last executing test programs: 12.418594524s ago: executing program 1 (id=294): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'ip6gre0\x00', 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000008c0)="308010", 0x10, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x141f029329606bb5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x94697ac813187b86}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x14, 0x0, 0xf29}, 0x14}}, 0x20048080) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x1000}, 0x4) 11.440050122s ago: executing program 1 (id=299): syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x208c1b, &(0x7f0000000080)=ANY=[@ANYBLOB="003475e0ef766a5e6e5b87006e4cf5d61377de3788133dfa2be9262d3b0e"], 0x1, 0x12752, &(0x7f0000000980)="$eJzs/XkYqHO9L36ve17KPCRCKSQlIqEkYyWRIRlSCYWoCGUoQ0rSQCpjKpQpSZISocxCRKQyRgoRSVR4rn32e519P+fcz75P+zz7ue7r+b1ef+zPvW2+e/1+1z7X+/1eS2vNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBkzZhTPWWjXfzu9v7T9v59uthkzul3+/Xvuf/svs/f+nvLfz8yF/j88m793tiV3+eB2O7/rAx/8t/Nf+vHtvvc+r959733+S//s/4mXPLLxaj9Z6C3POep1Z5y16FU/Xue/7X8RAAAAAAAAAPw3yq//l72/dOX/8rd0M2bMnPN/+WvzzZgxc/YZM8rq6mu/87P/m//9m2/G/6P99Zn/m//zAQAA4P9Q9n/d+yuH9//HufPNmHHgAf/bX/+ff2Vm+2//dbuPPvLY0O15bv7+5/7HXyr/t4//RvPnLpD7nNwF/99/fAAAAPD/X7L/m95f6W/2Wf/5/oVzn5e7SO6iuYvlPj/3BbmL574w90W5S+QumbtU7otzl859Se4yuS/NfVnusrkvz10ud/ncV+SukLti7itzV8p9Ve7Kuavkrpr76tzX5K6W+9rc1XNfl7tG7pq5a+WunTvr9xlYN/f1uW/IfWPuerlvyl0/9825G+RumPuW3I1yN87dJHfT3Lfmbpb7ttzNc7fI3TJ3q9y3526d+47cd+a+K3eb3Hfnbpu7XW5+j4kZ78l9b+4OuTvm7pT7vtxZv4lEfl+KGe/P/UDuB3N3zd0t90O5u+fukbtn7odzP5K7V+7eubN+A4p9cz+a+7Hc/XL3z531M2MH5n4896DcT+R+Mvfg3E/lHpL76dxDcz+T+9ncz+V+Pvew3Fk/h/eF3CNyv5j7pdwv5x6Ze1Tu0bnH5B6be1zuV3KPz/1q7tdyv557Qu6JuSflfiP3m7kn556Se2ruabmn534r94zcb+eemfud3LNyv5t7du73cs/J/X7uubk/yP1h7nm5P8o9P/eC3B/nXph7Ue7FuT/J/WnuJbmX5l6We3nuFbmz/h2sq3Kvzp3171pdk3tt7nW5P8+9PveG3F/k3ph7U+4vc2/OvSX3V7m35v469ze5v829Lff23Dty78y9K/fu3N/l3pN7b+7vc+/L/UPuH3Pvz30g98HcP+U+lPtw7p9zH8l9NPcvubMy7q+5j+f+LfeJ3Cdz/577j9x/5j6V+3Ru/mWmWT9tXuSjyM9tF1Vufr69SO4WbW6XOzN3ttxn5T47N7+/TjFHbv79vGKu3Llz58mdN3e+3Pw8eJGfBy/y8+BFfh68yM+DF8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyf9av4RXJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/Z23cIvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5P+sX8ouk/9l/kKZ/C+T/2Xyv0z+l8n/MvlfJv/L5H+Z/C+T/2Xyv0z+l8n/MvlfJv/L5H+Z/C+T/+UC//n+L9MLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIy2VemF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekHif0aVXlClF1T5H1TpBVXyuEovqNILqvSCKr2gSi+o0guq9IIqvaBKL6jSC6r0giq9oEovqNILqvSCKj8vUCX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5X1347/8Pvkr+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/Kvlf3Z9AjCr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyf9a/Z18n/OvlfJ//r/A118r9O/tfJ/zr/n1sn/+vkf538r5P/dfK/Tv7Xyf86+V8n/+t5//P9X6cX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnZ8XqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaDOzwvU+XmBOr2gTi+o0wvqh/89eOv0gjq9oE4vqNML6mRinV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFs+K3SS9o0gua9IImvaDJ39ikFzTpBU16QZNe0KQXNOkFTXpBk17QpBc06QVNekGTXtDk5wWa5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H/zb/n/9DMzmuR/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xv8vMCTfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/ifMZbfK/Tf63yf82+d8m/9v8A23yv03+t8n/NvnfJv/b5H+b/G+T/+1c//n+b9ML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jz8wJtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16Qbv+Fv/+r/ymF7TpBW16QZte0KYXtOkFbXpBm17Qphe0yco2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wsS7zO69IIuvaBLL+jSC7rkd5de0OUf7NILuvSCLr2gSy/o0gu69IIuvaDLzwt0yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/3Yb//n9Q3b/l//7ffHCB5H+X/O+S/92m/8uPM/nfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d7P+rOrkf5f875L/XfK/S/53yf8u+T/rz7fukv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r/72r//R/C65H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/7vb/2ML/479P/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y4/L9Al/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfJ/1r/dMDP5P3PWn7uf/J+Z/J+Z/J+Z/583M/k/Mw/MTP7PTP7PTP7PnP0/3/8z0wtm/f7/M9MLZqYXzEwvmJleMDO9YGZ6wcz0gpnpBTPTC2b6ffYAAADg/4ey/3v/MYpZ/xm9Gf/j1/cO+I/fzGjGKbfNfe8Sq++0wsAzs36fwPn+O3+sAAAAwH/NyP7/cm//F4s+79HnrHP4a5cceGbWnw9g/wMAAMAEjez/I3v7v5xt8RvXOnrj335q4JlZfy6g/Q8AAAATNLL/j+rt/+p7973iu5+85svPHngmv4+P/Q8AAABTNLL/j+7t//qKdW/fY8s59jht4Jn8/r32PwAAAEzRyP4/prf/m48dtNqnVj3pBRcOPJM/t8f+BwAAgCka2f/H9vZ/u9N5i95477Y/WWTgmfx5vfY/AAAATNHI/j+ut/+7G/d/5gXzL3DpnweemfXP/J/t/5n/Fz9gAAAA4F82sv+/0tv/M3f78fw/uvKmJTcZeGbxXL/+DwAAABM0sv+P7+3/2X627+PrnbrPbusOPPPCXPsfAAAAJmhk/3+1t/+fdceatyy6x/mH3zfwzIty7X8AAACYoJH9/7Xe/n/2ez610kM7LXXrzgPPLJFr/wMAAMAEjez/r/f2/+xL37LbGd+/b5WrBp5ZMtf+BwAAgAka2f8n9Pb/HEfM88V3/XK9XW4feGapXPsfAAAAJmhk/5/Y2/9zHvzSs5892yGf++jAMy/Otf8BAABggkb2/0m9/T/Xan/a6ImHdn/m8oFnls61/wEAAGCCRvb/N3r7f+6nf/6yO1c4e7HtB555Sa79DwAAABM0sv+/2dv/86wz23XzbbLIm3YfeGaZXPsfAAAAJmhk/5/c2//zbrTiw2/4/G3fumHgmZfm2v8AAAAwQSP7/5Te/p/v/r/Occ4X17j7HQPPvGzW3/Pf+oMFAAAA/ktG9v+pvf0//1c3v3u3txxYPTPwzLK59j8AAABM0Mj+P623/xdY4gszPr7ccpv/YeCZl+fa/wAAADBBI/v/9N7+f87y31r85r88dO6bBp5ZLtf+BwAAgAka2f/f6u3/BQ99/yVL3rvSpe8feGb5XPsfAAAAJmhk/5/R2//PXfo7S1+06mNL/vw//sf/8+sVufY/AAAATNDI/v92b/8vdMROV795y612+9XAMyvk2v8AAAAwQSP7/8ze/l/44E0feO4njzt8n4FnVsy1/wEAAGCCRvb/d3r7/3mrfXm2B45ub3184JlX5tr/AAAAMEEj+/+s3v5f5F3v3X/Tda5Y5a0Dz6yUa/8DAADABI3s/+/29v+i9379+K8vsdMuaw8886pc+x8AAAAmaGT/n93b/4s9cuwFjz1x6ufuGnhm5Vz7HwAAACZoZP9/r7f/n7/+1u/snr/pM28feGaVXPsfAAAAJmhk/5/T2/8veONFczzvkiMWe3LgmVVz7X8AAACYoJH9//3e/l/80b0f/sNJq73poYFnXp1r/wMAAMAEjez/c3v7/4W/X/u6C/Z/6ltvHnjmNbn2PwAAAEzQyP7/QW//v2jrT77sLdtuc/fFA8+slmv/AwAAwASN7P8f9vb/Eku/+JJDLzyh2nbgmdfm2v8AAAAwQSP7/7ze/l/yiLsW3/v2uTbfc+CZ1XPtfwAAAJigkf3/o97+X+rg38xYtrzu3FsGnnldrv0PAAAAEzSy/8/v7f8Xr7bo3bevOscyWw88s0au/Q8AAAATNLL/L+jt/6W/esds69x7zc+eHnhmzVz7HwAAACZoZP//uLf/X7LEQg/84JPbfu2PA8+slWv/AwAAwASN7P8Le/t/meVfdPXvtjxpv/UHnlk71/4HAACACRrZ/xf19v9LD7136bnXWX3lKwaeWSfX/gcAAIAJGtn/F/f2/8uO/ctsJx/9zM3vGXhm3Vz7HwAAACZoZP//pLf/l33BSg9s9sTGH//QwDOvz7X/AQAAYIJG9v9Pe/v/5a+c6+piicO3u37gmTfk2v8AAAAwQSP7/5Le/l/u81ct/eglO8/zvoFn3phr/wMAAMAEjez/S3v7f/k3P/DW+59/+p+vHHhmvVz7HwAAACZoZP9f1tv/r3h82XMX2r/+xh0Dz7wp1/4HAACACRrZ/5f39v8Kdy941AYnXbbuxwaeWT/X/gcAAIAJGtn/V/T2/4pb3LDnhRduMfsjA8+8Odf+BwAAgAka2f9X9vb/K1+2+7H7bnvMnzYdeGaDXPsfAAAAJmhk/1/V2/8rHfn9vQ4pVz5vnYFnNsy1/wEAAGCCRvb/1b39/6qPH7blb29/fIvfDzzzllz7HwAAACZoZP//rLf/V15lvfOXu3LZZX4y8MxGufY/AAAATNDI/r+mt/9XOfYzG31//gd/tt3AMxvn2v8AAAAwQSP7/9re/l/1BRuc/fo91vraHgPPbJJr/wMAAMAEjez/63r7/9Wv/MgX5z31oP1uHnhm1p8JYP8DAADABI3s/5/39v9rPv/d3e76/mIrbzXwzFtz7X8AAACYoJH9f31v/6/2p7W6LXe64+YnBp7ZLNf+BwAAgAka2f839Pb/azf/xL2nz7bbxx8eeOZtufY/AAAATNDI/v9Fb/+vvvaFlz79y7O222Dgmc1z7X8AAACYoJH9f2Nv/7/uyb2WmmOF9ef528AzW+Ta/wAAADBBI/v/pt7+X+PEHZfd4qFD/7zZwDNb5tr/AAAAMEEj+/+Xvf2/5nPP/Pm3Pr/EN9YaeGbWnwlg/wMAAMAEjez/m3v7f63Zv/TQM5vcu+6dA8+8Pdf+BwAAgAka2f+39Pb/2uduMvvsb9lr9l0Gntk61/4HAACACRrZ/7/q7f91fvrn3131xfP+dN3AM+/Itf8BAABggkb2/629/b/uXq8qXv2XBc+7deCZd+ba/wAAADBBI/v/1739//pdZn/BB5a7eYt9B555V679DwAAABM0sv9/09v/b7j56p8ef/sJ7zhq4Jltcu1/AAAAmKCR/f/b3v5/4x4zX9KV21yw0sAz7861/wEAAGCCRvb/bb39v9511/3ssW2v+8MLB57ZNtf+BwAAgAka2f+39/b/m3792P1fv3Cu2Q4YeGa7XPsfAAAAJmhk/9/R2//rb7PCzE1POmKN2Qee2T7X/gcAAIAJGtn/d/b2/5uX3fbN8+y/6QlnDjzznlz7HwAAACZoZP/f1dv/Gxz1jTPvfv5Tfz1v4Jn35tr/AAAAMEEj+//u3v7f8KCvHnbuJavN/7yBZ3bItf8BAABggkb2/+96+/8tq27x/nWXuOK9Jww8s2Ou/Q8AAAATNLL/7+nt/43+sc8873ii/VQ18MxOufY/AAAATNDI/r+3t/83XvOCv5x59Kk3zj/wzPty7X8AAACYoJH9//sDZsw267/ZZLODf/H3dXZa4dyBZ3bOtf8BAABggkb2/329X//f9OE1lp9ty8f2ffXAM7vk2v8AAAAwQSP7/w+9/f/W4+6+45pPrnTs0QPPvD/X/gcAAIAJGtn/f+zt/80WX+K1r7v3uOsOG3jmA7n2PwAAAEzQyP6/v7f/37bSYovsvOpWyy078MwHc+1/AAAAmKCR/f9Ab/9vftivnj56uQPf8ayBZ3bNtf8BAABggkb2/4O9/b/FsgsvUP5ljQtOHXhmt1z7HwAAACZoZP//qbf/tzzqt3975IsP/eGigWc+lGv/AwAAwASN7P+Hevt/q4N+f/M337LcbIsOPLN7rv0PAAAAEzSy/x/u7f+3r/qCV75tk7PX+MLAM3vk2v8AAAAwQSP7/8+9/b/1Vjeu9dDndz9hxYFn9sy1/wEAAGCCRvb/I739/447F/j6og/d9tclBp75cK79DwAAABM0sv8f7e3/dz623IHrrbDI/AcPPPORXPsfAAAAJmhk//+lt//fteH1c82Ycd97Vxt4Zq9c+x8AAAAmaGT/P9bb/9ts8KzlT55tqU99deCZvXPtfwAAAJigkf3/197+f/ffrvnFZjsdcuOnB57ZJ9f+BwAAgAka2f+P9/b/tr97/C/F99db4aUDz+yba/8DAADABI3s/7/19v92Wy4/z6On3rTvKQPPfDTX/gcAAIAJGtn/T/T2//bLHvH0ynsscGwz8MzHcu1/AAAAmKCR/f9kb/+/56i3LnLp/OdfN+/AM/vl2v8AAAAwQSP7/++9/f/egz7w2sOv3Ge5swae2T/X/gcAAIAJGtn//+jt/x1WPfWO7bZb7W/1wDMH5Nr/AAAAMEEj+/+fvf2/43Hve+WTFz31nJMHnjkw1/4HAACACRrZ/0/19v9Oi59x87Pu2HSt7w488/Fc+x8AAAAmaGT/P93b/+9b6ci/vbM64qShjX9Qrv0PAAAAEzSy/5/p7f+dD9togW8vNtf9Xxt45hO59j8AAABM0H++/7sZvf2/y9VHrzfvT6979msHnvlkrv0PAAAAEzSy/4ve/n//ru/81l0nbvOuZQaeOTjX/gcAAIAJGtn/ZW//f2D77Q/9/n4nXHjIwDOfyrX/AQAAYIJG9n/V2/8fvP3EHV9/zFbXrDDwzKyfE7D/AQAAYIJG9n/d2/+7LnLA/O9c97hlDx945tO59j8AAABM0Mj+b3r7f7eTX//4t5dcae9PDTxzaK79DwAAABM0sv/b3v7/0NkfveXJJx87esmBZz6Ta/8DAADABI3s/663/3ef+aOVnnXPTjecNvDMZ3PtfwAAAJigkf0/s7f/9/joc3/981VOXf7ZA898Ltf+BwAAgAka2f+z9fb/npffvspqW7TbLzLwzOdz7X8AAACYoJH9/6ze/v/wL+5ZaMdPXPHJCweeOSzX/gcAAIAJGtn/z+7t/4/s+MJ/HHfEIn87ZuCZWX8moP0PAAAAEzSy/2fv7f+9rr5z7mLD257zmoFnvpBr/wMAAMAEjez/OXr7f+9dl3r00ZfvvtbLBp45Itf+BwAAgAka2f9z9vb/PtsvcuPJj5590ucHnvlirv0PAAAAEzSy/+fq7f99b//1KzZ7eLn7y4FnvpRr/wMAAMAEjez/uXv7/6M/fskb/rTiQ8/++sAzX861/wEAAGCCRvb/PL39/7Hu4W8utuka7/rBwDNH5tr/AAAAMEEj+3/e3v7fb75ffuJNhx144QIDzxyVa/8DAADABI3s//l6+3//0+Z773k77nPNdwaeOTrX/gcAAIAJGtn/8/f2/wFr33vbfuecv+wcA88ck2v/AwAAwASN7P8Fevv/wCdf9LrP3bTA3gsPPHNsrv0PAAAAEzSy/5/T2/8f/9NCi90686ajfzjwzHG5vf3f/vf8gAEAAIB/2cj+X7C3/w/a/I5/LrPAeje8cuCZr+T69X8AAACYoJH9/9ze/v/Eiz4238NXHbL8kQPPHJ9r/wMAAMAEjez/hXr7/5PHnP/IIqcttf2BA898Nfd/2//P+f/2DxgAAAD4l43s/4V7+//gzx14/Rv3vO+TLxp45mu5fv0fAAAAJmhk/z+vt/8/tfIbVjj/E4cf8POBZ76ea/8DAADABI3s/0V6+/+QL3/y1sW32Pjd7x945oRc+x8AAAAmaGT/L9rb/59ebu3X/GKVZ1baZ+CZE3PtfwAAAJigkf2/WG//H/qavRc++J7Vb/rVwDMn5dr/AAAAMEEj+//5vf3/mQMvemLPJ086/q3/2yP7z/hGvux/AAAAmKCR/f+C3v7/7DUPX7Dyktt+9PGBZ76Za/8DAADABI3s/8V7+/9zH37JOy9d95ql7xp45uRc+x8AAAAmaGT/v7C3/z+/7Xz7H37MHFetPfDMKbn2PwAAAEzQyP5/UW//H/arXx6/3X6Pn//kwDOn5tr/AAAAMEEj+3+J3v4/fOG/3bXviStv9faBZ07Ltf8BAABggkb2/5K9/f+Fr7+iOuSnx8z55oFnTs+1/wEAAGCCRvb/Ur39f8Q5z37hbxfb4uGHBp75Vq79DwAAABM0sv9f3Nv/X5zz2ouXqy47eduBZ87Itf8BAABggkb2/9K9/f+lfT643P131G+4eOCZb+fa/wAAADBBI/v/Jb39/+WLT7t2oYtOn++WgWfOzLX/AQAAYIJG9v8yvf1/5E1ffHCD7XZ+dM+BZ76Ta/8DAADABI3s/5f29v9RH9hszgv3POuATQaeOSvX/gcAAIAJGtn/L+vt/6OvOereJU7b7d1/Hnjmu7n2PwAAAEzQyP5ftrf/j/nwxt0tV92x0n0Dz5yda/8DAADABI3s/5f39v+x2+681EELLHbTugPPfC/X/gcAAIAJGtn/y/X2/3G/+valu8486PirBp45J9f+BwAAgAka2f/L9/b/V85/59lX3rTWR3ceeOb7ufY/AAAATNDI/n9Fb/8fXxy90WvOeXDpjw48c26u/Q8AAAATNLL/V+jt/68ucOJuH9xx2atuH3jmB7n2PwAAAEzQyP5fsbf/v/ad7b/4lcNuPn/7gWd+mGv/AwAAwASN7P9X9vb/18/41MUHbLrgVpcPPHNerv0PAAAAEzSy/1fq7f8TnrPmC3df8bw5bxh45ke59j8AAABM0Mj+f1Vv/59Y7lu9+OG9Ht594Jnzc+1/AAAAmKCR/b9yb/+f9MMf33XTo/ee/MzAMxfk2v8AAAAwQSP7f5Xe/v/GNc+fc56XL/GGdww88+Nc+x8AAAAmaGT/r9rb/9/88K0P3r3hofO9aeCZC3PtfwAAAJigkf3/6t7+P3nb31177hHrP/qHgWcuyrX/AQAAYIJG9v9revv/lF8tudy6px3yge0Gnrk41/4HAACACRrZ/6v19v+p+9x36R17rnfYTwaemfXX7H8AAACYoJH9/9re/j/t4sWXetkC9/3m5oFnfppr/wMAAMAEjez/1Xv7//SbntftddVSr95j4JlLcu1/AAAAmKCR/f+63v7/1gduu/czN52/+xMDz1yaa/8DAADABI3s/zV6+/+M/X526Wtn7nPEVgPPXJZr/wMAAMAEjez/NXv7/9uXzrHUdTvedPkGA89cnmv/AwAAwASN7P+1evv/zOtX7o49Z4EXPzzwzBW59j8AAABM0Mj+X7u3/7/zvkfu3WnThzbbbOCZK3PtfwAAAJigkf2/Tm//n3Xqjcfsdthy5/xt4Jmrcu1/AAAAmKCR/b9ub/9/d94F9v34wwfeeefAM1fn2v8AAAAwQSP7//W9/X92u9xWN6+4RrHWwDM/y7X/AQAAYIJG9v8bevv/exf88YdLvvy2N1438Mw1ufY/AAAATNDI/n9jb/+fc+X6m9/56CKn7TLwzLW59j8AAABM0Mj+X6+3/7//oc99f74jzn5q34FnZv07AfY/AAAATNDI/n9Tb/+f+94ffOkNG+6+yK0Dz/w81/4HAACACRrZ/+v39v8Pfrvbh8/Z4tQPPD3wzPW59j8AAABM0Mj+f3Nv//9wv+8d//JP7HTY1gPP3JBr/wMAAMAEjez/DXr7/7xL99z/tnuu+M36A8/8Itf+BwAAgAka2f8b9vb/j65/yzs/vUr76j8OPHNjrv0PAAAAEzSy/9/S2//nv+/TF+yz5HG7v2fgmZty7X8AAACYoJH9v1Fv/18w2z5X//TJrY64YuCZX+ba/wAAADBBI/t/497+//H3Llj6Fcc8dvn1A8/cnGv/AwAAwASN7P9Nevv/wlMOnu0966704g8NPHNLrv0PAAAAEzSy/zft7f+LFl3jgSNPvG6zKwee+VWu/Q8AAAATNLL/39rb/xe/fqM7L9lvrnPeN/DMrbn2PwAAAEzQyP7frLf/f/LPI8vlFzvhzo8NPPPrXPsfAAAAJmhk/7+tt/9/+oczXrT9T7cp7hh45je59j8AAABM0Mj+37y3/y/Z5H0/OeqOp9646cAzv821/wEAAGCCRvb/Fr39f+lSV758k2q10x4ZeOa2XPsfAAAAJmhk/2/Z2/+XfWXOa07Y7oinfj/wzO259j8AAABM0Mj+36q3/y8/5JV/+utFmy6yzsAzs35PAPsfAAAAJmhk/7+9t/+vWOHRudoNl1jo1IFn7sy1/wEAAGCCRvb/1r39f+Xhy9/zlSPufeJZA8/clWv/AwAAwASN7P939Pb/Vcs83n7w0fXPWHTgmbtz7X8AAACYoJH9/87e/r969Wte/JqXH7rBRQPP/C7X/gcAAIAJGtn/7+rt/5994lmXXbnigvWKA8/ck2v/AwAAwASN7P9tevv/mqu2OvDQh2++9wsDz9yba/8DAADABI3s/3f39v+1u39lu70P2+u7Bw888/tc+x8AAAAmaGT/b9vb/9ftcPJay2563kZLDDxzX679DwAAABM0sv+36+3/n9+2zddvP2etF3514Jk/5Nr/AAAAMEEj+3/73v6//vlr/fbyHQ+6ZLWBZ/6Ya/8DAADABI3s//f09v8N3/zE6ivNXPaolw48c3+u/Q8AAAATNLL/39vb/7/47oXPf/dND3740wPPPJBr/wMAAMAEjez/HXr7/8Zn7/XUEVft9rpm4JkHc+1/AAAAmKCR/b9jb//ftP+v5918gbNuP2XgmT/l2v8AAAAwQSP7f6fe/v/lZYv8+Rt7LnboWQPPPJRr/wMAAMAEjez/9/X2/803LHXDn0+7Y+d5B555ONf+BwAAgAn6T/b/ATNmdDv39v8tO9+5YnVRvdBKA8/8Odf+BwAAgAka+fX/XXr7/1dXvfBXx2x32RNHDTzzSK79DwAAABM0sv/f39v/t+5+z6vfV+18xgEDzzyaa/8DAADABI3s/w/09v+vd7j9eavfcfoGLxx45i+59j8AAABM0Mj+/2Bv///mtuc+ee1PV67PHHjmsVz7HwAAACZoZP/v2tv/v73wgcP2XOzxe2cfeOavufY/AAAATNDI/t+tt/9vq5d9/8H7bfHd5w0883iu/Q8AAAATNLL/P9Tb/7fPveCbf3HiMRudN/DM33LtfwAAAJigkf2/e2//33H6DWcuvu62L6wGnnki91/a/2v8V37AAAAAwL9sZP/v0dv/d562wlOvPeakS04YeObJXL/+DwAAABM0sv/37O3/u+Z77PnXPTnHUecOPPP3XPsfAAAAJmhk/3+4t//v7q5b/dglr/nw/APP/CPX/gcAAIAJGtn/H+nt/9/9eOZvd1pl49cdPfDMP3PtfwAAAJigkf2/V2//33PV6Suecc/ht7964Jmncu1/AAAAmKCR/b93b//fu/suN7zrE6sfuuzAM0/n2v8AAAAwQSP7f5/e/v/9Dm/787O3eGbnwwaeeSbX/gcAAIAJGtn/+/b2/323HT7vE2ct8IPPDLwy68P+BwAAgAka2f8f7e3/P+y/yZPb7nLT214y8Mqsv8f+BwAAgAka2f8f6+3/P172ped9YfZ9ytUHXinz8a/s/2ee+a/9kAEAAIB/0cj+36+3/++/4cxXX3b9+b/7ysArVT78+j8AAABM0Mj+37+3/x/YecdfverapU6fe+CVOh/2PwAAAEzQyP4/oLf/H/zJoyvsOM9965898EqTD/sfAAAAJmhk/x/Y2/9/2veV1x+323rP/+bAK20+7H8AAACYoJH9//He/n/og3M+8vNvH/J0N/DKrL9m/wMAAMAEjez/g3r7/+FfXjnfam/a/bM/Hnhl1j9v/wMAAMAEjez/T/T2/58XvP+DSxx59vufP/DKbPmw/wEAAGCCRvb/J3v7/5Fvv+xztzy+yKozB155Vj7sfwAAAJigkf1/cG//P3rec844aJnbfnX6wCvPzof9DwAAABM0sv8/1dv/f6mu33DXldf4wlIDr8yeD/sfAAAAJmhk/x/S2/+PfeRDJ3z/gQN3/cTAK3Pkw/4HAACACRrZ/5/u7f+/XnvO2q//zHJLfHHglTnzYf8DAADABI3s/0N7+//xWz+/7bybP3TZKwZemSsf9j8AAABM0Mj+/0xv//9tuzcecNeaK/3gOQOvzJ0P+x8AAAAmaGT/f7a3/5/4yaE773v8Y287Z+CVefJh/wMAAMAEjez/z/X2/5P7vvnThzy1VXnSwCvz5sP+BwAAgAka2f+f7+3/v3/ww6f+dvHjflcMvDJr99v/AAAAMEEj+/+w3v7/xy/PetNyq7Wnf27glfnzYf8DAADABI3s/8N7+/+f56692lF3XrH+cgOvLJAP+x8AAAAmaGT/f6G3/5+a/ZO3b3/ATs9fZeiVfNj/AAAAMEEj+/+I3v5/+rkXPbP81qc+fezAKwvm43/u/5n/bT9iAAAA4F81sv+/2Nv/z5y496KXnL/pZ18w8Mpz8+HX/wEAAGCCRvb/l/5j/xczDrpxzxN2OOL9Hx94ZaF82P8AAAAwQSP7/8u9/V+susBRm3SrrfrlgVcWzof9DwAAABM0sv+P7O3/ctnlzm1/89SvVh545Xn5sP8BAABggkb2/1G9/V8d9ce3/vXybb5w/sAri+TD/gcAAIAJGtn/R/f2f/279c9ffuETdl1o4JVF82H/AwAAwASN7P9jevu/2fJzW16yz1xLzDnwymL5sP8BAABggkb2/7G9/d9u8IO9jjr5usvOGHjl+fmw/wEAAGCCRvb/cb393/1tt2O33/y8i9cYeGXWP2P/AwAAwASN7P+v9Pb/zM2+t9vTn9lr8bsHXlk8H/Y/AAAATNDI/j++t/9ne3jPL87xwM17/nXglRfmw/4HAACACRrZ/1/t7f9n/eMtZ2+58oJf2nzglRflw/4HAACACRrZ/1/r7f9nr/npjU5f5tDbfjPwyhL5sP8BAABggkb2/9d7+3/22W+d/w+Pr7/a3gOvLJkP+x8AAAAmaGT/n9Db/3Oc+/zHn3fkvTt+YOCVpfJh/wMAAMAEjez/E3v7f84Tl7zlLW9a4tPXDLzy4nzY/wAAADBBI/v/pN7+n+u5v1vpgm/f8Y8PD7yydD7sfwAAAJigkf3/jd7+n/vXP1nvG7sttvBNA6+8JB/2PwAAAEzQyP7/Zm//z7NN963N5zlrw0sGXlkmH/Y/AAAATNDI/j+5t//n3eO1h1bX7vaddw+88tJ82P8AAAAwQSP7/5Te/p/vun/s+OfrH/z9nwZeeVk+7H8AAACYoJH9f2pv/8//oy0/tdLsy3ZvGXhl2XzY/wAAADBBI/v/tN7+X2DG195z+S4HbbrFwCsvz4f9DwAAABM0sv9P7+3/58z/zXWOOGuts/8+8Mpy+bD/AQAAYIJG9v+3evt/wTO3O/ndJx9z8W0DryyfD/sfAAAAJmhk/5/R2//Pnf2EDf6xzxaL7z/wyivyYf8DAADABI3s/2/39v9C5+7wnZkLP77njgOvrJAP+x8AAAAmaGT/n9nb/wuf+I7Pb335yl+6euCVFfNh/wMAAMAEjez/7/T2//Oee9wu3/nN6be9fuCVV+bD/gcAAIAJGtn/Z/X2/yL77rjwgt3Oq90z8MpK+bD/AQAAYIJG9v93e/t/0Z+c+cQ9O1y2418GXnlVPux/AAAAmKCR/X92b/8v9ssv3XrW+fWnNx54ZeV82P8AAAAwQSP7/3u9/f/8D27ymrW3fuYfDwy8sko+7H8AAACYoJH9f05v/79gl+/u+K4DVl94vYFXVs2H/Q8AAAATNLL/v9/b/4vf/JFDz7jz8A3fOfDKq/Nh/wMAAMAEjez/c3v7/4U/3eBbT6y28Xf+OfDKa/Jh/wMAAMAEjez/H/T2/4v2+sx6z178mt/vOvDKavmw/wEAAGCCRvb/D3v7f4nZX3LydU/N0f1i4JXX5sP+BwAAgAka2f/n9fb/kuc+vM5rjz9p08sGXlk9H/Y/AAAATNDI/v9Rb/8vdeIv37PTmtuevcPAK6/Lh/0PAAAAEzSy/8/v7f8XP3e+Tx27zwkvf3DglTXyYf8DAADABI3s/wt6+3/pH92wy4yTt/n5hgOvrJkP+x8AAAAmaGT//7i3/18yY8HP/+Xy647bcuCVtfJh/wMAAMAEjez/C3v7f5n5l/3OKQvPtc8/Bl5ZOx/2PwAAAEzQyP6/qLf/X3rmAxu8tTtixY8MvLJOPux/AAAAmKCR/X9xb/+/7MKndrn7N5v+4pcDr6ybD/sfAAAAJmhk//+kt/+XrV/z+XnOf+rgnw688vp82P8AAAAwQSP7/6e9/f/yuYvvrLvDajtsM/DKG/Jh/wMAAMAEjez/S3r7f7nTr9jg3AOuWODXA6+8MR/2PwAAAEzQyP6/tLf/l9/x3lecuXX72F4Dr6yXD/sfAAAAJmhk/1/W2/+v+MWLbnzHaqd+/YMDr7wpH/Y/AAAATNDI/r+8t/9XuHyhR2e7c6c1rx14Zf182P8AAAAwQSP7/4re/l/xo3fM/fenHpu55sArb86H/Q8AAAATNLL/r+zt/1fO/Ngzr1t8pT/+buCVDfJh/wMAAMAEjez/q3r7f6Wzz1/0mjWP+/FjA69smA/7HwAAACZoZP9f3dv/rzr5wNWOPn6rrd828Mpb8mH/AwAAwASN7P+f9fb/you84fadP3Pgy3cbeGWjfNj/AAAAMEEj+/+a3v5f5cJPrvTI5mv8/MaBVzbOh/0PAAAAEzSy/6/t7f9V67VvKVd+6LhLB17ZJB/2PwAAAEzQyP6/rrf/Xz333o+/7YHl9nnvwCub5sP+BwAAgAka2f8/7+3/15x+0fzffPzsFe8feOWt+bD/AQAAYIJG9v/1vf2/2lVv3nbRZXb/xRsHXtksH/Y/AAAATNDI/r+ht/9fu/uhBzz0ptsOftfAK7P+TED7HwAAACZoZP//orf/V9/hrBN+dOQiOzw18Mrm+bD/AQAAYIJG9v+Nvf3/uts+vPZ6u923wBsGXtkiH/Y/AAAATNDI/r+pt//XOPi9b1zk20s9du/AK1vmw/4HAACACRrZ/7/s7f81V/v66Q9fe8jXHx14Zat82P8AAAAwQSP7/+be/l9r6WM/c/4866250cArb8+H/Q8AAAATNLL/b+nt/7WP2HqnN85+08zfDryydT7sfwAAAJigkf3/q97+X+f3Tx/8uesX+ON+A6+8Ix/2PwAAAEzQyP6/tbf/1916le33O+v8H+808Mo782H/AwAAwASN7P9f9/b/699YrrvMLvts/bOBV96VD/sfAAAAJmhk//+mt//f8Oilp9x6/BxbvnjglW3yYf8DAADABI3s/9/29v8bN2rfvPaa1/zwkwOvvDsf9j8AAABM0Mj+v623/9e7/+Izz1p82wePGHhl23zY/wAAADBBI/v/9t7+f9PTfz/snqdOmmP5gVe2y4f9DwAAABM0sv/v6O3/9ddZ7f0L3rn6OhcMvLJ9Pux/AAAAmKCR/X9nb/+/ebZdXrLZas98c7GBV96TD/sfAAAAJmhk/9/V2/8bfO/0n5289caPzDbwynvzYf8DAADABI3s/7t7+3/DUw6//9EDDp/7WwOv7JAP+x8AAAAmaGT//663/9+y6NtmFjvsvO08A6/smA/7HwAAACZoZP/f09v/G92xxx4LnX/6Qd8beGWnfNj/AAAAMEEj+//e3v7f+D1nH3n/b+pbvjHwyvvyYf8DAADABI3s/9/39v8mux3ygwu7y17VDryycz7sfwAAAJigkf1/X2//b/qzDTfbYOEt9j904JVd8mH/AwAAwASN7P8/9Pb/Wy968EeHXH7MV5ceeOX9+bD/AQAAYIJG9v8fe/t/s2aZLfY9eeWrXzfwygfyYf8DAADABI3s//t7+/9t88y993L7PP7S4wde+WA+7H8AAACYoJH9/0Bv/2/+rZuP++0uy275o4FXds2H/Q8AAAATNLL/H+zt/y1mm3/X15/14A+fO/DKbvmw/wEAAGCCRvb/n3r7f8vv/eKI71+/1oNzDbzyoXzY/wAAADBBI/v/od7+3+qUP3zvrtkPmuPbA6/sng/7HwAAACZoZP8/3Nv/b1/05RvPO89i6yw+8Moe+bD/AQAAYIJG9v+fe/t/6/1ue/Hp197xzYMGXtkzH/Y/AAAATNDI/n+kt//fcenzLtvy27s98qWBVz6cD/sfAAAAJmhk/z/a2//vvH7xe+bY7ay5XzXwykfyYf8DAADABI3s/7/09v+73ndf+/SR62/72YFX9sqH/Q8AAAATNLL/H+vt/212qje7+02HHvTygVf2zof9DwAAABM0sv//2tv/777xpz+YZ5klbll14JV98mH/AwAAwASN7P/He/t/2yueOHLdx+991XEDr+ybD/sfAAAAJmhk//+tt/+3+9jqe5z7wF77LzjwykfzYf8DAADABI3s/yd6+3/72b5y3O4rn/fV7w+88rF82P8AAAAwQSP7/8ne/n/P97ba+4DNF7z6xIFX9suH/Q8AAAATNLL//97b/+89ZZstbvrMzS8demX/fNj/AAAAMEEj+/8fvf2/w6In/+jFLzj8L+cMvHJAPux/AAAAmKCR/f/P3v7f8aLtN/7xPzee9zkDrxyYD/sfAAAAJmhk/z/V2/87NSd+b8OvPPP6YuCVj+fD/gcAAIAJGtn/T/f2//vmOfqIhddY/ZSTBl45KB/2PwAAAEzQyP5/prf/d/7WO3f94ztOemi5gVc+kQ/7HwAAACboP9//M2b09v8ud95/+I0HbjvX5wZe+WQ+7H8AAACYoJH9X/T2//u3etmHXnDXNW8/duCVg/Nh/wMAAMAEjez/srf/P7Dhczbd47Vz/GiVgVc+lQ/7HwAAACZoZP9Xvf3/wceu/+6nfv34lR8feOWQfNj/AAAAMEEj+7/u7f9dX/XotV9rV37JCwZe+XQ+7H8AAACYoJH93/T2/26ffeVyu7z3mI+tPPDKofmw/wEAAGCCRvZ/29v/Hzp6zjlX+dEWX/nywCufyYf9DwAAABM0sv+73v7f/YVXPvizUy775UIDr3w2H/Y/AAAATNDI/p/Z2/97vO191Zz71q88f+CVz+XD/gcAAIAJGtn/s/X2/54PnnHXU887fZszBl75fD7+xf0/87/wIwYAAAD+VSP7/1m9/f/hJ468+LQrdj5wzoFXDsuHX/8HAACACRrZ/8/u7f+PrLXRC7e64ay/vGTglcPzYf8DAADABI3s/9l7+3+vO4+46uI5dpv3MwOvfCEf9j8AAABM0Mj+n6O3//fe6q0vXfH9d7z+KwOvHJEP+x8AAAAmaGT/z9nb//ts+IFn7fDdxU5ZfeCVL+bD/gcAAIAJGtn/c/X2/76PnfqHL51x0ENnD7zypXzY/wAAADBBI/t/7t7+/+hRb//qy3Zda665B175cj7sfwAAAJigkf3//2LvzqO+Hvt+/+fzpWQeMmUqQsmUROYps4SQIZlnmTNkypCIKxSli8yUKVNcZIhCGSLzkCnKUIRQUvRbe6/D3sfex3ffx7bv+/qt44/HY61rXW+t8/tan3+ffc6zc8mo/89fd8h5ny3x3UGN6qwMDIf+BwAAgAJl+n+pqP8v2HTowVe+tu7Iu+qsDAqH/gcAAIACZfp/6aj/L7zksFFnt35v3Kp1Vm746+v/vU8LAAAA/L/I9H+TqP97HTdo/lGzlmv1TJ2VweHQ/wAAAFCgTP8vE/X/RW/v9dXug548/946K/8Mh/4HAACAAmX6f9mo/y8ee8LY5Xc7+6YF66zcGA79DwAAAAXK9P9yvRo0qMJ9yfkPrDFtvynvXlpn5aZw6H8AAAAoUKb/l4/e/1/aePFX1uvbYqM166wMCYf+BwAAgAJl+n+FqP97P/pyy0+m9j20TZ2Vm8Oh/wEAAKBAmf5vGvX/ZUN/bnzFxrtdNKDOyi3h0P8AAABQoEz/rxj1f5+V203rOXaLSy+ss3JrOPQ/AAAAFCjT/ytF/X/5qFkNPl/xj6M+qbNyWzj+6v/5/n1PDAAAAPxdmf5fOer/KxZo88XS53Zu80qdldvD4f0/AAAAFCjT/6tE/d93yYXH7DS0/4Rj66zcEQ79DwAAAAXK9P+qUf9fed/45iNGLj54cp2VO8Oh/wEAAKBAmf5vFvX/VV8NOWrm0a+fvWOdlbvCof8BAACgQJn+bx71/z+6HtRngYaHrrNXnZW7w6H/AQAAoECZ/l8t6v9+Ox92914f3Tb+5zorQ8Oh/wEAAKBAmf5fPer/q2cM7XD7lgeO2qXOyrBw6H8AAAAoUKb/W0T9f80GvduPnHRjt2l1Vu4Jh/4HAACAAmX6f42o/6/tu/1Hu1zUbqG5dVbuDYf+BwAAgAJl+n/NqP/733zOnJUP/mVatzor94VD/wMAAECBMv2/VtT/A1qMWmH6Nsfd/ladlfvDof8BAACgQJn+bxn1/3V7rjyz9U3Dtj+lzsoD4dD/AAAAUKBM/7eK+v/6qRObfDC34XLH1FkZHg79DwAAAAXK9P/aUf8P/HNSu6uajZ35Yp2VB8Oh/wEAAKBAmf5vHfX/oA5rvX/hxitd+kWdlYfCof8BAACgQJn+Xyfq/xu+mrLFlKmfHLVNnZWHw6H/AQAAoECZ/l836v/BXVf/dNm+p7fpUmflkXD8b/1f+zc8MQAAAPB3Zfp/vaj//7nzCvO22++RCb/WWXk0HN7/AwAAQIEy/b9+1P83zvhs5Yd3W3/wOXVWRoRD/wMAAECBMv2/QdT/N127zgmNB00/e2KdlcfCof8BAACgQJn+bxP1/5DWU6/4fdY267xWZ+XxcOh/AAAAKFCm/zeM+v/mrScMG976ovEn1Vn5Vzj0PwAAABQo0/9to/6/pfeyux78Ws9R79RZeSIc+h8AAAAKlOn/jaL+v/WyX1fYdomnup1ZZ+XJcOh/AAAAKFCm/9v1atCgUfjK27ZoO+eRU5ZZ6LA6KyPDof8BAACgQJn+3zh6/397y8YffXX/O9PG1Fl5Khz6HwAAAAqU6f9Nov6/o/8b7Zd5eJfbO9VZeToc+h8AAAAKlOn/9lH/3/lV9/cndL98++/rrDwTDv0PAAAABcr0/6ZR/9/V9b52qy+65nK/11l5Nhz6HwAAAAqU6f/Nov6/e+drm5z15tcz96+zMioc+h8AAAAKlOn/zaP+Hzqjy8xLp7Y4/u06K8+FQ/8DAABAgTL9v0XU/8P2vH7lVTaecuWpdVaeD4f+BwAAgAJl+n/LqP/vmdp53vf77fbZ0XVWRodD/wMAAECBMv2/VdT/9/553KdP9u271Qt1VsaEQ/8DAABAgTL9v3XU//d1eHCLXQctd9bOdVb++jsB/Q8AAAAFyvT/NlH/37/PkyvP3e29gVPrrLwYDv0PAAAABcr0/7ZR/z8w/cJ5i7c+e/QfdVZeCof+BwAAgAJl+n+7qP+H/77DpwfNenL1Q+qsjA2H/gcAAIACZfp/+6j/H9zmki2GLbHdXlPqrIwLh/4HAACAAmX6v0PU/w9dfNs2D712yUM71Vl5ORz6HwAAAAqU6f8dov5/uP0xt29//7qT96yz8ko49D8AAAAUKNP/O0b9/8g6B1+y3CnfLTCjzsqr4dD/AAAAUKBM/+8U9f+jA288bHL3U3e/oM7Ka+HQ/wAAAFCgTP/vHPX/iC827df84Yce+LjOyvhw6H8AAAAoUKb/d4n6/7H955341purzH61zsrr4dD/AAAAUKBM/+8a9f/ju7/Y8bJFP1v+uDorb4RD/wMAAECBMv2/W9T//5pZe7DHivMfv0edlQnh0P8AAABQoEz/7x71/xP7PN/hh7EvXvldnZU3w6H/AQAAoECZ/u8Y9f+T0xvdvdLQEz6bU2flrXDofwAAAChQpv/3iPp/5O9b9tn53Hu3OqDOytvh0P8AAABQoEz/d4r6/6lt5hz11NGbnPVunZV3wqH/AQAAoECZ/t8z6v+nV19w6drImQPPqrPy198J6H8AAAAoUKb/94r6/5nBr//040f7jz60zsp74dD/AAAAUKBM/+8d9f+z//hlwp0NB68+us7K++HQ/wAAAFCgTP93jvp/1CYbbthl0uF7nV1n5YNw6H8AAAAoUKb/94n6/7kTV9u02vKOh3rVWfkwHPofAAAACpTp/32j/n/+vckTfzp40cnj66x8FA79DwAAAAXK9P9+Uf+PHv3p73dd9NoCJ9dZmRgO/Q8AAAAFyvR/l6j/x5y9/PL73bTX7l/WWfk4HPofAAAACpTp//2j/n9hkZGzBmxzzQPb1ln5JBz6HwAAAAqU6f8Dov5/8fHzljm02Vaz96uz8mk49D8AAAAUKNP/B0b9/9LtO2600dx5y/9SZ+WzcOh/AAAAKFCm/w+K+n/s8r3eG7vo5SsvX2fl83DofwAAAChQpv+7Rv0/buR2Wx785i5zR9ZZmRQO/Q8AAAAFyvT/wVH/v9zg0s+GP/z1sAfqrHwRDv0PAAAABcr0f7eo/19p8uyfv3dfc5fF66z89TsB9T8AAAAUKNP/h0T9/+rws1dqfMpTDS6pszI5HPofAAAACpTp/0Oj/n/ty5b773Z/z0nN66xMCYf+BwAAgAJl+v+wqP/HHzB95BOvvfPYxnVWvgqH/gcAAIACZfr/8Kj/X+/4zo3fLbHMPtfVWfk6HPofAAAACpTp/yOi/n9j1lLnrDpr+prr1Vn5Jhz6HwAAAAqU6f8jo/6f0G6DBRq1Xn/sVXVWvg2H/gcAAIACZfr/qKj/37x65te/7HbRgBvrrEwNh/4HAACAAmX6/+io/9+68bWXbh20zWmb1lmZFg79DwAAAAXK9P8xUf+/3XyhFp37frL5Y3VWvguH/gcAAIACZfr/2Kj/39l32KsD91vpo+XqrHwfDv0PAAAABcr0/3FR/7/7w0mtjtr4kX71VqaHQ/8DAABAgTL9f3zU/+/N2WfBNlNPP/n2Ois/hEP/AwAAQIEy/X9C1P/vb9t/6ui5w1buXWflx3DofwAAAChQpv9PjPr/gy/3nG//ZsfNXavOyk/h0P8AAABQoEz/d4/6/8MDBn553zZjh21QZ2VGOPQ/AAAAFCjT/ydF/f9Rx/tHz7up4S7966z8HA79DwAAAAXK9P/JUf9PnHV8s0UuurHBKnVWfgmH/gcAAIACZfr/lKj/P75u8H4jDj5w0tN1Vn4Nh/4HAACAAmX6/9So/z/pdciInbb85bH76qzMDIf+BwAAgAJl+v+0qP8/3eyo65ee1G6fxnVWZoVD/wMAAECBMv1/etT/n/W646zPG76+5qN1Vn4Lh/4HAACAAmX6/4yo/z+/ZJsWcz9afOySdVZmh0P/AwAAQIEy/d8j6v9Jm1720uIjbxvQsM7K7+HQ/wAAAFCgTP+fGfX/F+s+/fVBRx962p11VuaEQ/8DAABAgTL9f1bU/18O6rnAsHP/2LxlnZW54dD/AAAAUKBM/58d9f/kLz+Y2n3oFh/1rbPyRzj0PwAAABQo0//nRP0/5YBVFrx5bP9+Q+qs/BkO/Q8AAAAFyvR/z6j/v+rYotUrK3Y+ees6K/PCof8BAACgQJn+Pzfq/69nffHqpmdMGnlQulL9deh/AAAAKFCm/8+L+v+bfZs1u2NYs4NmpytV+Br9DwAAACXK9P/5Uf9/+8NXo/cc12/x6elK9dc3AOh/AAAAKFCm/y+I+n/qnI+/nL9Jp+m7pytVLRz6HwAAAAqU6f8Lo/6ftm3T+WY1fmvoc+lKNX849D8AAAAUKNP/vaL+/25ar2n3vLv0joenK9UC4dD/AAAAUKBM/18U9f/3e+3Y+MDHnlmqR7pSNQyH/gcAAIACZfr/4qj/p+9wXsvFjjvv5/fTlapROPQ/AAAAFCjT/5dE/f/DvJGv/NGvz0Xd05Xqr8/rfwAAAChQpv8vjfr/xy1veHzK3jse+ka6UjUOh/4HAACAAmX6v3fU/z/16bbPsht+s9EH6Uq1UDj0PwAAABQo0/+XRf0/Y8CRPbab3urdnulKtXA49D8AAAAUKNP/faL+/7nV7YMe/nnETTPTlWqRcOh/AAAAKFCm/y+P+v+Xgxucfcb6Pc7fJ12pFg2H/gcAAIACZfr/iqj/f/36pX/26TSx1fbpSrVYOPQ/AAAAFCjT/32j/p/589yn3h7QdNykdKVaPBz6HwAAAAqU6f8ro/6ftctmBzTr/fzIl9KVaolw6H8AAAAoUKb/r4r6/7dpvz0y8oAGBx2ZrlRLhkP/AwAAQIEy/f+PqP9n77XVnrtsOnzx09OVaqlw6H8AAAAoUKb/+0X9//sO85+68pSTp7+ZrlR/db/+BwAAgAJl+v/qqP/nzBs9YPpvM4YenK5UTcKh/wEAAKBAmf6/Jur/uTe1mbJfi7Y7zktXqmXCof8BAACgQJn+vzbq/z/WnNXorg5DlvomXamWDYf+BwAAgAJl+r9/1P9/bjh+zZ9u6PrzrulKtVw49D8AAAAUKNP/A6L+n3f5wi9UFw696Md0pVo+HPofAAAACpTp/+v+Z/9XDSYft+gJdxx96N7pSrVCOP6D/p//v+iJAQAAgL8r0//XR/0/X7cHf7hhzLiNdkhXqqbh8P4fAAAACpTp/4FR/1e7Xv/6a6s2fvfrdKVaMRz6HwAAAAqU6f9BUf/Xfuy8ztbVdTedkK5UK4VD/wMAAECBMv1/Q9T/81/605jfP933/JfTlWrlcOh/AAAAKFCm/wdH/b/AVps0b/zsnFafpivVKuHQ/wAAAFCgTP//M+r/hmsv2uDgwzcbd166Uq0aDv0PAAAABcr0/41R/ze65tUvhg/oOP6adKX66zP6HwAAAAqU6f+bov5fcMPGjTfqdNU6G6YrVfNw6H8AAAAoUKb/h0T93/jyN6aNXX+1s9dIV6rVwqH/AQAAoECZ/r856v+Fbvr1lQE/fzm4T7pSvRwG9D8AAAAUKNP/t0T9v/CabVseOv2CCQunK1WLcOh/AAAAKFCm/2+N+n+RE444cbUNR7W5J12p/vqZAP0PAAAABcr0/21R/y/65l393tx7yaOeTVeqNcOh/wEAAKBAmf6/Per/xV685cHe/SZculK6Uq0VDv0PAAAABcr0/x1R/y9+4QEdzzyu9cy705WqZTj0PwAAABQo0/93Rv2/xDPntjnpsanLzZ+uVK3C8R/0f+P/oicGAAAA/q5M/98V9f+SjZ55e8i7Hbav0/jV2uHw/h8AAAAKNN+y8/1vf/K/9P/dUf8vtXSfGS837n37w+lK1Toc+h8AAAAKlHn/PzTq/6Xv2XaJzZosP23LdKVaJxz6HwAAAAqU6f9hUf83+eTLefPGfbjQLelKtW449D8AAAAUKNP/90T9v8wxa6y8yLCzul2erlTrhUP/AwAAQIEy/X9v1P/Lnr7qFvuf8fiotdOVav1w6H8AAAAoUKb/74v6f7mXP/z0vsO7j180Xak2CIf+BwAAgAJl+v/+qP+XP2HFdm2evX+dB9OVqk049D8AAAAUKNP/D0T9v8Kbn7w/+tPq7CfSlWrDcOh/AAAAKFCm/4dH/d/0xa9nDqzGDG6arlRtw6H/AQAAoECZ/n8w6v8VL2ze5KhVu00YmK5UG4VD/wMAAECBMv3/UNT/K6301uGfjLmlzUbpStUuHPofAAAACpTp/4ej/l/57ia91rujzVGrpyvVxuHQ/wAAAFCgTP8/EvX/Ko+sd1vPC3+89KJ0pdokHPofAAAACpTp/0ej/l91wW+2v+KGhWdunq5U7cOh/wEAAKBAmf4fEfV/s4UXXuL6Dq8sNzhdqTYNh/4HAACAAmX6/7Go/5s/PH7G0S2O3L5fulJtFg79DwAAAAXK9P/jUf+vdtestzf87a7b10lXqr9+JkD/AwAAQIEy/f+vqP9XX7VNm+entJ92a7pSbREO/Q8AAAAFyvT/E1H/tzhhwKfzbzp7oSpdqbYMh/4HAACAAmX6/8mo/9d4c98tZh3Qpdsy6Uq1VTj0PwAAABQo0/8jo/5f88WTV76j98BR/0pXqq3Dof8BAACgQJn+fyrq/7UuvGfens/uu/oW6Uq1TTj0PwAAABQo0/9PR/3f8pMTmrxy+HWjb05Xqm3Dof8BAACgQJn+fybq/1bHPDBz02qzgVekK9V24dD/AAAAUKBM/z8b9f/apw96v/unc85qna5U24dD/wMAAECBMv0/Kur/1i/v1e7mMUdvNTRdqTqEQ/8DAABAgTL9/1zU/+t8uFOTlqsO/WyBdKXaIRz6HwAAAAqU6f/no/5f94iLZk68sPGVS6Ur1Y7h0P8AAABQoEz/j476f72znnr/6jvGHf9QulLtFA79DwAAAAXK9P+YqP/XH39+u/M6tF1+oXSl2jkc+h8AAAAKlOn/F6L+32DxQ3Y58oYZs4elK9Uu4dD/AAAAUKBM/78Y9X+bxwbfN+i3rg+MSleqXcOh/wEAAKBAmf5/Ker/DW+7o++YFkN2XzldqXYLh/4HAACAAmX6f2zU/21XPOrYDTZtsMC16Uq1ezj0PwAAABQo0//jov7f6OSxfX6d8vzktulK1TEc+h8AAAAKlOn/l6P+b/fufEc17H3yQy3SlWqPcOh/AAAAKFCm/1+J+n/j5zfvsPcBw/e6LF2pOoXj/9D/Df8LnxgAAAD4uzL9/2rU/5uc+8fdt3Xqsfpt6Uq1Zzi8/wcAAIACZfr/taj/23+4dcfNB4wYXUtXqr3Cof8BAACgQJn+Hx/1/6ZHzH5w3M9NBzZJV6q9w6H/AQAAoECZ/n896v/NzhrT76b1J571eLpSdQ6H/gcAAIACZfr/jaj/Nx+/wIknb7jjVpulK9U+4dD/AAAAUKBM/0+I+n+L4TObvj+9z2c3pCvVvuHQ/wAAAFCgTP+/GfX/lk02+K1Fv1ZXXp2uVPuFQ/8DAABAgTL9/1bU/1s1WOjDU/b+5vh105WqSzj0PwAAABQo0/9vR/2/9cjXNr/ksaWXH5SuVPuHQ/8DAABAgTL9/07U/9tM+niD9457a3a7dKU6IBz6HwAAAAqU6f93o/7f9qCmb63R+LwHVktXqgPDof8BAACgQJn+fy/q/+06Nfv51Hef2b1XulIdFA79DwAAAAXK9P/7Uf9v/+tXS148rtkCi6QrVddw6H8AAAAoUKb/P4j6v8NFHf7cqcmkycPTlergcOh/AAAAKFCm/z+M+n+HzS9eacQZnR56Ml2puoVD/wMAAECBMv3/UdT/O67/xJafD+u314rpSnVIOPQ/AAAAFCjT/xOj/t/p+gs+W/qA2fvMSleqQ8Oh/wEAAKBAmf7/OOr/nTd5eqMrerd/bN90pTosHPofAAAACpTp/0+i/t/lHz3f6zll4KTt0pXq8HDofwAAAChQpv8/jfp/18HbzFpv0y4NPk9XqiPC8d/7v/ZvfWIAAADg78r0/2dR/++2+mXLfNLilV1OTFeqI8Ph/T8AAAAUKNP/n0f9v/tJ7+11y28LD3s9XamOCof+BwAAgAJl+n9S1P8d31ni0RNvuGvuh+lKdXQ49D8AAAAUKNP/X0T9v8dza/dv3+HIlc9NV6pjwqH/AQAAoECZ/v8y6v9OPb875dU7bjn5+XSlOjYc+h8AAAAKlOn/yVH/7/nE64u8fWG3fkekK9Vx4dD/AAAAUKBM/0+J+n+vasHpzVb98aMz0pXq+HDofwAAAChQpv+/ivp/72U3fOOMMW02fy9dqU4Ih/4HAACAAmX6/+uo/zvf/8u6fT69/7QD05XqxHDofwAAAChQpv+/ifp/nw/2G71d1X3Ab+lK1T0c+h8AAAAKlOn/b6P+3/fwa5o9fPiYsT+kK9VJ4dD/AAAAUKBM/0+N+n+/M++db8qz1Zod05Xq5HDofwAAAChQpv+nRf3f5bUTv1x22If7HJ+uVKeEQ/8DAABAgTL9/13U//ufNHzBq85Y/rFx6Up1ajj0PwAAABQo0//fR/1/wDvHTr2wyeOTPktXqtPCof8BAACgQJn+nx71/4HP7f1q63FnNTg/XalOD4f+BwAAgAJl+v+HqP8P6nldqw/enbrLT+lKdUY49D8AAAAUKNP/P0b933WFYw45tHHrYZ3TlapHOPQ/AAAAFCjT/z9F/X/wHbc9M+C43nM7pCvVmeHQ/wAAAFCgTP/PiPq/279uvGnsYx1W/ipdqc4Kh/4HAACAAmX6/+eo/w9Z9OALNtp71Mld05Xq7HDofwAAAChQpv9/ifr/0MWeXbdlvwv6/ZmuVOeE47/1/3z/3icGAAAA/q5M//8a9f9hI85+Y+L0CR99m65UPcPh/T8AAAAUKNP/M6P+P/zW7aZfveGSm+/2vy5U/+1/54b/0P8AAABQoEz/z4r6/4imly5y3vpXnTY2XanOC4f+BwAAgAJl+v+3qP+PPGnNL5/8ueOAo9KV6vxw6H8AAAAoUKb/Z0f9f9Q7n8+364Avx56WrlQXhEP/AwAAQIEy/f971P9HP/dRs1U6rbbmhHSlujAc+h8AAAAKlOn/OVH/H9NzpdHfTz7yzyPTlapXOPQ/AAAAFCjT/3Oj/j/2g09bndX+rlVfSleqi8Kh/wEAAKBAmf7/I+r/4w5f/tVL9194tzfTlericOh/AAAAKFCm//+M+v/4M1ebOuHSV+49PV2pLgmH/gcAAIACZfp/XtT/J7w2ecHVB3f5cl66Ul0aDv0PAAAABfqP+3++BlH/n3jFOvvctMPA6uB0peodDv0PAAAABcr0/3xR/3dvO/Xxk9dov9+u6Up1WTj0PwAAABQo0/9V1P8nrTVh0OazZ//rm3Sl6hMO/Q8AAAAFyvR/Ler/k4cs22PcKtWLe6cr1eXh0P8AAABQoEz/zx/1/ymHbNR4wugxLX5MV6orwqH/AQAAoECZ/l8g6v9Tp8yYtvrt3U/5Ol2p+oZD/wMAAECBMv3fMOr/034a98pZF9x/7Q7pSnVlOPQ/AAAAFCjT/42i/j99t8VaXnpEmw9eTleqq8Kh/wEAAKBAmf5fMOr/M7a+f+y2o37c9IR0pfpHOPQ/AAAAFCjT/42j/u/R+/g1HvmsW/fz0pWqXzj0PwAAABQo0/8LRf1/5rV7zv9V7ZarPk1XqqvDof8BAACgQJn+Xzjq/7NaD/xqmWU6/Dk7XamuCYf+BwAAgAJl+n+RqP/PvmKfRa9+ufeqB6Ur1bXh0P8AAABQoEz/Lxr1/zlt+/9w3j2td9s9Xan6h0P/AwAAQIEy/b9Y1P891xr2esseU++dnq5UA8Kh/wEAAKBAmf5fPOr/c4ectM7EY8/68vB0pbouHPofAAAACpTp/yWi/j/vzyEHHjHi8eq5dKW6Phz6HwAAAAqU6f8lo/4/v8NBT1zzzvL7vZ+uVAPDof8BAACgQJn+Xyrq/wv2PGzwCwt++K8e6Uo1KBz6HwAAAAqU6f+lo/6/cOrQczf5YbUX30hXqhvCof8BAACgQJn+bxL1f68Gez33Y9svW3RPV6rB4dD/AAAAUKBM/y8T9f9FIwetVuvc8ZSe6Ur1z3DofwAAAChQpv+Xjfr/4uEP1LpcfdW1H6Qr1Y3h0P8AAABQoEz/Lxf1/yVNTph0Z/8lP9gnXaluCof+BwAAgAJl+n/5qP8vPfTlxQ7bY8KmM+vMDAn/r/8BAACgQJn+XyHq/94fLf5d//Uu6D4pXaluDof+BwAAgAJl+r9p1P+Xvd5u/EszRl21fbpS3RIO/Q8AAAAFyvT/ilH/9znj5/Xb1cZd8WC6Ut0aDv0PAAAABcr0/0pR/1/+XpsXHvys8bGLpivVbeHQ/wAAAFCgTP+vHPX/FSfOWrPrqKFbNE1XqtvDof8BAACgQJn+XyXq/75nj2+04BFHf/JEulLdEQ79DwAAAAXK9P+qUf9fOXrhKXMumHPdRulKdWc49D8AAAAUKNP/zaL+v+rqg2578vbNegxMV6q7wqH/AQAAoECZ/m8e9f8/2g3ZftfR1zW/KF2p7g6H/gcAAIACZfp/taj/+zUfevgqq+z73OrpSjU0HPofAAAACpTp/9Wj/r/6xsN6fT97+COD05VqWDj0PwAAABQo0/8tov6/5oDt5/66xsmdN09XqnvCof8BAACgQJn+XyPq/2u/7L1Kwx2eb7ROulLdGw79DwAAAAXK9P+aUf/3nzVq670HN/iqX7pS3RcO/Q8AAAAFyvT/WlH/D+h4zie3XTrkwSpdqe4Px1/93+jf+MgAAADA35Tp/5ZR/1+36cQNj9y/6x63pivVA+Hw/h8AAAAKlOn/VlH/X3/JyhMGtZ/R9F/pSjU8HPofAAAACpTp/7Wj/h84aK2fxkxuO2eZdKV6MBz6HwAAAAqU6f/WUf8PWnfS0hvM+OaKDdOV6qFw6H8AAAAoUKb/14n6/4arV//t3vVaHXtNulI9HA79DwAAAAXK9P+6Uf8Pbjel6QF79NmiT7pSPRIO/Q8AAAAFyvT/elH//7P5Z5sv2n/HT9ZIV6pHw6H/AQAAoECZ/l8/6v8bb1zhwz+vnnjdPelKNSIc+h8AAAAKlOn/DaL+v+m3qQ/u2Llpj4XTleqxcOh/AAAAKFCm/9tE/T9ku3U6PtZ2RPOV0pXq8XDofwAAAChQpv83jPr/5v2WPXHSDz2eezZdqf4VDv0PAAAABcr0f9uo/2/5bkK/pRbs98j86Ur1RDj0PwAAABQo0/8bRf1/6w9tP1nsnU6d705XqifDof8BAACgQJn+bxf1/237/rr1HyMmNXo4XalGhkP/AwAAQIEy/b9x1P+3b/vGKvcc2+yrOo1fPRUO/Q8AAAAFyvT/JlH/3zGn8dwDezzz4C3pSvV0OPQ/AAAAFCjT/+2j/r/z6vuWvuWe8/bYMl2pngmH/gcAAIACZfp/06j/72rX/acTX36r6drpSvXX7wTU/wAAAFCgTP9vFvX/3c27TGi/zNJzLk9XqlHh0P8AAABQoEz/bx71/9Abr93w1fUmHFNLV6rnwqH/AQAAoECZ/t8i6v9hm3b+cK8ZS152W7pSPR8O/Q8AAAAFyvT/llH/33PJ9Zvf3n/UW4+nK9XocOh/AAAAKFCm/7eK+v/eQQ82nbnHBW2bpCvVmHDofwAAAChQpv+3jvr/vnWP+22Bzl/2vCFdqV4Ih/4HAACAAmX6f5uo/+/f8sIPH716tRs3S1eqF8Oh/wEAAKBAmf7fNur/B/o8ufk2P1z1xrrpSvVSOPQ/AAAAFCjT/9tF/T98wCVNm7TtuN7V6Uo1Nhz6HwAAAAqU6f/to/5/sNUOv339zuNd26Ur1bhw6H8AAAAoUKb/O0T9/9C0Yy6dt+BZzwxKV6qXw6H/AQAAoECZ/t8h6v+H97rt6EWO/fDbXulK9Uo49D8AAAAUKNP/O0b9/8gON+60/4jlF1wtXaleDYf+BwAAgAJl+n+nqP8fnXfwXffd03vb4elK9Vo49D8AAAAUKNP/O0f9P+LKebue1KPDrYukK9X4cOh/AAAAKFCm/3eJ+v+xNpsOG7LM1F9WTFeq18Oh/wEAAKBAmf7fNer/x9eoXfHyy62XeTJdqd4Ih/4HAACAAmX6f7eo//91y4snbPbZj8fcnK5UE8Kh/wEAAKBAmf7fPer/J7Zs1OvWWpvLtkhXqjfDof8BAACgQJn+7xj1/5N9nj+88xG3vNU6XaneCof+BwAAgAJl+n+PqP9HDpizfaNR3dpeka5Ub4dD/wMAAECBMv3fKer/p1ptedsvt4/puUC6Ur0TDv0PAAAABcr0/55R/z+96+vv735BdePQdKV6Nxz6HwAAAAqU6f+9ov5/5scF241a5f43HkpXqvfCof8BAACgQJn+3zvq/2cnb9hk2uju6y2VrlTvh0P/AwAAQIEy/d856v9R3X6ZufwaA7sOS1eqD8Kh/wEAAKBAmf7fJ+r/5xaY/EfH2V2eWShdqT4Mh/4HAACAAmX6f9+o/58ftdqqzw6e/e3K6Ur1UTj0PwAAABQo0//7Rf0/+r7lt5q6Q/sFR6Ur1cRw6H8AAAAoUKb/u0T9P2bJTz9eYf+7tm2brlQfh0P/AwAAQIEy/b9/1P8vHHVe248vPfLWa9OV6pNw6H8AAAAoUKb/D4j6/8XPRr65/uRXfrksXak+DYf+BwAAgAJl+v/AqP9ferXXj+e2X3iZFulK9Vk49D8AAAAUKNP/B0X9P/bUHZe6/OXzlhiXrlSfh0P/AwAAQIEy/d816v9xb186e6llnvnp+HSlmhQO/Q8AAAAFyvT/wVH/v3zcditO6rH0XeenK9UX4dD/AAAAUKBM/3eL+v+V88/e7LF73urwWbpSfRkO/Q8AAAAFyvT/IVH/vzr22Q92HNFp0c7pSjU5HPofAAAACpTp/0Oj/n+t7/Sb5j+233c/pSvVlHDofwAAAChQpv8Pi/p//AYtL5i1YLMnvkpXqr/+TP8DAABAgTL9f3jU/6+3WOqQO96ZdECHdKX6OhzZ/n//0FtaL7TTjS3/808OAAAA/N/K9P8RUf+/cfM7z+zZtmnrP9OV6ptweP8PAAAABcr0/5FR/0/oOvP5nX+Y+ErXdKX6Nhz6HwAAAAqU6f+jov5/86sNVn/q6h4375auVFPDof8BAACgQJn+Pzrq/7dmLFT90HnEhd+mK9W0cOh/AAAAKFCm/4+J+v/tnV/7fKU9Wm18VLpSfRcO/Q8AAAAFyvT/sVH/v7PFSYt/2P+b98emK9X34dD/AAAAUKBM/x8X9f+7lw37fu0ZO14yIV2ppodD/wMAAECBMv1/fNT/7/Xv/9oF6/U5/LR0pfohHPofAAAACpTp/xOi/n+/5T7r/aN91yX2TVeqH8OxdON/8/MCAAAAf1+m/0+M+v+DvgNfXG7ykJ9mpSvVT+Hw/h8AAAAKlOn/7lH/f7jBnmtNvrTtXZ+nK9WMcOh/AAAAKFCm/0+K+v+jFsc3fGj/GR22S1eqn8Oh/wEAAKBAmf4/Oer/iTffP3n7HU5e9PV0pfolHPofAAAACpTp/1Oi/v/4j0P6zxk8/LsT05Xq13DofwAAAChQpv9Pjfr/k50Gn7Lg7AZPnJuuVDPDof8BAACgQJn+Py3q/08737FX1zWeP+DDdKX663cC6H8AAAAoUKb/T4/6/7Nvj3r0wdGbtT4iXal+C4f+BwAAgAJl+v+MqP8/n3rZ54+uMueV59OVanY49D8AAAAUKNP/PaL+n7TnNtU2F+x783vpSvV7OPQ/AAAAFCjT/2dG/f9Fh56rN7n9ugvPSFeqOeHQ/wAAAFCgTP+fFfX/l38+/fzXoxpv/Fu6Us0Nh/4HAACAAmX6/+yo/yf3XWW91Y4Y9/6B6Ur1Rzj0PwAAABQo0//nRP0/ZYMPXnuzdvQlHdOV6s9w6H8AAAAoUKb/e0b9/1WLL77v/dnQw39IV6p54dD/AAAAUKBM/58b9f/XN7dY/MxNOj47LV2p/XXofwAAAChQpv/Pi/r/my2+mvzdtKsO2SVdqYWv0f8AAABQokz/nx/1/7eXNWu46pWrLdwtXalV4dD/AAAAUKBM/18Q9f/U/k3X2q3Ll1Pnpiu1v34AQP8DAABAgTL9f2HU/9NafvziE7tecMcp6Upt/nDofwAAAChQpv97Rf3/3cU7rv/VwFHbvZWu1BYIh/4HAACAAmX6/6Ko/79v32v8MjOXXPbFdKXWMBz5/r/rP/3IAAAAwN+U6f+Lo/6fvs7I77Zde8KsY9KVWqNweP8PAAAABcr0/yVR//8w8LzFHhnfuvcn6Urtr8/rfwAAAChQpv8vjfr/x326nXbvklOPvDBdqTUOh/4HAACAAmX6v3fU/z9Nv+GaA07tsMGx6UptoXDofwAAAChQpv8vi/p/xu+3P7zoA73ffCVdqS0cDv0PAAAABcr0f5+o/3/e5sjOfz60/A07piu1RcKh/wEAAKBAmf6/POr/XzZ66enNT/zwnMnpSm3RcOh/AAAAKFCm/6+I+v/Xfg26jVvkrHV/Tldqi4VD/wMAAECBMv3fN+r/mf/c7MKbJjz+2l7pSm3xcPxf9X+v/9wjAwAAAH9Tpv+vjPp/VrO5Q05+qfuzZ6YrtSXC4f0/AAAAFCjT/1dF/f/bxVud+WvT+w95J12pLRkO/Q8AAAAFyvT/P6L+n93+t+sa9qwWHpOu1JYKh/4HAACAAmX6v1/U/7+vM/qxve8eM/WwdKX2V/frfwAAAChQpv+vjvp/zsD5u9z2VLc7vk9Xak3Cof8BAACgQJn+vybq/7m/zmq+wjG3bNcpXaktEw79DwAAAAXK9P+1Uf//0anNmKmN2iy7f7pSWzYc+h8AAAAKlOn//lH//3nQwl88O/HHWb+nK7XlwqH/AQAAoECZ/h8Q9f+8SeMbdNxi4d7bpCu15cOh/wEAAKBAmf6/7n/2f63Bc8ccu/7nrxz5RbpSWyEc+h8AAAAKlOn/66P+n6/nbX0/7nXkBr+mK7Wm4dD/AAAAUKBM/w+M+r866cb7Lu9615td0pXaiuHQ/wAAAFCgTP8Pivq/9s7Bu5y7bfsbJqYrtZXCof8BAACgQJn+vyHq//lvnXf3s0Nmn3NOulJbORz6HwAAAAqU6f/BUf8v0HTTDh3/6LLuSelKbZVw6H8AAAAoUKb//xn1f8PFaket0Hzga6+lK7VVw6H/AQAAoECZ/r8x6v9GI17sM3XCpJebpSv/4zP6HwAAAAqU6f+bov5fcNlGJ56ySLOWF6crtebh0P8AAABQoEz/D4n6v/H9z/e75MR+512frtRWC4f+BwAAgAJl+v/mqP8XemLOg+8/1GnIJulKbfVw6H8AAAAoUKb/b4n6f+Fqy44tHnjrnafSlVqLcOh/AAAAKFCm/2+N+n+RTt0bH33q0u1WSFdqa4RD/wMAAECBMv1/W9T/i/5637Trl3zmsMXSldqa4dD/AAAAUKBM/98e9f9ik6595fnx5/W6P12prRUO/Q8AAAAFyvT/HVH/L35Ql5Ybrt1nxrLpSq1lOPQ/AAAAFCjT/3dG/b/E4B77rD1zx6VHpCu1VuHQ/wAAAFCgTP/fFfX/kqs/+viHA7/Z6Y50pbZ2OPQ/AAAAFCjT/3dH/b/UJlcM+seure6eL12ptQ6H/gcAAIACZfp/aNT/S/+jU48Luoz44R/pSm2dcPxf9v+C/5lHBgAAAP6mTP8Pi/q/yezv//nUlT0WWz9dqa0bDu//AQAAoECZ/r8n6v9ltm999s7TJh7YPl2prRcO/Q8AAAAFyvT/vVH/L9tlyQNW2qTpU/9MV2p/fU+A/gcAAIACZfr/vqj/l/v+/ad+aP78y8+kK7UNwqH/AQAAoECZ/r8/6v/lOy2zZ48/GrRcNV2ptQmH/gcAAIACZfr/gaj/V/j17UcuGzL8vDr/eH9tw3DofwAAAChQpv+HR/3fdNK3A97a9uQh96Yrtbbh0P8AAABQoEz/Pxj1/4oHrX9q864z3lkzXaltFA79DwAAAAXK9P9DUf+v1P7jRoN7tW13abpSaxcO/Q8AAAAFyvT/w1H/r3xx0ynHfz7ksAHpSm3jcOh/AAAAKFCm/x+J+n+Vgc1e2GqLrr3apCu1TcKh/wEAAKBAmf5/NOr/Vdf5as3xE4fOuDJdqbUPh/4HAACAAmX6f0TU/83WX6DHm42OXrpVulLbNBz6HwAAAAqU6f/Hov5vfv2YQasdM26nrdKV2mbh0P8AAABQoEz/Px71/2oXzX78zKca331TulLbPBz6HwAAAAqU6f9/Rf2/+uZb79P77ut+WCJdqW0RDv0PAAAABcr0/xNR/7foNOSpbXruu9gj6Upty3DofwAAAChQpv+fjPp/jV8POuDRpnMOvOt/Gfjvn6z99W8C6H8AAAAoUKb/R0b9v+akw87++qXNnmqUrtS2Dof+BwAAgAJl+v+pqP/XOmjoP5v8MXutq9KV2jbh0P8AAABQoEz/Px31f8vZR53ar3n7l9ZLV2rbhkP/AwAAQIH+D/0fvsd/vmei/m+1/R0Dzt92YP9N05XaduHQ/wAAAFCgzPv/Z6P+X7vL4EdaDely+o3pSm37cOh/AAAAKFCm/0dF/d/6+0Nmz5s3b7Pl0pVah3DofwAAAChQpv+fi/p/nT92OfXErgtPfCxdqe0QDv0PAAAABcr0//NR/6+709UDbtnirqtvT1dqO4ZD/wMAAECBMv0/Our/9To/9sirnx95Up2V2k7h0P8AAABQoEz/j4n6f/1vT9+zfaNbVhqZrtR2Dke2/+f/zz8yAAAA8Ddl+v+FqP83aL3XOs0mdvtj+XSltks4vP8HAACAAmX6/8Wo/9tcO+j1t5/68Z7F05XaruFY+n98OQAAAFCMTP+/FPX/hr0f+KHPMW12fiBdqe0WDu//AQAAoED/x/6fb/iAng3mGxv1f9utT1j0jJ73z9c8XantHg79DwAAAAXKvP8fF/X/Rru9/MXDd3f//JJ0pdYxHPofAAAACpTp/5ej/m/30+INtntpzIjr0pXaHuHQ/wAAAFCgTP+/EvX/xlPaNV+2abXvxulKrVM49D8AAAAUKNP/r0b9v8khP4+ZssiHay2ZrtT2DIf+BwAAgAJl+v+1qP/b/9Gm5YUTln/p0XSltlc49D8AAAAUKNP/46P+33SnWa9c9dDj/e9MV2p7h0P/AwAAQIEy/f961P+bdR4/7YMTzzq9YbpS6xwO/Q8AAAAFyvT/G1H/b/7two1bnzp1s77pSm2fcOh/AAAAKFCm/ydE/b9F398uHPBA64kt05XavuHQ/wAAAFCgTP+/GfX/lhtsNeTQ8b2v3jpdqe0XDv0PAAAABUr6v9Yg7v+3ov7fqsX8T2+0ZIeThqQrtS7h0P8AAABQoMz7/7ej/t/65tHdxs4ctdJa6Upt/3DofwAAAChQpv/fifp/mxff2rf/2hf80TtdqR0QDv0PAAAABcr0/7tR/297YZN/HbbrhHv6pyu1A8Oh/wEAAKBAmf5/L+r/7U5Yb2C7gUvuvEG6UjsoHPofAAAACpTp//ej/t/+zW/OeOnKq+Z7Ol2pdQ2H/gcAAIACZfr/g6j/O9y16421Lh0/XyVdqR0cDv0PAAAABcr0/4dR/++w6lXn/LjJlyMapyu1buHQ/wAAAFCgTP9/FPX/jgs/vv+d01bb9750pXZIOPQ/AAAAFCjT/xOj/t/p4VNGdmm67547pSu1Q8Oh/wEAAKBAmf7/OOr/nZd+ZK/xL1338JR0pXZYOPQ/AAAAFCjT/59E/b/LPWc8utXdm02Zka7UDg+H/gcAAIACZfr/06j/d31mj/7H95wz/57pSu2IcOh/AAAAKFCm/z+L+n+3RpefMviYozt+nK7UjgyH/gcAAIACZfr/86j/d9/1g40mPjX0/gvSldpR4dD/AAAAUKBM/0+K+r/jj6u813Ji49+OS1dqR4dD/wMAAECBMv3/RdT/e0xuMeu8RuNWeDVdqR0TDv0PAAAABcr0/5dR/3fq9sUyV3/e9oRT05XaseHQ/wAAAFCgTP9Pjvp/z5ueO27QFjP6vp2u1P76mQD9DwAAAAXK9P+UqP/3WrPhlUd27frpC+lK7fhw6H8AAAAoUKb/v4r6f+8Nt7h3g15Dtj46XamdEA79DwAAAAXK9P/XUf93vvz3nccMaXDm1HSldmI49D8AAAAUKNP/30T9v8/c/Yc23Pb5QTunK7Xu4dD/AAAAUKBM/38b9f++O968w6/NTx5zSLpSOykc+h8AAAAKlOn/qVH/77f3nUfe9sfw1f5IV2onh0P/AwAAQIEy/T8t6v8u3xx+2d7Teuz5UbpSOyUc+h8AAAAKlOn/76L+33/XW7uP22TEw2enK7VTw6H/AQAAoECZ/v8+6v8Dfjz66s27NJ1ycrpSOy0c+h8AAAAKlOn/6VH/Hzi56/CTr5w4//h0pXZ6OPQ/AAAAFCjT/z9E/X9Qt3/uftPAHTtum67UzgiH/gcAAIACZfr/x6j/u2553GYtdu1z/5fpSq1HOPQ/AAAAFCjT/z9F/X9wnwc/eH/tVr/9kq7UzgyH/gcAAIACZfp/RtT/3QZcP/uSmd+ssF+6UjsrHPofAAAACpTp/5+j/j+kVecVT1ly6RO+S1dqf/1OQP0PAAAABcr0/y9R/x+69kM7nzj+rb57pCu1c8Kh/wEAAKBAmf7/Ner/w645895bHjjv0wPSlVrPcOh/AAAAKFCm/2dG/X/4pbtf+eqpz2w9J12pnRsO/Q8AAAAFyvT/rKj/j9iq73HtT2x25lnpSu28cOh/AAAAKFCm/3+L+v/IXVte9sdDkwa9m67Uzg+H/gcAAIACZfp/dtT/R/04/cjFJnQaMzpdqV0QDv0PAAAABcr0/+9R/x89+Z0dDlyk32qHpiu1C/9/eFQAAADg/1Gm/+dE/X9Mt6WG3jN03O/vpCu1XuHw/h8AAAAKlOn/uVH/Hzt3wu5tz2284pnpSu2icOh/AAAAKFCm//+I+v+4HZcd/tyKQzsdlq7ULg6H/gcAAIACZfr/z6j/j997nauvG3v08DHpSu2ScOh/AAAAKFCm/+dF/X/CN1O7H/PRnK87pSu1S8Oh/wEAAKBA/3H/Vw2i/j9x2MwDD2q4WcPv05Va73DofwAAAChQpv/ni/q/+1IbPDHs6Ov2/j1dqV0WDv0PAAAABcr0fxX1/0kNFxo8d+S+j+6frtT6hEP/AwAAQIEy/V+L+v/kp187d/GDhz//RbpSuzwc+h8AAAAKlOn/+aP+P+WC6Y2Wu+jkZtukK7UrwqH/AQAAoECZ/l8g6v9TX2g5ZfKk58/okq7U+oZD/wMAAECBMv3fMOr/0yYs9cJDWza4/td0pXZlOPQ/AAAAFCjT/42i/j/9+HfW3L7ZkI/PSVdqV4VD/wMAAECBMv2/YNT/Z6xy5suXze265cR0pfaPcOh/AAAAKFCm/xtH/d/jzoda97hpxnGvpSu1fuHQ/wAAAFCgTP8vFPX/mQ/1Xaj5Nm0vPyldqV0dDv0PAAAABcr0/8JR/5+10O7fvLXfN7/vkq7UrgmH/gcAAIACZfp/kaj/zx7Wr7Zz31YrTktXateGQ/8DAABAgTL9v2jU/+cstfOkp6b26TQ3Xan1D4f+BwAAgAJl+n+xqP97NjztuR823nF4t3SlNiAc+h8AAAAKlOn/xaP+P/fpEaut1Hri12+lK7XrwqH/AQAAoECZ/l8i6v/zPttpnztnNW14SrpSuz4c+h8AAAAKlOn/JaP+P/+oix7vMmjE3sekK7WB4dD/AAAAUKBM/y8V9f8Fpz41qLZbj0dfTFdqg8Kh/wEA/j/27jzq67Hv9z99P98ShShDSKaMyZwhJHKZyVjmq0zJFCEhMiZzxpQhkciQmUjmDBkjcxnKEELImH7r3uvodx97H9d9Hdve917r+OPx+Md7nXW+1uffZ5/T9wSAAmX6f/Go/894+fQTv7/zkqfOSFdq14ZD/wMAAECBMv3fPOr/M1e48NX2x+3a+qN0pTYkHPofAAAACpTp/xZR/w8YuvNazy76SZ+X0pXadeHQ/wAAAFCgTP8vEfX/WZee3PSyia2vOiJdqQ0Nh/4HAACAAmX6f8mo/8/e8N7verwx7sNp6UptWDj0PwAAABQo0/9LRf1/zlaLzzey6Wmbb5uu1K4Ph/4HAACAAmX6f+mo/8/94+1P9zr6zZ5d0pXaDeHQ/wAAAFCgTP+3jPr/vO++e2b+excf+GO6UrsxHPofAAAACpTp/2X+R/93+48/rp2/1+orzOp4yMXLpyu1m8Kh/wEAAKBAmf5fNnr/P/CXr186YtitR41LV2rDw6H/AQAAoECZ/l8u6v8Ldm672tA/F9r4jnSldnM49D8AAAAUKNP/raL+H9RtycavtX7pvQXSldqIcPzr/q//tz4yAAAA8Ddl+n/5qP8v/OyNrztsvs9l56QrtVvC4f0/AAAAFCjT/62j/r/o7gH39P/k6t5t0pXareHQ/wAAAFCgTP+vEPX/xc3/sfPFAzZeZd10pTYyHPofAAAACpTp/xWj/r9kvtOPeu+A3569Il2p3RYO/Q8AAAAFyvT/SlH/Xzr2sUvWGNvgodXTldqocOh/AAAAKNC/6///+GLU/5f1HTJrvcOe2efCdKV2ezj0PwAAABQo8/5/laj/L3/6oEWfanh0bVi6UrsjHPofAAAACpTp/zZR/w+efOi6V71/56dbpCu10eHQ/wAAAFCgTP+vGvX/FUeNmHTYhHVH35eu1O4Mh/4HAACAAmX6f7Wo/69cav4OI5b5fodF05XaXeHQ/wAAAFCgTP+vHvX/VTdPmLLbqQe2apSu1O4Ox9/s//n/Tx4ZAAAA+Jsy/b9G1P9XPzRnbnXbjXNvTVdq94TD+38AAAAoUKb/14z6/5ommy33y73bXHxWulIbEw79DwAAAAXK9P9aUf9fe/dvs48++tyjWqcrtXvDof8BAACgQJn+bxv1/5DmWza/oemaG7dPV2rzfieA/gcAAIACZfp/7aj/r5uvvuFLb8x476p0pXZ/OPQ/AAAAFCjT/+2i/h869pl3Npl48mVLpyu1B8Kh/wEAAKBAmf5fJ+r/Ye+tM3zAog/1fixdqT0YDv0PAAAABcr0/7pR/1/fY/bWxx+31Cp3piu1h8Kh/wEAAKBAmf5fL+r/G06e2L3Nne89u3C6Uns4HPofAAAACpTp//Wj/r/xlQXPfHvHFR96IF2pPRIO/Q8AAAAFyvT/BlH/3/TqV5NevOazfZZIV2qPhkP/AwAAQIEy/b9h1P/D+7Rbd9Nfdq7Nn67UxoZD/wMAAECBMv2/UdT/Nx/cYtFj1rzo0xHpSm3e7wTQ/wAAAFCgTP+3j/p/xPuTZl2/UbPR7dKV2uPh0P8AAABQoEz/bxz1/y13916u64zXd7g4XamNC4f+BwAAgAJl+n+TqP9vbf7w3NGD+re6Ll2pPREO/Q8AAAAFyvT/plH/j5zv4ilz9x4/d+N0pTY+HPofAAAACpTp/82i/r9t7I4dmhx9Wo/705Xak+HQ/wAAAFCgTP93iPp/1FIXvHP1vePOapau1J4Kh/4HAACAAmX6f/Oo/2+/edcND31j8ckN05Xa0+HQ/wAAAFCgTP9vEfX/HQ+d2Hzdpm+2vyVdqT0TDv0PAAAABcr0/5ZR/49ucv/spxfdtf9q6Urt2XDofwAAAChQpv87Rv1/57K3vtNn4iU3DkpXas+FQ/8DAABAgTL9v1XU/3eN7LHh+Xe2fvn6dKX2fDj0PwAAABQo0/+dov6/+75uzScd98kaW6YrtQnh0P8AAABQoEz/bx31/z0L3Di79TUtu56brtReCIf+BwAAgAJl+n+bqP/HvDRu0MY7fvDoqulK7cVw6H8AAAAoUKb/O0f9f+9xpx7x8ponfrtOulJ7KRz6HwAAAAqU6f9to/6/75Cttr/xlweaDI7+fN73vBwO/Q8AAAAFyvT/P6L+v3/K+aOPmrF651bpSm1iOPQ/AAAAFCjT/9tF/f/AHatsc/tGX97yeLpSeyUc+h8AAAAKlOn/7aP+f3DRz0buu/e2349OV2qvhkP/AwAAQIEy/b9D1P8PVe+dv/Cg85s1Tldqr4VD/wMAAECBMv2/Y9T/Dz+x/KFzhu3fY+10pfZ6OPQ/AAAAFCjT/ztF/f/Ish9dcnjH68+6KF2pvREO/Q8AAAAFyvT/zlH/PzpymaOubL3+5KHpSu3NcOh/AAAAKFCm/3eJ+n/sfSvs/OSfs9pvkq7UJoVD/wMAAECBMv2/a9T/jy3wxT3rf3Js/wfTldpb4dD/AAAAUKBM/+8W9f/jvZq/d+Hmd9+4ZLpSezsc+h8AAAAKlOn/LlH/j3vjzc36HjDfy/9ipTY5HPofAAAACpTp/92j/n/iuS9brjXgqTVuTldq74RD/wMAAECBMv2/R9T/489Y+9eph23adal0pfZuOPQ/AAAAFCjT/3tG/f/kylv8OGjsH4+OTVdq74VD/wMAAECBMv2/V9T/T93wa7NT3t/r27vSldr74dD/AAAAUKBM/+8d9f/Tg55ep23DK5sskq7UPgiH/gcAAIACZfp/n6j/n1mnenPKMo07n52u1D4Mh/4HAACAAmX6v2vU/89uM3LzZSa8cMsK6Urto3DofwAAAChQpv+7Rf3/3F8HT/3ytsO+3yhdqU0Jh/4HAACAAmX6f9+o/5+fse9fj596W7Mr05Xa1HDofwAAAChQpv/3i/p/wm7Dlt110OvN+6YrtY/Dof8BAACgQJn+3z/q/xdmHfjL23s3+/n9dKX2STj0PwAAABQo0/8HRP3/4nbXtmiz0fjhr6QrtU/Dof8BAACgQJn+PzDq/5f2v3mD42f073hsulL7LBz6HwAAAAqU6f+Dov5/+fNDJg/45bPGn6UrtWnh0P8AAABQoEz/Hxz1/8TRGwx+Zs0Vv9wqXalND4f+BwAAgAJl+v+fUf+/0mzWcevseNHje6crtc/Dof8BAACgQJn+7x71/6v1F7occs3OB/yUrtS+CIf+BwAAgAJl+r9H1P+vjV/4/muOe6jdLulK7ctw6H8AAAAoUKb/D4n6//XT13rt0jtPfvWbdKX2VTj0PwAAABQo0/+HRv3/xoQZbU+b+N51f6QrtRnh0P8AAABQoEz/Hxb1/5uTXm+y2qJLndotXal9HQ79DwAAAAXK9P/hUf9P6rnEzA+anrve2+lKbd7/E6D/AQAAoECZ/j8i6v+3lntg/lZvbDPp5HSl9m049D8AAAAUKNP/PaP+f/u24z/79t4Z5x+crtRmhkP/AwAAQIEy/X9k1P+T79/u6UePXvOwp9OV2nfh0P8AAABQoEz/94r6/53Gl7Te4dTvm09PV2rfh0P/AwAAQIEy/X9U1P/vjt7p5ddvW/fnf6QrtR/Cof8BAACgQJn+Pzrq//eaDVp9pQk3Dt8tXanNCof+BwAAgAJl+v+YqP/fr49Z4ORlDuw4K12p/RgO/Q8AAAAFyvT/sVH/fzD+pBnnNHymcf90pfZTOPQ/AAAAFCjT/8dF/f/hh+cO6/B+gy8/TFdqP4dD/wMAAECBMv3fO+r/jw7buv9rY+98/OV0pTY7HPofAAAACpTp/+Oj/p9y/CkHDT3s6AN6piu1X8Kh/wEAAKBAmf4/Ier/qS+MH3fEgKvbTUpXar+GQ/8DAABAgTL93yfq/49f3n9mnwP2ebV3ulL7LRz6HwAAAAqU6f8To/7/pPd1Tc7f/LfrDktXar+HQ/8DAABAgTL9f1LU/58eelPbSZ9sfOqz6Urtj3D86/7/6tH/1mcGAAAA/p5M/58c9f9nUw97rfWft663XbpS+zMc3v8DAABAgTL93zfq/2mjn209vfUhk2akK7U54fjf6f+G/5ePDAAAAPxNmf4/Jer/6c0aPL1Ex5fOn5Ou1P4Kh/f/AAAAUKBM//eL+v/z+safdRq20GEHpSu1ueHQ/wAAAFCgTP+fGvX/F+P/mv/eX6e/s2C6Us079D8AAAAUKNP/p0X9/+VyHWasufLKG41KV6rwd/Q/AAAAlCjT/6dH/f/Vbb8v8O42g7qPT1eqBuHQ/wAAAFCgTP/3j/p/xv1Prn7RtTuevVy6UtXCof8BAACgQJn+PyPq/68bN3z5jHMnv3R5ulLN+wAA/Q8AAAAFyvT/mVH/fzNi2AordFtyzfXTlaoeDv0PAAAABcr0/4Co/79det9n3tzk0TNWTleqhuHQ/wAAAFCgTP+fFfX/zKYHf3re9L43nJeuVI3Cof8BAACgQJn+Pzvq/+8eHjnfiQ3O/qZDulLN+379DwAAAAXK9P85Uf9/f+I5px09pVPTG9KVqnE49D8AAAAUKNP/50b9/8NrnW644Ylvul2QrlQLhkP/AwAAQIEy/X9e1P+zPug7/qXubR9ZM12pFgqH/gcAAIACZfr//Kj/f/znEwdscsaYH25LV6om4dD/AAAAUKBM/w+M+v+nFsve9+eI3ovW05WqaTj0PwAAABQo0/8XRP3/8z3v77bIM1O3WSxdqRYOh/4HAACAAmX6f1DU/7Mf+7j3fsu3unVMulItEg79DwAAAAXK9P+FUf//Mn+bK0Y1fu6da9KVatFw6H8AAAAoUKb/L4r6/9cR0/qu93a10YbpStUsHPofAAAACpTp/4uj/v9t6RWve+rBO7qvmK5U8z4TQP8DAABAgTL9f0nU/783Xeqxq3r2OvvMdKWa1/36HwAAAAqU6f9Lo/7/4+Ep3Q7rM/ulJulK1Twc+h8AAAAKlOn/y6L+//Ottu2mjGq/5t3pStUiHPofAAAACpTp/8uj/p9zzNevtH1hyBmPpivVEuHQ/wAAAFCgTP8Pjvr/r35vfHNK8643LJOuVEuGQ/8DAABAgTL9f0XU/3OfXHLhQT+O+GZ4ulItFQ79DwAAAAXK9P+V/9n/1Xztp537c7vuTWvpSrV0OPQ/AAAAFCjT/1dF/T//xSse3nDXid2apytVy3DofwAAAChQpv+vjvq/wZCltt39iqaPPJSuVPM+E0D/AwAAQIEy/X9N1P+1labcMvySy37YNF2plg2H/gcAAIACZfr/2qj/q31O2/GQ3bssem26Ui0XDv0PAAAABcr0/5Co/+vfjr39mvXmbnNpulK1Cof+BwAAgAJl+v+6qP8b/nbmwGdmbnFr23SlWj4c+h8AAAAKlOn/oVH/N9p62yPXWX77m55KV6p536P/AQAAoECZ/h8W9f8Cn5wz4I5nBm7VI12pVgiH/gcAAIACZfr/+qj/G+/XqUe3EW1a9ElXqhXDof8BAACgQJn+vyHq/wV37dup6Rlf/DQ5XalWCof+BwAAgAJl+v/GqP8X+vmJm/7q3m/cvulKtXI49D8AAAAUKNP/N0X93+SRmdMef+Kx/X9NV6pVwqH/AQAAoECZ/h8e9X/TBqs13HVKiwW+S1eqNuHQ/wAAAFCgTP/fHPX/wksstuoyDd76aud0pVo1HPofAAAACpTp/xFR/y9y51vPfTm93dBf0pVqtXDofwAAAChQpv9vifp/0WNmP/r9JjP77ZWuVKuHQ/8DAABAgTL9f2vU/83eWme/WreOa3dKV6o1wqH/AQAAoECZ/h8Z9f9iTy7Yb59zB7z2cbpSrRkO/Q8AAAAFyvT/bVH/L95v4rW3XLvseUelK9Va4dD/AAAAUKBM/4+K+r/5wsec/M9tPjr81XSlahsO/Q8AAAAFyvT/7VH/t3hg1FWDVz5h/ffSlWrtcOh/AAAAKFCm/++I+n+JmwY/8Pyv9715arpStQtH1P8L/L96ZAAAAOBvyvT/6Kj/l2y5594bzux50/7pSrVOOLz/BwAAgAJl+v/OqP+XeuTqcfesN2qrv9KVat1w6H8AAAAoUKb/74r6f+kGux20/+4NW3yVrlTrhUP/AwAAQIEy/X931P8tlziy/wKXTPhpx3SlWj8c+h8AAAAKlOn/e6L+X+bOO4f9ccW+4yakK9UG4dD/AAAAUKBM/4+J+n/Z1w6asfWuQ/c/NF2pNgyH/gcAAIACZfr/3qj/lztxyAJj2m24wPHpSrVROPQ/AAAAFCjT//dF/d/qnyNWn/bjT1+9nq5U7cOh/wEAAKBAmf6/P+r/5T849OUlmy8y9Mh0pdo4HPofAAAACpTp/wei/m/97nnXLvTCq/1eSFeqTcKh/wEAAKBAmf5/MOr/Fbp37PfrqIPXnpquVJuGQ/8DAABAgTL9/1DU/yue1G+/O/sMf+30dKXaLBz6HwAAAAqU6f+Ho/5faeLjjx7Us8N5P6QrVYdw6H8AAAAoUKb/H4n6f+VHWu193YNzDt8jXak2D4f+BwAAgAJl+v/RqP9XafDuAz3f3mP9bdKVaotw6H8AAAAoUKb/x0b932aJT6/avPHgNz9PV6otw6H/AQAAoECZ/n8s6v9V71z55FfX67LL0elK1TEc+h8AAAAKlOn/x6P+X23hz4ftOfOye15LV6qtwqH/AQAAoECZ/h8X9f/qD7Tuf9slW/zxbrpSdQqH/gcAAIACZfr/iaj/17ip5UE/7j63Zb90pdo6HPofAAAACpTp//FR/6/Z8sNx8+3afY/Z6Uo173cC6H8AAAAoUKb/n4z6f60FXxr20BUj7tszXak6h0P/AwAAQIEy/f9U1P9txzTp3/nHpp9vna5U24ZD/wMAAECBMv3/dNT/a9+y0UHN2k1s9Em6Uv0jHPofAAAACpTp/2ei/m/X6vtxn77Q/sT90pVqu3DofwAAAChQpv+fjfp/nQ/ffOr35rOv/C1dqbYPh/4HAACAAmX6/7mo/9dtdt9Kjft0fXJmulLtEA79DwAAAAXK9P/zUf+vd/zaDQ4YNWSFndKVasdw6H8AAAAoUKb/J0T9v/4LX35894PVEU+mK9W8fxPQ/wAAAFCgTP+/EPX/Bo/vsEivns9d0D1dqXYOh/4HAACAAmX6/8Wo/zdseNG31zbu9dGJ6Uq1Szj0PwAAABQo0/8vRf2/0WIPTZz49h0d3klXql3Dof8BAACgQJn+fznq//ajjlt7y2d67/J9ulLtFg79DwAAAAXK9P/EqP83XvC+525dfsw9u6crVZdw6H8AAAAoUKb/X4n6f5MxfVbd+4xWf3ROV6p5/yag/wEAAKBAmf5/Ner/TW/ZpWGDEVNbfpGuVHuEQ/8DAABAgTL9/1rU/5u1Gjjthyc67dErXan2DIf+BwAAgAJl+v/1qP87nH7q4O27n33fi+lKtVc49D8AAAAUKNP/b0T9v/mEcceNbdD28ynpSrV3OPQ/AAAAFCjT/29G/b/FpPO7zJzyTaPT0pVqn3DofwAAAChQpv8nRf2/Zc+t7l9ukyVPfD5dqbqGQ/8DAABAgTL9/1bU/x3X6/LIdtMnX3lIulJ1C4f+BwAAgAJl+v/tqP+3GnjNvo+d2/fJE9KVat9w6H8AAAAoUKb/J0f932nYXad+1+3RFd5IV6r9wqH/AQAAoECZ/n8n6v+t2/Qasuw2Kx9xQLpS7R8O/Q8AAAAFyvT/u1H/b7P7iye9d+30C+amK9W8fxPQ/wAAAFCgTP+/F/V/5y8XuXKNX3f86Mt0pTowHPofAAAACpTp//ej/t/2zw0f7L/yoA47pCvVQeH4t/0/4L/nkQEAAIC/KdP/H0T9/49tf9zn4rfnbDIyXakODof3/wAAAFCgTP9/GPX/dtPWfXzJxh3erdKV6p/h0P8AAABQoEz/fxT1//YH/nLgtJ6DL/oXjV91D4f+BwAAgAJl+n9K1P877PDKGWMe3OPoe9OVqkc49D8AAAAUKNP/U6P+3/H7ha7fetSrK2+erlSHhEP/AwAAQIEy/f9x1P87jdvvvfn7LPLcjelKdWg49D8AAAAU6H/p/9r/0v+fRP2/c6PrN5vVfPjlA9OV6rBw6H8AAAAoUOb9/6dR/++y+G0tR75w8HFrpCvV4eHQ/wAAAFCgTP9/FvX/rrf/89e92g1tcFm6Uh0RDv0PAAAABcr0/7So/3frtfU5O/+472frpStVz3DofwAAAChQpv+nR/3f5Y1zD3viip8eXiVdqY4Mh/4HAACAAmX6//Oo/3d/bvw/Zuy64d7npytVr3DofwAAAChQpv+/iPp/jzNOuXXp3Uctv1C6Uh0VDv0PAAAABcr0/5dR/++50Ac7fHhJz79un2/+M/+XlerocOh/AAAAKFCm/7+K+n+ve5cb1W7mhDueSFeqY8Kh/wEAAKBAmf6fEfX/3reuesGp6zXccdl0pTo2HPofAAAACpTp/6+j/t9n+U96DVz5o002S1eq48Kh/wEAAKBAmf7/Jur/ruNWOnOxX5d9d0i6UvUOh/4HAACAAmX6/9uo/7s1mt79k2vvu+iSdKU6Phz6HwAAAAqU6f+ZUf/vu/jUrR/c5oSj10pXqhPCof8BAACgQJn+/y7q//1uX3r4tt1mrnxTulL1Ccff7P/a/8kjAwAAAH9Tpv+/j/p//5dmvPPXue2ea5CuVCeGw/t/AAAAKFCm/3+I+v+A49basOn0AZe3SFeqk8Kh/wEAAKBAmf6fFfX/gYcs0bzbJh2PezhdqU4Oh/4HAACAAmX6/8eo/w+a8vrsO6Y81qBpulL1DYf+BwAAgAJl+v+nqP8P/mj9Wx9q0O+ze9KV6pRw6H8AAAAoUKb/f476/5+H//yPzt3feviRdKXqFw79DwAAAAXK9P/sqP+7n/DaYc2eaLF3y3SlOjUc+h8AAAAKlOn/X6L+7/Fi43M+HTFw+avTleq0cOh/AAAAKFCm/3+N+v+QcaN7rXrG9n9tkK5Up4dD/wMAAECBMv3/W9T/hzY6+oK3lv/ijpXSlap/OPQ/AAAAFCjT/79H/X/Y4vuMOvOZNjsOSFeqM8Kh/wEAAKBAmf7/I+r/w2+/fIcTjjj4ig3TlerMcOh/AAAAKFCm//+M+v+IhfYY/tUDw4+/Jl2p5v1MgP4HAACAAmX6f07U/z3vvWrrlm8t0ubMdKU6Kxz6HwAAAAqU6f+/ov4/8tZ7uu+ywKsTVkxXqrPDof8BAACgQJn+nxv1f6/le545rsUel9ydrlTnhEP/AwAAQIH+ff/X5ov6/6h9h3/Y4MXBxzZJV6pzw6H/AQAAoECZ/p8/6v+jPz58ix9u77DZMulKdV449D8AAAAUKNP/DaL+P+anA5a/9cQ57z+arlTnh0P/AwAAQIEy/V+L+v/YXYbO2Xtww1G1dKUaGA79DwAAAAXK9H8V9f9xFz06YJddJmw/PF2pLgiH/gcAAIACZfq/HvV/743O6DFu7Z7LPZSuVIPCof8BAACgQJn+bxj1//Erdu701axRfzZPV6oLw6H/AQAAoECZ/m8U9f8J1559U8vvNnzw2nSluigc+h8AAAAKlOn/BaL+7/PNCrtOXf+nPTdNV6qLw6H/AQAAoECZ/m8c9f+Je39x11p77Dtf23SluiQc+h8AAAAKlOn/BaP+P6nTRxf1vXToJ5emK9W8r+l/AAAAKFCm/xeK+v/kX5c55sIhHa8Yla5Ul4VD/wMAAECBMv3fJOr/vvu+d26zzgOOXzBdqS4Ph/4HAACAAmX6v2nU/6d8vPzhn67Srs1y6Uo1OBz6HwAAAAqU6f+Fo/7v99Mq2z7028wJ49OV6opw6H8AAAAoUKb/F4n6/9RdPrul87QTLlk/XamuDIf+BwAAgAJl+n/RqP9Pa7vom3M2vu/Yy9OV6qpw6H8AAAAoUKb/m0X9f/o1k9dZuOuym52XrlRXh0P/AwAAQIEy/b9Y1P/9z/6m2b7nfPT+yulKdU049D8AAAAUKNP/i0f9f8Yma/x4e482o25IV6prw6H/AQAAoECZ/m8e9f+Zkz7c7pjxX2zfIV2phoRD/wMAAECBMv3fIur/AT1b3nH91O2XWzNdqa4Lh/4HAACAAmX6f4mo/886vfWFL9YG/nlBulINDYf+BwAAgAJl+n/JqP/PnvB5z01btXiwnq5Uw8Lxv9f/G/9fPTIAAADwN2X6f6mo/8+5f5vz5j791p63pSvV9eHw/h8AAAAKlOn/paP+P7fxWYc0ubnffGPSlWre7wTQ/wAAAFCgTP+3jPr/vOUe6dy1/2OfLJauVDeGQ/8DAABAgTL9v0zU/+ff1v+20ZdOnPZXulLdFA79DwAAAAXK9P+yUf8PrD++07p7NK3vn65Uw8Px7/r/zP+mRwYAAAD+pkz/Lxf1/wXj+9399PojuuyYrlQ3h8P7fwAAAChQpv9bRf0/aHTHS6/+rvuYr9KVakQ49D8AAAAUKNP/y0f9f2Gz844+dNbc3w5NV6pbwqH/AQAAoECZ/m8d9f9F+09efdW1t1hqQrpS3RoO/Q8AAAAFyvT/ClH/X/z5oi+/tctlO72erlQjw6H/AQAAoECZ/l8x6v9LZq0x48zBXe46Pl2pbguH/gcAAIACZfp/paj/L93umwVOOPGOqS+kK9WocOh/AAAAKFCm/1eO+v+yQa/26XV7ry2OTFeq28Oh/wEAAKBAmf5fJer/y9dZ4OprX3zuyNPTleqOcOh/AAAAKFCm/9tE/T945fUentiiunBqulKNDof+BwAAgAJl+n/VqP+vuOGnvbZcYMjTe6Qr1Z3h0P8AAABQoEz/rxb1/5Uz9h77+1tdV/ohXanuCof+BwAAgAJl+n/1qP+v2u2yro0fmH3y5+lKdXc49D8AAAAUKNP/a0T9f/U2d5xywBHtr94mXanuCYf+BwAAgAJl+n/NqP+v+euooXf3/2Zaj3SlGhMO/Q8AAAAFyvT/WlH/X7v/3cdtcHPb+lPpSnVvOPQ/AAAAFCjT/22j/h/y+RGDJzx9dpfJ6Up1Xzj0PwAAABQo0/9rR/1/3azd77+iVacxfdKV6v5w6H8AAAAoUKb/20X9P3S7K7scXJv626/pSvVAOPQ/AAAAFCjT/+tE/T9szcNXfXdqq6X2TVeqB8Oh/wEAAKBAmf5fN+r/6y8f/tya48fstHO6Uj0UDv0PAAAABcr0/3pR/99w7tBpZ/Tofdd36Ur1cDj0PwAAABQo0//rR/1/45YHNLzonEFT90pXqkfCof8BAACgQJn+3yDq/5s6PLHXZV133OKXdKV6NBz6HwAAAAqU6f8No/4ffl7fh3tsPP3Ij9OVamw49D8AAAAUKNP/G0X9f/PgTle3n7byhZ3SleqxcOh/AAAAKFCm/9tH/T9itXP6PPvbo0+/mq5Uj4dD/wMAAECBMv2/cdT/t+zfZuj8q/Rd6ah0pRoXDv0PAAAABcr0/yZR/9/6+cenzOo8+eRT05XqiXDofwAAAChQpv83jfp/5Kz3u44csuTV76Ur1fhw6H8AAAAoUKb/N4v6/7btlh27181vLbh7ulI9GQ79DwAAAAXK9H+HqP9HzZjS5bX+Lb7+Pl2pngqH/gcAAIACZfp/86j/b99tqfs7tHps/BfpSvV0OPQ/AAAAFCjT/1tE/X/HNisOPqKa78DO6Ur1TDj0PwAAABQo0/9bRv0/+q9pxw2d+sWSL6Yr1bPh0P8AAABQoEz/d4z6/86Zs7q0rbWZ3StdqZ4Lh/4HAACAAmX6f6uo/+/ac4P7p/QYePNp6Ur1fDj0PwAAABQo0/+dov6/u+PCgweN337rKelKNSEc+h8AAAAKlOn/raP+v+f3F447pet96x6SrlQvhEP/AwAAQIEy/b9N1P9jNp7R5J/nnPD68+lKtUm78Vu3O3btZvofAAAACpTp/85R/9971lozB0/76Jw30pXqpXDofwAAAChQpv+3jfr/vquXeO35jZc99IR0pXo5HPofAAAACpTp/39E/X//Wq+33XCVAWvNTVeqieHQ/wAAAFCgTP9vF/X/A12Pf/r73zq+ckC6Ur0SDv0PAAAABcr0//ZR/z/46QOta0NmDtkhXaleDYf+BwAAgAJl+n+HqP8fmn3J/Pt0btf3y3Slei0c+h8AAAAKlOn/HaP+f3in7T67ZY+fFnwtXaleD4f+BwAAgAJl+n+nqP8fmTlogS0u3fDro9OVat7vBNT/AAAAUKBM/+8c9f+je+4045Xvho7vl65Ub4ZD/wMAAECBMv2/S9T/Yzue9PKQ9fc98N10pZoUDv0PAAAABcr0/65R/z/2+5jVj1x7wpJ7pivVW+HQ/wAAAFCgTP/vFvX/40O2PujNWQ1nz05XqrfDof8BAACgQJn+7xL1/7iVzh23wuBRN3+SrlSTw6H/AQAAoECZ/t896v8n2o8fduIuPbfeOl2p3gmH/gcAAIACZfp/j6j/x198Sv/zbh+87m/pSjXvMwH1PwAAABQo0/97Rv3/5OSeJ046cY/X90tXqvfCof8BAACgQJn+3yvq/6eOuuea1i3mnLNTulK9Hw79DwAAAAXK9P/eUf8/3feqh/q82OHQmelK9UE49D8AAAAUKNP/+0T9/8zTe+x5/lvD1+qerlQfhkP/AwAAQIEy/d816v9nH/rhsU4LHPzKk+lK9VE49D8AAAAUKNP/3aL+f65J+273HvHqkHfSlWpKOPQ/AAAAFCjT//tG/f/8Uk37Tn9gkb4n/ps5/Q8AAAAFyvT/flH/T7j55euW6Nz39CHpSvVxOPQ/AAAAFCjT//tH/f/CfI17XzTk0WGbpSvVJ+HQ/wAAAFCgTP8fEPX/i2Nfu+KM35Z8Ya10pfo0HPofAAAACpTp/wOj/n/p7p/vW3OVyatfkq5Un4VD/wMAAECBMv1/UNT/Lzdff7d3N97x4AbpSjUtHPofAAAACpT2/7ze/w+1g6P+n9itR/Prpg0acFO6Uk0Ph/4HAACAAs2/xNL15//r9///jPr/lc9und3znJXffjhdqT4Ph/4HAACAAmV+/r971P+v/nLjO5t3nb5Bi3Sl+iIc+h8AAAAKlOn/HlH/v7Zztw1fHd9q23vSlerLcOh/AAAAKFCm/w+J+v/1S0/dfnKPqbc1TVeqr8Kh/wEAAKBAmf4/NOr/NzYcN3qVWu8fW6Yr1Yxw6H8AAAAoUKb/D4v6/80Vzh/Ue+qYxR5JV6qvw6H/AQAAoED/rv/n1uabL+r/SUO3OuKsp9vut0G6Un0TDv0PAAAABcq8/z8i6v+3vvvs/H+0+mbs1elK9W04ov5v+P/qkQEAAIC/KdP/PaP+f3uvVQ59oH+nmQPSlWpmOLz/BwAAgAJl+v/IqP8nb7X8Nh/ffPYiK6Ur1Xfh0P8AAABQoEz/94r6/50/3hu5+ANdT6/Sler7cOh/AAAAKFCm/4+K+v/dbsvsfMERQ4aNTFeqH8Kh/wEAAKBAmf4/Our/9z776J5+C7R/4d50pZoVDv0PAAAABcr0/zFR/7//yxeXrP3W7NX/ReNXP4ZD/wMAAECBMv1/bNT/H+y8wlEfvdjr4BvTleqncOh/AAAAKFCm/4+L+v/Dtd9seWiLOwZsnq5UP4dD/wMAAECBMv3fO+r/j65s/uvVJ1Zvr5GuVLPDof8BAACgQJn+Pz7q/ylnrv3e07c/t8HAdKX6JRz6HwAAAAqU6f8Tov6fuumXm627yxbbrpeuVL+GQ/8DAABAgTL93yfq/483WeiItoPn3nZZulL9Fg79DwAAAAXK9P+JUf9/cvYrg6bM6vLj+elK9Xs49D8AAAAUKNP/J0X9/+k1v4wetPZli62SrlR/hEP/AwAAQIEy/X9y1P+ftV13+1PWb7rf7elK9Wc49D8AAAAUKNP/faP+n9btipGPfzdx7ELpSjUnHPofAAAACpTp/1Oi/p/+2V7b7Hpp95nLpivVX+HQ/wAAAFCgTP/3i/r/81+OPXSZPUYs8kS6Us0Nh/4HAACAAmX6/9So/7/Y+fbzv3xs+0lj05X6vEP/AwAAQIEy/X9a1P9fftfrqOMPH7jeUulKPfwd/Q8AAAAlyvT/6VH/f7XXXZcMaNTmsEXSlXqDcOh/AAAAKFCm//tH/T9jq2vuefuDL86/K12p18Kh/wEAAKBAmf4/I+r/r//osnOb5/u9ukK6Uq/Cof8BAACgQJn+PzPq/2+6vHxb35aPtTs7XanP+wBA/Q8AAAAFyvT/gKj/v/26aecL+7U49cp0pd4wHPofAAAACpTp/7Oi/p85t/0hU0e+dd1G6Uq9UTj0PwAAABQo0/9nR/3/Xecfzltrq3ZfXpSu1Od9v/4HAACAAv3//T/vJ/j/5/4/J+r/78+f9PsG189svHa6Um8cDv0PAAAABcq8/z836v8fNm+x1IQ5HQ/YJF2pLxgO/Q8AAAAFyvT/eVH/z1q93SZXrDDg8aHpSn2hcOh/AAAAKFCm/8+P+v/HK7764OAOy/68ZLpSbxIO/Q8AAAAFyvT/wKj/f/pixw1u/fij5g+mK/Wm4dD/AAAAUKBM/18Q9f/PB1w8ee8zT+h4c7pSXzgc+h8AAAAKlOn/QVH/z97+4V8a7H/f8H+xUl8kHPofAAAACpTp/wuj/v/lx94tftih56RV05X6ouHQ/wAAAFCgTP9fFPX/r13u/6vX1aPWOzddqTcLh/4HAACAAmX6/+Ko/3/7+sRlr53d8LDB6Up9sXDofwAAAChQpv8vifr/97m7bj5xjQnnr5Ou1Od1v/4HAACAAmX6/9Ko///ofMHULdvv++rj6Uq9eTj0PwAAABQo0/+XRf3/Z5t+t5//9dB2rdKVeotw6H8AAAAoUKb/L4/6f86wx3fsc+GGpzZOV+pLhEP/AwAAQIEy/T846v+/Bp53ZOt9frpudLpSXzIc+h8AAAAKlOn/K6L+n7tex4GTxizyZbN0pb5UOPQ/AAAAFCjT/1f+Z//X51t8xsf3HvVq4/vTlfrS4dD/AAAAUKBM/18V9f/8t6/VoFOTgw+4JV2ptwyH/gcAAIACZfr/6qj/G4xbYqUlXh/+eMN0pb5MOPQ/AAAAFCjT/9dE/V9r9PpT01/p8POgdKW+bDj0PwAAABQo0//XRv1fnXD82q2bzWm+WrpSXy4c+h8AAAAKlOn/IVH/1198YOKk3nt03DJdqbcKh/4HAACAAmX6/7qo/xt+dMm35981ePj16Up9+XDofwAAAChQpv+HRv3f6PDtFumz//Rbeqcr9Xnfo/8BAACgQJn+Hxb1/wLPDZo288yVO09KV+orhOO/6P/af+cjAwAAAH9Tpv+vj/q/8Rk7NVzu40HNnk1X6iuGw/t/AAAAKFCm/2+I+n/BXietun2HHb8/LF2prxQO/Q8AAAAFyvT/jf/Z///xn+fGrjD50RnpSn3lcOh/AAAAKFCm/2+K3v83GfbxgF/nLNl1u3Slvko49D8AAAAUKNP/w6P+b9qmTY+Frn+0yUHpSr1NOPQ/AAAAFCjT/zdH/b/west2Omirvt/OSVfqq4ZD/wMAAECBMv0/Iur/RQa+f9OdI8++8R/pSn21cOh/AAAAKFCm/2+J+n/RHX798IF+nfpPT1fqq4dD/wMAAECBMv1/a9T/zb7fYot/tPxmjVnpSn2NcOh/AAAAKFCm/0dG/b/YtGr5xZ9v+/Ju6Up9zXDofwAAAChQpv9vO3O+Wrjrix/49JyPPxhz1ofpSn2tcOh/AAAAKFCm/0dF7/+br3HwYqs06t2jf7pSbxsO/Q8AAAAFyvT/7VH/t7hs5PeTD5/avme6Ul87HPofAAAACpTp/zui/l/inGFvnPVYq8kvpyv1duHQ/wAAAFCgTP+Pjvp/yS32Xb/3Xc/d8k26Ul8nHPofAAAACpTp/zuj/l9q2LXvft276rxLulJfNxz6HwAAAAqU6f+7ov5fus2Bmy7V7I5m3dKV+nrh0P8AAABQoH/T/wvMN1/t7qj/W653yDI7vdLr+z/Slfr64dD/AAAAUKDM+/97ov5fZuDNv41/ffajJ6cr9Q3C8V/0f+v/zkcGAAAA/qZM/4+J+n/Zr7tc2qhJ+65vpyv1DcPh/T8AAAAUKNP/90b9v1yXa47+6aghTZ5OV+obhUP/AwAAQIEy/X9f1P+tOt+1001jun57cLpSbx8O/Q8AAAAFyvT//VH/Lz+319177DPixvfTlfrG4dD/AAAAUKBM/z8Q9X/rPwfO2fXC7v37piv1TcKh/wEAAKBAmf5/MOr/FbbdZfnHv564xrHpSn3TcOh/AAAAKFCm/x+K+n/F3fts8WX7pi+/kq7UNwuH/gcAAIACZfr/4aj/V/ryvg+XWeOys7ZKV+odwqH/AQAAoECZ/n8k6v+Vhy26/pTZXXp8lq7UNw+H/gcAAIACZfr/0aj/V2kz+Y22V89t/1O6Ut8iHPofAAAACvSf/d8ofOV/6v+xUf+3We+b70/ZYYvJe6cr9S3Dof8BAACgQJn3/49F/b/qwDUWG9R7zg4fpSv1juHQ/wAAAFCgTP8/HvX/amt8+duid3UYfUa6Up/3mYD6HwAAAAqU6f9xUf+vftnay3z2yuC5R6Qr9U7h0P8AAABQoEz/PxH1/xrnNN/04WZ7tHopXalvHQ79DwAAAAXK9P/4qP/X3OLNd7dp8uo+26Yr9W3Cof8BAACgQJn+fzLq/7XWfva3Wa8v8tC0dKXeORz6HwAAAAqU6f+nov5ve2WDZeYfM/zTH9OV+ryfCdD/AAAAUKBM/z8d9f/aZ2686V5HHVzrkq7U/xEO/Q8AAAAFyvT/M1H/t9v0r3dHXji099fpSn27cOh/AAAAKFCm/5+N+n+dXz+85Yl99r1s+3SlPu9r+h8AAAAKlOn/56L+X7dTy213bv/TswemK/UdwqH/AQAAoECZ/n8+6v/19m59+NJfb7jKn+lKfcdw6H8AAAAoUKb/J0T9v/43n587Y/aoo45LV+o7hUP/AwAAQIEy/f9C1P8bXLvNke3W6Hnxm+lKfedw/O/1/6L/V48MAAAA/E2Z/n8x6v8NVzxr4Ic7THjvuXSlvks4vP8HAACAAmX6/6Wo/zfa6JHbB17dcOPD05X6ruHQ/wAAAFCgTP+/HPV/+4v673jqmR/t0DFdqe8WDv0PAAAABcr0/8So/zde+/GbPtl/2dGfpiv1LuHQ/wAAAFCgTP+/EvX/Jlf267RYh/vm/pyu1HcPh/4HAACAAmX6/9Wo/zc9s2OPbT8+odU+6Up9j3DofwAAAChQpv9fi/p/s03PG/DgnJn7fJCu1PcMh/4HAACAAmX6//Wo/zt0O/GXpiu0e+iUdKW+Vzj0PwAAABQo0/9vRP2/+Wf3t/hrqwGfHpOu1PcOh/4HAACAAmX6/82o/7f45YIN7ri+Y21iulKf95kA+h8AAAAKlOn/SVH/b7nzrpO79Xus90npSr1rOP5O/zf6P3xkAAAA4G/K9P9bUf93XOKgj5qM7HfZW+lKvVs4vP8HAACAAv0X/d8g3G9H/b/VnUO2nPv8W88+k67U9w2H/gcAAIACZd7/T476v9MjI1qNbtlilX+mK/X9wqH/AQAAoECZ/n8n6v+tGxz6Z9dGA4/6Nl2p7x8O/Q8AAAAFyvT/u1H/b3PShMWv/2D7hv9ipX5AOPQ/AAAAFCjT/+9F/d954vw/HPPYF+91TVfqB4ZD/wMAAECBMv3/ftT/27672eubHt5m49/TlfpB4dD/AAAAUKBM/38Q9f8/us9Z78Wru2y+RLpSPzgc+h8AAAAKlOn/D6P+3+7JLd/bY4fLPnwgXanP+50A+h8AAAAKlOn/j6L+377fb5vdtMYWA0ekK/Xu4dD/AAAAUKBM/0+J+n+HY55p+dPsuT3nT1fqPcKh/wEAAKBAmf6fGvX/jm/Vf230dffWF6cr9UPCof8BAACgQJn+/zjq/52G7PV45/YjnmqXrtQPDYf+BwAAgAJl+v+TqP93XumKAx/ap+lVG6cr9cPCof8BAACgQJn+/zTq/13a337GpxdO7HNdulI/PBz6HwAAAAqU6f/Pov7f9eJjr292VPuGrdOV+hHh0P8AAABQoEz/T4v6f7ddd/6k8ZjZX5yVrtR7hkP/AwAAQIEy/T896v8uP19Y+/31rvdfla7UjwyH/gcAAIACZfr/86j/d//k3hXvbjJk9/bpSr1XOPQ/AAAAFCjT/19E/b/Hfic/eUCzapnH0pX6UeHQ/wAAAFCgTP9/GfX/nu3ebnftK8/9vnS6Uj86HPofAAAACpTp/6+i/t/rqsVf6XVXr7sXTlfqx4RD/wMAAECBMv0/I+r/vQes/s2Wve/Y9c50pX5sOPQ/AAAAFCjT/19H/b/PZt8tPPHw3ptfmK7UjwuH/gcAAIACZfr/m6j/uw5pO33vx8Z8uHq6Uu8dDv0PAAAABcr0/7dR/3db6etGt37QauAW6Ur9+HDofwAAAChQpv9nRv2/b/s32vzQaGrPYelK/YRw6H8AAAAoUKb/v4v6f7+Ll3y2QctOrRdNV+p9wqH/AQAAoECZ/v8+6v/9Z067b+zzZz91X7pSPzEc+h8AAAAKlOn/H6L+P2DPFXfbfmTbq25NV+onhUP/AwAAQIEy/T8r6v8DOy7Ve7l+3/RplK7UT/4f/1lN/wMAAECJMv3/Y9T/B/0+5YqZ1y/ZcFy6Uu8bDv0PAAAABcr0/09R/x/82+ZPztpq8hfLpyv1U8Kh/wEAAKBAmf7/Oer/f279x4rzr9D3/gXSlXq/cOh/AAAAKFCm/2dH/d99n6dqe815dPc70pX6qeHQ/wAAAFCgTP//EvV/j28bfTLy45WXaZOu1E8Lh/4HAACAAmX6/9eo/w8ZcuvCPTpM//2cdKV+ejj0PwAAABQo0/+/Rf1/6Eo9vrls/x3vviJdqfcPh/4HAACAAmX6//eo/w9r3+2VZ88ctOu66Ur9jHDofwAAAChQpv//iPr/8ItvbNd+zYnXnJuu1M8Mh/4HAACAAmX6/8+o/49od8Czd/3S9KRV05X6gHDofwAAACjQv+n/2nzzzTcn6v+eVw1tc+A1I1ZcJ12pnxUO/Q8AAAAFyrz//yvq/yMHDG+04I7dnxmcrtTPDof+BwAAgAJl+n9u1P+9Njt8+m97zx3UKl2pz/udgPofAAAACvTv+7+aL+r/o46bVH9m0Ba9Hk9X6vM+E1D/AwAAQIEy/T9/1P9Hv9Tii3VmXLbl6HSlfl449D8AAAAUKNP/DaL+P2ZKu+cP2ajLlMbpSv38cOh/AAAAKFCm/2tR/x97yFcrX/PGHXfen67UB4ZD/wMAAECBMv1fRf1/3MiXu17atNfOzdKV+gXh0P8AAABQoEz/16P+771s07GnHf3c0g3TlfqgcOh/AAAAKFCm/xtG/X/8Au2HrnZv9est6Ur9wnDofwAAAChQpv8bRf1/wn0/nPLBnUPuXS1dqV8UDv0PAAAABcr0/wJR//d5fo+rWx3XdbdB6Ur94nDofwAAAChQpv8bR/1/4mlX9fl20dnV9elK/ZJw6H8AAAAoUKb/F4z6/6Qj7tnr0Yntp2+ZrtQvDYf+BwAAgAJl+n+hqP9PfrPnwzu8/801S6Ur9cvCof8BAACgQJn+bxL1f9/jRu//esO2J41NV+qXh0P/AwAAQIEy/d806v9TXjr6iZUOO3vFu9KV+uBw6H8AAAAoUKb/F476v9+UfW48eWynZxZJV+pXhEP/AwAAQIEy/b9I1P+nHnL56efcNnXQ2elK/cpw6H8AAAAoUKb/F436/7RG3RfqcGqrXiukK/WrwqH/AQAAoECZ/m8W9f/p42756rX/j707Ddt67P9+Tzl+h5RZhkyZhy5TGZJ5nkWkkCnJmITMSshMJMkQGSsSkSFJkiGEMhPSRbgyJUMirO1e99767/far3Xv27XW+m/b/uD1eqCvzvP4bMfTt5/zPFZ+ZIct05XawHDofwAAAChQpv+Xifq/1/A7Jt32co9PB6QrtZvDof8BAACgQJn+Xzbq/97LdtzwhOZXjdg4XakNCof+BwAAgAJl+n+5qP8vmjfyhofn77PfNelK7ZZw6H8AAAAoUKb/m0b932eXE87odPvMlW5LV2q3hkP/AwAAQIEy/b981P8Xd2jXbtEd1/5t63SltuC/Ceh/AAAAKFCm/1eI+v+S7wY88scRY0Y9nq7Ubg+H/gcAAIACZfp/xaj/L71ly6O273POASukK7XB4dD/AAAAUKBM/68U9X/ftWaPe33Ge4v8m5XaHeHQ/wAAAFCgTP83i/r/sq1evf2W7VaYeXe6UrszHPofAAAACpTp/5Wj/r/82ia9Tpp89Gf7/49/u+N/WakNCYf+BwAAgAJl+n+VqP+v2OSNm2YvddfC36YrtbvCof8BAACgQJn+XzXq/ytvWvTshqct2f6PdKW24GcC9D8AAAAUKNP/q0X9f1Wflod0GPHG6EPTldo94dD/AAAAUKBM/68e9f/V2/w8+t5RB/35brpSuzcc+h8AAAAKlOn/5lH/X3PWvbO/7NZ/lbPTldp94dD/AAAAUKBM/68R9f+1kzsv03Txbfc8Ol2p3R8O/Q8AAAAFyvT/mlH/X/dBx1Y7Tf1z+PPpSm1oOPQ/AAAAFCjT/2tF/d+v8x1TH92ymnZOulIbFg79DwAAAAXK9P/aUf9fP+SZhx6Y9XKbj9KV2vBw6H8AAAAoUKb/14n6/4Zm57U99KoTT309Xak9EA79DwAAAAXK9P+6Uf/3X2LHUxc/ZFi/7ulK7cFw6H8AAAAoUKb/14v6/8bRl13z1z5bvPR5ulIbEQ79DwAAAAXK9P/6Uf8PeG7tY7e5+ef1dkpXag+FQ/8DAABAgTL9v0HU/zed988+k+YedsYh6UptZDj0PwAAABQo0/8bRv0/8NQPhtze4rb+P6crtYfDof8BAACgQJn+bxH1/83vrLZz9+12/OztdKX2SDj0PwAAABQo0///iPp/0FkfD/9lRp+Fe6QrtVHh0P8AAABQoEz/bxT1/y2Tm+1T9dmkfdd0pfZoOPQ/AAAAFCjT/xtH/X/rB81PanfE96NfSFdqj4VD/wMAAECBMv2/SdT/t3X+8oq7djzjzz3TldrocOh/AAAAKFCm/zeN+v/2hZv+tdLtj64yK12pPR4O/Q8AAAAFyvT/ZlH/Dx779iqz5q+y55/pSu2JcOh/AAAAKFCm/1tG/X/Hw//a7tnmnww/Kl2pPRkO/Q8AAAAFyvR/q6j/72y6yfT9Xl532sx0pfZUOPQ/AAAAFCjT/5tH/T9k+cnXHLjyV232SFdqY8Kh/wEAAKBAmf7fIur/u0Ysdurd5+916gHpSu3pcOh/AAAAKFCm/7eM+v/upzZt++vQK/rNSVdqY8Oh/wEAAKBAmf7fKur/exr8+lDt6aYv9UpXas+EQ/8DAABAgTL93zrq/3vPOnjn57q+s97H6UptXDj0PwAAABQo0/9bR/1/3+T+Q1pV553xWrpSezYc+h8AAAAKlOn/NlH/3//BsD7HfzS2/4npSm18OPQ/AAAAFCjT/9tE/T+086nHDphxzhL/TFdqz4VD/wMAAECBMv2/bdT/w54bccUS2435Ycd0pTYhHPofAAAACpTp/+2i/h9+3kkn/XnECmM7pCu158Oh/wEAAKBAmf7fPur/B049YJ/hfd477Jd0pTYxHPofAAAACpTp/x2i/n/wnYHDD7t9n2XPTVdqL4RD/wMAAECBMv2/Y9T/I1646Ipvd7xqzrR0pfZiOPQ/AAAAFCjT/ztF/f9Qr91PWr352vdPTldqL4VD/wMAAECBMv2/c9T/I0+6YJ995s/c49R0pfZyOP73/d/w/5e3DAAAAPyH/h/7v8H/+Mciu0T9//CUp4c/tfJqW7yTrtQmhcPzfwAAAChQ5vn/rlH/P7LMoHeHvDz9nbPSldor4dD/AAAAUKBM/+8W9f+oYUduddDQHhcdk67UXg2H/gcAAIACZfp/96j/H32my/L18x85ZmK6UnstHPofAAAACpTp/z2i/n+suvvnn7tutH7bdKW24DMB9D8AAAAUKNP/e0b9P/r0hVbe7OlvX/kuXam9Hg79DwAAAAXK9P9eUf8/Pumlec9/tPPg39OV2hvh0P8AAABQoEz/7x31/xMfz/9gYHXJBR3Tldqb4dD/AAAAUKBM/+8T9f+TXdu0OW6pjkv0TldqU8Kh/wEAAKBAmf7fN+r/p174berfk2/54ZN0pTY1HPofAAAACpTp//2i/h/Ta/tWTUZsNfbVdKX2Vjj0PwAAABQo0//7R/3/9EmLLNPxtF8POyFdqb0dDv0PAAAABcr0f9uo/8dOeX72g91OXvaLdKX2Tjj0PwAAABQo0/8HRP3/zGObXbbsqAfm7J6u1N4Nh/4HAACAAmX6/8Co/8c1mtvls6mL3H9gulJ7Lxz6HwAAAAqU6f92Uf8/u+rru41e/MU9fkpXau+HQ/8DAABAgTL9f1DU/+OHNh66x6ztt9grXal9EA79DwAAAAXK9P/BUf8/N3/lEcts+fc736QrtQ/Dof8BAACgQJn+bx/1/4TdP9l/xiEHXjQ/Xal9FA79DwAAAAXK9P8hUf8/3+6r7o9fdf0xR6YrtWnh0P8AAABQoEz/d4j6f+LXa1y7+82Lr/9WulL7OBz6HwAAAAqU6f+OUf+/cPslnS/ZZ/Irp6UrtU/Cof8BAACgQJn+PzTq/xfX3e2i01p0Hnx8ulL7NBz6HwAAAAqU6f/Dov5/qWXvu9aee88FLy600C2//q8rtenh0P8AAABQoEz/Hx71/8tXjNnl/eqdczdIV2qfhUP/AwAAQIEy/d8p6v9JG54/bL+Pmg66Ol2pzQiH/gcAAIACZfr/iKj/X7l+3N7PPj128u3pSu2f4dD/AAAAUKBM/x8Z9f+rl15+8qyu5220fbpS+zwc+h8AAAAKlOn/o6L+f237na5c6fyvujyartS+CIf+BwAAgAJl+v/oqP8nn7H064cPXbfvUulKbWY49D8AAAAUKNP/x0T9//or728y7OUrptbTldqX4dD/AAAAUKBM/3eO+v+NT75bYv7Ke216X7pS+yoc+h8AAAAKlOn/Y6P+f/P4Ft8uOf/RnVdPV2pfh0P/AwAAQIEy/d8l6v8p9zW6foXmZ9wzLl2p/Ssc+h8AAAAKlOn/46L+n7r6m6d/seMncx9IV2qzwqH/AQAAoECZ/u8a9f9bjX856JHbV1l+0XSl9k049D8AAAAUKNP/x0f9//aoVqN26dPnqEvTldq34dD/AAAAUKBM/58Q9f87L95w5GVH7PjsuulK7btw6H8AAAAoUKb/T4z6/93eHZ7pud33szZLV2rfh0P/AwAAQIEy/X9S1P/vndxt8BozNml8Y7pS+yEc+h8AAAAKlOn/k6P+f3/qg73fmvvzuaPTldrscOh/AAAAKFCm/0+J+v+DM04csGeLLQYtn67UfgyH/gcAAIACZfq/W9T/H77y8Flj97lt8sLpSm1OOPQ/AAAAFCjT/6dG/f/RJzd1+OHmwza6J12p/RQO/Q8AAAAFyvR/96j/px1/0OOrXPVyl03SldrP4dD/AAAAUKBM/58W9f/HiwyZeO8hVd9r05XaL+HQ/wAAAFCgTP/3iPr/k2e7rtFhy2FTb01Xar+GQ/8DAABAgTL9f3rU/58+0GmhhrNO3LR1ulKbGw79DwAAAAXK9P8ZUf9PX+rWf85evP/OF6crtd/Cof8BAACgQJn+PzPq/8+WPXfUt1MPuqd5ulKbFw79DwAAAAXK9H/PqP9nDB9/0Oqj/py7VbpS+z0c+h8AAAAKlOn/s6L+/+e4vqfv023b5W9KV2p/hEP/AwAAQIEy/X921P+f13e5/qnT7jpqpXSlNj8c+h8AAAAKlOn/c6L+/+KMGb0vHHH0s2PTldqf4dD/AAAAUKBM/58b9f/MV9YbfN3kN2aNSFdqf4VD/wMAAECBMv1/XtT/X36y6jMfLbVk4yXSldrf4dD/AAAAUKBM/58f9f9Xx087coPe4z49KV2pFhz6HwAAAAqU6f8Lov7/+sWVHn/sngt2mJSuVOF79D8AAACUKNP/F0b9/6/e0zvsOPGtk6enK1WDcOh/AAAAKFCm/3tF/T/r5JlnLbf6slddmK5UDcOh/wEAAKBAmf7vHfX/N1PXGvBVg+sm/piuVIuEQ/8DAABAgTL9f1HU/9+eP6bXmE/brnlQulLVwqH/AQAAoECZ/u8T9f93E3rfvvezM87aNV2pFnwAgP4HAACAAmX6/+Ko/79/d7dxq3VufvOX6UpVD4f+BwAAgAJl+v+SqP9/6H7JUd/1nTazU7pSLXi9/gcAAIACZfr/0qj/Zz9011q/HNpskb/SlapROPQ/AAAAFCjT/32j/v9xheMnVFuPPuBf6Uq1WDj0PwAAABQo0/+XRf0/p+ERn7Wb2XPUPulK1Tgc+h8AAAAKlOn/y6P+/2nMbQ3u+u3r315OV6om4Vh2oYWq/+Z3DAAAAPynMv1/RdT/P7++9Xdd1t5gpePSlWrxcHj+DwAAAAXK9P+VUf//cvbfS9686+X7nZ6uVEuEQ/8DAABAgTL9f1XU/78e++LGEwftPmJKulItGQ79DwAAAAXK9P/VUf/P/bDh5E2vG/zp3HSlWioc+h8AAAAKlOn/a6L+/+38Ces90K7TDu3TlWrpcOh/AAAAKFCm/6+N+n/ehPqLh7acc/LO6Uq1TDj0PwAAABQo0//XRf3/+7vbfbH4962u+ixdqRZ0v/4HAACAAmX6v1/U/390/6P666eRE09JV6rlwqH/AQAAoECZ/r8+6v/5TRY9bfdNuq/5RrpSNQ2H/gcAAIACZfr/hqj//3zijf6Pt51w1ofpSrV8OPQ/AAAAFCjT//2j/v/r7p8fm3HjQjefn65UK4RD/wMAAECBMv1/Y9T/f6/Y8sBlzvxj5oR0pVoxHPofAAAACpTp/wH/1f/VQmceMOj8YW0WOTZdqVYKh/4HAACAAmX6/6ao/xd+Y+B5V0wacMCZ6UrVLBz6HwAAAAqU6f+BUf83+GjE4R8v137Ue+lKtXI49D8AAAAUKNP/N0f93/Dok8Zs0mjSb4elK9Uq4dD/AAAAUKBM/w+K+n+R5SYdMuvdRiv9lq5Uq4ZD/wMAAECBMv1/S9T/tZFLjF7p8aH7/ZCuVKuFQ/8DAABAgTL9f2vU/9XTm9+034ldR+yXrlSrh0P/AwAAQIEy/X9b1P/1heac/eygpYffla5UC16j/wEAAKBAmf6/Per/Re/e9Pa1d52yZ8N0pVojHPofAAAACpTp/8FR/zda8dde76/da5Xl0pVqzXDofwAAAChQpv/viPp/sSaTj7rkt/F/PpGuVGuFQ/8DAABAgTL9f2fU/42fWGzcaTPXHN0mXanWDof+BwAAgAJl+n9I1P9N/jhsXsutP28/KF2p1gmH/gcAAIACZfr/rqj/F9/p9pUnHLrfwv3SlWrdcOh/AAAAKFCm/++O+n+J9ve3uanvNZ9tlK5U64VD/wMAAECBMv1/T9T/S/5w9AddO5/d/+Z0pVo/HPofAAAACpTp/3uj/l9qo53v7fXsE2dska5UG4RD/wMAAECBMv1/X9T/S9986e7XfrriemumK9WG4dD/AAAAUKBM/98f9f8ylzx7/IcNPnzponSlahEO/Q8AAAAFyvT/0Kj/l936nL4brr5rvybpSvWPcOh/AAAAKFCm/4dF/b/cfh+d9MPEvqeOTFeqBZ8JoP8BAACgQJn+Hx71f9O5q1yxyj0t2oxJV6qNw6H/AQAAoECZ/n8g6v/lP193+J69Z01bOV2pNgmH/gcAAIACZfr/waj/Vzj0s33GnrjZ8G3TlWrTcOh/AAAAKFCm/0dE/b/iH2sOWePx2Xveka5Um4VD/wMAAECBMv3/UNT/K+30xc5vvXvkKlemK1XLcOh/AAAAKFCm/0dG/d+s/afHXtbozj9bpCtVq3DofwAAAChQpv8fjvp/5R9W7NNzuQajh6Yr1ebh0P8AAABQoEz/PxL1/yrXfDP39UkT29fSlWqLcOh/AAAAKFCm/0dF/b/qlhs13X5Yt4WXSVeqLcOh/wEAAKBAmf5/NOr/1dZcYfOTzhzx2SPpSrVVOPQ/AAAAFCjT/49F/b/6oKnv3XJjh/6LpStV63DofwAAAChQpv9HR/3f/LaWffu2HXjGsHSl2joc+h8AAAAKlOn/x6P+X2ONn48/a5PW641PV6o24dD/AAAAUKBM/z8R9f+aW7yx+5o/zXtp1XSl2iYc+h8AAAAKlOn/J6P+X6vfovdO/b5LvxvSlWrbcOh/AAAAKFCm/5+K+n/tPx7YZ7mW953aKl2ptguH/gcAAIACZfp/TNT/6+x0yvCv2jVus3a6Um0fDv0PAAAABcr0/9NR/6/b/pArHrvu1WmXpSvVDuHQ/wAAAFCgTP+Pjfp/vR+uP2nHxxvtsXi6Uu0YDv0PAAAABcr0/zNR/6+/X7s+H5046f6H05Vqp3DofwAAAChQpv/HRf2/wdwBx27QqOucp9KVaudw6H8AAAAoUKb/n436f8PPR+584btDl22WrlS7hEP/AwAAQIEy/T8+6v8Wh54w5LpJbQ4bmK5Uu4ZD/wMAAECBMv3/XNT//9irV5/Wy/0xdvN0pdotHPofAAAACpTp/wlR/2/001PHvnZm+x/WSleq3cOh/wEAAKBAmf5/Pur/jb+6eOc7hw1Yok+6Uu0RDv0PAAAABcr0/8So/zc5Ytchp7TtfsE26Uq1Zzj0PwAAABQo0/8vRP2/6Z1dPz7zxpGDb0lXqr3Cof8BAACgQJn+fzHq/83WGbL95T8t9Mp16Uq1dzj0PwAAABQo0/8vRf3fcrNbV397kwnr/yNdqfYJh/4HAACAAmX6/+Wo/1td3enP5i07HTMkXan2DYf+BwAAgAJl+n9S1P+b//3XMjO/H3xRg3Sl2i8c+h8AAAAKlOn/V6L+32K31rOXv67VO03TlWr/cOh/AAAAKFCm/1+N+n/LAxtM3bndnC2eTFeqtuHQ/wAAAFCgTP+/FvX/Vt+80GrUrhvscX26Uh0QDv0PAAAABcr0/+So/1vvVX3QYtDX97dMV6oDw6H/AQAAoECZ/n896v+tf3quzQe/7T5nnXSlahcO/Q8AAAAFyvT/G1H/t/nq95WvWfvyZS9PV6qDwqH/AQAAoECZ/n8z6v9tjth2Xu+tmx3WOF2pDg6H/gcAAIACZfp/StT/227/Zr+XZ04bOzxdqdqHQ/8DAABAgTL9PzXq/+0ubdRt8749f3g2XakOCYf+BwAAgAJl+v+tqP+3v77VvkcfOnqJVdKVqkM49D8AAAAUKNP/b0f9v8OGv4y88dm2F9yfrlQdw6H/AQAAoECZ/n8n6v8de8y876XO1w1eJF2pDg2H/gcAAIACZfr/3aj/d3ptrT22aND8lX/T+NVh4dD/AAAAUKBM/78X9f/O01fqesynM9Yfla5Uh4dD/wMAAECBMv3/ftT/uxw3/dL+Ey84Zrt0peoUDv0PAAAABcr0/wdR/++69IUnd1h93EV3pivVEeHQ/wAAAFCgTP9/GPX/bg+OvfLe3su+c0W6Uh0ZDv0PAAAABcr0/0dR/+8+vs+w2fe8tcWG6Up1VDj0PwAAABQo0//Tov7fo7bH3g3b3bfpS+lKdXQ49D8AAAAUKNP/H0f9v+fQvnfdcl2XqV3SleqYcOh/AAAAKFCm/z+J+n+vVXfZ5aTvX+17RrpSdQ6H/gcAAIACZfr/06j/9250buftWzbuMjVdqY4Nh/4HAACAAmX6f3rU//s8Nv6i1zcZuNER6Uq14GcC9D8AAAAUKNP/n0X9v+9fP7zQ76cOk/9OV6rjwqH/AQAAoECZ/p8R9f9+u26w7gU3zhv0dbpSdQ2H/gcAAIACZfr/n1H/73/AsvX127Y+d+90pTo+HPofAAAACpTp/8+j/m87692Z04ZNbDw7XalOCIf+BwAAgAJl+v+LqP8PWH/uLRPPbDCrXbpSnRgO/Q8AAAAFyvT/zKj/D+y/2fmbLjfi2d3SleqkcOh/AAAAKFCm/7+M+r/dZY0P6zKp21FfpSvVyeHQ/wAAAFCgTP9/FfX/Qdu+/tTN785e/uR0pTolHPofAAAACpTp/6+j/j94z+4d2jXabO4r6UrVLRz6HwAAAAqU6f9/Rf3ffs7wx+868c57Pk1XqlPDof8BAACgQJn+nxX1/yFf3jjgl8eP3PmCdKXqHg79DwAAAAXK9P83Uf936NT+rOqevpsenq5Up4VD/wMAAECBMv3/bdT/Hf+6efDtvXedOi9dqXqEQ/8DAABAgTL9/13U/4fuemDv7qvP6vt9ulKdHg79DwAAAAXK9P/3Uf8fdsDJR24zsUWXfdOV6oxw6H8AAAAoUKb/f4j6//BZDz0z6dMnNnouXanODIf+BwAAgAJl+n921P+drjzy1dManD25c7pS9QyH/gcAAIACZfr/x6j/j2g1aP1LOn84qGe6Up0VDv0PAAAABcr0/5yo/49c7+5G7z+74rnvpyvV2eHQ/wAAAFCgTP//FPX/UYO7fLP2oZ837pauVOeEQ/8DAABAgTL9/3PU/0ffcflTrfuuOevNdKU6Nxz6HwAAAAqU6f9fov4/Zu2dDntt5jXPfpCuVOeFQ/8DAABAgTL9/2vU/503Pf/8O7fe76jz0pXq/HDofwAAAChQpv/nRv1/7FXjbjll7SnL/5quVBeEQ/8DAABAgTL9/1vU/13+Wv2s4b8tPffgdKW6MBz6HwAAAAqU6f95Uf8ft+uHAw4bNP6eXdKVqlc49D8AAAAUKNP/v0f93/WAzx9fYtdeO89IV6re4dD/AAAAUKCk/6v4q4v8EfX/8bPW6fDnD61vbZ+uVBeFQ/8DAABAgTLP/+dH/X/Cnl89c3yreefPTVeqPuHQ/wAAAFCgTP//GfX/iXPWOHLAQR02+SxdqS4Oh/4HAACAAmX6/6+o/0/6cuXez/Ub+MbO6Up1STj0PwAAABQo0/9/R/1/cqdPBrfq3/jyN9KV6tJw6H8AAAAo0P++/2sLRf1/ykpNJ1yz/6tdT0lXqr7h0P8AAABQoEz/Lxz1f7d73l6r98ZdWp6frlSXhUP/AwAAQIEy/d8g6v9Tn/xXgxZz7nv7w3Sluvx//nmZ/gcAAIACZfq/YdT/3Rff5LMPmh5517HpSnVFOPQ/AAAAFCjT/4tE/X/am4vf/twrd+44IV2prgyH/gcAAIACZfq/FvV/j56v9Wo1fLPl3ktXqqvCof8BAACgQJn+r6L+P/2YH486vufsX85MV6qrw5Hv/+r/81sGAAAA/kOZ/q9H/X/GtK3GDTih2zO/pSvVNeHw/B8AAAAKlOn/RaP+P/Phm9odOHrEEYelK9W14dD/AAAAUKBM/zeK+r9n04MeufudBo32S1eq68Kh/wEAAKBAmf5fLOr/sxY+8YZfF5349Q/pStUvHPofAAAACpTp/8ZR/5899uEzaquteOukdKW6Phz6HwAAAAqU6f8mUf+fs1K3QXc+/+H5J6Ur1Q3h0P8AAABQoEz/Lx71/7n3PHjeKXefvcmF6UrVPxz6HwAAAAqU6f8lov4/78kbDm/d64k3pqcr1Y3h0P8AAABQoEz/Lxn1//mLdxjz2rEtLj8oXakGhEP/AwAAQIEy/b9U1P8XnHrvm2eMn9X1x3Sluikc+h8AAAAKlOn/paP+v/CdzhtdNH3Xll+mK9XAcOh/AAAAKFCm/5eJ+r/Xcx2bvNOw79u7pivVzeHQ/wAAAFCgTP8vG/V/7/Pu+H69L3rd9Ve6Ug0Kh/4HAACAAmX6f7mo/y+6/oT2n7Uev2OndKW6JRz6HwAAAAqU6f+mUf/32XDkk8t2XHq5fdKV6tZw6H8AAAAoUKb/l4/6/+LtBwzc49Ipv/wrXaluC4f+BwAAgAJl+n+FqP8vubTdmaNv2e+Z49KV6vZw6H8AAAAoUKb/V4z6/9LZs2/rsds1R7ycrlSDw6H/AQAAoECZ/l8p6v++e2957sXrrNloSrpS3REO/Q8AAAAFyvR/s6j/LzuyScf35n3+9enpSnVnOPQ/AAAAFCjT/ytH/X/5F68+vc6iA767I12phoRD/wMAAECBMv2/StT/V+y+6IHj32nfZNt0pborHPofAAAACpTp/1Wj/r9y/huP7Tv6j44t0pXq7nDofwAAAChQpv9Xi/r/qq9/7r/iCW3GXJmuVPeEQ/8DAABAgTL9v3rU/1e3a3naNz2Hzq6lK9W94dD/AAAAUKBM/zeP+v+a1TtvPnx416WHpivVfeHQ/wAAAFCgTP+vEfX/tffd+95hr0za7ZF0pbo/HPofAAAACpTp/zWj/r9u1B1zl2ja6N5l0pVqwf8T8H/v/4UX+W94zwAAAMB/JtP/a0X9369xx6Z/zpnz3rB0pVrwd57/AwAAQIEy/b921P/Xv3LeiTM3brXVYulKNTwc+h8AAAAKlOn/daL+v+GMZ65efv/Bx66arlQPhEP/AwAAQIEy/b9u1P/9j7/sgZ37d7p4fLpSPRgO/Q8AAAAFyvT/elH/3/jJjnuO6jfhtVbpSjUiHPofAAAACpTp//Wj/h8w/J9DzzxooQ1vSFeqh8Kh/wEAAKBAmf7fIOr/m5Zde7fLW43sdVm6Uo0Mh/4HAACAAmX6f8Oo/wfWV+vy9g/d71w7XakeDof+BwAAgAJl+r9F1P83j/vgsubzRn/XMF2pHgmH/gcAAIACZfr/H1H/D1q9Wben1+nZ5K50pRoVDv0PAAAABcr0/0ZR/99y38f99tptWscn0pXq0XDofwAAAChQpv83jvr/1lFfjlz1lmZjlktXqsfCof8BAACgQJn+3yTq/9saN9/3+0svnz0oXalGh0P/AwAAQIEy/b9p1P+3n/B2m0M67r50m3Slejwc+h8AAAAKlOn/zaL+H/xW0w/ua/31bhulK9WC3wmg/wEAAKBAmf5vGfX/HS9tMu/HLza4t1+6Uj0ZDv0PAAAABcr0f6uo/++84F8rN2j41ntbpCvVU+HQ/wAAAFCgTP9vHvX/kN6L7bna9GW3ujldqcaEQ/8DAABAgTL9v0XU/3e9OPmB78aPO/aidKV6Ohz/V/83/O97ywAAAMB/KNP/W0b9f/fUX68ec+wFF6+ZrlRjw+H5PwAAABQo0/9bRf1/z8mbnrh3rxmvjUxXqmfCof8BAACgQJn+bx31/72r97+s393NN2ySrlTjwqH/AQAAoECZ/t866v/77ju4ywXPX9dr5XSlejYc+h8AAAAKlOn/NlH/3z/q1N3WX63tnWPSlWp8OPQ/AAAAFCjT/9tE/T+08bCh09a5pmHLdKV6Lhz6HwAAAAqU6f9to/4fNvykfRf+9yvVhHDofwAAAChQpv+3i/p/+LIjRj56y+dPXJ6uVM+HQ/8DAABAgTL9v33U/w/UB/b7crc1O6yTrlQTw6H/AQAAoECZ/t8h6v8Hxx3QrWnH8asNT1eqF8Kh/wEAAKBAmf7fMer/EQ/tvu89l/b6u3G6Ur0YDv0PAAAABcr0/05R/z+0wkUjD/hiyoOrpCvVS+HQ/wAAAFCgTP/vHPX/yIZP91uk9dJ7P5uuVC+HQ/8DAABAgTL9v0vU/w+PuaDb3OmzWi+SrlSTwqH/AQAAoECZ/t816v9Hzj9y6R8atvjw/nSleiUc+h8AAAAKlOn/3aL+HzVh0E+rHNv32lHpSvVqOPQ/AAAAFCjT/7tH/f/ou3e/tef4XU/5N41fvRYO/Q8AAAAFyvT/HlH/P9a9y6Zj7/5wnTvTlWpyOPQ/AAAAFCjT/3tG/T965Zem9+q14gvbpSvV6+HQ/wAAAFCgTP/vFfX/43cttN21qz1x/YbpSvVGOPQ/AAAAFCjT/3tH/f/E421W+fD5s3tcka5Ub4ZD/wMAAECBMv2/T9T/Ty45/68N3xnR8OF0pZoSDv0PAAAABcr0/75R/z/10PZNH1m02z8XT1eqqeHQ/wAAAFCgTP/vF/X/mBV+m7vLCROfaBa+OP/vv/8OZ/VWOPQ/AAAAFCjT//tH/f90w+ffW2F0gw5PpSvV2+HQ/wAAAFCgTP+3jfp/7JhFNv9i+J2rbZ6uVO+EQ/8DAABAgTL9f0DU/898NHfnTj2P/HtgulK9Gw79DwAAAAXK9P+BUf+PO3qzIQ83nf1gn3Sleu///KNx9d/+fgEAAID/XKb/20X9/+yZjfv88cpme6+VrlTvh8PzfwAAAChQpv8Pivp//BuvH7voxq+2viVdqT4Ih/4HAACAAmX6/+Co/5+76ZMTjpjT+MNt0pXqw3DofwAAAChQpv/bR/0/YZOVrxrZ/75r/5GuVB+FQ/8DAABAgTL9f0jU/89vs8aDv+/f5ZTr0pVqWjj0PwAAABQo0/8dov6f2OervRodNG+dBulK9XE49D8AAAAUKNP/HaP+f+GX3e6f3K/1C0PSleqTcOh/AAAAKFCm/w+N+v/FtpfsusMPA69/Ml2pPg2H/gcAAIACZfr/sKj/Xzp8zHEnt+rQo2m6Uk0Ph/4HAACAAmX6//Co/1+e0fvyQc83P3NeulJ9Fg79DwAAAAXK9H+nqP8n7TLulAarzbjp8HSlmhGO/7T/q/8XbxkAAAD4D2X6/4io/1+Zd/51P/ZqO2HfdKX6Zzg8/wcAAIACZfr/yKj/X/1up4fvu/u65t+nK9Xn4dD/AAAAUKBM/x8V9f9rHS7f75Dxy57YOV2pvgiH/gcAAIACZfr/6Kj/Jzd7v9Fyx751xXPpSjUzHPofAAAACpTp/2Oi/n99yNLffNXwgo/fT1eqL8Oh/wEAAKBAmf7vHPX/G6NbvPrY9HHb9UxXqq/Cof8BAACgQJn+Pzbq/zeX+G79HVvv3vbNdKX6Ohz6HwAAAAqU6f8uUf9PmfzmwR2/uHxkt3Sl+lc49D8AAAAUKNP/x0X9P/WsRk88eOkGv5+XrlSzwqH/AQAAoECZ/u8a9f9bnVvd/HfHr1f+IF2pvgmH/gcAAIACZfr/+Kj/3/7gl55NduvZ7uB0pfo2HPofAAAACpTp/xOi/n9nRIdbX7ll9GO/pivVd+HQ/wAAAFCgTP+fGPX/u8vfcE6bec2+mpGuVN+HQ/8DAABAgTL9f1LU/+81ePDQU9eZVu2SrlQ/hEP/AwAAQIEy/X9y1P/vP9Vt7OBWC53ZJV2pZodD/wMAAECBMv1/StT/HzR7+ID6DxNueildqX4Mh/4HAACAAmX6v1vU/x8OOfHRn/t1nzA1XanmhEP/AwAAQIEy/X9q1P8fjT7oxiEHjWx+RrpS/RQO/Q8AAAAFyvR/96j/py1xU4+D9m914t/pSvVzOPQ/AAAAFCjT/6dF/f9xt671b/rPueKIdKX6JRz6HwAAAAqU6f8eUf9/8v6QmSvO6fTx3ulK9Ws49D8AAAAUKNP/p0f9/+nEW1/Yd+PB232drlRzw6H/AQAAoECZ/j8j6v/p53Zad/wrXdu2S1eq38Kh/wEAAKBAmf4/M+r/z84b3/OepkNHzk5Xqnnh0P8AAABQoEz/94z6f8Zz5958QM9Gv3+VrlS/h0P/AwAAQIEy/X9W1P//fGeXJxYZPmnl3dKV6o9w6H8AAAAoUKb/z476//NT+x48d3T7dq+kK9X8cOh/AAAAKNC/7f/lFty1c6L+/6LZemNbnjDgsZPTlerPcOh/AAAAKFDm+f+5Uf/PHDLj0AmLtvnqgnSl+isc+h8AAAAKlOn/86L+/3L0tHNueueP6tN0pfo7HPofAAAACpTp//Oj/v9qiVVv7brt0h99lK7UFxz6HwAAAAqU6f8Lov7/esT0HvM/m7LNOelKPXyP/gcAAIASZfr/wqj//7X8SjcueVGv7t3TlXqDcOh/AAAAKFCm/3tF/T+rwVqPHt5p/HWvpyv1huHQ/wAAAFCgTP/3jvr/m6dmHjBspzVf3ildqS8SDv0PAAAABcr0/0VR/3+7TO+nfx38+bqfpyv1Wjj0PwAAABQo0/99ov7/btiYjrU/9zv953SlXoVD/wMAAECBMv1/cdT/3z9zybkHrnHNjYekK/UFHwCo/wEAAKBAmf6/JOr/H6rdbrv7pbNnfJuu1Be8Xv8DAABAgTL9f2nU/7NfOP6rp5s9sdD+6Uq9UTj0PwAAABQo0/99o/7/sdddtb3OW/HgQ9OV+mLh0P8AAABQoEz/Xxb1/5yTblt71fs/fPyPdKXeOBz6HwAAAAqU6f/Lo/7/acoRL30/dtf5Z6cr9Sbh0P8AAABQoEz/XxH1/8/3/r1Bi+P7rvpuulJfPBz6HwAAAAqU6f8ro/7/ZbWtX/ug3mKv59OV+hLh0P8AAABQoEz/XxX1/6+LNZx1zbRZw45OV+pLhkP/AwAAQIEy/X911P9zH3lx0d6vb/bRHulKfalw6H8AAAAoUKb/r4n6/7dl6p/PXHr2NjPTlfrS4dD/AAAAUKBM/18b9f+8YRMWXr7Hkd3npCv1ZcKh/wEAAKBAmf6/Lur/35/5o/nOD9153QHpSn1B9+t/AAAAKFCm//tF/f9Htd3zox5p8PLH6Up9uXDofwAAAChQpv+vj/p//nFvjG50ysR1e6Ur9abh0P8AAABQoEz/3xD1/5/TFz3k9ybdTj8xXakvHw79DwAAAAXK9H//qP//eq3l2SOnjLjxtXSlvkI49D8AAAAUKNP/N0b9/3ePn286YqsOM3qkK/UVw6H/AQAAoECZ/h/wX/1fX+iAI//c4ZuBC72drtRXCof+BwAAgAJl+v+mqP8XnjVo9clXtz74hXSl3iwc+h8AAAAKlOn/gVH/N/jr7u0HdZj3eNd0pb5yOPQ/AAAAFCjT/zdH/d9w1y4fn7x3l/mz0pX6KuHQ/wAAAFCgTP8Pivp/kU1fajVy4H2r7pmu1FcNh/4HAACAAmX6/5ao/2tXLTT1iF8b73VUulJfLRz6HwAAAAqU6f9bo/6v7mgzu9GGrw77M12prx4O/Q8AAAAFyvT/bVH/19eev8zv08Y9tHS6Ul/wGv0PAAAABcr0/+1R/y962fbzjq5fsO9j6Up9jXDofwAAAChQpv8HR/3faNvfVr7x+LdWvDddqa8ZDv0PAAAABcr0/x1R/y+2/vNtXh677LwqXamvFQ79DwAAAAXK9P+dUf837r/IB5vff90jV6Ur9bXDof8BAACgQJn+HxL1f5PpB99+1nltD1w/XamvEw79DwAAAAXK9P9dUf8vflz/Xn2bzajtkK7U1w2H/gcAAIACZfr/7qj/l+gx7KipLzX/YnC6Ul8vHPofAAAACpTp/3ui/l/ytVPHrbnGtIHrpSv1BT8ToP8BAACgQJn+vzfq/6Ua7TuhzZ/Nzu6brtQ3CIf+BwAAgAJl+v++qP+XfuyqtV4ZPHqt/ulKfcNw6H8AAAAoUKb/74/6f5mhjzQYvFPP5zdNV+otwqH/AQAAoECZ/h8a9f+yq5712amdvr76mXSl/o9w6H8AAAAoUKb/h0X9v9yJ7yz54EUbnLRaulLfKBz6HwAAAAqU6f/hUf83fXuZ7zp+dvn2jdKV+sbh0P8AAABQoEz/PxD1//Ivrz+5yba7T38wXalvEg79DwAAAAXK9P+DUf+vcOH3G/+94eCHrklX6gt+J6D+BwAAgAJl+n9E1P8rTv/Hi8f92mnfjdOV+mbh0P8AAABQoEz/PxT1/0rHzVpv4MA5K26drtRbhkP/AwAAQIEy/T8y6v9mPaZUz+/dat5t6Uq9VTj0PwAAABQo0/8PR/2/8mvLf7FZh5GPrJCu1DcPh/4HAACAAmX6/5Go/1cZNrP/lVd3P/DxdKW+RTj0PwAAABQo0/+jov5fdZm1Tjvvmwm1u9OV+pbh0P8AAABQoEz/Pxr1/2rVSgduvNVCX/yblfpW4dD/AAAAUKBM/z8W9f/qz0x/7JMpfwx8Ol2ptw6H/gcAAIACZfp/dNT/zcdv+9mEJm3OXjFdqS/4TED9DwAAAAXK9P/jUf+vUfu9QctTBqy1ZLpSbxMO/Q8AAAAFyvT/E1H/r7n0c2t1faT98w+lK/VtwqH/AQAAoECZ/n8y6v+1Hqwm3PTQpKvXSFfq24ZD/wMAAECBMv3/VNT/a0+/d+MDejQ66ZJ0pb5dOPQ/AAAAFCjT/2Oi/l/nuM6T71l66PYD0pX69uHQ/wAAAFCgTP8/HfX/uj06fjf39a7Tt0xX6juEQ/8DAABAgTL9Pzbq//Veu2PJRX69b5dx6Up9x3DofwAAAChQpv+fifp//RM7fXHHhl3uXj1dqe8UDv0PAAAABcr0/7io/zd4+9aq296v/rpoulLfORz6HwAAAAqU6f9no/7f8OUh6209sPEKD6Qr9V3Cof8BAACgQJn+Hx/1f4sLu7746tUDj1w3XanvGg79DwAAAAXK9P9zUf//o9tpX1zQocP4S9OV+m7h0P8AAABQoEz/T4j6f6P3n6j6bTXvmxvTlfru4dD/AAAAUKBM/z8f9f/GE69Zb9o3rRfbLF2p7xGO/9n/5/+3vmUAAADgP5Tp/4lR/29y7t4vrt9k4jlXpyv1PcPh+T8AAAAUKNP/L0T9v+nYE8ZsOqXBLRukK/W9wqH/AQAAoECZ/n8x6v/NFh55+MRHRry+fbpS3zsc+h8AAAAKlOn/l6L+b9l0wHk3n9LtH7enK/V9wqH/AQAAoECZ/n856v9WD7cb1KXH7OOWSlfq+4ZD/wMAAECBMv0/Ker/zafNPvuuhza79NF0pb5fOPQ/AAAAFCjT/69E/b/FMVve1O71O6fcl67U9w+H/gcAAIACZfr/1aj/t+zZZHS19JGb1dOVettw6H8AAAAoUKb/X4v6f6s3Xz3kl3rfXZqnK/UDwqH/AQAAoECZ/p8c9X/rbouO6z5t17svTlfqB4ZD/wMAAECBMv3/etT/W7//xlG3j531603pSr1dOPQ/AAAAFCjT/29E/d9m4s+9Jh3fYoWt0pX6QeHQ/wAAAFCgTP+/GfX/Nue2vH2b8544cmy6Uj84HPofAAAACpTp/ylR/2/bbMKsS+4/e/xK6Uq9fTj0PwAAABQo0/9To/7fbkh90dNe+vCbJdKV+iHh0P8AAABQoEz/vxX1//ajt9tg7WYrLjYiXal3CIf+BwAAgAJl+v/tqP93WOKP197/8/Nzlk9X6h3Dof8BAACgQJn+fyfq/x3bf/PcxWusecvodKV+aDj0PwAAABQo0//vRv2/0w8brdljp2tevyddqR8WDv0PAAAABcr0/3tR/+/8xwoN1xm83z8WTlfqh4dD/wMAAECBMv3/ftT/u+w0dcZ7F0057tp0pd4pHPofAAAACpTp/w+i/t91izOWWLbT0pdukq7UjwiH/gcAAIACZfr/w6j/d+v3+LefbTt+Sut0pX5kOPQ/AAAAFCjT/x9F/b/7bf1eH/1Zr81uTVfqR4VD/wMAAECBMv0/Ler/PdbYa5M9lm60+VnpSv3ocOh/AAAAKFCm/z+O+n/PS65+4ZPXJ737TrpSPyYc+h8AAAAKlOn/T6L+32vr/dbd+KGufSamK/XO4dD/AAAAUKBM/38a9f/eG51dP6/H0KOPSVfqx4ZD/wMAAECBMv0/Per/fW4eNfPKU9ps8F26Uu8SDv0PAAAABcr0/2dR/+/70Yy7Xnvkj0lt05X6ceHQ/wAAAFCgTP/PiPp/v6PX26X1lPa3d0xX6l3Dof8BAACgQJn+/2fU//ufuWrnU5oMuPD3BS/9r++rHx8O/Q8AAAAFyvT/51H/t31j2kV3ftN9yR3TlfoJ4dD/AAAAUKBM/38R9f8BTebNv3yrkd//M12pnxgO/Q8AAAAFyvT/zKj/D3xih9XO7LDQ07+kK/WTwqH/AQAAoECZ/v8y6v92d9d2aH71hMM7pCv1k8Oh/wEAAKBAmf7/Kur/g1ac+MnbAzstMy1dqZ8SDv0PAAAABcr0/9dR/x98yjEtl9978E/npiv1buHQ/wAAAFCgTP//K+r/9u8NnTJzw1ZDT01X6gv+Tv8DAABAgTL9Pyvq/0OeH/zjqF/n7D45Xal3D4f+BwAAgAJl+v+bqP87nHP4sjt/tsHm36Qr9dPCof8BAACgQJn+/zbq/44f3fLbB9t+/e5e6Uq9Rzj0PwAAABQo0//fRf2/UIOjmrXotHufI9OV+unh0P8AAABQoEz/fx/1/2FnHrdN74suP3p+ulI/Ixz6HwAAAAqU6f8fov4//I17PrxmcLMNTktX6meGQ/8DAABAgTL9Pzvq/04PHfDw5jtNm/RWulLvGQ79DwAAAAXK9P+PUf8fscLA/V5eo+ftL6Yr9bPCof8BAACgQJn+nxP1/5ENR5xy45+jLzw+XamfHQ79DwAAAAXK9P9PUf8fNeak645u1nbJT9KV+jnh0P8AAABQoEz//xz1/9FPX/nJBS9d933vdKV+bjj0PwAAABQo0/+/RP1/zEJtd+h3f/OnT0hX6ueFQ/8DAABAgTL9/2vU/52X67natPNmHP5qulI/Pxz6HwAAAAqU6f+5Uf8fO/Kx+esff8Eyu6cr9QvCof8BAACgQJn+/y3q/y4fLb3sd2PH/fRFulK/MBz6HwAAAAqU6f95Uf8fd/T7P642bdmhP6Ur9V7h0P8AAABQoEz//x71f9czv5uyd/2t3Q9MV+oLPhNA/wMAAECBMv3/R9T/x7/RouWYEQPumJmu1C8Kh/4HAACAAmX6f37U/yec8q8P1zqtfe890pV6n3DofwAAAChQpv//jPr/xPc22WbKUn+0OCBdqV8cDv0PAAAABcr0/19R/5/0fNNml05u8+qcdKV+STj0PwAAABQo0/9/R/1/8jlv/3b21KGX9EpX6peGQ/8DAABAgf73/V8tFPX/Ka3ffHOfxbt2/jhdqfcNh/4HAACAAmX6f+Go/7td3Gijp7pN2vK1dKV+WTj0PwAAABQo0/8Nov4/dWCrJt+OavT+ielK/fJw6H8AAAAoUKb/G0b93/0fv3y/+iFz7ns7XalfEQ79DwAAAAXK9P8iUf+f9v37/etXtdq1R7pSvzIc+h8AAAAKlOn/WtT/PQ5e+rSfZw1eqmu6Ur8qHPofAAAACpTp/yrq/9N3bHHgkC07/fhCulK/Ohz6HwAAAAqU6f961P9n/P7dYwe1mPDUnulK/Zpw6H8AAAAoUKb/F436/8zr2nYaOHehQ2elK/Vrw6H/AQAAoECZ/m8U9X/Pza989ribRy7+Z7pSvy4c+h8AAAAKlOn/xf6r/xdeqPljd262T/dvj0pX6v3Cof8BAACgQJn+bxw9/z/71p4XPn/E6DvOSVfq14dD/wMAAECBMv3fJOr/c1o/ObBjn569P0pX6jeEQ/8DAABAgTL9v3jU/+de3OPMB2dMa/F6ulLvHw79DwAAAAXK9P8SUf+fN3Cf9n9v1+zV7ulK/cZw6H8AAAAoUKb/l4z6//x/XPtkk+aXX/J5ulIfEA79DwAAAAXK9P9SUf9f0LbXhNHzd++8U7pSvykc+h/+D/buO8qq+nr48IUo504I2I0RE4rGHkTJD7uCIWrEaJrYwQpqBCuioiIKVmwJdogYxRZjL6igKBJrVLBjxYrYYxfUd6kbPMOBHI2YnPV9n+efvWe4s5lxJeKHO1wAAAAqqKT/F8r1/6HvjV56o+FTO3UvXslOi0X/AwAAQAWV9P/Cuf4/bMoRTRfpvMKj7xavZKfHov8BAACggkr6f5Fc/w/ctuuzz144adRmxSvZGbHofwAAAKigkv5fNNf/h1951bbLDVik62vFK9mZseh/AAAAqKCS/l8s1/+Dmu9/w0Otxi44vXglOysW/Q8AAAAVVNL/i+f6/4jWm51x+B2HvL118Up2diz6HwAAACqopP9/mOv/I0cdc/B+k6eMfrh4JRsei/4HAACACirp/yVy/T944oqnXteszdb9i1eyEbHofwAAAKigkv7/Ua7/h/zxtf6/7HViix2KV7K/xKL/AQAAoIJK+n/JXP8fNfCR7gvduPlrtxWvZOfEov8BAACggkr6v1Wu/4+esOA1z3Vb45X2xSvZyFj0PwAAAFRQSf8vlev/Y3pP6nng6R/VhxavZOfGov8BAACggkr6/8e5/j/2qUXHHv/BltudXbyS/TUW/Q8AAAAVVNL/P8n1/3F3tR/+zEqnjV2zeCU7Lxb9DwAAABVU0v+tc/1//H5TD1u5U/N3ry1eyc6PRf8DAABABZX0f5tc/w9db/RafafdvdgPi1eyUbHofwAAAKigf9//nw2sfdX/Jww+7LERx+3SZQ5Xsgti0f8AAABQQSXP/7fLPf9/4sldP7qr+6iRfy1eyS6MRf8DAABABZX0/9K5/j9pxSNarXVlj0lLFK9kF8Wi/wEAAKCCSvp/mVz/nzx1ZO92fc7peGPxSnZxLPofAAAAKqik/3+a6/9TftdryMQWq/b+e/FKdkks+h8AAAAqqKT/l831/5823O78IRPfOmqB4pXsb7HofwAAAKigkv5fLtf/f55x1oYH3Nvn/iOLV7JLY9H/AAAAUEEl/b98rv+HHbPGxVcveGn7tsUr2cw/E6D/AQAAoIJK+n+FXP+futqn3Trv3fTgTsUr2WWx6H8AAACooJL+XzHX/6cte/sei146/uxhxSvZ5bHofwAAAKigkv5fKdf/pw9veszLNy7xytXFK9kVseh/AAAAqKCS/l851/9nrDdu50N7PV5fqHgluzIW/Q8AAAAVVNL/P8v1/5mDmw06sVn/7ZoVr2RXxaL/AQAAoIJK+r99rv/POnmdkZMnXzf2/OKVbOafCdD/AAAAUEEl/b9Krv/PXvHjDVa4Y6V3ly9eya6JRf8DAABABZX0f4dc/w//VcPPT2k1bbHjileya2PR/wAAAFBBJf2/aq7/R7xz/yM7DejaZUTxSnZdLPofAAAAKqik/1fL9f9fXn7vg04XDhm5fvFKdn0s+h8AAAAqqKT/O+b6/5ztOy42ofNhk4YUr2SjY9H/AAAAUEEl/f/zXP+P7PHAho8Pv6XjcsUr2Q2x6H8AAACooJL+/79c/5/7wuLnrzhjod4dileyG2PR/wAAAFBBJf3fKdf/f31r5SGHtXngqD8Vr2Q3xaL/AQAAoIJK+n/1XP+ft8m03ies++v7f1K8ko2JRf8DAABABZX0/xq5/j9/vY2P2XjK0PZjileysbHofwAAAKigkv5fM9f/owafuMdNg9od/LfilezmWPQ/AAAAVFBJ/6+V6/8LTr6m25vbP392Q/FKdkss+h8AAAAqqKT/1871/4Ur7nvxUr3aZEcUr2TjYtH/AAAAUEEl/b9Orv8vOuaKDY66ccpLbYpXsltj0f8AAABQQSX9v26u/y9e7YCR/SZvftXqxSvZbbHofwAAAKigkv5fL9f/lyy76aC2zU78/anFK9n4WPQ/AAAAVFBJ/6+f6//v1Wq1Sa0WWfJHxSvZ7bHofwAAAKigkv7vnOv/S4cO32CXOyZNv6l4JZsQi/4HAACACirp/y65/v97p21Gnn7hIZdfWryS/SMW/Q8AAAAVVNL/G+T6/7J2OwwaP2DsZi2LV7I7YtH/AAAAUEGN+//w2fv/F7n+v/yMC3buMHzDda4pXsnujEX/AwAAQAWVPP/fNdf/V2wzuPXynY9+avHileyuWPQ/AAAAVFBJ//8y1/9XPrvBJ0+0WeHYJsUr2d2x6H8AAACooJL+3zDX/1e9e+CTJ82Yutt5xSvZPbGU9P+S8+JTBgAAAL6hkv7fKNf/V29283qHTOnXdpXilezeWDz/DwAAABVU0v8b5/r/mrWWmnjDuteMO6F4JftnLPofAAAAKqik/3+V6/9rD5/ccZPtlxx2VvFKdl8s+h8AAAAqqKT/N8n1/3XDnl34J4Oe6LdG8Up2fyz6HwAAACqo2P+1fP93y/X/9e2Xfev102tZ6+KV7IFY9D8AAABUUMnz/5vm+n/00Bda9e9260tji1eyibHofwAAAKigkv7/da7/b+jU7qPBK+111SXFK9mkWPQ/AAAAVFBJ/2+W6/8b2y3x2AMfXPb7evFK9mAs+h8AAAAqqKT/N8/1/01nPL3W0tM6Ljm4eCV7KBb9DwAAABVU0v+/yfX/mOk/2/TsTv+avmzxSvZwLPofAAAAKqik/3+b6/+xXV69bLfu212+avFK9kgs+h8AAAAqqKT/f5fr/5u3mHjSOseN2OzPxSvZo7HofwAAAKigkv7/fa7/b3nzh33u79NrnRWKV7LHYtH/AAAAUEEl/f+HXP+PuybrddaVFz51fPFK9ngs+h8AAAAqqKT/t8j1/60tbx28+8SGY4cXr2STY9H/AAAAUEEl/d+k1mRW/9+25PRR67a4c7f1ileyJ2LR/wAAAFBBJf2/Ze75//Ej193ovgW3aHtV8Ur2ZCz6HwAAACqopP+3yvX/7Q+dc1Hze4eNW7B4JXsqFv0PAAAAFVTS/1vn+n9C3603+fDStYZlxSvZ07HofwAAAKigkv7fJtf//zh45z9euvf0fqOKV7JnYtH/AAAAUEFz7P/5Z+7Nts31/x3jRh3bc9DQvX9VvJI9G4v+BwAAgAoqef5/u1z/37lT750mbP/rU14tXsmmxKL/AQAAoIJK+n/7XP/f9di5h3da9/kJM4pXsudi0f8AAABQQSX93yPX/3ffe/a5O01pt0yP4pXs+Vj0PwAAAFRQSf/3zPX/PQds/4tTZtzSZ1LxSvZCLPofAAAAKqik/3fI9f+9a7fIHmxz2NC9i1eyF2PR/wAAAFBBJf2/Y67//znonhfbdH7gsd7FK9lLseh/AAAAqKCS/t8p1//3nfr27fsPX2jNCcUr2cux6H8AAACooJL+3znX//evsvqyRw+Y1m1g8Uo2NRb9DwAAABVU0v+75Pr/gdcX2+acC1e65KnileyVWPQ/AAAAVFBJ/++a6/+JWz44es87hnx6d/FKNi2WufZ/03n3KQMAAADfUEn/98r1/6RfvHLmGq26tt6teCV7NRbP/wMAAEAFlfR/71z/P/jRKgPuafZ49xeKV7LXYtH/AAAAUEEl/b9brv8fOuGEYS0nL3H9hsUr2eux6H8AAACooJL+3z3X/w+v3u2AT2687vnfFq9kb8Si/wEAAKCCSvp/j1z/P7L0Plte3Kt/03eKV7I3Y9H/AAAAUEEl/f/HXP8/eub1126z96V7P1S8kr0Vi/4HAACACirp/z1z/f/Y2v16jLu0zykHFK9kb8ei/wEAAKCCSvq/T67/Hx909ZiO946fsGPxSvavWPQ/AAAAVFBJ//fN9f/kU48d0XvBpsuML17JZr4mgP4HAACACirp/71y/f/EKpsPHNbinD6bF69k78ai/wEAAKCCSvp/71z/P7npmIaVJ/YY+nrxSvZeLPofAAAAKqik//fJ9f9T7x/86jNXvvXYx8Ur2fux6H8AAACooJL+3zfX/08/1/nu4/usuuZWxSvZB7HofwAAAKigkv7fL9f/z2x11PIHHnd3t+eKV7IPY9H/AAAAUEEl/b9/rv+f3XbXAbt0b35J5+KV7KNY9D8AAABUUEn/98v1/5Qp5515eqdRn25ZvJLNfE0A/Q8AAAAVVNL/B+T6/7n3zhw9ftourd8rXsmmx6L/AQAAoIJK+r9/rv+f37znNh0++Kj7QcUr2YxY9D8AAABUUEn/H5jr/xfW/uTa91Za4/onileyT2LR/wAAAFBBJf1/UK7/Xxy09pbNup32/L3FK9mnseh/AAAAqKCS/j841/8vndrkgN+dvmXTvsUr2Wex6H8AAACooJL+H5Dr/5dXuWPYuS82GbB18cqsD9f/AAAAUEEl/X9Irv+nnjD/wLXXHHfW9OKVejxG/wMAAEAVlfT/obn+f2X18SPu3Lrvfa8Vr9SbxqL/AQAAoIJK+v+wXP9PW/qjMcOHXL7KZsUr9e/Fov8BAACggkr6f2Cu/189c/0ee52xWq/bilfq88Wi/wEAAKCCSvr/8Fz/v9Zx1DWrdn3n6B2KV+rzx6L/AQAAoIJK+n9Qrv9fP3bn7rcts/2D/YtX6s1i0f8AAABQQSX9f0Su/98YsXX/0z4cvtrDxSv1LBb9DwAAABVU0v9H5vr/zeXOOXXX1r0771W8Up/58fofAAAAKqik/wfn+v+tF8e+cuj4C879Z/FKvSEW/Q8AAAAVVNL/Q3L9/3bPAc1PPK/+3uTilfr3Y9H/AAAAUEEl/X9Urv//1a3LipMH3rXogcUr9eax6H8AAACooJL+PzrX/++8ffSdK+z0h+3fLV6p/yAW/Q8AAAAVVNL/x+T6/90hP13utZtPHdO9eKXeIhb9DwAAABVU0v/H5vr/vfWfn9D66bWndileqbeMRf8DAABABZX0/3G5/n9/pcdf6Nb044bni1fqC8Si/wEAAKCCSvr/+Fz/f3BK62ajF2074PbilfqCseh/AAAAqKCS/h+a6/8POz71ers7nz2rV/FKfaFY9D8AAABUUEn/n5Dr/4+ObbXAxIs2u2+f4pX6wrHofwAAAKigkv4/Mdf/H49o237I/iet8mDxSn1m9+t/AAAAqKCS/j8p1//Tl3v53gN2X7hXz+KV+qKx6H8AAACooK/6f/14T6P+PznX/zO6Lnrjfdc+ePQnxSv1xWLR/wAAAFBBJc//n5Lr/08+nbTVug8f+uC04pX64rHofwAAAKigkv7/U67/P5029aDdG8astnHxSv2Hseh/AAAAqKCS/v9zrv8/+037s896Y6PO/ypeqS8Ri/4HAACACor+ny/3npNzP9z0y1H/Ua3W5fXc++PxC8zs/i9+j2DnQ95+d07zK5/fyc8vfoomtdp8V8z2adW/3Vc1V7O+npYPPbdBrUOtSf4r/1z7uTz+tPriS9U61JoWHt/4A74Xj1+yx4wfH1nrUGs2++P32L3vLrseOOvN+NF6q437vrFarUOtPvvj9951355999pl13gz/rk0tO2620Kv1DrU5pv9n9Tuffv1yb3ZEKPdkm8uc+IXn89sj99v/x3377XfrDe/H49f+sqDRvSb0+P3bfz5N4/HL7PnUgu83uLO2vyzP36ffnvtv2MNAACA/7WS/p/Vs7Val3G590cXf+P+X7LxrM2t/7/37b6quZr19XxH/R/fK1FbZEb/X77acnStPnsP77FXv3377rhnh3nwtQAAAMDXVtL/s56fnkf936rxrM2t/+f/dl/VXM36er6j/o/Pu77UlE+OfqC2Rq35nJ6f77nvjn1779rotwCaxcf9uPmYFw+qrVFrOefn6XvuvFvjD83i435y6Pu/PaflxrUWc3z+vfBhAAAA/P+mpP9n9WytNujw/IfFXDD/9tfo/6Uaz1r0PwAAAPBdKun/Wc9Lz6X/v+nz/z9uPGv6HwAAAP4LSvp/1veXz7H/F5z15tfs/4Y2X92bqWnjm9+petuY7WIuHXOZmD+NuWzM5WIuH3OFmCvGXCnmyjF/FjP+VEB9lZjxrff1VWOuFrNjzJ/H/L+YnWKuHnONmGvGXCvm2jHXibluzPVirh+zc8wuMTeI+YuYXWP+MuaGMTeKGX/nY/1XMTeJ2S3mpjF/HXOzmJvH/E3M38b8Xczfx/xDzC1ido+5ZcytYm4dc5uY28bcLub2MXvE7Blzh5jxUoT1nWLuHHOXmPE6i/VeMXvH3C3m7jH3iPnHmHvGjNderPeNuVfMvWPuE3PfmPHKi/X9Y/aLeUDM/jHjFRfrB8U8OOaAmIfEPDTmYTEHxoz/79YHxTwi5pExB8ccEvOomEfHPCbmsTGPi3l8zKExT4h5YsyTYsa/U+qnxPxTzD/HHBbz1JinxTw95hkxz4x5VsyzYw6POSLmX2KeE3NkzHNj/jXmeTHPjzkq5gUxL4x5UcyLY14S828x499d9b/HvCzm5THjzzfVr4x5VcyrY14T89qY18W8PubomDfEvDHmTTHHxBwb8+aYt8SMP7tVvzXmbTHHx7w95oSY/4h5R8w7Y94V8+6Y98S8N+Y/Y94X8/6YD8ScGHNSzAdjPhTz4ZiPxHw05mMxH485OeYTMZ+M+VTMp2M+E/PZmFNiPhfz+ZgvxHwx5ksxX445NeYrMafFfDXmazHjNXLrb8R8M+ZbMd+OGX+HTv2dmPHrZP29mO/H/CDmhzE/ivlxzOkxZ8T8JOanMT/7csbLwNYa4n+nDfGLbkO8Hk5D/PrfEN/v1xC/798Qv/43zHzd2ZmvJzvzdWJnvv7rD2K2iNky5gIx478UGhaKuXDM+PuCGhaNuVjMxWPG3yvcEM8zNMTrBjfE6wc1xJ8jbIjvJ2yI5xUa4r8vGlrHzP2dRgAAAAAAkL54/r9p7l13frU2e3TOr8VXb1urZU/Wak0+GDviqg2/zc+/xbf02Xf1NwUAAABAQqL/W371nvkP/F9+PgAAAMC8p/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0lfa/83/+58TAAAAMG95/h8AAADSV9b/Wy3wP/ikAAAAgHnK8/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOmL/p8v956Tcz9c/3I0tK3VBh2e/7DGP/7l2zsf8va7c5pf+fxOfn6u6cxbtWbPzIuv6N9q8Z3/DAAAAFBBJf3fEKPdXPp/ifzbX6P/2zWetUb9/91bYOqXs9mj8Y4f/Pd+bgAAAPjf+ff93+T7X86GpefS/+Pyb3+N/l+68axF/8+36bz7iv6thXOf++cWqdXqP6jVmn5v3pyvt2l8v962VsuerNWafDBv7gMAAMB/puT5/+ZfjoZl5tL/V+Tf/hr9v0zjWYv+n//JuX1+vf6TL+rra7L1fPU/9BhYq+2wZesv5tQXsy/mLEesfcMlTa6d9fsTMx/37GKtGz/uv3MXAAAA/iMl/R/fH9/w01qty+u59zf9cizwTb///6eN58yPne+K2T6tpt/qi5q7WV9Py4ee26DWodYk/5V/rv2cH3/krM9r9se3/44+UwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/sQMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOCABAAAAEPT/dTsCBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYK4AAAD//4nP5XU=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x2000, 0x12) getdents64(r0, 0x0, 0x0) fstat(r0, 0x0) 9.498731436s ago: executing program 1 (id=307): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101884a, &(0x7f0000000280)=ANY=[], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x800000009) 7.745786623s ago: executing program 2 (id=311): syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) write$usbip_server(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x34}}, 0x0) 7.396929995s ago: executing program 2 (id=312): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@noquota}, {}, {@barrier_val}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid={'resuid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@acl}, {@nomblk_io_submit}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0x181681, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) fallocate(r1, 0x8, 0x0, 0x10000) 6.241165929s ago: executing program 2 (id=315): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000980)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00@\x00N']) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000003c0)={[{}]}) 5.959902374s ago: executing program 1 (id=317): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2a00200, &(0x7f0000000140), 0x84, 0x479, &(0x7f0000000500)="$eJzs3M1vFOUfAPDvzLa88+vCD194UVfRSHxpaUHl4AWjCRcTEz3gsZZCkAIGaiKESDUGj4a/QD2a+Bd4wotRThqveDcmxHARPZg1szvTbtvp2mW3LLifTzL0eXaemXm++8yz+8w8swQwsGrZP0nEloi4EREjzeziArXmn9u3Lk39eevSVBL1+pu/J41yf9y6NFUULbbbPJ+pRvpJErtLjnv+wsVTkzMz0+fy/Njs6ffGzl+4+PzJ05Mnpk9Mn5k4dOjggfGXXpx4oSdxDmV13fXh2T07j7x99fWpo1ff+eHrrIpb8vWtcTRVuz5mLWqL38sWT3W993vL9W0L6WSotMi1rXevOqxSJe8bw43+PxKVWGi8kXjt475WDlhr6fplL1WKxFwd+A/LRvPAICq+6LPr32K5i2OPvrt5OObvY9zOl+aaoUiza/hq89pora5daxFxdO6vz7MlSu9DAAD01rXDEfFc2fgvjQeLQrWF8tWI2BYR2yPi/xGxIyIeiGiUfSgiHu7w+LUl+eXjn582dhxUB7Lx38v53Nbi8V9aFKlW8tzWRvzDyfGTM9P7I+J/EbEvhtdn+fE2x/j21Z8/W2ld6/gvW7LjF2PBvB6/DS25QXdscnaym5hb3fwoYtdQWfzJ/ExANj7eGRG77mD/WeOdfOarPSut//f42yifZ+pI/cuIp5vtPxdL4i8k7ecnxzbEzPT+seKsWLRZRMzF9R+vvLHS8buKvwey9t9Uev7Px19NWudrz3d+jCu/fFp+TbMu/3sH5/+65K1Fu/hgcnb23HjEumRu+esTC9sW+aJ8Fv++veX9f3vE31/k2+2OiOwkfiQiHo2Ix/K2ezwinoiIvW3i//6VJ99dad290P7HOmr/zhOVU999k+/rRufxZ+1/sJHal7+yms+/1Vaw2/cPAAAA7gdp4xn4JB2dT6fpxvwZ/h2xKZ2p12efPX72/TPHms/KV2M4Le50jbTcDx3P7w0X+Ykl+QON+8b1er2+sZEfnTo743lw6K/NJf1/dLS57tdKv2sHrLlVzaMVkzAr/aINuC/1YB4duE/p/zC49H8YXPo/DK6y/n854nYfqgLcZb7/YXDp/zC49H8YXPo/DKRuftffLrH9SDebD/e2PocjotcBNhNp9/uprFUTlCfSDv5zhLaJ6EHsfUukZas2REQ/6rM+IlZb+PKyGsaGZk/udcX6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQG/8EAAD//+3S304=") r0 = open(&(0x7f00000000c0)='.\x00', 0x591002, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000080)={0x18}, 0x18) sendfile(r0, r0, &(0x7f0000000000), 0x400) 4.244026488s ago: executing program 4 (id=328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 4.00556016s ago: executing program 1 (id=332): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}, {&(0x7f0000000440)="82fb5892628fdbb93d8414ae", 0xc}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4116, 0x1014}, {&(0x7f0000000240)=""/108, 0x6c}], 0x2}, 0x40000020) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff40, 0x0}, 0x40000122) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 3.99994405s ago: executing program 3 (id=333): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2, 0x7}, &(0x7f0000000040)=0x8) 3.906274849s ago: executing program 4 (id=334): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="626172726965722c63726561746f723d30c6da432c6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nls=cp869,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00cda88eef6460690a64e8746bfb2b58ce0f9934b742a306036dc0b12a28db4c7ec38aff23528c0cd914a21851f22c6d7152cda8"], 0x1, 0x5c8, &(0x7f00000006c0)="$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") mkdir(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000580)=""/45, 0x2d) getdents64(r0, 0x0, 0x480a) 3.880534851s ago: executing program 3 (id=336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000002295"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2, 0x0, 0x3}}, 0x20) 3.746687793s ago: executing program 3 (id=337): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.674488219s ago: executing program 4 (id=339): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 3.55941s ago: executing program 4 (id=341): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'ip6gre0\x00', 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000008c0)="308010", 0x10, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x141f029329606bb5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r5) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x14, r6, 0xf29}, 0x14}}, 0x20048080) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x1000}, 0x4) 2.730805974s ago: executing program 0 (id=343): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000009c0)='./file7\x00', 0x61c0, 0x700) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2.730052124s ago: executing program 1 (id=344): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB='nodiscard,background_gc=sync,alloc_mode=default,active_logs=6,noflush_merge,disable_roll_forwarta,noacl,heap,noinline_data,noextent_cache,mode=adaptive,jqfmt=vfsold,\x00'/177], 0x1, 0x5508, &(0x7f0000002480)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 2.594681077s ago: executing program 3 (id=345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000020000040"]) 2.588106077s ago: executing program 4 (id=346): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x0, {0x2}}, 0x18) lseek(r0, 0x0, 0x3) 2.577193188s ago: executing program 2 (id=347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000f50200020000000000000000004d83"], 0xfdef) 2.374782767s ago: executing program 3 (id=348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0xeeee8000, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x80}, {}, {0x1}, 0xddf8ffdb, 0x0, 0x1040000, 0x140030}) 2.351420709s ago: executing program 0 (id=349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001000)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x8, 0x0, 0x0, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}]}}, {"c4f6ad54bd485a"}}}}}, 0x4d) 2.276338165s ago: executing program 3 (id=350): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x470b, &(0x7f0000008f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, 0x0, r2) 2.201786722s ago: executing program 2 (id=351): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./mnt\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89d}) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 2.11162003s ago: executing program 0 (id=352): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$unix(0x1, 0x1, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x417, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x6286) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fstat(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYBLOB="749235c63bc001e29d7d09ef375f63128afacfe8f0ceeecb4e94d802fcf7fb224c8e9d9df582f661c26d2970f7ab1e0f14f11584b083ba27367e9700cdb013122b6f248e89447aa3b0ffba27c76545e41126f8c5b59b3e9a839669f2a212105589ad1abd707ddc", @ANYRES32, @ANYRES16=r4, @ANYRES32, @ANYRESOCT=r5, @ANYBLOB="77664895cba8dfdce399457cc28f7ded08ead3c0ec4c625aa2c471c377f46988078d00df4dbf922b6d413f529ebd63fad7f2d1c2eb5b8f26cb542c036fdb58341f55efafb88cfb32b4463aed848c7d22bde6d7046c734381291393fdec64d930caf86895846a8189006de1f11a9c5f543adad2a65e2494c99e256287f4bb58ec0375b688db94f3c0053cc848a566f17fa3025e7d8e5f5750d14f7309d69fe58b4b5779e5f5259bfe19c0efe18aefa4d385e7", @ANYRESOCT], 0x2, 0x1e7, &(0x7f0000000780)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r7, 0x0, 0x0, 0x3) 1.942528055s ago: executing program 2 (id=353): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") chdir(0x0) mkdir(&(0x7f0000000440)='./control\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x141041, 0x122) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0xffffffff000, 0x2, 0xfffffffd}) 1.183071853s ago: executing program 0 (id=354): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000240)={0xff02, 0x0, 0x0, 0x710, 0xf, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) 952.383134ms ago: executing program 0 (id=355): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@grpquota}, {@data_err_ignore}, {@grpjquota, 0x22}, {@nodiscard}, {@errors_remount}, {@nodelalloc}, {@sysvgroups}, {@norecovery}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) close(0x3) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x129000, 0x40) getdents(r0, 0x0, 0x0) 249.902948ms ago: executing program 4 (id=356): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@noinit_itable}, {@nobh}, {@i_version}]}, 0x1, 0xb90, &(0x7f0000003380)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5}) 0s ago: executing program 0 (id=357): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'ip6gre0\x00', 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000008c0)="308010", 0x10, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x141f029329606bb5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r5) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x14, r6, 0xf29}, 0x14}}, 0x20048080) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x1000}, 0x4) kernel console output (not intermixed with test programs): 8.161154][ T4170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.174833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.226420][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.234841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.244261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.253786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.265119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.274442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.285263][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.292795][ T4180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.312874][ T4167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.323819][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.338540][ T4180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.349577][ T4180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.358951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.367990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.375531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.384392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.393860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.402315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.411376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.424134][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.437159][ T4180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.458132][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.466561][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.477909][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.504541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.514211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.523891][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.531001][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.568877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.579814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.590437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.599198][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.606290][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.614160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.623105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.631871][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.638957][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.647397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.656052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.664347][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.671415][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.679858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.722473][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.732389][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.741272][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.749102][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.759597][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.768487][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.777358][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.787568][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.796882][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.805160][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.821204][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.835530][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.843970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.853680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.862254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.893205][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.904458][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.937415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.947984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.956700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.965545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.974452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.983577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.992149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.000672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.009768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.018167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.028610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.036663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.044243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.053246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.062079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.076554][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.091254][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.119230][ T4167] device veth0_vlan entered promiscuous mode [ 49.158370][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.173474][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.182907][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.192040][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.200704][ T3077] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.207818][ T3077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.216858][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.225373][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.234144][ T3077] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.241242][ T3077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.249646][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.258689][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.267969][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.276122][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.283758][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.305223][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.322368][ T4167] device veth1_vlan entered promiscuous mode [ 49.342437][ T4170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.354022][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.368001][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.378740][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.388303][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.398568][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.407564][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.416119][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.424406][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.433367][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.442001][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.450806][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.458644][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.475069][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.502047][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.526292][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.533825][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.544509][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.561781][ T4213] Bluetooth: hci3: command 0x041b tx timeout [ 49.570563][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.582988][ T4213] Bluetooth: hci1: command 0x041b tx timeout [ 49.590381][ T4213] Bluetooth: hci0: command 0x041b tx timeout [ 49.600586][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.615761][ T4213] Bluetooth: hci2: command 0x041b tx timeout [ 49.621999][ T4213] Bluetooth: hci4: command 0x041b tx timeout [ 49.625819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.636330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.643987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.666695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.682753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.691476][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.698556][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.706979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.715484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.724301][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.731398][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.741048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.749647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.762221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.770926][ T4167] device veth0_macvtap entered promiscuous mode [ 49.789184][ T4167] device veth1_macvtap entered promiscuous mode [ 49.803609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.814290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.827507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.837341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.847002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.855515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.874897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.883835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.908429][ T4168] device veth0_vlan entered promiscuous mode [ 49.924032][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.936790][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.943761][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.952955][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.962893][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.972818][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.981583][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.990201][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.999679][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.009208][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.017939][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.026876][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.035396][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.044178][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.058153][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.066829][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.074445][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.084924][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.103046][ T4180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.115067][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.136406][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.145258][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.154078][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.162541][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.174457][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.183517][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.193027][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.202785][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.215002][ T4168] device veth1_vlan entered promiscuous mode [ 50.230343][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.243218][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.252328][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.287458][ T4169] device veth0_vlan entered promiscuous mode [ 50.307969][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.317156][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.324958][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.349915][ T4168] device veth0_macvtap entered promiscuous mode [ 50.367808][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.378053][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.387654][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.396359][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.404726][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.416176][ T4168] device veth1_macvtap entered promiscuous mode [ 50.428281][ T4169] device veth1_vlan entered promiscuous mode [ 