last executing test programs: 1m2.667051546s ago: executing program 1 (id=176): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='comm\x00') writev(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)='X', 0x1}], 0x1) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 1m2.601391006s ago: executing program 1 (id=178): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000180)=""/218, 0x3e, 0xda, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private1}}}}]}]}, 0x60}}, 0x0) 1m2.473158337s ago: executing program 1 (id=179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000090000040"]) 1m2.287031588s ago: executing program 1 (id=180): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@overriderock}, {@overriderock, 0x0}, {@unhide}, {@overriderock}, {@map_normal}, {@check_strict, 0x41}, {@cruft}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x0, 0x62c, &(0x7f00000050c0)="$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") mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x905891, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x212f4d1, 0x0) mount$9p_xen(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x24000, 0x0) 1m0.698824986s ago: executing program 1 (id=203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 58.950697924s ago: executing program 1 (id=213): renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 58.754130996s ago: executing program 32 (id=213): renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.152649996s ago: executing program 0 (id=771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) 4.964651977s ago: executing program 0 (id=773): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x40000000000000, 0x12) 4.758414678s ago: executing program 0 (id=775): r0 = syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x1118, &(0x7f0000000a40)="$eJzs2bFqFFEUBuD/zkRdbFbGfhotLCRE1gdICoVtbbURCQimyoKg+Bq+gW/hK2gq+5Bei4ClMLLOjhPDgko2gvB9MHPPHM6dM7e8dwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABLJflckptV0gy5qs+37dH8JEk75G98qKuUPNqfLx4czh4uktQ/ysvjpFSr16W5d2vSzJpZk8n93b3bHxevXr94enCwf/izZZvj002vor/VZ3PlfNnuRpsCAADA/6K7sGnevvyTTlcvqT8AAADwO5s+TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4W910jJshqJKUpG2P5idJ2jXzrvyj7wMAAAAurqTKk+m6fH8MMLqbT9My5LeW49eyjHfybs18AAAAYPT8/S+P3bVVcPb/+reut9yP38lWvy+fjHXb2328GvJlL6mT7JzrdXz65tlwla5Orl/OmgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA7O3BAAgAAACDo/+t2BAoAAAAAAAAAAAAAAAAAAAAAcFEAAAD//1Ch4Rg=") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88cabf65767e9dbbd7b5841a8ce3eb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e00"/231, @ANYRES8, @ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="ab73e3ec428df432408e45ff264e1298b82f031c9fa2e6ee2f2ca09c0b4ce6d10790f17e7bf5e126e5901fd8e115cc9ac3211f44371b6663683a11e3dabbe00155e2", @ANYRESOCT=r0, @ANYRESHEX, @ANYRESDEC=r0], 0x1, 0x0, &(0x7f0000000480)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) 4.483547199s ago: executing program 3 (id=779): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4434, &(0x7f0000008940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) truncate(&(0x7f0000000000)='./file1\x00', 0x118) 4.426484739s ago: executing program 4 (id=780): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) 4.29011724s ago: executing program 4 (id=782): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x44}}, 0x0) 3.965733591s ago: executing program 4 (id=784): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3000040, &(0x7f0000000440)=ANY=[], 0x83, 0x1501, &(0x7f0000002180)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}, {@version_u}]}}) 3.799009862s ago: executing program 2 (id=786): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fb0019b40320d812010079de01ec020109021b0001000003000904000001785e4c00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000400)=""/188, 0xbc}], 0x2, 0xf22c, 0x0) syz_usb_disconnect(r0) 3.586221633s ago: executing program 0 (id=787): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28}, 0x28) 3.586100013s ago: executing program 5 (id=788): syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000009640)='./file0\x00', 0x90, &(0x7f00000003c0), 0x1, 0x96cf, &(0x7f000001c340)="$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") setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640), &(0x7f0000000380)=ANY=[], 0x10, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) 3.524114133s ago: executing program 4 (id=789): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) shmdt(0x0) 3.266955734s ago: executing program 4 (id=790): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x208000, &(0x7f00000002c0), 0xfc, 0x490, &(0x7f0000000900)="$eJzs3MtrXcUfAPDvPTePps/8flq1DzW+sPhomvRhF24UBRcKgi6qu5impTa10kSwJZgqUpdScC8uBf8CV7oRdSW41b0UimTTWgWvnHPntHnd5nUfLffzgRtmzsw9M3NmJpkzJ/cG0LWG8h+ViK0R8VsezoroTbWUKc93fW5m/K+5mfFK1Gpv/Fkp0q7NzYyXeevv6ynOlUf2ZRHZp5XYs0y5U+cvnB6bnJzoSfHh6TPvD0+dv/DsqTNjJydOTrw3evTooYMjzx0ZPdyUdm7L67r7o7N7d73y1uXXxo9dfuenb/Kyt6b0+e1olqEYWnAt53ui2YV12LZ54UpPByvCmlSLGRvRW8z/HVGNW523I17+pKOVA1qqVqvVtjdOvli7jZ555wDuRhXzF7pU+Yf+2txARMyMt+I++E529YX6DVDe7uvpVU/piSzl6V10f9tMm9K+ybGLN76Moh/6u+r6AwDt912+/nmmvv4pX/WUwbhvXr7txX5wfjTifxHx/4i4JyLujYidEUXe+yPigTWWP7QovnT9mV1ZV8NWKV//PZ+ebS1c/6XV37+1wWqKbYuBGIzeyolTkxMH0jXZF739eXzkNmV8/9KvnzdKG0prv/KVl1+uBVM9rvT0L3zP8bHpsY21+parHxf7d7NL219/ctWfQrsiYvc6zp+vm0899fXeRukrt/82mvCcqfZVxJP1/r8Yy7S/DC1+PjmQ0o6MHh7eFJMTB4bLUbHUz79cer1R+RtqfxPk/b952fF/s/2DlXnPa89Nrb2MS79/1vCeZg3j/+3ySD7++ypvFuG+dOzDsenpcyMRfZVXlx4fvXW2Ml7mv7p1Z8Rjy8///HdcPsby9u+JiHwQPxgRD0XEw6nuj0TEo1GcYjmz1yPixxcff3c97c9WurBNkPf/8QX9Hyv0/9oD1dM/fLue9tfl/X+oCO1LR1bz+2+1FdzItQMAAIC7RVb8D3wl238znGX790dsKfZ2N2eTZ6emnz5x9oO/j9f/V34werNyp6u+H1zfDx1Je8NlfHRR/GDaN/6iOlDEN6dn30DnbGkw/3N/VDtdO6Dl0nO0G52uB9B+Pq8J3cv8h+61qvnfqk/AAB212r//tRbXA2i/5eb/bAfqAbSf+3/oXuY/dC/zH7qX+Q9daSOf629KoBIRnSu9tYHZJl/evsVHqkvzbIo2NTCyZp+5HJOrf9c/6WtYOt3d5bdlrJy5N7XxThmijQOpou34EhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAW+i8AAP//YkTPRQ==") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000340)=@v2={0x2, @aes128, 0x0, '\x00', @c}) 3.237390285s ago: executing program 0 (id=791): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f00000003c0)='./file1\x00', 0x810, &(0x7f0000000100)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@space_cache_v2}, {@compress_force}, {@nossd_spread}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x1f, 0x67, 0x37, 0x74, 0x65, 0x78]}}]}, 0xfd, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x800fee}) write$tun(r0, &(0x7f00000002c0)={@void, @void, @mpls={[], @generic="ef49"}}, 0x2) 1.675700222s ago: executing program 2 (id=792): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.675548472s ago: executing program 3 (id=793): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f0000000780)="3f030300031b12000000000789e9aaa911d7c2ff070088a800008100642c88a878610000", 0x24, 0x0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="ff9900000300"}, 0x14) 1.675346412s ago: executing program 4 (id=795): syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x208c1b, &(0x7f0000000080)=ANY=[@ANYBLOB="003475e0ef766a5e6e5b87006e4cf5d61377de3788133dfa2be9262d3b0e"], 0x1, 0x12752, &(0x7f0000000980)="$eJzs/XkYqHO9L36ve17KPCRCKSQlIqEkYyWRIRlSCYWoCGUoQ0rSQCpjKpQpSZISocxCRKQyRgoRSVR4rn32e519P+fcz75P+zz7ue7r+b1ef+zPvW2+e/1+1z7X+/1eS2vNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBkzZhTPWWjXfzu9v7T9v59uthkzul3+/Xvuf/svs/f+nvLfz8yF/j88m793tiV3+eB2O7/rAx/8t/Nf+vHtvvc+r959733+S//s/4mXPLLxaj9Z6C3POep1Z5y16FU/Xue/7X8RAAAAAAAAAPw3yq//l72/dOX/8rd0M2bMnPN/+WvzzZgxc/YZM8rq6mu/87P/m//9m2/G/6P99Zn/m//zAQAA4P9Q9n/d+yuH9//HufPNmHHgAf/bX/+ff2Vm+2//dbuPPvLY0O15bv7+5/7HXyr/t4//RvPnLpD7nNwF/99/fAAAAPD/X7L/m95f6W/2Wf/5/oVzn5e7SO6iuYvlPj/3BbmL574w90W5S+QumbtU7otzl859Se4yuS/NfVnusrkvz10ud/ncV+SukLti7itzV8p9Ve7Kuavkrpr76tzX5K6W+9rc1XNfl7tG7pq5a+WunTvr9xlYN/f1uW/IfWPuerlvyl0/9825G+RumPuW3I1yN87dJHfT3Lfmbpb7ttzNc7fI3TJ3q9y3526d+47cd+a+K3eb3Hfnbpu7XW5+j4kZ78l9b+4OuTvm7pT7vtxZv4lEfl+KGe/P/UDuB3N3zd0t90O5u+fukbtn7odzP5K7V+7eubN+A4p9cz+a+7Hc/XL3z531M2MH5n4896DcT+R+Mvfg3E/lHpL76dxDcz+T+9ncz+V+Pvew3Fk/h/eF3CNyv5j7pdwv5x6Ze1Tu0bnH5B6be1zuV3KPz/1q7tdyv557Qu6JuSflfiP3m7kn556Se2ruabmn534r94zcb+eemfud3LNyv5t7du73cs/J/X7uubk/yP1h7nm5P8o9P/eC3B/nXph7Ue7FuT/J/WnuJbmX5l6We3nuFbmz/h2sq3Kvzp3171pdk3tt7nW5P8+9PveG3F/k3ph7U+4vc2/OvSX3V7m35v469ze5v829Lff23Dty78y9K/fu3N/l3pN7b+7vc+/L/UPuH3Pvz30g98HcP+U+lPtw7p9zH8l9NPcvubMy7q+5j+f+LfeJ3Cdz/577j9x/5j6V+3Ru/mWmWT9tXuSjyM9tF1Vufr69SO4WbW6XOzN3ttxn5T47N7+/TjFHbv79vGKu3Llz58mdN3e+3Pw8eJGfBy/y8+BFfh68yM+DF8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyf9av4RXJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/Z23cIvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5P+sX8ouk/9l/kKZ/C+T/2Xyv0z+l8n/MvlfJv/L5H+Z/C+T/2Xyv0z+l8n/MvlfJv/L5H+Z/C+T/+UC//n+L9MLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIy2VemF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekHif0aVXlClF1T5H1TpBVXyuEovqNILqvSCKr2gSi+o0guq9IIqvaBKL6jSC6r0giq9oEovqNILqvSCKj8vUCX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5X1347/8Pvkr+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/Kvlf3Z9AjCr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyf9a/Z18n/OvlfJ//r/A118r9O/tfJ/zr/n1sn/+vkf538r5P/dfK/Tv7Xyf86+V8n/+t5//P9X6cX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnZ8XqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaDOzwvU+XmBOr2gTi+o0wvqh/89eOv0gjq9oE4vqNML6mRinV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFs+K3SS9o0gua9IImvaDJ39ikFzTpBU16QZNe0KQXNOkFTXpBk17QpBc06QVNekGTXtDk5wWa5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H/zb/n/9DMzmuR/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xv8vMCTfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/ifMZbfK/Tf63yf82+d8m/9v8A23yv03+t8n/NvnfJv/b5H+b/G+T/+1c//n+b9ML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jz8wJtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16Qbv+Fv/+r/ymF7TpBW16QZte0KYXtOkFbXpBm17Qphe0yco2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wsS7zO69IIuvaBLL+jSC7rkd5de0OUf7NILuvSCLr2gSy/o0gu69IIuvaDLzwt0yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/3Yb//n9Q3b/l//7ffHCB5H+X/O+S/92m/8uPM/nfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d7P+rOrkf5f875L/XfK/S/53yf8u+T/rz7fukv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r/72r//R/C65H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/7vb/2ML/479P/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y4/L9Al/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfJ/1r/dMDP5P3PWn7uf/J+Z/J+Z/J+Z/583M/k/Mw/MTP7PTP7PTP7PnP0/3/8z0wtm/f7/M9MLZqYXzEwvmJleMDO9YGZ6wcz0gpnpBTPTC2b6ffYAAADg/4ey/3v/MYpZ/xm9Gf/j1/cO+I/fzGjGKbfNfe8Sq++0wsAzs36fwPn+O3+sAAAAwH/NyP7/cm//F4s+79HnrHP4a5cceGbWnw9g/wMAAMAEjez/I3v7v5xt8RvXOnrj335q4JlZfy6g/Q8AAAATNLL/j+rt/+p7973iu5+85svPHngmv4+P/Q8AAABTNLL/j+7t//qKdW/fY8s59jht4Jn8/r32PwAAAEzRyP4/prf/m48dtNqnVj3pBRcOPJM/t8f+BwAAgCka2f/H9vZ/u9N5i95477Y/WWTgmfx5vfY/AAAATNHI/j+ut/+7G/d/5gXzL3DpnweemfXP/J/t/5n/Fz9gAAAA4F82sv+/0tv/M3f78fw/uvKmJTcZeGbxXL/+DwAAABM0sv+P7+3/2X627+PrnbrPbusOPPPCXPsfAAAAJmhk/3+1t/+fdceatyy6x/mH3zfwzIty7X8AAACYoJH9/7Xe/n/2ez610kM7LXXrzgPPLJFr/wMAAMAEjez/r/f2/+xL37LbGd+/b5WrBp5ZMtf+BwAAgAka2f8n9Pb/HEfM88V3/XK9XW4feGapXPsfAAAAJmhk/5/Y2/9zHvzSs5892yGf++jAMy/Otf8BAABggkb2/0m9/T/Xan/a6ImHdn/m8oFnls61/wEAAGCCRvb/N3r7f+6nf/6yO1c4e7HtB555Sa79DwAAABM0sv+/2dv/86wz23XzbbLIm3YfeGaZXPsfAAAAJmhk/5/c2//zbrTiw2/4/G3fumHgmZfm2v8AAAAwQSP7/5Te/p/v/r/Occ4X17j7HQPPvGzW3/Pf+oMFAAAA/ktG9v+pvf0//1c3v3u3txxYPTPwzLK59j8AAABM0Mj+P623/xdY4gszPr7ccpv/YeCZl+fa/wAAADBBI/v/9N7+f87y31r85r88dO6bBp5ZLtf+BwAAgAka2f/f6u3/BQ99/yVL3rvSpe8feGb5XPsfAAAAJmhk/5/R2//PXfo7S1+06mNL/vw//sf/8+sVufY/AAAATNDI/v92b/8vdMROV795y612+9XAMyvk2v8AAAAwQSP7/8ze/l/44E0feO4njzt8n4FnVsy1/wEAAGCCRvb/d3r7/3mrfXm2B45ub3184JlX5tr/AAAAMEEj+/+s3v5f5F3v3X/Tda5Y5a0Dz6yUa/8DAADABI3s/+/29v+i9379+K8vsdMuaw8886pc+x8AAAAmaGT/n93b/4s9cuwFjz1x6ufuGnhm5Vz7HwAAACZoZP9/r7f/n7/+1u/snr/pM28feGaVXPsfAAAAJmhk/5/T2/8veONFczzvkiMWe3LgmVVz7X8AAACYoJH9//3e/l/80b0f/sNJq73poYFnXp1r/wMAAMAEjez/c3v7/4W/X/u6C/Z/6ltvHnjmNbn2PwAAAEzQyP7/QW//v2jrT77sLdtuc/fFA8+slmv/AwAAwASN7P8f9vb/Eku/+JJDLzyh2nbgmdfm2v8AAAAwQSP7/7ze/l/yiLsW3/v2uTbfc+CZ1XPtfwAAAJigkf3/o97+X+rg38xYtrzu3FsGnnldrv0PAAAAEzSy/8/v7f8Xr7bo3bevOscyWw88s0au/Q8AAAATNLL/L+jt/6W/esds69x7zc+eHnhmzVz7HwAAACZoZP//uLf/X7LEQg/84JPbfu2PA8+slWv/AwAAwASN7P8Le/t/meVfdPXvtjxpv/UHnlk71/4HAACACRrZ/xf19v9LD7136bnXWX3lKwaeWSfX/gcAAIAJGtn/F/f2/8uO/ctsJx/9zM3vGXhm3Vz7HwAAACZoZP//pLf/l33BSg9s9sTGH//QwDOvz7X/AQAAYIJG9v9Pe/v/5a+c6+piicO3u37gmTfk2v8AAAAwQSP7/5Le/l/u81ct/eglO8/zvoFn3phr/wMAAMAEjez/S3v7f/k3P/DW+59/+p+vHHhmvVz7HwAAACZoZP9f1tv/r3h82XMX2r/+xh0Dz7wp1/4HAACACRrZ/5f39v8Kdy941AYnXbbuxwaeWT/X/gcAAIAJGtn/V/T2/4pb3LDnhRduMfsjA8+8Odf+BwAAgAka2f9X9vb/K1+2+7H7bnvMnzYdeGaDXPsfAAAAJmhk/1/V2/8rHfn9vQ4pVz5vnYFnNsy1/wEAAGCCRvb/1b39/6qPH7blb29/fIvfDzzzllz7HwAAACZoZP//rLf/V15lvfOXu3LZZX4y8MxGufY/AAAATNDI/r+mt/9XOfYzG31//gd/tt3AMxvn2v8AAAAwQSP7/9re/l/1BRuc/fo91vraHgPPbJJr/wMAAMAEjez/63r7/9Wv/MgX5z31oP1uHnhm1p8JYP8DAADABI3s/5/39v9rPv/d3e76/mIrbzXwzFtz7X8AAACYoJH9f31v/6/2p7W6LXe64+YnBp7ZLNf+BwAAgAka2f839Pb/azf/xL2nz7bbxx8eeOZtufY/AAAATNDI/v9Fb/+vvvaFlz79y7O222Dgmc1z7X8AAACYoJH9f2Nv/7/uyb2WmmOF9ef528AzW+Ta/wAAADBBI/v/pt7+X+PEHZfd4qFD/7zZwDNb5tr/AAAAMEEj+/+Xvf2/5nPP/Pm3Pr/EN9YaeGbWnwlg/wMAAMAEjez/m3v7f63Zv/TQM5vcu+6dA8+8Pdf+BwAAgAka2f+39Pb/2uduMvvsb9lr9l0Gntk61/4HAACACRrZ/7/q7f91fvrn3131xfP+dN3AM+/Itf8BAABggkb2/629/b/uXq8qXv2XBc+7deCZd+ba/wAAADBBI/v/1739//pdZn/BB5a7eYt9B555V679DwAAABM0sv9/09v/b7j56p8ef/sJ7zhq4Jltcu1/AAAAmKCR/f/b3v5/4x4zX9KV21yw0sAz7861/wEAAGCCRvb/bb39v9511/3ssW2v+8MLB57ZNtf+BwAAgAka2f+39/b/m3792P1fv3Cu2Q4YeGa7XPsfAAAAJmhk/9/R2//rb7PCzE1POmKN2Qee2T7X/gcAAIAJGtn/d/b2/5uX3fbN8+y/6QlnDjzznlz7HwAAACZoZP/f1dv/Gxz1jTPvfv5Tfz1v4Jn35tr/AAAAMEEj+//u3v7f8KCvHnbuJavN/7yBZ3bItf8BAABggkb2/+96+/8tq27x/nWXuOK9Jww8s2Ou/Q8AAAATNLL/7+nt/43+sc8873ii/VQ18MxOufY/AAAATNDI/r+3t/83XvOCv5x59Kk3zj/wzPty7X8AAACYoJH9//sDZsw267/ZZLODf/H3dXZa4dyBZ3bOtf8BAABggkb2/329X//f9OE1lp9ty8f2ffXAM7vk2v8AAAAwQSP7/w+9/f/W4+6+45pPrnTs0QPPvD/X/gcAAIAJGtn/f+zt/80WX+K1r7v3uOsOG3jmA7n2PwAAAEzQyP6/v7f/37bSYovsvOpWyy078MwHc+1/AAAAmKCR/f9Ab/9vftivnj56uQPf8ayBZ3bNtf8BAABggkb2/4O9/b/FsgsvUP5ljQtOHXhmt1z7HwAAACZoZP//qbf/tzzqt3975IsP/eGigWc+lGv/AwAAwASN7P+Hevt/q4N+f/M337LcbIsOPLN7rv0PAAAAEzSy/x/u7f+3r/qCV75tk7PX+MLAM3vk2v8AAAAwQSP7/8+9/b/1Vjeu9dDndz9hxYFn9sy1/wEAAGCCRvb/I739/447F/j6og/d9tclBp75cK79DwAAABM0sv8f7e3/dz623IHrrbDI/AcPPPORXPsfAAAAJmhk//+lt//fteH1c82Ycd97Vxt4Zq9c+x8AAAAmaGT/P9bb/9ts8KzlT55tqU99deCZvXPtfwAAAJigkf3/197+f/ffrvnFZjsdcuOnB57ZJ9f+BwAAgAka2f+P9/b/tr97/C/F99db4aUDz+yba/8DAADABI3s/7/19v92Wy4/z6On3rTvKQPPfDTX/gcAAIAJGtn/T/T2//bLHvH0ynsscGwz8MzHcu1/AAAAmKCR/f9kb/+/56i3LnLp/OdfN+/AM/vl2v8AAAAwQSP7/++9/f/egz7w2sOv3Ge5swae2T/X/gcAAIAJGtn//+jt/x1WPfWO7bZb7W/1wDMH5Nr/AAAAMEEj+/+fvf2/43Hve+WTFz31nJMHnjkw1/4HAACACRrZ/0/19v9Oi59x87Pu2HSt7w488/Fc+x8AAAAmaGT/P93b/+9b6ci/vbM64qShjX9Qrv0PAAAAEzSy/5/p7f+dD9togW8vNtf9Xxt45hO59j8AAABM0H++/7sZvf2/y9VHrzfvT6979msHnvlkrv0PAAAAEzSy/4ve/n//ru/81l0nbvOuZQaeOTjX/gcAAIAJGtn/ZW//f2D77Q/9/n4nXHjIwDOfyrX/AQAAYIJG9n/V2/8fvP3EHV9/zFbXrDDwzKyfE7D/AQAAYIJG9n/d2/+7LnLA/O9c97hlDx945tO59j8AAABM0Mj+b3r7f7eTX//4t5dcae9PDTxzaK79DwAAABM0sv/b3v7/0NkfveXJJx87esmBZz6Ta/8DAADABI3s/663/3ef+aOVnnXPTjecNvDMZ3PtfwAAAJigkf0/s7f/9/joc3/981VOXf7ZA898Ltf+BwAAgAka2f+z9fb/npffvspqW7TbLzLwzOdz7X8AAACYoJH9/6ze/v/wL+5ZaMdPXPHJCweeOSzX/gcAAIAJGtn/z+7t/4/s+MJ/HHfEIn87ZuCZWX8moP0PAAAAEzSy/2fv7f+9rr5z7mLD257zmoFnvpBr/wMAAMAEjez/OXr7f+9dl3r00ZfvvtbLBp45Itf+BwAAgAka2f9z9vb/PtsvcuPJj5590ucHnvlirv0PAAAAEzSy/+fq7f99b//1KzZ7eLn7y4FnvpRr/wMAAMAEjez/uXv7/6M/fskb/rTiQ8/++sAzX861/wEAAGCCRvb/PL39/7Hu4W8utuka7/rBwDNH5tr/AAAAMEEj+3/e3v7fb75ffuJNhx144QIDzxyVa/8DAADABI3s//l6+3//0+Z773k77nPNdwaeOTrX/gcAAIAJGtn/8/f2/wFr33vbfuecv+wcA88ck2v/AwAAwASN7P8Fevv/wCdf9LrP3bTA3gsPPHNsrv0PAAAAEzSy/5/T2/8f/9NCi90686ajfzjwzHG5vf3f/vf8gAEAAIB/2cj+X7C3/w/a/I5/LrPAeje8cuCZr+T69X8AAACYoJH9/9ze/v/Eiz4238NXHbL8kQPPHJ9r/wMAAMAEjez/hXr7/5PHnP/IIqcttf2BA898Nfd/2//P+f/2DxgAAAD4l43s/4V7+//gzx14/Rv3vO+TLxp45mu5fv0fAAAAJmhk/z+vt/8/tfIbVjj/E4cf8POBZ76ea/8DAADABI3s/0V6+/+QL3/y1sW32Pjd7x945oRc+x8AAAAmaGT/L9rb/59ebu3X/GKVZ1baZ+CZE3PtfwAAAJigkf2/WG//H/qavRc++J7Vb/rVwDMn5dr/AAAAMEEj+//5vf3/mQMvemLPJ086/q3/2yP7z/hGvux/AAAAmKCR/f+C3v7/7DUPX7Dyktt+9PGBZ76Za/8DAADABI3s/8V7+/9zH37JOy9d95ql7xp45uRc+x8AAAAmaGT/v7C3/z+/7Xz7H37MHFetPfDMKbn2PwAAAEzQyP5/UW//H/arXx6/3X6Pn//kwDOn5tr/AAAAMEEj+3+J3v4/fOG/3bXviStv9faBZ07Ltf8BAABggkb2/5K9/f+Fr7+iOuSnx8z55oFnTs+1/wEAAGCCRvb/Ur39f8Q5z37hbxfb4uGHBp75Vq79DwAAABM0sv9f3Nv/X5zz2ouXqy47eduBZ87Itf8BAABggkb2/9K9/f+lfT643P131G+4eOCZb+fa/wAAADBBI/v/Jb39/+WLT7t2oYtOn++WgWfOzLX/AQAAYIJG9v8yvf1/5E1ffHCD7XZ+dM+BZ76Ta/8DAADABI3s/5f29v9RH9hszgv3POuATQaeOSvX/gcAAIAJGtn/L+vt/6OvOereJU7b7d1/Hnjmu7n2PwAAAEzQyP5ftrf/j/nwxt0tV92x0n0Dz5yda/8DAADABI3s/5f39v+x2+681EELLHbTugPPfC/X/gcAAIAJGtn/y/X2/3G/+valu8486PirBp45J9f+BwAAgAka2f/L9/b/V85/59lX3rTWR3ceeOb7ufY/AAAATNDI/n9Fb/8fXxy90WvOeXDpjw48c26u/Q8AAAATNLL/V+jt/68ucOJuH9xx2atuH3jmB7n2PwAAAEzQyP5fsbf/v/ad7b/4lcNuPn/7gWd+mGv/AwAAwASN7P9X9vb/18/41MUHbLrgVpcPPHNerv0PAAAAEzSy/1fq7f8TnrPmC3df8bw5bxh45ke59j8AAABM0Mj+f1Vv/59Y7lu9+OG9Ht594Jnzc+1/AAAAmKCR/b9yb/+f9MMf33XTo/ee/MzAMxfk2v8AAAAwQSP7f5Xe/v/GNc+fc56XL/GGdww88+Nc+x8AAAAmaGT/r9rb/9/88K0P3r3hofO9aeCZC3PtfwAAAJigkf3/6t7+P3nb31177hHrP/qHgWcuyrX/AQAAYIJG9v9revv/lF8tudy6px3yge0Gnrk41/4HAACACRrZ/6v19v+p+9x36R17rnfYTwaemfXX7H8AAACYoJH9/9re/j/t4sWXetkC9/3m5oFnfppr/wMAAMAEjez/1Xv7//SbntftddVSr95j4JlLcu1/AAAAmKCR/f+63v7/1gduu/czN52/+xMDz1yaa/8DAADABI3s/zV6+/+M/X526Wtn7nPEVgPPXJZr/wMAAMAEjez/NXv7/9uXzrHUdTvedPkGA89cnmv/AwAAwASN7P+1evv/zOtX7o49Z4EXPzzwzBW59j8AAABM0Mj+X7u3/7/zvkfu3WnThzbbbOCZK3PtfwAAAJigkf2/Tm//n3Xqjcfsdthy5/xt4Jmrcu1/AAAAmKCR/b9ub/9/d94F9v34wwfeeefAM1fn2v8AAAAwQSP7//W9/X92u9xWN6+4RrHWwDM/y7X/AQAAYIJG9v8bevv/exf88YdLvvy2N1438Mw1ufY/AAAATNDI/n9jb/+fc+X6m9/56CKn7TLwzLW59j8AAABM0Mj+X6+3/7//oc99f74jzn5q34FnZv07AfY/AAAATNDI/n9Tb/+f+94ffOkNG+6+yK0Dz/w81/4HAACACRrZ/+v39v8Pfrvbh8/Z4tQPPD3wzPW59j8AAABM0Mj+f3Nv//9wv+8d//JP7HTY1gPP3JBr/wMAAMAEjez/DXr7/7xL99z/tnuu+M36A8/8Itf+BwAAgAka2f8b9vb/j65/yzs/vUr76j8OPHNjrv0PAAAAEzSy/9/S2//nv+/TF+yz5HG7v2fgmZty7X8AAACYoJH9v1Fv/18w2z5X//TJrY64YuCZX+ba/wAAADBBI/t/497+//H3Llj6Fcc8dvn1A8/cnGv/AwAAwASN7P9Nevv/wlMOnu0966704g8NPHNLrv0PAAAAEzSy/zft7f+LFl3jgSNPvG6zKwee+VWu/Q8AAAATNLL/39rb/xe/fqM7L9lvrnPeN/DMrbn2PwAAAEzQyP7frLf/f/LPI8vlFzvhzo8NPPPrXPsfAAAAJmhk/7+tt/9/+oczXrT9T7cp7hh45je59j8AAABM0Mj+37y3/y/Z5H0/OeqOp9646cAzv821/wEAAGCCRvb/Fr39f+lSV758k2q10x4ZeOa2XPsfAAAAJmhk/2/Z2/+XfWXOa07Y7oinfj/wzO259j8AAABM0Mj+36q3/y8/5JV/+utFmy6yzsAzs35PAPsfAAAAJmhk/7+9t/+vWOHRudoNl1jo1IFn7sy1/wEAAGCCRvb/1r39f+Xhy9/zlSPufeJZA8/clWv/AwAAwASN7P939Pb/Vcs83n7w0fXPWHTgmbtz7X8AAACYoJH9/87e/r969Wte/JqXH7rBRQPP/C7X/gcAAIAJGtn/7+rt/5994lmXXbnigvWKA8/ck2v/AwAAwASN7P9tevv/mqu2OvDQh2++9wsDz9yba/8DAADABI3s/3f39v+1u39lu70P2+u7Bw888/tc+x8AAAAmaGT/b9vb/9ftcPJay2563kZLDDxzX679DwAAABM0sv+36+3/n9+2zddvP2etF3514Jk/5Nr/AAAAMEEj+3/73v6//vlr/fbyHQ+6ZLWBZ/6Ya/8DAADABI3s//f09v8N3/zE6ivNXPaolw48c3+u/Q8AAAATNLL/39vb/7/47oXPf/dND3740wPPPJBr/wMAAMAEjez/HXr7/8Zn7/XUEVft9rpm4JkHc+1/AAAAmKCR/b9jb//ftP+v5918gbNuP2XgmT/l2v8AAAAwQSP7f6fe/v/lZYv8+Rt7LnboWQPPPJRr/wMAAMAEjez/9/X2/803LHXDn0+7Y+d5B555ONf+BwAAgAn6T/b/ATNmdDv39v8tO9+5YnVRvdBKA8/8Odf+BwAAgAka+fX/XXr7/1dXvfBXx2x32RNHDTzzSK79DwAAABM0sv/f39v/t+5+z6vfV+18xgEDzzyaa/8DAADABI3s/w/09v+vd7j9eavfcfoGLxx45i+59j8AAABM0Mj+/2Bv///mtuc+ee1PV67PHHjmsVz7HwAAACZoZP/v2tv/v73wgcP2XOzxe2cfeOavufY/AAAATNDI/t+tt/9vq5d9/8H7bfHd5w0883iu/Q8AAAATNLL/P9Tb/7fPveCbf3HiMRudN/DM33LtfwAAAJigkf2/e2//33H6DWcuvu62L6wGnnki91/a/2v8V37AAAAAwL9sZP/v0dv/d562wlOvPeakS04YeObJXL/+DwAAABM0sv/37O3/u+Z77PnXPTnHUecOPPP3XPsfAAAAJmhk/3+4t//v7q5b/dglr/nw/APP/CPX/gcAAIAJGtn/H+nt/9/9eOZvd1pl49cdPfDMP3PtfwAAAJigkf2/V2//33PV6Suecc/ht7964Jmncu1/AAAAmKCR/b93b//fu/suN7zrE6sfuuzAM0/n2v8AAAAwQSP7f5/e/v/9Dm/787O3eGbnwwaeeSbX/gcAAIAJGtn/+/b2/323HT7vE2ct8IPPDLwy68P+BwAAgAka2f8f7e3/P+y/yZPb7nLT214y8Mqsv8f+BwAAgAka2f8f6+3/P172ped9YfZ9ytUHXinz8a/s/2ee+a/9kAEAAIB/0cj+36+3/++/4cxXX3b9+b/7ysArVT78+j8AAABM0Mj+37+3/x/YecdfverapU6fe+CVOh/2PwAAAEzQyP4/oLf/H/zJoyvsOM9965898EqTD/sfAAAAJmhk/x/Y2/9/2veV1x+323rP/+bAK20+7H8AAACYoJH9//He/n/og3M+8vNvH/J0N/DKrL9m/wMAAMAEjez/g3r7/+FfXjnfam/a/bM/Hnhl1j9v/wMAAMAEjez/T/T2/58XvP+DSxx59vufP/DKbPmw/wEAAGCCRvb/J3v7/5Fvv+xztzy+yKozB155Vj7sfwAAAJigkf1/cG//P3rec844aJnbfnX6wCvPzof9DwAAABM0sv8/1dv/f6mu33DXldf4wlIDr8yeD/sfAAAAJmhk/x/S2/+PfeRDJ3z/gQN3/cTAK3Pkw/4HAACACRrZ/5/u7f+/XnvO2q//zHJLfHHglTnzYf8DAADABI3s/0N7+//xWz+/7bybP3TZKwZemSsf9j8AAABM0Mj+/0xv//9tuzcecNeaK/3gOQOvzJ0P+x8AAAAmaGT/f7a3/5/4yaE773v8Y287Z+CVefJh/wMAAMAEjez/z/X2/5P7vvnThzy1VXnSwCvz5sP+BwAAgAka2f+f7+3/v3/ww6f+dvHjflcMvDJr99v/AAAAMEEj+/+w3v7/xy/PetNyq7Wnf27glfnzYf8DAADABI3s/8N7+/+f56692lF3XrH+cgOvLJAP+x8AAAAmaGT/f6G3/5+a/ZO3b3/ATs9fZeiVfNj/AAAAMEEj+/+I3v5/+rkXPbP81qc+fezAKwvm43/u/5n/bT9iAAAA4F81sv+/2Nv/z5y496KXnL/pZ18w8Mpz8+HX/wEAAGCCRvb/l/5j/xczDrpxzxN2OOL9Hx94ZaF82P8AAAAwQSP7/8u9/V+susBRm3SrrfrlgVcWzof9DwAAABM0sv+P7O3/ctnlzm1/89SvVh545Xn5sP8BAABggkb2/1G9/V8d9ce3/vXybb5w/sAri+TD/gcAAIAJGtn/R/f2f/279c9ffuETdl1o4JVF82H/AwAAwASN7P9jevu/2fJzW16yz1xLzDnwymL5sP8BAABggkb2/7G9/d9u8IO9jjr5usvOGHjl+fmw/wEAAGCCRvb/cb393/1tt2O33/y8i9cYeGXWP2P/AwAAwASN7P+v9Pb/zM2+t9vTn9lr8bsHXlk8H/Y/AAAATNDI/j++t/9ne3jPL87xwM17/nXglRfmw/4HAACACRrZ/1/t7f9n/eMtZ2+58oJf2nzglRflw/4HAACACRrZ/1/r7f9nr/npjU5f5tDbfjPwyhL5sP8BAABggkb2/9d7+3/22W+d/w+Pr7/a3gOvLJkP+x8AAAAmaGT/n9Db/3Oc+/zHn3fkvTt+YOCVpfJh/wMAAMAEjez/E3v7f84Tl7zlLW9a4tPXDLzy4nzY/wAAADBBI/v/pN7+n+u5v1vpgm/f8Y8PD7yydD7sfwAAAJigkf3/jd7+n/vXP1nvG7sttvBNA6+8JB/2PwAAAEzQyP7/Zm//z7NN963N5zlrw0sGXlkmH/Y/AAAATNDI/j+5t//n3eO1h1bX7vaddw+88tJ82P8AAAAwQSP7/5Te/p/vun/s+OfrH/z9nwZeeVk+7H8AAACYoJH9f2pv/8//oy0/tdLsy3ZvGXhl2XzY/wAAADBBI/v/tN7+X2DG195z+S4HbbrFwCsvz4f9DwAAABM0sv9P7+3/58z/zXWOOGuts/8+8Mpy+bD/AQAAYIJG9v+3evt/wTO3O/ndJx9z8W0DryyfD/sfAAAAJmhk/5/R2//Pnf2EDf6xzxaL7z/wyivyYf8DAADABI3s/2/39v9C5+7wnZkLP77njgOvrJAP+x8AAAAmaGT/n9nb/wuf+I7Pb335yl+6euCVFfNh/wMAAMAEjez/7/T2//Oee9wu3/nN6be9fuCVV+bD/gcAAIAJGtn/Z/X2/yL77rjwgt3Oq90z8MpK+bD/AQAAYIJG9v93e/t/0Z+c+cQ9O1y2418GXnlVPux/AAAAmKCR/X92b/8v9ssv3XrW+fWnNx54ZeV82P8AAAAwQSP7/3u9/f/8D27ymrW3fuYfDwy8sko+7H8AAACYoJH9f05v/79gl+/u+K4DVl94vYFXVs2H/Q8AAAATNLL/v9/b/4vf/JFDz7jz8A3fOfDKq/Nh/wMAAMAEjez/c3v7/4U/3eBbT6y28Xf+OfDKa/Jh/wMAAMAEjez/H/T2/4v2+sx6z178mt/vOvDKavmw/wEAAGCCRvb/D3v7f4nZX3LydU/N0f1i4JXX5sP+BwAAgAka2f/n9fb/kuc+vM5rjz9p08sGXlk9H/Y/AAAATNDI/v9Rb/8vdeIv37PTmtuevcPAK6/Lh/0PAAAAEzSy/8/v7f8XP3e+Tx27zwkvf3DglTXyYf8DAADABI3s/wt6+3/pH92wy4yTt/n5hgOvrJkP+x8AAAAmaGT//7i3/18yY8HP/+Xy647bcuCVtfJh/wMAAMAEjez/C3v7f5n5l/3OKQvPtc8/Bl5ZOx/2PwAAAEzQyP6/qLf/X3rmAxu8tTtixY8MvLJOPux/AAAAmKCR/X9xb/+/7MKndrn7N5v+4pcDr6ybD/sfAAAAJmhk//+kt/+XrV/z+XnOf+rgnw688vp82P8AAAAwQSP7/6e9/f/yuYvvrLvDajtsM/DKG/Jh/wMAAMAEjez/S3r7f7nTr9jg3AOuWODXA6+8MR/2PwAAAEzQyP6/tLf/l9/x3lecuXX72F4Dr6yXD/sfAAAAJmhk/1/W2/+v+MWLbnzHaqd+/YMDr7wpH/Y/AAAATNDI/r+8t/9XuHyhR2e7c6c1rx14Zf182P8AAAAwQSP7/4re/l/xo3fM/fenHpu55sArb86H/Q8AAAATNLL/r+zt/1fO/Ngzr1t8pT/+buCVDfJh/wMAAMAEjez/q3r7f6Wzz1/0mjWP+/FjA69smA/7HwAAACZoZP9f3dv/rzr5wNWOPn6rrd828Mpb8mH/AwAAwASN7P+f9fb/you84fadP3Pgy3cbeGWjfNj/AAAAMEEj+/+a3v5f5cJPrvTI5mv8/MaBVzbOh/0PAAAAEzSy/6/t7f9V67VvKVd+6LhLB17ZJB/2PwAAAEzQyP6/rrf/Xz333o+/7YHl9nnvwCub5sP+BwAAgAka2f8/7+3/15x+0fzffPzsFe8feOWt+bD/AQAAYIJG9v/1vf2/2lVv3nbRZXb/xRsHXtksH/Y/AAAATNDI/r+ht/9fu/uhBzz0ptsOftfAK7P+TED7HwAAACZoZP//orf/V9/hrBN+dOQiOzw18Mrm+bD/AQAAYIJG9v+Nvf3/uts+vPZ6u923wBsGXtkiH/Y/AAAATNDI/r+pt//XOPi9b1zk20s9du/AK1vmw/4HAACACRrZ/7/s7f81V/v66Q9fe8jXHx14Zat82P8AAAAwQSP7/+be/l9r6WM/c/4866250cArb8+H/Q8AAAATNLL/b+nt/7WP2HqnN85+08zfDryydT7sfwAAAJigkf3/q97+X+f3Tx/8uesX+ON+A6+8Ix/2PwAAAEzQyP6/tbf/1916le33O+v8H+808Mo782H/AwAAwASN7P9f9/b/699YrrvMLvts/bOBV96VD/sfAAAAJmhk//+mt//f8Oilp9x6/BxbvnjglW3yYf8DAADABI3s/9/29v8bN2rfvPaa1/zwkwOvvDsf9j8AAABM0Mj+v623/9e7/+Izz1p82wePGHhl23zY/wAAADBBI/v/9t7+f9PTfz/snqdOmmP5gVe2y4f9DwAAABM0sv/v6O3/9ddZ7f0L3rn6OhcMvLJ9Pux/AAAAmKCR/X9nb/+/ebZdXrLZas98c7GBV96TD/sfAAAAJmhk/9/V2/8bfO/0n5289caPzDbwynvzYf8DAADABI3s/7t7+3/DUw6//9EDDp/7WwOv7JAP+x8AAAAmaGT//663/9+y6NtmFjvsvO08A6/smA/7HwAAACZoZP/f09v/G92xxx4LnX/6Qd8beGWnfNj/AAAAMEEj+//e3v7f+D1nH3n/b+pbvjHwyvvyYf8DAADABI3s/9/39v8mux3ygwu7y17VDryycz7sfwAAAJigkf1/X2//b/qzDTfbYOEt9j904JVd8mH/AwAAwASN7P8/9Pb/Wy968EeHXH7MV5ceeOX9+bD/AQAAYIJG9v8fe/t/s2aZLfY9eeWrXzfwygfyYf8DAADABI3s//t7+/9t88y993L7PP7S4wde+WA+7H8AAACYoJH9/0Bv/2/+rZuP++0uy275o4FXds2H/Q8AAAATNLL/H+zt/y1mm3/X15/14A+fO/DKbvmw/wEAAGCCRvb/n3r7f8vv/eKI71+/1oNzDbzyoXzY/wAAADBBI/v/od7+3+qUP3zvrtkPmuPbA6/sng/7HwAAACZoZP8/3Nv/b1/05RvPO89i6yw+8Moe+bD/AQAAYIJG9v+fe/t/6/1ue/Hp197xzYMGXtkzH/Y/AAAATNDI/n+kt//fcenzLtvy27s98qWBVz6cD/sfAAAAJmhk/z/a2//vvH7xe+bY7ay5XzXwykfyYf8DAADABI3s/7/09v+73ndf+/SR62/72YFX9sqH/Q8AAAATNLL/H+vt/212qje7+02HHvTygVf2zof9DwAAABM0sv//2tv/777xpz+YZ5klbll14JV98mH/AwAAwASN7P/He/t/2yueOHLdx+991XEDr+ybD/sfAAAAJmhk//+tt/+3+9jqe5z7wF77LzjwykfzYf8DAADABI3s/yd6+3/72b5y3O4rn/fV7w+88rF82P8AAAAwQSP7/8ne/n/P97ba+4DNF7z6xIFX9suH/Q8AAAATNLL//97b/+89ZZstbvrMzS8demX/fNj/AAAAMEEj+/8fvf2/w6In/+jFLzj8L+cMvHJAPux/AAAAmKCR/f/P3v7f8aLtN/7xPzee9zkDrxyYD/sfAAAAJmhk/z/V2/87NSd+b8OvPPP6YuCVj+fD/gcAAIAJGtn/T/f2//vmOfqIhddY/ZSTBl45KB/2PwAAAEzQyP5/prf/d/7WO3f94ztOemi5gVc+kQ/7HwAAACboP9//M2b09v8ud95/+I0HbjvX5wZe+WQ+7H8AAACYoJH9X/T2//u3etmHXnDXNW8/duCVg/Nh/wMAAMAEjez/srf/P7Dhczbd47Vz/GiVgVc+lQ/7HwAAACZoZP9Xvf3/wceu/+6nfv34lR8feOWQfNj/AAAAMEEj+7/u7f9dX/XotV9rV37JCwZe+XQ+7H8AAACYoJH93/T2/26ffeVyu7z3mI+tPPDKofmw/wEAAGCCRvZ/29v/Hzp6zjlX+dEWX/nywCufyYf9DwAAABM0sv+73v7f/YVXPvizUy775UIDr3w2H/Y/AAAATNDI/p/Z2/97vO191Zz71q88f+CVz+XD/gcAAIAJGtn/s/X2/54PnnHXU887fZszBl75fD7+xf0/87/wIwYAAAD+VSP7/1m9/f/hJ468+LQrdj5wzoFXDsuHX/8HAACACRrZ/8/u7f+PrLXRC7e64ay/vGTglcPzYf8DAADABI3s/9l7+3+vO4+46uI5dpv3MwOvfCEf9j8AAABM0Mj+n6O3//fe6q0vXfH9d7z+KwOvHJEP+x8AAAAmaGT/z9nb//ts+IFn7fDdxU5ZfeCVL+bD/gcAAIAJGtn/c/X2/76PnfqHL51x0ENnD7zypXzY/wAAADBBI/t/7t7+/+hRb//qy3Zda665B175cj7sfwAAAJigkf3//2LvzqO+Hvt+/+fzpWQeMmUqQsmUROYps4SQIZlnmTNkypCIKxSli8yUKVNcZIhCGSLzkCnKUIRQUvRbe6/D3sfex3ffx7bv+/qt44/HY61rXW+t8/tan3+ffc6zc8mo/89fd8h5ny3x3UGN6qwMDIf+BwAAgAJl+n+pqP8v2HTowVe+tu7Iu+qsDAqH/gcAAIACZfp/6aj/L7zksFFnt35v3Kp1Vm746+v/vU8LAAAA/L/I9H+TqP97HTdo/lGzlmv1TJ2VweHQ/wAAAFCgTP8vE/X/RW/v9dXug548/946K/8Mh/4HAACAAmX6f9mo/y8ee8LY5Xc7+6YF66zcGA79DwAAAAXK9P9yvRo0qMJ9yfkPrDFtvynvXlpn5aZw6H8AAAAoUKb/l4/e/1/aePFX1uvbYqM166wMCYf+BwAAgAJl+n+FqP97P/pyy0+m9j20TZ2Vm8Oh/wEAAKBAmf5vGvX/ZUN/bnzFxrtdNKDOyi3h0P8AAABQoEz/rxj1f5+V203rOXaLSy+ss3JrOPQ/AAAAFCjT/ytF/X/5qFkNPl/xj6M+qbNyWzj+6v/5/n1PDAAAAPxdmf5fOer/KxZo88XS53Zu80qdldvD4f0/AAAAFCjT/6tE/d93yYXH7DS0/4Rj66zcEQ79DwAAAAXK9P+qUf9fed/45iNGLj54cp2VO8Oh/wEAAKBAmf5vFvX/VV8NOWrm0a+fvWOdlbvCof8BAACgQJn+bx71/z+6HtRngYaHrrNXnZW7w6H/AQAAoECZ/l8t6v9+Ox92914f3Tb+5zorQ8Oh/wEAAKBAmf5fPer/q2cM7XD7lgeO2qXOyrBw6H8AAAAoUKb/W0T9f80GvduPnHRjt2l1Vu4Jh/4HAACAAmX6f42o/6/tu/1Hu1zUbqG5dVbuDYf+BwAAgAJl+n/NqP/733zOnJUP/mVatzor94VD/wMAAECBMv2/VtT/A1qMWmH6Nsfd/ladlfvDof8BAACgQJn+bxn1/3V7rjyz9U3Dtj+lzsoD4dD/AAAAUKBM/7eK+v/6qRObfDC34XLH1FkZHg79DwAAAAXK9P/aUf8P/HNSu6uajZ35Yp2VB8Oh/wEAAKBAmf5vHfX/oA5rvX/hxitd+kWdlYfCof8BAACgQJn+Xyfq/xu+mrLFlKmfHLVNnZWHw6H/AQAAoECZ/l836v