last executing test programs: 16.405744752s ago: executing program 0 (id=731): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000a00)=""/102384, 0x18ff0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xff45) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x4000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041", @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) write$sequencer(r4, &(0x7f0000000240)=ANY=[], 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 15.460050233s ago: executing program 0 (id=733): r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000001c00)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x0, 0x0) read(r0, &(0x7f0000001b00)=""/194, 0xc2) 15.149001333s ago: executing program 0 (id=735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000000140)={0x0, [0x4c, 0x7ff, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x0, 0xfffffffd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x40000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) 11.514106086s ago: executing program 3 (id=738): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2a00a9, &(0x7f00000003c0)=ANY=[@ANYBLOB="696e6f6465466b9133322c6e725f696e6f6465733d382c007703d1fa1bd2cf83c5df18745e4bff082b2062b1e4983e5c97989c992e42c173b1088942da54ab8048e915e32615f6fe48bdb57c4be7c78a013888777f5399aedbd86ac79e1c262e50020173f07af7d0fea0363758c71aa18ce31162ab79c4fc5925ea8941975886ad9cbd57becf9ed2497a205136591886a9b9c6be"]) 11.275278642s ago: executing program 0 (id=740): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000640)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r5, 0x1) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b4a, 0xffffffffffffff15) setpgid(r0, r0) close(r4) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) ioperm(0x83, 0x6, 0x8) prlimit64(r0, 0xd, &(0x7f0000000000)={0x2, 0x7}, &(0x7f00000000c0)) 10.994448859s ago: executing program 4 (id=742): syz_mount_image$ntfs3(&(0x7f000001f340), &(0x7f0000000040)='./file0\x00', 0x890, &(0x7f0000000380)=ANY=[], 0x1, 0x1f335, &(0x7f000003e740)="$eJzs3QmcTXX/B/Df2fd9sTMY+77v+y77FrJvIVu2kAoVaUElqYQkW5JQSRJJRLJLQpIkSSohif/LnTvT3MG/5/ZUp+eez/v1MufOmd8953vv9975nHPuMefbVtOatanfOikpKYmINElxkcQYR8aRq0zKbTY672p0+jMhhCKETC27td70/PaYa/P0XOvuHLs0z/rhSrtV+tsC2W52+fZs6ePb/e1Zvr3Spm+/YUn9hiUNGjw8qXtSj8GDh3fvMaB3Uq9+w+4ontRiQO/uw3on9Rs0rPfQmB/3GTB4yJDRSd0H9dLkIUN7DxuW1H3Q6KQ7eo9OGj44afjQ0Undb+/eb1BS8eLFkzSZwH+o7ZKgKwAAAAAAAAAAAAAAAAAAgL/G1avkKhV0EQAAAAAAAAAAAAAAAAAAAPBfqd+oSb2ShEv7niIUqUkoMpcihIi/j0v9f/9MhvubhJBukVuZI18bRm+N67yn5IBLB6ibTfkbFXODExFKEkL6pi2fJo0jt6hoxdwfroccjS7oQMokdb0sk0yakvqkTfT7cdHarz369IVUj05rps44y9xwatVIeYaWxywn47OVbjlmzCRtalEpf4Th6tWrV2/0FP21rq8PwgT9Dzf0/39NvPmSGuGp09h8YW6a/90y5D8TTUU6w/r+ifwfkrZ8mrSKN/+ToguKTlPXK6blf1PSjwwlQ6Pzb7YdQGV8fpNuPM1NX033/P7bZewmhAv6H27of7jR1+U//f/kP/2/mP9pRy5SpunzvwkZTG4n9Uk/MoD0js6/Wf7XiE7T8j/DclOnuWtSkTsh/+HfD/0PN/Q/3K7Pfyaa/ycz5D8f3QZgMyzBjOZlav6X/JP5H3ucnyIt4s75WKnLF5hk0o4MJgPICDKQ9I4sd1zaemjSK22N7LhrjyP18wA38tOy0XeIS+ZQNklJdsLZ0ftH5qUM4K7t/ifRJGZMxp+R6LZSybT1s8SO3hpGRpMx5A7SnQyIbI2kHo+4tu1TMG08R9S0Zzrar+gjH5c2P3PacaHMf7gdkrGbEC7of7ih/+HGXpf/bDT/t9zg83/2Jvv/f1X+/1f7+akfoEf/+n/6/fxaZDgZToaSuqQ36ROdH7sdwPzH2wGTyfXbAZF5cW4H3Ow4Q6qMn+OkPq7UqUXVj0z/u+MM2P4PN/Q/3ND/cLt+/5+LJBKTci2gDPv/3E3O//v/8n9+u7al0k9T5+dPSku2tPv9/jkCRer+9/v/keVTTPHI9y1i8vb31/3NPtcvasZOLbpOZDqNENL+2g02ZbuhYvQuyaQRKUNKRh4HFX1iqOjzUzD6L32RmTM8l3OjNVJszegzHath+if8BtPU9VtUvcj3y1OPG7ApxxnEDHWm1ML8j3xOAX8PnP8Vbuh/uF1//h8f3f9vf4PP//mAPv9Pf/5/3J8LRPOxZtrjSyEwyaQ26UeGk4GkOxkS9/54zQzzLapBZPq/lafY/g839D/c0P9wu37/X4jm//obHP8X/ubj/+lzvslfdJ4/F8n5wWQwGR75/t963P8//f8FVnQ5f812Bt7/4Yb+hxv6H27X578Yzf9xN8h/MfDz/5k/cf5/rPTnBdQm3UkvUidybuAwkpKnsefR0Wm3xsUcn/99sVeiN9OOz5/NFTuNSl0bHb3awr/jOAHe/+GG/ocb+h9u1+e/FMl/iYhMbP5zkZ/9pX//JyljNdQfHv//S/5fQGS9ApNMWpPepCcZQYaS3hny/ff3Rer++O+fv6ecMzuEip1eW1pd0ppYtVJGTiMk5U8PRc8TWJ/2+fu1cSljbBJ7nsDy6L+UR+tGH39KE1omr4w8P6nTcdFxYwkhjUij68bPPXykNk39Pk3dZOkVM55JG3/WZi5eG5M6JRmWn77fdPTxbSG/n1+wKN3jSx1vZnh8M6P/SOSISkq9BVPPQb7JujOOu9lzkHHczR57xsfx79gOCwo+/w039D/crv/8X/5//v6fHPjn/8yfyP/UilOm6T//b0uGkDqkOxkWzf8bHZdP3Yv//f/90zec5k6aHJmmLodwKccPkqLn4SWTRmQQ6UMGR++VuvGj9st2x133HjqY8XH/M7mE7f9wQ//DDf0Pt+v3/5Xo+f8P0def/6dEpiNilvBf5L+ZsZp/aP8/st5r+V+PjCLDSW8yiPSK7M+OolL3Z+nI+Y9/dF5/Qyrl3zVZUh4B6UaaRZ/HlK/x1pc/umnAM8mkOelB+pNGaeco/NXLb0mYyHkR3QkhWaPL7xv5hOW/X77IJJNWpDcZQrqToZEtLHLd6wb730HD/l+4of/hdv3+vxrZ16VIwRuc/6/+jef/Bf13eWI/96fSbiV2PmH7P9zQ/3BD/8Pt+v1/7f/Jfw35n2Dw/g839D/c0P9wuz7/9f8n/3Xkf4LB+z/c0P9wQ//D7fr8N/6f/DeQ/wkG7/9wQ//DDf0Pt+vz34ye6z6NxOY/lXaPWH9V/id2zv5b4f0fbuh/uKH/4XZ9/lvI/xDB+z/c0P9wQ//D7fr8t5H/IYL3f7ih/+GG/ofb9fnvIP9DBO//cEP/ww39D7fr899F/ocI3v/hhv6HG/ofbtfnv4f8DxG8/8MN/Q839D/crs9/H/kfInj/hxv6H27of7hdn/+ZkP8hgvd/uKH/4Yb+h9v1+U9Frv+jkVH09df/y/wXXv8v/5+8/m+z6PV//prr34xIu/5N5Po/kack5TqD7dOuZ9s87b4WyXD9n3TXBU6KXne2YPSyRtf9jSEq9gGnv47u2bT10mRn2npbxoxNv9710X8kcr5GyejzHr0+bnS56R946nNxNYP03XSjVzhsn+56vP/5csiNH/MNHi+28/5N8Ps/3ND/cLt5/ne7wd//y5Jg+Z/++nrTon+DMDWHS94g/x0Sm8NJ5PoH8b+Vc3j/hxv6H27of7jdPP8fukH+Z73BFSP/ifwfkrZ8KnJ12r8i/292fdppqeuLbge0SNsOaJW2jIzbATWj/67JHp0mRa6WGLlm4twc0Wc24/MW/HYCrv8Zbuh/uKH/4ZZy/d/CGfK/ImHItAzH/7kMV3D/PfdTpOb+/HZtS13L3ZtNk5Kuv+4//f/u96dU1STDdf//aD0Zl3dtvcUi9+xD+pEBpHf0uPm1vDfTXff/LPnj6/4fjf4jaXlPkW6RCgnJFv3+D+uLPgtZo4fbr63zRvXl+LPLz4jNuPxShKTraer2yM60Yxopn4OI0VvX7ls1+rjbp/2cjczLHP1/o4RnSXKT9m0b1U1ZZrp5DW4wr2nzuuS7WtH1/28cL0k0vYMuAAKF/odb75vkP0W2UBnzv1fMPf90/t+ginjy/6/O13HR2qnIHvz1x8Nqpn/A6ZaXOs1NjYtU/0/n5vhoWf9dbvb683eFBID+hxv6H7Rgc6PXTfO/b4b9f/4vyv/U08vS+1vyP6Mb7v9mvO4fnXZrfbQ3KRiyOjpfJWTuckJIM9Iu8vWaTmQ4GUiGkE5kGBlNxpBipB8ZSLqT20nvyL9BpBSpSEqRSpFpOVKSlCclSad0WyKxt2uQGqTTX7zU2NcZG32d9brJ64z7b19nV1+IeZ3BvxN+/4cb+h9uN89/ct3x/4D2/zny547/R/fX5ejyrq23w03yP579/9TlpU5zU+P/3/3/a+scHs3XaWk/ZyPz/tvtuMhnDwpPRgzrPbT4qO7Dhw8tRaKTG/ysNIlOIlK3/yDM0P9wQ/+D9u/b/6cj+V/yb9r/j//4f8r+aNz5n3J4nxTMmzK9/vh/mQzrIX9uO+MP15MSuDfbzki9VTP9A0+3vNRpbmbC3/A5Q69/6HMG+HfC7/9wQ/+D9u/L/5T9/53/5ef/dQ+3i5n+mfwfkq6qNjfJ5ZutJ3V/PbXq1FyW0nK5OOlJBpMB0RHxHgdIXW7qNDf14P/geQB4/4cb+h9u6H/Q/m35f03F1LwT088VYsZgfzARCEEXAIFC/8MN/Q83IY78j/kG+Z8QxKALgECh/+GG/oebGEf+SzFjkP+JQAq6AAgU+h9u6H+4SXHkvxwzBvmfCOSgC4BAof/hhv6HmxxH/isxY5D/iUAJugAIFPofbuh/uClx5L8aMwb5nwjUoAuAQKH/4Yb+h5saR/5rMWOQ/4lAC7oACBT6H27of7hpceS/HjMG+Z8I9KALgECh/+GG/oebHkf+GzFjkP+JwAi6AAgU+h9u6H+4GXHkf+xle5H/ieC6SzFDqKD/4Yb+h5sZR/5bMWOQ/4nACroACBT6H27of7hZceS/HTMG+Z8I7KALgECh/+GG/oebHUf+OzFjkP+JwAm6AAgU+h9u6H+4OXHkvxszBvmfCNygC4BAof/hhv6HmxtH/nsxY5D/icALugAIFPofbuh/uHlx5L8fMwb5nwj8oAuAQKH/4Yb+h5sfR/5nihmD/E8EmYIuAAKF/ocb+h9umeLI/8wxY5D/iSBz0AVAoND/cEP/wy1zHPmfJWYM8j8RZAm6AAgU+h9u6H+4ZYkj/7PGjEH+J4KsQRcAgUL/ww39D7esceR/tpgxyP9EkC3oAiBQ6H+4of/hli2O/M8eMwb5nwiyB10ABAr9Dzf0P9yyx5H/OWLGIP8TQY6gC4BAof/hhv6HW4448j9nzBjkfyLIGXQBECj0P9zQ/3DLGUf+54oZg/xPBLmCLgAChf6HG/ofbrniyP+kmDHI/0SQFHQBECj0P9zQ/3BLiiP/c8eMQf4ngtxBFwCBQv/DDf0Pt9xx5H+emDHI/0SQJ+gCIFDof7ih/+GWJ478zxszBvmfCPIGXQAECv0PN/Q/3PLGkf/JMWOQ/4kgOegCIFDof7ih/+GWHEf+54sZg/xPBPmCLgAChf6HG/ofbvniyP/8MWOQ/4kgf9AFQKDQ/3BD/8Mtfxz5XyBmDPI/ERQIugAIFPofbuh/uBWII/8LxoxB/ieCgkEXAIFC/8MN/Q+3gnHkf6GYMcj/RFAo6AIgUOh/uKH/4VYojvwvHDMG+Z8ICgddAAQK/Q839D/cCseR/0VixiD/E0GRoAuAQKH/4Yb+h1uROPK/aMwY5H8iKBp0ARAo9D/c0P9wKxpH/heLGYP8TwTFgi4AAoX+hxv6H27F4sj/4jFjkP+JoHjQBUCg0P9wQ//DrXgc+V8iZgzyPxGUCLoACBT6H27of7iViCP/S8aMQf4ngpJBFwCBQv/DDf0Pt5Jx5H+pmDHI/0RQKugCIFDof7ih/+FWKo78Lx0zBvmfCEoHXQAECv0PN/Q/3ErHkf9lYsYg/xNBmaALgECh/+GG/odbmTjyv2zMGOR/IigbdAEQKPQ/3ND/cCsbR/6XixmD/E8E5YIuAAKF/ocb+h9u5eLI//IxY5D/iaB80AVAoND/cEP/w618HPlfIWYM8j8RVAi6AAgU+h9u6H+4VYgj/yvGjEH+J4KKQRcAgUL/ww39D7eKceR/pZgxyP9EUCnoAiBQ6H+4of/hVimO/K8cMwb5nwgqB10ABAr9Dzf0P9wqx5H/VWLGIP8TQZWgC4BAof/hhv6HW5U48r9qzBjkfyKoGnQBECj0P9zQ/3CrGkf+V4sZg/xPBNWCLgAChf6HG/ofbtXiyP/qMWOQ/4mgetAFQKDQ/3BD/8Otehz5XyNmDPI/EdQIugAIFPofbuh/uNWII/9rxoxB/ieCmkEXAIFC/8MN/Q+3mnHkf62YMcj/RFAr6AIgUOh/uKH/4VYrjvyvHTMG+Z8IagddAAQK/Q839D/caseR/3VixiD/E0GdoAuAQKH/4Yb+h1udOPK/bswY5H8iqBt0ARAo9D/c0P9wqxtH/teLGYP8TwT1gi4AAoX+hxv6H2714sj/+jFjkP+JoH7QBUCg0P9wQ//DrX4c+d8gZgzyPxE0CLoACBT6H27of7g1iCP/G8aMQf4ngoZBFwCBQv/DDf0Pt4Zx5H+jmDHI/0TQKOgCIFDof7ih/+HWKI78bxwzBvmfCBoHXQAECv0PN/Q/3BrHkf+3xIxB/ieCW4IuAAKF/ocb+h9ut8SR/01ixiD/E0GToAuAQKH/4Yb+h1uTOPK/acwY5H8iaBp0ARAo9D/c0P9waxpH/jeLGYP8TwTNgi4AAoX+hxv6H27N4sj/5jFjkP+JoHnQBUCg0P9wQ//DrXkc+d8iZgzyPxG0CLoACBT6H27of7i1iCP/W8aMQf4ngpZBFwCBQv/DDf0Pt5Zx5H+rmDHI/0TQKugCIFDof7ih/+HWKo78bx0zBvmfCFoHXQAECv0PN/Q/3FrHkf9tYsYg/xNBm6ALgECh/+GG/odbmzjyv23MGOR/ImgbdAEQKPQ/3ND/cGsbR/63ixmD/E8E7YIuAAKF/ocb+h9u7eLI/1tjxiD/E8GtQRcAgUL/ww39D7db48j/9jFjkP+JoH3QBUCg0P9wQ//DrX0c+d8hZgzyPxF0CLoACBT6H27of7h1iCP/O8aMQf4ngo5BFwCBQv/DDf0Pt45x5P9tMWOQ/4ngtqALgECh/+GG/ofbbXHkf6eYMcj/RNAp6AIgUOh/uKH/4dYpjvzvHDMG+Z8IOgddAAQK/Q839D/cOseR/11ixiD/E0GXoAuAQKH/4Yb+h1uXOPK/a8wY5H8i6Bp0ARAo9D/c0P9w6xpH/neLGYP8TwTdgi4AAoX+hxv6H27d4sj/7jFjkP+JoHvQBUCg0P9wQ//DrXsc+d8jZgzyPxH0CLoACBT6H27of7j1iCP/e8aMQf4ngp5BFwCBQv/DDf0Pt56EIuw41yQkyUyZ4xJCaELMlOjPTK5SuQhFR77hkgghSdduK5mvfW9eN5+4KeOplPn2ta+KmzI2/TzikncpJ22ckjaOOhozj2Qmi4kds/7cv69/7nXzAQAAAAAAAOA/ln5fPXa/HQAAAAAAAAD+FzVqVrd9QSJdN78gIWQ1T8hJI+V7jRygbnR/Nvq1L2kVucVFv47rvKfkgEsHqJtNSfR8AyKnTPjotyKTTGqR4WQ4GUrqkt6kT2QuFT0VUYx/PRmkX09t0p30InXIADKCDIvMFaI/50k30uJPPZ6aGdYjRNbTjwwnA0l3MoQI0fV0I03iW35SdIFJscvnIssfTAaT4aQfGUBSzptQ/sP6NfL/PE9mav31yCgynPQmg0gvknKaBf0n+sDGvGLS96EJGUxuJ/Uj9feO9ptEp91I4/jWczR61wOxzxPLJJOmpD5pk7bklK9xP46b9EFMW35T0o8MJUNTzqOJvrOk+F9P1/cjKbUfrUlv0pOMIENJ7+jbR/4Ty6cj72oS7Wj612tbMoTUId3JMNKbMJG5zF9Rf9ry25HBkffcQNI7bXntSd3/dvmR1yvFFE/Xnmv9bROz3Pnt2pa6dv+6h9vFTFPnp76Pe6Vrc7FIB/tEX5/FSc9I/SkjskXXk/H9nLq8m00z1p+URMxikXumrqdkZH7OP7v86OOQ0z2ODjHLLxXpf64/u/yU8kjBvLHP0+/LLx2Z//ctv0zM82emvZLhP6cFXQAECv0PN/Q/3ND/cNPItb2JNqQWaUbqklqkFalLupJGpBmpT5qTVqQpqUXakEakOWn2N1Vgprt9bd85utlHGkanyZEK2pBWpBGpTdqSNqQe6UqakEaRuv9+Seluj0t3+2pUMqlPGpEmkaqakVqkKan3D1T1u5LpbtcmJLoXRUjt6MZwMmlOapPGpB6pQ9pEelv3H62v5k1up+7iX3v9XautbaTDbUgH0pXUJfVIa1InMqcFaRN5Jf5dWqS7feP+tiPNSRPSNtLZf77H6f9CW830+zhpz19sff/ke/eaIRnqU6O3U6fJkd8r137DBGPcTeb/3t9Gkd999Uh70pW0Is1J83/k90qqaelu1/zD+mqRJqQJaU7q/CO9vWZuuts3fn/Ujrxvr73aWvzNtdzI8j+srxWpR1pEsq115B3SgjSPPKf/TJfX36S+1GYnk3qkVgDv21Q7M5SU+l/+U6cp9QXn6E1/kvILMDnyfmhAGpB6kW2XtpHnrklalrSObDvUi/zW/lukO5I37mY/AAAA+Je5cPUGfo+ucRln1Yi9+802rwEAAAAAAADgX+SszVxMf6h6bOTINTuuISGkfXReyt8ELBv97NElk4md4e8CZE6Zl+HvAf7R99e0TF4ZWda4ONY/h7p+/ZF5f2L9cw8fqU1Tvx+u7xVdf8l0n8elrD97yhAm5m8cRr7+J+sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4X3LWZi4S6vfvxxJCKMKOa0gIaR+d5xJCaFKW0NHvJhObUCn34ezIJHPKvJQBXBIhJIkmf/j9NS2TV0aWNS6O9c+hrl9/ZN6fWP/cw0dq01RkpRG9ousvSQipGbP+7ClDGJdcpXKlrj/y9T9ZDwAAAAAAAECwKEIThrCEIzwRiEgkIhOFqEQjOjGISSxiE4e4xCM+yUQykywkK8lGspMcJCfJRZJIbpKH5CXJJB/JTwqQgqQQKUyKkKKkGClOSpCSpBQpTcqQsqQcKU8qkIqkEqlMqpCqpBqpTmqQmqQWqU3qkLqkHqlPGpCGpBFpTG4hTUhT0ow0Jy1IS9KKtCZtSFvSjtxK2pMOpCO5jXQinUkX0pV0+1P3v5uMJfeQe8l9ZBwZTyaQ+8kD5EEykUwiD5HJ5GHyCHmUPEamkKlkGnmcPEGeJNPJU2QGeZrMJM+QZ8lzZBZ5nswmc8hc8gKZR14k88lLZAFZSBaRxWQJeZksJa+QZeRVspy8RlaQlWQVeZ28Qd4kq8lbZA15m6wl75B15F2ynmwg75GN5H2yiXxANpMt5EOylWwjH5Ht5GOyg+wku8husofsJfvIfvIJOUA+JQfJZ+QQOUyOkM/jvP+FDPcfRRGKUDRFUyzFUjzFUyIlUjIlUyqlUjqlUyZlUjZlUy7lUj7lU5mpzFRWKiuVncpO5aRyUklUEpWHykMlU8lUfio/VZAqSBWmClNFqaJUcao4VZIqRZWmSlNlqbJUeao8VZGqRFWiqlBVqGpUNaoGVYOqRdWi6lB1qHpUPaoB1YBqRDWmGlNNqCZUM6oZ1YJqQbWiWlFtqDZUO6od1Z5qT3WkOlKdqE5UF6oL1Y3qRvWgelC9qF5UH6oP1ZfqS/Wn+lMDqAHUIGoQNYQaQg2lhlLDqeHUSGokNYoaTY2m7qbupu6h7qHuo+rQ46kJ1ATqAeoBaiI1iZpETaYeph6hHqEeo6ZQU6lp1OPU49ST1HTqPDWDepqaSc2kqtHPUbOo56kkeg41l5pLzaPmUfOp+dQCaiG1kFpMLaFeppZSS6ll1KvUq9Rr1ApqJbWSep16nXqTWk2tptZQb1NrqbXUOuoCtZ7aQL1HbaTepzZR71ObqS3UZmortY3aSm2ntlM7qB3ULmoXtYfaQ+2j9lGfUJ9Qn1KfUp9Rn1FTqCPUEeoodZQ6Rh2jjlPHqRPUCeokdZI6RZ2iTlOnqTPUGeos9QP1I/UDdY46R52nLlAXqYvUJeoSdZm6TF2hrlx789PXsDRL8zRPi7RIy7RMq7RK67ROm7RJ27RNu7RL+7RPZ6Yz01nprHR2Ojudk85JJ9G56Tx0HjqZTqbz0/npgnRBujBdmC5KF6WL08XpknRJujRdmi5Ll6PL0xXoinQlujJdha5CV6Or0zXomnQtuhZdh65L16Pr0/XphnRDujHdmG5CN6Gb0c3owUUHFm1Fj6cmUm3pa51pT0+lOtLTqE50Z7oL3ZV+kupO96CnU73o3nQf+nb6aWoG1Z/uUXQAPZAeRM+ihtCDij5PDaOH03OokfRd9Ch6ND2GvpseS/cqei99H72AGk9PoBdTD9AP0hPpSfQyqi59rWP16MfoKfRUehr9OP0m9SQ9nX6KnkE/Tc+kn6GfpZ+jZ9HP07PpOfRc+gV6Hv0iPZ9+iV5AL6QX0YvpJfTL9FL6FXoZ/Sq9nH6NXkGvpFfRr9Nv0G/Sq+m36DX02/Ra+h16Hf0uvZ7eQL9Hb6TfpzfRH9Cb6S30h/RWehv9Eb2d/pjeQe+kd9G76T30XnofvZ/+hD5Af0ofpD+jD9GH6SP05/RR+gv6GP0lfZz+ij5Bf02fpL+hT9Hf0qfp7+gz9Pf0WfoH+kf6J/oc/TN9nr5AX6R/oS/Rv9KX6d/oK/RVmjAUQzMMwzIcwzMCIzISIzMKozIaozMGYzIWYzMO4zIe4zOZmMxMFiYrk43JzuRgcjK5mCQmN5OHycskM/mY/EwBpiBTiCnMFGGKMsWY4kwJpiRTiinNlGHKMuWY8kwFpiJTianMVGGqMtWY6kwNpiZTi6nN1GHqMvWY+kwDpiHTiGnM3MI0YZoyzZjmTAumJdOKac20Ydoy7ZhbmfZMB6YjcxvTienMdGG6Mt2Y7kwPpifTi+nN9GFuZ/oy/Zj+zB3MAGYgM4gZzAxhhjBDmaHMcGYEM5IZyYxiRjNjmN+YK8xV5l7mPmYcM56ZwNzPPMA8yExkJjEPMZOZh5lHmEeZx5gpzFRmGvM48wTzJDOdeYqZwTzNzGSeYZ5lnmNmMc8zs5k5zFzmBWYe8yIzn3mJWcAsZBYxi5klzMvMxOiSlv8H93/vBvd/NLL2HcxOZhezm9nD7GX2MfuZHcwB5gBzkDnIHGIOMUeYI8xR5ihzjDnGHGeOMyeYE8xJ5iRzijnFnGZOM2eYM8xZ5gfmF+Yn5hzzM3OeucBcYH5hLjGXmMvR54CwFEuzDMuyHMuzAiuyEiuzCquyGquzBmuyFmuzDuuyHuuzmdjMbBY2K5uNzc7mYHOyudgkNjebh83LJrP52PxsAbYgW4gtzBZhi7LF2OJsif/6/n9UXze2G9uD7cH2Ynuxfdg+bF+2L9uf7c8OYAewg9hB7BB2CDuUHcoOZ4ezI9mR7Ch2FDuGHcOOZcey97L3suPYcewE9n72AfZBdiI7iX2Incw+zD7MPso+yk5hp7DT2GnsE+wT7HR2OjuDncHOZGeyz7LPsrPYWexsdjY7l53LzmPnsfPZ+ewCdgG7iF3ELmGXsEvZpewydhm7nF3OrmBXsKvYVewb7BvsanY1u4Zdw65l17Lr2HXsenYDu4HdyG5kN7Gb2M3sZvZD9kN2G7uN3c5uZ9ezO9md7G52N7uX3cvuZ/ezB9gD7EH2IHuIPcQeYY+wR9mj7DH2GHucPc6eYE+wJ9mT7Cn2FHuaPc2eYc+wZ9mz7I/sj+w59hx7nj3PXmQvspfYS+xl9jJ7hb1ybbOPozmaYzmW4zmeEzmRkzmZUzmV0zmdMzmTszmbczmX8zmfy8xl5rJyWbnsXHYuJ5eTS+KSuDxcHi6Zy8fl5wpwBblCXGGuCFeUK8YV50pwJblSXGmuDFeWK8eV5ypwFblKXGWuCleVq8ZV52pwNblaXG2uDleXq8fV5xpwDblGXGPuFq4J15RrxjXnWnAtuVZca64N15Zrx93Ktec6cB2527hOXGeuC9eV6/aXLn8S9xA3mXuYe4R7lHuMm8JN5aZxj3NPcE9y07mnuBnc09xM7hnuWe45bhb3PDebm8PN5V7g5nEvcvO5l7gF3EJuEbeYW8K9zC3lXuGWca9yy7nXuBXcSm4V9zr3Bvcmt5p7i1vDvc2t5d7h1nHvcuu5Ddx73EbufW4T9wG3mdvCfcht5bZxH3HbuY+5HdxObhe3m9vD7eX2cfu5T7gD3KfcQe4z7hB3mDvCfc4d5b7gjnFfcse5r7gT3NfcSe4b7hT3LXea+447w33PneV+4H7kfuLOcT9z57kL3EXuF+4S9yt3mfuNu8Jd5QhP8TTP8CzP8Twv8CIv8TKv8Cqv8Tpv8CZv8Tbv8C7v8T6fic/MZ+Gz8tn47HwOPiefi0/ic/N5+Lx8Mp+Pz88X4AvyhfjCfBG+KF+ML86X4EvypfjSfBm+LF+OL89X4CvylfjKfBW+Kl+Nr87X4GvytfjafB2+Ll+Pr8834BvyjfjG/C18E74p34xvzrfgW/Kt+NZ8G74t346/lW/Pd+A78rfxnfjOfBe+K9+N78734HvyvfjefB/+dr4v34/vz9/BD+AH8oP4wfwQ/k5+KD+MH86P4Efyd/Gj+NH8GP5ufix/D38vfx8/jh/PT+Dv5x/gH+Qn8pP4h/jJ/MP8I/yj/GP8FH4qP41/nH+Cf5Kfzj/Fz+Cf5mfyz/DP8s/xs/jn+dn8HH4u/wI/j3+Rn8+/xC/gF/KL+MX8Ev5lfin/Cr+Mf5Vfzr/Gr+BX8qv41/k3+Df51fxb/Br+bX4t/w6/jn+XX89v4N/jN/Lv85v4D/jN/Bb+Q34rv43/iN/Of8zv4Hfyu/jd/B5+L7+P389/wh/gP+UP8p/xh/jD/BH+c/4o/wV/jP+SP85/xZ/gv+ZP8t/wp/hv+dP8d/wZ/nv+LP8D/yP/E3+O/5k/z1/gL/K/8Jf4X/nL/G/8Ff4qTwRKoAVGYAVO4AVBEAVJkAVFUAVN0AVDMAVLsAVHcAVP8IVMQmYhi5BVyCZkF3IIOYVcQpKQW8gj5BWShXxCfqGAUFAoJBQWighFhWJCcaGEUFIoJZQWyghlhXJCeaGCUFGoJFQWqghVhWpCdaGGUFOoJdQW6gh1hXpCfaGB0FBoJDQWbhGaCE2FZkJzoYXQUmgltBbaCG2FdsKtQnuhg9BRuE3oJHQWughdhW5Cd6GH0FPoJfQW+gi3C32FfkJ/4Q5hgDBQGCQMFoYIdwpDhWHCcGGEMFK4SxgljBbGCHcLY4V7hHuF+4RxwnhhgnC/8IDwoDBRmCQ8JEwWHhYeER4VHhOmCFOFacLjwhPCk8J04SlhhvC0MFN4RnhWeE6YJTwvzBbmCHOFF4R5wovCfOElYYGwUFgkLBaWCC8LS4VXhGXCq8Jy4TVhhbBSWCW8LrwhvCmsFt4S1ghvC2uFd4R1wrvCemGD8J6wUXhf2CR8IGwWtggfCluFbcJHwnbhY2GHsFPYJewW9gh7hX3CfuET4YDwqXBQ+Ew4JBwWjgifC0eFL4RjwpfCceEr4YTwtXBS+EY4JXwrnBa+E84I3wtnhR+EH4WfhHPCz8J54YJwUfhFuCT8KlwWfhOuCFcFIlIiLTIiK3IiLwqiKEqiLCqiKmqiLhqiKVqiLTqiK3qiL2YSM4tZxKxiNjG7mEPMKeYSk8TcYh4xr5gs5hPziwXEgmIhsbBYRCwqFhOLiyXEkmIpsbRYRiwrlhPLixXEimIlsbJYRawqVhOrizXEmmItsbZYR6wr1hPriw3EhmIjsbF4i9hEbCo2E5uLLcSWYiuxtdhGbCu2E28V24sdxI7ibWInsbPYRewqdhO7iz3EnmIvsbfYR7xd7Cv2E/uLd4gDxIHiIHGwOES8UxwqDhOHiyPEkeJd4ihxtDhGvFscK94j3iveJ44Tx4sTxPvFB8QHxYniJPEhcbL4sPiI+Kj4mDhFnCpOEx8XnxCfFKeLT4kzxKfFmeIz4rPic+Is8XlxtjhHnCu+IM4TXxTniy+JC8SF4iJxsbhEfFlcKr4iLhNfFZeLr4krxJXiKvF18Q3xTXG1+Ja4RnxbXCu+I64T3xXXixvE98SN4vviJvEDcbO4RfxQ3CpuEz8St4sfizvEneIucbe4R9wr7hP3i5+IB8RPxYPiZ+Ih8bB4RPxcPCp+IR4TvxSPi1+JJ8SvxZPiN+Ip8VvxtPideEb8Xjwr/iD+KP4knhN/Fs+LF8SL4i/iJfFX8bL4m3hFvCoSiZJoiZFYiZN4SZBESZJkSZFUSZN0yZBMyZJsyZFcyZN8KZOUWcoiZZWySdmlHFJOKZeUJOWW8kh5pWQpn5RfKiAVlApJhaUiUlGpmFRcKiGVlEpJpaUyUlmpnFReqiBVlCpJlaUqUlWpmlRdqiHVlGpJtaU6Ul2pnlRfaiA1lBpJjaVbpCZSU6mZ1FxqIbWUWkmtpTZSW6mddKvUXuogdZRukzpJnaUuUlepm9Rd6iH1lHpJvaU+0u1SX6mf1F+6QxogDZQGSYOlIdKd0lBpmDRcGiGNlO6SRkmjpTHS3dJY6R7pXuk+aZw0Xpog3S89ID0oTZQmSQ9Jk6WHpUekR6XHpCnSVGma9Lj0hPSkNF16SpohPS3NlJ6RnpWek2ZJz0uzpTnSXOkFaZ70ojRfeklaIC2UFkmLpSXSy9JS6RVpmfSqtFx6TVohrZRWSa9Lb0hvSqult6Q10tvSWukdaZ30rrRe2iC9J22U3pc2SR9Im6Ut0ofSVmmb9JG0XfpY2iHtlHZJu6U90l5pn7Rf+kQ6IH0qHZQ+kw5Jh6Uj0ufSUekL6Zj0pXRc+ko6IX0tnZS+kU5J30qnpe+kM9L30lnpB+lH6SfpnPSzdF66IF2UfpEuSb9Kl6XfpCvSVYnIlEzLjMzKnMzLgizKkizLiqzKmqzLhmzKlmzLjuzKnuzLmeTMchY5q5xNzi7nkHPKueQkObecR84rJ8v55PxyAbmgXEguLBeRi8rF5OJyCbmkXEouLZeRy8rl5PJyBbmiXEmuLFeRq8rV5OpyDbmmXEuuLdeR68r15PpyA7mh3EhuLN8iN5Gbys3k5nILuaXcSm4tt5Hbyu3kW+X2cge5o3yb3EnuLHeRu8rd5O5yD7mn3EvuLfeRb5f7yv3k/vId8gB5oDxIHiwPke+Uh8rD5OHyCHmkfJc8Sh4tj5HvlsfK98j3yvfJ4+Tx8gT5fvkB+UF5ojxJfkieLD8sPyI/Kj8mT5GnytPkx+Un5Cfl6fJT8gz5aXmm/Iz8rPycPEt+Xp4tz5Hnyi/I8+QX5fnyS/ICeaG8SF4sL5FflpfKr8jL5Ffl5fJr8gp5pbxKfl1+Q35TXi2/Ja+R35bXyu/I6+R35fXyBvk9eaP8vrxJ/kDeLG+RP5S3ytvkj+Tt8sfyDnmnvEveLe+R98r75P3yJ/IB+VP5oPyZfEg+LB+RP5ePyl/Ix+Qv5ePyV/IJ+Wv5pPyNfEr+Vj4tfyefkb+Xz8o/yD/KP8nn5J/l8/IF+aL8i3xJ/lW+LP8mX5GvykShFFphFFbhFF4RFFGRFFlRFFXRFF0xFFOxFFtxFFfxFF/JpGRWsihZlWxKdiWHklPJpSQpuZU8Sl4lWcmn5FcKKAWVQkphpYhSVCmmFFdKKCWVUkpppYxSVimnlFcqKBWVSkplpYpSVammVFdqKDWVWkptpY5SV6mn1FcaKA2VRkpj5RalidJUaaY0V1ooLZVWSmuljdJWaafcqrRXOigdlduUTkpnpYvSVemmdFd6KD2VXkpvpY9yu9JX6af0V+5QBigDlUHKYGWIcqcyVBmmDFdGKCOVu5RRymhljHK3Mla5R7lXuU8Zp4xXJij3Kw8oDyoTlUnKQ8pk5WHlEeVR5TFlijJVmaY8rjyhPKlMV55SZihPKzOVZ5RnleeUWcrzymxljjJXeUGZp7yozFdeUhYoC5VFymJlifKyslR5RVmmvKosV15TVigrlVXK68obypvKauUtZY3ytrJWeUdZp7yrrFc2KO8pG5X3lU3KB8pmZYvyobJV2aZ8pGxXPlZ2KDuVXcpuZY+yV9mn7Fc+UQ4onyoHlc+UQ8ph5YjyuXJU+UI5pnypHFe+Uk4oXysnlW+UU8q3ymnlO+WM8r1yVvlB+VH5STmn/KycVy4oF5VflEvKr8pl5TflinJVISql0iqjsiqn8qqgiqqkyqqiqqqm6qqhmqql2qqjuqqn+momNbOaRc2qZlOzqznUnGouNUnNreZR86rJaj41v1pALagWUgurRdSiajG1uFpCLamWUkurZdSyajm1vFpBrahWUiurVdSqajW1ulpDranWUmurddS6aj21vtpAbag2Uhurt6hN1KZqM7W52kJtqbZSW6tt1LZqO/VWtb3aQe2o3qZ2UjurXdSuaje1u9pD7an2UnurfdTb1b5qP7W/eoc6QB2oDlIHq0PUO9Wh6jB1uDpCHanepY5SR6tj1LvVseo96r3qfeo4dbw6Qb1ffUB9UJ2oTlIfUierD6uPqI+qj6lT1KnqNPVx9Qn1SXW6+pQ6Q31anak+oz6rPqfOUp9XZ6tz1LnqC+o89UV1vvqSukBdqC5SF6tL1JfVpeor6jL1VXW5+pq6Ql2prlJfV99Q31RXq2+pa9S31bXqO+o69V11vbpBfU/dqL6vblI/UDerW9QP1a3qNvUjdbv6sbpD3anuUnere9S96j51v/qJekD9VD2ofqYeUg+rR9TP1aPqF+ox9Uv1uPqVekL9Wj2pfqOeUr9VT6vfqWfU79Wz6g/qj+pP6jn1Z/W8ekG9qP6iXlJ/VS+rv6lX1Ksq0SiN1hiN1TiN1wRN1CRN1hRN1TRN1wzN1CzN1hzN1TzN1zJpmbUsWlYtm5Zdy6Hl1HJpSVpuLY+WV0vW8mn5tQJaQa2QVlgrohXVimnFtRJaSa2UVloro5XVymnltQpaRa2SVlmrolXVqmnVtRpaTa2WVluro9XV6mn1tQZaQ62R1li7RWuiNdWaac21FlpLrZXWWmujtdXaabdq7bUOWkftNq2T1lnronXVumndtR5aT62X1lvro92u9dX6af21O7QB2kBtkDZYG6LdqQ3VhmnDtRHaSO0ubZQ2Whuj3a2N1e7R7tXu08Zp47UJ2v3aA9qD2kRtkvaQNll7WHtEe1R7TJuiTdWmaY9rT2hPatO1p7QZ2tPaTO0Z7VntOW2W9rw2W5ujzdVe0OZpL2rztZe0BdpCbZG2WFuivawt1V7Rlmmvasu117QV2kptlfa69ob2prZae0tbo72trdXe0dZp72rrtQ3ae9pG7X1tk/aBtlnbon2obdW2aR9p27WPtR3aTm2Xtlvbo+3V9mn7tU+0A9qn2kHtM+2Qdlg7on2uHdW+0I5pX2rHta+0E9rX2kntG+2U9q12WvtOO6N9r53VftB+1H7Szmk/a+e1C9pF7Rftkvardln7TbuiXdWITum0zuiszum8LuiiLumyruiqrum6buimbum27uiu7um+nknPrGfRs+rZ9Ox6Dj2nnktP0nPrefS8erKeT8+vF9AL6oX0wnoRvaheTC+ul9BL6qX00noZvaxeTi+vV9Ar6pX0ynoVvapeTa+u19Br6rX02nodva5eT6+vN9Ab6o30xvotehO9qd5Mb6630FvqrfTWehu9rd5Ov1Vvr3fQO+q36Z30znoXvaveTe+u99B76r303nof/Xa9r95P76/foQ/QB+qD9MH6EP1Ofag+TB+uj9BH6nfpo/TR+hj9bn2sfo9+r36fPk4fr0/Q79cf0B/UJ+qT9If0yfrD+iP6o/pj+hR9qj5Nf1x/Qn9Sn64/pc/Qn9Zn6s/oz+rP6bP05/XZ+hx9rv6CPk9/UZ+vv6Qv0Bfqi/TF+hL9ZX2p/oq+TH9VX66/pq/QV+qr9Nf1N/Q39dX6W/oa/W19rf6Ovk5/V1+vb9Df0zfq7+ub9A/0zfoW/UN9q75N/0jfrn+s79B36rv03foefa++T9+vf6If0D/VD+qf6Yf0w/oR/XP9qP6Ffkz/Uj+uf6Wf0L/WT+rf6Kf0b/XT+nf6Gf17/az+g/6j/pN+Tv9ZP69f0C/qv+iX9F/1y/pv+hX9qk4MyqANxmANzuANwRANyZANxVANzdANwzANy7ANx3ANz/CNTEZmI4uR1chmZDdyGDmNXEaSkdvIY+Q1ko18Rn6jgFHQKGQUNooYRY1iRnGjhFHSKGWUNsoYZY1yRnmjglHRqGRUNqoYVY1qRnWjhlHTqGXUNuoYdY16Rn2jgdHQaGQ0Nm4xmhhNjWZGc6OF0dJoZbQ22hhtjXbGrUZ7o4PR0bjN6GR0NroYXY1uRnejh9HT6GX0NvoYtxt9jX5Gf+MOY4Ax0BhkDDaGGHcaQ41hxnBjhDHSuMsYZYw2xhh3G2ONe4x7jfuMccZ4Y4Jxv/GA8aAx0ZhkPGRMNh42HjEeNR4zphhTjWnG48YTxpPGdOMpY4bxtDHTeMZ41njOmGU8b8w25hhzjReMecaLxnzjJWOBsdBYZCw2lhgvG0uNV4xlxqvGcuM1Y4Wx0lhlvG68YbxprDbeMtYYbxtrjXeMdca7xnpjg/GesdF439hkfGBsNrYYHxpbjW3GR8Z242Njh7HT2GXsNvYYe419xn7jE+OA8alx0PjMOGQcNo4YnxtHjS+MY8aXxnHjK+OE8bVx0vjGOGV8a5w2vjPOGN8bZ40fjB+Nn4xzxs/GeeOCcdH4xbhk/GpcNn4zrhhXDWJSJm0yJmtyJm8KpmhKpmwqpmpqpm4apmlapm06pmt6pm9mMjObWcysZjYzu5nDzGnmMpPM3GYeM6+ZbOYz85sFzIJmIbOwWcQsahYzi5slzJJmKbO0WcYsa5Yzy5sVzIpmJbOyWcWsalYzq5s1zJpmLbO2Wcesa9Yz65sNzIZmI7OxeYvZxGxqNjObmy3MlmYrs7XZxmxrtjNvNdubHcyO5m1mJ7Oz2cXsanYzu5s9zJ5mL7O32ce83exr9jP7m3eYA8yB5iBzsDnEvNMcag4zh5sjzJHmXeYoc7Q5xrzbHGveY95r3meOM8ebE8z7zQfMB82J5iTzIXOy+bD5iPmo+Zg5xZxqTjMfN58wnzSnm0+ZM8ynzZnmM+az5nPmLPN5c7Y5x5xrvmDOM18055svmQvMheYic7G5xHzZXGq+Yi4zXzWXm6+ZK8yV5irzdfMN801ztfmWucZ821xrvmOuM98115sbzPfMjeb75ibzA3OzucX80NxqbjM/MrebH5s7zJ3mLnO3ucfca+4z95ufmAfMT82D5mfmIfOwecT83DxqfmEeM780j5tfmSfMr82T5jfmKfNb87T5nXnG/N48a/5g/mj+ZJ4zfzbPmxfMi+Yv5iXzV/Oy+Zt5xbxqEouyaIuxWIuzeEuwREuyZEuxVEuzdMuwTMuybMuxXMuzfCuTldnKYmW1slnZrRxWTiuXlWTltvJYea1kK5+V3ypgFbQKWYWtIlZRq5hV3CphlbRKWaWtMlZZq5xV3qpgVbQqWZWtKlZVq5pV3aph1bRqWbWtOlZdq55V32pgNbQaWY2tW6wmVlOrmdXcamG1tFpZra02VlurnXWr1d7qYHW0brM6WZ2tLlZXq5vV3eph9bR6Wb2tPtbtVl+rn9XfusMaYA20BlmDrSHWndZQa5g13BphjbTuskZZo60x1t3WWOse617rPmucNd6aYN1vPWA9aE20JlkPWZOth61HrEetx6wp1lRrmvW49YT1pDXdesqaYT1tzbSesZ61nrNmWc9bs6051lzrBWue9aI133rJWmAttBZZi60l1svWUusVa5n1qrXces1aYa20VlmvW29Yb1qrrbesNdbb1lrrHWud9a613tpgvWdttN63NlkfWJutLdaH1lZrm/WRtd362Nph7bR2WbutPdZea5+13/rEOmB9ah20PrMOWYetI9bn1lHrC+uY9aV13PrKOmF9bZ20vrFOWd9ap63vrDPW99ZZ6wfrR+sn65z1s3XeumBdtH6xLlm/Wpet36wr1lWL2JRN24zN2pzN24It2pIt24qt2pqt24Zt2pZt247t2p7t25nszHYWO6udzc5u57Bz2rnsJDu3ncfOayfb+ez8dgG7oF3ILmwXsYvaxezidgm7pF3KLm2Xscva5ezydgW7ol3JrmxXsava1ezqdg27pl3Lrm3Xseva9ez6dgO7od3IbmzfYjexm9rN7OZ2C7ul3cpubbex29rt7Fvt9nYHu6N9m93J7mx3sbva3ezudg+7p93L7m33sW+3+9r97P72HfYAe6A9yB5sD7HvtIfaw+zh9gh7pH2XPcoebY+x77bH2vfY99r32ePs8fYE+377AftBe6I9yX7Inmw/bD9iP2o/Zk+xp9rT7MftJ+wn7en2U/YM+2l7pv2M/az9nD3Lft6ebc+x59ov2PPsF+359kv2AnuhvchebC+xX7aX2q/Yy+xX7eX2a/YKe6W9yn7dfsN+015tv2Wvsd+219rv2Ovsd+319gb7PXuj/b69yf7A3mxvsT+0t9rb7I/s7fbH9g57p73L3m3vsffa++z99if2AftT+6D9mX3IPmwfsT+3j9pf2MfsL+3j9lf2Cftr+6T9jX3K/tY+bX9nn7G/t8/aP9g/2j/Z5+yf7fP2Bfui/Yt9yf7Vvmz/Zl+xr9rEoRzaYRzW4RzeERzRkRzZURzV0RzdMRzTsRzbcRzX8RzfyeRkdrI4WZ1sTnYnh5PTyeUkObmdPE5eJ9nJ5+R3CjgFnUJOYaeIU9Qp5hR3SjglnVJOaaeMU9Yp55R3KjgVnUpOZaeKU9Wp5lR3ajg1nVpObaeOU9ep59R3GjgNnUZOY+cWp4nT1GnmNHdaOC2dVk5rp43T1mnn3Oq0dzo4HZ3bnE5OZ6eL09Xp5nR3ejg9nV5Ob6ePc7vT1+nn9HfucAY4A51BzmBniHOnM9QZ5gx3RjgjnbucUc5oZ4xztzPWuce517nPGeeMdyY49zsPOA86E51JzkPOZOdh5xHnUecxZ4oz1ZnmPO484TzpTHeecmY4TzsznWecZ53nnFnO885sZ44z13nBmee86Mx3XnIWOAudRc5iZ4nzsrPUecVZ5rzqLHdec1Y4K51VzuvOG86bzmrnLWeN87az1nnHWee866x3NjjvORud951NzgfOZmeL86Gz1dnmfORsdz52djg7nV3ObmePs9fZ5+x3PnEOOJ86B53PnEPOYeeI87lz1PnCOeZ86Rx3vnJOOF87J51vnFPOt85p5zvnjPO9c9b5wfnR+ck55/zsnHcuOBedX5xLzq/OZec354pz1SEu5dIu47Iu5/Ku4Iqu5Mqu4qqu5uqu4Zqu5dqu47qu5/puJjezm8XN6mZzs7s53JxuLjfJze3mcfO6yW4+N79bwC3oFnILu0Xcom4xt7hbwi3plnJLu2Xcsm45t7xbwa3oVnIru1Xcqm41t7pbw63p1nJru3Xcum49t77bwG3oNnIbu7e4TdymbjO3udvCbem2clu7bdy2bjv3Vre928Ht6N7mdnI7u13crm43t7vbw+3p9nJ7u33c292+bj+3v3uHO8Ad6A5yB7tD3Dvdoe4wd7g7wh3p3uWOcke7Y9y73bHuPe697n3uOHe8O8G9333AfdCd6E5yH3Inuw+7j7iPuo+5U9yp7jT3cfcJ90l3uvuUO8N92p3pPuM+6z7nznKfd2e7c9y57gvuPPdFd777krvAXeguche7S9yX3aXuK+4y91V3ufuau8Jd6a5yX3ffcN90V7tvuWvct9217jvuOvddd727wX3P3ei+725yP3A3u1vcD92t7jb3I3e7+7G7w93p7nJ3u3vcve4+d7/7iXvA/dQ96H7mHnIPu0fcz92j7hfuMfdL97j7lXvC/do96X7jnnK/dU+737ln3O/ds+4P7o/uT+4592f3vHvBvej+4l5yf3Uvu7+5V9yrLvEoj/YYj/U4j/cET/QkT/YUT/U0T/cMz/Qsz/Ycz/U8z/cyeZm9LF5WL5uX3cvh5fRyeUlebi+Pl9dL9vJ5+b0CXkGvkFfYK+IV9Yp5xb0SXkmvlFfaK+OV9cp55b0KXkWvklfZq+JV9ap51b0aXk2vllfbq+PV9ep59b0GXkOvkdfYu8Vr4jX1mnnNvRZeS6+V19pr47X12nm3eu29Dl5H7zavk9fZ6+J19bp53b0eXk+vl9fb6+Pd7vX1+nn9vTu8Ad5Ab5A32Bvi3ekN9YZ5w70R3kjvLm+UN9ob493tjfXu8e717vPGeeO9Cd793gPeg95Eb5L3kDfZe9h7xHvUe8yb4k31pnmPe094T3rTvae8Gd7T3kzvGe9Z7zlvlve8N9ub4831XvDmeS96872XvAXeQm+Rt9hb4r3sLfVe8ZZ5r3rLvde8Fd5Kb5X3uveG96a32nvLW+O97a313vHWee96670N3nveRu99b5P3gbfZ2+J96G31tnkfedu9j70d3k5vl7fb2+Pt9fZ5+71PvAPep95B7zPvkHfYO+J97h31vvCOeV96x72vvBPe195J7xvvlPetd9r7zjvjfe+d9X7wfvR+8s55P3vnvQveRe8X75L3q3fZ+8274l31iE/5tM/4rM/5vC/4oi/5sq/4qq/5um/4pm/5tu/4ru/5vp/Jz+xn8bP62fzsfg4/p5/LT/Jz+3n8vH6yn8/P7xfwC/qF/MJ+Eb+oX8wv7pfwS/ql/NJ+Gb+sX84v71fwK/qV/Mp+Fb+qX82v7tfwa/q1/Np+Hb+uX8+v7zfwG/qN/Mb+LX4Tv6nfzG/ut/Bb+q381n4bv63fzr/Vb+938Dv6t/md/M5+F7+r383v7vfwe/q9/N5+H/92v6/fz+/v3+EP8Af6g/zB/hD/Tn+oP8wf7o/wR/p3+aP80f4Y/25/rH+Pf69/nz/OH+9P8O/3H/Af9Cf6k/yH/Mn+w/4j/qP+Y/4Uf6o/zX/cf8J/0p/uP+XP8J/2Z/rP+M/6z/mz/Of92f4cf67/gj/Pf9Gf77/kL/AX+ov8xf4S/2V/qf+Kv8x/1V/uv+av8Ff6q/zX/Tf8N/3V/lv+Gv9tf63/jr/Of9df72/w3/M3+u/7m/wP/M3+Fv9Df6u/zf/I3+5/7O/wd/q7/N3+Hn+vv8/f73/iH/A/9Q/6n/mH/MP+Ef9z/6j/hX/M/9I/7n/ln/C/9k/63/in/G/90/9Huz0+iRG1jZ+PbUzbPt192t2xbdu2bdu2bWcymUwm1sS2bWuSbN3Pi6169n6xVVv7O+8+deqcur5/wBXzNuZdzPuYDzEfYz7FfI75EvM15lvM95gfMT9jfsX8jkmO+RPzN+ZfTAokJZIKSY2kQdIi6ZD0SAYkI5IJyYxkQbIi2ZDsSA4kJ5ILyY3kQfIiMQiCoAiG4AiBkAiF0AiDsAiH8IiAiIiEyIiCqIiGAERHDMREIGIhNuIgLuIhPhIgIRIh+ZD8SAGkIFIIKYwUQYoixZDiSAmkJFIKKY2UQcoi5ZDySAWkIlIJqYxUQaoi1ZDqSA2kJlILqY3UQeoi9ZD6SAOkIdIIaYw0QZoizZDmSAukJdIKaY20Qdoi7ZD2SAekI9IJ6Yx0Qboi3ZDuSA+kJ9IL6Y30Qfoi/ZD+yABkIDIIGYwMQYYiw5DhyAhkJDIKGY2MQcYi45DxyARkIjIJmYxMQaYi05DpyAxkJjILmY3MQeYi85D5yAJkIbIIWYwsQZYiy5DlyApkJbIKWY2sQdYi65D1yAZkI7IJ2YxsQbYi25DtyA5kJ7IL2Y3sQfYiscg+JA7Zj8QjB5AE5CCSiBxCDiNHkKPIMeQ4cgI5iZxCTiNnkCTkLHIOOY9cQC4il5DLyBXkKnINuY7cQG4it5DbyB3kLnIPuY88QB4ij5DHyBPkKfIMeY68QF4ir5DXyBvkLfIOeY98QD4in5DPyBfkK/IN+Y78QH4iv5DfSDLyB/mL/ENSoCnRVGhqNA2aFk2HpkczoBnRTGhmNAuaFc2GZkdzoDnRXGhuNA+aF41BERRFMRRHCZREKZRGGZRFOZRHBVREJVRGFVRFNRSgOmqgJgpRC7VRB3VRD/XRAA3RCM2H5kcLoAXRQmhhtAhaFC2GFkdLoCXRUmhptAxaFi2HlkcroBXRSmhltApaFa2GVkdroDXRWmhttA5aF62H1kcboA3RRmhjtAnaFG2GNkdboC3RVmhrtA3aFm2Htkc7oB3RTmhntAvaFe2Gdkd7oD3RXmhvtA/aF+2H9kcHoAPRQehgdAg6FB2GDkdHoCPRUehodAw6Fh2HjkcnoBPRSehkdAo6FZ2GTkdnoDPRWehsdA46F52HzkcXoAvRRehidAm6FF2GLkdXoCvRVehqdA26Fl2Hrkc3oBvRTehmdAu6Fd2Gbkd3oDvRXehudA+6F41F96Fx6H40Hj2AJqAH0UT0EHoYPYIeRY+hx9ET6En0FHoaPYMmoWfRc+h59AJ6Eb2EXkavoFfRa+h19AZ6E72F3kbvoHfRe+h99AH6EH2EPkafoE/RZ+hz9AX6En2FvkbfoG/Rd+h79AP6Ef2Efka/oF/Rb+h39Af6E/2F/kaT0T/oX/QfmgJLiaXCUmNpsLRYOiw9lgHLiGXCMmNZsKxYNiw7lgPLieXCcmN5sLxYDIZgKIZhOEZgJEZhNMZgLMZhPCZgIiZhMqZgKqZhANMxAzMxiFmYjTmYi3mYjwVYiEVYPiw/VgAriBXCCmNFsKJYMaw4VgIriZXCSmNlsLJYOaw8VgGriFXCKmNVsKpYNaw6VgOridXCamN1sLpYPaw+1gBriDXCGmNNsKZYM6w51gJribXCWmNtsLZYO6w91gHriHXCOmNdsK5YN6w71gPrifXCemN9sL5YP6w/NgAbiA3CBmNDsKHYMGw4NgIbiY3CRmNjsLHYOGw8NgGbiE3CJmNTsKnYNGw6NgObic3CZmNzsLnYPGw+tgBbiC3CFmNLsKXYMmw5tgJbia3CVmNrsLXYOmw9tgHbiG3CNmNbsK3YNmw7tgPbie3CdmN7sL1YLLYPi8P2Y/HYASwBO4glYoeww9gR7Ch2DDuOncBOYqew09gZLAk7i53DzmMXsIvYJewydgW7il3DrmM3sJvYLew2dge7i93D7mMPsIfYI+wx9gR7ij3DnmMvsJfYK+w19gZ7i73D3mMfsI/YJ+wz9gX7in3DvmM/sJ/YL+w3loz9wf5i/7AUeEo8FZ4aT4OnxdPh6fEMeEY8E54Zz4JnxbPh2fEceE48F54bz4PnxWNwBEdxDMdxAidxCqdxBmdxDudxARdxCZdxBVdxDQe4jhu4iUPcwm3cwV3cw308wEM8wvPh+fECeEG8EF4YL4IXxYvhxfESeEm8FF4aL4OXxcvh5fEKeEW8El4Zr4JXxavh1fEaeE28Fl4br4PXxevh9fEGeEO8Ed4Yb4I3xZvhzfEWeEu8Fd4ab4O3xdvh7fEOeEe8E94Z74J3xbvh3fEeeE+8F94b74P3xfvh/fEB+EB8ED4YH4IPxYfhw/ER+Eh8FD4aH4OPxcfh4/EJ+ER8Ej4Zn4JPxafh0/EZ+Ex8Fj4bn4PPxefh8/EF+EJ8Eb4YX4IvxZfhy/EV+Ep8Fb4aX4Ovxdfh6/EN+EZ8E74Z34Jvxbfh2/Ed+E58F74b34PvxWPxfXgcvh+Pxw/gCfhBPBE/hB/Gj+BH8WP4cfwEfhI/hZ/Gz+BJ+Fn8HH4ev4BfxC/hl/Er+FX8Gn4dv4HfxG/ht/E7+F38Hn4ff4A/xB/hj/En+FP8Gf4cf4G/xF/hr/E3+Fv8Hf4e/4B/xD/hn/Ev+Ff8G/4d/4H/xH/hv/Fk/A/+F/+HpyBSEqmI1EQaIi2RjkhPZCAyEpmIzEQWIiuRjchO5CByErmI3EQeIi8RQyAESmAEThAESVAETTAES3AETwiESEiETCiESmgEIHTCIEwCEhZhEw7hEh7hEwEREhGRj8hPFCAKEoWIwkQRoihRjChOlCBKEqWI0kQZoixRjihPVCAqEpWIykQVoipRjahO1CBqErWI2kQdoi5Rj6hPNCAaEo2IxkQToinRjGhOtCBaEq2I1kQboi3RjmhPdCA6Ep2IzkQXoivRjehO9CB6Er2I3kQfoi/Rj+hPDCAGEoOIwcQQYigxjBhOjCBGEqOI0cQYYiwxjhhPTCAmEpOIycQUYioxjZhOzCBmErOI2cQcYi4xj5hPLCAWEouIxcQSYimxjFhOrCBWEquI1cQaYi2xjlhPbCA2EpuIzcQWYiuxjdhO7CB2EruI3cQeYi8RS+wj4oj9RDxxgEggDhKJxCHiMHGEOEocI44TJ4iTxCniNHGGSCLOEueI88QF4iJxibhMXCGuEteI68QN4iZxi7hN3CHuEveI+8QD4iHxiHhMPCGeEs+I58QL4iXxinhNvCHeEu+I98QH4iPxifhMfCG+Et+I78QP4ifxi/hNJBN/iL/EPyIFmZJMRaYm05BpyXRkejIDmZHMRGYms5BZyWxkdjIHmZPMReYm85B5yRgSIVESI3GSIEmSImmSIVmSI3lSIEVSImVSIVVSIwGpkwZpkpC0SJt0SJf0SJ8MyJCMyHxkfrIAWZAsRBYmi5BFyWJkcbIEWZIsRZYmy5BlyXJkebICWZGsRFYmq5BVyWpkdbIGWZOsRdYm65B1yXpkfbIB2ZBsRDYmm5BNyWZkc7IF2ZJsRbYm25BtyXZke7ID2ZHsRHYmu5BdyW5kd7IH2ZPsRfYm+5B9yX5kf3IAOZAcRA4mh5BDyWHkcHIEOZIcRY4mx5BjyXHkeHICOZGcRE4mp5BTyWnkdHIGOZOcRc4m55BzyXnkfHIBuZBcRC4ml5BLyWXkcnIFuZJcRa4m15BryXXkenIDuZHcRG4mt5BbyW3kdnIHuZPcRe4m95B7yVhyHxlH7ifjyQNkAnmQTCQPkYfJI+RR8hh5nDxBniRPkafJM2QSeZY8R54nL5AXyUvkZfIKeZW8Rl4nb5A3yVvkbfIOeZe8R94nH5APyUfkY/IJ+ZR8Rj4nX5AvyVfka/IN+ZZ8R74nP5AfyU/kZ/IL+ZX8Rn4nf5A/yV/kbzKZ/EP+Jf+RKaiUVCoqNZWGSkulo9JTGaiMVCYqM5WFykplo7JTOaicVC4qN5WHykvFUAiFUhiFUwRFUhRFUwzFUhzFUwIlUhIlUwqlUhoFKJ0yKJOClEXZlEO5lEf5VECFVETlo/JTBaiCVCGqMFWEKkoVo4pTJaiSVCmqNFWGKkuVo8pTFaiKVCWqMlWFqkpVo6pTNaiaVC2qNlWHqkvVo+pTDaiGVCOqMdWEako1o5pTLaiWVCuqNdWGaku1o9pTHaiOVCeqM9WF6kp1o7pTPaieVC+qN9WH6kv1owavHUANpAZRLY0h1FBqGDWcGkGNpEZRo6kx1FhqHDWemkBNpCZRk6kp1FRqGjWdmkHNpGZRs6k51FxqHjWfWkAtpBZRi6kl1FJqGbWcWkGtpFZRq6k11FpqHbWe2kBtpDZRm6kt1FZqG7Wd2kHtpHZRu6k91F4qltpHxVH7qXjqAJVAHaQSqUPUYeoIdZQ6Rh2nTlAnqVPUaeoMlUSdpc5R56kL1EXqEnWZukJdpa5R16kb1E3qFnWbukPdpe5R96kH1EPqEfWYekI9pZ5Rz6kX1EvqFfWaekO9pd5R76kP1EfqE/WZ+kJ9pb5R36kf1E/qF/WbSqb+UH+pf1QKOgWdik5Fp6HT0OnodHQGOgOdic5EZ6Gz0NnobHQOOgedi85F56Hz0DF0DI3SKI3TOE3SJP2fw9IszdM8LdIiLdMyrdIqDWhAG7RBQxrSNm3TLu3SPu3TIR3S+eh8dAG6AF2ILkQXoYvQxehidAm6BF2KLkWXocvQ5ehydAW6Al2JrkRXoavQ1ehqdA26Bl2LrkXXoevQ9eh6dAO6Ad2IbkQ3oZvQzehmdAu6Bd2KbkW3odvQ7eh2dAe6A92J7kR3obvQ3ehudA+6B92L7kX3ofvQ/eh+9AB6AD2IHkQPoYfQw+hh9Ah6BD2KHkWPocfQ4+hx9AR6Aj2JnkRPoafQ0+hp9Ax6Bj2LnkXPoefS8+j59AJ6Ib2IXkwvoZfSy+hl9Ap6Bb2KXkWvodfQ6+h19AZ6A72J3kRvobfQ2+ht9A56B72L3kXvoffQsXQsHUfH0fF0PJ1AJ9CJdCJ9mD5MH6WP0sfp4/RJ+iR9mj5NJ9FJ9Dn6HH2BvkBfoi/RV+gr9DX6Gn2DvkHfom/Rd+g79D36Hv2AfkA/oh/RT+gn9DP6Gf2CfkG/ol/Rb+g39Dv6Hf2B/kB/oj/RX+gv9Df6G/2D/kH/on/RyXQy/Zf+S2dgMjKZmMxMFiYrk43Jzvw/jTIYgzMEQzIUE8Mg/8s0wzAqozGA0RmDMRnIWP/lfEx+pgBTkCnEFGaKMEX/y+WY8kwFpiJTianMlGHK/i9XYaoy1Zj6TA2mIVOLaczUYZoy9Zj6TAOmIdOIacw0YZoy7Zj2TAemI9OJ6cx0Ybr+l+OY/cxJ5hRzmjnD3GJuMz+Yn8wr5jXzi/nNDGGGMuOY8cwEZiIziZnMTGGm/pfnMfOZBcxCZhGzmFnCLP0vr2PWMxuYjcwmZjOzhdn6X45l9jE7mHhmF7Ob2cPs/R//Z6Z45gCTwBxkEplDzGEmiTnKHGOOMyf+71mTmLPMOeY8c4O5yVxiLjNXmKvMNeb6//g/HXeYu8w95j7zgnnJPGIeM0+YN8wz5vn/+D99b5i3zDvmPfOB+ch8YpKZL8xX5hvz/X/6/9OezPxh/jL/mBRsSjYVm5pNw6Zl07Hp2QxsRjYTm5nNwmZls7HZ2RxsTjYXm5vNw+ZlY1iERVmMxVmCJVmKpVmGZVmO5VmBFVmJlVmFVVmNBazOGqzJQtZibdZhXdZjfTZgQzZi87H52QJsQbYQW5gtwhZli7HF2RJsSbYUW5otw5Zly7Hl2QpsRbYSW5mtwlZlq7HV2RpsTbYWW5utw9Zl67H12QZsQ7YR25htwjZlm7HN2RZsS7YV25ptw7Zl27Ht2Q5sR7YT25ntwnZlu7Hd2R5sT7YX25vtw/Zl+7H92QHsQHYQO5gdwg5lh7HD2RHsSHYUO5odw45lx7Hj2QnsRHYSO5mdwk5lp7HT2RnsTHYWO5udw85l57Hz2QXsQnYRu5hdwi5ll7HL2RXsSnYVu5pdw65l17Hr2Q3sRnYTu5ndwm5lt7Hb2R3sTnYXu5vdw+5lY9l9bBy7n41nD7AJ7EE2kT3EHmaPsEfZY+xx9gR7kj3FnmbPsEnsWfYce569wF5kL7GX2SvsVfYae529wd5kb7G32TvsXfYee599wD5kH7GP2SfsU/YZ+5x9wb5kX7Gv2TfsW/Yd+579wH5kP7Gf2S/sV/Yb+539wf5kf7G/2WT2D/uX/cem4FJyqbjUXBouLZeOS89l4DJymbjMXBYuK5eNy87l4HJyubjcXB4uLxfDIRzKYRzOERzJURzNMRzLcRzPCZzISZzMKZzKaRzgdM7gTA5yFmdzDudyHudzARdyEZePy88V4ApyhbjCXBGuKFeMK86V4EpypbjSXBmuLFeOK89V4CpylbjKnMtV5apx1bkaXE2uFlebq8PV5epx9bkGXEOuEdeYa8I15ZpxzbkWXEuuFdeaa8O15dpx7bkOXEeuE9eZ68J1/X+9H8YN50ZwI7mR3GhuDDeWG8eN5yZwE7lJ3GRuCjeVm8ZN52ZwM7lZ3GxuDjeXm8fN5xZwC7lF3GJuCbeUW8Yt51ZwK7lV3GpuDbeWW8et5zZwG7lN3GZuC7eV28Zt53ZwO7ld3G5uD7eXi+X2cXHcfi6eO8AlcAe5RO4Qd5g7wh3ljnHHuRPcSe4Ud5o7wyVxZ7lz3HnuAneRu8Rd5q5wV7lr3HXuBneTu8Xd5u5wd7l73H3uAfeQe8Q95p5wT7ln3HPuBfeSe8W95t5wb7l33HvuA/eR+8R95r5wX7lv3HfuB/eT+8X95pK5P9xf7h+Xgk/Jp+JT82n4tHw6Pj2fgc/IZ+Iz81n4rHw2Pjufg8/J5+Jz83n4vHwMj/Aoj/E4T/AkT/E0z/Asz/E8L/AiL/Eyr/Aqr/GA13mDN3nIW7zNO7zLe7zPB3zIR3w+Pj9fgC/IF+IL80X4onwxvjhfgi/Jl+JL82X4snw5vjxfga/IV+Ir81X4qnw1vjpfg6/J1+Jr83X4unw9vj7fgG/IN+Ib8034pnwzvjnfgm/Jt+Jb8234tnw7vj3fge/Id+I78134rnw3vjvfg+/J9+J78334vnw/vj8/gB/ID+IH80P4ofwwfjg/gh/Jj+JH82P4sfw4fjw/gZ/IT+In81P4qfw0fjo/g5/Jz+Jn83P4ufw8fj6/gF/IL+IX80v4pfwyfjm/gl/Jr+JX82v4tfw6fj2/gd/Ib+I381v4rfw2fju/g9/J7+J383v4vXwsv4+P4/fz8fwBPoE/yCfyh/jD/BH+KH+MP86f4E/yp/jT/Bk+iT/Ln+PP8xf4i/wl/jJ/hb/KX+Ov8zf4m/wt/jZ/h7/L3+Pv8w/4h/wj/jH/hH/KP+Of8y/4l/wr/jX/hn/Lv+Pf8x/4j/wn/jP/hf/Kf+O/8z/4n/wv/jefzP/h//L/+BRCSiGVkFpII6QV0gnphQxCRiGTkFnIImQVsgnZhRxCTiGXkFvII+QVYgREQAVMwAVCIAVKoAVGYAVO4AVBEAVJkAVFUAVNAIIuGIIpQMESbMERXMETfCEQQiES8gn5hQJCQaGQUFgoIhQVignFhRJCSaGUUFooI5QVygnlhQpCRaGSUFmoIlQVqgnVhRpCTaGWUFuoI9QV6gn1hQZCQ6GR0FhoIjQVmgnNhRZCS6GV0FpoI7QV2gnthQ5CR6GT0FnoInQVugndhR5CT6GX0FvoI/QV+gn9hQHCQGGQMFgYIgwVhgnDhRHCSGGUMFoYI4wVxgnjhQnCRGGSMFmYIkwVpgnThRnCTGGWMFuYI8wV5gnzhQXCQmGRsFhYIiwVlgnLhRXCSmGVsFpYI6wV1gnrhQ3CRmGTsFnYImwVtgnbhR3CTmGXsFvYI+wVYoV9QpywX4gXDggJwkEhUTgkHBaOCEeFY8Jx4YRwUjglnBbOCEnCWeGccF64IFwULgmXhSvCVeGacF24IdwUbgm3hTvCXeGecF94IDwUHgmPhSfCU+GZ8Fx4IbwUXgmvhTfCW+Gd8F74IHwUPgmfhS/CV+Gb8F34IfwUfgm/hWThj/BX+CekEFOKqcTUYhoxrZhOTC9mEDOKmcTMYhYxq5hNzC7mEHOKucTcYh4xrxgjIiIqYiIuEiIpUiItMiIrciIvCqIoSqIsKqIqaiIQddEQTRGKlmiLjuiKnuiLgRiKkZhPzC8WEAuKhcTCYhGxqFhMLC6WEEuKpcTSYhmxrFhOLC9WECuKlcTKYhWxqlhNrC7WEGuKtcTaYh2xrlhPrC82EBuKjcTGYhOxqdhMbC62EFuKrcTWYhuxrdhObC92EDuKncTOYhexq9hN7C72EHuKvcTeYh+xr9hP7C8OEAeKg8TB4hBxqDhMHC6OEEeKo8TR4hhxrDhOHC9OECeKk8TJ4hRxqjhNnC7OEGeKs8TZ4hxxrjhPnC8uEBeKi8TF4hJxqbhMXC6uEFeKq8TV4hpxrbhOXC9uEDeKm8TN4hZxq7hN3C7uEHeKu8Td4h5xrxgr7hPjxP1ivHhATBAPioniIfGweEQ8Kh4Tj4snxJPiKfG0eEZMEs+K58Tz/5/evBJfi2/Et+I78b34QfwofhI/i1/Er+I38bv4Q/wp/hJ/i8niH/Gv+E9MIaWUUkmppTRSWimdlF7KIGWUMkmZpSxSVimblF3KIeWUckm5pTxSXilGQiRUwiRcIiRSoiRaYiRW4iReEiRRkiRZUiRV0iQg6ZIhmRKULMmWHMmVPMmXAimUIimflF8qIBWUCkmFpSJSUamYVFwqIZWUSkmlpTJSWamcVF6qIFWUKkmVpSpSVamaVF2qIdWUakm1pTpSXameVF9qIDWUGkmNpSZSU6mZ1FxqIbWUWkmtpTZSW6md1F7qIHWUOkmdpS5SV6mb1F3qIfWUekm9pT5SX6mf1F8aIA2UBkmDpSHSUGmYNFwaIY2URkmjpTHSWGmcNF6aIE2UJkmTpSnSVGmaNF2aIc2UZkmzpTnSXGmeNF9aIC2UFkmLpSXSUmmZtFxaIa2UVkmrpTXSWmmdtF7aIG2UNkmbpS3SVmmbtF3aIe2Udkm7pT3SXilW2ifFSfuleOmAlCAdlBKlQ9Jh6Yh0VDomHZdOSCelU9Jp6YyUJJ2VzknnpQvSRemSdFm6Il2VrknXpRvSTemWdFu6I92V7kn3pQfSQ+mR9Fh6Ij2VnknPpRfSS+mV9Fp6I72V3knvpQ/SR+mT9Fn6In2VvknfpR/ST+mX9FtKlv5If6V/Ugo5pZxKTi2nkdPK6eT0cgY5o5xJzixnkbPK2eTscg45p5xLzi3nkfPKMTIiozIm4zIhkzIl0zIjszIn87Igi7Iky7Iiq7ImA1mXDdmUoWzJtuzIruzJvhzIoRzJ+eT8cgG5oFxILiwXkYvKxeTicgm5pFxKLi2XkcvK5eTycgW5olxJrixXkavK1eTqcg25plxLri3XkevK9eT6cgO5odxIbiw3kZvKzeTmcgu5pdxKbi23kdvK7eT2cge5o9xJ7ix3kbvK3eTucg+5p9xL7i33kfvK/eT+8gB5oDxIHiwPkYfKw+Th8gh5pDxKHi2PkcfK4+Tx8gR5ojxJnixPkafK0+Tp8gx5pjxLni3PkefK8+T58gJ5obxIXiwvkZfKy+Tl8gp5pbxKXi2vkdfK6+T18gZ5o7xJ3ixvkbfK2+Tt8g55p7xL3i3vkffKsfI+OU7eL8fLB+QE+aCcKB+SD8tH5KPyMfm4fEI+KZ+ST8tn5CT5rHxOPi9fkC/Kl+TL8hX5qnxNvi7fkG/Kt+Tb8h35rnxPvi8/kB/Kj+TH8hP5qfxMfi6/kF/Kr+TX8hv5rfxOfi9/kD/Kn+TP8hf5q/xN/i7/kH/Kv+TfcrL8R/4r/5NTKCmVVEpqJY2SVkmnpFcyKBmVTEpmJYuSVcmmZFdyKDmVXEpuJY+SV4lREAVVMAVXCIVUKIVWGIVVOIVXBEVUJEVWFEVVNAUoumIopgIVS7EVR3EVT/GVQAmVSMmn5FcKKAWVQkphpYhSVCmmFFdKKCWVUkpppYxSVimnlFcqKBWVSkplpYpSVammVFdqKDWVWkptpY5SV6mn1FcaKA2VRkpjpYnSVGmmNFdaKC2VVkprpY3SVmmntFc6KB2VTkpnpYvSVemmdFd6KD2VXkpvpY/SV+mn9FcGKAOVQcpgZYgyVBmmDFdGKCOVUcpoZYwyVhmnjFcmKBOVScpkZYoyVZmmTFdmKDOVWcpsZY4yV5mnzFcWKAuVRcpiZYmyVFmmLFdWKCuVVcpqZY2yVlmnrFc2KBuVTcpmZYuyVdmmbFd2KDuVXcpuZY+yV4lV9ilxyn4lXjmgJCgHlUTlkHJYOaIcVY4px5UTyknllHJaOaMkKWeVc8p55YJyUbmkXFauKFeVa8p15YZyU7ml3FbuKHeVe8p95YHyUHmkPFaeKE+VZ8pz5YXyUnmlvFbeKG+Vd8p75YPyUfmkfFa+KF+Vb8p35YfyU/ml/FaSlT/KX+WfkkJNqaZSU6tp1LRqOjW9mkHNqGZSM6tZ1KxqNjW7mkPNqeZSc6t51LxqjIqoqIqpuEqopEqptMqorMqpvCqooiqpsqqoqqqpQNVVQzVVqFqqrTqqq3qqrwZqqEZqPjW/WkAtqBZSC6tF1KJqMbW4WkItqZZSS6tl1LJqObW8WkGtqFZSK6tV1KpqNbW6WkOtqdZSa6t11LpqPbW+2kBtqDZSG6tN1KZqM7W52kJtqbZSW6tt1LZqO7W92kHtqHZSO6td1K5qN7W72kPtqfZSe6t91L5qP7W/OkAdqA5SB6tD1KHqMHW4OkIdqY5SR6tj1LHqOHW8OkGdqE5SJ6tT1KnqNHW6OkOdqc5SZ6tz1LnqPHW+ukBdqC5SF6tL1KXqMnW5ukJdqa5SV6tr1LXqOnW9ukHdqG5SN6tb1K3qNnW7ukPdqe5Sd6t71L1qrLpPjVP3q/HqATVBPagmqofUw+oR9ah6TD2unlBPqqfU0+oZNUk9q55Tz6sX1IvqJfWyekW9ql5Tr6s31JvqLfW2eke9q95T76sP1IfqI/Wx+kR9qj5Tn6sv1JfqK/W1+kZ9q75T36sf1I/qJ/Wz+kX9qn5Tv6s/1J/qL/W3mqz+Uf+q/9QUWkotlZZaS6Ol1dJp6bUMWkYtk5ZZy6Jl1bJp2bUcWk4tl5Zby6Pl1WI0REM1TMM1QiM1SqM1RmM1TuM1QRM1SZM1RVM1TQOarhmaqUHN0mzN0VzN03wt0EIt0vJp+bUCWkGtkFZYK6IV1YppxbUSWkmtlFZaK6OV1cpp5bUKWkWtklZZq6JV1app1bUaWk2tllZbq6PV1epp9bUGWkOtkdZYa6I11ZppzbUWWkutldZaa6O11dpp7bUOWketk9ZZ66J11bpp3bUeWk+tl9Zb66P11fpp/bUB2kBtkDZYG6IN1YZpw7UR2khtlDZaG6ON1cZp47UJ2kRtkjZZm6JN1aZp07UZ2kxtljZbm6PN1eZp87UF2kJtkbZYW6It1ZZpy7UV2kptlbZaW6Ot1dZp67UN2kZtk7ZZ26Jt1bZp27Ud2k5tl7Zb26Pt1WK1fVqctl+L1w5oCdpBLVE7pB3WjmhHtWPace2EdlI7pZ3WzmhJ2lntnHZeu6Bd1C5pl7Ur2lXtmnZdu6Hd1G5pt7U72l3tnnZfe6A91B5pj7Un2lPtmfZce6G91F5pr7U32lvtnfZe+6B91D5pn7Uv2lftm/Zd+6H91H5pv7Vk7Y/2V/unpQApQSqQGqQBaUE6kB5kABlBJpAZZAFZQTaQHeQAOUEukBvkAXlBDEAACjCAAwKQgAI0YAALOMADAYhAAjJQgAo0AIAODGACCCxgAwe4wAM+CEAIIpAP5AcFQEFQCBQGRUBRUAwUByVASVAKlAZlQFlQDpQHFUBFUAlUBlVAVVANVAc1QE1QC9QGdUBdUA/UBw1AQ9AINAZNQFPQDDQHLUBL0Aq0Bm1AW9AOtAcdQEfQCXQGXUBX0A10Bz1AT9AL9AZ9QF/QD/QHA8BAMAgMBkPAUDAMDAcjwEgwCowGY8BYMA6MBxPARDAJTAZTwFQwDUwHM8BMMAvMBnPAXDAPzAcLwEKwCCwGS8BSsAwsByvASrAKrAZrwFqwDqwHG8BGsAlsBlvAVrANbAc7wE6wC+wGe8BeEAv2gTiwH8SDAyABHASJ4BA4DI6Ao+AYOA5OgJPgFDgNzoAkcBacA+fBBXARXAKXwRVwFVwD18ENcBPcArfBHXAX3AP3wQPwEDwCj8ET8BQ8A8/BC/ASvAKvwRvwFrwD78EH8BF8Ap/BF/AVfAPfwQ/wE/wCv0Ey+AP+gn8ghZ5ST6Wn1tPoafV0eno9g55Rz6Rn1rPoWfVsenY9h55Tz6Xn1vPoefUYHdFRHdNxndBJndJpndFZndN5XdBFXdJlXdFVXdOBruuGbupQt3Rbd3RX93RfD/RQj/R8en69gF5QL6QX1ovoRfVienG9hF5SL6WX1svoZfVyenm9gl5Rr6RX1qvoVfVqenW9hl5Tr6XX1uvodfV6en29gd5Qb6Q31pvoTfVmenO9hd5Sb6W31tvobfV2enu9g95R76R31rvoXfVuene9h95T76X31vvoffV+en99gD5QH6QP1ofoQ/Vh+nB9hD5SH6WP1sfoY/Vx+nh9gj5Rn6RP1qfoU/Vp+nR9hj5Tn6XP1ufoc/V5+nx9gb5QX6Qv1pfoS/Vl+nJ9hb5SX6Wv1tfoa/V1+np9g75R36Rv1rfoW/Vt+nZ9h75T36Xv1vfoe/VYfZ8ep+/X4/UDeoJ+UE/UD+mH9SP6Uf2Yflw/oZ/UT+mn9TN6kn5WP6ef1y/oF/VL+mX9in5Vv6Zf12/oN/Vb+m39jn5Xv6ff1x/oD/VH+mP9if5Uf6Y/11/oL/VX+mv9jf5Wf6e/1z/oH/VP+mf9i/5V/6Z/13/oP/Vf+m89Wf+j/9X/6SmMlEYqI7WRxkhrpDPSGxmMjEYmI7ORxchqZDOyGzmMnEYuI7eRx8hrxBiIgRqYgRuEQRqUQRuMwRqcwRuCIRqSIRuKoRqaAQzdMAzTgIZl/J/9v6nRzGhmtDBaGq2MAqmKpGprtDXaG+2NjkZHo7PRxehqdDO6Gz2MHkYvo7fR2+hr9DP6GwOMgcYgY7AxxBhqDDOGGSOMEcYoY5QxxhhjjDPGGROMCcYkY5IxxZhiTDOmGTOMGcYsY5Yxx5hjzDPmGQuMBcYiY5GxxFhiLDOWGSuMFcYqY5WxxlhjrDPWGRuMDcYmY5OxxdhibDO2GTuMHcYuY5exx9hjxBqxRpwRZ8Qb8UaCkWAkGonGYeOwcdQ4ahw3jhsnjZPGaeO0kWQkGeeMc8YF44JxybhkXDGuGNeMa8YN44Zxy7hl3DHuGPeMe8YD44HxyHhkPDGeGs+M58YL46XxynhtvDHeGu+M98YH46PxyfhsfDG+Gt+M78YP46fxy/htJBt/jL/GP+P/z/1F2VRM1dRMYOqmYZomNC3TNh3TNT3TNwMzNCMzn5nfLGAWNAuZhc0iZlGzmFncLGGWNEuZpc0yZlmznFnerGBWNCuZlc0qZlWzmlndrGHWNGuZtc06Zl2znlnfbGA2NBuZjc0mZlOzmdncbGG2NFuZrc02Zluzndne7GB2NDuZnc0uZlezm9nd7GH2NHuZvc0+Zl+zn9nfHGAONAeZg80h5lBzmDncHGGONEeZo80x5lhznDnenGBONCeZk80p5lRzmjndnGHONGeZs8055lxznjnfXGAuNBeZi80l5lJzmbncXGGuNFeZq8015lpznbne3GBuNDeZm80t5lZzm7nd3GHuNHeZu8095l4z1txnxpn7zXjzgJlgHjQTzUPmYfOIedQ8Zh43T5gnzVPmafOMmWSeNc+Z580L5kXzknnZvGJeNa+Z180b5k3zlnnbvGPeNe+Z980H5kPzkfnYfGI+NZ+Zz80X5kvzlfnafGO+Nd+Z780P5kfzk/nZ/GJ+Nb+Z380f5k/zl/nbTDb/mH/Nf2YKmBKmgqlhGpgWpoPpYQaYEWaCmWEWmBVmg9lhDpgT5oK5YR6YF8ZABKIQgzgkIAkpSEMGspCDPBSgCCUoQwWqUIMA6tCAJoTQgjZ0oAs96MMAhjCC+WB+WAAWhIVgYVgEFoXFYHFYApaEpWBpWAaWheVgeVgBVoSVYGVYBVaF1WB1WAPWhLVgbVgH1oX1YH3YADaEjWBj2AQ2hc1gc9gCtoStYGvYBraF7WB72AF2hJ1gZ9gFdoXdYHfYA/aEvWBv2Af2hf1gfzgADoSD4GA4BA6Fw+BwOAKOhKPgaDgGjoXj4Hg4AU6Ek+BkOAVOhdPgdDgDzoSz4Gw4B86F8+B8uAAuhIvgYrgELoXL4HK4Aq6Eq+BquAauhevgergBboSb4Ga4BW6F2+B2uAPuhLvgbrgH7oWxcB+Mg/thPDwAE+BBmAgPwcPwCDwKj8Hj8AQ8CU/B0/AMTIJn4Tl4Hl6AF+EleBlegVfhNXgd3oA34S14G96Bd+E9eB8+gA/hI/gYPoFP4TP4HL6AL+Er+Bq+gW/hO/gefoAf4Sf4GX6BX+E3+B3+gD/hL/gbJsM/8C/8B1NYKa1UVmorjZXWSmeltzJYGa1MVmYri5XVymZlt3JYOa1cVm4rj5XXirEQC7UwC7cIi7Qoi7YYi7U4i7cES7QkS7YUS7U0C1i6ZVimBS3Lsi3Hci3P8q3ACq3IymfltwpYBa1CVmGriFXUKmYVt0pYJa1SVmmrjFXWKmeVtypYFa1KVmWrilXVqmZVt2pYNa1aVm2rjlXXqmfVtxpYDa1GVmOridXUamY1t1pYLa1WVmurjdXWame1tzpYHa1OVmeri9XV6mZ1t3pYPa1eVm+rj9XX6mf1twZYA61B1mBriDXUGmYNt0ZYI61R1mhrjDXWGmeNtyZYE61J1mRrijXVmmZNt2ZYM61Z1mxrjjXXmmfNtxZYC61F1mJribXUWmYtt1ZYK61V1mprjbXWWmettzZYG61N1mZri7XV2mZtt3ZYO61d1m5rj7XXirX2WXHWfiveOmAlWAetROuQddg6Yh21jlnHrRPWSeuUddo6YyVZZ61z1nnrgnXRumRdtq5YV61r1nXrhnXTumXdtu5Yd6171n3rgfXQemQ9tp5YT61n1nPrhfXSemW9tt5Yb6131nvrg/XR+mR9tr5YX61v1nfrh/XT+mX9tpKtP9Zf65+Vwk5pp7JT22nstHY6O72dwc5oZ7Iz21nsrHY2O7udw85p57Jz23nsvHaMjdiojdm4TdikTdm0zdiszdm8LdiiLdmyrdiqrdnA1m3DNm1oW7ZtO7Zre7ZvB3ZoR3Y+O79dwC5oF7IL20XsonYxu7hdwi5pl7JL22XssnY5u7xdwa5oV7Ir21XsqnY1u7pdw65p17Jr23XsunY9u77dwG5oN7Ib203spnYzu7ndwm5pt7Jb223stnY7u73dwe5od7I7213srnY3u7vdw+5p97J7233svnY/u789wB5oD7IH20PsofYwe7g9wh5pj7JH22PssfY4e7w9wZ5oT7In21PsqfY0e7o9w55pz7Jn23PsufY8e769wF5oL7IX20vspfYye7m9wl5pr7JX22vstfY6e729wd5ob7I321vsrfY2e7u9w95p77J323vsvXasvc+Os/fb8fYBO8E+aCfah+zD9hH7qH3MPm6fsE/ap+zT9hk7yT5rn7PP2xfsi/Yl+7J9xb5qX7Ov2zfsm/Yt+7Z9x75r37Pv2w/sh/Yj+7H9xH5qP7Of2y/sl/Yr+7X9xn5rv7Pf2x/sj/Yn+7P9xf5qf7O/2z/sn/Yv+7edbP+x/9r/7BROSieVk9pJ46R10jnpnQxORieTk9nJ4mR1sjnZnRxOTieXk9vJ4+R1YhzEQR3MwR3CIR3KoR3GYR3O4R3BER3JkR3FUR3NAY7uGI7pQMdybMdxXMdzfCdwQidy8jn5nQJOQaeQU9gp4hR1ijnFnRJOSaeUU9op45R1yjnlnQpORaeSU9mp4lR1qjnVnRpOTaeWU9up49R16jn1nQZOQ6eR09hp4jR1mjnNnRZOS6eV09pp47R12jntnQ5OR6eT09np4nR1ujndnR5OT6eX09vp4/R1+jn9nQHOQGeQM9gZ4gx1hjnDnRHOSGeUM9oZ44x1xjnjnQnORGeSM9mZ4kx1pjnTnRnOTGeWM9uZ48x15jnznQXOQmeRs9hZ4ix1ljnLnRXOSmeVs9pZ46x11jnrnQ3ORmeTs9nZ4mx1tjnbnR3OTmeXs9vZ4+x1Yp19Tpyz34l3DjgJzkEn0TnkHHaOOEedY85x54Rz0jnlnHbOOEnOWeecc9654Fx0LjmXnSvOVeeac9254dx0bjm3nTvOXeeec9954Dx0HjmPnSfOU+eZ89x54bx0XjmvnTfOW+ed89754Hx0PjmfnS/OV+eb89354fx0fjm/nWTnj/PX+eekcFO6qdzUbho3rZvOTe9mcDO6mdzMbhY3q5vNze7mcHO6udzcbh43rxvjIi7qYi7uEi7pUi7tMi7rci7vCq7oSq7sKq7qai5wdddwTRe6lmu7juu6nuu7gRu6kZvPze8WcAu6hdzCbhG3qFvMLe6WcEu6pdzSbhm3rFvOLe9WcCu6ldzKbhW3qlvNre7WcGu6tdzabh23rlvPre82cBu6jdzGbhO3qdvMbe62cFu6rdzWbhu3rdvObe92cDu6ndzObhe3q9vN7e72cHu6vdzebh+3r9vP7e8OcAe6g9zB7hB3qDvMHe6OcEe6o9zR7hh3rDvOHe9OcCe6k9zJ7hR3qjvNne7OcGe6s9zZ7hx3rjvPne8ucBe6i9zF7hJ3qbvMXe6ucFe6q9zV7hp3rbvOXe9ucDe6m9zN7hZ3q7vN3e7ucHe6u9zd7h53rxvr7nPj3P1uvHvATXAPuonuIfewe8Q96h5zj7sn3JPuKfe0e8ZNcs+659zz7gX3onvJvexeca+619zr7g33pnvLve3ece+699z77gP3ofvIfew+cZ+6z9zn7gv3pfvKfe2+cd+679z37gf3o/vJ/ex+cb+639zv7g/3p/vL/e0mu3/cv+4/N4WX0kvlpfbSeGm9dF56L4OX0cvkZfayeFm9bF52L4eX08vl5fbyeHm9GA/xUA/zcI/wSI/yaI/xWI/zeE/wRE/yZE/xVE/zgKd7hmd60LM823M81/M83wu80Iu8fF5+r4BX0CvkFfaKeEW9Yl5xr4RX0ivllfbKeGW9cl55r4JX0avkVfaqeFW9al51r4ZX06vl1fbqeHW9el59r4HX0GvkNfaaeE29Zl5zr4XX0mvltfbaeG29dl57r4PX0evkdfa6eF29bl53r4fX0+vl9fb6eH29fl5/b4A30BvkDfaGeEO9Yd5wb4Q30hvljfbGeGO9cd54b4I30ZvkTfameFO9ad50b4Y305vlzfbmeHO9ed58b4G30FvkLfaWeEu9Zd5yb4W30lvlrfbWeGu9dd56b4O30dvkbfa2eFu9bd52b4e309vl7fb2eHu9WG+fF+ft9+K9A16Cd9BL9A55h70j3lHvmHfcO+Gd9E55p70zXpJ31jvnnfcueBe9S95l74p31bvmXfdueDe9W95t745317vn3fceeA+9R95j74n31HvmPfdeeC+9V95r74331nvnvfc+eB+9T95n74v31fvmffd+eD+9X95vL9n74/31/nkp/JR+Kj+1n8ZP66fz0/sZ/Ix+Jj+zn8XP6mfzs/s5/Jx+Lj+3n8fP68f4iI/6mI/7hE/6lE/7jM/6nM/7gi/6ki/7iq/6mg983Td804e+5du+47u+5/t+4Id+5Ofz8/sF/IJ+Ib+wX8Qv6hfzi/sl/JJ+Kb+0X8Yv65fzy/sV/Ip+Jb+yX8Wv6lfzq/s1/Jp+Lb+2X8ev69fz6/sN/IZ+I7+x38Rv6jfzm/st/JZ+K7+138Zv67fz2/sd/I5+J7+z38Xv6nfzu/s9/J5+L7+338fv6/fz+/sD/IH+IH+wP8Qf6g/zh/sj/JH+KH+0P8Yf64/zx/sT/In+JH+yP8Wf6k/zp/sz/Jn+LH+2P8ef68/z5/sL/IX+In+xv8Rf6i/zl/sr/JX+Kn+1v8Zf66/z1/sb/I3+Jn+zv8Xf6m/zt/s7/J3+Ln+3v8ff68f6+/w4f78f7x/wE/yDfqJ/yD/sH/GP+sf84/4J/6R/yj/tn/GT/LP+Of+8f8G/6F/yL/tX/Kv+Nf+6f8O/6d/yb/t3/Lv+Pf++/8B/6D/yH/tP/Kf+M/+5/8J/6b/yX/tv/Lf+O/+9/8H/6H/yP/tf/K/+N/+7/8P/6f/yf/vJ/h//r//PTxGkDFIFqYM0QdogXZA+yBBkDDIFmYMsQdYgW5A9yBHkDHIFuYM8Qd4gJkACNMACPCACMqACOmACNuACPhACMZACOVACNdACEOiBEZgBDKzADpzADbzAD4IgDKIgX5A/KBAUDAoFhYMiQdGgWFA8KBGUDEoFpYMyQdmgXFA+qBBUDCoFlYMqQdWgWlA9qBHUDGoFtYM6Qd2gXlA/aBA0DBoFjYMmQdOgWdA8aBG0DFoFrYM2QdugXdA+6BB0DDoFnYMuQdegW9A96BH0DHoFvYM+Qd+gX9A/GBAMDAYFg4MhwdBgWDA8GBGMDEYFo4MxwdhgXDA+mBBMDCYFk4MpwdRgWjA9mBHMDGYFs4M5wdxgXjA/WBAsDBYFi4MlwdJgWbA8WBGsDFYFq4M1wdpgXbA+2BBsDDYFm4MtwdZgW7A92BHsDHYFu4M9wd4gNtgXxAX7g/jgQJAQHAwSg0PB4eBIcDQ4FhwPTgQng1PB6eBMkBScDc4F54MLwcXgUnA5uBJcDa4F14Mbwc3gVnA7uBPcDe4F94MHwcPgUfA4eBI8DZ4Fz4MXwcvgVfA6eBO8Dd4F74MPwcfgU/A5+BJ8Db4F34Mfwc/gV/A7SA7+BH+Df0GKMGWYKkwdpgnThunC9GGGMGOYKcwcZgmzhtnC7GGOMGeYK8wd5gnzhjEhEqIhFuIhEZIhFdIhE7IhF/KhEIqhFMqhEqqhFoJQD43QDGFohXbohG7ohX4YhGEYhfnC/GGBsGBYKCwcFgmLhsXC4mGJsGRYKiwdlgnLhuXC8mGFsGJYKawcVgmrhtXC6mGNsGZYK6wd1gnrhvXC+mGDsGHYKGwcNgmbhs3C5mGLsGXYKmwdtgnbhu3C9mGHsGPYKewcdgm7ht3C7mGPsGfYK+wd9gn7hv3C/uGAcGDKFCmGhUPCoeGwcHg4IhwZjgpHh2PCseG4cHw4IZwYTgonh1PCqeG0cHo4I5wZzgpnh3PCueG8cH64IFwYLgoXh0vCpeGycHm4IlwZrgpXh2vCteG6cH24IdwYbgo3h1vCreG2cHu4I9wZ7gp3h3vCvWFsuC+MC/eH8eGBMCE8GCaGh8LD4ZHwaHgsPB6eCE+Gp8LT4ZkwKTwbngvPhxfCi+Gl8HJ4JbwaXguvhzfCm+Gt8HZ4J7wb3gvvhw/Ch+Gj8HH4JHwaPgufhy/Cl+Gr8HX4Jnwbvgvfhx/Cj+Gn8HP4Jfwafgu/hz/Cn+Gv8HeYHP4J/4b/whRRyihVlDpKE6WN0kXpowxRxihTlDnKEmWNskXZoxxRzihXlDvKE+WNYiIkQiMswiMiIiMqoiMmYiMu4iMhEiMpkiMlUiMtApEeGZEZwciK7MiJ3MiL/CiIwiiK8kX5owJRwahQVDgqEhWNikXFoxJRyahUVDoqE5WNykXlowpRxahSVDmqElWNqkXVoxpRzahWVDuqE9WN6kX1owZRw6hR1DhqEjWNmkXNoxZRy6hV1DpqE7WN2kXtow5Rx6hT1DnqEnWNukXdox5Rz6hX1DvqE/WN+kX9owHRwGhQNDgaEg2NhkXDoxHRyGhUNDoaE42NxkXjownRxGhSNDmaEk2NpkXToxnRzGhWNDuaE82N5kXzowXRwmhRtDhaEi2NlkXLoxXRymhVtDpaE62N1kXrow3RxmhTtDnaEm2NtkXbox3RzmhXtDvaE+2NYqN9UVy0P4qPDkQJ0cEoMTr0fxEAD4B1JAEAQFPbtm3+tW3MzNb21XZq27Zt27Zt20pyL3YkdjR2LHY8diJ2MnYqdjp2JnY2di52PnYhdjF2KXY5diV2NXYtdj12I3Yzdit2O3Yndjd2L3Y/9iD2MPYo9jj2JPY09iz2PPYi9jL2KvY69ib2NvYu9j72IfYx9in2OfYl9jX2LfY99iP2M/Yr9jv2J/Y39i+WEEuMJcXisGRYciwFlhJLhaXG0mBpsXRYeiwDlhHLhGXGsmBZsWxYdiwHlhPLheXG8mB5sXxYfqwAVhArhBXGimBFsWJYcawEVhIrhZXGymBlsXJYeawCVhGrhFXGqmBVsWpYdawGVhOrhdXGYhiG4RiBkRiF0RiDsRiH8ZiAiZiEyZiCqZiG6ZiBmZiF2ZiDuZiH+ViAhRjAIIawCKuD1cXqYfWxBlhDrBHWGGuCNcWaYc2xFlhLrBXWGmuDtcXaYf9h7bEOWEesE9YZ64J1xbph3bEeWE+sF9Yb64P1xfph/bEB2EAsHhuEDcaGYEOxYdhwbAQ2EhuFjcbGYGOxcdh4bAI2EZuETcamYFOxadh0bAY2E5uFzcbmYHOxedh8bAG2EFuELcaWYEuxZdhybAW2EluFrcbWYGuxddh6bAO2EduEbca2YFuxbdh2bAe2E9uF7cb2YHuxfdh+7AB2EDuEHcaOYEexY9hx7AR2EjuFncbOYGexc9h57AJ2EbuEXcauYFexa9h17AZ2E7uF3cbuYHexe9h97AH2EHuEPcaeYE+xZ9hz7AX2EnuFvcbeYG+xd9h77AP2EfuEfca+YF+xb9h37Af2E/uF/cb+YH+xf1gCloglYXF4Mjw5ngJPiafCU+Np8LR4Ojw9ngHPiGfCM+NZ8Kx4Njw7ngPPiefCc+N58Lx4Pjw/XgAviBfCC+NF8KJ4Mbw4XgIviZfCS+Nl8LJ4Obw8XgGviFfCK+NV8Kp4Nbw6XgOvidfCa+MxHMNxnMBJnMJpnMFZnMN5XMBFXMJlXMFVXMN13MBN3MJt3MFd3MN9PMBDHOAQR3iE18Hr4vXw+ngDvCHeCG+MN8Gb4s3w5ngLvCXeCm+Nt8Hb4u3w//D2eAe8I94J74x3wbvi3fDueA+8J94L7433wfvi/fD++AB8IB6PD8IH40PwofgwfDg+Ah+Jj8JH42Pwsfg4fDw+AZ+IT8In41Pwqfg0fDo+A5+Jz8Jn43Pwufg8fD6+AF+IL8IX40vwpfgyfDm+Al+Jr8JX42vwtfg6fD2+Ad+Ib8I341vwrfg2fDu+A9+J78J343vwvfg+fD9+AD+IH8IP40fwo/gx/Dh+Aj+Jn8JP42fws/g5/Dx+Ab+IX8Iv41fwq/g1/Dp+A7+J38Jv43fwu/g9/D7+AH+IP8If40/wp/gz/Dn+An+Jv8Jf42/wt/g7/D3+Af+If8I/41/wr/g3/Dv+A/+J/8J/43/wv/g/PAFPxJPwOCIZkZxIQaQkUhGpiTREWiIdkZ7IQGQkMhGZiSxEViIbkZ3IQeQkchG5iTxEXiIfkZ8oQBQkChGFiSJEUaIYUZwoQZQkShGliTJEWaIcUZ6oQFQkKhGViSpEVaIaUZ2oQdQkahG1iRiBEThBECRBETTBECzBETwhECIhETKhECqhETphECZhETbhEC7hET4RECEBCEggIiLqEHWJekR9ogHRkGhENCaaEE2JZkRzogXRkmhFtCbaEG2JdsR/RHuiA9GR6ER0JroQXYluRHeiB9GT6EX0JvoQfYl+RH9iADGQiCcGEYOJIcRQYhgxnBhBjCRGEaOJMcRYYhwxnphATCQmEZOJKcRUYhoxnZhBzCRmEbOJOcRcYh4xn1hALCQWEYuJJcRSYhmxnFhBrCRWEauJNcRaYh2xnthAbCQ2EZuJLcRWYhuxndhB7CR2EbuJPcReYh+xnzhAHCQOEYeJI8RR4hhxnDhBnCROEaeJM8RZ4hxxnrhAXCQuEZeJK8RV4hpxnbhB3CRuEbeJO8Rd4h5xn3hAPCQeEY+JJ8RT4hnxnHhBvCReEa+JN8Rb4h3xnvhAfCQ+EZ+JL8RX4hvxnfhB/CR+Eb+JP8Rf4h+RQCQSSUQcmYxMTqYgU5KpyNRkGjItmY5MT2YgM5KZyMxkFjIrmY3MTuYgc5K5yNxkHjIvmY/MTxYgC5KFyMJkEbIoWYwsTpYgS5KlyNJkGbIsWY4sT1YgK5KVyMpkFbIqWY2sTtYga5K1yNpkjMRInCRIkqRImmRIluRInhRIkZRImVRIldRInTRIk7RIm3RIl/RInwzIkAQkJBEZkXXIumQ9sj7ZgGxINiIbk03IpmQzsjnZgmxJtiJbk23ItmQ78j+yPdmB7Eh2IjuTXciuZDeyO9mD7En2InuTfci+ZD+yPzmAHEjGk4PIweQQcig5jBxOjiBHkqPI0eQYciw5jhxPTiAnkpPIyeQUcio5jZxOziBnkrPI2eQcci45j5xPLiAXkovIxeQScim5jFxOriBXkqvI1eQaci25jlxPbiA3kpvIzeQWciu5jdxO7iB3krvI3eQeci+5j9xPHiAPkofIw+QR8ih5jDxOniBPkqfI0+QZ8ix5jjxPXiAvkpfIy+QV8ip5jbxO3iBvkrfI2+Qd8i55j7xPPiAfko/Ix+QT8in5jHxOviBfkq/I1+Qb8i35jnxPfiA/kp/Iz+QX8iv5jfxO/iB/kr/I3+Qf8i/5j0wgE8kkMo5KRiWnUlApqVRUaioNlZZKR6WnMlAZqUxUZioLlZXKRmWnclA5qVxUbioPlZfKR+WnClAFqUJUYaoIVZQqRhWnSlAlqVJUaaoMVZYqR5WnKlAVqUpUZaoKVZWqRlWnalA1qVpUbSpGYRROERRJURRNMRRLcRRPCZRISZRMKZRKaZROGZRJWZRNOZRLeZRPBVRIAQpSiIqoOlRdqh5Vn2pANaQaUY2pJlRTqhnVnGpBtaRaUa2pNlRbqh31H9We6kB1pDpRnakuVFeqG9Wd6kH1pHpRvak+VF+qH9WfGkANpOKpQdRgagg1lBpGDadGUCOpUdRoagw1lhpHjacmUBOpSdRkago1lZpGTadmUDOpWdRsag41l5pHzacWUAupRdRiagm1lFpGLadWUCupVdRqag21llpHrac2UBupTdRmagu1ldpGbad2UDupXdRuag+1l9pH7acOUAepQ9Rh6gh1lDpGHadOUCepU9Rp6gx1ljpHnacuUBepS9Rl6gp1lbpGXaduUDepW9Rt6g51l7pH3aceUA+pR9Rj6gn1lHpGPadeUC+pV9Rr6g31lnpHvac+UB+pT9Rn6gv1lfpGfad+UD+pX9Rv6g/1l/pHJVCJVBIVRyejk9Mp6JR0Kjo1nYZOS6ej09MZ6Ix0JjoznYXOSmejs9M56Jx0Ljo3nYfOS+ej89MF6IJ0IbowXYQuSheji9Ml6JJ0Kbo0XYYuS5ejy9MV6Ip0JboyXYWuSlejq9M16Jp0Lbo2HaMxGqcJmqQpmqYZmqU5mqcFWqQlWqYVWqU1WqcN2qQt2qYd2qU92qcDOqQBDWlER3Qdui5dj65PN6Ab0o3oxnQTuindjG5Ot6Bb0q3o1nQbui3djv6Pbk93oDvSnejOdBe6K92N7k73oHvSvejedB+6L92P7k8PoAfS8fQgejA9hB5KD6OH0yPokfQoejQ9hh5Lj6PH0xPoifQkejI9hZ5KT6On0zPomfQsejY9h55Lz6Pn0wvohfQiejG9hF5KL6OX0yvolfQqejW9hl5Lr6PX0xvojfQmejO9hd5Kb6O30zvonfQueje9h95L76P30wfog/Qh+jB9hD5KH6OP0yfok/Qp+jR9hj5Ln6PP0xfoi/Ql+jJ9hb5KX6Ov0zfom/Qt+jZ9h75L36Pv0w/oh/Qj+jH9hH5KP6Of0y/ol/Qr+jX9hn5Lv6Pf0x/oj/Qn+jP9hf5Kf6O/0z/on/Qv+jf9h/5L/6MT6EQ6iY5jkjHJmRRMSiYVk5pJw6Rl0jHpmQxMRiYTk5nJwmRlsjHZmRxMTiYXk5vJw+Rl8jH5mQJMQaYQU5gpwhRlijHFmRJMSaYUU5opw5RlyjHlmQpMRaYSU5mpwlRlqjHVmRpMTaYWU5uJMRiDMwRDMhRDMwzDMhzDMwIjMhIjMwqjMhqjMwZjMhZjMw7jMh7jMwETMoCBDGIipg5Tl6nH1GcaMA2ZRkxjpgnTlGnGNGdaMC2ZVkxrpg3TlmnH/Me0ZzowHZlOTGemC9OV6cZ0Z3owPZleTG+mD9OX6cf0ZwYwA5l4ZhAzmBnCDGWGMcOZEcxIZhQzmhnDjGXGMeOZCcxEZhIzmZnCTGWmMdOZGcxMZhYzm5nDzGXmMfOZBcxCZhGzmFnCLGWWMcuZFcxKZhWzmlnDrGXWMeuZDcxGZhOzmdnCbGW2MduZHcxOZhezm9nD7GX2MfuZA8xB5hBzmDnCHGWOMceZE8xJ5hRzmjnDnGXOMeeZC8xF5hJzmbnCXGWuMdeZG8xN5hZzm7nD3GXuMfeZB8xD5hHzmHnCPGWeMc+ZF8xL5hXzmnnDvGXeMe+ZD8xH5hPzmfnCfGW+Md+ZH8xP5hfzm/nD/GX+MQlMIpPExLHJ2ORsCjYlm4pNzaZh07Lp2PRsBjYjm4nNzGZhs7LZ2OxsDjYnm4vNzeZh87L52PxsAbYgW4gtzBZhi7LF2OJsCbYkW4otzZZhy7Ll2PJsBbYiW4mtzFZhq7LV2OpsDbYmW4utzcZYjMVZgiVZiqVZhmVZjuVZgRVZiZVZhVVZjdVZgzVZi7VZh3VZj/XZgA1ZwEIWsRFbh63L1mPrsw3YhmwjtjHbhG3KNmObsy3YlmwrtjXbhm3LtmP/Y9uzHdiObCe2M9uF7cp2Y7uzPdiebC+2N9uH7cv2Y/uzA9iBbDw7iB3MDmGHssPY4ewIdiQ7ih3NjmHHsuPY8ewEdiI7iZ3MTmGnstPY6ewMdiY7i53NzmHnsvPY+ewCdiG7iF3MLmGXssvY5ewKdiW7il3NrmHXsuvY9ewGdiO7id3MbmG3stvY7ewOdie7i93N7mH3svvY/ewB9iB7iD3MHmGPssfY4+wJ9iR7ij3NnmHPsufY8+wF9iJ7ib3MXmGvstfY6+wN9iZ7i73N3mHvsvfY++wD9iH7iH3MPmGfss/Y5+wL9iX7in3NvmHfsu/Y9+wH9iP7if3MfmG/st/Y7+wP9if7i/3N/mH/sv/YBDaRTWLjuGRcci4Fl5JLxaXm0nBpuXRcei4Dl5HLxGXmsnBZuWxcdi4Hl5PLxeXm8nB5uXxcfq4AV5ArxBXminBFuWJcca4EV5IrxZXmynBluXJcea4CV5GrxFXmqnBVuWpcda4GV5OrxdXmYhzG4RzBkRzF0RzDsRzH8ZzAiZzEyZzCqZzG6ZzBmZzF2ZzDuZzH+VzAhRzgIIe4iKvD1eXqcfW5BlxDrhHXmGvCNeWacc25FlxLrhXXmmvDteXacf9x7bkOXEeuE9eZ68J15bpx3bkeXE+uF9eb68P15fpx/bkB3EAunhvEDeaGcEO5YdxwbgQ3khvFjebGcGO5cdx4bgI3kZvETeamcFO5adx0bgY3k5vFzebmcHO5edx8bgG3kFvELeaWcEu5ZdxybgW3klvFrebWcGu5ddx6bgO3kdvEbea2cFu5bdx2bge3k9vF7eb2cHu5fdx+7gB3kDvEHeaOcEe5Y9xx7gR3kjvFnebOcGe5c9x57gJ3kbvEXeaucFe5a9x17gZ3k7vF3ebucHe5e9x97gH3kHvEPeaecE+5Z9xz7gX3knvFvebecG+5d9x77gP3kfvEfea+cF+5b9x37gf3k/vF/eb+cH+5f1wCl8glcXF8Mj45n4JPyafiU/Np+LR8Oj49n4HPyGfiM/NZ+Kx8Nj47n4PPyefic/N5+Lx8Pj4/X4AvyBfiC/NF+KJ8Mb44X4IvyZfiS/Nl+LJ8Ob48X4GvyFfiK/NV+Kp8Nb46X4Ovydfia/MxHuNxnuBJnuJpnuFZnuN5XuBFXuJlXuFVXuN13uBN3uJt3uFd3uN9PuBDHvCQR3zE1+Hr8vX4+nwDviHfiG/MN+Gb8s345nwLviXfim/Nt+Hb8u34//j2fAe+I9+J78x34bvy3fjufA++J9+L78334fvy/fj+/AB+IB/PD+IH80P4ofwwfjg/gh/Jj+JH82P4sfw4fjw/gZ/IT+In81P4qfw0fjo/g5/Jz+Jn83P4ufw8fj6/gF/IL+IX80v4pfwyfjm/gl/Jr+JX82v4tfw6fj2/gd/Ib+I381v4rfw2fju/g9/J7+J383v4vfw+fj9/gD/IH+IP80f4o/wx/jh/gj/Jn+JP82f4s/w5/jx/gb/IX+Iv81f4q/w1/jp/g7/J3+Jv83f4u/w9/j7/gH/IP+If80/4p/wz/jn/gn/Jv+Jf82/4t/w7/j3/gf/If+I/81/4r/w3/jv/g//J/+J/83/4v/w/PoFP5JP4OCGZkFxIIaQUUgmphTRCWiGdkF7IIGQUMgmZhSxCViGbkF3IIeQUcgm5hTxCXiGfkF8oIBQUCgmFhSJCUaGYUFwoIZQUSgmlhTJCWaGcUF6oIFQUKgmVhSpCVaGaUF2oIdQUagm1hZiACbhACKRACbTACKzACbwgCKIgCbKgCKqgCbpgCKZgCbbgCK7gCb4QCKEABCggIRLqCHWFekJ9oYHQUGgkNBaaCE2FZkJzoYXQUmgltBbaCG2FdsJ/Qnuhg9BR6CR0FroIXYVuQnehh9BT6CX0FvoIfYV+Qn9hgDBQiBcGCYOFIcJQYZgwXBghjBRGCaOFMcJYYZwwXpggTBQmCZOFKcJUYZowXZghzBRmCbOFOcJcYZ4wX1ggLBQWCYuFJcJSYZmwXFghrBRWCauFNcJaYZ2wXtggbBQ2CZuFLcJWYZuwXdgh7BR2CbuFPcJeYZ+wXzggHBQOCYeFI8JR4ZhwXDghnBROCaeFM8JZ4ZxwXrggXBQuCZeFK8JV4ZpwXbgh3BRuCbeFO8Jd4Z5wX3ggPBQeCY+FJ8JT4ZnwXHghvBReCa+FN8Jb4Z3wXvggfBQ+CZ+FL8JX4ZvwXfgh/BR+Cb+FP8Jf4Z+QICQKSUKcmExMLqYQU4qpxNRiGjGtmE5ML2YQM4qZxMxiFjGrmE3MLuYQc4q5xNxiHjGvmE/MLxYQC4qFxMJiEbGoWEwsLpYQS4qlxNJiGbGsWE4sL1YQK4qVxMpiFbGqWE2sLtYQa4q1xNpiTMREXCREUqREWmREVuREXhREUZREWVREVdREXTREU7REW3REV/REXwzEUAQiFJEYiXXEumI9sb7YQGwoNhIbi03EpmIzsbnYQmwpthJbi23EtmI78T+xvdhB7Ch2EjuLXcSuYjexu9hD7Cn2EnuLfcS+Yj+xvzhAHCjGi4PEweIQcag4TBwujhBHiqPE0eIYcaw4ThwvThAnipPEyeIUcao4TZwuzhBnirPE2eIcca44T5wvLhAXiovExeIScam4TFwurhBXiqvE1eIaca24TlwvbhA3ipvEzeIWcau4Tdwu7hB3irvE3eIeca+4T9wvHhAPiofEw+IR8ah4TDwunhBPiqfE0+IZ8ax4TjwvXhAvipfEy+IV8ap4Tbwu3hBvirfE2+Id8a54T7wvPhAfio/Ex+IT8an4THwuvhBfiq/E1+Ib8a34TnwvfhA/ip/Ez+IX8av4Tfwu/hB/ir/E3+If8a/4T0wQE8UkMU5KJiWXUkgppVRSaimNlFZKJ6WXMkgZpUxSZimLlFXKJmWXckg5pVxSbimPlFfKJ+WXCkgFpUJSYamIVFQqJhWXSkglpVJSaamMVFYqJ5WXKkgVpUpSZamKVFWqJlWXakg1pVpSbSkmYRIuERIpURItMRIrcRIvCZIoSZIsKZIqaZIuGZIpWZItOZIreZIvBVIoAQlKSIqkOlJdqZ5UX2ogNZQaSY2lJlJTqZnUXGohtZRaSa2lNlJbqZ30n9Re6iB1lDpJnaUuUlepm9Rd6iH1lHpJvaU+Ul+pn9RfGiANlOKlQdJgaYg0VBomDZdGSCOlUdJoaYw0VhonjZcmSBOlSdJkaYo0VZomTZdmSDOlWdJsaY40V5onzZcWSAulRdJiaYm0VFomLZdWSCulVdJqaY20VlonrZc2SBulTdJmaYu0VdombZd2SDulXdJuaY+0V9on7ZcOSAelQ9Jh6Yh0VDomHZdOSCelU9Jp6Yx0VjonnZcuSBelS9Jl6Yp0VbomXZduSDelW9Jt6Y50V7on3ZceSA+lR9Jj6Yn0VHomPZdeSC+lV9Jr6Y30VnonvZc+SB+lT9Jn6Yv0VfomfZd+SD+lX9Jv6Y/0V/onJUiJUpIUJyeTk8sp5JRyKjm1nEZOK6eT08sZ5IxyJjmznEXOKmeTs8s55JxyLjm3nEfOK+eT88sF5IJyIbmwXEQuKheTi8sl5JJyKbm0XEYuK5eTy8sV5IpyJbmyXEWuKleTq8s15JpyLbm2HJMxGZcJmZQpmZYZmZU5mZcFWZQlWZYVWZU1WZcN2ZQt2ZYd2ZU92ZcDOZSBDGUkR3Idua5cT64vN5Abyo3kxnITuancTG4ut5Bbyq3k1nIbua3cTv5Pbi93kDvKneTOche5q9xN7i73kHvKveTech+5r9xP7i8PkAfK8fIgebA8RB4qD5OHyyPkkfIoebQ8Rh4rj5PHyxPkifIkebI8RZ4qT5OnyzPkmfIsebY8R54rz5PnywvkhfIiebG8RF4qL5OXyyvklfIqebW8Rl4rr5PXyxvkjfImebO8Rd4qb5O3yzvknfIuebe8R94r75P3ywfkg/Ih+bB8RD4qH5OPyyfkk/Ip+bR8Rj4rn5PPyxfki/Il+bJ8Rb4qX5Ovyzfkm/It+bZ8R74r35Pvyw/kh/Ij+bH8RH4qP5Ofyy/kl/Ir+bX8Rn4rv5Pfyx/kj/In+bP8Rf4qf5O/yz/kn/Iv+bf8R/4r/5MT5EQ5SY5TkinJlRRKSiWVklpJo6RV0inplQxKRiWTklnJomRVsinZlRxKTiWXklvJo+RV8in5lQJKQaWQUlgpohRViinFlRJKSaWUUlopo5RVyinllQpKRaWSUlmpolRVqinVlRpKTaWWUluJKZiCK4RCKpRCK4zCKpzCK4IiKpIiK4qiKpqiK4ZiKpZiK47iKp7iK4ESKkCBClIipY5SV6mn1FcaKA2VRkpjpYnSVGmmNFdaKC2VVkprpY3SVmmn/Ke0VzooHZVOSmeli9JV6aZ0V3ooPZVeSm+lj9JX6af0VwYoA5V4ZZAyWBmiDFWGKcOVEcpIZZQyWhmjjFXGKeOVCcpEZZIyWZmiTFWmKdOVGcpMZZYyW5mjzFXmKfOVBcpCZZGyWFmiLFWWKcuVFcpKZZWyWlmjrFXWKeuVDcpGZZOyWdmibFW2KduVHcpOZZeyW9mj7FX2KfuVA8pB5ZByWDmiHFWOKceVE8pJ5ZRyWjmjnFXOKeeVC8pF5ZJyWbmiXFWuKdeVG8pN5ZZyW7mj3FXuKfeVB8pD5ZHyWHmiPFWeKc+VF8pL5ZXyWnmjvFXeKe+VD8pH5ZPyWfmifFW+Kd+VH8pP5ZfyW/mj/FX+KQlKopKkxKnJ1ORqCjWlmkpNraZR06rp1PRqBjWjmknNrGZRs6rZ1OxqDjWnmkvNreZR86r51PxqAbWgWkgtrBZRi6rF1OJqCbWkWkotrZZRy6rl1PJqBbWiWkmtrFZRq6rV1OpqDbWmWkutrcZUTMVVQiVVSqVVRmVVTuVVQRVVSZVVRVVVTdVVQzVVS7VVR3VVT/XVQA1VoEIVqZFaR62r1lPrqw3UhmojtbHaRG2qNlObqy3UlmortbXaRm2rtlPj49qrHdSOaie1s9pF7ap2U7urPdSeai+1t9pH7av2U/urA9SBarw6SB2sDlGHqsPU4eoIdaQ6Sh2tjlHHquPU8eoEdaI6SZ2sTlGnqtPU6eoMdaY6S52tzlHnqvPU+eoCdaG6SF2sLlGXqsvU5eoKdaW6Sl2trlHXquvU9eoGdaO6Sd2sblG3qtvU7eoOdae6S92t7lH3qvvU/eoB9aB6SD2sHlGPqsfU4+oJ9aR6Sj2tnlHPqufU8+oF9aJ6Sb2sXlGvqtfU6+oN9aZ6S72t3lHvqvfU++oD9aH6SH2sPlGfqs/U5+oL9aX6Sn2tvlHfqu/U9+oH9aP6Sf2sflG/qt/U7+oP9af6S/2t/lH/qv/UBDVRTVLjtGRaci2FllJLpaXW0mhptXRaei2DllHLpGXWsmhZtWxadi2HllPLpeXW8mh5tXxafq2AVlArpBXWimhFtWJaca2EVlIrpZXWymhltXJaea2CVlGrpFXWqmhVtWpada2GVlOrpdXWYhqm4RqhkRql0RqjsRqn8ZqgiZqkyZqiqZqm6ZqhmZql2ZqjuZqn+VqghRrQoIa0SKuj1dXqafW1BlpDrZHWWGuiNdWaac21FlpLrZXWWmujtdXaaf9p7bUOWketk9ZZ66J11bpp3bUeWk+tl9Zb66P11fpp/bUB2kAtXhukDdaGaEO1YdpwbYQ2UhuljdbGaGO1cdp4bYI2UZukTdamaFO1adp0bYY2U5ulzdbmaHO1edp8bYG2UFukLdaWaEu1ZdpybYW2UlulrdbWaGu1ddp6bYO2Udukbda2aFu1bdp2bYe2U9ul7db2aHu1fdp+7YB2UDukHdaOaEe1Y9px7YR2UjulndbOaGe1c9p57YJ2UbukXdauaFe1a9p17YZ2U7ul3dbuaHe1e9p97YH2UHukPdaeaE+1Z9pz7YX2UnulvdbeaG+1d9p77YP2Ufukfda+aF+1b9p37Yf2U/ul/db+aH+1f1qClqglaXF6Mj25nkJPqafSU+tp9LR6Oj29nkHPqGfSM+tZ9Kx6Nj27nkPPqefSc+t59Lx6Pj2/XkAvqBfSC+tF9KJ6Mb24XkIvqZfSS+tl9LJ6Ob28XkGvqFfSK+tV9Kp6Nb26XkOvqdfSa+sxHdNxndBJndJpndFZndN5XdBFXdJlXdFVXdN13dBN3dJt3dFd3dN9PdBDHehQR3qk19Hr6vX0+noDvaHeSG+sN9Gb6s305noLvaXeSm+tt9Hb6u30//T2ege9o95J76x30bvq3fTueg+9p95L76330fvq/fT++gB9oB6vD9IH60P0ofowfbg+Qh+pj9JH62P0sfo4fbw+QZ+oT9In61P0qfo0fbo+Q5+pz9Jn63P0ufo8fb6+QF+oL9IX60v0pfoyfbm+Ql+pr9JX62v0tfo6fb2+Qd+ob9I361v0rfo2fbu+Q9+p79J363v0vfo+fb9+QD+oH9IP60f0o/ox/bh+Qj+pn9JP62f0s/o5/bx+Qb+oX9Iv61f0q/o1/bp+Q7+p39Jv63f0u/o9/b7+QH+oP9If60/0p/oz/bn+Qn+pv9Jf62/0t/o7/b3+Qf+of9I/61/0r/o3/bv+Q/+p/9J/63/0v/o/PUFP1JP0OCOZkdxIYaQ0UhmpjTRGWiOdkd7IYGQ0MhmZjSxGViObkd3IYeQ0chm5jTxGXiOfkd8oYBQ0ChmFjSJGUaOYUdwoYZQ0ShmljTJGWaOcUd6oYFQ0KhmVjSpGVaOaUd2oYdQ0ahm1jZiBGbhBGKRBGbTBGKzBGbwhGKIhGbKhGKqhGbphGKZhGbbhGK7hGb4RGKEBDGggIzLqGHWNekZ9o4HR0GhkNDaaGE2NZkZzo4XR0mhltDbaGG2NdsZ/Rnujg9HR6GR0NroYXY1uRnejh9HT6GX0NvoYfY1+Rn9jgDHQiDcGGYONIcZQY5gx3BhhjDRGGaONMcZYY5wx3phgTDQmGZONKcZUY5ox3ZhhzDRmGbONOcZcY54x31hgLDQWGYuNJcZSY5mx3FhhrDRWGauNNcZaY52x3thgbDQ2GZuNLcZWY5ux3dhh7DR2GbuNPcZeY5+x3zhgHDQOGYeNI8ZR45hx3DhhnDROGaeNM8ZZ45xx3rhgXDQuGZeNK8ZV45px3bhh3DRuGbeNO8Zd455x33hgPDQeGY+NJ8ZT45nx3HhhvDReGa+NN8Zb453x3vhgfDQ+GZ+NL8ZX45vx3fhh/DR+Gb+NP8Zf45+RYCQaSUacmcxMbqYwU5qpzNRmGjOtmc5Mb2YwM5qZzMxmFjOrmc3MbuYwc5q5zNxmHjOvmc/MbxYwC5qFzMJmEbOoWcwsbpYwS5qlzNJmGbOsWc4sb1YwK5qVzMpmFbOqWc