ T6758] usb 4-1: USB disconnect, device number 41 [ 1060.436886][ T2317] loop5: detected capacity change from 0 to 64 [ 1060.446803][ T2318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge4: link becomes ready [ 1060.491955][ T2320] UBIFS error (pid: 2320): cannot open "", error -22 [ 1060.537088][ T8155] udevd[8155]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1060.862433][ T2340] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1061.241179][ T2366] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1061.656431][ T2396] loop4: detected capacity change from 0 to 1024 [ 1061.681835][ T2398] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1061.704001][T11654] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1061.744064][ T2400] loop3: detected capacity change from 0 to 64 [ 1062.128605][T11654] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 1062.147756][T11654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.177464][T11654] usb 2-1: config 0 descriptor?? [ 1062.182408][ T2387] loop2: detected capacity change from 0 to 32768 [ 1062.198928][ T2416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13615'. [ 1062.295761][ T2387] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1062.380615][ T2427] bond0: (slave gre0): Error: Device type is different from other slaves [ 1062.414246][ T2387] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1062.551215][ T2437] xt_bpf: check failed: parse error [ 1062.579810][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 1062.632524][T11654] mxuport 2-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1062.657781][T11654] mxuport: probe of 2-1:0.0 failed with error -5 [ 1062.735092][T11654] usb 2-1: USB disconnect, device number 37 [ 1063.234551][ T2468] loop5: detected capacity change from 0 to 128 [ 1063.514493][ T4262] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1063.662362][ T2492] loop2: detected capacity change from 0 to 128 [ 1063.699847][ T2492] autofs4:pid:2492:autofs_fill_super: called with bogus options [ 1063.728431][ T2482] loop1: detected capacity change from 0 to 8192 [ 1063.747887][ T2494] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1063.764450][ T4262] usb 4-1: Using ep0 maxpacket: 8 [ 1063.879817][ T2482] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1063.926524][ T2482] REISERFS (device loop1): using ordered data mode [ 1063.965450][ T2482] reiserfs: using flush barriers [ 1063.974402][ T2482] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1064.030379][ T4262] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 1064.049219][ T4262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.057271][ T4262] usb 4-1: Product: syz [ 1064.062349][ T2482] REISERFS (device loop1): checking transaction log (loop1) [ 1064.081268][ T4262] usb 4-1: Manufacturer: syz [ 1064.107769][ T2482] REISERFS (device loop1): Using r5 hash to sort names [ 1064.110855][ T4262] usb 4-1: SerialNumber: syz [ 1064.126616][ T2514] netlink: 'syz.5.13655': attribute type 10 has an invalid length. [ 1064.143022][ T4262] usb 4-1: config 0 descriptor?? [ 1064.145273][ T2482] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1064.186608][ T2514] device veth1_macvtap left promiscuous mode [ 1064.234958][ T2514] bridge0: port 1(macsec0) entered blocking state [ 1064.253371][ T13] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1064.292144][ T2514] bridge0: port 1(macsec0) entered disabled state [ 1064.304113][ T2514] device macsec0 entered promiscuous mode [ 1064.412816][ T4262] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1064.432882][ T4262] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22 [ 1064.458765][ T4262] usb 4-1: USB disconnect, device number 42 [ 1064.497395][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 1064.548788][ T2529] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1064.566606][ T2529] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1064.616982][ T13] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.648932][ T13] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.678632][ T13] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1064.690391][ T2537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13663'. [ 1064.707324][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.718463][ T2537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13663'. [ 1064.763427][ T2539] NILFS (nullb0): couldn't find nilfs on the device [ 1064.785897][ T13] hub 3-1:4.0: USB hub found [ 1064.808772][ T2541] loop4: detected capacity change from 0 to 512 [ 1064.938657][ T2541] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 1064.954034][ T2541] ext4 filesystem being mounted at /2742/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.981622][ T13] hub 3-1:4.0: 16 ports detected [ 1064.986671][ T13] usb 3-1: selecting invalid altsetting 1 [ 1065.023081][ T13] hub 3-1:4.0: Using single TT (err -22) [ 1065.065213][ T2541] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.13665: invalid size [ 1065.092489][ T13] hub 3-1:4.0: insufficient power available to use all downstream ports [ 1065.162660][ T2555] nft_compat: unsupported protocol 1 [ 1065.195357][ T13] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1065.210320][ T13] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1065.307889][ T13] usb 3-1: USB disconnect, device number 54 [ 1065.458440][ T2568] loop3: detected capacity change from 0 to 64 [ 1065.593629][ T2576] loop1: detected capacity change from 0 to 64 [ 1065.883251][ T2593] device bridge0 entered promiscuous mode [ 1065.901413][ T2601] loop5: detected capacity change from 0 to 128 [ 1066.164276][ T355] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1066.183194][ T2616] bond0: option min_links: invalid value (18446744071562067969) [ 1066.199831][ T2616] bond0: option min_links: allowed values 0 - 2147483647 [ 1066.677154][ T355] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1066.696116][ T355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.704185][ T355] usb 3-1: Product: syz [ 1066.714389][ T355] usb 3-1: Manufacturer: syz [ 1066.723608][ T355] usb 3-1: SerialNumber: syz [ 1066.739895][ T355] usb 3-1: config 0 descriptor?? [ 1066.801313][ T355] usb 3-1: selecting invalid altsetting 3 [ 1066.820070][ T355] comedi comedi5: could not set alternate setting 3 in high speed [ 1066.844077][ T355] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1066.863177][ T4262] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1066.896270][ T355] usbdux: probe of 3-1:0.0 failed with error -22 [ 1067.027177][ T2642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13705'. [ 1067.029404][ T355] usb 3-1: USB disconnect, device number 55 [ 1067.097969][ T2642] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13705'. [ 1067.155237][ T2642] device bridge0 entered promiscuous mode [ 1067.213040][ T4262] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1067.265032][ T4262] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.301323][ T4262] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1067.348386][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.349190][ T2656] kAFS: unable to lookup cell 's@dÁHž9>Ö2Ï”yz1' [ 1067.423509][ T4262] hub 4-1:4.0: USB hub found [ 1067.508251][ T2668] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1067.627933][ T4262] hub 4-1:4.0: 13 ports detected [ 1067.633136][ T4262] usb 4-1: selecting invalid altsetting 1 [ 1067.657736][ T4262] hub 4-1:4.0: Using single TT (err -22) [ 1067.692941][ T2675] lo speed is unknown, defaulting to 1000 [ 1067.706432][ T2675] lo speed is unknown, defaulting to 1000 [ 1067.721056][ T4262] hub 4-1:4.0: insufficient power available to use all downstream ports [ 1067.737507][ T2675] lo speed is unknown, defaulting to 1000 [ 1067.764229][ T2683] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.13719'. [ 1067.788049][ T2683] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1067.832699][ T4262] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1067.841891][ T4262] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1067.859840][ T2685] loop4: detected capacity change from 0 to 64 [ 1067.907569][ T4262] usb 4-1: USB disconnect, device number 43 [ 1068.203646][ T355] lo speed is unknown, defaulting to 1000 [ 1068.203609][ T2675] infiniband syz2: set down [ 1068.220036][ T2675] infiniband syz2: added lo [ 1068.273932][ T2672] loop1: detected capacity change from 0 to 32768 [ 1068.304423][ T2672] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.13715 (2672) [ 1068.372000][ T2704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13727'. [ 1068.386121][ T2672] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1068.406461][ T2672] BTRFS info (device loop1): force zlib compression, level 3 [ 1068.415858][ T2672] BTRFS info (device loop1): force clearing of disk cache [ 1068.442060][ T2672] BTRFS info (device loop1): setting nodatasum [ 1068.466958][ T4262] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1068.478790][ T2706] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13728'. [ 1068.494649][ T2672] BTRFS info (device loop1): allowing degraded mounts [ 1068.512083][ T2675] RDS/IB: syz2: added [ 1068.521407][ T2672] BTRFS info (device loop1): enabling disk space caching [ 1068.535253][ T2675] smc: adding ib device syz2 with port count 1 [ 1068.577447][ T2708] xt_TCPMSS: Only works on TCP SYN packets [ 1068.587647][ T2672] BTRFS info (device loop1): disk space caching is enabled [ 1068.595341][ T2675] smc: ib device syz2 port 1 has pnetid [ 1068.624041][ T2672] BTRFS info (device loop1): has skinny extents [ 1068.645862][ T355] lo speed is unknown, defaulting to 1000 [ 1068.664266][ T2675] lo speed is unknown, defaulting to 1000 [ 1068.704188][ T4262] usb 6-1: Using ep0 maxpacket: 32 [ 1068.778957][ T2729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13733'. [ 1068.821019][ T4262] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1068.830128][ T4262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.929978][ T2744] loop4: detected capacity change from 0 to 1024 [ 1068.937995][ T4262] usb 6-1: config 0 descriptor?? [ 1068.976605][ T2672] BTRFS info (device loop1): clearing free space tree [ 1068.984169][ T2672] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1068.995690][ T2672] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1069.018267][ T4262] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1069.055961][ T2675] lo speed is unknown, defaulting to 1000 [ 1069.278545][ T2754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13739'. [ 1069.398426][ T4262] gspca_nw80x: reg_r err -71 [ 1069.403136][ T4262] nw80x: probe of 6-1:0.0 failed with error -71 [ 