50.450475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.460241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.468684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.477246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.485435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.493863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.503656][ T4170] device veth0_vlan entered promiscuous mode [ 50.523173][ T4170] device veth1_vlan entered promiscuous mode [ 50.543588][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.554184][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.563573][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.572310][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.598796][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.612169][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.616950][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.634922][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.646568][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.659638][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.668766][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.678854][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.688571][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.697589][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.706165][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.714826][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.730804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.739706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.762746][ T4169] device veth0_macvtap entered promiscuous mode [ 50.773005][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.784756][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.796603][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.823017][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.823791][ T4169] device veth1_macvtap entered promiscuous mode [ 50.835779][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.843704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.853152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.861697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.871142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.880532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.889517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.899074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.908794][ T4170] device veth0_macvtap entered promiscuous mode [ 50.943686][ T4168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.953057][ T4168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.962847][ T4168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.971769][ T4168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.989729][ T4170] device veth1_macvtap entered promiscuous mode [ 51.017329][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.034744][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.051196][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.062033][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.073546][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.085144][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.096878][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.106989][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.119741][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.130534][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.138218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.146750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.154971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.165936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.174463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.183319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.193665][ T4180] device veth0_vlan entered promiscuous mode [ 51.212746][ T4169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.232442][ T4169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.245867][ T4169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.255883][ T4169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.275051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.283873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.383750][ T4180] device veth1_vlan entered promiscuous mode [ 51.406999][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.418472][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.428862][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.439706][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.450188][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.461647][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.481972][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.062679][ T4212] Bluetooth: hci2: command 0x040f tx timeout [ 52.069075][ T4212] Bluetooth: hci0: command 0x040f tx timeout [ 52.075182][ T4212] Bluetooth: hci1: command 0x040f tx timeout [ 52.081912][ T4212] Bluetooth: hci3: command 0x040f tx timeout [ 52.088561][ T4212] Bluetooth: hci4: command 0x040f tx timeout [ 52.096155][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.109421][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.120976][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.131800][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.144069][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.154780][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.165389][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.176001][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.186147][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.196997][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.208298][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.226123][ T4170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.234912][ T4170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.245181][ T4170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.254003][ T4170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.273256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.283415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.328429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.339523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.351147][ T4180] device veth0_macvtap entered promiscuous mode [ 52.359997][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.381371][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.387940][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.403429][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.405516][ T4180] device veth1_macvtap entered promiscuous mode [ 52.427367][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.441073][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.449214][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.458036][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.505245][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.516596][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.529439][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.543949][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.556308][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.566918][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.577351][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.587883][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.598870][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.609503][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.620517][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.629790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.638641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.647370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.669100][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.691744][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.712745][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.717598][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.726989][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.749133][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.759340][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.769841][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.780190][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.791149][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.801009][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.811673][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.823779][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.834998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.845393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.853665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.863260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.889051][ T4180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.904803][ T4180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.931913][ T4180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.944437][ T4180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.972588][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.003624][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.250606][ T4256] loop3: detected capacity change from 0 to 2048 [ 53.777176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.805011][ T4256] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 53.841236][ T26] audit: type=1800 audit(1730939935.264:2): pid=4255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 53.845943][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 54.215779][ T4157] Bluetooth: hci4: command 0x0419 tx timeout [ 54.243880][ T4157] Bluetooth: hci3: command 0x0419 tx timeout [ 54.577417][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.926476][ T4157] Bluetooth: hci1: command 0x0419 tx timeout [ 55.006531][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.016626][ T4157] Bluetooth: hci0: command 0x0419 tx timeout [ 55.030568][ T4157] Bluetooth: hci2: command 0x0419 tx timeout [ 55.068042][ T21] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 55.090352][ T4266] loop2: detected capacity change from 0 to 164 [ 55.099777][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.156058][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.163980][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.193133][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.202548][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.203737][ T21] usb 2-1: config 0 descriptor?? [ 55.211091][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.243576][ T4266] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 55.275010][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.565197][ T4271] usb usb9: usbfs: process 4271 (syz.3.8) did not claim interface 4 before use [ 55.702137][ T4279] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 55.848444][ T4269] kvm: emulating exchange as write [ 56.019270][ T21] logitech 0003:046D:C50C.0001: unknown main item tag 0x0 [ 56.079674][ T21] logitech 0003:046D:C50C.0001: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.1-1/input0 [ 56.465449][ T4285] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 56.664216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 56.889383][ T4292] loop0: detected capacity change from 0 to 4096 [ 57.250441][ T4292] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 57.407611][ T4294] hub 6-0:1.0: USB hub found [ 57.414175][ T4294] hub 6-0:1.0: 1 port detected [ 57.815316][ T4292] ntfs: (device loop0): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 57.824846][ T4292] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 57.871095][ T4292] ntfs: volume version 3.1. [ 58.225783][ T4301] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 58.397216][ T21] usb 2-1: USB disconnect, device number 2 [ 58.560318][ T4306] loop1: detected capacity change from 0 to 64 [ 59.896007][ T4306] sch_tbf: burst 65535 is lower than device lo mtu (65550) ! [ 60.002691][ T4316] loop0: detected capacity change from 0 to 128 [ 60.030834][ T4319] loop3: detected capacity change from 0 to 1024 [ 60.585090][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 60.594225][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 60.603203][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 60.612174][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 60.621225][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 60.630189][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 61.578063][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 62.598869][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #218!!! [ 62.779187][ T4316] loop0: detected capacity change from 0 to 256 [ 62.802029][ T4332] loop1: detected capacity change from 0 to 2048 [ 62.936129][ T4337] loop4: detected capacity change from 0 to 16 [ 62.943511][ T26] audit: type=1800 audit(1730939944.364:3): pid=4316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="bus" dev="loop0" ino=1048590 res=0 errno=0 [ 62.965786][ T4332] ======================================================= [ 62.965786][ T4332] WARNING: The mand mount option has been deprecated and [ 62.965786][ T4332] and is ignored by this kernel. Remove the mand [ 62.965786][ T4332] option from the mount to silence this warning. [ 62.965786][ T4332] ======================================================= [ 63.029624][ T4337] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 63.801761][ T4332] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.167802][ T26] audit: type=1800 audit(1730939945.354:4): pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.23" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 64.317300][ T4332] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.120655][ T4332] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 65.152407][ T4332] System zones: 0-19 [ 65.247807][ T4332] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.267766][ T4350] netlink: 'syz.4.25': attribute type 33 has an invalid length. [ 65.313810][ T4350] netlink: 152 bytes leftover after parsing attributes in process `syz.4.25'. [ 65.326430][ T4354] syz.4.25 uses obsolete (PF_INET,SOCK_PACKET) [ 65.369311][ T4332] Zero length message leads to an empty skb [ 65.404007][ T4332] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.22: Directory hole found for htree leaf block 0 [ 65.675536][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 66.877503][ T4370] loop3: detected capacity change from 0 to 736 [ 70.395695][ T4370] rock: directory entry would overflow storage [ 70.748879][ T4370] rock: sig=0x3b10, size=4, remaining=3 [ 70.931130][ T4385] loop0: detected capacity change from 0 to 256 [ 71.201312][ T4385] MINIX-fs: mounting file system with errors, running fsck is recommended [ 71.296458][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.303042][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.332207][ T4389] loop4: detected capacity change from 0 to 8192 [ 71.501857][ T4394] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 71.564808][ T4396] loop1: detected capacity change from 0 to 1024 [ 71.595799][ T4394] PKCS7: Only support pkcs7_signedData type [ 71.611426][ T4396] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 73.657044][ T4442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 73.739143][ T4442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.38'. [ 73.991060][ T4467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.002108][ T4442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.38'. [ 74.041583][ T4468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.194262][ T4478] loop1: detected capacity change from 0 to 1024 [ 75.619992][ T4478] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.44: Invalid block bitmap block 0 in block_group 0 [ 75.829447][ T4478] Quota error (device loop1): write_blk: dquota write failed [ 75.842542][ T4478] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 75.867272][ T4478] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.44: Failed to acquire dquot type 0 [ 76.542495][ T4490] loop3: detected capacity change from 0 to 2048 [ 76.555166][ T7] cfg80211: failed to load regulatory.db [ 76.590442][ T4478] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.44: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.629496][ T4490] EXT4-fs (loop3): Ignoring removed orlov option [ 76.640581][ T4478] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.44: Invalid inode bitmap blk 0 in block_group 0 [ 76.698312][ T4435] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 76.724353][ T4495] loop0: detected capacity change from 0 to 16 [ 76.776698][ T4435] EXT4-fs error (device loop1): ext4_release_dquot:6220: comm kworker/u4:12: Failed to release dquot type 0 [ 76.840763][ T4486] input: syz0 as /devices/virtual/input/input5 [ 77.308711][ T4478] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 77.331025][ T4490] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 77.343195][ T4478] EXT4-fs (loop1): 1 orphan inode deleted [ 77.357923][ T4495] erofs: (device loop0): mounted with root inode @ nid 36. [ 77.550547][ T4478] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 78.205736][ T4342] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.221668][ T4516] xt_socket: unknown flags 0x8 [ 78.231135][ T4478] syz.1.44 (4478) used greatest stack depth: 19392 bytes left [ 78.575902][ T4342] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 78.595670][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.636285][ T4342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.689341][ T4342] usb 4-1: config 0 descriptor?? [ 78.808627][ T4342] cp210x 4-1:0.0: cp210x converter detected [ 78.866125][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 79.156621][ T13] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 79.223011][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.359294][ T13] usb 3-1: Product: syz [ 79.401486][ T13] usb 3-1: Manufacturer: syz [ 79.409746][ T13] usb 3-1: SerialNumber: syz [ 79.456279][ T13] usb 3-1: config 0 descriptor?? [ 79.475707][ T4527] loop4: detected capacity change from 0 to 512 [ 79.476965][ T4342] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 79.497899][ T4342] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 79.514356][ T4342] usb 4-1: cp210x converter now attached to ttyUSB0 [ 79.538025][ T13] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 79.584459][ T4342] usb 4-1: USB disconnect, device number 2 [ 79.636773][ T4342] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 79.655238][ T4342] cp210x 4-1:0.0: device disconnected [ 79.720196][ T4527] EXT4-fs (loop4): Test dummy encryption mode enabled [ 79.735470][ T4527] EXT4-fs (loop4): Test dummy encryption mode enabled [ 79.745981][ T26] audit: type=1326 audit(1730939961.174:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4530 comm="syz.1.55" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67b2278719 code=0x0 [ 79.775185][ T4527] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.54: inline data xattr refers to an external xattr inode [ 79.801028][ T4527] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.54: couldn't read orphan inode 12 (err -117) [ 79.818744][ T4536] loop0: detected capacity change from 0 to 512 [ 79.824323][ T4527] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,usrjquota=,lazytime,errors=continue,test_dummy_encryption,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 80.066628][ T13] gspca_stk1135: reg_w 0x2 err -110 [ 80.073028][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 80.646455][ T13] gspca_stk1135: Sensor write failed [ 80.652292][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 80.656494][ T4536] EXT4-fs (loop0): failed to initialize system zone (-117) [ 80.685630][ T13] gspca_stk1135: Sensor write failed [ 80.690960][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 80.800686][ T4536] EXT4-fs (loop0): mount failed [ 80.815668][ T13] gspca_stk1135: Sensor read failed [ 80.826918][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 80.833868][ T13] gspca_stk1135: Sensor read failed [ 81.626194][ T13] gspca_stk1135: Detected sensor type unknown (0x0) [ 81.633028][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 81.660239][ T13] gspca_stk1135: Sensor read failed [ 81.675704][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 81.685969][ T13] gspca_stk1135: Sensor read failed [ 81.691193][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 81.717940][ T13] gspca_stk1135: Sensor write failed [ 81.723404][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 81.753115][ T13] gspca_stk1135: Sensor write failed [ 81.759899][ T13] stk1135: probe of 3-1:0.0 failed with error -110 [ 81.783721][ T13] usb 3-1: USB disconnect, device number 2 [ 82.163925][ T4557] tmpfs: Bad value for 'mpol' [ 82.714912][ T4555] loop4: detected capacity change from 0 to 512 [ 82.765689][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.225574][ C0] sched: RT throttling activated [ 84.913291][ T13] usb 3-1: device descriptor read/all, error -71 [ 84.931004][ T4555] EXT4-fs: error -4 creating inode table initialization thread [ 85.056439][ T4555] EXT4-fs (loop4): mount failed [ 86.348003][ T4583] ip6t_rpfilter: unknown options [ 88.359117][ T4608] loop4: detected capacity change from 0 to 256 [ 88.553925][ T4607] tap0: tun_chr_ioctl cmd 1074025677 [ 88.574192][ T4608] exFAT-fs (loop4): failed to read boot sector [ 89.116492][ T4613] netlink: 'syz.0.71': attribute type 3 has an invalid length. [ 89.304888][ T4611] loop3: detected capacity change from 0 to 40427 [ 89.313604][ T4607] tap0: linktype set to 780 [ 89.336261][ T4608] exFAT-fs (loop4): failed to recognize exfat type [ 89.348542][ T26] audit: type=1326 audit(1730939970.774:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e3bd4719 code=0x7ffc0000 [ 89.372139][ T26] audit: type=1326 audit(1730939970.774:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8e3bd30b0 code=0x7ffc0000 [ 89.407699][ T4611] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 89.416231][ T4611] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.475766][ T26] audit: type=1326 audit(1730939970.774:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8e3bd431b code=0x7ffc0000 [ 89.585804][ T4626] netlink: 68 bytes leftover after parsing attributes in process `syz.0.75'. [ 89.617093][ T4611] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.788772][ T26] audit: type=1326 audit(1730939970.774:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8e3bd431b code=0x7ffc0000 [ 89.804403][ T4608] loop4: detected capacity change from 0 to 512 [ 89.810923][ T4611] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 89.824192][ T26] audit: type=1326 audit(1730939970.794:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8e3bd431b code=0x7ffc0000 [ 89.824358][ T26] audit: type=1326 audit(1730939970.794:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8e3bd431b code=0x7ffc0000 [ 89.886302][ T4611] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.898667][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.937491][ T26] audit: type=1326 audit(1730939971.364:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8e3bd431b code=0x7ffc0000 [ 90.094557][ T26] audit: type=1326 audit(1730939971.414:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8e3bd431b code=0x7ffc0000 [ 90.456427][ T4244] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.645873][ T26] audit: type=1326 audit(1730939971.894:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8e3bd431b code=0x7ffc0000 [ 90.925286][ T4608] EXT4-fs (loop4): 1 orphan inode deleted [ 91.285077][ T4608] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 91.308918][ T26] audit: type=1326 audit(1730939972.434:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8e3bd431b code=0x7ffc0000 [ 91.315760][ T4608] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.403512][ T4244] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 91.405721][ T13] usb 3-1: unable to read config index 0 descriptor/all [ 91.439973][ T4244] usb 2-1: config 0 has no interface number 1 [ 91.445680][ T13] usb 3-1: can't read configurations, error -71 [ 91.459888][ T4244] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 91.614048][ T4244] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 91.727617][ T4244] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 92.086918][ T4244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 92.142942][ T4244] usb 2-1: SerialNumber: syz [ 92.188030][ T4244] usb 2-1: config 0 descriptor?? [ 92.426092][ T4244] usb 2-1: Found UVC 0.00 device (0002:0000) [ 92.443198][ T4244] usb 2-1: No valid video chain found. [ 92.500632][ T4661] loop0: detected capacity change from 0 to 128 [ 92.508054][ T4244] usb 2-1: USB disconnect, device number 3 [ 92.805714][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.830815][ T4663] overlayfs: failed to clone lowerpath [ 93.143862][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 93.160138][ T1109] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.917855][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.075657][ T1109] usb 1-1: Using ep0 maxpacket: 16 [ 94.155768][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.164822][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.184697][ T23] usb 5-1: Product: syz [ 94.196092][ T1109] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.236123][ T23] usb 5-1: Manufacturer: syz [ 94.477864][ T23] usb 5-1: SerialNumber: syz [ 94.908804][ T4183] Bluetooth: hci2: link tx timeout [ 94.914092][ T4183] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 94.933538][ T23] cdc_ether 5-1:1.0: skipping garbage [ 94.948669][ T1109] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 95.013305][ T23] usb 5-1: bad CDC descriptors [ 95.051456][ T1109] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.075654][ T1109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 95.114220][ T1109] usb 1-1: SerialNumber: syz [ 95.138364][ T4244] usb 5-1: USB disconnect, device number 2 [ 95.143449][ T4687] loop2: detected capacity change from 0 to 1024 [ 95.185425][ T1109] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 95.218878][ T1109] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 95.239878][ T1109] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 95.376037][ T4691] loop4: detected capacity change from 0 to 1024 [ 95.625749][ T4687] EXT4-fs (loop2): Ignoring removed bh option [ 95.981299][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 95.981313][ T26] audit: type=1804 audit(1730939977.404:17): pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.88" name="/newroot/20/bus/bus" dev="overlay" ino=136 res=1 errno=0 [ 96.009159][ T4687] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.035167][ T4683] Invalid ELF header magic: != ELF [ 96.053952][ T4691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.284495][ T4687] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 96.546910][ T4244] usb 1-1: USB disconnect, device number 2 [ 96.767311][ T4708] hub 6-0:1.0: USB hub found [ 96.773126][ T4708] hub 6-0:1.0: 1 port detected [ 97.106240][ T4342] Bluetooth: hci2: command 0x0406 tx timeout [ 97.247212][ T4707] loop4: detected capacity change from 0 to 512 [ 97.344525][ T4707] EXT4-fs (loop4): #blocks per group too big: 16384 [ 97.545721][ T4342] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.061328][ T4719] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 98.375692][ T4342] usb 4-1: Using ep0 maxpacket: 16 [ 98.495923][ T4342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 98.660016][ T4342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 98.667835][ T4722] loop0: detected capacity change from 0 to 4096 [ 98.765705][ T4729] loop2: detected capacity change from 0 to 256 [ 99.338230][ T4731] loop4: detected capacity change from 0 to 256 [ 99.351022][ T4722] ntfs: (device loop0): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 99.367103][ T4342] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 99.385737][ T4722] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 99.445607][ T4342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.508245][ T4722] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 99.559711][ T4342] usb 4-1: config 0 descriptor?? [ 99.560696][ T4722] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 99.578033][ T4722] ntfs: volume version 3.1. [ 99.603635][ T4342] usb 4-1: can't set config #0, error -71 [ 100.427038][ T4342] usb 4-1: USB disconnect, device number 3 [ 100.445715][ T4157] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 100.482962][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 100.736512][ T4157] usb 3-1: Using ep0 maxpacket: 32 [ 100.866117][ T4157] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.872949][ T4180] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 100.877028][ T4157] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 100.897724][ T4157] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.066105][ T4157] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.141078][ T4157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.353136][ T4157] usb 3-1: Product: syz [ 101.363103][ T4157] usb 3-1: Manufacturer: syz [ 101.642718][ T4157] usb 3-1: SerialNumber: syz [ 101.705865][ T4754] fuse: Invalid rootmode [ 101.710332][ T4157] usb 3-1: can't set config #1, error -71 [ 101.899012][ T4157] usb 3-1: USB disconnect, device number 7 [ 102.212401][ T4761] loop2: detected capacity change from 0 to 2048 [ 103.102504][ T4761] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 103.115731][ T4761] UDF-fs: Scanning with blocksize 512 failed [ 103.208033][ T4761] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 103.233636][ T4761] UDF-fs: Scanning with blocksize 1024 failed [ 103.264149][ T4761] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 103.695684][ T4761] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 103.746845][ T4761] UDF-fs: Scanning with blocksize 2048 failed [ 103.758310][ T4780] loop1: detected capacity change from 0 to 512 [ 103.778860][ T4761] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 103.869027][ T4761] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 103.964127][ T4780] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.985323][ T4761] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 103.993422][ T4761] UDF-fs: Scanning with blocksize 4096 failed [ 104.003502][ T4761] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 104.055830][ T4780] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.663126][ T4795] loop2: detected capacity change from 0 to 2048 [ 105.799243][ T4795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.273190][ T4797] loop4: detected capacity change from 0 to 128 [ 106.333902][ T4797] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.345775][ T4797] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.681321][ T4812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 107.289210][ T4796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.114'. [ 107.323730][ T4796] netlink: 'syz.4.114': attribute type 1 has an invalid length. [ 107.332865][ T4796] netlink: 'syz.4.114': attribute type 2 has an invalid length. [ 107.356317][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.114'. [ 107.486910][ T4815] syz.2.120 (4815): drop_caches: 0 [ 107.514031][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 107.568005][ T4342] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.774838][ T4818] loop4: detected capacity change from 0 to 1024 [ 107.850306][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.860163][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.867614][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.917944][ T4818] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 107.931422][ T4342] usb 1-1: Using ep0 maxpacket: 16 [ 108.076186][ T4342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 108.202893][ T4342] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 108.382790][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.555272][ T4342] usb 1-1: config 0 descriptor?? [ 108.650848][ T4816] loop1: detected capacity change from 0 to 4096 [ 109.815828][ T4342] usbhid 1-1:0.0: can't add hid device: -71 [ 109.821847][ T4342] usbhid: probe of 1-1:0.0 failed with error -71 [ 110.136360][ T4342] usb 1-1: USB disconnect, device number 3 [ 111.452519][ T4891] loop4: detected capacity change from 0 to 16 [ 111.610934][ T4891] erofs: (device loop4): mounted with root inode @ nid 36. [ 114.481311][ T4909] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.494024][ T4909] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 116.669280][ T4914] loop2: detected capacity change from 0 to 1024 [ 116.871403][ T4914] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 116.995132][ T4918] loop1: detected capacity change from 0 to 512 [ 117.063332][ T4914] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 117.072375][ T4914] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 117.079757][ T4914] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 117.095050][ T4922] loop4: detected capacity change from 0 to 4096 [ 117.755274][ T4922] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 117.811897][ T4918] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.833073][ T4922] ntfs3: loop4: Failed to load $MFT. [ 117.842542][ T4918] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.973443][ T4928] trusted_key: encrypted_key: insufficient parameters specified [ 119.545733][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.786555][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 119.905901][ T13] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 121.728770][ T13] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 121.765661][ T13] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.815833][ T13] usb 5-1: string descriptor 0 read error: -71 [ 121.889442][ T13] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.089313][ T4982] affs: No valid root block on device nbd1 [ 122.186147][ T4980] loop3: detected capacity change from 0 to 8 [ 122.215221][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.372395][ T13] usb 5-1: can't set config #1, error -71 [ 122.436714][ T13] usb 5-1: USB disconnect, device number 3 [ 123.065667][ T13] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 123.335991][ T4342] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.839223][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 123.848272][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 124.155871][ T13] usb 5-1: config 0 has an invalid interface number: 135 but max is 0 [ 124.174839][ T13] usb 5-1: config 0 has no interface number 0 [ 124.195649][ T4342] usb 2-1: Using ep0 maxpacket: 32 [ 124.339621][ T4342] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.350304][ T13] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=8c.e2 [ 124.392986][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.406099][ T13] usb 5-1: Product: syz [ 124.410300][ T13] usb 5-1: Manufacturer: syz [ 124.424664][ T13] usb 5-1: SerialNumber: syz [ 124.459945][ T13] usb 5-1: config 0 descriptor?? [ 124.496844][ T5012] trusted_key: encrypted_key: insufficient parameters specified [ 124.527961][ T13] kl5kusb105 5-1:0.135: KL5KUSB105D / PalmConnect converter detected [ 124.546102][ T13] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 124.556901][ T4342] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 124.573993][ T5016] capability: warning: `syz.3.159' uses 32-bit capabilities (legacy support in use) [ 124.591496][ T4342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.613947][ T4342] usb 2-1: Product: syz [ 124.618661][ T4342] usb 2-1: Manufacturer: syz [ 124.618680][ T4342] usb 2-1: SerialNumber: syz [ 124.623127][ T4342] usb 2-1: config 0 descriptor?? [ 124.656623][ T4342] usb 2-1: bad CDC descriptors [ 124.689385][ T4342] usb 2-1: unsupported MDLM descriptors [ 124.745657][ T4603] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 124.774383][ T4342] usb 5-1: USB disconnect, device number 4 [ 124.800086][ T4342] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 124.806941][ T5020] loop3: detected capacity change from 0 to 1024 [ 124.830344][ T4342] kl5kusb105 5-1:0.135: device disconnected [ 124.912986][ T4215] usb 2-1: USB disconnect, device number 4 [ 124.942770][ T4430] hfsplus: b-tree write err: -5, ino 4 [ 125.094531][ T5022] loop3: detected capacity change from 0 to 512 [ 125.131647][ T5022] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,errors=continue,user_xattr,. Quota mode: none. [ 125.175937][ T4603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 125.176712][ T5022] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.162: bg 0: block 425: padding at end of block bitmap is not set [ 125.188602][ T4603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.211907][ T4603] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 125.221025][ T4603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.232516][ T4603] usb 3-1: config 0 descriptor?? [ 125.259615][ T5022] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 126.093507][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 126.103477][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 127.002385][ T5050] loop3: detected capacity change from 0 to 8192 [ 127.009028][ T4603] usbhid 3-1:0.0: can't add hid device: -71 [ 127.016914][ T4603] usbhid: probe of 3-1:0.0 failed with error -71 [ 127.025718][ T4603] usb 3-1: USB disconnect, device number 8 [ 127.714281][ T5050] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 127.751247][ T5050] REISERFS (device loop3): using ordered data mode [ 127.765699][ T5050] reiserfs: using flush barriers [ 127.809888][ T5050] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.836674][ T5032] loop0: detected capacity change from 0 to 32768 [ 127.845285][ T5050] REISERFS (device loop3): checking transaction log (loop3) [ 127.917955][ T5050] REISERFS (device loop3): Using r5 hash to sort names [ 127.954197][ T5050] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 127.979088][ T5061] loop1: detected capacity change from 0 to 256 [ 127.986057][ T5050] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 128.043539][ T5061] exfat: Deprecated parameter 'namecase' [ 128.054157][ T5061] exfat: Deprecated parameter 'namecase' [ 128.057502][ T5052] loop4: detected capacity change from 0 to 32768 [ 128.082457][ T5032] XFS (loop0): Mounting V5 Filesystem [ 128.112830][ T5052] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.173 (5052) [ 128.134201][ T5061] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 128.286061][ T5032] XFS (loop0): Ending clean mount [ 128.294753][ T5052] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 128.588867][ T5079] loop3: detected capacity change from 0 to 4096 [ 128.606348][ T5079] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 128.632194][ T5052] BTRFS info (device loop4): using free space tree [ 128.710017][ T5079] ntfs: (device loop3): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 128.719739][ T5079] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 128.833121][ T5079] ntfs: volume version 3.1. [ 128.847559][ T5052] BTRFS info (device loop4): has skinny extents [ 129.352049][ T4180] XFS (loop0): Unmounting Filesystem [ 130.851097][ T5122] loop2: detected capacity change from 0 to 512 [ 130.957368][ T5052] BTRFS error (device loop4): open_ctree failed [ 131.076853][ T5122] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.105899][ T5122] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.381232][ T5120] loop1: detected capacity change from 0 to 32768 [ 131.693118][ T5136] mmap: syz.0.183 (5136) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 132.528762][ T5139] loop3: detected capacity change from 0 to 4096 [ 133.301628][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.308101][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.322783][ T5143] loop0: detected capacity change from 0 to 512 [ 133.347483][ T5139] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 133.391995][ T5139] ntfs: (device loop3): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 133.401604][ T5139] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 133.416765][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.427800][ T5139] ntfs: volume version 3.1. [ 133.450992][ T5143] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.482679][ T5143] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.495467][ T5120] JBD2: Ignoring recovery information on journal [ 133.608213][ T5149] loop2: detected capacity change from 0 to 512 [ 133.629514][ T5120] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 133.773015][ T5149] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0001] [ 133.792004][ T5149] System zones: 0-2, 18-18, 34-34 [ 133.802952][ T5120] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 133.809824][ T5149] EXT4-fs (loop2): 1 orphan inode deleted [ 133.820038][ T5120] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 133.824915][ T13] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.860858][ T5149] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,debug,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 133.884355][ T5149] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.896695][ T5120] OCFS2: File system is now read-only. [ 133.902183][ T5120] (syz.1.197,5120,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 133.911965][ T5120] (syz.1.197,5120,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 133.919838][ T5120] (syz.1.197,5120,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 133.928518][ T5120] (syz.1.197,5120,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 133.936986][ T5120] (syz.1.197,5120,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 133.945177][ T5120] (syz.1.197,5120,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 133.953709][ T5120] (syz.1.197,5120,1):ocfs2_mknod_locked:637 ERROR: status = -30 [ 133.962276][ T5120] (syz.1.197,5120,1):ocfs2_symlink:1939 ERROR: status = -30 [ 133.971106][ T5120] (syz.1.197,5120,1):ocfs2_symlink:2063 ERROR: status = -30 [ 134.021218][ T26] audit: type=1800 audit(1730940015.414:18): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.195" name="bus" dev="loop2" ino=16 res=0 errno=0 [ 134.050416][ T13] usb 5-1: config 0 has no interface number 0 [ 134.209541][ T5163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 134.218558][ T5163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 134.356383][ T13] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice= 0.00 [ 134.454185][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.580441][ T4167] ocfs2: Unmounting device (7,1) on (node local) [ 134.597079][ T13] usb 5-1: Product: syz [ 134.803881][ T13] usb 5-1: Manufacturer: syz [ 134.810677][ T13] usb 5-1: SerialNumber: syz [ 134.856497][ T13] usb 5-1: config 0 descriptor?? [ 135.127726][ T13] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 135.143555][ T5177] loop0: detected capacity change from 0 to 512 [ 135.143555][ T5173] loop1: detected capacity change from 0 to 4096 [ 135.162195][ T5173] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 135.179164][ T13] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 135.189698][ T13] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 135.198579][ T13] usb 5-1: media controller created [ 135.225188][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.245346][ T5175] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 135.247532][ T5173] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 135.287103][ T5177] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.342046][ T5177] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.526846][ T4342] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.892925][ T5183] loop2: detected capacity change from 0 to 4096 [ 136.581803][ T13] usb 5-1: USB disconnect, device number 5 [ 136.756735][ T5183] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 136.796349][ T4342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.810312][ T5183] ntfs: (device loop2): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 136.820008][ T5183] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 136.822835][ T4167] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 136.836537][ T4342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.852159][ T4342] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 136.861627][ T4342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.884039][ T4342] usb 4-1: config 0 descriptor?? [ 136.908878][ T5183] ntfs: volume version 3.1. [ 137.233718][ T5193] loop4: detected capacity change from 0 to 1024 [ 137.377554][ T4342] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x7 [ 137.398359][ T4342] pyra 0003:1E7D:2CF6.0002: item fetching failed at offset 6/7 [ 137.433373][ T4342] pyra 0003:1E7D:2CF6.0002: parse failed [ 137.436146][ T4871] hfsplus: b-tree write err: -5, ino 4 [ 137.445724][ T4342] pyra: probe of 0003:1E7D:2CF6.0002 failed with error -22 [ 137.473241][ T5187] loop0: detected capacity change from 0 to 32768 [ 137.483337][ T5189] loop1: detected capacity change from 0 to 32768 [ 137.516220][ T5187] XFS: ikeep mount option is deprecated. [ 137.523336][ T5189] XFS (loop1): Mounting V5 Filesystem [ 137.584836][ T5189] XFS (loop1): Ending clean mount [ 137.588320][ T5187] XFS (loop0): Mounting V5 Filesystem [ 137.628617][ T4342] usb 4-1: USB disconnect, device number 4 [ 137.691490][ T5189] XFS (loop1): Quotacheck needed: Please wait. [ 137.692935][ T5187] XFS (loop0): Ending clean mount [ 137.713968][ T5187] XFS (loop0): Quotacheck needed: Please wait. [ 137.775199][ T5187] XFS (loop0): Quotacheck: Done. [ 137.775217][ T5189] XFS (loop1): Quotacheck: Done. [ 137.820695][ T5187] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x42b dinode [ 137.875753][ T5187] XFS (loop0): Unmount and run xfs_repair [ 137.900011][ T4167] XFS (loop1): Unmounting Filesystem [ 137.910474][ T5214] loop4: detected capacity change from 0 to 1024 [ 137.939741][ T5187] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 137.949860][ T5187] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 137.962663][ T5187] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 137.981215][ T5187] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 137.990533][ T5187] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.005293][ T5187] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.043482][ T5214] hfsplus: unable to parse mount options [ 138.066573][ T5187] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.096385][ T5187] 00000060: ff ff ff ff 65 3f 0d b5 00 00 00 00 00 00 00 00 ....e?.......... [ 138.105413][ T5187] 00000070: 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 ................ [ 138.185906][ T5187] XFS (loop0): Internal error xfs_trans_cancel at line 954 of file fs/xfs/xfs_trans.c. Caller xfs_create+0x9f7/0x1370 [ 138.282861][ T5187] CPU: 1 PID: 5187 Comm: syz.0.209 Not tainted 5.15.170-syzkaller #0 [ 138.290982][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.301057][ T5187] Call Trace: [ 138.304337][ T5187] [ 138.307267][ T5187] dump_stack_lvl+0x1e3/0x2d0 [ 138.311957][ T5187] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 138.317588][ T5187] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 138.323250][ T5187] xfs_trans_cancel+0x1c9/0x410 [ 138.328103][ T5187] ? xfs_create+0x9f7/0x1370 [ 138.332700][ T5187] xfs_create+0x9f7/0x1370 [ 138.337138][ T5187] ? xfs_inode_inherit_flags2+0x340/0x340 [ 138.342875][ T5187] ? posix_acl_create+0x155/0x420 [ 138.347919][ T5187] xfs_generic_create+0x426/0xd00 [ 138.352951][ T5187] ? xfs_vn_tmpfile+0x40/0x40 [ 138.357630][ T5187] ? from_kgid+0x1a3/0x730 [ 138.362053][ T5187] ? common_perm+0x16a/0x1c0 [ 138.366647][ T5187] ? apparmor_path_mkdir+0x204/0x2a0 [ 138.371931][ T5187] ? generic_permission+0x21c/0x4f0 [ 138.377139][ T5187] ? inode_permission+0xf7/0x450 [ 138.382081][ T5187] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 138.387106][ T5187] ? security_inode_mkdir+0xb4/0x100 [ 138.392400][ T5187] vfs_mkdir+0x3b6/0x590 [ 138.396652][ T5187] do_mkdirat+0x260/0x520 [ 138.400983][ T5187] ? vfs_mkdir+0x590/0x590 [ 138.405399][ T5187] ? getname_flags+0x1ec/0x4e0 [ 138.410171][ T5187] __x64_sys_mkdirat+0x85/0x90 [ 138.414937][ T5187] do_syscall_64+0x3b/0xb0 [ 138.419351][ T5187] ? clear_bhb_loop+0x15/0x70 [ 138.424028][ T5187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.429922][ T5187] RIP: 0033:0x7f9347f2afb7 [ 138.434337][ T5187] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.453945][ T5187] RSP: 002b:00007f93463a3e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 138.462367][ T5187] RAX: ffffffffffffffda RBX: 00007f93463a3ef0 RCX: 00007f9347f2afb7 [ 138.470342][ T5187] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c [ 138.478321][ T5187] RBP: 0000000000000000 R08: 0000000020000000 R09: 0000000000000000 [ 138.486307][ T5187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 138.494303][ T5187] R13: 00007f93463a3eb0 R14: 0000000000000000 R15: 0000000000000000 [ 138.502300][ T5187] [ 138.553929][ T5187] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x1e2/0x410 (fs/xfs/xfs_trans.c:955). Shutting down filesystem. [ 138.613178][ T5187] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 138.632647][ T5221] loop4: detected capacity change from 0 to 512 [ 138.790124][ T5221] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 138.821897][ T5221] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 138.887419][ T5221] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 138.967715][ T5221] EXT4-fs (loop4): orphan cleanup on readonly fs [ 138.975207][ T5221] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.217: lblock 0 mapped to illegal pblock 4 (length 1) [ 139.087930][ T5223] loop3: detected capacity change from 0 to 32768 [ 139.100063][ T4180] XFS (loop0): Unmounting Filesystem [ 139.115157][ T5221] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 139.134953][ T5221] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noquota,errors=continue,noload,init_itable=0x0000000000001000,usrjquota="init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 139.433905][ T5235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 139.442913][ T5235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 139.555965][ T5221] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (20904!