last executing test programs: 15m2.637156623s ago: executing program 32 (id=194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) 13m26.893047035s ago: executing program 33 (id=758): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c94ffb00"}]}}, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000980)={0x0, 0x71, 0x5, &(0x7f0000000940)={0x9b, "79b8142115db2c05f171f5306c0c14f1e37ef9335b6e140c0afd2077a025abe98e"}}) 12m30.756826707s ago: executing program 34 (id=1076): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r2, 0x0, 0x3, 0x1}}, 0x20) 11m2.875306639s ago: executing program 35 (id=1581): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10m54.727030136s ago: executing program 36 (id=1635): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 10m43.071611335s ago: executing program 37 (id=1713): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x60400) 8m56.942582439s ago: executing program 0 (id=2416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 8m56.612575372s ago: executing program 0 (id=2419): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000004000000000000000000008500000036000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x2, @val=@tracing}, 0x20) syz_emit_ethernet(0x3a, &(0x7f00000003c0)=ANY=[], 0x0) 8m56.286961869s ago: executing program 0 (id=2420): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xb8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 8m56.012350883s ago: executing program 0 (id=2423): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 8m54.891071165s ago: executing program 0 (id=2435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x3c, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x10}]}, 0x3c}}, 0x0) 8m53.993087102s ago: executing program 0 (id=2440): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) recvfrom$packet(r0, &(0x7f0000000180)=""/251, 0xfb, 0x10020, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 8m53.49882241s ago: executing program 38 (id=2440): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) recvfrom$packet(r0, &(0x7f0000000180)=""/251, 0xfb, 0x10020, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 8m25.311835341s ago: executing program 2 (id=2676): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x24000840) 8m24.726293196s ago: executing program 2 (id=2682): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) writev(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 8m23.282997125s ago: executing program 2 (id=2692): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000cc0)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179444eb7dc989632", 0x40}, {&(0x7f0000000600)="639d48c0a007bd0900000000000000b7", 0x10}], 0x2, &(0x7f0000000380)=[@assoc={0x10, 0x117, 0x4, 0x40}], 0x10}], 0x1, 0x20000000) 8m23.053246903s ago: executing program 2 (id=2695): unshare(0x2020600) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000"], 0x3, 0x6cd, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) 8m22.434270008s ago: executing program 2 (id=2698): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 8m21.3261743s ago: executing program 2 (id=2707): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 8m20.834998611s ago: executing program 39 (id=2707): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 5m42.503055502s ago: executing program 1 (id=4008): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 5m42.063248365s ago: executing program 1 (id=4014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 5m41.628756008s ago: executing program 1 (id=4019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 5m41.152788912s ago: executing program 1 (id=4024): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x8, 0x28, 0xe4d, 0x80, 0x800, 0xfffd, 0xff, 0x7, 0x800, 0x3, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) gettid() 5m38.734964941s ago: executing program 1 (id=4047): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x120c40a, &(0x7f0000000a00)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@errors_remount}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@test_dummy_encryption}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$eJzs3EtvG0UcAPD/bpK+S0Ipjz6AQEFEPJImLdADFxBIvSAhwaEcQ5pWpWmDmiDRqiIBoXJE/QTAEYlPwAkuCDiBuMIdIVWoF1oOaNHaa9c4dmrHTp3Gv5+02ZndtWf+3h17dsZOAH1rNP+TROyKiN8iYjgiBuoPGC2vbly/PHPz+uWZJLLszb+S/GHx9/XLM5VDk2K9s8iMpRHpJ0kcaFDuwsVLZ6fn5mYvFPmJxXPvTSxcvPTcmXPTp2dPz56fOnbs6JHJF1+Yer4rce7O67r/w/mD+46/ffX1mRNX3/nx67y+u4r9tXGUjXRc5miMVl+Tek92/Owby+5i3SxeNqa8rQ9GxFCp/Q/HQClXNhyvfdzTygHrKsuybOuKrdUewHIGbGJJ9LoGQG9UPujz+9/Kcge7Hz137eXyDVAe941iKe8ZjLQ4Zqjm/rbbRiPixPI/n+dLNByHAADorm/z/s+zjfp/aTxQc9w9xdzQSETcGxF7IuK+iNgbEfdHlI59MCIearP80br8yv7PL9vXFFiL8v7fS8Xc1v/7f5XeX4wMFLndpfiHklNn5mYPF6/JWAxtzfOTq5Tx3au/ftZsX23/L1/y8it9waIefw7WDdCdnF6c7iTmWtc+Ko0BLq2MP6nOBCQRsS8i9q/h+bdFxJmnvzrYbP/t41/F4BoqVCf7MuKp8vlfjrr4K5LV5ycntsXc7OGJylWx0k8/X3mjWfkdxd8F+fnf0fD6r8Y/ktTO1y60X8aV3z9tek+z1ut/S/JWKb2l2PbB9OLihcmILcnyyu1Ttx5byVeOz+MfO9Qg/ptZ/h737xfF4w5ERH4RPxwRj0TEo0XdH4uIxyPiUIPYsqXy+odXnnh37fGvrzz+k22d//YTA2e//6ZZ+a2d/6Ol1FixpZX3v1Yr2MlrBwAAAHeLtPQd+CQdr6bTdHy8/B3+vbEjnZtfWHzm1Pz750+Wvys/EkNpZaRruGY8dLIYG67kp+ryR0rjxlmWZdtL+fGZ+bn1mlMHWrOzSfvP/THQ69oB666teTS/8IJNpQvz6MBdSvuH/qX9Q//S/qF/NWr/SxE3elAV4A67zef/rf8SAGw6+v/Qv7R/6F/aP/SlTn7Xv1piz/H1eubNlhjYGNVoOxHphqhGS4mh4mqvbkk3SMVKia0R0erBS3GnKtbjNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu+S8AAP//28vuNQ==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$nfs4(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) 5m38.359682519s ago: executing program 1 (id=4051): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000380)='F', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0xa}]}, 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) 5m23.072810998s ago: executing program 40 (id=4051): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000380)='F', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0xa}]}, 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) 40.731827853s ago: executing program 8 (id=6586): setfsgid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f00000017c0)={&(0x7f00000000c0)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0xffffffffc0005400, 0x1, 0x1, 0xfffffffc, 0x9, 0x0, 0x0, 0x35, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={0x474203, 0x5d4}, 0x18) 39.78943011s ago: executing program 8 (id=6598): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') 39.544425864s ago: executing program 8 (id=6601): r0 = io_uring_setup(0x5043, &(0x7f0000000180)={0x0, 0x3d1f, 0x1000, 0x0, 0x24f}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) close_range(r0, 0xffffffffffffffff, 0x0) 39.099358856s ago: executing program 8 (id=6606): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000840)={[{@errors_remount}, {@mblk_io_submit}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb}}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@noinit_itable}]}, 0x3, 0x450, &(0x7f0000001100)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x80, 0x0) 38.478409594s ago: executing program 8 (id=6613): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r0 = syz_io_uring_setup(0x12c4, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 36.637823593s ago: executing program 8 (id=6632): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) lseek(r1, 0x3cb, 0x4) 36.100075851s ago: executing program 41 (id=6632): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) lseek(r1, 0x3cb, 0x4) 6.974444476s ago: executing program 7 (id=6899): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffffffffffffff7c]}, 0x8, 0x0) readv(r0, &(0x7f0000001200)=[{&(0x7f0000000480)=""/208, 0xd0}], 0x1) timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") rt_sigaction(0xe, &(0x7f0000000180)={&(0x7f0000000100)="f30f1efc66450f2832c482adbcaf07000000c4e1e00300aa9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x8000000, 0x0, {[0x8000]}}, 0x0, 0x8, &(0x7f0000000200)) 5.653075309s ago: executing program 5 (id=6910): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x564, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x84) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 5.651988813s ago: executing program 7 (id=6911): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304306000002000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000001000)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000013c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="200105"], 0x0}) 4.928379395s ago: executing program 5 (id=6916): syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee5, 0x1000, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 4.057143431s ago: executing program 4 (id=6921): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file1\x00'}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 3.901027882s ago: executing program 6 (id=6923): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000040), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], 0x0}) 3.781804663s ago: executing program 5 (id=6924): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) 2.863467187s ago: executing program 4 (id=6927): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r2, 0x25, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x10, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.86152183s ago: executing program 9 (id=6928): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) 2.495277455s ago: executing program 6 (id=6929): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x6, 0x19577d, 0x33104d}) 2.494622029s ago: executing program 4 (id=6930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001200)=""/254, 0xfe}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.493681697s ago: executing program 9 (id=6931): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) 2.342089111s ago: executing program 7 (id=6932): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x0, 0x0, 0x100000}) truncate(&(0x7f0000000040)='./file1\x00', 0x40006) 2.327417417s ago: executing program 3 (id=6933): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.194304161s ago: executing program 9 (id=6934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "7c6d8f74584dc700", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1.938791874s ago: executing program 3 (id=6935): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "f64d87da603fa09a", "ec9580400006000000ba6a6b247009d4", "be164209", '\x00\x00\x00\x00\x00\x00\b\x00'}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="ac", 0x1}], 0x12) 1.874250855s ago: executing program 9 (id=6936): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c66) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) fallocate(r1, 0x8, 0x0, 0x8000) 1.804509128s ago: executing program 4 (id=6937): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLKMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfAmctKTLluTNuuypprPB05533NO8p435zxvn5M3IQEMrYnsTyHixYj4Kok4HBFJvm008o0Ta/utPrw+my1JNBof/5E098vqredqPe5gXnkhIn75IuJkYWO7teWVhVK5nC7m9cl65cpkbXnl1KVKaT6dTy9Pz8yceXNm+p233+pbX187/9e3H919/8yXx1e/+en+kdtJnI1D+bb2fjyDG+2ViZjIX5OxOPvEjlN9aGw3SQZ9AGzLSB7nY5GNAYdjJI964L/v84hoAEMqEf8wpFp5QOvefvP74P/vUFaycx68t3YDtLH/o2vvjcS+5r3RgdXksTuj7H53vA/tZ238/Pud29kS/XsfAmBLN25GxOnR0Y3jX5KPf9t3uvPqfe2VJ9sw/sHOuZvlP693yn8K6/lPdMh/DnaI3e3YOv4L9/vQTFdZ/vdux/x3fdJqfCSv/a+Z840lFy+V09N5NnwixvZm9c3mc86s3mt029ae/2VL1n4rF8yP4/7o3scfM1eql56lz+0e3Ix4qWP+m6yf/6TD+c9ej/M9tnEsvfNKt21b9//5avwQ8WrH8/9oRivZfH5ysnk9TLauio3+vHXs127tD7r/2fk/sHn/x5P2+dra07fx/b6/027bHut/9H7970k+aZb35Ouuler1xamIPcmHG9dPP3psq97aP+v/ieObj3+drv/9EfFpj/2/dfTHl3vq/4DO/9xTnf+nL9z74LPvurXf2/j3RrN0Il/Ty/jX6wE+y2sHAAAAAAAAu00hIg5FUiiulwuFYnHt8x1H40ChXK3VT16sLl2ei+Z3ZcdjrNCa6T7c9nmIqfzzsK369BP1mYg4EhFfj+xv1ouz1fLcoDsPAAAAAAAAAAAAAAAAAAAAu8TBLt//z/w2MuijA547P/kNw2vL+O/HLz0Bu5L//zC8xD8ML/EPw0v8w/AS/zC8xD8ML/EPw0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dP3cuWxqrD6/PZvW5q8tLC9Wrp+bS2kKxsjRbnK0uXinOV6vz5bQ4W61s9XzlavXK1HQsXZusp7X6ZG155UKlunS5fuFSpTSfXkjHdqRXAAAAAAAAAAAAAAAAAAAA8O9SW15ZKJXL6aKCwrYKo7vjMBT6XBj0yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj/wTAAD//wQrN8c=") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000280)='B', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x60000000, 0x0, 0x1, 0x6}) 1.612786662s ago: executing program 6 (id=6938): r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x25) mq_open(&(0x7f0000000580)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00\xfb#\x12T\xde\x0e<\xd7\xd1\xad\x1cj\r%\xc3\x85*\"\xd8', 0x40, 0x2c, 0x0) 1.518216409s ago: executing program 3 (id=6939): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 1.083197499s ago: executing program 9 (id=6940): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000800)=ANY=[@ANYBLOB='iocharset=cp932,umask=00000000000000000000006,iocharset=cp850,utf8,fmask=00000000000000000000343,namecase=1,gid=', @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES16, @ANYRESOCT], 0x1, 0x1533, &(0x7f0000004680)="$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") mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2200000, 0x0) syz_mount_image$ntfs3(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x5042009, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x1, 0x1f224, &(0x7f000003b6c0)="$eJzs3Qm8DeX/B/Bn9n1fjt3FtYZsiST7mn1LpSwhO9miVJJICUVItiRbklBJEkmUZF9DkiRJlJDE/3XPPfd2l+OnW/0rPZ/36+XOOXNmnmdmPmeu+52ZM+fbZuMatajdPCEhIYHYDEl2nqQzlAwll2Ov8bFxl2NDJvZvUNsFlXabn3ZJGmfmXXXfkIX5V/fXWi0z35HIJvvub0+VObIp3JT920stunTtl9C1X0Kv3v0T2id06N27f/sOPToldOzar3vJhCY9OrXv1ymha69+nfqme7lzj959+gxOaN+ro6H26dupX7+E9r0GJ3TvNDihf++E/n0HJ7S/t33XXgklS5ZMMFQCv1PLBf/0EgAAAAAAAAAAAAAAAAAAwF/j8uXUU/sAAAAAAAAAAAAAAAAAAABwjapdr0GtUkRJfc4QhtQlDJnHEELs36ZL+dw/d4V2kiZtF32ULfqzbsqjM91L97iwh7nSUIzXWJwLEkoRQrqkts+S+tFHDBGi44Sr9kMWxxqNDVP65blE0pDUJi1iz4fGlp0hVdMtyC2xYdWUEae4uEOnSvKWWpyuncxbrWraDUcIkUn6ocOw0eHly5cvx9tEf40rpQl0QP50Q/50Q/50Q/50Q/50Q/7Xmr+2ruSuWP93yVD/c7FqmL3Ccv0d9X+f1PZZ0iyr9X/V9BsopV85tf5vSLqSvqRvbPyVjgNwGbdz1fjDfPzlNNv53+pKaQIdkD/dkD/dkD/dkD/dkP9/n/w/XkP+dGMz1f/s/6j/2dg/JU5L//r6P/UKhuRh2vq/AelN7iW1SVfSg3SKjb9S/V8lNkyt/zO0mzLMV5WLzoT6H/69kD/dkD/dkD/dkD/dkD/dkD/dMtf/XKz+P5Wh/hdjxwD4K7Rkx+rllPq/1B+s/9Nf58+QJlmu89NLaV/iEkkr0pv0IANIT9Ip2u7Q1H5Y0jG1R35o0nqkfB7Aj75aLran+GQG4xImuRfBjc0fHZc8gZBACElgSbppMr5GYsdKSqX2zxM39qgfGUweIN1Je9IjejQi5XqEPoSQIqnTC0RP3dLJUo4zDE0dny31aoVsVzwOcaU0gQ7In27In27In27InzJSyoPkv6eRP92QP934TPU/H6v/Z2qZP//Ppx4xapGppb+y/v9T5/lTvv0/Nkx7nr8a6U/6k76kJulEOsfGpz8OwP3u4wCjSObjANFxWTwOEK3XVZLaa9JyJz1KJM1JC1KNNCI1STXSjNQkbUk90ojUJo1JM9KQVCMtSD3SmDTKStyZXPn4X5roo9c6lIo9rhsbJkaXoAVpRuqR6qQlaUFqkbakAakXXe7/fwlpHg9N8/hyTCKpTeqRBtGlakSqkYak1t+wVL8pleZxdUJIzZTHsU2eSBqT6qQ+qUVqkBbRbGv+rcuXfP0Km+ZxDJOyfM2jy9YymnALcjtpS2qSWqQ5qREd04S0iL4T/780SfM4fr6tSGPSgLSMJpuUsfD/tizxtEvzuGraPSl1+6Vfvr9+3/3f+mRYPj32OGWYGP29wpJq/4/L8L8MvcL43/KtF/3dV4u0Jm1JM9KYNP5bfq+kGJfmcdWrLl810oA0II1JjT+dbZXfOd3MNI/j7x/Vo/tt0rutyRVb+f87/7P4qsvXjNQiTaL/tzWP7iFNSOPoNv17Ul59heVLCTuR1CLV/oH9NsWWDIuU8XOcycv3Z/3x/A9d8ZXkX4CJ0f2hDqlDakX/dmkZ3XYNUv8vaR7926FW9H/m/xdpzgQNvdIL/2J/z3WjOP977ftf1/dfDfKnW+bz/0K0/ueIzWY+/y9EK+RScVu6Wv1f+GyxMmmHKeMLJaQrNaPz/fY5AiZaFf3J8//R9hmuZPR5k3TX9f/2/k+ZMfVvvViBWdxOP3TYGtFh0t+HrZMe8MnHDSrEZkn6u7AsKRVdDya2YVIupSgS+5d2IbNluIvDzNgyMnzV1KO0adVNu8HjDFP6d5jkendxynUDfPJ1BnK65eRSl+Xf/TkF+P+B+7/QDfnTDfnTDfnTDfnTDfnTLfP9/8TY+f92cT7/L/7D9/9Le///LH8uILYuVVPXM5nEJZLqpCvpT3qS9qTPFT/3nyLj/RUz3v7PYWpHh3Hq6X/hwbZ/4SLB3wj50w350w350w350w350w350y3z+X8pVv9viPP9f9JV6v+//vP/LGmQ1To/5cLw2DClfSFa5/cmvUn/6PN/w3X/8Y4zXOk6hIxDJ9bOnztvj/2fbsifbsifbsifbsifbsifbsifbpnrfzlW/z8Rp/6X/zXf/8f9gfv/p5f2vgDVSXvSkdSI3huwH4l3Hz029dHQdNfn/9bspdjD1OvzT+VNP4xJ6Y29nDzDP3vdPfZ/uiF/uiF/uiF/uiF/uiF/uiF/umWu/5Vo/a8Qm0tf/wux7/3jSL24Lf2J+j8hY1vMVa///0u+FyDar8QlkuakE7mHDCB9SacM9f1v+0fK+fjfPn+ffO/MPkz6YVJrNUlz4lSrE30+LuVeObH7BKxO/fx90nTJrbkk/X0CFqe5f1K26BUISeuffJ+PpolLo9snZZhyb5shhJB6pF6m6WceOFidZX4bphyy6Bidnss0/SmXO580TcqQZGg/bd5sbP02kN/uLzAvzfqlTG9nWL/JsX8kekVFcv9FUu5FeoW+M053pW2QcborrXvG9aDz/gf4/BfdkD/dkD/dkD/dkD/dkD/dMn/+X42d/58X5/y/+q/5/D/3B+r/lCVPHqb9/H9L0ofUIO1Jv1j9H++6/JSz+L/dC5qNO8yX8ER0mNIOEZKvH0iI3YcvkdQjvUhn0js2V9L4ooQQvWvO7vc/vH9fxvX+K+tSNdMYHP+jG/KnG/KnG/KnG/KnG/KnG/KnW5rz/wOTx2ix+/+PYzPf/0/7H0eM/kT9b2ds6286/x/tN6n+r0UGkf6kE+lFOkbPZw9iUs5ns6Q1c/X7+tdlkv8lyZ68BqRd7FuCtJSfWVy+QrHrE0QukTQmHUg3Ui/1HgV/XftctP2mZED0vgjtCSE5Yu13iX23259dfplLJM1IJ9KHtCd9o0dYMr9v6D3//k/D8V+6IX+6If//tKt+1R3ypxvypxvyp1vm8/96tHZnSKk49//X/4b7/6W/Lx/7u+/LN4PJfF++6Lg/8n38qf0zqY/+m/Upjv/RDfnTDfnTDfnTDfnTDfnTDfnTLfPn/4249f9l5rc54kP9fy3C/k835E835E835E835E835E835E+3zPW/+T/O/5uo//9jsP/TDfnTDfnTDfnTDfnTDfnTDfnTLXP9b/2P+t+6Rur/5LsVov6/Ouz/dEP+dEP+dEP+dEP+dEP+dEP+dMtc/6fU8ZNJ+vqfSZ0jvr+q/pfJf7HO/rfC/k835E835E835E835P8fdPr3p4r86Yb86Za5/nf+4fr/v3me/d8K+z/dkD/dkD/dkD/dkD/dkD/dkD/dMtf/7u+q/6tm+maZ/7/6f9lfs6oQB/Z/uiF/uiF/uiF/uiF/uiF/uiF/umWu/z2c/6cI9n+6IX+6IX+6IX+6IX+6IX+6IX+6Za7/fdT/FMH+TzfkTzfkTzfkTzfkTzfkTzfkT7fM9X+A+p8i2P/phvzphvzphvzphvzphvzphvzplrn+D1H/UwT7P92QP92QP92QP92QP92QP92Q/3+OlJWJM9f/kb+j/r+c7BHU//8w7P90Q/50Q/50Q/50Q/50Q/50Q/50y1z/M4QhdYlBhrLp638+Vs+zV/h+/qRJ20UfJdf/dePW/1Km4wGFCEnI2BaT6dsFko8ndEltnyGNoo8YokXHaVe9ziBjeyn9ilwiaUoGkN6kP2lPCBlHCBkU3TRJ/XCkNUmeMJE0Tp3Xia0wk+a4R93YawnRLUVIkdjGY5J3MSGpjQQ2+UBKQobtxsb6PZXaL0u2pPbbNN20aftdHftHovdtKBXb7nwsx+R20614bFtcTsVmOt7ik6rRYetYO0kNXL2dZKn5ZVznOOuL4zz/Bvj9TzfkTzfkTzfkTzfkTzfkT7cr1/9dmPT1P0cIyX6V8/9Xr/8zD/8N9X9j0oF0IxzpGKvDm5Df6vBScep/j6SvwxNI5pW4Nupc7P90Q/50Q/50Q/50Q/50Q/50Q/7Uin5O4Mr1/7g49X+O2DCev6P+75PaPkOa/UX1v8wlkmakE+lD2pO+pB/pFHt9XEp/seMATVKPAzRLbSPjcYCqsX9JcsWGCUSPDnVCZuaObeGM2+2fO05wpTSBDsifbsifbsifbsifbsifbsifbly0/i+Wof6vSjgyOcP1/wIpRHrEaeG3uj9ZSt0/snfRMkl195WGCQlpW0/G/s/z/slL1yBW9wuxpbpaPxnbS+q3RHTOzqQr6UE6xa6bT6r37aSp+eR6/1RqvV+PlCWl7pfSrHBKvX8o9o+k1vsMaRddQkJyxp5fdfliWyFH7HL7pD7jLV/uP9p+Rnza9guRTqR0pjyTot+Sek1D8ucg5NijpHlvjq1369TX+ei4bLHvjyQiTxIbtG5Zr2Zym2nG1YkzrmHjmuS7arH+/93XS/zXFPqnFwD+UcifbsifbsifbsifbsifboWuUP8zZAuTsf4vGLeFP1z/x2krK/X/X11fD40tOxM9g5/5upiqaVc4TXspw3zMsOjS/91186OxxfpjdXP8TIEWyJ9uyJ9uyJ9uyJ9uyJ9uyP+f9s/WiwWvWP/3yXD+XyQFU+4Il84frf/jNXaF+t/+U/V/RnzG+j/5/PfQ1E8uZEut/7PF7q+3JXVmjiyPjdcJmbmYENKItIr+TNKG9Cc9SR/ShvQjg8kDpATpSnqS9uRe0in6rxcpS0qRiqQiuYGUIaVJRXIjqUjapDkSkf5xFVKFtPmLW03/fit4lfeb8Gffb5dfTPd+g38X/P6nG/KnG/KnG/KnG/KnG/Kn25XrfznT9f9/7Px/4bPF0g3/qvP/Ga//v1I/KeugxlpI6vf2K9T/WTn/n9JeyjAf89j/PP+f1Gf/WH09LvV1Pjruzx7PiX72QBPJgH6d+pYc1L5//76lSWwQ57UyJDaI5o+6nGb4/U835E835E835P8fp/zvl5E/3ZD/P+3fd/6fjdb/FeKc/4/nSvV/xno84zDr9X/y+eiM9f/V+old3k+KFEgeZr7+v2yGfkjc4wx/vp9owX3F4wwpj6qmXfE07aUM83HD/9dxhksp38T3+943yZn+jvcN8+c+ZwD/Tvj9TzfkTzfkTzfkTzfkTzfk/0/799X/yef/9/zJz///lfV/nzRL1yKrdXlsHTrGWkipy5XUurwkuYf0Jj1iU2T1OoCUdlOG+ZiR19B9ALD/0w350w350w350w350w350w35/9P+bfU/idW4STVw+jv0S3GXH+eDr2XxMwVaIH+6IX+6IX+6IX+6IX+6IX+6SVmo/+W4LaD+v5bFzxRogfzphvzphvzphvzphvzphvzpJmeh/o9/KxHU/9eyq9weBv7jkP9/1y+/4zcz8qcb8qcb8qcb8qcb8qebkoX6X43bAur/a1n8TIEWyJ9uyJ9uyJ9uyP8/q+3vObeL/OmG/OmmZqH+1+K2gPr/WhY/U6AF8qcb8qcb8qcb8qcb8qcb8qebloX6X4/bAur/a1n8TIEWyJ9uyJ9uyJ9uyJ9uyJ9uyJ9uehbqfyNuC6j/r2XxMwVaIH+6IX+6IX+6IX+6IX+6If//AvEPz2lkof4347aA+v9aFj9T+M+ZEH808qcb8v9P4bM6A/KnG/KnG/KnG/Knm5mF+t+K2wLq/2tZ/EyBFsifbsifbsifbsifbsifbsifblYW6n87bguo/69l8TMFWiB/uiF/uiF/uiF/uiF/uiF/utlZqP+duC2g/r+Wxc8UaIH86Yb86Yb86ZP2bz3kTzfkTzfkTzcnC/W/G7cF1P/XsviZAi2QP92QP92QP92QP92QP92QP93cLNT/XtwWUP9fy+JnCrRA/nRD/nRD/nRD/nRD/nRD/nTzslD/+3FbQP1/LYufKdAC+dMN+dMN+dMN+dMN+dMN+dPNz0L9H8RtAfX/tSx+pkAL5E835E835E835E835E835E+3IAv1fxi3BdT/17L4mQItkD/dkD/dkD/dkD/dkD/dkD/dwizU/5G4LaD+v5bFzxRogfxpxiB/yiF/uiF/uiF/uiF/ukWyUP9ni9sC6v9rWfxMgRbIn27In27In27In27In27In27ZslD/Z4/bAur/a1n8TIEWyJ9uyJ9uyJ9uyJ9uyJ9uyJ9u2bNQ/+eI2wLq/2tZ/EyBFsifbsifbsifbsifbsifbsifbjmyUP/njNsC6v9rWfxMgRbIn27In27In27In27In27In245s1D/54rbAur/a1n8TIEWyJ9uyJ9uyJ9uyJ9uyJ9uyJ9uubJQ/+eO2wLq/2tZ/EyBFsifbsifbsifbsifbsifbsifbrmzUP/nidsC6v9rWfxMgRbIn27In27In27In27In27In255slD/543bAur/a1n8TIEWyJ9uyJ9uyJ9uyJ9uyJ9uyJ9uebNQ/yfEbQH1/7UsfqZAC+RPN+RPN+RPN+RPN+RPN+RPt4Qs1P/54raA+v9aFj9ToAXypxvypxvypxvypxvypxvyp1u+LNT/+eO2gPr/WhY/U6AF8qcb8qcb8qcb8qcb8qcb8qdb/izU/wXitoD6/1oWP1OgBfKnG/KnG/KnG/KnG/KnG/KnW4Es1P+JcVtA/X8ti58p0AL50w350w350w35/zcof3A+5E835E+3RMIQfqhvE5IQq/V9QghLiC1Hn2Ujl5m8hGGjT4QEQkhC0mMtW9JzO9N44idPzySPd5N+an7ytGnHEZ+8x3ip02mp0zGH0o0j2ch84qbrP99v/c/MNB4AAAAAAAAAroThM45IU6unr9sBAAAAAAAA4FpUr1HN1kXiXD9UhBCyXCTkmJX83CB7mHjz87GfXUiz6CMh5eeZ7qV7XNjDXHGoxhqIDcXYU5lLJNVIf9Kf9CU1SSfSOTqWIcnXI8hZ7yeD1H74RFKdtCcdSQ3Sgwwg/aJjpdjrImlHmmStn9j1E1Uz9CNxSf10Jf1JT9Ke9CFSrJ92pEHW2k/5qo6E5As0UtoXou33Jr1Jf9KV9CDJ101ov3P5DfI/tpOdsvy1olu/E+lFOpLkyyzYP5ADn+4dkzbvBqQ3uZfUji5/p1jeJDZsR+pnrZ/FsXljw5R+eC6RNCS1SYvUlpN/Znk9UgKuSjKtR3L7DUlX0pf0TY4ptmcpWX8/Zc4jISWP5qQTuYcMIH1JJ6JGN6f6B9pno3s1iSWa9v3akvQhNUh70o90Ilx0LPdXLH9q+61I7+g+15N0Sm2vNan5Z9uPvl8ZrmQ014TUfFuka7fw2WJlkua/0jBlP+4YazepnRLRBDvH3p8lyT1Jy5+8I5Ocqe/T9PvzyN5Fo+1daZhx+RMSiF0iOmdKP6Wi47Nfpf2My5/afmw91DTrcXu69ktH8897hfavup2SF48UKUDI5djapF/+MtFxf0X7aXP4rf2y6bafnfpO/n2Kr8vCxP9Zxj+9APCPQv50Q/50Q/50M8i5y3H8NsHQlFGxP3fJxfQNDP1bFxcAAAAAAAAA/pBTLneepDkbNSR6toYfWpcQ0jo2LvmeAOVi51d8Moq4GT4XkC15XIb7AVzteZKmiUujbQ3NQv8zmMz9R8f9gf5nHjhYnWV+O+XcMdZ/qTTn8pP7z5U8CZfuHgfRn7+nHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGvJKZc7T5jfng8hhDCEH1qXENI6Ns4nhLCkHGFjz0YRlzDJ8whudJAteVzyBEICISSBJVd9nqRp4tJoW0Oz0P8MJnP/0XF/oP+ZBw5WZ5lop1EdY/2XIoRUTdd/ruRJOJ9cZvKm9B/9+Xv6AQAAAAAAAPhnMYQlHOGJQEQiEZkoRCUa0YlBTGIRmzjEJR7xSUBCEiHZSHaSg+QkuUhukofkJQkkH8lPCpBEUpAUIoVJEVKUFCPXkeKkBClJrielSGlShpQl5cgNpDy5kVQgFclNpBK5mVQmt5AqpCqpRqqTGqQmqUVqkzqkLqlH6pNbSQPSkDQijUkT0pQ0I81JC9KStCK3kdbkdnIHuZO0IXeRu0lb0u4Pzf8gGUIeIg+TR8hQ8igZRh4jw8njZAQZSZ4go8iT5CkymjxNxpCxZBx5hjxLxpMJ5DkykUwik8nzZAp5gUwl08h0MoPMJC+SWeQlMpu8TOaQuWQemU8WkFfIQvIqWUReI4vJ62QJWUqWkTfIm+Qtspy8TVaQd8hK8i5ZRd4jq8ka8j5ZSz4g68iHZD3ZQD4iH5ON5BOyiXxKNpMtZCvZRraTHWQn2UV2kz1kL9lHPiP7yQFykHyexfnPZZh/EEMYwrAMy/AMz4iMyMiMzKiMyuiMzpiMydiMzbiMy/iMz4RMyGRjsjE5mBxMLiYXk4fJwyQwCUx+Jj+TyCQyhZhCTBGmCFOMKcYUZ4ozJZmSTCmmNFOGKcOUY8ox5ZnyTAWmIlORqcRUYiozlZkqTBWmGlONqcHUYGoxtZg6TB2mHlOfqc80YBowjZhGTBOmCdOMaca0YFowrZhWTGumNXMHcznmbqYd047pwHRgOjIdmc5MZ6YL04XpxnRjejA9mF5ML6YP04fpy/Rl+jP9mYHMQGYQM5gZzDzIPMg8xDzEPMLUYB9lhjHDmOHMcGYEM5IZyYxinmSeYp5inmbGMGOZcVzSLjKemcCcZSYyk5jJzGSmMvsCM5WZxiSwM5iZzExmFjOLmc3MZuYwc5m5zHxmAfMKs5BZyCxiXmNeY15nljBLmaXMG8wbzFvMcmY5s4J5h1nJrGRWMeeY1cwa5n1mLfMBs475gFnPbGDWMx8zG5mPmU3MJmYzs5nZymxltjPbmZ3MTmY3s5vZy+xlPmM+Y8YwB5mDzCHmEHOYOcwcYY4wR5mjzDHmGHOcOc6cYE4wJ5mTzCnmNPMDc5o5w5xhzjLnmPPMeeYCc4G5yFxkLjGXknZ+NgnP8qzIiqzMyqzKqqzO6qzJmqzN2qzLuqzP+mzIhmw2Nhubg83B5mJzsXnYPGxC9OBZfjaRTWQLsYXYImwRthhbjC3OFmdLsiXZUmwptgxbhi3H3sCWZ29kK7AV2ZvYSmwltjJ7C1uFrcpWY6uxNdiabC22NlubrcvWZeuz9dkGbAO2EduI7V28Z/Fm7KPMCKYlm5RMa3Yscwc7jmnD3sXezbZlxzPt2Q7sBKYj24ntzN7LTmImMt3YDsV7sD3ZXuxUpg/bq/g0ph/bn53BDGTvZwexg9kH2AfZIWzH4g+zj7BzmEfZYex8Zjj7ODuCHckuYmqySYnVYp9mx7Bj2XHsM+xbzHh2AvscO5GdxE5mn2ensC+wU9lp7HR2BjuTfZGdxb7EzmZfZuewc9l57Hx2AfsKu5B9lV3EvsYuZl9nl7BL2WXsG+yb7FvscvZtdgX7DruSfZddxb7HrmbXsO+za9kP2HXsh+x6dgP7Efsxu5H9hN3EfspuZrewW9lt7HZ2B7uT3cXuZvewe9l97GfsfvYAe5D9nD3EfsEeZr9kj7BfsUfZr9lj7DfscfZb9gT7HXuS/Z49xZ5mf2B/ZM+wP7Fn2XPsefZn9gL7C3uR/ZW9xF5mCcdwLMdxPCdwIidxMqdwKqdxOmdwJmdxNudwLudxPhdwIRfhsnHZuRxcTi4Xl5vLw+XlErh8XH6uAJfIFeQKcYW5IlxRrhh3HVecK8GV5K7nSnGluTJcWa4cdwNXnruRq8BV5G7iKnE3c5W5W7gqXFWuGledq8HV5Gpxtbk6XF2uHlefu5VrwDXkGnGNuSZcU64Z15xrwbXkWnG3ca2527k7uDu5Ntxd3N1cW64d157rwN3DdeQ6cZ25e7kuXFeuG9ed68H15Hpxvbk+XB+uL9eX688N4AZyA7lB3GDuAe5X7hJ3mXuYe4Qbyj3KDeMe44Zzj3MjuJHcE9wo7knuKW409zRXhRvLjeOe4Z7lxnMTuOd+nshN4iZzz3NTuBe4qdw0bjo3g5vJvcjN4l7iZnMvc3O4udw8bj63gHuFGxFrafFv83NXmv/9OPOP5sZwY7nN3BZuK7eN287t4HZyu7jN3B5uD7eP28ft5/ZzB7mD3CHuEHeYO8wd4Y5wR7mj3DHuGHecO86d4E5wJ7mT3CnuNPcz9yN3hvuJO8ud485xP3MXuAvcxdg2IDzDszzH87zAi7zEy7zCq7zG67zBm7zF27zDu7zH+3zAh3yEz8Zn53PwOflcfG4+D5+XT+Dz8fn5AnwiX5AvxBfmi/BF+WL8dXxxvgRfkr/+T89/teVrx7fjO/Ad+I58R74z35nvwnfhu/Hd+B58D74X34vvw/fh+/J9+f58f34gP5AfxA/iH+Af4IfwQ/iH+Yf5ofxQfhj/GD+cf5wfwY/kn+BH8U/yT/Kj+dH8GH4MP44fxz/LP8tP4CfwE/mJ/GR+Mj+Fn8JP5afy0/np/Ex+Jj+Ln8XP5mfzc/g5/Dx+Hr+AX8Av5Bfyi/hF/GJ+Mb+EX8Iv45fxb/Jv8sv55fwKfgW/kl/Jr+JX8av5Nfwafi2/ll/Hr+PX8+v5j/iP+I38Rn4Tv4lfzW/ht/Db+G38Dn4Hv4vfxe/h9/D7+H38fn4/f5A/yB/iD/GH+cP8Ef4If5Q/yh/jj/HH+eP8Cf4Ef5I/yZ/iT/E/8D/wZ/gz/Fn+LH+eP89f4C/wF/mL/CX+UtKffQIrsAIv8IIoiIIsyIIqqIIu6IIpmIIt2IIruIIv+EIohEI2IZuQQ8gh5BJyCXmEPEKCkCDkF/ILiUJBoZBQWCgiFBWKCdcJxYUSQknheqGUUFooI5QVygk3COWFG4UKQkXhJqGScLNQWbhFqCJUFaoJ1YUaQk2hllBbqCPUFeoJ9YVbhQZCQ6GR0FhoIjQVmgnNhRZCS6GVcJvQWrhduEO4U2gj3CXcLbQV2v2l7Y8UnhBGCU8KTwmjhaeFMcJYYZzwjPCsMF6YIDwnTBQmCZOF54UpwgvCVGGaMF2YIcwUXhRmCS8Js4WXhTnCXGGeMF9YILwiLBReFRYJrwmLhdeFJcJSYZnwhvCm8JawXHhbWCG8I6wU3hVWCe8Jq4U1wvvCWuEDYZ3wobBe2CB8JHwsbBQ+ETYJnwqbhS3CVmGbsF3YIewUdgm7hT3CXmGf8JmwXzggHBQ+Fw4JXwiHhS+FI8JXwlHha+GY8I1wXPhWOCF8J5wUvhdOCaeFH4QfhTPCT8JZ4ZxwXvhZuCD8IlwUfhUuCZcFIjIiK3IiLwqiKEqiLCqiKmqiLhqiKVqiLTqiK3qiLwZiKEbEbGJ2MYeYU8wl5hbziHnFBDGfmF8sICaKBcVCYmGxiFhULCZeJxYXS4glxevFUmJpsYxYViwn3iCWF28UK4gVxZvESuLNYmXxFrGKWFWsJlYXa4g1xVpibbGOWFesJ9YXbxUbiA3FRmJjsYnYVGwmNhdbiC3FVuJtYmvxdvEO8U6xjXiXeLfYVmwnthc7iPeIHcVOYmfxXrGL2FXsJnYXe4g9xV5ib7GPeJ/YV+wn9hcHiAPF+8VB4mDxAfFBcYj4kPiw+Ig4VHxUHCY+Jg4XHxdHiCPFJ8RR4pPiU+Jo8WlxjDhWHCc+Iz4rjhcniM+JE8VJ4mTxeXGK+II4VZwmThdniDPFF8VZ4kvibPFlcY44V5wnzhcXiK+IC8VXxUXia+Ji8XVxibhUXCa+Ib4pviUuF98WV4jviCvFd8VV4nvianGN+L64VvxAXCd+KK4XN4gfiR+LG8VPxE3ip+JmcYu4Vdwmbhd3iDvFXeJucY+4V9wnfibuFw+IB8XPxUPiF+Jh8UvxiPiVeFT8WjwmfiMeF78VT4jfiSfF78VT4mnxB/FH8Yz4k3hWPCeeF38WL4i/iBfFX8VL4mWRSIzESpzES4IkSpIkS4qkSpqkS4ZkSpZkS47kSp7kS4EUShEpm5RdyiHllHJJuaU8Ul4pQcon5ZcKSIlSQamQVFgqIhWViknXScWlElJJ6XqplFRaKiOVlcpJN0jlpRulClJF6SapknSzVFm6RaoiVZWqSdWlGlJNqZZUW6oj1ZXqSfWlW6UGUkOpkdRYaiI1lZpJzaUWUkuplXSb1Fq6XbpDulNqI90l3S21ldpJ7aUO0j1SR6mT1Fm6V+oidZW6Sd2lHlJPqZfUW+oj3Sf1lfpJ/aUB0kDpfmmQNFh6QHpQGiI9JD0sPSINlR6VhkmPScOlx6UR0kjpCWmU9KT0lDRaeloaI42VxknPSM9K46UJ0nPSRGmSNFl6XpoivSBNlaZJ06UZ0kzpRWmW9JI0W3pZmiPNleZJ86UF0ivSQulVaZH0mrRYel1aIi2VlklvSG9Kb0nLpbelFdI70krpXWmV9J60WlojvS+tlT6Q1kkfSuulDdJH0sfSRukTaZP0qbRZ2iJtlbZJ26Ud0k5pl7Rb2iPtlfZJn0n7pQPSQelz6ZD0hXRY+lI6In0lHZW+lo5J30jHpW+lE9J30knpe+mUdFr6QfpROiP9JJ1l+OSSX/pFuij9Kl2SLktEZmRW5mReFmRRlmRZVmRV1mRdNmRTtmRbdmRX9mRfDuRQjsjZ5OxyDjmnnEvOLeeR88oJcj45v1xATpQLyoVkIXZM4Tq5uFxCLilfL5eSS8tl5LJyOfkGubx8o1xBrijfJFeSb5Yry7fIVeSqcjW5ulxDrinXkmvLdeS6cj25vnyr3EBuKDeSG8tN5KZyM7m53EJuKbeSb5Nby7fLd8h3ym3ku+S75bZyO7m93EG+R+4od5I7y/fKXeSucje5u9xD7in3knvLfeT75L5yP7m/PEAeKN8vD5IHyw/ID8pD5Ifkh+VH5KHyo/Iw+TF5uPy4PEIeKT8hj5KflJ+SR8tPy2PksfI4+Rn5WXm8PEF+Tp4oT5Iny8/LU+QX5KnyNHm6PEOeKb8oz5JfkmfLL8tz5LnyPHm+vEB+RV4ovyovkl+TF8uvy0vkpfIy+Q35Tfktebn8trxCfkdeKb8rr5Lfk1fLa+T35bXyB/I6+UN5vbxB/kj+WN4ofyJvkj+VN8tb5K3yNnm7vEPeKe+Sd8t75L3yPvkzeb98QD4ofy4fkr+QD8tfykfkr+Sj8tfyMfkb+bicEvT38in5tPyD/KN8Rv5JPiufk8/LP8sX5F/ki/Kv8iX5skwURmEVTuEVQREVSZEVRVEVTdEVQzEVS7EVR3EVT/GVQAmViJJNya7kUHIquZTcSh4lr5Kg5FPyKwWURKWgUkgprBRRiirFlOuU4koJpaRyvVJKKa2UUcoq5ZQblPLKjUoFpaJyk1JJuVmprNyiVFGqKtWU6koNpaZSS6mt1FHqKvWU+sqtSgOlodJIaaw0UZoqzZTmSgulpdJKuU1prdyu3KHcqbRR7lLuVtoq7ZT2SgflHqWj0knprNyrdFG6Kt2U7koPpafSS+mt9FHuU/oq/ZT+ygBloHK/MkgZrDygPKgMUR5SHlYeUYYqjyrDlMeU4crjyghlpPKEMkp5UnlKGa08rYxRxirjlGeUZ5XxygTlOWWiMkmZrDyvTFFeUKYq05TpygxlpvKiMkt5SZmtvKzMUeYq85T5ygLlFWWh8qqySHlNWay8rixRlirLlDeUN5W3lOXK28oK5R1lpfKuskp5T1mtrFHeV9YqHyjrlA+V9coG5SPlY2Wj8omySflU2axsUbYq25Ttyg5lp7JL2a3sUfYq+5TPlP3KAeWg8rlySPlCOax8qRxRvlKOKl8rx5RvlOPKt8oJ5TvlpPK9cko5rfyg/KicUX5SzirnlPPKz8oF5RflovKrckm5rBCVUVmVU3lVUEVVUmVVUVVVU3XVUE3VUm3VUV3VU301UEM1omZTs6s51JxqLjW3mkfNqyao+dT8agE1US2oFlILq0XUomox9Tq1uFpCLaler5ZSS6tl1LJqOfUGtbx6o1pBrajepFZSb1Yrq7eoVdSqajW1ulpDranWUmurddS6aj21vnqr2kBtqDZSG6tN1KZqM7W52kJtqbZSb1Nbq7erd6h3qm3Uu9S71bZqO7W92kG9R+2odlI7q/eqXdSuaje1u9pD7an2UnurfdT71L5qP7W/OkAdqN6vDlIHqw+oD6pD1IfUh9VH1KHqo+ow9TF1uPq4OkIdqT6hjlKfVJ9SR6tPq2PUseo49Rn1WXW8OkF9Tp2oTlInq8+rU9QX1KnqNHW6OkOdqb6ozlJfUmerL6tz1LnqPHW+ukB9RV2ovqouUl9TF6uvq0vUpeoy9Q31TfUtdbn6trpCfUddqb6rrlLfU1era9T31bXqB+o69UN1vbpB/Uj9WN2ofqJuUj9VN6tb1K3qNnW7ukPdqe5Sd6t71L3qPvUzdb96QD2ofq4eUr9QD6tfqkfUr9Sj6tfqMfUb9bj6rXpC/U49qX6vnlJPqz+oP6pn1J/Us+o59bz6s3pB/UW9qP6qXlIvq0RjNFbjNF4TNFGTNFlTNFXTNF0zNFOzNFtzNFfzNF8LtFCLaNm07FoOLaeWS8ut5dHyaglaPi2/VkBL1ApqhbTCWhGtqFZMu04rrpXQSmrXa6W00loZraxWTrtBK6/dqFXQKmo3aZW0m7XK2i1aFa2qVk2rrtXQamq1tNpaHa2uVk+rr92qNdAaao20xloTranWTGuutdBaaq2027TW2u3aHdqdWhvtLu1ura3WTmuvddDu0TpqnbTO2r1aF62r1k3rrvXQemq9tN5aH+0+ra/WT+uvDdAGavdrg7TB2gPag9oQ7SHtYe0Rbaj2qDZMe0wbrj2ujdBGak9oo7Qntae00drT2hhtrDZOe0Z7VhuvTdCe0yZqk7TJ2vPaFO0Fbao2TZuuzdBmai9qs7SXtNnay9ocba42T5uvLdBe0RZqr2qLtNe0xdrr2hJtqbZMe0N7U3tLW669ra3Q3tFWau9qq7T3tNXaGu19ba32gbZO+1Bbr23QPtI+1jZqn2ibtE+1zdoWbau2Tduu7dB2aru03doeba+2T/tM268d0A5qn2uHtC+0w9qX2hHtK+2o9rV2TPtGO659q53QvtNOat9rp7TT2g/aj9oZ7SftrHZOO6/9rF3QftEuar9ql7TLGtEZndU5ndcFXdQlXdYVXdU1XdcN3dQt3dYd3dU93dcDPdQjejY9u55Dz6nn0nPrefS8eoKeT8+vF9AT9YJ6Ib2wXkQvqhfTr9OL6yX0kvr1eim9tF5GL6uX02/Qy+s36hX0ivpNeiX9Zr2yfoteRa+qV9Or6zX0mnotvbZeR6+r19Pr67fqDfSGeiO9sd5Eb6o305vrLfSWeiv9Nr21frt+h36n3ka/S79bb6u309vrHfR79I56J72zfq/eRe+qd9O76z30nnovvbfeR79P76v30/vrA/SB+v36IH2w/oD+oD5Ef0h/WH9EH6o/qg/TH9OH64/rI/SR+hP6KP1J/Sl9tP60PkYfq4/Tn9Gf1cfrE/Tn9In6JH2y/rw+RX9Bn6pP06frM/SZ+ov6LP0lfbb+sj5Hn6vP0+frC8TYn0H6a/pi/XV9ib5UX6a/ob+pv6Uv19/WV+jv6Cv1d/VV+nv6an2N/r6+Vv9AX6d/qK/XN+gf6R/rG/VP9E36p/pmfYu+Vd+mb9d36Dv1XfpufY++V9+nf6bv1w/oB/XP9UP6F/ph/Uv9iP6VflT/Wj+mf6Mf17/VT+jf6Sf17/VT+mn9B/1H/Yz+k35WP6ef13/WL+i/6Bf1X/VL+mWdGIzBGpzBG4IhGpIhG4qhGpqhG4ZhGpZhG47hGp7hG4ERGhEjm5HdyGHkNHIZuY08Rl4jwchn5DcKGIlGQaOQUdgoYhQ1ihnXGcWNEkZJ43qjlFHaKGOUNcoZNxjljRuNCkZF4yajknGzUdm4xahiVDWqGdWNGkZNo5ZR26hj1DXqGfWNW40GRkOjkdHYaGI0NZoZzY0WRkujlXGb0dq43bjDuNNoY9xl3G20NdoZ7Y0Oxj1GR6OT0dm41+hidDW6Gd2NHkZPo5fR2+hj3Gf0NfoZ/Y0BxkDjfmOQMdh4wHjQGGI8ZDxsPGIMNR41hhmPGcONx40RxkjjCWOU8aTxlDHaeNoYY4w1xhnPGM8a440JxnPGRGOSMdl43phivGBMNaYZ040ZxkzjRWOW8ZIx23jZmGPMNeYZ840FxivGQuNVY9Hl14zFxuvGEmOpscx4w3jTeMtYbrxtrDDeMVYa7xqrjPeM1cYa431jrfGBsc740FhvbDA+Mj42NhqfGJuMT43NxhZjq7HN2G7sMHYau4zdxh5jr7HP+MzYbxwwDhqfG4eML4zDxpfGEeMr46jxtXHM+MY4bnxrnDC+M04a3xunjNPGD8aPxhnjJ+Oscc44b/xsXDB+MS4avxqXjMsGMRmTNTmTNwVTNCVTNhVTNTVTNw3TNC3TNh3TNT3TNwMzNCNmNjO7mcPMaeYyc5uEzWsmmPnM/GYBM9EsaBYyC5tFzKJmMfM6s7hZwixpXm+WMkubZcyyZjnzBrO8eaNZwaxo3mRWMm82K5u3mFXMqmY1s7pZw6xp1jJrm3XMumY9s755q9nAbGg2MhubTcymZjOzudnCbGm2Mm8zW5u3m3eYd5ptzLvMu822ZjuzvdnBvMfsaHYyO5v3ml3MrmY3s7vZw+xp9jJ7m33M+8y+Zj+zvznAHGjebw4yB5sPmA+aQ8yHzIfNR8yh5qPmMPMxc7j5uDnCHGk+YY4ynzSfMkebT5tjzLHmOPMZ81lzvDnBfM6caE4yJ5vPm1PMF8yp5jRzujnDnGm+aM4yXzJnmy+bc8y55jxzvrnAfMVcaL5qLjJfMxebr5tLzKXmMvMN803zLXO5+ba5wnzHXGm+a64y3zNXm2vM98215gfmOvNDc725wfzI/NjcaH5ibjI/NTebW8yt5jZzu7nD3GnuMnebe8y95j7zM3O/ecA8aH5uHjK/MA+bX5pHzK/Mo+bX5jHzG/O4+a15wvzOPGl+b54yT5s/mD+aZ8yfzLPmOfO8+bN5wfzFvGj+al4yL5vEYizW4izeEizRkizZUizV0izdMizTsizbcizX8izfCqzQiljZrOxWDiunlcvKbeWx8loJVj4rv1XASrQKWoWswlYRq6hVzLrOKm6VsEpa11ulrNJWGausVc66wSpv3WhVsCpaN1mVrJutytYtVhWrqlXNqm7VsGpatazaVh2rrlXPqm/dajWwGlqNrMZWE6up1cxqbrWwWlqtrNus1tbt1h3WnVabvXdZd1ttrXZWe6uDdY/V0epkdbbutbpYXa1uVnerh9XT6mX1tvpY91l9rX5Wf2uANdC63xpkDbYesB60hlgPWQ9bj1hDrUetYdZj1nDrcWuENdJ6whplPWk9ZY22nrbGWGOtcdYz1rPWeGuC9Zw10ZpkTbaet6ZYL1hTrWnWdGuGNdN60ZplvWTNtl625lhzrXnWfGuB9Yq10HrVWmS9Zi22XreWWEutZdYb1pvWW9Zy621rhfWOtdJ611plvWetttZY71trrQ+sddaH1nprg/WR9bG10frE2mR9am22tlhbrW3WdmuHtdPaZe229lh7rX3WZ9Z+64B10PrcOmR9YR22vrSOWF9ZR62vrWPWN9Zx61vrhPWdddL63jplnbZ+sH60zlg/WWetc9Z562frgvWLddH61bpkXbaIzdiszdm8LdiiLdmyrdiqrdm6bdimbdm27diu7dm+HdihHbGz2dntHHZOO5ed285j57UT7Hx2fruAnWgXtAvZhe0idlG7mH2dXdwuYZe0r7dL2aXtMnZZu5x9g13evtGuYFe0b7Ir2Tfble1b7Cp2VbuaXd2uYde0a9m17Tp2XbueXd++1W5gN7Qb2Y3tJnZTu5nd3G5ht7Rb2bfZre3b7TvsO+029l323XZbu53d3u5g32N3tDvZne177S52V7ub3d3uYfe0e9m97T72fXZfu5/d3x5gD7TvtwfZg+0H7AftIfZD9sP2I/ZQ+1F7mP2YPdx+3B5hj7SfsEfZT9pP2aPtp+0x9lh7nP2M/aw93p5gP2dPtCfZk+3n7Sn2C/ZUe5o93Z5hz7RftGfZL9mz7ZftOfZce549315gv2IvtF+1F9mv2Yvt1+0l9lJ7mf2G/ab9lr3cftteYb9jr7TftVfZ79mr7TX2+/Za+wN7nf2hvd7eYH9kf2xvtD+xN9mf2pvtLfZWe5u93d5h77R32bvtPfZee5/9mb3fPmAftD+3D9lf2IftL+0j9lf2Uftr+5j9jX3c/tY+YX9nn7S/t0/Zp+0f7B/tM/ZP9ln7nH3e/tm+YP9iX7R/tS/Zl23iMA7rcA7vCI7oSI7sKI7qaI7uGI7pcI7tOI7reI7vBE7oRJxsTnYnh5PTyeXkdvI4eZ0EJ5+T3yngJDoFnUJOYaeIU9Qp5lznFHdKOCWd651STmmnjFPWKefc4JR3bnQqOBWdm5xKzs1OZecWp4pT1anmVHdqODWdWk5tp45T16nn1HdudRo4DZ1GTmOnidPUaeY0d1o4LZ1Wzm1Oa+d25w7nTqeNc5dzt9PWaee0dzo49zgdnU5OZ+dep4vT1enmdHd6OD2dXk5vp49zn9PX6ef0dwY4A537nUHOYOcB50FniPOQ87DziDPUedQZ5jzmDHced0Y4I50nnFHOk85TzmjnaWeMM9YZ5zzjPOuMdyY4zzkTnUnOZOd5Z4rzgjPVmeZMd2Y4M50XnVnOS85s52VnjjPXmefMdxY4rzgLnVedRc5rzmLndWeJs9RZ5rzhvOm85Sx33nZWOO84K513nVXOe85qZ43zvrPW+cBZ53zorHc2OB85HzsbnU+cTc6nzmZni7PV2eZsd3Y4O51dzm5nj7PX2ed85ux3DjgHnc+dQ84XzmHnS+eI85Vz1PnaOeZ84xx3vnVOON85J53vnVPOaecH50fnjPOTc9Y555x3fnYuOL84F51fnUvOZYe4jMu6nMu7giu6kiu7iqu6mqu7hmu6lmu7juu6nuu7gRu6ETebm93N4eZ0c7m53TxuXjfBzefmdwu4iW5Bt5Bb2C3iFnWLude5xd0Sbkn3ereUW9ot45Z1y7k3uOXdG90KbkX3JreSe7Nb2b3FreJWdau51d0abk23llvbrePWdeu59d1b3QZuQ7eR29ht4jZ1m7nN3RZuS7eVe5vb2r3dvcO9023j3uXe7bZ127nt3Q7uPW5Ht5Pb2b3X7eJ2dbu53d0ebk+3l9vb7ePe5/Z1+7n93QHuQPd+d5A72H3AfdAd4j7kPuw+4g51H3WHuY+5w93H3RHuSPcJd5T7pPuUO9p92h3jjnXHuc+4z7rj3Qnuc+5Ed5I72X3eneK+4E51p7nT3RnuTPdFd5b7kjvbfdmd485157nz3QXuK+5C91V3kfuau9h93V3iLnWXuW+4b7pvucvdt90V7jvuSvddd5X7nrvaXeO+7651P3DXuR+6690N7kfux+5G9xN3k/upu9nd4m51t7nb3R3uTneXu9vd4+5197mfufvdA+5B93P3kPuFe9j90j3ifuUedb92j7nfuMfdb90T7nfuSfd795R72v3B/dE94/7knnXPuefdn90L7i/uRfdX95J72SUe47Ee5/Ge4Ime5Mme4qme5ume4Zme5dme47me5/le4IVexMvmZfdyeDm9XF5uL4+X10vw8nn5vQJeolfQK+QV9op4Rb1i3nVeca+EV9K73ivllfbKeGW9ct4NXnnvRq+CV9G7yavk3exV9m7xqnhVvWpeda+GV9Or5dX26nh1vXpefe9Wr4HX0GvkNfaaeE29Zl5zr4XX0mvl3ea19m737vDu9Np4d3l3e229dl57r4N3j9fR6+R19u71unhdvW5ed6+H19Pr5fX2+nj3eX29fl5/b4A30LvfG+QN9h7wHvSGeA95D3uPeEO9R71h3mPecO9xb4Q30nvCG+U96T3ljfae9sZ4Y71x3jPes954b4L3nDfRm+RN9p73pngveFO9ad50b4Y303vRm+W95M32XvbmeHO9ed58b4H3irfQe9Vb5L3mLfZe95Z4S71l3hvem95b3nLvbW+F94630nvXW+W956321njve2u9D7x13ofeem+D95H3sbfR+8Tb5H3qbfa2eFu9bd52b4e309vl7fb2eHu9fd5n3n7vgHfQ+9w75H3hHfa+9I54X3lHva+9Y9433nHvW++E95130vveO+Wd9n7wfvTOeD95Z71z3nnvZ++C94t30fvVu+Rd9ojP+KzP+bwv+KIv+bKv+Kqv+bpv+KZv+bbv+K7v+b4f+KEf8bP52f0cfk4/l5/bz+Pn9RP8fH5+v4Cf6Bf0C/mF/SJ+Ub+Yf51f3C/hl/Sv90v5pf0yflm/nH+DX96/0a/gV/Rv8iv5N/uV/Vv8Kn5Vv5pf3a/h1/Rr+bX9On5dv55f37/Vb+A39Bv5jf0mflO/md/cb+G39Fv5t/mt/dv9O/w7/Tb+Xf7dflu/nd/e7+Df43f0O/md/Xv9Ln5Xv5vf3e/h9/R7+b39Pv59fl+/n9/fH+AP9O/3B/mD/Qf8B/0h/kP+w/4j/lD/UX+Y/5g/3H/cH+GP9J/wR/lP+k/5o/2n/TH+WH+c/4z/rD/en+A/50/0J/mT/ef9Kf4L/lR/mj/dn+HP9F/0Z/kv+bP9l/05/lx/nj/fX+C/4i/0X/UX+a/5i/3X/SX+Un+Z/4b/pv+Wv9x/21/hv+Ov9N/1V/nv+av9Nf77/lr/A3+d/6G/3t/gf+R/7G/0P/E3+Z/6m/0t/lZ/m7/d3+Hv9Hf5u/09/l5/n/+Zv98/4B/0P/cP+V/4h/0v/SP+V/5R/2v/mP+Nf9z/1j/hf+ef9L/3T/mn/R/8H/0z/k/+Wf+cf97/2b/g/+Jf9H/1L/mXfRIwARtwAR8IgRhIgRwogRpogR4YgRlYgR04gRt4gR8EQRhEgmxB9iBHkDPIFeQO8gR5g4QgX5A/KBAkBgWDQkHhoEhQNCgWXBcUD0oEJYPrg1JB6aBMUDYoF9wQlA9uDCoEFYObgkrBzUHl4JagSlA1qBZUD2oENYNaQe2gTlA3qBfUD24NGgQNg0ZB46BJ0DRoFjQPWgQtg1bBbUHr4PbgjuDOoE1wV3B30DZoF7QPOgT3BB2DTkHn4N6gS9A16BZ0D3oEPYNeQe+gT3Bf0DfoF/QPBgQDg/uDQcHg4IHgwWBI8FDwcPBIMDR4NBgWPBYMDx4PRgQjgyeCUcGTwVPB6ODpYEwwNhgXPBM8G4wPJgTPBRODScHk4PlgSvBCMDWYFkwPZgQzgxeDWcFLwezg5WBOMDeYF8wPFgSvBAuDV4NFwWvB4uD1YEmwNFgWvBG8GbwVLA/eDlYE7wQrg3eDVcF7wepgTfB+sDb4IFgXfBisDzYEHwUfBxuDT4JNwafB5mBLsDXYFmwPdgQ7g13B7mBPsDfYF3wW7A8OBAeDz4NDwRfB4eDL4EjwVXA0+Do4FnwTHA++DU4E3wUng++DU8Hp4Ifgx+BM8FNwNjgXnA9+Di4EvwQXg1+DS8HlgIRMyIZcyIdCKIZSKIdKqIZaqIdGaIZWaIdO6IZe6IdBGIaRMFuYPcwR5gxzhbnDPGHeMCHMF+YPC4SJYcGwUFg4LBIWDYuF14XFwxJhyfD6sFRYOiwTlg3LhTeE5cMbwwphxfCmsFJ4c1g5vCWsElYNq4XVwxphzbBWWDusE9YN64X1w1vDBmHDsFHYOGwSNg2bhc3DFmHLsFV4W9g6vD28I7wzbBPeFd4dtg3bhe3DDuE9YcewU9g5vDfsEnYNu4Xdwx5hz7BX2DvsE94X9g37hf3DAeHA8P5wUDg4fCB8MBwSPhQ+HD4SDg0fDYeFj4XDw8fDEeHI8IlwVPhk+FQ4Onw6HBOODceFz4TPhuPDCeFz4cRwUjg5fD6cEr4QTg2nhdPDGeHM8MVwVvhSODt8OZwTzg3nhfPDBeEr4cLw1XBR+Fq4OHw9XBIuDZeFb4Rvhm+Fy8O3wxXhO+HK8N1wVfheuDpcE74frg0/CNeFH4brww3hR+HH4cbwk3BT+Gm4OdwSbg23hdvDHeHOcFe4O9wT7g33hZ+F+8MD4cHw8/BQ+EV4OPwyPBJ+FR4Nvw6Phd+Ex8NvwxPhd+HJ8PvwVHg6/CH8MTwT/hSeDc+F58OfwwvhL+HF8NfwUng5JBEmwka4CB8RImJEisgRJaJGtIgeMSJmxIrYESfiRryIHwkiYSQSyRbJHskRyRnJFckdyRPJG0mI5IvkjxSIJEYKRgpFCkeKRIpGikWuixSPlIiUjFwfKRUpHSkTKRspF7khUj5yY6RCpGLkpkilyM2RypFbIlUiVSPVItUjNSI1I7UitSN1InUj9SL1I7dGGkQaRhpFGv8fLXcRo0fQ7Y19zMzQzFzdXc3dj5mZmZmZmZmZmZmZxsz2mJmZx8z22I7emy+Jbu4iUpTU7qdSlc5/VYvSOUhlpApSFamGVEdqIDWRWkhtpA5SF6mH1EcaIA2RRkhjpAnSFGmGNEdaIC2RVkhrpA3SFmmHtEc6IB2RTkhnpAvSFemGdEd6ID2RXkhvpA/SF+mH9EcGIAORQchgZAgyFBmGDEdGICORUchoZAwyFhmHjEcmIBORSchkZAoyFZmGTEdmIDORWchsZA4yF5mHzEcWIAuRRchiZAmyFFmGLEdWICuRVchqZA2yFlmHrEc2IBuRTchmZAuyFdmGbEd2IDuRXchuZA+yF9mHxCP7kQPIQeQQchg5ghxFjiHHkRPISeQUcho5g5xFEpBzyHnkAnIRuYRcRq4gV5FryHXkBnITuYXcRu4gd5F7yH3kAfIQeYQ8Rp4gT5FnyHPkBfISeYW8Rt4gichb5B3yHvmAfEQ+IZ+RL8hX5BvyHfmB/ER+Ib+RJOQP8hf5h8ShydDkaAo0JZoKTY2mQdOi6dD0aAY0I5oJzYxmQbOi2dDsaA40J5oLzY0iKIpiKI4SKIlSKI0yKItyKI8KqIhKqIwqqIpqKEB11EBNFKIWaqMO6qIe6qMBGqIRGkPzoHnRfGh+tABaEC2EFkaLoEXRYmhxtARaEi2FlkbLoGXRcmh5tAJaEa2EVkaroFXRamh1tAZaE62F1kbroHXRemh9tAHaEG2ENkaboE3RZmhztAXaEm2FtkbboG3Rdmh7tAPaEe2Edka7oF3Rbmh3tAfaE+2F9kb7oH3Rfmh/dAA6EB2EDkaHoEPRYehwdAQ6Eh2FjkbHoGPRceh4dAI6EZ2ETkanoFPRaeh0dAY6E52FzkbnoHPReeh8dAG6EF2ELkaXoEvRZehydAW6El2FrkbXoGvRdeh6dAO6Ed2Ebka3oFvRbeh2dAd6MC4ubje6B92L7kPj0f3oAfQgegg9jB5Bj6LH0OPoCfQkego9jZ5Bz6IJ6Dn0PHoBvYheQi+jV9Cr6DX0OnoDvYneQm+jd9C76D30PvoAfYg+Qh+jT9Cn6DP0OfoCfYm+Ql+jb9BE9C36Dn2PfkA/op/Qz+gX9Cv6Df2O/kB/or/Q32gS+gf9i/5D47BkWHIsBZYSS4WlxtJgabF0WHosA5YRy4RlxrJgWbFsWHYsB5YTy4XlxhAMxTAMxwiMxCiMxhiMxTiMxwRMxCRMxhRMxTQMYDpmYCYGMQuzMQdzMQ/zsQALsQiLYXmwvFg+LD9WACuIFcIKY0WwolgxrDhWAiuJlcJKY2Wwslg5rDxWAauIVcIqY1Wwqlg1rDpWA6uJ1cJqY3Wwulg9rD7WAGuINcIaY02wplgzrDnWAmuJtcJaY22wtlg7rD3WAeuIdcI6Y12wrlg3rDvWA+uJ9cJ6Y32wvlg/rD82ABuIDcIGY0OwodgwbDg2AhuJjcJGY2Owsdg4bDw2AZuITcImY1Owqdg0bDo2A5uJzcJmY3Owudg8bD62AFuILcIWY0uwpdgybDm2AluJrcJWY2uwtdg6bD22AduIbcI2Y1uwrdg2bDu2A9uJ7cJ2Y3uwvdg+LB7bjx3ADmKHsMPYEewodgw7jp3ATmKnsNPYGewsloCdw85jF7CL2CXsMnYFu4pdw65jN7Cb2C3sNnYHu4vdw+5jD7CH2CPsMfYEe4o9w55jL7CX2CvsNfYGS8TeYu+w99gH7CP2CfuMfcG+Yt+w79gP7Cf2C/uNJWF/sL/YPywOT4Ynx1PgKfFUeGo8DZ4WT4enxzPgGfFMeGY8C54Vz4Znx3PgOfFceG4cwVEcw3GcwEmcwmmcwVmcw3lcwEVcwmVcwVVcwwGu4wZu4hC3cBt3cBf3cB8P8BCP8BieB8+L58Pz4wXwgnghvDBeBC+KF8OL4yXwkngpvDReBi+Ll8PL4xXwinglvDJeBa+KV8Or4zXwmngtvDZeB6+L18Pr4w3whngjvDHeBG+KN8Ob4y3wlngrvDXeBm+Lt8Pb4x3wjngnvDPeBe+Kd8O74z3wnngvvDfeB++L98P74wPwgfggfDA+BB+KD8OH4yPwkfgofDQ+Bh+Lj8PH4xPwifgkfDI+BZ+KT8On4zPwmfgsfDY+B5+Lz8Pn4wvwhfgifDG+BF+KL8OX4yvwlfgqfDW+Bl+Lr8PX4xvwjfgmfDO+Bd+Kb8O34zvwnfgufDe+B9+L78Pj8f34Afwgfgg/jB/Bj+LH8OP4Cfwkfgo/jZ/Bz+IJ+Dn8PH4Bv4hfwi/jV/Cr+DX8On4Dv4nfwm/jd/C7+D38Pv4Af4g/wh/jT/Cn+DP8Of4Cf4m/wl/jb/BE/C3+Dn+Pf8A/4p/wz/gX/Cv+Df+O/8B/4r/w33gS/gf/i//D44hkRHIiBZGSSEWkJtIQaYl0RHoiA5GRyERkJrIQWYlsRHYiB5GTyEXkJhACJTACJwiCJCiCJhiCJTiCJwRCJCRCJhRCJTQCEDphECYBCYuwCYdwCY/wiYAIiYiIEXmIvEQ+Ij9RgChIFCIKE0WIokQxojhRgihJlCJKE2WIskQ5ojxRgahIVCIqE1WIqkQ1ojpRg6hJ1CJqE3WIukQ9oj7RgGhINCIaE02IpkQzojnRgmhJtCJaE22ItkQ7oj3RgehIdCI6E12IrkQ3ojvRg+hJ9CJ6E32IvkQ/oj8xgBhIDCIGE0OIocQwYjgxghhJjCJGE2OIscQ4YjwxgZhITCImE1OIqcQ0Yjoxg5hJzCJmE3OIucQ8Yj6xgFhILCIWE0uIpcQyYjmxglhJrCJWE2uItcQ6Yj2xgdhIbCI2E1uIrcQ2Yjuxg9hJ7CJ2E3uIvcQ+Ip7YTxwgDhKHiMPEEeIocYw4TpwgThKniNPEGeIskUCcI84TF4iLxCXiMnGFuEpcI64TN4ibxC3iNnGHuEvcI+4TD4iHxCPiMfGEeEo8I54TL4iXxCviNfGGSCTeEu+I98QH4iPxifhMfCG+Et+I78QP4ifxi/hNJBF/iL/EPyKOTEYmJ1OQKclUZGoyDZmWTEemJzOQGclMZGYyC5mVzEZmJ3OQOclcZG4SIVESI3GSIEmSImmSIVmSI3lSIEVSImVSIVVSIwGpkwZpkpC0SJt0SJf0SJ8MyJCMyBiZh8xL5iPzkwXIgmQhsjBZhCxKFiOLkyXIkmQpsjRZhixLliPLkxXIimQlsjJZhaxKViOrkzXImmQtsjZZh6xL1iPrkw3IhmQjsjHZhGxKNiObky3IlmQrsjXZhmxLtiPbkx3IjmQnsjPZhexKdiO7kz3InmQvsjfZh+xL9iP7kwPIgeQgcjA5hBxKDiOHkyPIkeQocjQ5hhxLjiPHkxPIieQkcjI5hZxKTiOnkzPImeQscjY5h5xLziPnkwvIheQicjG5hFxKLiOXkyvIleQqcjW5hlxLriPXkxvIjeQmcjO5hdxKbiO3kzvIneQucje5h9xL7iPjyf3kAfIgeYg8TB4hj5LHyOPkCfIkeYo8TZ4hz5IJ5DnyPHmBvEheIi+TV8ir5DXyOnmDvEneIm+Td8i75D3yPvmAfEg+Ih+TT8in5DPyOfmCfEm+Il+Tb8hE8i35jnxPfiA/kp/Iz+QX8iv5jfxO/iB/kr/I32QS+Yf8S/4j46hkVHIqBZWSSkWlptJQaal0VHoqA5WRykRlprJQWalsVHYqB5WTykXlphAKpTAKpwiKpCiKphiKpTiKpwRKpCRKphRKpTQKUDplUCYFKYuyKYdyKY/yqYAKqYiKUXmovFQ+Kj9VgCpIFaIKU0WoolQxqjhVgipJlaJKU2WoslQ5qjxVgapIVaIqU1WoqlQ1qjpVg6pJ1aJqU3WoulQ9qj7VgGpINaIaU02oplQzqjnVgmpJtaJaU22otlQ7qj3VgepIdaI6U12orlQ3qjvVg+pJ9aJ6UwNW9aX6Uf2pZsZAahA1mBpCDaWGUcOpEdRIahQ1mhpDjaXGUeOpCdREahI1mZpCTaWmUdOpGdRMahY1m5pDzaXmUfOpBdRCahG1mFpCLaWWUcupFdRKahW1mlpDraXWUeupDdRGahO1mdpCbaW2UdupHdROahe1m9pD7aX2UfHUfuoAdZA6RB2mjlBHqWPUceoEdZI6RZ2mzlBnqQTqHHWeukBdpC5Rl6kr1FXqGnWdukHdpG5Rt6k71F3qHnWfekA9pB5Rj6kn1FPqGfWcekG9pF5Rr6k3VCL1lnpHvac+UB+pT9Rn6gv1lfpGfad+UD+pX9RvKon6Q/2l/lFxdBydnE5Op6RT0qnp1HRaOi2dnk5PZ6Qz0pnpzHRWOiudnc5O56Rz0rnp3DRKozRO4zRJk/R/FkuzNE/ztEiLtEzLtEqrNKABbdAGDWlI27RNu7RL+7RPh3RIx+gYnZfOS+en89MF6YJ0YbowXZQuSheni9Ml6ZJ0abo0XZYuS5eny9MV6Yp0ZboyXZWuSlenq9M16Zp0bbo2XZeuS9en69MN6YZ0Y7ox3ZRuSjenm9Mt6ZZ0a7o13ZZuS7en29Md6Y50Z7oz3ZXuSnenu9M96Z50b7o33ZfuS/en+9MD6YH0YHowPZQeSg+nh9Mj6ZH0aHo0PZYeS4+nx9MT6Yn0ZHoyPZWeSk+np9Mz6Vn0bHoOPZeeR8+nF9AL6UX0YnoxvZReSi+nl9Mr6ZX0ano1vZZeS6+n19Mb6Y30ZnozvZXeSm+nt9M76Z30bno3vZfeS8fT8fQB+gB9iD5EH6GP0MfoY/QJ+gR9ij5Fn6HP0Al0An2ePk9fpC/Sl+nL9FX6Kn2dvk7fpG/St+nb9F36Ln2fvk8/pB/Sj+nH9FP6Kf2cfk6/pF/Sr+nXdCKdSL+j39Ef6A/0J/oT/YX+Qn+jv9E/6B/0L/oXnUQn0X/pv3RaJh2TnsnAZGQyMZmZLMz/3SiDMThDMCRDMbkZ5L+ZZhhGZTQGMDpjMCYDGet/OMbkYfIy+Zj8TAGmIFPof7g0U4Ypy5RjyjMVmJJMqf/mikwlpjJTh6nK1GOqMw2YmkwjpjZTh6nL1GPqMw2YhkwjpjXThmnLtGPaMx2Yjkyn/+G9zD7mFHOaOcOcZW4zd5gfzE/mNfOG+cX8ZgYyg5jRzBhmbNw4ZjwzgZnITPrfzfxfns3MYeYy85j5zAJmIbPof3g1s4ZZy6xj1jMbmI3Mpv/h3cweZisTz2xndjA7mV3/5f/UFM/sZw4wB5lDzGHmCJPAHGOOMyeYk/9nrQnMOeY8c4G5ydxiLjNXmKvMNeY6c+O//J8cd5l7zH3mAfOSecU8Zp4wT5lE5jnz4r/8n3yJzFvmHfOe+cB8ZD4xScwX5ivzjfn+X/n/kz2J+cP8Zf4xcWwyNjmbgk3JpmJTs2nYtGw6Nj2bgc3IZmIzs1nYrGw2Njubg83J5mJzswiLshiLswRLshRLswzLshzLswIrshIrswqrshoLWJ01WJOFrMXarMO6rMf6bMCGbMTG2DxsXjYfm58twBZkC7GF2SJsUbYYW5wtkTKOLcWWZsuwZdlybHm2AluRrcRWZquwVdlqbHW2BluTrcXWZuuwddl6bH22AduQbcQ2ZpuwTdlmbHO2BduSbcW2Ztuwbdl2bHu2A9uR7cR2ZruwXdlubHe2B9uT7cX2Zvuwfdl+bH92ADuQHcQOZoewQ9lh7HB2BDuSHcWOZsewY9lx7Hh2AjuRncROZqewU9lp7HR2BjuTncXOZuewc9l57Hx2AbuQXcQuZpewS9ll7HJ2BbuSXcWuZtewa9l17Hp2A7uR3cRuZrewW9lt7HZ2B7uT3cXuZvewe9l9bDy7nz3AHmQPsYfZI+xR9hh7nD3BnmRPsafZM+xZNoE9x55nL7AX2UvsZfYKe5W9xl5nb7A32VvsbfYOe5e9x95nH7AP2UfsY/YJ+5R9xj5nX7Av2Vfsa/YNm8i+Zd+x79kP7Ef2E/uZ/cJ+Zb+x39kf7E/2F/ubTWL/sH/Zf2wcl4xLzqXgUnKpuNRcGi4tl45Lz2XgMnKZuMxcFi4rl43LzuXgcnK5uNwcwqEcxuEcwZEcxdEcw7Ecx/GcwImcxMmcwqmcxgFO5wzO5CBncTbncC7ncT4XcCEXcTEuD5eXy8fl5wpwBblCXGGuCFeUK8YV50pwJblSXGmuDFeWK8eV5ypwLleJq8xV4apy1bjqXA2uJleLq83V4epy9bj6XAOuIdeIa8w14ZpyzbjmXAuuJdeKa8214dpy7bj2XAeuI9fp/3F/MDeEG8oN44ZxI7iR3ChuNDeGG8uN48ZzE7iJ3CRuMjeFm8pN46ZzM7iZ3CxuNjeHm8vN4+ZzC7iF3CJuMbeEW8ot45ZzK7iV3CpuNbeGW8ut49ZzG7iN3CZuM7eF28pt47ZzO7id3C5uN7eH28vt4+K5/dwB7iB3iDvMHeGOcse449wJ7iR3ijvNneHOcgncOe48d4G7yF3iLnNXuKvcNe46d4O7yd3ibnN3uLvcPe4+94B7yD3iHnNPuKfcM+4594J7yb3iXnNvuETuLfeOe8994D5yn7jP3BfuK/eN+8794H5yv7jfXBL3h/vL/ePi+GR8cj4Fn5JPxafm0/Bp+XR8ej4Dn5HPxGfms/BZ+Wx8dj4Hn5PPxefmER7lMR7nCZ7kKZ7mGZ7lOZ7nBV7kJV7mFV7lNR7wOm/wJg95i7d5h3d5j/f5gA/5iI/xefi8fD4+P1+AL8gX4gvzRfiifDG+OF+CL8mX4kvzZfiyfDm+PF+Br8hX4ivzVfiqfDW+Ol+Dr8nX4mvzdfi6fD2+Pt+Ab8g34hvzTfimfDO+Od+Cb8m34lvzbfi2fDu+Pd+B78h34jvzXfiufDe+O9+D78n34nvzffi+fD++Pz+AH8gP4gfzQ/ih/DB+OD+CH8mP4kfzY/ix/Dh+PD+Bn8hP4ifzU/ip/DR+Oj+Dn8nP4mfzc/i5/Dx+Pr+AX8gv4hfzS/il/DJ+Ob+CX8mv4lfza/i1/Dp+Pb+B38hv4jfzW/it/DZ+O7+D38nv4nfze/i9/D4+nt/PH+AP8of4w/wR/ih/jD/On+BP8qf40/wZ/iyfwJ/jz/MX+Iv8Jf4yf4W/yl/jr/M3+Jv8Lf42f4e/y9/j7/MP+If8I/4x/4R/yj/jn/Mv+Jf8K/41/4ZP5N/y7/j3/Af+I/+J/8x/4b/y3/jv/A/+J/+L/80n8X/4v/w/Pk5IJiQXUggphVRCaiGNkFZIJ6QXMggZhUxCZiGLkFXIJmQXcgg5hVxCbgERUAETcIEQSIESaIERWIETeEEQREESZEERVEETgKALhmAKULAEW3AEV/AEXwiEUIiEmJBHyCvkE/ILBYSCQiGhsFBEKCoUE4oLJYSSQimhtFBGKCuUE8oLFYSKQiWhslBFqCpUE6oLNYSaQi2htlBHqCvUE+oLDYSGQiOhsdBEaCo0E5oLLYSWQiuhtdBGaCu0E9oLHYSOQiehs9BF6Cp0E7oLPYSeQi+ht9BH6Cv0E/oLA4SBwiBhsDBEGCoME4YLI4SRwihhtDBGGCuME8YLE4SJwiRhsjBFmCpME6YLM4SZwixhtjBHmCvME+YLC4SFwiJhsbBEWCosE5YLK4SVwiphtbBGWCusE9YLG4SNwiZhs7BF2CpsE7YLO4Sdwi5ht7BH2CvsE+KF/cIB4aBwSDgsHBGOCseE48IJ4aRwSjgtnBHOCgnCOeG8cEG4KFwSLgtXhKvCNeG6cEO4KdwSbgt3hLvCPeG+8EB4KDwSHgtPhKfCM+G58EJ4KbwSXgtvhEThrfBOeC98ED4Kn4TPwhfhq/BN+C78EH4Kv4TfQpLwR/gr/BPixGRicjGFmFJMJaYW04hpxXRiejGDmFHMJGYWs4hZxWxidjGHmFPMJeYWEREVMREXCZEUKZEWGZEVOZEXBVEUJVEWFVEVNRGIumiIpghFS7RFR3RFT/TFQAzFSIyJecS8Yj4xv1hALCgWEguLRcSiYjGxuFhCLCmWEkuLZcSyYjmxvFhBrChWEiuLVcSqYjWxulhDrCnWEmuLdcS6Yj2xvthAbCg2EhuLTcSmYjOxudhCbCm2EluLbcS2YjuxvdhB7Ch2EjuLXcSuYjexu9hD7Cn2EnuLfcS+Yj+xvzhAHCgOEgeLQ8Sh4jBxuDhCHCmOEkeLY8Sx4jhxvDhBnChOEieLU8Sp4jRxujhDnCnOEmeLc8S54jxxvrhAXCguEheLS8Sl4jJxubhCXCmuEleLa8S14jpxvbhB3ChuEjeLW8St4jZxu7hD3CnuEneLe8S94j4xXtwvHhAPiofEw+IR8ah4TDwunhBPiqfE0+IZ8ayYIJ4Tz4sX/l+deS2+ERPFt+I78b34QfwofhI/i1/Er+I38bv4Q/wp/hJ/i0niH/Gv+E+Mk5JJyaUUUkoplZRaSiOlldJJ6aUMUkYpk5RZyiJllbJJ2aUcUk4pl5RbQiRUwiRcIiRSoiRaYiRW4iReEiRRkiRZUiRV0iQg6ZIhmRKULMmWHMmVPMmXAimUIikm5ZHySvmk/FIBqaBUSCosFZGKSsWk4lIJqaRUSiotlZHKSuWk8lIFqaJUSaosVZGqStWk6lINqaZUS6ot1ZHqSvWk+lIDqaHUSGosNZGaSs2k5lILqaXUSmottZHaSu2k9lIHqaPUSeosdZG6St2k7lIPqafUS+ot9ZH6Sv2k/tIAaaA0SBosDZGGSsOk4dIIaaQ0ShotjZHGSuOk8dIEaaI0SZosTZGmStOk6dIMaaY0S5otzZHmSvOk+dICaaG0SFosLZGWSsuk5dIKaaW0SlotrZHWSuuk9dIGaaO0Sfo/Rmtvl3ZIO6Vd0m5pj7RX2ifFS/ulA9JB6ZB0WDoiHZWOScelE9JJ6ZR0WjojnZUSpHPSeemCdFG6JF2WrkhXpWvSdemGdFO6Jd2W7kh3pXvSfemB9FB6JD2WnkhPpWfSc+mF9FJ6Jb2W3kiJ0lvpnfRe+iB9lD5Jn6Uv0lfpm/Rd+iH9lH5Jv6Uk6Y/0V/onxcnJ5ORyCjmlnEpOLaeR08rp5PRyBjmjnEnOLGeRs8rZ5OxyDjmnnEvOLSMyKmMyLhMyKVMyLTMyK3MyLwuyKEuyLCuyKmsykHXZkE0ZypZsy47syp7sy4EcypEck/PIeeV8cn65gFxQLiQXlovIReVicnG5hFxSLiWXlsvIZeVycnm5glxRriRXlgf/r1lPNeSaci25tlxHrivXk+vLDeSGciO5sdxEbio3k5vLLeSWciu5tdxGbiu3k9vLHeSOcie5s9xF7ip3k7vLPeSeci+5t9xH7iv3k/vLA+SB8iB5sDxEHioPk4fLI+SR8ih5tDxGHiuPk8fLE+SJ8iR5sjxFnipPk6fLM+SZ8ix5tjxHnivPk+fLC+SF8iJ5sbxEXiovk5fLK+SV8ip5tbxGXiuvk9fLG+SN8iZ5s7xF3ipvk7fLO+Sd8i55t7xH3ivvk+Pl/fIB+aB8SD4sH5GPysfk4/IJ+aR8Sj4tn5HPygnyOfm8fEG+KF+SL8tX5KvyNfm6fEO+Kd+Sb8t35LvyPfm+/EB+KD+SH8tP5KfyM/m5/EJ+Kb+SX8tv5ET5rfxOfi9/kD/Kn+TP8hf5q/xN/i7/kH/Kv+TfcpL8R/4r/5PjlGRKciWFklJJpaRW0ihplXRKeiWDklHJpGRWsihZlWxKdiWHklPJpeRWEAVVMAVXCIVUKIVWGIVVOIVXBEVUJEVWFEVVNAUoumIopgIVS7EVR3EVT/GVQAmVSIkpeZS8Sj4lv1JAKagUUgorRZSiSjGluFJCKamUUkorZZSySjmlvFJBqahUUiorVZSqSjWlulJDqanUUmordZS6Sj2lvtJAaag0UhorTZSmSjOludJCaam0UlorbZS2SjulvdJB6ah0UjorXZSuSjelu9JD6an0UnorfZS+Sj+lvzJAGagMUgYrQ5ShyjBluDJCGamMUkYrY5SxyjhlvDJBmahMShanTFGmKtOU6coMZaYyS5mtzFHmKvOU+coCZaGySFmsLFGWKsuU5coKZaWySlmtrFHWKuuU9coGZaOySdmsbFG2KtuU7coOZaeyS9mt7FH2KvuUeGW/ckA5qBxSDitHlKPKMeW4ckI5qZxSTitnlLNKgnJOOa9cUC4ql5TLyhXlqnJNua7cUG4qt5Tbyh3lrnJPua88UB4qj5THyhPlqfJMea68UF4qr5TXyhslUXmrvFPeKx+Uj8on5bPyRfmqfFO+Kz+Un8ov5beSpPxR/ir/lDg1mZpcTaGmVFOpqdU0alo1nZpezaBmVDOpmdUsalY1m5pdzaHmVHOpuVVERVVMxVVCJVVKpVVGZVVO5VVBFVVJlVVFVVVNBaquGqqpQtVSbdVRXdVTfTVQQzVSY2oeNa+aT82vFlALqoXUwmoRtahaTC2ullBLqqXU0moZtaxaTi2vVlArqpXUymoVtapaTa2u1lBrqrXU2modta5aT62vNlAbqo3UxmoTtanaTG2utlBbqq3U1mobta3aTm2vdlA7qp3UzmoXtavaTe2u9lB7qr3U3mofta/aT+2vDlAHqoPUweoQdag6TB2ujlBHqqPU0eoYdaw6Th2vTlAnqpPUyeoUdao6TZ2uzlBnqrPU2eocda46T52vLlAXqovUxeoSdam6TF2urlBXqqvU1eoada26Tl2vblA3qpvUzeoWdau6Td2u7lB3qrvU3eoeda+6T41X96sH1IPqIfWwekQ9qh5Tj6sn1JPqKfW0ekY9qyao59Tz6gX1onpJvaxeUa+q19Tr6g31pnpLva3eUe+q99T76gP1ofpIfaw+UZ+qz9Tn6gv1pfpKfa2+URPVt+o79b36Qf2oflI/q1/Ur+o39bv6Q/2p/lJ/q0nqH/Wv+k+N05JpybUUWkotlZZaS6Ol1dJp6bUMWkYtk/afdyurlk3LruXQcmq5tNwaoqEapuEaoZEapdEao7Eap/GaoImapMmaoqmapgFN1wzN1KBmabbmaK7mab4WaKEWaTEtj5ZXy6fl1wpoBbVCWmGtiFZUK6YV10poJbVSWmmtjFZWK6eV1ypoFbVKWmWtilZVq6ZV12poNbVaWm2tjlZXq6fV1xpoDbVGWmOtidZUa6Y111poLbVWWmutjdZWa6e11zpoHbVOWmeti9ZV66Z113poPbVeWm+tj9ZX66f11wZoA7VB2mBtiDZUG6YN10ZoI7VR2mhtjDZWG6eN1yZoE7VJ2mRtijZVm6ZN12ZoM7VZ2mxtjjZXm6fN1xZoC7VF2mJtibZUW6Yt11ZoK7VV2mptjbZWW6et1zZoG7VN2mZti7ZV26Zt13ZoO7Vd2m5tj7ZX26fFa/u1A9pB7ZB2WDuiHdWOace1E9pJ7ZR2WjujndUStHPaee2CdlG7pF3WrmhXtWvade2GdlO7pd3W7mh3tXvafe2B9lB7pD3WnmhPtWfac+2F9lJ7pb3W3miJ2lvtnfZe+6B91D5pn7Uv2lftm/Zd+6H91H5pv7Uk7Y/2V/unxYFkIDlIAVKCVCA1SAPSgnQgPcgAMoJMIDPIArKCbCA7yAFyglwgN0AACjCAAwKQgAI0YAALOMADAYhAAjJQgAo0AIAODGACCCxgAwe4wAM+CEAIIhADeUBekA/kBwVAQVAIFAZFQFFQDBQHJUBJUAqUBmVAWVAOlAcVQEVQCVQGVUBVUA1UBzVATVAL1AZ1QF1QD9QHDUBD0Ag0Bk1AU9AMNActQEvQCrQGbUBb0A60Bx1AR9AJdAZdQFfQDXQHPUBP0Av0Bn1AX9AP9AcDwEAwCAwGQ8BQMAwMByPASDAKjAZjwFgwDowHE8BEMAlMBlPAVDANTAczwEwwC8wGc8BcMA/MBwvAQrAILAZLwFKwDCwHK8BKsAqsBmvAWrAOrAcbwEawCWwGW8BWsA1sBzvATrAL7AZ7wF6wD8SD/eAAOAgOgcPgCDgKjoHj4AQ4CU6B0+AMOAsSwDlwHlwAF8ElcBlcAVfBNXAd3AA3wS1wG9wBd8E9cB88AA/BI/AYPAFPwTPwHLwAL8Er8Bq8AYngLXgH3oMP4CP4BD6DL+Ar+Aa+gx/gJ/gFfoMk8Af8Bf9AnJ5MT66n0FPqqfTUeho9rZ5OT69n0DPqmfTMehY9q55Nz67n0HPqufTcOqKjOqbjOqGTOqXTOqOzOqfzuqCLuqTLuqKruqYDXdcN3dShbum27uiu7um+HuihHukxPY+eV8+n59cL6AX1QnphvYheVC+mF9dL6CX1UnppvYxeVi+nl9cr6BX1SnplvYpeVa+mV9dr6DX1WnptvY5eV6+n19cb6A31RnpjvYneVG+mN9db6C31VnprvY3eVm+nt9c76B31TnpnvYveVe+md9d76D31XnpvvY/eV++n99cH6AP1QfpgfYg+VB+mD9dH6CP1UfpofYw+Vh+nj9cn6BP1SfpkfYo+VZ+mT9dn6DP1WfpsfY4+V5+nz9cX6Av1RfpifYm+VF+mL9dX6Cv1VfpqfY2+Vl+nr9c36Bv1TfpmfYu+Vd+mb9d36Dv1XfpufY++V9+nx+v79QP6Qf2Qflg/oh/Vj+nH9RP6Sf2Uflo/o5/VE/Rz+nn9gn5Rv6Rf1q/oV/Vr+nX9hn5Tv6Xf1u/od/V7+n39gf5Qf6Q/1p/oT/Vn+nP9hf5Sf6W/1t/oifpb/Z3+Xv+gf9Q/6Z/1L/pX/Zv+Xf+h/9R/6b/1JP2P/lf/p8cZyYzkRgojpZHKSG2kMdIa6Yz0RgYjo5HJyGxkMbIa2YzsRg4jp5HLyG0gBmpgBm4QBmlQBm0wBmtwBm8IhmhIhmwohmpoBjB0wzBMAxqW8f/v/Y2MxkZjo6nRzGhu5E1eMHkro5XRxmhjtDPaGR2MjkYno7PRxehqdDW6Gz2MHkYvo7fRx+hr9DP6GwOMgcYgY7Ax2BhqDDWGG8ONkcZIY7Qx2hhrjDXGG+ONicZEY7Ix2ZhqTDWmG9ONmcZMY7Yx25hrzDXmG/ONhcZCY7Gx2FhqLDWWG8uNlcZKY7Wx2lhrrDXWG+uNjcZGY7Ox2dhqbDW2G9uNncZOY7ex29hr7DXijXjjgHHAOGQcMo4YR4xjxjHjhHHCOGWcMs4YZ4wEI8E4b5w3LhoXjcvGZeOqcdW4blw3bho3jdvGbeOucde4b9w3HhoPjcfGY+Op8cx4brwwXhqvjNfGGyPReGu8M94bH4yPxifjs/HF+Gp8M74bP4yfxi/jt5Fk/DH+Gv+M/y/7F2VTMVVTM4Gpm4ZpmtC0TNt0TNf0TN8MzNCMzJiZx8xr5jPzmwXMgmYhs7BZxCxqFjOLmyXMkmYps7RZxixrljPLmxXMimYls7JZxaxqVjOrmzXMmmYts7ZZx6xr1jPrmw3MhmYjs7HZxGxqNjObmy3MlmYrs7XZxmxrtjPbmx3MjmYns7PZxexqdjO7mz3MnmYvs7fZx+xr9jP7mwPMgeYgc7A5xBxqDjOHmyPMkeYoc7Q5xhxrjjPHmxPMieYkc7I5xZxqTjOnmzPMmeYsc7Y5x5xrzjPnmwvMheYic7G5xFxqLjOXmyvMleYqc7W5xlxrrjPXmxvMjeYmc7O5xdxqbjO3mzvMneYuc7e5x9xr7jPjzf3mAfOgecg8bB4xj5rHzOPmCfOkeco8bZ4xz5oJ5jnzvHnBvGheMi+bV8yr5jXzunnDvGneMm+bd8y75j3zvvnAfGg+Mh+bT8yn5jPzufnCfGm+Ml+bb8xE8635znxvfjA/mp/Mz+YX86v5zfxu/jB/mr/M32aS+cf8a/4z42AymBymgClhKpgapoFpYTqYHmaAGWEmmBlmgVlhNpgd5oA5YS6YGyIQhRjEIQFJSEEaMpCFHOShAEUoQRkqUIUaBFCHBjQhhBa0oQNd6EEfBjCEEYzBPDAvzAfzwwKwICwEC8MisCgsBovDErAkLAVLwzKwLCwHy8MKsCKsBCvDKrAqrAarwxqwJqwFa8M6sC6sB+vDBrAhbAQbwyawKWwGm8MWsCVsBVvDNrAtbAfbww6wI+wEO8MusCvsBrvDHrAn7AV7wz6wL+wH+8MBcCAcBAfDIXAoHAaHwxFwJBwFR8MxcCwcB8fDCXAinAQnwylwKpwGp8MZcCacBWfDOXAunAfnwwVwIVwEF8MlcClcBpfDFXAlXAVXwzVwLVwH18MNcCPcBDfDLXAr3Aa3wx1wJ9wFd8M9cC/cB+PhfngAHoSH4GF4BB6Fx+BxeAKehKfgaXgGnoUJ8Bw8Dy/Ai/ASvAyvwKvwGrwOb8Cb8Ba8De/Au/AevA8fwIfwEXwMn8Cn8Bl8Dl/Al/AVfA3fwET4Fr6D7+EH+BF+gp/hF/gVfoPf4Q/4E/6Cv2ES/AP/wn8wzkpmJbdSWCmtVFZqK42V1kpnpbcyWBmtTFZmK4uV1cpmZbdyWDmtXFZuC7FQC7Nwi7BIi7Joi7FYi7N4S7BES7JkS7FUS7OApVuGZVrQsizbcizX8izfCqzQiqyYlccqnSIuLr9VwCpoFbIKW0WsolYxq7hVwipplbJKW2WsslY5q7xVwapoVbIqW1WsqlY1q7pVw6pp1bJqW3WsulY9q77VwGpoNbIaW02splYzq7nVwmpptbJaW22stlY7q73VwepodbI6W12srlY3q7vVw+pp9bJ6W32svlY/q781wBpoDbIGW0OsodYwa7g1whppjbJGW2OssdY4a7w1wZpoTbImW1OsqdY0a7o1w5ppzbJmW3OsudY8a761wFpoLbIWW0uspdYya7m1wlpprbJWW2ustdY6a721wdpobbI2W1usrdY2a7u1w9pp7bJ2W3usvdY+K97abx2wDlqHrMPWEeuodcw6bp2wTlqnrNPWGeuslWCds85bF6yL1iXrsnXFumpds65bN6yb1i3rtnXHumvds+5bD6yH1iPrsfXEemo9s55bL6yX1ivrtfXGSrTeWu+s99YH66P1yfpsfbG+Wt+s79YP66f1y/ptJVl/rL/WPyvOTmYnt1PYKe1Udmo7jZ3WTmentzPYGe1MdmY7i53VzmZnt3PYOe1cdm4bsVEbs3GbsEmbsmmbsVmbs3lbsEVbsmVbsVVbs4Gt24Zt2tC2bNt2bNf2bN8O7NCO7Jidx85r57Pz2wXsgnYhu7BdxC5qF7OL2yXsknYpu7Rdxi5rl7PL2xXsinYlu7Jdxa5qV7Or2zXsmnYtu7Zdx65r17Pr2w3shnYju7HdxG5qN7Ob2y3slnYru7Xdxm5rt7Pb2x3sjnYnu7Pdxe5qd7O72z3snnYvu7fdx+5r97P72wPsgfYge7A9xB5qD7OH2yPskfYoe7Q9xh5rj7PH2xPsifYke7I9xZ5qT7On2zPsmfYse7Y9x55rz7Pn2wvshfYie7G9xF5qL7OX2yvslfYqe7W9xl5rr7PX2xvsjfYme7O9xd5qb7O32zvsnfYue7e9x95r77Pj7f32Afugfcg+bB+xj9rH7OP2Cfukfco+bZ+xz9oJ9jn7vH3Bvmhfsi/bV+yr9jX7un3Dvmnfsm/bd+y79j37vv3Afmg/sh/bT+yn9jP7uf3Cfmm/sl/bb+xE+639zn5vf7A/2p/sz/YX+6v9zf5u/7B/2r/s33aS/cf+a/+z45xkTnInhZPSSeWkdtI4aZ10Tnong5PRyeRkdrI4WZ1sTnYnh5PTyeXkdhAHdTAHdwiHdCiHdhiHdTiHdwRHdCRHdhRHdTQHOLpjOKYDHcuxHcdxHc/xncAJnciJOXmcvE4+J79TwCnoFHIKO0Wcok4xp7hTwinplHJKO2Wcsk45p7xTwanoVHIqO1Wcqk41p7pTw6np1HJqO3Wcuk49p77TwGnoNHIaO02cpk4zp7nTwmnptHJaO22ctk47p73TwenodHI6O12crk43p7vTw+np9HJ6O32cvk4/p78zwBnoDHIGO0Ococ4wZ7gzwhnpjHJGO2Ocsc44Z7wzwZnoTHImO1Ocqc40Z7ozw5npzHJmO3Ocuc48Z76zwFnoLHIWO0ucpc4yZ7mzwlnprHJWO2uctc46Z72zwdnobHI2O1ucrc42Z7uzw9np7HJ2O3ucvc4+J97Z7xxwDjqHnMPOEeeoc8w57pxwTjqnnNPOGeesk+Ccc847F5yLziXnsnPFuepcc647N5ybzi3ntnPHuevcc+47D5yHziPnsfPEeeo8c547L5yXzivntfPGSXTeOu+c984H56PzyfnsfHG+Ot+c784P56fzy/ntJDl/nL/OPyfOTeYmd1O4Kd1Ubmo3jZvWTeemdzO4Gd1MbmY3i5vVzeZmd3O4Od1cbm4XcVEXc3GXcEmXcmmXcVmXc3lXcEVXcmVXcVVXc4Gru4ZrutC1XNt1XNf1XN8N3NCN3Jibx83r5nPzuwXcgm4ht7BbxC3qFnOLuyXckm4pt7Rbxi3rlnPLuxXcim4lt7Jbxa3qVnOruzXcmm4tt7Zbx63r1nPruw3chm4jt7HbxG3qNnObuy3clm4rt7Xbxm3rtnPbux3cjm4nt7Pbxe3qdnO7uz3cnm4vt7fbx+3r9nP7uwPcge4gd7A7xB3qDnOHuyPcke4od7Q7xh3rjnPHuxPcie4kd7I7xZ3qTnOnuzPcme4sd7Y7x53rznPnuwvche4id7G7xF3qLnOXuyvcle4qd7W7xl3rrnPXuxvcje4md7O7xd3qbnO3uzvcne4ud7e7x93r7nPj3f3uAfege8g97B5xj7rH3OPuCfeke8o97Z5xz7oJ7jn3vHvBveheci+7V9yr7jX3unvDvenecm+7d9y77j33vvvAfeg+ch+7T9yn7jP3ufvCfem+cl+7b9xE9637zn3vfnA/up/cz+4X96v7zf3u/nB/ur/c326S+8f96/5z47xkXnIvhZfSS+Wl9tJ4ab10Xnovg5fRy+Rl9rJ4Wb1sXnYvh5fTy+Xl9hAP9TAP9wiP9CiP9hiP9TiP9wRP9CRP9hRP9TQPeLpneKYHPcuzPcdzPc/zvRT/6ycsj5fXy+fl9wp4Bb1CXmGviFfUK+YV90p4Jb1SXmmvjFfWK+eV9yp4Fb1KXmWvilfVq+ZV92p4Nb1aXm2vjlfXq+fV9xp4Db1GXmOvidfUa+Y191p4Lb1WXmuvjdfWa+e19zp4Hb1OXmevi9fV6+Z193p4Pb1eXm+vj9fX6+f19wZ4A71B3mBviDfUG+YN90Z4I71R3mhvjDfWG+eN9yZ4E71J3mRvijfVm+ZN92Z4M71Z3mxvjjfXm+fN9xZ4C71F3mJvibfUW+Yt91Z4K71V3mpvjbfWW+et9zZ4G71N3mZvi7fV2+Yd9XZ4O71d3m5vj7fX2+fFe/u9A95B75B32DviHfWOece9E95J75R32jvjnfUSvHPeee+Cd9G75F32rnhXvWvede+Gd9O75d327nh3vXvefe+B99B75D32nnhPvWfec++F99J75b323niJ3lvvnffe++B99D55n70v3lfvm/fd++H99H55v70k74/31/vnxfnJ/OR+Cj+ln8pP7afx0/rp/PR+Bj+jn8nP7Gfxs/rZ/Ox+Dj+nn8vP7SM+6mM+7hM+6VM+7TM+63M+7wu+6Eu+7Cu+6ms+8HXf8E0f+pZv+47v+p7v+4Ef+pEf8/P4ef18fn6/gF/QL+QX9ov4Rf1ifnG/hF/SL+WX9sv4Zf1yfnm/gl/Rr+RX9qv4Vf1qfnW/hl/Tr+XX9uv4df16fn2/gd/Qb+Q39pv4Tf1mfnO/hd/Sb+W39tv4bf12fnu/g9/R7+R39rv4Xf1ufne/h9/T7+X39vv4ff1+fn9/gD/QH+QP9of4Q/1h/nB/hD/SH+WP9sf4Y/1x/nh/gj/Rn+RP9qf4U/1p/nR/hj/Tn+XP9uf4c/15/nx/gb/QX+Qv9pf4S/1l/nJ/hb/SX+Wv9tf4a/11/np/g7/R3+Rv9rf4W/1t/nZ/h7/T3+Xv9vf4e/19fry/3z/gH/QP+Yf9I/5R/5h/3D/hn/RP+af9M/5ZP8E/55/3L/gX/Uv+Zf+Kf9W/5l/3b/g3/Vv+bf+Of9e/59/3H/gP/Uf+Y/+J/9R/5j/3X/gv/Vf+a/+Nn+i/9d/57/0P/kf/k//Z/+J/9b/53/0f/k//l//bT/L/+H/9f35ckCxIHqQIUgapgtRBmiBtkC5IH2QIMgaZgsxBliBrkC3IHuQIcga5gtwBEqABFuABEZABFdABE7ABF/CBEIiBFMiBEqiBFoBAD4zADGBgBXbgBG7gBX4QBGEQBbEgT5A3yBfkDwoEBYNCQeGgSFA0KBYUD0oEJYNSQemgTFA2KBeUDyoEFYNKQeWgSlA1qBZUD2oENYNaQe2gTlA3qBfUDxoEDYNGQeOgSdA0aBY0D1oELYNWQeugTdA2aBe0DzoEHYNOQeegS9A16BZ0D3oEPYNeQe+gT9A36Bf0DwYEA4NBweBgSDA0GBYMD0YEI4NRwehgTDA2GBeMDyYEE4NJweRgSjA1mBZMD2YEM4NZwexgTjA3mBfMDxYEC4NFweJgSbA0WBYsD1YEK4NVwepgTbA2WBesDzYEG4NNweZgS7A12BZsD3YEO4Ndwe5gT7A32BfEB/uDA8HB4FBwODgSHA2OBceDE8HJ4FRwOjgTnA0SgnPB+eBCcDG4FFwOrgRXg2vB9eBGcDO4FdwO7gR3g3vB/eBB8DB4FDwOngRPg2fB8+BF8DJ4FbwO3gSJwdvgXfA++BB8DD4Fn4MvwdfgW/A9+BH8DH4Fv4Ok4E/wN/gXxIXJwuRhijBlmCpMHaYJ04bpwvRhhjBjmCnMHGYJs4bZwuxhjjBnmCvMHSIhGmIhHhIhGVIhHTIhG3IhHwqhGEqhHCqhGmohCPXQCM0QhlZoh07ohl7oh0EYhlEYC/OEecN8Yf6wQFgwLBQWDouERcNiYfGwRFgyLBWWDsuEZcNyYfmwQlgxrBRWDquEVcNqYfWwRlgzrBXWDuuEdcN6Yf2wQdgwbBQ2DpuETcNmYfOwRdgybBW2DtuEbcN2YfuwQ9gx7BR2DruEXcNuYfewR9gz7BX2DvuEfcN+Yf9wQDgwHBQODoeEQ8Nh4fBwRDgyHBWODseEY8Nx4fhwQjgxnBRODqeEU8Np4fRwRjgznBXODueEc8N54fxwQbgwXBQuDpeES8Nl4fJwRbgyXBWuDteEa8N14fpwQ7gx3BRuDreEW8Nt4fZwR7gz3BXuDveEe8N9YXy4PzwQHgwPhYfDI+HR8Fh4PDwRngxPhafDM+HZMCE8F54PL4QXw0vh5fBKeDW8Fl4Pb4Q3w1vh7fBOeDe8F94PH4QPw0fh4/BJ+DR8Fj4PX4Qvw1fh6/BNmBi+Dd+F78MP4cfwU/g5/BJ+Db+F38Mf4c/wV/g7TAr/hH/Df2FclCxKHqWIUkapotRRmihtlC5KH2WIMkaZosxRlihrlC3KHuWIcka5otwREqERFuEREZERFdERE7ERF/GREImRFMmREqmRFoFIj4zIjGBkRXbkRG7kRX4URGEURbEoT5Q3yhfljwpEBaNCUeGoSFQ0KhYVj0pEJaNSUemoTFQ2KheVjypEFaNKUeWoSlQ1qhZVj2pENaNaUe2oTlQ3qhfVjxpEDaNGUeOoSdQ0ahY1j1pELaNWUeuoTdQ2ahe1jzpEHaNOUeeoS9Q16hZ1j3pEPaNeUe+oT9Q36hf1jwZEA6NB0eBoSDQ0GhYNj0ZEI6NR0ehoTDQ2GheNjyZEE6NJ0eRoSjQ1mhZNj2ZEM6NZ0exoTjQ3mhfNjxZEC6NF0eJoSbQ0WhYtj1ZEK6NV0epoTbQ2WhetjzZEG6NN0eZoS7Q12hZtj3ZEO6Nd0e5oT7Q32hfFR/ujA9HB6FB0ODoSHY2ORcejE9HJ6FR0OjoTnY0SonPR+ehCdDG6FF2OrkRXo2vR9ehGdDO6Fd2O7kR3o3vR/ehB9DB6FD2OnkRPo2fR8+hF9DJ6Fb2O3kSJ0dvoXfQ++hB9jD5Fn6Mv0dfoW/Q9+hH9jH5Fv6Ok6E/0N/oXxcWSxZLHUsRSxlLFUsfSxNLG0sXSxzLEMsYyxTLHssSyxrLFssdyxHLGcsVyx5AYGsNieIyIkTEqRseYGBvjYnxMiIkxKSbHlJga02IgpseMmBmD/xtN59ikZ5QowEkysW3bTh7b1jnnjW3btpOJbdu2bdu2Obdu7e6v6OrqD41VxCphlbEqWFWsGlYdq4HVxDAMxwiMxCiMxhiMxTiMxwRMxCRMxhRMxTRMxwzMxCzMxhzMxTzMxwIsxCIMYBBDWAyrhdXG6mB1sXpYfawB1hBrhDXGmmBNsWZYc6wF1hJrhbXG2mBtsXZYe6wD1hHrhHXGumBdsW5Yd6wH1hPrhfXG+mB9sX5Yf2wANhAbhA3GhmBDsWHYcGwENhIbhY3GxmBjsXHYeGwCNhGbhCVgk7Ep2FRsGjYdm4HNxGZhs7E52FxsHjYfW4AtxBZhi7El2FJsGbYcW4GtxFZhq7E12FpsHbYe24BtxDZhm7Et2FZsG7Yd24HtxHZhu7E92F5sH7YfO4AdxA5hh7Ej2FHsGHYcO4GdxE5hp7Ez2FnsHHYeu4BdxC5hl7Er2FXsGnYdu4HdxG5ht7E72F3sHnYfe4A9xB5hj7En2FPsWZLn2AvsJfYKe429wd5i77D32AfsI/YJ+4x9wb5i37Dv2A/sJ/YL+439wf5i/7BELA5PgifFk+HxeHI8BZ4ST4WnxtPgafF0eHo8A54Rz4RnxrPgWfFseHY8B54Tz4XnxvPgefF8eH68AF4QL4QXxovgRfFieHG8BF4SL4WXxsvgZfFyeHm8Al4Rr4RXxqvgVfFqeHW8Bl4Tx3AcJ3ASp3AaZ3AW53AeF3ARl3AZV3AV13AdN3ATt3Abd3AX93AfD/AQj3CAQxzhMbwWXhuvg9fF6+H18QZ4Q7wR3hhvgjfFm+HN8RZ4S7wV3hpvg7fF2+Ht8Q54R7wT3hnvgnfFu+Hd8R54T7wX3hvvg/fF++H98QH4QHwQPhgfgg/Fh+HD8RH4SHwUPhofg4/Fx+Hj8Qn4RHwSnoBPxqfgU/Fp+HR8Bj4Tn4XPxufgc/F5+Hx8Ab4QX4QvxpfgS/Fl+HJ8Bb4SX4Wvxtfga/F1+Hp8A74R34RvxrfgW/Ft+HZ8B74T34Xvxvfge/F9+H78AH4QP4Qfxo/gR/Fj+HH8BH4SP4Wfxs/gZ/Fz+Hn8An4Rv4Rfxq/gV/Fr+HX8Bn4Tv4Xfxu/gd/F7+H38Af4Qf4Q/xp/gT/Fn+HP8Bf4Sf4W/xt/gb/F3+Hv8A/4R/4R/xr/gX/Fv+Hf8B/4T/4X/xv/gf/F/eCIeRyQhkhLJiHgiOZGCSEmkIlITaYi0RDoiPZGByEhkIjITWYisRDYiO5GDyEnkInITeYi8RD4iP1GAKEgUIgoTRYiiRDGiOFGCiP/f/4MoR5QnKhAViUpEZaIKUZWoRlQnahA1CYzACYIgCYqgCYZgCY7gCYEQCYmQCYVQCY3QCYMwCYuwCYdwCY/wiYAIiYgABCQQESNqEbWJOkRdoh5Rn2hANCQaEY2JJkRTohnRnGhBtCRaEa2JNkRboh3RnuhAdCQ6EZ2JLkRXohvRnehB9CR6Eb2JPkRfoh/RnxhADCQGEYOJIcRQYhgxnBhBjCRGEaOJMcRYYhwxnphATCQmEQnEZGIKMZWYRkwnZhAziVnEbGIOMZeYR8wnFhALiUXEYmIJsZRYRiwnVhAriVXEamINsZZYR6wnNhAbiU3EZmILsZXYRmwndhA7iV3EbmIPsZfYR+wnDhAHiUPEYeIIcZQ4RhwnThAniVPEaeIMcZY4R5wnLhAXiUvEZeIKcZW4RlwnbhA3iVvEbeIOcZe4R9wnHhAPiUfEY+IJ8ZR4RjwnXhAviVfEa+IN8ZZ4R7wnPhAfiU/EZ+IL8ZX4RnwnfhA/iV/Eb+IP8Zf4RyQScWQSMimZjIwnk5MpyJRkKjI1mYZMS6Yj05MZyIxkJjIzmYXMSmYjs5M5yJxkLjI3mYfMS+Yj85MFyIJkIbIwWYQsShYji5MlyJJkKbI0WYYsS5Yjy5MVyIpkJbIyWYWsSlYjq5M1yJokRuIkQZIkRdIkQ7IkR/KkQIqkRMqkQqqkRuqkQZqkRdqkQ7qkR/pkQIZkRAISkoiMkbXI2mQdsi5Zj6xPNiAbko3IxmQTsinZjGxOtiBbkq3I1mQbsi3ZjmxPdiA7kp3IzmQXsivZjexO9iB7kr3I3mQfsi/Zj+xPDiAHkoPIweQQcig5jBxOjiBHkqPI0eQYciw5jhxPTiAnkpPIBHIyOYWcSk4jp8fPIGeSs8jZ5BxyLjmPnE8uIBeSi8jF5BJyaVwcuZxcQa4kV5GryTXkWnIduZ7cQG4kN5GbyS3kVnIbuZ3cQe4kd5G7yT3kXnIfuZ88QB4kD5GHySPkUfIYeZw8QZ4kT5GnyTPkWfIceZ68QF4kL5GXySvkVfIaeZ28Qd4kb5G3yTvkXfIeeZ98QD4kH5GPySfkU/IZ+Zx8Qb4kX5GvyTfkW/Id+Z78QH4kP5GfyS/kV/Ib+Z38Qf4kf5G/yT/kX/IfmUjGUUmopFQyKp5KTqWgUlKpqNRUGiotlY5KT2WgMlKZqMxUFiorlY3KTuWgclK5qNxUHiovlY/KTxWgClKFqMJUEaooVYwqTpWgSlKlqNJUGaosVY4qT1WgKlKVqMpUFaoqVY2qTtWgalIYhVMERVIURVMMxVIcxVMCJVISJVMKpVIapVMGZVIWZVMO5VIe5VMBFVIRBShIISpG1aJqU3WoulQ9qj7VgGpINaIaU02oplQzqjnVgmpJtaJaU22otlQ7qj3VgepIdaI6U12orlQ3qjvVg+pJ9aJ6U32ovlQ/qj81gBpIDaIGU0OoodQwajg1ghpJjaJGU2OosdQ4ajw1gZpITaISqMnUFGoqNY2aTs2gZlKzqNnUHGouNY+aTy2gFlKLqMXUEmoptYxaTq2gVlKrqNXUGmottY5aT22gNlKbqM3UFmortY3aTu2gdlK7qN3UHmovtY/aTx2gDlKHqMPUEeoodYw6Tp2gTlKnqNPUGeosdY46T12gLlKXqMvUFeoqdY26Tt2gblK3qNvUHeoudY+6Tz2gHlKPqMfUE+op9Yx6Tr2gXlKvqNfUG+ot9Y56T32gPlKfqM/UF+or9Y36Tv2gflK/qN/UH+ov9Y9KpOLoJHRSOhkdTyenU9Ap6VR0ajoNnZZOR6enM9AZ6Ux0ZjoLnZXORmenc9A56Vx0bjoPnZfOR+enC9AF6UJ0YboIXZQuRhenS9Al6VJ0aboMXZYuR5enK9AV6Up0ZboKXZWuRlena9A1aYzGaYImaYqmaYZmaY7maYEWaYmWaYVWaY3WaYM2aYu2aYd2aY/26YAO6YgGNKQRHaNr0bXpOnRduh5dn25AN6Qb0Y3pJnRTuhndnG5Bt6Rb0a3pNnRbuh3dnu5Ad6Q70Z3pLnRXuhvdne5B96R70b3pPnRfuh/dnx5AD6QH0YPpIfRQehg9nB5Bj6RH0aPpMfRYehw9np5AT6Qn0Qn0ZHoKPZWeRk+nZ9Az6Vn0bHoOPZeeR8+nF9AL6UX0YnoJvZReRi+nV9Ar6VX0anoNvZZeR6+nN9Ab6U30ZnoLvZXeRm+nd9A76V30bnoPvZfeR++nD9AH6UP0YfoIfZQ+Rh+nT9An6VP0afoMfZY+R5+nL9AX6Uv0ZfoKfZW+Rl+nb9A36Vv0bfoOfZe+R9+nH9AP6Uf0Y/oJ/ZR+Rj+nX9Av6Vf0a/oN/ZZ+R7+nP9Af6U/0Z/oL/ZX+Rn+nf9A/6V/0b/oP/Zf+RyfScUwSJimTjIlnkjMpmJRMKiY1k4ZJy6Rj0jMZmIxMJiYzk4XJymRjsjM5mJxMLiY3k4fJy+Rj8jMFmIJMIaYwU4QpyhRjijMlmJJMKaY0U4Ypy5RjyjMVmIpMJaYyU4WpylRjqjM1mJoMxuAMwZAMxdAMw7AMx/CMwIiMxMiMwqiMxuiMwZiMxdiMw7iMx/hMwIRMxAAGMoiJMbWY2kwdpi5Tj6nPNGAaMo2YxkwTpinTjGnOtGBaMq2Y1kwbpi3TjmnPdGA6Mp2YzkwXpivTjenO9GB6Mr2Y3kwfpi/Tj+nPDGAGMoOYwcwQZigzjBnOjGBGMqOY0cwYZiwzjhnPTGAmMpOYBGYyM4WZykxjpjMzmJnMLGY2M4eZy8xj5jMLmIXMImYxs4RZyixjljMrmJXMKmY1s4ZZy6xj1jMbmI3MJmYzs4XZymxjtjM7mJ3MLmY3s4fZy+xj9jMHmIPMIeYwc4Q5yhxjjjMnmJPMKeY0c4Y5y5xjzjMXmIvMJeZy6jjmKnONuc7cYG4yt5jbzB3mLnOPuc88YB4yj5jHzBPmKfOMec68YF4yr5jXzBvmLfOOec98YD4yn5jPzBfmK/ON+c78YH4yv5jfzB/mL/OPSWTi2CRsUjYZG88mZ1OwKdlUbGo2DZuWTcemZzOwGdlMbGY2C5uVzcZmZ3OwOdlcbG42D5uXzcfmZwuwBdlCbGG2CFuULcYWZ0uwJdlSbGm2DFuWLceWZyuwFdlKbGW2CluVrcZWZ5PF1WQxFmcJlmQplmYZlmU5lmcFVmQlVmYVVmU1VmcN1mQt1mYd1mU91mcDNmQjFrCQRWyMrcXWZuuwddl6bH22AduQbcQ2ZpuwTdlmbHO2BduSbcW2Ztuwbdl2bHu2A9uR7cR2ZruwXdlubHe2B9uT7cX2Zvuwfdl+bH92ADuQHcQOZoewQ9lh7HB2BDuSHcWOZsewY9lx7Hh2AjuRncQmsJPZKexUdho7nZ3BzmRnsbPZOexcdh47n13ALmQXsYvZJexSdhm7nF3BrmRXsavZNexadh27nt3AbmQ3sZvZLexWdhu7nd3B7mR3sbvZPexedh+7nz3AHmQPsYfZI+xR9hh7nD3BnmRPsafZM+xZ9hx7nr3AXky4xF5mr7BX2WvsdfYGe5O9xd5m77B32XvsffYB+5B9xD5mn7BP2Wfsc/YF+5J9xb5m37Bv2Xfse/YD+5H9xH5mv7Bf2W/sd/YH+5P9xf5m/7B/2X9sIhvHJeGScsm4eC45l4JLyaXiUnNpuLRcOi49l4HLyGXiMnNZuKxcNi47l4PLyeXicnN5uLxcPi4/V4AryBXiCnNFuKJcMa44V4IryZXiSnNluLJcOa48V4GryFXiKnNVuKpcNa46V4OryWEczhEcyVEczTEcy3EczwmcyEmczCmcymlcXKr/OITNOZzLeZzPBVzIRRzgIIe4GFeLq83V4epy9bj6XAOuIdeIa8w14ZpyzbjmXAuuJdeKa8214dpy7bj2XAeuI9eJ68x14bpy3bjuXA+uJ9eL68314fpy/bj+3ABuIDeIG8wN4YZyw7jh3AhuJDeKG82N4cZy47jx3ARuIjeJS+Amc1O4qdw0bjo3g5vJzeJmc3O4udw8bj63gFvILeIWc0u4pdwybjm3glvJreJWc2u4tdw6bj23gdvIbeI2c1u4rdw2bju3g9vJ7eJ2c3u4vdw+bj93gDvIHeIOc0e4o9wx7jh3gjvJneJOc2e4s9w57jx3gbvIXeIuc1e4q9w17jp3g7vJ3eJuc3e4u9w97j73gHvIPeIec0+4p9wz7jn3gnvJveJec2+4t9w77j33gfvIfeI+c1+4r9w37jv3g/vJ/eJ+c3+4v9w/LpGL45PwSflkfDyfnE/Bp+RT8an5NHxaPh2fns/AZ+Qz8Zn5LHxWPhufnc/B5+Rz8bn5PHxePh+fny/AF+QL8YX5InxRvhhfnC/Bl+RL8aX5MnxZvhxfnq/AV+Qr8ZX5KnxVvhpfna/B1+QxHucJnuQpnuYZnuU5nucFXuQlXuYVXuU1XucN3uQt3uYd3uU93ucDPuQjHvCQR3yMr8XX5uvwdfl6fH2+Ad+Qb8Q35pvwTflmfHO+Bd+Sb8W35tvwbfl2fHu+A9+R78R35rvwXflufHe+B9+T78X35vvwffl+fH9+AD+QH8QP5ofwQ/lh/HB+BD+SH8WP5sfwY/lx/Hh+Aj+Rn8Qn8JP5KfxUfho/nZ/Bz+Rn8bP5Ofxcfh4/n1/AL+QX8Yv5JfxSfhm/nF/Br+RX8av5Nfxafh2/nt/Ab+Q38Zv5LfxWfhu/nd/B7+R38bv5Pfxefh+/nz/AH+QP8Yf5I/xR/hh/nD/Bn+RP8af5M/xZ/hx/nr/AX+Qv8Zf5K/xV/hp/nb/B3+Rv8bf5O/xd/h5/n3/AP+Qf8Y/5J/xT/hn/nH/Bv+Rf8a/5N/xb/h3/nv/Af+Q/8Z/5L/xX/hv/nf/B/+R/8b/5P/xf/h+fyMcJSYSkQjIhXkgupBBSCqmE1EIaIa2QTkgvZBAyCpmEzEIWIauQTcgu5BByCrmE3EIeIa+QT8gvFBAKCoWEwkIRoahQTCgulBBKCqWE0kIZoaxQTigvVBAqCpWEykIVoapQTagu1BBqCpiAC4RACpRAC4zACpzAC4IgCpIgC4qgCpqgC4ZgCpZgC47gCp7gC4EQCpEABCggISbUEmoLdYS6Qj2hvtBAaCg0EhoLTYSmQjOhudBCaCm0EloLbYS2QjuhvdBB6Ch0EjoLXYSuQjehu9BD6Cn0EnoLfYS+Qj+hvzBAGCgMEgYLQ4ShwjBhuDBCGCmMEkYLY4SxwjhhvDBBmChMEhKEycIUYaowTZguzBBmCrOE2cIcYa4wT5gvLBAWCouExcISYamwTFgurBBWCquE1cIaYa2wTlgvbBA2CpuEzcIWYauwTdgu7BB2CruE3cIeYa+wT9gvHBAOCoeEw8IR4ahwTDgunBBOCqeE08IZ4axwTjgvXBAuCpeEy8IV4apwTbgu3BBuCreE28Id4a5wT7gvPBAeCo+Ex8IT4anwTHguvBBeCq+E18Ib4a3wTngvfBA+Cp+Ez8IX4avwTfgu/BB+Cr+E38If4a/wT0gU4sQkYlIxmRgvJhdTiCnFVGJqMY2YVkwnphcziBnFTGJmMYuYVcwmZhdziDnFXGJuMY+YV8wn5hcLiAXFQmJhsYhYVCwmFhdLiCXFUmJpsYxYViwnlhcriBXFSmJlsYpYVawmVhdriDVFTMRFQiRFSqRFRmRFTuRFQRRFSZRFRVRFTdRFQzRFS7RFR3RFT/TFQAzFSAQiFJEYE2uJtcU6Yl2xnlhfbCA2FBuJjcUmYlOxmdhcbCG2FFuJrcU2Yluxndhe7CB2FDuJncUuYlexm9hd7CH2FHuJvcU+Yl+xn9hfHCAOFAeJg8Uh4lBxmDhcHCGOFEeJo8Ux4lhxnDhenCBOFCeJCeJkcYo4VZwmThdniDPFxMTEAf9PqHnifHGBuFBcJC4Wl4hLxWXicnGFuFJcJa4W14hrxXXienGDuFHcJG4Wt4hbxW3idnGHuFPcJe4W94h7xX3ifvGAeFA8JB4Wj4hHxWPicfGEeFI8JZ4Wz4hnxXPiefGCeFG8JF4Wr4hXxWvidfGGeFO8Jd4W74h3xXviffGB+FB8JD4Wn4hPxWfic/GF+FJ8Jb4W34hvxXfie/GD+FH8JH4Wv4hfxW/id/GH+FP8Jf4W/4h/xX9iohgnJZGSSsmkeCm5lEJKKaWSUktppLRSOim9lEHKKGWSMktZpKxSNim7lEPKKeWSckt5pLxSPim/VEAqKBWSCktFpKJSMam4VEIqKZWSSktlpLJSOam8VEGqKFWSKktVpKpSNam6VEOqKWESLhESKVESLTESK3ESLwmSKEmSLCmSKmmSLhmSKVmSLTmSK3mSLwVSKEUSkKCEpJhUS6ot1ZHqSvWk+lIDqaHUSGosNZGaSs2k5lILqaXUSmottZHaSu2k9lIHqaPUSeosdZG6St2k7lIPqafUS+ot9ZH6Sv2k/tIAaaA0SBosDZGGSsOk4dIIaaQ0ShotjZHGSuOk8dIEaaI0SUqQJktTpKnSNGm6NEOaKc2SZktzpLnSPGm+tEBaKC2SFktLpKXSMmm5tEJaKa2SVktrpLXSOmm9tEHaKG2SNktbpK3SNmm7tEPaKe2Sdkt7pL3SPmm/dEA6KB2SDktHpKPSMem4dEI6KZ2STktnpLPSOem8dEG6KF2SLktXpKvSNem6dEO6Kd2Sbkt3pLvSPem+9EB6KD2SHktPpKfSM+m59EJ6Kb2SXktvpLfSO+m99EH6KH2SPktfpK/SN+m79EP6Kf2Sfkt/pL/SPylRipOTyEnlZHK8nFxOIaeUU8mp5TRyWjmdnF7OIGeUM8mZ5SxyVjmbnF3OIeeUc8m55TxyXjmfnF8uIBeUC8mF5SJyUbmYXFwuIZeUS8ml5TJyWbmcXF6uIFeUK8mV5SpyVbmaXF2uIdeUMRmXCZmUKZmWGZmVOZmXBVmUJVmWFVmVNVmXDdmULdmWHdmVPdmXAzmUIxnIUEZyTK4l15bryHXlenJ9uYHcUG4kN5abyE3lZnJzuYXcUm4lt5bbyG3ldnJ7uYPcUe4kd5a7yF3lbnJ3uYfcU+4l95b7yH3lfnJ/eYA8UB4kD5aHyEPlYfJweYQ8Uh4lj5bHyGPlcfJ4eYI8UZ4kJ8iT5SnyVHmaPF2eIc+UZ8mz5TnyXHmePF9eIC+UF8mL5SXyUnmZvFxeIa+UV8mr5TXyWnmdvF7eIG+UN8mb5S3yVnmbvF3eIe+Ud8m75T3yXnmfvF8+IB+UD8mH5SPyUfmYfFw+IZ+UT8mn5TPyWfmcfF6+IF+UL8mX5SvyVfmafF2+Id+Ub8m35TvyXfmefF9+ID+UH8mP5SfyU/mZ/Fx+Ib+UX8mv5TfyW/md/F7+IH+UP8mf5S/yV/mb/F3+If+Uf8m/5T/yX/mfnCjHKUmUpEoyJV5JrqRQUiqplNRKGiWtkk5Jr2RQMiqZlMxKFiWrkk3JruRQciq5lNxKHiWvkk/JrxRQCiqFlMJKEaWoUkwprpRQSiqllNJKGaWsUk4pr1RQKiqVlMpKFaWqUk2prtRQaiqYgiuEQiqUQiuMwiqcwiuCIiqSIiuKoiqaoiuGYiqWYiuO4iqe4iuBEiqRAhSoICWm1FJqK3WUuko9pb7SQGmoNFIaK02UpkozpbnSQmmptFJaK21SxsXFKe2VDkpHpZPSWemidFW6Kd2VHkpPpZfSW+mj9FX6Kf2VAcpAZZAyWBmiDFWGKcOVEcpIZZQyWhmjjFXGKeOVCcpEZZKSoExWpihTlWnKdGWGMlOZpcxW5ihzlXnKfGWBslBZpCxWlihLlWXKcmWFslJZpaxW1ihrlXXKemWDslHZpGxWtihblW3KdmWHslPZpexW9ih7lX3KfuWAclA5pBxWjihHlWPKceWEclI5pZxWzihnlXPKeeWCclG5pFxWrihXlWvKdeWGclO5pdxW7ih3lXvKfeWB8lB5pDxWnihPlWfKc+WF8lJ5pbxW3ihvlXfKe+WD8lH5pHxWvihflW/Kd+WH8lP5pfxW/ih/lX9KohKnJlGTqsnUeDW5mkJNqaZSU6tp1LT/7TgD1UxqZjWLmlXNpmZXc6g51VxqbjWPmlfNp+ZXC6gF1UJqYbWIWlQtphZXS6gl1VJqabWMWlYtp5ZXK6gV1UpqZbWKWlWtplZXa6g1VUzFVUIlVUqlVUZlVU7lVUEVVUmVVUVVVU3VVUM1VUu1VUd1VU/11UAN1UgFKlSRGlNrqbXVOmpdtZ5aX22gNlQbqY3VJmpTtZnaXG2htlRbqa3VNmpbtZ3aXu2gdlQ7qZ3VLmpXtZvaXe2h9lR7qb3VPmpftZ/aXx2gDlQHqYPVIepQdZg6XB2hjlRHqaPVMepYdZw6Xp2gTlQnqQnqZHWKOlWdpk5XZ6gz1VnqbHWOOledp85XF6gL1UXqYnWJulRdpi5XV6gr1VXqanWNulZdp65XN6gb1U3qZnWLulXdpm5Xd6g71V3qbnWPulfdp+5XD6gH1UPqYfWIelQ9ph5XT6gn1VPqafWMelY9p55XL6gX1UvqZfWKelW9pl5Xb6g31VvqbfWOele9p95XH6gP1UfqY/WJ+lR9pj5XX6gv1Vfqa/WN+lZ9p75XP6gf1U/qZ/WL+lX9pn5Xf6g/1V/qb/WP+lf9pyaqcVoSLamWTIvXkmsptJRaKi21lkZLq6XT0msZtIxaJi2zlkXLqmXTsms5tJxaLi23lkfLq+XT8msFtIJaIa2wVkQrqhXTimsltJJaKa20VkYrq5XTymsVtIpaJa2yVkWrqlXTqms1tJoapuEaoZEapdEao7Eap/GaoImapMmaoqmapumaoZmapdmao7map/laoIVapAENakiLabW02lodra5WT6uvNdAaao20xloTranWTGuutdBaaq201lobra3WTmuvddA6ap20zloXravWTeuu9dB6ar203lofra/WT+uvDdAGaoO0wdoQbag2TBuujdBGaqO00doYbaw2ThuvTdAmapO0BG2yNkWbqk3TpmsztJnaLG22Nkebq83T5msLtIXaIm2xtkRbqi3TlmsrtJXaKm21tkZbq63T1msbtI3aJm2ztkXbqm3Ttms7tJ3aLm23tkfbq+3T9msHtIPaIe2wdkQ7qh3TjmsntJPaKe20dkY7q53TzmsXtIvaJe2ydkW7ql3Trms3tJvaLe22dke7q93T7msPtIfaI+2x9kR7qj3TnmsvtJfaK+219kZ7q73T3msftI/aJ+2z9kX7qn3Tvms/tJ/aL+239kf7q/3TErU4PYmeVE+mx+vJ9RR6Sj2VnlpPo6fV0+np9Qx6Rj2TnlnPomfVs+nZ9Rx6Tj2XnlvPo+fV8+n59QJ6Qb2QXlgvohfVi+nF9RJ6Sb2UXlovo5fVy+nl9Qp6Rb2SXlmvolfVq+nV9Rp6TR3TcZ3QSZ3SaZ3RWZ3TeV3QRV3SZV3RVV3Tdd3QTd3Sbd3RXd3TfT3QQz3SgQ51pMf0WnptvY5eV6+n19cb6A31RnpjvYneVG+mN9db6C31VnprvY3eVm+nt9c76B31TnpnvYveVe+md9d76D31XnpvvY/eV++n99cH6AP1QfpgfYg+VB+mD9dH6CP1UfpofYw+Vh+nj9cn6BP1SXqCPlmfok/Vp+nT9Rn6TH2WPlufo8/V5+nz9QX6Qn2Rvlhfoi/Vl+nL9RX6Sn2Vvlpfo6/V1+nr9Q36Rn2Tvlnfom/Vt+nb9R36Tn2Xvlvfo+/V9+n79QP6Qf2Qflg/oh/Vj+nH9RP6Sf2Uflo/o5/Vz+nn9Qv6Rf2Sflm/ol/Vr+nX9Rv6Tf2Wflu/o9/V7+n39Qf6Q/2R/lh/oj/Vn+nP9Rf6S/2V/lp/o7/V3+nv9Q/6R/2T/ln/on/Vv+nf9R/6T/2X/lv/o//V/+mJepyRxEhqJDPijeRGCiOlkcpIbaQx0hrpjPRGBiOjkcnIbGQxshrZjOxGDiOnkcvIbeQx8hr5jPxGAaOgUcgobBQxihrFjOJGCaOkUcoobZQxyhrljPJGBaOiUcmobFQxqhrVjOpGDaOmgRm4QRikQRm0wRiswRm8IRiiIRmyoRiqoRm6YRimYRm24Riu4Rm+ERihERnAgAYyYkYto7ZRx6hr1DPqGw2MhkYjo7HRxGhqNDOaGy2MlkYro7XRxmhrtDPaGx2MjkYno7PRxehqdDO6Gz2MnkYvo7fRx+hr9DP6GwOMgcYgY7AxxBhqDDOGGyOMkcYoY7QxxhhrjDPGGxOMicYkI8GYbEwxphrTjOnGDGOmMcuYbcwx5hrzjPnGAmOhschYbCwxlhrLjOXGCmOlscpYbawx1hrrjPXGBmOjscnYbGwxthrbjO3GDmOnscvYbewx9hr7jP3GAeOgccg4bBwxjhrHjOPGCeOkcco4bZwxzhrnjPPGBeOiccm4bFwxrhrXjOvGDeOmccu4bdwx7hr3jPvGA+Oh8ch4bDwxnhrPjOfGC+Ol8cp4bbwx3hrvjPfGB+Oj8cn4bHwxvhrfjO/GD+On8cv4bfwx/hr/jEQjzkxiJjWTmfFmcjOFmdJMZaY205hpzXRmejODmdHMZGY2s5hZzWxmdjOHmdPMZeY285h5zXxmfrOAWdAsZBY2i5hFzWJmcbOEWdIsZZY2y5hlzXJmebOCWdGsZFY2q5hVzWpmdbOGWdPETNwkTNKkTNpkTNbkTN4UTNGUTNlUTNXUTN00TNO0TNt0TNf0TN8MzNCMTGBCE5kxs5ZZ26xj1jXrmfXNBmZDs5HZ2GxiNjWbmc3NFmZLs5XZ2mxjtjXbme3NDmZHs5PZ2exidjW7md3NHmZPs5fZ2+xj9jX7mf3NAeZAc5A52BxiDjWHmcPNEeZIc5Q52hxjjjXHmePNCeZEc5KZYE42p5hTzWnmdHOGOdOcZc4255hzzXnmfHOBudBcZC42l5hLzWXmcnOFudJcZa4215hrzXXmenODudHcZG42t5hbzW3mdnOHudPcZe4295h7zX3mfvOAedA8ZB42j5hHzWPmcfOEedI8ZZ42z5hnzXPmefOCedG8ZF42r5hXzWvmdfOGedO8Zd4275h3zXvmffOB+dB8ZD42n5hPzWfmc/OF+dJ8Zb4235hvzXfme/OD+dH8ZH42v5hfzW/md/OH+dP8Zf42/5h/zX9mohlnJbGSWsmseCu5lcJKaaWyUltprLRWOiu9lcHKaGWyMltZrKxWNiu7lcPKaeWyclt5rLxWPiu/VcAqaBWyCltFrKJWMau4VcIqaZWySltlrLJWOau8VcGqaFWyKltVrKpWNau6VcOqaWEWbhEWaVEWbTEWa3EWbwmWaEmWbCmWammWbhmWaVmWbTmWa3mWbwVWaEUWsKCFrJhVy6pt1bHqWvWs+lYDq6HVyGpsNbGaWs2s5lYLq6XVympttbHaWu2s9lYHq6PVyepsdbG6Wt2s7lYPq6fVy+pt9bH6Wv2s/tYAa6A1yBpsDbGGWsOs4dYIa6Q1yhptjbHGWuOs8dYEa6I1yUqwJltTrKnWNGu6NcOaac2yZltzrLnWPGu+tcBaaC2yFltLrKXWMmu5tcJaaa2yVltrrLXWOmu9tcHaaG2yNltbrK3WNmu7tcPaae2ydlt7rL3WPmu/dcA6aB2yDltHrKPWMeu4dcI6aZ2yTltnrLPWOeu8dcG6aF2yLltXrKvWNeu6dcO6ad2yblt3rLvWPeu+9cB6aD2yHltPrKfWM+u59cJ6ab2yXltvrLfWO+u99cH6aH2yPltfrK/WN+u79cP6af2yflt/rL/WPyvRirOT2EntZHa8ndxOYae0U9mp7TR2Wjudnd7OYGe0M9mZ7Sx2Vjubnd3OYee0c9m57Tx2Xjufnd8uYBe0C9mF7SJ2UbuYXdwuYZe0S9ml7TJ2WbucXd6uYFe0K9mV7Sp2VbuaXd2uYde0MRu3CZu0KZu2GZu1OZu3BVu0JVu2FVu1NVu3Ddu0Ldu2Hdu1Pdu3Azu0IxvY0EZ2zK5l17br2HXtenZ9u4Hd0G5kN7ab2E3tZnZzu4Xd0m5lt7bb2G3tdnZ7u4Pd0e5kd7a72F3tbnZ3u4fd0+5l97b72H3tfnZ/e4A90B5kD7aH2EPtYfZwe4Q90h5lj7bH2GPtcfZ4e4I90Z5kJ9iT7Sn2VHuaPd2eYc+0Z9mz7Tn2XHuePd9eYC+0F9mL7SX2UnuZvdxeYa+0V9mr7TX2Wnudvd7eYG+0N9mb7S32Vnubvd3eYe+0d9m77T32Xnufvd8+YB+0D9mH7SP2UfuYfdw+YZ+0T9mn7TP2Wfucfd6+YF+0L9mX7Sv2Vfuafd2+Yd+0b9m37Tv2Xfuefd9+YD+0H9mP7Sf2U/uZ/dx+Yb+0X9mv7Tf2W/ud/d7+YH+0P9mf7S/2V/ub/d3+Yf+0f9m/7T/2X/ufnWjHOUmcpE4yJ95J7qRwUjqpnNROGietk85J72RwMjqZnMxOFierk83J7uRwcjq5nNxOHievk8/J7xRwCjqFnMJOEaeoU8wp7pRwSjqlnNJOGaesU84p71RwKjqVnMpOFaeqU82p7tRwajqYgzuEQzqUQzuMwzqcwzuCIzqSIzuKozqaozuGYzqWYzuO4zqe4zuBEzqRAxzoICfm1HJqO3Wcuk49p77TwGnoNHIaO02cpk4zp7nTwmnptHJaO22ctk47p73TwenodHI6O12crk43p7vTw+np9HJ6O32cvk4/p78zwBnoDHIGO0Ococ4wZ7gzwhnpjHJGO2Ocsc44Z7wzwZnoTHISnMnOFGeqM82Z7sxwZjqznNnOHGeuM8+Z7yxwFjqLnMXOEmeps8xZ7qxwVjqrnNXOGmets85Z72xwNjqbnM3OFmers83Z7uxwdjq7nN3OHmevs8/Z7xxwDjqHnMPOEeeoc8w57pxwTjqnnNPOGeesc84571xwLjqXnMvOFeeqc8257txwbjq3nNvOHeeuc8+57zxwHjqPnMfOE+ep88x57rxwXjqvnNfOG+et885573xwPjqfnM/OF+er88357vxwfjq/nN/OH+ev889JdOLcJG5SN5kb7yZ3U7gp3VRuajeNm9ZN56Z3M7gZ3UxuZjeLm9XN5mZ3c7g53VxubjePm9fN5+Z3C7gF3UJuYbeIW9Qt5hZ3S7gl3VJuabeMW9Yt55Z3K7gV3UpuZbeKW9Wt5lZ3a7g1XczFXcIlXcqlXcZlXc7lXcEVXcmVXcVVXc3VXcM1Xcu1Xcd1Xc/13cAN3cgFLnSRG3NrubXdOm5dt55b323gNnQbuY3dJm5Tt5nb3G3htnRbua3dNm5bt53b3u3gdnQ7uZ3dLm5Xt5vb3e3h9nR7ub3dPm5ft5/b3x3gDnQHuYPdIe5Qd5g73B3hjnRHuaPdMe5Yd5w73p3gTnQnuQnuZHeKO9Wd5k53Z7gz3VnubHeOO9ed5853F7gL3UXuYneJu9Rd5i53V7gr3VXuaneNu9Zd5653N7gb3U3uZneLu9Xd5m53d7g73V3ubnePu9fd5+53D7gH3UPuYfeIe9Q95h53T7gn3VPuafeMe9Y95553L7gX3UvuZfeKe9W95l53b7g33VvubfeOe9e95953H7gP3UfuY/eJ+9R95j53X7gv3Vfua/eN+9Z95753P7gf3U/uZ/eL+9X95n53f7g/3V/ub/eP+9f95ya6cV4SL6mXzIv3knspvJReKi+1l8ZL66Xz0nsZvIxeJi+zl8XL6mXzsns5vJxeLi+3l8fL6+Xz8ntxmeLiCnmFvSJeUa+YV9wr4ZX0SnmlvTJeWa+cV96r4FX0KnmVvSpeVa+aV92r4dX0MA/3CI/0KI/2GI/1OI/3BE/0JE/2FE/1NE/3DM/0LM/2HM/1PM/3Ai/0Ig940ENezKvl1fbqeHW9el59r4HX0GvkNfaaeE29Zl5zr4XX0mvltfbaeG29dl57r4PX0evkdfa6eF29bl53r4fX0+vl9fb6eH29fl5/b4A30BvkDfaGeEO9Yd5wb4Q30hvljfbGeGO9cd54b4I30ZvkJXiTvSneVG+aN92b4c30ZnmzvTneXG+eN99b4C30FnmLvSXeUm+Zt9xb4a30VnmrvTXeWm+dt97b4G30NnmbvS3eVm+bt93b4e30dnm7vT3eXm+ft9874B30DnmHvSPeUe+Yd9w74Z30TnmnvTPeWe+cd9674F30LnmXvSveVe+ad9274d30bnm3vTveXe+ed9974D30HnmPvSfeU++Z99x74b30XnmvvTfeW++d99774H30PnmfvS/eV++b99374f30fnm/vT/eX++fl+jF+Un8pH4yP95P7qfwU/qp/NR+Gj+tn85P72fwM/qZ/Mx+Fj+rn83P7ufwc/q5/Nx+Hj+vn8/P7xfwC/qF/MJ+Eb+oX8wv7pfwS/ql/NJ+Gb+sX84v71fwK/qV/Mp+Fb+qX82v7tfwa/qYj/uET/qUT/uMz/qcz/uCL/qSL/uKr/qar/uGb/qWb/uO7/qe7/uBH/qRD3zoIz/m1/Jr+3X8un49v77fwG/oN/Ib+038pn4zv7nfwm/pt/Jb+238tn47v73fwe/od/I7+138rn43v7vfw+/p9/J7+338vn4/v78/wB/oD/IH+0P8of4wf7g/wh/pj/JH+2P8sf44f7w/wZ/oT/IT/Mn+FH+qP82f7s/wZ/qz/Nn+HH+uP8+f7y/wF/qL/MX+En+pv8xf7q/wV/qr/NX+Gn+tv85f72/wN/qb/M3+Fn+rv83f7u/wd/q7/N3+Hn+vv8/f7x/wD/qH/MP+Ef+of8w/7p/wT/qn/NP+Gf+sf84/71/wL/qX/Mv+Ff+qf82/7t/wb/q3/Nv+Hf+uf8+/7z/wH/qP/Mf+E/+p/8x/7r/wX/qv/Nf+G/+t/85/73/wP/qf/M/+F/+r/83/7v/wf/q//N/+H/+v/89P9OOCJEHSIFkQHyQPUgQpg1RB6iBNkDZIF6QPMgQZg0xB5iBLkDXIFmQPcgQ5g1xB7iBPkDfIF+QPCgQFg0JB4aBIUDQoFhQPSgQlg1JB6aBMUDYoF5QPKgQVg0pB5aBKUDWoFlQPagQ1AyzAAyIgAyqgAyZgAy7gAyEQAymQAyVQAy3QAyMwAyuwAydwAy/wgyAIgygAAQxQEAtqBbWDOkHdoF5QP2gQNAwaBY2DJkHToFnQPGgRtAxaBa2DNkHboF3QPugQdAw6BZ2DLkHXoFvQPegR9Ax6Bb2DPkHfoF/QPxgQDAwGBYODIcHQYFgwPBgRjAxGBaODMcHYYFwwPpgQTAwmBQnB5GBKMDWYFkwPZgQzg1nB7GBOMDeYF8wPFgQLg0XB4mBJsDRYFiwPVgQrg1XB6mBNsDZYF6wPNgQbg03B5mBLsDXYFmwPdgQ7g13B7mBPsDfYF+wPDgQHg0PB4eBIcDQ4FhwPTgQng1PB6eBMcDY4F5wPLgQXg0vB5eBKcDW4FlwPbgQ3g1vB7eBOcDe4F9wPHgQPg0fB4+BJ8DR4FjwPXgQvg1fB6+BN8DZ4F7wPPgQfg0/B5+BL8DX4FnwPfgQ/g1/B7+BP8Df4FyQGcWGSMGmYLIwPk4cpwpRhqjB1mCZMG6YL04cZwoxhpjBzmCXMGmYLs4c5wpxhrjB3mCfMG+YL84cFwoJhobBwWCQsGhYLi4clwpJhqbB0WCYsG5YLy4cVwophpbByWCWsGlYLq4c1wpohFuIhEZIhFdIhE7IhF/KhEIqhFMqhEqqhFuqhEZqhFdqhE7qhF/phEIZhFIIQhiiMhbXC2mGdsG5YL6wfNggbho3CxmGTsGnYLGwetghbhq3C1mGbsG3YLmwfdgg7hp3CzmGXsGvYLewe9gh7hr3C3mGfsG/YL+wfDggHhoPCweGQcGg4LBwejghHhqPC0eGYcGw4LhwfTggnhpPChHByOCWcGk4Lp4czwpnhrHB2OCecG84L54cLwoXhonBxuCRcGi4Ll4crwpXhqnB1uCZcG64L14cbwo3hpnBzuCXcGm4Lt4c7wp3hrnB3uCfcG+4L94cHwoPhofBweCQ8Gh4Lj4cnwpPhqfB0eCY8G54Lz4cXwovhpfByeCW8Gl4Lr4c3wpvhrfB2eCe8G94L74cPwofho/Bx+CR8Gj4Ln4cvwpfhq/B1+CZ8G74L34cfwo/hp/Bz+CX8Gn4Lv4c/wp/hr/B3+Cf8G/4LE8O4KEmUNEoWxUfJoxRRyihVlDpKE6WN0kXpowxRxihTlDnKEmWNskXZoxxRzihXlDvKE+WN8kX5owJRwahQVDgqEhWNikXFoxJRyahUVDoqE5WNykXlowpRxahSVDmqElWNqkXVoxpRzQiL8IiIyIiK6IiJ2IiL+EiIxEiK5EiJ1EiL9MiIzMiK7MiJ3MiL/CiIwiiKQAQjFMWiWlHtqE5UN6oX1Y8aRA2jRlHjqEnUNGoWNY9aRC2jVlHrqE3UNmoXtY86RB2jTlHnqEvUNeoWdY96RD2jXlHvqE/UN+oX9Y8GRAOjQdHgaEg0NBoWDY9GRCOjUdHoaEw0NhoXjY8mRBOjSVFCNDmaEk2NpkXToxnRzGhWNDuaE82N5kXzowXRwmhRtDhaEi2NlkXLoxXRymhVtDpaE62N1kXrow3RxmhTtDnaEm2NtkXbox3RzmhXtDvaE+2N9kX7owPRwehQdDg6Eh2NjkXHoxPRyehUdDo6E52NzkXnowvRxehSdDm6El2NrkXXoxvRzehWdDu6E92N7kX3owfRw+hR9Dh6Ej2NnkXPoxfRy+hV9Dp6E72N3kXvow/Rx+hT9Dn6En2NvkXfox/Rz+hX9Dv6E/2N/kWJURxIApKCZCAeJAcpQEqQCqQGaUBakA6kBxlARpAJZAZZQFaQDWQHOUBOkAvkBnlAXpAP5AcFQEFQCBQGRUBRUAwUByVASVAKlAZlQFlQDpQHFUBFUAlUBlVAVVANVAc1QE2AARwQgAQUoAEDWMABHghABBKQgQJUoAEdGMAEFrCBA1zgAR8EIAQRAAACBGKgFqgN6oC6oB6oDxqAhqARaAyagKagGWgOWoCWoBVoDdqAtqAdaA86gI6gE+gMuoCuoBvoDnqAnqAX6A36gL6gH+gPBoCBYBAYDIaAoWAYGA5GgJFgFBgNxoCxYBwYDyaAiWASSACTwRQwFUwD08EMMBPMArPBHDAXzAPzwQKwECwCi8ESsBQsA8vBCrASrAKrwRqwFqwD68EGsBFsApvBFrAVbAPbwQ6wE+wCu8EesBfsA/vBAXAQHAKHwRFwFBwDx8EJcBKcAqfBGXAWnAPnwQVwEVwCl8EVcBVcA9fBDXAT3AK3wR1wF9wD98ED8BA8Ao/BE/AUPAPPwQvwErwCr8Eb8Ba8A+/BB/ARfAKfwRfwFXwD38EP8BP8Ar/BH/AX/AOJIA4mgUlhMhgPk8MUMCVMBVPDNDAtTAfTwwwwI8wEM8MsMCvMBrPDHDAnzAVzwzwwL8wH88MCsCAsBAvDIrAoLAaLwxKwJCwFS8MysCwsB8vDCrAirAQrwyqwKqwGq8MasCbEIA4JSEIK0pCBLOQgDwUoQgnKUIEq1KAODWhCC9rQgS70oA8DGMIIAgghgjFYC9aGdWBdWA/Whw1gQ9gINoZNYFPYDDaHLWBL2Aq2hm1gW9gOtocdYEfYCXaGXWBX2A12hz1gT9gL9oZ9YF/YD/aHA+BAOAgOhkPgUDgMDocj4Eg4Co6GY+BYOA6OhxPgRDgJJsDJcAqcCqfB6XAGnAlnwdlwDpwLi8L5cAFcCBfBxXAJXAqXweVwBVwJV8HVcA1cC9fB9XAD3Ag3wc1wC9wKt8HtcAfcCXfB3XAP3Av3wf3wADwID8HD8Ag8Co/B4/AEPAlPwdPwDDwLz8Hz8AK8CC/By/AKvAqvwevwBrwJb8Hb8A68C+/B+/ABfAgfwcfwCXwKn8Hn8AV8CV/B1/ANfAvfwffwA/wIP8HP8Av8Cr/B7/AH/Al/wd/wD/wL/8FEGIeSoKQoGYpHyVEKlBKlQqlRGpQWpUPpUQaUEWVCmVEWlBVlQ9lRDpQT5UK5UR6UF+VD+VEBVBAVQoVREVQUFUPFUQlUEpVCpVEZVBaVQ+VRBVQRVUKVURVUFVVD1VENVBNhCEcEIhGFaMQgFnGIRwISkYRkpCAVaUhHBjKRhWzkIBd5yEcBClGEAIIIoRiqhWqjOqguqofqowaoIWqEGqMmqClqhpqjFqglaoVaozaoLWqH2qMOqCPqhDqjLqgr6oa6ox6oJ+qFeqM+qC/qh/qjAWggGoQGoyFoKBqGhqMRaCQahUajMWgsGofGowloIpqEEtBkNAVNRdPQdDQDzUSz0Gw0B81F89B8tAAtRIvQYrQELUXL0HK0Aq1Eq9BqtAatRevQerQBbUSb0Ga0BW1F29B2tAPtRLvQbrQH7UX70H50AB1Eh9BhdAQdRcfQcXQCnUSn0Gl0Bp1F59B5dAFdRJfQZXQFXUXX0HV0A91Et9BtdAfdRffQffQAPUSP0GP0BD1Fz9Bz9AK9RK/Qa/QGvUXv0Hv0AX1En9Bn9AV9Rd/Qd/QD/US/0G/0B/1F/1AiiosliSWNJYvFx5LHUsRSxlLFUsfSxNLG0sXSxzLEMsYyxTLHssSyxrLFssdyxHLGcsVyx/LE8sbyxfLHCsQKxgrFCseKxIrGisWKx0rESsZKxUrHysTKxsrFyscqxCrGKsUqx6rEqsaqxarHasRqxrDY/7Fwj216cwsAhadT27Zt27ZjO9nx3nlq27Zt226ntm3bmPPhvL9jXfeqjdXB6mL1sPpYA6wh1ghrjDXBmmLNsOZYC6wl1gprjbXB2mLtsPZYB6wj1gnrjHXBumLdsO5YD6wnhmE4RmAkRmE0xmAsxmE8JmAiJmEypmAqpmE6ZmAmZmEAszEHczEP87EACzGIISzCYlgvrDfWB+uL9cP6YwOwgdggbDA2BBuKDcOGYyOwkdgobDQ2BhuLjcPGYxOwidgkbDI2BZuKTcOmYzOwmdgsbDY2B5uLzcPmYwuwhdgibDG2BFuKLcOWYyuwldgqbDW2BluLrcPWYxuwjdgmbDO2BduKbcO2YzuwndgubDe2B9uL7cP2Ywewg9gh7DB2BDuKHcOOYyewk9gpLAE7jZ3BzmLnsPPYBewidgm7jF3BrmLXsOvYDewmdgu7jd3B7mL3sPvYA+wh9gh7jD3BnmLPsOfYC+wl9gp7jb3B3mLvsPfYB+wj9gn7jH3BvmLfsO/YD+wn9gv7jf3B/mL/sEQsDk+Cx+NJ8WR4cjwFnhJPhafG0+Bp8XR4ejwDnhHPhGfGs+BZ8Wx4djwHnhPPhefG8+B58Xx4frwAXhAvhBfGi+BF8WJ4cbwEXhIvhZfGy+Bl8XJ4ebwCXhGvhFfGq+BV8Wp4dbwGXhOvhdfG6+B18Xp4fbwB3hBvhDfGm+BN8WZ4c7wF3hJvhbfG2+Bt8XZ4e7wD3hHvhHfGu+Bd8W54d7wH3hPHcBwncBKncBpncBbncB4XcBGXcBlXcBXXcB03cBO3cIDbuIO7uIf7eICHOMQRHuExvBfeG++D98X74f3xAfhAfBA+GB+CD8WH4cPxEfhIfBQ+Gh+Dj8XH4ePxCfhEfBI+GZ+CT8Wn4dPxGfhMfBY+G5+Dz8Xn4fPxBfhCfBG+GF+CL8WX4cvxFfhKfBW+Gl+Dr8XX4evxDfhGfBO+Gd+Cb8W34dvxHfhOfBe+G9+D78X34fvxA/hB/BB+GD+CH8WP4cfxE/hJ/BSegJ/Gz+Bn8XP4efwCfhG/hF/Gr+BX8Wv4dfwGfhO/hd/G7+B38Xv4ffwB/hB/hD/Gn+BP8Wf4c/wF/hJ/hb/G3+Bv8Xf4e/wD/hH/hH/Gv+Bf8W/4d/wH/hP/hf/G/+B/8X94Ih5HJCHiiaREMiI5kYJISaQiUhNpiLREOiI9kYHISGQiMhNZiKxENiI7kYPISeQichN5iLxEPiI/UYAoSBQiChNFiKJEMaI4UYIoSZQiShNliLJEOaI8UYGoSFQiKhNViKpENaI6UYOoSdQiahN1iLpEPaI+0YBoSDQiGhNNiKZEM6I50YJoSbQiWhNtiLZEO6I90YHoSHQiOhNdiK5EN6I70YPoSWAEThAESVAETTAES3AETwiESEiETCiESmiEThiESVgEIGzCIVzCI3wiIEICEoiIiBjRi+hN9CH6Ev2I/sQAYiAxiBhMDCGGEsOI4cQIYiQxihhNjCHGEuOI8cQEYiIxiZhMTCGmEtOI6cQMYiYxi5hNzCHmEvOI+cQCYiGxiFhMLCGWEsuI5cQKYiWxilhNrCHWEuuI9cQGYiOxidhMbCG2EtuI7cQOYiexi9hN7CH2EvuI/cQB4iBxiDhMHCGOEseI48QJ4iRxikggThNniLPEOeI8cYG4SFwiLhNXiKvENeI6cYO4SdwibhN3iLvEPeI+8YB4SDwiHhNPiKfEM+I58YJ4SbwiXhNviLfEO+I98YH4SHwiPhNfiK/EN+I78YP4SfwifhN/iL/EPyKRiCOTkPFkUjIZmZxMQaYkU5GpyTRkWjIdmZ7MQGYkM5GZySxkVjIbmZ3MQeYkc5G5yTxkXjIfmZ8sQBYkC5GFySJkUbIYWZwsQZYkS5GlyTJkWbIcWZ6sQFYkK5GVySpkVbIaWZ2sQdYka5G1yTpkXbIeWZ9sQDYkG5GNySZkU7IZ2ZxsQbYkW5GtyTZkW7Id2Z7sQHYkO5GdyS5kV7Ib2Z3sQfYkMRInCZIkKZImGZIlOZInBVIkJVImFVIlNVInDdIkLRKQNumQLumRPhmQIQlJREZkjOxF9ib7kH3JfmR/cgA5kBxEDiaHkEPJYeRwcgQ5khxFjibHkGPJceR4cgI5kZxETiankFPJaeR0cgY5k5xFzibnkHPJeeR8cgG5kFxELiaXkEvJZeRycgW5klxFribXkGvJdeR6cgO5kdxEbia3kFvJbeR2cge5k9xF7ib3kHvJfeR+8gB5kDxEHiaPkEfJY+Rx8gR5kjxFJpCnyTPkWfIceZ68QF4kL5GXySvkVfIaeZ28Qd4kb5G3yTvkXfIeeZ98QD4kH5GPySfkU/IZ+Zx8Qb4kX5GvyTfkW/Id+Z78QH4kP5GfyS/kV/Ib+Z38Qf4kf5G/yT/kX/IfmUjGJYuLi6eSUsmo5FQKKiWVikpNpaHSUumo9FQGKiOVicpMZaGyUtmo7FQOKieVi8pN5aHyUvmo/FQBqiBViCpMFaGKUsWo4lQJqiRViipNlaHKUuWo8lQFqiJViapMVaGqUtWo6lQNqiZVi6pN1aHqUvWo+lQDqiHViGpMNaGaUs2o5lQLqiXVimpNtaHaUu2o9lQHqiPViepMdaG6Ut2o7lQPqieFUThFUCRFUTTFUCzFUTwlUCIlUTKlUCqlUTplUCZlUYCyKYdyKY/yqYAKKUghKqJiVC+qN9WH6kv1o/pTA6iB1CBqMDWEGkoNo4ZTI6iR1ChqNDWGGkuNo8ZTE6iJ1CRqMjWFmkpNo6ZTM6iZ1CxqNjWHmkvNo+ZTC6iF1CJqMbWEWkoto5ZTK6iV1CpqNbWGWkuto9ZTG6iN1CZqM7WF2kpto7ZTO6id1C5qN7WH2kvto/ZTB6iD1CHqMHWEOkodo45TJ6iT1CkqgTpNnaHOUueo89QF6iJ1ibpMXaGuUteo69QN6iZ1i7pN3aHuUveo+9QD6iH1iHpMPaGeUs+o59QL6iX1inpNvaHeUu+o99QH6iP1ifpMfaG+Ut+o79QP6if1i/pN/aH+Uv+oRCqOTkLH00npZHRyOgWdkk5Fp6bT0GnpdHR6OgOdkc5EZ6az0FnpbHR2Ogedk85F56bz0HnpfHR+ugBdkC5EF6aL0EXpYnRxugRdki5Fl6bL0GXpcnR5ugJdka5EV6ar0FXpanR1ugZdk65F16br0HXpenR9ugHdkG5EN6ab0E3pZnRzugXdkm5Ft6bb0G3pdnR7ugPdke5Ed6a70F3pbnR3ugfdk8ZonCZokqZommZoluZonhZokZZomVZoldZonTZok7ZoQNu0Q7u0R/t0QIc0pBEd0TG6F92b7kP3pfvR/ekBdGKSuLjB9BB6KD2MHk6PoEfSo+jR9Bh6LD2OHk9PoCfSk+jJ9BR6Kj2Nnk7PoGfSs+jZ9Bx6Lj2Pnk8voBfSi+jF9BJ6Kb2MXk6voFfSq+jV9Bp6Lb2OXk9voDfSm+jN9BZ6K72N3k7voHfSu+jd9B56L72P3k8foA/Sh+jD9BH6KH2MPk6foE/Sp+gE+jR9hj5Ln6PP0xfoi/Ql+jJ9hb5KX6Ov0zfom/Qt+jZ9h75L36Pv0w/oh/Qj+jH9hH5KP6Of0y/ol/Qr+jX9hn5Lv6Pf0x/oj/Qn+jP9hf5Kf6O/0z/on/Qv+jf9h/5L/6MT6TgmCRPPJGWSMcmZFExKJhWTmknDpGXSMemZDExGJhOTmcnCZGWyMdmZHExOJheTm8nD5GXyMfmZAkxBphBTmCnCFGWKMcWZEkxJphRTminDlGXKMeWZCkxFphJTmanCVGWqMdWZGkxNphZTm6nD1GXqMfWZBkxDphHTmGnCNGWaMc2ZFkxLphXTmmnDtGXaMe2ZDkxHphPTmenCdGW6Md2ZHkxPBmNwhmBIhmJohmFYhmN4RmBERmJkRmFURmN0xmBMxmIAYzMO4zIe4zMBEzKQQUzExJheTG+mD9OX6cf0ZwYwA5lBzGBmCDOUGcYMZ0YwI5lRzGhmDDOWGceMZyYwE5lJzGRmCjOVmcZMZ2YwM5lZzGxmDjOXmcfMZxYwC5lFzGJmCbOUWcYsZ1YwK5lVzGpmDbOWWcesZzYwG5lNzGZmC7OV2cZsZ3YwO5ldzG5mD7OX2cfsZw4wB5lDzGHmCHOUOcYcZ04wJ5lTTAJzmjnDnGXOMeeZC8xF5hJzmbnCXGWuMdeZG8xN5hZzm7nD3GXuMfeZB8xD5hHzmHnCPGWeMc+ZF8xL5hXzmnnDvGXeMe+ZD8xH5hPzmfnCfGW+Md+ZH8xP5hfzm/nD/GX+MYlMHJuEjWeTssnY5GwKNiWbik3NpmHTsunY9GwGNiObic3MZmGzstnY7GwONiebi83N5mHzsvnY/GwBtiBbiC3MFmGLssXY4mwJtiRbii3NlmHLsuXY8mwFtiJbia3MVmGr9gX/BwVsLbY2W4ety9Zj67MN2IZsI7Yx24RtyjZjm7Mt2JZsK7Y124Zty7Zj27Md2I5sJ7Yz24XtynZju7M92J4sxuIswZIsxdIsw7Isx/KswIqsxMqswqqsxuqswZqsxQLWZh3WZT3WZwM2ZCGL2IiNsb3Y3mwfti/bj+3PDmAHsoPYwewQdig7jB3OjmBHsqPY0ewYdiw7jh3PTmAnspPYyewUdio7jZ3OzmBnsrPY2ewcdi47j53PLmAXsovYxewSdim7jF3OrmBXsqvY1ewadi27jl3PbmA3spvYzewWdiu7jd3O7mB3srvY3ewedi+7j93PHmAPsofYw+wR9ih7jD3OnmBPsqfYBPY0e4Y9y55jz7MX2IvsJfYye4W9yl5jr7M32JvsLfY2e4e9y95j77MP2IfsI/Yx+4R9yj5jn7Mv2JfsK/Y1+4Z9y75j37Mf2I/sJ/Yz+4X9yn5jv7M/2J/sL/Y3+4f9y/5jE9k4LgkXzyXlknHJuRRcSi4Vl5pLw6Xl0nHpuQxcRi4Tl5nLwmXlsnHZuRxcTi4Xl5vLw+Xl8nH5uQJcQa4QV5grwhXlinHFuRJcSa4UV5orw5XlynHluQpcRa4SV5mrwlXlqnHVuRpcTa4WV5urw9Xl6nH1uQZcQ64R15hrwjXlmnHNuRZcS64V15prw7Xl2nHtuQ5cR64T15nrwnXlunHduR5cTw7jcI7gSI7iaI7hWI7jeE7gRE7iZE7hVE7jdM7gTM7iAGdzDudyHudzARdykENcxMW4Xlxvrg/Xl+vH9ecGcAO5Qdxgbgg3lBvGDedGcCO5Udxobgw3lhvHjecmcBO5Sdxkbgo3lZvGTedmcDO5Wdxsbg43l5vHzecWcAu5Rdxibgm3lFvGLedWcCu5Vdxqbg23llvHrec2cBu5Tdxmbgu3ldvGbed2cDu5Xdxubg+3l9vH7ecOcAe5Q9xh7gh3lDvGHedOcCe5U1wCd5o7w53lznHnuQvcRe4Sd5m7wl3lrnHXuRvcTe4Wd5u7w93l7nH3uQfcQ+4R95h7wj3lnnHPuRfcS+4V95p7w73l3nHvuQ/cR+4T95n7wn3lvnHfuR/cT+4X95v7w/3l/nGJXByfhI/nk/LJ+OR8Cj4ln4pPzafh0/Lp+PR8Bj4jn4nPzGfhs/LZ+Ox8Dj4nn4vPzefh8/L5+Px8Ab4gX4gvzBfhi/LF+OJ8Cb4kX4ovzZfhy/Ll+PJ8Bb4iX4mvzFfhq/LV+Op8Db4mX4uvzdfh6/L1+Pp8A74h34hvzDfhm/LN+OZ8C74l34pvzbfh2/Lt+PZ8B74j34nvzHfhu/Ld+O58D74nj/E4T/AkT/E0z/Asz/E8L/AiL/Eyr/Aqr/E6b/Amb/GAt3mHd3mP9/mAD3nIIz7iY3wvvjffh+/L9+P78wP4gfwgfjA/hB/KD+OH8yP4kfwofjQ/hh/Lj+PH8xP4ifwkfjI/hZ/KT+On8zP4mfwsfjY/h5/Lz+Pn8wv4hfwifjG/hF/KL+OX8yv4lfyq+P/wFL+e38Bv5Dfxm/kt/FZ+G7+d38Hv5Hfxu/k9/F5+H7+fP8Af5A/xh/kj/FH+GH+cP8Gf5E/xCfxp/gx/lj/Hn+cv8Bf5S/xl/gp/lb/GX+dv8Df5W/xt/g5/l7/H3+cf8A/5R/xj/gn/lH/GP+df8C/5V/xr/g3/ln/Hv+c/8B/5T/xn/gv/lf/Gf+d/8D/5X/xv/g//l//HJ/JxQhIhXkgqJBOSCymElEIqIbWQRkgrpBPSCxmEjEImIbOQRcgqZBOyCzmEnEIuIbeQR8gr5BPyCwWEgkIhobBQRCgqFBOKCyWEkkIpobRQRigrlBPKCxWEikIlobJQRagqVBOqCzWEmkItobZQR6gr1BPqCw2EhkIjobHQRGgqNBOaCy2ElkIrobXQRmgrtBPaCx2EjkInobPQRegqdBO6Cz2EngIm4AIhkAIl0AIjsAIn8IIgiIIkyIIiqIIm6IIhmIIlAMEWHMEVPMEXAiEUoICESIgJvYTeQh+hr9BP6C8MEAYKg4TBwhBhqDBMGC6MEEYKo4TRwhhhrDBOGC9MECYKk4TJwhRhqjBNmC7MEGYKs4TZwhxhrjBPmC8sEBYKi4TFwhJhqbBMWC6sEFYKq4TVwhphrbBOWC9sEDYKm4TNwhZhq7BN2C7sEHYKu4Tdwh5hr7BP2C8cEA4Kh4TDwhHhqHBMOC6cEE4Kp4QE4bRwRjgrnBPOCxeEi8Il4bJwRbgqXBOuCzeEm8It4bZwR7gr3BPuCw+Eh8Ij4bHwRHgqPBOeCy+El8Ir4bXwRngrvBPeCx+Ej8In4bPwRfgqfBO+Cz+En8Iv4bfwR/gr/BMShTgxiRgvJhWTicnFFGJKMZWYWkwjphXTienFDGJGMZOYWcwiZhWzidnFHGJOMZeYW8wj5hXzifnFAmJBsZBYWCwiFhWLicXFEmJJsZRYWiwjlhXLieXFCmJFsZJYWawiVhWridXFGmJNsZZYW6wj1hXrifXFBmJDsZHYWGwiNhWbic3FFmJLsZXYWmwjthXbie3FDmJHsZPYWewidhW7id3FHmJPERNxkRBJkRJpkRFZkRN5URBFURJlURFVURN10RBN0RKBaIuO6Iqe6IuBGIpQRGIkxsReYm+xj9hX7Cf2FweIA8VB4mBxiDhUHCYOF0eII8VR4mhxjDhWHCeOFyeIE8VJ4mRxijhVnCZOF2eIM8VZ4mxxjjhXnCfOFxeIC8VF4mJxibhUXCYuF1eIK8VV4mpxjbhWXCeuFzeIG8VN4mZxi7hV3CZuF3eIO8Vd4m5xj7hX3CfuFw+IB8VD4mHxiHhUPCYeF0+IJ8VTYoJ4WjwjnhXPiefFC+JF8ZJ4WbwiXhWvidfFG+JN8ZZ4W7wj3hXviffFB+JD8ZH4WHwiPhWfic/FF+JL8ZX4WnwjvhXfie/FD+JH8ZP4WfwifhW/id/FH+JP8Zf4W/wj/hX/iYlinJREipeSSsmk5FIKKaWUSkotpZHSSumk9FIGKaOUScosZZGyStmk7FIOKaeUS8ot5ZHySvmk/FIBqaBUSCosFZGKSsWk4lIJqaRUSiotlZHKSuWk8lIFqaJUSaosVZGqStWk6lINqaZUS6ot1ZHqSvWk+lIDqaHUSGosNZGaSs2k5lILqaXUSmottZHaSu2k9lIHqaPUSeosdZG6St2k7lIPqaeESbhESKRESbTESKzESbwkSKIkSbKkSKqkSbpkSKZkSUCyJUdyJU/ypUAKJSghKZJiUi+pt9RH6iv1k/pLA6SB0iBpsDREGioNk4ZLI6SR0ihptDRGGiuNk8ZLE6SJ0iRpsjRFmipNk6ZLM6SZ0ixptjRHmivNk+ZLC6SF0iJpsbREWiotk5ZLK6SV0ipptbRGWiutk9ZLG6SN0iZps7RF2iptk7ZLO6Sd0i5pt7RH2ivtk/ZLB6SD0iHpsHREOiodk45LJ6ST0ikpQTotnZHOSuek89IF6aJ0SbosXZGuStek69IN6aZ0S7ot3ZHuSvek+9ID6aH0SHosPZGeSs+k59IL6aX0SnotvZHeSu+k99IH6aP0SfosfZG+St+k79IP6af0S/ot/ZH+Sv+kRClOTiLHy0nlZHJyOYWcUk4lp5bTyGnldHJ6OYOcUc4kZ5azyFnlbHJ2OYecU84l55bzyHnlfHJ+uYBcUC4kF5aLyEXlYnJxuYRcUi4ll5bLyGXlcnJ5uYJcUa4kV5aryFXlanJ1uYZcU64l15bryHXlenJ9uYHcUG4kN5abyE3lZnJzuYXcUm4lt5bbyG3ldnJ7uYPcUe4kd5a7yF3lbnJ3uYfcU8ZkXCZkUqZkWmZkVuZkXhZkUZZkWVZkVdZkXTZkU7ZkINuyI7uyJ/tyIIcylJEcyTG5l9xb7iP3lfvJ/eUB8kB5kDxYHiIPlYfJw+UR8kh5lDxaHiOPlcfJ4+UJ8kR5kjxZniJPlafJ0+UZ8kx5ljxbniPPlefJ8+UF8kJ5kbxYXiIvlZfJy+UV8kp5lbxaXiOvldfJ6+UN8kZ5k7xZ3iJvlbfJ2+Ud8k55l7xb3iPvlffJ++UD8kH5kHxYPiIflY/Jx+UT8kn5lJwgn5bPyGflc/J5+YJ8Ub4kX5avyFfla/J1+YZ8U74l35bvyHfle/J9+YH8UH4kP5afyE/lZ/Jz+YX8Un4lv5bfyG/ld/J7+YP8Uf4kf5a/yF/lb/J3+Yf8U/4l/5b/yH/lf3KiHKckUeKVpEoyJbmSQkmppFJSK2mUtEo6Jb2SQcmoZFIyK1mUrEo2JbuSQ8mp5FJyK3mUvEo+Jb9SQCmoFFIKK0WUokoxpbhSQimplFJKK2WUsko5pbxSQamoVFIqK1WUqko1pbpSQ6mp1FJqK3WUuko9pb7SQGmoNFIaK02UpkozpbnSQmmptFJaK22Utko7pb3SQemodFI6K12Urko3pbvSQ+mpYAquEAqpUAqtMAqrcAqvCIqoSIqsKIqqaIquGIqpWApQbMVRXMVTfCVQQgUqSImUmNJL6a30Ufoq/ZT+ygBloDJIGawMUYYqw5ThyghlpDJKGa2MUcYq45TxygRlojJJmaxMUaYq05TpygxlpjJLma3MUeYq85T5ygJlobJIWawsUZYqy5TlygplpbJKWa2sUdYq65T1ygZlo7JJ2axsUbYq25Ttyg5lp7JL2a3sUfYq+5T9ygHloHJIOawcUY4qx5TjygnlpHJKSVBOK2eUs8o55bxyQbmoXFIuK1eUq8o15bpyQ7mp3FJuK3eUu8o95b7yQHmoPFIeK0+Up8oz5bnyQnmpvFJeK2+Ut8o75b3yQfmofFI+K1+Ur8o35bvyQ/mp/FJ+K3+Uv8o/JVGJU5Oo8WpSNZmaXE2hplRTqanVNGpaNZ2aXs2gZlQzqZnVLGpWNZuaXc2h5lRzqbnVPGpeNZ+aXy2gFlQLqYXVImpRtZhaXC2hllRLqaXVMmpZtZxaXq2gVlQrqZXVKmpVtZpaXa2h1lRrqbXVOmpdtZ5aX22gNlQbqY3VJmpTtZnaXG2htlRbqa3VNmpbtZ3aXu2gdlQ7qZ3VLmpXtZvaXe2h9lQxFVcJlVQplVYZlVU5lVcFVVQlVVYVVVU1VVcN1VQtFai26qiu6qm+GqihClWkRmpM7aX2VvuofdV+an91gDpQHaQOVoeoQ9Vh6nB1hDpSHaWOVseoY9Vx6nh1gjpRnaROVqeoU9Vp6nR1hjpTnaXOVueoc9V56nx1gbpQXaQuVpeoS9Vl6nJ1hbpSXaWuVteoa9V16np1g7pR3aRuVreoW9Vt6nZ1h7pT3aXuVveoe9V96n71gHpQPaQeVo+oR9Vj6nH1hHpSPaUmqKfVM+pZ9Zx6Xr2gXlQvqZfVK+pV9Zp6Xb2h3lRvqbfVO+pd9Z56X32gPlQfqY/VJ+pT9Zn6XH2hvlRfqa/VN+pb9Z36Xv2gflQ/qZ/VL+pX9Zv6Xf2h/lR/qb/VP+pf9Z+aqMZpSbR4LamWTEuupdBSaqm01FoaLa2WTkuvZdAyapm0zFoWLauWTcuu5dByarm03FoeLa+WT8uvFdAKaoW0wloRrahWTCuuldBKaqW00loZraxWTiuvVdAqapW0yloVrapWTauu1dBqarW02lodra5WT6uvNdAaao20xloTranWTGuutdBaaq201lobra3WTmuvddA6ap20zloXravWTeuu9dB6apiGa4RGapRGa4zGapzGa4ImapIma4qmapqma4ZmapYGNFtzNFfzNF8LtFCDGtIiLab10nprfbS+Wj+tvzZAG6gN0gZrQ7Sh2jBtuDZCG6mN0kZrY7Sx2jhtvDZBm6hN0ib/dySM02ZoM7VZ2mxtjjZXm6fN1xZoC7VF2mJtibZUW6Yt11ZoK7VV2mptjbZWW6et1zZoG7VN2mZti7ZV26Zt13ZoO7Vd2m5tj7ZX26ft1w5oB7VD2mHtiHZUO6Yd105oJ7VTWoJ2WjujndXOaee1C9pF7ZJ2WbuiXdWuade1G9pN7ZZ2W7uj3dXuafe1B9pD7ZH2WHuiPdWeac+1F9pL7ZX2WnujvdXeae+1D9pH7ZP2WfuifdW+ad+1H9pP7Zf2W/uj/dX+aYlanJ5Ej9eT6sn05HoKPaWeSk+tp9HT6un09HoGPaOeSc+sZ9Gz6tn07HoOPaeeS8+t59Hz6vn0/HoBvaBeSC+sF9GL6sX04noJvaReSi+tl9HL6uX08noFvaJeSa+sV9Gr6tX06noNvaZeS6+t19Hr6vX0+noDvaHeSG+sN9Gb6s305noLvaXeSm+tt9Hb6u309noHvaPeSe+sd9G76t307noPvaeO6bhO6KRO6bTO6KzO6bwu6KIu6bKu6Kqu6bpu6KZu6UC3dUd3dU/39UAPdagjPdJjei+9t95H76v30/vrA/SBCYP0wfoQfag+TB+uj9BH6qP00foYfaw+Th+vT9An6pP0yfoUfao+TZ+uz9Bn6rP02focfa4+T5+vL9AX6ov0xfoSfam+TF+ur9BX6qv01foafa2+Tl+vb9A36pv0zfoWfau+Td+u79B36rv03foefa++T9+vH9AP6of0w/oR/ah+TD+un9BP6qf0BP20fkY/q5/Tz+sX9Iv6Jf2yfkW/ql/Tr+s39Jv6Lf22fke/q9/T7+sP9If6I/2x/kR/qj/Tn+sv9Jf6K/21/kZ/q7/T3+sf9I/6J/2z/kX/qn/Tv+s/9J/6L/23/kf/q//TE/U4I4kRbyQ1khnJjRRGSiOVkdpIY6Q10hnpjQxGRiOTkdnIYmQ1shnZjRxGTiOXkdvIY+Q18hn5jQJGQaOQUdgoYhQ1ihnFjRJGSaOUUdooY5Q1yhnljQpGRaOSUdmoYlQ1qhnVjRpGTaOWUduoY9Q16hn1jQZGQ6OR0dhoYjQ1mhnNjRZGS6OV0dpoY7Q12hntjQ5GR6OT0dnoYnQ1uhndjR5GTwMzcIMwSIMyaIMxWIMzeEMwREMyZEMxVEMzdMMwTMMygGEbjuEanuEbgREa0EBGZMSMXkZvo4/R1+hn9DcGGAONQcZgY4gx1BhmDDdGGCONUcZoY4wx1hhnjDcmGBONScZkY4ox1ZhmTDdmGDONWcZsY44x15hnzDcWGAuNRcZiY4mx1FhmLDdWGCuNVcZqY42x1lhnrDc2GBuNTcZmY4ux1dhmbDd2GDuNXcZuY4+x19hn7DcOGAeNQ8Zh44hx1DhmHDdOGCeNU0aCcdo4Y5w1zhnnjQvGReOScdm4Ylw1rhnXjRvGTeOWcdu4Y9w17hn3jQfGQ+OR8dh4Yjw1nhnPjRfGS+OV8dp4Y7w13hnvjQ/GR+OT8dn4Ynw1vhnfjR/GT+OX8dv4Y/w1/hmJRpyZxIw3k5rJzORmCjOlmcpMbaYx05rpzPRmBjOjmcnMbGYxs5rZzOxmDjOnmcvMbeYx85r5zPxmAbOgWcgsbBYxi5rFzOJmCbOkWcosbZYxy5rlzPJmBbOiWcmsbFYxq5rVzOpmDbOmWcusbdYx65r1zPpmA7Oh2chsbDYxm5rNzOZmC7Ol2cpsbbYx25rtzPZmB7Oj2cnsbHYxu5rdzO5mD7OniZm4SZikSZm0yZisyZm8KZiiKZmyqZiqqZm6aZimaZnAtE3HdE3P9M3ADE1oIjMyY2Yvs7fZx+xr9jP7mwPMgeYgc7A5xBxqDjOHmyPMkeYoc7Q5xhxrjjPHmxPMieYkc7I5xZxqTjOnmzPMmeYsc7Y5x5xrzjPnmwvMheYic7G5xFxqLjOXmyvMleYqc7W5xlxrrjPXmxvMjeYmc7O5xdxqbjO3mzvMneYuc7e5x9xr7jP3mwfMg+Yh87B5xDxqHjOPmyfMk+YpM8E8bZ4xz5rnzPPmBfOiecm8bF4xr5rXzOvmDfOmecu8bd4x75r3zPvmA/Oh+ch8bD4xn5rPzOfmC/Ol+cp8bb4x35rvzPfmB/Oj+cn8bH4xv5rfzO/mD/On+cv8bf4x/5r/zEQzzkpixVtJrWRWciuFldJKZaW20lhprXRWeiuDldHKZGW2slhZrWxWdiuHldPKZeW28lh5rXxWfquAVdAqZBW2ilhFrWJWcauEVdIqZZW2ylhlrXJWeauCVdGqZFW2qlhVrWpWdauGVdOqZXWx6lh1rXpWfauB1dBqZDW2mlhNrWZWc6uF1dJqZbW22lhtrXZWe6uD1dHqZHW2ulhdrW5Wd6uH1dPCLNwiLNKiLNpiLNbiLN4SLNGSLNlSLNXSLN0yLNOyLGDZlmO5lmf5VmCFFrSQFVkxq5fV2+pj9bX6Wf2tAdZAa5A12BpiDbWGWcOtEdZIa5Q12hpjjbXGWeOtCdZEa5I12ZpiTbWmDZpuzbBmWrOs2dYca641z5pvLbAWWousxdYSa6m1zFpurbBWWqus1dYaa621zlpvbbA2WpuszdYWa6u1zdpu7bB2Wrus3dYea6+1z9pvHbAOWoesw9YR66h1zDpunbBOWqesBOu0dcY6a52zzlsXrIvWJeuydcW6al2zrls3rJvWLeu2dce6a92z7lsPrIfWI+ux9cR6aj2znlsvrJfWK+u19cZ6a72z3lsfrI/WJ+uz9cX6an2zvls/rJ/WL+u39cf6a/2zEq04kATEg6QgGUgOUoCUIBVIDdKAtCAdSA8ygIwgE8gMsoCsIBvIDnKAnCAXyA3ygLwgH8gPCoCCoBAoDIqAoqAYKA5KgJKgFCgNyoCyoBwoDyqAiqASqAyqgKqgGqgOaoCaoBaoDeqAuqAeqA8agIagEWgMmoCmoBloDlqAlqAVaA3agLagHWgPOoCOoBPoDLqArqAb6A56gJ4AAzggAAkoQAMGsIADPBCACCQgAwWoQAM6MIAJLACADRzgAg/4IAAhgACBCMRAL9Ab9AF9QT/QHwwAA8EgMBgMAUPBMDAcjAAjwSgwGowBY8E4MB5MABPBJDAZTAFTwTQwHcwAM8EsMBvMAXPBPDAfLAALwSKwGCwBS8EysBysACvBKrAarAFrwTqwHmwAG8EmsBlsAVvBNrAd7AA7wS6wG+wBe8E+sB8cAAfBIXAYHAFHwTFwHJwAJ8EpkABOgzPgLDgHzoML4CK4BC6DK+AquAaugxvgJrgFboM74C64B+6DB+AheAQegyfgKXgGnoMX4CV4BV6DN+AteAfegw/gI/gEPoMv4Cv4Br6DH+An+AV+gz/gL/gHEkGcncSOt5Payezkdgo7pZ3KTm2nsdPa6ez0dgY7o53JzmxnsbPa2ezsdg47p53Lzm3nsfPa+ez8dgG7oF3ILmwXsYvaxezidgm7pF3KLm2Xscva5ezydgW7ol3JrmxXsava1ezqdg27pl3Lrm3Xseva9ez6dgO7od3Ibmw3sZvazezmdgu7pd3Kbm23sdva7ez2dge7o93J7mx3sbva3ezudg+7p43ZuE3YpE3ZtM3YrM3ZvC3Yoi3Zsq3Yqq3Zum3Ypm3ZwLZtx3Ztz/btwA5taCM7smN2L7u33cfua/ez+9sD7IH2IHuwPcQeag+zh9sj7JH2KHu0PcYea4+zx9sT7In2JHuyPcWeak+zp9sz7Jn2LHu2Pceea8+z59sL7IX2InuxvcReai+zl9sr7JX2Knu1vcZea6+z19sb7I32JjvR3mJvtbfZ2+0d9k57l73b3mPvtffZ++0D9kH7kH3YPmIftY/Zx+0T9kn7lJ1gn7bP2Gftc/Z5+4J90b5kX7av2Ffta/Z1+4Z9075l37bv2Hfte/Z9+4H90H5kP7af2E/tZ/Zz+4X90n5lv7bf2G/td/Z7+4P90f5kf7a/2F/tb/Z3+4f90/5l/7b/2H/tf3aiHeckceKdpE4yJ7mTwknppHJSO2mctE46J72TwcnoZHIyO1mcrE42J7uTw8np5HJyO3mcvE4+J79TwCnoFHIKO0Wcok4xp7hTwinplHJKO2Wcsk45p7xTwanoVHIqO1Wcqk41p7pTw6np1HJqO3Wcuk49p77TwGnoNHIaO02cpk4zp7nTwmnptHJaO22ctk47p73TwenodHI6O12crk43p7vTw+npYA7uEA7pUA7tMA7rcA7vCI7oSI7sKI7qaI7uGI7pWA5wbMdxXMdzfCdwQgc6yImcmNPL6e30cfo6/Zz+zgBnoDPIGewMcYY6w5zhzghnpDPKGe2MccY645zxzgRnojPJmexMcaY605zpzgxnpjPLme3MceY685z5zgJnobPIWewscZY6y5zlzgpnpbPKWe2scdY665z1zgZno7PJ2exscbY625ztzg5np7PL2e3scfY6+5z9zgHnoHPIOewccY46x5zjzgnnpHPKSXBOO2ecs84557xzwbnoXHIuO1ecq84157pzw7np3HJuO3ecu849577zwHnoPHIeO0+cp84z57nzwnnpvHJeO2+ct847573zwfnofHI+O1+cr84357vzw/np/HJ+O3+cv84/J9GJc5O48W5SN5mb3E3hpnRTuandNG5aN52b3s3gZnQzuZndLG5WN5ub3c3h5nRzubndPG5eN5+b3y3gFnQLuYXdIm5Rt5hb3C3hlnRLuaXdMm5Zt5xb3q3gVnQruZXdKm5Vt5pb3a3h1nRrubXdOm5dt55b323gNnQbuY3dJm5Tt5nb3G3htnRbua3dNm5bt53b3u3gdnQ7uZ3dLm5Xt5vb3e3h9nQxF3cJl3Qpl3YZl3U5l3cFV3QlV3YVV3U1V3cN13QtF7i267iu67m+G7ihC13kRm7M7eX2dvu4fd1+bn93gDvQHeQOdoe4Q91h7nB3hDvSHeWOdse4Y91x7nh3gjvRneROdqe4U91p7vSBce5Md5Y7253jznXnufPdBe5Cd5G72F3iLnWXucvdFe5Kd5W72l3jrnXXuevdDe5Gd5O72d3ibnW3udvdHe5Od5e7293j7nX3ufvdA+5B95B72D3iHnWPucfdE+5J95Sb4J52z7hn3XPuefeCe9G95F52r7hX3WvudfeGe9O95d5277h33XvuffeB+9B95D52n7hP3Wfuc/eF+9J95b5237hv3Xfue/eD+9H95H52v7hf3W/ud/eH+9P95f52/7h/3X9uohvnJfHivaReMi+5l8JL6aXyUntpvLReOi+9l8HL6GXyMntZvKxeNi+7l8PL6eXycnt5vLxePi+/V8Ar6BXyCntFvKJeMa+4V8Ir6ZXySntlvLJeOa+8V8Gr6FXyKntVvKpeNa+6V8Or6dXyant1vLpePa++18Br6DXyGntNvKZeM6+518Jr6bXyWnttvLZeO6+918Hr6HXyOntdvK5eN6+718Pr6WEe7hEe6VEe7TEe63Ee7wme6Eme7Cme6mme7hme6Vke8GzP8VzP83wv8EIPesiLvJjXy+vt9fH6ev28/t4Ab6A3yBvsDfGGesO84d4Ib6Q3yhvtjfHGeuO88d4Eb6I3yZvsTfGmetO86d4Mb6Y3y5vtzfHmevO8+d4Cb6G3yFvsLfGWesu85d4Kb6W3ylvtrfHWeuu89d4Gb6O3ydvsbfG2etu87d4Ob6e3y9vt7fH2evu8/d4B76B3yDvsHfGOese8494J76R3ykvwTntnvLPeOe+8d8G76F3yLntXvKveNe+6d8O76d3ybnt3vLvePe++98B76D3yHntPvKfeM++598J76b3yXntvvLfeO++998H76H3yPntfvK/eN++798P76f3yfnt/vL/ePy/Ri/OT+PF+Uj+Zn9xP4af0U/mp/TR+Wj+dn97P4Gf0M/mZ/Sx+Vj+bn93P4ef0c/m5/Tx+Xj+fn98v4Bf0C/mF/SJ+Ub+YX9wv4Zf0S/ml/TJ+Wb+cX96v4Ff0K/mV/Sp+Vb+aX92v4df0a/m1/Tp+Xb+eX99v4Df0G/mN/SZ+U7+Z39xv4bf0W/mt/TZ+W7+d397v4Hf0O/md/S5+V7+b393v4ff0MR/3CZ/0KZ/2GZ/1OZ/3BV/0JV/2FV/1NV/3Dd/0LR/4tu/4ru/5vh/4oQ995Ed+zO/l9/b7+H39fn5/f4A/0B/kD/aH+EP9Yf5wf4Q/0h/lj/bH+GP9cf54f4I/0Z/kT/an+FP9af50f4Y/05/lz/bn+HP9ef58f4G/0F/kL/aX+Ev9Zf5yf4W/0l/lr/bX+Gv9df56f4O/0d/kb/a3+Fv9bf52f4e/09/l7/b3+Hv9ff5+/4B/0D/kH/aP+Ef9Y/5x/4R/0j/lJ/in/TP+Wf+cf96/4F/0L/mX/Sv+Vf+af92/4d/0b/m3/Tv+Xf+ef99/4D/0H/mP/Sf+U/+Z/9x/4b/0X/mv/Tf+W/+d/97/4H/0P/mf/S/+V/+b/93/4f/0f/m//T/+X/+fn+jHBUmC+CBpkCxIHqQIUgapgtRBmiBtkC5IH2QIMgaZgsxBliBrkC3IHuQIcga5gtxBniBvkC/IHxQICgaFgsJBkaBoUCwoHpQISgalgtJBmaBsUC4oH1QIKgaVgspBlaBqUC2oHtQIaga1gtpBnaBuUC+oHzQIGgaNgsZBk6Bp0CxoHrQIWgatgtZBm6Bt0C5oH3QIOgadgs5Bl6Br0C3oHvQIegZYgAdEQAZUQAdMwAZcwAdCIAZSIAdKoAZaoAdGYAZWAAI7cAI38AI/CIIwgAEKoiAW9Ap6B32CvkG/oH8wIBgYDAoGB0OCocGwYHgwIhgZjApGB2OCscG4YHwwIZgYTAomB1OCqcG0YHowI5gZzApmB3OCucG8YH6wIFgYLAoWB0uCpcGyYHmwIlgZrApWB2uCtcG6YH2wIdgYbAo2B1uCrcG2YHuwI9gZ7Ap2B3uCvcG+YH9wIDgYHAoOB0eCo8Gx4HhwIjgZnAoSgtPBmeBscC44H1wILgaXgsvBleBqcC24HtwIbga3gtvBneBucC+4HzwIHgaPgsfBk+Bp8Cx4HrwIXgavgtfBm+Bt8C54H3wIPgafgs/Bl+Br8C34HvwIfga/gt/Bn+Bv8C9IDOLCJGF8mDRMFiYPU4Qpw1Rh6jBNmDZMF6YPM4QZw0xh5jBLmDXMFmYPc4Q5w1xh7jBPmDfMF+YPC4QFw0Jh4bBIWDQsFhYPS4Qlw1Jh6bBMWDYsF5YPK4QVw0ph5bBKWDWsFlYPa4Q1w1ph7bBOWDesF9YPG4QNw0Zh47BJ2DRsFjYPW4Qtw1Zh67BN2DZsF7YPO4Qdw05h57BL2DXsFnYPe4Q9QyzEQyIkQyqkQyZkQy7kQyEUQymUQyVUQy3UQyM0QysEoR06oRt6oR8GYRjCEIVRGAt7hb3DPmHfsF/YPxwQDgwHhYPDIeHQcFg4PBwRjgxHhaPDMeHYcFw4PpwQTgwnhZPDKeHUcFo4PZwRzgxnhbPDOeHccF44P1wQLgwXhYvDJeHScFm4PFwRrgxXhavDNeHacF24PtwQbgw3hZvDLeHWcFu4PdwR7gx3hbvDPeHecF+4PzwQHgwPhYfDI+HR8Fh4PDwRngxPhQnh6fBMeDY8F54PL4QXw0vh5fBKeDW8Fl4Pb4Q3w1vh7fBOeDe8F94PH4QPw0fh4/BJ+DR8Fj4PX4Qvw1fh6/BN+DZ8F74PP4Qfw0/h5/BL+DX8Fn4Pf4Q/w1/h7/BP+Df8FyaGcTAJjIdJYTKYHKaAKWEqmBqmgWlhOpgeZoAZYSaYGWaBWWE2mB3mgDlhLpgb5oF5YT6YHxaABWEhWBgWgUVhMVgcloAlYSlYGpaBZWE5WB5WgBVhJVgZVoFVYTVYHdaANWEtWBvWgXVhPVgfNoANYSPYGDaBTWEz2By2gC1hK9gatoFtYTvYHnaAHWEn2Bl2gV1hN9gd9oA9IQZxSEASUpCGDEwOOchDAYpQgjJUoAo1qEMDmtCCANrQgS70oA8DGEIIEYxgDPaCvWEf2Bf2g/3hADgQDoKD4RA4FA6Dw+EIOBKOgqPhGDgWjoPj4QQ4EU6Ck+EUOBVOg9PhDDgTzoKz4Rw4F86D8+ECuBAugovhErgULoPL4Qq4Eq6Cq+EauBaug+vhBrgRboKb4Ra4FW6D2+EOuBPugrvhHrgX7oP74QF4EB6Ch+EReBQeg8fhCXgSnoIJ8DQ8A8/Cc/A8vAAvwkvwMrwCr8Jr8Dq8AW/CW/A2vAPvwnvwPnwAH8JH8DF8Ap/CZ/A5fAFfwlfwNXwD38J38D38AD/CT/Az/AK/wm/wO/wBf8Jf8Df8A//CfzARxqEkKB4lRclQcpQCpUSpUGqUBqVF6VB6lAFlRJlQZpQFZUXZUHaUA+VEuVBulAflRflQflQAFUSFUGFUBBVFxVBxVAKVRKVQaVQGlUXlUHlUAVVElVBlVAVVRdVQdVQD1US1UG1UB9VF9VB91AA1RI1QY9QENUXNUHPUArVErVBr1Aa1Re1Qe9QBdUSdUGfUBXVF3VB31AP1RBjCEYFIRCEaMYhFHOKRgEQkIRkpSEUa0pGBTGQhgGzkIBd5yEcBChFECEUohnqh3qgP6ov6of5oABqIBqHBaAgaioah4WgEGolGodFoDBqLxqHxaAKaiCahyWgKmoqmoeloBpqJZqHZaA6ai+ah+WgBWogWocVoCVqKlqHlaAVaiVah1WgNWovWofVoA9qINqHNaAvairah7WgH2ol2od1oD9qL9qH96AA6iA6hw+gIOoqOoePoBDqJTqEEdBqdQWfROXQeXUAX0SV0GV1BV9E1dB3dQDfRLXQb3UF30T10Hz1AD9Ej9Bg9QU/RM/QcvUAv0Sv0Gr1Bb9E79B59QB/RJ/QZfUFf0Tf0Hf1AP9Ev9Bv9QX/RP5SI4qIkUXyUNEoWJY9SRCmjVFHqKE2UNkoXpY8yRBmjTFHmKEuUNcoWZY9yRDmjXFHuKE+UN8oX5Y8KRAWjQlHhqEhUNCoWFY+Pi0pGpaLSUZmobFQuKh9ViCpGlaLKUZWoalQtqh7ViGpGtaLaUZ2oblQvqh81iBpGjaLGUZOoadQsah61iFpGraLWUZuobdQuah91iDpGnaLOUZeoa9Qt6h71iHpGWIRHRERGVERHTMRGXMRHQiRGUiRHSqRGWqRHRmRGVgQiO3IiN/IiPwqiMIIRiqIoFvWKekd9or5Rv6h/NCAaGA2KBkdDoqHRsGh4NCIaGY2KRkdjorHRuGh8NCGaGE2KJkdToqnRtGh6NCOaGc2KZkdzornRvGh+tCBaGC2KFkdLoqXRsmh5tCJaGa2KVkdrorXRumh9tCHaGG2KNkdboq3Rtmh7tCPaGe2Kdkd7or3Rvmh/dCA6GB2KDkdHoqPRseh4dCI6GZ2KEqLT0ZnobHQuOh9diC5Gl6LL0ZXoanQtuh7diG5Gt6Lb0Z3obnQvuh89iB5Gj6LH0ZPoafQseh69iF5Gr6LX0ZvobfQueh99iD5GcZn+n6+/Rd+jH9HP6Ff0O/oT/Y3+RYlRXCxJLD6WNJYsljyWIpYyliqWOpYmljaWLpY+liGWMZYpljmWJZY1li2WPZYjljOWK5Y7lieWN5Yvlj9WIFYwVihWOFYkVjRWLFY8ViJWMlYqVjpWJlY2Vi5WPlYhVjFWKVY5ViVWNVYtVj1WI1YzVitWO1YnVjdWL1Y/1iDWMNYo1jjWJNY09j+W7bFJj2YBAOhuko1t27Zt27bNcY977Jl+Ytu2bdu2zb11q95/cb6cplgzrDnWAmuJtcJaY22wtlg7rD3WAeuIdcI6Y12wrlg3rDvWA+uJ9cJ6Y32wvlg/rD82ABuIDcIGY0OwodgwbDg2AhuJjcJGY2Owsdg4bDw2AZuITcImY1Owqdg0bDo2A8MwHCMwEqMwGmMwgLEYh/GYgImYhMkYxBRMxTRMxwzMxCzMxhzMxTzMxwIsxCIMYTFsJjYLm43NweZi87D52AJsIbYIW4wtwZZiy7Dl2ApsJbYKW42twdZi67D12AZsI7YJ24xtwbZi27Dt2A5sJ7YL243twfZi+7D92AHsIHYIO4wdwY5ix7Dj2AnsJHYKO42dwc5i57Dz2AXsInYJu4xdwa5i17Dr2A3sJnYLu43dwe5i97D72APsIfYIe4w9wZ5iz7Dn2AvsJfYKe429wd5i77D32AfsI/YJ+4x9wb5i37Dv2A/sJ/YL+439wf5i/7BELA6Px5PgSfFkeAKeHE+Bp8RT4anxNHhaPB2eHs+AZ8Qz4ZnxLHhWPBueHc+B58Rz4bnxPHhePB+eHy+AF8QL4YXxInhRvBheHC+Bl8RL4aXxMnhZvBxeHq+AV8Qr4ZXxKnhVvBpeHa+B18Rr4bXxOnhdvB5eH2+AN8Qb4Y3xJnhTvBneHG+Bt8Rb4a3xNnhbvB3eHu+Ad8Q74Z3xLnhXvBveHe+B98R74b3xPnhfvB/eHx+AD8QH4YPxIfhQfBg+HB+Bj8RH4aPxMfhYfBw+Hp+AT8Qn4ZPxKfhUfBo+HZ+BYziOEziJUziNMzjAWZzDeVzARVzCZRziCq7iGq7jBm7iFm7jDu7iHu7jAR7iEY7wGD4Tn4XPxufgc/F5+Hx8Ab4QX4QvxpfgS/Fl+HJ8Bb4SX4Wvxtfga/F1+Hp8A74R34RvxrfgW/Ft+HZ8B74T34Xvxvfge/F9+H78AH4QP4Qfxo/gR/Fj+HH8BH4SP4Wfxs/gZ/Fz+Hn8An4Rv4Rfxq/gV/Fr+HX8Bn4Tv4Xfxu/gd/F7+H38Af4Qf4Q/xp/gT/Fn+HP8Bf4Sf4W/xt/gb/F3+Hv8A/4R/4R/xr/gX/Fv+Hf8B/4T/4X/xv/gf/F/eCIeR8QTSYikRDIigUhOpCBSEqmI1EQaIi2RjkhPZCAyEpmIzEQWIiuRjchO5CByErmI3EQeIi+Rj8hPFCAKEoWIwkQRoihRjChOlCBKEqWI0kQZoixRjihPVCAqEpWIykQVoipRjahO1CBqErWI2kQdoi5Rj6hPNCAaEo2IxkQToinRjGhOtCBaEq2I1kQboi3RjmhPdCA6Ep2IzkQXoivRjehO9CB6Er2I3kQfoi/Rj+hPDCAGEoOIwcQQYigxjBhOjCBGEqOI0cQYYiwxjhhPTCAmEpOIycQUYioxjZhOzCAwAicIgiQogiYYAhAswRE8IRAiIREyAQmFUAmN0AmDMAmLsAmHcAmP8ImACImIQESMmEnMImYTc4i5xDxiPrGAWEgsIhYTS4ilxDJiObGCWEmsIlYTa4i1xDpiPbGB2EhsIjYTW4itxDZiO7GD2EnsInYTe4i9xD5iP3GAOEgcIg4TR4ijxDHiOHGCOEmcIk4TZ4izxDniPHGBuEhcIi4TV4irxDXiOnGDuEncIm4Td4i7xD3iPvGAeEg8Ih4TT4inxDPiOfGCeEm8Il4Tb4i3xDviPfGB+Eh8Ij4TX4ivxDfiO/GD+En8In4Tf4i/xD8ikYgj48kkZFIyGZlAJidTkCnJVGRqMg2ZlkxHpiczkBnJTGRmMguZlcxGZidzkDnJXGRuMg+Zl8xH5icLkAXJQmRhsghZlCxGFidLkCXJUmRpsgxZlixHlicrkBXJSmRlsgpZlaxGVidrkDXJWmRtsg5Zl6xH1icbkA3JRmRjsgnZlGxGNidbkC3JVmRrsg3ZlmxHtic7kB3JTmRnsgvZlexGdid7kD3JXmRvsg/Zl+xH9icHkAPJQeRgcgg5lBxGDidHkCPJUeRocgw5lhxHjicnkBPJSeRkcgo5lZxGTidnkBiJkwRJkhRJkwwJSJbkSJ4USJGUSJmEpEKqpEbqpEGapEXapEO6pEf6ZECGZEQiMkbOJGeRs8k55FxyHjmfXEAuJBeRi8kl5FJyGbmcXEGuJFeRq8k15FpyHbme3EBuJDeRm8kt5FZyG7md3EHuJHeRu8k95F5yH7mfPEAeJA+Rh8kj5FHyGHmcPEGeJE+Rp8kz5FnyHHmevEBeJC+Rl8kr5FXyGnmdvEHeJG+Rt8k75F3yHnmffEA+JB+Rj8kn5FPyGfmcfEG+JF+Rr8k35FvyHfme/EB+JD+Rn8kv5FfyG/md/EH+JH+Rv8k/5F/yH5lIxlHxVBIqKZWMSqCSUymolFQqKjWVhkpLpaPSUxmojFQmKjOVhcpKZaOyUzmonFQuKjeVh8pL5aPyUwWoglQhqjBVhCpKFaOKUyWoklQpqjRVhipLlaPKUxWoilQlqjJVhapKVaOqUzWomlQtqjZVh6pL1aPqUw2ohlQjqjHVhGpKNaOaUy2ollQrqjXVhmpLtaPaUx2ojlQnqjPVhepKdaO6Uz2onlQvqjfVh+pL9aP6UwOogdQgajA1hBpKDaOGUyOokdQoajQ1hhpLjaPGUxOoidQkajI1hZpKTaOmUzMojMIpgiIpiqIphgIUS3EUTwmUSEmUTEFKoVRKo3TKoEzKomzKoVzKo3wqoEIqohAVo2ZSs6jZ1BxqLjWPmk8toBZSi6jF1BJqKbWMWk6toFZSq6jV1BpqLbWOWk9toDZSm6jN1BZqK7WN2k7toHZSu6jd1B5qL7WP2k8doA5Sh6jD1BHqKHWMOk6doE5Sp6jT1BnqLHWOOk9doC5Sl6jL1BXqKnWNuk7doG5St6jb1B3qLnWPuk89oB5Sj6jH1BPqKfWMek69oF5Sr6jX1BvqLfWOek99oD5Sn6jP1BfqK/WtYVxcHPWT+kX9pv5Qf6l/VCIVR8fTSeikdDI6gU5Op6BT0qno1HQaOi2djk5PZ6Az0pnozHQWOiudjc5O56Bz0rno3HQeOi+dj85PF6AL0oXownQRuihdjC5Ol6BL0qXo0nQZuixdji5PV6Ar0pXoynQVuipdja5O16Br0rXo2nQdui5dj65PN6Ab0o3oxnQTuindjG5Ot6Bb0q3o1nQbui3djm5Pd6A70p3oznQXuivdje5O96B70r3o3nQfui/dj+5PD6AH0oPowfQQeig9jB5Oj6BH0qPo0fQYeiw9jh5PT6An0pPoyfQUeio9jZ5Oz6AxGqcJmqQpmqYZGtAszdE8LdAiLdEyDWmFVmmN1mmDNmmLtmmHdmmP9umADumIRnSMnknPomfTc+i59Dx6Pr2AXkgvohfTS+il9DJ6Ob2CXkmvolfTa+i19Dp6Pb2B3khvojfTW+it9DZ6O72D3knvonfTe+i99D56P32APkgfog/TR+ij9DH6OH2CPkmfok/TZ+iz9Dn6PH2Bvkhfoi/TV+ir9DX6On2Dvknfom/Td+i79D36Pv2Afkg/oh/TT+in9DP6Of2Cfkm/ol/Tb+i39Dv6Pf2B/kh/oj/TX+iv9Df6O/2D/kn/on/Tf+i/9D86kY5j4pkkTFImGZPAJGdSMCmZVExqJg2TlknHpGcyMBmZTExmJguTlcnGZGdyMDmZXExuJg+Tl8nH5GcKMAWZQkxhpghTlCnGFGdKMCWZUkxppgxTlinHlGcqMBWZSkxlpgpTlanGVGdqMDWZWkxtpg5Tl6nH1GcaMA2ZRkxjpgnTlGnGNGdaMC2ZVkxrpg3TlmnHtGc6MB2ZTkxnpgvTlenGdGd6MD2ZXkxvpg/Tl+nH9GcGMAOZQcxgZggzlBnGDGdGMCOZUcxoZgwzlhnHjGcmMBOZScxkZgozlZnGTGdmMBiDMwRDMhRDMwwDGJbhGJ4RGJGRGJmBjMKojMbojMGYjMXYjMO4jMf4TMCETMQgJsbMZGYxs5k5zFxmHjOfWcAsZBYxi5klzFJmGbOcWcGsZFYxq5k1zFpmHbOe2cBsZDYxm5ktzFZmG7Od2cHsZHYxu5k9zF5mH7OfOcAcZA4xh5kjzFHmGHOcOcGcZE4xp5kzzFnmHHOeucBcZC4xl5krzFXmGnOducHcZG4xt5k7zF3mHnOfecA8ZB4xj5knzFPmGfOcecG8ZF4xr5k3zFvmHfOe+cB8ZD4xn5kvzFfmG/Od+cH8ZH4xv5k/zF/mH5PIxIF4kAQkBclAAkgOUoCUIBVIDdKAtCAdSA8ygIwgE8gMsoCsIBvIDnKAnCAXyA3ygLwgH8gPCoCCoBAoDIqAoqAYKA5KgJKgFCgNyoCyoBwoDyqAiqASqAyqgKqgGqgOaoCaoBaoDeqAuqAeqA8agIagEWgMmoCmoBloDlqAlqAVaA3agLagHWgPOoCOoBPoDLqArqAb6A56gJ6gF+gN+oC+oB/oDwaAgWAQGAyGgKFgGBgORoCRYBQYDcaAsWAcGA8mgIlgEpgMpoCpYBqYDmYADOCAACSgAA0YAAALOMADAYhAAjKAQAEq0IAODGACC9jAAS7wgA8CEIIIIBADM8EsMBvMAXPBPDAfLAALwSKwGCwBS8EysBysACvBKrAarAFrwTqwHmwAG8EmsBlsAVvBNrAd7AA7wS6wG+wBe8E+sB8cAAfBIXAYHAFHwTFwHJwAJ8EpcBqcAWfBOXAeXAAXwSVwGVwBV8E1cB3cADfBLXAb3AF3wT1wHzwAD8Ej8Bg8AU/BM/AcvAAvwSvwGrwBb8E78B58AB/BJ/AZfAFfwTfwHfwAP8Ev8Bv8AX/BP5AI4th4NgmblE3GJrDJ2RRsSjYVm5pNw6Zl07Hp2QxsRjYTm5nNwmZls7HZ2RxsTjYXm5vNw+Zl87H52QJsQbYQW5gtwhZli7HF2RJsSbYUW5otw5Zly7Hl2QpsRbYSW5mtwlZlq7HV2RpsTbYWW5utw9Zl67H12QZsQ7YR25htwjZlm7HN2RZsS7YV25ptw7Zl27Ht2Q5sxySd2M5sF7Yr243tzvZge7K92N5sH7Yv24/tzw5gB7KD2MHsEHYoO4wdzo5gR7Kj2NHsGHYsO44dz05gJ7KT2MnsFHYqO42dzs5gMRZnCZZkKZZmGRawLMuxPCuwIiuxMgtZhVVZjdVZgzVZi7VZh00EcXE+G7AhG7GIjbEz2Vns7Lg4di47j53PLmAXsovYxewSdim7jF3OrmAvhXFxq9k17Fp2Hbue3cBuZDexm9kt7FZ2G7ud3cHuZHexu9k97F52H7ufPcAeZA+xh9kj7FH2GHucPcGeZE+xp9kz7Fn2HHuevcBeZC+xl9kr7FX2GnudvcHeZG+xt9k77F32HnuffcA+ZB+xj9kn7FP2GfucfcG+ZF+xr9k37Fv2Hfue/cB+ZD+xn9kv7Ff2G/ud/cH+ZH+xv9k/7F/2H5vIxnHxXBIuKZeMS+CScym4lFwqLjWXhkvLpePScxm4jFwmLjOXhcvKZeOyczm4nFwuLjeXh8vL5ePycwW4glwhrjBXhCvKFeOKcyW4klwprjRXhivLlePKcxW4ilwlrjJXhavKVeOqczW4mlwtrjZXh6vL1ePqcw24hlwjrjHXhGvKNeOacy24llwrrjXXhmvLtePacx24jlwnrjPXhevKdeO6cz24nlwvrjfXh+vL9eP6cwO4gdwgbjA3hBvKDeOGcyO4kdwobjQ3hhvLjePGcxO4idwkbjI3hZvKTeOmczM4jMM5giM5iqM5hgMcy3EczwmcyEmczEFO4VRO43TO4EzO4mzO4VzO43wu4EIu4hAX42Zys7jZ3BxuLjePm88t4BZyi7jF3BJuKbeMW86t4FZyq7jV3BpuLbeOW89t4DZym7jN3BZuK7eN287t4HZyu7jd3B5uL7eP288d4A5yh7jD3BHuKHeMO86d4E5yp7jT3BnuLHeOO89d4C5yl7jL3BXuKneNu87d4G5yt7jb3B3uLnePu8894B5yj7jH3BPuKfeMe8694F5yr7jX3BvuLfeOe8994D5yn7jP3BfuK/eN+8794H5yv7jf3B/uL/ePS+Ti+Hg+CZ+UT8Yn8Mn5FHxKPhWfmk/Dp+XT8en5DHxGPhOfmc/CZ+Wz8dn5HHxOPhefm8/D5+Xz8fn5AnxBvhBfmC/CF+WL8cX5EnxJvhRfmi/Dl+XL8eX5CnxFvhJfma/CV+Wr8dX5GnxNvhZfm6/D1+Xr8fX5BnxDvhHfmG/CN+Wb8c35FnxLvhXfmm/Dt+Xb8e35DnxHvhPfme/Cd+W78d35HnxPvhffm+/D9+X78f35AfxAfhA/mB/CD+WH8cP5EfxIfhQ/mh/Dj+XH8eP5CfxEfhI/mZ/CT+Wn8dP5GTzG4zzBkzzF0zzDA57lOZ7nBV7kJV7mIa/wKq/xOm/wJm/xNu/wLu/xPh/wIR/xiI/xM/lZ/Gx+Dj+Xn8fP5xfwC/lF/GJ+Cb+UX8Yv51fwK/lV/Gp+Db+WX8ev5zfwG/lN/GZ+C7+V38Zv53fwO/ld/G5+D7+X38fv5w/wB/lD/GH+CH+UP8Yf50/wJ/lT/Gn+DH+WP8ef5y/wF/lL/GX+Cn+Vv8Zf52/wN/lb/G3+Dn+Xv8ff5x/wD/lH/GP+Cf+Uf8Y/51/wL/lX/Gv+Df+Wf8e/5z/wH/lP/Gf+C/+V/8Z/53/wP/lf/G/+D/+X/8cn8nFCvJBESCokExKE5EIKIaWQSkgtpBHSCumE9EIGIaOQScgsZBGyCtmE7EIOIaeQS8gt5BHyCvmE/EIBoaBQSCgsFBGKCsWE4kIJoaRQSigtlBHKCuWE8kIFoaJQSagsVBGqCtWE6kINoaZQS6gt1BHqCvWE+kIDoaHQSGgsNBGaCs2E5kILoaXQSmgttBHaCu2E9kIHoaPQSegsdBG6Ct2E7kIPoafQS+gt9BH6Cv2E/sIAYaAwSBgsDBGGCsOE4cIIYaQwShgtjBHGCuOE8cIEYaIwSZgsTBGmCtOE6cIMARNwgRBIgRJogRGAwAqcwAuCIAqSIAtQUARV0ARdMARTsARbcARX8ARfCIRQiAQkxISZwixhtjBHmCvME+YLC4SFwiJhsbBEWCosE5YLK4SVwiphtbBGWCusE9YLG4SNwiZhs7BF2CpsE7YLO4SdU+Li4oQ9wl5hn7BfOCAcFA4Jh4UjwlHhmHBcOCGcFE4Jp4UzwlnhnHBeuCBcFC4Jl4UrwlXhmnBduCHcFG4Jt4U7wl3hnnBfeCA8FB4Jj4UnwlPhmfBceCG8FF4Jr4U3wlvhnfBe+CB8FD4Jn4Uvwlfhm/Bd+CH8FH4Jv4U/wl/hn5AoxInxYhIxqZhMTBCTiynElGIqMbWYRkwrphPTixnEjGImMbOYRcwqZhOziznEnGIuMbeYR8wr5hPziwXEgmIhsbBYRCwqFhOLiyXEkmIpsbRYRiwrlhPLixXEimIlsbJYRawqVhOrizXEmmItsbZYR6wr1hPriw3EhmIjsbHYRGwqNhObiy3ElmIrsbXYRmwrthPbix3EjmInsbPYRewqdhO7iz3EnmIvsbfYR+wr9hP7iwPEgeIgcbA4RBwqDhOHiyPEkeIocbQ4RhwrjhPHixPEieIkcbI4RZwqThOnizNETMRFQiRFSqRFRgQiK3IiLwqiKEqiLEJREVVRE3XREE3REm3REV3RE30xEEMxEpEYE2eKs8TZ4hxxrjhPnC8uEBeKi8TF4hJxqbhMXC6uEFeKq8TV4hpxrbhOXC9uEDeKm8TN4hZxq7hN3C7uEHeKu8Td4h5xr7hP3C8eEA+Kh8TD4hHxqHhMPC6eEE+Kp8TT4hnxrHhOPC9eEC+Kl8TL4hXxqnhNvC7eEG+Kt8Tb4h3xrnhPvC8+EB+Kj8TH4hPxqfhMfC6+EF+Kr8TX4hvxrfhOfC9+ED+Kn8TP4hfxq/hN/C7+EH+Kv8Tf4h/xr/hPTBTjpHgpiZRUSiYlSMmlFFJKKZWUWkojpZXSSemlDFJGKZOUWcoiZZWySdmlHFJOKZeUW8oj5ZXySfmlAlJBqZBUWCoiFZWKScWlElJJqZRUWiojlZXKSeWlClJFqZJUWaoiVZWqSdWlGlJNqZZUW6oj1ZXqSfWlBlJDqZHUWGoiNZWaSc2lFlJLqZXUWmojtZXaSe2lDlJHqZPUWeoidZW6Sd2lHlJPqZfUW+oj9ZX6Sf2lAdJAaZA0WBoiDZWGScOlEdJIaZQ0WhojjZXGSeOlCdJEaZI0WZoiTZWmSdOlGRIm4RIhkRIl0RIjAYmVOImXBEmUJEmWoKRIqqRJumRIZsJ/61PyJF8KpFCKJCTFpJnSLGm2NEeaK82T5ksLpIXSImmxtERaKi2TlksrpJXSKmm1tEZaK62T1ksbpI3SJmmztEXaKm2Ttks7pJ3SLmm3tEfaK+2T9ksHpIPSIemwdEQ6Kh2TjksnpJPSKem0dEY6K52TzksXpIvSJemydEW6Kl2Trks3pJvSLem2dEe6K92T7ksPpIfSI+mx9ER6Kj2TnksvpJfSK+m19EZ6K72T3ksfpI/SJ+mz9EX6Kn2Tvks/pJ/SL+m39Ef6K/2TEqU4OV5OIieVk8kJcnI5hZxSTiWnltPIaeV0cno5g5xRziRnlrPIWeVscnY5h5xTziXnlvPIeeV8cn65gFxQLiQXlovIReVicnG5hFxSLiWXlsvIZeVycnm5glxRriRXlqvIVeVqcnW5hlxTriXXluvIdeV6cn25gdxQbiQ3lpvITeVmcnO5hdxSbiW3ltvIbeV2cnu5g9xR7iR3lrvIXeVucne5h9xT7iX3lvvIfeV+cn95gDxQHiQPlofIQ+Vh8nA5QR4pj5JHy2PksfI4ebw8QZ4oT5Iny1PkqfI0ebo8Q8ZkXCZkUqZkWmZkILMyJ/OyIIuyJMsylBVZlTVZlw3ZlC3Zlh3ZlT3ZlwM5lCMZyTF5pjxLni3PkefK8+T58gJ5obxIXiwvkZfKy+Tl8gp5pbxKXi2vkdfK6+T18gZ5o7xJ3ixvkbfK2+Tt8g55p7xL3i3vkffK++T98gH5oHxIPiwfkY/Kx+Tj8gn5pHxKPi2fkc/K5+Tz8gX5onxJvixfka/K1+Tr8g35pnxLvi3fke/K9+T78gP5ofxIfiw/kZ/Kz+Tn8gv5pfxKfi2/kd/K7+T38gf5o/xJ/ix/kb/K3+Tv8g/5p/xL/i3/kf/K/+REOQ7GwyQwKUwGE2BymAKmhKlgapgGpoXpYHqYAWaEmWBmmAVmhdlgdpgD5oS5YG6YB+aF+WB+WAAWhIVgYVgEFoXFYHFYApaEpWBpWAaWheVgeVgBVoSVYGVYBVaF1WB1WAPWhLVgbVgH1oX1YH3YADaEjWBj2AQ2hc1gc9gCtoStYGvYBraF7WB72AF2hJ1gZ9gFdoXdYHfYA/aEvWBv2Af2hf1gfzgADoSD4GA4BA6Fw+BwOAKOhKPgaDgGjoXj4Hg4AU6Ek+BkOAVOhdPgdDgDYhCHBCQhBWnIQABZyEEeClCEEpQhhApUoQZ1aEATWtCGDnShB30YwBBGEMEYnAlnwdlwDpwL58H5cAFcCBfBxXAJXAqXweVwBVwJV8HVcA1cC9fB9XAD3Ag3wc1wC9wKt8HtcAfcCXfB3XAP3Av3wf3wADwID8HD8Ag8Co/B4/AEPAlPwdPwDDwLz8Hz8AK8CC/By/AKvAqvwevwBrwJb8Hb8A68C+/B+/ABfAgfwcfwCXwKn8Hn8AV8CV/B1/ANfAvfwffwA/wIP8HP8Av8Cr/B7/AH/Al/wd/wD/wL/8FEGKfEK0mUpEoyJUFJrqRQUiqplNRKGiWtkk5Jr2RQMiqZlMxKFiWrkk3JruRQciq5lNxKHiWvkk/JrxRQCiqFlMJKEaWoUkwprpRQSiqllNJKGaWsUk4pr1RQKiqVlMpKFaWqUk2prtRQaiq1lNpKHaWuUk+przRQGiqNlMZKE6Wp0kxprrRQWiqtlNZKG6Wt0k5pr3RQOiqdlM5KF6Wr0k3prvRQeiq9lN5KH6Wv0k/prwxQBiqDlMHKEGWoMkwZroxQRiqjlNHKGGWsMk4Zr0xQJiqTlMnKFGWqMk2ZrsxQMAVXCIVUKIVWGAUorMIpvCIooiIpsgIVRVEVTdEVQzEVS7EVR3EVT/GVQAmVSEFKTJmpzFJmK3OUuco8Zb6yQFmoLFIWK0uUpcoyZbmyQlmprFJWK2uUtco6Zb2yQdmobFI2K1uUrco2ZbuyQ9mp7FJ2K3uUvco+Zb9yQDmoHFIOK0eUo8ox5bhyQjmpnFJOK2eUs8o55bxyQbmoXFIuK1eUq8o15bpyQ7mp3FJuK3eUu8o95b7yQHmoPFIeK0+Up8oz5bnyQnmpvFJeK2+Ut8o75b3yQfmofFI+K1+Ur8o35bvyQ/mp/FJ+K3+Uv8o/JVGJU+PVJGpSNZmaoCZXU6gp1VRqajWNmlZNp6ZXM6gZ1UxqZjWLmlXNpmZXc6g51VxqbjWPmlfNp+ZXC6gF1UJqYbWIWlQtphZXS6gl1VJqabWMWlYtp5ZXK6gV1UpqZbWKWlWtplZXa6g11VpqbbWOWletp9ZXG6gN1UZqY7WJ2lRtpjZXW6gt1VZqa7WN2lZtp7ZXO6gd1U5qZ7WL2lXtpnZXe6g91V5qb7WP2lftp/ZXB6gD1UHqYHWIOlQdpg5XR6gj1VHqaHWMOlYdp45XJ6gT1UnqZHWKOlWdpk5XZ6iYiquESqqUSquMClRW5VReFVRRlVRZhaqiqqqm6qqhmqql2qqjuqqn+mqghmqkIjWmzlRnqbPVOepcdZ46X12gLlQXqYvVJepSdZm6XF2hrlRXqavVNepadZ26Xt2gblQ3qZvVLepWdZu6Xd2h7lR3qbvVPepedZ+6Xz2gHlQPqYfVI+pR9Zh6XD2hnlRPqafVM+pZ9Zx6Xr2gXlQvqZfVK+pV9Zp6Xb2h3lRvqbfVO+pd9Z56X32gPlQfqY/VJ+pT9Zn6XH2hvlRfqa/VN+pb9Z36Xv2gflQ/qZ/VL+pX9Zv6Xf2h/lR/qb/VP+pf9Z+aqMZp8VoSLamWTEvQkmsptJRaKi21lkZLq6XT0msZtIxaJi2zlkXLqmXTsms5tJxaLi23lkfLq+XT8msFtIJaIa2wVkQrqhXTimsltJJaKa20VkYrq5XTymsVtIpaJa2yVkWrqlXTqms1tJpaLa22Vkerq9XT6msNtIZaI62x1kRrqjXTmmsttJZaK6211kZrq7XT2msdtI5aJ62z1kXrqnXTums9tJ5aL6231kfrq/XT+msDtIHaIG2wNkQbqg3ThmsjtJHaKG20NkYbq43Txif9T3DaFG2qNk2brs3QMA3XCI3UKI3WGA1orMZpvCZooiZpsgY1RVM1TdM1QzM1S7M1R3M1T/O1QAu1SENaTJupzdJma3O0udo8bb62QFuoLdIWa0u0pdoybbm2QluprdJWa2u0tdo6bb22QduobdI2a1u0rdo2bbu2Q9up7dJ2a3u0vdo+bb92QDuoHdIOa0e0o9ox7bh2QjupndJOa2e0s9o57bx2QbuoXdIua1e0q9o17bp2Q7up3dJua3e0u9o97b72QHuoPdIea0+0p9oz7bn2QnupvdJea2+0t9o77b32QfuofdI+a1+0r9o37bv2Q/up/dJ+a3+0v9o/LVGL0+P1JHpSPZmeoCfXU+gp9VR6aj2NnlZPp6fXM+gZ9Ux6Zj2LnlXPpmfXc+g59Vx6bj2PnlfPp+fXC+gF9UJ6Yb2IXlQvphfXS+gl9VJ6ab2MXlYvp5fXK+gV9Up6Zb2KXlWvplfXa+g19Vp6bb2OXlevp9fXG+gN9UZ6Y72J3lRvpjfXW+gt9VZ6a72N3lZvp7fXO+gd9U56Z72L3lXvpnfXe+g99V56b72P3lfvp/fXB+gD9UH6YH2IPlQfpg/XR+gj9VH6aH2MPlYfp4/XJ+gT9Un6ZH2KPlWfpk/XZ+iYjuuETuqUTuuMDnRW53ReF3RRl3RZh7qiq7qm67qhm7ql27qju7qn+3qgh3qkIz2mz9Rn6bP1OfpcfZ4+X1+gL9QX6Yv1JfpSfZm+XF+hr9RX6av1NfpafZ2+Xt+gb9Q36Zv1LfpWfZu+Xd+h79R36fFxe/S9+j59v35AP6gf0g/rR/Sj+jH9uH5CP6mf0k/rZ/Sz+jn9vH5Bv6hf0i/rV/Sr+jX9un5Dv6nf0m/rd/S7+j39vv5Af6g/0h/rT/Sn+jP9uf5Cf6m/0l/rb/S3+jv9vf5B/6h/0j/rX/Sv+jf9u/5D/6n/0n/rf/S/+j89UY8z4o0kRlIjmZFgJDdSGCmNVEZqI42R1khnpDcyGBmNTEZmI4uR1chmZDdyGDmNXEZuI4+R18hn5DcKGAWNQkZho4hR1ChmFDdKGCWNUkZpo4xR1ihnlDcqGBWNSkZlo4pR1ahmVDdqGDWNWkZto45R16hn1DcaGA2NRkZjo4nR1GhmNDdaGC2NVkZro43R1mhntDc6GB2NTkZno4vR1ehmdDd6GD2NXkZvo4/R1+hn9DcGGAONQcZgY4gx1BhmDDdGGCONUcZoY4wx1hhnjDcmGBONScZkY4ox1ZhmTDdmGJiBG4RBGpRBG4wBDNbgDN4QDNGQDNmAhmKohmbohmGYhmXYhmO4hmf4RmCERmQgI2bMNGYZs405xlxjnjHfWGAsNBYZi40lxlJjmbHcWGGsNFYZq401xlpjnbHe2GBsNDYZm40txlZjm7Hd2GHsNHYZu409xl5jn7HfOGAcNA4Zh40jxlHjmHHcOGGcNE4Zp40zxlnjnHHeuGBcNC4Zl40rxlXjmnHduGHcNG4Zt407xl3jnnHfeGA8NB4Zj40nxlPjmfHceGG8NF4Zr403xlvjnfHe+GB8ND4Zn40vxlfjm/Hd+GH8NH4Zv40/xl/jn5FoxJnxZhIzqZnMTDCTmynMlGYqM7WZxkxrpjPTmxnMjGYmM7OZxcxqZjOzmznMnGYuM7eZx8xr5jPzmwXMgmYhs7BZxCxqFjOLmyXMkmYps7RZxixrljPLmxXMimYls7JZxaxqVjOrmzXMmmYts7ZZx6xr1jPrmw3MhmYjs7HZxGxqNjObmy3MlmYrs7XZxmxrtjPbmx3MjmYns7PZxexqdjO7mz3MnmYvs7fZx+xr9jP7mwPMgeYgc7A5xBxqDjOHmyPMkeYoc7Q5xhxrjjPHmxPMieYkc7I5xZxqTjOnmzNMzMRNwiRNyqRNxgQma3ImbwqmaEqmbEJTMVVTM3XTME3TMm3TMV3TM30zMEMzMpEZM2eas8zZ5hxzrjnPnG8uMBeai8zF5hJzqbnMXG6uMFeaq8zV5hpzrbnOXG9uMDeam8zN5hZzq7nN3G7uMHeau8zd5h5zr7nP3G8eMA+ah8zD5hHzqHnMPG6eME+ap8zT5hnzrHnOPG9eMC+al8zL5hXzqnnNvG7eMG+at8zb5h3zrnnPvG8+MB+aj8zH5hPzqfnMfG6+MF+ar8zX5hvzrfnOfG9+MD+an8zP5hfzq/nN/G7+MH+av8zf5h/zr/nPTDTjrHgriZXUSmYlWMmtFFZKK5WV2kpjpbXSWemtDFZGK5OV2cpiZbWyWdmtHFZOK5eV28pj5bXyWfmtAlZBq5BV2CpiFbWKWcWtElZJq5RV2ipjlbXKWeWtClZFq5JV2apiVbWqWdWtGlZNq5ZV26pj1bXqWfWtBlZDq5HV2GpiNbWaWc2tFlZLq5XV2mpjtbXaWe2tDlZHq5PV2epidbW6Wd2tHlZPq5fV2+pj9bX6Wf2tAdZAa5A12BpiDbWGWcOtEdZIa5Q12hpjjbXGWeOtCdZEa5I12ZpiTbWmWdOtGRZm4RZhkRZl0RZjAYu1OIu3BEu0JEu2oKVYqqVZumVYpmVZtuVYruVZvhVYoRVZyIpZM61Z1mxrjjXXmmfNtxZYC61F1mJribXUWmYtt1ZYK61V1mprjbXWWmettzZYG61N1mZri7XV2mZtt3ZYO61d1m5rj7XX2mfttw5YB61D1mHriHXUOmYdt05YJ61T1mnrjHXWOmedty5YF61L1mXrinXVumZdt25YN61b1m3rjnXXumfdtx5YD61H1mPrifXUemY9t15YL61X1mvrjfXWeme9tz5YH61P1mfri/XV+mZ9t35YP61f1m/rj/XX+mclWnF2vJ3ETmonsxPs5HYKO6Wdyk5tp7HT2uns9HYGO6Odyc5sZ7Gz2tns7HYOO6edy85t57Hz2vns/HYBu6BdyC5sF7GL2sXs4nYJu6Rdyi5tl7HL2uXs8nYFu6Jdya5sV7Gr2tXs6nYNu6Zdy65t17Hr2vXs+nYDu6HdyG5sN7Gb2s3s5nYLu6Xdym5tt7Hb2u3s9nYHu6Pdye5sd7G72t3s7nYPu6fdy+5t97H72v3s/vYAe6A9yB5sD7GH2sPs4fYIe6Q9yh5tj7HH2uPs8fYEe6I9yZ5sT7Gn2tPs6fYMG7Nxm7BJm7Jpm7GBzdqczduCLdqSLdvQVmzV1mzdNmzTtmzbdmzX9mzfDuzQjmxkx+yZ9ix7tj3HnmvPs+fbC+yF9iJ7sb3EXmovs5fbK+yV9ip7tb3GXmuvs9fbG+yN9iZ7s73F3mpvs7fbO+yd9i57t73H3mvvs/fbB+yD9iH7sH3EPmofs4/bJ+yT9in7tH3GPmufs8/bF+yL9iX7sn3Fvmpfs6/bN+yb9i37tn3Hvmvfs+/bD+yH9iP7sf3Efmo/s5/bL+yX9iv7tf3Gfmu/s9/bH+yP9if7s/3F/mp/s7/bP+yf9i/7t/3H/mv/sxPtOCfeSeIkdZI5CU5yJ4WT0knlpHbSOGmddE56J4OT0cnkZHayOFmdbE52J4eT08nl5HbyOHmdfE5+p4BT0CnkFHaKOEWdYk5xp4RT0inllHbKOGWdck55p4JT0ankVHaqOFWdak51p4bzf5LXduo4dZ16Tn2ngdPQaeQ0dpo4TZ1mTnOnhdPSaeW0dto4bZ12Tnung9PR6eR0dro4XZ1uTnenh9PT6eX0dvo4fZ1+Tn9ngDPQGeQMdoY4Q51hznBnhDPSGeWMdsY4Y51xznhngjPRmeRMdqY4U51pznRnhoM5uEM4pEM5tMM4wGEdzuEdwREdyZEd6CiO6miO7hiO6ViO7TiO63iO7wRO6EQOcmLOTGeWM9uZ48x15jnznQXOQmeRs9hZ4ix1ljnLnRXOSmeVs9pZ46x11jnrnQ3ORmeTs9nZ4mx1tjnbnR3OTmeXs9vZ4+x19jn7nQPOQeeQc9g54hx1jjnHnRPOSeeUc9o545x1zjnnnQvOReeSc9m54lx1rjnXnRvOTeeWc9u549x17jn3nQfOQ+eR89h54jx1njnPnRfOS+eV89p547x13jnvnQ/OR+eT89n54nx1vjnfnR/OT+eX89v54/x1/jmJTpwb7yZxk7rJ3AQ3uZvCTemmclO7ady0bjo3vZvBzehmcjO7WdysbjY3u5vDzenmcnO7edy8bj43v1vALegWcgu7RdyibjG3uFvCLemWcku7Zdyybjm3vFvBrehWciu7VdyqbjW3ulvDrenWcmu7ddy6bj23vtvAbeg2chu7TdymbjO3udvCbem2clu7bdy2bju3vdvB7eh2cju7Xdyubje3u9vD7en2cnu7fdy+bj+3vzvAHegOcge7Q9yh7jB3uDvCHemOcke7Y9yx7jh3vDvBnehOcie7U9yp7jR3ujvDxVzcJVzSpVzaZVzgsi7n8q7giq7kyi50FVd1NVd3Ddd0Ldd2Hdd1Pdd3Azd0Ixe5MXemO8ud7c5x57rz3PnuAnehu8hd7C5xl7rL3OXuCnelu8pd7a5x17rr3PXuBneju8nd7G5xt7rb3O3uDnenu8vd7e5x97r73P3uAfege8g97B5xj7rH3OPuCfeke8o97Z5xz7rn3PPuBfeie8m97F5xr7rX3OvuDfeme8u97d5x77r33PvuA/eh+8h97D5xn7rP3OfuC/el+8p97b5x37rv3PfuB/ej+8n97H5xv7rf3O/uD/en+8v97f5x/7r/3EQ3zov3knhJvWRegpfcS+Gl9FJ5qb00XlovnZfey+Bl9DJ5mb0sXlYvm5fdy+Hl9OLic3t5vLxePi+/V8Ar6BXyCntFvKJeMa+4V8Ir6ZXySntlvLJeOa+8V8Gr6FXyKntVvKpeNa+6V8Or6dXyant1vLpePa++18Br6DXyGntNvKZeM6+518Jr6bXyWnttvLZeO6+918Hr6HXyOntdvK5eN6+718Pr6fXyent9vL5eP6+/N8Ab6A3yBntDvKHeMG+4N8Ib6Y3yRntjvLHeOG+8N8Gb6E3yJntTvKneNG+6N8PDPNwjPNKjPNpjPOCxHufxnuCJnuTJHvQUT/U0T/cMz/Qsz/Ycz/U8z/cCL/QiD3kxb6Y3y5vtzfHmevO8+d4Cb6G3yFvsLfGWesu85d4Kb6W3ylvtrfHWeuu89d4Gb6O3ydvsbfG2etu87d4Ob6e3y9vt7fH2evu8/d4B76B3yDvsHfGOese8494J76R3yjvtnfHOeue8894F76J3ybvsXfGuete8694N76Z3y7vt3fHueve8+94D76H3yHvsPfGees+8594L76X3ynvtvfHeeu+8994H76P3yfvsffG+et+8794P76f3y/vt/fH+ev+8RC/Oj/eT+En9ZH6Cn9xP4af0U/mp/TR+Wj+dn97P4Gf0M/mZ/Sx+Vj+bn93P4ef0c/m5/Tx+Xj+fn98v4Bf0C/mF/SJ+Ub+YX9wv4Zf0S/ml/TJ+Wb+cX96v4Ff0K/mV/Sp+Vb+aX92v4df0a/m1/Tp+Xb+eX99v4Df0G/mN/SZ+U7+Z39xv4bf0W/mt/TZ+W7+d397v4Hf0O/md/S5+V7+b393v4ff0e/m9/T5+X7+f398f4A/0B/mD/SH+UH+YP9wf4Y/0R/mj/TH+WH+cP96f4E/0J/mT/Sn+VH+aP92f4WM+7hM+6VM+7TM+8Fmf83lf8EVf8mUf+oqv+pqv+4Zv+pZv+47v+p7v+4Ef+pGP/Jg/05/lz/bn+HP9ef58f4G/0F/kL/aX+Ev9Zf5yf4W/0l/lr/bX+Gv9df56f4O/0d/kb/a3+Fv9bf52f4e/09/l7/b3+Hv9ff5+/4B/0D/kH/aP+Ef9Y/5x/4R/0j/ln/bP+Gf9c/55/4J/0b/kX/av+Ff9a/51/4Z/07/l3/bv+Hf9e/59/4H/0H/kP/af+E/9Z/5z/4X/0n/lv/bf+G/9d/57/4P/0f/kf/a/+F/9b/53/4f/0//l//b/+H/9f36iHxfEB0mCpEGyICFIHqQIUgapgtRBmiBtkC5IH2QIMgaZgsxBliBrkC3IHuQIcga5gtxBniBvkC/IHxQICgaFgsJBkaBoUCwoHpQISgalgtJBmaBsUC4oH1QIKgaVgspBlaBqUC2oHtQIaga1gtpBnaBuUC+oHzQIGgaNgsZBk6Bp0CxoHrQIWgatgtZBm6Bt0C5oH3QIOgadgs5Bl6Br0C3oHvQIega9gt5Bn6Bv0C/oHwwIBgaDgsHBkGBoMCwYHowIRgajgtHBmGBsMC4YH0wIJgaTgsnBlGBqMC2YHswIsAAPiIAMqIAOmAAEbMAFfCAEYiAFcgADJVADLdADIzADK7ADJ3ADL/CDIAiDKEBBLJgZzApmB3OCucG8YH6wIFgYLAoWB0uCpcGyYHmwIlgZrApWB2uCtcG6YH2wIdgYbAo2B1uCrcG2YHuwI9gZ7Ap2B3uCvcG+YH9wIDgYHAoOB0eCo8Gx4HhwIjgZnApOB2eCs8G54HxwIbgYXAouB1eCq8G14HpwI7gZ3ApuB3eCu8G94H7wIHgYPAoeB0+Cp8Gz4HnwIngZvApeB2+Ct8G74H3wIfgYfAo+B1+Cr8G34HvwI/gZ/Ap+B3+Cv8G/IDGIC+PDJGHSMFmYECYPU4Qpw1Rh6jBNmDZMF6YPM4QZw0xh5jBLmDXMFmYPc4Q5w1xh7jBPmDeEcfnDAmHBsFBYOCwSFg2LhcXDEmHJsFRYOiwTlg3LheXDCmHFsFJYOawSVg2rhdXDGmHNsFZYO6wT1g3rhfXDBmHDsFHYOGwSNg2bhc3DFmHLsFXYOmwTtg3bhe3DDmHHsFPYOewSdg27hd3DHmHPsFfYO+wT9g37hf3DAeHAcFA4OBwSDg2HhcPDEeHIcFQ4OhwTjg3HhePDCeHEcFI4OZwSTg2nhdPDGSEW4iERkiEV0iETgpANuZAPhVAMpVAOYaiEaqiFemiEZmiFduiEbuiFfhiEYRiFKIyFM8NZ4exwTjg3nBfODxeEC8NF4eJwSbg0XBYuD1eEK8NV4epwTbg2XBeuDzeEG8NN4eZwS7g13BZuD3eEO8Nd4e5wT7g33BfuDw+EB8ND4eHwSHg0PBYeD0+EJ8NT4enwTHg2PBeeDy+EF8NL4eXwSng1vBZeD2+EN8Nb4e3wTng3vBfeDx+ED8NH4ePwSfg0fBY+D1+EL8NX4evwTfg2fBe+Dz+EH8NP4efwS/g1/BZ+D3+EP8Nf4e/wT/g3/BcmhnFRfJQkSholixKi5FGKKGWUKkodpYnSRumi9FGGKGOUKcocZYmyRtmi7FGOKGeUK8od5YnyRvmi/FGBqGBUKCocFYmKRsWi4lGJqGRUKiodlYnKRuWi8lGFqGJUKaocVYmqRtWi6lGNqGZUK6od1YnqRvWi+lGDqGHUKGocNYmaRs2i5lGLKHlcq6h11CZqG7WL2kcdoo5Rp6hz1CXqGnWLukc9op5Rr6h31CfqG/WL+kcDooHRoGhwNCQaGg2LhkcjopHRqGh0NCYaG42LxkcToonRpGhyNCWaGk2LpkczIizCIyIiIyqiIyYCERtxER8JkRhJkRzBSInUSIv0yIjMyIrsyIncyIv8KHicMi4uQlEsmhnNimZHc6K50bxofrQgWhgtihZHS6Kl0bJoebQiWhmtilZHa6K10bpofbQh2hhtijZHW6Kt0bZoe7Qj2hntinZHe6K90b5of3QgOhgdig5HR6Kj0bHoeHQiOhmdik5HZ6Kz0bnofHQhuhhdii5HV6Kr0bXoenQjuhndim5Hd6K70b3ofvQgehg9ih5HT6Kn0bPoefQiehm9il5Hb6K30bvoffQh+hh9ij5HX6Kv0bfoe/Qj+hn9in5Hf6K/0b8oMYpD8SgJSoqSoQSUHKVAKVEqlBqlQWlROpQeZUAZUSaUGWVBWVE2lB3lQDlRLpQb5UF5UT6UHxVABVEhVBgVQUVRMVQclUAlUSlUGpVBZVE5VB5VQBVRJVQZVUFVUTVUHdVANVEtVBvVQXVRPVQfNUANUSPUGDVBTVEz1By1QC1RK9QatUFtUTvUHnVAHVEn1Bl1QV1RN9Qd9UA9US/UG/VBfVE/1B8NQAPRIDQYDUFD0TA0HI1AI9EoNBqNQWPRODQeTUAT0SQ0GU1BU9E0NB3NQBjCEYFIRCEaMQggFnGIRwISkYRkBJGCVKQhHRnIRBaykYNc5CEfBShEEUIohmaiWWg2moPmonloPlqAFqJFaDFagpaiZWg5WoFWolVoNVqD1qJ1aD3agDaiTWgz2oK2om1oO9qBdqJdaDfag/aifWg/OoAOokPoMDqCjqJj6Dg6gU6iU+g0OoPOonPoPLqALqJL6DK6gq6ia+g6uoFuolvoNrqD7qJ76D56gB6iR+gxeoKeomfoOXqBXqJX6DV6g96id+g9+oA+ok/oM/qCvqJv6Dv6gX6iX+g3+oP+on8oEcXF4mNJYkljyWIJseSxFLGUsVSx1LE0sbSxdLH0sQyxjLFMscyxLLGssWyx7LEcsZyxXLHcsTyxvLF8sfyxArGCsUKxwrEisaKxYrHisRKxkrFSsdKxMrGysXKx8rEKsYqxSrHKsSqxqrFqseqxGrGasVqx2rE6sbqxerH6sQaxhrFGscaxJrGmsWax5rEWsZaxVrHWsTb/Y9GeuvRoFiiOT2zbtm3b9mRi204mttW2Va2qfmLbtm1b5+K8X2Ff7fVfP6w91gHriHXCOmNdsK5YN6w71gPrifXCemN9sL5YPywe648lYAOwgdggbDA2BBuKDcOGYyOwkdgobDQ2BhuLjcPGYxOwidgkbDI2BZuKTcOmYzOwmdgsbDY2B5uLzcPmYwuwRGwhtghbjC3BlmLLsOXYCmwltgpbja3B1mLrsPXYBmwjtgnbjG3BtmLbsO0YhuEYgZEYhdEYg7EYh/GYgImYhMmYgqmYhumYgZmYhdmYgwHMxTzMxwIsxCCGsAiLYTuwndgubDe2B9uL7cP2Ywewg9gh7DB2BDuKHcOOYyewk9gp7DR2BjuLncPOYxewi9gl7DJ2BbuKXcOuYzewm9gt7DZ2B7uL3cPuYw+wh9gj7DH2BHuKPcOeYy+wl9gr7DX2BnuLvcPeYx+wj9gn7DP2BfuKfcO+Yz+wn9gv7Df2B/uL/cPi8CR4UjwZnhxPgafEU+Gp8TR4Wjwdnh7PgGfEM+GZ8Sx4Vjwbnh3PgefEc+G58Tx4Xjwfnh8vgBfEC+GF8SJ4UbwYXhwvgZfES+Gl8TJ4WbwcXh6vgFfEK+GV8Sp4VbwaXh2vgdfEa+G18Tp4XbweXh9vgDfEG+GN8SZ4U7wZ3hxvgbfEW+Gt8TZ4W7wd3h7vgHfEO+Gd8S54V7wb3h3vgffEe+G98T54X7wfHo/3xxPwAfhAfBA+GB+CD8WH4cPxEfhIfBQ+Gh+Dj8XH4ePxCfhEfBI+GZ+CT8Wn4dPxGfhMfBY+G5+Dz8Xn4fPxBXgivhBfhC/Gl+BL8WX4cnwFvhJfha/G1+Br8XX4enwDvhHfhG/Gt+Bb8W34dhzDcZzASZzCaZzBWZzDeVzARVzCZVzBVVzDddzATdzCbdzBAe7iHu7jAR7iEEd4hMfwHfhOfBe+G9+D78X34fvxA/hB/BB+GD+CH8WP4cfxE/hJ/BR+Gj+Dn8XP4efxC/hF/BJ+Gb+CX8Wv4dfxG/hN/BZ+G7+D38Xv4ffxB/hD/BH+GH+CP8Wf4c/xF6nj8Ff4a/wN/hZ/h7/HP+Af8U/4Z/wL/hX/hn/Hf+A/8V/4b/wP/hf/h8cRSYikRDIiOZGCSEmkIlITaYi0RDoiPZGByEhkIjITWYisRDYiO5GDyEnkInITeYi8RD4iP1GAKEgUIgoTRYiiRDGiOFGCKEmUIkoTZYiyRDmiPFGBqEhUIioTVYiqRDWiOlGDqEnUImoTdYi6RD2iPtGAaEg0IhoTTYimRDOiOdGCaEm0IloTbYi2RDuiPdGB6Eh0IjoTXYiuRDeiO9GD6En0InoTfYi+RD8inuhPJBADiIHEIGIwMYQYSgwjhhMjiJHEKGI0MYYYS4wjxhMTiInEJGIyMYWYSkwjphMziJnELGI2MYeYS8wj5hMLiERiIbGIWEwsIZYSy4jlxApiJbGKWE2sIdYS64j1xAZiI7GJ2ExsIbYS24jtBEbgxL8k/2cFDMESHMETAiESEiETCqESGqETBmESFmETDgEIl/AInwiIkIAEIiIiRuwgdhK7iN3EHmIvsY/YTxwgDhKHiMPEEeIocYw4TpwgThKniNPEGeIscY44T1wgLhKXiMvEFeIqcY24TtwgbhK3iNvEHeIucY+4TzwgHhKPiMfEE+Ip8Yx4TrwgXhKviNfEG+It8Y54T3wgPhKfiM/EF+Ir8Y34TvwgfhK/iN/EH+Iv8Y+II5OQSclkZHIyBZmSTEWmJtOQacl0ZHoyA5mRzERmJrOQWclsZHYyB5mTzEXmJvOQecl8ZH6yAFmQLEQWJouQRcliZHGyBFmSLEWWJsuQZclyZHmyAlmRrERWJquQVclqZHWyBlmTrEXWJuuQdcl6ZH2yAdmQbEQ2JpuQTclmZHOyBdkyTVxcHNmGbEu2I9uTHciOZCeyM9mF7Ep2I7uTPcieZC+yN9mH7Ev2I+PJ/mQCOYAcSA4iB5NDyKHkMHI4OYIcSY4iR5NjyLHkOHI8OYGcSE4iJ5NTyKnkNHI6OYOcSc4iZ5NzyLnkPHI+uYBMJBeSi8jF5BJyKbmMXE6uIFeSq8jV5BpyLbmOXE9uIDeSm8jN5BZyK7mN3E5iJE4SJElSJE0yJEtyJE8KpEhKpEwqpEpqpE4apElapE06JCBd0iN9MiDDxpBEZETGyB3kTnIXuZvcQ+4l95H7yQPkQfIQeZg8Qh4lj5HHyRPkSfIUeZo8Q54lz5HnyQvkRfISeZm8Ql4lr5HXyRvkTfIWeZu8Q94l75H3yQfkQ/IR+Zh8Qj4ln5HPyRfkS/IV+Zp8Q74l35HvyQ/kR/IT+Zn8Qn4lv5HfyR/kT/IX+Zv8Q/4l/5FxVBIqKZWMSk6loFJSqajUVBoqLZWOSk9loDJSmajMVBYqK5WNyk7loHJSuajcVB4qL5WPyk8VoApShajCVBGqKFWMKk6VoEpSpajSVBmqLFWOKk9VoCpSlajKVBWqKlWNqk7VoGpStajaVB2qLlWPqk81oBpSjajGVBOqKdWMak61oFpSrajWVBuqLdWOak91oDpSnajOVBeqK9WN6k71oHpSvajeVB+qL9WPiqf6UwnUAGogNYgaTA2hhlLDqOHUCGokNYoaTY2hxlLjqPHUBGoiNYmaTE2hplLTqOnUDGomNYuaTc2h5lLzqPnUAiqRWkgtohZTS6il1DJqObWCWkmtolZTa6i11DpqPbWB2khtojZTW6it1DZqO4VROEVQJEVRNMVQLMVRPCVQIiVRMqVQKqVROmVQJmVRNuVQgHIpj/KpgAopSCEqomLUDmontYvaTe2h9lL7qP3UAeogdYg6TB2hjlLHqOPUCeokdYo6TZ2hzlLnqPPUBeoidYm6TF2hrlLXqOvUDeomdYu6Td2h7lL3qPvUA+oh9Yh6TD2hnlLPqOfUC+ol9Yp6Tb2h3lLvqPfUB+oj9Yn6TH2hvlLfqO/UD+on9Yv6Tf2h/lL/qDg6CZ2UTkYnp1PQKeF/XopOR6enM9AZ6Ux0ZjoLnZXORmenc9A56Vx0bjoPnZfOR+enC9AF6UJ0YboIXZQuRhenS9Al6VJ0aboMXZYuR5enK9AV6Up0ZboKXZWuRlena9A16Vp0bboOXZeuR9enG9AN6UZ0Y7oJ3ZRuRjenW9At6VZ0a7oN3ZZuR7enO9Ad6U50Z7oL3ZXuRnene9A96V50b7oP3ZfuR8fT/ekEegA9kB5ED6aH0EPpYfRwegQ9kh5Fj6bH0GPpcfR4egI9kZ5ET6an0FPpafR0egY9k55Fz6bn0HPpefR8egGdSC+kF9GL6SX0UnoZvZxeQa+kV9EJ6f4/xHp6A72R3kRvprfQW+lt9HYao3GaoEmaommaoVmao3laoEVaomVaoVVao3XaoE3aom3aoQHt0h7t0wEd0pBGdETH6B30TnoXvZveQ++l99H76QP0QfoQfZg+Qh+lj9HH6RP0SfoUfZo+Q5+lz9Hn6Qv0RfoSfZm+Ql+lr9HX6Rv0TfoWfZu+Q9+l79H36Qf0Q/oR/Zh+Qj+ln9HP6Rf0S/oV/Zp+Q7+l39Hv6Q/0R/oT/Zn+Qn+lv9Hf6R/0T/oX/Zv+Q/+l/9FxTBImKZOMSc6kYFIyqZjUTBomLZOOSc9kYDIymZjMTBYmK5ONyc7kYHIyuZjcTB4mL5OPyc8UYAoyhZjCTBGmKFOMKc6UYEoypZjSTBmmLFOOKc9UYCoylZjKTBWmKlONqc7UYGoytZjaTB2mLlOPqc80YBoyjZjGTBOmKdOMac60YFoyrZjWTBumLdOOac90YDoynZjOTBemK9ON6c70YHoyvZjeTB+mL9OPiWf6MwnMAGYgM4gZzAxhhjLDmOHMCGYkM4oZzYxhxjLjmPHMBGYiM4mZzExhpjLTmOnMDGYmM4uZzcxh5jLzmPnMAiaRWcgsYhYzS5ilzDJmObOCWcmsYlYza5i1zDpmPbOB2chsYjYzW5itzDZmO4MxOEMwJEMxNMMwLMMxPCMwIiMxMqMwKqMxOmMwJmMxNuMwgHEZj/GZgAkZyCAmYmLMDmYns4vZzexh9jL7mP3MAeYgc4g5zBxhjjLHmOPMCeYkc4o5zZxhzjLnmPPMBeYic4m5zFxhrjLXmOvMDeYmc4u5zdxh7jL3mPvMA+Yh84h5zDxhnjLPmOfMC+Yl84p5zbxh3jLvmPfMB+Yj84n5zHxhvjLfmO/MD+Yn84v5zfxh/jL/mDg2CZuUTcYmZ1OwKdlUbGo2DZuWTcemZzOwGdlMbGY2C5uVzcZmZ3OwOdlcbG42D5uXzcfmZwuwBdlCbGG2CFuULcYWZ0uwJdlSbGm2DFuWLceWZyuwFdlKbGW2CluVrcZWZ2uwNdlabG22DluXrcfWZxuwDdlGbGO2CduUbcY2Z1uwLdlWbGu2DduWbce2ZzuwHdlObGe2C9uV7cZ2Z3uwPdlebG+2D9uX7cfGs/3ZBHYAO5AdxA5mh7BD2WHscHYEO5IdxY5mx7Bj2XHseHYCO5GdxE5mp7BT2WnsdHYGO5Odxc5m57Bz2XnsfHYBm8guZBexi9kl7FJ2GbucXcGuZFexq9k17Fp2Hbue3cBuZDexm9kt7FZ2G7udxVicJViSpViaZViW5VieFViRlViZVViV1VidNViTtVibdVjAuqzH+mzAhixkERuxMXYHu5Pdxe5m97B72X3sfvYAe5A9xB5mj7BH2WPscfYEe5I9xZ5mz7Bn2XPsefYCe5G9xF5mr7BX2WvsdfYGe5O9xd5m77B32XvsffYB+5B9xD5mn7BP2Wfsc/YF+5J9xb5m37Bv2Xfse/YD+5H9xH5mv7Bf2W/sd/YH+5P9xf5m/7B/2X9sHJeES8ol45JzKbiUXCouNZeGS8ul49JzGbiMXCYuM5eFy8pl47JzObicXC4uN5eHy8vl4/JzBbiCXCGuMFeEK8oV44pzJbiSXCmuNFeGK8uV48pzFbiKXCWuMleFq8pV46pzNbiaXC2uNleHq8vV4+pzDbiGXCOuMdeEa8o145pzLbiWXCuuNdeGa8u149pzHbiOXCeuM9eF68p147pzPbieXC+uN9eH68v14+K5/lwCN4AbyA3iBnNDuKHcMG44N4IbyY3iRnNjuLHcOG48N4GbyE3iJnNTuKncNG46N4Obyc3iZnNzuLncPG4+t4BL5BZyi7jF3BJuKbeMW86t4FZyq7jV3BpuLbeOW89t4DZym7jN3BZuK7eN285hHM4RHMlRHM0xHMtxHM8JnMhJnMwpnMppnM4ZnMlZnM05HOBczuN8LuBCDnKIi7gYt4Pbye3idnN7uL3cPm4/d4A7yB3iDnNHuKPcMe44d4I7yZ3iTnNnuLPcOe48d4G7yF3iLnNXuKvcNe46d4O7yd3ibnN3uLvcPe4+94B7yD3iHnNPuKfcM+4594J7yb3iXnNvuLfcO+4994H7yH3iPnNfuK/cN+4794P7yf3ifnN/uL/cPy6OT8In5ZPxyfkUfEo+FZ+aT8On5dPx6fkMfEY+E5+Zz8Jn5bPx2fkcfE4+F5+bz8Pn5fPx+fkCfEG+EF+YL8IX5YvxxfkSfEm+FF+aL8OX5cvx5fkKfEW+El+Zr8JX5avx1fkafE2+Fl+br8PX5evx9fkGfEO+Ed+Yb8I35ZvxzfkWfEu+Fd+ab8O35dvx7fkOfEe+E9+Z78J35bvx3fkefE++F9+b78P35fvx8Xx/PoEfwA/kB/GD+SH8UH4YP5wfwY/kR/Gj+TH8WH4cP56fwE/kJ/GT+Sn8VH4aP52fwc/kZ/Gz+Tn8XH4eP59fwCfyC/lF/GJ+Cb+UX8Yv51fwK/lV/Gp+Db+WX8ev5zfwG/lN/GZ+C7+V38Zv5zEe5wme5Cme5hme5Tme5wVe5CVe5hVe5TVe5w3e5C3e5h0e8C7v8T4f8CEPecRHfIzfwe/kd/G7+T38Xn4fv58/wB/kD/GH+SP8Uf4Yf5w/wZ/kT/Gn+TP8Wf4cf56/wF/kL/GX+Sv8Vf4af52/wd/kb/G3+Tv8Xf4ef59/wD/kH/GP+Sf8U/4Z/5x/wb/kX/Gv+Tf8W/4d/57/wH/kP/Gf+S/8V/4b/53/wf/kf/G/+T/8X/7fv/8en5BcSCGkFFIJqYU0QlohnZBeyCBkFDIJmYUsQlYhm5BdyCHkFHIJuYU8Ql4hn5BfKCAUFAoJhYUiQlGhmFBcKCGUFEoJpYUyQlmhnFBeqCBUFCoJlYUqQlWhmlBdqCHUFGoJtYU6Ql2hnlBfaCA0FBoJjYUmQlOhmdBcaCG0FFoJrYU2QluhndBe6CB0FDoJnYUuQlehm9Bd6CH0FHoJvYU+Ql+hnxAv9BcShAHCQGGQMFgYIgwVhgnDhRHCSGGUMFoYI4wVxgnjhQnCRGGSMFmYIkwVpgnThRnCTGGWMFuYI8wV5gnzhQVCorBQWCQsFpYIS4VlwnJhhbBSWCWsFtYIa4V1wnphg7BR2CRsFrYIW4VtwnYBE3CBEEiBEmiBEViBE3hBEERBEmRBEVRBE3TBEEzBEmzBEYDgCp7gC4EQClBAQiTEhB3CTmGXsFvYI+wV9gn7hQPCQeGQcFg4IhwVjgnHhRPCSeGUcFo4I5wVzgnnhQvCReGScFm4IlwVrgnXhRvCTeGWcFu4I9wV7gn3hQfCQ+GR8Fh4IjwVngnPhRfCS+GV8Fp4I7wV3gnvhQ/CR+GT8Fn4InwVvgnfhR/CT+GX8Fv4I/wV/glxYhIxqZhMTC6mEFOKqcTUYhoxrZhOTC9mEDOKmcTMYhYxq5hNzC7mEHOKucTcYh4xr5hPzC8WEAuKhcTCYhGxqFhMLC6WEEuKpcTSYhmxrFhOLC9WECuKlcTKYhWxqlhNrC7WEGuKtcTaYh2xrlhPrC82EBuKjcTGYhOxqdhMbC62EFuKrcTWYhuxrdhObC92EDuKncTOYhexq9hN7C7Gpe4p9hJ7i33EvmI/MV7sLyaIA8SB4iBxsDhEHCoOE4eLI8SR4ihxtDhGHCuOE8eLE8SJ4iRxsjhFnCpOE6eLM8SZ4ixxtjhHnCvOE+eLC8REcaG4SFwsLhGXisvE5eIKcaW4SlwtrhHXiuvE9eIGcaO4SdwsbhG3itvE7SIm4iIhkiIl0iIjsiIn8qIgiqIkyqIiqqIm6qIhmqIl2qIjAtEVPdEXAzEUoYjESIyJO8Sd4i5xt7hH3CvuE/eLB8SD4iHxsHhEPCoeE4+LJ8ST4inxtHhGPCueE8+LF8SL4iXxsnhFvCpeE6+LN8Sb4i3xtnhHvCveE++LD8SH4iPxsfhEfCo+E5+LL8SX4ivxtfhGfCu+E9+LH8SP4ifxs/hF/Cp+E7+LP8Sf4i/xt/hH/Cv+E+OkJFJSKZmUXEohpZRSSamlNFJaKZ2UXsogZZQySZmlLFJWKZuUXcoh5ZRySbmlPFJeKZ+UXyogFZQKSYWlIlJRqZhUXCohlZRKSaWlMlJZqZxUXqogVZQqSZWlKlJVqZpUXaoh1ZRqSbWlOlJdqZ5UX2ogNZQaSY2lJlJTqZnUXGohtZRaSa2lNlJbqZ3UXuogdZQ6SZ2lLlJXqZvUXeoh9ZR6Sb2lPlJfqZ8UL/WXEqQB0kBpkDRYGiINlYZJw6UR0khplDRaGiONlcZJ46UJ0kRpkjRZmiJNlaZJ06UZ0kxpljRbmiPNleZJ86UFUqK0UFokLZaWSEulZdJyaYW0UlolrZbWSGulddJ6aYO0UdokbZa2SFulbdJ2CZNwiZBIiZJoiZFYiZN4SZBESZJkSZFUSZN0yZBMyZJsyZGA5Eqe5EuBFEpQQlIkxaQd0k5pl7Rb2iPtlfZJ+6UD0kHpkHRYOiIdlY5Jx6UT0knplHRaOiOdlc5J56UL0kXpknRZuiJdla5J16Ub0k3plnRbuiPdle5J96UH0kPpkfRYeiI9lZ5Jz6UX0kvplfRaeiO9ld5J76UP0kfpk/RZ+iJ9lb5J36Uf0k/pl/Rb+iP9lf5JcXISOamcTE4up5BTyqnk1HIaOa2cTk4vZ5AzypnkzHIWOaucTc4u55Bzyrnk3HIeOa+cT84vF5ALyoXkwnIRuahcTC4ul5BLyqXk0nIZuaxcTi4vV5ArypXkynIVuapcTa4u15BryrXk2nIdua5cT64vN5Abyo3kxnITuancTG4ut5Bbyq3k1nIbua3cTm4vd5A7yp3kznIXuavcTe4u95B7yr3k3nIfua/cT46X+8sJ8gB5oDxIHiwPkYfKw+Th8gh5pDxKHi2PkcfK4+Tx8gR5ojxJnixPkafK0+Tp8gx5pjxLni3PkefK8+T58gI5UV4oL5IXy0vkpfIyebm8Ql4pr5JXy2vktfI6eb28Qd4ob5I3y1vkrfI2ebuMybhMyKRMybTMyKzMybwsyKIsybKsyKqsybpsyKZsybbsyEB2ZU/25UAOZSgjOZJj8g55p7xL3i3vkffK++T98gH5oHxIPiwfkY/Kx+Tj8gn5pHxKPi2fkc/K5+Tz8gX5onxJvixfka/K1+Tr8g35pnxLvi3fke/K9+T78gP5ofxIfiw/kZ/Kz+Tn8gv5pfxKfi2/kd/K7+T38gf5o/xJ/ix/kb/K3+Tv8g/5p/xL/i3/kf/K/+Q4JYmSVEmmJFdSKCmVVEpqJY2SVkmnpFcyKBmVTEpmJYuSVcmmZFdyKDmVXEpuJY+SV8mn5FcKKAWVQkphpYhSVCmmFFdKKCWVUkpppYxSVimnlFcqKBWVSkplpYpSVammVFdqKDWVWkptpY5SV6mn1FcaKA2VRkpjpbHSVGmqNFeaKy2VlkprpbXSVmmrtFfaKx2VjkpnpbPSVemqdFe6Kz2VnkpvpbfSV+mrxCvxSoKSoAxUBimDlcHKUGWoMlwZroxURiqjldHKWGWsMl6ZoExUJimTlSnKVGWaMl2ZocxUZimzlTnKXGWeMl9ZoCQqicoiZZGyRFmiLFOWKSuUFcoqZZWyRlmjrFPWKRuUDcomZZOyRdmibFO2KZiCK4RCKpRCK4zCKpzCK4IiKpIiK4qiKpqiK4ZiKpZiK44CFFfxFF8JlFCBClIiJabsUHYqu5Tdyh5lr7JP2a8cUA4qh5TDyhHlqHJMOa6cUE4qp5TTyhnlrHJOOa9cUC4ql5TLyhXlqnJNua7cUG4qt5Tbyh3lrnJPua88UB4qj5THyhPlqfJMea68UF4qr5TXyhvlrfJOea98UD4qn5TPyhflq/JN+a78UH4qv5Tfyh/lr/JPiVOTqEnVZGpyNYWaUk2lplbTqGnVdGp6NYOaUc2kZlazqFnVbGp2NYeaU82l5lbzqHnVfGp+tYBaUC2kFlaLqEXVompxtbhaUi2pllZLq2XVsmp5tbxaUa2oVlarqFXVqmp1tbpaU62p1lZrq3XVump9tb7aUG2oNlYbq03VpmpztbnaUm2ptlZbq23Vtmp7tb3aUe2odlY7q13Vrmp3tbvaU+2p9lZ7q33Vvmq8Gq8mqAnqQHWgOlgdrA5Vh6rD1eHqSHWkOlodrY5Vx6rj1fHqRHWSOlmdok5Vp6nT1RnqTHWWOkudo85R56nz1flqopqoLlIXqUvUJeoydZm6Ql2prlJXq6vVteo6db26Qd2oblI3q1vUreo2dbuKqbhKqKRKqbTKqKzKqbwqqKIqqbKqqKqqqbpqqKZqqbbqqEB1VU/11UANVagiNVJj6g51p7pL3a3uUfeq+9T96gH1oHpIPaweUY+qx9Tj6gn1pHpKPa2eUc+q59Tz6gX1onpJvaxeUa+q19Tr6g31pnpLva3eUe+q99T76gP1ofpIfaw+UZ+qz9Tn6gv1pfpKfa2+Ud+q79T36gf1o/pJ/ax+Ub+q39Tv6g/1p/pL/a3+Uf+q/9Q4LYmWVEumJddSaCm1VFpqLY2WVkunpdcyaBm1TFpmLYuWVcumZddyaDm1XFpuLY+WV8un5dcKaAW1QlphrYhWVCumFddKaCW1UlpprYxWViunldcqaBW1SlplrYpWVaumVddqaDW1WlptrY5WV6un1dcaaA21RlpjrYnWVGumNddaaC21VlprrY3WVmuntdc6aB21TlpnrYvWVeumddd6aD21XlpvrY/WV+unxWv9tQRtgDZQG6QN1oZoQ7Vh2nBthDZSG6WN1sZoY7Vx2nhtgjZRm6RN1qZoU7Vp2nRthjZTm6XN1uZoc7V52nxtgZaoLdQWaYu1JdpSbZm2XFuhrdRWaau1NdpabZ22XtugbdQ2aZu1LdpWbZu2XcM0XCM0UqM0WmM0VuM0XhM0UZM0WVM0VdM0XTM0U7M0W3M0oLmap/laoIUa1JAWaTFth7ZT26Xt1vZoe7V92n7tgHZQO6Qd1o5oR7Vj2nHthHZSO6Wd1s5oZ7Vz2nntgnZRu6Rd1q5oV7Vr2nXthnZTu6Xd1u5od7V72n3tgfZQe6Q91p5oT7Vn2nPthfZSe6W91t5ob7V32nvtg/ZR+6R91r5oX7Vv2nfth/ZT+6X91v5of7V/WpyeRE+qJ9OT6yn0lHoqPbWeRk+rp9PT6xn0jHomPbOeRc+qZ9Oz6zn0nHouPbeeR8+r59Pz6wX0gnohvbBeRC+qF9OL6yX0knopvbReRi+rl9PL6xX0inolvbJeRa+qV9Or6zX0mnotvbZeR6+r19Pr6w30hnojvbHeRG+qN9Ob6y30lnorvbXeRm+rt9Pb6x30jnonvbPeRe+qd9O76z30nnovvbfeR++r99Pj9f56gj5AH6gP0gfrQ/Sh+jB9uD5CH6mP0kfrY/Sx+jh9vD5Bn6hP0ifrU/Sp+jR9uj5Dn6nP0mfrc/S5+jx9vr5AT9QX6ov0xfoSfam+TF+ur9BX6qv01foafa2+Tl+vb9A36pv0zfoWfau+Td+uYzquEzqpUzqtMzqrczqvC7qoS7qsK7qqa7quG7qpW7qtOzrQXd3TfT3QQx3qSI/0mL5D36nv0nfre/S9+j59v35AP6gf0g/rR/Sj+jH9uH5CP6mf0k/rZ/Sz+jn9vH5Bv6hf0i/rV/Sr+jX9un5Dv6nf0m/rd/S7+j39vv5Af6g/0h/rT/Sn+jP9uf5Cf6m/0l/rb/S3+jv9vf5B/6h/0j/rX/Sv+jf9u/5D/6n/0n/rf/S/+j89zkhiJDWSGcmNFEZKI5WR2khjpDXSGemNDEZGI5OR2chiZDWyGdmNHEZOI5eR28hj5DXyGfmNAkZBo5BR2ChiFDWKGcWNEkZJo5RR2ihjlDXKGeWNCkZFo5JR2ahiVDWqGdWNGkZNo5ZR26hj1DXqGfWNBkZDo5HR2GhiNDWaGc2NFkZLo5XR2mhjtDXaGe2NDkZHo5PR2ehidDW6Gd2NHkZPo5fR2+hj9DX6GfFGfyPBGGAMNAYZg40hxlBjmDHcGGGMNEYZo40xxlhjnDHemGBMNCYZk40pxlRjmjHdmGHMNGYZs405xlxjnjHfWGAkGguNRcZiY4mx1FhmLDdWGCuNVcZqY42x1lhnrDc2GBuNTcZmY4ux1dhmbDcwAzcIgzQogzYYgzU4gzcEQzQkQzYUQzU0QzcMwzQswzYcAxiu4Rm+ERihAQ1kREbM2GHsNHYZu409xl5jn7HfOGAcNA4Zh40jxlHjmHHcOGGcNE4Zp40zxlnjnHHeuGBcNC4Zl40rxlXjmnHduGHcNG4Zt407xl3jnnHfeGA8NB4Zj40nxlPjmfHceGG8NF4Zr403xlvjnfHe+GB8ND4Zn40vxlfjm/Hd+GH8NH4Zv40/xl/jnxFnJjGTmsnM5GYKM6WZykxtpjHTmunM9GYGM6OZycxsZjGzmtnM7GYOM6eZy8xt5jHzmvnM/GYBs6BZyCxsFjGLmsXM4mYJs6RZyixtljHLmuXM8mYFs6JZyaxsVjGrmtXM6mYNs6ZZy6xt1jHrmvXM+mYDs6HZyGxsNjGbms3M5mYLs6XZymxttjHbmu3M9mYHs6PZyexsdjG7mt3M7mYPs6fZy+xt9jH7mv3MeLO/mWAOMAeag8zB5hBzqDnMHG6OMEeao8zR5hhzrDnOHG9OMCeak8zJ5hRzqjnNnG7OMGeas8zZ5hxzrjnPnG8uMBPNheYic7G5xFxqLjOXmyvMleYqc7W5xlxrrjPXmxvMjeYmc7O5xdxqbjO3m5iJm4RJmpRJm4zJmpzJm4IpmpIpm4qpmpqpm4ZpmpZpm44JTNf0TN8MzNCEJjIjM2buMHeau8zd5h5zr7nP3G8eMA+ah8zD5hHzqHnMPG6eME+ap8zT5hkzRdw587x5wbxoXjIvm1fMq+Y187p5w7xp3jJvm3fMu+Y98775wHxoPjIfm0/Mp+Yz87n5wnxpvjJfm2/Mt+Y78735wfxofjI/m1/Mr+Y387v5w/xp/jJ/m3/Mv+Y/M85KYiW1klnJrRRWSiuVldpKY6W10lnprQxWRiuTldnKYmW1slnZrRxWTiuXldvKY+W18ln5rQJWQauQVdgqYhW1ilnFrTRWSauUVdoqY5W1ylnlrQpWRauSVdmqYlW1qlnVrRpWTauWVduqY9W16ln1rQZWQ6uR1dhqYjW1mlnNrRZWS6uV1dpqY7W12lntrQ5WR6uT1dnqYnW1ulndrR5WT6uX1dvqY/W1+lnxVn8rwRpgDbQGWYOtIdZQa5g13BphjbRGWaOtMdZYa5w13ppgTbQmWZOtKdZUa5o13ZphzbRmWbOtOdZca54131pgJVoLrUXWYmuJtdRaZi23VlgrrVXWamuNtdZaZ623NlgbrU3WZmuLtdXaZm23MAu3CIu0KIu2GIu1OIu3BEu0JEu2FEu1NEu3DMu0LMu2HAtYruVZvhVYoQUtZEVWzNph7bR2WbutPdZea5+13zpgHbQOWYetI9ZR65h13DphnbROJTttnbHOWues89YF66J1ybpsXbGuWtes69YN66Z1y7pt3bHuWves+9YD66H1yHpsPbGeJouLi7NeWC+tV9Zr64311npnvbc+WB+tT9Zn64v11fpmfbd+WD+tX9Zv64/11/pnxdlJ7KR2Mju5ncJOaaeyU9tp7LR2Oju9ncHOaGeyM9tZ7Kx2Nju7ncPOaeeyc9t57Lx2Pju/XcAuaBeyC9tF7KJ2Mbu4XcIuaZeyS9tl7LJ2Obu8XcGuaFeyK9tV7Kp2Nbu6XcOuadeya9t17Lp2Pbu+3cBuaDeyG9tN7KZ2M7u53cJuabeyW9tt7LZ2O7u93cHuaHeyO9td7K52N7u73cPuafeye9t97L52Pzve7m8n2APsgfYge7A9xB5qD7OH2yPskfYoe7Q9xh5rj7PH2xPsifYke7I9xZ5qT7On2zPsmfYse7Y9x55rz7Pn2wvsRHuhvchebC+xl9rL7OX2Cnulvcpeba+x19rr7PX2BnujvcnebG+xt9rb7O3/5fI4m7Jpm7FZm7N5W7BFW7JlW7FVW7N127BN27Jt27GB7dqe7duBHdrQRnZkx+wd9k57l73b3mPvtffZ++0D9kH7kH3YPmIftY/Zx+0T9kn7lH3aPmOftc/Z5+0L9kX7kn3ZvmJfta/Z1+0b9k37ln3bvmPfte/Z9+0H9kP7kf3YfmI/tZ/Zz+0X9kv7lf3afmO/td/Z7+0P9kf7k/3Z/mJ/tb/Z3+0f9k/7l/3b/mP/tf/ZcU4SJ6mTzEnupHBSOqmc1E4aJ62TzknvZHAyOpmczE4WJ6uTzcnu5HByOrmc3E4eJ6+Tz8nvFHAKOoWcwk4Rp6hTzCnulHBKOqWc0k4Zp6xTzinvVHAqOpWcyk4Vp6pTzanu1HBqOrWc2k4dp65Tz6nvNHAaOo2cxk4Tp6nTzGnutHBaOq2c1k4bp63TzmnvdHA6Op2czk4Xp6vTzenu9HB6Or2c3k4fp6/Tz4l3+jsJzgBnoDPIGewMcYY6w5zhzghnpDPKGe2MccY645zxzgRnojPJmexMcaY605zpzgxnpjPLme3MceY685z5zgIn0VnoLHIWO0ucpc4yZ7mzwlnprHJWO2uctc46Z72zwdnobHI2O1ucrc42Z7uDObhDOKRDObTDOKzDObwjOKIjObKjOKqjObpjOKZjObbjOMBxHc/xncAJHeggJ3Jizg5np7PL2e3scfY6+5z9zgHnoHPIOewccY46x5zjzgnnpHPKOe2ccc4655zzzgXnonPJuexcca4615zrzg3npnPLue3cce4695z7zgPnofPIeew8cZ46z5znzgvnpfPKee28cd4675z3zgfno/PJ+ex8cb4635zvzg/np/PL+e38cf46/5w4kAQkBclAcpACpASpQGqQBqQF6UB6kAFkBJlAZpAFZAXZQHaQA+QEuUBukAfkBflAflAAFASFQGFQBBQFxUBxUAKUBKVAaVAGlAXlQHlQAVQElUBlUAVUBdVAdVAD1AS1QG1QB9QF9UB90AA0BI1AY9AENAXNQHPQArQErUBr0Aa0Be1Ae9ABdASdQGfQBXQF3UB30AP0BL1Ab9AH9AX9QDzoDxLAADAQDAKDwRAwFAwDw8EIMBKMAqPBGDAWjAPjwQQwEUwCk8EUMBVMA9PBDDATzAKzwRwwF8wD88ECkAgWgkVgMVgCloJlYDlYAVaCVWA1WAPWgnVgPdgANoJNYDPYAraCbWA7wAAOCEACCtCAASzgAA8EIAIJyEABKtCADgxgAgvYwAEAuMADPghACCBAIAIxsAPsBLvAbrAH7AX7wH5wABwEh8BhcAQcBcfAcXACnASnwGlwBpwF58B5cAFcBJfAZXAFXAXXwHVwA9wEt8BtcAfcBffAffAAPASPwGPwBDwFz8Bz8AK8BK/Aa/AGvAXvwHvwAXwEn8Bn8AV8Bd/Ad/AD/AS/wG/wB/wF/0Ccm8RN6iZzk7sp3JRuKje1m8ZN66Zz07sZ3IxuJjezm8XN6mZzs7s53JxuLje3m8fN6+Zz87sF3IJuIbewW8Qt6hZzi7sl3JJuKbe0W8Yt65Zzy7sV3IpuJbeyW8Wt6lZzq7s13JpuLbe2W8et69Zz67sN3IZuI7ex28Rt6jZzm7st3JZuK7e128Zt67Zz27sd3I5uJ7ez28Xt6nZzu7s93J5uL7e328ft6/Zz493+boI7wB3oDnIHu0Pcoe4wd7g7wh3pjnJHu2Pcse44d7w7wZ3oTnInu1Pcqe40d7o7w53pznJnu3Pcue48d767wE10F7qL3MXuEnepu8xd7q5wV7qr3NXuGnetu85d725wN7qb3M3uFneru83d7mIu7hIu6VIu7TIu63Iu7wqu6Equ7Cqu6mqu7hqu6Vqu7ToucF3Xc303cEMXusiN3Ji7w93p7nJ3u3vcve4+d797wD3oHnIPu0fco+4x97h7wj3pnnJPu2fcs+4597x7wb3oXnIvu1fcq+4197p7w73p3nJvu3fcu+499777wH3oPnIfu0/cp+4z97n7wk0T98p97b5x37rv3PfuB/ej+8n97H5xv7rf3O/uD/en+8v97f5x/7r/3DgviZfUS+Yl91J4Kb1UXmovjZfWS+ml9zJ4Gb1MXmYvi5fVy+Zl93J4Ob1cXm4vj5fXy+fl9wp4Bb1CXmGviFfUK+YV90p4Jb1SXmmvjFfWK+eV9yp4Fb1KXmWvilfVq+ZV92p4Nb1aXm2vjlfXq+fV9xp4Db1GXmOvidfUa+Y191p4Lb1WXmuvjdfWa+e19zp4Hb1OXmevi9fV6+Z193p4Pb1eXm+vj9fX6+fFe/29BG+AN9Ab5A32hnhDvWHecG+EN9Ib5Y32xnhjvXHeeG+CN9Gb5E32pnhTvWnedG+GN9Ob5c325nhzvXnefG+Bl+gt9BZ5i70l3lJvmbfcW+Gt9FZ5q7013lpvnbfe2+Bt9DZ5m70tqbd627ztHubhHuGRHuXRHuOxHufxnuCJnuTJnuKpnubpnuGZnuXZnuMBz/U8z/cCL/Sgh7zIi3k7vJ3eLm+3t8fb6+3z9nsHvIPeIe+wd8Q76h3zjnsnvJPeKe+0d8Y7653zznsXvIveJe+yd8W76l3zrns3vJveLe+2d8e7693z7nsPvIfeI++x98R76j3znnsvvJfeK++198Z7673z3nsfvI/eJ++z98X76n3zvns/vJ/eL++398f76/3z4vwkflI/mZ/cT+Gn9FP5qf00flo/nZ/ez+Bn9DP5mf0sflY/m5/dz+Hn9HP5uf08fl4/n5/fL+AX9Av5hf0iflG/mF/cL+GX9Ev5pf0yflm/nF/er+BX9Cv5lf0qflW/ml/dr+HX9Gv5tf06ft2k9fz6fgM/id/Ib+w38Zv6zfzmfgu/pd/Kb+238dv67fz2fge/o9/J7+x38bv63fzufg+/p9/L7+338fv6/fx4v7+f4A/wB/qD/MH+EH+oP8wf7o/wR/qj/NH+GH+sP84f70/wJ/qT/Mn+FH+qP82f7s/wZ/qz/Nn+HH+uP8+f7y/wE/2F/iJ/sb/EX+ov85f7K/yV/ip/tb/GX+uv89f7G/yN/iZ/s7/F3+pv87f7mI/7hE/6lE/7jM/6nM/7gi/6ki/7iq/6mq/7hm/6lm/7jg981/d83w/80Ic+8iM/5u/wd/q7/N3+Hn+vv8/f7x/wD/qH/MP+Ef+of8w/7p/wT/qn/NP+Gf+sf86P8y/4F/1L/mX/in/Vv+Zf92/4N/1b/m3/jn/Xv+ff9x/4D/1H/mP/if/Uf+Y/91/4L/1X/mv/jf/Wf+e/9z/4H/1P/mf/i//V/+Z/93/4P/1f/m//j//X/+fHBUmCpEGyIHmQIkgZpApSB2mCtKnj4uKCDEHGIFOQOcgSZA2yBdmDHEHOIFeQO8gT5A3yBfmDAkHBoFBQOCgSFA2KBcWDEkHJoFRQOigTlA3KBeWDCkHFoFJQOagSVA2qBdWDGkHNoFZQO6gT1A3qBfWDBkHDoFHQOGgSNA2aBc2DFkHLoFXQOmgTtA3aBe2DDkHHoFPQOegSdA26Bd2DHkHPoFfQO+gT9A36BfFB/yAhGBAMDAYFg4MhwdBgWDA8GBGMDEYFo4MxwdhgXDA+mBBMDCYFk4MpwdRgWjA9mBHMDGYFs4M5wdxgXjA/WBAkBguDRcHiYEmwNFgWLA9WBCuDVcHqYE2wNlgXrA82BBuDTcHmYEuwNdgWbA+wAA+IgAyogA6YgA24gA+EQAykQA6UQA20QA+MwAyswA6cAARu4AV+EARhAAMUREEs2BHsDHYFu4M9wd5gX7A/OBAcDA4Fh4MjwdHgWHA8OBGcDE4Fp4MzwdngXHA+uBBcDC4Fl4MrwdXgWnA9uBHcDG4Ft4M7wd3gXnA/eBA8DB4Fj4MnwdPgWfA8eBG8DF4Fr4M3wdvgXfA++BB8DD4Fn4MvwdfgW/A9+BH8DH4Fv4M/wd/gXxAXJgmThsnC5GGKMGWYKkwdpgnThunC9GGGMGOYKcwcZgmzDjwfZg9zhDnDXGHuME+YN8wX5g8LhAXDQmHhsEhYNCwWFg9LhCXDUmHpsExYNiwXlg8rhBXDSmHlsEpYNawWVg9rhDXDWmHtsE5YN6wX1g8bhA3DRmHjsEnYNGwWNg9bhC3DVmHrsE3YNmwXtg87hB3DTmHnsEvYNewWdg97hD3DXmHvsE/YN+wXxof9w4RwQDgwHBQODoeEQ8Nh4fBwRDgyHBWODseEY8Nx4fhwQjgxnBRODqeEU8Np4fRwRjgznBXODueEc8N54fxwQZgYLgwXhYvDJeHScFm4PFwRrgxXhavDNeHacF24PtwQbgw3hZvDLeHWcFu4PcRCPCRCMqRCOmRCNuRCPhRCMZRCOVRCNdRCPTRCM7RCO3RCELqhF/phEIYhDFEYhbFwR7gz3BXuDveEe8N94f7wQHgwPBQeDo+ER8Nj4fHwRHgyPBWeDs+EZ8Nz4fnwQngxvBReDq+EV8Nr4fXwRngzvBXeDu+Ed8N74f3wQfgwfBQ+Dp+ET8Nn4fPwRfgyfBW+Dt+Eb8N34fvwQ/gx/BR+Dr+EX8Nv4ffwR/gz/BX+Dv+Ef8N/YRxMApPCZDA5TAFTwlQwNUwD08J0MD3MADPCTDAzzAKzwmwwO8wBc8JcMDfMA/PCfDA/LAALwkKwMCwCi8JisDgsAUvCUrA0LAPLwnKwPKwAK8JKsDKsAqvCarA6rAFrwlqwNqwD68J6sD5sABvCRrAxbAKbwmawOWwBW8JWsDVsA9vCdrA97AA7wk6wM+wCu8JusDvsAXvCXrA37AP7wn4wHvaHCXAAHAgHwcFwCBwKh8HhcAQcCUfB0XAMHAvHwfFwApwIJ8HJcAqcCqfB6XAGnAlnwdlwDpwL58H5cAFMhAvhIrgYLoFL4TK4HK6AK+EquBqugWvhOrgeboAb4Sa4GW6BW+E2uB1iEIcEJCEFachAFnKQhwIUoQRlqEAValCHBjShBW3oQABd6EEfBjCEECIYwRjcAXfCXXA33AP3wn1wPzwAD8JD8DA8Ao/CY/A4PAFPwlPwNDwDz8Jz8Dy8AC/CS/AyvAKvwmvwOrwBb8Jb8Da8A+/Ce/A+fAAfwkfwMXwCn8Jn8Dl8AV/CV/A1fAPfwnfwPfwAP8JP8DP8Ar/Cb/A7/AF/wl/wN/wD/8J/MA4lQUlRMpQcpUApUSqUGqVBaVE6lB5lQBlRJpQZZUFZUTaUHeVAOVEulBvlQXlRPpQfFUAFUSFUGBVBRVExVByVQCVRKVQalUFlUTlUHlVAFVElVBlVQVVRNVQd1UA1US1UG9VBdVE9VB81QA1RI9QYNUFNUTPUHLVALVEr1Bq1QW1RO9QedUAdUSfUGXVBXVE31B31QD1RL9Qb9UF9UT8Uj/qjBDQADUSD0GA0BA1Fw9BwNAKNRKPQaDQGjUXj0Hg0AU1Ek9BkNAVNRdPQdDQDzUSz0Gw0B81F89B8tAAlooVoEVqMlqClaBlajlaglWgVWo3WoLVoHVqPNqCNaBPajLagrWgb2o4whCMCkYhCNGIQizjEIwGJSEIyUpCKNKQjA5nIQjZyEEAu8pCPAhQiiBCKUAztQDvRLrQb7UF70T60Hx1AB9EhdBgdQUfRMXQcnUAn0Sl0Gp1BZ9E5dB5dQBfRJXQZXUFX0TV0Hd1AN9EtdBvdQXfRPXQfPUAP0SP0GD1BT9Ez9By9QC/RK/QavUFv0Tv0Hn1AH9En9Bl9QV/RN/Qd/UA/0S/0G/1Bf9E/FBcliZJGyaLkUYooZZQqSh2lidJG6aL0UYYoY5QpyhxlibJG2aLsUY4oZ5Qryh3lifJG+aL8UYGoYFQoKhwViYpGxaLiUYmoZFQqKh2VicpG5aLyUYWoYlQpqhxViapG1aLqUY2oZlQrqh3ViepG9aL6UYOoYdQoahw1iZpGzaLmUYuoZdQqah21idpG7aL2UYeoY9Qp6hx1ibpG3aLuUY+oZ9Qr6h31ifpG/aL4qH+UEA2IBkaDosHRkGhoNCwaHo2IRkajotHRmGhsNC4aH02IJkaTosnRlGhqNC2aHs2IZkazotnRnGhuNC+aHy2IEqOF0aJocbQkWhoti5ZHK6KV0apodbQmWhuti9ZHG6KN0aZoc7Ql2hpti7ZHWIRHRERGVERHTMRGXMRHQiRGUiRHSqRGWqRHRmRGVmRHTgQiN/IiPwqiMIIRiqIoFu2Idka7ot3RnmhvtC/aHx2IDkaHosPRkehodCw6Hp2ITkanotPRmehsdC46H12ILkaXosvRlehqlBgXF3cjuhndim5Hd6K70b3ofvQgehg9ih5HT6Kn0bPoefQiehm9il5Hb6K30bvoffQh+hh9ij5HX6Kv0bfoe/Qj+hn9in5Hf6K/0b8oLpYkljSWLJY8liKWMpYqljqWJpY2li6WPpYhljGWKZY5liWWNZYtlj2WI5YzliuWO5YnljeWL5Y/ViBWMFYoVjhWJFY0VixWPFYiVjJWKlY6ViZWNlYuVj5WIVYxVilWOVYlVjVWLVY9ViNWM1YrVjtWJ1Y3Vi9WP9Yg1jDWKNY41iTWNNYs1jzWItYy1irWOtYm1jbWLtY+1iHWMdYp1jnWJdY11i3WPdYj1jPWK9bjvwAb/z8S4DEwb24BAHC77ets27Zt27Ztu7Nt23Zs8yQ5OXln2/Z6f9wH648NwAZig7DB2BBsKDYMG46NwEZio7DR2BhsLDYOG49NwCZik7DJ2BRsKjYNm47NwGZis7DZ2BxsLjYPm48twBZiidgibDG2BFuKLcOWYyuwldgqbDW2BluLrcPWYxuwjdgmbDO2BduKbcO2YzuwndgubDe2B9uL7cP2Ywewg9gh7DB2BDuKHcOOYyewk9gp7DR2BjuLncPOYxewi9gl7DJ2BbuKXcOuYzcwDMMxAiMxCqMxBmMxDuMxARMxCZMxBVMxDdMxAzMxC7MxB3MxgHmYjwUYxEIMYREWw25it7Db2B3sLnYPu489wB5ij7DH2BPsKfYMe469wF5ir7DX2BvsLfYOe499wD5in7DP2BfsK/YN+479wH5iv7Df2B/sL/YPS8Li8Hg8GZ4cT4H/hyfgKfFUeGo8DZ4WT4enxzPgGfFMeGY8C54Vz4Znx3PgOfFceG48D54Xz4fnxwvgBfFCeGG8CF4UL4YXx0vgJfFSeGm8DF4WL4eXxyvgFfFKeGW8Cl4Vr4ZXx2vgNfFaeG28Dl4Xr4fXxxvgDfFGeGO8Cd4Ub4Y3x1vgLfFWeGu8Dd4Wb4e3xzvgHfFOeGe8C94V74Z3x3vgPfFeeG+8D94X74f3xwfgA/FB+GB8CD4UH4YPx0fgI/FR+Gh8DD4WH4ePxyfgE/FJ+GR8Cj4Vn4ZPx2fgM/FZ+Gx8Dj4Xn4fPxxfgC/FEfBG+GF+CL8WX4cvxFfhKfBW+Gl+Dr8XX4evxDfhGfBO+Gd+Cb8W34dvxHfhOfBe+G9+D78X34fvxA/hB/BB+GD+CH8WP4cfxE/hJ/BR+Gj+Dn8XP4efxC/hF/BJ+Gb+CX8Wv4dfxGziG4ziBkziF0ziDsziH87iAi7iEy7iCq7iG67iBm7iF27iDuzjAPdzHAxziIY7wCI/hN/Fb+G38Dn4Xv4ffxx/gD/FH+GP8Cf4Uf4Y/x1/gL/FX+Gv8Df4Wf4e/xz/gH/FP+Gf8C/4V/4Z/x3/gP/Ff+G/8D/4X/4cn4XFEPJGMSE6kIP4jEoiURCoiNZGGSEukI9ITGYiMRCYiM5GFyEpkI7ITOYicRC4iN5GHyEvkI/ITBYiCRCGiMFGEKEoUI4oTJYiSRCmiNFGGKEuUI8oTFYiKRCWiMlGFqEpUI6oTNYiaRC2iNlGHqEvUI+oTDYiGRCOiMdGEaEo0I5oTLYiWRCuiNdGGaEu0I9oTHYiORCeiM9GF6Ep0I7oTPYieRC+iN9GH6Ev0I/oTA4iBxCBiMDGEGEoMI4YTI4iRxChiNDGGGEuMI8YTE4iJxCRiMjGFmEpMI6YTM4iZxCxiNjGHmEvMI+YTC4iFRCKxiFhMLCGWEsuI5cQKYiWxilhNrCHWEuuI9cQGYiOxidhMbCG2EtuI7cQOYiexi9hN7CH2EvuI/cQB4iBxiDhMHCGOEseI48QJ4iRxijhNnCHOEueI88QF4iJxibhMXCGuEteI68QNAiNwgiBIgiJogiFYgiN4QiBEQiJkQiFUQiN0wiBMwiJswiFcAiTExcURAQGJkEBERMSIm8Qt4jZxh7hL3CPuEw+Ih8Qj4jHxhHhKPCOeEy+Il8Qr4jXxhnhLvCPeEx+Ij8Qn4jPxhfhKfCO+Ez+In8Qv4jfxh/hL/COSiDgynkxGJidTkP+RCWRKMhWZmkxDpiXTkenJDGRGMhOZmcxCZiWzkdnJHGROMheZm8xD5iXzkfnJAmRBshBZmCxCFiWLkcXJEmRJshRZmixDliXLkeXJCmRFshJZmaxCViWrkdXJGmRNshZZm6xD1iXrkfXJBmRDshHZmGxCNiWbkc3JFmRLshXZmmxDtiXbke3JDmRHshPZmexCdiW7kd3JHmRPshfZm+xD9iX7kf3JAeRAchA5mBxCDiWHkcPJEeRIchQ5mhxDjiXHkePJCeREchI5mZxCTiWnkdPJGeRMchY5m5xDziXnkfPJBeRCMpFcRC4ml5BLyWXkcnIFuZJcRa4m15BryXXkenIDuZHcRG4mt5BbyW3kdnIHuZPcRe4m95B7yX3kfvIAeZA8RB4mj5BHyWPkcfIEeZI8RZ4mz5BnyXPkefICeZG8RF4mr5BXyWvkdfIGiZE4SZAkSZE0yZAsyZE8KZAiKZEyqZAqqZE6aZAmaZE26ZAuCUiP9MmAhGRIIjIiY+RN8hZ5m7xD3iXvkffJB+RD8hH5mHxCPiWfkc/JF+RL8hX5mnxDviXfke/JD+RH8hP5mfxCfiW/kd/JH+RP8hf5m/xD/iX/kUlkHBVPJaOSUymo/6gEKiWVikpNpaHSUumo9FQGKiOVicpMZaGyUtmo7FQOKieVi8pN5aHyUvmo/FQBqiBViCpMFaGKUsWo4lQJqiRViipNlaHKUuWo8lQFqiKVgqpMVaGqUtWo6lQNqiZVi6pN1aHqUvWo+lQDqiHViGpMNaGaUs2o5lQLqiXVimpNtaHaUu2o9lQHqiPViepMdaG6Ut2o7lQPqifVi+pN9aH6Uv2o/tQAaiA1iBpMDaGGUsOo4dQIaiQ1ihpNjaHGUuOo8dQEaiI1iZpMTaGmUtOo6dQMaiY1i5pNzaHmUvOo+dQCaiGVSC2iFlNLqKXUMmo5tYJaSa2iVlNrqLXUOmo9tYHaSG2iNlNbqK3UNmo7tYPaSe2idlN7qL3UPmo/dYA6SB2iDlNHqKPUMeo4dYI6SZ2iTlNnqLPUOeo8dYG6SF2iLlNXqKvUNeo6dYPCKJwiKJKiKJpiKJbiKJ4SKJGSKJlSKJXSKJ0yKJOyKJtyKJcClEf5VEBBKqQQFVEx6iZ1i7pN3aHuUveo+9QD6iH1iHpMPaGeUs+o59QL6iX1inpNvaHeUu+o99QH6iP1ifpMfaG+Ut+o79QP6if1i/pN/aH+Uv+oJCqOjqeT0cnpFPR/dAKdkk5Fp6bT0GnpdHR6OgOdkc5EZ6az0FnpbHR2Ogedk85F56bz0HnpfHR+ugBdkC5EF6aL0EXpYnRxugRdki5Fl6bL0GXpcnR5ugJdka5EV6ar0FXpanR1ugZdk65F16br0HXpenR9ugHdkG5EN6ab0E3pZnRzugXdkm5Ft6bb0G3pdnR7ugPdke5Ed6a70F3pbnR3ugfdk+5F96b70H3pfnR/egA9kB5ED6aH0EPpYfRwegQ9kh5Fj6bH0GPpcfR4egI9kZ5ET6an0FPpafR0egY9k55Fz6bn0HPpefR8egG9kE6kF9GL6SX0UnoZvZxeQa+kV9Gr6TX0WnodvZ7eQG+kN9Gb6S30VnobvZ3eQe+kd9G76T30XnofvZ8+QB+kD9GH6SP0UfoYfZw+QZ+kT9Gn6TP0WfocfZ6+QF+kL9GX6Sv0VfoafZ2+QWM0ThM0SVM0TTM0S3M0Twu0SEu0TCu0Smu0Thu0SVu0TTu0SwPaSx4XF0dDOqQRHdEx+iZ9i75N36Hv0vfo+/QD+iH9iH5MP6Gf0s/o5/QL+iX9in5Nv6Hf0u/o9/QH+iP9if5Mf6G/0t/o7/QP+if9i/5N/6H/0v/oJDqOiWeSMcmZFMx/TAKTkknFpGbSMGmZdEx6JgOTkcnEZGayMFmZbEx2JgeTk8nF5GbyMHmZfEx+pgBTkCnEFGaKMEWZYkxxpgRTkinFlGbKMGWZckx5pgJTkanEVGaqMFWZakx1pgZTk6nF1GbqMHWZekx9pgHTkGnENGaaME2ZZkxzpgXTkmnFtGbaMG2Zdkx7pgPTkenEdGa6MF2Zbkx3pgfTk+nF9Gb6MH2Zfkx/ZgAzkBnEDGaGMEOZYcxwZgQzkhnFjGbGMGOZccx4ZgIzkZnETGamMFOZacx0ZgYzk5nFzGbmMHOZecx8ZgGzkElkFjGLmSXMUmYZs5xZwaxkVjGrmTXMWmYds57ZwGxkNjGbmS3MVmYbs53ZwexkdjG7mT3MXmYfs585wBxkDjGHmSPMUeYYc5w5wZxkTjGnmTPMWeYcc565wFxkLjGXmSvMVeYac525wWAMzhAMyVAMzTAMy3AMzwiMyEiMzCiMymiMzhiMyViMzTiMywDGY3wmYCATMoiJmBhzk7nF3GbuMHeZe8x95gHzkHnEPGaeME+ZZ8xz5gXzknnFvGbeMG+Zd8x75gPzkfnEfGa+MF+Zb8x35gfzk/nF/Gb+MH+Zf0wSE8fGs8nY5GwK9j82gU3JpmJTs2nYtGw6Nj2bgc3IZmIzs1nYrGw2Njubg83J5mJzs3nYvGw+Nj9bgC3IFmILs0XYomwxtjhbgi3JlmJLs2XYsmw5tjxbga3IVmIrs1XYqmw1tjpbg63J1mJrs3XYumw9tj7bgG3INmIbs03Ypmwztjnbgm3JtmJbs23Ytmw7tj3bge3IdmI7s13Yrmw3tjvbg+3J9mJ7s33Yvmw/tj87gB3IDmIHs0PYoewwdjg7gh3JjmJHs2PYsew4djw7gZ3ITmIns1PYqew0djo7g53JzmJns3PYuew8dj67gF3IJrKL2MXsEnYpu4xdzq5gV7Kr2NXsGnYtu45dz25gN7Kb2M3sFnYru43dzu5gd7K72N3sHnYvu4/dzx5gD7KH2MPsEfYoe4w9zp5gT7Kn2NPsGfYse449z15gL7KX2MvsFfYqe429zt5gMRZnCZZkKZZmGZZlOZ9nBVZkJVZmFVZlNVZnDdZkLdZmHdZlAeuxPhuwkA1ZxEZsjL3J3mJvs3fYu+w99j77gH3IPmIfs0/Yp+wz9jn7gn3JvmJfs2/Yt+w79j37gf3IfmI/s1/Yr+w39jv7g/3J/mJ/s3/Yv+w/NomN4+Ljk/6PS+BScqm41FwaLi2XjkvPZeAycpm4zFwWLiuXjcvO5eBycrm43FweLi+Xj8vPFeAKcoW4wlwRrihXjCvOleBKcqW40lwZrixXjivPVeAqcpW4ylwVripXjavO1eBqcrW42lwdri5Xj6vPNeAaco24xlwTrinXjGvOteBacq241lwbri3XjmvPdeA6cp24zlwXrivXjevO9eB6cr243lwfri/Xj+vPDeAGcoO4wdwQbig3jBvOjeBGcqO40dwYbiw3jhvPTeAmcpO4ydwUbio3jZvOzeBmcrO42dwcbi43j5vPLeAWconcIm4xt4Rbyi3jlnMruJXcKm41t4Zby63j1nMbuI3cJm4zt4Xbym3jtnM7uJ3cLm43t4fby+3j9nMHuIPcIe4wd4Q7yh3jjnMnuJPcKe40d4Y7y53jznMXuIvcJe4yd4W7yl3jrnM3OIzDOYIjOYqjOYZjOY7jOYETOYmTOYVTOY3TOYMzOYuzOYdzOcB5nM8FHORCDnERF+Nucre429wd7i53j7vPPeAeco+4x9wT7in3jHvOveBecq+419wb7i33jnvPfeA+cp+4z9wX7iv3jfvO/eB+cr+439wf7i/3j0vi4vh4PhmfnE/B/8cn8Cn5VHxqPg2flk/Hp+cz8Bn5THxmPguflc/GZ+dz8Dn5XHxuPg+fl8/H5+cL8AX5QnxhvghflC/GF+dL8CX5Unxpvgxfli/Hl+cr8BX5Snxlvgpfla/GV+dr8DX5Wnxtvg5fl6/H1+cb8A35RnxjvgnflG/GN+db8C35Vnxrvg3flm/Ht+c78B35Tnxnvgvfle/Gd+d78D35Xnxvvg/fl+/H9+cH8AP5Qfxgfgg/lB/GD+dH8CP5Ufxofgw/lh/Hj+cn8BP5Sfxkfgo/lZ/GT+dn8DP5Wfxsfg4/l5/Hz+cX8Av5RH4Rv5hfwi/ll/HL+RX8Sn4Vv5pfw6/l1/Hr+Q38Rn4Tv5nfwm/lt/Hb+R38Tn4Xv5vfw++N38fv5w/wB/lD/GH+CH+UP8Yf50/wJ/lT/Gn+DH+WP8ef5y/wF/lL/GX+Cn+Vv8Zf52/wGI/zBE/yFE/zDM/yHM/zAi/yEi/zCq/yGq/zBm/yFm/zDu/ygPd4nw94yIc84iM+xt/kb/G3+Tv8Xf4ef59/wD/kH/GP+Sf8U/4Z/5x/wb/kX/Gv+Tf8W/4d/57/wH/kP/Gf+S/8V/4b/53/wf/kf/G/+T/8X/4fn8THCfFCMiG5kEL4T0gQUgqphNRCGiGtkE5IL2QQMgqZhMxCFiGrkE3ILuQQcgq5hNxCHiGvkE/ILxQQCgqFhMJCEaGoUEwoLpQQSgqlhNJCGaGsUE4oL1QQKgqVhMpCFaGqUE2oLtQQagq1hNpCHaGuUE+oLzQQGgqNhMZCE6Gp0ExoLrQQWgqthNZCG6Gt0E5oL3QQOgqdhM5CF6Gr0E3oLvQQegq9hN5CH6Gv0E/oLwwQBgqDhMHCEGGoMEwYLowQRgqjhNHCGGGsME4YL0wQJgqThMnCFGGqME2YLswQZgqzhNnCHGGuME+YLywQFgqJwiJhsbBEWCosE5YLK4SVwiphtbBGWCusE9YLG4SNwiZhs7BF2CpsE7YLO4Sdwi5ht7BH2CvsE/YLB4SDwiHhsHBEOCocE44LJ4STwinhtHBGOCucE84LF4SLwiXhsnBFuCpcE64LNwRMwAVCIAVKoAVGYAVO4AVBEAVJkAVFUAVN0AVDMAVLsAVHcAUgeIIvBAIUQgEJkRATbgq3hNvCHeGucE+4LzwQHgqPhMfCE+Gp8Ex4LrwQXgqvhNfCG+Gt8E54L3wQPgqfhM/CF+Gr8E34LvwQfgq/hN/CH+Gv8E9IEuLEeDGZmFxMIf4nJogpxVRiajGNmFZMJ6YXM4gZxUxiZjGLmFXMJmYXc4g5xVxibjGPmFfMJ+YXC4gFxUJiYbGIWFQsJhYXS4glxVJiabGMWFYsJ5YXK4gVxUpiZbGKWFVMiKsu1hBrirXE2mIdsa5YT6wvNhAbio3ExmITsanYTGwuthBbiq3E1mIbsa3YTmwvdhA7ip3EzmIXsavYTewu9hB7ir3E3mIfsa/YT+wvDhAHioPEweIQcag4TBwujhBHiqPE0eIYcaw4ThwvThAnipPEyeIUcao4LS6FOEOcKc4SZ4tzxLniPHG+uEBcKCaKi8TF4hJxqbhMXC6uEFeKq8TV4hpxrbhOXC9uEDeKm8TN4hZxq7hN3C7uEHeKu8Td4h5xr7hP3C8eEA+Kh8TD4hHxqHhMPC6eEE+Kp8TT4hnxrHhOPC9eEC+Kl8TL4hXxqnhNvC7eEDERFwmRFCmRFhmRFTmRFwVRFCVRFhVRFTVRFw3RFC3RFh3RFYHoib4YiFAMRSRGYky8Kd4Sb4t3xLviPfG++EB8KD4SH4tPxKfiM/G5+EJ8Kb4SX4tvxLfiO/G9+EH8KH4SP4tfxK/iN/G7+EP8Kf4Sf4t/xL/iPzFJjJPipWRSciku8T8pQUoppZJSS2mktFI6Kb2UQcooZZIyS1mkrFI2KbuUQ8op5ZJyS3mkvFI+Kb9UQCooFZIKS0WkolIxqbhUQioplZJKS2WkslI5qbxUQaooVZIqS1WkqlI1qbpUQ6op1ZJqS3WkulI9qb7UQGooNZIaS02kplIzqbnUQmoptZJaS22ktlI7qb3UQeoodZI6S12krlI3qbvUQ+op9ZJ6S32kvlI/qb80QBooDZIGS0OkodIwabg0QhopjZJGS2OksdI4abw0QZooTZImS1OkqdI0abo0Q5opzZJmS3OkudI8ab60QFooJUqLpMXSEmmptExaLq2QVkqrpNXSGmmttE5aL22QNkqbpM3SFmmrtE3aLu2Qdkq7pN3SHmmvtE/aLx2QDkqHpMPSEemodEw6Lp2QTkqnpNPSGemsdE46L12QLkqXpMvSFemqdE26Lt2QMAmXCImUKImWGImVOImXBEmUJEmWFEmVNEmXDMmULMmWHMmVgORJvhRIUAolJEVSTLop3ZJuS3eku9I96b70QHooPZIeS0+kp9Iz6bn0QnopvZJeS2+kt9I76b30QfoofZI+S1+kr9I36bv0Q/op/ZJ+S3+kv9I/KUmKk+PlZHJyOYX8n5wgp5RTyanlNHJaOZ2cXs4gZ5QzyZnlLHJWOZucXc4h55RzybnlPHJeOZ+cXy4gF5QLyYXlInJRuZhcXC4hl5RLyaXlMnJZuZxcXq4gV5QryZXlKnJVuZpcXa4h15RrybXlOnJduZ5cX24gN5QbyY3lJnJTuZncXG4ht5Rbya3lNnJbuZ3cXu4gd5Q7yZ3lLnJXuZvcXe4h95R7yb3lPnJfuZ/cXx4gD5QHyYPlIfJQeZg8XB4hj5RHyaPlMfJYeZw8Xp4gT5QnyZPlKfJUeZo8XZ4hz5RnybPlOfJceZ48X14gL5QT5UXyYnmJvFReJi+XV8gr5VXyanmNvFZeJ6+XN8gb5U3yZnmLvFXeJm+Xd8g75V3ybnmPvFfeJ++XD8gH5UPyYfmIfFQ+Jh+XT8gn5VPyafmMfFY+J5+XL8gX5UvyZfmKfFW+Jl+Xb8iYjMuETMqUTMuMzMqczMuCLMqSLMuKrMqarMuGbMqWbMuO7MpA9mRfDmQohzKSIzkm35RvybflO/Jd+Z58X34gP5QfyY/lJ/JT+Zn8XH4hv5Rfya/lN/Jb+Z38Xv4gf5Q/yZ/lL/JX+Zv8Xf4h/5R/yb/lP/Jf+Z+cJMcp8UoyJbmSQvlPSVBSKqmU1EoaJa2STkmvZFAyKpmUzEoWJauSTcmu5FByKrmU3EoeJa+ST8mvFFAKKoWUwkoRpahSTCmulFBKKqWU0koZpaxSTimvVFAqKpWUykoVpapSTamu1FBqKrWU2kodpa5ST6mvNFAaKo2UxkoTpanSTGmutFBaKq2U1kobpa3STmmvdFA6Kp2UzkoXpavSTemu9FB6Kr2U3kofpa/ST+mvDFAGKoOUwcoQZagyTBmujFBGKqOU0coYZawyThmvTFAmKpOUycoUZaoyTZmuzFBmKrOU2cocZa4yT5mvLFAWKonKImWxskRZqixTlisrlJXKKmW1skZZq6xT1isblI3KJmWzskXZqmxTtis7lJ3KLmW3skfZq+xT9isHlIPKIeWwckQ5qhxTjisnlJPKKeW0ckY5q5xTzisXlIvKJeWyckW5qlxTris3FEzBFUIhFUqhFUZhFU7hFUERFUmRFUVRFU3RFUMxFUuxFUdxFaB4iq8EClRCBSmRElNuKreU28od5a5yT7mvPFAeKo+Ux8oT5anyTHmuvFBeKq+U18ob5a3yTnmvfFA+Kp+Uz8oX5avyTfmu/FB+Kr+U38of5a/yT0lS4tR4NZmaXE2h/qcmqCnVVGpqNY2aVk2nplczqBnVTGpmNYuaVc2mZldzqDnVXGpuNY+aV82n5lcLqAXVQmphtYhaVC2mFldLqCXVUmpptYxaVi2nllcrqBXVSmpltYpaVa2mVldrqDXVWmpttY5aV62n1lcbqA3VRmpjtYnaVG2mNldbqC3VVmprtY3aVm2ntlc7qB3VTmpntYvaVe2mdld7qD3VXmpvtY/aV+2n9lcHqAPVQepgdYg6VB2mDldHqCPVUepodYw6Vh2njlcnqBPVSepkdYo6VZ2mTldnqDPVWepsdY46V52nzlcXqAvVRHWRulhdoi5Vl6nL1RXqSnWVulpdo65V16nr1Q3qRnWTulndom5Vt6nb1R3qTnWXulvdo+5V96n71QPqQfWQelg9oh5Vj6nH1RPqSfWUelo9o55Vz6nn1QvqRfWSelm9ol5Vr6nX1RsqpuIqoZIqpdIqo7Iqp/KqoIqqpMqqoqqqpuqqoZqqpdqqo7oqUD3VVwMVqqGK1EiNqTfVW+pt9Y56V72n3lcfqA/VR+pj9Yn6VH2mPldfqC/VV+pr9Y36Vn2nvlc/qB/VT+pn9Yv6Vf2mfld/qD/VX+pv9Y/6V/2nJqlxWryWTEuupdD+0xK0lFoqLbWWRkurpdPSaxm0jFomLbOWRcuqZdOyazm0nFouLbeWR8ur5dPyawW0glohrbBWRCuqFdOKayW0kloprbRWRiurldPKaxW0ilolrbJWRauqVdOqazW0mlotrbZWR6ur1dPqaw20hlojrbHWRGuqNdOaay20llorrbXWRmurtdPaax20jlonrbPWReuqddO6az20nlovrbfWR+ur9dP6awO0gdogbbA2RBuqDdOGayO0kdoobbQ2RhurjdPGaxO0idokbbI2RZuqTdOmazO0mdosbbY2R5urzdPmawu0hVqitkhbrC3RlmrLtOXaCm2ltkpbra3R1mrrtPXaBm2jtknbrG3RtmrbtO3aDm2ntkvbre3R9mr7tP3aAe2gdkg7rB3RjmrHtOPaCe2kdko7rZ3RzmrntPPaBe2idkm7rF3RrmrXtOvaDQ3TcI3QSI3SaI3RWI3TeE3QRE3SZE3RVE3TdM3QTM3SbM3RXA1onuZrgQa1UENapMW0m9ot7bZ2R7ur3dPuaw+0h9oj7bH2RHuqPdOeay+0l9or7bX2RnurvdPeax+0j9on7bP2RfuqfdO+az+0n9ov7bf2R/ur/dOStDg9Xk+mJ9dT6P/pCXpKPZWeWk+jp9XT6en1DHpGPZOeWc+iZ9Wz6dn1HHpOPZeeW8+j59Xz6fn1AnpBvZBeWC+iF9WL6cX1EnpJvZReWi+jl9XL6eX1CnpFvZJeWa+iV9Wr6dX1GnpNvZZeW6+j19Xr6fX1BnpDvZHeWG+iN9Wb6c31FnpLvZXeWm+jt9Xb6e31DnpHvZPeWe+id9W76d31HnpPvZfeW++j99X76f31AfpAfZA+WB+iD9WH6cP1EfpIfZQ+Wh+jj9XH6eP1CfpEfZI+WZ+iT9Wn6dP1GfpMfZY+W5+jz9Xn6fP1BfpCPVFfpC/Wl+hL9WX6cn2FvlJfpa/W1+hr9XX6en2DvlHfpG/Wt+hb9W36dn2HvlPfpe/W9+ip4/bp+/UD+kH9kH5YP6If1Y/px/UT+kn9lH5aP6Of1c/p5/UL+kX9kn5Zv6Jf1a/p1/UbOqbjOqGTOqXTOqOzOqfzuqCLuqTLuqKruqbruqGbuqXbuqO7OtA93dcDHeqhjvRIj+k39Vv6bf2Ofle/p9/XH+gP9Uf6Y/2J/lR/pj/XX+gv9Vf6a/2N/lZ/p7/XP+gf9U/6Z/2L/lX/pn/Xf+g/9V/6b/2P/lf/pyfpcUa8kcxIbqQw/jMSjJRGKiO1kcZIa6Qz0hsZjIxGJiOzkcXIamQzshs5jJxGLiO3kcfIa+Qz8hsFjIJGIaOwUcQoahQzihsljJJGKaO0UcYoa5QzyhsVjIpGJaOyUcWoalQzqhs1jJpGLaO2Uceoa9Qz6hsNjIZGI6Ox0cRoajQzmhstjJZGK6O10cZoa7Qz2hsdjI5GJ6Oz0cXoanQzuhs9jJ5GL6O30cfoa/Qz+hsDjIHGIGOwMcQYagwzhhsjjJHGKGO0McYYa4wzxhsTjInGJGOyMcWYakwzphszjJnGLGO2MceYa8wz5hsLjIVGorHIWGwsMZYay4zlxgpjpbHKWG2sMdYa64z1xgZjo7HJ2GxsMbYa24ztxg5jp7HL2G3sMfYa+4z9xgHjoHHIOGwcMY4ax4zjxgnjpHHKOG2cMc4a54zzxgXjonHJuGxcMa4a14zrxg0DM3CDMEiDMmiDMViDM3hDMERDMmRDMVRDM3TDMEzDMmzDMVwDGJ7hG4EBjdBARmTEjJvGLeO2cce4a9wz7hsPjIfGI+Ox8cR4ajwznhsvjJfGK+O18cZ4a7wz3hsfjI/GJ+Oz8cX4anwzvhs/jJ/GL+O38cf4a/wzkow4M95MZiY3U5j/mQlmSjOVmdpMY6Y105npzQxmRjOTmdnMYmY1s5nZzRxmTjOXmdvMY+Y185n5zQJmQbOQWdgsYhY1i5nFzRJmSbOUWdosY5Y1y5nlzQpmRbOSWdmsYlY1q5nVzRpmTbOWWdusY9Y165n1zQZmQ7OR2dhsYjY1m5nNzRZmS7OV2dpsY7Y125ntzQ5mR7OT2dnsYnY1u5ndzR5mT7OX2dvsY/Y1+5n9zQHmQHOQOdgcYg41h5nDzRHmSHOUOdocY441x5njzQnmRHOSOdmcYk41p5nTzRnmTHOWOducY84155nzzQXmQjPRXGQuNpeYS81l5nJzhbmy8ipztbnGXGuuM9ebG8yN5iZzs7nF3GpuM7ebO8yd5i5zt7nH3GvuM/ebB8yD5iHzsHnEPGoeM4+bJ8yT5inztHnGPGueM8+bF8yL5iXzsnnFvGpeM6+bN0zMxE3CJE3KpE3GZE3O5E3BFE3JlE3FVE3N1E3DNE3LtE3HdE1geqZvBiY0QxOZkRkzb5q3zNvmHfOuec+8bz4wH5qPzMfmE/Op+cx8br4wX5qvzNfmG/Ot+c58b34wP5qfzM/mF/Or+c38bv4wf5q/zN/mH/Ov+c9MMuOseCuZldxKYf1nJVgprVRWaiuNldZKZ6W3MlgZrUxWZiuLldXKZmW3clg5rVxWbiuPldfKZ+W3ClgFrUJWYauIVdQqZhW3SlglrVJWaauMVdYqZ5W3KlgVrUpWZauKVdWqZlW3alg1rVpWbauOVdeqZ9W3GlgNrUZWY6uJ1dRqZjW3WlgtrVZWa6uN1dZqZ7W3OlgdrU5WZ6uL1dXqZnW3elg9rV5Wb6uP1dfqZ/W3BlgDrUHWYGuINdQaZg23RlgjrVHWaGuMNdYaZ423JlgTrUnWZGuKNdWaZk23ZlgzrVnWbGuONdeaZ823FlgLrURrkbXYWmIttZZZy60V1kprlbXaWmOttdZZ660N1kZrk7XZ2mJttbZZ260d1k5rl7Xb2mPttfZZ+60D1kHrkHXYOmIdtY5Zx60T1knrlHXaOmOdtc5Z560L1kXrknXZumJdta5Z160bFmbhFmGRFmXRFmOxFmfxlmCJlmTJlmKplmbplmGZlmXZlmO5FrA8y7cCC1qhhazIilk3rVvWbeuOdde6Z923HlgPrUfWY+uJ9dR6Zj23XlgvrVfWa+uN9dZ6Z723PlgfrU/WZ+uL9dX6Zn23flg/rV/Wb+uP9df6ZyVZcXa8ncxObqew/7MT7JR2Kju1ncZOa6ez09sZ7Ix2JjuzncXOamezs9s57Jx2Lju3ncfOa+ez89sF7IJ2IbuwXcQuahezi9sl7JJ2Kbu0XcYua5ezy9sV7Ip2JbuyXcWualezq9s17Jp2Lbu2Xceua9ez69sN7IZ2I7ux3cRuajezm9st7JZ2K7u13cZua7ez29sd7I52J7uz3cXuanezu9s97J52L7u33cfua/ez+9sD7IH2IHuwPcQeag+zh9sj7JH2KHu0PcYea4+zx9sT7In2JHuyPcWeak+zp9sz7Jn2LHu2Pceea8+z59sL7IV2or3IXmwvsZfay+zl9gp7pb3KXm2vsdfa6+z19gZ7o73J3mxvsbfa2+zt9g57p73L3m3vsffa++z99gH7oH3IPmwfsY/ax+zj9gn7pH3KPm2fsc/a5+zz9gX7on3Jvmxfsa/a1+zr9g0bs3GbsEmbsmmbsVmbs3lbsEVbsmVbsVVbs3XbsE3bsm3bsV0b2J7t24EN7dBGdmTH7Jv2Lfu2fce+a9+z79sP7If2I/ux/cR+aj+zn9sv7Jf2K/u1/cZ+a7+z39sf7I/2J/uz/cX+an+zv9s/7J/2L/u3/cf+a/+zk+w4J95J5iR3Ujj/OQlOSieVk9pJ46R10jnpnQxORieTk9nJ4mR1sjnZnRxOTieXk9vJ4+R18jn5nQJOQaeQU9gp4hR1ijnFnRJOSaeUU9op45R1yjnlnQpORaeSU9mp4lR1qjnVnRpOTaeWU9up49R16jn1nQZOQ6eR09hp4jR1mjnNnRZOS6eV09pp47R12jntnQ5OR6eT09np4nR1ujndnR5OT6eX09vp4/R1+jn9nQHOQGeQM9gZ4gx1hjnDnRHOSGeUM9oZ44x1xjnjnQnORGeSM9mZ4kx1pjnTnRnOTGeWM9uZ48x15jnznQXOQifRWeQsdpY4S51lznJnhbPSWeWsdtY4a511znpng7PR2eRsdrY4W51tznZnh7PT2eXsdvY4e519zn7ngHPQOeQcdo44R51jznHnhHPSOeWcds44Z51zznnngnPRueRcdq44V51rznXnhoM5uEM4pEM5tMM4rMM5vCM4oiM5sqM4qqM5umM4pmM5tuM4rgMcz/GdwIFO6CAncmLOTeeWc9u549x17jn3nQfOQ+eR89h54jx1njnPnRfOS+eV89p547x13jnvnQ/OR+eT89n54nx1vjnfnR/OT+eX89v54/x1/jlJTpwb7yZzk7sp3P/cBDelm8pN7aZx07rp3PRuBjejm8nN7GZxs7rZ3OxuDjenm8vN7eZx87r53PxuAbegW8gt7BZxi7rF3OJuCbekW8ot7ZZxy7rl3PJuBbeiW8mt7FZxq7rV3OpuDbemW8ut7dZx67r13PpuA7eh28ht7DZxm7rN3OZuC7el28pt7bZx27rt3PZuB7ej28nt7HZxu7rd3O5uD7en28uNi4tLjIuLi+vvDnAHuoPcwe4Qd6g7zB3ujnBHuqPc0e4Yd6w7zh3vTnAnupPcye4Ud6o7zZ3uznBnurPc2e4cd647z53vLnAXuonuInexu8Rd6i5zl7sr3JXuKne1u8Zd665z17sb3I3uJnezu8Xd6m5zt7s73J3uLne3u8fd6+5z97sH3IPuIfewe8Q96h5zj7sn3JPuKfe0e8Y9655zz7sX3IvuJfeye8W96l5zr7s3XMzFXcIlXcqlXcZlXc7lXcEVXcmVXcVVXc3VXcM1Xcu1Xcd1XeB6ru8GLnRDF7mRG3Nvurfc2+4d9657z73vPnAfuo/cx+4T96n7zH3uvnBfuq/c1+4b9637zn3vfnA/up/cz+4X96v7zf3u/nB/ur/c3+4f96/7z01y40A8SAaSgxTgP5AAUoJUIDVIA9KCdCA9yAAygkwgM8gCsoJsIDvIAXKCXCA3yAPygnwgPygACoJCoDAoAoqCYqA4KAFKglKgNCgDyoJyoDyoACqCSqAyqAKqgmqgOqgBaoJaoDaoA+qCeqA+aAAagkagMWgCmoJmoDloAVqCVqA1aAPagnagPegAOoJOoDPoArqCbqA76AF6gl6gN+gD+oJ+oD8YAAaCQWAwGAKGgmFgOBgBRoJRYDQYA8aCcWA8mAAmgklgMpgCpoJpYDqYAWaCWWA2mAPmgnlgPlgAFoJEsAgsBkvAUrAMLAcrwEqwCqwGa8BasA6sBxvARrAJbAZbwFawDWwHO8BOsAvsBnvAXrAP7AcHwEFwCBwGR8BRcAwcByfASXAKnAZnwFlwDpwHF8BFcAlcBlfAVXANXAc3AAZwQAASUIAGDGABB3ggABFIQAYKUIEGdGAAE1jABg5wAQAe8EEAIAgBAhGIgZvgFrgN7oC74B64Dx6Ah+AReAyegKfgGXgOXoCX4BV4Dd6At+AdeA8+gI/gE/gMvoCv4Bv4Dn6An+AX+A3+gL/gH0gCcV68l8xL7qXw/vMSvJReKi+1l8ZL66Xz0nsZvIxeJi+zl8XL6mXzsns5vJxeLi+3l8fL6+Xz8nsFvIJeIa+wV8Qr6hXzinslvJJeKa+0V8Yr65XzynsVvIpeJa+yV8Wr6lXzqns1vJpeLa+2V8er69Xz6nsNvIZeI6+x18Rr6jXzmnstvJZeK6+118Zr67Xz2nsdvI5eJ6+z18Xr6nXzuns9vJ5eL6+318fr6/Xz+nsDvIHeIG+wN8Qb6g3zhnsjvJHeKG+0N8Yb643zxnsTvIneJG+yN8Wb6k3zpnszvJneLG+2N8eb683z5nsLvIVeorfIW+wt8ZZ6y7zl3gpvpbfKW+2t8dZ667z13gZvo7fJ2+xt8bZ627zt3g5vp7fL2+3t8fZ6+7z93gHvoHfIO+wd8Y56x7zj3gnvpHfKO+2d8c5657zz3gXvonfJu+xd8a5617zr3g0P83CP8EiP8miP8ViP83hP8ERP8mRP8VRP83TP8EzP8mzP8VwPeJ7ne4EHvdBDXuTFvJveLe+2d8e7693z7nsPvIfeI++x98R76j3znnsvvJfeK++198Z7673z3nsfvI/eJ++z98X76n3zvns/vJ/eL++398f76/3zkrw4P95P5if3U/j/+Ql+Sj+Vn9pP46f10/np/Qx+Rj+Tn9nP4mf1s/nZ/Rx+Tj+Xn9vP4+f18/n5/QJ+Qb+QX9gv4hf1i/nF/RJ+Sb+UX9ov45f1y/nl/Qp+Rb+SX9mv4lf1q/nV/Rp+Tb+WX9uv49f16/n1/QZ+Q7+R39hv4jf1m/nN/RZ+S7+V39pv47f12/nt/Q5+R7+T39nv4nf1u/nd/R5+T7+X39vv4/f1+/n9/QH+QH+QP9gf4g/1h/nD/RH+SH+UP9of44/1x/nj/Qn+RH+SP9mf4k/1p/nT/Rn+TH+WP9uf48/15/nz/QX+Qj/RX+Qv9pf4S/1l/nJ/hb/SX+Wv9tf4a/11/np/g7/R3+Rv9rf4W/1t/nZ/h7/T3+Xv9vf4e/19/n7/gH/QP+Qf9o/4R/1j/nH/hH/SP+Wf9s/4Z/1z/nn/gn/Rv+Rf9q/4V/1r/nX/ho/5uE/4pE/5tM/4rM/5vC/4oi/5sq/4qq/5um/4pm/5tu/4rg98z/f9wId+6CM/8mP+Tf+Wf9u/49/17/n3/Qf+Q/+R/9h/4j/1n/nP/Rf+S/+V/9p/47/13/nv/Q/+R/+T/9n/4n/1v/nf/R/+T/+X/9v/4//1//lJflwQHyQLkgcpgv+ChCBlkCpIHaQJ0gbpgvRBhiBjkCnIHGQJsgbZguxBjiBnkCvIHeQJ8gb5gvxBgaBgUCgoHBQJigbFguJBiaBkUCooHZQJygblgvJBhaBiUCmoHFQJqgbVgupBjaBmUCuoHdQJ6gb1gvpBg6Bh0ChoHDQJmgbNguZBi6Bl0CpoHbQJ2gbtgvZBh6Bj0CnoHHQJugbdgu5Bj6Bn0CvoHfQJ+gb9gv7BgGBgMCgYHAwJhgbDguHBiGBkMCoYHYwJxgbjgvHBhGBiMCmYHEwJpgbTgunBjGBmMCuYHcwJ5gbzgvnBgmBhkBgsChYHS4KlwbJgebAiWBmsClYHa4K1wbpgfbAh2BhsCjYHW4KtwbZge7Aj2BnsCnYHe4K9wb5gf3AgOBgcCg4HR4KjwbHgeHAiOBmcCk4HZ4KzwbngfHAhuBhcCi4HV4KrwbXgenAjwAI8IAIyoAI6YAI24AI+EAIxkAI5UAI10AI9MAIzsAI7cAI3AIEX+EEQwCAMUBAFseBmcCu4HdwJ7gb3gvvBg+Bh8Ch4HDwJngbPgufBi+Bl8Cp4HbwJ3gbvgvfBh+Bj8Cn4HHwJvgbfgu/Bj+Bn8Cv4HfwJ/gb/gqQgDsbDZDA5TAH/gwkwJUwFU8M0MC1MB9PDDDAjzAQzwywwK8wGs8McMCfMBXPDPDAvzAfzwwKwICwEC8MisCgsBovDErAkLAVLwzKwLCwHy8MKsCKsBCvDKrAqrAarwxqwJqwFa8M6sC6sB+vDBrAhbAQbwyawKWwGm8MWsCVsBVvDNrAtbAfbww6wI+wEO8MusCvsBrvDHrAn7AV7wz6wL+wH+8MBcCAcBAfDIXAoHAaHwxFwJBwFR8MxcCwcB8fDCXAinAQnwylwKpwGp8MZcCacBWfDOXAunAfnwwVwIUyEi+BiuAQuhcvgcrgCroSr4Gq4Bq6F6+B6uAFuhJvgZrgFboXb4Ha4A+6Eu+BuuAfuhfvgfngAHoSH4GF4BB6Fx+BxeAKehKfgaXgGnoXn4Hl4AV6El+BleAVehdfgdXgDYhCHBCQhBWnIQBZykIcCFKEEZahAFWpQhwY0oQVt6EAXAuhBHwYQwhAiGMEYvAlvwdvwDrwL78H78AF8CB/Bx/AJfAqfwefwBXwJX8HX8A18C9/B9/AD/Ag/wc/wC/wKv8Hv8Af8CX/B3/AP/Av/wSQYF8aHycLkYYrwvzAhTBmmClOHacK0YbowfZghzBhmCjOHWcKsYbYwe5gjzBnmCnOHecK8Yb4wf1ggLBgWCguHRcKiYbGweFgiLBmWCkuHZcKyYbmwfFghrBhWCiuHVcKqYbWwelgjrBnWCmuHdcK6Yb2wftggbBg2ChuHTcKmYbOwedgibBm2CluHbcK2Ybuwfdgh7Bh2CjuHXcKuYbdwc1yPsGfYK+wd9gn7hv3C/uGAcGA4KBwcDgmHhsPC4eGIcGQ4KhwdjgnHhuPC8eGEcGI4KZwcTgmnhtPC6eGMcGY4K5wdzgnnhvPC+eGCcGGYGC4KF4dLwqXhsnB5uCJcGa4KV4drwrXhunB9uCHcGG4KN4dbwq3htnB7uCPcGe4Kd4d7wr3hvnB/eCA8GB4KD4dHwqPhsfB4eCI8GZ4KT4dnwrPhufB8eCG8GF4KL4dXwqvhtfB6eCPEQjwkQjKkQjpkQjbkQj4UQjGUQjlUQjXUQj00QjO0Qjt0QjcEoRf6YRDCMAxRGIWx8GZ4K7wd3gnvhvfC++GD8GH4KHwcPgmfhs/C5+GL8GX4Knwdvgnfhu/C9+GH8GP4Kfwcfgm/ht/C7+GP8Gf4K/wd/gn/hv/CpDAOxaNkKDlKgf5DCSglSoVSozQoLUqH0qMMKCPKhDKjLCgryoayoxwoJ8qFcqM8KC/Kh/KjAqggKoQKoyKoKCqGiqMSqCQqhUqjMqgsKofKowqoIqqEKqMqqCqqhqqjGqgmqoVqozqoLqqH6qMGqCFqhBqjJqgpaoaaoxaoJWqFWqM2qC1qh9qjDqgj6oQ6oy6oK+qGuqMeqCfqhXqjPqgv6of6owFoIBqEBqMhaCgahoajEWgkGoVGozFoLBqHxqMJaCKahCajKWgqmoamoxloJpqFZqM5aC6ah+ajBWghSkSL0GK0BC1Fy9BytAKtRKvQarQGrUXr0Hq0AW1Em9BmtAVtRdvQdrQD7US70G60B+1F+9B+dAAdRIfQYXQEHUXH0HF0Ap1Ep9BpdAadRefQeXQBXUSX0GV0BV1F19B1dANhCEcEIhGFaMQgFnGIRwISkYRkpCAVaUhHBjKRhWzkIBcB5CEfBQiiECEUoRi6iW6h2+gOuovuofvoAXqIHqHH6Al6ip6h5+gFeoleodfoDXqL3qH36AP6iD6hz+gL+oq+oe/oB/qJfqHf6A/6i/6hJBQXxUfJouRRiui/KCFKGaWKUkdporRRuih9lCHKGGWKMkdZoqxRtih7lCPKGeWKckd5orxRvih/VCAqGBWKCkdFoqJRsah4VCIqGZWKSkdlorJRuah8VCGqGFWKKkdVoqpRtah6VCOqGdWKakd1orpRvah+1CBqGDWKGkdNoqZRs6h51CJqGbWKWkdtorZRu6h91CHqGHWKOkddoq5Rt6h71CPqGfWKekd9or5Rv6h/NCAaGA2KBkdDoqHRsGh4NCIaGY2KRkdjorHRuGh8NCGaGE2KJkdToqnRtGh6NCOaGc2KZkdzornRvGh+tCBaGCVGi6LF0ZJoabQsWh6tiFZGq6LV0ZpobbQuWh9tiDZGm6LN0ZZoa7Qt2h7tiHZGu6Ld0Z5ob7Qv2h8diA5Gh6LD0ZHoaHQsOh6diE5Gp6LT0ZnobHQuOh9diC5Gl6LL0ZXoanQtuh7diLAIj7i4uDgqoiMmYiMu4iMhEiMpkiMlUiMt0iMjMiMrsiMnciMQeZEfBRGMwghFURSLbka3otvRnehudC+6Hz2IHkaPosfRk+hp9Cx6Hr2IXkavotfRm+ht9C56H32IPkafos/Rl+hr9C36Hv2Ifka/ot/Rn+hv9C9KiuJi8bFkseSxFLH/YgmxlLFUsdSxNLG0sWRxcXEZYhljmWKZY1liWWPZYtljOWI5Y7liuWN5Ynlj+WL5YwViBWOFYoVjRWJFY8VixWMlYiVjpWKlY2ViZWPlYuVjFWIVY5VilWNVYlVj1WLVYzViNWO1YrVjdWJ1Y/Vi9WMNYg1jjWKNY01iTWPNYs1jLWItY61irWNtYm1j7WLtYx1iHWOdYp1jXWJdY91i3WM9Yj1jvWK9Y31ifWP9Yv1jA2L/Y+keG7RsFgAAb26zbdu2bdu2bds2Nvdm27XZ3batmXnini/nl1yDsSHYUGwYNhwbgY3ERmGjsTHYWGwcNh6bgE3EJmGTsSnYVGwaNh2bgc3EZmGzsTnYXGweNh9bgC3EFmGLsSXYUmwZthxbga3EVmGrsTXYWmwdth7bgG3ENmGbsS3YVmwbth3bge3EdmG7sT3YXmwfth87gB3EDmGHsSPYUewYdhxLwE5gJ7FT2GnsDHYWO4edx/7DLmAXsUvYZewKdhW7hl3HbmA3sVvYbewOdhe7h93HHmAPsUfYY+wJ9hR7hj3HXmAvsVdYIvYae4O9xd5h77EP2EfsE/YZ+4J9xb5h37EfGIbhGIGRGIXRGIOxGIfxmICJmITJmIKpmIbpmIGZmIXZmIO5CSMwHwuwEIswgEEMYTHsJ/YL+439wf5i/7AkLA5PhifHU+Ap8VR4ajwNnhaPx9Ph6fEMeEY8E54Zz4JnxbPh2fEceE48F54bz4PnxfPh+fECeEG8EF4YL4IXxYvhxfESeEm8FF4aL4OXxcvh5fEKeEW8El4Zr4JXxavh1fEaeE28Fl4br4PXxevh9fEGeEO8Ed4Yb4I3xZvhzfEWeEu8Fd4ab4O3xdvh7fEOeEe8E94Z74J3xbvh3fEeeE+8F94b74P3xfvh/fEB+EB8ED4YH4IPxYfhw/ER+Eh8FD4aH4OPxcfh4/EJ+ER8Ej4Zn4JPxafh0/EZ+Ex8Fj4bn4PPxefh8/EF+EJ8Eb4YX4IvxZfhy/EV+Ep8Fb4aX4Ovxdfh6/EN+EZ8E74Z34Jvxbfh2/Ed+E58F74b34Pvxffh+/ED+EH8EH4YP4IfxY/hx/EE/AR+Ej+Fn8bP4Gfxc/h5/D/8An4Rv4Rfxq/gV/Fr+HX8Bn4Tv4Xfxu/gd/F7+H38Af4Qf4Q/xp/gT/Fn+HP8Bf4Sf4Un4q/xN/hb/B3+Hv+Af8Q/4Z/xL/hX/Bv+Hf+BYziOEziJUziNMziLcziPC7iIS7iMK7iKa7iOG7iJW7iNO7iLe7iPB3iIRzjAIY7wGP4T/4X/xv/gf/F/eBIeRyQjkhMpiJREKiI1kYZIS8QT6Yj0RAYiI5GJyExkIbIS2YjsRA4iJ5GLyE3kIfIS+Yj8RAGiIFGIKEwUIYoSxYjiRAmiJFGKKE2UIcoS5YjyRAWiIlGJqExUIaoS1YjqRA2iJlGLqE3UIeoS9Yj6RAOiIdGIaEw0IZoSzYjmRAuiJdGKaE20IdoS7Yj2RAeiI9GJ6Ex0IboS3YjuRA+iJ9GL6E30IfoS/Yj+xABiIDGIGEwMIYYSw4jhxAhiJDGKGE2MIcYS44jxxARiIpGGmExMIaYS04jpxAxiJjGLmE3MIeYS84j5xAJiIbGIWEwsIZYSy4jlxApiJbGKWE2sIdYS64j1xAZiI7GJ2ExsIbYS24jtxA5iJ7GL2E3sIfYS+4j9xAHiIHGIOEwcIY4Sx4jjRAJxgjhJnCJOE2eIs8Q54jzxH3GBuEhcIi4TV4irxDXiOnGDuEncIm4Td4i7xD3iPvGAeEg8Ih4TT4inxDPiOfGCeEm8IhKJ18Qb4i3xjnhPfCA+Ep+Iz8QX4ivxjfhO/CAwAicIgiQogiYYgiU4gicEQiQkQiYUQiU0QicMwiQswiYcwiU8wicCIiQiAhCQQESM+En8In4Tf4i/xD8iiYgjk5HJyRRkSjIVmZpMQ6Yl48l0ZHoyA5mRzERmJrOQWclsZHYyB5mTzEXmJvOQecl8ZH6yAFmQLEQWJouQRcliZHGyBFmSLEWWJsuQZclyZHmyAlmRrERWJquQVclqZHWyBlmTrEXWJuuQdcl6ZH2yAdmQbEQ2JpuQTclmZHOyBdmSbEW2JtuQbcl2ZHuyA9mR7ER2JruQXcluZHeyB9mT7EX2JvuQfcl+SUnkAHIgOYgcTA4hh5LDyOHkCHIkOYocTY4hx5LjyPHkBHIiOYmcTE4hp5LTyOnkDHImOYucTc4h55LzyPnkAnIhuYhcTC4hl5LLyOXkCnIluYpcTa4h15LryPXkBnIjuYncTG4ht5LbyO3kDnInuYvcTe4h95L7yP3kATIxLi7uMHmEPEoeI4+TCeQJ8iR5ijxNniHPkufI8+R/5AXyInmJvExeIa+S18jr5A3yJnmLvE3eIe+S98j75APyIfmIfEw+IZ+Sz8jn5AvyJfmKTCRfk2/It+Q78j35gfxIfiI/k1/Ir+Q38jv5g8RInCRIkqRImmRIluRInhRIkZRImVRIldRInTRIk7RIm3RIl/RInwzIkIxIQEISkTHyJ/mL/E3+If+S/8gkMo5KRiWnUlApqVRUaioNlZaKp9JR6akMVEYqE5WZykJlpbJR2akcVE4qF5WbykPlpfJR+akCVEGqEFWYKkIVpYpRxakSVEmqFFWaKkOVpcpR5akKVEWqElWZqkJVpapR1akaVE2qFlWbqkPVpepR9akGVEOqEdWYakI1pZpRzakWVEuqFdWaakO1pdpR7akOVEeqE9WZ6kJ1pbpR3akeVE+qF9Wb6kP1pfpR/akB1EBqEDWYGkINpYZRw6kR1EhqFDWaGkONpcZR46kJ1ERqEjWZmkJNpaZR06kZ1ExqFjWbmkPNpeZR86kF1EJqEbWYWkItpZZRy6kV1EpqFbWaWkOtpdZR66kN1EZqE7WZ2kJtpbZR26kd1E5qF7Wb2kPtpfZR+6kD1EHqEHWYOkIdpY5Rx6kE6gR1kjpFnabOUGepc9R56j/qAnWRukRdpq5QV6lr1HXqBnWTukXdpu5Qd6l71H3qAfWQekQ9pp5QT6ln1HPqBfWSekUlUq+pN9Rb6h31nvpAfaQ+UZ+pL9RX6hv1nfpBYRROERRJURRNMRRLcRRPCZRISZRMKZRKaZROGZRJWZRNOZRLeZRPBVRIRRSgIIWoGPWT+kX9pv5Qf6l/VBIVRyejk9Mp6JR0Kjo1nYZOS8fT6ej0dAY6I52JzkxnobPS2ejsdA46J52Lzk3nofPS+ej8dAG6IF2ILkwXoYvSxejidAm6JF2KLk2XocvS5ejydAW6Il2JrkxXoavS1ejqdA26Jl2Lrk3XoevS9ej6dAO6Id2Ibkw3oZvSzejmdAu6Jd2Kbk23odvS7ej2dAe6I92J7kx3obvS3ejudA+6J92L7k33ofvS/ej+9AB6ID2IHkwPoYfSw+jh9Ah6JD2KHk2PocfS4+jx9AR6Ij2JnkxPoafS0+jp9Ax6Jj2Lnk3PoefS8+j59AJ6Ib2IXkwvoZfSy+jl9Ap6Jb2KXk2vodfS6+j19AZ6I72J3kxvobfS2+jt9A56J72L3k3voffS++j99AH6IH2IPkwfoY/Sx+jjdAJ9gj5Jn6JP02fos/Q5+jz9H32Bvkhfoi/TV+ir9DX6On2Dvknfom/Td+i79D36Pv2Afkg/oh/TT+in9DP6Of2Cfkm/ohPp1/Qb+i39jn5Pf6A/0p/oz/QX+iv9jf5O/6AxGqcJmqQpmqYZmqU5mqcFWqQlWqYVWqU1WqcN2qQt2qYd2qU92qcDOqQjGtCQRnSM/kn/on/Tf+i/9D86iY5jkjHJmRRMSiYVk5pJw6Rl4pl0THomA5ORycRkZrIwWZlsTHYmB5OTycXkZvIweZl8TH6mAFOQKcQUZoowRZliTHGmBFOSKcWUZsowZZlyTHmmAlORqcRUZqowVZlqTHWmBlOTqcXUZuowdZl6TH2mAdOQacQ0ZpowTZlmTHOmBdOSacW0ZtowbZl2THumA9OR6cR0ZrowXZluTHemB9OT6cX0ZvowfZl+TH9mADOQGcQMZoYwQ5lhzHBmBDOSGcWMZsYwY5lxzHhmAjORmcRMZqYwU5lpzHRmBjOTmcXMZuYwc5l5zHxmAbOQWcQsZpYwS5llzHJmBbOSWcWsZtYwa5l1zHpmA7OR2cRsZrYwW5ltzHZmB7OT2cXsZvYwe5l9zH7mAHOQOcQcZo4wR5ljzHEmgTnBnGROMaeZM8xZ5hxznvmPucBcZC4xl5krzFXmGnOducHcZG4xt5k7zF3mHnOfecA8ZB4xj5knzFPmGfOcecG8ZF4xicxr5g3zlnnHvGc+MB+ZT8xn5gvzlfnGfGd+MBiDMwRDMhRDMwzDMhzDMwIjMhIjMwqjMhqjMwZjMhZjMw7jMh7jMwETMhEDGMggJsb8ZH4xv5k/zF/mH5PExLHJ2ORsCjYlm4pNzaZh07LxbDo2PZuBzchmYjOzWdisbDY2O5uDzcnmYnOzedi8bD42P1uALcgWYguzRdiibDG2OFuCLcmWYkuzZdiybDm2PFuBrchWYiuzVdiqbDW2OluDrcnWYmuzddi6bD22PtuAbcg2YhuzTdimbDO2OduCbcm2Yluzbdi2bDu2PduB7ch2YjuzXdiubDe2O9uD7cn2Ynuzfdi+bD+2PzuAHcgOYgezQ9ih7DB2ODuCHcmOYkezY9ix7Dh2PDuBnchOYiezU9ip7DR2OjuDncnOYmezc9i57Dx2PruAXcguYhezS9il7DJ2ObuCXcmuYleza9i17Dp2PbuB3chuYjezW9it7DZ2O7uD3cnuYneze9i97D52P3uAPcgeYg+zR9ij7DH2OJvAnmBPsqfY0+wZ9ix7jj3P/sdeYC+yl9jL7BX2KnuNvc7eYG+yt9jb7B32LnuPvc8+YB+yj9jH7BP2KfuMfc6+YF+yr9hE9jX7hn3LvmPfsx/Yj+wn9jP7hf3KfmO/sz9YjMVZgiVZiqVZhmVZjuVZgRVZiZVZhVVZjdVZgzVZi7VZh3VZj/XZgA3ZiAUsZBEbY3+yv9jf7B/2L/uPTWLjuGRcci4Fl5JLxaXm0nBpuXguHZeey8Bl5DJxmbksXFYuG5edy8Hl5HJxubk8XF4uH5efK8AV5ApxhbkiXFGuGFecK8GV5EpxpbkyXFmuHFeeq8BV5CpxlbkqXFWuGledq8HV5Gpxtbk6XF2uHlefa8A15BpxjbkmXFOuGdeca8G15Fpxrbk2XFuuHdee68B15DpxnbkuXFeuG9ed68H15Hpxvbk+XF+uH9efG8AN5AZxg7kh3FBuGDecG8GN5EZxo7kx3FhuHDeem8BN5CZxk7kp3FRuGjedm8HN5GZxs7k53FxuHjefW8At5BZxi7kl3FJuGbecW8Gt5FZxq7k13FpuHbee28Bt5DZxm7kt3FZuG7ed28Ht5HZxu7k93F5uH7efO8Ad5A5xh7kj3FHuGHecS+BOcCe5U9xp7gx3ljvHnef+4y5wF7lL3GXuCneVu8Zd525wN7lb3G3uDneXu8fd5x5wD7lH3GPuCfeUe8Y9515wL7lXXCL3mnvDveXece+5D9xH7hP3mfvCfeW+cd+5HxzG4RzBkRzF0RzDsRzH8ZzAiZzEyZzCqZzG6ZzBmZzF2ZzDuZzH+VzAhVzEAQ5yiItxP7lf3G/uD/eX+8clcXF8Mj45n4JPyafiU/Np+LR8PJ+OT89n4DPymfjMfBY+K5+Nz87n4HPyufjcfB4+L5+Pz88X4AvyhfjCfBG+KF+ML86X4EvypfjSfBm+LF+OL89X4CvylfjKfBW+Kl+Nr87X4GvytfjafB2+Ll+Pr8834BvyjfjGfBO+Kd+Mb8634FvyrfjWfBu+Ld+Ob8934DvynfjOfBe+K9+N78734HvyvfjefB++L9+P788P4Afyg/jB/BB+KD+MH86P4Efyo/jR/Bh+LD+OH89P4Cfyk/jJ/BR+Kj+Nn87P4Gfys/jZ/Bx+Lj+Pn88v4Bfyi/jF/BJ+Kb+MX86v4Ffyq/jV/Bp+Lb+OX89v4Dfym/jN/BZ+K7+N387v4Hfyu/jd/B5+L7+P388f4A/yh/jD/BH+KH+MP84n8Cf4k/wp/jR/hj/Ln+PP8//xF/iL/CX+Mn+Fv8pf46/zN/ib/C3+Nn+Hv8vf4+/zD/iH/CP+Mf+Ef8o/45/zL/iX/Cs+kX/Nv+Hf8u/49/wH/iP/if/Mf+G/8t/47/wPHuNxnuBJnuJpnuFZnuN5XuBFXuJlXuFVXuN13uBN3uJt3uFd3uN9PuBDPuIBD3nEx/if/C/+N/+H/8v/45P4OCGZkFxIIaQUUgmphTRCWiFeSCekFzIIGYVMQmYhi5BVyCZkF3IIOYVcQm4hj5BXyCfkFwoIBYVCQmGhiFBUKCYUF0oIJYVSQmmhjFBWKCeUFyoIFYVKQmWhilBVqCZUF2oINYVaQm2hjlBXqCfUFxoIDYVGQmOhidBUaCY0F1oILYVWQmuhjdBWaCe0FzoIHYVOQmehi9BV6CZ0F3oIPYVeQm+hj9BX6Cf0FwYIA4VBwmBhiDBUGCYMF0YII4VRwmhhjDBWGCeMFyYIE4VJwmRhijBVmCZMF2YIM4VZwmxhjjBXmCfMFxYIC4VFwmJhibBUWCYsF1YIK4VVwmphjbBWWCesFzYIG4VNwmZhi7BV2CZsF3YIO4Vdwm5hj7BX2CfsFw4IB4VDwmHhiHBUOCYcFxKEE8JJ4ZRwWjgjnBXOCeeF/4QLwkXhknBZuCJcFa4J14Ubwk3hlnBbuCPcFe4J94UHwkPhkfBYeCI8FZ4Jz4UXwkvhlZAovBbeCG+Fd8J74YPwUfgkfBa+CF+Fb8J34YeACbhACKRACbTACKzACbwgCKIgCbKgCKqgCbpgCKZgCbbgCK7gCb4QCKEQCUCAAhJiwk/hl/Bb+CP8Ff4JSUKcmExMLqYQU4qpxNRiGjGtGC+mE9OLGcSMYiYxs5hFzCpmE7OLOcScYi4xt5hHzCvmE/OLBcSCYiGxsFhELCoWE4uLJcSSYimxtFhGLCuWE8uLFcSKYiWxslhFrCpWE6uLNcSaYi2xtlhHrCvWE+uLDcSGYiOxsdhEbCo2E5uLLcSWYiuxtdhGbCu2E9uLHcSOYiexs9hF7Cp2E7uLPcSeYi+xt9hH7Cv2E/uLA8SB4iBxsDhEHCoOE4eLI8SR4ihxtDhGHCuOE8eLE8SJ4iRxsjhFnCpOE6eLM8SZ4ixxtjhHnCvOE+eLC8SF4iJxsbhEXCouE5eLK8SV4ipxtbhGXCuuE9eLG8SN4iZxs7hF3CpuE7eLO8Sd4i5xt7hH3CvuE/eLB8SD4iHxsHhEPCoeE4+LCeIJ8aR4SjwtnhHPiufE8+J/4gXxonhJvCxeEa+K18Tr4g3xpnhLvC3eEe+K98T74gPxofhIfCw+EZ+Kz8Tn4gvxpfhKTBRfi2/Et+I78b34QfwofhI/i1/Er+I38bv4Q8REXCREUqREWmREVuREXhREUZREWVREVdREXTREU7REW3REV/REXwzEUIxEIEIRiTHxp/hLHJnxj/hX/CcmiXFSMim5lEJKKaWSUktppLRSvJROSi9lkDJKmaTMUhYpq5RNyi7lkHJKuaTcUh4pr5RPyi8VkApKhaTCUhGpqFRMKi6VkEpKpaTSUhmprFROKi9VkCpKlaTKUhWpqlRNqi7VkGpKtaTaUh2prlRPqi81kBpKjaTGUhOpqdRMai61kFpKraTWUhuprdROai91kDpKnaTOUhcpeVxcXHeph9RT6iX1lvpIfaV+Un9pgDRQGiQNloZIQ6Vh0nBphDRSGiWNlsZIY6Vx0nhpgjRRmiRNlqZIU6Vp0nRphjRTmiXNluZIc6V50nxpgbRQWiQtlpZIS6Vl0nJphbRSWiWtltZIa6V10nppg7RR2iRtlrZIW6Vt0nZph7RT2iXtlvZIe6V90n7pgHRQOiQdlo5IR6Vj0nEpQTohnZROSaelM9JZ6Zx0XvpPuiBdlC5Jl6Ur0lXpmnRduiHdlG5Jt6U70l3pnnRfeiA9lB5Jj6Un0lPpmfRceiG9lF5JidJr6Y30VnonvZc+SB+lT9Jn6Yv0VfomfZd+SJiES4RESpRES4zESpzES4IkSpIkS4qkSpqkS4ZkSpZkS47kSp7kS4EUSpEEJCghKSb9lH5Jv6U/0l/pn5QkxcnJ5ORyCjmlnEpOLaeR08rxcjo5vZxBzihnkjPLWeSscjY5u5xDzinnknPLeeS8cj45v1xALigXkgvLReSicjG5uFxCLimXkkvLZeSycjm5vFxBrihXkivLVeSqcjW5ulxDrinXkmvLdeS6cj25vtxAbig3khvLTeSmcjO5udxCbim3klvLbeS2cju5vdxB7ih3kjvLXeSucje5u9xD7in3knvLfeS+cj+5vzxAHigPkgfLQ+Sh8jB5uDxCHimPkkfLY+Sx8jh5vDxBnihPkifLU+Sp8jR5ujxDninPkmfLc+S58jx5vrxAXigvkhfLS+Sl8jJ5ubxCXimvklfLa+S18jp5vbxB3ihvkjfLW+St8jZ5u7xD3invknfLe+S98j55v3xAPigfkg/LR+Sj8jH5uJwgn5BPyqfk0/IZ+ax8Tj4v/ydfkC/Kl+TL8hX5qnxNvi7fkG/Kt+Tb8h35rnxPvi8/kB/Kj+TH8hP5qfxMfi6/kF/Kr+RE+bX8Rn4rv5Pfyx/kj/In+bP8Rf4qf5O/yz9kTMZlQiZlSqZlRmZlTuZlQRZlSZZlRVZlTdZlQzZlS7ZlR3ZlT/blQA7lSAYylJEck3/Kv+Tf8h/5r/xPTpLjlGRKciWFklJJpaRW0ihplXglnZJeyaBkVDIpmZUsSlYlm5JdyaHkVHIpuZU8Sl4ln5JfKaAUVAophZUiSlGlmFJcKaGUVEoppZUySlmlnFJeqaBUVCoplZUqSlWlmlJdqaHUVGoptZU6Sl2lnlJfaaA0VBopjZUmSlOlmdJcaaG0VFoprZU2SlulndJe6aB0VDopnZUuSlelm9Jd6aH0VHopvZU+Sl+ln9JfGaAMVAYpg5UhylBlmDJcGaGMVEYpo5UxylhlnDJemaBMVCYpk5UpylRlmjJdmaHMVGYps5U5ylxlnjJfWaAsVBYpi5UlylJlmbJcWaGsVFYpq5U1ylplnbJe2aBsVDYpm5UtylZlm7Jd2aHsVHYpu5U9yl5ln7JfOaAcVA4ph5UjylHlmHJcSVBOKCeVU8pp5YxyVjmnnFf+Uy4oF5VLymXlinJVuaZcV24oN5Vbym3ljnJXuafcVx4oD5VHymPlifJUeaY8V14oL5VXSqLyWnmjvFXeKe+VD8pH5ZPyWfmifFW+Kd+VHwqm4AqhkAql0AqjsAqn8IqgiIqkyIqiqIqm6IqhmIql2IqjuIqn+EqghEqkAAUqSIkpP5Vfym/lj/JX+ackKXFqMjW5mkJNqaZSU6tp1LRqvJpOTa9mUDOqmdTMahY1q5pNza7mUHOqudTcah41r5pPza8WUAuqhdTCahG1qFpMLa6WUEuqpdTSahm1rFpOLa9WUCuqldTKahW1qlpNra7WUGuqtdTaah21rlpPra82UBuqjdTGahO1qdpMba62UFuqrdTWahu1rdpOba92UDuqndTOahe1q9pN7a72UHuqvdTeah+1r9pP7a8OUAeqg9TB6hB1qDpMHa6OUEeqo9TR6hh1rDpOHa9OUCeqk9TJ6hR1qjpNna7OUGeqs9TZ6hx1rjpPna8uUBeqi9TF6hJ1qbpMXa6uUFeqq9TV6hp1rbpOXa9uUDeqm9TN6hZ1q7pN3a7uUHequ9Td6h51r7pP3a8eUA+qh9TD6hH1qHpMPa4mqCfUk+op9bR6Rj2rnlPPq/+pF9SL6iX1snpFvapeU6+rN9Sb6i31tnpHvaveU++rcVni4h6pj9Un6lP1mfpcfaG+VF+piepr9Y36Vn2nvlc/qB/VT+pn9Yv6Vf2mfld/qJiKq4RKqpRKq4zKqpzKq4IqqpIqq4qqqpqqq4ZqqpZqq47qqp7qq4EaqpEKVKgiNab+VH+pv9U/6l/1n5qkxmnJtORaCi2llkpLraXR0mrxWjotvZZBy6hl0jJrWbSsWjYtu5ZDy6nl0nJrebS8Wj4tv1ZAK6gV0gprRbSiWjGtuFZCK6mV0kprZbSyWjmtvFZBq6hV0iprVbSqWjWtulZDq6nV0mprdbS6Wj2tvtZAa6g10hprTbSmWjOtudZCa6m10lprbbS2WjutvdZB66h10jprXbSuWjetu9ZD66n10nprfbS+Wj+tvzZAG6gN0gZrQ7Sh2jBtuDZCG6mN0kZrY7Sx2jhtvDZBm6hN0iZrU7Sp2jRtujZDm6nN0mZrc7S52jxtvrZAW6gt0hZrS7Sl2jJtubZCW6mt0lZra7S12jptvbZB26ht0jZrW7St2jZtu7ZD26nt0nZre7S92j5tv3ZAO6gd0g5rR7Sj2jHtuJagndBOaqe009oZ7ax2Tjuv/add0C5ql7TL2hXtqnZNu67d0G5qt7Tb2h3trnZPu6890B5qj7TH2hPtqfZMe6690F5qr7RE7bX2RnurvdPeax+0j9on7bP2RfuqfdO+az80TMM1QiM1SqM1RmM1TuM1QRM1SZM1RVM1TdM1QzM1S7M1R3M1T/O1QAu1SAMa1JAW035qv7Tf2h/tr/ZPS9Li9GR6cj2FnlJPpafW0+hp9Xg9nZ5ez6Bn1DPpmfUselY9m55dz6Hn1HPpufU8el49n55fL6AX1AvphfUielG9mF5cL6GX1EvppfUyelm9nF5er6BX1CvplfUqelW9ml5dr6HX1GvptfU6el29nl5fb6A31BvpjfUmelO9md5cb6G31FvprfU2elu9nd5e76B31DvpnfUuele9m95d76H31HvpvfU+el+9n95fH6AP1Afpg/Uh+lB9mD5cH6GP1Efpo/Ux+lh9nD5en6BP1Cfpk/Up+lR9mj5dn6HP1Gfps/U5+lx9nj5fX6Av1Bfpi/Ul+lJ9mb5cX6Gv1Ffpq/U1+lp9nb5e36Bv1Dfpm/Ut+lZ9m75d36Hv1Hfpu/U9+l59n75fP6Af1A/ph/Uj+lH9mH5cT9BP6Cf1U/pp/Yx+Vj+nn9fj4+LiLuqX9Mv6Ff2qfk2/rt/Qb+q39Nv6Hf2ufk+/rz/QH+qP9Mf6E/2p/kx/rr/QX+qv9ET9tf5Gf6u/09/rH/SP+if9s/5F/6p/07/rP3RMx3VCJ3VKp3VGZ3VO53VBF3VJl3VFV3VN13VDX6Bbuq07uqt7uq8HeqhHOtChjvSY/lP/pf/W/+h/9X96kh5nJDOSGymMlEYqI7WRxkhrxBvpjPRGBiOjkcnIbGQxshrZjOxGDiOnkcvIbeQx8hr5jPxGAaOgUcgobBQxihrFjOJGCaOkUcoobZQxyhrljPJGBaOiUcmobFQxqhrVjOpGDaOmUcuobdQx6hr1jPpGA6Oh0chobDQxmhrNjOZGC6Ol0cpobbQx2hrtjPZGB6Oj0cnobHQxuhrdjO5GD6On0cvobfQx+hr9jP7GAGOgMcgYbAwxhhrDjOHGCGOkMcoYbYwxxhrjjPHGBGOiMcmYbEwxphrTjOnGDGOmMcuYbcwx5hrzjPnGAmOhschYbCwxlhrLjOXGCmOlscpYbawx1hrrjPXGBmOjscnYbGwxthrbjO3GDmOnscvYbewx9hr7jP3GAeOgccg4bBwxjhrHjONGgnHCOGmcMk4bZ4yzxjnjvPGfccG4aFwyLhtXjKvGNeO6ccO4adwybht3jLvGPeO+8cB4aDwyHhtPjKfGM+O58cJ4abwyEo3XxhvjrfHOeG98MD4an4zPxhfjq/HN+G78MDADNwiDNCiDNhiDNTiDNwRDNCRDNhRDNTRDNwzDNCzDNhzDNTzDNwIjNCIDGNBARsz4afwyfht/jL/GPyPJiDOTmcnNFGZKM5WZ2kxjpjXjzXRmejODmdHMZGY2s5hZzWxmdjOHmdPMZeY285h5zXxmfrOAWdAsZBY2i5hFzWJmcbOEWdIsZZY2y5hlzXJmebOCWdGsZFY2q5hVzWpmdbOGWdOsZdY265h1zXpmfbOB2dBsZDY2m5hNzWZmc7OF2dJsZbY225htzXZme7OD2dHsZHY2u5hdzW5md7OH2dPsZfY2+5h9zX5mf3OAOdAcZA42h5hDzWHmcHOEOdIcZY42x5hjzXHmeHOCOdGcZE42p5hTzWnmdDMubqY5y5xtzjHnmvPM+eYCc6G5yFxsLjGXmsvM5eYKc6W5ylxtrjHXmuvM9eYGc6O5ydxsbjG3mtvM7eYOc6e5y9xt7jH3mvvM/eYB86B5yDxsHjGPmsfM42aCecI8aZ4yT5tnzLPmOfO8+Z95wbxoXjIvm1fMq+Y187p5w7xp3jJvm3fMu+Y98775wHxoPjIfm0/Mp+Yz87n5wnxpvjITzdfmG/Ot+c58b34wP5qfzM/mF/Or+c38bv4wMRM3CZM0KZM2GZM1OZM3BVM0JVM2FVM1NVM3DdM0LdM2HdM1PdM3AzM0IxOY0ERmzPxp/jJ/m3/Mv+Y/M8mMs5JZya0UVkorlZXaSmOlteKtdFZ6K4OV0cpkZbayWFmtbFZ2K4eV08pl5bbyWHmtfFZ+q4BV0CpkFbaKWEWtYlZxq4RV0ipllbbKWGWtclZ5q4JV0apkVbaqWFWtalZ1q4ZV06pl1bbqWHWtelZ9q4HV0GpkNbaaWE2tZlZzq4XV0mpltbbaWG2tdlZ7q4PV0epkdba6WF2tblZ3q4fV0+pl9bb6WH2tflZ/a4A10BpkDbaGWEOtYdZwa4Q10hpljbbGWGOtcdZ4a4I10ZpkTbamWFOtadZ0a4Y105plzbbmWHOtedZ8a4G10FpkLbaWWEutZdZya4W10lplrbbWWGutddZ6a4O10dpkbba2WFutbdZ2a4e109pl7bb2WHutfdZ+64B10DpkHbaOWEetY9ZxK8E6YZ20TlmnrTPWWeucdd76z7pgXbQuWZetK9ZV65p13bph3bRuWbetO9Zd655133pgPbQeWY+tJ9ZT65n13HphvbReWYnWa+uN9dZ6Z723PlgfrU/WZ+uL9dX6Zn23fliYhVuERVqURVuMxVqcxVuCJVqSJVuKpVqapVuGZVqWZVuO5Vqe5VuBFVqRBSxoIStm/bR+Wb+tP9Zf65+VZMXZyezkdgo7pZ3KTm2nsdPa8XY6O72dwc5oZ7Iz21nsrHY2O7udw85p57Jz23nsvHY+O79dwC5oF7IL20XsonYxu7hdwi5pl7JL22XssnY5u7xdwa5oV7Ir21XsqnY1u7pdw65p17Jr23XsunY9u77dwG5oN7Ib203spnYzu7ndwm5pt7Jb223stnY7u73dwe5od7I7213srnY3u7vdw+5p97J7233svnY/u789wB5oD7IH20PsofYwe7g9wh5pj7JH22PssfY4e7w9wZ5oT7In21PsqfY0e7o9w55pz7Jn23PsufY8e769wF5oL7IX20vspfYye7m9wl5pr7JX22vstfY6e729wd5ob7I321vsrfY2e7u9w95p77J323vsvfY+e799wD5oH7IP20fso/Yx+7idYJ+wT9qn7NP2Gfusfc4+b/9nX7Av2pfsy/YV+6p9zb5u37Bv2rfs2/Yd+659z75vP7Af2o/sx/YT+6n9zH5uv7Bf2q/sRPu1/cZ+a7+z39sf7I/2J/uz/cX+an+zv9s/bMzGbcImbcqmbcZmbc7mbcEWbcmWbcVWbc3WbcM2bcu2bcd2bc/27cAO7cgGNrSRHbN/2r/s3/Yf+6/9z06y45xkTnInhZPSSeWkdtI4aZ14J52T3sngZHQyOZmdLE5WJ5uT3cnh5HRyObmdPE5eJ5+T3yngFHQKOYWdIk5Rp5hT3CnhlHRKOaWdMk5Zp5xT3qngVHQqOZWdKk5Vp5pT3anh1HRqObWdOk5dp55T32ngNHQaOY2dJk5Tp5nT3GnhtHRaOa2dNk5bp53T3ungdHQ6OZ2dLk5Xp5vT3enh9HR6Ob2dPk5fp5/T3xngDHQGOYOdIc5QZ5gz3BnhjHRGOaOdMc5YZ5wz3pngTHQmOZOdKc5UZ5oz3ZnhzHRmObOdOc5cZ54z31ngLHQWOYudJc5SZ5mz3FnhrHRWOaudNc5aZ52z3tngbHQ2OZudLc5WZ5uz3dnh7HR2ObudPc5eZ5+z3zngHHQOOYedI85R55hz3ElwTjgnnVPOaeeMc9Y555x3/nMuOBedS85l54pz1bnmXHduODedW85t545z17nn3HceOA+dR85j54nz1HnmPHdeOC+dV06i89p547x13jnvnQ/OR+eT89n54nx1vjnfnR8O5uAO4ZAO5dAO47AO5/CO4IiO5MiO4qiO5uiO4ZiO5diO47iO5/hO4IRO5AAHOsiJOT+dX85v54/z1/nnJDlxbjI3uZvCTemmclO7ady0brybzk3vZnAzupnczG4WN6ubzc3u5nBzurnc3G4eN6+bz83vFnALuoXcwm4Rt6hbzC3ulnBLuqXc0m4Zt6xbzi3vVnArupXcym4Vt6pbza3u1nBrurXc2m4dt65bz63vNnAbuo3cxm4Tt6nbzG3utnBbuq3c1m4bt63bzm3vdnA7up3czm4Xt6vbze3u9nB7ur3c3m4ft6/bz+3vDnAHuoPcwe4Qd6g7zB3ujnBHuqPc0e4Yd6w7zh3vTnAnupPcye4Ud6o7zZ3uznBnurPc2e4cd647z53vLnAXuovcxe4Sd6m7zF3urnBXuqvc1e4ad627zl3vbnA3upvcze4Wd6u7zd3u7nB3urvc3e4ed6+7z93vHnAPuofcw+4R96h7zD3uJrgn3JPuKfe0e8Y9655zz7v/uRfci+4l97J7xb3qXnOvuzfcm+4t97Z7x73r3nPvuw/ch+4j97H7xH3qPnOfuy/cl+4rN9F97b5x37rv3PfuB/ej+8n97H5xv7rf3O/uDxdzcZdwSZdyaZdxWZdzeVdwRVdyZVdxVVdzdddwTddybddxXddzfTdwQzdygQtd5Mbcn+4v97f7x/3r/nOT3DgvmZfcS+Gl9FJ5qb00Xlov3kvnpfcyeBm9TF5mL4uX1cvmZfdyeDm9XF5uL4+X18vn5fcKeAW9Ql5hr4hX1CvmFfdKeCW9Ul5pr4xX1ivnlfcqeBW9Sl5lr4pX1avmVfdqeDW9Wl5tr45X16vn1fcaeA29Rl5jr4nX1GvmNfdaeC29Vl5rr43X1mvntfc6eB29Tl5nr4vX1evmdfd6eD29Xl5vr4/X1+vn9fcGeAO9Qd5gb4g31BvmDfdGeCO9Ud5ob4w31hvnjfcmeBO9Sd5kb4o31ZvmTfdmeDO9Wd5sb44315vnzfcWeAu9Rd5ib4m31FvmLfdWeCu9Vd5qb4231lvnrfc2eBu9Td5mb4u31dvmbfd2eDu9Xd5ub4+319vn7fcOeAe9Q95h74h31DvmHfcSvBPeSe+Ud9o74531znnnvf+8C95F75J32bviXfWuede9G95N75Z327vj3fXuefe9B95D75H32HviPfWeec+9F95L75WX6L323nhvvXfee++D99H75H32vnhfvW/ed++Hh3m4R3ikR3m0x3isx3m8J3iiJ3myp3iqp3m6Z3imZ3m253iu53m+F3ihF3nAgx7yYt5P75f32/vj/fX+eUlenJ/MT+6n8FP6qfzUfho/rR/vp/PT+xn8jH4mP7Ofxc/qZ/Oz+zn8nH4uP7efx8/r5/Pz+wX8gn4hv7BfxC/qF/OL+yX8kn4pv7Rfxi/rl/PL+xX8in4lv7Jfxa/qV/Or+zX8mn4tv7Zfx6/r1/Pr+w38hn4jv7HfxG/qN/Ob+y38ln4rv7Xfxm/rt/Pb+x38jn4nv7Pfxe/qd/O7+z38nn4vv7ffx+/r9/P7+wP8gf4gf7A/xB/qD/OH+yP8kf4of7Q/xh/rj/PH+xP8if4kf7I/xZ/qT/On+zP8mf4sf7Y/x5/rz/Pn+wv8hf4if7G/xF/qL/OX+yv8lf4qf7W/xl/rr/PX+xv8jf4mf7O/xd/qb/O3+zv8nf4uf7e/x9/r7/P3+wf8g/4h/7B/xD/qH/OP+wn+Cf+kf8o/7Z/xz/rn/PP+f/4F/6J/yb/sX/Gv+tf86/4N/6Z/y7/t3/Hv+vf8+/4D/6H/yH/sP/Gf+s/85/4L/6X/yk/0X/tv/Lf+O/+9/8H/6H/yP/tf/K/+N/+7/8PHfNwnfNKnfNpnfNbnfN4XfNGXfNlXfNXXfN03fNO3fNt3fNf3fN8P/NCPfOBDH/kx/6f/y//t//H/+v/8JD8uSBYkD1IEKYNUQeogTZA2iA/SBemDDEHGIFOQOcgSZA2yBdmDHEHOIFeQO8gT5A3yBfmDAkHBoFBQOCgSFA2KBcWDEkHJ+FJB6aBMUDYoF5QPKgQVg0pB5aBKUDWoFlQPagQ1g1pB7aBOUDeoF9QPGgQNg0ZB46BJ0DRoFjQPWgQtg1ZB66BN0DZoF7QPOgQdg05B56BL0DXoFnQPegQ9g15B76BP0DfoF/QPBgQDg0HB4GBIMDQYFgwPRgQjg1HB6GBMMDYYF4wPJgQTg0nB5GBKMDWYFkwPZgQzg1nB7GBOMDeYF8wPFgQLg0XB4mBJsDRYFiwPVgQrg1XB6mBNsDZYF6wPNgQbg03B5mBLsDXYFmwPdgQ7g13B7mBPsDfYF+wPDgQHg0PB4eBIcDQ4FhwPEoITwcngVHA6OBOcDc4F54P/ggvBxeBScDm4ElwNrgXXgxvBzeBWcDu4E9wN7gX3gwfBw+BR8Dh4EjwNngXPgxfBy+BVkBi8Dt4Eb4N3wfvgQ/Ax+BR8Dr4EX4NvwffgR4AFeEAEZEAFdMAEbMAFfCAEYiAFcqAEaqAFemAEZmAFduAEbuAFfhAEYRAFIIABCmLBz+BX8Dv4E/wN/gVJQVyYLEwepghThqnC1GGaMG0YH6YL04cZwoxhpjBzmCXMGmYLs4c5wpxhrjB3mCfMG+YL84cFwoJhobBwWCQsGhYLi4clwpJhqbB0WCYsG5YLy4cVwophpbByWCWsGlYLq4c1wpphrbB2WCesG9YL64cNwoZho7Bx2CRsGjYLm4ctwpZhq7B12CZsG7YL24cdwo5hp7Bz2CXsGnYLu4c9wp5hr7B32CfsG/YL+4cDwoHhoHBwOCQcGg4Lh4cjwpHhqHB0OCYcG44Lx4cTwonhpHByOCWcGk4Lp4czwpnhrHB2OCecG84L54cLwoXhonBxuCRcGi4Ll4crwpXhqnB1uCZcG64L14cbwo3hpnBzuCXcGm4Lt4c7wp3hrnB3uCfcG+4L94cHwoPhofBweCQ8Gh4Lj4cJ4YnwZHgqPB2eCc+GKf+v1F4ML4WXwyvh1fBaeD28Ed4Mb4W3wzvh3fBeeD98ED4MH4WPwyfh0/BZ+Dx8Eb4MX4WJ4evwTfg2fBe+Dz+EH8NP4efwS/g1/BZ+D3+EWIiHREiGVEiHTMiGXMiHQiiGUiiHSqiGWqiHRmiGVmiHTuiGXuiHQRiGUQhCGKIwFv4Mf4W/wz/h3/BfmBTGRcmi5FGKKGWUKkodpYnSRvFRuih9lCHKGGWKMkdZoqxRtih7lCPKGeWKckd5orxRvih/VCAqGBWKCkdFoqJRsah4VCIqGZWKSkdlorJRuah8VCGqGFWKKkdVoqpRtah6VCOqGdWKakd1orpRvah+1CBqGDWKGkdNoqZRs6h51CJqGbWKWkdtorZRu6h91CHqGHWKOkddoq5Rt6h71CPqGfWKekd9or5Rv6h/NCAaGA2KBkdDoqHRsGh4NCIaGY2KRkdjorHRuGh8NCGaGE2KJkdToqnRtGh6NCOaGc2KZkdzornRvGh+tCBaGC2KFkdLoqXRsmh5tCJaGa2KVkdrorXRumh9tCHaGG2KNkdboq3Rtmh7tCPaGe2Kdkd7or3Rvmh/dCA6GB2KDkdHoqPRseh4lBCdiE5Gp6LT0ZnobHQuOh/9F12ILkaXosvRlehqdC26Ht2Ibka3otvRnehudC+6Hz2IHkaPosfRk+hp9Cx6Hr2IXkavosTodfQmehu9i95HH6KP0afoc/Ql+hp9i75HPyIswiMiIiMqoiMmYiMu4iMhEiMpkiMlUiMt0iMjMiMrsiMnciMv8qMgCqMoAhGMUBSLfka/ot/Rn+hv9C9KiuJAMpAcpAApQSqQGqQBaUE8SAfSgwwgI8gEMoMsICvIBrKDHCAnyAVygzwgL8gH8oMCoCAoBAqDIqAoKAaKgxKgJCgFSoMyoCwoB8qDCqAiqAQqgyqgKqgGqoMaoCaoBWqDOqAuqAfqgwagIWgEGoMmoCloBpqDFqAlaAVagzagLWgH2oMOoCPoBDqDLqAr6Aa6gx6gJ+gFeoM+oC/oB/qDAWAgGAQGgyFgKBgGhoMRYCQYBUaDMWAsGAfGgwlgIpgEJoMpYCqYBqaDGWAmmAVmgzlgLpgH5oMFYCFYBBaDJWApWAaWgxVgJVgFVoM1YC1YB9aDDWAj2AQ2gy1gK9gGtoMdYCfYBXaDPWAv2Af2gwPgIDgEDoMj4Cg4Bo6DBHACnASnwGlwBpwF58B58B+4AC6CS+AyuAKugmvgOrgBboJb4Da4A+6Ce+A+eAAegkfgMXgCnoJn4Dl4AV6CVyARvAZvwFvwDrwHH8BH8Al8Bl/AV/ANfAc/AAZwQAASUIAGDGABB3ggABFIQAYKUIEGdGAAE1jABg5wgQd8EIAQRAAACBCIgZ/gF/gN/oC/4B9IAnEwGUwOU8CUMBVMDdPAtDAepoPpYQaYEWaCmWEWmBVmg9lhDpgT5oK5YR6YF+aD+WEBWBAWgoVhEVgUFoPFYQlYEpaCpWEZWBaWg+VhBVgRVoKVYRVYFVaD1WENWBPWgrVhHVgX1oP1YQPYEDaCjWET2BQ2g81hC9gStoKtYRvYFraD7WEH2BF2gp1hF9gVdoPdYQ/YE/aCvWEf2Bf2g/3hADgQDoKD4RA4FA6Dw+EIOBKOgqPhGDgWjoPj4QQ4EU6Ck+EUOBVOg9PhDDgTzoKz4Rw4F86D8+ECuBAugovhErgULoPL4Qq4Eq6Cq+EauBaug+vhBrgRboKb4Ra4FW6D2+EOuBPugrvhHrgX7oP74QF4EB6Ch+EReBQeg8dhAjwBT8JT8DQ8A8/Cc/A8/A9egBfhJXgZXoFX4TV4Hd6AN+EteBvegXfhPXgfPoAP4SP4GD6BT+Ez+By+gC/hK5gIX8M38C18B9/DD/Aj/AQ/wy/wK/wGv8MfEIM4JCAJKUhDBrKQgzwUoAglKEMFqlCDOjSgCS1oQwe60IM+DGAIIwgghAjG4E/4C/6Gf+Bf+A8mwTiUDCVHKVBKlAqlRmlQWhSP0qH0KAPKiDKhzCgLyoqyoewoB8qJcqHcKA/Ki/Kh/KgAKogKocKoCCqKiqHiqAQqiUqh0qgMKovKofKoAqqIKqHKqAqqiqqh6qgGqolqodqoDqqL6qH6qAFqiBqhxqgJaoqaoeaoBWqJWqHWqA1qi9qh9qgD6og6oc6oC+qKuqHuqAfqiXqh3qgP6ov6of5oABqIBqHBaAgaioah4WgEGolGodFoDBqLxqHxaAKaiCahyWgKmoqmoeloBpqJZqHZaA6ai+ah+WgBWogWocVoCVqKlqHlaAVaiVah1WgNWovWofVoA9qINqHNaAvairah7WgH2ol2od1oD9qL9qH96AA6iA6hw+gIOoqOoeMoAZ1AJ9EpdBqdQWfROXQe/YcuoIvoErqMrqCr6Bq6jm6gm+gWuo3uoLvoHrqPHqCH6BF6jJ6gp+gZeo5eoJfoFUpEr9Eb9Ba9Q+/RB/QRfUKf0Rf0FX1D39EPhCEcEYhEFKIRg1jEIR4JSEQSkpGCVKQhHRnIRBaykYNc5CEfBShEEQIIIoRi6Cf6hX6jP+gv+oeSUFwsWSx5LEUsZSxVLHUsTSxtLD6WLpY+liGWMZYpljmWJZY1li2WPZYjljOWK5Y7lieWN5Yvlj9WIFYwVihWOFYkVjRWLFY8VqJJyVipWOlYmVjZWLlY+ViFWMVYpVjlWJVY1Vi1WPVYjVjNWK1Y7VidWN1YvVj9WINYw1ijWONYk1jTWLNY81iLWMtYq1jrWJtY21i7WPtYh1jHWKdY51iXWNdYt1j3WI9Yz1ivWO9Yn1jfWL9Y/9iA2MDYoNjg2JDY0Nj/2LkLYL2qe3/4TwSXAqUUahwobang7lSgQIFSrIIGCBAIBBIsaHB3d3d3d3d3d3fby9+5NORf2st7p/d9p733n89nJlnrWXs/a+1nfeecOb89+5y1urW7dbrB3brdet363ZBug27Dbmi3UbdxN6zbpNu0G96N6DbrNu+26LbstupGdlt323Tbdtt123c7dKO6Hbudup27Xbpdu9263bs9uj27vbq9u326fbv9uv27A7oDu4O6g7tDukO7w7rDuyO6I7ujuqO7Y7pju+O647sTuhO7k7qTu1O6U7vTutO7M7ozu7O6s7tzunO787rzuwu6C7uLuou7S7pLu8u6y7sruiu7q9qA7pru2u667vruhu7G7qbu5u6W7tbutu727o7uzu6u7u7unu7e7r7u/u6B7sHuoe7h7pHu0e6x7vHuie7J7qnu6e6Z7tnuue757oXuxe6l7uXule7V7rXu9e6N7s3ure7t7p3u3e697v3ug+7D7qPu4+6T7tPus+7zrutCF7vU5a50tWtdL/QL/cOAMDCME8YN44XxwwRhwjBRmDhMEiYN3wiThcnDFOGbYcrwrTBV+HaYOkwTvhO+G74Xvh9+EKYNfWG6MH34YZgh/Cj8OPwkzBh+Gn4Wfh5+EWYKM4dZwqxhtjB7mCPMGeYKc4d5wrxhvjB/WCAsGBYKC4dFwqLhl+FX4dfhN2GxsHj4bVgiLBmWCr8LS4dlwrLh92G58IewfFghrBhWCiuHP4Y/hT+Hv4RVwqphtbB6WCOsGQaFtcLaYZ0wOKwb1gvrhyFhg7BhGBo2ChuHYWGTsGkYHkaEzcLmYYuwZdgqjAxbh23CtmG7sH3YIYwKO4adws5hl7Br2C3sHvYIe4a9wt5hn7Bv2C/sHw4IB4aDwsHhkHBoOCwcHo4IR4ajwtHhmHBsOC4cH04IJ4aTwsnhlHBqOC2cHs4IZ4azwtnhnHBuOC+cHy4IF4aLwsXhknBpuCxcHq4IV4arwtXhmnBtuC5cH24IN4abws3hlnBruC3cHu4Id4a7wt3hnnBvuC/cHx4ID4aHwsPhkfBoeCw8Hp4IT4anwtPhmfBseC48H14IL4aXwsvhlfBqeC28Ht4Ib4a3wtvhnfBueC+8Hz4IH4aPwsfhk/Bp+Cx8HroQQgwp5FBCDS304jija5Vx4rhxvDh+nCBOGCeKE8dJ4qTxG3GyOHmcIn4zThm/FaeK345Tx2nid+J34/fi9+MP4rSxL04Xp48/jDPEH8Ufx5/EGeNP48/iz+Mv4kxx5jhLnDXOFmePc8Q541xx7jhPnDfOF+ePC8QF40Jx4bhIXDT+Mv4q/jr+Ji4WF4+/jUvEJeNS8Xdx6bhMXDb+Pi4X/xCXjyvEFeNKceX4x/in+Of4l7hKXDWuFlePa8Q146C4Vlw7rhMHx3XjenH9OCRuEDeMQ+NGceM4LG4SN43D44i4Wdw8bhG3jFvFkXHruE3cNm4Xt487xFFxx7hT3DnuEneNu8Xd4x5xz7hX3DvuE/eN+8X94wHxwHhQPDgeEg+Nh8XD4xHxyHhUPDoeE4+Nx8Xj4wnxxHhSPDmeEk+Np8XT4xnxzHhWPDueE8+N58Xz4wXxwnhRvDheEi+Nl8XL4xXxynhVvDpeE6+N18Xr4w3xxnhTvDneEm+Nt8Xb4x3xznhXvDveE++N98X74wPxwfhQfDg+Eh+Nj8XH4xPxyfhUfDo+E5+Nz8Xn4wvxxfhSfDm+El+Nr8XX4xvxzfhWfDu+E9+N78X34wfxw/hR/Dh+Ej+Nn8XPYxdDjDHFHEusscVe6pf6pwFpYBonjZvGS+OnCdKEaaI0cZokTZq+kSZLk6cp0jfTlOlbaar07TR1miZ9J303fS99P/0gTZv60nRp+vTDNEP6Ufpx+kmaMf00/Sz9PP0izZRmTrOkWdNsafY0R5ozzZXmTvOkedN8af60QFowLZQWToukRdMv06/Sr9Nv0mJp8fTbtERaMi2VfpeWTsukZdPv03LpD2n5tEJaMa2UVk5/TH9Kf05/SaukVdNqafW0RlozDUprpbXTOmlwWjetl9ZPQ9IGacM0NG2UNk7D0iZp0zQ8jUibpc3TFmnLtFUambZO26Rt03Zp+7RDGpV2TDulndMuade0W9o97ZH2THulvdM+ad+0X9o/HZAOTAelg9Mh6dB0WDo8HZGOTEelo9Mx6dh0XDo+nZBOTCelk9Mp6dR0Wjo9nZHOTGels9M56dx0Xjo/XZAuTBeli9Ml6dJ0Wbo8XZGuTFelq9M16dp0Xbo+3ZBuTDelm9Mt6dZ0W7o93ZHuTHelu9M96d50X7o/PZAeTA+lh9Mj6dH0WHo8PZGeTE+lp9Mz6dn0XHo+vZBeTC+ll9Mr6dX0Wno9vZHeTG+lt9M76d30Xno/fZA+TB+lj9Mn6dP0Wfo8dSmkmFLKqaSaWurlfrl/HpAH5nHyuHm8PH6eIE+YJ8oT50nypPkbebI8eZ4ifzNPmb+Vp8rfzlPnafJ38nfz9/L38w/ytLkvT5enzz/MM+Qf5R/nn+QZ80/zz/LP8y/yTHnmPEueNc+WZ89z5DnzXHnuPE+eN8+X588L5AXzQnnhvEheNP8y/yr/Ov8mL5YXz7/NS+Ql81L5d3npvExeNv8+L5f/kJfPK+QV80p55fzH/Kf85/yXvEpeNa+WV89r5DXzoLxWXjuvkwfndfN6ef08JG+QN8xD80Z54zwsb5I3zcPziLxZ3jxvkbfMW+WReeu8Td42b5e3zzvkUXnHvFPeOe+Sd8275d3zHnnPvFfeO++T98375f3zAfnAfFA+OB+SD82H5cPzEfnIfFQ+Oh+Tj83H5ePzCfnEfFI+OZ+ST82n5dPzGfnMfFY+O5+Tz83n5fPzBfnCfFG+OF+SL82X5cvzFfnKfFW+Ol+Tr83X5evzDfnGfFO+Od+Sb8235dvzHfnOfFe+O9+T78335fvzA/nB/FB+OD+SH82P5cfzE/nJ/FR+Oj+Tn83P5efzC/nF/FJ+Ob+SX82v5dfzG/nN/FZ+O7+T383v5ffzB/nD/FH+OH+SP82f5c9zl0OOOeWcS6655V7pV/qXAWVgGaeMW8Yr45cJyoRlojJxmaRMWr5RJiuTlynKN8uU5VtlqvLtMnWZpnynfLd8r3y//KBMW/rKdGX68sMyQ/lR+XH5SZmx/LT8rPy8/KLMVGYus5RZy2xl9jJHmbPMVeYu85R5y3xl/rJAWbAsVBYui5RFyy/Lr8qvy2/KYmXx8tuyRFmyLFV+V5Yuy5Rly+/LcuUPZfmyQlmxrFRWLn8sfyp/Ln8pq5RVy2pl9bJGWbMMKmuVtcs6ZXBZt6xX1i9DygZlwzK0bFQ2LsPKJmXTMryMKJuVzQdsUbYsW5WRZeuyTdm2bFe2LzuUUWXHslPZuexSdi27ld3LHmXPslfZu+xT9i37lf3LAeXAclA5uBxSDi2HlcPLEeXIclQ5uhxTji3HlePLCeXEclI5uZxSTi2nldPLGeXMclY5u5xTzi3nlfPLBeXCclG5uFxSLi2XlcvLFeXKclW5ulxTri3XlevLDeXGclO5udxSbi23ldvLHeXOcle5u9xT7i33lfvLA+XB8lB5uDxSHi2PlcfLE+XJ8lR5ujxTni3PlefLC+XF8lJ5ubxSXi2vldfLG+XN8lZ5u7xT3i3vlffLB+XD8lH5uHxSPi2flc9LV0KJJZVcSqmllV7tV/vXAXVgHaeOW8er49cJ6oR1ojpxnaROWr9RJ6uT1ynqN+uU9Vt1qvrtOnWdpn6nfrd+r36//qBOW/vqdHX6+sM6Q/1R/XH9SZ2x/rT+rP68/qLOVGeus9RZ62x19jpHnbPOVeeu89R563x1/rpAXbAuVBeui9RF6y/rr+qv62/qYnXx+tu6RF2yLlV/V5euy9Rl6+/rcvUPdfm6Ql2xrlRXrn+sf6p/rn+pq9RV62p19bpGXbMOqmvVtes6dXBdt65X169D6gZ1wzq0blQ3rsPqJnXTOryOqJvVzesWdcu6VR1Zt67b1G3rdnX7ukMdVXesO9Wd6y5117pb3b3uUfese9W96z5137pf3b8eUA+sB9WD6yH10HpYPbweUY+sR9Wj6zH12HpcPb6eUE+sJ9WT6yn11HpaPb2eUc+sZ9Wz6zn13HpePb9eUC+sF9WL6yX10npZvbxeUa+sV9Wr6zX12npdvb7eUG+sN9Wb6y311npbvb3eUe+sd9W76z313npfvb8+UB+sD9WH6yP10fpYfbw+UZ+sT9Wn6zP12fpcfb6+UF+sL9WX6yv11fpafb2+Ud+sb9W36zv13fpefb9+UD+sH9WP6yf10/pZ/bx2NdRYU8211Fpb7bV+rX8b0Aa2cdq4bbw2fpugTdgmahO3Sdqk7RttsjZ5m6J9s03ZvtWmat9uU7dp2nfad9v32vfbD9q0ra9N16ZvP2wztB+1H7eftBnbT9vP2s/bL9pMbeY2S5u1zdZmb3O0Odtcbe42T5u3zdfmbwu0BdtCbeG2SFv0v/X+VdqqbbW2elujrdkGtbXa2m2dNrit29Zr67chbYO2YRvaNmobt2Ftk7ZpG95GtM3a5m2LtmXbqo1sW7dt2rZtu7Z926GNaju2ndrObZe2a9ut7d72aHu2vdrebZ+2b9uv7d8OaAe2g9rB7ZB2aDusHd6OaEe2o9rR7Zh2bDuuHd9OaCe2k9rJ7ZR2ajutnd7OaGe2s9rZ7Zx2bjuvnd8uaBe2i9rF7ZJ2abusXd6uaFe2q9rV7Zp2bbuuXd9uaDe2m9rN7ZZ2a7ut3d7uaHe2u9rd7Z52b7uv3d8eaA+2h9rD7ZH2aHusPd6eaE+2p9rT7Zn2bHuuPd9eaC+2l9rL7ZX2anutvd7eaG+2t9rb7Z32bnuvvd8+aB+2j9rH7ZP2afusfd66FlpsqeVWWm2t9QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhvWXzJpRebtTfBmNf9ev16S/T69c7o1+v1Jvs/5w0c3Q74mnn+49Q1v+hN/cX/S3zZ+2TD2YbGJ/p9XTvufzZZv38cmrXX660/Zv7+vaW+6PXrjfPF2Dj/5Tq9C0ZPOrr9ct2BA2boLdNbvLfi6NejRl97v96iX7mQhUe3i3458MGA/7SdfJG/7tQFX5nnH3dt0b/ZuDpBrzf+6JdftpP36/9F21prX7Pl/4Txvmb869Jk7CD/sZv8x27yH7vJf+wm/7Gb/P+3+Wfqyl7vv6orB3xt/b/+39X/A0ZXw/2/5rr+FfX/JmPm799b/p+t/xf96gZ9ue74Y+r/ZXpDesN7w0ePf919gAF/v8+L/uftdAPb3+zz/1RflyZjB/mP3eQ/dpP/2E3+Yzf5j93kP3br/w/1f///l/q////m+n/MEwx/bf+2/l+6N6y3Xm/x3pDe0N7g0eNfV/8vMrodU///3bxfttMtOuCLN6n/+Z9L/mM3+Y/d5D92k//YTf5jN/mP3f6x/h8wuv7/4O/q/3FH3wMY+DUzTTa6Xv6y/p/1v1n/f/U5/3695f7pOv+rvpx/vAEz9FbuDesN7W3e26g3+It5R41Zp39vnTErDhz1H5/jy98HmPKLo3OO/kqZsnd8vyl6/f66yjhTjH7/F2N/PWGcvl6v19e/95Vz/v5Yb/S9klnHrD+wN8Xo3ojeyN7WvQ17g3pDv7gb8eXzCJv0er0Zx5w/Tm/iMTs9OrfRn3zUmPGpxzytMPXX3of4ujQZO8h/7Cb/sZv8x27yH7vJ//9C/0RRL/+x28Av6kIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/VAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgnjRi59YaDhg4dPFxHR0dnTOff/Z0JAAD4/9v/+aH/330lAAAAAAAAAAAAAAAAAAAAMPb6V/w5sX/3ZwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/i7eUPWHbFxVfo6+vr603Wb/Rg99VzRvVG9droYwNHj7XRbb/R/7Za46wFHp/0vvX/Y2zSaa/bdNtzpr9hs4lWvmTSq8fr3TvZ6m9/MPsr90517zRv1xXXHzKib8iIvo2HbdY3qG+tYcM2G7TW0MF96wwZseHMfcsNHTxoxOC+IRuPGDz8K4fXHTpsk01G9g3aeJ1JJtxk+OARI/oGbTyyb8PBI/s2G9a32fCRfYPWGzRk476ZZ565b5IJ/1V797/fSmf9u68AAACAf43/JwAA///rOxRe") chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.081152654s ago: executing program 6 (id=6941): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x9) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) close(r1) 1.023998497s ago: executing program 3 (id=6942): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 870.264706ms ago: executing program 5 (id=6943): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x30000011}) close_range(r0, 0xffffffffffffffff, 0x0) 773.278973ms ago: executing program 3 (id=6944): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 739.929866ms ago: executing program 6 (id=6945): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 666.219332ms ago: executing program 7 (id=6946): syz_emit_ethernet(0x5e, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x200408d4}, 0x20004080) 665.814745ms ago: executing program 5 (id=6947): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x1000000000000000, 0x0}) io_uring_enter(r1, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 650.790072ms ago: executing program 4 (id=6948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0x5, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x6c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x60, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x30, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 451.426177ms ago: executing program 7 (id=6949): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r3, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r4}], 0x1, 0x0, 0x0, 0x0) close_range(r0, r4, 0x0) 306.041033ms ago: executing program 6 (id=6950): setuid(0xee00) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) 244.782119ms ago: executing program 3 (id=6951): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 175.016196ms ago: executing program 4 (id=6952): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000240)=[{}], 0x1, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x90000005}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 160.149228ms ago: executing program 9 (id=6953): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) pipe(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x7) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1068) 159.073716ms ago: executing program 7 (id=6954): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xff7fffff, 0x0, 0x15, "ff00"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x2) r1 = syz_open_pts(r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x2, 0x800000000d, 0x2, 0x2, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1d, 0x2, 0x0, 0x1fd, 0x1000000802, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r1, 0x540a, 0x3) 0s ago: executing program 5 (id=6955): r0 = io_uring_setup(0x773d, &(0x7f0000000a40)={0x0, 0x0, 0x1000, 0x0, 0x3bc}) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r2}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): x10/0x10 [ 956.843205][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.843251][T13224] ? rcu_is_watching+0x12/0xc0 [ 956.843302][T13224] ? __pfx_kthread+0x10/0x10 [ 956.843343][T13224] ret_from_fork+0x675/0x7d0 [ 956.843403][T13224] ? __pfx_kthread+0x10/0x10 [ 956.843443][T13224] ret_from_fork_asm+0x1a/0x30 [ 956.843531][T13224] [ 957.300685][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.336450][T13224] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 957.343623][T13224] CPU: 1 UID: 0 PID: 13224 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 957.343669][T13224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 957.343695][T13224] Workqueue: writeback wb_workfn (flush-7:6) [ 957.343753][T13224] Call Trace: [ 957.343765][T13224] [ 957.343790][T13224] dump_stack_lvl+0x16c/0x1f0 [ 957.343837][T13224] f2fs_handle_critical_error+0x624/0x9f0 [ 957.343880][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.343925][T13224] ? f2fs_build_fault_attr+0x53/0x1f0 [ 957.343997][T13224] f2fs_write_end_io+0x958/0xcf0 [ 957.344046][T13224] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 957.344098][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.344155][T13224] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 957.344197][T13224] bio_endio+0x713/0x860 [ 957.344253][T13224] submit_bio_noacct+0x306/0x1f60 [ 957.344306][T13224] __submit_merged_bio+0x33c/0x770 [ 957.344357][T13224] __submit_merged_write_cond+0x319/0x3f0 [ 957.344416][T13224] f2fs_write_cache_pages+0x2067/0x2570 [ 957.344502][T13224] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 957.344559][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.344612][T13224] ? __pfx_f2fs_sync_meta_pages+0x10/0x10 [ 957.344666][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.344710][T13224] ? do_raw_spin_unlock+0x172/0x230 [ 957.344874][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.344927][T13224] f2fs_write_data_pages+0x4ad/0xd90 [ 957.344989][T13224] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 957.345056][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.345099][T13224] ? __lock_acquire+0xb8a/0x1c90 [ 957.345160][T13224] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 957.345215][T13224] do_writepages+0x27a/0x600 [ 957.345262][T13224] ? __pfx_do_writepages+0x10/0x10 [ 957.345297][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.345341][T13224] ? reacquire_held_locks+0xcd/0x1f0 [ 957.345400][T13224] ? writeback_sb_inodes+0x3b0/0xfa0 [ 957.345454][T13224] __writeback_single_inode+0x160/0xfb0 [ 957.345506][T13224] ? __pfx___writeback_single_inode+0x10/0x10 [ 957.345552][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.345596][T13224] ? do_raw_spin_unlock+0x172/0x230 [ 957.345638][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.345691][T13224] writeback_sb_inodes+0x60d/0xfa0 [ 957.345765][T13224] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 957.345813][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.345857][T13224] ? find_held_lock+0x2b/0x80 [ 957.345984][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.346027][T13224] ? rcu_is_watching+0x12/0xc0 [ 957.346080][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.346123][T13224] ? queue_io+0x3f6/0x520 [ 957.346170][T13224] wb_writeback+0x419/0xb70 [ 957.346231][T13224] ? __pfx_wb_writeback+0x10/0x10 [ 957.346273][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.346333][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.346376][T13224] ? mark_held_locks+0x49/0x80 [ 957.346444][T13224] wb_workfn+0x14d/0xbe0 [ 957.346498][T13224] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 957.346550][T13224] ? __pfx_wb_workfn+0x10/0x10 [ 957.346603][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.346652][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.346703][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.346758][T13224] ? rcu_is_watching+0x12/0xc0 [ 957.346820][T13224] process_one_work+0x9cf/0x1b70 [ 957.346884][T13224] ? __pfx_process_one_work+0x10/0x10 [ 957.346926][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.346984][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.347027][T13224] ? assign_work+0x1a0/0x250 [ 957.347071][T13224] worker_thread+0x6c8/0xf10 [ 957.347138][T13224] ? __pfx_worker_thread+0x10/0x10 [ 957.347180][T13224] kthread+0x3c5/0x780 [ 957.347218][T13224] ? __pfx_kthread+0x10/0x10 [ 957.347257][T13224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 957.347300][T13224] ? rcu_is_watching+0x12/0xc0 [ 957.347348][T13224] ? __pfx_kthread+0x10/0x10 [ 957.347387][T13224] ret_from_fork+0x675/0x7d0 [ 957.347448][T13224] ? __pfx_kthread+0x10/0x10 [ 957.347486][T13224] ret_from_fork_asm+0x1a/0x30 [ 957.347570][T13224] [ 957.347583][T13224] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 957.406265][T13218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.760109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.016320][T23143] overlayfs: failed to resolve './file0': -2 [ 958.311090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.602026][T23160] loop6: detected capacity change from 0 to 256 [ 958.609309][T23160] exfat: Deprecated parameter 'utf8' [ 958.633834][T23160] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 959.862034][T23202] net_ratelimit: 11 callbacks suppressed [ 959.862060][T23202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.913516][T23202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.931487][T23202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.941895][T23202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.950313][T23202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.959773][T23201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.006150][T23183] loop3: detected capacity change from 0 to 32768 [ 960.017814][T23183] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6070 (23183) [ 960.047898][T23183] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 960.069115][T23183] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 960.115308][T23198] team0: left promiscuous mode [ 960.131797][T13224] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 960.151843][T13224] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 960.170482][T13224] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 960.208656][T13224] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 960.243148][T23183] BTRFS info (device loop3): rebuilding free space tree [ 960.271463][T23183] BTRFS info (device loop3): setting nodatasum [ 960.320088][T23183] BTRFS info (device loop3): setting nodatacow [ 960.348529][T23183] BTRFS info (device loop3): enabling ssd optimizations [ 960.379950][T23183] BTRFS info (device loop3): turning on async discard [ 960.394682][T18324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.416638][T23183] BTRFS info (device loop3): enabling free space tree [ 960.430809][T23183] BTRFS info (device loop3): force clearing of disk cache [ 960.450913][T23183] BTRFS info (device loop3): enabling auto defrag [ 960.492185][T23183] BTRFS info (device loop3): max_inline set to 0 [ 960.670795][T23183] loop3: detected capacity change from 32768 to 64 [ 960.714854][T23183] syz.3.6070: attempt to access beyond end of device [ 960.714854][T23183] loop3: rw=6145, sector=10240, nr_sectors = 8 limit=64 [ 960.750976][T23183] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 960.773318][T23183] syz.3.6070: attempt to access beyond end of device [ 960.773318][T23183] loop3: rw=6145, sector=10248, nr_sectors = 8 limit=64 [ 960.787099][T23183] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 960.798632][T23183] syz.3.6070: attempt to access beyond end of device [ 960.798632][T23183] loop3: rw=6145, sector=10464, nr_sectors = 8 limit=64 [ 960.812836][T23183] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 960.829933][T23183] syz.3.6070: attempt to access beyond end of device [ 960.829933][T23183] loop3: rw=6145, sector=10472, nr_sectors = 8 limit=64 [ 960.848181][T23183] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 960.859310][T23183] syz.3.6070: attempt to access beyond end of device [ 960.859310][T23183] loop3: rw=6145, sector=10480, nr_sectors = 8 limit=64 [ 960.920741][T23183] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0 [ 960.946352][T23183] syz.3.6070: attempt to access beyond end of device [ 960.946352][T23183] loop3: rw=6145, sector=10488, nr_sectors = 8 limit=64 [ 960.979915][T23183] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 6, rd 0, flush 0, corrupt 0, gen 0 [ 961.001698][T23183] BTRFS: error (device loop3) in btrfs_commit_transaction:2535: errno=-5 IO failure (Error while writing out transaction) [ 961.016209][T23183] BTRFS info (device loop3 state E): forced readonly [ 961.053597][T23183] BTRFS warning (device loop3 state E): Skipping commit of aborted transaction. [ 961.070093][T23183] BTRFS error (device loop3 state EA): Transaction aborted (error -5) [ 961.079709][T23183] BTRFS: error (device loop3 state EA) in cleanup_transaction:2020: errno=-5 IO failure [ 961.139641][ T5827] BTRFS info (device loop3 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 961.433303][T18324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.618693][T23264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6101'. [ 961.672274][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.680718][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.747639][T23264] nbd: socks must be embedded in a SOCK_ITEM attr [ 962.406058][T23287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6109'. [ 962.749047][T23294] loop3: detected capacity change from 0 to 8 [ 963.574017][T23331] loop9: detected capacity change from 0 to 164 [ 963.580710][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 963.744188][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 963.761069][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 963.779050][T23335] loop6: detected capacity change from 0 to 64 [ 963.779046][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 963.779117][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.836606][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 963.850963][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 963.859153][ T30] audit: type=1800 audit(1762303339.422:654): pid=23335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6131" name="bus" dev="loop6" ino=23 res=0 errno=0 [ 963.889914][ T24] usb 4-1: Product: syz [ 963.900622][ T24] usb 4-1: Manufacturer: syz [ 963.914526][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 963.929893][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 963.942348][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 963.955597][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 964.224263][ T9405] usb 4-1: USB disconnect, device number 45 [ 964.613502][T23353] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6139'. [ 964.630632][T23353] netlink: 'syz.8.6139': attribute type 1 has an invalid length. [ 964.638452][T23353] netlink: 'syz.8.6139': attribute type 2 has an invalid length. [ 964.651295][T23353] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6139'. [ 964.750713][ T9405] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 964.880789][ T24] net_ratelimit: 13 callbacks suppressed [ 964.880817][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.915497][ T9405] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 964.927168][ T9405] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.958573][ T9405] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 964.992645][ T9405] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.028501][ T9405] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 965.058087][ T9405] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 965.077371][ T9405] usb 4-1: Product: syz [ 965.089183][ T9405] usb 4-1: Manufacturer: syz [ 965.110034][ T9405] cdc_wdm 4-1:1.0: skipping garbage [ 965.122991][ T9405] cdc_wdm 4-1:1.0: skipping garbage [ 965.136979][ T9405] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 965.157247][ T9405] cdc_wdm 4-1:1.0: Unknown control protocol [ 965.201346][T23347] loop6: detected capacity change from 0 to 40427 [ 965.217709][T23347] F2FS-fs (loop6): invalid crc value [ 965.382932][T23347] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 965.426642][T23347] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 965.591249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.599813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.609129][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.723473][T18130] syz-executor: attempt to access beyond end of device [ 965.723473][T18130] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 965.783758][T18130] CPU: 1 UID: 0 PID: 18130 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 965.783795][T18130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 965.783812][T18130] Call Trace: [ 965.783822][T18130] [ 965.783833][T18130] dump_stack_lvl+0x16c/0x1f0 [ 965.783871][T18130] f2fs_handle_critical_error+0x624/0x9f0 [ 965.783904][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.783938][T18130] ? f2fs_build_fault_attr+0x53/0x1f0 [ 965.783990][T18130] f2fs_write_end_io+0x958/0xcf0 [ 965.784026][T18130] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 965.784067][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.784108][T18130] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 965.784139][T18130] bio_endio+0x713/0x860 [ 965.784180][T18130] submit_bio_noacct+0x306/0x1f60 [ 965.784218][T18130] __submit_merged_bio+0x33c/0x770 [ 965.784254][T18130] __submit_merged_write_cond+0x319/0x3f0 [ 965.784296][T18130] f2fs_write_cache_pages+0x2067/0x2570 [ 965.784355][T18130] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 965.784398][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.784431][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.784464][T18130] ? __bfs+0x148/0x290 [ 965.784508][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.784540][T18130] ? check_irq_usage+0xcb/0x920 [ 965.784653][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.784692][T18130] f2fs_write_data_pages+0x4ad/0xd90 [ 965.784737][T18130] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 