last executing test programs: 37.69231906s ago: executing program 3 (id=296): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT, @ANYRES8], 0x1, 0xf5d, &(0x7f0000000f00)="$eJzs3U9sHNUZAPA36z/rxCZeAwVDS0ihFYGCHZJIDbcgUI+IS4+VQCGhEYaihh6IgJgeEJUQRUKcKg5UXCiVUqQigSpVqKe2p1a99YR6oVIVpKAeWtTEVew3693xPnY9Xs+ud38/6du3b97sfN/YjjMznn0bgLFVW388fnwxC+Gtj998+MUnsg+vLbu9ucah9ccs9hohhKmWflbY3qdxwZXLL5zq1Gbh6Ppj3g+PXGq+djaEsBoOhU9CI7y/vPLFe28/dPiDV2Zuev38Uy/t0u43FfcDAABG0cU/r/z97n/+6d6FLy8ePBnqzeX58Xkj9mfjcf+ReKCcHy/XQns/a4lW04X1JmLUCutNFNabLOSZTOSbKmxnKrHedJd8Ey3LOu0nAAAA7EX5eW0jZLWltn6ttrS0cd5/zafz09nSM2dXzpwbUKEAAABAaf++sH7T7YBiZoC5hRiHeGMIahBCCCFGKupDUIMQQpSKtflBX4EAAAAAxk1xvrAtVvs7U1dza43e8l96sNb59dAHVf/8f3X+mQHn72DM87/7st84AACUN6pHk/l+5cfR+TwGxXkEJwqv2+7xf62wnclt1pmaV3CvzDeYqrP4dR1Wqfq3+30clFT9xfkwh1Wq/uI8ncMqVX+94jrKStXf4crPUErVv6/iOspK1b+/4jrKStU/W3EdZaXqn6u4jrJS9V9XcR1lpeo/UHEdZaXq3yu31abqb1RcR1mp+hcqrqOsVP3XV1xHWan6b6i4jrKu1f9Ah4PNGwdRzADcFtv8+3gwsd5sh3O6vXKOBwAAAOPuvwOd/08IIYQYuti4BWLwdQghhBBiXGPjoe/bvTDQqw8AAADAMMjfF5C/630tyscnuoxPto7PbK6Qj091ef10l/F6l3EAAAAghN+9euaWN7LN+e52Oh9ePm/UvvDh1dA2j9HnPdVTnI9wu/l3Ou/ZTvPvlXnLAAAAGC/Z9z65es/D7zy38OXFgydbzn6vxvPdfB7QyXht4KPYz+8LmCv0s/wc+mR7nlpiveI8x9eltvfoDncUAAAAxlh+/t4IWW2p5by7EWq1paXN8/HFMJWdObty+kjs55/P8sf5qfq15fdXXDcAAADQu83z/c7n//nn+C6G6WzpmbMrZ85t9Oeay6dqrdcF5jeXZ63XBRqF5UcTy4/Ffv75nT+c37e+fOnUj1ae6PfOAwAAwJg49/z5px5fWTn9Y0888cST5pNB/2YCAAD67bPP3pz6ybG532+8/39z/rur8cmh2G/Euf3+Epfn9wnk7wPY8n79x9rzzKfWe7Z9vUZhvYkY9ULdMy3bCevzDba/biGVr9G+nelEvtlCvrlCvuI8BZOF9bMOcwmGDvMT5uvNF5YX52GcLOTICvnv6JALAAAAcsvPPf3s8rnnz9939unHnzz95Olnjh098cCJE0fu/+79y+v39S+33t0PAAAA7EWbN/0OuhIAAAAAAAAAAAAAAAAAAAAYX1V8nNig9xEAAADG3ecXQgirQiQi/4DBHW1nog/bEEMca/XB17An4n9lXxv68e9QCPHVsW8IahBCiF2MYTzvmxuCGsYs1taKnzS/1Q/+s7Zud65AAAAAAOPmyuUXTrW2W6xmfc3X3Fpjo7ka8+bt3H1/W7gW+WqXHmy/XrK/r9Uw7qr++Zd/WPPXO46/+3J/88+Ezd99oafff7X2DZxs6+3rNe9dy79abOYPIdw62WP+4v4/2mvGdocL+e8KveVfe6eQ/7G2Xq3X/HcX8u/vMf+W/X+214zt7on5F2P/8J295m/fxfynNN+PXn8AvlPY/ydCr/kL+9/oMWHBvTE/AIyj5v/maxcGW0if5UcJ+fH0bOzn+xsPN0Px7oftHv/XCtuZ3HHl7dvNj4Nujv2ZZh3teXPbrT//uszF9rqSdRZ1v6tkOKTq79f3cbel6p+quI6yUvVPV1xHWan6O5+9D59U/TMV11FWqv6eL0QMWKr+vXJdOVX/bMV1lJWqf67iOspK1b/d/8cHJVX/gYrrKCtV/3zFdZSVqr/kZbXKpepfqLiOslL1X19xHWWl6r+h4jrKStV/Y8V1DMrXY5s6H87PP+fjWN5vFPr1Dl/Lnv8YAgAAAOyqfw3jPBCrLVcOBl6LGMKYHIIadjfqQ1CD6C1mhqCGUQpfTyGEGFjEKb/WBl3HTsKcxH0O52MjF2b1G2+7+25mAIbVzn7/75V36ZDi///x5vs/3nz/+Sr5X+KzQj830WV8ssv4VJfx6cJ48ee13mX8hsJ219baP8vgxi7jX4t7kBo/0OX1N3cZX+wyfkuX8Vu7jE90GQcAAGA83BRb54cAAAAwul789Uev/fauxy4vfHnx4MkwvWXe+SOxX49/W3819ovz3uem4t/8fxr7v4ztH2L7j8L67j8BAACA3Zd/Toy//wMAAMDoyj+n1Pk/AAAAjK6F2Dr/BwAAgNF1fWyd/wMAAMAIy2Y6L45tfl3gjtj2Oq8fADD8vhHb22J7MLa3x/absc2PA+6M7bcqqg8A6J9ffP9nJ97INuf7P1YYvxKX5+0WqxtXCrJa+0z++2K7P7bf7rGe4ucB9Jo/d6DHPLuVf36H+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0VFbfzx+fDEL4a2P33z459Ov/fXastubaxxaf8xirxFCmGq+Lh/d7P8mrnjl8gunWtursc3C0ZCFrLk8PHKpmWk2hLAaDoVPQiO8v7zyxXtvP3T4g1dmbnr9/FMv7eKXoG3/AAAAYBT9PwAA//8eLSet") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80186e83, &(0x7f0000000080)={@desc={0x200000, 0x0, @desc1}}) 37.480970929s ago: executing program 3 (id=298): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001"], 0xcd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001000000050010008000000005001b00df00000008000700020000000800"], 0x94}}, 0x0) 37.335330306s ago: executing program 3 (id=301): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0xe0, 0xfeff, 0x0}) 37.183003423s ago: executing program 3 (id=304): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@minixdf}, {@stripe={'stripe', 0x3d, 0xb74}}, {@resuid}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$eJzs3c9rHNcdAPDv7lqyJKuV7ZbWdqE2uOD+wLv6QbHU9tJT24Oh1NBLC44irRVHK63QrhxL+CAnNx9yCAkJhBxyz1+QS3yKCYSck3vIITgkjgJJILBhZndlWdLKC5G1RvP5wGhn5q3m+94u36eZNzOaADLrXPIjFzEcER9FxEhz8dE3nGu+bDy4NZNMuWg0rnyZS9+XLLff2v69YxGxHhEDEfGff0Q8m9sZt7a6Nj9dqZSXW8ul+sJSqba6dvH6wvRcea68ODZ5aWpqcnRifKr7xgzuXXzn5efvXH73X/3vfPvS/XuvvP9eUq3hVtnWduynZtP74sSWdUci4m9PIlgPFFrtecxHz1Mq+f5+ERHn0/wfiUL6bQJZ0Gg0Gj80jnYqXm8Ah1Y+3QfO5YsR0ZzP54vF5j78L2MoX6nW6n+6Vl1ZnG3uKx+Pvvy165XyaOtY4Xj05ZLlsXT+4fL4tuWJiHQf+NXCYLpcnKlWZg+2qwO2OdbK/8FW/n9TaOY/kBG7H/J3PCgADhFDfpBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF078n+XG3aBQ+ffly8nU6N9//vsjdWV+eqNi7Pl2nxxYWWmOFNdXirOVatzv84XZ6oLj9tepVpdGvtzrNws1cu1eqm2unZ1obqyWL+a3td/tdx3IK0CunHi7N1Pkr/2638ZTKdEf6tMrsLh1mjkotf3IAO9Ueh1BwT0jKF/yC7H+MDjzvgNdCpY2v+6AAcj3+sKAD1z4bTzf5BVxv8hu4z/Q3bZxweM/0P2GP+H7Bru8Pyvn215dtdoRPw8Ij4u9B1tP+sLOAzyn+ci8sn+/4WR3w1vL+3PfZeeIuiPiBfevPL6zel6fXksWf/V5vr6G631472oP9Ctdp628xgAyK6NB7dm2tNBxv3i782LEHbGP9IamxxIz1EObeQeuVYht0/XLqzfjohTu8XPpWMjI60zH0MbhR3xT7Zec81NpPU9kj43ff/iH98j/ukt8X+7Jf6Zn/ypQDbcTfqf0d3yL5/mdGzm36P9z/A+XTvRuf/Lb/Z/hQ7939kuYzz31oufdYx/O+LMrvHb8QbSWNvjJ3W70F343P3///dXnQobbze3s1v8zQ1ERKm+sFSqra5dTP+P3Fx5cWzy0tTU5OjE+FQpHaMutUeqd/rrqQ/v7dX+oYfxByOiq/Yn6/7QXfvj+9988L9ze8T//fndv/+Te8RPKvrHLuN/Pf7pM53KkvizHT7//B7xk3UTXcavvfZPzxIHgKdIbXVtfrpSKS+bMWPGzOZMr3sm4El7mPS9rgkAAAAAAAAAAADQrc6XAY/s2+XEvW4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBh8GMAAAD//0Gh0nQ=") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 36.631494159s ago: executing program 3 (id=310): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000d00)='nf 127.0.0.1 2\\000\\:000 l\\calhost\n', 0x24) 35.884254925s ago: executing program 3 (id=320): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x1, 0x6eb, &(0x7f0000001240)="$eJzs3c1vHGcdB/DvrNeON1Sp0yY0QkGYRCpIEYkTK4VwwSCEcqhQVQ49W4nTWNkkVeKitELgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmft3fX6LfFLAp9PNJ5n5nnmmd/+5pkZ7zqrCfB/6+q5NB+myNVzbz4ol1dXZturK7NH6up2krLcSJrdWYo7SfEomSvri74pffMNPl688vZnj1c/7y4166lqP7bVdiOMaLtcT5mu+5seueX4TnexXIeXl5Jcq+eDJnba10DDMmln6zkcus6gRjrLu9l8N+ct8Jzp3Z2K7n1zg6nkaJLJ+veA1FeHxsFFuKe+3ivs6ioHAAAAL6hP7x52BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDiqZ7/31pbbHRXJdMpes//n+itq8vPobkdt3y4r3EAAAAAAAAAwMH42pM8yYMcK8vjSTpF9Tf/M1XliXzRSb6U93M/C7mX83mQ+SxlKfdyMclUX0cTD+aXlu5dXNuyNHrLSyO3vHSQrxoAAAAAAAAA/uf8Mq3u3/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5USRj3Vk1najnmUqjmfW6LCf/TDJx2PHuQjFq5cODjwMAAACeyeRTbPPykzzJgxzrLXeK6j3/l6v3y5N5P3eylMUspZ2FXK/fQ5fv+hurK7Pt1ZXZ2+VULg/2+/1/7yqMibqHsWpp1J5PVS1auZHFas35XKuCuZ5Gd99nk1O9ePri6vNRGVPxvdoOI2vWaS139vvNPkXYE4MfRTS2aNlaDy5Zy8hMHVu55fFuBorqg5pkOBPDR2fDzpoDS1NVk/G1PV1MY+2TnxP7kPOj9bx8Pb/Z15zvRH8u1jLRSJWJS73RV54zW2ci+cZf//TOzfadWzdv3D93uC9pF8Y2WT88Jmb7MvHaC52J5i7bz1SZOLm2fDU/yk9yLtN5K/eymJ9mPktZSKeun6/Hc/lzautMzQ0svbVdJBP1cekes53ENJ0fVqX5nKm2PZbFFLmb61nIG9W/S7mYb+dyLudK3xE+uWnc1WurzvrG8FnfO9J/Gxn82W/WhfLq9tv1q9zcVq94s9G5V7rX/jKvx/vy2h31j9daHe87D2b6svRKLzvjIzt/mmtj8yt1odzHr7a5TxysqToT5QnUu0v0onu1m4lmdS/aOM7/0Cm3S/tOp3Nz/r1N+l8eWn69npfDauWr27XuGX0o9lY5Xl7JZH0lGRwdZd2ra1eZvrrO+lju1g3eccvtTlZ1RdE7U3+cu9UA2HimTtS/w23s6VJV99pQ3en6Gl7WneqrG/h9K3fTzvUDyB8AT+Mf76wVp3J0ovWv1qetT1q/bt1svTn5gyPfOXJ6IuN/H/9uc2bs9cbp4i/5JD9ff/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vfsffHhrvt1euDe60Ni8aqDQyvCa7XoeKhT1A31GtblVP6VgVx0ecmEyycCa6jlHBx5GaziMDYXOL5IDz0/vIYKj2/yuLDR3dLjnBtb8eWOHH20fz1iGxuEOzot9LDSyLz13Xt5kJIxl9AA4rCsScFAuLN1+78L9Dz781uLt+XcX3l24M3758pWZK5ffmL1wY7G9MNP9edhRAvth/aZ/2JEAAAAAAAAAAAAAOzXqqwJnXtruSyMbCo0kw9/x8D8LAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD1x9VyaD1Pk4sz5mXJ5dWW2XU698nrLZpJGIyl+lhSPkrl0p0z1dVfkj4/SGbGfjxevvP3Z49XP1/tqdtsnjXq+ua1rkyzXU6aTjNXzZzDQ37Vn7q/4T+81lAn7otPpzD1bfLA3/hsAAP//ShfsxA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x149842, 0x42) llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 35.605433808s ago: executing program 32 (id=320): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x1, 0x6eb, &(0x7f0000001240)="$eJzs3c1vHGcdB/DvrNeON1Sp0yY0QkGYRCpIEYkTK4VwwSCEcqhQVQ49W4nTWNkkVeKitELgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmft3fX6LfFLAp9PNJ5n5nnmmd/+5pkZ7zqrCfB/6+q5NB+myNVzbz4ol1dXZturK7NH6up2krLcSJrdWYo7SfEomSvri74pffMNPl688vZnj1c/7y4166lqP7bVdiOMaLtcT5mu+5seueX4TnexXIeXl5Jcq+eDJnba10DDMmln6zkcus6gRjrLu9l8N+ct8Jzp3Z2K7n1zg6nkaJLJ+veA1FeHxsFFuKe+3ivs6ioHAAAAL6hP7x52BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDiqZ7/31pbbHRXJdMpes//n+itq8vPobkdt3y4r3EAAAAAAAAAwMH42pM8yYMcK8vjSTpF9Tf/M1XliXzRSb6U93M/C7mX83mQ+SxlKfdyMclUX0cTD+aXlu5dXNuyNHrLSyO3vHSQrxoAAAAAAAAA/uf8Mq3u3/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5USRj3Vk1najnmUqjmfW6LCf/TDJx2PHuQjFq5cODjwMAAACeyeRTbPPykzzJgxzrLXeK6j3/l6v3y5N5P3eylMUspZ2FXK/fQ5fv+hurK7Pt1ZXZ2+VULg/2+/1/7yqMibqHsWpp1J5PVS1auZHFas35XKuCuZ5Gd99nk1O9ePri6vNRGVPxvdoOI2vWaS139vvNPkXYE4MfRTS2aNlaDy5Zy8hMHVu55fFuBorqg5pkOBPDR2fDzpoDS1NVk/G1PV1MY+2TnxP7kPOj9bx8Pb/Z15zvRH8u1jLRSJWJS73RV54zW2ci+cZf//TOzfadWzdv3D93uC9pF8Y2WT88Jmb7MvHaC52J5i7bz1SZOLm2fDU/yk9yLtN5K/eymJ9mPktZSKeun6/Hc/lzautMzQ0svbVdJBP1cekes53ENJ0fVqX5nKm2PZbFFLmb61nIG9W/S7mYb+dyLudK3xE+uWnc1WurzvrG8FnfO9J/Gxn82W/WhfLq9tv1q9zcVq94s9G5V7rX/jKvx/vy2h31j9daHe87D2b6svRKLzvjIzt/mmtj8yt1odzHr7a5TxysqToT5QnUu0v0onu1m4lmdS/aOM7/0Cm3S/tOp3Nz/r1N+l8eWn69npfDauWr27XuGX0o9lY5Xl7JZH0lGRwdZd2ra1eZvrrO+lju1g3eccvtTlZ1RdE7U3+cu9UA2HimTtS/w23s6VJV99pQ3en6Gl7WneqrG/h9K3fTzvUDyB8AT+Mf76wVp3J0ovWv1qetT1q/bt1svTn5gyPfOXJ6IuN/H/9uc2bs9cbp4i/5JD9ff/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vfsffHhrvt1euDe60Ni8aqDQyvCa7XoeKhT1A31GtblVP6VgVx0ecmEyycCa6jlHBx5GaziMDYXOL5IDz0/vIYKj2/yuLDR3dLjnBtb8eWOHH20fz1iGxuEOzot9LDSyLz13Xt5kJIxl9AA4rCsScFAuLN1+78L9Dz781uLt+XcX3l24M3758pWZK5ffmL1wY7G9MNP9edhRAvth/aZ/2JEAAAAAAAAAAAAAOzXqqwJnXtruSyMbCo0kw9/x8D8LAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD1x9VyaD1Pk4sz5mXJ5dWW2XU698nrLZpJGIyl+lhSPkrl0p0z1dVfkj4/SGbGfjxevvP3Z49XP1/tqdtsnjXq+ua1rkyzXU6aTjNXzZzDQ37Vn7q/4T+81lAn7otPpzD1bfLA3/hsAAP//ShfsxA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x149842, 0x42) llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 5.904631573s ago: executing program 4 (id=736): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e000000200000000000000000000000000000000000000000000000000000000000000de00000000020020006200"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000ff0200000000000000000000000000010000000000000000020010", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000006c0000000000000bc63184000000000000000000000000000000fdffffffffffffff0000000000000002000000000000000000000000c06b6e00"/116], 0xb8}, 0x1, 0x0, 0x0, 0x24004811}, 0x2c000010) 5.706654622s ago: executing program 4 (id=740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffe0}, {0xffff, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x7, [0x0, 0x1, 0x6, 0x9, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0xe, 0x0, 0x4], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0xf21d]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0) 5.502674492s ago: executing program 4 (id=743): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1ff) 4.826414373s ago: executing program 4 (id=747): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="67727071756f74612c646973636172642c696f636861727365743d63703836362c6572726f72733d636f6e74696e75652c696f636861727365743d6575632d6a702c75737271756f74612c6572726f72733d636f6e74696e75652c6e6f71756f74612c696e746567726974792c00f131f25105cba36253eb2d9e2b27575db3fdcb68dc71d8dc4dd8c3e0124649016264f4b3440455a5f90f59676481654fdb0f8957cf46066ddd2a7856bd69366970901d6639ec3f1cc6ab2c20d6ea2bfd1b8ea2608abaf94039f6e1f8c90aac21bf20a1f877f904db7380e7dffea078b8b29c76f648f348df048a3bf3201e410e35e2e28b22e27762c73146ff94177eb6fa15b25527bb2a6041b3b22d0dbf5aa71910cfc11e403f"], 0x21, 0x6224, &(0x7f0000002080)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.281502906s ago: executing program 4 (id=773): syz_mount_image$gfs2(&(0x7f0000000040), &(0x7f0000005f80)='./file0\x00', 0x14010, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1, 0x12588, &(0x7f0000024ac0)="$eJzs/Xv8cHO9Lvze43yXc0ghkkNFKHIq5FxRhETOUQ6hSAchEUpUpFJCOZSQCikkOYUUoiSRyDmJkkjIfq1nXveaY69nPHM8e6299h6vvd/vP+ZnrHvynf5Yva7r+oV7BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyYMaN44Yv3/m+n90vv/o/TPW/GjG7P//ie+7/9j9l7f0z5H2fmi/4vns0f+7wl9nz/znvs8L73/7fzP/XXt+9H93/dvh/d/3/qz/2/4zUr7b3hea/d+Jjzqhdc8dS66x/4v+3/EAAAAPx/UfZ/2fuln/0Pf0g1Y8bM5/8Pv/aCGTNmzpwxoyyP+M0n5v9f+b+/5Rb8/7V//K/8/x4AAAD+78r+r3u/ckz/f537ghkzDjn4//Tr//1XZrb/7X/ufODfHh+6PQvkj1/gP3+p/D99/G80b+58ubN+dvHC/+e/PgAAAPj/Ldn/Te9X+pt91t/f/+LcBXMXyl049yW5i+QumvvS3MVyX5a7eO4SuUvmLpX78txX5L4yd+ncZXJflbts7nK5y/8Pf/5rclfIXTH3tbkr5a6cu0ruqrmr5b4u9/W5q+eukbtm7hty18pdO3ed3HVz18tdP3eD3Dfmvin3zbkb5m6U+5bct+ZunLtJ7ttyN83dLHfz3LfnbpH7jtwtc7fKfWfu1rnb5G6bu13u9rk75O6Y+67cnXJ3zs0/azLjPbm75O6au1vu7rnvzZ31D5Pkn0+ZsVfu+3Lfn7t37j65H8jdN/eDuR/K/XDuR3L3y/1o7qx/EOWA3Fn/vMjHcg/K/XjurJ+QHZL7idxDcw/LPTz3k7mfyj0i99O5R+YelfuZ3M/mfi736NxZP8v7fO6xuV/I/WLul3KPy/1y7ldyj8/9au4JuSfmnpT7tdyv556ce0ruqbmn5X4j95u5p+d+K/eM3DNzz8r9du7Zud/J/W7u93LPyT0397zc7+een/uD3B/mXpB7Ye5FuT/KvTj3x7mX5P4k99Lcy3Ivz70i98rcn+ZelXt17jW5s/5erGtzf577i9zrcq/PvSH3l7k35t6U+6vcX+fenPub3Ftyf5t7a+7vcm/LvT3397l35P4h987cu3L/mHt37j259+bel3t/7gO5D+b+Kfeh3D/nPpz7l9xHch/N/Wvu33Ify/177qysm/V3IT2R+2TuP3Ofyv1X7tO5z+Q+m/vv3Of+48z68XmRjyI/4y6q3PzcvUj+Fm1ulzsz93m5+fvwitly88/ZFXPkzpk7V+7cufPkviA3Pwcv8nPwIj8HL/Jz8CI/By+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S30Xyv0j+F8n/IvlfJP+L5H+R/C9enZv8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/4vkf5H8L5L/RfK/SP4Xyf8i+V8k/2f9d3lF8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/1lbt0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/Ivk/67/SLpP/ZX6hTP6Xyf8y+V8m/8vkf5n8L5P/ZfK/TP6Xyf8y+V8m/8vkf5n8L5P/ZfK/TP6X8/3X+79MLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMhlYpheU6QVlekGZXlCmF5TpBWV6QZleUKYXlOkFZXpB4n9GlV5QpRdU+V9U6QVVcrlKL6jSC6r0giq9oEovqNILqvSCKr2gSi+o0guq9IIqvaBKL6jSC6r8XKBK/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5P+tvt6+T/3Xyv07+1/kD6uR/nfyvk/918r9O/tfJ/zr5Xyf/6+R/nfyvk/918r+e57/e/3V6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlAnG+v0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL5gVw016QZNe0KQXNOkFTf7AJr2gSS9o0gua9IImvaBJL2jSC5r0gia9oEkvaNILmvxcoEn+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G8O/o//4DfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8j9xPqNN/rfJ/zb53yb/2+R/mz+hTf63yf82+d8m/9vkf5v8b5P/7Zz/9f5v0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r8XKBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva/6MX/Oe/eKNNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNpn53/M7vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9IvM/o0gu6/Ee2Sy/o0gu65HiXv5Auf2KXXtClF3TpBV16QZde0KUXdPm5QJf875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf/uP/J/1t8WMaNL/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvZv2eVcn/LvnfJf+75H+X/O+S/13yf9bvc9Ul/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53+blAl58LdMn/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d/m5QJf875L/XfK/S/53yf8u+d8l/7vkf5f875L/ie8ZM5P/M2f9/ntJzJnJ/5nJ/5nJ/5nJ/5l5YGbyf9a/z3/mbP/1/p+ZXjAzvWBmesHM9IKZ6QUz0wtmphfMTC+YmV4wM71gZnrBTP+ePQAAAPj/oOz/mf/5K7P+2bz/wzkH/+e/xGjG48+/aIuz57roxoFnZv17Al/wv/EvFQAAAPifNLL/z+3t/2Lj67Y5fe8btvrAwDOzfn8A+x8AAAAmaGT/n9fb/+XWT+z/2Nw7zv6egWdm/b6A9j8AAABM0Mj+/35v/1d3vforxXWn/OWagWfy7/Gx/wEAAGCKRvb/+b39X3/gE6tufdPq39ho4Jn8+/vtfwAAAJiikf3/g97+b3623m1nzvHs+n8aeCa/b5/9DwAAAFM0sv9/2Nv/7e8PevrZvTaf598Dz+T367X/AQAAYIpG9v8Fvf3f7XLhi+c899i/bjvwzKK59j8AAABM0Mj+v7C3/2e+7L2XPH+t+/5xzsAzs/4c+x8AAAAmaGT/X9Tb/8/7ytk7PHXiEvMNbfzFcu1/AAAAmKCR/f+j3v5//meOO+g7zxy5VjPwzMty7X8AAACYoJH9f3Fv/8+28ttO3P6lG53yrYFnFs+1/wEAAGCCRvb/j3v7f/Zv3L16s8YtDy4z8MwSufY/AAAATNDI/r+kt//nWGSJPzzxxwWe9+mBZ5bMtf8BAABggkb2/096+3/O5y/y3KmHXLTd1waeWSrX/gcAAIAJGtn/l/b2/1zn3PqSTbfb78erDzzz8lz7HwAAACZoZP9f1tv/c/91+7u+8aNDb/jkwDOvyLX/AQAAYIJG9v/lvf0/z4ZfKbfcZZ3llxh45pW59j8AAABM0Mj+v6K3/1+w/e8Wr9qHD1hx4JmlZ/0x/zv/WgEAAID/OSP7/8re/p/33ndf/tfblv3q5weemfV7Atr/AAAAMEEj+/+nvf0/34dvede3rznn1y8ZeOZVufY/AAAATNDI/r+qt//nv27uQ7daaJ8VLh14Ztlc+x8AAAAmaGT/X93b/y+8delTZz/gzl3OGHhmuVz7HwAAACZoZP9f09v/C+z08FrPfWuRTz3/P/6fbzls2w3/+x+3fK79DwAAABM0sv9/1tv/L1pqzXufPveqfyw78Myrc+1/AAAAmKCR/X9tb/+/+MR/tjP3quc7euCZ1+Ta/wAAADBBI/v/5739v+ARV7x82znOWusrA8+skGv/AwAAwASN7P9f9Pb/QivUV33vpj1Oed3AMyvm2v8AAAAwQSP7/7re/l/45B++5/HrnnjwhwPPvDbX/gcAAIAJGtn/1/f2/0sW3PtT3dyrPG++gWdWyrX/AQAAYIJG9v8Nvf2/yJwbnr753sdvVw08s3Ku/Q8AAAATNLL/f9nb/4ue/5n1Tj57qx+fMvDMKrn2PwAAAEzQyP6/sbf/X7rBcpfvsNFpNyw08MyqufY/AAAATNDI/r+pt/8Xe+bBxc/+8k7LXzTwzGq59j8AAABM0Mj+/1Vv/7/swV+V/3zyugO+O/DMrN8T0P4HAACACRrZ/7/u7f/FN5vvrtmWmeOrsw888/pc+x8AAAAmaGT/39zb/0tcdvpab1v5mF8fPPDM6rn2PwAAAEzQyP7/TW//L7n/jqee9tCmK7xs4Jk1cu1/AAAAmKCR/X9Lb/8v9b6tD33yyOd2WWngmTVz7X8AAACYoJH9/9ve/n/5zSe+q37Hmp/68sAzb8i1/wEAAGCCRvb/rb39/4pjNr5qxl7PLrTwwDNr5dr/AAAAMEEj+/93vf3/yqWPePnfz139Xz8ZeGbtXPsfAAAAJmhk/9/W2/9Lr3le+62bjv3umQPPrJNr/wMAAMAEjez/23v7f5nDPnjv2+fYfJPZBp5ZN9f+BwAAgAka2f+/7+3/V73w6vXmmvuG9lMDz6yXa/8DAADABI3s/zt6+3/Zs2ec/sx1cz2w5MAz6+fa/wAAADBBI/v/D739v9yFr/vUGWef8v0VBp7ZINf+BwAAgAka2f939vb/8uUz79lm7x03O2bgmTfm2v8AAAAwQSP7/67e/n/1oqs/u/WXT3jp0gPPvCnX/gcAAIAJGtn/f+zt/9d881+LnrnR1pcfMfDMm3PtfwAAAJigkf1/d2//r3DuZWs+u8zjX/r6wDMb5tr/AAAAMEEj+/+e3v5fcbb293M+udIH1xh4ZqNc+x8AAAAmaGT/39vb/689/vwDt3jojDXOHXjmLbn2PwAAAEzQyP6/r7f/V1r8A187feXdfz/vwDNvzbX/AQAAYIJG9v/9vf2/8ipvuvSxd1xzRD3wzMa59j8AAABM0Mj+f6C3/1f57Oe2K45sdz994JlNcu1/AAAAmKCR/f9gb/+veu22TzUn3rHQIQPPvC3X/gcAAIAJGtn/f+rt/9X2/epCT6y18L8WH3hm01z7HwAAACZoZP8/1Nv/r9v15Ned+tLzvvvagWc2y7X/AQAAYIJG9v+fe/v/9Xfscuumz+y7yXEDz2yea/8DAADABI3s/4d7+3/1TW7e7/l/fKRdcOCZt+fa/wAAADBBI/v/L739v8Y/XvDVp9ZY/oELB57ZItf+BwAAgAka2f+P9Pb/mn98xcXf2e6Q739v4Jl35Nr/AAAAMEEj+//R3v5/wzaPvHP7Q9babI6BZ7bMtf8BAABggkb2/197+3+tv1162IO7XPzSCwae2SrX/gcAAIAJGtn/f+vt/7U3+uguC/1o/8vnH3jmnbn2PwAAAEzQyP5/rLf/19lh3TductvNXyoHntk61/4HAACACRrZ/3/v7f917zv8mz9u5//gyQPPbJNr/wMAAMAEjez/x3v7f72PrNI8sNARa7xq4Jltc+1/AAAAmKCR/f+P3v5f//q/PTDfNW/+/ecGntku1/4HAACACRrZ/0/09v8Gv/vF1Wt964Ejjh94Zvtc+x8AAAAmaGT/P9nb/2/ceY4lvn/AUru/fuCZHXLtfwAAAJigkf3/z97+f9PL7zz4giM33fO3A8/smGv/AwAAwASN7P+nevv/zSe9eKf13nHMZz808My7cu1/AAAAmKCR/f+v3v7f8NOLrzv3ymv+bqeBZ2b9mv0PAAAAEzSy/5/u7f+NVrzvlHseem7Vywae2TnX/gcAAIAJGtn/z/T2/1tO2bK48Mmd9nnLwDPvzrX/AQAAYIJG9v+zvf3/1oU+f89Gy5x2zCMDz7wn1/4HAACACRrZ///u7f+N5/r2FYtuNMdPnxp4Zpdc+x8AAAAmaGT/P9fb/5v8YK+XPvzl65bcZuCZXXPtfwAAAJig/3r/FzN6+/9tJ6908tx7r7LlHwee2S3X/gcAAIAJGtn/RW//b7rg39e55+wnfrjuwDO759r/AAAAMEEj+7/s7f/N5rx25wuu2+rutw88895c+x8AAAAmaGT/V739v/n5cx2y3tzHV08MPLNHrv0PAAAAEzSy/+ve/n/7Upcstugc9Yb7DzyzZ679DwAAABM0sv+b3v7f4sQDrnz4pqu+fevAM3vl2v8AAAAwQSP7v+3t/3ccsfbdF567x3O/HHjmfbn2PwAAAEzQyP7vevt/yxU+NWOjvc5aZK+BZ96fa/8DAADABI3s/5m9/b/Vh7f4xiYH7LPnhgPP7J1r/wMAAMAEjez/5/X2/zuv+8IGP/7WOZ99cOCZfXLtfwAAAJigkf3//N7+3/rWM3d98JpFfvfcwDMfyLX/AQAAYIJG9v9svf2/zU7vP3yhhe5cdbuBZ/bNtf8BAABggkb2/+y9/b/tX+9Ycq12nX1uGnjmg7n2PwAAAEzQyP6fo7f/t9twoWu+f9uhx+w78MyHcu1/AAAAmKCR/T9nb/9vv/1i9z/wo2V/+u6BZz6ca/8DAADABI3s/7l6+3+Hex+o59vl4SWvHnjmI7n2PwAAAEzQyP6fu7f/d3zh+of8+ZAFtjxw4Jn9cu1/AAAAmKCR/T9Pb/+/6+xDd37Rdrf88A8Dz3w01/4HAACACRrZ/y/o7f+dLrxonbessd/d1w48s3+u/Q8AAAATNLL/5+3t/53Lj5986R8vqvYYeOaAXPsfAAAAJmhk/8/X2//vPub6Gfc+s8SGDww8M+vfCWD/AwAAwASN7P/5e/v/PUvPdvcCL73v2+sPPPOxXPsfAAAAJmhk/7+wt/93WfM1V6671kbPbTbwzEG59j8AAABM0Mj+X6C3/3c97MnFzjnxyEX+OvDMx3PtfwAAAJigkf3/ot7+3+2yJQ8/f5Xrrl5v4JmDc+1/AAAAmKCR/f/i3v7fff97dn3jn+d4+f0DzxySa/8DAADABI3s/wV7+/+97/vdBvMeddq+fxt45hO59j8AAABM0Mj+X6i3//e4edFv3LXlTsduPvDMobn2PwAAAEzQyP5fuLf/99zgO/XFGz53+50DzxyWa/8DAADABI3s/5f09v9ez+xx/5uOW/N1Hxt45vBc+x8AAAAmaGT/L9Lb/+97cNNrFn7imPe9d+CZT+ba/wAAADBBI/t/0d7+f/9mX17y0aU3PfpnA898Ktf+BwAAgAka2f8v7e3/vTfZ8pJHrj/r2Q8MPHNErv0PAAAAEzSy/xfr7f99/vH5HV4yzx4L3zjwzKdz7X8AAACYoJH9/7Le/v/AH7990Jv3uepN1ww8c2Su/Q8AAAATNLL/F+/t/3232evEH32nPvM9A88clWv/AwAAwASN7P8levv/g9feufofzzn+rj8NPPOZXPsfAAAAJmhk/y/Z2/8f2vfFf3jBnlsVGw0889lc+x8AAAAmaGT/L9Xb/x/edfHnNpj9iS22HXjmc7n2PwAAAEzQyP5/eW//f+SO+17ygxtXOf/fA88cnWv/AwAAwASN7P9X9Pb/fsevctG5Vz989e8Gnjkm1/4HAACACRrZ/6/s7f+PLv63bdZZcNmXHzDwzOdz7X8AAACYoJH9v3Rv/++/yi/2f+H+h+6758Azx+ba/wAAADBBI/t/md7+P+Czc3zlvtPXOfaGgWe+kGv/AwAAwASN7P9X9fb/gYteuupPLr7z9nUGnvlirv0PAAAAEzSy/5ft7f+PffOjt71110Ved9fAM1/Ktf8BAABggkb2/3K9/X/Ques+/eLunPc9OfDMcbn2PwAAAEzQyP5fvrf/Pz7b4S9+6PZ9jt5i4Jkv59r/AAAAMEEj+//Vvf1/8NwrfPCG1Y989tGBZ76Sa/8DAADABI3s/9f09v8hZz1+3Bp3bbTwWweeOT7X/gcAAIAJGtn/K/T2/yd+csMFux9835u2Hnjmq7n2PwAAAEzQyP5fsbf/D61nbvHVbZc4858Dz5yQa/8DAADABI3s/9f29v9hx/3oH5evfdFdHxx45sRc+x8AAAAmaGT/r9Tb/4e/6sAFVjhpv+KWgWdOyrX/AQAAYIJG9v/Kvf3/yVU3WHmXZ2/Z4vKBZ76Wa/8DAADABI3s/1V6+/9Tnzj45i8ttsD5Ow888/Vc+x8AAAAmaGT/r9rb/0dcvdnen79xx3OPHnjm5Fz7HwAAACZoZP+v1tv/nz7wi8fuNPspb1t24JlTcu1/AAAAmKCR/f+63v4/crfvfn/lPeeqXzfwzKm59j8AAABM0Mj+f31v/x/1q902veqcG+77ysAzp+Xa/wAAADBBI/t/9d7+/8xat/3ta9/Z/Oz5Bp75Rq79DwAAABM0sv/X6O3/z/5r4Xn32ufYt/5w4Jlv5tr/AAAAMEEj+3/N3v7/3CNLrbDaPKu/+JSBZ07Ptf8BAABggkb2/xt6+//ot99148+vf/af1cAz38q1/wEAAGCCRvb/Wr39f8x8uyz7hqXbIy8aeOaMXPsfAAAAJmhk/6/d2/+f/+7Jv7zuiWv2WGjgmTNz7X8AAACYoJH9v05v/x/7o68+8pXjdn/D7APPnJVr/wMAAMAEjez/dXv7/wsztp19jw3P+MN3B575dq79DwAAABM0sv/X6+3/Lx77yNmv3nKlL79s4Jmzc+1/AAAAmKCR/b9+b/9/6RWv2PjKox7/8MEDz3wn1/4HAACACRrZ/xv09v9xq7/g/V/+89Yv+/LAM7P+mQD7HwAAACZoZP+/sbf/v/zJmz/77lVOuHKlgWe+l2v/AwAAwASN7P839fb/V65oX7njYmudO7Txz8m1/wEAAGCCRvb/m3v7//j9LvvFF5495G3nDDxzbq79DwAAABM0sv837O3/r+75r4euOWn5+lsDz5yXa/8DAADABI3s/416+/+EW1af+dq1H7mvGXjm+7n2PwAAAEzQyP5/S2//n7je5854/7b7nv3pgWfOz7X/AQAAYIJG9v9be/v/pH+/acMTDz7vrcsMPPODXPsfAAAAJmhk/2/c2/9fe+gDe/zsroVfvPrAMz/Mtf8BAABggkb2/ya9/f/1t53/6devfsc/vzbwzAW59j8AAABM0Mj+f1tv/5986gtn/+ntSx25xMAzF+ba/wAAADBBI/t/097+P+VFNz6ySvfAHp8ceOaiXPsfAAAAJmhk/2/W2/+nzv7QL3fe9c1v+PzAMz/Ktf8BAABggkb2/+a9/X/aD1+17DEXH/GHFQeeuTjX/gcAAIAJGtn/b+/t/28s8bXP/uL0+b986cAzP861/wEAAGCCRvb/Fr39/82vbfX+Vfe/+cMvGXjmklz7HwAAACZoZP+/o7f/Tz9yp433XHD/lz1/4Jmf5Nr/AAAAMEEj+3/L3v7/1qu/cfbXr774yjMGnpn1zwTY/wAAADBBI/t/q97+P+ODH555wrP77bD4wDOX5dr/AAAAMEEj+/+dvf1/5g3nPLTbYhf95JCBZy7Ptf8BAABggkb2/9a9/X/WbUf+YvW1F3jouIFnrsi1/wEAAGCCRvb/Nr39/+0d3/LKX550y2yvHXjmylz7HwAAACZoZP9v29v/Zz/2709/8eCN1rlw4Jmf5tr/AAAAMEEj+3+73v7/zptW3WPXbY88bcGBZ67Ktf8BAABggkb2//a9/f/dbcsNV1x9iSfnGHjm6lz7HwAAACZoZP/v0Nv/37v/p2dcdtd9L/zewDPX5Nr/AAAAMEEj+3/H3v4/5+n61Zd3i7x7/oFnfpZr/wMAAMAEjez/d/X2/7lrX/GrFW6/8/ALBp65Ntf+BwAAgAka2f879fb/eVv88++7XLzPTScPPPPzXPsfAAAAJmhk/+/c2//ff3TNeb606zmvLgee+UWu/Q8AAAATNLL/393b/+d/7DPn3rD/sh/93MAz1+Xa/wAAADBBI/v/Pb39/4NrNtx8jdMf/sqrBp65Ptf+BwAAgAka2f+79Pb/D3+99wd2v3qd614/8MwNufY/AAAATNDI/t+1t/8v2P2Hx3x1wUOXPX7gmV/m2v8AAAAwQSP7f7fe/r9w2Xe/9muzb7XDTwaeuTHX/gcAAIAJGtn/u/f2/0VfPvWWvW48/icLDzxzU679DwAAABM0sv/f29v/Pzr0K0+uds4qD8028Myvcu1/AAAAmKCR/b9Hb/9fvNr28/98zydmO3PgmV/n2v8AAAAwQSP7f8/e/v/xtx/+wef32WOdJQeeuTnX/gcAAIAJGtn/e/X2/yXzLL3lTt8567RPDTzzm1z7HwAAACZoZP+/r7f/f9LM/eGVr6+fPGbgmVty7X8AAACYoJH9//7e/r/00lu+eNU8V71whYFnfptr/wMAAMAEjez/vXv7/7L5P/XmfZ9Y891HDDxza679DwAAABM0sv/36e3/y7+39rcPXvq5w5ceeOZ3ufY/AAAATNDI/v9Ab/9fcfEBR9684aY3rTHwzG259j8AAABM0Mj+37e3/68sLtnt5ccd8+qvDzxze679DwAAABM0sv8/2Nv/P/3CXD878Kg5PjrvwDO/z7X/AQAAYIJG9v+Hevv/qldeu/TRW173lXMHnrkj1/4HAACACRrZ/x/u7f+r1/j7bLevstN1pw8884dc+x8AAAAmaGT/f6S3/6/51Ep/esWfT1u2Hnjmzlz7HwAAACZoZP/v19v/P7vygbe+asGbX/HgwDN35dr/AAAAMEEj+/+jvf1/7UcX+96dV89/7YYDz/wx1/4HAACACRrZ//v39v/P91roc0edfvFJ2w08c3eu/Q8AAAATNLL/D+jt/1/89o4999t//wOfG3jmnlz7HwAAACZoZP8f2Nv/163//usW3/WBlfYdeObeXPsfAAAAJmhk/3+st/+vf+7M5W68eKmbbxp45r5c+x8AAAAmaGT/H9Tb/zf8+QtzHXb7EQdfPfDM/bn2PwAAAEzQyP7/eG///3LTLf7yke7N73r3wDMP5Nr/AAAAMEEj+//g3v6/8ds73P7eu86b9w8DzzyYa/8DAADABI3s/0N6+/+meY5f7fjV933swIFn/pRr/wMAAMAEjez/T/T2/6+a0150/bZ3nL7HwDMP5dr/AAAAMEEj+//Q3v7/9aXv+deaBy/8xmsHnvlzrv0PAAAAEzSy/w/r7f+bl/3t1u856ZA51x945uFc+x8AAAAmaGT/H97b/7/58jwXHrf2Wo8+MPDMX3LtfwAAAJigkf3/yd7+v+XQZY6/YrFHLv7rwDOP5Nr/AAAAMEEj+/9Tvf3/29X+csBrnl1+680Gnnk01/4HAACACRrZ/0f09v+tH3vDnSv9+fFXfGjgmVl/T4D9DwAAABM0sv8/3dv/v7vmqTWuXmWla3878Mzfcu1/AAAAmKCR/X9kb//f9usrFz52yxNOumzgmcdy7X8AAACYoJH9f1Rv/9++e/Pvdx219YE7DTzz91z7HwAAACZoZP9/prf/f//0Bdu/7rhrVnpk4JnHc+1/AAAAmKCR/f/Z3v6/Y+19fnzthu3Nbxl45h+59j8AAABM0Mj+/1xv//9hi41OOmnpMw7eZuCZJ3LtfwAAAJigkf1/dG//3/noZz/+vid2f9dTA888mWv/AwAAwASN7P9jevv/rpcs/6/Pz3PsvOsOPPPPXPsfAAAAJmhk/3++t///+K0/vWin6zd/7I8Dz8z6ewLsfwAAAJigkf1/bG//3/39X6+28neePf2JgWf+lWv/AwAAwASN7P8v9Pb/Pc+b//ar9ln9jW8feObpXPsfAAAAJmhk/3+xt//vPeFbB3xtz1PmvHXgmWdy7X8AAACYoJH9/6Xe/r9vsXcdv9c5Oz66/8Azz+ba/wAAADBBI/v/uN7+v3+lbS5c7cYbLt5r4Jl/59r/AAAAMEEj+//Lvf3/wNEnbf3z2efa+pcDzzyXa/8DAADABI3s/6/09v+Dv9jk3zfce98nfzHwyqwP+x8AAAAmaGT/H9/b/3/a59MLr7HqErvuPvDKrD/G/gcAAIAJGtn/X+3t/4fe8/01dt/qyBUPGnilzIf9DwAAABM0sv9P6O3/P9/5oTu/ethGv/r9wCtVPux/AAAAmKCR/X9ib/8//NZrPn758bec8LaBV+p82P8AAAAwQSP7/6Te/v/Lk8VJK6y/wP6PDbzS5MP+BwAAgAka2f9f6+3/R+55/Y93WfKi5e4beKXNh/0PAAAAEzSy/7/e2/+PvvPZ7b/01H6/fOPAK10+7H8AAACYoJH9f3Jv//91vTWu/uIih17y7MArs/58+x8AAAAmaGT/n9Lb/3/799NL7HrFOtvuMPDK8/Jh/wMAAMAEjez/U3v7/7GHLm9WPPXhmW8aeOX5+bD/AQAAYIJG9v9pvf3/97d1D1x20LJ/emjgldnyYf8DAADABI3s/2/09v/jV/zgjSfsfM7Juwy8Mns+7H8AAACYoJH9/83e/v/Hfvt+c7dL91n7pwOvzJEP+x8AAAAmaGT/n97b/0/s+ebDVr/zzvl/PfDKnPmw/wEAAGCCRvb/t3r7/8lbjt7ll9Uij+8z8Mpc+bD/AQAAYIJG9v8Zvf3/z2O3u+IX81/1yXcMvDJ3Pux/AAAAmKCR/X9mb/8/9YoTXrrqtfWujw+8Mk8+7H8AAACYoJH9f1Zv//9r9VOKPc88a8V7Bl6ZtfvtfwAAAJigkf3/7d7+f/qTu97z9Q/t8au1B16ZNx/2PwAAAEzQyP4/u7f/n5nvN+v+dLcnTrh+4JX58mH/AwAAwASN7P/v9Pb/s9+d95RVzl9l//cPvDJ/Pux/AAAAmKCR/f/d3v7/949eefDONx+/3H5Dr+TD/gcAAIAJGtn/3+vt/+dmPLrTMTO3+uVtA68skA/7HwAAACZoZP+f85/7v5hxY/37eR497ZIdB155UT7sfwAAAJigkf1/bm//F++9Ys27V9xp2ysGXnlxPux/AAAAmKCR/X9eb/+XB/1z0R9uft3M3wy8smA+7H8AAACYoJH9//3e/q9+uuaz6x89x58+MvDKQvmw/wEAAGCCRvb/+b39X7/jM9stcuwxJz898MrC+bD/AQAAYIJG9v8Pevu/eXjDS/+y8aZrv3PglZfkw/4HAACACRrZ/z/s7f/2n3t/7aLlnpt/44FXFsmH/Q8AAAATNLL/L+jt/26dHx644WNrPv7wwCuL5sP+BwAAgAka2f8X9vb/zHbG3P9Xr8z6c+x/AAAAmKCR/X9Rb/8/78envu6SO4+Y+9SBVxbLh/0PAAAAEzSy/3/U2//PP+MrC/3p0qXW+8HAKy/Lh/0PAAAAEzSy/y/u7f/ZXrD9Uwvu/MA3Fxh4ZfF82P8AAAAwQSP7/8e9/T/7wQ+/c+2D9n/4hIFXlsiH/Q8AAAATNLL/L+nt/zlet/TF55168RyrDbyyZD7sfwAAAJigkf3/k97+n3O5ub96/xXzv3O5gVeWyof9DwAAABM0sv8v7e3/ub54y37zL3LzhZ8ZeOXl+bD/AQAAYIJG9v9lvf0/981vO/yup5b/+coDr7wiH/Y/AAAATNDI/r+8t//ned9xu8675CPLfHHglVfmw/4HAACACRrZ/1f09v8L9j97gzeuv9bHDx14Zel82P8AAAAwQSP7/8re/p/3svd+4/zjD/naYgOvLJMP+x8AAAAmaGT//7S3/+fb7Nb60cMW/u13Bl55VT7sfwAAAJigkf1/VW//z//gIvcvvNUdK8818Mqy+bD/AQAAYIJG9v/Vvf3/wmeWuOZNq+6704sGXlkuH/Y/AAAATNDI/r+mt/8X2ODuJS++97xDfzTwyvL5sP8BAABggkb2/896+/9F5asPufSx3f920sArr86H/Q8AAAATNLL/r+3t/xdf+MTOb1nujLnfMPDKa/Jh/wMAAMAEjez/n/f2/4JnX7fOizZu13vFwCsr5MP+BwAAgAka2f+/6O3/hV74/JP/fOw13zxy4JUV82H/AwAAwASN7P/revt/4cMunHHO0Vs/3A688tp82P8AAAAwQSP7//re/n/Jmgfdve7mJ8zxjYFXVsqH/Q8AAAATNLL/b+jt/0WWXu/KBVZc6Z3fH3hl5XzY/wAAADBBI/v/l739v+gxn1js3kcfv3CegVdWyYf9DwAAABM0sv9v7O3/l+700m8sNHOun3974JVV82H/AwAAwASN7P+bevt/sVvv3+DBm29Y5nkDr6yWD/sfAAAAJmhk//+qt/9fdt3vd/3x+Tt+fJGBV16XD/sfAAAAJmhk//+6t/8X//CCh2+y2ylf+/HAK6/Ph/0PAAAAEzSy/2/u7f8l7j1jyfk+tPpvXz3wyur5sP8BAABggkb2/296+3/J7d93zQNnPrvysQOvrJEP+x8AAAAmaGT/39Lb/0tt+Pb7v3/t5jsdPvDKmvmw/wEAAGCCRvb/b3v7/+V/PbZea/5jD335wCtvyIf9DwAAABM0sv9v7e3/V5y/1snrLbfpomcPvLJWPux/AAAAmKCR/f+73v5/5ZyfXOeCx47595wDr6ydD/sfAAAAJmhk/9/W2/9LL/jjne85ds2zXjzwyjr5sP8BAABggkb2/+29/b/MyfsfMvfGz2108cAr6+bD/gcAAIAJGtn/v+/t/1et8LPFNtp8p3KVgVfWy4f9DwAAABM0sv/v6O3/ZY+Y88oLjz7tni8NvLJ+Pux/AAAAmKCR/f+H3v5f7sTX3v3wo3Nc8ImBVzbIh/0PAAAAEzSy/+/s7f/ll3psxqIrXveOlw688sZ82P8AAAAwQSP7/67e/n/161f4yiI3r7LEVwdeeVM+7H8AAACYoJH9/8fe/n/NIY/v/5eZT1y16sArb86H/Q8AAAATNLL/7+7t/xW+dMM2F+221eeXH3hlw3wM7f/nqv83/zUDAAAA/68Z2f/39Pb/isvPvGjD84/f+7MDr2yUD//9PwAAAEzQyP6/t7f/X3vJj148z5n1asXAK2/Jh/0PAAAAEzSy/+/r7f+VugOfvvtDV9162sArb82H/Q8AAAATNLL/7+/t/5Xn3eC2H86/x2fOH3hl43zY/wAAADBBI/v/gd7+X+XMg1dd/9qz9nrhwCub5MP+BwAAgAka2f8P9vb/qn/Z7MS179xn0dcMvPK2fNj/AAAAMEEj+/9Pvf2/2pZfPOi86px/f2HglU3zYf8DAADABI3s/4d6+/916353h/t3XuSswwZe2Swf9j8AAABM0Mj+/3Nv/7/+qd0umf/SOzdaauCVzfNh/wMAAMAEjez/h3v7f/U9bnvJxqeuU5418Mrb82H/AwAAwASN7P+/9Pb/Gjct/NwlBx16z8yBV7bIh/0PAAAAEzSy/x/p7f81r1rqD39aZNkLFh145R35sP8BAABggkb2/6O9/f+Gj9+1+oJXPPyOSwZe2TIf9j8AAABM0Mj+/2tv/6/1m3P/ePaSCyzRDbyyVT7sfwAAAJigkf3/t97+X/v9H6l2eOqWq7458Mo782H/AwAAwASN7P/Hevt/nQPe+rLZjt/v8+cNvLJ1Pux/AAAAmKCR/f/33v5f9/KjLvvn+hftPffAK9vkw/4HAACACRrZ/4/39v96m6+242lbLbHaiQOvbJsP+x8AAAAmaGT//6O3/9f/03OfeNth99265sAr2+XD/gcAAIAJGtn/T/T2/wbPXnVafe9Gn3nlwCvb58P+BwAAgAka2f9P9vb/G99Yrf3kqkfuddTAKzvkw/4HAACACRrZ///s7f83VTfd9/drn91t14FXdsyH/Q8AAAATNLL/n+rt/zdftEA3Y/7VP33VwCvvyof9DwAAABM0sv//1dv/G35n2aXe/qFj7/jVwCs75cP+BwAAgAka2f9P9/b/Rgv8+affOnPz1fceeGXnfNj/AAAAMEEj+/+Z3v5/y+HvfPcz59/woWcGXnl3Pux/AAAAmKCR/f9sb/+/9Q1f/+Rcu831xe0HXnlPPux/AAAAmKCR/f/v3v7feJlvfmubmadc9uaBV3bJh/0PAAAAEzSy/5/r7f9NPr/z+mfcvONifx54ZdbvCWj/AwAAwAT91/u/nNHb/2875NHv/nbFEzbfdOCV3fJh/wMAAMAEjez/orf/N339K9+yxKNbn/f3gVd2z4f9DwAAABM0sv/L3v7fbPl599r76Mfvv3fglffmw/4HAACACRrZ/1Vv/2/+pd8cfejmK3UbDLyyRz7sfwAAAJigkf1f9/b/27tdl7914zM2/vnAK3vmw/4HAACACRrZ/01v/29xySnXL3Ps7t/bbeCVvfJh/wMAAMAEjez/trf/33HmCQ9//LFrnv74wCvvy4f9DwAAABM0sv+73v7fct7t5vzMcu2Cdwy88v582P8AAAAwQSP7f2Zv/2+15dFnHbHqHbv9a+CVvfNh/wMAAMAEjez/5/X2/zv/8uY3HXDvwp/eauCVffJh/wMAAMAEjez/5/f2/9ZP7bv78oedd8cmA698IB/2PwAAAEzQyP6frbf/t1n3B0f9fqt9V//LwCv75sP+BwAAgAka2f+z9/b/tjd1y3xq/Uc+9K6BVz6YD/sfAAAAJmhk/8/R2//b7XH5tR88fvkvXjnwyofyYf8DAADABI3s/zl7+3/7jz/94EufOuSymwde+XA+7H8AAACYoJH9P1dv/+9w1RrP//WSay324YFXPpIP+x8AAAAmaGT/z93b/zuu8vWjX3XFxZtfN/DKfvmw/wEAAGCCRvb/PL39/67PvnOvOxfZ/7z3Dbzy0XzY/wAAADBBI/v/Bb39v9PxO7/lqINuvv+jA6/snw/7HwAAACZoZP/P29v/Oy/+ze/ud+r83e0DrxyQD/sfAAAAJmhk/8/X2//vPneBORe/9IiNtxx45cB82P8AAAAwQSP7f/7e/n/PbDc9fOPOb/7ePwZe+Vg+7H8AAACYoJH9/8Le/t9l0T9ff1j1wNN3D7xyUD7sfwAAAJigkf2/QG//7/rNZZf/yJ1LLbjWwCsfz4f9DwAAABM0sv9f1Nv/u/3xuaP2/eCOVzw+8MrB+bD/AQAAYIJG9v+Le/t/921W2/3gM05Z/B0DrxySD/sfAAAAJmhk/y/Y2//v3aR6080/m+sjaw+88ol82P8AAAAwQSP7f6He/t/jH1ed9fL5bjjunoFXDs2H/Q8AAAATNLL/F+7t/z13/cjzD3ze5ne+f+CVw/Jh/wMAAMAEjez/l/T2/153nPvg0b85ds3rB145PB/2PwAAAEzQyP5fpLf/33ftUdfe/oPV33vbwCufzIf9DwAAABM0sv8X7e3/9+/71mVesfuzR+038Mqn8mH/AwAAwASN7P+X9vb/3u/77Pdf+bn2qSsGXjkiH/Y/AAAATNDI/l+st//3uXmjTW/b7JoX7TjwyqfzYf8DAADABI3s/5f19v8HLttn78+tsPtbPjLwypH5sP8BAABggkb2/+K9/b/v/hcc+7FHzvjObwZeOSof9j8AAABM0Mj+X6K3/z/4YLPCUn9f6d53DrzymXzY/wAAADBBI/t/yd7+/9BmV974m+Ufb54eeOWz+bD/AQAAYIJG9v9Svf3/4Q2e+tshm2y96cMDr3wuH/Y/AAAATNDI/n95b/9/5Jk3zPuBL5xwzsYDrxydD/sfAAAAJmhk/7+it//3u/AvF3z48LWu2H3glWPyYf8DAADABI3s/1f29v9Hy2W2OPydhyz+i4FXPp8P+x8AAAAmaGT/L93b//u/cJ4P3rTa8h/5/cArx+bD/gcAAIAJGtn/y/T2/wFn//a4l933yHEHDbzyhXzY/wAAADBBI/v/Vb39f+Ca71n5o//c987HBl75Yj7sfwAAAJigkf2/bG//f+yw024+conz1nzbwCtfyof9DwAAABM0sv+X6+3/g445/h9/WG/h975x4JXj8mH/AwDw/2DvTqOvHuP/3/PZpigkQzKFjJmSeR4yy0yGTJmHJMoQMpUhhKJEGSKFECpkCBmSkHnIFJkKJUQKZ51zrs7/Wuva53+t/1q/G9eNx+PWe+3ar9Xd53d/2l8ACpTp/42j/r90/WNX2PC2z6/7ts5K/3DofwAAAChQpv83ifr/slY/dGtw6dpzjq2zcls49D8AAAAUKNP/raL+v/y6jW77+97vm/5TZ2VAOPQ/AAAAFCjT/5tG/X/FXcs+/ci4vfadVmfl9nDofwAAAChQpv9bR/1/5VrvHnX0atc8vGedlTvCof8BAACgQJn+3yzq/x5PHjd3kWq5qS/XWRkYDv0PAAAABcr0/+ZR//dsdP+Kf3zx/sIn11kZFA79DwAAAAXK9P8WUf9fteLAre55vtuBneus3BkO/Q8AAAAFyvT/llH/X33vkZ8e1OGZEe/VWbkrHPofAAAACpTp/62i/r/m+2u6H9Z34qgd66zcHQ79DwAAAAXK9P/WUf9fe/R+A4fs3+iQQXVW7gmH/gcAAIACZfp/m6j/e+3V5blfN753gV51VgaHQ/8DAABAgTL9v23U/9f99vix1W8dpqxbZ+XecOh/AAAAKFCm/7eL+v/64xf474hf/ht2X52V+a/pfwAAAChQpv+3j/r/hsmvrvLgpjvstUidlSHh0P8AAABQoEz/7xD1f++3523370E3rdK4zsr94dD/AAAAUKBM/+8Y9f+NXbf5olHvA+c9UWdlaDj0PwAAABQo0/87Rf1/0+bPrvnXaQ/2blBnZVg49D8AAAAUKNP/O0f9f/ON3V5cYtQZnR6qs/JAOPQ/AAAAFCjT/7tE/d/njp2+OvaDV7Z9ts7Kg+HQ/wAAAFCgTP/vGvV/39WvqoY3WOjTVeuszH8mQP8DAABAgTL93ybq/1ue2Gzwn8sO6NunzsrwcOh/AAAAKFCm/3eL+v/WBrN2Wmj84edsUmfl4XDofwAAAChQpv93j/q/3yrjjz9g2Oy116mz8kg49D8AAAAUKNP/e0T933/oklfe22XL13rWWXk0HPofAAAACpTp/z2j/r/tm8/WGdrhp1GD66yMCIf+BwAAgAJl+n+vqP8HHNHslUOe3/CQeiuPhUP/AwAAQIEy/b931P+3t20+dYEvrlxghTorj4dD/wMAAECBMv2/T9T/d/z53SK/VbtMGVVn5Ylw6H8AAAAoUKb/9436f+BJh9w/bLUvh21dZ2VkOPQ/AAAAFCjT/22j/h/0ZZ82R41bda876qzMfyZA/wMAAECBMv2/X9T/d74x7KSl7h2xyvV1VkaHQ/8DAABAgTL9v3/U/3d1PuvqeZd2nrdRnZUnw6H/AQAAoECZ/j8g6v+7r5xY1W7r1fuWOitPhUP/AwAAQIEy/X9g1P/3bL34VzPb7NNpizorT4dD/wMAAECBMv1/UNT/gzfc5MX7Wny77ep1VsaEQ/8DAABAgTL9f3DU//f2n71mu79afHplnZVnwqH/AQAAoECZ/j8k6v/7Fm5zZcNvn+67VJ2VZ8Oh/wEAAKBAmf4/NOr/IWOvOP6/rS845+E6K8+FQ/8DAABAgTL9f1jU//c/9NRODx3x4dpj6qw8Hw79DwAAAAXK9H+7qP+HNu4++PCeK7zWtM7K2HDofwAAAChQpv8Pj/p/2KHDF2n//PtH9a2z8kI49D8AAAAUKNP/R0T9/8CM06c+2mG5Ma3qrLwYDv0PAAAABcr0/5FR/z8494BX5lbP/LJ2nZWXwqH/AQAAoECZ/j8q6v+Hdu63zmJfdFuqR52VceHQ/wAAAFCgTP+3j/p/+Hstrj543Pe7L1Zn5eVw6H8AAAAoUKb/j476/+HTvj7p7tXWHvpgnZVXwqH/AQAAoECZ/j8m6v9HLvm4ze+XXvPbc3VWXg2H/gcAAIACZfr/2Kj/H31t1fsXvXevZVars/JaOPQ/AAAAFCjT/8dF/T/i0y92WKTN48cNqbMyPhz6HwAAAAqU6f/jo/5/7Limn/1x27mXL1pn5fVw6H8AAAAoUKb/O0T9/3iXNf6556/PP1i6zsqEcOh/AAAAKFCm/0+I+v+Jt6audlCLlTd7vM7KG+HQ/wAAAFCgTP+fGPX/yPaHjW2w9eWX7FBnZWI49D8AAAAUKNP/J0X9P+q7m47++9udBg6ss/JmOPQ/AAAAFCjT/ydH/T961oMXP9Lzl/HX1Vl5Kxz6HwAAAAqU6f9Tov5/cs8z7zz6iI3XW6/Oytvh0P8AAABQoEz/nxr1/1MNn9/miP1/P2rJOiuTwqH/AQAAoECZ/j8t6v+nR1/w8YN9Nx8zvM7KO+HQ/wAAAFCgTP+fHvX/mMG7zPn3tzt+eabOyrvh0P8AAABQoEz/nxH1/zNNe6zUaOMjl1qxzsp74dD/AAAAUKBM/58Z9f+zvbZ45rBNX9v91jor74dD/wMAAECBMv3fMer/5zaZecSQXxYZumWdlQ/Cof8BAACgQJn+Pyvq/+dbTLjg197DfmteZ+XDcOh/AAAAKFCm/ztF/T/2zoa3VwedtswVdVY+Cof+BwAAgAJl+v/sqP9f2OzoPUaO6nPcVnVWPg6H/gcAAIACZfq/c9T/L/a+Y8gepx18+e11Vj4Jh/4HAACAAmX6/5yo/1+6/Z4eTRr888ENdVY+DUem/+f99z/xbwYAAAD+z2T6/9yo/8c1P+Xkrz7YbrON66xMDofP/wEAAKBAmf7vEvX/y49/8Ooz4++55N46K5+FQ/8DAABAgTL93zXq/1cWa9Jiz2WPG7hgnZXPw6H/AQAAoEBp/78e/Wl1XtT/r6683sIrd3lr/PJ1Vr4Ih/4HAACAAmU+/z8/6v/X7p/x/YxhS603ss7Kl+HQ/wAAAFCgTP9fEPX/+K+333X6ERdscHidla/Cof8BAACgQJn+vzDq/9cPn3tP055Pv/l3nZUp4dD/AAAAUKBM/3eL+n/Cvi9etu+3Kwz4uc7K1+HQ/wAAAFCgTP9fFPX/G7MX7TB26w8v2L/Oyjfh0P8AAABQoEz/Xxz1/8QTR700tcU+rcbVWZkaDv0PAAAABcr0/yVR/7/5xbnNV/ir16Tj66x8Gw79DwAAAAXK9H/3qP/fmrDXgrve1qLHeXVWvguH/gcAAIACZfr/0qj/3z77xm9GtPn2pPfrrHwfDv0PAAAABcr0/2VR/0/q1fODh+9ddYWz6qz8EA79DwAAAAXK9P/lUf+/s8muWx5z6ZezJ9ZZ+TEc+h8AAAAKlOn/K6L+f7fFhcsvvlrnwZPrrEwLh/4HAACAAmX6/8qo/9+7c+zvc8aN2PXCOivTw6H/AQAAoECZ/u8R9f/7DRsdMviLDRf/o87KT+HQ/wAAAFCgTP/3jPr/g9FvjD6w+ml6uzorP4dD/wMAAECBMv1/VdT/Hw7+tf/CHXYZu1OdlV/Cof8BAACgQJn+vzrq/4+abtl19vNXHvN1nZUZ4dD/AAAAUKBM/18T9f/H7b99Z9awwzd4pc7KzHDofwAAAChQpv+vjfr/k+/WbL1glwFvnlJn5ddw6H8AAAAoUKb/e0X9/+msFZc5dNktB5xdZ2VWOPQ/AAAAFCjT/9dF/T95zy9n3j9+9gXv1ln5LRz6HwAAAAqU6f/ro/7/7NOOB/zzwRmtjqmz8ns49D8AAAAUKNP/N0T9//lxDz2+ZIMHJ82rs/JHOPQ/AAAAFCjT/72j/v+iy819jzxtoR7T66zMDof+BwAAgAJl+v/GqP+/fKtd5wdGvXLSXnVW/gyH/gcAAIACZfr/pqj/v9ruj98PO2iHFX6rs/JXOPQ/AAAAFCjT/zdH/T/lqtbLD+n93+wD66zMCYf+BwAAgAJl+r9P1P9f92mw5a+/HDh49zorf4dD/wMAAECBMv3fN+r/b9Z9+4Nq05t2nVpnZW449D8AAAAUKNP/t0T9P3XMJV2P2LjR4qfWWZn/OwH1PwAAABQo0/+3Rv3/7QLP9H/wt4nTJ9RZ+Scc+h8AAAAKlOn/flH/f7fs5aP/7dth7Od1Vv4Nh/4HAACAAmX6v3/U/98/sschjfa/95hL66z8Fw79DwAAAAXK9P9tUf//MO3WmQ2aN75upXSlmn/ofwAAAChQpv8HRP3/4wEHL/P3vEmnP52uVOHv6H8AAAAoUab/b4/6f1qb01o/MrD7Do+kK9X8BwD0PwAAABQo0/93RP0//d9H3zl6p7FfNkxXqlo49D8AAAAUKNP/A6P+/+nMVTovcvQa/S5LV6qFwqH/AQAAoECZ/h8U9f/PH07u+8fl35y/RrpSLRwO/Q8AAAAFyvT/nVH///LSlMfvmdJ2zc3TlWqRcOh/AAAAKFCm/++K+n/GBesccND217/UP12pFg2H/gcAAIACZfr/7qj/Z570/fiDPz1/xIbpSjX//fofAAAACpTp/3ui/v/1y9XXv3uR0QfemK5UDcKh/wEAAKBAmf4fHPX/rDdWWuL3k5sufFu6Ui0eDv0PAAAABcr0/71R///W+fMfFx3zydRt0pVqiXDofwAAAChQpv/vi/r/92867dV+aJuHR6crVcNw6H8AAAAoUKb/h0T9/8cRDzz06EU99102XakahUP/AwAAQIEy/X9/1P+z2/btNXellk1r6Uq1ZDj0PwAAABQo0/9Do/7/889DT13stWlz7klXqqXCof8BAACgQJn+Hxb1/19PXD2x4TutrrsqXamWDof+BwAAgAJl+v+BqP/nNNh5o/8azTy9RbpSNQ6H/gcAAIACZfr/waj//17loqUe6njMDq3TlWp+9+t/AAAAKFCm/x+K+n/u0Od+Pvyxu768OV2pmoRD/wMAAECBMv0/POr/eZsv1bY2vOq3SrpSzf+dgPofAAAACpTp/4ej/v/nxtcfnXn2uPPHpivVcuHQ/wAAAFCgTP8/EvX/v3f81vu+pTuuOSxdqZYPh/4HAACAAmX6/9Go//9bffMz200c/tLi6Uq1Qjj0PwAAABQo0/8j/lf/Vws8u/y5n7dsN2JEulI1DYf+BwAAgAJl+v+xqP8XXGTSzRv92e/AOo1frRgO/Q8AAAAFyvT/41H/V8tMG9Gt/1YLL5yuVM3Cof8BAACgQJn+fyLq/9qwDQ66dp85U4emK9VK4dD/AAAAUKBM/4+M+n+hbe6c9e5hJz7cMl2pVg6H/gcAAIACZfp/VNT/C192+NKr9xqy77XpSrVKOPQ/AAAAFCjT/6Oj/l/klg6tuk5boumd6Uq1ajj0PwAAABQo0/9PRv2/6Eb3vXfVFhPmbJeuVKuFQ/8DAABAgTL9/1TU/4udft75V7z23LxJ6Uo1/z36HwAAAAqU6f+no/5vMGnErZ1XuniVc9KVavVw6H8AAAAoUKb/x0T9v/jLvUauddG7e52UrlRrhEP/AwAAQIEy/f9M1P9LdN/3sA+HNhn2WrpSrRkO/Q8AAAAFyvT/s1H/N/zp39k3jOk9ZZ90pWoRDv0PAAAABcr0/3NR/zc6bKtlu5+8/wI/pivVWuHQ/wAAAFCgTP8/H/X/krtUm6+/yJRD/k1XqrXDof8BAACgQJn+Hxv1/1J/vfzRJ582H9U+XanWCYf+BwAAgAJl+v+FqP+XfmqX9TfYfvJr36Ur1brh0P8AAABQoEz/vxj1f+Oqx/gvpzRbu026Uq0XDv0PAAAABcr0/0tR/y+z/PM/Xnf5yHMOTleq9cOh/wEAAKBAmf4fF/V/k+EXLHHB0V37/pquVC3Dof8BAACgQJn+fznq/2V3mPDQmjv98Okl6Uq1QTj0PwAAABQo0/+vRP2/XI+Ge00auN62X6Yr1Ybh0P8AAABQoEz/vxr1//I3bXFqj3lXdxqfrlQbhUP/AwAAQIEy/f9a1P8rrD+z1/nNd+99erpSbRwO/Q8AAAAFyvT/+Kj/m561xkbnbjFoXtt0pdokHPofAAAACpTp/9ej/l/x/akTL5vWfpUZ6UrVKhz6HwAAAAqU6f8JUf83e+GLn9/vNWuvv9KVatNw6H8AAAAoUKb/34j6f6VuTZda57DWw45MV6rW4dD/AAAAUKBM/0+M+n/lHx589OJ9HpnyYbpSbRYO/Q8AAAAFyvT/m1H/r3LQmW1v7N9pgS7pSrV5OPQ/AAAAFGjB/7f8///6/62o/1fd/bAzJ//54iEnpCvVFuHQ/wAAAFCgzOf/b0f9v9q8m3qv23KBUS+mK9WW4dD/AAAAUKBM/0+K+r/5kpsu8dHEua9dlK5UW4VD/wMAAECBMv3/TtT/q4/8/ccWS2+z9ifpSrV1OPQ/AAAAFCjT/+9G/b/G3W+NP/vsW855K12ptgmH/gcAAIACZfr/vaj/12y22PpXDj+075npSrVtOPQ/AAAAFCjT/+9H/d/imjG9Pn5s/KdfpSvVduHQ/wAAAFCgTP9/EPX/WptefGrLjg223SVdqbYPh/4HAACAAmX6/8Oo/9dee/e9Lm00tNOh6Uq1Qzj0PwAAABQo0/8fRf2/zsDLHrr+nZN7/5muVDuGQ/8DAABAgTL9/3HU/+t+fNBS10wbsszF6Uq1Uzj0PwAAABQo0/+fRP2/Xodbfr5oixN/+yJdqXYOh/4HAACAAmX6/9Oo/9c/75GJGx82Yejr6Uo1/zsB9T8AAAAUKNP/k6P+bznx1I0+67XE7mekK9Wu4ajX/wv+D/+TAQAAgP9Dmf7/LOr/DY75tPfV/fst9X26UrUJh8//AQAAoECZ/v886v8Np658Zpd92v2yW7pSzX9N/wMAAECBMv3/RdT/G81cu23zlnPGHJSuVLuHQ/8DAABAgTL9/2XU/xvv/dWj7/251VEz05Vqj3DofwAAAChQpv+/ivp/k3bNt3x36XHr7Z2uVHuGQ/8DAABAgTL9PyXq/1Y/f/fB6hOr8T+kK9Ve4dD/AAAAUKBM/38d9f+mcz77vevw4QP/S1eq+c8E6H8AAAAoUKb/v4n6v/WuzZa/6uyOlxydrlT7hEP/AwAAQIEy/T816v/N3hk2+vOOMzd7J12p9g2H/gcAAIACZfr/26j/Nz/jrEM2eqzVB+emK1XbcOh/AAAAKFCm/7+L+n+LSw/p2u2duy4/MV2p9guH/gcAAIACZfr/+6j/t3ylT/9rGx1z3KvpSrV/OPQ/AAAAFCjT/z9E/b/V5Tu1vmGlnstMSVeqA8Kh/wEAAKBAmf7/Mer/rbe96p3ur7X5bdd0pTowHPofAAAACpTp/2lR/2+z8bMz1x86begh6Up1UDj0PwAAABQo0//To/7f9tZuy3xyUcvdZ6cr1cHh0P8AAABQoEz//xT1/3aLjn/8ipNHL9UtXanmPxOg/wEAAKBAmf7/Oer/7Z9b8oDOY87/5eN0pTo0HPofAAAACpTp/1+i/t/hgc06r/XpJ2PeTleqw8Kh/wEAAKBAmf6fEfX/jk1m9f1wkaZHdUxXqnbh0P8AAABQoEz/z4z6f6en793vuCnfrPdRulIdHg79DwAAAAXK9P+vUf/vXDtpeN/t1xjfNV2pjgiH/gcAAIACZfp/VtT/u6xw7A2vHX39wA7pSnVkOPQ/AAAAFCjT/79F/b/rwwM6bXZ520teSFeqo8Kh/wEAAKBAmf7/Per/Nju2fLvTwEmb7ZuuVO3Dof8BAACgQJn+/yPq/916/rzhwJ0af/BLulIdHQ79DwAAAAXK9P/sqP93v/mjhuObj718TrpSHRMO/Q8AAAAFyvT/n1H/79Gy8S/bzut+3FHpSnVsOPQ/AAAAFCjT/39F/b9np3F779iowUlPpivVceHQ/wAAAFCgTP/Pifp/rw8WHjbxnfE9lktXquPDof8BAACgQJn+/zvq/71f3PHa2x47eVKVrlQdwqH/AQAAoECZ/p8b9f8+F80544yOQ1vdna5UJ4RD/wMAAECBMv0/L+r/fX/c541Nzt7mgg3SlerEcOh/AAAAKFCm//+J+r/twTesN2743AG905XqpHDofwAAAChQpv//jfp/vz2eXKz/xEPfHJCuVCeHQ/8DAABAgTL9/1/U//v/03naiUvfssG26Up1Sjj0PwAAABTof9//tQWi/j/gh/VOv+3PTsdcnq5Up4ZD/wMAAECBMv2/YNT/Bx4045ozWj4yds10pTotHPofAAAACpTp/yrq/4N2/+CBHfdZYPpm6Up1ejj0PwAAABQo0/+1qP8Pntdkn4n9X1y8X7pSnREO/Q8AAAAFyvT/QlH/H3LWPdP792q/a7N0pTozHPofAAAACpTp/4Wj/j/0/VManHjYoMFPpStVx3DofwAAAChQpv8Xifr/sBeOXneTLVrPfjRdqc4Kh/4HAACAAmX6f9Go/9t1u2PCuGmzVmiUrlSdwqH/AQAAoECZ/l8s6v/Dd9jrrNfmrXfS+ulKdXY49D8AAAAUKNP/DaL+P6LHjddv1vyHHtekK1XncOh/AAAAKFCm/xeP+v/Im0Y9fNxOu0+6K12pzgmH/gcAAIACZfp/iaj/j1r/3P37Dry61fbpSnVuOPQ/AAAAFCjT/w2j/m//1Iszxl/e7ILH0pWqSzj0PwAAABQo0/+Nov4/ulq00bZHTx7QJF2puoZD/wMAAECBMv2/ZNT/xyy//Qadtu/65kLpSnVeOPQ/AAAAFCjT/0tF/X/s8LlvDZwycoP705Xq/HDofwAAAChQpv+Xjvr/uGOO2OeERfY/ZuV0pbogHPofAAAACpTp/8ZR/x8/9a4Hbvq099jn05XqwnDofwAAAChQpv+Xifq/w8wh17w8pvn0B9KVqls49D8AAAAUKNP/TaL+P2HvE07f8uQpiy+RrlQXhUP/AwAAQIEy/b9s1P8nfvzOhDMvunjXq9OV6uJw6H8AAAAoUKb/l4v6/6QOK6x719DnBq+VrlSXhEP/AwAAQIEy/b981P8nn7dhgzdeazJ703Sl6h4O/Q8AAAAFyvT/ClH/nzJx+vStVnp3hZvSlerScOh/AAAAKFCm/5tG/X/qNVvvv92IW95uka5Ul4VD/wMAAECBMv2/YtT/p23638Nvn3noRlelK9Xl4dD/AAAAUKBM/zeL+v/0tV+5/o6Gc7vdnK5UV4RD/wMAAECBMv2/UtT/ZwysnXXqpG3uaJ2uVFeGQ/8DAABAgTL9v3LU/2cu+dhbrd8c+u7YdKXqEQ79DwAAAAXK9P8qUf93HHn+Bi80Prn1KulK1TMc+h8AAAAKlOn/VaP+P+vuto1u6Tz+lMXTlWr+dwLqfwAAAChQpv9Xi/q/U7PrZpzycIOrhqUr1dXh0P8AAABQoEz/N4/6/+xF9zn/5L1n/V6n8atrwqH/AQAAoECZ/l896v/Oz91w6639Wi83Il2prg2H/gcAAIACZfp/jaj/z3ngyZEvzh6089B0peoVDv0PAAAABcr0/5pR/5/bpPNhm67f/u6F05XqunDofwAAAChQpv9bRP3f5fJxs0/b8sUfr01XquvDof8BAACgQJn+Xyvq/67bLrzs7dMXWKxlulLdEA79DwAAAAXK9P/aUf+ft/GOm7913SPtt0tXqt7h0P8AAABQoEz/rxP1//m3zvlo+3adnrszXaluDIf+BwAAgAJl+n/dqP8veKfluVvvPPLtp9OV6qZw6H8AAAAoUKb/14v6/8Izfr55wqCuG62UrlQ3h0P/AwAAQIEy/b9+1P/dLv1oxJ3/TO7WMF2p+oRD/wMAAECBMv3fMur/i15pfFDH1Zvd8Ui6UvUNh/4HAACAAmX6f4Oo/y9ud++sLba7+t010pXqlnDofwAAAChQpv83jPr/kp9PWvqVr3ZvfVm6Ut0aDv0PAAAABcr0/0ZR/3efc2yrmy/74ZT+6UrVLxz6HwAAAAqU6f+No/6/dNcB73Vov95Vm6cr1fyfCeh/AAAAKFCm/zeJ+v+ywzd6fvdn3v39xnSlui0c+h8AAAAKlOn/VlH/X/71D+1HndJkuQ3TlWpAOPQ/AAAAFCjT/5tG/X/F7HcvmbLocztvk65Ut4dD/wMAAECBMv3fOur/K/dd9q5lJl98923pSnVHOPQ/AAAAFCjT/5tF/d/ji/t33OvVKT8um65UA8Oh/wEAAKBAmf7fPOr/nice9/mYZs0XG52uVIPCof8BAACgQJn+3yLq/6vOPnLeL916t78nXanuDIf+BwAAgAJl+n/LqP+vnjBw1VXu3/+5WrpS3RUO/Q8AAAAFyvT/VlH/X9N7vzErttvqqRnpSnV3OPQ/AAAAFCjT/1tH/X/tZtccPu26OUe0TVeq+f8nQP8DAABAgTL9v03U/72aP37h89PbNToyXakGh0P/AwAAQIEy/b9t1P/X3d7ljrZb9vvpr3Slujcc+h8AAAAKlOn/7aL+v36xV7ddfv0lhnRJV6r7FvjrvwX0PwAAAJQp0//bR/1/w+MLfPLt7AltPkxXqiHh0P8AAABQoEz/7xD1f+/7t/nrsX4nLv1iulLdHw79DwAAAAXK9P+OUf/fuPK8ZrvsPeTXE9KVamg49D8AAAAUKNP/O0X9f1P7bt8/+fAxV36SrlTDwqH/AQAAoECZ/t856v+bv3t24Tad7+pwUbpSPRAO/Q8AAAAFyvT/LlH/95l1VYulG7fa4sx0pXowHPofAAAACpTp/12j/u+7506vfvPmzI/eSleqh8Kh/wEAAKBAmf5vE/X/LZ/OOvmpSR3v3CVdqYaHQ/8DAABAgTL9v1vU/7cet1mPfRoOv/SrdKV6OBz6HwAAAAqU6f/do/7v12XJIaudWbX8M12pHgmH/gcAAIACZfp/j6j/+781fo+fRoybcGi6Uj0aDv0PAAAABcr0/55R/9/Wq9k3P9zf9Klz0pVqRDj0PwAAABQo0/97Rf0/YJPPFlyp2ydHTEpXqsfCof8BAACgQJn+3zvq/9tbfNd8/2bnN3otXakeD4f+BwAAgAJl+n+fqP/vuLP5S8++Ovqnk9KV6olw6H8AAAAoUKb/9436f2DDPh2+n9xyyI/pSjUyHPofAAAACpTp/7ZR/w8afchlyy46rc0+6Uo1Khz6HwAAAAqU6f/9ov6/c/BZ9+x0Spul26cr1ehw6H8AAAAoUKb/94/6/66mw3Z94pmev/6brlRPhkP/AwAAQIEy/X9A1P93T1v81X3bd7+yTbpSPRUO/Q8AAAAFyvT/gVH/33PAxBZjLxvb4bt0pXo6HPofAAAACpTp/4Oi/h/cZvbC079qvMWv6Uo1Jhz6HwAAAAqU6f+Do/6/999Nvm+63aSPDk5XqmfCof8BAACgQJn+PyTq//vOvGKPXVdve+eX6Ur1bDj0PwAAABQo0/+HRv0/5MM2Q0b8c/2ll6Qr1XPh0P8AAABQoEz/Hxb1//0vde8xddAaLU9PV6rnw6H/AQAAoECZ/m8X9f/QC546eYWdv5kwPl2pxoZD/wMAAECBMv1/eNT/w7Y7/aUm3Zoftmu6Ur0QDv0PAAAABcr0/xFR/z9w1fDmX90/5ckp6Ur1Yjj0PwAAABQo0/9HRv3/YJ9+C458df9vZqcr1Uvh0P8AAABQoEz/HxX1/0PrHvDNHs16V4ekK9W4cOh/AAAAKFCm/9tH/T98zNe7rrxok30+Tleql8Oh/wEAAKBAmf4/Our/hxdocc+Mye8+2C1dqV4Jh/4HAACAAmX6/5io/x9ZdtXLnnnm4n87pivVq+HQ/wAAAFCgTP8fG/X/o4983GHPU55b7e10pXotHPofAAAACpTp/+Oi/h/xRNO/97ps945d05VqfDj0PwAAABQo0//HR/3/WIMvmo5pf/X1H6Ur1evh0P8AAABQoEz/d4j6//FVpm79y3brffxCulJNCIf+BwAAgAJl+v+EqP+fGLrG5FW++mHrDulK9UY49D8AAAAUKNP/J0b9P3Lzmy7a/Z+uZ/+SrlQTw6H/AQAAoECZ/j8p6v9RNx42YNTqI2/eN12p3gyH/gcAAIACZfr/5Kj/R99x5lNTdm72ylHpSvVWOPQ/AAAAFCjT/6dE/f/k6g8eucygyS3mpCvV2+HQ/wAAAFCgTP+fGvX/Uydd8O/y1y1w2BfpSjUpHPofAAAACpTp/9Oi/n/6y+dX/rbdi09enK5U74RD/wMAAECBMv1/etT/Y97osf1jW3b65ox0pXo3HPofAAAACpTp/zOi/n+m8y5f7jL9ker1dKV6Lxz6HwAAAAqU6f8zo/5/9puZl644u/U+u6Ur1fvh0P8AAABQoEz/d4z6/7kjthg0bf1ZD36frlQfhEP/AwAAQIEy/X9W1P/Pt2347PN7t/93ZrpSfRgO/Q8AAAAFyvR/p6j/x/454Zi2/QatdlC6Un0UDv0PAAAABcr0/9lR/79w9B1Xzu18cscf0pXq43DofwAAAChQpv87R/3/4vdHH7/Yw0Ov3ztdqT4Jh/4HAACAAmX6/5yo/1/67ZSd2r/Z4OOj05Xq03DofwAAAChQpv/Pjfp/3F73DH608fit/0tXqsnh0P8AAABQoEz/d4n6/+XJTarfGx569rnpSvVZOPQ/AAAAFCjT/12j/n/l+A++WnTSLTe/k65Un4dD/wMAAECBMv1/XtT/r3ad8eLBI7Z55dV0pfoiHPofAAAACpTp//Oj/n/t7fXWvPvMuS1OTFeqL8Oh/wEAAKBAmf6/IOr/8dfNvfq+Qdevfk26Un0VDv0PAAAABcr0/4VR/7/eavuT2u3c9oX105VqSjj0PwAAABQo0//dov6fsNaibWqrf3PL9ulK9XU49D8AAAAUKNP/F0X9/8ZdL94/8581ut6VrlTfhEP/AwAAQIEy/X9x1P8TG527yENfjd2uSbpSTQ2H/gcAAIACZfr/kqj/33xy1NTDt+v++WPpSvVtOPQ/AAAAFCjT/92j/n/r3htfadh+0rX3pyvVd+HQ/wAAAFCgTP9fGvX/2yvutc5/lzU+daF0pfo+HPofAAAACpTp/8ui/p/0za6Nvz5lWrPn05Xqh3DofwAAAChQpv8vj/r/nSN6/tb4mZZzV05Xqh/Dof8BAACgQJn+vyLq/3fbjn13t8k9H10iXammhUP/AwAAQIEy/X9l1P/v/XnhJqMXbbPfA+lKNT0c+h8AAAAKlOn/HlH/v3/SGzf93OyTRddKV6qfwqH/AQAAoECZ/u8Z9f8HXzY6Z9VXm353dbpS/RwO/Q8AAAAFyvT/VVH/f/jGlgfvff/ox29KV6pfwqH/AQAAoECZ/r866v+POv/62NPdzj9403SlmhEO/Q8AAAAFyvT/NVH/f7z5mss9d+bw1ZdLV6qZ4dD/AAAAUKBM/18b9f8nN377534jOr7wZLpS/RoO/Q8AAAAFyvR/r6j/P73jyw+bTRp3y93pSjUrHPofAAAACpTp/+ui/p+8+oqb/diw6lqlK9Vv4dD/AAAAUKBM/18f9f9nTzx0y+ON79qud7pS/R4O/Q8AAAAFyvT/DVH/f96g43k7v3nM5xukK9Uf4dD/AAAAUKBM//eO+v+LVdq1W+7hmddum65Us8Oh/wEAAKBAmf6/Mer/L4fePOq7zq1OHZCuVH+GQ/8DAABAgTL9f1PU/18d2nqTFftNaLZmulL9FQ79DwAAAAXK9P/NUf9PmfHHu9P2XmLu5elKNScc+h8AAAAKlOn/PlH/fz337d+eX3/Io/3SlervcOh/AAAAKFCm//tG/f/Nzg0at5194n6bpSvV3HDofwAAAChQpv9vifp/6nvPPLb89DmLPpWuVPPCof8BAACgQJn+vzXq/29Pu+Tgb7fc6rtm6Ur1Tzj0PwAAABQo0//9ov7/7pI9znmsXb/HG6Ur1b/h0P8AAABQoEz/94/6//vXLr9pl+vaHfxoulL9Fw79DwAAAAXK9P9tUf//cOXBm+1+wnM3PpSu1OYf+h8AAAAKlOn/AVH//7j1rR+OGnvxWQ3SlVr4O/ofAAAASpTp/9uj/p+24aN/Tvny3W1WTVdqVTj0PwAAABQo0/93RP0/vf9pyy1TazL52XSlNv8/AOh/AAAAKFCm/wdG/f/TwpNH7bVq7z6bpCu1hcKh/wEAAKBAmf4fFPX/z2NXaTfmpf3P7ZOu1BYOh/4HAACAAmX6/86o/395aJ3zfhk8ZZ2e6UptkXDofwAAAChQpv/vivp/RuMpt6zSvfmr66QrtUXDof8BAACgQJn+vzvq/5kNV2+48oDJIwelK7X579f/AAAAUKBM/98T9f+vo7//ZcZuzQ7dMV2pNQiH/gcAAIACZfp/cNT/swZ//vYza41ccN10pbZ4OPQ/AAAAFCjT//dG/f9b05U23HNO1696pSu1JcKh/wEAAKBAmf6/L+r/33s9cEOTqT88sEi6UmsYDv0PAAAABcr0/5Co///YpFOnr7Zab8/70pVao3DofwAAAChQpv/vj/p/dotD9xt5+NUrP5Gu1JYMh/4HAACAAmX6f2jU/3/e2Xf4Hj12/6dxulJbKhz6HwAAAAqU6f9hUf//9enOi+3aZ9CNW6QrtaXDof8BAACgQJn+fyDq/znHXT1txH7tz7olXanNfyZA/wMAAECBMv3/YNT/f3d57o2pG83a5sp0pTa/+/U/AAAAFCjT/w9F/T/3rYvWW2FW68mrpyu1JuHQ/wAAAFCgTP8Pj/p/XvvXr913xiN9Hk5XasuGQ/8DAABAgTL9/3DU//98t9QZY1t3OnepdKW2XDj0PwAAABQo0/+PRP3/76zN955+8IvrNE1XasuHQ/8DAABAgTL9/2jU///t+duwpjcu8OqYdKW2Qjj0PwAAABQo0/8j/lf/1xa4renyA06dO7LOSm3+MwH6HwAAAAqU6f/Hov5fcI0vfj995DaHDk5XaiuGQ/8DAABAgTL9/3jU/9UWUz/Y4f1bFhyVrtSahUP/AwAAQIEy/f9E1P+169fY8s3FDv1qhXSltlI49D8AAAAUKNP/I6P+X2jVm/r3W278A3ekK7WVw6H/AQAAoECZ/h8V9f/C9x3W9aTXG+y5dbpSWyUc+h8AAAAKlOn/0VH/LzLizENaPTB05Y3Sldqq4dD/AAAAUKBM/z8Z9f+iiz84+qWuJ/9zfbpSWy0c+h8AAAAKlOn/p6L+X2y/C5Z5tUfjv45LV/6/9+h/AAAAKFCm/5+O+r/B78/P3PzwSSu+lK7UVg+H/gcAAIACZfp/TNT/i3/V453jt+re9oN0pbZGOPQ/AAAAFCjT/89E/b/Ekbu07jN17PDz05XamuHQ/wAAAFCgTP8/G/V/w/Ez+74+Z41v56YrtRbh0P8AAABQoEz/Pxf1f6Nztui8zVrfLHREulJbKxz6HwAAAAqU6f/no/5f8uSGB5y1W9sD9ktXamuHQ/8DAABAgTL9Pzbq/6U+m/D4oAHXP/ZTulJbJxz6HwAAAAqU6f8Xov5feuC++5/a/fxxh6UrtXXDof8BAACgQJn+fzHq/8Zr93r4jsGj1/g9XamtFw79DwAAAAXK9P9LUf8vs+mI699+qel536QrtfXDof8BAACgQJn+Hxf1f5Nrzjtru1U/6b9zulJrGQ79DwAAAAXK9P/LUf8v2+zlt06ptfnizXSltkE49D8AAAAUKNP/r0T9v9zd1Qa3fNlzx07pSm3DcOh/AAAAKFCm/1+N+n/5kVs1emFsyzMuSFdqG4VD/wMAAECBMv3/WtT/Kyz574zWJ0zr9Wm6Uts4HPofAAAACpTp//FR/zfde4N9tuza6q9/0pXaJuHQ/wAAAFCgTP+/HvX/ijOnPfDyAzNXPDZdqbUKh/4HAACAAmX6f0LU/82mTrrmptePabtnulLbNBz6HwAAAAqU6f83ov5f6ZjlTz9hubuGT0tXaq3Dof8BAACgQJn+nxj1/8oT75uw1WLVtyenK7XNwqH/AQAAoECZ/n8z6v9Vzuuw7hvvj1vo5XSltnk49D8AAAAUKNP/b0X9v2qHwxvcNbLjAe+lK7UtwqH/AQAAoECZ/n876v/VPr5z+pmnDn+sc7pS2zIc+h8AAAAKlOn/SVH/N19/u7P63thu3BvpSm2rcOh/AAAAKFCm/9+J+n/1m/6+/riD+61xWrpS2zoc+h8AAAAKlOn/d6P+X6PHCw9v1nqr87qnK7VtwqH/AQAAoECZ/n8v6v81d1hk/9dmzOn/WbpS2zYc+h8AAAAKlOn/96P+bzF85IyBs0784oB0pbZdOPQ/AAAAFCjT/x9E/b/W8uc06rTRkB1npSu17cOh/wEAAKBAmf7/MOr/tas9N9h2vyXO+DZdqe0QDv0PAAAABcr0/0dR/6/zVO+3xveZ0GuPdKW2Yzj0PwAAABQo0/8fR/2/7rz2p098oMHyE9OV2k7h0P8AAABQoEz/fxL1/3q7337Njl3H/3lWulLbORz6HwAAAAqU6f9Po/5f/6C7HzhjuZPvvTBdqe0SDv0PAAAABcr0/+So/1v+cPI+t70+dJfJ6Upt13DofwAAAChQpv8/i/p/g27vTx/3/jZLtEtXam3Cof8BAACgQJn+/zzq/w1fWKbBJovNnfZHulLbLRz6HwAAAAqU6f8vov7f6P111z3x1EOf/zpdqe0eDv0PAAAABcr0/5dR/2981i8T+o+85did0pXaHuHQ/wAAAFCgTP9/FfX/JududFC/gztt+He6UtszHPofAAAACpTp/ylR/7d6/YcRJ934yMTD05XaXuHQ/wAAAFCgTP9/HfX/pp+/e3OrGQvctn+6Uts7HPofAAAACpTp/2+i/m99yrLnvtT6xQt/Tldq+4RD/wMAAECBMv0/Ner/zf64/70BG7Xf5Ph0pbZvOPQ/AAAAFCjT/99G/b/5/se1On3WoHfGpSu1tuHQ/wAAAFCgTP9/F/X/FkcdufQOfVr3fD9dqe0XDv0PAAAABcr0//dR/285ZeCsN/ebdeJ56Upt/ncC6n8AAAAoUKb/f4j6f6sh+x32+uHrLX9gulI7IBz6HwAAAAqU6f8fo/7ferVrRm7T44c/f0tXavN/JqD/AQAAoECZ/p8W9f82Szx+61lTd793arpSOygc+h8AAAAKlOn/6VH/b/tYl/MHbXX1LrunK7WDw6H/AQAAoECZ/v8p6v/t1nz1o1fXarbEhHSldkg49D8AAAAUKNP/P0f9v/2ABTbffM7kaaemK7VDw6H/AQAAoECZ/v8l6v8dbthm2eMHdH3+0nSldlg49D8AAAAUKNP/M6L+33HLebP77Dby2M/TlVq7cOh/AAAAKFCm/2dG/b/ToIdbthi8/4anpCu1w8Oh/wEAAKBAmf7/Ner/ndc54/WPuvee+Eq6UjsiHPofAAAACpTp/1lR/+/S+sAfrly1+W3vpiu1I8Oh/wEAAKBAmf7/Ler/Xa/tv/jZL0258Ox0pXZUOPQ/AAAAFCjT/79H/d9mpbUebPnlxZvMS1dq7cOh/wEAAKBAmf7/I+r/3e75Zs+Pa8+9c0y6Ujs6HPofAAAACpTp/9lR/+8+6pPTrj+hSc+90pXa/J8J6H8AAAAoUKb//4z6f4+lVrvu0rHvnjg9XakdGw79DwAAAAXK9P9fUf/vuc+bG1+035DjF01XaseFQ/8DAABAgTL9Pyfq/71+XeLNa/qceNmQdKV2fDj0PwAAABQo0/9/R/2/97etfvps1oT3H09Xah3Cof8BAACgQJn+nxv1/z7H/rnkxhstsfnS6UrthHDofwAAAChQpv/nRf2/75u7PdKldb+LB6YrtRPDof8BAACgQJn+/yfq/7bnX7nv1TPaDdohXamdFA79DwAAAAXK9P+/Uf/vd8LTHd+7cc7r66UrtZPDof8BAACgQJn+/y/q//0/ufTG5gdvte516UrtlHDofwAAACjQ/77/F1og6v8DXjrqiSNGjjuyVbpSOzUc+h8AAAAKlOn/BaP+P/CCQQc+eGr1TN90pXZaOPQ/AAAAFCjT/1XU/wedOfTsfxcbPqNHulI7PRz6HwAAAAqU6f9a1P8Hf3h8n0bvd1xy7XSldkY49D8AAAAUKNP/C0X9f0ib9zY97PWZezyYrtTODIf+BwAAgAJl+n/hqP8P/Xe5SUOWa3X/YulKrWM49D8AAAAUKNP/i0T9f9i0jX/9tetds1ZLV2pnhUP/AwAAQIEy/b9o1P/tDvixSfXAMU2eS1dqncKh/wEAAKBAmf5fLOr/w5fd9slFxvY8/vZ0pXZ2OPQ/AAAAFCjT/w2i/j/ikX8O/eOENpdtla7UOodD/wMAAECBMv2/eNT/R455rcs9tWnvb5yu1M4Jh/4HAACAAmX6f4mo/49aYMF+B33ZcvMb0pXaueHQ/wAAAFCgTP83jPq/fZ8ntmjw0uiLF0xXal3Cof8BAACgQJn+bxT1/9Hrdn3/71XPH3RvulLrGg79DwAAAAXK9P+SUf8fs93+fzzS/ZPXR6YrtfPCof8BAACgQJn+X+r/7v//av/P68dede0KRw9uuu7y6Urt/HDofwAAAChQpv+Xjj7/P65Lyz6Dd/vmyOHpSu2CcOh/AAAAKFC9/m+y+Px7ocZR/x//1s9nHzhgjWeWTFdqF4ZD/wMAAECBMp//LxP1f4dPPzpw4TnXz1gxXal1C4f+BwAAgAJl+r9J1P8nHNf4idlrtV3ymXSldlE49D8AAAAUKNP/y0b9f+Kse5s8vNWkPbZMV2oXh0P/AwAAQIEy/b9c1P8n7XnSr8dMbXz/relK7ZJw6H8AAAAoUKb/l4/6/+T2x05avMfYWVekK7Xu4dD/AAAAUKBM/68Q9f8p3w3YdM7h3Zs0T1dql4ZD/wMAAECBMv3fNOr/Uwfv0++f37Z645Z0pXZZOPQ/AAAAFCjT/ytG/X9a0xu6LLnxnPW3SFdql4dD/wMAAECBMv3fLOr/0xs+eeiR+7frvnq6Upv/nQD6HwAAAAqU6f+Vov4/Y3TnJx/o2++uK9OV2vzX9D8AAAAUKNP/K0f9f2aLcSvM6r3Eh0ulK7Ue4dD/AAAAUKBM/68S9X/HOxf+Y8GDJmz5cLpS6xkO/Q8AAAAFyvT/qlH/n9Vrx/cP3fTEE8akK7WrwqH/AQAAoECZ/l8t6v9Om8zZ4v5fhlzRNF2pXR0O/Q8AAAAFyvR/86j/z95w60eGNjhm5uB0pXZNOPQ/AAAAFCjT/6tH/d+5/3/7HvLBXY3rrNSuDYf+BwAAgAJl+n+NqP/PufKVjguMarXbCulKrVc49D8AAAAUKNP/a0b9f+7WtRt/O23mfaPSldp14dD/AAAAUKBM/7eI+r/LQ49tPKxLx5+3Tldq14dD/wMAAECBMv2/VtT/XRuf/+ZRw4Y3vCNdqd0QDv0PAAAABcr0/9pR/5+3cNuflhpfHX59ulLrHQ79DwAAAAXK9P86Uf+fP/a6JectO+7pjdKV2o3h0P8AAABQoEz/rxv1/wVzj3jwr6rpGw3SldpN4dD/AAAAUKBM/68X9f+FO9+15xJffLL+Q+lK7eZw6H8AAAAoUKb/14/6v9uhQ0479vnzuz+brtT6hEP/AwAAQIEy/d8y6v+LZpxw3fAOo+9aNV2p9Q2H/gcAAIACZfp/g6j/L77knZZ/Xtrywz7pSu2WcOh/AAAAKFCm/zeM+v+S11Z4faF7p225SbpSuzUc+h8AAAAKlOn/jaL+7/7ehj8cMK7NCeukK7V+4dD/AAAAUKBM/28c9f+lp01f/N7Vel7RM12p9Q+H/gcAAIACZfp/k6j/Lzun/SlX/9V95o7pSu22cOh/AAAAKFCm/1tF/X/5+Nt7dmkxtvGgdKU2IBz6HwAAAAqU6f9No/6/4rO772vepvFuvdKV2v/F3p9GbT3+/d8/9s8eIRkKX0OmhAyZM4TMQ4hCSUjGyJBECkmGhCRjMiWUOcmYecqQTMmQZJ6FJKL4r/9am3Vu57Wd129b51rXb63txuNx613Hsb/Wcfe59mP/HNeHQ/8DAABAgTL9v1nU/4OOOWa3d65787Z105XayHDofwAAAChQpv83j/r//DlTvxp8wT4/3pau1G4Ih/4HAACAAmX6f4uo/y/Yd9mq/8GXLtkgXan9+0wA/Q8AAAAFyvT/llH/X9hl3bVbbb1m52XSldpN4dD/AAAAUKBM/7eO+v+iT2ZN+ujLzx97MF2p3RyO/97/1f+VHxkAAAD4X8r0/1ZR/w++rc2R7ze56onD05XaLeHw/j8AAAAUKNP/W0f9f3GzPweu//KBhy5IV2qjwqH/AQAAoECZ/t8m6v8hiz9zy4CxfzX8Ll2p3RoO/Q8AAAAFyvT/tlH/XzKuwU6XnrbNN3ukK7XR4dD/AAAAUKBM/7eJ+v/SNSd89l6PMaNeSFdqt4VD/wMAAECBMv2/XdT/l1136kLNHzqm7THpSu32cOh/AAAAKFCm/7eP+n/opXusccq7Lzfpla7U7giH/gcAAIACZfp/h6j/L99y6PODGjb87Z10pTYmHPofAAAACpTp/7ZR/w87fbHtT581+6Ie6UptbDj0PwAAABQo0/87Rv1/xeQpH12w6WbHvJau1O4Mh/4HAACAAmX6f6eo/4e/P2fBWx1u3PSjdKV2Vzj0PwAAABQo0/87R/1/ZfdNV1tzaNd3zklXaneHQ/8DAABAgTL9v0vU/1f9fO7TZ1757PWz05XaPeHQ/wAAAFCgTP/vGvX/1XvtduiQ9gv13y9dqd0bDv0PAAAABcr0/25R/19z2Flnfdzqvla7pyu1+8Kh/wEAAKBAmf7fPer/a794/KYNfz15ypfpSu3+cOh/AAAAKFCm//eI+v+6W47bZr0vJzzxXLpSGxcO/Q8AAAAFyvT/nlH/j1jpvvc/3LrPod3SldoD4dD/AAAAUKBM/+8V9f/1S101b+jB0xueka7UxodD/wMAAECBMv3fLur/kRM6rHz2BSt98266UnswHPofAAAACpTp/72j/r+hxScTW1x30aiD05XahHDofwAAAChQpv/3ifr/xhtaHPzuLru1/StdqT0UDv0PAAAABcr0/75R/980eJW+A5t/0+SHdKX2cDj0PwAAABQo0//to/6/edMPrz/1j/V+2zddqT0SDv0PAAAABcr0/35R/9/yTN/VLlvt7YvmpCu1R8Oh/wEAAKBAmf7fP+r/Uf2eWnDO88sdc1C6UnssHPofAAAACpTp/w5R/9960vkftRz95KY7piu1x8Oh/wEAAKBAmf7vGPX/6Kk7bf/BgLPe+TxdqU0Mh/4HAACAAmX6/4Co/2/b7eebzuv+6fUnpyu1J8Kh/wEAAKBAmf4/MOr/2+dveVavp1bv/3q6UnsyHPofAAAACpTp/4Oi/r/jmyUPXfvjoa0+TFdqT4VD/wMAAECBMv3fKer/MR1efXraIu2n9E1Xak+HQ/8DAABAgTL93znq/7HLr7jy21tf2uHXdKX2TDj0PwAAABQo0/8HR/1/5z0fz1vjy30e3D9dqT0bDv0PAAAABcr0f5eo/+969Iv3+1zw+de7pSu158Kh/wEAAKBAmf4/JOr/uxdZc5sLD16zwRfpSu35cOh/AAAAKFCm/7tG/X/PsGHXz9jl6fbHpSu1F8Kh/wEAAKBAmf4/NOr/e1se1Hej686579V0pfZiOPQ/AAAAFCjT/4dF/X/f9j0P7vfHm3/OSFdqL4VD/wMAAECBMv1/eNT/959/18SLmy+z8oB0pTYpHPofAAAACpTp/25R/48bcfxag5//rseL6Urt5XDofwAAAChQpv+PiPr/gbXuebb/ausPPjZdqb0SDv0PAAAABcr0f/eo/8e3vuaTVgMu+OiUdKX27zMB9T8AAAAUKNP/R0b9/+Bl+y3y0ehdtns7Xam9Fg79DwAAAAXK9P9RUf9P+H9fqU0Oh/4HAACAAmX6/+io/x+6vXnb07qvePX8dKX2ejj0PwAAABQo0//HRP3/8APNjlh9kYef/T5dqU0Jh/4HAACAAmX6/9io/x9Z4v1B73x8xup7piu1N8Kh/wEAAKBAmf4/Lur/R9svvs57L9/T4aR0pfZmOPQ/AAAAFCjT/z2i/n/st8kvNm9y4oOT05XaW+HQ/wAAAFCgTP8fH/X/45/O/eKU057/enq6Uvv3bwLqfwAAAChQpv9PiPp/4iEbNxg0dpEGZ6YrtXfCof8BAACgQJn+7xn1/xOvnHfH+w/d3P63dKU2NRz6HwAAAAqU6f8To/5/svcuu6zf47D7OqUrtXfDof8BAACgQJn+Pynq/6eOPefoAQ1//rNtulKbFg79DwAAAAXK9P/JUf8/PePRiy59d5OVP0tXau+FQ/8DAABAgTL9f0rU/8+c8W2XbTZ9tUfndKX2fjj0PwAAABQo0/+9ov5/9vVWj74ya4nBf6YrtQ/Cof8BAACgQJn+PzXq/+c+aDrixqG3f/RjulL7MBz6HwAAAAqU6f/eUf8/f+Q7/U/qcNR27dOV2vRw6H8AAAAoUKb/T4v6/4Vfjpi+Rft5pz2frtQ+Cof+BwAAgAJl+r9P1P8vthuz9UtXbnX1EelKbUY49D8AAAAUKNP/p0f9/9LhN644/Ndrnj09Xal9HA79DwAAAAVaePlNG/33//lv/X9G1P+TvjzkzyNadVp9arpSmxkO/Q8AAAAFyrz/3zfq/5dHXXzY0R+vvvZW6Urtk3DofwAAAChQpv/PjPr/lZXbP3HNIp++cH26Uvs0HPofAAAACpTp/35R/7/auM+Nz3VvP+yydKX2WTj0PwAAABQo0//9o/5/7aEHB2zy1NBerdKV2ufh0P8AAABQoEz/nxX1/+R1Fp55/OjlthqdrtS+CIf+BwAAgAJl+v/sqP9fv3HSdiMGvP3BwulK7ctw6H8AAAAoUKb/z4n6f8rFC1Z5fbWzLls+Xal9FQ79DwAAAAXK9P+AqP/f2Gzbv7d//smeE9KV2tfh0P8AAABQoEz/nxv1/5uvbPLyWs13a7ZUulL7Jhz6HwAAAAqU6f+BUf+/1fv3lm/+cdE/96QrtW/Dof8BAACgQJn+Py/q/7ePfX2J869b7+6J6Urtu3DofwAAAChQpv8HRf3/zowlvj1jl2/2+k+6Uvs+HPofAAAACpTp//Oj/p/a/rE9Nzi4T+3qdKX2Qzj0PwAAABQo0/8XRP3/7m8D7p55wYTPWqcrtR/Dof8BAACgQJn+vzDq/2mf7jrkki9Xenj1dKU2Kxz6HwAAAAqU6f+Lov5/75BBx/Xdenqn89KV2k/h0P8AAABQoEz/D476//3V9p98VquF1r49Xan9HA79DwAAAAXK9P/FUf9/cPu1G13+67MvLJqu1H4Jh/4HAACAAmX6f0jU/x8+cG/j6VeePGzpdKU2Oxz6HwAAAAqU6f9Lov6fvsQJP67b/r5e49OV2q/h0P8AAABQoEz/Xxr1/0cjPtind4fNtto+XanNCYf+BwAAgAJl+v+yqP9nrLXa/ecOnf3BDelK7bdw6H8AAAAoUKb/h0b9/3HrtYdOndX1skvSldrccOh/AAAAKFCm/y+P+n/mZZ/3XGfTG3uul67Ufg+H/gcAAIACZfp/WNT/nwzY8dv33z2m2ZXpSu2PcOh/AAAAKFCm/6+I+v/TFy9aYv2GY/7ZJF2pzQuH/gcAAIACZfp/eNT/n731ZMsBPRre3SJdqf0ZDv0PAAAABcr0/5VR/39+Qv+XL33o5b3OT1dqf4VD/wMAAECBMv1/VdT/X8x75bj3xh5YWyxdqc0Px/+//8cu8X/5ZwYAAAD+dzL9f3XU/1/u3HhI89Ou+uyudKW2IBze/wcAAIACZfr/mqj/v+q0xd2nNNnm4SfTldrf4dD/AAAAUKBM/18b9f/XP/6656CX/+q0WrpS+ycc+h8AAAAKlOn/66L+/+bONX686J6mX+2VrlT/HvofAAAACpTp/xFR/3+73NeNTztl6qLfpCtV+B79DwAAACXK9P/1Uf9/t+iMjVZful/Hf9KVapFw6H8AAAAoUKb/R0b9//2TK09+Z/LE8YemK1UtHPofAAAACpTp/xui/v+h1Z09B7/V4q+30pXq3wcA6H8AAAAoUKb/b4z6/8erTx7av9HXK/VOV6p6OPQ/AAAAFCjT/zdF/T9r4IH3tzpxz32PSleqBuHQ/wAAAFCgTP/fHPX/T9teuc9HDwy+/6V0pVo0HPofAAAACpTp/1ui/v+5Rcd3ZxzUe8ZZ6Ur17+v1PwAAABQo0/+jov7/5YarW280ZHybj9OVqmE49D8AAAAUKNP/t0b9P3vw/cv3+26V415JV6rFw6H/AQAAoECZ/h8d9f+vm/aYc/GWMy4+IV2plgiH/gcAAIACZfr/tqj/59wy/YC312/7zNfpSrVkOPQ/AAAAFCjT/7dH/f/bSqs+vMbvA9fYNV2pGoVD/wMAAECBMv1/R9T/c5da59o+17bq0yF88Z+F/+v7lgqH/gcAAIACZfp/TNT/v0/4tM+F7WZd9XO6UjUOh/4HAACAAmX6f2zU/3/8vNlb5x26xVfvpSvV0uHQ/wAAAFCgTP/fGfX/vL1+26zXwDmL9klXqmXCof8BAACgQJn+vyvq/z8Pe2PZtT/t0rF7ulL92/36HwAAAAqU6f+7o/7/64uGP0/bbuT4Z9KVarlw6H8AAAAoUKb/74n6f/7pE/e7bPUGf+2drlRNwqH/AQAAoECZ/r836v8Fk88ef878SSvNSleqpuHQ/wAAAFCgTP/fF/X/3+/vfmXLG3rsOy9dqZYPh/4HAACAAmX6//6o///pPrDXB23H3n9IulKtEA79DwAAAAXK9P+4/+r/aqGjNttg1zEdZ3yarlQrhkP/AwAAQIEy/f9A1P8Lf/zblIf7D2+zc7pS/Scc+h8AAAAKlOn/8VH/L/LqGz99tnKb4w5IV6qVwqH/AQAAoECZ/n8w6v/aKQ0bLTNpwcVz05Vq5XDofwAAAChQpv8nRP1ffTbx3r0+7PZMv3SlWiUc+h8AAAAKlOn/h6L+r3c+u/1jDUat8X66Uq0aDv0PAAAABcr0/8NR/zfYe/eTfjymcZ830pWqWTj0PwAAABQo0/+PRP2/6NyBlzZ7fMpVJ6Yr1Wrh0P8AAABQoEz/Pxr1/2LjO667UrvHrhiYrlT/vkb/AwAAQIEy/f9Y1P8NF7v61W+v7XvKWulKtUY49D8AAAAUKNP/j0f9v/gq93//5O/Tmm+erlRrhkP/AwAAQIEy/T8x6v8l7ujRcN/1V3jxmnSl+vd3AvQ/AAAAFCjT/09E/b/k5tPvbLrlkEtXSleq5uHQ/wAAAFCgTP8/GfV/o6Grtvvqu3YnPpquVGuHQ/8DAABAgTL9/1TU/0tdv87x44d8ufX96UrVIhz6HwAAAAqU6f+no/5vvPqng3c8qPn7jdKVap1w6H8AAAAoUKb/n4n6f+lux/aZ8MDMux5JV6p1w6H/AQAAoECZ/n826v9lPhx17e4nNmvXNF2p1guH/gcAAIACZfr/uaj/l50y8uHlGo1bbZF0pWoZDv0PAAAABcr0//NR/y932qEHfPJWr79vSVeq9cOh/wEAAKBAmf5/Ier/Jl/9NGfi5B8e2SBdqf79P/0PAAAABcr0/4tR/zftut7yeyy94UFD05Vqw3DofwAAAChQpv9fivp/+T2Wa73KKYMWGZGuVBuFQ/8DAABAgTL9Pynq/xVmv/vuT/fs9Pm26UrVKhz6HwAAAAqU6f+Xo/5f8eFFe33/+IgrVklXqo3Dof8BAACgQJn+fyXq//8s+eyVKx7T+ZSn0pVqk3DofwAAAChQpv9fjfp/pRX/Gr93g7nN70xXqk3Dof8BAACgQJn+fy3q/5Vv3W6/pz9s/eIS6Uq1WTj0PwAAABQo0/+To/5fZePLf/5i0l2XXpSuVJuHQ/8DAABAgTL9/3rU/6sO2XPZFVY+4cS105Vqi3DofwAAAChQpv+nRP3f7Kbem+3c/8WtN01Xqi3Dof8BAACgQJn+fyPq/9WaP/TWuDHV+8PSlap1OPQ/AAAAFCjT/29G/b/6tBUOaN/2n7tapivVVuHQ/wAAAFCgTP+/FfX/Gj3feviJG7ZvNzhdqbYOh/4HAACAAmX6/+2o/9fs+/2138wfttrN6Uq1TTj0PwAAABQo0//vRP2/1nMb9ll59f3/3i5dqbYNh/4HAACAAmX6f2rU/833u/ndtttNfuSBdKVqEw79DwAAAAXK9P+7Uf+v/d3BrR/8tNFBy6Ur1b+/E6D/AQAAoECZ/p8W9X+Lv49c/uuBoxep0pVq+3DofwAAAChQpv/fi/p/nV1un9Pk0O6f35GuVDuEQ/8DAABAgTL9/37U/+sudMZ+Sx8zasCG6UrVNhz6HwAAAAqU6f8Pov5f7/EHxn/+eLebLk9Xqh3Dof8BAACgQJn+/zDq/5b3XXLlIx9OefW6dKXaKRz6HwAAAAqU6f/pUf+v32SfXrs0aLz+NulKtXM49D8AAAAUKNP/H0X9v8GF/7y12srDuz+crlS7hEP/AwAAQIEy/T8j6v8N22y92Q+TOg5qkq5Uu4ZD/wMAAECBMv3/cdT/G61bW/bRMQveq6Ur1W7h0P8AAABQoEz/z4z6v9XwF39u17/NlqPSlWr3cOh/AAAAKFCm/z+J+n/jy+vH7XXDpF1WTleqPcKh/wEAAKBAmf7/NOr/TbZ4fshjbRvc/li6Uu0ZDv0PAAAABcr0/2dR/2+6xry7f1x97C/3pSvVXuHQ/wAAAFCgTP9/HvX/ZiN32LPZ/B5LL5muVO3Cof8BAACgQJn+/yLq/80bXvbtrp/OOfjcdKXaOxz6HwAAAAqU6f8vo/7f4sF2Szy83RaPrpmuVPuEQ/8DAABAgTL9/1XU/1uO6dXys0NH/rBFulLtGw79DwAAAAXK9P/XUf+3XvWRl5cZ2KXRtelK1T4c+h8AAAAKlOn/b6L+3+rgo3s2vXbggHHpSrVfOPQ/AAAAFCjT/99G/b/156OHftWu7U3/Q+NX+4dD/wMAAECBMv3/XdT/2/w+4v7x6896tZ6uVB3Cof8BAACgQJn+/z7q/233OXyfHX9vtf6YdKXqGA79DwAAAAXK9P8PUf+3mfnjjyt9N777+ulKdUA49D8AAAAUKNP/P0b9v93R6zf+dsvegy5OV6oDw6H/AQAAoECZ/p8V9f/2vZbZ6MmDZrx3U7pSHRQO/Q8AAAAFyvT/T1H/7/Dae5P3HbLKlm3SlapTOPQ/AAAAFCjT/z9H/d/2iAuX+ePEr3e5MF2pOodD/wMAAECBMv3/S9T/O05v++sSD7S4vXm6Uh0cDv0PAAAABcr0/+yo/3d6o9/bh781+JfN0pWqSzj0PwAAABQo0/+/Rv2/c58nNr6n0Z5LX5GuVIeEQ/8DAABAgTL9Pyfq/12+XmrY70tPPXjVdKXqGg79DwAAAAXK9P9vUf/veujLp1aTmz76dLpSHRoO/Q8AAAAFyvT/3Kj/d9tzdsf97pn4w9h0pTosHPofAAAACpTp/9+j/t/9180fGH1Kv0aLpyvV4eHQ/wAAAFCgTP//EfX/Ho981XTMwEaLfZWuVN3Cof8BAACgQJn+nxf1/56NVv/9gEMnf7tLulIdEQ79DwAAAAXK9P+fUf/v9Z+Vpi20XfcnO6YrVfdw6H8AAAAoUKb//4r6v93ojzb/9dPRXX9JV6ojw6H/AQAAoECZ/p8f9f/em5x01dj52zc9O12pjgqH/gcAAIACZfp/QdT/+1wy9vRDVv9nzsx0pTo6HPofAAAACpTp/7+j/t/35uGdGrfd/5aX05XqmHDofwAAAChQpv//ifq//doHPDT/hmE7Hp+uVMeGQ/8DAABAgf7P/V9fKOr//TZecouF+p+w2ZvpSnVcOPQ/AAAAFCjT/wtH/b//kFff+3XMXW+fmq5UPcKh/wEAAKBAmf5fJOr/Djf9PHfMpOrCo9OV6t/PBOh/AAAAKFCm/2tR/3dsvmWTA1Z+8dhJ6Up1Qjj0PwAAABQo0/9V1P8HPHz+hMYNOm/ULl2peoZD/wMAAECBMv1fj/r/wCV3Omj+hyPe+DZdqU4Mh/4HAACAAmX6v0HU/wet2PeMsY+3Hvl3ulKdFA79DwAAAAXK9P+iUf93uvWpqw85Zm6/rulKdXI49D8AAAAUKNP/i0X93/mrnpscfsqGi/VPV6pTwqH/AQAAoECZ/m8Y9f/BXe965557fvj2g3Sl6hUO/Q8AAAAFyvT/4lH/d9lj2Ow/Ju/05JR0pTo1HPofAAAACpTp/yWi/j9k9kFLL7H0oK4905Wqdzj0PwAAABQo0/9LRv3ftdsX4/Zr1KzpJ+lKdVo49D8AAAAUKNP/jaL+P/TDNTuMfmvmnJ3SlapPOPQ/AAAAFCjT/0tF/X/YlBV7//5Ar1sOTFeq08Oh/wEAAKBAmf5vHPX/4ad9fEV14rgdf09XqjPCof8BAACgQJn+Xzrq/24XntXkryHtNtsnXan6hkP/AwAAQIEy/b9M1P9HtHl87mIHDXn7p3SlOjMc+h8AAAAKlOn/ZaP+777uue913bL5hX+kK1W/cOh/AAAAKFCm/5eL+v/I4bttcf93Xx7bJV2p+odD/wMAAECBMv3fJOr/oxaac/Wc3/tuNC1dqc4Kh/4HAACAAmX6v2nU/0c/vukZi67/2BunpSvV2eHQ/wAAAFCgTP8vH/X/MfctdlDHdiuMPDJdqc4Jh/4HAACAAmX6f4Wo/49tMmXCLddO6/dsulINCIf+BwAAgAJl+n/FqP+P22+VpW9rM+zWPulKdW449D8AAAAUKNP//4n6v8d3H87u9Mn+O7+XrlQDw6H/AQAAoECZ/l8p6v/j//7kndq5/6zwTLpSnRcO/Q8AAAAFyvT/ylH/n7BLi01+7rr93O7pSjUoHPofAAAACpTp/1Wi/u857aor7t5x9NOz0pXq/HDofwAAAChQpv9Xjfr/xJ4dene+sfthe6cr1QXh0P8AAABQoEz/N4v6/6S+x3VYcsHkxQ9JV6oLw6H/AQAAoECZ/l8t6v+Tn7tv3D9rNPp+XrpSXRQO/Q8AAAAFyvT/6lH/nzLzpHX/fmnuiJ3TlWpwOPQ/AAAAFCjT/2tE/d/r6LGvNlqpdd9P05Xq4nDofwAAAChQpv/XjPr/1F7Dvz+434gN5qYr1ZBw6H8AAAAoUKb/14r6v/drBzS8647Orx+QrlSXhEP/AwAAQIEy/d886v/TDv7qzl8mvnj+++lKdWk49D8AAAAUKNP/a0f93+fz1dstcmx1dL90pbosHPofAAAACpTp/xZR/5/++0rHH7ToXZucmK5UQ8Oh/wEAAKBAmf5fJ+r/M/b5aPDt00948410pbo8HPofAAAACpTp/3Wj/u/bcKkNRr0+7tZv0pVqWDj0PwAAABQo0//rRf1/5oMvT+mwTK+d90pXqivCof8BAACgQJn+bxn1f78xs39q0GvmCoemK9XwcOh/AAAAKFCm/9eP+r//qps3+u3eZnP/SVeqK8Oh/wEAAKBAmf7fIOr/sy6/8N77xg16une6Ul0VDv0PAAAABcr0/4ZR/5+9Rdv2h/bc6bC30pXq6nDofwAAAChQpv83ivr/nDX6ndRwyR8Wfyldqa4Jh/4HAACAAmX6v1XU/wNGPnHpn29u+P1R6Up1bTj0PwAAABQo0/8bR/1/7rlLfPpx62kjPk5XquvCof8BAACgQJn+3yTq/4HbvF7b8PsV+p6VrlQjwqH/AQAAoECZ/t806v/zNvp9zTMveWyDE9KV6vpw6H8AAAAoUKb/N4v6f9BVmzwzpFPf119JV6qR4dD/AAAAUKBM/28e9f/5DQZ1e2uvL8/fNV2pbgiH/gcAAIACZfp/i6j/L3hi1/PWvKb50V+nK9WN4dD/AAAAUKBM/28Z9f+FYweMPn3ukE1+Tleqm8Kh/wEAAKBAmf5vHfX/Rcs+tuMFLdu92SFdqW4Oh/4HAACAAmX6f6uo/wcfdMKXA6e3efepdKW6JRz6HwAAAAqU6f+to/6/+Id7Fz110QWbr5KuVKPCof8BAACgQJn+3ybq/yF/XNuixbEduy2RrlS3hkP/AwAAQIEy/b9t1P+X7LT/C+9OHD7wznSlGh0O/Q8AAAAFyvR/m6j/L33z86OG3tH45bXTleq2cOh/AAAAKFCm/7eL+v+y49e+8Ox+U9a7KF2pbg+H/gcAAIACZfp/+6j/h56z2pj1Vup29rB0pbojHPofAAAACpTp/x2i/r/8hQ92/fClUTdsmq5UY8Kh/wEAAKBAmf5vG/X/sPMPf7TVGl1mDU5XqrHh0P8AAABQoEz/7xj1/xXbj+jy0YKRjVumK9W/fxNA/wMAAECBMv2/U9T/w1uO7j/4xi0O2S5dqe4Kh/4HAACAAmX6f+eo/68cdvSI/jvOefzmdKW6Oxz6HwAAAAqU6f9dov6/apH3tl69a49fl0tXqnvCof8BAACgQJn+3zXq/6sfXWb6O+eOXfaBdKW6Nxz6HwAAAAqU6f/dov6/5p71/7zokwa73ZGuVPeFQ/8DAABAgTL9v3vU/9cu/+OKp7WZNKZKV6r7w6H/AQAAoECZ/t8j6v/rOuzwxCktV3l3rXSlGhcO/Q8AAAAFyvT/nlH/j/hm3mGD5s7YfGC6Uv37TAD9DwAAAAXK9P9eUf9fP//5Ae9d07vbNelKNT4c+h8AAAAKlOn/dlH/j9ytfmPzvcYP3DxdqR4Mh/4HAACAAmX6f++o/2+Y+sh2Azq1evnRdKWaEA79DwAAAAXK9P8+Uf/feFKvmZdeMmu9ldKV6qFw6H8AAAAoUKb/9436/6Z+7f5+//u2ZzdKV6qHw6H/AQAAoECZ/m8f9f/Nz1y2yvqtB95wf7pSPRIO/Q8AAAAFyvT/flH/37JpqxFT3+w3q2m6Uv37TAD9DwAAAAXK9P/+Uf+PGvxt/3WWnNj4kXSleiwc+h8AAAAKlOn/DlH/33rDO11692x6yC3pSvV4OPQ/AAAAFCjT/x2j/h/doumj546b+vgi6Uo1MRz6HwAAAAqU6f8Dov6/bcKYFaffu+evQ9OV6olw6H8AAAAoUKb/D4z6//aljvhz3V6Dl90gXameDIf+BwAAgAJl+v+gqP/vWOmQ6Wct02K3bdOV6qlw6H8AAAAoUKb/O0X9P+aWG7e+/PWvx4xIV6qnw6H/AQAAoECZ/u8c9f/YL9rfeMnc5tv+D41fPRMO/Q8AAAAFyvT/wVH/33nYxQP6tvzyw3HpSvVsOPQ/AAAAFCjT/12i/r9rrwcP22CvdkPHpCvVc+HQ/wAAAFCgTP8fEvX/3T/3eWLmNUNOrqcr1fPh0P8AAABQoEz/d436/57uk1Y5/5IVWlycrlQvhEP/AwAAQIEy/X9o1P/3vr/w32d0mjZp/XSlejEc+h8AAAAKlOn/w6L+v2/ytjPXat33yjbpSvVSOPQ/AAAAFCjT/4dH/X//6Qu2e/P7x069KV2pJoVD/wMAAECBMv3fLer/cSdsd/tbS+60UPN0pXo5HPofAAAACpTp/yOi/n/grb92X/PNQZ9emK5Ur4RD/wMAAECBMv3fPer/8S8+e8zp4zZ86Ip0pXo1HPofAAAACpTp/yOj/n9wwKLnX9DzhwM2S1eq18Kh/wEAAKBAmf4/Kur/CT8+1PzjXr1WfTpdqSaHQ/8DAABAgTL9f3TU/w916v3ShveOm79qulK9Hg79DwAAAAXK9P8xUf8/vPOeX5/5erOxi6cr1ZRw6H8AAAAoUKb/j436/5F5l9eHLDNzz7HpSvVGOPQ/AAAAFCjT/8dF/f/ok4eOGrpote3l6Ur1Zjj0PwAAABQo0/89ov5/bNGRO589/cUPN0xXqrfCof8BAACgQJn+Pz7q/8eXG9V9vYknDN0mXaneDof+BwAAgAJl+v+EqP8n3nnsuR8ee9fJ16Ur1Tvh0P8AAABQoEz/94z6/4lt3119YL/WLZqkK9XUcOh/AAAAKFCm/0+M+v/Jgcs9d+odcyc9nK5U74ZD/wMAAECBMv1/UtT/T1293uctXup85ah0pZoWDv0PAAAABcr0/8lR/z/d6qeF311pxKm1dKV6Lxz6HwAAAAqU6f9Tov5/5oKnPjpyQfeFHktXqvfDof8BAACgQJn+7xX1/7M79N1+2BqjP105Xak+CIf+BwAAgAJl+v/UqP+fW3+n1V7YsdFDS6Yr1Yfh0P8AAABQoEz/9476//krzl/Q+sbJB9yXrlTTw6H/AQAAoECZ/j8t6v8Xalse2vPc/VddM12pPgqH/gcAAIACZfq/T9T/Lz7289M3dx02/9x0pZoRDv0PAAAABcr0/+lR/79076s3vdZm+7HXpivVx+HQ/wAAAFCgTP+fEfX/pBWWPGurT/7Zc4t0pZoZDv0PAAAABcr0f9+o/1/u+PH7bZYZvPcH6Ur1STj0PwAAABQo0/9nRv3/yrcrbvPG63ve2z9dqT4Nh/4HAACAAmX6v1/U/68uWHPlkfd+Pa9nulJ9Fg79DwAAAAXK9H//qP9f2/2Lecf1arHilHSl+jwc+h8AAAAKlOn/s6L+n/zuQQdv1nPi/julK9UX4dD/AAAAUKD/R/8v8t+/Wj876v/XTx428Zlx/cZ9kq5UX4ZD/wMAAECBMu//nxP1/5T+d11/1ZtTv/g9Xam+Cof+BwAAgAJl+n9A1P9vPNuz77FLNq0fmK5UX4dD/wMAAECBMv1/7rkLLbRo+Meb2x6zb7/vZ53xU7pSfRMO/Q8AAAAFyvT/wOj9/7cG3nLPxa1bXbNPulJ9Gw79DwAAAAXK9P95Uf+/ffX1l83oNPC5LulK9V049D8AAAAUKNP/g6L+f6dV15M3uqTtWn+kK9X34dD/AAAAUKBM/58f9f/UJ2e90eeaGceflq5UP4RD/wMAAECBMv1/QdT/7y667oYX7rXKJdPSlerHcOh/AAAAKFCm/y+M+n/acssu+XbL8TOfTVeqWeHQ/wAAAFCgTP9fFPX/e3dOnbXG3N7bH5muVP/+TUD9DwAAAAXK9P/gqP/f/7HBXmt/MnbvXdKV6udw6H8AAAAoUKb/L476/4NOz4yd1qbHvV+lK9Uv4dD/AAAAUKBM/w+J+v/Dnf+8+Lyuk+b9kq5Us8Oh/wEAAKBAmf6/JOr/6fPanNDr3AYrdkxXql/Dof8BAACgQJn+vzTq/49OGPpayxtH7j8zXanmhEP/AwAAQIEy/X9Z1P8z3tpjvQ927DLu7HSl+i0c+h8AAAAKlOn/oVH/f/ziqYtdtsacL45PV6q54dD/AAAAUKBM/18e9f/MARO+O2fBFvWX05Xq93DofwAAAChQpv+HRf3/yWXLnzxwpSlnnJquVH+EQ/8DAABAgTL9f0XU/5+2fvOyU19qfM2b6Uo1Lxz6HwAAAAqU6f/hUf9/ttZ397S4Y9Rzk9KV6s9w6H8AAAAoUKb/r4z6//MRG+z7br9uax2drlR/hUP/AwAAQIEy/X9V1P9fLHHTrKHHLjj+23Slmh8O/Q8AAAAFyvT/1VH/f/lA5yXPntjmknbpSrUgHPofAAAACpTp/2ui/v/q9u4brjd9+Myu6Ur1dzj0PwAAABQo0//XRv3/9Wq3vfHhoh23/ztdqf4Jh/4HAACAAmX6/7qo/7855PQTPv7psc/+TFfq/x76HwAAAAqU6f8RUf9/++m4izfcrG+tc7pSD9+j/wEAAKBEmf6/Pur/734bMvbMjtM6tU9X6ouE43/q/wb/H//IAAAAwP9Spv9HRv3/ffu99xpy+QoP/5iu1Gvh8P4/AAAAFCjT/zdE/f/DjL+/e2v4kH+OSFfqVTj0PwAAABQo0/83Rv3/47FbLbbmvu2aPZ+u1P99AKD+BwAAgAJl+v+mqP9n9V5kvdM3+nKvqelK/d/P+Ot/AAAAKFCm/2+O+v+nV1547YLZze8+PV2pLxoO/Q8AAAAFyvT/LVH//zy16nh+05kfTE5X6v++Xv8DAABAgTL9Pyrq/19Oeu6BM15pttVJ6Uq9YTj0PwAAABQo0/+3Rv0/u98fw9a6c1zPM9OV+uLh0P8AAABQoEz/j476/9dntj/1zT69LpuertSXCIf+BwAAgAJl+v+2qP/ndLj07UuO++GFTulKfclw6H8AAAAoUKb/b4/6/7dv9tq474QN1/4tXak3Cof+BwAAgAJl+v+OqP/nzj9lmQ2mDur1WbpSXyoc+h8AAAAKlOn/MVH//77bw7/OXGynYW3TlXrjcOh/AAAAKFCm/8dG/f/HIkd1mt5sxGfHpiv1pcOh/wEAAKBAmf6/M+r/eY/e+tC6z3WuvZiu1JcJh/4HAACAAmX6/66o//+857qrzrp1bqe305X6v92v/wEAAKBAmf6/O+r/v5Y/7PTLz2n98CnpSn25cOh/AAAAKFCm/++J+n/++T9Mm3rkXf/MT1fqTcKh/wEAAKBAmf6/N+r/Bdu33Hydp09odli6Um8aDv0PAAAABcr0/31R///dcummvWe+uNee6Up9+XDofwAAAChQpv/vj/r/n2HTfj+3Vt39fbpSXyEc+h8AAAAKlOn/cf/V//WF2m6358Jf/PPB/ulKfcVw6H8AAAAoUKb/H4j6f+E//7p79lbbb/VrulL/Tzj0PwAAABQo0//jo/5fZNazQ+7oPKznF+lKfaVw6H8AAAAoUKb/H4z6v3bAoscdeP7+l+2WrtRXDof+BwAAgAJl+n9C1P/VSw+9vNSIyS+8mq7UVwmH/gcAAIACZfr/oaj/62f1brlg10ZrH5eu1FcNh/4HAACAAmX6/+Go/xsct+cSd649uteAdKXeLBz6HwAAAAqU6f9Hov5f9O3Lv+0yr/uwGelKfbVw6H8AAAAoUKb/H436f7FrDt3nsMWaXr1JulL/9zX6HwAAAAqU6f/Hov5vuMHI+++dOvW0K9OV+hrh0P8AAABQoEz/Px71/+JbjRo6b0K/1c9PV+prhkP/AwAAQIEy/T8x6v8lzju25+LHTXy2RbpSXysc+h8AAAAKlOn/J6L+X3Lpdyfv36fF4LvSlXrzcOh/AAAAKFCm/5+M+r/RXcttdOudX/dYLF2prx0O/Q8AAAAFyvT/U1H/L/XUeo3nvrLndqulK/V/PxOg/wEAAKBAmf5/Our/xtVPP9abDv7oyXSlvk449D8AAAAUKNP/z0T9v/QuPZb+eXbv+xZNV+rrhkP/AwAAQIEy/f9s1P/L/H3/7NpG49vfnq7U1wuH/gcAAIACZfr/uaj/l/3u6nc67bvKyuPTlXrLcOh/AAAAKFCm/5+P+n+5/TpuctvwGX8una7U1w+H/gcAAIACZfr/haj/mzz36RX/XN72wRvSlfoG4dD/AAAAUKBM/78Y9X/Tvuv0XrLjwA7bpyv1DcOh/wEAAKBAmf5/Ker/5Xuu2qHzZq0arJeu1DcKh/4HAACAAmX6f1LU/ytMmz7u7p9mfX1JulJvFQ79DwAAAAXK9P/LUf+vOLxhk/vnbXH1PelKfeNw6H8AAAAoUKb/X4n6/z/rvjG369pzTlsqXalvEg79DwAAAAXK9P+rUf+v1Oa39xbbtcvq/0lX6puGQ/8DAABAgTL9/1rU/ytfuNkWf40Y+ezEdKW+WTj0PwAAABQo0/+To/5fpcnAq285v8Hg1ulKffNw6H8AAAAoUKb/X4/6f9X7dj+jY+dJPa5OV+pbhEP/AwAAQIEy/T8l6v9mj5990KJb9djuvHSlvmU49D8AAAAUKNP/b0T9v9pCEyfM+WLsR6unK/V/PxOg/wEAAKBAmf5/M+r/1Wf/Z5Mlah3vuz5dqW8VDv0PAAAABcr0/1tR/6+xx8x3/pg5vP1W6Up963DofwAAAChQpv/fjvp/za5fzr7n6TYrt0pX6tuEQ/8DAABAgTL9/07U/2t9tdbShx+54M/L0pX6tuHQ/wAAAFCgTP9Pjfq/+WlXjKvO6fbgwulKvU049D8AAAAUKNP/70b9v/aUTh1+v3VUh9HpSn27cOh/AAAAKFCm/6dF/d/iwxN7j36ucYMJ6Up9+3DofwAAAChQpv/fi/p/nW53X7FfsylfL5+u1HcIh/4HAACAAmX6//2o/9dtfuYWB6zdqP+N6Uq9bTj0PwAAABQo0/8fRP2/3k1Pvzdm3uTrd0hX6juGQ/8DAABAgTL9/2HU/y2HXDD31xHdp6ybrtR3Cof+BwAAgAJl+n961P/rb7xzk4V2Hd1qSLpS3zkc+h8AAAAKlOn/j6L+3+DWXyYc0nn7YxqkK/VdwqH/AQAAoECZ/p8R9f+GK7Y+aOz5/1x0W7pS3zUc+h8AAAAKlOn/j6P+32jJRmfM/2L/dx5MV+q7hUP/AwAAQIEy/T8z6v9WD792deOthm26TLpS3z0c+h8AAAAKlOn/T6L+3/juJRotNfOEtnenK/U9wqH/AQAAoECZ/v806v9Nlnn9pwW1u0Y1TFfqe4ZD/wMAAECBMv3/WdT/m9Z/n3LnkdVvzdKV+l7h0P8AAABQoEz/fx71/2ZPb7JBl6dfbPJEulJvFw79DwAAAAXK9P8XUf9vvuGgSxe+tfOhG6cr9b3Dof8BAACgQJn+/zLq/y2u3fWk2eeMeGJ4ulLfJxz6HwAAAAqU6f+vov7fctCA9nc0a/3NBelKfd9w6H8AAAAoUKb/v476v/XWj9174HNzG66TrtTbh0P/AwAAQIEy/f9N1P9bnX1Cw/2nbtj/f1ip7xcO/Q8AAAAFyvT/t1H/bz3p3u9vXeyH629NV+r7h0P/AwAAQIEy/f9d1P/bvHPtq3OP22nKQ+lKvUM49D8AAAAUKNP/30f9v22P/detTxjUaoV0pd4xHPofAAAACpTp/x+i/m/z1+eDD7uz2TEj05X6AeHQ/wAAAFCgTP//GPX/djuuffy9fWZetHW6Uj8wHPofAAAACpTp/1lR/29/4Grt5jXt9c5G6Ur9oHDofwAAAChQpv9/ivp/h58+uHPxV8Ztemm6Uu8UDv0PAAAABcr0/89R/7fddfBpT2zUru2W6Uq9czj0PwAAABQo0/+/RP2/4z/7XtN+9pBRV6Ur9YPDof8BAACgQJn+nx31/07fn/bIysOb/zYoXal3CYf+BwAAgAJl+v/XqP933n/8gd/s+2WTNdKV+iHh0P8AAABQoEz/z4n6f5fnF/rtwY59D703Xal3DYf+BwAAgAJl+v+3qP93PfOlFdpe/tgTjdOV+qHh0P8AAABQoEz/z436f7cT52/Z5KcVvlkxXakfFg79DwAAAAXK9P/vUf/v/t42U7/ebFrDx9OV+uHh0P8AAABQoEz//xH1/x5XfnPK58+NWvKgdKXeLRz6HwAAAAqU6f95Uf/vud5Gw5du1u3HOelK/Yhw6H8AAAAoUKb//4z6f6/tmjy4yzlTHvs8Xal3D4f+BwAAgAJl+v+vqP/bXfT2/o/c2rjzjulK/chw6H8AAAAoUKb/50f9v3fTbr/88PTwZV5PV+pHhUP/AwAAQIEy/b8g6v997r9judWO7PjzyelK/ehw6H8AAAAoUKb//476f9+JN2zarrbgtr7pSv2YcOh/AAAAKFCm//+J+r/9wl3efHRmm10/TFfqx4ZD/wMAAECB/s/932ChqP/3W2batpO2mtS6W7pSPy4c+h8AAAAKlOn/haP+3//upT/Y/IsG055LV+o9wqH/AQAAoECZ/l8k6v8OT7f8o9v5Y897N12pHx8O/Q8AAAAFyvR/Ler/jvUfVrqyc48jz0hX6ieEQ/8DAABAgTL9X0X9f8C1hz3+8q5zWv6VrtR7hkP/AwAAQIEy/V+P+v/ADa/rvO2ILV47OF2pnxgO/Q8AAAAFyvR/g6j/D9r61jNPnjfy5n3TlfpJ4dD/AAAAUKBM/y8a9X+nQUeNvGHtLuf8kK7UTw6H/gcAAIACZfp/saj/O096eIfrNhu45GvpSv2UcOh/AAAAKFCm/xtG/X/w2afMOOGntj/2SFfqvcKh/wEAAKBAmf5fPOr/Lj32mr/D5bMeOyddqZ8aDv0PAAAABcr0/xJR/x/yzqXNJnds1fmjdKXeOxz6HwAAAAqU6f8lo/7vuuP2T1277/hl9ktX6qeFQ/8DAABAgTL93yjq/0P/+qPrUcN7/zw7Xan3CYf+BwAAgAJl+n+pqP8P++m5szeePeO2L9OV+unh0P8AAABQoEz/N476//ADq5uf32iVXXdPV+pnhEP/AwAAQIEy/b901P/dxtyxUptXvm69IF2p9w2H/gcAAIACZfp/maj/j1i12x9vNG0x7fB0pX5mOPQ/AAAAFCjT/8tG/d+9YZcPRvYZfN4e6Uq9Xzj0PwAAABQo0//LRf1/5IM3bHvcnXse+V26Uu8fDv0PAAAABcr0f5Oo/49aY6ORm02Y2vKYdKV+Vjj0PwAAABQo0/9No/4/euQ3Zz5zXNPXXkhX6meHQ/8DAABAgTL9v3zU/8dc/nbnqxabePM76Ur9nHDofwAAAChQpv9XiPr/2C2aPH7s1H7n9EpX6gPCof8BAACgQJn+XzHq/+N6vdTsyAFt7ngxXamfGw79DwAAAAXK9P9/ov7v8dpC84eNXrD7selKfWA49D8AAAAUKNP/K0X9f/zMbWa88HzH5U5JV+rnhUP/AwAAQIEy/b9y1P8nHD1/h9arDZ/9drpSHxQO/Q8AAAAFyvT/KlH/9/x935t7LtJ44mHpSv38cOh/AAAAKFCm/1eN+v/EfQafffPHU7rMT1fqF4RD/wMAAECBMv3fLOr/kw4e3/W1p7ot9X26Ur8wHPofAAAACpTp/9Wi/j/589Oe2qr7qJ/2TFfqF4VD/wMAAECBMv2/etT/p/w9ocXWF3S58dd0pT44HPofAAAACpTp/zWi/u+1y6kvvHrwyLP2T1fqF4dD/wMAAECBMv2/ZtT/p+63x5c3bb3FurulK/Uh4dD/AAAAUKBM/68V9X/v74YueuKXc175Il2pXxIO/Q8AAAAFyvR/86j/T+vbZsyWf/Q497h0pX5pOPQ/AAAAFCjT/2tH/d/nuT93fbH52CNeTVfql4VD/wMAAECBMv3fIur/06c9c9QVuzTYYka6Uh8aDv0PAAAABcr0/zpR/5/Rs8GF3a+bNHVAulK/PBz6HwAAAAqU6f91o/7vu+7UNY8ZusodndOV+rBw6H8AAAAoUKb/14v6/8zhyz5zdYcZu/+ZrtSvCIf+BwAAgAJl+r9l1P/9Llz302c37b3cj+lKfXg49D8AAAAUKNP/60f937/NrNqms8bPbp+u1K8Mh/4HAACAAmX6f4Oo/8+6r+voHr+2mvh8ulK/Khz6HwAAAAqU6f8No/4/u8n1O17falaXI9KV+tXh0P8AAABQoEz/bxT1/zkL3dJtSvu2S52ertSvCYf+BwAAgAJl+r9V1P8DHj/mvO2uHPjT1HSlfm049D8AAAAUKNP/G0f9f+6ot376z2n9bjwpXalfFw79DwAAAAXK9P8mUf8PXHmFRt+NnXjW5HSlPiIc+h8AAAAKlOn/TaP+P6/xhhs89XLTdaenK/Xrw6H/AeD/x96fRm89/v/+f+J8nZIpYzIl8xhCSeaESOYMyZTMs8wyJmN8DA2UoSSRIZIhCRmKDJnJUBTJlIzJ8F///Tv67WP/ju/ax/rutfZax4Xb7dKzt/f5WOfV+/tcXicAQIEy/d8q6v/LH//2jU7LvTvpvHSldns49D8AAAAUKNP/W0T9f8W6B5+yQqPdL/k1XakNCof+BwAAgAJl+n/LqP97D77zupnvXXVkl3SlNjgc+h8AAAAKlOn/raL+v/LqYQ+OenydLXdIV2p3hEP/AwAAQIEy/d866v8+rY7uvNPxX7/7RbpSuzMc+h8AAAAKlOn/NlH/X3XOqG87DLhxypLpSu2ucOh/AAAAKFCm/7eO+v/q189p9Hj7fTYdma7U7g6H/gcAAIACZfq/bdT/13zUab3pa/3bfWy6UhsSDv0PAAAABcr0/zZR/1979LWvLvPHdr1XSldqQ8Oh/wEAAKBAmf5vF/X/dT9tfcLuM4dOvjVdqd0TDv0PAAAABcr0/7ZR/1+/x79XPb31URu3Tldqw8Kh/wEAAKBAmf7fLur/voe/NOKHgyef1zxdqd0bDv0PAAAABcr0//ZR/98wc+E9Vu29xIDL0pXa8HDofwAAAChQpv93iPr/xmG9x8w66rfZbdKV2n3h0P8AAABQoEz/7xj1/39W33n/lZ9t3fi2dKU2Ihz6HwAAAAqU6f+dov6/qfF5PTt/NvDw69OV2v3h0P8AAABQoEz/7xz1/82jxvd/puFBz7ZMV2oPhEP/AwAAQIEy/d8+6v9b1lyi9derv/T70HSlNjIc+h8AAAAKlOn/XaL+v3Xga+8tN2GRFRZKV2oPhkP/AwAAQIEy/d8h6v9+1//0yw5D799phXSl9lA49D8AAAAUKNP/u0b937916xUeu/jEoaPTldrD4dD/AAAAUKBM/+8W9f+AM2c++sTxj0y5OV2pPRIO/Q8AAAAFyvT/7lH/D5y05t7tHz99083SldqocOh/AAAAKFCm/ztG/X/bpyudvvR7n3dfJ12pPRoO/Q8AAAAFyvT/HlH/337s5zd/2Wi13lekK7XHwqH/AQAAoECZ/t8z6v9Bv57c6snlLp+8aLpSW/BMQP0PAAAABcr0f6eo/wd3fmDKHhN32vj+dKX2eDj0PwAAABQo0/97Rf1/x6H/mbP6fd+dNy5dqY0Jh/4HAACAAmX6v3PU/3dO77LMd2dtPGD1dKX2RDj0PwAAABQo0/97R/1/17K/9l/25vdnD0tXak+GQ/8DAABAgTL9v0/U/3ePaNVzWucVG9fTldpT4dD/AAAAUKBM/+8b9f+QcY32H93yqcOXTldqT4dD/wMAAECBMv2/X9T/Q+tvjtn153OffTRdqY0Nh/4HAACAAmX6f/+o/++59aIVVvlh5u/bpSu1Z8Kh/wEAAKBAmf4/IOr/YS3H/vLj5mutMChdqS34TkD9DwAAAAXK9P+BUf/fu82l743d95qdrk1Xas+GQ/8DAABAgTL93yXq/+GX7tp6t757DF0/XamND4f+BwAAgAJl+v+gqP/ve+nWm/d8/Krth6QrtefCof8BAACgQJn+Pzjq/xEX73f6+ON3/+y/WKk9Hw79DwAAAAXK9P8hUf/ff+Lxe3/b6OtrVkxXai+EQ/8DAABAgTL9f2jU/w9MefjRpu+tc+Lj6UptQjj0PwAAABQo0/9do/4fufOqy+w8cWyLrdOV2ovh0P8AAABQoEz/Hxb1/4Pzps55ZLnzJ9yertReCof+BwAAgAJl+r9b1P8PfT99yoyz3u1/XbpSezkc+h8AAAAKlOn/w6P+f7jLuq1WvG/5szdJV2qvhEP/AwAAQIEy/X9E1P+PdPz6gRU6/7DILelKbWI49D8AAAAUKNP/R0b9P2rOGrvPvLnlzK3SldqkcOh/AAAAKFCm/4+K+v/RGSsfN+rnS0etka7UXg2H/gcAAIACZfr/6Kj/H+v26TU7tdxh78vTldpr4dD/AAAAUKBM/3eP+n/05FM3WGnzT1daKl2pTQ6H/gcAAIACZfr/mKj/Hz97xMTZP6zyx4PpSu31cOh/AAAAKFCm/3tE/T/mqJu/ebbvoyOfTldqb4RD/wMAAECBMv1/bNT/T3x4QONO+57ZqWm6UnszHPofAAAACpTp/+Oi/n9yUJ+Hd29/3/bbpyu1t8Kh/wEAAKBAmf4/Pur/p9bZsdPTA47/bHC6UpsSDv0PAAAABcr0/wlR/z+9+QUn/fDHK9dck67U3g6H/gcAAIACZfr/xKj/x141ru+qa1Unrpeu1N4Jh/4HAACAAmX6/6So/59pttQmHba+vcU96Urt3XDofwAAAChQpv9Pjvp/3F2TJj8+85AJVbpSey8c+h8AAAAKlOn/U6L+f3b0z99P7/1L/ybpSu39cOh/AAAAKFCm/0+N+n/8klsutczBW579WLpS+yAc+h8AAAAKlOn/06L+f+6e7m/f8+wbizRKV2ofhkP/AwAAQIEy/X961P/PrzZk0y5HLTXzgXSl9lE49D8AAAAUKNP/Z0T9/8JiA5os3PDuUc+kK7WPw6H/AQAAoECZ/j8z6v8Jj3T7ec5nR+y9WrpSmxoO/Q8AAAAFyvT/WVH/v9jiu/0emPD3Sjc1aNCg4f+6UvskHPofAAAACpTp/55R/780YINRB63e7o9N05Xap+HQ/wAAAFCgTP+fHfX/y9ctfePiF980ct10pfZZOPQ/AAAAFCjT/+dE/f/KVu+f8e/Q/Tr1Tldqn4dD/wMAAECBMv1/btT/E89Y5P35+6612/HpSm1aOPQ/AAAAFCjT/+dF/T9p4gtbLNp35ojX0pXa9HDofwAAAChQpv/Pj/r/1U/+WL7rD3v8/Um6UvsiHPofAAAACpTp/wui/n+tx3a/P7z5Nav0SldqX4ZD/wMAAECBMv1/YdT/k3+5rssvLVc8YG66UpsRDv0PAAAABcr0/0VR/7++V8fH6z+/P3rvdKU2Mxz6HwAAAAqU6f9eUf+/cchpt+x387nTdk1Xal+FQ/8DAABAgTL9f3HU/29OG3P2XZ2fWmhmulL7Ohz6HwAAAAqU6f9Lov5/q9kzO4y7b6czD09XarPCof8BAACgQJn+vzTq/yl3nT9kr7Muv+nvdKX2TTj0PwAAABQo0/+XRf3/9ugdLm+23MYvz05Xagt+pv8BAACgQJn+vzzq/3eWvPLIbyZ+t+5u6Urt23DofwAAAChQpv+viPr/3UFbPP/oe6ef8mK6UvsuHPofAAAACpTp/95R/7+3ztw1d2z0yA090pXa9+HQ/wAAAFCgTP9fGfX/+5tPbLj88atNPT1dqf0QDv0PAAAABcr0f5+o/z+4aslpXz3+edt30pXaj+HQ/wAAAFCgTP9fFfX/h5M/af/F0EV2+yVdqc0Jh/4HAACAAsX93/B//OR/6f+ro/7/6Oxm9za5+KURB6YrtZ/Cof8BAACgQJnP/6+J+v/jo5r32WX1E//eMV2pzQ2H/gcAAIACZfr/2qj/p3741TFjJty/ypfpSu3ncOh/AAAAKFCm/6+L+v+Tjvu/9P1nrQ84NV2pLXgmgP4HAACAAmX6//qo/z+dc9O6qzX8bfTr6Urt13DofwAAAChQpv/7Rv3/2Yz7qo5HHTTt43Sl9ls49D8AAAAUKNP/N0T9/3m3U2Y89ezAhc5NV2q/h0P/AwAAQIEy/X9j1P/TRk4+ssPBR535QrpS+yMc+h8AAAAKlOn//0T9P32FxS5/vPfQm45IV2rzwqH/AQAAoECZ/r8p6v8vGm46ZPrMJV4+J12p/RkO/Q8AAAAFyvT/zVH/f/nkbzsss/Xkdd9LV2rzw6H/AQAAoECZ/r8l6v8ZG7Sftvta+5xycLpS+ysc+h8AAAAKlOn/W6P+n3njZQ2f/uPGG+anK7W/w6H/AQAAoECZ/u8X9f9XVzy55g8Dtpv6XbpS+ycc+h8AAAAKlOn//lH/f71dr+dXbf9v273Sldq/4dD/AAAAUKBM/w+I+n/W+SOPWWnDTj9ukK5UCw79DwAAAAXK9P/AqP+/ee6EPrN/v27Jq9KVKvyO/gcAAIASZfr/tqj/Z7+7973P9m9xyJ3pStUwHPofAAAACpTp/9uj/v/2lH7tO+3x5dht05Vq4XDofwAAAChQpv8HRf3/3V9rzVjhwF5zR6Ur1SLh0P8AAABQoEz/D476//sOX1Qzrxm/7LLpSlULh/4HAACAAmX6/46o/3/Y98N1R81ususi6Uq14AsA9D8AAAAUKNP/d0b9/+Os1V7aaau37r03Xanq4dD/AAAAUKBM/98V9f+cXz87bOcpG767SrpSLXi9/gcAAIACZfr/7qj/f+rcdPwjS8ze8tl0pWoUDv0PAAAABcr0/5Co/+ce2uKOGSe3P3JEulItFg79DwAAAAXK9P/QqP9/nj7jwhVH9b6kcbpSLfiZ/gcAAIACZfr/nqj/fznzwE/2HNl0Up90pVo8HPofAAAACpTp/2FR//866cbtxp/20XprpyvVEuHQ/wAAAFCgTP/fG/X/b5/ev/q3S59z4ebpSrVkOPQ/AAAAFCjT/8Oj/v/92JP+bjp5zOAb05VqqXDofwAAAChQpv/vi/r/jzWfPXiVj0/+8Yl0pVo6HPofAAAACpTp/xFR/88beO7YH6uRSy6frlRNwqH/AQAAoECZ/r8/6v8/r9/ptrE9Gh7SMF2pFnS//gcAAIACZfr/gaj/57e+4tzdnp4w9q50pVo2HPofAAAACpTp/5FR//81bKsPlx3ebe5G6Uq1XDj0PwAAABQo0/8PRv3/9+pz2k674M5l+6Yr1YJnAuh/AAAAKFCm/x+K+v+fxq+uPHrlzXYdmK5UK4RD/wMAAECBMv3/cNT//45afN6ur8y5d5t0pVoxHPofAAAACpTp/0f+Z/9XDTZq+dXrzRu/e2m6UjUNh/4HAACAAmX6f1TU/wv1+2aR7f56dcs105VqpXDofwAAAChQpv8fjfq/4WXvrH3CoO5HbpGuVM3Cof8BAACgQJn+fyzq/4XbLP/KwB2GXdIvXalWDof+BwAAgAJl+n901P+L3D/82BcOazOpWbpSrRIO/Q8AAAAFyvT/41H/15Y+svdml85b78l0pVo1HPofAAAACpTp/zFR/1eLHHrPMdO7XPhwulKtFg79DwAAAAXK9P8TUf/Xnx3cod+2/QYvka5Uq4dD/wMAAECBMv3/ZNT/i/7Z+YubJk8fMD1dqRa8Rv8DAABAgTL9/1TU/412uLrBkUs3P2/ndKVaIxz6HwAAAAqU6f+no/5fbP/H1tjytL4b75+uVC3Cof8BAACgQJn+Hxv1f+Mfek54eWTnyb+lK9Wa4dD/AAAAUKBM/z8T9f/iF75y9OBRb/c+P12p1gqH/gcAAIACZfp/XNT/S7y80KWnnLxs9w/TlWrtcOh/AAAAKFCm/5+N+n/Jt7e5q+0S4zZ9M12p1gmH/gcAAIACZfp/fNT/Sx33906Tplw45eR0pVo3HPofAAAACpTp/+ei/l96vQvGt9uqz9AP0pVqvXD8z/6/5P/aWwYAAAD+mzL9/3zU/01uGnfYm7M77NQzXanWD4fP/wEAAKBAmf5/Ier/Za7sc+Ht18xa4ah0pdogHPofAAAACpTp/wlR/y/bbsc7jjtw/d+fS1eqDcOh/wEAAKBAmf5/Mer/5R76ebtWe4x+ds90pdooHPofAAAACpTp/5ei/l9+uS0/ea5/z8N/SFeqjcOh/wEAAKBAmf5/Oer/FRos9fctv09tPC9dqTYJh/4HAACAAmX6/5Wo/1d8etLqx27YbPah6UrVMhz6HwAAAAqU6f+JUf83/WflsUdv+/yAC9OVatNw6H8AAAAoUKb/J0X9v1L7Tw++cXqD8z5LV6rNwqH/AQAAoECZ/n816v9me3997ouXPrTxpHSl2jwc+h8AAAAKlOn/16L+X3n2Gre1PuzUySemK1WrcOh/AAAAKFCm/ydH/b/KuTe3PWmHub2/TleqLcKh/wEAAKBAmf5/Per/VV844MM7B7Xqvku6Um0ZDv0PAAAABcr0/xtR/6/2/qnzXvtr8Kb7pivVVuHQ/wAAAFCgTP+/GfX/6ieNWLlN865T5qQrVetw6H8AAAAoUKb/34r6v/kdje945ZXhQzumK1WbcOh/AAAAKFCm/6dE/b/GWq9fuMXKPXaala5UW4dD/wMAAECBMv3/dtT/LTb9/bAjLpi4wr/pStU2HPofAAAACpTp/3ei/l/zms3G3zy80e+HpSvVNuHQ/wAAAFCgTP+/G/X/Wk0vX33i07c8OyVdqdqFQ/8DAABAgTL9/17U/2sP2eXvbXoccPiZ6Uq1bTj0PwAAABQo0//vR/2/zpiLPzm1mt+4e7pSbRcO/Q8AAAAFyvT/B1H/r7v4U9sN+rjt7JfTlWr7cOh/AAAAKFCm/z+M+n+93U68bcD0eWd3SleqHcKh/wEAAKBAmf7/KOr/9ec+eO6J27bp/2O6Uu0YDv0PAAAABcr0/8dR/2/wVf+Dtz+s34Q/0pVqp3DofwAAAChQpv+nRv2/Ydd9xk6+tEuLQ9KVaudw6H8AAAAoUKb/P4n6f6M3vly5/6BXT3w/Xanah0P/AwAAQIEy/f9p1P8bn7X2vO47NL7mrHSl2iUc+h8AAAAKlOn/z6L+3+SI1T/ctPmwz45OV6oO4dD/AAAAUKBM/38e9X/Ljz9qO+Gv7ts/n65Uu4ZD/wMAAECBMv0/Ler/TV9ZacgLK9/Z6YJ0pdotHPofAAAACpTp/+lR/2920ec7bPZKt5EfpSvV7uHQ/wAAAFCgTP9/EfX/5sfPPPKY4XP+eCNdqTqGQ/8DAABAgTL9/2XU/63eWfPyfhdsttJJ6Uq1Rzj0PwAAABQo0/8zov7fYsf/rPl6j5F7T0tXqj3Dof8BAACgQJn+nxn1/5bzuzy/3dMnj9opXak6hUP/AwAAQIEy/f9V1P9b/XjytBM+njDzgHSl2isc+h8AAAAKlOn/r6P+b33AAw0HVg0X+T1dqTqHQ/8DAABAgTL9Pyvq/zZNzrt38NIfnf1WulLtHQ79DwAAAAXK9P83Uf9v/cD49qdMbtr/jHSl2icc+h8AAAAKlOn/2VH/tx3f+5i2I8dMOCZdqfYNh/4HAACAAmX6/9uo/7ep7dxn0mnntHglXan2C4f+BwAAgAJl+v+7qP/b9f9p3ZtOnn3iHulKtX849D8AAAAUKNP/30f9v+3GrV86ctSG13yTrlQLvhNQ/wMAAECBMv3/Q9T/2229xIwtp/T+7J90pTowHPofAAAACpTp/x+j/t/+8teql5dov33XdKXqEg79DwAAAAXK9P+cqP93WP+2qafNHt/pq3SlOigc+h8AAAAKlOn/n6L+3/HmrltfvlWvke3TlergcOh/AAAAKFCm/+dG/b9Tnx5NPzjwrT/2S1eqQ8Kh/wEAAKBAmf7/Oer/nbe968+1rmmy0k/pSnVoOPQ/AAAAFCjT/79E/d/+4WUOubj/dXtflK5UC54JqP8BAACgQJn+/zXq/12Wf/fJ6/boNOrzdKU6LBz6HwAAAAqU6f/fov7vsNAPAz/c8MuZE9OVqls49D8AAAAUKNP/v0f9v+vY9S7Y8PcWi5yQrlSHh0P/AwAAQIEy/f9H1P+7/fvn5y2rAxa6Ml2pjgiH/gcAAIACZfp/XtT/u+/SbttPPr5l2lrpSnVkOPQ/AAAAFCjT/39G/d9xn2qVq55uO7pVulIdFQ79DwAAAAXK9P/8qP/3+Pa5fy7oMf+A/6Qr1dHh0P8AAABQoEz//xX1/57nndGt+QU9Vlk1Xam6h0P/AwAAQIEy/f931P+dJox+5p3hw/8en65Ux4RD/wMAAECBMv3/T9T/e33Qd3CfVxqNuC9dqXqEQ/8DAABAgTL9/2/U/51P3u3is1aeuNti6Up1bDj0PwAAABTof9//9QZR/+997tL/XvVXq7aPpCvVceHQ/wAAAFCgTP8vFPX/Pi+8v+oFzedO/S8avzo+HPofAAAACpTp/4ZR/+/7/nftWu7Q9YZaulKdEA79DwAAAAXK9P/CUf/vd9IGn30yaPApw9OV6sRw6H8AAAAoUKb/F4n6f/9/BvTqc2mDdTdMV6qTwqH/AQAAoECZ/q9F/X9A+26Dzjrs+ZevTleqk8Oh/wEAAKBAmf6vov4/cO/u45pve+pNd6Qr1Snh0P8AAABQoEz/16P+7zJ7yOHvTH/ozHbpSnVqOPQ/AAAAFCjT/4tG/X/QQ6fN/+D3ngutnK5Up4VD/wMAAECBMv3fKOr/g5cbs9JaG46e9lS6Up0eDv0PAAAABcr0/2JR/x/S4Lo2p+3RbPRD6Up1Rjj0PwAAABQo0/+No/4/9OmOH1/ef+oBi6cr1Znh0P8AAABQoEz/Lx71f9f1/jj/w2s6rHJJulKdFQ79DwAAAAXK9P8SUf8fdtN2AzY8sM/fLdKVqmc49D8AAAAUKNP/S0b93+3KRZ66eKv1R2yZrlRnh0P/AwAAQIEy/b9U1P+Ht3vh0Otmz9qtf7pSnRMO/Q8AAAAFyvT/0lH/H/HGEZ+ducSybTdOV6pzw6H/AQAAoECZ/m8S9f+RZ93b7pIpb0+9IV2pzguH/gcAAIACZfp/maj/jzpi0KrvjrrwhgHpSnV+OPQ/AAAAFCjT/8tG/X/0x4f8u+7J405pm65UF4RD/wMAAECBMv2/XNT/3XebdfiFpzVfd0y6Ul0YDv0PAAAABcr0//JR/x8zd5NxN4yc/vJy6Up1UTj0PwAAABQo0/8rRP3f46vlBk2d3PmmhdOVqlc49D8AAAAUKNP/K0b9f2zXt3utt3TfM+9OV6qLw6H/AQAAoECZ/m8a9f9xTRt8vNHYiQ8sn65Ul4RD/wMAAECBMv2/UtT/xw95uc3nxzbq+ES6Ul0aDv0PAAAABcr0f7Oo/08Y89dK19aHr3ZXulJdFg79DwAAAAXK9P/KUf+fuHjb+edO7fFvw3Slujwc+h8AAAAKlOn/VaL+P+mOqw5d8+X5Y/qmK9UV4dD/AAAAUKBM/68a9f/Ja+311FvN2nbZKF2peodD/wMAAECBMv2/WtT/p2x61oArzr9l4W3SlerKcOh/AAAAKFCm/1eP+v/Uax49/5x7D/hiYLpS9QmH/gcAAIACZfq/edT/p/U/44uzd3zoxjXTleqqcOh/AAAAKFCm/9eI+v/0jUc36D341NMvTVeqq8Oh/wEAAKBAmf5vEfX/GVv3XWPK38+v3S9dqa4Jh/4HAACAAmX6f82o/8+8fLcJLdZo8OIW6Up1bTj0PwAAABQo0/9rRf1/VpM/jz6v3eDrn0xXquvCof8BAACgQJn+Xzvq/54PtLv0mmldT2qWrlTXh0P/AwAAQIEy/b9O1P9nj6/u+uySuW2WSFeqvuHQ/wAAAFCgTP+vG/X/ObXndtq4a6uPHk5XqhvCof8BAACgQJn+Xy/q/3N3XOar9TvOeuCqdKW6MRz6HwAAAAqU6f/1o/4/b/67i3zcb/2OG6Qr1X/Cof8BAACgQJn+3yDq//N//GHtvr/1WW3bdKW6KRz6HwAAAAqU6f8No/6/4ID1Xrlogw7/3pmuVDeHQ/8DAABAgTL9v1HU/xe+ctux67SeOmbZdKW6JRz6HwAAAAqU6f+No/6/6KKuvd/7tlmXUelKdWs49D8AAAAUKNP/m0T93+v4Hvdceu3ohe9NV6p+4dD/AAAAUKBM/7eM+v/id+7qcEaXnl8skq5U/cOh/wEAAKBAmf7fNOr/SyauuOGBj/S98dl0pRoQDv0PAAAABcr0/2ZR/196xpRJw07qfPoq6Uo1MBz6HwAAAAqU6f/No/6/rMe3s35afPrajdOV6rZw6H8AAAAoUKb/W0X9f/knGy/W8K3mL45IV6rbw6H/AQAAoECZ/t8i6v8r9rrz/oNfH3f92ulKNSgc+h8AAAAKlOn/LaP+7/3Lwbvd3+TCk/qkK9XgcOh/AAAAKFCm/7eK+v/KaUcf/8/pb7e5MV2p7giH/gcAAIACZfq/ddT/fQ4Zdu0SDy770ebpSnVnOPQ/AAAAFCjT/22i/r9qtXNaNura/ZPP0pXqrnDofwAAAChQpv+3jvr/6ntGvf7nJcO2vTBdqe4Oh/4HAACAAmX6v23U/9c8cu13D01rfPyJ6Uo1JBz6HwAAAAqU6f9tov6/drFOSx7W7tWrJqUr1dBw6H8AAAAoUKb/20X9f92Afx+q1ujy/C7pSnVPOPQ/AAAAFCjT/9tG/X99i633/PXvfs2/TleqYeHQ/wAAAFCgTP9vF/V/360WPvnuwW3OmpOuVPeGQ/8DAABAgTL9v33U/zdc99IN++4479Z905VqeDj0PwAAABQo0/87RP1/4+Sdzxh+b8OvZ6Ur1X3h0P8AAABQoEz/7xj1/3/O7n3j/udPqDqmK9WIcOh/AAAAKFCm/3eK+v+mo8aPatDs5H0PS1eq+8Oh/wEAAKBAmf7fOer/mz88b7+fXx752L/pSvVAOPQ/AAAAFCjT/+2j/r+l42s/3zd1sz/PTFeqkeHQ/wAAAFCgTP/vEvX/rXOWaHJofc7KU9KV6sFw6H8AAAAoUKb/O0T9329G602XOrZb55fTleqhcOh/AAAAKFCm/3eN+r9/t5/e/mvsnQ91T1eqh8Oh/wEAAKBAmf7fLer/Ac3WPPuPB9t/snO6Uj0SDv0PAAAABcr0/+5R/w+8a+YtjU/vve30dKUaFQ79DwAAAAXK9H/HqP9vG/3544c32fD439KV6tFw6H8AAAAoUKb/94j6//YlV+oy8vXZV+2frlSPhUP/AwAAQIEy/b9n1P+DBj3w++9vnfP8h+lKNToc+h8AAAAKlOn/TlH/D17n5OUXWXxM8/PTlerxcOh/AAAAKFCm//eK+v+OzbtssfdJTc86OV2pxoRD/wMAAECBMv3fOer/O6/6z/tDH/no1jfTleqJcOh/AAAAKFCm//eO+v+u81vt17VLi697pivVk+HQ/wAAAFCgTP/vE/X/3c/9Ourha7+sPkhXqqfCof8BAACgQJn+3zfq/yHvvnnj/G877ftculI9HQ79DwAAAAXK9P9+Uf8PPaXRGYu2vu6xo9KVamw49D8AAAAUKNP/+0f9f89fY9/eb4Mmf/6QrlTPhEP/AwAAQIEy/X9A1P/DOly06V2/vbXynulKNS4c+h8AAAAKlOn/A6P+v3ffXZv80q9X50PTlerZcOh/AAAAKFCm/7tE/T981qU/1zuOf2heulKND4f+BwAAgAJl+v+gqP/vG7lfl4VPv3DzM9KVasF3Auh/AAAAKFCm/w+O+n/ECrc+PufBce+8la5Uz4dD/wMAAECBMv1/SNT/9zd8+JZ7Xl+2zyvpSvVCOPQ/AAAAFCjT/4dG/f/Ak8ef3aXJ2z2OSVeqCeHQ/wAAAFCgTP93jfp/5AZT31988c4tv0lXqhfDof8BAACgQJn+Pyzq/wdvXHWLf9/q+8Ye6Ur1Ujj0PwAAABQo0//dov5/6Ip1l3/gkea3df1//n1CtFK9HA79DwAAAAXK9P/hUf8/vN303w86afoF/6Qr1YJnAup/AAAAKFCm/4+I+v+RNdc49eBrmzVqn65UE8Oh/wEAAKBAmf4/Mur/UQO/vv7+LlNnfZWuVJPCof8BAACgQGn/N4r+a/2oqP8fvf7Tkf+07vnMT+lK9Wo49D8AAAAUKPP5/9FR/z/WeuW9lvh29GH7pSvVa+HQ/wAAAFCgTP93j/p/9LARPxz42/rLfZ6uVJPDof8BAACgQJn+Pybq/8dXP3XxYRvM+vWidKV6PRz6HwAAAAqU6f8eUf+PaXzAxj917HD3CelK9UY49D8AAAAUKNP/x0b9/8Som99s2K/PDhPTlerNcOh/AAAAKFCm/4+L+v/JX3c8sbqk6+Y/pivVW+HQ/wAAAFCgTP8fH/X/U537XP1r18HvdEpXqinh0P8AAABQoEz/nxD1/9OHjrvv7nat+hySrlRvh0P/AwAAQIEy/X9i1P9jp1/Qcd9pc3v8ka5U74RD/wMAAECBMv1/UtT/z5w5aXajv09teVa6Ur0bDv0PAAAABcr0/8lR/4+btNSif67x0BvvpyvVe+HQ/wAAAFCgTP+fEvX/s59uuf5DOza47fl0pVrwNwH9DwAAAAXK9P+pUf+PP/bn1w4b/PwFR6cr1Qfh0P8AAABQoEz/nxb1/3OvD1nh2/PbNvooXak+DIf+BwAAgAJl+v/0qP+fP6f7L03vnT/rgnSlWvA3Af0PAAAABcr0/xlR/79wdLf39nz5gGdOSleqj8Oh/wEAAKBAmf4/M+r/CR8NaD2+2S2HvZGuVFPDof8BAACgQJn+Pyvq/xf32KD/jHqj5XZKV6pPwqH/AQAAoECZ/u8Z9f9LP33Xc8WpE3+dlq5Un4ZD/wMAAECBMv1/dtT/L898f/+dx/a4+/d0pfosHPofAAAACpTp/3Oi/n/l8KXHPHLs8B0OSFeqz8Oh/wEAAKBAmf4/N+r/iSu/sMzofm/t8lS6Ui34fwL0PwAAABQo0//nRf0/6e5F5uzasck9K6cr1fRw6H8AAAAoUKb/z4/6/9XHt5uy7Abj5yyerlRfhEP/AwAAQIEy/X9B1P+vLfVHq2m/9WryULpSfRkO/Q8AAAAFyvT/hVH/Tx7c8eax3355UIt0pZoRDv0PAAAABcr0/0VR/7++7nWn79a6xVOXpCvVzHDofwAAAChQpv97Rf3/Rqsxe6/S5brv+6cr1Vfh0P8AAABQoEz/Xxz1/5tXn/boj9d2WnzLdKX6Ohz6HwAAAAqU6f9Lov5/68zzr5h70pheN6Qr1axw6H8AAAAoUKb/L436f8qkZ3os9Mg5d26crlTfhEP/AwAAQIEy/X9Z1P9vf3rlrge89dFrbdOVanY49D8AAAAUKNP/l0f9/86xOwy7d/GmGwxIV6pvw6H/AQAAoECZ/r8i6v93f51b+7tJ76OXS1eq78Kh/wEAAKBAmf7vHfX/e523+HrJ19tfNiZdqb4Ph/4HAACAAmX6/8qo/98/dMmXD3lw9vt3pyvVD+HQ/wAAAFCgTP/3ifr/g+kT1xpx+oatF05Xqh/Dof8BAACgQJn+vyrq/w+HNbvkwWPn7LJWulLNCYf+BwAAgAJl+v/qqP8/Wv2To7qN3eyeK9OV6qdw/P/7f4n/y28ZAAAA+G/K9P81Uf9/3PirnRebeuec/6Qr1dxw+PwfAAAACpTp/2uj/p86qvnd8+rdmrRKV6qfw6H/AQAAoECZ/r8u6v9P1rxpoSHNJhw0Pl2pfgmH/gcAAIACZfr/+qj/Px24/5f7vNzwqVXTlerXcOh/AAAAKFCm//tG/f/Z9ae8ULt35PeLpSvVb+HQ/wAAAFCgTP/fEPX/563va/7b+Scvfl+6Uv0eDv0PAAAABcr0/41R/097abFhjQb36/VfNH71Rzj0PwAAABQo0///ifp/+sWTd/1zxy53PpKuVPPCof8BAACgQJn+vynq/y9O/K3HQ2vMe214ulL9GQ79DwAAAAXK9P/NUf9/OWXTKw77u80GtXSlmh8O/Q8AAAAFyvT/LVH/z9j5srWqacOOvjpdqf4Kh/4HAACAAmX6/9ao/2fOa//yr+26X7ZhulL9HQ79DwAAAAXK9H+/qP+/+r7X13d3ffX9dulK9U849D8AAAAUKNP//aP+/7rLk7V9L2nc+o50pfo3HPofAAAACpTp/wFR/89a9oS7Dzxu+re3pSv1BYf+BwAAgAJl+n9g1P/fjBi587DRzRdrk67Uw+/ofwAAAChRpv9vi/p/9rh+R/30bt9uLdOVesNw6H8AAAAoUKb/b4/6/9v63pc0XLTz+OvTlfrC4dD/AAAAUKBM/w+K+v+7W79ofvDyb/+2ULpSXyQc+h8AAAAKlOn/wVH/f99yrRfun7TsikPTlXotHPofAAAACpTp/zui/v9hm9W+/GfEuJ1Hpyv1Khz6HwAAAAqU6f87o/7/8dIPF1qi54VDVkhX6gu+AFD/AwAAQIEy/X9X1P9zBjUduPhNfd4ama7UF7xe/wMAAECBMv1/d9T/P63z2QX/7tVhsyXTlXqjcOh/AAAAKFCm/4dE/T938xmHPLDJrGNWSlfqi4VD/wMAAECBMv0/NOr/n69q8eRBc9e/Ymy6Um8cDv0PAAAABcr0/z1R///S7MamC/84+vXW6Up98XDofwAAAChQpv+HRf3/610H/jmnVc+Nbk1X6kuEQ/8DAABAgTL9f2/U/7+NPmnqPftNPfeydKW+4JmA+h8AAAAKlOn/4VH//77k/Vt3uaHZwOYNPt7k/7NSXyoc+h8AAAAKlOn/+6L+/6PjuYP3G/j8t/V0pb50OPQ/AAAAFCjT/yOi/p8359mL79qlwWLD0pV6k3DofwAAAChQpv/vj/r/zxlXdPtl7Ye6PZqu1Bd0v/4HAACAAmX6/4Go/+d32+mZ+rxTxy+drtSXDYf+BwAAgAJl+n9k1P9/TZ6zStcZc38blK7UlwuH/gcAAIACZfr/waj//z57q38ebtNqxe3Slfry4dD/AAAAUKBM/z8U9f8/Ry3++fyDBu+8frpSXyEc+h8AAAAKlOn/h6P+//fDV7dd9IquQ65NV+orhkP/AwAAQIEy/f/I/+z/eoNF17j86qOHv7VZulJvGg79DwAAAAXK9P+oqP8XevTrI88f32Ozm9OV+krh0P8AAABQoEz/Pxr1f8N7P91hk88nHnNFulJvFg79DwAAAAXK9P9jUf8vvMrKQz5duNEV66Qr9ZXDof8BAACgQJn+Hx31/yJ9RzS8crVbXr8/XamvEg79DwAAAAXK9P/jUf/Xtjh1Ws8XDtho0XSlvmo49D8AAAAUKNP/Y6L+r5of8PwaQ+afu3q6Ul8tHPofAAAACpTp/yei/q/fdvOab/dqO3BculJf8DcB/Q8AAAAFyvT/k1H/L/rZjn3ev6HToH3SlfqC1+h/AAAAKFCm/5+K+r9R9z7HrL3fdRf9nK7U1wiH/gcAAIACZfr/6aj/FzttXPvTW7VYf0a6Um8RDv0PAAAABcr0/9io/xu/esG9l/345cQO6Up9zXDofwAAAChQpv+fifp/8YMmVR/N7XXpq+lKfa1w6H8AAAAoUKb/x0X9v8QXS83YYJPxRxyXrtTXDof+BwAAgAJl+v/ZqP+X/G3Ll3rt1WSLi9OV+jrh0P8AAABQoEz/j4/6f6k9f173+pveeu/TdKW+bjj0PwAAABQo0//PRf2/9OI9Pz6354bDj01X6uuFQ/8DAABAgTL9/3zU/03GPNbm2hGzO7yUrtTXD4f+BwAAgAJl+v+FqP+XGXL1Sp9Par/M2+lKfYNw6H8AAAAoUKb/J0T9v2zTzvM3Wr73z6elK/UNw6H/AQAAoECZ/n8x6v/lrvn70HMWbfr0X+lKfaNw6H8AAAAoUKb/X4r6f/lNt3nqinc/OrRbulLfOBz6HwAAAAqU6f+Xo/5fYa2FBrw1+pyldk9X6puEQ/8DAABAgTL9/0rU/yve8cr5ax435odv05V6y3DofwAAAChQpv8nRv3f9OPlP1u318mDJqcr9U3Dof8BAACgQJn+nxT1/0pHvNPu3SEjLzolXalvFg79DwAAAAXK9P+rUf83O+ubVS95oeH656Ur9c3Dof8BAACgQJn+fy3q/5XfaPnvmatNmDg1Xam3Cof+BwAAgAJl+n9y1P+rdB18+HoLd7u0S7pS3yIc+h8AAAAKlOn/16P+X/WrQ8dN/fzOI35NV+pbhkP/AwAAQIEy/f9G1P+rzT1y0A3jN9vii3SlvlU49D8AAAAUKNP/b0b9v/puw3tdePSc93ZIV+qtw6H/AQAAoECZ/n8r6v/mT9fmX35F4+F/piv1NuHQ/wAAAFCgTP9Pifp/jQYTVjrtoFc7HJSu1LcOh/4HAACAAmX6/+2o/1ssN6/NWm26L9M5Xam3DYf+BwAAgAJl+v+dqP/XfGj7jz+YMezn79OV+jbh0P8AAABQoEz/vxv1/1rtrj//unltnj4yXam3C4f+BwAAgAJl+v+9qP/XvnKPARevPe/QCelKfdtw6H8AAAAoUKb/34/6f52bTn9qw126LPVuulLfLhz6HwAAAAqU6f8Pov5fd70nDv1wYL8fzk5X6tuHQ/8DAABAgTL9/2HU/+uddMy/nww54Iy/05X6DuHQ/wAAAFCgTP9/FPX/+u8PXbVlr1tuPjxdqe8YDv0PAAAABcr0/8dR/2/wwsB2F6zW9pXd0pX6TuHQ/wAAAFCgTP9Pjfp/w3MP/+yqF+avMztdqe8cDv0PAAAABcr0/ydR/280+/te73ze49Qe6Uq9fTj0PwAAABQo0/+fRv2/8d4bDmq+8PC+L6Yr9V3Cof8BAACgQJn+/yzq/03aNxl31tGNPn4nXal3CIf+BwAAgAJl+v/zqP9b/vPB4X3GT9zm9HSlvms49D8AAAAUKNP/06L+3/TLFV+58qBWu7+WrtQXfCeA/gcAAIACZfp/etT/mx08Ze2eV8y97/h0pb57OPQ/AAAAFCjT/19E/b95p28XWWNG1796pSv1juHQ/wAAAFCgTP9/GfV/q983/urtNoNX/SRdqe8RDv0PAAAABcr0/4yo/7c45s4OV6/dYP+905X6nuHQ/wAAAFCgTP/PjPp/y88Pvuf8ec8/PjddqXcKh/4HAACAAmX6/6uo/7d67ejemww8dfrMdKW+Vzj0PwAAABQo0/9fR/3f+vRhx366y0MNdk1X6p3Dof8BAACgQJn+nxX1f5stz5nw0X49zzgiXakveCaA/gcAAIACZfr/m6j/t75h1Bob3DD65hfSlfo+4dD/AAAAUKBM/8+O+r/t7dc26PVjs1feS1fq+4ZD/wMAAECBMv3/bdT/26zR6YvrW01d55x0pb5fOPQ/AAAAFCjT/99F/d/usX93en+TDqfOT1fq+4dD/wMAAECBMv3/fdT/2zba+q615/bpe3C6Uj8gHPofAAAACpTp/x+i/t9u1YUvPf2m9T/eK12pHxgO/Q8AAAAFyvT/j1H/bz/8paMv22vWNt+lK/Uu4dD/AAAAUKBM/8+J+n+HJW55dosRy+5+YLpSPygc+h8AAAAKlOn/n6L+3/GJfbu+0vPt+35JV+oLngmg/wEAAKBAmf6fG/X/TkOPu+jm5S/868t0pX5IOPQ/AAAAFCjT/z9H/b/zSg/decSkcavumK7UDw2H/gcAAIACZfr/l6j/21+7yvbbvNt8/9fTlXrXcOh/AAAAKFCm/3+N+n+XzT7+dOKi0x8/NV2pHxYO/Q8AAAAFyvT/b1H/d1h72l+Djus8/dx0pd4tHPofAAAACpTp/9+j/t/1znVWO3V03wYfpyv1w8Oh/wEAAKBAmf7/I+r/3ab+8vSJu8yrbZWu1I8Ih/4HAACAAmX6f17U/7sfuflBAwa2mXFLulI/Mhz6HwAAAAqU6f8/o/7v2HPR8ybP6/fI5elK/ahw6H8AAAAoUKb/50f9v8ebb9y+/dpd9lkjXakfHQ79DwAAAAXK9P9fUf/vediF23Rv82rTB9OVevdw6H8AAAAoUKb//476v9PXT3/Uf0bjeUulK/VjwqH/AQAAoECZ/v8n6v+9fr7kjwlXDHuwabpS7xEO/Q8AAAAFyvT/v1H/d969Q7NND+q+59PpSv3YcOh/AAAAKND/vv8bNIj6f+99j1pn9/F3bvdfrNSPC4f+BwAAgAJl+n+hqP/3mXXPi08f3e3zIelK/fhw6H8AAAAoUKb/G0b9v+9fd8z8YeE51z6ertRPCMd/q//r/0fvGAAAAPjvyvT/wlH/79fhoPqqn292worpSv3EcPj8HwAAAAqU6f9Fov7f/93Zwzu8MHLN29OV+knh0P8AAABQoEz/16L+P+CUjXZ5fLWTX9g6XamfHA79DwAAAAXK9H8V9f+B56/QfXqvCf02SVfqp4RD/wMAAECBMv1fj/q/y3NvXbnMkIbnXJeu1E8Nh/4HAACAAmX6f9Go/w+6omGLFUZ/VHsgXamfFg79DwAAAAXK9H+jqP8P3u7F52Ye13RGo3Slfno49D8AAAAUKNP/i0X9f8gG/0wfteiYR1ZLV+pnhEP/AwAAQIEy/d846v9Db2yz8E7vnrPPM+lK/cxw6H8AAAAoUKb/F4/6v2vDa4auNGl2003TlfpZ4dD/AAAAUKBM/y8R9f9hT+654+zlN5x3U7pS7xkO/Q8AAAAFyvT/klH/dxt59hHP9uz9YO90pX52OPQ/AAAAFCjT/0tF/X/4Co9c1mlE+z3XTVfq54RD/wMAAECBMv2/dNT/R8xYpv7oXuO3G5yu1M8Nh/4HAACAAmX6v0nU/0d2e3fmjjf1+nz7dKV+Xjj0PwAAABQo0//LRP1/VMcfXlx+7lvXrpeu1M9f8Pv/d98tAAAA8H8i0//LRv1/9Jz11vlqkyYnXJOu1C8Ih/4HAACAAmX6f7mo/7sfdduV41pdt2aVrtQvDIf+BwAAgAJl+n/5qP+P+bBr971+7PTCPelK/aJw6H8AAAAoUKb/V4j6v8fkHrs0u+HLfo/9j382ilfqvcKh/wEAAKBAmf5fMer/Y8++a/g3+7U4p0m6Ur84HPofAAAACpTp/6ZR/x+3+RkLf/9H94eHpSv1S8Kh/wEAAKBAmf5fKer/468aPX21tYbtVU9X6peGQ/8DAABAgTL93yzq/xMG9X2uY/vGzZZOV+qXhUP/AwAAQIEy/b9y1P8nrrNbi6cGvDr/0XSlfnk49D8AAAAUKNP/q0T9f9LoPy/7oneXR7dLV+pXhEP/AwAAQIEy/b9q1P8nL9nuiCYH99tvULpS7x0O/Q8AAAAFyvT/alH/n9Ks2nGXrdvUr01X6leGQ/8DAABAgTL9v3rU/6fe9dzQMTPnfbV+ulLvEw79DwAAAAXK9H/zqP9PG9dgmycaNrzl5nSlflU49D8AAAAUKNP/a0T9f3r95Y/afzah52bpSv3qcOh/AAAAKFCm/1tE/X/Gsn/9sfSzJ6+xTrpSvyYc+h8AAAAKlOn/NaP+P3NE22ZfHjXyuSvSlf/3mYD6HwAAAAqU6f+1ov4/a5urnn7y4s2uXjRdqV8XDv0PAAAABcr0/9pR//e8dK+D9hg657j705X69eHQ/wAAAFCgTP+vE/X/2beedd7qE7q1G5eu1PuGQ/8DAABAgTL9v27U/+e0fPT271a/89PV05X6DeHQ/wAAAFCgTP+vF/X/uScesf2sRu0fbpOu1G8Mh/4HAACAAmX6f/2o/8+bcu+nK7/Xe6/b0pX6f8Kh/wEAAKBAmf7fIOr/818a9Ffnxzdsdn26Ur8pHPofAAAACpTp/w2j/r/g4kNWe+b42fNbpiv1m8Oh/wEAAKBAmf7fKOr/C7+f9ezXZ53z6NB0pX5LOPQ/AAAAFCjT/xtH/X9Rl026LnffmP0WSlfqt4ZD/wMAAECBMv2/SdT/vXZe7qIdJjatr5Cu1PuFQ/8DAABAgTL93zLq/4vnvX3nY8t99NXodKXePxz6HwAAAAqU6f9No/6/5Itj5vb/ucUtS6Yr9QHh0P8AAABQoEz/bxb1/6UHDV26e8sve45MV+oDw6H/AQAAoECZ/t886v/L9hy42aadO60xNl2p3xYO/Q8AAPz/2LvzcDvnc+HjSwzP2oaEFqWGGKKTU0JMQREnVWMNrSHnmIIgRCKa1FCkxFApMQQxJdRMzHNNQQwRMc8ziTEkhgQxvxfuxC8eOY+20T7X7/18/uh975217+zlus6Rr712NlBDFf3fIen//u9v9/CIQUfesmD5SnFqLPofAAAAaqii/1dI+v+Qncb/4aSB8xxxQvlKcVos+h8AAABqqKL/V0z6/9Dnlj52980e2HXl8pViSCz6HwAAAGqoov9XSvr/sFHzXLbm8geuvlj5SjE0Fv0PAAAANVTR/ysn/X/4no9vNnrC8GcPLl8pTo9F/wMAAEANVfT/Kkn//2WFWd8f2XbkEz3LV4ozYtH/AAAAUEMV/d8x6f8jBo6Yd7URLR1Hl68Uf4tF/wMAAEANVfT/qkn/DzjlwxV7nXXeHk+XrxRnxqL/AQAAoIYq+n+1pP//utiaj5/Wb+cj9y1fKc6KRf8DAABADVX0/+pJ/x95xVF737XDx3e8V75SnB2L/gcAAIAaquj/XyX9f1RzgxNWuHnVdluWrxTnxKL/AQAAoIYq+n+NpP8HLtz7qu2fO37PtcpXinNj0f8AAABQQxX9v2bS/0efe+0Wg1ptfuyY8pXivFj0PwAAANRQRf+vlfT/Ma8sN2znly8Zu1X5SnF+LPofAAAAaqii/zsl/X/s1h+sd0LHXq0+Kl8pLohF/wMAAEANVfT/2kn/H7fuvbve2uXWLcaXrxQXxqL/AQAAoIYq+v+/k/4f9O4cA5Y/tHHtxuUrxbBY9D8AAADUUEX/d076//jt//6L7icN+WxE+UpxUSz6HwAAAGqoov9/nfT/CU/1G3lK563bdi1fKS6ORf8DAABADVX0/zpJ/594369fv6/duxv8sXyluCQW/Q8AAAA1VNH/v0n6f3Cf/nP8anKHCx8pXykujUX/AwAAQA1V9P+6Sf+f1H7TSztOeO2JieUrxWWx6H8AAACooYr+Xy/p/5MHDN5o1PI/77hp+UpxeSz6HwAAAGqoov/XT/r/lKEX9xi62eF7rFO+UlwRi/4HAACAGqro/w2S/j+13e4D9xi4zpEvla8UV8ai/wEAAKCGKvp/w6T/T7vmyWVWGvT0HbuWrxRXxaL/AQAAoIYq+n+jpP+HzNl29B0b/7jdqPKV4upY9D8AAADUUEX//zbp/6ELLDX+2GWv2vPZ8pXimlj0PwAAANRQRf9vnPT/6WeObbPDxL7H9itfKa6NRf8DAABADVX0/yZJ/5+xSacBQ+YdOPaO8pXiulj0PwAAANRQRf9vmvT/38YdvmvPkRu32qV8pfh7LPofAAAAaqii/zdL+v/Mz25ab9XzX9xiz/KV4vpY9D8AAADUUEX//y7p/7M6/2nY3X0Wu/ah8pXihlj0PwAAANRQRf//Pun/sx+7e47jut/02bblK8WNseh/AAAAqKGK/t886f9zerR5vevV+7f9pHyluCkW/Q8AAAA1VNH/WyT9f+4+K45c8dGHNnijfKW4ORb9DwAAADVU0f9bJv1/3m0Tf3Fnyw8vXK98pRgei/4HAACAGqro/62S/j//sMUH3rb8AyvdVr5S3BKL/gcAAIAaquj/Lkn/X7D6qz2WmzDP49uXrxS3xqL/AQAAoIYq+v9/kv6/8GfPbtRt4PD+e5evFFNeE6D/AQAAoIYq+v9/k/4fdtxCl5642YE7PFq+UoyIRf8DAABADVX0/9ZJ/1/UuKDNvRuPXbpL+Upxeyz6HwAAAGqoov+3Sfr/4ut7jV9j0BKjPi5fKe6IRf8DAABADVX0/7ZJ/19yyeajd5t45NA3y1eKO2PR/wAAAFBDFf2/XdL/l847aJmTl92o32/LV4q7YtH/AAAAUEMV/b990v+XtfzumpNGXjPXpPKVYmQs+h8AAABqqKL/uyb9f/mVJ/x+93n3fnOL8pXi7lj0PwAAANRQRf/vkPT/Fedd2nfNPk9e16l8pRgVi/4HAACAGqro/x2T/r9yke6DR5+/QJex5SvFPbHofwAAAKihiv7fKen/q45+euXBVx86d6/ylWJ0LPofAAAAaqii/7sl/X/1ios8ulP3zu/cW75STHmf/gcAAIAaquj/nZP+v2bxn05q3zLunKfKV4r7YtH/AAAAUEMV/b9L0v/Xnvri/CMeXbrzPuUrxf2x6H8AAACooYr+3zXp/+ue73DFXSPeXmm78pXigVj0PwAAANRQRf93T/r/793e22SFtss9/mn5SvFgLPofAAAAaqii/3dL+v/63vf33r7f6f3Hla8UD8Wi/wEAAKCGKvp/96T/b7inZdCgs7bdYd3yleLhWPQ/AAAA1FBF//dI+v/GLjd0GHnziKVvL18pHolF/wMAAEANVfT/Hkn/3zT2gAdX26HVqJ3LV4pHY9H/AAAAUEMV/d8z6f+bP/jN271aXTS0d/lK8Vgs+h8AAABqqKL/eyX9P3yjg35w2nN79Hu4fKV4PBb9DwAAADVU0f97Jv1/y6sP3P+LjifO1b18pXgiFv0PAAAANVTR/72T/r91m/l/+eTLW755T/lK8WQs+h8AAABqqKL/90r6/7b1/mvOow798LpnyleKp2LR/wAAAFBDFf3/h6T/R0wcN+HALqt0ObB8pXg6Fv0PAAAANVTR/32S/r+961a/XarzOXO/W75STHlNgP4HAACAGqro/75J/9/x9NCLHjtpp3c2KV8pno1F/wMAAEANVfT/H5P+v/P+s486ePKoc35TvlI8F4v+BwAAgBqq6P+9k/6/q+8OvXq3m6Pzy+UrxfOx6H8AAACooYr+3yfp/5HLXXZP30f379RSvlK8EIv+BwAAgBqq6P99k/6/+69//PlhLTedMax8pXgxFv0PAAAANVTR//sl/T/q9A2bD3X/4aQby1eKMbHofwAAAKihiv7/U9L/9yw1YNziVz8036LlK8XYWPQ/AAAA1FBF/++f9P/oa1dZf7/zN976uNKRYuqm/wEAAKCGKvr/gKT/753rs/OP6DPwpvblK8WUnwmg/wEAAKCGKvr/wKT/71vw9iOenXex139avlK8Eov+BwAAgBqq6P9+Sf/ff1ar3ZcZ+WLz0PKV4tVY9D8AAADUUEX//znp/we6NLfpsOyP91uzfKV4LRb9DwAAADVU0f8HJf3/4Nj7ht8y8elTh5SvFK/Hov8BAACghir6/+Ck/x/6YNLQ4wf1vX9A+UoxLhb9DwAAADVU0f/9k/5/eKPl999l46uW+Vn5SvFGLPofAAAAaqii/w9J+v+R5//8zOqb/XyXs8tXijdj0f8AAABQQxX9f2jS/492W2eN+we+dths5SvF+Fj0PwAAANRQRf8flvT/Y733b3vqhHUemqd8pZgQi/4HAACAGqro/8OT/n/8nus/3XX5wztcWb5SvBWL/gcAAIAaquj/vyT9/8TRu3bp0W7rTseXrxRvx6L/AQAAoIYq+v+IpP+fXPGSG06fPOSMlcpXindi0f8AAABQQxX9PyDp/6cWP/6Ue07qMGnx8pXi3Vj0PwAAANRQRf//Nen/p0/dbJ9VOr87X//ylWJiLPofAAAAaqii/49M+v+Zlhee2LFLr63blK8Uk2LR/wAAAFBDFf1/VNL/z175k1WPOfSSmy4uXynei0X/AwAAQA1V9P/ApP+fO2/hhW5/ufH69eUrxfux6H8AAACooYr+Pzrp/+cXeerDlTve2lygfKX4IBb9DwAAADVU0f/HJP3/wlv77D/yuVX3O7N8pZgci/4HAACAGqro/2OT/n9x85uHrtbq41O/5UrxYSz6HwAAAGqoov+PS/p/TKdDhvfaYfP7f1S+UnwUi/4HAACAGqro/0FJ/4/9eO1tTrv5+GWuLl8pPo5F/wMAAEANVfT/8Un/v9T97U/vOqtll47lK8Unseh/AAAAqKGK/j8h6f+XH16p7Qr9Rh72LX8BQPFpLPofAAAAaqii/09M+v+Vu+ZcY/u2Oz90ZPlK8Vks+h8AAABqqKL/Byf9/+oBo54ZNOK8DsuUrxSfx6L/AQAAoIYq+v+kpP9f67jAPoMvf2f9BctXpn64/gcAAIAaquj/k5P+f73/c6fstEf7YTeUrzTjMfofAAAA6qii/09J+n/c4JduaD/X0M8vKl9ptopF/wMAAEANVfT/qUn/v/HLJbqMeHC7RVuXrzRnjkX/AwAAQA1V9P9pSf+/OfyYD08afduWB5evNGeJRf8DAABADVX0/5Ck/8fPusVCu8898zWLla80Z41F/wMAAEANVfT/0KT/J8zTY9U197x4zMrlK83ZYtH/AAAAUEMV/X960v9vDbvwidEX9Zj5hPKVZhGL/gcAAIAaquj/M5L+f/ua3da6d4PBvZctX2lO+Xj9DwAAADVU0f9/S/r/nTkvOnONwVscc1T5SrMlFv0PAAAANVTR/2cm/f/uAif23+2DybefUr7SnD0W/Q8AAAA1VNH/ZyX9P/HMTbqevHTHpVYpX2nOEYv+BwAAgBqq6P+zk/6f1H7MrbetdHaPq8pXmnPGov8BAACghir6/5yk/98b0G7J5cZ1O2r+8pXmXLHofwAAAKihiv4/N+n/94cu2qrbgHuenKl8pdk6Fv0PAAAANVTR/+cl/f9BuydeOHGL2Vc5q3yl2SYW/Q8AAAA1VNH/5yf9P3n72Tsft9aD6x9SvtKcOxb9DwAAADVU0f8XJP3/4VOjz+162tzDflK+0pwnFv0PAAAANVTR/xcm/f/Rfe8fvuInN3++XPlKc0r3638AAACooYr+H5b0/8d92ne7c7F+iw4qX2n+MBb9DwAAADVU0f8XJf3/ySsH3zHkV2O2bFu+0pw3Fv0PAAAANVTR/xcn/f/p1p1/2vPFJa+5qXylOV8s+h8AAABqqKL/L0n6/7N1D5xt1YOOGnNh+Upz/lj0PwAAANRQRf9fmvT/5+9e99Ld22w4c7N8pfmjWPQ/AAAA1FD0/yzJe45JfrnVV6O5QKPRaXzy/nh8mwWmfNAX/7Pj/u9M+rb5teYC084vf4uZGo1ZLvvGp/Ut/41hhpj6fFo/MmbtRvvGTOkz/8Iy03n8ic35F260b7QqPX7aD5g5Hr/gtp8s0r/RvjHbNx+/W/eeO3XbZ+qb8avNhdftOWH5RvtG85uP37PbXtv17LVTt3gz/rm0LHb5vkP6Nto3ZvnmP6nuPfvukbzZEmPxH7/VbuCXn883Hv+HPl377PyHqW/OHo9fIu6XHr/XtJ//HPH4JXss3Gb8XCMbsy447cMbvfv26tO1AQAAwH9aRf9P7dlGo9Mtyfuji//h/l9w2tmYXv/P/K89q+ma+ny+p/6P10o0fvDJ3r9+o/V1jeY3+3m3Xn336tm1R/sZ8FwAAAAAAAAAYKr4+n+r5F0jv15ne/zr15Cnmgs3GsULjcZMk7d6+aNn/pXf//PN/0Wff18vFQAAAIB8VLz+f+r3p8+g1/8vPO1sTO/1/7P+a89quqY+n+/p9f/xeTcXefHTwx9orNKY49u+P3+7vbr23KXbNN8CMFt83KJz3Pjyvo1VGq2//fv0t9tx12k/tIiPa3vA+5ue3nrdxlzf/Lgvv/++9GEAAAD8/6ai/6f2bKNx0J/TD4s5d/r2d+j/Raadjeh/AAAA4PtU0f9Tvy49nf7/R7/+v+i0s/F/9P9s/9wTAgAAAEoq+n/q68u/tf/nnvrmd+z/lrZf35ui1bQ3v1fNxWIuHnOJmEvGbBdzqZg/ifnTmD+L+fOYv4i5dMz/ivnLmPHdAc1lY8ZL8JvLxVw+ZoeYK8RcMeZKMVeOuUrMjjFXjblazNVj/irmGjHXjLlWzE4x14753zE7x/x1zHVi/ibmujHXi7l+zA1ibhhzo5i/jblxzE1ibhpzs5i/i/n7mJvH3CLmljG3itkl5v/E/N+YW8fcJua2MbeLuX3M+JGEzR1i7hhzp5jx8xabO8fcJeauMbvH3C3m7jF7xIyfwdjsGbNXzD1j9o65V8z4CYzNPjH7xvxjzL1jxk9ebO4bc7+Yf4q5f8wDYh4Ys1/M+L/h5kExD47ZP+YhMQ+NeVjMw2P+JeYRMQfE/GvMI2MeFXNgzKNjxv9vaR4b87iYg2IeH/OEmCfGHBzzpJgnxzwl5qkxT4s5JObQmKfHPCPm32KeGfOsmGfHPCfmuTHPi3l+zAtiXhhzWMyLYl4c85KYl8aM73NqXh7ziphXxrwq5tUxr4l5bczrYv495vUxb4h5Y8ybYt4cc3jM+B6u5q0xb4s5IubtMe+IeWfMu2LG3w3TvDvmqJj3xBwd896Y98W8P+YDMR+M+VDMh2M+EvPRmI/FfDzmEzGfjPlUzKdjxt9F03w25nMxn4/5QswXY46JOTbmSzFfjvlKzFdjvhbz9ZjjYr4R882Y8bNymxNivhXz7ZjvxHw35sSY8e/L5nsx34/5QczJMT+M+VHMj2N+EvPTmJ/F/PyrOeWv8mmJf9e2xL98W+Iv0WmJPwe0xOv+WuI/wrfEnwNapvz82Sk/V3bKz4ud8nNg54w5V8zWMdvEjD8xtMwT8wcxfxhz3pjzxZw/5o9ixtcbWuLnB7X8OOZCMeP7Clvi9YUt8XWGluTPGwBA9H/rr98z6z7/yc8HAAAAmPH0PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+9D8AAADkT/8DAABA/vQ/AAAA5E//AwAAQP70PwAAAORP/wMAAED+pvZ/7ynv0f8AAACQG1//BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMif/gcAAID86X8AAADIn/4HAACA/Ol/AAAAyJ/+BwAAgPzpfwAAAMjf9Pt/5v/Y5wQAAADMWL7+DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD50/8AAACQP/0PAAAA+dP/AAAAkD/9DwAAAPnT/wAAAJA//Q8AAAD5i/6fJXnPMckvN78aLYs1Ggf9Of2waX/9q7d33P+dSd82v/bFnXR+odVMM+zJVJvr3/h7AQAAQG1U9H9LjMWn0/8LpG9/h/5ffNrZ+Df3f5vXvpqzPR7vmPPf93sDAADAf05F/8/+1WhZYjr9f0v69nfo/yWmnY3o/1k2nGFP6P82T/K5f+EHjUaz2Wi0ajVjzjcXSu5/cXPhRqN4odGYafKMuQ8AAAD/nIr+n+PL/21pWXI6/X9Z+vZ36P8lp52N6P9Zn5lxz+gfMlOXWc5/tHO/RmP7LYd/OV97+bwv51Svb3Zrh36ju015c8rjXphv+LSP+/fcBQAAgH9KRf/H6+Nb2jUancYn74+vl7f5R1//327aOeVjZ7nsG5/WDPp6fMnU59P6kTFrN9o3Zkqf+ReWmc7jT2zOv3Dr1xqtSo9f5nv6TAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/8cOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzBQAA///fNc5N") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x17, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2.501151222s ago: executing program 2 (id=780): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) 2.356796939s ago: executing program 2 (id=783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000a08000240000000000800044000000008080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 2.268730403s ago: executing program 0 (id=784): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000008c0)={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x10, 0x4, 0x1, 0x4, 0x40, 0x67, 0x0, 0x10, 0x5e, 0x0, @remote, @remote, {[@rr={0x7, 0x1b, 0x2f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @empty, @broadcast, @multicast1]}, @generic={0x82, 0xb, "dd7ffb506ded3335e2"}, @rr={0x7, 0x3, 0x4c}]}}}}}}, 0x0) 2.193376187s ago: executing program 2 (id=785): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000340)={'icmp\x00'}, &(0x7f0000000380)=0x1e) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000840), 0x4) 2.064876253s ago: executing program 0 (id=786): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x0, 0x3a5d, 0x18}) gettid() timer_create(0x8, 0x0, &(0x7f0000bbdffc)) 2.064673123s ago: executing program 5 (id=787): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0) ftruncate(r0, 0x0) 1.929940559s ago: executing program 2 (id=788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, 0x0, 0xfffffffffffffeda, 0x0, 0x0, 0xfffffffffffffc6d, 0xea, 0x8, 0x0, 0x0}}, 0x10) 1.91363623s ago: executing program 0 (id=789): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x3}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r1}, &(0x7f0000000540)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000340)={'wp256-generic\x00'}, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) 1.832935374s ago: executing program 5 (id=790): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0x8080000}) 1.832732494s ago: executing program 2 (id=791): socket$xdp(0x2c, 0x3, 0x0) socket(0x1e, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.758189947s ago: executing program 2 (id=792): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x0, "afe1038a"}, @global=@item_4={0x3, 0x1, 0x6, "24b79c71"}, @main=@item_012={0x1, 0x0, 0x8, '>'}, @local=@item_012={0x1, 0x2, 0xa, 'O'}, @local=@item_4={0x3, 0x2, 0x9, "fb70571a"}, @global=@item_4={0x3, 0x1, 0x6, "e435de00"}]}}, 0x0}, 0x0) 1.718004089s ago: executing program 0 (id=793): r0 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x4048040) recvfrom$inet(r0, &(0x7f0000000240)=""/164, 0xa4, 0x40012102, 0x0, 0x0) 1.664642612s ago: executing program 5 (id=794): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1.568254586s ago: executing program 0 (id=795): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x3, 0x0, 0x13, 0xa, 0x0, 0x64}}) 1.256897211s ago: executing program 0 (id=797): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x40, 0x8, 0xd8, {0xd8, 0xa, "f1baedb8fe3854deb4b4d94e09e5d4a061d99121fa7085838929df1d33903f94ea4e6314e9eb0728086f1952ea6bafaecc831ec2e81c1dd60ebf50ba7d2f889f7769540dab56e40d3605c0d03a51b6d5b9244a6107b364462bed86ff31409da7daaa3bb1fb22c2cdf4bc4c1d966ba81981b2cc5069b9f3a4ae3962e3ed91914e8cdbaafb1e8a060321bc3f7721c19ccd976b99ea0db7b8de4f4444303f64a3046b51d8065b8100d48259344e76c85fa9a534f3dd237eba91ec9cc304c9a528f5234b267de84a0c8152829c329d3d09244db075874626"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.117074077s ago: executing program 5 (id=798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)={0x28, r1, 0x483, 0x0, 0x4, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 1.06822384s ago: executing program 5 (id=799): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$eJzs3T1oO2UcB/DfXZJ/34JWBRHFFxARLZS6CSLoolAQKSKCChURJ2mFanFrnFwcdFbp5FLEzeooLsVF6Fq1Q0UQsThYHHSIXC6RmCZaL82l/+TzgfTuubsnv0vJ97mH0lwCmFqLEfFYRFQiYikiahGRdB9wT/5YbDd35w7WI5rNZ35NWsfl7Vyn30JENCLi4YhqZ9/2/gsnvx89ef+7b9bu+3j/+bkSXlqld8PpyfFTZx89/c5nqw9tp+1t9fay+3Vcottv7LOxmkTcPIJiV0VSHfcZcBFrb336bRaSWyLi3lb+a5G2I/ve1rWvavHgh4P6vv/L4R1lnitw+ZrNWnYNbDSBqZO25sBJuhwR+XqaLi/nc/jvKvPpa5tbbyy9ulnZeKV71Chj+g6MSj3i+IkvZj5f6Mn/T5U8/8DkyvL/7Nre99n62bm/lAET6c58keV/6aWdB0L+YerIP0yG+QJ95B8mQr1gJ/mH613B7BbI/60/Hj5arBhwpVww/z+XeU5AOcz/YYLVOiuNvrvlH6bXhfPvX31h4nTy79IP06f7+g8ATJfmzLg/gQyMy7jHHwAAAAAAAAAAAAAAAAAA4LzduYP1ziMiKaXm1x9EnD4eEdXe+tH6YoO0tZxt/Zz/LckO+1uSd2u7Vqj+i3cPc/bD+2T0n76u9rRnuxs3/DDy+v/qm7tG87xv/7M58A6WOxsRjezglWr1/Psvab//irvpP/bXXh6ywP/Um+pHniuj6uDf4p97ZdQfbPUo4sts/FnpN/6kcVtr2X/8qXffYrmg1/8Y8gkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAozV8BAAD///BWbAI=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) 840.69464ms ago: executing program 4 (id=800): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x4}, {0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0xa8a9}, r1, 0x2}}, 0x48) 755.926694ms ago: executing program 1 (id=801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xd, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 671.205119ms ago: executing program 1 (id=802): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 353.578833ms ago: executing program 5 (id=803): mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000001, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 353.301373ms ago: executing program 1 (id=804): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x1, 0x1, 0xd59f80, 0x19ef, 0x5, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x13, {0x8, 0xfffffffb}, 0xd0, 0x9}}) 351.153733ms ago: executing program 1 (id=805): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) unshare(0x22020600) tee(r0, r0, 0x4, 0x8) 268.365737ms ago: executing program 1 (id=806): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x4, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10) 0s ago: executing program 1 (id=807): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120118005520f010402038b1420100000001090238000100000000090400000371055900090582eb10000000010200090502f3"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x19, &(0x7f0000000000)) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x184, &(0x7f0000000740)={[{0x170, 0x4e00, "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"}, {0x6, 0x4e00, "6ea288cffa13"}, {}]}) kernel console output (not intermixed with test programs): V_CHANGE): team0: link becomes ready [ 65.201622][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.210789][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.219378][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.227984][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.252488][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.268621][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.281307][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.290909][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.304764][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.322780][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.343500][ T4226] Bluetooth: hci0: command 0x041b tx timeout [ 65.344882][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.362766][ T4224] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.369956][ T4224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.378148][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.386931][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.395458][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.417522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.423740][ T4225] Bluetooth: hci1: command 0x041b tx timeout [ 65.432414][ T4225] Bluetooth: hci3: command 0x041b tx timeout [ 65.437485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.454474][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.461581][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.482611][ T4184] device veth0_vlan entered promiscuous mode [ 65.503794][ T4226] Bluetooth: hci2: command 0x041b tx timeout [ 65.510001][ T4226] Bluetooth: hci4: command 0x041b tx timeout [ 65.523236][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.532301][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.554922][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.580606][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.618229][ T4184] device veth1_vlan entered promiscuous mode [ 65.629938][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.640294][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.648979][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.657562][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.666587][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.682181][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.691253][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.699947][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.708680][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.718559][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.735263][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.753735][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.794423][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.802643][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.811343][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.820031][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.833972][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.842381][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.850218][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.865916][ T4184] device veth0_macvtap entered promiscuous mode [ 65.884843][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.919206][ T4184] device veth1_macvtap entered promiscuous mode [ 65.939904][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.969292][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.978563][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.989886][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.999058][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.008518][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.058952][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.069557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.078849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.088292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.097037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.105011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.115486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.129447][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.137881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.146450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.155445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.167602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.196605][ T4194] device veth0_vlan entered promiscuous mode [ 66.204485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.212253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.231615][ T4197] device veth0_vlan entered promiscuous mode [ 66.245074][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.260747][ T4194] device veth1_vlan entered promiscuous mode [ 66.268198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.278677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.287743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.296893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.307664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.316790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.325853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.334431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.343056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.351982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.360318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.368621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.376877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.388197][ T4190] device veth0_vlan entered promiscuous mode [ 66.425582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.435679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.444990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.458674][ T4197] device veth1_vlan entered promiscuous mode [ 66.467197][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.477202][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.486100][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.494910][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.508861][ T4194] device veth0_macvtap entered promiscuous mode [ 66.518549][ T4190] device veth1_vlan entered promiscuous mode [ 66.558299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.569609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.578271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.587128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.595311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.604145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.612363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.621244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.631528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.658094][ T4194] device veth1_macvtap entered promiscuous mode [ 66.667107][ T4189] device veth0_vlan entered promiscuous mode [ 66.679280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.688039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.697388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.721431][ T4189] device veth1_vlan entered promiscuous mode [ 66.734766][ T4190] device veth0_macvtap entered promiscuous mode [ 66.762098][ T4197] device veth0_macvtap entered promiscuous mode [ 66.775924][ T4190] device veth1_macvtap entered promiscuous mode [ 