last executing test programs: 1m17.814053788s ago: executing program 4 (id=15): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', 0x0}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 1m17.618176871s ago: executing program 4 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1m17.500546063s ago: executing program 4 (id=19): unshare(0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000140)=0x3, 0x4) getsockopt$MRT6(r0, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f00000000c0)) 1m17.362598065s ago: executing program 4 (id=20): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000280)=ANY=[], 0xfd, 0x291, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x20) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1m17.08101391s ago: executing program 4 (id=24): syz_mount_image$gfs2(&(0x7f0000000400), &(0x7f0000012500)='./file0\x00', 0x0, &(0x7f0000000200)={[{@loccookie}, {@discard}, {@debug}, {@meta}, {@norgrplvb}, {@data_writeback}, {@noquota}, {@upgrade}, {@barrier}, {@statfs_percent={'statfs_percent', 0x3d, 0x3}}, {@noacl}, {@statfs_quantum}, {}, {@norecovery}]}, 0x1, 0x125bb, &(0x7f0000037080)="$eJzs/XkUqHO9P3zva97KPCRCKSQlIqEkYyWRIRlSCYWoCGUoQ0rSQCpjKpQpSZIyhDILkSmVsaQQkUSFZ53nvPd9rue+r1/X/Tv3Os+61vO8Xn+cz7V2fPPHWev9fu+tvWcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAjBkziucttOt/nN4Pbf+fp5ttxoxul//8nvs//s/svb+m/M8zc6H/xbP5a2dbcpcPb7fzez704f84/61/vt333ue1u++9z3/r7/2/42WPbrzaTxd62/OOesMZZy169U/W+R/7LwIAAAAAAACA/0H59f+y90NX/Z/+km7GjJlz/p9+bL4ZM2bOPmNGWV1z3fd+/v/kv3/zzfj/a3979v/J//sAAADwf1P2f937kcP7/3HufDNmHHjA/+XH/48fmdn+x//d7uOPPj50e56fv/75//VD5f/l43/Q/LkL5D4vd8H/z38+AAAA+P8t2f9N70f6m33W/75/4dwX5C6Su2juYrkvzH1R7uK5L859Se4S/3n+j8m/VO5Lc5fOfVnuMrkvz31F7rK5r8xdLnf53FflrpC7Yu6rc1fKfU3uyrmr5K6a+9rc1+Wulvv63NVz35C7Ru6auWvlrp076/cZWDf3jblvyn1z7nq5b8ldP/etuRvkbpj7ttyNcjfO3SR309y3526W+47czXO3yN0yd6vcd+Zunfuu3Hfnvid3m9z35m6bu11ufo+JGe/LfX/uDrk75u6U+4HcWb+JRH5fihkfzP1Q7odzd83dLfcjubvn7pG7Z+5Hcz+Wu1fu3rmzfgOKfXM/nvuJ3P1y98+d9TNjB+Z+Mveg3E/lfjr34NzP5B6S+9ncQ3M/l/v53C/kfjH3sNxZP4f3pdwjcr+c+5Xcr+YemXtU7tG5x+Qem3tc7tdyj8/9eu43cr+Ze0Luibkn5X4r99u5J+eekntq7mm5p+d+J/eM3O/mnpn7vdyzcr+fe3buD3LPyf1h7rm5P8r9ce55uefnXpB7Ye5Pci/KvTj3ktyf5v4s99Lcy3Ivz70i98rcWf8O1tW51+TO+netrs29Lvf63F/k3pB7Y+4vc2/KvTn3ltxbc2/L/VXu7bm/zv1N7m9z78i9M/eu3Ltz78m9N/d3ub/PvS/3D7n35/4x90+5D+Q+mPtQ7p9zH859JPcvuY/mPpb719xZGfe33Cdy/577ZO5Tuf/I/Wfuv3Kfzn0mN/8y06yfNi/yUSToiio3P99eJHeLNrfLnZk7W+5zcp+bm99fp5gjN/9+XjFX7ty58+TOmztfbn4evMjPgxf5efAiPw9e5OfBi+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9YMjf5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/Z/0aXpH8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfJ/1sYtkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/s/atWXyv8wPlMn/MvlfJv/L5H+Z/C+T/2Xyv0z+l8n/MvlfJv/L5H+Z/C+T/2Xyv0z+l8n/MvlfLvDv93+ZXlCmF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5Szfl4gvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8pkX5leUKYXlOkFZXpBmV5QpheU6QVlekGZXlCmF5TpBYn/GVV6QZVeUOU/qNILquRxlV5QpRdU6QVVekGVXlClF1TpBVV6QZVeUKUXVOkFVXpBlV5QpRdU6QVVfl6gSv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf8q+V8l/6vkf5X8r5L/VfK/Sv5Xyf9Z/5p9nfyvk/918r/OX1An/+vkf538r5P/dfK/Tv7Xyf86+V8n/+vkf538r5P/dfK/nvff7/86vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTibW6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV4wK36b9IImvaBJL2jSC5r8hU16QZNe0KQXNOkFTXpBk17QpBc06QVNekGTXtCkFzTpBU1+XqBJ/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/4nxGm/xvk/9t8r9N/rfJ/zZ/Q5v8b5P/bfK/Tf63yf82+d8m/9vkfzvXv9//bXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbbKyTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaP+zF7RtekHifUaXXtClF3TpBV16QZf87tILuvyNXXpBl17QpRd06QVdekGXXtClF3T5eYEu+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f872b9WdXJ/y753yX/u+R/l/zvkv9d8n/Wn2/dJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+7/LxAl/xPfM+YmfyfOevP3U/+z0z+z0z+z0z+z0z+z8wDM5P/M5P/M5P/M2f/9/t/ZnrBrN//f2Z6wcz0gpnpBTPTC2amF8xML5iZXjAzvWBmesFMv88eAAAA/H9R9v/M//qRWf8bvRn/71/fO+C/fjOjGafcMfd9S6y+0woDz8z6fQLn+5/8ZwUAAAD+e0b2/1d7+79Y9AWPPW+dw1+/5MAzs/58APsfAAAAJmhk/x/Z2//lbIvftNbRG//2MwPPzPpzAe1/AAAAmKCR/X9Ub/9XP7j/Vd//9LVffe7AM/l9fOx/AAAAmKKR/X90b//XV6575x5bzrHHaQPP5Pfvtf8BAABgikb2/zG9/d984qDVPrPqSS+6aOCZ/Lk99j8AAABM0cj+P7a3/9udzlv0pvu2/ekiA8/kz+u1/wEAAGCKRvb/cb393920/7Mvmn+By/4y8Mysv8f+BwAAgAka2f9f6+3/mbv9ZP7zr7p5yU0Gnlk81/4HAACACRrZ/8f39v9sP9/3ifVO3We3dQeeeXGu/Q8AAAATNLL/v97b/8+5a83bFt3jgsPvH3jmJbn2PwAAAEzQyP7/Rm//P/d9n1np4Z2Wun3ngWeWyLX/AQAAYIJG9v83e/t/9qVv2+2MH96/ytUDzyyZa/8DAADABI3s/xN6+3+OI+b58ntuWW+XOweeWSrX/gcAAIAJGtn/J/b2/5wHv/zs5852yBc+PvDMS3PtfwAAAJigkf1/Um//z7Xanzd68uHdn71i4Jmlc+1/AAAAmKCR/f+t3v6f+5lfvOLuFc5ebPuBZ16Wa/8DAADABI3s/2/39v8868x2/XybLPKW3QeeWSbX/gcAAIAJGtn/J/f2/7wbrfjIm754x3duHHjm5bn2PwAAAEzQyP4/pbf/53vgb3Oc8+U17n3XwDOvmPXX/I/+wwIAAAD/LSP7/9Te/p//65vfu9vbDqyeHXhm2Vz7HwAAACZoZP+f1tv/CyzxpRmfXG65zf848Mwrc+1/AAAAmKCR/X96b/8/b/nvLH7rXx8+9y0DzyyXa/8DAADABI3s/+/09v+Ch37w0iXvW+myDw48s3yu/Q8AAAATNLL/z+jt/+cv/b2lL1718SV/MfDMq3LtfwAAAJigkf3/3d7+X+iIna5565Zb7fargWdWyLX/AQAAYIJG9v+Zvf2/8MGbPvj8Tx93+D4Dz6yYa/8DAADABI3s/+/19v8LVvvqbA8e3d7+xMAzr861/wEAAGCCRvb/Wb39v8h73r//putcucrbB55ZKdf+BwAAgAka2f/f7+3/Re/75vHfXGKnXdYeeOY1ufY/AAAATNDI/j+7t/8Xe/TYCx9/8tQv3DPwzMq59j8AAABM0Mj+/0Fv/79w/a3f3b1w02ffOfDMKrn2PwAAAEzQyP4/p7f/X/Tmi+d4waVHLPbUwDOr5tr/AAAAMEEj+/+Hvf2/+GN7P/LHk1Z7y8MDz7w21/4HAACACRrZ/+f29v+L/7D29Rfu//R33jrwzOty7X8AAACYoJH9/6Pe/n/J1p9+xdu23ebeSwaeWS3X/gcAAIAJGtn/P+7t/yWWfumlh150QrXtwDOvz7X/AQAAYIJG9v95vf2/5BH3LL73nXNtvufAM6vn2v8AAAAwQSP7//ze/l/q4N/MWLa8/tzbBp55Q679DwAAABM0sv8v6O3/l6626L13rjrHMlsPPLNGrv0PAAAAEzSy/y/s7f+lv37XbOvcd+3Pnxl4Zs1c+x8AAAAmaGT//6S3/1+2xEIP/ujT237jTwPPrJVr/wMAAMAEjez/i3r7f5nlX3LN77Y8ab/1B55ZO9f+BwAAgAka2f8X9/b/yw+9b+m511l95SsHnlkn1/4HAACACRrZ/5f09v8rjv3rbCcf/eyt7xt4Zt1c+x8AAAAmaGT//7S3/5d90UoPbvbkxp/8yMAzb8y1/wEAAGCCRvb/z3r7/5WvnuuaYonDt7th4Jk35dr/AAAAMEEj+//S3v5f7otXL/3YpTvP84GBZ96ca/8DAADABI3s/8t6+3/5tz749gdeePpfrhp4Zr1c+x8AAAAmaGT/X97b/696YtlzF9q//tZdA8+8Jdf+BwAAgAka2f9X9Pb/CvcueNQGJ12+7icGnlk/1/4HAACACRrZ/1f29v+KW9y450UXbTH7owPPvDXX/gcAAIAJGtn/V/X2/6tfsfux+257zJ83HXhmg1z7HwAAACZoZP9f3dv/Kx35w70OKVc+b52BZzbMtf8BAABggkb2/zW9/f+aTx625W/vfGKLPww887Zc+x8AAAAmaGT//7y3/1deZb0Llrtq2WV+OvDMRrn2PwAAAEzQyP6/trf/Vzn2cxv9cP6Hfr7dwDMb59r/AAAAMEEj+/+63v5f9UUbnP3GPdb6xh4Dz2ySa/8DAADABI3s/+t7+/+1r/7Yl+c99aD9bh14ZtafCWD/AwAAwASN7P9f9Pb/6774/d3u+eFiK2818Mzbc+1/AAAAmKCR/X/DrP1f50d2uuvWJwee2SzX/gcAAIAJGtn/N/Z+/f/1m3/qvtNn2+2Tjww8845c+x8AAAAmaGT//7K3/1df+6LLnrnlrO02GHhm81z7HwAAACZoZP/f1Nv/b3hqr6XmWGH9ef4+8MwWufY/AAAATNDI/r+5t//XOHHHZbd4+NC/bDbwzJa59j8AAABM0Mj+v6W3/9d8/pm/+M4Xl/jWWgPPzPozAex/AAAAmKCR/X9rb/+vNftXHn52k/vWvXvgmXfm2v8AAAAwQSP7/7be/l/73E1mn/1te82+y8AzW+fa/wAAADBBI/v/V739v87P/vK7q7983p+vH3jmXbn2PwAAAEzQyP6/vbf/193rNcVr/7rgebcPPPPuXPsfAAAAJmhk//+6t//fuMvsL/rQcrduse/AM+/Jtf8BAABggkb2/296+/9Nt17zs+PvPOFdRw08s02u/Q8AAAATNLL/f9vb/2/eY+bLunKbC1caeOa9ufY/AAAATNDI/r+jt//Xu/76nz++7fV/fPHAM9vm2v8AAAAwQSP7/87e/n/Lrx9/4JsXzTXbAQPPbJdr/wMAAMAEjez/u3r7f/1tVpi56UlHrDH7wDPb59r/AAAAMEEj+//u3v5/67LbvnWe/Tc94cyBZ96Xa/8DAADABI3s/3t6+3+Do7515r0vfPpv5w088/5c+x8AAAAmaGT/39vb/xse9PXDzr10tflfMPDMDrn2PwAAAEzQyP7/XW//v23VLT647hJXvv+EgWd2zLX/AQAAYIJG9v/ve/t/o3/uM8+7nmw/Uw08s1Ou/Q8AAAATNLL/7+vt/43XvPCvZx596k3zDzzzgVz7HwAAACZoZP//obf/N9ns4F/+Y52dVjh34Jmdc+1/AAAAmKCR/X9/b/9v+sgay8+25eP7vnbgmV1y7X8AAACYoJH9/8fe/n/7cffede2nVzr26IFnPphr/wMAAMAEjez/P/X2/2aLL/H6N9x33PWHDTzzoVz7HwAAACZoZP8/0Nv/71hpsUV2XnWr5ZYdeObDufY/AAAATNDI/n+wt/83P+xXzxy93IHves7AM7vm2v8AAAAwQSP7/6He/t9i2YUXKP+6xoWnDjyzW679DwAAABM0sv//3Nv/Wx71278/+uWH/3jxwDMfybX/AQAAYIJG9v/Dvf2/1UF/uPXbb1tutkUHntk91/4HAACACRrZ/4/09v87V33Rq9+xydlrfGngmT1y7X8AAACYoJH9/5fe/t96q5vWeviLu5+w4sAze+ba/wAAADBBI/v/0d7+f9fdC3xz0Yfv+NsSA898NNf+BwAAgAka2f+P9fb/ux9f7sD1Vlhk/oMHnvlYrv0PAAAAEzSy///a2//v2fBP251/y/3vX23gmb1y7X8AAACYoJH9/3hv/2+zwXOWP3m2pT7z9YFn9s61/wEAAGCCRvb/33r7/71/v/aXm+10yE2fHXhmn1z7HwAAACZoZP8/0dv/2/7uib8WP1xvhZcPPLNvrv0PAAAAEzSy///e2//bbbn8PI+devO+pww88/Fc+x8AAAAmaGT/P9nb/9sve8QzK++xwLHNwDOfyLX/AQAAYIJG9v9Tvf3/vqPevshl819w/bwDz+yXa/8DAADABI3s/3/09v/7D/rQ6w+/ap/lzhp4Zv9c+x8AAAAmaGT//7O3/3dY9dS7tttutb/XA88ckGv/AwAAwASN7P9/9fb/jsd94NVPXfz0804eeObAXPsfAAAAJmhk/z/d2/87LX7Grc+5a9O1vj/wzCdz7X8AAACYoJH9/0xv/39gpSP//u7qiJOGNv5BufY/AAAATNDI/n+2t/93PmyjBb672FwPfGPgmU/l2v8AAAAwQf9+/3czevt/l2uOXm/en13/3NcPPPPp3PH9P/S7BwIAAAD/o0b2f9Hb/x/c9d3fuefEbd6zzMAzB+f69X8AAACYoJH9X/b2/4e23/7QH+53wkWHDDzzmVz7HwAAACZoZP9Xvf3/4TtP3PGNx2x17QoDz8z6OQH7HwAAACZoZP/Xvf2/6yIHzP/udY9b9vCBZz6ba/8DAADABI3s/6a3/3c7+Y1PfHfJlfb+zMAzh+ba/wAAADBBI/u/7e3/j5z98dueeurxo5cceOZzufY/AAAATNDI/u96+3/3meev9Jzf73TjaQPPfD7X/gcAAIAJGtn/M3v7f4+PP//Xv1jl1OWfO/DMF3LtfwAAAJigkf0/W2//73nFnaustkW7/SIDz3wx1/4HAACACRrZ/8/p7f+P/vL3C+34qSs/fdHAM4fl2v8AAAAwQSP7/7m9/f+xHV/8z+OOWOTvxww8M+vPBLT/AQAAYIJG9v/svf2/1zV3z11seMfzXjfwzJdy7X8AAACYoJH9P0dv/++961KPPfbK3dd6xcAzR+Ta/wAAADBBI/t/zt7+32f7RW46+bGzT/riwDNfzrX/AQAAYIJG9v9cvf2/752/ftVmjyz3QDnwzFdy7X8AAACYoJH9P3dv/3/8Jy97059XfPi53xx45qu59j8AAABM0Mj+n6e3/z/RPfLtxTZd4z0/GnjmyFz7HwAAACZoZP/P29v/+813y6fectiBFy0w8MxRufY/AAAATNDI/p+vt//3P22+95+34z7Xfm/gmaNz7X8AAACYoJH9P39v/x+w9n137HfOBcvOMfDMMbn2PwAAAEzQyP5foLf/D3zqJW/4ws0L7L3wwDPH5tr/AAAAMEEj+/95vf3/yT8vtNjtM28++scDzxyXa/8DAADABI3s/wV7+/+gze/61zILrHfjqwee+Vqu/Q8AAAATNLL/n9/b/596ySfme+TqQ5Y/cuCZ43PtfwAAAJigkf2/UG//f/qYCx5d5LSltj9w4Jmv59r/AAAAMEEj+3/h3v4/+AsH3vDmPe//9EsGnvlGrv0PAAAAEzSy/1/Q2/+fWflNK1zwqcMP+MXAM9/Mtf8BAABggkb2/yK9/X/IVz99++JbbPzeDw48c0Ku/Q8AAAATNLL/F+3t/88ut/brfrnKsyvtM/DMibn2PwAAAEzQyP5frLf/D33d3gsf/PvVb/7VwDMn5dr/AAAAMEEj+/+Fvf3/uQMvfnLPp046/u0Dz3wr1/4HAACACRrZ/y/q7f/PX/vIhSsvue3Hnxh45tu59j8AAABM0Mj+X7y3/7/w0Ze9+7J1r136noFnTs61/wEAAGCCRvb/i3v7/4vbzrf/4cfMcfXaA8+ckmv/AwAAwASN7P+X9Pb/Yb+65fjt9nvigqcGnjk11/4HAACACRrZ/0v09v/hC//9nn1PXHmrdw48c1qu/Q8AAAATNLL/l+zt/y9981XVIT87Zs63Djxzeq79DwAAABM0sv+X6u3/I8557ot/u9gWjzw88Mx3cu1/AAAAmKCR/f/S3v7/8pzXXbJcdfnJ2w48c0au/Q8AAAATNLL/l+7t/6/s8+HlHrirftMlA898N9f+BwAAgAka2f8v6+3/r15y2nULXXz6fLcNPHNmrv0PAAAAEzSy/5fp7f8jb/7yQxtst/Njew48871c+x8AAAAmaGT/v7y3/4/60GZzXrTnWQdsMvDMWbn2PwAAAEzQyP5/RW//H33tUfctcdpu7/3LwDPfz7X/AQAAYIJG9v+yvf1/zEc37m67+q6V7h945uxc+x8AAAAmaGT/v7K3/4/dduelDlpgsZvXHXjmB7n2PwAAAEzQyP5frrf/j/vVdy/bdeZBx1898Mw5ufY/AAAATNDI/l++t/+/dsG7z77q5rU+vvPAMz/Mtf8BAABggkb2/6t6+//44uiNXnfOQ0t/fOCZc3PtfwAAAJigkf2/Qm//f32BE3f78I7LXn3nwDM/yrX/AQAAYIJG9v+Kvf3/je9t/+WvHXbrBdsPPPPjXPsfAAAAJmhk/7+6t/+/ecZnLjlg0wW3umLgmfNy7X8AAACYoJH9v1Jv/5/wvDVfvPuK581548Az5+fa/wAAADBBI/v/Nb39f2K5b/XSR/Z6ZPeBZy7Itf8BAABggkb2/8q9/X/Sj39yz82P3XfyswPPXJhr/wMAAMAEjez/VXr7/1vXvnDOeV65xJveNfDMT3LtfwAAAJigkf2/am//f/ujtz9074aHzveWgWcuyrX/AQAAYIJG9v9re/v/5G1/d925R6z/2B8Hnrk41/4HAACACRrZ/6/r7f9TfrXkcuuedsiHtht45pJc+x8AAAAmaGT/r9bb/6fuc/9ld+253mE/HXhm1o/Z/wAAADBBI/v/9b39f9oliy/1igXu/82tA8/8LNf+BwAAgAka2f+r9/b/6Te/oNvr6qVeu8fAM5fm2v8AAAAwQSP7/w29/f+dD91x3+duvmD3JweeuSzX/gcAAIAJGtn/a/T2/xn7/fyy18/c54itBp65PNf+BwAAgAka2f9r9vb/dy+bY6nrd7z5ig0Gnrki1/4HAACACRrZ/2v19v+ZN6zcHXvOAi99ZOCZK3PtfwAAAJigkf2/dm//f+8Dj96306YPb7bZwDNX5dr/AAAAMEEj+3+d3v4/69SbjtntsOXO+fvAM1fn2v8AAAAwQSP7f93e/v/+vAvs+8lHDrz77oFnrsm1/wEAAGCCRvb/G3v7/+x2ua1uXXGNYq2BZ36ea/8DAADABI3s/zf19v8PLvzTj5d85R1vvn7gmWtz7X8AAACYoJH9/+be/j/nqvU3v/uxRU7bZeCZ63LtfwAAAJigkf2/Xm////AjX/jhfEec/fS+A8/M+ncC7H8AAACYoJH9/5be/j/3/T/6yps23H2R2wee+UWu/Q8AAAATNLL/1+/t/x/9drePnrPFqR96ZuCZG3LtfwAAAJigkf3/1t7+//F+Pzj+lZ/a6bCtB565Mdf+BwAAgAka2f8b9Pb/eZftuf8dv7/yN+sPPPPLXPsfAAAAJmhk/2/Y2//n3/C2d392lfa1fxp45qZc+x8AAAAmaGT/v623/y/4wGcv3GfJ43Z/38AzN+fa/wAAADBBI/t/o97+v3C2fa752VNbHXHlwDO35Nr/AAAAMEEj+3/j3v7/yQ8uXPpVxzx+xQ0Dz9yaa/8DAADABI3s/016+/+iUw6e7X3rrvTSjww8c1uu/Q8AAAATNLL/N+3t/4sXXePBI0+8frOrBp75Va79DwAAABM0sv/f3tv/l7xxo7sv3W+ucz4w8MztufY/AAAATNDI/t+st/9/+q8jy+UXO+HuTww88+tc+x8AAAAmaGT/v6O3/3/2xzNesv3PtinuGnjmN7n2PwAAAEzQyP7fvLf/L93kAz896q6n37zpwDO/zbX/AQAAYIJG9v8Wvf1/2VJXvXKTarXTHh145o5c+x8AAAAmaGT/b9nb/5d/bc5rT9juiKf/MPDMnbn2PwAAAEzQyP7fqrf/rzjk1X/+28WbLrLOwDOzfk8A+x8AAAAmaGT/v7O3/69c4bG52g2XWOjUgWfuzrX/AQAAYIJG9v/Wvf1/1eHL//5rR9z35HMGnrkn1/4HAACACRrZ/+/q7f+rl3mi/fBj65+x6MAz9+ba/wAAADBBI/v/3b39f83q1770da88dIOLB575Xa79DwAAABM0sv/f09v/P//Ucy6/asUF6xUHnvl9rv0PAAAAEzSy/7fp7f9rr97qwEMfufW+Lw08c1+u/Q8AAAATNLL/39vb/9ft/rXt9j5sr+8fPPDMH3LtfwAAAJigkf2/bW//X7/DyWstu+l5Gy0x8Mz9ufY/AAAATNDI/t+ut/9/ccc237zznLVe/PWBZ/6Ya/8DAADABP2v9v9//kC3fW//3/DCtX57xY4HXbrawDN/yrX/AQAAYIJGfv3/fb39f+O3P7X6SjOXPerlA888kGv/AwAAwASN7P/39/b/L79/0Qvfe/NDH/3swDMP5tr/AAAAMEEj+3+H3v6/6bl7PX3E1bu9oRl45qFc+x8AAAAmaGT/79jb/zfv/+t5N1/grDtPGXjmz7n2PwAAAEzQyP7fqbf/b7l8kb98a8/FDj1r4JmHc+1/AAAAmKCR/f+B3v6/9calbvzLaXftPO/AM4/k2v8AAAAwQSP7f+fe/r9t57tXrC6uF1pp4Jm/5Nr/AAAAMEEj+3+X3v7/1dUv/tUx213+5FEDzzyaa/8DAADABI3s/w/29v/tu//+tR+odj7jgIFnHsu1/wEAAGCCRvb/h3r7/9c73PmC1e86fYMXDzzz11z7HwAAACZoZP9/uLf/f3PH85+67mcr12cOPPN4rv0PAAAAEzSy/3ft7f/fXvTgYXsu9sR9sw8887dc+x8AAAAmaGT/79bb/3fUy37w4P22+P4LBp55Itf+BwAAgAka2f8f6e3/O+de8K2/PPGYjc4beObvufY/AAAATNDI/t+9t//vOv3GMxdfd9sXVwPPPJlr/wMAAMAEjez/PXr7/+7TVnj69cecdOkJA888lWv/AwAAwAQVz1uo/Tf7f8/e/r9nvsdfeP1Tcxx17sAz/8i1/wEAAGCCRn79/6O9/X9vd/3qxy557UfnH3jmn7n2PwAAAEzQyP7/WG///+4nM3+70yobv+HogWf+lWv/AwAAwASN7P+9evv/91efvuIZvz/8ztcOPPN0rv0PAAAAEzSy//fu7f/7dt/lxvd8avVDlx145plc+x8AAAAmaGT/79Pb/3/Y4R1/ee4Wz+582MAzz+ba/wAAADBBI/t/397+v/+Ow+d98qwFfvS5gVdmfdj/AAAAMEEj+//jvf3/x/03eWrbXW5+x8sGXpn119j/AAAAMEEj+/8Tvf3/p8u/8oIvzb5PufrAK2U+7H8AAACYoJH9v19v/z9w45mvvfyGC373tYFXqnzY/wAAADBBI/t//97+f3DnHX/1muuWOn3ugVfqfNj/AAAAMEEj+/+A3v5/6KePrbDjPPevf/bAK00+7H8AAACYoJH9f2Bv//9531ffcNxu673w2wOvtPmw/wEAAGCCRvb/J3v7/+EPz/noL757yDPdwCuzfsz+BwAAgAka2f8H9fb/I7dcNd9qb9n98z8ZeGXW32//AwAAwASN7P9P9fb/XxZ84MNLHHn2B1848Mps+bD/AQAAYIJG9v+ne/v/0e++4gu3PbHIqjMHXnlOPux/AAAAmKCR/X9wb/8/dt7zzjhomTt+dfrAK8/Nh/0PAAAAEzSy/z/T2/9/rW7YcNeV1/jSUgOvzJ4P+x8AAAAmaGT/H9Lb/49/7CMn/PDBA3f91MArc+TD/gcAAIAJGtn/n+3t/79dd87ab/zcckt8eeCVOfPxv7H/q//mPzEAAADwv2tk/x/a2/9P3P7Fbefd/OHLXzXwylz58Ov/AAAAMEEj+/9zvf3/9+3efMA9a670o+cNvDJ3Pux/AAAAmKCR/f/53v5/8qeH7rzv8Y+/45yBV+bJh/0PAAAAEzSy/7/Q2/9P7fvWzx7y9FblSQOvzJsP+x8AAAAmaGT/f7G3///x4Y+e+tvFj/tdMfDKrN1v/wMAAMAEjez/w3r7/5+3nPWW5VZrT//CwCvz58P+BwAAgAka2f+H9/b/v85de7Wj7r5y/eUGXlkgH/Y/AAAATNDI/v9Sb/8/Pfun79z+gJ1euMrQK/mw/wEAAGCCRvb/Eb39/8zzL352+a1PfebYgVcWzIf9DwAAABM0sv+/3Nv/z56496KXXrDp51808Mrz82H/AwAAwASN7P+v/Nf+L2YcdNOeJ+xwxAc/OfDKQvmw/wEAAGCCRvb/V3v7v1h1gaM26VZb9asDryycD/sfAAAAJmhk/x/Z2//lssud2/7m6V+tPPDKC/Jh/wMAAMAEjez/o3r7vzrqT2//2xXbfOmCgVcWyYf9DwAAABM0sv+P7u3/+nfrX7D8wifsutDAK4vmw/4HAACACRrZ/8f09n+z5Re2vHSfuZaYc+CVxfJh/wMAAMAEjez/Y3v7v93gR3sddfL1l58x8MoL82H/AwAAwASN7P/jevu/+/tux26/+XmXrDHwyqy/x/4HAACACRrZ/1/r7f+Zm/1gt2c+t9fi9w68sng+7H8AAACYoJH9f3xv/8/2yJ5fnuPBW/f828ArL86H/Q8AAAATNLL/v97b/8/559vO3nLlBb+y+cArL8mH/Q8AAAATNLL/v9Hb/89d87Mbnb7MoXf8ZuCVJfJh/wMAAMAEjez/b/b2/+yz3z7/H59Yf7W9B15ZMh/2PwAAAEzQyP4/obf/5zj3hU+84Mj7dvzQwCtL5cP+BwAAgAka2f8n9vb/nCcuedvb3rLEZ68deOWl+bD/AQAAYIJG9v9Jvf0/1/N/t9KF373rnx8deGXpfNj/AAAAMEEj+/9bvf0/969/ut63dlts4ZsHXnlZPux/AAAAmKCR/f/t3v6fZ5vuO5vPc9aGlw68skw+7H8AAACYoJH9f3Jv/8+7x+sPra7b7XvvHXjl5fmw/wEAAGCCRvb/Kb39P9/1/9zxLzc89Ic/D7zyinzY/wAAADBBI/v/1N7+n//8LT+z0uzLdm8beGXZfNj/AAAAMEEj+/+03v5fYMY33nfFLgdtusXAK6/Mh/0PAAAAEzSy/0/v7f/nzf/tdY44a62z/zHwynL5sP8BAABggkb2/3d6+3/BM7c7+b0nH3PJHQOvLJ8P+x8AAAAmaGT/n9Hb/8+f/YQN/rnPFovvP/DKq/Jh/wMAAMAEjez/7/b2/0Ln7vC9mQs/seeOA6+skA/7HwAAACZoZP+f2dv/C5/4ri9ufcXKX7lm4JUV82H/AwAAwASN7P/v9fb/C2b+r195dT7sfwAAAJigkf1/Vm//L7Lvjgsv2O282u8HXlkpH/Y/AAAATNDI/v9+b/8v+tMzn/z9Dpfv+NeBV16TD/sfAAAAJmhk/5/d2/+L3fKV28+6oP7sxgOvrJwP+x8AAAAmaGT//6C3/1/44U1et/bWz/7zwYFXVsmH/Q8AAAATNLL/z+nt/xft8v0d33PA6guvN/DKqvmw/wEAAGCCRvb/D3v7f/FbP3boGXcfvuG7B155bT7sfwAAAJigkf1/bm//v/hnG3znydU2/t6/Bl55XT7sfwAAAJigkf3/o97+f8len1vvuYtf+4ddB15ZLR/2PwAAAEzQyP7/cW//LzH7y06+/uk5ul8OvPL6fNj/AAAAMEEj+/+83v5f8txH1nn98SdtevnAK6vnw/4HAACACRrZ/+f39v9SJ97yvp3W3PbsHQZeeUM+7H8AAACYoJH9f0Fv/7/0+fN95th9TnjlQwOvrJEP+x8AAAAmaGT/X9jb/0uff+MuM07e5hcbDryyZj6y/8v/yX9kAAAA4H/TyP7/SW//v2zGgl/86xXXH7flwCtr5cOv/wMAAMAEjez/i3r7f5n5l/3eKQvPtc8/B15ZOx/2PwAAAEzQyP6/uLf/X37mgxu8vTtixY8NvLJOPux/AAAAmKCR/X9Jb/+/4qKnd7n3N5v+8paBV9bNh/0PAAAAEzSy/3/a2//L1q/74jwXPH3wzwZeeWM+7H8AAACYoJH9/7Pe/n/l3MX31t1htR22GXjlTfmw/wEAAGCCRvb/pb39v9zpV25w7gFXLvDrgVfenA/7HwAAACZoZP9f1tv/y+9436vO3Lp9fK+BV9bLh/0PAAAAEzSy/y/v7f9X/fIlN71rtVO/+eGBV96SD/sfAAAAJmhk/1/R2/8rXLHQY7PdvdOa1w28sn4+7H8AAACYoJH9f2Vv/6/48bvm/sfTj89cc+CVt+bD/gcAAIAJGtn/V/X2/6tnfuLZNyy+0p9+N/DKBvmw/wEAAGCCRvb/1b39v9LZFyx67ZrH/eTxgVc2zIf9DwAAABM0sv+v6e3/15x84GpHH7/V1u8YeOVt+bD/AQAAYIJG9v/Pe/t/5UXedOfOnzvwlbsNvLJRPux/AAAAmKCR/X9tb/+vctGnV3p08zV+cdPAKxvnw/4HAACACRrZ/9f19v+q9dq3lSs/fNxlA69skg/7HwAAACZoZP9f39v/r5177yfe8eBy+7x/4JVN82H/AwAAwASN7P9f9Pb/606/eP5vP3H2ig8MvPL2fNj/AAAAMEEj+/+G3v5f7eq3brvoMrv/8s0Dr2yWD/sfAAAAJmhk/9/Y2/+v3/3QAx5+yx0Hv2fglVl/JqD9DwAAABM0sv9/2dv/q+9w1gnnH7nIDk8PvLJ5Pux/AAAAmKCR/X9Tb/+/4Y6Prr3ebvcv8KaBV7bIh/0PAAAAEzSy/2/u7f81Dn7/mxf57lKP3zfwypb5sP8BAABggkb2/y29/b/mat88/ZHrDvnmYwOvbJUP+x8AAAAmaGT/39rb/2stfeznLphnvTU3Gnjlnfmw/wEAAGCCRvb/bb39v/YRW+/05tlvnvnbgVe2zof9DwAAABM0sv9/1dv/6/zhmYO/cMMCf9pv4JV35cP+BwAAgAka2f+39/b/uluvsv1+Z13wk50GXnl3Pux/AAAAmKCR/f/r3v5/45vLdZfZZZ+tfz7wynvyYf8DAADABI3s/9/09v+bHrvslNuPn2PLlw68sk0+7H8AAACYoJH9/9ve/n/zRu1b117z2h9/euCV9+bD/gcAAIAJGtn/d/T2/3oPXHLmWYtv+9ARA69smw/7HwAAACZoZP/f2dv/b3nmH4f9/umT5lh+4JXt8mH/AwAAwASN7P+7evt//XVW++CCd6++zoUDr2yfD/sfAAAAJmhk/9/d2/9vnW2Xl2222rPfXmzglfflw/4HAACACRrZ//f09v8GPzj95ydvvfGjsw288v582P8AAAAwQSP7/97e/t/wlMMfeOyAw+f+zsArO+TD/gcAAIAJGtn/v+vt/7ct+o6ZxQ47bzvPwCs75sP+BwAAgAn69/v/vufO+K/9v9Fde+yx0AWnH/SDgVd2yof9DwAAABM08uv/9/V+/X/j95195AO/qW/71sArH8iH/Q8AAAATNLL//9Db/5vsdsiPLuouf0078MrO+bD/AQAAYIJG9v/9vf2/6c833GyDhbfY/9CBV3bJh/0PAAAAEzSy///Y2/9vv/ih8w+54pivLz3wygfzYf8DAADABI3s/z/19v9mzTJb7Hvyyte8YeCVD+XD/gcAAIAJGtn/D/T2/zvmmXvv5fZ54uXHD7zy4XzY/wAAADBBI/v/wd7+3/w7tx73212W3fL8gVd2zYf9DwAAABM0sv8f6u3/LWabf9c3nvXQj58/8Mpu+bD/AQAAYIJG9v+fe/t/yx/88ogf3rDWQ3MNvPKRfNj/AAAAMEEj+//h3v7f6pQ//uCe2Q+a47sDr+yeD/sfAAAAJmhk/z/S2//vXPSVG887z2LrLD7wyh75sP8BAABggkb2/196+3/r/e546enX3fXtgwZe2TMf9j8AAABM0Mj+f7S3/9912Qsu3/K7uz36lYFXPpoP+x8AAAAmaGT/P9bb/+++YfHfz7HbWXO/ZuCVj+XD/gcAAIAJGtn/f+3t//d84P72mSPX3/bzA6/slQ/7HwAAACZoZP8/3tv/2+xUb3bvWw496JUDr+ydD/sfAAAAJmhk//+tt//fe9PPfjTPMkvcturAK/vkw/4HAACACRrZ/0/09v+2Vz555LpP3Pea4wZe2Tcf9j8AAABM0Mj+/3tv/2/3idX3OPfBvfZfcOCVj+fD/gcAAIAJGtn/T/b2//azfe243Vc+7+s/HHjlE/mw/wEAAGCCRvb/U739/74fbLX3AZsveM2JA6/slw/7HwAAACZoZP//o7f/33/KNlvc/LlbXz70yv75sP8BAABggkb2/z97+3+HRU8+/6UvOvyv5wy8ckA+7H8AAACYoJH9/6/e/t/x4u03/sm/Np73eQOvHJgP+x8AAAAmaGT/P93b/zs1J/5gw689+8Zi4JVP5sP+BwAAgAka2f/P9Pb/B+Y5+oiF11j9lJMGXjkoH/Y/AAAATNDI/n+2t/93/s67d/3Tu056eLmBVz6VD/sfAAAAJujf7/8ZM3r7f5e7Hzj8pgO3nesLA698Oh/2PwAAAEzQyP4vevv/g1u94iMvuufadx478MrB+bD/AQAAYIJG9n/Z2/8f2vB5m+7x+jnOX2Xglc/kw/4HAACACRrZ/1Vv/3/48Ru+/5lfP3HVJwdeOSQf9j8AAABM0Mj+r3v7f9fXPHbdN9qVX/aigVc+mw/7HwAAACZoZP83vf2/2+dfvdwu7z/mEysPvHJoPux/AAAAmKCR/d/29v9Hjp5zzlXO3+JrXx145XP5sP8BAABggkb2f9fb/7u/+KqHfn7K5bcsNPDK5/Nh/wMAAMAEjez/mb39v8c7PlDNuW/96gsGXvlCPux/AAAAmKCR/T9bb//v+dAZ9zz9gtO3OWPglS/mw/4HAACACRrZ/8/p7f+PPnnkJaddufOBcw68clg+7H8AAACYoJH9/9ze/v/YWhu9eKsbz/rrywZeOTwf9j8AAABM0Mj+n723//e6+4irL5ljt3k/N/DKl/Jh/wMAAMAEjez/OXr7f++t3v7yFT941xu/NvDKEfmw/wEAAGCCRvb/nL39v8+GH3rODt9f7JTVB175cj7sfwAAAJigkf0/V2//7/v4qX/8yhkHPXz2wCtfyYf9DwAAABM0sv/n7u3/jx/1zq+/Yte15pp74JWv5sP+BwAAgAka2f/z9Pb/J5Y9/uN3zf3QO7uBV47Mh/0PAAAAEzSy/+ft7f//F3t3Gn71+P/9Pp9lyjxkylSEkimJzFNmCSFDMs8yZ8iQKRG/oij9yEyZMsWPDKlQKELGTFGGIoSSon1jn67rvPa5juvc/72v/3GcNx6PO72P7/Fdr2PdfX7XWq3Lth5y5PXjNx5xf52VgeHQ/wAAAFCgTP+vGPV/j6uOGXlhyw/GrV1n5dZ/fv+/99kCAAAA/19k+r9R1P+XnzJw4ZFzVmnxYp2VQeHQ/wAAAFCgTP+vFPX/Fe8d8M2+A5+79KE6K/8Oh/4HAACAAmX6f+Wo/68ce9rYVfe58PbF66zcFg79DwAAAAXK9P8qUf9fdemj6804ZNr7V9dZuT0c+h8AAAAKlOn/VaP+v7rhsm9s0rvZFuvXWRkcDv0PAAAABcr0/2pR//d86vXmn03vfXSrOit3hEP/AwAAQIEy/d846v9rhvza8Lot97mif52VO8Oh/wEAAKBAmf5fPer/Xmu2mdF97HZX96izclc49D8AAAAUKNP/a0T9f+3IOQ2+XP2vEz6rs3J3OPQ/AAAAFCjT/2tG/X/dIq2+WvHijq3eqLNyTzj0PwAAABQo0/9rRf3fe/klx+wxpN/Ek+us3BsO/Q8AAAAFyvT/2lH/X//whKbDRyw7aGqdlfvCof8BAACgQJn+bxL1/w3fDD5h9olvXbh7nZX7w6H/AQAAoECZ/m8a9f+/Oh/Ra5FFj97ogDorD4RD/wMAAECBMv2/TtT/ffY85oEDPrl7wq91VoaEQ/8DAABAgTL9v27U/31nDWl3z/aHj9yrzsrQcOh/AAAAKFCm/5tF/X/jZj3bjphyW5cZdVYeDIf+BwAAgAJl+n+9qP9v6r3rJ3td0WaJ+XVWHgqH/gcAAIACZfp//aj/+91x0bw1j/xtRpc6Kw+HQ/8DAABAgTL9v0HU//2bjVxt5k6n3PNunZVHwqH/AQAAoECZ/m8e9f/N+685u+XtQ3c9q87Ko+HQ/wAAAFCgTP+3iPr/lumTG300f9FVTqqzMiwc+h8AAAAKlOn/DaP+H/D3lDY3NBk7+9U6K4+FQ/8DAABAgTL93zLq/4HtNviwx5ZrXP1VnZXHw6H/AQAAoECZ/t8o6v9bv5m23bTpn52wU52VJ8Kh/wEAAKBAmf7fOOr/QZ3X/Xzl3ue26lRn5clw6H8AAAAoUKb/N4n6/997rrZgl0OenPh7nZWnwqH/AQAAoECZ/t806v/bZn2x5hP7bDroojorw8Oh/wEAAKBAmf7fLOr/22/a6LSGA2deOLnOytPh0P8AAABQoEz/t4r6f3DL6df9OWenjcbXWXkmHPofAAAACpTp/82j/r9jx4lDh7W8YsIZdVb+Ew79DwAAAAXK9H/rqP/v7Lny3keO7z5yUp2VZ8Oh/wEAAKBAmf7fIur/u675fbWdl3u+y/l1Vp4Lh/4HAACAAmX6v03U/3dv13rek2ettMQxdVZGhEP/AwAAQIEy/b9l1P/3NG/4yTePTJoxps7K8+HQ/wAAAFCgTP9vFfX/vf3ebrvSE3vd06HOygvh0P8AAABQoEz/t436/75vun44seu1u/5YZ+XFcOh/AAAAKFCm/7eO+v/+zg+3WXfp9Vf5s87KS+HQ/wAAAFCgTP9vE/X/A3ve1OiCd76dfWidlZHh0P8AAABQoEz/bxv1/5BZnWZfPb3Zqe/VWXk5HPofAAAACpTp/+2i/h+6/y1rrrXltOvPrrMyKhz6HwAAAAqU6f/to/5/cHrHBT8ess8XJ9ZZGR0O/Q8AAAAFyvT/DlH/P/T3KZ8/17v3Dq/UWRkTDv0PAAAABcr0/45R/z/c7rHt9h64ygV71ln5528C+h8AAAAKlOn/naL+f+Sg59acv88HA6bXWXk1HPofAAAACpTp/52j/n90Zo8Fy7a8cPRfdVZeC4f+BwAAgAJl+n+XqP+H/bnb50fMeW7do+qsjA2H/gcAAIACZfp/16j/H9vpqu2GLrfLAdPqrIwLh/4HAACAAmX6v13U/49fefdOj4+/6vE96qy8Hg79DwAAAAXK9P9uUf8/0fake3Z9ZOOp+9dZeSMc+h8AAAAKlOn/3aP+f3KjI69a5awfFplVZ+XNcOh/AAAAKFCm//eI+v+pAbcdM7Xr2fteVmdlfDj0PwAAABQo0/97Rv0//Kut+zR94vFHP62zMiEc+h8AAAAKlOn/vaL+f/rQBae/+85ac9+ss/JWOPQ/AAAAFCjT/3tH/f/Mvq+2v2bpL1Y9pc7K2+HQ/wAAAFCgTP/vE/X/f2bXHuu2+sKn7ldnZWI49D8AAAAUKNP/+0b9/+xBo9r9NPbV63+os/JOOPQ/AAAAFCjT/+2j/n9u5mIPrDHktC/m1Vl5Nxz6HwAAAAqU6f/9ov4f8ef2vfa8+KEdDquz8l449D8AAAAUKNP/HaL+f36neSc8f+JWF7xfZ2VSOPQ/AAAAFCjT//tH/f/CuouvWBsxe8AFdVb++ZuA/gcAAIACZfr/gKj/Xxz01i8/f3Lo6KPrrHwQjv+l/xf/b3nGAAAAwH9Vpv8PjPr/pX/9NvG+RQetO7rOyofh8Po/AAAAFCjT/x2j/h+51eabd5py7AEX1ln5KBz6HwAAAAqU6f+Dov5/+fR1tq62v/fxT+qsfBwO/Q8AAAAFyvT/wVH/j/pg6uRfjlx66oQ6K//8TUD/AwAAQIEy/X9I1P+jR3/+5/1XjF/kzDork8Oh/wEAAKBAmf7vFPX/mAtXXfWQ2w/Y9+s6K5+GQ/8DAABAgTL9f2jU/68sNWJO/51ufHTnOiufhUP/AwAAQIEy/X9Y1P+vPnPJSkc32WHuIXVWPg+H/gcAAIACZfr/8Kj/X7tn9y22mL9g1d/qrHwRDv0PAAAABcr0/xFR/49d9fIPxi597Zqr1ln5Mhz6HwAAAAqU6f/OUf+PG7HL9ke+s9f8EXVWpoRD/wMAAECBMv1/ZNT/rze4+othT3w79NE6K1+FQ/8DAABAgTL93yXq/zcavfT3n13X32vZOiv/fCeg/gcAAIACZfr/qKj/3xx24RoNz3q+wVV1VqaGQ/8DAABAgTL9f3TU/+O/bn7oPo90n9K0zsq0cOh/AAAAKFCm/4+J+n/CYTNHPDt+0tNb1ln5Jhz6HwAAAAqU6f9jo/5/q/2k235YbqWDbq6z8m049D8AAAAUKNP/x0X9//acFS5ae87M9Teps/JdOPQ/AAAAFCjT/8dH/T+xzWaLLNZy07E31Fn5Phz6HwAAAAqU6f8Tov5/p+/sb3/b54r+t9VZmR4O/Q8AAAAFyvT/iVH/v3vb+NfuGrjTOVvXWZkRDv0PAAAABcr0/0lR/7/XdIlmHXt/tu3TdVZ+CIf+BwAAgAJl+v/kqP8nHTz0zQGHrPHJKnVWfgyH/gcAAIACZfr/lKj/3//pjBYnbPlkn3orM8Oh/wEAAKBAmf4/Ner/D+YdtHir6eeeeU+dlZ/Cof8BAACgQJn+Py3q/w937jd99Pyha/ass/JzOPQ/AAAAFCjT/6dH/f/R1/svdGiTU+ZvUGfll3DofwAAAChQpv+7Rv3/8WEDvn54p7FDN6uzMisc+h8AAAAKlOn/M6L+/6T9I6MX3L7oXv3qrPwaDv0PAAAABcr0/5lR/0+ec2qTpa64rcFadVZ+C4f+BwAAgAJl+v+sqP8/vXnQIcOPPHzKC3VWfg+H/gcAAIACZfr/7Kj/P9vkqOF7bP/b0w/XWZkdDv0PAAAABcr0/zlR/3++zQm3rDilzUEN66zMCYf+BwAAgAJl+v/cqP+/uPzeC75c9K31n6qz8kc49D8AAAAUKNP/50X9/+VVOzWb/8myY5evszI3HPofAAAACpTp/25R/0/Z+prXlh1xd/9F66z8GQ79DwAAAAXK9P/5Uf9/tfEL3x5x4tHn3FdnZV449D8AAAAUKNP/F0T9//XA7osMvfivbZvXWZkfDv0PAAAABcr0/4VR/0/9+qPpXYds90nvOit/hUP/AwAAQIEy/X9R1P/TDltr8TvG9uszuM7K3+HQ/wAAAFCgTP93j/r/m/bNWryxesczd6yzsiAc+h8AAAAKlOn/i6P+/3bOV29ufd6UEUekK9U/h/4HAACAAmX6/5Ko/787uEmTe4c2OWJuulKF39H/AAAAUKJM/18a9f/3P30zev9xfZadma5U/7wBQP8DAABAgTL9f1nU/9Pnffr1wo06zNw3Xalq4dD/AAAAUKBM//eI+n/Gzo0XmtPw3SEvpyvVwuHQ/wAAAFCgTP9fHvX/DzMun/Hg+yvufmy6Ui0SDv0PAAAABcr0/xVR//94wO4ND3/6xRW6pSvVouHQ/wAAAFCgTP9fGfX/zN0uab7MKZf8+mG6Ui0WDv0PAAAABcr0/1VR//+0YMQbf/XpdUXXdKX65/H6HwAAAAqU6f+ro/7/eftbn5l24O5Hv52uVA3Dof8BAACgQJn+7xn1/y+9uhy08ubfbfFRulItEQ79DwAAAAXK9P81Uf/P6n98t11mtni/e7pSLRkO/Q8AAAAFyvR/r6j/f21xz8Anfh1+++x0pVoqHPofAAAACpTp/2uj/v/tyAYXnrdpt0sPSleqpcOh/wEAAKBAmf6/Lur/37997d+9OkxusWu6Ui0TDv0PAAAABcr0f++o/2f/Ov/59/o3HjclXamWDYf+BwAAgAJl+v/6qP/n7LXNYU16jhrxWrpSLRcO/Q8AAAAFyvT/DVH//zHjjydHHNbgiOPTlWr5cOh/AAAAKFCm//8V9f/cA3bYf6+thy17brpSrRAO/Q8AAAAFyvR/n6j//9xt4bPXnHbmzHfSleqf7tf/AAAAUKBM//eN+n/egtH9Z/4xa8iR6UrVKBz6HwAAAAqU6f8bo/6ff3uraYc0a737gnSlWikc+h8AAAAKlOn/m6L+/2v9OYvd327wCt+lK9XK4dD/AAAAUKBM//eL+v/vzSes/8utnX/dO12pVgmH/gcAAIACZfq/f9T/C65d8pWqx5Arfk5XqlXDof8BAACgQJn+v/l/9n/VYOopS59274lHH5iuVKuFQ/8DAABAgTL9f0vU/wt1eeynW8eM22K3dKVqHA79DwAAAAXK9P+AqP+rvW95a/zaDd//Nl2pVg+H/gcAAIACZfp/YNT/tZ87brRjdfPtp6Ur1Rrh0P8AAABQoEz/3xr1/8JX/zLmz88PvvT1dKVaMxz6HwAAAAqU6f9BUf8vssNWTRu+NK/F5+lKtVY49D8AAAAUKNP//476f9ENl25w5LHbjLskXanWDof+BwAAgAJl+v+2qP8Xu/HNr4b1bz/hxnSl+ucx+h8AAAAKlOn/26P+X3zzhg236HDDRpunK1XTcOh/AAAAKFCm/wdH/d/w2rdnjN10nQvXS1eqdcKh/wEAAKBAmf6/I+r/JW7//Y3+v349qFe6Uq0bDv0PAAAABcr0/51R/y+5fuvmR8+8bOKS6UrVLBz6HwAAAAqU6f+7ov5f6rTjTl9n85GtHkxXqn8+E6D/AQAAoECZ/r876v+l37m/zzsHLn/CS+lKtX449D8AAAAUKNP/90T9v8yrdz7Ws8/Eq9dIV6oNwqH/AQAAoECZ/r836v9lexzW/vxTWs5+IF2pmodD/wMAAECBMv1/X9T/y714casznp6+ysLpStUiHPofAAAACpTp//uj/l9+sRffG/x+u13rNH61YTj0PwAAABQo0/8PRP2/woq9Zr3esOc9T6QrVctw6H8AAAAoUKb/h0T9v+KDOy+3TaNVZ2yfrlQbhUP/AwAAQIEy/T806v9Gn329YMG4j5e4M12pNg6H/gcAAIACZfr/waj/VzppvTWXGnpBl2vTlWqTcOh/AAAAKFCm/x+K+n/lc9fe7tDznhm5YbpSbRoO/Q8AAAAFyvT/w1H/r/L6x58/fGzXCUunK9Vm4dD/AAAAUKBM/z8S9f+qp63eptVLj2z0WLpStQqH/gcAAIACZfr/0aj/V3vnsw9Hf15d+Gy6Um0eDv0PAAAABcr0/7Co/xu/+u3sAdWYQY3Tlap1OPQ/AAAAFCjT/49F/b96j6aNTli7y8QB6Uq1RTj0PwAAABQo0/+PR/2/xhrvHvvZmDtbbZGuVG3Cof8BAACgQJn+fyLq/zUfaHT5Jve2OmHddKXaMhz6HwAAAAqU6f8no/5f68lN7u7e4+err0hXqq3Cof8BAACgQJn+fyrq/7UX/27X625dcva26UrVNhz6HwAAAAqU6f/hUf83WXLJ5W5p98Yqg9KVautw6H8AAAAoUKb/n476v+kTE2ad2Oz4XfukK9U24dD/AAAAUKBM/z8T9f869895b/M/7r9no3Sl+uczAfofAAAACvT/6P/dlm3QIO7//0T9v+7arVqNmtZ2xl3pSrVdOPQ/AAAAFCjz+v+zUf83O63/5wtvPXeJKl2ptg+H/gcAAIACZfr/uaj/13vn4O3mHNapy0rpSrVDOPQ/AAAAFCjT/yOi/l//1TPXvLfngJH/SVeqHcOh/wEAAKBAmf5/Pur/DXo8uGD/lw5ed7t0pdopHPofAAAACpTp/xei/m/+2WmN3jj25tF3pCvVzuHQ/wAAAFCgTP+/GPV/i5Menb11tc2A69KVapdw6H8AAAAoUKb/X4r6f8NzB37Y9fN5F7RMV6pdw6H/AQAAoECZ/h8Z9X/L1w9oc8eYE3cYkq5U7cKh/wEAAKBAmf5/Oer/jT7eo1HztYd8sUi6Uu0WDv0PAAAABcr0/6io/zc+7orZk3s0vH6FdKXaPRz6HwAAAAqU6f/RUf9vcsHzH/a9d9ypj6cr1R7h0P8AAABQoEz/j4n6f9MJl7a5pF3rVZdIV6o9w6H/AQAAoECZ/n8l6v/Nlj1qr+NvnTV3aLpS7RUO/Q8AAAAFyvT/q1H/t3p60MMD/+j86Mh0pdo7HPofAAAACpTp/9ei/t/87nt7j2k2eN8105Vqn3DofwAAAChQpv/HRv3fevUTTt5s6waL3JSuVPuGQ/8DAABAgTL9Py7q/y3OHNvr92mjprZOV6r24dD/AAAAUKBM/78e9X+b9xc6YdGeZz7eLF2p9guH/gcAAIACZfr/jaj/txy1bbsDDxt2wDXpStUhHPofAAAACpTp/zej/t/q4r8euLtDt3XvTleq/cOh/wEAAKBAmf4fH/V/2493bL9t/+Gja+lKdUA49D8AAAAUKNP/E6L+3/q4uY+N+7XxgEbpSnVgOPQ/AAAAFCjT/29F/b/NBWP63L7p5AueSVeqjuHQ/wAAAFCgTP+/HfX/thMWOf3MzXffYZt0pTooHPofAAAACpTp/4lR/283bHbjD2f2+uLWdKU6OBz6HwAAAAqU6f93ov7fvtFmfzTr0+L6vulKdUg49D8AAAAUKNP/70b9v0ODJT4+68DvTt04Xak6hUP/AwAAQIEy/f9e1P87jhi/7VVPr7jqwHSlOjQc+h8AAAAKlOn/SVH/7zTl080+OOXduW3SleqwcOh/AAAAKFCm/9+P+n/nIxq/u17DSx5dJ12pDg+H/gcAAIACZfr/g6j/d+nQ5Nez339x38vTleqIcOh/AAAAKFCm/z+M+n/X379Z/spxTRZZKl2pOodD/wMAAECBMv3/UdT/7a5o9/cejaZMHZauVEeGQ/8DAABAgTL9/3HU/7tte+Uaw8/r8Phz6UrVJRz6HwAAAAqU6f9Pov7ffdNnt/9yaJ8DVk9XqqPCof8BAACgQJn+nxz1/x63XPbFiofNPWhOulIdHQ79DwAAAAXK9P+nUf/vudULW1zXs+3TB6cr1THh0P8AAABQoEz/fxb1/17/6v5B92kDpuySrlTHhkP/AwAAQIEy/f951P97D9ppziZbd2rwZbpSHRcO/Q8AAAAFyvT/F1H/77PuNSt91uyNvU5PV6rjw6H/AQAAoECZ/v8y6v99z/jggDv/WHLoW+lKdUI49D8AAAAUKNP/U6L+bz9puadOv/X++R+nK9WJ4dD/AAAAUKBM/38V9f9+L2/Yr22749e8OF2pTgqH/gcAAIACZfr/66j/O3T/4aw3773zzFHpSnVyOPQ/AAAAFCjT/1Oj/t//2beWeq9Hlz7HpSvVKeHQ/wAAAFCgTP9Pi/r/gGrxmU3W/vmT89KV6tRw6H8AAAAoUKb/v4n6/8CVN3/7vDGttv0gXalOC4f+BwAAgAJl+v/bqP87PvLbxr0+f+Scw9OV6vRw6H8AAAAoUKb/v4v6/6CPDhm9S9W1/x/pStU1HPofAAAACpTp/++j/j/42BubPHHsmLE/pSvVGeHQ/wAAAFCgTP9Pj/r/kPMfWmjaS9X67dOV6sxw6H8AAAAoUKb/Z0T932n86V+vPPTjg05NV6qzwqH/AQAAoECZ/v8h6v9Dzxi2+A3nrfr0uHSlOjsc+h8AAAAKlOn/H6P+P2zSydN7NHpmyhfpSnVOOPQ/AAAAFCjT/zOj/j/85QPfbDnuggaXpivVueHQ/wAAAFCgTP//FPX/Ed1vbvHR+9P3+iVdqc4Lh/4HAACAAmX6/+eo/zuvdtJRRzdsObRjulJ1C4f+BwAAgAJl+v+XqP+PvPfuF/uf0nN+u3SlOj8c+h8AAAAKlOn/WVH/d/nPbbePfbrdmt+kK9UF4dD/AAAAUKBM//8a9f9RSx952RYHjjyzc7pSXRgO/Q8AAAAFyvT/b1H/H73MSxs373NZn7/TleqicOh/AAAAKFCm/3+P+v+Y4Re+PXnmxE++T1eq7uHQ/wAAAFCgTP/Pjvr/2Lt2mdl38+W33SddqS4Oh/4HAACAAmX6f07U/8c1vnqpSza94Zyx6Up1STj0PwAAABQo0/9/RP1//Bnrf/3cr+37n5CuVJeGQ/8DAABAgTL9Pzfq/xMmfbnQ3v2/HntOulJdFg79DwAAAAXK9P+fUf+f+PInTdbqsM76E9OVqkc49D8AAAAUKNP/86L+P6n7GqN/nHr838enK9Xl4dD/AAAAUKBM/8+P+v/kjz5vcUHb+9d+LV2prgiH/gcAAIACZfr/r6j/Tzl21TevPnTJfd5JV6orw6H/AQAAoECZ/v876v9Tz19n+sSr33jo3HSluioc+h8AAAAKlOn/BVH/nzZ+6uLrDur09YJ0pbo6HPofAAAACvS/7/+FGkT9f/p1Gx10+24DqiPTlapnOPQ/AAAAFCjT/wtF/d+19fRnzlyv7SF7pyvVNeHQ/wAAAFCgTP9XUf+fscHEgdvOnfuf79KVqlc49D8AAAAUKNP/taj/zxy8crdxa1WvHpiuVNeGQ/8DAABAgTL9v3DU/2cdtUXDiaPHNPs5XamuC4f+BwAAgAJl+n+RqP/PnjZrxrr3dD3r23Sl6h0O/Q8AAAAFyvT/olH/n/PLuDcuuOyRm3ZLV6rrw6H/AQAAoECZ/l8s6v9z91mm+dXHtfro9XSluiEc+h8AAAAKlOn/xaP+P2/HR8buPPLnrU9LV6p/hUP/AwAAQIEy/d8w6v9uPU9d78kvunS9JF2p+oRD/wMAAECBMv2/RNT/59+0/8Lf1O684fN0peobDv0PAAAABcr0/5JR/1/QcsA3K63U7u+56Up1Yzj0PwAAABQo0/9LRf1/4XUHLd339Z5rH5GuVDeFQ/8DAABAgTL9v3TU/xe17vfTJQ+23GffdKXqFw79DwAAAAXK9P8yUf9332DoW827TX9oZrpS9Q+H/gcAAIACZfp/2aj/Lx58xkaTT77g62PTlermcOh/AAAAKFCm/5eL+v+SvwcfftzwZ6qX05XqlnDofwAAAChQpv+Xj/r/0nZHPHvjpFUP+TBdqQaEQ/8DAABAgTL9v0LU/5ftf8ygVxb/+D/d0pVqYDj0PwAAABQo0/8rRv3fY/qQi7f6aZ1X305XqlvDof8BAACgQJn+bxT1/+UNDnj559ZfN+uarlSDwqH/AQAAoECZ/l8p6v8rRgxcp9ax/Vnd05Xq3+HQ/wAAAFCgTP+vHPX/lcMerXXqe8NNH6Ur1W3h0P8AAABQoEz/rxL1/1WNTptyX7/lPzooXaluD4f+BwAAgAJl+n/VqP+vPvr1ZY7Zb+LWs9OVanA49D8AAAAUKNP/q0X93/OTZX/ot8llXaekK9Ud4dD/AAAAUKBM/zeO+v+at9pMeG3WyBt2TVeqO8Oh/wEAAKBAmf5fPer/Xuf9ummb2rjrHktXqrvCof8BAACgQJn+XyPq/2s/aPXKY180PHnpdKW6Oxz6HwAAAAqU6f81o/6/7vQ563ceOWS7xulKdU849D8AAAAUKNP/a0X93/vCCYstftyJnz2brlT3hkP/AwAAQIEy/b921P/Xj15y2rzL5t28RbpS3RcO/Q8AAAAFyvR/k6j/b+h7xN3P3bNNtwHpSnV/OPQ/AAAAFCjT/02j/v9Xm8G77j365qZXpCvVA+HQ/wAAAFCgTP+vE/V/n6ZDjl1rrYNfXjddqYaEQ/8DAABAgf5H/y9YEH7yv/T/ulH/973tmMt/nDvsyUHpSjU0HPofAAAACpR5/b9Z1P83Hrbr/N/XO7PjtulK9WA49D8AAAAUKNP/60X9f9PXPddadLdRi22UrlQPhUP/AwAAQIEy/b9+1P/95ozc8cBBDb7pk65UD4dD/wMAAECBMv2/QdT//dtf9NndVw9+rEpXqkfCof8BAACgQJn+bx71/81bT978+EM773dXulI9Gg79DwAAAAXK9H+LqP9vuWrNiQPbzmr8n3SlGhYO/Q8AAAAFyvT/hlH/Dxi4wS9jpraet1K6Uj0WDv0PAAAABcr0f8uo/wduPGXFzWZ9d93m6Ur1eDj0PwAAABQo0/8bRf1/a991/3hokxYn35iuVE+EQ/8DAABAgTL9v3HU/4PaTGt82H69tuuVrlRPhkP/AwAAQIEy/b9J1P//bvrFtkv32/2z9dKV6qlw6H8AAAAoUKb/N436/7bbVvv4776Tb34wXamGh0P/AwAAQIEy/b9Z1P+3/zH9sd07Nu62ZLpSPR0O/Q8AAAAFyvR/q6j/B++yUfunWw9vuka6Uj0TDv0PAAAABcr0/+ZR/99xyMqnT/mp28svpSvVf8Kh/wEAAKBAmf5vHfX/nT9M7LPC4n2eXDhdqZ4Nh/4HAACAAmX6f4uo/+/6qfVny0zq0PGBdKV6Lhz6HwAAAAqU6f82Uf/fffDvO/41fMpiT6Qr1Yhw6H8AAAAoUKb/t4z6/56d317rwZObfFOn8avnw6H/AQAAoECZ/t8q6v975zWcf3i3Fx+7M12pXgiH/gcAAIACZfq/bdT/9/V9eMU7H7xkv+3TlerFcOh/AAAAKFCm/7eO+v/+Nl1/Of31dxtvmK5U/3wnoP4HAACAAmX6f5uo/x9o2mli25VWnHdtulKNDIf+BwAAgAJl+n/bqP+H3HbT5m9uMvGkWrpSvRwO/Q8AAAAFyvT/dlH/D92648cHzFr+mrvTlWpUOPQ/AAAAFCjT/9tH/f/gVbdse0+/ke8+k65Uo8Oh/wEAAKBAmf7fIer/hwY+1nj2fpe1bpSuVGPCof8BAACgQJn+3zHq/4c3PuWPRTp+3f3WdKV6JRz6HwAAAAqU6f+dov5/ZPseHz/Vd53btklXqlfDof8BAACgQJn+3znq/0d7PbftTj/d8PbG6Ur1Wjj0PwAAABQo0/+7RP0/rP9VjRu1br9J33SlGhsO/Q8AAAAFyvT/rlH/P9Zitz++nfRM5zbpSjUuHPofAAAACpTp/3ZR/z8+46SrFyx+wYsD05Xq9XDofwAAAChQpv93i/r/iQPuPnGpkz/+/vJ0pXojHPofAAAACpTp/92j/n9yt9v2OHT4qouvk65Ub4ZD/wMAAECBMv2/R9T/Ty048v6HH+y587B0pRofDv0PAAAABcr0/55R/w+/fsHeZ3Rrd9dS6Uo1IRz6HwAAAAqU6f+9ov5/utXWQwevNP231dOV6q1w6H8AAAAoUKb/9476/5n1ate9/nrLlZ5LV6q3w6H/AQAAoECZ/t8n6v//3Pnqadt88fNJd6Qr1cRw6H8AAAAoUKb/9436/9ntF7v8rlqra7ZLV6p3wqH/AQAAoECZ/m8f9f9zvUYd2/G4O99tma5U74ZD/wMAAECBMv2/X9T/I/rP23WxkV1aX5euVO+FQ/8DAABAgTL93yHq/+dbbH/3b/eM6b5IulJNCof+BwAAgAJl+n//qP9f2PutD/e9rLptSLpSvR8O/Q8AAAAFyvT/AVH/v/jz4m1GrvXI24+nK9UH4dD/AAAAUKBM/x8Y9f9LUzdvNGN0101WSFeqD8Oh/wEAAKBAmf7vGPX/yC6/zV51vQGdh6Yr1Ufh0P8AAABQoEz/HxT1/8uLTP2r/dxOLy6RrlQfh0P/AwAAQIEy/X9w1P+jRq6z9kuD5n6/ZrpSfRIO/Q8AAAAFyvT/IVH/j3541R2m79Z28ZHpSjU5HPofAAAACpTp/05R/49Z/vNPVzv0/p1bpyvVp+HQ/wAAAFCgTP8fGvX/Kydc0vrTq4+/66Z0pfosHPofAAAACpTp/8Oi/n/1ixHvbDr1jd+uSVeqz8Oh/wEAAKBAmf4/POr/1968/OeL2y65UrN0pfoiHPofAAAACpTp/yOi/h979u4rXPv6JcuNS1eqL8Oh/wEAAKBAmf7vHPX/uPeunrvCSi/+cmq6Uk0Jh/4HAACAAmX6/8io/18/ZZfVp3Rb8f5L05Xqq3DofwAAAChQpv+7RP3/xqUXbvP0g++2+yJdqb4Oh/4HAACAAmX6/6io/98c+9JHuw/vsHTHdKWaGg79DwAAAAXK9P/RUf+P7z3z9oVP7vPDL+lKNS0c+h8AAAAKlOn/Y6L+n7BZ88vmLN7k2W/Sleqfn+l/AAAAKFCm/4+N+v+tZiscde+kKYe1S1eqb8Oh/wEAAKBAmf4/Lur/t++Y9OL+rRu3/Dtdqb4Lh/4HAACAAmX6//io/yd2nj1qz58mv9E5Xam+D4f+BwAAgAJl+v+EqP/f+WazdZ/v2+2OfdKVano49D8AAAAUKNP/J0b9/+6sJaqfOg7v8X26Us0Ih/4HAACAAmX6/6So/9/bc/yXa+zXYssT0pXqh3DofwAAAChQpv9Pjvp/0nZnLPtxv+8+HJuuVD+GQ/8DAABAgTL9f0rU/+9fM/THDWftftXEdKWaGQ79DwAAAAXK9P+pUf9/0K/f+Ms26XXsOelK9VM46vT/gv/TTxkAAAD4L8r0/2lR/3/Y/KBN/tW283IHpyvVz+Hw+j8AAAAUKNP/p0f9/1HvAa+uMnXwL3PSleqXcOh/AAAAKFCm/7tG/f/xZvtvMPXq1vd/ma5Us8Kh/wEAAKBAmf4/I+r/T5qduujjh85qt0u6Uv0aDv0PAAAABcr0/5lR/0++45Gpu+525tJvpSvVb+HQ/wAAAFCgTP+fFfX/p38d1W/eoGE/nJ6uVL+HQ/8DAABAgTL9f3bU/5/tMeisxec2ePbidKWaHQ79DwAAAAXK9P85Uf9/3vHeAzqvN+qwj9OV6p/vBFixQYOG/83PGAAAAPivyvT/uVH/f/H9CU89NnqblselK9Uf4VixQYMvF/zf/pufOAAAAPD/Wqb/z4v6/8vp13z51Frz3hiVrlRzw+H9/wAAAFCgTP93i/p/yv47VTtddvAdH6Qr1Z/h0P8AAABQoEz/nx/1/1ftuq/b6J6be5yXrlTzwqH/AQAAoECZ/r8g6v+v/35h1LcjG275R7pSzQ+H/gcAAIACZfr/wqj/p/Zea5N1jhv34eHpSvVXOPQ/AAAAFCjT/xdF/T9ts4/Gv1M78ar26Ur1dzj0PwAAABQo0//do/7/ptlXP/b8YsixP6Ur1T/f9qf/AQAAoECZ/r846v9v72i27PlbtX9pRrpS++fQ/wAAAFCgTP9fEvX/d9t9M/WHGTcctVe6Ugu/o/8BAACgRJn+vzTq/++vabLo2tevs2SXdKVWhUP/AwAAQIEy/X9Z1P/T+zXeYJ9OX0+fn67U/vkAgP4HAACAAmX6v0fU/zOaf/rqs3tfdu9Z6Upt4XDofwAAAChQpv8vj/r/hyt33/SbASN3eTddqS0SDv0PAAAABcr0/xVR///Y9vIJK81efuVX05XaouHQ/wAAAFCgTP9fGfX/zI1G/LDzhhPnnJSu1BYLh/4HAACAAmX6/6qo/38acMkyT05o2fOzdKX2z+P1PwAAABQo0/9XR/3/80Fdznlo+enH90hXag3Dof8BAACgQJn+7xn1/y8zb73xsLPbbXZyulJbIhz6HwAAAAqU6f9rov6f9ec9Tyz9aM933khXakuGQ/8DAABAgTL93yvq/193Or7j34+veuvu6UptqXDofwAAAChQpv+vjfr/ty1ee2Hb0z++aGq6Uls6HPofAAAACpTp/+ui/v+9T4Mu45a6YONf05XaMuHQ/wAAAFCgTP/3jvp/9r+36XH7xGfGH5Cu1JYNh/4HAACAAmX6//qo/+c0mT/4zNe6vnR+ulJbLhz6HwAAAAqU6f8bov7/48odzv+98SNHTUpXasuHQ/8DAABAgTL9/6+o/+e2/ePmRbtXS45JV2orhEP/AwAAQIEy/d8n6v8/Nxr99IEPjJl+TLpS+6f79T8AAAAUKNP/faP+nzdg4U53P9/l3h/TlVqjcOh/AAAAKFCm/2+M+n/+73OarnbSnbt0SFdqK4VD/wMAAECBMv1/U9T/f3VoNWb6Yq1WPjRdqa0cjmz/L/b//ykDAAAA/0WZ/u8X9f/fRyz51UuTf57zZ7pSWyUcXv8HAACAAmX6v3/U/wumTGjQfrsle+6UrtRWDYf+BwAAgAJl+v/m/9n/tQYvn3Typl++cfxX6UpttXDofwAAAChQpv9vifp/oe539/708uM3+z1dqTUOh/4HAACAAmX6f0DU/9UZtz18bef73+mUrtRWD4f+BwAAgAJl+n9g1P+1SUfudfHObW+dnK7U1giH/gcAAIACZfr/1qj/F75rwQMvDZ570UXpSm3NcOh/AAAAKFCm/wdF/b9I463btf+r08ZnpCu1tcKh/wEAAKBAmf7/d9T/iy5TO2G1pgPGj09XamuHQ/8DAABAgTL9f1vU/4sNf7XX9IlTXm+SrvyPx+h/AAAAKFCm/2+P+n/xlRc7/aylmjS/Ml2pNQ2H/gcAAIACZfp/cNT/DR8Z1eeq0/tccku6UlsnHPofAAAACpTp/zui/l/i2XmPffh4h8FbpSu1dcOh/wEAAKBAmf6/M+r/Javt2zd79N1Jz6crtWbh0P8AAABQoEz/3xX1/1IdujY88ewV26yWrtTWC4f+BwAAgAJl+v/uqP+X/v3hGbcs/+Ixy6QrtfXDof8BAACgQJn+vyfq/2Wm3PTGqAmXXP5IulLbIBz6HwAAAAqU6f97o/5f9ohOzTffsNesldOVWvNw6H8AAAAoUKb/74v6f7lB3Q7acPbuKw5PV2otwqH/AQAAoECZ/r8/6v/l133qmY8HfLfHvelKbcNw6H8AAAAoUKb/H4j6f4Wtrhv4r71bPLBQulJrGQ79DwAAAAXK9P+QqP9X/FeHbpd1Gv7Tv6KHLxz+3Sj8q/8BAACgQJn+Hxr1f6O5P/77+eu7LbNpulLbOBz6HwAAAAqU6f8Ho/5fadeWF+45Y/LhbdOV2ibh0P8AAABQoEz/PxT1/8qdlj9sja0aP//vdKX2z3sC9D8AAAAUKNP/D0f9v8qPHz7/U9NRr7+YrtQ2C4f+BwAAgAJl+v+RqP9X7bDS/t3+atB87XSl1ioc+h8AAAAKlOn/R6P+X+339568ZvCwSxZPV2qbh0P/AwAAQIEy/T8s6v/GU77v/+7OZw5+KF2ptQ6H/gcAAIACZfr/saj/Vz9i07Obdp41af10pbZFOPQ/AAAAFCjT/49H/b9G208XG3R56zZXpyu1NuHQ/wAAAFCgTP8/EfX/mlc2nnbql4OP6Z+u1LYMh/4HAACAAmX6/8mo/9ca0OSVHbbrfHmrdKW2VTj0PwAAABQo0/9PRf2/9kbfrD9h8pBZ16crtbbh0P8AAABQoEz/D4/6v8mmi3R7Z7ETV2yRrtS2Dof+BwAAgAJl+v/pqP+b3jJm4Donjdtjh3Sltk049D8AAAAUKNP/z0T9v84Vc585//mGD9yertS2DYf+BwAAgAJl+v8/Uf+vu+2OB/V84OaflktXatuFQ/8DAABAgTL9/2zU/806DH5+p+4HL/NkulLbPhz6HwAAAAqU6f/nov5f7/cjDnuq8bzD709Xav/8nwD6HwAAAAqU6f8RUf+vP+WYC799bZvnF0tXajuGQ/8DAABAgTL9/3zU/xscMeTfjf6au8EN6Uptp3DofwAAAChQpv9fiPq/+dwTzu7TtO1rm6QrtZ3Dof8BAACgQJn+fzHq/xa73tv/0p0H9Ns6XantEg79DwAAAAXK9P9LUf9v2GnQky0Gdzr3tnSltms49D8AAAAUKNP/I6P+b/njUft/cvkb26ySrtTahUP/AwAAQIEy/f9y1P8b/bXX2ad3XnLy0+lKbbdw6H8AAAAoUKb/R0X9v/Eeffvfud39fe9JV2q7h0P/AwAAQIEy/T866v9NOj795JtfHn9GnZXaHuHQ/wAAAFCgTP+Pifp/0+/P3b/tYneuMSJdqe0ZDv0PAAAABcr0/ytR/2/W8oCNmkzu8teq6Uptr3DofwAAAChQpv9fjfq/1U0D33rv+Z8fXDZdqe0dDv0PAAAABcr0/2tR/2/e89Gfep3Uas9H05XaPuHQ/wAAAFCgTP+Pjfq/9Y6nLX1e90cWapqu1PYNh/4HAACAAmX6f1zU/1vs8/pXTzzQ9cur0pVa+3DofwAAAChQpv9fj/q/zS/LNtjltTHDb05XavuFQ/8DAABAgTL9/0bU/1tOa9N05cbVwVumK7UO4dD/AAAAUKBM/78Z9f9WR/06ZtpSH2+wfLpS2z8c+h8AAAAKlOn/8VH/t/2rVfMeE1d97al0pXZAOPQ/AAAAFCjT/xOi/t96jzlv3PD4M/3uS1dqB4ZD/wMAAECBMv3/VtT/23ScMOOj0y84d9F0pdYxHPofAAAACpTp/7ej/t/2+yUbtjx7+ja905XaQeHQ/wAAAFCgTP9PjPp/u95/9Oj/aMvJzdOV2sHh0P8AAABQoEz/vxP1//ab7TD46Ak9++6YrtQOCYf+BwAAgAJl+v/dqP93aLbwC1ss3+6MwelKrVM49D8AAAAUKNP/70X9v+Mdo7uMnT1yjQ3Sldqh4dD/AAAAUKBM/0+K+n+nV989uN+Gl/3VM12pHRYO/Q8AAAAFyvT/+1H/79yj0X+O2Xvig/3Sldrh4dD/AAAAUKBM/38Q9f8up20yoM2A5ffcLF2pHREO/Q8AAAAFyvT/h1H/7/rOd+e9dv0NC72QrtQ6h0P/AwAAQIEy/f9R1P/t7t/7tlqn9l+ula7UjgyH/gcAAIACZfr/46j/d1v7hot+3urr4Q3TlVqXcOh/AAAAKFCm/z+J+n/3JZ859L4Z6xz8cLpSOyoc+h8AAAAKlOn/yVH/7/HEWSM6NT54/z3SldrR4dD/AAAAUKBM/38a9f+eKz55wITXbn5iWrpSOyYc+h8AAAAKlOn/z6L+3+vB857a4YFtps1KV2rHhkP/AwAAQIEy/f951P97v7hfv1O7z1t4/3Sldlw49D8AAAAUKNP/X0T9v89i15416KQT23+artSOD4f+BwAAgAJl+v/LqP/33fujLSY/P+SRy9KV2gnh0P8AAABQoEz/T4n6v/3Pa33QfHLDP05JV2onhkP/AwAAQIEy/f9V1P/7TW0255LFxq32ZrpSOykc+h8AAAAKlOn/r6P+79Dlq5X6ftn6tLPTldrJ4dD/AAAAUKBM/0+N+n//218+ZeB2s3q/l67U/vlMgP4HAACAAmX6f1rU/wesv+j1x3fu/Pkr6Urt1HDofwAAAChQpv+/ifr/wM23e2izywfveGK6UjstHPofAAAACpTp/2+j/u947Z97jhnc4Pzp6Urt9HDofwAAAChQpv+/i/r/oPmHDll051ED90xXal3Dof8BAACgQJn+/z7q/4N3v2O335ueOeaodKV2Rjj0PwAAABQo0//To/4/5MD7jr/7r2Hr/JWu1M4Mh/4HAACAAmX6f0bU/52+O/aaA2d02/+TdKV2Vjj0PwAAABQo0/8/RP1/6N53dR231fAnLkxXameHQ/8DAABAgTL9/2PU/4f9fGLfbTs1nnZmulI7Jxz6HwAAAAqU6f+ZUf8fPrXzsDOvn7zwhHSldm449D8AAAAUKNP/P0X9f0SXf+97+4Dd2++crtTOC4f+BwAAgAJl+v/nqP87b3/KNs327vXI1+lKrVs49D8AAAAUKNP/v0T9f2Svxz76cMMWf/yWrtTOD4f+BwAAgAJl+n9W1P9d+t8y96rZ3612SLpSuyAc+h8AAAAKlOn/X6P+P6pFx9XPWn7F035IV2r/fCeg/gcAAIACZfr/t6j/j97w8T1Pn/Bu7/3SldpF4dD/AAAAUKBM//8e9f8xN57/0J2PXvL5YelKrXs49D8AAAAUKNP/s6P+P/bqfa9/8+wXd5yXrtQuDof+BwAAgAJl+n9O1P/H7dD7lLanNzn/gnSldkk49D8AAAAUKNP/f0T9f/zeza/56/EpA99PV2qXhkP/AwAAQIEy/T836v8Tfp55/DITO4wZna7ULguH/gcAAIACZfr/z6j/T5w6abfDl+qzztHpSq1HOPQ/AAAAFCjT//Oi/j+pywpDHhwy7s9J6Urt8nDofwAAAChQpv/nR/1/8vyJ+7a+uOHq56crtSvCof8BAACgQJn+/yvq/1N2X3nYy6sP6XBMulK7Mhz6HwAAAAqU6f+/o/4/9cCN+t489sRhY9KV2lXh0P8AAABQoEz/L4j6/7Tvpnc96ZN533ZIV2pXh0P/AwAAQIH+9/1fNYj6//Shsw8/YtFtFv0xXan1DIf+BwAAgAJl+n+hqP+7rrDZs0NPvPnAP9OV2jXh0P8AAABQoEz/V1H/n7HoEoPmjzj4qUPTlVqvcOh/AAAAKFCm/2tR/5/5wviLlz1y2Kiv0pXateHQ/wAAAFCgTP8vHPX/WZfNXGyVK85sslO6UrsuHPofAAAACpTp/0Wi/j/7lebTpk4ZdV6ndKXWOxz6HwAAAAqU6f9Fo/4/Z+IKrzy+fYNbfk9XateHQ/8DAABAgTL9v1jU/+eeOmn9XZsM/vSidKV2Qzj0PwAAABQo0/+LR/1/3lrnv37N/M7bT05Xav8Kh/4HAACAAmX6v2HU/93ue7xlt9tnnTI+Xan1CYf+BwAAgAJl+n+JqP/Pf7z3Ek13an3tGelKrW849D8AAAAUKNP/S0b9f8ES+3737iHf/blXulK7MRz6HwAAAAqU6f+lov6/cGif2p69W6w+I12p3RQO/Q8AAAAFyvT/0lH/X7TCnlOen96rw/x0pdYvHPofAAAACpTp/2Wi/u++6Dkv/7Tl7sO6pCu1/uHQ/wAAAFCgTP8vG/X/xS8MX2eNlpO/fTddqd0cDv0PAAAABcr0/3JR/1/yxR4H3Ten8aJnpSu1W8Kh/wEAAKBAmf5fPur/S0+44plOA4cfeFK6UhsQDv0PAAAABcr0/wpR/1929vMDa/t0e+rVdKU2MBz6HwAAAAqU6f8Vo/7v8eal3X5+pM+oHulK7dZw6H8AAAAoUKb/G0X9f3nT69/a6qwOTT5LV2qDwqH/AQAAoECZ/l8p6v8rbmu/0f/F3p1HXz3+fd+n/dkRhShDyJwxmTOERKZMGcv8K1MyRUiIjMmUjClDIpEhM5HMGTJG5jKUIYQQId3ruq+j6zyudZz3eazfue5zreOPx+Of3r6r/Vr73+f3k71fWOLz3q+mK7Ubw6H/AQAAoECZ/l866v/zrjy9yaCJK197TLpSGxoO/Q8AAAAFyvT/MlH/n7/pAz92f3vcJ9PSldqwcOh/AAAAKFCm/5eN+v+C7ZZaYGSTs7beMV2p3RQO/Q8AAAAFyvT/clH/X/jXe1/sd/w7PTqnK7Wbw6H/AQAAoECZ/m8R9f9FP/74/IIPLDXgl3Sldks49D8AAAAUKNP/y0f9f/F+a68yq/0Rl6+UrtRuDYf+BwAAgAJl+n+FqP8H/P7dq8cMu+O4celKbXg49D8AAAAUKNP/K0b9f8nurdca+veim9+drtRuC4f+BwAAgAJl+r9l1P8Duy7T6M2VX/1w4XSlNiIc+h8AAAAKlOn/laL+v/TLt79rt/UBgy5IV2q3h0P/AwAAQIEy/b9y1P+X3df//n6fX9erVbpSuyMc+h8AAAAKlOn/VaL+v7zZTrtf3n/zNTZMV2ojw6H/AQAAoECZ/l816v8rFjj7uA8PmfPC1elK7c5w6H8AAAAoUKb/V4v6/8qxT16xztgGj66drtRGhUP/AwAAQIEy/b961P+D+gyZtdFRzx9wabpSuysc+h8AAAAKlOn/NaL+v+q5w5Z4tuHxtWHpSu3ucOh/AAAAKFCm/1tF/T948pEbXvvRPV9sk67URodD/wMAAECBMv2/ZtT/Vx83YtJREzYc/WC6UrsnHPofAAAACpTp/7Wi/r9m2QXbjVj+p12XSFdq94ZD/wMAAECBMv2/dtT/1942YcpeZx7acqF0pXZfOPQ/AAAAFCjT/+tE/X/do3PnVXfeMu+OdKV2fzj0PwAAABQo0//rRv1/feOtVvz9gR0uPy9dqY0Jh/4HAACAAmX6f72o/2+4b87s44+/8LiV05XaA+HQ/wAAAFCgTP+3jvp/SLNtm93cZN3N26YrtfnfCaD/AQAAoECZ/l8/6v8bF6hv+urbMz68Nl2pPRQO/Q8AAAAFyvR/m6j/h459/v0tJp4+aLl0pfZwOPQ/AAAAFCjT/xtE/T/sww2G91/i0V5Ppiu1R8Kh/wEAAKBAmf7fMOr/m7rP3v7kk5Zd4550pfZoOPQ/AAAAFCjT/xtF/X/z6RO7tbrnwxcWS1dqj4VD/wMAAECBMv2/8YLV/+n/W15f5Nz3Oq366MPpSu3xcOh/AAAAKFCm/zeJnv/f+sa3k165/ssDlk5Xak+EQ/8DAABAgTL9v2nU/8N7t9lwy993ry2YrtTGhkP/AwAAQIEy/b9Z1P+3Hd58iRPWveyLEelKbf53Auh/AAAAKFCm/9tG/T/io0mzbtqs6eg26UrtqXDofwAAAChQpv83j/r/9vt6rdhlxlu7Xp6u1MaFQ/8DAABAgTL9v0XU/3c0e2ze6IH9Wt6YrtSeDof+BwAAgAJl+n/LqP9HLnD5lHn7j5+3ebpSGx8O/Q8AAAAFyvT/VlH/3zm2U7vGx5/V/aF0pfZMOPQ/AAAAFCjT/+2i/h+17CXvX/fAuPOapiu1Z8Oh/wEAAKBAmf7fOur/u27bc9Mj315qcsN0pfZcOPQ/AAAAFCjT/9tE/X/3o6c227DJO21vT1dqz4dD/wMAAECBMv2/bdT/oxs/NPu5Jfbst1a6UnshHPofAAAACpTp//ZR/9+zwh3v9554xS0D05Xai+HQ/wAAAFCgTP9vF/X/vSO7b3rxPSu/dlO6UnspHPofAAAACpTp/w5R/9/3YNdmk076fJ1t05XahHDofwAAAChQpv+3j/r//oVvmb3y9S26XJiu1F4Oh/4HAACAAmX6f4eo/8e8Om7g5p0+fmLNdKX2Sjj0PwAAABQo0/8do/5/4KQzj3lt3VN/2CBdqb0aDv0PAAAABcr0/45R/z94xHa73PL7w40Hpyu118Kh/wEAAKBAmf7fKer/h6ZcPPq4GWt3bJmu1CaGQ/8DAABAgTL9v3PU/w/fvcYOd232ze1PpSu118Oh/wEAAKBAmf7fJer/R5b4cuSB++/40+h0pfZGOPQ/AAAAFCjT/7tG/f9o9eHFiw28uGmjdKX2Zjj0PwAAABQo0/+dov5/7OmVjpw77ODu66crtbfCof8BAACgQJn+3y3q/8dX+PSKo9vfdN5l6Urt7XDofwAAAChQpv93j/r/iZHLH3fNyhtPHpqu1N4Jh/4HAACAAmX6f4+o/8c+uMruz/w9q+0W6UptUjj0PwAAABQo0/97Rv3/5MJf37/x5yf2eyRdqb0bDv0PAAAABcr0/15R/z/Vs9mHl2593y3LpCu198Kh/wEAAKBAmf7vHPX/uLff2arPIQu89p+s1CaHQ/8DAABAgTL9v3fU/0+/+E2L9fo/u85t6Urt/XDofwAAAChQpv/3ifp//Dnr/zH1qC27LJuu1D4Ih/4HAACAAmX6f9+o/59ZfZtfBo7964mx6Urtw3DofwAAAChQpv/3i/r/2Zv/aHrGR/v9cG+6UvsoHPofAAAACpTp//2j/n9u4HMbtG54TePF05Xax+HQ/wAAAFCgTP8fEPX/8xtU70xZvlHH89OV2ifh0P8AAABQoEz/d4n6/4UdRm69/ISXb18lXal9Gg79DwAAAAXK9H/XqP9f/Ofwqd/cedRPm6UrtSnh0P8AAABQoEz/Hxj1/0szDvznqTPvbHpNulKbGg79DwAAAAXK9P9BUf9P2GvYCnsOfKtZn3Sl9lk49D8AAAAUKNP/B0f9//KsQ39/b/+mv32UrtQ+D4f+BwAAgAJl+v+QqP9f2fmG5q02Gz/89XSl9kU49D8AAAAUKNP/h0b9/+rBt21y8ox+7U9MV2pfhkP/AwAAQIEy/X9Y1P+vfXXE5P6/f9noy3SlNi0c+h8AAAAKlOn/w6P+nzh6k8HPr7vqN9ulK7Xp4dD/AAAAUKBM//8r6v/Xm846aYNOlz21f7pS+yoc+h8AAAAK9F/0f8MFFmjQLer/N+ovdz7i+t0P+TVdqX0dDv0PAAAABco8/+8e9f+b4xd76PqTHm2zR7pS+yYc+h8AAAAKlOn/I6L+f+vs9d688p7T3/g+Xal9Gw79DwAAAAXK9P+RUf+/PWFG67MmfnjjX+lKbUY49D8AAAAUKNP/R0X9/86ktxqvtcSyZ3ZNV2rfhUP/AwAAQIEy/X901P+Teiw98+MmF270XrpSm///BOh/AAAAKFCm/4+J+v/dFR9esOXbO0w6PV2p/RAO/Q8AAAAFyvR/j6j/37vz5C9/eGDGxYenK7WZ4dD/AAAAUKBM/x8b9f/kh3Z+7onj1z3quXSl9mM49D8AAAAUKNP/PaP+f7/RFSvveuZPzaanK7WfwqH/AQAAoECZ/j8u6v8PRu/22lt3bvjbTulK7edw6H8AAAAoUKb/j4/6/8OmA9debcItw/dKV2qzwqH/AQAAoECZ/j8h6v+P6mMWPn35Q9vPSldqv4RD/wMAAECBMv1/YtT/H48/bcYFDZ9v1C9dqf0aDv0PAAAABcr0/0lR/3/yyYXD2n3U4JtP0pXab+HQ/wAAAFCgTP/3ivr/06O27/fm2Hueei1dqc0Oh/4HAACAAmX6/+So/6ecfMZhQ486/pAe6Urt93DofwAAAChQpv9Pifp/6svjxx3T/7o2k9KV2h/h0P8AAABQoEz/9476/7PXDp7Z+5AD3uiVrtTmhEP/AwAAQIEy/X9q1P+f97qx8cVbz7nxqHSl9mc49D8AAAAUKNP/p0X9/8WRt7ae9PnmZ76QrtT+Cof+BwAAgAJl+v/0qP+/nHrUmyv/fcdGO6crtb/Dof8BAACgQJn+7xP1/7TRL6w8feUjJs1IV2pzw/H/1f9n9///8T0DAAAA/55M/58R9f/0pg2eW7r9qxfPTVdq/4TD838AAAAoUKb/+0b9/1V98y87DFv0qMPSldq8cPzv/p/3P/qWAQAAgH9Tpv/PjPr/6/H/LPjAH9PfXyRdqeYfnv8DAABAgTL9f1bU/9+s2G7GuquvvtmodKUKf0f/AwAAQIky/X921P/f3vnnwh/sMLDb+HSlahAO/Q8AAAAFyvR/v6j/Zzz0zNqX3dDp/BXTlaoWDv0PAAAABcr0/zlR/3/XqOFr51w4+dWr0pVq/gcA6H8AAAAoUKb/z436//sRw1ZZpesy626crlT1cOh/AAAAKFCm//tH/f/Dcgc+/84WT5yzerpSNQyH/gcAAIACZfr/vKj/ZzY5/IuLpve5+aJ0pVooHPofAAAACpTp//Oj/v/xsZELnNrg/O/bpSvV/NfrfwAAAChQpv8viPr/p1MvOOv4KR2a3JyuVI3Cof8BAACgQJn+vzDq/5/f7HDzzU9/3/WSdKVaJBz6HwAAAAqU6f+Lov6f9XGf8a92a/34uulKtWg49D8AAAAUKNP/F0f9/8u/nj5ki3PG/HxnulI1Dof+BwAAgAJl+n9A1P+/Nl/hwb9H9Fqinq5UTcKh/wEAAKBAmf6/5D/6/49593+01+LPT91hyXSlWiwc+h8AAAAKlOn/gdHz/9lPftbroJVa3jEmXakWD4f+BwAAgAJl+v/SqP9/X7DV1aMavfj+9elKtUQ49D8AAAAUKNP/l0X9/8eIaX02eq/abNN0pWoaDv0PAAAABcr0/+VR/89ZbtUbn33k7m6rpivV/M8E0P8AAABQoEz/XxH1/59Nln3y2h49zz83Xanmd7/+BwAAgAJl+v/KqP//emxK16N6z361cbpSNQuH/gcAAIACZfp/UNT/f7/bus2UUW3XvS9dqZqHQ/8DAABAgTL9f1XU/3NP+O711i8POeeJdKVaOhz6HwAAAAqU6f/BUf//0/ft789o1uXm5dOVaplw6H8AAAAoUKb/r476f94zyyw28JcR3w9PV6plw6H/AQAAoECZ/r/mP/q/WqDttAt/a9OtSS1dqZYLh/4HAACAAmX6/9qo/xe8fNWjG+45sWuzdKVqEQ79DwAAAAXK9P91Uf83GLLsjntf3eTxR9OVav5nAuh/AAAAKFCm/6+P+r+22pTbh18x6Oct05VqhXDofwAAAChQpv9viPq/OuCsTkfs3XmJG9KVasVw6H8AAAAoUKb/h0T9X/9h7F3XbzRvhyvTlaplOPQ/AAAAFCjT/zdG/d9wzrkDnp+5zR2t05VqpXDofwAAAChQpv+HRv2/0PY7HrvBSrvc+my6Us1/jf4HAACAAmX6f1jU/wt/fkH/u58fsF33dKVaJRz6HwAAAAqU6f+bov5vdFCH7l1HtGreO12pVg2H/gcAAIACZfr/5qj/F9mzT4cm53z96+R0pVotHPofAAAACpTp/1ui/l/0t6dv/adb33EHpivV6uHQ/wAAAFCgTP/fGvV/48dnTnvq6ScP/iNdqdYIh/4HAACAAmX6f3jU/00arNVwzynNF/4xXalahUP/AwAAQIEy/X9b1P+LLb3kmss3ePfb3dOVas1w6H8AAAAoUKb/R0T9v/g97774zfQ2Q39PV6q1wqH/AQAAoECZ/r896v8lTpj9xE9bzOy7X7pSrR0O/Q8AAAAFyvT/HVH/N313g4NqXduv3yFdqdYJh/4HAACAAmX6f2TU/0s+s0jfAy7s/+Zn6Uq1bjj0PwAAABQo0/93Rv2/VN+JN9x+wwoXHZeuVOuFQ/8DAABAgTL9Pyrq/2aLnXD6v3b49Og30pWqdTj0PwAAABQo0/93Rf3f/OFR1w5e/ZSNP0xXqvXDof8BAACgQJn+vzvq/6VvHfzwS388+M6Z6UrVJhz6HwAAAAqU6f/RUf8v02Lf/Ted2ePWg9OVaoNw6H8AAAAoUKb/74n6f9nHrxt3/0ajtvsnXak2DIf+BwAAgAJl+v/eqP+Xa7DXYQfv3bD5t+lKtVE49D8AAAAUKNP/90X932LpY/stfMWEXzulK9XG4dD/AAAAUKBM/98f9f/y99wz7K+rDxw3IV2pNgmH/gcAAIACZfp/TNT/K7x52Izt9xx68JHpSrVpOPQ/AAAAFCjT/w9E/b/iqUMWHtNm04VPTleqzcKh/wEAAKBAmf5/MOr/lv8asfa0X3799q10pWobDv0PAAAABcr0/0NR/6/08ZGvLdNs8aHHpivV5uHQ/wAAAFCgTP8/HPX/yh9cdMOiL7/R9+V0pdoiHPofAAAACpTp/0ei/l+lW/u+f4w6fP2p6Uq1ZTj0PwAAABQo0/+PRv2/6ml9D7qn9/A3z05Xqq3Cof8BAACgQJn+fyzq/9UmPvXEYT3aXfRzulK1C4f+BwAAgAJl+v/xqP9Xf7zl/jc+MvfofdKVautw6H8AAAAoUKb/n4j6f40GHzzc4719Nt4hXam2CYf+BwAAgAJl+n9s1P+tlv7i2q0bDX7nq3Sl2jYc+h8AAAAKlOn/J6P+X/Oe1U9/Y6POexyfrlTtw6H/AQAAoECZ/n8q6v+1Fvtq2L4zB93/ZrpSbRcO/Q8AAAAFyvT/uKj/13545X53XrHNXx+kK1WHcOh/AAAAKFCm/5+O+n+dW1sc9sve81r0TVeq7cOh/wEAAKBAmf4fH/X/ui0+GbfAnt32mZ2uVPO/E0D/AwAAQIEy/f9M1P/rLfLqsEevHvHgvulK1TEc+h8AAAAKlOn/Z6P+bz2mcb+OvzT5avt0pdoxHPofAAAACpTp/+ei/l//9s0Oa9pm4kKfpyvVTuHQ/wAAAFCgTP8/H/V/m5Y/jfvi5banHpSuVDuHQ/8DAABAgTL9/0LU/xt88s6zfzabfc2cdKXaJRz6HwAAAAqU6f8Xo/7f8KhmqzXq3eWZmelKtWs49D8AAAAUKNP/L0X9v9HJ6zc4ZNSQVXZLV6pO4dD/AAAAUKBM/0+I+n/jl7/57L5HqmOeSVeq+b8T0P8AAABQoEz/vxz1/yZP7bp4zx4vXtItXal2D4f+BwAAgAJl+v+VqP83bXjZDzc06vnpqelKtUc49D8AAAAUKNP/r0b9v9mSj06c+N7d7d5PV6o9w6H/AQAAoECZ/n8t6v+2o05af9vne+3xU7pS7RUO/Q8AAAAFyvT/xKj/N1/kwRfvWGnM/XunK1XncOh/AAAAKFCm/1+P+n+LMb3X3P+cln91TFeq+b8T0P8AAABQoEz/vxH1/5a379GwwYipLb5OV6p9wqH/AQAAoECZ/n8z6v+tWg6Y9vPTHfbpma5U+4ZD/wMAAECBMv3/VtT/7c4+c/Au3c5/8JV0pdovHPofAAAACpTp/7ej/t96wriTxjZo/dWUdKXaPxz6HwAAAAqU6f93ov7fZtLFnWdO+X6hs9KV6oBw6H8AAAAoUKb/J0X9v22P7R5acYtlTn0pXam6hEP/AwAAQIEy/f9u1P/tN+r8+M7TJ19zRLpSdQ2H/gcAAIACZfr/vaj/txtw/YFPXtjnmVPSlerAcOh/AAAAKFCm/ydH/d9h2L1n/tj1iVXeTleqg8Kh/wEAAKBAmf5/P+r/7Vv1HLLCDqsfc0i6Uh0cDv0PAAAABcr0/wdR/++w9yunfXjD9EvmpSvV/N8J6H8AAAAoUKb/P4z6v+M3i1+zzh+dPv0mXakODYf+BwAAgAJl+v+jqP93/HvTR/qtPrDdrulKdVg49D8AAAAUKNP/H0f9v9OOvxxw+XtztxiZrlSHh0P/AwAAQIEy/f9J1P87T9vwqWUatfugSleqf4VD/wMAAECBMv3/adT/uxz6+6HTegy+7D9p/KpbOPQ/AAAAFCjT/1Oi/t9119fPGfPIPsc/kK5U3cOh/wEAAKBAmf6fGvV/p58WvWn7UW+svnW6Uh0RDv0PAAAABcr0/2dR/+827qAPF+y9+Iu3pCvVkeHQ/wAAAFCgTP9/HvX/7gvdtNWsZsOvGpCuVEeFQ/8DAABAgTL9/0XU/3ssdWeLkS8fftI66Up1dDj0PwAAABQo0/9fRv2/513/+mO/NkMbDEpXqmPCof8BAACgQJn+nxb1/149t79g918O/HKjdKXqEQ79DwAAAAXK9P/0qP87v33hUU9f/etja6Qr1bHh0P8AAABQoEz/fxX1/94vjt9pxp6b7n9xulL1DIf+BwAAgAJl+v/rqP/3OeeMO5bbe9RKi6Yr1XHh0P8AAABQoEz/fxP1/76LfrzrJ1f0+OeudKU6Phz6HwAAAAqU6f9vo/7f74EVR7WZOeHup9OV6oRw6H8AAAAoUKb/Z0T9v/8da15y5kYNO62QrlQnhkP/AwAAQIEy/f9d1P8HrPR5zwGrf7rFVulKdVI49D8AAAAUKNP/30f932Xcaucu+ccKHwxJV6pe4dD/AAAAUKBM//8Q9X/XhaZ3+/yGBy+7Il2pTg6H/gcAAIACZfp/ZtT/By41dftHdjjl+PXSleqUcOh/AAAAKFCm/3+M+v+gu5YbvmPXmavfmq5UvcOh/wEAAKBAmf7/Ker/g1+d8f4/F7Z5sUG6Up0aDv0PAAAABcr0/89R/x9y0nqbNpne/6rm6Up1Wjj0PwAAABQo0/+zov4/9Iilm3Xdov1Jj6Ur1enh0P8AAABQoEz//xL1/2FT3pp995QnGzRJV6o+4dD/AAAAUKBM//8a9f/hn258x6MN+n55f7pSnREO/Q8AAAAFyvT/b1H//+vo33bq2O3dxx5PV6q+4dD/AAAAUKBM/8+O+r/bKW8e1fTp5vu3SFeqM8Oh/wEAAKBAmf7/Per/7q80uuCLEQNWui5dqc4Kh/4HAACAAmX6/4+o/48YN7rnmufs8s8m6Up1djj0PwAAABQo0/9zov4/cqHjL3l3pa/vXi1dqfqFQ/8DAABAgTL9/2fU/0ctdcCoc59v1al/ulKdEw79DwAAAAXK9P9fUf8ffddVu55yzOFXb5quVOeGQ/8DAABAgTL9/3fU/8csus/wbx8efvL16Uo1/98E6H8AAAAoUKb/50b93+OBa7dv8e7irc5NV6rzwqH/AQAAoECZ/v8n6v9j77i/2x4LvzFh1XSlOj8c+h8AAAAKlOn/eVH/91ypx7njmu9zxX3pSnVBOPQ/AAAAFOi/7v/aAlH/H3fg8E8avDL4xMbpSnVhOPQ/AAAAFCjT/wtG/X/8Z0dv8/Nd7bZaPl2pLgqH/gcAAIACZfq/QdT/J/x6yEp3nDr3oyfSlericOh/AAAAKFCm/2tR/5+4x9C5+w9uOKqWrlQDwqH/AQAAoECZ/q+i/j/psif677HHhF2GpyvVJeHQ/wAAAFCgTP/Xo/7vtdk53cet32PFR9OVamA49D8AAAAUKNP/DaP+P3nVjh2+nTXq72bpSnVpOPQ/AAAAFCjT/wtF/X/KDeff2uLHTR+5IV2pLguH/gcAAIACZfp/4aj/e3+/yp5TN/513y3TlerycOh/AAAAKFCm/xtF/X/q/l/fu94+By7QOl2prgiH/gcAAIACZfp/kaj/T+vw6WV9rhz6+ZXpSjX/Z/ofAAAACpTp/0Wj/j/9j+VPuHRI+6tHpSvVoHDofwAAAChQpv8bR/3f58APL2zasf/Ji6Qr1VXh0P8AAABQoEz/N4n6/4zPVjr6izXatFoxXakGh0P/AwAAQIEy/b9Y1P99f11jx0fnzJwwPl2prg6H/gcAAIACZfp/8aj/z9zjy9s7Tjvlio3TleqacOh/AAAAKFCm/5eI+v+s1ku8M3fzB0+8Kl2prg2H/gcAAIACZfq/adT/Z18/eYPFuqyw1UXpSnVdOPQ/AAAAFCjT/0tG/d/v/O+bHnjBpx+tnq5U14dD/wMAAECBMv2/VNT/52yxzi93dW816uZ0pbohHPofAAAACpTp/2ZR/5876ZOdTxj/9S7t0pVqSDj0PwAAABQo0//No/7v36PF3TdN3WXFddOV6sZw6H8AAAAoUKb/l476/7yzV770ldqAvy9JV6qh4dD/AAAAUKBM/y8T9f/5E77qsWXL5o/U05VqWDj0PwAAABQo0//LRv1/wUM7XDTvuXf3vTNdqW4Kh/4HAACAAmX6f7mo/y9sdN4RjW/ru8CYdKWa/50A+h8AAAAKlOn/FlH/X7Ti4x279Hvy8yXTleqWcOh/AAAAKFCm/5eP+v/iO/vdOfrKidP+SVeqW8Oh/wEAAKBAmf5fIer/AfWndttwnyb1g9OVang49D8AAAAUKNP/K0b9f8n4vvc9t/GIzp3Sleq2cOh/AAAAKFCm/1tG/T9wdPsrr/ux25hv05VqRDj0PwAAABQo0/8rRf1/adOLjj9y1rw5R6Yr1e3h0P8AAABQoEz/rxz1/2UHT157zfW3WXZCulLdEQ79DwAAAAXK9P8qUf9f/tUSr727x6Dd3kpXqpHh0P8AAABQoEz/rxr1/xWz1plx7uDO956crlR3hkP/AwAAQIEy/b9a1P9X7vz9wqecevfUl9OValQ49D8AAAAUKNP/q0f9P2jgG7173tVzm2PTlequcOh/AAAAKFCm/9eI+v+qDRa+7oZXXjz27HSlujsc+h8AAAAKlOn/VlH/D159o8cmNq8unZquVKPDof8BAACgQJn+XzPq/6tv/nW/bRce8tw+6Up1Tzj0PwAAABQo0/9rRf1/zYz9x/75bpfVfk5XqnvDof8BAACgQJn+Xzvq/2v3GtSl0cOzT/8qXanuC8f/6f+G/3NvGQAAAPg3Zfp/naj/r9vh7jMOOabtdTukK9X94fD8HwAAAAqU6f91o/6//p/jht7X7/tp3dOVakw49D8AAAAUKNP/60X9f8PB9520yW2t68+mK9UD4dD/AAAAUKBM/7eO+n/IV8cMnvDc+Z0npyvVg+HQ/wAAAFCgTP+vH/X/jbP2fujqlh3G9E5XqofCof8BAACgQJn+bxP1/9Cdr+l8eG3qnD/SlerhcOh/AAAAKFCm/zeI+n/Yukev+cHUlssemK5Uj4RD/wMAAECBMv2/YdT/N101/MV1x4/Zbfd0pXo0HPofAAAACpTp/42i/r/5wqHTzune694f05XqsXDofwAAAChQpv83jvr/lm0PaXjZBQOn7peuVI+HQ/8DAABAgTL9v0nU/7e2e3q/QV06bfN7ulI9EQ79DwAAAAXK9P+mUf8Pv6jPY903n37sZ+lKNTYc+h8AAAAKlOn/zaL+v21wh+vaTlv90g7pSvVkOPQ/AAAAFCjT/22j/h+x1gW9X5jzxHNvpCvVU+HQ/wAAAFCgTP9vHvX/7Qe3GrrgGn1WOy5dqcaFQ/8DAABAgTL9v0XU/3d89dkZszpOPv3MdKV6Ohz6HwAAAAqU6f8to/4fOeujLiOHLHPdh+lKNT4c+h8AAAAKlOn/raL+v3PnFcbud9u7i+ydrlTPhEP/AwAAQIEy/d8u6v9RM6Z0frNf8+9+SleqZ8Oh/wEAAKBAmf7fOur/u/Za9qF2LZ8c/3W6Uj0XDv0PAAAABcr0/zZR/9+9w6qDj3mu76Ed05Xq+XDofwAAAChQpv+3jfp/9D/TTho69etlXklXqhf+958L/U+/XQAAAOC/IdP/7aP+v2fmrM6ta61m90xXqhfD4fk/AAAAFCjT/9tF/X/vvps8NKX7gNvOSleql8Kh/wEAAKBAmf7vEPX/fe0XGzxw/C7bT0lXqgnh0P8AAABQoEz/bx/1//1/vnzSGV0e3PCIdKV6ORz6HwAAAAqU6f8dov4fs/mMxv+64JS3XkpXqvmfCaj/AQAAoECZ/u8Y9f8D5603c/C0Ty94O12pXg2H/gcAAIACZfp/x6j/H7xu6Tdf2nyFI09JV6rXwqH/AQAAoECZ/t8p6v+H1nur9aZr9F9vXrpSTQyH/gcAAIACZfp/56j/H+5y8nM/zWn/+iHpSvV6OPQ/AAAAFCjT/7tE/f/IFw+vXBsyc8iu6Ur1Rjj0PwAAABQo0/+7Rv3/6OwrFjygY5s+36Qr1Zvh0P8AAABQoEz/d4r6/7Hddv7y9n1+XeTNdKV6Kxz6HwAAAAqU6f/dov5/fObAhbe5ctPvjk9XqvnfCaj/AQAAoECZ/t896v8n9t1txus/Dh3fN12p3gmH/gcAAIACZfp/j6j/x7Y/7bUhGx946AfpSjUpHPofAAAACpTp/z2j/n/yzzFrH7v+hGX2TVeqd8Oh/wEAAKBAmf7fK+r/p4Zsf9g7sxrOnp2uVO+FQ/8DAABAgTL93znq/3GrXThulcGjbvs8Xakmh0P/AwAAQIEy/b931P9Ptx0/7NQ9emy/fbpSvR8O/Q8AAAAFyvT/PlH/j7/8jH4X3TV4wznpSjX/MwH1PwAAABQo0//7Rv3/zOQep046dZ+3DkpXqg/Dof8BAACgQJn+3y/q/2ePu//6lZvPvWC3dKX6KBz6HwAAAAqU6f/9o/5/rs+1j/Z+pd2RM9OV6uNw6H8AAAAoUKb/D4j6//nn9tn34neHr9ctXak+CYf+BwAAgAJl+r9L1P8vPPrzkx0WPvz1Z9KV6tNw6H8AAAAoUKb/u0b9/2Ljtl0fOOaNIe+nK9WUcOh/AAAAKFCm/w+M+v+lZZv0mf7w4n1OTVeqqeHQ/wAAAFCgTP8fFPX/hNteu3Hpjn3OHpKuVJ+FQ/8DAABAgTL9f3DU/y8v0KjXZUOeGLZVulJ9Hg79DwAAAAXK9P8hUf+/MvbNq8+Zs8zL66Ur1Rfh0P8AAABQoEz/Hxr1/6v3/fbgumtMXvuKdKX6Mhz6HwAAAAqU6f/D/nf///a/Gv+1Zhvv9cHmnQ5vkK5U08Kh/wEAAKBAmf4/PHr+P7Fr92Y3ThvY/9Z0pZoeDv0PAAAABcr0/7+i/n/9yztm97hg9fceS1eqr8Kh/wEAAKBAmf7vFvX/G7/f8v7WXaZv0jxdqb4Oh/4HAACAAmX6v3vU/2/u3nXTN8a33PH+dKX6Jhz6HwAAAAqU6f8jov5/68ozd5ncfeqdTdKV6ttw6H8AAAAoUKb/j4z6/+1Nx41eo9brlxbpSjUjHPofAAAACpTp/6Oi/n9nlYsH9po6ZsnH05Xqu3DofwAAAChQpv+Pjvp/0tDtjjnvudYHbZKuVN+HQ/8DAABAgTL9f0zU/+/++OXFO7X8fux16Ur1Qzj0PwAAABQo0/89ov5/b781jny4X4eZ/dOVamY49D8AAAAUKNP/x0b9P3m7lXb47LbzF18tXal+DIf+BwAAgAJl+r9n1P/v//XhyKUe7nJ2la5UP4VD/wMAAECBMv1/XNT/H3RdfvdLjhkybGS6Uv0cjn+z/8/577xlAAAA4N+U6f/jo/7/8MtP7++7cNuXH0hXqlnh8PwfAAAACpTp/xOi/v/o96+vWP/d2Wv/J41f/RIO/Q8AAAAFyvT/iVH/f7z7Ksd9+krPw29JV6pfw6H/AQAAoECZ/j8p6v9P1n+nxZHN7+6/dbpS/RYO/Q8AAAAFyvR/r6j/P72m2R/XnVq9t066Us0Oh/4HAACAAmX6/+So/6ecu/6Hz9314iYD0pXq93DofwAAAChQpv9Pifp/6pbfbLXhHtvsuFG6Uv0RDv0PAAAABcr0f++o/z/bYtFjWg+ed+egdKWaEw79DwAAAAXK9P+pUf9/fv7rA6fM6vzLxelK9Wc49D8AAAAUKNP/p0X9/8X1v48euP6gJddIV6q/wqH/AQAAoECZ/j896v8vW2+4yxkbNznornSl+jsc+h8AAAAKlOn/PlH/T+t69cinfpw4dtF0pZobDv0PAAAABcr0/xlR/0//cr8d9ryy28wV0pXqn3DofwAAAChQpv/7Rv3/1e8nHrn8PiMWfzpdqeaFQ/8DAABAgTL9f2bU/1/vftfF3zy5y6Sx6Up9/qH/AQAAoECZ/j8r6v9vfux53MlHD9ho2XSlHv6O/gcAAIASZfr/7Kj/v93v3iv6L9TqqMXTlXqDcPy7/b/wf+MtAwAAAP+mTP/3i/p/xnbX3//ex19ffG+6Uq+Fw/N/AAAAKFCm/8+J+v+7vzrv3uqlvm+skq7Uq3DofwAAAChQpv/Pjfr/+86v3dmnxZNtzk9X6vM/AFD/AwAAQIEy/d8/6v8fvmvS8dK+zc+8Jl2pNwyH/gcAAIACZfr/vKj/Z85re8TUke/euFm6Ul8oHPofAAAACpTp//Oj/v+x488Xrbddm28uS1fq81+v/wEAAKBAmf6/IOr/ny6e9OcmN81stH66Um8UDv0PAAAABcr0/4VR//+8dfNlJ8xtf8gW6Up9kXDofwAAAChQpv8vivp/1tpttrh6lf5PDU1X6ouGQ/8DAABAgTL9f3HU/79c/e3Hh7db4bdl0pV643DofwAAAChQpv8HRP3/69edNrnjs0+bPZKu1JuEQ/8DAABAgTL9f0nU/78dcvnk/c89pf1t6Up9sXDofwAAAChQpv8HRv0/e5fHfm9w8IPD/5OV+uLh0P8AAABQoEz/Xxr1/++/9Gr+8649Jq2ZrtSXCIf+BwAAgAJl+v+yqP//6PzQPz2vG7XRhelKvWk49D8AAAAUKNP/l0f9P+e7U1e4YXbDowanK/Ulw6H/AQAAoECZ/r8i6v8/5+259cR1Jly8QbpSn9/9+h8AAAAKlOn/K6P+/6vjJVO3bXvgG0+lK/Vm4dD/AAAAUKBM/w+K+v/vVn3vuvi7oW1apiv15uHQ/wAAAFCgTP9fFfX/3GFPdep96aZnNkpX6kuHQ/8DAABAgTL9Pzjq/38GXHTsygf8euPodKW+TDj0PwAAABQo0/9XR/0/b6P2AyaNWfybpulKfdlw6H8AAAAoUKb/r/mP/q8vsNSMzx447o1GD6Ur9eXCof8BAACgQJn+vzbq/wXvWq9Bh8aHH3J7ulJvEQ79DwAAAAXK9P91Uf83GLf0aku/NfyphulKfflw6H8AAAAoUKb/r4/6v7bQW89Of73dbwPTlfoK4dD/AAAAUKBM/98Q9X91ysnrr9x0brO10pX6iuHQ/wAAAFCgTP8Pifq//srDEyf12qf9tulKvWU49D8AAAAUKNP/N0b93/DTK364+N7Bw29KV+orhUP/AwAAQIEy/T806v+Fjt558d4HT7+9V7pSn/8a/Q8AAAAFyvT/sKj/F35x4LSZ567ecVK6Ul8lHPofAAAACpTp/5ui/m90zm4NV/xsYNMX0pX6quHQ/wAAAFCgTP/fHPX/Ij1PW3OXdp1+Oipdqa8WDv0PAAAABcr0/y1R/y/69pgXx64y+YkZ6Up99XDofwAAAChQpv9vjfq/8bDP+v8xd5kuO6cr9TXCof8BAACgQP/R/w3CT/6v/h8e9X+TVq26L3rTE40PS1fqrcKh/wEAAKBAmef/t0X9v9hGK3Q4bLs+P8xNV+prhkP/AwAAQIEy/T8i6v/FB3x06z0jz79lp3SlvlY49D8AAAAUKNP/t0f9v8Suf3zycN8O/aanK/W1w6H/AQAAoECZ/r8j6v+mP22zzU4tvl9nVrpSXycc+h8AAAAKlOn/kVH/LzmtWmmpl1q/tle6Ul83HPofAAAACpTp/zuj/l/q0OfmfvbxmPM+SVfq64VD/wMAAECBMv0/Kur/ZuscvuQaC/Xq3i9dqbcOh/4HAACAAmX6/66o/5sPGvnT5KOntu2RrtTXD4f+BwAAgAJl+v/uqP+XvmDY2+c92XLya+lKvU049D8AAAAUKNP/o6P+X2abAzfude+Lt3+frtQ3CIf+BwAAgAJl+v+eqP+XHXbDB9/1qjruka7UNwyH/gcAAIACZfr/3qj/l2t16JbLNr27add0pb5ROPQ/AAAAFCjT//dF/d9ioyOW3+31nj/9la7UNw6H/gcAAIACZfr//qj/lx9w25zxb81+4vR0pb5JOPQ/AAAAFCjT/2Oi/l/hu85XLtS4bZf30pX6puHQ/wAAAFCgTP8/EPX/ip2vP/7X44Y0fi5dqW8WDv0PAAAABcr0/4NR/7fseO9ut47p8sPh6Uq9bTj0PwAAABQo0/8PRf2/0rye9+1zwIhbPkpX6puHQ/8DAABAgTL9/3DU/yv/PWDunpd269cnXalvEQ79DwAAAAXK9P8jUf+vsuMeKz313cR1TkxX6luGQ/8DAABAgTL9/2jU/6vu3Xubb9o2ee31dKW+VTj0PwAAABQo0/+PRf2/2jcPfrL8OoPO2y5dqbcLh/4HAACAAmX6//Go/1cftsTGU2Z37v5lulLfOhz6HwAAAAqU6f8nov5fo9Xkt1tfN6/tr+lKfZtw6H8AAAAoUKb/x0b932qj7386Y9dtJu+frtS3DYf+BwAAgAJl+v/JqP/XHLDOkgN7zd3103Sl3j4c+h8AAAAKlOn/p6L+X2udb+YscW+70eekK/X5nwmo/wEAAKBAmf4fF/X/2oPWX/7L1wfPOyZdqXcIh/4HAACAAmX6/+mo/9e5oNmWjzXdp+Wr6Up9+3DofwAAAChQpv/HR/2/7jbvfLBD4zcO2DFdqe8QDv0PAAAABcr0/zNR/6+3/gtzZr21+KPT0pV6x3DofwAAAChQpv+fjfq/9TUNll9wzPAvfklX6vP/TYD+BwAAgAJl+v+5qP/XP3fzLfc77vBa53SlvlM49D8AAAAUKNP/z0f932bLfz4YeenQXt+lK/Wdw6H/AQAAoECZ/n8h6v8N/vjk9qcPOHDQLulKff7P9D8AAAAUKNP/L0b9v2GHFjvu3vbXFw5NV+q7hkP/AwAAQIEy/f9S1P8b7b/y0ct9t+kaf6cr9U7h0P8AAABQoEz/T4j6f+Pvv7pwxuxRx52UrtR3C4f+BwAAgAJl+v/lqP83uWGHY9us0+Pyd9KV+u7h0P8AAABQoEz/vxL1/6arnjfgk10nfPhiulLfIxz6HwAAAAqU6f9Xo/7fbLPH7xpwXcPNj05X6nuGQ/8DAABAgTL9/1rU/20v69fpzHM/3bV9ulLfKxz6HwAAAAqU6f+JUf9vvv5Tt35+8Aqjv0hX6p3Dof8BAACgQJn+fz3q/y2u6dthyXYPzvvtf/1X1/9rpb53OPQ/AAAAFCjT/29E/b/lue277/jZKS0PSFfq+4RD/wMAAECBMv3/ZtT/W215Uf9H5s484ON0pb5vOPQ/AAAAFCjT/29F/d+u66m/N1mlzaNnpCv1/cKh/wEAAKBAmf5/O+r/rb98qPk/2/X/4oR0pb5/OPQ/AAAAFCjT/+9E/b/N75dscvdN7WsT05X6/M8E0P8AAABQoEz/T4r6f9vd95zcte+TvU5LV+pdwqH/AQAAoECZ/n836v/2Sx/2aeORfQe9m67U538doP4HAACAAmX6/72o/7e7Z8i2815694Xn05X6geHQ/wAAAFCgTP9Pjvq/w+MjWo5u0XyNf6Ur9YPCof8BAACgQJn+fz/q/+0bHPl3l4UGHPdDulI/OBz6HwAAAAqU6f8Pov7f4bQJS9308S6X75mu1A8Jh/4HAACAAmX6/8Oo/ztOXPDnE578+sMu6Ur90HDofwAAAChQpv8/ivp/xw+2emvLo1tt/me6Uj8sHPofAAAACpTp/4+j/t+p29yNXrmu89ZLpyv1w8Oh/wEAAKBAmf7/JOr/nZ/Z9sN9dh30ycPpSn3+dwLofwAAAChQpv8/jfp/l75ztrp1nW0GjEhX6t3Cof8BAACgQJn+nxL1/64nPN/i19nzeiyYrtS7h0P/AwAAQIEy/T816v9O79b/WOi7bitfnq7UjwiH/gcAAIACZfr/s6j/dxuy31Md2454tk26Uj8yHPofAAAACpTp/8+j/t99tasPffSAJtdunq7UjwqH/gcAAIACZfr/i6j/92h71zlfXDqx943pSv3ocOh/AAAAKFCm/7+M+n/Py0+8qelxbRuunK7UjwmH/gcAAIACZfp/WtT/e+25++eNxsz++rx0pd4jHPofAAAACpTp/+lR/3f+7dLan291eejadKV+bDj0PwAAABQo0/9fRf2/9+cPrHpf4yF7t01X6j3/3z8W+h9/uwAAAMB/Q6b/v476f5+DTn/mkKbV8k+mK/XjwuH5PwAAABQo0//fRP2/b5v32tzw+ot/Lpeu1I8Ph/4HAACAAmX6/9uo//e7dqnXe97b877F0pX6CeHQ/wAAAFCgTP/PiPp///5rf79tr7v3vCddqZ8YDv0PAAAABcr0/3dR/x+w1Y+LTTy619aXpiv1k8Kh/wEAAKBAmf7/Pur/LkNaT9//yTGfrJ2u1HuFQ/8DAABAgTL9/0PU/11X+26hOz5uOWCbdKV+cjj0PwAAABQo0/8zo/4/sO3brX5eaGqPYelK/ZRw6H8AAAAoUKb/f4z6/6DLl3mhQYsOKy+RrtR7h0P/AwAAQIEy/f9T1P8Hz5z24NiXzn/2wXSlfmo49D8AAAAUKNP/P0f9f8i+q+61y8jW196RrtRPC4f+BwAAgAJl+n9W1P+Htl+214p9v+9dS1fqp4dD/wMAAECBMv3/S9T/h/055eqZNy3TcFy6Uu8TDv0PAAAABcr0/69R/x8+Z+tnZm03+euV0pX6GeHQ/wAAAFCgTP//FvX/v7b/a9UFV+nz0MLpSr1vOPQ/AAAAFCjT/7Oj/u92wLO1/eY+sffd6Ur9zHDofwAAAChQpv9/j/q/+w8LfT7ys9WXb5Wu1M8Kh/4HAACAAmX6/4+o/48Ycsdi3dtN//OCdKV+djj0PwAAABQo0/9zov4/crXu3w86uNN9V6cr9X7h0P8AAABQoEz//xn1/1Ftu77+wrkD99wwXamfEw79DwAAAAXK9P9fUf8fffktbdquO/H6C9OV+rnh0P8AAABQoEz//x31/zFtDnnh3t+bnLZmulLvHw79DwAAAAXK9P/cqP97XDu01aHXj1h1g3Slfl449D8AAAAUKNP//0T9f2z/4Qst0qnb84PTlfr54dD/AAAAUKBM/8+L+r/nVkdPn7P/vIEt05X6/O8E1P8AAABQoP+6/6sFov4/7qRJ9ecHbtPzqXSlPv8zAfU/AAAAFCjT/wtG/X/8q82/3mDGoG1Hpyv1i8Kh/wEAAKBAmf5vEPX/CVPavHTEZp2nNEpX6heHQ/8DAABAgTL9X4v6/8Qjvl39+rfvvuehdKU+IBz6HwAAAAqU6f8q6v+TRr7W5comPXdvmq7ULwmH/gcAAIACZfq/HvV/rxWajD3r+BeXa5iu1AeGQ/8DAABAgTL93zDq/5MXbjt0rQeqP25PV+qXhkP/AwAAQIEy/b9Q1P+nPPjzGR/fM+SBtdKV+mXh0P8AAABQoEz/Lxz1f++X9rmu5Uld9hqYrtQvD4f+BwAAgAJl+r9R1P+nnnVt7x+WmF3dlK7UrwiH/gcAAIACZfp/kaj/Tzvm/v2emNh2+rbpSv3KcOh/AAAAKFCm/xeN+v/0d3o8tutH31+/bLpSHxQO/Q8AAAAFyvR/46j/+5w0+uC3GrY+bWy6Ur8qHPofAAAACpTp/yZR/5/x6vFPr3bU+avem67UB4dD/wMAAECBMv2/WNT/facccMvpYzs8v3i6Ur86HPofAAAACpTp/8Wj/j/ziKvOvuDOqQPPT1fq14RD/wMAAECBMv2/RNT/Zy3UbdF2Z7bsuUq6Ur82HPofAAAACpTp/6ZR/5897vZv31x+zLabpSv168Kh/wEAAKBAmf5fMur/fnfd/PLQCb2mXJOu1K8Ph/4HAACAAmX6f6mo/89Zqss6x6w88J7105X6DeHQ/wAAAFCgTP83i/r/3Dn3XXX/3512vyxdqQ8Jh/4HAACAAmX6v3nU//23P+aUg/8f9v40+urx7///if3aUoaQIfM8ZCxDMpN5iEiGTEnGJGRWQmbyCQlFxopEZEiSZAihyBgqhE+mZEgS/yuH9T3OdZzrPNZ/rd+F48Ltdum59nrvx+rqvf3e79fAWavcla7U7gyH/gcAAIACZfp/xaj/L+/Qrt0Su673x/bpSu3f/xPQ/wAAAFCgTP+vFPX/FT/c+viCY0aPfCpdqQ0Mh/4HAACAAmX6f+Wo/6+8Y9vjdu59wcErpSu1QeHQ/wAAAFCgTP+vEvV/n3XnjH1r5geL/y8rtbvDof8BAACgQJn+bxb1/1XbvTHwjp1WmnVfulK7Jxz6HwAAAAqU6f9Vo/6/+sbGPU+bdPyMg9KV2uBw6H8AAAAoUKb/V4v6/5ot3r5tzrL3Lvp9ulK7Nxz6HwAAAAqU6f/Vo/6/9rYlzl/srGXaL0hXav9+J0D/AwAAQIEy/b9G1P/X9W5xeIfhb486Ml2p3R8O/Q8AAAAFyvT/mlH/X7/Dr6MeGHnowvfTldoD4dD/AAAAUKBM/68V9f8N5z0w5+uu/VY7P12pPRgO/Q8AAAAFyvT/2lH/3zip03JNl9pxn+PTldpD4dD/AAAAUKBM/68T9f9NHx3RcrcpC4e9lK7UhoRD/wMAAECBMv2/btT/fTvdPeWJbatpF6QrtaHh0P8AAABQoEz/rxf1/82Dn3/04dmvtf4kXakNC4f+BwAAgAJl+n/9qP//0+yitkded+qZb6UrtYfDof8BAACgQJn+3yDq/35L73rmUocP7dstXak9Eg79DwAAAAXK9P+GUf/fMuqqG/7ef5tXv0xXasPDof8BAACgQJn+3yjq/1tfXO/EHW7/dcPd0pXao+HQ/wAAAFCgTP9vHPX/bRd90XvivKPOOTxdqY0Ih/4HAACAAmX6f5Oo//uf+dHggc3v6vdrulJ7LBz6HwAAAAqU6f/mUf/fPnWN3bvttOuM99KV2uPh0P8AAABQoEz/bxr1/4DzPh3228zei3ZPV2ojw6H/AQAAoECLrrjIsv/zlf/R/5tF/X/HpGb7V723aN8lXak9EQ79DwAAAAXKfP6/edT/d3601mntjvlx1MvpSu3JcOh/AAAAKFCm/7eI+v+uTl9fc++u5yzcJ12pjQqH/gcAAIACZfp/y6j/By7a9O9VBj6x2ux0pfZUOPQ/AAAAFCjT/1tF/T9ozHurzf5rtX0Wpiu1p8Oh/wEAAKBAmf5vEfX/3Y/9d6cX1vps2HHpSu2ZcOh/AAAAKFCm/1tG/X9P0y2mH/jaBtNmpSu1Z8Oh/wEAAKBAmf7fOur/wStOuuGQVb9pvXe6UhsdDv0PAAAABcr0/zZR/987fMkz77t43zMPTldqz4VD/wMAAECBMv2/bdT/9z27Zdvfh1zTd266UhsTDv0PAAAABcr0/3ZR/9/f4PdHa881fbVnulJ7Phz6HwAAAAqU6f9WUf8/cN5hu7/YZeqGn6YrtbHh0P8AAABQoEz/bx/1/4OT+g1uWV10zpvpSu2FcOh/AAAAKFCm/1tH/f/QR0N7n/zJmH6npiu1ceHQ/wAAAFCgTP/vEPX/kE5nnnjrzAuW/iJdqb0YDv0PAAAABcr0/45R/w99cfg1S+80+qdd05Xa+HDofwAAAChQpv93ivp/2EWnnbbwmJXGdEhXai+FQ/8DAABAgTL9v3PU/w+fefD+w3p/cNRv6UptQjj0PwAAABQo0/+7RP3/yNT+w44auP/yF6YrtZfDof8BAACgQJn+3zXq/+EvX3bN97teN3daulJ7JRz6HwAAAAqU6f/dov5/tOdep6251noPTUpXaq+GQ/8DAABAgTL9v3vU/yNOu2T//f+atfeZ6UrttXDofwAAAChQpv/3iPr/scnPDXt21TW2mZqu1CaGQ/8DAABAgTL93ybq/8eXG/D+4NemTz0vXam9Hg79DwAAAAXK9P+eUf+PHHrsdocO6X7ZCelK7Y1w6H8AAAAoUKb/94r6/4nnO69Yv/jxEyakK7U3w6H/AQAAoECZ/t876v8nq/t+/bXLZhu1TVdq/z4TQP8DAABAgTL9v0/U/6POXmTVrZ77/vUf0pXaW+HQ/wAAAFCgTP/vG/X/UxNfnf/SJ7sP+jNdqb0dDv0PAAAABcr0/35R/z/96V8f9a+uuOSIdKX2Tjj0PwAAABQo0//7R/3/TJfWrU9a9oile6Urtcnh0P8AAABQoEz/HxD1/7Mv/zHln0l3/PRZulKbEg79DwAAAAXK9P+BUf+P7rlzy8bDtxvzRrpSezcc+h8AAAAKlOn/g6L+f+60xZc74qzfjzolXam9Fw79DwAAAAXK9H/bqP/HTH5pziNdT1/+q3SlNjUc+h8AAAAKlOn/g6P+f/7Jra5afuTDc/dKV2rvh0P/AwAAQIEy/X9I1P9jG87rPGPK4g8dkq7UPgiH/gcAAIACZfq/XdT/L6z+1p6jlnpl71/SldqH4dD/AAAAUKBM/x8a9f+4IY2G7D175232XWSRRe5b6n+s1D4Kh/4HAACAAmX6/7Co/1/8a9Xhy237z9Tv0pXax+HQ/wAAAFCgTP+3j/p//F6fHTTz8EMu+ytdqX0SDv0PAAAABcr0/+FR/7/U7ptuT1138wnHpiu1aeHQ/wAAAFCgTP93iPp/wrdr37jX7Utt9G66Uvs0HPofAAAACpTp/yOi/n954BWdrth/0utnpSu1z8Kh/wEAAKBAmf4/Mur/VzbY87KzmncadHK6Uvs8HPofAAAACpTp/6Oi/n+1Ra9715t3/yWvpCu16eHQ/wAAAFCgTP8fHfX/a9eM3uPDauqFG6crtRnh0P8AAABQoEz/d4z6f+ImFw898JOmA65PV2ozw6H/AQAAoECZ/j8m6v/Xbx673wvPjZk0MF2pfREO/Q8AAAAFyvT/sVH/v3Hl1afP7nLRZjunK7Uvw6H/AQAAoECZ/j8u6v83d97t2lUu/qbzE+lK7atw6H8AAAAoUKb/j4/6f9I5Td46esgGfZZNV2qzwqH/AQAAoECZ/j8h6v+3Xv9wi6GvXTOlnq7Uvg6H/gcAAIACZfq/U9T/b3/2w9J/rbrvlg+mK7VvwqH/AQAAoECZ/j8x6v93Tm7+/TJ/PbH7mulK7dtw6H8AAAAoUKb/O0f9P/nBhjevtNY5949NV2r/DYf+BwAAgAJl+v+kqP+nrPnO2V/t+tm8h9OV2uxw6H8AAAAoUKb/u0T9/26j3w59fOBqKy6RrtS+C4f+BwAAgAJl+v/kqP/fG9ly5B69ex93ZbpS+z4c+h8AAAAKlOn/U6L+n/rKf4696phdX9ggXan9EA79DwAAAAXK9P+pUf+/36vD8z12+nH2VulK7cdw6H8AAAAoUKb/T4v6/4PTuw5ae+YWjW5JV2o/hUP/AwAAQIEy/X961P8fTnmk17vzFv4zKl2pzQmH/gcAAIACZfr/jKj/Pzrn1Fv3ab7NgBXTldrP4dD/AAAAUKBM/3eN+v/j1x87b8z+d01aNF2pzQ2H/gcAAIACZfr/zKj/P/nstg4/3X7UZvenK7VfwqH/AQAAoECZ/u8W9f+0kw99arXrXuu8RbpS+zUc+h8AAAAKlOn/s6L+/3TxwRMeOLzqc2O6UvstHPofAAAACpTp/+5R/3/2Qpe1O2w7dMqd6Urt93DofwAAAChQpv/Pjvr/84c7LrLY7FO3bJWu1OaFQ/8DAABAgTL9f07U/9OXvfOLOUv12/3ydKX2Rzj0PwAAABQo0//nRv0/Y/kLR34/5dD710pXavPDof8BAACgQJn+7xH1/8xh4w5dc+TCedulK7U/w6H/AQAAoECZ/j8v6v8vxvY5e/+uO654W7pSWxAO/Q8AAAAFyvT/+VH/f1nf4+Znz7r3uFXSldpf4dD/AAAAUKBM/18Q9f9X58zsdenw418Yk67UFoZD/wMAAECBMv1/YdT/s17fcNBNk96ePTxdqf0dDv0PAAAABcr0/0VR/3/92erPf7LsMo2WTldq/4RD/wMAAECBMv1/cdT/35w87diNe439/LR0pfr30P8AAABQoEz/XxL1/7evrPLUk/dfssvEdKUKP6P/AQAAoESZ/r806v//9preYdcJ754+PV2pGoRD/wMAAECBMv3fM+r/2afPOm+FNZe/7tJ0pVosHPofAAAACpTp/15R/383Zd1bv2lw04Sf05Vq8XDofwAAAChQpv8vi/r/+4tH9xz9edt1Dk1Xqlo49D8AAAAUKNP/vaP+/2F8r4H7vTDzvDbpSvXvAwD0PwAAABQo0/+XR/3/4/t7jl2j01q3f52uVPVw6H8AAAAoUKb/r4j6/6duVxz3Q59pszqmK9W/79f/AAAAUKBM/18Z9f+cR+9d97cjmy3+d7pSNQyH/gcAAIACZfq/T9T/P6908vhq+1EH/zddqZYMh/4HAACAAmX6/6qo/+cudsyMdrN6jNw/XakahUP/AwAAQIEy/X911P+/jL6rwb1/fPvHa+lK1Tgc+h8AAAAKlOn/a6L+//Wt7X/ovN7Gq5yUrlRLhUP/AwAAQIEy/X9t1P+/nf/PMre3ufrAs9OVaulw6H8AAAAoUKb/r4v6//cTX9l8woC9hk9OV6plwqH/AQAAoECZ/r8+6v95Hy82acubBn0+L12plg2H/gcAAIACZfr/hqj//7h4/IYPt+u4S/t0pWoSDv0PAAAABcr0/41R/88fX3/lyBZzT989XamWC4f+BwAAgAJl+v+mqP//fH+nr5b6seV1M9KV6t/u1/8AAABQoEz/9436f0G3BdXfv4yYcEa6Uq0QDv0PAAAABcr0/81R///VeImz9tqi2zpvpytV03DofwAAAChQpv//E/X/wqff7vdU2/HnfZyuVCuGQ/8DAABAgTL93y/q/7/v+/XJmbcscvvF6Uq1Ujj0PwAAABQo0/+3RP3/z8otDlnu3AWzxqcr1crh0P8AAABQoEz/3/r/+r9a5NyDB1w8tPXiJ6Yr1Srh0P8AAABQoEz/3xb1/6Jv97/omom3HnxuulI1C4f+BwAAgAJl+r9/1P8NPhl+9KcrtB/5QbpSrRoO/Q8AAAAFyvT/7VH/L3b8aaO3aDjxj6PSlWq1cOh/AAAAKFCm/wdE/b/4ChMPn/1+w1X+SFeq1cOh/wEAAKBAmf6/I+r/2oilR63y1JADf0pXqjXCof8BAACgQJn+vzPq/+q5rW878NQuww9MV6o1w6H/AQAAoECZ/r8r6v/6InPPf2FAk2H3pivVv+/R/wAAAFCgTP8PjPp/ifu2HLhem8n7LJauVGuHQ/8DAABAgTL9Pyjq/4Yr/97zw/V6rrZCulKtEw79DwAAAAXK9P/dUf8v2XjScVf8MW7h0+lKtW449D8AAAAUKNP/90T93+jpJceeNWudUa3TlWq9cOh/AAAAKFCm/wdH/d94wVHzW2z/ZfsB6Uq1fjj0PwAAABQo0//3Rv2/1G4DVx1/5IGL9k1Xqg3Cof8BAACgQJn+vy/q/6XbP9T6tj43zNgsXak2DIf+BwAAgAJl+v/+qP+X+en4j7p0Or/f7elKtVE49D8AAAAUKNP/D0T9v+xmuz/Q84Wnz9kmXak2Dof+BwAAgAJl+v/BqP+b3H7lXjd+vvKG66Qr1Sbh0P8AAABQoEz/PxT1/3JXvHDyxw0+fvWydKVqHg79DwAAAAXK9P+QqP+X3/6CPpus2aZv43Sl2jQc+h8AAAAKlOn/oVH/r3DgJ6f9NKHPmSPSlerfZwLofwAAAChQpv+HRf3fdN5q16x2f/PWo9OVavNw6H8AAAAoUKb/H476f8UvNxi2T6/Z01ZNV6otwqH/AQAAoECZ/n8k6v+Vjpyx/5hTtxq2Y7pSbRkO/Q8AAAAFyvT/8Kj/V16wzuC1n5qzz93pSrVVOPQ/AAAAFCjT/49G/b/Kbl/t/u77x652bbpStQiH/gcAAIACZfp/RNT/zdp/fuJVDe9Z2DxdqVqGQ/8DAABAgTL9/1jU/6v+tHLvHis0GDUkXam2Dof+BwAAgAJl+v/xqP9Xu+G7eW9NnNC+lq5U24RD/wMAAECBMv0/Mur/1bfdrOnOQ7suuly6Um0bDv0PAAAABcr0/xNR/6+xzkpbn3bu8BmPpyvVduHQ/wAAAFCgTP8/GfX/mgOmfHDHLR36LZmuVK3Cof8BAACgQJn+HxX1/1p3tejTp23/c4amK9X24dD/AAAAUKBM/z8V9f/aa/968nlbtNpwXLpStQ6H/gcAAIACZfr/6aj/19nm7b3W+WX+q6unK9UO4dD/AAAAUKBM/z8T9f+6fZd4YMqPnfv+J12pdgyH/gcAAIACZfr/2aj/F1/w8P4rtHjwzJbpSrVTOPQ/AAAAFCjT/6Oj/l9/tzOGfdOuUev10pVq53DofwAAAChQpv+fi/p/g/aHX/PkTW9MuypdqXYJh/4HAACAAmX6f0zU/xv+dPNpuz7VcO+l0pVq13DofwAAAChQpv+fj/p/owPb9f7k1IkPPZauVLuFQ/8DAABAgTL9Pzbq/43n3Xrixg27zH02Xal2D4f+BwAAgAJl+v+FqP83+XLE7pe+P2T5ZulKtUc49D8AAAAUKNP/46L+b37kKYNvmtj6qP7pStUmHPofAAAACpTp/xej/t903569W62wYMzW6Uq1Zzj0PwAAABQo0//jo/7f7JdnT3zz3PY/rZuuVHuFQ/8DAABAgTL9/1LU/5t/c/nu9wy9dene6Uq1dzj0PwAAABQo0/8Tov7f4pg2g89o2+2SHdKVap9w6H8AAAAoUKb/X476f8t7unx67i0jBt2RrlT7hkP/AwAAQIEy/f9K1P9brT9456t/WeT1m9KVar9w6H8AAAAoUKb/X436v8VWd6753hbjN9o0Xan2D4f+BwAAgAJl+v+1qP9bXt9x4VotOp4wOF2pDgiH/gcAAIACZfp/YtT/W//z93Kzfhx0WYN0pTowHPofAAAACpTp/9ej/t9mz1ZzVryp5dSm6Up1UDj0PwAAABQo0/9vRP2/7SENpuzebu42z6QrVdtw6H8AAAAoUKb/34z6f7vvXm45ss3Ge9+crlQHh0P/AwAAQIEy/T8p6v9W+1YfNR/w7UMt0pXqkHDofwAAAChQpv/fivp/+19ebP3RH3vNXT9dqdqFQ/8DAABAgTL9/3bU/62/+XPVG9a7evmr05Xq0HDofwAAAChQpv/fifp/h2N2nN9r+2ZHNUpXqsPCof8BAACgQJn+nxz1/447v9P3tVnTxgxLV6r24dD/AAAAUKBM/0+J+n+nKxt23bpPj59eSFeqw8Oh/wEAAKBAmf5/N+r/nW9uecDxR45aerV0peoQDv0PAAAABcr0/3tR/++yyW8jbnmh7SUPpSvVEeHQ/wAAAFCgTP9Pjfp/1+6zHny1002DFk9XqiPDof8BAACgQJn+fz/q/93eXHfvbRqs9fr/0vjVUeHQ/wAAAFCgTP9/EPX/7tNX6XLC5zM3GpmuVEeHQ/8DAABAgTL9/2HU/3ucNP3KfhMuOWGndKXqGA79DwAAAAXK9P9HUf+3aXLp6R3WHHvZPelKdUw49D8AAAAUKNP/H0f9v+cjY659oNfyU69JV6pjw6H/AQAAoECZ/v8k6v+9xvUeOuf+d7fZJF2pjguH/gcAAIACZfp/WtT/e9f23m+xdg9u+Wq6Uh0fDv0PAAAABcr0/6dR/+8zpM+9d9zUeUrndKU6IRz6HwAAAAqU6f/Pov7fd/U99jjtxzf6nJOuVJ3Cof8BAACgQJn+/zzq//0aXthp5xaNOk9JV6oTw6H/AQAAoECZ/p8e9f/+T4677K0t+m92TLpS/fudAP0PAAAABcr0/4yo/w/4+6eX+/7SYdI/6Up1Ujj0PwAAABQo0/8zo/4/sM3GG1xyy/wB36YrVZdw6H8AAAAoUKb/v4j6/6CDl69v1LbVhfulK9XJ4dD/AAAAUKBM/38Z9X/b2e/PmjZ0QqM56Up1Sjj0PwAAABQo0/9fRf1/8Ebz7phwboPZ7dKV6tRw6H8AAAAoUKb/Z0X9f0i/rS7ecoXhL+yZrlSnhUP/AwAAQIH+7/7foP2Kvf69q3ZXNTqq88Sux32TrlSnh0P/AwAAQIEyn/9/E33+f+iObz17+/tzVjw9XanOCIf+BwAAgAJl+v/bqP8P26dbh3YNt5r3erpSdQ2H/gcAAIACZfr/v1H/t5877Kl7T73n/s/TlerMcOh/AAAAKFCm/2dH/X/417fc+ttTx+5+SbpSdQuH/gcAAIACZfr/u6j/O3Rsf151f58tj05XqrPCof8BAACgQJn+/z7q/yP+vn3QwF5tpsxPV6ru4dD/AAAAUKBM//8Q9f+RbQ7p1W3N2X1+TFeqs8Oh/wEAAKBAmf7/Mer/ow4+/dgdJjTvfEC6Up0TDv0PAAAABcr0/09R/x89+9HnJ37+9GYvpivVueHQ/wAAAFCgTP/Pifq/47XHvnFWg/MndUpXqh7h0P8AAABQoEz//xz1/zEtB2x0RaePB/RIV6rzwqH/AQAAoECZ/p8b9f+xG97X8MMXVr7ww3SlOj8c+h8AAAAKlOn/X6L+P25Q5+/WO/LLRl3TleqCcOh/AAAAKFCm/3+N+v/4u69+tlWfdWa/k65UF4ZD/wMAAECBMv3/W9T/J6y321FvzrrhhY/SleqicOh/AAAAKFCm/3+P+r/TlhdffM/2Bx53UbpSXRwO/Q8AAAAFyvT/vKj/T7xu7B1nrDd5xd/TleqScOh/AAAAKFCm//+I+r/z32ueN+yPJvMOS1eqS8Oh/wEAAKBAmf6fH/X/SW0+vvWoAePu3yNdqXqGQ/8DAABAgTL9/2fU/10O/vKppdv03H1mulL1Cof+BwAAgAJl+n9B1P8nz16/w8KfWt3ZPl2pLguH/gcAAIACZfr/r6j/T9nnm+dPbjn/4nnpStU7HPofAAAACpTp/4VR/586d+1jbz20wxYz0pXq8nDofwAAAChQpv//jvr/tK9X7fVi3/5v756uVFeEQ/8DAABAgTL9/0/U/6d3/GxQy36Nrn47XamuDIf+BwAAgAL93/1fWyTq/zNWaTr+hoPe6HJGulL1CYf+BwAAgAJl+n/RqP+73v/eur0279zi4nSluioc+h8AAAAKlOn/BlH/n/nMfxs0n/vgex+nK9XV4dD/AAAAUKBM/y8W9X+3pbaY8VHTY+89MV2prgmH/gcAAIACZfp/8aj/z3pnqYEvvn7PruPTleracOh/AAAAKFCm/2tR/3fv8WbPlsO2WuGDdKW6Lhz6HwAAAAqU6f8q6v+zT/j5uJN7zPnt3HSluj4c+h8AAAAKlOn/etT/50zbbuytp3R9/o90pbohHPofAAAACpTp/yWi/j/3sdvaHTJq+DFHpSvVjeHQ/wAAAFCgTP83jPq/R9NDH79vaoOGB6Yr1U3h0P8AAABQoEz/Lxn1/3mLnvqf35eY8O1P6UrVNxz6HwAAAAqU6f9GUf+fP+axc2prrHznxHSlujkc+h8AAAAKlOn/xlH/X7BK1wH3vPTxxaelK9V/wqH/AQAAoECZ/l8q6v8L73/kojPuO3+LS9OVql849D8AAAAUKNP/S0f9f9Ez/zm6Vc+n356erlS3hEP/AwAAQIEy/b9M1P8XL9Vh9JsnNr/60HSlujUc+h8AAAAKlOn/ZaP+v+TMB945Z9zsLj+nK9Vt4dD/AAAAUKD/vf8XC3etSdT/l07ttNll09u0+DpdqfqHQ/8DAABAgTKf/y8X9X/PF49oPHWxPu+1SVeq28Oh/wEAAKBAmf5fPur/Xhfd/eOGX/W89+90pRoQDv0PAAAABcr0/wpR/1928yntZ7Qat2vHdKW6Ixz6HwAAAAqU6f+mUf/33mTEM8sf0WSF/dOV6s5w6H8AAAAoUKb/V4z6//Kdb+2/95WTf/tvulLdFQ79DwAAAAXK9P9KUf9fcWW7c0fdceDzJ6Ur1cBw6H8AAAAoUKb/V476/8o5c+7qvucNx7yWrlSDwqH/AQAAoECZ/l8l6v8++2174eXrr9NwcrpS3R0O/Q8AAAAFyvR/s6j/rzq28REfzP/y27PTleqecOh/AAAAKFCm/1eN+v/qr954bv0lbv3h7nSlGhwO/Q8AAAAFyvT/alH/X7PXEoeMm9q+8Y7pSnVvOPQ/AAAAFCjT/6tH/X/tX28/ecCoBUc0T1eq+8Kh/wEAAKBAmf5fI+r/6779td/Kp7QefW26Ut0fDv0PAAAABcr0/5pR/1/frsVZ3/UYMqeWrlQPhEP/AwAAQIEy/b9W1P83rNlp62HDujQZkq5UD4ZD/wMAAECBMv2/dtT/Nz74wAdHvT5xz8fTleqhcOh/AAAAKFCm/9eJ+v+mkXfPW7ppwweWS1eqf38nQP8DAABAgTL9v27U/30bHdF04dy5HwxNV6p/X9P/AAAAUKBM/68X9f/Nr1906qzNW263ZLpSDQuH/gcAAIACZfp//aj//3PO89eveNCgE1dPV6qHw6H/AQAAoECZ/t8g6v9+J1/18O79Ol4+Ll2pHgmH/gcAAIACZfp/w6j/b/ls131G9h3/Zst0pRoeDv0PAAAABcr0/0ZR/9867Ish5x66yCb/SVeqR8Oh/wEAAKBAmf7fOOr/25Zfb8+rW47oeVW6Uo0Ih/4HAACAAmX6f5Oo//vX1+j83k/d7lkvXakeC4f+BwAAgAJl+r951P+3j/3oqrXmj/phsXSlejwc+h8AAAAKlOn/TaP+H7Bms67Prd+j8b3pSjUyHPofAAAACpTp/82i/r/jwU/77rvntCOeTleqJ8Kh/wEAAKBAmf7fPOr/O0d+PWL1O5qNXiFdqZ4Mh/4HAACAAmX6f4uo/+9qtNYBP1559ZwB6Uo1Khz6HwAAAAqU6f8to/4feMp7rQ8/Yq8mrdOV6qlw6H8AAAAoUKb/t4r6f9C7TT96sNW3e26WrlT//k0A/Q8AAAAFyvR/i6j/7351i/k/f7XxA33TleqZcOh/AAAAKFCm/1tG/X/PJf9dtcFi736wTbpSPRsO/Q8AAAAFyvT/1lH/D+615D5rTF9+u9vTlWp0OPQ/AAAAFCjT/9tE/X/vK5Me/mHc2BMvS1eq58Kh/wEAAKBAmf7fNur/+6b8fv3oEy+5fJ10pRoTDv0PAAAABcr0/3ZR/99/+pan7tdz5psj0pXq+XDofwAAAChQpv9bRf3/wJr9rup731qbNE5XqrHh0P8AAABQoEz/bx/1/4MPHtb5kpdu6rlqulK9EA79DwAAAAXK9H/rqP8fGnnmnhut0fae0elKNS4c+h8AAAAKlOn/HaL+H9Jo6JBp69+wWIt0pXoxHPofAAAACpTp/x2j/h867LQDdpt/4Bc3pyvV+HDofwAAAChQpv93ivp/2PLDRzxxx5dPX52uVC+FQ/8DAABAgTL9v3PU/w/X+/f9es91OqyfrlQTwqH/AQAAoECZ/t8l6v9Hxh7ctekR49YYlq5UL4dD/wMAAECBMv2/a9T/wx/d64D7r+z5T6N0pXolHPofAAAACpTp/92i/n90pctGHPzV5EdWS1eqV8Oh/wEAAKBAmf7fPer/EYs913fxVk32eyFdqV4Lh/4HAACAAmX6f4+o/x8bfUnXedNnt1o8XakmhkP/AwAAQIEy/d8m6v/HLz62yU+LNf/4oXSlej0c+h8AAAAKlOn/PaP+Hzl+wC+rndjnxpHpSvVGOPQ/AAAAFCjT/3tF/f/E+/e9u8+4Nmf8L41fvRkO/Q8AAAAFyvT/3lH/P9mt85Zj7vt4/XvSlWpSOPQ/AAAAFCjT//tE/T9q1Ven9+y58ss7pSvVW+HQ/wAAAFCgTP/vG/X/U/custONazx98ybpSvV2OPQ/AAAAFCjT//tF/f/0U61X+/il87tfk65U74RD/wMAAECBMv2/f9T/zyzz19+bTB2+2GPpSjU5HPofAAAACpTp/wOi/n/20Z2bPr5E1y+WSleqKeHQ/wAAAFCgTP8fGPX/6JX+mLfHKROebpauVO+GQ/8DAABAgTL9f1DU/88t9tIHK41q0OHZdKV6Lxz6HwAAAAqU6f+2Uf+PGb341l8Nu2eNrdOVamo49D8AAAAUKNP/B0f9//wn83bv2OPYf/qnK9X74dD/AAAAUKBM/x8S9f/Y47ca/FjTOY/0TleqD8Kh/wEAAKBAmf5vF/X/C+c26r3g9a32WzddqT4Mh/4HAACAAmX6/9Co/8e9/daJS2z+Rqs70pXqo3DofwAAAChQpv8Pi/r/xds+O+WYuY0+3iFdqT4Oh/4HAACAAmX6v33U/+O3WPW6Ef0evHHTdKX6JBz6HwAAAAqU6f/Do/5/aYe1H/nzoM5n3JSuVNPCof8BAACgQJn+7xD1/4Te3+zb8ND56zdIV6pPw6H/AQAAoECZ/j8i6v+Xf9vzoUl9W708OF2pPguH/gcAAIACZfr/yKj/X2l7RZtdfup/8zPpSvV5OPQ/AAAAFCjT/0dF/f/q0aNPOr1lh+5N05Vqejj0PwAAABQo0/9HR/3/2sxeVw94aa1z56cr1Yxw6H8AAAAoUKb/O0b9P3GPsWc0WGPmbUenK9XMcOh/AAAAKFCm/4+J+v/1+Rff9HPPtuMPSFeqL8Kh/wEAAKBAmf4/Nur/N37Y7bEH77tprR/TlerLcOh/AAAAKFCm/4+L+v/NDlcfePi45U/tlK5UX4VD/wMAAECBMv1/fNT/k5p92HCFE9+95sV0pZoVDv0PAAAABcr0/wlR/781uMl33yx2yacfpivV1+HQ/wAAAFCgTP93ivr/7VHN33hy+tideqQr1Tfh0P8AAABQoEz/nxj1/ztL/7DRrq32avtOulJ9Gw79DwAAAAXK9H/nqP8nT3rnsCO+unpE13Sl+m849D8AAAAUKNP/J0X9P+W8hk8/cuXGf16UrlSzw6H/AQAAoECZ/u8S9f+7nVre/s8R3676UbpSfRcO/Q8AAAAFyvT/yVH/v/fRbz0a79mj3WHpSvV9OPQ/AAAAFCjT/6dE/T91eIc7X79j1JO/pyvVD+H43/p/0f+P/8kAAADA/58y/X9q1P/vr/ifC1rPb/bNzHSl+jEcPv8HAACAAmX6/7So/z9o8MiRZ64/rdojXal+Cof+BwAAgAJl+v/0qP8/fLbrmEEtFzm3c7pSzQmH/gcAAIACZfr/jKj/P2r22MH1n8bf9mq6Uv0cDv0PAAAABcr0f9eo/z8efOoTv/btNn5KulLNDYf+BwAAgAJl+v/MqP8/GXXoLYMPHbHWOelK9Us49D8AAAAUKNP/3aL+n7b0bd0PPajlqf+kK9Wv4dD/AAAAUKBM/58V9f+nXbvUv+s395pj0pXqt3DofwAAAChQpv+7R/3/2YeDZ608t+On+6Ur1e/h0P8AAABQoEz/nx31/+cT7nz5gM0H7fRtulLNC4f+BwAAgAJl+v+cqP+nX9hxg3Gvd2nbLl2p/giH/gcAAIACZfr/3Kj/Z1w0rsf9TYeMmJOuVPPDof8BAACgQJn+7xH1/8wXL7z94B4N//wmXan+DIf+BwAAgAJl+v+8qP+/mLrH04sPm7jqnulKtSAc+h8AAAAKlOn/86P+//LMPofNG9W+3evpSvVXOPQ/AAAAFCjT/xdE/f9Vsw3HtDjl1idPT1eqheHQ/wAAAFCgTP9fGPX/rMEzjxy/ROtvLklXqr/Dof8BAACgQJn+vyjq/69HTbvgtqkLqs/TleqfcOh/AAAAKFCm/y+O+v+bpVe/s8uOTT75JF2p/3vofwAAAChQpv8vifr/2+HTu/81Y/IOF6Qr9fAz+h8AAABKlOn/S6P+/++Kq9yyzGU9u3VLV+oNwqH/AQAAoECZ/u8Z9f/sBus+cXTHcTe9la7UFwuH/gcAAIACZfq/V9T/3z076+Chu63z2m7pSn3xcOh/AAAAKFCm/y+L+v/75Xo99/ugLzf4Ml2p18Kh/wEAAKBAmf7vHfX/D0NHH1FbeODZv6Yr9Soc+h8AAAAKlOn/y6P+//H5Ky48ZO0bbjk8Xan/+wBA/Q8AAAAFyvT/FVH//1Ttedd9r54/8/t0pf7v+/U/AAAAFCjT/1dG/T/n5ZO/ea7Z04sclK7UG4ZD/wMAAECBMv3fJ+r/n3veW9v3opUPOzJdqS8ZDv0PAAAABcr0/1VR/8897a71Vn/o46cWpCv1RuHQ/wAAAFCgTP9fHfX/L5OPefXHMW3+Oj9dqTcOh/4HAACAAmX6/5qo/3994J+Nm5/cZ/X305X6UuHQ/wAAAFCgTP9fG/X/b2ts/+ZH9eb7vpSu1JcOh/4HAACAAmX6/7qo/39fcrHZN0ybPfT4dKW+TDj0PwAAABQo0//XR/0/7/FXluj11laf7J2u1JcNh/4HAACAAmX6/4ao//9Yrv7lrCZzdpiVrtSbhEP/AwAAQIEy/X9j1P/zh45fdMXux3abm67UlwuH/gcAAIACZfr/pqj//3x+wVq7P3rPTQenK/V/u1//AwAAQIEy/d836v8F1U4vjXy8wWufpiv1FcKh/wEAAKBAmf6/Oer/v056e1TDMyZs0DNdqTcNh/4HAACAAmX6/z9R/y+cvsThfzbuevap6Up9xXDofwAAAChQpv/7Rf3/95stzh8xefgtb6Yr9ZXCof8BAACgQJn+vyXq/3+6/3rbMdt1mNk9XamvHA79DwAAAAXK9P+t/6//64scfOzCXb7rv8h76Up9lXDofwAAAChQpv9vi/p/0dkD1px0favDXk5X6s3Cof8BAACgQJn+7x/1f4O/79t5QIf5T3VJV+qrhkP/AwAAQIEy/X971P+Lten86en7df5rdrpSXy0c+h8AAAAKlOn/AVH/L77lqy1H9H9w9X3Slfrq4dD/AAAAUKBM/98R9X/tukWmHPN7o32PS1fqa4RD/wMAAECBMv1/Z9T/1d2t5zTc5I2hC9OV+prh0P8AAABQoEz/3xX1f329v5b7c9rYR5ukK/V/36P/AQAAoECZ/h8Y9f8SV+08//j6JQc8ma7U1w6H/gcAAIACZfp/UNT/DXf8Y9VbTn535QfSlfo64dD/AAAAUKBM/98d9f+SG73U+rUxy8+v0pX6uuHQ/wAAAFCgTP/fE/V/o36Lf7T1Qzc9fl26Ul8vHPofAAAACpTp/8FR/zeeftjA8y5qe8hG6Up9/XDofwAAAChQpv/vjfp/qZP69ezTbGZtl3SlvkE49D8AAAAUKNP/90X9v3T3ocdNeXWtrwalK/UNw6H/AQAAoECZ/r8/6v9l3jxz7DprT+u/YbpS//c7AfofAAAACpTp/wei/l+24QHjWy9sdn6fdKW+cTj0PwAAABQo0/8PRv3f5Mnr1n190Kh1+6Ur9U3Cof8BAACgQJn+fyjq/+WGPN5g0G49XtoyXak3D4f+BwAAgAJl+n9I1P/Lr37ejDM7fnv98+lKfdNw6H8AAAAoUKb/h0b9v8KpU5d55LKNT1sjXalvFg79DwAAAAXK9P+wqP+bvrfcD0fMuHrnhulKffNw6H8AAAAoUKb/H476f8XXNprUeMe9pj+SrtS3CIf+BwAAgAJl+v+RqP9XuvTHzf/ZZNCjN6Qr9X//JqD+BwAAgAJl+n941P8rT9/0lZN+73jA5ulKfatw6H8AAAAoUKb/H436f5WTZm/Yv//clbdPV+otwqH/AQAAoECZ/h8R9X+z7pOrl/ZrOf+udKXeMhz6HwAAAAqU6f/Hov5f9c0Vv9qqw4jHV0pX6luHQ/8DAABAgTL9/3jU/6sNndXv2uu7HfJUulLfJhz6HwAAAAqU6f+RUf+vvty6Z1303fjafelKfdtw6H8AAAAoUKb/n4j6f41qlUM2326Rr/6Xlfp24dD/AAAAUKBM/z8Z9f+az09/8rPJC/o/l67UW4VD/wMAAECBMv0/Kur/tcbtOGN849bnr5yu1P99JqD+BwAAgAJl+v+pqP/Xrv3ZoMUZt667TLpSbx0O/Q8AAAAFyvT/01H/r9PkxXW7PN7+pUfTlfoO4dD/AAAAUKBM/z8T9f+6j1Tjb3t04vVrpyv1HcOh/wEAAKBAmf5/Nur/9aY/sPnB3RuedkW6Ut8pHPofAAAACpTp/9FR/69/UqdJ9zcZsvOt6Up953DofwAAAChQpv+fi/p/g+5H/DDvrS7Tt01X6ruEQ/8DAABAgTL9Pybq/w3fvHuZxX9/cI+x6Up913DofwAAAChQpv+fj/p/o1M7fnX3Jp3vWzNdqe8WDv0PAAAABcr0/9io/zd+786q635v/L5EulLfPRz6HwAAAAqU6f8Xov7f5LXBG27fv9FKD6cr9T3Cof8BAACgQJn+Hxf1f/NLu7zyxvX9j90gXam3CYf+BwAAgAJl+v/FqP837XrWV5d06DDuynSlvmc49D8AAAAUKNP/46P+3+zDp6u+283/7pZ0pb5XOPQ/AAAAFCjT/y9F/b/5hBs2nPZdqyW3Slfqe4dD/wMAAECBMv0/Ier/LS7c75WNGk+44Pp0pb5POPQ/AAAAFCjT/y9H/b/lmFNGbzm5wR0bpyv1fcOh/wEAAKBAmf5/Jer/rRYdcfSEx4e/tXO6Ut8vHPofAAAACpTp/1ej/m/R9NaLbj+j66YD05X6/uHQ/wAAAFCgTP+/FvV/y8faDejcfc5Jy6Yr9QPCof8BAACgQJn+nxj1/9bT5px/76NbXflEulI/MBz6HwAAAAqU6f/Xo/7f5oRtb2v31j2TH0xX6geFQ/8DAABAgTL9/0bU/9v2aDyqanLsVvV0pd42HPofAAAACpTp/zej/t/unTcO/63eZ4+10pX6weHQ/wAAAFCgTP9Pivq/Vdclxnab1ua+y9OV+iHh0P8AAABQoEz/vxX1//Yfvn3cwDGzf78tXam3C4f+BwAAgAJl+v/tqP9bT/i158STm6+0XbpSPzQc+h8AAAAKlOn/d6L+3+HCFgN3uOjpY8ekK/XDwqH/AQAAoECZ/p8c9f+OzcbPvuKh88etkq7U24dD/wMAAECBMv0/Jer/nQbXlzjr1Y+/WzpdqR8eDv0PAAAABcr0/7tR/+88aqeN12u28pLD05V6h3DofwAAAChQpv/fi/p/l6UXvPnhwi8vWDFdqR8RDv0PAAAABcr0/9So/3dt/92Ll6+9zh2j0pX6keHQ/wAAAFCgTP+/H/X/bj9ttk733W546/50pX5UOPQ/AAAAFCjT/x9E/b/7gpUWW3/QgZsumq7Ujw6H/gcAAIACZfr/w6j/99htyswPLpt80o3pSr1jOPQ/AAAAFCjT/x9F/d9mm3OWXr5jkyu3SFfqx4RD/wMAAECBMv3/cdT/e/Z96vsZO46b3CpdqR8bDv0PAAAABcr0/ydR/+91V9+3Rs3oudWd6Ur9uHDofwAAAChQpv+nRf2/99r7brF3k4Zbn5eu1I8Ph/4HAACAAmX6/9Oo//e54vqXP3tr4vtT05X6CeHQ/wAAAFCgTP9/FvX/vtsfuMHmj3bpPSFdqXcKh/4HAACAAmX6//Oo//fb7Pz6Rd2HHH9CulI/MRz6HwAAAAqU6f/pUf/vf/vIWdee0XrjH9KVeudw6H8AAAAoUKb/Z0T9f8AnM+998/EFE9umK/WTwqH/AQAAoECZ/p8Z9f+Bx2+4R6vJ7Qceka7Uu4RD/wMAAECBMv3/RdT/B527eqczGt966Z/pSv3kcOh/AAAAKFCm/7+M+r/t29Muu+e7bsvsmq7UTwmH/gcAAIACZfr/q6j/D248/6+rtxvx4xfpSv3UcOh/AAAAKFCm/2dF/X/I07uscW6HRZ77LV2pnxYO/Q8AAAAFyvT/11H/t7uvtsta148/ukO6Uj89HPofAAAACpTp/2+i/j905Qmfvde/43LT0pX6GeHQ/wAAAFCgTP9/G/X/YWec0GLF/Qb9cmG6Uu8aDv0PAAAABcr0/3+j/m//wZDJszZpOeTMdKX+72v6HwAAAAqU6f/ZUf8f/tKgn0f+PnevSelKvVs49D8AAAAUKNP/30X93+GCo5fffcbGW3+XrtTPCof+BwAAgAJl+v/7qP+P+OSOPz7a8dv3901X6t3Dof8BAACgQJn+/yHq/yOPP65Z84579T42XamfHQ79DwAAAAXK9P+PUf8fde5JO/S67Orj/0pX6ueEQ/8DAABAgTL9/1PU/0e/ff/HNwxqtvFZ6Ur93HDofwAAAChQpv/nRP3f8dGDH9t6t2kT301X6j3Cof8BAACgQJn+/znq/2NW6n/ga2v3GPhKulI/Lxz6HwAAAAqU6f+5Uf8fu9jwM25ZOOrSk9OV+vnh0P8AAABQoEz//xL1/3GjT7vp+GZtl/ksfv8//3NO/wMAAECBMv3/a9T/xz937WeXvHrTj73SlfqF4dD/AAAAUKBM//8W9f8Ji7Tdpe9Daz13SrpSvygc+h8AAAAKlOn/36P+77RCjzWmXTTz6DfSlfrF4dD/AAAAUKBM/8+L+v/EEU/+tdHJlyy3V7pSvyQc+h8AAAAKlOn/P6L+7/xJk+V/GDP2l6/Slfql4dD/AAAAUKBM/8+P+v+k4z/8eY1pyw/5JV2p9wyH/gcAAIACZfr/z6j/u5z7w+T96u/udUi6Uv/3mQD6HwAAAAqU6f8FUf+f/HbzFqOH33r3rHSlflk49D8AAAAUKNP/f0X9f8oZ//143bPa99o7Xan3Dof+BwAAgAJl+n9h1P+nfrDFDpOXXdD84HSlfnk49D8AAAAUKNP/f0f9f9pLTZtdOan1G3PTlfoV4dD/AAAAUKBM//8T9f/pF7z3x/lThlzRM12pXxkO/Q8AAAAF+r/7v1ok6v8zWr3zzv5Lden0abpS7xMO/Q8AAAAFyvT/olH/d7284WbPdp247ZvpSv2qcOh/AAAAKFCm/xtE/X9m/5aNvx/Z8MNT05X61eHQ/wAAAFCgTP8vFvV/t01/+3HNw+c++F66Ur8mHPofAAAACpTp/8Wj/j/rxw/71a9r2aZ7ulK/Nhz6HwAAAAqU6f9a1P/dD2ty1q+zBy3bJV2pXxcO/Q8AAAAFyvR/FfX/2bs2P2Twth1/fjldqV8fDv0PAAAABcr0fz3q/3P+/OHJQ5uPf3afdKV+Qzj0PwAAABQo0/9LRP1/7k1tO/aft8iRs9OV+o3h0P8AAABQoEz/N4z6v8fW175w0u0jllqYrtRvCof+BwAAgAJl+n/JqP/PW+vJe7bav9v3x6Ur9b7h0P8AAABQoEz/N4r6//w7e1z60jGj7r4gXanfHA79DwAAAAXK9H/jqP8vaPVM/yN69+j1SbpS/0849D8AAAAUKNP/S0X9f+Hl3c99ZOa05m+lK/V+4dD/AAAAUKBM/y8d9f9F/fdv/89Ozd7olq7UbwmH/gcAAIACZfp/maj/L970xmcar3X1FV+mK/Vbw6H/AQAAoECZ/l826v9L2vYcP+qvvTrtlq7UbwuH/gcAAIACZfq/SdT/l/727Lp7D/x228PTlXr/cOh/AAAAKFCm/5eL+r/nzMsbLL/rxh/+mq7Ubw+H/gcAAIACZfp/+aj/ex3dZsaMIe8+eFC6Uh8QDv0PAAAABcr0/wpR/1828omjN7x4+Tbfpyv1O8Kh/wEAAKBAmf5vGvV/70bnjp666thlF6Qr9f8fe3cet+WcNn78qqHzuseUZTAGMy32ZRLNk50yxhgZZpNlKERhlDUhW5Q120z2GhmyTWPfFZFGaFBZsyZLIstYksLvhaOcOes5ecScr+/v/f7nOO676z66r3m9nief7rvrPj8W/Q8AAAAVVNL/S+f6/9jm25x7zL1HvL1j8Up2QSz6HwAAACqopP9/lOv/44aeePhBEyfd8mjxSjYoFv0PAAAAFVTS/8vk+r/fuNXPuqlJix17F69kg2PR/wAAAFBBJf3/41z/9//z671/2e20prsWr2R/i0X/AwAAQAWV9P+yuf4//ujHOi1+27av3128kl0Yi/4HAACACirp/+Vy/X/C6MVueKHjeq+2Ll7JhsSi/wEAAKCCSvp/+Vz/n9h9fJdDz5lRH1C8kl0Ui/4HAACACirp/5/k+v+kZ5Ycccr07Xe+oHgl+3ss+h8AAAAqqKT/f5rr/5Pvaz3ouTXOHrF+8Up2cSz6HwAAACqopP+b5/r/lIOmHLVmu0XevbF4JbskFv0PAAAAFVTS/y1y/T9gk1s26Dn1/qV+VLySDY1F/wMAAEAFlfR/y1z/n9rvqCcGn7xHh3lcyS6NRf8DAABABZX0f6tc/592xuYz7us0dMjfi1eyy2LR/wAAAFBBJf2/Qq7/T1/92OU2uLbz+GWKV7LLY9H/AAAAUEEl/b9irv/PmDKke6seF7a9rXgluyIW/Q8AAAAVVNL/K+X6/8zfd+s/runa3f9ZvJJdGYv+BwAAgAr63/q/oVar5fr/L1vsfEn/cW8dv2jxSvaPWPQ/AAAAVFDJ1/9XyfX/X2edv8UhY3s8dFzxSjYsFv0PAAAAFVTS/6vm+n/gietdcf1iw1q3LF7JZv+bAP0PAAAAFVTS/6vl+v+sdT7u2H7/xoe3K17JropF/wMAAEAFlfT/6rn+P3vle/ZZctioCwYWr2RXx6L/AQAAoIJK+n+NXP+fM6jxia/ctsyr1xevZNfEov8BAACggkr6f81c/5+7yciuR3Z7sr548Up2bSz6HwAAACqopP9/luv/8/o16Xtak947Nyleya6LRf8DAABABZX0f+tc/59/xkZDJk68acQlxSvZ7H8ToP8BAACggkr6f61c/1+w+oebrXbvGu+uWryS3RCL/gcAAIAKKun/Nrn+H/Trhp+fudzUpU4uXslujEX/AwAAQAWV9P/auf4f/M5Dj+3eZ/MOg4tXspti0f8AAABQQSX9v06u///2ynvT213Wf8imxSvZzbHofwAAAKigkv5vm+v/C3dpu9To9keN71+8kt0Si/4HAACACirp/5/n+n9I54e3eHLQnW1XKV7Jbo1F/wMAAEAFlfT//+T6/6IXl75k9VmLd29TvJLdFov+BwAAgAoq6f92uf7/+1tr9j+qxcPH/6V4Jbs9Fv0PAAAAFVTS/+vm+v/iraZ2P3Xj3zz00+KVbHgs+h8AAAAqqKT/18v1/yWbbHnilpMGtB5evJKNiEX/AwAAQAWV9P/6uf4f2u+0fW7v2+rwfxSvZHfEov8BAACggkr6f4Nc/196xg0d39xl8gUNxSvZnbHofwAAAKigkv7fMNf/l61+4BXLd2uRHVu8ko2MRf8DAABABZX0/0a5/r/8xGs2O/62SS+3KF7J7opF/wMAAEAFlfT/xrn+v2KdQ4b0mrjtdesWr2R3x6L/AQAAoIJK+n+TXP9fufLWfVs2Oe0PZxWvZKNi0f8AAABQQSX9v2mu//8x6OSu45f74bI/Ll7J7olF/wMAAEAFlfR/+1z/DxswaLM97h0/8/bilWx0LPofAAAAKqik/zvk+v+f7XYacs5lR1w9rHgl+1cs+h8AAAAqqKT/N8v1/1Wtdu07qs+IbZoVr2T3xqL/AQAAoIJK+v8Xuf6/+txLu7YZtMVGNxSvZGNi0f8AAABQQSX9v3mu/6/ZqV/zVduf8MzSxSvZfbHofwAAAKigkv7/Za7/r31+s4+earHaSY2KV7L7Y9H/AAAAUEEl/b9Frv+ve/fQp0+fNWWvi4tXsgdi0f8AAABQQSX9/6tc/1+/zR2bHDGpV8u1ileysbHofwAAAKigkv7fMtf/N2yw/LhbN75h5KnFK9m/Y9H/AAAAUEEl/f/rXP/feMzEtlvtsuzA84tXsgdj0f8AAABQQSX9v1Wu/28a+PwSP+37VK/1ileyh2LR/wAAAFBBJf3fMdf/N7de+a1p59Sy5sUr2cOx6H8AAACooJL+3zrX/7cMeHG53h3venlE8Uo2Lhb9DwAAABVU0v+/yfX/re1azei3xn7XXVm8ko2PRf8DAABABZX0/za5/r+t1TJPPDz9qj/Ui1eyCbHofwAAAKigkv7fNtf/t5/77AYrTG27bL/ileyRWPQ/AAAAVFBJ//821//DZ/5s6wva/WfmysUr2aOx6H8AAACooJL+/12u/0d0eO2qvTrtfPXaxSvZY7HofwAAAKigkv7/fa7/79hu3OkbnTx4m78Wr2SPx6L/AQAAoIJK+v8Puf6/880f9XioR7eNViteyZ6IRf8DAABABZX0/x9z/T/yhqzb+dde9swpxSvZk7HofwAAAKigkv7fLtf/dzW7q9/e4xpOGlS8kk2MRf8DAABABZX0f6dc/9+97MyhGzcds9cmxSvZU7HofwAAAKigkv7fPtf/o4Zs/KsHF9uu5XXFK9nTseh/AAAAqKCS/t8h1//3PHLh5YuMHThyseKV7JlY9D8AAABUUEn/75jr/9E9d9zqg2EbDMyKV7JnY9H/AAAAUEEl/b9Trv//dXjXPw/bf2avocUr2XOx6H8AAACooJL+/1Ou/+8dOfSkLn0H7P/r4pXs+Vj0PwAAAFRQSf/vnOv/Mbt33330Lr8587XilWxSLPofAAAAKqik/3fJ9f99T1x0TLuNJ4+eVbySvRCL/gcAAIAKKun/zrn+v3/sBRftPqnVip2LV7LJseh/AAAAqKCS/u+S6/8HDtnlF2fOurPH+OKV7MVY9D8AAABUUEn/75rr/7EbNs0mtDhqwP7FK9lLseh/AAAAqKCS/t8t1///7vvASy3aP/xE9+KV7OVY