1069.436779][ T4262] usb 6-1: USB disconnect, device number 8 [ 1069.458071][ T2675] lo speed is unknown, defaulting to 1000 [ 1069.700950][ T2763] loop4: detected capacity change from 0 to 8192 [ 1069.767782][ T2675] lo speed is unknown, defaulting to 1000 [ 1069.794053][ T2763] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1069.823828][ T2763] REISERFS (device loop4): using ordered data mode [ 1069.862276][ T2763] reiserfs: using flush barriers [ 1069.936896][ T2763] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1069.944119][ T2675] lo speed is unknown, defaulting to 1000 [ 1069.991546][ T2763] REISERFS (device loop4): checking transaction log (loop4) [ 1070.028659][ T2763] REISERFS (device loop4): Using r5 hash to sort names [ 1070.040219][ T2763] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1070.069850][ T2763] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1070.094913][ T2771] netlink: 'syz.3.13744': attribute type 1 has an invalid length. [ 1070.149866][ T2776] netlink: 'syz.1.13745': attribute type 11 has an invalid length. [ 1070.258972][ T4262] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1070.360262][ T2675] lo speed is unknown, defaulting to 1000 [ 1070.657156][ T4262] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1070.693986][ T4262] usb 6-1: not running at top speed; connect to a high speed hub [ 1070.787618][ T4262] usb 6-1: config 7 has an invalid interface number: 12 but max is 0 [ 1070.806387][ T4262] usb 6-1: config 7 has no interface number 0 [ 1070.812547][ T4262] usb 6-1: config 7 interface 12 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1070.859389][ T4262] usb 6-1: config 7 interface 12 has no altsetting 0 [ 1071.030256][ T4262] usb 6-1: New USB device found, idVendor=2040, idProduct=4903, bcdDevice=7f.99 [ 1071.048350][ T4262] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.094807][ T4262] usb 6-1: Product: syz [ 1071.099039][ T4262] usb 6-1: Manufacturer: syz [ 1071.111270][ T2819] loop2: detected capacity change from 0 to 4096 [ 1071.137283][ T4262] usb 6-1: SerialNumber: syz [ 1071.192586][ T2819] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 1071.424206][ T4262] hdpvr 6-1:7.12: Could not find bulk-in endpoint [ 1071.444214][ T4262] hdpvr: probe of 6-1:7.12 failed with error -12 [ 1071.488615][ T4262] usb 6-1: USB disconnect, device number 9 [ 1071.552333][ T2845] loop4: detected capacity change from 0 to 512 [ 1071.697234][ T2855] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1071.731290][ T2845] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001003,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 1071.759188][ T2858] overlayfs: missing 'workdir' [ 1071.764242][ T2845] ext4 filesystem being mounted at /2783/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.796654][ T2845] EXT4-fs error (device loop4): ext4_xattr_block_find:1866: inode #15: comm syz.4.13774: corrupted xattr block 19 [ 1071.823276][ T2845] EXT4-fs (loop4): Remounting filesystem read-only [ 1071.837905][ T2849] loop1: detected capacity change from 0 to 4096 [ 1071.884408][ T2863] loop2: detected capacity change from 0 to 64 [ 1071.904063][ T2849] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 1072.297022][ T2883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13790'. [ 1072.360556][ T2883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13790'. [ 1072.392369][ T2891] netlink: 'syz.1.13794': attribute type 10 has an invalid length. [ 1072.639305][ T2908] loop5: detected capacity change from 0 to 1764 [ 1072.819277][ T2915] loop1: detected capacity change from 0 to 4096 [ 1072.954425][ T2936] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1072.986977][ T4262] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1073.264568][ T2948] loop3: detected capacity change from 0 to 4096 [ 1073.332212][ T4262] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 1073.340654][ T4262] usb 3-1: config 0 has no interface number 0 [ 1073.360111][ T4262] usb 3-1: config 0 interface 63 has no altsetting 0 [ 1073.527747][ T4262] usb 3-1: New USB device found, idVendor=07ca, idProduct=a800, bcdDevice=2b.5e [ 1073.557604][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.591519][ T4262] usb 3-1: Product: syz [ 1073.605727][ T4262] usb 3-1: Manufacturer: syz [ 1073.635230][ T4262] usb 3-1: SerialNumber: syz [ 1073.666158][ T4262] usb 3-1: config 0 descriptor?? [ 1073.728473][ T4262] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 1073.765958][ T2970] ceph: No source [ 1073.799130][ T4262] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1073.863711][ T4262] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 1073.885484][ T4262] usb 3-1: media controller created [ 1073.893335][ T4262] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1073.929429][ T4262] dvb-usb: bulk message failed: -22 (6/0) [ 1073.958696][ T4262] dvb-usb: bulk message failed: -22 (6/0) [ 1073.964568][ T4262] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 1074.189486][ T4262] rc_core: IR keymap rc-avermedia-m135a not found [ 1074.210573][ T4262] Registered IR keymap rc-empty [ 1074.239159][ T4262] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1074.273303][ T2998] netlink: 'syz.1.13834': attribute type 4 has an invalid length. [ 1074.283411][ T4262] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input78 [ 1074.304763][ T2998] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.13834'. [ 1074.326523][ T4262] dvb-usb: schedule remote query interval to 150 msecs. [ 1074.343479][ T4262] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 1074.390431][ T4262] usb 3-1: USB disconnect, device number 56 [ 1074.453835][ T3008] loop1: detected capacity change from 0 to 64 [ 1074.471242][ T3009] xt_hashlimit: max too large, truncated to 1048576 [ 1074.495374][ T3008] attempt to access beyond end of device [ 1074.495374][ T3008] loop1: rw=0, want=47226, limit=64 [ 1074.531008][ T3008] Buffer I/O error on dev loop1, logical block 23612, async page read [ 1074.562649][ T3008] attempt to access beyond end of device [ 1074.562649][ T3008] loop1: rw=0, want=47226, limit=64 [ 1074.602637][ T4262] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 1074.651412][ T3008] Buffer I/O error on dev loop1, logical block 23612, async page read [ 1074.686937][ T3015] netlink: 'syz.2.13842': attribute type 1 has an invalid length. [ 1074.706260][ T3015] netlink: 'syz.2.13842': attribute type 9 has an invalid length. [ 1074.968258][ T3025] loop4: detected capacity change from 0 to 1024 [ 1075.138612][ T3025] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1075.422495][ T3007] loop3: detected capacity change from 0 to 32768 [ 1075.453696][ T3047] loop5: detected capacity change from 0 to 512 [ 1075.552025][ T3047] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1075.559146][ T3047] EXT4-fs error (device loop5): ext4_quota_enable:6415: inode #15: comm syz.5.13857: iget: bad i_size value: 360287970189639690 [ 1075.625792][ T3047] EXT4-fs error (device loop5): ext4_quota_enable:6418: comm syz.5.13857: Bad quota inode: 15, type: 2 [ 1075.668210][ T3047] EXT4-fs warning (device loop5): ext4_enable_quotas:6459: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 1075.684077][ T3047] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1075.691203][ T3047] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1075.712446][ T3047] EXT4-fs error (device loop5): ext4_lookup:1858: comm syz.5.13857: inode #15: comm syz.5.13857: iget: illegal inode # [ 1075.743521][ T3061] netlink: 'syz.4.13864': attribute type 10 has an invalid length. [ 1075.813231][ T3061] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.13864'. [ 1075.977347][ C1] vkms_vblank_simulate: vblank timer overrun [ 1076.026553][ T3073] Timeout policy `syz0' can only be used by L3 protocol number 24578 [ 1076.721332][ T3109] netlink: 11 bytes leftover after parsing attributes in process `syz.5.13886'. [ 1076.867587][ T3118] loop4: detected capacity change from 0 to 1024 [ 1076.878148][ T3121] loop1: detected capacity change from 0 to 256 [ 1076.998132][ T3121] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1077.346359][ T3151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13907'. [ 1077.479233][ T3162] tmpfs: Bad value for 'mpol' [ 1077.607727][ T3155] loop1: detected capacity change from 0 to 8192 [ 1077.705586][ T3155] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1077.729983][ T3155] REISERFS (device loop1): using ordered data mode [ 1077.781010][ T3155] reiserfs: using flush barriers [ 1077.825827][ T3155] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1077.847373][ T3155] REISERFS (device loop1): checking transaction log (loop1) [ 1078.241329][ T3155] REISERFS (device loop1): Using tea hash to sort names [ 1078.258764][ T3193] rdma_rxe: rxe_register_device failed with error -23 [ 1078.274614][ T3155] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1078.293923][ T3193] rdma_rxe: failed to add lo [ 1078.601913][ T3206] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13934'. [ 1078.626461][ T3206] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13934'. [ 1078.667982][ T3209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13935'. [ 1078.703734][ T3170] loop5: detected capacity change from 0 to 32768 [ 1078.710990][ T3209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13935'. [ 1079.128946][ T355] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1079.239433][ T13] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1079.264947][ T3234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13947'. [ 1079.288409][ T3234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13947'. [ 1079.313186][ T3234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13947'. [ 1079.353026][ T355] usb 4-1: Using ep0 maxpacket: 32 [ 1079.469481][ T3246] loop2: detected capacity change from 0 to 8 [ 1079.478745][ T355] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.491171][ T355] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1079.538900][ T3246] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1079.571755][ T3246] SQUASHFS error: Failed to read block 0x9b: -5 [ 1079.584818][ T3250] loop4: detected capacity change from 0 to 64 [ 1079.586211][ T3246] SQUASHFS error: Unable to read metadata cache entry [99] [ 1079.599329][ T13] usb 2-1: config 2 has an invalid interface number: 174 but max is 0 [ 1079.608343][ T3252] affs: No valid root block on device nbd5 [ 1079.614380][ T13] usb 2-1: config 2 has no interface number 0 [ 1079.614434][ T13] usb 2-1: config 2 interface 174 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1079.614464][ T13] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1079.619650][ T3246] SQUASHFS error: Unable to read inode 0x127 [ 1079.681390][ T355] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1079.698919][ T355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.714444][ T355] usb 4-1: Product: syz [ 1079.719551][ T355] usb 4-1: Manufacturer: syz [ 1079.724252][ T355] usb 4-1: SerialNumber: syz [ 1079.773769][ T355] usb 4-1: config 0 descriptor?? [ 1079.782309][ T13] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1079.801186][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.837150][ T13] usb 2-1: Product: syz [ 1079.841824][ T13] usb 2-1: Manufacturer: syz [ 1079.846465][ T13] usb 2-1: SerialNumber: syz [ 1079.894074][ T3224] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1080.023874][ T355] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 1080.036310][ T355] f6 f2 2c 05 00 00 00 00 [ 1080.046523][ T355] snd-usb-6fire: probe of 4-1:0.0 failed with error -5 [ 1080.211834][ T13] usb 2-1: probing VID:PID(0424:012C) [ 1080.235078][ T13] usb 2-1: vub300 testing UNKNOWN EndPoint(0) 08 [ 1080.251593][ T13] usb 2-1: vub300 ignoring EndPoint(0) 08 [ 1080.265980][ T13] usb 2-1: vub300 testing BULK IN EndPoint(1) 82 [ 1080.277035][ T13] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 1080.305739][ T355] usb 4-1: USB disconnect, device number 44 [ 1080.313806][ T13] vub300: probe of 2-1:2.174 failed with error -22 [ 1080.342065][ T13] usb 2-1: USB disconnect, device number 38 [ 1080.354631][ T3284] netlink: 'syz.2.13970': attribute type 8 has an invalid length. [ 1080.789018][ T3307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13977'. [ 1080.843974][ T3307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13977'. [ 1081.001519][ T3318] overlayfs: missing 'lowerdir' [ 1081.219112][ T3315] syz.1.13983 (3315) used greatest stack depth: 20288 bytes left [ 1081.275982][ T3334] loop2: detected capacity change from 0 to 256 [ 1081.587031][ T3350] loop1: detected capacity change from 0 to 1024 [ 1081.604799][ T3356] loop3: detected capacity change from 0 to 8 [ 1081.615924][ T3358] loop2: detected capacity change from 0 to 8 [ 1081.624481][ T3355] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 1081.699832][ T3358] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1081.744814][ T3358] SQUASHFS error: Failed to read block 0x91: -5 [ 1081.757890][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1081.757912][ T26] audit: type=1800 audit(1753099753.605:252): pid=3356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.14003" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 1081.788222][ T154] hfsplus: b-tree write err: -5, ino 4 [ 1081.809964][ T3358] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1081.822752][ T3358] SQUASHFS error: Unable to read inode 0x11f [ 1081.830710][ T3362] loop5: detected capacity change from 0 to 2048 [ 1081.939619][ T3362] loop5: p1 < > p3 [ 1081.963371][ T3362] loop5: p3 size 134217728 extends beyond EOD, truncated [ 1082.119449][ T3377] loop4: detected capacity change from 0 to 512 [ 1082.238260][ T3385] netlink: 'syz.1.14016': attribute type 1 has an invalid length. [ 1082.256458][ T3385] netlink: 'syz.1.14016': attribute type 9 has an invalid length. [ 1082.470074][ T3393] loop1: detected capacity change from 0 to 4096 [ 1082.780111][ T3407] __nla_validate_parse: 1 callbacks suppressed [ 1082.780128][ T3407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14028'. [ 1082.796223][ T3393] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1082.816214][ T3561] loop5: p1 < > p3 [ 1082.830313][ T3377] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102] [ 1082.838317][ T3377] System zones: 1-12 [ 1082.857072][ T3561] loop5: p3 size 134217728 extends beyond EOD, truncated [ 1082.912571][ T3377] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.14012: error while reading EA inode 32 err=-116 [ 1082.949569][ T3377] EXT4-fs (loop4): Remounting filesystem read-only [ 1083.000935][ T3377] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.14012: error while reading EA inode 32 err=-116 [ 1083.103851][ T3377] EXT4-fs (loop4): Remounting filesystem read-only [ 1083.113656][ T3377] EXT4-fs (loop4): 1 orphan inode deleted [ 1083.124741][ T3423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14036'. [ 1083.136991][ T3377] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,. Quota mode: none. [ 1083.144856][ T3421] loop5: detected capacity change from 0 to 2048 [ 1083.175087][ T3423] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 1083.307059][ T3421] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1083.376348][ T26] audit: type=1800 audit(1753099755.343:253): pid=3421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14033" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 1084.067372][ T3461] netlink: 'syz.2.14054': attribute type 1 has an invalid length. [ 1084.138565][ T9019] udevd[9019]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1084.153086][ T5040] udevd[5040]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1084.228647][ T3429] loop1: detected capacity change from 0 to 32768 [ 1084.263657][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1084.291006][ T5040] udevd[5040]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1084.439128][ T3429] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.14038 (3429) [ 1084.488012][ T3429] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1084.516967][ T3429] BTRFS info (device loop1): using free space tree [ 1084.575034][ T3429] BTRFS info (device loop1): has skinny extents [ 1084.777061][ T4233] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1084.873875][ T3498] loop3: detected capacity change from 0 to 2048 [ 1084.994392][ T3498] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1085.019848][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 1085.048762][ T3429] BTRFS info (device loop1): enabling ssd optimizations [ 1085.141197][ T4233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.160391][ T3498] UDF-fs: unknown compression code (9) [ 1085.176935][ T4233] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1085.187174][ T3527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14071'. [ 1085.249933][ T3527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14071'. [ 1085.305089][ T3527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14071'. [ 1085.374816][ T4233] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1085.439229][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.461977][ T4233] usb 5-1: Product: syz [ 1085.466213][ T4233] usb 5-1: Manufacturer: syz [ 1085.505438][ T4233] usb 5-1: SerialNumber: syz [ 1085.526344][ T4233] usb 5-1: config 0 descriptor?? [ 1085.811942][ T4233] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 1085.825961][ T4233] f6 f2 2c 05 00 00 00 00 [ 1085.846272][ T4233] snd-usb-6fire: probe of 5-1:0.0 failed with error -5 [ 1085.892935][ T3552] loop2: detected capacity change from 0 to 128 [ 1086.020070][ T4233] usb 5-1: USB disconnect, device number 43 [ 1086.025215][ T3552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 1086.049468][ T3552] System zones: 1-3, 19-19, 35-36 [ 1086.127047][ T3552] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 1086.152780][ T3552] ext4 filesystem being mounted at /2918/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1086.180835][ T3552] EXT4-fs warning (device loop2): ext4_group_extend:1852: can't read last block, resize aborted [ 1086.403945][ T4262] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1086.641087][ T3587] loop3: detected capacity change from 0 to 256 [ 1086.641526][ T4262] usb 6-1: Using ep0 maxpacket: 16 [ 1086.811286][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1086.839974][ T3587] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1086.870681][ T3599] loop2: detected capacity change from 0 to 512 [ 1086.961478][ T3599] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,i_version,. Quota mode: writeback. [ 1086.977644][ T4262] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1086.999095][ T4262] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.024146][ T3599] ext4 filesystem being mounted at /2925/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.057801][ T4262] usb 6-1: Product: syz [ 1087.088990][ T4262] usb 6-1: Manufacturer: syz [ 1087.093629][ T4262] usb 6-1: SerialNumber: syz [ 1087.162353][ T4262] usb 6-1: config 0 descriptor?? [ 1087.300300][ T4262] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1087.464535][ T3616] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14110'. [ 1087.483425][ T3616] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14110'. [ 1087.618138][ T3591] loop4: detected capacity change from 0 to 32768 [ 1087.709850][ T3591] jfs_strtoUCS: char2uni returned -22. [ 1087.736526][ T3591] charset = cp932, char = 0xfc [ 1087.770755][ T3627] loop3: detected capacity change from 0 to 256 [ 1087.879439][ T3602] loop1: detected capacity change from 0 to 32768 [ 1087.901919][ T3627] FAT-fs (loop3): Directory bread(block 64) failed [ 1087.918617][ T3627] FAT-fs (loop3): Directory bread(block 65) failed [ 1087.925583][ T3627] FAT-fs (loop3): Directory bread(block 66) failed [ 1087.939234][ T3627] FAT-fs (loop3): Directory bread(block 67) failed [ 1087.943824][ T4262] usb 6-1: USB disconnect, device number 10 [ 1087.946330][ T3627] FAT-fs (loop3): Directory bread(block 68) failed [ 1087.952721][ T1282] usb 6-1: Failed to submit usb control message: -71 [ 1087.958692][ T3627] FAT-fs (loop3): Directory bread(block 69) failed [ 1087.982698][ T3602] XFS: attr2 mount option is deprecated. [ 1087.993220][ T1282] usb 6-1: unable to send the bmi data to the device: -71 [ 1088.052115][ T1282] usb 6-1: unable to get target info from device [ 1088.075436][ T3627] FAT-fs (loop3): Directory bread(block 70) failed [ 1088.076043][ T1282] usb 6-1: could not get target info (-71) [ 1088.095927][ T3627] FAT-fs (loop3): Directory bread(block 71) failed [ 1088.096176][ T1282] usb 6-1: could not probe fw (-71) [ 1088.138401][ T3627] FAT-fs (loop3): Directory bread(block 72) failed [ 1088.222834][ T3627] FAT-fs (loop3): Directory bread(block 73) failed [ 1088.294562][ T3602] XFS (loop1): Mounting V5 Filesystem [ 1088.325874][ T3647] dlm: dev_write: no op 0 0 [ 1088.462112][ T3602] XFS (loop1): Ending clean mount [ 1088.509209][ T3602] XFS (loop1): Quotacheck needed: Please wait. [ 1088.543992][ T350] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1088.635069][ T3602] XFS (loop1): Quotacheck: Done. [ 1088.864831][ T4182] XFS (loop1): Unmounting Filesystem [ 1088.878891][ T350] usb 3-1: config 7 descriptor has 1 excess byte, ignoring [ 1088.896308][ T350] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1089.093344][ T350] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1089.121661][ T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.134315][ T350] usb 3-1: Product: syz [ 1089.138531][ T350] usb 3-1: Manufacturer: syz [ 1089.143787][ T350] usb 3-1: SerialNumber: syz [ 1089.220464][ T4233] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1089.232992][ T350] rndis_wlan 3-1:7.0: skipping garbage [ 1089.242491][ T350] usb 3-1: bad CDC descriptors [ 1089.261317][ T350] rndis_host 3-1:7.0: skipping garbage [ 1089.266843][ T350] usb 3-1: bad CDC descriptors [ 1089.302903][ T350] option 3-1:7.0: GSM modem (1-port) converter detected [ 1089.447918][ T6335] usb 3-1: USB disconnect, device number 57 [ 1089.466563][ T6335] option 3-1:7.0: device disconnected [ 1089.474999][ T4233] usb 5-1: Using ep0 maxpacket: 8 [ 1089.587526][ T3701] netlink: 80 bytes leftover after parsing attributes in process `syz.5.14146'. [ 1089.603774][ T4233] usb 5-1: too many endpoints for config 0 interface 0 altsetting 3: 64, using maximum allowed: 30 [ 1089.642450][ T4233] usb 5-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 1089.685016][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1089.736133][ T3710] loop1: detected capacity change from 0 to 8 [ 1089.894506][ T4233] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=1b.62 [ 1089.907948][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.932039][ T4233] usb 5-1: Product: syz [ 1089.936268][ T4233] usb 5-1: Manufacturer: syz [ 1089.940895][ T4233] usb 5-1: SerialNumber: syz [ 1089.979554][ T4233] usb 5-1: config 0 descriptor?? [ 1090.204018][ T3729] netlink: 'syz.5.14160': attribute type 2 has an invalid length. [ 1090.230132][ T3729] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14160'. [ 1090.333182][ T4233] comedi comedi5: could not set alternate setting 3 in high speed [ 1090.351673][ T4233] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1090.395281][ T4233] usbdux: probe of 5-1:0.0 failed with error -71 [ 1090.429741][ T4233] usb 5-1: USB disconnect, device number 44 [ 1090.432117][ T3739] loop2: detected capacity change from 0 to 256 [ 1090.587209][ T3739] FAT-fs (loop2): Directory bread(block 64) failed [ 1090.597403][ T3744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14168'. [ 1090.602333][ T3739] FAT-fs (loop2): Directory bread(block 65) failed [ 1090.627281][ T3744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14168'. [ 1090.639943][ T3739] FAT-fs (loop2): Directory bread(block 66) failed [ 1090.648868][ T3739] FAT-fs (loop2): Directory bread(block 67) failed [ 1090.663954][ T3739] FAT-fs (loop2): Directory bread(block 68) failed [ 1090.665842][ T3744] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14168'. [ 1090.673409][ T3739] FAT-fs (loop2): Directory bread(block 69) failed [ 1090.695756][ T3739] FAT-fs (loop2): Directory bread(block 70) failed [ 1090.703168][ T3739] FAT-fs (loop2): Directory bread(block 71) failed [ 1090.721698][ T3739] FAT-fs (loop2): Directory bread(block 72) failed [ 1090.731059][ T3739] FAT-fs (loop2): Directory bread(block 73) failed [ 1090.792551][ T3713] loop3: detected capacity change from 0 to 40427 [ 1090.882892][ T3713] F2FS-fs (loop3): invalid crc value [ 1090.892911][ T3713] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1091.122997][ T3713] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 1091.140425][ T3763] loop4: detected capacity change from 0 to 16 [ 1091.148503][ T3713] F2FS-fs (loop3): Start checkpoint disabled! [ 1091.161498][ T3760] loop1: detected capacity change from 0 to 1024 [ 1091.163813][ T3764] loop5: detected capacity change from 0 to 256 [ 1091.178256][ T3713] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1091.213134][ T3763] erofs: (device loop4): mounted with root inode @ nid 36. [ 1091.244345][ T3763] erofs: (device loop4): init_inode_xattrs: xattr_isize 12 of nid 86 is not supported yet [ 1091.558765][ T3781] netlink: 'syz.2.14183': attribute type 13 has an invalid length. [ 1091.648931][ T3787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14185'. [ 1091.693410][ T3787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14185'. [ 1091.728085][ T3792] loop1: detected capacity change from 0 to 256 [ 1091.939178][ T3803] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1092.057892][ T3810] x_tables: duplicate underflow at hook 1 [ 1092.130831][ T3814] loop1: detected capacity change from 0 to 128 [ 1092.203412][ T3814] FAT-fs (loop1): Directory bread(block 11554) failed [ 1092.222788][ T3818] netlink: 'syz.4.14202': attribute type 1 has an invalid length. [ 1092.236931][ T3814] FAT-fs (loop1): Directory bread(block 11555) failed [ 1092.266670][ T3814] FAT-fs (loop1): Directory bread(block 11556) failed [ 1092.270876][ T3818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14202'. [ 1092.295213][ T3814] FAT-fs (loop1): Directory bread(block 11557) failed [ 1092.325866][ T3814] FAT-fs (loop1): Directory bread(block 11558) failed [ 1092.373509][ T3814] FAT-fs (loop1): Directory bread(block 11559) failed [ 1092.411536][ T3814] FAT-fs (loop1): Directory bread(block 11560) failed [ 1092.427558][ T3814] FAT-fs (loop1): Directory bread(block 11561) failed [ 1092.470227][ T3814] FAT-fs (loop1): Directory bread(block 11562) failed [ 1092.508764][ T3814] FAT-fs (loop1): Directory bread(block 11563) failed [ 1092.653063][ T3845] sctp: [Deprecated]: syz.5.14213 (pid 3845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1092.653063][ T3845] Use struct sctp_sack_info instead [ 1092.803383][ T3857] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1092.912506][ T3849] loop4: detected capacity change from 0 to 512 [ 1093.022158][ T3867] No such timeout policy "syz0" [ 1093.075982][ T3849] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,i_version,. Quota mode: writeback. [ 1093.152280][ T3877] kAFS: unparsable volume name [ 1093.164414][ T3849] ext4 filesystem being mounted at /2859/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1093.319885][ T3887] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14231'. [ 1093.493614][ T3887] bond0 (unregistering): Released all slaves [ 1093.666316][ T3901] netlink: 'syz.1.14238': attribute type 3 has an invalid length. [ 1093.714269][ T3901] netlink: 'syz.1.14238': attribute type 1 has an invalid length. [ 1093.879846][ T3911] ALSA: mixer_oss: invalid OSS volume 'u' [ 1094.013171][ T3912] loop4: detected capacity change from 0 to 4096 [ 1094.037597][ T3921] loop5: detected capacity change from 0 to 512 [ 1094.113881][ T3921] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,i_version,. Quota mode: writeback. [ 1094.154171][ T3921] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1094.160618][ T3912] ntfs3: loop4: try to read out of volume at offset 0x3fffffc7000 [ 1094.265779][ T13] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1094.300988][ T3934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1094.308441][ T3934] IPv6: NLM_F_CREATE should be set when creating new route [ 1094.315782][ T3934] IPv6: NLM_F_CREATE should be set when creating new route [ 1094.515083][ T3946] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14258'. [ 1094.596759][ T3946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.621711][ T3946] device bond_slave_0 left promiscuous mode [ 1094.638445][ T13] usb 3-1: config 0 has an invalid interface number: 112 but max is 0 [ 1094.663848][ T13] usb 3-1: config 0 has no interface number 0 [ 1094.704929][ T3946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.744504][ T3946] device bond_slave_1 left promiscuous mode [ 1094.771403][ T3946] bond0 (unregistering): Released all slaves [ 1094.834293][ T13] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 1094.866027][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.895600][ T13] usb 3-1: Product: syz [ 1094.905431][ T13] usb 3-1: Manufacturer: syz [ 1094.928584][ T13] usb 3-1: SerialNumber: syz [ 1094.975669][ T13] usb 3-1: config 0 descriptor?? [ 1095.148847][ T13] mvusb_mdio: probe of 3-1:0.112 failed with error -5 [ 1095.207635][ T13] usb 3-1: USB disconnect, device number 58 [ 1095.325622][ T3950] loop3: detected capacity change from 0 to 32768 [ 1095.426499][ T3950] XFS: attr2 mount option is deprecated. [ 1095.495861][ T350] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1095.565309][ T3950] XFS (loop3): Mounting V5 Filesystem [ 1095.602167][ T3960] loop5: detected capacity change from 0 to 40427 [ 1095.650831][ T3960] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1095.700948][ T3950] XFS (loop3): Ending clean mount [ 1095.703449][ T3960] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1095.716630][ T3950] XFS (loop3): Quotacheck needed: Please wait. [ 1095.809726][ T3960] F2FS-fs (loop5): invalid crc value [ 1095.861133][ T350] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.866346][ T3950] XFS (loop3): Quotacheck: Done. [ 1095.900010][ T3960] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 1095.933153][ T350] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1095.995688][ T4186] XFS (loop3): Unmounting Filesystem [ 1096.001748][ T350] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1096.053444][ T350] usb 2-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1096.092912][ T350] usb 2-1: config 48 interface 0 altsetting 98 bulk endpoint 0x8 has invalid maxpacket 0 [ 1096.137130][ T350] usb 2-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1096.163143][ T350] usb 2-1: config 48 interface 0 has no altsetting 0 [ 1096.191405][ T3960] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1096.243865][ T3960] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1096.309757][ T4014] loop2: detected capacity change from 0 to 256 [ 1096.345842][ T350] usb 2-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 1096.355916][ T3960] fscrypt (loop5, inode 3): Error -61 getting encryption context [ 1096.362409][ T350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.373561][ T4014] exfat: Deprecated parameter 'utf8' [ 1096.379343][ T350] usb 2-1: Product: syz [ 1096.383869][ T350] usb 2-1: Manufacturer: syz [ 1096.388504][ T350] usb 2-1: SerialNumber: syz [ 1096.425007][ T4014] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1096.727542][ T350] usb 2-1: USB disconnect, device number 39 [ 1096.982379][ T4033] loop4: detected capacity change from 0 to 256 [ 1097.092133][ T4033] FAT-fs (loop4): Directory bread(block 64) failed [ 1097.108901][ T4033] FAT-fs (loop4): Directory bread(block 65) failed [ 1097.127580][ T4033] FAT-fs (loop4): Directory bread(block 66) failed [ 1097.134174][ T4033] FAT-fs (loop4): Directory