66.798831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.807493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.816116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.825177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.834285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.842802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.857231][ T4197] device veth1_macvtap entered promiscuous mode [ 66.885349][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.896978][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.909797][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.928163][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.939376][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.952318][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.963695][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.974947][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.985593][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.996156][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.000797][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.004682][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.013982][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.029547][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.039826][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.056872][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.068146][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.079693][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.092720][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.104656][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.115144][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.126134][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.137343][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.147053][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.157654][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.167956][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.178668][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.190959][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.201674][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.212588][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.223007][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.233557][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.242197][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.251004][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.259715][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.268640][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.278190][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.287017][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.298320][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.309698][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.318679][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.327611][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.352973][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.361884][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.371108][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.380126][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.393003][ T4189] device veth0_macvtap entered promiscuous mode [ 67.401105][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.411639][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.422282][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.433596][ T4226] Bluetooth: hci0: command 0x040f tx timeout [ 67.434881][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.449470][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.459920][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.471024][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.492539][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.501615][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.503677][ T4226] Bluetooth: hci3: command 0x040f tx timeout [ 67.515346][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.523439][ T4226] Bluetooth: hci1: command 0x040f tx timeout [ 67.530024][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.539492][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.548373][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.566052][ T4189] device veth1_macvtap entered promiscuous mode [ 67.574942][ T4197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.583731][ T4226] Bluetooth: hci4: command 0x040f tx timeout [ 67.590804][ T4226] Bluetooth: hci2: command 0x040f tx timeout [ 67.597445][ T4197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.607511][ T4197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.616331][ T4197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.696614][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.712560][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.730371][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.742363][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.753327][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.765738][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.775894][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.786403][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.797845][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.835597][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.845834][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.865463][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.909797][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.920624][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.934460][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.945324][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.955903][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.967004][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.977616][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.991246][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.002606][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.025121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.038253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.058300][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.065007][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.080684][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.090780][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.107812][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.119790][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.134404][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.144958][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.152562][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.162680][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.201822][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.212799][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.263829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.265861][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.292289][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.311201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.361383][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.373765][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.381629][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.403852][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.417847][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.435530][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.456715][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.459381][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.491270][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.544751][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.586585][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.642987][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.677879][ T26] audit: type=1326 audit(1790110312.977:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4278 comm="syz.2.3" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f518d3a8159 code=0x0 [ 68.723601][ T4283] loop1: detected capacity change from 0 to 2048 [ 68.966301][ T4295] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.160075][ T4303] loop3: detected capacity change from 0 to 2048 [ 69.249981][ T4313] netlink: 'syz.4.23': attribute type 1 has an invalid length. [ 69.294832][ T4303] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.302165][ T4313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23'. [ 69.504039][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 69.583876][ T4226] Bluetooth: hci1: command 0x0419 tx timeout [ 69.590154][ T4226] Bluetooth: hci3: command 0x0419 tx timeout [ 69.635121][ T4319] loop0: detected capacity change from 0 to 32768 [ 69.664066][ T4226] Bluetooth: hci2: command 0x0419 tx timeout [ 69.671280][ T4226] Bluetooth: hci4: command 0x0419 tx timeout [ 69.691129][ T4319] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 69.699726][ T4319] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 69.716162][ T4319] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent points beyond end of block (not first in block) [ 69.727649][ T4319] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 69.727649][ T4319] inode = 3 2073 [ 69.727649][ T4319] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 69.748001][ T4319] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 69.756103][ T4319] gfs2: fsid=syz:syz.0: File system withdrawn [ 69.762219][ T4319] CPU: 0 PID: 4319 Comm: syz.0.25 Not tainted syzkaller #0 [ 69.769428][ T4319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.779522][ T4319] Call Trace: [ 69.782824][ T4319] [ 69.785865][ T4319] dump_stack_lvl+0x188/0x250 [ 69.790593][ T4319] ? show_regs_print_info+0x20/0x20 [ 69.795816][ T4319] ? load_image+0x410/0x410 [ 69.800351][ T4319] gfs2_withdraw+0xb9a/0x14e0 [ 69.805155][ T4319] ? gfs2_freeze_unlock+0x50/0x50 [ 69.810201][ T4319] ? _printk+0xda/0x130 [ 69.814382][ T4319] ? gfs2_lm+0x240/0x240 [ 69.818650][ T4319] ? load_image+0x410/0x410 [ 69.823189][ T4319] ? gfs2_consist_inode_i+0xc0/0xe0 [ 69.828417][ T4319] gfs2_dirent_scan+0x540/0x680 [ 69.833299][ T4319] ? gfs2_dirent_search+0x800/0x800 [ 69.838530][ T4319] gfs2_dirent_search+0x2d5/0x800 [ 69.843618][ T4319] ? gfs2_dirent_search+0x800/0x800 [ 69.848861][ T4319] ? sprintf+0xe4/0x140 [ 69.853053][ T4319] ? gfs2_dir_search+0x220/0x220 [ 69.858018][ T4319] ? vsprintf+0x30/0x30 [ 69.862212][ T4319] gfs2_dir_check+0x47/0x240 [ 69.866877][ T4319] init_journal+0x3a0/0x22d0 [ 69.871509][ T4319] ? end_bio_io_page+0x100/0x100 [ 69.876471][ T4319] ? vsnprintf+0x1b22/0x1c20 [ 69.881101][ T4319] ? snprintf+0xe5/0x140 [ 69.885459][ T4319] ? init_journal+0x2ba/0x22d0 [ 69.890250][ T4319] ? vscnprintf+0x80/0x80 [ 69.894613][ T4319] ? gfs2_glock_nq_num+0x170/0x1b0 [ 69.899752][ T4319] init_inodes+0xdb/0x320 [ 69.904112][ T4319] gfs2_fill_super+0x1671/0x1ea0 [ 69.909097][ T4319] ? gfs2_reconfigure+0xd80/0xd80 [ 69.914151][ T4319] ? gfs2_glock_nq_num+0x7e/0x1b0 [ 69.919210][ T4319] ? sb_set_blocksize+0xa5/0xe0 [ 69.924089][ T4319] get_tree_bdev+0x3e6/0x610 [ 69.928711][ T4319] ? gfs2_reconfigure+0xd80/0xd80 [ 69.933759][ T4319] gfs2_get_tree+0x4d/0x1e0 [ 69.938293][ T4319] vfs_get_tree+0x88/0x270 [ 69.942744][ T4319] do_new_mount+0x247/0xa40 [ 69.947277][ T4319] __se_sys_mount+0x2e3/0x3d0 [ 69.951992][ T4319] ? __x64_sys_mount+0xc0/0xc0 [ 69.956798][ T4319] ? lockdep_hardirqs_on+0x94/0x140 [ 69.962027][ T4319] ? __x64_sys_mount+0x1c/0xc0 [ 69.966821][ T4319] do_syscall_64+0x4c/0xa0 [ 69.971274][ T4319] ? clear_bhb_loop+0x30/0x80 [ 69.975982][ T4319] ? clear_bhb_loop+0x30/0x80 [ 69.980686][ T4319] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.986626][ T4319] RIP: 0033:0x7f21cf2d13ca [ 69.991069][ T4319] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.010697][ T4319] RSP: 002b:00007f21cd527e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.019132][ T4319] RAX: ffffffffffffffda RBX: 00007f21cd527ee0 RCX: 00007f21cf2d13ca [ 70.027125][ T4319] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f21cd527ea0 [ 70.035114][ T4319] RBP: 00002000000124c0 R08: 00007f21cd527ee0 R09: 0000000000000000 [ 70.043107][ T4319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 70.051100][ T4319] R13: 00007f21cd527ea0 R14: 0000000000012600 R15: 0000200000000180 [ 70.059108][ T4319] [ 70.062301][ T4319] gfs2: fsid=syz:syz.0: can't read journal index: -5 [ 70.106972][ T4333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 70.280562][ T4341] loop3: detected capacity change from 0 to 128 [ 70.288339][ T2299] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.345953][ T4341] ======================================================= [ 70.345953][ T4341] WARNING: The mand mount option has been deprecated and [ 70.345953][ T4341] and is ignored by this kernel. Remove the mand [ 70.345953][ T4341] option from the mount to silence this warning. [ 70.345953][ T4341] ======================================================= [ 70.429064][ T4346] loop2: detected capacity change from 0 to 1024 [ 70.603387][ T2299] usb 2-1: Using ep0 maxpacket: 32 [ 70.745695][ T2299] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 70.769157][ T2299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.822444][ T2299] usb 2-1: config 0 descriptor?? [ 70.934253][ T2299] as10x_usb: device has been detected [ 70.981647][ T2299] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 71.034799][ T2299] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 71.129941][ T4362] loop0: detected capacity change from 0 to 16 [ 71.141950][ T2299] as10x_usb: error during firmware upload part1 [ 71.160174][ T2299] Registered device nBox DVB-T Dongle [ 71.184020][ T2299] usb 2-1: USB disconnect, device number 2 [ 71.222451][ T4362] erofs: (device loop0): mounted with root inode @ nid 36. [ 71.267140][ T4366] loop2: detected capacity change from 0 to 512 [ 71.282943][ T2299] Unregistered device nBox DVB-T Dongle [ 71.293839][ T2299] as10x_usb: device has been disconnected [ 71.309425][ T4370] loop3: detected capacity change from 0 to 256 [ 71.417527][ T4366] EXT4-fs (loop2): Ignoring removed oldalloc option [ 71.426273][ T4366] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 71.512631][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.519908][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.535887][ T4370] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 71.571257][ T4366] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.47: invalid block [ 71.593805][ T4370] FAT-fs (loop3): Filesystem has been set read-only [ 71.616927][ T4370] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 71.659013][ T4366] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.47: invalid indirect mapped block 4294967295 (level 1) [ 71.744945][ T4376] loop0: detected capacity change from 0 to 4096 [ 71.775990][ T4366] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.47: invalid indirect mapped block 4294967295 (level 1) [ 71.800329][ T4366] EXT4-fs (loop2): 2 truncates cleaned up [ 71.806201][ T4366] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,oldalloc,jqfmt=vfsv0,i_version,,errors=continue. Quota mode: writeback. [ 71.873415][ T4379] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.915643][ T4376] syz.0.51 uses old SIOCAX25GETINFO [ 71.934932][ T4366] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz.2.47: path /11/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 72.222428][ T4387] loop3: detected capacity change from 0 to 256 [ 72.292465][ T4389] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 72.312337][ T4389] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 72.338367][ T4389] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 72.373510][ T4389] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 72.387296][ T4389] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 72.428408][ T4389] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 72.450490][ T4389] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 72.660435][ T4407] capability: warning: `syz.3.64' uses 32-bit capabilities (legacy support in use) [ 72.835644][ T4190] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 72.864454][ T4381] XFS: ikeep mount option is deprecated. [ 72.895499][ T4190] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 72.943846][ T4185] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.013200][ T4381] XFS (loop1): Mounting V5 Filesystem [ 73.090619][ T4431] capability: warning: `syz.2.73' uses deprecated v2 capabilities in a way that may be insecure [ 73.146898][ T4381] XFS (loop1): Ending clean mount [ 73.163414][ T2299] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.203218][ T4185] usb 5-1: Using ep0 maxpacket: 8 [ 73.279114][ T4184] XFS (loop1): Unmounting Filesystem [ 73.286043][ T4437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.77'. [ 73.333550][ T4185] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 73.505272][ T4185] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 73.518233][ T4185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.536580][ T4185] usb 5-1: Product: syz [ 73.540859][ T4185] usb 5-1: Manufacturer: syz [ 73.554433][ T2299] usb 1-1: config index 0 descriptor too short (expected 34617, got 36) [ 73.568156][ T2299] usb 1-1: config 217 has too many interfaces: 67, using maximum allowed: 32 [ 73.574954][ T4185] usb 5-1: SerialNumber: syz [ 73.590651][ T4185] usb 5-1: config 0 descriptor?? [ 73.606762][ T2299] usb 1-1: config 217 has 1 interface, different from the descriptor's value: 67 [ 73.626917][ T2299] usb 1-1: config 217 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.641414][ T2299] usb 1-1: config 217 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.656463][ T4185] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 73.656861][ T2299] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 73.675972][ T2299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.686075][ T4185] usb 5-1: setting power ON [ 73.696585][ T4185] dvb-usb: bulk message failed: -22 (2/0) [ 73.720622][ T4185] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 73.763524][ T4185] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 73.774662][ T4456] sctp: [Deprecated]: syz.3.86 (pid 4456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.774662][ T4456] Use struct sctp_sack_info instead [ 73.783285][ T4185] usb 5-1: media controller created [ 73.832545][ T4185] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 73.862192][ T4405] dvb-usb: bulk message failed: -22 (3/0) [ 73.870022][ T4405] cxusb: i2c rd: len=80 is too big! [ 73.870022][ T4405] [ 73.889277][ T4458] set_capacity_and_notify: 2 callbacks suppressed [ 73.889291][ T4458] loop1: detected capacity change from 0 to 2048 [ 73.890500][ T4185] usb 5-1: selecting invalid altsetting 6 [ 73.918700][ T4185] usb 5-1: digital interface selection failed (-22) [ 73.925533][ T4185] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 73.940350][ T4462] loop3: detected capacity change from 0 to 2048 [ 73.984531][ T4185] usb 5-1: setting power OFF [ 73.994376][ T4185] dvb-usb: bulk message failed: -22 (2/0) [ 74.000368][ T4185] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 74.001673][ T4462] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.027973][ T4458] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.043740][ T4185] (NULL device *): no alternate interface [ 74.069696][ T4185] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 74.089880][ T4185] usb 5-1: USB disconnect, device number 2 [ 74.231520][ T2299] wacom 0003:056A:0331.0001: hidraw0: USB HID v0.00 Joystick [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 74.448405][ T4234] usb 1-1: USB disconnect, device number 2 [ 74.548485][ T4472] fido_id[4472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 74.773298][ T4185] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.841008][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 75.033252][ T4185] usb 3-1: Using ep0 maxpacket: 16 [ 75.041554][ T4488] loop1: detected capacity change from 0 to 32768 [ 75.079510][ T4488] (syz.1.100,4488,0):ocfs2_parse_options:1379 ERROR: Invalid cluster_stack option [ 75.091111][ T4488] (syz.1.100,4488,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 75.193543][ T4185] usb 3-1: unable to get BOS descriptor or descriptor too short [ 75.223226][ T4227] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 75.247997][ T4514] loop0: detected capacity change from 0 to 4096 [ 75.283523][ T4185] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.303504][ T4515] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.315024][ T4185] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 75.342389][ T4185] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.373438][ T4226] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.425334][ T4517] loop0: detected capacity change from 0 to 256 [ 75.474682][ T4517] exfat: Deprecated parameter 'utf8' [ 75.480006][ T4517] exfat: Deprecated parameter 'utf8' [ 75.485685][ T4517] exfat: Deprecated parameter 'namecase' [ 75.504595][ T23] Bluetooth: hci4: command 0x0405 tx timeout [ 75.513432][ T4185] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 75.522617][ T4185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.538947][ T4185] usb 3-1: Product: syz [ 75.544047][ T4185] usb 3-1: Manufacturer: syz [ 75.549069][ T4185] usb 3-1: SerialNumber: syz [ 75.562283][ T4517] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 75.623345][ T4226] usb 5-1: Using ep0 maxpacket: 32 [ 75.641830][ T4227] usb 4-1: config 0 interface 0 has no altsetting 0 [ 75.653280][ T4227] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 75.662788][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.682930][ T4227] usb 4-1: config 0 descriptor?? [ 75.748342][ T4226] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 75.769857][ T4226] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.788683][ T4226] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.809801][ T4226] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 75.825625][ T4185] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 75.841909][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.851574][ T4185] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 75.866180][ T4226] usb 5-1: config 0 descriptor?? [ 76.034558][ T4185] usb 3-1: 2:1 : can't get High Capability descriptor [ 76.152865][ T4227] elecom 0003:056E:00FF.0002: global environment stack underflow [ 76.179362][ T4227] elecom 0003:056E:00FF.0002: item 0 0 1 11 parsing failed [ 76.201158][ T4227] elecom: probe of 0003:056E:00FF.0002 failed with error -22 [ 76.323200][ T4227] usb 3-1: USB disconnect, device number 2 [ 76.368432][ T4226] input: HID 0e8f:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0E8F:0012.0003/input/input8 [ 76.397961][ T1110] usb 4-1: USB disconnect, device number 2 [ 76.437366][ T4533] loop0: detected capacity change from 0 to 32768 [ 76.475376][ T4226] greenasia 0003:0E8F:0012.0003: input,hidraw0: USB HID v80.00 Joystick [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 76.475581][ T4533] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.122 (4533) [ 76.489039][ T4226] greenasia 0003:0E8F:0012.0003: no output reports found [ 76.573506][ T4533] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 76.625429][ T4533] BTRFS info (device loop0): setting nodatasum [ 76.631688][ T4533] BTRFS info (device loop0): enabling auto defrag [ 76.685402][ T4533] BTRFS info (device loop0): disabling tree log [ 76.712225][ T4533] BTRFS info (device loop0): using free space tree [ 76.712416][ T4227] usb 5-1: USB disconnect, device number 3 [ 76.731664][ T4533] BTRFS info (device loop0): has skinny extents [ 76.938601][ T4569] loop1: detected capacity change from 0 to 736 [ 76.956248][ T4533] BTRFS info (device loop0): enabling ssd optimizations [ 77.403422][ T4227] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.683205][ T4227] usb 4-1: Using ep0 maxpacket: 8 [ 77.781421][ T4606] device vlan2 entered promiscuous mode [ 77.826460][ T4606] device bridge0 entered promiscuous mode [ 77.833565][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.843769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 77.877625][ T4227] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.935752][ T4227] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 77.980692][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.005350][ T4227] usb 4-1: config 0 descriptor?? [ 78.371701][ T4621] loop0: detected capacity change from 0 to 32768 [ 78.457411][ T4616] loop1: detected capacity change from 0 to 32768 [ 78.521323][ T4227] wacom 0003:056A:0084.0004: hidraw0: USB HID v0.00 Joystick [HID 056a:0084] on usb-dummy_hcd.3-1/input0 [ 78.551476][ T4616] XFS (loop1): Mounting V5 Filesystem [ 78.650132][ T4616] XFS (loop1): Ending clean mount [ 78.737342][ T4227] usb 4-1: USB disconnect, device number 3 [ 78.772056][ T4184] XFS (loop1): Unmounting Filesystem [ 78.956819][ T4635] fido_id[4635]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 79.293320][ T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 79.434492][ T4641] loop2: detected capacity change from 0 to 32768 [ 79.523335][ T4641] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.155 (4641) [ 79.563780][ T4641] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 79.593282][ T4641] BTRFS info (device loop2): setting nodatasum [ 79.604144][ T4641] BTRFS info (device loop2): force zlib compression, level 3 [ 79.622000][ T4647] loop4: detected capacity change from 0 to 32768 [ 79.628843][ T4227] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.651410][ T4641] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 79.681965][ T4641] BTRFS info (device loop2): use lzo compression, level 0 [ 79.683546][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 79.699621][ T4641] BTRFS info (device loop2): turning on flush-on-commit [ 79.709209][ T4647] XFS: noikeep mount option is deprecated. [ 79.720437][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 79.723199][ T4641] BTRFS info (device loop2): enabling auto defrag [ 79.751144][ T4641] BTRFS info (device loop2): max_inline at 4096 [ 79.769849][ T4641] BTRFS info (device loop2): using free space tree [ 79.776638][ T4641] BTRFS info (device loop2): has skinny extents [ 79.809889][ T23] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 79.860891][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.908904][ T4647] XFS (loop4): Mounting V5 Filesystem [ 79.910557][ T4641] BTRFS info (device loop2): enabling ssd optimizations [ 79.951827][ T23] usb 1-1: config 0 descriptor?? [ 79.997642][ T4657] loop3: detected capacity change from 0 to 32768 [ 80.023493][ T4643] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 80.053671][ T4227] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 80.072347][ T4227] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 80.087789][ T4647] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 80.273603][ T4227] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 80.282722][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.311681][ T4647] XFS (loop4): Starting recovery (logdev: internal) [ 80.318539][ T4227] usb 2-1: Product: syz [ 80.338009][ T4227] usb 2-1: Manufacturer: syz [ 80.342873][ T4227] usb 2-1: SerialNumber: syz [ 80.367712][ T4657] XFS (loop3): Mounting V5 Filesystem [ 80.390300][ T4647] XFS (loop4): Ending recovery (logdev: internal) [ 80.403725][ T4697] binder: 4696:4697 ioctl c0306201 2000000004c0 returned -14 [ 80.457467][ T4647] XFS (loop4): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_finobt block 0x20 [ 80.480886][ T4647] XFS (loop4): Unmount and run xfs_repair [ 80.489949][ T23] wacom 0003:056A:0063.0005: unknown main item tag 0x2 [ 80.491579][ T4657] XFS (loop3): Ending clean mount [ 80.498823][ T4647] XFS (loop4): Failed to initialize disk quotas. [ 80.508684][ T23] wacom 0003:056A:0063.0005: unknown main item tag 0x3 [ 80.515851][ T23] wacom 0003:056A:0063.0005: unknown main item tag 0x1 [ 80.533034][ T23] wacom 0003:056A:0063.0005: unknown main item tag 0x2 [ 80.540834][ T23] wacom 0003:056A:0063.0005: Unknown device_type for 'HID 056a:0063'. Assuming pen. [ 80.553373][ T4702] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.564869][ T23] wacom 0003:056A:0063.0005: hidraw0: USB HID v0.01 Device [HID 056a:0063] on usb-dummy_hcd.0-1/input0 [ 80.576493][ T4703] tmpfs: Unexpected value for 'inode32' [ 80.583664][ T23] input: Wacom Volito2 2x3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0063.0005/input/input12 [ 80.689776][ T23] usb 1-1: USB disconnect, device number 3 [ 80.724523][ T4189] XFS (loop3): Unmounting Filesystem [ 80.758911][ T4194] XFS (loop4): Unmounting Filesystem [ 80.833155][ C0] usb 2-1: short aprc response received [ 80.899863][ T4710] fido_id[4710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 80.929401][ T4712] loop2: detected capacity change from 0 to 1024 [ 81.000196][ T4712] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 81.058945][ T4227] usb 2-1: failed to set cport flags for port 0 [ 81.076430][ T4227] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 81.195756][ T4227] es2_ap_driver: probe of 2-1:1.0 failed with error -71 [ 81.221216][ T4227] usb 2-1: USB disconnect, device number 3 [ 81.416139][ T4721] sp0: Synchronizing with TNC [ 81.619975][ T4729] loop0: detected capacity change from 0 to 128 [ 81.732987][ T4729] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 81.747489][ T1107] cfg80211: failed to load regulatory.db [ 81.800017][ T4729] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.093835][ T4719] loop3: detected capacity change from 0 to 40427 [ 82.140595][ T4719] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 82.179769][ T4719] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x30e4 [ 82.208300][ T4749] loop1: detected capacity change from 0 to 256 [ 82.241056][ T4719] F2FS-fs (loop3): invalid crc value [ 82.284885][ T4749] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 82.297381][ T4719] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.301256][ T4723] loop2: detected capacity change from 0 to 32768 [ 82.385252][ T1107] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.435419][ T4723] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 82.435419][ T4723] [ 82.461583][ T26] audit: type=1800 audit(1790110326.757:3): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.184" name="file1" dev="loop1" ino=1048600 res=0 errno=0 [ 82.513194][ T4723] ERROR: (device loop2): remounting filesystem as read-only [ 82.520892][ T4719] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 82.523729][ T4756] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 82.569020][ T4723] ERROR: (device loop2): jfs_rename: [ 82.569020][ T4723] [ 82.623730][ T4190] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 82.623730][ T4190] [ 82.653538][ T4719] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.665579][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 82.783653][ T1107] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 82.824519][ T1107] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.863503][ T1107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024 [ 82.889686][ T1107] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 82.910196][ T1107] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 83.111462][ T1107] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 83.121966][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.133640][ T4229] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 83.147924][ T1107] usb 1-1: Product: syz [ 83.152128][ T1107] usb 1-1: Manufacturer: syz [ 83.179732][ T1107] usb 1-1: SerialNumber: syz [ 83.233596][ T4745] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.553402][ T4229] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 83.577807][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.633496][ T1107] usb 1-1: MIDIStreaming interface descriptor not found [ 83.690450][ T4791] loop4: detected capacity change from 0 to 2048 [ 83.692014][ T1107] usb 1-1: USB disconnect, device number 4 [ 83.713600][ T4229] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 83.733138][ T4229] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 83.744334][ T4229] usb 2-1: Manufacturer: syz [ 83.762081][ T4229] usb 2-1: config 0 descriptor?? [ 83.779231][ T4791] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.953202][ T4229] rc_core: IR keymap rc-hauppauge not found [ 83.963923][ T4229] Registered IR keymap rc-empty [ 83.995216][ T4229] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 84.029041][ T4229] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 84.047007][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.079785][ T4777] loop2: detected capacity change from 0 to 32768 [ 84.114265][ T4229] usb 2-1: USB disconnect, device number 4 [ 84.503040][ T4819] loop0: detected capacity change from 0 to 2048 [ 84.574598][ T4822] loop3: detected capacity change from 0 to 512 [ 84.653199][ T4825] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.693834][ T4819] attempt to access beyond end of device [ 84.693834][ T4819] loop0: rw=0, want=281474976710724, limit=2048 [ 84.748722][ T4822] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.216: inode has both inline data and extents flags [ 84.788577][ T4801] loop4: detected capacity change from 0 to 32768 [ 84.795847][ T4819] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 84.806680][ T4819] attempt to access beyond end of device [ 84.806680][ T4819] loop0: rw=0, want=281474976710724, limit=2048 [ 84.818648][ T4819] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 84.829638][ T4819] attempt to access beyond end of device [ 84.829638][ T4819] loop0: rw=0, want=281474976710724, limit=2048 [ 84.838976][ T4822] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.216: couldn't read orphan inode 15 (err -117) [ 84.845398][ T4819] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 84.864558][ T4819] NILFS (loop0): error -5 truncating bmap (ino=16) [ 84.949455][ T4801] JBD2: Ignoring recovery information on journal [ 85.031743][ T4822] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.113326][ T4801] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 85.316492][ T4847] mmap: syz.1.226 (4847) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 85.448366][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 85.469359][ T4851] loop0: detected capacity change from 0 to 2048 [ 85.575504][ T4859] raw_sendmsg: syz.2.233 forgot to set AF_INET. Fix it! [ 85.586932][ T4860] loop3: detected capacity change from 0 to 1024 [ 85.673926][ T4861] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.048179][ T4875] loop4: detected capacity change from 0 to 512 [ 86.134845][ T4875] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.217108][ T4875] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.296432][ T4875] EXT4-fs (loop4): 1 truncate cleaned up [ 86.318817][ T4875] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,nouid32,debug_want_extra_isize=0x000000000000006c,jqfmt=vfsold,lazytime,minixdf,,errors=continue. Quota mode: none. [ 86.384420][ T4895] loop2: detected capacity change from 0 to 1024 [ 86.446644][ T4895] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.568867][ T4890] loop1: detected capacity change from 0 to 32768 [ 86.592495][ T4875] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.238: corrupted xattr entries [ 86.651813][ T4875] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.653746][ T4895] fscrypt (loop2, inode 14): Error -61 getting encryption context [ 86.686704][ T4890] [ 86.686704][ T4890] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.686704][ T4890] [ 86.725248][ T4899] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.238: corrupted xattr entries [ 86.766752][ T4890] ERROR: (device loop1): diWrite: ixpxd invalid [ 86.766752][ T4890] [ 86.772366][ T4906] binder: 4904:4906 ioctl c00c620f 200000002980 returned -22 [ 86.781335][ T4907] loop3: detected capacity change from 0 to 256 [ 86.810002][ T26] audit: type=1800 audit(1790110331.107:4): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.238" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 86.836209][ T4890] ERROR: (device loop1): txCommit: [ 86.836209][ T4890] [ 87.056572][ T4184] [ 87.056572][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.056572][ T4184] [ 87.099594][ T4184] [ 87.099594][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.099594][ T4184] [ 87.176734][ T4918] loop3: detected capacity change from 0 to 1024 [ 87.507160][ T4932] netlink: 'syz.4.262': attribute type 2 has an invalid length. [ 87.518315][ T4924] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 87.665952][ T4936] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 87.743006][ T4936] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.754415][ T4936] ext2 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.987586][ T4954] EXT4-fs (loop0): Ignoring removed orlov option [ 88.009818][ T4954] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 88.040426][ T4960] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 88.060438][ T4954] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.270: corrupted in-inode xattr [ 88.082770][ T4960] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 88.181732][ T4960] EXT4-fs (loop1): orphan cleanup on readonly fs [ 88.190197][ T4960] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 88.198321][ T4960] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 88.207655][ T4954] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.270: couldn't read orphan inode 15 (err -117) [ 88.214537][ T1110] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.251395][ T4960] EXT4-fs (loop1): 1 truncate cleaned up [ 88.257356][ T4960] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 88.263027][ T4954] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noinit_itable,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 88.398985][ T4960] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 88.474879][ T4954] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #2: block 12: comm syz.0.270: lblock 3 mapped to illegal pblock 12 (length 1) [ 88.583225][ T1110] usb 5-1: Using ep0 maxpacket: 32 [ 88.713353][ T1110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.776249][ T1110] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.809745][ T1110] usb 5-1: New USB device found, idVendor=047d, idProduct=2041, bcdDevice= 0.00 [ 88.837551][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.852303][ T1110] usb 5-1: config 0 descriptor?? [ 88.887235][ T4958] XFS (loop2): Mounting V5 Filesystem [ 88.963202][ T1107] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.985161][ T4958] XFS (loop2): Ending clean mount [ 89.058995][ T4190] XFS (loop2): Unmounting Filesystem [ 89.333376][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.355583][ T1107] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.359639][ T1110] input: HID 047d:2041 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:047D:2041.0006/input/input16 [ 89.382448][ T1107] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.422270][ T1107] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.455908][ T1107] usb 1-1: config 0 interface 0 has no altsetting 0 [ 89.462724][ T1107] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 89.478563][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.480404][ T1110] kensington 0003:047D:2041.0006: input,hidraw0: USB HID v0.00 Joystick [HID 047d:2041] on usb-dummy_hcd.4-1/input0 [ 89.489750][ T1107] usb 1-1: config 0 descriptor?? [ 89.699660][ T1110] usb 5-1: USB disconnect, device number 4 [ 89.738026][ T5008] fido_id[5008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 89.793296][ T4225] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.858187][ T5018] set_capacity_and_notify: 8 callbacks suppressed [ 89.858205][ T5018] loop3: detected capacity change from 0 to 4096 [ 89.876245][ T5016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 89.890670][ T5016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 89.903004][ T5016] netlink: 'syz.1.294': attribute type 20 has an invalid length. [ 89.990636][ T5021] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.006034][ T1107] logitech 0003:046D:C295.0007: unknown main item tag 0x7 [ 90.044317][ T1107] input: HID 046d:c295 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C295.0007/input/input17 [ 90.069081][ T4225] usb 3-1: Using ep0 maxpacket: 32 [ 90.093006][ T1107] logitech 0003:046D:C295.0007: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c295] on usb-dummy_hcd.0-1/input0 [ 90.102705][ T5025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 90.116076][ T1107] logitech 0003:046D:C295.0007: implement() called with too large value 245 (n: 0)! (kworker/1:2) [ 90.129596][ T1107] logitech 0003:046D:C295.0007: Force feedback support for Logitech Gaming Wheels [ 90.283472][ T4225] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 90.313975][ T4225] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 90.331506][ T5032] loop1: detected capacity change from 0 to 64 [ 90.347960][ T4229] usb 1-1: USB disconnect, device number 5 [ 90.379057][ T5030] fido_id[5030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 90.404256][ T5036] loop3: detected capacity change from 0 to 512 [ 90.447364][ T5036] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 90.486833][ T5038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.305'. [ 90.506545][ T5036] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.570479][ T5036] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,barrier=0x000000000000000d,minixdf,stripe=0x0000000000000b74,resuid=0x0000000000000000,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 90.603610][ T5036] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.613509][ T4225] usb 3-1: string descriptor 0 read error: -22 [ 90.632388][ T4225] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 90.644544][ T5045] loop1: detected capacity change from 0 to 1024 [ 90.647570][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.673651][ T5007] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 90.698792][ T4225] usb 3-1: MIDIStreaming interface descriptor not found [ 90.761847][ T5045] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none. [ 90.784218][ T5045] EXT4-fs error (device loop1): ext4_get_first_dir_block:3610: inode #11: comm syz.1.306: directory missing '.' [ 90.799936][ T5045] EXT4-fs (loop1): Remounting filesystem read-only [ 90.858295][ T5052] Bluetooth: hci0: unsupported parameter 5135 [ 90.878433][ T5052] Bluetooth: hci0: unsupported parameter 8192 [ 90.890309][ T5052] Bluetooth: hci0: unsupported parameter 5135 [ 90.909315][ T5052] Bluetooth: hci0: unsupported parameter 8192 [ 90.935736][ T4189] EXT4-fs error (device loop3): ext4_lookup:1857: inode #11: comm syz-executor: ' ' linked to parent dir [ 90.974590][ T4189] EXT4-fs error (device loop3): ext4_lookup:1857: inode #11: comm syz-executor: ' ' linked to parent dir [ 91.017707][ T5054] loop0: detected capacity change from 0 to 512 [ 91.114011][ T5056] Set syz1 is full, maxelem 9 reached [ 91.117321][ T5054] FAT-fs (loop0): error, corrupted file size (i_pos 51, 9216) [ 91.204055][ T4226] usb 3-1: USB disconnect, device number 3 [ 91.573928][ T5067] loop1: detected capacity change from 0 to 8192 [ 91.747039][ T5067] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 91.752546][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.819790][ T5067] REISERFS (device loop1): using ordered data mode [ 91.836512][ T5067] reiserfs: using flush barriers [ 91.848731][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.860495][ T5067] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.946883][ T5067] REISERFS (device loop1): checking transaction log (loop1) [ 91.968632][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.007772][ T5067] REISERFS (device loop1): Using r5 hash to sort names [ 92.036273][ T5067] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 92.115933][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.297373][ T5083] loop2: detected capacity change from 0 to 8192 [ 92.364165][ T5075] loop4: detected capacity change from 0 to 32768 [ 92.414658][ T5075] XFS: ikeep mount option is deprecated. [ 92.482033][ T5083] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 92.524556][ T5083] REISERFS (device loop2): using ordered data mode [ 92.531127][ T5083] reiserfs: using flush barriers [ 92.651548][ T5083] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.762093][ T5075] XFS (loop4): Mounting V5 Filesystem [ 92.763749][ T5083] REISERFS (device loop2): checking transaction log (loop2) [ 92.843452][ T5083] REISERFS (device loop2): Using r5 hash to sort names [ 92.884000][ T5083] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 92.958813][ T5083] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 93.030464][ T5075] XFS (loop4): Ending clean mount [ 93.102032][ T5118] loop0: detected capacity change from 0 to 256 [ 93.169493][ T4194] XFS (loop4): Unmounting Filesystem [ 93.178504][ T5086] chnl_net:caif_netlink_parms(): no params data found [ 93.238991][ T5118] FAT-fs (loop0): Directory bread(block 64) failed [ 93.293376][ T5118] FAT-fs (loop0): Directory bread(block 65) failed [ 93.300041][ T5118] FAT-fs (loop0): Directory bread(block 66) failed [ 93.339711][ T5118] FAT-fs (loop0): Directory bread(block 67) failed [ 93.377429][ T5118] FAT-fs (loop0): Directory bread(block 68) failed [ 93.413272][ T5118] FAT-fs (loop0): Directory bread(block 69) failed [ 93.419916][ T5118] FAT-fs (loop0): Directory bread(block 70) failed [ 93.440336][ T5118] FAT-fs (loop0): Directory bread(block 71) failed [ 93.532192][ T5118] FAT-fs (loop0): Directory bread(block 72) failed [ 93.568452][ T5118] FAT-fs (loop0): Directory bread(block 73) failed [ 93.765581][ T5143] fuse: Bad value for 'fd' [ 93.761737][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.822362][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.834013][ T5143] cgroup: Unexpected value for 'all' [ 93.851271][ T5086] device bridge_slave_0 entered promiscuous mode [ 93.923397][ T5140] mkiss: ax0: crc mode is auto. [ 93.955718][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.993692][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.001774][ T5086] device bridge_slave_1 entered promiscuous mode [ 94.148107][ T5157] loop0: detected capacity change from 0 to 16 [ 94.223422][ T5157] erofs: (device loop0): mounted with root inode @ nid 36. [ 94.251920][ T5086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.364369][ T5086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.463388][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 94.549574][ T5086] team0: Port device team_slave_0 added [ 94.748611][ T5086] team0: Port device team_slave_1 added [ 94.825356][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.833902][ T5146] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 94.845105][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.865472][ T5146] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 94.874445][ T4229] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.883214][ T4226] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.887742][ T5086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.926739][ T5146] F2FS-fs (loop4): invalid crc value [ 94.975643][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.982655][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.013718][ T5146] F2FS-fs (loop4): Found nat_bits in checkpoint [ 95.071806][ T5086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.109056][ T5146] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 95.121371][ T5146] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 95.143215][ T4226] usb 2-1: Using ep0 maxpacket: 8 [ 95.222755][ T9] device hsr_slave_0 left promiscuous mode [ 95.241643][ T9] device hsr_slave_1 left promiscuous mode [ 95.263457][ T4226] usb 2-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.286789][ T4226] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.293706][ T4226] usb 2-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 95.302796][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.304595][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.319156][ T4229] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 95.319878][ T4226] usb 2-1: config 0 descriptor?? [ 95.339784][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.350630][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.367367][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.373730][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.389255][ T9] device bridge_slave_1 left promiscuous mode [ 95.394839][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.405658][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 95.409882][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.442443][ T9] device bridge_slave_0 left promiscuous mode [ 95.448799][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.472904][ T9] device veth1_macvtap left promiscuous mode [ 95.479887][ T9] device veth0_macvtap left promiscuous mode [ 95.499855][ T9] device veth1_vlan left promiscuous mode [ 95.513558][ T4229] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 95.521503][ T9] device veth0_vlan left promiscuous mode [ 95.526078][ T4229] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 95.546077][ T4229] usb 1-1: Manufacturer: syz [ 95.556814][ T4229] usb 1-1: config 0 descriptor?? [ 95.636330][ T5204] set_capacity_and_notify: 1 callbacks suppressed [ 95.636345][ T5204] loop4: detected capacity change from 0 to 512 [ 95.806474][ T4226] wacom 0003:056A:00FB.0008: unknown main item tag 0xe [ 95.825495][ T4226] wacom 0003:056A:00FB.0008: unbalanced collection at end of report description [ 95.835198][ T4226] wacom 0003:056A:00FB.0008: parse failed [ 95.841021][ T4226] wacom: probe of 0003:056A:00FB.0008 failed with error -22 [ 95.982033][ T9] team0 (unregistering): Port device team_slave_1 removed [ 96.000329][ T9] team0 (unregistering): Port device team_slave_0 removed [ 96.022079][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.040450][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.051281][ T4229] appleir 0003:05AC:8243.0009: item fetching failed at offset 0/1 [ 96.075140][ T4229] appleir 0003:05AC:8243.0009: parse failed [ 96.093852][ T4229] appleir: probe of 0003:05AC:8243.0009 failed with error -22 [ 96.112947][ T4266] usb 2-1: USB disconnect, device number 5 [ 96.163359][ T1110] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 96.192549][ T9] bond0 (unregistering): Released all slaves [ 96.272977][ T5086] device hsr_slave_0 entered promiscuous mode [ 96.294261][ T5086] device hsr_slave_1 entered promiscuous mode [ 96.322379][ T23] usb 1-1: USB disconnect, device number 6 [ 96.328699][ T5086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.352202][ T5086] Cannot create hsr debugfs directory [ 96.366456][ T5211] loop2: detected capacity change from 0 to 4096 [ 96.489221][ T5213] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.543225][ T4226] Bluetooth: hci1: command 0x041b tx timeout [ 96.590200][ T1110] usb 5-1: config index 0 descriptor too short (expected 34617, got 36) [ 96.604578][ T1110] usb 5-1: config 217 has too many interfaces: 67, using maximum allowed: 32 [ 96.644193][ T1110] usb 5-1: config 217 has 1 interface, different from the descriptor's value: 67 [ 96.664503][ T1110] usb 5-1: config 217 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.711925][ T5086] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.713329][ T1110] usb 5-1: config 217 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.750404][ T1110] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 96.771038][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.814639][ T5086] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.832124][ T5086] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.890670][ T5086] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.938956][ T5227] loop2: detected capacity change from 0 to 8192 [ 96.973309][ T4225] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 97.167094][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.213313][ T4225] usb 2-1: Using ep0 maxpacket: 8 [ 97.227072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.244379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.285276][ T5086] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.294503][ T1110] wacom 0003:056A:0331.000A: hidraw0: USB HID v0.00 Joystick [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 97.309857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.333609][ T4225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.352252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.368782][ T4225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.417268][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.424437][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.440619][ T4225] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 97.486048][ T4225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.513261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.548744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.577330][ T1110] usb 5-1: USB disconnect, device number 5 [ 97.602783][ T4225] usb 2-1: config 0 descriptor?? [ 97.616878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.663653][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.667422][ T5252] fido_id[5252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 97.670748][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.700216][ T5254] genirq: Flags mismatch irq 32. 