965.784772][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.784814][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.784851][T18130] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 965.784891][T18130] do_writepages+0x27a/0x600 [ 965.784925][T18130] ? __pfx_do_writepages+0x10/0x10 [ 965.784951][T18130] ? do_raw_spin_unlock+0x172/0x230 [ 965.784983][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.785015][T18130] ? _raw_spin_unlock+0x28/0x50 [ 965.785050][T18130] filemap_fdatawrite_wbc+0x104/0x160 [ 965.785082][T18130] __filemap_fdatawrite_range+0xb9/0x100 [ 965.785121][T18130] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 965.785201][T18130] ? find_held_lock+0x2b/0x80 [ 965.785237][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.785271][T18130] ? do_raw_spin_unlock+0x172/0x230 [ 965.785303][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.785341][T18130] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 965.785395][T18130] block_operations+0x2b0/0xfe0 [ 965.785433][T18130] ? __pfx_stack_trace_save+0x10/0x10 [ 965.785482][T18130] ? __pfx_block_operations+0x10/0x10 [ 965.785520][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.785594][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.785630][T18130] ? ktime_get+0x200/0x310 [ 965.785669][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.785701][T18130] ? lockdep_hardirqs_on+0x7c/0x110 [ 965.785734][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.785766][T18130] ? rcu_is_watching+0x12/0xc0 [ 965.785808][T18130] f2fs_write_checkpoint+0x32b/0x5300 [ 965.785849][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.785887][T18130] ? kfree+0x2b8/0x6d0 [ 965.785918][T18130] ? f2fs_stop_gc_thread+0x79/0xd0 [ 965.785962][T18130] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 965.786001][T18130] kill_f2fs_super+0x3d6/0x490 [ 965.786048][T18130] ? __pfx_kill_f2fs_super+0x10/0x10 [ 965.786101][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.786147][T18130] deactivate_locked_super+0xc1/0x1a0 [ 965.786187][T18130] deactivate_super+0xde/0x100 [ 965.786228][T18130] cleanup_mnt+0x225/0x450 [ 965.786271][T18130] task_work_run+0x150/0x240 [ 965.786304][T18130] ? __pfx_task_work_run+0x10/0x10 [ 965.786332][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.786367][T18130] ? __pfx___x64_sys_umount+0x10/0x10 [ 965.786419][T18130] exit_to_user_mode_loop+0xec/0x130 [ 965.786451][T18130] do_syscall_64+0x426/0xfa0 [ 965.786488][T18130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.786515][T18130] RIP: 0033:0x7fb169f909f7 [ 965.786537][T18130] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 965.786564][T18130] RSP: 002b:00007fffd2190d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 965.786590][T18130] RAX: 0000000000000000 RBX: 00007fb16a011d7d RCX: 00007fb169f909f7 [ 965.786608][T18130] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd2190e00 [ 965.786625][T18130] RBP: 00007fffd2190e00 R08: 0000000000000000 R09: 0000000000000000 [ 965.786642][T18130] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd2191e90 [ 965.786660][T18130] R13: 00007fb16a011d7d R14: 00000000000ebb94 R15: 00007fffd2191ed0 [ 965.786699][T18130] [ 965.787315][T18130] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 966.631636][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.886393][ T5930] usb 4-1: USB disconnect, device number 46 [ 967.431132][T13224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.439453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.671095][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.694481][T23391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.703698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.737920][T23392] loop3: detected capacity change from 0 to 256 [ 968.275874][T23412] netlink: 408 bytes leftover after parsing attributes in process `syz.6.6162'. [ 968.309883][T23416] loop8: detected capacity change from 0 to 512 [ 968.331081][T23416] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 968.371153][T23416] EXT4-fs (loop8): 1 orphan inode deleted [ 968.383668][T23416] EXT4-fs (loop8): 1 truncate cleaned up [ 968.425897][T23416] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.462294][T23422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6166'. [ 968.500799][T23422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.524711][T23416] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 968.719706][ T9475] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.771732][T23422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.870028][T23467] loop8: detected capacity change from 0 to 512 [ 969.886488][T23467] EXT4-fs: Ignoring removed bh option [ 970.015914][T23467] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.112967][T23467] ext4 filesystem being mounted at /879/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 970.520874][T23481] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6188'. [ 970.637039][T13222] net_ratelimit: 3 callbacks suppressed [ 970.637068][T13222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.651416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.791968][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.844319][ T9475] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.952576][ T9431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.831246][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.864529][T13224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.874136][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.891829][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.084244][T23521] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6203'. [ 972.198494][T23521] nbd: socks must be embedded in a SOCK_ITEM attr [ 972.253760][T23509] loop3: detected capacity change from 0 to 32768 [ 972.295827][T23509] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 972.358129][T23505] loop6: detected capacity change from 0 to 32768 [ 972.368673][T23505] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6195 (23505) [ 972.419735][T23505] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 972.435566][T23505] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 972.447471][T23509] XFS (loop3): Ending clean mount [ 972.548532][ T30] audit: type=1800 audit(1762303348.092:655): pid=23509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6197" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 972.581173][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.589544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.704088][T23505] BTRFS info (device loop6): rebuilding free space tree [ 972.759725][T23505] BTRFS info (device loop6): setting nodatasum [ 972.779499][T23505] BTRFS info (device loop6): setting nodatacow [ 972.816694][T23505] BTRFS info (device loop6): enabling ssd optimizations [ 972.826227][T23505] BTRFS info (device loop6): turning on async discard [ 972.833145][T23505] BTRFS info (device loop6): enabling free space tree [ 972.840009][T23505] BTRFS info (device loop6): force clearing of disk cache [ 972.860462][T23505] BTRFS info (device loop6): enabling auto defrag [ 972.873880][T23505] BTRFS info (device loop6): max_inline set to 0 [ 972.947818][ T5827] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 973.125683][T23505] loop6: detected capacity change from 32768 to 64 [ 973.167759][T23571] syz.6.6195: attempt to access beyond end of device [ 973.167759][T23571] loop6: rw=145409, sector=128, nr_sectors = 8 limit=64 [ 973.255531][T23571] BTRFS warning (device loop6): lost super block write due to IO error on /dev/loop6 (-5) [ 973.312975][T23571] BTRFS error (device loop6): bdev /dev/loop6 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 973.354272][T23571] BTRFS error (device loop6): 1 errors while writing supers [ 973.400647][T23571] BTRFS: error (device loop6) in write_all_supers:4086: errno=-5 IO failure (1 errors while writing supers) [ 973.440691][T23571] BTRFS info (device loop6 state E): forced readonly [ 973.463015][T23571] BTRFS warning (device loop6 state E): Skipping commit of aborted transaction. [ 973.478467][T23571] BTRFS error (device loop6 state EA): Transaction aborted (error -5) [ 973.527136][T23571] BTRFS: error (device loop6 state EA) in cleanup_transaction:2020: errno=-5 IO failure [ 973.660914][T18130] BTRFS info (device loop6 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 973.794291][T23588] loop3: detected capacity change from 0 to 1024 [ 973.894919][T23588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 974.268330][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.449551][T23582] loop8: detected capacity change from 0 to 32768 [ 974.753294][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 974.973749][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 975.002917][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.020824][ T24] usb 7-1: Product: syz [ 975.031102][ T24] usb 7-1: Manufacturer: syz [ 975.038268][ T24] usb 7-1: SerialNumber: syz [ 975.697653][T23613] loop8: detected capacity change from 0 to 32768 [ 975.762289][ T30] audit: type=1800 audit(1762303351.332:656): pid=23613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6226" name="file2" dev="loop8" ino=5 res=0 errno=0 [ 975.794334][T23627] netlink: 'syz.7.6235': attribute type 30 has an invalid length. [ 976.008676][T13224] kworker/u8:12: attempt to access beyond end of device [ 976.008676][T13224] loop8: rw=1, sector=2621792, nr_sectors = 8 limit=32768 [ 976.038618][T13224] Buffer I/O error on dev loop8, logical block 327724, lost async page write [ 976.066429][ T111] blkno = 5002c, nblocks = 1 [ 976.069082][ T24] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 976.078507][ T9405] net_ratelimit: 8 callbacks suppressed [ 976.078531][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.097708][ T111] ERROR: (device loop8): dbUpdatePMap: blocks are outside the map [ 976.097708][ T111] [ 976.121393][ T111] ERROR: (device loop8): remounting filesystem as read-only [ 976.298970][ T24] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 976.350129][ T24] usb 7-1: USB disconnect, device number 27 [ 976.376270][ T24] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 976.392023][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.400416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.947563][T23664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6249'. [ 976.959319][T23664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6249'. [ 977.033861][T13220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.042963][ T9431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.051103][ T9431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.060780][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.200664][ T9437] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 977.349491][T23680] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6258'. [ 977.360517][ T9437] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 977.372165][ T9437] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 977.390116][ T9437] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 977.399622][ T9437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.419869][T23663] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 977.427570][T23663] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 977.446654][ T9437] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 977.678773][ T9437] usb 4-1: USB disconnect, device number 47 [ 978.075966][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.311501][T13224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.319928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.372747][T23688] loop8: detected capacity change from 0 to 40427 [ 978.413762][T23688] F2FS-fs (loop8): invalid crc value [ 978.697833][T23688] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 978.787092][T23688] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 979.093101][ T9475] syz-executor: attempt to access beyond end of device [ 979.093101][ T9475] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 979.150663][ T9475] CPU: 0 UID: 0 PID: 9475 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 979.150713][ T9475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 979.150736][ T9475] Call Trace: [ 979.150748][ T9475] [ 979.150762][ T9475] dump_stack_lvl+0x16c/0x1f0 [ 979.150817][ T9475] f2fs_handle_critical_error+0x624/0x9f0 [ 979.150860][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.150906][ T9475] ? f2fs_build_fault_attr+0x53/0x1f0 [ 979.150978][ T9475] f2fs_write_end_io+0x958/0xcf0 [ 979.151027][ T9475] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 979.151076][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.151132][ T9475] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 979.151175][ T9475] bio_endio+0x713/0x860 [ 979.151230][ T9475] submit_bio_noacct+0x306/0x1f60 [ 979.151281][ T9475] __submit_merged_bio+0x33c/0x770 [ 979.151331][ T9475] __submit_merged_write_cond+0x319/0x3f0 [ 979.151388][ T9475] f2fs_write_cache_pages+0x2067/0x2570 [ 979.151468][ T9475] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 979.151524][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.151584][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.151629][ T9475] ? __lock_acquire+0x622/0x1c90 [ 979.151770][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.151822][ T9475] ? mod_memcg_lruvec_state+0x389/0x5f0 [ 979.151879][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.151932][ T9475] f2fs_write_data_pages+0x4ad/0xd90 [ 979.151992][ T9475] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 979.152041][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.152097][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.152147][ T9475] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 979.152202][ T9475] do_writepages+0x27a/0x600 [ 979.152247][ T9475] ? __pfx_do_writepages+0x10/0x10 [ 979.152283][ T9475] ? do_raw_spin_unlock+0x172/0x230 [ 979.152326][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.152371][ T9475] ? _raw_spin_unlock+0x28/0x50 [ 979.152415][ T9475] filemap_fdatawrite_wbc+0x104/0x160 [ 979.152458][ T9475] __filemap_fdatawrite_range+0xb9/0x100 [ 979.152511][ T9475] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 979.152621][ T9475] ? find_held_lock+0x2b/0x80 [ 979.152670][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.152716][ T9475] ? do_raw_spin_unlock+0x172/0x230 [ 979.152759][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.152816][ T9475] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 979.152891][ T9475] block_operations+0x2b0/0xfe0 [ 979.152955][ T9475] ? __pfx_block_operations+0x10/0x10 [ 979.153068][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.153116][ T9475] ? ktime_get+0x200/0x310 [ 979.153169][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.153213][ T9475] ? lockdep_hardirqs_on+0x7c/0x110 [ 979.153257][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.153302][ T9475] ? rcu_is_watching+0x12/0xc0 [ 979.153357][ T9475] f2fs_write_checkpoint+0x32b/0x5300 [ 979.153421][ T9475] ? kfree+0x2b8/0x6d0 [ 979.153462][ T9475] ? f2fs_stop_gc_thread+0x79/0xd0 [ 979.153524][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.153568][ T9475] ? rcu_is_watching+0x12/0xc0 [ 979.153616][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.153660][ T9475] ? kthread_stop+0x272/0x630 [ 979.153700][ T9475] kill_f2fs_super+0x3d6/0x490 [ 979.153755][ T9475] ? __pfx_kill_f2fs_super+0x10/0x10 [ 979.153833][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.153895][ T9475] deactivate_locked_super+0xc1/0x1a0 [ 979.153949][ T9475] deactivate_super+0xde/0x100 [ 979.154004][ T9475] cleanup_mnt+0x225/0x450 [ 979.154064][ T9475] task_work_run+0x150/0x240 [ 979.154108][ T9475] ? __pfx_task_work_run+0x10/0x10 [ 979.154147][ T9475] ? srso_alias_return_thunk+0x5/0xfbef5 [ 979.154194][ T9475] ? __pfx___x64_sys_umount+0x10/0x10 [ 979.154263][ T9475] exit_to_user_mode_loop+0xec/0x130 [ 979.154307][ T9475] do_syscall_64+0x426/0xfa0 [ 979.154355][ T9475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.154393][ T9475] RIP: 0033:0x7f669f5909f7 [ 979.154423][ T9475] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 979.154459][ T9475] RSP: 002b:00007fffa64563a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 979.154494][ T9475] RAX: 0000000000000000 RBX: 00007f669f611d7d RCX: 00007f669f5909f7 [ 979.154519][ T9475] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa6456460 [ 979.154544][ T9475] RBP: 00007fffa6456460 R08: 0000000000000000 R09: 0000000000000000 [ 979.154567][ T9475] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffa64574f0 [ 979.154592][ T9475] R13: 00007f669f611d7d R14: 00000000000eefd0 R15: 00007fffa6457530 [ 979.154644][ T9475] [ 979.609084][ T9475] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 979.809253][T23735] netlink: 'syz.4.6281': attribute type 30 has an invalid length. [ 980.059721][T23726] loop3: detected capacity change from 0 to 40427 [ 980.086338][T23726] F2FS-fs (loop3): build fault injection rate: 14 [ 980.093439][T23726] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 980.121316][T23726] F2FS-fs (loop3): invalid crc value [ 980.148410][ C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 980.208468][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 980.436960][T23726] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 980.470652][T23726] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x49d/0x98b0 [ 980.491743][T23726] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 980.534666][T23751] loop8: detected capacity change from 0 to 256 [ 980.542717][T23751] exfat: Deprecated parameter 'namecase' [ 980.580496][T23751] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 980.603772][T23726] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 980.630932][ T30] audit: type=1800 audit(1762303356.172:657): pid=23751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6279" name="file1" dev="loop8" ino=1048788 res=0 errno=0 [ 980.690980][T23752] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of f2fs_rename2+0x911/0x29a0 [ 980.736544][T23726] F2FS-fs (loop3): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x24d/0xc30 [ 980.992025][ T5827] syz-executor: attempt to access beyond end of device [ 980.992025][ T5827] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 981.040660][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 981.040709][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 981.040733][ T5827] Call Trace: [ 981.040746][ T5827] [ 981.040761][ T5827] dump_stack_lvl+0x16c/0x1f0 [ 981.040812][ T5827] f2fs_handle_critical_error+0x624/0x9f0 [ 981.040857][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.040904][ T5827] ? f2fs_build_fault_attr+0x53/0x1f0 [ 981.040977][ T5827] f2fs_write_end_io+0x958/0xcf0 [ 981.041027][ T5827] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 981.041085][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.041142][ T5827] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 981.041185][ T5827] bio_endio+0x713/0x860 [ 981.041242][ T5827] submit_bio_noacct+0x306/0x1f60 [ 981.041296][ T5827] __submit_merged_bio+0x33c/0x770 [ 981.041348][ T5827] __submit_merged_write_cond+0x319/0x3f0 [ 981.041407][ T5827] f2fs_write_cache_pages+0x2067/0x2570 [ 981.041493][ T5827] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 981.041552][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.041616][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.041660][ T5827] ? __lock_acquire+0x622/0x1c90 [ 981.041822][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.041867][ T5827] ? mod_memcg_lruvec_state+0x389/0x5f0 [ 981.041929][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.041984][ T5827] f2fs_write_data_pages+0x4ad/0xd90 [ 981.042052][ T5827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 981.042101][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.042160][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.042212][ T5827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 981.042267][ T5827] do_writepages+0x27a/0x600 [ 981.042313][ T5827] ? __pfx_do_writepages+0x10/0x10 [ 981.042349][ T5827] ? do_raw_spin_unlock+0x172/0x230 [ 981.042393][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.042437][ T5827] ? _raw_spin_unlock+0x28/0x50 [ 981.042482][ T5827] filemap_fdatawrite_wbc+0x104/0x160 [ 981.042527][ T5827] __filemap_fdatawrite_range+0xb9/0x100 [ 981.042580][ T5827] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 981.042700][ T5827] ? find_held_lock+0x2b/0x80 [ 981.042749][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.042795][ T5827] ? do_raw_spin_unlock+0x172/0x230 [ 981.042837][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.042891][ T5827] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 981.042968][ T5827] block_operations+0x2b0/0xfe0 [ 981.043036][ T5827] ? __pfx_block_operations+0x10/0x10 [ 981.043161][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.043209][ T5827] ? ktime_get+0x200/0x310 [ 981.043264][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.043311][ T5827] ? lockdep_hardirqs_on+0x7c/0x110 [ 981.043356][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.043401][ T5827] ? rcu_is_watching+0x12/0xc0 [ 981.043460][ T5827] f2fs_write_checkpoint+0x32b/0x5300 [ 981.043530][ T5827] ? kfree+0x2b8/0x6d0 [ 981.043572][ T5827] ? f2fs_stop_gc_thread+0x79/0xd0 [ 981.043634][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.043681][ T5827] ? rcu_is_watching+0x12/0xc0 [ 981.043730][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.043774][ T5827] ? kthread_stop+0x272/0x630 [ 981.043815][ T5827] kill_f2fs_super+0x3d6/0x490 [ 981.043871][ T5827] ? __pfx_kill_f2fs_super+0x10/0x10 [ 981.043952][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.044015][ T5827] deactivate_locked_super+0xc1/0x1a0 [ 981.044080][ T5827] deactivate_super+0xde/0x100 [ 981.044135][ T5827] cleanup_mnt+0x225/0x450 [ 981.044194][ T5827] task_work_run+0x150/0x240 [ 981.044238][ T5827] ? __pfx_task_work_run+0x10/0x10 [ 981.044277][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 981.044326][ T5827] ? __pfx___x64_sys_umount+0x10/0x10 [ 981.044397][ T5827] exit_to_user_mode_loop+0xec/0x130 [ 981.044441][ T5827] do_syscall_64+0x426/0xfa0 [ 981.044491][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.044529][ T5827] RIP: 0033:0x7f9ea8f909f7 [ 981.044559][ T5827] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 981.044595][ T5827] RSP: 002b:00007ffda3ac5b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 981.044630][ T5827] RAX: 0000000000000000 RBX: 00007f9ea9011d7d RCX: 00007f9ea8f909f7 [ 981.044654][ T5827] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda3ac5c00 [ 981.044678][ T5827] RBP: 00007ffda3ac5c00 R08: 0000000000000000 R09: 0000000000000000 [ 981.044702][ T5827] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda3ac6c90 [ 981.044726][ T5827] R13: 00007f9ea9011d7d R14: 00000000000ef765 R15: 00007ffda3ac6cd0 [ 981.044784][ T5827] [ 981.044799][ T5827] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 981.511146][T13220] net_ratelimit: 3 callbacks suppressed [ 981.511170][T13220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.511297][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.516979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.219328][T23773] loop6: detected capacity change from 0 to 4096 [ 982.559423][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.112493][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.401688][T23776] overlayfs: failed to resolve './file1': -2 [ 983.431077][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.596150][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.024996][T23799] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6301'. [ 984.085923][T13222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.094366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.203535][T23805] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6306'. [ 984.631236][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.658747][T23799] netlink: 168 bytes leftover after parsing attributes in process `syz.9.6301'. [ 986.635537][T23828] pim6reg1: entered promiscuous mode [ 986.650831][T23828] pim6reg1: entered allmulticast mode [ 986.710901][ T5999] net_ratelimit: 2 callbacks suppressed [ 986.710930][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.852924][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.272916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.286545][T13224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.294990][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.791078][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.007681][T23858] input: syz1 as /devices/virtual/input/input76 [ 988.871276][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.132901][T23889] netlink: 'syz.4.6344': attribute type 7 has an invalid length. [ 989.154094][T23865] loop3: detected capacity change from 0 to 32768 [ 989.191937][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.193751][T23865] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 989.213537][T23889] netlink: 'syz.4.6344': attribute type 7 has an invalid length. [ 989.222831][T13224] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.259213][ T1109] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.286540][ T1109] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.302162][T23865] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 989.323384][ T1109] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.475857][ T30] audit: type=1800 audit(1762303365.042:658): pid=23865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6333" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 989.540724][ T30] audit: type=1800 audit(1762303365.052:659): pid=23865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6333" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 989.561525][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.657549][ T5827] ocfs2: Unmounting device (7,3) on (node local) [ 989.841111][T13218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.849441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.910991][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.351739][T23926] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6359'. [ 991.266075][T23948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 991.534076][T23958] input: syz1 as /devices/virtual/input/input77 [ 991.980077][ T9437] libceph: connect (1)[c::]:6789 error -101 [ 991.986462][ T9437] libceph: mon0 (1)[c::]:6789 connect error [ 991.992804][ T5999] net_ratelimit: 3 callbacks suppressed [ 991.992826][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.052433][ T9405] libceph: connect (1)[c::]:6789 error -101 [ 992.062281][ T9405] libceph: mon0 (1)[c::]:6789 connect error [ 992.241193][ T9431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.282710][T23985] loop3: detected capacity change from 0 to 764 [ 992.313687][ T9405] libceph: connect (1)[c::]:6789 error -101 [ 992.319867][ T9405] libceph: mon0 (1)[c::]:6789 connect error [ 992.327078][ T9437] libceph: connect (1)[c::]:6789 error -101 [ 992.338739][ T9437] libceph: mon0 (1)[c::]:6789 connect error [ 992.522737][T23991] Invalid source name [ 992.526792][T23991] UBIFS error (pid: 23991): cannot open "./file0", error -22 [ 992.561102][T23993] input: syz0 as /devices/virtual/input/input78 [ 992.791486][T23969] ceph: No mds server is up or the cluster is laggy [ 992.804484][T23973] ceph: No mds server is up or the cluster is laggy [ 992.855121][ T9405] libceph: connect (1)[c::]:6789 error -101 [ 992.862793][ T9405] libceph: mon0 (1)[c::]:6789 connect error [ 992.869062][ T9405] libceph: connect (1)[c::]:6789 error -101 [ 992.885384][ T9405] libceph: mon0 (1)[c::]:6789 connect error [ 993.030962][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.039376][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.051317][T13224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.059608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.378483][T24011] 9pnet_fd: Insufficient options for proto=fd [ 994.071872][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.954317][T24045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 994.972045][T24046] overlayfs: failed to resolve './file0': -2 [ 995.317988][T24053] loop6: detected capacity change from 0 to 512 [ 995.318980][T24038] loop3: detected capacity change from 0 to 65536 [ 995.333327][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.344658][ T9431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.347515][T24053] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 995.394679][T24053] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.6413: bad orphan inode 131083 [ 995.407351][T24038] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 995.420144][T24053] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.457254][T24038] XFS (loop3): Ending clean mount [ 995.542860][ T5827] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 995.564138][T18130] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.593974][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.405481][T24100] loop3: detected capacity change from 0 to 16 [ 996.432566][T24100] erofs (device loop3): mounted with root inode @ nid 36. [ 996.506805][ T5846] erofs (device loop3): failed to decompress -26 in[46, 0] out[9000] [ 996.536706][T24100] erofs (device loop3): failed to decompress -26 in[46, 4050] out[4096] [ 996.581105][T24100] erofs (device loop3): read error -117 @ 0 of nid 89 [ 996.894677][T24116] netlink: 'syz.7.6436': attribute type 1 has an invalid length. [ 996.902878][T24116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 996.910130][T24116] IPv6: NLM_F_CREATE should be set when creating new route [ 996.917438][T24116] IPv6: NLM_F_CREATE should be set when creating new route [ 997.015899][T24118] netlink: 'syz.7.6436': attribute type 1 has an invalid length. [ 997.044797][T24118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 997.052076][T24118] IPv6: NLM_F_CREATE should be set when creating new route [ 997.218061][T24121] loop8: detected capacity change from 0 to 2048 [ 997.237914][T24121] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 997.298291][T24121] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 997.431292][ T9405] net_ratelimit: 2 callbacks suppressed [ 997.431319][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.111417][T24143] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 998.148549][T24147] bpq0: entered allmulticast mode [ 998.391155][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.487582][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.799263][T13218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.808007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.110768][ T24] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 999.272659][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.295133][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.318559][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 999.345032][ T24] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 999.370821][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.384720][ T24] usb 10-1: config 0 descriptor?? [ 999.392295][T24194] loop6: detected capacity change from 0 to 1024 [ 999.460833][ T9431] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 999.510776][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.610999][ T9431] usb 4-1: Using ep0 maxpacket: 32 [ 999.622169][ T9431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.634232][ T9431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.655569][ T9431] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 999.663366][T24166] ceph: No mds server is up or the cluster is laggy [ 999.666870][T24173] ceph: No mds server is up or the cluster is laggy [ 999.682755][ T9431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.779829][T13218] hfsplus: b-tree write err: -5, ino 4 [ 999.832560][ T9431] usb 4-1: config 0 descriptor?? [ 999.842297][ T9431] hub 4-1:0.0: USB hub found [ 999.867958][T24201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.901462][T24201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.909868][T24201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.954992][T24203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.034762][ T24] plantronics 0003:047F:FFFF.004C: reserved main item tag 0xd [ 1000.080098][ T9431] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1000.094075][ T24] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1000.311327][ T9431] hid-generic 0003:046D:C31C.004D: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 1000.621087][ T9431] usb 4-1: USB disconnect, device number 48 [ 1000.670676][ T9405] usb 10-1: USB disconnect, device number 13 [ 1001.770413][T24245] ubi31: attaching mtd0 [ 1001.775217][T24245] ubi31 error: ubi_attach_mtd_dev: bad VID header (1839366) or data offsets (1839430) [ 1002.640990][ T9405] net_ratelimit: 9 callbacks suppressed [ 1002.641016][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.642193][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.664276][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.675403][T18324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.817825][T24276] 9pnet_fd: Insufficient options for proto=fd [ 1003.753524][T18324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.818537][T24285] loop8: detected capacity change from 0 to 32768 [ 1003.842195][T24285] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6505 (24285) [ 1003.875647][T24285] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1003.899769][T24285] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm [ 1003.912112][T13220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.920480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.220767][ T24] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1004.471458][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.580765][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 1004.598555][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.653545][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.675725][T24328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.696883][T24328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.706918][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1004.720291][T24328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.740487][T24328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.760478][ T24] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1004.770239][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.787372][T24285] BTRFS info (device loop8): enabling ssd optimizations [ 1004.801477][ T24] usb 10-1: config 0 descriptor?? [ 1004.810948][T24285] BTRFS info (device loop8): turning on async discard [ 1004.817735][T24285] BTRFS info (device loop8): enabling free space tree [ 1004.834815][T24285] BTRFS info (device loop8): use zlib compression, level 3 [ 1005.328607][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 1005.362006][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.004E/input/input79 [ 1005.395989][ T24] microsoft 0003:045E:07DA.004E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1005.462870][T24350] loop3: detected capacity change from 0 to 8 [ 1005.488633][T24350] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1005.509769][T24350] SQUASHFS error: Failed to read block 0x91: -5 [ 1005.523055][T24350] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1005.548749][T24350] SQUASHFS error: Unable to read inode 0x7 [ 1005.559549][ T9475] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1005.630398][T24357] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6531'. [ 1005.643205][ T5846] block nbd6: Receive control failed (result -32) [ 1005.680037][T24355] block nbd6: shutting down sockets [ 1005.822435][ T24] usb 10-1: USB disconnect, device number 14 [ 1006.259050][T24368] loop8: detected capacity change from 0 to 2048 [ 1006.312058][T24368] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1006.357839][T24375] loop6: detected capacity change from 0 to 512 [ 1006.380488][T24375] EXT4-fs: Ignoring removed bh option [ 1006.406892][T24375] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1006.420858][ T30] audit: type=1804 audit(1762303381.982:660): pid=24368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.6527" name="/newroot/936/bus/bus" dev="loop8" ino=1367 res=1 errno=0 [ 1006.426373][T24375] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1006.476289][T24375] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1006.496529][T24375] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 1006.530364][T24375] System zones: 0-2, 18-18, 34-35 [ 1006.550467][T24375] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.754021][T24375] fscrypt (loop6, inode 12): Error -61 getting encryption context [ 1007.280125][T18130] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.066398][T24397] loop9: detected capacity change from 0 to 1024 [ 1008.086255][T24408] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 1008.321545][T24410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6554'. [ 1008.341273][T24403] loop8: detected capacity change from 0 to 65536 [ 1008.356047][ T5999] net_ratelimit: 23 callbacks suppressed [ 1008.356076][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.360629][T24410] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6554'. [ 1008.409941][T24410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6554'. [ 1008.431140][T24403] XFS (loop8): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1008.441105][T24410] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6554'. [ 1008.484250][T24403] XFS (loop8): Ending clean mount [ 1008.551496][ T9475] XFS (loop8): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1009.090654][ T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1009.201201][T24437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6562'. [ 1009.260935][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1009.273182][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1009.300623][ T24] usb 4-1: config 0 has no interface number 0 [ 1009.306771][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1009.353452][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1009.373088][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.390691][ T24] usb 4-1: Product: syz [ 1009.394868][ T24] usb 4-1: Manufacturer: syz [ 1009.399467][ T24] usb 4-1: SerialNumber: syz [ 1009.423726][ T24] usb 4-1: config 0 descriptor?? [ 1009.442325][T18324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.444049][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1009.476738][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 1009.491265][T24429] loop6: detected capacity change from 0 to 40427 [ 1009.509771][T24429] F2FS-fs (loop6): Image doesn't support compression [ 1009.518421][T24429] F2FS-fs (loop6): build fault injection rate: 690 [ 1009.536746][T24429] F2FS-fs (loop6): invalid crc value [ 1009.661058][ T1109] hfsplus: b-tree write err: -5, ino 4 [ 1009.672466][T13218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.680935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.690048][T13220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.698441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.716645][T24429] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1009.753176][T24429] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1009.908480][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1009.977871][T18130] syz-executor: attempt to access beyond end of device [ 1009.977871][T18130] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1009.992362][T18130] CPU: 0 UID: 0 PID: 18130 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1009.992408][T18130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1009.992432][T18130] Call Trace: [ 1009.992444][T18130] [ 1009.992459][T18130] dump_stack_lvl+0x16c/0x1f0 [ 1009.992511][T18130] f2fs_handle_critical_error+0x624/0x9f0 [ 1009.992556][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.992602][T18130] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1009.992675][T18130] f2fs_write_end_io+0x958/0xcf0 [ 1009.992725][T18130] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1009.992776][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.992833][T18130] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1009.992876][T18130] bio_endio+0x713/0x860 [ 1009.992934][T18130] submit_bio_noacct+0x306/0x1f60 [ 1009.992987][T18130] __submit_merged_bio+0x33c/0x770 [ 1009.993039][T18130] __submit_merged_write_cond+0x319/0x3f0 [ 1009.993103][T18130] f2fs_write_cache_pages+0x2067/0x2570 [ 1009.993188][T18130] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1009.993245][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.993308][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.993356][T18130] ? __lock_acquire+0x622/0x1c90 [ 1009.993468][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.993513][T18130] ? find_held_lock+0x2b/0x80 [ 1009.993608][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.993653][T18130] ? mod_memcg_lruvec_state+0x389/0x5f0 [ 1009.993712][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.993769][T18130] f2fs_write_data_pages+0x4ad/0xd90 [ 1009.993834][T18130] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1009.993882][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.993941][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.993993][T18130] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1009.994048][T18130] do_writepages+0x27a/0x600 [ 1009.994099][T18130] ? __pfx_do_writepages+0x10/0x10 [ 1009.994135][T18130] ? do_raw_spin_unlock+0x172/0x230 [ 1009.994179][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.994224][T18130] ? _raw_spin_unlock+0x28/0x50 [ 1009.994268][T18130] filemap_fdatawrite_wbc+0x104/0x160 [ 1009.994313][T18130] __filemap_fdatawrite_range+0xb9/0x100 [ 1009.994366][T18130] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1009.994498][T18130] ? find_held_lock+0x2b/0x80 [ 1009.994548][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.994594][T18130] ? do_raw_spin_unlock+0x172/0x230 [ 1009.994638][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.994690][T18130] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 1009.994767][T18130] block_operations+0x2b0/0xfe0 [ 1009.994818][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.994878][T18130] ? __pfx_block_operations+0x10/0x10 [ 1009.994929][T18130] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 1009.995033][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.995087][T18130] ? ktime_get+0x200/0x310 [ 1009.995140][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.995185][T18130] ? lockdep_hardirqs_on+0x7c/0x110 [ 1009.995229][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.995273][T18130] ? rcu_is_watching+0x12/0xc0 [ 1009.995330][T18130] f2fs_write_checkpoint+0x32b/0x5300 [ 1009.995405][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.995450][T18130] ? rcu_is_watching+0x12/0xc0 [ 1009.995497][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.995542][T18130] ? kthread_stop+0x272/0x630 [ 1009.995584][T18130] kill_f2fs_super+0x3d6/0x490 [ 1009.995640][T18130] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1009.995715][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.995779][T18130] deactivate_locked_super+0xc1/0x1a0 [ 1009.995834][T18130] deactivate_super+0xde/0x100 [ 1009.995889][T18130] cleanup_mnt+0x225/0x450 [ 1009.995950][T18130] task_work_run+0x150/0x240 [ 1009.995994][T18130] ? __pfx_task_work_run+0x10/0x10 [ 1009.996033][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1009.996088][T18130] ? __pfx___x64_sys_umount+0x10/0x10 [ 1009.996160][T18130] exit_to_user_mode_loop+0xec/0x130 [ 1009.996203][T18130] do_syscall_64+0x426/0xfa0 [ 1009.996253][T18130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.996291][T18130] RIP: 0033:0x7fb169f909f7 [ 1009.996320][T18130] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1009.996356][T18130] RSP: 002b:00007fffd2190d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1009.996391][T18130] RAX: 0000000000000000 RBX: 00007fb16a011d7d RCX: 00007fb169f909f7 [ 1009.996415][T18130] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd2190e00 [ 1009.996437][T18130] RBP: 00007fffd2190e00 R08: 0000000000000000 R09: 0000000000000000 [ 1009.996461][T18130] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd2191e90 [ 1009.996484][T18130] R13: 00007fb16a011d7d R14: 00000000000f68fc R15: 00007fffd2191ed0 [ 1009.996540][T18130] [ 1009.996554][T18130] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1010.240862][ T30] audit: type=1326 audit(1762303385.792:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24448 comm="syz.9.