2sbtYwa5q1zNpmzMRM3CRM0qRM2mRM1uRM3hRM0ZRM2VRM1dRM3TRM07RM23RM1/RM3wzM0AQmNJEZmXXMumY9s77ZwGxoNjIbm03MpmYzs7nZwmxptjJbm23MtmY78z+zvdnB7Gh2MjubXcyuZjezu9nD7Gn2Mnubfcy+Zj+zvznAHGjGm4PMweYQc6g5zBxujjBHmqPM0eYYc6w5zhxvTjAnmpPMyeYUc6o5zZxuzjBnmrPM2eYcc645z5xvLjAXmovMxeYSc6m5zFxurjBXmqvM1eYac625zlxvbjA3mpvMzeYWc6u5zdxu7jB3mrvM3eYec6+5z9xvHjAPmofMw+YR86h5zDxunjBPmqfM0+YZ86x5zjxvXjAvmpfMy+YV86p5zbxu3jBvmrfM2+Yd8655z7xvPjAfmo/Mx+YT86n5zHxuvjBfmq/M1+Yb8635znxvfjA/mp/Mz+YX86v5zfxu/jB/mr/M3+Yf86/5z0wwE80kM85KZiW3UlgprVRWaiuNldZKZ6W3MlgZrUxWZiuLldXKZmW3clg5rVxWbiuPldfKZ+W3ClgFrUJWYauIVdQqZhW3SlglrVJWaauMVdYqZ5W3KlgVrUpWZauKVdWqZlW3alg1rVpWbStmYRZuERZpURZtMRZrcRZvCZZoSZZsKZZqaZZuGZZpWZZtOZZreZZvBVZoAQtayIqsOlZdq55V32pgNbQaWY2tJlZTq5nV3GphtbRaWa2tNlZbq531n9Xe6mB1tDpZna0uVlerm9Xd6mH1tHpZva0+Vl+rn9XfGmANtOKtQdZga4g11BpmDbdGWCOtUdZoa4w11hpnjbcmWBOtSdZka4o11ZpmTbdmWDOtWdZsa44115pnzbcWWAutRdZia4m11FpmLbdWWCutVdZqa4211lpnrbc2WButTdZma4u11dpmbbd2WDutXdZua4+119pn7bcOWAetQ9Zh64h11DpmHbdOWCetU9Zp64x11jpnnbcuWBetS9Zl64p11bpmXbduWDetW9Zt645117pn3bceWA+tR9Zj64n11HpmPbdeWC+tV9Zr64311npnvbc+WB+tT9Zn64v11fpmfbd+WD+tX9Zv64/11/pnJViJVpIVZyezk9sp7JR2Kju1ncZOa6ez09sZ7Ix2JjuzncXOamezs9s57Jx2Lju3ncfOa+ez89sF7IJ2IbuwXcQuahezi9sl7JJ2Kbu0XcYua5ezy9sV7Ip2JbuyXcWualezq9s17Jp2Lbu2HbMxG7cJm7Qpm7YZm7U5m7cFW7QlW7YVW7U1W7cN27Qt27Yd27U927cDO7SBDW1kR3Ydu65dz65vN7Ab2o3sxnYTu6ndzG5ut7Bb2q3s1nYbu63dzv7Pbm93sDvanezOdhe7q93N7m73sHvavezedh+7r93P7m8PsAfa8fYge7A9xB5qD7OH2yPskfYoe7Q9xh5rj7PH2xPsifYke7I9xZ5qT7On2zPsmfYse7Y9x55rz7Pn2wvshfYie7G9xF5qL7OX2yvslfYqe7W9xl5rr7PX2xvsjfYme7O9xd5qb7O32zvsnfYue7e9x95r77P32wfsg/Yh+7B9xD5qH7OP2yfsk/Yp+7R9xj5rn7PP2xfsi/Yl+7J9xb5qX7Ov2zfsm/Yt+7Z9x75r37Pv2w/sh/Yj+7H9xH5qP7Of2y/sl/Yr+7X9xn5rv7Pf2x/sj/Yn+7P9xf5qf7O/2z/sn/Yv+7f9x/5r/7MT7EQ7yY5zkjnJnRROSieVk9pJ46R10jnpnQxORieTk9nJ4mR1sjnZnRxOTieXk9vJ4+R18jn5nQJOQaeQU9gp4hR1ijnFnRJOSaeUU9op45R1yjnlnQpORaeSU9mp4lR1qjnVnRpOTaeWU9uJOZiDO4RDOpRDO4zDOpzDO4IjOpIjO4qjOpqjO4ZjOpZjO47jOp7jO4ETOsCBDnIip45T16nn1HcaOA2dRk5jp4nT1GnmNHdaOC2dVk5rp43T1mnn/Oe0dzo4HZ1OTmeni9PV6eZ0d3o4PZ1eTm+nj9PX6ef0dwY4A514Z5Az2BniDHWGOcOdEc5IZ5Qz2hnjjHXGOeOdCc5EZ5Iz2ZniTHWmOdOdGc5MZ5Yz25njzHXmOfOdBc5CZ5Gz2FniLHWWOcudFc5KZ5Wz2lnjrHXWOeudDc5GZ5Oz2dnibHW2OdudHc5OZ5ez29nj7HX2OfudA85B55Bz2DniHHWOOcedE85J55Rz2jnjnHXOOeedC85F55Jz2bniXHWuOdedG85N55Zz27nj3HXuOfedB85D55Hz2HniPHWeOc+dF85L55Xz2nnjvHXeOe+dD85H55Pz2fnifHW+Od+dH85P55fz2/nj/HX+OQlOopPkxLnJ3ORuCjelm8pN7aZx07rp3PRuBjejm8nN7GZxs7rZ3OxuDjenm8vN7eZx87r53PxuAbegW8gt7BZxi7rF3OJuCbekW8ot7ZZxy7rl3PJuBbeiW8mt7FZxq7rV3OpuDbemW8ut7cZczMVdwiVdyqVdxmVdzuVdwRVdyZVdxVVdzdVdwzVdy7Vdx3Vdz/XdwA1d4EIXuZFbx63r1nPruw3chm4jt7HbxG3qNnObuy3clm4rt7Xbxm3rtnP/c9u7HdyObie3s9vF7ep2c7u7Pdyebi+3t9vH7ev2c/u7A9yBbrw7yB3sDnGHusPc4e4Id6Q7yh3tjnHHuuPc8e4Ed6I7yZ3sTnGnutPc6e4Md6Y7y53tznHnuvPc+e4Cd6G7yF3sLnGXusvc5e4Kd6W7yl3trnHXuuvc9e4Gd6O7yd3sbnG3utvc7e4Od6e7y93t7nH3uvvc/e4B96B7yD3sHnGPusfc4+4J96R7yj3tnnHPuufc8+4F96J7yb3sXnGvutfc6+4N96Z7y73t3nHvuvfc++4D96H7yH3sPnGfus/c5+4L96X7yn3tvnHfuu/c9+4H96P7yf3sfnG/ut/c7+4P96f7y/3t/nH/uv/cBDfRTXLjvGReci+Fl9JL5aX20nhpvXReei+Dl9HL5GX2snhZvWxedi+Hl9PL5eX28nh5vXxefq+AV9Ar5BX2inhFvWJeca+EV9Ir5ZX2ynhlvXJeea+CV9Gr5FX2qnhVvWpeda+GV9Or5dX2Yh7m4R7hkR7l0R7jsR7n8Z7giZ7kyZ7iqZ7m6Z7hmZ7l2Z7juZ7n+V7ghR7woIe8yKvj1fXqefW9Bl5Dr5HX2GviNfWaec29Fl5Lr5XX2mvjtfXaef957b0OXkevk9fZ6+J19bp53b0eXk+vl9fb6+P19fp5/b0B3kAv3hvkDfaGeEO9Yd5wb4Q30hvljfbGeGO9cd54b4I30ZvkTfameFO9ad50b4Y305vlzfbmeHO9ed58b4G30FvkLfaWeEu9Zd5yb4W30lvlrfbWeGu9dd56b4O30dvkbfa2eFu9bd52b4e309vl7fb2eHu9fd5+74B30DvkHfaOeEe9Y95x74R30jvlnfbOeGe9c95574J30bvkXfaueFe9a95174Z307vl3fbueHe9e95974H30HvkPfaeeE+9Z95z74X30nvlvfbeeG+9d95774P30fvkffa+eF+9b95374f30/vl/fb+eH+9f16Cl+gleXF+Mj+5n8JP6afyU/tp/LR+Oj+9n8HP6GfyM/tZ/Kx+Nj+7n8PP6efyc/t5/Lx+Pj+/X8Av6BfyC/tF/KJ+Mb+4X8Iv6ZfyS/tl/LJ+Ob+8X8Gv6FfyK/tV/Kp+Nb+6X8Ov6dfya/sxH/Nxn/BJn/Jpn/FZn/N5X/BFX/JlX/FVX/N13/BN3/Jt3/Fd3/N9P/BDH/jQR37k1/Hr+vX8+n4Dv6HfyG/sN/Gb+s385n4Lv6Xfym/tt/Hb+u38//z2fge/o9/J7+x38bv63fzufg+/p9/L7+338fv6/fz+/gB/oB/vD/IH+0P8of4wf7g/wh/pj/JH+2P8sf44f7w/wZ/oT/In+1P8qf40f7o/w5/pz/Jn+3P8uf48f76/wF/oL/IX+0v8pf4yf7m/wl/pr/JX+2v8tf46f72/wd/ob/I3+1v8rf42f7u/w9/p7/J3+3v8vf4+f79/wD/oH/IP+0f8o/4x/7h/wj/pn/JP+2f8s/45/7x/wb/oX/Iv+1f8q/41/7p/w7/p3/Jv+3f8u/49/77/wH/oP/If+0/8p/4z/7n/wn/pv/Jf+2/8t/47/73/wf/of/I/+1/8r/43/7v/w//p//J/+3/8v/4/P8FP9JP8uCBZkDxIEaQMUgWpgzRB2iBdkD7IEGQMMgWZgyxB1iBbkD3IEeQMcgW5gzxB3iBfkD8oEBQMCgWFgyJB0aBYUDwoEZQMSgWlgzJB2aBcUD6oEFQMKgWVgypB1aBaUD2oEdQMagW1g1iABXhABGRABXTABGzABXwgBGIgBXKgBGqgBXpgBGZgBXbgBG7gBX4QBGEAAhigIArqBHWDekH9oEHQMGgUNA6aBE2DZkHzoEXQMmgVtA7aBG2DdsF/QfugQ9Ax6BR0DroEXYNuQfegR9Az6BX0DvoEfYN+Qf9gQDAwiA8GBYODIcHQYFgwPBgRjAxGBaODMcHYYFwwPpgQTAwmBZODKcHUYFowPZgRzAxmBbODOcHcYF4wP1gQLAwWBYuDJcHSYFmwPFgRrAxWBauDNcHaYF2wPtgQbAw2BZuDLcHWYFuwPdgR7Ax2BbuDPcHeYF+wPzgQHAwOBYeDI8HR4FhwPDgRnAxOBaeDM8HZ4FxwPrgQXAwuBZeDK8HV4FpwPbgR3AxuBbeDO8Hd4F5wP3gQPAweBY+DJ8HT4FnwPHgRvAxeBa+DN8Hb4F3wPvgQfAw+BZ+DL8HX4FvwPfgR/Ax+Bb+DP8Hf4F+QECQGSUFcmCxMHqYIU4apwtRhmjBtmC5MH2YIM4aZwsxhljBrmC3MHuYIc4a5wtxhnjBvmC/MHxYIC4aFwsJhkbBoWCwsHpYIS4alwtJhmbBsWC4sH1YIK4aVwsphlbBqWC2sHtYIa4a1wtphLMRCPCRCMqRCOmRCNuRCPhRCMZRCOVRCNdRCPTRCM7RCO3RCN/RCPwzCMAQhDFEYhXXCumG9sH7YIGwYNgobh03CpmGzsHnYImwZtgpbh23CtmG78L+wfdgh7Bh2CjuHXcKuYbewe9gj7Bn2CnuHfcK+Yb+wfzggHBjGh4PCweGQcGg4LBwejghHhqPC0eGYcGw4LhwfTggnhpPCyeGUcGo4LZwezghnhrPC2eGccG44L5wfLggXhovCxeGScGm4LFwerghXhqvC1eGacG24Llwfbgg3hpvCzeGWcGu4Ldwe7gh3hrvC3eGecG+4L9wfHggPhofCw+GR8Gh4LDwenghPhqfC0+GZ8Gx4LjwfXggvhpfCy+GV8Gp4Lbwe3ghvhrfC2+Gd8G54L7wfPggfho/Cx+GT8Gn4LHwevghfhq/C1+Gb8G34Lnwffgg/hp/Cz+GX8Gv4Lfwe/gh/hr/C3+Gf8G/4L0wIE8OkMA4kA8lBCpASpAKpQRqQFqQD6UEGkBFkAplBFpAVZAPZQQ6QE+QCuUEekBfkA/lBAVAQFAKFQRFQFBQDxUEJUBKUAqVBGVAWlAPlQQVQEVQClUEVUBVUA9VBDVAT1AK1QQxgAAcEIAEFaMAAFnCABwIQgQRkoAAVaEAHBjCBBWzgABd4wAcBCAEAECAQgTqgLqgH6oMGoCFoBBqDJqApaAaagxagJWgFWoM2oC1oB/4D7UEH0BF0Ap1BF9AVdAPdQQ/QE/QCvUEf0Bf0A/3BADAQxINBYDAYAoaCYWA4GAFGglFgNBgDxoJxYDyYACaCSWAymAKmgmlgOpgBZoJZYDaYA+aCeWA+WAAWgkVgMVgCloJlYDlYAVaCVWA1WAPWgnVgPdgANoJNYDPYAraCbWA72AF2gl1gN9gD9oJ9YD84AA6CQ+AwOAKOgmPgODgBToJT4DQ4A86Cc+A8uAAugkvgMrgCroJr4Dq4AW6CW+A2uAPugnvgPngAHoJH4DF4Ap6CZ+A5eAFeglfgNXgD3oJ34D34AD6CT+Az+AK+gm/gO/gBfoJf4Df4A/6CfyABJIIkEAeTweQwBUwJU8HUMA1MC9PB9DADzAgzwcwwC8wKs8HsMAfMCXPB3DAPzAvzwfywACwIC8HCsAgsCovB4rAELAlLwdKwDCwLy8HysAKsCCvByrAKrAqrweqwBqwJa8HaMAYxiEMCkpCCNGQgCznIQwGKUIIyVKAKNahDA5rQgjZ0oAs96MMAhhBACBGMYB1YF9aD9WED2BA2go1hE9gUNoPNYQvYEraCrWEb2Ba2g//B9rAD7Ag7wc6wC+wKu8HusAfsCXvB3rAP7Av7wf5wABwI4+EgOBgOgUPhMDgcjoAj4Sg4Go6BY+E4OB5OgBPhJDgZToFT4TQ4Hc6AM+EsOBvOgXPhPDgfLoAL4SK4GC6BS+EyuByugCvhKrgaroFr4Tq4Hm6AG+EmuBlugVvhNrgd7oA74S64G+6Be+E+uB8egAfhIXgYHoFH4TF4HJ6AJ+EpeBqegWfhOXgeXoAX4SV4GV6BV+E1eB3egDfhLXgb3oF34T14Hz6AD+Ej+Bg+gU/hM/gcvoAv4Sv4Gr6Bb+E7+B5+gB/hJ/gZfoFf4Tf4Hf6AP+Ev+Bv+gX/hP5gAE2ESjEPJUHKUAqVEqVBqlAalRelQepQBZUSZUGaUBWVF2VB2lAPlRLlQbpQH5UX5UH5UABVEhVBhVAQVRcVQcVQClUSlUGlUBpVF5VB5VAFVRJVQZVQFVUXVUHVUA9VEtVBtFEMYwhGBSEQhGjGIRRzikYBEJCEZKUhFGtKRgUxkIRs5yEUe8lGAQgQQRAhFqA6qi+qh+qgBaogaocaoCWqKmqHmqAVqiVqh1qgNaovaof9Qe9QBdUSdUGfUBXVF3VB31AP1RL1Qb9QH9UX9UH80AA1E8WgQGoyGoKFoGBqORqCRaBQajcagsWgcGo8moIloEpqMpqCpaBqajmagmWgWmo3moLloHpqPFqCFaBFajJagpWgZWo5WoJVoFVqN1qC1aB1ajzagjWgT2oy2oK1oG9qOdqCdaBfajfagvWgf2o8OoIPoEDqMjqCj6Bg6jk6gk+gUOo3OoLPoHDqPLqCL6BK6jK6gq+gauo5uoJvoFrqN7qC76B66jx6gh+gReoyeoKfoGXqOXqCX6BV6jd6gt+gdeo8+oI/oE/qMvqCv6Bv6jn6gn+gX+o3+oL/oH0pAiSgJxUXJouRRiihllCpKHaWJ0kbpovRRhihjlCnKHGWJskbZouxRjihnlCvKHeWJ8kb5ovxRgahgVCgqHBWJikbFouJRiahkVCoqHZWJykblovJRhahiVCmqHFWJqkbVoupRjahmVCuqHcUiLMIjIiIjKqIjJmIjLuIjIRIjKZIjJVIjLdIjIzIjK7IjJ3IjL/KjIAojEMEIRVFUJ6ob1YvqRw2ihlGjqHHUJGoaNYuaRy2illGrqHXUJmobtYv+i9pHHaKOUaeoc9Ql6hp1i7pHPaKeUa+od9Qn6hv1i/pHA6KBUXw0KBocDYmGRsOi4dGIaGQ0KhodjYnGRuOi8dGEaGI0KZocTYmmRtOi6dGMaGY0K5odzYnmRvOi+dGCaGG0KFocLYmWRsui5dGKaGW0KlodrYnWRuui9dGGaGO0KdocbYm2Rtui7dGOaGe0K9od7Yn2Rvui/dGB6GB0KDr8PwHwAKhFDAAAONu2bdu26z/bxrbLtm3btm3bts2HvtjR2LHY8diJ2MnYqdjp2JnY2di52PnYhdjF2KXY5diV2NXYtdj12I3Yzdit2O3Yndjd2L3Y/diD2MPYo9jj2JPY09iz2PPYi9jL2KvY69ib2NvYu9j72IfYx9in2OfYl9jX2LfY99iP2M/Yr9jv2J/Y39i/WFwsPpYQS4wlwZJiybDkWAosJZYKS42lwdJi6bD0WAYsI5YJy4xlwbJi2bDsWA4sJ5YLy43lwfJi+bD8WAGsIFYIK4wVwYpixbDiWAmsJFYKK42Vwcpi5bDyWAWsIlYJq4xVwapi1bDqWA2sJlYLq43Vwepi9bD6WAOsIdYIa4w1wZpizbDmWAusJdYKa421wdpi7bD2WAesI9YJ64x1wbpi3bDuWA+sJ9YLi2EYhmMERmIURmMMxmIcxmMCJmISJmMKpmIapmMGZmIWZmMO5mIe5mMBFmIAgxjCIqw31gfri/XD+mMDsIHYIGwwNgQbig3DhmMjsJHYKGw0NgYbi43DxmMTsInYJGwyNgWbik3DpmMzsJnYLGw2Ngebi83D5mMLsIXYImwxtgRbii3DlmMrsJXYKmw1tgZbi63D1mMbsI3YJmwztgXbim3DtmM7sJ3YLmw3tgfbi+3D9mMHsIPYIewwdgQ7ih3DjmMnsJPYKew0dgY7i53DzmMXsIvYJewydgW7il3DrmM3sJvYLew2dge7i93D7mMPsIfYI+wx9gR7ij3DnmMvsJfYK+w19gZ7i73D3mMfsI/YJ+wz9gX7in3DvmM/sJ/YL+w39gf7i/3D4rB4LAFLxJLgSfFkeHI8BZ4ST4WnxtPgafF0eHo8A54Rz4RnxrPgWfFseHY8B54Tz4XnxvPgefF8eH68AF4QL4QXxovgRfFieHG8BF4SL4WXxsvgZfFyeHm8Al4Rr4RXxqvgVfFqeHW8Bl4Tr4XXxuvgdfF6eH28Ad4Qb4Q3xpvgTfFmeHO8Bd4Sb4W3xtvgbfF2eHu8A94R74R3xrvgXfFueHe8B94T74XHcAzHcQIncQqncQZncQ7ncQEXcQmXcQVXcQ3XcQM3cQu3cQd3cQ/38QAPcYBDHOER3hvvg/fF++H98QH4QHwQPhgfgg/Fh+HD8RH4SHwUPhofg4/Fx+Hj8Qn4RHwSPhmfgk/Fp+HT8Rn4THwWPhufg8/F5+Hz8QX4QnwRvhhfgi/Fl+HL8RX4SnwVvhpfg6/F1+Hr8Q34RnwTvhnfgm/Ft+Hb8R34TnwXvhvfg+/F9+H78QP4QfwQfhg/gh/Fj+HH8RP4SfwUfho/g5/Fz+Hn8Qv4RfwSfhm/gl/Fr+HX8Rv4TfwWfhu/g9/F7+H38Qf4Q/wR/hh/gj/Fn+HP8Rf4S/wV/hp/g7/F3+Hv8Q/4R/wT/hn/gn/Fv+Hf8R/4T/wX/hv/g//F/+FxeDyegCfiSYikRDIiOZGCSEmkIlITaYi0RDoiPZGByEhkIjITWYisRDYiO5GDyEnkInITeYi8RD4iP1GAKEgUIgoTRYiiRDGiOFGCKEmUIkoTZYiyRDmiPFGBqEhUIioTVYiqRDWiOlGDqEnUImoTdYi6RD2iPtGAaEg0IhoTTYimRDOiOdGCaEm0IloTbYi2RDuiPdGB6Eh0IjoTXYiuRDeiO9GD6En0ImIERuAEQZAERdAEQ7AER/CEQIiERMiEQqiERuiEQZiERdiEQ7iER/hEQIQEICCBiIjoTfQh+hL9iP7EAGIgMYgYTAwhhhLDiOHECGIkMYoYTYwhxhLjiPHEBGIiMYmYTEwhphLTiOnEDGImMYuYTcwh5hLziPnEAmIhsYhYTCwhlhLLiOXECmIlsYpYTawh1hLriPXEBmIjsYnYTGwhthLbiO3EDmInsYvYTewh9hL7iP3EAeIgcYg4TBwhjhLHiOPECeIkcYo4TZwhzhLniPPEBeIicYm4TFwhrhLXiOvEDeImcYu4Tdwh7hL3iPvEA+Ih8Yh4TDwhnhLPiOfEC+Il8Yp4Tbwh3hLviPfEB+Ij8Yn4THwhvhLfiO/ED+In8Yv4Tfwh/hL/iDginkggEokkZFIyGZmcTEGmJFORqck0ZFoyHZmezEBmJDORmcksZFYyG5mdzEHmJHORuck8ZF4yH5mfLEAWJAuRhckiZFGyGFmcLEGWJEuRpckyZFmyHFmerEBWJCuRlckqZFWyGlmdrEHWJGuRtck6ZF2yHlmfbEA2JBuRjckmZFOyGdmcbEG2JFuRrck2ZFuyHdme7EB2JDuRnckuZFeyG9md7EH2JHuRMRIjcZIgSZIiaZIhWZIjeVIgRVIiZVIhVVIjddIgTdIibdIhXdIjfTIgQxKQkERkRPYm+5B9yX5kf3IAOZAcRA4mh5BDyWHkcHIEOZIcRY4mx5BjyXHkeHICOZGcRE4mp5BTyWnkdHIGOZOcRc4m55BzyXnkfHIBuZBcRC4ml5BLyWXkcnIFuZJcRa4m15BryXXkenIDuZHcRG4mt5BbyW3kdnIHuZPcRe4m95B7yX3kfvIAeZA8RB4mj5BHyWPkcfIEeZI8RZ4mz5BnyXPkefICeZG8RF4mr5BXyWvkdfIGeZO8Rd4m75B3yXvkffIB+ZB8RD4mn5BPyWfkc/IF+ZJ8Rb4m35BvyXfke/ID+ZH8RH4mv5BfyW/kd/IH+ZP8Rf4m/5B/yX9kHBlPJpCJZBIqKZWMSk6loFJSqajUVBoqLZWOSk9loDJSmajMVBYqK5WNyk7loHJSuajcVB4qL5WPyk8VoApShajCVBGqKFWMKk6VoEpSpajSVBmqLFWOKk9VoCpSlajKVBWqKlWNqk7VoGpStajaVB2qLlWPqk81oBpSjajGVBOqKdWMak61oFpSrajWVBuqLdWOak91oDpSnajOVBeqK9WN6k71oHpSvagYhVE4RVAkRVE0xVAsxVE8JVAiJVEypVAqpVE6ZVAmZVE25VAu5VE+FVAhBShIISqielN9qL5UP6o/NYAaSA2iBlNDqKHUMGo4NYIaSY2iRlNjqLHUOGo8NYGaSE2iJlNTqKnUNGo6NYOaSc2iZlNzqLnUPGo+tYBaSC2iFlNLqKXUMmo5tYJaSa2iVlNrqLXUOmo9tYHaSG2iNlNbqK3UNmo7tYPaSe2idlN7qL3UPmo/dYA6SB2iDlNHqKPUMeo4dYI6SZ2iTlNnqLPUOeo8dYG6SF2iLlNXqKvUNeo6dYO6Sd2iblN3qLvUPeo+9YB6SD2iHlNPqKfUM+o59YJ6Sb2iXlNvqLfUO+o99YH6SH2iPlNfqK/UN+o79YP6Sf2iflN/qL/UPyqOiqcSqEQqCZ2UTkYnp1PQKelUdGo6DZ2WTkenpzPQGelMdGY6C52VzkZnp3PQOelcdG46D52XzkfnpwvQBelCdGG6CF2ULkYXp0vQJelSdGm6DF2WLkeXpyvQFelKdGW6Cl2VrkZXp2vQNeladG26Dl2XrkfXpxvQDelGdGO6Cd2UbkY3p1vQLelWdGu6Dd2Wbke3pzvQHelOdGe6C92V7kZ3p3vQPeledIzGaJwmaJKmaJpmaJbmaJ4WaJGWaJlWaJXWaJ02aJO2aJt2aJf2aJ8O6JAGNKQRHdG96T50X7of3Z8eQA+kB9GD6SH0UHoYPZweQY+kR9Gj6TH0WHocPZ6eQE+kJ9GT6Sn0VHoaPZ2eQc+kZ9Gz6Tn0XHoePZ9eQC+kF9GL6SX0UnoZvZxeQa+kV9Gr6TX0WnodvZ7eQG+kN9Gb6S30VnobvZ3eQe+kd9G76T30XnofvZ8+QB+kD9GH6SP0UfoYfZw+QZ+kT9Gn6TP0WfocfZ6+QF+kL9GX6Sv0VfoafZ2+Qd+kb9G36Tv0XfoefZ9+QD+kH9GP6Sf0U/oZ/Zx+Qb+kX9Gv6Tf0W/od/Z7+QH+kP9Gf6S/0V/ob/Z3+Qf+kf9G/6T/0X/ofHUfH0wl0Ip2EScokY5IzKZiUTComNZOGScukY9IzGZiMTCYmM5OFycpkY7IzOZicTC4mN5OHycvkY/IzBZiCTCGmMFOEKcoUY4ozJZiSTCmmNFOGKcuUY8ozFZiKTCWmMlOFqcpUY6ozNZiaTC2mNlOHqcvUY+ozDZiGTCOmMdOEaco0Y5ozLZiWTCumNdOGacu0Y9ozHZiOTCemM9OF6cp0Y7ozPZieTC8mxmAMzhAMyVAMzTAMy3AMzwiMyEiMzCiMymiMzhiMyViMzTiMy3iMzwRMyAAGMoiJmN5MH6Yv04/pzwxgBjKDmMHMEGYoM4wZzoxgRjKjmNHMGGYsM44Zz0xgJjKTmMnMFGYqM42ZzsxgZjKzmNnMHGYuM4+ZzyxgFjKLmMXMEmYps4xZzqxgVjKrmNXMGmYts45Zz2xgNjKbmM3MFmYrs43ZzuxgdjK7mN3MHmYvs4/ZzxxgDjKHmMPMEeYoc4w5zpxgTjKnmNPMGeYsc445z1xgLjKXmMvMFeYqc425ztxgbjK3mNvMHeYuc4+5zzxgHjKPmMfME+Yp84x5zrxgXjKvmNfMG+Yt8455z3xgPjKfmM/MF+Yr8435zvxgfjK/mN/MH+Yv84+JY+KZBCaRScImZZOxydkUbEo2FZuaTcOmZdOx6dkMbEY2E5uZzcJmZbOx2dkcbE42F5ubzcPmZfOx+dkCbEG2EFuYLcIWZYuxxdkSbEm2FFuaLcOWZcux5dkKbEW2EluZrcJWZaux1dkabE22FlubrcPWZeux9dkGbEO2EduYbcI2ZZuxzdkWbEu2FduabcO2Zdux7dkObEe2E9uZ7cJ2Zbux3dkebE+2FxtjMRZnCZZkKZZmGZZlOZZnBVZkJVZmFVZlNVZnDdZkLdZmHdZlPdZnAzZkAQtZxEZsb7YP25ftx/ZnB7AD2UHsYHYIO5Qdxg5nR7Aj2VHsaHYMO5Ydx45nJ7AT2UnsZHYKO5Wdxk5nZ7Az2VnsbHYOO5edx85nF7AL2UXsYnYJu5Rdxi5nV7Ar2VXsanYNu5Zdx65nN7Ab2U3sZnYLu5Xdxm5nd7A72V3sbnYPu5fdx+5nD7AH2UPsYfYIe5Q9xh5nT7An2VPsafYMe5Y9x55nL7AX2UvsZfYKe5W9xl5nb7A32VvsbfYOe5e9x95nH7AP2UfsY/YJ+5R9xj5nX7Av2Vfsa/YN+5Z9x75nP7Af2U/sZ/YL+5X9xn5nf7A/2V/sb/YP+5f9x8ax8WwCm8gm4ZJyybjkXAouJZeKS82l4dJy6bj0XAYuI5eJy8xl4bJy2bjsXA4uJ5eLy83l4fJy+bj8XAGuIFeIK8wV4YpyxbjiXAmuJFeKK82V4cpy5bjyXAWuIleJq8xV4apy1bjqXA2uJleLq83V4epy9bj6XAOuIdeIa8w14ZpyzbjmXAuuJdeKa8214dpy7bj2XAeuI9eJ68x14bpy3bjuXA+uJ9eLi3EYh3MER3IUR3MMx3Icx3MCJ3ISJ3MKp3Iap3MGZ3IWZ3MO53Ie53MBF3KAgxziIq4314fry/Xj+nMDuIHcIG4wN4Qbyg3jhnMjuJHcKG40N4Yby43jxnMTuIncJG4yN4Wbyk3jpnMzuJncLG42N4eby83j5nMLuIXcIm4xt4Rbyi3jlnMruJXcKm41t4Zby63j1nMbuI3cJm4zt4Xbym3jtnM7uJ3cLm43t4fby+3j9nMHuIPcIe4wd4Q7yh3jjnMnuJPcKe40d4Y7y53jznMXuIvcJe4yd4W7yl3jrnM3uJvcLe42d4e7y93j7nMPuIfcI+4x94R7yj3jnnMvuJfcK+4194Z7y73j3nMfuI/cJ+4z94X7yn3jvnM/uJ/cL+4394f7y/3j4rh4LoFL5JLwSflkfHI+BZ+ST8Wn5tPwafl0fHo+A5+Rz8Rn5rPwWflsfHY+B5+Tz8Xn5vPwefl8fH6+AF+QL8QX5ovwRflifHG+BF+SL8WX5svwZflyfHm+Al+Rr8RX5qvwVflqfHW+Bl+Tr8XX5uvwdfl6fH2+Ad+Qb8Q35pvwTflmfHO+Bd+Sb8W35tvwbfl2fHu+A9+R78R35rvwXflufHe+B9+T78XHeIzHeYIneYqneYZneY7neYEXeYmXeYVXeY3XeYM3eYu3eYd3eY/3+YAPecBDHvER35vvw/fl+/H9+QH8QH4QP5gfwg/lh/HD+RH8SH4UP5ofw4/lx/Hj+Qn8RH4SP5mfwk/lp/HT+Rn8TH4WP5ufw8/l5/Hz+QX8Qn4Rv5hfwi/ll/HL+RX8Sn4Vv5pfw6/l1/Hr+Q38Rn4Tv5nfwm/lt/Hb+R38Tn4Xv5vfw+/l9/H7+QP8Qf4Qf5g/wh/lj/HH+RP8Sf4Uf5o/w5/lz/Hn+Qv8Rf4Sf5m/wl/lr/HX+Rv8Tf4Wf5u/w9/l7/H3+Qf8Q/4R/5h/wj/ln/HP+Rf8S/4V/5p/w7/l3/Hv+Q/8R/4T/5n/wn/lv/Hf+R/8T/4X/5v/w//l//FxfDyfwCfySYSkQjIhuZBCSCmkElILaYS0QjohvZBByChkEjILWYSsQjYhu5BDyCnkEnILeYS8Qj4hv1BAKCgUEgoLRYSiQjGhuFBCKCmUEkoLZYSyQjmhvFBBqChUEioLVYSqQjWhulBDqCnUEmoLdYS6Qj2hvtBAaCg0EhoLTYSmQjOhudBCaCm0EloLbYS2QjuhvdBB6Ch0EjoLXYSuQjehu9BD6Cn0EmICJuACIZACJdACI7ACJ/CCIIiCJMiCIqiCJuiCIZiCJdiCI7iCJ/hCIIQCEKCAhEjoLfQR+gr9hP7CAGGgMEgYLAwRhgrDhOHCCGGkMEoYLYwRxgrjhPHCBGGiMEmYLEwRpgrThOnCDGGmMEuYLcwR5grzhPnCAmGhsEhYLCwRlgrLhOXCCmGlsEpYLawR1grrhPXCBmGjsEnYLGwRtgrbhO3CDmGnsEvYLewR9gr7hP3CAeGgcEg4LBwRjgrHhOPCCeGkcEo4LZwRzgrnhPPCBeGicEm4LFwRrgrXhOvCDeGmcEu4LdwR7gr3hPvCA+Gh8Eh4LDwRngrPhOfCC+Gl8Ep4LbwR3grvhPfCB+Gj8En4LHwRvgrfhO/CD+Gn8Ev4LfwR/gr/hDghXkgQEoUkYlIxmZhcTCGmFFOJqcU0YloxnZhezCBmFDOJmcUsYlYxm5hdzCHmFHOJucU8Yl4xn5hfLCAWFAuJhcUiYlGxmFhcLCGWFEuJpcUyYlmxnFherCBWFCuJlcUqYlWxmlhdrCHWFGuJtcU6Yl2xnlhfbCA2FBuJjcUmYlOxmdhcbCG2FFuJrcU2Yluxndhe7CB2FDuJncUuYlexm9hd7CH2FHuJMRETcZEQSZESaZERWZETeVEQRVESZVERVVETddEQTdESbdERXdETfTEQQxGIUERiJPYW+4h9xX5if3GAOFAcJA4Wh4hDxWHicHGEOFIcJY4Wx4hjxXHieHGCOFGcJE4Wp4hTxWnidHGGOFOcJc4W54hzxXnifHGBuFBcJC4Wl4hLxWXicnGFuFJcJa4W14hrxXXienGDuFHcJG4Wt4hbxW3idnGHuFPcJe4W94h7xX3ifvGAeFA8JB4Wj4hHxWPicfGEeFI8JZ4Wz4hnxXPiefGCeFG8JF4Wr4hXxWvidfGGeFO8Jd4W74h3xXviffGB+FB8JD4Wn4hPxWfic/GF+FJ8Jb4W34hvxXfie/GD+FH8JH4Wv4hfxW/id/GH+FP8Jf4W/4h/xX9inBgvJoiJYhIpqZRMSi6lkFJKqaTUUhoprZROSi9lkDJKmaTMUhYpq5RNyi7lkHJKuaTcUh4pr5RPyi8VkApKhaTCUhGpqFRMKi6VkEpKpaTSUhmprFROKi9VkCpKlaTKUhWpqlRNqi7VkGpKtaTaUh2prlRPqi81kBpKjaTGUhOpqdRMai61kFpKraTWUhuprdROai91kDpKnaTOUhepq9RN6i71kHpKvaSYhEm4REikREm0xEisxEm8JEiiJEmypEiqpEm6ZEimZEm25Eiu5Em+FEihBCQoISmSekt9pL5SP6m/NEAaKA2SBktDpKHSMGm4NEIaKY2SRktjpLHSOGm8NEGaKE2SJktTpKnSNGm6NEOaKc2SZktzpLnSPGm+tEBaKC2SFktLpKXSMmm5tEJaKa2SVktrpLXSOmm9tEHaKG2SNktbpK3SNmm7tEPaKe2Sdkt7pL3SPmm/dEA6KB2SDktHpKPSMem4dEI6KZ2STktnpLPSOem8dEG6KF2SLktXpKvSNem6dEO6Kd2Sbkt3pLvSPem+9EB6KD2SHktPpKfSM+m59EJ6Kb2SXktvpLfSO+m99EH6KH2SPktfpK/SN+m79EP6Kf2Sfkt/pL/SPylOipcSpEQpiZxUTiYnl1PIKeVUcmo5jZxWTienlzPIGeVMcmY5i5xVziZnl3PIOeVccm45j5xXzifnlwvIBeVCcmG5iFxULiYXl0vIJeVScmm5jFxWLieXlyvIFeVKcmW5ilxVriZXl2vINeVacm25jlxXrifXlxvIDeVGcmO5idxUbiY3l1vILeVWcmu5jdxWbie3lzvIHeVOcme5i9xV7iZ3l3vIPeVeckzGZFwmZFKmZFpmZFbmZF4WZFGWZFlWZFXWZF02ZFO2ZFt2ZFf2ZF8O5FAGMpSRHMm95T5yX7mf3F8eIA+UB8mD5SHyUHmYPFweIY+UR8mj5THyWHmcPF6eIE+UJ8mT5SnyVHmaPF2eIc+UZ8mz5TnyXHmePF9eIC+UF8mL5SXyUnmZvFxeIa+UV8mr5TXyWnmdvF7eIG+UN8mb5S3yVnmbvF3eIe+Ud8m75T3yXnmfvF8+IB+UD8mH5SPyUfmYfFw+IZ+UT8mn5TPyWfmcfF6+IF+UL8mX5SvyVfmafF2+Id+Ub8m35TvyXfmefF9+ID+UH8mP5SfyU/mZ/Fx+Ib+UX8mv5TfyW/md/F7+IH+UP8mf5S/yV/mb/F3+If+Uf8m/5T/yX/mfHCfHywlyopxESaokU5IrKZSUSioltZJGSaukU9IrGZSMSiYls5JFyapkU7IrOZScSi4lt5JHyavkU/IrBZSCSiGlsFJEKaoUU4orJZSSSimltFJGKauUU8orFZSKSiWlslJFqapUU6orNZSaSi2ltlJHqavUU+orDZSGSiOlsdJEaao0U5orLZSWSiultdJGaau0U9orHZSOSiels9JF6ap0U7orPZSeSi8lpmAKrhAKqVAKrTAKq3AKrwiKqEiKrCiKqmiKrhiKqViKrTiKq3iKrwRKqAAFKkiJlN5KH6Wv0k/prwxQBiqDlMHKEGWoMkwZroxQRiqjlNHKGGWsMk4Zr0xQJiqTlMnKFGWqMk2ZrsxQZiqzlNnKHGWuMk+ZryxQFiqLlMXKEmWpskxZrqxQViqrlNXKGmWtsk5Zr2xQNiqblM3KFmWrsk3ZruxQdiq7lN3KHmWvsk/ZrxxQDiqHlMPKEeWockw5rpxQTiqnlNPKGeWsck45r1xQLiqXlMvKFeWqck25rtxQbiq3lNvKHeWuck+5rzxQHiqPlMfKE+Wp8kx5rrxQXiqvlNfKG+Wt8k55r3xQPiqflM/KF+Wr8k35rvxQfiq/lN/KH+Wv8k+JU+KVBCVRSaImVZOpydUUako1lZpaTaOmVdOp6dUMakY1k5pZzaJmVbOp2dUcak41l5pbzaPmVfOp+dUCakG1kFpYLaIWVYupxdUSakm1lFpaLaOWVcup5dUKakW1klpZraJWVaup1dUaak21llpbraPWVeup9dUGakO1kdpYbaI2VZupzdUWaku1ldpabaO2Vdup7dUOake1k9pZ7aJ2Vbup3dUeak+1lxpTMRVXCZVUKZVWGZVVOZVXBVVUJVVWFVVVNVVXDdVULdVWHdVVPdVXAzVUgQpVpEZqb7WP2lftp/ZXB6gD1UHqYHWIOlQdpg5XR6gj1VHqaHWMOlYdp45XJ6gT1UnqZHWKOlWdpk5XZ6gz1VnqbHWOOledp85XF6gL1UXqYnWJulRdpi5XV6gr1VXqanWNulZdp65XN6gb1U3qZnWLulXdpm5Xd6g71V3qbnWPulfdp+5XD6gH1UPqYfWIelQ9ph5XT6gn1VPqafWMelY9p55XL6gX1UvqZfWKelW9pl5Xb6g31VvqbfWOele9p95XH6gP1UfqY/WJ+lR9pj5XX6gv1Vfqa/WN+lZ9p75XP6gf1U/qZ/WL+lX9pn5Xf6g/1V/qb/WP+lf9p8ap8WqCmqgm0ZJqybTkWgotpZZKS62l0dJq6bT0WgYto5ZJy6xl0bJq2bTsWg4tp5ZLy63l0fJq+bT8WgGtoFZIK6wV0YpqxbTiWgmtpFZKK62V0cpq5bTyWgWtolZJq6xV0apq1bTqWg2tplZLq63V0epq9bT6WgOtodZIa6w10ZpqzbTmWgutpdZKa6210dpq7bT2Wgeto9ZJ66x10bpq3bTuWg+tp9ZLi2mYhmuERmqURmuMxmqcxmuCJmqSJmuKpmqapmuGZmqWZmuO5mqe5muBFmpAgxrSIq231kfrq/XT+msDtIHaIG2wNkQbqg3ThmsjtJHaKG20NkYbq43TxmsTtInaJG2yNkWbqk3TpmsztJnaLG22Nkebq83T5msLtIXaIm2xtkRbqi3TlmsrtJXaKm21tkZbq63T1msbtI3aJm2ztkXbqm3Ttms7tJ3aLm23tkfbq+3T9msHtIPaIe2wdkQ7qh3TjmsntJPaKe20dkY7q53TzmsXtIvaJe2ydkW7ql3Trms3tJvaLe22dke7q93T7msPtIfaI+2x9kR7qj3TnmsvtJfaK+219kZ7q73T3msftI/aJ+2z9kX7qn3Tvms/tJ/aL+239kf7q/3T4rR4LUFL1JLoSfVkenI9hZ5ST6Wn1tPoafV0eno9g55Rz6Rn1rPoWfVsenY9h55Tz6Xn1vPoefV8en69gF5QL6QX1ovoRfVienG9hF5SL6WX1svoZfVyenm9gl5Rr6RX1qvoVfVqenW9hl5Tr6XX1uvodfV6en29gd5Qb6Q31pvoTfVmenO9hd5Sb6W31tvobfV2enu9g95R76R31rvoXfVuene9h95T76XHdEzHdUIndUqndUZndU7ndUEXdUmXdUVXdU3XdUM3dUu3dUd3dU/39UAPdaBDHemR3lvvo/fV++n99QH6QH2QPlgfog/Vh+nD9RH6SH2UPlofo4/Vx+nj9Qn6RH2SPlmfok/Vp+nT9Rn6TH2WPlufo8/V5+nz9QX6Qn2Rvlhfoi/Vl+nL9RX6Sn2Vvlpfo6/V1+nr9Q36Rn2Tvlnfom/Vt+nb9R36Tn2Xvlvfo+/V9+n79QP6Qf2Qflg/oh/Vj+nH9RP6Sf2Uflo/o5/Vz+nn9Qv6Rf2Sflm/ol/Vr+nX9Rv6Tf2Wflu/o9/V7+n39Qf6Q/2R/lh/oj/Vn+nP9Rf6S/2V/lp/o7/V3+nv9Q/6R/2T/ln/on/Vv+nf9R/6T/2X/lv/o//V/+lxeryeoCfqSYykRjIjuZHCSGmkMlIbaYy0RjojvZHByGhkMjIbWYysRjYju5HDyGnkMnIbeYy8Rj4jv1HAKGgUMgobRYyiRjGjuFHCKGmUMkobZYyyRjmjvFHBqGhUMiobVYyqRjWjulHDqGnUMmobdYy6Rj2jvtHAaGg0MhobTYymRjOjudHCaGm0MlobbYy2RjujvdHB6Gh0MjobXYyuRjeju9HD6Gn0MmIGZuAGYZAGZdAGY7AGZ/CGYIiGZMiGYqiGZuiGYZiGZdiGY7iGZ/hGYIQGMKCBjMjobfQx+hr9jP7GAGOgMcgYbAwxhhrDjOHGCGOkMcoYbYwxxhrjjPHGBGOiMcmYbEwxphrTjOnGDGOmMcuYbcwx5hrzjPnGAmOhschYbCwxlhrLjOXGCmOlscpYbawx1hrrjPXGBmOjscnYbGwxthrbjO3GDmOnscvYbewx9hr7jP3GAeOgccg4bBwxjhrHjOPGCeOkcco4bZwxzhrnjPPGBeOiccm4bFwxrhrXjOvGDeOmccu4bdwx7hr3jPvGA+Oh8ch4bDwxnhrPjOfGC+Ol8cp4bbwx3hrvjPfGB+Oj8cn4bHwxvhrfjO/GD+On8cv4bfwx/hr/jDgj3kgwEo0kZlIzmZncTGGmNFOZqc00ZloznZnezGBmNDOZmc0sZlYzm5ndzGHmNHOZuc08Zl4zn5nfLGAWNAuZhc0iZlGzmFncLGGWNEuZpc0yZlmznFnerGBWNCuZlc0qZlWzmlndrGHWNGuZtc06Zl2znlnfbGA2NBuZjc0mZlOzmdncbGG2NFuZrc02Zluzndne7GB2NDuZnc0uZlezm9nd7GH2NHuZMRMzcZMwSZMyaZMxWZMzeVMwRVMyZVMxVVMzddMwTdMybdMxXdMzfTMwQxOY0ERmZPY2+5h9zX5mf3OAOdAcZA42h5hDzWHmcHOEOdIcZY42x5hjzXHmeHOCOdGcZE42p5hTzWnmdHOGOdOcZc4255hzzXnmfHOBudBcZC42l5hLzWXmcnOFudJcZa4215hrzXXmenODudHcZG42t5hbzW3mdnOHudPcZe4295h7zX3mfvOAedA8ZB42j5hHzWPmcfOEedI8ZZ42z5hnzXPmefOCedG8ZF42r5hXzWvmdfOGedO8Zd4275h3zXvmffOB+dB8ZD42n5hPzWfmc/OF+dJ8Zb4235hvzXfme/OD+dH8ZH42v5hfzW/md/OH+dP8Zf42/5h/zX9mnBlvJpiJZhIrqZXMSm6lsFJaqazUVhorrZXOSm9lsDJamazMVhYrq5XNym7lsHJauazcVh4rr5XPym8VsApahazCVhGrqFXMKm6VsEpapazSVhmrrFXOKm9VsCpalazKVhWrqlXNqm7VsGpatazaVh2rrlXPqm81sBpajazGVhOrqdXMam61sFparazWVhurrdXOam91sDpanazOVherq9XN6m71sHpavayYhVm4RVikRVm0xVisxVm8JViiJVmypViqpVm6ZVimZVm25Viu5Vm+FVihBSxoISuyelt9rL5WP6u/NcAaaA2yBltDrKHWMGu4NcIaaY2yRltjrLHWOGu8NcGaaE2yJltTrKnWNGu6NcOaac2yZltzrLnWPGu+tcBaaC2yFltLrKXWMmu5tcJaaa2yVltrrLXWOmu9tcHaaG2yNltbrK3WNmu7tcPaae2ydlt7rL3WPmu/dcA6aB2yDltHrKPWMeu4dcI6aZ2yTltnrLPWOeu8dcG6aF2yLltXrKvWNeu6dcO6ad2yblt3rLvWPeu+9cB6aD2yHltPrKfWM+u59cJ6ab2yXltvrLfWO+u99cH6aH2yPltfrK/WN+u79cP6af2yflt/rL/WPyvOircSrEQriZ3UTmYnt1PYKe1Udmo7jZ3WTmentzPYGe1MdmY7i53VzmZnt3PYOe1cdm47j53XzmfntwvYBe1CdmG7iF3ULmYXt0vYJe1Sdmm7jF3WLmeXtyvYFe1KdmW7il3VrmZXt2vYNe1adm27jl3XrmfXtxvYDe1GdmO7id3UbmY3t1vYLe1Wdmu7jd3Wbme3tzvYHe1Odme7i93V7mZ3t3vYPe1edszGbNwmbNKmbNpmbNbmbN4WbNGWbNlWbNXWbN02bNO2bNt2bNf2bN8O7NAGNrSRHdm97T52X7uf3d8eYA+0B9mD7SH2UHuYPdweYY+0R9mj7TH2WHucPd6eYE+0J9mT7Sn2VHuaPd2eYc+0Z9mz7Tn2XHuePd9eYC+0F9mL7SX2UnuZvdxeYa+0V9mr7TX2Wnudvd7eYG+0N9mb7S32Vnubvd3eYe+0d9m77T32Xnufvd8+YB+0D9mH7SP2UfuYfdw+YZ+0T9mn7TP2Wfucfd6+YF+0L9mX7Sv2Vfuafd2+Yd+0b9m37Tv2Xfuefd9+YD+0H9mP7Sf2U/uZ/dx+Yb+0X9mv7Tf2W/ud/d7+YH+0P9mf7S/2V/ub/d3+Yf+0f9m/7T/2X/ufHWfH2wl2op3ESeokc5I7KZyUTiontZPGSeukc9I7GZyMTiYns5PFyepkc7I7OZycTi4nt5PHyevkc/I7BZyCTiGnsFPEKeoUc4o7JZySTimntFPGKeuUc8o7FZyKTiWnslPFqepUc6o7NZyaTi2ntlPHqevUc+o7DZyGTiOnsdPEaeo0c5o7LZyWTiuntdPGaeu0c9o7HZyOTiens9PF6ep0c7o7PZyeTi8n5mAO7hAO6VAO7TAO63AO7wiO6EiO7CiO6miO7hiO6ViO7TiO63iO7wRO6AAHOsiJnN5OH6ev08/p7wxwBjqDnMHOEGeoM8wZ7oxwRjqjnNHOGGesM84Z70xwJjqTnMnOFGeqM82Z7sxwZjqznNnOHGeuM8+Z7yxwFjqLnMXOEmeps8xZ7qxwVjqrnNXOGmets85Z72xwNjqbnM3OFmers83Z7uxwdjq7nN3OHmevs8/Z7xxwDjqHnMPOEeeoc8w57pxwTjqnnNPOGeesc84571xwLjqXnMvOFeeqc8257txwbjq3nNvOHeeuc8+57zxwHjqPnMfOE+ep88x57rxwXjqvnNfOG+et885573xwPjqfnM/OF+er88357vxwfjq/nN/OH+ev88+Jc+KdBCfRSeImdZO5yd0Ubko3lZvaTeOmddO56d0MbkY3k5vZzeJmdbO52d0cbk43l5vbzePmdfO5+d0CbkG3kFvYLeIWdYu5xd0Sbkm3lFvaLeOWdcu55d0KbkW3klvZreJWdau51d0abk23llvbrePWdeu59d0GbkO3kdvYbeI2dZu5zd0Wbku3ldvabeO2ddu57d0Obke3k9vZ7eJ2dbu53d0ebk+3lxtzMRd3CZd0KZd2GZd1OZd3BVd0JVd2FVd1NVd3Ddd0Ldd2Hdd1Pdd3Azd0gQtd5EZub7eP29ft5/Z3B7gD3UHuYHeIO9Qd5g53R7gj3VHuaHeMO9Yd5453J7gT3UnuZHeKO9Wd5k53Z7gz3VnubHeOO9ed5853F7gL3UXuYneJu9Rd5i53V7gr3VXuaneNu9Zd5653N7gb3U3uZneLu9Xd5m53d7g73V3ubnePu9fd5+53D7gH3UPuYfeIe9Q95h53T7gn3VPuafeMe9Y95553L7gX3UvuZfeKe9W95l53b7g33VvubfeOe9e95953H7gP3UfuY/eJ+9R95j53X7gv3Vfua/eN+9Z95753P7gf3U/uZ/eL+9X95n53f7g/3V/ub/eP+9f958a58W6Cm+gm8ZJ6ybzkXgovpZfKS+2l8dJ66bz0XgYvo5fJy+xl8bJ62bzsXg4vp5fLy+3l8fJ6+bz8XgGvoFfIK+wV8Yp6xbziXgmvpFfKK+2V8cp65bzyXgWvolfJq+xV8ap61bzqXg2vplfLq+3V8ep69bz6XgOvodfIa+w18Zp6zbzmXguvpdfKa+218dp67bz2Xgevo9fJ6+x18bp63bzuXg+vp9fLi3mYh3uER3qUR3uMx3qcx3uCJ3qSJ3uKp3qap3uGZ3qWZ3uO53qe53uBF3rAgx7yIq+318fr6/Xz+nsDvIHeIG+wN8Qb6g3zhnsjvJHeKG+0N8Yb643zxnsTvIneJG+yN8Wb6k3zpnszvJneLG+2N8eb683z5nsLvIXeIm+xt8Rb6i3zlnsrvJXeKm+1t8Zb663z1nsbvI3eJm+zt8Xb6m3ztns7vJ3eLm+3t8fb6+3z9nsHvIPeIe+wd8Q76h3zjnsnvJPeKe+0d8Y7653zznsXvIveJe+yd8W76l3zrns3vJveLe+2d8e7693z7nsPvIfeI++x98R76j3znnsvvJfeK++198Z7673z3nsfvI/eJ++z98X76n3zvns/vJ/eL++398f76/3z4rx4L8FL9JL4Sf1kfnI/hZ/ST+Wn9tP4af10fno/g5/Rz+Rn9rP4Wf1sfnY/h5/Tz+Xn9vP4ef18fn6/gF/QL+QX9ov4Rf1ifnG/hF/SL+WX9sv4Zf1yfnm/gl/Rr+RX9qv4Vf1qfnW/hl/Tr+XX9uv4df16fn2/gd/Qb+Q39pv4Tf1mfnO/hd/Sb+W39tv4bf12fnu/g9/R7+R39rv4Xf1ufne/h9/T7+XHfMzHfcInfcqnfcZnfc7nfcEXfcmXfcVXfc3XfcM3fcu3fcd3fc/3/cAPfeBDH/mR39vv4/f1+/n9/QH+QH+QP9gf4g/1h/nD/RH+SH+UP9of44/1x/nj/Qn+RH+SP9mf4k/1p/nT/Rn+TH+WP9uf48/15/nz/QX+Qn+Rv9hf4i/1l/nL/RX+Sn+Vv9pf46/11/nr/Q3+Rn+Tv9nf4m/1t/nb/R3+Tn+Xv9vf4+/19/n7/QP+Qf+Qf9g/4h/1j/nH/RP+Sf+Uf9o/45/1z/nn/Qv+Rf+Sf9m/4l/1r/nX/Rv+Tf+Wf9u/49/17/n3/Qf+Q/+R/9h/4j/1n/nP/Rf+S/+V/9p/47/13/nv/Q/+R/+T/9n/4n/1v/nf/R/+T/+X/9v/4//1//lxfryf4Cf6SYKkQbIgeZAiSBmkClIHaYK0QbogfZAhyBhkCjIHWYKsQbYge5AjyBnkCnIHeYK8Qb4gf1AgKBgUCgoHRYKiQbGgeFAiKBmUCkoHZYKyQbmgfFAhqBhUCioHVYKqQbWgelAjqBnUCmoHdYK6Qb2gftAgaBg0ChoHTYKmQbOgedAiaBm0CloHbYK2QbugfdAh6Bh0CjoHXYKuQbege9Aj6Bn0CmIBFuABEZABFdABE7ABF/CBEIiBFMiBEqiBFuiBEZiBFdiBE7iBF/hBEIQBCGCAgijoHfQJ+gb9gv7BgGBgMCgYHAwJhgbDguHBiGBkMCoYHYwJxgbjgvHBhGBiMCmYHEwJpgbTgunBjGBmMCuYHcwJ5gbzgvnBgmBhsChYHCwJlgbLguXBimBlsCpYHawJ1gbrgvXBhmBjsCnYHGwJtgbbgu3BjmBnsCvYHewJ9gb7gv3BgeBgcCg4HBwJjgbHguPBieBkcCo4HZwJzgbngvPBheBicCm4HFwJrgbXguvBjeBmcCu4HdwJ7gb3gvvBg+Bh8Ch4HDwJngbPgufBi+Bl8Cp4HbwJ3gbvgvfBh+Bj8Cn4HHwJvgbfgu/Bj+Bn8Cv4HfwJ/gb/grggPkgIEoMkYdIwWZg8TBGmDFOFqcM0YdowXZg+zBBmDDOFmcMsYdYwW5g9zBHmDHOFucM8Yd4wX5g/LBAWDAuFhcMiYdGwWFg8LBGWDEuFpcMyYdmwXFg+rBBWDCuFlcMqYdWwWlg9rBHWDGuFtcM6Yd2wXlg/bBA2DBuFjcMmYdOwWdg8bBG2DFuFrcM2YduwXdg+7BB2DDuFncMuYdewW9g97BH2DHuFsRAL8ZAIyZAK6ZAJ2ZAL+VAIxVAK5VAJ1VAL9dAIzdAK7dAJ3dAL/TAIwxCEMERhFPYO+4R9w35h/3BAODAcFA4Oh4RDw2Hh8HBEODIcFY4Ox4Rjw3Hh+HBCODGcFE4Op4RTw2nh9HBGODOcFc4O54Rzw3nh/HBBuDBcFC4Ol4RLw2Xh8nBFuDJcFa4O14Rrw3Xh+nBDuDHcFG4Ot4Rbw23h9nBHuDPcFe4O94R7w33h/vBAeDA8FB4Oj4RHw2Ph8fBEeDI8FZ4Oz4Rnw3Ph+fBCeDG8FF4Or4RXw2vh9fBGeDO8Fd4O74R3w3vh/fBB+DB8FD4On4RPw2fh8/BF+DJ8Fb4O34Rvw3fh+/BD+DH8FH4Ov4Rfw2/h9/BH+DP8Ff4O/4R/w39hXBgfJoSJYRKQFCQDyUEKkBKkAqlBGpAWpAPpQQaQEWQCmUEWkBVkA9lBDpAT5AK5QR6QF+QD+UEBUBAUAoVBEVAUFAPFQQlQEpQCpUEZUBaUA+VBBVARVAKVQRVQFVQD1UENUBPUArVBHVAX1AP1QQPQEDQCjUET0BQ0A81BC9AStAKtQRvQFrQD7UEH0BF0Ap1BF9AVdAPdQQ/QE/QCMYABHBCABBSgAQNYwAEeCEAEEpCBAlSgAR0YwAQWsIEDXOABHwQgBABAgEAEeoM+oC/oB/qDAWAgGAQGgyFgKBgGhoMRYCQYBUaDMWAsGAfGgwlgIpgEJoMpYCqYBqaDGWAmmAVmgzlgLpgH5oMFYCFYBBaDJWApWAaWgxVgJVgFVoM1YC1YB9aDDWAj2AQ2gy1gK9gGtoMdYCfYBXaDPWAv2Af2gwPgIDgEDoMj4Cg4Bo6DE+AkOAVOgzPgLDgHzoML4CK4BC6DK+AquAaugxvgJrgFboM74C64B+6DB+AheAQegyfgKXgGnoMX4CV4BV6DN+AteAfegw/gI/gEPoMv4Cv4Br6DH+An+AV+gz/gL/gH4kA8SACJIAlMCpPB5DAFTAlTwdQwDUwL08H0MAPMCDPBzDALzAqzwewwB8wJc8HcMA/MC/PB/LAALAgLwcKwCCwKi8HisAQsCUvB0rAMLAvLwfKwAqwIK8HKsAqsCqvB6rAGrAlrwdqwDqwL68H6sAFsCBvBxrAJbAqbweawBWwJW8HWsA1sC9vB9rAD7Ag7wc6wC+wKu8HusAfsCXvBGMQgDglIQgrSkIEs5CAPBShCCcpQgSrUoA4NaEIL2tCBLvSgDwMYQgAhRDCCvWEf2Bf2g/3hADgQDoKD4RA4FA6Dw+EIOBKOgqPhGDgWjoPj4QQ4EU6Ck+EUOBVOg9PhDDgTzoKz4Rw4F86D8+ECuBAugovhErgULoPL4Qq4Eq6Cq+EauBaug+vhBrgRboKb4Ra4FW6D2+EOuBPugrvhHrgX7oP74QF4EB6Ch+EReBQeg8fhCXgSnoKn4Rl4Fp6D5+EFeBFegpfhFXgVXoPX4Q14E96Ct+EdeBfeg/fhA/gQPoKP4RP4FD6Dz+EL+BK+gq/hG/gWvoPv4Qf4EX6Cn+EX+BV+g9/hD/gT/oK/4R/4F/6DcTAeJsBEmAQlRclQcpQCpUSpUGqUBqVF6VB6lAFlRJlQZpQFZUXZUHaUA+VEuVBulAflRflQflQAFUSFUGFUBBVFxVBxVAKVRKVQaVQGlUXlUHlUAVVElVBlVAVVRdVQdVQD1US1UG1UB9VF9VB91AA1RI1QY9QENUXNUHPUArVErVBr1Aa1Re1Qe9QBdUSdUGfUBXVF3VB31AP1RL1QDGEIRwQiEYVoxCAWcYhHAhKRhGSkIBVpSEcGMpGFbOQgF3nIRwEKEUAQIRSh3qgP6ov6of5oABqIBqHBaAgaioah4WgEGolGodFoDBqLxqHxaAKaiCahyWgKmoqmoeloBpqJZqHZaA6ai+ah+WgBWogWocVoCVqKlqHlaAVaiVah1WgNWovWofVoA9qINqHNaAvairah7WgH2ol2od1oD9qL9qH96AA6iA6hw+gIOoqOoePoBDqJTqHT6Aw6i86h8+gCuoguocvoCrqKrqHr6Aa6iW6h2+gOuovuofvoAXqIHqHH6Al6ip6h5+gFeoleodfoDXqL3qH36AP6iD6hz+gL+oq+oe/oB/qJfqHf6A/6i/6hOBSPElAiShIljZJFyaMUUcooVZQ6ShOljdJF6aMMUcYoU5Q5yhJljbJF2aMcUc4oV5Q7yhPljfJF+aMCUcGoUFQ4KhIVjYpFxaMSUcmoVFQ6KhOVjcpF5aMKUcWoUlQ5qhJVjapF1aMaUc2oVlQ7qhPVjepF9aMGUcOoUdQ4ahI1jZpFzaMWUcuoVdQ6ahO1jdpF7aMOUceoU9Q56hJ1jbpF3aMeUc+oVxSLsAiPiIiMqIiOmIiNuIiPhEiMpEiOlEiNtEiPjMiMrMiOnMiNvMiPgiiMQAQjFEVR76hP1DfqF/WPBkQDo0HR4GhINDQaFg2PRkQjo1HR6GhMNDYaF42PJkQTo0nR5GhKNDWaFk2PZkQzo1nR7GhONDeaF82PFkQLo0XR4mhJtDRaFi2PVkQro1XR6mhNtDZaF62PNkQbo03R5mhLtDXaFm2PdkQ7o13R7mhPtDfaF+2PDkQHo0PR4ejIfwLgAbCOGAAA6NTZtm3btm3b+mfbSHKzbdu2bdtW273YkdjR2LHY8diJ2MnYqdjp2JnY2di52PnYhdjF2KXY5diV2NXYtdj12I3Yzdit2O3Yndjd2L3Y/diD2MPYo9jj2JPY09iz2PPYi9jL2KvY69ib2NvYu9j72IfYx9in2OfYl9jX2LfY99iP2M/Yr9jv2J/Y39i/WHwsIZYYS4IlxZJhybEUWByWEkuFpcbSYGmxdFh6LAOWEcuEZcayYFmxbFh2LAeWE8uF5cbyYHmxfFh+rABWECuEFcaKYEWxYlhxrARWEiuFlcbKYGWxclh5rAJWEauEVcaqYFWxalh1rAZWE6uF1cbqYHWxelh9rAHWEGuENcaaYE2xZlhzrAXWEmuFtcbaYG2xdlh7rAPWEeuEdca6YF2xblh3rAfWE+uF9cb6YH2xflh/bAA2EBuEDcaGYEOxYdhwbAQ2EhuFjcbGYGOxcdh4bAI2EZuETcamYFOxadh0bAY2E4thGIZjBEZiFEZjDMZiHMZjAiZiEiZjCqZiGqZjBmZiFmZjDuZiHuZjARZiAIMYwiJsFjYbm4PNxeZh87EF2EJsEbYYW4ItxZZhy7EV2EpsFbYaW4OtxdZh67EN2EZsE7YZ24JtxbZh27Ed2E5sF7Yb24PtxfZh+7ED2EHsEHYYO4IdxY5hx7ET2EnsFHYaO4Odxc5h57EL2EXsEnYZu4Jdxa5h17Eb2E3sFnYbu4Pdxe5h97EH2EPsEfYYe4I9xZ5hz7EX2EvsFfYae4O9xd5h77EP2EfsE/YZ+4J9xb5h37Ef2E/sF/Yb+4P9xf5