last executing test programs: 5.905610393s ago: executing program 0 (id=2145): openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00'}, 0x45c) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x40187014, &(0x7f0000000080)) 5.700524071s ago: executing program 0 (id=2146): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x96d4, &(0x7f00000097c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x1) getdents64(r0, 0x0, 0x44) 4.6838359s ago: executing program 1 (id=2154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 4.437726471s ago: executing program 1 (id=2155): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3f, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x9, 0x0, @opaque="e9"}}}}}}, 0x0) 4.244682209s ago: executing program 1 (id=2156): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), 0x4) 4.016692668s ago: executing program 1 (id=2157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x100) mount(&(0x7f0000000340)=@filename='\x00', &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000040)='&@,,') 3.354306996s ago: executing program 2 (id=2159): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 3.353534006s ago: executing program 0 (id=2169): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x0, @empty}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0xca, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 3.307824231s ago: executing program 1 (id=2161): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.901840176s ago: executing program 2 (id=2162): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r1, 0x851, 0x0) 2.732843031s ago: executing program 2 (id=2163): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000380)='%', 0x1}], 0x1, 0x0, 0x0, 0x20044810}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000280)="5ded2c77da329c867fb391b36e6277e1d82e9d4022b962f2a50d19f1e602eb1bba1d77bb6dfa178ada8bd3ddae269b5f6e9934c6ebf3671bd43fe68f3dfeea54d80516a3162550d0af58ec9807c5e43ec88e329aa4d8ab8ea2df0a91d9a79f7dad9aa690521029cf9353c728490eef071dedbfd0dff70dbd8a6c385ef24b8e027d3affd8453a22811b", 0x89}], 0x1, 0x0, 0x0, 0x880}}], 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/223, 0xdf}], 0x1, &(0x7f0000000b40)=""/211, 0xd3}, 0x10101) 2.530795149s ago: executing program 2 (id=2164): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'veth0_vlan\x00', 0x3ae9}) 2.530676319s ago: executing program 4 (id=2165): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pause() 2.378176162s ago: executing program 3 (id=2166): socket(0x23, 0x5, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xc7f, 0x0, 0x0, 0x0, 0x0) 2.28244244s ago: executing program 0 (id=2167): r0 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x65c7, 0x800, 0x3, 0x2c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)={0x77359400}, 0x1, 0x0, 0x1}) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 2.233267955s ago: executing program 2 (id=2168): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000080)='./file0\x00', 0x810, &(0x7f0000000000), 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4ff, 0x100000001}) 2.150387362s ago: executing program 3 (id=2170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 2.102073286s ago: executing program 0 (id=2171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}}, 0x0) 1.930728021s ago: executing program 0 (id=2172): syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x208c1b, &(0x7f0000013100)=ANY=[@ANYBLOB="006046ce655a83336f4aa4cc5e7744cd201009c75397a28c886eba4a45b2a3f7aa5d677c448529d13a5a5980007300c4e4516d4a4cf7d92fed5e7144bf2ff319114e14e61d98a5dbe1e6a43517148fa5e865454da297c78e2efcf9661278ce705781d0e461bc521b44d360729a84b4881343"], 0x1, 0x12752, &(0x7f0000000980)="$eJzs/XkYqHO9L36ve17KPCRCKSQlIqEkYyWRIRlSCYWoCGUoQ0rSQCpjKpQpSZISocxCRKQyRgoRSVR4rn32e519P+fcz75P+zz7ue7r+b1ef+zPvW2+e/1+1z7X+/1eS2vNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBkzZhTPWWjXfzu9v7T9v59uthkzul3+/Xvuf/svs/f+nvLfz8yF/j88m793tiV3+eB2O7/rAx/8t/Nf+vHtvvc+r959733+S//s/4mXPLLxaj9Z6C3POep1Z5y16FU/Xue/7X8RAAAAAAAAAPw3yq//l72/dOX/8rd0M2bMnPN/+WvzzZgxc/YZM8rq6mu/87P/m//9m2/G/6P99Zn/m//zAQAA4P9Q9n/d+yuH9//HufPNmHHgAf/bX/+ff2Vm+2//dbuPPvLY0O15bv7+5/7HXyr/t4//RvPnLpD7nNwF/99/fAAAAPD/X7L/m95f6W/2Wf/5/oVzn5e7SO6iuYvlPj/3BbmL574w90W5S+QumbtU7otzl859Se4yuS/NfVnusrkvz10ud/ncV+SukLti7itzV8p9Ve7Kuavkrpr76tzX5K6W+9rc1XNfl7tG7pq5a+WunTvr9xlYN/f1uW/IfWPuerlvyl0/9825G+RumPuW3I1yN87dJHfT3Lfmbpb7ttzNc7fI3TJ3q9y3526d+47cd+a+K3eb3Hfnbpu7XW5+j4kZ78l9b+4OuTvm7pT7vtxZv4lEfl+KGe/P/UDuB3N3zd0t90O5u+fukbtn7odzP5K7V+7eubN+A4p9cz+a+7Hc/XL3z531M2MH5n4896DcT+R+Mvfg3E/lHpL76dxDcz+T+9ncz+V+Pvew3Fk/h/eF3CNyv5j7pdwv5x6Ze1Tu0bnH5B6be1zuV3KPz/1q7tdyv557Qu6JuSflfiP3m7kn556Se2ruabmn534r94zcb+eemfud3LNyv5t7du73cs/J/X7uubk/yP1h7nm5P8o9P/eC3B/nXph7Ue7FuT/J/WnuJbmX5l6We3nuFbmz/h2sq3Kvzp3171pdk3tt7nW5P8+9PveG3F/k3ph7U+4vc2/OvSX3V7m35v469ze5v829Lff23Dty78y9K/fu3N/l3pN7b+7vc+/L/UPuH3Pvz30g98HcP+U+lPtw7p9zH8l9NPcvubMy7q+5j+f+LfeJ3Cdz/577j9x/5j6V+3Ru/mWmWT9tXuSjyM9tF1Vufr69SO4WbW6XOzN3ttxn5T47N7+/TjFHbv79vGKu3Llz58mdN3e+3Pw8eJGfBy/y8+BFfh68yM+DF8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyf9av4RXJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/Z23cIvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5P+sX8ouk/9l/kKZ/C+T/2Xyv0z+l8n/MvlfJv/L5H+Z/C+T/2Xyv0z+l8n/MvlfJv/L5H+Z/C+T/+UC//n+L9MLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIy2VemF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekHif0aVXlClF1T5H1TpBVXyuEovqNILqvSCKr2gSi+o0guq9IIqvaBKL6jSC6r0giq9oEovqNILqvSCKj8vUCX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5X1347/8Pvkr+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/Kvlf3Z9AjCr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyf9a/Z18n/OvlfJ//r/A118r9O/tfJ/zr/n1sn/+vkf538r5P/dfK/Tv7Xyf86+V8n/+t5//P9X6cX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnZ8XqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaDOzwvU+XmBOr2gTi+o0wvqh/89eOv0gjq9oE4vqNML6mRinV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFs+K3SS9o0gua9IImvaDJ39ikFzTpBU16QZNe0KQXNOkFTXpBk17QpBc06QVNekGTXtDk5wWa5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H/zb/n/9DMzmuR/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xv8vMCTfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/ifMZbfK/Tf63yf82+d8m/9v8A23yv03+t8n/NvnfJv/b5H+b/G+T/+1c//n+b9ML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jz8wJtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16Qbv+Fv/+r/ymF7TpBW16QZte0KYXtOkFbXpBm17Qphe0yco2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wsS7zO69IIuvaBLL+jSC7rkd5de0OUf7NILuvSCLr2gSy/o0gu69IIuvaDLzwt0yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/3Yb//n9Q3b/l//7ffHCB5H+X/O+S/92m/8uPM/nfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d7P+rOrkf5f875L/XfK/S/53yf8u+T/rz7fukv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r/72r//R/C65H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/7vb/2ML/479P/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y4/L9Al/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfJ/1r/dMDP5P3PWn7uf/J+Z/J+Z/J+Z/583M/k/Mw/MTP7PTP7PTP7PnP0/3/8z0wtm/f7/M9MLZqYXzEwvmJleMDO9YGZ6wcz0gpnpBTPTC2b6ffYAAADg/4ey/3v/MYpZ/xm9Gf/j1/cO+I/fzGjGKbfNfe8Sq++0wsAzs36fwPn+O3+sAAAAwH/NyP7/cm//F4s+79HnrHP4a5cceGbWnw9g/wMAAMAEjez/I3v7v5xt8RvXOnrj335q4JlZfy6g/Q8AAAATNLL/j+rt/+p7973iu5+85svPHngmv4+P/Q8AAABTNLL/j+7t//qKdW/fY8s59jht4Jn8/r32PwAAAEzRyP4/prf/m48dtNqnVj3pBRcOPJM/t8f+BwAAgCka2f/H9vZ/u9N5i95477Y/WWTgmfx5vfY/AAAATNHI/j+ut/+7G/d/5gXzL3DpnweemfXP/J/t/5n/Fz9gAAAA4F82sv+/0tv/M3f78fw/uvKmJTcZeGbxXL/+DwAAABM0sv+P7+3/2X627+PrnbrPbusOPPPCXPsfAAAAJmhk/3+1t/+fdceatyy6x/mH3zfwzIty7X8AAACYoJH9/7Xe/n/2ez610kM7LXXrzgPPLJFr/wMAAMAEjez/r/f2/+xL37LbGd+/b5WrBp5ZMtf+BwAAgAka2f8n9Pb/HEfM88V3/XK9XW4feGapXPsfAAAAJmhk/5/Y2/9zHvzSs5892yGf++jAMy/Otf8BAABggkb2/0m9/T/Xan/a6ImHdn/m8oFnls61/wEAAGCCRvb/N3r7f+6nf/6yO1c4e7HtB555Sa79DwAAABM0sv+/2dv/86wz23XzbbLIm3YfeGaZXPsfAAAAJmhk/5/c2//zbrTiw2/4/G3fumHgmZfm2v8AAAAwQSP7/5Te/p/v/r/Occ4X17j7HQPPvGzW3/Pf+oMFAAAA/ktG9v+pvf0//1c3v3u3txxYPTPwzLK59j8AAABM0Mj+P623/xdY4gszPr7ccpv/YeCZl+fa/wAAADBBI/v/9N7+f87y31r85r88dO6bBp5ZLtf+BwAAgAka2f/f6u3/BQ99/yVL3rvSpe8feGb5XPsfAAAAJmhk/5/R2//PXfo7S1+06mNL/vw//sf/8+sVufY/AAAATNDI/v92b/8vdMROV795y612+9XAMyvk2v8AAAAwQSP7/8ze/l/44E0feO4njzt8n4FnVsy1/wEAAGCCRvb/d3r7/3mrfXm2B45ub3184JlX5tr/AAAAMEEj+/+s3v5f5F3v3X/Tda5Y5a0Dz6yUa/8DAADABI3s/+/29v+i9379+K8vsdMuaw8886pc+x8AAAAmaGT/n93b/4s9cuwFjz1x6ufuGnhm5Vz7HwAAACZoZP9/r7f/n7/+1u/snr/pM28feGaVXPsfAAAAJmhk/5/T2/8veONFczzvkiMWe3LgmVVz7X8AAACYoJH9//3e/l/80b0f/sNJq73poYFnXp1r/wMAAMAEjez/c3v7/4W/X/u6C/Z/6ltvHnjmNbn2PwAAAEzQyP7/QW//v2jrT77sLdtuc/fFA8+slmv/AwAAwASN7P8f9vb/Eku/+JJDLzyh2nbgmdfm2v8AAAAwQSP7/7ze/l/yiLsW3/v2uTbfc+CZ1XPtfwAAAJigkf3/o97+X+rg38xYtrzu3FsGnnldrv0PAAAAEzSy/8/v7f8Xr7bo3bevOscyWw88s0au/Q8AAAATNLL/L+jt/6W/esds69x7zc+eHnhmzVz7HwAAACZoZP//uLf/X7LEQg/84JPbfu2PA8+slWv/AwAAwASN7P8Le/t/meVfdPXvtjxpv/UHnlk71/4HAACACRrZ/xf19v9LD7136bnXWX3lKwaeWSfX/gcAAIAJGtn/F/f2/8uO/ctsJx/9zM3vGXhm3Vz7HwAAACZoZP//pLf/l33BSg9s9sTGH//QwDOvz7X/AQAAYIJG9v9Pe/v/5a+c6+piicO3u37gmTfk2v8AAAAwQSP7/5Le/l/u81ct/eglO8/zvoFn3phr/wMAAMAEjez/S3v7f/k3P/DW+59/+p+vHHhmvVz7HwAAACZoZP9f1tv/r3h82XMX2r/+xh0Dz7wp1/4HAACACRrZ/5f39v8Kdy941AYnXbbuxwaeWT/X/gcAAIAJGtn/V/T2/4pb3LDnhRduMfsjA8+8Odf+BwAAgAka2f9X9vb/K1+2+7H7bnvMnzYdeGaDXPsfAAAAJmhk/1/V2/8rHfn9vQ4pVz5vnYFnNsy1/wEAAGCCRvb/1b39/6qPH7blb29/fIvfDzzzllz7HwAAACZoZP//rLf/V15lvfOXu3LZZX4y8MxGufY/AAAATNDI/r+mt/9XOfYzG31//gd/tt3AMxvn2v8AAAAwQSP7/9re/l/1BRuc/fo91vraHgPPbJJr/wMAAMAEjez/63r7/9Wv/MgX5z31oP1uHnhm1p8JYP8DAADABI3s/5/39v9rPv/d3e76/mIrbzXwzFtz7X8AAACYoJH9f31v/6/2p7W6LXe64+YnBp7ZLNf+BwAAgAka2f839Pb/azf/xL2nz7bbxx8eeOZtufY/AAAATNDI/v9Fb/+vvvaFlz79y7O222Dgmc1z7X8AAACYoJH9f2Nv/7/uyb2WmmOF9ef528AzW+Ta/wAAADBBI/v/pt7+X+PEHZfd4qFD/7zZwDNb5tr/AAAAMEEj+/+Xvf2/5nPP/Pm3Pr/EN9YaeGbWnwlg/wMAAMAEjez/m3v7f63Zv/TQM5vcu+6dA8+8Pdf+BwAAgAka2f+39Pb/2uduMvvsb9lr9l0Gntk61/4HAACACRrZ/7/q7f91fvrn3131xfP+dN3AM+/Itf8BAABggkb2/629/b/uXq8qXv2XBc+7deCZd+ba/wAAADBBI/v/1739//pdZn/BB5a7eYt9B555V679DwAAABM0sv9/09v/b7j56p8ef/sJ7zhq4Jltcu1/AAAAmKCR/f/b3v5/4x4zX9KV21yw0sAz7861/wEAAGCCRvb/bb39v9511/3ssW2v+8MLB57ZNtf+BwAAgAka2f+39/b/m3792P1fv3Cu2Q4YeGa7XPsfAAAAJmhk/9/R2//rb7PCzE1POmKN2Qee2T7X/gcAAIAJGtn/d/b2/5uX3fbN8+y/6QlnDjzznlz7HwAAACZoZP/f1dv/Gxz1jTPvfv5Tfz1v4Jn35tr/AAAAMEEj+//u3v7f8KCvHnbuJavN/7yBZ3bItf8BAABggkb2/+96+/8tq27x/nWXuOK9Jww8s2Ou/Q8AAAATNLL/7+nt/43+sc8873ii/VQ18MxOufY/AAAATNDI/r+3t/83XvOCv5x59Kk3zj/wzPty7X8AAACYoJH9//sDZsw267/ZZLODf/H3dXZa4dyBZ3bOtf8BAABggkb2/329X//f9OE1lp9ty8f2ffXAM7vk2v8AAAAwQSP7/w+9/f/W4+6+45pPrnTs0QPPvD/X/gcAAIAJGtn/f+zt/80WX+K1r7v3uOsOG3jmA7n2PwAAAEzQyP6/v7f/37bSYovsvOpWyy078MwHc+1/AAAAmKCR/f9Ab/9vftivnj56uQPf8ayBZ3bNtf8BAABggkb2/4O9/b/FsgsvUP5ljQtOHXhmt1z7HwAAACZoZP//qbf/tzzqt3975IsP/eGigWc+lGv/AwAAwASN7P+Hevt/q4N+f/M337LcbIsOPLN7rv0PAAAAEzSy/x/u7f+3r/qCV75tk7PX+MLAM3vk2v8AAAAwQSP7/8+9/b/1Vjeu9dDndz9hxYFn9sy1/wEAAGCCRvb/I739/447F/j6og/d9tclBp75cK79DwAAABM0sv8f7e3/dz623IHrrbDI/AcPPPORXPsfAAAAJmhk//+lt//fteH1c82Ycd97Vxt4Zq9c+x8AAAAmaGT/P9bb/9ts8KzlT55tqU99deCZvXPtfwAAAJigkf3/197+f/ffrvnFZjsdcuOnB57ZJ9f+BwAAgAka2f+P9/b/tr97/C/F99db4aUDz+yba/8DAADABI3s/7/19v92Wy4/z6On3rTvKQPPfDTX/gcAAIAJGtn/T/T2//bLHvH0ynsscGwz8MzHcu1/AAAAmKCR/f9kb/+/56i3LnLp/OdfN+/AM/vl2v8AAAAwQSP7/++9/f/egz7w2sOv3Ge5swae2T/X/gcAAIAJGtn//+jt/x1WPfWO7bZb7W/1wDMH5Nr/AAAAMEEj+/+fvf2/43Hve+WTFz31nJMHnjkw1/4HAACACRrZ/0/19v9Oi59x87Pu2HSt7w488/Fc+x8AAAAmaGT/P93b/+9b6ci/vbM64qShjX9Qrv0PAAAAEzSy/5/p7f+dD9togW8vNtf9Xxt45hO59j8AAABM0H++/7sZvf2/y9VHrzfvT6979msHnvlkrv0PAAAAEzSy/4ve/n//ru/81l0nbvOuZQaeOTjX/gcAAIAJGtn/ZW//f2D77Q/9/n4nXHjIwDOfyrX/AQAAYIJG9n/V2/8fvP3EHV9/zFbXrDDwzKyfE7D/AQAAYIJG9n/d2/+7LnLA/O9c97hlDx945tO59j8AAABM0Mj+b3r7f7eTX//4t5dcae9PDTxzaK79DwAAABM0sv/b3v7/0NkfveXJJx87esmBZz6Ta/8DAADABI3s/663/3ef+aOVnnXPTjecNvDMZ3PtfwAAAJigkf0/s7f/9/joc3/981VOXf7ZA898Ltf+BwAAgAka2f+z9fb/npffvspqW7TbLzLwzOdz7X8AAACYoJH9/6ze/v/wL+5ZaMdPXPHJCweeOSzX/gcAAIAJGtn/z+7t/4/s+MJ/HHfEIn87ZuCZWX8moP0PAAAAEzSy/2fv7f+9rr5z7mLD257zmoFnvpBr/wMAAMAEjez/OXr7f+9dl3r00ZfvvtbLBp45Itf+BwAAgAka2f9z9vb/PtsvcuPJj5590ucHnvlirv0PAAAAEzSy/+fq7f99b//1KzZ7eLn7y4FnvpRr/wMAAMAEjez/uXv7/6M/fskb/rTiQ8/++sAzX861/wEAAGCCRvb/PL39/7Hu4W8utuka7/rBwDNH5tr/AAAAMEEj+3/e3v7fb75ffuJNhx144QIDzxyVa/8DAADABI3s//l6+3//0+Z773k77nPNdwaeOTrX/gcAAIAJGtn/8/f2/wFr33vbfuecv+wcA88ck2v/AwAAwASN7P8Fevv/wCdf9LrP3bTA3gsPPHNsrv0PAAAAEzSy/5/T2/8f/9NCi90686ajfzjwzHG5vf3f/vf8gAEAAIB/2cj+X7C3/w/a/I5/LrPAeje8cuCZr+T69X8AAACYoJH9/9ze/v/Eiz4238NXHbL8kQPPHJ9r/wMAAMAEjez/hXr7/5PHnP/IIqcttf2BA898Nfd/2//P+f/2DxgAAAD4l43s/4V7+//gzx14/Rv3vO+TLxp45mu5fv0fAAAAJmhk/z+vt/8/tfIbVjj/E4cf8POBZ76ea/8DAADABI3s/0V6+/+QL3/y1sW32Pjd7x945oRc+x8AAAAmaGT/L9rb/59ebu3X/GKVZ1baZ+CZE3PtfwAAAJigkf2/WG//H/qavRc++J7Vb/rVwDMn5dr/AAAAMEEj+//5vf3/mQMvemLPJ086/q3/2yP7z/hGvux/AAAAmKCR/f+C3v7/7DUPX7Dyktt+9PGBZ76Za/8DAADABI3s/8V7+/9zH37JOy9d95ql7xp45uRc+x8AAAAmaGT/v7C3/z+/7Xz7H37MHFetPfDMKbn2PwAAAEzQyP5/UW//H/arXx6/3X6Pn//kwDOn5tr/AAAAMEEj+3+J3v4/fOG/3bXviStv9faBZ07Ltf8BAABggkb2/5K9/f+Fr7+iOuSnx8z55oFnTs+1/wEAAGCCRvb/Ur39f8Q5z37hbxfb4uGHBp75Vq79DwAAABM0sv9f3Nv/X5zz2ouXqy47eduBZ87Itf8BAABggkb2/9K9/f+lfT643P131G+4eOCZb+fa/wAAADBBI/v/Jb39/+WLT7t2oYtOn++WgWfOzLX/AQAAYIJG9v8yvf1/5E1ffHCD7XZ+dM+BZ76Ta/8DAADABI3s/5f29v9RH9hszgv3POuATQaeOSvX/gcAAIAJGtn/L+vt/6OvOereJU7b7d1/Hnjmu7n2PwAAAEzQyP5ftrf/j/nwxt0tV92x0n0Dz5yda/8DAADABI3s/5f39v+x2+681EELLHbTugPPfC/X/gcAAIAJGtn/y/X2/3G/+valu8486PirBp45J9f+BwAAgAka2f/L9/b/V85/59lX3rTWR3ceeOb7ufY/AAAATNDI/n9Fb/8fXxy90WvOeXDpjw48c26u/Q8AAAATNLL/V+jt/68ucOJuH9xx2atuH3jmB7n2PwAAAEzQyP5fsbf/v/ad7b/4lcNuPn/7gWd+mGv/AwAAwASN7P9X9vb/18/41MUHbLrgVpcPPHNerv0PAAAAEzSy/1fq7f8TnrPmC3df8bw5bxh45ke59j8AAABM0Mj+f1Vv/59Y7lu9+OG9Ht594Jnzc+1/AAAAmKCR/b9yb/+f9MMf33XTo/ee/MzAMxfk2v8AAAAwQSP7f5Xe/v/GNc+fc56XL/GGdww88+Nc+x8AAAAmaGT/r9rb/9/88K0P3r3hofO9aeCZC3PtfwAAAJigkf3/6t7+P3nb31177hHrP/qHgWcuyrX/AQAAYIJG9v9revv/lF8tudy6px3yge0Gnrk41/4HAACACRrZ/6v19v+p+9x36R17rnfYTwaemfXX7H8AAACYoJH9/9re/j/t4sWXetkC9/3m5oFnfppr/wMAAMAEjez/1Xv7//SbntftddVSr95j4JlLcu1/AAAAmKCR/f+63v7/1gduu/czN52/+xMDz1yaa/8DAADABI3s/zV6+/+M/X526Wtn7nPEVgPPXJZr/wMAAMAEjez/NXv7/9uXzrHUdTvedPkGA89cnmv/AwAAwASN7P+1evv/zOtX7o49Z4EXPzzwzBW59j8AAABM0Mj+X7u3/7/zvkfu3WnThzbbbOCZK3PtfwAAAJigkf2/Tm//n3Xqjcfsdthy5/xt4Jmrcu1/AAAAmKCR/b9ub/9/d94F9v34wwfeeefAM1fn2v8AAAAwQSP7//W9/X92u9xWN6+4RrHWwDM/y7X/AQAAYIJG9v8bevv/exf88YdLvvy2N1438Mw1ufY/AAAATNDI/n9jb/+fc+X6m9/56CKn7TLwzLW59j8AAABM0Mj+X6+3/7//oc99f74jzn5q34FnZv07AfY/AAAATNDI/n9Tb/+f+94ffOkNG+6+yK0Dz/w81/4HAACACRrZ/+v39v8Pfrvbh8/Z4tQPPD3wzPW59j8AAABM0Mj+f3Nv//9wv+8d//JP7HTY1gPP3JBr/wMAAMAEjez/DXr7/7xL99z/tnuu+M36A8/8Itf+BwAAgAka2f8b9vb/j65/yzs/vUr76j8OPHNjrv0PAAAAEzSy/9/S2//nv+/TF+yz5HG7v2fgmZty7X8AAACYoJH9v1Fv/18w2z5X//TJrY64YuCZX+ba/wAAADBBI/t/497+//H3Llj6Fcc8dvn1A8/cnGv/AwAAwASN7P9Nevv/wlMOnu0966704g8NPHNLrv0PAAAAEzSy/zft7f+LFl3jgSNPvG6zKwee+VWu/Q8AAAATNLL/39rb/xe/fqM7L9lvrnPeN/DMrbn2PwAAAEzQyP7frLf/f/LPI8vlFzvhzo8NPPPrXPsfAAAAJmhk/7+tt/9/+oczXrT9T7cp7hh45je59j8AAABM0Mj+37y3/y/Z5H0/OeqOp9646cAzv821/wEAAGCCRvb/Fr39f+lSV758k2q10x4ZeOa2XPsfAAAAJmhk/2/Z2/+XfWXOa07Y7oinfj/wzO259j8AAABM0Mj+36q3/y8/5JV/+utFmy6yzsAzs35PAPsfAAAAJmhk/7+9t/+vWOHRudoNl1jo1IFn7sy1/wEAAGCCRvb/1r39f+Xhy9/zlSPufeJZA8/clWv/AwAAwASN7P939Pb/Vcs83n7w0fXPWHTgmbtz7X8AAACYoJH9/87e/r969Wte/JqXH7rBRQPP/C7X/gcAAIAJGtn/7+rt/5994lmXXbnigvWKA8/ck2v/AwAAwASN7P9tevv/mqu2OvDQh2++9wsDz9yba/8DAADABI3s/3f39v+1u39lu70P2+u7Bw888/tc+x8AAAAmaGT/b9vb/9ftcPJay2563kZLDDxzX679DwAAABM0sv+36+3/n9+2zddvP2etF3514Jk/5Nr/AAAAMEEj+3/73v6//vlr/fbyHQ+6ZLWBZ/6Ya/8DAADABI3s//f09v8N3/zE6ivNXPaolw48c3+u/Q8AAAATNLL/39vb/7/47oXPf/dND3740wPPPJBr/wMAAMAEjez/HXr7/8Zn7/XUEVft9rpm4JkHc+1/AAAAmKCR/b9jb//ftP+v5918gbNuP2XgmT/l2v8AAAAwQSP7f6fe/v/lZYv8+Rt7LnboWQPPPJRr/wMAAMAEjez/9/X2/803LHXDn0+7Y+d5B555ONf+BwAAgAn6T/b/ATNmdDv39v8tO9+5YnVRvdBKA8/8Odf+BwAAgAka+fX/XXr7/1dXvfBXx2x32RNHDTzzSK79DwAAABM0sv/f39v/t+5+z6vfV+18xgEDzzyaa/8DAADABI3s/w/09v+vd7j9eavfcfoGLxx45i+59j8AAABM0Mj+/2Bv///mtuc+ee1PV67PHHjmsVz7HwAAACZoZP/v2tv/v73wgcP2XOzxe2cfeOavufY/AAAATNDI/t+tt/9vq5d9/8H7bfHd5w0883iu/Q8AAAATNLL/P9Tb/7fPveCbf3HiMRudN/DM33LtfwAAAJigkf2/e2//33H6DWcuvu62L6wGnnki91/a/2v8V37AAAAAwL9sZP/v0dv/d562wlOvPeakS04YeObJXL/+DwAAABM0sv/37O3/u+Z77PnXPTnHUecOPPP3XPsfAAAAJmhk/3+4t//v7q5b/dglr/nw/APP/CPX/gcAAIAJGtn/H+nt/9/9eOZvd1pl49cdPfDMP3PtfwAAAJigkf2/V2//33PV6Suecc/ht7964Jmncu1/AAAAmKCR/b93b//fu/suN7zrE6sfuuzAM0/n2v8AAAAwQSP7f5/e/v/9Dm/787O3eGbnwwaeeSbX/gcAAIAJGtn/+/b2/323HT7vE2ct8IPPDLwy68P+BwAAgAka2f8f7e3/P+y/yZPb7nLT214y8Mqsv8f+BwAAgAka2f8f6+3/P172ped9YfZ9ytUHXinz8a/s/2ee+a/9kAEAAIB/0cj+36+3/++/4cxXX3b9+b/7ysArVT78+j8AAABM0Mj+37+3/x/YecdfverapU6fe+CVOh/2PwAAAEzQyP4/oLf/H/zJoyvsOM9965898EqTD/sfAAAAJmhk/x/Y2/9/2veV1x+323rP/+bAK20+7H8AAACYoJH9//He/n/og3M+8vNvH/J0N/DKrL9m/wMAAMAEjez/g3r7/+FfXjnfam/a/bM/Hnhl1j9v/wMAAMAEjez/T/T2/58XvP+DSxx59vufP/DKbPmw/wEAAGCCRvb/J3v7/5Fvv+xztzy+yKozB155Vj7sfwAAAJigkf1/cG//P3rec844aJnbfnX6wCvPzof9DwAAABM0sv8/1dv/f6mu33DXldf4wlIDr8yeD/sfAAAAJmhk/x/S2/+PfeRDJ3z/gQN3/cTAK3Pkw/4HAACACRrZ/5/u7f+/XnvO2q//zHJLfHHglTnzYf8DAADABI3s/0N7+//xWz+/7bybP3TZKwZemSsf9j8AAABM0Mj+/0xv//9tuzcecNeaK/3gOQOvzJ0P+x8AAAAmaGT/f7a3/5/4yaE773v8Y287Z+CVefJh/wMAAMAEjez/z/X2/5P7vvnThzy1VXnSwCvz5sP+BwAAgAka2f+f7+3/v3/ww6f+dvHjflcMvDJr99v/AAAAMEEj+/+w3v7/xy/PetNyq7Wnf27glfnzYf8DAADABI3s/8N7+/+f56692lF3XrH+cgOvLJAP+x8AAAAmaGT/f6G3/5+a/ZO3b3/ATs9fZeiVfNj/AAAAMEEj+/+I3v5/+rkXPbP81qc+fezAKwvm43/u/5n/bT9iAAAA4F81sv+/2Nv/z5y496KXnL/pZ18w8Mpz8+HX/wEAAGCCRvb/l/5j/xczDrpxzxN2OOL9Hx94ZaF82P8AAAAwQSP7/8u9/V+susBRm3SrrfrlgVcWzof9DwAAABM0sv+P7O3/ctnlzm1/89SvVh545Xn5sP8BAABggkb2/1G9/V8d9ce3/vXybb5w/sAri+TD/gcAAIAJGtn/R/f2f/279c9ffuETdl1o4JVF82H/AwAAwASN7P9jevu/2fJzW16yz1xLzDnwymL5sP8BAABggkb2/7G9/d9u8IO9jjr5usvOGHjl+fmw/wEAAGCCRvb/cb393/1tt2O33/y8i9cYeGXWP2P/AwAAwASN7P+v9Pb/zM2+t9vTn9lr8bsHXlk8H/Y/AAAATNDI/j++t/9ne3jPL87xwM17/nXglRfmw/4HAACACRrZ/1/t7f9n/eMtZ2+58oJf2nzglRflw/4HAACACRrZ/1/r7f9nr/npjU5f5tDbfjPwyhL5sP8BAABggkb2/9d7+3/22W+d/w+Pr7/a3gOvLJkP+x8AAAAmaGT/n9Db/3Oc+/zHn3fkvTt+YOCVpfJh/wMAAMAEjez/E3v7f84Tl7zlLW9a4tPXDLzy4nzY/wAAADBBI/v/pN7+n+u5v1vpgm/f8Y8PD7yydD7sfwAAAJigkf3/jd7+n/vXP1nvG7sttvBNA6+8JB/2PwAAAEzQyP7/Zm//z7NN963N5zlrw0sGXlkmH/Y/AAAATNDI/j+5t//n3eO1h1bX7vaddw+88tJ82P8AAAAwQSP7/5Te/p/vun/s+OfrH/z9nwZeeVk+7H8AAACYoJH9f2pv/8//oy0/tdLsy3ZvGXhl2XzY/wAAADBBI/v/tN7+X2DG195z+S4HbbrFwCsvz4f9DwAAABM0sv9P7+3/58z/zXWOOGuts/8+8Mpy+bD/AQAAYIJG9v+3evt/wTO3O/ndJx9z8W0DryyfD/sfAAAAJmhk/5/R2//Pnf2EDf6xzxaL7z/wyivyYf8DAADABI3s/2/39v9C5+7wnZkLP77njgOvrJAP+x8AAAAmaGT/n9nb/wuf+I7Pb335yl+6euCVFfNh/wMAAMAEjez/7/T2//Oee9wu3/nN6be9fuCVV+bD/gcAAIAJGtn/Z/X2/yL77rjwgt3Oq90z8MpK+bD/AQAAYIJG9v93e/t/0Z+c+cQ9O1y2418GXnlVPux/AAAAmKCR/X92b/8v9ssv3XrW+fWnNx54ZeV82P8AAAAwQSP7/3u9/f/8D27ymrW3fuYfDwy8sko+7H8AAACYoJH9f05v/79gl+/u+K4DVl94vYFXVs2H/Q8AAAATNLL/v9/b/4vf/JFDz7jz8A3fOfDKq/Nh/wMAAMAEjez/c3v7/4U/3eBbT6y28Xf+OfDKa/Jh/wMAAMAEjez/H/T2/4v2+sx6z178mt/vOvDKavmw/wEAAGCCRvb/D3v7f4nZX3LydU/N0f1i4JXX5sP+BwAAgAka2f/n9fb/kuc+vM5rjz9p08sGXlk9H/Y/AAAATNDI/v9Rb/8vdeIv37PTmtuevcPAK6/Lh/0PAAAAEzSy/8/v7f8XP3e+Tx27zwkvf3DglTXyYf8DAADABI3s/wt6+3/pH92wy4yTt/n5hgOvrJkP+x8AAAAmaGT//7i3/18yY8HP/+Xy647bcuCVtfJh/wMAAMAEjez/C3v7f5n5l/3OKQvPtc8/Bl5ZOx/2PwAAAEzQyP6/qLf/X3rmAxu8tTtixY8MvLJOPux/AAAAmKCR/X9xb/+/7MKndrn7N5v+4pcDr6ybD/sfAAAAJmhk//+kt/+XrV/z+XnOf+rgnw688vp82P8AAAAwQSP7/6e9/f/yuYvvrLvDajtsM/DKG/Jh/wMAAMAEjez/S3r7f7nTr9jg3AOuWODXA6+8MR/2PwAAAEzQyP6/tLf/l9/x3lecuXX72F4Dr6yXD/sfAAAAJmhk/1/W2/+v+MWLbnzHaqd+/YMDr7wpH/Y/AAAATNDI/r+8t/9XuHyhR2e7c6c1rx14Zf182P8AAAAwQSP7/4re/l/xo3fM/fenHpu55sArb86H/Q8AAAATNLL/r+zt/1fO/Ngzr1t8pT/+buCVDfJh/wMAAMAEjez/q3r7f6Wzz1/0mjWP+/FjA69smA/7HwAAACZoZP9f3dv/rzr5wNWOPn6rrd828Mpb8mH/AwAAwASN7P+f9fb/you84fadP3Pgy3cbeGWjfNj/AAAAMEEj+/+a3v5f5cJPrvTI5mv8/MaBVzbOh/0PAAAAEzSy/6/t7f9V67VvKVd+6LhLB17ZJB/2PwAAAEzQyP6/rrf/Xz333o+/7YHl9nnvwCub5sP+BwAAgAka2f8/7+3/15x+0fzffPzsFe8feOWt+bD/AQAAYIJG9v/1vf2/2lVv3nbRZXb/xRsHXtksH/Y/AAAATNDI/r+ht/9fu/uhBzz0ptsOftfAK7P+TED7HwAAACZoZP//orf/V9/hrBN+dOQiOzw18Mrm+bD/AQAAYIJG9v+Nvf3/uts+vPZ6u923wBsGXtkiH/Y/AAAATNDI/r+pt//XOPi9b1zk20s9du/AK1vmw/4HAACACRrZ/7/s7f81V/v66Q9fe8jXHx14Zat82P8AAAAwQSP7/+be/l9r6WM/c/4866250cArb8+H/Q8AAAATNLL/b+nt/7WP2HqnN85+08zfDryydT7sfwAAAJigkf3/q97+X+f3Tx/8uesX+ON+A6+8Ix/2PwAAAEzQyP6/tbf/1916le33O+v8H+808Mo782H/AwAAwASN7P9f9/b/699YrrvMLvts/bOBV96VD/sfAAAAJmhk//+mt//f8Oilp9x6/BxbvnjglW3yYf8DAADABI3s/9/29v8bN2rfvPaa1/zwkwOvvDsf9j8AAABM0Mj+v623/9e7/+Izz1p82wePGHhl23zY/wAAADBBI/v/9t7+f9PTfz/snqdOmmP5gVe2y4f9DwAAABM0sv/v6O3/9ddZ7f0L3rn6OhcMvLJ9Pux/AAAAmKCR/X9nb/+/ebZdXrLZas98c7GBV96TD/sfAAAAJmhk/9/V2/8bfO/0n5289caPzDbwynvzYf8DAADABI3s/7t7+3/DUw6//9EDDp/7WwOv7JAP+x8AAAAmaGT//663/9+y6NtmFjvsvO08A6/smA/7HwAAACZoZP/f09v/G92xxx4LnX/6Qd8beGWnfNj/AAAAMEEj+//e3v7f+D1nH3n/b+pbvjHwyvvyYf8DAADABI3s/9/39v8mux3ygwu7y17VDryycz7sfwAAAJigkf1/X2//b/qzDTfbYOEt9j904JVd8mH/AwAAwASN7P8/9Pb/Wy968EeHXH7MV5ceeOX9+bD/AQAAYIJG9v8fe/t/s2aZLfY9eeWrXzfwygfyYf8DAADABI3s//t7+/9t88y993L7PP7S4wde+WA+7H8AAACYoJH9/0Bv/2/+rZuP++0uy275o4FXds2H/Q8AAAATNLL/H+zt/y1mm3/X15/14A+fO/DKbvmw/wEAAGCCRvb/n3r7f8vv/eKI71+/1oNzDbzyoXzY/wAAADBBI/v/od7+3+qUP3zvrtkPmuPbA6/sng/7HwAAACZoZP8/3Nv/b1/05RvPO89i6yw+8Moe+bD/AQAAYIJG9v+fe/t/6/1ue/Hp197xzYMGXtkzH/Y/AAAATNDI/n+kt//fcenzLtvy27s98qWBVz6cD/sfAAAAJmhk/z/a2//vvH7xe+bY7ay5XzXwykfyYf8DAADABI3s/7/09v+73ndf+/SR62/72YFX9sqH/Q8AAAATNLL/H+vt/212qje7+02HHvTygVf2zof9DwAAABM0sv//2tv/777xpz+YZ5klbll14JV98mH/AwAAwASN7P/He/t/2yueOHLdx+991XEDr+ybD/sfAAAAJmhk//+tt/+3+9jqe5z7wF77LzjwykfzYf8DAADABI3s/yd6+3/72b5y3O4rn/fV7w+88rF82P8AAAAwQSP7/8ne/n/P97ba+4DNF7z6xIFX9suH/Q8AAAATNLL//97b/+89ZZstbvrMzS8demX/fNj/AAAAMEEj+/8fvf2/w6In/+jFLzj8L+cMvHJAPux/AAAAmKCR/f/P3v7f8aLtN/7xPzee9zkDrxyYD/sfAAAAJmhk/z/V2/87NSd+b8OvPPP6YuCVj+fD/gcAAIAJGtn/T/f2//vmOfqIhddY/ZSTBl45KB/2PwAAAEzQyP5/prf/d/7WO3f94ztOemi5gVc+kQ/7HwAAACboP9//M2b09v8ud95/+I0HbjvX5wZe+WQ+7H8AAACYoJH9X/T2//u3etmHXnDXNW8/duCVg/Nh/wMAAMAEjez/srf/P7Dhczbd47Vz/GiVgVc+lQ/7HwAAACZoZP9Xvf3/wceu/+6nfv34lR8feOWQfNj/AAAAMEEj+7/u7f9dX/XotV9rV37JCwZe+XQ+7H8AAACYoJH93/T2/26ffeVyu7z3mI+tPPDKofmw/wEAAGCCRvZ/29v/Hzp6zjlX+dEWX/nywCufyYf9DwAAABM0sv+73v7f/YVXPvizUy775UIDr3w2H/Y/AAAATNDI/p/Z2/97vO191Zz71q88f+CVz+XD/gcAAIAJGtn/s/X2/54PnnHXU887fZszBl75fD7+xf0/87/wIwYAAAD+VSP7/1m9/f/hJ468+LQrdj5wzoFXDsuHX/8HAACACRrZ/8/u7f+PrLXRC7e64ay/vGTglcPzYf8DAADABI3s/9l7+3+vO4+46uI5dpv3MwOvfCEf9j8AAABM0Mj+n6O3//fe6q0vXfH9d7z+KwOvHJEP+x8AAAAmaGT/z9nb//ts+IFn7fDdxU5ZfeCVL+bD/gcAAIAJGtn/c/X2/76PnfqHL51x0ENnD7zypXzY/wAAADBBI/t/7t7+/+hRb//qy3Zda665B175cj7sfwAAAJigkf3//2LvzqO+Hvt+/+fzpWQeMmUqQsmUROYps4SQIZlnmTNkypCIKxSli8yUKVNcZIhCGSLzkCnKUIRQUvRbe6/D3sfex3ffx7bv+/qt44/HY61rXW+t8/tan3+ffc6zc8mo/89fd8h5ny3x3UGN6qwMDIf+BwAAgAJl+n+pqP8v2HTowVe+tu7Iu+qsDAqH/gcAAIACZfp/6aj/L7zksFFnt35v3Kp1Vm746+v/vU8LAAAA/L/I9H+TqP97HTdo/lGzlmv1TJ2VweHQ/wAAAFCgTP8vE/X/RW/v9dXug548/946K/8Mh/4HAACAAmX6f9mo/y8ee8LY5Xc7+6YF66zcGA79DwAAAAXK9P9yvRo0qMJ9yfkPrDFtvynvXlpn5aZw6H8AAAAoUKb/l4/e/1/aePFX1uvbYqM166wMCYf+BwAAgAJl+n+FqP97P/pyy0+m9j20TZ2Vm8Oh/wEAAKBAmf5vGvX/ZUN/bnzFxrtdNKDOyi3h0P8AAABQoEz/rxj1f5+V203rOXaLSy+ss3JrOPQ/AAAAFCjT/ytF/X/5qFkNPl/xj6M+qbNyWzj+6v/5/n1PDAAAAPxdmf5fOer/KxZo88XS53Zu80qdldvD4f0/AAAAFCjT/6tE/d93yYXH7DS0/4Rj66zcEQ79DwAAAAXK9P+qUf9fed/45iNGLj54cp2VO8Oh/wEAAKBAmf5vFvX/VV8NOWrm0a+fvWOdlbvCof8BAACgQJn+bx71/z+6HtRngYaHrrNXnZW7w6H/AQAAoECZ/l8t6v9+Ox92914f3Tb+5zorQ8Oh/wEAAKBAmf5fPer/q2cM7XD7lgeO2qXOyrBw6H8AAAAoUKb/W0T9f80GvduPnHRjt2l1Vu4Jh/4HAACAAmX6f42o/6/tu/1Hu1zUbqG5dVbuDYf+BwAAgAJl+n/NqP/733zOnJUP/mVatzor94VD/wMAAECBMv2/VtT/A1qMWmH6Nsfd/ladlfvDof8BAACgQJn+bxn1/3V7rjyz9U3Dtj+lzsoD4dD/AAAAUKBM/7eK+v/6qRObfDC34XLH1FkZHg79DwAAAAXK9P/aUf8P/HNSu6uajZ35Yp2VB8Oh/wEAAKBAmf5vHfX/oA5rvX/hxitd+kWdlYfCof8BAACgQJn+Xyfq/xu+mrLFlKmfHLVNnZWHw6H/AQAAoECZ/l836v/BXVf/dNm+p7fpUmflkXD8b/1f+zc8MQAAAPB3Zfp/vaj//7nzCvO22++RCb/WWXk0HN7/AwAAQIEy/b9+1P83zvhs5Yd3W3/wOXVWRoRD/wMAAECBMv2/QdT/N127zgmNB00/e2KdlcfCof8BAACgQJn+bxP1/5DWU6/4fdY267xWZ+XxcOh/AAAAKFCm/zeM+v/mrScMG976ovEn1Vn5Vzj0PwAAABQo0/9to/6/pfeyux78Ws9R79RZeSIc+h8AAAAKlOn/jaL+v/WyX1fYdomnup1ZZ+XJcOh/AAAAKFCm/9v1atCgUfjK27ZoO+eRU5ZZ6LA6KyPDof8BAACgQJn+3zh6/397y8YffXX/O9PG1Fl5Khz6HwAAAAqU6f9Nov6/o/8b7Zd5eJfbO9VZeToc+h8AAAAKlOn/9lH/3/lV9/cndL98++/rrDwTDv0PAAAABcr0/6ZR/9/V9b52qy+65nK/11l5Nhz6HwAAAAqU6f/Nov6/e+drm5z15tcz96+zMioc+h8AAAAKlOn/zaP+Hzqjy8xLp7Y4/u06K8+FQ/8DAABAgTL9v0XU/8P2vH7lVTaecuWpdVaeD4f+BwAAgAJl+n/LqP/vmdp53vf77fbZ0XVWRodD/wMAAECBMv2/VdT/9/553KdP9u271Qt1VsaEQ/8DAABAgTL9v3XU//d1eHCLXQctd9bOdVb++jsB/Q8AAAAFyvT/NlH/37/PkyvP3e29gVPrrLwYDv0PAAAABcr0/7ZR/z8w/cJ5i7c+e/QfdVZeCof+BwAAgAJl+n+7qP+H/77DpwfNenL1Q+qsjA2H/gcAAIACZfp/+6j/H9zmki2GLbHdXlPqrIwLh/4HAACAAmX6v0PU/w9dfNs2D712yUM71Vl5ORz6HwAAAAqU6f8dov5/uP0xt29//7qT96yz8ko49D8AAAAUKNP/O0b9/8g6B1+y3CnfLTCjzsqr4dD/AAAAUKBM/+8U9f+jA288bHL3U3e/oM7Ka+HQ/wAAAFCgTP/vHPX/iC827df84Yce+LjOyvhw6H8AAAAoUKb/d4n6/7H955341purzH61zsrr4dD/AAAAUKBM/+8a9f/ju7/Y8bJFP1v+uDorb4RD/wMAAECBMv2/W9T//5pZe7DHivMfv0edlQnh0P8AAABQoEz/7x71/xP7PN/hh7EvXvldnZU3w6H/AQAAoECZ/u8Y9f+T0xvdvdLQEz6bU2flrXDofwAAAChQpv/3iPp/5O9b9tn53Hu3OqDOytvh0P8AAABQoEz/d4r6/6lt5hz11NGbnPVunZV3wqH/AQAAoECZ/t8z6v+nV19w6drImQPPqrPy198J6H8AAAAoUKb/94r6/5nBr//040f7jz60zsp74dD/AAAAUKBM/+8d9f+z//hlwp0NB68+us7K++HQ/wAAAFCgTP93jvp/1CYbbthl0uF7nV1n5YNw6H8AAAAoUKb/94n6/7kTV9u02vKOh3rVWfkwHPofAAAACpTp/32j/n/+vckTfzp40cnj66x8FA79DwAAAAXK9P9+Uf+PHv3p73dd9NoCJ9dZmRgO/Q8AAAAFyvR/l6j/x5y9/PL73bTX7l/WWfk4HPofAAAACpTp//2j/n9hkZGzBmxzzQPb1ln5JBz6HwAAAAqU6f8Dov5/8fHzljm02Vaz96uz8mk49D8AAAAUKNP/B0b9/9LtO2600dx5y/9SZ+WzcOh/AAAAKFCm/w+K+n/s8r3eG7vo5SsvX2fl83DofwAAAChQpv+7Rv0/buR2Wx785i5zR9ZZmRQO/Q8AAAAFyvT/wVH/v9zg0s+GP/z1sAfqrHwRDv0PAAAABcr0f7eo/19p8uyfv3dfc5fF66z89TsB9T8AAAAUKNP/h0T9/+rws1dqfMpTDS6pszI5HPofAAAACpTp/0Oj/n/ty5b773Z/z0nN66xMCYf+BwAAgAJl+v+wqP/HHzB95BOvvfPYxnVWvgqH/gcAAIACZfr/8Kj/X+/4zo3fLbHMPtfVWfk6HPofAAAACpTp/yOi/n9j1lLnrDpr+prr1Vn5Jhz6HwAAAAqU6f8jo/6f0G6DBRq1Xn/sVXVWvg2H/gcAAIACZfr/qKj/37x65te/7HbRgBvrrEwNh/4HAACAAmX6/+io/9+68bWXbh20zWmb1lmZFg79DwAAAAXK9P8xUf+/3XyhFp37frL5Y3VWvguH/gcAAIACZfr/2Kj/39l32KsD91vpo+XqrHwfDv0PAAAABcr0/3FR/7/7w0mtjtr4kX71VqaHQ/8DAABAgTL9f3zU/+/N2WfBNlNPP/n2Ois/hEP/AwAAQIEy/X9C1P/vb9t/6ui5w1buXWflx3DofwAAAChQpv9PjPr/gy/3nG//ZsfNXavOyk/h0P8AAABQoEz/d4/6/8MDBn553zZjh21QZ2VGOPQ/AAAAFCjT/ydF/f9Rx/tHz7up4S7966z8HA79DwAAAAXK9P/JUf9PnHV8s0UuurHBKnVWfgmH/gcAAIACZfr/lKj/P75u8H4jDj5w0tN1Vn4Nh/4HAACAAmX6/9So/z/pdciInbb85bH76qzMDIf+BwAAgAJl+v+0qP8/3eyo65ee1G6fxnVWZoVD/wMAAECBMv1/etT/n/W646zPG76+5qN1Vn4Lh/4HAACAAmX6/4yo/z+/ZJsWcz9afOySdVZmh0P/AwAAQIEy/d8j6v9Jm1720uIjbxvQsM7K7+HQ/wAAAFCgTP+fGfX/F+s+/fVBRx962p11VuaEQ/8DAABAgTL9f1bU/18O6rnAsHP/2LxlnZW54dD/AAAAUKBM/58d9f/kLz+Y2n3oFh/1rbPyRzj0PwAAABQo0//nRP0/5YBVFrx5bP9+Q+qs/BkO/Q8AAAAFyvR/z6j/v+rYotUrK3Y+ees6K/PCof8BAACgQJn+Pzfq/69nffHqpmdMGnlQulL9deh/AAAAKFCm/8+L+v+bfZs1u2NYs4NmpytV+Br9DwAAACXK9P/5Uf9/+8NXo/cc12/x6elK9dc3AOh/AAAAKFCm/y+I+n/qnI+/nL9Jp+m7pytVLRz6HwAAAAqU6f8Lo/6ftm3T+WY1fmvoc+lKNX849D8AAAAUKNP/vaL+/25ar2n3vLv0joenK9UC4dD/AAAAUKBM/18U9f/3e+3Y+MDHnlmqR7pSNQyH/gcAAIACZfr/4qj/p+9wXsvFjjvv5/fTlapROPQ/AAAAFCjT/5dE/f/DvJGv/NGvz0Xd05Xqr8/rfwAAAChQpv8vjfr/xy1veHzK3jse+ka6UjUOh/4HAACAAmX6v3fU/z/16bbPsht+s9EH6Uq1UDj0PwAAABQo0/+XRf0/Y8CRPbab3urdnulKtXA49D8AAAAUKNP/faL+/7nV7YMe/nnETTPTlWqRcOh/AAAAKFCm/y+P+v+Xgxucfcb6Pc7fJ12pFg2H/gcAAIACZfr/iqj/f/36pX/26TSx1fbpSrVYOPQ/AAAAFCjT/32j/p/589yn3h7QdNykdKVaPBz6HwAAAAqU6f8ro/6ftctmBzTr/fzIl9KVaolw6H8AAAAoUKb/r4r6/7dpvz0y8oAGBx2ZrlRLhkP/AwAAQIEy/f+PqP9n77XVnrtsOnzx09OVaqlw6H8AAAAoUKb/+0X9//sO85+68pSTp7+ZrlR/db/+BwAAgAJl+v/qqP/nzBs9YPpvM4YenK5UTcKh/wEAAKBAmf6/Jur/uTe1mbJfi7Y7zktXqmXCof8BAACgQJn+vzbq/z/WnNXorg5DlvomXamWDYf+BwAAgAJl+r9/1P9/bjh+zZ9u6PrzrulKtVw49D8AAAAUKNP/A6L+n3f5wi9UFw696Md0pVo+HPofAAAACpTp/+v+Z/9XDSYft+gJdxx96N7pSrVCOP6D/p//v+iJAQAAgL8r0//XR/0/X7cHf7hhzLiNdkhXqqbh8P4fAAAACpTp/4FR/1e7Xv/6a6s2fvfrdKVaMRz6HwAAAAqU6f9BUf/Xfuy8ztbVdTedkK5UK4VD/wMAAECBMv1/Q9T/81/605jfP933/JfTlWrlcOh/AAAAKFCm/wdH/b/AVps0b/zsnFafpivVKuHQ/wAAAFCgTP//M+r/hmsv2uDgwzcbd166Uq0aDv0PAAAABcr0/41R/ze65tUvhg/oOP6adKX66zP6HwAAAAqU6f+bov5fcMPGjTfqdNU6G6YrVfNw6H8AAAAoUKb/h0T93/jyN6aNXX+1s9dIV6rVwqH/AQAAoECZ/r856v+Fbvr1lQE/fzm4T7pSvRwG9D8AAAAUKNP/t0T9v/CabVseOv2CCQunK1WLcOh/AAAAKFCm/2+N+n+RE444cbUNR7W5J12p/vqZAP0PAAAABcr0/21R/y/65l393tx7yaOeTVeqNcOh/wEAAKBAmf6/Per/xV685cHe/SZculK6Uq0VDv0PAAAABcr0/x1R/y9+4QEdzzyu9cy705WqZTj0PwAAABQo0/93Rv2/xDPntjnpsanLzZ+uVK3C8R/0f+P/oicGAAAA/q5M/98V9f+SjZ55e8i7Hbav0/jV2uHw/h8AAAAKNN+y8/1vf/K/9P/dUf8vtXSfGS837n37w+lK1Toc+h8AAAAKlHn/PzTq/6Xv2XaJzZosP23LdKVaJxz6HwAAAAqU6f9hUf83+eTLefPGfbjQLelKtW449D8AAAAUKNP/90T9v8wxa6y8yLCzul2erlTrhUP/AwAAQIEy/X9v1P/Lnr7qFvuf8fiotdOVav1w6H8AAAAoUKb/74v6f7mXP/z0vsO7j180Xak2CIf+BwAAgAJl+v/+qP+XP2HFdm2evX+dB9OVqk049D8AAAAUKNP/D0T9v8Kbn7w/+tPq7CfSlWrDcOh/AAAAKFCm/4dH/d/0xa9nDqzGDG6arlRtw6H/AQAAoECZ/n8w6v8VL2ze5KhVu00YmK5UG4VD/wMAAECBMv3/UNT/K6301uGfjLmlzUbpStUuHPofAAAACpTp/4ej/l/57ia91rujzVGrpyvVxuHQ/wAAAFCgTP8/EvX/Ko+sd1vPC3+89KJ0pdokHPofAAAACpTp/0ej/l91wW+2v+KGhWdunq5U7cOh/wEAAKBAmf4fEfV/s4UXXuL6Dq8sNzhdqTYNh/4HAACAAmX6/7Go/5s/PH7G0S2O3L5fulJtFg79DwAAAAXK9P/jUf+vdtestzf87a7b10lXqr9+JkD/AwAAQIEy/f+vqP9XX7VNm+entJ92a7pSbREO/Q8AAAAFyvT/E1H/tzhhwKfzbzp7oSpdqbYMh/4HAACAAmX6/8mo/9d4c98tZh3Qpdsy6Uq1VTj0PwAAABQo0/8jo/5f88WTV76j98BR/0pXqq3Dof8BAACgQJn+fyrq/7UuvGfens/uu/oW6Uq1TTj0PwAAABQo0/9PR/3f8pMTmrxy+HWjb05Xqm3Dof8BAACgQJn+fybq/1bHPDBz02qzgVekK9V24dD/AAAAUKBM/z8b9f/apw96v/unc85qna5U24dD/wMAAECBMv0/Kur/1i/v1e7mMUdvNTRdqTqEQ/8DAABAgTL9/1zU/+t8uFOTlqsO/WyBdKXaIRz6HwAAAAqU6f/no/5f94iLZk68sPGVS6Ur1Y7h0P8AAABQoEz/j476f72znnr/6jvGHf9QulLtFA79DwAAAAXK9P+YqP/XH39+u/M6tF1+oXSl2jkc+h8AAAAKlOn/F6L+32DxQ3Y58oYZs4elK9Uu4dD/AAAAUKBM/78Y9X+bxwbfN+i3rg+MSleqXcOh/wEAAKBAmf5/Ker/DW+7o++YFkN2XzldqXYLh/4HAACAAmX6f2zU/21XPOrYDTZtsMC16Uq1ezj0PwAAABQo0//jov7f6OSxfX6d8vzktulK1TEc+h8AAAAKlOn/l6P+b/fufEc17H3yQy3SlWqPcOh/AAAAKFCm/1+J+n/j5zfvsPcBw/e6LF2pOoXj/9D/Df8LnxgAAAD4uzL9/2rU/5uc+8fdt3Xqsfpt6Uq1Zzi8/wcAAIACZfr/taj/23+4dcfNB4wYXUtXqr3Cof8BAACgQJn+Hx/1/6ZHzH5w3M9NBzZJV6q9w6H/AQAAoECZ/n896v/NzhrT76b1J571eLpSdQ6H/gcAAIACZfr/jaj/Nx+/wIknb7jjVpulK9U+4dD/AAAAUKBM/0+I+n+L4TObvj+9z2c3pCvVvuHQ/wAAAFCgTP+/GfX/lk02+K1Fv1ZXXp2uVPuFQ/8DAABAgTL9/1bU/1s1WOjDU/b+5vh105WqSzj0PwAAABQo0/9vR/2/9cjXNr/ksaWXH5SuVPuHQ/8DAABAgTL9/07U/9tM+niD9457a3a7dKU6IBz6HwAAAAqU6f93o/7f9qCmb63R+LwHVktXqgPDof8BAACgQJn+fy/q/+06Nfv51Hef2b1XulIdFA79DwAAAAXK9P/7Uf9v/+tXS148rtkCi6QrVddw6H8AAAAoUKb/P4j6v8NFHf7cqcmkycPTlergcOh/AAAAKFCm/z+M+n+HzS9eacQZnR56Ml2puoVD/wMAAECBMv3/UdT/O67/xJafD+u314rpSnVIOPQ/AAAAFCjT/xOj/t/p+gs+W/qA2fvMSleqQ8Oh/wEAAKBAmf7/OOr/nTd5eqMrerd/bN90pTosHPofAAAACpTp/0+i/t/lHz3f6zll4KTt0pXq8HDofwAAAChQpv8/jfp/18HbzFpv0y4NPk9XqiPC8d/7v/ZvfWIAAADg78r0/2dR/++2+mXLfNLilV1OTFeqI8Ph/T8AAAAUKNP/n0f9v/tJ7+11y28LD3s9XamOCof+BwAAgAJl+n9S1P8d31ni0RNvuGvuh+lKdXQ49D8AAAAUKNP/X0T9v8dza/dv3+HIlc9NV6pjwqH/AQAAoECZ/v8y6v9OPb875dU7bjn5+XSlOjYc+h8AAAAKlOn/yVH/7/nE64u8fWG3fkekK9Vx4dD/AAAAUKBM/0+J+n+vasHpzVb98aMz0pXq+HDofwAAAChQpv+/ivp/72U3fOOMMW02fy9dqU4Ih/4HAACAAmX6/+uo/zvf/8u6fT69/7QD05XqxHDofwAAAChQpv+/ifp/nw/2G71d1X3Ab+lK1T0c+h8AAAAKlOn/b6P+3/fwa5o9fPiYsT+kK9VJ4dD/AAAAUKBM/0+N+n+/M++db8qz1Zod05Xq5HDofwAAAChQpv+nRf3f5bUTv1x22If7HJ+uVKeEQ/8DAABAgTL9/13U//ufNHzBq85Y/rFx6Up1ajj0PwAAABQo0//fR/1/wDvHTr2wyeOTPktXqtPCof8BAACgQJn+nx71/4HP7f1q63FnNTg/XalOD4f+BwAAgAJl+v+HqP8P6nldqw/enbrLT+lKdUY49D8AAAAUKNP/P0b933WFYw45tHHrYZ3TlapHOPQ/AAAAFCjT/z9F/X/wHbc9M+C43nM7pCvVmeHQ/wAAAFCgTP/PiPq/279uvGnsYx1W/ipdqc4Kh/4HAACAAmX6/+eo/w9Z9OALNtp71Mld05Xq7HDofwAAAChQpv9/ifr/0MWeXbdlvwv6/ZmuVOeE47/1/3z/3icGAAAA/q5M//8a9f9hI85+Y+L0CR99m65UPcPh/T8AAAAUKNP/M6P+P/zW7aZfveGSm+/2vy5U/+1/54b/0P8AAABQoEz/z4r6/4imly5y3vpXnTY2XanOC4f+BwAAgAJl+v+3qP+PPGnNL5/8ueOAo9KV6vxw6H8AAAAoUKb/Z0f9f9Q7n8+364Avx56WrlQXhEP/AwAAQIEy/f971P9HP/dRs1U6rbbmhHSlujAc+h8AAAAKlOn/OVH/H9NzpdHfTz7yzyPTlapXOPQ/AAAAFCjT/3Oj/j/2g09bndX+rlVfSleqi8Kh/wEAAKBAmf7/I+r/4w5f/tVL9194tzfTlericOh/AAAAKFCm//+M+v/4M1ebOuHSV+49PV2pLgmH/gcAAIACZfp/XtT/J7w2ecHVB3f5cl66Ul0aDv0PAAAABfqP+3++BlH/n3jFOvvctMPA6uB0peodDv0PAAAABcr0/3xR/3dvO/Xxk9dov9+u6Up1WTj0PwAAABQo0/9V1P8nrTVh0OazZ//rm3Sl6hMO/Q8AAAAFyvR/Ler/k4cs22PcKtWLe6cr1eXh0P8AAABQoEz/zx/1/ymHbNR4wugxLX5MV6orwqH/AQAAoECZ/l8g6v9Tp8yYtvrt3U/5Ol2p+oZD/wMAAECBMv3fMOr/034a98pZF9x/7Q7pSnVlOPQ/AAAAFCjT/42i/j99t8VaXnpEmw9eTleqq8Kh/wEAAKBAmf5fMOr/M7a+f+y2o37c9IR0pfpHOPQ/AAAAFCjT/42j/u/R+/g1HvmsW/fz0pWqXzj0PwAAABQo0/8LRf1/5rV7zv9V7ZarPk1XqqvDof8BAACgQJn+Xzjq/7NaD/xqmWU6/Dk7XamuCYf+BwAAgAJl+n+RqP/PvmKfRa9+ufeqB6Ur1bXh0P8AAABQoEz/Lxr1/zlt+/9w3j2td9s9Xan6h0P/AwAAQIEy/b9Y1P891xr2esseU++dnq5UA8Kh/wEAAKBAmf5fPOr/c4ectM7EY8/68vB0pbouHPofAAAACpTp/yWi/j/vzyEHHjHi8eq5dKW6Phz6HwAAAAqU6f8lo/4/v8NBT1zzzvL7vZ+uVAPDof8BAACgQJn+Xyrq/wv2PGzwCwt++K8e6Uo1KBz6HwAAAAqU6f+lo/6/cOrQczf5YbUX30hXqhvCof8BAACgQJn+bxL1f68Gez33Y9svW3RPV6rB4dD/AAAAUKBM/y8T9f9FIwetVuvc8ZSe6Ur1z3DofwAAAChQpv+Xjfr/4uEP1LpcfdW1H6Qr1Y3h0P8AAABQoEz/Lxf1/yVNTph0Z/8lP9gnXaluCof+BwAAgAJl+n/5qP8vPfTlxQ7bY8KmM+vMDAn/r/8BAACgQJn+XyHq/94fLf5d//Uu6D4pXaluDof+BwAAgAJl+r9p1P+Xvd5u/EszRl21fbpS3RIO/Q8AAAAFyvT/ilH/9znj5/Xb1cZd8WC6Ut0aDv0PAAAABcr0/0pR/1/+XpsXHvys8bGLpivVbeHQ/wAAAFCgTP+vHPX/FSfOWrPrqKFbNE1XqtvDof8BAACgQJn+XyXq/75nj2+04BFHf/JEulLdEQ79DwAAAAXK9P+qUf9fOXrhKXMumHPdRulKdWc49D8AAAAUKNP/zaL+v+rqg2578vbNegxMV6q7wqH/AQAAoECZ/m8e9f8/2g3ZftfR1zW/KF2p7g6H/gcAAIACZfp/taj/+zUfevgqq+z73OrpSjU0HPofAAAACpTp/9Wj/r/6xsN6fT97+COD05VqWDj0PwAAABQo0/8tov6/5oDt5/66xsmdN09XqnvCof8BAACgQJn+XyPq/2u/7L1Kwx2eb7ROulLdGw79DwAAAAXK9P+aUf/3nzVq670HN/iqX7pS3RcO/Q8AAAAFyvT/WlH/D+h4zie3XTrkwSpdqe4Px1/93+jf+MgAAADA35Tp/5ZR/1+36cQNj9y/6x63pivVA+Hw/h8AAAAKlOn/VlH/X3/JyhMGtZ/R9F/pSjU8HPofAAAACpTp/7Wj/h84aK2fxkxuO2eZdKV6MBz6HwAAAAqU6f/WUf8PWnfS0hvM+OaKDdOV6qFw6H8AAAAoUKb/14n6/4arV//t3vVaHXtNulI9HA79DwAAAAXK9P+6Uf8Pbjel6QF79NmiT7pSPRIO/Q8AAAAFyvT/elH//7P5Z5sv2n/HT9ZIV6pHw6H/AQAAoECZ/l8/6v8bb1zhwz+vnnjdPelKNSIc+h8AAAAKlOn/DaL+v+m3qQ/u2Llpj4XTleqxcOh/AAAAKFCm/9tE/T9ku3U6PtZ2RPOV0pXq8XDofwAAAChQpv83jPr/5v2WPXHSDz2eezZdqf4VDv0PAAAABcr0f9uo/2/5bkK/pRbs98j86Ur1RDj0PwAAABQo0/8bRf1/6w9tP1nsnU6d705XqifDof8BAACgQJn+bxf1/237/rr1HyMmNXo4XalGhkP/AwAAQIEy/b9x1P+3b/vGKvcc2+yrOo1fPRUO/Q8AAAAFyvT/JlH/3zGn8dwDezzz4C3pSvV0OPQ/AAAAFCjT/+2j/r/z6vuWvuWe8/bYMl2pngmH/gcAAIACZfp/06j/72rX/acTX36r6drpSvXX7wTU/wAAAFCgTP9vFvX/3c27TGi/zNJzLk9XqlHh0P8AAABQoEz/bx71/9Abr93w1fUmHFNLV6rnwqH/AQAAoECZ/t8i6v9hm3b+cK8ZS152W7pSPR8O/Q8AAAAFyvT/llH/33PJ9Zvf3n/UW4+nK9XocOh/AAAAKFCm/7eK+v/eQQ82nbnHBW2bpCvVmHDofwAAAChQpv+3jvr/vnWP+22Bzl/2vCFdqV4Ih/4HAACAAmX6f5uo/+/f8sIPH716tRs3S1eqF8Oh/wEAAKBAmf7fNur/B/o8ufk2P1z1xrrpSvVSOPQ/AAAAFCjT/9tF/T98wCVNm7TtuN7V6Uo1Nhz6HwAAAAqU6f/to/5/sNUOv339zuNd26Ur1bhw6H8AAAAoUKb/O0T9/9C0Yy6dt+BZzwxKV6qXw6H/AQAAoECZ/t8h6v+H97rt6EWO/fDbXulK9Uo49D8AAAAUKNP/O0b9/8gON+60/4jlF1wtXaleDYf+BwAAgAJl+n+nqP8fnXfwXffd03vb4elK9Vo49D8AAAAUKNP/O0f9P+LKebue1KPDrYukK9X4cOh/AAAAKFCm/3eJ+v+xNpsOG7LM1F9WTFeq18Oh/wEAAKBAmf7fNer/x9eoXfHyy62XeTJdqd4Ih/4HAACAAmX6f7eo//91y4snbPbZj8fcnK5UE8Kh/wEAAKBAmf7fPer/J7Zs1OvWWpvLtkhXqjfDof8BAACgQJn+7xj1/5N9nj+88xG3vNU6XaneCof+BwAAgAJl+n+PqP9HDpizfaNR3dpeka5Ub4dD/wMAAECBMv3fKer/p1ptedsvt4/puUC6Ur0TDv0PAAAABcr0/55R/z+96+vv735BdePQdKV6Nxz6HwAAAAqU6f+9ov5/5scF241a5f43HkpXqvfCof8BAACgQJn+3zvq/2cnb9hk2uju6y2VrlTvh0P/AwAAQIEy/d856v9R3X6ZufwaA7sOS1eqD8Kh/wEAAKBAmf7fJ+r/5xaY/EfH2V2eWShdqT4Mh/4HAACAAmX6f9+o/58ftdqqzw6e/e3K6Ur1UTj0PwAAABQo0//7Rf0/+r7lt5q6Q/sFR6Ur1cRw6H8AAAAoUKb/u0T9P2bJTz9eYf+7tm2brlQfh0P/AwAAQIEy/b9/1P8vHHVe248vPfLWa9OV6pNw6H8AAAAoUKb/D4j6/8XPRr65/uRXfrksXak+DYf+BwAAgAJl+v/AqP9ferXXj+e2X3iZFulK9Vk49D8AAAAUKNP/B0X9P/bUHZe6/OXzlhiXrlSfh0P/AwAAQIEy/d816v9xb186e6llnvnp+HSlmhQO/Q8AAAAFyvT/wVH/v3zcditO6rH0XeenK9UX4dD/AAAAUKBM/3eL+v+V88/e7LF73urwWbpSfRkO/Q8AAAAFyvT/IVH/vzr22Q92HNFp0c7pSjU5HPofAAAACpTp/0Oj/n+t7/Sb5j+233c/pSvVlHDofwAAAChQpv8Pi/p//AYtL5i1YLMnvkpXqr/+TP8DAABAgTL9f3jU/6+3WOqQO96ZdECHdKX6OhzZ/n//0FtaL7TTjS3/808OAAAA/N/K9P8RUf+/cfM7z+zZtmnrP9OV6ptweP8PAAAABcr0/5FR/0/oOvP5nX+Y+ErXdKX6Nhz6HwAAAAqU6f+jov5/86sNVn/q6h4375auVFPDof8BAACgQJn+Pzrq/7dmLFT90HnEhd+mK9W0cOh/AAAAKFCm/4+J+v/tnV/7fKU9Wm18VLpSfRcO/Q8AAAAFyvT/sVH/v7PFSYt/2P+b98emK9X34dD/AAAAUKBM/x8X9f+7lw37fu0ZO14yIV2ppodD/wMAAECBMv1/fNT/7/Xv/9oF6/U5/LR0pfohHPofAAAACpTp/xOi/n+/5T7r/aN91yX2TVeqH8OxdON/8/MCAAAAf1+m/0+M+v+DvgNfXG7ykJ9mpSvVT+Hw/h8AAAAKlOn/7lH/f7jBnmtNvrTtXZ+nK9WMcOh/AAAAKFCm/0+K+v+jFsc3fGj/GR22S1eqn8Oh/wEAAKBAmf4/Oer/iTffP3n7HU5e9PV0pfolHPofAAAACpTp/1Oi/v/4j0P6zxk8/LsT05Xq13DofwAAAChQpv9Pjfr/k50Gn7Lg7AZPnJuuVDPDof8BAACgQJn+Py3q/08737FX1zWeP+DDdKX663cC6H8AAAAoUKb/T4/6/7Nvj3r0wdGbtT4iXal+C4f+BwAAgAJl+v+MqP8/n3rZ54+uMueV59OVanY49D8AAAAUKNP/PaL+n7TnNtU2F+x783vpSvV7OPQ/AAAAFCjT/2dG/f9Fh56rN7n9ugvPSFeqOeHQ/wAAAFCgTP+fFfX/l38+/fzXoxpv/Fu6Us0Nh/4HAACAAmX6/+yo/yf3XWW91Y4Y9/6B6Ur1Rzj0PwAAABQo0//nRP0/ZYMPXnuzdvQlHdOV6s9w6H8AAAAoUKb/e0b9/1WLL77v/dnQw39IV6p54dD/AAAAUKBM/58b9f/XN7dY/MxNOj47LV2p/XXofwAAAChQpv/Pi/r/my2+mvzdtKsO2SVdqYWv0f8AAABQokz/nx/1/7eXNWu46pWrLdwtXalV4dD/AAAAUKBM/18Q9f/U/k3X2q3Ll1Pnpiu1v34AQP8DAABAgTL9f2HU/9NafvziE7tecMcp6Upt/nDofwAAAChQpv97Rf3/3cU7rv/VwFHbvZWu1BYIh/4HAACAAmX6/6Ko/79v32v8MjOXXPbFdKXWMBz5/r/rP/3IAAAAwN+U6f+Lo/6fvs7I77Zde8KsY9KVWqNweP8PAAAABcr0/yVR//8w8LzFHhnfuvcn6Urtr8/rfwAAAChQpv8vjfr/x326nXbvklOPvDBdqTUOh/4HAACAAmX6v3fU/z9Nv+GaA07tsMGx6UptoXDofwAAAChQpv8vi/p/xu+3P7zoA73ffCVdqS0cDv0PAAAABcr0f5+o/3/e5sjOfz60/A07piu1RcKh/wEAAKBAmf6/POr/XzZ66enNT/zwnMnpSm3RcOh/AAAAKFCm/6+I+v/Xfg26jVvkrHV/Tldqi4VD/wMAAECBMv3fN+r/mf/c7MKbJjz+2l7pSm3xcPxf9X+v/9wjAwAAAH9Tpv+vjPp/VrO5Q05+qfuzZ6YrtSXC4f0/AAAAFCjT/1dF/f/bxVud+WvT+w95J12pLRkO/Q8AAAAFyvT/P6L+n93+t+sa9qwWHpOu1JYKh/4HAACAAmX6v1/U/7+vM/qxve8eM/WwdKX2V/frfwAAAChQpv+vjvp/zsD5u9z2VLc7vk9Xak3Cof8BAACgQJn+vybq/7m/zmq+wjG3bNcpXaktEw79DwAAAAXK9P+1Uf//0anNmKmN2iy7f7pSWzYc+h8AAAAKlOn//lH//3nQwl88O/HHWb+nK7XlwqH/AQAAoECZ/h8Q9f+8SeMbdNxi4d7bpCu15cOh/wEAAKBAmf6/7n/2f63Bc8ccu/7nrxz5RbpSWyEc+h8AAAAKlOn/66P+n6/nbX0/7nXkBr+mK7Wm4dD/AAAAUKBM/w+M+r866cb7Lu9615td0pXaiuHQ/wAAAFCgTP8Pivq/9s7Bu5y7bfsbJqYrtZXCof8BAACgQJn+vyHq//lvnXf3s0Nmn3NOulJbORz6HwAAAAqU6f/BUf8v0HTTDh3/6LLuSelKbZVw6H8AAAAoUKb//xn1f8PFaket0Hzga6+lK7VVw6H/AQAAoECZ/r8x6v9GI17sM3XCpJebpSv/4zP6HwAAAAqU6f+bov5fcNlGJ56ySLOWF6crtebh0P8AAABQoEz/D4n6v/H9z/e75MR+512frtRWC4f+BwAAgAJl+v/mqP8XemLOg+8/1GnIJulKbfVw6H8AAAAoUKb/b4n6f+Fqy44tHnjrnafSlVqLcOh/AAAAKFCm/2+N+n+RTt0bH33q0u1WSFdqa4RD/wMAAECBMv1/W9T/i/5637Trl3zmsMXSldqa4dD/AAAAUKBM/98e9f9ik6595fnx5/W6P12prRUO/Q8AAAAFyvT/HVH/L35Ql5Ybrt1nxrLpSq1lOPQ/AAAAFCjT/3dG/b/E4B77rD1zx6VHpCu1VuHQ/wAAAFCgTP/fFfX/kqs/+viHA7/Z6Y50pbZ2OPQ/AAAAFCjT/3dH/b/UJlcM+seure6eL12ptQ6H/gcAAIACZfp/aNT/S/+jU48Luoz44R/pSm2dcPxf9v+C/5lHBgAAAP6mTP8Pi/q/yezv//nUlT0WWz9dqa0bDu//AQAAoECZ/r8n6v9ltm999s7TJh7YPl2prRcO/Q8AAAAFyvT/vVH/L9tlyQNW2qTpU/9MV2p/fU+A/gcAAIACZfr/vqj/l/v+/ad+aP78y8+kK7UNwqH/AQAAoECZ/r8/6v/lOy2zZ48/GrRcNV2ptQmH/gcAAIACZfr/gaj/V/j17UcuGzL8vDr/eH9tw3DofwAAAChQpv+HR/3fdNK3A97a9uQh96Yrtbbh0P8AAABQoEz/Pxj1/4oHrX9q864z3lkzXaltFA79DwAAAAXK9P9DUf+v1P7jRoN7tW13abpSaxcO/Q8AAAAFyvT/w1H/r3xx0ynHfz7ksAHpSm3jcOh/AAAAKFCm/x+J+n+Vgc1e2GqLrr3apCu1TcKh/wEAAKBAmf5/NOr/Vdf5as3xE4fOuDJdqbUPh/4HAACAAmX6f0TU/83WX6DHm42OXrpVulLbNBz6HwAAAAqU6f/Hov5vfv2YQasdM26nrdKV2mbh0P8AAABQoEz/Px71/2oXzX78zKca331TulLbPBz6HwAAAAqU6f9/Rf2/+uZb79P77ut+WCJdqW0RDv0PAAAABcr0/xNR/7foNOSpbXruu9gj6Upty3DofwAAAChQpv+fjPp/jV8POuDRpnMOvOt/Gfjvn6z99W8C6H8AAAAoUKb/R0b9v+akw87++qXNnmqUrtS2Dof+BwAAgAJl+v+pqP/XOmjoP5v8MXutq9KV2jbh0P8AAABQoEz/Px31f8vZR53ar3n7l9ZLV2rbhkP/AwAAQIH+D/0fvsd/vmei/m+1/R0Dzt92YP9N05XaduHQ/wAAAFCgzPv/Z6P+X7vL4EdaDely+o3pSm37cOh/AAAAKFCm/0dF/d/6+0Nmz5s3b7Pl0pVah3DofwAAAChQpv+fi/p/nT92OfXErgtPfCxdqe0QDv0PAAAABcr0//NR/6+709UDbtnirqtvT1dqO4ZD/wMAAECBMv0/Our/9To/9sirnx95Up2V2k7h0P8AAABQoEz/j4n6f/1vT9+zfaNbVhqZrtR2Dke2/+f/zz8yAAAA8Ddl+v+FqP83aL3XOs0mdvtj+XSltks4vP8HAACAAmX6/8Wo/9tcO+j1t5/68Z7F05XaruFY+n98OQAAAFCMTP+/FPX/hr0f+KHPMW12fiBdqe0WDu//AQAAoED/x/6fb/iAng3mGxv1f9utT1j0jJ73z9c8XantHg79DwAAAAXKvP8fF/X/Rru9/MXDd3f//JJ0pdYxHPofAAAACpTp/5ej/m/30+INtntpzIjr0pXaHuHQ/wAAAFCgTP+/EvX/xlPaNV+2abXvxulKrVM49D8AAAAUKNP/r0b9v8khP4+ZssiHay2ZrtT2DIf+BwAAgAJl+v+1qP/b/9Gm5YUTln/p0XSltlc49D8AAAAUKNP/46P+33SnWa9c9dDj/e9MV2p7h0P/AwAAQIEy/f961P+bdR4/7YMTzzq9YbpS6xwO/Q8AAAAFyvT/G1H/b/7two1bnzp1s77pSm2fcOh/AAAAKFCm/ydE/b9F398uHPBA64kt05XavuHQ/wAAAFCgTP+/GfX/lhtsNeTQ8b2v3jpdqe0XDv0PAAAABUr6v9Yg7v+3ov7fqsX8T2+0ZIeThqQrtS7h0P8AAABQoMz7/7ej/t/65tHdxs4ctdJa6Upt/3DofwAAAChQpv/fifp/mxff2rf/2hf80TtdqR0QDv0PAAAABcr0/7tR/297YZN/HbbrhHv6pyu1A8Oh/wEAAKBAmf5/L+r/7U5Yb2C7gUvuvEG6UjsoHPofAAAACpTp//ej/t/+zW/OeOnKq+Z7Ol2pdQ2H/gcAAIACZfr/g6j/O9y16421Lh0/XyVdqR0cDv0PAAAABcr0/4dR/++w6lXn/LjJlyMapyu1buHQ/wAAAFCgTP9/FPX/jgs/vv+d01bb9750pXZIOPQ/AAAAFCjT/xOj/t/p4VNGdmm67547pSu1Q8Oh/wEAAKBAmf7/OOr/nZd+ZK/xL1338JR0pXZYOPQ/AAAAFCjT/59E/b/LPWc8utXdm02Zka7UDg+H/gcAAIACZfr/06j/d31mj/7H95wz/57pSu2IcOh/AAAAKFCm/z+L+n+3RpefMviYozt+nK7UjgyH/gcAAIACZfr/86j/d9/1g40mPjX0/gvSldpR4dD/AAAAUKBM/0+K+r/jj6u813Ji49+OS1dqR4dD/wMAAECBMv3/RdT/e0xuMeu8RuNWeDVdqR0TDv0PAAAABcr0/5dR/3fq9sUyV3/e9oRT05XaseHQ/wAAAFCgTP9Pjvp/z5ueO27QFjP6vp2u1P76mQD9DwAAAAXK9P+UqP/3WrPhlUd27frpC+lK7fhw6H8AAAAoUKb/v4r6f+8Nt7h3g15Dtj46XamdEA79DwAAAAXK9P/XUf93vvz3nccMaXDm1HSldmI49D8AAAAUKNP/30T9v8/c/Yc23Pb5QTunK7Xu4dD/AAAAUKBM/38b9f++O968w6/NTx5zSLpSOykc+h8AAAAKlOn/qVH/77f3nUfe9sfw1f5IV2onh0P/AwAAQIEy/T8t6v8u3xx+2d7Teuz5UbpSOyUc+h8AAAAKlOn/76L+33/XW7uP22TEw2enK7VTw6H/AQAAoECZ/v8+6v8Dfjz66s27NJ1ycrpSOy0c+h8AAAAKlOn/6VH/Hzi56/CTr5w4//h0pXZ6OPQ/AAAAFCjT/z9E/X9Qt3/uftPAHTtum67UzgiH/gcAAIACZfr/x6j/u2553GYtdu1z/5fpSq1HOPQ/AAAAFCjT/z9F/X9wnwc/eH/tVr/9kq7UzgyH/gcAAIACZfp/RtT/3QZcP/uSmd+ssF+6UjsrHPofAAAACpTp/5+j/j+kVecVT1ly6RO+S1dqf/1OQP0PAAAABcr0/y9R/x+69kM7nzj+rb57pCu1c8Kh/wEAAKBAmf7/Ner/w645895bHjjv0wPSlVrPcOh/AAAAKFCm/2dG/X/4pbtf+eqpz2w9J12pnRsO/Q8AAAAFyvT/rKj/j9iq73HtT2x25lnpSu28cOh/AAAAKFCm/3+L+v/IXVte9sdDkwa9m67Uzg+H/gcAAIACZfp/dtT/R/04/cjFJnQaMzpdqV0QDv0PAAAABcr0/+9R/x89+Z0dDlyk32qHpiu1C/9/eFQAAADg/1Gm/+dE/X9Mt6WG3jN03O/vpCu1XuHw/h8AAAAKlOn/uVH/Hzt3wu5tz2284pnpSu2icOh/AAAAKFCm//+I+v+4HZcd/tyKQzsdlq7ULg6H/gcAAIACZfr/z6j/j997nauvG3v08DHpSu2ScOh/AAAAKFCm/+dF/X/CN1O7H/PRnK87pSu1S8Oh/wEAAKBA/3H/Vw2i/j9x2MwDD2q4WcPv05Va73DofwAAAChQpv/ni/q/+1IbPDHs6Ov2/j1dqV0WDv0PAAAABcr0fxX1/0kNFxo8d+S+j+6frtT6hEP/AwAAQIEy/V+L+v/kp187d/GDhz//RbpSuzwc+h8AAAAKlOn/+aP+P+WC6Y2Wu+jkZtukK7UrwqH/AQAAoECZ/l8g6v9TX2g5ZfKk58/okq7U+oZD/wMAAECBMv3fMOr/0yYs9cJDWza4/td0pXZlOPQ/AAAAFCjT/42i/j/9+HfW3L7ZkI/PSVdqV4VD/wMAAECBMv2/YNT/Z6xy5suXze265cR0pfaPcOh/AAAAKFCm/xtH/d/jzoda97hpxnGvpSu1fuHQ/wAAAFCgTP8vFPX/mQ/1Xaj5Nm0vPyldqV0dDv0PAAAABcr0/8JR/5+10O7fvLXfN7/vkq7UrgmH/gcAAIACZfp/kaj/zx7Wr7Zz31YrTktXateGQ/8DAABAgTL9v2jU/+cstfOkp6b26TQ3Xan1D4f+BwAAgAJl+n+xqP97NjztuR823nF4t3SlNiAc+h8AAAAKlOn/xaP+P/fpEaut1Hri12+lK7XrwqH/AQAAoECZ/l8i6v/zPttpnztnNW14SrpSuz4c+h8AAAAKlOn/JaP+P/+oix7vMmjE3sekK7WB4dD/AAAAUKBM/y8V9f8Fpz41qLZbj0dfTFdqg8Kh/wEA/j/27jzq67Hv9z99P98ShShDSKaMyZwhJHKZyVjmq0zJFCEhMiZzxpQhkciQmUjmDBkjcxnKEELImH7r3uvodx97H9d9Hdve917r+OPx+Md7nXW+1uffZ5/T9wSAAmX6f/Go/894+fQTv7/zkqfOSFdq14ZD/wMAAECBMv3fPOr/M1e48NX2x+3a+qN0pTYkHPofAAAACpTp/xZR/w8YuvNazy76SZ+X0pXadeHQ/wAAAFCgTP8vEfX/WZee3PSyia2vOiJdqQ0Nh/4HAACAAmX6f8mo/8/e8N7verwx7sNp6UptWDj0PwAAABQo0/9LRf1/zlaLzzey6Wmbb5uu1K4Ph/4HAACAAmX6f+mo/8/94+1P9zr6zZ5d0pXaDeHQ/wAAAFCgTP+3jPr/vO++e2b+excf+GO6UrsxHPofAAAACpTp/2X+R/93+48/rp2/1+orzOp4yMXLpyu1m8Kh/wEAAKBAmf5fNnr/P/CXr186YtitR41LV2rDw6H/AQAAoECZ/l8u6v8Ldm672tA/F9r4jnSldnM49D8AAAAUKNP/raL+H9RtycavtX7pvQXSldqIcPzr/q//tz4yAAAA8Ddl+n/5qP8v/OyNrztsvs9l56QrtVvC4f0/AAAAFCjT/62j/r/o7gH39P/k6t5t0pXareHQ/wAAAFCgTP+vEPX/xc3/sfPFAzZeZd10pTYyHPofAAAACpTp/xWj/r9kvtOPeu+A3569Il2p3RYO/Q8AAAAFyvT/SlH/Xzr2sUvWGNvgodXTldqocOh/AAAAKNC/6///+GLU/5f1HTJrvcOe2efCdKV2ezj0PwAAABQo8/5/laj/L3/6oEWfanh0bVi6UrsjHPofAAAACpTp/zZR/w+efOi6V71/56dbpCu10eHQ/wAAAFCgTP+vGvX/FUeNmHTYhHVH35eu1O4Mh/4HAACAAmX6f7Wo/69cav4OI5b5fodF05XaXeHQ/wAAAFCgTP+vHvX/VTdPmLLbqQe2apSu1O4Ox9/s//n/Tx4ZAAAA+Jsy/b9G1P9XPzRnbnXbjXNvTVdq94TD+38AAAAoUKb/14z6/5ommy33y73bXHxWulIbEw79DwAAAAXK9P9aUf9fe/dvs48++tyjWqcrtXvDof8BAACgQJn+bxv1/5DmWza/oemaG7dPV2rzfieA/gcAAIACZfp/7aj/r5uvvuFLb8x476p0pXZ/OPQ/AAAAFCjT/+2i/h869pl3Npl48mVLpyu1B8Kh/wEAAKBAmf5fJ+r/Ye+tM3zAog/1fixdqT0YDv0PAAAABcr0/7pR/1/fY/bWxx+31Cp3piu1h8Kh/wEAAKBAmf5fL+r/G06e2L3Nne89u3C6Uns4HPofAAAACpTp//Wj/r/xlQXPfHvHFR96IF2pPRIO/Q8AAAAFyvT/BlH/3/TqV5NevOazfZZIV2qPhkP/AwAAQIEy/b9h1P/D+7Rbd9Nfdq7Nn67UxoZD/wMAAECBMv2/UdT/Nx/cYtFj1rzo0xHpSm3e7wTQ/wAAAFCgTP+3j/p/xPuTZl2/UbPR7dKV2uPh0P8AAABQoEz/bxz1/y13916u64zXd7g4XamNC4f+BwAAgAJl+n+TqP9vbf7w3NGD+re6Ll2pPREO/Q8AAAAFyvT/plH/j5zv4ilz9x4/d+N0pTY+HPofAAAACpTp/82i/r9t7I4dmhx9Wo/705Xak+HQ/wAAAFCgTP93iPp/1FIXvHP1vePOapau1J4Kh/4HAACAAmX6f/Oo/2+/edcND31j8ckN05Xa0+HQ/wAAAFCgTP9vEfX/HQ+d2Hzdpm+2vyVdqT0TDv0PAAAABcr0/5ZR/49ucv/spxfdtf9q6Urt2XDofwAAAChQpv87Rv1/57K3vtNn4iU3DkpXas+FQ/8DAABAgTL9v1XU/3eN7LHh+Xe2fvn6dKX2fDj0PwAAABQo0/+dov6/+75uzScd98kaW6YrtQnh0P8AAABQoEz/bx31/z0L3Di79TUtu56brtReCIf+BwAAgAJl+n+bqP/HvDRu0MY7fvDoqulK7cVw6H8AAAAoUKb/O0f9f+9xpx7x8ponfrtOulJ7KRz6HwAAAAqU6f9to/6/75Cttr/xlweaDI7+fN73vBwO/Q8AAAAFyvT/P6L+v3/K+aOPmrF651bpSm1iOPQ/AAAAFCjT/9tF/f/AHatsc/tGX97yeLpSeyUc+h8AAAAKlOn/7aP+f3DRz0buu/e2349OV2qvhkP/AwAAQIEy/b9D1P8PVe+dv/Cg85s1Tldqr4VD/wMAAECBMv2/Y9T/Dz+x/KFzhu3fY+10pfZ6OPQ/AAAAFCjT/ztF/f/Ish9dcnjH68+6KF2pvREO/Q8AAAAFyvT/zlH/PzpymaOubL3+5KHpSu3NcOh/AAAAKFCm/3eJ+n/sfSvs/OSfs9pvkq7UJoVD/wMAAECBMv2/a9T/jy3wxT3rf3Js/wfTldpb4dD/AAAAUKBM/+8W9f/jvZq/d+Hmd9+4ZLpSezsc+h8AAAAKlOn/LlH/j3vjzc36HjDfy/9ipTY5HPofAAAACpTp/92j/n/iuS9brjXgqTVuTldq74RD/wMAAECBMv2/R9T/489Y+9eph23adal0pfZuOPQ/AAAAFCjT/3tG/f/kylv8OGjsH4+OTVdq74VD/wMAAECBMv2/V9T/T93wa7NT3t/r27vSldr74dD/AAAAUKBM/+8d9f/Tg55ep23DK5sskq7UPgiH/gcAAIACZfp/n6j/n1mnenPKMo07n52u1D4Mh/4HAACAAmX6v2vU/89uM3LzZSa8cMsK6Urto3DofwAAAChQpv+7Rf3/3F8HT/3ytsO+3yhdqU0Jh/4HAACAAmX6f9+o/5+fse9fj596W7Mr05Xa1HDofwAAAChQpv/3i/p/wm7Dlt110OvN+6YrtY/Dof8BAACgQJn+3z/q/xdmHfjL23s3+/n9dKX2STj0PwAAABQo0/8HRP3/4nbXtmiz0fjhr6QrtU/Dof8BAACgQJn+PzDq/5f2v3mD42f073hsulL7LBz6HwAAAAqU6f+Dov5/+fNDJg/45bPGn6UrtWnh0P8AAABQoEz/Hxz1/8TRGwx+Zs0Vv9wqXalND4f+BwAAgAJl+v+fUf+/0mzWcevseNHje6crtc/Dof8BAACgQJn+7x71/6v1F7occs3OB/yUrtS+CIf+BwAAgAJl+r9H1P+vjV/4/muOe6jdLulK7ctw6H8AAAAoUKb/D4n6//XT13rt0jtPfvWbdKX2VTj0PwAAABQo0/+HRv3/xoQZbU+b+N51f6QrtRnh0P8AAABQoEz/Hxb1/5uTXm+y2qJLndotXal9HQ79DwAAAAXK9P/hUf9P6rnEzA+anrve2+lKbd7/E6D/AQAAoECZ/j8i6v+3lntg/lZvbDPp5HSl9m049D8AAAAUKNP/PaP+f/u24z/79t4Z5x+crtRmhkP/AwAAQIEy/X9k1P+T79/u6UePXvOwp9OV2nfh0P8AAABQoEz/94r6/53Gl7Te4dTvm09PV2rfh0P/AwAAQIEy/X9U1P/vjt7p5ddvW/fnf6QrtR/Cof8BAACgQJn+Pzrq//eaDVp9pQk3Dt8tXanNCof+BwAAgAJl+v+YqP/fr49Z4ORlDuw4K12p/RgO/Q8AAAAFyvT/sVH/fzD+pBnnNHymcf90pfZTOPQ/AAAAFCjT/8dF/f/hh+cO6/B+gy8/TFdqP4dD/wMAAECBMv3fO+r/jw7buv9rY+98/OV0pTY7HPofAAAACpTp/+Oj/p9y/CkHDT3s6AN6piu1X8Kh/wEAAKBAmf4/Ier/qS+MH3fEgKvbTUpXar+GQ/8DAABAgTL93yfq/49f3n9mnwP2ebV3ulL7LRz6HwAAAAqU6f8To/7/pPd1Tc7f/LfrDktXar+HQ/8DAABAgTL9f1LU/58eelPbSZ9sfOqz6Urtj3D86/7/6tH/1mcGAAAA/p5M/58c9f9nUw97rfWft663XbpS+zMc3v8DAABAgTL93zfq/2mjn209vfUhk2akK7U54fjf6f+G/5ePDAAAAPxNmf4/Jer/6c0aPL1Ex5fOn5Ou1P4Kh/f/AAAAUKBM//eL+v/z+safdRq20GEHpSu1ueHQ/wAAAFCgTP+fGvX/F+P/mv/eX6e/s2C6Us079D8AAAAUKNP/p0X9/+VyHWasufLKG41KV6rwd/Q/AAAAlCjT/6dH/f/Vbb8v8O42g7qPT1eqBuHQ/wAAAFCgTP/3j/p/xv1Prn7RtTuevVy6UtXCof8BAACgQJn+PyPq/68bN3z5jHMnv3R5ulLN+wAA/Q8AAAAFyvT/mVH/fzNi2AordFtyzfXTlaoeDv0PAAAABcr0/4Co/79det9n3tzk0TNWTleqhuHQ/wAAAFCgTP+fFfX/zKYHf3re9L43nJeuVI3Cof8BAACgQJn+Pzvq/+8eHjnfiQ3O/qZDulLN+379DwAAAAXK9P85Uf9/f+I5px09pVPTG9KVqnE49D8AAAAUKNP/50b9/8NrnW644Ylvul2QrlQLhkP/AwAAQIEy/X9e1P+zPug7/qXubR9ZM12pFgqH/gcAAIACZfr//Kj/f/znEwdscsaYH25LV6om4dD/AAAAUKBM/w+M+v+nFsve9+eI3ovW05WqaTj0PwAAABQo0/8XRP3/8z3v77bIM1O3WSxdqRYOh/4HAACAAmX6f1DU/7Mf+7j3fsu3unVMulItEg79DwAAAAXK9P+FUf//Mn+bK0Y1fu6da9KVatFw6H8AAAAoUKb/L4r6/9cR0/qu93a10YbpStUsHPofAAAACpTp/4uj/v9t6RWve+rBO7qvmK5U8z4TQP8DAABAgTL9f0nU/783Xeqxq3r2OvvMdKWa1/36HwAAAAqU6f9Lo/7/4+Ep3Q7rM/ulJulK1Twc+h8AAAAKlOn/y6L+//Ottu2mjGq/5t3pStUiHPofAAAACpTp/8uj/p9zzNevtH1hyBmPpivVEuHQ/wAAAFCgTP8Pjvr/r35vfHNK8643LJOuVEuGQ/8DAABAgTL9f0XU/3OfXHLhQT+O+GZ4ulItFQ79DwAAAAXK9P+V/9n/1Xztp537c7vuTWvpSrV0OPQ/AAAAFCjT/1dF/T//xSse3nDXid2apytVy3DofwAAAChQpv+vjvq/wZCltt39iqaPPJSuVPM+E0D/AwAAQIEy/X9N1P+1labcMvySy37YNF2plg2H/gcAAIACZfr/2qj/q31O2/GQ3bssem26Ui0XDv0PAAAABcr0/5Co/+vfjr39mvXmbnNpulK1Cof+BwAAgAJl+v+6qP8b/nbmwGdmbnFr23SlWj4c+h8AAAAKlOn/oVH/N9p62yPXWX77m55KV6p536P/AQAAoECZ/h8W9f8Cn5wz4I5nBm7VI12pVgiH/gcAAIACZfr/+qj/G+/XqUe3EW1a9ElXqhXDof8BAACgQJn+vyHq/wV37dup6Rlf/DQ5XalWCof+BwAAgAJl+v/GqP8X+vmJm/7q3m/cvulKtXI49D8AAAAUKNP/N0X93+SRmdMef+Kx/X9NV6pVwqH/AQAAoECZ/h8e9X/TBqs13HVKiwW+S1eqNuHQ/wAAAFCgTP/fHPX/wksstuoyDd76aud0pVo1HPofAAAACpTp/xFR/y9y51vPfTm93dBf0pVqtXDofwAAAChQpv9vifp/0WNmP/r9JjP77ZWuVKuHQ/8DAABAgTL9f2vU/83eWme/WreOa3dKV6o1wqH/AQAAoECZ/h8Z9f9iTy7Yb59zB7z2cbpSrRkO/Q8AAAAFyvT/bVH/L95v4rW3XLvseUelK9Va4dD/AAAAUKBM/4+K+r/5wsec/M9tPjr81XSlahsO/Q8AAAAFyvT/7VH/t3hg1FWDVz5h/ffSlWrtcOh/AAAAKFCm/++I+n+JmwY/8Pyv9715arpStQtH1P8L/L96ZAAAAOBvyvT/6Kj/l2y5594bzux50/7pSrVOOLz/BwAAgAJl+v/OqP+XeuTqcfesN2qrv9KVat1w6H8AAAAoUKb/74r6f+kGux20/+4NW3yVrlTrhUP/AwAAQIEy/X931P8tlziy/wKXTPhpx3SlWj8c+h8AAAAKlOn/e6L+X+bOO4f9ccW+4yakK9UG4dD/AAAAUKBM/4+J+n/Z1w6asfWuQ/c/NF2pNgyH/gcAAIACZfr/3qj/lztxyAJj2m24wPHpSrVROPQ/AAAAFCjT//dF/d/qnyNWn/bjT1+9nq5U7cOh/wEAAKBAmf6/P+r/5T849OUlmy8y9Mh0pdo4HPofAAAACpTp/wei/m/97nnXLvTCq/1eSFeqTcKh/wEAAKBAmf5/MOr/Fbp37PfrqIPXnpquVJuGQ/8DAABAgTL9/1DU/yue1G+/O/sMf+30dKXaLBz6HwAAAAqU6f+Ho/5faeLjjx7Us8N5P6QrVYdw6H8AAAAoUKb/H4n6f+VHWu193YNzDt8jXak2D4f+BwAAgAJl+v/RqP9XafDuAz3f3mP9bdKVaotw6H8AAAAoUKb/x0b932aJT6/avPHgNz9PV6otw6H/AQAAoECZ/n8s6v9V71z55FfX67LL0elK1TEc+h8AAAAKlOn/x6P+X23hz4ftOfOye15LV6qtwqH/AQAAoECZ/h8X9f/qD7Tuf9slW/zxbrpSdQqH/gcAAIACZfr/iaj/17ip5UE/7j63Zb90pdo6HPofAAAACpTp//FR/6/Z8sNx8+3afY/Z6Uo173cC6H8AAAAoUKb/n4z6f60FXxr20BUj7tszXak6h0P/AwAAQIEy/f9U1P9txzTp3/nHpp9vna5U24ZD/wMAAECBMv3/dNT/a9+y0UHN2k1s9Em6Uv0jHPofAAAACpTp/2ei/m/X6vtxn77Q/sT90pVqu3DofwAAAChQpv+fjfp/nQ/ffOr35rOv/C1dqbYPh/4HAACAAmX6/7mo/9dtdt9Kjft0fXJmulLtEA79DwAAAAXK9P/zUf+vd/zaDQ4YNWSFndKVasdw6H8AAAAoUKb/J0T9v/4LX35894PVEU+mK9W8fxPQ/wAAAFCgTP+/EPX/Bo/vsEivns9d0D1dqXYOh/4HAACAAmX6/8Wo/zdseNG31zbu9dGJ6Uq1Szj0PwAAABQo0/8vRf2/0WIPTZz49h0d3klXql3Dof8BAACgQJn+fznq//ajjlt7y2d67/J9ulLtFg79DwAAAAXK9P/EqP83XvC+525dfsw9u6crVZdw6H8AAAAoUKb/X4n6f5MxfVbd+4xWf3ROV6p5/yag/wEAAKBAmf5/Ner/TW/ZpWGDEVNbfpGuVHuEQ/8DAABAgTL9/1rU/5u1Gjjthyc67dErXan2DIf+BwAAgAJl+v/1qP87nH7q4O27n33fi+lKtVc49D8AAAAUKNP/b0T9v/mEcceNbdD28ynpSrV3OPQ/AAAAFCjT/29G/b/FpPO7zJzyTaPT0pVqn3DofwAAAChQpv8nRf2/Zc+t7l9ukyVPfD5dqbqGQ/8DAABAgTL9/1bU/x3X6/LIdtMnX3lIulJ1C4f+BwAAgAJl+v/tqP+3GnjNvo+d2/fJE9KVat9w6H8AAAAoUKb/J0f932nYXad+1+3RFd5IV6r9wqH/AQAAoECZ/n8n6v+t2/Qasuw2Kx9xQLpS7R8O/Q8AAAAFyvT/u1H/b7P7iye9d+30C+amK9W8fxPQ/wAAAFCgTP+/F/V/5y8XuXKNX3f86Mt0pTowHPofAAAACpTp//ej/t/2zw0f7L/yoA47pCvVQeH4t/0/4L/nkQEAAIC/KdP/H0T9/49tf9zn4rfnbDIyXakODof3/wAAAFCgTP9/GPX/dtPWfXzJxh3erdKV6p/h0P8AAABQoEz/fxT1//YH/nLgtJ6DL/oXjV91D4f+BwAAgAJl+n9K1P877PDKGWMe3OPoe9OVqkc49D8AAAAUKNP/U6P+3/H7ha7fetSrK2+erlSHhEP/AwAAQIEy/f9x1P87jdvvvfn7LPLcjelKdWg49D8AAAAU6H/p/9r/0v+fRP2/c6PrN5vVfPjlA9OV6rBw6H8AAAAoUOb9/6dR/++y+G0tR75w8HFrpCvV4eHQ/wAAAFCgTP9/FvX/rrf/89e92g1tcFm6Uh0RDv0PAAAABcr0/7So/3frtfU5O/+472frpStVz3DofwAAAChQpv+nR/3f5Y1zD3viip8eXiVdqY4Mh/4HAACAAmX6//Oo/3d/bvw/Zuy64d7npytVr3DofwAAAChQpv+/iPp/jzNOuXXp3Uctv1C6Uh0VDv0PAAAABcr0/5dR/++50Ac7fHhJz79un2/+M/+XlerocOh/AAAAKFCm/7+K+n+ve5cb1W7mhDueSFeqY8Kh/wEAAKBAmf6fEfX/3reuesGp6zXccdl0pTo2HPofAAAACpTp/6+j/t9n+U96DVz5o002S1eq48Kh/wEAAKBAmf7/Jur/ruNWOnOxX5d9d0i6UvUOh/4HAACAAmX6/9uo/7s1mt79k2vvu+iSdKU6Phz6HwAAAAqU6f+ZUf/vu/jUrR/c5oSj10pXqhPCof8BAACgQJn+/y7q//1uX3r4tt1mrnxTulL1Ccff7P/a/8kjAwAAAH9Tpv+/j/p//5dmvPPXue2ea5CuVCeGw/t/AAAAKFCm/3+I+v+A49basOn0AZe3SFeqk8Kh/wEAAKBAmf6fFfX/gYcs0bzbJh2PezhdqU4Oh/4HAACAAmX6/8eo/w+a8vrsO6Y81qBpulL1DYf+BwAAgAJl+v+nqP8P/mj9Wx9q0O+ze9KV6pRw6H8AAAAoUKb/f476/5+H//yPzt3feviRdKXqFw79DwAAAAXK9P/sqP+7n/DaYc2eaLF3y3SlOjUc+h8AAAAKlOn/X6L+7/Fi43M+HTFw+avTleq0cOh/AAAAKFCm/3+N+v+QcaN7rXrG9n9tkK5Up4dD/wMAAECBMv3/W9T/hzY6+oK3lv/ijpXSlap/OPQ/AAAAFCjT/79H/X/Y4vuMOvOZNjsOSFeqM8Kh/wEAAKBAmf7/I+r/w2+/fIcTjjj4ig3TlerMcOh/AAAAKFCm//+M+v+IhfYY/tUDw4+/Jl2p5v1MgP4HAACAAmX6f07U/z3vvWrrlm8t0ubMdKU6Kxz6HwAAAAqU6f+/ov4/8tZ7uu+ywKsTVkxXqrPDof8BAACgQJn+nxv1f6/le545rsUel9ydrlTnhEP/AwAAQIH+ff/X5ov6/6h9h3/Y4MXBxzZJV6pzw6H/AQAAoECZ/p8/6v+jPz58ix9u77DZMulKdV449D8AAAAUKNP/DaL+P+anA5a/9cQ57z+arlTnh0P/AwAAQIEy/V+L+v/YXYbO2Xtww1G1dKUaGA79DwAAAAXK9H8V9f9xFz06YJddJmw/PF2pLgiH/gcAAIACZfq/HvV/743O6DFu7Z7LPZSuVIPCof8BAACgQJn+bxj1//Erdu701axRfzZPV6oLw6H/AQAAoECZ/m8U9f8J1559U8vvNnzw2nSluigc+h8AAAAKlOn/BaL+7/PNCrtOXf+nPTdNV6qLw6H/AQAAoECZ/m8c9f+Je39x11p77Dtf23SluiQc+h8AAAAKlOn/BaP+P6nTRxf1vXToJ5emK9W8r+l/AAAAKFCm/xeK+v/kX5c55sIhHa8Yla5Ul4VD/wMAAECBMv3fJOr/vvu+d26zzgOOXzBdqS4Ph/4HAACAAmX6v2nU/6d8vPzhn67Srs1y6Uo1OBz6HwAAAAqU6f+Fo/7v99Mq2z7028wJ49OV6opw6H8AAAAoUKb/F4n6/9RdPrul87QTLlk/XamuDIf+BwAAgAJl+n/RqP9Pa7vom3M2vu/Yy9OV6qpw6H8AAAAoUKb/m0X9f/o1k9dZuOuym52XrlRXh0P/AwAAQIEy/b9Y1P/9z/6m2b7nfPT+yulKdU049D8AAAAUKNP/i0f9f8Yma/x4e482o25IV6prw6H/AQAAoECZ/m8e9f+Zkz7c7pjxX2zfIV2phoRD/wMAAECBMv3fIur/AT1b3nH91O2XWzNdqa4Lh/4HAACAAmX6f4mo/886vfWFL9YG/nlBulINDYf+BwAAgAJl+n/JqP/PnvB5z01btXiwnq5Uw8Lxv9f/G/9fPTIAAADwN2X6f6mo/8+5f5vz5j791p63pSvV9eHw/h8AAAAKlOn/paP+P7fxWYc0ubnffGPSlWre7wTQ/wAAAFCgTP+3jPr/vOUe6dy1/2OfLJauVDeGQ/8DAABAgTL9v0zU/+ff1v+20ZdOnPZXulLdFA79DwAAAAXK9P+yUf8PrD++07p7NK3vn65Uw8Px7/r/zP+mRwYAAAD+pkz/Lxf1/wXj+9399PojuuyYrlQ3h8P7fwAAAChQpv9bRf0/aHTHS6/+rvuYr9KVakQ49D8AAAAUKNP/y0f9f2Gz844+dNbc3w5NV6pbwqH/AQAAoECZ/m8d9f9F+09efdW1t1hqQrpS3RoO/Q8AAAAFyvT/ClH/X/z5oi+/tctlO72erlQjw6H/AQAAoECZ/l8x6v9LZq0x48zBXe46Pl2pbguH/gcAAIACZfp/paj/L93umwVOOPGOqS+kK9WocOh/AAAAKFCm/1eO+v+yQa/26XV7ry2OTFeq28Oh/wEAAKBAmf5fJer/y9dZ4OprX3zuyNPTleqOcOh/AAAAKFCm/9tE/T945fUentiiunBqulKNDof+BwAAgAJl+n/VqP+vuOGnvbZcYMjTe6Qr1Z3h0P8AAABQoEz/rxb1/5Uz9h77+1tdV/ohXanuCof+BwAAgAJl+n/1qP+v2u2yro0fmH3y5+lKdXc49D8AAAAUKNP/a0T9f/U2d5xywBHtr94mXanuCYf+BwAAgAJl+n/NqP+v+euooXf3/2Zaj3SlGhMO/Q8AAAAFyvT/WlH/X7v/3cdtcHPb+lPpSnVvOPQ/AAAAFCjT/22j/h/y+RGDJzx9dpfJ6Up1Xzj0PwAAABQo0/9rR/1/3azd77+iVacxfdKV6v5w6H8AAAAoUKb/20X9P3S7K7scXJv626/pSvVAOPQ/AAAAFCjT/+tE/T9szcNXfXdqq6X2TVeqB8Oh/wEAAKBAmf5fN+r/6y8f/tya48fstHO6Uj0UDv0PAAAABcr0/3pR/99w7tBpZ/Tofdd36Ur1cDj0PwAAABQo0//rR/1/45YHNLzonEFT90pXqkfCof8BAACgQJn+3yDq/5s6PLHXZV133OKXdKV6NBz6HwAAAAqU6f8No/4ffl7fh3tsPP3Ij9OVamw49D8AAAAUKNP/G0X9f/PgTle3n7byhZ3SleqxcOh/AAAAKFCm/9tH/T9itXP6PPvbo0+/mq5Uj4dD/wMAAECBMv2/cdT/t+zfZuj8q/Rd6ah0pRoXDv0PAAAABcr0/yZR/9/6+cenzOo8+eRT05XqiXDofwAAAChQpv83jfp/5Kz3u44csuTV76Ur1fhw6H8AAAAoUKb/N4v6/7btlh27181vLbh7ulI9GQ79DwAAAAXK9H+HqP9HzZjS5bX+Lb7+Pl2pngqH/gcAAIACZfp/86j/b99tqfs7tHps/BfpSvV0OPQ/AAAAFCjT/1tE/X/HNisOPqKa78DO6Ur1TDj0PwAAABQo0/9bRv0/+q9pxw2d+sWSL6Yr1bPh0P8AAABQoEz/d4z6/86Zs7q0rbWZ3StdqZ4Lh/4HAACAAmX6f6uo/+/ac4P7p/QYePNp6Ur1fDj0PwAAABQo0/+dov6/u+PCgweN337rKelKNSEc+h8AAAAKlOn/raP+v+f3F447pet96x6SrlQvhEP/AwAAQIEy/b9N1P9jNp7R5J/nnPD68+lKtUm78Vu3O3btZvofAAAACpTp/85R/9971lozB0/76Jw30pXqpXDofwAAAChQpv+3jfr/vquXeO35jZc99IR0pXo5HPofAAAACpTp/39E/X//Wq+33XCVAWvNTVeqieHQ/wAAAFCgTP9vF/X/A12Pf/r73zq+ckC6Ur0SDv0PAAAABcr0//ZR/z/46QOta0NmDtkhXaleDYf+BwAAgAJl+n+HqP8fmn3J/Pt0btf3y3Slei0c+h8AAAAKlOn/HaP+f3in7T67ZY+fFnwtXaleD4f+BwAAgAJl+n+nqP8fmTlogS0u3fDro9OVat7vBNT/AAAAUKBM/+8c9f+je+4045Xvho7vl65Ub4ZD/wMAAECBMv2/S9T/Yzue9PKQ9fc98N10pZoUDv0PAAAABcr0/65R/z/2+5jVj1x7wpJ7pivVW+HQ/wAAAFCgTP/vFvX/40O2PujNWQ1nz05XqrfDof8BAACgQJn+7xL1/7iVzh23wuBRN3+SrlSTw6H/AQAAoECZ/t896v8n2o8fduIuPbfeOl2p3gmH/gcAAIACZfp/j6j/x198Sv/zbh+87m/pSjXvMwH1PwAAABQo0/97Rv3/5OSeJ046cY/X90tXqvfCof8BAACgQJn+3yvq/6eOuuea1i3mnLNTulK9Hw79DwAAAAXK9P/eUf8/3feqh/q82OHQmelK9UE49D8AAAAUKNP/+0T9/8zTe+x5/lvD1+qerlQfhkP/AwAAQIEy/d816v9nH/rhsU4LHPzKk+lK9VE49D8AAAAUKNP/3aL+f65J+273HvHqkHfSlWpKOPQ/AAAAFCjT//tG/f/8Uk37Tn9gkb4n/ps5/Q8AAAAFyvT/flH/T7j55euW6Nz39CHpSvVxOPQ/AAAAFCjT//tH/f/CfI17XzTk0WGbpSvVJ+HQ/wAAAFCgTP8fEPX/i2Nfu+KM35Z8Ya10pfo0HPofAAAACpTp/wOj/n/p7p/vW3OVyatfkq5Un4VD/wMAAECBMv1/UNT/Lzdff7d3N97x4AbpSjUtHPofAAAACpT2/7ze/w+1g6P+n9itR/Prpg0acFO6Uk0Ph/4HAACAAs2/xNL15//r9///jPr/lc9und3znJXffjhdqT4Ph/4HAACAAmV+/r971P+v/nLjO5t3nb5Bi3Sl+iIc+h8AAAAKlOn/HlH/v7Zztw1fHd9q23vSlerLcOh/AAAAKFCm/w+J+v/1S0/dfnKPqbc1TVeqr8Kh/wEAAKBAmf4/NOr/NzYcN3qVWu8fW6Yr1Yxw6H8AAAAoUKb/D4v6/80Vzh/Ue+qYxR5JV6qvw6H/AQAAoED/rv/n1uabL+r/SUO3OuKsp9vut0G6Un0TDv0PAAAABcq8/z8i6v+3vvvs/H+0+mbs1elK9W04ov5v+P/qkQEAAIC/KdP/PaP+f3uvVQ59oH+nmQPSlWpmOLz/BwAAgAJl+v/IqP8nb7X8Nh/ffPYiK6Ur1Xfh0P8AAABQoEz/94r6/50/3hu5+ANdT6/Sler7cOh/AAAAKFCm/4+K+v/dbsvsfMERQ4aNTFeqH8Kh/wEAAKBAmf4/Our/9z776J5+C7R/4d50pZoVDv0PAAAABcr0/zFR/7//yxeXrP3W7NX/ReNXP4ZD/wMAAECBMv1/bNT/H+y8wlEfvdjr4BvTleqncOh/AAAAKFCm/4+L+v/Dtd9seWiLOwZsnq5UP4dD/wMAAECBMv3fO+r/j65s/uvVJ1Zvr5GuVLPDof8BAACgQJn+Pz7q/ylnrv3e07c/t8HAdKX6JRz6HwAAAAqU6f8Tov6fuumXm627yxbbrpeuVL+GQ/8DAABAgTL93yfq/483WeiItoPn3nZZulL9Fg79DwAAAAXK9P+JUf9/cvYrg6bM6vLj+elK9Xs49D8AAAAUKNP/J0X9/+k1v4wetPZli62SrlR/hEP/AwAAQIEy/X9y1P+ftV13+1PWb7rf7elK9Wc49D8AAAAUKNP/faP+n9btipGPfzdx7ELpSjUnHPofAAAACpTp/1Oi/p/+2V7b7Hpp95nLpivVX+HQ/wAAAFCgTP/3i/r/81+OPXSZPUYs8kS6Us0Nh/4HAACAAmX6/9So/7/Y+fbzv3xs+0lj05X6vEP/AwAAQIEy/X9a1P9fftfrqOMPH7jeUulKPfwd/Q8AAAAlyvT/6VH/f7XXXZcMaNTmsEXSlXqDcOh/AAAAKFCm//tH/T9jq2vuefuDL86/K12p18Kh/wEAAKBAmf4/I+r/r//osnOb5/u9ukK6Uq/Cof8BAACgQJn+PzPq/2+6vHxb35aPtTs7XanP+wBA/Q8AAAAFyvT/gKj/v/26aecL+7U49cp0pd4wHPofAAAACpTp/7Oi/p85t/0hU0e+dd1G6Uq9UTj0PwAAABQo0/9nR/3/Xecfzltrq3ZfXpSu1Od9v/4HAACAAv3//T/vJ/j/5/4/J+r/78+f9PsG189svHa6Um8cDv0PAAAABcq8/z836v8fNm+x1IQ5HQ/YJF2pLxgO/Q8AAAAFyvT/eVH/z1q93SZXrDDg8aHpSn2hcOh/AAAAKFCm/8+P+v/HK7764OAOy/68ZLpSbxIO/Q8AAAAFyvT/wKj/f/pixw1u/fij5g+mK/Wm4dD/AAAAUKBM/18Q9f/PB1w8ee8zT+h4c7pSXzgc+h8AAAAKlOn/QVH/z97+4V8a7H/f8H+xUl8kHPofAAAACpTp/wuj/v/lx94tftih56RV05X6ouHQ/wAAAFCgTP9fFPX/r13u/6vX1aPWOzddqTcLh/4HAACAAmX6/+Ko/3/7+sRlr53d8LDB6Up9sXDofwAAAChQpv8vifr/97m7bj5xjQnnr5Ou1Od1v/4HAACAAmX6/9Ko///ofMHULdvv++rj6Uq9eTj0PwAAABQo0/+XRf3/Z5t+t5//9dB2rdKVeotw6H8AAAAoUKb/L4/6f86wx3fsc+GGpzZOV+pLhEP/AwAAQIEy/T846v+/Bp53ZOt9frpudLpSXzIc+h8AAAAKlOn/K6L+n7tex4GTxizyZbN0pb5UOPQ/AAAAFCjT/1f+Z//X51t8xsf3HvVq4/vTlfrS4dD/AAAAUKBM/18V9f/8t6/VoFOTgw+4JV2ptwyH/gcAAIACZfr/6qj/G4xbYqUlXh/+eMN0pb5MOPQ/AAAAFCjT/9dE/V9r9PpT01/p8POgdKW+bDj0PwAAABQo0//XRv1fnXD82q2bzWm+WrpSXy4c+h8AAAAKlOn/IVH/1198YOKk3nt03DJdqbcKh/4HAACAAmX6/7qo/xt+dMm35981ePj16Up9+XDofwAAAChQpv+HRv3f6PDtFumz//Rbeqcr9Xnfo/8BAACgQJn+Hxb1/wLPDZo288yVO09KV+orhOO/6P/af+cjAwAAAH9Tpv+vj/q/8Rk7NVzu40HNnk1X6iuGw/t/AAAAKFCm/2+I+n/BXietun2HHb8/LF2prxQO/Q8AAAAFyvT/jf/Z///xn+fGrjD50RnpSn3lcOh/AAAAKFCm/2+K3v83GfbxgF/nLNl1u3Slvko49D8AAAAUKNP/w6P+b9qmTY+Frn+0yUHpSr1NOPQ/AAAAFCjT/zdH/b/west2Omirvt/OSVfqq4ZD/wMAAECBMv0/Iur/RQa+f9OdI8++8R/pSn21cOh/AAAAKFCm/2+J+n/RHX798IF+nfpPT1fqq4dD/wMAAECBMv1/a9T/zb7fYot/tPxmjVnpSn2NcOh/AAAAKFCm/0dG/b/YtGr5xZ9v+/Ju6Up9zXDofwAAAChQpv9vO3O+Wrjrix/49JyPPxhz1ofpSn2tcOh/AAAAKFCm/0dF7/+br3HwYqs06t2jf7pSbxsO/Q8AAAAFyvT/7VH/t7hs5PeTD5/avme6Ul87HPofAAAACpTp/zui/l/inGFvnPVYq8kvpyv1duHQ/wAAAFCgTP+Pjvp/yS32Xb/3Xc/d8k26Ul8nHPofAAAACpTp/zuj/l9q2LXvft276rxLulJfNxz6HwAAAAqU6f+7ov5fus2Bmy7V7I5m3dKV+nrh0P8AAABQoH/T/wvMN1/t7qj/W653yDI7vdLr+z/Slfr64dD/AAAAUKDM+/97ov5fZuDNv41/ffajJ6cr9Q3C8V/0f+v/zkcGAAAA/qZM/4+J+n/Zr7tc2qhJ+65vpyv1DcPh/T8AAAAUKNP/90b9v1yXa47+6aghTZ5OV+obhUP/AwAAQIEy/X9f1P+tOt+1001jun57cLpSbx8O/Q8AAAAFyvT//VH/Lz+319177DPixvfTlfrG4dD/AAAAUKBM/z8Q9X/rPwfO2fXC7v37piv1TcKh/wEAAKBAmf5/MOr/FbbdZfnHv564xrHpSn3TcOh/AAAAKFCm/x+K+n/F3fts8WX7pi+/kq7UNwuH/gcAAIACZfr/4aj/V/ryvg+XWeOys7ZKV+odwqH/AQAAoECZ/n8k6v+Vhy26/pTZXXp8lq7UNw+H/gcAAIACZfr/0aj/V2kz+Y22V89t/1O6Ut8iHPofAAAACvSf/d8ofOV/6v+xUf+3We+b70/ZYYvJe6cr9S3Dof8BAACgQJn3/49F/b/qwDUWG9R7zg4fpSv1juHQ/wAAAFCgTP8/HvX/amt8+duid3UYfUa6Up/3mYD6HwAAAAqU6f9xUf+vftnay3z2yuC5R6Qr9U7h0P8AAABQoEz/PxH1/xrnNN/04WZ7tHopXalvHQ79DwAAAAXK9P/4qP/X3OLNd7dp8uo+26Yr9W3Cof8BAACgQJn+fzLq/7XWfva3Wa8v8tC0dKXeORz6HwAAAAqU6f+nov5ve2WDZeYfM/zTH9OV+ryfCdD/AAAAUKBM/z8d9f/aZ2686V5HHVzrkq7U/xEO/Q8AAAAFyvT/M1H/t9v0r3dHXji099fpSn27cOh/AAAAKFCm/5+N+n+dXz+85Yl99r1s+3SlPu9r+h8AAAAKlOn/56L+X7dTy213bv/TswemK/UdwqH/AQAAoECZ/n8+6v/19m59+NJfb7jKn+lKfcdw6H8AAAAoUKb/J0T9v/43n587Y/aoo45LV+o7hUP/AwAAQIEy/f9C1P8bXLvNke3W6Hnxm+lKfedw/O/1/6L/V48MAAAA/E2Z/n8x6v8NVzxr4Ic7THjvuXSlvks4vP8HAACAAmX6/6Wo/zfa6JHbB17dcOPD05X6ruHQ/wAAAFCgTP+/HPV/+4v673jqmR/t0DFdqe8WDv0PAAAABcr0/8So/zde+/GbPtl/2dGfpiv1LuHQ/wAAAFCgTP+/EvX/Jlf267RYh/vm/pyu1HcPh/4HAACAAmX6/9Wo/zc9s2OPbT8+odU+6Up9j3DofwAAAChQpv9fi/p/s03PG/DgnJn7fJCu1PcMh/4HAACAAmX6//Wo/zt0O/GXpiu0e+iUdKW+Vzj0PwAAABQo0/9vRP2/+Wf3t/hrqwGfHpOu1PcOh/4HAACAAmX6/82o/7f45YIN7ri+Y21iulKf95kA+h8AAAAKlOn/SVH/b7nzrpO79Xus90npSr1rOP5O/zf6P3xkAAAA4G/K9P9bUf93XOKgj5qM7HfZW+lKvVs4vP8HAACAAv0X/d8g3G9H/b/VnUO2nPv8W88+k67U9w2H/gcAAIACZd7/T476v9MjI1qNbtlilX+mK/X9wqH/AQAAoECZ/n8n6v+tGxz6Z9dGA4/6Nl2p7x8O/Q8AAAAFyvT/u1H/b3PShMWv/2D7hv9ipX5AOPQ/AAAAFCjT/+9F/d954vw/HPPYF+91TVfqB4ZD/wMAAECBMv3/ftT/27672eubHt5m49/TlfpB4dD/AAAAUKBM/38Q9f8/us9Z78Wru2y+RLpSPzgc+h8AAAAKlOn/D6P+3+7JLd/bY4fLPnwgXanP+50A+h8AAAAKlOn/j6L+377fb5vdtMYWA0ekK/Xu4dD/AAAAUKBM/0+J+n+HY55p+dPsuT3nT1fqPcKh/wEAAKBAmf6fGvX/jm/Vf230dffWF6cr9UPCof8BAACgQJn+/zjq/52G7PV45/YjnmqXrtQPDYf+BwAAgAJl+v+TqP93XumKAx/ap+lVG6cr9cPCof8BAACgQJn+/zTq/13a337GpxdO7HNdulI/PBz6HwAAAAqU6f/Pov7f9eJjr292VPuGrdOV+hHh0P8AAABQoEz/T4v6f7ddd/6k8ZjZX5yVrtR7hkP/AwAAQIEy/T896v8uP19Y+/31rvdfla7UjwyH/gcAAIACZfr/86j/d//k3hXvbjJk9/bpSr1XOPQ/AAAAFCjT/19E/b/Hfic/eUCzapnH0pX6UeHQ/wAAAFCgTP9/GfX/nu3ebnftK8/9vnS6Uj86HPofAAAACpTp/6+i/t/rqsVf6XVXr7sXTlfqx4RD/wMAAECBMv0/I+r/vQes/s2Wve/Y9c50pX5sOPQ/AAAAFCjT/19H/b/PZt8tPPHw3ptfmK7UjwuH/gcAAIACZfr/m6j/uw5pO33vx8Z8uHq6Uu8dDv0PAAAABcr0/7dR/3db6etGt37QauAW6Ur9+HDofwAAAChQpv9nRv2/b/s32vzQaGrPYelK/YRw6H8AAAAoUKb/v4v6f7+Ll3y2QctOrRdNV+p9wqH/AQAAoECZ/v8+6v/9Z067b+zzZz91X7pSPzEc+h8AAAAKlOn/H6L+P2DPFXfbfmTbq25NV+onhUP/AwAAQIEy/T8r6v8DOy7Ve7l+3/RplK7UT/4f/1lN/wMAAECJMv3/Y9T/B/0+5YqZ1y/ZcFy6Uu8bDv0PAAAABcr0/09R/x/82+ZPztpq8hfLpyv1U8Kh/wEAAKBAmf7/Oer/f279x4rzr9D3/gXSlXq/cOh/AAAAKFCm/2dH/d99n6dqe815dPc70pX6qeHQ/wAAAFCgTP//EvV/j28bfTLy45WXaZOu1E8Lh/4HAACAAmX6/9eo/w8ZcuvCPTpM//2cdKV+ejj0PwAAABQo0/+/Rf1/6Eo9vrls/x3vviJdqfcPh/4HAACAAmX6//eo/w9r3+2VZ88ctOu66Ur9jHDofwAAAChQpv//iPr/8ItvbNd+zYnXnJuu1M8Mh/4HAACAAmX6/8+o/49od8Czd/3S9KRV05X6gHDofwAAACjQv+n/2nzzzTcn6v+eVw1tc+A1I1ZcJ12pnxUO/Q8AAAAFyrz//yvq/yMHDG+04I7dnxmcrtTPDof+BwAAgAJl+n9u1P+9Njt8+m97zx3UKl2pz/udgPofAAAACvTv+7+aL+r/o46bVH9m0Ba9Hk9X6vM+E1D/AwAAQIEy/T9/1P9Hv9Tii3VmXLbl6HSlfl449D8AAAAUKNP/DaL+P2ZKu+cP2ajLlMbpSv38cOh/AAAAKFCm/2tR/x97yFcrX/PGHXfen67UB4ZD/wMAAECBMv1fRf1/3MiXu17atNfOzdKV+gXh0P8AAABQoEz/16P+771s07GnHf3c0g3TlfqgcOh/AAAAKFCm/xtG/X/8Au2HrnZv9est6Ur9wnDofwAAAChQpv8bRf1/wn0/nPLBnUPuXS1dqV8UDv0PAAAABcr0/wJR//d5fo+rWx3XdbdB6Ur94nDofwAAAChQpv8bR/1/4mlX9fl20dnV9elK/ZJw6H8AAAAoUKb/F4z6/6Qj7tnr0Yntp2+ZrtQvDYf+BwAAgAJl+n+hqP9PfrPnwzu8/801S6Ur9cvCof8BAACgQJn+bxL1f9/jRu//esO2J41NV+qXh0P/AwAAQIEy/d806v9TXjr6iZUOO3vFu9KV+uBw6H8AAAAoUKb/F476v9+UfW48eWynZxZJV+pXhEP/AwAAQIEy/b9I1P+nHnL56efcNnXQ2elK/cpw6H8AAAAoUKb/F436/7RG3RfqcGqrXiukK/WrwqH/AQAAoECZ/m8W9f/p42756rX/j707Ddt67P9+Tzl+h5RZhkyZhy5TGZJ5nkWkkCnJmITMSshMJMkQGSsSkSFJkiGEMhPSRbgyJUMirO1e99767/far3Xv27XW+m/b/uD1eqCvzvP4bMfTt5/zPFZ+ZIct05XawHDofwAAAChQpv+Xifq/1/A7Jt32co9PB6QrtZvDof8BAACgQJn+Xzbq/97LdtzwhOZXjdg4XakNCof+BwAAgAJl+n+5qP8vmjfyhofn77PfNelK7ZZw6H8AAAAoUKb/m0b932eXE87odPvMlW5LV2q3hkP/AwAAQIEy/b981P8Xd2jXbtEd1/5t63SltuC/Ceh/AAAAKFCm/1eI+v+S7wY88scRY0Y9nq7Ubg+H/gcAAIACZfp/xaj/L71ly6O273POASukK7XB4dD/AAAAUKBM/68U9X/ftWaPe33Ge4v8m5XaHeHQ/wAAAFCgTP83i/r/sq1evf2W7VaYeXe6UrszHPofAAAACpTp/5Wj/r/82ia9Tpp89Gf7/49/u+N/WakNCYf+BwAAgAJl+n+VqP+v2OSNm2YvddfC36YrtbvCof8BAACgQJn+XzXq/ytvWvTshqct2f6PdKW24GcC9D8AAAAUKNP/q0X9f1Wflod0GPHG6EPTldo94dD/AAAAUKBM/68e9f/V2/w8+t5RB/35brpSuzcc+h8AAAAKlOn/5lH/X3PWvbO/7NZ/lbPTldp94dD/AAAAUKBM/68R9f+1kzsv03Txbfc8Ol2p3R8O/Q8AAAAFyvT/mlH/X/dBx1Y7Tf1z+PPpSm1oOPQ/AAAAFCjT/2tF/d+v8x1TH92ymnZOulIbFg79DwAAAAXK9P/aUf9fP+SZhx6Y9XKbj9KV2vBw6H8AAAAoUKb/14n6/4Zm57U99KoTT309Xak9EA79DwAAAAXK9P+6Uf/3X2LHUxc/ZFi/7ulK7cFw6H8AAAAoUKb/14v6/8bRl13z1z5bvPR5ulIbEQ79DwAAAAXK9P/6Uf8PeG7tY7e5+ef1dkpXag+FQ/8DAABAgTL9v0HU/zed988+k+YedsYh6UptZDj0PwAAABQo0/8bRv0/8NQPhtze4rb+P6crtYfDof8BAACgQJn+bxH1/83vrLZz9+12/OztdKX2SDj0PwAAABQo0///iPp/0FkfD/9lRp+Fe6QrtVHh0P8AAABQoEz/bxT1/y2Tm+1T9dmkfdd0pfZoOPQ/AAAAFCjT/xtH/X/rB81PanfE96NfSFdqj4VD/wMAAECBMv2/SdT/t3X+8oq7djzjzz3TldrocOh/AAAAKFCm/zeN+v/2hZv+tdLtj64yK12pPR4O/Q8AAAAFyvT/ZlH/Dx779iqz5q+y55/pSu2JcOh/AAAAKFCm/1tG/X/Hw//a7tnmnww/Kl2pPRkO/Q8AAAAFyvR/q6j/72y6yfT9Xl532sx0pfZUOPQ/AAAAFCjT/5tH/T9k+cnXHLjyV232SFdqY8Kh/wEAAKBAmf7fIur/u0Ysdurd5+916gHpSu3pcOh/AAAAKFCm/7eM+v/upzZt++vQK/rNSVdqY8Oh/wEAAKBAmf7fKur/exr8+lDt6aYv9UpXas+EQ/8DAABAgTL93zrq/3vPOnjn57q+s97H6UptXDj0PwAAABQo0/9bR/1/3+T+Q1pV553xWrpSezYc+h8AAAAKlOn/NlH/3//BsD7HfzS2/4npSm18OPQ/AAAAFCjT/9tE/T+086nHDphxzhL/TFdqz4VD/wMAAECBMv2/bdT/w54bccUS2435Ycd0pTYhHPofAAAACpTp/+2i/h9+3kkn/XnECmM7pCu158Oh/wEAAKBAmf7fPur/B049YJ/hfd477Jd0pTYxHPofAAAACpTp/x2i/n/wnYHDD7t9n2XPTVdqL4RD/wMAAECBMv2/Y9T/I1646Ipvd7xqzrR0pfZiOPQ/AAAAFCjT/ztF/f9Qr91PWr352vdPTldqL4VD/wMAAECBMv2/c9T/I0+6YJ995s/c49R0pfZyOP73/d/w/5e3DAAAAPyH/h/7v8H/+Mciu0T9//CUp4c/tfJqW7yTrtQmhcPzfwAAAChQ5vn/rlH/P7LMoHeHvDz9nbPSldor4dD/AAAAUKBM/+8W9f+oYUduddDQHhcdk67UXg2H/gcAAIACZfp/96j/H32my/L18x85ZmK6UnstHPofAAAACpTp/z2i/n+suvvnn7tutH7bdKW24DMB9D8AAAAUKNP/e0b9P/r0hVbe7OlvX/kuXam9Hg79DwAAAAXK9P9eUf8/Pumlec9/tPPg39OV2hvh0P8AAABQoEz/7x31/xMfz/9gYHXJBR3Tldqb4dD/AAAAUKBM/+8T9f+TXdu0OW6pjkv0TldqU8Kh/wEAAKBAmf7fN+r/p174berfk2/54ZN0pTY1HPofAAAACpTp//2i/h/Ta/tWTUZsNfbVdKX2Vjj0PwAAABQo0//7R/3/9EmLLNPxtF8POyFdqb0dDv0PAAAABcr0f9uo/8dOeX72g91OXvaLdKX2Tjj0PwAAABQo0/8HRP3/zGObXbbsqAfm7J6u1N4Nh/4HAACAAmX6/8Co/8c1mtvls6mL3H9gulJ7Lxz6HwAAAAqU6f92Uf8/u+rru41e/MU9fkpXau+HQ/8DAABAgTL9f1DU/+OHNh66x6ztt9grXal9EA79DwAAAAXK9P/BUf8/N3/lEcts+fc736QrtQ/Dof8BAACgQJn+bx/1/4TdP9l/xiEHXjQ/Xal9FA79DwAAAAXK9P8hUf8/3+6r7o9fdf0xR6YrtWnh0P8AAABQoEz/d4j6f+LXa1y7+82Lr/9WulL7OBz6HwAAAAqU6f+OUf+/cPslnS/ZZ/Irp6UrtU/Cof8BAACgQJn+PzTq/xfX3e2i01p0Hnx8ulL7NBz6HwAAAAqU6f/Dov5/qWXvu9aee88FLy600C2//q8rtenh0P8AAABQoEz/Hx71/8tXjNnl/eqdczdIV2qfhUP/AwAAQIEy/d8p6v9JG54/bL+Pmg66Ol2pzQiH/gcAAIACZfr/iKj/X7l+3N7PPj128u3pSu2f4dD/AAAAUKBM/x8Z9f+rl15+8qyu5220fbpS+zwc+h8AAAAKlOn/o6L+f237na5c6fyvujyartS+CIf+BwAAgAJl+v/oqP8nn7H064cPXbfvUulKbWY49D8AAAAUKNP/x0T9//or728y7OUrptbTldqX4dD/AAAAUKBM/3eO+v+NT75bYv7Ke216X7pS+yoc+h8AAAAKlOn/Y6P+f/P4Ft8uOf/RnVdPV2pfh0P/AwAAQIEy/d8l6v8p9zW6foXmZ9wzLl2p/Ssc+h8AAAAKlOn/46L+n7r6m6d/seMncx9IV2qzwqH/AQAAoECZ/u8a9f9bjX856JHbV1l+0XSl9k049D8AAAAUKNP/x0f9//aoVqN26dPnqEvTldq34dD/AAAAUKBM/58Q9f87L95w5GVH7PjsuulK7btw6H8AAAAoUKb/T4z6/93eHZ7pud33szZLV2rfh0P/AwAAQIEy/X9S1P/vndxt8BozNml8Y7pS+yEc+h8AAAAKlOn/k6P+f3/qg73fmvvzuaPTldrscOh/AAAAKFCm/0+J+v+DM04csGeLLQYtn67UfgyH/gcAAIACZfq/W9T/H77y8Flj97lt8sLpSm1OOPQ/AAAAFCjT/6dG/f/RJzd1+OHmwza6J12p/RQO/Q8AAAAFyvR/96j/px1/0OOrXPVyl03SldrP4dD/AAAAUKBM/58W9f/HiwyZeO8hVd9r05XaL+HQ/wAAAFCgTP/3iPr/k2e7rtFhy2FTb01Xar+GQ/8DAABAgTL9f3rU/58+0GmhhrNO3LR1ulKbGw79DwAAAAXK9P8ZUf9PX+rWf85evP/OF6crtd/Cof8BAACgQJn+PzPq/8+WPXfUt1MPuqd5ulKbFw79DwAAAAXK9H/PqP9nDB9/0Oqj/py7VbpS+z0c+h8AAAAKlOn/s6L+/+e4vqfv023b5W9KV2p/hEP/AwAAQIEy/X921P+f13e5/qnT7jpqpXSlNj8c+h8AAAAKlOn/c6L+/+KMGb0vHHH0s2PTldqf4dD/AAAAUKBM/58b9f/MV9YbfN3kN2aNSFdqf4VD/wMAAECBMv1/XtT/X36y6jMfLbVk4yXSldrf4dD/AAAAUKBM/58f9f9Xx087coPe4z49KV2pFhz6HwAAAAqU6f8Lov7/+sWVHn/sngt2mJSuVOF79D8AAACUKNP/F0b9/6/e0zvsOPGtk6enK1WDcOh/AAAAKFCm/3tF/T/r5JlnLbf6slddmK5UDcOh/wEAAKBAmf7vHfX/N1PXGvBVg+sm/piuVIuEQ/8DAABAgTL9f1HU/9+eP6bXmE/brnlQulLVwqH/AQAAoECZ/u8T9f93E3rfvvezM87aNV2pFnwAgP4HAACAAmX6/+Ko/79/d7dxq3VufvOX6UpVD4f+BwAAgAJl+v+SqP9/6H7JUd/1nTazU7pSLXi9/gcAAIACZfr/0qj/Zz9011q/HNpskb/SlapROPQ/AAAAFCjT/32j/v9xheMnVFuPPuBf6Uq1WDj0PwAAABQo0/+XRf0/p+ERn7Wb2XPUPulK1Tgc+h8AAAAKlOn/y6P+/2nMbQ3u+u3r315OV6om4Vh2oYWq/+Z3DAAAAPynMv1/RdT/P7++9Xdd1t5gpePSlWrxcHj+DwAAAAXK9P+VUf//cvbfS9686+X7nZ6uVEuEQ/8DAABAgTL9f1XU/78e++LGEwftPmJKulItGQ79DwAAAAXK9P/VUf/P/bDh5E2vG/zp3HSlWioc+h8AAAAKlOn/a6L+/+38Ces90K7TDu3TlWrpcOh/AAAAKFCm/6+N+n/ehPqLh7acc/LO6Uq1TDj0PwAAABQo0//XRf3/+7vbfbH4962u+ixdqRZ0v/4HAACAAmX6v1/U/390/6P666eRE09JV6rlwqH/AQAAoECZ/r8+6v/5TRY9bfdNuq/5RrpSNQ2H/gcAAIACZfr/hqj//3zijf6Pt51w1ofpSrV8OPQ/AAAAFCjT//2j/v/r7p8fm3HjQjefn65UK4RD/wMAAECBMv1/Y9T/f6/Y8sBlzvxj5oR0pVoxHPofAAAACpTp/wH/1f/VQmceMOj8YW0WOTZdqVYKh/4HAACAAmX6/6ao/xd+Y+B5V0wacMCZ6UrVLBz6HwAAAAqU6f+BUf83+GjE4R8v137Ue+lKtXI49D8AAAAUKNP/N0f93/Dok8Zs0mjSb4elK9Uq4dD/AAAAUKBM/w+K+n+R5SYdMuvdRiv9lq5Uq4ZD/wMAAECBMv1/S9T/tZFLjF7p8aH7/ZCuVKuFQ/8DAABAgTL9f2vU/9XTm9+034ldR+yXrlSrh0P/AwAAQIEy/X9b1P/1heac/eygpYffla5UC16j/wEAAKBAmf6/Per/Re/e9Pa1d52yZ8N0pVojHPofAAAACpTp/8FR/zda8dde76/da5Xl0pVqzXDofwAAAChQpv/viPp/sSaTj7rkt/F/PpGuVGuFQ/8DAABAgTL9f2fU/42fWGzcaTPXHN0mXanWDof+BwAAgAJl+n9I1P9N/jhsXsutP28/KF2p1gmH/gcAAIACZfr/rqj/F9/p9pUnHLrfwv3SlWrdcOh/AAAAKFCm/++O+n+J9ve3uanvNZ9tlK5U64VD/wMAAECBMv1/T9T/S/5w9AddO5/d/+Z0pVo/HPofAAAACpTp/3uj/l9qo53v7fXsE2dska5UG4RD/wMAAECBMv1/X9T/S9986e7XfrriemumK9WG4dD/AAAAUKBM/98f9f8ylzx7/IcNPnzponSlahEO/Q8AAAAFyvT/0Kj/l936nL4brr5rvybpSvWPcOh/AAAAKFCm/4dF/b/cfh+d9MPEvqeOTFeqBZ8JoP8BAACgQJn+Hx71f9O5q1yxyj0t2oxJV6qNw6H/AQAAoECZ/n8g6v/lP193+J69Z01bOV2pNgmH/gcAAIACZfr/waj/Vzj0s33GnrjZ8G3TlWrTcOh/AAAAKFCm/0dE/b/iH2sOWePx2Xveka5Um4VD/wMAAECBMv3/UNT/K+30xc5vvXvkKlemK1XLcOh/AAAAKFCm/0dG/d+s/afHXtbozj9bpCtVq3DofwAAAChQpv8fjvp/5R9W7NNzuQajh6Yr1ebh0P8AAABQoEz/PxL1/yrXfDP39UkT29fSlWqLcOh/AAAAKFCm/0dF/b/qlhs13X5Yt4WXSVeqLcOh/wEAAKBAmf5/NOr/1dZcYfOTzhzx2SPpSrVVOPQ/AAAAFCjT/49F/b/6oKnv3XJjh/6LpStV63DofwAAAChQpv9HR/3f/LaWffu2HXjGsHSl2joc+h8AAAAKlOn/x6P+X2ONn48/a5PW641PV6o24dD/AAAAUKBM/z8R9f+aW7yx+5o/zXtp1XSl2iYc+h8AAAAKlOn/J6P+X6vfovdO/b5LvxvSlWrbcOh/AAAAKFCm/5+K+n/tPx7YZ7mW953aKl2ptguH/gcAAIACZfp/TNT/6+x0yvCv2jVus3a6Um0fDv0PAAAABcr0/9NR/6/b/pArHrvu1WmXpSvVDuHQ/wAAAFCgTP+Pjfp/vR+uP2nHxxvtsXi6Uu0YDv0PAAAABcr0/zNR/6+/X7s+H5046f6H05Vqp3DofwAAAChQpv/HRf2/wdwBx27QqOucp9KVaudw6H8AAAAoUKb/n436f8PPR+584btDl22WrlS7hEP/AwAAQIEy/T8+6v8Wh54w5LpJbQ4bmK5Uu4ZD/wMAAECBMv3/XNT//9irV5/Wy/0xdvN0pdotHPofAAAACpTp/wlR/2/001PHvnZm+x/WSleq3cOh/wEAAKBAmf5/Pur/jb+6eOc7hw1Yok+6Uu0RDv0PAAAABcr0/8So/zc5Ytchp7TtfsE26Uq1Zzj0PwAAABQo0/8vRP2/6Z1dPz7zxpGDb0lXqr3Cof8BAACgQJn+fzHq/83WGbL95T8t9Mp16Uq1dzj0PwAAABQo0/8vRf3fcrNbV397kwnr/yNdqfYJh/4HAACAAmX6/+Wo/1td3enP5i07HTMkXan2DYf+BwAAgAJl+n9S1P+b//3XMjO/H3xRg3Sl2i8c+h8AAAAKlOn/V6L+32K31rOXv67VO03TlWr/cOh/AAAAKFCm/1+N+n/LAxtM3bndnC2eTFeqtuHQ/wAAAFCgTP+/FvX/Vt+80GrUrhvscX26Uh0QDv0PAAAABcr0/+So/1vvVX3QYtDX97dMV6oDw6H/AQAAoECZ/n896v+tf3quzQe/7T5nnXSlahcO/Q8AAAAFyvT/G1H/t/nq95WvWfvyZS9PV6qDwqH/AQAAoECZ/n8z6v9tjth2Xu+tmx3WOF2pDg6H/gcAAIACZfp/StT/227/Zr+XZ04bOzxdqdqHQ/8DAABAgTL9PzXq/+0ubdRt8749f3g2XakOCYf+BwAAgAJl+v+tqP+3v77VvkcfOnqJVdKVqkM49D8AAAAUKNP/b0f9v8OGv4y88dm2F9yfrlQdw6H/AQAAoECZ/n8n6v8de8y876XO1w1eJF2pDg2H/gcAAIACZfr/3aj/d3ptrT22aND8lX/T+NVh4dD/AAAAUKBM/78X9f/O01fqesynM9Yfla5Uh4dD/wMAAECBMv3/ftT/uxw3/dL+Ey84Zrt0peoUDv0PAAAABcr0/wdR/++69IUnd1h93EV3pivVEeHQ/wAAAFCgTP9/GPX/bg+OvfLe3su+c0W6Uh0ZDv0PAAAABcr0/0dR/+8+vs+w2fe8tcWG6Up1VDj0PwAAABQo0//Tov7fo7bH3g3b3bfpS+lKdXQ49D8AAAAUKNP/H0f9v+fQvnfdcl2XqV3SleqYcOh/AAAAKFCm/z+J+n+vVXfZ5aTvX+17RrpSdQ6H/gcAAIACZfr/06j/9250buftWzbuMjVdqY4Nh/4HAACAAmX6f3rU//s8Nv6i1zcZuNER6Uq14GcC9D8AAAAUKNP/n0X9v+9fP7zQ76cOk/9OV6rjwqH/AQAAoECZ/p8R9f9+u26w7gU3zhv0dbpSdQ2H/gcAAIACZfr/n1H/73/AsvX127Y+d+90pTo+HPofAAAACpTp/8+j/m87692Z04ZNbDw7XalOCIf+BwAAgAJl+v+LqP8PWH/uLRPPbDCrXbpSnRgO/Q8AAAAFyvT/zKj/D+y/2fmbLjfi2d3SleqkcOh/AAAAKFCm/7+M+r/dZY0P6zKp21FfpSvVyeHQ/wAAAFCgTP9/FfX/Qdu+/tTN785e/uR0pTolHPofAAAACpTp/6+j/j94z+4d2jXabO4r6UrVLRz6HwAAAAqU6f9/Rf3ffs7wx+868c57Pk1XqlPDof8BAACgQJn+nxX1/yFf3jjgl8eP3PmCdKXqHg79DwAAAAXK9P83Uf936NT+rOqevpsenq5Up4VD/wMAAECBMv3/bdT/Hf+6efDtvXedOi9dqXqEQ/8DAABAgTL9/13U/4fuemDv7qvP6vt9ulKdHg79DwAAAAXK9P/3Uf8fdsDJR24zsUWXfdOV6oxw6H8AAAAoUKb/f4j6//BZDz0z6dMnNnouXanODIf+BwAAgAJl+n921P+drjzy1dManD25c7pS9QyH/gcAAIACZfr/x6j/j2g1aP1LOn84qGe6Up0VDv0PAAAABcr0/5yo/49c7+5G7z+74rnvpyvV2eHQ/wAAAFCgTP//FPX/UYO7fLP2oZ837pauVOeEQ/8DAABAgTL9/3PU/0ffcflTrfuuOevNdKU6Nxz6HwAAAAqU6f9fov4/Zu2dDntt5jXPfpCuVOeFQ/8DAABAgTL9/2vU/503Pf/8O7fe76jz0pXq/HDofwAAAChQpv/nRv1/7FXjbjll7SnL/5quVBeEQ/8DAABAgTL9/1vU/13+Wv2s4b8tPffgdKW6MBz6HwAAAAqU6f95Uf8ft+uHAw4bNP6eXdKVqlc49D8AAAAUKNP/v0f93/WAzx9fYtdeO89IV6re4dD/AAAAUKCk/6v4q4v8EfX/8bPW6fDnD61vbZ+uVBeFQ/8DAABAgTLP/+dH/X/Cnl89c3yreefPTVeqPuHQ/wAAAFCgTP//GfX/iXPWOHLAQR02+SxdqS4Oh/4HAACAAmX6/6+o/0/6cuXez/Ub+MbO6Up1STj0PwAAABQo0/9/R/1/cqdPBrfq3/jyN9KV6tJw6H8AAAAo0P++/2sLRf1/ykpNJ1yz/6tdT0lXqr7h0P8AAABQoEz/Lxz1f7d73l6r98ZdWp6frlSXhUP/AwAAQIEy/d8g6v9Tn/xXgxZz7nv7w3Sluvx//nmZ/gcAAIACZfq/YdT/3Rff5LMPmh5517HpSnVFOPQ/AAAAFCjT/4tE/X/am4vf/twrd+44IV2prgyH/gcAAIACZfq/FvV/j56v9Wo1fLPl3ktXqqvCof8BAACgQJn+r6L+P/2YH486vufsX85MV6qrw5Hv/+r/81sGAAAA/kOZ/q9H/X/GtK3GDTih2zO/pSvVNeHw/B8AAAAKlOn/RaP+P/Phm9odOHrEEYelK9W14dD/AAAAUKBM/zeK+r9n04MeufudBo32S1eq68Kh/wEAAKBAmf5fLOr/sxY+8YZfF5349Q/pStUvHPofAAAACpTp/8ZR/5899uEzaquteOukdKW6Phz6HwAAAAqU6f8mUf+fs1K3QXc+/+H5J6Ur1Q3h0P8AAABQoEz/Lx71/7n3PHjeKXefvcmF6UrVPxz6HwAAAAqU6f8lov4/78kbDm/d64k3pqcr1Y3h0P8AAABQoEz/Lxn1//mLdxjz2rEtLj8oXakGhEP/AwAAQIEy/b9U1P8XnHrvm2eMn9X1x3Sluikc+h8AAAAKlOn/paP+v/CdzhtdNH3Xll+mK9XAcOh/AAAAKFCm/5eJ+r/Xcx2bvNOw79u7pivVzeHQ/wAAAFCgTP8vG/V/7/Pu+H69L3rd9Ve6Ug0Kh/4HAACAAmX6f7mo/y+6/oT2n7Uev2OndKW6JRz6HwAAAAqU6f+mUf/32XDkk8t2XHq5fdKV6tZw6H8AAAAoUKb/l4/6/+LtBwzc49Ipv/wrXaluC4f+BwAAgAJl+n+FqP8vubTdmaNv2e+Z49KV6vZw6H8AAAAoUKb/V4z6/9LZs2/rsds1R7ycrlSDw6H/AQAAoECZ/l8p6v++e2957sXrrNloSrpS3REO/Q8AAAAFyvR/s6j/LzuyScf35n3+9enpSnVnOPQ/AAAAFCjT/ytH/X/5F68+vc6iA767I12phoRD/wMAAECBMv2/StT/V+y+6IHj32nfZNt0pborHPofAAAACpTp/1Wj/r9y/huP7Tv6j44t0pXq7nDofwAAAChQpv9Xi/r/qq9/7r/iCW3GXJmuVPeEQ/8DAABAgTL9v3rU/1e3a3naNz2Hzq6lK9W94dD/AAAAUKBM/zeP+v+a1TtvPnx416WHpivVfeHQ/wAAAFCgTP+vEfX/tffd+95hr0za7ZF0pbo/HPofAAAACpTp/zWj/r9u1B1zl2ja6N5l0pVqwf8T8H/v/4UX+W94zwAAAMB/JtP/a0X9369xx6Z/zpnz3rB0pVrwd57/AwAAQIEy/b921P/Xv3LeiTM3brXVYulKNTwc+h8AAAAKlOn/daL+v+GMZ65efv/Bx66arlQPhEP/AwAAQIEy/b9u1P/9j7/sgZ37d7p4fLpSPRgO/Q8AAAAFyvT/elH/3/jJjnuO6jfhtVbpSjUiHPofAAAACpTp//Wj/h8w/J9DzzxooQ1vSFeqh8Kh/wEAAKBAmf7fIOr/m5Zde7fLW43sdVm6Uo0Mh/4HAACAAmX6f8Oo/wfWV+vy9g/d71w7XakeDof+BwAAgAJl+r9F1P83j/vgsubzRn/XMF2pHgmH/gcAAIACZfr/H1H/D1q9Wben1+nZ5K50pRoVDv0PAAAABcr0/0ZR/99y38f99tptWscn0pXq0XDofwAAAChQpv83jvr/1lFfjlz1lmZjlktXqsfCof8BAACgQJn+3yTq/9saN9/3+0svnz0oXalGh0P/AwAAQIEy/b9p1P+3n/B2m0M67r50m3Slejwc+h8AAAAKlOn/zaL+H/xW0w/ua/31bhulK9WC3wmg/wEAAKBAmf5vGfX/HS9tMu/HLza4t1+6Uj0ZDv0PAAAABcr0f6uo/++84F8rN2j41ntbpCvVU+HQ/wAAAFCgTP9vHvX/kN6L7bna9GW3ujldqcaEQ/8DAABAgTL9v0XU/3e9OPmB78aPO/aidKV6Ohz/V/83/O97ywAAAMB/KNP/W0b9f/fUX68ec+wFF6+ZrlRjw+H5PwAAABQo0/9bRf1/z8mbnrh3rxmvjUxXqmfCof8BAACgQJn+bx31/72r97+s393NN2ySrlTjwqH/AQAAoECZ/t866v/77ju4ywXPX9dr5XSlejYc+h8AAAAKlOn/NlH/3z/q1N3WX63tnWPSlWp8OPQ/AAAAFCjT/9tE/T+08bCh09a5pmHLdKV6Lhz6HwAAAAqU6f9to/4fNvykfRf+9yvVhHDofwAAAChQpv+3i/p/+LIjRj56y+dPXJ6uVM+HQ/8DAABAgTL9v33U/w/UB/b7crc1O6yTrlQTw6H/AQAAoECZ/t8h6v8Hxx3QrWnH8asNT1eqF8Kh/wEAAKBAmf7fMer/EQ/tvu89l/b6u3G6Ur0YDv0PAAAABcr0/05R/z+0wkUjD/hiyoOrpCvVS+HQ/wAAAFCgTP/vHPX/yIZP91uk9dJ7P5uuVC+HQ/8DAABAgTL9v0vU/w+PuaDb3OmzWi+SrlSTwqH/AQAAoECZ/t816v9Hzj9y6R8atvjw/nSleiUc+h8AAAAKlOn/3aL+HzVh0E+rHNv32lHpSvVqOPQ/AAAAFCjT/7tH/f/ou3e/tef4XU/5N41fvRYO/Q8AAAAFyvT/HlH/P9a9y6Zj7/5wnTvTlWpyOPQ/AAAAFCjT/3tG/T965Zem9+q14gvbpSvV6+HQ/wAAAFCgTP/vFfX/43cttN21qz1x/YbpSvVGOPQ/AAAAFCjT/3tH/f/E421W+fD5s3tcka5Ub4ZD/wMAAECBMv2/T9T/Ty45/68N3xnR8OF0pZoSDv0PAAAABcr0/75R/z/10PZNH1m02z8XT1eqqeHQ/wAAAFCgTP/vF/X/mBV+m7vLCROfaBa+OP/vv/8OZ/VWOPQ/AAAAFCjT//tH/f90w+ffW2F0gw5PpSvV2+HQ/wAAAFCgTP+3jfp/7JhFNv9i+J2rbZ6uVO+EQ/8DAABAgTL9f0DU/898NHfnTj2P/HtgulK9Gw79DwAAAAXK9P+BUf+PO3qzIQ83nf1gn3Sleu///KNx9d/+fgEAAID/XKb/20X9/+yZjfv88cpme6+VrlTvh8PzfwAAAChQpv8Pivp//BuvH7voxq+2viVdqT4Ih/4HAACAAmX6/+Co/5+76ZMTjpjT+MNt0pXqw3DofwAAAChQpv/bR/0/YZOVrxrZ/75r/5GuVB+FQ/8DAABAgTL9f0jU/89vs8aDv+/f5ZTr0pVqWjj0PwAAABQo0/8dov6f2OervRodNG+dBulK9XE49D8AAAAUKNP/HaP+f+GX3e6f3K/1C0PSleqTcOh/AAAAKFCm/w+N+v/FtpfsusMPA69/Ml2pPg2H/gcAAIACZfr/sKj/Xzp8zHEnt+rQo2m6Uk0Ph/4HAACAAmX6//Co/1+e0fvyQc83P3NeulJ9Fg79DwAAAAXK9H+nqP8n7TLulAarzbjp8HSlmhGO/7T/q/8XbxkAAAD4D2X6/4io/1+Zd/51P/ZqO2HfdKX6Zzg8/wcAAIACZfr/yKj/X/1up4fvu/u65t+nK9Xn4dD/AAAAUKBM/x8V9f9rHS7f75Dxy57YOV2pvgiH/gcAAIACZfr/6Kj/Jzd7v9Fyx751xXPpSjUzHPofAAAACpTp/2Oi/n99yNLffNXwgo/fT1eqL8Oh/wEAAKBAmf7vHPX/G6NbvPrY9HHb9UxXqq/Cof8BAACgQJn+Pzbq/zeX+G79HVvv3vbNdKX6Ohz6HwAAAAqU6f8uUf9PmfzmwR2/uHxkt3Sl+lc49D8AAAAUKNP/x0X9P/WsRk88eOkGv5+XrlSzwqH/AQAAoECZ/u8a9f9bnVvd/HfHr1f+IF2pvgmH/gcAAIACZfr/+Kj/3/7gl55NduvZ7uB0pfo2HPofAAAACpTp/xOi/n9nRIdbX7ll9GO/pivVd+HQ/wAAAFCgTP+fGPX/u8vfcE6bec2+mpGuVN+HQ/8DAABAgTL9f1LU/+81ePDQU9eZVu2SrlQ/hEP/AwAAQIEy/X9y1P/vP9Vt7OBWC53ZJV2pZodD/wMAAECBMv1/StT/HzR7+ID6DxNueildqX4Mh/4HAACAAmX6v1vU/x8OOfHRn/t1nzA1XanmhEP/AwAAQIEy/X9q1P8fjT7oxiEHjWx+RrpS/RQO/Q8AAAAFyvR/96j/py1xU4+D9m914t/pSvVzOPQ/AAAAFCjT/6dF/f9xt671b/rPueKIdKX6JRz6HwAAAAqU6f8eUf9/8v6QmSvO6fTx3ulK9Ws49D8AAAAUKNP/p0f9/+nEW1/Yd+PB232drlRzw6H/AQAAoECZ/j8j6v/p53Zad/wrXdu2S1eq38Kh/wEAAKBAmf4/M+r/z84b3/OepkNHzk5Xqnnh0P8AAABQoEz/94z6f8Zz5958QM9Gv3+VrlS/h0P/AwAAQIEy/X9W1P//fGeXJxYZPmnl3dKV6o9w6H8AAAAoUKb/z476//NT+x48d3T7dq+kK9X8cOh/AAAAKNC/7f/lFty1c6L+/6LZemNbnjDgsZPTlerPcOh/AAAAKFDm+f+5Uf/PHDLj0AmLtvnqgnSl+isc+h8AAAAKlOn/86L+/3L0tHNueueP6tN0pfo7HPofAAAACpTp//Oj/v9qiVVv7brt0h99lK7UFxz6HwAAAAqU6f8Lov7/esT0HvM/m7LNOelKPXyP/gcAAIASZfr/wqj//7X8SjcueVGv7t3TlXqDcOh/AAAAKFCm/3tF/T+rwVqPHt5p/HWvpyv1huHQ/wAAAFCgTP/3jvr/m6dmHjBspzVf3ildqS8SDv0PAAAABcr0/0VR/3+7TO+nfx38+bqfpyv1Wjj0PwAAABQo0/99ov7/btiYjrU/9zv953SlXoVD/wMAAECBMv1/cdT/3z9zybkHrnHNjYekK/UFHwCo/wEAAKBAmf6/JOr/H6rdbrv7pbNnfJuu1Be8Xv8DAABAgTL9f2nU/7NfOP6rp5s9sdD+6Uq9UTj0PwAAABQo0/99o/7/sdddtb3OW/HgQ9OV+mLh0P8AAABQoEz/Xxb1/5yTblt71fs/fPyPdKXeOBz6HwAAAAqU6f/Lo/7/acoRL30/dtf5Z6cr9Sbh0P8AAABQoEz/XxH1/8/3/r1Bi+P7rvpuulJfPBz6HwAAAAqU6f8ro/7/ZbWtX/ug3mKv59OV+hLh0P8AAABQoEz/XxX1/6+LNZx1zbRZw45OV+pLhkP/AwAAQIEy/X911P9zH3lx0d6vb/bRHulKfalw6H8AAAAoUKb/r4n6/7dl6p/PXHr2NjPTlfrS4dD/AAAAUKBM/18b9f+8YRMWXr7Hkd3npCv1ZcKh/wEAAKBAmf6/Lur/35/5o/nOD9153QHpSn1B9+t/AAAAKFCm//tF/f9Htd3zox5p8PLH6Up9uXDofwAAAChQpv+vj/p//nFvjG50ysR1e6Ur9abh0P8AAABQoEz/3xD1/5/TFz3k9ybdTj8xXakvHw79DwAAAAXK9H//qP//eq3l2SOnjLjxtXSlvkI49D8AAAAUKNP/N0b9/3ePn286YqsOM3qkK/UVw6H/AQAAoECZ/h/wX/1fX+iAI//c4ZuBC72drtRXCof+BwAAgAJl+v+mqP8XnjVo9clXtz74hXSl3iwc+h8AAAAKlOn/gVH/N/jr7u0HdZj3eNd0pb5yOPQ/AAAAFCjT/zdH/d9w1y4fn7x3l/mz0pX6KuHQ/wAAAFCgTP8Pivp/kU1fajVy4H2r7pmu1FcNh/4HAACAAmX6/5ao/2tXLTT1iF8b73VUulJfLRz6HwAAAAqU6f9bo/6v7mgzu9GGrw77M12prx4O/Q8AAAAFyvT/bVH/19eev8zv08Y9tHS6Ul/wGv0PAAAABcr0/+1R/y962fbzjq5fsO9j6Up9jXDofwAAAChQpv8HR/3faNvfVr7x+LdWvDddqa8ZDv0PAAAABcr0/x1R/y+2/vNtXh677LwqXamvFQ79DwAAAAXK9P+dUf837r/IB5vff90jV6Ur9bXDof8BAACgQJn+HxL1f5PpB99+1nltD1w/XamvEw79DwAAAAXK9P9dUf8vflz/Xn2bzajtkK7U1w2H/gcAAIACZfr/7qj/l+gx7KipLzX/YnC6Ul8vHPofAAAACpTp/3ui/l/ytVPHrbnGtIHrpSv1BT8ToP8BAACgQJn+vzfq/6Ua7TuhzZ/Nzu6brtQ3CIf+BwAAgAJl+v++qP+XfuyqtV4ZPHqt/ulKfcNw6H8AAAAoUKb/74/6f5mhjzQYvFPP5zdNV+otwqH/AQAAoECZ/h8a9f+yq5712amdvr76mXSl/o9w6H8AAAAoUKb/h0X9v9yJ7yz54EUbnLRaulLfKBz6HwAAAAqU6f/hUf83fXuZ7zp+dvn2jdKV+sbh0P8AAABQoEz/PxD1//Ivrz+5yba7T38wXalvEg79DwAAAAXK9P+DUf+vcOH3G/+94eCHrklX6gt+J6D+BwAAgAJl+n9E1P8rTv/Hi8f92mnfjdOV+mbh0P8AAABQoEz/PxT1/0rHzVpv4MA5K26drtRbhkP/AwAAQIEy/T8y6v9mPaZUz+/dat5t6Uq9VTj0PwAAABQo0/8PR/2/8mvLf7FZh5GPrJCu1DcPh/4HAACAAmX6/5Go/1cZNrP/lVd3P/DxdKW+RTj0PwAAABQo0/+jov5fdZm1Tjvvmwm1u9OV+pbh0P8AAABQoEz/Pxr1/2rVSgduvNVCX/yblfpW4dD/AAAAUKBM/z8W9f/qz0x/7JMpfwx8Ol2ptw6H/gcAAIACZfp/dNT/zcdv+9mEJm3OXjFdqS/4TED9DwAAAAXK9P/jUf+vUfu9QctTBqy1ZLpSbxMO/Q8AAAAFyvT/E1H/r7n0c2t1faT98w+lK/VtwqH/AQAAoECZ/n8y6v+1Hqwm3PTQpKvXSFfq24ZD/wMAAECBMv3/VNT/a0+/d+MDejQ66ZJ0pb5dOPQ/AAAAFCjT/2Oi/l/nuM6T71l66PYD0pX69uHQ/wAAAFCgTP8/HfX/uj06fjf39a7Tt0xX6juEQ/8DAABAgTL9Pzbq//Veu2PJRX69b5dx6Up9x3DofwAAAChQpv+fifp//RM7fXHHhl3uXj1dqe8UDv0PAAAABcr0/7io/zd4+9aq296v/rpoulLfORz6HwAAAAqU6f9no/7f8OUh6209sPEKD6Qr9V3Cof8BAACgQJn+Hx/1f4sLu7746tUDj1w3XanvGg79DwAAAAXK9P9zUf//o9tpX1zQocP4S9OV+m7h0P8AAABQoEz/T4j6f6P3n6j6bTXvmxvTlfru4dD/AAAAUKBM/z8f9f/GE69Zb9o3rRfbLF2p7xGO/9n/5/+3vmUAAADgP5Tp/4lR/29y7t4vrt9k4jlXpyv1PcPh+T8AAAAUKNP/L0T9v+nYE8ZsOqXBLRukK/W9wqH/AQAAoECZ/n8x6v/NFh55+MRHRry+fbpS3zsc+h8AAAAKlOn/l6L+b9l0wHk3n9LtH7enK/V9wqH/AQAAoECZ/n856v9WD7cb1KXH7OOWSlfq+4ZD/wMAAECBMv0/Ker/zafNPvuuhza79NF0pb5fOPQ/AAAAFCjT/69E/b/FMVve1O71O6fcl67U9w+H/gcAAIACZfr/1aj/t+zZZHS19JGb1dOVettw6H8AAAAoUKb/X4v6f6s3Xz3kl3rfXZqnK/UDwqH/AQAAoECZ/p8c9X/rbouO6z5t17svTlfqB4ZD/wMAAECBMv3/etT/W7//xlG3j531603pSr1dOPQ/AAAAFCjT/29E/d9m4s+9Jh3fYoWt0pX6QeHQ/wAAAFCgTP+/GfX/Nue2vH2b8544cmy6Uj84HPofAAAACpTp/ylR/2/bbMKsS+4/e/xK6Uq9fTj0PwAAABQo0/9To/7fbkh90dNe+vCbJdKV+iHh0P8AAABQoEz/vxX1//ajt9tg7WYrLjYiXal3CIf+BwAAgAJl+v/tqP93WOKP197/8/Nzlk9X6h3Dof8BAACgQJn+fyfq/x3bf/PcxWusecvodKV+aDj0PwAAABQo0//vRv2/0w8brdljp2tevyddqR8WDv0PAAAABcr0/3tR/+/8xwoN1xm83z8WTlfqh4dD/wMAAECBMv3/ftT/u+w0dcZ7F0057tp0pd4pHPofAAAACpTp/w+i/t91izOWWLbT0pdukq7UjwiH/gcAAIACZfr/w6j/d+v3+LefbTt+Sut0pX5kOPQ/AAAAFCjT/x9F/b/7bf1eH/1Zr81uTVfqR4VD/wMAAECBMv0/Ler/PdbYa5M9lm60+VnpSv3ocOh/AAAAKFCm/z+O+n/PS65+4ZPXJ737TrpSPyYc+h8AAAAKlOn/T6L+32vr/dbd+KGufSamK/XO4dD/AAAAUKBM/38a9f/eG51dP6/H0KOPSVfqx4ZD/wMAAECBMv0/Per/fW4eNfPKU9ps8F26Uu8SDv0PAAAABcr0/2dR/+/70Yy7Xnvkj0lt05X6ceHQ/wAAAFCgTP/PiPp/v6PX26X1lPa3d0xX6l3Dof8BAACgQJn+/2fU//ufuWrnU5oMuPD3BS/9r++rHx8O/Q8AAAAFyvT/51H/t31j2kV3ftN9yR3TlfoJ4dD/AAAAUKBM/38R9f8BTebNv3yrkd//M12pnxgO/Q8AAAAFyvT/zKj/D3xih9XO7LDQ07+kK/WTwqH/AQAAoECZ/v8y6v92d9d2aH71hMM7pCv1k8Oh/wEAAKBAmf7/Kur/g1ac+MnbAzstMy1dqZ8SDv0PAAAABcr0/9dR/x98yjEtl9978E/npiv1buHQ/wAAAFCgTP//K+r/9u8NnTJzw1ZDT01X6gv+Tv8DAABAgTL9Pyvq/0OeH/zjqF/n7D45Xal3D4f+BwAAgAJl+v+bqP87nHP4sjt/tsHm36Qr9dPCof8BAACgQJn+/zbq/44f3fLbB9t+/e5e6Uq9Rzj0PwAAABQo0//fRf2/UIOjmrXotHufI9OV+unh0P8AAABQoEz/fx/1/2FnHrdN74suP3p+ulI/Ixz6HwAAAAqU6f8fov4//I17PrxmcLMNTktX6meGQ/8DAABAgTL9Pzvq/04PHfDw5jtNm/RWulLvGQ79DwAAAAXK9P+PUf8fscLA/V5eo+ftL6Yr9bPCof8BAACgQJn+nxP1/5ENR5xy45+jLzw+XamfHQ79DwAAAAXK9P9PUf8fNeak645u1nbJT9KV+jnh0P8AAABQoEz//xz1/9FPX/nJBS9d933vdKV+bjj0PwAAABQo0/+/RP1/zEJtd+h3f/OnT0hX6ueFQ/8DAABAgTL9/2vU/52X67natPNmHP5qulI/Pxz6HwAAAAqU6f+5Uf8fO/Kx+esff8Eyu6cr9QvCof8BAACgQJn+/y3q/y4fLb3sd2PH/fRFulK/MBz6HwAAAAqU6f95Uf8fd/T7P642bdmhP6Ur9V7h0P8AAABQoEz//x71f9czv5uyd/2t3Q9MV+oLPhNA/wMAAECBMv3/R9T/x7/RouWYEQPumJmu1C8Kh/4HAACAAmX6f37U/yec8q8P1zqtfe890pV6n3DofwAAAChQpv//jPr/xPc22WbKUn+0OCBdqV8cDv0PAAAABcr0/19R/5/0fNNml05u8+qcdKV+STj0PwAAABQo0/9/R/1/8jlv/3b21KGX9EpX6peGQ/8DAABAgf73/V8tFPX/Ka3ffHOfxbt2/jhdqfcNh/4HAACAAmX6f+Go/7td3Gijp7pN2vK1dKV+WTj0PwAAABQo0/8Nov4/dWCrJt+OavT+ielK/fJw6H8AAAAoUKb/G0b93/0fv3y/+iFz7ns7XalfEQ79DwAAAAXK9P8iUf+f9v37/etXtdq1R7pSvzIc+h8AAAAKlOn/WtT/PQ5e+rSfZw1eqmu6Ur8qHPofAAAACpTp/yrq/9N3bHHgkC07/fhCulK/Ohz6HwAAAAqU6f961P9n/P7dYwe1mPDUnulK/Zpw6H8AAAAoUKb/F436/8zr2nYaOHehQ2elK/Vrw6H/AQAAoECZ/m8U9X/Pza989ribRy7+Z7pSvy4c+h8AAAAKlOn/xf6r/xdeqPljd262T/dvj0pX6v3Cof8BAACgQJn+bxw9/z/71p4XPn/E6DvOSVfq14dD/wMAAECBMv3fJOr/c1o/ObBjn569P0pX6jeEQ/8DAABAgTL9v3jU/+de3OPMB2dMa/F6ulLvHw79DwAAAAXK9P8SUf+fN3Cf9n9v1+zV7ulK/cZw6H8AAAAoUKb/l4z6//x/XPtkk+aXX/J5ulIfEA79DwAAAAXK9P9SUf9f0LbXhNHzd++8U7pSvykc+h/+D/buO8qq+nr48IUo504I2I0RE4rGHkTJD7uCIWrEaJrYwQpqBCuioiIKVmwJdogYxRZjL6igKBJrVLBjxYrYYxfUd6kbPMOBHI2YnPV9n+efvWe4s5lxJeKHO1wAAAAqqKT/F8r1/6HvjV56o+FTO3UvXslOi0X/AwAAQAWV9P/Cuf4/bMoRTRfpvMKj7xavZKfHov8BAACggkr6f5Fc/w/ctuuzz144adRmxSvZGbHofwAAAKigkv5fNNf/h1951bbLDVik62vFK9mZseh/AAAAqKCS/l8s1/+Dmu9/w0Otxi44vXglOysW/Q8AAAAVVNL/i+f6/4jWm51x+B2HvL118Up2diz6HwAAACqopP9/mOv/I0cdc/B+k6eMfrh4JRsei/4HAACACirp/yVy/T944oqnXteszdb9i1eyEbHofwAAAKigkv7/Ua7/h/zxtf6/7HViix2KV7K/xKL/AQAAoIJK+n/JXP8fNfCR7gvduPlrtxWvZOfEov8BAACggkr6v1Wu/4+esOA1z3Vb45X2xSvZyFj0PwAAAFRQSf8vlev/Y3pP6nng6R/VhxavZOfGov8BAACggkr6/8e5/j/2qUXHHv/BltudXbyS/TUW/Q8AAAAVVNL/P8n1/3F3tR/+zEqnjV2zeCU7Lxb9DwAAABVU0v+tc/1//H5TD1u5U/N3ry1eyc6PRf8DAABABZX0f5tc/w9db/RafafdvdgPi1eyUbHofwAAAKigf9//nw2sfdX/Jww+7LERx+3SZQ5Xsgti0f8AAABQQSXP/7fLPf9/4sldP7qr+6iRfy1eyS6MRf8DAABABZX0/9K5/j9pxSNarXVlj0lLFK9kF8Wi/wEAAKCCSvp/mVz/nzx1ZO92fc7peGPxSnZxLPofAAAAKqik/3+a6/9TftdryMQWq/b+e/FKdkks+h8AAAAqqKT/l831/5823O78IRPfOmqB4pXsb7HofwAAAKigkv5fLtf/f55x1oYH3Nvn/iOLV7JLY9H/AAAAUEEl/b98rv+HHbPGxVcveGn7tsUr2cw/E6D/AQAAoIJK+n+FXP+futqn3Trv3fTgTsUr2WWx6H8AAACooJL+XzHX/6cte/sei146/uxhxSvZ5bHofwAAAKigkv5fKdf/pw9veszLNy7xytXFK9kVseh/AAAAqKCS/l851/9nrDdu50N7PV5fqHgluzIW/Q8AAAAVVNL/P8v1/5mDmw06sVn/7ZoVr2RXxaL/AQAAoIJK+r99rv/POnmdkZMnXzf2/OKVbOafCdD/AAAAUEEl/b9Krv/PXvHjDVa4Y6V3ly9eya6JRf8DAABABZX0f4dc/w//VcPPT2k1bbHjileya2PR/wAAAFBBJf2/aq7/R7xz/yM7DejaZUTxSnZdLPofAAAAKqik/1fL9f9fXn7vg04XDhm5fvFKdn0s+h8AAAAqqKT/O+b6/5ztOy42ofNhk4YUr2SjY9H/AAAAUEEl/f/zXP+P7PHAho8Pv6XjcsUr2Q2x6H8AAACooJL+/79c/5/7wuLnrzhjod4dileyG2PR/wAAAFBBJf3fKdf/f31r5SGHtXngqD8Vr2Q3xaL/AQAAoIJK+n/1XP+ft8m03ies++v7f1K8ko2JRf8DAABABZX0/xq5/j9/vY2P2XjK0PZjileysbHofwAAAKigkv5fM9f/owafuMdNg9od/LfilezmWPQ/AAAAVFBJ/6+V6/8LTr6m25vbP392Q/FKdkss+h8AAAAqqKT/1871/4Ur7nvxUr3aZEcUr2TjYtH/AAAAUEEl/b9Orv8vOuaKDY66ccpLbYpXsltj0f8AAABQQSX9v26u/y9e7YCR/SZvftXqxSvZbbHofwAAAKigkv5fL9f/lyy76aC2zU78/anFK9n4WPQ/AAAAVFBJ/6+f6//v1Wq1Sa0WWfJHxSvZ7bHofwAAAKigkv7vnOv/S4cO32CXOyZNv6l4JZsQi/4HAACACirp/y65/v97p21Gnn7hIZdfWryS/SMW/Q8AAAAVVNL/G+T6/7J2OwwaP2DsZi2LV7I7YtH/AAAAUEGN+//w2fv/F7n+v/yMC3buMHzDda4pXsnujEX/AwAAQAWVPP/fNdf/V2wzuPXynY9+avHileyuWPQ/AAAAVFBJ//8y1/9XPrvBJ0+0WeHYJsUr2d2x6H8AAACooJL+3zDX/1e9e+CTJ82Yutt5xSvZPbGU9P+S8+JTBgAAAL6hkv7fKNf/V29283qHTOnXdpXilezeWDz/DwAAABVU0v8b5/r/mrWWmnjDuteMO6F4JftnLPofAAAAKqik/3+V6/9rD5/ccZPtlxx2VvFKdl8s+h8AAAAqqKT/N8n1/3XDnl34J4Oe6LdG8Up2fyz6HwAAACqo2P+1fP93y/X/9e2Xfev102tZ6+KV7IFY9D8AAABUUMnz/5vm+n/00Bda9e9260tji1eyibHofwAAAKigkv7/da7/b+jU7qPBK+111SXFK9mkWPQ/AAAAVFBJ/2+W6/8b2y3x2AMfXPb7evFK9mAs+h8AAAAqqKT/N8/1/01nPL3W0tM6Ljm4eCV7KBb9DwAAABVU0v+/yfX/mOk/2/TsTv+avmzxSvZwLPofAAAAKqik/3+b6/+xXV69bLfu212+avFK9kgs+h8AAAAqqKT/f5fr/5u3mHjSOseN2OzPxSvZo7HofwAAAKigkv7/fa7/b3nzh33u79NrnRWKV7LHYtH/AAAAUEEl/f+HXP+PuybrddaVFz51fPFK9ngs+h8AAAAqqKT/t8j1/60tbx28+8SGY4cXr2STY9H/AAAAUEEl/d+k1mRW/9+25PRR67a4c7f1ileyJ2LR/wAAAFBBJf2/Ze75//Ej193ovgW3aHtV8Ur2ZCz6HwAAACqopP+3yvX/7Q+dc1Hze4eNW7B4JXsqFv0PAAAAFVTS/1vn+n9C3603+fDStYZlxSvZ07HofwAAAKigkv7fJtf//zh45z9euvf0fqOKV7JnYtH/AAAAUEFz7P/5Z+7Nts31/x3jRh3bc9DQvX9VvJI9G4v+BwAAgAoqef5/u1z/37lT750mbP/rU14tXsmmxKL/AQAAoIJK+n/7XP/f9di5h3da9/kJM4pXsudi0f8AAABQQSX93yPX/3ffe/a5O01pt0yP4pXs+Vj0PwAAAFRQSf/3zPX/PQds/4tTZtzSZ1LxSvZCLPofAAAAKqik/3fI9f+9a7fIHmxz2NC9i1eyF2PR/wAAAFBBJf2/Y67//znonhfbdH7gsd7FK9lLseh/AAAAqKCS/t8p1//3nfr27fsPX2jNCcUr2cux6H8AAACooJL+3znX//evsvqyRw+Y1m1g8Uo2NRb9DwAAABVU0v+75Pr/gdcX2+acC1e65KnileyVWPQ/AAAAVFBJ/++a6/+JWz44es87hnx6d/FKNi2WufZ/03n3KQMAAADfUEn/98r1/6RfvHLmGq26tt6teCV7NRbP/wMAAEAFlfR/71z/P/jRKgPuafZ49xeKV7LXYtH/AAAAUEEl/b9brv8fOuGEYS0nL3H9hsUr2eux6H8AAACooJL+3z3X/w+v3u2AT2687vnfFq9kb8Si/wEAAKCCSvp/j1z/P7L0Plte3Kt/03eKV7I3Y9H/AAAAUEEl/f/HXP8/eub1126z96V7P1S8kr0Vi/4HAACACirp/z1z/f/Y2v16jLu0zykHFK9kb8ei/wEAAKCCSvq/T67/Hx909ZiO946fsGPxSvavWPQ/AAAAVFBJ//fN9f/kU48d0XvBpsuML17JZr4mgP4HAACACirp/71y/f/EKpsPHNbinD6bF69k78ai/wEAAKCCSvp/71z/P7npmIaVJ/YY+nrxSvZeLPofAAAAKqik//fJ9f9T7x/86jNXvvXYx8Ur2fux6H8AAACooJL+3zfX/08/1/nu4/usuuZWxSvZB7HofwAAAKigkv7fL9f/z2x11PIHHnd3t+eKV7IPY9H/AAAAUEEl/b9/rv+f3XbXAbt0b35J5+KV7KNY9D8AAABUUEn/98v1/5Qp5515eqdRn25ZvJLNfE0A/Q8AAAAVVNL/B+T6/7n3zhw9ftourd8rXsmmx6L/AQAAoIJK+r9/rv+f37znNh0++Kj7QcUr2YxY9D8AAABUUEn/H5jr/xfW/uTa91Za4/onileyT2LR/wAAAFBBJf1/UK7/Xxy09pbNup32/L3FK9mnseh/AAAAqKCS/j841/8vndrkgN+dvmXTvsUr2Wex6H8AAACooJL+H5Dr/5dXuWPYuS82GbB18cqsD9f/AAAAUEEl/X9Irv+nnjD/wLXXHHfW9OKVejxG/wMAAEAVlfT/obn+f2X18SPu3Lrvfa8Vr9SbxqL/AQAAoIJK+v+wXP9PW/qjMcOHXL7KZsUr9e/Fov8BAACggkr6f2Cu/189c/0ee52xWq/bilfq88Wi/wEAAKCCSvr/8Fz/v9Zx1DWrdn3n6B2KV+rzx6L/AQAAoIJK+n9Qrv9fP3bn7rcts/2D/YtX6s1i0f8AAABQQSX9f0Su/98YsXX/0z4cvtrDxSv1LBb9DwAAABVU0v9H5vr/zeXOOXXX1r0771W8Up/58fofAAAAKqik/wfn+v+tF8e+cuj4C879Z/FKvSEW/Q8AAAAVVNL/Q3L9/3bPAc1PPK/+3uTilfr3Y9H/AAAAUEEl/X9Urv//1a3LipMH3rXogcUr9eax6H8AAACooJL+PzrX/++8ffSdK+z0h+3fLV6p/yAW/Q8AAAAVVNL/x+T6/90hP13utZtPHdO9eKXeIhb9DwAAABVU0v/H5vr/vfWfn9D66bWndileqbeMRf8DAABABZX0/3G5/n9/pcdf6Nb044bni1fqC8Si/wEAAKCCSvr/+Fz/f3BK62ajF2074PbilfqCseh/AAAAqKCS/h+a6/8POz71ers7nz2rV/FKfaFY9D8AAABUUEn/n5Dr/4+ObbXAxIs2u2+f4pX6wrHofwAAAKigkv4/Mdf/H49o237I/iet8mDxSn1m9+t/AAAAqKCS/j8p1//Tl3v53gN2X7hXz+KV+qKx6H8AAACooK/6f/14T6P+PznX/zO6Lnrjfdc+ePQnxSv1xWLR/wAAAFBBJc//n5Lr/08+nbTVug8f+uC04pX64rHofwAAAKigkv7/U67/P5029aDdG8astnHxSv2Hseh/AAAAqKCS/v9zrv8/+037s896Y6PO/ypeqS8Ri/4HAACACor+ny/3npNzP9z0y1H/Ua3W5fXc++PxC8zs/i9+j2DnQ95+d07zK5/fyc8vfoomtdp8V8z2adW/3Vc1V7O+npYPPbdBrUOtSf4r/1z7uTz+tPriS9U61JoWHt/4A74Xj1+yx4wfH1nrUGs2++P32L3vLrseOOvN+NF6q437vrFarUOtPvvj9951355999pl13gz/rk0tO2620Kv1DrU5pv9n9Tuffv1yb3ZEKPdkm8uc+IXn89sj99v/x3377XfrDe/H49f+sqDRvSb0+P3bfz5N4/HL7PnUgu83uLO2vyzP36ffnvtv2MNAACA/7WS/p/Vs7Val3G590cXf+P+X7LxrM2t/7/37b6quZr19XxH/R/fK1FbZEb/X77acnStPnsP77FXv3377rhnh3nwtQAAAMDXVtL/s56fnkf936rxrM2t/+f/dl/VXM36er6j/o/Pu77UlE+OfqC2Rq35nJ6f77nvjn1779rotwCaxcf9uPmYFw+qrVFrOefn6XvuvFvjD83i435y6Pu/PaflxrUWc3z+vfBhAAAA/P+mpP9n9WytNujw/IfFXDD/9tfo/6Uaz1r0PwAAAPBdKun/Wc9Lz6X/v+nz/z9uPGv6HwAAAP4LSvp/1veXz7H/F5z15tfs/4Y2X92bqWnjm9+petuY7WIuHXOZmD+NuWzM5WIuH3OFmCvGXCnmyjF/FjP+VEB9lZjxrff1VWOuFrNjzJ/H/L+YnWKuHnONmGvGXCvm2jHXibluzPVirh+zc8wuMTeI+YuYXWP+MuaGMTeKGX/nY/1XMTeJ2S3mpjF/HXOzmJvH/E3M38b8Xczfx/xDzC1ido+5ZcytYm4dc5uY28bcLub2MXvE7Blzh5jxUoT1nWLuHHOXmPE6i/VeMXvH3C3m7jH3iPnHmHvGjNderPeNuVfMvWPuE3PfmPHKi/X9Y/aLeUDM/jHjFRfrB8U8OOaAmIfEPDTmYTEHxoz/79YHxTwi5pExB8ccEvOomEfHPCbmsTGPi3l8zKExT4h5YsyTYsa/U+qnxPxTzD/HHBbz1JinxTw95hkxz4x5VsyzYw6POSLmX2KeE3NkzHNj/jXmeTHPjzkq5gUxL4x5UcyLY14S828x499d9b/HvCzm5THjzzfVr4x5VcyrY14T89qY18W8PubomDfEvDHmTTHHxBwb8+aYt8SMP7tVvzXmbTHHx7w95oSY/4h5R8w7Y94V8+6Y98S8N+Y/Y94X8/6YD8ScGHNSzAdjPhTz4ZiPxHw05mMxH485OeYTMZ+M+VTMp2M+E/PZmFNiPhfz+ZgvxHwx5ksxX445NeYrMafFfDXmazHjNXLrb8R8M+ZbMd+OGX+HTv2dmPHrZP29mO/H/CDmhzE/ivlxzOkxZ8T8JOanMT/7csbLwNYa4n+nDfGLbkO8Hk5D/PrfEN/v1xC/798Qv/43zHzd2ZmvJzvzdWJnvv7rD2K2iNky5gIx478UGhaKuXDM+PuCGhaNuVjMxWPG3yvcEM8zNMTrBjfE6wc1xJ8jbIjvJ2yI5xUa4r8vGlrHzP2dRgAAAAAAkL54/r9p7l13frU2e3TOr8VXb1urZU/Wak0+GDviqg2/zc+/xbf02Xf1NwUAAABAQqL/W371nvkP/F9+PgAAAMC8p/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0lfa/83/+58TAAAAMG95/h8AAADSV9b/Wy3wP/ikAAAAgHnK8/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOmL/p8v956Tcz9c/3I0tK3VBh2e/7DGP/7l2zsf8va7c5pf+fxOfn6u6cxbtWbPzIuv6N9q8Z3/DAAAAFBBJf3fEKPdXPp/ifzbX6P/2zWetUb9/91bYOqXs9mj8Y4f/Pd+bgAAAPjf+ff93+T7X86GpefS/+Pyb3+N/l+68axF/8+36bz7iv6thXOf++cWqdXqP6jVmn5v3pyvt2l8v962VsuerNWafDBv7gMAAMB/puT5/+ZfjoZl5tL/V+Tf/hr9v0zjWYv+n//JuX1+vf6TL+rra7L1fPU/9BhYq+2wZesv5tQXsy/mLEesfcMlTa6d9fsTMx/37GKtGz/uv3MXAAAA/iMl/R/fH9/w01qty+u59zf9cizwTb///6eN58yPne+K2T6tpt/qi5q7WV9Py4ee26DWodYk/5V/rv2cH3/krM9r9se3/44+UwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/sQMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOCABAAAAEPT/dTsCBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYK4AAAD//4nP5XU=") truncate(&(0x7f0000000280)='./file0\x00', 0x1000000000005e02) utime(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x10002, 0x0) 1.930590881s ago: executing program 1 (id=2173): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)="9b", 0x1}], 0x1, 0x0, 0x0) 1.327257554s ago: executing program 4 (id=2175): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.325978455s ago: executing program 3 (id=2176): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) pwrite64(r0, &(0x7f0000005680)="a9a7", 0x2, 0x400000fff) 1.052994728s ago: executing program 3 (id=2177): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000380)='%', 0x1}], 0x1, 0x0, 0x0, 0x20044810}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000280)="5ded2c77da329c867fb391b36e6277e1d82e9d4022b962f2a50d19f1e602eb1bba1d77bb6dfa178ada8bd3ddae269b5f6e9934c6ebf3671bd43fe68f3dfeea54d80516a3162550d0af58ec9807c5e43ec88e329aa4d8ab8ea2df0a91d9a79f7dad9aa690521029cf9353c728490eef071dedbfd0dff70dbd8a6c385ef24b8e027d3affd8453a22811b", 0x89}], 0x1, 0x0, 0x0, 0x880}}], 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/223, 0xdf}], 0x1, &(0x7f0000000b40)=""/211, 0xd3}, 0x10101) 1.052802798s ago: executing program 4 (id=2178): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000340)={@multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @broadcast}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) 967.981856ms ago: executing program 4 (id=2179): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x0, @empty}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0xca, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 681.382191ms ago: executing program 3 (id=2180): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000140), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, &(0x7f0000000240)) 680.437681ms ago: executing program 2 (id=2181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x0) 663.274173ms ago: executing program 4 (id=2182): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffe1d, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 332.124311ms ago: executing program 4 (id=2183): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x5599, &(0x7f0000005680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) getdents(r0, 0x0, 0x58) 0s ago: executing program 3 (id=2184): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): t mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 239.134896][ T8056] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 239.154226][ T8056] BTRFS info (device loop3): force clearing of disk cache [ 239.191654][ T8056] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 239.222371][ T8077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1568'. [ 239.231824][ T8056] BTRFS info (device loop3): use zstd compression, level 3 [ 239.246616][ T8056] BTRFS info (device loop3): using free space tree [ 239.368402][ T8054] loop4: detected capacity change from 0 to 40427 [ 239.397765][ T8054] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 239.415181][ T8054] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 239.453168][ T8054] F2FS-fs (loop4): invalid crc value [ 239.481090][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 239.481106][ T26] audit: type=1326 audit(1726241857.523:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.1.1571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f547a37def9 code=0x0 [ 239.532183][ T8054] F2FS-fs (loop4): Found nat_bits in checkpoint [ 239.559601][ T8056] BTRFS info (device loop3): enabling ssd optimizations [ 239.572816][ T8056] BTRFS info (device loop3): rebuilding free space tree [ 239.713355][ T8054] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 239.723239][ T8054] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 239.853135][ T3637] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 240.333410][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 240.397027][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 240.989435][ T8125] loop3: detected capacity change from 0 to 64 [ 241.109389][ T8126] MTD: Couldn't look up './file0': -15 [ 241.439340][ T8110] loop0: detected capacity change from 0 to 40427 [ 241.503822][ T8110] F2FS-fs (loop0): invalid crc value [ 241.607927][ T8110] F2FS-fs (loop0): Found nat_bits in checkpoint [ 241.774918][ T8110] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 241.864831][ T3884] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 241.886460][ T3647] syz-executor: attempt to access beyond end of device [ 241.886460][ T3647] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.079845][ T8152] loop1: detected capacity change from 0 to 512 [ 242.127725][ T3884] usb 4-1: Using ep0 maxpacket: 32 [ 242.170938][ T8152] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 242.188114][ T8152] ext4 filesystem being mounted at /340/bus supports timestamps until 2038 (0x7fffffff) [ 242.265218][ T3884] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 242.273509][ T3884] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 242.311724][ T3884] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 242.330812][ T3884] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 242.354113][ T3884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 242.382479][ T3638] EXT4-fs (loop1): unmounting filesystem. [ 242.513564][ T8130] loop4: detected capacity change from 0 to 32768 [ 242.537210][ T3884] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 242.557110][ T3884] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 242.572805][ T8130] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 242.582402][ T3884] usb 4-1: Product: syz [ 242.591815][ T8130] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 242.600371][ T3884] usb 4-1: Manufacturer: syz [ 242.610439][ T3884] usb 4-1: SerialNumber: syz [ 242.624033][ T3879] kernel write not supported for file /amidi2 (pid: 3879 comm: kworker/0:10) [ 242.642599][ T3884] usb 4-1: config 0 descriptor?? [ 242.675768][ T8130] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 242.698314][ T3879] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 242.707153][ T3884] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 242.716655][ T3879] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 242.735120][ T3884] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 242.757095][ T8165] loop2: detected capacity change from 0 to 128 [ 242.854638][ T3879] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 137ms [ 242.859953][ T26] audit: type=1800 audit(1726241860.893:61): pid=8165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1594" name="bus" dev="loop2" ino=1048668 res=0 errno=0 [ 242.876894][ T3879] gfs2: fsid=syz:syz.0: jid=0: Done [ 242.913850][ T8130] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 242.967904][ T3682] usb 4-1: USB disconnect, device number 13 [ 242.983636][ T8172] loop0: detected capacity change from 0 to 256 [ 243.021784][ T3682] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 243.038985][ T8172] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 243.425100][ T3879] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 243.675018][ T3879] usb 3-1: Using ep0 maxpacket: 32 [ 243.794914][ T3879] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 243.813674][ T3879] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 243.844048][ T3879] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 243.904660][ T3879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.941844][ T3879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 243.971712][ T3879] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 244.008343][ T3879] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 244.027693][ T3879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.090709][ T3879] usb 3-1: config 0 descriptor?? [ 244.303857][ T8206] loop3: detected capacity change from 0 to 4096 [ 244.318273][ T8206] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 244.357697][ T3879] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 244.410349][ T8206] ntfs3: loop3: failed to convert "c46c" to macturkish [ 244.543579][ T8214] loop0: detected capacity change from 0 to 64 [ 244.597042][ T3682] usb 3-1: USB disconnect, device number 15 [ 244.611705][ T3682] usblp0: removed [ 244.984871][ T3879] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 245.063374][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1623'. [ 245.105970][ T8228] tipc: Started in network mode [ 245.110885][ T8228] tipc: Node identity , cluster identity 8 [ 245.230303][ T3879] usb 4-1: Using ep0 maxpacket: 16 [ 245.355012][ T3879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.390642][ T3879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 245.414029][ T3879] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 245.434804][ T3682] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 245.444837][ T3879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.456576][ T3879] usb 4-1: config 0 descriptor?? [ 245.462878][ T8218] loop0: detected capacity change from 0 to 32768 [ 245.476874][ T8218] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1619 (8218) [ 245.493441][ T8218] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 245.523486][ T8218] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 245.532857][ T8218] BTRFS info (device loop0): using free space tree [ 245.650593][ T8250] hsr0: VLAN not yet supported [ 245.705170][ T3682] usb 2-1: Using ep0 maxpacket: 8 [ 245.782536][ T8218] BTRFS info (device loop0): enabling ssd optimizations [ 245.865230][ T3682] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.897997][ T3682] usb 2-1: config 0 has no interface number 0 [ 245.904203][ T3682] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.934808][ T3682] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 245.978857][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.992661][ T8269] loop4: detected capacity change from 0 to 164 [ 246.000326][ T3879] usbhid 4-1:0.0: can't add hid device: -71 [ 246.009298][ T3879] usbhid: probe of 4-1:0.0 failed with error -71 [ 246.012302][ T3682] usb 2-1: config 0 descriptor?? [ 246.022809][ T3647] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.046153][ T8269] Unable to read rock-ridge attributes [ 246.050253][ T3879] usb 4-1: USB disconnect, device number 14 [ 246.113581][ T3682] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 246.120624][ T8269] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 246.708175][ T8281] netlink: 'syz.0.1636': attribute type 2 has an invalid length. [ 246.719866][ T8281] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1636'. [ 246.872857][ T3682] usb 2-1: USB disconnect, device number 17 [ 246.888407][ T3682] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 247.576449][ T3884] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 247.815488][ T3884] usb 2-1: Using ep0 maxpacket: 16 [ 247.929288][ T8283] loop4: detected capacity change from 0 to 40427 [ 247.935165][ T3884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 9946, setting to 1024 [ 247.949538][ T8283] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 247.974932][ T8283] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 247.988142][ T3884] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 248.000439][ T8283] F2FS-fs (loop4): invalid crc value [ 248.067241][ T8283] F2FS-fs (loop4): Found nat_bits in checkpoint [ 248.185018][ T3884] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 248.208651][ T3884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.247790][ T3884] usb 2-1: Product: syz [ 248.259908][ T3884] usb 2-1: Manufacturer: syz [ 248.269678][ T8283] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 248.276752][ T3884] usb 2-1: SerialNumber: syz [ 248.282012][ T8315] loop0: detected capacity change from 0 to 1024 [ 248.287500][ T3884] usb 2-1: config 0 descriptor?? [ 248.298524][ T8283] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 248.335346][ T8293] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 248.422905][ T8315] hfsplus: bad catalog entry type [ 248.432924][ T8283] syz.4.1637: attempt to access beyond end of device [ 248.432924][ T8283] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 248.545562][ T51] hfsplus: b-tree write err: -5, ino 4 [ 248.579574][ T3884] usb 2-1: Limiting number of CPorts to U8_MAX [ 248.616368][ T3884] usb 2-1: Not enough endpoints found in device, aborting! [ 248.650057][ T3645] syz-executor: attempt to access beyond end of device [ 248.650057][ T3645] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 248.790648][ T3884] usb 2-1: USB disconnect, device number 18 [ 248.805173][ T3682] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 249.055127][ T3682] usb 3-1: Using ep0 maxpacket: 32 [ 249.195597][ T3682] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.204138][ T8324] loop0: detected capacity change from 0 to 32768 [ 249.227622][ T8324] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1655 (8324) [ 249.234791][ T3682] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.271947][ T8324] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.289392][ T8324] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 