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06dd8f6c9 code=0x7ffc0000 [ 1010.245961][T18130] CPU: 0 UID: 0 PID: 18130 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1010.246006][T18130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1010.246027][T18130] Call Trace: [ 1010.246040][T18130] [ 1010.246054][T18130] dump_stack_lvl+0x16c/0x1f0 [ 1010.246105][T18130] f2fs_handle_critical_error+0x624/0x9f0 [ 1010.246149][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.246192][T18130] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1010.246262][T18130] f2fs_write_end_io+0x958/0xcf0 [ 1010.246312][T18130] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1010.246362][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.246417][T18130] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1010.246458][T18130] bio_endio+0x713/0x860 [ 1010.246514][T18130] submit_bio_noacct+0x306/0x1f60 [ 1010.246566][T18130] __submit_merged_bio+0x33c/0x770 [ 1010.246616][T18130] __submit_merged_write_cond+0x319/0x3f0 [ 1010.246674][T18130] f2fs_write_cache_pages+0x2067/0x2570 [ 1010.246777][T18130] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1010.246839][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.246900][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.246942][T18130] ? __lock_acquire+0x622/0x1c90 [ 1010.247049][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.247091][T18130] ? find_held_lock+0x2b/0x80 [ 1010.247179][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.247222][T18130] ? mod_memcg_lruvec_state+0x389/0x5f0 [ 1010.247279][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.247332][T18130] f2fs_write_data_pages+0x4ad/0xd90 [ 1010.247392][T18130] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1010.247439][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.247496][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.247546][T18130] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1010.247599][T18130] do_writepages+0x27a/0x600 [ 1010.247645][T18130] ? __pfx_do_writepages+0x10/0x10 [ 1010.247679][T18130] ? do_raw_spin_unlock+0x172/0x230 [ 1010.247721][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.247764][T18130] ? _raw_spin_unlock+0x28/0x50 [ 1010.247807][T18130] filemap_fdatawrite_wbc+0x104/0x160 [ 1010.247856][T18130] __filemap_fdatawrite_range+0xb9/0x100 [ 1010.247907][T18130] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1010.248025][T18130] ? find_held_lock+0x2b/0x80 [ 1010.248072][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.248117][T18130] ? do_raw_spin_unlock+0x172/0x230 [ 1010.248158][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.248210][T18130] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 1010.248284][T18130] block_operations+0x2b0/0xfe0 [ 1010.248334][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.248392][T18130] ? __pfx_block_operations+0x10/0x10 [ 1010.248440][T18130] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 1010.248543][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.248591][T18130] ? ktime_get+0x200/0x310 [ 1010.248642][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.248684][T18130] ? lockdep_hardirqs_on+0x7c/0x110 [ 1010.248727][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.248770][T18130] ? rcu_is_watching+0x12/0xc0 [ 1010.248830][T18130] f2fs_write_checkpoint+0x32b/0x5300 [ 1010.248902][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.248944][T18130] ? rcu_is_watching+0x12/0xc0 [ 1010.248990][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.249032][T18130] ? kthread_stop+0x272/0x630 [ 1010.249073][T18130] kill_f2fs_super+0x3d6/0x490 [ 1010.249126][T18130] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1010.249199][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.249261][T18130] deactivate_locked_super+0xc1/0x1a0 [ 1010.249315][T18130] deactivate_super+0xde/0x100 [ 1010.249369][T18130] cleanup_mnt+0x225/0x450 [ 1010.249426][T18130] task_work_run+0x150/0x240 [ 1010.249469][T18130] ? __pfx_task_work_run+0x10/0x10 [ 1010.249506][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.249553][T18130] ? __pfx___x64_sys_umount+0x10/0x10 [ 1010.249622][T18130] exit_to_user_mode_loop+0xec/0x130 [ 1010.249665][T18130] do_syscall_64+0x426/0xfa0 [ 1010.249713][T18130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.249750][T18130] RIP: 0033:0x7fb169f909f7 [ 1010.249780][T18130] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1010.249824][T18130] RSP: 002b:00007fffd2190d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1010.249858][T18130] RAX: 0000000000000000 RBX: 00007fb16a011d7d RCX: 00007fb169f909f7 [ 1010.249883][T18130] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd2190e00 [ 1010.249906][T18130] RBP: 00007fffd2190e00 R08: 0000000000000000 R09: 0000000000000000 [ 1010.249929][T18130] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd2191e90 [ 1010.249953][T18130] R13: 00007fb16a011d7d R14: 00000000000f68fc R15: 00007fffd2191ed0 [ 1010.250011][T18130] [ 1010.250026][T18130] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1010.280484][ T30] audit: type=1326 audit(1762303385.792:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24448 comm="syz.9.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06dd8f6c9 code=0x7ffc0000 [ 1010.497755][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.003913][ T9431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.052304][ T30] audit: type=1326 audit(1762303386.082:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24448 comm="syz.9.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc06dd8f6c9 code=0x7ffc0000 [ 1011.075331][ T30] audit: type=1326 audit(1762303386.082:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24448 comm="syz.9.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06dd8f6c9 code=0x7ffc0000 [ 1011.100610][ T30] audit: type=1326 audit(1762303386.082:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24448 comm="syz.9.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06dd8f6c9 code=0x7ffc0000 [ 1011.155502][ T30] audit: type=1326 audit(1762303386.082:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24448 comm="syz.9.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fc06dd8f6c9 code=0x7ffc0000 [ 1011.178703][ T30] audit: type=1326 audit(1762303386.082:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24448 comm="syz.9.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06dd8f6c9 code=0x7ffc0000 [ 1011.231406][ T30] audit: type=1326 audit(1762303386.122:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24448 comm="syz.9.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06dd8f6c9 code=0x7ffc0000 [ 1011.380429][ T24] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1011.391390][ T24] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 1011.397951][ T24] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1011.465743][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1011.476843][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 1011.485126][ T9431] em28xx 4-1:0.132: Registering V4L2 extension [ 1011.501854][ T24] usb 4-1: USB disconnect, device number 49 [ 1011.509367][ T24] em28xx 4-1:0.132: Disconnecting em28xx [ 1011.517570][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.755687][T24479] loop8: detected capacity change from 0 to 1024 [ 1011.784406][ T9431] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1011.797653][ T9431] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1011.810779][ T9431] em28xx 4-1:0.132: No AC97 audio processor [ 1011.820031][ T9431] usb 4-1: Decoder not found [ 1011.825379][ T9431] em28xx 4-1:0.132: failed to create media graph [ 1011.832201][ T9431] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1011.844099][ T9431] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1011.853529][ T24] em28xx 4-1:0.132: Closing input extension [ 1011.873406][T24481] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6578'. [ 1011.898356][ T24] em28xx 4-1:0.132: Freeing device [ 1012.049994][T24486] overlayfs: failed to resolve './file0': -2 [ 1012.199873][T13220] hfsplus: b-tree write err: -5, ino 4 [ 1012.236341][T18324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.330715][ T9431] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1012.448479][T24504] syzkaller1: entered promiscuous mode [ 1012.454447][T24504] syzkaller1: entered allmulticast mode [ 1012.510181][ T9431] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1012.524826][ T9431] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1012.534334][ T9431] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.552509][ T9431] usb 7-1: config 0 descriptor?? [ 1012.558459][T24490] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1012.695702][T24510] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6590'. [ 1012.927003][T24510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.949607][T24510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.983234][ T9431] ryos 0003:1E7D:3138.004F: unknown main item tag 0x0 [ 1012.992061][ T9431] ryos 0003:1E7D:3138.004F: unknown main item tag 0x0 [ 1012.999024][ T9431] ryos 0003:1E7D:3138.004F: unknown main item tag 0x0 [ 1012.999660][T24510] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 1013.006224][ T9431] ryos 0003:1E7D:3138.004F: unknown main item tag 0x0 [ 1013.022812][T24510] team0: left promiscuous mode [ 1013.028124][T24510] team_slave_0: left promiscuous mode [ 1013.032474][ T9431] ryos 0003:1E7D:3138.004F: unknown main item tag 0x0 [ 1013.036441][T24510] team_slave_1: left promiscuous mode [ 1013.044665][ T9431] ryos 0003:1E7D:3138.004F: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.6-1/input0 [ 1013.072088][T24510] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1013.082232][T24510] bridge0: port 3(dummy0) entered disabled state [ 1013.088856][T24510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.096140][T24510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.119567][T24510] bond0 (unregistering): Released all slaves [ 1013.188625][ T9431] usb 7-1: USB disconnect, device number 28 [ 1013.590871][ T24] net_ratelimit: 1 callbacks suppressed [ 1013.590898][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.604572][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.679043][T24538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.719539][T24538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.774517][T24538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.790999][T24538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.799305][T24538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.831117][T24538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.041819][T24547] loop8: detected capacity change from 0 to 512 [ 1014.061387][T24547] EXT4-fs: Ignoring removed mblk_io_submit option [ 1014.067974][T24547] EXT4-fs: Ignoring removed mblk_io_submit option [ 1014.104653][T24547] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1014.118501][T24547] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1014.163360][T24547] EXT4-fs (loop8): 1 truncate cleaned up [ 1014.191723][T24547] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.266411][T24533] loop3: detected capacity change from 0 to 32768 [ 1014.274777][T24533] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6600 (24533) [ 1014.297919][T24533] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1014.321027][T24533] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 1014.355726][T24559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6611'. [ 1014.380342][T24557] loop6: detected capacity change from 0 to 128 [ 1014.386955][T24533] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1014.403148][T24547] EXT4-fs error (device loop8): ext4_search_dir:1473: inode #12: block 7: comm syz.8.6606: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=196621, rec_len=0, size=56 fake=0 [ 1014.458905][T24547] EXT4-fs (loop8): Remounting filesystem read-only [ 1014.464935][T24557] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1014.465583][ T30] audit: type=1800 audit(2000000001.759:669): pid=24557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6610" name="file2" dev="loop6" ino=1048790 res=0 errno=0 [ 1014.486056][T24557] FAT-fs (loop6): Filesystem has been set read-only [ 1014.503375][T24563] loop9: detected capacity change from 0 to 1024 [ 1014.524905][T24557] syz.6.6610: attempt to access beyond end of device [ 1014.524905][T24557] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1014.640944][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.664621][T24533] BTRFS info (device loop3): rebuilding free space tree [ 1014.697930][T24533] BTRFS info (device loop3): disabling free space tree [ 1014.706127][T24563] hfsplus: xattr searching failed [ 1014.716462][T24533] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1014.743828][T24533] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1014.791882][T13224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.825053][T24533] BTRFS info (device loop3): enabling ssd optimizations [ 1014.826130][T24563] hfsplus: xattr searching failed [ 1014.847248][T24563] hfsplus: xattr searching failed [ 1014.847710][T24533] BTRFS info (device loop3): turning on async discard [ 1014.853687][T24563] hfsplus: xattr searching failed [ 1014.881029][T24533] BTRFS info (device loop3): enabling disk space caching [ 1014.888070][T24533] BTRFS info (device loop3): force clearing of disk cache [ 1014.901700][T24533] BTRFS info (device loop3): use zstd compression, level 3 [ 1015.235307][ T5827] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1015.729368][T24596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6624'. [ 1016.121367][T24608] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6627'. [ 1016.276449][T24608] xfrm1: entered promiscuous mode [ 1016.282137][T24608] xfrm1: entered allmulticast mode [ 1016.313812][T24608] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6627'. [ 1016.325858][T24465] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.488106][T13218] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.058941][T13218] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.230409][T13218] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.452243][T13218] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.970337][T15405] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1017.974602][T13218] dummy0: left allmulticast mode [ 1017.994355][T15405] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1018.008059][T15405] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1018.014839][T13218] bridge0: port 3(dummy0) entered disabled state [ 1018.023184][T15405] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1018.034869][T15405] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1018.189269][T13218] bridge_slave_1: left allmulticast mode [ 1018.225533][T13218] bridge_slave_1: left promiscuous mode [ 1018.270699][T13218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.318919][T13218] bridge_slave_0: left allmulticast mode [ 1018.330655][T13218] bridge_slave_0: left promiscuous mode [ 1018.345604][T13218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.644178][T24633] loop3: detected capacity change from 0 to 32768 [ 1018.652365][T24633] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6639 (24633) [ 1018.678535][T24633] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1018.700051][T24633] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 1018.786529][T24633] BTRFS info (device loop3): enabling ssd optimizations [ 1018.797750][ T5999] net_ratelimit: 14 callbacks suppressed [ 1018.797773][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.798183][T24633] BTRFS info (device loop3): turning on async discard [ 1018.820585][T24633] BTRFS info (device loop3): enabling free space tree [ 1018.827373][T24633] BTRFS info (device loop3): use zlib compression, level 3 [ 1019.060690][T24656] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6641'. [ 1019.108441][ T5827] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1019.409750][T13218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.420912][T13218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.433044][T13218] bond0 (unregistering): Released all slaves [ 1019.456500][T13218] bond1 (unregistering): Released all slaves [ 1019.458810][T24662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6640'. [ 1019.602435][T13218] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1019.612981][T13218] bond3 (unregistering): left promiscuous mode [ 1019.620435][T13218] bond2 (unregistering): Released all slaves [ 1019.675774][ T9431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.836802][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.838319][T13218] bond3 (unregistering): Released all slaves [ 1020.139637][T24656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.150865][T15405] Bluetooth: hci4: command tx timeout [ 1020.165813][T24656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.187418][T24656] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 1020.208186][T24656] team0: left promiscuous mode [ 1020.213292][T24656] team_slave_0: left promiscuous mode [ 1020.219158][T24656] team_slave_1: left promiscuous mode [ 1020.232195][T24656] bond0 (unregistering): Released all slaves [ 1020.283198][T13218] tipc: Disabling bearer [ 1020.326876][T13218] tipc: Left network mode [ 1020.552070][T13220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.560440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.829155][T13218] hsr_slave_0: left promiscuous mode [ 1020.836788][T13218] hsr_slave_1: left promiscuous mode [ 1020.843109][T13218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.887356][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.897534][T13218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.047327][ T9437] libceph: connect (1)[c::]:6789 error -101 [ 1021.067755][ T9437] libceph: mon0 (1)[c::]:6789 connect error [ 1021.115323][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1021.126090][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1021.197514][T13222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.206042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.330859][ T9437] libceph: connect (1)[c::]:6789 error -101 [ 1021.337063][ T9437] libceph: mon0 (1)[c::]:6789 connect error [ 1021.387166][T24718] binder: 24717:24718 ioctl c0306201 2000000001c0 returned -14 [ 1021.393612][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1021.401084][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1021.563017][T24720] loop3: detected capacity change from 0 to 2048 [ 1021.582438][T24720] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1021.612969][ T30] audit: type=1804 audit(2000000002.539:670): pid=24720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6663" name="/newroot/1178/bus/bus" dev="loop3" ino=1367 res=1 errno=0 [ 1021.842309][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.854496][T24707] ceph: No mds server is up or the cluster is laggy [ 1021.861801][ T9437] libceph: connect (1)[c::]:6789 error -101 [ 1021.870769][T24710] ceph: No mds server is up or the cluster is laggy [ 1021.884500][ T9437] libceph: mon0 (1)[c::]:6789 connect error [ 1021.911079][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1021.917514][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.920350][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1022.232324][T15405] Bluetooth: hci4: command tx timeout [ 1022.379645][ T9437] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 1022.419858][ T9437] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1022.773664][T13218] team0 (unregistering): Port device team_slave_1 removed [ 1022.863701][T13218] team0 (unregistering): Port device team_slave_0 removed [ 1023.880979][T24756] net_ratelimit: 6 callbacks suppressed [ 1023.881006][T24756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.895153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.904291][T24767] loop9: detected capacity change from 0 to 32768 [ 1023.952177][T24767] JBD2: Ignoring recovery information on journal [ 1023.961456][T24767] jbd2_journal_bmap: journal block not found at offset 32 on loop9-75 [ 1023.970283][T24767] JBD2: bad block at offset 32 [ 1023.979993][T24635] chnl_net:caif_netlink_parms(): no params data found [ 1023.981104][T24767] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1024.038930][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.217055][T24635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.225119][T24756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.233461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.243475][T24635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.250862][T24635] bridge_slave_0: entered allmulticast mode [ 1024.259131][T24635] bridge_slave_0: entered promiscuous mode [ 1024.268685][T24635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.276012][T24635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.284224][T24635] bridge_slave_1: entered allmulticast mode [ 1024.292798][T24635] bridge_slave_1: entered promiscuous mode [ 1024.310982][T15405] Bluetooth: hci4: command tx timeout [ 1024.454147][T11034] ocfs2: Unmounting device (7,9) on (node local) [ 1024.517939][T24635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.560401][T24635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.660853][T24756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.669257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.712656][T24635] team0: Port device team_slave_0 added [ 1024.736394][T13218] IPVS: stop unused estimator thread 0... [ 1024.757268][T24635] team0: Port device team_slave_1 added [ 1024.905342][T24635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.923621][T24635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.975064][T24635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.996056][T24635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.006643][T24635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.042833][T24756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.051168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.060146][T24635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.149709][T24635] hsr_slave_0: entered promiscuous mode [ 1025.157060][T24635] hsr_slave_1: entered promiscuous mode [ 1025.211266][T24756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.280744][ T5999] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1025.470655][ T5999] usb 7-1: Using ep0 maxpacket: 32 [ 1025.477975][ T5999] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1025.494100][ T5999] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1025.510722][ T5999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.528967][ T5999] usb 7-1: Product: syz [ 1025.533393][ T5999] usb 7-1: Manufacturer: syz [ 1025.538002][ T5999] usb 7-1: SerialNumber: syz [ 1025.550449][ T5999] usb 7-1: config 0 descriptor?? [ 1025.564171][T24779] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1025.577025][ T5999] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input80 [ 1025.759993][T24801] loop9: detected capacity change from 0 to 2048 [ 1025.929207][ T5999] usb 7-1: USB disconnect, device number 29 [ 1025.935234][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1025.970602][T24801] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1026.271600][ T30] audit: type=1804 audit(2000000007.209:671): pid=24801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.6685" name="/newroot/375/bus/bus" dev="loop9" ino=1367 res=1 errno=0 [ 1026.401689][T15405] Bluetooth: hci4: command tx timeout [ 1026.576327][T24635] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1026.639460][T24635] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1026.709160][T24635] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1026.799783][T24635] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1027.187712][T24832] netlink: 'syz.6.6707': attribute type 1 has an invalid length. [ 1027.211997][T24832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6707'. [ 1027.255463][T24832] netlink: 'syz.6.6707': attribute type 1 has an invalid length. [ 1027.330350][T24832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6707'. [ 1027.538178][T24635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.640131][T24635] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.696890][T13220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.704078][T13220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.757640][T13222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.764870][T13222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.288452][T24860] loop6: detected capacity change from 0 to 512 [ 1028.351226][T24860] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.6717: inode has both inline data and extents flags [ 1028.387195][T24860] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.6717: couldn't read orphan inode 15 (err -117) [ 1028.539006][T24860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.650300][T24635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.120067][T18130] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.351683][ T9437] net_ratelimit: 11 callbacks suppressed [ 1029.351704][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.424698][T24635] veth0_vlan: entered promiscuous mode [ 1029.457392][T24635] veth1_vlan: entered promiscuous mode [ 1029.524785][T24635] veth0_macvtap: entered promiscuous mode [ 1029.572444][T24635] veth1_macvtap: entered promiscuous mode [ 1029.629509][T24635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.695322][T24635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1029.730950][T13220] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.739892][T13220] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.788072][T13220] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.835613][T13220] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.004268][T13222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.015738][T13222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.057259][T13218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.067216][T13218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.200712][ T9437] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1030.351494][ T9437] usb 7-1: Using ep0 maxpacket: 16 [ 1030.358662][ T9437] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1030.367673][ T9437] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.382307][ T9437] usb 7-1: config 0 has no interface number 0 [ 1030.400648][ T9437] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1030.410497][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.419770][ T9437] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.429155][ T9437] usb 7-1: Product: syz [ 1030.433394][ T9437] usb 7-1: Manufacturer: syz [ 1030.437996][ T9437] usb 7-1: SerialNumber: syz [ 1030.447451][ T9437] usb 7-1: config 0 descriptor?? [ 1030.459672][ T9437] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1030.467509][ T9437] uvcvideo 7-1:0.105: No valid video chain found. [ 1030.542113][T24916] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6735'. [ 1030.671880][ T9431] usb 7-1: USB disconnect, device number 30 [ 1030.739966][T24925] loop9: detected capacity change from 0 to 47 [ 1030.747477][T24925] minix: Unknown parameter '0xffffffffffffffff' [ 1030.755494][T18324] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1030.859739][T24929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6742'. [ 1030.940636][T18324] usb 6-1: Using ep0 maxpacket: 16 [ 1030.948320][T18324] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1030.967555][T18324] usb 6-1: config 0 has no interface number 0 [ 1030.977432][T18324] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1030.988689][T18324] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1031.001330][T18324] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1031.010958][T18324] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1031.019176][T18324] usb 6-1: Product: syz [ 1031.024750][T18324] usb 6-1: SerialNumber: syz [ 1031.034504][T18324] usb 6-1: config 0 descriptor?? [ 1031.054617][T18324] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1031.068835][T18324] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input81 [ 1031.405852][ C0] cm109_urb_ctl_callback: 160 callbacks suppressed [ 1031.405888][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1031.419622][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1031.426801][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1031.434520][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1031.441759][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1031.449446][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1031.456594][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1031.463737][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1031.470906][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1031.478062][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1031.497340][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.505877][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.515322][T18324] usb 6-1: USB disconnect, device number 20 [ 1031.521452][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1031.532548][T18324] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1031.833351][ T9431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.083880][T13218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.092300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.100397][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.108916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.479683][ T30] audit: type=1326 audit(2000000013.399:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3353b8f6c9 code=0x7ffc0000 [ 1032.531275][ T30] audit: type=1326 audit(2000000013.409:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3353b8f6c9 code=0x7ffc0000 [ 1032.553655][ C0] vkms_vblank_simulate: vblank timer overrun [ 1032.567123][T18324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.594227][ T30] audit: type=1326 audit(2000000013.409:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3353b8df10 code=0x7ffc0000 [ 1032.640607][ T30] audit: type=1326 audit(2000000013.409:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3353b8df10 code=0x7ffc0000 [ 1032.726688][ T30] audit: type=1326 audit(2000000013.409:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3353b8f6c9 code=0x7ffc0000 [ 1032.756092][ T30] audit: type=1326 audit(2000000013.409:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3353b8f6c9 code=0x7ffc0000 [ 1032.812752][ T30] audit: type=1326 audit(2000000013.439:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3353b8f6c9 code=0x7ffc0000 [ 1032.835842][ T30] audit: type=1326 audit(2000000013.439:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3353b8f6c9 code=0x7ffc0000 [ 1032.858192][ C0] vkms_vblank_simulate: vblank timer overrun [ 1032.876522][ T30] audit: type=1326 audit(2000000013.439:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f3353b8f6c9 code=0x7ffc0000 [ 1032.901092][ T30] audit: type=1326 audit(2000000013.439:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24968 comm="syz.4.