/BXVf/dNm+p7fpUmflkXD8b/1f+zc8MQAAAPB3Zfp/vaj//7nzCvO22++RCb/WWXk0HN7/AwAAQIEy/b9+1P83zvhs5Yd3W3/wOXVWRoRD/wMAAECBMv2/QdT/N127zgmNB00/e2KdlcfCof8BAACgQJn+bxP1/5DWU6/4fdY267xWZ+XxcOh/AAAAKFCm/zeM+v/mrScMG976ovEn1Vn5Vzj0PwAAABQo0/9to/6/pfeyux78Ws9R79RZeSIc+h8AAAAKlOn/jaL+v/WyX1fYdomnup1ZZ+XJcOh/AAAAKFCm/9v1atCgUfjK27ZoO+eRU5ZZ6LA6KyPDof8BAACgQJn+3zh6/397y8YffXX/O9PG1Fl5Khz6HwAAAAqU6f9Nov6/o/8b7Zd5eJfbO9VZeToc+h8AAAAKlOn/9lH/3/lV9/cndL98++/rrDwTDv0PAAAABcr0/6ZR/9/V9b52qy+65nK/11l5Nhz6HwAAAAqU6f/Nov6/e+drm5z15tcz96+zMioc+h8AAAAKlOn/zaP+Hzqjy8xLp7Y4/u06K8+FQ/8DAABAgTL9v0XU/8P2vH7lVTaecuWpdVaeD4f+BwAAgAJl+n/LqP/vmdp53vf77fbZ0XVWRodD/wMAAECBMv2/VdT/9/553KdP9u271Qt1VsaEQ/8DAABAgTL9v3XU//d1eHCLXQctd9bOdVb++jsB/Q8AAAAFyvT/NlH/37/PkyvP3e29gVPrrLwYDv0PAAAABcr0/7ZR/z8w/cJ5i7c+e/QfdVZeCof+BwAAgAJl+n+7qP+H/77DpwfNenL1Q+qsjA2H/gcAAIACZfp/+6j/H9zmki2GLbHdXlPqrIwLh/4HAACAAmX6v0PU/w9dfNs2D712yUM71Vl5ORz6HwAAAAqU6f8dov5/uP0xt29//7qT96yz8ko49D8AAAAUKNP/O0b9/8g6B1+y3CnfLTCjzsqr4dD/AAAAUKBM/+8U9f+jA288bHL3U3e/oM7Ka+HQ/wAAAFCgTP/vHPX/iC827df84Yce+LjOyvhw6H8AAAAoUKb/d4n6/7H955341purzH61zsrr4dD/AAAAUKBM/+8a9f/ju7/Y8bJFP1v+uDorb4RD/wMAAECBMv2/W9T//5pZe7DHivMfv0edlQnh0P8AAABQoEz/7x71/xP7PN/hh7EvXvldnZU3w6H/AQAAoECZ/u8Y9f+T0xvdvdLQEz6bU2flrXDofwAAAChQpv/3iPp/5O9b9tn53Hu3OqDOytvh0P8AAABQoEz/d4r6/6lt5hz11NGbnPVunZV3wqH/AQAAoECZ/t8z6v+nV19w6drImQPPqrPy198J6H8AAAAoUKb/94r6/5nBr//040f7jz60zsp74dD/AAAAUKBM/+8d9f+z//hlwp0NB68+us7K++HQ/wAAAFCgTP93jvp/1CYbbthl0uF7nV1n5YNw6H8AAAAoUKb/94n6/7kTV9u02vKOh3rVWfkwHPofAAAACpTp/32j/n/+vckTfzp40cnj66x8FA79DwAAAAXK9P9+Uf+PHv3p73dd9NoCJ9dZmRgO/Q8AAAAFyvR/l6j/x5y9/PL73bTX7l/WWfk4HPofAAAACpTp//2j/n9hkZGzBmxzzQPb1ln5JBz6HwAAAAqU6f8Dov5/8fHzljm02Vaz96uz8mk49D8AAAAUKNP/B0b9/9LtO2600dx5y/9SZ+WzcOh/AAAAKFCm/w+K+n/s8r3eG7vo5SsvX2fl83DofwAAAChQpv+7Rv0/buR2Wx785i5zR9ZZmRQO/Q8AAAAFyvT/wVH/v9zg0s+GP/z1sAfqrHwRDv0PAAAABcr0f7eo/19p8uyfv3dfc5fF66z89TsB9T8AAAAUKNP/h0T9/+rws1dqfMpTDS6pszI5HPofAAAACpTp/0Oj/n/ty5b773Z/z0nN66xMCYf+BwAAgAJl+v+wqP/HHzB95BOvvfPYxnVWvgqH/gcAAIACZfr/8Kj/X+/4zo3fLbHMPtfVWfk6HPofAAAACpTp/yOi/n9j1lLnrDpr+prr1Vn5Jhz6HwAAAAqU6f8jo/6f0G6DBRq1Xn/sVXVWvg2H/gcAAIACZfr/qKj/37x65te/7HbRgBvrrEwNh/4HAACAAmX6/+io/9+68bWXbh20zWmb1lmZFg79DwAAAAXK9P8xUf+/3XyhFp37frL5Y3VWvguH/gcAAIACZfr/2Kj/39l32KsD91vpo+XqrHwfDv0PAAAABcr0/3FR/7/7w0mtjtr4kX71VqaHQ/8DAABAgTL9f3zU/+/N2WfBNlNPP/n2Ois/hEP/AwAAQIEy/X9C1P/vb9t/6ui5w1buXWflx3DofwAAAChQpv9PjPr/gy/3nG//ZsfNXavOyk/h0P8AAABQoEz/d4/6/8MDBn553zZjh21QZ2VGOPQ/AAAAFCjT/ydF/f9Rx/tHz7up4S7966z8HA79DwAAAAXK9P/JUf9PnHV8s0UuurHBKnVWfgmH/gcAAIACZfr/lKj/P75u8H4jDj5w0tN1Vn4Nh/4HAACAAmX6/9So/z/pdciInbb85bH76qzMDIf+BwAAgAJl+v+0qP8/3eyo65ee1G6fxnVWZoVD/wMAAECBMv1/etT/n/W646zPG76+5qN1Vn4Lh/4HAACAAmX6/4yo/z+/ZJsWcz9afOySdVZmh0P/AwAAQIEy/d8j6v9Jm1720uIjbxvQsM7K7+HQ/wAAAFCgTP+fGfX/F+s+/fVBRx962p11VuaEQ/8DAABAgTL9f1bU/18O6rnAsHP/2LxlnZW54dD/AAAAUKBM/58d9f/kLz+Y2n3oFh/1rbPyRzj0PwAAABQo0//nRP0/5YBVFrx5bP9+Q+qs/BkO/Q8AAAAFyvR/z6j/v+rYotUrK3Y+ees6K/PCof8BAACgQJn+Pzfq/69nffHqpmdMGnlQulL9deh/AAAAKFCm/8+L+v+bfZs1u2NYs4NmpytV+Br9DwAAACXK9P/5Uf9/+8NXo/cc12/x6elK9dc3AOh/AAAAKFCm/y+I+n/qnI+/nL9Jp+m7pytVLRz6HwAAAAqU6f8Lo/6ftm3T+WY1fmvoc+lKNX849D8AAAAUKNP/vaL+/25ar2n3vLv0joenK9UC4dD/AAAAUKBM/18U9f/3e+3Y+MDHnlmqR7pSNQyH/gcAAIACZfr/4qj/p+9wXsvFjjvv5/fTlapROPQ/AAAAFCjT/5dE/f/DvJGv/NGvz0Xd05Xqr8/rfwAAAChQpv8vjfr/xy1veHzK3jse+ka6UjUOh/4HAACAAmX6v3fU/z/16bbPsht+s9EH6Uq1UDj0PwAAABQo0/+XRf0/Y8CRPbab3urdnulKtXA49D8AAAAUKNP/faL+/7nV7YMe/nnETTPTlWqRcOh/AAAAKFCm/y+P+v+Xgxucfcb6Pc7fJ12pFg2H/gcAAIACZfr/iqj/f/36pX/26TSx1fbpSrVYOPQ/AAAAFCjT/32j/p/589yn3h7QdNykdKVaPBz6HwAAAAqU6f8ro/6ftctmBzTr/fzIl9KVaolw6H8AAAAoUKb/r4r6/7dpvz0y8oAGBx2ZrlRLhkP/AwAAQIEy/f+PqP9n77XVnrtsOnzx09OVaqlw6H8AAAAoUKb/+0X9//sO85+68pSTp7+ZrlR/db/+BwAAgAJl+v/qqP/nzBs9YPpvM4YenK5UTcKh/wEAAKBAmf6/Jur/uTe1mbJfi7Y7zktXqmXCof8BAACgQJn+vzbq/z/WnNXorg5DlvomXamWDYf+BwAAgAJl+r9/1P9/bjh+zZ9u6PrzrulKtVw49D8AAAAUKNP/A6L+n3f5wi9UFw696Md0pVo+HPofAAAACpTp/+v+Z/9XDSYft+gJdxx96N7pSrVCOP6D/p//v+iJAQAAgL8r0//XR/0/X7cHf7hhzLiNdkhXqqbh8P4fAAAACpTp/4FR/1e7Xv/6a6s2fvfrdKVaMRz6HwAAAAqU6f9BUf/Xfuy8ztbVdTedkK5UK4VD/wMAAECBMv1/Q9T/81/605jfP933/JfTlWrlcOh/AAAAKFCm/wdH/b/AVps0b/zsnFafpivVKuHQ/wAAAFCgTP//M+r/hmsv2uDgwzcbd166Uq0aDv0PAAAABcr0/41R/ze65tUvhg/oOP6adKX66zP6HwAAAAqU6f+bov5fcMPGjTfqdNU6G6YrVfNw6H8AAAAoUKb/h0T93/jyN6aNXX+1s9dIV6rVwqH/AQAAoECZ/r856v+Fbvr1lQE/fzm4T7pSvRwG9D8AAAAUKNP/t0T9v/CabVseOv2CCQunK1WLcOh/AAAAKFCm/2+N+n+RE444cbUNR7W5J12p/vqZAP0PAAAABcr0/21R/y/65l393tx7yaOeTVeqNcOh/wEAAKBAmf6/Per/xV685cHe/SZculK6Uq0VDv0PAAAABcr0/x1R/y9+4QEdzzyu9cy705WqZTj0PwAAABQo0/93Rv2/xDPntjnpsanLzZ+uVK3C8R/0f+P/oicGAAAA/q5M/98V9f+SjZ55e8i7Hbav0/jV2uHw/h8AAAAKNN+y8/1vf/K/9P/dUf8vtXSfGS837n37w+lK1Toc+h8AAAAKlHn/PzTq/6Xv2XaJzZosP23LdKVaJxz6HwAAAAqU6f9hUf83+eTLefPGfbjQLelKtW449D8AAAAUKNP/90T9v8wxa6y8yLCzul2erlTrhUP/AwAAQIEy/X9v1P/Lnr7qFvuf8fiotdOVav1w6H8AAAAoUKb/74v6f7mXP/z0vsO7j180Xak2CIf+BwAAgAJl+v/+qP+XP2HFdm2evX+dB9OVqk049D8AAAAUKNP/D0T9v8Kbn7w/+tPq7CfSlWrDcOh/AAAAKFCm/4dH/d/0xa9nDqzGDG6arlRtw6H/AQAAoECZ/n8w6v8VL2ze5KhVu00YmK5UG4VD/wMAAECBMv3/UNT/K6301uGfjLmlzUbpStUuHPofAAAACpTp/4ej/l/57ia91rujzVGrpyvVxuHQ/wAAAFCgTP8/EvX/Ko+sd1vPC3+89KJ0pdokHPofAAAACpTp/0ej/l91wW+2v+KGhWdunq5U7cOh/wEAAKBAmf4fEfV/s4UXXuL6Dq8sNzhdqTYNh/4HAACAAmX6/7Go/5s/PH7G0S2O3L5fulJtFg79DwAAAAXK9P/jUf+vdtestzf87a7b10lXqr9+JkD/AwAAQIEy/f+vqP9XX7VNm+entJ92a7pSbREO/Q8AAAAFyvT/E1H/tzhhwKfzbzp7oSpdqbYMh/4HAACAAmX6/8mo/9d4c98tZh3Qpdsy6Uq1VTj0PwAAABQo0/8jo/5f88WTV76j98BR/0pXqq3Dof8BAACgQJn+fyrq/7UuvGfens/uu/oW6Uq1TTj0PwAAABQo0/9PR/3f8pMTmrxy+HWjb05Xqm3Dof8BAACgQJn+fybq/1bHPDBz02qzgVekK9V24dD/AAAAUKBM/z8b9f/apw96v/unc85qna5U24dD/wMAAECBMv0/Kur/1i/v1e7mMUdvNTRdqTqEQ/8DAABAgTL9/1zU/+t8uFOTlqsO/WyBdKXaIRz6HwAAAAqU6f/no/5f94iLZk68sPGVS6Ur1Y7h0P8AAABQoEz/j476f72znnr/6jvGHf9QulLtFA79DwAAAAXK9P+YqP/XH39+u/M6tF1+oXSl2jkc+h8AAAAKlOn/F6L+32DxQ3Y58oYZs4elK9Uu4dD/AAAAUKBM/78Y9X+bxwbfN+i3rg+MSleqXcOh/wEAAKBAmf5/Ker/DW+7o++YFkN2XzldqXYLh/4HAACAAmX6f2zU/21XPOrYDTZtsMC16Uq1ezj0PwAAABQo0//jov7f6OSxfX6d8vzktulK1TEc+h8AAAAKlOn/l6P+b/fufEc17H3yQy3SlWqPcOh/AAAAKFCm/1+J+n/j5zfvsPcBw/e6LF2pOoXj/9D/Df8LnxgAAAD4uzL9/2rU/5uc+8fdt3Xqsfpt6Uq1Zzi8/wcAAIACZfr/taj/23+4dcfNB4wYXUtXqr3Cof8BAACgQJn+Hx/1/6ZHzH5w3M9NBzZJV6q9w6H/AQAAoECZ/n896v/NzhrT76b1J571eLpSdQ6H/gcAAIACZfr/jaj/Nx+/wIknb7jjVpulK9U+4dD/AAAAUKBM/0+I+n+L4TObvj+9z2c3pCvVvuHQ/wAAAFCgTP+/GfX/lk02+K1Fv1ZXXp2uVPuFQ/8DAABAgTL9/1bU/1s1WOjDU/b+5vh105WqSzj0PwAAABQo0/9vR/2/9cjXNr/ksaWXH5SuVPuHQ/8DAABAgTL9/07U/9tM+niD9457a3a7dKU6IBz6HwAAAAqU6f93o/7f9qCmb63R+LwHVktXqgPDof8BAACgQJn+fy/q/+06Nfv51Hef2b1XulIdFA79DwAAAAXK9P/7Uf9v/+tXS148rtkCi6QrVddw6H8AAAAoUKb/P4j6v8NFHf7cqcmkycPTlergcOh/AAAAKFCm/z+M+n+HzS9eacQZnR56Ml2puoVD/wMAAECBMv3/UdT/O67/xJafD+u314rpSnVIOPQ/AAAAFCjT/xOj/t/p+gs+W/qA2fvMSleqQ8Oh/wEAAKBAmf7/OOr/nTd5eqMrerd/bN90pTosHPofAAAACpTp/0+i/t/lHz3f6zll4KTt0pXq8HDofwAAAChQpv8/jfp/18HbzFpv0y4NPk9XqiPC8d/7v/ZvfWIAAADg78r0/2dR/++2+mXLfNLilV1OTFeqI8Ph/T8AAAAUKNP/n0f9v/tJ7+11y28LD3s9XamOCof+BwAAgAJl+n9S1P8d31ni0RNvuGvuh+lKdXQ49D8AAAAUKNP/X0T9v8dza/dv3+HIlc9NV6pjwqH/AQAAoECZ/v8y6v9OPb875dU7bjn5+XSlOjYc+h8AAAAKlOn/yVH/7/nE64u8fWG3fkekK9Vx4dD/AAAAUKBM/0+J+n+vasHpzVb98aMz0pXq+HDofwAAAChQpv+/ivp/72U3fOOMMW02fy9dqU4Ih/4HAACAAmX6/+uo/zvf/8u6fT69/7QD05XqxHDofwAAAChQpv+/ifp/nw/2G71d1X3Ab+lK1T0c+h8AAAAKlOn/b6P+3/fwa5o9fPiYsT+kK9VJ4dD/AAAAUKBM/0+N+n+/M++db8qz1Zod05Xq5HDofwAAAChQpv+nRf3f5bUTv1x22If7HJ+uVKeEQ/8DAABAgTL9/13U//ufNHzBq85Y/rFx6Up1ajj0PwAAABQo0//fR/1/wDvHTr2wyeOTPktXqtPCof8BAACgQJn+nx71/4HP7f1q63FnNTg/XalOD4f+BwAAgAJl+v+HqP8P6nldqw/enbrLT+lKdUY49D8AAAAUKNP/P0b933WFYw45tHHrYZ3TlapHOPQ/AAAAFCjT/z9F/X/wHbc9M+C43nM7pCvVmeHQ/wAAAFCgTP/PiPq/279uvGnsYx1W/ipdqc4Kh/4HAACAAmX6/+eo/w9Z9OALNtp71Mld05Xq7HDofwAAAChQpv9/ifr/0MWeXbdlvwv6/ZmuVOeE47/1/3z/3icGAAAA/q5M//8a9f9hI85+Y+L0CR99m65UPcPh/T8AAAAUKNP/M6P+P/zW7aZfveGSm+/2vy5U/+1/54b/0P8AAABQoEz/z4r6/4imly5y3vpXnTY2XanOC4f+BwAAgAJl+v+3qP+PPGnNL5/8ueOAo9KV6vxw6H8AAAAoUKb/Z0f9f9Q7n8+364Avx56WrlQXhEP/AwAAQIEy/f971P9HP/dRs1U6rbbmhHSlujAc+h8AAAAKlOn/OVH/H9NzpdHfTz7yzyPTlapXOPQ/AAAAFCjT/3Oj/j/2g09bndX+rlVfSleqi8Kh/wEAAKBAmf7/I+r/4w5f/tVL9194tzfTlericOh/AAAAKFCm//+M+v/4M1ebOuHSV+49PV2pLgmH/gcAAIACZfp/XtT/J7w2ecHVB3f5cl66Ul0aDv0PAAAABfqP+3++BlH/n3jFOvvctMPA6uB0peodDv0PAAAABcr0/3xR/3dvO/Xxk9dov9+u6Up1WTj0PwAAABQo0/9V1P8nrTVh0OazZ//rm3Sl6hMO/Q8AAAAFyvR/Ler/k4cs22PcKtWLe6cr1eXh0P8AAABQoEz/zx/1/ymHbNR4wugxLX5MV6orwqH/AQAAoECZ/l8g6v9Tp8yYtvrt3U/5Ol2p+oZD/wMAAECBMv3fMOr/034a98pZF9x/7Q7pSnVlOPQ/AAAAFCjT/42i/j99t8VaXnpEmw9eTleqq8Kh/wEAAKBAmf5fMOr/M7a+f+y2o37c9IR0pfpHOPQ/AAAAFCjT/42j/u/R+/g1HvmsW/fz0pWqXzj0PwAAABQo0/8LRf1/5rV7zv9V7ZarPk1XqqvDof8BAACgQJn+Xzjq/7NaD/xqmWU6/Dk7XamuCYf+BwAAgAJl+n+RqP/PvmKfRa9+ufeqB6Ur1bXh0P8AAABQoEz/Lxr1/zlt+/9w3j2td9s9Xan6h0P/AwAAQIEy/b9Y1P891xr2esseU++dnq5UA8Kh/wEAAKBAmf5fPOr/c4ectM7EY8/68vB0pbouHPofAAAACpTp/yWi/j/vzyEHHjHi8eq5dKW6Phz6HwAAAAqU6f8lo/4/v8NBT1zzzvL7vZ+uVAPDof8BAACgQJn+Xyrq/wv2PGzwCwt++K8e6Uo1KBz6HwAAAAqU6f+lo/6/cOrQczf5YbUX30hXqhvCof8BAACgQJn+bxL1f68Gez33Y9svW3RPV6rB4dD/AAAAUKBM/y8T9f9FIwetVuvc8ZSe6Ur1z3DofwAAAChQpv+Xjfr/4uEP1LpcfdW1H6Qr1Y3h0P8AAABQoEz/Lxf1/yVNTph0Z/8lP9gnXaluCof+BwAAgAJl+n/5qP8vPfTlxQ7bY8KmM+vMDAn/r/8BAACgQJn+XyHq/94fLf5d//Uu6D4pXaluDof+BwAAgAJl+r9p1P+Xvd5u/EszRl21fbpS3RIO/Q8AAAAFyvT/ilH/9znj5/Xb1cZd8WC6Ut0aDv0PAAAABcr0/0pR/1/+XpsXHvys8bGLpivVbeHQ/wAAAFCgTP+vHPX/FSfOWrPrqKFbNE1XqtvDof8BAACgQJn+XyXq/75nj2+04BFHf/JEulLdEQ79DwAAAAXK9P+qUf9fOXrhKXMumHPdRulKdWc49D8AAAAUKNP/zaL+v+rqg2578vbNegxMV6q7wqH/AQAAoECZ/m8e9f8/2g3ZftfR1zW/KF2p7g6H/gcAAIACZfp/taj/+zUfevgqq+z73OrpSjU0HPofAAAACpTp/9Wj/r/6xsN6fT97+COD05VqWDj0PwAAABQo0/8tov6/5oDt5/66xsmdN09XqnvCof8BAACgQJn+XyPq/2u/7L1Kwx2eb7ROulLdGw79DwAAAAXK9P+aUf/3nzVq670HN/iqX7pS3RcO/Q8AAAAFyvT/WlH/D+h4zie3XTrkwSpdqe4Px1/93+jf+MgAAADA35Tp/5ZR/1+36cQNj9y/6x63pivVA+Hw/h8AAAAKlOn/VlH/X3/JyhMGtZ/R9F/pSjU8HPofAAAACpTp/7Wj/h84aK2fxkxuO2eZdKV6MBz6HwAAAAqU6f/WUf8PWnfS0hvM+OaKDdOV6qFw6H8AAAAoUKb/14n6/4arV//t3vVaHXtNulI9HA79DwAAAAXK9P+6Uf8Pbjel6QF79NmiT7pSPRIO/Q8AAAAFyvT/elH//7P5Z5sv2n/HT9ZIV6pHw6H/AQAAoECZ/l8/6v8bb1zhwz+vnnjdPelKNSIc+h8AAAAKlOn/DaL+v+m3qQ/u2Llpj4XTleqxcOh/AAAAKFCm/9tE/T9ku3U6PtZ2RPOV0pXq8XDofwAAAChQpv83jPr/5v2WPXHSDz2eezZdqf4VDv0PAAAABcr0f9uo/2/5bkK/pRbs98j86Ur1RDj0PwAAABQo0/8bRf1/6w9tP1nsnU6d705XqifDof8BAACgQJn+bxf1/237/rr1HyMmNXo4XalGhkP/AwAAQIEy/b9x1P+3b/vGKvcc2+yrOo1fPRUO/Q8AAAAFyvT/JlH/3zGn8dwDezzz4C3pSvV0OPQ/AAAAFCjT/+2j/r/z6vuWvuWe8/bYMl2pngmH/gcAAIACZfp/06j/72rX/acTX36r6drpSvXX7wTU/wAAAFCgTP9vFvX/3c27TGi/zNJzLk9XqlHh0P8AAABQoEz/bx71/9Abr93w1fUmHFNLV6rnwqH/AQAAoECZ/t8i6v9hm3b+cK8ZS152W7pSPR8O/Q8AAAAFyvT/llH/33PJ9Zvf3n/UW4+nK9XocOh/AAAAKFCm/7eK+v/eQQ82nbnHBW2bpCvVmHDofwAAAChQpv+3jvr/vnWP+22Bzl/2vCFdqV4Ih/4HAACAAmX6f5uo/+/f8sIPH716tRs3S1eqF8Oh/wEAAKBAmf7fNur/B/o8ufk2P1z1xrrpSvVSOPQ/AAAAFCjT/9tF/T98wCVNm7TtuN7V6Uo1Nhz6HwAAAAqU6f/to/5/sNUOv339zuNd26Ur1bhw6H8AAAAoUKb/O0T9/9C0Yy6dt+BZzwxKV6qXw6H/AQAAoECZ/t8h6v+H97rt6EWO/fDbXulK9Uo49D8AAAAUKNP/O0b9/8gON+60/4jlF1wtXaleDYf+BwAAgAJl+n+nqP8fnXfwXffd03vb4elK9Vo49D8AAAAUKNP/O0f9P+LKebue1KPDrYukK9X4cOh/AAAAKFCm/3eJ+v+xNpsOG7LM1F9WTFeq18Oh/wEAAKBAmf7fNer/x9eoXfHyy62XeTJdqd4Ih/4HAACAAmX6f7eo//91y4snbPbZj8fcnK5UE8Kh/wEAAKBAmf7fPer/J7Zs1OvWWpvLtkhXqjfDof8BAACgQJn+7xj1/5N9nj+88xG3vNU6XaneCof+BwAAgAJl+n+PqP9HDpizfaNR3dpeka5Ub4dD/wMAAECBMv3fKer/p1ptedsvt4/puUC6Ur0TDv0PAAAABcr0/55R/z+96+vv735BdePQdKV6Nxz6HwAAAAqU6f+9ov5/5scF241a5f43HkpXqvfCof8BAACgQJn+3zvq/2cnb9hk2uju6y2VrlTvh0P/AwAAQIEy/d856v9R3X6ZufwaA7sOS1eqD8Kh/wEAAKBAmf7fJ+r/5xaY/EfH2V2eWShdqT4Mh/4HAACAAmX6f9+o/58ftdqqzw6e/e3K6Ur1UTj0PwAAABQo0//7Rf0/+r7lt5q6Q/sFR6Ur1cRw6H8AAAAoUKb/u0T9P2bJTz9eYf+7tm2brlQfh0P/AwAAQIEy/b9/1P8vHHVe248vPfLWa9OV6pNw6H8AAAAoUKb/D4j6/8XPRr65/uRXfrksXak+DYf+BwAAgAJl+v/AqP9ferXXj+e2X3iZFulK9Vk49D8AAAAUKNP/B0X9P/bUHZe6/OXzlhiXrlSfh0P/AwAAQIEy/d816v9xb186e6llnvnp+HSlmhQO/Q8AAAAFyvT/wVH/v3zcditO6rH0XeenK9UX4dD/AAAAUKBM/3eL+v+V88/e7LF73urwWbpSfRkO/Q8AAAAFyvT/IVH/vzr22Q92HNFp0c7pSjU5HPofAAAACpTp/0Oj/n+t7/Sb5j+233c/pSvVlHDofwAAAChQpv8Pi/p//AYtL5i1YLMnvkpXqr/+TP8DAABAgTL9f3jU/6+3WOqQO96ZdECHdKX6OhzZ/n//0FtaL7TTjS3/808OAAAA/N/K9P8RUf+/cfM7z+zZtmnrP9OV6ptweP8PAAAABcr0/5FR/0/oOvP5nX+Y+ErXdKX6Nhz6HwAAAAqU6f+jov5/86sNVn/q6h4375auVFPDof8BAACgQJn+Pzrq/7dmLFT90HnEhd+mK9W0cOh/AAAAKFCm/4+J+v/tnV/7fKU9Wm18VLpSfRcO/Q8AAAAFyvT/sVH/v7PFSYt/2P+b98emK9X34dD/AAAAUKBM/x8X9f+7lw37fu0ZO14yIV2ppodD/wMAAECBMv1/fNT/7/Xv/9oF6/U5/LR0pfohHPofAAAACpTp/xOi/n+/5T7r/aN91yX2TVeqH8OxdON/8/MCAAAAf1+m/0+M+v+DvgNfXG7ykJ9mpSvVT+Hw/h8AAAAKlOn/7lH/f7jBnmtNvrTtXZ+nK9WMcOh/AAAAKFCm/0+K+v+jFsc3fGj/GR22S1eqn8Oh/wEAAKBAmf4/Oer/iTffP3n7HU5e9PV0pfolHPofAAAACpTp/1Oi/v/4j0P6zxk8/LsT05Xq13DofwAAAChQpv9Pjfr/k50Gn7Lg7AZPnJuuVDPDof8BAACgQJn+Py3q/08737FX1zWeP+DDdKX663cC6H8AAAAoUKb/T4/6/7Nvj3r0wdGbtT4iXal+C4f+BwAAgAJl+v+MqP8/n3rZ54+uMueV59OVanY49D8AAAAUKNP/PaL+n7TnNtU2F+x783vpSvV7OPQ/AAAAFCjT/2dG/f9Fh56rN7n9ugvPSFeqOeHQ/wAAAFCgTP+fFfX/l38+/fzXoxpv/Fu6Us0Nh/4HAACAAmX6/+yo/yf3XWW91Y4Y9/6B6Ur1Rzj0PwAAABQo0//nRP0/ZYMPXnuzdvQlHdOV6s9w6H8AAAAoUKb/e0b9/1WLL77v/dnQw39IV6p54dD/AAAAUKBM/58b9f/XN7dY/MxNOj47LV2p/XXofwAAAChQpv/Pi/r/my2+mvzdtKsO2SVdqYWv0f8AAABQokz/nx/1/7eXNWu46pWrLdwtXalV4dD/AAAAUKBM/18Q9f/U/k3X2q3Ll1Pnpiu1v34AQP8DAABAgTL9f2HU/9NafvziE7tecMcp6Upt/nDofwAAAChQpv97Rf3/3cU7rv/VwFHbvZWu1BYIh/4HAACAAmX6/6Ko/79v32v8MjOXXPbFdKXWMBz5/r/rP/3IAAAAwN+U6f+Lo/6fvs7I77Zde8KsY9KVWqNweP8PAAAABcr0/yVR//8w8LzFHhnfuvcn6Urtr8/rfwAAAChQpv8vjfr/x326nXbvklOPvDBdqTUOh/4HAACAAmX6v3fU/z9Nv+GaA07tsMGx6UptoXDofwAAAChQpv8vi/p/xu+3P7zoA73ffCVdqS0cDv0PAAAABcr0f5+o/3/e5sjOfz60/A07piu1RcKh/wEAAKBAmf6/POr/XzZ66enNT/zwnMnpSm3RcOh/AAAAKFCm/6+I+v/Xfg26jVvkrHV/Tldqi4VD/wMAAECBMv3fN+r/mf/c7MKbJjz+2l7pSm3xcPxf9X+v/9wjAwAAAH9Tpv+vjPp/VrO5Q05+qfuzZ6YrtSXC4f0/AAAAFCjT/1dF/f/bxVud+WvT+w95J12pLRkO/Q8AAAAFyvT/P6L+n93+t+sa9qwWHpOu1JYKh/4HAACAAmX6v1/U/7+vM/qxve8eM/WwdKX2V/frfwAAAChQpv+vjvp/zsD5u9z2VLc7vk9Xak3Cof8BAACgQJn+vybq/7m/zmq+wjG3bNcpXaktEw79DwAAAAXK9P+1Uf//0anNmKmN2iy7f7pSWzYc+h8AAAAKlOn//lH//3nQwl88O/HHWb+nK7XlwqH/AQAAoECZ/h8Q9f+8SeMbdNxi4d7bpCu15cOh/wEAAKBAmf6/7n/2f63Bc8ccu/7nrxz5RbpSWyEc+h8AAAAKlOn/66P+n6/nbX0/7nXkBr+mK7Wm4dD/AAAAUKBM/w+M+r866cb7Lu9615td0pXaiuHQ/wAAAFCgTP8Pivq/9s7Bu5y7bfsbJqYrtZXCof8BAACgQJn+vyHq//lvnXf3s0Nmn3NOulJbORz6HwAAAAqU6f/BUf8v0HTTDh3/6LLuSelKbZVw6H8AAAAoUKb//xn1f8PFaket0Hzga6+lK7VVw6H/AQAAoECZ/r8x6v9GI17sM3XCpJebpSv/4zP6HwAAAAqU6f+bov5fcNlGJ56ySLOWF6crtebh0P8AAABQoEz/D4n6v/H9z/e75MR+512frtRWC4f+BwAAgAJl+v/mqP8XemLOg+8/1GnIJulKbfVw6H8AAAAoUKb/b4n6f+Fqy44tHnjrnafSlVqLcOh/AAAAKFCm/2+N+n+RTt0bH33q0u1WSFdqa4RD/wMAAECBMv1/W9T/i/5637Trl3zmsMXSldqa4dD/AAAAUKBM/98e9f9ik6595fnx5/W6P12prRUO/Q8AAAAFyvT/HVH/L35Ql5Ybrt1nxrLpSq1lOPQ/AAAAFCjT/3dG/b/E4B77rD1zx6VHpCu1VuHQ/wAAAFCgTP/fFfX/kqs/+viHA7/Z6Y50pbZ2OPQ/AAAAFCjT/3dH/b/UJlcM+seure6eL12ptQ6H/gcAAIACZfp/aNT/S/+jU48Luoz44R/pSm2dcPxf9v+C/5lHBgAAAP6mTP8Pi/q/yezv//nUlT0WWz9dqa0bDu//AQAAoECZ/r8n6v9ltm999s7TJh7YPl2prRcO/Q8AAAAFyvT/vVH/L9tlyQNW2qTpU/9MV2p/fU+A/gcAAIACZfr/vqj/l/v+/ad+aP78y8+kK7UNwqH/AQAAoECZ/r8/6v/lOy2zZ48/GrRcNV2ptQmH/gcAAIACZfr/gaj/V/j17UcuGzL8vDr/eH9tw3DofwAAAChQpv+HR/3fdNK3A97a9uQh96Yrtbbh0P8AAABQoEz/Pxj1/4oHrX9q864z3lkzXaltFA79DwAAAAXK9P9DUf+v1P7jRoN7tW13abpSaxcO/Q8AAAAFyvT/w1H/r3xx0ynHfz7ksAHpSm3jcOh/AAAAKFCm/x+J+n+Vgc1e2GqLrr3apCu1TcKh/wEAAKBAmf5/NOr/Vdf5as3xE4fOuDJdqbUPh/4HAACAAmX6f0TU/83WX6DHm42OXrpVulLbNBz6HwAAAAqU6f/Hov5vfv2YQasdM26nrdKV2mbh0P8AAABQoEz/Px71/2oXzX78zKca331TulLbPBz6HwAAAAqU6f9/Rf2/+uZb79P77ut+WCJdqW0RDv0PAAAABcr0/xNR/7foNOSpbXruu9gj6Upty3DofwAAAChQpv+fjPp/jV8POuDRpnMOvOt/Gfjvn6z99W8C6H8AAAAoUKb/R0b9v+akw87++qXNnmqUrtS2Dof+BwAAgAJl+v+pqP/XOmjoP5v8MXutq9KV2jbh0P8AAABQoEz/Px31f8vZR53ar3n7l9ZLV2rbhkP/AwAAQIH+D/0fvsd/vmei/m+1/R0Dzt92YP9N05XaduHQ/wAAAFCgzPv/Z6P+X7vL4EdaDely+o3pSm37cOh/AAAAKFCm/0dF/d/6+0Nmz5s3b7Pl0pVah3DofwAAAChQpv+fi/p/nT92OfXErgtPfCxdqe0QDv0PAAAABcr0//NR/6+709UDbtnirqtvT1dqO4ZD/wMAAECBMv0/Our/9To/9sirnx95Up2V2k7h0P8AAABQoEz/j4n6f/1vT9+zfaNbVhqZrtR2Dke2/+f/zz8yAAAA8Ddl+v+FqP83aL3XOs0mdvtj+XSltks4vP8HAACAAmX6/8Wo/9tcO+j1t5/68Z7F05XaruFY+n98OQAAAFCMTP+/FPX/hr0f+KHPMW12fiBdqe0WDu//AQAAoED/x/6fb/iAng3mGxv1f9utT1j0jJ73z9c8XantHg79DwAAAAXKvP8fF/X/Rru9/MXDd3f//JJ0pdYxHPofAAAACpTp/5ej/m/30+INtntpzIjr0pXaHuHQ/wAAAFCgTP+/EvX/xlPaNV+2abXvxulKrVM49D8AAAAUKNP/r0b9v8khP4+ZssiHay2ZrtT2DIf+BwAAgAJl+v+1qP/b/9Gm5YUTln/p0XSltlc49D8AAAAUKNP/46P+33SnWa9c9dDj/e9MV2p7h0P/AwAAQIEy/f961P+bdR4/7YMTzzq9YbpS6xwO/Q8AAAAFyvT/G1H/b/7two1bnzp1s77pSm2fcOh/AAAAKFCm/ydE/b9F398uHPBA64kt05XavuHQ/wAAAFCgTP+/GfX/lhtsNeTQ8b2v3jpdqe0XDv0PAAAABUr6v9Yg7v+3ov7fqsX8T2+0ZIeThqQrtS7h0P8AAABQoMz7/7ej/t/65tHdxs4ctdJa6Upt/3DofwAAAChQpv/fifp/mxff2rf/2hf80TtdqR0QDv0PAAAABcr0/7tR/297YZN/HbbrhHv6pyu1A8Oh/wEAAKBAmf5/L+r/7U5Yb2C7gUvuvEG6UjsoHPofAAAACpTp//ej/t/+zW/OeOnKq+Z7Ol2pdQ2H/gcAAIACZfr/g6j/O9y16421Lh0/XyVdqR0cDv0PAAAABcr0/4dR/++w6lXn/LjJlyMapyu1buHQ/wAAAFCgTP9/FPX/jgs/vv+d01bb9750pXZIOPQ/AAAAFCjT/xOj/t/p4VNGdmm67547pSu1Q8Oh/wEAAKBAmf7/OOr/nZd+ZK/xL1338JR0pXZYOPQ/AAAAFCjT/59E/b/LPWc8utXdm02Zka7UDg+H/gcAAIACZfr/06j/d31mj/7H95wz/57pSu2IcOh/AAAAKFCm/z+L+n+3RpefMviYozt+nK7UjgyH/gcAAIACZfr/86j/d9/1g40mPjX0/gvSldpR4dD/AAAAUKBM/0+K+r/jj6u813Ji49+OS1dqR4dD/wMAAECBMv3/RdT/e0xuMeu8RuNWeDVdqR0TDv0PAAAABcr0/5dR/3fq9sUyV3/e9oRT05XaseHQ/wAAAFCgTP9Pjvp/z5ueO27QFjP6vp2u1P76mQD9DwAAAAXK9P+UqP/3WrPhlUd27frpC+lK7fhw6H8AAAAoUKb/v4r6f+8Nt7h3g15Dtj46XamdEA79DwAAAAXK9P/XUf93vvz3nccMaXDm1HSldmI49D8AAAAUKNP/30T9v8/c/Yc23Pb5QTunK7Xu4dD/AAAAUKBM/38b9f++O968w6/NTx5zSLpSOykc+h8AAAAKlOn/qVH/77f3nUfe9sfw1f5IV2onh0P/AwAAQIEy/T8t6v8u3xx+2d7Teuz5UbpSOyUc+h8AAAAKlOn/76L+33/XW7uP22TEw2enK7VTw6H/AQAAoECZ/v8+6v8Dfjz66s27NJ1ycrpSOy0c+h8AAAAKlOn/6VH/Hzi56/CTr5w4//h0pXZ6OPQ/AAAAFCjT/z9E/X9Qt3/uftPAHTtum67UzgiH/gcAAIACZfr/x6j/u2553GYtdu1z/5fpSq1HOPQ/AAAAFCjT/z9F/X9wnwc/eH/tVr/9kq7UzgyH/gcAAIACZfp/RtT/3QZcP/uSmd+ssF+6UjsrHPofAAAACpTp/5+j/j+kVecVT1ly6RO+S1dqf/1OQP0PAAAABcr0/y9R/x+69kM7nzj+rb57pCu1c8Kh/wEAAKBAmf7/Ner/w645895bHjjv0wPSlVrPcOh/AAAAKFCm/2dG/X/4pbtf+eqpz2w9J12pnRsO/Q8AAAAFyvT/rKj/j9iq73HtT2x25lnpSu28cOh/AAAAKFCm/3+L+v/IXVte9sdDkwa9m67Uzg+H/gcAAIACZfp/dtT/R/04/cjFJnQaMzpdqV0QDv0PAAAABcr0/+9R/x89+Z0dDlyk32qHpiu1C/9/eFQAAADg/1Gm/+dE/X9Mt6WG3jN03O/vpCu1XuHw/h8AAAAKlOn/uVH/Hzt3wu5tz2284pnpSu2icOh/AAAAKFCm//+I+v+4HZcd/tyKQzsdlq7ULg6H/gcAAIACZfr/z6j/j997nauvG3v08DHpSu2ScOh/AAAAKFCm/+dF/X/CN1O7H/PRnK87pSu1S8Oh/wEAAKBA/3H/Vw2i/j9x2MwDD2q4WcPv05Va73DofwAAAChQpv/ni/q/+1IbPDHs6Ov2/j1dqV0WDv0PAAAABcr0fxX1/0kNFxo8d+S+j+6frtT6hEP/AwAAQIEy/V+L+v/kp187d/GDhz//RbpSuzwc+h8AAAAKlOn/+aP+P+WC6Y2Wu+jkZtukK7UrwqH/AQAAoECZ/l8g6v9TX2g5ZfKk58/okq7U+oZD/wMAAECBMv3fMOr/0yYs9cJDWza4/td0pXZlOPQ/AAAAFCjT/42i/j/9+HfW3L7ZkI/PSVdqV4VD/wMAAECBMv2/YNT/Z6xy5suXze265cR0pfaPcOh/AAAAKFCm/xtH/d/jzoda97hpxnGvpSu1fuHQ/wAAAFCgTP8vFPX/mQ/1Xaj5Nm0vPyldqV0dDv0PAAAABcr0/8JR/5+10O7fvLXfN7/vkq7UrgmH/gcAAIACZfp/kaj/zx7Wr7Zz31YrTktXateGQ/8DAABAgTL9v2jU/+cstfOkp6b26TQ3Xan1D4f+BwAAgAJl+n+xqP97NjztuR823nF4t3SlNiAc+h8AAAAKlOn/xaP+P/fpEaut1Hri12+lK7XrwqH/AQAAoECZ/l8i6v/zPttpnztnNW14SrpSuz4c+h8AAAAKlOn/JaP+P/+oix7vMmjE3sekK7WB4dD/AAAAUKBM/y8V9f8Fpz41qLZbj0dfTFdqg8Kh/wEA/j/27jzq67Hv9z99P98ShShDSKaMyZwhJHKZyVjmq0zJFCEhMiZzxpQhkciQmUjmDBkjcxnKEELImH7r3uvodx97H9d9Hdve917r+OPx+Md7nXW+1uffZ5/T9wSAAmX6f/Go/894+fQTv7/zkqfOSFdq14ZD/wMAAECBMv3fPOr/M1e48NX2x+3a+qN0pTYkHPofAAAACpTp/xZR/w8YuvNazy76SZ+X0pXadeHQ/wAAAFCgTP8vEfX/WZee3PSyia2vOiJdqQ0Nh/4HAACAAmX6f8mo/8/e8N7verwx7sNp6UptWDj0PwAAABQo0/9LRf1/zlaLzzey6Wmbb5uu1K4Ph/4HAACAAmX6f+mo/8/94+1P9zr6zZ5d0pXaDeHQ/wAAAFCgTP+3jPr/vO++e2b+excf+GO6UrsxHPofAAAACpTp/2X+R/93+48/rp2/1+orzOp4yMXLpyu1m8Kh/wEAAKBAmf5fNnr/P/CXr186YtitR41LV2rDw6H/AQAAoECZ/l8u6v8Ldm672tA/F9r4jnSldnM49D8AAAAUKNP/raL+H9RtycavtX7pvQXSldqIcPzr/q//tz4yAAAA8Ddl+n/5qP8v/OyNrztsvs9l56QrtVvC4f0/AAAAFCjT/62j/r/o7gH39P/k6t5t0pXareHQ/wAAAFCgTP+vEPX/xc3/sfPFAzZeZd10pTYyHPofAAAACpTp/xWj/r9kvtOPeu+A3569Il2p3RYO/Q8AAAAFyvT/SlH/Xzr2sUvWGNvgodXTldqocOh/AAAAKNC/6///+GLU/5f1HTJrvcOe2efCdKV2ezj0PwAAABQo8/5/laj/L3/6oEWfanh0bVi6UrsjHPofAAAACpTp/zZR/w+efOi6V71/56dbpCu10eHQ/wAAAFCgTP+vGvX/FUeNmHTYhHVH35eu1O4Mh/4HAACAAmX6f7Wo/69cav4OI5b5fodF05XaXeHQ/wAAAFCgTP+vHvX/VTdPmLLbqQe2apSu1O4Ox9/s//n/Tx4ZAAAA+Jsy/b9G1P9XPzRnbnXbjXNvTVdq94TD+38AAAAoUKb/14z6/5ommy33y73bXHxWulIbEw79DwAAAAXK9P9aUf9fe/dvs48++tyjWqcrtXvDof8BAACgQJn+bxv1/5DmWza/oemaG7dPV2rzfieA/gcAAIACZfp/7aj/r5uvvuFLb8x476p0pXZ/OPQ/AAAAFCjT/+2i/h869pl3Npl48mVLpyu1B8Kh/wEAAKBAmf5fJ+r/Ye+tM3zAog/1fixdqT0YDv0PAAAABcr0/7pR/1/fY/bWxx+31Cp3piu1h8Kh/wEAAKBAmf5fL+r/G06e2L3Nne89u3C6Uns4HPofAAAACpTp//Wj/r/xlQXPfHvHFR96IF2pPRIO/Q8AAAAFyvT/BlH/3/TqV5NevOazfZZIV2qPhkP/AwAAQIEy/b9h1P/D+7Rbd9Nfdq7Nn67UxoZD/wMAAECBMv2/UdT/Nx/cYtFj1rzo0xHpSm3e7wTQ/wAAAFCgTP+3j/p/xPuTZl2/UbPR7dKV2uPh0P8AAABQoEz/bxz1/y13916u64zXd7g4XamNC4f+BwAAgAJl+n+TqP9vbf7w3NGD+re6Ll2pPREO/Q8AAAAFyvT/plH/j5zv4ilz9x4/d+N0pTY+HPofAAAACpTp/82i/r9t7I4dmhx9Wo/705Xak+HQ/wAAAFCgTP93iPp/1FIXvHP1vePOapau1J4Kh/4HAACAAmX6f/Oo/2+/edcND31j8ckN05Xa0+HQ/wAAAFCgTP9vEfX/HQ+d2Hzdpm+2vyVdqT0TDv0PAAAABcr0/5ZR/49ucv/spxfdtf9q6Urt2XDofwAAAChQpv87Rv1/57K3vtNn4iU3DkpXas+FQ/8DAABAgTL9v1XU/3eN7LHh+Xe2fvn6dKX2fDj0PwAAABQo0/+dov6/+75uzScd98kaW6YrtQnh0P8AAABQoEz/bx31/z0L3Di79TUtu56brtReCIf+BwAAgAJl+n+bqP/HvDRu0MY7fvDoqulK7cVw6H8AAAAoUKb/O0f9f+9xpx7x8ponfrtOulJ7KRz6HwAAAAqU6f9to/6/75Cttr/xlweaDI7+fN73vBwO/Q8AAAAFyvT/P6L+v3/K+aOPmrF651bpSm1iOPQ/AAAAFCjT/9tF/f/AHatsc/tGX97yeLpSeyUc+h8AAAAKlOn/7aP+f3DRz0buu/e2349OV2qvhkP/AwAAQIEy/b9D1P8PVe+dv/Cg85s1Tldqr4VD/wMAAECBMv2/Y9T/Dz+x/KFzhu3fY+10pfZ6OPQ/AAAAFCjT/ztF/f/Ish9dcnjH68+6KF2pvREO/Q8AAAAFyvT/zlH/PzpymaOubL3+5KHpSu3NcOh/AAAAKFCm/3eJ+n/sfSvs/OSfs9pvkq7UJoVD/wMAAECBMv2/a9T/jy3wxT3rf3Js/wfTldpb4dD/AAAAUKBM/+8W9f/jvZq/d+Hmd9+4ZLpSezsc+h8AAAAKlOn/LlH/j3vjzc36HjDfy/9ipTY5HPofAAAACpTp/92j/n/iuS9brjXgqTVuTldq74RD/wMAAECBMv2/R9T/489Y+9eph23adal0pfZuOPQ/AAAAFCjT/3tG/f/kylv8OGjsH4+OTVdq74VD/wMAAECBMv2/V9T/T93wa7NT3t/r27vSldr74dD/AAAAUKBM/+8d9f/Tg55ep23DK5sskq7UPgiH/gcAAIACZfp/n6j/n1mnenPKMo07n52u1D4Mh/4HAACAAmX6v2vU/89uM3LzZSa8cMsK6Urto3DofwAAAChQpv+7Rf3/3F8HT/3ytsO+3yhdqU0Jh/4HAACAAmX6f9+o/5+fse9fj596W7Mr05Xa1HDofwAAAChQpv/3i/p/wm7Dlt110OvN+6YrtY/Dof8BAACgQJn+3z/q/xdmHfjL23s3+/n9dKX2STj0PwAAABQo0/8HRP3/4nbXtmiz0fjhr6QrtU/Dof8BAACgQJn+PzDq/5f2v3mD42f073hsulL7LBz6HwAAAAqU6f+Dov5/+fNDJg/45bPGn6UrtWnh0P8AAABQoEz/Hxz1/8TRGwx+Zs0Vv9wqXalND4f+BwAAgAJl+v+fUf+/0mzWcevseNHje6crtc/Dof8BAACgQJn+7x71/6v1F7occs3OB/yUrtS+CIf+BwAAgAJl+r9H1P+vjV/4/muOe6jdLulK7ctw6H8AAAAoUKb/D4n6//XT13rt0jtPfvWbdKX2VTj0PwAAABQo0/+HRv3/xoQZbU+b+N51f6QrtRnh0P8AAABQoEz/Hxb1/5uTXm+y2qJLndotXal9HQ79DwAAAAXK9P/hUf9P6rnEzA+anrve2+lKbd7/E6D/AQAAoECZ/j8i6v+3lntg/lZvbDPp5HSl9m049D8AAAAUKNP/PaP+f/u24z/79t4Z5x+crtRmhkP/AwAAQIEy/X9k1P+T79/u6UePXvOwp9OV2nfh0P8AAABQoEz/94r6/53Gl7Te4dTvm09PV2rfh0P/AwAAQIEy/X9U1P/vjt7p5ddvW/fnf6QrtR/Cof8BAACgQJn+Pzrq//eaDVp9pQk3Dt8tXanNCof+BwAAgAJl+v+YqP/fr49Z4ORlDuw4K12p/RgO/Q8AAAAFyvT/sVH/fzD+pBnnNHymcf90pfZTOPQ/AAAAFCjT/8dF/f/hh+cO6/B+gy8/TFdqP4dD/wMAAECBMv3fO+r/jw7buv9rY+98/OV0pTY7HPofAAAACpTp/+Oj/p9y/CkHDT3s6AN6piu1X8Kh/wEAAKBAmf4/Ier/qS+MH3fEgKvbTUpXar+GQ/8DAABAgTL93yfq/49f3n9mnwP2ebV3ulL7LRz6HwAAAAqU6f8To/7/pPd1Tc7f/LfrDktXar+HQ/8DAABAgTL9f1LU/58eelPbSZ9sfOqz6Urtj3D86/7/6tH/1mcGAAAA/p5M/58c9f9nUw97rfWft663XbpS+zMc3v8DAABAgTL93zfq/2mjn209vfUhk2akK7U54fjf6f+G/5ePDAAAAPxNmf4/Jer/6c0aPL1Ex5fOn5Ou1P4Kh/f/AAAAUKBM//eL+v/z+safdRq20GEHpSu1ueHQ/wAAAFCgTP+fGvX/F+P/mv/eX6e/s2C6Us079D8AAAAUKNP/p0X9/+VyHWasufLKG41KV6rwd/Q/AAAAlCjT/6dH/f/Vbb8v8O42g7qPT1eqBuHQ/wAAAFCgTP/3j/p/xv1Prn7RtTuevVy6UtXCof8BAACgQJn+PyPq/68bN3z5jHMnv3R5ulLN+wAA/Q8AAAAFyvT/mVH/fzNi2AordFtyzfXTlaoeDv0PAAAABcr0/4Co/79det9n3tzk0TNWTleqhuHQ/wAAAFCgTP+fFfX/zKYHf3re9L43nJeuVI3Cof8BAACgQJn+Pzvq/+8eHjnfiQ3O/qZDulLN+379DwAAAAXK9P85Uf9/f+I5px09pVPTG9KVqnE49D8AAAAUKNP/50b9/8NrnW644Ylvul2QrlQLhkP/AwAAQIEy/X9e1P+zPug7/qXubR9ZM12pFgqH/gcAAIACZfr//Kj/f/znEwdscsaYH25LV6om4dD/AAAAUKBM/w+M+v+nFsve9+eI3ovW05WqaTj0PwAAABQo0/8XRP3/8z3v77bIM1O3WSxdqRYOh/4HAACAAmX6f1DU/7Mf+7j3fsu3unVMulItEg79DwAAAAXK9P+FUf//Mn+bK0Y1fu6da9KVatFw6H8AAAAoUKb/L4r6/9cR0/qu93a10YbpStUsHPofAAAACpTp/4uj/v9t6RWve+rBO7qvmK5U8z4TQP8DAABAgTL9f0nU/783Xeqxq3r2OvvMdKWa1/36HwAAAAqU6f9Lo/7/4+Ep3Q7rM/ulJulK1Twc+h8AAAAKlOn/y6L+//Ottu2mjGq/5t3pStUiHPofAAAACpTp/8uj/p9zzNevtH1hyBmPpivVEuHQ/wAAAFCgTP8Pjvr/r35vfHNK8643LJOuVEuGQ/8DAABAgTL9f0XU/3OfXHLhQT+O+GZ4ulItFQ79DwAAAAXK9P+V/9n/1Xztp537c7vuTWvpSrV0OPQ/AAAAFCjT/1dF/T//xSse3nDXid2apytVy3DofwAAAChQpv+vjvq/wZCltt39iqaPPJSuVPM+E0D/AwAAQIEy/X9N1P+1labcMvySy37YNF2plg2H/gcAAIACZfr/2qj/q31O2/GQ3bssem26Ui0XDv0PAAAABcr0/5Co/+vfjr39mvXmbnNpulK1Cof+BwAAgAJl+v+6qP8b/nbmwGdmbnFr23SlWj4c+h8AAAAKlOn/oVH/N9p62yPXWX77m55KV6p536P/AQAAoECZ/h8W9f8Cn5wz4I5nBm7VI12pVgiH/gcAAIACZfr/+qj/G+/XqUe3EW1a9ElXqhXDof8BAACgQJn+vyHq/wV37dup6Rlf/DQ5XalWCof+BwAAgAJl+v/GqP8X+vmJm/7q3m/cvulKtXI49D8AAAAUKNP/N0X93+SRmdMef+Kx/X9NV6pVwqH/AQAAoECZ/h8e9X/TBqs13HVKiwW+S1eqNuHQ/wAAAFCgTP/fHPX/wksstuoyDd76aud0pVo1HPofAAAACpTp/xFR/y9y51vPfTm93dBf0pVqtXDofwAAAChQpv9vifp/0WNmP/r9JjP77ZWuVKuHQ/8DAABAgTL9f2vU/83eWme/WreOa3dKV6o1wqH/AQAAoECZ/h8Z9f9iTy7Yb59zB7z2cbpSrRkO/Q8AAAAFyvT/bVH/L95v4rW3XLvseUelK9Va4dD/AAAAUKBM/4+K+r/5wsec/M9tPjr81XSlahsO/Q8AAAAFyvT/7VH/t3hg1FWDVz5h/ffSlWrtcOh/AAAAKFCm/++I+n+JmwY/8Pyv9715arpStQtH1P8L/L96ZAAAAOBvyvT/6Kj/l2y5594bzux50/7pSrVOOLz/BwAAgAJl+v/OqP+XeuTqcfesN2qrv9KVat1w6H8AAAAoUKb/74r6f+kGux20/+4NW3yVrlTrhUP/AwAAQIEy/X931P8tlziy/wKXTPhpx3SlWj8c+h8AAAAKlOn/e6L+X+bOO4f9ccW+4yakK9UG4dD/AAAAUKBM/4+J+n/Z1w6asfWuQ/c/NF2pNgyH/gcAAIACZfr/3qj/lztxyAJj2m24wPHpSrVROPQ/AAAAFCjT//dF/d/qnyNWn/bjT1+9nq5U7cOh/wEAAKBAmf6/P+r/5T849OUlmy8y9Mh0pdo4HPofAAAACpTp/wei/m/97nnXLvTCq/1eSFeqTcKh/wEAAKBAmf5/MOr/Fbp37PfrqIPXnpquVJuGQ/8DAABAgTL9/1DU/yue1G+/O/sMf+30dKXaLBz6HwAAAAqU6f+Ho/5faeLjjx7Us8N5P6QrVYdw6H8AAAAoUKb/H4n6f+VHWu193YNzDt8jXak2D4f+BwAAgAJl+v/RqP9XafDuAz3f3mP9bdKVaotw6H8AAAAoUKb/x0b932aJT6/avPHgNz9PV6otw6H/AQAAoECZ/n8s6v9V71z55FfX67LL0elK1TEc+h8AAAAKlOn/x6P+X23hz4ftOfOye15LV6qtwqH/AQAAoECZ/h8X9f/qD7Tuf9slW/zxbrpSdQqH/gcAAIACZfr/iaj/17ip5UE/7j63Zb90pdo6HPofAAAACpTp//FR/6/Z8sNx8+3afY/Z6Uo173cC6H8AAAAoUKb/n4z6f60FXxr20BUj7tszXak6h0P/AwAAQIEy/f9U1P9txzTp3/nHpp9vna5U24ZD/wMAAECBMv3/dNT/a9+y0UHN2k1s9Em6Uv0jHPofAAAACpTp/2ei/m/X6vtxn77Q/sT90pVqu3DofwAAAChQpv+fjfp/nQ/ffOr35rOv/C1dqbYPh/4HAACAAmX6/7mo/9dtdt9Kjft0fXJmulLtEA79DwAAAAXK9P/zUf+vd/zaDQ4YNWSFndKVasdw6H8AAAAoUKb/J0T9v/4LX35894PVEU+mK9W8fxPQ/wAAAFCgTP+/EPX/Bo/vsEivns9d0D1dqXYOh/4HAACAAmX6/8Wo/zdseNG31zbu9dGJ6Uq1Szj0PwAAABQo0/8vRf2/0WIPTZz49h0d3klXql3Dof8BAACgQJn+fznq//ajjlt7y2d67/J9ulLtFg79DwAAAAXK9P/EqP83XvC+525dfsw9u6crVZdw6H8AAAAoUKb/X4n6f5MxfVbd+4xWf3ROV6p5/yag/wEAAKBAmf5/Ner/TW/ZpWGDEVNbfpGuVHuEQ/8DAABAgTL9/1rU/5u1Gjjthyc67dErXan2DIf+BwAAgAJl+v/1qP87nH7q4O27n33fi+lKtVc49D8AAAAUKNP/b0T9v/mEcceNbdD28ynpSrV3OPQ/AAAAFCjT/29G/b/FpPO7zJzyTaPT0pVqn3DofwAAAChQpv8nRf2/Zc+t7l9ukyVPfD5dqbqGQ/8DAABAgTL9/1bU/x3X6/LIdtMnX3lIulJ1C4f+BwAAgAJl+v/tqP+3GnjNvo+d2/fJE9KVat9w6H8AAAAoUKb/J0f932nYXad+1+3RFd5IV6r9wqH/AQAAoECZ/n8n6v+t2/Qasuw2Kx9xQLpS7R8O/Q8AAAAFyvT/u1H/b7P7iye9d+30C+amK9W8fxPQ/wAAAFCgTP+/F/V/5y8XuXKNX3f86Mt0pTowHPofAAAACpTp//ej/t/2zw0f7L/yoA47pCvVQeH4t/0/4L/nkQEAAIC/KdP/H0T9/49tf9zn4rfnbDIyXakODof3/wAAAFCgTP9/GPX/dtPWfXzJxh3erdKV6p/h0P8AAABQoEz/fxT1//YH/nLgtJ6DL/oXjV91D4f+BwAAgAJl+n9K1P877PDKGWMe3OPoe9OVqkc49D8AAAAUKNP/U6P+3/H7ha7fetSrK2+erlSHhEP/AwAAQIEy/f9x1P87jdvvvfn7LPLcjelKdWg49D8AAAAU6H/p/9r/0v+fRP2/c6PrN5vVfPjlA9OV6rBw6H8AAAAoUOb9/6dR/++y+G0tR75w8HFrpCvV4eHQ/wAAAFCgTP9/FvX/rrf/89e92g1tcFm6Uh0RDv0PAAAABcr0/7So/3frtfU5O/+472frpStVz3DofwAAAChQpv+nR/3f5Y1zD3viip8eXiVdqY4Mh/4HAACAAmX6//Oo/3d/bvw/Zuy64d7npytVr3DofwAAAChQpv+/iPp/jzNOuXXp3Uctv1C6Uh0VDv0PAAAABcr0/5dR/++50Ac7fHhJz79un2/+M/+XlerocOh/AAAAKFCm/7+K+n+ve5cb1W7mhDueSFeqY8Kh/wEAAKBAmf6fEfX/3reuesGp6zXccdl0pTo2HPofAAAACpTp/6+j/t9n+U96DVz5o002S1eq48Kh/wEAAKBAmf7/Jur/ruNWOnOxX5d9d0i6UvUOh/4HAACAAmX6/9uo/7s1mt79k2vvu+iSdKU6Phz6HwAAAAqU6f+ZUf/vu/jUrR/c5oSj10pXqhPCof8BAACgQJn+/y7q//1uX3r4tt1mrnxTulL1Ccff7P/a/8kjAwAAAH9Tpv+/j/p//5dmvPPXue2ea5CuVCeGw/t/AAAAKFCm/3+I+v+A49basOn0AZe3SFeqk8Kh/wEAAKBAmf6fFfX/gYcs0bzbJh2PezhdqU4Oh/4HAACAAmX6/8eo/w+a8vrsO6Y81qBpulL1DYf+BwAAgAJl+v+nqP8P/mj9Wx9q0O+ze9KV6pRw6H8AAAAoUKb/f476/5+H//yPzt3feviRdKXqFw79DwAAAAXK9P/sqP+7n/DaYc2eaLF3y3SlOjUc+h8AAAAKlOn/X6L+7/Fi43M+HTFw+avTleq0cOh/AAAAKFCm/3+N+v+QcaN7rXrG9n9tkK5Up4dD/wMAAECBMv3/W9T/hzY6+oK3lv/ijpXSlap/OPQ/AAAAFCjT/79H/X/Y4vuMOvOZNjsOSFeqM8Kh/wEAAKBAmf7/I+r/w2+/fIcTjjj4ig3TlerMcOh/AAAAKFCm//+M+v+IhfYY/tUDw4+/Jl2p5v1MgP4HAACAAmX6f07U/z3vvWrrlm8t0ubMdKU6Kxz6HwAAAAqU6f+/ov4/8tZ7uu+ywKsTVkxXqrPDof8BAACgQJn+nxv1f6/le545rsUel9ydrlTnhEP/AwAAQIH+ff/X5ov6/6h9h3/Y4MXBxzZJV6pzw6H/AQAAoECZ/p8/6v+jPz58ix9u77DZMulKdV449D8AAAAUKNP/DaL+P+anA5a/9cQ57z+arlTnh0P/AwAAQIEy/V+L+v/YXYbO2Xtww1G1dKUaGA79DwAAAAXK9H8V9f9xFz06YJddJmw/PF2pLgiH/gcAAIACZfq/HvV/743O6DFu7Z7LPZSuVIPCof8BAACgQJn+bxj1//Erdu701axRfzZPV6oLw6H/AQAAoECZ/m8U9f8J1559U8vvNnzw2nSluigc+h8AAAAKlOn/BaL+7/PNCrtOXf+nPTdNV6qLw6H/AQAAoECZ/m8c9f+Je39x11p77Dtf23SluiQc+h8AAAAKlOn/BaP+P6nTRxf1vXToJ5emK9W8r+l/AAAAKFCm/xeK+v/kX5c55sIhHa8Yla5Ul4VD/wMAAECBMv3fJOr/vvu+d26zzgOOXzBdqS4Ph/4HAACAAmX6v2nU/6d8vPzhn67Srs1y6Uo1OBz6HwAAAAqU6f+Fo/7v99Mq2z7028wJ49OV6opw6H8AAAAoUKb/F4n6/9RdPrul87QTLlk/XamuDIf+BwAAgAJl+n/RqP9Pa7vom3M2vu/Yy9OV6qpw6H8AAAAoUKb/m0X9f/o1k9dZuOuym52XrlRXh0P/AwAAQIEy/b9Y1P/9z/6m2b7nfPT+yulKdU049D8AAAAUKNP/i0f9f8Yma/x4e482o25IV6prw6H/AQAAoECZ/m8e9f+Zkz7c7pjxX2zfIV2phoRD/wMAAECBMv3fIur/AT1b3nH91O2XWzNdqa4Lh/4HAACAAmX6f4mo/886vfWFL9YG/nlBulINDYf+BwAAgAJl+n/JqP/PnvB5z01btXiwnq5Uw8Lxv9f/G/9fPTIAAADwN2X6f6mo/8+5f5vz5j791p63pSvV9eHw/h8AAAAKlOn/paP+P7fxWYc0ubnffGPSlWre7wTQ/wAAAFCgTP+3jPr/vOUe6dy1/2OfLJauVDeGQ/8DAABAgTL9v0zU/+ff1v+20ZdOnPZXulLdFA79DwAAAAXK9P+yUf8PrD++07p7NK3vn65Uw8Px7/r/zP+mRwYAAAD+pkz/Lxf1/wXj+9399PojuuyYrlQ3h8P7fwAAAChQpv9bRf0/aHTHS6/+rvuYr9KVakQ49D8AAAAUKNP/y0f9f2Gz844+dNbc3w5NV6pbwqH/AQAAoECZ/m8d9f9F+09efdW1t1hqQrpS3RoO/Q8AAAAFyvT/ClH/X/z5oi+/tctlO72erlQjw6H/AQAAoECZ/l8x6v9LZq0x48zBXe46Pl2pbguH/gcAAIACZfp/paj/L93umwVOOPGOqS+kK9WocOh/AAAAKFCm/1eO+v+yQa/26XV7ry2OTFeq28Oh/wEAAKBAmf5fJer/y9dZ4OprX3zuyNPTleqOcOh/AAAAKFCm/9tE/T945fUentiiunBqulKNDof+BwAAgAJl+n/VqP+vuOGnvbZcYMjTe6Qr1Z3h0P8AAABQoEz/rxb1/5Uz9h77+1tdV/ohXanuCof+BwAAgAJl+n/1qP+v2u2yro0fmH3y5+lKdXc49D8AAAAUKNP/a0T9f/U2d5xywBHtr94mXanuCYf+BwAAgAJl+n/NqP+v+euooXf3/2Zaj3SlGhMO/Q8AAAAFyvT/WlH/X7v/3cdtcHPb+lPpSnVvOPQ/AAAAFCjT/22j/h/y+RGDJzx9dpfJ6Up1Xzj0PwAAABQo0/9rR/1/3azd77+iVacxfdKV6v5w6H8AAAAoUKb/20X9P3S7K7scXJv626/pSvVAOPQ/AAAAFCjT/+tE/T9szcNXfXdqq6X2TVeqB8Oh/wEAAKBAmf5fN+r/6y8f/tya48fstHO6Uj0UDv0PAAAABcr0/3pR/99w7tBpZ/Tofdd36Ur1cDj0PwAAABQo0//rR/1/45YHNLzonEFT90pXqkfCof8BAACgQJn+3yDq/5s6PLHXZV133OKXdKV6NBz6HwAAAAqU6f8No/4ffl7fh3tsPP3Ij9OVamw49D8AAAAUKNP/G0X9f/PgTle3n7byhZ3SleqxcOh/AAAAKFCm/9tH/T9itXP6PPvbo0+/mq5Uj4dD/wMAAECBMv2/cdT/t+zfZuj8q/Rd6ah0pRoXDv0PAAAABcr0/yZR/9/6+cenzOo8+eRT05XqiXDofwAAAChQpv83jfp/5Kz3u44csuTV76Ur1fhw6H8AAAAoUKb/N4v6/7btlh27181vLbh7ulI9GQ79DwAAAAXK9H+HqP9HzZjS5bX+Lb7+Pl2pngqH/gcAAIACZfp/86j/b99tqfs7tHps/BfpSvV0OPQ/AAAAFCjT/1tE/X/HNisOPqKa78DO6Ur1TDj0PwAAABQo0/9bRv0/+q9pxw2d+sWSL6Yr1bPh0P8AAABQoEz/d4z6/86Zs7q0rbWZ3StdqZ4Lh/4HAACAAmX6f6uo/+/ac4P7p/QYePNp6Ur1fDj0PwAAABQo0/+dov6/u+PCgweN337rKelKNSEc+h8AAAAKlOn/raP+v+f3F447pet96x6SrlQvhEP/AwAAQIEy/b9N1P9jNp7R5J/nnPD68+lKtUm78Vu3O3btZvofAAAACpTp/85R/9971lozB0/76Jw30pXqpXDofwAAAChQpv+3jfr/vquXeO35jZc99IR0pXo5HPofAAAACpTp/39E/X//Wq+33XCVAWvNTVeqieHQ/wAAAFCgTP9vF/X/A12Pf/r73zq+ckC6Ur0SDv0PAAAABcr0//ZR/z/46QOta0NmDtkhXaleDYf+BwAAgAJl+n+HqP8fmn3J/Pt0btf3y3Slei0c+h8AAAAKlOn/HaP+f3in7T67ZY+fFnwtXaleD4f+BwAAgAJl+n+nqP8fmTlogS0u3fDro9OVat7vBNT/AAAAUKBM/+8c9f+je+4045Xvho7vl65Ub4ZD/wMAAECBMv2/S9T/Yzue9PKQ9fc98N10pZoUDv0PAAAABcr0/65R/z/2+5jVj1x7wpJ7pivVW+HQ/wAAAFCgTP/vFvX/40O2PujNWQ1nz05XqrfDof8BAACgQJn+7xL1/7iVzh23wuBRN3+SrlSTw6H/AQAAoECZ/t896v8n2o8fduIuPbfeOl2p3gmH/gcAAIACZfp/j6j/x198Sv/zbh+87m/pSjXvMwH1PwAAABQo0/97Rv3/5OSeJ046cY/X90tXqvfCof8BAACgQJn+3yvq/6eOuuea1i3mnLNTulK9Hw79DwAAAAXK9P/eUf8/3feqh/q82OHQmelK9UE49D8AAAAUKNP/+0T9/8zTe+x5/lvD1+qerlQfhkP/AwAAQIEy/d816v9nH/rhsU4LHPzKk+lK9VE49D8AAAAUKNP/3aL+f65J+273HvHqkHfSlWpKOPQ/AAAAFCjT//tG/f/8Uk37Tn9gkb4n/ps5/Q8AAAAFyvT/flH/T7j55euW6Nz39CHpSvVxOPQ/AAAAFCjT//tH/f/CfI17XzTk0WGbpSvVJ+HQ/wAAAFCgTP8fEPX/i2Nfu+KM35Z8Ya10pfo0HPofAAAACpTp/wOj/n/p7p/vW3OVyatfkq5Un4VD/wMAAECBMv1/UNT/Lzdff7d3N97x4AbpSjUtHPofAAAACpT2/7ze/w+1g6P+n9itR/Prpg0acFO6Uk0Ph/4HAACAAs2/xNL15//r9///jPr/lc9und3znJXffjhdqT4Ph/4HAACAAmV+/r971P+v/nLjO5t3nb5Bi3Sl+iIc+h8AAAAKlOn/HlH/v7Zztw1fHd9q23vSlerLcOh/AAAAKFCm/w+J+v/1S0/dfnKPqbc1TVeqr8Kh/wEAAKBAmf4/NOr/NzYcN3qVWu8fW6Yr1Yxw6H8AAAAoUKb/D4v6/80Vzh/Ue+qYxR5JV6qvw6H/AQAAoED/rv/n1uabL+r/SUO3OuKsp9vut0G6Un0TDv0PAAAABcq8/z8i6v+3vvvs/H+0+mbs1elK9W04ov5v+P/qkQEAAIC/KdP/PaP+f3uvVQ59oH+nmQPSlWpmOLz/BwAAgAJl+v/IqP8nb7X8Nh/ffPYiK6Ur1Xfh0P8AAABQoEz/94r6/50/3hu5+ANdT6/Sler7cOh/AAAAKFCm/4+K+v/dbsvsfMERQ4aNTFeqH8Kh/wEAAKBAmf4/Our/9z776J5+C7R/4d50pZoVDv0PAAAABcr0/zFR/7//yxeXrP3W7NX/ReNXP4ZD/wMAAECBMv1/bNT/H+y8wlEfvdjr4BvTleqncOh/AAAAKFCm/4+L+v/Dtd9seWiLOwZsnq5UP4dD/wMAAECBMv3fO+r/j65s/uvVJ1Zvr5GuVLPDof8BAACgQJn+Pz7q/ylnrv3e07c/t8HAdKX6JRz6HwAAAAqU6f8Tov6fuumXm627yxbbrpeuVL+GQ/8DAABAgTL93yfq/483WeiItoPn3nZZulL9Fg79DwAAAAXK9P+JUf9/cvYrg6bM6vLj+elK9Xs49D8AAAAUKNP/J0X9/+k1v4wetPZli62SrlR/hEP/AwAAQIEy/X9y1P+ftV13+1PWb7rf7elK9Wc49D8AAAAUKNP/faP+n9btipGPfzdx7ELpSjUnHPofAAAACpTp/1Oi/p/+2V7b7Hpp95nLpivVX+HQ/wAAAFCgTP/3i/r/81+OPXSZPUYs8kS6Us0Nh/4HAACAAmX6/9So/7/Y+fbzv3xs+0lj05X6vEP/AwAAQIEy/X9a1P9fftfrqOMPH7jeUulKPfwd/Q8AAAAlyvT/6VH/f7XXXZcMaNTmsEXSlXqDcOh/AAAAKFCm//tH/T9jq2vuefuDL86/K12p18Kh/wEAAKBAmf4/I+r/r//osnOb5/u9ukK6Uq/Cof8BAACgQJn+PzPq/2+6vHxb35aPtTs7XanP+wBA/Q8AAAAFyvT/gKj/v/26aecL+7U49cp0pd4wHPofAAAACpTp/7Oi/p85t/0hU0e+dd1G6Uq9UTj0PwAAABQo0/9nR/3/Xecfzltrq3ZfXpSu1Od9v/4HAACAAv3//T/vJ/j/5/4/J+r/78+f9PsG189svHa6Um8cDv0PAAAABcq8/z836v8fNm+x1IQ5HQ/YJF2pLxgO/Q8AAAAFyvT/eVH/z1q93SZXrDDg8aHpSn2hcOh/AAAAKFCm/8+P+v/HK7764OAOy/68ZLpSbxIO/Q8AAAAFyvT/wKj/f/pixw1u/fij5g+mK/Wm4dD/AAAAUKBM/18Q9f/PB1w8ee8zT+h4c7pSXzgc+h8AAAAKlOn/QVH/z97+4V8a7H/f8H+xUl8kHPofAAAACpTp/wuj/v/lx94tftih56RV05X6ouHQ/wAAAFCgTP9fFPX/r13u/6vX1aPWOzddqTcLh/4HAACAAmX6/+Ko/3/7+sRlr53d8LDB6Up9sXDofwAAAChQpv8vifr/97m7bj5xjQnnr5Ou1Od1v/4HAACAAmX6/9Ko///ofMHULdvv++rj6Uq9eTj0PwAAABQo0/+XRf3/Z5t+t5//9dB2rdKVeotw6H8AAAAoUKb/L4/6f86wx3fsc+GGpzZOV+pLhEP/AwAAQIEy/T846v+/Bp53ZOt9frpudLpSXzIc+h8AAAAKlOn/K6L+n7tex4GTxizyZbN0pb5UOPQ/AAAAFCjT/1f+Z//X51t8xsf3HvVq4/vTlfrS4dD/AAAAUKBM/18V9f/8t6/VoFOTgw+4JV2ptwyH/gcAAIACZfr/6qj/G4xbYqUlXh/+eMN0pb5MOPQ/AAAAFCjT/9dE/V9r9PpT01/p8POgdKW+bDj0PwAAABQo0//XRv1fnXD82q2bzWm+WrpSXy4c+h8AAAAKlOn/IVH/1198YOKk3nt03DJdqbcKh/4HAACAAmX6/7qo/xt+dMm35981ePj16Up9+XDofwAAAChQpv+HRv3f6PDtFumz//Rbeqcr9Xnfo/8BAACgQJn+Hxb1/wLPDZo288yVO09KV+orhOO/6P/af+cjAwAAAH9Tpv+vj/q/8Rk7NVzu40HNnk1X6iuGw/t/AAAAKFCm/2+I+n/BXietun2HHb8/LF2prxQO/Q8AAAAFyvT/jf/Z///xn+fGrjD50RnpSn3lcOh/AAAAKFCm/2+K3v83GfbxgF/nLNl1u3Slvko49D8AAAAUKNP/w6P+b9qmTY+Frn+0yUHpSr1NOPQ/AAAAFCjT/zdH/b/west2Omirvt/OSVfqq4ZD/wMAAECBMv0/Iur/RQa+f9OdI8++8R/pSn21cOh/AAAAKFCm/2+J+n/RHX798IF+nfpPT1fqq4dD/wMAAECBMv1/a9T/zb7fYot/tPxmjVnpSn2NcOh/AAAAKFCm/0dG/b/YtGr5xZ9v+/Ju6Up9zXDofwAAAChQpv9vO3O+Wrjrix/49JyPPxhz1ofpSn2tcOh/AAAAKFCm/0dF7/+br3HwYqs06t2jf7pSbxsO/Q8AAAAFyvT/7VH/t7hs5PeTD5/avme6Ul87HPofAAAACpTp/zui/l/inGFvnPVYq8kvpyv1duHQ/wAAAFCgTP+Pjvp/yS32Xb/3Xc/d8k26Ul8nHPofAAAACpTp/zuj/l9q2LXvft276rxLulJfNxz6HwAAAAqU6f+7ov5fus2Bmy7V7I5m3dKV+nrh0P8AAABQoH/T/wvMN1/t7qj/W653yDI7vdLr+z/Slfr64dD/AAAAUKDM+/97ov5fZuDNv41/ffajJ6cr9Q3C8V/0f+v/zkcGAAAA/qZM/4+J+n/Zr7tc2qhJ+65vpyv1DcPh/T8AAAAUKNP/90b9v1yXa47+6aghTZ5OV+obhUP/AwAAQIEy/X9f1P+tOt+1001jun57cLpSbx8O/Q8AAAAFyvT//VH/Lz+319177DPixvfTlfrG4dD/AAAAUKBM/z8Q9X/rPwfO2fXC7v37piv1TcKh/wEAAKBAmf5/MOr/FbbdZfnHv564xrHpSn3TcOh/AAAAKFCm/x+K+n/F3fts8WX7pi+/kq7UNwuH/gcAAIACZfr/4aj/V/ryvg+XWeOys7ZKV+odwqH/AQAAoECZ/n8k6v+Vhy26/pTZXXp8lq7UNw+H/gcAAIACZfr/0aj/V2kz+Y22V89t/1O6Ut8iHPofAAAACvSf/d8ofOV/6v+xUf+3We+b70/ZYYvJe6cr9S3Dof8BAACgQJn3/49F/b/qwDUWG9R7zg4fpSv1juHQ/wAAAFCgTP8/HvX/amt8+duid3UYfUa6Up/3mYD6HwAAAAqU6f9xUf+vftnay3z2yuC5R6Qr9U7h0P8AAABQoEz/PxH1/xrnNN/04WZ7tHopXalvHQ79DwAAAAXK9P/4qP/X3OLNd7dp8uo+26Yr9W3Cof8BAACgQJn+fzLq/7XWfva3Wa8v8tC0dKXeORz6HwAAAAqU6f+nov5ve2WDZeYfM/zTH9OV+ryfCdD/AAAAUKBM/z8d9f/aZ2686V5HHVzrkq7U/xEO/Q8AAAAFyvT/M1H/t9v0r3dHXji099fpSn27cOh/AAAAKFCm/5+N+n+dXz+85Yl99r1s+3SlPu9r+h8AAAAKlOn/56L+X7dTy213bv/TswemK/UdwqH/AQAAoECZ/n8+6v/19m59+NJfb7jKn+lKfcdw6H8AAAAoUKb/J0T9v/43n587Y/aoo45LV+o7hUP/AwAAQIEy/f9C1P8bXLvNke3W6Hnxm+lKfedw/O/1/6L/V48MAAAA/E2Z/n8x6v8NVzxr4Ic7THjvuXSlvks4vP8HAACAAmX6/6Wo/zfa6JHbB17dcOPD05X6ruHQ/wAAAFCgTP+/HPV/+4v673jqmR/t0DFdqe8WDv0PAAAABcr0/8So/zde+/GbPtl/2dGfpiv1LuHQ/wAAAFCgTP+/EvX/Jlf267RYh/vm/pyu1HcPh/4HAACAAmX6/9Wo/zc9s2OPbT8+odU+6Up9j3DofwAAAChQpv9fi/p/s03PG/DgnJn7fJCu1PcMh/4HAACAAmX6//Wo/zt0O/GXpiu0e+iUdKW+Vzj0PwAAABQo0/9vRP2/+Wf3t/hrqwGfHpOu1PcOh/4HAACAAmX6/82o/7f45YIN7ri+Y21iulKf95kA+h8AAAAKlOn/SVH/b7nzrpO79Xus90npSr1rOP5O/zf6P3xkAAAA4G/K9P9bUf93XOKgj5qM7HfZW+lKvVs4vP8HAACAAv0X/d8g3G9H/b/VnUO2nPv8W88+k67U9w2H/gcAAIACZd7/T476v9MjI1qNbtlilX+mK/X9wqH/AQAAoECZ/n8n6v+tGxz6Z9dGA4/6Nl2p7x8O/Q8AAAAFyvT/u1H/b3PShMWv/2D7hv9ipX5AOPQ/AAAAFCjT/+9F/d954vw/HPPYF+91TVfqB4ZD/wMAAECBMv3/ftT/27672eubHt5m49/TlfpB4dD/AAAAUKBM/38Q9f8/us9Z78Wru2y+RLpSPzgc+h8AAAAKlOn/D6P+3+7JLd/bY4fLPnwgXanP+50A+h8AAAAKlOn/j6L+377fb5vdtMYWA0ekK/Xu4dD/AAAAUKBM/0+J+n+HY55p+dPsuT3nT1fqPcKh/wEAAKBAmf6fGvX/jm/Vf230dffWF6cr9UPCof8BAACgQJn+/zjq/52G7PV45/YjnmqXrtQPDYf+BwAAgAJl+v+TqP93XumKAx/ap+lVG6cr9cPCof8BAACgQJn+/zTq/13a337GpxdO7HNdulI/PBz6HwAAAAqU6f/Pov7f9eJjr292VPuGrdOV+hHh0P8AAABQoEz/T4v6f7ddd/6k8ZjZX5yVrtR7hkP/AwAAQIEy/T896v8uP19Y+/31rvdfla7UjwyH/gcAAIACZfr/86j/d//k3hXvbjJk9/bpSr1XOPQ/AAAAFCjT/19E/b/Hfic/eUCzapnH0pX6UeHQ/wAAAFCgTP9/GfX/nu3ebnftK8/9vnS6Uj86HPofAAAACpTp/6+i/t/rqsVf6XVXr7sXTlfqx4RD/wMAAECBMv0/I+r/vQes/s2Wve/Y9c50pX5sOPQ/AAAAFCjT/19H/b/PZt8tPPHw3ptfmK7UjwuH/gcAAIACZfr/m6j/uw5pO33vx8Z8uHq6Uu8dDv0PAAAABcr0/7dR/3db6etGt37QauAW6Ur9+HDofwAAAChQpv9nRv2/b/s32vzQaGrPYelK/YRw6H8AAAAoUKb/v4v6f7+Ll3y2QctOrRdNV+p9wqH/AQAAoECZ/v8+6v/9Z067b+zzZz91X7pSPzEc+h8AAAAKlOn/H6L+P2DPFXfbfmTbq25NV+onhUP/AwAAQIEy/T8r6v8DOy7Ve7l+3/RplK7UT/4f/1lN/wMAAECJMv3/Y9T/B/0+5YqZ1y/ZcFy6Uu8bDv0PAAAABcr0/09R/x/82+ZPztpq8hfLpyv1U8Kh/wEAAKBAmf7/Oer/f279x4rzr9D3/gXSlXq/cOh/AAAAKFCm/2dH/d99n6dqe815dPc70pX6qeHQ/wAAAFCgTP//EvV/j28bfTLy45WXaZOu1E8Lh/4HAACAAmX6/9eo/w8ZcuvCPTpM//2cdKV+ejj0PwAAABQo0/+/Rf1/6Eo9vrls/x3vviJdqfcPh/4HAACAAmX6//eo/w9r3+2VZ88ctOu66Ur9jHDofwAAAChQpv//iPr/8ItvbNd+zYnXnJuu1M8Mh/4HAACAAmX6/8+o/49od8Czd/3S9KRV05X6gHDofwAAACjQv+n/2nzzzTcn6v+eVw1tc+A1I1ZcJ12pnxUO/Q8AAAAFyrz//yvq/yMHDG+04I7dnxmcrtTPDof+BwAAgAJl+n9u1P+9Njt8+m97zx3UKl2pz/udgPofAAAACvTv+7+aL+r/o46bVH9m0Ba9Hk9X6vM+E1D/AwAAQIEy/T9/1P9Hv9Tii3VmXLbl6HSlfl449D8AAAAUKNP/DaL+P2ZKu+cP2ajLlMbpSv38cOh/AAAAKFCm/2tR/x97yFcrX/PGHXfen67UB4ZD/wMAAECBMv1fRf1/3MiXu17atNfOzdKV+gXh0P8AAABQoEz/16P+771s07GnHf3c0g3TlfqgcOh/AAAAKFCm/xtG/X/8Au2HrnZv9est6Ur9wnDofwAAAChQpv8bRf1/wn0/nPLBnUPuXS1dqV8UDv0PAAAABcr0/wJR//d5fo+rWx3XdbdB6Ur94nDofwAAAChQpv8bR/1/4mlX9fl20dnV9elK/ZJw6H8AAAAoUKb/F4z6/6Qj7tnr0Yntp2+ZrtQvDYf+BwAAgAJl+n+hqP9PfrPnwzu8/801S6Ur9cvCof8BAACgQJn+bxL1f9/jRu//esO2J41NV+qXh0P/AwAAQIEy/d806v9TXjr6iZUOO3vFu9KV+uBw6H8AAAAoUKb/F476v9+UfW48eWynZxZJV+pXhEP/AwAAQIEy/b9I1P+nHnL56efcNnXQ2elK/cpw6H8AAAAoUKb/F436/7RG3RfqcGqrXiukK/WrwqH/AQAAoECZ/m8W9f/p42756rX/j707Ddt67P9+Tzl+h5RZhkyZhy5TGZJ5nkWkkCnJmITMSshMJMkQGSsSkSFJkiGEMhPSRbgyJUMirO1e99767/far3Xv27XW+m/b/uD1eqCvzvP4bMfTt5/zPFZ+ZIct05XawHDofwAAAChQpv+Xifq/1/A7Jt32co9PB6QrtZvDof8BAACgQJn+Xzbq/97LdtzwhOZXjdg4XakNCof+BwAAgAJl+n+5qP8vmjfyhofn77PfNelK7ZZw6H8AAAAoUKb/m0b932eXE87odPvMlW5LV2q3hkP/AwAAQIEy/b981P8Xd2jXbtEd1/5t63SltuC/Ceh/AAAAKFCm/1eI+v+S7wY88scRY0Y9nq7Ubg+H/gcAAIACZfp/xaj/L71ly6O273POASukK7XB4dD/AAAAUKBM/68U9X/ftWaPe33Ge4v8m5XaHeHQ/wAAAFCgTP83i/r/sq1evf2W7VaYeXe6UrszHPofAAAACpTp/5Wj/r/82ia9Tpp89Gf7/49/u+N/WakNCYf+BwAAgAJl+n+VqP+v2OSNm2YvddfC36YrtbvCof8BAACgQJn+XzXq/ytvWvTshqct2f6PdKW24GcC9D8AAAAUKNP/q0X9f1Wflod0GPHG6EPTldo94dD/AAAAUKBM/68e9f/V2/w8+t5RB/35brpSuzcc+h8AAAAKlOn/5lH/X3PWvbO/7NZ/lbPTldp94dD/AAAAUKBM/68R9f+1kzsv03Txbfc8Ol2p3R8O/Q8AAAAFyvT/mlH/X/dBx1Y7Tf1z+PPpSm1oOPQ/AAAAFCjT/2tF/d+v8x1TH92ymnZOulIbFg79DwAAAAXK9P/aUf9fP+SZhx6Y9XKbj9KV2vBw6H8AAAAoUKb/14n6/4Zm57U99KoTT309Xak9EA79DwAAAAXK9P+6Uf/3X2LHUxc/ZFi/7ulK7cFw6H8AAAAoUKb/14v6/8bRl13z1z5bvPR5ulIbEQ79DwAAAAXK9P/6Uf8PeG7tY7e5+ef1dkpXag+FQ/8DAABAgTL9v0HU/zed988+k+YedsYh6UptZDj0PwAAABQo0/8bRv0/8NQPhtze4rb+P6crtYfDof8BAACgQJn+bxH1/83vrLZz9+12/OztdKX2SDj0PwAAABQo0///iPp/0FkfD/9lRp+Fe6QrtVHh0P8AAABQoEz/bxT1/y2Tm+1T9dmkfdd0pfZoOPQ/AAAAFCjT/xtH/X/rB81PanfE96NfSFdqj4VD/wMAAECBMv2/SdT/t3X+8oq7djzjzz3TldrocOh/AAAAKFCm/zeN+v/2hZv+tdLtj64yK12pPR4O/Q8AAAAFyvT/ZlH/Dx779iqz5q+y55/pSu2JcOh/AAAAKFCm/1tG/X/Hw//a7tnmnww/Kl2pPRkO/Q8AAAAFyvR/q6j/72y6yfT9Xl532sx0pfZUOPQ/AAAAFCjT/5tH/T9k+cnXHLjyV232SFdqY8Kh/wEAAKBAmf7fIur/u0Ysdurd5+916gHpSu3pcOh/AAAAKFCm/7eM+v/upzZt++vQK/rNSVdqY8Oh/wEAAKBAmf7fKur/exr8+lDt6aYv9UpXas+EQ/8DAABAgTL93zrq/3vPOnjn57q+s97H6UptXDj0PwAAABQo0/9bR/1/3+T+Q1pV553xWrpSezYc+h8AAAAKlOn/NlH/3//BsD7HfzS2/4npSm18OPQ/AAAAFCjT/9tE/T+086nHDphxzhL/TFdqz4VD/wMAAECBMv2/bdT/w54bccUS2435Ycd0pTYhHPofAAAACpTp/+2i/h9+3kkn/XnECmM7pCu158Oh/wEAAKBAmf7fPur/B049YJ/hfd477Jd0pTYxHPofAAAACpTp/x2i/n/wnYHDD7t9n2XPTVdqL4RD/wMAAECBMv2/Y9T/I1646Ipvd7xqzrR0pfZiOPQ/AAAAFCjT/ztF/f9Qr91PWr352vdPTldqL4VD/wMAAECBMv2/c9T/I0+6YJ995s/c49R0pfZyOP73/d/w/5e3DAAAAPyH/h/7v8H/+Mciu0T9//CUp4c/tfJqW7yTrtQmhcPzfwAAAChQ5vn/rlH/P7LMoHeHvDz9nbPSldor4dD/AAAAUKBM/+8W9f+oYUduddDQHhcdk67UXg2H/gcAAIACZfp/96j/H32my/L18x85ZmK6UnstHPofAAAACpTp/z2i/n+suvvnn7tutH7bdKW24DMB9D8AAAAUKNP/e0b9P/r0hVbe7OlvX/kuXam9Hg79DwAAAAXK9P9eUf8/Pumlec9/tPPg39OV2hvh0P8AAABQoEz/7x31/xMfz/9gYHXJBR3Tldqb4dD/AAAAUKBM/+8T9f+TXdu0OW6pjkv0TldqU8Kh/wEAAKBAmf7fN+r/p174berfk2/54ZN0pTY1HPofAAAACpTp//2i/h/Ta/tWTUZsNfbVdKX2Vjj0PwAAABQo0//7R/3/9EmLLNPxtF8POyFdqb0dDv0PAAAABcr0f9uo/8dOeX72g91OXvaLdKX2Tjj0PwAAABQo0/8HRP3/zGObXbbsqAfm7J6u1N4Nh/4HAACAAmX6/8Co/8c1mtvls6mL3H9gulJ7Lxz6HwAAAAqU6f92Uf8/u+rru41e/MU9fkpXau+HQ/8DAABAgTL9f1DU/+OHNh66x6ztt9grXal9EA79DwAAAAXK9P/BUf8/N3/lEcts+fc736QrtQ/Dof8BAACgQJn+bx/1/4TdP9l/xiEHXjQ/Xal9FA79DwAAAAXK9P8hUf8/3+6r7o9fdf0xR6YrtWnh0P8AAABQoEz/d4j6f+LXa1y7+82Lr/9WulL7OBz6HwAAAAqU6f+OUf+/cPslnS/ZZ/Irp6UrtU/Cof8BAACgQJn+PzTq/xfX3e2i01p0Hnx8ulL7NBz6HwAAAAqU6f/Dov5/qWXvu9aee88FLy600C2//q8rtenh0P8AAABQoEz/Hx71/8tXjNnl/eqdczdIV2qfhUP/AwAAQIEy/d8p6v9JG54/bL+Pmg66Ol2pzQiH/gcAAIACZfr/iKj/X7l+3N7PPj128u3pSu2f4dD/AAAAUKBM/x8Z9f+rl15+8qyu5220fbpS+zwc+h8AAAAKlOn/o6L+f237na5c6fyvujyartS+CIf+BwAAgAJl+v/oqP8nn7H064cPXbfvUulKbWY49D8AAAAUKNP/x0T9//or728y7OUrptbTldqX4dD/AAAAUKBM/3eO+v+NT75bYv7Ke216X7pS+yoc+h8AAAAKlOn/Y6P+f/P4Ft8uOf/RnVdPV2pfh0P/AwAAQIEy/d8l6v8p9zW6foXmZ9wzLl2p/Ssc+h8AAAAKlOn/46L+n7r6m6d/seMncx9IV2qzwqH/AQAAoECZ/u8a9f9bjX856JHbV1l+0XSl9k049D8AAAAUKNP/x0f9//aoVqN26dPnqEvTldq34dD/AAAAUKBM/58Q9f87L95w5GVH7PjsuulK7btw6H8AAAAoUKb/T4z6/93eHZ7pud33szZLV2rfh0P/AwAAQIEy/X9S1P/vndxt8BozNml8Y7pS+yEc+h8AAAAKlOn/k6P+f3/qg73fmvvzuaPTldrscOh/AAAAKFCm/0+J+v+DM04csGeLLQYtn67UfgyH/gcAAIACZfq/W9T/H77y8Flj97lt8sLpSm1OOPQ/AAAAFCjT/6dG/f/RJzd1+OHmwza6J12p/RQO/Q8AAAAFyvR/96j/px1/0OOrXPVyl03SldrP4dD/AAAAUKBM/58W9f/HiwyZeO8hVd9r05XaL+HQ/wAAAFCgTP/3iPr/k2e7rtFhy2FTb01Xar+GQ/8DAABAgTL9f3rU/58+0GmhhrNO3LR1ulKbGw79DwAAAAXK9P8ZUf9PX+rWf85evP/OF6crtd/Cof8BAACgQJn+PzPq/8+WPXfUt1MPuqd5ulKbFw79DwAAAAXK9H/PqP9nDB9/0Oqj/py7VbpS+z0c+h8AAAAKlOn/s6L+/+e4vqfv023b5W9KV2p/hEP/AwAAQIEy/X921P+f13e5/qnT7jpqpXSlNj8c+h8AAAAKlOn/c6L+/+KMGb0vHHH0s2PTldqf4dD/AAAAUKBM/58b9f/MV9YbfN3kN2aNSFdqf4VD/wMAAECBMv1/XtT/X36y6jMfLbVk4yXSldrf4dD/AAAAUKBM/58f9f9Xx087coPe4z49KV2pFhz6HwAAAAqU6f8Lov7/+sWVHn/sngt2mJSuVOF79D8AAACUKNP/F0b9/6/e0zvsOPGtk6enK1WDcOh/AAAAKFCm/3tF/T/r5JlnLbf6slddmK5UDcOh/wEAAKBAmf7vHfX/N1PXGvBVg+sm/piuVIuEQ/8DAABAgTL9f1HU/9+eP6bXmE/brnlQulLVwqH/AQAAoECZ/u8T9f93E3rfvvezM87aNV2pFnwAgP4HAACAAmX6/+Ko/79/d7dxq3VufvOX6UpVD4f+BwAAgAJl+v+SqP9/6H7JUd/1nTazU7pSLXi9/gcAAIACZfr/0qj/Zz9011q/HNpskb/SlapROPQ/AAAAFCjT/32j/v9xheMnVFuPPuBf6Uq1WDj0PwAAABQo0/+XRf0/p+ERn7Wb2XPUPulK1Tgc+h8AAAAKlOn/y6P+/2nMbQ3u+u3r315OV6om4Vh2oYWq/+Z3DAAAAPynMv1/RdT/P7++9Xdd1t5gpePSlWrxcHj+DwAAAAXK9P+VUf//cvbfS9686+X7nZ6uVEuEQ/8DAABAgTL9f1XU/78e++LGEwftPmJKulItGQ79DwAAAAXK9P/VUf/P/bDh5E2vG/zp3HSlWioc+h8AAAAKlOn/a6L+/+38Ces90K7TDu3TlWrpcOh/AAAAKFCm/6+N+n/ehPqLh7acc/LO6Uq1TDj0PwAAABQo0//XRf3/+7vbfbH4962u+ixdqRZ0v/4HAACAAmX6v1/U/390/6P666eRE09JV6rlwqH/AQAAoECZ/r8+6v/5TRY9bfdNuq/5RrpSNQ2H/gcAAIACZfr/hqj//3zijf6Pt51w1ofpSrV8OPQ/AAAAFCjT//2j/v/r7p8fm3HjQjefn65UK4RD/wMAAECBMv1/Y9T/f6/Y8sBlzvxj5oR0pVoxHPofAAAACpTp/wH/1f/VQmceMOj8YW0WOTZdqVYKh/4HAACAAmX6/6ao/xd+Y+B5V0wacMCZ6UrVLBz6HwAAAAqU6f+BUf83+GjE4R8v137Ue+lKtXI49D8AAAAUKNP/N0f93/Dok8Zs0mjSb4elK9Uq4dD/AAAAUKBM/w+K+n+R5SYdMuvdRiv9lq5Uq4ZD/wMAAECBMv1/S9T/tZFLjF7p8aH7/ZCuVKuFQ/8DAABAgTL9f2vU/9XTm9+034ldR+yXrlSrh0P/AwAAQIEy/X9b1P/1heac/eygpYffla5UC16j/wEAAKBAmf6/Per/Re/e9Pa1d52yZ8N0pVojHPofAAAACpTp/8FR/zda8dde76/da5Xl0pVqzXDofwAAAChQpv/viPp/sSaTj7rkt/F/PpGuVGuFQ/8DAABAgTL9f2fU/42fWGzcaTPXHN0mXanWDof+BwAAgAJl+n9I1P9N/jhsXsutP28/KF2p1gmH/gcAAIACZfr/rqj/F9/p9pUnHLrfwv3SlWrdcOh/AAAAKFCm/++O+n+J9ve3uanvNZ9tlK5U64VD/wMAAECBMv1/T9T/S/5w9AddO5/d/+Z0pVo/HPofAAAACpTp/3uj/l9qo53v7fXsE2dska5UG4RD/wMAAECBMv1/X9T/S9986e7XfrriemumK9WG4dD/AAAAUKBM/98f9f8ylzx7/IcNPnzponSlahEO/Q8AAAAFyvT/0Kj/l936nL4brr5rvybpSvWPcOh/AAAAKFCm/4dF/b/cfh+d9MPEvqeOTFeqBZ8JoP8BAACgQJn+Hx71f9O5q1yxyj0t2oxJV6qNw6H/AQAAoECZ/n8g6v/lP193+J69Z01bOV2pNgmH/gcAAIACZfr/waj/Vzj0s33GnrjZ8G3TlWrTcOh/AAAAKFCm/0dE/b/iH2sOWePx2Xveka5Um4VD/wMAAECBMv3/UNT/K+30xc5vvXvkKlemK1XLcOh/AAAAKFCm/0dG/d+s/afHXtbozj9bpCtVq3DofwAAAChQpv8fjvp/5R9W7NNzuQajh6Yr1ebh0P8AAABQoEz/PxL1/yrXfDP39UkT29fSlWqLcOh/AAAAKFCm/0dF/b/qlhs13X5Yt4WXSVeqLcOh/wEAAKBAmf5/NOr/1dZcYfOTzhzx2SPpSrVVOPQ/AAAAFCjT/49F/b/6oKnv3XJjh/6LpStV63DofwAAAChQpv9HR/3f/LaWffu2HXjGsHSl2joc+h8AAAAKlOn/x6P+X2ONn48/a5PW641PV6o24dD/AAAAUKBM/z8R9f+aW7yx+5o/zXtp1XSl2iYc+h8AAAAKlOn/J6P+X6vfovdO/b5LvxvSlWrbcOh/AAAAKFCm/5+K+n/tPx7YZ7mW953aKl2ptguH/gcAAIACZfp/TNT/6+x0yvCv2jVus3a6Um0fDv0PAAAABcr0/9NR/6/b/pArHrvu1WmXpSvVDuHQ/wAAAFCgTP+Pjfp/vR+uP2nHxxvtsXi6Uu0YDv0PAAAABcr0/zNR/6+/X7s+H5046f6H05Vqp3DofwAAAChQpv/HRf2/wdwBx27QqOucp9KVaudw6H8AAAAoUKb/n436f8PPR+584btDl22WrlS7hEP/AwAAQIEy/T8+6v8Wh54w5LpJbQ4bmK5Uu4ZD/wMAAECBMv3/XNT//9irV5/Wy/0xdvN0pdotHPofAAAACpTp/wlR/2/001PHvnZm+x/WSleq3cOh/wEAAKBAmf5/Pur/jb+6eOc7hw1Yok+6Uu0RDv0PAAAABcr0/8So/zc5Ytchp7TtfsE26Uq1Zzj0PwAAABQo0/8vRP2/6Z1dPz7zxpGDb0lXqr3Cof8BAACgQJn+fzHq/83WGbL95T8t9Mp16Uq1dzj0PwAAABQo0/8vRf3fcrNbV397kwnr/yNdqfYJh/4HAACAAmX6/+Wo/1td3enP5i07HTMkXan2DYf+BwAAgAJl+n9S1P+b//3XMjO/H3xRg3Sl2i8c+h8AAAAKlOn/V6L+32K31rOXv67VO03TlWr/cOh/AAAAKFCm/1+N+n/LAxtM3bndnC2eTFeqtuHQ/wAAAFCgTP+/FvX/Vt+80GrUrhvscX26Uh0QDv0PAAAABcr0/+So/1vvVX3QYtDX97dMV6oDw6H/AQAAoECZ/n896v+tf3quzQe/7T5nnXSlahcO/Q8AAAAFyvT/G1H/t/nq95WvWfvyZS9PV6qDwqH/AQAAoECZ/n8z6v9tjth2Xu+tmx3WOF2pDg6H/gcAAIACZfp/StT/227/Zr+XZ04bOzxdqdqHQ/8DAABAgTL9PzXq/+0ubdRt8749f3g2XakOCYf+BwAAgAJl+v+tqP+3v77VvkcfOnqJVdKVqkM49D8AAAAUKNP/b0f9v8OGv4y88dm2F9yfrlQdw6H/AQAAoECZ/n8n6v8de8y876XO1w1eJF2pDg2H/gcAAIACZfr/3aj/d3ptrT22aND8lX/T+NVh4dD/AAAAUKBM/78X9f/O01fqesynM9Yfla5Uh4dD/wMAAECBMv3/ftT/uxw3/dL+Ey84Zrt0peoUDv0PAAAABcr0/wdR/++69IUnd1h93EV3pivVEeHQ/wAAAFCgTP9/GPX/bg+OvfLe3su+c0W6Uh0ZDv0PAAAABcr0/0dR/+8+vs+w2fe8tcWG6Up1VDj0PwAAABQo0//Tov7fo7bH3g3b3bfpS+lKdXQ49D8AAAAUKNP/H0f9v+fQvnfdcl2XqV3SleqYcOh/AAAAKFCm/z+J+n+vVXfZ5aTvX+17RrpSdQ6H/gcAAIACZfr/06j/9250buftWzbuMjVdqY4Nh/4HAACAAmX6f3rU//s8Nv6i1zcZuNER6Uq14GcC9D8AAAAUKNP/n0X9v+9fP7zQ76cOk/9OV6rjwqH/AQAAoECZ/p8R9f9+u26w7gU3zhv0dbpSdQ2H/gcAAIACZfr/n1H/73/AsvX127Y+d+90pTo+HPofAAAACpTp/8+j/m87692Z04ZNbDw7XalOCIf+BwAAgAJl+v+LqP8PWH/uLRPPbDCrXbpSnRgO/Q8AAAAFyvT/zKj/D+y/2fmbLjfi2d3SleqkcOh/AAAAKFCm/7+M+r/dZY0P6zKp21FfpSvVyeHQ/wAAAFCgTP9/FfX/Qdu+/tTN785e/uR0pTolHPofAAAACpTp/6+j/j94z+4d2jXabO4r6UrVLRz6HwAAAAqU6f9/Rf3ffs7wx+868c57Pk1XqlPDof8BAACgQJn+nxX1/yFf3jjgl8eP3PmCdKXqHg79DwAAAAXK9P83Uf936NT+rOqevpsenq5Up4VD/wMAAECBMv3/bdT/Hf+6efDtvXedOi9dqXqEQ/8DAABAgTL9/13U/4fuemDv7qvP6vt9ulKdHg79DwAAAAXK9P/3Uf8fdsDJR24zsUWXfdOV6oxw6H8AAAAoUKb/f4j6//BZDz0z6dMnNnouXanODIf+BwAAgAJl+n921P+drjzy1dManD25c7pS9QyH/gcAAIACZfr/x6j/j2g1aP1LOn84qGe6Up0VDv0PAAAABcr0/5yo/49c7+5G7z+74rnvpyvV2eHQ/wAAAFCgTP//FPX/UYO7fLP2oZ837pauVOeEQ/8DAABAgTL9/3PU/0ffcflTrfuuOevNdKU6Nxz6HwAAAAqU6f9fov4/Zu2dDntt5jXPfpCuVOeFQ/8DAABAgTL9/2vU/503Pf/8O7fe76jz0pXq/HDofwAAAChQpv/nRv1/7FXjbjll7SnL/5quVBeEQ/8DAABAgTL9/1vU/13+Wv2s4b8tPffgdKW6MBz6HwAAAAqU6f95Uf8ft+uHAw4bNP6eXdKVqlc49D8AAAAUKNP/v0f93/WAzx9fYtdeO89IV6re4dD/AAAAUKCk/6v4q4v8EfX/8bPW6fDnD61vbZ+uVBeFQ/8DAABAgTLP/+dH/X/Cnl89c3yreefPTVeqPuHQ/wAAAFCgTP//GfX/iXPWOHLAQR02+SxdqS4Oh/4HAACAAmX6/6+o/0/6cuXez/Ub+MbO6Up1STj0PwAAABQo0/9/R/1/cqdPBrfq3/jyN9KV6tJw6H8AAAAo0P++/2sLRf1/ykpNJ1yz/6tdT0lXqr7h0P8AAABQoEz/Lxz1f7d73l6r98ZdWp6frlSXhUP/AwAAQIEy/d8g6v9Tn/xXgxZz7nv7w3Sluvx//nmZ/gcAAIACZfq/YdT/3Rff5LMPmh5517HpSnVFOPQ/AAAAFCjT/4tE/X/am4vf/twrd+44IV2prgyH/gcAAIACZfq/FvV/j56v9Wo1fLPl3ktXqqvCof8BAACgQJn+r6L+P/2YH486vufsX85MV6qrw5Hv/+r/81sGAAAA/kOZ/q9H/X/GtK3GDTih2zO/pSvVNeHw/B8AAAAKlOn/RaP+P/Phm9odOHrEEYelK9W14dD/AAAAUKBM/zeK+r9n04MeufudBo32S1eq68Kh/wEAAKBAmf5fLOr/sxY+8YZfF5349Q/pStUvHPofAAAACpTp/8ZR/5899uEzaquteOukdKW6Phz6HwAAAAqU6f8mUf+fs1K3QXc+/+H5J6Ur1Q3h0P8AAABQoEz/Lx71/7n3PHjeKXefvcmF6UrVPxz6HwAAAAqU6f8lov4/78kbDm/d64k3pqcr1Y3h0P8AAABQoEz/Lxn1//mLdxjz2rEtLj8oXakGhEP/AwAAQIEy/b9U1P8XnHrvm2eMn9X1x3Sluikc+h8AAAAKlOn/paP+v/CdzhtdNH3Xll+mK9XAcOh/AAAAKFCm/5eJ+r/Xcx2bvNOw79u7pivVzeHQ/wAAAFCgTP8vG/V/7/Pu+H69L3rd9Ve6Ug0Kh/4HAACAAmX6f7mo/y+6/oT2n7Uev2OndKW6JRz6HwAAAAqU6f+mUf/32XDkk8t2XHq5fdKV6tZw6H8AAAAoUKb/l4/6/+LtBwzc49Ipv/wrXaluC4f+BwAAgAJl+n+FqP8vubTdmaNv2e+Z49KV6vZw6H8AAAAoUKb/V4z6/9LZs2/rsds1R7ycrlSDw6H/AQAAoECZ/l8p6v++e2957sXrrNloSrpS3REO/Q8AAAAFyvR/s6j/LzuyScf35n3+9enpSnVnOPQ/AAAAFCjT/ytH/X/5F68+vc6iA767I12phoRD/wMAAECBMv2/StT/V+y+6IHj32nfZNt0pborHPofAAAACpTp/1Wj/r9y/huP7Tv6j44t0pXq7nDofwAAAChQpv9Xi/r/qq9/7r/iCW3GXJmuVPeEQ/8DAABAgTL9v3rU/1e3a3naNz2Hzq6lK9W94dD/AAAAUKBM/zeP+v+a1TtvPnx416WHpivVfeHQ/wAAAFCgTP+vEfX/tffd+95hr0za7ZF0pbo/HPofAAAACpTp/zWj/r9u1B1zl2ja6N5l0pVqwf8T8H/v/4UX+W94zwAAAMB/JtP/a0X9369xx6Z/zpnz3rB0pVrwd57/AwAAQIEy/b921P/Xv3LeiTM3brXVYulKNTwc+h8AAAAKlOn/daL+v+GMZ65efv/Bx66arlQPhEP/AwAAQIEy/b9u1P/9j7/sgZ37d7p4fLpSPRgO/Q8AAAAFyvT/elH/3/jJjnuO6jfhtVbpSjUiHPofAAAACpTp//Wj/h8w/J9DzzxooQ1vSFeqh8Kh/wEAAKBAmf7fIOr/m5Zde7fLW43sdVm6Uo0Mh/4HAACAAmX6f8Oo/wfWV+vy9g/d71w7XakeDof+BwAAgAJl+r9F1P83j/vgsubzRn/XMF2pHgmH/gcAAIACZfr/H1H/D1q9Wben1+nZ5K50pRoVDv0PAAAABcr0/0ZR/99y38f99tptWscn0pXq0XDofwAAAChQpv83jvr/1lFfjlz1lmZjlktXqsfCof8BAACgQJn+3yTq/9saN9/3+0svnz0oXalGh0P/AwAAQIEy/b9p1P+3n/B2m0M67r50m3Slejwc+h8AAAAKlOn/zaL+H/xW0w/ua/31bhulK9WC3wmg/wEAAKBAmf5vGfX/HS9tMu/HLza4t1+6Uj0ZDv0PAAAABcr0f6uo/++84F8rN2j41ntbpCvVU+HQ/wAAAFCgTP9vHvX/kN6L7bna9GW3ujldqcaEQ/8DAABAgTL9v0XU/3e9OPmB78aPO/aidKV6Ohz/V/83/O97ywAAAMB/KNP/W0b9f/fUX68ec+wFF6+ZrlRjw+H5PwAAABQo0/9bRf1/z8mbnrh3rxmvjUxXqmfCof8BAACgQJn+bx31/72r97+s393NN2ySrlTjwqH/AQAAoECZ/t866v/77ju4ywXPX9dr5XSlejYc+h8AAAAKlOn/NlH/3z/q1N3WX63tnWPSlWp8OPQ/AAAAFCjT/9tE/T+08bCh09a5pmHLdKV6Lhz6HwAAAAqU6f9to/4fNvykfRf+9yvVhHDofwAAAChQpv+3i/p/+LIjRj56y+dPXJ6uVM+HQ/8DAABAgTL9v33U/w/UB/b7crc1O6yTrlQTw6H/AQAAoECZ/t8h6v8Hxx3QrWnH8asNT1eqF8Kh/wEAAKBAmf7fMer/EQ/tvu89l/b6u3G6Ur0YDv0PAAAABcr0/05R/z+0wkUjD/hiyoOrpCvVS+HQ/wAAAFCgTP/vHPX/yIZP91uk9dJ7P5uuVC+HQ/8DAABAgTL9v0vU/w+PuaDb3OmzWi+SrlSTwqH/AQAAoECZ/t816v9Hzj9y6R8atvjw/nSleiUc+h8AAAAKlOn/3aL+HzVh0E+rHNv32lHpSvVqOPQ/AAAAFCjT/7tH/f/ou3e/tef4XU/5N41fvRYO/Q8AAAAFyvT/HlH/P9a9y6Zj7/5wnTvTlWpyOPQ/AAAAFCjT/3tG/T965Zem9+q14gvbpSvV6+HQ/wAAAFCgTP/vFfX/43cttN21qz1x/YbpSvVGOPQ/AAAAFCjT/3tH/f/E421W+fD5s3tcka5Ub4ZD/wMAAECBMv2/T9T/Ty45/68N3xnR8OF0pZoSDv0PAAAABcr0/75R/z/10PZNH1m02z8XT1eqqeHQ/wAAAFCgTP/vF/X/mBV+m7vLCROfaBa+OP/vv/8OZ/VWOPQ/AAAAFCjT//tH/f90w+ffW2F0gw5PpSvV2+HQ/wAAAFCgTP+3jfp/7JhFNv9i+J2rbZ6uVO+EQ/8DAABAgTL9f0DU/898NHfnTj2P/HtgulK9Gw79DwAAAAXK9P+BUf+PO3qzIQ83nf1gn3Sleu///KNx9d/+fgEAAID/XKb/20X9/+yZjfv88cpme6+VrlTvh8PzfwAAAChQpv8Pivp//BuvH7voxq+2viVdqT4Ih/4HAACAAmX6/+Co/5+76ZMTjpjT+MNt0pXqw3DofwAAAChQpv/bR/0/YZOVrxrZ/75r/5GuVB+FQ/8DAABAgTL9f0jU/89vs8aDv+/f5ZTr0pVqWjj0PwAAABQo0/8dov6f2OervRodNG+dBulK9XE49D8AAAAUKNP/HaP+f+GX3e6f3K/1C0PSleqTcOh/AAAAKFCm/w+N+v/FtpfsusMPA69/Ml2pPg2H/gcAAIACZfr/sKj/Xzp8zHEnt+rQo2m6Uk0Ph/4HAACAAmX6//Co/1+e0fvyQc83P3NeulJ9Fg79DwAAAAXK9H+nqP8n7TLulAarzbjp8HSlmhGO/7T/q/8XbxkAAAD4D2X6/4io/1+Zd/51P/ZqO2HfdKX6Zzg8/wcAAIACZfr/yKj/X/1up4fvu/u65t+nK9Xn4dD/AAAAUKBM/x8V9f9rHS7f75Dxy57YOV2pvgiH/gcAAIACZfr/6Kj/Jzd7v9Fyx751xXPpSjUzHPofAAAACpTp/2Oi/n99yNLffNXwgo/fT1eqL8Oh/wEAAKBAmf7vHPX/G6NbvPrY9HHb9UxXqq/Cof8BAACgQJn+Pzbq/zeX+G79HVvv3vbNdKX6Ohz6HwAAAAqU6f8uUf9PmfzmwR2/uHxkt3Sl+lc49D8AAAAUKNP/x0X9P/WsRk88eOkGv5+XrlSzwqH/AQAAoECZ/u8a9f9bnVvd/HfHr1f+IF2pvgmH/gcAAIACZfr/+Kj/3/7gl55NduvZ7uB0pfo2HPofAAAACpTp/xOi/n9nRIdbX7ll9GO/pivVd+HQ/wAAAFCgTP+fGPX/u8vfcE6bec2+mpGuVN+HQ/8DAABAgTL9f1LU/+81ePDQU9eZVu2SrlQ/hEP/AwAAQIEy/X9y1P/vP9Vt7OBWC53ZJV2pZodD/wMAAECBMv1/StT/HzR7+ID6DxNueildqX4Mh/4HAACAAmX6v1vU/x8OOfHRn/t1nzA1XanmhEP/AwAAQIEy/X9q1P8fjT7oxiEHjWx+RrpS/RQO/Q8AAAAFyvR/96j/py1xU4+D9m914t/pSvVzOPQ/AAAAFCjT/6dF/f9xt671b/rPueKIdKX6JRz6HwAAAAqU6f8eUf9/8v6QmSvO6fTx3ulK9Ws49D8AAAAUKNP/p0f9/+nEW1/Yd+PB232drlRzw6H/AQAAoECZ/j8j6v/p53Zad/wrXdu2S1eq38Kh/wEAAKBAmf4/M+r/z84b3/OepkNHzk5Xqnnh0P8AAABQoEz/94z6f8Zz5958QM9Gv3+VrlS/h0P/AwAAQIEy/X9W1P//fGeXJxYZPmnl3dKV6o9w6H8AAAAoUKb/z476//NT+x48d3T7dq+kK9X8cOh/AAAAKNC/7f/lFty1c6L+/6LZemNbnjDgsZPTlerPcOh/AAAAKFDm+f+5Uf/PHDLj0AmLtvnqgnSl+isc+h8AAAAKlOn/86L+/3L0tHNueueP6tN0pfo7HPofAAAACpTp//Oj/v9qiVVv7brt0h99lK7UFxz6HwAAAAqU6f8Lov7/esT0HvM/m7LNOelKPXyP/gcAAIASZfr/wqj//7X8SjcueVGv7t3TlXqDcOh/AAAAKFCm/3tF/T+rwVqPHt5p/HWvpyv1huHQ/wAAAFCgTP/3jvr/m6dmHjBspzVf3ildqS8SDv0PAAAABcr0/0VR/3+7TO+nfx38+bqfpyv1Wjj0PwAAABQo0/99ov7/btiYjrU/9zv953SlXoVD/wMAAECBMv1/cdT/3z9zybkHrnHNjYekK/UFHwCo/wEAAKBAmf6/JOr/H6rdbrv7pbNnfJuu1Be8Xv8DAABAgTL9f2nU/7NfOP6rp5s9sdD+6Uq9UTj0PwAAABQo0/99o/7/sdddtb3OW/HgQ9OV+mLh0P8AAABQoEz/Xxb1/5yTblt71fs/fPyPdKXeOBz6HwAAAAqU6f/Lo/7/acoRL30/dtf5Z6cr9Sbh0P8AAABQoEz/XxH1/8/3/r1Bi+P7rvpuulJfPBz6HwAAAAqU6f8ro/7/ZbWtX/ug3mKv59OV+hLh0P8AAABQoEz/XxX1/6+LNZx1zbRZw45OV+pLhkP/AwAAQIEy/X911P9zH3lx0d6vb/bRHulKfalw6H8AAAAoUKb/r4n6/7dl6p/PXHr2NjPTlfrS4dD/AAAAUKBM/18b9f+8YRMWXr7Hkd3npCv1ZcKh/wEAAKBAmf6/Lur/35/5o/nOD9153QHpSn1B9+t/AAAAKFCm//tF/f9Htd3zox5p8PLH6Up9uXDofwAAAChQpv+vj/p//nFvjG50ysR1e6Ur9abh0P8AAABQoEz/3xD1/5/TFz3k9ybdTj8xXakvHw79DwAAAAXK9H//qP//eq3l2SOnjLjxtXSlvkI49D8AAAAUKNP/N0b9/3ePn286YqsOM3qkK/UVw6H/AQAAoECZ/h/wX/1fX+iAI//c4ZuBC72drtRXCof+BwAAgAJl+v+mqP8XnjVo9clXtz74hXSl3iwc+h8AAAAKlOn/gVH/N/jr7u0HdZj3eNd0pb5yOPQ/AAAAFCjT/zdH/d9w1y4fn7x3l/mz0pX6KuHQ/wAAAFCgTP8Pivp/kU1fajVy4H2r7pmu1FcNh/4HAACAAmX6/5ao/2tXLTT1iF8b73VUulJfLRz6HwAAAAqU6f9bo/6v7mgzu9GGrw77M12prx4O/Q8AAAAFyvT/bVH/19eev8zv08Y9tHS6Ul/wGv0PAAAABcr0/+1R/y962fbzjq5fsO9j6Up9jXDofwAAAChQpv8HR/3faNvfVr7x+LdWvDddqa8ZDv0PAAAABcr0/x1R/y+2/vNtXh677LwqXamvFQ79DwAAAAXK9P+dUf837r/IB5vff90jV6Ur9bXDof8BAACgQJn+HxL1f5PpB99+1nltD1w/XamvEw79DwAAAAXK9P9dUf8vflz/Xn2bzajtkK7U1w2H/gcAAIACZfr/7qj/l+gx7KipLzX/YnC6Ul8vHPofAAAACpTp/3ui/l/ytVPHrbnGtIHrpSv