=33349) [ 139.654583][ T5223] XFS (loop3): Mounting V5 Filesystem [ 140.232683][ T5223] XFS (loop3): Ending clean mount [ 140.308163][ T5244] loop4: detected capacity change from 0 to 512 [ 140.340123][ T5225] loop2: detected capacity change from 0 to 32768 [ 140.401696][ T5223] XFS (loop3): Quotacheck needed: Please wait. [ 140.433559][ T5225] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.219 (5225) [ 140.472011][ T5244] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.488909][ T5244] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.742142][ T5251] loop0: detected capacity change from 0 to 4096 [ 140.850998][ T5251] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 140.887681][ T5251] ntfs: (device loop0): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 140.897276][ T5251] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 140.948474][ T5251] ntfs: volume version 3.1. [ 141.034599][ T5223] XFS (loop3): Quotacheck: Done. [ 141.230513][ T5225] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 141.255854][ T5225] BTRFS info (device loop2): using free space tree [ 141.262514][ T5225] BTRFS info (device loop2): has skinny extents [ 141.738085][ T4168] XFS (loop3): Unmounting Filesystem [ 142.107015][ T5225] BTRFS error (device loop2): open_ctree failed [ 142.205118][ T5242] loop1: detected capacity change from 0 to 32768 [ 142.408762][ T5242] ERROR: (device loop1): diAllocAG: nfreeinos = 0, but iag on freelist [ 142.408762][ T5242] [ 142.734219][ T5242] ERROR: (device loop1): remounting filesystem as read-only [ 142.973619][ T5242] ialloc: diAlloc returned -5! [ 143.344890][ T4167] non-latin1 character 0x2e66 found in JFS file name [ 143.394047][ T4167] mount with iocharset=utf8 to access [ 144.201736][ T4258] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.351635][ T4167] syz-executor (4167) used greatest stack depth: 18776 bytes left [ 144.359444][ T4258] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.429362][ T5300] loop0: detected capacity change from 0 to 64 [ 144.439808][ T5301] loop2: detected capacity change from 0 to 256 [ 144.556389][ T5301] exfat: Deprecated parameter 'namecase' [ 144.582869][ T5301] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 144.658420][ T4258] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.726126][ T26] audit: type=1800 audit(1730940026.134:19): pid=5301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.233" name="bus" dev="loop2" ino=1048607 res=0 errno=0 [ 145.132424][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 145.141972][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 145.334292][ T4258] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.390968][ T5308] loop3: detected capacity change from 0 to 512 [ 145.708594][ T5308] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 145.791559][ T5297] loop4: detected capacity change from 0 to 32768 [ 145.799739][ T5308] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.971883][ T5302] chnl_net:caif_netlink_parms(): no params data found [ 146.025258][ T5297] XFS (loop4): Mounting V5 Filesystem [ 146.038070][ T5310] loop2: detected capacity change from 0 to 32768 [ 146.090389][ T5310] JBD2: Ignoring recovery information on journal [ 146.195480][ T5297] XFS (loop4): Ending clean mount [ 146.262782][ T5297] XFS (loop4): Quotacheck needed: Please wait. [ 146.299214][ T5332] loop3: detected capacity change from 0 to 1 [ 146.348264][ T5310] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 146.383999][ T5297] XFS (loop4): Quotacheck: Done. [ 146.395660][ T5332] attempt to access beyond end of device [ 146.395660][ T5332] loop3: rw=2048, want=8, limit=1 [ 146.445171][ T5332] SQUASHFS error: Failed to read block 0x0: -5 [ 146.451693][ T5332] unable to read squashfs_super_block [ 146.522869][ T4169] XFS (loop4): Unmounting Filesystem [ 146.543046][ T5302] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.589793][ T5302] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.621723][ T4170] ocfs2: Unmounting device (7,2) on (node local) [ 146.629696][ T5302] device bridge_slave_0 entered promiscuous mode [ 146.680810][ T4221] Bluetooth: hci1: command 0x0409 tx timeout [ 146.717678][ T5302] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.724830][ T5302] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.786422][ T5302] device bridge_slave_1 entered promiscuous mode [ 146.837804][ T5316] loop0: detected capacity change from 0 to 32768 [ 146.954009][ T5302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.009884][ T5302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.042338][ T5359] loop3: detected capacity change from 0 to 8 [ 147.048691][ T5316] XFS (loop0): Mounting V5 Filesystem [ 147.140053][ T5359] squashfs image failed sanity check [ 147.230975][ T5302] team0: Port device team_slave_0 added [ 147.281109][ T5316] XFS (loop0): Ending clean mount [ 147.309141][ T5302] team0: Port device team_slave_1 added [ 147.382187][ T5302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.409597][ T5302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.674892][ T4180] XFS (loop0): Unmounting Filesystem [ 148.908950][ T4221] Bluetooth: hci1: command 0x041b tx timeout [ 149.035596][ T5302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.345368][ T5392] loop4: detected capacity change from 0 to 4096 [ 149.356444][ T5392] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 149.415244][ T5392] ntfs: (device loop4): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 149.424853][ T5392] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 149.476130][ T5392] ntfs: volume version 3.1. [ 149.594197][ T5302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.658486][ T5302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.781186][ T5302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.973967][ T5367] loop2: detected capacity change from 0 to 32768 [ 150.319991][ T5302] device hsr_slave_0 entered promiscuous mode [ 150.383806][ T5302] device hsr_slave_1 entered promiscuous mode [ 150.413980][ T5302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.425934][ T5302] Cannot create hsr debugfs directory [ 150.832156][ T4258] device hsr_slave_0 left promiscuous mode [ 150.854472][ T5398] loop3: detected capacity change from 0 to 32768 [ 150.877182][ T4258] device hsr_slave_1 left promiscuous mode [ 150.891317][ T4258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.911210][ T5398] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun" [ 150.915711][ T4221] Bluetooth: hci1: command 0x040f tx timeout [ 150.927465][ T5398] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)... [ 150.951437][ T4258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.980069][ T4258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.017313][ T4258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.037152][ T5398] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 0ms [ 151.055924][ T4258] device bridge_slave_1 left promiscuous mode [ 151.066103][ T4258] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.066562][ T21] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use [ 151.092372][ T5416] loop4: detected capacity change from 0 to 32768 [ 151.099276][ T21] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal... [ 151.129552][ T4258] device bridge_slave_0 left promiscuous mode [ 151.142582][ T4258] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.167714][ T21] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 68ms [ 151.180608][ T21] gfs2: fsid=_dev_net_tun.0: jid=0: Done [ 151.189725][ T5398] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount [ 151.207808][ T5416] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 151.230180][ T4417] (kworker/u4:10,4417,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 151.263269][ T4258] device veth1_macvtap left promiscuous mode [ 151.273628][ T4258] device veth0_macvtap left promiscuous mode [ 151.280820][ T4258] device veth1_vlan left promiscuous mode [ 151.289318][ T4258] device veth0_vlan left promiscuous mode [ 151.352871][ T5424] (syz.4.254,5424,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 151.373967][ T5424] (syz.4.254,5424,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 151.386271][ T5424] (syz.4.254,5424,1):__ocfs2_prepare_orphan_dir:2166 ERROR: status = -2 [ 151.394640][ T5424] (syz.4.254,5424,1):ocfs2_prepare_orphan_dir:2208 ERROR: status = -2 [ 151.404863][ T5424] (syz.4.254,5424,1):ocfs2_prepare_orphan_dir:2224 ERROR: status = -2 [ 151.414061][ T5424] (syz.4.254,5424,1):ocfs2_unlink:962 ERROR: status = -2 [ 151.424311][ T26] audit: type=1800 audit(1730940032.844:20): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.254" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 151.465365][ T4169] ocfs2: Unmounting device (7,4) on (node local) [ 151.847399][ T5436] loop4: detected capacity change from 0 to 512 [ 151.881123][ T5436] EXT4-fs (loop4): Ignoring removed oldalloc option [ 151.894366][ T5436] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.908325][ T4258] team0 (unregistering): Port device team_slave_1 removed [ 151.918478][ T5436] EXT4-fs (loop4): 1 truncate cleaned up [ 151.924182][ T5436] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,oldalloc,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 151.924732][ T4258] team0 (unregistering): Port device team_slave_0 removed [ 151.958403][ T5278] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 151.974096][ T5436] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.261: corrupted in-inode xattr [ 151.999808][ T5436] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1751: inode #15: comm syz.4.261: unable to update i_inline_off [ 152.012474][ T5436] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 152.032693][ T4258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.049967][ T4258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.150362][ T4258] bond0 (unregistering): Released all slaves [ 152.182598][ T5441] loop4: detected capacity change from 0 to 2048 [ 152.225293][ T5421] gretap0: refused to change device tx_queue_len [ 152.232312][ T5421] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 152.270923][ T5441] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 152.324967][ T5441] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 152.325821][ T5278] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.364185][ T5441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.413408][ T5278] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.437072][ T5278] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.465940][ T5278] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.569805][ T5452] loop3: detected capacity change from 0 to 16 [ 152.635909][ T5452] erofs: (device loop3): mounted with root inode @ nid 36. [ 153.159046][ T5277] Bluetooth: hci1: command 0x0419 tx timeout [ 153.255795][ T5278] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.305695][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.365997][ T5278] usb 1-1: Product: syz [ 153.370192][ T5278] usb 1-1: Manufacturer: syz [ 153.436572][ T5278] cdc_wdm 1-1:1.0: skipping garbage [ 153.452110][ T5278] cdc_wdm 1-1:1.0: skipping garbage [ 153.511655][ T5278] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 153.557920][ T5278] cdc_wdm 1-1:1.0: Unknown control protocol [ 154.516534][ T5278] usb 1-1: USB disconnect, device number 4 [ 154.635242][ T5477] loop3: detected capacity change from 0 to 512 [ 154.682739][ T5446] loop2: detected capacity change from 0 to 32768 [ 154.755473][ T5477] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 154.800339][ T5477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.270: inode #1: comm syz.3.270: iget: illegal inode # [ 154.845729][ T5477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.270: error while reading EA inode 1 err=-117 [ 154.876484][ T5302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 154.907274][ T5477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.270: inode #1: comm syz.3.270: iget: illegal inode # [ 154.918532][ T5302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 154.936702][ T5477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.270: error while reading EA inode 1 err=-117 [ 154.937484][ T5446] XFS (loop2): Mounting V5 Filesystem [ 154.958258][ T5302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 154.982280][ T5302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 155.047361][ T5477] EXT4-fs (loop3): 1 orphan inode deleted [ 155.053394][ T5477] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,abort,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 155.084391][ T5469] loop4: detected capacity change from 0 to 32768 [ 155.119290][ T5446] XFS (loop2): Ending clean mount [ 155.150820][ T5446] XFS (loop2): Quotacheck needed: Please wait. [ 155.165331][ T5302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.197532][ T5469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.268 (5469) [ 155.268897][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.281397][ T5446] XFS (loop2): Quotacheck: Done. [ 155.281727][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.310790][ T5446] XFS (loop2): User initiated shutdown received. [ 155.324751][ T5469] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 155.336814][ T5302] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.346979][ T5446] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 155.390679][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.399231][ T5469] BTRFS info (device loop4): using free space tree [ 155.406504][ T4213] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.426806][ T5469] BTRFS info (device loop4): has skinny extents [ 155.441776][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.457677][ T5446] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 155.470208][ T4450] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.477480][ T4450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.560921][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.617086][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.632333][ T4170] XFS (loop2): Unmounting Filesystem [ 155.655830][ T4213] usb 1-1: Using ep0 maxpacket: 16 [ 155.724663][ T5528] loop3: detected capacity change from 0 to 256 [ 155.727177][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.740311][ T4450] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.747444][ T4450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.775859][ T4213] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 155.792680][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.811648][ T5528] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 155.852998][ T4213] usb 1-1: config 0 has no interface number 0 [ 155.859785][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.881863][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.891174][ T4213] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 155.946562][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.955071][ T26] audit: type=1800 audit(1730940037.374:21): pid=5528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.272" name="file2" dev="loop3" ino=1048608 res=0 errno=0 [ 155.965456][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.990467][ T4213] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 156.010349][ T5528] exFAT-fs (loop3): hint_cluster is invalid (17) [ 156.035485][ T5528] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 156.047212][ T5469] BTRFS info (device loop4): enabling ssd optimizations [ 156.068733][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.092374][ T5528] exFAT-fs (loop3): Filesystem has been set read-only [ 156.107070][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.154566][ T26] audit: type=1804 audit(1730940037.574:22): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.272" name="/newroot/70/file2/file2" dev="loop3" ino=1048608 res=1 errno=0 [ 156.156932][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.203696][ T4213] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 156.236842][ T4213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.249493][ T4213] usb 1-1: Product: syz [ 156.261210][ T4213] usb 1-1: Manufacturer: syz [ 156.267038][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.275865][ T4213] usb 1-1: SerialNumber: syz [ 156.282555][ T4213] usb 1-1: config 0 descriptor?? [ 156.318822][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.320520][ T5497] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.348877][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.389030][ T5497] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.401598][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.668181][ T5497] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.675318][ T5497] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 157.260969][ T5556] loop2: detected capacity change from 0 to 16 [ 157.310210][ T5556] erofs: (device loop2): mounted with root inode @ nid 36. [ 157.365037][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.411047][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.438251][ T5302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.465842][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.509474][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.623460][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.632782][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.642111][ T5302] device veth0_vlan entered promiscuous mode [ 157.656789][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.674876][ T5576] loop3: detected capacity change from 0 to 512 [ 157.675021][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.693700][ T4213] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 157.714307][ T4213] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 157.739251][ T5302] device veth1_vlan entered promiscuous mode [ 157.753813][ T4213] asix: probe of 1-1:0.251 failed with error -71 [ 157.783867][ T4213] usb 1-1: USB disconnect, device number 5 [ 157.832118][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.849530][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.872524][ T5581] loop2: detected capacity change from 0 to 164 [ 157.878675][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.894510][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.909028][ T5302] device veth0_macvtap entered promiscuous mode [ 157.921999][ T5302] device veth1_macvtap entered promiscuous mode [ 157.934966][ T5576] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.280: invalid indirect mapped block 256 (level 2) [ 157.942956][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.960339][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.970334][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.981153][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.991043][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.991064][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.991071][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.991080][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.992542][ T5302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.041855][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.052511][ T5581] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 158.060179][ T5576] EXT4-fs (loop3): Remounting filesystem read-only [ 158.096964][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.123239][ T5576] EXT4-fs (loop3): 2 truncates cleaned up [ 158.129471][ T5576] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,debug_want_extra_isize=0x0000000000000008,data_err=ignore,. Quota mode: writeback. [ 158.130906][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.188691][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.216461][ T26] audit: type=1800 audit(1730940039.644:23): pid=5576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.280" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 158.258093][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.280268][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.302013][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.322867][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.343085][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.364383][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.385807][ T5302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.405618][ T5302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.456254][ T5302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.475089][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.510453][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.580891][ T5302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.624738][ T5302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.671991][ T5302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.706863][ T5302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.840209][ T5585] loop4: detected capacity change from 0 to 32768 [ 158.887930][ T5603] loop0: detected capacity change from 0 to 16 [ 158.905269][ T5585] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.281 (5585) [ 158.947373][ T4417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.975780][ T5603] erofs: (device loop0): mounted with root inode @ nid 36. [ 158.983430][ T4417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.021116][ T5585] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 159.054858][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.062679][ T5603] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 159.064719][ T5585] BTRFS info (device loop4): enabling disk space caching [ 159.095597][ T5608] program syz.3.291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.105904][ T5603] erofs: (device loop0): z_erofs_readahead: readahead error at page 3604 @ nid 36 [ 159.115502][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.124380][ T5585] BTRFS info (device loop4): force clearing of disk cache [ 159.140970][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.143018][ T5603] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 159.171299][ T5605] loop2: detected capacity change from 0 to 8192 [ 159.184712][ T5585] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 159.201602][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.236115][ T5585] BTRFS info (device loop4): use zstd compression, level 3 [ 159.237662][ T5610] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 159.256107][ T5585] BTRFS info (device loop4): disk space caching is enabled [ 159.256130][ T5585] BTRFS info (device loop4): has skinny extents [ 159.289414][ T5605] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.330575][ T5603] erofs: (device loop0): z_erofs_readahead: readahead error at page 3603 @ nid 36 [ 159.343852][ T5603] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 159.356834][ T5603] erofs: (device loop0): z_erofs_readahead: readahead error at page 3602 @ nid 36 [ 159.369821][ T5603] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 159.384259][ T5603] erofs: (device loop0): z_erofs_readahead: readahead error at page 3601 @ nid 36 [ 159.393672][ T5603] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 159.407931][ T5603] erofs: (device loop0): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 159.417285][ T5603] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 159.431120][ T5603] erofs: (device loop0): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 159.445217][ T5610] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95] [ 159.512571][ T5624] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 159.590476][ T5585] BTRFS info (device loop4): enabling ssd optimizations [ 159.686099][ T5585] BTRFS info (device loop4): clearing free space tree [ 159.724042][ T5585] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 159.766957][ T5642] loop3: detected capacity change from 0 to 512 [ 159.783119][ T5585] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.041610][ T5642] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.401248][ T5642] EXT4-fs (loop3): 1 truncate cleaned up [ 160.465729][ T5642] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 161.039865][ T5664] loop3: detected capacity change from 0 to 128 [ 161.173813][ T5664] EXT4-fs (loop3): Test dummy encryption mode enabled [ 161.217279][ T5664] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,test_dummy_encryption,,errors=continue. Quota mode: none. [ 161.241851][ T5664] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.379385][ T5658] loop1: detected capacity change from 0 to 32768 [ 161.400098][ T5654] loop0: detected capacity change from 0 to 32768 [ 161.452248][ T5658] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 161.470886][ T5658] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 161.485663][ T5654] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.297 (5654) [ 161.594516][ T5658] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 161.614169][ T5654] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 161.643828][ T5654] BTRFS info (device loop0): using free space tree [ 161.663487][ T5671] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 161.670624][ T5654] BTRFS info (device loop0): has skinny extents [ 161.673526][ T5671] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 161.701633][ T5656] loop2: detected capacity change from 0 to 32768 [ 161.742957][ T5678] loop3: detected capacity change from 0 to 4096 [ 161.788064][ T5671] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 114ms [ 161.825234][ T5656] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.298 (5656) [ 161.842886][ T5671] gfs2: fsid=syz:syz.0: jid=0: Done [ 161.862624][ T4355] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4355) [ 161.890149][ T5656] overlayfs: overlapping lowerdir path [ 161.908433][ T5658] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 162.008908][ T5658] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 162.035220][ T5693] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.065739][ T5658] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 162.065739][ T5658] inode = 12 2341 [ 162.065739][ T5658] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 162.095907][ T5658] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 162.158367][ T5654] BTRFS info (device loop0): enabling ssd optimizations [ 162.180559][ T5658] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 162.192142][ T5658] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 162.204839][ T5658] gfs2: fsid=syz:syz.0: File system withdrawn [ 162.211069][ T5658] CPU: 1 PID: 5658 Comm: syz.1.299 Not tainted 5.15.170-syzkaller #0 [ 162.219147][ T5658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 162.229220][ T5658] Call Trace: [ 162.232506][ T5658] [ 162.235448][ T5658] dump_stack_lvl+0x1e3/0x2d0 [ 162.240152][ T5658] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 162.245809][ T5658] ? panic+0x860/0x860 [ 162.249910][ T5658] ? do_raw_spin_unlock+0x137/0x8b0 [ 162.254639][ T5676] loop4: detected capacity change from 0 to 32768 [ 162.255128][ T5658] gfs2_withdraw+0xe9e/0x14e0 [ 162.266214][ T5658] ? gfs2_lm+0x230/0x230 [ 162.270469][ T5658] ? gfs2_dirent_scan+0x276/0x640 [ 162.275509][ T5658] ? panic+0x860/0x860 [ 162.279609][ T5658] ? gfs2_consist_inode_i+0xc0/0xe0 [ 162.284831][ T5658] gfs2_dirent_scan+0x512/0x640 [ 162.285655][ T4213] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 162.289697][ T5658] ? gfs2_dirent_scan+0x640/0x640 [ 162.289727][ T5658] gfs2_dir_read+0x831/0x1af0 [ 162.306879][ T5658] ? gfs2_dir_hash_inval+0x80/0x80 [ 162.312011][ T5658] ? _raw_spin_unlock+0x24/0x40 [ 162.316876][ T5658] ? gfs2_glock_nq+0xc6e/0x15e0 [ 162.321750][ T5658] ? gfs2_glock_wait+0x137/0x1c0 [ 162.326704][ T5658] gfs2_readdir+0x146/0x1a0 [ 162.331221][ T5658] ? __fdget_pos+0x2cb/0x380 [ 162.332191][ T5678] syz.3.303 (5678) used greatest stack depth: 18224 bytes left [ 162.335821][ T5658] ? gfs2_fallocate+0x490/0x490 [ 162.335847][ T5658] ? gfs2_readdir+0x102/0x1a0 [ 162.335864][ T5658] ? iterate_dir+0x10a/0x570 [ 162.335882][ T5658] ? iterate_dir+0x10a/0x570 [ 162.335898][ T5658] ? fsnotify_perm+0x442/0x590 [ 162.366820][ T5658] iterate_dir+0x224/0x570 [ 162.371248][ T5658] ? gfs2_fallocate+0x490/0x490 [ 162.376116][ T5658] __se_sys_getdents64+0x209/0x4f0 [ 162.381256][ T5658] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 162.387257][ T5658] ? __x64_sys_getdents64+0x80/0x80 [ 162.392476][ T5658] ? filldir+0x720/0x720 [ 162.396739][ T5658] ? syscall_enter_from_user_mode+0x2e/0x240 [ 162.402737][ T5658] ? lockdep_hardirqs_on+0x94/0x130 [ 162.407949][ T5658] ? syscall_enter_from_user_mode+0x2e/0x240 [ 162.413950][ T5658] do_syscall_64+0x3b/0xb0 [ 162.418381][ T5658] ? clear_bhb_loop+0x15/0x70 [ 162.423070][ T5658] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.428982][ T5658] RIP: 0033:0x7f96948b4719 [ 162.433408][ T5658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.453022][ T5658] RSP: 002b:00007f9692d2c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 162.461452][ T5658] RAX: ffffffffffffffda RBX: 00007f9694a6bf80 RCX: 00007f96948b4719 [ 162.469438][ T5658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 162.477421][ T5658] RBP: 00007f969492739e R08: 0000000000000000 R09: 0000000000000000 [ 162.485404][ T5658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.493385][ T5658] R13: 0000000000000000 R14: 00007f9694a6bf80 R15: 00007ffd69006e88 [ 162.501393][ T5658] [ 162.578043][ T4213] usb 3-1: Using ep0 maxpacket: 32 [ 162.696137][ T4213] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 