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3353b8f6c9 code=0x7ffc0000 [ 1032.923430][ C0] vkms_vblank_simulate: vblank timer overrun [ 1033.111476][T18324] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1033.275590][T18324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.292181][T18324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.312205][T18324] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1033.322517][T18324] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1033.342307][T18324] usb 6-1: Manufacturer: syz [ 1033.361618][T18324] usb 6-1: config 0 descriptor?? [ 1033.432904][T24973] loop6: detected capacity change from 0 to 40427 [ 1033.459720][T24973] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1033.467597][T24973] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1033.497957][T24973] F2FS-fs (loop6): invalid crc value [ 1033.701277][T24973] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1033.739245][T24986] loop3: detected capacity change from 0 to 32768 [ 1033.791704][T24986] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6769 (24986) [ 1033.797977][T18324] pyra 0003:1E7D:2CF6.0051: unknown main item tag 0x0 [ 1033.820637][T24973] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1033.827402][T18324] pyra 0003:1E7D:2CF6.0051: unknown main item tag 0x0 [ 1033.848490][T18324] pyra 0003:1E7D:2CF6.0051: unknown main item tag 0x0 [ 1033.850418][T24973] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1033.858605][T18324] pyra 0003:1E7D:2CF6.0051: unknown main item tag 0x0 [ 1033.863075][T24986] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1033.901677][T18324] pyra 0003:1E7D:2CF6.0051: unknown main item tag 0x0 [ 1033.910284][T24986] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1033.919305][T18324] pyra 0003:1E7D:2CF6.0051: unknown main item tag 0x0 [ 1033.997846][T18324] pyra 0003:1E7D:2CF6.0051: unknown main item tag 0x0 [ 1034.016377][T24973] syz.6.6761: attempt to access beyond end of device [ 1034.016377][T24973] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1034.061034][T18324] pyra 0003:1E7D:2CF6.0051: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1034.132137][T24986] BTRFS info (device loop3): enabling ssd optimizations [ 1034.169588][T24986] BTRFS info (device loop3): turning on async discard [ 1034.203194][T24986] BTRFS info (device loop3): enabling free space tree [ 1034.256273][T18130] syz-executor: attempt to access beyond end of device [ 1034.256273][T18130] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1034.296583][T18130] CPU: 0 UID: 0 PID: 18130 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1034.296634][T18130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1034.296658][T18130] Call Trace: [ 1034.296673][T18130] [ 1034.296688][T18130] dump_stack_lvl+0x16c/0x1f0 [ 1034.296738][T18130] f2fs_handle_critical_error+0x624/0x9f0 [ 1034.296782][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.296827][T18130] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1034.296897][T18130] f2fs_write_end_io+0x958/0xcf0 [ 1034.296946][T18130] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1034.296996][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.297052][T18130] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1034.297100][T18130] bio_endio+0x713/0x860 [ 1034.297155][T18130] submit_bio_noacct+0x306/0x1f60 [ 1034.297206][T18130] __submit_merged_bio+0x33c/0x770 [ 1034.297256][T18130] __submit_merged_write_cond+0x319/0x3f0 [ 1034.297314][T18130] f2fs_sync_node_pages+0x1394/0x1620 [ 1034.297360][T18130] ? sync_inode_metadata+0xa4/0xe0 [ 1034.297418][T18130] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1034.297454][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.297498][T18130] ? __lock_acquire+0xb8a/0x1c90 [ 1034.297605][T18130] ? down_write+0x14d/0x200 [ 1034.297657][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.297704][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.297748][T18130] ? up_write+0x1b2/0x520 [ 1034.297793][T18130] block_operations+0x952/0xfe0 [ 1034.297859][T18130] ? __pfx_block_operations+0x10/0x10 [ 1034.297972][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.298020][T18130] ? ktime_get+0x200/0x310 [ 1034.298074][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.298124][T18130] ? lockdep_hardirqs_on+0x7c/0x110 [ 1034.298167][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.298212][T18130] ? rcu_is_watching+0x12/0xc0 [ 1034.298268][T18130] f2fs_write_checkpoint+0x32b/0x5300 [ 1034.298332][T18130] ? kfree+0x2b8/0x6d0 [ 1034.298373][T18130] ? f2fs_stop_gc_thread+0x79/0xd0 [ 1034.298434][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.298479][T18130] ? rcu_is_watching+0x12/0xc0 [ 1034.298526][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.298570][T18130] ? kthread_stop+0x272/0x630 [ 1034.298610][T18130] kill_f2fs_super+0x3d6/0x490 [ 1034.298665][T18130] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1034.298738][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.298800][T18130] deactivate_locked_super+0xc1/0x1a0 [ 1034.298855][T18130] deactivate_super+0xde/0x100 [ 1034.298910][T18130] cleanup_mnt+0x225/0x450 [ 1034.298969][T18130] task_work_run+0x150/0x240 [ 1034.299013][T18130] ? __pfx_task_work_run+0x10/0x10 [ 1034.299051][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.299105][T18130] ? __pfx___x64_sys_umount+0x10/0x10 [ 1034.299175][T18130] exit_to_user_mode_loop+0xec/0x130 [ 1034.299219][T18130] do_syscall_64+0x426/0xfa0 [ 1034.299267][T18130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.299305][T18130] RIP: 0033:0x7fb169f909f7 [ 1034.299334][T18130] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1034.299371][T18130] RSP: 002b:00007fffd2190d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1034.299407][T18130] RAX: 0000000000000000 RBX: 00007fb16a011d7d RCX: 00007fb169f909f7 [ 1034.299432][T18130] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd2190e00 [ 1034.299456][T18130] RBP: 00007fffd2190e00 R08: 0000000000000000 R09: 0000000000000000 [ 1034.299480][T18130] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd2191e90 [ 1034.299504][T18130] R13: 00007fb16a011d7d R14: 00000000000fc76c R15: 00007fffd2191ed0 [ 1034.299558][T18130] [ 1034.299599][T18130] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1034.366663][T25022] vivid-000: disconnect [ 1034.387594][T18130] CPU: 0 UID: 0 PID: 18130 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1034.387641][T18130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1034.387666][T18130] Call Trace: [ 1034.387679][T18130] [ 1034.387693][T18130] dump_stack_lvl+0x16c/0x1f0 [ 1034.387744][T18130] f2fs_handle_critical_error+0x624/0x9f0 [ 1034.387788][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.387831][T18130] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1034.387903][T18130] f2fs_write_end_io+0x958/0xcf0 [ 1034.387953][T18130] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1034.388004][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.388060][T18130] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1034.388109][T18130] bio_endio+0x713/0x860 [ 1034.388164][T18130] submit_bio_noacct+0x306/0x1f60 [ 1034.388219][T18130] __submit_merged_bio+0x33c/0x770 [ 1034.388269][T18130] __submit_merged_write_cond+0x319/0x3f0 [ 1034.388328][T18130] f2fs_sync_node_pages+0x1394/0x1620 [ 1034.388377][T18130] ? sync_inode_metadata+0xa4/0xe0 [ 1034.388434][T18130] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1034.388471][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.388514][T18130] ? __lock_acquire+0xb8a/0x1c90 [ 1034.388628][T18130] ? down_write+0x14d/0x200 [ 1034.388679][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.388725][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.388768][T18130] ? up_write+0x1b2/0x520 [ 1034.388814][T18130] block_operations+0x952/0xfe0 [ 1034.388882][T18130] ? __pfx_block_operations+0x10/0x10 [ 1034.389002][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.389050][T18130] ? ktime_get+0x200/0x310 [ 1034.389107][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.389150][T18130] ? lockdep_hardirqs_on+0x7c/0x110 [ 1034.389194][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.389236][T18130] ? rcu_is_watching+0x12/0xc0 [ 1034.389301][T18130] f2fs_write_checkpoint+0x32b/0x5300 [ 1034.389367][T18130] ? kfree+0x2b8/0x6d0 [ 1034.389407][T18130] ? f2fs_stop_gc_thread+0x79/0xd0 [ 1034.389467][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.389510][T18130] ? rcu_is_watching+0x12/0xc0 [ 1034.389556][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.389599][T18130] ? kthread_stop+0x272/0x630 [ 1034.389640][T18130] kill_f2fs_super+0x3d6/0x490 [ 1034.389695][T18130] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1034.389769][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.389833][T18130] deactivate_locked_super+0xc1/0x1a0 [ 1034.389887][T18130] deactivate_super+0xde/0x100 [ 1034.389941][T18130] cleanup_mnt+0x225/0x450 [ 1034.389998][T18130] task_work_run+0x150/0x240 [ 1034.390042][T18130] ? __pfx_task_work_run+0x10/0x10 [ 1034.390079][T18130] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.390130][T18130] ? __pfx___x64_sys_umount+0x10/0x10 [ 1034.390199][T18130] exit_to_user_mode_loop+0xec/0x130 [ 1034.390243][T18130] do_syscall_64+0x426/0xfa0 [ 1034.390291][T18130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.390328][T18130] RIP: 0033:0x7fb169f909f7 [ 1034.390357][T18130] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1034.390393][T18130] RSP: 002b:00007fffd2190d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1034.390427][T18130] RAX: 0000000000000000 RBX: 00007fb16a011d7d RCX: 00007fb169f909f7 [ 1034.390452][T18130] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd2190e00 [ 1034.390475][T18130] RBP: 00007fffd2190e00 R08: 0000000000000000 R09: 0000000000000000 [ 1034.390498][T18130] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd2191e90 [ 1034.390522][T18130] R13: 00007fb16a011d7d R14: 00000000000fc76c R15: 00007fffd2191ed0 [ 1034.390580][T18130] [ 1034.391382][T18130] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1034.727347][T24986] syz.3.6769 (24986) used greatest stack depth: 19112 bytes left [ 1034.732708][ T5999] net_ratelimit: 1 callbacks suppressed [ 1034.732729][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.071025][T18324] pyra 0003:1E7D:2CF6.0051: couldn't init struct pyra_device [ 1035.071730][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.078456][T18324] pyra 0003:1E7D:2CF6.0051: couldn't install mouse [ 1035.097220][T18324] pyra 0003:1E7D:2CF6.0051: probe with driver pyra failed with error -71 [ 1035.109609][T18324] usb 6-1: USB disconnect, device number 21 [ 1035.141057][T25018] vivid-000: reconnect [ 1035.199549][ T5827] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1035.750842][T25049] vivid-007: ================= START STATUS ================= [ 1035.758522][T25049] vivid-007: Enable Output Cropping: true grabbed [ 1035.770319][T18324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.843540][T25049] vivid-007: Enable Output Composing: true grabbed [ 1035.864955][T25049] vivid-007: Enable Output Scaler: true grabbed [ 1035.893760][T25049] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 1035.921704][T25049] vivid-007: Transmit Mode: HDMI grabbed [ 1035.938221][T25053] loop3: detected capacity change from 0 to 4096 [ 1035.952187][T25049] vivid-007: Hotplug Present: 0x00000000 [ 1035.972853][T25053] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1035.979761][T25049] vivid-007: RxSense Present: 0x00000000 [ 1035.990681][T25053] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 1036.005649][T25049] vivid-007: EDID Present: 0x00000000 [ 1036.021319][T25053] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 1036.030932][T25049] vivid-007: ================== END STATUS ================== [ 1036.045609][T25053] System zones: 0-5 [ 1036.085228][T25053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.416689][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.760465][T25069] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1036.773611][T18324] syzkaller1: tun_net_xmit 90 [ 1036.790743][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.800742][T25069] syzkaller1: Linktype set failed because interface is up [ 1037.191267][T13220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.199609][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.560330][T25087] ip6gre1: entered promiscuous mode [ 1037.585344][T25087] ip6gre1: entered allmulticast mode [ 1037.627768][T25087] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1037.831126][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.843010][T13220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.851322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.877275][T13222] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1037.888380][T13222] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1037.900924][T18324] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1038.151215][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.183975][ T9437] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1038.389686][T25111] veth3: entered promiscuous mode [ 1038.545035][T25125] overlayfs: failed to clone upperpath [ 1038.580953][ T5930] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1038.754326][ T5930] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1038.780582][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.817478][ T5930] usb 6-1: config 0 descriptor?? [ 1038.880777][T18324] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1038.901153][T25133] loop3: detected capacity change from 0 to 128 [ 1038.957897][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1038.957949][ T30] audit: type=1800 audit(2000000019.889:686): pid=25133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6820" name="bus" dev="loop3" ino=1048796 res=0 errno=0 [ 1039.105875][T25133] syz.3.6820: attempt to access beyond end of device [ 1039.105875][T25133] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 1039.875990][ T5930] usb 6-1: Cannot set autoneg [ 1039.881706][ T5930] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1039.910937][T18324] net_ratelimit: 1 callbacks suppressed [ 1039.910959][T18324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.937935][T25152] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1040.039653][T25135] overlayfs: failed to resolve './file0': -2 [ 1040.103983][ T5930] usb 6-1: USB disconnect, device number 22 [ 1040.509615][T25173] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6834'. [ 1040.650619][T25178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.661518][T25178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.676775][T25178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.722479][T25177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.755618][T25177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.909161][T25186] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1040.951056][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.033210][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.191822][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.299054][T25199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6847'. [ 1041.319155][T25199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6847'. [ 1041.780274][T25174] loop9: detected capacity change from 0 to 32768 [ 1041.990929][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.070728][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1042.165758][T25174] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1042.213265][T25234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6859'. [ 1043.156035][T25250] loop6: detected capacity change from 0 to 4096 [ 1043.220165][T25250] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1043.246548][T25250] ntfs3(loop6): ino=1a, mi_enum_attr [ 1043.255697][T25250] ntfs3(loop6): ino=1a, mi_enum_attr [ 1043.270721][T25250] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 1043.413853][T11034] ocfs2: Unmounting device (7,9) on (node local) [ 1043.762103][ T9431] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1044.210642][ T9431] usb 6-1: Using ep0 maxpacket: 16 [ 1044.217864][ T9431] usb 6-1: config 0 has no interfaces? [ 1044.225634][ T9431] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1044.250572][ T9431] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1044.258717][ T9431] usb 6-1: Product: syz [ 1044.270771][ T9431] usb 6-1: SerialNumber: syz [ 1044.278542][ T9431] usb 6-1: config 0 descriptor?? [ 1045.106943][ T5930] usb 6-1: USB disconnect, device number 23 [ 1045.124327][ T5999] net_ratelimit: 7 callbacks suppressed [ 1045.124350][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.575543][T25305] loop6: detected capacity change from 0 to 128 [ 1045.669289][T25308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1045.885671][T25316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.893738][T25316] bridge0: port 3(bond0) entered blocking state [ 1045.901718][T25316] bridge0: port 3(bond0) entered disabled state [ 1045.909663][T25316] bond0: entered allmulticast mode [ 1045.920880][T25316] bond0: entered promiscuous mode [ 1046.150902][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.196809][T25333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6900'. [ 1046.209095][T25333] netlink: 'syz.3.6900': attribute type 30 has an invalid length. [ 1046.217543][T25333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6900'. [ 1047.191275][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.291122][ T9431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.352596][T25352] overlayfs: failed to clone upperpath [ 1047.478509][T25357] loop5: detected capacity change from 0 to 512 [ 1047.533574][T25357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.621051][T25357] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.720491][T25357] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.6910: corrupted inode contents [ 1047.772073][T25357] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.6910: mark_inode_dirty error [ 1047.805120][T25357] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.6910: corrupted inode contents [ 1047.870870][T25357] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.6910: mark_inode_dirty error [ 1048.021642][T25375] loop3: detected capacity change from 0 to 2048 [ 1048.035497][T25375] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1048.099926][T25376] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1048.100207][T25375] syz.3.6914: attempt to access beyond end of device [ 1048.100207][T25375] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1048.154179][T24635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.245552][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.259210][T25350] loop6: detected capacity change from 0 to 32768 [ 1048.261214][T25373] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.6914:25373 [ 1048.288222][T25350] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6906 (25350) [ 1048.344577][T25350] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1048.365444][T25350] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 1048.384379][T25350] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1048.579784][T25350] BTRFS info (device loop6): rebuilding free space tree [ 1048.654006][T25350] BTRFS info (device loop6): disabling free space tree [ 1048.669973][T25350] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1048.717813][T25350] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1048.761762][T25350] BTRFS info (device loop6): enabling ssd optimizations [ 1048.768834][T25350] BTRFS info (device loop6): turning on async discard [ 1048.806446][T25350] BTRFS info (device loop6): enabling disk space caching [ 1048.830602][T25350] BTRFS info (device loop6): force clearing of disk cache [ 1048.860585][T25350] BTRFS info (device loop6): use zstd compression, level 3 [ 1049.199228][T18130] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1049.271080][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.832299][T25413] loop9: detected capacity change from 0 to 4096 [ 1050.309688][T25419] loop3: detected capacity change from 0 to 1024 [ 1050.311036][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.324217][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.345277][T25419] EXT4-fs: Ignoring removed mblk_io_submit option [ 1050.368888][T25419] EXT4-fs: Ignoring removed orlov option [ 1050.385265][T25419] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1050.393630][T25419] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1050.406082][T25419] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 1050.417256][T25419] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 1050.630710][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1051.353908][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.367059][T25444] loop9: detected capacity change from 0 to 1024 [ 1051.458977][T25444] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.585047][T25444] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4192: comm syz.9.6936: Allocating blocks 385-513 which overlap fs metadata [ 1051.688763][T25444] EXT4-fs (loop9): shut down requested (1) [ 1051.725806][T25443] EXT4-fs (loop9): pa ffff888024362658: logic 16, phys. 129, len 24 [ 1051.952476][T11034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.292535][T25465] loop9: detected capacity change from 0 to 256 [ 1052.328633][T25465] exfat: Deprecated parameter 'utf8' [ 1052.356395][T25465] exfat: Deprecated parameter 'namecase' [ 1052.375524][T25465] exfat: Bad value for 'gid' [ 1052.380214][T25465] exfat: Bad value for 'gid' [ 1052.403388][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.677679][T25480] loop9: detected capacity change from 0 to 4096 [ 1053.150548][T25499] [ 1053.152908][T25499] ===================================================== [ 1053.159833][T25499] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1053.167287][T25499] syzkaller #0 Not tainted [ 1053.171696][T25499] ----------------------------------------------------- [ 1053.178619][T25499] syz.9.6953/25499 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1053.186345][T25499] ffff88803148a4b0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 1053.195102][T25499] [ 1053.195102][T25499] and this task is already holding: [ 1053.202458][T25499] ffff88807a08a028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 1053.212318][T25499] which would create a new lock dependency: [ 1053.218192][T25499] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1053.226319][T25499] [ 1053.226319][T25499] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1053.235759][T25499] (&dev->event_lock#2){..-.}-{3:3} [ 1053.235816][T25499] [ 1053.235816][T25499] ... which became SOFTIRQ-irq-safe at: [ 1053.248681][T25499] lock_acquire+0x179/0x350 [ 1053.253270][T25499] _raw_spin_lock_irqsave+0x3a/0x60 [ 1053.258562][T25499] input_event+0x74/0xd0 [ 1053.262895][T25499] xpad360_process_packet.part.0+0xed/0xce0 [ 1053.268897][T25499] xpad_irq_in+0x1414/0x2ac0 [ 1053.273591][T25499] __usb_hcd_giveback_urb+0x38b/0x610 [ 1053.279056][T25499] usb_hcd_giveback_urb+0x39b/0x450 [ 1053.284352][T25499] dummy_timer+0x1809/0x3a00 [ 1053.289042][T25499] __hrtimer_run_queues+0x202/0xad0 [ 1053.294338][T25499] hrtimer_run_softirq+0x17d/0x350 [ 1053.299546][T25499] handle_softirqs+0x219/0x8e0 [ 1053.304408][T25499] __irq_exit_rcu+0x109/0x170 [ 1053.309179][T25499] irq_exit_rcu+0x9/0x30 [ 1053.313516][T25499] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1053.319240][T25499] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1053.325309][T25499] unwind_next_frame+0x604/0x20a0 [ 1053.330425][T25499] arch_stack_walk+0x94/0x100 [ 1053.335193][T25499] stack_trace_save+0x8e/0xc0 [ 1053.339972][T25499] kasan_save_stack+0x33/0x60 [ 1053.344766][T25499] kasan_record_aux_stack+0xa7/0xc0 [ 1053.350059][T25499] __call_rcu_common.constprop.0+0xa5/0xa10 [ 1053.356047][T25499] kmem_cache_free+0x171/0x6c0 [ 1053.360919][T25499] __io_req_caches_free+0x19e/0x5c0 [ 1053.366313][T25499] io_ring_exit_work+0x387/0x10f0 [ 1053.371424][T25499] process_one_work+0x9cf/0x1b70 [ 1053.376453][T25499] worker_thread+0x6c8/0xf10 [ 1053.381128][T25499] kthread+0x3c5/0x780 [ 1053.385281][T25499] ret_from_fork+0x675/0x7d0 [ 1053.389980][T25499] ret_from_fork_asm+0x1a/0x30 [ 1053.394849][T25499] [ 1053.394849][T25499] to a SOFTIRQ-irq-unsafe lock: [ 1053.401861][T25499] (tasklist_lock){.+.+}-{3:3} [ 1053.401906][T25499] [ 1053.401906][T25499] ... which became SOFTIRQ-irq-unsafe at: [ 1053.414501][T25499] ... [ 1053.414513][T25499] lock_acquire+0x179/0x350 [ 1053.421657][T25499] _raw_read_lock+0x5f/0x70 [ 1053.426253][T25499] __do_wait+0x105/0x890 [ 1053.430599][T25499] do_wait+0x21d/0x590 [ 1053.434770][T25499] kernel_wait+0x9f/0x160 [ 1053.439180][T25499] call_usermodehelper_exec_work+0xf1/0x170 [ 1053.445171][T25499] process_one_work+0x9cf/0x1b70 [ 1053.450198][T25499] worker_thread+0x6c8/0xf10 [ 1053.454882][T25499] kthread+0x3c5/0x780 [ 1053.459038][T25499] ret_from_fork+0x675/0x7d0 [ 1053.463736][T25499] ret_from_fork_asm+0x1a/0x30 [ 1053.468600][T25499] [ 1053.468600][T25499] other info that might help us debug this: [ 1053.468600][T25499] [ 1053.478812][T25499] Chain exists of: [ 1053.478812][T25499] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1053.478812][T25499] [ 1053.492403][T25499] Possible interrupt unsafe locking scenario: [ 1053.492403][T25499] [ 1053.500708][T25499] CPU0 CPU1 [ 1053.506061][T25499] ---- ---- [ 1053.511410][T25499] lock(tasklist_lock); [ 1053.515649][T25499] local_irq_disable(); [ 1053.522387][T25499] lock(&dev->event_lock#2); [ 1053.529591][T25499] lock(&client->buffer_lock); [ 1053.536958][T25499] [ 1053.540396][T25499] lock(&dev->event_lock#2); [ 1053.545260][T25499] [ 1053.545260][T25499] *** DEADLOCK *** [ 1053.545260][T25499] [ 1053.553384][T25499] 7 locks held by syz.9.6953/25499: [ 1053.558568][T25499] #0: ffff888147b38118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 1053.567744][T25499] #1: ffff8880207b9230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 1053.577886][T25499] #2: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 1053.587580][T25499] #3: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 1053.597184][T25499] #4: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 1053.606355][T25499] #5: ffff88807a08a028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 1053.616655][T25499] #6: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 1053.625752][T25499] [ 1053.625752][T25499] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1053.636142][T25499] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1053.641814][T25499] IN-SOFTIRQ-W at: [ 1053.645881][T25499] lock_acquire+0x179/0x350 [ 1053.652204][T25499] _raw_spin_lock_irqsave+0x3a/0x60 [ 1053.659231][T25499] input_event+0x74/0xd0 [ 1053.665296][T25499] xpad360_process_packet.part.0+0xed/0xce0 [ 1053.673032][T25499] xpad_irq_in+0x1414/0x2ac0 [ 1053.679471][T25499] __usb_hcd_giveback_urb+0x38b/0x610 [ 1053.686667][T25499] usb_hcd_giveback_urb+0x39b/0x450 [ 1053.693691][T25499] dummy_timer+0x1809/0x3a00 [ 1053.700115][T25499] __hrtimer_run_queues+0x202/0xad0 [ 1053.707144][T25499] hrtimer_run_softirq+0x17d/0x350 [ 1053.714087][T25499] handle_softirqs+0x219/0x8e0 [ 1053.720684][T25499] __irq_exit_rcu+0x109/0x170 [ 1053.727191][T25499] irq_exit_rcu+0x9/0x30 [ 1053.733269][T25499] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1053.740730][T25499] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1053.748538][T25499] unwind_next_frame+0x604/0x20a0 [ 1053.755388][T25499] arch_stack_walk+0x94/0x100 [ 1053.761891][T25499] stack_trace_save+0x8e/0xc0 [ 1053.768405][T25499] kasan_save_stack+0x33/0x60 [ 1053.774924][T25499] kasan_record_aux_stack+0xa7/0xc0 [ 1053.781954][T25499] __call_rcu_common.constprop.0+0xa5/0xa10 [ 1053.789675][T25499] kmem_cache_free+0x171/0x6c0 [ 1053.796274][T25499] __io_req_caches_free+0x19e/0x5c0 [ 1053.803315][T25499] io_ring_exit_work+0x387/0x10f0 [ 1053.810167][T25499] process_one_work+0x9cf/0x1b70 [ 1053.816930][T25499] worker_thread+0x6c8/0xf10 [ 1053.823348][T25499] kthread+0x3c5/0x780 [ 1053.829241][T25499] ret_from_fork+0x675/0x7d0 [ 1053.835678][T25499] ret_from_fork_asm+0x1a/0x30 [ 1053.842282][T25499] INITIAL USE at: [ 1053.846257][T25499] lock_acquire+0x179/0x350 [ 1053.852495][T25499] _raw_spin_lock_irqsave+0x3a/0x60 [ 1053.859432][T25499] input_inject_event+0x9f/0x3b0 [ 1053.866109][T25499] led_set_brightness+0x217/0x290 [ 1053.872894][T25499] kbd_led_trigger_activate+0xcb/0x110 [ 1053.880097][T25499] led_trigger_set+0x59a/0xc50 [ 1053.886601][T25499] led_trigger_set_default+0x1e0/0x2e0 [ 1053.893807][T25499] led_classdev_register_ext+0x7b8/0xa10 [ 1053.901177][T25499] input_leds_connect+0x552/0x8e0 [ 1053.907959][T25499] input_attach_handler.isra.0+0x176/0x250 [ 1053.915528][T25499] input_register_device+0xab9/0x1180 [ 1053.922637][T25499] atkbd_connect+0x5f8/0xa40 [ 1053.928979][T25499] serio_driver_probe+0x7f/0xd0 [ 1053.935588][T25499] really_probe+0x241/0xa90 [ 1053.941845][T25499] __driver_probe_device+0x1de/0x440 [ 1053.948880][T25499] driver_probe_device+0x4c/0x1b0 [ 1053.955654][T25499] __driver_attach+0x283/0x580 [ 1053.962170][T25499] bus_for_each_dev+0x13e/0x1d0 [ 1053.968758][T25499] serio_handle_event+0x335/0xc30 [ 1053.975519][T25499] process_one_work+0x9cf/0x1b70 [ 1053.982197][T25499] worker_thread+0x6c8/0xf10 [ 1053.988528][T25499] kthread+0x3c5/0x780 [ 1053.994329][T25499] ret_from_fork+0x675/0x7d0 [ 1054.000676][T25499] ret_from_fork_asm+0x1a/0x30 [ 1054.007195][T25499] } [ 1054.009766][T25499] ... key at: [] __key.7+0x0/0x40 [ 1054.017330][T25499] -> (&client->buffer_lock){....}-{3:3} { [ 1054.023077][T25499] INITIAL USE at: [ 1054.026979][T25499] lock_acquire+0x179/0x350 [ 1054.033042][T25499] _raw_spin_lock+0x2e/0x40 [ 1054.039112][T25499] evdev_pass_values+0x10e/0x9b0 [ 1054.045611][T25499] evdev_events+0x1bb/0x390 [ 1054.051676][T25499] input_pass_values+0x74e/0x880 [ 1054.058180][T25499] input_handle_event+0xf00/0x14d0 [ 1054.064856][T25499] input_inject_event+0x1e8/0x3b0 [ 1054.071447][T25499] evdev_write+0x457/0x750 [ 1054.077433][T25499] vfs_write+0x2a0/0x11d0 [ 1054.083342][T25499] ksys_write+0x1f8/0x250 [ 1054.089253][T25499] do_syscall_64+0xcd/0xfa0 [ 1054.095326][T25499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.102785][T25499] } [ 1054.105270][T25499] ... key at: [] __key.83+0x0/0x40 [ 1054.112488][T25499] ... acquired at: [ 1054.116276][T25499] _raw_spin_lock+0x2e/0x40 [ 1054.120948][T25499] evdev_pass_values+0x10e/0x9b0 [ 1054.126060][T25499] evdev_events+0x1bb/0x390 [ 1054.130745][T25499] input_pass_values+0x74e/0x880 [ 1054.135858][T25499] input_handle_event+0xf00/0x14d0 [ 1054.141146][T25499] input_inject_event+0x1e8/0x3b0 [ 1054.146346][T25499] evdev_write+0x457/0x750 [ 1054.150937][T25499] vfs_write+0x2a0/0x11d0 [ 1054.155458][T25499] ksys_write+0x1f8/0x250 [ 1054.159973][T25499] do_syscall_64+0xcd/0xfa0 [ 1054.164653][T25499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.170720][T25499] [ 1054.173029][T25499] [ 1054.173029][T25499] the dependencies between the lock to be acquired [ 1054.173044][T25499] and SOFTIRQ-irq-unsafe lock: [ 1054.186527][T25499] -> (tasklist_lock){.+.+}-{3:3} { [ 1054.191844][T25499] HARDIRQ-ON-R at: [ 1054.195997][T25499] lock_acquire+0x179/0x350 [ 1054.202500][T25499] _raw_read_lock+0x5f/0x70 [ 1054.209002][T25499] __do_wait+0x105/0x890 [ 1054.215260][T25499] do_wait+0x21d/0x590 [ 1054.221343][T25499] kernel_wait+0x9f/0x160 [ 1054.227668][T25499] call_usermodehelper_exec_work+0xf1/0x170 [ 1054.235587][T25499] process_one_work+0x9cf/0x1b70 [ 1054.242525][T25499] worker_thread+0x6c8/0xf10 [ 1054.249115][T25499] kthread+0x3c5/0x780 [ 1054.255177][T25499] ret_from_fork+0x675/0x7d0 [ 1054.261789][T25499] ret_from_fork_asm+0x1a/0x30 [ 1054.268571][T25499] SOFTIRQ-ON-R at: [ 1054.272809][T25499] lock_acquire+0x179/0x350 [ 1054.279310][T25499] _raw_read_lock+0x5f/0x70 [ 1054.285813][T25499] __do_wait+0x105/0x890 [ 1054.292078][T25499] do_wait+0x21d/0x590 [ 1054.298162][T25499] kernel_wait+0x9f/0x160 [ 1054.304482][T25499] call_usermodehelper_exec_work+0xf1/0x170 [ 1054.312380][T25499] process_one_work+0x9cf/0x1b70 [ 1054.319317][T25499] worker_thread+0x6c8/0xf10 [ 1054.325905][T25499] kthread+0x3c5/0x780 [ 1054.331971][T25499] ret_from_fork+0x675/0x7d0 [ 1054.338578][T25499] ret_from_fork_asm+0x1a/0x30 [ 1054.345352][T25499] INITIAL USE at: [ 1054.349410][T25499] lock_acquire+0x179/0x350 [ 1054.355819][T25499] _raw_write_lock_irq+0x36/0x50 [ 1054.362675][T25499] copy_process+0x4fe3/0x76a0 [ 1054.369272][T25499] kernel_clone+0xfc/0x930 [ 1054.375608][T25499] user_mode_thread+0xc8/0x110 [ 1054.382294][T25499] rest_init+0x23/0x2b0 [ 1054.388375][T25499] start_kernel+0x3f6/0x4e0 [ 1054.394805][T25499] x86_64_start_reservations+0x18/0x30 [ 1054.402195][T25499] x86_64_start_kernel+0x130/0x190 [ 1054.409231][T25499] common_startup_64+0x13e/0x148 [ 1054.416080][T25499] INITIAL READ USE at: [ 1054.420573][T25499] lock_acquire+0x179/0x350 [ 1054.427416][T25499] _raw_read_lock+0x5f/0x70 [ 1054.434262][T25499] __do_wait+0x105/0x890 [ 1054.440867][T25499] do_wait+0x21d/0x590 [ 1054.447296][T25499] kernel_wait+0x9f/0x160 [ 1054.453966][T25499] call_usermodehelper_exec_work+0xf1/0x170 [ 1054.462213][T25499] process_one_work+0x9cf/0x1b70 [ 1054.469500][T25499] worker_thread+0x6c8/0xf10 [ 1054.476435][T25499] kthread+0x3c5/0x780 [ 1054.482850][T25499] ret_from_fork+0x675/0x7d0 [ 1054.489802][T25499] ret_from_fork_asm+0x1a/0x30 [ 1054.496929][T25499] } [ 1054.499587][T25499] ... key at: [] tasklist_lock+0x18/0x40 [ 1054.507483][T25499] ... acquired at: [ 1054.511448][T25499] _raw_read_lock+0x5f/0x70 [ 1054.516125][T25499] send_sigurg+0xed/0xc80 [ 1054.520630][T25499] sk_send_sigurg+0x76/0x360 [ 1054.525411][T25499] unix_stream_sendmsg+0xfa5/0x1340 [ 1054.530797][T25499] ____sys_sendmsg+0xa98/0xc70 [ 1054.535746][T25499] ___sys_sendmsg+0x134/0x1d0 [ 1054.540593][T25499] __sys_sendmsg+0x16d/0x220 [ 1054.545358][T25499] do_syscall_64+0xcd/0xfa0 [ 1054.550042][T25499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.556110][T25499] [ 1054.558421][T25499] -> (&f_owner->lock){....}-{3:3} { [ 1054.563735][T25499] INITIAL USE at: [ 1054.567711][T25499] lock_acquire+0x179/0x350 [ 1054.573951][T25499] _raw_write_lock_irq+0x36/0x50 [ 1054.580627][T25499] __f_setown+0x61/0x3c0 [ 1054.586607][T25499] fcntl_dirnotify+0x7b1/0xb60 [ 1054.593113][T25499] do_fcntl+0xe62/0x15a0 [ 1054.599096][T25499] __x64_sys_fcntl+0x163/0x200 [ 1054.605603][T25499] do_syscall_64+0xcd/0xfa0 [ 1054.611854][T25499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.619489][T25499] INITIAL READ USE at: [ 1054.623896][T25499] lock_acquire+0x179/0x350 [ 1054.630567][T25499] _raw_read_lock_irqsave+0x74/0x90 [ 1054.637941][T25499] send_sigurg+0x5f/0xc80 [ 1054.644445][T25499] sk_send_sigurg+0x76/0x360 [ 1054.651225][T25499] unix_stream_sendmsg+0xfa5/0x1340 [ 1054.658616][T25499] ____sys_sendmsg+0xa98/0xc70 [ 1054.665560][T25499] ___sys_sendmsg+0x134/0x1d0 [ 1054.672405][T25499] __sys_sendmmsg+0x200/0x420 [ 1054.679250][T25499] __x64_sys_sendmmsg+0x9c/0x100 [ 1054.686355][T25499] do_syscall_64+0xcd/0xfa0 [ 1054.693038][T25499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.701108][T25499] } [ 1054.703681][T25499] ... key at: [] __key.1+0x0/0x40 [ 1054.710895][T25499] ... acquired at: [ 1054.714769][T25499] _raw_read_lock_irqsave+0x74/0x90 [ 1054.720143][T25499] send_sigio+0x31/0x3e0 [ 1054.724561][T25499] kill_fasync+0x214/0x510 [ 1054.729153][T25499] lease_break_callback+0x23/0x30 [ 1054.734358][T25499] __break_lease+0x674/0x1810 [ 1054.739222][T25499] do_dentry_open+0x91f/0x1530 [ 1054.744174][T25499] vfs_open+0x82/0x3f0 [ 1054.748416][T25499] path_openat+0x1de4/0x2cb0 [ 1054.753197][T25499] do_filp_open+0x20b/0x470 [ 1054.757891][T25499] do_sys_openat2+0x11b/0x1d0 [ 1054.762742][T25499] __x64_sys_openat+0x174/0x210 [ 1054.767769][T25499] do_syscall_64+0xcd/0xfa0 [ 1054.772450][T25499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.778515][T25499] [ 1054.780823][T25499] -> (&new->fa_lock){....}-{3:3} { [ 1054.785965][T25499] INITIAL USE at: [ 1054.789855][T25499] lock_acquire+0x179/0x350 [ 1054.795919][T25499] _raw_write_lock_irq+0x36/0x50 [ 1054.802426][T25499] fasync_remove_entry+0xb2/0x1e0 [ 1054.809022][T25499] fasync_helper+0xaf/0xd0 [ 1054.815006][T25499] pipe_fasync+0xc7/0x200 [ 1054.820916][T25499] __fput+0x96b/0xb70 [ 1054.826462][T25499] task_work_run+0x150/0x240 [ 1054.832617][T25499] exit_to_user_mode_loop+0xec/0x130 [ 1054.839467][T25499] do_syscall_64+0x426/0xfa0 [ 1054.845624][T25499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.853083][T25499] INITIAL READ USE at: [ 1054.857406][T25499] lock_acquire+0x179/0x350 [ 1054.863904][T25499] _raw_read_lock_irqsave+0x74/0x90 [ 1054.871104][T25499] kill_fasync+0x138/0x510 [ 1054.877519][T25499] do_splice+0x80c/0x1fc0 [ 1054.883866][T25499] __do_splice+0x15d/0x360 [ 1054.890303][T25499] __x64_sys_splice+0x187/0x250 [ 1054.897178][T25499] do_syscall_64+0xcd/0xfa0 [ 1054.903724][T25499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.911620][T25499] } [ 1054.914109][T25499] ... key at: [] __key.0+0x0/0x40 [ 1054.921236][T25499] ... acquired at: [ 1054.925023][T25499] lock_acquire+0x179/0x350 [ 1054.929695][T25499] _raw_read_lock_irqsave+0x74/0x90 [ 1054.935068][T25499] kill_fasync+0x138/0x510 [ 1054.939666][T25499] evdev_pass_values+0x619/0x9b0 [ 1054.944777][T25499] evdev_events+0x1bb/0x390 [ 1054.949451][T25499] input_pass_values+0x74e/0x880 [ 1054.954564][T25499] input_handle_event+0xf00/0x14d0 [ 1054.959852][T25499] input_inject_event+0x1e8/0x3b0 [ 1054.965052][T25499] evdev_write+0x457/0x750 [ 1054.969649][T25499] vfs_write+0x2a0/0x11d0 [ 1054.974166][T25499] ksys_write+0x1f8/0x250 [ 1054.978681][T25499] do_syscall_64+0xcd/0xfa0 [ 1054.983362][T25499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.989431][T25499] [ 1054.991743][T25499] [ 1054.991743][T25499] stack backtrace: [ 1054.997624][T25499] CPU: 1 UID: 0 PID: 25499 Comm: syz.9.6953 Not tainted syzkaller #0 PREEMPT(full) [ 1054.997666][T25499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1054.997688][T25499] Call Trace: [ 1054.997699][T25499] [ 1054.997713][T25499] dump_stack_lvl+0x116/0x1f0 [ 1054.997754][T25499] check_irq_usage+0x7dc/0x920 [ 1054.997809][T25499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.997850][T25499] ? find_held_lock+0x2b/0x80 [ 1054.997900][T25499] ? check_path.constprop.0+0x24/0x50 [ 1054.997957][T25499] ? __lock_acquire+0x1285/0x1c90 [ 1054.998009][T25499] __lock_acquire+0x1285/0x1c90 [ 1054.998071][T25499] lock_acquire+0x179/0x350 [ 1054.998101][T25499] ? kill_fasync+0x138/0x510 [ 1054.998144][T25499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.998186][T25499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.998230][T25499] _raw_read_lock_irqsave+0x74/0x90 [ 1054.998268][T25499] ? kill_fasync+0x138/0x510 [ 1054.998305][T25499] kill_fasync+0x138/0x510 [ 1054.998344][T25499] evdev_pass_values+0x619/0x9b0 [ 1054.998386][T25499] evdev_events+0x1bb/0x390 [ 1054.998422][T25499] input_pass_values+0x74e/0x880 [ 1054.998458][T25499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.998501][T25499] input_handle_event+0xf00/0x14d0 [ 1054.998536][T25499] ? _copy_from_user+0x59/0xd0 [ 1054.998592][T25499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.998636][T25499] input_inject_event+0x1e8/0x3b0 [ 1054.998676][T25499] evdev_write+0x457/0x750 [ 1054.998716][T25499] ? __pfx_evdev_write+0x10/0x10 [ 1054.998750][T25499] ? common_file_perm+0x1a9/0x340 [ 1054.998789][T25499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.998843][T25499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.998896][T25499] ? security_file_permission+0x71/0x210 [ 1054.998943][T25499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.999000][T25499] ? rw_verify_area+0xcf/0x6c0 [ 1054.999050][T25499] ? __pfx_evdev_write+0x10/0x10 [ 1054.999087][T25499] vfs_write+0x2a0/0x11d0 [ 1054.999141][T25499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.999184][T25499] ? __pfx_vfs_write+0x10/0x10 [ 1054.999230][T25499] ? find_held_lock+0x2b/0x80 [ 1054.999272][T25499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.999317][T25499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.999357][T25499] ? __fget_files+0x20e/0x3c0 [ 1054.999414][T25499] ksys_write+0x1f8/0x250 [ 1054.999462][T25499] ? __pfx_ksys_write+0x10/0x10 [ 1054.999511][T25499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.999558][T25499] do_syscall_64+0xcd/0xfa0 [ 1054.999599][T25499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.999633][T25499] RIP: 0033:0x7fc06dd8f6c9 [ 1054.999659][T25499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.999693][T25499] RSP: 002b:00007fc06ecaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1054.999725][T25499] RAX: ffffffffffffffda RBX: 00007fc06dfe5fa0 RCX: 00007fc06dd8f6c9 [ 1054.999748][T25499] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 1054.999771][T25499] RBP: 00007fc06de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1054.999792][T25499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.999813][T25499] R13: 00007fc06dfe6038 R14: 00007fc06dfe5fa0 R15: 00007fffe7468d48 [ 1054.999849][T25499] [ 1055.316502][ C1] vkms_vblank_simulate: vblank timer overrun [ 1055.325602][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.333726][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.394955][ T9437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.431067][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.390884][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.472921][T18324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.512917][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.551005][T18324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.432055][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.591135][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.632455][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog