last executing test programs: 3m35.327987489s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x6, 0x644, &(0x7f00000006c0)="$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") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0xa, 0x7ec, 0x2000000000, 0x2000000000002, 0x3, 0x0, 0x7ffd}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 3m33.450125548s ago: executing program 0 (id=13): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@resuid}, {@init_itable}, {@stripe}, {@stripe={'stripe', 0x3d, 0x200}}]}, 0x3, 0x453, &(0x7f0000001f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 3m29.413400939s ago: executing program 0 (id=18): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$nci(0xffffff9c, 0x0, 0x2, 0x0) read$nci(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 3m26.841805949s ago: executing program 0 (id=25): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x64, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_FLOWER_INDEV={0x14, 0x2, 'veth1_virt_wifi\x00'}]}}]}, 0x64}}, 0x0) 3m26.560379812s ago: executing program 32 (id=25): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x64, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_FLOWER_INDEV={0x14, 0x2, 'veth1_virt_wifi\x00'}]}}]}, 0x64}}, 0x0) 2m50.34271802s ago: executing program 2 (id=171): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000440)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x1}, 0xe) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ppoll(&(0x7f00000000c0)=[{r3, 0x1007}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 2m48.914191357s ago: executing program 2 (id=175): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x3, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x10203, 0x4}) syz_usb_connect(0x2, 0x3b9, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a703010000000209046d000c3fdae20009050402ff03020eff0725010007050007250101067c0809050102ef010809"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x6, 0x12f, 0x2}) 2m46.301628201s ago: executing program 2 (id=186): r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2m45.376718699s ago: executing program 2 (id=189): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/105, 0x69) 2m45.037782759s ago: executing program 2 (id=190): shmget(0xffffffffffffffff, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000440)='./file0\x00', 0x0) link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file1\x00') mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='ocfs2\x00', 0x0, 0x0) 2m43.953780245s ago: executing program 2 (id=196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xe2, @multicast}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) 2m43.637403852s ago: executing program 33 (id=196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xe2, @multicast}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) 12.381160166s ago: executing program 1 (id=817): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=") symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 10.517615743s ago: executing program 1 (id=825): socket(0x10, 0x803, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) listen(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x240008f4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x396b, &(0x7f0000000180)={0x0, 0xac9a, 0x2, 0x3, 0x100}) 8.539185014s ago: executing program 6 (id=828): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000cc0)='./file1\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x670, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000240), 0x0, &(0x7f00000002c0), &(0x7f0000000300)={[0x3]}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) creat(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) listen(r2, 0x0) epoll_create1(0x80000) 8.087338847s ago: executing program 3 (id=833): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(0x0, 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r7, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 7.951179362s ago: executing program 1 (id=835): fcntl$notify(0xffffffffffffffff, 0x402, 0x21) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0xb8) creat(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r3, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000fc0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 7.138656647s ago: executing program 3 (id=836): r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000240)='./file0\x00') pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) splice(r1, 0x0, r3, 0x0, 0x200000000001, 0x0) connect$vsock_stream(r0, 0x0, 0x0) 6.043889655s ago: executing program 3 (id=838): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xa0c80) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, 0x0, 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1001, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7b50f656}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x38, 0x36, 0x31, 0xbff0d7c57f955fcc, 0x37, 0x39, 0x54], 0x2d, [0x33, 0x32, 0x39, 0x39], 0x2d, [0x63, 0x35, 0x37, 0x65], 0x2d, [0x37, 0x66, 0x38, 0x61], 0x2d, [0x32, 0x31, 0x36, 0x7, 0x65, 0x63, 0x60, 0x37]}}}]}}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000040)=r6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000ac0)={0x6, 0x1, 0x9, 0x10, '\x00', 0x35}) 4.246928815s ago: executing program 3 (id=840): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file1\x00', 0x808, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="7dbf4c6f2121e8379012111363c8d613592df6fa7183430d8b7a888db6e0b0526ed707df5404261c"], 0x1, 0x389, &(0x7f0000000600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 3.959303458s ago: executing program 6 (id=841): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x7, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 3.856850801s ago: executing program 5 (id=842): unlink(&(0x7f0000000180)='./file1\x00') 3.735717055s ago: executing program 4 (id=843): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ppoll(&(0x7f00000000c0)=[{r2, 0x1007}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 3.735381034s ago: executing program 5 (id=844): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x82000000}]}]}}, &(0x7f0000000080)=""/227, 0x32, 0xe3, 0x1, 0x0, 0x0, @void, @value}, 0x28) 3.640411896s ago: executing program 5 (id=845): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x200}) 3.584191012s ago: executing program 1 (id=846): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)={[{@fat=@discard}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@time_offset={'time_offset', 0x3d, 0x3d}}, {@uni_xlate}, {@rodir}, {@uni_xlateno}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uni_xlateno}, {@uni_xlateno}, {@rodir}]}, 0x1, 0x18d, &(0x7f0000000600)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 3.489527193s ago: executing program 4 (id=847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(0x0, 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r7, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 3.401699564s ago: executing program 5 (id=848): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 3.391409485s ago: executing program 3 (id=849): socket(0x1, 0x803, 0x4000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="00f48558f1fa3ae90bcff100000000ae000000"]) unshare(0x24020400) r4 = socket$alg(0x26, 0x5, 0x0) ioperm(0x0, 0xab4b, 0x21000000007) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb201fffc) bind$alg(r4, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) 3.301352185s ago: executing program 1 (id=850): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x20003, @loopback, 0xffff}}, 0xfffffff3, 0x4, 0x0, 0x6, 0x16, 0x5, 0x3}, 0x9c) 2.561572541s ago: executing program 6 (id=851): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000cc0)='./file1\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x670, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000240), 0x0, &(0x7f00000002c0), &(0x7f0000000300)={[0x3]}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) creat(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) listen(r2, 0x0) epoll_create1(0x80000) 2.513177137s ago: executing program 4 (id=852): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000640)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64, @ANYRES32, @ANYRES64, @ANYRES8=0x0], 0x5, 0x0, &(0x7f0000000000)) open(0x0, 0x143042, 0x0) 2.309848921s ago: executing program 4 (id=853): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file0\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x25, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@notreelog}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x32, 0x36, 0x38, 0x35, 0x36, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = dup(r0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.494225226s ago: executing program 6 (id=854): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x200000000001, 0x0) 1.28952198s ago: executing program 3 (id=855): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x2, "9c45"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000017c0)={0x44, &(0x7f00000015c0)={0x40, 0x10, 0x2, "a7ed"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001400)={0x1c, &(0x7f0000001280)={0x20, 0x10, 0x2, "f558"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, "b07b"}, 0x0, 0x0, 0x0, 0x0}) 1.241565736s ago: executing program 6 (id=856): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x82000000}]}]}}, &(0x7f0000000080)=""/227, 0x32, 0xe3, 0x1, 0x0, 0x0, @void, @value}, 0x28) 1.161945355s ago: executing program 6 (id=857): syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x208c1b, &(0x7f0000012900)=ANY=[@ANYBLOB="757067726164652c6c6f63636f6f6b69652c6e6f71756f74612c71756f74615f7175616e74756d3d3078303030303030303030303030303030342c636f6d6d69743d3078303030303030303030303030303030352c6e6f6c6f63636f6f6b69652c646973636172642c737569646469722c71756f74613d6f6e2c726772706c76622c71756f74613d6f6e2c636f6d6d69743d3078303030303030303030303030303030352c737569646469722c6d6574612c626172726965722c686f7374646174613d3a2c0006e0c6560c1c7aece8880d12fb37326e825b4e79137d9d3bb4ea79b1a8e36bfde65c4333eef2a8d984037d215c26ddca8ecf6c823b08ecbc9044e31f19bcf685e6a719d767213a0b0608863413f4917825aa2f5e56599b6841788779166c08a2666ab8936567da"], 0xff, 0x12754, &(0x7f0000000140)="$eJzs/XkYqHO9L36ve17KPCRCKSQlIqEkYyWRIRlSCYWoCGUoQ0rSQCpjKpQpSZISocxCRKQyRgoRSVR4rn32e519P+fcz75P+zz7ue7r+b1ef+zPvW2+e/1+1z7X+/1eS2vNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBkzZhTPWWjXfzu9v7T9v59uthkzul3+/Xvuf/svs/f+nvLfz8yF/j88m793tiV3+eB2O7/rAx/8t/Nf+vHtvvc+r959733+S//s/4mXPLLxaj9Z6C3POep1Z5y16FU/Xue/7X8RAAAAAAAAAPw3yq//l72/dOX/8rd0M2bMnPN/+WvzzZgxc/YZM8rq6mu/87P/m//9m2/G/6P99Zn/m//zAQAA4P9Q9n/d+yuH9//HufPNmHHgAf/bX/+ff2Vm+2//dbuPPvLY0O15bv7+5/7HXyr/t4//RvPnLpD7nNwF/99/fAAAAPD/X7L/m95f6W/2Wf/5/oVzn5e7SO6iuYvlPj/3BbmL574w90W5S+QumbtU7otzl859Se4yuS/NfVnusrkvz10ud/ncV+SukLti7itzV8p9Ve7Kuavkrpr76tzX5K6W+9rc1XNfl7tG7pq5a+WunTvr9xlYN/f1uW/IfWPuerlvyl0/9825G+RumPuW3I1yN87dJHfT3Lfmbpb7ttzNc7fI3TJ3q9y3526d+47cd+a+K3eb3Hfnbpu7XW5+j4kZ78l9b+4OuTvm7pT7vtxZv4lEfl+KGe/P/UDuB3N3zd0t90O5u+fukbtn7odzP5K7V+7eubN+A4p9cz+a+7Hc/XL3z531M2MH5n4896DcT+R+Mvfg3E/lHpL76dxDcz+T+9ncz+V+Pvew3Fk/h/eF3CNyv5j7pdwv5x6Ze1Tu0bnH5B6be1zuV3KPz/1q7tdyv557Qu6JuSflfiP3m7kn556Se2ruabmn534r94zcb+eemfud3LNyv5t7du73cs/J/X7uubk/yP1h7nm5P8o9P/eC3B/nXph7Ue7FuT/J/WnuJbmX5l6We3nuFbmz/h2sq3Kvzp3171pdk3tt7nW5P8+9PveG3F/k3ph7U+4vc2/OvSX3V7m35v469ze5v829Lff23Dty78y9K/fu3N/l3pN7b+7vc+/L/UPuH3Pvz30g98HcP+U+lPtw7p9zH8l9NPcvubMy7q+5j+f+LfeJ3Cdz/577j9x/5j6V+3Ru/mWmWT9tXuSjyM9tF1Vufr69SO4WbW6XOzN3ttxn5T47N7+/TjFHbv79vGKu3Llz58mdN3e+3Pw8eJGfBy/y8+BFfh68yM+DF8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5H+R/C+S/0Xyf9av4RXJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/i+R/kfwvkv9F8r9I/hfJ/yL5XyT/Z23cIvlfJP+L5H+R/C+S/0Xyv0j+F8n/IvlfJP+L5P+sX8ouk/9l/kKZ/C+T/2Xyv0z+l8n/MvlfJv/L5H+Z/C+T/2Xyv0z+l8n/MvlfJv/L5H+Z/C+T/+UC//n+L9MLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIyvaBMLyjTC8r0gjK9oEwvKNMLyvSCMr2gTC8o0wvK9IIy2VemF5TpBWV6QZleUKYXlOkFZXpBmV5QpheU6QVlekHif0aVXlClF1T5H1TpBVXyuEovqNILqvSCKr2gSi+o0guq9IIqvaBKL6jSC6r0giq9oEovqNILqvSCKj8vUCX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5X1347/8Pvkr+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/KvlfJf+r5H+V/K+S/1Xyv0r+V8n/Kvlf3Z9AjCr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyvkv9V8r9K/lfJ/yr5XyX/q+R/lfyf9a/Z18n/OvlfJ//r/A118r9O/tfJ/zr/n1sn/+vkf538r5P/dfK/Tv7Xyf86+V8n/+t5//P9X6cX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFdXpBnZ8XqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaBOL6jTC+r0gjq9oE4vqNML6vSCOr2gTi+o0wvq9II6vaDOzwvU+XmBOr2gTi+o0wvqh/89eOv0gjq9oE4vqNML6mRinV5QpxfU6QV1ekGdXlCnF9TpBXV6QZ1eUKcX1OkFs+K3SS9o0gua9IImvaDJ39ikFzTpBU16QZNe0KQXNOkFTXpBk17QpBc06QVNekGTXtDk5wWa5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H+T/G+S/03yv0n+N8n/JvnfJP+b5H/zb/n/9DMzmuR/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xvkv9N8r9J/jfJ/yb53yT/m+R/k/xv8vMCTfK/Sf43yf8m+d8k/5vkf5P8b5L/TfK/Sf43yf8m+d8k/5vkf5P8b5L/ifMZbfK/Tf63yf82+d8m/9v8A23yv03+t8n/NvnfJv/b5H+b/G+T/+1c//n+b9ML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wva9II2vaBNL2jz8wJtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16QZte0KYXtOkFbXpBm17Qphe06QVtekGbXtCmF7TpBW16Qbv+Fv/+r/ymF7TpBW16QZte0KYXtOkFbXpBm17Qphe0yco2vaBNL2jTC9r0gja9oE0vaNML2vSCNr2gTS9o0wsS7zO69IIuvaBLL+jSC7rkd5de0OUf7NILuvSCLr2gSy/o0gu69IIuvaDLzwt0yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/3Yb//n9Q3b/l//7ffHCB5H+X/O+S/92m/8uPM/nfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d7P+rOrkf5f875L/XfK/S/53yf8u+T/rz7fukv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y753yX/u+R/l/zvkv9d8r/72r//R/C65H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/LvnfJf+75H+X/O+S/13yv0v+d8n/7vb/2ML/479P/nfJ/y753yX/u+R/l/zvkv9d8r9L/nfJ/y4/L9Al/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfK/S/53yf8u+d8l/7vkf5f875L/XfJ/1r/dMDP5P3PWn7uf/J+Z/J+Z/J+Z/583M/k/Mw/MTP7PTP7PTP7PnP0/3/8z0wtm/f7/M9MLZqYXzEwvmJleMDO9YGZ6wcz0gpnpBTPTC2b6ffYAAADg/4ey/3v/MYpZ/xm9Gf/j1/cO+I/fzGjGKbfNfe8Sq++0wsAzs36fwPn+O3+sAAAAwH/NyP7/cm//F4s+79HnrHP4a5cceGbWnw9g/wMAAMAEjez/I3v7v5xt8RvXOnrj335q4JlZfy6g/Q8AAAATNLL/j+rt/+p7973iu5+85svPHngmv4+P/Q8AAABTNLL/j+7t//qKdW/fY8s59jht4Jn8/r32PwAAAEzRyP4/prf/m48dtNqnVj3pBRcOPJM/t8f+BwAAgCka2f/H9vZ/u9N5i95477Y/WWTgmfx5vfY/AAAATNHI/j+ut/+7G/d/5gXzL3DpnweemfXP/J/t/5n/Fz9gAAAA4F82sv+/0tv/M3f78fw/uvKmJTcZeGbxXL/+DwAAABM0sv+P7+3/2X627+PrnbrPbusOPPPCXPsfAAAAJmhk/3+1t/+fdceatyy6x/mH3zfwzIty7X8AAACYoJH9/7Xe/n/2ez610kM7LXXrzgPPLJFr/wMAAMAEjez/r/f2/+xL37LbGd+/b5WrBp5ZMtf+BwAAgAka2f8n9Pb/HEfM88V3/XK9XW4feGapXPsfAAAAJmhk/5/Y2/9zHvzSs5892yGf++jAMy/Otf8BAABggkb2/0m9/T/Xan/a6ImHdn/m8oFnls61/wEAAGCCRvb/N3r7f+6nf/6yO1c4e7HtB555Sa79DwAAABM0sv+/2dv/86wz23XzbbLIm3YfeGaZXPsfAAAAJmhk/5/c2//zbrTiw2/4/G3fumHgmZfm2v8AAAAwQSP7/5Te/p/v/r/Occ4X17j7HQPPvGzW3/Pf+oMFAAAA/ktG9v+pvf0//1c3v3u3txxYPTPwzLK59j8AAABM0Mj+P623/xdY4gszPr7ccpv/YeCZl+fa/wAAADBBI/v/9N7+f87y31r85r88dO6bBp5ZLtf+BwAAgAka2f/f6u3/BQ99/yVL3rvSpe8feGb5XPsfAAAAJmhk/5/R2//PXfo7S1+06mNL/vw//sf/8+sVufY/AAAATNDI/v/2f+z/F8w4Yqer37zlVrv9auCZFXLtfwAAAJigkf1/Zu/X/xc+eNMHnvvJ4w7fZ+CZFf/tv+xv/wMAAMAkjez/7/T2//NW+/JsDxzd3vr4wDOvzLX/AQAAYIJG9v9Zvf2/yLveu/+m61yxylsHnlkp1/4HAACACRrZ/9/t7f9F7/368V9fYqdd1h545lW59j8AAABM0Mj+P7u3/xd75NgLHnvi1M/dNfDMyrn2PwAAAEzQyP7/Xm//P3/9rd/ZPX/TZ94+8MwqufY/AAAATNDI/j+nt/9f8MaL5njeJUcs9uTAM6vm2v8AAAAwQSP7//u9/b/4o3s//IeTVnvTQwPPvDrX/gcAAIAJGtn/5/b2/wt/v/Z1F+z/1LfePPDMa3LtfwAAAJigkf3/g97+f9HWn3zZW7bd5u6LB55ZLdf+BwAAgAka2f8/7O3/JZZ+8SWHXnhCte3AM6/Ntf8BAABggkb2/3m9/b/kEXctvvftc22+58Azq+fa/wAAADBBI/v/R739v9TBv5mxbHndubcMPPO6XPsfAAAAJmhk/5/f2/8vXm3Ru29fdY5lth54Zo1c+x8AAAAmaGT/X9Db/0t/9Y7Z1rn3mp89PfDMmrn2PwAAAEzQyP7/cW//v2SJhR74wSe3/dofB55ZK9f+BwAAgAka2f8X9vb/Msu/6OrfbXnSfusPPLN2rv0PAAAAEzSy/y/q7f+XHnrv0nOvs/rKVww8s06u/Q8AAAATNLL/L+7t/5cd+5fZTj76mZvfM/DMurn2PwAAAEzQyP7/SW//L/uClR7Y7ImNP/6hgWden2v/AwAAwASN7P+f9vb/y18519XFEodvd/3AM2/Itf8BAABggkb2/yW9/b/c569a+tFLdp7nfQPPvDHX/gcAAIAJGtn/l/b2//JvfuCt9z//9D9fOfDMern2PwAAAEzQyP6/rLf/X/H4sucutH/9jTsGnnlTrv0PAAAAEzSy/y/v7f8V7l7wqA1Oumzdjw08s36u/Q8AAAATNLL/r+jt/xW3uGHPCy/cYvZHBp55c679DwAAABM0sv+v7O3/V75s92P33faYP2068MwGufY/AAAATNDI/r+qt/9XOvL7ex1SrnzeOgPPbJhr/wMAAMAEjez/q3v7/1UfP2zL397++Ba/H3jmLbn2PwAAAEzQyP7/WW//r7zKeucvd+Wyy/xk4JmNcu1/AAAAmKCR/X9Nb/+vcuxnNvr+/A/+bLuBZzbOtf8BAABggkb2/7W9/b/qCzY4+/V7rPW1PQae2STX/gcAAIAJGtn/1/X2/6tf+ZEvznvqQfvdPPDMrD8TwP4HAACACRrZ/z/v7f/XfP67u931/cVW3mrgmbfm2v8AAAAwQSP7//re/l/tT2t1W+50x81PDDyzWa79DwAAABM0sv9v6O3/127+iXtPn223jz888Mzbcu1/AAAAmKCR/f+L3v5ffe0LL336l2dtt8HAM5vn2v8AAAAwQSP7/8be/n/dk3stNccK68/zt4Fntsi1/wEAAGCCRvb/Tb39v8aJOy67xUOH/nmzgWe2zLX/AQAAYIJG9v8ve/t/zeee+fNvfX6Jb6w18MysPxPA/gcAAIAJGtn/N/f2/1qzf+mhZza5d907B555e679DwAAABM0sv9v6e3/tc/dZPbZ37LX7LsMPLN1rv0PAAAAEzSy/3/V2//r/PTPv7vqi+f96bqBZ96Ra/8DAADABI3s/1t7+3/dvV5VvPovC55368Az78y1/wEAAGCCRvb/r3v7//W7zP6CDyx38xb7Djzzrlz7HwAAACZoZP//prf/33Dz1T89/vYT3nHUwDPb5Nr/AAAAMEEj+/+3vf3/xj1mvqQrt7lgpYFn3p1r/wMAAMAEjez/23r7f73rrvvZY9te94cXDjyzba79DwAAABM0sv9v7+3/N/36sfu/fuFcsx0w8Mx2ufY/AAAATNDI/r+jt//X32aFmZuedMQasw88s32u/Q8AAAATNLL/7+zt/zcvu+2b59l/0xPOHHjmPbn2PwAAAEzQyP6/q7f/NzjqG2fe/fyn/nrewDPvzbX/AQAAYIJG9v/dvf2/4UFfPezcS1ab/3kDz+yQa/8DAADABI3s/9/19v9bVt3i/esuccV7Txh4Zsdc+x8AAAAmaGT/39Pb/xv9Y5953vFE+6lq4Jmdcu1/AAAAmKCR/X9vb/9vvOYFfznz6FNvnH/gmffl2v8AAAAwQSP7//cHzJht1n+zyWYH/+Lv6+y0wrkDz+yca/8DAADABI3s//t6v/6/6cNrLD/blo/t++qBZ3bJtf8BAABggkb2/x96+/+tx919xzWfXOnYoweeeX+u/Q8AAAATNLL//9jb/5stvsRrX3fvcdcdNvDMB3LtfwAAAJigkf1/f2//v22lxRbZedWtllt24JkP5tr/AAAAMEEj+/+B3v7f/LBfPX30cge+41kDz+yaa/8DAADABI3s/wd7+3+LZRdeoPzLGhecOvDMbrn2PwAAAEzQyP7/U2//b3nUb//2yBcf+sNFA898KNf+BwAAgAka2f8P9fb/Vgf9/uZvvmW52RYdeGb3XPsfAAAAJmhk/z/c2/9vX/UFr3zbJmev8YWBZ/bItf8BAABggkb2/597+3/rrW5c66HP737CigPP7Jlr/wMAAMAEjez/R3r7/x13LvD1RR+67a9LDDzz4Vz7HwAAACZoZP8/2tv/73xsuQPXW2GR+Q8eeOYjufY/AAAATNDI/v9Lb/+/a8Pr55ox4773rjbwzF659j8AAABM0Mj+f6y3/7fZ4FnLnzzbUp/66sAze+fa/wAAADBBI/v/r739/+6/XfOLzXY65MZPDzyzT679DwAAABM0sv8f7+3/bX/3+F+K76+3wksHntk31/4HAACACRrZ/3/r7f/ttlx+nkdPvWnfUwae+Wiu/Q8AAAATNLL/n+jt/+2XPeLplfdY4Nhm4JmP5dr/AAAAMEEj+//J3v5/z1FvXeTS+c+/bt6BZ/bLtf8BAABggkb2/997+/+9B33gtYdfuc9yZw08s3+u/Q8AAAATNLL//9Hb/zuseuod22232t/qgWcOyLX/AQAAYIJG9v8/e/t/x+Pe98onL3rqOScPPHNgrv0PAAAAEzSy/5/q7f+dFj/j5mfdsela3x145uO59j8AAABM0Mj+f7q3/9+30pF/e2d1xElDG/+gXPsfAAAAJmhk/z/T2/87H7bRAt9ebK77vzbwzCdy7X8AAACYoP98/3czevt/l6uPXm/en1737NcOPPPJXPsfAAAAJmhk/xe9/f/+Xd/5rbtO3OZdyww8c3Cu/Q8AAAATNLL/y97+/8D22x/6/f1OuPCQgWc+lWv/AwAAwASN7P+qt/8/ePuJO77+mK2uWWHgmVk/J2D/AwAAwASN7P+6t/93XeSA+d+57nHLHj7wzKdz7X8AAACYoJH93/T2/24nv/7xby+50t6fGnjm0Fz7HwAAACZoZP+3vf3/obM/esuTTz529JIDz3wm1/4HAACACRrZ/11v/+8+80crPeuenW44beCZz+ba/wAAADBBI/t/Zm//7/HR5/7656ucuvyzB575XK79DwAAABM0sv9n6+3/PS+/fZXVtmi3X2Tgmc/n2v8AAAAwQSP7/1m9/f/hX9yz0I6fuOKTFw48c1iu/Q8AAAATNLL/n93b/x/Z8YX/OO6IRf52zMAzs/5MQPsfAAAAJmhk/8/e2/97XX3n3MWGtz3nNQPPfCHX/gcAAIAJGtn/c/T2/967LvXooy/ffa2XDTxzRK79DwAAABM0sv/n7O3/fbZf5MaTHz37pM8PPPPFXPsfAAAAJmhk/8/V2//73v7rV2z28HL3lwPPfCnX/gcAAIAJGtn/c/f2/0d//JI3/GnFh5799YFnvpxr/wMAAMAEjez/eXr7/2Pdw99cbNM13vWDgWeOzLX/AQAAYIJG9v+8vf2/33y//MSbDjvwwgUGnjkq1/4HAACACRrZ//P19v/+p8333vN23Oea7ww8c3Su/Q8AAAATNLL/5+/t/wPWvve2/c45f9k5Bp45Jtf+BwAAgAka2f8L9Pb/gU++6HWfu2mBvRceeObYXPsfAAAAJmhk/z+nt/8//qeFFrt15k1H/3DgmeNye/u//e/5AQMAAAD/spH9v2Bv/x+0+R3/XGaB9W545cAzX8n16/8AAAAwQSP7/7m9/f+JF31svoevOmT5IweeOT7X/gcAAIAJGtn/C/X2/yePOf+RRU5bavsDB575au7/tv+f8//tHzAAAADwLxvZ/wv39v/Bnzvw+jfued8nXzTwzNdy/fo/AAAATNDI/n9eb/9/auU3rHD+Jw4/4OcDz3w91/4HAACACRrZ/4v09v8hX/7krYtvsfG73z/wzAm59j8AAABM0Mj+X7S3/z+93Nqv+cUqz6y0z8AzJ+ba/wAAADBBI/t/sd7+P/Q1ey988D2r3/SrgWdOyrX/AQAAYIJG9v/ze/v/Mwde9MSeT550/Fv/t0f2n/GNfNn/AAAAMEEj+/8Fvf3/2WsevmDlJbf96OMDz3wz1/4HAACACRrZ/4v39v/nPvySd1667jVL3zXwzMm59j8AAABM0Mj+f2Fv/39+2/n2P/yYOa5ae+CZU3LtfwAAAJigkf3/ot7+P+xXvzx+u/0eP//JgWdOzbX/AQAAYIJG9v8Svf1/+MJ/u2vfE1fe6u0Dz5yWa/8DAADABI3s/yV7+/8LX39FdchPj5nzzQPPnJ5r/wMAAMAEjez/pXr7/4hznv3C3y62xcMPDTzzrVz7HwAAACZoZP+/uLf/vzjntRcvV1128rYDz5yRa/8DAADABI3s/6V7+/9L+3xwufvvqN9w8cAz3861/wEAAGCCRvb/S3r7/8sXn3btQhedPt8tA8+cmWv/AwAAwASN7P9levv/yJu++OAG2+386J4Dz3wn1/4HAACACRrZ/y/t7f+jPrDZnBfuedYBmww8c1au/Q8AAAATNLL/X9bb/0dfc9S9S5y227v/PPDMd3PtfwAAAJigkf2/bG//H/PhjbtbrrpjpfsGnjk71/4HAACACRrZ/y/v7f9jt915qYMWWOymdQee+V6u/Q8AAAATNLL/l+vt/+N+9e1Ld5150PFXDTxzTq79DwAAABM0sv+X7+3/r5z/zrOvvGmtj+488Mz3c+1/AAAAmKCR/f+K3v4/vjh6o9ec8+DSHx145txc+x8AAAAmaGT/r9Db/19d4MTdPrjjslfdPvDMD3LtfwAAAJigkf2/Ym//f+0723/xK4fdfP72A8/8MNf+BwAAgAka2f+v7O3/r5/xqYsP2HTBrS4feOa8XPsfAAAAJmhk/6/U2/8nPGfNF+6+4nlz3jDwzI9y7X8AAACYoJH9/6re/j+x3Ld68cN7Pbz7wDPn59r/AAAAMEEj+3/l3v4/6Yc/vuumR+89+ZmBZy7Itf8BAABggkb2/yq9/f+Na54/5zwvX+IN7xh45se59j8AAABM0Mj+X7W3/7/54VsfvHvDQ+d708AzF+ba/wAAADBBI/v/1b39f/K2v7v23CPWf/QPA89clGv/AwAAwASN7P/X9Pb/Kb9acrl1TzvkA9sNPHNxrv0PAAAAEzSy/1fr7f9T97nv0jv2XO+wnww8M+uv2f8AAAAwQSP7/7W9/X/axYsv9bIF7vvNzQPP/DTX/gcAAIAJGtn/q/f2/+k3Pa/b66qlXr3HwDOX5Nr/AAAAMEEj+/91vf3/rQ/cdu9nbjp/9ycGnrk01/4HAACACRrZ/2v09v8Z+/3s0tfO3OeIrQaeuSzX/gcAAIAJGtn/a/b2/7cvnWOp63a86fINBp65PNf+BwAAgAka2f9r9fb/mdev3B17zgIvfnjgmSty7X8AAACYoJH9v3Zv/3/nfY/cu9OmD2222cAzV+ba/wAAADBBI/t/nd7+P+vUG4/Z7bDlzvnbwDNX5dr/AAAAMEEj+3/d3v7/7rwL7Pvxhw+8886BZ67Otf8BAABggkb2/+t7+//sdrmtbl5xjWKtgWd+lmv/AwAAwASN7P839Pb/9y744w+XfPltb7xu4Jlrcu1/AAAAmKCR/f/G3v4/58r1N7/z0UVO22XgmWtz7X8AAACYoJH9v15v/3//Q5/7/nxHnP3UvgPPzPp3Aux/AAAAmKCR/f+m3v4/970/+NIbNtx9kVsHnvl5rv0PAAAAEzSy/9fv7f8f/Ha3D5+zxakfeHrgmetz7X8AAACYoJH9/+be/v/hft87/uWf2OmwrQeeuSHX/gcAAIAJGtn/G/T2/3mX7rn/bfdc8Zv1B575Ra79DwAAABM0sv837O3/H13/lnd+epX21X8ceObGXPsfAAAAJmhk/7+lt//Pf9+nL9hnyeN2f8/AMzfl2v8AAAAwQSP7f6Pe/r9gtn2u/umTWx1xxcAzv8y1/wEAAGCCRvb/xr39/+PvXbD0K4557PLrB565Odf+BwAAgAka2f+b9Pb/haccPNt71l3pxR8aeOaWXPsfAAAAJmhk/2/a2/8XLbrGA0eeeN1mVw4886tc+x8AAAAmaGT/v7W3/y9+/UZ3XrLfXOe8b+CZW3PtfwAAAJigkf2/WW///+SfR5bLL3bCnR8beObXufY/AAAATNDI/n9bb///9A9nvGj7n25T3DHwzG9y7X8AAACYoJH9v3lv/1+yyft+ctQdT71x04Fnfptr/wMAAMAEjez/LXr7/9Klrnz5JtVqpz0y8MxtufY/AAAATNDI/t+yt/8v+8qc15yw3RFP/X7gmdtz7X8AAACYoJH9v1Vv/19+yCv/9NeLNl1knYFnZv2eAPY/AAAATNDI/n97b/9fscKjc7UbLrHQqQPP3Jlr/wMAAMAEjez/rXv7/8rDl7/nK0fc+8SzBp65K9f+BwAAgAka2f/v6O3/q5Z5vP3go+ufsejAM3fn2v8AAAAwQSP7/529/X/16te8+DUvP3SDiwae+V2u/Q8AAAATNLL/39Xb/z/7xLMuu3LFBesVB565J9f+BwAAgAka2f/b9Pb/NVdtdeChD9987xcGnrk31/4HAACACRrZ/+/u7f9rd//Kdnsfttd3Dx545ve59j8AAABM0Mj+37a3/6/b4eS1lt30vI2WGHjmvlz7HwAAACZoZP9v19v/P79tm6/ffs5aL/zqwDN/yLX/AQAAYIJG9v/2vf1//fPX+u3lOx50yWoDz/wx1/4HAACACRrZ/+/p7f8bvvmJ1VeauexRLx145v5c+x8AAAAmaGT/v7e3/3/x3Quf/+6bHvzwpweeeSDX/gcAAIAJGtn/O/T2/43P3uupI67a7XXNwDMP5tr/AAAAMEEj+3/H3v6/af9fz7v5AmfdfsrAM3/Ktf8BAABggkb2/069/f/Lyxb58zf2XOzQswaeeSjX/gcAAIAJGtn/7+vt/5tvWOqGP592x87zDjzzcK79DwAAABP0n+z/A2bM6Hbu7f9bdr5zxeqieqGVBp75c679DwAAABM08uv/u/T2/6+ueuGvjtnusieOGnjmkVz7HwAAACZoZP+/v7f/b939nle/r9r5jAMGnnk01/4HAACACRrZ/x/o7f9f73D781a/4/QNXjjwzF9y7X8AAACYoJH9/8He/v/Nbc998tqfrlyfOfDMY7n2PwAAAEzQyP7ftbf/f3vhA4ftudjj984+8Mxfc+1/AAAAmKCR/b9bb//fVi/7/oP32+K7zxt45vFc+x8AAAAmaGT/f6i3/2+fe8E3/+LEYzY6b+CZv+Xa/wAAADBBI/t/997+v+P0G85cfN1tX1gNPPNE7r+0/9f4r/yAAQAAgH/ZyP7fo7f/7zxthadee8xJl5ww8MyTuX79HwAAACZoZP/v2dv/d8332POve3KOo84deObvufY/AAAATNDI/v9wb//f3V23+rFLXvPh+Qee+Ueu/Q8AAAATNLL/P9Lb/7/78czf7rTKxq87euCZf+ba/wAAADBBI/t/r97+v+eq01c8457Db3/1wDNP5dr/AAAAMEEj+3/v3v6/d/ddbnjXJ1Y/dNmBZ57Otf8BAABggkb2/z69/f/7Hd7252dv8czOhw0880yu/Q8AAAATNLL/9+3t//tuO3zeJ85a4AefGXhl1of9DwAAABM0sv8/2tv/f9h/kye33eWmt71k4JVZf4/9DwAAABM0sv8/1tv/f7zsS8/7wuz7lKsPvFLm41/Z/88881/7IQMAAAD/opH9v19v/99/w5mvvuz683/3lYFXqnz49X8AAACYoJH9v39v/z+w846/etW1S50+98ArdT7sfwAAAJigkf1/QG//P/iTR1fYcZ771j974JUmH/Y/AAAATNDI/j+wt///tO8rrz9ut/We/82BV9p82P8AAAAwQSP7/+O9/f/QB+d85OffPuTpbuCVWX/N/gcAAIAJGtn/B/X2/8O/vHK+1d60+2d/PPDKrH/e/gcAAIAJGtn/n+jt/z8veP8Hlzjy7Pc/f+CV2fJh/wMAAMAEjez/T/b2/yPfftnnbnl8kVVnDrzyrHzY/wAAADBBI/v/4N7+f/S855xx0DK3/er0gVeenQ/7HwAAACZoZP9/qrf//1Jdv+GuK6/xhaUGXpk9H/Y/AAAATNDI/j+kt/8f+8iHTvj+Awfu+omBV+bIh/0PAAAAEzSy/z/d2/9/vfactV//meWW+OLAK3Pmw/4HAACACRrZ/4f29v/jt35+23k3f+iyVwy8Mlc+7H8AAACYoJH9/5ne/v/bdm884K41V/rBcwZemTsf9j8AAABM0Mj+/2xv/z/xk0N33vf4x952zsAr8+TD/gcAAIAJGtn/n+vt/yf3ffOnD3lqq/KkgVfmzYf9DwAAABM0sv8/39v/f//gh0/97eLH/a4YeGXW7rf/AQAAYIJG9v9hvf3/j1+e9ablVmtP/9zAK/Pnw/4HAACACRrZ/4f39v8/z117taPuvGL95QZeWSAf9j8AAABM0Mj+/0Jv/z81+ydv3/6AnZ6/ytAr+bD/AQAAYIJG9v8Rvf3/9HMvemb5rU99+tiBVxbMx//c/zP/237EAAAAwL9qZP9/sbf/nzlx70UvOX/Tz75g4JXn5sOv/wMAAMAEjez/L/3H/i9mHHTjnifscMT7Pz7wykL5sP8BAABggkb2/5d7+79YdYGjNulWW/XLA68snA/7HwAAACZoZP8f2dv/5bLLndv+5qlfrTzwyvPyYf8DAADABI3s/6N6+7866o9v/evl23zh/IFXFsmH/Q8AAAATNLL/j+7t//p365+//MIn7LrQwCuL5sP+BwAAgAka2f/H9PZ/s+Xntrxkn7mWmHPglcXyYf8DAADABI3s/2N7+7/d4Ad7HXXydZedMfDK8/Nh/wMAAMAEjez/43r7v/vbbsduv/l5F68x8Mqsf8b+BwAAgAka2f9f6e3/mZt9b7enP7PX4ncPvLJ4Pux/AAAAmKCR/X98b//P9vCeX5zjgZv3/OvAKy/Mh/0PAAAAEzSy/7/a2//P+sdbzt5y5QW/tPnAKy/Kh/0PAAAAEzSy/7/W2//PXvPTG52+zKG3/WbglSXyYf8DAADABI3s/6/39v/ss986/x8eX3+1vQdeWTIf9j8AAABM0Mj+P6G3/+c49/mPP+/Ie3f8wMArS+XD/gcAAIAJGtn/J/b2/5wnLnnLW960xKevGXjlxfmw/wEAAGCCRvb/Sb39P9dzf7fSBd++4x8fHnhl6XzY/wAAADBBI/v/G739P/evf7LeN3ZbbOGbBl55ST7sfwAAAJigkf3/zd7+n2eb7lubz3PWhpcMvLJMPux/AAAAmKCR/X9yb//Pu8drD62u3e077x545aX5sP8BAABggkb2/ym9/T/fdf/Y8c/XP/j7Pw288rJ82P8AAAAwQSP7/9Te/p//R1t+aqXZl+3eMvDKsvmw/wEAAGCCRvb/ab39v8CMr73n8l0O2nSLgVdeng/7HwAAACZoZP+f3tv/z5n/m+sccdZaZ/994JXl8mH/AwAAwASN7P9v9fb/gmdud/K7Tz7m4tsGXlk+H/Y/AAAATNDI/j+jt/+fO/sJG/xjny0W33/glVfkw/4HAACACRrZ/9/u7f+Fzt3hOzMXfnzPHQdeWSEf9j8AAABM0Mj+P7O3/xc+8R2f3/rylb909cArK+bD/gcAAIAJGtn/3+nt/+c997hdvvOb0297/cArr8yH/Q8AAAATNLL/z+rt/0X23XHhBbudV7tn4JWV8mH/AwAAwASN7P/v9vb/oj8584l7drhsx78MvPKqfNj/AAAAMEEj+//s3v5f7JdfuvWs8+tPbzzwysr5sP8BAABggkb2//d6+//5H9zkNWtv/cw/Hhh4ZZV82P8AAAAwQSP7/5ze/n/BLt/d8V0HrL7wegOvrJoP+x8AAAAmaGT/f7+3/xe/+SOHnnHn4Ru+c+CVV+fD/gcAAIAJGtn/5/b2/wt/usG3nlht4+/8c+CV1+TD/gcAAIAJGtn/P+jt/xft9Zn1nr34Nb/fdeCV1fJh/wMAAMAEjez/H/b2/xKzv+Tk656ao/vFwCuvzYf9DwAAABM0sv/P6+3/Jc99eJ3XHn/SppcNvLJ6Pux/AAAAmKCR/f+j3v5f6sRfvmenNbc9e4eBV16XD/sfAAAAJmhk/5/f2/8vfu58nzp2nxNe/uDAK2vkw/4HAACACRrZ/xf09v/SP7phlxknb/PzDQdeWTMf9j8AAABM0Mj+/3Fv/79kxoKf/8vl1x235cAra+XD/gcAAIAJGtn/F/b2/zLzL/udUxaea59/DLyydj7sfwAAAJigkf1/UW//v/TMBzZ4a3fEih8ZeGWdfNj/AAAAMEEj+//i3v5/2YVP7XL3bzb9xS8HXlk3H/Y/AAAATNDI/v9Jb/8vW7/m8/Oc/9TBPx145fX5sP8BAABggkb2/097+//lcxffWXeH1XbYZuCVN+TD/gcAAIAJGtn/l/T2/3KnX7HBuQdcscCvB155Yz7sfwAAAJigkf1/aW//L7/jva84c+v2sb0GXlkvH/Y/AAAATNDI/r+st/9f8YsX3fiO1U79+gcHXnlTPux/AAAAmKCR/X95b/+vcPlCj852505rXjvwyvr5sP8BAABggkb2/xW9/b/iR++Y++9PPTZzzYFX3pwP+x8AAAAmaGT/X9nb/6+c+bFnXrf4Sn/83cArG+TD/gcAAIAJGtn/V/X2/0pnn7/oNWse9+PHBl7ZMB/2PwAAAEzQyP6/urf/X3XygasdffxWW79t4JW35MP+BwAAgAka2f8/6+3/lRd5w+07f+bAl+828MpG+bD/AQAAYIJG9v81vf2/yoWfXOmRzdf4+Y0Dr2ycD/sfAAAAJmhk/1/b2/+r1mvfUq780HGXDryyST7sfwAAAJigkf1/XW//v3ruvR9/2wPL7fPegVc2zYf9DwAAABM0sv9/3tv/rzn9ovm/+fjZK94/8Mpb82H/AwAAwASN7P/re/t/tavevO2iy+z+izcOvLJZPux/AAAAmKCR/X9Db/+/dvdDD3joTbcd/K6BV2b9mYD2PwAAAEzQyP7/RW//r77DWSf86MhFdnhq4JXN82H/AwAAwASN7P8be/v/dbd9eO31drtvgTcMvLJFPux/AAAAmKCR/X9Tb/+vcfB737jIt5d67N6BV7bMh/0PAAAAEzSy/3/Z2/9rrvb10x++9pCvPzrwylb5sP8BAABggkb2/829/b/W0sd+5vx51ltzo4FX3p4P+x8AAAAmaGT/39Lb/2sfsfVOb5z9ppm/HXhl63zY/wAAADBBI/v/V739v87vnz74c9cv8Mf9Bl55Rz7sfwAAAJigkf1/a2//r7v1Ktvvd9b5P95p4JV35sP+BwAAgAka2f+/7u3/17+xXHeZXfbZ+mcDr7wrH/Y/AAAATNDI/v9Nb/+/4dFLT7n1+Dm2fPHAK9vkw/4HAACACRrZ/7/t7f83btS+ee01r/nhJwdeeXc+7H8AAACYoJH9f1tv/693/8VnnrX4tg8eMfDKtvmw/wEAAGCCRvb/7b39/6an/37YPU+dNMfyA69slw/7HwAAACZoZP/f0dv/66+z2vsXvHP1dS4YeGX7fNj/AAAAMEEj+//O3v5/82y7vGSz1Z755mIDr7wnH/Y/AAAATNDI/r+rt/83+N7pPzt5640fmW3glffmw/4HAACACRrZ/3f39v+Gpxx+/6MHHD73twZe2SEf9j8AAABM0Mj+/11v/79l0bfNLHbYedt5Bl7ZMR/2PwAAAEzQyP6/p7f/N7pjjz0WOv/0g7438MpO+bD/AQAAYIJG9v+9vf2/8XvOPvL+39S3fGPglfflw/4HAACACRrZ/7/v7f9NdjvkBxd2l72qHXhl53zY/wAAADBBI/v/vt7+3/RnG262wcJb7H/owCu75MP+BwAAgAka2f9/6O3/t1704I8OufyYry498Mr782H/AwAAwASN7P8/9vb/Zs0yW+x78spXv27glQ/kw/4HAACACRrZ//f39v/b5pl77+X2efylxw+88sF82P8AAAAwQSP7/4He/t/8Wzcf99tdlt3yRwOv7JoP+x8AAAAmaGT/P9jb/1vMNv+urz/rwR8+d+CV3fJh/wMAAMAEjez/P/X2/5bf+8UR379+rQfnGnjlQ/mw/wEAAGCCRvb/Q739v9Upf/jeXbMfNMe3B17ZPR/2PwAAAEzQyP5/uLf/377oyzeed57F1ll84JU98mH/AwAAwASN7P8/9/b/1vvd9uLTr73jmwcNvLJnPux/AAAAmKCR/f9Ib/+/49LnXbblt3d75EsDr3w4H/Y/AAAATNDI/n+0t//fef3i98yx21lzv2rglY/kw/4HAACACRrZ/3/p7f93ve++9ukj19/2swOv7JUP+x8AAAAmaGT/P9bb/9vsVG9295sOPejlA6/snQ/7HwAAACZoZP//tbf/333jT38wzzJL3LLqwCv75MP+BwAAgAka2f+P9/b/tlc8ceS6j9/7quMGXtk3H/Y/AAAATNDI/v9bb/9v97HV9zj3gb32X3DglY/mw/4HAACACRrZ/0/09v/2s33luN1XPu+r3x945WP5sP8BAABggkb2/5O9/f+e72219wGbL3j1iQOv7JcP+x8AAAAmaGT//723/997yjZb3PSZm1869Mr++bD/AQAAYIJG9v8/evt/h0VP/tGLX3D4X84ZeOWAfNj/AAAAMEEj+/+fvf2/40Xbb/zjf24873MGXjkwH/Y/AAAATNDI/n+qt/93ak783oZfeeb1xcArH8+H/Q8AAAATNLL/n+7t//fNc/QRC6+x+iknDbxyUD7sfwAAAJigkf3/TG//7/ytd+76x3ec9NByA698Ih/2PwAAAEzQf77/Z8zo7f9d7rz/8BsP3Hauzw288sl82P8AAAAwQSP7v+jt//dv9bIPveCua95+7MArB+fD/gcAAIAJGtn/ZW//f2DD52y6x2vn+NEqA698Kh/2PwAAAEzQyP6vevv/g49d/91P/frxKz8+8Moh+bD/AQAAYIJG9n/d2/+7vurRa7/WrvySFwy88ul82P8AAAAwQSP7v+nt/90++8rldnnvMR9beeCVQ/Nh/wMAAMAEjez/trf/P3T0nHOu8qMtvvLlgVc+kw/7HwAAACZoZP93vf2/+wuvfPBnp1z2y4UGXvlsPux/AAAAmKCR/T+zt//3eNv7qjn3rV95/sArn8uH/Q8AAAATNLL/Z+vt/z0fPOOup553+jZnDLzy+Xz8i/t/5n/hRwwAAAD8q0b2/7N6+//DTxx58WlX7HzgnAOvHJYPv/4PAAAAEzSy/5/d2/8fWWujF251w1l/ecnAK4fnw/4HAACACRrZ/7P39v9edx5x1cVz7DbvZwZe+UI+7H8AAACYoJH9P0dv/++91VtfuuL773j9VwZeOSIf9j8AAABM0Mj+n7O3//fZ8APP2uG7i52y+sArX8yH/Q8AAAATNLL/5+rt/30fO/UPXzrjoIfOHnjlS/mw/wEAAGCCRvb/3L39/9Gj3v7Vl+261lxzD7zy5XzY/wAAAPD/Yu/Oo74e+3/v5/OlZB4yZSpCyZRE5imzhJAhmWeZM2TKkIgrFKWLzJQpU1xkiEIZImTMFGUoQigputfe63DvY9/Hd/+Ofe3f/t3r+OPxWOta11vr/L7W599nn/PsLFCm/5eO+v/C9Ydc8PlS3x/SqM7KwHDofwAAAChQpv+Xifr/os2HHnr1G+uPvKfOyqBw6H8AAAAoUKb/l436/+LLjhh1buv3x61eZ+Wmv7/+v/ZpAQAAgP8Tmf5vEvV/rxMGLThq9gqtnquzMjgc+h8AAAAKlOn/5aL+v+Tdfb7ec9DTF95fZ+Wf4dD/AAAAUKBM/y8f9f+lY08au+Ie596ycJ2Vm8Oh/wEAAKBAmf5foVeDBlW4L7vwobWmHzD1vcvrrNwSDv0PAAAABcr0/4rR+//LGy/52gZ9W2yydp2VIeHQ/wAAAFCgTP+vFPV/78dfbfnptL6Ht6mzcms49D8AAAAUKNP/TaP+v2LoL42v2nSPSwbUWbktHPofAAAACpTp/5Wj/u+zarvpPcdudfnFdVZuD4f+BwAAgAJl+n+VqP+vHDW7wRcr/3nMp3VW7gjH3/2/wH/dEwMAAAD/rkz/rxr1/1ULtfly2fM7t3mtzsqd4fD+HwAAAAqU6f/Vov7vu/SiY3YZ2n/C8XVW7gqH/gcAAIACZfp/9aj/r35gfPMRI5ccPKXOyt3h0P8AAABQoEz/N4v6/5qvhxwz69g3z925zso94dD/AAAAUKBM/zeP+v8fXQ/ps1DDw9fbp87KveHQ/wAAAFCgTP+vEfV/v12PuHefj+8Y/0udlaHh0P8AAABQoEz/rxn1/7Uzh3a4c+uDR+1WZ2VYOPQ/AAAAFCjT/y2i/r9uo97tR06+udv0Oiv3hUP/AwAAQIEy/b9W1P/X993x490uabfIvDor94dD/wMAAECBMv2/dtT//W89b+6qh/46vVudlQfCof8BAACgQJn+Xyfq/wEtRq00Y7sT7nynzsqD4dD/AAAAUKBM/7eM+v+GvVed1fqWYTueVmfloXDofwAAAChQpv9bRf1/47RJTT6c13CF4+qsDA+H/gcAAIACZfp/3aj/B/41ud01zcbOernOysPh0P8AAABQoEz/t476f1CHdT64eNNVLv+yzsoj4dD/AAAAUKBM/68X9f9NX0/dauq0T4/Zrs7Ko+HQ/wAAAFCgTP+vH/X/4K5rfrZ83zPbdKmz8lg49D8AAAAUKNP/G0T9/89dV5q/wwGPTfitzsrj4dD/AAAAUKBM/28Y9f/NMz9f9dE9Nhx8Xp2VEeHQ/wAAAFCgTP9vFPX/Ldevd1LjQTPOnVRn5Ylw6H8AAAAoUKb/20T9P6T1tKv+mL3dem/UWXkyHPofAAAACpTp/42j/r912wnDhre+ZPwpdVb+FQ79DwAAAAXK9H/bqP9v67387oe+0XPUxDorT4VD/wMAAECBMv2/SdT/t1/x20rbL/VMt7PrrDwdDv0PAAAABcr0f7teDRo0Cl95x1Zt5z522nKLHFFnZWQ49D8AAAAUKNP/m0bv/+9s2fjjrx+cOH1MnZVnwqH/AQAAoECZ/t8s6v+7+r/VfrlHd7uzU52VZ8Oh/wEAAKBAmf5vH/X/3V93/2BC9yt3/KHOynPh0P8AAABQoEz/bx71/z1dH2i35uJrr/BHnZXnw6H/AQAAoECZ/t8i6v97d72+yTlvfzPrwDoro8Kh/wEAAKBAmf7fMur/oTO7zLp8WosT362z8kI49D8AAAAUKNP/W0X9P2zvG1ddbdOpV59eZ+XFcOh/AAAAKFCm/7eO+v++aZ3n/3DAHp8fW2dldDj0PwAAABQo0//bRP1//18nfPZ0377bvFRnZUw49D8AAAAUKNP/20b9/0CHh7fafdAK5+xaZ+XvvxPQ/wAAAFCgTP9vF/X/g/s9veq8Pd4fOK3Oysvh0P8AAABQoEz/bx/1/0MzLp6/ZOtzR/9ZZ+WVcOh/AAAAKFCm/3eI+n/4Hzt9dsjsp9c8rM7K2HDofwAAAChQpv93jPr/4e0u22rYUjvsM7XOyrhw6H8AAAAoUKb/O0T9/8ild2z3yBuXPbJLnZVXw6H/AQAAoECZ/t8p6v9H2x93544Prj9l7zorr4VD/wMAAECBMv2/c9T/j6136GUrnPb9QjPrrLweDv0PAAAABcr0/y5R/z8+8OYjpnQ/fc+L6qy8EQ79DwAAAAXK9P+uUf+P+HLzfs0ffeShT+qsjA+H/gcAAIACZfp/t6j/nzhw/snvvL3anNfrrLwZDv0PAAAABcr0/+5R/z+558sdr1j88xVPqLPyVjj0PwAAABQo0/97RP3/r1m1h3usvOCJe9VZmRAO/Q8AAAAFyvT/nlH/P7Xfix1+HPvy1d/XWXk7HPofAAAACpTp/45R/z89o9G9qww96fO5dVbeCYf+BwAAgAJl+n+vqP9H/rF1n13Pv3+bg+qsvBsO/Q8AAAAFyvR/p6j/n9lu7jHPHLvZOe/VWZkYDv0PAAAABcr0/95R/z+75sLL1kbOGnhOnZW//05A/wMAAECBMv2/T9T/zw1+8+efPj5w9OF1Vt4Ph/4HAACAAmX6f9+o/5//x68T7m44eM3RdVY+CIf+BwAAgAJl+r9z1P+jNtt44y6Tj9zn3DorH4ZD/wMAAECBMv2/X9T/L5y8xubV1nc90qvOykfh0P8AAABQoEz/7x/1/4vvT5n086GLTxlfZ+XjcOh/AAAAKFCm/w+I+n/06M/+uOeSNxY6tc7KpHDofwAAAChQpv+7RP0/5twVVzzgln32/KrOyifh0P8AAABQoEz/Hxj1/0uLjZw9YLvrHtq+zsqn4dD/AAAAUKBM/x8U9f/LT16w3OHNtplzQJ2Vz8Kh/wEAAKBAmf4/OOr/V+7ceZNN5s1f8dc6K5+HQ/8DAABAgTL9f0jU/2NX7PX+2MWvXHXFOitfhEP/AwAAQIEy/d816v9xI3fY+tC3d5s3ss7K5HDofwAAAChQpv8Pjfr/1QaXfz780W+GPVRn5ctw6H8AAAAoUKb/u0X9/1qT5//6o/vauy1ZZ+Xv3wmo/wEAAKBAmf4/LOr/14efu0rj055pcFmdlSnh0P8AAABQoEz/Hx71/xtftTxwjwd7Tm5eZ2VqOPQ/AAAAFCjT/0dE/T/+oBkjn3pj4hOb1ln5Ohz6HwAAAAqU6f8jo/5/s+PEm79farn9bqiz8k049D8AAAAUKNP/R0X9/9bsZc5bffaMtTeos/JtOPQ/AAAAFCjT/0dH/T+h3UYLNWq94dhr6qx8Fw79DwAAAAXK9P8xUf+/fe2sb37d45IBN9dZmRYO/Q8AAAAFyvT/sVH/v3PzG6/cPmi7MzavszI9HPofAAAACpTp/+Oi/n+3+SItOvf9dMsn6qx8Hw79DwAAAAXK9P/xUf9P3H/Y6wMPWOXjFeqs/BAO/Q8AAAAFyvT/CVH/v/fjKa2O2fSxfvVWZoRD/wMAAECBMv1/YtT/78/db+E208489c46Kz+GQ/8DAABAgTL9f1LU/x9s33/a6HnDVu1dZ+WncOh/AAAAKFCm/0+O+v/Dr/Ze4MBmJ8xbp87Kz+HQ/wAAAFCgTP93j/r/o4MGfvXAdmOHbVRnZWY49D8AAAAUKNP/p0T9/3HHB0fPv6Xhbv3rrPwSDv0PAAAABcr0/6lR/0+afWKzxS65ucFqdVZ+DYf+BwAAgAJl+v+0qP8/uWHwASMOPXjys3VWfguH/gcAAIACZfr/9Kj/P+112Ihdtv71iQfqrMwKh/4HAACAAmX6/4yo/z/b4pgbl53cbr/GdVZmh0P/AwAAQIEy/X9m1P+f97rrnC8avrn243VWfg+H/gcAAIACZfr/rKj/v7hsuxbzPl5y7NJ1VuaEQ/8DAABAgTL93yPq/8mbX/HKkiPvGNCwzsof4dD/AAAAUKBM/58d9f+X6z/7zSHHHn7G3XVW5oZD/wMAAECBMv1/TtT/Xw3qudCw8//csmWdlXnh0P8AAABQoEz/nxv1/5SvPpzWfehWH/ets/JnOPQ/AAAAFCjT/+dF/T/1oNUWvnVs/35D6qz8FQ79DwAAAAXK9H/PqP+/7tii1Wsrdz512zor88Oh/wEAAKBAmf4/P+r/b2Z/+frmZ00eeUi6Uv196H8AAAAoUKb/L4j6/9v9mzW7a1izQ+akK1X4Gv0PAAAAJcr0/4VR/3/349ej9x7Xb8kZ6Ur19zcA6H8AAAAoUKb/L4r6f9rcT75asEmnGXumK1UtHPofAAAACpTp/4uj/p++fdMFZjd+Z+gL6Uq1YDj0PwAAABQo0/+9ov7/fnqv6fe9t+zOR6Yr1ULh0P8AAABQoEz/XxL1/w/77Nz44CeeW6ZHulI1DIf+BwAAgAJl+v/SqP9n7HRByyVOuOCXD9KVqlE49D8AAAAUKNP/l0X9/+P8ka/92a/PJd3Tlervz+t/AAAAKFCm/y+P+v+nrW96cuq+Ox/+VrpSNQ6H/gcAAIACZfq/d9T/P/fptt/yG3+7yYfpSrVIOPQ/AAAAFCjT/1dE/T9zwNE9dpjR6r2e6Uq1aDj0PwAAABQo0/99ov7/pdWdgx79ZcQts9KVarFw6H8AAAAoUKb/r4z6/9dDG5x71oY9LtwvXakWD4f+BwAAgAJl+v+qqP9/++aVf/bpNKnVjulKtUQ49D8AAAAUKNP/faP+n/XLvGfeHdB03OR0pVoyHPofAAAACpTp/6uj/p+92xYHNev94shX0pVqqXDofwAAAChQpv+vifr/9+m/PzbyoAaHHJ2uVEuHQ/8DAABAgTL9/4+o/+fss83eu20+fMkz05VqmXDofwAAAChQpv/7Rf3/x04Lnr7q1FNnvJ2uVH93v/4HAACAAmX6/9qo/+fOHz1gxu8zhx6arlRNwqH/AQAAoECZ/r8u6v95t7SZekCLtjvPT1eq5cKh/wEAAKBAmf6/Pur/P9ee3eieDkOW+TZdqZYPh/4HAACAAmX6v3/U/39tPH7tn2/q+svu6Uq1Qjj0PwAAABQo0/8Dov6ff+WiL1UXD73kp3SlWjEc+h8AAAAKlOn/G/5H/1cNppyw+El3HXv4vulKtVI4/oP+X/D/0hMDAAAA/65M/98Y9f8C3R7+8aYx4zbZKV2pmobD+38AAAAoUKb/B0b9X+1+45tvrN74vW/SlWrlcOh/AAAAKFCm/wdF/V/7qfN621Y33HJSulKtEg79DwAAAAXK9P9NUf8vePnPY/74bP8LX01XqlXDof8BAACgQJn+Hxz1/0LbbNa88fNzW32WrlSrhUP/AwAAQIEy/f/PqP8brrt4g0OP3GLcBelKtXo49D8AAAAUKNP/N0f93+i6178cPqDj+OvSlervz+h/AAAAKFCm/2+J+n/hjRs33qTTNettnK5UzcOh/wEAAKBAmf4fEvV/4yvfmj52wzXOXStdqdYIh/4HAACAAmX6/9ao/xe55bfXBvzy1eA+6Ur1ahjQ/wAAAFCgTP/fFvX/omu3bXn4jIsmLJquVC3Cof8BAACgQJn+vz3q/8VOOurkNTYe1ea+dKX6+2cC9D8AAAAUKNP/d0T9v/jb9/R7e9+lj3k+XanWDof+BwAAgAJl+v/OqP+XePm2h3v3m3D5KulKtU449D8AAAAUKNP/d0X9v+TFB3U8+4TWs+5NV6qW4dD/AAAAUKBM/98d9f9Sz53f5pQnpq2wYLpStQrHf9D/jf8vPTEAAADw78r0/z1R/y/d6Ll3h7zXYcc6jV+tGw7v/wEAAKBACyy/wP/nT/6n/r836v9llu0z89XGve98NF2pWodD/wMAAECBMu//h0b9v+x92y+1RZMVp2+drlTrhUP/AwAAQIEy/T8s6v8mn341f/64jxa5LV2p1g+H/gcAAIACZfr/vqj/lzturVUXG3ZOtyvTlWqDcOh/AAAAKFCm/++P+n/5M1ff6sCznhy1brpSbRgO/Q8AAAAFyvT/A1H/r/DqR589cGT38YunK9VG4dD/AAAAUKBM/z8Y9f+KJ63crs3zD673cLpStQmH/gcAAIACZfr/oaj/V3r70w9Gf1ad+1S6Um0cDv0PAAAABcr0//Co/5u+/M2sgdWYwU3TlaptOPQ/AAAAFCjT/w9H/b/yxc2bHLN6twkD05Vqk3DofwAAAChQpv8fifp/lVXeOfLTMbe12SRdqdqFQ/8DAABAgTL9/2jU/6ve26TXBne1OWbNdKXaNBz6HwAAAAqU6f/Hov5f7bEN7uh58U+XX5KuVJuFQ/8DAABAgTL9/3jU/6sv/O2OV9206Kwt05WqfTj0PwAAABQo0/8jov5vtuiiS93Y4bUVBqcr1ebh0P8AAABQoEz/PxH1f/NHx888tsXRO/ZLV6otwqH/AQAAoECZ/n8y6v817pn97sa/33PneulK9ffPBOh/AAAAKFCm//8V9f+aq7dp8+LU9tNvT1eqrcKh/wEAAKBAmf5/Kur/FicN+GzBzecsUqUr1dbh0P8AAABQoEz/Px31/1pv77/V7IO6dFsuXam2CYf+BwAAgAJl+n9k1P9rv3zqqnf1HjjqX+lKtW049D8AAAAUKNP/z0T9v87F983f+/n919wqXam2C4f+BwAAgAJl+v/ZqP9bfnpSk9eOvGH0relKtX049D8AAAAUKNP/z0X93+q4h2ZtXm0x8Kp0pdohHPofAAAACpTp/+ej/l/3zEEfdP9s7jmt05Vqx3DofwAAAChQpv9HRf3f+tV92t065ththqYrVYdw6H8AAAAoUKb/X4j6f72PdmnScvWhny+UrlQ7hUP/AwAAQIEy/f9i1P/rH3XJrEkXN756mXSl2jkc+h8AAAAKlOn/0VH/b3DOMx9ce9e4Ex9JV6pdwqH/AQAAoECZ/h8T9f+G4y9sd0GHtisukq5Uu4ZD/wMAAECBMv3/UtT/Gy152G5H3zRzzrB0pdotHPofAAAACpTp/5ej/m/zxOAHBv3e9aFR6Uq1ezj0PwAAABQo0/+vRP2/8R139R3TYsieq6Yr1R7h0P8AAABQoEz/j436v+3Kxxy/0eYNFro+Xan2DIf+BwAAgAJl+n9c1P+bnDq2z29TX5zSNl2pOoZD/wMAAECBMv3/atT/7d5b4JiGvU99pEW6Uu0VDv0PAAAABcr0/2tR/2/64pYd9j1o+D5XpCtVp3D8L/q/4f/FJwYAAAD+XZn+fz3q/83O//PeOzr1WPOOdKXaOxze/wMAAECBMv3/RtT/7T/atuOWA0aMrqUr1T7h0P8AAABQoEz/j4/6f/Oj5jw87pemA5ukK9W+4dD/AAAAUKBM/78Z9f8W54zpd8uGk855Ml2pOodD/wMAAECBMv3/VtT/W45f6ORTN955my3SlWq/cOh/AAAAKFCm/ydE/b/V8FlNP5jR5/Ob0pVq/3DofwAAAChQpv/fjvp/6yYb/d6iX6urr01XqgPCof8BAACgQJn+fyfq/20aLPLRaft+e+L66UrVJRz6HwAAAAqU6f93o/7fduQbW172xLIrDkpXqgPDof8BAACgQJn+nxj1/3aTP9no/RPemdMuXakOCof+BwAAgAJl+v+9qP+3P6TpO2s1vuChNdKV6uBw6H8AAAAoUKb/34/6f4dOzX45/b3n9uyVrlSHhEP/AwAAQIEy/f9B1P87/vb10peOa7bQYulK1TUc+h8AAAAKlOn/D6P+73BJh792aTJ5yvB0pTo0HPofAAAACpTp/4+i/t9py0tXGXFWp0eeTleqbuHQ/wAAAFCgTP9/HPX/zhs+tfUXw/rts3K6Uh0WDv0PAAAABcr0/6So/3e58aLPlz1ozn6z05Xq8HDofwAAAChQpv8/ifp/182e3eSq3u2f2D9dqY4Ih/4HAACAAmX6/9Oo/3f7R8/3e04dOHmHdKU6Mhz6HwAAAAqU6f/Pov7fffB2szfYvEuDL9KV6qhw/Pf+r/2XPjEAAADw78r0/+dR/++x5hXLfdritd1OTleqo8Ph/T8AAAAUKNP/X0T9v+cp7+9z2++LDnszXamOCYf+BwAAgAJl+n9y1P8dJy71+Mk33TPvo3SlOjYc+h8AAAAKlOn/L6P+3+uFdfu373D0quenK9Vx4dD/AAAAUKBM/38V9X+nnt+f9vpdt536YrpSHR8O/Q8AAAAFyvT/lKj/937qzcXevbhbv6PSleqEcOh/AAAAKFCm/6dG/b9PtfCMZqv/9PFZ6Up1Yjj0PwAAABQo0/9fR/2/7/Ibv3XWmDZbvp+uVCeFQ/8DAABAgTL9/03U/50f/HX9Pp89eMbB6Up1cjj0PwAAABQo0//fRv2/34cHjN6h6j7g93Sl6h4O/Q8AAAAFyvT/d1H/73/kdc0ePXLM2B/TleqUcOh/AAAAKFCm/6dF/X/A2fcvMPX5au2O6Up1ajj0PwAAABQo0//To/7v8sbJXy0/7KP9TkxXqtPCof8BAACgQJn+/z7q/wNPGb7wNWet+MS4dKU6PRz6HwAAAAqU6f8fov4/aOLx0y5u8uTkz9OV6oxw6H8AAAAoUKb/Z0T9f/AL+77eetw5DS5MV6ozw6H/AQAAoECZ/v8x6v9Det7Q6sP3pu32c7pSnRUO/Q8AAAAFyvT/T1H/d13puMMOb9x6WOd0peoRDv0PAAAABcr0/89R/x961x3PDTih97wO6Up1djj0PwAAABQo0/8zo/7v9q+bbxn7RIdVv05XqnPCof8BAACgQJn+/yXq/8MWP/SiTfYddWrXdKU6Nxz6HwAAAAqU6f9fo/4/fInn12/Z76J+f6Ur1Xnh+G/9v8B/7RMDAAAA/65M//8W9f8RI859a9KMCR9/l65UPcPh/T8AAAAUKNP/s6L+P/L2HWZcu/HSW+7xPy9U/+1/54f/0P8AAABQoEz/z476/6imly92wYbXnDE2XakuCIf+BwAAgAJl+v/3qP+PPmXtr57+peOAY9KV6sJw6H8AAAAoUKb/50T9f8zELxbYfcBXY89IV6qLwqH/AQAAoECZ/v8j6v9jX/i42Wqd1lh7QrpSXRwO/Q8AAAAFyvT/3Kj/j+u5yugfphz919HpStUrHPofAAAACpTp/3lR/x//4Wetzml/z+qvpCvVJeHQ/wAAAFCgTP//GfX/CUeu+PrlBy66x9vpSnVpOPQ/AAAAFCjT/39F/X/i2WtMm3D5a/efma5Ul4VD/wMAAECBMv0/P+r/k96YsvCag7t8NT9dqS4Ph/4HAACAAv3H/b9Ag6j/T75qvf1u2WlgdWi6UvUOh/4HAACAAmX6f4Go/7u3nfbkqWu1P2D3dKW6Ihz6HwAAAAqU6f8q6v9T1pkwaMs5c/71bbpS9QmH/gcAAIACZfq/FvX/qUOW7zFuterlfdOV6spw6H8AAAAoUKb/F4z6/7TDNmk8YfSYFj+lK9VV4dD/AAAAUKBM/y8U9f/pU2dOX/PO7qd9k65UfcOh/wEAAKBAmf5vGPX/GT+Pe+2cix68fqd0pbo6HPofAAAACpTp/0ZR/5+5xxItLz+qzYevpivVNeHQ/wAAAFCgTP8vHPX/Wds+OHb7UT9tflK6Uv0jHPofAAAACpTp/8ZR//fofeJaj33erfsF6UrVLxz6HwAAAAqU6f9Fov4/+/q9F/y6dts1n6Ur1bXh0P8AAABQoEz/Lxr1/zmtB3693HId/pqTrlTXhUP/AwAAQIEy/b9Y1P/nXrXf4te+2nv1Q9KV6vpw6H8AAAAoUKb/F4/6/7y2/X+84L7We+yZrlT9w6H/AQAAoECZ/l8i6v+e6wx7s2WPaffPSFeqAeHQ/wAAAFCgTP8vGfX/+UNOWW/S8ed8dWS6Ut0QDv0PAAAABcr0/1JR/1/w15CDjxrxZPVCulLdGA79DwAAAAXK9P/SUf9f2OGQp66buOIBH6Qr1cBw6H8AAAAoUKb/l4n6/6K9jxj80sIf/atHulINCof+BwAAgAJl+n/ZqP8vnjb0/M1+XOPlt9KV6qZw6H8AAAAoUKb/m0T936vBPi/81ParFt3TlWpwOPQ/AAAAFCjT/8tF/X/JyEFr1Dp3PK1nulL9Mxz6HwAAAAqU6f/lo/6/dPhDtS7XXnP9h+lKdXM49D8AAAAUKNP/K0T9f1mTkybf3X/pD/dLV6pbwqH/AQAAoECZ/l8x6v/LD391iSP2mrD5rDozQ8L/638AAAAoUKb/V4r6v/fHS37ff4OLuk9OV6pbw6H/AQAAoECZ/m8a9f8Vb7Yb/8rMUdfsmK5Ut4VD/wMAAECBMv2/ctT/fc76ZcN2tXFXPZyuVLeHQ/8DAABAgTL9v0rU/1e+3+alhz9vfPzi6Up1Rzj0PwAAABQo0/+rRv1/1cmz1+46auhWTdOV6s5w6H8AAAAoUKb/V4v6v++54xstfNSxnz6VrlR3hUP/AwAAQIEy/b961P9Xj1506tyL5t6wSbpS3R0O/Q8AAAAFyvR/s6j/r7n2kDuevnOLHgPTleqecOh/AAAAKFCm/5tH/f+PdkN23H30Dc0vSVeqe8Oh/wEAAKBAmf5fI+r/fs2HHrnaavu/sGa6Ug0Nh/4HAACAAmX6f82o/6+9+YheP8wZ/tjgdKUaFg79DwAAAAXK9H+LqP+vO2jHeb+tdWrnLdOV6r5w6H8AAAAoUKb/14r6//qveq/WcKcXG62XrlT3h0P/AwAAQIEy/b921P/9Z4/adt/BDb7ul65UD4RD/wMAAECBMv2/TtT/Azqe9+kdlw95uEpXqgfD8Xf/N/ovfGQAAADg35Tp/5ZR/9+w+aSNjz6w6163pyvVQ+Hw/h8AAAAKlOn/VlH/33jZqhMGtZ/Z9F/pSjU8HPofAAAACpTp/3Wj/h84aJ2fx0xpO3e5dKV6OBz6HwAAAAqU6f/WUf8PWn/yshvN/PaqjdOV6pFw6H8AAAAoUKb/14v6/6Zr1/z9/g1aHX9dulI9Gg79DwAAAAXK9P/6Uf8Pbje16UF79dmqT7pSPRYO/Q8AAAAFyvT/BlH//7P551su3n/nT9dKV6rHw6H/AQAAoECZ/t8w6v+bb17po7+unXTDfelKNSIc+h8AAAAKlOn/jaL+v+X3aQ/v3Llpj0XTleqJcOh/AAAAKFCm/9tE/T9kh/U6PtF2RPNV0pXqyXDofwAAAChQpv83jvr/1gOWP3nyjz1eeD5dqf4VDv0PAAAABcr0f9uo/2/7fkK/ZRbu99iC6Ur1VDj0PwAAABQo0/+bRP1/+49tP11iYqfO96Yr1dPh0P8AAABQoEz/t4v6/479f9v2zxGTGz2arlQjw6H/AQAAoECZ/t806v87t39rtfuOb/Z1ncavngmH/gcAAIACZfp/s6j/75rbeN7BPZ57+LZ0pXo2HPofAAAACpTp//ZR/9997QPL3nbfBXttna5Uz4VD/wMAAECBMv2/edT/97Tr/vPJr77TdN10pfr7dwLqfwAAAChQpv+3iPr/3uZdJrRfbtm5V6Yr1ahw6H8AAAAoUKb/t4z6f+jN12/8+gYTjqulK9UL4dD/AAAAUKBM/28V9f+wzTt/tM/Mpa+4I12pXgyH/gcAAIACZfp/66j/77vsxi3v7D/qnSfTlWp0OPQ/AAAAFCjT/9tE/X//oIebztrrorZN0pVqTDj0PwAAABQo0//bRv3/wPon/L5Q56963pSuVC+FQ/8DAABAgTL9v13U/w9uffFHj1+7xs1bpCvVy+HQ/wAAAFCgTP9vH/X/Q32e3nK7H695a/10pXolHPofAAAACpTp/x2i/h8+4LKmTdp23ODadKUaGw79DwAAAAXK9P+OUf8/3Gqn37+Z+GTXdulKNS4c+h8AAAAKlOn/DlH/PzL9uMvnL3zOc4PSlerVcOh/AAAAKFCm/3eK+v/Rfe44drHjP/quV7pSvRYO/Q8AAAAFyvT/zlH/P7bTzbscOGLFhddIV6rXw6H/AQAAoECZ/t8l6v/H5x96zwP39d5+eLpSvREO/Q8AAAAFyvT/rlH/j7h6/u6n9Ohw+2LpSjU+HPofAAAACpTp/92i/n+izebDhiw37deV05XqzXDofwAAAChQpv93j/r/ybVqV736auvlnk5XqrfCof8BAACgQJn+3yPq/3/d9vJJW3z+03G3pivVhHDofwAAAChQpv/3jPr/qa0b9bq91uaKrdKV6u1w6H8AAAAoUKb/O0b9/3SfF4/sfNRt77ROV6p3wqH/AQAAoECZ/t8r6v+RA+bu2GhUt7ZXpSvVu+HQ/wAAAFCgTP93ivr/mVZb3/HrnWN6LpSuVBPDof8BAACgQJn+3zvq/2d3f/ODPS+qbh6arlTvhUP/AwAAQIEy/b9P1P/P/bRwu1GrPfjWI+lK9X449D8AAAAUKNP/+0b9//yUjZtMH919g2XSleqDcOh/AAAAKFCm/ztH/T+q26+zVlxrYNdh6Ur1YTj0PwAAABQo0//7Rf3/wkJT/uw4p8tzi6Qr1Ufh0P8AAABQoEz/7x/1/4uj1lj9+cFzvls1Xak+Dof+BwAAgAJl+v+AqP9HP7DiNtN2ar/wqHSlmhQO/Q8AAAAFyvR/l6j/xyz92ScrHXjP9m3TleqTcOh/AAAAKFCm/w+M+v+lYy5o+8nlR99+fbpSfRoO/Q8AAAAFyvT/QVH/v/z5yLc3nPLar1ekK9Vn4dD/AAAAUKBM/x8c9f8rr/f66fz2iy7XIl2pPg+H/gcAAIACZfr/kKj/x56+8zJXvnrBUuPSleqLcOh/AAAAKFCm/7tG/T/u3cvnLLPccz+fmK5Uk8Oh/wEAAKBAmf4/NOr/V0/YYeXJPZa958J0pfoyHPofAAAACpTp/25R/7924blbPHHfOx0+T1eqr8Kh/wEAAKBAmf4/LOr/18c+/+HOIzot3jldqaaEQ/8DAABAgTL9f3jU/2/0nXHLgsf3+/7ndKWaGg79DwAAAAXK9P8RUf+P36jlRbMXbvbU1+lK9fef6X8AAAAoUKb/j4z6/80Wyxx218TJB3VIV6pvwpHt/w8Ov631Irvc3PI//+QAAADA/65M/x8V9f9bt058bu+2TVv/la5U34bD+38AAAAoUKb/j476f0LXWS/u+uOk17qmK9V34dD/AAAAUKBM/x8T9f/bX2+05jPX9rh1j3SlmhYO/Q8AAAAFyvT/sVH/vzNzkerHziMu/i5dqaaHQ/8DAABAgTL9f1zU/+/u+sYXq+zVatNj0pXq+3DofwAAAChQpv+Pj/p/4lanLPlR/28/GJuuVD+EQ/8DAABAgTL9f0LU/+9dMeyHdWfufNmEdKWaEQ79DwAAAAXK9P+JUf+/37//Gxdt0OfIM9KV6sdw6H8AAAAoUKb/T4r6/4OW+23wj/Zdl9o/Xal+Cseyjf+LnxcAAAD492X6/+So/z/sO/DlFaYM+Xl2ulL9HA7v/wEAAKBAmf7vHvX/Rxvtvc6Uy9ve80W6Us0Mh/4HAACAAmX6/5So/z9ucWLDRw6c2WGHdKX6JRz6HwAAAAqU6f9To/6fdOuDU3bc6dTF30xXql8bVP/90P8AAABQoEz/nxb1/yd/HtZ/7uDh35+crlS/hUP/AwAAQIEy/X961P+f7jL4tIXnNHjq/HSlmhUO/Q8AAAAFyvT/GVH/f9b5rn26rvXiQR+lK9XfvxNA/wMAAECBMv1/ZtT/n393zOMPj96i9VHpSvV7OPQ/AAAAFCjT/2dF/f/FtCu+eHy1ua+9mK5Uc8Kh/wEAAKBAmf7vEfX/5L23q7a7aP9b309Xqj/Cof8BAACgQJn+Pzvq/y879FyzyZ03XHxWulLNDYf+BwAAgAJl+v+cqP+/+uvZF78Z1XjT39OVal449D8AAAAUKNP/50b9P6XvahuscdS4Dw5OV6o/w6H/AQAAoECZ/j8v6v+pG334xtu1Yy/rmK5Uf4VD/wMAAECBMv3fM+r/r1t8+UPvz4ce+WO6Us0Ph/4HAACAAmX6//yo/7+5tcWSZ2/W8fnp6Urt70P/AwAAQIEy/X9B1P/fbvX1lO+nX3PYbulKLXyN/gcAAIASZfr/wqj/v7uiWcPVr15j0W7pSq0Kh/4HAACAAmX6/6Ko/6f1b7rOHl2+mjYvXan9/QMA+h8AAAAKlOn/i6P+n97yk5ef2v2iu05LV2oLhkP/AwAAQIEy/d8r6v/vL915w68HjtrhnXSltlA49D8AAAAUKNP/l0T9/0P7XuOXm7X08i+nK7WG4cj3/z3/6UcGAAAA/k2Z/r806v8Z6438fvt1J8w+Ll2pNQqH9/8AAABQoEz/Xxb1/48DL1jisfGte3+artT+/rz+BwAAgAJl+v/yqP9/2q/bGfcvPe3oi9OVWuNw6H8AAAAoUKb/e0f9//OMm6476PQOGx2frtQWCYf+BwAAgAJl+v+KqP9n/nHno4s/1Pvt19KV2qLh0P8AAABQoEz/94n6/5ftju781yMr3rRzulJbLBz6HwAAAAqU6f8ro/7/dZNXnt3y5I/Om5Ku1BYPh/4HAACAAmX6/6qo/3/r16DbuMXOWf+XdKW2RDj0PwAAABQo0/99o/6f9c8tLr5lwpNv7JOu1JYMx/9W//f6zz0yAAAA8G/K9P/VUf/PbjZvyKmvdH/+7HSltlQ4vP8HAACAAmX6/5qo/3+/dJuzf2v64GET05Xa0uHQ/wAAAFCgTP//I+r/Oe1/v6Fhz2rRMelKbZlw6H8AAAAoUKb/+0X9/8d6o5/Y994x045IV2p/d7/+BwAAgAJl+v/aqP/nDlywyx3PdLvrh3Sl1iQc+h8AAAAKlOn/66L+n/fb7OYrHXfbDp3Sldpy4dD/AAAAUKBM/18f9f+fndqMmdaozfIHpiu15cOh/wEAAKBAmf7vH/X/X4cs+uXzk36a/Ue6UlshHPofAAAACpTp/wFR/8+fPL5Bx60W7b1dulJbMRz6HwAAAAqU6f8b/kf/1xq8cNzxG37x2tFfpiu1lcKh/wEAAKBAmf6/Mer/BXre0feTXkdv9Fu6UmsaDv0PAAAABcr0/8Co/6tTbn7gyq73vN0lXamtHA79DwAAAAXK9P+gqP9rEw/d7fzt2980KV2prRIO/Q8AAAAFyvT/TVH/L3j7/HufHzLnvPPSldqq4dD/AAAAUKBM/w+O+n+hppt36Phnl/VPSVdqq4VD/wMAAECBMv3/z6j/Gy5RO2al5gPfeCNdqa0eDv0PAAAABcr0/81R/zca8XKfaRMmv9osXfl/P6P/AQAAoECZ/r8l6v+Fl2908mmLNWt5abpSax4O/Q8AAAAFyvT/kKj/Gz/4Yr/LTu53wY3pSm2NcOh/AAAAKFCm/2+N+n+Rp+Y+/MEjnYZslq7U1gyH/gcAAIACZfr/tqj/F6227tjioXcmPpOu1FqEQ/8DAABAgTL9f3vU/4t16t742NOXbbdSulJbKxz6HwAAAAqU6f87ov5f/LcHpt+49HNHLJGu1NYOh/4HAACAAmX6/86o/5eYfP1rL46/oNeD6UptnXDofwAAAChQpv/vivp/yUO6tNx43T4zl09Xai3Dof8BAACgQJn+vzvq/6UG99hv3Vk7LzsiXam1Cof+BwAAgAJl+v+eqP+XXvPxJz8a+O0ud6UrtXXDof8BAACgQJn+vzfq/2U2u2rQP3Zvde8C6UqtdTj0PwAAABQo0/9Do/5f9h+delzUZcSP/0hXauuF43+z/xf+zzwyAAAA8G/K9P+wqP+bzPnhn89c3WOJDdOV2vrh8P4fAAAACpTp//ui/l9ux9bn7jp90sHt05XaBuHQ/wAAAFCgTP/fH/X/8l2WPmiVzZo+8890pfb39wTofwAAAChQpv8fiPp/hR8+eObH5i+++ly6UtsoHPofAAAACpTp/wej/l+x03J79/izQcvV05Vam3DofwAAAChQpv8fivp/pd/efeyKIcMvqPOP99c2Dof+BwAAgAJl+n941P9NJ3834J3tTx1yf7pSaxsO/Q8AAAAFyvT/w1H/r3zIhqc37zpz4trpSm2TcOh/AAAAKFCm/x+J+n+V9p80GtyrbbvL05Vau3DofwAAAChQpv8fjfp/1UubTj3xiyFHDEhXapuGQ/8DAABAgTL9/1jU/6sNbPbSNlt17dUmXaltFg79DwAAAAXK9P/jUf+vvt7Xa4+fNHTm1elKrX049D8AAAAUKNP/I6L+b7bhQj3ebnTssq3Sldrm4dD/AAAAUKBM/z8R9X/zG8cMWuO4cbtsk67UtgiH/gcAAIACZfr/yaj/17hkzpNnP9P43lvSldqW4dD/AAAAUKBM//8r6v81t9x2v9733vDjUulKbatw6H8AAAAoUKb/n4r6v0WnIc9s13P/JR5LV2pbh0P/AwAAQIEy/f901P9r/XbIQY83nXvwPf/TwH//ZO3vfxNA/wMAAECBMv0/Mur/tScfce43r2zxTKN0pbZtOPQ/AAAAFCjT/89E/b/OIUP/2eTPOetck67UtguH/gcAAIACZfr/2aj/W8455vR+zdu/skG6Uts+HPofAAAACvS/6P/wPf4LPBf1f6sd7xpw4fYD+2+ertR2CIf+BwAAgAJl3v8/H/X/ul0GP9ZqSJczb05XajuGQ/8DAABAgTL9Pyrq/9Y/HDZn/vz5W6yQrtQ6hEP/AwAAQIEy/f9C1P/r/bnb6Sd3XXTSE+lKbadw6H8AAAAoUKb/X4z6f/1drh1w21b3XHtnulLbORz6HwAAAAqU6f/RUf9v0PmJx17/4uhT6qzUdgmH/gcAAIACZfp/TNT/G3535t7tG922ysh0pbZrOLL9v+B//pEBAACAf1Om/1+K+n+j1vus12xStz9XTFdqu4XD+38AAAAoUKb/X476v831g95895mf7lsyXantHg79DwAAAAXK9P8rUf9v3PuhH/sc12bXh9KV2h7h0P8AAABQoP9l/y8wfEDPBguMjfq/7bYnLX5WzwcXaJ6u1PYMh/4HAACAAmXe/4+L+n+TPV798tF7u39xWbpS6xgO/Q8AAAAFyvT/q1H/t/t5yQY7vDJmxA3pSm2vcOh/AAAAKFCm/1+L+n/Tqe2aL9+02n/TdKXWKRz6HwAAAAqU6f/Xo/7f7LBfxkxd7KN1lk5XanuHQ/8DAABAgTL9/0bU/+3/bNPy4gkrvvJ4ulLbJxz6HwAAAAqU6f/xUf9vvsvs16555Mn+d6crtX3Dof8BAACgQJn+fzPq/y06j5/+4cnnnNkwXal1Dof+BwAAgAJl+v+tqP+3/G7Rxq1Pn7ZF33Sltl849D8AAAAUKNP/E6L+36rv7xcPeKj1pJbpSm3/cOh/AAAAKFCm/9+O+n/rjbYZcvj43tdum67UDgiH/gcAAIACJf1faxD3/ztR/2/TYsFnN1m6wylD0pVal3DofwAAAChQ5v3/u1H/b3vr6G5jZ41aZZ10pXZgOPQ/AAAAFCjT/xOj/t/u5Xf277/uRX/2TldqB4VD/wMAAECBMv3/XtT/21/c5F9H7D7hvv7pSu3gcOh/AAAAKFCm/9+P+n+HkzYY2G7g0rtulK7UDgmH/gcAAIACZfr/g6j/d3z727NeufqaBZ5NV2pdw6H/AQAAoECZ/v8w6v8O9+x+c61Lxy9WS1dqh4ZD/wMAAECBMv3/UdT/O61+zXk/bfbViMbpSq1bOPQ/AAAAFCjT/x9H/b/zok8eePf0NfZ/IF2pHRYO/Q8AAAAFyvT/pKj/d3n0tJFdmu6/9y7pSu3wcOh/AAAAKFCm/z+J+n/XZR/bZ/wrNzw6NV2pHREO/Q8AAAAFyvT/p1H/73bfWY9vc+8WU2emK7Ujw6H/AQAAoECZ/v8s6v/dn9ur/4k95y64d7pSOyoc+h8AAAAKlOn/z6P+36PRlacNPu7Yjp+kK7Wjw6H/AQAAoECZ/v8i6v89d/9wk0nPDH3wonSldkw49D8AAAAUKNP/k6P+7/jTau+3nNT49xPSldqx4dD/AAAAUKBM/38Z9f9eU1rMvqDRuJVeT1dqx4VD/wMAAECBMv3/VdT/nbp9udy1X7Q96fR0pXZ8OPQ/AAAAFCjT/1Oi/t/7lhdOGLTVzL7vpiu1v38mQP8DAABAgTL9PzXq/33Wbnj10V27fvZSulI7MRz6HwAAAAqU6f+vo/7fd+Ot7t+o15Btj01XaieFQ/8DAABAgTL9/03U/52v/GPXMUManD0tXamdHA79DwAAAAXK9P+3Uf/vN+/AoQ23f3HQrulKrXs49D8AAAAUKNP/30X9v//Ot+70W/NTxxyWrtROCYf+BwAAgAJl+n9a1P8H7Hv30Xf8OXyNP9OV2qnh0P8AAABQoEz/T4/6v8u3R16x7/Qee3+crtROC4f+BwAAgAJl+v/7qP8P3P327uM2G/HouelK7fRw6H8AAAAoUKb/f4j6/6Cfjr12yy5Np56artTOCIf+BwAAgAJl+n9G1P8HT+k6/NSrJy04Pl2pnRkO/Q8AAAAFyvT/j1H/H9Ltn3veMnDnjtunK7WzwqH/AQAAoECZ/v8p6v+uW5+wRYvd+zz4VbpS6xEO/Q8AAAAFyvT/z1H/H9rn4Q8/WLfV77+mK7Wzw6H/AQAAoECZ/p8Z9X+3ATfOuWzWtysdkK7UzgmH/gcAAIACZfr/l6j/D2vVeeXTll72pO/TldrfvxNQ/wMAAECBMv3/a9T/h6/7yK4nj3+n717pSu28cOh/AAAAKFCm/3+L+v+I686+/7aHLvjsoHSl1jMc+h8AAAAKlOn/WVH/H3n5nle/fvpz285NV2rnh0P/AwAAQIEy/T876v+jtul7QvuTm519TrpSuyAc+h8AAAAKlOn/36P+P3r3llf8+cjkQe+lK7ULw6H/AQAAoECZ/p8T9f8xP804eokJncaMTldqF4VD/wMAAECBMv3/R9T/x06ZuNPBi/Vb4/B0pXbx/w+PCgAAAPwfyvT/3Kj/j+u2zND7ho77Y2K6UusVDu//AQAAoECZ/p8X9f/x8ybs2fb8xiufna7ULgmH/gcAAIACZfr/z6j/T9h5+eEvrDy00xHpSu3ScOh/AAAAKFCm//+K+v/Efde79oaxxw4fk67ULguH/gcAAIACZfp/ftT/J307rftxH8/9plO6Urs8HPofAAAACvQf93/VIOr/k4fNOviQhls0/CFdqfUOh/4HAACAAmX6f4Go/7svs9FTw469Yd8/0pXaFeHQ/wAAAFCgTP9XUf+f0nCRwfNG7v/4gelKrU849D8AAAAUKNP/taj/T332jfOXPHT4i1+mK7Urw6H/AQAAoECZ/l8w6v/TLprRaIVLTm22XbpSuyoc+h8AAAAKlOn/haL+P/2lllOnTH7xrC7pSq1vOPQ/AAAAFCjT/w2j/j9jwjIvPbJ1gxt/S1dqV4dD/wMAAECBMv3fKOr/M0+cuPaOzYZ8cl66UrsmHPofAAAACpTp/4Wj/j9rtbNfvWJe160npSu1f4RD/wMAAECBMv3fOOr/Hnc/0rrHLTNPeCNdqfULh/4HAACAAmX6f5Go/89+pO8izbdre+Up6Urt2nDofwAAAChQpv8Xjfr/nEX2/PadA779Y7d0pXZdOPQ/AAAAFCjT/4tF/X/usH61Xfu2Wnl6ulK7Phz6HwAAAAqU6f/Fo/4/b5ldJz8zrU+neelKrX849D8AAAAUKNP/S0T937PhGS/8uOnOw7ulK7UB4dD/AAAAUKBM/y8Z9f/5z45YY5XWk755J12p3RAO/Q8AAAAFyvT/UlH/X/D5LvvdPbtpw9PSldqN4dD/AAAAUKBM/y8d9f+Fx1zyZJdBI/Y9Ll2pDQyH/gcAAIACZfp/maj/Lzr9mUG1PXo8/nK6UhsUDv0PAMD/w96fhn097n3/P30/3xKFKENIpozJnCEkssxkLPMqUzJFSIiMyZwxZUgkMmQmkjlDxshchjKEEDKm/3b+t73fuV/nvs61X67rvLZtv/F43FnvddTx2j53n30O3wOAAmX6f/Go/894+fQTv7/zkqfOSFdq14ZD/wMAAECBMv3fPOr/M1e48NX2x+3a+qN0pTYkHPofAAAACpTp/xZR/w8YuvNazy76SZ+X0pXadeHQ/wAAAFCgTP8vEfX/WZee3PSyia2vOiJdqQ0Nh/4HAACAAmX6f8mo/8/e8N7verwx7sNp6UptWDj0PwAAABQo0/9LRf1/zlaLzzey6Wmbb5uu1K4Ph/4HAACAAmX6f+mo/8/94+1P9zr6zZ5d0pXaDeHQ/wAAAFCgTP+3jPr/vO++e2b+excf+GO6UrsxHPofAAAACpTp/2X+//3f7T/+uHb+XquvMKvjIRcvn67UbgqH/gcAAIACZfp/2ej9/8Bfvn7piGG3HjUuXakND4f+BwAAgAJl+n+5qP8v2LntakP/XGjjO9KV2s3h0P8AAABQoEz/t4r6f1C3JRu/1vql9xZIV2ojwvGv+7/+P/rIAAAAwN+U6f/lo/6/8LM3vu6w+T6XnZOu1G4Jh/f/AAAAUKBM/7eO+v+iuwfc0/+Tq3u3SVdqt4ZD/wMAAECBMv2/QtT/Fzf/x84XD9h4lXXTldrIcOh/AAAAKFCm/1eM+v+S+U4/6r0Dfnv2inSldls49D8AAAAUKNP/K0X9f+nYxy5ZY2yDh1ZPV2qjwqH/AQAAoED/rv//44tR/1/Wd8is9Q57Zp8L05Xa7eHQ/wAAAFCgzPv/VaL+v/zpgxZ9quHRtWHpSu2OcOh/AAAAKFCm/9tE/T948qHrXvX+nZ9uka7URodD/wMAAECBMv2/atT/Vxw1YtJhE9YdfV+6UrszHPofAAAACpTp/9Wi/r9yqfk7jFjm+x0WTVdqd4VD/wMAAECBMv2/etT/V908Ycpupx7YqlG6Urs7HH+z/+f/P3lkAAAA4G/K9P8aUf9f/dCcudVtN869NV2p3RMO7/8BAACgQJn+XzPq/2uabLbcL/duc/FZ6UptTDj0PwAAABQo0/9rRf1/7d2/zT766HOPap2u1O4Nh/4HAACAAmX6v23U/0Oab9n8hqZrbtw+XanN+50A+h8AAAAKlOn/taP+v26++oYvvTHjvavSldr94dD/AAAAUKBM/7eL+n/o2Gfe2WTiyZctna7UHgiH/gcAAIACZfp/naj/h723zvABiz7U+7F0pfZgOPQ/AAAAFCjT/+tG/X99j9lbH3/cUqvcma7UHgqH/gcAAIACZfp/vaj/bzh5Yvc2d7737MLpSu3hcOh/AAAAKFCm/9eP+v/GVxY88+0dV3zogXSl9kg49D8AAAAUKNP/G0T9f9OrX0168ZrP9lkiXak9Gg79DwAAAAXK9P+GUf8P79Nu3U1/2bk2f7pSGxsO/Q8AAAAFyvT/RlH/33xwi0WPWfOiT0ekK7V5vxNA/wMAAECBMv3fPur/Ee9PmnX9Rs1Gt0tXao+HQ/8DAABAgTL9v3HU/7fc3Xu5rjNe3+HidKU2Lhz6HwAAAAqU6f9Nov6/tfnDc0cP6t/qunSl9kQ49D8AAAAUKNP/m0b9P3K+i6fM3Xv83I3Tldr4cOh/AAAAKFCm/zeL+v+2sTt2aHL0aT3uT1dqT4ZD/wMAAECBMv3fIer/UUtd8M7V9447q1m6UnsqHPofAAAACpTp/82j/r/95l03PPSNxSc3TFdqT4dD/wMAAECBMv2/RdT/dzx0YvN1m77Z/pZ0pfZMOPQ/AAAAFCjT/1tG/T+6yf2zn1501/6rpSu1Z8Oh/wEAAKBAmf7vGPX/ncve+k6fiZfcOChdqT0XDv0PAAAABcr0/1ZR/981sseG59/Z+uXr05Xa8+HQ/wAAAFCgTP93ivr/7vu6NZ903CdrbJmu1CaEQ/8DAABAgTL9v3XU//cscOPs1te07HpuulJ7IRz6HwAAAAqU6f9tov4f89K4QRvv+MGjq6YrtRfDof8BAACgQJn+7xz1/73HnXrEy2ue+O066UrtpXDofwAAAChQpv+3jfr/vkO22v7GXx5oMjj683nf83I49D8AAAAUKNP//4j6//4p548+asbqnVulK7WJ4dD/AAAAUKBM/28X9f8Dd6yyze0bfXnL4+lK7ZVw6H8AAAAoUKb/t4/6/8FFPxu5797bfj86Xam9Gg79DwAAAAXK9P8OUf8/VL13/sKDzm/WOF2pvRYO/Q8AAAAFyvT/jlH/P/zE8ofOGbZ/j7XTldrr4dD/AAAAUKBM/+8U9f8jy350yeEdrz/ronSl9kY49D8AAAAUKNP/O0f9/+jIZY66svX6k4emK7U3w6H/AQAAoECZ/t8l6v+x962w85N/zmq/SbpSmxQO/Q8AAAAFyvT/rlH/P7bAF/es/8mx/R9MV2pvhUP/AwAAQIEy/b9b1P+P92r+3oWb333jkulK7e1w6H8AAAAoUKb/u0T9P+6NNzfre8B8L/+LldrkcOh/AAAAKFCm/3eP+v+J575sudaAp9a4OV2pvRMO/Q8AAAAFyvT/HlH/jz9j7V+nHrZp16XSldq74dD/AAAAUKBM/+8Z9f+TK2/x46Cxfzw6Nl2pvRcO/Q8AAAAFyvT/XlH/P3XDr81OeX+vb+9KV2rvh0P/AwAAQIEy/b931P9PD3p6nbYNr2yySLpS+yAc+h8AAAAKlOn/faL+f2ad6s0pyzTufHa6UvswHPofAAAACpTp/65R/z+7zcjNl5nwwi0rpCu1j8Kh/wEAAKBAmf7vFvX/c38dPPXL2w77fqN0pTYlHPofAAAACpTp/32j/n9+xr5/PX7qbc2uTFdqU8Oh/wEAAKBAmf7fL+r/CbsNW3bXQa8375uu1D4Oh/4HAACAAmX6f/+o/1+YdeAvb+/d7Of305XaJ+HQ/wAAAFCgTP8fEPX/i9td26LNRuOHv5Ku1D4Nh/4HAACAAmX6/8Co/1/a/+YNjp/Rv+Ox6Urts3DofwAAAChQpv8Pivr/5c8PmTzgl88af5au1KaFQ/8DAABAgTL9f3DU/xNHbzD4mTVX/HKrdKU2PRz6HwAAAAqU6f9/Rv3/SrNZx62z40WP752u1D4Ph/4HAACAAmX6v3vU/6/WX+hyyDU7H/BTulL7Ihz6HwAAAAqU6f8eUf+/Nn7h+6857qF2u6QrtS/Dof8BAACgQJn+PyTq/9dPX+u1S+88+dVv0pXaV+HQ/wAAAFCgTP8fGvX/GxNmtD1t4nvX/ZGu1GaEQ/8DAABAgTL9f1jU/29Oer3JaosudWq3dKX2dTj0PwAAABQo0/+HR/0/qecSMz9oeu56b6crtXn/TYD+BwAAgAJl+v+IqP/fWu6B+Vu9sc2kk9OV2rfh0P8AAABQoEz/94z6/+3bjv/s23tnnH9wulKbGQ79DwAAAAXK9P+RUf9Pvn+7px89es3Dnk5Xat+FQ/8DAABAgTL93yvq/3caX9J6h1O/bz49Xal9Hw79DwAAAAXK9P9RUf+/O3qnl1+/bd2f/5Gu1H4Ih/4HAACAAmX6/+io/99rNmj1lSbcOHy3dKU2Kxz6HwAAAAqU6f9jov5/vz5mgZOXObDjrHSl9mM49D8AAAAUKNP/x0b9/8H4k2ac0/CZxv3TldpP4dD/AAAAUKBM/x8X9f+HH547rMP7Db78MF2p/RwO/Q8AAAAFyvR/76j/Pzps6/6vjb3z8ZfTldrscOh/AAAAKFCm/4+P+n/K8accNPSwow/oma7UfgmH/gcAAIACZfr/hKj/p74wftwRA65uNyldqf0aDv0PAAAABcr0f5+o/z9+ef+ZfQ7Y59Xe6Urtt3DofwAAAChQpv9PjPr/k97XNTl/89+uOyxdqf0eDv0PAAAABcr0/0lR/3966E1tJ32y8anPpiu1P8Lxr/v/q0f/R58ZAAAA+Hsy/X9y1P+fTT3stdZ/3rredulK7c9weP8PAAAABcr0f9+o/6eNfrb19NaHTJqRrtTmhON/p/8b/l8+MgAAAPA3Zfr/lKj/pzdr8PQSHV86f066UvsrHN7/AwAAQIEy/d8v6v/P6xt/1mnYQocdlK7U5oZD/wMAAECBMv1/atT/X4z/a/57f53+zoLpSjXv0P8AAABQoEz/nxb1/5fLdZix5sorbzQqXanC39H/AAAAUKJM/58e9f9Xt/2+wLvbDOo+Pl2pGoRD/wMAAECBMv3fP+r/Gfc/ufpF1+549nLpSlULh/4HAACAAmX6/4yo/79u3PDlM86d/NLl6Uo17wMA9D8AAAAUKNP/Z0b9/82IYSus0G3JNddPV6p6OPQ/AAAAFCjT/wOi/v926X2feXOTR89YOV2pGoZD/wMAAECBMv1/VtT/M5se/Ol50/vecF66UjUKh/4HAACAAmX6/+yo/797eOR8JzY4+5sO6Uo17/v1PwAAABQo0//nRP3//YnnnHb0lE5Nb0hXqsbh0P8AAABQoEz/nxv1/w+vdbrhhie+6XZBulItGA79DwAAAAXK9P95Uf/P+qDv+Je6t31kzXSlWigc+h8AAAAKlOn/86P+//GfTxywyRljfrgtXamahEP/AwAAQIEy/T8w6v+fWix7358jei9aT1eqpuHQ/wAAAFCgTP9fEPX/z/e8v9siz0zdZrF0pVo4HPofAAAACpTp/0FR/89+7OPe+y3f6tYx6Uq1SDj0PwAAABQo0/8XRv3/y/xtrhjV+Ll3rklXqkXDof8BAACgQJn+vyjq/19HTOu73tvVRhumK1WzcOh/AAAAKFCm/y+O+v+3pVe87qkH7+i+YrpSzftMAP0PAAAABcr0/yVR///edKnHrurZ6+wz05VqXvfrfwAAAChQpv8vjfr/j4endDusz+yXmqQrVfNw6H8AAAAoUKb/L4v6/8+32rabMqr9mnenK1WLcOh/AAAAKFCm/y+P+n/OMV+/0vaFIWc8mq5US4RD/wMAAECBMv0/OOr/v/q98c0pzbvesEy6Ui0ZDv0PAAAABcr0/xVR/899csmFB/044pvh6Uq1VDj0PwAAABQo0/9X/mf/V/O1n3buz+26N62lK9XS4dD/AAAAUKBM/18V9f/8F694eMNdJ3Zrnq5ULcOh/wEAAKBAmf6/Our/BkOW2nb3K5o+8lC6Us37TAD9DwAAAAXK9P81Uf/XVppyy/BLLvth03SlWjYc+h8AAAAKlOn/a6P+r/Y5bcdDdu+y6LXpSrVcOPQ/AAAAFCjT/0Oi/q9/O/b2a9abu82l6UrVKhz6HwAAAAqU6f/rov5v+NuZA5+ZucWtbdOVavlw6H8AAAAoUKb/h0b932jrbY9cZ/ntb3oqXanmfY/+BwAAgAJl+n9Y1P8LfHLOgDueGbhVj3SlWiEc+h8AAAAKlOn/66P+b7xfpx7dRrRp0SddqVYMh/4HAACAAmX6/4ao/xfctW+npmd88dPkdKVaKRz6HwAAAAqU6f8bo/5f6Ocnbvqre79x+6Yr1crh0P8AAABQoEz/3xT1f5NHZk57/InH9v81XalWCYf+BwAAgAJl+n941P9NG6zWcNcpLRb4Ll2p2oRD/wMAAECBMv1/c9T/Cy+x2KrLNHjrq53TlWrVcOh/AAAAKFCm/0dE/b/InW899+X0dkN/SVeq1cKh/wEAAKBAmf6/Jer/RY+Z/ej3m8zst1e6Uq0eDv0PAAAABcr0/61R/zd7a539at06rt0pXanWCIf+BwAAgAJl+n9k1P+LPblgv33OHfDax+lKtWY49D8AAAAUKNP/t0X9v3i/idfecu2y5x2VrlRrhUP/AwAAQIEy/T8q6v/mCx9z8j+3+ejwV9OVqm049D8AAAAUKNP/t0f93+KBUVcNXvmE9d9LV6q1w6H/AQAAoECZ/r8j6v8lbhr8wPO/3vfmqelK1S4cUf8v8P/qkQEAAIC/KdP/o6P+X7LlnntvOLPnTfunK9U64fD+HwAAAAqU6f87o/5f6pGrx92z3qit/kpXqnXDof8BAACgQJn+vyvq/6Ub7HbQ/rs3bPFVulKtFw79DwAAAAXK9P/dUf+3XOLI/gtcMuGnHdOVav1w6H8AAAAoUKb/74n6f5k77xz2xxX7jpuQrlQbhEP/AwAAQIEy/T8m6v9lXztoxta7Dt3/0HSl2jAc+h8AAAAKlOn/e6P+X+7EIQuMabfhAsenK9VG4dD/AAAAUKBM/98X9X+rf45YfdqPP331erpStQ+H/gcAAIACZfr//qj/l//g0JeXbL7I0CPTlWrjcOh/AAAAKFCm/x+I+r/1u+ddu9ALr/Z7IV2pNgmH/gcAAIACZfr/waj/V+jesd+vow5ee2q6Um0aDv0PAAAABcr0/0NR/694Ur/97uwz/LXT05Vqs3DofwAAAChQpv8fjvp/pYmPP3pQzw7n/ZCuVB3Cof8BAACgQJn+fyTq/5UfabX3dQ/OOXyPdKXaPBz6HwAAAAqU6f9Ho/5fpcG7D/R8e4/1t0lXqi3Cof8BAACgQJn+Hxv1f5slPr1q88aD3/w8Xam2DIf+BwAAgAJl+v+xqP9XvXPlk19dr8suR6crVcdw6H8AAAAoUKb/H4/6f7WFPx+258zL7nktXam2Cof+BwAAgAJl+n9c1P+rP9C6/22XbPHHu+lK1Skc+h8AAAAKlOn/J6L+X+Omlgf9uPvclv3SlWrrcOh/AAAAKFCm/8dH/b9myw/Hzbdr9z1mpyvVvN8JoP8BAACgQJn+fzLq/7UWfGnYQ1eMuG/PdKXqHA79DwAAAAXK9P9TUf+3HdOkf+cfm36+dbpSbRsO/Q8AAAAFyvT/01H/r33LRgc1azex0SfpSvWPcOh/AAAAKFCm/5+J+r9dq+/HffpC+xP3S1eq7cKh/wEAAKBAmf5/Nur/dT5886nfm8++8rd0pdo+HPofAAAACpTp/+ei/l+32X0rNe7T9cmZ6Uq1Qzj0PwAAABQo0//PR/2/3vFrNzhg1JAVdkpXqh3Dof8BAACgQJn+nxD1//ovfPnx3Q9WRzyZrlTz/k1A/wMAAECBMv3/QtT/Gzy+wyK9ej53Qfd0pdo5HPofAAAACpTp/xej/t+w4UXfXtu410cnpivVLuHQ/wAAAFCgTP+/FPX/Ros9NHHi23d0eCddqXYNh/4HAACAAmX6/+Wo/9uPOm7tLZ/pvcv36Uq1Wzj0PwAAABQo0/8To/7feMH7nrt1+TH37J6uVF3Cof8BAACgQJn+fyXq/03G9Fl17zNa/dE5Xanm/ZuA/gcAAIACZfr/1aj/N71ll4YNRkxt+UW6Uu0RDv0PAAAABcr0/2tR/2/WauC0H57otEevdKXaMxz6HwAAAAqU6f/Xo/7vcPqpg7fvfvZ9L6Yr1V7h0P8AAABQoEz/vxH1/+YTxh03tkHbz6ekK9Xe4dD/AAAAUKBM/78Z9f8Wk87vMnPKN41OS1eqfcKh/wEAAKBAmf6fFPX/lj23un+5TZY88fl0peoaDv0PAAAABcr0/1tR/3dcr8sj202ffOUh6UrVLRz6HwAAAAqU6f+3o/7fauA1+z52bt8nT0hXqn3Dof8BAACgQJn+nxz1f6dhd536XbdHV3gjXan2C4f+BwAAgAJl+v+dqP+3btNryLLbrHzEAelKtX849D8AAAAUKNP/70b9v83uL5703rXTL5ibrlTz/k1A/wMAAECBMv3/XtT/nb9c5Mo1ft3xoy/TlerAcOh/AAAAKFCm/9+P+n/bPzd8sP/KgzrskK5UB4Xj3/b/gP+ZRwYAAAD+pkz/fxD1/z+2/XGfi9+es8nIdKU6OBze/wMAAECBMv3/YdT/201b9/ElG3d4t0pXqn+GQ/8DAABAgTL9/1HU/9sf+MuB03oOvuhfNH7VPRz6HwAAAAqU6f8pUf/vsMMrZ4x5cI+j701Xqh7h0P8AAABQoEz/T436f8fvF7p+61Gvrrx5ulIdEg79DwAAAAXK9P/HUf/vNG6/9+bvs8hzN6Yr1aHh0P8AAABQoP/S/7X/0v+fRP2/c6PrN5vVfPjlA9OV6rBw6H8AAAAoUOb9/6dR/++y+G0tR75w8HFrpCvV4eHQ/wAAAFCgTP9/FvX/rrf/89e92g1tcFm6Uh0RDv0PAAAABcr0/7So/3frtfU5O/+472frpStVz3DofwAAAChQpv+nR/3f5Y1zD3viip8eXiVdqY4Mh/4HAACAAmX6//Oo/3d/bvw/Zuy64d7npytVr3DofwAAAChQpv+/iPp/jzNOuXXp3Uctv1C6Uh0VDv0PAAAABcr0/5dR/++50Ac7fHhJz79un2/+M//LSnV0OPQ/AAAAFCjT/19F/b/XvcuNajdzwh1PpCvVMeHQ/wAAAFCgTP/PiPp/71tXveDU9RruuGy6Uh0bDv0PAAAABcr0/9dR/++z/Ce9Bq780SabpSvVceHQ/wAAAFCgTP9/E/V/13ErnbnYr8u+OyRdqXqHQ/8DAABAgTL9/23U/90aTe/+ybX3XXRJulIdHw79DwAAAAXK9P/MqP/3XXzq1g9uc8LRa6Ur1Qnh0P8AAABQoEz/fxf1/363Lz18224zV74pXan6hONv9n/t/+SRAQAAgL8p0//fR/2//0sz3vnr3HbPNUhXqhPD4f0/AAAAFCjT/z9E/X/AcWtt2HT6gMtbpCvVSeHQ/wAAAFCgTP/Pivr/wEOWaN5tk47HPZyuVCeHQ/8DAABAgTL9/2PU/wdNeX32HVMea9A0Xan6hkP/AwAAQIEy/f9T1P8Hf7T+rQ816PfZPelKdUo49D8AAAAUKNP/P0f9/8/Df/5H5+5vPfxIulL1C4f+BwAAgAJl+n921P/dT3jtsGZPtNi7ZbpSnRoO/Q8AAAAFyvT/L1H/93ix8Tmfjhi4/NXpSnVaOPQ/AAAAFCjT/79G/X/IuNG9Vj1j+782SFeq08Oh/wEAAKBAmf7/Ler/QxsdfcFby39xx0rpStU/HPofAAAACpTp/9+j/j9s8X1GnflMmx0HpCvVGeHQ/wAAAFCgTP//EfX/4bdfvsMJRxx8xYbpSnVmOPQ/AAAAFCjT/39G/X/EQnsM/+qB4cdfk65U834mQP8DAABAgTL9Pyfq/573XrV1y7cWaXNmulKdFQ79DwAAAAXK9P9fUf8fees93XdZ4NUJK6Yr1dnh0P8AAABQoEz/z436v9fyPc8c12KPS+5OV6pzwqH/AQAAoED/vv9r80X9f9S+wz9s8OLgY5ukK9W54dD/AAAAUKBM/88f9f/RHx++xQ+3d9hsmXSlOi8c+h8AAAAKlOn/BlH/H/PTAcvfeuKc9x9NV6rzw6H/AQAAoECZ/q9F/X/sLkPn7D244ahaulINDIf+BwAAgAJl+r+K+v+4ix4dsMsuE7Yfnq5UF4RD/wMAAECBMv1fj/q/90Zn9Bi3ds/lHkpXqkHh0P8AAABQoEz/N4z6//gVO3f6ataoP5unK9WF4dD/AAAAUKBM/zeK+v+Ea8++qeV3Gz54bbpSXRQO/Q8AAAAFyvT/AlH/9/lmhV2nrv/TnpumK9XF4dD/AAAAUKBM/zeO+v/Evb+4a6099p2vbbpSXRIO/Q8AAAAFyvT/glH/n9Tpo4v6Xjr0k0vTlWre1/Q/AAAAFCjT/wtF/X/yr8scc+GQjleMSleqy8Kh/wEAAKBAmf5vEvV/333fO7dZ5wHHL5iuVJeHQ/8DAABAgTL93zTq/1M+Xv7wT1dp12a5dKUaHA79DwAAAAXK9P/CUf/3+2mVbR/6beaE8elKdUU49D8AAAAUKNP/i0T9f+oun93SedoJl6yfrlRXhkP/AwAAQIEy/b9o1P+ntV30zTkb33fs5elKdVU49D8AAAAUKNP/zaL+P/2ayess3HXZzc5LV6qrw6H/AQAAoECZ/l8s6v/+Z3/TbN9zPnp/5XSluiYc+h8AAAAKlOn/xaP+P2OTNX68vUebUTekK9W14dD/AAAAUKBM/zeP+v/MSR9ud8z4L7bvkK5UQ8Kh/wEAAKBAmf5vEfX/gJ4t77h+6vbLrZmuVNeFQ/8DAABAgTL9v0TU/2ed3vrCF2sD/7wgXamGhkP/AwAAQIEy/b9k1P9nT/i856atWjxYT1eqYeH43+v/jf+vHhkAAAD4mzL9v1TU/+fcv815c59+a8/b0pXq+nB4/w8AAAAFyvT/0lH/n9v4rEOa3NxvvjHpSjXvdwLofwAAAChQpv9bRv1/3nKPdO7a/7FPFktXqhvDof8BAACgQJn+Xybq//Nv63/b6EsnTvsrXaluCof+BwAAgAJl+n/ZqP8H1h/fad09mtb3T1eq4eH4d/1/5v/QIwMAAAB/U6b/l4v6/4Lx/e5+ev0RXXZMV6qbw+H9PwAAABQo0/+tov4fNLrjpVd/133MV+lKNSIc+h8AAAAKlOn/5aP+v7DZeUcfOmvub4emK9Ut4dD/AAAAUKBM/7eO+v+i/SevvuraWyw1IV2pbg2H/gcAAIACZfp/haj/L/580Zff2uWynV5PV6qR4dD/AAAAUKBM/68Y9f8ls9aYcebgLncdn65Ut4VD/wMAAECBMv2/UtT/l273zQInnHjH1BfSlWpUOPQ/AAAAFCjT/ytH/X/ZoFf79Lq91xZHpivV7eHQ/wAAAFCgTP+vEvX/5esscPW1Lz535OnpSnVHOPQ/AAAAFCjT/22i/h+88noPT2xRXTg1XalGh0P/AwAAQIEy/b9q1P9X3PDTXlsuMOTpPdKV6s5w6H8AAAAoUKb/V4v6/8oZe4/9/a2uK/2QrlR3hUP/AwAAQIEy/b961P9X7XZZ18YPzD7583Slujsc+h8AAAAKlOn/NaL+v3qbO0454Ij2V2+TrlT3hEP/AwAAQIEy/b9m1P/X/HXU0Lv7fzOtR7pSjQmH/gcAAIACZfp/raj/r93/7uM2uLlt/al0pbo3HPofAAAACpTp/7ZR/w/5/IjBE54+u8vkdKW6Lxz6HwAAAAqU6f+1o/6/btbu91/RqtOYPulKdX849D8AAAAUKNP/7aL+H7rdlV0Ork397dd0pXogHPofAAAACpTp/3Wi/h+25uGrvju11VL7pivVg+HQ/wAAAFCgTP+vG/X/9ZcPf27N8WN22jldqR4Kh/4HAACAAmX6f72o/284d+i0M3r0vuu7dKV6OBz6HwAAAAqU6f/1o/6/ccsDGl50zqCpe6Ur1SPh0P8AAABQoEz/bxD1/00dntjrsq47bvFLulI9Gg79DwAAAAXK9P+GUf8PP6/vwz02nn7kx+lKNTYc+h8AAAAKlOn/jaL+v3lwp6vbT1v5wk7pSvVYOPQ/AAAAFCjT/+2j/h+x2jl9nv3t0adfTVeqx8Oh/wEAAKBAmf7fOOr/W/ZvM3T+VfqudFS6Uo0Lh/4HAACAAmX6f5Oo/2/9/ONTZnWefPKp6Ur1RDj0PwAAABQo0/+bRv0/ctb7XUcOWfLq99KVanw49D8AAAAUKNP/m0X9f9t2y47d6+a3Ftw9XameDIf+BwAAgAJl+r9D1P+jZkzp8lr/Fl9/n65UT4VD/wMAAECBMv2/edT/t++21P0dWj02/ot0pXo6HPofAAAACpTp/y2i/r9jmxUHH1HNd2DndKV6Jhz6HwAAAAqU6f8to/4f/de044ZO/WLJF9OV6tlw6H8AAAAoUKb/O0b9f+fMWV3a1trM7pWuVM+FQ/8DAABAgTL9v1XU/3ftucH9U3oMvPm0dKV6Phz6HwAAAAqU6f9OUf/f3XHhwYPGb7/1lHSlmhAO/Q8AAAAFyvT/1lH/3/P7C8ed0vW+dQ9JV6oXwqH/AQAAoECZ/t8m6v8xG89o8s9zTnj9+XSl2qTd+K3bHbt2M/0PAAAABcr0f+eo/+89a62Zg6d9dM4b6Ur1Ujj0PwAAABQo0//bRv1/39VLvPb8xsseekK6Ur0cDv0PAAAABcr0/z+i/r9/rdfbbrjKgLXmpivVxHDofwAAAChQpv+3i/r/ga7HP/39bx1fOSBdqV4Jh/4HAACAAmX6f/uo/x/89IHWtSEzh+yQrlSvhkP/AwAAQIEy/b9D1P8Pzb5k/n06t+v7ZbpSvRYO/Q8AAAAFyvT/jlH/P7zTdp/dssdPC76WrlSvh0P/AwAAQIEy/b9T1P+PzBy0wBaXbvj10elKNe93Aup/AAAAKFCm/3eO+v/RPXea8cp3Q8f3S1eqN8Oh/wEAAKBAmf7fJer/sR1PennI+vse+G66Uk0Kh/4HAACAAmX6f9eo/x/7fczqR649Yck905XqrXDofwAAAChQpv93i/r/8SFbH/TmrIazZ6cr1dvh0P8AAABQoEz/d4n6f9xK545bYfComz9JV6rJ4dD/AAAAUKBM/+8e9f8T7ccPO3GXnltvna5U74RD/wMAAECBMv2/R9T/4y8+pf95tw9e97d0pZr3mYD6HwAAAAqU6f89o/5/cnLPEyeduMfr+6Ur1Xvh0P8AAABQoEz/7xX1/1NH3XNN6xZzztkpXaneD4f+BwAAgAJl+n/vqP+f7nvVQ31e7HDozHSl+iAc+h8AAAAKlOn/faL+f+bpPfY8/63ha3VPV6oPw6H/AQAAoECZ/u8a9f+zD/3wWKcFDn7lyXSl+igc+h8AAAAKlOn/blH/P9ekfbd7j3h1yDvpSjUlHPofAAAACpTp/32j/n9+qaZ9pz+wSN8T/82c/gcAAIACZfp/v6j/J9z88nVLdO57+pB0pfo4HPofAAAACpTp//2j/n9hvsa9Lxry6LDN0pXqk3DofwAAAChQpv8PiPr/xbGvXXHGb0u+sFa6Un0aDv0PAAAABcr0/4FR/79098/3rbnK5NUvSVeqz8Kh/wEAAKBAmf4/KOr/l5uvv9u7G+94cIN0pZoWDv0PAAAABUr7f17v/4fawVH/T+zWo/l10wYNuCldqaaHQ/8DAABAgeZfYun68//9+/9/Rv3/yme3zu55zspvP5yuVJ+HQ/8DAABAgTI//9896v9Xf7nxnc27Tt+gRbpSfREO/Q8AAAAFyvR/j6j/X9u524avjm+17T3pSvVlOPQ/AAAAFCjT/4dE/f/6paduP7nH1NuaRt8+N/zZV+H/638AAAAoUKb/D436/40Nx41epdb7x5bpSjUjHPofAAAACpTp/8Oi/n9zhfMH9Z46ZrFH0pXq63DofwAAACjQv+v/ubX55ov6f9LQrY446+m2+22QrlTfhEP/AwAAQIEy7/+PiPr/re8+O/8frb4Ze3W6Un0bjqj/G/6/emQAAADgb8r0f8+o/9/ea5VDH+jfaeaAdKWaGQ7v/wEAAKBAmf4/Mur/yVstv83HN5+9yErpSvVdOPQ/AAAAFCjT/72i/n/nj/dGLv5A19OrdKX6Phz6HwAAAAqU6f+jov5/t9syO19wxJBhI9OV6odw/Jf+X/7/xSMDAAAAf1Om/4+O+v+9zz66p98C7V+4N12pZoXD+38AAAAoUKb/j4n6//1fvrhk7bdmr/4vGr/6MRz6HwAAAAqU6f9jo/7/YOcVjvroxV4H35iuVD+FQ/8DAABAgTL9f1zU/x+u/WbLQ1vcMWDzdKX6ORz6HwAAAAqU6f/eUf9/dGXzX68+sXp7jXSlmh0O/Q8AAAAFyvT/8VH/Tzlz7feevv25DQamK9Uv4dD/AAAAUKBM/58Q9f/UTb/cbN1dtth2vXSl+jUc+h8AAAAKlOn/PlH/f7zJQke0HTz3tsvSleq3cOh/AAAAKFCm/0+M+v+Ts18ZNGVWlx/PT1eq38Oh/wEAAKBAmf4/Ker/T6/5ZfSgtS9bbJV0pfojHPofAAAACpTp/5Oj/v+s7brbn7J+0/1uT1eqP8Oh/wEAAKBAmf7vG/X/tG5XjHz8u4ljF0pXqjnh0P8AAABQoEz/nxL1//TP9tpm10u7z1w2Xan+Cof+BwAAgAJl+r9f1P+f/3LsocvsMWKRJ9KVam449D8AAAAUKNP/p0b9/8XOt5//5WPbTxqbrtTnHfofAAAACpTp/9Oi/v/yu15HHX/4wPWWSlfq4e/ofwAAAChRpv9Pj/r/q73uumRAozaHLZKu1BuEQ/8DAABAgTL93z/q/xlbXXPP2x98cf5d6Uq9Fg79DwAAAAXK9P8ZUf9//UeXnds83+/VFdKVehUO/Q8AAAAFyvT/mVH/f9Pl5dv6tnys3dnpSn3eBwDqfwAAAChQpv8HRP3/7ddNO1/Yr8WpV6Yr9Ybh0P8AAABQoEz/nxX1/8y57Q+ZOvKt6zZKV+qNwqH/AQAAoECZ/j876v/vOv9w3lpbtfvyonSlPu/79T8AAAAU6P/r/3k/wf+/9v85Uf9/f/6k3ze4fmbjtdOVeuNw6H8AAAAoUOb9/7lR//+weYulJszpeMAm6Up9wXDofwAAAChQpv/Pi/p/1urtNrlihQGPD01X6guFQ/8DAABAgTL9f37U/z9e8dUHB3dY9ucl05V6k3DofwAAAChQpv8HRv3/0xc7bnDrxx81fzBdqTcNh/4HAACAAmX6/4Ko/38+4OLJe595Qseb05X6wuHQ/wAAAFCgTP8Pivp/9vYP/9Jg//uG/4uV+iLh0P8AAABQoEz/Xxj1/y8/9m7xww49J62artQXDYf+BwAAgAJl+v+iqP9/7XL/X72uHrXeuelKvVk49D8AAAAUKNP/F0f9/9vXJy577eyGhw1OV+qLhUP/AwAAQIEy/X9J1P+/z91184lrTDh/nXSlPq/79T8AAAAUKNP/l0b9/0fnC6Zu2X7fVx9PV+rNw6H/AQAAoECZ/r8s6v8/2/S7/fyvh7Zrla7UW4RD/wMAAECBMv1/edT/c4Y9vmOfCzc8tXG6Ul8iHPofAAAACpTp/8FR//818LwjW+/z03Wj05X6kuHQ/wAAAFCgTP9fEfX/3PU6Dpw0ZpEvm6Ur9aXCof8BAACgQJn+v/I/+78+3+IzPr73qFcb35+u1JcOh/4HAACAAmX6/6qo/+e/fa0GnZocfMAt6Uq9ZTj0PwAAABQo0/9XR/3fYNwSKy3x+vDHG6Yr9WXCof8BAACgQJn+vybq/1qj15+a/kqHnwelK/Vlw6H/AQAAoECZ/r826v/qhOPXbt1sTvPV0pX6cuHQ/wAAAFCgTP8Pifq//uIDEyf13qPjlulKvVU49D8AAAAUKNP/10X93/CjS749/67Bw69PV+rLh0P/AwAAQIEy/T806v9Gh2+3SJ/9p9/SO12pz/se/Q8AAAAFyvT/sKj/F3hu0LSZZ67ceVK6Ul8hHP9N/9f+Jx8ZAAAA+Jsy/X991P+Nz9ip4XIfD2r2bLpSXzEc3v8DAABAgTL9f0PU/wv2OmnV7Tvs+P1h6Up9pXDofwAAAChQpv9v/M/+/4//eW7sCpMfnZGu1FcOh/4HAACAAmX6/6bo/X+TYR8P+HXOkl23S1fqq4RD/wMAAECBMv0/POr/pm3a9Fjo+kebHJSu1NuEQ/8DAABAgTL9f3PU/wuvt2yng7bq++2cdKW+ajj0PwAAABQo0/8jov5fZOD7N9058uwb/5Gu1FcLh/4HAACAAmX6/5ao/xfd4dcPH+jXqf/0dKW+ejj0PwAAABQo0/+3Rv3f7PsttvhHy2/WmJWu1NcIh/4HAACAAmX6f2TU/4tNq5Zf/Pm2L++WrtTXDIf+BwAAgAJl+v+2M+erhbu++IFPz/n4gzFnfZiu1NcKh/4HAACAAmX6f1T0/r/5Ggcvtkqj3j36pyv1tuHQ/wAAAFCgTP/fHvV/i8tGfj/58Knte6Yr9bXDof8BAACgQJn+vyPq/yXOGfbGWY+1mvxyulJvFw79DwAAAAXK9P/oqP+X3GLf9Xvf9dwt36Qr9XXCof8BAACgQJn+vzPq/6WGXfvu172rzrukK/V1w6H/AQAAoECZ/r8r6v+l2xy46VLN7mjWLV2prxcO/Q8AAAAF+jf9v8B889Xujvq/5XqHLLPTK72+/yNdqa8fDv0PAAAABcq8/78n6v9lBt782/jXZz96crpS3yAc/03/t/6ffGQAAADgb8r0/5io/5f9usuljZq07/p2ulLfMBze/wMAAECBMv1/b9T/y3W55uifjhrS5Ol0pb5ROPQ/AAAAFCjT//dF/d+q81073TSm67cHpyv19uHQ/wAAAFCgTP/fH/X/8nN73b3HPiNufD9dqW8cDv0PAAAABcr0/wNR/7f+c+CcXS/s3r9vulLfJBz6HwAAAAqU6f8Ho/5fYdtdln/864lrHJuu1DcNh/4HAACAAmX6/6Go/1fcvc8WX7Zv+vIr6Up9s3DofwAAAChQpv8fjvp/pS/v+3CZNS47a6t0pd4hHPofAAAACpTp/0ei/l952KLrT5ndpcdn6Up983DofwAAAChQpv8fjfp/lTaT32h79dz2P6Ur9S3Cof8BAACgQP/Z/43CV/6X/h8b9X+b9b75/pQdtpi8d7pS3zIc+h8AAAAKlHn//1jU/6sOXGOxQb3n7PBRulLvGA79DwAAAAXK9P/jUf+vtsaXvy16V4fRZ6Qr9XmfCaj/AQAAoECZ/h8X9f/ql629zGevDJ57RLpS7xQO/Q8AAAAFyvT/E1H/r3FO800fbrZHq5fSlfrW4dD/AAAAUKBM/4+P+n/NLd58d5smr+6zbbpS3yYc+h8AAAAKlOn/J6P+X2vtZ3+b9foiD01LV+qdw6H/AQAAoECZ/n8q6v+2VzZYZv4xwz/9MV2pz/uZAP0PAAAABcr0/9NR/6995sab7nXUwbUu6Ur9H+HQ/wAAAFCgTP8/E/V/u03/enfkhUN7f52u1LcLh/4HAACAAmX6/9mo/9f59cNbnthn38u2T1fq876m/wEAAKBAmf5/Lur/dTu13Hbn9j89e2C6Ut8hHPofAAAACpTp/+ej/l9v79aHL/31hqv8ma7UdwyH/gcAAIACZfp/QtT/63/z+bkzZo866rh0pb5TOPQ/AAAAFCjT/y9E/b/Btdsc2W6Nnhe/ma7Udw6H/gcAAIACZfr/xaj/N1zxrIEf7jDhvefSlfou4dD/AAAAUKBM/78U9f9GGz1y+8CrG258eLpS3zUc+h8AAAAKlOn/l6P+b39R/x1PPfOjHTqmK/XdwqH/AQAAoECZ/p8Y9f/Gaz9+0yf7Lzv603Sl3iUc+h8AAAAKlOn/V6L+3+TKfp0W63Df3J/Tlfru4dD/AAAAUKBM/78a9f+mZ3bsse3HJ7TaJ12p7xEO/Q8AAAAFyvT/a1H/b7bpeQMenDNznw/Slfqe4dD/AAAAUKBM/78e9X+Hbif+0nSFdg+dkq7U9wqH/gcAAIACZfr/jaj/N//s/hZ/bTXg02PSlfre4dD/AAAAUKBM/78Z9f8Wv1ywwR3Xd6xNTFfq8z4TQP8DAABAgTL9Pynq/y133nVyt36P9T4pXal3Dcff6f9G/4ePDAAAAPxNmf5/K+r/jksc9FGTkf0ueytdqXcLh/f/AAAAUKD/pv8bhPvtqP+3unPIlnOff+vZZ9KV+r7h0P8AAABQoMz7/8lR/3d6ZESr0S1brPLPdKW+Xzj0PwAAABQo0//vRP2/dYND/+zaaOBR36Yr9f3Dof8BAACgQJn+fzfq/21OmrD49R9s3/BfrNQPCIf+BwAAgAJl+v+9qP87T5z/h2Me++K9rulK/cBw6H8AAAAoUKb/34/6f9t3N3t908PbbPx7ulI/KBz6HwAAAAqU6f8Pov7/R/c56714dZfNl0hX6geHQ/8DAABAgTL9/2HU/9s9ueV7e+xw2YcPpCv1eb8TQP8DAABAgTL9/1HU/9v3+22zm9bYYuCIdKXePRz6HwAAAAqU6f8pUf/vcMwzLX+aPbfn/OlKvUc49D8AAAAUKNP/U6P+3/Gt+q+Nvu7e+uJ0pX5IOPQ/AAAAFCjT/x9H/b/TkL0e79x+xFPt0pX6oeHQ/wAAAFCgTP9/EvX/zitdceBD+zS9auN0pX5YOPQ/AAAAFCjT/59G/b9L+9vP+PTCiX2uS1fqh4dD/wMAAECBMv3/WdT/u1587PXNjmrfsHW6Uj8iHPofAAAACpTp/2lR/++2686fNB4z+4uz0pV6z3DofwAAAChQpv+nR/3f5ecLa7+/3vX+q9KV+pHh0P8AAABQoEz/fx71/+6f3Lvi3U2G7N4+Xan3Cof+BwAAgAJl+v+LqP/32O/kJw9oVi3zWLpSPyoc+h8AAAAKlOn/L6P+37Pd2+2ufeW535dOV+pHh0P/AwAAQIEy/f9V1P97XbX4K73u6nX3wulK/Zhw6H8AAAAoUKb/Z0T9v/eA1b/Zsvcdu96ZrtSPDYf+BwAAgAJl+v/rqP/32ey7hSce3nvzC9OV+nHh0P8AAABQoEz/fxP1f9chbafv/diYD1dPV+q9w6H/AQAAoECZ/v826v9uK33d6NYPWg3cIl2pHx8O/Q8AAAAFyvT/zKj/923/RpsfGk3tOSxdqZ8QDv0PAAAABcr0/3dR/+938ZLPNmjZqfWi6Uq9Tzj0PwAAABQo0//fR/2//8xp9419/uyn7ktX6ieGQ/8DAABAgTL9/0PU/wfsueJu249se9Wt6Ur9pHDofwAAAChQpv9nRf1/YMelei/X75s+jdKV+snh0P8AAABQoEz//xj1/0G/T7li5vVLNhyXrtT7hkP/AwAAQIEy/f9T1P8H/7b5k7O2mvzF8ulK/ZRw6H8AAAAoUKb/f476/59b/7Hi/Cv0vX+BdKXeLxz6HwAAAAqU6f/ZUf933+ep2l5zHt39jnSlfmo49D8AAAAUKNP/v0T93+PbRp+M/HjlZdqkK/XTwqH/AQAAoECZ/v816v9Dhty6cI8O038/J12pnx4O/Q8AAAAFyvT/b1H/H7pSj28u23/Hu69IV+r9w6H/AQAAoECZ/v896v/D2nd75dkzB+26brpSPyMc+h8AAAAKlOn/P6L+P/ziG9u1X3PiNeemK/Uzw6H/AQAAoECZ/v8z6v8j2h3w7F2/ND1p1XSlPiAc+h8AAAAKlOn/OVH/97xqaJsDrxmx4jrpSv2scOh/AAAAKFCm//+K+v/IAcMbLbhj92cGpyv1s8Oh/wEAAKBAmf6fG/V/r80On/7b3nMHtUpX6vN+J6D+BwAAgAL9+/6v5ov6/6jjJtWfGbRFr8fTlfq8zwTU/wAAAFCgTP/PH/X/0S+1+GKdGZdtOTpdqZ8XDv0PAAAABcr0f4Oo/4+Z0u75QzbqMqVxulI/Pxz6HwAAAAqU6f9a1P/HHvLVyte8cced96cr9YHh0P8AAABQoEz/V1H/Hzfy5a6XNu21c7N0pX5BOPQ/AAAAFCjT//Wo/3sv23TsaUc/t3TDdKU+KBz6HwAAAAqU6f+GUf8fv0D7oavdW/16S7pSvzAc+h8AAAAKlOn/RlH/n3DfD6d8cOeQe1dLV+oXhUP/AwAAQIEy/b9A1P99nt/j6lbHdd1tULpSvzgc+h8AAAAKlOn/xlH/n3jaVX2+XXR2dX26Ur8kHPofAAAACpTp/wWj/j/piHv2enRi++lbpiv1S8Oh/wEAAKBAmf5fKOr/k9/s+fAO739zzVLpSv2ycOh/AAAAKFCm/5tE/d/3uNH7v96w7Ulj05X65eHQ/wAAAFCgTP83jfr/lJeOfmKlw85e8a50pT44HPofAAAACpTp/4Wj/u83ZZ8bTx7b6ZlF0pX6FeHQ/wAAAFCgTP8vEvX/qYdcfvo5t00ddHa6Ur8yHPofAAAACpTp/0Wj/j+tUfeFOpzaqtcK6Ur9qnDofwAAAChQpv+bRf1/+rhbvnptmTFbbpSu/P/Y+9Pwrcf/7/ulHJ9DyixDpsxDxjIk8zyLSCFTkjEJmZWQmUiSITJWJCJDkiRDCGUmpB/hlykZEmFta6299d/Ptf+3c79+53X9t22/8Xjc8VYdr+1z9+nj21EbGA79DwAAAAXK9P8yUf/3Gn7npNtf6fHZgHSldks49D8AAAAUKNP/y0b933vZjhue2PzqEZukK7VB4dD/AAAAUKBM/y8X9f/F80be+Mj8ffe/Nl2p3RoO/Q8AAAAFyvR/06j/++x64pmd7pi50u3pSu22cOh/AAAAKFCm/5eP+v+SDu3aLbrT2r9vk67UFvw3Af0PAAAABcr0/wpR/1/6/YBH/zxyzKgn0pXaHeHQ/wAAAFCgTP+vGPX/ZbdudfQOfc49cIV0pTY4HPofAAAACpTp/5Wi/u+71uxxb8x4f5H/ZqV2Zzj0PwAAABQo0//Nov6/fOvX7rh1+xVm3pOu1O4Kh/4HAACAAmX6f+Wo/6+4rkmvkycf8/kB/+9/u/N/WakNCYf+BwAAgAJl+n+VqP+v3PTNm2cvdffC36UrtbvDof8BAACgQJn+XzXq/6tuXvSchqcv2f7PdKW24GcC9D8AAAAUKNP/q0X9f3Wflod2GPHm6MPSldq94dD/AAAAUKBM/68e9f812/4y+r5RB//1XrpSuy8c+h8AAAAKlOn/5lH/X3v2fbO/6tZ/lXPSldr94dD/AAAAUKBM/68R9f91kzsv03Tx7fY6Jl2pPRAO/Q8AAAAFyvT/mlH/X/9hx1Y7T/1r+AvpSm1oOPQ/AAAAFCjT/2tF/d+v851TH9uqmnZuulIbFg79DwAAAAXK9P/aUf/fMOTZhx+c9Uqbj9OV2vBw6H8AAAAoUKb/14n6/8Zm57c97OqTTnsjXak9GA79DwAAAAXK9P+6Uf/3X2Kn0xY/dFi/7ulK7aFw6H8AAAAoUKb/14v6/6bRl1/7975bvvxFulIbEQ79DwAAAAXK9P/6Uf8PeH7t47a95Zf1dk5Xag+HQ/8DAABAgTL9v0HU/zef/68+k+Yefuah6UptZDj0PwAAABQo0/8bRv0/8LQPh9zR4vb+v6QrtUfCof8BAACgQJn+bxH1/y3vrrZL9+13+vyddKX2aDj0PwAAABQo0/8bRf0/6OxPhv86o8/CPdKV2qhw6H8AAAAoUKb/N476/9bJzfat+mzavmu6UnssHPofAAAACpTp/02i/r/tw+Yntzvyh9Evpiu1x8Oh/wEAAKBAmf7fNOr/2zt/deXdO535117pSm10OPQ/AAAAFCjT/5tF/X/Hwk3/XumOx1aZla7UngiH/gcAAIACZfp/86j/B499Z5VZ81fZ6690pfZkOPQ/AAAAFCjT/y2j/r/zkX9v/1zzT4cfna7UngqH/gcAAIACZfq/VdT/dzXddPr+r6w7bWa6Uns6HPofAAAACpTp/y2i/h+y/ORrD1r56zZ7piu1MeHQ/wAAAFCgTP9vGfX/3SMWO+2eC/Y+7cB0pfZMOPQ/AAAAFCjT/1tF/X/P05u1/W3olf3mpCu1seHQ/wAAAFCgTP9vHfX/vQ1+e7j2TNOXe6UrtWfDof8BAACgQJn+bx31/31nH7LL813fXe+TdKU2Lhz6HwAAAAqU6f9tov6/f3L/Ia2q8898PV2pPRcO/Q8AAAAFyvR/m6j/H/hwWJ8TPh7b/6R0pTY+HPofAAAACpTp/22j/h/a+bTjBsw4d4l/pSu158Oh/wEAAKBAmf7fLur/Yc+PuHKJ7cf8uFO6UpsQDv0PAAAABcr0//ZR/w8//+ST/zpyhbEd0pXaC+HQ/wAAAFCgTP/vEPX/g6cduO/wPu8f/mu6UpsYDv0PAAAABcr0/45R/z/07sDhh9+x77LnpSu1F8Oh/wEAAKBAmf7fKer/ES9efOV3O109Z1q6UnspHPofAAAACpTp/52j/n+41x4nr9587Qcmpyu1l8Oh/wEAAKBAmf7fJer/kSdfuO++82fueVq6UnslHP/7/m/4/8gjAwAAAP+hTP/vGvX/I1OeGf70yqtt+W66UpsUDu//AQAAoECZ/t8t6v9Hlxn03pBXpr97drpSezUc+h8AAAAKlOn/3aP+HzXsqK0PHtrj4mPTldpr4dD/AAAAUKBM/+8R9f9jz3ZZvn7Bo8dOTFdqr4dD/wMAAECBMv2/Z9T/j1f3/PJL143Xb5uu1BZ8J4D+BwAAgAJl+n+vqP9Hn7HQyps/892r36crtTfCof8BAACgQJn+3zvq/ycmvTzvhY93GfxHulJ7Mxz6HwAAAAqU6f99ov5/8pP5Hw6sLr2wY7pSeysc+h8AAAAKlOn/faP+f6prmzbHL9Vxid7pSm1KOPQ/AAAAFCjT//tF/f/0i79P/WfyrT9+mq7UpoZD/wMAAECBMv2/f9T/Y3rt0KrJiK3Hvpau1N4Oh/4HAACAAmX6/4Co/585eZFlOp7+2+Enpiu1d8Kh/wEAAKBAmf5vG/X/2CkvzH6o2ynLfpmu1N4Nh/4HAACAAmX6/8Co/599fPPLlx314Jw90pXae+HQ/wAAAFCgTP8fFPX/uEZzu3w+dZEHDkpXau+HQ/8DAABAgTL93y7q/+dWfWP30Yu/tOfP6Urtg3DofwAAAChQpv8Pjvp//NDGQ/ectcOWe6crtQ/Dof8BAACgQJn+PyTq/+fnrzxima3+effbdKX2UTj0PwAAABQo0//to/6fsMenB8w49KCL56crtY/Dof8BAACgQJn+PzTq/xfafd39iatvOPaodKU2LRz6HwAAAAqU6f8OUf9P/GaN6/a4ZfH1305Xap+EQ/8DAABAgTL93zHq/xfvuLTzpftOfvX0dKX2aTj0PwAAABQo0/+HRf3/0rq7X3x6i86DT0hXap+FQ/8DAABAgTL9f3jU/y+37H332nPvvfClhRa69bf/daU2PRz6HwAAAAqU6f8jov5/5coxu35QvXveBulK7fNw6H8AAAAoUKb/O0X9P2nDC4bt/3HTQdekK7UZ4dD/AAAAUKBM/x8Z9f+rN4zb57lnxk6+I12p/Ssc+h8AAAAKlOn/o6L+f+2yK06Z1fX8jXdIV2pfhEP/AwAAQIEy/X901P+v77DzVStd8HWXx9KV2pfh0P8AAABQoEz/HxP1/+Qzl37jiKHr9l0qXanNDIf+BwAAgAJl+v/YqP/fePWDTYe9cuXUerpS+yoc+h8AAAAKlOn/zlH/v/np90vMX3nvze5PV2pfh0P/AwAAQIEy/X9c1P9vndDiuyXnP7bL6ulK7Ztw6H8AAAAoUKb/u0T9P+X+Rjes0PzMe8elK7V/h0P/AwAAQIEy/X981P9TV3/rjC93+nTug+lKbVY49D8AAAAUKNP/XaP+f7vxrwc/escqyy+artS+DYf+BwAAgAJl+v+EqP/fGdVq1K59+hx9WbpS+y4c+h8AAAAKlOn/E6P+f/elG4+6/Midnls3Xal9Hw79DwAAAAXK9P9JUf+/17vDsz23/2HW5ulK7Ydw6H8AAAAoUKb/T476//1Tug1eY8amjW9KV2o/hkP/AwAAQIEy/X9K1P8fTH2o99tzfzlvdLpSmx0O/Q8AAAAFyvT/qVH/f3jmSQP2arHloOXTldpP4dD/AAAAUKBM/3eL+v+jVx85e+y+t09eOF2pzQmH/gcAAIACZfr/tKj/P/705g4/3nL4xvemK7Wfw6H/AQAAoECZ/u8e9f+0Ew5+YpWrX+myabpS+yUc+h8AAAAKlOn/06P+/2SRIRPvO7Tqe126Uvs1HPofAAAACpTp/x5R/3/6XNc1Omw1bOpt6Urtt3DofwAAAChQpv/PiPr/swc7LdRw1kmbtU5XanPDof8BAACgQJn+PzPq/+lL3fav2Yv33+WSdKX2ezj0PwAAABQo0/9nRf3/+bLnjfpu6sH3Nk9XavPCof8BAACgQJn+7xn1/4zh4w9efdRfc7dOV2p/hEP/AwAAQIEy/X921P//Gtf3jH27bbf8zelK7c9w6H8AAAAoUKb/z4n6/4v6rjc8ffrdR6+UrtTmh0P/AwAAQIEy/X9u1P9fnjmj90UjjnlubLpS+ysc+h8AAAAKlOn/86L+n/nqeoOvn/zmrBHpSu3vcOh/AAAAKFCm/8+P+v+rT1d99uOllmy8RLpS+ycc+h8AAAAKlOn/C6L+//qEaUdt0HvcZyenK9WCQ/8DAABAgTL9f2HU/9+8tNITj9974Y6T0pUq/Bn9DwAAACXK9P9FUf//u/f0DjtNfPuU6elK1SAc+h8AAAAKlOn/XlH/zzpl5tnLrb7s1RelK1XDcOh/AAAAKFCm/3tH/f/t1LUGfN3g+ok/pSvVIuHQ/wAAAFCgTP9fHPX/dxeM6TXms7ZrHpyuVLVw6H8AAAAoUKb/+0T9//2E3nfs89yMs3dLV6oFXwCg/wEAAKBAmf6/JOr/H97bfdxqnZvf8lW6UtXDof8BAACgQJn+vzTq/x+7X3r0932nzeyUrlQLPq//AQAAoECZ/r8s6v/ZD9+91q+HNVvk73SlahQO/Q8AAAAFyvR/36j/f1rhhAnVNqMP/He6Ui0WDv0PAAAABcr0/+VR/89peOTn7Wb2HLVvulI1Dof+BwAAgAJl+v+KqP9/HnN7g7t//+b3V9KVqkk4ll1ooep/+IkBAACA/1Sm/6+M+v+XN7b5vsvaG6x0fLpSLR4O7/8BAACgQJn+vyrq/1/P+WfJW3a7Yv8z0pVqiXDofwAAAChQpv+vjvr/t+Ne2mTioD1GTElXqiXDof8BAACgQJn+vybq/7kfNZy82fWDP5ubrlRLhUP/AwAAQIEy/X9t1P+/XzBhvQfbddqxfbpSLR0O/Q8AAAAFyvT/dVH/z5tQf+mwlnNO2SVdqZYJh/4HAACAAmX6//qo//94b/svF/+h1dWfpyvVgu7X/wAAAFCgTP/3i/r/z+5/Vn//PHLiqelKtVw49D8AAAAUKNP/N0T9P7/JoqfvsWn3Nd9MV6qm4dD/AAAAUKBM/98Y9f9fT77Z/4m2E87+KF2plg+H/gcAAIACZfq/f9T/f9/zy+MzblrolgvSlWqFcOh/AAAAKFCm/2+K+v+fFVsetMxZf86ckK5UK4ZD/wMAAECBMv0/4L/6v1rorAMHXTCszSLHpSvVSuHQ/wAAAFCgTP/fHPX/wm8OPP/KSQMOPCtdqZqFQ/8DAABAgTL9PzDq/wYfjzjik+Xaj3o/XalWDof+BwAAgAJl+v+WqP8bHnPymE0bTfr98HSlWiUc+h8AAAAKlOn/QVH/L7LcpENnvddopd/TlWrVcOh/AAAAKFCm/2+N+r82conRKz0xdP8f05VqtXDofwAAAChQpv9vi/q/emaLm/c/qeuI/dOVavVw6H8AAAAoUKb/b4/6v77QnHOeG7T08LvTlWrBZ/Q/AAAAFCjT/3dE/b/oPZvdsfZuU/ZqmK5Ua4RD/wMAAECBMv0/OOr/Riv+1uuDtXutsly6Uq0ZDv0PAAAABcr0/51R/y/WZPLRl/4+/q8n05VqrXDofwAAAChQpv/vivq/8ZOLjTt95pqj26Qr1drh0P8AAABQoEz/D4n6v8mfh89ruc0X7QelK9U64dD/AAAAUKBM/98d9f/iO9+x8oTD9l+4X7pSrRsO/Q8AAAAFyvT/PVH/L9H+gTY39732843TlWq9cOh/AAAAKFCm/++N+n/JH4/5sGvnc/rfkq5U64dD/wMAAECBMv1/X9T/S228y329nnvyzC3TlWqDcOh/AAAAKFCm/++P+n/pWy7b47rPVlxvzXSl2jAc+h8AAAAKlOn/B6L+X+bS5074qMFHL1+crlQtwqH/AQAAoECZ/h8a9f+y25zbd8PVd+vXJF2pNgqH/gcAAIACZfp/WNT/y+3/8ck/Tux72sh0pVrwnQD6HwAAAAqU6f/hUf83nbvKlavc26LNmHSl2iQc+h8AAAAKlOn/B6P+X/6LdYfv1XvWtJXTlWrTcOh/AAAAKFCm/x+K+n+Fwz7fd+xJmw/fLl2pNguH/gcAAIACZfp/RNT/K/655pA1npi9153pSrV5OPQ/AAAAFCjT/w9H/b/Szl/u8vZ7R61yVbpStQyH/gcAAIACZfp/ZNT/zdp/dtzlje76q0W6UrUKh/4HAACAAmX6/5Go/1f+ccU+PZdrMHpoulJtEQ79DwAAAAXK9P+jUf+vcu23c9+YNLF9LV2ptgyH/gcAAIACZfp/VNT/q261cdMdhnVbeJl0pdoqHPofAAAACpTp/8ei/l9tzRW2OPmsEZ8/mq5UW4dD/wMAAECBMv3/eNT/qw+a+v6tN3Xov1i6UrUOh/4HAACAAmX6f3TU/81vb9m3b9uBZw5LV6ptwqH/AQAAoECZ/n8i6v811vjlhLM3bb3e+HSlahMO/Q8AAAAFyvT/k1H/r7nlm3us+fO8l1dNV6ptw6H/AQAAoECZ/n8q6v+1+i1639QfuvS7MV2ptguH/gcAAIACZfr/6aj/1/7zwX2Xa3n/aa3SlWr7cOh/AAAAKFCm/8dE/b/OzqcO/7pd4zZrpyvVDuHQ/wAAAFCgTP8/E/X/uu0PvfLx61+bdnm6Uu0YDv0PAAAABcr0/9io/9f78YaTd3qi0Z6LpyvVTuHQ/wAAAFCgTP8/G/X/+vu36/PxSZMeeCRdqXYOh/4HAACAAmX6f1zU/xvMHXDcBo26znk6Xal2CYf+BwAAgAJl+v+5qP83/GLkLhe9N3TZZulKtWs49D8AAAAUKNP/46P+b3HYiUOun9Tm8IHpSrVbOPQ/AAAAFCjT/89H/b/R3r36tF7uz7FbpCvV7uHQ/wAAAFCgTP9PiPp/45+fPu71s9r/uFa6Uu0RDv0PAAAABcr0/wtR/2/y9SW73DVswBJ90pVqz3DofwAAAChQpv8nRv2/6ZG7DTm1bfcLt01Xqr3Cof8BAACgQJn+fzHq/83u6vrJWTeNHHxrulLtHQ79DwAAAAXK9P9LUf9vvs6QHa74eaFXr09Xqn3Cof8BAACgQJn+fznq/5ab37b6O5tOWH+jdKXaNxz6HwAAAAqU6f9Xov5vdU2nv5q37HTskHSl2i8c+h8AAAAKlOn/SVH/b/HP38vM/GHwxQ3SlWr/cOh/AAAAKFCm/1+N+n/L3VvPXv76Vu82TVeqA8Kh/wEAAKBAmf5/Ler/rQ5qMHWXdnO2fCpdqdqGQ/8DAABAgTL9/3rU/1t/+2KrUbttsOcN6Up1YDj0PwAAABQo0/+To/5vvXf1YYtB3zzQMl2pDgqH/gcAAIACZfr/jaj/t/n5+TYf/r7HnHXSlapdOPQ/AAAAFCjT/29G/d/m6z9WvnbtK5a9Il2pDg6H/gcAAIACZfr/raj/tz1yu3m9t2l2eON0pTokHPofAAAACpTp/ylR/2+3w1v9Xpk5bezwdKVqHw79DwAAAAXK9P/UqP+3v6xRty369vzxuXSlOjQc+h8AAAAKlOn/t6P+3+GGVvsdc9joJVZJV6oO4dD/AAAAUKBM/78T9f+OG/468qbn2l74QLpSdQyH/gcAAIACZfr/3aj/d+ox8/6XO18/eJF0pTosHPofAAAACpTp//ei/t/59bX23LJB81f/m8avDg+H/gcAAIACZfr//aj/d5m+UtdjP5ux/qh0pToiHPofAAAACpTp/w+i/t/1+OmX9Z944bHbpytVp3DofwAAAChQpv8/jPp/t6UvOqXD6uMuvitdqY4Mh/4HAACAAmX6/6Oo/3d/aOxV9/Ve9t0r05XqqHDofwAAAChQpv8/jvp/j/F9hs2+9+0tN0xXqqPDof8BAACgQJn+nxb1/561Pfdp2O7+zV5OV6pjwqH/AQAAoECZ/v8k6v+9hva9+9bru0ztkq5Ux4ZD/wMAAECBMv3/adT/e6+6664n//Ba3zPTlapzOPQ/AAAAFCjT/59F/b9Po/M679CycZep6Up1XDj0PwAAABQo0//To/7f9/HxF7+x6cCNj0xXqgU/E6D/AQAAoECZ/v886v/9/v7xxX4/d5j8T7pSHR8O/Q8AAAAFyvT/jKj/999tg3UvvGneoG/SlaprOPQ/AAAAFCjT//+K+v+AA5etr9+29Xn7pCvVCeHQ/wAAAFCgTP9/EfV/21nvzZw2bGLj2elKdWI49D8AAAAUKNP/X0b9f+D6c2+deFaDWe3SleqkcOh/AAAAKFCm/2dG/X9Q/80v2Gy5Ec/tnq5UJ4dD/wMAAECBMv3/VdT/7S5vfHiXSd2O/jpdqU4Jh/4HAACAAmX6/+uo/w/e7o2nb3lv9vKnpCvVqeHQ/wAAAFCgTP9/E/X/IXt179Cu0eZzX01Xqm7h0P8AAABQoEz//zvq//Zzhj9x90l33ftZulKdFg79DwAAAAXK9P+sqP8P/eqmAb8+cdQuF6YrVfdw6H8AAAAoUKb/v436v0On9mdX9/bd7Ih0pTo9HPofAAAACpTp/++i/u/49y2D7+i929R56UrVIxz6HwAAAAqU6f/vo/4/bLeDendffVbfH9KV6oxw6H8AAAAoUKb/f4j6//ADTzlq24ktuuyXrlRnhkP/AwAAQIEy/f9j1P9HzHr42UmfPbnx8+lKdVY49D8AAAAUKNP/s6P+73TVUa+d3uCcyZ3TlapnOPQ/AAAAFCjT/z9F/X9kq0HrX9r5o0E905Xq7HDofwAAAChQpv/nRP1/1Hr3NPrguRXP+yBdqc4Jh/4HAACAAmX6/+eo/48e3OXbtQ/7onG3dKU6Nxz6HwAAAAqU6f9fov4/5s4rnm7dd81Zb6Ur1Xnh0P8AAABQoEz//xr1/7Fr73z46zOvfe7DdKU6Pxz6HwAAAAqU6f/fov7vvNkFF9y1zf5Hn5+uVBeEQ/8DAABAgTL9Pzfq/+OuHnfrqWtPWf63dKW6MBz6HwAAAAqU6f/fo/7v8vfqZw//fem5h6Qr1UXh0P8AAABQoEz/z4v6//jdPhpw+KDx9+6arlS9wqH/AQAAoECZ/v8j6v+uB37xxBK79dplRrpS9Q6H/gcAAIACJf1fxb+7yJ9R/58wa50Of/3Y+rb26Up1cTj0PwAAABQo8/5/ftT/J+719bMntJp3wdx0peoTDv0PAAAABcr0/19R/580Z42jBhzcYdPP05XqknDofwAAAChQpv//jvr/5K9W7v18v4Fv7pKuVJeGQ/8DAABAgTL9/0/U/6d0+nRwq/6Nr3gzXakuC4f+BwAAgAL97/u/tlDU/6eu1HTCtQe81vXUdKXqGw79DwAAAAXK9P/CUf93u/edtXpv0qXlBelKdXk49D8AAAAUKNP/DaL+P+2pfzdoMef+dz5KV6orwqH/AQAAoECZ/m8Y9X/3xTf9/MOmR919XLpSXRkO/Q8AAAAFyvT/IlH/n/7W4nc8/+pdO01IV6qrwqH/AQAAoECZ/q9F/d+j5+u9Wg3ffLn305Xq6nDofwAAAChQpv+rqP/POPano0/oOfvXs9KV6ppw5Pu/+r/9yAAAAMB/KNP/9aj/z5y29bgBJ3Z79vd0pbo2HN7/AwAAQIEy/b9o1P9nPXJzu4NGjzjy8HSlui4c+h8AAAAKlOn/RlH/92x68KP3vNug0f7pSnV9OPQ/AAAAFCjT/4tF/X/2wifd+NuiE7/5MV2p+oVD/wMAAECBMv3fOOr/c8Y+cmZttRVvm5SuVDeEQ/8DAABAgTL93yTq/3NX6jborhc+uuDkdKW6MRz6HwAAAAqU6f/Fo/4/796Hzj/1nnM2vShdqfqHQ/8DAABAgTL9v0TU/+c/deMRrXs9+eb0dKW6KRz6HwAAAAqU6f8lo/6/YPEOY14/rsUVB6cr1YBw6H8AAAAoUKb/l4r6/8LT7nvrzPGzuv6UrlQ3h0P/AwAAQIEy/b901P8Xvdt544un79byq3SlGhgO/Q8AAAAFyvT/MlH/93q+Y5N3G/Z9Z7d0pbolHPofAAAACpTp/2Wj/u99/p0/rPdlr7v/TleqQeHQ/wAAAFCgTP8vF/X/xTec2P7z1uN36pSuVLeGQ/8DAABAgTL93zTq/z4bjnxq2Y5LL7dvulLdFg79DwAAAAXK9P/yUf9fssOAgXteNuXXf6cr1e3h0P8AAABQoEz/rxD1/6WXtTtr9K37P3t8ulLdEQ79DwAAAAXK9P+KUf9fNnv27T12v/bIV9KVanA49D8AAAAUKNP/K0X933efrc67ZJ01G01JV6o7w6H/AQAAoECZ/m8W9f/lRzXp+P68L745I12p7gqH/gcAAIACZfp/5aj/r/jytWfWWXTA93emK9WQcOh/AAAAKFCm/1eJ+v/KPRY9aPy77Ztsl65Ud4dD/wMAAECBMv2/atT/V81/8/H9Rv/ZsUW6Ut0TDv0PAAAABcr0/2pR/1/9zS/9VzyxzZir0pXq3nDofwAAAChQpv9Xj/r/mnYtT/+259DZtXSlui8c+h8AAAAKlOn/5lH/X7t65y2GD++69NB0pbo/HPofAAAACpTp/zWi/r/u/vveP/zVSbs/mq5UD4RD/wMAAECBMv2/ZtT/14+6c+4STRvdt0y6Ui34fwL+//t/4UX+B54ZAAAA+M9k+n+tqP/7Ne7Y9K85c94flq5UC37N+38AAAAoUKb/1476/4ZXzz9p5iattl4sXamGh0P/AwAAQIEy/b9O1P83nvnsNcsfMPi4VdOV6sFw6H8AAAAoUKb/1436v/8Jlz+4S/9Ol4xPV6qHwqH/AQAAoECZ/l8v6v+bPt1pr1H9JrzeKl2pRoRD/wMAAECBMv2/ftT/A4b/a+hZBy+04Y3pSvVwOPQ/AAAAFCjT/xtE/X/zsmvvfkWrkb0uT1eqkeHQ/wAAAFCgTP9vGPX/wPpqXd75sftda6cr1SPh0P8AAABQoEz/t4j6/5ZxH17efN7o7xumK9Wj4dD/AAAAUKBM/28U9f+g1Zt1e2adnk3uTleqUeHQ/wAAAFCgTP9vHPX/rfd/0m/v3ad1fDJdqR4Lh/4HAACAAmX6f5Oo/28b9dXIVW9tNma5dKV6PBz6HwAAAAqU6f9No/6/vXHz/X647IrZg9KVanQ49D8AAAAUKNP/m0X9f8eJ77Q5tOMeS7dJV6onwqH/AQAAoECZ/t886v/Bbzf98P7W3+y+cbpSLfg7AfQ/AAAAFCjT/y2j/r/z5U3n/fTlBvf1S1eqp8Kh/wEAAKBAmf5vFfX/XRf+e+UGDd9+f8t0pXo6HPofAAAACpTp/y2i/h/Se7G9Vpu+7Na3pCvVmHDofwAAAChQpv+3jPr/7pcmP/j9+HHHXZyuVM+E4//X/w3/5x4ZAAAA+A9l+n+rqP/vmfrbNWOOu/CSNdOVamw4vP8HAACAAmX6f+uo/+89ZbOT9uk14/WR6Ur1bDj0PwAAABQo0/+to/6/b/X+l/e7p/mGTdKValw49D8AAAAUKNP/20T9f//9h3S58IXre62crlTPhUP/AwAAQIEy/d8m6v8HRp22+/qrtb1rTLpSjQ+H/gcAAIACZfp/26j/hzYeNnTaOtc2bJmuVM+HQ/8DAABAgTL9v13U/8OGn7zfwv/9SjUhHPofAAAACpTp/+2j/h++7IiRj936xZNXpCvVC+HQ/wAAAFCgTP/vEPX/g/WB/b7afc0O66Qr1cRw6H8AAAAoUKb/d4z6/6FxB3Zr2nH8asPTlerFcOh/AAAAKFCm/3eK+n/Ew3vsd+9lvf5pnK5UL4VD/wMAAECBMv2/c9T/D69w8cgDv5zy0CrpSvVyOPQ/AAAAFCjT/7tE/T+y4TP9Fmm99D7PpSvVK+HQ/wAAAFCgTP/vGvX/I2Mu7DZ3+qzWi6Qr1aRw6H8AAAAoUKb/d4v6/9ELjlr6x4YtPnogXaleDYf+BwAAgAJl+n/3qP9HTRj08yrH9b1uVLpSvRYO/Q8AAAAFyvT/HlH/P/bePW/vNX63U/+bxq9eD4f+BwAAgAJl+n/PqP8f795ls7H3fLTOXelKNTkc+h8AAAAKlOn/vaL+H73yy9N79Vrxxe3TleqNcOh/AAAAKFCm//eO+v+Juxfa/rrVnrxhw3SlejMc+h8AAAAKlOn/faL+f/KJNqt89MI5Pa5MV6q3wqH/AQAAoECZ/t836v+nlpz/94bvjmj4SLpSTQmH/gcAAIACZfp/v6j/n354h6aPLtrtX4unK9XUcOh/AAAAKFCm//eP+n/MCr/P3fXEiU82C785/59//gln9XY49D8AAAAUKNP/B0T9/0zDF95fYXSDDk+nK9U74dD/AAAAUKBM/7eN+n/smEW2+HL4Xattka5U74ZD/wMAAECBMv1/YNT/z348d5dOPY/6Z2C6Ur0XDv0PAAAABcr0/0FR/487ZvMhjzSd/VCfdKV6///zj8bV//jzAgAAAP+5TP+3i/r/ubMa9/nz1c33WStdqT