h8VgCloglwZPiyfDkeAo8Dk+Jp8JT42nwtHg6PD2eAc+IZ8Iz41nwrHg2PDueA8+J58Jz43nwvHg+PD9eAC+IF8IL40XwongxvDheAi+Jl8JL42Xwsng5vDxeAa+IV8Ir41Xwqng1vDpeA6+J18Jr43Xwung9vD7eAG+IN8Ib403wpngzvDneAm+Jt8Jb423wtng7vD3eAe+Id8I7413wrng3vDveA++J98J7433wvng/vD8+AB+ID8IH40PwofgwfDg+Ah+Jj8JH42Pwsfg4fDw+AZ+IT8In41Pwqfg0fDo+A5+Jx3AMx3ECJ3EKp3EGZ3EO53EBF3EJl3EFV3EN13EDN3ELt3EHd3EP9/EAD3GAQxzhET4Ln43Pwefi8/D5+AJ8Ib4IX4wvwZfiy/Dl+Ap8Jb4KX42vwdfi6/D1+AZ8I74J34xvwbfi2/Dt+A58J74L343vwffi+/D9+AH8IH4IP4wfwY/ix/Dj+An8JH4KP42fwc/i5/Dz+AX8In4Jv4xfwa/i1/Dr+A38Jn4Lv43fwe/i9/D7+AP8If4If4w/wZ/iz/Dn+Av8Jf4Kf42/wd/i7/D3+Af8I/4J/4x/wb/i3/Dv+A/8J/4L/43/wf/i//B4PAFPxJMQSYlkRHIiBRFHpCRSEamJNERaIh2RnshAZCQyEZmJLERWIhuRnchB5CRyEbmJPEReIh+RnyhAFCQKEYWJIkRRohhRnChBlCRKEaWJMkRZohxRnqhAVCQqEZWJKkRVohpRnahB1CRqEbWJOkRdoh5Rn2hANCQaEY2JJkRTohnRnGhBtCRaEa2JNkRboh3RnuhAdCQ6EZ2JLkRXohvRnehB9CR6Eb2JPkRfoh/RnxhADCQGEYOJIcRQYhgxnBhBjCRGEaOJMcRYYhwxnphATCQmEZOJKcRUYhoxnZhBzCRiBEbgBEGQBEXQBEOwBEfwhECIhETIhEKohEbohEGYhEXYhEO4hEf4RECEBCAggYiImEXMJuYQc4l5xHxiAbGQWEQsJpYQS4llxHJiBbGSWEWsJtYQa4l1xHpiA7GR2ERsJrYQW4ltxHZiB7GT2EXsJvYQe4l9xH7iAHGQOEQcJo4QR4ljxHHiBHGSOEWcJs4QZ4lzxHniAnGRuERcJq4QV4lrxHXiBnGTuEXcJu4Qd4l7xH3iAfGQeEQ8Jp4QT4lnxHPiBfGSeEW8Jt4Qb4l3xHviA/GR+ER8Jr4QX4lvxHfiB/GT+EX8Jv4Qf4l/RDyRQCQSScikZDIyOZmCjCNTkqnI1GQaMi2ZjkxPZiAzkpnIzGQWMiuZjcxO5iBzkrnI3GQeMi+Zj8xPFiALkoXIwmQRsihZjCxOliBLkqXI0mQZsixZjixPViArkpXIymQVsipZjaxO1iBrkrXI2mQdsi5Zj6xPNiAbko3IxmQTsinZjGxOtiBbkq3I1mQbsi3ZjmxPdiA7kp3IzmQXsivZjexO9iB7kr3I3mQfsi/Zj+xPDiAHkoPIweQQcig5jBxOjiBHkqPI0eQYciw5jhxPTiAnkpPIyeQUcio5jZxOziBnkjESI3GSIEmSImmSIVmSI3lSIEVSImVSIVVSI3XSIE3SIm3SIV3SI30yIEMSkJBEZETOImeTc8i55DxyPrmAXEguIheTS8il5DJyObmCXEmuIleTa8i15DpyPbmB3EhuIjeTW8it5DZyO7mD3EnuIneTe8i95D5yP3mAPEgeIg+TR8ij5DHyOHmCPEmeIk+TZ8iz5DnyPHmBvEheIi+TV8ir5DXyOnmDvEneIm+Td8i75D3yPvmAfEg+Ih+TT8in5DPyOfmCfEm+Il+Tb8i35DvyPfmB/Eh+Ij+TX8iv5DfyO/mD/En+In+Tf8i/5D8ynkwgE8kkVFIqGZWcSkHFUSmpVFRqKg2VlkpHpacyUBmpTFRmKguVlcpGZadyUDmpXFRuKg+Vl8pH5acKUAWpQlRhqghVlCpGFadKUCWpUlRpqgxVlipHlacqUBWpSlRlqgpVlapGVadqUDWpWlRtqg5Vl6pH1acaUA2pRlRjqgnVlGpGNadaUC2pVlRrqg3VlmpHtac6UB2pTlRnqgvVlepGdad6UD2pXlRvqg/Vl+pH9acGUAOpQdRgagg1lBpGDadGUCOpUdRoagw1lhpHjacmUBOpSdRkago1lZpGTadmUDOpGIVROEVQJEVRNMVQLMVRPCVQIiVRMqVQKqVROmVQJmVRNuVQLuVRPhVQIQUoSCEqomZRs6k51FxqHjWfWkAtpBZRi6kl1FJqGbWcWkGtpFZRq6k11FpqHbWe2kBtpDZRm6kt1FZqG7Wd2kHtpHZRu6k91F5qH7WfOkAdpA5Rh6kj1FHqGHWcOkGdpE5Rp6kz1FnqHHWeukBdpC5Rl6kr1FXqGnWdukHdpG5Rt6k71F3qHnWfekA9pB5Rj6kn1FPqGfWcekG9pF5Rr6k31FvqHfWe+kB9pD5Rn6kv1FfqG/Wd+kH9pH5Rv6k/1F/qHxVPJVCJVBI6KZ2MTk6noOPolHQqOjWdhk5Lp6PT0xnojHQmOjOdhc5KZ6Oz0znonHQuOjedh85L56Pz0wXognQhujBdhC5KF6OL0yXoknQpujRdhi5Ll6PL0xXoinQlujJdha5KV6Or0zXomnQtujZdh65L16Pr0w3ohnQjujHdhG5KN6Ob0y3olnQrujXdJq4t3Y5uT3egO9Kd6M50F7or3Y3uTvege9K96N50H7ov3Y/uTw+gB9KD6MH0EHooPYweTo+gR9Kj6NH0GHosPY4eT0+gJ9KT6Mn0FHoqPY2eTs+gZ9IxGqNxmqBJmqJpmqFZmqN5WqBFWqJlWqFVWqN12qBN2qJt2qFd2qN9OqBDGtCQRnREz6Jn03PoufQ8ej69gF5IL6IX00vopfQyejm9gl5Jr6JX02votfQ6ej29gd5Ib6I301vorfQ2eju9g95J76J303vovfQ+ej99gD5IH6IP00foo/Qx+jh9gj5Jn6JP02fos/Q5+jx9gb5IX6Iv01foq/Q1+jp9g75J36Jv03fou/Q9+j79gH5IP6If00/op/Qz+jn9gn5Jv6Jf02/ot/Q7+j39gf5If6I/01/or/Q3+jv9g/5J/6J/03/ov/Q/Op5OoBPpJExSJhmTnEnBxDEpmVRMaiYNk5ZJx6RnMjAZmUxMZiYLk5XJxmRncjA5mVxMbiYPk5fJx+RnCjAFmUJMYaYIU5QpxhRnSjAlmVJMaaYMU5Ypx5RnKjAVmUpMZaYKU5WpxlRnajA1mVpMbaYOU5epx9RnGjANmUZMY6YJ05RpxjRnWjAtmVZMa6YN05Zpx7RnOjAdmU5MZ6YL05XpxnRnejA9mV5Mb6YP05fpx/RnBjADmUHMYGYIM5QZxgxnRjAjmVHMaGYMM5YZx4xnJjATmUnMZGYKM5WZxkxnZjAzmRiDMThDMCRDMTTDMCzDMTwjMCIjMTKjMCqjMTpjMCZjMTbjMC7jMT4TMCEDGMggJmJmMbOZOcxcZh4zn1nALGQWMYuZJcxSZhmznFnBrGRWMauZNcxaZh2zntnAbGQ2MZuZLcxWZhuzndnB7GR2MbuZPcxeZh+znznAHGQOMYeZI8xR5hhznDnBnGROMaeZM8xZ5hxznrnAXGQuMZeZK8xV5hpznbnB3GRuMbeZO8xd5h5zn3nAPGQeMY+ZJ8xT5hnznHnBvGReMa+ZN8xb5h3znvnAfGQ+MZ+ZL8xX5hvznfnB/GR+Mb+ZP8xf5h8TzyQwiUwSNimbjE3OpmDj2JRsKjY1m4ZNy6Zj07MZ2IxsJjYzm4XNymZjs7M52JxsLjY3m4fNy+Zj87MF2IJsIbYwW4QtyhZji7Ml2JJsKbY0W4Yty5Zjy7MV2IpsJbYyW4WtylZjq7M12JpsLbY2W4ety9Zj67MN2IZsI7Yx24RtyjZjm7Mt2JZsK7Y124Zty7Zj27Md2I5sJ7Yz24XtynZju7M92J5sL7Y324fty/Zj+7MD2IHsIHYwO4Qdyg5jh7Mj2JHsKHY0O4Ydy45jx7MT2InsJHYyO4Wdyk5jp7Mz2JlsjMVYnCVYkqVYmmVYluVYnhVYkZVYmVVYldVYnTVYk7VYm3VYl/VYnw3YkAUsZBEbsbPY2ewcdi47j53PLmAXsovYxewSdim7jF3OrmBXsqvY1ewadi27jl3PbmA3spvYzewWdiu7jd3O7mB3srvY3ewedi+7j93PHmAPsofYw+wR9ih7jD3OnmBPsqfY0+wZ9ix7jj3PXmAvspfYy+wV9ip7jb3O3mBvsrfY2+wd9i57j73PPmAfso/Yx+wT9in7jH3OvmBfsq/Y1+wb9i37jn3PfmA/sp/Yz+wX9iv7jf3O/mB/sr/Y3+wf9i/7j41nE9hENgmXlEvGJedScHFcSi4Vl5pLw6Xl0nHpuQxcRi4Tl5nLwmXlsnHZuRxcTi4Xl5vLw+Xl8nH5uQJcQa4QV5grwhXlinHFuRJcSa4UV5orw5XlynHluQpcRa4SV5mrwlXlqnHVuRpcTa4WV5urw9Xl6nH1uQZcQ64R15hrwjXlmnHNuRZcS64V15prw7Xl2nHtuQ5cR64T15nrwnXlunHduR5cT64X15vrw/Xl+nH9uQHcQG4QN5gbwg3lhnHDuRHcSG4UN5obw43lxnHjuQncRG4SN5mbwk3lpnHTuRncTC7GYRzOERzJURzNMRzLcRzPCZzISZzMKZzKaZzOGZzJWZzNOZzLeZzPBVzIAQ5yiIu4Wdxsbg43l5vHzecWcAu5Rdxibgm3lFvGLedWcCu5Vdxqbg23llvHrec2cBu5Tdxmbgu3ldvGbed2cDu5Xdxubg+3l9vH7ecOcAe5Q9xh7gh3lDvGHedOcCe5U9xp7gx3ljvHnecucBe5S9xl7gp3lbvGXeducDe5W9xt7g53l7vH3ececA+5R9xj7gn3lHvGPedecC+5V9xr7g33lnvHvec+cB+5T9xn7gv3lfvGfed+cD+5X9xv7g/3l/vHxXMJXCKXhE/KJ+OT8yn4OD4ln4pPzafh0/Lp+PR8Bj4jn4nPzGfhs/LZ+Ox8Dj4nn4vPzefh8/L5+Px8Ab4gX4gvzBfhi/LF+OJ8Cb4kX4ovzZfhy/Ll+PJ8Bb4iX4mvzFfhq/LV+Op8Db4mX4uvzdfh6/L1+Pp8A74h34hvzDfhm/LN+OZ8C74l34pvzbfh2/Lt+PZ8B74j34nvzHfhu/Ld+O58D74n34vvzffh+/L9+P78AH4gP4gfzA/hh/LD+OH8CH4kP4ofzY/hx/Lj+PH8BH4iP4mfzE/hp/LT+On8DH4mH+MxHucJnuQpnuYZnuU5nucFXuQlXuYVXuU1XucN3uQt3uYd3uU93ucDPuQBD3nER/wsfjY/h5/Lz+Pn8wv4hfwifjG/hF/KL+OX8yv4lfwqfjW/hl/Lr+PX8xv4jfwmfjO/hd/Kb+O38zv4nfwufje/h9/L7+P38wf4g/wh/jB/hD/KH+OP8yf4k/wp/jR/hj/Ln+PP8xf4i/wl/jJ/hb/KX+Ov8zf4m/wt/jZ/h7/L3+Pv8w/4h/wj/jH/hH/KP+Of8y/4l/wr/jX/hn/Lv+Pf8x/4j/wn/jP/hf/Kf+O/8z/4n/wv/jf/h//L/+Pj+QQ+kU8iJBWSCcmFFEKckFJIJaQW0ghphXRCeiGDkFHIJGQWsghZhWxCdiGHkFPIJeQW8gh5hXxCfqGAUFAoJBQWighFhWJCcaGEUFIoJZQWyghlhXJCeaGCUFGoJFQWqghVhWpCdaGGUFOoJdQW6gh1hXpCfaGB0FBoJDQWmghNhWZCc6GF0FJoJbQW2ghthXZCe6GD0FHoJHQWughdhW5Cd6GH0FPoJfQW+gh9hX5Cf2GAMFAYJAwWhghDhWHCcGGEMFIYJYwWxghjhXHCeGGCMFGYJEwWpghThWnCdGGGMFOICZiAC4RACpRAC4zACpzAC4IgCpIgC4qgCpqgC4ZgCpZgC47gCp7gC4EQCkCAAhIiYZYwW5gjzBXmCfOFBcJCYZGwWFgiLBWWCcuFFcJKYZWwWlgjrBXWCeuFDcJGYZOwWdgibBW2CduFHcJOYZewW9gj7BX2CfuFA8JB4ZBwWDgiHBWOCceFE8JJ4ZRwWjgjnBXOCeeFC8JF4ZJwWbgiXBWuCdeFG8JN4ZZwW7gj3BXuCfeFB8JD4ZHwWHgiPBWeCc+FF8JL4ZXwWngjvBXeCe+FD8JH4ZPwWfgifBW+Cd+FH8JP4ZfwW/gj/BX+CfFCgpAoJBGTisnE5GIKMU5MKaYSU4tpxLRiOjG9mEHMKGYSM4tZxKxiNjG7mEPMKeYSc4t5xLxiPjG/WEAsKBYSC4tFxKJiMbG4WEIsKZYSS4tlxLJiObG8WEGsKFYSK4tVxKpiNbG6WEOsKdYSa4t1xLpiPbG+2EBsKDYSG4tNxKZiM7G52EJsKbYSW4ttxLZiO7G92EHsKHYSO4tdxK5iN7G72EPsKfYSe4t9xL5iP7G/OEAcKA4SB4tDxKHiMHG4OEIcKY4SR4tjxLHiOHG8OEGcKE4SJ4tTxKniNHG6OEOcKcZETMRFQiRFSqRFRmRFTuRFQRRFSZRFRVRFTdRFQzRFS7RFR3RFT/TFQAxFIEIRiZE4S5wtzhHnivPE+eICcaG4SFwsLhGXisvE5eIKcaW4SlwtrhHXiuvE9eIGcaO4SdwsbhG3itvE7eIOcae4S9wt7hH3ivvE/eIB8aB4SDwsHhGPisfE4+IJ8aR4SjwtnhHPiufE8+IF8aJ4SbwsXhGvitfE6+IN8aZ4S7wt3hHvivfE++ID8aH4SHwsPhGfis/E5+IL8aX4SnwtvhHfiu/E9+IH8aP4SfwsfhG/it/E7+IP8af4S/wt/hH/iv/EeDFBTBSTSEmlZFJyKYUUJ6WUUkmppTRSWimdlF7KIGWUMkmZpSxSVimblF3KIeWUckm5pTxSXimflF8qIBWUCkmFpSJSUamYVFwqIZWUSkmlpTJSWamcVF6qIFWUKkmVpSpSVamaVF2qIdWUakm1pTpSXameVF9qIDWUGkmNpSZSU6mZ1FxqIbWUWkmtpTZSW6md1F7qIHWUOkmdpS5SV6mb1F3qIfWUekm9pT5SX6mf1F8aIA2UBkmDpSHSUGmYNFwaIY2URkmjpTHSWGmcNF6aIE2UJkmTpSnSVGmaNF2aIc2UYhIm4RIhkRIl0RIjsRIn8ZIgiZIkyZIiqZIm6ZIhmZIl2ZIjuZIn+VIghRKQoISkSJolzZbmSHOledJ8aYG0UFokLZaWSEulZdJyaYW0UlolrZbWSGulddJ6aYO0UdokbZa2SFulbdJ2aYe0U9ol7Zb2SHulfdJ+6YB0UDokHZaOSEelY9Jx6YR0UjolnZbOSGelc9J56YJ0UbokXZauSFela9J16YZ0U7ol3ZbuSHele9J96YH0UHokPZaeSE+lZ9Jz6YX0UnolvZbeSG+ld9J76YP0UfokfZa+SF+lb9J36Yf0U/ol/Zb+SH+lf1K8lCAlSknkpHIyObmcQo6TU8qp5NRyGjmtnE5OL2eQM8qZ5MxyFjmrnE3OLueQc8q55NxyHjmvnE/OLxeQC8qF5MJyEbmoXEwuLpeQS8ql5NJyGbmsXE4uL1eQK8qV5MpyFbmqXE2uLteQa8q15NpyHbmuXE+uLzeQG8qN5MZyE7mp3ExuLreQW8qt5NZyG7mt3E5uL3eQO8qd5M5yF7mr3E3uLveQe8q95N5yH7mv3E/uLw+QB8qD5MHyEHmoPEweLo+QR8qj5NHyGHmsPE4eL0+QJ8qT5MnyFHmqPE2eLs+QZ8oxGZNxmZBJmZJpmZFZmZN5WZBFWZJlWZFVWZN12ZBN2ZJt2ZFd2ZN9OZBDGchQRnIkz5Jny3PkufI8eb68QF4oL5IXy0vkpfIyebm8Ql4pr5JXy2vktfI6eb28Qd4ob5I3y1vkrfI2ebu8Q94p75J3y3vkvfI+eb98QD4oH5IPy0fko/Ix+bh8Qj4pn5JPy2fks/I5+bx8Qb4oX5Ivy1fkq/I1+bp8Q74p35Jvy3fku/I9+b78QH4oP5Ify0/kp/Iz+bn8Qn4pv5Jfy2/kt/I7+b38Qf4of5I/y1/kr/I3+bv8Q/4p/5J/y3/kv/I/OV5OkBPlJEpSJZmSXEmhxCkplVRKaiWNklZJp6RXMigZlUxKZiWLklXJpmRXcig5lVxKbiWPklfJp+RXCigFlUJKYaWIUlQpphRXSigllVJKaaWMUlYpp5RXKigVlUpKZaWKUlWpplRXaig1lVpKbaWOUlepp9RXGigNlUZKY6WJ0lRppjRXWigtlVZKa6WN0lZpp7RXOigdlU5KZ6WL0lXppnRXeig9lV5Kb6WP0lfpp/RXBigDlUHKYGWIMlQZpgxXRigjlVHKaGWMMlYZp4xXJigTlUnKZGWKMlWZpkxXZigzlZiCKbhCKKRCKbTCKKzCKbwiKKIiKbKiKKqiKbpiKKZiKbbiKK7iKb4SKKECFKggJVJmKbOVOcpcZZ4yX1mgLFQWKYuVJcpSZZmyXFmhrFRWKauVNcpaZZ2yXtmgbFQ2KZuVLcpWZZuyXdmh7FR2KbuVPcpeZZ+yXzmgHFQOKYeVI8pR5ZhyXDmhnFROKaeVM8pZ5ZxyXrmgXFQuKZeVK8pV5ZpyXbmh3FRuKbeVO8pd5Z5yX3mgPFQeKY+VJ8pT5ZnyXHmhvFReKa+VN8pb5Z3yXvmgfFQ+KZ+VL8pX5ZvyXfmh/FR+Kb+VP8pf5Z8SryQoiUoSNamaTE2uplDj1JRqKjW1mkZNq6ZT06sZ1IxqJjWzmkXNqmZTs6s51JxqLjW3mkfNq+ZT86sF1IJqIbWwWkQtqhZTi6sl1JJqKbW0WkYtq5ZTy6sV1IpqJbWyWkWtqlZTq6s11JpqLbW2Wketq9ZT66sN1IZqI7Wx2kRtqjZTm6st1JZqK7W12kZtq7ZT26sd1I5qJ7Wz2kXtqnZTu6s91J5qL7W32kftq/ZT+6sD1IHqIHWwOkQdqg5Th6sj1JHqKHW0OkYdq45Tx6sT1InqJHWyOkWdqk5Tp6sz1JlqTMVUXCVUUqVUWmVUVuVUXhVUUZVUWVVUVdVUXTVUU7VUW3VUV/VUXw3UUAUqVJEaqbPU2eocda46T52vLlAXqovUxeoSdam6TF2urlBXqqvU1eoada26Tl2vblA3qpvUzeoWdau6Td2u7lB3qrvU3eoeda+6T92vHlAPqofUw+oR9ah6TD2unlBPqqfU0+oZ9ax6Tj2vXlAvqpfUy+oV9ap6Tb2u3lBvqrfU2+od9a56T72vPlAfqo/Ux+oT9an6TH2uvlBfqq/U1+ob9a36Tn2vflA/qp/Uz+oX9av6Tf2u/lB/qr/U3+of9a/6T41XE9RENYmWVEumJddSaHFaSi2VllpLo6XV0mnptQxaRi2TllnLomXVsmnZtRxaTi2XllvLo+XV8mn5tQJaQa2QVlgrohXVimnFtRJaSa2UVloro5XVymnltQpaRa2SVlmrolXVqmnVtRpaTa2WVluro9XV6mn1tQZaQ62R1lhrojXVmmnNtRZaS62V1lpro7XV2mnttQ5aR62T1lnronXVumndtR5aT62X1lvro/XV+mn9tQHaQG2QNlgbog3VhmnDtRHaSG2UNlobo43VxmnjtQnaRG2SNlmbok3VpmnTtRnaTC2mYRquERqpURqtMRqrcRqvCZqoSZqsKZqqaZquGZqpWZqtOZqreZqvBVqoAQ1qSIu0WdpsbY42V5unzdcWaAu1RdpibYm2VFumLddWaCu1VdpqbY22Vlunrdc2aBu1TdpmbYu2Vdumbdd2aDu1XdpubY+2V9un7dcOaAe1Q9ph7Yh2VDumHddOaCe1U9pp7Yx2VjunndcuaBe1S9pl7Yp2VbumXdduaDe1W9pt7Y52V7un3dceaA+1R9pj7Yn2VHumPddeaC+1V9pr7Y32Vnunvdc+aB+1T9pn7Yv2Vfumfdd+aD+1X9pv7Y/2V/unxWsJWqKWRE+qJ9OT6yn0OD2lnkpPrafR0+rp9PR6Bj2jnknPrGfRs+rZ9Ox6Dj2nnkvPrefR8+r59Px6Ab2gXkgvrBfRi+rF9OJ6Cb2kXkovrZfRy+rl9PJ6Bb2iXkmvrFfRq+rV9Op6Db2mXkuvrdfR6+r19Pp6A72h3khvrDfRm+rN9OZ6C72l3kpvrbfR2+rt9PZ6B72j3knvrHfRu+rd9O56D72n3kvvrffR++r99P76AH2gPkgfrA/Rh+rD9OH6CH2kPkofrY/Rx+rj9PH6BH2iPkmfrE/Rp+rT9On6DH2mHtMxHdcJndQpndYZndU5ndcFXdQlXdYVXdU1XdcN3dQt3dYd3dU93dcDPdSBDnWkR/osfbY+R5+rz9Pn6wv0hfoifbG+RF+qL9OX6yv0lfoqfbW+Rl+rr9PX6xv0jfomfbO+Rd+qb9O36zv0nfoufbe+R9+r79P36wf0g/oh/bB+RD+qH9OP6yf0k/op/bR+Rj+rn9PP6xf0i/ol/bJ+Rb+qX9Ov6zf0m/ot/bZ+R7+r39Pv6w/0h/oj/bH+RH+qP9Of6y/0l/or/bX+Rn+rv9Pf6x/0j/on/bP+Rf+qf9O/6z/0n/ov/bf+R/+r/9Pj9QQ9UU9iJDWSGcmNFEackdJIZaQ20hhpjXRGeiODkdHIZGQ2shhZjWxGdiOHkdPIZeQ28hh5jXxGfqOAUdAoZBQ2ihhFjWJGcaOEUdIoZZQ2yhhljXJGeaOCUdGoZFQ2qhhVjWpGdaOGUdOoZdQ26hh1jXpGfaOB0dBoZDQ2mhhNjWZGc6OF0dJoZbQ22hhtjXZGe6OD0dHoZHQ2uhhdjW5Gd6OH0dPoZfQ2+hh9jX5Gf2OAMdAYZAw2hhhDjWHGcGOEMdIYZYw2xhhjjXHGeGOCMdGYZEw2phhTjWnGdGOGMdOIGZiBG4RBGpRBG4zBGpzBG4IhGpIhG4qhGpqhG4ZhGpZhG47hGp7hG4ERGsCABjIiY5Yx25hjzDXmGfONBcZCY5Gx2FhiLDWWGcuNFcZKY5Wx2lhjrDXWGeuNDcZGY5Ox2dhibDW2GduNHcZOY5ex29hj7DX2GfuNA8ZB45Bx2DhiHDWOGceNE8ZJ45Rx2jhjnDXOGeeNC8ZF45Jx2bhiXDWuGdeNG8ZN45Zx27hj3DXuGfeNB8ZD45Hx2HhiPDWeGc+NF8ZL45Xx2nhjvDXeGe+ND8ZH45Px2fhifDW+Gd+NH8ZP45fx2/hj/DX+GfFGgpFoJDGTmsnM5GYKM85MaaYyU5tpzLRmOjO9mcHMaGYyM5tZzKxmNjO7mcPMaeYyc5t5zLxmPjO/WcAsaBYyC5tFzKJmMbO4WcIsaZYyS5tlzLJmObO8WcGsaFYyK5tVzKpmNbO6WcOsadYya5t1zLpmPbO+2cBsaDYyG5tNzKZmM7O52cJsabYyW5ttzLZmO7O92cHsaHYyO5tdzK5mN7O72cPsafYye5t9zL5mP7O/OcAcaA4yB5tDzKHmMHO4OcIcaY4yR5tjzLHmOHO8OcGcaE4yJ5tTzKnmNHO6OcOcacZMzMRNwiRNyqRNxmRNzuRNwRRNyZRNxVRNzdRNwzRNy7RNx3RNz/TNwAxNYEITmZE5y5xtzjHnmvPM+eYCc6G5yFxsLjGXmsvM5eYKc6W5ylxtrjHXmuvM9eYGc6O5ydxsbjG3mtvM7eYOc6e5y9xt7jH3mvvM/eYB86B5yDxsHjGPmsfM4+YJ86R5yjxtnjHPmufM8+YF86J5ybxsXjGvmtfM6+YN86Z5y7xt3jHvmvfM++YD86H5yHxsPjGfms/M5+YL86X5ynxtvjHfmu/M9+YH86P5yfxsfjG/mt/M7+YP86f5y/xt/jH/mv/MeDPBTDSTWEmtZFZyK4UVZ6W0UlmprTRWWiudld7KYGW0MlmZrSxWViubld3KYeW0clm5rTxWXiufld8qYBW0ClmFrSJWUauYVdwqYZW0SlmlrTJWWaucVd6qYFW0KlmVrSpWVauaVd2qYdW0alm1rTpWXaueVd9qYDW0GlmNrSZWU6uZ1dxqYbW0WlmtrTZWW6ud1d7qYHW0OlmdrS5WV6ub1d3qYfW0elm9rT5WX6uf1d8aYA20BlmDrSHWUGuYNdwaYY20RlmjrTHWWGucNd6aYE20JlmTrSnWVGuaNd2aYc20YhZm4RZhkRZl0RZjsRZn8ZZgiZZkyZZiqZZm6ZZhmZZl2ZZjuZZn+VZghRawoIWsyJplzbbmWHOtedZ8a4G10FpkLbaWWEutZdZya4W10lplrbbWWGutddZ6a4O10dpkbba2WFutbdZ2a4e109pl7bb2WHutfdZ+64B10DpkHbaOWEetY9Zx64R10jplnbbOWGetc9Z564J10bpkXbauWFeta9Z164Z107pl3bbuWHete9Z964H10HpkPbaeWE+tZ9Zz64X10nplvbbeWG+td9Z764P10fpkfba+WF+tb9Z364f10/pl/bb+WH+tf1a8lWAlWknspHYyO7mdwo6zU9qp7NR2Gjutnc5Ob2ewM9qZ7Mx2Fjurnc3Obuewc9q57Nx2Hjuvnc/ObxewC9qF7MJ2EbuoXcwubpewS9ql7NJ2GbusXc4ub1ewK9qV7Mp2FbuqXc2ubtewa9q17Np2HbuuXc+ubzewG9qN7MZ2E7up3cxubrewW9qt7NZ2G7ut3c5ub3ewO9qd7M52F7ur3c3ubvewe9q97N52H7uv3c/ubw+wB9qD7MH2EHuoPcwebo+wR9qj7NH2GHusPc4eb0+wJ9qT7Mn2FHuqPc2ebs+wZ9oxG7Nxm7BJm7Jpm7FZm7N5W7BFW7JlW7FVW7N127BN27Jt27Fd27N9O7BDG9jQRnZkz7Jn23PsufY8e769wF5oL7IX20vspfYye7m9wl5pr7JX22vstfY6e729wd5ob7I321vsrfY2e7u9w95p77J323vsvfY+e799wD5oH7IP20fso/Yx+7h9wj5pn7JP22fss/Y5+7x9wb5oX7Iv21fsq/Y1+7p9w75p37Jv23fsu/Y9+779wH5oP7If20/sp/Yz+7n9wn5pv7Jf22/st/Y7+739wf5of7I/21/sr/Y3+7v9w/5p/7J/23/sv/Y/O95OsBPtJE5SJ5mT3EnhxDkpnVROaieNk9ZJ56R3MjgZnUxOZieLk9XJ5mR3cjg5nVxObiePk9fJ5+R3CjgFnUJOYaeIU9Qp5hR3SjglnVJOaaeMU9Yp55R3KjgVnUpOZaeKU9Wp5lR3ajg1nVpObaeOU9ep59R3GjgNnUZOY6eJ09Rp5jR3WjgtnVZOa6eN09Zp57R3OjgdnU5OZ6eL09Xp5nR3ejg9nV5Ob6eP09fp5/R3BjgDnUHOYGeIM9QZ5gx3RjgjnVHOaGeMM9YZ54x3JjgTnUnOZGeKM9WZ5kx3ZjgznZiDObhDOKRDObTDOKzDObwjOKIjObKjOKqjObpjOKZjObbjOK7jOb4TOKEDHOggJ3JmObOdOc5cZ54z31ngLHQWOYudJc5SZ5mz3FnhrHRWOaudNc5aZ52z3tngbHQ2OZudLc5WZ5uz3dnh7HR2ObudPc5eZ5+z3zngHHQOOYedI85R55hz3DnhnHROOaedM85Z55xz3rngXHQuOZedK85V55pz3bnh3HRuObedO85d555z33ngPHQeOY+dJ85T55nz3HnhvHReOa+dN85b553z3vngfHQ+OZ+dL85X55vz3fnh/HR+Ob+dP85f558T7yQ4iU4SN6mbzE3upnDj3JRuKje1m8ZN66Zz07sZ3IxuJjezm8XN6mZzs7s53JxuLje3m8fN6+Zz87sF3IJuIbewW8Qt6hZzi7sl3JJuKbe0W8Yt65Zzy7sV3IpuJbeyW8Wt6lZzq7s13JpuLbe2W8et69Zz67sN3IZuI7ex28Rt6jZzm7st3JZuK7e128Zt67Zz27sd3I5uJ7ez28Xt6nZzu7s93J5uL7e328ft6/Zz+7sD3IHuIHewO8Qd6g5zh7sj3JHuKHe0O8Yd645zx7sT3InuJHeyO8Wd6k5zp7sz3JluzMVc3CVc0qVc2mVc1uVc3hVc0ZVc2VVc1dVc3TVc07Vc23Vc1/Vc3w3c0AUudJEbubPc2e4cd647z53vLnAXuovcxe4Sd6m7zF3urnBXuqvc1e4ad627zl3vbnA3upvcze4Wd6u7zd3u7nB3urvc3e4ed6+7z93vHnAPuofcw+4R96h7zD3unnBPuqfc0+4Z96x7zj3vXnAvupfcy+4V96p7zb3u3nBvurfc2+4d9657z73vPnAfuo/cx+4T96n7zH3uvnBfuq/c1+4b9637zn3vfnA/up/cz+4X96v7zf3u/nB/ur/c3+4f96/7z413E9xEN4mX1EvmJfdSeHFeSi+Vl9pL46X10nnpvQxeRi+Tl9nL4mX1snnZvRxeTi+Xl9vL4+X18nn5vQJeQa+QV9gr4hX1innFvRJeSa+UV9or45X1ynnlvQpeRa+SV9mr4lX1qnnVvRpeTa+WV9ur49X16nn1vQZeQ6+R19hr4jX1mnnNvRZeS6+V19pr47X12nntvQ5eR6+T19nr4nX1unndvR5eT6+X19vr4/X1+nn9vQHeQG+QN9gb4g31hnnDvRHeSG+UN9ob4431xnnjvQneRG+SN9mb4k31pnnTvRneTC/mYR7uER7pUR7tMR7rcR7vCZ7oSZ7sKZ7qaZ7uGZ7pWZ7tOZ7reZ7vBV7oAQ96yIu8Wd5sb44315vnzfcWeAu9Rd5ib4m31FvmLfdWeCu9Vd5qb4231lvnrfc2eBu9Td5mb4u31dvmbfd2eDu9Xd5ub4+319vn7fcOeAe9Q95h74h31DvmHfdOeCe9U95p74x31jvnnfcueBe9S95l74p31bvmXfdueDe9W95t745317vn3fceeA+9R95j74n31HvmPfdeeC+9V95r74331nvnvfc+eB+9T95n74v31fvmffd+eD+9X95v74/31/vnxXsJXqKXxE/qJ/OT+yn8OD+ln8pP7afx0/rp/PR+Bj+jn8nP7Gfxs/rZ/Ox+Dj+nn8vP7efx8/r5/Px+Ab+gX8gv7Bfxi/rF/OJ+Cb+kX8ov7Zfxy/rl/PJ+Bb+iX8mv7Ffxq/rV/Op+Db+mX8uv7dfx6/r1/Pp+A7+h38hv7Dfxm/rN/OZ+C7+l38pv7bfx2/rt/PZ+B7+j38nv7Hfxu/rd/O5+D7+n38vv7ffx+/r9/P7+AH+gP8gf7A/xh/rD/OH+CH+kP8of7Y/xx/rj/PH+BH+iP8mf7E/xp/rT/On+DH+mH/MxH/cJn/Qpn/YZn/U5n/cFX/QlX/YVX/U1X/cN3/Qt3/Yd3/U93/cDP/SBD33kR/4sf7Y/x5/rz/Pn+wv8hf4if7G/xF/qL/OX+yv8lf4qf7W/xl/rr/PX+xv8jf4mf7O/xd/qb/O3+zv8nf4uf7e/x9/r7/P3+wf8g/4h/7B/xD/qH/OP+yf8k/4p/7R/xj/rn/PP+xf8i/4l/7J/xb/qX/Ov+zf8m/4t/7Z/x7/r3/Pv+w/8h/4j/7H/xH/qP/Of+y/8l/4r/7X/xn/rv/Pf+x/8j/4n/7P/xf/qf/O/+z/8n/4v/7f/x//r//Pj/QQ/0U8SJA2SBcmDFEFckDJIFaQO0gRpg3RB+iBDkDHIFGQOsgRZg2xB9iBHkDPIFeQO8gR5g3xB/qBAUDAoFBQOigRFg2JB8aBEUDIoFZQOygRlg3JB+aBCUDGoFFQOqgRVg2pB9aBGUDOoFdQO6gR1g3pB/aBB0DBoFDQOmgRNg2ZB86BF0DJoFbQO2gRtg3ZB+6BD0DHoFHQOugRdg25B96BH0DPoFfQO+gR9g35B/2BAMDAYFAwOhgRDg2HB8GBEMDIYFYwOxgRjg3HB+GBCMDGYFEwOpgRTg2nB9GBGMDOIBViAB0RABlRAB0zABlzAB0IgBlIgB0qgBlqgB0ZgBlZgB07gBl7gB0EQBiCAAQqiYFYwO5gTzA3mBfODBcHCYFGwOFgSLA2WBcuDFcHKYFWwOlgTrA3WBeuDDcHGYFOwOdgSbA22BduDHcHOYFewO9gT7A32BfuDA8HB4FBwODgSHA2OBceDE8HJ4FRwOjgTnA3OBeeDC8HF4FJwObgSXA2uBdeDG8HN4FZwO7gT3A3uBfeDB8HD4FHwOHgSPA2eBc+DF8HL4FXwOngTvA3eBe+DD8HH4FPwOfgSfA2+Bd+DH8HP4FfwO/gT/A3+BfFBQpAYJAmThsnC5GGKMC5MGaYKU4dpwrRhujB9mCHMGGYKM4dZwqxhtjB7mCPMGeYKc4d5wrxhvjB/WCAsGBYKC4dFwqJhsbB4WCIsGZYKS4dlwrJhubB8WCGsGFYKK4dVwqphtbB6WCOsGdYKa4d1wrphvbB+2CBsGDYKG4dNwqZhs7B52CJsGbYKW4dtwrZhu7B92CHsGHYKO4ddwq5ht7B72CPsGfYKe4d9wr5hv7B/OCAcGA4KB4dDwqHhsHB4OCIcGY4KR4djwrHhuHB8OCGcGE4KJ4dTwqnhtHB6OCOcGcZCLMRDIiRDKqRDJmRDLuRDIRRDKZRDJVRDLdRDIzRDK7RDJ3RDL/TDIAxDEMIQhVE4K5wdzgnnhvPC+eGCcGG4KFwcLgmXhsvC5eGKcGW4KlwdrgnXhuvC9eGGcGO4Kdwcbgm3htvC7eGOcGe4K9wd7gn3hvvC/eGB8GB4KDwcHgmPhsfC4+GJ8GR4KjwdngnPhufC8+GF8GJ4KbwcXgmvhtfC6+GN8GZ4K7wd3gnvhvfC++GD8GH4KHwcPgmfhs/C5+GL8GX4Knwdvgnfhu/C9+GH8GP4Kfwcfgm/ht/C7+GP8Gf4K/wd/gn/hv/C+DAhTAyTgKQgGUgOUoA4kBKkAqlBGpAWpAPpQQaQEWQCmUEWkBVkA9lBDpAT5AK5QR6QF+QD+UEBUBAUAoVBEVAUFAPFQQlQEpQCpUEZUBaUA+VBBVARVAKVQRVQFVQD1UENUBPUArVBHVAX1AP1QQPQEDQCjUET0BQ0A81BC9AStAKtQRvQFrQD7UEH0BF0Ap1BF9AVdAPdQQ/QE/QCvUEf0Bf0A/3BADAQDAKDwRAwFAwDw8EIMBKMAqPBGDAWjAPjwQQwEUwCk8EUMBVMA9PBDDATxAAGcEAAElCABgxgAQd4IAARSEAGClCBBnRgABNYwAYOcIEHfBCAEAAAAQIRmAVmgzlgLpgH5oMFYCFYBBaDJWApWAaWgxVgJVgFVoM1YC1YB9aDDWAj2AQ2gy1gK9gGtoMdYCfYBXaDPWAv2Af2gwPgIDgEDoMj4Cg4Bo6DE+AkOAVOgzPgLDgHzoML4CK4BC6DK+AquAaugxvgJrgFboM74C64B+6DB+AheAQegyfgKXgGnoMX4CV4BV6DN+AteAfegw/gI/gEPoMv4Cv4Br6DH+An+AV+gz/gL/gH4kECSARJYFKYDCaHKWAcTAlTwdQwDUwL08H0MAPMCDPBzDALzAqzwewwB8wJc8HcMA/MC/PB/LAALAgLwcKwCCwKi8HisAQsCUvB0rAMLAvLwfKwAqwIK8HKsAqsCqvB6rAGrAlrwdqwDqwL68H6sAFsCBvBxrAJbAqbweawBWwJW8HWsA1sC9vB9rAD7Ag7wc6wC+wKu8HusAfsCXvB3rAP7Av7wf5wABwIB8HBcAgcCofB4XAEHAlHwdFwDBwLx8HxcAKcCCfByXAKnAqnwelwBpwJYxCDOCQgCSlIQwaykIM8FKAIJShDBapQgzo0oAktaEMHutCDPgxgCAGEEMEIzoKz4Rw4F86D8+ECuBAugovhErgULoPL4Qq4Eq6Cq+EauBaug+vhBrgRboKb4Ra4FW6D2+EOuBPugrvhHrgX7oP74QF4EB6Ch+EReBQeg8fhCXgSnoKn4Rl4Fp6D5+EFeBFegpfhFXgVXoPX4Q14E96Ct+EdeBfeg/fhA/gQPoKP4RP4FD6Dz+EL+BK+gq/hG/gWvoPv4Qf4EX6Cn+EX+BV+g9/hD/gT/oK/4R/4F/6D8TABJsIkKClKhpKjFCgOpUSpUGqUBqVF6VB6lAFlRJlQZpQFZUXZUHaUA+VEuVBulAflRflQflQAFUSFUGFUBBVFxVBxVAKVRKVQaVQGlUXlUHlUAVVElVBlVAVVRdVQdVQD1US1UG1UB9VF9VB91AA1RI1QY9QENUXNUHPUArVErVBr1Aa1Re1Qe9QBdUSdUGfUBXVF3VB31AP1RL1Qb9QH9UX9UH80AA1Eg9BgNAQNRcPQcDQCjUSj0Gg0Bo1F49B4NAFNRJPQZDQFTUXT0HQ0A81EMYQhHBGIRBSiEYNYxCEeCUhEEpKRglSkIR0ZyEQWspGDXOQhHwUoRABBhFCEZqHZaA6ai+ah+WgBWogWocVoCVqKlqHlaAVaiVah1WgNWovWofVoA9qINqHNaAvairah7WgH2ol2od1oD9qL9qH96AA6iA6hw+gIOoqOoePoBDqJTqHT6Aw6i86h8+gCuoguocvoCrqKrqHr6Aa6iW6h2+gOuovuofvoAXqIHqHH6Al6ip6h5+gFeoleodfoDXqL3qH36AP6iD6hz+gL+oq+oe/oB/qJfqHf6A/6i/6heJSAElGSKGmULEoepYjiopRRqih1lCZKG6WL0kcZooxRpihzlCXKGmWLskc5opxRrih3lCfKG+WL8kcFooJRoahwVCQqGhWLikclopJRqah0VCYqG5WLykcVoopRpahyVCWqGlWLqkc1oppRrah2VCeqG9WL6kcNooZRo6hx1CRqGjWLmkctopZRq6h11CZqG7WL2kcdoo5Rp6hz1CXqGnWLukc9op5Rr6h31CfqG/WL+kcDooHRoGhwNCQaGg2LhkcjopHRqGh0NCYaG42LxkcToonRpGhyNCWaGk2LpkczoplRLMIiPCIiMqIiOmIiNuIiPhIiMZIiOVIiNdIiPTIiM7IiO3IiN/IiPwqiMAIRjFAURbOi2dGcaG40L5ofLYgWRouixdGSaGm0LFoerYhWRqui1dGaaG20LlofbYg2RpuizdGWaGu0Ldoe7Yh2Rrui3dGeaG+0L9ofHYgORoeiw/8JgAfAOpIAAKC1bdu2dbVtm6ntNE1TG39tGzOztW3bts17sYOxQ7HDsSOxo7FjseOxE7GTsVOx07EzsbOxc7HzsQuxi7FLscuxK7GrsWux67EbsZuxW7HbsTuxu7F7sfuxB7GHsUexx7EnsaexZ7HnsRexl7FXsdexN7G3sXex97EPsY+xT7HPsS+xr7Fvse+xH7GfsV+x37E/sb+xf7FkWHIsBZYSS4WlxtJgabF0WHosA5YRy4RlxrJgWbFsWHYsB5YTy4XlxvJgebF8WH6sAFYQK4QVxopgRbFiWHGsBFYSK4WVxspgZbFyWHmsAlYRq4RVxqpgVbFqWHWsBlYTq4XVxupgdbF6WH2sAdYQa4Q1xppgTbFm2H9Yc6wF1hJrhbXG2mBtsXZYe6wD1hHrhHXGumBdsW5Yd6wH1hPrhfXG+mB9sX5Yf2wANhAbhA3GhmBDsWHYcGwENhIbhY3GxmBjsXHYeGwCFodNxCZhk7Ep2FRsGjYdm4HNxGZhs7E52FxsHjYfW4AtxBZhi7F4bAmWgC3FErFlWBK2HFuBrcRWYauxNdhabB22HtuAbcQ2YZuxLdhWbBsWwzAMxwiMxCiMxhiMxTiMxwRMxCRMxhRMxTRMxwzMxCzMxhzMxTzMxwIsxAAGMYRF2HZsB7YT24XtxvZge7F92H7sAHYQO4Qdxo5gR7Fj2HHsBHYSO4Wdxs5gZ7Fz2HnsAnYRu4Rdxq5gV7Fr2HXsBnYTu4Xdxu5gd7F72H3sAfYQe4Q9xp5gT7Fn2HPsBfYSe4W9xt5gb7F32HvsA/YR+4R9xr5gX7Fv2HfsB/YT+4X9xv5gf7F/WDI8OZ4CT4mnwlPjafC0eDo8PZ4Bz4hnwjPjWfCseDY8O54Dz4nnwnPjefC8eD48P14AL4gXwgvjRfCieDG8OF4CL4mXwkvjZfCyeDm8PF4Br4hXwivjVfCqeDW8Ol4Dr4nXwmvjdfC6eD28Pt4Ab4g3whvjTfCmeDP8P7w53gJvibfCW+Nt8LZ4O7w93gHviHfCO+Nd8K54N7w73gPviffCe+N98L54P7w/PgAfiA/CB+ND8KH4MHw4PgIfiY/CR+Nj8LH4OHw8PgGPwyfik/DJ+BR8Kj4Nn47PwGfis/DZ+Bx8Lj4Pn48vwBfii/DFeDy+BE/Al+KJ+DI8CV+Or8BX4qvw1fgafC2+Dl+Pb8A34pvwzfgWfCu+DY/hGI7jBE7iFE7jDM7iHM7jAi7iEi7jCq7iGq7jBm7iFm7jDu7iHu7jAR7iAIc4wiN8O74D34nvwnfje/C9+D58P34AP4gfwg/jR/Cj+DH8OH4CP4mfwk/jZ/Cz+Dn8PH4Bv4hfwi/jV/Cr+DX8On4Dv4nfwm/jd/C7+D38Pv4Af4g/wh/jT/Cn+DP8Of4Cf4m/wl/jb/C3+Dv8Pf4B/4h/wj/jX/Cv+Df8O/4D/4n/wn/jf/C/+D88GZGcSEGkJFIRqYk0RFoiHZGeyEBkJDIRmYksRFYiG5GdyEHkJHIRuYk8RF4iH5GfKEAUJAoRhYkiRFGiGFGcKEGUJEoRpYkyRFmiHFGeqEBUJCoRlYkqRFWiGlGdqEHUJGoRtYk6RF2iHlGfaEA0JBoRjYkmRFOiGfEf0ZxoQbQkWhGtiTZEW6Id0Z7oQHQkOhGdiS5EV6Ib0Z3oQfQkehG9iT5EX6If0Z8YQAwkBhGDiSHEUGIYMZwYQYwkRhGjiTHEWGIcMZ6YQMQRE4lJxGRiCjGVmEZMJ2YQM4lZxGxiDjGXmEfMJxYQC4lFxGIinlhCJBBLiURiGZFELCdWECuJVcRqYg2xllhHrCc2EBuJTcRmYguxldhGxAiMwAmCIAmKoAmGYAmO4AmBEAmJkAmFUAmN0AmDMAmLsAmHcAmP8ImACAlAQAIREbGd2EHsJHYRu4k9xF5iH7GfOEAcJA4Rh4kjxFHiGHGcOEGcJE4Rp4kzxFniHHGeuEBcJC4Rl4krxFXiGnGduEHcJG4Rt4k7xF3iHnGfeEA8JB4Rj4knxFPiGfGceEG8JF4Rr4k3xFviHfGe+EB8JD4Rn4kvxFfiG/Gd+EH8JH4Rv4k/xF/iH5GMTE6mIFOSqcjUZBoyLZmOTE9mIDOSmcjMZBYyK5mNzE7mIHOSucjcZB4yL5mPzE8WIAuShcjCZBGyKFmMLE6WIEuSpcjSZBmyLFmOLE9WICuSlcjKZBWyKlmNrE7WIGuStcjaZB2yLlmPrE82IBuSjcjGZBOyKdmM/I9sTrYgW5KtyNZkG7It2Y5sT3YgO5KdyM5kF7Ir2Y3sTvYge5K9yN5kH7Iv2Y/sTw4gB5KDyMHkEHIoOYwcTo4gR5KjyNHkGHIsOY4cT04g48iJ5CRyMjmFnEpOI6eTM8iZ5CxyNjmHnEvOI+eTC8iF5CJyMRlPLiETyKVkIrmMTCKXkyvIleQqcjW5hlxLriPXkxvIjeQmcjO5hdxKbiNjJEbiJEGSJEXSJEOyJEfypECKpETKpEKqpEbqpEGapEXapEO6pEf6ZECGJCAhiciI3E7uIHeSu8jd5B5yL7mP3E8eIA+Sh8jD5BHyKHmMPE6eIE+Sp8jT5BnyLHmOPE9eIC+Sl8jL5BXyKnmNvE7eIG+St8jb5B3yLnmPvE8+IB+Sj8jH5BPyKfmMfE6+IF+Sr8jX5BvyLfmOfE9+ID+Sn8jP5BfyK/mN/E7+IH+Sv8jf5B/yL/mPTEYlp1JQKalUVGoqDZWWSkelpzJQGalMVGYqC5WVykZlp3JQOalcVG4qD5WXykflpwpQBalCVGGqCFWUKkYVp0pQJalSVGmqDFWWKkeVpypQFalKVGWqClWVqkZVp2pQNalaVG2qDlWXqkfVpxpQDalGVGOqCdWUakb9RzWnWlAtqVZUa6oN1ZZqR7WnOlAdqU5UZ6oL1ZXqRnWnelA9qV5Ub6oP1ZfqR/WnBlADqUHUYGoINZQaRg2nRlAjqVHUaGoMNZYaR42nJlBx1ERqEjWZmkJNpaZR06kZ1ExqFjWbmkPNpeZR86kF1EJqEbWYiqeWUAnUUiqRWkYlUcupFdRKahW1mlpDraXWUeupDdRGahO1mdpCbaW2UTEKo3CKoEiKomiKoViKo3hKoERKomRKoVRKo3TKoEzKomzKoVzKo3wqoEIKUJBCVERtp3ZQO6ld1G5qD7WX2kftpw5QB6lD1GHqCHWUOkYdp05QJ6lT1GnqDHWWOkedpy5QF6lL1GXqCnWVukZdp25QN6lb1G3qDnWXukfdpx5QD6lH1GPqCfWUekY9p15QL6lX1GvqDfWWeke9pz5QH6lP1GfqC/WV+kZ9p35QP6lf1G/qD/WX+kclo5PTKeiUdCo6NZ2GTkuno9PTGeiMdCY6M52Fzkpno7PTOeicdC46N52Hzkvno/PTBeiCdCG6MF2ELkoXo4vTJeiSdCm6NF2GLkuXo8vTFeiKdCW6Ml2FrkpXo6vTNeiadC26Nl2HrkvXo+vTDeiGdCO6Md2Ebko3o/+jm9Mt6JZ0K7o13YZuS7ej29Md6I50J7oz3YXuSneju9M96J50L7o33YfuS/ej+9MD6IH0IHowPYQeSg+jh9Mj6JH0KHo0PYYeS4+jx9MT6Dh6Ij2JnkxPoafS0+jp9Ax6Jj2Lnk3PoefS8+j59AJ6Ib2IXkzH00voBHopnUgvo5Po5fQKeiW9il5Nr6HX0uvo9fQGeiO9id5Mb6G30tvoGI3ROE3QJE3RNM3QLM3RPC3QIi3RMq3QKq3ROm3QJm3RNu3QLu3RPh3QIQ1oSCM6orfTO+id9C56N72H3kvvo/fTB+iD9CH6MH2EPkofo4/TJ+iT9Cn6NH2GPkufo8/TF+iL9CX6Mn2Fvkpfo6/TN+ib9C36Nn2Hvkvfo+/TD+iH9CP6Mf2Efko/o5/TL+iX9Cv6Nf2Gfku/o9/TH+iP9Cf6M/2F/kp/o7/TP+if9C/6N/2H/kv/o5MxyZkUTEomFZOaScOkZdIx6ZkMTEYmE5OZycJkZbIx2ZkcTE4mF5ObycPkZfIx+ZkCTEGmEFOYKcIUZYoxxZkSTEmmFFOaKcOUZcox5ZkKTEWmElOZqcJUZaox1ZkaTE2mFlObqcPUZeox9ZkGTEOmEdOYacI0ZZox/zHNmRZMS6YV05ppw7Rl2jHtmQ5MR6YT05npwnRlujHdmR5MT6YX05vpw/Rl+jH9mQHMQGYQM5gZwgxlhjHDmRHMSGYUM5oZw4xlxjHjmQlMHDORmcRMZqYwU5lpzHRmBjOTmcXMZuYwc5l5zHxmAbOQWcQsZuKZJUwCs5RJZJYxScxyZgWzklnFrGbWMGuZdcx6ZgOzkdnEbGa2MFuZbUyMwRicIRiSoRiaYRiW4RieERiRkRiZURiV0RidMRiTsRibcRiX8RifCZiQAQxkEBMx25kdzE5mF7Ob2cPsZfYx+5kDzEHmEHOYOcIcZY4xx5kTzEnmFHOaOcOcZc4x55kLzEXmEnOZucJcZa4x15kbzE3mFnObucPcZe4x95kHzEPmEfOYecI8ZZ4xz5kXzEvmFfOaecO8Zd4x75kPzEfmE/OZ+cJ8Zb4x35kfzE/mF/Ob+cP8Zf4xydjkbAo2JZuKTc2mYdOy6dj0bAY2I5uJzcxmYbOy2djsbA42J5uLzc3mYfOy+dj8bAG2IFuILcwWYYuyxdjibAm2JFuKLc2WYcuy5djybAW2IluJrcxWYauy1djqbA22JluLrc3WYeuy9dj6bAO2IduIbcw2YZuyzdj/2OZsC7Yl24ptzbZh27Lt2PZsB7Yj24ntzHZhu7Ld2O5sD7Yn24vtzfZh+7L92P7sAHYgO4gdzA5hh7LD2OHsCHYkO4odzY5hx7Lj2PHsBDaOnchOYiezU9ip7DR2OjuDncnOYmezc9i57Dx2PruAXcguYhez8ewSNoFdyiayy9gkdjm7gl3JrmJXs2vYtew6dj27gd3IbmI3s1vYrew2NsZiLM4SLMlSLM0yLMtyLM8KrMhKrMwqrMpqrM4arMlarM06rMt6rM8GbMgCFrKIjdjt7A52J7uL3c3uYfey+9j97AH2IHuIPcweYY+yx9jj7An2JHuKPc2eYc+y59jz7AX2InuJvcxeYa+y19jr7A32JnuLvc3eYe+y99j77AP2IfuIfcw+YZ+yz9jn7Av2JfuKfc2+Yd+y79j37Af2I/uJ/cx+Yb+y39jv7A/2J/uL/c3+Yf+y/9hkXHIuBZeSS8Wl5tJwabl0XHouA5eRy8Rl5rJwWblsXHYuB5eTy8Xl5vJwebl8XH6uAFeQK8QV5opwRbliXHGuBFeSK8WV5spwZblyXHmuAleRq8RV5qpwVblqXHWuBleTq8XV5upwdbl6XH2uAdeQa8Q15ppwTblm3H9cc64F15JrxbXm2nBtuXZce64D15HrxHXmunBduW5cd64H15PrxfXm+nB9uX5cf24AN5AbxA3mhnBDuWHccG4EN5IbxY3mxnBjuXHceG4CF8dN5CZxk7kp3FRuGjedm8HN5GZxs7k53FxuHjefW8At5BZxi7l4bgmXwC3lErllXBK3nFvBreRWcau5Ndxabh23ntvAbeQ2cZu5LdxWbhsX4zAO5wiO5CiO5hiO5TiO5wRO5CRO5hRO5TRO5wzO5CzO5hzO5TzO5wIu5AAHOcRF3HZuB7eT28Xt5vZwe7l93H7uAHeQO8Qd5o5wR7lj3HHuBHeSO8Wd5s5wZ7lz3HnuAneRu8Rd5q5wV7lr3HXuBneTu8Xd5u5wd7l73H3uAfeQe8Q95p5wT7ln3HPuBfeSe8W95t5wb7l33HvuA/eR+8R95r5wX7lv3HfuB/eT+8X95v5wf7l/XDI+OZ+CT8mn4lPzafi0fDo+PZ+Bz8hn4jPzWfisfDY+O5+Dz8nn4nPzefi8fD4+P1+AL8gX4gvzRfiifDG+OF+CL8mX4kvzZfiyfDm+PF+Br8hX4ivzVfiqfDW+Ol+Dr8nX4mvzdfi6fD2+Pt+Ab8g34hvzTfimfDP+P74534JvybfiW/Nt+LZ8O74934HvyHfiO/Nd+K58N74734Pvyffie/N9+L58P74/P4AfyA/iB/ND+KH8MH44P4IfyY/iR/Nj+LH8OH48P4GP4yfyk/jJ/BR+Kj+Nn87P4Gfys/jZ/Bx+Lj+Pn88v4Bfyi/jFfDy/hE/gl/KJ/DI+iV/Or+BX8qv41fwafi2/jl/Pb+A38pv4zfwWfiu/jY/xGI/zBE/yFE/zDM/yHM/zAi/yEi/zCq/yGq/zBm/yFm/zDu/yHu/zAR/ygIc84iN+O7+D38nv4nfze/i9/D5+P3+AP8gf4g/zR/ij/DH+OH+CP8mf4k/zZ/iz/Dn+PH+Bv8hf4i/zV/ir/DX+On+Dv8nf4m/zd/i7/D3+Pv+Af8g/4h/zT/in/DP+Of+Cf8m/4l/zb/i3/Dv+Pf+B/8h/4j/zX/iv/Df+O/+D/8n/4n/zf/i//D8+mZBcSCGkFFIJqYU0QlohnZBeyCBkFDIJmYUsQlYhm5BdyCHkFHIJuYU8Ql4hn5BfKCAUFAoJhYUiQlGhmFBcKCGUFEoJpYUyQlmhnFBeqCBUFCoJlYUqQlWhmlBdqCHUFGoJtYU6Ql2hnlBfaCA0FBoJjYUmQlOhmfCf0FxoIbQUWgmthTZCW6Gd0F7oIHQUOgmdhS5CV6Gb0F3oIfQUegm9hT5CX6Gf0F8YIAwUBgmDhSHCUGGYMFwYIYwURgmjhTHCWGGcMF6YIMQJE4VJwmRhijBVmCZMF2YIM4VZwmxhjjBXmCfMFxYIC4VFwmIhXlgiJAhLhURhmZAkLBdWCCuFVcJqYY2wVlgnrBc2CBuFTcJmYYuwVdgmxARMwAVCIAVKoAVGYAVO4AVBEAVJkAVFUAVN0AVDMAVLsAVHcAVP8IVACAUgQAEJkbBd2CHsFHYJu4U9wl5hn7BfOCAcFA4Jh4UjwlHhmHBcOCGcFE4Jp4UzwlnhnHBeuCBcFC4Jl4UrwlXhmnBduCHcFG4Jt4U7wl3hnnBfeCA8FB4Jj4UnwlPhmfBceCG8FF4Jr4U3wlvhnfBe+CB8FD4Jn4Uvwlfhm/BdSCP8FH4Jv4U/wl/hn5BMTC6mEFOKqcTUYhoxrZhOTC9mEDOKmcTMYhYxq5hNzC7mEHOKucTcYh4xr5hPzC8WEAuKhcTCYhGxqFhMLC6WEEuKpcTSYhmxrFhOLC9WECuKlcTKYhWxqlhNrC7WEGuKtcTaYh2xrlhPrC82EBuKjcTGYhOxqdhM/E9sLrYQW4qtxNZiG7Gt2E5sL3YQO4qdxM5iF7Gr2E3sLvYQe4q9xN5iH7Gv2E/sLw4QB4qDxMHiEHGoOEwcLo4QR4qjxNHiGHGsOE4cL04Q48SJ4iRxsjhFnCpOE6eLM8SZ4ixxtjhHnCvOE+eLC8SF4iJxsRgvLhETxKViorhMTBKXiyvEleIqcbW4RlwrrhPXixvEjeImcbO4RdwqbhNjIibiIiGSIiXSIiOyIifyoiCKoiTKoiKqoibqoiGaoiXaoiO6oif6YiCGIhChiMRI3C7uEHeKu8Td4h5xr7hP3C8eEA+Kh8TD4hHxqHhMPC6eEE+Kp8TT4hnxrHhOPC9eEC+Kl8TL4hXxqnhNvC7eEG+Kt8Tb4h3xrnhPvC8+EB+Kj8TH4hPxqfhMfC6+EF+Kr8TX4hvxrfhOfC9+ED+Kn8TP4hfxq/hN/C7+EH+Kv8Tf4h/xr/hPTCYll1JIKaVUUmopjZRWSiellzJIGaVMUmYpi5RVyiZll3JIOaVcUm4pj5RXyifllwpIBaVCUmGpiFRUKiYVl0pIJaVSUmmpjFRWKieVlypIFaVKUmWpilRVqiZVl2pINaVaUm2pjlRXqifVlxpIDaVGUmOpidRUaib9JzWXWkgtpVZSa6mN1FZqJ7WXOkgdpU5SZ6mL1FXqJnWXekg9pV5Sb6mP1FfqJ/WXBkgDpUHSYGmINFQaJg2XRkgjpVHSaGmMNFYaJ42XJkhx0kRpkjRZmiJNlaZJ06UZ0kxpljRbmiPNleZJ86UF0kJpkbRYipeWSAnSUilRWiYlSculFdJKaZW0WlojrZXWSeulDdJGaZO0WdoibZW2STEJk3CJkEiJkmiJkViJk3hJkERJkmRJkVRJk3TJkEzJkmzJkVzJk3wpkEIJSFBCUiRtl3ZIO6Vd0m5pj7RX2iftlw5IB6VD0mHpiHRUOiYdl05IJ6VT0mnpjHRWOiedly5IF6VL0mXpinRVuiZdl25IN6Vb0m3pjnRXuifdlx5ID6VH0mPpifRUeiY9l15IL6VX0mvpjfRWeie9lz5IH6VP0mfpi/RV+iZ9l35IP6Vf0m/pj/RX+iclk5PLKeSUcio5tZxGTiunk9PLGeSMciY5s5xFzipnk7PLOeScci45t5xHzivnk/PLBeSCciG5sFxELioXk4vLJeSScim5tFxGLiuXk8vLFeSKciW5slxFripXk6vLNeSaci25tlxHrivXk+vLDeSGciO5sdxEbio3k/+Tm8st5JZyK7m13EZuK7eT28sd5I5yJ7mz3EXuKneTu8s95J5yL7m33EfuK/eT+8sD5IHyIHmwPEQeKg+Th8sj5JHyKHm0PEYeK4+Tx8sT5Dh5ojxJnixPkafK0+Tp8gx5pjxLni3PkefK8+T58gJ5obxIXizHy0vkBHmpnCgvk5Pk5fIKeaW8Sl4tr5HXyuvk9fIGeaO8Sd4sb5G3ytvkmIzJuEzIpEzJtMzIrMzJvCzIoizJsqzIqqzJumzIpmzJtuzIruzJvhzIoQxkKCM5krfLO+Sd8i55t7xH3ivvk/fLB+SD8iH5sHxEPiofk4/LJ+ST8in5tHxGPiufk8/LF+SL8iX5snxFvipfk6/LN+Sb8i35tnxHvivfk+/LD+SH8iP5sfxEfio/k5/LL+SX8iv5tfxGfiu/k9/LH+SP8if5s/xF/ip/k7/LP+Sf8i/5t/xH/iv/k5MpyZUUSkollZJaSaOkVdIp6ZUMSkYlk5JZyaJkVbIp2ZUcSk4ll5JbyaPkVfIp+ZUCSkGlkFJYKaIUVYopxZUSSkmllFJaKaOUVcop5ZUKSkWlklJZqaJUVaop1ZUaSk2lllJbqaPUVeop9ZUGSkOlkdJYaaI0VZopzZTmSnOlpdJSaa20VtoqbZX2Snulo9JR6ax0VroqXZXuSnelp9JT6a30VvoqfZX+Sn9loDJQGawMVoYqw5ThynBlpDJSGa2MVsYqY5XxynglTolTJimTlSnKVGWaMl2ZocxUZimzlTnKXGWeMl9ZoCxUFimLlXglXklQEpREJVFJUpKUFcoKZZWySlmjrFHWKeuUDcoGZZOySdmibFG2KdsUTMEVQiEVSqEVRmEVTuEVQREVSZEVRVEVTdEVQzEVS7EVR3EVT/GVQAkVoEAFKZGyXdmh7FR2KbuVPcpeZZ+yXzmgHFQOKYeVI8pR5ZhyXDmhnFROKaeVM8pZ5ZxyXrmgXFQuKZeVK8pV5ZpyXbmh3FRuKbeVO8pd5Z5yX3mgPFQeKY+VJ8pT5ZnyXHmhvFReKa+VN8pb5Z3yXvmgfFQ+KZ+VL8pX5ZvyXfmh/FR+Kb+VP8pf5Z+STE2uplBTqqnU1GoaNa2aTk2vZlAzqpnUzGoWNauaTc2u5lBzqrnU3GoeNa+aT82vFlALqoXUwmoRtahaTC2ullBLqKXUUmoZtYxaTi2nVlArqJXUSmoVtYpaTa2u1lBrqLXUWmodtY5aT62nNlAbqI3URmoTtYnaTG2mNlebqy3VlmprtbXaVm2rtlfbqx3VjmpntbPaVe2qdle7qz3VnmpvtbfaV+2r9lf7qwPVgepgdbA6VB2qDleHqyPVkepodbQ6Vh2rjlfHq3FqnDpJnaROUaeq09Tp6gx1pjpLna3OUeeqc9X56nx1obpIXaTGq/FqgpqgJqqJapKapK5QV6qr1NXqanWtuk5dr25QN6qb1M3qFnWruk2NqZiKq4RKqpRKq4zKqpzKq4IqqpIqq4qqqpqqq4ZqqpZqq47qqp7qq4EaqkCFKlIjdbu6Q92p7lJ3q3vUveo+db96QD2oHlIPq0fUo+ox9bh6Qj2pnlJPq2fUs+o59bx6Qb2oXlIvq1fUq+o19bp6Q72p3lJvq3fUu+o99b76QH2oPlIfq0/Up+oz9bn6Qn2pvlJfq2/Ut+o79b36Qf2oflI/q1/Ur+o39bv6Q/2p/lJ/q3/Uv+o/NZmWXEuhpdRSaam1NFpaLZ2WXsugZdQyaZm1LFpWLZuWXcuh5dRyabm1PFpeLZ+WXyugFdQKaYW1IlpRrZhWXCuhldRKaaW1MlpZrZxWXqugVdQqaZW1KlpVrZpWXauh1dRqabW1OlpdrZ5WX2ugNdQaaY21JlpTrZn2n9Zca6G11FpprbU2WlutndZe66B11DppnbUuWletm9Zd66H11HppvbU+Wl+tn9ZfG6AN1AZpg7Uh2lBtmDZcG6GN1EZpo7Ux2lhtnDZem6DFaRO1SdpkbYo2VZumTddmaDO1WdpsbY42V5unzdcWaAu1RdpiLV5boiVoS7VEbZmWpC3XVmgrtVXaam2NtlZbp63XNmgbtU3aZm2LtlXbpsU0TMM1QiM1SqM1RmM1TuM1QRM1SZM1RVM1TdM1QzM1S7M1R3M1T/O1QAs1oEENaZG2Xduh7dR2abu1PdpebZ+2XzugHdQOaYe1I9pR7Zh2XDuhndROaae1M9pZ7Zx2XrugXdQuaZe1K9pV7Zp2Xbuh3dRuabe1O9pd7Z52X3ugPdQeaY+1J9pT7Zn2XHuhvdReaa+1N9pb7Z32XvugfdQ+aZ+1L9pX7Zv2Xfuh/dR+ab+1P9pf7Z+WTE+up9BT6qn01HoaPa2eTk+vZ9Az6pn0zHoWPaueTc+u59Bz6rn03HoePa+eT8+vF9AL6oX0wnoRvaheTC+ul9BL6qX00noZvaxeTi+vV9Ar6pX0ynoVvapeTa+u19Br6rX02nodva5eT6+vN9Ab6o30xnoTvaneTP9Pb6630FvqrfTWehu9rd5Ob6930DvqnfTOehe9q95N76730HvqvfTeeh+9r95P768P0Afqg/TB+hB9qD5MH66P0Efqo/TR+hh9rD5OH69P0OP0ifokfbI+RZ+qT9On6zP0mfosfbY+R5+rz9Pn6wv0hfoifbEery/RE/SleqK+TE/Sl+sr9JX6Kn21vkZfq6/T1+sb9I36Jn2zvkXfqm/TYzqm4zqhkzql0zqjszqn87qgi7qky7qiq7qm67qhm7ql27qju7qn+3qghzrQoY70SN+u79B36rv03foefa++T9+vH9AP6of0w/oR/ah+TD+un9BP6qf00/oZ/ax+Tj+vX9Av6pf0y/oV/ap+Tb+u39Bv6rf02/od/a5+T7+vP9Af6o/0x/oT/an+TH+uv9Bf6q/01/ob/a3+Tn+vf9A/6p/0z/oX/av+Tf+u/9B/6r/03/of/a/+T09mJDdSGCmNVEZqI42R1khnpDcyGBmNTEZmI4uR1chmZDdyGDmNXEZuI4+R18hn5DcKGAWNQkZho4hR1ChmFDdKGCWNUkZpo4xR1ihnlDcqGBWNSkZlo4pR1ahmVDdqGDWNWkZto45R16hn1DcaGA2NRkZjo4nR1Ghm/Gc0N1oYLY1WRmujjdHWaGe0NzoYHY1ORmeji9HV6GZ0N3oYPY1eRm+jj9HX6Gf0NwYYA41BxmBjiDHUGGYMN0YYI41RxmhjjDHWGGeMNyYYccZEY5Ix2ZhiTDWmGdONGcZMY5Yx25hjzDXmGfONBcZCY5Gx2Ig3lhgJxlIj0VhmJBnLjRXGSmOVsdpYY6w11hnrjQ3GRmOTsdnYYmw1thkxAzNwgzBIgzJogzFYgzN4QzBEQzJkQzFUQzN0wzBMwzJswzFcwzN8IzBCAxjQQEZkbDd2GDuNXcZuY4+x19hn7DcOGAeNQ8Zh44hx1DhmHDdOGCeNU8Zp44xx1jhnnDcuGBeNS8Zl44px1bhmXDduGDeNW8Zt445x17hn3DceGA+NR8Zj44nx1HhmPDdeGC+NV8Zr443x1nhnvDc+GB+NT8Zn44vx1fhmfDd+GD+NX8Zv44/x1/hnJDOTmynMlGYqM7WZxkxrpjPTmxnMjGYmM7OZxcxqZjOzmznMnGYuM7eZx8xr5jPzmwXMgmYhs7BZxCxqFjOLmyXMkmYps7RZxixrljPLmxXMimYls7JZxaxqVjOrmzXMmmYts7ZZx6xr1jPrmw3MhmYjs7HZxGxqNjP/M5ubLcyWZiuztdnGbGu2M9ubHcyOZiezs9nF7Gp2M7ubPcyeZi+zt9nH7Gv2M/ubA8yB5iBzsDnEHGoOM4ebI8yR5ihztDnGHGuOM8ebE8w4c6I5yZxsTjGnmtPM6eYMc6Y5y5xtzjHnmvPM+eYCc6G5yFxsxptLzARzqZloLjOTzOXmCnOlucpcba4x15rrzPXmBnOjucncbG4xt5rbzJiJmbhJmKRJmbTJmKzJmbwpmKIpmbKpmKqpmbppmKZpmbbpmK7pmb4ZmKEJTGgiMzK3mzvMneYuc7e5x9xr7jP3mwfMg+Yh87B5xDxqHjOPmyfMk+Yp87R5xjxrnjPPmxfMi+Yl87J5xbxqXjOvmzfMm+Yt87Z5x7xr3jPvmw/Mh+Yj87H5xHxqPjOfmy/Ml+Yr87X5xnxrvjPfmx/Mj+Yn87P5xfxqfjO/mz/Mn+Yv87f5x/xr/jOTWcmtFFZKK5WV2kpjpbXSWemtDFZGK5OV2cpiZbWyWdmtHFZOK5eV28pj5bXyWfmtAlZBq5BV2CpiFbWKWcWtElZJq5RV2ipjlbXKWeWtClZFq5JV2apiVbWqWdWtGlZNq5ZV26pj1bXqWfWtBlZDq5HV2GpiNbWaWf9Zza0WVkurldXaamO1tdpZ7a0OVkerk9XZ6mJ1tbpZ3a0eVk+rl9Xb6mP1tfpZ/a0B1kBrkDXYGmINtYZZw60R1khrlDXaGmONtcZZ460JVpw10ZpkTbamWFOtadZ0a4Y105plzbbmWHOtedZ8a4G10FpkLbbirSVWgrXUSrSWWUnWcmuFtdJaZa221lhrrXXWemuDtdHaZG22tlhbrW1WzMIs3CIs0qIs2mIs1uIs3hIs0ZIs2VIs1dIs3TIs07Is23Is1/Is3wqs0AIWtJAVWdutHdZOa5e129pj7bX2WfutA9ZB65B12DpiHbWOWcetE9ZJ65R12jpjnbXOWeetC9ZF65J12bpiXbWuWdetG9ZN65Z127pj3bXuWfetB9ZD65H12HpiPbWeWc+tF9ZL65X12npjvbXeWe+tD9ZH65P12fpifbW+Wd+tH9ZP65f12/pj/bX+Wcns5HYKO6Wdyk5tp7HT2uns9HYGO6Odyc5sZ7Gz2tns7HYOO6edy85t57Hz2vns/HYBu6BdyC5sF7GL2sXs4nYJu6Rdyi5tl7HL2uXs8nYFu6Jdya5sV7Gr2tXs6nYNu6Zdy65t17Hr2vXs+nYDu6HdyG5sN7Gb2s3s/+zmdgu7pd3Kbm23sdva7ez2dge7o93J7mx3sbva3ezudg+7p93L7m33sfva/ez+9gB7oD3IHmwPsYfaw+zh9gh7pD3KHm2Pscfa4+zx9gQ7zp5oT7In21PsqfY0e7o9w55pz7Jn23PsufY8e769wF5oL7IX2/H2EjvBXmon2svsJHu5vcJeaa+yV9tr7LX2Onu9vcHeaG+yN9tb7K32NjtmYzZuEzZpUzZtMzZrczZvC7ZoS7ZsK7Zqa7ZuG7ZpW7ZtO7Zre7ZvB3ZoAxvayI7s7fYOe6e9y95t77H32vvs/fYB+6B9yD5sH7GP2sfs4/YJ+6R9yj5tn7HP2ufs8/YF+6J9yb5sX7Gv2tfs6/YN+6Z9y75t37Hv2vfs+/YD+6H9yH5sP7Gf2s/s5/YL+6X9yn5tv7Hf2u/s9/YH+6P9yf5sf7G/2t/s7/YP+6f9y/5t/7H/2v/sZE5yJ4WT0knlpHbSOGmddE56J4OT0cnkZHayOFmdbE52J4eT08nl5HbyOHmdfE5+p4BT0CnkFHaKOEWdYk5xp4RT0inllHbKOGWdck55p4JT0ankVHaqOFWdak51p4ZT06nl1HbqOHWdek59p4HT0GnkNHaaOE2dZs5/TnOnhdPSaeW0dto4bZ12Tnung9PR6eR0dro4XZ1uTnenh9PT6eX0dvo4fZ1+Tn9ngDPQGeQMdoY4Q51hznBnhDPSGeWMdsY4Y51xznhnghPnTHQmOZOdKc5UZ5oz3ZnhzHRmObOdOc5cZ54z31ngLHQWOYudeGeJk+AsdRKdZU6Ss9xZ4ax0VjmrnTXOWmeds97Z4Gx0NjmbnS3OVmebE3MwB3cIh3Qoh3YYh3U4h3cER3QkR3YUR3U0R3cMx3Qsx3Ycx3U8x3cCJ3SAAx3kRM52Z4ez09nl7Hb2OHudfc5+54Bz0DnkHHaOOEedY85x54Rz0jnlnHbOOGedc85554Jz0bnkXHauOFeda85154Zz07nl3HbuOHede85954Hz0HnkPHaeOE+dZ85z54Xz0nnlvHbeOG+dd85754Pz0fnkfHa+OF+db85354fz0/nl/Hb+OH+df04yN7mbwk3ppnJTu2nctG46N72bwc3oZnIzu1ncrG42N7ubw83p5nJzu3ncvG4+N79bwC3oFnILu0Xcom4xt7hbwi3plnJLu2Xcsm45t7xbwa3oVnIru1Xcqm41t7pbw63p1nJru3Xcum49t77bwG3oNnIbu03cpm4z9z+3udvCbem2clu7bdy2bju3vdvB7eh2cju7Xdyubje3u9vD7en2cnu7fdy+bj+3vzvAHegOcge7Q9yh7jB3uDvCHemOcke7Y9yx7jh3vDvBjXMnupPcye4Ud6o7zZ3uznBnurPc2e4cd647z53vLnAXuovcxW68u8RNcJe6ie4yN8ld7q5wV7qr3NXuGnetu85d725wN7qb3M3uFneru82NuZiLu4RLupRLu4zLupzLu4IrupIru4qrupqru4ZrupZru47rup7ru4EbusCFLnIjd7u7w93p7nJ3u3vcve4+d797wD3oHnIPu0fco+4x97h7wj3pnnJPu2fcs+4597x7wb3oXnIvu1fcq+4197p7w73p3nJvu3fcu+499777wH3oPnIfu0/cp+4z97n7wn3pvnJfu2/ct+479737wf3ofnI/u1/cr+4397v7w/3p/nJ/u3/cv+4/N5mX3EvhpfRSeam9NF5aL52X3svgZfQyeZm9LF5WL5uX3cvh5fRyebm9PF5eL5+X3yvgFfQKeYW9Il5Rr5hX3CvhlfRKeaW9Ml5Zr5xX3qvgVfQqeZW9Kl5Vr5pX3avh1fRqebW9Ol5dr55X32vgNfQaeY29Jl5Tr5n3n9fca+G19Fp5rb02Xluvndfe6+B19Dp5nb0uXlevm9fd6+H19Hp5vb0+Xl+vn9ffG+AN9AZ5g70h3lBvmDfcG+GN9EZ5o70x3lhvnDfem+DFeRO9Sd5kb4o31ZvmTfdmeDO9Wd5sb44315vnzfcWeAu9Rd5iL95b4iV4S71Eb5mX5C33VngrvVXeam+Nt9Zb5633NngbvU3eZm+Lt9Xb5sU8zMM9wiM9yqM9xmM9zuM9wRM9yZM9xVM9zdM9wzM9y7M9x3M9z/O9wAs94EEPeZG33dvh7fR2ebu9Pd5eb5+33zvgHfQOeYe9I95R75h33DvhnfROeae9M95Z75x33rvgXfQueZe9K95V75p33bvh3fRuebe9O95d755333vgPfQeeY+9J95T75n33HvhvfReea+9N95b75333vvgffQ+eZ+9L95X75v33fvh/fR+eb+9P95f75+XzE/up/BT+qn81H4aP62fzk/vZ/Az+pn8zH4WP6ufzc/u5/Bz+rn83H4eP6+fz8/vF/AL+oX8wn4Rv6hfzC/ul/BL+qX80n4Zv6xfzi/vV/Ar+pX8yn4Vv6pfza/u1/Br+rX82n4dv65fz6/vN/Ab+o38xn4Tv6nfzP/Pb+638Fv6rfzWfhu/rd/Ob+938Dv6nfzOfhe/q9/N7+738Hv6vfzefh+/r9/P7+8P8Af6g/zB/hB/qD/MH+6P8Ef6o/zR/hh/rD/OH+9P8OP8if4kf7I/xZ/qT/On+zP8mf4sf7Y/x5/rz/Pn+wv8hf4if7Ef7y/xE/ylfqK/zE/yl/sr/JX+Kn+1v8Zf66/z1/sb/I3+Jn+zv8Xf6m/zYz7m4z7hkz7l0z7jsz7n877gi77ky77iq77m677hm77l277ju77n+37ghz7woY/8yN/u7/B3+rv83f4ef6+/z9/vH/AP+of8w/4R/6h/zD/un/BP+qf80/4Z/6x/zj/vX/Av+pf8y/4V/6p/zb/u3/Bv+rf82/4d/65/z7/vP/Af+o/8x/4T/6n/zH/uv/Bf+q/81/4b/63/zn/vf/A/+p/8z/4X/6v/zf/u//B/+r/83/4f/6//z08WJA9SBCmDVEHqIE2QNkgXpA8yBBmDTEHmIEuQNcgWZA9yBDmDXEHuIE+QN8gX5A8KBAWDQkHhoEhQNCgWFA9KBCWDUkHpoExQNigXlA8qBBWDSkHloEpQNagWVA9qBDWDWkHtoE5QN6gX1A8aBA2DRkHjoEnQNGgW/Bc0D1oELYNWQeugTdA2aBe0DzoEHYNOQeegS9A16BZ0D3oEPYNeQe+gT9A36Bf0DwYEA4NBweBgSDA0GBYMD0YEI4NRwehgTDA2GBeMDyYEccHEYFIwOZgSTA2mBdODGcHMYFYwO5gTzA3mBfODBcHCYFGwOIgPlgQJwdIgMVgWJAXLgxXBymBVsDpYE6wN1gXrgw3BxmBTsDnYEmwNtgWxAAvwgAjIgArogAnYgAv4QAjEQArkQAnUQAv0wAjMwArswAncwAv8IAjCAAQwQEEUbA92BDuDXcHuYE+wN9gX7A8OBAeDQ8Hh4EhwNDgWHA9OBCeDU8Hp4ExwNjgXnA8uBBeDS8Hl4EpwNbgWXA9uBDeDW8Ht4E5wN7gX3A8eBA+DR8Hj4EnwNHgWPA9eBC+DV8Hr4E3wNngXvA8+BB+DT8Hn4EvwNfgWfA9+BD+DX8Hv4E/wN/gXJAuThynClGGqMHWYJkwbpgvThxnCjGGmMHOYJcwaZguzhznCnGGuMHeYJ8wb5gvzhwXCgmGhsHBYJCwaFguLhyXCkmGpsHRYJiwblgvLhxXCimGlsHJYJawaVgurhzXCmmGtsHZYJ6wb1gvrhw3ChmGjsHHYJGwaNgv/C5uHLcKWYauwddgmbBu2C9uHHcKOYaewc9gl7Bp2C7uHPcKeYa+wd9gn7Bv2C/uHA8KB4aBwcDgkHBoOC4eHI8KR4ahwdDgmHBuOC8eHE8K4cGI4KZwcTgmnhtPC6eGMcGY4K5wdzgnnhvPC+eGCcGG4KFwcxodLwoRwaZgYLguTwuXhinBluCpcHa4J14brwvXhhnBjuCncHG4Jt4bbwliIhXhIhGRIhXTIhGzIhXwohGIohXKohGqohXpohGZohXbohG7ohX4YhGEIQhiiMAq3hzvCneGucHe4J9wb7gv3hwfCg+Gh8HB4JDwaHguPhyfCk+Gp8HR4JjwbngvPhxfCi+Gl8HJ4JbwaXguvhzfCm+Gt8HZ4J7wb3gvvhw/Ch+Gj8HH4JHwaPgufhy/Cl+Gr8HX4Jnwbvgvfhx/Cj+Gn8HP4Jfwafgu/hz/Cn+Gv8Hf4J/wb/guTgeQgBUgJUoHUIA1IC9KB9CADyAgygcwgC8gKsoHsIAfICXKB3CAPyAvygfygACgICoHCoAgoCoqB4qAEKAlKgdKgDCgLyoHyoAKoCCqByqAKqAqqgeqgBqgJaoHaoA6oC+qB+qABaAgagcagCWgKmoH/QHPQArQErUBr0Aa0Be1Ae9ABdASdQGfQBXQF3UB30AP0BL1Ab9AH9AX9QH8wAAwEg8BgMAQMBcPAcDACjASjwGgwBowF48B4MAHEgYlgEpgMpoCpYBqYDmaAmWAWmA3mgLlgHpgPFoCFYBFYDOLBEpAAloJEsAwkgeVgBVgJVoHVYA1YC9aB9WAD2Ag2gc1gC9gKtoEYwAAOCEACCtCAASzgAA8EIAIJyEABKtCADgxgAgvYwAEu8IAPAhACACBAIALbwQ6wE+wCu8EesBfsA/vBAXAQHAKHwRFwFBwDx8EJcBKcAqfBGXAWnAPnwQVwEVwCl8EVcBVcA9fBDXAT3AK3wR1wF9wD98ED8BA8Ao/BE/AUPAPPwQvwErwCr8Eb8Ba8A+/BB/ARfAKfwRfwFXwD38EP8BP8Ar/BH/AX/APJYHKYAqaEqWBqmAamhelgepgBZoSZYGaYBWaF2WB2mAPmhLlgbpgH5oX5YH5YABaEhWBhWAQWhcVgcVgCloSlYGlYBpaF5WB5WAFWhJVgZVgFVoXVYHVYA9aEtWBtWAfWhfVgfdgANoSNYGPYBDaFzeB/sDlsAVvCVrA1bAPbwnawPewAO8JOsDPsArvCbrA77AF7wl6wN+wD+8J+sD8cAAfCQXAwHAKHwmFwOBwBR8JRcDQcA8fCcXA8nADj4EQ4CU6GU+BUOA1OhzPgTDgLzoZz4Fw4D86HC+BCuAguhvFwCUyAS2EiXAaT4HK4Aq6Eq+BquAauhevgergBboSb4Ga4BW6F22AMYhCHBCQhBWnIQBZykIcCFKEEZahAFWpQhwY0oQVt6EAXetCHAQwhgBAiGMHtcAfcCXfB3XAP3Av3wf3wADwID8HD8Ag8Co/B4/AEPAlPwdPwDDwLz8Hz8AK8CC/By/AKvAqvwevwBrwJb8Hb8A68C+/B+/ABfAgfwcfwCXwKn8Hn8AV8CV/B1/ANfAvfwffwA/wIP8HP8Av8Cr/B7/AH/Al/wd/wD/wL/8FkKDlKgVKiVCg1SoPSonQoPcqAMqJMKDPKgrKibCg7yoFyolwoN8qD8qJ8KD8qgAqiQqgwKoKKomKoOCqBSqJSqDQqg8qicqg8qoAqokqoMqqCqqJqqDqqgWqiWqg2qoPqonqoPmqAGqJGqDFqgpqiZug/1By1QC1RK9QatUFtUTvUHnVAHVEn1Bl1QV1RN9Qd9UA9US/UG/VBfVE/1B8NQAPRIDQYDUFD0TA0HI1AI9EoNBqNQWPRODQeTUBxaCKahCajKWgqmoamoxloJpqFZqM5aC6ah+ajBWghWoQWo3i0BCWgpSgRLUNJaDlagVaiVWg1WoPWonVoPdqANqJNaDPagraibSiGMIQjApGIQjRiEIs4xCMBiUhCMlKQijSkIwOZyEI2cpCLPOSjAIUIIIgQitB2tAPtRLvQbrQH7UX70H50AB1Eh9BhdAQdRcfQcXQCnUSn0Gl0Bp1F59B5dAFdRJfQZXQFXUXX0HV0A91Et9BtdAfdRffQffQAPUSP0GP0BD1Fz9Bz9AK9RK/Qa/QGvUXv0Hv0AX1En9Bn9AV9Rd/Qd/QD/US/0G/0B/1F/1CyKHmUIkoZpYpSR2mitFG6KH2UIcoYZYoyR1mirFG2KHuUI8oZ5YpyR3mivFG+KH9UICoYFYoKR0WiolGxqHhUIioZlYpKR2WislG5qHxUIaoYVYoqR1WiqlG1qHpUI6oZ1YpqR3WiulG9qH7UIGoYNYoaR02iplGz6L+oedQiahm1ilpHbaK2UbuofdQh6hh1ijpHXaKuUbeoe9Qj6hn1inpHfaK+Ub+ofzQgGhgNigZHQ6Kh0bBoeDQiGhmNikZHY6Kx0bhofDQhiosmRpOiydGUaGo0LZoezYhmRrOi2dGcaG40L5ofLYgWRouixVF8tCRKiJZGidGyKClaHq2IVkarotXRmmhttC5aH22INkabos3RlmhrtC2KRViER0RERlRER0zERlzER0IkRlIkR0qkRlqkR0ZkRlZkR07kRl7kR0EURiCCEYqiaHu0I9oZ7Yp2R3uivdG+aH904H8C4AGwjiQAAGia2rZt27Z1tW3btm3b/GvbmJmtbdtJ7sWEmBiTYnJMiakxLabHjJgZs2J2zIm5MS/mx4JYGAMxGEOxKHYrdjt2J3Y3di92P/Yg9jD2KPY49iT2NPYs9jz2IvYy9ir2OvYm9jb2LvY+9iH2MfYp9jn2JfY19i32PfYj9jP2K/Y79if2N/YvlhBLjCXF4rBkWDyWHEuBpcRSYamxNFhaLB2WHsuAZcQyYZmxLFhWLBuWHcuB5cRyYbmxPFheLB+WHyuAFcQKYYWxIlhRrBhWHCuBlcRKYaWxMlhZrBxWHquAVcQqYZWxKlhVrBpWHauB1cRqYbWxOlhdrB5WH2uANcQaYY2xJlhTrBnWHGuBtcRaYa2xNlhbrB3WHuuAdcQ6YZ2xLlhXrBvWHeuB9cT+w3phvbE+WF+sH9YfG4ANxAZhg7Eh2FBsGDYcG4GNxEZho7Ex2FhsHDYem4BNxCZhk7Ep2FRsGjYdm4HNxGZhs7E52FxsHjYfW4AtxBZhi7El2FJsGbYcW4GtxFZhq7E12FpsHbYe24BtxDZhm7Et2FZsG7Yd24HtxHZhu7E92F5sH7YfO4AdxA5hh7Ej2FHsGHYcO4GdxE5hp7Ez2FnsHHYeu4BdxC5hl7Er2FXsGnYdu4HdxGIYhuEYgZEYhdEYg7EYh/GYgImYhMmYgqmYhumYgZmYhdmYg7mYh/lYgIUYwCCGsAi7hd3G7mB3sXvYfewB9hB7hD3GnmBPsWfYc+wF9hJ7hb3G3mBvsXfYe+wD9hH7hH3GvmBfsW/Yd+wH9hP7hf3G/mB/sX9YApaIJWFxeDI8Hk+Op8BT4qnw1HgaPC2eDk+PZ8Az4pnwzHgWPCueDc+O58Bz4rnw3HgePC+eD8+PF8AL4oXwwngRvCheDC+Ol8BL4qXw0ngZvCxeDi+PV8Ar4pXwyngVvCpeDa+O18Br4rXw2ngdvC5eD6+PN8Ab4o3wxngTvCneDG+Ot8Bb4q3w1ngbvC3eDm+Pd8A74p3wzngXvCveDe+O98B74v/hvfDeeB+8L94P748PwAfig/DB+BB8KD4MH46PwEfio/DR+Bh8LD4OH49PwCfik/DJ+BR8Kj4Nn47PwGfis/DZ+Bx8Lj4Pn48vwBfii/DF+BJ8Kb4MX46vwFfiq/DV+Bp8Lb4OX49vwDfim/DN+BZ8K74N347vwHfiu/Dd+B58L74P348fwA/ih/DD+BH8KH4MP46fwE/ip/DT+Bn8LH4OP49fwC/il/DL+BX8Kn4Nv47fwG/iMRzDcZzASZzCaZzBWZzDeVzARVzCZVzBVVzDddzATdzCbdzBXdzDfTzAQxzgEEd4hN/Cb+N38Lv4Pfw+/gB/iD/CH+NP8Kf4M/w5/gJ/ib/CX+Nv8Lf4O/w9/gH/iH/CP+Nf8K/4N/w7/gP/if/Cf+N/8L/4PzwBT8ST8DgiGRFPJCdSECmJVERqIg2RlkhHpCcyEBmJTERmIguRlchGZCdyEDmJXERuIg+Rl8hH5CcKEAWJQkRhoghRlChGFCdKECWJUkRpogxRlihHlCcqEBWJSkRlogpRlahGVCdqEDWJWkRtog5Rl6hH1CcaEA2JRkRjognRlGhGNCdaEC2JVkRrog3RlmhHtCc6EB2JTkRnogvRlehGdCd6ED2J/4heRG+iD9GX6Ef0JwYQA4lBxGBiCDGUGEYMJ0YQI4lRxGhiDDGWGEeMJyYQE4lJxGRiCjGVmEZMJ2YQM4lZxGxiDjGXmEfMJxYQC4lFxGJiCbGUWEYsJ1YQK4lVxGpiDbGWWEesJzYQG4lNxGZiC7GV2EZsJ3YQO4ldxG5iD7GX2EfsJw4QB4lDxGHiCHGUOEYcJ04QJ4lTxGniDHGWOEecJy4QF4lLxGXiCnGVuEZcJ24QN4kYgRE4QRAkQRE0wRAswRE8IRAiIREyoRAqoRE6YRAmYRE24RAu4RE+ERAhAQhIICIibhG3iTvEXeIecZ94QDwkHhGPiSfEU+IZ8Zx4QbwkXhGviTfEW+Id8Z74QHwkPhGfiS/EV+Ib8Z34QfwkfhG/iT/EX+IfkUAkEklEHJmMjCeTkynIlGQqMjWZhkxLpiPTkxnIjGQmMjOZhcxKZiOzkznInGQuMjeZh8xL5iPzkwXIgmQhsjBZhCxKFiOLkyXIkmQpsjRZhixLliPLkxXIimQlsjJZhaxKViOrkzXImmQtsjZZh6xL1iPrkw3IhmQjsjHZhGxKNiObky3IlmQrsjXZhmxLtiPbkx3IjmQnsjPZhexKdiO7kz3InuR/ZC+yN9mH7Ev2I/uTA8iB5CByMDmEHEoOI4eTI8iR5ChyNDmGHEuOI8eTE8iJ5CRyMjmFnEpOI6eTM8iZ5CxyNjmHnEvOI+eTC8iF5CJyMbmEXEouI5eTK8iV5CpyNbmGXEuuI9eTG8iN5CZyM7mF3EpuI7eTO8id5C5yN7mH3EvuI/eTB8iD5CHyMHmEPEoeI4+TJ8iT5CnyNHmGPEueI8+TF8iL5CXyMnmFvEpeI6+TN8ibZIzESJwkSJKkSJpkSJbkSJ4USJGUSJlUSJXUSJ00SJO0SJt0SJf0SJ8MyJAEJCQRGZG3yNvkHfIueY+8Tz4gH5KPyMfkE/Ip+Yx8Tr4gX5KvyNfkG/It+Y58T34gP5KfyM/kF/Ir+Y38Tv4gf5K/yN/kH/Iv+Y9MIBPJJDKOSkbFU8mpFFRKKhWVmkpDpaXSUempDFRGKhOVmcpCZaWyUdmpHFROKheVm8pD5aXyUfmpAlRBqhBVmCpCFaWKUcWpElRJqhRVmipDlaXKUeWpClRFqhJVmapCVaWqUdWpGlRNqhZVm6pD1aXqUfWpBlRDqhHVmGpCNaWaUc2pFlRLqhXVmmpDtaXaUe2pDlRHqhPVmepCdaW6Ud2pHlRP6j+qF9Wb6kP1pfpR/akB1EBqEDWYGkINpYZRw6kR1EhqFDWaGkONpcZR46kJ1ERqEjWZmkJNpaZR06kZ1ExqFjWbmkPNpeZR86kF1EJqEbWYWkItpZZRy6kV1EpqFbWaWkOtpdZR66kN1EZqE7WZ2kJtpbZR26kd1E5qF7Wb2kPtpfZR+6kD1EHqEHWYOkIdpY5Rx6kT1EnqFHWaOkOdpc5R56kL1EXqEnWZukJdpa5R16kb1E0qRmEUThEUSVEUTTEUS3EUTwmUSEmUTCmUSmmUThmUSVmUTTmUS3mUTwVUSAEKUoiKqFvUbeoOdZe6R92nHlAPqUfUY+oJ9ZR6Rj2nXlAvqVfUa+oN9ZZ6R72nPlAfqU/UZ+oL9ZX6Rn2nflA/qV/Ub+oP9Zf6RyVQiVQSFUcno+Pp5HQKOiWdik5Np6HT0uno9HQGOiOdic5MZ6Gz0tno7HQOOiedi85N56Hz0vno/HQBuiBdiC5MF6GL0sXo4nQJuiRdii5Nl6HL0uXo8nQFuiJdia5MV6Gr0tXo6nQNuiZdi65N16Hr0vXo+nQDuiHdiG5MN6Gb0s3o5nQLuiXdim5Nt6Hb0u3o9nQHuiPdie5Md6G70t3o7nQPuif9H92L7k33ofvS/ej+9AB6ID2IHkwPoYfSw+jh9Ah6JD2KHk2PocfS4+jx9AR6Ij2JnkxPoafS0+jp9Ax6Jj2Lnk3PoefS8+j59AJ6Ib2IXkwvoZfSy+jl9Ap6Jb2KXk2vodfS6+j19AZ6I72J3kxvobfS2+jt9A56J72L3k3voffS++j99AH6IH2IPkwfoY/Sx+jj9An6JH2KPk2foc/S5+jz9AX6In2Jvkxfoa/S1+jr9A36Jh2jMRqnCZqkKZqmGZqlOZqnBVqkJVqmFVqlNVqnDdqkLdqmHdqlPdqnAzqkAQ1pREf0Lfo2fYe+S9+j79MP6If0I/ox/YR+Sj+jn9Mv6Jf0K/o1/YZ+S7+j39Mf6I/0J/oz/YX+Sn+jv9M/6J/0L/o3/Yf+S/+jE+hEOomOY5Ix8UxyJgWTkknFpGbSMGmZdEx6JgOTkcnEZGayMFmZbEx2JgeTk8nF5GbyMHmZfEx+pgBTkCnEFGaKMEWZYkxxpgRTkinFlGbKMGWZckx5pgJTkanEVGaqMFWZakx1pgZTk6nF1GbqMHWZekx9pgHTkGnENGaaME2ZZkxzpgXTkmnFtGbaMG2Zdkx7pgPTkenEdGa6MF2Zbkx3pgfTk/mP6cX0ZvowfZl+TH9mADOQGcQMZoYwQ5lhzHBmBDOSGcWMZsYwY5lxzHhmAjORmcRMZqYwU5lpzHRmBjOTmcXMZuYwc5l5zHxmAbOQWcQsZpYwS5llzHJmBbOSWcWsZtYwa5l1zHpmA7OR2cRsZrYwW5ltzHZmB7OT2cXsZvYwe5l9zH7mAHOQOcQcZo4wR5ljzHHmBHOSOcWcZs4wZ5lzzHnmAnORucRcZq4wV5lrzHXmBnOTiTEYgzMEQzIUQzMMwzIcwzMCIzISIzMKozIaozMGYzIWYzMO4zIe4zMBEzKAgQxiIuYWc5u5w9xl7jH3mQfMQ+YR85h5wjxlnjHPmRfMS+YV85p5w7xl3jHvmQ/MR+YT85n5wnxlvjHfmR/MT+YX85v5w/xl/jEJTCKTxMSxydh4Njmbgk3JpmJTs2nYtGw6Nj2bgc3IZmIzs1nYrGw2Njubg83J5mJzs3nYvGw+Nj9bgC3IFmILs0XYomwxtjhbgi3JlmJLs2XYsmw5tjxbga3IVmIrs1XYqmw1tjpbg63J1mJrs3XYumw9tj7bgG3INmIbs03Ypmwztjnbgm3JtmJbs23Ytmw7tj3bge3IdmI7s13Yrmw3tjvbg+3J/sf2Ynuzfdi+bD+2PzuAHcgOYgezQ9ih7DB2ODuCHcmOYkezY9ix7Dh2PDuBnchOYiezU9ip7DR2OjuDncnOYmezc9i57Dx2PruAXcguYhezS9il7DJ2ObuCXcmuYleza9i17Dp2PbuB3chuYjezW9it7DZ2O7uD3cnuYneze9i97D52P3uAPcgeYg+zR9ij7DH2OHuCPcmeYk+zZ9iz7Dn2PHuBvcheYi+zV9ir7DX2OnuDvcnGWIzFWYIlWYqlWYZlWY7lWYEVWYmVWYVVWY3VWYM1WYu1WYd1WY/12YANWcBCFrERe4u9zd5h77L32PvsA/Yh+4h9zD5hn7LP2OfsC/Yl+4p9zb5h37Lv2PfsB/Yj+4n9zH5hv7Lf2O/sD/Yn+4v9zf5h/7L/2AQ2kU1i47hkXDyXnEvBpeRScam5NFxaLh2XnsvAZeQycZm5LFxWLhuXncvB5eRycbm5PFxeLh+XnyvAFeQKcYW5IlxRrhhXnCvBleRKcaW5MlxZrhxXnqvAVeQqcZW5KlxVrhpXnavB1eRqcbW5Olxdrh5Xn2vANeQacY25JlxTrhnXnGvBteRaca25Nlxbrh3XnuvAdeQ6cZ25LlxXrhvXnevB9eT+43pxvbk+XF+uH9efG8AN5AZxg7kh3FBuGDecG8GN5EZxo7kx3FhuHDeem8BN5CZxk7kp3FRuGjedm8HN5GZxs7k53FxuHjefW8At5BZxi7kl3FJuGbecW8Gt5FZxq7k13FpuHbee28Bt5DZxm7kt3FZuG7ed28Ht5HZxu7k93F5uH7efO8Ad5A5xh7kj3FHuGHecO8Gd5E5xp7kz3FnuHHeeu8Bd5C5xl7kr3FXuGnedu8Hd5GIcxuEcwZEcxdEcw7Ecx/GcwImcxMmcwqmcxumcwZmcxdmcw7mcx/lcwIUc4CCHuIi7xd3m7nB3uXvcfe4B95B7xD3mnnBPuWfcc+4F95J7xb3m3nBvuXfce+4D95H7xH3mvnBfuW/cd+4H95P7xf3m/nB/uX9cApfIJXFxfDI+nk/Op+BT8qn41HwaPi2fjk/PZ+Az8pn4zHwWPiufjc/O5+Bz8rn43HwePi+fj8/PF+AL8oX4wnwRvihfjC/Ol+BL8qX40nwZvixfji/PV+Ar8pX4ynwVvipfja/O1+Br8rX42nwdvi5fj6/PN+Ab8o34xnwTvinfjG/Ot+Bb8q341nwbvi3fjm/Pd+A78p34znwXvivfje/O9+B78v/xvfjefB++L9+P788P4Afyg/jB/BB+KD+MH86P4Efyo/jR/Bh+LD+OH89P4Cfyk/jJ/BR+Kj+Nn87P4Gfys/jZ/Bx+Lj+Pn88v4Bfyi/jF/BJ+Kb+MX86v4Ffyq/jV/Bp+Lb+OX89v4Dfym/jN/BZ+K7+N387v4Hfyu/jd/B5+L7+P388f4A/yh/jD/BH+KH+MP86f4E/yp/jT/Bn+LH+OP89f4C/yl/jL/BX+Kn+Nv87f4G/yMR7jcZ7gSZ7iaZ7hWZ7jeV7gRV7iZV7hVV7jdd7gTd7ibd7hXd7jfT7gQx7wkEd8xN/ib/N3+Lv8Pf4+/4B/yD/iH/NP+Kf8M/45/4J/yb/iX/Nv+Lf8O/49/4H/yH/iP/Nf+K/8N/47/4P/yf/if/N/+L/8Pz6BT+ST+DghmRAvJBdSCCmFVEJqIY2QVkgnpBcyCBmFTEJmIYuQVcgmZBdyCDmFXEJuIY+QV8gn5BcKCAWFQkJhoYhQVCgmFBdKCCWFUkJpoYxQVignlBcqCBWFSkJloYpQVagmVBdqCDWFWkJtoY5QV6gn1BcaCA2FRkJjoYnQVGgmNBdaCC2FVkJroY3QVmgntBc6CB2FTkJnoYvQVegmdBd6CD2F/4ReQm+hj9BX6Cf0FwYIA4VBwmBhiDBUGCYMF0YII4VRwmhhjDBWGCeMFyYIE4VJwmRhijBVmCZMF2YIM4VZwmxhjjBXmCfMFxYIC4VFwmJhibBUWCYsF1YIK4VVwmphjbBWWCesFzYIG4VNwmZhi7BV2CZsF3YIO4Vdwm5hj7BX2CfsFw4IB4VDwmHhiHBUOCYcF04IJ4VTwmnhjHBWOCecFy4IF4VLwmXhinBVuCZcF24IN4WYgAm4QAikQAm0wAiswAm8IAiiIAmyoAiqoAm6YAimYAm24Aiu4Am+EAihAAQoICESbgm3hTvCXeGecF94IDwUHgmPhSfCU+GZ8Fx4IbwUXgmvhTfCW+Gd8F74IHwUPgmfhS/CV+Gb8F34IfwUfgm/hT/CX+GfkCAkCklCnJhMjBeTiynElGIqMbWYRkwrphPTixnEjGImMbOYRcwqZhOziznEnGIuMbeYR8wr5hPziwXEgmIhsbBYRCwqFhOLiyXEkmIpsbRYRiwrlhPLixXEimIlsbJYRawqVhOrizXEmmItsbZYR6wr1hPriw3EhmIjsbHYRGwqNhObiy3ElmIrsbXYRmwrthPbix3EjmInsbPYRewqdhO7iz3EnuJ/Yi+xt9hH7Cv2E/uLA8SB4iBxsDhEHCoOE4eLI8SR4ihxtDhGHCuOE8eLE8SJ4iRxsjhFnCpOE6eLM8SZ4ixxtjhHnCvOE+eLC8SF4iJxsbhEXCouE5eLK8SV4ipxtbhGXCuuE9eLG8SN4iZxs7hF3CpuE7eLO8Sd4i5xt7hH3CvuE/eLB8SD4iHxsHhEPCoeE4+LJ8ST4inxtHhGPCueE8+LF8SL4iXxsnhFvCpeE6+LN8SbYkzERFwkRFKkRFpkRFbkRF4URFGURFlURFXURF00RFO0RFt0RFf0RF8MxFAEIhSRGIm3xNviHfGueE+8Lz4QH4qPxMfiE/Gp+Ex8Lr4QX4qvxNfiG/Gt+E58L34QP4qfxM/iF/Gr+E38Lv4Qf4q/xN/iH/Gv+E9MEBPFJDFOSibFS8mlFFJKKZWUWkojpZXSSemlDFJGKZOUWcoiZZWySdmlHFJOKZeUW8oj5ZXySfmlAlJBqZBUWCoiFZWKScWlElJJqZRUWiojlZXKSeWlClJFqZJUWaoiVZWqSdWlGlJNqZZUW6oj1ZXqSfWlBlJDqZHUWGoiNZWaSc2lFlJLqZXUWmojtZXaSe2lDlJHqZPUWeoidZW6Sd2lHlJP6T+pl9Rb6iP1lfpJ/aUB0kBpkDRYGiINlYZJw6UR0khplDRaGiONlcZJ46UJ0kRpkjRZmiJNlaZJ06UZ0kxpljRbmiPNleZJ86UF0kJpkbRYWiItlZZJy6UV0kpplbRaWiOtldZJ66UN0kZpk7RZ2iJtlbZJ26Ud0k5pl7Rb2iPtlfZJ+6UD0kHpkHRYOiIdlY5Jx6UT0knplHRaOiOdlc5J56UL0kXpknRZuiJdla5J16Ub0k0pJmESLhESKVESLTESK3ESLwmSKEmSLCmSKmmSLhmSKVmSLTmSK3mSLwVSKAEJSkiKpFvSbemOdFe6J92XHkgPpUfSY+mJ9FR6Jj2XXkgvpVfSa+mN9FZ6J72XPkgfpU/SZ+mL9FX6Jn2Xfkg/pV/Sb+mP9Ff6JyVIiVKSFCcnk+Pl5HIKOaWcSk4tp5HTyunk9HIGOaOcSc4sZ5Gzytnk7HIOOaecS84t55Hzyvnk/HIBuaBcSC4sF5GLysXk4nIJuaRcSi4tl5HLyuXk8nIFuaJcSa4sV5GrytXk6nINuaZcS64t15HryvXk+nIDuaHcSG4sN5Gbys3k5nILuaXcSm4tt5Hbyu3k9nIHuaPcSe4sd5G7yt3k7nIPuaf8n9xL7i33kfvK/eT+8gB5oDxIHiwPkYfKw+Th8gh5pDxKHi2PkcfK4+Tx8gR5ojxJnixPkafK0+Tp8gx5pjxLni3PkefK8+T58gJ5obxIXiwvkZfKy+Tl8gp5pbxKXi2vkdfK6+T18gZ5o7xJ3ixvkbfK2+Tt8g55p7xL3i3vkffK++T98gH5oHxIPiwfkY/Kx+Tj8gn5pHxKPi2fkc/K5+Tz8gX5onxJvixfka/K1+Tr8g35phyTMRmXCZmUKZmWGZmVOZmXBVmUJVmWFVmVNVmXDdmULdmWHdmVPdmXAzmUgQxlJEfyLfm2fEe+K9+T78sP5IfyI/mx/ER+Kj+Tn8sv5JfyK/m1/EZ+K7+T38sf5I/yJ/mz/EX+Kn+Tv8s/5J/yL/m3/Ef+K/+TE+REOUmOU5Ip8UpyJYWSUkmlpFbSKGmVdEp6JYOSUcmkZFayKFmVbEp2JYeSU8ml5FbyKHmVfEp+pYBSUCmkFFaKKEWVYkpxpYRSUimllFbKKGWVckp5pYJSUamkVFaqKFWVakp1pYZSU6ml1FbqKHWVekp9pYHSUGmkNFaaKE2VZkpzpYXSUmmltFbaKG2Vdkp7pYPSUemkdFa6KF2Vbkp3pYfSU/lP6aX0VvoofZV+Sn9lgDJQGaQMVoYoQ5VhynBlhDJSGaWMVsYoY5VxynhlgjJRmaRMVqYoU5VpynRlhjJTmaXMVuYoc5V5ynxlgbJQWaQsVpYoS5VlynJlhbJSWaWsVtYoa5V1ynplg7JR2aRsVrYoW5VtynZlh7JT2aXsVvYoe5V9yn7lgHJQOaQcVo4oR5VjynHlhHJSOaWcVs4oZ5VzynnlgnJRuaRcVq4oV5VrynXlhnJTiSmYgiuEQiqUQiuMwiqcwiuCIiqSIiuKoiqaoiuGYiqWYiuO4iqe4iuBEipAgQpSIuWWclu5o9xV7in3lQfKQ+WR8lh5ojxVninPlRfKS+WV8lp5o7xV3invlQ/KR+WT8ln5onxVvinflR/KT+WX8lv5o/xV/ikJSqKSpMSpydR4NbmaQk2pplJTq2nUtGo6Nb2aQc2oZlIzq1nUrGo2NbuaQ82p5lJzq3nUvGo+Nb9aQC2oFlILq0XUomoxtbhaQi2pllJLq2XUsmo5tbxaQa2oVlIrq1XUqmo1tbpaQ62p1lJrq3XUumo9tb7aQG2oNlIbq03UpmoztbnaQm2ptlJbq23Utmo7tb3aQe2odlI7q13Urmo3tbvaQ+2p/qf2UnurfdS+aj+1vzpAHagOUgerQ9Sh6jB1uDpCHamOUkerY9Sx6jh1vDpBnahOUierU9Sp6jR1ujpDnanOUmerc9S56jx1vrpAXaguUherS9Sl6jJ1ubpCXamuUlera9S16jp1vbpB3ahuUjerW9St6jZ1u7pD3anuUnere9S96j51v3pAPageUg+rR9Sj6jH1uHpCPameUk+rZ9Sz6jn1vHpBvaheUi+rV9Sr6jX1unpDvanGVEzFVUIlVUqlVUZlVU7lVUEVVUmVVUVVVU3VVUM1VUu1VUd1VU/11UANVaBCFamReku9rd5R76r31PvqA/Wh+kh9rD5Rn6rP1OfqC/Wl+kp9rb5R36rv1PfqB/Wj+kn9rH5Rv6rf1O/qD/Wn+kv9rf5R/6r/1AQ1UU1S47RkWryWXEuhpdRSaam1NFpaLZ2WXsugZdQyaZm1LFpWLZuWXcuh5dRyabm1PFpeLZ+WXyugFdQKaYW1IlpRrZhWXCuhldRKaaW1MlpZrZxWXqugVdQqaZW1KlpVrZpWXauh1dRqabW1OlpdrZ5WX2ugNdQaaY21JlpTrZnWXGuhtdRaaa21NlpbrZ3WXuugddQ6aZ21LlpXrZvWXeuh9dT+03ppvbU+Wl+tn9ZfG6AN1AZpg7Uh2lBtmDZcG6GN1EZpo7Ux2lhtnDZem6BN1CZpk7Up2lRtmjZdm6HN1GZps7U52lxtnjZfW6At1BZpi7Ul2lJtmbZcW6Gt1FZpq7U12lptnbZe26Bt1DZpm7Ut2lZtm7Zd26Ht1HZpu7U92l5tn7ZfO6Ad1A5ph7Uj2lHtmHZcO6Gd1E5pp7Uz2lntnHZeu6Bd1C5pl7Ur2lXtmnZdu6Hd1GIapuEaoZEapdEao7Eap/GaoImapMmaoqmapumaoZmapdmao7map/laoIUa0KCGtEi7pd3W7mh3tXvafe2B9lB7pD3WnmhPtWfac+2F9lJ7pb3W3mhvtXfae+2D9lH7pH3WvmhftW/ad+2H9lP7pf3W/mh/tX9agpaoJWlxejI9Xk+up9BT6qn01HoaPa2eTk+vZ9Az6pn0zHoWPaueTc+u59Bz6rn03HoePa+eT8+vF9AL6oX0wnoRvaheTC+ul9BL6qX00noZvaxeTi+vV9Ar6pX0ynoVvapeTa+u19Br6rX02nodva5eT6+vN9Ab6o30xnoTvaneTG+ut9Bb6q301nobva3eTm+vd9A76p30znoXvaveTe+u99B76v/pvfTeeh+9r95P768P0Afqg/TB+hB9qD5MH66P0Efqo/TR+hh9rD5OH69P0Cfqk/TJ+hR9qj5Nn67P0Gfqs/TZ+hx9rj5Pn68v0Bfqi/TF+hJ9qb5MX66v0Ffqq/TV+hp9rb5OX69v0Dfqm/TN+hZ9q75N367v0Hfqu/Td+h59r75P368f0A/qh/TD+hH9qH5MP66f0E/qp/TT+hn9rH5OP69f0C/ql/TL+hX9qn5Nv67f0G/qMR3TcZ3QSZ3SaZ3RWZ3TeV3QRV3SZV3RVV3Tdd3QTd3Sbd3RXd3TfT3QQx3oUEd6pN/Sb+t39Lv6Pf2+/kB/qD/SH+tP9Kf6M/25/kJ/qb/SX+tv9Lf6O/29/kH/qH/SP+tf9K/6N/27/kP/qf/Sf+t/9L/6Pz1BT9ST9DgjmRFvJDdSGCmNVEZqI42R1khnpDcyGBmNTEZmI4uR1chmZDdyGDmNXEZuI4+R18hn5DcKGAWNQkZho4hR1ChmFDdKGCWNUkZpo4xR1ihnlDcqGBWNSkZlo4pR1ahmVDdqGDWNWkZto45R16hn1DcaGA2NRkZjo4nR1GhmNDdaGC2NVkZro43R1mhntDc6GB2NTkZno4vR1ehmdDd6GD2N/4xeRm+jj9HX6Gf0NwYYA41BxmBjiDHUGGYMN0YYI41RxmhjjDHWGGeMNyYYE41JxmRjijHVmGZMN2YYM41ZxmxjjjHXmGfMNxYYC41FxmJjibHUWGYsN1YYK41VxmpjjbHWWGesNzYYG41NxmZji7HV2GZsN3YYO41dxm5jj7HX2GfsNw4YB41DxmHjiHHUOGYcN04YJ41TxmnjjHHWOGecNy4YF41LxmXjinHVuGZcN24YN42YgRm4QRikQRm0wRiswRm8IRiiIRmyoRiqoRm6YRimYRm24Riu4Rm+ERihAQxoICMybhm3jTvGXeOecd94YDw0HhmPjSfGU+OZ8dx4Ybw0XhmvjTfGW+Od8d74YHw0PhmfjS/GV+Ob8d34Yfw0fhm/jT/GX+OfkWAkGklGnJnMjDeTmynMlGYqM7WZxkxrpjPTmxnMjGYmM7OZxcxqZjOzmznMnGYuM7eZx8xr5jPzmwXMgmYhs7BZxCxqFjOLmyXMkmYps7RZxixrljPLmxXMimYls7JZxaxqVjOrmzXMmmYts7ZZx6xr1jPrmw3MhmYjs7HZxGxqNjObmy3MlmYrs7XZxmxrtjPbmx3MjmYns7PZxexqdjO7mz3MnmZcfFxcb7OP2dfsZ/Y3B5gDzUHmYHOIOdQcZg43R5gjzVHmaHOMOdYcZ443J5gTzUnmZHOKOdWcZk43Z5gzzVnmbHOOOdecZ843F5gLzUXmYnOJudRcZi43V5grzVXmanONudZcZ643N5gbzU3mZnOLudXcZm43d5g7zV3mbnOPudfcZ+43D5gHzUPmYfOIedQ8Zh43T5gnzVPmafOMedY8Z543L5gXzUvmZfOKedW8Zl43b5g3zZiJmbhJmKRJmbTJmKzJmbwpmKIpmbKpmKqpmbppmKZpmbbpmK7pmb4ZmKEJTGgiMzJvmbfNO+Zd855533xgPjQfmY/NJ+ZT85n53HxhvjRfma/NN+Zb85353vxgfjQ/mZ/NL+ZX85v53fxh/jR/mb/NP+Zf85+ZYCaaSWaclcyKt5JbKayUViortZXGSmuls9JbGayMViYrs5XFympls7JbOaycVi4rt5XHymvls/JbBayCViGrsFXEKmoVs4pbJaySVimrtFXGKmuVs8pbFayKViWrslXFqmpVs6pbNayaVi2rtlXHqmvVs+pbDayGViOrsdXEamo1s5pbLayWViurtdXGamu1s9pbHayOViers9XF6mp1s7pbPaye1n9WL6u31cfqa/Wz+lsDrIHWIGuwNcQaag2zhlsjrJHWKGu0NcYaa42zxlsTrInWJGuyNcWaak2zplszrJnWLGu2Nceaa82z5lsLrIXWImuxtcRaai2zllsrrJXWKmu1tcZaa62z1lsbrI3WJmuztcXaam2ztls7rJ3WLmu3tcfaa+2z9lsHrIPWIeuwdcQ6ah2zjlsnrJPWKeu0dcY6a52zzlsXrIvWJeuydcW6al2zrls3rJtWzMIs3CIs0qIs2mIs1uIs3hIs0ZIs2VIs1dIs3TIs07Is23Is1/Is3wqs0AIWtJAVWbes29Yd6651z7pvPbAeWo+sx9YT66n1zHpuvbBeWq+s19Yb6631znpvfbA+Wp+sz9YX66v1zfpu/bB+Wr+s39Yf66/1z0qwEq0kK85OZsfbye0Udko7lZ3aTmOntdPZ6e0MdkY7k53ZzmJntbPZ2e0cdk47l53bzmPntfPZ+e0CdkG7kF3YLmIXtYvZxe0Sdkm7lF3aLmOXtcvZ5e0KdkW7kl3ZrmJXtavZ1e0adk27ll3brmPXtevZ9e0GdkO7kd3YbmI3tZvZze0Wdku7ld3abmO3tdvZ7e0Odke7k93Z7mJ3tbvZ3e0edk/7P7uX3dvuY/e1+9n97QH2QHuQPdgeYg+1h9nD7RH2SHuUPdoeY4+1x9nj7Qn2RHuSPdmeYk+1p9nT7Rn2THuWPdueY8+159nz7QX2QnuRvdheYi+1l9nL7RX2SnuVvdpeY6+119nr7Q32RnuTvdneYm+1t9nb7R32TnuXvdveY++199n77QP2QfuQfdg+Yh+1j9nH7RP2SfuUfdo+Y5+1z9nn7Qv2RfuSfdm+Yl+1r9nX7Rv2TTtmYzZuEzZpUzZtMzZrczZvC7ZoS7ZsK7Zqa7ZuG7ZpW7ZtO7Zre7ZvB3ZoAxvayI7sW/Zt+459175n37cf2A/tR/Zj+4n91H5mP7df2C/tV/Zr+4391n5nv7c/2B/tT/Zn+4v91f5mf7d/2D/tX/Zv+4/91/5nJ9iJdpId5yRz4p3kTgonpZPKSe2kcdI66Zz0TgYno5PJyexkcbI62ZzsTg4np5PLye3kcfI6+Zz8TgGnoFPIKewUcYo6xZziTgmnpFPKKe2Ucco65ZzyTgWnolPJqexUcao61ZzqTg2nplPLqe3Uceo69Zz6TgOnodPIaew0cZo6zZzmTgunpdPKae20cdo67Zz2Tgeno9PJ6ex0cbo63ZzuTg+np/Of08vp7fRx+jr9nP7OAGegM8gZ7AxxhjrDnOHOCGekM8oZ7YxxxjrjnPHOBGeiM8mZ7ExxpjrTnOnODGemM8uZ7cxx5jrznPnOAmehs8hZ7CxxljrLnOXOCmels8pZ7axx1jrrnPXOBmejs8nZ7GxxtjrbnO3ODmens8vZ7exx9jr7nP3OAeegc8g57BxxjjrHnOPOCeekc8o57ZxxzjrnnPPOBeeic8m57FxxrjrXnOvODeemE3MwB3cIh3Qoh3YYh3U4h3cER3QkR3YUR3U0R3cMx3Qsx3Ycx3U8x3cCJ3SAAx3kRM4t57Zzx7nr3HPuOw+ch84j57HzxHnqPHOeOy+cl84r57XzxnnrvHPeOx+cj84n57PzxfnqfHO+Oz+cn84v57fzx/nr/HMSnEQnyYlzk7nxbnI3hZvSTeWmdtO4ad10bno3g5vRzeRmdrO4Wd1sbnY3h5vTzeXmdvO4ed18bn63gFvQLeQWdou4Rd1ibnG3hFvSLeWWdsu4Zd1ybnm3glvRreRWdqu4Vd1qbnW3hlvTreXWduu4dd16bn23gdvQbeQ2dpu4Td1mbnO3hdvSbeW2dtu4bd12bnu3g9vR7eR2dru4Xd1ubne3h9vT/c/t5fZ2+7h93X5uf3eAO9Ad5A52h7hD3WHucHeEO9Id5Y52x7hj3XHueHeCO9Gd5E52p7hT3WnudHeGO9Od5c5257hz3XnufHeBu9Bd5C52l7hL3WXucneFu9Jd5a5217hr3XXueneDu9Hd5G52t7hb3W3udneHu9Pd5e5297h73X3ufveAe9A95B52j7hH3WPucfeEe9I95Z52z7hn3XPuefeCe9G95F52r7hX3WvudfeGe9ONuZiLu4RLupRLu4zLupzLu4IrupIru4qrupqru4ZrupZru47rup7ru4EbusCFLnIj95Z7273j3nXvuffdB+5D95H72H3iPnWfuc/dF+5L95X72n3jvnXfue/dD+5H95P72f3ifnW/ud/dH+5P95f72/3j/nX/uQluopvkxnnJvHgvuZfCS+ml8lJ7aby0XjovvZfBy+hl8jJ7WbysXjYvu5fDy+nl8nJ7eby8Xj4vv1fAK+gV8gp7RbyiXjGvuFfCK+mV8kp7ZbyyXjmvvFfBq+hV8ip7VbyqXjWvulfDq+nV8mp7dby6Xj2vvtfAa+g18hp7TbymXjOvudfCa+m18lp7bby2XjuvvdfB6+h18jp7XbyuXjevu9fD6+n95/Xyent9vL5eP6+/N8Ab6A3yBntDvKHeMG+4N8Ib6Y3yRntjvLHeOG+8N8Gb6E3yJntTvKneNG+6N8Ob6c3yZntzvLnePG++t8Bb6C3yFntLvKXeMm+5t8Jb6a3yVntrvLXeOm+9t8Hb6G3yNntbvK3eNm+7t8Pb6e3ydnt7vL3ePm+/d8A76B3yDntHvKPeMe+4d8I76Z3yTntnvLPeOe+8d8G76F3yLntXvKveNe+6d8O76cU8zMM9wiM9yqM9xmM9zuM9wRM9yZM9xVM9zdM9wzM9y7M9x3M9z/O9wAs94EEPeZF3y7vt3fHueve8+94D76H3yHvsPfGees+8594L76X3ynvtvfHeeu+8994H76P3yfvsffG+et+8794P76f3y/vt/fH+ev+8BC/RS/Li/GR+vJ/cT+Gn9FP5qf00flo/nZ/ez+Bn9DP5mf0sflY/m5/dz+Hn9HP5uf08fl4/n5/fL+AX9Av5hf0iflG/mF/cL+GX9Ev5pf0yflm/nF/er+BX9Cv5lf0qflW/ml/dr+HX9Gv5tf06fl2/nl/fb+A39Bv5jf0mflO/md/cb+G39Fv5rf02flu/nd/e7+B39Dv5nf0ufle/m9/d7+H39P/ze/m9/T5+X7+f398f4A/0B/mD/SH+UH+YP9wf4Y/0R/mj/TH+WH+cP96f4E/0J/mT/Sn+VH+aP92f4c/0Z/mz/Tn+XH+eP99f4C/0F/mL/SX+Un+Zv9xf4a/0V/mr/TX+Wn+dv97f4G/0N/mb/S3+Vn+bv93f4e/0d/m7/T3+Xn+fv98/4B/0D/mH/SP+Uf+Yf9w/4Z/0T/mn/TP+Wf+cf96/4F/0L/mX/Sv+Vf+af92/4d/0Yz7m4z7hkz7l0z7jsz7n877gi77ky77iq77m677hm77l277ju77n+37ghz7woY/8yL/l3/bv+Hf9e/59/4H/0H/kP/af+E/9Z/5z/4X/0n/lv/bf+G/9d/57/4P/0f/kf/a/+F/9b/53/4f/0//l//b/+H/9f36Cn+gn+XFBsiA+SB6kCFIGqYLUQZogbZAuSB9kCDIGmYLMQZYga5AtyB7kCHIGuYLcQZ4gb5AvyB8UCAoGhYLCQZGgaFAsKB6UCEoGpYLSQZmgbFAuKB9UCCoGlYLKQZWgalAtqB7UCGoGtYLaQZ2gblAvqB80CBoGjYLGQZOgadAsaB60CFoGrYLWQZugbdAuaB90CDoGnYLOQZega9At6B70CHoG/wW9gt5Bn6Bv0C/oHwwIBgaDgsHBkGBoMCwYHowIRgajgtHBmGBsMC4YH0wIJgaTgsnBlGBqMC2YHswIZgazgtnBnGBuMC+YHywIFgaLgsXBkmBpsCxYHqwIVgargtXBmmBtsC5YH2wINgabgs3BlmBrsC3YHuwIdga7gt3BnmBvsC/YHxwIDgaHgsPBkeBocCw4HpwITgangtPBmeBscC44H1wILgaXgsvBleBqcC24HtwIbgaxAAvwgAjIgArogAnYgAv4QAjEQArkQAnUQAv0wAjMwArswAncwAv8IAjCAAQwQEEU3ApuB3eCu8G94H7wIHgYPAoeB0+Cp8Gz4HnwIngZvApeB2+Ct8G74H3wIfgYfAo+B1+Cr8G34HvwI/gZ/Ap+B3+Cv8G/ICFIDJKCuDBZGB8mD1OEKcNUYeowTZg2TBemDzOEGcNMYeYwS5g1zBZmD3OEOcNcYe4wT5g3zBfmDwuEBcNCYeGwSFg0LBYWD0uEJcNSYemwTFg2LBeWDyuEFcNKYeWwSlg1rBZWD2uENcNaYe2wTlg3rBfWDxuEDcNGYeOwSdg0bBY2D1uELcNWYeuwTdg2bBe2DzuEHcNOYeewS9g17BZ2D3uEPcP/wl5h77BP2DfsF/YPB4QDw0Hh4HBIODQcFg4PR4Qjw1Hh6HBMODYcF44PJ4QTw0nh5HBKODWcFk4PZ4Qzw1nh7HBOODecF84PF4QLw0Xh4nBJuDRcFi4PV4Qrw1Xh6nBNuDZcF64PN4Qbw03h5nBLuDXcFm4Pd4Q7w13h7nBPuDfcF+4PD4QHw0Ph4fBIeDQ8Fh4PT4Qnw1Ph6fBMeDY8F54PL4QXw0vh5fBKeDW8Fl4Pb4Q3w1iIhXhIhGRIhXTIhGzIhXwohGIohXKohGqohXpohGZohXbohG7ohX4YhGEIQhiiMApvhbfDO+Hd8F54P3wQPgwfhY/DJ+HT8Fn4PHwRvgxfha/DN+Hb8F34PvwQfgw/hZ/DL+HX8Fv4PfwR/gx/hb/DP+Hf8F+YECaGSWEcSAbiQXKQAqQEqUBqkAakBelAepABZASZQGaQBWQF2UB2kAPkBLlAbpAH5AX5QH5QABQEhUBhUAQUBcVAcVAClASlQGlQBpQF5UB5UAFUBJVAZVAFVAXVQHVQA9QEtUBtUAfUBfVAfdAANASNQGPQBDQFzUBz0AK0BK1Aa9AGtAXtQHvQAXQEnUBn0AV0Bd1Ad9AD9AT/gV6