1BT8ToP8BAACgQJn+vzfq/6Ua7TuhzZ/Nzu6brtQ3CIf+BwAAgAJl+v++qP+XfuyqtV4ZPHqt/ulKfcNw6H8AAAAoUKb/74/6f5mhjzQYvFPP5zdNV+otwqH/AQAAoECZ/h8a9f+yq5712amdvr76mXSl/o9w6H8AAAAoUKb/h0X9v9yJ7yz54EUbnLRaulLfKBz6HwAAAAqU6f/hUf83fXuZ7zp+dvn2jdKV+sbh0P8AAABQoEz/PxD1//Ivrz+5yba7T38wXalvEg79DwAAAAXK9P+DUf+vcOH3G/+94eCHrklX6gt+J6D+BwAAgAJl+n9E1P8rTv/Hi8f92mnfjdOV+mbh0P8AAABQoEz/PxT1/0rHzVpv4MA5K26drtRbhkP/AwAAQIEy/T8y6v9mPaZUz+/dat5t6Uq9VTj0PwAAABQo0/8PR/2/8mvLf7FZh5GPrJCu1DcPh/4HAACAAmX6/5Go/1cZNrP/lVd3P/DxdKW+RTj0PwAAABQo0/+jov5fdZm1Tjvvmwm1u9OV+pbh0P8AAABQoEz/Pxr1/2rVSgduvNVCX/yblfpW4dD/AAAAUKBM/z8W9f/qz0x/7JMpfwx8Ol2ptw6H/gcAAIACZfp/dNT/zcdv+9mEJm3OXjFdqS/4TED9DwAAAAXK9P/jUf+vUfu9QctTBqy1ZLpSbxMO/Q8AAAAFyvT/E1H/r7n0c2t1faT98w+lK/VtwqH/AQAAoECZ/n8y6v+1Hqwm3PTQpKvXSFfq24ZD/wMAAECBMv3/VNT/a0+/d+MDejQ66ZJ0pb5dOPQ/AAAAFCjT/2Oi/l/nuM6T71l66PYD0pX69uHQ/wAAAFCgTP8/HfX/uj06fjf39a7Tt0xX6juEQ/8DAABAgTL9Pzbq//Veu2PJRX69b5dx6Up9x3DofwAAAChQpv+fifp//RM7fXHHhl3uXj1dqe8UDv0PAAAABcr0/7io/zd4+9aq296v/rpoulLfORz6HwAAAAqU6f9no/7f8OUh6209sPEKD6Qr9V3Cof8BAACgQJn+Hx/1f4sLu7746tUDj1w3XanvGg79DwAAAAXK9P9zUf//o9tpX1zQocP4S9OV+m7h0P8AAABQoEz/T4j6f6P3n6j6bTXvmxvTlfru4dD/AAAAUKBM/z8f9f/GE69Zb9o3rRfbLF2p7xGO/9n/5/+3vmUAAADgP5Tp/4lR/29y7t4vrt9k4jlXpyv1PcPh+T8AAAAUKNP/L0T9v+nYE8ZsOqXBLRukK/W9wqH/AQAAoECZ/n8x6v/NFh55+MRHRry+fbpS3zsc+h8AAAAKlOn/l6L+b9l0wHk3n9LtH7enK/V9wqH/AQAAoECZ/n856v9WD7cb1KXH7OOWSlfq+4ZD/wMAAECBMv0/Ker/zafNPvuuhza79NF0pb5fOPQ/AAAAFCjT/69E/b/FMVve1O71O6fcl67U9w+H/gcAAIACZfr/1aj/t+zZZHS19JGb1dOVettw6H8AAAAoUKb/X4v6f6s3Xz3kl3rfXZqnK/UDwqH/AQAAoECZ/p8c9X/rbouO6z5t17svTlfqB4ZD/wMAAECBMv3/etT/W7//xlG3j531603pSr1dOPQ/AAAAFCjT/29E/d9m4s+9Jh3fYoWt0pX6QeHQ/wAAAFCgTP+/GfX/Nue2vH2b8544cmy6Uj84HPofAAAACpTp/ylR/2/bbMKsS+4/e/xK6Uq9fTj0PwAAABQo0/9To/7fbkh90dNe+vCbJdKV+iHh0P8AAABQoEz/vxX1//ajt9tg7WYrLjYiXal3CIf+BwAAgAJl+v/tqP93WOKP197/8/Nzlk9X6h3Dof8BAACgQJn+fyfq/x3bf/PcxWusecvodKV+aDj0PwAAABQo0//vRv2/0w8brdljp2tevyddqR8WDv0PAAAABcr0/3tR/+/8xwoN1xm83z8WTlfqh4dD/wMAAECBMv3/ftT/u+w0dcZ7F0057tp0pd4pHPofAAAACpTp/w+i/t91izOWWLbT0pdukq7UjwiH/gcAAIACZfr/w6j/d+v3+LefbTt+Sut0pX5kOPQ/AAAAFCjT/x9F/b/7bf1eH/1Zr81uTVfqR4VD/wMAAECBMv0/Ler/PdbYa5M9lm60+VnpSv3ocOh/AAAAKFCm/z+O+n/PS65+4ZPXJ737TrpSPyYc+h8AAAAKlOn/T6L+32vr/dbd+KGufSamK/XO4dD/AAAAUKBM/38a9f/eG51dP6/H0KOPSVfqx4ZD/wMAAECBMv0/Per/fW4eNfPKU9ps8F26Uu8SDv0PAAAABcr0/2dR/+/70Yy7Xnvkj0lt05X6ceHQ/wAAAFCgTP/PiPp/v6PX26X1lPa3d0xX6l3Dof8BAACgQJn+/2fU//ufuWrnU5oMuPD3BS/9r++rHx8O/Q8AAAAFyvT/51H/t31j2kV3ftN9yR3TlfoJ4dD/AAAAUKBM/38R9f8BTebNv3yrkd//M12pnxgO/Q8AAAAFyvT/zKj/D3xih9XO7LDQ07+kK/WTwqH/AQAAoECZ/v8y6v92d9d2aH71hMM7pCv1k8Oh/wEAAKBAmf7/Kur/g1ac+MnbAzstMy1dqZ8SDv0PAAAABcr0/9dR/x98yjEtl9978E/npiv1buHQ/wAAAFCgTP//K+r/9u8NnTJzw1ZDT01X6gv+Tv8DAABAgTL9Pyvq/0OeH/zjqF/n7D45Xal3D4f+BwAAgAJl+v+bqP87nHP4sjt/tsHm36Qr9dPCof8BAACgQJn+/zbq/44f3fLbB9t+/e5e6Uq9Rzj0PwAAABQo0//fRf2/UIOjmrXotHufI9OV+unh0P8AAABQoEz/fx/1/2FnHrdN74suP3p+ulI/Ixz6HwAAAAqU6f8fov4//I17PrxmcLMNTktX6meGQ/8DAABAgTL9Pzvq/04PHfDw5jtNm/RWulLvGQ79DwAAAAXK9P+PUf8fscLA/V5eo+ftL6Yr9bPCof8BAACgQJn+nxP1/5ENR5xy45+jLzw+XamfHQ79DwAAAAXK9P9PUf8fNeak645u1nbJT9KV+jnh0P8AAABQoEz//xz1/9FPX/nJBS9d933vdKV+bjj0PwAAABQo0/+/RP1/zEJtd+h3f/OnT0hX6ueFQ/8DAABAgTL9/2vU/52X67natPNmHP5qulI/Pxz6HwAAAAqU6f+5Uf8fO/Kx+esff8Eyu6cr9QvCof8BAACgQJn+/y3q/y4fLb3sd2PH/fRFulK/MBz6HwAAAAqU6f95Uf8fd/T7P642bdmhP6Ur9V7h0P8AAABQoEz//x71f9czv5uyd/2t3Q9MV+oLPhNA/wMAAECBMv3/R9T/x7/RouWYEQPumJmu1C8Kh/4HAACAAmX6f37U/yec8q8P1zqtfe890pV6n3DofwAAAChQpv//jPr/xPc22WbKUn+0OCBdqV8cDv0PAAAABcr0/19R/5/0fNNml05u8+qcdKV+STj0PwAAABQo0/9/R/1/8jlv/3b21KGX9EpX6peGQ/8DAABAgf73/V8tFPX/Ka3ffHOfxbt2/jhdqfcNh/4HAACAAmX6f+Go/7td3Gijp7pN2vK1dKV+WTj0PwAAABQo0/8Nov4/dWCrJt+OavT+ielK/fJw6H8AAAAoUKb/G0b93/0fv3y/+iFz7ns7XalfEQ79DwAAAAXK9P8iUf+f9v37/etXtdq1R7pSvzIc+h8AAAAKlOn/WtT/PQ5e+rSfZw1eqmu6Ur8qHPofAAAACpTp/yrq/9N3bHHgkC07/fhCulK/Ohz6HwAAAAqU6f961P9n/P7dYwe1mPDUnulK/Zpw6H8AAAAoUKb/F436/8zr2nYaOHehQ2elK/Vrw6H/AQAAoECZ/m8U9X/Pza989ribRy7+Z7pSvy4c+h8AAAAKlOn/xf6r/xdeqPljd262T/dvj0pX6v3Cof8BAACgQJn+bxw9/z/71p4XPn/E6DvOSVfq14dD/wMAAECBMv3fJOr/c1o/ObBjn569P0pX6jeEQ/8DAABAgTL9v3jU/+de3OPMB2dMa/F6ulLvHw79DwAAAAXK9P8SUf+fN3Cf9n9v1+zV7ulK/cZw6H8AAAAoUKb/l4z6//x/XPtkk+aXX/J5ulIfEA79DwAAAAXK9P9SUf9f0LbXhNHzd++8U7pSvykc+h/+D/buO8qq+nr48IUo504I2I0RE4rGHkTJD7uCIWrEaJrYwQpqBCuioiIKVmwJdogYxRZjL6igKBJrVLBjxYrYYxfUd6kbPMOBHI2YnPV9n+efvWe4s5lxJeKHO1wAAAAqqKT/F8r1/6HvjV56o+FTO3UvXslOi0X/AwAAQAWV9P/Cuf4/bMoRTRfpvMKj7xavZKfHov8BAACggkr6f5Fc/w/ctuuzz144adRmxSvZGbHofwAAAKigkv5fNNf/h1951bbLDVik62vFK9mZseh/AAAAqKCS/l8s1/+Dmu9/w0Otxi44vXglOysW/Q8AAAAVVNL/i+f6/4jWm51x+B2HvL118Up2diz6HwAAACqopP9/mOv/I0cdc/B+k6eMfrh4JRsei/4HAACACirp/yVy/T944oqnXteszdb9i1eyEbHofwAAAKigkv7/Ua7/h/zxtf6/7HViix2KV7K/xKL/AQAAoIJK+n/JXP8fNfCR7gvduPlrtxWvZOfEov8BAACggkr6v1Wu/4+esOA1z3Vb45X2xSvZyFj0PwAAAFRQSf8vlev/Y3pP6nng6R/VhxavZOfGov8BAACggkr6/8e5/j/2qUXHHv/BltudXbyS/TUW/Q8AAAAVVNL/P8n1/3F3tR/+zEqnjV2zeCU7Lxb9DwAAABVU0v+tc/1//H5TD1u5U/N3ry1eyc6PRf8DAABABZX0f5tc/w9db/RafafdvdgPi1eyUbHofwAAAKigf9//nw2sfdX/Jww+7LERx+3SZQ5Xsgti0f8AAABQQSXP/7fLPf9/4sldP7qr+6iRfy1eyS6MRf8DAABABZX0/9K5/j9pxSNarXVlj0lLFK9kF8Wi/wEAAKCCSvp/mVz/nzx1ZO92fc7peGPxSnZxLPofAAAAKqik/3+a6/9TftdryMQWq/b+e/FKdkks+h8AAAAqqKT/l831/5823O78IRPfOmqB4pXsb7HofwAAAKigkv5fLtf/f55x1oYH3Nvn/iOLV7JLY9H/AAAAUEEl/b98rv+HHbPGxVcveGn7tsUr2cw/E6D/AQAAoIJK+n+FXP+futqn3Trv3fTgTsUr2WWx6H8AAACooJL+XzHX/6cte/sei146/uxhxSvZ5bHofwAAAKigkv5fKdf/pw9veszLNy7xytXFK9kVseh/AAAAqKCS/l851/9nrDdu50N7PV5fqHgluzIW/Q8AAAAVVNL/P8v1/5mDmw06sVn/7ZoVr2RXxaL/AQAAoIJK+r99rv/POnmdkZMnXzf2/OKVbOafCdD/AAAAUEEl/b9Krv/PXvHjDVa4Y6V3ly9eya6JRf8DAABABZX0f4dc/w//VcPPT2k1bbHjileya2PR/wAAAFBBJf2/aq7/R7xz/yM7DejaZUTxSnZdLPofAAAAKqik/1fL9f9fXn7vg04XDhm5fvFKdn0s+h8AAAAqqKT/O+b6/5ztOy42ofNhk4YUr2SjY9H/AAAAUEEl/f/zXP+P7PHAho8Pv6XjcsUr2Q2x6H8AAACooJL+/79c/5/7wuLnrzhjod4dileyG2PR/wAAAFBBJf3fKdf/f31r5SGHtXngqD8Vr2Q3xaL/AQAAoIJK+n/1XP+ft8m03ies++v7f1K8ko2JRf8DAABABZX0/xq5/j9/vY2P2XjK0PZjileysbHofwAAAKigkv5fM9f/owafuMdNg9od/LfilezmWPQ/AAAAVFBJ/6+V6/8LTr6m25vbP392Q/FKdkss+h8AAAAqqKT/1871/4Ur7nvxUr3aZEcUr2TjYtH/AAAAUEEl/b9Orv8vOuaKDY66ccpLbYpXsltj0f8AAABQQSX9v26u/y9e7YCR/SZvftXqxSvZbbHofwAAAKigkv5fL9f/lyy76aC2zU78/anFK9n4WPQ/AAAAVFBJ/6+f6//v1Wq1Sa0WWfJHxSvZ7bHofwAAAKigkv7vnOv/S4cO32CXOyZNv6l4JZsQi/4HAACACirp/y65/v97p21Gnn7hIZdfWryS/SMW/Q8AAAAVVNL/G+T6/7J2OwwaP2DsZi2LV7I7YtH/AAAAUEGN+//w2fv/F7n+v/yMC3buMHzDda4pXsnujEX/AwAAQAWVPP/fNdf/V2wzuPXynY9+avHileyuWPQ/AAAAVFBJ//8y1/9XPrvBJ0+0WeHYJsUr2d2x6H8AAACooJL+3zDX/1e9e+CTJ82Yutt5xSvZPbGU9P+S8+JTBgAAAL6hkv7fKNf/V29283qHTOnXdpXilezeWDz/DwAAABVU0v8b5/r/mrWWmnjDuteMO6F4JftnLPofAAAAKqik/3+V6/9rD5/ccZPtlxx2VvFKdl8s+h8AAAAqqKT/N8n1/3XDnl34J4Oe6LdG8Up2fyz6HwAAACqo2P+1fP93y/X/9e2Xfev102tZ6+KV7IFY9D8AAABUUMnz/5vm+n/00Bda9e9260tji1eyibHofwAAAKigkv7/da7/b+jU7qPBK+111SXFK9mkWPQ/AAAAVFBJ/2+W6/8b2y3x2AMfXPb7evFK9mAs+h8AAAAqqKT/N8/1/01nPL3W0tM6Ljm4eCV7KBb9DwAAABVU0v+/yfX/mOk/2/TsTv+avmzxSvZwLPofAAAAKqik/3+b6/+xXV69bLfu212+avFK9kgs+h8AAAAqqKT/f5fr/5u3mHjSOseN2OzPxSvZo7HofwAAAKigkv7/fa7/b3nzh33u79NrnRWKV7LHYtH/AAAAUEEl/f+HXP+PuybrddaVFz51fPFK9ngs+h8AAAAqqKT/t8j1/60tbx28+8SGY4cXr2STY9H/AAAAUEEl/d+k1mRW/9+25PRR67a4c7f1ileyJ2LR/wAAAFBBJf2/Ze75//Ej193ovgW3aHtV8Ur2ZCz6HwAAACqopP+3yvX/7Q+dc1Hze4eNW7B4JXsqFv0PAAAAFVTS/1vn+n9C3603+fDStYZlxSvZ07HofwAAAKigkv7fJtf//zh45z9euvf0fqOKV7JnYtH/AAAAUEFz7P/5Z+7Nts31/x3jRh3bc9DQvX9VvJI9G4v+BwAAgAoqef5/u1z/37lT750mbP/rU14tXsmmxKL/AQAAoIJK+n/7XP/f9di5h3da9/kJM4pXsudi0f8AAABQQSX93yPX/3ffe/a5O01pt0yP4pXs+Vj0PwAAAFRQSf/3zPX/PQds/4tTZtzSZ1LxSvZCLPofAAAAKqik/3fI9f+9a7fIHmxz2NC9i1eyF2PR/wAAAFBBJf2/Y67//znonhfbdH7gsd7FK9lLseh/AAAAqKCS/t8p1//3nfr27fsPX2jNCcUr2cux6H8AAACooJL+3znX//evsvqyRw+Y1m1g8Uo2NRb9DwAAABVU0v+75Pr/gdcX2+acC1e65KnileyVWPQ/AAAAVFBJ/++a6/+JWz44es87hnx6d/FKNi2WufZ/03n3KQMAAADfUEn/98r1/6RfvHLmGq26tt6teCV7NRbP/wMAAEAFlfR/71z/P/jRKgPuafZ49xeKV7LXYtH/AAAAUEEl/b9brv8fOuGEYS0nL3H9hsUr2eux6H8AAACooJL+3z3X/w+v3u2AT2687vnfFq9kb8Si/wEAAKCCSvp/j1z/P7L0Plte3Kt/03eKV7I3Y9H/AAAAUEEl/f/HXP8/eub1126z96V7P1S8kr0Vi/4HAACACirp/z1z/f/Y2v16jLu0zykHFK9kb8ei/wEAAKCCSvq/T67/Hx909ZiO946fsGPxSvavWPQ/AAAAVFBJ//fN9f/kU48d0XvBpsuML17JZr4mgP4HAACACirp/71y/f/EKpsPHNbinD6bF69k78ai/wEAAKCCSvp/71z/P7npmIaVJ/YY+nrxSvZeLPofAAAAKqik//fJ9f9T7x/86jNXvvXYx8Ur2fux6H8AAACooJL+3zfX/08/1/nu4/usuuZWxSvZB7HofwAAAKigkv7fL9f/z2x11PIHHnd3t+eKV7IPY9H/AAAAUEEl/b9/rv+f3XbXAbt0b35J5+KV7KNY9D8AAABUUEn/98v1/5Qp5515eqdRn25ZvJLNfE0A/Q8AAAAVVNL/B+T6/7n3zhw9ftourd8rXsmmx6L/AQAAoIJK+r9/rv+f37znNh0++Kj7QcUr2YxY9D8AAABUUEn/H5jr/xfW/uTa91Za4/onileyT2LR/wAAAFBBJf1/UK7/Xxy09pbNup32/L3FK9mnseh/AAAAqKCS/j841/8vndrkgN+dvmXTvsUr2Wex6H8AAACooJL+H5Dr/5dXuWPYuS82GbB18cqsD9f/AAAAUEEl/X9Irv+nnjD/wLXXHHfW9OKVejxG/wMAAEAVlfT/obn+f2X18SPu3Lrvfa8Vr9SbxqL/AQAAoIJK+v+wXP9PW/qjMcOHXL7KZsUr9e/Fov8BAACggkr6f2Cu/189c/0ee52xWq/bilfq88Wi/wEAAKCCSvr/8Fz/v9Zx1DWrdn3n6B2KV+rzx6L/AQAAoIJK+n9Qrv9fP3bn7rcts/2D/YtX6s1i0f8AAABQQSX9f0Su/98YsXX/0z4cvtrDxSv1LBb9DwAAABVU0v9H5vr/zeXOOXXX1r0771W8Up/58fofAAAAKqik/wfn+v+tF8e+cuj4C879Z/FKvSEW/Q8AAAAVVNL/Q3L9/3bPAc1PPK/+3uTilfr3Y9H/AAAAUEEl/X9Urv//1a3LipMH3rXogcUr9eax6H8AAACooJL+PzrX/++8ffSdK+z0h+3fLV6p/yAW/Q8AAAAVVNL/x+T6/90hP13utZtPHdO9eKXeIhb9DwAAABVU0v/H5vr/vfWfn9D66bWndileqbeMRf8DAABABZX0/3G5/n9/pcdf6Nb044bni1fqC8Si/wEAAKCCSvr/+Fz/f3BK62ajF2074PbilfqCseh/AAAAqKCS/h+a6/8POz71ers7nz2rV/FKfaFY9D8AAABUUEn/n5Dr/4+ObbXAxIs2u2+f4pX6wrHofwAAAKigkv4/Mdf/H49o237I/iet8mDxSn1m9+t/AAAAqKCS/j8p1//Tl3v53gN2X7hXz+KV+qKx6H8AAACooK/6f/14T6P+PznX/zO6Lnrjfdc+ePQnxSv1xWLR/wAAAFBBJc//n5Lr/08+nbTVug8f+uC04pX64rHofwAAAKigkv7/U67/P5029aDdG8astnHxSv2Hseh/AAAAqKCS/v9zrv8/+037s896Y6PO/ypeqS8Ri/4HAACACor+ny/3npNzP9z0y1H/Ua3W5fXc++PxC8zs/i9+j2DnQ95+d07zK5/fyc8vfoomtdp8V8z2adW/3Vc1V7O+npYPPbdBrUOtSf4r/1z7uTz+tPriS9U61JoWHt/4A74Xj1+yx4wfH1nrUGs2++P32L3vLrseOOvN+NF6q437vrFarUOtPvvj9951355999pl13gz/rk0tO2620Kv1DrU5pv9n9Tuffv1yb3ZEKPdkm8uc+IXn89sj99v/x3377XfrDe/H49f+sqDRvSb0+P3bfz5N4/HL7PnUgu83uLO2vyzP36ffnvtv2MNAACA/7WS/p/Vs7Val3G590cXf+P+X7LxrM2t/7/37b6quZr19XxH/R/fK1FbZEb/X77acnStPnsP77FXv3377rhnh3nwtQAAAMDXVtL/s56fnkf936rxrM2t/+f/dl/VXM36er6j/o/Pu77UlE+OfqC2Rq35nJ6f77nvjn1779rotwCaxcf9uPmYFw+qrVFrOefn6XvuvFvjD83i435y6Pu/PaflxrUWc3z+vfBhAAAA/P+mpP9n9WytNujw/IfFXDD/9tfo/6Uaz1r0PwAAAPBdKun/Wc9Lz6X/v+nz/z9uPGv6HwAAAP4LSvp/1veXz7H/F5z15tfs/4Y2X92bqWnjm9+petuY7WIuHXOZmD+NuWzM5WIuH3OFmCvGXCnmyjF/FjP+VEB9lZjxrff1VWOuFrNjzJ/H/L+YnWKuHnONmGvGXCvm2jHXibluzPVirh+zc8wuMTeI+YuYXWP+MuaGMTeKGX/nY/1XMTeJ2S3mpjF/HXOzmJvH/E3M38b8Xczfx/xDzC1ido+5ZcytYm4dc5uY28bcLub2MXvE7Blzh5jxUoT1nWLuHHOXmPE6i/VeMXvH3C3m7jH3iPnHmHvGjNderPeNuVfMvWPuE3PfmPHKi/X9Y/aLeUDM/jHjFRfrB8U8OOaAmIfEPDTmYTEHxoz/79YHxTwi5pExB8ccEvOomEfHPCbmsTGPi3l8zKExT4h5YsyTYsa/U+qnxPxTzD/HHBbz1JinxTw95hkxz4x5VsyzYw6POSLmX2KeE3NkzHNj/jXmeTHPjzkq5gUxL4x5UcyLY14S828x499d9b/HvCzm5THjzzfVr4x5VcyrY14T89qY18W8PubomDfEvDHmTTHHxBwb8+aYt8SMP7tVvzXmbTHHx7w95oSY/4h5R8w7Y94V8+6Y98S8N+Y/Y94X8/6YD8ScGHNSzAdjPhTz4ZiPxHw05mMxH485OeYTMZ+M+VTMp2M+E/PZmFNiPhfz+ZgvxHwx5ksxX445NeYrMafFfDXmazHjNXLrb8R8M+ZbMd+OGX+HTv2dmPHrZP29mO/H/CDmhzE/ivlxzOkxZ8T8JOanMT/7csbLwNYa4n+nDfGLbkO8Hk5D/PrfEN/v1xC/798Qv/43zHzd2ZmvJzvzdWJnvv7rD2K2iNky5gIx478UGhaKuXDM+PuCGhaNuVjMxWPG3yvcEM8zNMTrBjfE6wc1xJ8jbIjvJ2yI5xUa4r8vGlrHzP2dRgAAAAAAkL54/r9p7l13frU2e3TOr8VXb1urZU/Wak0+GDviqg2/zc+/xbf02Xf1NwUAAABAQqL/W371nvkP/F9+PgAAAMC8p/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0lfa/83/+58TAAAAMG95/h8AAADSV9b/Wy3wP/ikAAAAgHnK8/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOmL/p8v956Tcz9c/3I0tK3VBh2e/7DGP/7l2zsf8va7c5pf+fxOfn6u6cxbtWbPzIuv6N9q8Z3/DAAAAFBBJf3fEKPdXPp/ifzbX6P/2zWetUb9/91bYOqXs9mj8Y4f/Pd+bgAAAPjf+ff93+T7X86GpefS/+Pyb3+N/l+68axF/8+36bz7iv6thXOf++cWqdXqP6jVmn5v3pyvt2l8v962VsuerNWafDBv7gMAAMB/puT5/+ZfjoZl5tL/V+Tf/hr9v0zjWYv+n//JuX1+vf6TL+rra7L1fPU/9BhYq+2wZesv5tQXsy/mLEesfcMlTa6d9fsTMx/37GKtGz/uv3MXAAAA/iMl/R/fH9/w01qty+u59zf9cizwTb///6eN58yPne+K2T6tpt/qi5q7WV9Py4ee26DWodYk/5V/rv2cH3/krM9r9se3/44+UwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/sQMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOCABAAAAEPT/dTsCBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYK4AAAD//4nP5XU=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x2000, 0x12) getdents64(r0, 0x0, 0x0) fstat(r0, 0x0) 1.674914243s ago: executing program 5 (id=803): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x3) 1.586039053s ago: executing program 0 (id=796): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@err_cont}, {@journal_async_commit}, {@localflocks}, {@intr}, {@dir_resv_level}]}, 0x9, 0x442b, &(0x7f0000004480)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x6e45, 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x4020940d, &(0x7f0000000440)={0x4}) 1.571620463s ago: executing program 2 (id=797): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000780), 0xfd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48062, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 1.443101383s ago: executing program 3 (id=798): unshare(0x2040400) r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) shutdown(r0, 0x2) 1.118527155s ago: executing program 3 (id=799): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000980)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x0, 0x20000}, 0x20) 688.480137ms ago: executing program 2 (id=800): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 584.102947ms ago: executing program 5 (id=801): unshare(0x20040600) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@local]}]}}}, @ip_tos_u8={{0x11}}], 0x30}, 0x0) 444.881938ms ago: executing program 3 (id=802): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 444.229628ms ago: executing program 5 (id=804): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0xb5994000) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000002c0)=0xfffffffc, 0x26) 338.033779ms ago: executing program 2 (id=805): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) 306.843999ms ago: executing program 5 (id=806): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000180), 0x4) 131.09265ms ago: executing program 2 (id=807): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000540)={0x384fd, 0x0, &(0x7f0000ff9000/0x4000)=nil}) 130.93504ms ago: executing program 5 (id=808): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fb0019b40320d812010079de01ec020109021b0001000003000904000001785e4c00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000400)=""/188, 0xbc}], 0x2, 0xf22c, 0x0) syz_usb_disconnect(r0) 0s ago: executing program 3 (id=809): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000e40)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc43, &(0x7f0000001180)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x804020, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) kernel console output (not intermixed with test programs): x trans len 256, max batch 225, max commit age 30, max trans age 30 [ 66.504181][ T4166] hfs: node 4:3 still has 1 user(s)! [ 66.514461][ T4423] REISERFS (device loop0): checking transaction log (loop0) [ 66.541748][ T4423] REISERFS (device loop0): Using r5 hash to sort names [ 66.550914][ T4423] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 66.759965][ T4414] XFS (loop1): Ending clean mount [ 66.863901][ T4414] XFS (loop1): User initiated shutdown received. [ 66.873329][ T4414] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 66.894967][ T4414] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 66.909169][ T4414] XFS (loop1): Error -5 reserving per-AG metadata reserve pool. [ 66.945969][ T4174] XFS (loop1): Unmounting Filesystem [ 67.724228][ T4212] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.840584][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 67.995428][ T4446] loop1: detected capacity change from 0 to 32768 [ 68.100769][ T4212] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.162111][ T4212] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 68.222345][ T4212] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 68.241162][ T4212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.281053][ T4448] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 68.390700][ T21] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 68.410803][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.418873][ T21] usb 4-1: Product: syz [ 68.424094][ T21] usb 4-1: Manufacturer: syz [ 68.428708][ T21] usb 4-1: SerialNumber: syz [ 68.445188][ T21] usb 4-1: config 0 descriptor?? [ 68.482201][ T21] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 003 [ 68.556647][ T4452] loop2: detected capacity change from 0 to 40427 [ 68.629698][ T4446] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 68.723641][ T4452] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.849860][ T4174] ocfs2: Unmounting device (7,1) on (node local) [ 68.905915][ T21] (null): failure reading functionality [ 68.958492][ T4452] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.997623][ T21] i2c i2c-1: connected i2c-tiny-usb device [ 69.026670][ T26] audit: type=1804 audit(1731933416.321:3): pid=4452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.73" name="/newroot/12/file0/file0" dev="loop2" ino=10 res=1 errno=0 [ 69.127651][ T4454] loop0: detected capacity change from 0 to 32768 [ 69.134426][ T4165] attempt to access beyond end of device [ 69.134426][ T4165] loop2: rw=2049, want=45104, limit=40427 [ 69.206040][ T4215] usb 4-1: USB disconnect, device number 3 [ 69.257334][ T4213] usb 5-1: USB disconnect, device number 2 [ 69.520053][ T4469] loop1: detected capacity change from 0 to 512 [ 69.563283][ T4469] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 69.637056][ T4469] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.82: corrupted in-inode xattr [ 69.695655][ T4469] EXT4-fs (loop1): Remounting filesystem read-only [ 69.733356][ T4469] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.82: couldn't read orphan inode 15 (err -117) [ 69.832914][ T4469] EXT4-fs (loop1): Remounting filesystem read-only [ 69.842476][ T4469] EXT4-fs (loop1): mounted filesystem without journal. Opts: prjquota,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,noauto_da_alloc,nombcache,noquota,grpquota,norecovery,. Quota mode: writeback. [ 69.873399][ T4475] loop2: detected capacity change from 0 to 1024 [ 70.550085][ T4454] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 70.573315][ T4454] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 70.577166][ T4487] loop1: detected capacity change from 0 to 4096 [ 70.676791][ T4487] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 70.734958][ T4454] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 70.764844][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 70.775870][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 70.788527][ T4479] loop4: detected capacity change from 0 to 32768 [ 70.876390][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 100ms [ 70.924038][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [ 70.930360][ T4454] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 70.973907][ T4479] XFS (loop4): Mounting V5 Filesystem [ 70.991299][ T4454] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 71.098265][ T4479] XFS (loop4): Ending clean mount [ 71.109347][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.116032][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.244610][ T4479] XFS (loop4): User initiated shutdown received. [ 71.259289][ T4479] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 71.273262][ T4479] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 71.283902][ T4479] XFS (loop4): Error -5 reserving per-AG metadata reserve pool. [ 71.336201][ T4167] XFS (loop4): Unmounting Filesystem [ 71.931668][ T4512] loop2: detected capacity change from 0 to 1024 [ 72.005010][ T4512] EXT4-fs (loop2): Ignoring removed orlov option [ 72.020138][ T4512] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 72.040544][ T4212] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.138304][ T4512] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 72.398793][ T4509] loop4: detected capacity change from 0 to 32768 [ 72.415774][ T4212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.448539][ T4212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.466321][ T4212] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.475931][ T4212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.493230][ T4212] usb 1-1: config 0 descriptor?? [ 72.672442][ T4533] loop1: detected capacity change from 0 to 512 [ 72.757882][ T4533] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 72.817546][ T4533] EXT4-fs (loop1): invalid journal inode [ 72.824184][ T4533] EXT4-fs (loop1): can't get journal size [ 72.880618][ T4212] usbhid 1-1:0.0: can't add hid device: -71 [ 72.889140][ T4212] usbhid: probe of 1-1:0.0 failed with error -71 [ 72.890989][ T4533] EXT4-fs (loop1): 1 truncate cleaned up [ 72.914618][ T4509] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 72.923654][ T4212] usb 1-1: USB disconnect, device number 3 [ 72.930195][ T4533] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 73.054229][ T4533] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 570425344 > max in inode 18 [ 73.122449][ T4167] ocfs2: Unmounting device (7,4) on (node local) [ 73.512194][ T4556] loop3: detected capacity change from 0 to 1024 [ 73.558525][ T4554] loop0: detected capacity change from 0 to 4096 [ 73.595203][ T4556] EXT4-fs (loop3): Ignoring removed orlov option [ 73.617914][ T4556] EXT4-fs (loop3): Ignoring removed nobh option [ 73.760137][ T4556] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,orlov,barrier=0x0000000000000004,nobh,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 73.996337][ T4554] ntfs: volume version 3.1. [ 74.148547][ T4553] loop2: detected capacity change from 0 to 32768 [ 74.438942][ T4553] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.112 (4553) [ 74.570302][ T4574] netlink: 56 bytes leftover after parsing attributes in process `syz.1.120'. [ 74.579015][ T4553] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 74.635042][ T4553] BTRFS info (device loop2): disabling tree log [ 74.670189][ T4553] BTRFS info (device loop2): metadata ratio 65537 [ 74.708105][ T4553] BTRFS info (device loop2): metadata ratio 64 [ 74.728921][ T4553] BTRFS info (device loop2): using free space tree [ 74.740511][ T4581] capability: warning: `syz.4.122' uses 32-bit capabilities (legacy support in use) [ 74.752061][ T4553] BTRFS info (device loop2): has skinny extents [ 74.872076][ T4586] sg_write: process 65 (syz.1.124) changed security contexts after opening file descriptor, this is not allowed. [ 74.899538][ T4586] program syz.1.124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.236474][ T4553] BTRFS info (device loop2): enabling ssd optimizations [ 75.818287][ T4578] loop3: detected capacity change from 0 to 32768 [ 75.956410][ T4623] loop1: detected capacity change from 0 to 128 [ 76.003001][ T4578] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 76.117177][ T4627] Zero length message leads to an empty skb [ 76.194209][ T4166] ocfs2: Unmounting device (7,3) on (node local) [ 76.222285][ T1345] cfg80211: failed to load regulatory.db [ 76.222739][ T4623] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 76.281923][ T4629] loop2: detected capacity change from 0 to 8192 [ 76.295651][ T4623] sysv_free_block: trying to free block not in datazone [ 76.361637][ T4629] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 76.386937][ T4629] REISERFS (device loop2): using ordered data mode [ 76.394624][ T4629] reiserfs: using flush barriers [ 76.401553][ T4174] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 76.404402][ T4629] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.431902][ T4629] REISERFS (device loop2): checking transaction log (loop2) [ 76.642644][ T4639] loop1: detected capacity change from 0 to 4096 [ 76.703922][ T4629] REISERFS (device loop2): Using tea hash to sort names [ 76.712440][ T4629] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 76.728324][ T4629] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 76.748003][ T4639] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 77.338956][ T4647] : renamed from pim6reg1 [ 77.676031][ T4651] loop2: detected capacity change from 0 to 4096 [ 77.830536][ T4651] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.890895][ T4651] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #15: comm syz.2.146: corrupted inode contents [ 77.915338][ T4651] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #15: comm syz.2.146: mark_inode_dirty error [ 77.968995][ T4645] loop1: detected capacity change from 0 to 40427 [ 78.004916][ T4651] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #15: comm syz.2.146: corrupted inode contents [ 78.027095][ T4645] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 78.053100][ T4645] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 78.053457][ T4651] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.146: mark_inode_dirty error [ 78.075558][ T4645] F2FS-fs (loop1): invalid crc value [ 78.094869][ T4645] F2FS-fs (loop1): Found nat_bits in checkpoint [ 78.132967][ T4651] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #15: comm syz.2.146: corrupted inode contents [ 78.187029][ T4651] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.146: mark_inode_dirty error [ 78.250064][ T4651] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #15: comm syz.2.146: corrupted inode contents [ 78.288049][ T4645] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 78.306476][ T4645] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 78.327574][ T4651] EXT4-fs error (device loop2): ext4_truncate:4272: inode #15: comm syz.2.146: mark_inode_dirty error [ 78.397590][ T4651] EXT4-fs error (device loop2) in ext4_setattr:5578: Corrupt filesystem [ 78.904483][ T4673] loop1: detected capacity change from 0 to 128 [ 78.967182][ T4673] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 79.002207][ T4673] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.031063][ T4673] capability: warning: `syz.1.150' uses deprecated v2 capabilities in a way that may be insecure [ 79.481694][ T4692] loop0: detected capacity change from 0 to 256 [ 79.572334][ T4651] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #15: comm syz.2.146: corrupted inode contents [ 79.714410][ T4165] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 79.912813][ T4678] loop3: detected capacity change from 0 to 32768 [ 79.916715][ T4698] loop2: detected capacity change from 0 to 256 [ 79.978517][ T4678] XFS (loop3): Mounting V5 Filesystem [ 80.438857][ T4678] XFS (loop3): Ending clean mount [ 80.478269][ T4678] XFS (loop3): Quotacheck needed: Please wait. [ 80.512869][ T4719] loop2: detected capacity change from 0 to 1764 [ 80.616725][ T4678] XFS (loop3): Quotacheck: Done. [ 80.779571][ T4166] XFS (loop3): Unmounting Filesystem [ 80.890968][ T4731] tipc: Started in network mode [ 80.923462][ T4731] tipc: Node identity type_len, cluster identity 4711 [ 80.930295][ T4731] tipc: Enabling of bearer rejected, failed to enable media [ 81.010302][ T4692] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 81.027450][ T4692] FAT-fs (loop0): Filesystem has been set read-only [ 81.145375][ T4736] loop1: detected capacity change from 0 to 164 [ 81.225854][ T4738] netlink: 'syz.3.177': attribute type 3 has an invalid length. [ 81.302808][ T4725] loop4: detected capacity change from 0 to 32768 [ 81.352921][ T4725] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.173 (4725) [ 81.426721][ T4725] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 81.454545][ T4725] BTRFS info (device loop4): metadata ratio 2 [ 81.475588][ T4725] BTRFS info (device loop4): force zlib compression, level 3 [ 81.488429][ T4725] BTRFS info (device loop4): use zlib compression, level 3 [ 81.496703][ T4725] BTRFS info (device loop4): enabling auto defrag [ 81.503641][ T4725] BTRFS info (device loop4): max_inline at 0 [ 81.530505][ T4725] BTRFS info (device loop4): using free space tree [ 81.543626][ T4725] BTRFS info (device loop4): has skinny extents [ 81.689299][ T4754] loop3: detected capacity change from 0 to 4096 [ 81.709778][ T4768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.186'. [ 81.770074][ T4725] BTRFS info (device loop4): enabling ssd optimizations [ 81.913340][ T4166] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 81.927487][ T4166] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 82.397507][ T4800] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.406786][ T4800] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.415560][ T4800] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.424397][ T4800] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.597504][ T4736] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 82.811743][ T4214] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 83.190802][ T4214] usb 4-1: config 0 has no interfaces? [ 83.350758][ T4214] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.364584][ T4214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.428204][ T4214] usb 4-1: Product: syz [ 83.448475][ T4214] usb 4-1: Manufacturer: syz [ 83.470496][ T4214] usb 4-1: SerialNumber: syz [ 83.496369][ T4214] usb 4-1: config 0 descriptor?? [ 83.772132][ T4221] usb 4-1: USB disconnect, device number 4 [ 84.592611][ T4830] loop3: detected capacity change from 0 to 512 [ 84.618475][ T1226] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.781490][ T4837] loop2: detected capacity change from 0 to 2048 [ 84.963277][ T4838] chnl_net:caif_netlink_parms(): no params data found [ 85.078654][ T4838] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.086188][ T4838] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.095069][ T4838] device bridge_slave_0 entered promiscuous mode [ 85.104181][ T4838] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.112524][ T4838] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.121672][ T4838] device bridge_slave_1 entered promiscuous mode [ 85.158095][ T4838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.185658][ T4838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.232062][ T4850] loop0: detected capacity change from 0 to 4096 [ 85.254440][ T4838] team0: Port device team_slave_0 added [ 85.263364][ T4838] team0: Port device team_slave_1 added [ 85.321765][ T4838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.345506][ T4838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.382325][ T4838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.398642][ T4851] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.409916][ T4838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.459699][ T4838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.498423][ T26] audit: type=1800 audit(1731933432.791:4): pid=4850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.220" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 85.537645][ T4850] syz.0.220 (4850) used greatest stack depth: 18832 bytes left [ 85.545681][ T4838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.660810][ T4838] device hsr_slave_0 entered promiscuous mode [ 85.681489][ T4838] device hsr_slave_1 entered promiscuous mode [ 85.702135][ T4838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.720634][ T4838] Cannot create hsr debugfs directory [ 85.898494][ T4830] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 85.936099][ T1226] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.959523][ T4837] EXT4-fs (loop2): Ignoring removed nobh option [ 85.962445][ T4830] EXT4-fs (loop3): invalid journal inode [ 85.974822][ T4830] EXT4-fs (loop3): can't get journal size [ 86.028353][ T4830] EXT4-fs (loop3): 1 truncate cleaned up [ 86.039638][ T4830] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 86.090119][ T4837] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nobh,barrier=0x0000000000000003,abort,,errors=continue. Quota mode: writeback. [ 86.119365][ T4830] process 'syz.3.212' launched './file0/file0' with NULL argv: empty string added [ 86.141232][ T4837] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.238983][ T4837] fs-verity: sha256 using implementation "sha256-avx2" [ 86.290190][ T4837] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -30 [ 86.307375][ T1107] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 86.576741][ T1226] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.668852][ T1226] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.703214][ T7] kernel write not supported for file /118/attr/fscreate (pid: 7 comm: kworker/0:0) [ 86.774703][ T4887] loop3: detected capacity change from 0 to 128 [ 86.781528][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.798844][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.811402][ T1107] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.823947][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.836012][ T1107] usb 5-1: config 0 descriptor?? [ 86.850827][ T4221] Bluetooth: hci4: command 0x0409 tx timeout [ 86.874723][ T4887] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 86.880555][ T4214] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.884736][ T1107] hub 5-1:0.0: USB hub found [ 86.956144][ T1226] tipc: Left network mode [ 86.977116][ T4838] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.103774][ T1107] hub 5-1:0.0: 1 port detected [ 87.150552][ T4214] usb 1-1: Using ep0 maxpacket: 8 [ 87.249678][ T4838] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.270903][ T4214] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.303972][ T4838] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.361569][ T26] audit: type=1326 audit(1731933434.651:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.2.242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b6fe36719 code=0x0 [ 87.387615][ T4838] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.481807][ T4214] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 87.498344][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.520517][ T4214] usb 1-1: Product: syz [ 87.529189][ T4214] usb 1-1: Manufacturer: syz [ 87.537787][ T4214] usb 1-1: SerialNumber: syz [ 87.544502][ T1107] usb 5-1: USB disconnect, device number 3 [ 87.585124][ T4214] usb 1-1: config 0 descriptor?? [ 87.603847][ T4838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.638712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.653308][ T4214] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 87.669357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.688278][ T4214] usb 1-1: selecting invalid altsetting 1 [ 87.711303][ T4838] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.754205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.781961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.798297][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.805486][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.854371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.863548][ T4214] gspca_stk014: init reg: 0x00 [ 87.864008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.868389][ T4214] stk014: probe of 1-1:0.0 failed with error -5 [ 87.897294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.912754][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.919949][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.947541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.987127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.007114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.025303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.040337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.081218][ T4620] usb 1-1: USB disconnect, device number 4 [ 88.144299][ T4838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.165070][ T4838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.209135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.228249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.237336][ T4925] loop4: detected capacity change from 0 to 512 [ 88.246859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.265780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.285412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.305252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.318903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.328466][ T4925] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 88.346773][ T4921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'. [ 88.367882][ T4925] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.482044][ T26] audit: type=1800 audit(1731933435.781:6): pid=4925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.245" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 88.514627][ T26] audit: type=1800 audit(1731933435.801:7): pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.245" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 88.797987][ T4952] loop3: detected capacity change from 0 to 8 [ 88.930898][ T4781] Bluetooth: hci4: command 0x041b tx timeout [ 88.948114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.978713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.040894][ T4838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.067137][ T1226] device hsr_slave_0 left promiscuous mode [ 89.109203][ T1226] device hsr_slave_1 left promiscuous mode [ 89.182148][ T1226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.205548][ T1226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.244447][ T1226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.289041][ T1226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.340806][ T1226] device bridge_slave_1 left promiscuous mode [ 89.348947][ T1226] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.445807][ T1226] device bridge_slave_0 left promiscuous mode [ 89.464932][ T1226] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.571581][ T1226] device veth1_macvtap left promiscuous mode [ 89.587194][ T1226] device veth0_macvtap left promiscuous mode [ 89.607179][ T1226] device veth1_vlan left promiscuous mode [ 89.634495][ T1226] device veth0_vlan left promiscuous mode [ 89.730072][ T4995] ALSA: mixer_oss: invalid OSS volume 'u' [ 89.744503][ T4995] ALSA: mixer_oss: invalid OSS volume 'S}B./YY992WhԅNE,' [ 89.756068][ T4995] ALSA: mixer_oss: invalid OSS volume 'cOF8!}sd"tx8SA' [ 89.777126][ T4995] ALSA: mixer_oss: invalid OSS volume 'H}!RͩZ' [ 89.789785][ T4995] ALSA: mixer_oss: invalid OSS volume ';po^3#/Yj}l@;69' [ 89.800800][ T4995] ALSA: mixer_oss: invalid OSS volume 'Yե\&a}X=ȉ5xi$q' [ 89.817248][ T4995] ALSA: mixer_oss: invalid OSS volume '?٭qoIyMto>lg9' [ 89.827038][ T4995] ALSA: mixer_oss: invalid OSS volume ')֭I;MoB0{?' [ 89.844043][ T4995] ALSA: mixer_oss: invalid OSS volume 'S7sW{ZN++_[' [ 89.856133][ T4995] ALSA: mixer_oss: invalid OSS volume '' [ 89.865302][ T4995] ALSA: mixer_oss: invalid OSS volume 'csϑ=ZO҉y/ƓĥS&RJ4j' [ 89.877894][ T4995] ALSA: mixer_oss: invalid OSS volume 'c :3٣/D@aItհfx' [ 89.886639][ T4995] ALSA: mixer_oss: invalid OSS volume 'T{ʒw4M{ j%t' [ 89.895543][ T4995] ALSA: mixer_oss: invalid OSS volume '6o?ton]i' [ 89.903450][ T4995] ALSA: mixer_oss: invalid OSS volume 'ΦuL?΅v4+C' [ 89.911446][ T4995] ALSA: mixer_oss: invalid OSS volume 'y3g՘F8JK`V e>ÓM' [ 89.920016][ T4995] ALSA: mixer_oss: invalid OSS volume '' [ 89.926307][ T4995] ALSA: mixer_oss: invalid OSS volume 'C43KJD֞47=8qPK^P' [ 89.934417][ T4959] loop2: detected capacity change from 0 to 32768 [ 89.938764][ T4995] ALSA: mixer_oss: invalid OSS volume '}cLurbzI{%' [ 89.957543][ T4995] ALSA: mixer_oss: invalid OSS volume 'Te0R+!ؘs1N2+Oq' [ 89.966331][ T4995] ALSA: mixer_oss: invalid OSS volume 'x'Ybe:x^' [ 89.981757][ T4995] ALSA: mixer_oss: invalid OSS volume '?2oZݓX^Ɩ7' [ 89.990222][ T4995] ALSA: mixer_oss: invalid OSS volume 'zzvavgw4-=A*үcPT' [ 90.005423][ T4995] ALSA: mixer_oss: invalid OSS volume '-ĉԱKU$FZY"2' [ 90.024892][ T4995] ALSA: mixer_oss: invalid OSS volume '-/9M=+ihԣx|ߝ/' [ 90.068966][ T4959] JBD2: Ignoring recovery information on journal [ 90.069409][ T4995] ALSA: mixer_oss: invalid OSS volume 'Å~SAdgاL~EVbA]q4b' [ 90.093413][ T4995] ALSA: mixer_oss: invalid OSS volume 'ǴTrz3")?\]diTb' [ 90.106020][ T4995] ALSA: mixer_oss: invalid OSS volume 'hJKu+?snd' [ 90.115038][ T4995] ALSA: mixer_oss: invalid OSS volume '>(v[.zPW[l٪Hv9I*' [ 90.123639][ T4995] ALSA: mixer_oss: invalid OSS volume 'IM}' [ 90.129892][ T4995] ALSA: mixer_oss: invalid OSS volume 'ޚ]ZXWK' [ 90.147894][ T4995] ALSA: mixer_oss: invalid OSS volume 'gl f' [ 90.154926][ T4995] ALSA: mixer_oss: invalid OSS volume 'pǭ-gl>•?5b(UmH' [ 90.171342][ T4959] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 90.172760][ T4995] ALSA: mixer_oss: invalid OSS volume ' HD-5G:y_$RtsCo' [ 90.189951][ T4995] ALSA: mixer_oss: invalid OSS volume 'OSlR$X`DE' [ 90.226863][ T4995] ALSA: mixer_oss: invalid OSS volume 'jbhOS{e}YyA!"L' [ 90.237090][ T4995] ALSA: mixer_oss: invalid OSS volume ''c+әbnR٫b2pBM' [ 90.244323][ T1226] team0 (unregistering): Port device team_slave_1 removed [ 90.254550][ T4995] ALSA: mixer_oss: invalid OSS volume '])@:T1U2cn&C[g7xD' [ 90.265099][ T1226] team0 (unregistering): Port device team_slave_0 removed [ 90.269731][ T4995] ALSA: mixer_oss: invalid OSS volume 'wUosL!NζWK' [ 90.288200][ T4995] ALSA: mixer_oss: invalid OSS volume 'ޭ1ؽF&' [ 90.297702][ T1226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.321841][ T4165] ocfs2: Unmounting device (7,2) on (node local) [ 90.337962][ T1226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.579560][ T1226] bond0 (unregistering): Released all slaves [ 90.631458][ T5006] loop3: detected capacity change from 0 to 256 [ 91.010540][ T4620] Bluetooth: hci4: command 0x040f tx timeout [ 91.087830][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.128330][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.142789][ T5043] loop3: detected capacity change from 0 to 16 [ 91.196577][ T5043] erofs: (device loop3): mounted with root inode @ nid 36. [ 91.209408][ T4838] device veth0_vlan entered promiscuous mode [ 91.249272][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.271306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.286811][ T26] audit: type=1800 audit(1731933438.581:8): pid=5043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.280" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 91.312338][ T5047] loop4: detected capacity change from 0 to 64 [ 91.322507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.357850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.387277][ T4838] device veth1_vlan entered promiscuous mode [ 91.498838][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.531576][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.565990][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.621837][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.668194][ T4838] device veth0_macvtap entered promiscuous mode [ 91.734728][ T4838] device veth1_macvtap entered promiscuous mode [ 91.773081][ T5071] loop0: detected capacity change from 0 to 128 [ 91.784480][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.801375][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.847130][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.870811][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.891738][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.920459][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.950620][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.994362][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.008863][ T5016] loop2: detected capacity change from 0 to 32768 [ 92.014796][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.043828][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.077862][ T4838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.139676][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.164529][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.179398][ T5016] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 92.241939][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.306127][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.358569][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.379547][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.423382][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.470525][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.527563][ T4838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.578068][ T4838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.602922][ T5078] loop3: detected capacity change from 0 to 32768 [ 92.636303][ T4838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.640171][ T4165] ocfs2: Unmounting device (7,2) on (node local) [ 92.648363][ T4838] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.659081][ T4838] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.668225][ T4838] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.677259][ T4838] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.724126][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.746982][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.836563][ T5078] ERROR: (device loop3): dtSearch: DT_GETPAGE: dtree page corrupt [ 92.836563][ T5078] [ 92.926237][ T5078] ERROR: (device loop3): remounting filesystem as read-only [ 92.980521][ T5078] jfs_lookup: dtSearch returned -5 [ 92.985996][ T5083] ERROR: (device loop3): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 92.985996][ T5083] [ 93.008738][ T4941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.030903][ T4941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.090737][ T4620] Bluetooth: hci4: command 0x0419 tx timeout [ 93.099627][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.107304][ T4215] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.144262][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.156328][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.185331][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.215334][ T5090] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 93.356966][ T5075] loop4: detected capacity change from 0 to 40427 [ 93.420535][ T4215] usb 1-1: Using ep0 maxpacket: 16 [ 93.433599][ T5096] loop5: detected capacity change from 0 to 1024 [ 93.478821][ T5075] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 93.489149][ T5075] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 93.514240][ T5096] EXT4-fs (loop5): Ignoring removed orlov option [ 93.539413][ T5096] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 93.558089][ T5075] F2FS-fs (loop4): invalid crc value [ 93.617040][ T5094] loop2: detected capacity change from 0 to 8192 [ 93.621740][ T5075] F2FS-fs (loop4): Found nat_bits in checkpoint [ 93.692413][ T5075] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 93.699493][ T5075] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 93.720192][ T5096] EXT4-fs (loop5): Test dummy encryption mode enabled [ 93.750774][ T4215] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 93.759890][ T4215] usb 1-1: New USB device strings: Mfr=1, Product=121, SerialNumber=1 [ 93.765176][ T5094] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 93.772160][ T5115] loop3: detected capacity change from 0 to 256 [ 93.783524][ T4215] usb 1-1: Product: syz [ 93.787697][ T4215] usb 1-1: Manufacturer: syz [ 93.792364][ T4215] usb 1-1: SerialNumber: syz [ 93.807666][ T4215] r8152-cfgselector 1-1: config 0 descriptor?? [ 93.823320][ T5094] REISERFS (device loop2): using ordered data mode [ 93.831805][ T5094] reiserfs: using flush barriers [ 93.838639][ T5094] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.866236][ T5115] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 93.881396][ T5094] REISERFS (device loop2): checking transaction log (loop2) [ 93.904726][ T5094] REISERFS (device loop2): Using r5 hash to sort names [ 93.914701][ T5096] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x000000007fffffff,orlov,nomblk_io_submit,test_dummy_encryption,nojournal_checksum,grpquota,auto_da_alloc=0x0000000000000ae8,discard,,errors=continue. Quota mode: writeback. [ 93.967175][ T4167] attempt to access beyond end of device [ 93.967175][ T4167] loop4: rw=2049, want=45104, limit=40427 [ 94.070597][ T4215] r8152-cfgselector 1-1: Unknown version 0x0000 [ 94.077501][ T5094] reiserfs: enabling write barrier flush mode [ 94.183512][ T5094] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 94.194564][ T5123] netlink: 76 bytes leftover after parsing attributes in process `syz.3.297'. [ 94.239115][ T5123] netlink: 76 bytes leftover after parsing attributes in process `syz.3.297'. [ 94.320649][ T4215] r8152-cfgselector 1-1: Unknown version 0x0000 [ 94.350698][ T4215] r8152-cfgselector 1-1: bad CDC descriptors [ 94.427215][ T4215] r8152-cfgselector 1-1: Unknown version 0x0000 [ 94.464238][ T4215] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 95.078784][ T5153] Falling back ldisc for ptm0. [ 95.320629][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 95.468211][ T5166] loop4: detected capacity change from 0 to 2048 [ 95.584227][ T5166] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none. [ 95.646607][ T5131] loop3: detected capacity change from 0 to 32768 [ 95.650476][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 95.653587][ T5166] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.700204][ T5166] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.310: bg 0: block 345: padding at end of block bitmap is not set [ 95.706295][ T5130] loop5: detected capacity change from 0 to 32768 [ 95.729621][ T5131] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 scanned by syz.3.302 (5131) [ 95.743964][ T5166] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 95.772375][ T5166] EXT4-fs (loop4): This should not happen!! Data will be lost [ 95.772375][ T5166] [ 95.790988][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 95.802268][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 95.833052][ T5131] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 95.849062][ T5131] BTRFS info (device loop3): using free space tree [ 95.880904][ T5181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 95.890059][ T5131] BTRFS info (device loop3): has skinny extents [ 95.911000][ T5130] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.301 (5130) [ 95.994403][ T5130] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 96.010864][ T7] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 96.020440][ T7] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 96.028617][ T7] usb 1-1: Product: syz [ 96.033452][ T7] usb 1-1: Manufacturer: syz [ 96.038069][ T7] usb 1-1: SerialNumber: syz [ 96.044756][ T7] usb 1-1: config 0 descriptor?? [ 96.062226][ T5151] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.095559][ T5130] BTRFS info (device loop5): force clearing of disk cache [ 96.113150][ T5130] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 96.184116][ T5130] BTRFS info (device loop5): use zstd compression, level 3 [ 96.222701][ T5130] BTRFS info (device loop5): using free space tree [ 96.235027][ T5130] BTRFS info (device loop5): has skinny extents [ 96.347413][ T5131] BTRFS info (device loop3): enabling ssd optimizations [ 96.366845][ T7] usb 1-1: USB disconnect, device number 6 [ 96.635150][ T5130] BTRFS info (device loop5): enabling ssd optimizations [ 96.691101][ T5130] BTRFS info (device loop5): clearing free space tree [ 96.699244][ T5130] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.779758][ T5130] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.922045][ T5130] BTRFS info (device loop5): creating free space tree [ 96.941283][ T5130] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.970560][ T5130] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 97.246041][ T5202] loop2: detected capacity change from 0 to 32768 [ 97.346568][ T5202] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 97.365005][ T5202] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 97.455193][ T5202] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 5ms [ 97.484790][ T4210] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 97.514263][ T4210] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 97.727425][ T4210] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 213ms [ 97.763490][ T4210] gfs2: fsid=syz:syz.0: jid=0: Done [ 97.769693][ T5202] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 97.879354][ T5202] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 97.922443][ T5202] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 97.922443][ T5202] inode = 12 2341 [ 97.922443][ T5202] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 98.031490][ T5202] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 98.039105][ T5202] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 98.112763][ T5202] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 98.162078][ T5202] gfs2: fsid=syz:syz.0: File system withdrawn [ 98.212318][ T5202] CPU: 0 PID: 5202 Comm: syz.2.315 Not tainted 5.15.173-syzkaller #0 [ 98.220441][ T5202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 98.230516][ T5202] Call Trace: [ 98.233807][ T5202] [ 98.236749][ T5202] dump_stack_lvl+0x1e3/0x2d0 [ 98.241453][ T5202] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 98.247117][ T5202] ? panic+0x860/0x860 [ 98.251217][ T5202] ? do_raw_spin_unlock+0x137/0x8b0 [ 98.256448][ T5202] gfs2_withdraw+0xe9e/0x14e0 [ 98.261162][ T5202] ? gfs2_lm+0x230/0x230 [ 98.265424][ T5202] ? gfs2_dirent_scan+0x276/0x640 [ 98.270463][ T5202] ? panic+0x860/0x860 [ 98.274566][ T5202] ? gfs2_consist_inode_i+0xc0/0xe0 [ 98.279792][ T5202] gfs2_dirent_scan+0x512/0x640 [ 98.284674][ T5202] ? gfs2_dirent_scan+0x640/0x640 [ 98.289724][ T5202] gfs2_dir_read+0x831/0x1af0 [ 98.294448][ T5202] ? gfs2_dir_hash_inval+0x80/0x80 [ 98.299583][ T5202] ? _raw_spin_unlock+0x24/0x40 [ 98.304455][ T5202] ? gfs2_glock_nq+0xc6e/0x15e0 [ 98.309343][ T5202] ? gfs2_glock_wait+0x137/0x1c0 [ 98.314305][ T5202] gfs2_readdir+0x146/0x1a0 [ 98.318836][ T5202] ? __fdget_pos+0x2cb/0x380 [ 98.323452][ T5202] ? gfs2_fallocate+0x490/0x490 [ 98.328324][ T5202] ? gfs2_readdir+0x102/0x1a0 [ 98.333014][ T5202] ? iterate_dir+0x10a/0x570 [ 98.337682][ T5202] ? iterate_dir+0x10a/0x570 [ 98.342302][ T5202] ? fsnotify_perm+0x442/0x590 [ 98.347094][ T5202] iterate_dir+0x224/0x570 [ 98.351535][ T5202] ? gfs2_fallocate+0x490/0x490 [ 98.356409][ T5202] __se_sys_getdents64+0x209/0x4f0 [ 98.361545][ T5202] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 98.367548][ T5202] ? __x64_sys_getdents64+0x80/0x80 [ 98.372760][ T5202] ? filldir+0x720/0x720 [ 98.377038][ T5202] ? syscall_enter_from_user_mode+0x2e/0x240 [ 98.383036][ T5202] ? lockdep_hardirqs_on+0x94/0x130 [ 98.388254][ T5202] ? syscall_enter_from_user_mode+0x2e/0x240 [ 98.394259][ T5202] do_syscall_64+0x3b/0xb0 [ 98.398694][ T5202] ? clear_bhb_loop+0x15/0x70 [ 98.403390][ T5202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.409305][ T5202] RIP: 0033:0x7f9b6fe36719 [ 98.413737][ T5202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.433355][ T5202] RSP: 002b:00007f9b6e2ae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 98.441787][ T5202] RAX: ffffffffffffffda RBX: 00007f9b6ffedf80 RCX: 00007f9b6fe36719 [ 98.449775][ T5202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 98.457755][ T5202] RBP: 00007f9b6fea975e R08: 0000000000000000 R09: 0000000000000000 [ 98.465740][ T5202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.473728][ T5202] R13: 0000000000000000 R14: 00007f9b6ffedf80 R15: 00007ffe728b6a58 [ 98.481853][ T5202] [ 98.659873][ T5262] loop3: detected capacity change from 0 to 32768 [ 98.689399][ T5316] loop4: detected capacity change from 0 to 16 [ 98.768684][ T5316] erofs: (device loop4): mounted with root inode @ nid 36. [ 98.776615][ T5262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.316 (5262) [ 98.883612][ T5319] loop0: detected capacity change from 0 to 2048 [ 98.897252][ T5262] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 98.916070][ T5262] BTRFS info (device loop3): setting nodatacow, compression disabled [ 98.955104][ T5262] BTRFS info (device loop3): turning on flush-on-commit [ 98.995747][ T5279] loop5: detected capacity change from 0 to 40427 [ 99.011327][ T5262] BTRFS info (device loop3): max_inline at 0 [ 99.014437][ T5319] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.037289][ T5262] BTRFS info (device loop3): enabling auto defrag [ 99.066286][ T5279] F2FS-fs (loop5): Invalid log blocks per segment (5) [ 99.095849][ T5262] BTRFS info (device loop3): max_inline at 0 [ 99.111671][ T5279] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 99.151733][ T5262] BTRFS info (device loop3): using free space tree [ 99.170868][ T5262] BTRFS info (device loop3): has skinny extents [ 99.194903][ T5279] F2FS-fs (loop5): Found nat_bits in checkpoint [ 99.321887][ T5341] autofs4:pid:5341:autofs_fill_super: pipe file descriptor does not contain proper ops [ 99.350749][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 99.376785][ T5279] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 99.384570][ T5279] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 99.403966][ T5344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 99.416761][ T5279] attempt to access beyond end of device [ 99.416761][ T5279] loop5: rw=2049, want=45104, limit=40427 [ 99.491452][ T5352] MTD: Attempt to mount non-MTD device "./file0" [ 99.503601][ T5352] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.595735][ T5362] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.765219][ T5373] syz.0.346[5373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.765335][ T5373] syz.0.346[5373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.786773][ T5373] 9pnet: Unknown protocol version 9 [ 99.816624][ T5262] BTRFS info (device loop3): enabling ssd optimizations [ 100.407132][ T5407] loop0: detected capacity change from 0 to 256 [ 100.569404][ T5407] FAT-fs (loop0): Directory bread(block 64) failed [ 100.648174][ T5407] FAT-fs (loop0): Directory bread(block 65) failed [ 100.697955][ T5407] FAT-fs (loop0): Directory bread(block 66) failed [ 100.734286][ T5407] FAT-fs (loop0): Directory bread(block 67) failed [ 100.771009][ T5407] FAT-fs (loop0): Directory bread(block 68) failed [ 100.781008][ T5407] FAT-fs (loop0): Directory bread(block 69) failed [ 100.788538][ T5407] FAT-fs (loop0): Directory bread(block 70) failed [ 100.861607][ T5407] FAT-fs (loop0): Directory bread(block 71) failed [ 100.868242][ T5407] FAT-fs (loop0): Directory bread(block 72) failed [ 100.881259][ T5419] loop5: detected capacity change from 0 to 1024 [ 100.918709][ T5406] loop4: detected capacity change from 0 to 8192 [ 100.945395][ T5407] FAT-fs (loop0): Directory bread(block 73) failed [ 100.994924][ T26] audit: type=1800 audit(1731933448.291:9): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.363" name="bus" dev="loop5" ino=0 res=0 errno=0 [ 101.078101][ T5406] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 101.118903][ T5406] REISERFS (device loop4): using ordered data mode [ 101.206407][ T5406] reiserfs: using flush barriers [ 101.222381][ T5406] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.280959][ T5406] REISERFS (device loop4): checking transaction log (loop4) [ 101.361661][ T5406] REISERFS (device loop4): Using r5 hash to sort names [ 101.391824][ T5406] REISERFS (device loop4): using 3.5.x disk format [ 101.398603][ T5406] REISERFS warning (device loop4): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 101.482963][ T5406] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 101.560525][ T5249] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.639049][ T5439] loop3: detected capacity change from 0 to 4096 [ 101.726166][ T5439] ntfs3: loop3: ino=3, Correct links count -> 2. [ 101.860570][ T5249] usb 3-1: Using ep0 maxpacket: 8 [ 101.981932][ T5249] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 101.999701][ T5249] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 102.040804][ T5249] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.201694][ T5249] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.254905][ T5249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.270444][ T5249] usb 3-1: Product: syz [ 102.280884][ T5249] usb 3-1: Manufacturer: syz [ 102.285605][ T5249] usb 3-1: SerialNumber: syz [ 102.366203][ T5437] loop5: detected capacity change from 0 to 32768 [ 102.434967][ T5437] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.367 (5437) [ 102.477567][ T5437] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 102.530602][ T5437] BTRFS info (device loop5): using free space tree [ 102.537143][ T5437] BTRFS info (device loop5): has skinny extents [ 102.761852][ T5249] usb 3-1: 0:2 : does not exist [ 102.838337][ T5437] BTRFS info (device loop5): enabling ssd optimizations [ 102.867725][ T5444] loop0: detected capacity change from 0 to 40427 [ 102.912400][ T5437] BTRFS info (device loop5): scrub: started on devid 1 [ 102.942133][ T5490] netlink: 'syz.3.383': attribute type 12 has an invalid length. [ 102.953800][ T5444] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 102.965352][ T5244] usb 3-1: USB disconnect, device number 2 [ 102.984184][ T5437] BTRFS info (device loop5): scrub: finished on devid 1 with status: 0 [ 102.996735][ T5444] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 103.047363][ T5444] F2FS-fs (loop0): invalid crc value [ 103.116461][ T5444] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.461448][ T5444] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 103.468599][ T5444] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.549445][ T5506] netlink: 'syz.2.387': attribute type 29 has an invalid length. [ 103.614206][ T5506] netlink: 'syz.2.387': attribute type 29 has an invalid length. [ 103.682199][ T5515] netlink: 'syz.2.387': attribute type 29 has an invalid length. [ 103.893520][ T5518] loop3: detected capacity change from 0 to 4096 [ 103.975650][ T5518] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 104.031879][ T5518] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 104.080631][ T4620] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.169209][ T5518] fscrypt (loop3, inode 18): Mutually exclusive encryption flags (0x17) [ 104.452584][ T5546] IPv6: sit1: Disabled Multicast RS [ 104.578716][ T5548] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.600717][ T4620] usb 5-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ce.1a [ 104.624457][ T4620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.642813][ T4620] usb 5-1: Product: syz [ 104.646993][ T4620] usb 5-1: Manufacturer: syz [ 104.677632][ T4620] usb 5-1: SerialNumber: syz [ 104.691817][ T4620] usb 5-1: config 0 descriptor?? [ 104.760013][ T5530] loop2: detected capacity change from 0 to 32768 [ 104.899153][ T5530] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 104.961890][ T5530] JBD2: Ignoring recovery information on journal [ 104.984214][ T4620] usb 5-1: USB disconnect, device number 4 [ 105.030356][ T5530] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 105.123629][ T4165] ocfs2: Unmounting device (7,2) on (node local) [ 105.263139][ T5570] loop5: detected capacity change from 0 to 256 [ 105.356703][ T5574] loop2: detected capacity change from 0 to 2048 [ 105.368492][ T5570] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.386214][ T5570] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 105.402320][ T5570] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 105.436422][ T5574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.476800][ T26] audit: type=1800 audit(1731933452.771:10): pid=5574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.403" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 105.519910][ T5577] loop4: detected capacity change from 0 to 512 [ 105.557218][ T5577] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.580142][ T5577] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 105.614115][ T5577] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.407: invalid indirect mapped block 4294967295 (level 0) [ 105.642873][ T5577] EXT4-fs (loop4): Remounting filesystem read-only [ 105.672110][ T5577] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.407: invalid indirect mapped block 4294967295 (level 1) [ 105.699622][ T5577] EXT4-fs (loop4): Remounting filesystem read-only [ 105.709344][ T5577] EXT4-fs (loop4): 1 orphan inode deleted [ 105.716413][ T5577] EXT4-fs (loop4): 1 truncate cleaned up [ 105.723025][ T5577] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,block_validity,quota,. Quota mode: writeback. [ 105.766432][ T5577] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.407: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 105.799636][ T5577] EXT4-fs (loop4): Remounting filesystem read-only [ 106.170767][ T5608] netlink: 'syz.5.420': attribute type 33 has an invalid length. [ 106.301754][ T5608] team0: Port device team_slave_0 removed [ 106.319136][ T5608] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 106.416941][ T5619] loop2: detected capacity change from 0 to 64 [ 106.499688][ T26] audit: type=1800 audit(1731933453.791:11): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.424" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 106.550668][ T4221] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.592106][ T5626] syz.5.428[5626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.592198][ T5626] syz.5.428[5626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.779970][ T5632] loop2: detected capacity change from 0 to 2048 [ 106.892278][ T5632] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.915793][ T5611] loop4: detected capacity change from 0 to 40427 [ 106.993450][ T5611] F2FS-fs (loop4): invalid crc value [ 107.016301][ T5611] F2FS-fs (loop4): Found nat_bits in checkpoint [ 107.070989][ T4221] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 107.100505][ T4221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.124236][ T5611] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 107.140673][ T4221] usb 4-1: Product: syz [ 107.144872][ T4221] usb 4-1: Manufacturer: syz [ 107.168589][ T4221] usb 4-1: SerialNumber: syz [ 107.222343][ T4221] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 107.369709][ T4167] attempt to access beyond end of device [ 107.369709][ T4167] loop4: rw=2049, want=45104, limit=40427 [ 107.864812][ T4221] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 107.934534][ T5682] loop4: detected capacity change from 0 to 512 [ 107.976566][ T5684] netlink: 'syz.2.453': attribute type 10 has an invalid length. [ 108.055760][ T5682] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 108.086044][ T4620] usb 4-1: USB disconnect, device number 5 [ 108.120553][ T5682] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.478703][ T5675] loop5: detected capacity change from 0 to 32768 [ 108.618207][ T5675] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 108.717089][ T4838] ocfs2: Unmounting device (7,5) on (node local) [ 108.731691][ T5693] loop2: detected capacity change from 0 to 32768 [ 108.783771][ T5695] loop4: detected capacity change from 0 to 32768 [ 108.899846][ T5703] loop3: detected capacity change from 0 to 256 [ 108.929526][ T5693] XFS (loop2): Mounting V5 Filesystem [ 108.935971][ T4221] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 108.946190][ T5709] loop5: detected capacity change from 0 to 512 [ 108.959679][ T4221] ath9k_htc: Failed to initialize the device [ 108.982139][ T5709] EXT4-fs (loop5): Ignoring removed oldalloc option [ 108.999128][ T4620] usb 4-1: ath9k_htc: USB layer deinitialized [ 109.058314][ T5709] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.457: Parent and EA inode have the same ino 15 [ 109.083770][ T5709] EXT4-fs (loop5): Remounting filesystem read-only [ 109.102036][ T5695] XFS (loop4): Mounting V5 Filesystem [ 109.110386][ T5709] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.457: Parent and EA inode have the same ino 15 [ 109.130713][ T5693] XFS (loop2): Ending clean mount [ 109.132895][ T5709] EXT4-fs (loop5): Remounting filesystem read-only [ 109.180754][ T5709] EXT4-fs (loop5): 1 orphan inode deleted [ 109.187307][ T5709] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000006,. Quota mode: none. [ 109.270256][ T26] audit: type=1800 audit(1731933456.561:12): pid=5727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.456" name="file1" dev="loop2" ino=7430 res=0 errno=0 [ 109.364483][ T4165] XFS (loop2): Unmounting Filesystem [ 109.423323][ T5695] XFS (loop4): Ending clean mount [ 109.483444][ T5737] loop5: detected capacity change from 0 to 64 [ 109.663879][ T4167] XFS (loop4): Unmounting Filesystem [ 109.674854][ T4620] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x4 [ 109.727472][ T4620] XFS (loop4): Unmount and run xfs_repair [ 109.733565][ T4620] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 109.760870][ T4620] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 109.781786][ T4620] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 109.796203][ T4620] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 109.829464][ T4620] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 109.848427][ T4620] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 109.867696][ T4620] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 109.892297][ T4620] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 109.922101][ T4620] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 109.947114][ T5247] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x4 len 4 error 74 [ 109.989010][ T5247] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 110.023644][ T5726] loop3: detected capacity change from 0 to 40427 [ 110.030793][ T5247] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 110.093079][ T5726] F2FS-fs (loop3): invalid crc value [ 110.112573][ T5726] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.231737][ T5726] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.286860][ T5726] F2FS-fs (loop3): access invalid blkaddr:2816 [ 110.330585][ T5726] CPU: 1 PID: 5726 Comm: syz.3.460 Not tainted 5.15.173-syzkaller #0 [ 110.338697][ T5726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 110.349027][ T5726] Call Trace: [ 110.352344][ T5726] [ 110.355292][ T5726] dump_stack_lvl+0x1e3/0x2d0 [ 110.359995][ T5726] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 110.365628][ T5726] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 110.371449][ T5726] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 110.376835][ T5726] f2fs_map_blocks+0x159a/0x3720 [ 110.381785][ T5726] ? f2fs_force_buffered_io+0x630/0x630 [ 110.387341][ T5726] f2fs_mpage_readpages+0xe98/0x27c0 [ 110.392640][ T5726] ? dquot_release_reservation_block+0x90/0x90 [ 110.398804][ T5726] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 110.404950][ T5726] ? f2fs_readahead+0x16e/0x310 [ 110.409795][ T5726] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 110.415508][ T5726] read_pages+0x159/0x8e0 [ 110.419838][ T5726] ? page_cache_ra_unbounded+0x930/0x930 [ 110.425474][ T5726] ? add_to_page_cache_locked+0x40/0x40 [ 110.431025][ T5726] ? down_read+0x1b3/0x2e0 [ 110.435451][ T5726] page_cache_ra_unbounded+0x7b0/0x930 [ 110.440914][ T5726] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 110.447415][ T5726] ? blk_cgroup_congested+0x30c/0x390 [ 110.452795][ T5726] f2fs_readdir+0x546/0xef0 [ 110.457305][ T5726] ? f2fs_fill_dentries+0xd60/0xd60 [ 110.462519][ T5726] ? f2fs_fill_dentries+0xd60/0xd60 [ 110.467726][ T5726] ? iterate_dir+0x10a/0x570 [ 110.472311][ T5726] ? fsnotify_perm+0x442/0x590 [ 110.477101][ T5726] iterate_dir+0x224/0x570 [ 110.481579][ T5726] ? f2fs_fill_dentries+0xd60/0xd60 [ 110.486775][ T5726] __se_sys_getdents64+0x209/0x4f0 [ 110.491880][ T5726] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 110.497856][ T5726] ? __x64_sys_getdents64+0x80/0x80 [ 110.503043][ T5726] ? filldir+0x720/0x720 [ 110.507283][ T5726] ? syscall_enter_from_user_mode+0x2e/0x240 [ 110.513258][ T5726] ? lockdep_hardirqs_on+0x94/0x130 [ 110.518447][ T5726] ? syscall_enter_from_user_mode+0x2e/0x240 [ 110.524425][ T5726] do_syscall_64+0x3b/0xb0 [ 110.528835][ T5726] ? clear_bhb_loop+0x15/0x70 [ 110.533499][ T5726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.539385][ T5726] RIP: 0033:0x7fd07fce8719 [ 110.543789][ T5726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.563383][ T5726] RSP: 002b:00007fd07e160038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 110.571795][ T5726] RAX: ffffffffffffffda RBX: 00007fd07fe9ff80 RCX: 00007fd07fce8719 [ 110.579755][ T5726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 110.587714][ T5726] RBP: 00007fd07fd5b75e R08: 0000000000000000 R09: 0000000000000000 [ 110.595691][ T5726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.603649][ T5726] R13: 0000000000000000 R14: 00007fd07fe9ff80 R15: 00007ffe37388338 [ 110.611621][ T5726] [ 110.637941][ T5726] F2FS-fs (loop3): access invalid blkaddr:2816 [ 110.661393][ T5726] CPU: 0 PID: 5726 Comm: syz.3.460 Not tainted 5.15.173-syzkaller #0 [ 110.669507][ T5726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 110.679588][ T5726] Call Trace: [ 110.682876][ T5726] [ 110.685805][ T5726] dump_stack_lvl+0x1e3/0x2d0 [ 110.690531][ T5726] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 110.696170][ T5726] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 110.701980][ T5726] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 110.707354][ T5726] f2fs_map_blocks+0x159a/0x3720 [ 110.712316][ T5726] ? f2fs_force_buffered_io+0x630/0x630 [ 110.717885][ T5726] ? unlock_page+0x188/0x200 [ 110.722479][ T5726] f2fs_mpage_readpages+0xe98/0x27c0 [ 110.727777][ T5726] ? dquot_release_reservation_block+0x90/0x90 [ 110.733948][ T5726] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 110.740106][ T5726] ? f2fs_readahead+0x16e/0x310 [ 110.744952][ T5726] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 110.750682][ T5726] read_pages+0x159/0x8e0 [ 110.755009][ T5726] ? page_cache_ra_unbounded+0x930/0x930 [ 110.760644][ T5726] ? add_to_page_cache_locked+0x40/0x40 [ 110.766187][ T5726] ? down_read+0x1b3/0x2e0 [ 110.770604][ T5726] page_cache_ra_unbounded+0x7b0/0x930 [ 110.776070][ T5726] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 110.782566][ T5726] ? blk_cgroup_congested+0x30c/0x390 [ 110.787933][ T5726] f2fs_readdir+0x546/0xef0 [ 110.792448][ T5726] ? f2fs_fill_dentries+0xd60/0xd60 [ 110.797651][ T5726] ? f2fs_fill_dentries+0xd60/0xd60 [ 110.802849][ T5726] ? iterate_dir+0x10a/0x570 [ 110.807439][ T5726] ? fsnotify_perm+0x442/0x590 [ 110.812212][ T5726] iterate_dir+0x224/0x570 [ 110.816624][ T5726] ? f2fs_fill_dentries+0xd60/0xd60 [ 110.821818][ T5726] __se_sys_getdents64+0x209/0x4f0 [ 110.826938][ T5726] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 110.832927][ T5726] ? __x64_sys_getdents64+0x80/0x80 [ 110.838132][ T5726] ? filldir+0x720/0x720 [ 110.842383][ T5726] ? syscall_enter_from_user_mode+0x2e/0x240 [ 110.848370][ T5726] ? lockdep_hardirqs_on+0x94/0x130 [ 110.853576][ T5726] ? syscall_enter_from_user_mode+0x2e/0x240 [ 110.859565][ T5726] do_syscall_64+0x3b/0xb0 [ 110.863982][ T5726] ? clear_bhb_loop+0x15/0x70 [ 110.868664][ T5726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.874558][ T5726] RIP: 0033:0x7fd07fce8719 [ 110.878975][ T5726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.898574][ T5726] RSP: 002b:00007fd07e160038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 110.906987][ T5726] RAX: ffffffffffffffda RBX: 00007fd07fe9ff80 RCX: 00007fd07fce8719 [ 110.914949][ T5726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 110.923085][ T5726] RBP: 00007fd07fd5b75e R08: 0000000000000000 R09: 0000000000000000 [ 110.931057][ T5726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.939027][ T5726] R13: 0000000000000000 R14: 00007fd07fe9ff80 R15: 00007ffe37388338 [ 110.947023][ T5726] [ 110.971507][ T5726] attempt to access beyond end of device [ 110.971507][ T5726] loop3: rw=0, want=45072, limit=40427 [ 111.053379][ T4166] attempt to access beyond end of device [ 111.053379][ T4166] loop3: rw=2049, want=45104, limit=40427 [ 111.478100][ T5797] loop2: detected capacity change from 0 to 256 [ 111.543412][ T5796] input: syz1 as /devices/virtual/input/input6 [ 111.579895][ T5793] loop5: detected capacity change from 0 to 2048 [ 111.661834][ T5793] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.958918][ T5814] loop3: detected capacity change from 0 to 512 [ 112.060888][ T5244] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.104229][ T5814] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.470: invalid block [ 112.141848][ T5814] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.470: invalid indirect mapped block 10 (level 1) [ 112.171453][ T5814] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.470: invalid indirect mapped block 8 (level 1) [ 112.241921][ T5814] EXT4-fs (loop3): 1 truncate cleaned up [ 112.268050][ T5814] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.500764][ T5244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.524850][ T5804] loop4: detected capacity change from 0 to 32768 [ 112.532048][ T5244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.640542][ T5804] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.477 (5804) [ 112.713469][ T5804] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 112.730537][ T5804] BTRFS info (device loop4): using free space tree [ 112.740877][ T5244] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 112.757431][ T5804] BTRFS info (device loop4): has skinny extents [ 112.765649][ T5244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.807869][ T5244] usb 3-1: Product: syz [ 112.815395][ T5244] usb 3-1: Manufacturer: syz [ 112.825546][ T5244] usb 3-1: SerialNumber: syz [ 112.857806][ T5244] usb 3-1: config 0 descriptor?? [ 112.879024][ T5868] loop3: detected capacity change from 0 to 512 [ 112.939982][ T5244] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 112.961234][ T5244] usb 3-1: No valid video chain found. [ 112.997339][ T5868] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 113.013671][ T5804] BTRFS info (device loop4): enabling ssd optimizations [ 113.025979][ T5868] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.070498][ T4221] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 113.141167][ T5244] usb 3-1: USB disconnect, device number 3 [ 113.320674][ T4221] usb 6-1: Using ep0 maxpacket: 16 [ 113.480536][ T4221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.510574][ T4221] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 113.538169][ T4221] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 113.551887][ T5905] loop4: detected capacity change from 0 to 512 [ 113.610701][ T5905] EXT4-fs (loop4): Ignoring removed oldalloc option [ 113.649645][ T5905] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.495: Parent and EA inode have the same ino 15 [ 113.664030][ T5905] EXT4-fs (loop4): Remounting filesystem read-only [ 113.680733][ T5905] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.495: Parent and EA inode have the same ino 15 [ 113.718445][ T5905] EXT4-fs (loop4): Remounting filesystem read-only [ 113.720770][ T4221] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.732562][ T5905] EXT4-fs (loop4): 1 orphan inode deleted [ 113.739863][ T5905] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000006,. Quota mode: none. [ 113.805472][ T4221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.856169][ T4221] usb 6-1: Product: syz [ 113.860366][ T4221] usb 6-1: Manufacturer: 碐鑪驗⇞᭢৶ [ 113.877599][ T4221] usb 6-1: SerialNumber: syz [ 114.067076][ T5929] loop4: detected capacity change from 0 to 64 [ 114.080434][ T5925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.103125][ T5925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.116346][ T5925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.129102][ T5925] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 114.156512][ C0] Illegal XDP return value 16128, expect packet loss! [ 114.213625][ T5916] loop2: detected capacity change from 0 to 32768 [ 114.220890][ T4221] cdc_ncm 6-1:1.0: bind() failure [ 114.230315][ T4221] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 114.259466][ T4221] cdc_ncm 6-1:1.1: bind() failure [ 114.282805][ T4221] usb 6-1: USB disconnect, device number 2 [ 114.373244][ T5943] loop3: detected capacity change from 0 to 512 [ 114.397910][ T5946] loop4: detected capacity change from 0 to 256 [ 114.408732][ T5916] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 114.436842][ T5943] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 114.507389][ T5943] EXT4-fs (loop3): invalid journal inode [ 114.519365][ T5946] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 114.542500][ T5943] EXT4-fs (loop3): can't get journal size [ 114.568863][ T4165] ocfs2: Unmounting device (7,2) on (node local) [ 114.617504][ T5943] EXT4-fs (loop3): 1 truncate cleaned up [ 114.626716][ T5943] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 114.761424][ T5943] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 570425344 > max in inode 18 [ 114.897108][ T5964] netlink: 56 bytes leftover after parsing attributes in process `syz.2.506'. [ 115.753812][ T5997] program syz.2.521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.759552][ T5972] loop3: detected capacity change from 0 to 40427 [ 115.873670][ T6003] loop5: detected capacity change from 0 to 256 [ 116.073601][ T5972] F2FS-fs (loop3): invalid crc value [ 116.136415][ T5972] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.291757][ T5972] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.410815][ T4166] attempt to access beyond end of device [ 116.410815][ T4166] loop3: rw=2049, want=45104, limit=40427 [ 116.504687][ T5247] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.742079][ T6014] loop5: detected capacity change from 0 to 32768 [ 116.855924][ T6014] XFS (loop5): Mounting V5 Filesystem [ 116.930842][ T5247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.941285][ T6014] XFS (loop5): Ending clean mount [ 116.951101][ T5247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.010535][ T5247] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 117.029482][ T5247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.093425][ T5247] usb 3-1: config 0 descriptor?? [ 117.099479][ T26] audit: type=1800 audit(1731933464.391:13): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.526" name="file1" dev="loop5" ino=7430 res=0 errno=0 [ 117.212402][ T4838] XFS (loop5): Unmounting Filesystem [ 117.550563][ T5247] usbhid 3-1:0.0: can't add hid device: -71 [ 117.556605][ T5247] usbhid: probe of 3-1:0.0 failed with error -71 [ 117.591199][ T5247] usb 3-1: USB disconnect, device number 4 [ 117.717564][ T6069] IPv6: sit1: Disabled Multicast RS [ 117.966785][ T6078] loop3: detected capacity change from 0 to 128 [ 118.015958][ T6080] loop2: detected capacity change from 0 to 256 [ 118.068732][ T6078] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 118.096498][ T6080] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 118.099918][ T6078] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.123981][ T6080] FAT-fs (loop2): Filesystem has been set read-only [ 118.317918][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.4.559'. [ 118.582746][ T6101] loop4: detected capacity change from 0 to 4096 [ 118.842180][ T4167] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 118.868694][ T4167] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 119.335534][ T6142] : renamed from pim6reg1 [ 119.379694][ T6103] loop2: detected capacity change from 0 to 32768 [ 119.473837][ T6103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.561 (6103) [ 119.522957][ T6103] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 119.530233][ T6149] loop3: detected capacity change from 0 to 256 [ 119.538136][ T4221] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 119.546632][ T6103] BTRFS info (device loop2): metadata ratio 2 [ 119.563277][ T6103] BTRFS info (device loop2): force zlib compression, level 3 [ 119.586946][ T6103] BTRFS info (device loop2): use zlib compression, level 3 [ 119.610276][ T6103] BTRFS info (device loop2): enabling auto defrag [ 119.631941][ T6103] BTRFS info (device loop2): max_inline at 0 [ 119.637956][ T6103] BTRFS info (device loop2): using free space tree [ 119.680428][ T6103] BTRFS info (device loop2): has skinny extents [ 119.860793][ T6103] BTRFS info (device loop2): enabling ssd optimizations [ 119.910635][ T4221] usb 5-1: config 0 has no interfaces? [ 120.073055][ T4221] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.111505][ T4221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.137024][ T4221] usb 5-1: Product: syz [ 120.142399][ T4221] usb 5-1: Manufacturer: syz [ 120.155730][ T4221] usb 5-1: SerialNumber: syz [ 120.182492][ T4221] usb 5-1: config 0 descriptor?? [ 120.348371][ T6145] loop0: detected capacity change from 0 to 40427 [ 120.483685][ T6145] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 120.486487][ T1345] usb 5-1: USB disconnect, device number 5 [ 120.500809][ T6145] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 120.580515][ T6145] F2FS-fs (loop0): invalid crc value [ 120.630059][ T6145] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.728936][ T6145] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 120.738035][ T6145] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.838340][ T6196] loop2: detected capacity change from 0 to 2048 [ 120.948557][ T6189] loop5: detected capacity change from 0 to 32768 [ 120.963657][ T6196] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.109085][ T6189] ERROR: (device loop5): dtSearch: DT_GETPAGE: dtree page corrupt [ 121.109085][ T6189] [ 121.184471][ T6189] ERROR: (device loop5): remounting filesystem as read-only [ 121.206904][ T6189] jfs_lookup: dtSearch returned -5 [ 121.225980][ T6207] ERROR: (device loop5): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 121.225980][ T6207] [ 121.319156][ T6216] loop0: detected capacity change from 0 to 256 [ 121.340197][ T6214] loop2: detected capacity change from 0 to 256 [ 121.449432][ T6214] FAT-fs (loop2): Directory bread(block 64) failed [ 121.480536][ T6214] FAT-fs (loop2): Directory bread(block 65) failed [ 121.503635][ T6214] FAT-fs (loop2): Directory bread(block 66) failed [ 121.512990][ T6214] FAT-fs (loop2): Directory bread(block 67) failed [ 121.519604][ T6214] FAT-fs (loop2): Directory bread(block 68) failed [ 121.557096][ T6225] loop4: detected capacity change from 0 to 128 [ 121.562618][ T6214] FAT-fs (loop2): Directory bread(block 69) failed [ 121.595834][ T6214] FAT-fs (loop2): Directory bread(block 70) failed [ 121.616824][ T6214] FAT-fs (loop2): Directory bread(block 71) failed [ 121.678784][ T6214] FAT-fs (loop2): Directory bread(block 72) failed [ 121.691308][ T6225] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 121.716865][ T6214] FAT-fs (loop2): Directory bread(block 73) failed [ 121.835117][ T6235] loop5: detected capacity change from 0 to 2048 [ 121.892373][ T6240] loop0: detected capacity change from 0 to 256 [ 121.916854][ T6235] EXT4-fs (loop5): Ignoring removed nobh option [ 121.949481][ T6240] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 122.053203][ T6235] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,bsdgroups,nobh,barrier=0x0000000000000003,abort,,errors=continue. Quota mode: writeback. [ 122.088296][ T6249] netlink: 'syz.2.628': attribute type 3 has an invalid length. [ 122.089476][ T6235] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.170507][ T6235] fs-verity (loop5, inode 13): ext4_end_enable_verity() failed with err -30 [ 122.362467][ T6263] loop5: detected capacity change from 0 to 256 [ 122.684720][ T6268] loop5: detected capacity change from 0 to 512 [ 122.795242][ T6265] loop4: detected capacity change from 0 to 32768 [ 122.842783][ T6268] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 122.879199][ T6265] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop4 scanned by syz.4.625 (6265) [ 122.892816][ T6268] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.898368][ T6256] loop2: detected capacity change from 0 to 32768 [ 123.030284][ T6265] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 123.048548][ T26] audit: type=1800 audit(1731933470.341:14): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.637" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 123.050525][ T6265] BTRFS info (device loop4): using free space tree [ 123.098414][ T6256] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt [ 123.098414][ T6256] [ 123.176885][ T26] audit: type=1800 audit(1731933470.381:15): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.637" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 123.181291][ T6256] ERROR: (device loop2): remounting filesystem as read-only [ 123.204911][ T6265] BTRFS info (device loop4): has skinny extents [ 123.255432][ T6256] jfs_lookup: dtSearch returned -5 [ 123.267236][ T6275] ERROR: (device loop2): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 123.267236][ T6275] [ 123.296295][ T6270] loop3: detected capacity change from 0 to 32768 [ 123.374261][ T6270] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.626 (6270) [ 123.447399][ T6270] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 123.517936][ T6270] BTRFS info (device loop3): force clearing of disk cache [ 123.527043][ T6270] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 123.535329][ T6265] BTRFS info (device loop4): enabling ssd optimizations [ 123.537547][ T6270] BTRFS info (device loop3): use zstd compression, level 3 [ 123.554907][ T6270] BTRFS info (device loop3): using free space tree [ 123.562189][ T6270] BTRFS info (device loop3): has skinny extents [ 123.721481][ T6307] autofs4:pid:6307:autofs_fill_super: pipe file descriptor does not contain proper ops [ 123.998834][ T6270] BTRFS info (device loop3): enabling ssd optimizations [ 124.035467][ T6270] BTRFS info (device loop3): clearing free space tree [ 124.070894][ T6329] netlink: 'syz.5.632': attribute type 3 has an invalid length. [ 124.080942][ T6270] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.127703][ T6270] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.202818][ T6332] loop4: detected capacity change from 0 to 2048 [ 124.243613][ T6270] BTRFS info (device loop3): creating free space tree [ 124.273387][ T6270] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.286295][ T6330] loop2: detected capacity change from 0 to 4096 [ 124.295947][ T6315] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 124.316085][ T6270] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.327161][ T6315] Bluetooth: hci4: Injecting HCI hardware error event [ 124.337416][ T6332] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.356562][ T4182] Bluetooth: hci4: hardware error 0x00 [ 124.387249][ T6330] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 124.469485][ T6341] loop0: detected capacity change from 0 to 4096 [ 124.538262][ T6341] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.618556][ T6330] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 124.720983][ T6349] netlink: 'syz.4.643': attribute type 29 has an invalid length. [ 124.741854][ T6330] ntfs3: loop2: Failed to load $Extend. [ 124.762209][ T6341] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #15: comm syz.0.639: corrupted inode contents [ 124.781839][ T6349] netlink: 'syz.4.643': attribute type 29 has an invalid length. [ 124.837553][ T6350] netlink: 'syz.4.643': attribute type 29 has an invalid length. [ 124.846101][ T6341] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #15: comm syz.0.639: mark_inode_dirty error [ 124.929931][ T6341] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #15: comm syz.0.639: corrupted inode contents [ 124.976990][ T6341] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.639: mark_inode_dirty error [ 125.091924][ T6341] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #15: comm syz.0.639: corrupted inode contents [ 125.098106][ T6356] loop4: detected capacity change from 0 to 512 [ 125.188159][ T6341] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.639: mark_inode_dirty error [ 125.226631][ T6356] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 125.268625][ T6356] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.656: corrupted in-inode xattr [ 125.291760][ T6356] EXT4-fs (loop4): Remounting filesystem read-only [ 125.308606][ T6356] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.656: couldn't read orphan inode 15 (err -117) [ 125.318817][ T6341] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #15: comm syz.0.639: corrupted inode contents [ 125.340803][ T6356] EXT4-fs (loop4): Remounting filesystem read-only [ 125.347333][ T6356] EXT4-fs (loop4): mounted filesystem without journal. Opts: prjquota,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,noauto_da_alloc,nombcache,noquota,grpquota,norecovery,. Quota mode: writeback. [ 125.376967][ T5276] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.394252][ T6341] EXT4-fs error (device loop0): ext4_truncate:4272: inode #15: comm syz.0.639: mark_inode_dirty error [ 125.518326][ T6341] EXT4-fs error (device loop0) in ext4_setattr:5578: Corrupt filesystem [ 125.620639][ T5276] usb 4-1: Using ep0 maxpacket: 8 [ 125.637570][ T6372] netlink: 'syz.4.650': attribute type 3 has an invalid length. [ 125.740756][ T5276] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 125.749531][ T5276] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 125.797456][ T5276] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.932582][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 126.000702][ T5276] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.024615][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.055842][ T5276] usb 4-1: Product: syz [ 126.057071][ T6389] loop5: detected capacity change from 0 to 64 [ 126.065964][ T5276] usb 4-1: Manufacturer: syz [ 126.076077][ T5276] usb 4-1: SerialNumber: syz [ 126.164817][ T6341] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #15: comm syz.0.639: corrupted inode contents [ 126.246637][ T4838] hfs: node 4:3 still has 1 user(s)! [ 126.265376][ T4164] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 126.348108][ T6391] loop5: detected capacity change from 0 to 128 [ 126.451263][ T6391] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.486046][ T6380] loop2: detected capacity change from 0 to 32768 [ 126.494991][ T6391] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.526670][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.561616][ T6380] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.654 (6380) [ 126.565090][ T6396] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.580848][ T5276] usb 4-1: 0:2 : does not exist [ 126.582540][ T6396] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.596707][ T6396] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.605852][ T6396] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.694134][ T6380] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 126.730565][ T6380] BTRFS info (device loop2): force clearing of disk cache [ 126.737854][ T6380] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 126.807991][ T6380] BTRFS info (device loop2): use zstd compression, level 3 [ 126.825518][ T6380] BTRFS info (device loop2): using free space tree [ 126.825531][ T6315] usb 4-1: USB disconnect, device number 6 [ 126.853303][ T6388] loop4: detected capacity change from 0 to 32768 [ 126.859886][ T6380] BTRFS info (device loop2): has skinny extents [ 126.909939][ T6388] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.658 (6388) [ 126.968841][ T6388] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 126.978123][ T6388] BTRFS info (device loop4): setting nodatacow, compression disabled [ 126.986733][ T6388] BTRFS info (device loop4): turning on flush-on-commit [ 126.987636][ T6380] BTRFS info (device loop2): enabling ssd optimizations [ 126.993795][ T6388] BTRFS info (device loop4): max_inline at 0 [ 127.007356][ T6388] BTRFS info (device loop4): enabling auto defrag [ 127.014143][ T6388] BTRFS info (device loop4): max_inline at 0 [ 127.018895][ T6380] BTRFS info (device loop2): clearing free space tree [ 127.020136][ T6388] BTRFS info (device loop4): using free space tree [ 127.020154][ T6388] BTRFS info (device loop4): has skinny extents [ 127.043613][ T6380] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.070343][ T6380] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.086968][ T6380] BTRFS info (device loop2): creating free space tree [ 127.095705][ T6380] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.106547][ T6380] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.231819][ T6388] BTRFS info (device loop4): enabling ssd optimizations [ 127.246194][ T6439] loop0: detected capacity change from 0 to 512 [ 127.293510][ T6439] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 127.293510][ T6439] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 127.293510][ T6439] [ 127.313299][ T6439] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 127.362289][ T6439] EXT4-fs (loop0): orphan cleanup on readonly fs [ 127.372927][ T6439] EXT4-fs (loop0): 1 orphan inode deleted [ 127.378689][ T6439] EXT4-fs (loop0): 1 truncate cleaned up [ 127.384611][ T6439] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 127.406090][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.469567][ T6439] EXT4-fs (loop0): shut down requested (2) [ 128.007751][ T6460] loop5: detected capacity change from 0 to 2048 [ 128.141729][ T6460] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.487675][ T6484] loop2: detected capacity change from 0 to 512 [ 128.501012][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 128.523810][ T6478] loop5: detected capacity change from 0 to 4096 [ 128.595231][ T6478] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.664955][ T6484] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 128.730521][ T5244] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 128.758029][ T6484] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.766933][ T6473] loop3: detected capacity change from 0 to 32768 [ 128.779949][ T6478] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #15: comm syz.5.679: corrupted inode contents [ 128.797777][ T6478] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #15: comm syz.5.679: mark_inode_dirty error [ 128.809117][ T26] audit: type=1800 audit(1731933476.091:16): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.685" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 128.825585][ T6478] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #15: comm syz.5.679: corrupted inode contents [ 128.846531][ T26] audit: type=1800 audit(1731933476.111:17): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.685" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 128.890265][ T6478] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #15: comm syz.5.679: mark_inode_dirty error [ 128.902454][ T6478] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #15: comm syz.5.679: corrupted inode contents [ 128.916015][ T6478] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #15: comm syz.5.679: mark_inode_dirty error [ 129.011719][ T6473] XFS (loop3): Mounting V5 Filesystem [ 129.020798][ T5244] usb 5-1: Using ep0 maxpacket: 8 [ 129.025514][ T6478] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #15: comm syz.5.679: corrupted inode contents [ 129.053713][ T6478] EXT4-fs error (device loop5): ext4_truncate:4272: inode #15: comm syz.5.679: mark_inode_dirty error [ 129.099458][ T6478] EXT4-fs error (device loop5) in ext4_setattr:5578: Corrupt filesystem [ 129.150638][ T5244] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.157358][ T6473] XFS (loop3): Starting recovery (logdev: internal) [ 129.198301][ T6473] XFS (loop3): Ending recovery (logdev: internal) [ 129.310153][ T4166] XFS (loop3): Unmounting Filesystem [ 129.357273][ T5244] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 129.391274][ T5244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.399985][ T5244] usb 5-1: Product: syz [ 129.422429][ T5244] usb 5-1: Manufacturer: syz [ 129.427055][ T5244] usb 5-1: SerialNumber: syz [ 129.441166][ T5244] usb 5-1: config 0 descriptor?? [ 129.504363][ T5244] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 129.521456][ T5244] usb 5-1: selecting invalid altsetting 1 [ 129.575160][ T6478] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #15: comm syz.5.679: corrupted inode contents [ 129.626846][ T4838] EXT4-fs warning (device loop5): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 129.720775][ T5244] gspca_stk014: init reg: 0x00 [ 129.725615][ T5244] stk014: probe of 5-1:0.0 failed with error -5 [ 129.916984][ T6513] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 129.931294][ T6511] loop2: detected capacity change from 0 to 128 [ 129.951677][ T5244] usb 5-1: USB disconnect, device number 6 [ 129.979956][ T6511] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 129.999853][ T6503] loop0: detected capacity change from 0 to 32768 [ 130.016518][ T6511] sysv_free_block: trying to free block not in datazone [ 130.059306][ T4165] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 130.188829][ T6503] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 130.234567][ T6525] loop5: detected capacity change from 0 to 8 [ 130.265343][ T4164] ocfs2: Unmounting device (7,0) on (node local) [ 130.458758][ T6533] Falling back ldisc for ptm0. [ 130.661185][ T6544] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.048762][ T6555] netlink: 'syz.0.713': attribute type 29 has an invalid length. [ 131.074246][ T6555] netlink: 'syz.0.713': attribute type 29 has an invalid length. [ 131.097691][ T6555] netlink: 'syz.0.713': attribute type 29 has an invalid length. [ 131.236947][ T6557] loop0: detected capacity change from 0 to 8 [ 131.403114][ T6531] loop5: detected capacity change from 0 to 32768 [ 131.430173][ T6537] loop4: detected capacity change from 0 to 32768 [ 131.534880][ T6537] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.706 (6537) [ 131.567646][ T6531] XFS (loop5): Mounting V5 Filesystem [ 131.654533][ T6561] loop0: detected capacity change from 0 to 4096 [ 131.662507][ T6537] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 131.697373][ T6551] loop3: detected capacity change from 0 to 32768 [ 131.705732][ T6537] BTRFS info (device loop4): force clearing of disk cache [ 131.713459][ T6537] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 131.725314][ T6537] BTRFS info (device loop4): use zstd compression, level 3 [ 131.732787][ T6537] BTRFS info (device loop4): using free space tree [ 131.739591][ T6537] BTRFS info (device loop4): has skinny extents [ 131.767634][ T6551] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.711 (6551) [ 131.800019][ T6561] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 131.812839][ T6531] XFS (loop5): Starting recovery (logdev: internal) [ 131.858486][ T6531] XFS (loop5): Ending recovery (logdev: internal) [ 131.870219][ T6551] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 131.887060][ T6561] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 131.891408][ T6551] BTRFS info (device loop3): using free space tree [ 131.930158][ T6551] BTRFS info (device loop3): has skinny extents [ 132.032598][ T6561] fscrypt (loop0, inode 18): Mutually exclusive encryption flags (0x17) [ 132.084913][ T6537] BTRFS info (device loop4): enabling ssd optimizations [ 132.095218][ T6537] BTRFS info (device loop4): clearing free space tree [ 132.106431][ T6537] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 132.127036][ T6537] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 132.159812][ T6609] loop2: detected capacity change from 0 to 256 [ 132.168044][ T4838] XFS (loop5): Unmounting Filesystem [ 132.168900][ T6537] BTRFS info (device loop4): creating free space tree [ 132.186723][ T6537] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 132.197114][ T6537] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 132.225463][ T6551] BTRFS info (device loop3): enabling ssd optimizations [ 132.274564][ T6551] BTRFS info (device loop3): scrub: started on devid 1 [ 132.310358][ T6551] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [ 132.533537][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.540971][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.268389][ T5272] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.466340][ T6627] loop3: detected capacity change from 0 to 2048 [ 133.537497][ T6616] loop0: detected capacity change from 0 to 32768 [ 133.556521][ T6627] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.590118][ T26] audit: type=1800 audit(1731933480.881:18): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.721" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 133.650721][ T5272] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 133.703510][ T6619] loop2: detected capacity change from 0 to 40427 [ 133.703989][ T6616] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 133.758345][ T6619] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 133.826979][ T6619] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 133.830721][ T5272] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 133.852892][ T6616] JBD2: Ignoring recovery information on journal [ 133.854635][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.872147][ T6625] loop5: detected capacity change from 0 to 32768 [ 133.878730][ T5272] usb 5-1: Product: syz [ 133.882161][ T6619] F2FS-fs (loop2): invalid crc value [ 133.882978][ T5272] usb 5-1: Manufacturer: syz [ 133.893490][ T5272] usb 5-1: SerialNumber: syz [ 133.900785][ T5272] usb 5-1: config 0 descriptor?? [ 133.919178][ T6619] F2FS-fs (loop2): Found nat_bits in checkpoint [ 133.952812][ T6625] JBD2: Ignoring recovery information on journal [ 134.014346][ T6616] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 134.061430][ T6625] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 134.082298][ T6619] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 134.109962][ T6619] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 134.166987][ T4164] ocfs2: Unmounting device (7,0) on (node local) [ 134.197404][ T4838] ocfs2: Unmounting device (7,5) on (node local) [ 134.209454][ T4165] attempt to access beyond end of device [ 134.209454][ T4165] loop2: rw=2049, want=45104, limit=40427 [ 134.370755][ T6315] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 134.448500][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 134.465990][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 134.601175][ T5272] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 134.700625][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 134.760693][ T6315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.780473][ T6315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.800521][ T6315] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.820590][ T5272] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 134.830817][ T6315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.839289][ T5272] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 134.850932][ T6315] usb 4-1: config 0 descriptor?? [ 