4Ih/f/AAAAUKBM/x8c9f/4N984btFNXmt9a7pSfRgO/Q8AAAAFyvT/IVH/P3/zpyceOafxR9umK9VH4dD/AAAAUKBM/7eP+n/CpitfPbL//ddtlK5UH4dD/wMAAECBMv1/aNT/L2y7xkN/HNDl1OvTlWpaOPQ/AAAAFCjT/x2i/p/Y5+u9Gx08b50G6Ur1STj0PwAAABQo0/8do/5/8dfdH5jcr/WLQ9KV6tNw6H8AAAAoUKb/D4v6/6W2l+62448Db3gqXak+C4f+BwAAgAJl+v/wqP9fPmLM8ae06tCjabpSTQ+H/gcAAIACZfr/iKj/X5nR+4pBLzQ/a166Un0eDv0PAAAABcr0f6eo/yftOu7UBqvNuPmIdKWaEY7/tP+r/4NHBgAAAP5Dmf4/Mur/V+ddcP1PvdpO2C9dqf4VDu//AQAAoECZ/j8q6v/Xvt/5kfvvub75D+lK9UU49D8AAAAUKNP/R0f9/3qHK/Y/dPyyJ3VOV6ovw6H/AQAAoECZ/j8m6v/JzT5otNxxb1/5fLpSzQyH/gcAAIACZfr/2Kj/3xiy9LdfN7zwkw/SleqrcOh/AAAAKFCm/ztH/f/m6BavPT593PY905Xq63DofwAAAChQpv+Pi/r/rSW+X3+n1nu0fStdqb4Jh/4HAACAAmX6v0vU/1Mmv3VIxy+vGNktXan+HQ79DwAAAAXK9P/xUf9PPbvRkw9dtsEf56cr1axw6H8AAAAoUKb/u0b9/3bnVrf80/GblT9MV6pvw6H/AQAAoECZ/j8h6v93Pvy1Z5Pde7Y7JF2pvguH/gcAAIACZfr/xKj/3x3R4bZXbx39+G/pSvV9OPQ/AAAAFCjT/ydF/f/e8jee22Zes69npCvVD+HQ/wAAAFCgTP+fHPX/+w0eOuy0daZVu6Yr1Y/h0P8AAABQoEz/nxL1/wdPdxs7uNVCZ3VJV6rZ4dD/AAAAUKBM/58a9f+HzR45sP7jhJtfTleqn8Kh/wEAAKBAmf7vFvX/R0NOeuyXft0nTE1Xqjnh0P8AAABQoEz/nxb1/8ejD75pyMEjm5+ZrlQ/h0P/AwAAQIEy/d896v9pS9zc4+ADWp30T7pS/RIO/Q8AAAAFyvT/6VH/f9Kta/3b/nOuPDJdqX4Nh/4HAACAAmX6v0fU/59+MGTminM6fbJPulL9Fg79DwAAAAXK9P8ZUf9/NvG2F/fbZPD236Qr1dxw6H8AAAAoUKb/z4z6f/p5ndYd/2rXtu3Sler3cOh/AAAAKFCm/8+K+v/z88f3vLfp0JGz05VqXjj0PwAAABQo0/89o/6f8fx5txzYs9EfX6cr1R/h0P8AAABQoEz/nx31/7/e3fXJRYZPWnn3dKX6Mxz6HwAAAAqU6f9zov7/4rS+h8wd3b7dq+lKNT8c+h8AAAAK9N/2/3IL7tq5Uf9/2Wy9sS1PHPD4KelK9Vc49D8AAAAUKPP+/7yo/2cOmXHYhEXbfH1hulL9HQ79DwAAAAXK9P/5Uf9/NXrauTe/+2f1WbpS/RMO/Q8AAAAFyvT/BVH/f73Eqrd13W7pjz9OV+oLDv0PAAAABcr0/4VR/38zYnqP+Z9P2fbcdKUe/oz+BwAAgBJl+v+iqP//vfxKNy15ca/u3dOVeoNw6H8AAAAoUKb/e0X9P6vBWo8d0Wn89W+kK/WG4dD/AAAAUKBM//eO+v/bp2ceOGznNV/ZOV2pLxIO/Q8AAAAFyvT/xVH/f7dM72d+G/zFul+kK/VaOPQ/AAAAFCjT/32i/v9+2JiOtb/2P+OXdKVehUP/AwAAQIEy/X9J1P8/PHvpeQetce1Nh6Yr9QVfAKj/AQAAoECZ/r806v8fq91vv+flc2Z8l67UF3xe/wMAAECBMv1/WdT/s1884etnmj250AHpSr1ROPQ/AAAAFCjT/32j/v+p1921vc9f8ZDD0pX6YuHQ/wAAAFCgTP9fHvX/nJNvX3vVBz564s90pd44HPofAAAACpTp/yui/v95ypEv/zB2t/nnpCv1JuHQ/wAAAFCgTP9fGfX/L/f9s0GLE/qu+l66Ul88HPofAAAACpTp/6ui/v91tW1e/7DeYu8X0pX6EuHQ/wAAAFCgTP9fHfX/b4s1nHXttFnDjklX6kuGQ/8DAABAgTL9f03U/3MffWnR3m9s/vGe6Up9qXDofwAAAChQpv+vjfr/92XqX8xceva2M9OV+tLh0P8AAABQoEz/Xxf1/7xhExZevsdR3eekK/VlwqH/AQAAoECZ/r8+6v8/nv2z+S4P33X9gelKfUH3638AAAAoUKb/+0X9/2e1/QujHm3wyifpSn25cOh/AAAAKFCm/2+I+n/+8W+ObnTqxHV7pSv1puHQ/wAAAFCgTP/fGPX/X9MXPfSPJt3OOCldqS8fDv0PAAAABcr0f/+o//9+veU5I6eMuOn1dKW+Qjj0PwAAABQo0/83Rf3/T49fbj5y6w4zeqQr9RXDof8BAACgQJn+H/Bf/V9f6MCj/trx24ELvZOu1FcKh/4HAACAAmX6/+ao/xeeNWj1yde0PuTFdKXeLBz6HwAAAAqU6f+BUf83+PueHQZ1mPdE13SlvnI4/oP+r/+fPjIAAADwH8r0/y1R/zfcrcsnp+zTZf6sdKW+Sji8/wcAAIACZfp/UNT/i2z2cquRA+9fda90pb5qOPQ/AAAAFCjT/7dG/V+7eqGpR/7WeO+j05X6auHQ/wAAAFCgTP/fFvV/dWeb2Y02fG3YX+lKffVw6H8AAAAoUKb/b4/6v772/GX+mDbu4aXTlfqCz+h/AAAAKFCm/++I+n/Ry3eYd0z9wv0eT1fqa4RD/wMAAECBMv0/OOr/Rtv9vvJNJ7y94n3pSn3NcOh/AAAAKFCm/++M+n+x9V9o88rYZedV6Up9rXDofwAAAChQpv/vivq/cf9FPtzigesfvTpdqa8dDv0PAAAABcr0/5Co/5tMP+SOs89ve9D66Up9nXDofwAAAChQpv/vjvp/8eP79+rbbEZtx3Slvm449D8AAAAUKNP/90T9v0SPYUdPfbn5l4PTlfp64dD/AAAAUKBM/98b9f+Sr582bs01pg1cL12pL/iZAP0PAAAABcr0/31R/y/VaL8Jbf5qdk7fdKW+QTj0PwAAABQo0//3R/2/9ONXr/Xq4NFr9U9X6huGQ/8DAABAgTL9/0DU/8sMfbTB4J17vrBZulJvEQ79DwAAAAXK9P/QqP+XXfXsz0/r9M01z6Yr9Y3Cof8BAACgQJn+Hxb1/3InvbvkQxdvcPJq6Up943DofwAAAChQpv+HR/3f9J1lvu/4+RU7NEpX6puEQ/8DAABAgTL9/2DU/8u/sv7kJtvtMf2hdKW+aTj0PwAAABQo0/8PRf2/wkU/bPLPhoMfvjZdqS/4OwH1PwAAABQo0/8jov5fcfpGLx3/W6f9NklX6puHQ/8DAABAgTL9/3DU/ysdP2u9gQPnrLhNulJvGQ79DwAAAAXK9P/IqP+b9ZhSvbBPq3m3pyv1VuHQ/wAAAFCgTP8/EvX/yq8v/+XmHUY+ukK6Ut8iHPofAAAACpTp/0ej/l9l2Mz+V13T/aAn0pX6luHQ/wAAAFCgTP+Pivp/1WXWOv38byfU7klX6luFQ/8DAABAgTL9/1jU/6tVKx20ydYLffnfrNS3Dof+BwAAgAJl+v/xqP9Xf3b6459O+XPgM+lKvXU49D8AAAAUKNP/o6P+bz5+u88nNGlzzorpSn3BdwLqfwAAAChQpv+fiPp/jdofDVqeOmCtJdOVeptw6H8AAAAoUKb/n4z6f82ln1+r66PtX3g4XalvGw79DwAAAAXK9P9TUf+v9VA14eaHJ12zRrpS3y4c+h8AAAAKlOn/p6P+X3v6fZsc2KPRyZemK/Xtw6H/AQAAoECZ/h8T9f86x3eefO/SQ3cYkK7UdwiH/gcAAIACZfr/maj/1+3R8fu5b3SdvlW6Ut8xHPofAAAACpTp/7FR/6/3+p1LLvLb/buOS1fqO4VD/wMAAECBMv3/bNT/65/U6cs7N+xyz+rpSn3ncOh/AAAAKFCm/8dF/b/BO7dV3fZ57bdF05X6LuHQ/wAAAFCgTP8/F/X/hq8MWW+bgY1XeDBdqe8aDv0PAAAABcr0//io/1tc1PWl164ZeNS66Up9t3DofwAAAChQpv+fj/p/o26nf3lhhw7jL0tX6ruHQ/8DAABAgTL9PyHq/40/eLLqt/W8b29KV+p7hEP/AwAAQIEy/f9C1P+bTLx2vWnftl5s83Slvmc4/r/9f8H/6CMDAAAA/6FM/0+M+n/T8/Z5af0mE8+9Jl2p7xUO7/8BAACgQJn+fzHq/83GnjhmsykNbt0gXanvHQ79DwAAAAXK9P9LUf9vvvDIIyY+OuKNHdKV+j7h0P8AAABQoEz/vxz1f8umA86/5dRuG92RrtT3DYf+BwAAgAJl+v+VqP9bPdJuUJces49fKl2p7xcO/Q8AAAAFyvT/pKj/t5g2+5y7H978ssfSlfr+4dD/AAAAUKBM/78a9f+Wx251c7s37ppyf7pSPyAc+h8AAAAKlOn/16L+36pnk9HV0kdtXk9X6m3Dof8BAACgQJn+fz3q/63feu3QX+t9d22ertQPDIf+BwAAgAJl+n9y1P+tuy06rvu03e65JF2pHxQO/Q8AAAAFyvT/G1H/b/PBm0ffMXbWbzenK/V24dD/AAAAUKBM/78Z9X+bib/0mnRCixW2TlfqB4dD/wMAAECBMv3/VtT/257X8o5tz3/yqLHpSv2QcOh/AAAAKFCm/6dE/b9dswmzLn3gnPErpSv19uHQ/wAAAFCgTP9Pjfp/+yH1RU9/+aNvl0hX6oeGQ/8DAABAgTL9/3bU/zuM3n6DtZutuNiIdKXeIRz/1/u/9n/8yAAAAMB/KNP/70T9v+MSf77+wV9fnLt8ulLvGA7v/wEAAKBAmf5/N+r/ndp/+/wla6x56+h0pX5YOPQ/AAAAFCjT/+9F/b/zjxuv2WPna9+4N12pHx4O/Q8AAAAFyvT/+1H/7/LnCg3XGbz/RgunK/UjwqH/AQAAoECZ/v8g6v9dd5464/2Lpxx/XbpS7xQO/Q8AAAAFyvT/h1H/77blmUss22npyzZNV+pHhkP/AwAAQIEy/f9R1P+793viu8+3Gz+ldbpSPyoc+h8AAAAKlOn/j6P+3+P2fm+M/rzX5relK/Wjw6H/AQAAoECZ/p8W9f+ea+y96Z5LN9ri7HSlfkw49D8AAAAUKNP/n0T9v9el17z46RuT3ns3XakfGw79DwAAAAXK9P+nUf/vvc3+627ycNc+E9OVeudw6H8AAAAoUKb/P4v6f5+Nz6mf32PoMcemK/XjwqH/AQAAoECZ/p8e9f++t4yaedWpbTb4Pl2pdwmH/gcAAIACZfr/86j/9/t4xt2vP/rnpLbpSv34cOh/AAAAKFCm/2dE/b//Mevt2npK+zs6piv1ruHQ/wAAAFCgTP//K+r/A85atfOpTQZc9MeCj/7Xn6ufEA79DwAAAAXK9P8XUf+3fXPaxXd9233JndKV+onh0P8AAABQoEz/fxn1/4FN5s2/YuuRP/wrXamfFA79DwAAAAXK9P/MqP8PenLH1c7qsNAzv6Yr9ZPDof8BAACgQJn+/yrq/3b31HZsfs2EIzqkK/VTwqH/AQAAoECZ/v866v+DV5z46TsDOy0zLV2pnxoO/Q8AAAAFyvT/N1H/H3LqsS2X32fwz+elK/Vu4dD/AAAAUKBM//876v/27w+dMnPDVkNPS1fqC35N/wMAAECBMv0/K+r/Q18Y/NOo3+bsMTldqXcPh/4HAACAAmX6/9uo/zuce8Syu3y+wRbfpiv108Oh/wEAAKBAmf7/Lur/jh/f+vuH233z3t7pSr1HOPQ/AAAAFCjT/99H/b9Qg6Obtei0R5+j0pX6GeHQ/wAAAFCgTP//EPX/4Wcdv23vi684Zn66Uj8zHPofAAAACpTp/x+j/j/izXs/unZwsw1OT1fqZ4VD/wMAAECBMv0/O+r/Tg8f+MgWO0+b9Ha6Uu8ZDv0PAAAABcr0/09R/x+5wsD9X1mj5x0vpSv1s8Oh/wEAAKBAmf6fE/X/UQ1HnHrTX6MvOiFdqZ8TDv0PAAAABcr0/89R/x895uTrj2nWdslP05X6ueHQ/wAAAFCgTP//EvX/Mc9c9emFL1//Q+90pX5eOPQ/AAAAFCjT/79G/X/sQm137PdA82dOTFfq54dD/wMAAECBMv3/W9T/nZfrudq082cc8Vq6Ur8gHPofAAAACpTp/7lR/x838vH5659w4TJ7pCv1C8Oh/wEAAKBAmf7/Per/Lh8vvez3Y8f9/GW6Ur8oHPofAAAACpTp/3lR/x9/zAc/rTZt2aE/pyv1XuHQ/wAAAFCgTP//EfV/17O+n7JP/e09DkpX6gu+E0D/AwAAQIEy/f9n1P8nvNmi5ZgRA+6cma7ULw6H/gcAAIACZfp/ftT/J57674/WOr197z3TlXqfcOh/AAAAKFCm//+K+v+k9zfddspSf7Y4MF2pXxIO/Q8AAAAFyvT/31H/n/xC02aXTW7z2px0pX5pOPQ/AAAAFCjT//9E/X/Kue/8fs7UoZf2Slfql4VD/wMAAECB/vf9Xy0U9f+prd96a9/Fu3b+JF2p9w2H/gcAAIACZfp/4aj/u13SaOOnu03a6vV0pX55OPQ/AAAAFCjT/w2i/j9tYKsm341q9MFJ6Ur9inDofwAAAChQpv8bRv3ffaNff1j90Dn3v5Ou1K8Mh/4HAACAAmX6f5Go/0//4YP+9atb7dYjXalfFQ79DwAAAAXK9H8t6v8ehyx9+i+zBi/VNV2pXx0O/Q8AAAAFyvR/FfX/GTu1OGjIVp1+ejFdqV8TDv0PAAAABcr0fz3q/zP/+P7xg1tMeHqvdKV+bTj0PwAAABQo0/+LRv1/1vVtOw2cu9Bhs9KV+nXh0P8AAABQoEz/N4r6v+cWVz13/C0jF/8rXalfHw79DwAAAAXK9P9i/9X/Cy/U/PG7Nt+3+3dHpyv1fuHQ/wAAAFCgTP83jt7/n3Nbz4teOHL0neemK/UbwqH/AQAAoECZ/m8S9f+5rZ8a2LFPz94fpyv1G8Oh/wEAAKBAmf5fPOr/8y7pcdZDM6a1eCNdqfcPh/4HAACAAmX6f4mo/88fuG/7f7Zv9lr3dKV+Uzj0PwAAABQo0/9LRv1/wUbXPdWk+RWXfpGu1AeEQ/8DAABAgTL9v1TU/xe27TVh9Pw9Ou+crtRvDof+B+D/xd59h1lVXwsfPxBlnwkBuzFiQrGXIEoudgVD1IjRNLGDFdQIVkRFRRSs2BLsEDGKLcZeUEFRJNaoYMeKFbHHLqjvoy5wDxuyTcRkP7/38/lnrRnPLOb43Bv8cuAAAEAFlfT/Qrn+P+z90UtvPHxqp+7FK9npseh/AAAAqKCS/l841/+HTzmy6SKdV3zsveKV7IxY9D8AAABUUEn/L5Lr/4HbdX3uuYsmjdq8eCU7Mxb9DwAAABVU0v+L5vr/iKuu3m75AYt0fb14JTsrFv0PAAAAFVTS/4vl+n9Q8wNufLjV2AWnF69kZ8ei/wEAAKCCSvp/8Vz/H9l68zOPuPPQd7YpXsnOiUX/AwAAQAWV9P8Pc/1/1KhjD9l/8pTRjxSvZMNj0f8AAABQQSX9v0Su/wdPXOm065u12aZ/8Uo2Ihb9DwAAABVU0v8/yvX/kD+83v8XvU5qsWPxSvbnWPQ/AAAAVFBJ/y+Z6/+jBz7afaGbtnj99uKV7NxY9D8AAABUUEn/t8r1/zETFrz2+W5rvtq+eCUbGYv+BwAAgAoq6f+lcv1/bO9JPQ864+P60OKV7LxY9D8AAABUUEn//zjX/8c9vejYEz7cavtzileyv8Si/wEAAKCCSvr/J7n+P/7u9sOfXfn0sWsVr2Tnx6L/AQAAoIJK+r91rv9P2H/q4at0av7edcUr2QWx6H8AAACooJL+b5Pr/6Hrj16777R7Fvth8Uo2Khb9DwAAABX0r/v/84G1r/v/xMGHPz7i+F27zOFKdmEs+h8AAAAqqOT1/3a51/9POqXrx3d3HzXyL8Ur2UWx6H8AAACooJL+XzrX/yevdGSrta/qMWmJ4pXs4lj0PwAAAFRQSf8vk+v/U6aO7N2uz7kdbypeyS6JRf8DAABABZX0/7K5/j/1t72GTGyxWu+/Fa9kl8ai/wEAAKCCSvp/uVz//3Gj7S8YMvHtoxcoXsn+Gov+BwAAgAoq6f/lc/3/pxlnb3TgfX0eOKp4JbssFv0PAAAAFVTS/yvk+n/YsWtecs2Cl7VvW7ySzfwzAfofAAAAKqik/1fM9f9pq3/WrfM+TQ/pVLySXR6L/gcAAIAKKun/lXL9f/pyd+y56GXjzxlWvJJdEYv+BwAAgAoq6f+Vc/1/xvCmx75y0xKvXlO8kl0Zi/4HAACACirp/1Vy/X/m+uN2OazXE/WFileyq2LR/wAAAFBBJf3/01z/nzW42aCTmvXfvlnxSnZ1LPofAAAAKqik/9vn+v/sU9YdOXny9WMvKF7JZv6ZAP0PAAAAFVTS/6vm+v+clT7ZcMU7V35vheKV7NpY9D8AAABUUEn/d8j1//BfNvzs1FbTFju+eCW7Lhb9DwAAABVU0v+r5fp/xLsPPLrzgK5dRhSvZNfHov8BAACggkr6f/Vc///5lfc/7HTRkJEbFK9kN8Si/wEAAKCCSvq/Y67/z92h42ITOh8+aUjxSjY6Fv0PAAAAFVTS/z/L9f/IHg9u9MTwWzsuX7yS3RiL/gcAAIAKKun//8v1/3kvLn7BSjMW6t2heCW7KRb9DwAAABVU0v+dcv3/l7dXGXJ4mweP/mPxSnZzLPofAAAAKqik/9fI9f/5m07rfeJ6v3rgJ8Ur2ZhY9D8AAABUUEn/r5nr/wvW3+TYTaYMbT+meCUbG4v+BwAAgAoq6f+1cv0/avBJe948qN0hfy1eyW6JRf8DAABABZX0/9q5/r/wlGu7vbXDC+c0FK9kt8ai/wEAAKCCSvp/nVz/X7TSfpcs1atNdmTxSjYuFv0PAAAAFVTS/+vm+v/iY6/c8Oibprzcpngluy0W/Q8AAAAVVNL/6+X6/5LVDxzZb/IWV69RvJLdHov+BwAAgAoq6f/1c/1/6XKbDWrb7KTfnVa8ko2PRf8DAABABZX0/wa5/v9erVab1GqRJX9UvJLdEYv+BwAAgAoq6f/Ouf6/bOjwDXe9c9L0m4tXsgmx6H8AAACooJL+75Lr/7912nbkGRcdesVlxSvZ32PR/wAAAFBBJf2/Ya7/L2+346DxA8Zu3rJ4JbszFv0PAAAAFdS4/4+Yvf9/nuv/K868cJcOwzda99rileyuWPQ/AAAAVFDJ6/9dc/1/5baDW6/Q+ZinFy9eye6ORf8DAABABZX0/y9y/X/Vcxt++mSbFY9rUryS3ROL/gcAAIAKKun/jXL9f/V7Bz118oypu59fvJLdG4v+BwAAgAoq6f+Nc/1/zea3rH/olH5tVy1eye6LRf8DAABABZX0/ya5/r927aUm3rjeteNOLF7J/hGL/gcAAIAKKun/X+b6/7ojJnfcdIclh51dvJLdH4v+BwAAgAoq6f9Nc/1//bDnFv7JoCf7rVm8kj0Qi/4HAACACir2fy3f/91y/X9D++XefuOMWta6eCV7MBb9DwAAABVU8vr/Zrn+Hz30xVb9u9328tjilWxiLPofAAAAKqik/3+V6/8bO7X7ePDKe199afFKNikW/Q8AAAAVVNL/m+f6/6Z2Szz+4IeX/65evJI9FIv+BwAAgAoq6f8tcv1/85nPrL30tI5LDi5eyR6ORf8DAABABZX0/69z/T9m+k83O6fTP6cvV7ySPRKL/gcAAIAKKun/3+T6f2yX1y7fvfv2V6xWvJI9Gov+BwAAgAoq6f/f5vr/li0nnrzu8SM2/1PxSvZYLPofAAAAKqik/3+X6/9b3/phnwf69Fp3xeKV7PFY9D8AAABUUEn//z7X/+OuzXqdfdVFT59QvJI9EYv+BwAAgAoq6f8tc/1/W8vbBu8xseG44cUr2eRY9D8AAABUUEn/N6k1mdX/ty85fdR6Le7aff3ilezJWPQ/AAAAVFBJ/2+Ve/1//Mj1Nr5/wS3bXl28kj0Vi/4HAACACirp/61z/X/Hw+de3Py+YeMWLF7Jno5F/wMAAEAFlfT/Nrn+n9B3m00/umztYVnxSvZMLPofAAAAKqik/7fN9f/fD9nlD5ftM73fqOKV7NlY9D8AAABU0Bz7f/6Ze7Ptcv1/57hRx/UcNHSfXxavZM/Fov8BAACggkpe/98+1/937dx75wk7/OrU14pXsimx6H8AAACooJL+3yHX/3c/ft4RndZ7YcKM4pXs+Vj0PwAAAFRQSf/3yPX/Pfedc97OU9ot06N4JXshFv0PAAAAFVTS/z1z/X/vgTv8/NQZt/aZVLySvRiL/gcAAIAKKun/HXP9f986LbKH2hw+dJ/ileylWPQ/AAAAVFBJ/++U6/9/DLr3pTadH3y8d/FK9nIs+h8AAAAqqKT/d871//2nvXPHAcMXWmtC8Ur2Siz6HwAAACqopP93yfX/A6uusdwxA6Z1G1i8kk2NRf8DAABABZX0/665/n/wjcW2PfeilS99unglezUW/Q8AAAAVVNL/u+X6f+JWD43e684hn91TvJJNi2Wu/d903n3LAAAAwL+ppP975fp/0s9fPWvNVl1b7168kr0Wi9f/AQAAoIJK+r93rv8f+njVAfc2e6L7i8Ur2eux6H8AAACooJL+3z3X/w+feOKwlpOXuGGj4pXsjVj0PwAAAFRQSf/vkev/R9boduCnN13/wm+KV7I3Y9H/AAAAUEEl/b9nrv8fXXrfrS7p1b/pu8Ur2Vux6H8AAACooJL+/0Ou/x8764brtt3nsn0eLl7J3o5F/wMAAEAFlfT/Xrn+f3ydfj3GXdbn1AOLV7J3YtH/AAAAUEEl/d8n1/9PDLpmTMf7xk/YqXgl+2cs+h8AAAAqqKT/++b6f/Jpx43ovWDTZcYXr2Qz3xNA/wMAAEAFlfT/3rn+f3LVLQYOa3Funy2KV7L3YtH/AAAAUEEl/b9Prv+f2mxMwyoTewx9o3glez8W/Q8AAAAVVNL/++b6/+kPDnnt2avefvyT4pXsg1j0PwAAAFRQSf/vl+v/Z57vfM8JfVZba+vilezDWPQ/AAAAVFBJ/++f6/9ntz56hYOOv6fb88Ur2Uex6H8AAACooJL+PyDX/89tt9uAXbs3v7Rz8Ur2cSz6HwAAACqopP/75fp/ypTzzzqj06jPtipeyWa+J4D+BwAAgAoq6f8Dc/3//PtnjR4/bdfW7xevZNNj0f8AAABQQSX93z/X/y9s0XPbDh9+3P3g4pVsRiz6HwAAACqopP8PyvX/i+t8et37K695w5PFK9mnseh/AAAAqKCS/j841/8vDVpnq2bdTn/hvuKV7LNY9D8AAABUUEn/H5Lr/5dPa3Lgb8/Yqmnf4pXs81j0PwAAAFRQSf8PyPX/K6veOey8l5oM2KZ4ZdaX638AAACooJL+PzTX/1NPnH/gOmuNO3t68Uo9HqP/AQAAoIpK+v+wXP+/usb4EXdt0/f+14tX6k1j0f8AAABQQSX9f3iu/6ct/fGY4UOuWHXz4pX692LR/wAAAFBBJf0/MNf/r521QY+9z1y91+3FK/X5YtH/AAAAUEEl/X9Erv9f7zjq2tW6vnvMjsUr9flj0f8AAABQQSX9PyjX/28ct0v325fZ4aH+xSv1ZrHofwAAAKigkv4/Mtf/b47Ypv/pHw1f/ZHilXoWi/4HAACACirp/6Ny/f/W8ueetlvr3p33Ll6pz/x6/Q8AAAAVVNL/g3P9//ZLY189bPyF5/2jeKXeEIv+BwAAgAoq6f8huf5/p+eA5iedX39/cvFK/fux6H8AAACooJL+PzrX///s1mWlyQPvXvSg4pV681j0PwAAAFRQSf8fk+v/d9855q4Vd/79Du8Vr9R/EIv+BwAAgAoq6f9jc/3/3pBll3/9ltPGdC9eqbeIRf8DAABABZX0/3G5/n9/gxcmtH5mnaldilfqLWPR/wAAAFBBJf1/fK7/P1j5iRe7Nf2k4YXilfoCseh/AAAAqKCS/j8h1/8fntq62ehF2w64o3ilvmAs+h8AAAAqqKT/h+b6/6OOT7/R7q7nzu5VvFJfKBb9DwAAABVU0v8n5vr/4+NaLTDx4s3v37d4pb5wLPofAAAAKqik/0/K9f8nI9q2H3LAyas+VLxSn9n9+h8AAAAqqKT/T871//TlX7nvwD0W7tWzeKW+aCz6HwAAACro6/7fID7TqP9PyfX/jK6L3nT/dQ8d82nxSn2xWPQ/AAAAVFDJ6/+n5vr/088mbb3eI4c9NK14pb54LPofAAAAKqik//+Y6//Ppk09eI+GMatvUrxS/2Es+h8AAAAqqKT//5Tr/89/3f6cs9/cuPM/i1fqS8Si/wEAAKCCov/ny33mlFqt9r34oOlXo/6jWq3LG7kvi8cvMLP7v/w1gl0Ofee9Oc2vfXEnP7/8IZrUavNdOdu3Vf/2z2yOZj2flg8/v2GtQ61J/pl/of1cHn96ffGlah1qTQuPb/wF8e+tvmSPGT8+qtah1mz2x++5R99ddzto1ofxT+utNun75uq1DrX67I/fZ7f9evbde9fd4sP499LQtuvuC71a61Cbb/Z/U3v07dcn92FDjHZLvrXMSV9+P7M9fv8Ddjqg1/6zPvx+PH7pqw4e0W9Oj9+v8fffPB6/zF5LLfBGi7tq88/++H377X3ATjUAAAD+1+bS/zPN6tlarcu43Oeji//t/l+y8azNrf+/9+2e1VzNej7fUf/H75WoLTKj/y9eazm6Vp+9h/fcu99+fXfaq8M8eC4AAADwjZX0/6zXp+dR/7dqPGtz6//5v92zmqtZz+c76v/4vutLTfn0mAdra9aaz+n1+Z777dS3926NfgmgWXzdj5uPeeng2pq1lnN+nb7nLrs3/tIsvu4nh33wm3NbblJrMcfX3wtfBgAAwP9vSvp/Vs/WaoOOyH9ZzAXzH3+D/l+q8axF/wMAAADfpZL+n/W69Fz6/999/f/HjWdN/wMAAMB/QUn/z/r95XPs/wVnffgN+7+hzdf3Zmra+OZ3qt42ZruYS8dcJuayMZeLuXzMFWKuGHOlmCvHXCXmT2PGnwqorxozfut9fbWYq8fsGPNnMf8vZqeYa8RcM+ZaMdeOuU7MdWOuF3P9mBvE7ByzS8wNY/48ZteYv4i5UcyNY8bf+Vj/ZcxNY3aLuVnMX8XcPOYWMX8d8zcxfxvzdzF/H3PLmN1jbhVz65jbxNw25nYxt4+5Q8weMXvG3DFmvBVhfeeYu8TcNWa8z2K9V8zeMXePuUfMPWP+IeZeMeO9F+t9Y+4dc5+Y+8bcL2a882L9gJj9Yh4Ys3/MeMfF+sExD4k5IOahMQ+LeXjMgTHj/3frg2IeGfOomINjDol5dMxjYh4b87iYx8c8IebQmCfGPCnmyTHjf1Pqp8b8Y8w/xRwW87SYp8c8I+aZMc+KeXbMc2IOjzki5p9jnhtzZMzzYv4l5vkxL4g5KuaFMS+KeXHMS2JeGvOvMeN/u+p/i3l5zCtixp9vql8V8+qY18S8NuZ1Ma+PeUPM0TFvjHlTzJtjjok5NuYtMW+NGX92q35bzNtjjo95R8wJMf8e886Yd8W8O+Y9Me+NeV/Mf8S8P+YDMR+MOTHmpJgPxXw45iMxH435WMzHYz4Rc3LMJ2M+FfPpmM/EfDbmczGnxHw+5gsxX4z5UsyXY74Sc2rMV2NOi/lazNdjxnvk1t+M+VbMt2O+EzP+Dp36uzHj58n6+zE/iPlhzI9ifhzzk5jTY86I+WnMz2J+/tWMt4GtNcT/nTbET7oN8X44DfHzf0P8fr+G+HX/hvj5v2Hm+87OfD/Zme8TO/P9X38Qs0XMljEXiBn/pdCwUMyFY8bfF9SwaMzFYi4eM/5e4YZ4naEh3je4Id4/qCH+HGFD/H7ChnhdoSH++6Khdczc32kEAAAAAADpi9f/m+Y+ddfXa7PH5vxefPW2tVr2VK3W5MOxI67e6Nv8+Ft+S59/V39TAAAAACQk+r/l15+Z/6D/5fcDAAAAzHv6HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9+h8AAADSp/8BAAAgffofAAAA0qf/AQAAIH36HwAAANKn/wEAACB9pf3f/L//PQEAAADzltf/AQAAIH1l/b/1Av+DbwoAAACYp7z+DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQPv0PAAAA6dP/AAAAkD79DwAAAOnT/wAAAJA+/Q8AAADp0/8AAACQvuj/+XKfOSX3j+tfjYa2tdqgI/Jf1viff/XxLoe+896c5te+uJOfX2g681at2bPz4hn9Sy2+8x8BAAAAKqik/xtitJtL/y+R//gb9H+7xrPWqP+/ewtM/Wo2eyw+8YP/3o8NAAAA/zv/uv+bfP+r2bD0XPp/XP7jb9D/Szeetej/+Tabd8/oX1o4971/YZFarf6DWq3p9+bN+XqbxvfrbWu17KlarcmH8+Y+AAAA/GdKXv9v/tVoWGYu/X9l/uNv0P/LNJ616P/5n5rb99frP3lS31yTbear/77HwFptx61afzmnvpR9OWc5cp0bL21y3axfn5j5uOcWa934cf+duwAAAPAfKen/+P3xDcvWal3eyH2+6VdjgX/39/8v23jO/Nr5rpzt22r6rZ7U3M16Pi0ffn7DWodak/wz/0L7uTz+9PriS7WcWmtaeHz77+g7BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/8cOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduCABAAAAEDQ/9ftCBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5goAAP//DpTntA==") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 949.47411ms ago: executing program 5 (id=858): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x1}, 0xe) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ppoll(&(0x7f00000000c0)=[{r2, 0x1007}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 820.914545ms ago: executing program 1 (id=859): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x200}) 728.892856ms ago: executing program 4 (id=860): syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @random="49513f070507", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\\\a\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc}}}}}}, 0x0) 140.383234ms ago: executing program 4 (id=861): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x80000) 0s ago: executing program 5 (id=862): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x840) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 048][ T4447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.841719][ T4447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.915100][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.936589][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.958790][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.998164][ T4882] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.015229][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.034711][ T4882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.063987][ T4882] usb 2-1: Product: syz [ 126.073920][ T4882] usb 2-1: Manufacturer: syz [ 126.084054][ T4882] usb 2-1: SerialNumber: syz [ 126.118048][ T4401] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 126.143059][ T5632] loop5: detected capacity change from 0 to 32768 [ 126.212388][ T5632] XFS (loop5): Mounting V5 Filesystem [ 126.248954][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 126.320556][ T5632] XFS (loop5): Ending clean mount [ 126.336961][ T5632] XFS (loop5): Quotacheck needed: Please wait. [ 126.416025][ T5632] XFS (loop5): Quotacheck: Done. [ 126.416239][ T5666] loop6: detected capacity change from 0 to 4096 [ 126.437520][ T26] audit: type=1804 audit(1730390931.105:31): pid=5632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.239" name="/newroot/25/file0/bus" dev="loop5" ino=9290 res=1 errno=0 [ 126.492273][ T26] audit: type=1804 audit(1730390931.165:32): pid=5632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.239" name="/newroot/25/file0/bus" dev="loop5" ino=9290 res=1 errno=0 [ 126.514681][ T4401] usb 5-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 126.525930][ T5669] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.547976][ T4401] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.586206][ T4449] XFS (loop5): Unmounting Filesystem [ 126.616159][ T4882] usb 2-1: USB disconnect, device number 4 [ 126.661007][ T4401] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 126.662097][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.696355][ T4401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 126.704982][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.729773][ T4401] usb 5-1: SerialNumber: syz [ 126.755797][ T5666] syz.6.242 (5666) used greatest stack depth: 18800 bytes left [ 126.818431][ T7] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 126.830524][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 126.847735][ T7] usb 4-1: SerialNumber: syz [ 127.012158][ T5676] hub 9-0:1.0: USB hub found [ 127.017188][ T5676] hub 9-0:1.0: 1 port detected [ 127.062486][ T4401] usb 5-1: 0:2 : does not exist [ 127.153519][ T4401] usb 5-1: USB disconnect, device number 16 [ 127.237600][ T4658] udevd[4658]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.355734][ T7] usb 4-1: 0:2 : does not exist [ 127.368085][ T7] usb 4-1: unit 5 not found! [ 127.397620][ T7] usb 4-1: USB disconnect, device number 8 [ 127.452267][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.847986][ T4294] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 128.088035][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 128.098024][ T4294] usb 6-1: Using ep0 maxpacket: 32 [ 128.242515][ T4294] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 128.407209][ T5717] loop1: detected capacity change from 0 to 1024 [ 128.434364][ T5717] hfsplus: bad catalog entry type [ 128.448415][ T4294] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 128.460998][ T4294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.484991][ T4294] usb 6-1: Product: syz [ 128.500161][ T4294] usb 6-1: Manufacturer: syz [ 128.519643][ T4294] usb 6-1: SerialNumber: syz [ 128.538534][ T7] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 128.557486][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.578478][ T4357] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 128.591604][ T4294] usb 6-1: config 0 descriptor?? [ 128.613143][ T7] usb 7-1: config 0 descriptor?? [ 128.638643][ T5688] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 128.670109][ T4294] hub 6-1:0.0: bad descriptor, ignoring hub [ 128.676762][ T7] cp210x 7-1:0.0: cp210x converter detected [ 128.682909][ T4294] hub: probe of 6-1:0.0 failed with error -5 [ 128.693613][ T4294] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input5 [ 128.878341][ T7] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 128.886098][ T4357] usb 5-1: Using ep0 maxpacket: 32 [ 128.888817][ T5086] usb 6-1: USB disconnect, device number 12 [ 128.897869][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 128.916420][ T7] cp210x 7-1:0.0: querying part number failed [ 128.935099][ T7] usb 7-1: cp210x converter now attached to ttyUSB0 [ 129.028243][ T4357] usb 5-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 129.059132][ T4357] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.089783][ T4357] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.103089][ T4357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.123916][ T4357] usb 5-1: config 0 descriptor?? [ 129.169333][ T4357] hub 5-1:0.0: bad descriptor, ignoring hub [ 129.203096][ T4357] hub: probe of 5-1:0.0 failed with error -5 [ 129.212085][ T4357] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 129.333393][ T4259] Bluetooth: hci3: command tx timeout [ 130.597221][ T5752] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 130.604718][ T5752] ecryptfs_parse_options: eCryptfs: unrecognized option [] [ 130.612141][ T5752] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.626540][ T5752] Error parsing options; rc = [-22] [ 131.108810][ T5745] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 131.133774][ T5733] loop1: detected capacity change from 0 to 32768 [ 131.159427][ T4357] usb 7-1: USB disconnect, device number 2 [ 131.192596][ T4357] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 131.255671][ T4357] cp210x 7-1:0.0: device disconnected [ 131.343096][ T5733] XFS (loop1): Mounting V5 Filesystem [ 131.418610][ T4401] usb 5-1: USB disconnect, device number 17 [ 131.542886][ T5733] XFS (loop1): Ending clean mount [ 131.591524][ T5733] XFS (loop1): Quotacheck needed: Please wait. [ 132.050896][ T5733] XFS (loop1): Quotacheck: Done. [ 132.106147][ T26] audit: type=1804 audit(1730390936.775:33): pid=5733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.253" name="/newroot/57/file0/bus" dev="loop1" ino=9290 res=1 errno=0 [ 132.250040][ T26] audit: type=1804 audit(1730390936.925:34): pid=5733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.253" name="/newroot/57/file0/bus" dev="loop1" ino=9290 res=1 errno=0 [ 132.346410][ T4252] XFS (loop1): Unmounting Filesystem [ 132.447708][ T4401] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 132.882323][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.896645][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.382459][ T5795] netlink: 36 bytes leftover after parsing attributes in process `syz.3.265'. [ 134.517974][ T4401] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 134.545030][ T4401] usb 7-1: can't read configurations, error -71 [ 134.771069][ T5821] Zero length message leads to an empty skb [ 135.015258][ T5833] loop4: detected capacity change from 0 to 1024 [ 135.027891][ T4401] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 135.428225][ T4401] usb 7-1: Using ep0 maxpacket: 32 [ 135.441865][ T5808] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 135.583620][ T4401] usb 7-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 135.726397][ T4401] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.878064][ T4401] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 135.933231][ T4401] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.019149][ T4401] usb 7-1: config 0 descriptor?? [ 136.089119][ T4401] hub 7-1:0.0: bad descriptor, ignoring hub [ 136.097346][ T4401] hub: probe of 7-1:0.0 failed with error -5 [ 136.111197][ T5843] netlink: 36 bytes leftover after parsing attributes in process `syz.3.278'. [ 136.142743][ T4401] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 136.348986][ T5812] loop5: detected capacity change from 0 to 40427 [ 136.359505][ T5812] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 136.367187][ T5812] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 136.396480][ T5812] F2FS-fs (loop5): invalid crc value [ 136.441768][ T5812] F2FS-fs (loop5): Found nat_bits in checkpoint [ 136.511940][ T5812] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 136.513552][ T5832] loop1: detected capacity change from 0 to 32768 [ 136.523286][ T5812] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 136.565051][ T5832] XFS: attr2 mount option is deprecated. [ 136.595468][ T5832] XFS: ikeep mount option is deprecated. [ 136.607235][ T4449] syz-executor: attempt to access beyond end of device [ 136.607235][ T4449] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.631532][ T5832] XFS: noikeep mount option is deprecated. [ 136.715531][ T5832] XFS (loop1): Mounting V5 Filesystem [ 137.004518][ T5832] XFS (loop1): Ending clean mount [ 137.015168][ T5832] XFS (loop1): Quotacheck needed: Please wait. [ 137.547949][ T5832] XFS (loop1): Quotacheck: Done. [ 137.945464][ T4357] usb 7-1: USB disconnect, device number 4 [ 137.956736][ T5896] loop6: detected capacity change from 0 to 1024 [ 137.999397][ T4252] XFS (loop1): Unmounting Filesystem [ 139.081290][ T5085] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 139.088957][ T4401] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 139.957964][ T5085] usb 4-1: Using ep0 maxpacket: 8 [ 140.067904][ T5895] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 140.078178][ T4401] usb 6-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 140.088984][ T5085] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.108367][ T5085] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 140.117472][ T4401] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.141185][ T5916] loop6: detected capacity change from 0 to 128 [ 140.148963][ T26] audit: type=1804 audit(1730390944.815:35): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.289" name="/newroot/61/bus/bus" dev="overlay" ino=352 res=1 errno=0 [ 140.166521][ T5915] Invalid ELF header magic: != ELF [ 140.258251][ T4401] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.267370][ T4401] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.297979][ T5085] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 140.314179][ T4401] usb 6-1: SerialNumber: syz [ 140.320715][ T5085] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.330214][ T5085] usb 4-1: Product: syz [ 140.357438][ T5085] usb 4-1: Manufacturer: syz [ 140.362356][ T5085] usb 4-1: SerialNumber: syz [ 140.376078][ T5085] usb 4-1: config 0 descriptor?? [ 140.610047][ T4401] usb 6-1: 0:2 : does not exist [ 140.651475][ T4401] usb 6-1: USB disconnect, device number 13 [ 141.856113][ T5940] loop4: detected capacity change from 0 to 1024 [ 141.876077][ T3583] usb 