9D8AAABUUEn/757r/wfPevuegwctvv7o4pXslVj0PwAAAFRQSf93zfX/Q2utu/IJfaZ2PLp4JZsSi/4HAACACirp/z1y/f/wtKV2uvCyNa58pnglezUW/Q8AAAAVVNL/e+b6f9z2E27Z997+H99fvJJNjUX/AwAAQAWV9H+3XP+P/8Wr56233ObN9ypeyV6LRf8DAABABZX0f/dc/0+YsVafB5o82enF4pXs9Vj0PwAAAFRQSf/vlev/R049dWCzicvcvEXxSjYtFv0PAAAAFVTS/3vn+v/RdTse8tFtN03+XfFK9kYs+h8AAAAqqKT/98n1/2MrHLD9Fd16N36neCV7Mxb9DwAAABVU0v9/zvX/4+fdfONO+w/b/5HileytWPQ/AAAAVFBJ/++b6/8nNuzVeeSwHmceUrySvR2L/gcAAIAKKun/Hrn+f7Lv9cPbjh01erfilew/seh/AAAAqKCS/u+Z6/+JZ500uPtijVccVbySzX5NAP0PAAAAFVTS//vl+v+ptbY9emDTC3tsW7ySvRuL/gcAAIAKKun//XP9//TWwxvWHNd5wLTiley9WPQ/AAAAVFBJ/x+Q6/9n3j/8teeufeuJD4tXsvdj0f8AAABQQSX9f2Cu/599of39p/RYe/0diley6bHofwAAAKigkv4/KNf/z+1w/KqHnnx/xxeKV7IPYtH/AAAAUEEl/X9wrv+f/9OeffbotMiV7YtXshmx6H8AAACooJL+75Xr/0mTLj7vnHZDP96+eCWb/ZoA+h8AAAAqqKT/D8n1/wvvnXfLqKl7NH+veCWbGYv+BwAAgAoq6f/euf6fvG2XndpMn9HpsOKVbFYs+h8AAAAqqKT/D831/4sbfnTje2usd/NTxSvZR7HofwAAAKigkv4/LNf/L/XdcPsmHc+ePLZ4Jfs4Fv0PAAAAFVTS/4fn+v/lsxod8vtztm/cs3gl+yQW/Q8AAAAVVNL/fXL9/8pa9w686KVGfXYsXpnz4fofAAAAKqik/4/I9f+UUxc+esP1R54/s3ilHo/R/wAAAFBFJf1/ZK7/X1131OAxO/Z88PXilXrjWPQ/AAAAVFBJ/x+V6/+pK8wYPqj/1WttU7xS/14s+h8AAAAqqKT/j871/2vnbdp5v3PX6XZ38Up9oVj0PwAAAFRQSf8fk+v/19sOvWHtzd85Ydf4xelfPK6+cCz6HwAAACqopP/75vp/2kldO9294i4Tehev1JvEov8BAACggkr6/9hc/78xeMfeZ38waJ1Hi1fqWSz6HwAAACqopP+Py/X/m6tceNaezbu33694pT774/U/AAAAVFBJ//fL9f9bL4149chRl1707+KVekMs+h8AAAAqqKT/++f6/+0ufRY57eL6exOLV+rfj0X/AwAAQAWV9P/xuf7/T8cOq088+r4lDy1eqS8Si/4HAACACirp/xNy/f/O2yeMWW33P+7ybvFK/Qex6H8AAACooJL+PzHX/+/2X2mV1+84a3in4pV601j0PwAAAFRQSf+flOv/9zadPLr5sxtO6VC8Um8Wi/4HAACACirp/5Nz/f/+Gk++2LHxhw2Ti1fqi8ai/wEAAKCCSvr/lFz/Tz+zeZNblmzZ557ilfpiseh/AAAAqKCS/h+Q6/8P2j4zrdWY58/vVrxSXzwW/Q8AAAAVVNL/p+b6f8ZJyy067vJtHjygeKW+RCz6HwAAACqopP9Py/X/h4Nbtu5/8OlrTSheqc/ufv0PAAAAFVTS/6fn+n/mKq+MPWTvJbp1KV6pLxmL/gcAAIAKKun/M3L9P2vzJW978MYJJ3xUvFJfKhb9DwAAABVU0v9n5vr/o4/H77Dxo0dOmFq8Ul86Fv0PAAAAFVTS/3/J9f/HU6cctnfD8HW2LF6p/ygW/Q8AAAAVVNL/f831/ye/bX3B+W/8qv1/ilfqy8Si/wEAAKCCov8Xyr3njNwvN/581H9cq3WYlnt/PH7R2d3/2d8RdD3i7XfnNb/w6Z38/Oy3aFSrLXTNlz6t+jd7VvM15/k0e+SFzWptao3yz/xTrefz+LPrSy9fa1NrXHj83B/wvXj8sp1n/eS4Wptaky8/fp+9e+6x56Fz3oxfrS+3Zc831qm1qdW//Pj99zywS8/99tgz3oz/XRpabr7X4q/W2tQW+vL/Unv37NUj92ZDjFbLvrniaZ99Pl96/EEH73Zwt4PmvPn9ePwK1x42uNe8Hn/g3J//IvH4FfddftFpTcfUFv7y4w/otd/Bu9UAAAD4byvp/zk9W6t1GJl7f3Tx1+7/Zeeetfn1//e+2bOarznP51vq//heidoPZ/X+5WvNbqnVv9zD++zX68Ceu+3bZgE8FwAAAPjKSvp/ztenF1D/Lzf3rM2v/xf+Zs9qvuY8n2+p/+Pzri8/6aMTHq6tV1tkXl+f73Lgbj277znXXwE0iY/7ySLDXzqstl6t2by/Tt+l615zf2gWH/fTI9//3YXNtqw1nefX3wsfBgAAwP9vSvp/Ts/Wan2PyX9YzMXyb3+F/l9+7lmL/gcAAAC+TSX9P+fr0vPp/6/79f+fzD1r+h8AAAC+AyX9P+f7y+fZ/4vNefMr9n9Diy/uzdZ47pvfqnrLmK1irhBzxZgrxVw55ioxV425WszZryOwRsw1Y/4sZvyrgPpaMeNb7+trx1wnZtuYP4/5PzHbxVw35nox14+5QcwNY24Uc+OYm8TcNGb7mB1ibhbzFzE3j/nLmFvE/FXM+JmP9V/H3Cpmx5hbx/xNzG1ibhvztzF/F/P3Mf8Q848xt4vZKeb2MXeIuWPMnWL+KebOMXeJ2Tlml5i7xoyXIqzvHrNrzD1ixuss1rvF7B5zr5h7x9wn5p9j7hszXnux3jPmfjH3j3lAzANjxisv1g+O2SvmITF7x4xXXKwfFvPwmH1iHhHzyJhHxTw6Zvzfbr1vzGNjHhezX8z+MY+PeULME2OeFPPkmKfEHBDz1JinxTw9Zvz/lPqZMf8S868xB8Y8K+bZMc+JeW7M82KeH/OCmINiDo75t5gXxhwS86KYf495ccxLYg6NeWnMy2JeHvOKmFfG/EfMYTH/GfOqmFfHjH/fVL825nUxr495Q8wbY94U8+aYt8S8NeZtMW+POTzmiJh3xLwzZvzbrfpdMe+OOSrmPTFHx/xXzHtjjol5X8z7Yz4Qc2zMf8d8MOZDMR+OOS7m+JgTYj4S89GYj8V8POYTMZ+MOTHmUzGfjvlMzGdjPhfz+ZiTYr4Qc3LMF2O+FPPlmK/EnBLz1ZhTY74W8/WY8Rq59TdivhnzrZhvx4yfoVN/J2b8OVl/L+b7MafH/CDmjJgfxpwZc1bMj2J+HPOTz2e8DGytIf6MbYg/dBviz7GG+PO/Ib7fryH+3r8h/vxvmP26s7NfT3b268TOfv3XH8RsGrNZzEVjxn8pNCwec4mY8fOCGpaMuVTMpWPGzxVuiK8zNMTrBjfE6wc1xL8jbIjvJ2yIrys0xH9fNDSPmfuZRgAAAAAAkL74+n/j3LvGfLE2eXzer8VXb1mrZU/Xao2mjxh83Rbf5Pff7hv65Nv6SQEAAACQkOj/Zl+8Z+FD/5ufDwAAALDg6X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEif/gcAAID06X8AAABIn/4HAACA9Ol/AAAASJ/+BwAAgPTpfwAAAEjfPPt/of/mZwQAAAAsaL7+DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp+5r9/8n3votPCgAAAFigfP0fAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSF/2/UO49Z+R+uf75aGhZq/U9Jv9hc//65293PeLtd+c1v/Dpnfz8VONGC+zJlGv6Hf5eAAAAUBkl/d8Qo9V8+n+Z/Ntfof9bzT1r33H/Lzrl89nk8XjHD7673xsAAAD+e0r6//ufj4YV5tP/I/Nvf4X+X2HuWYv+X2jrBfaE/ndL5D73T/2wVqv/oFZr/L0Fc77eYu779Za1WvZ0rdZo+oK5DwAAAP83Jf2/yOejYcX59P81+be/Qv+vOPesRf8v/PQCe0JfT6MdF6r/sfPRtdqu2zf/bE55KftsznHshrde2ejGOX8/Mftxzy/VfO7HfTd3AQAA4P+kpP/j++MbVqrVOkzLvb/x52PRr/v9/yvNPWd/7ELXfOnTavyNntT8zXk+zR55YbNam1qj/DP/VOv5PP7s+tLLN5tSa1x4fOtv6TMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4fO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADmCgAA//+879/f") ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, "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"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 1m16.191501845s ago: executing program 4 (id=28): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x84, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m15.960141109s ago: executing program 32 (id=28): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x84, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.557410237s ago: executing program 3 (id=834): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e71, 0x2019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x240, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.935214388s ago: executing program 1 (id=851): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x10) 1.80771453s ago: executing program 1 (id=853): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000b, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x32a000, 0x800}, 0x20) 1.683610512s ago: executing program 5 (id=842): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a004e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d400", @ANYRES16=r0], 0x21c}}, 0x4004084) 1.682839342s ago: executing program 1 (id=843): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 1.587064444s ago: executing program 2 (id=845): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000100)={&(0x7f0000002c40)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 1.562519124s ago: executing program 1 (id=846): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000140)={0x7b61, 0x1000, 0x2}) 1.523233344s ago: executing program 5 (id=847): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000010c0)={0x0, 0x10, &(0x7f0000001040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000001100)=0x10) getsockopt$bt_hci(r0, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 1.395386016s ago: executing program 5 (id=848): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 1.390199696s ago: executing program 1 (id=850): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c8, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$eJzs3c9vE9kdAPA3k1ASSiChVKJSpVoqUqu2ihJObYPUEAIhgZSKFlT1YpzEQFonRolT9cAhvSH1VKmHqgdEJW45IQ690j+hlx7Z0x6Qdg97WWklpKxsjxPPxN6YyE427OdzyHjeb/s78/yMNLw4UXm0vJ5bXs8VVnPlxQfrl3J/Lpc2VoohPiQt+z9xeP3TmV5cJ0d97X2T3b56/bf3LoXw36X/v93e3t4OVf2hpfGm159/9mSx+dgQZ+pU223dWrf8IYRwfs+4qvpCCL//TwhRCOFKkjaVHAdDCEOhnnfvyd/u57o0mpdvipfz7+afvpq4OLf17FX79x6F8K/S9372cOWTH/ZNfPSTLnUPAAAAAAAAAAAAAAAAAMAxN3Pn9t3fjI2H11Ho34r2Pq87kxzbPR+73TU/6P2bBQAAAAAAAAAAAAAAAAAAgK+p3ef/c9G5Fs//TyfHyTb1t3/V+zHSO7O/vj19bWw82f892pP/8yTp0yt9YaTFvu/Z/d+vZOq33v99bz8H1Rhfo9/hEMWjzefV/NEQ/p1s/H4hOhWXyuuVnz4ob6wudW0Yx1Y6/vXd+1PRSTb07zT+U5n2e7///3f2XE3V8/vdu8Q+aOn497Ut9+KvUUfxv5qpdxjxP7CBbo7jeErHv7+WNthcYLI+AVTj//f+/eM/nWm/V/E/E0LIRdWx5lIzQHUNU01vt14hLR3/E7W01NSZfJDt7v8vMvG/lmn/qOb/zewXES2l4/+tWlp6Wty9/0fi/e//65n2jyL+1fFv+v7vSDr+J+uJ/akitU/yxdnO5v+ZTPu9iv/dOBnnmSh1BWxF9fR2/18daen4710Q7f7+izta/93I1D+s33+Nfhu//xrT/4+jOB4d7Vp3H5x0/Afblut0/Tebqdfr+X+ytv7joNLxP1VLS6+dh2t/O43/XKb9bPw//nZ3xl1blQw04r87nwydrKc/t/7rSDr+SXDi5hKbtb+19V+0//r/Zqb9o1j/Vce/Gfe21w9FOv6ns9nfnUheVOP/vw6+/29lGvjq+Lf/96b3MWatf2Dp+A+1LVe7/wf2j/98pl6v7/8f9bJxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGNgKjkOhygeTZ3H8ehoCFeT8wvhVLRQWMovlMqLf1oPYTpJz4Vz0cNSeaFQyi+vlpeK+UKpVF4M4VqSfz4MROulciW/Unh8faetwehRsbBWWSgWKiGEmST9+2Go0dbCcmWl8DiEcGMn72xcXnv8qLCaX1pe++XY2NhYmN0Zw0hU/EuluFqp917PDWFup+5w1DS4WvbNnbGcjv5Y3lhbLZRq6bea6pTKi4VSU535JO8fYSSqrG2sLhYqxXyp/LDR31GaTI7Ts3d+d+fW+J78+1H9OHW4wwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgPb2e+MU/Qwj99bM4hDDZeBG1Kv/yTfFy/t3801cTF+e2nj1/264cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCX7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWGXjlEiBqIwAL8ZC2PnMaxC0tlGFNHCiOAJ9BgeRo/iJbyDhYWthQg6A5KdwDa71fc1D/IT3oP5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYzuXdfH87jBEpuu/DiNfHt/f/+XWZz2ft/w/2cCO7c3Uzn18MY3n3tJGflk8fU/5Nvz6fHqIxq5dFT5Z9+lP3HK3e1epb1yhbva/uPY6U+4iYSn6Scu771TUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQeOBQAAAACE+Vtn0bUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKwAA///XDB6/") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000000)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000380)='./bus\x00', r0, &(0x7f0000000400)='./file0\x00', 0x0) 1.262533359s ago: executing program 5 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008819}, 0x0) 1.19122771s ago: executing program 2 (id=855): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000b, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x32a000, 0x800}, 0x20) 1.051870132s ago: executing program 5 (id=856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x0) 1.031414323s ago: executing program 2 (id=857): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$eJzs3U9oHNcdB/DvrFay5IKjJHZiSqAihrRU1NYflFa92C2l6BBKSA+9VthyLLxWgqQUJYdW/X/tIddCetCtp0Lvhvbc3HLVMVDoJSdBDyozO7ta2autLNvSKvl8zNv33r437735zcyudhczAb6ylqbTfJgiS9NvbZX1n+/Mt3Z35i/Uza0kZbmRNNtZirWk+efkVtopoz3DFUfN8/Hq4juffbH7ebvWrFPVv3F4iJPYrlOmkozUebJ/4XC3AdPs7x853u3ueCdVdCNTBuxamW8/1YDwbOw/pnNm/vc4mx95vQPnR9F+33zMZHIxyXj9d0DqV4fG6a7u2fP+CwAAwFfBC3vZy1YunfU6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dyp7/9f1KnRKU+l6Nz/f6x+LnX5nCkO1R6e2ToAAAAAAAAA4Nn5xl72spVLnfp+Uf3m/3pVuVw9fi0fZCMrWc/1bGU5m9nMemaTTPYMNLa1vLm5PnuMLef6bjl3OvsLAAAAAAAAAOfHzSfp/JssHfz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw6BIRtpZlS53ypNpNJOMJxkr+20nn3bK59nDs14AAAAAnIIX9rKXrVzq1PeL6jP/K9Xn/vF8kLVsZjWbaWUld6rvAtqf+hu7O/Ot3Z35B2V6fNwf/OeJllGNmPZ3D/1nvlr1mMjdrFbPXM/tvJdW7qRRbVm62llP/3X9ulxTcbOtOObK7tR52f9PdT4cJquIjHYjMlOvrYzGi4Mj8YRH59GZZtPofvNz+dGZRg5teijmN48538U6L/fnD0Md87n67Pu0vGYGxzz55t//+rN7rbX79+5uTA/PLp1QHYntZh2J+Z7r8NVzGonRE201U0XiSre+lB/np5nOVN7e/1WSX2Q5m1nJVH5UlZZTdM/oycGRunWo9vb/W8lYfVzal+ARa8p6Vvus6fVq20tZzU/yXu5kJW9W/+Yym+9mIQtZ7DnCV47xStt4sqv+2rfqwkSSP9b5MBit4vpiT1x7X3Mnq7beZw6i9NLRUSpO+NrY/HpdKOf4bZ0Ph0cjMdsTiZcHny9/2S8fN1pr99fvLb9/zPneqPMylL8fqneJ8nx5qTxYVe3w2VG2vdy3bbZqu9xtazzWdqXb1vdKXe/Mv1j1fqXvSHNV26t92+artqs9bf3+3gJg6F389sWxiX9P/Gvik4nfTdybeGv8hxe+d+G1sYz+c/T7zZmRNxqvFX/LJ/nlwed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5DY+/Oj+cqu1sj6g0LnBzqA+T1so6hv5PMcpFIaskPGhWMbzLDQzFMs40dEBvuRubD54/8bGhx99Z/XB8rsr766sjS4sLM4sLrw5f+Puamtlpv141qsEnoeDN/2zXgkAAAAAAAAAAABwXKfx3wnOeh8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA821pOs2HKTI7c32mrO/uzLfK1Ckf9GwmaSTjZbn4R3Ir7ZTJnuGKo+b5eHXxnc++2P38YKxmp39j0HZ9jT76xHadMpVkpM6fwqHxbj/1eEV3D8uAXesEDs7a/wIAAP//XHoJeA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) 1.024194673s ago: executing program 0 (id=859): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x2, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3f9aca03}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) 944.398084ms ago: executing program 5 (id=860): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4441, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000280)={0x7, 0x1b, 0x1}, 0x7) fallocate(r0, 0x0, 0xa00, 0x1000005) 862.873336ms ago: executing program 0 (id=861): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r1, 0x1e}, &(0x7f0000000200)=0x1c) 810.522616ms ago: executing program 2 (id=863): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000010c0)={0x0, 0x10, &(0x7f0000001040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000001100)=0x10) getsockopt$bt_hci(r0, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 776.802547ms ago: executing program 0 (id=864): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x4004084) 690.154598ms ago: executing program 3 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000005400010027bd70000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="03000000009707633dd2b133f5c4e2ef3766c932004115"], 0x38}}, 0x0) 606.529639ms ago: executing program 2 (id=866): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 605.78115ms ago: executing program 0 (id=876): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x200, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20) 488.071542ms ago: executing program 3 (id=867): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000100)={&(0x7f0000002c40)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 487.088122ms ago: executing program 2 (id=878): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e71, 0x2019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x240, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 413.742133ms ago: executing program 0 (id=868): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r1}) 381.558673ms ago: executing program 3 (id=869): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000380)=0xe) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0) 155.357607ms ago: executing program 3 (id=870): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x7) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 154.414477ms ago: executing program 0 (id=882): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0xfb, 0x6a8, &(0x7f0000001dc0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x0) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 80.861768ms ago: executing program 1 (id=871): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8) 0s ago: executing program 3 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd53, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0x3, 0x0}, 0x10) kernel console output (not intermixed with test programs): mac addresses unique to avoid problems! [ 63.838999][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.839227][ T4207] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.857649][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.870052][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.880934][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.884139][ T4171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.899383][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.905971][ T4171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.916882][ T4171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.925958][ T4171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.938907][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.951077][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.963868][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.975298][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.985298][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.995897][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.006121][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.016894][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.033707][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.045817][ T4178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.057054][ T4178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.066401][ T4178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.076558][ T4178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.087575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.092836][ T4207] usb 5-1: Using ep0 maxpacket: 8 [ 64.101793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.111159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.119450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.128704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.171905][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.185685][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.231177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.271735][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.304940][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.334736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.372919][ T4207] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 64.382175][ T4207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.389393][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.405689][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.422627][ T4207] usb 5-1: Product: syz [ 64.435002][ T4207] usb 5-1: Manufacturer: syz [ 64.442591][ T4207] usb 5-1: SerialNumber: syz [ 64.445178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.464130][ T4207] usb 5-1: config 0 descriptor?? [ 64.484078][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.492156][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.527622][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.535060][ T4207] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 64.564053][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.579033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.601778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.638490][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.653770][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.683842][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.712545][ T4207] gspca_sn9c2028: read1 error -32 [ 64.752667][ T4207] gspca_sn9c2028: read1 error -32 [ 64.768917][ T4252] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.915773][ T4254] loop3: detected capacity change from 0 to 4096 [ 64.988560][ T4261] loop2: detected capacity change from 0 to 256 [ 65.030129][ T4254] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 65.052199][ T4166] usb 5-1: USB disconnect, device number 2 [ 65.103131][ T4261] ======================================================= [ 65.103131][ T4261] WARNING: The mand mount option has been deprecated and [ 65.103131][ T4261] and is ignored by this kernel. Remove the mand [ 65.103131][ T4261] option from the mount to silence this warning. [ 65.103131][ T4261] ======================================================= [ 65.223273][ T4209] Bluetooth: hci0: command 0x0419 tx timeout [ 65.240374][ T4261] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 65.303654][ T4209] Bluetooth: hci3: command 0x0419 tx timeout [ 65.315434][ T4209] Bluetooth: hci1: command 0x0419 tx timeout [ 65.387593][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 65.406057][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 65.570845][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 65.760465][ T264] block nbd1: Attempted send on invalid socket [ 65.767537][ T264] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.812965][ T4208] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.000896][ T4276] loop2: detected capacity change from 0 to 32768 [ 66.064776][ T4276] XFS: ikeep mount option is deprecated. [ 66.081868][ T4292] loop4: detected capacity change from 0 to 128 [ 66.125223][ T4267] loop0: detected capacity change from 0 to 40427 [ 66.162496][ T4267] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 66.171451][ T4292] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 66.185379][ T4267] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 66.199775][ T4292] FAT-fs (loop4): Filesystem has been set read-only [ 66.206818][ T4208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.214021][ T4276] XFS (loop2): Mounting V5 Filesystem [ 66.242401][ T4208] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 66.267603][ T4267] F2FS-fs (loop0): Found nat_bits in checkpoint [ 66.338853][ T4175] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 66.351396][ T4307] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 66.372972][ T4208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.377902][ T4267] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 66.390839][ T4267] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 66.408266][ T4208] usb 4-1: config 0 descriptor?? [ 66.418749][ T4175] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 66.451452][ T4276] XFS (loop2): Ending clean mount [ 66.477094][ T4276] XFS (loop2): Quotacheck needed: Please wait. [ 66.543080][ T4312] loop1: detected capacity change from 0 to 1024 [ 66.569248][ T4276] XFS (loop2): Quotacheck: Done. [ 66.614806][ T4276] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x42b dinode [ 66.619416][ T4312] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 66.619416][ T4312] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 66.619416][ T4312] [ 66.653201][ T4276] XFS (loop2): Unmount and run xfs_repair [ 66.658966][ T4276] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 66.696258][ T4312] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.708548][ T4276] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 66.717814][ T4276] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.736495][ T4276] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.748466][ T4276] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.758985][ T4276] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.770679][ T4276] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.789579][ T4312] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,noinit_itable,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,noacl,user_xattr,quota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 66.825688][ T4276] 00000060: ff ff ff ff 65 3f 0d b5 00 00 00 00 00 00 00 00 ....e?.......... [ 66.835947][ T4276] 00000070: 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 ................ [ 66.847796][ T4276] XFS (loop2): Internal error xfs_trans_cancel at line 954 of file fs/xfs/xfs_trans.c. Caller xfs_create_tmpfile+0x697/0xb60 [ 66.861573][ T4276] CPU: 1 PID: 4276 Comm: syz.2.13 Not tainted 5.15.179-syzkaller #0 [ 66.869578][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 66.879657][ T4276] Call Trace: [ 66.882955][ T4276] [ 66.885920][ T4276] dump_stack_lvl+0x1e3/0x2d0 [ 66.890618][ T4276] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 66.896262][ T4276] ? xfs_init_new_inode+0x1e8/0x1100 [ 66.901577][ T4276] ? xfs_trans_alloc_icreate+0x18f/0x2b0 [ 66.907235][ T4276] ? xfs_error_report+0x8e/0xd0 [ 66.912103][ T4276] ? xfs_create_tmpfile+0x697/0xb60 [ 66.917318][ T4276] ? xfs_create_tmpfile+0x697/0xb60 [ 66.922546][ T4276] xfs_trans_cancel+0x1c9/0x410 [ 66.927422][ T4276] ? xfs_create_tmpfile+0x697/0xb60 [ 66.932644][ T4276] xfs_create_tmpfile+0x697/0xb60 [ 66.937704][ T4276] ? xfs_irele+0x1f0/0x1f0 [ 66.942154][ T4276] ? posix_acl_create+0x155/0x420 [ 66.947210][ T4276] xfs_generic_create+0x341/0xd00 [ 66.952264][ T4276] ? xfs_vn_tmpfile+0x40/0x40 [ 66.956974][ T4276] ? _raw_spin_unlock+0x24/0x40 [ 66.961843][ T4276] ? d_alloc+0x194/0x1d0 [ 66.966098][ T4276] ? mode_strip_sgid+0x9e/0x210 [ 66.970973][ T4276] vfs_tmpfile+0x201/0x2e0 [ 66.972921][ T4208] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 66.975422][ T4276] do_tmpfile+0x198/0x470 [ 66.988261][ T4276] ? fsuidgid_has_mapping+0x300/0x300 [ 66.993662][ T4276] path_openat+0x291d/0x2f20 [ 66.998291][ T4276] ? stack_trace_snprint+0xe0/0xe0 [ 67.003430][ T4276] ? validate_chain+0x112/0x5930 [ 67.008405][ T4276] ? mark_lock+0x98/0x340 [ 67.012763][ T4276] ? __lock_acquire+0x1295/0x1ff0 [ 67.017812][ T4276] ? mark_lock+0x98/0x340 [ 67.022165][ T4276] ? __lock_acquire+0x1295/0x1ff0 [ 67.027207][ T4276] ? do_filp_open+0x460/0x460 [ 67.029494][ T4208] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input5 [ 67.031920][ T4276] do_filp_open+0x21c/0x460 [ 67.047669][ T4276] ? vfs_tmpfile+0x2e0/0x2e0 [ 67.052282][ T4276] ? _raw_spin_unlock+0x24/0x40 [ 67.057135][ T4276] ? alloc_fd+0x598/0x630 [ 67.061470][ T4276] do_sys_openat2+0x13b/0x4f0 [ 67.066151][ T4276] ? do_sys_open+0x220/0x220 [ 67.070752][ T4276] __x64_sys_openat+0x243/0x290 [ 67.075605][ T4276] ? __ia32_sys_open+0x270/0x270 [ 67.080549][ T4276] ? syscall_enter_from_user_mode+0x2e/0x240 [ 67.086531][ T4276] ? lockdep_hardirqs_on+0x94/0x130 [ 67.091733][ T4276] ? syscall_enter_from_user_mode+0x2e/0x240 [ 67.097713][ T4276] do_syscall_64+0x3b/0xb0 [ 67.102132][ T4276] ? clear_bhb_loop+0x15/0x70 [ 67.106807][ T4276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.112700][ T4276] RIP: 0033:0x7fd112fff169 [ 67.117121][ T4276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.136832][ T4276] RSP: 002b:00007fd110e68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 67.145248][ T4276] RAX: ffffffffffffffda RBX: 00007fd113217fa0 RCX: 00007fd112fff169 [ 67.153221][ T4276] RDX: 92462658b1574913 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 67.161189][ T4276] RBP: 00007fd1130802a0 R08: 0000000000000000 R09: 0000000000000000 [ 67.169158][ T4276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.177123][ T4276] R13: 0000000000000000 R14: 00007fd113217fa0 R15: 00007ffeab0d4988 [ 67.185102][ T4276] [ 67.260218][ T4276] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x1e2/0x410 (fs/xfs/xfs_trans.c:955). Shutting down filesystem. [ 67.276661][ T4276] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 67.287466][ T4175] syz-executor (4175) used greatest stack depth: 19712 bytes left [ 67.366957][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.446083][ T4178] XFS (loop2): Unmounting Filesystem [ 67.466666][ T4208] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 67.504606][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.708604][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.836868][ T4323] loop1: detected capacity change from 0 to 128 [ 67.852712][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.888089][ T4325] loop0: detected capacity change from 0 to 256 [ 67.916126][ T4323] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 67.944329][ T4325] exfat: Bad value for 'uid' [ 67.997407][ T4166] usb 4-1: USB disconnect, device number 2 [ 68.012745][ T4323] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.882889][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 69.102018][ T4342] loop2: detected capacity change from 0 to 40427 [ 69.204708][ T4342] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 69.263633][ T4342] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 69.299141][ T4340] loop0: detected capacity change from 0 to 32768 [ 69.324069][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.332501][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.363577][ T4342] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.372991][ T4326] device bridge_slave_0 entered promiscuous mode [ 69.424122][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.467372][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.468714][ T4340] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 69.530155][ T4326] device bridge_slave_1 entered promiscuous mode [ 69.598285][ T26] audit: type=1800 audit(1743887032.744:2): pid=4340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.36" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 