bread(block 67) failed [ 1097.176254][ T4039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14296'. [ 1097.193595][ T4033] FAT-fs (loop4): Directory bread(block 68) failed [ 1097.200197][ T4033] FAT-fs (loop4): Directory bread(block 69) failed [ 1097.249735][ T4033] FAT-fs (loop4): Directory bread(block 70) failed [ 1097.256338][ T4033] FAT-fs (loop4): Directory bread(block 71) failed [ 1097.263675][ T4043] sctp: [Deprecated]: syz.1.14298 (pid 4043) Use of int in max_burst socket option deprecated. [ 1097.263675][ T4043] Use struct sctp_assoc_value instead [ 1097.304688][ T4033] FAT-fs (loop4): Directory bread(block 72) failed [ 1097.311283][ T4033] FAT-fs (loop4): Directory bread(block 73) failed [ 1097.601580][ T4059] cgroup: name respecified [ 1097.649507][ T4063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14307'. [ 1097.769278][ T4069] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1097.783901][ T4073] loop1: detected capacity change from 0 to 256 [ 1097.834146][ T4075] netlink: 428 bytes leftover after parsing attributes in process `syz.2.14313'. [ 1098.038763][ T4085] x_tables: unsorted underflow at hook 4 [ 1098.188247][ T4101] printk: syz.3.14326 (4101): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 1098.207396][ T4099] loop4: detected capacity change from 0 to 764 [ 1098.271914][ T4099] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1098.508194][ T4125] loop3: detected capacity change from 0 to 16 [ 1098.558208][ T4125] erofs: (device loop3): mounted with root inode @ nid 36. [ 1098.601616][ T4125] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1098.613960][ T4130] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 1098.640948][ T4125] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -57 in[61, 4035] out[1851] [ 1098.710073][ T4133] loop5: detected capacity change from 0 to 512 [ 1098.715968][ T4125] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 1098.789640][ T4133] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1098.903447][ T4133] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1098.921752][ T4153] netlink: 180 bytes leftover after parsing attributes in process `syz.2.14350'. [ 1098.995184][ T4133] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.006297][ T4158] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14352'. [ 1099.164729][ T4158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.193224][ T4170] loop1: detected capacity change from 0 to 256 [ 1099.260177][ T4158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.299099][ T4158] bond0 (unregistering): Released all slaves [ 1099.347117][ T4170] FAT-fs (loop1): Directory bread(block 64) failed [ 1099.364672][ T4170] FAT-fs (loop1): Directory bread(block 65) failed [ 1099.403588][ T4170] FAT-fs (loop1): Directory bread(block 66) failed [ 1099.438594][ T4170] FAT-fs (loop1): Directory bread(block 67) failed [ 1099.461713][ T4170] FAT-fs (loop1): Directory bread(block 68) failed [ 1099.514235][ T4170] FAT-fs (loop1): Directory bread(block 69) failed [ 1099.521227][ T4170] FAT-fs (loop1): Directory bread(block 70) failed [ 1099.582563][ T4170] FAT-fs (loop1): Directory bread(block 71) failed [ 1099.662261][ T4170] FAT-fs (loop1): Directory bread(block 72) failed [ 1099.733754][ T4170] FAT-fs (loop1): Directory bread(block 73) failed [ 1099.982544][ T4223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14366'. [ 1100.136362][ T4203] loop3: detected capacity change from 0 to 4096 [ 1100.219766][ T4203] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1100.229174][ T4271] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14371'. [ 1100.276022][ T4273] binder: BC_ACQUIRE_RESULT not supported [ 1100.295341][ T4273] binder: 4272:4273 ioctl c0306201 200000000580 returned -22 [ 1100.343064][ T4203] ntfs3: loop3: failed to convert "c46c" to maccyrillic [ 1100.581648][ T4286] loop2: detected capacity change from 0 to 128 [ 1100.666791][ T4289] ERROR: device name not specified. [ 1100.715909][ T4286] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1100.749088][ T4286] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1100.795138][ T4286] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.14378: checksumming directory block 0 [ 1100.867775][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14385'. [ 1101.116259][ T4233] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1101.262505][ T4267] loop5: detected capacity change from 0 to 32768 [ 1101.312117][ T4267] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.14370 (4267) [ 1101.349084][ T4267] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 1101.384765][ T4267] BTRFS info (device loop5): force zlib compression, level 3 [ 1101.430064][ T4233] usb 2-1: Using ep0 maxpacket: 8 [ 1101.440442][ T4267] BTRFS info (device loop5): force clearing of disk cache [ 1101.465757][ T4267] BTRFS info (device loop5): setting nodatasum [ 1101.478798][ T4267] BTRFS info (device loop5): use zlib compression, level 3 [ 1101.489193][ T4267] BTRFS info (device loop5): allowing degraded mounts [ 1101.496486][ T4267] BTRFS info (device loop5): enabling disk space caching [ 1101.542585][ T4267] BTRFS info (device loop5): disk space caching is enabled [ 1101.570430][ T4267] BTRFS info (device loop5): has skinny extents [ 1101.679699][ T4333] loop4: detected capacity change from 0 to 4096 [ 1101.722529][ T4233] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1101.740734][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.759782][ T4233] usb 2-1: Product: syz [ 1101.769044][ T4233] usb 2-1: Manufacturer: syz [ 1101.773929][ T4233] usb 2-1: SerialNumber: syz [ 1101.780944][ T4233] usb 2-1: config 0 descriptor?? [ 1101.786024][ T4333] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1101.827242][ T4233] gspca_main: se401-2.14.0 probing 047d:5003 [ 1101.833893][ T4267] BTRFS info (device loop5): enabling ssd optimizations [ 1101.851206][ T4267] BTRFS info (device loop5): clearing free space tree [ 1101.858228][ T4267] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1101.868061][ T4267] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1101.949575][ T4356] netlink: zone id is out of range [ 1101.993969][ T4267] BTRFS info (device loop5): balance: start -f [ 1102.020104][ T4356] netlink: zone id is out of range [ 1102.021873][ T4267] BTRFS info (device loop5): balance: ended with status: 0 [ 1102.036511][ T4333] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 1102.150233][ T4192] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 1102.186026][ T4192] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1102.225942][ T4233] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1102.233377][ T4233] se401: probe of 2-1:0.0 failed with error -71 [ 1102.297950][ T4233] usb 2-1: USB disconnect, device number 40 [ 1102.375027][ T4319] loop3: detected capacity change from 0 to 32768 [ 1102.440646][ T4319] XFS: attr2 mount option is deprecated. [ 1102.501732][ T4363] loop4: detected capacity change from 0 to 1764 [ 1102.561993][ T4319] XFS (loop3): Mounting V5 Filesystem [ 1102.671407][ T4319] XFS (loop3): Ending clean mount [ 1102.704635][ T4370] loop2: detected capacity change from 0 to 1024 [ 1102.846618][ T4370] EXT4-fs (loop2): Ignoring removed nobh option [ 1102.952024][ T4370] EXT4-fs (loop2): inline encryption not supported [ 1102.959190][ T4370] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1103.202932][ T4319] XFS (loop3): Quotacheck needed: Please wait. [ 1103.203336][ T4370] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,nojournal_checksum,barrier=0x0000000000000002,init_itable=0x0000000000000001,data_err=ignore,lazytime,data_err=ignore,journal_dev=0x0000000000000800,nobh,inlinecrypt,data_err=ignore,dioread_nolock,,errors=continue. Quota mode: none. [ 1103.395465][ T4319] XFS (loop3): Quotacheck: Done. [ 1103.449596][ C1] vkms_vblank_simulate: vblank timer overrun [ 1103.552532][ T4398] loop5: detected capacity change from 0 to 4096 [ 1103.586655][ T4186] XFS (loop3): Unmounting Filesystem [ 1103.613386][ T4398] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1103.823939][ T4398] ntfs3: loop5: failed to convert "c46c" to iso8859-1 [ 1104.095996][ T4410] loop4: detected capacity change from 0 to 256 [ 1104.102853][ T4402] loop2: detected capacity change from 0 to 4096 [ 1104.186644][ T4412]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1104.263595][ T4410] FAT-fs (loop4): Directory bread(block 64) failed [ 1104.301490][ T4410] FAT-fs (loop4): Directory bread(block 65) failed [ 1104.336322][ T4410] FAT-fs (loop4): Directory bread(block 66) failed [ 1104.372810][ T4410] FAT-fs (loop4): Directory bread(block 67) failed [ 1104.397580][ T4410] FAT-fs (loop4): Directory bread(block 68) failed [ 1104.406361][ T4410] FAT-fs (loop4): Directory bread(block 69) failed [ 1104.439696][ T4410] FAT-fs (loop4): Directory bread(block 70) failed [ 1104.481193][ T4410] FAT-fs (loop4): Directory bread(block 71) failed [ 1104.494376][ T4410] FAT-fs (loop4): Directory bread(block 72) failed [ 1104.544529][ T4410] FAT-fs (loop4): Directory bread(block 73) failed [ 1104.605706][ T4402] ntfs3: loop2: try to read out of volume at offset 0x3fffffc7000 [ 1105.142187][ T4408] loop5: detected capacity change from 0 to 32768 [ 1105.299752][ T4408] jfs_strtoUCS: char2uni returned -22. [ 1105.310968][ T4408] charset = cp1255, char = 0xfc [ 1105.597043][ T4468] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14448'. [ 1105.840420][ T4484] comedi: No check for data length of config insn id 4095 is implemented [ 1105.905959][ T4484] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1105.926056][ T4255] Bluetooth: hci5: command 0x0406 tx timeout [ 1105.983818][ T4486] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1105.999970][ T4484] comedi: Assuming n=15 is correct [ 1106.396933][ T4508] loop4: detected capacity change from 0 to 4096 [ 1106.521101][ T4508] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1106.535699][ T4527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14474'. [ 1106.559510][ T4508] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1106.625070][ T4508] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1106.678043][ T4508] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1106.708760][ T4534] SET target dimension over the limit! [ 1106.775386][ T4508] ntfs: (device loop4): check_mft_mirror(): Failed to read $MFTMirr. [ 1106.803526][ T4508] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1106.923724][ T4508] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1106.998507][ T4546] IPv6: NLM_F_CREATE should be specified when creating new route [ 1107.006368][ T4546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1107.013684][ T4546] IPv6: NLM_F_CREATE should be set when creating new route [ 1107.031471][ T4508] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1107.105747][ T4508] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1107.185529][ T4508] ntfs: volume version 3.1. [ 1107.231434][ T4508] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1107.889219][ T4582] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14504'. [ 1108.434030][ T4610] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1108.566408][ T4617] usb usb8: usbfs: process 4617 (syz.1.14522) did not claim interface 0 before use [ 1108.651325][ T4621] SET target dimension over the limit! [ 1108.703208][ T4616] loop3: detected capacity change from 0 to 4096 [ 1108.826084][ T4616] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1108.952799][ T4616] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 1109.082507][ T4186] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22. [ 1109.103528][ T4186] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1109.185815][ T4538] loop2: detected capacity change from 0 to 40427 [ 1109.348236][ T4538] F2FS-fs (loop2): invalid crc value [ 1109.391796][ T4538] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1109.653832][ T6329] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1109.735742][ T4672] loop1: detected capacity change from 0 to 256 [ 1109.798685][ T4538] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 1109.827151][ T4672] FAT-fs (loop1): Directory bread(block 64) failed [ 1109.851735][ T4672] FAT-fs (loop1): Directory bread(block 65) failed [ 1109.869484][ T4538] F2FS-fs (loop2): Start checkpoint disabled! [ 1109.883504][ T4672] FAT-fs (loop1): Directory bread(block 66) failed [ 1109.917127][ T4672] FAT-fs (loop1): Directory bread(block 67) failed [ 1109.944495][ T4679] loop5: detected capacity change from 0 to 64 [ 1109.944878][ T4672] FAT-fs (loop1): Directory bread(block 68) failed [ 1109.975429][ T4672] FAT-fs (loop1): Directory bread(block 69) failed [ 1109.985112][ T4672] FAT-fs (loop1): Directory bread(block 70) failed [ 1109.992555][ T4672] FAT-fs (loop1): Directory bread(block 71) failed [ 1110.026868][ T6329] usb 4-1: not running at top speed; connect to a high speed hub [ 1110.045338][ T4672] FAT-fs (loop1): Directory bread(block 72) failed [ 1110.065995][ T4672] FAT-fs (loop1): Directory bread(block 73) failed [ 1110.110963][ T6329] usb 4-1: config 100 has an invalid interface number: 10 but max is 2 [ 1110.129821][ T6329] usb 4-1: config 100 has an invalid interface number: 109 but max is 2 [ 1110.141146][ T6329] usb 4-1: config 100 has an invalid interface number: 5 but max is 2 [ 1110.180060][ T6329] usb 4-1: config 100 has no interface number 0 [ 1110.208555][ T6329] usb 4-1: config 100 has no interface number 1 [ 1110.225809][ T6329] usb 4-1: config 100 has no interface number 2 [ 1110.245233][ T6329] usb 4-1: config 100 interface 10 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1110.269090][ T6329] usb 4-1: config 100 interface 10 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1110.294816][ T6329] usb 4-1: config 100 interface 10 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1110.334631][ T6329] usb 4-1: config 100 interface 10 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1110.365177][ T6329] usb 4-1: config 100 interface 10 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1110.386244][ T6329] usb 4-1: config 100 interface 10 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1110.417658][ T6329] usb 4-1: config 100 interface 10 altsetting 1 has an invalid endpoint with address 0x80, skipping [ 1110.438375][ T6329] usb 4-1: config 100 interface 10 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1110.474004][ T6329] usb 4-1: config 100 interface 10 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 1110.484918][ T6329] usb 4-1: config 100 interface 10 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1110.512076][ T6329] usb 4-1: config 100 interface 10 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1110.530110][ T6329] usb 4-1: config 100 interface 10 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 1110.558293][ T6329] usb 4-1: config 100 interface 10 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1110.576817][ T6329] usb 4-1: config 100 interface 10 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 1110.597488][ T6329] usb 4-1: config 100 interface 10 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1110.623632][ T6329] usb 4-1: config 100 interface 109 altsetting 20 has a duplicate endpoint with address 0x4, skipping [ 1110.641682][ T6329] usb 4-1: config 100 interface 10 has no altsetting 0 [ 1110.648593][ T6329] usb 4-1: config 100 interface 109 has no altsetting 0 [ 1110.670137][ T6329] usb 4-1: config 100 interface 5 has no altsetting 0 [ 1111.187009][ T4713] loop1: detected capacity change from 0 to 8 [ 1111.210832][ T6329] usb 4-1: New USB device found, idVendor=1199, idProduct=68c0, bcdDevice=53.5d [ 1111.229205][ T6329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.256651][ T6329] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 1111.294552][ T6329] usb 4-1: no configuration chosen from 1 choice [ 1111.339857][ T6329] usb 4-1: USB disconnect, device number 45 [ 1111.518372][ T4732] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14576'. [ 1111.669851][ T4740] loop1: detected capacity change from 0 to 512 [ 1111.826260][ T4740] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1111.860959][ T4740] ext4 filesystem being mounted at /2972/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1112.078436][ T4740] __quota_error: 10 callbacks suppressed [ 1112.078454][ T4740] Quota error (device loop1): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 1112.121228][ T4769] loop2: detected capacity change from 0 to 2048 [ 1112.141625][ T4740] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1112.157962][ T4774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14596'. [ 1112.161566][ T4740] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.14582: Failed to acquire dquot type 0 [ 1112.214386][ T4774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14596'. [ 1112.224901][ T4769] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1112.261380][ T4769] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1112.400820][ T4783] vivid-001: ================= START STATUS ================= [ 1112.452250][ T4783] vivid-001: Generate PTS: true [ 1112.458109][ T4783] vivid-001: Generate SCR: true [ 1112.573893][ T4783] tpg source WxH: 320x180 (Y'CbCr) [ 1112.596511][ T4783] tpg field: 1 [ 1112.600779][ T4783] tpg crop: 320x180@0x0 [ 1112.663984][ T4783] tpg compose: 320x180@0x0 [ 1112.700937][ T4783] tpg colorspace: 11 [ 1112.738130][ T4783] tpg transfer function: 2/0 [ 1112.748321][ T4783] tpg Y'CbCr encoding: 0/0 [ 1112.795121][ T4783] tpg quantization: 0/0 [ 1112.808343][ T4783] tpg RGB range: 0/2 [ 1112.832994][ T4783] vivid-001: ================== END STATUS ================== [ 1112.950615][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14610'. [ 1112.962472][ T350] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1113.196192][ T350] usb 6-1: Using ep0 maxpacket: 32 [ 1113.317222][ T350] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.336921][ T350] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1113.352012][ T4817] loop1: detected capacity change from 0 to 4096 [ 1113.387598][ T350] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1113.419779][ T4817] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1113.429142][ T350] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1113.443261][ T350] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1113.469321][ T350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.498984][ T350] usb 6-1: config 0 descriptor?? [ 1113.585851][ T4817] ntfs3: loop1: failed to convert "c46c" to cp855 [ 1113.726978][ T4837] CIFS: VFS: Malformed UNC in devname [ 1113.829798][ T350] usbhid 6-1:0.0: can't add hid device: -71 [ 1113.838795][ T350] usbhid: probe of 6-1:0.0 failed with error -71 [ 1113.858683][ T350] usb 6-1: USB disconnect, device number 11 [ 1113.926313][ T4848] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14632'. [ 1113.956401][ T4850] loop3: detected capacity change from 0 to 16 [ 1114.055430][ T4850] erofs: (device loop3): mounted with root inode @ nid 36. [ 1114.504174][ T4874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14645'. [ 1114.526073][ T4877] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14646'. [ 1114.617891][ T4879] netlink: 'syz.5.14648': attribute type 5 has an invalid length. [ 1114.676572][ T4879] device  entered promiscuous mode [ 1114.751304][ T4885] program syz.2.14651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1114.800642][ T4885] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1115.012512][ T4853] loop4: detected capacity change from 0 to 32768 [ 1115.064814][ T4853] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.14635 (4853) [ 1115.134056][ T4853] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1115.150731][ T4853] BTRFS info (device loop4): force clearing of disk cache [ 1115.158682][ T4853] BTRFS info (device loop4): turning on sync discard [ 1115.180184][ T4853] BTRFS info (device loop4): doing ref verification [ 1115.189389][ T4853] BTRFS info (device loop4): disabling tree log [ 1115.204458][ T4853] BTRFS info (device loop4): enabling tree log [ 1115.214572][ T4853] BTRFS info (device loop4): enabling ssd optimizations [ 1115.232548][ T4853] BTRFS info (device loop4): using spread ssd allocation scheme [ 1115.246371][ T350] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1115.273326][ T4853] BTRFS info (device loop4): not using ssd optimizations [ 1115.288736][ T4853] BTRFS info (device loop4): not using spread ssd allocation scheme [ 1115.311849][ T4853] BTRFS info (device loop4): using free space tree [ 1115.318414][ T4853] BTRFS info (device loop4): has skinny extents [ 1115.331929][ T4865] loop1: detected capacity change from 0 to 32768 [ 1115.436096][ T4865] JBD2: Ignoring recovery information on journal [ 1115.463596][ T4865] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 1115.534697][ T4865] JBD2: bad block at offset 32 [ 1115.601523][ T4865] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1115.628879][ T350] usb 6-1: config 0 has an invalid interface number: 58 but max is 0 [ 1115.637900][ T350] usb 6-1: config 0 has no interface number 0 [ 1115.693795][ T350] usb 6-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1115.714315][ T4853] BTRFS info (device loop4): clearing