134.856087][ T5272] asix: probe of 5-1:0.0 failed with error -71 [ 134.867331][ T5272] usb 5-1: USB disconnect, device number 7 [ 134.891550][ T6315] hub 4-1:0.0: USB hub found [ 134.954033][ T6652] loop0: detected capacity change from 0 to 32768 [ 135.046764][ T6652] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.733 (6652) [ 135.065565][ T6652] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 135.074999][ T6652] BTRFS info (device loop0): using free space tree [ 135.082015][ T6652] BTRFS info (device loop0): has skinny extents [ 135.134932][ T6315] hub 4-1:0.0: 1 port detected [ 135.169996][ T6652] BTRFS info (device loop0): enabling ssd optimizations [ 135.196910][ T6652] BTRFS info (device loop0): scrub: started on devid 1 [ 135.208912][ T6652] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 135.234559][ T23] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 135.248852][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.264273][ T23] usb 6-1: Product: syz [ 135.268948][ T23] usb 6-1: Manufacturer: syz [ 135.273805][ T23] usb 6-1: SerialNumber: syz [ 135.327669][ T23] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 135.558279][ T6684] loop2: detected capacity change from 0 to 2048 [ 135.573063][ T6315] usb 4-1: USB disconnect, device number 7 [ 135.583918][ T6681] loop4: detected capacity change from 0 to 8192 [ 135.674870][ T6681] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 135.730661][ T6681] REISERFS (device loop4): using ordered data mode [ 135.731581][ T6684] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none. [ 135.737186][ T6681] reiserfs: using flush barriers [ 135.753799][ T6681] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.754169][ T6681] REISERFS (device loop4): checking transaction log (loop4) [ 135.764250][ T6684] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.804100][ T6688] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 135.864517][ T6684] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 135.887568][ T6684] EXT4-fs (loop2): This should not happen!! Data will be lost [ 135.887568][ T6684] [ 135.911015][ T23] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 135.967999][ T6692] loop0: detected capacity change from 0 to 2048 [ 136.019791][ T6681] REISERFS (device loop4): Using tea hash to sort names [ 136.046578][ T6681] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 136.051010][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.740'. [ 136.076285][ T6692] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.090609][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 136.096545][ T6681] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 136.198801][ T13] usb 6-1: USB disconnect, device number 3 [ 136.232934][ T6703] loop2: detected capacity change from 0 to 64 [ 136.329646][ T6705] loop3: detected capacity change from 0 to 256 [ 136.381251][ T6702] Trying to free block not in datazone [ 136.425073][ T6705] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.450538][ T6705] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 136.499251][ T6705] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 136.667249][ T6718] syz.4.752[6718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.667347][ T6718] syz.4.752[6718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.827199][ T6725] loop0: detected capacity change from 0 to 2048 [ 136.866673][ T6729] syz.2.765[6729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.866768][ T6729] syz.2.765[6729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.930466][ T23] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 136.980346][ T23] ath9k_htc: Failed to initialize the device [ 136.981435][ T6725] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none. [ 137.002414][ T13] usb 6-1: ath9k_htc: USB layer deinitialized [ 137.042402][ T6739] MTD: Attempt to mount non-MTD device "./file0" [ 137.053739][ T6739] blk_update_request: I/O error, dev loop10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.080901][ T6725] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.123277][ T6725] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.753: bg 0: block 345: padding at end of block bitmap is not set [ 137.132864][ T6743] loop2: detected capacity change from 0 to 128 [ 137.153608][ T6725] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 137.190566][ T6725] EXT4-fs (loop0): This should not happen!! Data will be lost [ 137.190566][ T6725] [ 137.287052][ T6749] loop4: detected capacity change from 0 to 1024 [ 137.391007][ T6749] EXT4-fs (loop4): Ignoring removed orlov option [ 137.397392][ T6749] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 137.428408][ T6753] loop2: detected capacity change from 0 to 256 [ 137.439383][ T26] audit: type=1326 audit(1731933484.731:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.0.766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe798cf719 code=0x0 [ 137.497876][ T6749] EXT4-fs (loop4): Test dummy encryption mode enabled [ 137.527270][ T6753] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.596310][ T6749] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x000000007fffffff,orlov,nomblk_io_submit,test_dummy_encryption,nojournal_checksum,grpquota,auto_da_alloc=0x0000000000000ae8,discard,,errors=continue. Quota mode: writeback. [ 137.600928][ T6753] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 137.715032][ T6753] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 138.105240][ T6747] loop5: detected capacity change from 0 to 40427 [ 138.153962][ T6745] loop3: detected capacity change from 0 to 32768 [ 138.183897][ T6747] F2FS-fs (loop5): invalid crc value [ 138.197335][ T6745] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.762 (6745) [ 138.228308][ T6747] F2FS-fs (loop5): Found nat_bits in checkpoint [ 138.339925][ T6745] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 138.360914][ T6747] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 138.387791][ T6745] BTRFS info (device loop3): metadata ratio 2 [ 138.394354][ T6745] BTRFS info (device loop3): force zlib compression, level 3 [ 138.410992][ T6745] BTRFS info (device loop3): use zlib compression, level 3 [ 138.428619][ T6745] BTRFS info (device loop3): enabling auto defrag [ 138.438796][ T6745] BTRFS info (device loop3): max_inline at 0 [ 138.459046][ T6745] BTRFS info (device loop3): using free space tree [ 138.476321][ T6745] BTRFS info (device loop3): has skinny extents [ 138.658017][ T6745] BTRFS info (device loop3): enabling ssd optimizations [ 138.800553][ T4838] attempt to access beyond end of device [ 138.800553][ T4838] loop5: rw=2049, want=45104, limit=40427 [ 138.952295][ T6801] MTD: Attempt to mount non-MTD device "./file0" [ 138.977760][ T6801] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.174351][ T6797] loop0: detected capacity change from 0 to 8192 [ 139.327158][ T6797] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 139.360604][ T6797] REISERFS (device loop0): using ordered data mode [ 139.367315][ T6797] reiserfs: using flush barriers [ 139.388505][ T6797] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 139.510254][ T6814] loop4: detected capacity change from 0 to 256 [ 139.564968][ T6814] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.577379][ T6797] REISERFS (device loop0): checking transaction log (loop0) [ 139.613553][ T6814] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 139.625098][ T6797] REISERFS (device loop0): Using r5 hash to sort names [ 139.683420][ T6814] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 139.701220][ T6797] reiserfs: enabling write barrier flush mode [ 139.757895][ T6797] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 139.930486][ T5239] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.107777][ T6811] loop3: detected capacity change from 0 to 32768 [ 140.182234][ T6828] loop4: detected capacity change from 0 to 512 [ 140.190585][ T5239] usb 3-1: Using ep0 maxpacket: 32 [ 140.222620][ T6811] JBD2: Ignoring recovery information on journal [ 140.292392][ T6828] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.790: invalid block [ 140.340612][ T5239] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 140.343725][ T6811] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 140.412879][ T6828] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.790: invalid indirect mapped block 10 (level 1) [ 140.466622][ T6828] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.790: invalid indirect mapped block 8 (level 1) [ 140.489029][ T6822] loop5: detected capacity change from 0 to 32768 [ 140.501472][ T6828] EXT4-fs (loop4): 1 truncate cleaned up [ 140.517463][ T6828] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.576207][ T5239] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 140.605780][ T5239] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 140.630985][ T5239] usb 3-1: Product: syz [ 140.635185][ T5239] usb 3-1: Manufacturer: syz [ 140.658657][ T5239] usb 3-1: SerialNumber: syz [ 140.665578][ T5239] usb 3-1: config 0 descriptor?? [ 140.691965][ T6822] XFS (loop5): Mounting V5 Filesystem [ 140.700863][ T6820] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 140.721140][ T4166] ocfs2: Unmounting device (7,3) on (node local) [ 140.989815][ T5272] usb 3-1: USB disconnect, device number 5 [ 141.009022][ T6822] XFS (loop5): Ending clean mount [ 141.095128][ T4838] XFS (loop5): Unmounting Filesystem [ 141.286998][ T6832] loop0: detected capacity change from 0 to 32768 [ 141.417392][ T6832] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.791 (6832) [ 141.483189][ T6832] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 141.500586][ T6832] BTRFS info (device loop0): metadata ratio 2 [ 141.510982][ T6832] BTRFS info (device loop0): force zlib compression, level 3 [ 141.538733][ T6832] BTRFS info (device loop0): use zlib compression, level 3 [ 141.550532][ T6832] BTRFS info (device loop0): enabling auto defrag [ 141.557009][ T6832] BTRFS info (device loop0): max_inline at 0 [ 141.576953][ T6832] BTRFS info (device loop0): using free space tree [ 141.590498][ T6832] BTRFS info (device loop0): has skinny extents [ 141.687555][ T6832] BTRFS info (device loop0): enabling ssd optimizations [ 142.320676][ T6873] loop2: detected capacity change from 0 to 8192 [ 142.393966][ T6873] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 142.420535][ T6873] REISERFS (device loop2): using ordered data mode [ 142.440830][ T6873] reiserfs: using flush barriers [ 142.475982][ T6873] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.506941][ T6878] loop3: detected capacity change from 0 to 1024 [ 142.560904][ T6873] REISERFS (device loop2): checking transaction log (loop2) [ 142.598377][ T6873] REISERFS (device loop2): Using r5 hash to sort names [ 142.615622][ T6873] REISERFS (device loop2): using 3.5.x disk format [ 142.630891][ T6873] REISERFS warning (device loop2): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 142.660566][ T6873] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 142.661256][ T6878] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 142.722739][ T6870] loop4: detected capacity change from 0 to 32768 [ 142.816066][ T6870] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 142.839554][ T6870] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 142.917319][ T6870] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 142.958718][ T5272] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 142.990437][ T5272] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 143.118125][ T5272] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 127ms [ 143.171012][ T5272] gfs2: fsid=syz:syz.0: jid=0: Done [ 143.176277][ T6870] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 143.248810][ T6870] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 143.269505][ T6870] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 143.269505][ T6870] inode = 12 2341 [ 143.269505][ T6870] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 143.360815][ T6870] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 143.368037][ T6870] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 143.395786][ T6881] loop0: detected capacity change from 0 to 32768 [ 143.437006][ T6870] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 143.482105][ T6870] gfs2: fsid=syz:syz.0: File system withdrawn [ 143.501737][ T6870] CPU: 1 PID: 6870 Comm: syz.4.795 Not tainted 5.15.173-syzkaller #0 [ 143.501848][ T6881] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 143.509820][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 143.509866][ T6870] Call Trace: [ 143.509874][ T6870] [ 143.509883][ T6870] dump_stack_lvl+0x1e3/0x2d0 [ 143.539720][ T6870] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 143.545378][ T6870] ? panic+0x860/0x860 [ 143.549465][ T6870] ? do_raw_spin_unlock+0x137/0x8b0 [ 143.554686][ T6870] gfs2_withdraw+0xe9e/0x14e0 [ 143.559405][ T6870] ? gfs2_lm+0x230/0x230 [ 143.563653][ T6870] ? gfs2_dirent_scan+0x276/0x640 [ 143.568689][ T6870] ? panic+0x860/0x860 [ 143.572790][ T6870] ? gfs2_consist_inode_i+0xc0/0xe0 [ 143.578000][ T6870] gfs2_dirent_scan+0x512/0x640 [ 143.582853][ T6870] ? gfs2_dirent_scan+0x640/0x640 [ 143.587879][ T6870] gfs2_dir_read+0x831/0x1af0 [ 143.592577][ T6870] ? gfs2_dir_hash_inval+0x80/0x80 [ 143.597714][ T6870] ? _raw_spin_unlock+0x24/0x40 [ 143.602597][ T6870] ? gfs2_glock_nq+0xc6e/0x15e0 [ 143.607476][ T6870] ? gfs2_glock_wait+0x137/0x1c0 [ 143.612430][ T6870] gfs2_readdir+0x146/0x1a0 [ 143.616938][ T6870] ? __fdget_pos+0x2cb/0x380 [ 143.621544][ T6870] ? gfs2_fallocate+0x490/0x490 [ 143.626417][ T6870] ? gfs2_readdir+0x102/0x1a0 [ 143.631180][ T6870] ? iterate_dir+0x10a/0x570 [ 143.635758][ T6870] ? iterate_dir+0x10a/0x570 [ 143.640335][ T6870] ? fsnotify_perm+0x442/0x590 [ 143.645096][ T6870] iterate_dir+0x224/0x570 [ 143.649508][ T6870] ? gfs2_fallocate+0x490/0x490 [ 143.654360][ T6870] __se_sys_getdents64+0x209/0x4f0 [ 143.659472][ T6870] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 143.665440][ T6870] ? __x64_sys_getdents64+0x80/0x80 [ 143.670631][ T6870] ? filldir+0x720/0x720 [ 143.674903][ T6870] ? syscall_enter_from_user_mode+0x2e/0x240 [ 143.680897][ T6870] ? lockdep_hardirqs_on+0x94/0x130 [ 143.686086][ T6870] ? syscall_enter_from_user_mode+0x2e/0x240 [ 143.692074][ T6870] do_syscall_64+0x3b/0xb0 [ 143.696480][ T6870] ? clear_bhb_loop+0x15/0x70 [ 143.701148][ T6870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.707056][ T6870] RIP: 0033:0x7f4452e8d719 [ 143.711461][ T6870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.731053][ T6870] RSP: 002b:00007f4451305038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 143.739453][ T6870] RAX: ffffffffffffffda RBX: 00007f4453044f80 RCX: 00007f4452e8d719 [ 143.747412][ T6870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 143.755371][ T6870] RBP: 00007f4452f0075e R08: 0000000000000000 R09: 0000000000000000 [ 143.763328][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.771285][ T6870] R13: 0000000000000000 R14: 00007f4453044f80 R15: 00007ffd64ce1b08 [ 143.779251][ T6870] [ 143.796397][ T6910] loop3: detected capacity change from 0 to 2048 [ 143.804188][ T6881] [ 143.806526][ T6881] ====================================================== [ 143.813532][ T6881] WARNING: possible circular locking dependency detected [ 143.820547][ T6881] 5.15.173-syzkaller #0 Not tainted [ 143.825739][ T6881] ------------------------------------------------------ [ 143.832750][ T6881] syz.0.796/6881 is trying to acquire lock: [ 143.838632][ T6881] ffff888070d806f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x398/0x930 [ 143.847976][ T6881] [ 143.847976][ T6881] but task is already holding lock: [ 143.855339][ T6881] ffff888059064990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12b9/0x1570 [ 143.864600][ T6881] [ 143.864600][ T6881] which lock already depends on the new lock. [ 143.864600][ T6881] [ 143.875007][ T6881] [ 143.875007][ T6881] the existing dependency chain (in reverse order) is: [ 143.884108][ T6881] [ 143.884108][ T6881] -> #4 (jbd2_handle){++++}-{0:0}: [ 143.891429][ T6881] lock_acquire+0x1db/0x4f0 [ 143.896460][ T6881] start_this_handle+0x12e1/0x1570 [ 143.902100][ T6881] jbd2__journal_start+0x2d1/0x5c0 [ 143.907823][ T6881] jbd2_journal_start+0x25/0x30 [ 143.913444][ T6881] ocfs2_start_trans+0x3c2/0x6f0 [ 143.918888][ T6881] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 143.925114][ T6881] ocfs2_dismount_volume+0x1db/0x8b0 [ 143.931009][ T6881] generic_shutdown_super+0x130/0x310 [ 143.936898][ T6881] kill_block_super+0x7a/0xe0 [ 143.942080][ T6881] deactivate_locked_super+0xa0/0x110 [ 143.947962][ T6881] cleanup_mnt+0x44e/0x500 [ 143.952878][ T6881] task_work_run+0x129/0x1a0 [ 143.957980][ T6881] exit_to_user_mode_loop+0x106/0x130 [ 143.963877][ T6881] exit_to_user_mode_prepare+0xb1/0x140 [ 143.969944][ T6881] syscall_exit_to_user_mode+0x5d/0x240 [ 143.976014][ T6881] do_syscall_64+0x47/0xb0 [ 143.980942][ T6881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.987349][ T6881] [ 143.987349][ T6881] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 143.995850][ T6881] lock_acquire+0x1db/0x4f0 [ 144.000862][ T6881] down_read+0x45/0x2e0 [ 144.005541][ T6881] ocfs2_start_trans+0x3b7/0x6f0 [ 144.010990][ T6881] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 144.017237][ T6881] ocfs2_dismount_volume+0x1db/0x8b0 [ 144.023113][ T6881] generic_shutdown_super+0x130/0x310 [ 144.029158][ T6881] kill_block_super+0x7a/0xe0 [ 144.034335][ T6881] deactivate_locked_super+0xa0/0x110 [ 144.040230][ T6881] cleanup_mnt+0x44e/0x500 [ 144.045155][ T6881] task_work_run+0x129/0x1a0 [ 144.050259][ T6881] exit_to_user_mode_loop+0x106/0x130 [ 144.056138][ T6881] exit_to_user_mode_prepare+0xb1/0x140 [ 144.062195][ T6881] syscall_exit_to_user_mode+0x5d/0x240 [ 144.068278][ T6881] do_syscall_64+0x47/0xb0 [ 144.073193][ T6881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.079609][ T6881] [ 144.079609][ T6881] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 144.087073][ T6881] lock_acquire+0x1db/0x4f0 [ 144.092077][ T6881] ocfs2_start_trans+0x2b2/0x6f0 [ 144.097524][ T6881] ocfs2_write_begin_nolock+0x2242/0x4d20 [ 144.103773][ T6881] ocfs2_write_begin+0x1fd/0x390 [ 144.109241][ T6881] generic_perform_write+0x2bf/0x5b0 [ 144.115034][ T6881] __generic_file_write_iter+0x243/0x4f0 [ 144.121188][ T6881] ocfs2_file_write_iter+0x17d5/0x1fa0 [ 144.127161][ T6881] vfs_write+0xacd/0xe50 [ 144.131902][ T6881] ksys_write+0x1a2/0x2c0 [ 144.136826][ T6881] do_syscall_64+0x3b/0xb0 [ 144.141743][ T6881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.148142][ T6881] [ 144.148142][ T6881] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 144.156892][ T6881] lock_acquire+0x1db/0x4f0 [ 144.161911][ T6881] down_write+0x38/0x60 [ 144.166593][ T6881] ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 144.173092][ T6881] ocfs2_truncate_file+0xe3c/0x14f0 [ 144.178793][ T6881] ocfs2_setattr+0x16dd/0x1ce0 [ 144.184093][ T6881] notify_change+0xc6d/0xf50 [ 144.189208][ T6881] do_truncate+0x21c/0x300 [ 144.194125][ T6881] vfs_truncate+0x2dd/0x3a0 [ 144.199134][ T6881] do_sys_truncate+0xda/0x190 [ 144.204326][ T6881] do_syscall_64+0x3b/0xb0 [ 144.209249][ T6881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.215653][ T6881] [ 144.215653][ T6881] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 144.223479][ T6881] validate_chain+0x1649/0x5930 [ 144.228834][ T6881] __lock_acquire+0x1295/0x1ff0 [ 144.234187][ T6881] lock_acquire+0x1db/0x4f0 [ 144.239193][ T6881] down_read+0x45/0x2e0 [ 144.243855][ T6881] ocfs2_init_acl+0x398/0x930 [ 144.249038][ T6881] ocfs2_mknod+0x1e8f/0x2cd0 [ 144.254130][ T6881] ocfs2_create+0x194/0x430 [ 144.259150][ T6881] path_openat+0x130a/0x2f20 [ 144.264246][ T6881] do_filp_open+0x21c/0x460 [ 144.269254][ T6881] do_sys_openat2+0x13b/0x4f0 [ 144.274437][ T6881] __x64_sys_openat+0x243/0x290 [ 144.279797][ T6881] do_syscall_64+0x3b/0xb0 [ 144.284733][ T6881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.291145][ T6881] [ 144.291145][ T6881] other info that might help us debug this: [ 144.291145][ T6881] [ 144.301352][ T6881] Chain exists of: [ 144.301352][ T6881] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 144.301352][ T6881] [ 144.315061][ T6881] Possible unsafe locking scenario: [ 144.315061][ T6881] [ 144.322492][ T6881] CPU0 CPU1 [ 144.327854][ T6881] ---- ---- [ 144.333197][ T6881] lock(jbd2_handle); [ 144.337246][ T6881] lock(&journal->j_trans_barrier); [ 144.345030][ T6881] lock(jbd2_handle); [ 144.351598][ T6881] lock(&oi->ip_xattr_sem); [ 144.356169][ T6881] [ 144.356169][ T6881] *** DEADLOCK *** [ 144.356169][ T6881] [ 144.364291][ T6881] 8 locks held by syz.0.796/6881: [ 144.369292][ T6881] #0: ffff888077ce4460 (sb_writers#30){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 144.378511][ T6881] #1: ffff888070d809c8 (&type->i_mutex_dir_key#24){+.+.}-{3:3}, at: path_openat+0x824/0x2f20 [ 144.388762][ T6881] #2: ffff8880624b09c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 144.402402][ T6881] #3: ffff8880624b42c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 144.416054][ T6881] #4: ffff8880626489c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x12e/0x27a0 [ 144.429969][ T6881] #5: ffff888077ce4650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0x15bb/0x2cd0 [ 144.439276][ T6881] #6: ffff8880620a84e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3b7/0x6f0 [ 144.450047][ T6881] #7: ffff888059064990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12b9/0x1570 [ 144.459684][ T6881] [ 144.459684][ T6881] stack backtrace: [ 144.465552][ T6881] CPU: 1 PID: 6881 Comm: syz.0.796 Not tainted 5.15.173-syzkaller #0 [ 144.473603][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 144.483661][ T6881] Call Trace: [ 144.486927][ T6881] [ 144.489844][ T6881] dump_stack_lvl+0x1e3/0x2d0 [ 144.494513][ T6881] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 144.500137][ T6881] ? print_circular_bug+0x12b/0x1a0 [ 144.505334][ T6881] check_noncircular+0x2f8/0x3b0 [ 144.510271][ T6881] ? add_chain_block+0x850/0x850 [ 144.515196][ T6881] ? lockdep_lock+0x11f/0x2a0 [ 144.519877][ T6881] ? reacquire_held_locks+0x660/0x660 [ 144.525238][ T6881] validate_chain+0x1649/0x5930 [ 144.530081][ T6881] ? lockdep_init_map_type+0x9d/0x8d0 [ 144.535463][ T6881] ? mark_lock+0x98/0x340 [ 144.539786][ T6881] ? reacquire_held_locks+0x660/0x660 [ 144.545152][ T6881] ? __lock_acquire+0x1295/0x1ff0 [ 144.550171][ T6881] ? mark_lock+0x98/0x340 [ 144.554482][ T6881] __lock_acquire+0x1295/0x1ff0 [ 144.559324][ T6881] lock_acquire+0x1db/0x4f0 [ 144.563820][ T6881] ? ocfs2_init_acl+0x398/0x930 [ 144.568665][ T6881] ? read_lock_is_recursive+0x10/0x10 [ 144.574021][ T6881] ? __might_sleep+0xc0/0xc0 [ 144.578594][ T6881] ? trace_ocfs2_claim_new_inode_at_loc+0x1e0/0x1e0 [ 144.585165][ T6881] ? set_current_blocked+0x40/0x40 [ 144.590267][ T6881] down_read+0x45/0x2e0 [ 144.594411][ T6881] ? ocfs2_init_acl+0x398/0x930 [ 144.599252][ T6881] ocfs2_init_acl+0x398/0x930 [ 144.603915][ T6881] ? ocfs2_mknod_locked+0x21e/0x3a0 [ 144.609095][ T6881] ? ocfs2_acl_chmod+0x360/0x360 [ 144.614012][ T6881] ? ocfs2_start_trans+0x4dc/0x6f0 [ 144.619109][ T6881] ? __ocfs2_abort+0x230/0x230 [ 144.623949][ T6881] ? ocfs2_init_security_get+0x130/0x190 [ 144.629569][ T6881] ocfs2_mknod+0x1e8f/0x2cd0 [ 144.634189][ T6881] ? ocfs2_mkdir+0x430/0x430 [ 144.638761][ T6881] ? mark_lock+0x98/0x340 [ 144.643068][ T6881] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 144.649039][ T6881] ? print_irqtrace_events+0x210/0x210 [ 144.654634][ T6881] ? read_lock_is_recursive+0x10/0x10 [ 144.660004][ T6881] ? ocfs2_inode_unlock+0xa3/0x150 [ 144.665218][ T6881] ? __lock_acquire+0x1ff0/0x1ff0 [ 144.670264][ T6881] ? do_raw_spin_lock+0x14a/0x370 [ 144.675290][ T6881] ? do_raw_spin_unlock+0x137/0x8b0 [ 144.680478][ T6881] ? do_raw_spin_unlock+0x137/0x8b0 [ 144.685668][ T6881] ? __d_add+0x4d7/0x7f0 [ 144.689905][ T6881] ? _raw_spin_unlock+0x24/0x40 [ 144.694753][ T6881] ? rcu_is_watching+0x11/0xa0 [ 144.699508][ T6881] ? ocfs2_lookup+0x4ed/0x9f0 [ 144.704182][ T6881] ocfs2_create+0x194/0x430 [ 144.708694][ T6881] ? ocfs2_lookup+0x9f0/0x9f0 [ 144.713366][ T6881] ? inode_permission+0xf7/0x450 [ 144.718307][ T6881] ? ocfs2_getattr+0x380/0x380 [ 144.723074][ T6881] ? bpf_lsm_inode_create+0x5/0x10 [ 144.728164][ T6881] ? security_inode_create+0xb4/0x100 [ 144.733519][ T6881] ? ocfs2_lookup+0x9f0/0x9f0 [ 144.738179][ T6881] path_openat+0x130a/0x2f20 [ 144.742760][ T6881] ? do_filp_open+0x460/0x460 [ 144.747425][ T6881] do_filp_open+0x21c/0x460 [ 144.751920][ T6881] ? vfs_tmpfile+0x2e0/0x2e0 [ 144.756503][ T6881] ? _raw_spin_unlock+0x24/0x40 [ 144.761361][ T6881] ? alloc_fd+0x598/0x630 [ 144.765717][ T6881] do_sys_openat2+0x13b/0x4f0 [ 144.770395][ T6881] ? do_sys_open+0x220/0x220 [ 144.774993][ T6881] __x64_sys_openat+0x243/0x290 [ 144.779836][ T6881] ? __ia32_sys_open+0x270/0x270 [ 144.784762][ T6881] ? syscall_enter_from_user_mode+0x2e/0x240 [ 144.790739][ T6881] ? lockdep_hardirqs_on+0x94/0x130 [ 144.795934][ T6881] ? syscall_enter_from_user_mode+0x2e/0x240 [ 144.801908][ T6881] do_syscall_64+0x3b/0xb0 [ 144.806313][ T6881] ? clear_bhb_loop+0x15/0x70 [ 144.810982][ T6881] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.816887][ T6881] RIP: 0033:0x7efe798cf719 [ 144.821289][ T6881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.840899][ T6881] RSP: 002b:00007efe77d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 144.849297][ T6881] RAX: ffffffffffffffda RBX: 00007efe79a86f80 RCX: 00007efe798cf719 [ 144.857251][ T6881] RDX: 0000000000141842 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 144.865208][ T6881] RBP: 00007efe7994275e R08: 0000000000000000 R09: 0000000000000000 [ 144.873184][ T6881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.881139][ T6881] R13: 0000000000000000 R14: 00007efe79a86f80 R15: 00007fffa6ee3288 [ 144.889101][ T6881] [ 144.896845][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 144.937048][ T6910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.970578][ T4164] ocfs2: Unmounting device (7,0) on (node local) [ 145.140448][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 145.260563][ T21] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 145.430612][ T21] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 145.440004][ T21] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 145.448295][ T21] usb 6-1: Product: syz [ 145.452553][ T21] usb 6-1: Manufacturer: syz [ 145.457126][ T21] usb 6-1: SerialNumber: syz [ 145.465310][ T21] usb 6-1: config 0 descriptor?? [ 145.480664][ T6902] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.779239][ T1107] usb 6-1: USB disconnect, device number 4