249.322039][ T8324] BTRFS info (device loop0): setting nodatacow, compression disabled [ 249.340208][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1657'. [ 249.365189][ T8324] BTRFS info (device loop0): turning on flush-on-commit [ 249.392792][ T8324] BTRFS info (device loop0): enabling auto defrag [ 249.414976][ T5247] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 249.425258][ T8324] BTRFS info (device loop0): max_inline at 0 [ 249.431359][ T8324] BTRFS info (device loop0): using free space tree [ 249.445646][ T3682] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 249.461886][ T3682] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 249.487666][ T3682] usb 3-1: Product: syz [ 249.506260][ T3682] usb 3-1: Manufacturer: syz [ 249.532639][ T3682] usb 3-1: SerialNumber: syz [ 249.587669][ T3682] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input27 [ 249.734125][ T8324] BTRFS info (device loop0): enabling ssd optimizations [ 249.785099][ T5247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.853905][ T5247] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 249.862319][ T8324] BTRFS error (device loop0): target device is invalid! [ 249.887023][ T3881] usb 3-1: USB disconnect, device number 16 [ 249.899693][ T5247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.927354][ T5247] usb 4-1: config 0 descriptor?? [ 249.966738][ T3729] udevd[3729]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 249.979703][ T3881] appletouch 3-1:1.0: input: appletouch disconnected [ 250.005041][ T3647] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.266728][ T8359] binder: 8358:8359 ioctl c0306201 200002c0 returned -14 [ 250.466862][ T5247] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 250.510771][ T5247] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001C/input/input28 [ 250.619289][ T8337] loop1: detected capacity change from 0 to 40427 [ 250.666975][ T8337] F2FS-fs (loop1): Found nat_bits in checkpoint [ 250.723555][ T5247] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 250.805065][ T8337] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 250.950301][ T3638] syz-executor: attempt to access beyond end of device [ 250.950301][ T3638] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 250.966401][ T3887] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 251.127643][ T8377] netlink: 'syz.0.1670': attribute type 29 has an invalid length. [ 251.136236][ T8377] netlink: 'syz.0.1670': attribute type 29 has an invalid length. [ 251.208041][ T8361] loop4: detected capacity change from 0 to 32768 [ 251.227543][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 251.316800][ T8361] XFS (loop4): Mounting V5 Filesystem [ 251.331200][ T3887] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 251.347457][ T3887] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 251.394385][ T4202] usb 4-1: USB disconnect, device number 15 [ 251.444689][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1672'. [ 251.460704][ T8361] XFS (loop4): Ending clean mount [ 251.490967][ T8392] loop1: detected capacity change from 0 to 128 [ 251.515137][ T3887] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 251.563620][ T3887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.596731][ T8392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 251.613497][ T3645] XFS (loop4): Unmounting Filesystem [ 251.613524][ T3887] usb 3-1: Product: syz [ 251.624530][ T8392] ext4 filesystem being mounted at /354/mnt supports timestamps until 2038 (0x7fffffff) [ 251.657240][ T3887] usb 3-1: Manufacturer: syz [ 251.684596][ T3887] usb 3-1: SerialNumber: syz [ 251.728643][ T8370] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 251.796771][ T8400] loop0: detected capacity change from 0 to 128 [ 251.813536][ T8400] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 251.853860][ T8400] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 251.863880][ T3638] EXT4-fs (loop1): unmounting filesystem. [ 252.039627][ T3887] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 252.062003][ T3706] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 252.284755][ C0] usblp0: nonzero read bulk status received: -71 [ 252.293794][ T8370] usblp0: error -71 reading from printer [ 252.316245][ T3889] usb 3-1: USB disconnect, device number 17 [ 252.334206][ T3889] usblp0: removed [ 252.858995][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'. [ 253.091359][ T8439] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1691'. [ 253.128041][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 253.147020][ T3881] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 253.155042][ T3889] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 253.272424][ T8442] loop0: detected capacity change from 0 to 1024 [ 253.459411][ T51] hfsplus: b-tree write err: -5, ino 4 [ 253.516232][ T3889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.545094][ T3881] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 253.554352][ T3889] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 253.564129][ T3881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.582526][ T3889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.592932][ T3881] usb 4-1: config 0 descriptor?? [ 253.611780][ T3889] usb 5-1: config 0 descriptor?? [ 253.636230][ T3881] cp210x 4-1:0.0: cp210x converter detected [ 253.731091][ T8434] loop2: detected capacity change from 0 to 40427 [ 253.795506][ T8434] F2FS-fs (loop2): Found nat_bits in checkpoint [ 253.920379][ T8434] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 254.020270][ T3646] syz-executor: attempt to access beyond end of device [ 254.020270][ T3646] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.065101][ T3881] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 254.107490][ T3889] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 254.127324][ T3881] usb 4-1: cp210x converter now attached to ttyUSB0 [ 254.154467][ T3889] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001D/input/input29 [ 254.325028][ T3889] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 254.378179][ T3889] usb 4-1: USB disconnect, device number 16 [ 254.398706][ T3889] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 254.441711][ T3889] cp210x 4-1:0.0: device disconnected [ 255.007939][ T8479] loop1: detected capacity change from 0 to 1024 [ 255.030103][ T8481] loop0: detected capacity change from 0 to 256 [ 255.043860][ T3889] usb 5-1: USB disconnect, device number 11 [ 255.079101][ T8481] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001003e, chksum : 0x00424b3e, utbl_chksum : 0xe619d30d) [ 255.412083][ T8486] loop3: detected capacity change from 0 to 4096 [ 255.412406][ T8488] loop0: detected capacity change from 0 to 256 [ 255.474996][ T8486] ntfs: volume version 3.1. [ 255.484644][ T8488] FAT-fs (loop0): Directory bread(block 64) failed [ 255.503714][ T8488] FAT-fs (loop0): Directory bread(block 65) failed [ 255.512272][ T8488] FAT-fs (loop0): Directory bread(block 66) failed [ 255.532465][ T8488] FAT-fs (loop0): Directory bread(block 67) failed [ 255.540688][ T8488] FAT-fs (loop0): Directory bread(block 68) failed [ 255.557776][ T8488] FAT-fs (loop0): Directory bread(block 69) failed [ 255.640868][ T8488] FAT-fs (loop0): Directory bread(block 70) failed [ 255.659456][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.665887][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.678898][ T8488] FAT-fs (loop0): Directory bread(block 71) failed [ 255.704171][ T8488] FAT-fs (loop0): Directory bread(block 72) failed [ 255.748532][ T8488] FAT-fs (loop0): Directory bread(block 73) failed [ 255.889351][ T33] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.168304][ T33] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.303298][ T8497] loop4: detected capacity change from 0 to 2048 [ 256.405361][ T8497] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 256.443882][ T33] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.455512][ T8497] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038 (0x7fffffff) [ 256.543529][ T8497] fs-verity: sha256 using implementation "sha256-avx2" [ 256.619618][ T8497] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1719: bg 0: block 288: padding at end of block bitmap is not set [ 256.685712][ T33] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.717143][ T8497] fs-verity (loop4, inode 13): ext4_end_enable_verity() failed with err -117 [ 256.746512][ T3655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.759065][ T3655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.769320][ T3655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.789292][ T3655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.797783][ T3655] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 256.805408][ T3655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.853413][ T3653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.861994][ T3653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.870342][ T3653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.878525][ T3653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.888124][ T3653] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 256.895955][ T26] audit: type=1800 audit(1726241874.933:62): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1721" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 256.920859][ T3653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.974483][ T3645] EXT4-fs (loop4): unmounting filesystem. [ 257.386281][ T8492] loop3: detected capacity change from 0 to 32768 [ 257.404582][ T8492] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1713 (8492) [ 257.489700][ T8492] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 257.518700][ T8492] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 257.548739][ T8519] can0: slcan on ttyS3. [ 257.582650][ T8492] BTRFS info (device loop3): enabling auto defrag [ 257.654965][ T8492] BTRFS info (device loop3): max_inline at 0 [ 257.661022][ T8492] BTRFS info (device loop3): enabling ssd optimizations [ 257.684848][ T8492] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 257.717242][ T8492] BTRFS info (device loop3): use lzo compression, level 0 [ 257.739951][ T8492] BTRFS info (device loop3): using free space tree [ 257.855503][ T8521] can0 (unregistered): slcan off ttyS3. [ 257.916686][ T8534] loop2: detected capacity change from 0 to 4096 [ 258.017955][ T8534] ntfs: volume version 3.1. [ 258.234584][ T8557] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1730'. [ 258.262922][ T8507] chnl_net:caif_netlink_parms(): no params data found [ 258.416028][ T3637] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 259.025620][ T3653] Bluetooth: hci1: command tx timeout [ 259.353803][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.363160][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.393143][ T8507] device bridge_slave_0 entered promiscuous mode [ 259.518989][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.530951][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.556479][ T8507] device bridge_slave_1 entered promiscuous mode [ 259.967665][ T8507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.036328][ T8507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.466495][ T3684] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 260.540957][ T8507] team0: Port device team_slave_0 added [ 260.563367][ T33] device hsr_slave_0 left promiscuous mode [ 260.585969][ T33] device hsr_slave_1 left promiscuous mode [ 260.609107][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.627086][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.636465][ T26] audit: type=1326 audit(1726241878.683:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 260.676483][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.704437][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.724888][ T26] audit: type=1326 audit(1726241878.683:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 260.748537][ T33] device bridge_slave_1 left promiscuous mode [ 260.791697][ T26] audit: type=1326 audit(1726241878.703:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 260.806542][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.890422][ T26] audit: type=1326 audit(1726241878.703:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 260.915444][ T3684] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.945834][ T8616] loop3: detected capacity change from 0 to 64 [ 260.952336][ T3684] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.997854][ T33] device bridge_slave_0 left promiscuous mode [ 261.004991][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.025360][ T26] audit: type=1326 audit(1726241878.703:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 261.087310][ T3684] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 261.096614][ T3653] Bluetooth: hci1: command tx timeout [ 261.114804][ T26] audit: type=1326 audit(1726241878.703:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 261.123906][ T3684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 261.176412][ T3684] usb 3-1: SerialNumber: syz [ 261.256611][ T26] audit: type=1326 audit(1726241878.703:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 261.344778][ T26] audit: type=1326 audit(1726241878.703:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 261.368758][ T33] device veth1_macvtap left promiscuous mode [ 261.395807][ T33] device veth0_macvtap left promiscuous mode [ 261.448006][ T3684] usb 3-1: 0:2 : does not exist [ 261.454861][ T33] device veth1_vlan left promiscuous mode [ 261.461107][ T33] device veth0_vlan left promiscuous mode [ 261.530313][ T8627] gfs2: gfs2 mount does not exist [ 261.540776][ T8605] loop4: detected capacity change from 0 to 32768 [ 261.573256][ T3684] usb 3-1: USB disconnect, device number 18 [ 261.725482][ T8629] ialloc: diAlloc returned -28! [ 261.820556][ T3716] udevd[3716]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.341506][ T8645] loop0: detected capacity change from 0 to 128 [ 262.392833][ T8645] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 262.462901][ T8645] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.567052][ T3681] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 262.793392][ T8653] loop4: detected capacity change from 0 to 64 [ 262.834753][ T3681] usb 3-1: Using ep0 maxpacket: 8 [ 262.869422][ T8653] hfs: request for non-existent node 131072 in B*Tree [ 262.880839][ T8653] hfs: request for non-existent node 131072 in B*Tree [ 262.955238][ T3681] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.973201][ T3681] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.103462][ T8657] loop4: detected capacity change from 0 to 256 [ 263.145980][ T8657] exfat: Deprecated parameter 'utf8' [ 263.148714][ T3681] usb 3-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 263.170428][ T8657] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfa3b3837, utbl_chksum : 0xe619d30d) [ 263.185574][ T3653] Bluetooth: hci1: command tx timeout [ 263.203377][ T3681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.243082][ T8657] CUSE: zero length info key specified [ 263.248713][ T8640] loop3: detected capacity change from 0 to 32768 [ 263.260761][ T8640] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1753 (8640) [ 263.276683][ T3681] usb 3-1: Product: syz [ 263.298664][ T3681] usb 3-1: Manufacturer: syz [ 263.302835][ T8640] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 263.323870][ T3681] usb 3-1: SerialNumber: syz [ 263.334178][ T8640] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 263.343657][ T8640] BTRFS info (device loop3): setting nodatacow, compression disabled [ 263.352781][ T8640] BTRFS info (device loop3): disabling tree log [ 263.387483][ T8640] BTRFS info (device loop3): turning on sync discard [ 263.407568][ T8640] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 263.464538][ T8640] BTRFS info (device loop3): force zstd compression, level 3 [ 263.504007][ T8640] BTRFS info (device loop3): using free space tree [ 263.877256][ T8640] BTRFS info (device loop3): enabling ssd optimizations [ 264.085823][ T3681] hid (null): report_id 2668810406 is invalid [ 264.094646][ T3681] asus 0003:0B05:19B6.001E: report_id 2668810406 is invalid [ 264.116091][ T3681] asus 0003:0B05:19B6.001E: item 0 4 1 8 parsing failed [ 264.123712][ T3681] asus 0003:0B05:19B6.001E: Asus hid parse failed: -22 [ 264.184973][ T3681] asus: probe of 0003:0B05:19B6.001E failed with error -22 [ 264.375834][ T3684] usb 3-1: USB disconnect, device number 19 [ 264.425905][ T3637] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.528038][ T8662] loop4: detected capacity change from 0 to 32768 [ 264.795301][ T4202] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 264.907131][ T33] team0 (unregistering): Port device team_slave_1 removed [ 265.081421][ T8695] loop3: detected capacity change from 0 to 4096 [ 265.088640][ T4202] usb 1-1: Using ep0 maxpacket: 8 [ 265.113569][ T33] team0 (unregistering): Port device team_slave_0 removed [ 265.133368][ T8695] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 265.219545][ T4202] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 265.255983][ T4202] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 265.267259][ T3653] Bluetooth: hci1: command tx timeout [ 265.275982][ T4202] usb 1-1: config 135 has no interface number 0 [ 265.282451][ T4202] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.317578][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.328319][ T8695] ntfs: volume version 3.1. [ 265.433711][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.476980][ T4202] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 265.490874][ T4202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.525000][ T4202] usb 1-1: Product: syz [ 265.529247][ T4202] usb 1-1: Manufacturer: syz [ 265.550900][ T4202] usb 1-1: SerialNumber: syz [ 265.575000][ T3887] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 265.604222][ T4202] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 265.616131][ T4202] usb 1-1: No valid video chain found. [ 265.832806][ T4198] usb 1-1: USB disconnect, device number 18 [ 265.996320][ T3887] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 266.005769][ T3887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.016665][ T3887] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 266.025938][ T3887] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.155252][ T3887] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 266.164436][ T3887] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 266.172766][ T3887] usb 5-1: Product: syz [ 266.177401][ T3887] usb 5-1: Manufacturer: syz [ 266.226078][ T3887] cdc_wdm 5-1:1.0: skipping garbage [ 266.231357][ T3887] cdc_wdm 5-1:1.0: skipping garbage [ 266.242145][ T33] bond0 (unregistering): Released all slaves [ 266.250703][ T3887] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 266.260851][ T3887] cdc_wdm 5-1:1.0: Unknown control protocol [ 266.346982][ T8507] team0: Port device team_slave_1 added [ 266.373379][ T8701] netlink: 'syz.2.1773': attribute type 25 has an invalid length. [ 266.473527][ T3682] usb 5-1: USB disconnect, device number 12 [ 266.480021][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 266.480162][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 266.480183][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 266.586014][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.593021][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.631852][ T8507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.675342][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.682364][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.735116][ T8507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.769229][ T8707] nr0: tun_chr_ioctl cmd 1074025677 [ 266.777702][ T8707] nr0: linktype set to 804 [ 266.871445][ T8507] device hsr_slave_0 entered promiscuous mode [ 266.892164][ T8507] device hsr_slave_1 entered promiscuous mode [ 266.915421][ T8507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.923137][ T8507] Cannot create hsr debugfs directory [ 267.442446][ T8719] loop4: detected capacity change from 0 to 128 [ 267.727974][ T8706] loop0: detected capacity change from 0 to 32768 [ 267.784980][ T8706] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1775 (8706) [ 267.892345][ T8706] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 267.931062][ T8706] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 267.956042][ T8706] BTRFS info (device loop0): using free space tree [ 268.083418][ T8709] loop2: detected capacity change from 0 to 40427 [ 268.123051][ T8709] F2FS-fs (loop2): invalid crc value [ 268.293204][ T8709] F2FS-fs (loop2): Found nat_bits in checkpoint [ 268.341272][ T8706] BTRFS info (device loop0): enabling ssd optimizations [ 268.496919][ T8714] loop3: detected capacity change from 0 to 32768 [ 268.592652][ T8714] XFS (loop3): Mounting V5 Filesystem [ 268.598354][ T8709] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 268.784391][ T8714] XFS (loop3): Ending clean mount [ 268.808719][ T3647] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 268.821018][ T8726] loop4: detected capacity change from 0 to 32768 [ 268.855770][ T3646] syz-executor: attempt to access beyond end of device [ 268.855770][ T3646] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 268.977700][ T8507] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.466840][ T3637] XFS (loop3): Unmounting Filesystem [ 269.473351][ T8507] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.529304][ T8507] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.580820][ T8507] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 269.915660][ T8507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.967756][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.986014][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.029270][ T8507] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.076574][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.083775][ T8791] program syz.2.1788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.095977][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.127123][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.134312][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.213459][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.241233][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.273369][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.310143][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.317516][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.382845][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.420892][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.451350][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.548870][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.637249][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.666533][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.713335][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.743539][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.780987][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.814038][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.870763][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.905323][ T8507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.631607][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.666455][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.691140][ T8507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.789407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.795776][ T8804] loop3: detected capacity change from 0 to 32768 [ 271.808958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.835133][ T8804] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1784 (8804) [ 271.873974][ T8804] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 271.959064][ T8804] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 271.988670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.010087][ T8804] BTRFS info (device loop3): force zlib compression, level 3 [ 272.022200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.034881][ T8804] BTRFS info (device loop3): force clearing of disk cache [ 272.043320][ T8804] BTRFS info (device loop3): setting nodatasum [ 272.056060][ T8804] BTRFS info (device loop3): allowing degraded mounts [ 272.064320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.078140][ T8804] BTRFS info (device loop3): enabling disk space caching [ 272.101409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.117723][ T8804] BTRFS info (device loop3): disk space caching is enabled [ 272.137541][ T8507] device veth0_vlan entered promiscuous mode [ 272.168833][ T8507] device veth1_vlan entered promiscuous mode [ 272.233384][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.278369][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.304631][ T8507] device veth0_macvtap entered promiscuous mode [ 272.400680][ T8507] device veth1_macvtap entered promiscuous mode [ 272.460393][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.471371][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.481631][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.493118][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.508768][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.545907][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.558771][ T8507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.569828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.585840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 272.593003][ T8823] loop0: detected capacity change from 0 to 32768 [ 272.610612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.655530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.677834][ T8804] BTRFS info (device loop3): rebuilding free space tree [ 272.699385][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.703880][ T8823] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 272.703880][ T8823] [ 272.725249][ T8804] BTRFS info (device loop3): disabling free space tree [ 272.743874][ T8804] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 272.757892][ T8823] ERROR: (device loop0): remounting filesystem as read-only [ 272.767543][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.781879][ T8880] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 272.781879][ T8880] [ 272.791903][ T8804] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 272.802517][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.816155][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.831317][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.848674][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.864229][ T8507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.876152][ T8507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.907749][ T8507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.920610][ T133] blkno = 5002c, nblocks = 1 [ 272.926276][ T133] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 272.926276][ T133] [ 272.965027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.975979][ T8804] syz.3.1784 (8804) used greatest stack depth: 18352 bytes left [ 273.008917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.067465][ T8507] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.122319][ T8507] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.149424][ T8507] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.168858][ T8507] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.195312][ T3637] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 274.025809][ T3693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.044814][ T3693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.106395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 274.172366][ T8904] tun0: tun_chr_ioctl cmd 1074025672 [ 274.181793][ T8904] tun0: ignored: set checksum enabled [ 274.210358][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'. [ 274.218915][ T8689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.251870][ T8689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.305599][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.551820][ T8912] loop2: detected capacity change from 0 to 2048 [ 274.570225][ T8920] loop1: detected capacity change from 0 to 512 [ 274.604120][ T8920] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 274.665723][ T8920] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 274.676258][ T8912] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 274.856267][ T8920] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 274.888929][ T8920] System zones: 0-2, 18-18, 34-34 [ 274.901297][ T8914] loop3: detected capacity change from 0 to 8192 [ 274.923383][ T8920] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 274.931794][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 274.951250][ T8894] loop4: detected capacity change from 0 to 32768 [ 275.012842][ T8930] loop0: detected capacity change from 0 to 2048 [ 275.026799][ T8920] EXT4-fs (loop1): 1 truncate cleaned up [ 275.032660][ T8920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 275.055995][ T8914] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 275.086660][ T8930] loop0: p4 < > [ 275.117490][ T8894] XFS (loop4): Mounting V5 Filesystem [ 275.124138][ T26] audit: type=1800 audit(1726241893.163:71): pid=8920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1716" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 275.144292][ T8930] ax25_connect(): syz.0.1823 uses autobind, please contact jreuter@yaina.de [ 275.146517][ T8914] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 275.164879][ T8914] REISERFS (device loop3): using ordered data mode [ 275.169213][ T3092] loop0: p4 < > [ 275.171715][ T8914] reiserfs: using flush barriers [ 275.197256][ T8914] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 275.253215][ T8914] REISERFS (device loop3): checking transaction log (loop3) [ 275.317618][ T8894] XFS (loop4): Ending clean mount [ 275.324501][ T8914] REISERFS (device loop3): Using r5 hash to sort names [ 275.340690][ T3716] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 275.340777][ T3647] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 275.366065][ T8914] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 275.376583][ T3716] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.387855][ T8507] EXT4-fs (loop1): unmounting filesystem. [ 275.441404][ T3716] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 275.474942][ T8914] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 275.482268][ T3716] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.534462][ T3716] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 275.563500][ T3716] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.583495][ T8914] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 275.604967][ T4205] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 275.634559][ T3716] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 275.667751][ T8914] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 275.676673][ T3645] XFS (loop4): Unmounting Filesystem [ 275.693859][ T3716] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.733119][ T8914] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 275.743205][ T3716] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 275.770527][ T3716] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.781598][ T3716] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 275.994999][ T4205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.036972][ T4205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.052578][ T3716] udevd[3716]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 276.073189][ T4205] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 276.125889][ T4205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.168450][ T4205] usb 3-1: config 0 descriptor?? [ 276.198608][ T3716] udevd[3716]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 276.306786][ T3716] udevd[3716]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 276.326673][ T8968] loop0: detected capacity change from 0 to 64 [ 276.558564][ T8976] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1836'. [ 276.608884][ T8976] 0ªX¹¦À: renamed from caif0 [ 276.653744][ T8976] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 276.672283][ T4205] hid-thrustmaster 0003:044F:B65D.001F: unknown main item tag 0x0 [ 276.716832][ T4205] hid-thrustmaster 0003:044F:B65D.001F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 276.755804][ T8982] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1837'. [ 276.775503][ T4205] hid-thrustmaster 0003:044F:B65D.001F: Wrong number of endpoints? [ 276.789132][ T8982] netlink: zone id is out of range [ 276.794302][ T8982] netlink: zone id is out of range [ 276.835804][ T8982] netlink: zone id is out of range [ 276.934834][ C1] hid-thrustmaster 0003:044F:B65D.001F: Unknown packet type 0x0, unable to proceed further with wheel init [ 277.158661][ T4205] usb 3-1: USB disconnect, device number 20 [ 277.174492][ T8996] loop1: detected capacity change from 0 to 64 [ 277.523975][ T9002] sctp: [Deprecated]: syz.4.1844 (pid 9002) Use of int in maxseg socket option. [ 277.523975][ T9002] Use struct sctp_assoc_value instead [ 277.565154][ T8982] netlink: set zone limit has 8 unknown bytes [ 277.594144][ T9004] loop3: detected capacity change from 0 to 4096 [ 277.716609][ T9007] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.997255][ T9014] loop2: detected capacity change from 0 to 64 [ 278.096142][ T3693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.399981][ T3693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.548409][ T9028] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1853'. [ 278.604390][ T9030] program syz.4.1856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.614351][ T3693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.809273][ T3693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.812415][ T9037] Bluetooth: MGMT ver 1.22 [ 279.436687][ T3655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.484916][ T3655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.501093][ T3655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.543286][ T3655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.554068][ T3655] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.561735][ T3655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.621975][ T9065] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1868'. [ 279.631132][ T9055] loop4: detected capacity change from 0 to 4096 [ 279.646173][ T9055] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 279.778374][ T9067] loop0: detected capacity change from 0 to 256 [ 279.815270][ T9067] exfat: Unknown parameter 'è‰!]üKì»”]%›h<§"€t]¢ c÷ýù”Ù“ýc’53&vMhŸ×É­n`' [ 279.891495][ T3729] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 279.939205][ T9067] loop0: detected capacity change from 0 to 764 [ 279.979552][ T9069] loop3: detected capacity change from 0 to 256 [ 281.221233][ T9056] chnl_net:caif_netlink_parms(): no params data found [ 281.655006][ T3655] Bluetooth: hci1: command tx timeout [ 281.691096][ T9129] loop3: detected capacity change from 0 to 1024 [ 281.755671][ T9129] EXT4-fs: Ignoring removed i_version option [ 281.832247][ T9129] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 281.863139][ T9129] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 281.888410][ T9129] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 282.012323][ T3637] EXT4-fs (loop3): unmounting filesystem. [ 282.204111][ T9056] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.204192][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.205961][ T9056] device bridge_slave_0 entered promiscuous mode [ 282.217238][ T9056] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.233368][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.248561][ T9056] device bridge_slave_1 entered promiscuous mode [ 282.357367][ T9124] loop0: detected capacity change from 0 to 32768 [ 282.525140][ T9142] sch_tbf: peakrate 32768 is lower than or equals to rate 65550 ! [ 282.570081][ T9056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.631543][ T9056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.705226][ T3693] device hsr_slave_0 left promiscuous mode [ 282.725772][ T3693] device hsr_slave_1 left promiscuous mode [ 282.754888][ T3888] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 282.769028][ T3693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.781490][ T3693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.799986][ T3693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.825032][ T3693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.852848][ T3693] device bridge_slave_1 left promiscuous mode [ 282.864949][ T3693] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.922416][ T3693] device bridge_slave_0 left promiscuous mode [ 282.937911][ T3693] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.978753][ T9160] loop4: detected capacity change from 0 to 256 [ 282.994950][ T3888] usb 3-1: Using ep0 maxpacket: 32 [ 283.066001][ T9160] exfat: Unknown parameter 'è‰!]üKì»”]%›h<§"€t]¢ c÷ýù”Ù“ýc’53&vMhŸ×É­n`' [ 283.077013][ T3693] device veth1_macvtap left promiscuous mode [ 283.083133][ T3693] device veth0_macvtap left promiscuous mode [ 283.090985][ T3693] device veth1_vlan left promiscuous mode [ 283.097039][ T3693] device veth0_vlan left promiscuous mode [ 283.113109][ T9166] loop0: detected capacity change from 0 to 512 [ 283.151976][ T9160] loop4: detected capacity change from 0 to 764 [ 283.234511][ T9166] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 283.275007][ T3888] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 283.292383][ T3888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.297345][ T9166] ext4 filesystem being mounted at /397/bus supports timestamps until 2038 (0x7fffffff) [ 283.317335][ T3888] usb 3-1: Product: syz [ 283.324941][ T3888] usb 3-1: Manufacturer: syz [ 283.329619][ T3888] usb 3-1: SerialNumber: syz [ 283.340942][ T3888] usb 3-1: config 0 descriptor?? [ 283.532887][ T3647] EXT4-fs (loop0): unmounting filesystem. [ 283.745007][ T3653] Bluetooth: hci1: command tx timeout [ 283.942492][ T9184] loop0: detected capacity change from 0 to 4096 [ 283.950996][ T9184] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 284.076722][ T3888] (unnamed net_device) (uninitialized): Assigned a random MAC address: 62:89:cc:6d:b2:34 [ 284.221976][ T9187] loop3: detected capacity change from 0 to 512 [ 284.242273][ T9187] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 284.319033][ T9187] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 284.345061][ T9187] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 284.360390][ T9187] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.1904: Failed to acquire dquot type 0 [ 284.381549][ T9187] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 284.428402][ T9187] EXT4-fs (loop3): 1 truncate cleaned up [ 284.438221][ T9187] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 284.494638][ T9187] EXT4-fs (loop3): shut down requested (2) [ 284.605945][ T3637] EXT4-fs (loop3): unmounting filesystem. [ 284.625158][ T4205] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 284.770962][ T9195] loop3: detected capacity change from 0 to 512 [ 284.835860][ T9195] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 284.860582][ T9195] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 284.869171][ T4205] usb 1-1: Using ep0 maxpacket: 32 [ 284.934345][ T9195] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 284.950268][ T9195] System zones: 0-2, 18-18, 34-34 [ 285.002809][ T9195] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 285.020339][ T4205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.020378][ T4205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.020416][ T4205] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 285.020444][ T4205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.022328][ T4205] usb 1-1: config 0 descriptor?? [ 285.059579][ T9195] EXT4-fs (loop3): 1 truncate cleaned up [ 285.059664][ T9195] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 285.113435][ T26] audit: type=1800 audit(1726241903.153:72): pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1908" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 285.224400][ T3693] team0 (unregistering): Port device team_slave_1 removed [ 285.346610][ T3637] EXT4-fs (loop3): unmounting filesystem. [ 285.415543][ T9211] loop3: detected capacity change from 0 to 256 [ 285.433171][ T9211] exfat: Unknown parameter 'è‰!]üKì»”]%›h<§"€t]¢ c÷ýù”Ù“ýc’53&vMhŸ×É­n`' [ 285.503044][ T9211] loop3: detected capacity change from 0 to 764 [ 285.506637][ T3693] team0 (unregistering): Port device team_slave_0 removed [ 285.523157][ T4205] kone 0003:1E7D:2CED.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 285.719876][ T3693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.742274][ T4205] kone 0003:1E7D:2CED.0020: couldn't init struct kone_device [ 285.753584][ T4205] kone 0003:1E7D:2CED.0020: couldn't install mouse [ 285.768236][ T4205] kone: probe of 0003:1E7D:2CED.0020 failed with error -5 [ 285.800058][ T4205] usb 1-1: USB disconnect, device number 19 [ 285.820268][ T3653] Bluetooth: hci1: command tx timeout [ 285.846625][ T3693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.999754][ T3683] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 286.459854][ T9225] netlink: 'syz.0.1917': attribute type 16 has an invalid length. [ 286.468155][ T9225] netlink: 'syz.0.1917': attribute type 3 has an invalid length. [ 286.476130][ T9225] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.1917'. [ 286.495934][ T3683] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 286.505239][ T3683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.522521][ T3683] usb 4-1: config 0 descriptor?? [ 286.598484][ T3683] gspca_main: spca508-2.14.0 probing 8086:0110 [ 286.816729][ T3683] gspca_spca508: reg_read err -32 [ 286.875796][ T3683] gspca_spca508: reg_read err -32 [ 286.900444][ T3693] bond0 (unregistering): Released all slaves [ 287.077568][ T3888] rtl8150 3-1:0.0: eth5: rtl8150 is detected [ 287.125029][ T3888] usb 3-1: USB disconnect, device number 21 [ 287.136584][ T9056] team0: Port device team_slave_0 added [ 287.151447][ T3683] gspca_spca508: reg_read err -71 [ 287.174950][ T3683] gspca_spca508: reg_read err -71 [ 287.188210][ T9056] team0: Port device team_slave_1 added [ 287.195136][ T3683] gspca_spca508: reg write: error -71 [ 287.200618][ T3683] spca508: probe of 4-1:0.0 failed with error -71 [ 287.240424][ T3683] usb 4-1: USB disconnect, device number 17 [ 287.278048][ T26] audit: type=1326 audit(1726241905.323:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.0.1924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd95f37def9 code=0x0 [ 287.443657][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.455398][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.521529][ T9056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.552417][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.601586][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.694980][ T9056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.887133][ T9056] device hsr_slave_0 entered promiscuous mode [ 287.894930][ T3653] Bluetooth: hci1: command tx timeout [ 287.910510][ T9056] device hsr_slave_1 entered promiscuous mode [ 287.954277][ T9056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.998977][ T9056] Cannot create hsr debugfs directory [ 288.370902][ T9262] virtio-fs: tag <(null)> not found [ 288.412206][ T9240] loop2: detected capacity change from 0 to 32768 [ 289.124788][ T3878] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 289.374853][ T3878] usb 5-1: Using ep0 maxpacket: 32 [ 289.610428][ T9301] loop2: detected capacity change from 0 to 512 [ 289.634754][ T9301] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 289.656498][ T3878] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 289.679952][ T3878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.697246][ T3878] usb 5-1: Product: syz [ 289.700209][ T9301] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 289.704837][ T3878] usb 5-1: Manufacturer: syz [ 289.726598][ T3878] usb 5-1: SerialNumber: syz [ 289.745783][ T3878] usb 5-1: config 0 descriptor?? [ 289.759772][ T9301] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 289.790783][ T9301] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.1936: Failed to acquire dquot type 0 [ 289.827824][ T9301] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 289.900504][ T9301] EXT4-fs (loop2): 1 truncate cleaned up [ 289.926127][ T9301] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 289.981405][ T9301] EXT4-fs (loop2): shut down requested (2) [ 290.339818][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 290.456449][ T9320] loop2: detected capacity change from 0 to 512 [ 290.485019][ T3878] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4a:9e:f7:ab:1a:57 [ 290.538637][ T9320] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 290.549834][ T3878] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 290.588607][ T9320] ext4 filesystem being mounted at /372/bus supports timestamps until 2038 (0x7fffffff) [ 290.620660][ T3878] usb 5-1: USB disconnect, device number 13 [ 290.742700][ T9056] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 290.763433][ T3646] EXT4-fs (loop2): unmounting filesystem. [ 290.804508][ T9056] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 290.839456][ T9056] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 290.900879][ T9056] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 291.139298][ T9338] loop0: detected capacity change from 0 to 128 [ 291.150704][ T9056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.193885][ T26] audit: type=1800 audit(1726241909.233:74): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1951" name="bus" dev="loop0" ino=1048677 res=0 errno=0 [ 291.214066][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.221943][ T3685] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 291.251065][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.274606][ T9342] loop4: detected capacity change from 0 to 256 [ 291.287164][ T9056] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.313192][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.336987][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.337831][ T9342] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 291.388612][ T3693] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.395909][ T3693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.456277][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.484921][ T3685] usb 4-1: Using ep0 maxpacket: 16 [ 291.503480][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.530031][ T3693] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.537329][ T3693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.579747][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.626212][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.636406][ T3685] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 291.652759][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.660988][ T3685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.671019][ T3685] usb 4-1: config 0 descriptor?? [ 291.711339][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.751118][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.757336][ T3685] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 291.785155][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.832015][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.865512][ T9056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.905454][ T9056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.930227][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.941109][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.963969][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.973402][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.982783][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.999208][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.172562][ T9330] loop2: detected capacity change from 0 to 40427 [ 292.191059][ T9330] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 292.200679][ T9330] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 292.211223][ T9330] F2FS-fs (loop2): invalid crc value [ 292.215325][ T3878] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 292.252081][ T9330] F2FS-fs (loop2): Found nat_bits in checkpoint [ 292.325637][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.333280][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.350244][ T9056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.355620][ T9330] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 292.364440][ T9330] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 292.397784][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 292.410623][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.420526][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.445162][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.463914][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.474913][ T3878] usb 5-1: Using ep0 maxpacket: 32 [ 292.482897][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.500404][ T9056] device veth0_vlan entered promiscuous mode [ 292.511391][ T33] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 292.533772][ T33] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 292.550496][ T9056] device veth1_vlan entered promiscuous mode [ 292.581800][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 292.591390][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 292.599575][ T3878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.616526][ T3685] gspca_sonixj: reg_r err -71 [ 292.621498][ T3685] sonixj: probe of 4-1:0.0 failed with error -71 [ 292.621833][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 292.641367][ T3878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.646654][ T3685] usb 4-1: USB disconnect, device number 18 [ 292.669936][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 292.685375][ T3878] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 292.723573][ T9056] device veth0_macvtap entered promiscuous mode [ 292.730786][ T3878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.766484][ T9056] device veth1_macvtap entered promiscuous mode [ 292.785676][ T3878] usb 5-1: config 0 descriptor?? [ 292.842762][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.862756][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.873313][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.889925][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.931523][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.956213][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.968658][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.995185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 293.013431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.031778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.051148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.077247][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.098125][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.118594][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.139772][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.160292][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.177042][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.194088][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.210602][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.222348][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.242243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.252645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.277684][ T9056] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.296723][ T3878] kone 0003:1E7D:2CED.