4-1: USB disconnect, device number 9 [ 143.653062][ T7] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 144.335138][ T5975] loop4: detected capacity change from 0 to 512 [ 144.357771][ T5977] netlink: 20 bytes leftover after parsing attributes in process `syz.6.310'. [ 144.373006][ T5975] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 144.383972][ T5977] device netdevsim0 entered promiscuous mode [ 144.403330][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.310'. [ 144.416781][ T5975] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 144.433279][ T5975] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e118, mo2=0002] [ 144.447646][ T5975] System zones: 0-1, 15-15, 18-18, 34-34 [ 144.454528][ T5975] EXT4-fs (loop4): orphan cleanup on readonly fs [ 144.462551][ T5975] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 144.474326][ T5975] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 144.490728][ T5975] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 144.500510][ T5975] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.309: bg 0: block 40: padding at end of block bitmap is not set [ 144.619954][ T5975] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 144.636597][ T5975] EXT4-fs (loop4): 1 truncate cleaned up [ 144.643769][ T5975] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.693099][ T5975] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.309: bad symlink. [ 145.071371][ T4245] EXT4-fs (loop4): unmounting filesystem. [ 145.468218][ T7] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 145.506223][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.555896][ T7] usb 6-1: Product: syz [ 145.562612][ T7] usb 6-1: Manufacturer: syz [ 145.567326][ T7] usb 6-1: SerialNumber: syz [ 145.611045][ T7] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 145.667949][ T5966] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 145.690664][ T5997] device syzkaller0 entered promiscuous mode [ 145.847907][ T4882] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 146.069810][ T6001] loop6: detected capacity change from 0 to 32768 [ 146.118175][ T4882] usb 5-1: Using ep0 maxpacket: 8 [ 146.135014][ T6001] XFS (loop6): Mounting V5 Filesystem [ 146.253501][ T6001] XFS (loop6): Ending clean mount [ 146.258359][ T7] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 146.290368][ T6001] XFS (loop6): Quotacheck needed: Please wait. [ 146.302956][ T3583] usb 6-1: USB disconnect, device number 14 [ 146.455904][ T6001] XFS (loop6): Quotacheck: Done. [ 146.511626][ T26] audit: type=1804 audit(1730390951.185:36): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.316" name="/newroot/16/file0/bus" dev="loop6" ino=9290 res=1 errno=0 [ 146.558179][ T4882] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 146.559600][ T5408] XFS (loop6): Unmounting Filesystem [ 146.568098][ T4882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.581688][ T4882] usb 5-1: Product: syz [ 146.585953][ T4882] usb 5-1: Manufacturer: syz [ 146.597582][ T4882] usb 5-1: SerialNumber: syz [ 146.625845][ T4882] usb 5-1: config 0 descriptor?? [ 146.921905][ T4882] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 147.338357][ T7] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 147.347189][ T7] ath9k_htc: Failed to initialize the device [ 147.364717][ T3583] usb 6-1: ath9k_htc: USB layer deinitialized [ 147.610086][ T4401] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 147.986635][ T4401] usb 7-1: Using ep0 maxpacket: 32 [ 148.108613][ T4401] usb 7-1: config 0 has an invalid descriptor of length 208, skipping remainder of the config [ 148.135984][ T4401] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.237550][ T4401] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.314851][ T4401] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.368996][ T4401] usb 7-1: config 0 descriptor?? [ 148.421336][ T4401] hub 7-1:0.0: bad descriptor, ignoring hub [ 148.432274][ T4401] hub: probe of 7-1:0.0 failed with error -5 [ 148.440581][ T4401] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 148.938333][ T6034] loop5: detected capacity change from 0 to 4096 [ 148.957480][ T6034] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 149.687963][ T3026] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.062924][ T6064] loop5: detected capacity change from 0 to 32768 [ 150.075757][ T4882] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 150.135753][ T6064] XFS (loop5): Mounting V5 Filesystem [ 150.187288][ T6064] XFS (loop5): Ending clean mount [ 150.195585][ T6064] XFS (loop5): Quotacheck needed: Please wait. [ 150.209970][ T3026] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 150.224371][ T3026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.237925][ T3026] usb 2-1: Product: syz [ 150.242128][ T3026] usb 2-1: Manufacturer: syz [ 150.253096][ T3026] usb 2-1: SerialNumber: syz [ 150.289242][ T6064] XFS (loop5): Quotacheck: Done. [ 150.314840][ T3026] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 150.323388][ T26] audit: type=1804 audit(1730390954.985:37): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.329" name="/newroot/41/file0/bus" dev="loop5" ino=9290 res=1 errno=0 [ 150.392372][ T4449] XFS (loop5): Unmounting Filesystem [ 150.521029][ T4401] usb 7-1: USB disconnect, device number 5 [ 150.574474][ T4882] usb 5-1: USB disconnect, device number 18 [ 150.928003][ T3026] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 151.272099][ T6095] loop6: detected capacity change from 0 to 32768 [ 151.352490][ T6095] XFS (loop6): Mounting V5 Filesystem [ 151.410722][ T6104] loop4: detected capacity change from 0 to 32768 [ 151.435952][ T6104] XFS (loop4): Mounting V5 Filesystem [ 151.457439][ T6095] XFS (loop6): Ending clean mount [ 151.471669][ T6095] XFS (loop6): Quotacheck needed: Please wait. [ 151.499339][ T6049] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 151.532925][ T6104] XFS (loop4): Ending clean mount [ 151.537008][ T6095] XFS (loop6): Quotacheck: Done. [ 151.550653][ T4401] usb 2-1: USB disconnect, device number 5 [ 151.600122][ T5408] XFS (loop6): Unmounting Filesystem [ 151.630783][ T4245] XFS (loop4): Unmounting Filesystem [ 151.983538][ T6149] overlayfs: overlapping lowerdir path [ 152.003214][ T6149] overlayfs: overlapping lowerdir path [ 152.221581][ T3026] usb 2-1: Service connection timeout for: 256 [ 152.238945][ T3026] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 152.247204][ T3026] ath9k_htc: Failed to initialize the device [ 152.294131][ T4401] usb 2-1: ath9k_htc: USB layer deinitialized [ 152.400803][ T6152] loop6: detected capacity change from 0 to 4096 [ 152.445703][ T6152] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 152.774449][ T6176] loop1: detected capacity change from 0 to 1024 [ 152.787225][ T6176] hfsplus: bad catalog entry type [ 152.858161][ T4357] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 153.222165][ T6192] overlayfs: overlapping lowerdir path [ 153.246370][ T6192] overlayfs: overlapping lowerdir path [ 153.378204][ T4357] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.395791][ T4357] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.457256][ T4357] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.577728][ T6163] loop4: detected capacity change from 0 to 32768 [ 153.657088][ T6163] XFS (loop4): Mounting V5 Filesystem [ 153.681510][ T4357] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.707610][ T4357] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.784295][ T4357] usb 6-1: Product: syz [ 153.814434][ T4357] usb 6-1: Manufacturer: syz [ 153.853148][ T6163] XFS (loop4): Ending clean mount [ 153.862516][ T6163] XFS (loop4): Quotacheck needed: Please wait. [ 153.878905][ T4357] cdc_wdm 6-1:1.0: skipping garbage [ 153.884793][ T4357] cdc_wdm 6-1:1.0: skipping garbage [ 153.913814][ T4357] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 153.931476][ T6163] XFS (loop4): Quotacheck: Done. [ 153.985070][ T26] audit: type=1804 audit(1730390958.655:38): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.341" name="/newroot/71/file0/bus" dev="loop4" ino=9290 res=1 errno=0 [ 154.069443][ T26] audit: type=1804 audit(1730390958.745:39): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.341" name="/newroot/71/file0/bus" dev="loop4" ino=9290 res=1 errno=0 [ 154.104390][ T3583] usb 6-1: USB disconnect, device number 15 [ 154.187702][ T6201] loop6: detected capacity change from 0 to 32768 [ 154.212513][ T4245] XFS (loop4): Unmounting Filesystem [ 154.306964][ T6201] XFS (loop6): Mounting V5 Filesystem [ 154.447204][ T6201] XFS (loop6): Ending clean mount [ 154.485917][ T6201] XFS (loop6): Quotacheck needed: Please wait. [ 154.528204][ T4882] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 154.547041][ T6201] XFS (loop6): Quotacheck: Done. [ 154.576094][ T6234] loop4: detected capacity change from 0 to 1024 [ 154.746011][ T5408] XFS (loop6): Unmounting Filesystem [ 154.787870][ T4882] usb 2-1: Using ep0 maxpacket: 16 [ 155.538119][ T4882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.557864][ T4882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.577037][ T4882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.638481][ T4882] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 155.643929][ T6248] hub 9-0:1.0: USB hub found [ 155.647551][ T4882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.679711][ T4882] usb 2-1: config 0 descriptor?? [ 155.871603][ T6248] hub 9-0:1.0: 1 port detected [ 156.267903][ T3583] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 156.408359][ T4882] usbhid 2-1:0.0: can't add hid device: -71 [ 156.414429][ T4882] usbhid: probe of 2-1:0.0 failed with error -71 [ 156.447707][ T4882] usb 2-1: USB disconnect, device number 6 [ 156.678191][ T3583] usb 7-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 156.702932][ T3583] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.826083][ T6285] loop4: detected capacity change from 0 to 1024 [ 156.838170][ T3583] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 156.849033][ T6285] hfsplus: bad catalog entry type [ 156.857580][ T3583] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.895335][ T3583] usb 7-1: SerialNumber: syz [ 157.220754][ T3583] usb 7-1: 0:2 : does not exist [ 157.244114][ T3583] usb 7-1: USB disconnect, device number 6 [ 157.289312][ T4658] udevd[4658]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.490311][ T4882] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 157.928021][ T4401] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 158.338100][ T4401] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 158.372552][ T4401] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 158.417935][ T4882] usb 2-1: Using ep0 maxpacket: 8 [ 158.432003][ T4401] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.558290][ T4882] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.568717][ T6323] loop6: detected capacity change from 0 to 1024 [ 158.665775][ T4401] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 158.685881][ T4401] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.694107][ T4401] usb 5-1: Product: syz [ 158.707853][ T4401] usb 5-1: Manufacturer: syz [ 158.968301][ T4882] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 159.853336][ T6329] loop3: detected capacity change from 0 to 512 [ 159.894640][ T4882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.916097][ T4401] cdc_wdm 5-1:1.0: skipping garbage [ 159.921857][ T4401] cdc_wdm 5-1:1.0: skipping garbage [ 159.922087][ T4882] usb 2-1: Product: syz [ 159.928326][ T4401] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 159.932086][ T4882] usb 2-1: Manufacturer: syz [ 159.943307][ T4882] usb 2-1: SerialNumber: syz [ 159.960886][ T4882] usb 2-1: config 0 descriptor?? [ 159.987344][ T6329] EXT4-fs error (device loop3): ext4_quota_enable:6988: comm syz.3.368: Bad quota inum: 153550851, type: 0 [ 159.999357][ T4882] usb 2-1: can't set config #0, error -71 [ 160.005175][ T6329] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-117, ino=153550851). Please run e2fsck to fix. [ 160.021613][ T6329] EXT4-fs (loop3): mount failed [ 160.029070][ T4882] usb 2-1: USB disconnect, device number 7 [ 160.127150][ T4401] usb 5-1: USB disconnect, device number 19 [ 160.136067][ T6300] loop5: detected capacity change from 0 to 32768 [ 160.188275][ T6300] XFS (loop5): Mounting V5 Filesystem [ 160.344414][ T6344] device syzkaller0 entered promiscuous mode [ 160.354104][ T6300] XFS (loop5): log mount failed [ 160.648033][ T4293] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.020164][ T4293] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 161.029849][ T4293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.040320][ T4293] usb 2-1: config 0 descriptor?? [ 161.208065][ T4401] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 161.458126][ T4357] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 161.574058][ T4401] usb 5-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 161.588867][ T4401] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.631882][ T4293] usb 2-1: Cannot read MAC address [ 161.637106][ T4293] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -32 [ 161.690034][ T4401] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 161.717064][ T4401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 161.728382][ T4357] usb 6-1: Using ep0 maxpacket: 8 [ 161.733563][ T4401] usb 5-1: SerialNumber: syz [ 161.807718][ T6374] loop6: detected capacity change from 0 to 1024 [ 162.218649][ T4357] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 162.264511][ T4357] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.313355][ T4357] usb 6-1: Product: syz [ 162.336208][ T4357] usb 6-1: Manufacturer: syz [ 162.360988][ T4357] usb 6-1: SerialNumber: syz [ 162.454973][ T4357] usb 6-1: config 0 descriptor?? [ 162.621005][ T4401] usb 5-1: 0:2 : does not exist [ 162.641261][ T4401] usb 5-1: unit 5 not found! [ 162.660874][ T4401] usb 5-1: USB disconnect, device number 20 [ 162.755364][ T4357] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 162.950285][ T6383] overlayfs: overlapping lowerdir path [ 162.967211][ T6381] overlayfs: overlapping lowerdir path [ 163.426938][ T4882] usb 2-1: USB disconnect, device number 8 [ 163.641626][ T5085] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 163.651127][ T6385] loop6: detected capacity change from 0 to 32768 [ 163.716828][ T6385] XFS (loop6): Mounting V5 Filesystem [ 163.887913][ T6385] XFS (loop6): Ending clean mount [ 163.896698][ T6385] XFS (loop6): Quotacheck needed: Please wait. [ 163.977159][ T6385] XFS (loop6): Quotacheck: Done. [ 164.008105][ T5085] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.017030][ T5085] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.043586][ T5085] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.072266][ T5408] XFS (loop6): Unmounting Filesystem [ 164.178137][ T5085] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.197471][ T5085] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.217672][ T5085] usb 5-1: Product: syz [ 164.222209][ T5085] usb 5-1: Manufacturer: syz [ 164.279105][ T5085] cdc_wdm 5-1:1.0: skipping garbage [ 164.287368][ T5085] cdc_wdm 5-1:1.0: skipping garbage [ 164.292906][ T5085] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 164.484511][ T5085] usb 5-1: USB disconnect, device number 21 [ 164.734996][ T6420] netlink: 'syz.3.394': attribute type 16 has an invalid length. [ 164.745462][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 164.818688][ T6424] overlayfs: missing 'lowerdir' [ 164.835252][ T6424] overlayfs: overlapping lowerdir path [ 164.848180][ T6424] overlayfs: overlapping lowerdir path [ 165.938223][ T4357] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 166.024629][ T6439] device syzkaller0 entered promiscuous mode [ 166.468193][ T4401] usb 6-1: USB disconnect, device number 16 [ 168.354395][ T6466] overlayfs: missing 'lowerdir' [ 168.380137][ T6466] overlayfs: overlapping lowerdir path [ 168.386885][ T6466] overlayfs: overlapping lowerdir path [ 168.522765][ T6467] loop5: detected capacity change from 0 to 1024 [ 168.594814][ T6467] hfsplus: bad catalog entry type [ 168.714763][ T4882] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 168.792594][ T4357] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 169.006134][ T4882] usb 5-1: Using ep0 maxpacket: 8 [ 169.197843][ T4357] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.212079][ T4357] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 169.223926][ T4357] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.239154][ T4357] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.312963][ T4882] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 169.324634][ T4882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.338020][ T4882] usb 5-1: Product: syz [ 169.342435][ T4882] usb 5-1: Manufacturer: syz [ 169.347063][ T4882] usb 5-1: SerialNumber: syz [ 169.369455][ T4882] usb 5-1: config 0 descriptor?? [ 169.428785][ T4357] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.438003][ T4357] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.455910][ T4357] usb 2-1: Product: syz [ 169.460443][ T4357] usb 2-1: Manufacturer: syz [ 169.538855][ T4357] cdc_wdm 2-1:1.0: skipping garbage [ 169.544911][ T4357] cdc_wdm 2-1:1.0: skipping garbage [ 169.552561][ T4357] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 169.609590][ T26] audit: type=1804 audit(1730390974.285:40): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.411" name="/newroot/56/bus/bus" dev="overlay" ino=325 res=1 errno=0 [ 169.641481][ T6473] Invalid ELF header magic: != ELF [ 169.648153][ T4882] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 169.761388][ T4357] usb 2-1: USB disconnect, device number 9 [ 170.910063][ T4882] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 170.937052][ T4882] usb 5-1: USB disconnect, device number 22 [ 172.818035][ T4882] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 173.431286][ T4882] usb 2-1: Using ep0 maxpacket: 8 [ 173.511236][ T6510] overlayfs: missing 'lowerdir' [ 173.536691][ T6510] overlayfs: overlapping lowerdir path [ 173.547009][ T6510] overlayfs: overlapping lowerdir path [ 173.658547][ T6511] loop5: detected capacity change from 0 to 1024 [ 173.708048][ T6463] netlink: 'syz.6.405': attribute type 15 has an invalid length. [ 173.715826][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.405'. [ 173.868305][ T4882] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 173.878448][ T4882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.886571][ T4882] usb 2-1: Product: syz [ 173.891122][ T4882] usb 2-1: Manufacturer: syz [ 173.895781][ T4882] usb 2-1: SerialNumber: syz [ 173.914299][ T4882] usb 2-1: config 0 descriptor?? [ 174.228773][ T4882] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 174.464436][ T6511] hfsplus: bad catalog entry type [ 174.877870][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 175.097986][ T3583] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 175.227934][ T4401] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 175.278106][ T7] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 175.286953][ T7] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 175.297291][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 175.306424][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.347979][ T3583] usb 7-1: Using ep0 maxpacket: 8 [ 175.467888][ T7] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 175.476979][ T7] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 175.488744][ T7] usb 4-1: Product: syz [ 175.492952][ T7] usb 4-1: Manufacturer: syz [ 175.598184][ T4401] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.613948][ T4401] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.625049][ T4401] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x70, skipping [ 175.641379][ T4401] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 175.646420][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 175.660403][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 175.665699][ T7] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 175.819264][ T4261] Bluetooth: hci2: command 0x0406 tx timeout [ 175.826592][ T4261] Bluetooth: hci4: command 0x0406 tx timeout [ 175.915477][ T7] usb 4-1: USB disconnect, device number 10 [ 175.922549][ T3583] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 176.048546][ T3583] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.124534][ T3583] usb 7-1: Product: syz [ 176.156999][ T3583] usb 7-1: Manufacturer: syz [ 176.185468][ T3583] usb 7-1: SerialNumber: syz [ 176.269876][ T3583] usb 7-1: config 0 descriptor?? [ 176.315050][ T4401] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 176.324599][ T4401] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 176.332715][ T4401] usb 6-1: SerialNumber: syz [ 176.452842][ T6535] netlink: 52 bytes leftover after parsing attributes in process `syz.4.430'. [ 176.558099][ T3583] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 176.690200][ T4401] usb 6-1: 0:2 : does not exist [ 176.695106][ T4401] usb 6-1: unit 5 not found! [ 176.711126][ T4401] usb 6-1: USB disconnect, device number 17 [ 176.735772][ T6539] udevd[6539]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.218158][ T4882] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 177.247690][ T4882] usb 2-1: USB disconnect, device number 10 [ 177.309191][ T6548] overlayfs: missing 'lowerdir' [ 177.317459][ T6548] overlayfs: overlapping lowerdir path [ 177.347469][ T6548] overlayfs: overlapping lowerdir path [ 177.368168][ T3583] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 177.395851][ T3583] usb 7-1: USB disconnect, device number 7 [ 178.687995][ T4401] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 178.827989][ T3026] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 178.860129][ T4293] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 178.927916][ T4401] usb 4-1: Using ep0 maxpacket: 32 [ 179.047949][ T4401] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x46, skipping [ 179.063758][ T4401] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 179.072936][ T3026] usb 5-1: Using ep0 maxpacket: 8 [ 179.078441][ T4401] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.104005][ T4401] usb 4-1: config 0 descriptor?? [ 179.149020][ T4401] hub 4-1:0.0: bad descriptor, ignoring hub [ 179.159338][ T4401] hub: probe of 4-1:0.0 failed with error -5 [ 179.167704][ T4401] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 179.227926][ T4293] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 179.236690][ T4293] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 179.250574][ T4293] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 179.259665][ T4293] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.369240][ T3026] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 179.380468][ T3026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.389588][ T4293] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 179.398820][ T3026] usb 5-1: Product: syz [ 179.408949][ T4293] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.416964][ T4293] usb 6-1: Product: syz [ 179.421307][ T3026] usb 5-1: Manufacturer: syz [ 179.425938][ T3026] usb 5-1: SerialNumber: syz [ 179.431330][ T4293] usb 6-1: Manufacturer: syz [ 179.454790][ T3026] usb 5-1: config 0 descriptor?? [ 179.508856][ T4293] cdc_wdm 6-1:1.0: skipping garbage [ 179.514114][ T4293] cdc_wdm 6-1:1.0: skipping garbage [ 179.523829][ T4293] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 179.633268][ T6584] loop6: detected capacity change from 0 to 1024 [ 179.795664][ T4293] usb 6-1: USB disconnect, device number 18 [ 179.801881][ T3026] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 180.267947][ T4401] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 180.504756][ T26] audit: type=1804 audit(1730390985.175:41): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.451" name="/newroot/45/bus/bus" dev="overlay" ino=275 res=1 errno=0 [ 180.648820][ T4401] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 180.658343][ T4401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.670341][ T4401] usb 2-1: config 0 descriptor?? [ 180.708944][ T4401] cp210x 2-1:0.0: cp210x converter detected [ 180.848091][ T5084] usb 4-1: USB disconnect, device number 11 [ 181.188033][ T4401] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 181.460441][ T4401] usb 2-1: cp210x converter now attached to ttyUSB0 [ 181.661885][ T5084] usb 2-1: USB disconnect, device number 11 [ 181.683676][ T5084] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 181.696674][ T5084] cp210x 2-1:0.0: device disconnected [ 181.865821][ T3583] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 182.138398][ T3583] usb 7-1: Using ep0 maxpacket: 16 [ 182.298397][ T3583] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.353877][ T3583] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.498385][ T3583] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.623910][ T3583] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 182.635351][ T3583] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.651745][ T3583] usb 7-1: config 0 descriptor?? [ 182.715848][ T6628] loop1: detected capacity change from 0 to 1024 [ 182.852682][ T26] audit: type=1804 audit(1730390987.485:42): pid=6633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.463" name="/newroot/100/bus/bus" dev="overlay" ino=556 res=1 errno=0 [ 182.988647][ T3026] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 183.263457][ T6637] loop3: detected capacity change from 0 to 32768 [ 183.296003][ T6637] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 183.296003][ T6637] [ 183.312036][ T6637] ERROR: (device loop3): remounting filesystem as read-only [ 183.320314][ T6637] ialloc: diAlloc returned -5! [ 183.478014][ T3583] usbhid 7-1:0.0: can't add hid device: -71 [ 183.484295][ T3583] usbhid: probe of 7-1:0.0 failed with error -71 [ 183.505100][ T3583] usb 7-1: USB disconnect, device number 8 [ 183.587547][ T3026] usb 5-1: USB disconnect, device number 23 [ 184.108072][ T3583] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 184.217872][ T4293] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 184.287930][ T4882] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 184.377856][ T3583] usb 4-1: Using ep0 maxpacket: 32 [ 184.608777][ T3583] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x46, skipping [ 184.629703][ T3583] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 184.697467][ T3583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.784238][ T3583] usb 4-1: config 0 descriptor?? [ 184.828559][ T4882] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 184.969812][ T3583] hub 4-1:0.0: bad descriptor, ignoring hub [ 184.996549][ T4882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.093208][ T3583] hub: probe of 4-1:0.0 failed with error -5 [ 185.185367][ T4882] usb 6-1: config 0 descriptor?? [ 185.195247][ T3583] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 185.271630][ T4882] cp210x 6-1:0.0: cp210x converter detected [ 185.339352][ T4293] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 185.367893][ T4293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.375947][ T4293] usb 5-1: Product: syz [ 185.386656][ T4293] usb 5-1: Manufacturer: syz [ 185.391647][ T4293] usb 5-1: SerialNumber: syz [ 185.577331][ T4293] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 185.610418][ T6669] loop1: detected capacity change from 0 to 1024 [ 185.626600][ T6669] hfsplus: bad catalog entry type [ 185.802963][ T4882] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 186.068964][ T4882] usb 6-1: cp210x converter now attached to ttyUSB0 [ 186.261864][ T4357] usb 6-1: USB disconnect, device number 19 [ 186.282355][ T4357] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 186.287954][ T4293] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 186.296843][ T4357] cp210x 6-1:0.0: device disconnected [ 186.949138][ T4401] usb 5-1: USB disconnect, device number 24 [ 187.010758][ T4357] usb 4-1: USB disconnect, device number 12 [ 187.298024][ T3026] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 187.537988][ T3026] usb 2-1: Using ep0 maxpacket: 16 [ 187.577953][ T4293] usb 5-1: Service connection timeout for: 256 [ 187.708649][ T4293] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 187.722322][ T4293] ath9k_htc: Failed to initialize the device [ 187.735041][ T4401] usb 5-1: ath9k_htc: USB layer deinitialized [ 187.974601][ T6711] loop3: detected capacity change from 0 to 512 [ 188.508051][ T3026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.527869][ T3026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.561592][ T3026] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.593009][ T6711] EXT4-fs error (device loop3): ext4_quota_enable:6988: comm syz.3.491: Bad quota inum: 153550851, type: 0 [ 188.604941][ T6711] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-117, ino=153550851). Please run e2fsck to fix. [ 188.621245][ T6711] EXT4-fs (loop3): mount failed [ 188.642101][ T3026] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 188.659061][ T3026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.682379][ T3026] usb 2-1: config 0 descriptor?? [ 188.958004][ T4401] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 188.998005][ T4293] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 189.034120][ T6731] netlink: 52 bytes leftover after parsing attributes in process `syz.3.499'. [ 189.197954][ T4401] usb 6-1: Using ep0 maxpacket: 32 [ 189.208000][ T5086] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 189.318100][ T4401] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x46, skipping [ 189.329260][ T4401] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 189.338712][ T4401] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.351197][ T4401] usb 6-1: config 0 descriptor?? [ 189.367975][ T4293] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 189.377059][ T4293] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.388688][ T4401] hub 6-1:0.0: bad descriptor, ignoring hub [ 189.394627][ T4401] hub: probe of 6-1:0.0 failed with error -5 [ 189.401179][ T5085] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 189.410407][ T4401] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 189.418026][ T3026] usbhid 2-1:0.0: can't add hid device: -71 [ 189.423989][ T3026] usbhid: probe of 2-1:0.0 failed with error -71 [ 189.432184][ T4293] usb 7-1: config 0 descriptor?? [ 189.439681][ T3026] usb 2-1: USB disconnect, device number 12 [ 189.468861][ T4293] cp210x 7-1:0.0: cp210x converter detected [ 189.568094][ T5086] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.576987][ T5086] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 189.587475][ T5086] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.596540][ T5086] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.728022][ T5086] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.737213][ T5086] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.745852][ T5086] usb 5-1: Product: syz [ 189.751129][ T5086] usb 5-1: Manufacturer: syz [ 189.788912][ T5086] cdc_wdm 5-1:1.0: skipping garbage [ 189.794188][ T5086] cdc_wdm 5-1:1.0: skipping garbage [ 189.799858][ T5086] cdc_wdm 5-1:1.0: skipping garbage [ 189.805084][ T5086] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 189.907935][ T4293] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 189.938133][ T5085] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 189.947370][ T5085] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.956274][ T5085] usb 4-1: Product: syz [ 189.960628][ T5085] usb 4-1: Manufacturer: syz [ 189.965227][ T5085] usb 4-1: SerialNumber: syz [ 189.993138][ T4357] usb 5-1: USB disconnect, device number 25 [ 190.008983][ T5085] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 190.157928][ T5086] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 190.177170][ T4293] usb 7-1: cp210x converter now attached to ttyUSB0 [ 190.370104][ T4357] usb 7-1: USB disconnect, device number 9 [ 190.377443][ T4357] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 190.390953][ T4357] cp210x 7-1:0.0: device disconnected [ 190.398265][ T5086] usb 2-1: Using ep0 maxpacket: 32 [ 190.518195][ T5086] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 190.526472][ T5086] usb 2-1: config 0 has no interface number 0 [ 190.577907][ T3026] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 190.688671][ T5086] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 190.707860][ T5086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.715981][ T5086] usb 2-1: Product: syz [ 190.720283][ T5086] usb 2-1: Manufacturer: syz [ 190.725300][ T5086] usb 2-1: SerialNumber: syz [ 190.731783][ T5086] usb 2-1: config 0 descriptor?? [ 190.827654][ T6743] loop4: detected capacity change from 0 to 1024 [ 190.844101][ T6743] hfsplus: bad catalog entry type [ 191.123417][ T5086] smsc95xx v2.0.0 [ 191.129290][ T5086] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 191.139500][ T5086] smsc95xx: probe of 2-1:0.67 failed with error -22 [ 191.199668][ T7] usb 4-1: USB disconnect, device number 13 [ 191.367586][ T6749] loop4: detected capacity change from 0 to 1024 [ 191.817927][ T3026] usb 4-1: Service connection timeout for: 256 [ 191.824229][ T3026] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 191.836311][ T3026] ath9k_htc: Failed to initialize the device [ 191.843049][ T7] usb 4-1: ath9k_htc: USB layer deinitialized [ 191.974757][ T6761] fuse: Bad value for 'fd' [ 192.016230][ T3583] usb 6-1: reset high-speed USB device number 20 using dummy_hcd [ 192.164466][ T6765] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 192.179141][ T6765] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 192.193128][ T6765] overlayfs: overlapping lowerdir path [ 192.202525][ T6765] overlayfs: overlapping lowerdir path [ 192.478305][ T3583] usb 6-1: device firmware changed [ 192.488904][ T3583] usb 6-1: USB disconnect, device number 20 [ 192.757919][ T3026] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 192.867921][ T3583] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 193.021730][ T4293] usb 2-1: USB disconnect, device number 13 [ 193.107903][ T3583] usb 6-1: Using ep0 maxpacket: 32 [ 193.121391][ T3026] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.140885][ T3026] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 193.170958][ T3026] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.234082][ T3026] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.308171][ T3583] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.319051][ T3583] usb 6-1: config 0 has no interfaces? [ 193.324549][ T3583] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 193.334922][ T3583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.350373][ T3583] usb 6-1: config 0 descriptor?? [ 193.388003][ T3026] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.397104][ T3026] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.405499][ T3026] usb 5-1: Product: syz [ 193.414538][ T3026] usb 5-1: Manufacturer: syz [ 193.461794][ T3026] cdc_wdm 5-1:1.0: skipping garbage [ 193.467058][ T3026] cdc_wdm 5-1:1.0: skipping garbage [ 193.472962][ T3026] cdc_wdm 5-1:1.0: skipping garbage [ 193.478267][ T3026] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 193.567944][ T4357] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 193.617896][ T4293] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 193.638152][ T3026] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 193.663003][ T5085] usb 5-1: USB disconnect, device number 26 [ 193.817910][ T4357] usb 7-1: Using ep0 maxpacket: 32 [ 193.937950][ T4357] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.950206][ T4357] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.960046][ T4357] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 193.969174][ T4357] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.984694][ T4357] usb 7-1: config 0 descriptor?? [ 194.008170][ T4293] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 194.017464][ T4293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.027557][ T4293] usb 2-1: config 0 descriptor?? [ 194.033700][ T4357] hub 7-1:0.0: USB hub found [ 194.079017][ T4293] cp210x 2-1:0.0: cp210x converter detected [ 194.223581][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.230096][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.248300][ T3026] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 194.257704][ T3026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.265956][ T3026] usb 4-1: Product: syz [ 194.270314][ T3026] usb 4-1: Manufacturer: syz [ 194.274909][ T3026] usb 4-1: SerialNumber: syz [ 194.319720][ T3026] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 194.338155][ T4357] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 194.559759][ T4293] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 194.603894][ T4357] hid-generic 0003:046D:C31C.0001: item fetching failed at offset 0/1 [ 194.612782][ T4357] hid-generic: probe of 0003:046D:C31C.0001 failed with error -22 [ 194.746810][ T6790] loop4: detected capacity change from 0 to 512 [ 194.979928][ T6790] EXT4-fs error (device loop4): ext4_quota_enable:6988: comm syz.4.520: Bad quota inum: 153550851, type: 0 [ 195.000169][ T6790] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-117, ino=153550851). Please run e2fsck to fix. [ 195.020425][ T6790] EXT4-fs (loop4): mount failed [ 195.233039][ T4293] usb 2-1: cp210x converter now attached to ttyUSB0 [ 195.254763][ T4293] usb 2-1: USB disconnect, device number 14 [ 195.259796][ T4357] usb 7-1: USB disconnect, device number 10 [ 195.274722][ T4882] usb 6-1: USB disconnect, device number 21 [ 195.300735][ T4293] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 195.312693][ T3026] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 195.343270][ T6795] netlink: 52 bytes leftover after parsing attributes in process `syz.5.521'. [ 195.348604][ T4293] cp210x 2-1:0.0: device disconnected [ 195.835230][ T6803] loop4: detected capacity change from 0 to 1024 [ 195.853327][ T6803] hfsplus: bad catalog entry type [ 195.868061][ T5086] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 195.922003][ T4357] usb 4-1: USB disconnect, device number 14 [ 196.247860][ T5086] usb 6-1: Using ep0 maxpacket: 32 [ 196.381054][ T5086] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 196.397883][ T5086] usb 6-1: config 0 has no interface number 0 [ 196.537889][ T3026] usb 4-1: Service connection timeout for: 256 [ 196.548173][ T3026] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 196.568074][ T5086] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 196.577227][ T5086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.587187][ T3026] ath9k_htc: Failed to initialize the device [ 196.593771][ T4357] usb 4-1: ath9k_htc: USB layer deinitialized [ 196.600930][ T5086] usb 6-1: Product: syz [ 196.605381][ T5086] usb 6-1: Manufacturer: syz [ 196.611159][ T5086] usb 6-1: SerialNumber: syz [ 196.620403][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 196.628806][ T5086] usb 6-1: config 0 descriptor?? [ 196.669056][ T5086] smsc95xx v2.0.0 [ 196.672750][ T5086] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 196.707941][ T5086] smsc95xx: probe of 6-1:0.67 failed with error -22 [ 196.795250][ T6816] overlayfs: missing 'lowerdir' [ 196.838985][ T6816] overlayfs: overlapping lowerdir path [ 196.854089][ T6816] overlayfs: overlapping lowerdir path [ 197.117884][ T3026] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 197.157898][ T4882] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 197.258355][ T4357] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 197.407968][ T4882] usb 2-1: Using ep0 maxpacket: 16 [ 197.509198][ T3026] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.527823][ T3026] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 197.528059][ T4882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.547893][ T3026] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.558993][ T4882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.569657][ T4882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.572474][ T3026] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 197.583210][ T4882] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 197.602991][ T4882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.620605][ T4882] usb 2-1: config 0 descriptor?? [ 197.648043][ T4357] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.664439][ T4357] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.748275][ T4357] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 197.762987][ T4357] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.771772][ T4357] usb 7-1: SerialNumber: syz [ 197.777967][ T3026] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 197.787850][ T3026] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 197.795884][ T3026] usb 5-1: Product: syz [ 197.817826][ T3026] usb 5-1: Manufacturer: syz [ 197.878875][ T3026] cdc_wdm 5-1:1.0: skipping garbage [ 197.884123][ T3026] cdc_wdm 5-1:1.0: skipping garbage [ 197.897831][ T3026] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 198.070926][ T4357] usb 7-1: 0:2 : does not exist [ 198.079875][ T4357] usb 7-1: unit 5 not found! [ 198.114803][ T3583] usb 5-1: USB disconnect, device number 27 [ 198.163943][ T4357] usb 7-1: USB disconnect, device number 11 [ 198.324035][ T6826] netlink: 52 bytes leftover after parsing attributes in process `syz.3.533'. [ 198.362659][ T4882] usbhid 2-1:0.0: can't add hid device: -71 [ 198.369554][ T4882] usbhid: probe of 2-1:0.0 failed with error -71 [ 198.390633][ T4882] usb 2-1: USB disconnect, device number 15 [ 198.695600][ T6830] loop3: detected capacity change from 0 to 512 [ 198.982320][ T6830] EXT4-fs error (device loop3): ext4_quota_enable:6988: comm syz.3.534: Bad quota inum: 153550851, type: 0 [ 198.996283][ T6830] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-117, ino=153550851). Please run e2fsck to fix. [ 199.016738][ T6830] EXT4-fs (loop3): mount failed [ 199.499629][ T5086] usb 6-1: USB disconnect, device number 22 [ 199.627953][ T5083] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 199.667907][ T3026] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 199.827851][ T4882] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 199.867862][ T5083] usb 2-1: Using ep0 maxpacket: 32 [ 199.917847][ T3026] usb 5-1: Using ep0 maxpacket: 8 [ 200.013926][ T5083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.035368][ T5083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.055596][ T5083] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 200.065217][ T3026] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 200.077980][ T3026] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.093979][ T5083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.112694][ T3026] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.124695][ T5083] usb 2-1: config 0 descriptor?? [ 200.131251][ T6836] loop6: detected capacity change from 0 to 40427 [ 200.138140][ T3026] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.159676][ T3026] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.176724][ T6836] F2FS-fs (loop6): invalid crc value [ 200.177399][ T3026] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 200.177426][ T3026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.188936][ T5083] hub 2-1:0.0: USB hub found [ 200.224386][ T6836] F2FS-fs (loop6): Found nat_bits in checkpoint [ 200.244641][ T6845] loop5: detected capacity change from 0 to 1024 [ 200.298131][ T6836] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 200.314805][ T6845] hfsplus: bad catalog entry type [ 200.358041][ T4882] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 200.367169][ T4882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.380829][ T4882] usb 4-1: Product: syz [ 200.381478][ T5408] syz-executor: attempt to access beyond end of device [ 200.381478][ T5408] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 200.385047][ T4882] usb 4-1: Manufacturer: syz [ 200.385064][ T4882] usb 4-1: SerialNumber: syz [ 200.435205][ T4882] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 200.448034][ T3026] usb 5-1: usb_control_msg returned -32 [ 200.453650][ T3026] usbtmc 5-1:16.0: can't read capabilities [ 200.518153][ T5083] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 200.800881][ T5083] hid-generic 0003:046D:C31C.0002: item fetching failed at offset 0/1 [ 200.812631][ T5083] hid-generic: probe of 0003:046D:C31C.0002 failed with error -22 [ 200.846991][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.540'. [ 201.038290][ T4357] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 201.780459][ T5083] usb 4-1: USB disconnect, device number 15 [ 201.785116][ T4290] usb 2-1: USB disconnect, device number 16 [ 202.156704][ T6868] hub 9-0:1.0: USB hub found [ 202.166708][ T6868] hub 9-0:1.0: 1 port detected [ 202.555926][ T3026] usb 5-1: USB disconnect, device number 28 [ 202.704121][ T6877] overlayfs: missing 'workdir' [ 202.717023][ T6877] overlayfs: overlapping lowerdir path [ 202.731434][ T6877] overlayfs: overlapping lowerdir path [ 202.858005][ T4357] usb 4-1: Service connection timeout for: 256 [ 202.865907][ T4357] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 202.891514][ T4357] ath9k_htc: Failed to initialize the device [ 202.910461][ T5083] usb 4-1: ath9k_htc: USB layer deinitialized [ 203.089901][ T4882] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 203.196204][ T6881] loop5: detected capacity change from 0 to 32768 [ 203.297883][ T5083] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 203.338115][ T4882] usb 5-1: Using ep0 maxpacket: 32 [ 203.454741][ T6891] netlink: 52 bytes leftover after parsing attributes in process `syz.6.554'. [ 203.458247][ T4882] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 203.473016][ T4882] usb 5-1: config 0 has no interface number 0 [ 203.547869][ T5083] usb 4-1: Using ep0 maxpacket: 16 [ 203.638058][ T4882] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 203.656122][ T4882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.680361][ T4882] usb 5-1: Product: syz [ 203.693101][ T4882] usb 5-1: Manufacturer: syz [ 203.701257][ T4882] usb 5-1: SerialNumber: syz [ 203.734399][ T4882] usb 5-1: config 0 descriptor?? [ 203.819300][ T5083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.913852][ T6895] loop6: detected capacity change from 0 to 512 [ 203.949087][ T5083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.247740][ T6895] EXT4-fs error (device loop6): ext4_quota_enable:6988: comm syz.6.555: Bad quota inum: 153550851, type: 0 [ 204.263027][ T6895] EXT4-fs warning (device loop6): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-117, ino=153550851). Please run e2fsck to fix. [ 204.284495][ T6895] EXT4-fs (loop6): mount failed [ 204.340497][ T5083] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 204.365347][ T4882] smsc95xx v2.0.0 [ 204.369114][ T4882] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 204.379344][ T4882] smsc95xx: probe of 5-1:0.67 failed with error -22 [ 204.415728][ T5083] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 204.445430][ T5083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.517038][ T5083] usb 4-1: config 0 descriptor?? [ 204.751420][ T6908] Bluetooth: MGMT ver 1.22 [ 205.117983][ T7] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 205.137985][ T3026] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 205.157984][ T4882] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 205.257979][ T5083] usbhid 4-1:0.0: can't add hid device: -71 [ 205.264010][ T5083] usbhid: probe of 4-1:0.0 failed with error -71 [ 205.276443][ T5083] usb 4-1: USB disconnect, device number 16 [ 205.367898][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 205.397972][ T4882] usb 2-1: Using ep0 maxpacket: 16 [ 205.488037][ T7] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 205.496414][ T7] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.506512][ T7] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.516395][ T7] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.527123][ T7] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.540311][ T7] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 205.549724][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.677965][ T4882] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 205.687176][ T4882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.695355][ T4882] usb 2-1: Product: syz [ 205.699663][ T4882] usb 2-1: Manufacturer: syz [ 205.704260][ T4882] usb 2-1: SerialNumber: syz [ 205.711333][ T4882] usb 2-1: config 0 descriptor?? [ 205.717999][ T3026] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 205.734136][ T3026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.742578][ T3026] usb 6-1: Product: syz [ 205.747115][ T3026] usb 6-1: Manufacturer: syz [ 205.761879][ T3026] usb 6-1: SerialNumber: syz [ 205.808861][ T3026] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 205.815842][ T4658] udevd[4658]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.834754][ T7] usb 7-1: usb_control_msg returned -32 [ 205.848774][ T7] usbtmc 7-1:16.0: can't read capabilities [ 205.959103][ T7] usb 5-1: USB disconnect, device number 29 [ 205.976122][ T6914] device bond0 entered promiscuous mode [ 205.995406][ T6914] device bond_slave_0 entered promiscuous mode [ 206.009402][ T6914] device bond_slave_1 entered promiscuous mode [ 206.027357][ T6914] device team0 entered promiscuous mode [ 206.047825][ T6914] device team_slave_0 entered promiscuous mode [ 206.054320][ T6914] device team_slave_1 entered promiscuous mode [ 206.070713][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 206.084306][ T4290] usb 2-1: USB disconnect, device number 17 [ 206.355076][ T6918] loop4: detected capacity change from 0 to 32768 [ 206.448067][ T3026] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 207.060048][ T5086] usb 6-1: USB disconnect, device number 23 [ 207.754095][ T3026] usb 6-1: Service connection timeout for: 256 [ 207.781037][ T6934] netlink: 36 bytes leftover after parsing attributes in process `syz.5.567'. [ 207.870787][ T7] usb 7-1: USB disconnect, device number 12 [ 207.898587][ T3026] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 207.907401][ T3026] ath9k_htc: Failed to initialize the device [ 207.913751][ T5086] usb 6-1: ath9k_htc: USB layer deinitialized [ 208.092190][ T6939] loop3: detected capacity change from 0 to 512 [ 208.728405][ T6939] EXT4-fs error (device loop3): ext4_quota_enable:6988: comm syz.3.569: Bad quota inum: 153550851, type: 0 [ 208.883596][ T6948] hub 9-0:1.0: USB hub found [ 208.892535][ T6948] hub 9-0:1.0: 1 port detected [ 209.225996][ T6939] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-117, ino=153550851). Please run e2fsck to fix. [ 209.249480][ T6939] EXT4-fs (loop3): mount failed [ 209.266448][ T6944] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 209.806056][ T6937] loop1: detected capacity change from 0 to 32768 [ 209.835885][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 209.878351][ T6937] XFS (loop1): Mounting V5 Filesystem [ 209.967577][ T6937] XFS (loop1): Ending clean mount [ 209.977493][ T6937] XFS (loop1): Quotacheck needed: Please wait. [ 210.030763][ T6937] XFS (loop1): Quotacheck: Done. [ 210.087450][ T4252] XFS (loop1): Unmounting Filesystem [ 210.130477][ T6957] loop6: detected capacity change from 0 to 32768 [ 210.213373][ T6957] ERROR: (device loop6): dbAlloc: the hint is outside the map [ 210.213373][ T6957] [ 210.231608][ T6957] ERROR: (device loop6): remounting filesystem as read-only [ 210.244562][ T6957] ialloc: diAlloc returned -5! [ 210.727864][ T4357] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 210.839926][ T6987] loop3: detected capacity change from 0 to 512 [ 210.874061][ T6987] EXT4-fs (loop3): filesystem is read-only [ 210.881839][ T6987] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 210.923063][ T6987] EXT4-fs (loop3): filesystem is read-only [ 210.950641][ T6987] EXT4-fs (loop3): orphan cleanup on readonly fs [ 210.974986][ T6987] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.583: bg 0: block 64: padding at end of block bitmap is not set [ 210.998672][ T6987] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 211.022578][ T6987] EXT4-fs (loop3): 1 orphan inode deleted [ 211.037677][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 211.045704][ T6987] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 211.159643][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 211.268074][ T4357] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 211.282690][ T4357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.291216][ T4357] usb 2-1: Product: syz [ 211.313456][ T4357] usb 2-1: Manufacturer: syz [ 211.323705][ T4357] usb 2-1: SerialNumber: syz [ 211.408912][ T4357] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 211.851566][ T6996] loop4: detected capacity change from 0 to 512 [ 211.860937][ T6997] hub 9-0:1.0: USB hub found [ 211.886049][ T6997] hub 9-0:1.0: 1 port detected [ 211.914456][ T6996] EXT4-fs error (device loop4): ext4_quota_enable:6988: comm syz.4.587: Bad quota inum: 153550851, type: 0 [ 211.931022][ T6996] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-117, ino=153550851). Please run e2fsck to fix. [ 211.947833][ T6996] EXT4-fs (loop4): mount failed [ 212.282029][ T7011] netlink: 52 bytes leftover after parsing attributes in