00000000 (comedi_parport) vs. 00000000 (virtio1-output.0) [ 97.715936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.732376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.797746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.839541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.898583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.947474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.963864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.983134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.021043][ T5086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.049927][ T5267] loop2: detected capacity change from 0 to 4096 [ 98.060088][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.082382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.088193][ T4225] uclogic 0003:145F:0212.000B: interface is invalid, ignoring [ 98.100861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.118794][ T5267] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 98.191438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.216768][ T5267] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 98.333669][ T1107] usb 2-1: USB disconnect, device number 6 [ 98.446716][ T1110] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 98.528678][ T1110] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 98.623196][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 98.711904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.749437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.789479][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.805457][ T5290] fido_id[5290]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.823923][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 98.999991][ T5310] loop4: detected capacity change from 0 to 128 [ 99.170783][ T5310] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 99.268117][ T5310] hpfs: filesystem error: improperly stopped [ 99.293558][ T5310] hpfs: You really don't want any checks? You are crazy... [ 99.301351][ T5310] hpfs: hpfs_map_sector(): read error [ 99.344745][ T5310] hpfs: code page support is disabled [ 99.351417][ T5310] hpfs: hpfs_map_4sectors(): unaligned read [ 99.389732][ T5310] hpfs: hpfs_map_4sectors(): unaligned read [ 99.418515][ T5310] hpfs: filesystem error: unable to find root dir [ 99.434813][ T1110] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 99.495037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.530226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.613217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.646868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.671155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.696346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.730969][ T5086] device veth0_vlan entered promiscuous mode [ 99.776701][ T5086] device veth1_vlan entered promiscuous mode [ 99.833589][ T1110] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 99.836470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.867666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.869892][ T1110] usb 1-1: config 0 has no interface number 0 [ 99.913260][ T1110] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.926898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.971672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.009929][ T5086] device veth0_macvtap entered promiscuous mode [ 100.041527][ T5086] device veth1_macvtap entered promiscuous mode [ 100.093508][ T1110] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 100.106091][ T5340] tmpfs: Cannot retroactively limit inodes [ 100.113886][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.121924][ T1110] usb 1-1: Product: syz [ 100.137669][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.163141][ T1110] usb 1-1: Manufacturer: syz [ 100.173536][ T1110] usb 1-1: SerialNumber: syz [ 100.206180][ T1110] usb 1-1: config 0 descriptor?? [ 100.208832][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.251612][ T1110] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 100.272725][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.318432][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.347696][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.384409][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.423156][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.450349][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.516019][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.533398][ T4225] usb 1-1: USB disconnect, device number 7 [ 100.554293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.585678][ T4225] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 100.592220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.641888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.689180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.703209][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 100.760129][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.780182][ T5359] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 100.786261][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.820169][ T5359] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.874042][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.899209][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.925556][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.945555][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.970393][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.005434][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.031962][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.053414][ T5086] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.071965][ T5086] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.082985][ T5086] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.127621][ T5086] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.188656][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.207160][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.336460][ T5382] loop4: detected capacity change from 0 to 256 [ 101.433689][ T5382] exfat: Deprecated parameter 'utf8' [ 101.439333][ T5382] exfat: Deprecated parameter 'namecase' [ 101.456825][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.473945][ T5382] exfat: Deprecated parameter 'namecase' [ 101.475481][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.542704][ T5382] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 101.576818][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.639193][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.673973][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.723467][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.116440][ T5379] loop0: detected capacity change from 0 to 32768 [ 102.282787][ T5379] non-latin1 character 0x466c found in JFS file name [ 102.356781][ T5379] mount with iocharset=utf8 to access [ 102.563484][ T1110] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.751340][ T5446] netlink: 'syz.1.438': attribute type 10 has an invalid length. [ 102.769345][ T5442] loop5: detected capacity change from 0 to 1024 [ 102.779083][ T5446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.438'. [ 102.790650][ T5446] device dummy0 entered promiscuous mode [ 102.798925][ T5446] bridge0: port 3(dummy0) entered blocking state [ 102.805871][ T5446] bridge0: port 3(dummy0) entered disabled state [ 102.813630][ T1110] usb 5-1: Using ep0 maxpacket: 32 [ 102.819983][ T5446] bridge0: port 3(dummy0) entered blocking state [ 102.826804][ T5446] bridge0: port 3(dummy0) entered forwarding state [ 102.911704][ T5453] loop1: detected capacity change from 0 to 164 [ 102.921199][ T5442] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.979294][ T1110] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 102.999900][ T5451] loop2: detected capacity change from 0 to 4096 [ 103.029438][ T1110] usb 5-1: config 0 has no interface number 0 [ 103.065249][ T5451] ntfs3: Unknown parameter '' [ 103.070003][ T1110] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 103.275555][ T1110] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 103.311260][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.356430][ T1110] usb 5-1: Product: syz [ 103.381364][ T1110] usb 5-1: Manufacturer: syz [ 103.419589][ T1110] usb 5-1: SerialNumber: syz [ 103.420702][ T5459] loop5: detected capacity change from 0 to 4096 [ 103.458783][ T1110] usb 5-1: config 0 descriptor?? [ 103.503747][ T5420] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.750440][ T5420] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.790830][ T5459] ntfs3: loop5: failed to convert name for inode 1e. [ 103.798729][ T5472] loop2: detected capacity change from 0 to 4096 [ 103.942928][ T5472] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 104.001730][ T5472] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 104.077766][ T5472] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 104.120134][ T5472] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 104.173249][ T5472] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 104.261051][ T5472] ntfs: volume version 3.1. [ 104.290709][ T1110] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 104.311598][ T5472] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 104.332963][ T1110] asix: probe of 5-1:0.188 failed with error -71 [ 104.377736][ T5472] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 104.415997][ T1110] usb 5-1: USB disconnect, device number 6 [ 104.515987][ T5472] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 104.547754][ T5472] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 104.590610][ T5472] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 105.132886][ T5489] loop1: detected capacity change from 0 to 32768 [ 105.182172][ T5531] loop2: detected capacity change from 0 to 1024 [ 105.353403][ T5531] hfsplus: invalid length 2325 has been corrected to 255 [ 105.369091][ T5540] binder: 5539:5540 ioctl c018620c 200000000000 returned -22 [ 105.409916][ T5531] hfsplus: invalid length 2325 has been corrected to 255 [ 105.484538][ T5546] loop4: detected capacity change from 0 to 1024 [ 105.529745][ T5531] hfsplus: invalid length 2325 has been corrected to 255 [ 105.654672][ T5546] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 105.663986][ T5550] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 105.725101][ T4226] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 105.784194][ T5553] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.070724][ T5562] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 106.093380][ T4226] usb 6-1: config 0 interface 0 has no altsetting 0 [ 106.104462][ T4226] usb 6-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 106.163425][ T4226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.197247][ T4226] usb 6-1: config 0 descriptor?? [ 106.725030][ T4226] elecom 0003:056E:00FF.000D: global environment stack underflow [ 106.732832][ T4226] elecom 0003:056E:00FF.000D: item 0 0 1 11 parsing failed [ 106.779352][ T4226] elecom: probe of 0003:056E:00FF.000D failed with error -22 [ 106.959470][ T4226] usb 6-1: USB disconnect, device number 2 [ 107.301662][ T5615] Invalid ELF header magic: != ELF [ 107.710332][ T5639] set_capacity_and_notify: 3 callbacks suppressed [ 107.710348][ T5639] loop0: detected capacity change from 0 to 64 [ 107.752087][ T5642] loop5: detected capacity change from 0 to 512 [ 107.763426][ T1110] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 107.897135][ T5642] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 107.943671][ T5642] System zones: 1-12 [ 107.962476][ T5642] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.511: corrupted inode contents [ 108.004688][ T5621] loop2: detected capacity change from 0 to 32768 [ 108.026734][ T5642] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 108.043301][ T5642] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.511: corrupted inode contents [ 108.071107][ T5642] EXT4-fs error (device loop5): ext4_evict_inode:332: inode #15: comm syz.5.511: mark_inode_dirty error [ 108.099628][ T5621] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.502 (5621) [ 108.125296][ T5642] EXT4-fs (loop5): 1 orphan inode deleted [ 108.131111][ T5642] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000006,discard,prjquota,,errors=continue. Quota mode: writeback. [ 108.142066][ T5623] loop4: detected capacity change from 0 to 32768 [ 108.184631][ T5621] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 108.203512][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.220569][ T5621] BTRFS info (device loop2): using free space tree [ 108.249547][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.256463][ T5621] BTRFS info (device loop2): has skinny extents [ 108.287080][ T1110] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.287100][ T5623] XFS (loop4): Mounting V5 Filesystem [ 108.310062][ T1110] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 108.313005][ T5642] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5893: inode #18: comm syz.5.511: bad extra_isize 6 (inode size 256) [ 108.320157][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.349857][ T1110] usb 2-1: config 0 descriptor?? [ 108.401188][ T5623] XFS (loop4): Ending clean mount [ 108.468728][ T4194] XFS (loop4): Unmounting Filesystem [ 108.604001][ T5659] loop0: detected capacity change from 0 to 8192 [ 108.664633][ T4336] loop0: p1 < > p3 p4 < > [ 108.680582][ T5679] loop5: detected capacity change from 0 to 1024 [ 108.711474][ T4336] loop0: p3 start 852736 is beyond EOD, truncated [ 108.719440][ T5621] BTRFS info (device loop2): enabling ssd optimizations [ 108.811594][ T5659] loop0: p1 < > p3 p4 < > [ 108.830967][ T5685] BTRFS info (device loop2): device stats zeroed by syz.2.502 (5685) [ 108.858245][ T1110] input: HID 046d:ca03 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:CA03.000E/input/input21 [ 108.883636][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.516'. [ 108.898262][ T5659] loop0: p3 start 852736 is beyond EOD, truncated [ 108.998023][ T1110] logitech 0003:046D:CA03.000E: input,hidraw0: USB HID v1.00 Joystick [HID 046d:ca03] on usb-dummy_hcd.1-1/input0 [ 109.063471][ T1110] logitech 0003:046D:CA03.000E: missing HID_OUTPUT_REPORT 0 [ 109.225582][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 109.229931][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 109.279663][ T5693] __ntfs_error: 6 callbacks suppressed [ 109.279683][ T5693] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 109.356639][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 109.375408][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 109.408937][ T5693] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 109.422367][ T5698] tipc: Started in network mode [ 109.454879][ T5698] tipc: Node identity , cluster identity 4711 [ 109.494536][ T1110] logitech: probe of 0003:046D:CA03.000E failed with error -1 [ 109.508450][ T5693] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. [ 109.564648][ T1110] usb 2-1: USB disconnect, device number 7 [ 109.618019][ T4266] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 109.687001][ T5703] fido_id[5703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 109.754912][ T5707] loop1: detected capacity change from 0 to 16 [ 109.788280][ T4594] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.832576][ T5707] erofs: (device loop1): mounted with root inode @ nid 36. [ 109.850605][ T5711] loop5: detected capacity change from 0 to 512 [ 109.869168][ T5713] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.528'. [ 109.891214][ T5713] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.528'. [ 109.900540][ T4266] usb 1-1: Using ep0 maxpacket: 16 [ 110.048487][ T4266] usb 1-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 110.074534][ T4266] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.106206][ T4266] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 110.134929][ T4266] usb 1-1: config 0 interface 0 has no altsetting 0 [ 110.141893][ T4266] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 110.163401][ T4594] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 110.181887][ T4594] usb 3-1: config 0 has no interface number 0 [ 110.182999][ T4266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.202170][ T4594] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 110.211208][ T5725] loop4: detected capacity change from 0 to 1764 [ 110.218262][ T4594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.224881][ T4266] usb 1-1: config 0 descriptor?? [ 110.282811][ T4594] usb 3-1: config 0 descriptor?? [ 110.358682][ T4594] usb 3-1: bad CDC descriptors [ 110.364305][ T5733] loop5: detected capacity change from 0 to 2048 [ 110.405124][ T4594] usb 3-1: bad CDC descriptors [ 110.517552][ T5733] NILFS (loop5): invalid segment: Magic number mismatch [ 110.559225][ T5733] NILFS (loop5): trying rollback from an earlier position [ 110.569645][ T1110] usb 3-1: USB disconnect, device number 4 [ 110.601419][ T5733] NILFS (loop5): recovery complete [ 110.608944][ T5744] device wireguard0 entered promiscuous mode [ 110.611544][ T5746] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.647880][ T5733] NILFS (loop5): bad btree node (ino=4, blocknr=1705): level = 0, flags = 0x2, nchildren = 0 [ 110.660150][ T5733] NILFS (loop5): error -5 preparing GC: cannot read source blocks [ 110.768813][ T4266] hid-picolcd 0003:04D8:C002.000F: No report with id 0x11 found [ 110.945111][ T1110] usb 1-1: USB disconnect, device number 8 [ 111.185974][ T5761] FAT-fs (loop4): Directory bread(block 1285) failed [ 111.219768][ T5761] FAT-fs (loop4): Directory bread(block 1286) failed [ 111.233657][ T5761] FAT-fs (loop4): Directory bread(block 1287) failed [ 111.253430][ T5761] FAT-fs (loop4): Directory bread(block 1288) failed [ 111.269227][ T5766] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 111.304093][ T5761] FAT-fs (loop4): Directory bread(block 1285) failed [ 111.327155][ T5766] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 111.342087][ T5761] FAT-fs (loop4): Directory bread(block 1286) failed [ 111.402443][ T5761] FAT-fs (loop4): Directory bread(block 1287) failed [ 111.428439][ T5778] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.473482][ T5761] FAT-fs (loop4): Directory bread(block 1288) failed [ 111.506829][ T5777] FAT-fs (loop4): Directory bread(block 1285) failed [ 111.560827][ T5777] FAT-fs (loop4): Directory bread(block 1286) failed [ 111.879671][ T5791] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 112.012307][ T5791] EXT4-fs (loop5): 1 truncate cleaned up [ 112.041496][ T5791] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,errors=remount-ro,data=journal,usrjquota=,init_itable=0x0000000000000022,. Quota mode: none. [ 112.106978][ T5800] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 112.160851][ T5800] EXT4-fs (loop2): inline encryption not supported [ 112.199081][ T5791] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.558: Logical block already allocated [ 112.254991][ T5800] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,inlinecrypt,max_batch_time=0x000000000000186b,,errors=continue. Quota mode: writeback. [ 112.309138][ T5791] EXT4-fs (loop5): Remounting filesystem read-only [ 112.685637][ T5828] process 'syz.1.569' launched '/dev/fd/3' with NULL argv: empty string added [ 112.817494][ T5834] set_capacity_and_notify: 8 callbacks suppressed [ 112.817510][ T5834] loop5: detected capacity change from 0 to 512 [ 112.886803][ T5839] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 113.002828][ T5845] loop0: detected capacity change from 0 to 1024 [ 113.030205][ T5834] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 2: comm syz.5.573: invalid block [ 113.061964][ T5834] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.573: invalid indirect mapped block 10 (level 1) [ 113.131100][ T5845] EXT4-fs (loop0): Ignoring removed bh option [ 113.136751][ T5851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.568'. [ 113.190119][ T5845] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 113.198122][ T5858] netlink: 100 bytes leftover after parsing attributes in process `syz.1.578'. [ 113.241552][ T5834] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.573: invalid indirect mapped block 8 (level 1) [ 113.347905][ T5834] EXT4-fs (loop5): 1 truncate cleaned up [ 113.434661][ T5834] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.459999][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 113.521839][ T5873] device erspan0 entered promiscuous mode [ 113.558241][ T5873] device erspan0 left promiscuous mode [ 113.775705][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.591'. [ 113.932590][ T5901] loop5: detected capacity change from 0 to 512 [ 114.099156][ T5915] loop0: detected capacity change from 0 to 256 [ 114.130734][ T5901] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 114.177227][ T5915] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.235698][ T5915] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 114.253502][ T5901] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.293641][ T5899] loop4: detected capacity change from 0 to 32768 [ 114.326925][ T5915] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 114.814955][ T5945] tipc: Enabling of bearer rejected, failed to enable media [ 114.841281][ T5942] loop2: detected capacity change from 0 to 4096 [ 114.970071][ T5948] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.024016][ T5938] loop1: detected capacity change from 0 to 4096 [ 115.108235][ T5954] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 115.189798][ T5938] ntfs: volume version 3.1. [ 115.194206][ T5956] loop5: detected capacity change from 0 to 64 [ 115.272488][ T5938] ntfs: (device loop1): ntfs_read_locked_inode(): Inode is not in use! [ 115.301044][ T5956] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 115.323590][ T5938] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x20 as bad. Run chkdsk. [ 115.535838][ T4184] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 115.701947][ T5971] sg_write: data in/out 197376/32 bytes for SCSI command 0x8-- guessing data in; [ 115.701947][ T5971] program syz.0.628 not setting count and/or reply_len properly [ 115.819353][ T5975] loop5: detected capacity change from 0 to 764 [ 116.033025][ T5991] loop1: detected capacity change from 0 to 1024 [ 116.079170][ T5950] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.612 (5950) [ 116.179568][ T5991] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,nombcache,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noload,sysvgroups,bsddf,min_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 116.215896][ T5950] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 116.256186][ T5950] BTRFS info (device loop4): using free space tree [ 116.262894][ T5950] BTRFS info (device loop4): has skinny extents [ 116.380957][ T6017] netlink: 32 bytes leftover after parsing attributes in process `syz.0.642'. [ 116.818027][ T5950] BTRFS info (device loop4): enabling ssd optimizations [ 116.882444][ T6061] comedi: No check for data length of config insn id 37 is implemented [ 116.933258][ T6061] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 116.967927][ T6061] comedi: Assuming n=15 is correct [ 116.994620][ T4226] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 117.143555][ T4810] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4810) [ 117.299429][ T6067] XFS (mtdblock0): Invalid superblock magic number [ 117.381964][ T4226] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 117.391453][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.411993][ T4226] usb 2-1: config 0 descriptor?? [ 117.454746][ T4226] cp210x 2-1:0.0: cp210x converter detected [ 117.456509][ T6083] netlink: 128 bytes leftover after parsing attributes in process `syz.0.658'. [ 117.598104][ T6081] overlayfs: upper fs needs to support d_type. [ 117.666349][ T6081] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 117.674267][ T6090] exfat: Deprecated parameter 'utf8' [ 117.682791][ T6090] exfat: Deprecated parameter 'utf8' [ 117.718625][ T6090] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 117.743432][ T6081] overlayfs: failed to set xattr on upper [ 117.749202][ T6081] overlayfs: ...falling back to index=off,metacopy=off. [ 117.839256][ T6097] set_capacity_and_notify: 3 callbacks suppressed [ 117.839270][ T6097] loop2: detected capacity change from 0 to 128 [ 117.959321][ T6097] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.977136][ T6102] loop5: detected capacity change from 0 to 512 [ 118.006016][ T6097] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.013236][ T4226] usb 2-1: cp210x converter now attached to ttyUSB0 [ 118.091693][ T6102] EXT4-fs (loop5): Ignoring removed nobh option [ 118.112058][ T6102] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 118.147395][ T23] usb 2-1: USB disconnect, device number 8 [ 118.163875][ T6102] EXT4-fs (loop5): 1 truncate cleaned up [ 118.165419][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 118.170193][ T6116] loop4: detected capacity change from 0 to 512 [ 118.191187][ T23] cp210x 2-1:0.0: device disconnected [ 118.213758][ T6102] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 118.261262][ T6102] EXT4-fs (loop5): resizing filesystem from 256 to 2 blocks [ 118.270508][ T6102] EXT4-fs warning (device loop5): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 118.337656][ T6116] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 118.396597][ T6116] EXT4-fs (loop4): 1 truncate cleaned up [ 118.402431][ T6116] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.951815][ T6157] loop4: detected capacity change from 0 to 1024 [ 119.044414][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 119.099727][ T6168] netlink: 'syz.0.688': attribute type 13 has an invalid length. [ 119.123269][ T6168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.688'. [ 119.250901][ T6180] netlink: 'syz.2.693': attribute type 2 has an invalid length. [ 119.261980][ T6178] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 119.731920][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.701'. [ 119.928888][ T6214] loop4: detected capacity change from 0 to 8 [ 120.146428][ T6214] SQUASHFS error: zstd decompression error: 2 [ 120.152984][ T6214] SQUASHFS error: zstd decompression failed, data probably corrupt [ 120.220008][ T6214] SQUASHFS error: Failed to read block 0x60: -5 [ 120.292030][ T6214] SQUASHFS error: zstd decompression error: 2 [ 120.310913][ T6231] loop5: detected capacity change from 0 to 1024 [ 120.331424][ T6214] SQUASHFS error: zstd decompression failed, data probably corrupt [ 120.336050][ T6239] loop1: detected capacity change from 0 to 512 [ 120.358944][ T6214] SQUASHFS error: Failed to read block 0x60: -5 [ 120.410029][ T6241] logitech-hidpp-device 0005:046D:B012.0010: received hid++ report of bad size (4096) [ 120.418416][ T6239] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 120.418416][ T6239] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 120.418416][ T6239] [ 120.442085][ T6231] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 120.456934][ T1110] logitech-hidpp-device 0005:046D:B012.0010: Device not connected [ 120.485817][ T6231] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 120.542015][ T6231] EXT4-fs (loop5): orphan cleanup on readonly fs [ 120.648755][ T6231] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.712: Inode bitmap for bg 0 marked uninitialized [ 120.662443][ T6239] EXT4-fs (loop1): orphan cleanup on readonly fs [ 120.671594][ T6239] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.715: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 120.689288][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.704302][ T6239] EXT4-fs error (device loop1): ext4_quota_enable:6447: comm syz.1.715: Bad quota inode: 4, type: 1 [ 120.823270][ T6231] EXT4-fs (loop5): Remounting filesystem read-only [ 120.828478][ T6239] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.830508][ T6231] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000001000000,errors=remount-ro,inode_readahead_blks=0x0000000000800000,lazytime,. Quota mode: writeback. [ 120.910063][ T6239] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 120.910108][ T6270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.727'. [ 120.937634][ T6239] EXT4-fs (loop1): mounted