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 293.319402][ T9056] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.336240][ T9056] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.376766][ T9056] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.403034][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1965'. [ 293.484900][ T3878] kone 0003:1E7D:2CED.0021: couldn't init struct kone_device [ 293.495299][ T3878] kone 0003:1E7D:2CED.0021: couldn't install mouse [ 293.543937][ T3878] kone: probe of 0003:1E7D:2CED.0021 failed with error -5 [ 293.577670][ T3878] usb 5-1: USB disconnect, device number 14 [ 293.618054][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.654140][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.737205][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 293.762525][ T3693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.790273][ T3693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.865932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.947325][ T9395] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 294.606601][ T9415] loop0: detected capacity change from 0 to 4096 [ 294.628618][ T9415] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 294.746787][ T9415] ntfs3: loop0: failed to convert "c46c" to macturkish [ 295.123178][ T9437] loop0: detected capacity change from 0 to 1024 [ 295.142602][ T9437] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 295.172073][ T9437] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 295.184340][ T9437] EXT4-fs (loop0): invalid journal inode [ 295.190346][ T9437] EXT4-fs (loop0): can't get journal size [ 295.204178][ T9437] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 295.267335][ T9437] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 37: comm syz.0.1973: path /419/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 295.294754][ T3878] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 295.305968][ T9437] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.1973: path /419/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 295.471468][ T3647] EXT4-fs (loop0): unmounting filesystem. [ 295.543757][ T3878] usb 2-1: Using ep0 maxpacket: 32 [ 295.679578][ T3878] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 295.692492][ T3878] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 295.709377][ T3878] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 295.721011][ T3878] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 295.734826][ T3878] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.895407][ T3878] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 295.909368][ T3878] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 295.929317][ T3878] usb 2-1: Product: syz [ 295.939079][ T3878] usb 2-1: Manufacturer: syz [ 295.943962][ T3878] usb 2-1: SerialNumber: syz [ 295.955673][ T3878] usb 2-1: config 0 descriptor?? [ 295.996544][ T3878] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 296.024024][ T3878] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 296.236737][ T3878] usb 2-1: USB disconnect, device number 19 [ 296.245149][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 296.258961][ T3878] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 297.177181][ T9485] loop2: detected capacity change from 0 to 64 [ 297.335337][ T3887] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 297.429648][ T9490] netlink: 'syz.2.1999': attribute type 2 has an invalid length. [ 297.481686][ T9490] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1999'. [ 297.585152][ T3887] usb 1-1: Using ep0 maxpacket: 16 [ 297.690665][ T9498] loop2: detected capacity change from 0 to 1024 [ 297.874957][ T3887] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 297.884411][ T3887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.955013][ T3887] usb 1-1: Product: syz [ 297.975413][ T3887] usb 1-1: Manufacturer: syz [ 298.000581][ T3887] usb 1-1: SerialNumber: syz [ 298.012088][ T3887] usb 1-1: config 0 descriptor?? [ 298.050838][ T9505] loop4: detected capacity change from 0 to 1024 [ 298.065054][ T3887] as10x_usb: device has been detected [ 298.083630][ T3887] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 298.122514][ T9486] loop3: detected capacity change from 0 to 32768 [ 298.135985][ T9505] EXT4-fs: Ignoring removed orlov option [ 298.141731][ T9505] EXT4-fs: Ignoring removed bh option [ 298.194375][ T3887] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 298.244329][ T9486] XFS (loop3): Mounting V5 Filesystem [ 298.269856][ T9476] random: crng reseeded on system resumption [ 298.325930][ T9505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 298.379547][ T3887] as10x_usb: error during firmware upload part1 [ 298.394823][ T3887] Registered device Sky IT Digital Key (green led) [ 298.410920][ T9486] XFS (loop3): Ending clean mount [ 298.457916][ T9486] XFS (loop3): Quotacheck needed: Please wait. [ 298.555532][ T9486] XFS (loop3): Quotacheck: Done. [ 298.593322][ T9500] loop1: detected capacity change from 0 to 40427 [ 298.611554][ T9500] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 298.627155][ T9500] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 298.641840][ T9500] F2FS-fs (loop1): invalid crc value [ 298.702262][ T9500] F2FS-fs (loop1): Found nat_bits in checkpoint [ 298.752535][ T3645] EXT4-fs (loop4): unmounting filesystem. [ 298.768360][ T3637] XFS (loop3): Unmounting Filesystem [ 298.885927][ T9500] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 298.903302][ T9500] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 299.132234][ T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 299.153523][ T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 299.381464][ T9511] loop2: detected capacity change from 0 to 32768 [ 299.430539][ T9511] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1996 (9511) [ 299.452690][ T9529] Â: renamed from pim6reg1 [ 299.521565][ T9511] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 299.567172][ T9511] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 299.571750][ T3887] usb 1-1: USB disconnect, device number 20 [ 299.593582][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1997'. [ 299.617303][ T9511] BTRFS info (device loop2): using free space tree [ 299.630993][ T9532] tipc: Started in network mode [ 299.637118][ T9532] tipc: Node identity , cluster identity 8 [ 299.660042][ T3887] Unregistered device Sky IT Digital Key (green led) [ 299.665462][ T3887] as10x_usb: device has been disconnected [ 299.754034][ T9546] netlink: 'syz.4.2003': attribute type 2 has an invalid length. [ 299.776474][ T9546] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2003'. [ 299.874896][ T9511] BTRFS info (device loop2): enabling ssd optimizations [ 300.014455][ T3646] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 300.199568][ T9560] loop3: detected capacity change from 0 to 1024 [ 300.224161][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2008'. [ 300.437682][ T9567] loop4: detected capacity change from 0 to 256 [ 300.506360][ T9567] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 300.911686][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2016'. [ 300.967026][ T4198] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 301.174962][ T9586] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2019'. [ 301.234889][ T4198] usb 3-1: Using ep0 maxpacket: 16 [ 301.355090][ T4198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.369732][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 301.397795][ T4198] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 301.434894][ T4198] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 301.454173][ T4198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.487054][ T4198] usb 3-1: config 0 descriptor?? [ 301.540545][ T9598] loop3: detected capacity change from 0 to 128 [ 301.598000][ T9598] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 301.611102][ T9598] ext4 filesystem being mounted at /392/mnt supports timestamps until 2038 (0x7fffffff) [ 301.644801][ T3887] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 301.672901][ T9601] loop0: detected capacity change from 0 to 512 [ 301.743914][ T9601] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2025: bg 0: block 5: invalid block bitmap [ 301.759360][ T9573] loop1: detected capacity change from 0 to 32768 [ 301.776771][ T9573] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 301.788919][ T9573] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 301.801514][ T3637] EXT4-fs (loop3): unmounting filesystem. [ 301.813787][ T9573] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 301.813993][ T9601] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 301.846038][ T4197] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 301.850978][ T9601] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2025: invalid indirect mapped block 3 (level 2) [ 301.871218][ T9601] EXT4-fs (loop0): 1 orphan inode deleted [ 301.873292][ T4197] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 301.878247][ T9601] EXT4-fs (loop0): 1 truncate cleaned up [ 301.890473][ T9601] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 301.899652][ T3887] usb 5-1: Using ep0 maxpacket: 16 [ 301.959537][ T4197] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 86ms [ 301.969759][ T4197] gfs2: fsid=syz:syz.0: jid=0: Done [ 301.981450][ T9573] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 302.005471][ T3647] EXT4-fs (loop0): unmounting filesystem. [ 302.014938][ T4198] usbhid 3-1:0.0: can't add hid device: -71 [ 302.020978][ T4198] usbhid: probe of 3-1:0.0 failed with error -71 [ 302.032282][ T4198] usb 3-1: USB disconnect, device number 22 [ 302.185200][ T3887] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 302.194584][ T3887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.271617][ T3887] usb 5-1: Product: syz [ 302.305496][ T3887] usb 5-1: Manufacturer: syz [ 302.317170][ T3887] usb 5-1: SerialNumber: syz [ 302.342951][ T3887] usb 5-1: config 0 descriptor?? [ 302.394317][ T3887] as10x_usb: device has been detected [ 302.427651][ T3887] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 302.511027][ T3887] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 302.555442][ T3887] as10x_usb: error during firmware upload part1 [ 302.562235][ T3887] Registered device Sky IT Digital Key (green led) [ 302.590728][ T9594] random: crng reseeded on system resumption [ 303.051369][ T9604] loop3: detected capacity change from 0 to 40427 [ 303.127049][ T9604] F2FS-fs (loop3): Found nat_bits in checkpoint [ 303.259976][ T9604] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 303.372406][ T9618] ALSA: mixer_oss: invalid OSS volume '‰' [ 303.497856][ T3637] syz-executor: attempt to access beyond end of device [ 303.497856][ T3637] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 303.543866][ T3878] usb 5-1: USB disconnect, device number 15 [ 303.579227][ T3878] Unregistered device Sky IT Digital Key (green led) [ 303.599448][ T3878] as10x_usb: device has been disconnected [ 303.853099][ T9631] loop0: detected capacity change from 0 to 1024 [ 303.879793][ T9631] EXT4-fs: Ignoring removed orlov option [ 303.896019][ T9631] EXT4-fs: Ignoring removed bh option [ 303.996390][ T9631] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 304.198499][ T9640] loop4: detected capacity change from 0 to 1024 [ 304.253652][ T3647] EXT4-fs (loop0): unmounting filesystem. [ 304.394961][ T3878] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 304.404356][ T5708] hfsplus: b-tree write err: -5, ino 4 [ 304.510339][ T9646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2040'. [ 304.636098][ T3878] usb 4-1: Using ep0 maxpacket: 16 [ 304.741205][ T9653] ALSA: mixer_oss: invalid OSS volume '‰' [ 304.754989][ T3878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 304.782751][ T3878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 304.810993][ T3878] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 304.855919][ T3878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.898595][ T3878] usb 4-1: config 0 descriptor?? [ 304.955830][ T9627] loop2: detected capacity change from 0 to 40427 [ 304.976642][ T9627] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 304.993711][ T9627] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 305.033795][ T9627] F2FS-fs (loop2): invalid crc value [ 305.092524][ T9627] F2FS-fs (loop2): Found nat_bits in checkpoint [ 305.144940][ T9638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.205513][ T9627] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 305.213004][ T9638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.226182][ T9627] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 305.367525][ T9627] syz.2.2033: attempt to access beyond end of device [ 305.367525][ T9627] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 305.475494][ T3878] hid (null): bogus close delimiter [ 305.481081][ T3878] hid (null): invalid report_size 59136 [ 305.517612][ T3878] hid (null): report_id 48035 is invalid [ 305.562806][ T3878] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 305.588436][ T3878] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 305.610945][ T3878] hid-generic 0003:0158:0100.0022: bogus close delimiter [ 305.649237][ T3878] hid-generic 0003:0158:0100.0022: item 0 0 2 10 parsing failed [ 305.670032][ T3878] hid-generic: probe of 0003:0158:0100.0022 failed with error -22 [ 305.717699][ T3878] usb 4-1: USB disconnect, device number 19 [ 305.830885][ T3646] syz-executor: attempt to access beyond end of device [ 305.830885][ T3646] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 305.861739][ T9668] netem: incorrect gi model size [ 305.871113][ T9657] loop0: detected capacity change from 0 to 40427 [ 305.888791][ T9668] netem: change failed [ 305.905685][ T9657] F2FS-fs (loop0): Found nat_bits in checkpoint [ 306.028873][ T9657] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 306.237447][ T3647] syz-executor: attempt to access beyond end of device [ 306.237447][ T3647] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 306.315279][ T9682] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2056'. [ 306.551134][ T9688] loop3: detected capacity change from 0 to 1024 [ 306.683545][ T9687] loop4: detected capacity change from 0 to 4096 [ 306.729165][ T5708] hfsplus: b-tree write err: -5, ino 4 [ 306.766466][ T4198] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 306.769854][ T9687] ntfs: volume version 3.1. [ 306.994807][ T5247] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 307.033345][ T4198] usb 2-1: Using ep0 maxpacket: 32 [ 307.103128][ T9694] loop0: detected capacity change from 0 to 4096 [ 307.113854][ T9696] binder: 9695:9696 ioctl c018620c 200004c0 returned -1 [ 307.162431][ T9694] ntfs: volume version 3.1. [ 307.177669][ T4198] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.221750][ T4198] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.244857][ T5247] usb 3-1: Using ep0 maxpacket: 16 [ 307.425299][ T4198] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 307.453474][ T4198] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 307.482934][ T4198] usb 2-1: Product: syz [ 307.493085][ T4198] usb 2-1: Manufacturer: syz [ 307.504932][ T4198] usb 2-1: SerialNumber: syz [ 307.513993][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2065'. [ 307.525060][ T5247] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 307.546874][ T5247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.565288][ T5247] usb 3-1: Product: syz [ 307.569604][ T5247] usb 3-1: Manufacturer: syz [ 307.574245][ T5247] usb 3-1: SerialNumber: syz [ 307.587947][ T4198] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input30 [ 307.606863][ T5247] usb 3-1: config 0 descriptor?? [ 307.661874][ T5247] as10x_usb: device has been detected [ 307.684127][ T5247] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 307.749023][ T5247] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 307.770274][ T9692] loop3: detected capacity change from 0 to 32768 [ 307.784093][ T5247] as10x_usb: error during firmware upload part1 [ 307.794541][ T5247] Registered device Sky IT Digital Key (green led) [ 307.809939][ T9692] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 307.875041][ T9692] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 307.891066][ T3888] usb 2-1: USB disconnect, device number 20 [ 307.909812][ T9690] random: crng reseeded on system resumption [ 307.940177][ T3888] appletouch 2-1:1.0: input: appletouch disconnected [ 307.948913][ T9692] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 307.993062][ T3878] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 308.000164][ T3878] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 308.085027][ T3878] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 84ms [ 308.108591][ T3878] gfs2: fsid=syz:syz.0: jid=0: Done [ 308.113881][ T9692] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 308.195943][ T9692] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 308.219387][ T9692] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 308.219387][ T9692] inode = 12 2341 [ 308.219387][ T9692] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 308.247185][ T9692] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 308.265937][ T9702] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 308.280970][ T9692] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:9692 [syz.3.2061] __gfs2_lookup+0xa0/0x270 [ 308.294622][ T9702] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 308.294622][ T9702] inode = 12 2341 [ 308.294622][ T9702] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 308.339187][ T9692] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:9702 [syz.3.2061] __gfs2_lookup+0xa0/0x270 [ 308.351886][ T9692] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 308.365041][ T9702] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 308.374487][ T9692] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 308.394330][ T9702] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:9692 [syz.3.2061] __gfs2_lookup+0xa0/0x270 [ 308.405643][ T9692] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 308.415333][ T9702] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:9702 [syz.3.2061] __gfs2_lookup+0xa0/0x270 [ 308.425727][ T9692] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 308.432317][ T9702] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 308.498375][ T9692] gfs2: fsid=syz:syz.0: File system withdrawn [ 308.504547][ T9692] CPU: 1 PID: 9692 Comm: syz.3.2061 Not tainted 6.1.110-syzkaller #0 [ 308.512666][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 308.522909][ T9692] Call Trace: [ 308.526239][ T9692] [ 308.529202][ T9692] dump_stack_lvl+0x1e3/0x2cb [ 308.533918][ T9692] ? nf_tcp_handle_invalid+0x642/0x642 [ 308.540114][ T9692] ? panic+0x764/0x764 [ 308.544366][ T9692] ? kobject_uevent_env+0x54a/0x8c0 [ 308.546458][ T3878] usb 3-1: USB disconnect, device number 23 [ 308.549618][ T9692] gfs2_withdraw+0xfcb/0x1550 [ 308.560334][ T9692] ? gfs2_lm+0x230/0x230 [ 308.564637][ T9692] ? gfs2_dirent_scan+0x276/0x640 [ 308.569907][ T9692] ? panic+0x764/0x764 [ 308.574045][ T9692] ? gfs2_consist_inode_i+0xf1/0x110 [ 308.579400][ T9692] gfs2_dirent_scan+0x512/0x640 [ 308.584311][ T9692] ? gfs2_dirent_search+0x8c0/0x8c0 [ 308.589664][ T9692] gfs2_dirent_search+0x30a/0x8c0 [ 308.594752][ T9692] ? gfs2_dirent_search+0x8c0/0x8c0 [ 308.600437][ T9692] ? inode_dio_wait+0x2a9/0x340 [ 308.606142][ T9692] ? generic_permission+0x21c/0x4f0 [ 308.612547][ T9692] ? gfs2_dir_search+0x2f0/0x2f0 [ 308.618869][ T9692] ? gfs2_permission+0x401/0x4d0 [ 308.623881][ T9692] gfs2_dir_search+0xae/0x2f0 [ 308.628703][ T9692] ? do_filldir_main+0x520/0x520 [ 308.633871][ T9692] ? inode_go_held+0xe6/0x1f0 [ 308.638786][ T9692] ? gfs2_glock_wait+0x216/0x2a0 [ 308.643800][ T9692] gfs2_lookupi+0x45f/0x5e0 [ 308.648408][ T9692] ? gfs2_lookup_simple+0x170/0x170 [ 308.653680][ T9692] ? __gfs2_lookup+0xa0/0x270 [ 308.658514][ T9692] ? d_alloc_parallel+0x31a/0x1590 [ 308.663785][ T9692] __gfs2_lookup+0xa0/0x270 [ 308.668367][ T9692] ? lockdep_softirqs_off+0x420/0x420 [ 308.673814][ T9692] ? gfs2_atomic_open+0x220/0x220 [ 308.677557][ T3878] Unregistered device Sky IT Digital Key (green led) [ 308.678967][ T9692] ? __init_waitqueue_head+0xaa/0x140 [ 308.691104][ T9692] __lookup_slow+0x27e/0x3d0 [ 308.694862][ T3878] as10x_usb: device has been disconnected [ 308.695732][ T9692] ? lookup_one_len+0x2d0/0x2d0 [ 308.695788][ T9692] lookup_slow+0x53/0x70 [ 308.710853][ T9692] walk_component+0x2d0/0x400 [ 308.715615][ T9692] path_lookupat+0x16f/0x450 [ 308.720702][ T9692] filename_lookup+0x251/0x600 [ 308.725573][ T9692] ? hashlen_string+0x110/0x110 [ 308.730517][ T9692] ? strncpy_from_user+0x1f9/0x360 [ 308.734838][ T3888] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 308.735758][ T9692] ? getname_flags+0x1f9/0x4f0 [ 308.748114][ T9692] user_path_at_empty+0x3e/0x60 [ 308.753015][ T9692] do_sys_truncate+0xa3/0x190 [ 308.757754][ T9692] ? break_lease+0xd0/0xd0 [ 308.762312][ T9692] ? syscall_enter_from_user_mode+0x2e/0x230 [ 308.768528][ T9692] ? lockdep_hardirqs_on+0x94/0x130 [ 308.773918][ T9692] ? syscall_enter_from_user_mode+0x2e/0x230 [ 308.780471][ T9692] do_syscall_64+0x3b/0xb0 [ 308.785420][ T9692] ? clear_bhb_loop+0x45/0xa0 [ 308.790277][ T9692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.796360][ T9692] RIP: 0033:0x7f74f437def9 [ 308.800916][ T9692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.820751][ T9692] RSP: 002b:00007f74f50d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 308.829927][ T9692] RAX: ffffffffffffffda RBX: 00007f74f4535f80 RCX: 00007f74f437def9 [ 308.838404][ T9692] RDX: 0000000000000000 RSI: 1000000000005e02 RDI: 0000000020000280 [ 308.846424][ T9692] RBP: 00007f74f43f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 308.854459][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.862478][ T9692] R13: 0000000000000000 R14: 00007f74f4535f80 R15: 00007ffd4deba538 [ 308.870576][ T9692] [ 309.125127][ T3888] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 309.170591][ T3888] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 309.249701][ T26] audit: type=1800 audit(1726241927.293:75): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2070" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 309.313688][ T9718] loop4: detected capacity change from 0 to 64 [ 309.364387][ T9720] loop3: detected capacity change from 0 to 256 [ 309.375271][ T3888] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 309.384431][ T3888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.419214][ T3888] usb 1-1: Product: syz [ 309.423460][ T3888] usb 1-1: Manufacturer: syz [ 309.461549][ T3888] usb 1-1: SerialNumber: syz [ 309.467892][ T9720] FAT-fs (loop3): Directory bread(block 64) failed [ 309.485771][ T9720] FAT-fs (loop3): Directory bread(block 65) failed [ 309.492475][ T9720] FAT-fs (loop3): Directory bread(block 66) failed [ 309.496576][ T9707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 309.540787][ T9720] FAT-fs (loop3): Directory bread(block 67) failed [ 309.583607][ T9720] FAT-fs (loop3): Directory bread(block 68) failed [ 309.603847][ T9720] FAT-fs (loop3): Directory bread(block 69) failed [ 309.620997][ T9720] FAT-fs (loop3): Directory bread(block 70) failed [ 309.641253][ T9720] FAT-fs (loop3): Directory bread(block 71) failed [ 309.662134][ T9720] FAT-fs (loop3): Directory bread(block 72) failed [ 309.682352][ T9720] FAT-fs (loop3): Directory bread(block 73) failed [ 309.798440][ T3888] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 309.843874][ T9726] Â: renamed from pim6reg1 [ 310.044738][ C1] usblp0: nonzero read bulk status received: -71 [ 310.051519][ T9707] usblp0: error -71 reading from printer [ 310.089308][ T5247] usb 1-1: USB disconnect, device number 21 [ 310.111978][ T5247] usblp0: removed [ 310.282532][ T9733] netem: incorrect gi model size [ 310.298995][ T9733] netem: change failed [ 310.402475][ T9714] loop1: detected capacity change from 0 to 32768 [ 310.489742][ T9714] XFS (loop1): Mounting V5 Filesystem [ 310.572522][ T9745] loop2: detected capacity change from 0 to 256 [ 310.590783][ T9745] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 310.656940][ T9714] XFS (loop1): Ending clean mount [ 310.673854][ T9714] XFS (loop1): Quotacheck needed: Please wait. [ 310.808899][ T9714] XFS (loop1): Quotacheck: Done. [ 310.958396][ T9752] rose0: tun_chr_ioctl cmd 1074025677 [ 310.974234][ T9752] rose0: linktype set to 825 [ 310.988812][ T9056] XFS (loop1): Unmounting Filesystem [ 311.002513][ T26] audit: type=1326 audit(1726241929.043:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18c17def9 code=0x7ffc0000 [ 311.113228][ T26] audit: type=1326 audit(1726241929.043:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18c17def9 code=0x7ffc0000 [ 311.152002][ T26] audit: type=1326 audit(1726241929.043:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc18c17def9 code=0x7ffc0000 [ 311.241264][ T26] audit: type=1326 audit(1726241929.043:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18c17def9 code=0x7ffc0000 [ 311.271449][ T9756] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 311.289711][ T9756] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 311.306733][ T26] audit: type=1326 audit(1726241929.043:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18c17def9 code=0x7ffc0000 [ 311.329775][ T26] audit: type=1326 audit(1726241929.043:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fc18c17def9 code=0x7ffc0000 [ 311.356499][ T9758] loop0: detected capacity change from 0 to 64 [ 311.364849][ T9756] Error parsing options; rc = [-22] [ 311.391019][ T26] audit: type=1326 audit(1726241929.043:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18c17def9 code=0x7ffc0000 [ 311.471707][ T26] audit: type=1326 audit(1726241929.043:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18c17def9 code=0x7ffc0000 [ 311.743156][ T9765] Â: renamed from pim6reg1 [ 311.895818][ T9770] loop1: detected capacity change from 0 to 128 [ 311.938887][ T9770] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 312.002368][ T9770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.381316][ T9815] netlink: 'syz.3.2111': attribute type 25 has an invalid length. [ 313.490086][ T9819] loop0: detected capacity change from 0 to 64 [ 313.564554][ T9819] hfs: request for non-existent node 131072 in B*Tree [ 313.603484][ T9819] hfs: request for non-existent node 131072 in B*Tree [ 313.853911][ T9832] loop2: detected capacity change from 0 to 1024 [ 314.334083][ T9848] can0: slcan on ttyS3. [ 314.442919][ T9849] can0 (unregistered): slcan off ttyS3. [ 314.665003][ T3878] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 314.672901][ T9859] loop3: detected capacity change from 0 to 128 [ 314.914966][ T3878] usb 1-1: Using ep0 maxpacket: 16 [ 315.040396][ T3878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.080572][ T3878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.120282][ T3878] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 315.147371][ T3878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.209440][ T3878] usb 1-1: config 0 descriptor?? [ 315.664555][ T9885] nr0: tun_chr_ioctl cmd 1074025677 [ 315.690517][ T9885] nr0: linktype set to 804 [ 315.719894][ T3878] savu 0003:1E7D:2D5A.