free space tree [ 1115.723102][ T4853] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1115.732994][ T4926] loop2: detected capacity change from 0 to 2048 [ 1115.759498][ T4853] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1115.784325][ T4926] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 1115.794420][ T350] usb 6-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 1115.822549][ T4853] BTRFS info (device loop4): creating free space tree [ 1115.837262][ T4926] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1115.851679][ T4853] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1115.893185][ T4853] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1115.897057][ T4926] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=./file0/file0,resuid=0x0000000000000000,noinit_itable,min_batch_time=0x0000000000000007,nolazytime,noblock_validity,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1115.934425][ T4942] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1115.974443][ T4926] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #12: block 9: comm syz.2.14664: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 1116.040488][ T350] usb 6-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 1116.056546][ T350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.077103][ T350] usb 6-1: Product: syz [ 1116.081562][ T350] usb 6-1: Manufacturer: syz [ 1116.092014][ T350] usb 6-1: SerialNumber: syz [ 1116.136091][ T350] usb 6-1: config 0 descriptor?? [ 1116.164602][ T4895] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1116.179868][ T4182] ocfs2: Unmounting device (7,1) on (node local) [ 1116.311868][ T4949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14673'. [ 1116.472999][ T350] kaweth 6-1:0.58: Firmware present in device. [ 1116.654000][ T350] kaweth 6-1:0.58: Error reading configuration (-71), no net device created [ 1116.675360][ T350] kaweth: probe of 6-1:0.58 failed with error -5 [ 1116.707941][ T350] usb 6-1: USB disconnect, device number 12 [ 1117.071169][ T4970] loop1: detected capacity change from 0 to 2048 [ 1117.136306][ T4970] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 1117.159072][ T4981] loop4: detected capacity change from 0 to 64 [ 1117.178819][ T4970] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1117.271250][ T4970] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=./file0/file0,resuid=0x0000000000000000,noinit_itable,min_batch_time=0x0000000000000007,nolazytime,noblock_validity,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1117.309071][ T4985] loop5: detected capacity change from 0 to 2048 [ 1117.341399][ T4970] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #12: block 9: comm syz.1.14680: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 1117.446795][ T4985] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1117.540890][ T5001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14692'. [ 1117.572625][ T5001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14692'. [ 1117.752690][ T5018] device sit0 entered promiscuous mode [ 1117.807312][ T5018] netlink: 'syz.1.14700': attribute type 1 has an invalid length. [ 1117.833765][ T5018] netlink: 'syz.1.14700': attribute type 3 has an invalid length. [ 1117.990169][ T5027] loop2: detected capacity change from 0 to 256 [ 1118.011210][ T5031] netlink: 'syz.4.14707': attribute type 10 has an invalid length. [ 1118.085184][ T5034] loop5: detected capacity change from 0 to 512 [ 1118.102429][ T5027] FAT-fs (loop2): Directory bread(block 64) failed [ 1118.116920][ T5036] netlink: 'syz.3.14710': attribute type 1 has an invalid length. [ 1118.126724][ T5027] FAT-fs (loop2): Directory bread(block 65) failed [ 1118.133099][ T5036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14710'. [ 1118.133390][ T5027] FAT-fs (loop2): Directory bread(block 66) failed [ 1118.145604][ T5036] netlink: 'syz.3.14710': attribute type 1 has an invalid length. [ 1118.196511][ T5027] FAT-fs (loop2): Directory bread(block 67) failed [ 1118.202698][ T5036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14710'. [ 1118.204108][ T5027] FAT-fs (loop2): Directory bread(block 68) failed [ 1118.220204][ T5036] netlink: 'syz.3.14710': attribute type 1 has an invalid length. [ 1118.228067][ T5036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14710'. [ 1118.249497][ T5027] FAT-fs (loop2): Directory bread(block 69) failed [ 1118.256192][ T5027] FAT-fs (loop2): Directory bread(block 70) failed [ 1118.256608][ T5034] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 1118.263656][ T5027] FAT-fs (loop2): Directory bread(block 71) failed [ 1118.290972][ T5036] netlink: 'syz.3.14710': attribute type 1 has an invalid length. [ 1118.305932][ T5027] FAT-fs (loop2): Directory bread(block 72) failed [ 1118.307205][ T5036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14710'. [ 1118.312989][ T5027] FAT-fs (loop2): Directory bread(block 73) failed [ 1118.336874][ T5034] ext4 filesystem being mounted at /476/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1118.449895][ T5036] netlink: 'syz.3.14710': attribute type 1 has an invalid length. [ 1118.497924][ T5036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14710'. [ 1118.551581][ T5036] netlink: 'syz.3.14710': attribute type 1 has an invalid length. [ 1118.592588][ T5036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14710'. [ 1118.655313][ T5036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14710'. [ 1118.669588][ T5053] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1118.716483][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1118.739474][ T5053] overlayfs: missing 'lowerdir' [ 1118.771609][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1118.817328][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1119.354537][ T5046] loop4: detected capacity change from 0 to 32768 [ 1119.548144][ T5046] jfs_strtoUCS: char2uni returned -22. [ 1119.567948][ T5046] charset = euc-jp, char = 0xd4 [ 1120.192467][ T5121] loop4: detected capacity change from 0 to 64 [ 1120.391248][ C0] vkms_vblank_simulate: vblank timer overrun [ 1120.613371][ T5145] binder: 5144:5145 unknown command 1077961712 [ 1120.652439][ T5145] binder: 5144:5145 ioctl c0306201 200000000480 returned -22 [ 1121.005369][ T5176] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1121.372847][ T5197] validate_nla: 82 callbacks suppressed [ 1121.372867][ T5197] netlink: 'syz.2.14777': attribute type 2 has an invalid length. [ 1121.425768][ T5197] __nla_validate_parse: 87 callbacks suppressed [ 1121.425785][ T5197] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14777'. [ 1121.592707][ T5215] loop2: detected capacity change from 0 to 64 [ 1121.804490][ T5227] netlink: 'syz.4.14792': attribute type 32 has an invalid length. [ 1121.826508][ T4233] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1121.845374][ T5227] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14792'. [ 1122.239840][ T4233] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 1122.258019][ T4233] usb 6-1: config 0 has no interface number 0 [ 1122.266769][ T5259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1122.287153][ T4233] usb 6-1: config 0 interface 122 has no altsetting 0 [ 1122.301728][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14807'. [ 1122.331710][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14807'. [ 1122.348878][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14807'. [ 1122.412751][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14807'. [ 1122.429843][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14807'. [ 1122.463474][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14807'. [ 1122.488432][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14807'. [ 1122.488743][ T4233] usb 6-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1122.509189][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14807'. [ 1122.520188][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.524990][ T5261] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 1122.560628][ T4233] usb 6-1: Product: syz [ 1122.589780][ T4233] usb 6-1: Manufacturer: syz [ 1122.600157][ T4255] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1122.618898][ T4233] usb 6-1: SerialNumber: syz [ 1122.640040][ T4233] usb 6-1: config 0 descriptor?? [ 1122.654746][ T5267] loop1: detected capacity change from 0 to 256 [ 1122.959615][ T5279] dlm: plock device version mismatch: kernel (1.2.0), user (1.32.0) [ 1122.968095][ T5277] loop3: detected capacity change from 0 to 1024 [ 1122.983081][ T4255] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1123.001590][ T4255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.013876][ T4255] usb 5-1: config 0 descriptor?? [ 1123.065615][ T350] usb 6-1: USB disconnect, device number 13 [ 1123.129123][ T350] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1123.438867][ T4255] [drm:udl_init] *ERROR* Selecting channel failed [ 1123.453606][ T4255] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1123.470845][ T4255] [drm] Initialized udl on minor 2 [ 1123.494994][ T4255] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1123.513369][ T4255] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1123.533926][ T4255] usb 5-1: USB disconnect, device number 45 [ 1123.560204][ T6758] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 1123.580058][ T6758] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 1123.614996][ T6758] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1123.875435][ T5298] netlink: 'syz.2.14827': attribute type 30 has an invalid length. [ 1124.008330][ T5302] loop3: detected capacity change from 0 to 1024 [ 1124.098155][ T5302] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1124.161657][ T5302] hfsplus: filesystem is marked journaled, leaving read-only. [ 1124.224814][ T5316] netlink: 'syz.5.14836': attribute type 1 has an invalid length. [ 1124.254648][ T5316] netlink: 'syz.5.14836': attribute type 1 has an invalid length. [ 1124.279682][ T5316] netlink: 'syz.5.14836': attribute type 1 has an invalid length. [ 1124.317989][ T5316] netlink: 'syz.5.14836': attribute type 1 has an invalid length. [ 1124.335091][ T5316] netlink: 'syz.5.14836': attribute type 1 has an invalid length. [ 1124.360243][ T5316] netlink: 'syz.5.14836': attribute type 1 has an invalid length. [ 1124.388677][ T5316] netlink: 'syz.5.14836': attribute type 1 has an invalid length. [ 1124.428900][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1124.468308][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1124.476236][ T350] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1124.485501][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1124.837213][ T350] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1124.865236][ T350] usb 3-1: config 0 has no interface number 0 [ 1125.020276][ T350] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1125.060463][ T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.096317][ T350] usb 3-1: Product: syz [ 1125.109702][ T350] usb 3-1: Manufacturer: syz [ 1125.114405][ T350] usb 3-1: SerialNumber: syz [ 1125.159878][ T350] usb 3-1: config 0 descriptor?? [ 1125.256684][ T6758] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1125.424292][ T350] dvb_usb_ec168: probe of 3-1:0.1 failed with error -71 [ 1125.461373][ T350] usb 3-1: USB disconnect, device number 59 [ 1125.498629][ T6758] usb 2-1: Using ep0 maxpacket: 16 [ 1125.567814][ T5337] loop5: detected capacity change from 0 to 32768 [ 1125.815936][ T6758] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1125.837810][ T6758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.871927][ T6758] usb 2-1: Product: syz [ 1125.876181][ T6758] usb 2-1: Manufacturer: syz [ 1125.899956][ T6758] usb 2-1: SerialNumber: syz [ 1125.924843][ T6758] r8152-cfgselector 2-1: config 0 descriptor?? [ 1125.939935][ C0] vkms_vblank_simulate: vblank timer overrun [ 1126.049792][ T27] INFO: task syz-executor:4194 blocked for more than 143 seconds. [ 1126.075577][ T27] Not tainted 5.15.189-syzkaller #0 [ 1126.088644][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1126.117470][ T27] task:syz-executor state:D stack:21896 pid: 4194 ppid: 1 flags:0x00004004 [ 1126.193092][ T27] Call Trace: [ 1126.196434][ T27] [ 1126.202917][ T27] __schedule+0x11b8/0x43b0 [ 1126.218990][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1126.224714][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 1126.250156][ T27] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 1126.259847][ T27] ? _raw_spin_unlock+0x40/0x40 [ 1126.272963][ T27] ? rcu_is_watching+0x11/0xa0 [ 1126.278224][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1126.284649][ T27] schedule+0x11b/0x1e0 [ 1126.289241][ T27] schedule_timeout+0x15c/0x280 [ 1126.294655][ T27] ? console_conditional_schedule+0x40/0x40 [ 1126.300850][ T27] ? update_process_times+0x200/0x200 [ 1126.306408][ T27] ? prepare_to_wait_event+0x42c/0x460 [ 1126.328709][ T27] gfs2_gl_hash_clear+0x1a4/0x2f0 [ 1126.333815][ T27] ? thaw_glock+0x150/0x150 [ 1126.361604][ T27] ? gfs2_jindex_free+0x39b/0x400 [ 1126.399431][ T6758] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1126.409615][ T27] ? init_wait_entry+0xd0/0xd0 [ 1126.414684][ T27] ? gfs2_setbit+0x5a0/0x5a0 [ 1126.419494][ T27] gfs2_put_super+0x769/0x7d0 [ 1126.424650][ T27] ? gfs2_evict_inode+0x11f0/0x11f0 [ 1126.430029][ T27] generic_shutdown_super+0x130/0x300 [ 1126.434420][ T6758] r8152-cfgselector 2-1: USB disconnect, device number 41 [ 1126.436306][ T27] kill_block_super+0x7c/0xe0 [ 1126.457598][ T27] deactivate_locked_super+0x93/0xf0 [ 1126.460688][ T5373] loop4: detected capacity change from 0 to 32768 [ 1126.465619][ T27] cleanup_mnt+0x418/0x4d0 [ 1126.475182][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1126.494395][ T27] task_work_run+0x125/0x1a0 [ 1126.499929][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 1126.505810][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 1126.511547][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 1126.517529][ T27] do_syscall_64+0x58/0xa0 [ 1126.522128][ T27] ? clear_bhb_loop+0x30/0x80 [ 1126.527457][ T27] ? clear_bhb_loop+0x30/0x80 [ 1126.532366][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1126.538881][ T27] RIP: 0033:0x7f793a889cd7 [ 1126.551206][ T27] RSP: 002b:00007ffc3b8473f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1126.552450][ T5373] JBD2: Ignoring recovery information on journal [ 1126.562467][ T27] RAX: 0000000000000000 RBX: 00007f793a90ab55 RCX: 00007f793a889cd7 [ 1126.574577][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3b8474b0 [ 1126.579535][ T5373] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 1126.583767][ T27] RBP: 00007ffc3b8474b0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.599506][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc3b848540 [ 1126.606436][ T5373] JBD2: bad block at offset 32 [ 1126.608457][ T27] R13: 00007f793a90ab55 R14: 00000000000fb439 R15: 00007ffc3b848580 [ 1126.621316][ T27] [ 1126.622131][ T5373] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1126.625176][ T27] [ 1126.625176][ T27] Showing all locks held in the system: [ 1126.642986][ T27] 3 locks held by kworker/u4:0/9: [ 1126.648880][ T27] 1 lock held by khungtaskd/27: [ 1126.653801][ T27] #0: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 1126.671019][ T27] 2 locks held by kworker/u4:2/154: [ 1126.685671][ T27] 2 locks held by getty/3943: [ 1126.690497][ T27] #0: ffff88814c5d5098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1126.718113][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 1126.745782][ T27] 1 lock held by syz-executor/4192: [ 1126.752135][ T27] #0: ffffffff8c120de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x320/0x6b0 [ 1126.769210][ T27] 1 lock held by syz-executor/4194: [ 1126.774461][ T27] #0: ffff88806361a0e0 (&type->s_umount_key#110){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 1126.790337][ T27] 2 locks held by dhcpcd/5399: [ 1126.795288][ T27] #0: ffff8880581a4120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xce0 [ 1126.807212][ T27] #1: ffffffff8c120de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x347/0x6b0 [ 1126.818626][ T27] [ 1126.821001][ T27] ============================================= [ 1126.821001][ T27] [ 1126.831485][ T27] NMI backtrace for cpu 1 [ 1126.835845][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 1126.843854][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1126.853931][ T27] Call Trace: [ 1126.857215][ T27] [ 1126.860233][ T27] dump_stack_lvl+0x168/0x230 [ 1126.865026][ T27] ? show_regs_print_info+0x20/0x20 [ 1126.870409][ T27] ? load_image+0x3b0/0x3b0 [ 1126.874943][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 1126.880354][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 1126.885498][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 1126.890448][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1126.896630][ T27] ? _printk+0xcc/0x110 [ 1126.900815][ T27] ? load_image+0x3b0/0x3b0 [ 1126.905355][ T27] ? load_image+0x3b0/0x3b0 [ 1126.909891][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1126.915997][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 1126.922022][ T27] watchdog+0xe0f/0xe50 [ 1126.926220][ T27] kthread+0x436/0x520 [ 1126.930317][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1126.935369][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1126.939996][ T27] ret_from_fork+0x1f/0x30 [ 1126.944457][ T27] [ 1126.948015][ T27] Sending NMI from CPU 1 to CPUs 0: [ 1126.953389][ C0] NMI backtrace for cpu 0 [ 1126.953400][ C0] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted 5.15.189-syzkaller #0 [ 1126.953417][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1126.953428][ C0] Workqueue: phy51 ieee80211_iface_work [ 1126.953450][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x60 [ 1126.953469][ C0] Code: 94 ab 8a 7e 65 8b 15 95 ab 8a 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00 00 <83> fa 02 75 21 48 8b 91 18 16 00 00 48 8b 32 48 8d 7e 01 8b 89 14 [ 1126.953484][ C0] RSP: 0018:ffffc90000ce78f0 EFLAGS: 00000246 [ 1126.953497][ C0] RAX: ffffffff893eb9d2 RBX: 0000000000000004 RCX: ffff88813fed0000 [ 1126.953509][ C0] RDX: 0000000000000000 RSI: 0000000000000078 RDI: 000000000000003c [ 1126.953520][ C0] RBP: 000000000000003c R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 1126.953531][ C0] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: 000000000000000b [ 1126.953543][ C0] R13: 0000000000000078 R14: dffffc0000000000 R15: ffff88802f54b350 [ 1126.953555][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1126.953569][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1126.953581][ C0] CR2: 00007fcf22a152d8 CR3: 000000002a075000 CR4: 00000000003506f0 [ 1126.953596][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1126.953606][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1126.953616][ C0] Call Trace: [ 1126.953621][ C0] [ 1126.953626][ C0] ieee80211_sta_get_rates+0x422/0x6b0 [ 1126.953656][ C0] ieee80211_ibss_rx_queued_mgmt+0xf47/0x29c0 [ 1126.953684][ C0] ? ieee80211_ibss_rx_no_sta+0x730/0x730 [ 1126.953704][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1126.953724][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1126.953742][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1126.953761][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1126.953778][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1126.953801][ C0] ? kcov_remote_start+0xea/0x4a0 [ 1126.953819][ C0] ieee80211_iface_work+0x70e/0xc60 [ 1126.953839][ C0] process_one_work+0x863/0x1000 [ 1126.953864][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1126.953880][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 1126.953898][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 1126.953916][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1126.953936][ C0] ? wq_worker_running+0x97/0x170 [ 1126.953952][ C0] worker_thread+0xaa8/0x12a0 [ 1126.953983][ C0] kthread+0x436/0x520 [ 1126.953997][ C0] ? rcu_lock_release+0x20/0x20 [ 1126.954013][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1126.954028][ C0] ret_from_fork+0x1f/0x30 [ 1126.954053][ C0] [ 1126.960245][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1127.048187][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 1127.052701][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 1127.052724][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1127.052736][ T27] Call Trace: [ 1127.052743][ T27] [ 1127.052753][ T27] dump_stack_lvl+0x168/0x230 [ 1127.052782][ T27] ? show_regs_print_info+0x20/0x20 [ 1127.052804][ T27] ? load_image+0x3b0/0x3b0 [ 1127.052837][ T27] panic+0x2c9/0x7f0 [ 1127.052856][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1127.052881][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 1127.052902][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 1127.052931][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 1127.296203][ T27] watchdog+0xe4e/0xe50 [ 1127.300385][ T27] kthread+0x436/0x520 [ 1127.304461][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1127.309490][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1127.314089][ T27] ret_from_fork+0x1f/0x30 [ 1127.318525][ T27] [ 1127.321812][ T27] Kernel Offset: disabled [ 1127.326730][ T27] Rebooting in 86400 seconds..