69.657147][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.663017][ T4342] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 69.676110][ T4340] (syz.0.36,4340,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -14 [ 69.679390][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.697873][ T4342] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 69.865178][ T4165] ocfs2: Unmounting device (7,0) on (node local) [ 69.877710][ T4326] team0: Port device team_slave_0 added [ 69.929305][ T4326] team0: Port device team_slave_1 added [ 70.023915][ T4243] Bluetooth: hci3: command 0x0409 tx timeout [ 70.122995][ T4348] loop3: detected capacity change from 0 to 32768 [ 70.132699][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.139664][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.259477][ T4348] XFS (loop3): Mounting V5 Filesystem [ 70.262382][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.281883][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.289167][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.315659][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.404134][ T4326] device hsr_slave_0 entered promiscuous mode [ 70.411141][ T4326] device hsr_slave_1 entered promiscuous mode [ 70.418635][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.446692][ T4326] Cannot create hsr debugfs directory [ 70.553241][ T4348] XFS (loop3): Ending clean mount [ 70.564459][ T4392] loop0: detected capacity change from 0 to 64 [ 70.571577][ T4357] loop1: detected capacity change from 0 to 40427 [ 70.698174][ T4357] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 70.720486][ T4357] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 70.757478][ T154] device hsr_slave_0 left promiscuous mode [ 70.787865][ T154] device hsr_slave_1 left promiscuous mode [ 70.802233][ T4171] XFS (loop3): Unmounting Filesystem [ 70.809576][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.841145][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.857918][ T4357] F2FS-fs (loop1): Found nat_bits in checkpoint [ 70.914678][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.922128][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.969912][ T154] device bridge_slave_1 left promiscuous mode [ 70.983840][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.058798][ T154] device bridge_slave_0 left promiscuous mode [ 71.077308][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.089193][ T4357] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 71.101335][ T4411] loop0: detected capacity change from 0 to 128 [ 71.107850][ T4357] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 71.200736][ T26] audit: type=1800 audit(1743887034.344:3): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.45" name="file1" dev="loop0" ino=1048601 res=0 errno=0 [ 71.230766][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.237427][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.249079][ T4411] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 71.274292][ T154] device veth1_macvtap left promiscuous mode [ 71.280576][ T4411] FAT-fs (loop0): Filesystem has been set read-only [ 71.291529][ T154] device veth0_macvtap left promiscuous mode [ 71.309439][ T4411] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 71.320441][ T154] device veth1_vlan left promiscuous mode [ 71.326946][ T154] device veth0_vlan left promiscuous mode [ 71.821312][ T4396] loop2: detected capacity change from 0 to 40427 [ 71.910894][ T4396] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 71.945070][ T4396] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 71.992543][ T4166] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.051578][ T4396] F2FS-fs (loop2): Found nat_bits in checkpoint [ 72.102483][ T4209] Bluetooth: hci3: command 0x041b tx timeout [ 72.221418][ T4396] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 72.230956][ T4396] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 72.312153][ T154] team0 (unregistering): Port device team_slave_1 removed [ 72.331361][ T154] team0 (unregistering): Port device team_slave_0 removed [ 72.348225][ T26] audit: type=1800 audit(1743887035.494:4): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.41" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 72.354162][ T4396] attempt to access beyond end of device [ 72.354162][ T4396] loop2: rw=2049, want=53256, limit=40427 [ 72.368924][ T4166] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.381476][ T4396] attempt to access beyond end of device [ 72.381476][ T4396] loop2: rw=2049, want=77840, limit=40427 [ 72.400172][ T4166] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 72.411977][ T4166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.434317][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.460005][ T4166] usb 1-1: config 0 descriptor?? [ 72.487717][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.549310][ T4178] attempt to access beyond end of device [ 72.549310][ T4178] loop2: rw=2049, want=45104, limit=40427 [ 72.636363][ T154] bond0 (unregistering): Released all slaves [ 72.953885][ T4166] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 72.981629][ T4166] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input6 [ 73.019357][ T4326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.078095][ T4326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.100315][ T4326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.132065][ T4166] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 73.238059][ T4326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.672636][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.706612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.724727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.748261][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.819897][ T4468] loop1: detected capacity change from 0 to 64 [ 73.823285][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.850231][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.869108][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.876233][ T4223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.938671][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.944283][ T21] usb 1-1: USB disconnect, device number 2 [ 73.959615][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.983707][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.039505][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.046779][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.080206][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.141971][ T4326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.184308][ T4209] Bluetooth: hci3: command 0x040f tx timeout [ 74.233292][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.280144][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.310368][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.339765][ T4479] loop1: detected capacity change from 0 to 512 [ 74.362576][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.402964][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.422985][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.433434][ T4479] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.452138][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.495166][ T4479] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.503582][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.535629][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.577745][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.630964][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.661198][ T4479] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 74.670212][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.712572][ T4479] EXT4-fs (loop1): 1 truncate cleaned up [ 74.718260][ T4479] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,i_version,block_validity,quota,,errors=continue. Quota mode: writeback. [ 75.133851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.141355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.217855][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.792601][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.821426][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.904217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.923575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.964391][ T4326] device veth0_vlan entered promiscuous mode [ 75.973044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.019114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.059022][ T4326] device veth1_vlan entered promiscuous mode [ 76.144025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.184386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.233340][ T4326] device veth0_macvtap entered promiscuous mode [ 76.240338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.262405][ T4209] Bluetooth: hci3: command 0x0419 tx timeout [ 76.296895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.347253][ T4326] device veth1_macvtap entered promiscuous mode [ 76.373355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.394622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.477593][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.523530][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.523552][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.523571][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.523584][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.523600][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.523611][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.523626][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.525145][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.539545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.540434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.544694][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.544716][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.544728][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.544743][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.544755][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.544769][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.544780][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.544795][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.545996][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.560510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.561271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.566934][ T4326] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.566973][ T4326] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.567004][ T4326] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.567035][ T4326] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.803370][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.068598][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.088040][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.117992][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.135334][ T4535] loop1: detected capacity change from 0 to 32768 [ 77.285026][ T4535] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 77.324846][ T4542] loop2: detected capacity change from 0 to 32768 [ 77.356018][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.367443][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.450512][ T4557] netlink: 'syz.0.84': attribute type 1 has an invalid length. [ 77.471561][ T4535] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 77.488573][ T4542] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.81 (4542) [ 77.558402][ T4557] netlink: 'syz.0.84': attribute type 2 has an invalid length. [ 77.627742][ T4542] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 77.668095][ T4542] BTRFS info (device loop2): using free space tree [ 77.698526][ T4542] BTRFS info (device loop2): has skinny extents [ 77.769235][ T4170] ocfs2: Unmounting device (7,1) on (node local) [ 78.100187][ T4542] BTRFS info (device loop2): enabling ssd optimizations [ 78.434317][ T4599] loop5: detected capacity change from 0 to 256 [ 78.551332][ T4599] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 78.642250][ T4599] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 78.677461][ T4599] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 78.722946][ T4599] UDF-fs: Scanning with blocksize 512 failed [ 78.782671][ T144] tipc: Subscription rejected, illegal request [ 78.822548][ T4599] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 78.924081][ T4599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.209730][ T4625] loop1: detected capacity change from 0 to 256 [ 79.464118][ T4636] loop2: detected capacity change from 0 to 256 [ 79.626889][ T4646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.101'. [ 79.699602][ T4644] loop5: detected capacity change from 0 to 2048 [ 79.782192][ T4652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 80.217010][ T4677] netlink: 'syz.1.112': attribute type 2 has an invalid length. [ 80.232490][ T4675] loop5: detected capacity change from 0 to 512 [ 80.286337][ T4677] netlink: 'syz.1.112': attribute type 2 has an invalid length. [ 80.421247][ T4675] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,grpjquota=,nombcache,,errors=continue. Quota mode: writeback. [ 80.451365][ T4689] loop1: detected capacity change from 0 to 512 [ 80.495412][ T4691] netlink: 'syz.0.119': attribute type 10 has an invalid length. [ 80.522713][ T4675] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.544512][ T4689] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.591417][ T4689] EXT4-fs (loop1): 1 truncate cleaned up [ 80.624819][ T4689] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 80.632864][ T4675] ODEBUG: Out of memory. ODEBUG disabled [ 80.760211][ T26] audit: type=1326 audit(1743887043.904:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.3.122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7586391169 code=0x0 [ 81.027525][ T4720] loop2: detected capacity change from 0 to 512 [ 81.159560][ T4675] syz.5.111 (4675): drop_caches: 2 [ 81.184884][ T4720] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 81.221506][ T4720] EXT4-fs (loop2): 1 truncate cleaned up [ 81.240777][ T4720] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 81.430063][ T4734] loop1: detected capacity change from 0 to 256 [ 81.466017][ T1108] cfg80211: failed to load regulatory.db [ 81.563963][ T4734] exfat: Deprecated parameter 'namecase' [ 81.612001][ T4734] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 81.734079][ T4746] loop3: detected capacity change from 0 to 1024 [ 81.931275][ T4754] loop1: detected capacity change from 0 to 512 [ 81.960793][ T4755] syz.5.135[4755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.960893][ T4755] syz.5.135[4755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.984250][ T4746] hfsplus: request for non-existent node 1280 in B*Tree [ 82.042436][ T4746] hfsplus: request for non-existent node 1280 in B*Tree [ 82.229967][ T4754] EXT4-fs (loop1): Test dummy encryption mode enabled [ 82.241436][ T4754] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.302481][ T4754] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.133: bad orphan inode 131083 [ 82.337351][ T4754] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 82.477733][ T4771] loop3: detected capacity change from 0 to 256 [ 82.533106][ T4771] exfat: Unknown parameter 'keep_last_dots' [ 82.705196][ T4754] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 82.707912][ T4738] loop2: detected capacity change from 0 to 40427 [ 82.772501][ T4738] F2FS-fs (loop2): invalid crc value [ 82.794511][ T4738] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.935390][ T4738] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.953196][ T4273] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 83.047336][ T4759] loop0: detected capacity change from 0 to 32768 [ 83.151086][ T4785] loop1: detected capacity change from 0 to 1024 [ 83.163744][ T4178] attempt to access beyond end of device [ 83.163744][ T4178] loop2: rw=2049, want=40976, limit=40427 [ 83.214064][ T4793] loop5: detected capacity change from 0 to 128 [ 83.259020][ T4793] EXT4-fs (loop5): Ignoring removed nobh option [ 83.262621][ T4759] XFS (loop0): Mounting V5 Filesystem [ 83.287895][ T4793] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 83.337758][ T4793] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.412565][ T4273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 11801, setting to 64 [ 83.429679][ T4273] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 83.444817][ T4273] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 83.454196][ T4273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.466170][ T4273] usb 4-1: config 0 descriptor?? [ 83.493044][ T4771] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.538231][ T4759] XFS (loop0): Ending clean mount [ 83.564699][ T4759] XFS (loop0): Quotacheck needed: Please wait. [ 83.576928][ T4800] loop1: detected capacity change from 0 to 512 [ 83.627043][ T4759] XFS (loop0): Quotacheck: Done. [ 83.664422][ T4800] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.144: casefold flag without casefold feature [ 83.720326][ T4800] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.144: couldn't read orphan inode 15 (err -117) [ 83.798411][ T4165] XFS (loop0): Unmounting Filesystem [ 83.810546][ T4800] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 83.958430][ T4273] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 83.968134][ T4273] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 83.980925][ T4273] microsoft 0003:045E:07DA.0003: no inputs found [ 83.987446][ T4273] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 84.178707][ T4622] usb 4-1: USB disconnect, device number 3 [ 84.442468][ T4273] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.700049][ T4831] input: syz0 as /devices/virtual/input/input8 [ 84.709399][ T4273] usb 3-1: Using ep0 maxpacket: 16 [ 84.739953][ T4818] loop1: detected capacity change from 0 to 32768 [ 84.788021][ T4833] netlink: 'syz.3.158': attribute type 33 has an invalid length. [ 84.804230][ T4833] netlink: 152 bytes leftover after parsing attributes in process `syz.3.158'. [ 84.838792][ T4833] netlink: 'syz.3.158': attribute type 10 has an invalid length. [ 84.862548][ T4273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.881365][ T4273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.921853][ T4825] loop0: detected capacity change from 0 to 32768 [ 84.931479][ T4273] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.969889][ T4273] usb 3-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 85.000687][ T4273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.069647][ T4818] XFS (loop1): Mounting V5 Filesystem [ 85.090438][ T4833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.122906][ T4273] usb 3-1: config 0 descriptor?? [ 85.166668][ T4833] team0: Port device batadv0 added [ 85.280691][ T4818] XFS (loop1): Ending clean mount [ 85.295768][ T4862] loop5: detected capacity change from 0 to 256 [ 85.381867][ T4815] udc-core: couldn't find an available UDC or it's busy [ 85.400687][ T4862] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 85.402541][ T4815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 85.491421][ T4170] XFS (loop1): Unmounting Filesystem [ 85.787299][ T4273] hid-multitouch 0003:045E:9994.0004: unknown main item tag 0x2 [ 85.798113][ T4273] hid-multitouch 0003:045E:9994.0004: unknown main item tag 0x0 [ 85.805956][ T4273] hid-multitouch 0003:045E:9994.0004: unknown main item tag 0x0 [ 85.807270][ T4877] loop3: detected capacity change from 0 to 128 [ 85.813787][ T4273] hid-multitouch 0003:045E:9994.0004: unknown main item tag 0x0 [ 85.848370][ T4273] hid-multitouch 0003:045E:9994.0004: unknown main item tag 0x0 [ 85.873008][ T4273] hid-multitouch 0003:045E:9994.0004: unknown main item tag 0x0 [ 85.917388][ T4273] hid-multitouch 0003:045E:9994.0004: unbalanced collection at end of report description [ 85.948317][ T4273] hid-multitouch: probe of 0003:045E:9994.0004 failed with error -22 [ 85.997765][ T4273] usb 3-1: USB disconnect, device number 2 [ 86.167506][ T4891] capability: warning: `syz.1.165' uses deprecated v2 capabilities in a way that may be insecure [ 86.200507][ T4894] loop0: detected capacity change from 0 to 512 [ 86.280602][ T4897] block nbd1: shutting down sockets [ 86.286499][ T4894] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.325559][ T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 86.329108][ T4894] EXT4-fs (loop0): 1 truncate cleaned up [ 86.339342][ T4894] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,jqfmt=vfsv0,barrier=0x0000000000000003,nolazytime,auto_da_alloc,debug_want_extra_isize=0x000000000000002e,,errors=continue. Quota mode: none. [ 86.384858][ T4904] loop1: detected capacity change from 0 to 256 [ 86.401548][ T4894] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: none. [ 86.450164][ T4894] EXT4-fs error (device loop0): ext4_nfs_get_inode:1434: inode #11: comm syz.0.175: iget: bad extra_isize 46 (inode size 256) [ 86.510487][ T4907] loop3: detected capacity change from 0 to 1024 [ 86.630427][ T4907] capability: warning: `syz.3.180' uses 32-bit capabilities (legacy support in use) [ 86.774134][ T144] hfsplus: b-tree write err: -5, ino 4 [ 86.792723][ T13] usb 6-1: unable to get BOS descriptor or descriptor too short [ 86.888537][ T13] usb 6-1: config 239 interface 0 has no altsetting 0 [ 86.911303][ T4916] loop0: detected capacity change from 0 to 1764 [ 87.072747][ T13] usb 6-1: New USB device found, idVendor=0930, idProduct=021c, bcdDevice=a6.04 [ 87.081829][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.084516][ T4920] loop1: detected capacity change from 0 to 8192 [ 87.112322][ T13] usb 6-1: Product: syz [ 87.116557][ T13] usb 6-1: Manufacturer: syz [ 87.121161][ T13] usb 6-1: SerialNumber: syz [ 87.225111][ T4920] FAT-fs (loop1): Directory bread(block 22913) failed [ 87.234490][ T4920] FAT-fs (loop1): Directory bread(block 22914) failed [ 87.241838][ T4920] FAT-fs (loop1): Directory bread(block 22915) failed [ 87.272382][ T4920] FAT-fs (loop1): Directory bread(block 22916) failed [ 87.287683][ T4920] FAT-fs (loop1): Directory bread(block 22917) failed [ 87.318341][ T4920] FAT-fs (loop1): Directory bread(block 22918) failed [ 87.342551][ T4920] FAT-fs (loop1): Directory bread(block 22919) failed [ 87.362639][ T4920] FAT-fs (loop1): Directory bread(block 22920) failed [ 87.385899][ T4910] loop2: detected capacity change from 0 to 32768 [ 87.412468][ T4920] FAT-fs (loop1): Directory bread(block 22921) failed [ 87.419320][ T4920] FAT-fs (loop1): Directory bread(block 22922) failed [ 87.481942][ T13] usb 6-1: USB disconnect, device number 2 [ 87.488550][ T4910] XFS: noikeep mount option is deprecated. [ 87.642616][ T4910] XFS (loop2): Mounting V5 Filesystem [ 87.735781][ T4910] XFS (loop2): Ending clean mount [ 87.870503][ T4962] mmap: syz.0.201 (4962) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 87.874508][ T4910] XFS (loop2): Quotacheck needed: Please wait. [ 87.982851][ T4910] XFS (loop2): Quotacheck: Done. [ 88.005106][ T4964] pim6reg: tun_chr_ioctl cmd 2147767519 [ 88.073448][ T4966] loop1: detected capacity change from 0 to 2048 [ 88.207763][ T4973] openvswitch: netlink: Message has 4 unknown bytes. [ 88.225053][ T4966] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 88.258784][ T4966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.294122][ T4178] XFS (loop2): Unmounting Filesystem [ 88.515859][ T4982] process 'syz.3.212' launched './file0' with NULL argv: empty string added [ 88.593969][ T4986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.213'. [ 88.682683][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 88.797652][ T4991] loop3: detected capacity change from 0 to 8192 [ 88.808656][ T4995] team0: Device ipvlan2 failed to register rx_handler [ 88.849057][ T4991] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 88.901136][ T4996] loop0: detected capacity change from 0 to 1764 [ 88.927777][ T4991] REISERFS (device loop3): using ordered data mode [ 88.937844][ T4991] reiserfs: using flush barriers [ 88.946159][ T4991] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.963394][ T4991] REISERFS (device loop3): checking transaction log (loop3) [ 89.027070][ T4995] syz.5.216 (4995) used greatest stack depth: 19032 bytes left [ 89.270070][ T4991] REISERFS (device loop3): Using tea hash to sort names [ 89.300668][ T4991] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 89.579050][ T5025] loop0: detected capacity change from 0 to 2048 [ 89.607498][ T5014] loop5: detected capacity change from 0 to 8192 [ 89.621761][ T5025] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.631066][ T13] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 90.186266][ T5040] loop0: detected capacity change from 0 to 8192 [ 90.234131][ T26] audit: type=1326 audit(1743887053.384:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54da322169 code=0x7ffc0000 [ 90.283627][ T4273] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 90.304664][ T5040] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 90.327650][ T26] audit: type=1326 audit(1743887053.384:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f54da322169 code=0x7ffc0000 [ 90.361489][ T5040] REISERFS (device loop0): using ordered data mode [ 90.395957][ T5040] reiserfs: using flush barriers [ 90.434416][ T5040] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.465229][ T26] audit: type=1326 audit(1743887053.384:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54da322169 code=0x7ffc0000 [ 90.493135][ T5040] REISERFS (device loop0): checking transaction log (loop0) [ 90.504214][ T5040] REISERFS (device loop0): Using r5 hash to sort names [ 90.519947][ T5040] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 90.533023][ T26] audit: type=1326 audit(1743887053.384:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54da322169 code=0x7ffc0000 [ 90.566983][ T5040] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 90.633791][ T5058] loop1: detected capacity change from 0 to 1024 [ 90.634122][ T5040] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 90.667812][ T26] audit: type=1326 audit(1743887053.384:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54da322169 code=0x7ffc0000 [ 90.697325][ T26] audit: type=1326 audit(1743887053.384:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54da322169 code=0x7ffc0000 [ 90.727391][ T26] audit: type=1326 audit(1743887053.384:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54da322169 code=0x7ffc0000 [ 90.753956][ T4273] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.763893][ T5058] EXT4-fs (loop1): Test dummy encryption mode enabled [ 90.781453][ T26] audit: type=1326 audit(1743887053.384:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f54da322169 