filesystem without journal. Opts: noacl,auto_da_alloc=0x000000006d2670b9,nolazytime,lazytime,noinit_itable,barrier,,errors=continue. Quota mode: writeback. [ 121.032246][ T6275] loop4: detected capacity change from 0 to 128 [ 121.055128][ T6277] loop0: detected capacity change from 0 to 512 [ 121.114616][ T6239] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 121.143422][ T6275] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 121.172835][ T6277] EXT4-fs (loop0): inline encryption not supported [ 121.216659][ T6277] EXT4-fs (loop0): Ignoring removed bh option [ 121.226797][ T6275] hpfs: filesystem error: improperly stopped [ 121.269474][ T6275] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 121.287206][ T6239] EXT4-fs warning (device loop1): ext4_multi_mount_protect:340: MMP startup interrupted, failing mount [ 121.287206][ T6239] [ 121.355759][ T6275] hpfs: You really don't want any checks? You are crazy... [ 121.367820][ T6275] hpfs: Code page index out of array [ 121.390034][ T6277] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.729: inode #1: comm syz.0.729: iget: illegal inode # [ 121.392627][ T6275] hpfs: code page support is disabled [ 121.410446][ T6275] hpfs: hpfs_map_4sectors(): unaligned read [ 121.423801][ T6275] hpfs: hpfs_map_4sectors(): unaligned read [ 121.429796][ T6275] hpfs: filesystem error: unable to find root dir [ 121.472427][ T6275] hpfs: hpfs_map_4sectors(): unaligned read [ 121.480433][ T6277] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.729: error while reading EA inode 1 err=-117 [ 121.543526][ T6277] EXT4-fs (loop0): 1 orphan inode deleted [ 121.551729][ T6277] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,usrquota,journal_dev=0x0000000000000000,inlinecrypt,bh,,errors=continue. Quota mode: writeback. [ 121.882577][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.740'. [ 122.066563][ T6325] loop4: detected capacity change from 0 to 256 [ 122.112620][ T6327] netlink: 'syz.0.744': attribute type 29 has an invalid length. [ 122.123052][ T6327] netlink: 'syz.0.744': attribute type 29 has an invalid length. [ 122.161983][ T6327] netlink: 'syz.0.744': attribute type 29 has an invalid length. [ 122.173264][ T4594] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.215956][ T6325] FAT-fs (loop4): Directory bread(block 64) failed [ 122.234492][ T6325] FAT-fs (loop4): Directory bread(block 65) failed [ 122.265758][ T6325] FAT-fs (loop4): Directory bread(block 66) failed [ 122.311252][ T6325] FAT-fs (loop4): Directory bread(block 67) failed [ 122.364802][ T6325] FAT-fs (loop4): Directory bread(block 68) failed [ 122.377057][ T6325] FAT-fs (loop4): Directory bread(block 69) failed [ 122.395114][ T6325] FAT-fs (loop4): Directory bread(block 70) failed [ 122.438230][ T6325] FAT-fs (loop4): Directory bread(block 71) failed [ 122.469464][ T6325] FAT-fs (loop4): Directory bread(block 72) failed [ 122.489805][ T6325] FAT-fs (loop4): Directory bread(block 73) failed [ 122.549674][ T4594] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.570223][ T4594] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.664593][ T4594] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.682164][ T4594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 122.719609][ T4594] usb 2-1: SerialNumber: syz [ 122.824788][ T6299] ERROR: (device loop5): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 122.824788][ T6299] [ 122.877122][ T6299] ERROR: (device loop5): remounting filesystem as read-only [ 122.909182][ T6299] ERROR: (device loop5): jfs_rename: [ 122.909182][ T6299] [ 123.007826][ T5086] ERROR: (device loop5): xtTruncate: XT_GETPAGE: xtree page corrupt [ 123.007826][ T5086] [ 123.027137][ T4594] usb 2-1: 0:2 : does not exist [ 123.039212][ T6350] netlink: 56 bytes leftover after parsing attributes in process `syz.2.750'. [ 123.093261][ T4594] usb 2-1: USB disconnect, device number 9 [ 123.243710][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.753'. [ 123.263602][ T157] bond0: (slave bond_slave_0): interface is now down [ 123.294368][ T157] bond0: (slave bond_slave_1): interface is now down [ 123.363712][ T6365] set_capacity_and_notify: 2 callbacks suppressed [ 123.363727][ T6365] loop2: detected capacity change from 0 to 256 [ 123.385186][ T4810] udevd[4810]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.421184][ T157] bond0: now running without any active interface! [ 123.999205][ T6344] loop4: detected capacity change from 0 to 32768 [ 124.475444][ T6417] loop5: detected capacity change from 0 to 512 [ 124.513763][ T6418] loop2: detected capacity change from 0 to 1024 [ 124.560171][ T6417] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 124.589249][ T6421] loop0: detected capacity change from 0 to 1024 [ 124.652613][ T6417] EXT4-fs (loop5): 1 truncate cleaned up [ 124.695185][ T6417] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,nouid32,debug_want_extra_isize=0x000000000000006c,jqfmt=vfsold,lazytime,minixdf,,errors=continue. Quota mode: none. [ 124.796903][ T6421] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.864511][ T6417] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.776: corrupted xattr entries [ 124.941820][ T6421] fscrypt (loop0, inode 14): Error -61 getting encryption context [ 124.967874][ T6430] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.776: corrupted xattr entries [ 125.018021][ T26] audit: type=1800 audit(1790110369.317:5): pid=6430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.776" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 125.473642][ T6383] loop1: detected capacity change from 0 to 65536 [ 125.666491][ T6383] XFS (loop1): Mounting V5 Filesystem [ 125.807724][ T6383] XFS (loop1): Ending clean mount [ 125.822392][ T6412] loop4: detected capacity change from 0 to 32768 [ 125.856005][ T6383] XFS (loop1): Metadata CRC error detected at xfs_agi_read_verify+0x192/0x250, xfs_agi block 0x8002 [ 125.872562][ T6383] XFS (loop1): Unmount and run xfs_repair [ 125.889782][ T6412] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 125.902015][ T6383] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 125.919820][ T6412] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 125.927261][ T6383] 00000000: 58 41 47 49 00 00 08 00 00 00 00 00 00 00 40 00 XAGI..........@. [ 125.938285][ T6383] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00 ................ [ 125.947873][ T6383] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 125.968970][ T6383] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 125.978429][ T6383] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 125.999863][ T6412] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 126.018909][ T6383] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 126.033299][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.042555][ T6383] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 126.068171][ T4588] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 126.079003][ T6383] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 126.084413][ T4588] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 126.115234][ T6383] XFS (loop1): metadata I/O error in "xfs_read_agi+0x230/0x540" at daddr 0x8002 len 1 error 74 [ 126.184516][ T4588] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 100ms [ 126.196307][ T4184] XFS (loop1): Unmounting Filesystem [ 126.240575][ T4588] gfs2: fsid=syz:syz.0: jid=0: Done [ 126.260943][ T6412] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 126.416279][ T23] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.447775][ T23] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.484739][ T6498] loop5: detected capacity change from 0 to 128 [ 126.492093][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.505313][ T23] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 126.518390][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.526776][ T6498] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 126.546305][ T23] usb 3-1: config 0 descriptor?? [ 126.560497][ T6412] gfs2: fsid=syz:syz.0: found 1 quota changes [ 126.604203][ T6498] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.677049][ T4194] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 126.677049][ T4194] inode = 11 2339 [ 126.677049][ T4194] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 410 [ 126.696897][ T6498] ext2 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.753336][ T4194] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 126.782127][ T4194] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 126.842648][ T4194] CPU: 0 PID: 4194 Comm: syz-executor Not tainted syzkaller #0 [ 126.850446][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.860529][ T4194] Call Trace: [ 126.863829][ T4194] [ 126.866775][ T4194] dump_stack_lvl+0x188/0x250 [ 126.871466][ T4194] ? show_regs_print_info+0x20/0x20 [ 126.876722][ T4194] ? load_image+0x410/0x410 [ 126.881250][ T4194] ? do_raw_spin_unlock+0x11d/0x230 [ 126.886476][ T4194] gfs2_assert_warn_i+0x187/0x2c0 [ 126.891550][ T4194] gfs2_quota_cleanup+0x48c/0x670 [ 126.896608][ T4194] gfs2_make_fs_ro+0x440/0x620 [ 126.901622][ T4194] ? __might_sleep+0xf0/0xf0 [ 126.906279][ T4194] ? gfs2_dinode_out+0xb00/0xb00 [ 126.911249][ T4194] ? _raw_spin_unlock+0x24/0x40 [ 126.916138][ T4194] ? gfs2_glock_nq+0xcaa/0x1510 [ 126.921035][ T4194] gfs2_withdraw+0x660/0x14e0 [ 126.925765][ T4194] ? gfs2_meta_new+0x160/0x160 [ 126.930555][ T4194] ? gfs2_lm+0x240/0x240 [ 126.934831][ T4194] ? gfs2_freeze_lock+0x52/0xc0 [ 126.939797][ T4194] ? gfs2_consist_inode_i+0xc0/0xe0 [ 126.945006][ T4194] gfs2_inode_refresh+0xb2d/0x11a0 [ 126.950147][ T4194] ? gfs2_inode_metasync+0xf0/0xf0 [ 126.955274][ T4194] inode_go_lock+0x127/0x450 [ 126.959872][ T4194] do_promote+0x75b/0xb20 [ 126.964208][ T4194] finish_xmote+0x4c2/0xaf0 [ 126.968713][ T4194] do_xmote+0x752/0x10a0 [ 126.973109][ T4194] gfs2_glock_nq+0xc6b/0x1510 [ 126.977832][ T4194] do_sync+0x49c/0xba0 [ 126.981910][ T4194] ? slot_put+0x1e0/0x1e0 [ 126.986239][ T4194] ? do_sync+0x494/0xba0 [ 126.990480][ T4194] ? do_raw_spin_unlock+0x11d/0x230 [ 126.995683][ T4194] gfs2_quota_sync+0x355/0x780 [ 127.000453][ T4194] gfs2_sync_fs+0x48/0xb0 [ 127.004772][ T4194] sync_filesystem+0xe6/0x220 [ 127.009444][ T4194] generic_shutdown_super+0x6b/0x300 [ 127.014730][ T4194] kill_block_super+0x7c/0xe0 [ 127.019421][ T4194] deactivate_locked_super+0x93/0xf0 [ 127.024703][ T4194] cleanup_mnt+0x426/0x4d0 [ 127.029117][ T4194] task_work_run+0x125/0x1a0 [ 127.033703][ T4194] exit_to_user_mode_loop+0x10f/0x130 [ 127.039067][ T4194] exit_to_user_mode_prepare+0xee/0x180 [ 127.044604][ T4194] syscall_exit_to_user_mode+0x16/0x40 [ 127.050056][ T4194] do_syscall_64+0x58/0xa0 [ 127.054471][ T4194] ? clear_bhb_loop+0x30/0x80 [ 127.059143][ T4194] ? clear_bhb_loop+0x30/0x80 [ 127.063901][ T4194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.069783][ T4194] RIP: 0033:0x7f53c1977397 [ 127.074193][ T4194] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 127.093794][ T4194] RSP: 002b:00007fffb1229f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 127.102208][ T4194] RAX: 0000000000000000 RBX: 00007f53c1a0c4bb RCX: 00007f53c1977397 [ 127.110176][ T4194] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb1229fd0 [ 127.118135][ T4194] RBP: 00007fffb1229fd0 R08: 00007fffb122afd0 R09: 00000000ffffffff [ 127.126101][ T4194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb122b060 [ 127.134065][ T4194] R13: 00007f53c1a0c4bb R14: 000000000001ee76 R15: 00007fffb122b0a0 [ 127.142655][ T4194] [ 127.165389][ T4194] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 127.166973][ T23] hid-multitouch 0003:0EEF:72C4.0011: unbalanced delimiter at end of report description [ 127.187941][ T23] hid-multitouch: probe of 0003:0EEF:72C4.0011 failed with error -22 [ 127.209503][ T4194] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 127.229751][ T4194] gfs2: fsid=syz:syz.0: File system withdrawn [ 127.237276][ T4194] CPU: 0 PID: 4194 Comm: syz-executor Not tainted syzkaller #0 [ 127.244853][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.254928][ T4194] Call Trace: [ 127.258227][ T4194] [ 127.261160][ T4194] dump_stack_lvl+0x188/0x250 [ 127.265848][ T4194] ? show_regs_print_info+0x20/0x20 [ 127.271050][ T4194] ? load_image+0x410/0x410 [ 127.275561][ T4194] ? lockref_put_or_lock+0x6e/0xb0 [ 127.280706][ T4194] gfs2_withdraw+0xb9a/0x14e0 [ 127.285401][ T4194] ? gfs2_meta_new+0x160/0x160 [ 127.290184][ T4194] ? gfs2_lm+0x240/0x240 [ 127.294446][ T4194] ? gfs2_consist_inode_i+0xc0/0xe0 [ 127.299663][ T4194] gfs2_inode_refresh+0xb2d/0x11a0 [ 127.304802][ T4194] ? gfs2_inode_metasync+0xf0/0xf0 [ 127.310020][ T4194] inode_go_lock+0x127/0x450 [ 127.314980][ T4194] do_promote+0x75b/0xb20 [ 127.319333][ T4194] finish_xmote+0x4c2/0xaf0 [ 127.323886][ T4194] do_xmote+0x752/0x10a0 [ 127.328151][ T4194] gfs2_glock_nq+0xc6b/0x1510 [ 127.332943][ T4194] do_sync+0x49c/0xba0 [ 127.337047][ T4194] ? slot_put+0x1e0/0x1e0 [ 127.341393][ T4194] ? do_sync+0x494/0xba0 [ 127.345644][ T4194] ? do_raw_spin_unlock+0x11d/0x230 [ 127.350854][ T4194] gfs2_quota_sync+0x355/0x780 [ 127.355639][ T4194] gfs2_sync_fs+0x48/0xb0 [ 127.359976][ T4194] sync_filesystem+0xe6/0x220 [ 127.364769][ T4194] generic_shutdown_super+0x6b/0x300 [ 127.370352][ T4194] kill_block_super+0x7c/0xe0 [ 127.375096][ T4194] deactivate_locked_super+0x93/0xf0 [ 127.380411][ T4194] cleanup_mnt+0x426/0x4d0 [ 127.384831][ T4194] task_work_run+0x125/0x1a0 [ 127.389527][ T4194] exit_to_user_mode_loop+0x10f/0x130 [ 127.394907][ T4194] exit_to_user_mode_prepare+0xee/0x180 [ 127.400465][ T4194] syscall_exit_to_user_mode+0x16/0x40 [ 127.406100][ T4194] do_syscall_64+0x58/0xa0 [ 127.410538][ T4194] ? clear_bhb_loop+0x30/0x80 [ 127.415237][ T4194] ? clear_bhb_loop+0x30/0x80 [ 127.419931][ T4194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.425820][ T4194] RIP: 0033:0x7f53c1977397 [ 127.430249][ T4194] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 127.449873][ T4194] RSP: 002b:00007fffb1229f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 127.458366][ T4194] RAX: 0000000000000000 RBX: 00007f53c1a0c4bb RCX: 00007f53c1977397 [ 127.466355][ T4194] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb1229fd0 [ 127.474322][ T4194] RBP: 00007fffb1229fd0 R08: 00007fffb122afd0 R09: 00000000ffffffff [ 127.482301][ T4194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb122b060 [ 127.490265][ T4194] R13: 00007f53c1a0c4bb R14: 000000000001ee76 R15: 00007fffb122b0a0 [ 127.498253][ T4194] [ 127.520690][ T4588] usb 3-1: USB disconnect, device number 5 [ 127.532169][ T4194] ================================================================== [ 127.541318][ T4194] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0 [ 127.548027][ T4194] Read of size 8 at addr ffff88805fc78090 by task syz-executor/4194 [ 127.556014][ T4194] [ 127.558356][ T4194] CPU: 0 PID: 4194 Comm: syz-executor Not tainted syzkaller #0 [ 127.565913][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.575976][ T4194] Call Trace: [ 127.579272][ T4194] [ 127.582197][ T4194] dump_stack_lvl+0x188/0x250 [ 127.586880][ T4194] ? show_regs_print_info+0x20/0x20 [ 127.592095][ T4194] ? load_image+0x410/0x410 [ 127.596614][ T4194] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 127.602069][ T4194] print_address_description+0x60/0x2d0 [ 127.607613][ T4194] ? qd_unlock+0x30/0x2d0 [ 127.611959][ T4194] kasan_report+0xdf/0x130 [ 127.616399][ T4194] ? qd_unlock+0x30/0x2d0 [ 127.620728][ T4194] kasan_check_range+0x235/0x290 [ 127.625672][ T4194] qd_unlock+0x30/0x2d0 [ 127.629845][ T4194] gfs2_quota_sync+0x63b/0x780 [ 127.634622][ T4194] gfs2_sync_fs+0x48/0xb0 [ 127.638966][ T4194] sync_filesystem+0xe6/0x220 [ 127.643322][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 127.643777][ T4194] generic_shutdown_super+0x6b/0x300 [ 127.656594][ T4194] kill_block_super+0x7c/0xe0 [ 127.661291][ T4194] deactivate_locked_super+0x93/0xf0 [ 127.666594][ T4194] cleanup_mnt+0x426/0x4d0 [ 127.671029][ T4194] task_work_run+0x125/0x1a0 [ 127.675635][ T4194] exit_to_user_mode_loop+0x10f/0x130 [ 127.681019][ T4194] exit_to_user_mode_prepare+0xee/0x180 [ 127.686558][ T4194] syscall_exit_to_user_mode+0x16/0x40 [ 127.692055][ T4194] do_syscall_64+0x58/0xa0 [ 127.696485][ T4194] ? clear_bhb_loop+0x30/0x80 [ 127.701182][ T4194] ? clear_bhb_loop+0x30/0x80 [ 127.705853][ T4194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.711924][ T4194] RIP: 0033:0x7f53c1977397 [ 127.716333][ T4194] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 127.735952][ T4194] RSP: 002b:00007fffb1229f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 127.744392][ T4194] RAX: 0000000000000000 RBX: 00007f53c1a0c4bb RCX: 00007f53c1977397 [ 127.752382][ T4194] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb1229fd0 [ 127.760348][ T4194] RBP: 00007fffb1229fd0 R08: 00007fffb122afd0 R09: 00000000ffffffff [ 127.768337][ T4194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb122b060 [ 127.776400][ T4194] R13: 00007f53c1a0c4bb R14: 000000000001ee76 R15: 00007fffb122b0a0 [ 127.784407][ T4194] [ 127.787432][ T4194] [ 127.789744][ T4194] Allocated by task 6412: [ 127.794058][ T4194] __kasan_slab_alloc+0x92/0xc0 [ 127.798919][ T4194] slab_post_alloc_hook+0x4c/0x380 [ 127.804022][ T4194] kmem_cache_alloc+0x15d/0x280 [ 127.808875][ T4194] qd_alloc+0x50/0x260 [ 127.812934][ T4194] gfs2_quota_init+0x74d/0xe80 [ 127.817684][ T4194] gfs2_make_fs_rw+0x41c/0x590 [ 127.822437][ T4194] gfs2_fill_super+0x17d1/0x1ea0 [ 127.827393][ T4194] get_tree_bdev+0x3e6/0x610 [ 127.832000][ T4194] gfs2_get_tree+0x4d/0x1e0 [ 127.836510][ T4194] vfs_get_tree+0x88/0x270 [ 127.840944][ T4194] do_new_mount+0x247/0xa40 [ 127.845468][ T4194] __se_sys_mount+0x2e3/0x3d0 [ 127.850158][ T4194] do_syscall_64+0x4c/0xa0 [ 127.854576][ T4194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.860519][ T4194] [ 127.862886][ T4194] Freed by task 4194: [ 127.867027][ T4194] kasan_set_track+0x4b/0x70 [ 127.871607][ T4194] kasan_set_free_info+0x1f/0x40 [ 127.876560][ T4194] ____kasan_slab_free+0xd5/0x110 [ 127.881593][ T4194] slab_free_freelist_hook+0xec/0x170 [ 127.886959][ T4194] kmem_cache_free+0x8f/0x210 [ 127.891631][ T4194] rcu_core+0x96e/0x1650 [ 127.893271][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 127.895866][ T4194] handle_softirqs+0x336/0x830 [ 127.895888][ T4194] __irq_exit_rcu+0x13b/0x230 [ 127.895900][ T4194] irq_exit_rcu+0x5/0x20 [ 127.895913][ T4194] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 127.895930][ T4194] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 127.926234][ T4194] [ 127.928560][ T4194] Last potentially related work creation: [ 127.934270][ T4194] kasan_save_stack+0x35/0x60 [ 127.939061][ T4194] kasan_record_aux_stack+0xb8/0x100 [ 127.944367][ T4194] call_rcu+0x189/0x900 [ 127.948539][ T4194] gfs2_quota_cleanup+0x414/0x670 [ 127.953563][ T4194] gfs2_make_fs_ro+0x440/0x620 [ 127.958421][ T4194] gfs2_withdraw+0x660/0x14e0 [ 127.963119][ T4194] gfs2_inode_refresh+0xb2d/0x11a0 [ 127.968238][ T4194] inode_go_lock+0x127/0x450 [ 127.972821][ T4194] do_promote+0x75b/0xb20 [ 127.977263][ T4194] finish_xmote+0x4c2/0xaf0 [ 127.981852][ T4194] do_xmote+0x752/0x10a0 [ 127.986128][ T4194] gfs2_glock_nq+0xc6b/0x1510 [ 127.990852][ T4194] do_sync+0x49c/0xba0 [ 127.995039][ T4194] gfs2_quota_sync+0x355/0x780 [ 127.999819][ T4194] gfs2_sync_fs+0x48/0xb0 [ 128.004140][ T4194] sync_filesystem+0xe6/0x220 [ 128.008817][ T4194] generic_shutdown_super+0x6b/0x300 [ 128.013330][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.014108][ T4194] kill_block_super+0x7c/0xe0 [ 128.014129][ T4194] deactivate_locked_super+0x93/0xf0 [ 128.029912][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.034149][ T4194] cleanup_mnt+0x426/0x4d0 [ 128.034176][ T4194] task_work_run+0x125/0x1a0 [ 128.034192][ T4194] exit_to_user_mode_loop+0x10f/0x130 [ 128.034207][ T4194] exit_to_user_mode_prepare+0xee/0x180 [ 128.034220][ T4194] syscall_exit_to_user_mode+0x16/0x40 [ 128.034238][ T4194] do_syscall_64+0x58/0xa0 [ 128.034251][ T4194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.034269][ T4194] [ 128.034274][ T4194] The buggy address belongs to the object at ffff88805fc78000 [ 128.034274][ T4194] which belongs to the cache gfs2_quotad of size 272 [ 128.054761][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 128.059477][ T4194] The buggy address is located 144 bytes inside of [ 128.059477][ T4194] 272-byte region [ffff88805fc78000, ffff88805fc78110) [ 128.059507][ T4194] The buggy address belongs to the page: [ 128.059528][ T4194] page:ffffea00017f1e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fc78 [ 128.059546][ T4194] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 128.059575][ T4194] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888146ae8500 [ 128.083186][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 128.097229][ T4194] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 128.097242][ T4194] page dumped because: kasan: bad access detected [ 128.097263][ T4194] page_owner tracks the page as allocated [ 128.097269][ T4194] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 6412, ts 126500653988, free_ts 120936474381 [ 128.097297][ T4194] get_page_from_freelist+0x24f6/0x2670 [ 128.097320][ T4194] __alloc_pages+0x1ee/0x480 [ 128.097335][ T4194] new_slab+0xc0/0x4b0 [ 128.097349][ T4194] ___slab_alloc+0x807/0xdd0 [ 128.097361][ T4194] kmem_cache_alloc+0xf0/0x280 [ 128.097372][ T4194] qd_alloc+0x50/0x260 [ 128.097386][ T4194] gfs2_quota_init+0x74d/0xe80 [ 128.097400][ T4194] gfs2_make_fs_rw+0x41c/0x590 [ 128.097417][ T4194] gfs2_fill_super+0x17d1/0x1ea0 [ 128.097431][ T4194] get_tree_bdev+0x3e6/0x610 [ 128.097447][ T4194] gfs2_get_tree+0x4d/0x1e0 [ 128.097461][ T4194] vfs_get_tree+0x88/0x270 [ 128.097476][ T4194] do_new_mount+0x247/0xa40 [ 128.097491][ T4194] __se_sys_mount+0x2e3/0x3d0 [ 128.115620][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.121549][ T4194] do_syscall_64+0x4c/0xa0 [ 128.121576][ T4194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.121594][ T4194] page last free stack trace: [ 128.121600][ T4194] free_unref_page_prepare+0x637/0x6c0 [ 128.121617][ T4194] free_unref_page+0x8f/0x2a0 [ 128.132072][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 128.137466][ T4194] __unfreeze_partials+0x188/0x1e0 [ 128.137490][ T4194] put_cpu_partial+0x12d/0x190 [ 128.137503][ T4194] qlist_free_all+0x35/0x90 [ 128.137517][ T4194] kasan_quarantine_reduce+0x150/0x160 [ 128.137532][ T4194] __kasan_slab_alloc+0x2f/0xc0 [ 128.137548][ T4194] slab_post_alloc_hook+0x4c/0x380 [ 128.137561][ T4194] kmem_cache_alloc_node+0x184/0x2c0 [ 128.137575][ T4194] __alloc_skb+0xf4/0x750 [ 128.137591][ T4194] netlink_sendmsg+0x654/0xbe0 [ 128.137604][ T4194] ____sys_sendmsg+0x5be/0x8f0 [ 128.137621][ T4194] ___sys_sendmsg+0x236/0x2e0 [ 128.137635][ T4194] __se_sys_sendmsg+0x1b7/0x2a0 [ 128.137649][ T4194] do_syscall_64+0x4c/0xa0 [ 128.137665][ T4194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.137683][ T4194] [ 128.137687][ T4194] Memory state around the buggy address: [ 128.137696][ T4194] ffff88805fc77f80: 00 00 00 00 00 00 00 00 00 04 fc fc fc fc fc fc [ 128.137706][ T4194] ffff88805fc78000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.137717][ T4194] >ffff88805fc78080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.152488][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.153813][ T4194] ^ [ 128.153827][ T4194] ffff88805fc78100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 128.153838][ T4194] ffff88805fc78180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 128.153845][ T4194] ================================================================== [ 128.153851][ T4194] Disabling lock debugging due to kernel taint [ 128.178916][ T4194] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 128.209808][ T23] usb 2-1: config 0 descriptor?? [ 128.213887][ T4194] CPU: 0 PID: 4194 Comm: syz-executor Tainted: G B syzkaller #0 [ 128.213905][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.213914][ T4194] Call Trace: [ 128.213920][ T4194] [ 128.213926][ T4194] dump_stack_lvl+0x188/0x250 [ 128.213946][ T4194] ? show_regs_print_info+0x20/0x20 [ 128.213960][ T4194] ? load_image+0x410/0x410 [ 128.213977][ T4194] panic+0x2f8/0x850 [ 128.213997][ T4194] ? bpf_jit_dump+0xd0/0xd0 [ 128.303318][ T23] rc_core: IR keymap rc-hauppauge not found [ 128.306365][ T4194] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 128.315718][ T23] Registered IR keymap rc-empty [ 128.320510][ T4194] ? _raw_spin_unlock+0x40/0x40 [ 128.320542][ T4194] ? qd_unlock+0x30/0x2d0 [ 128.320559][ T4194] check_panic_on_warn+0x80/0xa0 [ 128.326080][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.329907][ T4194] ? qd_unlock+0x30/0x2d0 [ 128.329932][ T4194] end_report+0x6d/0xf0 [ 128.363503][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.364424][ T4194] kasan_report+0x102/0x130 [ 128.395718][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 128.400954][ T4194] ? qd_unlock+0x30/0x2d0 [ 128.400980][ T4194] kasan_check_range+0x235/0x290 [ 128.416194][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input22 [ 128.417381][ T4194] qd_unlock+0x30/0x2d0 [ 128.473299][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.481426][ T4194] gfs2_quota_sync+0x63b/0x780 [ 128.481455][ T4194] gfs2_sync_fs+0x48/0xb0 [ 128.513304][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.516062][ T4194] sync_filesystem+0xe6/0x220 [ 128.543652][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.546375][ T4194] generic_shutdown_super+0x6b/0x300 [ 128.546401][ T4194] kill_block_super+0x7c/0xe0 [ 128.573247][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.573951][ T4194] deactivate_locked_super+0x93/0xf0 [ 128.603220][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.613362][ T4194] cleanup_mnt+0x426/0x4d0 [ 128.613390][ T4194] task_work_run+0x125/0x1a0 [ 128.613409][ T4194] exit_to_user_mode_loop+0x10f/0x130 [ 128.613423][ T4194] exit_to_user_mode_prepare+0xee/0x180 [ 128.613438][ T4194] syscall_exit_to_user_mode+0x16/0x40 [ 128.643194][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.645445][ T4194] do_syscall_64+0x58/0xa0 [ 128.645469][ T4194] ? clear_bhb_loop+0x30/0x80 [ 128.673306][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.675100][ T4194] ? clear_bhb_loop+0x30/0x80 [ 128.675129][ T4194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.703878][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.707650][ T4194] RIP: 0033:0x7f53c1977397 [ 128.743185][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.748603][ T4194] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 128.748620][ T4194] RSP: 002b:00007fffb1229f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 128.748639][ T4194] RAX: 0000000000000000 RBX: 00007f53c1a0c4bb RCX: 00007f53c1977397 [ 128.784554][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 128.788351][ T4194] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb1229fd0 [ 128.788367][ T4194] RBP: 00007fffb1229fd0 R08: 00007fffb122afd0 R09: 00000000ffffffff [ 128.788378][ T4194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb122b060 [ 128.824735][ T23] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 128.827351][ T4194] R13: 00007f53c1a0c4bb R14: 000000000001ee76 R15: 00007fffb122b0a0 [ 128.827374][ T4194] [ 128.835453][ T4194] Kernel Offset: disabled [ 128.850829][ T4194] Rebooting in 86400 seconds..