process `syz.6.591'. [ 212.360088][ T7] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 212.713333][ T7019] loop4: detected capacity change from 0 to 1024 [ 212.720016][ T4290] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 212.729447][ T4294] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 212.804553][ T7019] hfsplus: bad catalog entry type [ 212.963439][ T4290] usb 7-1: Using ep0 maxpacket: 32 [ 212.988249][ T4357] usb 2-1: USB disconnect, device number 18 [ 213.088155][ T4294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.099961][ T4290] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.132960][ T4290] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 213.142151][ T4294] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 213.156396][ T4290] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.168026][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.196868][ T4290] usb 7-1: config 0 descriptor?? [ 213.208472][ T4294] usb 4-1: config 0 descriptor?? [ 213.657955][ T7] usb 2-1: Service connection timeout for: 256 [ 213.664183][ T7] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 213.690520][ T4294] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 213.708278][ T7] ath9k_htc: Failed to initialize the device [ 213.716449][ T4357] usb 2-1: ath9k_htc: USB layer deinitialized [ 213.726509][ T4294] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input6 [ 213.779451][ T7021] loop1: detected capacity change from 0 to 4096 [ 213.906203][ T4294] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 214.415691][ T7041] hub 9-0:1.0: USB hub found [ 214.439209][ T7041] hub 9-0:1.0: 1 port detected [ 215.485241][ T4294] usb 7-1: USB disconnect, device number 13 [ 215.649133][ T4357] usb 4-1: USB disconnect, device number 17 [ 215.783255][ T4290] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 216.588012][ T7062] netlink: 'syz.5.607': attribute type 7 has an invalid length. [ 216.606357][ T7062] netlink: 'syz.5.607': attribute type 8 has an invalid length. [ 216.655498][ T4290] usb 2-1: device descriptor read/64, error -71 [ 216.857936][ T4357] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 216.927828][ T4290] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 217.089216][ T7064] loop5: detected capacity change from 0 to 32768 [ 217.127847][ T4290] usb 2-1: device descriptor read/64, error -71 [ 217.141159][ T7064] XFS (loop5): Mounting V5 Filesystem [ 217.177911][ T5085] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 217.194730][ T7064] XFS (loop5): Ending clean mount [ 217.210028][ T7064] XFS (loop5): Quotacheck needed: Please wait. [ 217.248794][ T4290] usb usb2-port1: attempt power cycle [ 217.275054][ T7064] XFS (loop5): Quotacheck: Done. [ 217.341424][ T4449] XFS (loop5): Unmounting Filesystem [ 217.378241][ T4357] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 217.397521][ T4357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.406135][ T4357] usb 4-1: Product: syz [ 217.410371][ T4357] usb 4-1: Manufacturer: syz [ 217.415049][ T4357] usb 4-1: SerialNumber: syz [ 217.481386][ T4357] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 217.601947][ T5085] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.622308][ T5085] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.660102][ T4290] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 217.676671][ T7080] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 217.728164][ T5085] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 217.742924][ T5085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 217.757828][ T5085] usb 5-1: SerialNumber: syz [ 217.758424][ T4290] usb 2-1: device descriptor read/8, error -71 [ 218.048040][ T4290] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 218.050220][ T5085] usb 5-1: 0:2 : does not exist [ 218.067510][ T5085] usb 5-1: unit 5 not found! [ 218.087950][ T4357] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 218.097598][ T5085] usb 5-1: USB disconnect, device number 30 [ 218.137187][ T4658] udevd[4658]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.153747][ T4290] usb 2-1: device descriptor read/8, error -71 [ 218.210188][ T7084] loop5: detected capacity change from 0 to 1024 [ 218.278339][ T4290] usb usb2-port1: unable to enumerate USB device [ 218.287360][ T7084] hfsplus: bad catalog entry type [ 218.716197][ T4290] usb 4-1: USB disconnect, device number 18 [ 219.512338][ T4357] usb 4-1: Service connection timeout for: 256 [ 219.518654][ T4357] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 219.526961][ T4357] ath9k_htc: Failed to initialize the device [ 219.533608][ T4290] usb 4-1: ath9k_htc: USB layer deinitialized [ 219.943113][ T7104] loop3: detected capacity change from 0 to 512 [ 221.251657][ T7104] EXT4-fs error (device loop3): ext4_quota_enable:6988: comm syz.3.617: Bad quota inum: 153550851, type: 0 [ 221.265542][ T7104] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-117, ino=153550851). Please run e2fsck to fix. [ 221.285891][ T7104] EXT4-fs (loop3): mount failed [ 221.588392][ T4658] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.726002][ T7113] netlink: 52 bytes leftover after parsing attributes in process `syz.4.620'. [ 221.963834][ T7117] loop4: detected capacity change from 0 to 256 [ 222.037991][ T7117] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 222.079215][ T7119] hub 9-0:1.0: USB hub found [ 222.099231][ T7119] hub 9-0:1.0: 1 port detected [ 222.323992][ T7121] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 222.521955][ T7129] loop1: detected capacity change from 0 to 1024 [ 222.564521][ T7129] hfsplus: bad catalog entry type [ 222.628444][ T5086] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 222.712853][ T7131] loop6: detected capacity change from 0 to 1024 [ 222.943909][ T5086] usb 5-1: device descriptor read/64, error -71 [ 222.976170][ T7136] Invalid ELF header magic: != ELF [ 223.258136][ T5086] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 223.658755][ T5086] usb 5-1: device descriptor read/64, error -71 [ 223.871032][ T5086] usb usb5-port1: attempt power cycle [ 224.377869][ T5086] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 224.468106][ T5086] usb 5-1: device descriptor read/8, error -71 [ 224.748021][ T5083] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 224.755820][ T5086] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 224.809060][ T7154] loop3: detected capacity change from 0 to 1024 [ 224.863832][ T7154] hfsplus: bad catalog entry type [ 224.868258][ T5086] usb 5-1: device descriptor read/8, error -71 [ 225.005464][ T5086] usb usb5-port1: unable to enumerate USB device [ 225.012083][ T5083] usb 2-1: Using ep0 maxpacket: 32 [ 225.168165][ T5083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.202327][ T5083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.217160][ T5083] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 225.228074][ T5083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.248198][ T5083] usb 2-1: config 0 descriptor?? [ 225.298912][ T5083] hub 2-1:0.0: USB hub found [ 225.442412][ T7166] Invalid ELF header magic: != ELF [ 225.544399][ T7170] overlayfs: missing 'lowerdir' [ 225.597927][ T5086] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 225.610659][ T7171] loop4: detected capacity change from 0 to 1024 [ 225.867891][ T5083] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 225.897932][ T5086] usb 6-1: device descriptor read/64, error -71 [ 226.188209][ T5086] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 226.237469][ T5083] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1 [ 226.352174][ T5083] hid-generic: probe of 0003:046D:C31C.0004 failed with error -22 [ 226.471548][ T5086] usb 6-1: device descriptor read/64, error -71 [ 226.481527][ T5083] usb 2-1: USB disconnect, device number 23 [ 226.618220][ T5086] usb usb6-port1: attempt power cycle [ 227.178452][ T5086] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 227.328561][ T5086] usb 6-1: device descriptor read/8, error -71 [ 227.562447][ T7174] loop6: detected capacity change from 0 to 32768 [ 227.606234][ T26] audit: type=1800 audit(1730391032.275:43): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.642" name="bus" dev="loop6" ino=7 res=0 errno=0 [ 227.637835][ T5086] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 227.654031][ T7190] netlink: 52 bytes leftover after parsing attributes in process `syz.1.646'. [ 227.738181][ T5086] usb 6-1: device descriptor read/8, error -71 [ 227.744892][ T5083] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 228.024181][ T5086] usb usb6-port1: unable to enumerate USB device [ 228.213973][ T7200] loop6: detected capacity change from 0 to 512 [ 228.226116][ T5083] usb 4-1: Using ep0 maxpacket: 32 [ 228.411961][ T7200] EXT4-fs error (device loop6): ext4_quota_enable:6988: comm syz.6.648: Bad quota inum: 153550851, type: 0 [ 228.425850][ T7200] EXT4-fs warning (device loop6): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-117, ino=153550851). Please run e2fsck to fix. [ 228.446047][ T7200] EXT4-fs (loop6): mount failed [ 228.454181][ T5083] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 228.542297][ T5083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.705842][ T4357] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 228.727544][ T5083] usb 4-1: config 0 descriptor?? [ 228.790000][ T5083] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 228.815288][ T7192] loop4: detected capacity change from 0 to 32768 [ 228.833803][ T7192] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.647 (7192) [ 228.854926][ T7206] Invalid ELF header magic: != ELF [ 228.862896][ T7192] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.878223][ T7192] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 228.902821][ T7192] BTRFS info (device loop4): setting nodatacow, compression disabled [ 228.927728][ T7192] BTRFS info (device loop4): max_inline at 0 [ 228.938328][ T7192] BTRFS info (device loop4): enabling disk space caching [ 228.945427][ T7192] BTRFS info (device loop4): turning off barriers [ 228.952459][ T7192] BTRFS info (device loop4): turning on flush-on-commit [ 228.959804][ T7192] BTRFS info (device loop4): doing ref verification [ 228.966617][ T7192] BTRFS info (device loop4): force clearing of disk cache [ 228.974928][ T7192] BTRFS info (device loop4): disabling tree log [ 228.982209][ T7192] BTRFS info (device loop4): enabling ssd optimizations [ 228.996418][ T7192] BTRFS info (device loop4): max_inline at 4096 [ 229.003204][ T4357] usb 2-1: no configurations [ 229.047982][ T5083] gspca_vc032x: reg_r err -32 [ 229.048092][ T4357] usb 2-1: can't read configurations, error -22 [ 229.052715][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.052730][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.052739][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.052747][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.052755][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.086803][ T7192] BTRFS info (device loop4): disk space caching is enabled [ 229.144963][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.158331][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.163672][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.186145][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.192116][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.207360][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.213929][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.219783][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.226278][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.231242][ T4357] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 229.232877][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.245437][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.251134][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.256443][ T5083] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.275519][ T5083] gspca_vc032x: Unknown sensor... [ 229.281345][ T5083] vc032x: probe of 4-1:0.0 failed with error -22 [ 229.323688][ T7192] BTRFS info (device loop4): rebuilding free space tree [ 229.371604][ T4882] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 229.403699][ T7192] BTRFS info (device loop4): disabling free space tree [ 229.414658][ T7192] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 229.428917][ T7192] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 229.560405][ T7237] loop5: detected capacity change from 0 to 1024 [ 229.587707][ T7237] hfsplus: bad catalog entry type [ 229.806727][ T4245] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.893732][ T4357] usb 2-1: no configurations [ 229.898634][ T4357] usb 2-1: can't read configurations, error -22 [ 229.905367][ T4357] usb usb2-port1: attempt power cycle [ 229.967856][ T4882] usb 7-1: Using ep0 maxpacket: 8 [ 230.248934][ T4882] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 230.342569][ T4357] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 230.357898][ T4882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.365920][ T4882] usb 7-1: Product: syz [ 230.554635][ T4882] usb 7-1: Manufacturer: syz [ 230.582556][ T4882] usb 7-1: SerialNumber: syz [ 230.589189][ T4357] usb 2-1: no configurations [ 230.596094][ T4357] usb 2-1: can't read configurations, error -22 [ 230.680381][ T4882] usb 7-1: config 0 descriptor?? [ 230.687057][ T4294] usb 4-1: USB disconnect, device number 19 [ 230.827894][ T4357] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 230.937781][ T7250] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 230.938001][ T4357] usb 2-1: device descriptor read/8, error -71 [ 230.955495][ T4882] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 231.027994][ T3583] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 231.078331][ T4357] usb usb2-port1: unable to enumerate USB device [ 231.151428][ T7256] hub 9-0:1.0: USB hub found [ 231.156491][ T7256] hub 9-0:1.0: 1 port detected [ 231.855329][ T3583] usb 6-1: unable to get BOS descriptor set [ 232.012730][ T4357] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 232.194106][ T3583] usb 6-1: config 1 interface 0 altsetting 44 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 232.216359][ T3583] usb 6-1: config 1 interface 0 has no altsetting 0 [ 232.308086][ T4357] usb 2-1: device descriptor read/64, error -71 [ 232.469339][ T3583] usb 6-1: string descriptor 0 read error: -22 [ 232.475655][ T3583] usb 6-1: New USB device found, idVendor=0eef, idProduct=7224, bcdDevice= 0.40 [ 232.484894][ T3583] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.735080][ T7267] loop4: detected capacity change from 0 to 512 [ 232.990273][ T7267] EXT4-fs error (device loop4): ext4_quota_enable:6988: comm syz.4.664: Bad quota inum: 153550851, type: 0 [ 233.008951][ T7267] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-117, ino=153550851). Please run e2fsck to fix. [ 233.035978][ T7267] EXT4-fs (loop4): mount failed [ 233.098928][ T7247] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 233.139040][ T4357] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 233.159566][ T6539] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 233.418218][ T33] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 233.468876][ T4357] usb 2-1: device descriptor read/64, error -71 [ 233.528127][ T3583] usbhid 6-1:1.0: can't add hid device: -71 [ 233.534649][ T3583] usbhid: probe of 6-1:1.0 failed with error -71 [ 233.553064][ T3583] usb 6-1: USB disconnect, device number 28 [ 233.604588][ T4357] usb usb2-port1: attempt power cycle [ 234.098035][ T4357] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 234.241227][ T4357] usb 2-1: device descriptor read/8, error -71 [ 234.338172][ T4882] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -32 [ 234.352724][ T4882] usb 7-1: USB disconnect, device number 14 [ 234.627975][ T33] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 234.637054][ T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.645534][ T33] usb 4-1: Product: syz [ 234.645987][ T7285] loop5: detected capacity change from 0 to 32768 [ 234.650065][ T33] usb 4-1: Manufacturer: syz [ 234.657858][ T4290] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 234.661555][ T33] usb 4-1: SerialNumber: syz [ 234.709044][ T33] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 234.748141][ T7285] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 234.889076][ T4449] ocfs2: Unmounting device (7,5) on (node local) [ 234.948121][ T4290] usb 5-1: no configurations [ 234.953488][ T4290] usb 5-1: can't read configurations, error -22 [ 235.107848][ T4290] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 235.398122][ T4290] usb 5-1: no configurations [ 235.398296][ T33] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 235.402747][ T4290] usb 5-1: can't read configurations, error -22 [ 235.447987][ T4290] usb usb5-port1: attempt power cycle [ 235.667094][ T7306] loop6: detected capacity change from 0 to 32768 [ 235.715220][ T7306] ERROR: (device loop6): diWrite: ixpxd invalid [ 235.715220][ T7306] [ 235.726469][ T7306] ERROR: (device loop6): remounting filesystem as read-only [ 235.734545][ T7306] ERROR: (device loop6): txCommit: [ 235.734545][ T7306] [ 235.857865][ T4290] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 235.869750][ T4405] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 235.988062][ T4290] usb 5-1: no configurations [ 235.992816][ T4290] usb 5-1: can't read configurations, error -22 [ 236.009451][ T5080] usb 4-1: USB disconnect, device number 20 [ 236.077946][ T4405] usb 6-1: device descriptor read/64, error -71 [ 236.104511][ T7315] loop6: detected capacity change from 0 to 1024 [ 236.119289][ T7315] hfsplus: bad catalog entry type [ 236.347902][ T4405] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 236.358084][ T4290] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 236.458133][ T7287] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 236.487967][ T4290] usb 5-1: no configurations [ 236.492600][ T4290] usb 5-1: can't read configurations, error -22 [ 236.499707][ T4290] usb usb5-port1: unable to enumerate USB device [ 236.666908][ T4405] usb 6-1: device descriptor read/64, error -71 [ 236.673672][ T33] usb 4-1: Service connection timeout for: 256 [ 236.680151][ T33] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 236.688945][ T33] ath9k_htc: Failed to initialize the device [ 236.695890][ T5080] usb 4-1: ath9k_htc: USB layer deinitialized [ 237.110620][ T4405] usb usb6-port1: attempt power cycle [ 237.269397][ T4261] Bluetooth: hci1: command 0x0406 tx timeout [ 237.275866][ T4261] Bluetooth: hci3: command 0x0406 tx timeout [ 237.752490][ T4405] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 237.833623][ T7332] netlink: 52 bytes leftover after parsing attributes in process `syz.3.686'. [ 237.871035][ T4405] usb 6-1: device descriptor read/8, error -71 [ 238.211239][ T7337] loop3: detected capacity change from 0 to 256 [ 238.244712][ T7337] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.257925][ T4405] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 238.397914][ T4405] usb 6-1: device descriptor read/8, error -71 [ 238.471272][ T7333] loop6: detected capacity change from 0 to 32768 [ 238.541896][ T4405] usb usb6-port1: unable to enumerate USB device [ 238.809546][ T7341] overlayfs: failed to resolve './file1': -2 [ 238.853025][ T7341] Invalid ELF header magic: != ELF [ 239.200050][ T7348] loop4: detected capacity change from 0 to 1024 [ 239.283776][ T7348] hfsplus: bad catalog entry type [ 239.897926][ T4882] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 240.162092][ T7355] loop6: detected capacity change from 0 to 32768 [ 240.169760][ T7355] (syz.6.693,7355,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 240.179846][ T7355] (syz.6.693,7355,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 240.181463][ T4405] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 240.192192][ T4882] usb 4-1: no configurations [ 240.200240][ T4882] usb 4-1: can't read configurations, error -22 [ 240.357869][ T4882] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 240.468025][ T4405] usb 6-1: Using ep0 maxpacket: 32 [ 240.607952][ T4405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.620064][ T4405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.629913][ T4405] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 240.639028][ T4405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.648499][ T4882] usb 4-1: no configurations [ 240.653561][ T4882] usb 4-1: can't read configurations, error -22 [ 240.654279][ T4405] usb 6-1: config 0 descriptor?? [ 240.666330][ T4882] usb usb4-port1: attempt power cycle [ 240.691296][ T7366] loop4: detected capacity change from 0 to 32768 [ 240.703128][ T4405] hub 6-1:0.0: USB hub found [ 241.077848][ T4882] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 241.187999][ T4405] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 241.208194][ T4882] usb 4-1: no configurations [ 241.212835][ T4882] usb 4-1: can't read configurations, error -22 [ 241.368009][ T4882] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 241.461206][ T4405] hid-generic 0003:046D:C31C.0005: item fetching failed at offset 0/1 [ 241.470173][ T4405] hid-generic: probe of 0003:046D:C31C.0005 failed with error -22 [ 241.498166][ T4882] usb 4-1: no configurations [ 241.502883][ T4882] usb 4-1: can't read configurations, error -22 [ 241.512093][ T4882] usb usb4-port1: unable to enumerate USB device [ 241.667836][ T4882] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 241.808157][ T4405] usb 6-1: USB disconnect, device number 33 [ 241.858471][ T4882] usb 5-1: device descriptor read/64, error -71 [ 241.907929][ T7357] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 242.127844][ T4882] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 242.323297][ T4882] usb 5-1: device descriptor read/64, error -71 [ 242.525752][ T4882] usb usb5-port1: attempt power cycle [ 242.544769][ T7385] netlink: 52 bytes leftover after parsing attributes in process `syz.1.707'. [ 242.957978][ T4882] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 243.079134][ T4882] usb 5-1: device descriptor read/8, error -71 [ 243.351398][ T7378] loop5: detected capacity change from 0 to 32768 [ 243.363841][ T4882] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 243.458221][ T4882] usb 5-1: device descriptor read/8, error -71 [ 243.496655][ T7378] ERROR: (device loop5): diWrite: ixpxd invalid [ 243.496655][ T7378] [ 243.533809][ T7378] ERROR: (device loop5): remounting filesystem as read-only [ 243.550963][ T7378] ERROR: (device loop5): txCommit: [ 243.550963][ T7378] [ 243.578104][ T4882] usb usb5-port1: unable to enumerate USB device [ 243.686471][ T7394] loop6: detected capacity change from 0 to 1024 [ 243.751078][ T7394] hfsplus: bad catalog entry type [ 243.937092][ T7389] loop1: detected capacity change from 0 to 32768 [ 243.964687][ T7389] XFS: attr2 mount option is deprecated. [ 243.985237][ T7389] XFS: ikeep mount option is deprecated. [ 244.004483][ T7389] XFS: noikeep mount option is deprecated. [ 244.063286][ T7389] XFS (loop1): Mounting V5 Filesystem [ 244.206799][ T7389] XFS (loop1): Ending clean mount [ 244.222155][ T7389] XFS (loop1): Quotacheck needed: Please wait. [ 244.310490][ T7389] XFS (loop1): Quotacheck: Done. [ 244.463053][ T4252] XFS (loop1): Unmounting Filesystem [ 244.608385][ T7396] loop5: detected capacity change from 0 to 32768 [ 244.747551][ T7396] XFS (loop5): Mounting V5 Filesystem [ 244.814560][ T7396] XFS (loop5): Ending clean mount [ 244.841752][ T7396] XFS (loop5): Quotacheck needed: Please wait. [ 244.999926][ T7396] XFS (loop5): Quotacheck: Done. [ 245.087061][ T4449] XFS (loop5): Unmounting Filesystem [ 245.257413][ T7408] loop4: detected capacity change from 0 to 32768 [ 245.282988][ T7408] XFS (loop4): Mounting V5 Filesystem [ 245.344648][ T7408] XFS (loop4): Ending clean mount [ 245.353329][ T7408] XFS (loop4): Quotacheck needed: Please wait. [ 245.409891][ T7408] XFS (loop4): Quotacheck: Done. [ 245.462492][ T7438] netlink: 52 bytes leftover after parsing attributes in process `syz.5.718'. [ 245.533990][ T4245] XFS (loop4): Unmounting Filesystem [ 247.150523][ T7455] loop3: detected capacity change from 0 to 1024 [ 247.283232][ T7457] loop5: detected capacity change from 0 to 1024 [ 247.468980][ T7457] hfsplus: bad catalog entry type [ 247.512783][ T4357] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 247.707942][ T4357] usb 2-1: device descriptor read/64, error -71 [ 247.837808][ T4290] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 247.977876][ T4357] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 248.087844][ T4290] usb 5-1: Using ep0 maxpacket: 16 [ 248.168095][ T4357] usb 2-1: device descriptor read/64, error -71 [ 248.208116][ T4290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 248.288169][ T4357] usb usb2-port1: attempt power cycle [ 248.388097][ T4290] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 248.422520][ T4290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.451542][ T4290] usb 5-1: Product: syz [ 248.470927][ T4290] usb 5-1: Manufacturer: syz [ 248.490927][ T4290] usb 5-1: SerialNumber: syz [ 248.538471][ T4290] usb 5-1: config 0 descriptor?? [ 248.599813][ T4290] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 248.602653][ T7473] overlayfs: failed to resolve './file0': -2 [ 248.616001][ T4290] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 248.747559][ T7473] Invalid ELF header magic: != ELF [ 249.427264][ T4357] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 249.518255][ T4357] usb 2-1: device descriptor read/8, error -71 [ 249.529101][ T7488] netlink: 52 bytes leftover after parsing attributes in process `syz.5.735'. [ 249.586127][ T4290] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 249.646525][ T7492] loop1: detected capacity change from 0 to 764 [ 250.405191][ T7503] loop5: detected capacity change from 0 to 1024 [ 250.539578][ T4290] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 250.715750][ T4290] em28xx 5-1:0.0: board has no eeprom [ 250.740220][ T7506] loop6: detected capacity change from 0 to 256 [ 250.754509][ T7507] overlayfs: failed to resolve './file0': -2 [ 250.808941][ T7506] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 250.837844][ T4290] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 250.853667][ T7507] Invalid ELF header magic: != ELF [ 250.856266][ T4290] em28xx 5-1:0.0: dvb set to bulk mode. [ 250.876669][ T4290] usb 5-1: USB disconnect, device number 43 [ 250.887268][ T4324] em28xx 5-1:0.0: Binding DVB extension [ 250.914260][ T4290] em28xx 5-1:0.0: Disconnecting em28xx [ 251.125834][ T4324] em28xx 5-1:0.0: Registering input extension [ 251.148720][ T4290] em28xx 5-1:0.0: Closing