gN+gD+oJ+oD8YAAaCQWAwGAKGgmFgOBgBRoJRYDQYA8aCcWA8mAAmgklgMpgCpoJpYDqYAWaCWWA2mAPmgnlgPlgAFoJFYDFYApaCZWA5WAFWglVgNVgD1oJ1YD3YADaCTWAz2AK2gm1gO9gBdoJdYDfYA/aCfWA/OAAOgkPgMDgCjoJj4Dg4AU6CU+A0OAPOgnPgPLgALoJL4DK4Aq6Ca+A6uAFughjAAA4IQAIK0IABLOAADwQgAgnIQAEq0IAODGACC9jAAS7wgA8CEAIAIEAgArfAbXAH3AX3wH3wADwEj8Bj8AQ8Bc/Ac/ACvASvwGvwBrwF78B78AF8BJ/AZ/AFfAXfwHfwA/wEv8Bv8Af8Bf9AAkgESSAOJoPxMDlMAVPCVDA1TAPTwnQwPcwAM8JMMDPMArPCbDA7zAFzwlwwN8wD88J8MD8sAAvCQrAwLAKLwmKwOCwBS8JSsDQsA8vCcrA8rAArwkqwMqwCq8JqsDqsAWvCWrA2rAPrwnqwPmwAG8JGsDFsApvCZrA5bAFbwlawNWwD28J2sD3sADvCTrAz7AK7wm6wO+wBe8L/YC/YG/aBfWE/2B8OgAPhIDgYDoFD4TA4HI6AI+EoOBqOgWPhODgeToAT4SQ4GU6BU+E0OB3OgDPhLDgbzoFz4Tw4Hy6AC+EiuBgugUvhMrgcroAr4Sq4Gq6Ba+E6uB5ugBvhJrgZboFb4Ta4He6AO+EuuBvugXvhPrgfHoAH4SF4GB6BR+ExeByegCfhKXganoFn4Tl4Hl6AF+EleBlegVfhNXgd3oA3YQxiEIcEJCEFachAFnKQhwIUoQRlqEAValCHBjShBW3oQBd60IcBDCGAECIYwVvwNrwD78J78D58AB/CR/AxfAKfwmfwOXwBX8JX8DV8A9/Cd/A9/AA/wk/wM/wCv8Jv8Dv8AX/CX/A3/AP/wn8wASbCJBiHkqF4lBylQClRKpQapUFpUTqUHmVAGVEmlBllQVlRNpQd5UA5US6UG+VBeVE+lB8VQAVRIVQYFUFFUTFUHJVAJVEpVBqVQWVROVQeVUAVUSVUGVVBVVE1VB3VQDVRLVQb1UF1UT1UHzVADVEj1Bg1QU1RM9QctUAtUSvUGrVBbVE71B51QB1RJ9QZdUFdUTfUHfVAPdF/qBfqjfqgvqgf6o8GoIFoEBqMhqChaBgajkagkWgUGo3GoLFoHBqPJqCJaBKajKagqWgamo5moJloFpqN5qC5aB6ajxaghWgRWoyWoKVoGVqOVqCVaBVajdagtWgdWo82oI1oE9qMtqCtaBvajnagnWgX2o32oL1oH9qPDqCD6BA6jI6go+gYOo5OoJPoFDqNzqCz6Bw6jy6gi+gSuoyuoKvoGrqObqCbKIYwhCMCkYhCNGIQizjEIwGJSEIyUpCKNKQjA5nIQjZykIs85KMAhQggiBCK0C10G91Bd9E9dB89QA/RI/QYPUFP0TP0HL1AL9Er9Bq9QW/RO/QefUAf0Sf0GX1BX9E39B39QD/RL/Qb/UF/0T+UgBJREoqLkkXxUfIoRZQyShWljtJEaaN0UfooQ5QxyhRljrJEWaNsUfYoR5QzyhXljvJEeaN8Uf6oQFQwKhQVjopERaNiUfGoRFQyKhWVjspEZaNyUfmoQlQxqhRVjqpEVaNqUfWoRlQzqhXVjupEdaN6Uf2oQdQwahQ1jppETaNmUfOoRdQyahW1jtpEbaN2UfuoQ9Qx6hR1jrpEXaNuUfeoR9Qz+i/qFfWO+kR9o35R/2hANDAaFA2OhkRDo2HR8GhENDIaFY2OxkRjo3HR+GhCNDGaFE2OpkRTo2nR9GhGNDOaFc2O5kRzo3nR/GhBtDBaFC2OlkRLo2XR8mhFtDJaFa2O1kRro3XR+mhDtDHaFG2OtkRbo23R9mhHtDPaFe2O9kR7o33R/uhAdDA6FB2OjkRHo2PR8ehEdDI6FZ2OzkRno3PR+ehCdDG6FF2OrkRXo2vR9ehGdDOKRViER0RERlRER0zERlzE/08CPAbm0SQAAE7dlKlt2/hq27Zt27Zt2zaS2n7XtjEzW/d+3BNLjCXFnsSexp7FnsdexF7GXsVex97E3sbexd7HPsQ+xj7FPse+xL7GvsViMSyGx4gYGaNidIyJsTEuxseEmBiTYnJMiakxLabHjJgZs2J2zIm5MS/mx4JYGAMxGEOxKPY99iP2M/Yr9jv2J/Y39i8WhyXDkmMpsJRYKiw1lgZLi8Vj6bD0WAYsI5YJy4wlYFmwrFg2LDuWA8uJ5cJyY3mwvFg+LD9WACuIFcIKY0WwolgxrDhWAiuJlcJKY2Wwslg5rDxWAauIVcIqY1Wwqlg1rDpWA6uJ1cJqY/9hdbC6WD2sPtYAa4g1whpjTbCmWLOEuLg4rCXWCmuNtcHaYu2w9lgHrCPWCeuMdcG6Yt2w7lgPrCfWC+uN9cH6Yv2w/tgAbCA2CBuMDcGGYsOw4dgIbCQ2ChuNjcHGYuOw8dgEbCI2CZuMTcGmYtOw6dgMbCY2C5uNzcHmYvOw+dgCbCG2CFuMLcGWYsuw5dgKbCW2CluNrcHWYuuw9dgGbCO2CduMbcG2Ytuw7dgObCe2C9uN7cH2Yvuw/dgB7CB2CDuMHcGOYsew49gJ7CR2CjuNncHOYuew89gF7CJ2CbuMXcGuYtew69gN7CZ2C7uN3cHuYvew+9gD7CH2CHuMJWJJ2BPsKfYMe469wF5ir7DX2BvsLfYOe499wD5in7DP2BfsK/YNi2EYhmMERmIURmMMxmIcxmMCJmISJmMKpmIapmMGZmIWZmMO5mIe5mMBFmIAgxjCIuw79gP7if3CfmN/sL/YPywOT4Ynx1PgKfFUeGo8DZ4Wj8fT4enxDHhGPBOeGU/As+BZ8Wx4djwHnhPPhefG8+B58Xx4frwAXhAvhBfGi+BF8WJ4cbwEXhIvhZfGy+Bl8XJ4ebwCXhGvhFfGq+BV8Wp4dbwGXhOvhdfG/8Pr4HXxenh9vAHeEG+EN8ab4E3xZnhzvAXeEm+Ft8bb4G3xdnh7vAPeEe+Ed8a74F3xbnh3vAfeE++F98b74H3xfnh/fAA+EB+ED8aH4EPxYfhwfAQ+Eh+Fj8bH4GPxcfh4fAI+EZ+ET8an4FPxafh0fAY+E5+Fz8bn4HPxefh8fAG+EF+EL8aX4EvxZfhyfAW+El+Fr8bX4Gvxdfh6fAO+Ed+Eb8a34Fvxbfh2fAe+E9+F78b34Hvxffh+/AB+ED+EH8aP4EfxY/hx/AR+Ej+Fn8bP4Gfxc/h5/AJ+Eb+EX8av4Ffxa/h1/AZ+E7+F38bv4Hfxe/h9/AH+EH+EP8YT8ST8Cf4Uf4Y/x1/gL/FX+Gv8Df4Wf4e/xz/gH/FP+Gf8C/4V/4bHcAzHcQIncQqncQZncQ7ncQEXcQmXcQVXcQ3XcQM3cQu3cQd3cQ/38QAPcYBDHOER/h3/gf/Ef+G/8T/4X/wfHkckI5ITKYiURCoiNZGGSEvEE+mI9EQGIiORichMJBBZiKxENiI7kYPISeQichN5iLxEPiI/UYAoSBQiChNFiKJEMaI4UYIoSZQiShNliLJEOaI8UYGoSFQiKhNViKpENaI6UYOoSdQiahP/EXWIukQ9oj7RgGhINCIaE02IpkQzojnRgmhJtCJaE22ItkQ7oj3RgehIdCI6E12IrkQ3ojvRg+hJ9CJ6E32IvkQ/oj8xgBhIDCIGE0OIocQwYjgxghhJjCJGE2OIscQ4YjwxgZhITCImE1OIqcQ0Yjoxg5hJzCJmE3OIucQ8Yj6xgFhILCIWE0uIpcQyYjmxglhJrCJWE2uItcQ6Yj2xgdhIbCI2E1uIrcQ2Yjuxg9hJ7CJ2E3uIvcQ+Yj9xgDhIHCIOE0eIo8Qx4jhxgjhJnCJOE2eIs8Q54jxxgbhIXCIuE1eIq8Q14jpxg7hJ3CJuE3eIu8Q94j7xgHhIPCIeE4lEEvGEeEo8I54TL4iXxCviNfGGeEu8I94TH4iPxCfiM/GF+Ep8I2IERuAEQZAERdAEQ7AER/CEQIiERMiEQqiERuiEQZiERdiEQ7iER/hEQIQEICCBiIj4TvwgfhK/iN/EH+Iv8Y+II5ORyckUZEoyFZmaTEOmJePJdGR6MgOZkcxEZiYTyCxkVjIbmZ3MQeYkc5G5yTxkXjIfmZ8sQBYkC5GFySJkUbIYWZwsQZYkS5GlyTJkWbIcWZ6sQFYkK5GVySpkVbIaWZ2sQdYka5G1yf/IOmRdsh5Zn2xANiQbkY3JJmRTshnZnGxBtiRbka3JNmRbsh3ZnuxAdiQ7kZ3JLmRXshvZnexB9iR7kb3JPmRfsh/ZnxxADiQHkYPJIeRQchg5nBxBjiRHkaPJMeRYchw5npxATiQnkZPJKeRUcho5nZxBziRnkbPJOeRcch45n1xALiQXkYvJJeRSchm5nFxBriRXkavJNeRach25ntxAbiQ3kZvJLeRWchu5ndxB7iR3kbvJPeRech+5nzxAHiQPkYfJI+RR8hh5nDxBniRPkafJM+RZ8hx5nrxAXiQvkZfJK+RV8hp5nbxB3iRvkbfJO+Rd8h55n3xAPiQfkY/JRDKJfEI+JZ+Rz8kX5EvyFfmafEO+Jd+R78kP5EfyE/mZ/EJ+Jb+RMRIjcZIgSZIiaZIhWZIjeVIgRVIiZVIhVVIjddIgTdIibdIhXdIjfTIgQxKQkERkRH4nf5A/yV/kb/IP+Zf8R8ZRyajkVAoqJZWKSk2lodJS8VQ6Kj2VgcpIZaIyUwlUFiorlY3KTuWgclK5qNxUHiovlY/KTxWgClKFqMJUEaooVYwqTpWgSlKlqNJUGaosVY4qT1WgKlKVqMpUFaoqVY2qTtWgalK1qNrUf1Qdqi5Vj6pPNaAaUo2oxlQTqinVjGpOtaBaUq2o1lQbqi3VjmpPdaA6Up2ozlQXqivVjepO9aB6Ur2o3lQfqi/Vj+pPDaAGUoOowdQQaig1jBpOjaBGUqOo0dQYaiw1jhpPTaAmUpOoydQUaio1jZpOzaBmUrOo2dQcai41j5pPLaAWUouoxdQSaim1jFpOraBWUquo1dQaai21jlpPbaA2UpuozdQWaiu1jdpO7aB2Uruo3dQeai+1j9pPHaAOUoeow9QR6ih1jDpOnaBOUqeo09QZ6ix1jjpPXaAuUpeoy9QV6ip1jbpO3aBuUreo29Qd6i51j7pPPaAeUo+ox1QilUQ9oZ5Sz6jn1AvqJfWKek29od5S76j31AfqI/WJ+kx9ob5S36gYhVE4RVAkRVE0xVAsxVE8JVAiJVEypVAqpVE6ZVAmZVE25VAu5VE+FVAhBShIISqivlM/qJ/UL+o39Yf6S/2j4uhkdHI6BZ2STkWnptPQael4Oh2dns5AZ6Qz0ZnpBDoLnZXORmenc9A56Vx0bjoPnZfOR+enC9AF6UJ0YboIXZQuRhenS9Al6VJ0aboMXZYuR5enK9AV6Up0ZboKXZWuRlena9A16Vp0bfo/ug5dl65H16cb0A3pRnRjugndlG5GN6db0C3pVnRrug3dlm5Ht6c70B3pTnRnugvdle5Gd6d70D3pXnRvug/dl+5H96cH0APpQfRgegg9lB5GD6dH0CPpUfRoegw9lh5Hj6cn0BPpSfRkego9lZ5GT6dn0DPpWfRseg49l55Hz6cX0AvpRfRiegm9lF5GL6dX0CvpVfRqeg29ll5Hr6c30BvpTfRmegu9ld5Gb6d30DvpXfRueg+9l95H76cP0AfpQ/Rh+gh9lD5GH6dP0CfpU/Rp+gx9lj5Hn6cv0BfpS/Rl+gp9lb5GX6dv0DfpW/Rt+g59l75H36cf0A/pR/RjOpFOop/QT+ln9HP6Bf2SfkW/pt/Qb+l39Hv6A/2R/kR/pr/QX+lvdIzGaJwmaJKmaJpmaJbmaJ4WaJGWaJlWaJXWaJ02aJO2aJt2aJf2aJ8O6JAGNKQRHdHf6R/0T/oX/Zv+Q/+l/9FxTDImOZOCScmkYlIzaZi0TDyTjknPZGAyMpmYzEwCk4XJymRjsjM5mJxMLiY3k4fJy+Rj8jMFmIJMIaYwU4QpyhRjijMlmJJMKaY0U4Ypy5RjyjMVmIpMJaYyU4WpylRjqjM1mJpMLaY28x9Th6nL1GPqMw2YhkwjpjHThGnKNGOaMy2YlkwrpjXThmnLtGPaMx2YjkwnpjPThenKdGO6Mz2YnkwvpjfTh+nL9GP6MwOYgcwgZjAzhBnKDGOGMyOYkcwoZjQzhhnLjGPGMxOYicwkZjIzhZnKTGOmMzOYmcwsZjYzh5nLzGPmMwuYhcwiZjGzhFnKLGOWMyuYlcwqZjWzhlnLrGPWMxuYjcwmZjOzhdnKbGO2MzuYncwuZjezh9nL7GP2MweYg8wh5jBzhDnKHGOOMyeYk8wp5jRzhjnLnGPOMxeYi8wl5jJzhbnKXGOuMzeYm8wt5jZzh7nL3GPuMw+Yh8wj5jGTyCQxT5inzDPmOfOCecm8Yl4zb5i3zDvmPfOB+ch8Yj4zX5ivzDcmxmAMzhAMyVAMzTAMy3AMzwiMyEiMzCiMymiMzhiMyViMzTiMy3iMzwRMyAAGMoiJmO/MD+Yn84v5zfxh/jL/mDg2GZucTcGmZFOxqdk0bFo2nk3HpmczsBnZTGxmNoHNwmZls7HZ2RxsTjYXm5vNw+Zl87H52QJsQbYQW5gtwhZli7HF2RJsSbYUW5otw5Zly7Hl2QpsRbYSW5mtwlZlq7HV2RpsTbYWW5v9j63D1mXrsfXZBmxDthHbmG3CNmWbsc3ZFmxLthXbmm3DtmXbse3ZDmxHthPbme3CdmW7sd3ZHmxPthfbm+3D9mX7sf3ZAexAdhA7mB3CDmWHscPZEexIdhQ7mh3DjmXHsePZCexEdhI7mZ3CTmWnsdPZGexMdhY7m53DzmXnsfPZBexCdhG7mF3CLmWXscvZFexKdhW7ml3DrmXXsevZDexGdhO7md3CbmW3sdvZHexOdhe7m93D7mX3sfvZA+xB9hB7mD3CHmWPscfZE+xJ9hR7mj3DnmXPsefZC+xF9hJ7mb3CXmWvsdfZG+xN9hZ7m73D3mXvsffZB+xD9hH7mE1kk9gn7FP2GfucfcG+ZF+xr9k37Fv2Hfue/cB+ZD+xn9kv7Ff2GxtjMRZnCZZkKZZmGZZlOZZnBVZkJVZmFVZlNVZnDdZkLdZmHdZlPdZnAzZkAQtZxEbsd/YH+5P9xf5m/7B/2X9sHJeMS86l4FJyqbjUXBouLRfPpePScxm4jFwmLjOXwGXhsnLZuOxcDi4nl4vLzeXh8nL5uPxcAa4gV4grzBXhinLFuOJcCa4kV4orzZXhynLluPJcBa4iV4mrzFXhqnLVuOpcDa4mV4urzf3H1eHqcvW4+lwDriHXiGvMNeGacs245lwLriXXimvNteHacu249lwHriPXievMdeG6ct247lwPrifXi+vN9eH6cv24/twAbiA3iBvMDeGGcsO44dwIbiQ3ihvNjeHGcuO48dwEbiI3iZvMTeGmctO46dwMbiY3i5vNzeHmcvO4+dwCbiG3iFvMLeGWcsu45dwKbiW3ilvNreHWcuu49dwGbiO3idvMbeG2ctu47dwObie3i9vN7eH2cvu4/dwB7iB3iDvMHeGOcse449wJ7iR3ijvNneHOcue489wF7iJ3ibvMXeGucte469wN7iZ3i7vN3eHucve4+9wD7iH3iHvMJXJJ3BPuKfeMe8694F5yr7jX3BvuLfeOe8994D5yn7jP3BfuK/eNi3EYh3MER3IUR3MMx3Icx3MCJ3ISJ3MKp3Iap3MGZ3IWZ3MO53Ie53MBF3KAgxziIu4794P7yf3ifnN/uL/cPy6OT8Yn51PwKflUfGo+DZ+Wj+fT8en5DHxGPhOfmU/gs/BZ+Wx8dj4Hn5PPxefm8/B5+Xx8fr4AX5AvxBfmi/BF+WJ8cb4EX5IvxZfmy/Bl+XJ8eb4CX5GvxFfmq/BV+Wp8db4GX5Ovxdfm/+Pr8HX5enx9vgHfkG/EN+ab8E35ZnxzvgXfkm/Ft+bb8G35dnx7vgPfke/Ed+a78F35bnx3vgffk+/F9+b78H35fnx/fgA/kB/ED+aH8EP5YfxwfgQ/kh/Fj+bH8GP5cfx4fgI/kZ/ET+an8FP5afx0fgY/k5/Fz+bn8HP5efx8fgG/kF/EL+aX8Ev5ZfxyfgW/kl/Fr+bX8Gv5dfx6fgO/kd/Eb+a38Fv5bfx2fge/k9/F7+b38Hv5ffx+/gB/kD/EH+aP8Ef5Y/xx/gR/kj/Fn+bP8Gf5c/x5/gJ/kb/EX+av8Ff5a/x1/gZ/k7/F3+bv8Hf5e/x9/gH/kH/EP+YT+ST+Cf+Uf8Y/51/wL/lX/Gv+Df+Wf8e/5z/wH/lP/Gf+C/+V/8bHeIzHeYIneYqneYZneY7neYEXeYmXeYVXeY3XeYM3eYu3eYd3eY/3+YAPecBDHvER/53/wf/kf/G/+T/8X/4fHyckE5ILKYSUQiohtZBGSCvEC+mE9EIGIaOQScgsJAhZhKxCNiG7kEPIKeQScgt5hLxCPiG/UEAoKBQSCgtFhKJCMaG4UEIoKZQSSgtlhLJCOaG8UEGoKFQSKgtVhKpCNaG6UEOoKdQSagv/CXWEukI9ob7QQGgoNBIaC02EpkIzobnQQmgptBJaC22EtkI7ob3QQegodBI6C12ErkK3uLi4OKGn0EvoLfQR+gr9hP7CAGGgMEgYLAwRhgrDhOHCCGGkMEoYLYwRxgrjhPHCBGGiMEmYLEwRpgrThOnCDGGmMEuYLcwR5grzhPnCAmGhsEhYLCwRlgrLhOXCCmGlsEpYLawR1grrhPXCBmGjsEnYLGwRtgrbhO3CDmGnsEvYLewR9gr7hP3CAeGgcEg4LBwRjgrHhOPCCeGkcEo4LZwRzgrnhPPCBeGicEm4LFwRrgrXhOvCDeGmcEu4LdwR7gr3hPvCA+Gh8Eh4LCQKScIT4anwTHguvBBeCq+E18Ib4a3wTngvfBA+Cp+Ez8IX4avwTYgJmIALhEAKlEALjMAKnMALgiAKkiALiqAKmqALhmAKlmALjuAKnuALgRAKQIACEiLhu/BD+Cn8En4Lf4S/wj8hTkwmJhdTiCnFVGJqMY2YVowX04npxQxiRjGTmFlMELOIWcVsYnYxh5hTzCXmFvOIecV8Yn6xgFhQLCQWFouIRcViYnGxhFhSLCWWFsuIZcVyYnmxglhRrCRWFquIVcVqYnWxhlhTrCXWFv8T64h1xXpifbGB2FBsJDYWm4hNxWZic7GF2FJsJbYW24htxXZie7GD2FHsJHYWu4hdxW5id7GH2FPsJfYW+4h9xX5if3GAOFAcJA4Wh4hDxWHicHGEOFIcJY4Wx4hjxXHieHGCOFGcJE4Wp4hTxWnidHGGOFOcJc4W54hzxXnifHGBuFBcJC4Wl4hLxWXicnGFuFJcJa4W14hrxXXienGDuFHcJG4Wt4hbxW3idnGHuFPcJe4W94h7xX3ifvGAeFA8JB4Wj4hHxWPicfGEeFI8JZ4Wz4hnxXPiefGCeFG8JF4Wr4hXxWvidfGGeFO8Jd4W74h3xXviffGB+FB8JD4WE8Uk8Yn4VHwmPhdfiC/FV+Jr8Y34Vnwnvhc/iB/FT+Jn8Yv4VfwmxkRMxEVCJEVKpEVGZEVO5EVBFEVJlEVFVEVN1EVDNEVLtEVHdEVP9MVADEUgQhGJkfhd/CH+FH+Jv8U/4l/xnxgnJZOSSymklFIqKbWURkorxUvppPRSBimjlEnKLCVIWaSsUjYpu5RDyinlknJLeaS8Uj4pv1RAKigVkgpLRaSiUjGpuFRCKimVkkpLZaSyUjmpvFRBqihVkipLVaSqUjWpulRDqinVkmpL/0l1pLpSPam+1EBqKDWSGktNpKZSM6m51EJqKbWSWkttpLZSO6m91EHqKHWSOktdpK5SN6m71EPqKfWSekt9pL5SP6m/NEAaKA2SBktDpKHSMGm4NEIaKY2SRktjpLHSOGm8NEGaKE2SJktTpKnSNGm6NEOaKc2SZktzpLnSPGm+tEBaKC2SFktLpKXSMmm5tEJaKa2SVktrpLXSOmm9tEHaKG2SNktbpK3SNmm7tEPaKe2Sdkt7pL3SPmm/dEA6KB2SDktHpKPSMem4dEI6KZ2STktnpLPSOem8dEG6KF2SLktXpKvSNem6dEO6Kd2Sbkt3pLvSPem+9EB6KD2SHkuJUpL0RHoqPZOeSy+kl9Ir6bX0RnorvZPeSx+kj9In6bP0RfoqfZNiEibhEiGREiXREiOxEifxkiCJkiTJkiKpkibpkiGZkiXZkiO5kif5UiCFEpCghKRI+i79kH5Kv6Tf0h/pr/RPipOTycnlFHJKOZWcWk4jp5Xj5XRyejmDnFHOJGeWE+QsclY5m5xdziHnlHPJueU8cl45n5xfLiAXlAvJheUiclG5mFxcLiGXlEvJpeUyclm5nFxeriBXlCvJleUqclW5mlxdriHXlGvJteX/5DpyXbmeXF9uIDeUG8mN5SZyU7mZ3FxuIbeUW8mt5TZyW7md3F7uIHeUO8md5S5yV7mb3F3uIfeUe8m95T5yX7mf3F8eIA+UB8mD5SHyUHmYPFweIY+UR8mj5THyWHmcPF6eIE+UJ8mT5SnyVHmaPF2eIc+UZ8mz5TnyXHmePF9eIC+UF8mL5SXyUnmZvFxeIa+UV8mr5TXyWnmdvF7eIG+UN8mb5S3yVnmbvF3eIe+Ud8m75T3yXnmfvF8+IB+UD8mH5SPyUfmYfFw+IZ+UT8mn5TPyWfmcfF6+IF+UL8mX5SvyVfmafF2+Id+Ub8m35TvyXfmefF9+ID+UH8mP5UQ5SX4iP5Wfyc/lF/JL+ZX8Wn4jv5Xfye/lD/JH+ZP8Wf4if5W/yTEZk3GZkEmZkmmZkVmZk3lZkEVZkmVZkVVZk3XZkE3Zkm3ZkV3Zk305kEMZyFBGciR/l3/IP+Vf8m/5j/xX/ifHKcmU5EoKJaWSSkmtpFHSKvFKOiW9kkHJqGRSMisJShYlq5JNya7kUHIquZTcSh4lr5JPya8UUAoqhZTCShGlqFJMKa6UUEoqpZTSShmlrFJOKa9UUCoqlZTKShWlqlJNqa7UUGoqtZTayn9KHaWuUk+przRQGiqNlMZKE6Wp0kxprrRQWiqtlNZKG6Wt0k5pr3RQOiqdlM5KF6Wr0k3prvRQeiq9lN5KH6Wv0k/prwxQBiqDlMHKEGWoMkwZroxQRiqjlNHKGGWsMk4Zr0xQJiqTlMnKFGWqMk2ZrsxQZiqzlNnKHGWuMk+ZryxQFiqLlMXKEmWpskxZrqxQViqrlNXKGmWtsk5Zr2xQNiqblM3KFmWrsk3ZruxQdiq7lN3KHmWvsk/ZrxxQDiqHlMPKEeWockw5rpxQTiqnlNPKGeWsck45r1xQLiqXlMvKFeWqck25rtxQbiq3lNvKHeWuck+5rzxQHiqPlMdKopKkPFGeKs+U58oL5aXySnmtvFHeKu+U98oH5aPySfmsfFG+Kt+UmIIpuEIopEIptMIorMIpvCIooiIpsqIoqqIpumIopmIptuIoruIpvhIooQIUqCAlUr4rP5Sfyi/lt/JH+av8U+LUZGpyNYWaUk2lplbTqGnVeDWdml7NoGZUM6mZ1QQ1i5pVzaZmV3OoOdVcam41j5pXzafmVwuoBdVCamG1iFpULaYWV0uoJdVSamm1jFpWLaeWVyuoFdVKamW1ilpVraZWV2uoNdVaam31P7WOWletp9ZXG6gN1UZqY7WJ2lRtpjZXW6gt1VZqa7WN2lZtp7ZXO6gd1U5qZ7WL2lXtpnZXe6g91V5qb7WP2lftp/ZXB6gD1UHqYHWIOlQdpg5XR6gj1VHqaHWMOlYdp45XJ6gT1UnqZHWKOlWdpk5XZ6gz1VnqbHWOOledp85XF6gL1UXqYnWJulRdpi5XV6gr1VXqanWNulZdp65XN6gb1U3qZnWLulXdpm5Xd6g71V3qbnWPulfdp+5XD6gH1UPqYfWIelQ9ph5XT6gn1VPqafWMelY9p55XL6gX1UvqZfWKelW9pl5Xb6g31VvqbfWOele9p95XH6gP1UfqYzVRTVKfqE/VZ+pz9YX6Un2lvlbfqG/Vd+p79YP6Uf2kfla/qF/Vb2pMxVRcJVRSpVRaZVRW5VReFVRRlVRZVVRV1VRdNVRTtVRbdVRX9VRfDdRQBSpUkRqp39Uf6k/1l/pb/aP+Vf+pcVoyLbmWQkuppdJSa2m0tFq8lk5Lr2XQMmqZtMxagpZFy6pl07JrObScWi4tt5ZHy6vl0/JrBbSCWiGtsFZEK6oV04prJbSSWimttFZGK6uV08prFbSKWiWtslZFq6pV06prNbSaWi2ttvafVkerq9XT6msNtIZaI62x1kRrqjXTmmsttJZaK6211kZrq7XT2msdtI5aJ62z1kXrqnXTums9tJ5aL6231kfrq/XT+msDtIHaIG2wNkQbqg3ThmsjtJHaKG20NkYbq43TxmsTtInaJG2yNkWbqk3TpmsztJnaLG22Nkebq83T5msLtIXaIm2xtkRbqi3TlmsrtJXaKm21tkZbq63T1msbtI3aJm2ztkXbqm3Ttms7tJ3aLm23tkfbq+3T9msHtIPaIe2wdkQ7qh3TjmsntJPaKe20dkY7q53TzmsXtIvaJe2ydkW7ql3Trms3tJvaLe22dke7q93T7msPtIfaI+2xlqglaU+0p9oz7bn2QnupvdJea2+0t9o77b32QfuofdI+a1+0r9o3LaZhGq4RGqlRGq0xGqtxGq8JmqhJmqwpmqppmq4ZmqlZmq05mqt5mq8FWqgBDWpIi7Tv2g/tp/ZL+6390f5q/7Q4PZmeXE+hp9RT6an1NHpaPV5Pp6fXM+gZ9Ux6Zj1Bz6Jn1bPp2fUcek49l55bz6Pn1fPp+fUCekG9kF5YL6IX1YvpxfUSekm9lF5aL6OX1cvp5fUKekW9kl5Zr6JX1avp1fUaek29ll5b/0+vo9fV6+n19QZ6Q72R3lhvojfVm+nN9RZ6S72V3lpvo7fV2+nt9Q56R72T3lnvonfVu+nd9R56T72X3lvvo/fV++n99QH6QH2QPlgfog/Vh+nD9RH6SH2UPlofo4/Vx+nj9Qn6RH2SPlmfok/Vp+nT9Rn6TH2WPlufo8/V5+nz9QX6Qn2Rvlhfoi/Vl+nL9RX6Sn2Vvlpfo6/V1+nr9Q36Rn2Tvlnfom/Vt+nb9R36Tn2Xvlvfo+/V9+n79QP6Qf2Qflg/oh/Vj+nH9RP6Sf2Uflo/o5/Vz+nn9Qv6Rf2Sflm/ol/Vr+nX9Rv6Tf2Wflu/o9/V7+n39Qf6Q/2R/lhP1JP0J/pT/Zn+XH+hv9Rf6a/1N/pb/Z3+Xv+gf9Q/6Z/1L/pX/Zse0zEd1wmd1Cmd1hmd1Tmd1wVd1CVd1hVd1TVd1w3d1C3d1h3d1T3d1wM91IEOdaRH+nf9h/5T/6X/1v/of/V/epyRzEhupDBSGqmM1EYaI60Rb6Qz0hsZjIxGJiOzkWBkMbIa2YzsRg4jp5HLyG3kMfIa+Yz8RgGjoFHIKGwUMYoaxYziRgmjpFHKKG2UMcoa5YzyRgWjolHJqGxUMaoa1YzqRg2jplHLqG38Z9Qx6hr1jPpGA6Oh0chobDQxmhrNjOZGC6Ol0cpobbQx2hrtjPZGB6Oj0cnobHQxuhrdjO5GD6On0cvobfQx+hr9jP7GAGOgMcgYbAwxhhrDjOHGCGOkMcoYbYwxxhrjjPHGBGOiMcmYbEwxphrTjOnGDGOmMcuYbcwx5hrzjPnGAmOhschYbCwxlhrLjOXGCmOlscpYbawx1hrrjPXGBmOjscnYbGwxthrbjO3GDmOnscvYbewx9hr7jP3GAeOgccg4bBwxjhrHjOPGCeOkcco4bZwxzhrnjPPGBeOiccm4bFwxrhrXjOvGDeOmccu4bdwx7hr3jPvGA+Oh8ch4bCQaScYT46nxzHhuvDBeGq+M18Yb463xznhvfDA+Gp+Mz8YX46vxzYgZmIEbhEEalEEbjMEanMEbgiEakiEbiqEamqEbhmEalmEbjuEanuEbgREawIAGMiLju/HD+Gn8Mn4bf4y/xj8jzkxmJjdTmCnNVGZqM42Z1ow305npzQxmRjOTmdlMMLOYWc1sZnYzh5nTzGXmNvOYec18Zn6zgFnQLGQWNouYRc1iZnGzhFnSLGWWNsuYZc1yZnmzglnRrGRWNquYVc1qZnWzhlnTrGXWNv8z65h1zXpmfbOB2dBsZDY2m5hNzWZmc7OF2dJsZbY225htzXZme7OD2dHsZHY2u5hdzW5md7OH2dPsZfY2+5h9zX5mf3OAOdAcZA42h5hDzWHmcHOEOdIcZY42x5hjzXHmeHOCOdGcZE42p5hTzWnmdHOGOdOcZc4255hzzXnmfHOBudBcZC42l5hLzWXmcnOFudJcZa4215hrzXXmenODudHcZG42t5hbzW3mdnOHudPcZe4295h7zX3mfvOAedA8ZB42j5hHzWPmcfOEedI8ZZ42z5hnzXPmefOCedG8ZF42r5hXzWvmdfOGedO8Zd4275h3zXvmffOB+dB8ZD42E80k84n51HxmPjdfmC/NV+Zr84351nxnvjc/mB/NT+Zn84v51fxmxkzMxE3CJE3KpE3GZE3O5E3BFE3JlE3FVE3N1E3DNE3LtE3HdE3P9M3ADE1gQhOZkfnd/GH+NH+Zv80/5l/znxlnJbOSWymslFYqK7WVxkprxVvprPRWBiujlcnKbCVYWaysVjYru5XDymnlsnJbeay8Vj4rv1XAKmgVsgpbRayiVjGruFXCKmmVskpbZayyVjmrvFXBqmhVsipbVayqVjWrulXDqmnVsmpb/1l1rLpWPau+1cBqaDWyGltNrKZWM6u51cJqabWyWlttrLZWO6u91cHqaHWyOltdrK5WN6u71cPqafWyelt9rL5WP6u/NcAaaA2yBltDrKHWMGu4NcIaaY2yRltjrLHWOGu8NcGaaE2yJltTrKnWNGu6NcOaac2yZltzrLnWPGu+tcBaaC2yFltLrKXWMmu5tcJaaa2yVltrrLXWOmu9tcHaaG2yNltbrK3WNmu7tcPaae2ydlt7rL3WPmu/dcA6aB2yDltHrKPWMeu4dcI6aZ2yTltnrLPWOeu8dcG6aF2yLltXrKvWNeu6dcO6ad2yblt3rLvWPeu+9cB6aD2yHluJVpL1xHpqPbOeWy+sl9Yr67X1xnprvbPeWx+sj9Yn67P1xfpqfbNiFmbhFmGRFmXRFmOxFmfxlmCJlmTJlmKplmbplmGZlmXZlmO5lmf5VmCFFrCghazI+m79sH5av6zf1h/rr/XPirOT2cntFHZKO5Wd2k5jp7Xj7XR2ejuDndHOZGe2E+wsdlY7m53dzmHntHPZue08dl47n53fLmAXtAvZhe0idlG7mF3cLmGXtEvZpe0ydlm7nF3ermBXtCvZle0qdlW7ml3drmHXtGvZte3/7Dp2XbueXd9uYDe0G9mN7SZ2U7uZ3dxuYbe0W9mt7TZ2W7ud3d7uYHe0O9md7S52V7ub3d3uYfe0e9m97T52X7uf3d8eYA+0B9mD7SH2UHuYPdweYY+0R9mj7TH2WHucPd6eYE+0J9mT7Sn2VHuaPd2eYc+0Z9mz7Tn2XHuePd9eYC+0F9mL7SX2UnuZvdxeYa+0V9mr7TX2Wnudvd7eYG+0N9mb7S32Vnubvd3eYe+0d9m77T32Xnufvd8+YB+0D9mH7SP2UfuYfdw+YZ+0T9mn7TP2Wfucfd6+YF+0L9mX7Sv2Vfuafd2+Yd+0b9m37Tv2Xfuefd9+YD+0H9mP7UQ7yX5iP7Wf2c/tF/ZL+5X92n5jv7Xf2e/tD/ZH+5P92f5if7W/2TEbs3GbsEmbsmmbsVmbs3lbsEVbsmVbsVVbs3XbsE3bsm3bsV3bs307sEMb2NBGdmR/t3/YP+1f9m/7j/3X/mfHOcmc5E4KJ6WTykntpHHSOvFOOie9k8HJ6GRyMjsJThYnq5PNye7kcHI6uZzcTh4nr5PPye8UcAo6hZzCThGnqFPMKe6UcEo6pZzSThmnrFPOKe9UcCo6lZzKThWnqlPNqe7UcGo6tZzazn9OHaeuU8+p7zRwGjqNnMZOE6ep08xp7rRwWjqtnNZOG6et085p73RwOjqdnM5OF6er083p7vRwejq9nN5OH6ev08/p7wxwBjqDnMHOEGeoM8wZ7oxwRjqjnNHOGGesM84Z70xwJjqTnMnOFGeqM82Z7sxwZjqznNnOHGeuM8+Z7yxwFjqLnMXOEmeps8xZ7qxwVjqrnNXOGmets85Z72xwNjqbnM3OFmers83Z7uxwdjq7nN3OHmevs8/Z7xxwDjqHnMPOEeeoc8w57pxwTjqnnNPOGeesc84571xwLjqXnMvOFeeqc8257txwbjq3nNvOHeeuc8+57zxwHjqPnMdOopPkPHGeOs+c584L56XzynntvHHeOu+c984H56PzyfnsfHG+Ot+cmIM5uEM4pEM5tMM4rMM5vCM4oiM5sqM4qqM5umM4pmM5tuM4ruM5vhM4oQMc6CAncr47P5yfzi/nt/PH+ev8c+LcZG5yN4Wb0k3lpnbTuGndeDedm97N4GZ0M7mZ3QQ3i5vVzeZmd3O4Od1cbm43j5vXzefmdwu4Bd1CbmG3iFvULeYWd0u4Jd1Sbmm3jFvWLeeWdyu4Fd1KbmW3ilvVreZWd2u4Nd1abm33P7eOW9et59Z3G7gN3UZuY7eJ29Rt5jZ3W7gt3VZua7eN29Zt57Z3O7gd3U5uZ7eL29Xt5nZ3e7g93V5ub7eP29ft5/Z3B7gD3UHuYHeIO9Qd5g53R7gj3VHuaHeMO9Yd5453J7gT3UnuZHeKO9Wd5k53Z7gz3VnubHeOO9ed5853F7gL3UXuYneJu9Rd5i53V7gr3VXuaneNu9Zd5653N7gb3U3uZneLu9Xd5m53d7g73V3ubnePu9fd5+53D7gH3UPuYfeIe9Q95h53T7gn3VPuafeMe9Y95553L7gX3UvuZfeKe9W95l53b7g33VvubfeOe9e95953H7gP3UfuYzfRTXKfuE/dZ+5z94X70n3lvnbfuG/dd+5794P70f3kfna/uF/db27MxVzcJVzSpVzaZVzW5VzeFVzRlVzZVVzV1VzdNVzTtVzbdVzX9VzfDdzQBS50kRu5390f7k/3l/vb/eP+df+5cV4yL7mXwkvppfJSe2m8tF68l85L72XwMnqZvMxegpfFy+pl87J7ObycXi4vt5fHy+vl8/J7BbyCXiGvsFfEK+oV84p7JbySXimvtFfGK+uV88p7FbyKXiWvslfFq+pV86p7NbyaXi2vtvefV8er69Xz6nsNvIZeI6+x18Rr6jXzmnstvJZeK6+118Zr67Xz2nsdvI5eJ6+z18Xr6nXzuns9vJ5eL6+318fr6/Xz+nsDvIHeIG+wN8Qb6g3zhnsjvJHeKG+0N8Yb643zxnsTvIneJG+yN8Wb6k3zpnszvJneLG+2N8eb683z5nsLvIXeIm+xt8Rb6i3zlnsrvJXeKm+1t8Zb663z1nsbvI3eJm+zt8Xb6m3ztns7vJ3eLm+3t8fb6+3z9nsHvIPeIe+wd8Q76h3zjnsnvJPeKe+0d8Y7653zznsXvIveJe+yd8W76l3zrns3vJveLe+2d8e7693z7nsPvIfeI++xl+gleU+8p94z77n3wnvpvfJee2+8t9477733wfvoffI+e1+8r943L+ZhHu4RHulRHu0xHutxHu8JnuhJnuwpnuppnu4ZnulZnu05nut5nu8FXugBD3rIi7zv3g/vp/fL++398f56/7w4P5mf3E/hp/RT+an9NH5aP95P56f3M/gZ/Ux+Zj/Bz+Jn9bP52f0cfk4/l5/bz+Pn9fP5+f0CfkG/kF/YL+IX9Yv5xf0Sfkm/lF/aL+OX9cv55f0KfkW/kl/Zr+JX9av51f0afk2/ll/b/8+v49f16/n1/QZ+Q7+R39hv4jf1m/nN/RZ+S7+V39pv47f12/nt/Q5+R7+T39nv4nf1u/nd/R5+T7+X39vv4/f1+/n9/QH+QH+QP9gf4g/1h/nD/RH+SH+UP9of44/1x/nj/Qn+RH+SP9mf4k/1p/nT/Rn+TH+WP9uf48/15/nz/QX+Qn+Rv9hf4i/1l/nL/RX+Sn+Vv9pf46/11/nr/Q3+Rn+Tv9nf4m/1t/nb/R3+Tn+Xv9vf4+/19/n7/QP+Qf+Qf9g/4h/1j/nH/RP+Sf+Uf9o/45/1z/nn/Qv+Rf+Sf9m/4l/1r/nX/Rv+Tf+Wf9u/49/17/n3/Qf+Q/+R/9hP9JP8J/5T/5n/3H/hv/Rf+a/9N/5b/53/3v/gf/Q/+Z/9L/5X/5sf8zEf9wmf9Cmf9hmf9Tmf9wVf9CVf9hVf9TVf9w3f9C3f9h3f9T3f9wM/9IEPfeRH/nf/h//T/+X/9v/4f/1/flyQLEgepAhSBqmC1EGaIG0QH6QL0gcZgoxBpiBzkBBkCbIG2YLsQY4gZ5AryB3kCfIG+YL8QYGgYFAoKBwUCYoGxYLiQYmgZFAqKB2UCcoG5YLyQYWgYlApqBxUCaoG1YLqQY2gZlArqB3Ex/1f/aBB0DBoFDQOmgRNg2ZB86BF0DJoFbQO2gRtg3ZB+6BD0DHoFHQOugRdg25B96BH0DPoFfQO+gR9g35B/2BAMDAYFAwOhgRDg2HB8GBEMDIYFYwOxgRjg3HB+GBCMDGYFEwOpgRTg2nB9GBGMDOYFcwO5gRzg3nB/GBBsDBYFCwOlgRLg2XB8mBFsDJYFawO1gRrg3XB+mBDsDHYFGwOtgRbg23B9mBHsDPYFewO9gR7g33B/uBAcDA4FBwOjgRHg2PB8eBEcDI4FZwOzgRng3PB+eBCcDG4FFwOrgRXg2vB9eBGcDO4FdwO7gR3g3vB/eBB8DB4FDwOEoOk4EnwNHgWPA9eBC+DV8Hr4E3wNngXvA8+BB+DT8Hn4EvwNfgWxAIswAMiIAMqoAMmYAMu4AMhEAMpkAMlUAMt0AMjMAMrsAMncAMv8IMgCAMQwAAFUfA9+BH8DH4Fv4M/wd/gXxAXJguThynClGGqMHWYJkwbxofpwvRhhjBjmCnMHCaEWcKsYbYwe5gjzBnmCnOHecK8Yb4wf1ggLBgWCguHRcKiYbGweFgiLBmWCkuHZcKyYbmwfFghrBhWCiuHVcKqYbWwelgjrBnWCmuH/4V1wrphvbB+2CBsGDYKG4dNwqZhs7B52CJsGbYKW4dtwrZhu7B92CHsGHYKO4ddwq5ht7B72CPsGfYKe4d9wr5hv7B/OCAcGA4KB4dDwqHhsHB4OCIcGY4KR4djwrHhuHB8OCGcGE4KJ4dTwqnhtHB6OCOcGc4KZ4dzwrnhvHB+uCBcGC4KF4dLwqXhsnB5uCJcGa4KV4drwrXhunB9uCHcGG4KN4dbwq3htnB7uCPcGe4Kd4d7wr3hvnB/eCA8GB4KD4dHwqPhsfB4eCI8GZ4KT4dnwrPhufB8eCG8GF4KL4dXwqvhtfB6eCO8Gd4Kb4d3wrvhvfB++CB8GD4KH4eJYVL4JHwaPgufhy/Cl+Gr8HX4Jnwbvgvfhx/Cj+Gn8HP4JfwafgtjIRbiIRGSIRXSIROyIRfyoRCKoRTKoRKqoRbqoRGaoRXaoRO6oRf6YRCGIQhhiMIo/B7+CH+Gv8Lf4Z/wb/gvjAPJQHKQAqQEqUBqkAakBfEgHUgPMoCMIBPIDBJAFpAVZAPZQQ6QE+QCuUEekBfkA/lBAVAQFAKFQRFQFBQDxUEJUBKUAqVBGVAWlAPlQQVQEVQClUEVUBVUA9VBDVAT1AK1wX+gDqgL6oH6oAFoCBqBxqAJaAqageagBWgJWoHWoA1oC9qB9qAD6Ag6gc6gC+gKuoHuoAfoCXqB3qAP6Av6gf5gABgIBoHBYAgYCoaB4WAEGAlGgdFgDBgLxoHxYAKYCCaByWAKmAqmgelgBpgJZoHZYA6YC+aB+WABWAgWgcVgCVgKloHlYAVYCVaB1WANWAvWgfVgA9gINoHNYAvYCraB7WAH2Al2gd1gD9gL9oH94AA4CA6Bw+AIOAqOgePgBDgJToHT4Aw4C86B8+ACuAgugcvgCrgKroHr4Aa4CW6B2+AOuAvugfvgAXgIHoHHIBEkgSfgKXgGnoMX4CV4BV6DN+AteAfegw/gI/gEPoMv4Cv4BmIAAzggAAkoQAMGsIADPBCACCQgAwWoQAM6MIAJLGADB7jAAz4IQAgAgACBCHwHP8BP8Av8Bn/AX/APxMFkMDlMAVPCVDA1TAPTwniYDqaHGWBGmAlmhgkwC8wKs8HsMAfMCXPB3DAPzAvzwfywACwIC8HCsAgsCovB4rAELAlLwdKwDCwLy8HysAKsCCvByrAKrAqrweqwBqwJa8Ha8D9YB9aF9WB92AA2hI1gY9gENoXNYHPYAraErWBr2Aa2he1ge9gBdoSdYGfYBXaF3WB32AP2hL1gb9gH9oX9YH84AA6Eg+BgOAQOhcPgcDgCjoSj4Gg4Bo6F4+B4OAFOhJPgZDgFToXT4HQ4A86Es+BsOAfOhfPgfLgALoSL4GK4BC6Fy+ByuAKuhKvgargGroXr4Hq4AW6Em+BmuAVuhdvgdrgD7oS74G64B+6F++B+eAAehIfgYXgEHoXH4HF4Ap6Ep+BpeAaehefgeXgBXoSX4GV4BV6F1+B1eAPehLfgbXgH3oX34H34AD6Ej+BjmAiT4BP4FD6Dz+EL+BK+gq/hG/gWvoPv4Qf4EX6Cn+EX+BV+gzGIQRwSkIQUpCEDWchBHgpQhBKUoQJVqEEdGtCEFrShA13oQR8GMIQAQohgBL/DH/An/AV/wz/wL/wH41AylBylQClRKpQapUFpUTxKh9KjDCgjyoQyowSUBWVF2VB2lAPlRLlQbpQH5UX5UH5UABVEhVBhVAQVRcVQcVQClUSlUGlUBpVF5VB5VAFVRJVQZVQFVUXVUHVUA9VEtVBt9B+qg+qieqg+aoAaokaoMWqCmqJmqDlqgVqiVqg1aoPaonaoPeqAOqJOqDPqgrqibqg76oF6ol6oN+qD+qJ+qD8agAaiQWgwGoKGomFoOBqBRqJRaDQag8aicWg8moAmokloMpqCpqJpaDqagWaiWWg2moPmonloPlqAFqJFaDFagpaiZWg5WoFWolVoNVqD1qJ1aD3agDaiTWgz2oK2om1oO9qBdqJdaDfag/aifWg/OoAOokPoMDqCjqJj6Dg6gU6iU+g0OoPOonPoPLqALqJL6DK6gq6ia+g6uoFuolvoNrqD7qJ76D56gB6iR+gxSkRJ6Al6ip6h5+gFeoleodfoDXqL3qH36AP6iD6hz+gL+oq+oRjCEI4IRCIK0YhBLOIQjwQkIgnJSEEq0pCODGQiC9nIQS7ykI8CFCKAIEIoQt/RD/QT/UK/0R/0F/1DcVGyKHmUIkoZpYpSR2mitFF8lC5KH2WIMkaZosxRQpQlyhpli7JHOaKcUa4od5Qnyhvli/JHBaKCUaGocFQkKhoVi4pHJaKSUamodFQmKhuVi8pHFaKKUaWoclQlqhpVi6pHNaKaUa2odvRfVCeqG9WL6kcNooZRo6hx1CRqGjWLmkctopZRq6h11CZqG7WL2kcdoo5Rp6hz1CXqGnWLukc9op5Rr6h31CfqG/WL+kcDooHRoGhwNCQaGg2LhkcjopHRqGh0NCYaG42LxkcToonRpGhyNCWaGk2LpkczopnRrGh2NCeaG82L5kcLooXRomhxtCRaGi2LlkcropXRqmh1tCZaG62L1kcboo3RpmhztCXaGm2Ltkc7op3Rrmh3tCfaG+2L9kcHooPRoehwdCQ6Gh2LjkcnopPRqeh0dCY6G52LzkcXoovRpehydCW6Gl2Lrkc3opvRreh2dCe6G92L7kcPoofRo+hxlBglRf9j566jNSvOROG/LUiwACEEYjQEd3eLQIAAIVgEbaDRRht3d3d3d3d3d3d3t7d8fyuk4QZm5rtr7rp3MrP4/f44T721a1fVrlrnPHX2Wevc3r+jf2f/rv7d/Xv69/bv69/ff6D/YP+h/sP9R/qP9h/rP95/ov9k/6n+0/1n+s/2n+s/33+h/2L/pf7L/Vf6r/Zf67/ef6P/Zv+t/tv9d/rv9t/rv9//oP9h/6P+x/1P+p/2P+t/3v+i/2W/3w/92E/93C/92m/9rt8LA8LAMCgMDqOEUcNoYfTwgzBGGDOMFcYO44QfhnHDeGH88KMwQfhxmDD8JEwUJg4/DT8LPw+/CL8Mk4QhYdIwWfhVmDxMEaYMU4WpwzRh2jBdmD7MEGYMM4WZwyxh1jBbmD3MEeYMc4W5wzxh3jBfmD8sEBYMC4WFw6/Db8Jvw+/CImHR8PuwWFg8LBH+EJYMS4Wlwx/DMuFPYdmwXFg+rBBWDH8Ofwl/DX8LK4WVwyph1bBaWD0MDWuENcNaYVhYO6wT1g3rhfXDBmF42DBsFDYOm4RNw2ZhRNg8bBG2DFuFrcM2YduwXdg+7BB2DDuFncMuYdewW9g97BH2DHuFvcM+Yd+wX9g/HBAODAeFg8Mh4dBwWDg8HBGODEeFo8Mx4dhwXDg+nBBODCeFk8Mp4dRwWjg9nBHODGeFs8M54dxwXjg/XBAuDBeFi8Ml4dJwWbg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8Mt4dZwW7g93BHuDHeFu8M94d5wX7g/PBAeDA+Fh8Mj4dHwWHg8PBGeDE+Fp8Mz4dnwXHg+vBBeDC+Fl8Mr4dXwWng9vBHeDG+Ft8M74d3wXng/fBA+DB+Fj8Mn4dPwWfg8fBG+DP0QQgwp5FBCDS10oRcHxIFxUBwcR4mjxtHi6PEHcYw4Zhwrjh3HiT+M48bx4vjxR3GC+OM4YfxJnChOHH8afxZ/Hn8RfxkniUPipHGy+Ks4eZwiThmnilPHaeK0cbo4fZwhzhhnijPHWeKscbY4e5wjzhnninPHeeK8cb44f1wgLhgXigvHX8ffxN/G38VF4qLx93GxuHhcIv4hLhmXikvHP8Zl4p/isnG5uHxcIa4Y/xz/Ev8a/xZXiivHVeKqcbW4ehwa14hrxrXisLh2XCeuG9eL68cN4vC4Ydwobhw3iZvGzeKIuHncIm4Zt4pbx23itnG7uH3cIe4Yd4o7x13irnG3uHvcI+4Z94p7x33ivnG/uH88IB4YD4oHx0PiofGweHg8Ih4Zj4pHx2PisfG4eHw8IZ4YT4onx1PiqfG0eHo8I54Zz4pnx3PiufG8eH68IF4YL4oXx0vipfGyeHm8Il4Zr4pXx2vitfG6eH28Id4Yb4o3x1virfG2eHu8I94Z74p3x3vivfG+eH98ID4YH4oPx0fio/Gx+Hh8Ij4Zn4pPx2fis/G5+Hx8Ib4YX4ovx1fiq/G1+Hp8I74Z34pvx3fiu/G9+H78IH4YP4ofx0/ip/Gz+Hn8In4Z+zHEGFPMscQaW+xiLw1IA9OgNDiNkkZNo6XR0w/SGGnMNFYaO42TfpjGTeOl8dOP0gTpx2nC9JM0UZo4/TT9LP08/SL9Mk2ShqRJ02TpV2nyNEWaMk2Vpk7TpGnTdGn6NEOaMc2UZk6zpFnTbGn2NEeaM82V5k7zpHnTfGn+tEBaMC2UFk6/Tr9Jv02/S4ukRdPv02Jp8bRE+kNaMi2Vlk5/TMukP6Vl03Jp+bRCWjH9Of0l/TX9La2UVk6rpFXTamn1NDStkdZMa6Vhae20Tlo3rZfWTxuk4WnDtFHaOG2SNk2bpRFp87RF2jJtlbZO26Rt03Zp+7RD2jHtlHZOu6Rd025p97RH2jPtlfZO+6R9035p/3RAOjAdlA5Oh6RD02Hp8HREOjIdlY5Ox6Rj03Hp+HRCOjGdlE5Op6RT02np9HRGOjOdlc5O56Rz03np/HRBujBdlC5Ol6RL02Xp8nRFujJdla5O16Rr03Xp+nRDujHdlG5Ot6Rb023p9nRHujPdle5O96R7033p/vRAejA9lB5Oj6RH02Pp8fREejI9lZ5Oz6Rn03Pp+fRCejG9lF5Or6RX02vp9fRGejO9ld5O76R303vp/fRB+jB9lD5On6RP02fp8/RF+jL1U0gxpZRTSTW11KVeHpAH5kF5cB4lj5pHy6PnH+Qx8ph5rDx2Hif/MI+bx8uDez/KE+Qf5wnzT/JEeeL80/yz/PP8i/zLPEkekifNk+Vf5cnzFHnKPFWeOk+Tp83T5enzDHnGPFOeOc+SZ82z5dnzHHnOPFeeO8+T583z5fnzAnnBvFBeOP86/yb/Nv8uL5IXzb/Pi+XF8xL5D3nJvFReOv8xL5P/lJfNy+Xl8wp5xfzn/Jf81/y3vFJeOa+SV82r5dXz0LxGXjOvlYfltfM6ed28Xl4/b5CH5w3zRnnjvEneNG+WR+TN8xZ5y7xV3jpvk7fN2+Xt8w55x7xT3jnvknfNu+Xd8x55z7xX3jvvk/fN++X98wH5wHxQPjgfkg/Nh+XD8xH5yHxUPjofk4/Nx+Xj8wn5xHxSPjmfkk/Np+XT8xn5zHxWPjufk8/N5+Xz8wX5wnxRvjhfki/Nl+XL8xX5ynxVvjpfk6/N1+Xr8w35xnxTvjnfkm/Nt+Xb8x35znxXvjvfk+/N9+X78wP5wfxQfjg/kh/Nj+XH8xP5yfxUfjo/k5/Nz+Xn8wv5xfxSfjm/kl/Nr+XX8xv5zfxWfju/k9/N7+X38wf5w/xR/jh/kj/Nn+XP8xf5y9zPIceccs4l19xyl3tlQBlYBpXBZZQyahmtjF5+UMYoY5axythlnPLDMm4Zr4xfflQmKD8uE5aflInKxOWn5Wfl5+UX5ZdlkjKkTFomK78qk5cpypRlqjJ1maZMW6Yr05cZyoxlpjJzmaXMWmYrs5c5ypxlrjJ3mafMW+Yr85cFyoJlobJw+XX5Tflt+V1ZpCxafl8WK4uXJcofypJlqbJ0+WNZpvypLFuWK8uXFcqK5c/lL+Wv5W9lpbJyWaWsWlYrq5ehZY2yZlmrDCtrl3XKumW9sn7ZoAwvG5aNysZlk7Jp2ayMKJuXLcqWZauyddmmbFu2K9uXHcqOZaeyc9ml7Fp2K7uXPcqeZa+yd9mn7Fv2K/uXA8qB5aBycDmkHFoOK4eXI8qR5ahydDmmHFuOK8eXE8qJ5aRycjmlnFpOK6eXM8qZ5axydjmnnFvOK+eXC8qF5aJycbmkXFouK5eXK8qV5apydbmmXFuuK9eXG8qN5aZyc7ml3FpuK7eXO8qd5a5yd7mn3FvuK/eXB8qD5aHycHmkPFoeK4+XJ8qT5anydHmmPFueK8+XF8qL5aXycnmlvFpeK6+XN8qb5a3ydnmnvFveK++XD8qH5aPycfmkfFo+K5+XL8qXpV9CiSWVXEqppZWu9OqAOrAOqoPrKHXUOlodvf6gjlHHrGPVses49Yd13DpeHb/+qE5Qf1wnrD+pE9WJ60/rz+rP6y/qL+skdUidtE5Wf1Unr1PUKetUdeo6TZ22TlenrzPUGetMdeY6S521zlZnr3PUOetcde46T523zlfnrwvUBetCdeH66/qb+tv6u7pIXbT+vi5WF69L1D/UJetSden6x7pM/VNdti5Xl68r1BXrn+tf6l/r3+pKdeW6Sl21rlZXr0PrGnXNulYdVteu69R163p1/bpBHV43rBvVjesmddO6WR1RN69b1C3rVnXruk3dtm5Xt6871B3rTnXnukvdte5Wd6971D3rXnXvuk/dt+5X968H1APrQfXgekg9tB5WD69H1CPrUfXoekw9th5Xj68n1BPrSfXkeko9tZ5WT69n1DPrWfXsek49t55Xz68X1AvrRfXiekm9tF5WL69X1CvrVfXqek29tl5Xr6831BvrTfXmeku9td5Wb6931DvrXfXuek+9t95X768P1AfrQ/Xh+kh9tD5WH69P1CfrU/Xp+kx9tj5Xn68v1BfrS/Xl+kp9tb5WX69v1DfrW/Xt+k59t75X368f1A/rR/Xj+kn9tH5WP69f1C9rv4Yaa6q5llprq13ttQFtYBvUBrdR2qhttDZ6+0Ebo43Zxmpjt3HaD9u4bbw2fvtRm6D9uE3YftImahO3n7aftZ+3X7RftknakDZpm6z9qk3epmhTtqna1G2aNm2brk3fZmgztpnazG2WNmubrc3e5mhztrna3G2eNm+br83fFmgLtoXawu3X7Tftt+13bZG2aPt9W6wt3pZof2hLtqXa0u2PbZn2p7ZsW64t31ZoK7Y/t7+0v7a/tZXaym2Vtmpbra3ehrY12pptrTasrd3Waeu29dr6bYM2vG3YNmobt03apm2zNqJt3rZoW7at2tZtm7Zt265t33ZoO7ad2s5tl7Zr263t3vZoe7a92t5tn7Zv26/t3w5oB7aD2sHtkHZoO6wd3o5oR7aj2tHtmHZsO64d305oJ7aT2sntlHZqO62d3s5oZ7az2tntnHZuO6+d3y5oF7aL2sXtknZpu6xd3q5oV7ar2tXtmnZtu65d325oN7ab2s3tlnZru63d3u5od7a72t3tnnZvu6/d3x5oD7aH2sPtkfZoe6w93p5oT7an2tPtmfZse649315oL7aX2svtlfZqe6293t5ob7a32tvtnfZue6+93z5oH7aP2sftk/Zp+6x93r5oX7Z+Cy221HIrrbbWutbrBnQDu0Hd4G6UbtRutG707gfdGN2Y3Vjd2N043Q+7cbvxuvG7H3UTdD/uJux+0k3UTdz9tPtZ9/PuF90vu0m6Id2k3WTdr7rJuym6Kbupuqm7abppu+m66bsZuhm7mbqZu1m6WbvZutm7Obo5u7m6ubt5unm7+br5uwW6BbuFuoX/j+5fqVu5W6VbtVutW70b2q3Rrdmt1Q3r1u7W6dbt1uvW7zbohncbdht1G3ebdJt2m3Ujus27Lbotu626rbttum277brtux26Hbudup27Xbpdu9263bs9uj27vbq9u326fbv9uv27A7oDu4O6g7tDukO7w7rDuyO6I7ujuqO7Y7pju+O647sTuhO7k7qTu1O6U7vTutO7M7ozu7O6s7tzunO787rzuwu6C7uLuou7S7pLu8u6y7sruiu7q7qru2u6a7vruuu7G7obu5u6m7tbulu727rbuzu6O7u7uru7e7p7u/u6+7sHuge7h7qHu0e6R7vHuse7J7onu6e6p7tnume757rnuxe6F7uXupe7V7pXu9e617s3uje7t7q3u3e6d7v3uve7D7oPu4+6j7tPuk+7z7rPuy+6L7t+F7rYpS53patd67quBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/xOLLr7kIjP3Rvnm84DegN7CvQG9kwf0er3R/1e7wSPjoO/cP26v11v9q9JEX31dbGRp51Uem3l4enrAfxRH/fcmM+DfVs3c6/XW/ab/gb0lvioNGDnjUf634/ReHtnR0/8IX487eNDkvaV6i/aWH/l555Fz//vT//NEFhwZF/664uNB/24cb6F/rNDF3+rnu6v1T/2M+63wTRxvwMCvYtd13b+3RP93/dv58X1i/7/f7P//NP/Z/PJ1Cv86fju/DPoP8//q38n/g0ZmxYHfGe+/Iv9v8k3/A3vL/mfz/5CRHY2MX487+jf5f6neer3NepuNrP+PzgEDvru+Q/79OOnA7p/W97+77+4m3y/2//vN/n+/Dfw3+X/g/0/+H/g/Mf9/8+biH/Gf8/+SvY176/QW7a3XG94bNrL+P8r/C42M3+T/7/T7dZx04QFf3ST/89+f/f9+s//fb/82/w8amf/f/k7+H3XkGWDwd3oYd2S+/Dr/z/x/mP+//Z5/QG+Z/3Se/7av+x9t0OS9FXsb94b3tuht2Bv2Vb87fzPOwN5a34w4eOe/P8fXfw+Y4Kurs4/8Dpmgd9KA8Xv/yOy9UcYfef9Xdf9oMMrff/0fMrD3rTbfvdYbeVaa+ZvxB/fGH1ka0dumt21vg97Q3vCvTiNfv4/4+9ln6m/aj9Ib65uVHrlfI59852/qJ/rmvdBE/9tzyHd3k+8X+//9Zv+/3wZ/lR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5ZDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/acQ2224wdPjwYZspKCgofFP4V/9kAgAA/m/7X4f+f/VMAAAAAAAAAAAAAAAAAAAA4Pvrv+Lfif2rnxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh+eW/Zg5deftHlhgwZMqQ3+sCRleHbbXbu7dzrBv2jPHhkXTcyftHr9Qb0er2DZr93kcOnHH/bv9eNM8mNm25//mQ3bz7mipePc91ovQfGXfW9j2d9/YEJH5j4vbb8uuuNGLLeiCEbbbz5kKFD1th4482HrjF82JC11huxwYxDlhk+bOiIYUPW22jEsM2+dXnt4Rtvssk2Q4ZutNbYY2yy2bARI4YM3WibIRsM22bI5hsP2XyzbYYMXWfoehsNmXHGGYeMPcZ/1dr9z7fCuf/qGQDwr/H/BQAA//+i94h0") syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6d2, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001840)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000d40)) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001880)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x31, 