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 315.923177][ T3878] usb 1-1: USB disconnect, device number 22 [ 316.036337][ T9877] loop4: detected capacity change from 0 to 32768 [ 316.055908][ T9877] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2133 (9877) [ 316.123997][ T9877] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 316.153092][ T9877] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 316.182810][ T9877] BTRFS info (device loop4): setting nodatacow, compression disabled [ 316.194912][ T9877] BTRFS info (device loop4): disabling tree log [ 316.201258][ T9877] BTRFS info (device loop4): turning on sync discard [ 316.253998][ T9877] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 316.279913][ T9877] BTRFS info (device loop4): force zstd compression, level 3 [ 316.317208][ T9877] BTRFS info (device loop4): using free space tree [ 316.626422][ T9877] BTRFS info (device loop4): enabling ssd optimizations [ 317.005432][ T3645] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.087202][ T26] audit: type=1326 audit(1726241935.133:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 317.122830][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.131311][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.176814][ T26] audit: type=1326 audit(1726241935.193:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 317.325030][ T26] audit: type=1326 audit(1726241935.213:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 317.425031][ T26] audit: type=1326 audit(1726241935.223:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 317.495065][ T26] audit: type=1326 audit(1726241935.223:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 317.574886][ T26] audit: type=1326 audit(1726241935.223:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 317.655084][ T26] audit: type=1326 audit(1726241935.223:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 317.747529][ T26] audit: type=1326 audit(1726241935.223:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 317.833014][ T26] audit: type=1326 audit(1726241935.223:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 317.932063][ T9901] loop2: detected capacity change from 0 to 32768 [ 317.954401][ T26] audit: type=1326 audit(1726241935.223:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f437def9 code=0x7ffc0000 [ 318.011872][ T9901] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 318.045115][ T9901] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 318.093835][ T9901] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 318.135346][ T14] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 318.142182][ T14] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 318.270949][ T14] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 128ms [ 318.298111][ T14] gfs2: fsid=syz:syz.0: jid=0: Done [ 318.303615][ T9901] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 318.375879][ T9901] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 318.385809][ T9939] loop0: detected capacity change from 0 to 32768 [ 318.414489][ T9901] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 318.414489][ T9901] inode = 12 2341 [ 318.414489][ T9901] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 318.460910][ T9946] loop3: detected capacity change from 0 to 32768 [ 318.474582][ T9962] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 318.505958][ T9939] XFS (loop0): Mounting V5 Filesystem [ 318.512561][ T9901] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 318.544110][ T9962] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 318.544110][ T9962] inode = 12 2341 [ 318.544110][ T9962] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 318.569742][ T9901] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:9901 [syz.2.2140] __gfs2_lookup+0xa0/0x270 [ 318.576007][ T9962] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 318.589010][ T9962] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:9901 [syz.2.2140] __gfs2_lookup+0xa0/0x270 [ 318.600434][ T9946] XFS (loop3): Mounting V5 Filesystem [ 318.621928][ T9962] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:9962 [syz.2.2140] __gfs2_lookup+0xa0/0x270 [ 318.631998][ T9962] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 318.643294][ T9962] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 318.651033][ T9962] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 318.663618][ T9962] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 318.670291][ T9939] XFS (loop0): Ending clean mount [ 318.682575][ T9962] gfs2: fsid=syz:syz.0: File system withdrawn [ 318.689467][ T9962] CPU: 0 PID: 9962 Comm: syz.2.2140 Not tainted 6.1.110-syzkaller #0 [ 318.697591][ T9962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 318.707702][ T9962] Call Trace: [ 318.710994][ T9962] [ 318.713939][ T9962] dump_stack_lvl+0x1e3/0x2cb [ 318.718650][ T9962] ? nf_tcp_handle_invalid+0x642/0x642 [ 318.724141][ T9962] ? panic+0x764/0x764 [ 318.728222][ T9962] ? kobject_uevent_env+0x54a/0x8c0 [ 318.733445][ T9962] gfs2_withdraw+0xfcb/0x1550 [ 318.738158][ T9962] ? gfs2_lm+0x230/0x230 [ 318.742413][ T9962] ? gfs2_dirent_scan+0x276/0x640 [ 318.747472][ T9962] ? panic+0x764/0x764 [ 318.751578][ T9962] ? gfs2_consist_inode_i+0xf1/0x110 [ 318.756895][ T9962] gfs2_dirent_scan+0x512/0x640 [ 318.761770][ T9962] ? gfs2_dirent_search+0x8c0/0x8c0 [ 318.766990][ T9962] gfs2_dirent_search+0x30a/0x8c0 [ 318.772056][ T9962] ? gfs2_dirent_search+0x8c0/0x8c0 [ 318.777282][ T9962] ? inode_dio_wait+0x2a9/0x340 [ 318.782165][ T9962] ? generic_permission+0x21c/0x4f0 [ 318.787384][ T9962] ? gfs2_dir_search+0x2f0/0x2f0 [ 318.792334][ T9962] ? gfs2_permission+0x401/0x4d0 [ 318.797297][ T9962] gfs2_dir_search+0xae/0x2f0 [ 318.801990][ T9962] ? do_filldir_main+0x520/0x520 [ 318.806940][ T9962] ? inode_go_held+0xe6/0x1f0 [ 318.811632][ T9962] ? gfs2_glock_wait+0x216/0x2a0 [ 318.816591][ T9962] gfs2_lookupi+0x45f/0x5e0 [ 318.821120][ T9962] ? gfs2_lookup_simple+0x170/0x170 [ 318.826773][ T9962] ? __gfs2_lookup+0xa0/0x270 [ 318.831482][ T9962] ? d_alloc_parallel+0x31a/0x1590 [ 318.836630][ T9962] __gfs2_lookup+0xa0/0x270 [ 318.841176][ T9962] ? lockdep_softirqs_off+0x420/0x420 [ 318.846576][ T9962] ? gfs2_atomic_open+0x220/0x220 [ 318.851628][ T9962] ? __init_waitqueue_head+0xaa/0x140 [ 318.857026][ T9962] __lookup_slow+0x27e/0x3d0 [ 318.862066][ T9962] ? lookup_one_len+0x2d0/0x2d0 [ 318.867042][ T9962] lookup_slow+0x53/0x70 [ 318.871301][ T9962] walk_component+0x2d0/0x400 [ 318.876006][ T9962] path_lookupat+0x16f/0x450 [ 318.880623][ T9962] filename_lookup+0x251/0x600 [ 318.885407][ T9962] ? hashlen_string+0x110/0x110 [ 318.890317][ T9962] ? strncpy_from_user+0x1f9/0x360 [ 318.895933][ T9962] ? getname_flags+0x1f9/0x4f0 [ 318.900725][ T9962] user_path_at_empty+0x3e/0x60 [ 318.905614][ T9962] __se_sys_utime+0x144/0x2d0 [ 318.910350][ T9962] ? __x64_sys_utime+0x60/0x60 [ 318.915223][ T9962] ? syscall_enter_from_user_mode+0x2e/0x230 [ 318.921217][ T9962] ? lockdep_hardirqs_on+0x94/0x130 [ 318.926434][ T9962] ? syscall_enter_from_user_mode+0x2e/0x230 [ 318.932439][ T9962] do_syscall_64+0x3b/0xb0 [ 318.936960][ T9962] ? clear_bhb_loop+0x45/0xa0 [ 318.941655][ T9962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.947647][ T9962] RIP: 0033:0x7faadf57def9 [ 318.952069][ T9962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.971681][ T9962] RSP: 002b:00007faae0359038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 318.980113][ T9962] RAX: ffffffffffffffda RBX: 00007faadf736058 RCX: 00007faadf57def9 [ 318.988094][ T9962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 318.996076][ T9962] RBP: 00007faadf5f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 319.004056][ T9962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.012031][ T9962] R13: 0000000000000001 R14: 00007faadf736058 R15: 00007ffd61431128 [ 319.020285][ T9962] [ 319.047888][ T9980] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 319.057370][ T9946] XFS (loop3): Ending clean mount [ 319.075219][ T9980] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 319.114366][ T9980] Error parsing options; rc = [-22] [ 319.123715][ T9901] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 319.168701][ T3647] XFS (loop0): Unmounting Filesystem [ 319.263855][ T3637] XFS (loop3): Unmounting Filesystem [ 319.884011][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2174'. [ 321.010113][ T14] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 321.054972][T10004] loop2: detected capacity change from 0 to 32768 [ 321.076518][T10004] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2168 (10004) [ 321.111294][T10004] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 321.142074][T10004] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 321.186234][T10004] BTRFS info (device loop2): using free space tree [ 321.268339][T10021] loop3: detected capacity change from 0 to 128 [ 321.291169][T10021] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 321.391708][T10021] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 321.409356][ T14] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.434872][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.487119][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.520083][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.564784][T10004] BTRFS info (device loop2): enabling ssd optimizations [ 321.622804][T10011] loop0: detected capacity change from 0 to 32768 [ 321.655069][ T14] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.664267][ T14] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.674098][T10011] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 321.705590][T10011] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 321.753035][ T14] usb 2-1: Product: syz [ 321.780531][ T14] usb 2-1: Manufacturer: syz [ 321.810285][T10011] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 321.839762][ T5247] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 321.842446][ T14] cdc_wdm 2-1:1.0: skipping garbage [ 321.846904][ T5247] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 321.869139][ T14] cdc_wdm 2-1:1.0: skipping garbage [ 321.897203][ T14] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 321.903555][ T14] cdc_wdm 2-1:1.0: Unknown control protocol [ 321.913111][ T3646] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 322.060936][ T5247] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 214ms [ 322.099308][T10046] loop3: detected capacity change from 0 to 2048 [ 322.108269][ T5247] gfs2: fsid=syz:syz.0: jid=0: Done [ 322.113583][T10011] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 322.149425][ T4198] usb 2-1: USB disconnect, device number 21 [ 322.155618][T10011] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 322.164765][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 322.171925][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 322.177408][T10011] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 322.177408][T10011] inode = 12 2341 [ 322.177408][T10011] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 322.178051][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 322.264936][T10011] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 322.303677][T10011] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:10011 [syz.0.2172] __gfs2_lookup+0xa0/0x270 [ 322.315976][T10046] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 322.383151][T10011] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 322.386819][T10054] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 322.428688][T10011] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 322.500900][T10011] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 322.606119][T10054] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 322.625045][T10011] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 322.640327][T10011] gfs2: fsid=syz:syz.0: File system withdrawn [ 322.666182][T10011] CPU: 1 PID: 10011 Comm: syz.0.2172 Not tainted 6.1.110-syzkaller #0 [ 322.670393][T10054] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:10011 [syz.0.2172] __gfs2_lookup+0xa0/0x270 [ 322.674388][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 322.674408][T10011] Call Trace: [ 322.674420][T10011] [ 322.674433][T10011] dump_stack_lvl+0x1e3/0x2cb [ 322.705177][T10011] ? nf_tcp_handle_invalid+0x642/0x642 [ 322.710711][T10011] ? panic+0x764/0x764 [ 322.714827][T10011] ? kobject_uevent_env+0x54a/0x8c0 [ 322.720070][T10011] gfs2_withdraw+0xfcb/0x1550 [ 322.724840][T10011] ? gfs2_lm+0x230/0x230 [ 322.729230][T10011] ? gfs2_dirent_scan+0x276/0x640 [ 322.734301][T10011] ? panic+0x764/0x764 [ 322.738432][T10011] ? gfs2_consist_inode_i+0xf1/0x110 [ 322.743791][T10011] gfs2_dirent_scan+0x512/0x640 [ 322.748710][T10011] ? gfs2_dirent_search+0x8c0/0x8c0 [ 322.754044][T10011] gfs2_dirent_search+0x30a/0x8c0 [ 322.759211][T10011] ? gfs2_dirent_search+0x8c0/0x8c0 [ 322.764532][T10011] ? inode_dio_wait+0x2a9/0x340 [ 322.769413][T10011] ? generic_permission+0x21c/0x4f0 [ 322.774647][T10011] ? gfs2_dir_search+0x2f0/0x2f0 [ 322.779730][T10011] ? gfs2_permission+0x401/0x4d0 [ 322.784703][T10011] gfs2_dir_search+0xae/0x2f0 [ 322.789424][T10011] ? do_filldir_main+0x520/0x520 [ 322.794390][T10011] ? inode_go_held+0xe6/0x1f0 [ 322.799092][T10011] ? gfs2_glock_wait+0x216/0x2a0 [ 322.804156][T10011] gfs2_lookupi+0x45f/0x5e0 [ 322.808709][T10011] ? gfs2_lookup_simple+0x170/0x170 [ 322.813939][T10011] ? __gfs2_lookup+0xa0/0x270 [ 322.818640][T10011] ? d_alloc_parallel+0x31a/0x1590 [ 322.823945][T10011] __gfs2_lookup+0xa0/0x270 [ 322.828484][T10011] ? lockdep_softirqs_off+0x420/0x420 [ 322.833918][T10011] ? gfs2_atomic_open+0x220/0x220 [ 322.839065][T10011] ? __init_waitqueue_head+0xaa/0x140 [ 322.844483][T10011] __lookup_slow+0x27e/0x3d0 [ 322.849193][T10011] ? lookup_one_len+0x2d0/0x2d0 [ 322.854097][T10011] lookup_slow+0x53/0x70 [ 322.858359][T10011] walk_component+0x2d0/0x400 [ 322.863066][T10011] path_lookupat+0x16f/0x450 [ 322.867778][T10011] filename_lookup+0x251/0x600 [ 322.872576][T10011] ? hashlen_string+0x110/0x110 [ 322.877482][T10011] ? strncpy_from_user+0x1f9/0x360 [ 322.882738][T10011] ? getname_flags+0x1f9/0x4f0 [ 322.887528][T10011] user_path_at_empty+0x3e/0x60 [ 322.892420][T10011] do_sys_truncate+0xa3/0x190 [ 322.897124][T10011] ? break_lease+0xd0/0xd0 [ 322.901563][T10011] ? syscall_enter_from_user_mode+0x2e/0x230 [ 322.907569][T10011] ? lockdep_hardirqs_on+0x94/0x130 [ 322.912837][T10011] ? syscall_enter_from_user_mode+0x2e/0x230 [ 322.918896][T10011] do_syscall_64+0x3b/0xb0 [ 322.923436][T10011] ? clear_bhb_loop+0x45/0xa0 [ 322.928152][T10011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.934086][T10011] RIP: 0033:0x7fd95f37def9 [ 322.938515][T10011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.958220][T10011] RSP: 002b:00007fd9600a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 322.966664][T10011] RAX: ffffffffffffffda RBX: 00007fd95f535f80 RCX: 00007fd95f37def9 [ 322.974691][T10011] RDX: 0000000000000000 RSI: 1000000000005e02 RDI: 0000000020000280 [ 322.982676][T10011] RBP: 00007fd95f3f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 322.990666][T10011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.998673][T10011] R13: 0000000000000000 R14: 00007fd95f535f80 R15: 00007fff41c467c8 [ 323.006776][T10011] [ 323.042890][T10054] general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] PREEMPT SMP KASAN [ 323.054673][T10054] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 323.063208][T10054] CPU: 0 PID: 10054 Comm: syz.0.2172 Not tainted 6.1.110-syzkaller #0 [ 323.071398][T10054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 323.081498][T10054] RIP: 0010:gfs2_dump_glock+0xe00/0x1b00 [ 323.087194][T10054] Code: c6 05 64 1a cf 0a 01 48 c7 c7 e0 b5 50 8b be 19 03 00 00 48 c7 c2 20 b6 50 8b e8 bb 82 b4 fd 4d 8d 77 20 4d 89 f4 49 c1 ec 03 <43> 0f b6 04 2c 84 c0 0f 85 0e 07 00 00 41 0f b7 1e 89 de 81 e6 00 [ 323.105920][ T3637] EXT4-fs (loop3): unmounting filesystem. [ 323.106819][T10054] RSP: 0018:ffffc9000c447220 EFLAGS: 00010203 [ 323.106846][T10054] RAX: ffffffff83b65d6d RBX: 0000000000000001 RCX: 0000000000040000 [ 323.127258][T10054] RDX: ffffc9000aca1000 RSI: 0000000000023565 RDI: 0000000000023566 [ 323.135265][T10054] RBP: ffffc9000c447510 R08: ffffffff83b65d56 R09: fffffbfff223b845 [ 323.143269][T10054] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000000004c [ 323.151257][T10054] R13: dffffc0000000000 R14: 0000000000000266 R15: 0000000000000246 [ 323.159257][T10054] FS: 00007fd95f1ff6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 323.168341][T10054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.174935][T10054] CR2: 0000001b2f209ff8 CR3: 000000002b3af000 CR4: 00000000003506f0 [ 323.182917][T10054] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 323.190917][T10054] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 323.198910][T10054] Call Trace: [ 323.202192][T10054] [ 323.205125][T10054] ? __die_body+0x5e/0xa0 [ 323.209468][T10054] ? die_addr+0x95/0xc0 [ 323.213634][T10054] ? exc_general_protection+0x3ae/0x590 [ 323.219320][T10054] ? asm_exc_general_protection+0x22/0x30 [ 323.225075][T10054] ? gfs2_dump_glock+0xd86/0x1b00 [ 323.230121][T10054] ? gfs2_dump_glock+0xd9d/0x1b00 [ 323.235188][T10054] ? gfs2_dump_glock+0xe00/0x1b00 [ 323.240318][T10054] ? gfs2_dump_glock+0xd55/0x1b00 [ 323.245361][T10054] ? gfs2_glock_free+0x1010/0x1010 [ 323.250487][T10054] ? irq_work_queue+0xc6/0x150 [ 323.255355][T10054] ? __wake_up_klogd+0xd5/0x100 [ 323.260253][T10054] ? vprintk_emit+0x622/0x740 [ 323.264958][T10054] ? gfs2_dirent_scan+0x276/0x640 [ 323.269989][T10054] ? panic+0x764/0x764 [ 323.274071][T10054] gfs2_consist_inode_i+0xf1/0x110 [ 323.279285][T10054] gfs2_dirent_scan+0x512/0x640 [ 323.284174][T10054] ? gfs2_dirent_search+0x8c0/0x8c0 [ 323.289425][T10054] gfs2_dirent_search+0x30a/0x8c0 [ 323.294480][T10054] ? gfs2_dirent_search+0x8c0/0x8c0 [ 323.299818][T10054] ? inode_dio_wait+0x2a9/0x340 [ 323.304689][T10054] ? generic_permission+0x21c/0x4f0 [ 323.309895][T10054] ? gfs2_dir_search+0x2f0/0x2f0 [ 323.315046][T10054] ? gfs2_permission+0x401/0x4d0 [ 323.320187][T10054] gfs2_dir_search+0xae/0x2f0 [ 323.324881][T10054] ? do_filldir_main+0x520/0x520 [ 323.329914][T10054] ? inode_go_held+0xe6/0x1f0 [ 323.334682][T10054] ? gfs2_glock_wait+0x216/0x2a0 [ 323.339631][T10054] gfs2_lookupi+0x45f/0x5e0 [ 323.344242][T10054] ? gfs2_lookup_simple+0x170/0x170 [ 323.349651][T10054] ? __gfs2_lookup+0xa0/0x270 [ 323.354378][T10054] ? d_alloc_parallel+0x31a/0x1590 [ 323.359520][T10054] __gfs2_lookup+0xa0/0x270 [ 323.364051][T10054] ? lockdep_softirqs_off+0x420/0x420 [ 323.369451][T10054] ? gfs2_atomic_open+0x220/0x220 [ 323.374519][T10054] ? __init_waitqueue_head+0xaa/0x140 [ 323.379917][T10054] __lookup_slow+0x27e/0x3d0 [ 323.384526][T10054] ? lookup_one_len+0x2d0/0x2d0 [ 323.389414][T10054] lookup_slow+0x53/0x70 [ 323.393681][T10054] walk_component+0x2d0/0x400 [ 323.398375][T10054] path_lookupat+0x16f/0x450 [ 323.402980][T10054] filename_lookup+0x251/0x600 [ 323.407753][T10054] ? hashlen_string+0x110/0x110 [ 323.412620][T10054] ? strncpy_from_user+0x1f9/0x360 [ 323.417746][T10054] ? getname_flags+0x1f9/0x4f0 [ 323.422516][T10054] user_path_at_empty+0x3e/0x60 [ 323.427400][T10054] __se_sys_utime+0x144/0x2d0 [ 323.432118][T10054] ? __x64_sys_utime+0x60/0x60 [ 323.436917][T10054] ? syscall_enter_from_user_mode+0x2e/0x230 [ 323.443213][T10054] ? lockdep_hardirqs_on+0x94/0x130 [ 323.448445][T10054] ? syscall_enter_from_user_mode+0x2e/0x230 [ 323.454444][T10054] do_syscall_64+0x3b/0xb0 [ 323.458880][T10054] ? clear_bhb_loop+0x45/0xa0 [ 323.464197][T10054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.470333][T10054] RIP: 0033:0x7fd95f37def9 [ 323.474771][T10054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.494398][T10054] RSP: 002b:00007fd95f1ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 323.502935][T10054] RAX: ffffffffffffffda RBX: 00007fd95f536058 RCX: 00007fd95f37def9 [ 323.511162][T10054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 323.519248][T10054] RBP: 00007fd95f3f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 323.527450][T10054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.535425][T10054] R13: 0000000000000001 R14: 00007fd95f536058 R15: 00007fff41c467c8 [ 323.543444][T10054] [ 323.546484][T10054] Modules linked in: [ 323.678838][T10054] ---[ end trace 0000000000000000 ]--- [ 323.689926][T10054] RIP: 0010:gfs2_dump_glock+0xe00/0x1b00 [ 323.700657][T10054] Code: c6 05 64 1a cf 0a 01 48 c7 c7 e0 b5 50 8b be 19 03 00 00 48 c7 c2 20 b6 50 8b e8 bb 82 b4 fd 4d 8d 77 20 4d 89 f4 49 c1 ec 03 <43> 0f b6 04 2c 84 c0 0f 85 0e 07 00 00 41 0f b7 1e 89 de 81 e6 00 [ 323.720618][T10054] RSP: 0018:ffffc9000c447220 EFLAGS: 00010203 [ 323.724168][T10052] loop4: detected capacity change from 0 to 32768 [ 323.727166][T10054] RAX: ffffffff83b65d6d RBX: 0000000000000001 RCX: 0000000000040000 [ 323.741791][T10054] RDX: ffffc9000aca1000 RSI: 0000000000023565 RDI: 0000000000023566 [ 323.750191][T10054] RBP: ffffc9000c447510 R08: ffffffff83b65d56 R09: fffffbfff223b845 [ 323.759201][T10052] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2183 (10052) [ 323.759248][T10054] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000000004c [ 323.782259][T10054] R13: dffffc0000000000 R14: 0000000000000266 R15: 0000000000000246 [ 323.790913][T10054] FS: 00007fd95f1ff6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 323.797157][T10052] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 323.801852][T10054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.817247][T10054] CR2: 00007f74f45052d8 CR3: 000000002b3af000 CR4: 00000000003506e0 [ 323.825828][T10054] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 323.830491][T10052] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 323.834013][T10054] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 323.852257][T10054] Kernel panic - not syncing: Fatal exception [ 323.853562][T10052] BTRFS info (device loop4): using free space tree [ 323.865522][T10054] Kernel Offset: disabled [ 323.869940][T10054] Rebooting in 86400 seconds..