162.704348][ T4213] usb 3-1: config 0 has no interface number 0 [ 162.721108][ T4213] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 162.745701][ T4213] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 528 [ 162.772590][ T4213] usb 3-1: config 0 interface 133 altsetting 0 has an invalid endpoint with address 0x78, skipping [ 162.966047][ T4213] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 162.975115][ T4213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.013056][ T4213] usb 3-1: Product: syz [ 163.017797][ T4213] usb 3-1: Manufacturer: syz [ 163.022412][ T4213] usb 3-1: SerialNumber: syz [ 163.064362][ T4213] usb 3-1: config 0 descriptor?? [ 163.095876][ T5695] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 163.103087][ T5695] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 163.125720][ T5695] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 163.386964][ T5708] loop3: detected capacity change from 0 to 32768 [ 163.505755][ T4213] usb 3-1: probing VID:PID(0424:012C) [ 163.527481][ T4213] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0B [ 163.545808][ T4213] usb 3-1: vub300 testing BULK OUT EndPoint(1) 0F [ 163.564373][ T4213] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 163.601362][ T5714] loop4: detected capacity change from 0 to 128 [ 163.628081][ T4213] vub300: probe of 3-1:0.133 failed with error -22 [ 163.650116][ T4213] usb 3-1: USB disconnect, device number 9 [ 163.781448][ T5710] loop1: detected capacity change from 0 to 40427 [ 163.791221][ T5712] loop0: detected capacity change from 0 to 32768 [ 163.850265][ T5712] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.305 (5712) [ 164.124866][ T5719] loop3: detected capacity change from 0 to 4096 [ 164.661682][ T5710] F2FS-fs (loop1): invalid crc value [ 164.730388][ T5726] loop2: detected capacity change from 0 to 1024 [ 164.738332][ T5719] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 164.783561][ T5719] ntfs: (device loop3): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 164.793202][ T5719] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 164.831301][ T5712] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 164.834872][ T5719] ntfs: volume version 3.1. [ 164.852365][ T5710] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.853647][ T5712] BTRFS info (device loop0): using free space tree [ 164.865470][ T5712] BTRFS info (device loop0): has skinny extents [ 164.874770][ T5726] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 164.885637][ T5726] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 165.542600][ T5726] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,bsddf,barrier=0x0000000000000000,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,resuid=0x000000000000ee00,mblk_io_submit,acl,nomblk_io_submit,,errors=continue. Quota mode: none. [ 165.575874][ T5710] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 165.763627][ T26] audit: type=1800 audit(1730940047.184:24): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.307" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 165.834770][ T5710] attempt to access beyond end of device [ 165.834770][ T5710] loop1: rw=34817, want=77952, limit=40427 [ 165.885733][ T5712] BTRFS info (device loop0): enabling ssd optimizations [ 165.940146][ T5758] loop4: detected capacity change from 0 to 2048 [ 166.020414][ T5758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.058158][ T5747] loop3: detected capacity change from 0 to 32768 [ 166.068335][ T5302] attempt to access beyond end of device [ 166.068335][ T5302] loop1: rw=2049, want=45104, limit=40427 [ 166.205931][ T4213] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 166.223441][ T5747] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 166.379092][ T5747] (syz.3.313,5747,0):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 166.486352][ T4168] ocfs2: Unmounting device (7,3) on (node local) [ 166.563136][ T5776] loop4: detected capacity change from 0 to 256 [ 166.745792][ T4213] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 166.772066][ T4213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.799405][ T4213] usb 3-1: Product: syz [ 166.803606][ T4213] usb 3-1: Manufacturer: syz [ 166.813503][ T4213] usb 3-1: SerialNumber: syz [ 166.834429][ T5782] loop1: detected capacity change from 0 to 512 [ 166.887836][ T4213] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 166.914733][ T5787] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.324'. [ 166.966484][ T5789] loop3: detected capacity change from 0 to 1024 [ 167.102705][ T5796] kvm [5795]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x85 [ 167.133035][ T5789] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 167.137742][ T5782] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.317: bad orphan inode 4 [ 167.141995][ T5789] EXT4-fs (loop3): orphan cleanup on readonly fs [ 167.158582][ T5789] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.325: Freeing blocks not in datazone - block = 0, count = 4096 [ 167.314927][ T5789] EXT4-fs (loop3): 1 orphan inode deleted [ 167.364655][ T5789] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.385649][ T5782] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.916568][ T5782] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.317: bg 0: block 3: invalid block bitmap [ 167.932871][ T5802] device syzkaller1 entered promiscuous mode [ 167.960616][ T26] audit: type=1326 audit(1730940049.384:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c467ca719 code=0x7ffc0000 [ 168.074458][ T26] audit: type=1326 audit(1730940049.424:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f5c467ca719 code=0x7ffc0000 [ 168.085726][ T4213] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 168.169071][ T5817] loop4: detected capacity change from 0 to 1024 [ 168.179953][ T26] audit: type=1326 audit(1730940049.424:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.3.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c467ca719 code=0x7ffc0000 [ 168.756115][ T4267] usb 3-1: USB disconnect, device number 10 [ 169.336364][ T4213] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 169.343664][ T4213] ath9k_htc: Failed to initialize the device [ 169.438612][ T4267] usb 3-1: ath9k_htc: USB layer deinitialized [ 169.468021][ T5840] process 'syz.0.343' launched './file2' with NULL argv: empty string added [ 169.834668][ T5860] loop2: detected capacity change from 0 to 512 [ 169.953982][ T5860] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 169.975627][ T5860] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.148683][ T5867] loop0: detected capacity change from 0 to 16 [ 170.285042][ T5867] erofs: (device loop0): mounted with root inode @ nid 36. [ 170.801426][ T4213] Bluetooth: hci3: command 0x0406 tx timeout [ 170.807568][ T4213] Bluetooth: hci2: command 0x0406 tx timeout [ 170.835118][ T4213] Bluetooth: hci4: command 0x0406 tx timeout [ 171.146136][ T5873] loop0: detected capacity change from 0 to 512 [ 171.207370][ T5848] loop4: detected capacity change from 0 to 32768 [ 171.220472][ T5858] loop3: detected capacity change from 0 to 32768 [ 171.248507][ T5848] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.346 (5848) [ 171.268917][ T5873] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 171.301885][ T5873] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 171.350484][ T5858] (syz.3.350,5858,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 171.396403][ T5848] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 171.405096][ T5848] BTRFS info (device loop4): using free space tree [ 171.452768][ T5873] EXT4-fs (loop0): 1 truncate cleaned up [ 171.459896][ T5858] (syz.3.350,5858,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 171.466012][ T5873] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,grpquota,data_err=ignore,grpjquota="nodiscard,errors=remount-ro,nodelalloc,sysvgroups,norecovery,. Quota mode: writeback. [ 171.486332][ T5869] loop2: detected capacity change from 0 to 40427 [ 171.503799][ T5848] BTRFS info (device loop4): has skinny extents [ 171.515786][ T5858] (syz.3.350,5858,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 171.532155][ T5845] loop1: detected capacity change from 0 to 40427 [ 171.580980][ T5848] BTRFS info (device loop4): enabling ssd optimizations [ 171.581036][ T5873] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #2: block 4: comm syz.0.355: lblock 0 mapped to illegal pblock 4 (length 1) [ 171.614330][ T5845] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 171.634666][ T5869] F2FS-fs (loop2): invalid crc value [ 171.665360][ T5858] JBD2: Ignoring recovery information on journal [ 171.672325][ T5845] F2FS-fs (loop1): Unrecognized mount option "disable_roll_forwarta" or missing value [ 171.701904][ T5869] F2FS-fs (loop2): Found nat_bits in checkpoint [ 171.711383][ T5873] EXT4-fs (loop0): Remounting filesystem read-only [ 171.794037][ T5898] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #2: block 4: comm syz.0.355: lblock 0 mapped to illegal pblock 4 (length 1) [ 171.859437][ T5858] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 171.899660][ T5898] EXT4-fs (loop0): Remounting filesystem read-only [ 172.025849][ T5869] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 172.065673][ T5858] [ 172.068040][ T5858] ====================================================== [ 172.075054][ T5858] WARNING: possible circular locking dependency detected [ 172.082067][ T5858] 5.15.170-syzkaller #0 Not tainted [ 172.087259][ T5858] ------------------------------------------------------ [ 172.094267][ T5858] syz.3.350/5858 is trying to acquire lock: [ 172.100146][ T5858] ffff88807576df48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x12e/0x27a0 [ 172.113637][ T5858] [ 172.113637][ T5858] but task is already holding lock: [ 172.120975][ T5858] ffff8880757694a0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x221/0x2a0 [ 172.131831][ T5858] [ 172.131831][ T5858] which lock already depends on the new lock. [ 172.131831][ T5858] [ 172.142409][ T5858] [ 172.142409][ T5858] the existing dependency chain (in reverse order) is: [ 172.151430][ T5858] [ 172.151430][ T5858] -> #7 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 172.160303][ T5858] lock_acquire+0x1db/0x4f0 [ 172.165337][ T5858] down_write+0x38/0x60 [ 172.170033][ T5858] ocfs2_lock_global_qf+0x221/0x2a0 [ 172.175763][ T5858] ocfs2_acquire_dquot+0x299/0xb40 [ 172.181410][ T5858] dqget+0x762/0xe90 [ 172.185836][ T5858] ocfs2_setattr+0xf5f/0x1c70 [ 172.191049][ T5858] notify_change+0xc6d/0xf50 [ 172.196162][ T5858] chown_common+0x592/0x890 [ 172.201188][ T5858] ksys_fchown+0xde/0x150 [ 172.206037][ T5858] __x64_sys_fchown+0x76/0x80 [ 172.211235][ T5858] do_syscall_64+0x3b/0xb0 [ 172.216179][ T5858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.222621][ T5858] [ 172.222621][ T5858] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 172.224378][ T5903] loop1: detected capacity change from 0 to 8192 [ 172.233135][ T5858] lock_acquire+0x1db/0x4f0 [ 172.233156][ T5858] down_write+0x38/0x60 [ 172.233169][ T5858] ocfs2_lock_global_qf+0x202/0x2a0 [ 172.233185][ T5858] ocfs2_acquire_dquot+0x299/0xb40 [ 172.233198][ T5858] dqget+0x762/0xe90 [ 172.233212][ T5858] ocfs2_setattr+0xf5f/0x1c70 [ 172.233228][ T5858] notify_change+0xc6d/0xf50 [ 172.233242][ T5858] chown_common+0x592/0x890 [ 172.233257][ T5858] ksys_fchown+0xde/0x150 [ 172.233271][ T5858] __x64_sys_fchown+0x76/0x80 [ 172.233286][ T5858] do_syscall_64+0x3b/0xb0 [ 172.233301][ T5858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.233316][ T5858] [ 172.233316][ T5858] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 172.309089][ T5858] lock_acquire+0x1db/0x4f0 [ 172.314099][ T5858] __mutex_lock_common+0x1da/0x25a0 [ 172.319799][ T5858] mutex_lock_nested+0x17/0x20 [ 172.325064][ T5858] dquot_commit+0x57/0x510 [ 172.329983][ T5858] ext4_write_dquot+0x1fd/0x360 [ 172.335458][ T5858] mark_all_dquot_dirty+0xf7/0x400 [ 172.341077][ T5858] __dquot_free_space+0x932/0xe40 [ 172.346603][ T5858] ext4_free_blocks+0x1f5c/0x2e90 [ 172.352141][ T5858] ext4_ext_remove_space+0x24da/0x4db0 [ 172.358099][ T5858] ext4_ext_truncate+0x191/0x250 [ 172.363537][ T5858] ext4_truncate+0x9fd/0x1130 [ 172.368714][ T5858] ext4_evict_inode+0xba1/0x1100 [ 172.374151][ T5858] evict+0x529/0x930 [ 172.378549][ T5858] ext4_orphan_cleanup+0x9d9/0x1240 [ 172.384249][ T5858] ext4_fill_super+0x98de/0xa110 [ 172.389688][ T5858] mount_bdev+0x2c9/0x3f0 [ 172.394521][ T5858] legacy_get_tree+0xeb/0x180 [ 172.399700][ T5858] vfs_get_tree+0x88/0x270 [ 172.404616][ T5858] do_new_mount+0x2ba/0xb40 [ 172.409617][ T5858] __se_sys_mount+0x2d5/0x3c0 [ 172.414794][ T5858] do_syscall_64+0x3b/0xb0 [ 172.419721][ T5858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.426120][ T5858] [ 172.426120][ T5858] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 172.433740][ T5858] lock_acquire+0x1db/0x4f0 [ 172.438744][ T5858] down_write+0x38/0x60 [ 172.443410][ T5858] ext4_truncate+0x974/0x1130 [ 172.448679][ T5858] ext4_setattr+0xf96/0x1990 [ 172.453772][ T5858] notify_change+0xc6d/0xf50 [ 172.458861][ T5858] do_truncate+0x21c/0x300 [ 172.463776][ T5858] do_sys_ftruncate+0x2eb/0x390 [ 172.469128][ T5858] do_syscall_64+0x3b/0xb0 [ 172.474067][ T5858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.480482][ T5858] [ 172.480482][ T5858] -> #3 (jbd2_handle){++++}-{0:0}: [ 172.487754][ T5858] lock_acquire+0x1db/0x4f0 [ 172.492761][ T5858] start_this_handle+0x12e1/0x1570 [ 172.498374][ T5858] jbd2__journal_start+0x2d1/0x5c0 [ 172.504004][ T5858] jbd2_journal_start+0x25/0x30 [ 172.509358][ T5858] ocfs2_start_trans+0x3c2/0x6f0 [ 172.514796][ T5858] ocfs2_reserve_local_alloc_bits+0xbf9/0x27a0 [ 172.521450][ T5858] ocfs2_reserve_clusters_with_limit+0x1b4/0xb50 [ 172.528279][ T5858] ocfs2_symlink+0x1424/0x2e20 [ 172.533544][ T5858] vfs_symlink+0x247/0x3d0 [ 172.538464][ T5858] do_symlinkat+0x1fd/0x600 [ 172.543475][ T5858] __x64_sys_symlink+0x7a/0x90 [ 172.548749][ T5858] do_syscall_64+0x3b/0xb0 [ 172.553667][ T5858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.560070][ T5858] [ 172.560070][ T5858] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 172.568582][ T5858] lock_acquire+0x1db/0x4f0 [ 172.573595][ T5858] down_read+0x45/0x2e0 [ 172.578251][ T5858] ocfs2_start_trans+0x3b7/0x6f0 [ 172.583689][ T5858] ocfs2_reserve_local_alloc_bits+0xbf9/0x27a0 [ 172.590342][ T5858] ocfs2_reserve_clusters_with_limit+0x1b4/0xb50 [ 172.597174][ T5858] ocfs2_symlink+0x1424/0x2e20 [ 172.602438][ T5858] vfs_symlink+0x247/0x3d0 [ 172.607357][ T5858] do_symlinkat+0x1fd/0x600 [ 172.612360][ T5858] __x64_sys_symlink+0x7a/0x90 [ 172.617624][ T5858] do_syscall_64+0x3b/0xb0 [ 172.622559][ T5858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.628962][ T5858] [ 172.628962][ T5858] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 172.636423][ T5858] lock_acquire+0x1db/0x4f0 [ 172.641429][ T5858] ocfs2_start_trans+0x2b2/0x6f0 [ 172.646872][ T5858] ocfs2_symlink+0x147f/0x2e20 [ 172.652138][ T5858] vfs_symlink+0x247/0x3d0 [ 172.657054][ T5858] do_symlinkat+0x1fd/0x600 [ 172.662055][ T5858] __x64_sys_symlink+0x7a/0x90 [ 172.667321][ T5858] do_syscall_64+0x3b/0xb0 [ 172.672365][ T5858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.678937][ T5858] [ 172.678937][ T5858] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 172.689513][ T5858] validate_chain+0x1649/0x5930 [ 172.694865][ T5858] __lock_acquire+0x1295/0x1ff0 [ 172.700212][ T5858] lock_acquire+0x1db/0x4f0 [ 172.705214][ T5858] down_write+0x38/0x60 [ 172.709870][ T5858] ocfs2_reserve_local_alloc_bits+0x12e/0x27a0 [ 172.716529][ T5858] ocfs2_reserve_clusters_with_limit+0x1b4/0xb50 [ 172.723360][ T5858] ocfs2_lock_allocators+0x306/0x620 [ 172.729249][ T5858] ocfs2_extend_allocation+0x4e8/0x1ba0 [ 172.735421][ T5858] ocfs2_extend_no_holes+0x1f2/0x490 [ 172.741228][ T5858] ocfs2_acquire_dquot+0x631/0xb40 [ 172.746850][ T5858] dqget+0x762/0xe90 [ 172.751255][ T5858] ocfs2_setattr+0xf5f/0x1c70 [ 172.756439][ T5858] notify_change+0xc6d/0xf50 [ 172.761531][ T5858] chown_common+0x592/0x890 [ 172.766546][ T5858] ksys_fchown+0xde/0x150 [ 172.771405][ T5858] __x64_sys_fchown+0x76/0x80 [ 172.776583][ T5858] do_syscall_64+0x3b/0xb0 [ 172.781504][ T5858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.787902][ T5858] [ 172.787902][ T5858] other info that might help us debug this: [ 172.787902][ T5858] [ 172.798116][ T5858] Chain exists of: [ 172.798116][ T5858] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 172.798116][ T5858] [ 172.818182][ T5858] Possible unsafe locking scenario: [ 172.818182][ T5858] [ 172.825613][ T5858] CPU0 CPU1 [ 172.830962][ T5858] ---- ---- [ 172.836331][ T5858] lock(&ocfs2_quota_ip_alloc_sem_key); [ 172.841946][ T5858] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 172.851731][ T5858] lock(&ocfs2_quota_ip_alloc_sem_key); [ 172.859860][ T5858] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 172.867125][ T5858] [ 172.867125][ T5858] *** DEADLOCK *** [ 172.867125][ T5858] [ 172.875244][ T5858] 5 locks held by syz.3.350/5858: [ 172.880243][ T5858] #0: ffff88806532c460 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 172.889981][ T5858] #1: ffff888075795108 (&type->i_mutex_dir_key#23){++++}-{3:3}, at: chown_common+0x499/0x890 [ 172.900332][ T5858] #2: ffff888061fbe0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x28c/0xb40 [ 172.910327][ T5858] #3: ffff888075769808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x202/0x2a0 [ 172.923269][ T5858] #4: ffff8880757694a0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x221/0x2a0 [ 172.934640][ T5858] [ 172.934640][ T5858] stack backtrace: [ 172.940514][ T5858] CPU: 0 PID: 5858 Comm: syz.3.350 Not tainted 5.15.170-syzkaller #0 [ 172.948561][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 172.958605][ T5858] Call Trace: [ 172.961870][ T5858] [ 172.964783][ T5858] dump_stack_lvl+0x1e3/0x2d0 [ 172.969450][ T5858] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 172.975068][ T5858] ? print_circular_bug+0x12b/0x1a0 [ 172.980248][ T5858] check_noncircular+0x2f8/0x3b0 [ 172.985169][ T5858] ? add_chain_block+0x850/0x850 [ 172.990087][ T5858] ? lockdep_lock+0x11f/0x2a0 [ 172.994746][ T5858] ? __lock_acquire+0x1295/0x1ff0 [ 172.999753][ T5858] validate_chain+0x1649/0x5930 [ 173.004588][ T5858] ? print_irqtrace_events+0x210/0x210 [ 173.010029][ T5858] ? reacquire_held_locks+0x660/0x660 [ 173.015385][ T5858] ? ocfs2_get_system_file_inode+0x1e0/0x7b0 [ 173.021349][ T5858] ? look_up_lock_class+0x77/0x120 [ 173.026443][ T5858] ? register_lock_class+0x100/0x9a0 [ 173.031709][ T5858] ? is_dynamic_key+0x1f0/0x1f0 [ 173.036539][ T5858] ? mark_lock+0x98/0x340 [ 173.040853][ T5858] __lock_acquire+0x1295/0x1ff0 [ 173.045690][ T5858] lock_acquire+0x1db/0x4f0 [ 173.050173][ T5858] ? ocfs2_reserve_local_alloc_bits+0x12e/0x27a0 [ 173.056589][ T5858] ? read_lock_is_recursive+0x10/0x10 [ 173.061952][ T5858] ? __might_sleep+0xc0/0xc0 [ 173.066532][ T5858] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 173.072497][ T5858] ? reacquire_held_locks+0x660/0x660 [ 173.077869][ T5858] ? do_raw_spin_unlock+0x137/0x8b0 [ 173.083055][ T5858] down_write+0x38/0x60 [ 173.087193][ T5858] ? ocfs2_reserve_local_alloc_bits+0x12e/0x27a0 [ 173.093502][ T5858] ocfs2_reserve_local_alloc_bits+0x12e/0x27a0 [ 173.099637][ T5858] ? _raw_spin_unlock+0x40/0x40 [ 173.104473][ T5858] ? stack_trace_save+0x113/0x1c0 [ 173.109478][ T5858] ? stack_trace_snprint+0xe0/0xe0 [ 173.114573][ T5858] ? mark_lock+0x98/0x340 [ 173.118884][ T5858] ? __lock_acquire+0x1295/0x1ff0 [ 173.123997][ T5858] ? ocfs2_complete_local_alloc_recovery+0x620/0x620 [ 173.130664][ T5858] ? read_lock_is_recursive+0x10/0x10 [ 173.136019][ T5858] ? ocfs2_alloc_should_use_local+0x13a/0x2e0 [ 173.142070][ T5858] ? __lock_acquire+0x1ff0/0x1ff0 [ 173.147074][ T5858] ? do_raw_spin_lock+0x14a/0x370 [ 173.152105][ T5858] ? do_raw_spin_unlock+0x137/0x8b0 [ 173.157287][ T5858] ? _raw_spin_unlock+0x24/0x40 [ 173.162123][ T5858] ? ocfs2_alloc_should_use_local+0x13a/0x2e0 [ 173.168172][ T5858] ocfs2_reserve_clusters_with_limit+0x1b4/0xb50 [ 173.174486][ T5858] ? ocfs2_reserve_clusters+0x30/0x30 [ 173.179843][ T5858] ? rcu_is_watching+0x11/0xa0 [ 173.184593][ T5858] ? ocfs2_num_free_extents+0x365/0x680 [ 173.190121][ T5858] ? ocfs2_validate_extent_block+0x580/0x580 [ 173.196085][ T5858] ? ocfs2_read_blocks_sync+0xbc0/0xbc0 [ 173.201613][ T5858] ? do_raw_spin_unlock+0x137/0x8b0 [ 173.206795][ T5858] ocfs2_lock_allocators+0x306/0x620 [ 173.212066][ T5858] ? _ocfs2_clear_bit+0x40/0x40 [ 173.216895][ T5858] ? ocfs2_read_inode_block+0x148/0x1d0 [ 173.222429][ T5858] ? ocfs2_read_inode_block_full+0x1e0/0x1e0 [ 173.228394][ T5858] ocfs2_extend_allocation+0x4e8/0x1ba0 [ 173.233926][ T5858] ? slab_free_freelist_hook+0xdd/0x160 [ 173.239457][ T5858] ? qtree_read_dquot+0x13f/0x650 [ 173.244465][ T5858] ? ocfs2_acquire_dquot+0x2e1/0xb40 [ 173.249731][ T5858] ? ksys_fchown+0xde/0x150 [ 173.254213][ T5858] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.260266][ T5858] ? ocfs2_extend_no_holes+0x490/0x490 [ 173.265708][ T5858] ? mark_lock+0x98/0x340 [ 173.270033][ T5858] ? mark_lock+0x98/0x340 [ 173.274398][ T5858] ? __lock_acquire+0x1295/0x1ff0 [ 173.279441][ T5858] ? ocfs2_allocate_extend_trans+0x620/0x620 [ 173.285419][ T5858] ? ocfs2_qinfo_unlock+0xa8/0x140 [ 173.290517][ T5858] ? do_raw_spin_lock+0x14a/0x370 [ 173.295543][ T5858] ocfs2_extend_no_holes+0x1f2/0x490 [ 173.300836][ T5858] ? ocfs2_zero_extend+0x2bb0/0x2bb0 [ 173.306129][ T5858] ? _raw_spin_unlock+0x24/0x40 [ 173.310968][ T5858] ? ocfs2_qinfo_unlock+0x11d/0x140 [ 173.316157][ T5858] ocfs2_acquire_dquot+0x631/0xb40 [ 173.321250][ T5858] ? dqget+0x6dc/0xe90 [ 173.325304][ T5858] ? ocfs2_destroy_dquot+0x40/0x40 [ 173.330398][ T5858] dqget+0x762/0xe90 [ 173.334303][ T5858] ocfs2_setattr+0xf5f/0x1c70 [ 173.338969][ T5858] ? ocfs2_extend_allocation+0x1ba0/0x1ba0 [ 173.344757][ T5858] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 173.350982][ T5858] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 173.356859][ T5858] ? from_kgid+0x1a3/0x730 [ 173.361258][ T5858] ? make_kgid+0x6f0/0x6f0 [ 173.365651][ T5858] ? common_perm_cond+0x31b/0x3f0 [ 173.370659][ T5858] ? evm_inode_setattr+0xf7/0x5b0 [ 173.375664][ T5858] ? bpf_lsm_inode_setattr+0x5/0x10 [ 173.380846][ T5858] ? security_inode_setattr+0xce/0x120 [ 173.386288][ T5858] ? ocfs2_extend_allocation+0x1ba0/0x1ba0 [ 173.392081][ T5858] notify_change+0xc6d/0xf50 [ 173.396660][ T5858] ? bpf_lsm_path_chown+0x5/0x10 [ 173.401667][ T5858] chown_common+0x592/0x890 [ 173.406154][ T5858] ? __ia32_sys_chmod+0x180/0x180 [ 173.411158][ T5858] ? rcu_read_lock_any_held+0xb3/0x160 [ 173.416601][ T5858] ? __mnt_want_write+0x1e6/0x260 [ 173.421700][ T5858] ksys_fchown+0xde/0x150 [ 173.426014][ T5858] __x64_sys_fchown+0x76/0x80 [ 173.430674][ T5858] do_syscall_64+0x3b/0xb0 [ 173.435072][ T5858] ? clear_bhb_loop+0x15/0x70 [ 173.439731][ T5858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.445610][ T5858] RIP: 0033:0x7f5c467ca719 [ 173.450011][ T5858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.469608][ T5858] RSP: 002b:00007f5c44c42038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 173.478119][ T5858] RAX: ffffffffffffffda RBX: 00007f5c46981f80 RCX: 00007f5c467ca719 [ 173.486073][ T5858] RDX: 0000000070f6ea0a RSI: 0000000000000000 RDI: 0000000000000004 [ 173.494024][ T5858] RBP: 00007f5c4683d39e R08: 0000000000000000 R09: 0000000000000000 [ 173.501984][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.509956][ T5858] R13: 0000000000000000 R14: 00007f5c46981f80 R15: 00007ffd24655ae8 [ 173.517930][ T5858] [ 173.534143][ T5869] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 173.567871][ T5903] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 173.578704][ T5858] (syz.3.350,5858,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x4e60244d, computed 0x36fa8088. Applying ECC. [ 173.585131][ T5903] REISERFS (device loop1): using ordered data mode [ 173.592753][ T5858] (syz.3.350,5858,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x4e60244d, computed 0x26885ba0 [ 173.611482][ T5858] (syz.3.350,5858,1):ocfs2_search_chain:1761 ERROR: status = -5 [ 173.620008][ T5858] (syz.3.350,5858,1):ocfs2_search_chain:1871 ERROR: status = -5 [ 173.627849][ T5858] (syz.3.350,5858,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -5 [ 173.640935][ T5858] (syz.3.350,5858,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5 [ 173.641439][ T5903] reiserfs: using flush barriers [ 173.649964][ T5858] (syz.3.350,5858,1):__ocfs2_claim_clusters:2355 ERROR: status = -5 [ 173.716646][ T5906] loop4: detected capacity change from 0 to 4096 [ 173.724419][ T5903] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 173.767869][ T4170] attempt to access beyond end of device [ 173.767869][ T4170] loop2: rw=2049, want=45104, limit=40427 [ 173.775669][ T5858] (syz.3.350,5858,1):__ocfs2_claim_clusters:2363 ERROR: status = -5 [ 173.785188][ T5906] EXT4-fs (loop4): Ignoring removed nobh option [ 173.789318][ T5858] (syz.3.350,5858,1):ocfs2_local_alloc_new_window:1222 ERROR: status = -5 [ 173.802396][ T5858] (syz.3.350,5858,1):ocfs2_local_alloc_new_window:1247 ERROR: status = -5 [ 173.808191][ T5903] REISERFS (device loop1): checking transaction log (loop1) [ 173.811387][ T5858] (syz.3.350,5858,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5 [ 173.828025][ T5858] (syz.3.350,5858,1):ocfs2_local_alloc_slide_window:1340 ERROR: status = -5 [ 173.829487][ T5906] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,nobh,i_version,,errors=continue. Quota mode: writeback. [ 173.836816][ T5858] (syz.3.350,5858,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5 [ 173.836845][ T5858] (syz.3.350,5858,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5 [ 173.857328][ T5903] REISERFS (device loop1): Using r5 hash to sort names [ 173.859206][ T5858] (syz.3.350,5858,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -5 [ 173.885238][ T5858] (syz.3.350,5858,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5 [ 173.894424][ T5858] (syz.3.350,5858,1):ocfs2_lock_allocators:2672 ERROR: status = -5 [ 174.038549][ T5858] (syz.3.350,5858,1):ocfs2_extend_allocation:591 ERROR: status = -5 [ 174.178347][ T5903] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 174.188787][ T5858] (syz.3.350,5858,0):ocfs2_extend_no_holes:1033 ERROR: status = -5 [ 174.197604][ T5858] (syz.3.350,5858,0):ocfs2_acquire_dquot:873 ERROR: status = -5 [ 174.201518][ T5906] EXT4-fs (loop4): shut down requested (1) [ 174.225748][ T4444] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 174.257668][ T4168] ocfs2: Unmounting device (7,3) on (node local)