code=0x7ffc0000 [ 90.812713][ T5058] EXT4-fs (loop1): Ignoring removed orlov option [ 90.832094][ T5051] loop3: detected capacity change from 0 to 32768 [ 90.856806][ T5058] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,nojournal_checksum,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,discard,,errors=continue. Quota mode: writeback. [ 90.867100][ T26] audit: type=1326 audit(1743887053.384:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54da322169 code=0x7ffc0000 [ 90.906531][ T26] audit: type=1326 audit(1743887053.384:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54da322169 code=0x7ffc0000 [ 90.928619][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.982535][ T4273] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.000628][ T4273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.023592][ T5051] jfs: Unrecognized mount option "erro&" or missing value [ 91.056689][ T4273] usb 3-1: Product: syz [ 91.075691][ T4273] usb 3-1: Manufacturer: syz [ 91.088736][ T4273] usb 3-1: SerialNumber: syz [ 91.098856][ T5064] netlink: 16 bytes leftover after parsing attributes in process `syz.5.248'. [ 91.275961][ T5070] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 91.326673][ T5074] device batadv_slave_1 entered promiscuous mode [ 91.352829][ T5074] device batadv_slave_1 left promiscuous mode [ 91.500926][ T5082] loop5: detected capacity change from 0 to 256 [ 91.580815][ T5082] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 91.762161][ T5082] exFAT-fs (loop5): hint_cluster is invalid (17) [ 92.048285][ T4273] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 92.072492][ T4273] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 92.086878][ T5103] loop3: detected capacity change from 0 to 4096 [ 92.108330][ T4273] cdc_ncm 3-1:1.0: bind() failure [ 92.119806][ T4273] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 92.156016][ T4273] cdc_ncm 3-1:1.1: bind() failure [ 92.165330][ T5103] NILFS (loop3): invalid segment: Checksum error in segment payload [ 92.179823][ T5116] loop1: detected capacity change from 0 to 64 [ 92.194510][ T4273] usb 3-1: USB disconnect, device number 3 [ 92.269235][ T5103] NILFS (loop3): trying rollback from an earlier position [ 92.343982][ T5103] NILFS (loop3): recovery complete [ 92.365165][ T5123] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.420237][ T5122] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 92.442387][ T5122] pim6reg0: owner set to 0 [ 92.635181][ T5137] loop5: detected capacity change from 0 to 64 [ 92.688958][ T5131] loop1: detected capacity change from 0 to 1024 [ 92.770419][ T5131] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 92.788092][ T5131] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.878863][ T5131] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,grpquota,grpjquota=,barrier,dioread_nolock,grpquota,nomblk_io_submit,nodiscard,,errors=continue. Quota mode: writeback. [ 93.336935][ T5171] loop2: detected capacity change from 0 to 256 [ 93.406277][ T5173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 93.478056][ T5171] FAT-fs (loop2): Directory bread(block 64) failed [ 93.507254][ T5171] FAT-fs (loop2): Directory bread(block 65) failed [ 93.581694][ T5171] FAT-fs (loop2): Directory bread(block 66) failed [ 93.628502][ T5171] FAT-fs (loop2): Directory bread(block 67) failed [ 93.652855][ T5171] FAT-fs (loop2): Directory bread(block 68) failed [ 93.659443][ T5171] FAT-fs (loop2): Directory bread(block 69) failed [ 93.687385][ T5184] netpci0: tun_chr_ioctl cmd 2148553947 [ 93.696665][ T5171] FAT-fs (loop2): Directory bread(block 70) failed [ 93.707869][ T5171] FAT-fs (loop2): Directory bread(block 71) failed [ 93.725990][ T5171] FAT-fs (loop2): Directory bread(block 72) failed [ 93.742440][ T5171] FAT-fs (loop2): Directory bread(block 73) failed [ 94.375219][ T5161] loop5: detected capacity change from 0 to 32768 [ 94.538721][ T5219] loop1: detected capacity change from 0 to 512 [ 94.565271][ T5220] loop2: detected capacity change from 0 to 512 [ 94.626343][ T5176] loop0: detected capacity change from 0 to 32768 [ 94.643269][ T5220] EXT4-fs (loop2): Test dummy encryption mode enabled [ 94.670437][ T5220] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.700538][ T5219] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,grpjquota=,nombcache,,errors=continue. Quota mode: writeback. [ 94.744542][ T5219] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.753499][ T5176] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 94.775765][ T5220] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.296: bad orphan inode 131083 [ 94.787266][ T5224] loop3: detected capacity change from 0 to 1024 [ 94.860553][ T5220] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 94.905893][ T5224] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 94.954332][ T5224] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.189288][ T5219] syz.1.295 (5219): drop_caches: 2 [ 95.224152][ T5224] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,grpquota,grpjquota=,barrier,dioread_nolock,grpquota,nomblk_io_submit,nodiscard,,errors=continue. Quota mode: writeback. [ 95.250519][ T4165] ocfs2: Unmounting device (7,0) on (node local) [ 95.822480][ T5260] loop0: detected capacity change from 0 to 64 [ 95.949027][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 95.949042][ T26] audit: type=1800 audit(1743887059.094:17): pid=5260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.299" name="file2" dev="loop0" ino=19 res=0 errno=0 [ 96.173190][ T5275] netlink: 'syz.5.309': attribute type 33 has an invalid length. [ 96.181009][ T5275] netlink: 152 bytes leftover after parsing attributes in process `syz.5.309'. [ 96.343846][ T5286] loop0: detected capacity change from 0 to 1024 [ 96.439431][ T5286] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 96.466937][ T5286] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.470107][ T5296] loop5: detected capacity change from 0 to 764 [ 96.551979][ T5286] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,grpquota,grpjquota=,barrier,dioread_nolock,grpquota,nomblk_io_submit,nodiscard,,errors=continue. Quota mode: writeback. [ 96.592433][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 96.795827][ T5307] loop1: detected capacity change from 0 to 256 [ 96.892563][ T5307] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 96.965759][ T5316] loop5: detected capacity change from 0 to 64 [ 97.056961][ T26] audit: type=1800 audit(1743887060.204:18): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.324" name="file2" dev="loop5" ino=19 res=0 errno=0 [ 97.243109][ T5328] netlink: 60 bytes leftover after parsing attributes in process `syz.2.327'. [ 97.360422][ T5317] loop3: detected capacity change from 0 to 8192 [ 97.486665][ T5317] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 97.524839][ T5317] REISERFS (device loop3): using ordered data mode [ 97.540873][ T5317] reiserfs: using flush barriers [ 97.555453][ T5317] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.572849][ T5317] REISERFS (device loop3): checking transaction log (loop3) [ 97.634305][ T5317] REISERFS (device loop3): Using r5 hash to sort names [ 97.697732][ T5317] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 97.778422][ T5317] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 97.783062][ T5356] team0: Device ipvlan2 failed to register rx_handler [ 97.909210][ T5317] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 98.086475][ T5369] loop5: detected capacity change from 0 to 256 [ 98.225135][ T5369] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 98.821750][ T5398] loop1: detected capacity change from 0 to 8192 [ 98.853172][ T5411] team0: Device ipvlan2 failed to register rx_handler [ 99.012347][ T4621] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 99.154213][ T5398] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 99.171685][ T5398] REISERFS (device loop1): using ordered data mode [ 99.180654][ T5398] reiserfs: using flush barriers [ 99.187210][ T5398] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.204300][ T5398] REISERFS (device loop1): checking transaction log (loop1) [ 99.272503][ T4621] usb 6-1: Using ep0 maxpacket: 32 [ 99.344860][ T5398] REISERFS (device loop1): Using tea hash to sort names [ 99.357311][ T5398] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 99.412483][ T4621] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.432372][ T4621] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.442168][ T4621] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 99.473064][ T4621] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.496843][ T4621] usb 6-1: config 0 descriptor?? [ 99.533451][ T4621] hub 6-1:0.0: USB hub found [ 99.719720][ T5432] loop3: detected capacity change from 0 to 164 [ 99.753404][ T4621] hub 6-1:0.0: 1 port detected [ 99.763987][ T5429] loop0: detected capacity change from 0 to 8192 [ 99.826300][ T5429] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 99.844409][ T5435] kvm [5434]: vcpu0, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x8000003, nop [ 99.867316][ T5429] REISERFS (device loop0): using ordered data mode [ 99.922696][ T5429] reiserfs: using flush barriers [ 99.967351][ T5429] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.000166][ T5429] REISERFS (device loop0): checking transaction log (loop0) [ 100.100293][ T5442] loop3: detected capacity change from 0 to 1024 [ 100.150908][ T5429] REISERFS (device loop0): Using tea hash to sort names [ 100.158484][ T5429] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 100.234983][ T4233] hfsplus: b-tree write err: -5, ino 4 [ 100.247017][ T4621] usb 6-1: USB disconnect, device number 3 [ 100.363897][ T5445] loop1: detected capacity change from 0 to 1024 [ 100.467359][ T5445] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 100.493556][ T5445] EXT4-fs (loop1): inline encryption not supported [ 100.528316][ T5445] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,abort,barrier,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,usrquota,barrier,max_batch_time=0x0000000000000006,bsddf,inlinecrypt,,errors=continue. Quota mode: writeback. [ 100.577993][ T5445] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2746: inode #2: comm syz.1.362: corrupted in-inode xattr [ 100.631184][ T5445] EXT4-fs error (device loop1): ext4_xattr_ibody_get:603: inode #2: comm syz.1.362: corrupted in-inode xattr [ 100.679242][ T5458] netlink: 36 bytes leftover after parsing attributes in process `syz.3.368'. [ 100.926121][ T5473] loop3: detected capacity change from 0 to 128 [ 101.074843][ T5477] loop1: detected capacity change from 0 to 4096 [ 101.187856][ T5482] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.202358][ T4621] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.216053][ T5479] loop2: detected capacity change from 0 to 8192 [ 101.311605][ T5479] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 101.339798][ T5479] REISERFS (device loop2): using ordered data mode [ 101.377050][ T5479] reiserfs: using flush barriers [ 101.425318][ T5479] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.452369][ T4621] usb 1-1: Using ep0 maxpacket: 8 [ 101.525281][ T5479] REISERFS (device loop2): checking transaction log (loop2) [ 101.561671][ T5487] loop3: detected capacity change from 0 to 32768 [ 101.572826][ T4621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.596066][ T5492] loop5: detected capacity change from 0 to 64 [ 101.613864][ T4621] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 101.638565][ T4621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.656964][ T5487] (syz.3.377,5487,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 101.671441][ T5487] (syz.3.377,5487,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 101.697719][ T4621] usb 1-1: config 0 descriptor?? [ 101.713341][ T5487] JBD2: Ignoring recovery information on journal [ 101.780625][ T5492] hfs: request for non-existent node 16777216 in B*Tree [ 101.805914][ T5492] hfs: request for non-existent node 16777216 in B*Tree [ 101.816292][ T5487] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 101.845812][ T5492] hfs: request for non-existent node 16777216 in B*Tree [ 101.858536][ T5492] hfs: request for non-existent node 16777216 in B*Tree [ 101.867750][ T5492] hfs: request for non-existent node 16777216 in B*Tree [ 101.875011][ T5492] hfs: request for non-existent node 16777216 in B*Tree [ 101.891955][ T5487] (syz.3.377,5487,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0x5b86c303. Applying ECC. [ 101.906022][ T5487] (syz.3.377,5487,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x4bf4182b [ 101.920123][ T5487] (syz.3.377,5487,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 101.928890][ T5487] (syz.3.377,5487,0):ocfs2_quota_read:201 ERROR: status = -5 [ 101.936323][ T5487] Quota error (device loop3): find_block_dqentry: Can't read quota tree block 6 [ 101.944682][ T4223] hfs: request for non-existent node 16777216 in B*Tree [ 101.945476][ T5487] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 101.962054][ T5487] (syz.3.377,5487,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 101.970592][ T5487] (syz.3.377,5487,0):ocfs2_mknod:314 ERROR: status = -5 [ 101.977606][ T5487] (syz.3.377,5487,0):ocfs2_mknod:502 ERROR: status = -5 [ 101.981553][ T4223] hfs: request for non-existent node 16777216 in B*Tree [ 101.984987][ T5487] (syz.3.377,5487,0):ocfs2_create:676 ERROR: status = -5 [ 102.024171][ T4621] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 102.053544][ T5479] REISERFS (device loop2): Using tea hash to sort names [ 102.066530][ T5479] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 102.164936][ T4171] ocfs2: Unmounting device (7,3) on (node local) [ 102.257515][ T4622] usb 1-1: USB disconnect, device number 3 [ 102.737860][ T5503] loop1: detected capacity change from 0 to 32768 [ 102.972665][ T5505] loop5: detected capacity change from 0 to 32768 [ 103.013212][ T5505] XFS: ikeep mount option is deprecated. [ 103.060368][ T5518] block nbd3: shutting down sockets [ 103.143965][ T5505] XFS (loop5): Mounting V5 Filesystem [ 103.229075][ T5533] loop3: detected capacity change from 0 to 256 [ 103.297487][ T5505] XFS (loop5): Ending clean mount [ 103.312228][ T5505] XFS (loop5): Quotacheck needed: Please wait. [ 103.370047][ T5533] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 103.394695][ T5505] XFS (loop5): Quotacheck: Done. [ 103.494039][ T5537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 103.624126][ T4326] XFS (loop5): Unmounting Filesystem [ 104.948395][ T26] audit: type=1326 audit(1743887068.094:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5542 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54da322169 code=0x7ffc0000 [ 104.972791][ T5545] netlink: 48 bytes leftover after parsing attributes in process `syz.2.403'. [ 105.034444][ T26] audit: type=1326 audit(1743887068.134:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5542 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f54da322169 code=0x7ffc0000 [ 105.117813][ T26] audit: type=1326 audit(1743887068.144:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5542 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54da322169 code=0x7ffc0000 [ 105.148582][ T5559] loop2: detected capacity change from 0 to 256 [ 105.228258][ T5551] loop5: detected capacity change from 0 to 8192 [ 105.254303][ T5559] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd94015fb, utbl_chksum : 0xe619d30d) [ 105.310624][ T5551] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 105.334485][ T5551] REISERFS (device loop5): using ordered data mode [ 105.341039][ T5551] reiserfs: using flush barriers [ 105.353597][ T5559] exFAT-fs (loop2): error, invalid size(size(36865) > aligned(9223372036854777344) [ 105.353597][ T5559] [ 105.359770][ T5551] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 105.365952][ T5559] exFAT-fs (loop2): Filesystem has been set read-only [ 105.432796][ T5551] REISERFS (device loop5): checking transaction log (loop5) [ 105.761454][ T5551] REISERFS (device loop5): Using tea hash to sort names [ 105.786902][ T5551] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 106.037001][ T5584] loop3: detected capacity change from 0 to 1024 [ 106.056121][ T5586] netlink: 72 bytes leftover after parsing attributes in process `syz.2.419'. [ 106.178740][ T5590] loop2: detected capacity change from 0 to 64 [ 106.316556][ T26] audit: type=1326 audit(1743887069.464:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1948a07169 code=0x7ffc0000 [ 106.333133][ T5592] loop5: detected capacity change from 0 to 256 [ 106.372015][ T26] audit: type=1326 audit(1743887069.464:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1948a07169 code=0x7ffc0000 [ 106.422756][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.433751][ T26] audit: type=1326 audit(1743887069.464:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1948a071a3 code=0x7ffc0000 [ 106.486762][ T5592] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.505207][ T26] audit: type=1326 audit(1743887069.464:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1948a05c1f code=0x7ffc0000 [ 106.571274][ T26] audit: type=1326 audit(1743887069.464:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1948a071f7 code=0x7ffc0000 [ 106.658434][ T5601] device wireguard0 entered promiscuous mode [ 106.777606][ T5577] loop1: detected capacity change from 0 to 32768 [ 106.833170][ T5577] XFS: ikeep mount option is deprecated. [ 106.893301][ T1108] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.959427][ T5610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.431'. [ 107.002166][ T5577] XFS (loop1): Mounting V5 Filesystem [ 107.002579][ T1108] usb 1-1: config 239 interface 0 has no altsetting 0 [ 107.071577][ T5620] loop3: detected capacity change from 0 to 128 [ 107.192961][ T1108] usb 1-1: New USB device found, idVendor=0930, idProduct=021c, bcdDevice=a6.04 [ 107.243144][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.267772][ T1108] usb 1-1: Product: syz [ 107.273912][ T5606] loop5: detected capacity change from 0 to 32768 [ 107.281880][ T1108] usb 1-1: Manufacturer: syz [ 107.287082][ T1108] usb 1-1: SerialNumber: syz [ 107.296957][ T5577] XFS (loop1): Ending clean mount [ 107.308267][ T5577] XFS (loop1): Quotacheck needed: Please wait. [ 107.378340][ T5577] XFS (loop1): Quotacheck: Done. [ 107.416523][ T5622] loop3: detected capacity change from 0 to 4096 [ 107.469262][ T5606] XFS (loop5): Mounting V5 Filesystem [ 107.471354][ T4170] XFS (loop1): Unmounting Filesystem [ 107.511222][ T5622] ntfs: volume version 3.1. [ 107.589940][ T5615] loop2: detected capacity change from 0 to 32768 [ 107.684096][ T1108] usb 1-1: USB disconnect, device number 4 [ 107.700556][ T5606] XFS (loop5): Ending clean mount [ 107.715026][ T5622] __ntfs_error: 13 callbacks suppressed [ 107.715043][ T5622] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 107.744631][ T5622] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 107.795032][ T5622] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 107.822685][ T5622] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 107.913818][ T4326] XFS (loop5): Unmounting Filesystem [ 108.576049][ T5645] loop5: detected capacity change from 0 to 4096 [ 108.798200][ T5645] NILFS (loop5): invalid segment: Checksum error in segment payload [ 108.807289][ T5639] loop1: detected capacity change from 0 to 32768 [ 108.819865][ T5645] NILFS (loop5): trying rollback from an earlier position [ 108.884418][ T5645] NILFS (loop5): recovery complete [ 108.918600][ T5639] jfs: Unrecognized mount option "erro&" or missing value [ 108.918979][ T5650] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.971359][ T5643] loop3: detected capacity change from 0 to 32768 [ 109.151235][ T5643] XFS (loop3): Mounting V5 Filesystem [ 109.336679][ T5667] loop2: detected capacity change from 0 to 1024 [ 109.389796][ T5643] XFS (loop3): Ending clean mount [ 109.396797][ T5670] loop1: detected capacity change from 0 to 1024 [ 109.398949][ T5643] XFS (loop3): Quotacheck needed: Please wait. [ 109.457185][ T5667] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.468199][ T5643] XFS (loop3): Quotacheck: Done. [ 109.526431][ T5667] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 109.548638][ T155] hfsplus: b-tree write err: -5, ino 4 [ 109.556021][ T5667] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 109.622371][ T5667] EXT4-fs (loop2): This should not happen!! Data will be lost [ 109.622371][ T5667] [ 109.635560][ T4171] XFS (loop3): Unmounting Filesystem [ 109.647783][ T5667] EXT4-fs (loop2): Total free blocks count 0 [ 109.691890][ T5667] EXT4-fs (loop2): Free/Dirty block details [ 109.735772][ T5667] EXT4-fs (loop2): free_blocks=68451041280 [ 109.756740][ T5663] loop0: detected capacity change from 0 to 32768 [ 109.775026][ T5667] EXT4-fs (loop2): dirty_blocks=80 [ 109.788492][ T5667] EXT4-fs (loop2): Block reservation details [ 109.795961][ T5667] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 109.818293][ T5674] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 109.862966][ T5674] EXT4-fs (loop2): This should not happen!! Data will be lost [ 109.862966][ T5674] [ 109.918147][ T5663] XFS (loop0): Mounting V5 Filesystem [ 109.972908][ T5683] IPVS: Scheduler module ip_vs_ not found [ 110.203347][ T5695] loop1: detected capacity change from 0 to 4096 [ 110.222119][ T5663] XFS (loop0): Ending clean mount [ 110.236497][ T5663] XFS (loop0): Quotacheck needed: Please wait. [ 110.315815][ T5695] NILFS (loop1): invalid segment: Checksum error in segment payload [ 110.363359][ T5663] XFS (loop0): Quotacheck: Done. [ 110.366512][ T5695] NILFS (loop1): trying rollback from an earlier position [ 110.439639][ T5695] NILFS (loop1): recovery complete [ 110.492755][ T5706] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.537874][ T4165] XFS (loop0): Unmounting Filesystem [ 110.701621][ T5710] loop2: detected capacity change from 0 to 1024 [ 110.905111][ T4233] hfsplus: b-tree write err: -5, ino 4 [ 111.046731][ T5719] loop2: detected capacity change from 0 to 512 [ 111.113397][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 111.211757][ T5719] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,grpjquota=,nombcache,,errors=continue. Quota mode: writeback. [ 111.234512][ T5719] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.882479][ T5742] loop9: detected capacity change from 0 to 1 [ 111.918182][ T5742] Dev loop9: unable to read RDB block 1 [ 111.948072][ T5742] loop9: unable to read partition table [ 111.967817][ T5742] loop9: partition table beyond EOD, truncated [ 111.992433][ T5742] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 112.059463][ T5719] syz.2.464 (5719): drop_caches: 2 [ 112.080378][ T5714] loop1: detected capacity change from 0 to 32768 [ 112.151868][ T5750] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.282679][ T5714] XFS (loop1): Mounting V5 Filesystem [ 112.404689][ T26] audit: type=1326 audit(1743887075.554:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1948a07169 code=0x7ffc0000 [ 112.463520][ T5714] XFS (loop1): Ending clean mount [ 112.471044][ T5714] XFS (loop1): Quotacheck needed: Please wait. [ 112.487238][ T26] audit: type=1326 audit(1743887075.594:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1948a07169 code=0x7ffc0000 [ 112.598013][ T5714] XFS (loop1): Quotacheck: Done. [ 112.608538][ T26] audit: type=1326 audit(1743887075.594:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1948a07169 code=0x7ffc0000 [ 112.651421][ T26] audit: type=1326 audit(1743887075.594:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1948a07169 code=0x7ffc0000 [ 112.682376][ T4622] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.739277][ T26] audit: type=1326 audit(1743887075.594:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1948a07169 code=0x7ffc0000 [ 112.802499][ T4170] XFS (loop1): Unmounting Filesystem [ 112.883798][ T26] audit: type=1326 audit(1743887075.604:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1948a07169 code=0x7ffc0000 [ 112.992559][ T4622] usb 3-1: Using ep0 maxpacket: 32 [ 113.132636][ T4622] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.162350][ T4622] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.332631][ T4622] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 113.362354][ T4622] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 113.370747][ T4622] usb 3-1: Product: syz [ 113.412323][ T4622] usb 3-1: Manufacturer: syz [ 113.493526][ T4622] hub 3-1:4.0: USB hub found [ 113.530833][ T5779] loop5: detected capacity change from 0 to 32768 [ 113.558617][ T5769] loop3: detected capacity change from 0 to 32768 [ 113.652737][ T5783] loop0: detected capacity change from 0 to 32768 [ 113.693112][ T5783] XFS: ikeep mount option is deprecated. [ 113.696443][ T5779] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 113.712534][ T4622] hub 3-1:4.0: 2 ports detected [ 113.728376][ T5779] (syz.5.487,5779,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 113.737899][ T5769] XFS (loop3): Mounting V5 Filesystem [ 113.755402][ T5779] (syz.5.487,5779,1):ocfs2_get_suballoc_slot_bit:2709 ERROR: read block 21474836480 failed -12 [ 113.772077][ T5783] XFS (loop0): Mounting V5 Filesystem [ 113.833630][ T5779] (syz.5.487,5779,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: status = -12 [ 113.849744][ T5779] (syz.5.487,5779,1):ocfs2_test_inode_bit:2823 ERROR: get alloc slot and bit failed -12 [ 113.891791][ T5769] XFS (loop3): Ending clean mount [ 113.908181][ T5779] (syz.5.487,5779,1):ocfs2_test_inode_bit:2864 ERROR: status = -12 [ 113.922454][ T5779] (syz.5.487,5779,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 113.929808][ T5783] XFS (loop0): Ending clean mount [ 113.938781][ T5769] XFS (loop3): Quotacheck needed: Please wait. [ 113.947126][ T5783] XFS (loop0): Quotacheck needed: Please wait. [ 113.995021][ T4326] ocfs2: Unmounting device (7,5) on (node local) [ 114.026083][ T5769] XFS (loop3): Quotacheck: Done. [ 114.115141][ T5783] XFS (loop0): Quotacheck: Done. [ 114.169150][ T5783] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x42b dinode [ 114.227996][ T4171] XFS (loop3): Unmounting Filesystem [ 114.234596][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.491'. [ 114.250201][ T5783] XFS (loop0): Unmount and run xfs_repair [ 114.286681][ T5783] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 114.309913][ T5783] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 114.402585][ T4622] usb 3-1: USB disconnect, device number 4 [ 114.423754][ T5783] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 114.438236][ T5816] netlink: 20 bytes leftover after parsing attributes in process `syz.5.495'. [ 114.476590][ T5783] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 114.491362][ T5783] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 114.502175][ T5783] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 114.518590][ T5783] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 114.586226][ T5783] 00000060: ff ff ff ff 65 3f 0d b5 00 00 00 00 00 00 00 00 ....e?.......... [ 114.619451][ T5783] 00000070: 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 ................ [ 114.660146][ T5783] XFS (loop0): Internal error xfs_trans_cancel at line 954 of file fs/xfs/xfs_trans.c. Caller xfs_create_tmpfile+0x697/0xb60 [ 114.691353][ T5783] CPU: 0 PID: 5783 Comm: syz.0.490 Not tainted 5.15.179-syzkaller #0 [ 114.699472][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.709641][ T5783] Call Trace: [ 114.712935][ T5783] [ 114.715879][ T5783] dump_stack_lvl+0x1e3/0x2d0 [ 114.720586][ T5783] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 114.726234][ T5783] ? xfs_init_new_inode+0x1e8/0x1100 [ 114.731546][ T5783] ? xfs_trans_alloc_icreate+0x18f/0x2b0 [ 114.737209][ T5783] ? xfs_error_report+0x8e/0xd0 [ 114.742081][ T5783] ? xfs_create_tmpfile+0x697/0xb60 [ 114.747299][ T5783] ? xfs_create_tmpfile+0x697/0xb60 [ 114.752524][ T5783] xfs_trans_cancel+0x1c9/0x410 [ 114.757400][ T5783] ? xfs_create_tmpfile+0x697/0xb60 [ 114.762626][ T5783] xfs_create_tmpfile+0x697/0xb60 [ 114.767686][ T5783] ? xfs_irele+0x1f0/0x1f0 [ 114.772144][ T5783] ? posix_acl_create+0x155/0x420 [ 114.777330][ T5783] xfs_generic_create+0x341/0xd00 [ 114.782383][ T5783] ? xfs_vn_tmpfile+0x40/0x40 [ 114.787091][ T5783] ? _raw_spin_unlock+0x24/0x40 [ 114.791957][ T5783] ? d_alloc+0x194/0x1d0 [ 114.796214][ T5783] ? mode_strip_sgid+0x9e/0x210 [ 114.801091][ T5783] vfs_tmpfile+0x201/0x2e0 [ 114.805544][ T5783] do_tmpfile+0x198/0x470 [ 114.809900][ T5783] ? fsuidgid_has_mapping+0x300/0x300 [ 114.815305][ T5783] path_openat+0x291d/0x2f20 [ 114.819917][ T5783] ? stack_trace_snprint+0xe0/0xe0 [ 114.825052][ T5783] ? validate_chain+0x112/0x5930 [ 114.830113][ T5783] ? mark_lock+0x98/0x340 [ 114.834465][ T5783] ? __lock_acquire+0x1295/0x1ff0 [ 114.839542][ T5783] ? mark_lock+0x98/0x340 [ 114.843966][ T5783] ? __lock_acquire+0x1295/0x1ff0 [ 114.849005][ T5783] ? do_filp_open+0x460/0x460 [ 114.853707][ T5783] do_filp_open+0x21c/0x460 [ 114.858294][ T5783] ? vfs_tmpfile+0x2e0/0x2e0 [ 114.862892][ T5783] ? _raw_spin_unlock+0x24/0x40 [ 114.867747][ T5783] ? alloc_fd+0x598/0x630 [ 114.872108][ T5783] do_sys_openat2+0x13b/0x4f0 [ 114.876813][ T5783] ? do_sys_open+0x220/0x220 [ 114.881440][ T5783] __x64_sys_openat+0x243/0x290 [ 114.886318][ T5783] ? __ia32_sys_open+0x270/0x270 [ 114.891287][ T5783] ? syscall_enter_from_user_mode+0x2e/0x240 [ 114.897291][ T5783] ? lockdep_hardirqs_on+0x94/0x130 [ 114.902519][ T5783] ? syscall_enter_from_user_mode+0x2e/0x240 [ 114.908530][ T5783] do_syscall_64+0x3b/0xb0 [ 114.912967][ T5783] ? clear_bhb_loop+0x15/0x70 [ 114.917665][ T5783] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.923579][ T5783] RIP: 0033:0x7f17e94a3169 [ 114.927991][ T5783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.947602][ T5783] RSP: 002b:00007f17e730c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.956039][ T5783] RAX: ffffffffffffffda RBX: 00007f17e96bbfa0 RCX: 00007f17e94a3169 [ 114.964014][ T5783] RDX: 92462658b1574913 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 114.971985][ T5783] RBP: 00007f17e95242a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.979952][ T5783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.987935][ T5783] R13: 0000000000000000 R14: 00007f17e96bbfa0 R15: 00007ffcf882c548 [ 114.995927][ T5783] [ 115.006061][ T5783] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x1e2/0x410 (fs/xfs/xfs_trans.c:955). Shutting down filesystem. [ 115.021160][ T5783] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 115.237776][ T4165] XFS (loop0): Unmounting Filesystem [ 115.558513][ T5848] loop5: detected capacity change from 0 to 2048 [ 115.698989][ T5848] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.388185][ T5873] loop3: detected capacity change from 0 to 256 [ 116.565486][ T5850] loop1: detected capacity change from 0 to 40427 [ 116.608692][ T5873] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 116.638823][ T5850] F2FS-fs (loop1): invalid crc value [ 116.642814][ T5881] syz.0.525[5881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.648562][ T5881] syz.0.525[5881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.658905][ T5850] F2FS-fs (loop1): Found nat_bits in checkpoint [ 116.861646][ T5887] loop0: detected capacity change from 0 to 128 [ 116.883473][ T5850] F2FS-fs (loop1): Start checkpoint disabled! [ 116.948872][ T5887] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 116.962775][ T5850] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 117.036228][ T5850] attempt to access beyond end of device [ 117.036228][ T5850] loop1: rw=10241, want=45104, limit=40427 [ 117.054745][ T5850] attempt to access beyond end of device [ 117.054745][ T5850] loop1: rw=2049, want=45104, limit=40427 [ 117.121115][ T5887] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.184586][ T5867] loop5: detected capacity change from 0 to 32768 [ 117.200405][ T5887] ext2 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.243013][ T5867] XFS: ikeep mount option is deprecated. [ 117.320585][ T5898] loop2: detected capacity change from 0 to 16 [ 117.356940][ T154] attempt to access beyond end of device [ 117.356940][ T154] loop1: rw=2049, want=40976, limit=40427 [ 117.379278][ T5898] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 117.415712][ T5892] loop3: detected capacity change from 0 to 8192 [ 117.494210][ T5892] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 117.550071][ T5867] XFS (loop5): Mounting V5 Filesystem [ 117.583838][ T5892] REISERFS (device loop3): using ordered data mode [ 117.590504][ T5892] reiserfs: using flush barriers [ 117.694476][ T5892] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.785878][ T5867] XFS (loop5): Ending clean mount [ 117.800247][ T5867] XFS (loop5): Quotacheck needed: Please wait. [ 117.831228][ T5892] REISERFS (device loop3): checking transaction log (loop3) [ 117.926432][ T5915] netlink: 'syz.2.535': attribute type 2 has an invalid length. [ 117.985464][ T5867] XFS (loop5): Quotacheck: Done. [ 118.048722][ T5915] netlink: 'syz.2.535': attribute type 2 has an invalid length. [ 118.068723][ T5867] XFS (loop5): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x42b dinode [ 118.119952][ T5867] XFS (loop5): Unmount and run xfs_repair [ 118.152372][ T5867] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 118.159969][ T5867] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 118.199603][ T5867] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 118.209360][ T5892] REISERFS (device loop3): Using tea hash to sort names [ 118.230299][ T5920] syz.2.538[5920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.230449][ T5920] syz.2.538[5920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.245557][ T5867] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 118.272783][ T5892] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 118.319536][ T5867] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 118.372754][ T5867] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 118.402080][ T5867] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 118.449729][ T5867] 00000060: ff ff ff ff 65 3f 0d b5 00 00 00 00 00 00 00 00 ....e?.......... [ 118.466366][ T5927] loop1: detected capacity change from 0 to 128 [ 118.473183][ T5867] 00000070: 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 ................ [ 118.482109][ T5867] XFS (loop5): Internal error xfs_trans_cancel at line 954 of file fs/xfs/xfs_trans.c. Caller xfs_create_tmpfile+0x697/0xb60 [ 118.525282][ T5867] CPU: 1 PID: 5867 Comm: syz.5.518 Not tainted 5.15.179-syzkaller #0 [ 118.533404][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.543487][ T5867] Call Trace: [ 118.546778][ T5867] [ 118.549718][ T5867] dump_stack_lvl+0x1e3/0x2d0 [ 118.554431][ T5867] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 118.560090][ T5867] ? xfs_init_new_inode+0x1e8/0x1100 [ 118.565397][ T5867] ? xfs_trans_alloc_icreate+0x18f/0x2b0 [ 118.571056][ T5867] ? xfs_error_report+0x8e/0xd0 [ 118.575915][ T5867] ? xfs_create_tmpfile+0x697/0xb60 [ 118.581129][ T5867] ? xfs_create_tmpfile+0x697/0xb60 [ 118.586354][ T5867] xfs_trans_cancel+0x1c9/0x410 [ 118.591228][ T5867] ? xfs_create_tmpfile+0x697/0xb60 [ 118.596445][ T5867] xfs_create_tmpfile+0x697/0xb60 [ 118.601499][ T5867] ? xfs_irele+0x1f0/0x1f0 [ 118.605950][ T5867] ? posix_acl_create+0x155/0x420 [ 118.610999][ T5867] xfs_generic_create+0x341/0xd00 [ 118.616064][ T5867] ? xfs_vn_tmpfile+0x40/0x40 [ 118.620767][ T5867] ? _raw_spin_unlock+0x24/0x40 [ 118.625629][ T5867] ? d_alloc+0x194/0x1d0 [ 118.629889][ T5867] ? mode_strip_sgid+0x9e/0x210 [ 118.634759][ T5867] vfs_tmpfile+0x201/0x2e0 [ 118.639201][ T5867] do_tmpfile+0x198/0x470 [ 118.643548][ T5867] ? fsuidgid_has_mapping+0x300/0x300 [ 118.648945][ T5867] path_openat+0x291d/0x2f20 [ 118.653534][ T5867] ? stack_trace_snprint+0xe0/0xe0 [ 118.658654][ T5867] ? validate_chain+0x112/0x5930 [ 118.663614][ T5867] ? mark_lock+0x98/0x340 [ 118.667959][ T5867] ? __lock_acquire+0x1295/0x1ff0 [ 118.672990][ T5867] ? mark_lock+0x98/0x340 [ 118.677326][ T5867] ? __lock_acquire+0x1295/0x1ff0 [ 118.682353][ T5867] ? do_filp_open+0x460/0x460 [ 118.687065][ T5867] do_filp_open+0x21c/0x460 [ 118.691586][ T5867] ? vfs_tmpfile+0x2e0/0x2e0 [ 118.696192][ T5867] ? _raw_spin_unlock+0x24/0x40 [ 118.701051][ T5867] ? alloc_fd+0x598/0x630 [ 118.705390][ T5867] do_sys_openat2+0x13b/0x4f0 [ 118.710076][ T5867] ? do_sys_open+0x220/0x220 [ 118.714679][ T5867] __x64_sys_openat+0x243/0x290 [ 118.719533][ T5867] ? __ia32_sys_open+0x270/0x270 [ 118.724471][ T5867] ? syscall_enter_from_user_mode+0x2e/0x240 [ 118.730450][ T5867] ? lockdep_hardirqs_on+0x94/0x130 [ 118.735648][ T5867] ? syscall_enter_from_user_mode+0x2e/0x240 [ 118.741627][ T5867] do_syscall_64+0x3b/0xb0 [ 118.746078][ T5867] ? clear_bhb_loop+0x15/0x70 [ 118.750755][ T5867] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.756730][ T5867] RIP: 0033:0x7f1948a07169 [ 118.761145][ T5867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.780771][ T5867] RSP: 002b:00007f1946870038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 118.789198][ T5867] RAX: ffffffffffffffda RBX: 00007f1948c1ffa0 RCX: 00007f1948a07169 [ 118.797166][ T5867] RDX: 92462658b1574913 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 118.805136][ T5867] RBP: 00007f1948a882a0 R08: 0000000000000000 R09: 0000000000000000 [ 118.813106][ T5867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.821080][ T5867] R13: 0000000000000000 R14: 00007f1948c1ffa0 R15: 00007fff3565cab8 [ 118.829073][ T5867] [ 118.872439][ T5927] EXT4-fs (loop1): Ignoring removed nobh option [ 118.893111][ T5867] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x1e2/0x410 (fs/xfs/xfs_trans.c:955). Shutting down filesystem. [ 118.932178][ T5867] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 118.958377][ T5927] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 119.030269][ T5927] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.099389][ T5916] loop0: detected capacity change from 0 to 32768 [ 119.277245][ T5916] XFS (loop0): Mounting V5 Filesystem [ 119.354761][ T5925] loop2: detected capacity change from 0 to 32768 [ 119.429091][ T4326] XFS (loop5): Unmounting Filesystem [ 119.442089][ T5916] XFS (loop0): Ending clean mount [ 119.518412][ T5916] XFS (loop0): Quotacheck needed: Please wait. [ 119.599096][ T5925] XFS (loop2): Mounting V5 Filesystem [ 119.687147][ T5925] XFS (loop2): Ending clean mount [ 119.690778][ T5916] XFS (loop0): Quotacheck: Done. [ 119.743144][ T5933] loop3: detected capacity change from 0 to 32768 [ 119.776405][ T5933] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.542 (5933) [ 119.821729][ T5957] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 119.848473][ T4178] XFS (loop2): Unmounting Filesystem [ 119.870215][ T5933] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 119.904927][ T5933] BTRFS info (device loop3): using free space tree [ 119.911479][ T5933] BTRFS info (device loop3): has skinny extents [ 119.922046][ T4165] XFS (loop0): Unmounting Filesystem [ 120.104730][ T5967] syz.1.550[5967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.104829][ T5967] syz.1.550[5967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.456734][ T5933] BTRFS info (device loop3): enabling ssd optimizations [ 120.618544][ T5991] loop1: detected capacity change from 0 to 2048 [ 120.686649][ T5991] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 120.718426][ T5994] sctp: [Deprecated]: syz.0.559 (pid 5994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.718426][ T5994] Use struct sctp_sack_info instead [ 120.782347][ T5991] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.687508][ T6030] loop5: detected capacity change from 0 to 256 [ 121.773341][ T6032] loop3: detected capacity change from 0 to 128 [ 121.785522][ T6030] exfat: Deprecated parameter 'utf8' [ 121.806121][ T6034] loop0: detected capacity change from 0 to 256 [ 121.853104][ T6030] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 121.891505][ T6034] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 122.236041][ T6044] loop0: detected capacity change from 0 to 1024 [ 122.440173][ T4233] hfsplus: bad catalog file entry [ 122.446844][ T6050] loop2: detected capacity change from 0 to 8 [ 122.457398][ T6044] hfsplus: xattr searching failed [ 122.463618][ T4233] hfsplus: b-tree write err: -5, ino 3 [ 122.490216][ T6018] loop1: detected capacity change from 0 to 32768 [ 122.512519][ T6044] hfsplus: bad catalog file entry [ 122.601597][ T6050] SQUASHFS error: zlib decompression failed, data probably corrupt [ 122.603753][ T6018] XFS: ikeep mount option is deprecated. [ 122.611137][ T6050] SQUASHFS error: Failed to read block 0x4de: -5 [ 122.630603][ T6050] SQUASHFS error: Failed to read block 0x4e2: -5 [ 122.638102][ T6050] SQUASHFS error: Failed to read block 0x9ca: -5 [ 122.678811][ T6050] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 122.708614][ T1402] hfsplus: bad catalog file entry [ 122.809477][ T6050] SQUASHFS error: Failed to read block 0x35f2: -5 [ 122.886126][ T6040] loop3: detected capacity change from 0 to 32768 [ 122.916131][ T26] audit: type=1800 audit(1743887086.064:46): pid=6050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.580" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 122.958349][ T6040] (syz.3.575,6040,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.970592][ T6018] XFS (loop1): Mounting V5 Filesystem [ 122.993424][ T6040] (syz.3.575,6040,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 123.005511][ T6064] loop0: detected capacity change from 0 to 256 [ 123.032528][ T4618] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 123.120629][ T6040] JBD2: Ignoring recovery information on journal [ 123.262440][ T6040] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 123.273190][ T6018] XFS (loop1): Ending clean mount [ 123.280975][ T6018] XFS (loop1): Quotacheck needed: Please wait. [ 123.377241][ T6018] XFS (loop1): Quotacheck: Done. [ 123.430009][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 123.444104][ T4618] usb 6-1: config 0 has an invalid interface number: 121 but max is 0 [ 123.464204][ T4618] usb 6-1: config 0 has no interface number 0 [ 123.470332][ T4618] usb 6-1: config 0 interface 121 has no altsetting 0 [ 123.552481][ T4171] ocfs2: Unmounting device (7,3) on (node local) [ 123.632242][ T4170] XFS (loop1): Unmounting Filesystem [ 123.707747][ T4618] usb 6-1: New USB device found, idVendor=12d1, idProduct=9e36, bcdDevice=b1.f8 [ 123.738127][ T4618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.757773][ T4618] usb 6-1: Product: syz [ 123.762047][ T4618] usb 6-1: Manufacturer: syz [ 123.792372][ T4618] usb 6-1: SerialNumber: syz [ 123.832164][ T4618] usb 6-1: config 0 descriptor?? [ 123.893945][ T6084] loop0: detected capacity change from 0 to 1024 [ 123.948569][ T6086] netlink: 'syz.3.588': attribute type 1 has an invalid length. [ 123.975582][ T6086] netlink: 'syz.3.588': attribute type 2 has an invalid length. [ 124.072214][ T6084] hfsplus: request for non-existent node 1280 in B*Tree [ 124.111963][ T6088] loop3: detected capacity change from 0 to 256 [ 124.124713][ T4618] option 6-1:0.121: GSM modem (1-port) converter detected [ 124.134257][ T6084] hfsplus: request for non-existent node 1280 in B*Tree [ 124.157302][ T4618] usb 6-1: USB disconnect, device number 4 [ 124.176230][ T4618] option 6-1:0.121: device disconnected [ 124.252663][ T6088] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 124.335128][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'. [ 124.978445][ T6122] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 125.005840][ T6122] syzkaller1: linktype set to 823 [ 125.137064][ T6132] loop5: detected capacity change from 0 to 16 [ 125.157701][ T6134] netlink: 'syz.3.615': attribute type 1 has an invalid length. [ 125.215863][ T6132] erofs: (device loop5): mounted with root inode @ nid 36. [ 125.256902][ T6132] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 125.308693][ T6132] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851] [ 125.401703][ T6132] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 125.482470][ T4617] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.490117][ T4618] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.510133][ T6148] netlink: 'syz.2.621': attribute type 2 has an invalid length. [ 125.713821][ T6158] loop3: detected capacity change from 0 to 256 [ 125.772367][ T4618] usb 2-1: Using ep0 maxpacket: 8 [ 125.840941][ T6158] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 125.892782][ T6158] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 125.932683][ T4618] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.942620][ T4617] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 125.951683][ T4617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.970212][ T4618] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.004458][ T4617] usb 1-1: config 0 descriptor?? [ 126.009863][ T4618] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.040942][ T4618] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.074657][ T4617] pwc: Creative Labs Webcam Pro Ex detected. [ 126.080936][ T4618] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.099823][ T4618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.302575][ T4617] pwc: Failed to set LED on/off time (-71) [ 126.326722][ T4617] pwc: send_video_command error -71 [ 126.332051][ T4617] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 126.362444][ T4617] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 126.372599][ T4620] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.392488][ T4618] usb 2-1: GET_CAPABILITIES returned 0 [ 126.398146][ T4618] usbtmc 2-1:16.0: can't read capabilities [ 126.433110][ T4617] usb 1-1: USB disconnect, device number 5 [ 126.496030][ T6161] loop5: detected capacity change from 0 to 40427 [ 126.557113][ T6161] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 126.570842][ T6161] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 126.581635][ T6161] F2FS-fs (loop5): invalid crc value [ 126.597435][ T6161] F2FS-fs (loop5): Found nat_bits in checkpoint [ 126.599675][ T4618] usb 2-1: USB disconnect, device number 2 [ 126.662546][ T4620] usb 3-1: Using ep0 maxpacket: 16 [ 126.676453][ T6161] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 126.687377][ T6161] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 126.803871][ T4620] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.832921][ T4620] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.908964][ T6177] loop0: detected capacity change from 0 to 512 [ 126.996600][ T6177] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.632: casefold flag without casefold feature [ 127.011094][ T6177] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.632: couldn't read orphan inode 15 (err -117) [ 127.012645][ T4620] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.033223][ T6177] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 127.072570][ T4620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.108818][ T4620] usb 3-1: Product: syz [ 127.121765][ T4620] usb 3-1: Manufacturer: syz [ 127.142331][ T4618] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.159400][ T4620] usb 3-1: SerialNumber: syz [ 127.223751][ T6181] xt_hashlimit: max too large, truncated to 1048576 [ 127.238580][ T6181] Cannot find set identified by id 0 to match [ 127.376744][ T6185] loop5: detected capacity change from 0 to 1024 [ 127.402425][ T4618] usb 4-1: Using ep0 maxpacket: 8 [ 127.475599][ T6185] hfsplus: request for non-existent node 1280 in B*Tree [ 127.527063][ T6185] hfsplus: request for non-existent node 1280 in B*Tree [ 127.562023][ T6192] loop1: detected capacity change from 0 to 512 [ 127.672752][ T4620] usb 3-1: 0:2 : does not exist [ 127.678230][ T4620] usb 3-1: unit 6 not found! [ 127.710982][ T6192] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.731878][ T4618] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 127.745874][ T4618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.754324][ T4618] usb 4-1: Product: syz [ 127.758510][ T4618] usb 4-1: Manufacturer: syz [ 127.763426][ T4618] usb 4-1: SerialNumber: syz [ 127.775761][ T4618] usb 4-1: config 0 descriptor?? [ 127.782876][ T6192] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.817244][ T4618] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 127.826562][ T6192] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #2: comm syz.1.637: corrupted inode contents [ 127.856697][ T6192] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #2: comm syz.1.637: mark_inode_dirty error [ 127.891489][ T4620] usb 3-1: USB disconnect, device number 5 [ 127.903949][ T6192] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #2: comm syz.1.637: corrupted inode contents [ 127.926757][ T6192] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.637: mark_inode_dirty error [ 128.032454][ T4618] gspca_sn9c2028: read1 error -32 [ 128.082442][ T4618] gspca_sn9c2028: read1 error -32 [ 128.361052][ T4620] usb 4-1: USB disconnect, device number 4 [ 128.538504][ T6213] loop5: detected capacity change from 0 to 128 [ 128.627744][ T6213] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 128.668403][ T6213] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.705749][ T6213] autofs4:pid:6213:autofs_fill_super: pipe file descriptor does not contain proper ops [ 128.918828][ T6222] loop2: detected capacity change from 0 to 1024 [ 129.023383][ T6197] loop0: detected capacity change from 0 to 32768 [ 129.124874][ T6222] hfsplus: request for non-existent node 1280 in B*Tree [ 129.129070][ T6197] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.639 (6197) [ 129.131865][ T6222] hfsplus: request for non-existent node 1280 in B*Tree [ 129.151722][ T6231] loop3: detected capacity change from 0 to 512 [ 129.160241][ T6229] loop1: detected capacity change from 0 to 4096 [ 129.197943][ T6197] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 129.225223][ T6197] BTRFS info (device loop0): using free space tree [ 129.231979][ T6229] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 129.305619][ T6231] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.655: casefold flag without casefold feature [ 129.344805][ T6197] BTRFS info (device loop0): has skinny extents [ 129.419350][ T6231] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.655: couldn't read orphan inode 15 (err -117) [ 129.471074][ T6239] loop2: detected capacity change from 0 to 512 [ 129.506568][ T6231] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 129.636547][ T6197] BTRFS info (device loop0): enabling ssd optimizations [ 129.638466][ T6239] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.682983][ T6239] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.918191][ T6225] loop5: detected capacity change from 0 to 32768 [ 130.101994][ T6225] XFS (loop5): Mounting V5 Filesystem [ 130.282466][ T4242] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 130.350420][ T6276] openvswitch: netlink: Message has 4 unknown bytes. [ 130.376062][ T6261] loop2: detected capacity change from 0 to 32768 [ 130.413183][ T6261] XFS: ikeep mount option is deprecated. [ 130.539967][ T6261] XFS (loop2): Mounting V5 Filesystem [ 130.564057][ T6225] XFS (loop5): Ending clean mount [ 130.570287][ T4242] usb 4-1: Using ep0 maxpacket: 8 [ 130.631516][ T6261] XFS (loop2): Ending clean mount [ 130.649228][ T6261] XFS (loop2): Quotacheck needed: Please wait. [ 130.697284][ T6301] tap0: tun_chr_ioctl cmd 1074025678 [ 130.702912][ T6301] tap0: group set to 0 [ 130.713133][ T4242] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 130.722757][ T4242] usb 4-1: config 0 has no interface number 0 [ 130.750416][ T4326] XFS (loop5): Unmounting Filesystem [ 130.755022][ T6261] XFS (loop2): Quotacheck: Done. [ 130.816877][ T26] audit: type=1800 audit(1743887093.964:47): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.658" name="file0" dev="loop2" ino=9284 res=0 errno=0 [ 130.898340][ T4178] XFS (loop2): Unmounting Filesystem [ 130.939850][ T4242] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 130.962874][ T4242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.987011][ T4242] usb 4-1: Product: syz [ 130.998991][ T4242] usb 4-1: Manufacturer: syz [ 131.026201][ T6305] loop0: detected capacity change from 0 to 256 [ 131.033003][ T4242] usb 4-1: SerialNumber: syz [ 131.061583][ T4242] usb 4-1: config 0 descriptor?? [ 131.358351][ T4242] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 131.369653][ T4242] usb 4-1: No valid video chain found. [ 131.392553][ T4242] usb 4-1: USB disconnect, device number 5 [ 131.433417][ T6311] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 131.459648][ T6311] syzkaller0: linktype set to 512 [ 131.819707][ T6321] loop2: detected capacity change from 0 to 8192 [ 132.110668][ T6334] loop3: detected capacity change from 0 to 4096 [ 132.131354][ T6340] loop5: detected capacity change from 0 to 512 [ 132.156218][ T6334] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 132.220391][ T6334] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 132.316130][ T6334] ntfs3: loop3: Failed to load $Extend. [ 132.400362][ T6340] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,lazytime,,errors=continue. Quota mode: writeback. [ 132.498224][ T6340] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.507881][ T6347] loop2: detected capacity change from 0 to 32768 [ 132.608120][ T6340] EXT4-fs error (device loop5): ext4_lookup:1858: inode #16: comm syz.5.683: unexpected EA_INODE flag [ 132.654886][ T6355] sctp: [Deprecated]: syz.0.686 (pid 6355) Use of int in maxseg socket option. [ 132.654886][ T6355] Use struct sctp_assoc_value instead [ 132.668553][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.675388][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.748698][ T6347] XFS (loop2): Mounting V5 Filesystem [ 132.860369][ T6372] loop0: detected capacity change from 0 to 512 [ 132.929831][ T6372] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.954994][ T6372] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.969312][ T1111] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x1df/0x2a0, xfs_agf block 0x1 [ 132.981168][ T1111] XFS (loop2): Unmount and run xfs_repair [ 132.987630][ T1111] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 132.995696][ T1111] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 10 00 XAGF............ [ 133.005088][ T1111] 00000010: 00 00 00 01 00 00 00 02 00 00 00 04 00 00 00 01 ................ [ 133.021194][ T1111] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 133.030315][ T1111] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d ca 00 00 00 00 ................ [ 133.039538][ T1111] 00000040: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab ..*.w.B.....G.K. [ 133.048645][ T1111] 00000050: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 133.058018][ T1111] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 133.068485][ T1111] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 133.078098][ T6347] XFS (loop2): metadata I/O error in "xfs_read_agf+0x263/0x510" at daddr 0x1 len 1 error 74 [ 133.088401][ T6347] XFS (loop2): Error -117 reserving per-AG metadata reserve pool. [ 133.096800][ T6347] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1cd/0x200 (fs/xfs/xfs_fsops.c:573). Shutting down filesystem. [ 133.099748][ T6379] netem: incorrect ge model size [ 133.112533][ T6347] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 133.126095][ T6347] XFS (loop2): Ending clean mount [ 133.131318][ T6287] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.142725][ T6347] XFS (loop2): Unmounting Filesystem [ 133.216180][ T6379] netem: change failed [ 133.421851][ T6386] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 133.483140][ T6388] netlink: 284 bytes leftover after parsing attributes in process `syz.3.698'. [ 133.582531][ T6287] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.605478][ T6287] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.624881][ T6287] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.802524][ T6287] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.812225][ T6287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.842554][ T6287] usb 2-1: Product: syz [ 133.846856][ T6287] usb 2-1: Manufacturer: syz [ 133.851631][ T6287] usb 2-1: SerialNumber: syz [ 133.904640][ T6287] usb 2-1: selecting invalid altsetting 1 [ 133.998687][ T6415] netlink: 'syz.2.712': attribute type 5 has an invalid length. [ 134.064696][ T6420] loop0: detected capacity change from 0 to 1024 [ 134.175831][ T6420] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 134.202077][ T6420] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 134.227319][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 134.246452][ T6420] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 134.291549][ T6420] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noquota,auto_da_alloc=0x0000000000000008,usrjquota=,norecovery,errors=remount-ro,min_batch_time=0x0000000000000005,jqfmt=vfsv1,. Quota mode: writeback. [ 134.369503][ T6435] loop5: detected capacity change from 0 to 512 [ 134.375957][ T6287] usb 2-1: selecting invalid altsetting 1 [ 134.381812][ T6287] cdc_ncm 2-1:1.0: bind() failure [ 134.543542][ T6435] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 134.559418][ T6008] usb 2-1: USB disconnect, device number 3 [ 134.611180][ T6435] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.702135][ T6451] loop0: detected capacity change from 0 to 1764 [ 134.869869][ T6455] loop3: detected capacity change from 0 to 256 [ 134.923042][ T6455] exfat: Deprecated parameter 'utf8' [ 134.939969][ T6455] exfat: Deprecated parameter 'namecase' [ 135.020684][ T6455] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 135.136418][ T6465] loop5: detected capacity change from 0 to 256 [ 135.320806][ T6465] loop5: detected capacity change from 0 to 1024 [ 135.393662][ T6441] loop2: detected capacity change from 0 to 40427 [ 135.447625][ T154] hfsplus: b-tree write err: -5, ino 4 [ 135.474840][ T6441] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 135.483641][ T6441] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 135.527604][ T6441] F2FS-fs (loop2): Found nat_bits in checkpoint [ 135.592377][ T1111] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.647351][ T6480] loop5: detected capacity change from 0 to 4096 [ 135.685646][ T6480] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 135.709297][ T6480] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 135.722530][ T6441] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 135.730997][ T6441] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 135.747009][ T6480] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 135.784485][ T26] audit: type=1800 audit(1743887098.934:48): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.723" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 135.806213][ T6480] ntfs: volume version 3.1. [ 135.820100][ T26] audit: type=1800 audit(1743887098.934:49): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.723" name="file2" dev="loop2" ino=14 res=0 errno=0 [ 135.841357][ T4178] attempt to access beyond end of device [ 135.841357][ T4178] loop2: rw=2049, want=45112, limit=40427 [ 135.853267][ T1111] usb 2-1: Using ep0 maxpacket: 32 [ 135.975377][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.012481][ T1111] usb 2-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 136.054122][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.095669][ T1111] usb 2-1: config 0 descriptor?? [ 136.244019][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.742'. [ 136.573449][ T6476] loop3: detected capacity change from 0 to 40427 [ 136.640417][ T6476] F2FS-fs (loop3): journaled quota format not specified [ 136.652447][ T1111] usbhid 2-1:0.0: can't add hid device: -71 [ 136.658442][ T1111] usbhid: probe of 2-1:0.0 failed with error -71 [ 136.659510][ T6499] loop5: detected capacity change from 0 to 1024 [ 136.684124][ T1111] usb 2-1: USB disconnect, device number 4 [ 136.883259][ T4377] hfsplus: b-tree write err: -5, ino 4 [ 137.012084][ T6511] bond0: option lp_interval: invalid value (0) [ 137.033257][ T6513] loop2: detected capacity change from 0 to 64 [ 137.049722][ T6511] bond0: option lp_interval: allowed values 1 - 2147483647 [ 137.092381][ T4242] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.342456][ T4242] usb 1-1: Using ep0 maxpacket: 16 [ 137.359319][ T6521] tap0: tun_chr_ioctl cmd 1074025677 [ 137.400556][ T6521] tap0: linktype set to 65534 [ 137.492453][ T4242] usb 1-1: config 4 has an invalid interface number: 52 but max is 1 [ 137.500582][ T4242] usb 1-1: config 4 has an invalid interface number: 52 but max is 1 [ 137.532397][ T4242] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 137.561658][ T4242] usb 1-1: config 4 has no interface number 0 [ 137.579676][ T4242] usb 1-1: config 4 interface 52 altsetting 62 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 137.594786][ T6532] loop5: detected capacity change from 0 to 256 [ 137.621725][ T4242] usb 1-1: config 4 interface 52 has no altsetting 0 [ 137.641721][ T4242] usb 1-1: config 4 interface 52 has no altsetting 1 [ 137.652915][ T6532] exfat: Deprecated parameter 'namecase' [ 137.711869][ T6532] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 137.862762][ T4242] usb 1-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice=18.78 [ 137.872810][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.899622][ T6544] netlink: 'syz.2.767': attribute type 10 has an invalid length. [ 137.908717][ T4242] usb 1-1: Product: syz [ 137.930777][ T4242] usb 1-1: Manufacturer: syz [ 137.942520][ T4242] usb 1-1: SerialNumber: syz [ 138.196514][ T6285] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.252595][ T4242] asix 1-1:4.52 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 138.276523][ T4242] asix: probe of 1-1:4.52 failed with error -71 [ 138.317935][ T4242] usb 1-1: USB disconnect, device number 6 [ 138.462380][ T6285] usb 4-1: Using ep0 maxpacket: 8 [ 138.582968][ T6285] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.608899][ T6285] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.629250][ T6285] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.652120][ T6285] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.690356][ T6285] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.720380][ T6285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.012621][ T6285] usb 4-1: GET_CAPABILITIES returned 0 [ 139.018201][ T6285] usbtmc 4-1:16.0: can't read capabilities [ 139.230447][ T6285] usb 4-1: USB disconnect, device number 6 [ 139.428483][ T6617] loop2: detected capacity change from 0 to 2048 [ 139.521392][ T6626] loop5: detected capacity change from 0 to 1024 [ 139.563249][ T6617] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.942203][ T6649] netlink: 'syz.1.815': attribute type 3 has an invalid length. [ 140.082754][ T6659] loop0: detected capacity change from 0 to 256 [ 140.160213][ T6659] FAT-fs (loop0): bogus number of FAT sectors [ 140.172040][ T6659] FAT-fs (loop0): Can't find a valid FAT filesystem [ 140.347338][ T1111] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 140.605149][ T1111] usb 6-1: Using ep0 maxpacket: 8 [ 140.732533][ T1111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.758124][ T1111] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 140.790822][ T1111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.840610][ T1111] usb 6-1: config 0 descriptor?? [ 141.151684][ T6652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.218161][ T6299] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 141.243033][ T1111] usbhid 6-1:0.0: can't add hid device: -71 [ 141.261576][ T1111] usbhid: probe of 6-1:0.0 failed with error -71 [ 141.277116][ T1111] usb 6-1: USB disconnect, device number 5 [ 141.462438][ T6299] usb 4-1: Using ep0 maxpacket: 32 [ 141.582604][ T6299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.601545][ T6299] usb 4-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 141.623644][ T6299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.643956][ T6299] usb 4-1: config 0 descriptor?? [ 141.657823][ T6689] loop2: detected capacity change from 0 to 32768 [ 141.828310][ T6716] netlink: 'syz.5.842': attribute type 3 has an invalid length. [ 142.222710][ T6299] usbhid 4-1:0.0: can't add hid device: -71 [ 142.228713][ T6299] usbhid: probe of 4-1:0.0 failed with error -71 [ 142.229720][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.854'. [ 142.273867][ T6299] usb 4-1: USB disconnect, device number 7 [ 142.488996][ T6745] loop2: detected capacity change from 0 to 1024 [ 142.735131][ T6754] netlink: 'syz.0.864': attribute type 3 has an invalid length. [ 142.764594][ T6728] loop1: detected capacity change from 0 to 32768 [ 142.933376][ T6728] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 143.019241][ T6749] loop5: detected capacity change from 0 to 32768 [ 143.073561][ T6728] (syz.1.850,6728,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 143.093754][ T6728] (syz.1.850,6728,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 143.112586][ T6749] JBD2: Ignoring recovery information on journal [ 143.184457][ T6728] (syz.1.850,6728,1):ocfs2_rename:1483 ERROR: status = -2 [ 143.248577][ T6728] (syz.1.850,6728,1):ocfs2_rename:1687 ERROR: status = -2 [ 143.314158][ T4242] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 143.323825][ T6749] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 143.327492][ T6775] loop0: detected capacity change from 0 to 1024 [ 143.398093][ T4170] ocfs2: Unmounting device (7,1) on (node local) [ 143.410182][ T6749] [ 143.412547][ T6749] ====================================================== [ 143.419567][ T6749] WARNING: possible circular locking dependency detected [ 143.426590][ T6749] 5.15.179-syzkaller #0 Not tainted [ 143.431789][ T6749] ------------------------------------------------------ [ 143.438802][ T6749] syz.5.860/6749 is trying to acquire lock: [ 143.444716][ T6749] ffff88807dd58650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_write_begin_nolock+0x2242/0x4d20 [ 143.454773][ T6749] [ 143.454773][ T6749] but task is already holding lock: [ 143.462190][ T6749] ffff8880747f3120 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x1cb/0x390 [ 143.472837][ T6749] [ 143.472837][ T6749] which lock already depends on the new lock. [ 143.472837][ T6749] [ 143.483252][ T6749] [ 143.483252][ T6749] the existing dependency chain (in reverse order) is: [ 143.492277][ T6749] [ 143.492277][ T6749] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 143.501158][ T6749] lock_acquire+0x1db/0x4f0 [ 143.506203][ T6749] down_write+0x38/0x60 [ 143.510899][ T6749] ocfs2_lock_global_qf+0x221/0x2a0 [ 143.516634][ T6749] ocfs2_acquire_dquot+0x299/0xb40 [ 143.522280][ T6749] dqget+0x762/0xe90 [ 143.526722][ T6749] __dquot_initialize+0x2d9/0xea0 [ 143.532278][ T6749] ocfs2_get_init_inode+0x154/0x1c0 [ 143.538009][ T6749] ocfs2_mknod+0xdcb/0x2cd0 [ 143.543050][ T6749] ocfs2_create+0x194/0x430 [ 143.548087][ T6749] path_openat+0x130a/0x2f20 [ 143.553217][ T6749] do_filp_open+0x21c/0x460 [ 143.558242][ T6749] do_sys_openat2+0x13b/0x4f0 [ 143.563438][ T6749] __x64_sys_openat+0x243/0x290 [ 143.568801][ T6749] do_syscall_64+0x3b/0xb0 [ 143.573737][ T6749] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.580150][ T6749] [ 143.580150][ T6749] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 143.590669][ T6749] lock_acquire+0x1db/0x4f0 [ 143.595704][ T6749] down_write+0x38/0x60 [ 143.600384][ T6749] ocfs2_lock_global_qf+0x202/0x2a0 [ 143.606100][ T6749] ocfs2_acquire_dquot+0x299/0xb40 [ 143.611728][ T6749] dqget+0x762/0xe90 [ 143.616151][ T6749] __dquot_initialize+0x2d9/0xea0 [ 143.621707][ T6749] ocfs2_get_init_inode+0x154/0x1c0 [ 143.627451][ T6749] ocfs2_mknod+0xdcb/0x2cd0 [ 143.632477][ T6749] ocfs2_create+0x194/0x430 [ 143.637508][ T6749] path_openat+0x130a/0x2f20 [ 143.642634][ T6749] do_filp_open+0x21c/0x460 [ 143.647660][ T6749] do_sys_openat2+0x13b/0x4f0 [ 143.652869][ T6749] __x64_sys_openat+0x243/0x290 [ 143.658289][ T6749] do_syscall_64+0x3b/0xb0 [ 143.663224][ T6749] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.669636][ T6749] [ 143.669636][ T6749] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 143.677289][ T6749] lock_acquire+0x1db/0x4f0 [ 143.682616][ T6749] __mutex_lock_common+0x1da/0x25a0 [ 143.688466][ T6749] mutex_lock_nested+0x17/0x20 [ 143.693760][ T6749] dquot_commit+0x57/0x510 [ 143.698700][ T6749] ext4_write_dquot+0x1fd/0x360 [ 143.704070][ T6749] mark_all_dquot_dirty+0xf7/0x400 [ 143.709697][ T6749] __dquot_alloc_space+0xdd8/0x1090 [ 143.715409][ T6749] ext4_mb_new_blocks+0x12d8/0x4d60 [ 143.721128][ T6749] ext4_ext_map_blocks+0x1b01/0x7630 [ 143.726955][ T6749] ext4_map_blocks+0xa66/0x1c70 [ 143.732325][ T6749] ext4_getblk+0x19f/0x710 [ 143.737254][ T6749] ext4_bread+0x2a/0x170 [ 143.742029][ T6749] ext4_append+0x31f/0x5c0 [ 143.746962][ T6749] ext4_init_new_dir+0x33a/0xa20 [ 143.752415][ T6749] ext4_mkdir+0x4f2/0xce0 [ 143.757265][ T6749] vfs_mkdir+0x3b6/0x590 [ 143.762042][ T6749] do_mkdirat+0x260/0x520 [ 143.766882][ T6749] __x64_sys_mkdirat+0x85/0x90 [ 143.772248][ T6749] do_syscall_64+0x3b/0xb0 [ 143.777209][ T6749] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.783620][ T6749] [ 143.783620][ T6749] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 143.791263][ T6749] lock_acquire+0x1db/0x4f0 [ 143.796283][ T6749] down_write+0x38/0x60 [ 143.800955][ T6749] ext4_truncate+0x974/0x1130 [ 143.806319][ T6749] ext4_setattr+0xf96/0x1990 [ 143.811440][ T6749] notify_change+0xc6d/0xf50 [ 143.816580][ T6749] do_truncate+0x21c/0x300 [ 143.821521][ T6749] do_sys_ftruncate+0x2eb/0x390 [ 143.826915][ T6749] do_syscall_64+0x3b/0xb0 [ 143.831875][ T6749] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.838286][ T6749] [ 143.838286][ T6749] -> #2 (jbd2_handle){++++}-{0:0}: [ 143.845581][ T6749] lock_acquire+0x1db/0x4f0 [ 143.850601][ T6749] start_this_handle+0x12e1/0x1570 [ 143.856229][ T6749] jbd2__journal_start+0x2d1/0x5c0 [ 143.861876][ T6749] jbd2_journal_start+0x25/0x30 [ 143.867243][ T6749] ocfs2_start_trans+0x3c2/0x6f0 [ 143.872697][ T6749] ocfs2_mknod+0x15bb/0x2cd0 [ 143.877800][ T6749] ocfs2_create+0x194/0x430 [ 143.882814][ T6749] path_openat+0x130a/0x2f20 [ 143.887937][ T6749] do_filp_open+0x21c/0x460 [ 143.892952][ T6749] do_sys_openat2+0x13b/0x4f0 [ 143.898172][ T6749] __x64_sys_openat+0x243/0x290 [ 143.903541][ T6749] do_syscall_64+0x3b/0xb0 [ 143.908475][ T6749] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.914905][ T6749] [ 143.914905][ T6749] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 143.923412][ T6749] lock_acquire+0x1db/0x4f0 [ 143.928433][ T6749] down_read+0x45/0x2e0 [ 143.933110][ T6749] ocfs2_start_trans+0x3b7/0x6f0 [ 143.938571][ T6749] ocfs2_mknod+0x15bb/0x2cd0 [ 143.943675][ T6749] ocfs2_create+0x194/0x430 [ 143.948693][ T6749] path_openat+0x130a/0x2f20 [ 143.953799][ T6749] do_filp_open+0x21c/0x460 [ 143.958813][ T6749] do_sys_openat2+0x13b/0x4f0 [ 143.964003][ T6749] __x64_sys_openat+0x243/0x290 [ 143.969367][ T6749] do_syscall_64+0x3b/0xb0 [ 143.974299][ T6749] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.980712][ T6749] [ 143.980712][ T6749] -> #0 (sb_internal#3){.+.+}-{0:0}: [ 143.988188][ T6749] validate_chain+0x1649/0x5930 [ 143.993557][ T6749] __lock_acquire+0x1295/0x1ff0 [ 143.998922][ T6749] lock_acquire+0x1db/0x4f0 [ 144.003937][ T6749] ocfs2_start_trans+0x2b2/0x6f0 [ 144.009393][ T6749] ocfs2_write_begin_nolock+0x2242/0x4d20 [ 144.015631][ T6749] ocfs2_write_begin+0x1fd/0x390 [ 144.021087][ T6749] generic_perform_write+0x2bf/0x5b0 [ 144.026890][ T6749] __generic_file_write_iter+0x243/0x4f0 [ 144.033036][ T6749] ocfs2_file_write_iter+0x1980/0x2120 [ 144.039021][ T6749] vfs_write+0xacd/0xe50 [ 144.043779][ T6749] ksys_write+0x1a2/0x2c0 [ 144.048642][ T6749] do_syscall_64+0x3b/0xb0 [ 144.053574][ T6749] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.059983][ T6749] [ 144.059983][ T6749] other info that might help us debug this: [ 144.059983][ T6749] [ 144.070200][ T6749] Chain exists of: [ 144.070200][ T6749] sb_internal#3 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 144.070200][ T6749] [ 144.087148][ T6749] Possible unsafe locking scenario: [ 144.087148][ T6749] [ 144.094587][ T6749] CPU0 CPU1 [ 144.099943][ T6749] ---- ---- [ 144.105298][ T6749] lock(&ocfs2_quota_ip_alloc_sem_key); [ 144.110921][ T6749] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 144.120722][ T6749] lock(&ocfs2_quota_ip_alloc_sem_key); [ 144.128866][ T6749] lock(sb_internal#3); [ 144.133119][ T6749] [ 144.133119][ T6749] *** DEADLOCK *** [ 144.133119][ T6749] [ 144.141260][ T6749] 4 locks held by syz.5.860/6749: [ 144.146273][ T6749] #0: ffff88804a2e59f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2cb/0x380 [ 144.155515][ T6749] #1: ffff88807dd58460 (sb_writers#19){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 144.164479][ T6749] #2: ffff8880747f3488 (&sb->s_type->i_mutex_key#26){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x41c/0x2120 [ 144.175790][ T6749] #3: ffff8880747f3120 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x1cb/0x390 [ 144.186835][ T6749] [ 144.186835][ T6749] stack backtrace: [ 144.192711][ T6749] CPU: 1 PID: 6749 Comm: syz.5.860 Not tainted 5.15.179-syzkaller #0 [ 144.200779][ T6749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.210826][ T6749] Call Trace: [ 144.214099][ T6749] [ 144.217023][ T6749] dump_stack_lvl+0x1e3/0x2d0 [ 144.221702][ T6749] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 144.227335][ T6749] ? print_circular_bug+0x12b/0x1a0 [ 144.232533][ T6749] check_noncircular+0x2f8/0x3b0 [ 144.237471][ T6749] ? add_chain_block+0x850/0x850 [ 144.242408][ T6749] ? lockdep_lock+0x11f/0x2a0 [ 144.247104][ T6749] validate_chain+0x1649/0x5930 [ 144.251957][ T6749] ? reacquire_held_locks+0x660/0x660 [ 144.257327][ T6749] ? reacquire_held_locks+0x660/0x660 [ 144.262716][ T6749] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 144.268693][ T6749] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 144.274580][ T6749] ? lockdep_hardirqs_on+0x94/0x130 [ 144.279778][ T6749] ? mark_lock+0x98/0x340 [ 144.284103][ T6749] __lock_acquire+0x1295/0x1ff0 [ 144.288956][ T6749] lock_acquire+0x1db/0x4f0 [ 144.293454][ T6749] ? ocfs2_write_begin_nolock+0x2242/0x4d20 [ 144.299348][ T6749] ? read_lock_is_recursive+0x10/0x10 [ 144.304722][ T6749] ? __might_sleep+0xc0/0xc0 [ 144.309317][ T6749] ? do_raw_spin_unlock+0x137/0x8b0 [ 144.314513][ T6749] ocfs2_start_trans+0x2b2/0x6f0 [ 144.319447][ T6749] ? ocfs2_write_begin_nolock+0x2242/0x4d20 [ 144.325349][ T6749] ? ocfs2_recovery_exit+0x280/0x280 [ 144.330637][ T6749] ? ocfs2_write_begin_nolock+0x423/0x4d20 [ 144.336463][ T6749] ocfs2_write_begin_nolock+0x2242/0x4d20 [ 144.342183][ T6749] ? lockdep_lock+0x2a0/0x2a0 [ 144.346851][ T6749] ? mutex_unlock+0x10/0x10 [ 144.351362][ T6749] ? ocfs2_read_blocks_sync+0xbc0/0xbc0 [ 144.356911][ T6749] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 144.362715][ T6749] ? ocfs2_inode_lock_full_nested+0x177/0x1bf0 [ 144.368865][ T6749] ? ocfs2_read_inode_block+0x148/0x1d0 [ 144.374423][ T6749] ? read_lock_is_recursive+0x10/0x10 [ 144.379802][ T6749] ? rwsem_write_trylock+0x166/0x210 [ 144.385082][ T6749] ? print_irqtrace_events+0x210/0x210 [ 144.390536][ T6749] ? clear_nonspinnable+0x60/0x60 [ 144.395558][ T6749] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 144.401363][ T6749] ocfs2_write_begin+0x1fd/0x390 [ 144.406303][ T6749] ? ocfs2_readahead+0x1a0/0x1a0 [ 144.411237][ T6749] ? __vfs_getxattr+0x3e0/0x410 [ 144.416086][ T6749] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 144.422001][ T6749] generic_perform_write+0x2bf/0x5b0 [ 144.427291][ T6749] ? grab_cache_page_write_begin+0x90/0x90 [ 144.433095][ T6749] ? file_remove_privs+0x610/0x610 [ 144.438205][ T6749] ? do_raw_spin_unlock+0x137/0x8b0 [ 144.443405][ T6749] __generic_file_write_iter+0x243/0x4f0 [ 144.449036][ T6749] ? ocfs2_inode_unlock+0x122/0x150 [ 144.454229][ T6749] ocfs2_file_write_iter+0x1980/0x2120 [ 144.459690][ T6749] ? ocfs2_file_read_iter+0xb10/0xb10 [ 144.465062][ T6749] ? read_lock_is_recursive+0x10/0x10 [ 144.470429][ T6749] ? rcu_read_lock_any_held+0xb3/0x160 [ 144.475886][ T6749] ? rcu_read_lock_bh_held+0x110/0x110 [ 144.481340][ T6749] ? end_current_label_crit_section+0x147/0x170 [ 144.487583][ T6749] ? iov_iter_init+0x4a/0x170 [ 144.492260][ T6749] vfs_write+0xacd/0xe50 [ 144.496502][ T6749] ? file_end_write+0x250/0x250 [ 144.501351][ T6749] ? __fget_files+0x413/0x480 [ 144.506031][ T6749] ? mutex_lock_nested+0x17/0x20 [ 144.510976][ T6749] ? __fdget_pos+0x2cb/0x380 [ 144.515596][ T6749] ? ksys_write+0x77/0x2c0 [ 144.520027][ T6749] ksys_write+0x1a2/0x2c0 [ 144.524388][ T6749] ? print_irqtrace_events+0x210/0x210 [ 144.529859][ T6749] ? __ia32_sys_read+0x80/0x80 [ 144.534620][ T6749] ? syscall_enter_from_user_mode+0x2e/0x240 [ 144.540596][ T6749] ? lockdep_hardirqs_on+0x94/0x130 [ 144.545791][ T6749] ? syscall_enter_from_user_mode+0x2e/0x240 [ 144.551787][ T6749] do_syscall_64+0x3b/0xb0 [ 144.556204][ T6749] ? clear_bhb_loop+0x15/0x70 [ 144.560876][ T6749] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.566763][ T6749] RIP: 0033:0x7f1948a07169 [ 144.571183][ T6749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.590782][ T6749] RSP: 002b:00007f1946870038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.599196][ T6749] RAX: ffffffffffffffda RBX: 00007f1948c1ffa0 RCX: 00007f1948a07169 [ 144.607162][ T6749] RDX: 0000000000000007 RSI: 0000200000000280 RDI: 0000000000000004 [ 144.615132][ T6749] RBP: 00007f1948a882a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.623100][ T6749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.631084][ T6749] R13: 0000000000000000 R14: 00007f1948c1ffa0 R15: 00007fff3565cab8 [ 144.639065][ T6749] [ 144.715440][ T6749] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 144.782366][ T4242] usb 3-1: Using ep0 maxpacket: 32 [ 144.790524][ T6749] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 144.802793][ T6749] OCFS2: File system is now read-only. [ 144.808326][ T6749] (syz.5.860,6749,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 144.816454][ T6749] (syz.5.860,6749,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 144.824569][ T6749] (syz.5.860,6749,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 144.833825][ T6749] (syz.5.860,6749,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 144.842824][ T6749] (syz.5.860,6749,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 144.862453][ T6749] (syz.5.860,6749,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 144.883203][ T6749] (syz.5.860,6749,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 144.894648][ T6749] (syz.5.860,6749,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 144.903633][ T6749] (syz.5.860,6749,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 144.912726][ T6749] (syz.5.860,6749,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 144.921616][ T6749] (syz.5.860,6749,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 144.930590][ T4242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.932404][ T6749] (syz.5.860,6749,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 144.941976][ T4242] usb 3-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 144.953447][ T6749] (syz.5.860,6749,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 144.960741][ T4242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.969117][ T6749] (syz.5.860,6749,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 144.986024][ T4242] usb 3-1: config 0 descriptor?? [ 144.986959][ T6749] (syz.5.860,6749,0):ocfs2_convert_inline_data_to_extents:7066 ERROR: status = -30 [ 145.000372][ T6749] (syz.5.860,6749,1):ocfs2_allocate_unwritten_extents:1464 ERROR: status = -30 [ 145.011732][ T6749] (syz.5.860,6749,1):__ocfs2_change_file_space:2048 ERROR: status = -30 [ 145.030092][ T4326] ocfs2: Unmounting device (7,5) on (node local) [ 145.552462][ T4242] usbhid 3-1:0.0: can't add hid device: -71 [ 145.558589][ T4242] usbhid: probe of 3-1:0.0 failed with error -71 [ 145.567823][ T4242] usb 3-1: USB disconnect, device number 6