input extension [ 251.215572][ T4290] em28xx 5-1:0.0: Freeing device [ 251.360148][ T7521] netlink: 52 bytes leftover after parsing attributes in process `syz.3.748'. [ 251.562668][ T7509] loop1: detected capacity change from 0 to 32768 [ 251.584711][ T7509] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.744 (7509) [ 251.652581][ T7509] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 251.672878][ T7509] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 251.692211][ T7509] BTRFS info (device loop1): using free space tree [ 251.707912][ T4290] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 251.895727][ T7509] BTRFS info (device loop1): enabling ssd optimizations [ 252.008162][ T4290] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 252.100835][ T4252] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 252.128851][ T4290] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 252.135103][ T7527] loop3: detected capacity change from 0 to 32768 [ 252.144410][ T7527] XFS: attr2 mount option is deprecated. [ 252.152275][ T7527] XFS: ikeep mount option is deprecated. [ 252.164218][ T4290] usb 5-1: can't read configurations, error -61 [ 252.222304][ T7527] XFS: noikeep mount option is deprecated. [ 252.348658][ T4290] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 252.367524][ T7527] XFS (loop3): Mounting V5 Filesystem [ 252.467676][ T7560] loop6: detected capacity change from 0 to 256 [ 252.482464][ T7565] hub 9-0:1.0: USB hub found [ 252.487580][ T7565] hub 9-0:1.0: 1 port detected [ 252.504323][ T7560] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.550666][ T7527] XFS (loop3): Ending clean mount [ 252.565546][ T7527] XFS (loop3): Quotacheck needed: Please wait. [ 252.625026][ T7527] XFS (loop3): Quotacheck: Done. [ 252.648318][ T4290] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 252.808054][ T4290] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 252.813744][ T7578] netlink: 52 bytes leftover after parsing attributes in process `syz.6.762'. [ 252.817638][ T4290] usb 5-1: can't read configurations, error -61 [ 252.872937][ T4290] usb usb5-port1: attempt power cycle [ 252.884580][ T4254] XFS (loop3): Unmounting Filesystem [ 253.020600][ T7583] loop6: detected capacity change from 0 to 1024 [ 253.467844][ T4290] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 253.629408][ T4290] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 253.758524][ T4290] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 253.848394][ T4290] usb 5-1: can't read configurations, error -61 [ 254.007861][ T4290] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 254.202460][ T4290] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 254.215047][ T7598] hub 9-0:1.0: USB hub found [ 254.221674][ T7598] hub 9-0:1.0: 1 port detected [ 254.598083][ T4290] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 254.607220][ T4290] usb 5-1: can't read configurations, error -71 [ 254.616943][ T4290] usb usb5-port1: unable to enumerate USB device [ 255.302905][ T7612] netlink: 52 bytes leftover after parsing attributes in process `syz.1.774'. [ 255.335815][ T7611] loop3: detected capacity change from 0 to 256 [ 255.381901][ T7611] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.501642][ T7618] netlink: 52 bytes leftover after parsing attributes in process `syz.6.777'. [ 255.515322][ T7589] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 255.660376][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.666737][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.917823][ T4882] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 255.977964][ T4324] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 256.197958][ T4882] usb 5-1: Using ep0 maxpacket: 32 [ 256.247675][ T7630] loop3: detected capacity change from 0 to 1024 [ 256.269733][ T4324] usb 7-1: too many configurations: 36, using maximum allowed: 8 [ 256.328135][ T4882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.347987][ T4882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.372835][ T7630] hfsplus: bad catalog entry type [ 256.380622][ T4882] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.398052][ T4882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.420330][ T4882] usb 5-1: config 0 descriptor?? [ 256.428047][ T4324] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 256.435643][ T4324] usb 7-1: can't read configurations, error -61 [ 256.488900][ T4882] hub 5-1:0.0: USB hub found [ 256.610856][ T4324] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 256.681729][ T7629] loop5: detected capacity change from 0 to 32768 [ 256.700496][ T4882] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 256.728445][ T7629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.782 (7629) [ 256.777910][ T7629] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 256.817992][ T7629] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 256.837424][ T7629] BTRFS info (device loop5): setting nodatacow, compression disabled [ 256.857671][ T7629] BTRFS info (device loop5): turning on flush-on-commit [ 256.893152][ T7629] BTRFS info (device loop5): enabling auto defrag [ 256.913489][ T7629] BTRFS info (device loop5): max_inline at 0 [ 256.923484][ T7629] BTRFS info (device loop5): using free space tree [ 256.938259][ T4324] usb 7-1: too many configurations: 36, using maximum allowed: 8 [ 257.071562][ T4324] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 257.081408][ T4324] usb 7-1: can't read configurations, error -61 [ 257.100446][ T4324] usb usb7-port1: attempt power cycle [ 257.140060][ T7629] BTRFS info (device loop5): enabling ssd optimizations [ 257.202622][ T4882] hid-generic 0003:046D:C31C.0006: item fetching failed at offset 0/1 [ 257.221716][ T4882] hid-generic: probe of 0003:046D:C31C.0006 failed with error -22 [ 257.296711][ T4449] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.508039][ T4357] usb 5-1: USB disconnect, device number 48 [ 257.532973][ T4324] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 257.805209][ T7653] loop3: detected capacity change from 0 to 512 [ 258.083784][ T7653] EXT4-fs error (device loop3): ext4_quota_enable:6988: comm syz.3.784: Bad quota inum: 153550851, type: 0 [ 258.097350][ T7653] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-117, ino=153550851). Please run e2fsck to fix. [ 258.117701][ T7653] EXT4-fs (loop3): mount failed [ 258.335808][ T4324] usb 7-1: too many configurations: 36, using maximum allowed: 8 [ 258.522909][ T4324] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 258.530614][ T4324] usb 7-1: can't read configurations, error -61 [ 258.626487][ T7665] overlayfs: missing 'lowerdir' [ 258.656841][ T7666] hub 9-0:1.0: USB hub found [ 258.663464][ T7666] hub 9-0:1.0: 1 port detected [ 259.047952][ T4324] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 259.056118][ T7670] loop3: detected capacity change from 0 to 512 [ 259.099187][ T7670] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 259.174409][ T7670] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 259.190041][ T7670] EXT4-fs (loop3): 1 truncate cleaned up [ 259.195890][ T7670] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 259.291752][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 259.298179][ T4324] usb 7-1: device not accepting address 18, error -71 [ 259.328127][ T4324] usb usb7-port1: unable to enumerate USB device [ 259.492740][ T7677] overlayfs: failed to resolve './file0': -2 [ 259.556762][ T7677] Invalid ELF header magic: != ELF [ 259.596684][ T7680] loop5: detected capacity change from 0 to 256 [ 259.714230][ T7680] FAT-fs (loop5): Directory bread(block 64) failed [ 259.726203][ T4324] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 259.750381][ T7680] FAT-fs (loop5): Directory bread(block 65) failed [ 259.764234][ T7680] FAT-fs (loop5): Directory bread(block 66) failed [ 259.777415][ T7680] FAT-fs (loop5): Directory bread(block 67) failed [ 259.791077][ T7680] FAT-fs (loop5): Directory bread(block 68) failed [ 259.811286][ T7680] FAT-fs (loop5): Directory bread(block 69) failed [ 259.825771][ T7684] loop4: detected capacity change from 0 to 1024 [ 259.832433][ T7680] FAT-fs (loop5): Directory bread(block 70) failed [ 259.845886][ T7680] FAT-fs (loop5): Directory bread(block 71) failed [ 259.884124][ T7680] FAT-fs (loop5): Directory bread(block 72) failed [ 259.906500][ T7680] FAT-fs (loop5): Directory bread(block 73) failed [ 259.986696][ T7680] syz.5.793: attempt to access beyond end of device [ 259.986696][ T7680] loop5: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 260.008002][ T4324] usb 7-1: Using ep0 maxpacket: 32 [ 260.015390][ T7680] syz.5.793: attempt to access beyond end of device [ 260.015390][ T7680] loop5: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 260.040347][ T26] audit: type=1800 audit(1730391064.715:44): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.793" name="file0" dev="loop5" ino=1048608 res=0 errno=0 [ 260.148299][ T4324] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 260.166095][ T4324] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.186650][ T4324] usb 7-1: config 0 descriptor?? [ 260.263764][ T4324] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 260.497835][ T4289] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 260.647953][ T4290] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 260.737853][ T4289] usb 6-1: Using ep0 maxpacket: 32 [ 260.859004][ T4289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.875989][ T4289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.898495][ T4289] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 260.920357][ T4289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.940769][ T4289] usb 6-1: config 0 descriptor?? [ 260.958263][ T4290] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 261.088043][ T4290] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 261.103280][ T4290] usb 2-1: can't read configurations, error -61 [ 261.139034][ T4289] hub 6-1:0.0: USB hub found [ 261.398134][ T4289] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 261.936480][ T4290] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 261.950980][ T4289] hid-generic 0003:046D:C31C.0007: item fetching failed at offset 0/1 [ 262.003506][ T4289] hid-generic: probe of 0003:046D:C31C.0007 failed with error -22 [ 262.168735][ T7712] overlayfs: failed to resolve './file1': -2 [ 262.188211][ T7712] Invalid ELF header magic: != ELF [ 262.228205][ T4290] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 262.295910][ T4289] usb 6-1: USB disconnect, device number 34 [ 262.348228][ T4290] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 262.357212][ T4290] usb 2-1: can't read configurations, error -61 [ 262.373079][ T4290] usb usb2-port1: attempt power cycle [ 262.411553][ T4324] gspca_vc032x: reg_r err -32 [ 262.416306][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.430881][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.446448][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.453462][ T4251] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 262.456572][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.466029][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.471816][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.477194][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.494938][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.525543][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.537051][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.557296][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.563302][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.569468][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.574844][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.580945][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.586322][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.592302][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.597672][ T4324] gspca_vc032x: I2c Bus Busy Wait 00 [ 262.603537][ T4324] gspca_vc032x: Unknown sensor... [ 262.608980][ T4324] vc032x: probe of 7-1:0.0 failed with error -22 [ 262.756802][ T7725] loop3: detected capacity change from 0 to 1024 [ 262.807851][ T4290] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 262.982685][ T4290] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 263.108004][ T4290] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 263.115709][ T4290] usb 2-1: can't read configurations, error -61 [ 263.300191][ T4290] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 263.459553][ T4290] usb 2-1: device descriptor read/8, error -71 [ 263.491825][ T4289] usb 7-1: USB disconnect, device number 19 [ 263.588102][ T4290] usb usb2-port1: unable to enumerate USB device [ 263.786088][ T7742] loop6: detected capacity change from 0 to 256 [ 263.813682][ T7731] loop5: detected capacity change from 0 to 32768 [ 263.848009][ T7731] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.813 (7731) [ 263.934489][ T7731] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 263.975563][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.818'. [ 263.978130][ T7731] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 264.025297][ T7731] BTRFS info (device loop5): setting nodatacow, compression disabled [ 264.064181][ T7731] BTRFS info (device loop5): max_inline at 0 [ 264.114395][ T7731] BTRFS info (device loop5): enabling disk space caching [ 264.131968][ T7731] BTRFS info (device loop5): turning off barriers [ 264.152345][ T7731] BTRFS info (device loop5): turning on flush-on-commit [ 264.172566][ T7731] BTRFS info (device loop5): doing ref verification [ 264.192018][ T7731] BTRFS info (device loop5): force clearing of disk cache [ 264.212238][ T7731] BTRFS info (device loop5): disabling tree log [ 264.227845][ T7731] BTRFS info (device loop5): enabling ssd optimizations [ 264.287857][ T7731] BTRFS info (device loop5): max_inline at 4096 [ 264.304379][ T7731] BTRFS info (device loop5): disk space caching is enabled [ 264.342839][ T7747] loop6: detected capacity change from 0 to 4096 [ 264.502676][ T7740] loop1: detected capacity change from 0 to 32768 [ 264.555386][ T7731] BTRFS info (device loop5): rebuilding free space tree [ 264.591533][ T7740] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 264.758303][ T7731] BTRFS info (device loop5): disabling free space tree [ 264.767886][ T7731] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 264.789448][ T7731] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 265.445104][ T4449] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.743422][ T4252] ocfs2: Unmounting device (7,1) on (node local) [ 266.484183][ T4251] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 266.504029][ T4251] Bluetooth: hci4: Injecting HCI hardware error event [ 266.520366][ T4262] Bluetooth: hci4: hardware error 0x00 [ 266.801922][ T7788] hub 9-0:1.0: USB hub found [ 266.806838][ T7788] hub 9-0:1.0: 1 port detected [ 267.058073][ T4292] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 267.427956][ T4292] usb 6-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 267.447455][ T4292] usb 6-1: config 47 has no interfaces? [ 267.454568][ T4292] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 267.464156][ T4292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.662509][ T7800] loop3: detected capacity change from 0 to 256 [ 267.751453][ T7801] loop6: detected capacity change from 0 to 1024 [ 267.847993][ T4292] usb 6-1: string descriptor 0 read error: -71 [ 267.867491][ T4292] usb 6-1: USB disconnect, device number 35 [ 268.891912][ T4262] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 268.986217][ T7815] loop1: detected capacity change from 0 to 1024 [ 269.136211][ T7815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 269.408803][ T26] audit: type=1800 audit(1730391074.085:45): pid=7815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.835" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 270.039799][ T7811] loop4: detected capacity change from 0 to 32768 [ 270.098981][ T7811] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.834 (7811) [ 270.476506][ T7829] fuse: Bad value for 'fd' [ 270.658123][ T7836] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 272.102874][ T7844] loop3: detected capacity change from 0 to 256 [ 272.239406][ T7811] BTRFS error (device loop4): open_ctree failed [ 272.305908][ T7844] FAT-fs (loop3): Directory bread(block 64) failed [ 272.327686][ T7844] FAT-fs (loop3): Directory bread(block 65) failed [ 272.350279][ T7844] FAT-fs (loop3): Directory bread(block 66) failed [ 272.356973][ T7844] FAT-fs (loop3): Directory bread(block 67) failed [ 272.400279][ T7844] FAT-fs (loop3): Directory bread(block 68) failed [ 272.406845][ T7844] FAT-fs (loop3): Directory bread(block 69) failed [ 272.443170][ T7844] FAT-fs (loop3): Directory bread(block 70) failed [ 272.480788][ T7844] FAT-fs (loop3): Directory bread(block 71) failed [ 272.502815][ T7844] FAT-fs (loop3): Directory bread(block 72) failed [ 272.521866][ T7844] FAT-fs (loop3): Directory bread(block 73) failed [ 272.530209][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 272.676316][ T7858] loop1: detected capacity change from 0 to 128 [ 273.587890][ T4292] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 273.617081][ T7872] loop6: detected capacity change from 0 to 1024 [ 273.644077][ T7875] loop4: detected capacity change from 0 to 128 [ 273.860812][ T4879] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 273.958019][ T4292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 273.979305][ T4292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.999754][ T4292] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 274.017806][ T4292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.047637][ T4292] usb 6-1: config 0 descriptor?? [ 274.098878][ T4292] hub 6-1:0.0: USB hub found [ 274.279329][ T4879] usb 2-1: config 0 has no interfaces? [ 274.287868][ T4879] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.337043][ T4879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.413539][ T4879] usb 2-1: config 0 descriptor?? [ 274.565558][ T7877] loop4: detected capacity change from 0 to 32768 [ 274.602501][ T4292] hub 6-1:0.0: 1 port detected [ 274.626407][ T7877] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.853 (7877) [ 274.627924][ T4292] hub 6-1:0.0: config failed, can't get hub status (err -5) [ 274.699763][ T4879] usb 2-1: USB disconnect, device number 40 [ 274.734591][ T7877] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 274.751744][ T7877] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 274.760754][ T4292] usbhid 6-1:0.0: can't add hid device: -71 [ 274.770831][ T7877] BTRFS info (device loop4): setting nodatacow, compression disabled [ 274.782901][ T4292] usbhid: probe of 6-1:0.0 failed with error -71 [ 274.790730][ T7877] BTRFS info (device loop4): max_inline at 0 [ 274.797625][ T7877] BTRFS info (device loop4): enabling disk space caching [ 274.817071][ T7877] BTRFS info (device loop4): turning off barriers [ 274.825609][ T4292] usb 6-1: USB disconnect, device number 36 [ 274.846010][ T7877] BTRFS info (device loop4): turning on flush-on-commit [ 274.864660][ T7877] BTRFS info (device loop4): doing ref verification [ 274.899111][ T7877] BTRFS info (device loop4): force clearing of disk cache [ 274.907491][ T7877] BTRFS info (device loop4): disabling tree log [ 274.920459][ T7877] BTRFS info (device loop4): enabling ssd optimizations [ 274.927659][ T7877] BTRFS info (device loop4): max_inline at 4096 [ 274.949937][ T7877] BTRFS info (device loop4): disk space caching is enabled [ 275.050142][ T7877] BTRFS info (device loop4): rebuilding free space tree [ 275.070894][ T7877] BTRFS info (device loop4): disabling free space tree [ 275.094285][ T7877] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 275.104337][ T14] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 275.133248][ T7877] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 275.403606][ T4245] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 275.538355][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.574505][ T14] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.604381][ T14] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 275.633537][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.680083][ T14] usb 4-1: config 0 descriptor?? [ 275.856725][ T7891] loop6: detected capacity change from 0 to 32768 [ 275.902341][ T7891] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 275.943264][ T7891] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 276.019460][ T7891] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 276.059093][ T4292] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 276.067857][ T4292] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 276.120405][ T4292] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 52ms [ 276.140974][ T4292] gfs2: fsid=syz:syz.0: jid=0: Done [ 276.149802][ T7891] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 276.196558][ T7891] gfs2: fsid=syz:syz.0: original: gfs2_fill_super+0x2076/0x2680 [ 276.205011][ T7891] gfs2: fsid=syz:syz.0: pid: 7891 [ 276.210121][ T7891] gfs2: fsid=syz:syz.0: lock type: 1 req lock state : 3 [ 276.217065][ T7891] gfs2: fsid=syz:syz.0: new: gfs2_reconfigure+0x712/0xcf0 [ 276.224230][ T7891] gfs2: fsid=syz:syz.0: pid: 7891 [ 276.229297][ T7891] gfs2: fsid=syz:syz.0: lock type: 1 req lock state : 3 [ 276.236355][ T7891] gfs2: fsid=syz:syz.0: G: s:SH n:1/2 f:qb t:SH d:EX/0 a:0 v:0 r:4 m:20 p:0 [ 276.245299][ T7891] gfs2: fsid=syz:syz.0: H: s:SH f:eEH e:0 p:7891 [syz.6.857] gfs2_fill_super+0x2076/0x2680 [ 276.256262][ T7891] ------------[ cut here ]------------ [ 276.261817][ T7891] kernel BUG at fs/gfs2/glock.c:1555! [ 276.267240][ T7891] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 276.273325][ T7891] CPU: 0 PID: 7891 Comm: syz.6.857 Not tainted 6.1.114-syzkaller #0 [ 276.281306][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.291380][ T7891] RIP: 0010:gfs2_glock_nq+0x1375/0x1590 [ 276.296929][ T7891] Code: 2b fe 0f b7 4d 00 48 c7 c7 40 c1 50 8b 48 8b 74 24 28 89 da e8 5c d6 ed 06 31 ff 48 8b 74 24 10 ba 01 00 00 00 e8 7b 76 ff ff <0f> 0b 89 d9 80 e1 07 fe c1 38 c1 0f 8c 5d f1 ff ff 48 89 df e8 42 [ 276.316534][ T7891] RSP: 0018:ffffc90005837b30 EFLAGS: 00010246 [ 276.322598][ T7891] RAX: fea6a5a1c892d900 RBX: 0000000000000001 RCX: 0000000000040000 [ 276.330559][ T7891] RDX: ffffc90004b8a000 RSI: 0000000000018e7b RDI: 0000000000018e7c [ 276.338522][ T7891] RBP: ffffc90005837ce2 R08: ffffffff83b67370 R09: fffffbfff1d34036 [ 276.346487][ T7891] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100ed30a37 [ 276.354468][ T7891] R13: ffff88805242c9e0 R14: ffff8880769851c2 R15: ffffc90005837cd8 [ 276.362431][ T7891] FS: 00007f8565da66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 276.371349][ T7891] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.377923][ T7891] CR2: 0000001b30d1fffc CR3: 000000005c6a8000 CR4: 00000000003506f0 [ 276.385889][ T7891] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 276.393850][ T7891] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 276.401811][ T7891] Call Trace: [ 276.405080][ T7891] [ 276.408009][ T7891] ? __die_body+0x5e/0xa0 [ 276.412340][ T7891] ? die+0x83/0xb0 [ 276.416056][ T7891] ? do_trap+0x11e/0x350 [ 276.420290][ T7891] ? gfs2_glock_nq+0x1375/0x1590 [ 276.425222][ T7891] ? gfs2_glock_nq+0x1375/0x1590 [ 276.430152][ T7891] ? do_error_trap+0x13d/0x1e0 [ 276.434907][ T7891] ? gfs2_glock_nq+0x1375/0x1590 [ 276.439839][ T7891] ? do_int3+0x30/0x30 [ 276.443898][ T7891] ? rcu_is_watching+0x11/0xb0 [ 276.448652][ T7891] ? handle_invalid_op+0x2c/0x40 [ 276.453604][ T7891] ? gfs2_glock_nq+0x1375/0x1590 [ 276.458552][ T7891] ? exc_invalid_op+0x2f/0x40 [ 276.463226][ T7891] ? asm_exc_invalid_op+0x16/0x20 [ 276.468250][ T7891] ? gfs2_dump_glock+0x1760/0x1b00 [ 276.473373][ T7891] ? gfs2_glock_nq+0x1375/0x1590 [ 276.478309][ T7891] gfs2_freeze_lock_shared+0x5f/0xc0 [ 276.483591][ T7891] gfs2_reconfigure+0x712/0xcf0 [ 276.488440][ T7891] ? gfs2_get_tree+0x210/0x210 [ 276.493200][ T7891] ? gfs2_reconfigure+0x712/0xcf0 [ 276.498216][ T7891] ? rwsem_write_trylock+0x166/0x210 [ 276.503495][ T7891] ? hook_sb_remount+0x19/0xc0 [ 276.508257][ T7891] reconfigure_super+0x43a/0x870 [ 276.513192][ T7891] __se_sys_fsconfig+0x98b/0xec0 [ 276.518138][ T7891] ? __x64_sys_fsconfig+0xc0/0xc0 [ 276.523161][ T7891] ? syscall_enter_from_user_mode+0x2e/0x230 [ 276.529132][ T7891] ? lockdep_hardirqs_on+0x94/0x130 [ 276.534321][ T7891] ? __x64_sys_fsconfig+0x1c/0xc0 [ 276.539343][ T7891] do_syscall_64+0x3b/0xb0 [ 276.543749][ T7891] ? clear_bhb_loop+0x45/0xa0 [ 276.548420][ T7891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.554308][ T7891] RIP: 0033:0x7f8564f7e719 [ 276.558726][ T7891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.578333][ T7891] RSP: 002b:00007f8565da6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 276.586744][ T7891] RAX: ffffffffffffffda RBX: 00007f8565135f80 RCX: 00007f8564f7e719 [ 276.594708][ T7891] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 276.602668][ T7891] RBP: 00007f8564ff132e R08: 0000000000000000 R09: 0000000000000000 [ 276.610632][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.618593][ T7891] R13: 0000000000000000 R14: 00007f8565135f80 R15: 00007fffbe210288 [ 276.626560][ T7891] [ 276.629568][ T7891] Modules linked in: [ 276.633538][ T7891] ---[ end trace 0000000000000000 ]--- [ 276.639042][ T7891] RIP: 0010:gfs2_glock_nq+0x1375/0x1590 [ 276.644626][ T7891] Code: 2b fe 0f b7 4d 00 48 c7 c7 40 c1 50 8b 48 8b 74 24 28 89 da e8 5c d6 ed 06 31 ff 48 8b 74 24 10 ba 01 00 00 00 e8 7b 76 ff ff <0f> 0b 89 d9 80 e1 07 fe c1 38 c1 0f 8c 5d f1 ff ff 48 89 df e8 42 [ 276.664292][ T7891] RSP: 0018:ffffc90005837b30 EFLAGS: 00010246 [ 276.670409][ T7891] RAX: fea6a5a1c892d900 RBX: 0000000000000001 RCX: 0000000000040000 [ 276.678433][ T7891] RDX: ffffc90004b8a000 RSI: 0000000000018e7b RDI: 0000000000018e7c [ 276.686507][ T7891] RBP: ffffc90005837ce2 R08: ffffffff83b67370 R09: fffffbfff1d34036 [ 276.694512][ T7891] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100ed30a37 [ 276.702525][ T7891] R13: ffff88805242c9e0 R14: ffff8880769851c2 R15: ffffc90005837cd8 [ 276.710541][ T7891] FS: 00007f8565da66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 276.719515][ T7891] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.726102][ T7891] CR2: 0000001b30d1fffc CR3: 000000005c6a8000 CR4: 00000000003506f0 [ 276.734124][ T7891] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 276.742130][ T7891] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 276.750156][ T7891] Kernel panic - not syncing: Fatal exception [ 276.756523][ T7891] Kernel Offset: disabled [ 276.760843][ T7891] Rebooting in 86400 seconds..