0x5, 0x4, 0x5, 0x3, 0x3e, 0x3, 0x109, 0x40, 0x252, 0x4, 0xa, 0x38, 0x1, 0xdbe5, 0xe, 0x5}, [{0x0, 0x38bc0000, 0x400000065, 0x9, 0x7, 0x7, 0x7fffffff, 0x4}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x778) utime(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)={0x5, 0x6}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000380)=0x16f16885, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0xfffffffe}, 0x1c) open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x20) 10.017773176s ago: executing program 0 (id=743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r4, 0x0, 0x0, 0x40000, &(0x7f0000001080)={0x2, 0x4e22, @loopback}, 0x10) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000001180)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000ff000040"]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 9.916820266s ago: executing program 3 (id=744): openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0xf1, &(0x7f0000000000)={0xffffffff, 0x0, 0x8}) syz_open_dev$video4linux(0x0, 0xff, 0x101000) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000bdc8a0930136388520a54a95a0a1094ada47f103d4dda5db7d9eddd63c0d1832120bb29b66c45420de69818b4a042d06"]) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)="c0c957d020443ad68b", 0x9}, 0x1, 0x0, 0x0, 0x804}, 0x4048801) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000300)={0x1d, r4, 0x0, {0x0, 0xf1}, 0xfe}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001640)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xb}, {0x8, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 8.076442962s ago: executing program 4 (id=748): socket$packet(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x10001}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214ffff0600fffff8070000000000000000000100080003000b000000", 0x24) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e23, @loopback=0x7f000000}}) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x800, &(0x7f0000000000)=0x0) r6 = eventfd(0xc7) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r6, 0x0, 0x0, 0xffffffffffffffb5, 0x0, 0x0, r6}]) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 6.272347944s ago: executing program 0 (id=750): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3, 0x800}, &(0x7f0000001200), 0x0) r3 = socket(0x11, 0x800000002, 0x0) io_setup(0x40, &(0x7f0000000080)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) io_pgetevents(r4, 0x1, 0x1, &(0x7f0000001940)=[{}], 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x3}]) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'ipvlan0\x00', {0x2, 0x0, @loopback}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x109802, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r8, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0xc0884113, &(0x7f0000000240)={0x1, 0x1fffffe, 0x2, 0x80000000006, 0x8000000000000000, 0x100000001, 0xfffdfffffffffffb, 0x0, 0xfffffffffffffffd, 0x1000000000004, 0xfffffffd, 0x1}) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) 5.821649641s ago: executing program 2 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000000140)={0x0, [0x4c, 0x7ff, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x0, 0xfffffffd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x40000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) 5.811048528s ago: executing program 1 (id=752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000000"]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x48000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10059, &(0x7f00000000c0), 0x3, 0x51e, &(0x7f0000001200)="$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") chdir(0x0) 3.627367095s ago: executing program 2 (id=753): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000640)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r5, 0x1) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b4a, 0xffffffffffffff15) setpgid(r0, r0) close(r4) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) ioperm(0x83, 0x6, 0x8) prlimit64(r0, 0xd, &(0x7f0000000000)={0x2, 0x7}, &(0x7f00000000c0)) 3.41604213s ago: executing program 1 (id=754): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2a00a9, &(0x7f00000003c0)=ANY=[@ANYBLOB="696e6f6465466b9133322c6e725f696e6f6465733d382c007703d1fa1bd2cf83c5df18745e4bff082b2062b1e4983e5c97989c992e42c173b1088942da54ab8048e915e32615f6fe48bdb57c4be7c78a013888777f5399aedbd86ac79e1c262e50020173f07af7d0fea0363758c71aa18ce31162ab79c4fc5925ea8941975886ad9cbd57becf9ed2497a205136591886a9b9c6be"]) 2.587481575s ago: executing program 4 (id=755): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x2904c, 0x3, 0x10003, '\x00', [{0xffffffff, 0x4, 0x2fee, 0xffffffffffffffff, 0x0, 0x2}, {0xffffffff, 0x4, 0x0, 0x1, 0x4}], ['\x00', '\x00', '\x00']}) 2.542195448s ago: executing program 2 (id=756): mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x8d03000) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000c80)=ANY=[], 0x1, 0x253, &(0x7f0000000740)="$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") connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) sendfile(0xffffffffffffffff, r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 2.395599874s ago: executing program 1 (id=757): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1200040, &(0x7f0000000640)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d312c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c757466383d302c757466383d302c6e66732c0034003fc9cd02a9", @ANYRES16], 0x3, 0x377, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r1, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) 2.060770757s ago: executing program 4 (id=758): unshare(0x28040680) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') unshare(0x2a020480) fchdir(r0) 1.713408628s ago: executing program 3 (id=759): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x9) r1 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0xffffbffc, 'syz0\x00'}, 0x2, 0x2, 0x7, r1, 0x0, 0xff, 'syz1\x00', 0x0}) 1.712945423s ago: executing program 2 (id=760): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@discard}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd27, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x10, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040094) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) syz_mount_image$fuse(&(0x7f0000002780), &(0x7f00000027c0)='./file0\x00', 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64e8000000f25b303030303030303030303030303032303030302c757365725f69643d44a588c6f87535f7b4e216a2723970900fdb692e92c61de563d5f95d7b11f45e4f510f3967142ccee2c772ea4e80e930cf631b3c726c44d3e65e04481d712fc29471b1d907acc979cafb0b47bd9ff93a1ed1becc08a9cfdda46ce2323588cba2087fa231237362c18f5e40628d94d8737a1d0a1f985b3b3fdea292f903634883ddf3c696f3f106ac130a8ec9192f730b82aabb44", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) 1.436014531s ago: executing program 3 (id=761): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 1.379621179s ago: executing program 1 (id=762): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="78000000030105000000000000000000000000080800074000000006140005800e000100736e6d705f7482617000000024000f8008000340"], 0x78}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000201c001a800800028008000200080000003e"], 0x44}}, 0x4480) 1.056490692s ago: executing program 4 (id=763): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1204020, 0x1, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) write$FUSE_ENTRY(r4, &(0x7f0000000340)={0x90, 0x0, r1, {0x2, 0x0, 0xa, 0x0, 0x800, 0x7, {0x5, 0x6, 0x7ff, 0x5, 0x51b5, 0x4, 0x1, 0x7fffffff, 0xf5, 0x6000, 0x9, r2, r3, 0x6, 0x3e}}}, 0x90) mount$tmpfs(0x0, 0x0, 0x0, 0x2200c3a, 0x0) dup3(r4, r0, 0x0) 708.868722ms ago: executing program 2 (id=764): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000240)) 302.690763ms ago: executing program 3 (id=765): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000730153000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 224.584088ms ago: executing program 1 (id=766): ioperm(0x0, 0x87, 0x3ff) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 164.959039ms ago: executing program 2 (id=767): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x0) pipe2(0x0, 0x80000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) 81.426354ms ago: executing program 3 (id=768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101142, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000a40)={0x4, 0x2c0, 0x100, 0x0}) 377.397µs ago: executing program 1 (id=769): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x18, 0x8003) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/pid_for_children\x00') 0s ago: executing program 4 (id=770): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000340)=[0xee00]) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000001040)='./file1/file0\x00', 0x208000, &(0x7f0000002b40)={[{@debug}, {@errors_continue}, {@nojournal_checksum}, {@noacl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}]}, 0x0, 0x50b, &(0x7f0000000b00)="$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") setregid(0x0, r0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setgroups(0x1, &(0x7f0000000080)=[0xee01]) preadv(r1, &(0x7f0000000040)=[{0x0}], 0x1, 0x8, 0x40) kernel console output (not intermixed with test programs): usb 2-1: device descriptor read/8, error -71 [ 223.386903][ T5878] usb 4-1: string descriptor 0 read error: -71 [ 223.393833][ T5878] hub 4-1:32.0: USB hub found [ 223.415506][ T5878] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 223.437824][ T5828] bcachefs (loop4): shutting down [ 223.453971][ T5828] bcachefs (loop4): going read-only [ 223.493065][ T5828] bcachefs (loop4): finished waiting for writes to stop [ 223.555287][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 223.565215][ T5878] usb 4-1: USB disconnect, device number 5 [ 223.597358][ T5828] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2 [ 223.622272][ T24] usb 2-1: device descriptor read/8, error -71 [ 223.666641][ T5828] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 223.685231][ T5828] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 223.736503][ T5828] bcachefs (loop4): marking filesystem clean [ 223.749393][ T24] usb usb2-port1: unable to enumerate USB device [ 223.763944][ T7227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.963759][ T5828] bcachefs (loop4): shutdown complete [ 224.012712][ T7223] loop3: detected capacity change from 0 to 4096 [ 224.292416][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.361918][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 225.125806][ T7237] loop2: detected capacity change from 0 to 256 [ 225.755211][ T7240] FAULT_INJECTION: forcing a failure. [ 225.755211][ T7240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.810614][ T7240] CPU: 0 UID: 0 PID: 7240 Comm: syz.1.336 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 225.810646][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.810658][ T7240] Call Trace: [ 225.810667][ T7240] [ 225.810675][ T7240] dump_stack_lvl+0x241/0x360 [ 225.810714][ T7240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.810745][ T7240] ? __pfx__printk+0x10/0x10 [ 225.810788][ T7240] should_fail_ex+0x424/0x570 [ 225.810822][ T7240] _copy_from_user+0x2d/0xb0 [ 225.810848][ T7240] video_usercopy+0x3bf/0x1330 [ 225.810884][ T7240] ? __pfx___video_do_ioctl+0x10/0x10 [ 225.810909][ T7240] ? __pfx_video_usercopy+0x10/0x10 [ 225.810947][ T7240] ? __fget_files+0x2a/0x420 [ 225.810981][ T7240] ? __fget_files+0x2a/0x420 [ 225.811014][ T7240] v4l2_ioctl+0x189/0x1e0 [ 225.811037][ T7240] ? __pfx_v4l2_ioctl+0x10/0x10 [ 225.811062][ T7240] __se_sys_ioctl+0xf1/0x160 [ 225.811089][ T7240] do_syscall_64+0xf3/0x230 [ 225.811113][ T7240] ? clear_bhb_loop+0x45/0xa0 [ 225.811137][ T7240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.811157][ T7240] RIP: 0033:0x7f96eef8d169 [ 225.811175][ T7240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.811192][ T7240] RSP: 002b:00007f96efd5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.811214][ T7240] RAX: ffffffffffffffda RBX: 00007f96ef1a5fa0 RCX: 00007f96eef8d169 [ 225.811229][ T7240] RDX: 0000200000000940 RSI: 00000000c040565f RDI: 0000000000000004 [ 225.811242][ T7240] RBP: 00007f96efd5f090 R08: 0000000000000000 R09: 0000000000000000 [ 225.811254][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.811266][ T7240] R13: 0000000000000000 R14: 00007f96ef1a5fa0 R15: 00007ffdbc5b2e88 [ 225.811297][ T7240] [ 226.166019][ T7247] loop2: detected capacity change from 0 to 512 [ 226.172787][ T7247] EXT4-fs: inline encryption not supported [ 226.329872][ T7247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.342998][ T7247] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.398081][ T7247] EXT4-fs error (device loop2): ext4_do_update_inode:5182: inode #2: comm syz.2.337: corrupted inode contents [ 228.533737][ T7247] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz.2.337: mark_inode_dirty error [ 229.544592][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 230.786368][ T7256] loop0: detected capacity change from 0 to 512 [ 230.897351][ T55] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 230.927633][ T7256] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 230.968503][ T7256] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 230.978633][ T7256] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 230.987205][ T7256] System zones: 0-2, 18-18, 34-34 [ 230.998267][ T7256] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 231.029401][ T7256] EXT4-fs (loop0): 1 truncate cleaned up [ 231.043423][ T7256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.470519][ T7247] EXT4-fs error (device loop2): ext4_do_update_inode:5182: inode #2: comm syz.2.337: corrupted inode contents [ 231.510977][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.522499][ T7247] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.337: mark_inode_dirty error [ 231.668112][ T7263] FAULT_INJECTION: forcing a failure. [ 231.668112][ T7263] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.681917][ T7263] CPU: 1 UID: 0 PID: 7263 Comm: syz.0.339 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 231.681953][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.681966][ T7263] Call Trace: [ 231.681975][ T7263] [ 231.681983][ T7263] dump_stack_lvl+0x241/0x360 [ 231.682023][ T7263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.682054][ T7263] ? __pfx__printk+0x10/0x10 [ 231.682095][ T7263] should_fail_ex+0x424/0x570 [ 231.682130][ T7263] prepare_alloc_pages+0x220/0x610 [ 231.682160][ T7263] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 231.682183][ T7263] ? look_up_lock_class+0x7b/0x170 [ 231.682208][ T7263] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 231.682239][ T7263] ? __lock_acquire+0xad5/0xd80 [ 231.682263][ T7263] ? do_raw_spin_lock+0x151/0x370 [ 231.682294][ T7263] alloc_pages_mpol+0x339/0x690 [ 231.682327][ T7263] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 231.682357][ T7263] ? __lock_acquire+0xad5/0xd80 [ 231.682381][ T7263] alloc_pages_noprof+0x121/0x190 [ 231.682412][ T7263] get_free_pages_noprof+0xc/0x30 [ 231.682431][ T7263] __pollwait+0x137/0x440 [ 231.682463][ T7263] ? __pfx___pollwait+0x10/0x10 [ 231.682487][ T7263] sctp_poll+0xb2/0xa00 [ 231.682520][ T7263] sock_poll+0x34d/0x410 [ 231.682554][ T7263] ? __pfx_sock_poll+0x10/0x10 [ 231.682593][ T7263] do_select+0x1193/0x1bb0 [ 231.682655][ T7263] ? __pfx_do_select+0x10/0x10 [ 231.682690][ T7263] ? __pfx___pollwait+0x10/0x10 [ 231.682721][ T7263] ? __pfx_pollwake+0x10/0x10 [ 231.682753][ T7263] ? __pfx_pollwake+0x10/0x10 [ 231.682786][ T7263] ? __pfx_pollwake+0x10/0x10 [ 231.682818][ T7263] ? __pfx_pollwake+0x10/0x10 [ 231.682851][ T7263] ? __pfx_pollwake+0x10/0x10 [ 231.682883][ T7263] ? __pfx_pollwake+0x10/0x10 [ 231.682915][ T7263] ? __pfx_pollwake+0x10/0x10 [ 231.682954][ T7263] ? __pfx_pollwake+0x10/0x10 [ 231.682987][ T7263] ? __pfx_pollwake+0x10/0x10 [ 231.683039][ T7263] core_sys_select+0x85b/0xab0 [ 231.683079][ T7263] ? __pfx_core_sys_select+0x10/0x10 [ 231.683105][ T7263] ? rcu_read_lock_any_held+0xbb/0x160 [ 231.683137][ T7263] ? vfs_write+0xb29/0xd10 [ 231.683187][ T7263] ? __pfx_set_user_sigmask+0x10/0x10 [ 231.683220][ T7263] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 231.683244][ T7263] ? __fget_files+0x2a/0x420 [ 231.683282][ T7263] __se_sys_pselect6+0x356/0x3e0 [ 231.683314][ T7263] ? fput+0x9b/0xd0 [ 231.683346][ T7263] ? __pfx___se_sys_pselect6+0x10/0x10 [ 231.683384][ T7263] ? __x64_sys_pselect6+0x21/0xf0 [ 231.683415][ T7263] do_syscall_64+0xf3/0x230 [ 231.683440][ T7263] ? clear_bhb_loop+0x45/0xa0 [ 231.683465][ T7263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.683486][ T7263] RIP: 0033:0x7efc83d8d169 [ 231.683504][ T7263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.683522][ T7263] RSP: 002b:00007efc84b9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 231.683544][ T7263] RAX: ffffffffffffffda RBX: 00007efc83fa5fa0 RCX: 00007efc83d8d169 [ 231.683560][ T7263] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000040 [ 231.683573][ T7263] RBP: 00007efc84b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 231.683586][ T7263] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 231.683599][ T7263] R13: 0000000000000000 R14: 00007efc83fa5fa0 R15: 00007ffc4be548b8 [ 231.683631][ T7263] [ 232.016390][ T5152] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 232.027110][ T5152] CPU: 1 UID: 0 PID: 5152 Comm: kworker/u9:1 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 232.027140][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.027155][ T5152] Workqueue: hci2 hci_rx_work [ 232.027190][ T5152] Call Trace: [ 232.027198][ T5152] [ 232.027207][ T5152] dump_stack_lvl+0x241/0x360 [ 232.027244][ T5152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.027275][ T5152] ? __pfx__printk+0x10/0x10 [ 232.027303][ T5152] ? kernfs_path_from_node+0x2b/0x250 [ 232.027331][ T5152] ? kernfs_path_from_node+0x217/0x250 [ 232.027356][ T5152] sysfs_create_dir_ns+0x2fd/0x3f0 [ 232.027381][ T5152] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 232.027404][ T5152] kobject_add_internal+0x435/0x8d0 [ 232.027430][ T5152] kobject_add+0x15b/0x230 [ 232.027448][ T5152] ? do_raw_spin_unlock+0x13c/0x8b0 [ 232.027468][ T5152] ? device_add+0x3e7/0xbf0 [ 232.027488][ T5152] ? __pfx_kobject_add+0x10/0x10 [ 232.027507][ T5152] ? _raw_spin_unlock+0x28/0x50 [ 232.027523][ T5152] ? get_device_parent+0x165/0x410 [ 232.027547][ T5152] device_add+0x4e5/0xbf0 [ 232.027576][ T5152] hci_conn_add_sysfs+0xe8/0x200 [ 232.027598][ T5152] le_conn_complete_evt+0xc6e/0x12a0 [ 232.027623][ T5152] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 232.027638][ T5152] ? __mutex_unlock_slowpath+0x229/0x800 [ 232.027659][ T5152] ? __skb_clone+0x5c/0x6d0 [ 232.027694][ T5152] ? skb_pull_data+0x112/0x230 [ 232.027718][ T5152] hci_le_conn_complete_evt+0x18c/0x420 [ 232.027738][ T5152] hci_event_packet+0xa5c/0x1550 [ 232.027760][ T5152] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 232.027778][ T5152] ? __pfx_hci_event_packet+0x10/0x10 [ 232.027801][ T5152] ? kcov_remote_start+0x4b0/0x7d0 [ 232.027823][ T5152] ? lockdep_hardirqs_on+0x9d/0x150 [ 232.027841][ T5152] ? hci_send_to_monitor+0xdc/0x530 [ 232.027858][ T5152] hci_rx_work+0x3f3/0xdb0 [ 232.027884][ T5152] ? process_scheduled_works+0x9cb/0x18e0 [ 232.027897][ T5152] process_scheduled_works+0xac3/0x18e0 [ 232.027937][ T5152] ? __pfx_process_scheduled_works+0x10/0x10 [ 232.027958][ T5152] ? assign_work+0x367/0x3d0 [ 232.027975][ T5152] worker_thread+0x870/0xd50 [ 232.028001][ T5152] ? __kthread_parkme+0x1a8/0x200 [ 232.028019][ T5152] ? __pfx_worker_thread+0x10/0x10 [ 232.028034][ T5152] kthread+0x7b7/0x940 [ 232.028052][ T5152] ? __pfx_worker_thread+0x10/0x10 [ 232.028067][ T5152] ? __pfx_kthread+0x10/0x10 [ 232.028083][ T5152] ? __pfx_kthread+0x10/0x10 [ 232.028099][ T5152] ? __pfx_kthread+0x10/0x10 [ 232.028116][ T5152] ? __pfx_kthread+0x10/0x10 [ 232.028133][ T5152] ? _raw_spin_unlock_irq+0x23/0x50 [ 232.028145][ T5152] ? lockdep_hardirqs_on+0x9d/0x150 [ 232.028159][ T5152] ? __pfx_kthread+0x10/0x10 [ 232.028177][ T5152] ret_from_fork+0x4b/0x80 [ 232.028190][ T5152] ? __pfx_kthread+0x10/0x10 [ 232.028207][ T5152] ret_from_fork_asm+0x1a/0x30 [ 232.028231][ T5152] [ 232.028268][ T5152] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 232.320630][ T5152] Bluetooth: hci2: failed to register connection device [ 232.442009][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.740126][ T7269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.088564][ T7271] lo speed is unknown, defaulting to 1000 [ 233.095152][ T7271] lo speed is unknown, defaulting to 1000 [ 233.104703][ T7271] lo speed is unknown, defaulting to 1000 [ 233.118899][ T7271] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 233.137625][ T7271] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 233.265454][ T7271] lo speed is unknown, defaulting to 1000 [ 233.284423][ T7271] lo speed is unknown, defaulting to 1000 [ 233.302410][ T7271] lo speed is unknown, defaulting to 1000 [ 233.319886][ T7271] lo speed is unknown, defaulting to 1000 [ 233.337201][ T7271] lo speed is unknown, defaulting to 1000 [ 234.117895][ T7283] FAULT_INJECTION: forcing a failure. [ 234.117895][ T7283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.131668][ T7283] CPU: 0 UID: 0 PID: 7283 Comm: syz.1.346 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 234.131695][ T7283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 234.131717][ T7283] Call Trace: [ 234.131724][ T7283] [ 234.131732][ T7283] dump_stack_lvl+0x241/0x360 [ 234.131767][ T7283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.131795][ T7283] ? __pfx__printk+0x10/0x10 [ 234.131817][ T7283] ? lockdep_hardirqs_on+0x9d/0x150 [ 234.131858][ T7283] should_fail_ex+0x424/0x570 [ 234.131889][ T7283] _copy_to_user+0x31/0xb0 [ 234.131913][ T7283] vivid_radio_rx_read+0xb5b/0xd20 [ 234.131956][ T7283] ? __pfx_vivid_radio_rx_read+0x10/0x10 [ 234.131981][ T7283] ? rcu_read_lock_any_held+0xbb/0x160 [ 234.132006][ T7283] ? end_current_label_crit_section+0x151/0x180 [ 234.132028][ T7283] ? video_devdata+0x6b/0xc0 [ 234.132053][ T7283] v4l2_read+0x1a4/0x2c0 [ 234.132075][ T7283] ? __pfx_v4l2_read+0x10/0x10 [ 234.132097][ T7283] vfs_read+0x21f/0xb90 [ 234.132127][ T7283] ? __pfx_vfs_read+0x10/0x10 [ 234.132147][ T7283] ? __fget_files+0x2a/0x420 [ 234.132174][ T7283] ? __fget_files+0x2a/0x420 [ 234.132202][ T7283] ? __fget_files+0x39d/0x420 [ 234.132228][ T7283] ? __fget_files+0x2a/0x420 [ 234.132265][ T7283] ksys_read+0x19d/0x2d0 [ 234.132288][ T7283] ? __pfx_ksys_read+0x10/0x10 [ 234.132314][ T7283] ? do_syscall_64+0xb6/0x230 [ 234.132339][ T7283] do_syscall_64+0xf3/0x230 [ 234.132361][ T7283] ? clear_bhb_loop+0x45/0xa0 [ 234.132384][ T7283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.132403][ T7283] RIP: 0033:0x7f96eef8d169 [ 234.132420][ T7283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.132435][ T7283] RSP: 002b:00007f96efd3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.132454][ T7283] RAX: ffffffffffffffda RBX: 00007f96ef1a6080 RCX: 00007f96eef8d169 [ 234.132468][ T7283] RDX: 00000000fffffeb2 RSI: 0000200000000080 RDI: 0000000000000004 [ 234.132479][ T7283] RBP: 00007f96efd3e090 R08: 0000000000000000 R09: 0000000000000000 [ 234.132490][ T7283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.132500][ T7283] R13: 0000000000000000 R14: 00007f96ef1a6080 R15: 00007ffdbc5b2e88 [ 234.132529][ T7283] [ 234.284435][ T5881] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 234.979090][ T5881] usb 3-1: descriptor type invalid, skip [ 235.001495][ T7287] FAULT_INJECTION: forcing a failure. [ 235.001495][ T7287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.003943][ T5881] usb 3-1: not running at top speed; connect to a high speed hub [ 235.052171][ T7287] CPU: 0 UID: 0 PID: 7287 Comm: syz.3.348 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 235.052200][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 235.052214][ T7287] Call Trace: [ 235.052221][ T7287] [ 235.052230][ T7287] dump_stack_lvl+0x241/0x360 [ 235.052267][ T7287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.052296][ T7287] ? __pfx__printk+0x10/0x10 [ 235.052337][ T7287] should_fail_ex+0x424/0x570 [ 235.052371][ T7287] _copy_from_user+0x2d/0xb0 [ 235.052396][ T7287] blkdev_common_ioctl+0x16db/0x25a0 [ 235.052424][ T7287] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 235.052442][ T7287] ? tomoyo_path_number_perm+0x215/0x790 [ 235.052475][ T7287] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 235.052511][ T7287] ? ksys_write+0x24e/0x2d0 [ 235.052557][ T7287] ? __lock_acquire+0xad5/0xd80 [ 235.052590][ T7287] ? file_to_blk_mode+0xcb/0x140 [ 235.052614][ T7287] blkdev_ioctl+0x52c/0x710 [ 235.052634][ T7287] ? __pfx_blkdev_ioctl+0x10/0x10 [ 235.052657][ T7287] ? __pfx_blkdev_ioctl+0x10/0x10 [ 235.052675][ T7287] __se_sys_ioctl+0xf1/0x160 [ 235.052699][ T7287] do_syscall_64+0xf3/0x230 [ 235.052720][ T7287] ? clear_bhb_loop+0x45/0xa0 [ 235.052742][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.052759][ T7287] RIP: 0033:0x7f0fdef8d169 [ 235.052775][ T7287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.052791][ T7287] RSP: 002b:00007f0fdfe7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.052812][ T7287] RAX: ffffffffffffffda RBX: 00007f0fdf1a5fa0 RCX: 00007f0fdef8d169 [ 235.052825][ T7287] RDX: 0000200000000040 RSI: 00000000401070cd RDI: 0000000000000005 [ 235.052837][ T7287] RBP: 00007f0fdfe7e090 R08: 0000000000000000 R09: 0000000000000000 [ 235.052848][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.052859][ T7287] R13: 0000000000000000 R14: 00007f0fdf1a5fa0 R15: 00007ffea281d658 [ 235.052887][ T7287] [ 235.056293][ T5881] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 235.363623][ T5881] usb 3-1: config 1 interface 0 has no altsetting 0 [ 235.409861][ T5881] usb 3-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.40 [ 235.445753][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.461150][ T5881] usb 3-1: Product: ã° [ 235.474647][ T5881] usb 3-1: Manufacturer: î±–á—€î±â°´èœ½å¡ä˜©é«—葈굛剬땉奣䊽ꩽ댑劰ܟ진賞뇽è·ë†Ÿæ‚⢻痣᪄ë¯èˆ¤å—°ã¼ºï·€æ›Œá²´å§çª¨à …㵶䮹럨涉⒀ደê©é²ì²´äªºä•‡á¦›å§¨á©«í˜’懖éœà¼«ã¬ íƒ‡è¥é…®ê¦„㻊⩈腓ꗯᅚᵎͫណ鎱訋㉼ïªâ¯œéƒˆï½©åŽã£‘둌ዋ룃ꌻ춰é•趨ᕖäœà¯ªéµ®î†ƒá¾µé‰¯ã¥©æ£³ê¦°é½ˆë´²Ë”ì¡¦ê¶±çº™æŠœïšˆé­»ê•æŸ²îƒ”쩀î­ê‘࿤è¸é¯² [ 235.572251][ T5881] usb 3-1: SerialNumber: ▥ᤞ킡㲞뮫ꇋ讔떦᮹﶑ᱦ竗瀤女ç¸ê‹‹éŸ­âžµä¾¨åƒ«é¤–îµ»á€‡ï‰­ï° â¤˜æªšì˜ºë™¶â­­î“’ç¼æ‡žæ²ŸíŠŸã…·éº·íƒ¦ã¸´ëƒ†á´™î‘©æ©•ë¸‹ë€¯ê¶¤å¢ºæŠ§îƒ¸âš·ë¯€âŸ£ï¨•à£±ïœœí”¤ÍŠè•™ç²¥î¤©à¤Ÿé‰¸íž‚ï‘¤ä»“èƒ¿ï‚Œí‡æªï¨‚쳷枆瞊䢊â˕氀뎜㾒â‹Å¥ï’漫襆儢鱸ì¼á™ì©’嚺⭙嫛衰膽㻣Ꭽ묒 [ 235.579202][ T7293] netlink: 'syz.4.329': attribute type 4 has an invalid length. [ 236.133958][ T7278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.369416][ T5881] usbhid 3-1:1.0: can't add hid device: -71 [ 236.387363][ T5881] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 236.449600][ T5881] usb 3-1: USB disconnect, device number 4 [ 236.562419][ T7288] loop1: detected capacity change from 0 to 40427 [ 236.615363][ T7288] F2FS-fs (loop1): invalid crc value [ 236.783013][ T7288] F2FS-fs (loop1): Start checkpoint disabled! [ 236.812033][ T7288] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 237.117038][ T7305] loop2: detected capacity change from 0 to 1024 [ 237.153583][ T7305] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 237.220757][ T7305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.899477][ T7311] loop3: detected capacity change from 0 to 4096 [ 237.963474][ T7315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.006746][ T7311] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 238.504422][ T5152] Bluetooth: hci2: command 0x0406 tx timeout [ 239.443601][ T7326] loop1: detected capacity change from 0 to 512 [ 239.530433][ T7326] EXT4-fs: inline encryption not supported [ 239.859260][ T7326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.872791][ T7326] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.968344][ T7326] EXT4-fs error (device loop1): ext4_do_update_inode:5182: inode #2: comm syz.1.352: corrupted inode contents [ 240.036752][ T7326] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz.1.352: mark_inode_dirty error [ 240.205001][ T7326] EXT4-fs error (device loop1): ext4_do_update_inode:5182: inode #2: comm syz.1.352: corrupted inode contents [ 240.313077][ T7326] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.352: mark_inode_dirty error [ 240.400978][ T7332] FAULT_INJECTION: forcing a failure. [ 240.400978][ T7332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.567700][ T7332] CPU: 1 UID: 0 PID: 7332 Comm: syz.4.356 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 240.567748][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 240.567764][ T7332] Call Trace: [ 240.567773][ T7332] [ 240.567782][ T7332] dump_stack_lvl+0x241/0x360 [ 240.567820][ T7332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.567851][ T7332] ? __pfx__printk+0x10/0x10 [ 240.567894][ T7332] should_fail_ex+0x424/0x570 [ 240.567929][ T7332] _copy_from_user+0x2d/0xb0 [ 240.567955][ T7332] bpf_test_init+0xf5/0x170 [ 240.567982][ T7332] bpf_prog_test_run_skb+0x2b6/0x1770 [ 240.568016][ T7332] ? irqentry_exit+0x63/0x90 [ 240.568047][ T7332] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 240.568076][ T7332] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 240.568101][ T7332] bpf_prog_test_run+0x2d8/0x350 [ 240.568134][ T7332] __sys_bpf+0x4ee/0x8b0 [ 240.568157][ T7332] ? __pfx___sys_bpf+0x10/0x10 [ 240.568191][ T7332] ? ksys_write+0x2ad/0x2d0 [ 240.568229][ T7332] __x64_sys_bpf+0x7c/0x90 [ 240.568260][ T7332] do_syscall_64+0xf3/0x230 [ 240.568285][ T7332] ? clear_bhb_loop+0x45/0xa0 [ 240.568310][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.568330][ T7332] RIP: 0033:0x7f4a2ed8d169 [ 240.568348][ T7332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.568366][ T7332] RSP: 002b:00007f4a2fb4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.568389][ T7332] RAX: ffffffffffffffda RBX: 00007f4a2efa5fa0 RCX: 00007f4a2ed8d169 [ 240.568404][ T7332] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 240.568417][ T7332] RBP: 00007f4a2fb4e090 R08: 0000000000000000 R09: 0000000000000000 [ 240.568429][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.568442][ T7332] R13: 0000000000000000 R14: 00007f4a2efa5fa0 R15: 00007ffdc2e76618 [ 240.568473][ T7332] [ 241.305711][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.493132][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.582251][ T7346] loop1: detected capacity change from 0 to 256 [ 242.608294][ T7349] loop3: detected capacity change from 0 to 128 [ 242.619469][ T7334] loop0: detected capacity change from 0 to 32768 [ 242.648003][ T7334] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.357 (7334) [ 242.662500][ T7349] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 242.699828][ T7350] IPv4: Oversized IP packet from 127.202.26.0 [ 242.718984][ T7344] loop4: detected capacity change from 0 to 4096 [ 242.730640][ T7349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.752222][ T7334] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 242.763951][ T7344] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 242.775127][ T7350] loop2: detected capacity change from 0 to 256 [ 242.826410][ T7334] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 242.843629][ T7352] xfrm0: entered promiscuous mode [ 242.852232][ T7352] xfrm0: entered allmulticast mode [ 242.904069][ T7334] BTRFS info (device loop0): using free-space-tree [ 242.938888][ T7350] process 'syz.2.364' launched './file1' with NULL argv: empty string added [ 243.396593][ T7334] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 243.404123][ T7334] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 243.425896][ T7334] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 243.453773][ T7334] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 243.507224][ T7334] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 243.526297][ T7334] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 243.919797][ T7334] BTRFS error (device loop0): open_ctree failed: -12 [ 244.179213][ T7373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 245.006914][ T5876] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 245.019832][ T7382] loop1: detected capacity change from 0 to 4096 [ 245.067251][ T7382] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 245.205699][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 245.505385][ T7376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.592145][ T7376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.779283][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short [ 245.842243][ T5876] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 245.870683][ T5876] usb 4-1: can't read configurations, error -71 [ 246.604782][ T7409] loop2: detected capacity change from 0 to 1024 [ 247.275052][ T7404] loop1: detected capacity change from 0 to 512 [ 247.281887][ T7404] EXT4-fs: inline encryption not supported [ 247.300812][ T7409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.421716][ T7404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.434558][ T7404] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.454754][ T30] audit: type=1800 audit(1744529221.995:21): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.374" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 247.541249][ T7401] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 247.556462][ T7401] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 247.568927][ T7401] EXT4-fs (loop2): This should not happen!! Data will be lost [ 247.568927][ T7401] [ 247.578722][ T7401] EXT4-fs (loop2): Total free blocks count 0 [ 247.584863][ T7401] EXT4-fs (loop2): Free/Dirty block details [ 247.590821][ T7401] EXT4-fs (loop2): free_blocks=68451041280 [ 247.597263][ T7401] EXT4-fs (loop2): dirty_blocks=64 [ 247.602424][ T7401] EXT4-fs (loop2): Block reservation details [ 247.608465][ T7401] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 247.717257][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.727824][ T7403] EXT4-fs error (device loop1): ext4_do_update_inode:5182: inode #2: comm syz.1.375: corrupted inode contents [ 247.750725][ T7403] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz.1.375: mark_inode_dirty error [ 247.772502][ T7403] EXT4-fs error (device loop1): ext4_do_update_inode:5182: inode #2: comm syz.1.375: corrupted inode contents [ 247.788633][ T7403] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.375: mark_inode_dirty error [ 247.983682][ T7420] loop2: detected capacity change from 0 to 128 [ 247.989426][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.013998][ T7420] vfat: Unknown parameter 'ÿ' [ 248.393307][ T7422] loop1: detected capacity change from 0 to 4096 [ 248.455049][ T7422] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 248.614392][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 248.665313][ T30] audit: type=1326 audit(1744529223.315:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.3.377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fdef8d169 code=0x0 [ 248.870367][ T7429] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.804400][ T30] audit: type=1326 audit(1744529225.445:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc83d8d169 code=0x0 [ 250.938211][ T7463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.967522][ T5876] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 251.062195][ T7440] loop1: detected capacity change from 0 to 32768 [ 251.164097][ T5876] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 251.218205][ T5876] usb 3-1: config 0 has no interface number 0 [ 251.250228][ T5876] usb 3-1: config 0 interface 98 has no altsetting 0 [ 251.346718][ T5876] usb 3-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 251.357175][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.366183][ T5876] usb 3-1: Product: syz [ 251.370627][ T5876] usb 3-1: Manufacturer: syz [ 251.376561][ T5876] usb 3-1: SerialNumber: syz [ 251.389597][ T5876] usb 3-1: config 0 descriptor?? [ 251.612502][ T5876] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 251.670356][ T115] read_mapping_page failed! [ 251.677575][ T115] read_mapping_page failed! [ 251.737698][ T7467] loop3: detected capacity change from 0 to 32768 [ 251.748228][ T7467] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.389 (7467) [ 251.767955][ T7467] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 251.781812][ T7467] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 251.894640][ T7467] BTRFS info (device loop3): using free-space-tree [ 252.008876][ T5876] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 252.145057][ T7486] loop4: detected capacity change from 0 to 4096 [ 252.164755][ T7486] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 252.264317][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.499341][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.571731][ T5876] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 252.690933][ T5876] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 252.801190][ T24] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 252.875865][ T24] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 252.948438][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.996380][ T5878] usb 3-1: USB disconnect, device number 6 [ 253.148299][ T5839] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 253.199593][ T7495] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.391'. [ 254.100487][ T7503] loop1: detected capacity change from 0 to 4096 [ 254.118155][ T7503] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 254.164598][ T7509] FAULT_INJECTION: forcing a failure. [ 254.164598][ T7509] name failslab, interval 1, probability 0, space 0, times 0 [ 254.178703][ T7509] CPU: 0 UID: 0 PID: 7509 Comm: syz.4.399 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 254.178735][ T7509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 254.178774][ T7509] Call Trace: [ 254.178783][ T7509] [ 254.178792][ T7509] dump_stack_lvl+0x241/0x360 [ 254.178831][ T7509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.178860][ T7509] ? __pfx__printk+0x10/0x10 [ 254.178894][ T7509] ? __pfx___might_resched+0x10/0x10 [ 254.178924][ T7509] should_fail_ex+0x424/0x570 [ 254.178956][ T7509] should_failslab+0xac/0x100 [ 254.178984][ T7509] __kmalloc_cache_noprof+0x73/0x370 [ 254.179010][ T7509] ? fuse_direct_IO+0x2be/0x1280 [ 254.179036][ T7509] fuse_direct_IO+0x2be/0x1280 [ 254.179083][ T7509] ? __lock_acquire+0xad5/0xd80 [ 254.179105][ T7509] ? __pfx_fuse_direct_IO+0x10/0x10 [ 254.179135][ T7509] ? generic_write_checks_count+0x409/0x520 [ 254.179193][ T7509] fuse_file_write_iter+0x842/0x1180 [ 254.179217][ T7509] ? register_lock_class+0x54/0x330 [ 254.179256][ T7509] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 254.179279][ T7509] ? __lock_acquire+0xad5/0xd80 [ 254.179318][ T7509] ? aio_write+0x501/0x7d0 [ 254.179342][ T7509] aio_write+0x56d/0x7d0 [ 254.179367][ T7509] ? __pfx_aio_write+0x10/0x10 [ 254.179424][ T7509] io_submit_one+0x8a9/0x18b0 [ 254.179456][ T7509] ? __lock_acquire+0xad5/0xd80 [ 254.179480][ T7509] ? __pfx_io_submit_one+0x10/0x10 [ 254.179517][ T7509] ? __might_fault+0xaa/0x120 [ 254.179550][ T7509] __se_sys_io_submit+0x17a/0x2e0 [ 254.179582][ T7509] ? __pfx___se_sys_io_submit+0x10/0x10 [ 254.179607][ T7509] ? ksys_write+0x2ad/0x2d0 [ 254.179662][ T7509] ? do_syscall_64+0xb6/0x230 [ 254.179691][ T7509] do_syscall_64+0xf3/0x230 [ 254.179716][ T7509] ? clear_bhb_loop+0x45/0xa0 [ 254.179741][ T7509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.179767][ T7509] RIP: 0033:0x7f4a2ed8d169 [ 254.179786][ T7509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.179804][ T7509] RSP: 002b:00007f4a2fb4e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 254.179826][ T7509] RAX: ffffffffffffffda RBX: 00007f4a2efa5fa0 RCX: 00007f4a2ed8d169 [ 254.179842][ T7509] RDX: 0000200000000780 RSI: 0000000000000020 RDI: 00007f4a2fb04000 [ 254.179856][ T7509] RBP: 00007f4a2fb4e090 R08: 0000000000000000 R09: 0000000000000000 [ 254.179869][ T7509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.179881][ T7509] R13: 0000000000000000 R14: 00007f4a2efa5fa0 R15: 00007ffdc2e76618 [ 254.179914][ T7509] [ 254.546717][ T7513] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.591433][ T7522] loop2: detected capacity change from 0 to 1024 [ 255.920237][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.926580][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.981818][ T7522] EXT4-fs: Ignoring removed bh option [ 256.051910][ T7522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.174743][ T7522] netlink: 512 bytes leftover after parsing attributes in process `syz.2.400'. [ 256.253194][ T7522] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.400: Allocating blocks 481-513 which overlap fs metadata [ 256.311677][ T7522] EXT4-fs (loop2): Remounting filesystem read-only [ 256.444669][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.538486][ T7541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.409'. [ 256.559677][ T7541] loop4: detected capacity change from 0 to 512 [ 256.566475][ T7541] EXT4-fs: inline encryption not supported [ 256.623062][ T7541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.635787][ T7541] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.650464][ T7541] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #2: comm syz.4.409: corrupted inode contents [ 256.671941][ T7539] loop3: detected capacity change from 0 to 4096 [ 256.683086][ T7541] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz.4.409: mark_inode_dirty error [ 256.695885][ T7541] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #2: comm syz.4.409: corrupted inode contents [ 256.714332][ T7541] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.409: mark_inode_dirty error [ 256.960779][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.166885][ T7550] loop2: detected capacity change from 0 to 4096 [ 257.242337][ T7550] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 257.341265][ T7528] loop1: detected capacity change from 0 to 32768 [ 257.358648][ T7553] loop4: detected capacity change from 0 to 64 [ 257.490963][ T7528] bio_check_eod: 189 callbacks suppressed [ 257.490983][ T7528] syz.1.403: attempt to access beyond end of device [ 257.490983][ T7528] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 257.517954][ T7528] metapage_write_end_io: I/O error [ 257.529215][ T7528] ERROR: (device loop1): release_metapage: metapage_write_one() failed [ 257.529215][ T7528] [ 257.544943][ T7528] ERROR: (device loop1): remounting filesystem as read-only [ 257.594478][ T5880] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 257.679852][ T7528] blkno = 8ed2c, nblocks = 1 [ 257.685036][ T7528] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 257.685036][ T7528] [ 257.761264][ T7528] blkno = 8ed2c, nblocks = 1 [ 257.804328][ T7528] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 257.804328][ T7528] [ 257.853365][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 257.923181][ T5880] usb 4-1: config 0 has no interfaces? [ 257.967129][ T5880] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 257.979313][ T7528] UFO tlock:0xffffc9000298a048 [ 258.022357][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.207740][ T7527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.266288][ T5880] usb 4-1: config 0 descriptor?? [ 258.482732][ T7563] FAULT_INJECTION: forcing a failure. [ 258.482732][ T7563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.491309][ T7559] loop4: detected capacity change from 0 to 8192 [ 258.511369][ T47] usb 4-1: USB disconnect, device number 8 [ 258.520619][ T7563] CPU: 0 UID: 0 PID: 7563 Comm: syz.0.416 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 258.520649][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.520662][ T7563] Call Trace: [ 258.520671][ T7563] [ 258.520680][ T7563] dump_stack_lvl+0x241/0x360 [ 258.520720][ T7563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.520752][ T7563] ? __pfx__printk+0x10/0x10 [ 258.520798][ T7563] should_fail_ex+0x424/0x570 [ 258.520832][ T7563] _copy_from_iter+0x211/0x1c70 [ 258.520880][ T7563] ? __pfx__copy_from_iter+0x10/0x10 [ 258.520907][ T7563] ? rcu_is_watching+0x15/0xb0 [ 258.520931][ T7563] ? trace_kmalloc+0x1f/0xd0 [ 258.520956][ T7563] ? kernfs_fop_write_iter+0x15a/0x510 [ 258.520989][ T7563] kernfs_fop_write_iter+0x1a1/0x510 [ 258.521025][ T7563] vfs_write+0x70f/0xd10 [ 258.521057][ T7563] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 258.521088][ T7563] ? __pfx_vfs_write+0x10/0x10 [ 258.521115][ T7563] ? __fget_files+0x2a/0x420 [ 258.521150][ T7563] ? __fget_files+0x2a/0x420 [ 258.521192][ T7563] ksys_write+0x19d/0x2d0 [ 258.521218][ T7563] ? __pfx_ksys_write+0x10/0x10 [ 258.521247][ T7563] ? do_syscall_64+0xb6/0x230 [ 258.521274][ T7563] do_syscall_64+0xf3/0x230 [ 258.521298][ T7563] ? clear_bhb_loop+0x45/0xa0 [ 258.521323][ T7563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.521341][ T7563] RIP: 0033:0x7efc83d8d169 [ 258.521360][ T7563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.521379][ T7563] RSP: 002b:00007efc84b9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.521402][ T7563] RAX: ffffffffffffffda RBX: 00007efc83fa5fa0 RCX: 00007efc83d8d169 [ 258.521417][ T7563] RDX: 0000000000000009 RSI: 0000200000000080 RDI: 0000000000000004 [ 258.521430][ T7563] RBP: 00007efc84b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 258.521443][ T7563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.521455][ T7563] R13: 0000000000000000 R14: 00007efc83fa5fa0 R15: 00007ffc4be548b8 [ 258.521488][ T7563] [ 258.907434][ T7559] tipc: Started in network mode [ 258.912497][ T7559] tipc: Node identity 6, cluster identity 4711 [ 258.923653][ T7559] tipc: Node number set to 6 [ 258.929689][ T7561] loop2: detected capacity change from 0 to 32768 [ 258.941226][ T7561] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.415 (7561) [ 259.010233][ T116] blkno = 8ed2c, nblocks = 4 [ 259.032593][ T7561] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 259.049983][ T116] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 259.049983][ T116] [ 259.082027][ T7561] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 259.118289][ T5827] syz-executor: attempt to access beyond end of device [ 259.118289][ T5827] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 259.125205][ T7561] BTRFS info (device loop2): using free-space-tree [ 259.139982][ T5827] metapage_write_end_io: I/O error [ 259.151943][ T5827] JFS: metapage_get_blocks failed [ 259.200218][ T7571] loop3: detected capacity change from 0 to 1024 [ 259.210060][ T5827] JFS: metapage_get_blocks failed [ 259.211847][ T7571] EXT4-fs: Ignoring removed bh option [ 259.233514][ T5827] JFS: metapage_get_blocks failed [ 259.244304][ T5827] JFS: metapage_get_blocks failed [ 259.359757][ T7571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.408609][ T7571] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.419: Allocating blocks 481-513 which overlap fs metadata [ 259.440480][ T7571] EXT4-fs (loop3): Remounting filesystem read-only [ 259.491609][ T5842] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 259.526091][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.842086][ T7591] loop0: detected capacity change from 0 to 1024 [ 259.914618][ T7591] hfsplus: xattr searching failed [ 259.922764][ T7591] hfsplus: xattr searching failed [ 259.928975][ T7591] hfsplus: xattr searching failed [ 259.933112][ T30] audit: type=1800 audit(1744529234.565:24): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.421" name="bus" dev="loop0" ino=2 res=0 errno=0 [ 259.955469][ T7591] hfsplus: b-tree write err: -5, ino 3 [ 260.218364][ T7596] loop4: detected capacity change from 0 to 64 [ 260.503303][ T36] hfsplus: bad catalog file entry [ 260.594340][ T7610] IPVS: stopping backup sync thread 7611 ... [ 260.608771][ T7611] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 260.701573][ T36] hfsplus: b-tree write err: -5, ino 3 [ 260.711344][ T7610] loop4: detected capacity change from 0 to 128 [ 260.722983][ T7604] FAULT_INJECTION: forcing a failure. [ 260.722983][ T7604] name failslab, interval 1, probability 0, space 0, times 0 [ 260.735651][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.3.425 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 260.735671][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.735693][ T7604] Call Trace: [ 260.735699][ T7604] [ 260.735705][ T7604] dump_stack_lvl+0x241/0x360 [ 260.735733][ T7604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.735755][ T7604] ? __pfx__printk+0x10/0x10 [ 260.735779][ T7604] ? __pfx___might_resched+0x10/0x10 [ 260.735810][ T7604] should_fail_ex+0x424/0x570 [ 260.735832][ T7604] should_failslab+0xac/0x100 [ 260.735851][ T7604] __kmalloc_cache_noprof+0x73/0x370 [ 260.735869][ T7604] ? alloc_fs_context+0x63/0x800 [ 260.735880][ T7604] ? kasan_quarantine_put+0xdc/0x230 [ 260.735897][ T7604] alloc_fs_context+0x63/0x800 [ 260.735910][ T7604] ? kfree+0x198/0x430 [ 260.735925][ T7604] ? __se_sys_fsopen+0x94/0x2c0 [ 260.735938][ T7604] ? get_fs_type+0x3fd/0x480 [ 260.735955][ T7604] __se_sys_fsopen+0xa3/0x2c0 [ 260.735972][ T7604] do_syscall_64+0xf3/0x230 [ 260.735989][ T7604] ? clear_bhb_loop+0x45/0xa0 [ 260.736005][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.736019][ T7604] RIP: 0033:0x7f0fdef8d169 [ 260.736031][ T7604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.736043][ T7604] RSP: 002b:00007f0fdfe7e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 260.736057][ T7604] RAX: ffffffffffffffda RBX: 00007f0fdf1a5fa0 RCX: 00007f0fdef8d169 [ 260.736067][ T7604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000480 [ 260.736076][ T7604] RBP: 00007f0fdfe7e090 R08: 0000000000000000 R09: 0000000000000000 [ 260.736084][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.736092][ T7604] R13: 0000000000000000 R14: 00007f0fdf1a5fa0 R15: 00007ffea281d658 [ 260.736112][ T7604] [ 261.329091][ T5876] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 261.494353][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 261.653234][ T5876] usb 4-1: config 0 has no interfaces? [ 261.662835][ T5876] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 261.674522][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.729460][ T5876] usb 4-1: config 0 descriptor?? [ 262.463057][ T5876] usb 4-1: USB disconnect, device number 9 [ 262.502881][ T7631] loop4: detected capacity change from 0 to 256 [ 262.933495][ T7641] loop2: detected capacity change from 0 to 1024 [ 263.031004][ T7641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.046778][ T30] audit: type=1800 audit(1744529237.695:25): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.434" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 263.075489][ T7646] loop4: detected capacity change from 0 to 4096 [ 263.168269][ T7649] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.339069][ T7651] loop4: detected capacity change from 0 to 64 [ 264.066086][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.637219][ T7660] FAULT_INJECTION: forcing a failure. [ 264.637219][ T7660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.650402][ T7660] CPU: 1 UID: 0 PID: 7660 Comm: syz.4.439 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 264.650432][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 264.650446][ T7660] Call Trace: [ 264.650454][ T7660] [ 264.650463][ T7660] dump_stack_lvl+0x241/0x360 [ 264.650504][ T7660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.650536][ T7660] ? __pfx__printk+0x10/0x10 [ 264.650580][ T7660] should_fail_ex+0x424/0x570 [ 264.650616][ T7660] _copy_from_user+0x2d/0xb0 [ 264.650642][ T7660] iommufd_fops_ioctl+0x4ae/0x610 [ 264.650671][ T7660] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 264.650701][ T7660] ? __fget_files+0x2a/0x420 [ 264.650740][ T7660] ? __fget_files+0x2a/0x420 [ 264.650778][ T7660] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 264.650805][ T7660] __se_sys_ioctl+0xf1/0x160 [ 264.650833][ T7660] do_syscall_64+0xf3/0x230 [ 264.650869][ T7660] ? clear_bhb_loop+0x45/0xa0 [ 264.650906][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.650925][ T7660] RIP: 0033:0x7f4a2ed8d169 [ 264.650943][ T7660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.650960][ T7660] RSP: 002b:00007f4a2fb0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.650981][ T7660] RAX: ffffffffffffffda RBX: 00007f4a2efa6160 RCX: 00007f4a2ed8d169 [ 264.650995][ T7660] RDX: 0000200000001480 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 264.651008][ T7660] RBP: 00007f4a2fb0c090 R08: 0000000000000000 R09: 0000000000000000 [ 264.651020][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.651032][ T7660] R13: 0000000000000000 R14: 00007f4a2efa6160 R15: 00007ffdc2e76618 [ 264.651061][ T7660] [ 266.132412][ T7667] FAULT_INJECTION: forcing a failure. [ 266.132412][ T7667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.156902][ T7667] CPU: 1 UID: 0 PID: 7667 Comm: syz.3.444 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 266.156934][ T7667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 266.156947][ T7667] Call Trace: [ 266.156966][ T7667] [ 266.156987][ T7667] dump_stack_lvl+0x241/0x360 [ 266.157024][ T7667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.157052][ T7667] ? __pfx__printk+0x10/0x10 [ 266.157092][ T7667] should_fail_ex+0x424/0x570 [ 266.157124][ T7667] _copy_from_user+0x2d/0xb0 [ 266.157148][ T7667] drm_ioctl+0x593/0xbb0 [ 266.157190][ T7667] ? __lock_acquire+0xad5/0xd80 [ 266.157208][ T7667] ? __pfx_drm_mode_getfb2_ioctl+0x10/0x10 [ 266.157240][ T7667] ? __pfx_drm_ioctl+0x10/0x10 [ 266.157279][ T7667] ? __fget_files+0x2a/0x420 [ 266.157315][ T7667] ? __pfx_drm_ioctl+0x10/0x10 [ 266.157342][ T7667] __se_sys_ioctl+0xf1/0x160 [ 266.157368][ T7667] do_syscall_64+0xf3/0x230 [ 266.157392][ T7667] ? clear_bhb_loop+0x45/0xa0 [ 266.157417][ T7667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.157437][ T7667] RIP: 0033:0x7f0fdef8d169 [ 266.157456][ T7667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.157473][ T7667] RSP: 002b:00007f0fdfe7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.157495][ T7667] RAX: ffffffffffffffda RBX: 00007f0fdf1a5fa0 RCX: 00007f0fdef8d169 [ 266.157510][ T7667] RDX: 0000200000000200 RSI: 00000000c06864ce RDI: 0000000000000003 [ 266.157523][ T7667] RBP: 00007f0fdfe7e090 R08: 0000000000000000 R09: 0000000000000000 [ 266.157536][ T7667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.157548][ T7667] R13: 0000000000000000 R14: 00007f0fdf1a5fa0 R15: 00007ffea281d658 [ 266.157579][ T7667] [ 266.339338][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.388007][ T7671] FAULT_INJECTION: forcing a failure. [ 266.388007][ T7671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.402242][ T7671] CPU: 1 UID: 0 PID: 7671 Comm: syz.0.443 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 266.402270][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 266.402284][ T7671] Call Trace: [ 266.402292][ T7671] [ 266.402300][ T7671] dump_stack_lvl+0x241/0x360 [ 266.402338][ T7671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.402368][ T7671] ? __pfx__printk+0x10/0x10 [ 266.402408][ T7671] should_fail_ex+0x424/0x570 [ 266.402441][ T7671] _copy_to_user+0x31/0xb0 [ 266.402467][ T7671] copy_siginfo_to_user+0x24/0xc0 [ 266.402489][ T7671] x64_setup_rt_frame+0x7eb/0xda0 [ 266.402540][ T7671] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 266.402580][ T7671] arch_do_signal_or_restart+0x428/0x840 [ 266.402626][ T7671] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 266.402668][ T7671] ? syscall_exit_to_user_mode+0xa3/0x340 [ 266.402694][ T7671] syscall_exit_to_user_mode+0xce/0x340 [ 266.402720][ T7671] do_syscall_64+0x100/0x230 [ 266.402761][ T7671] ? clear_bhb_loop+0x45/0xa0 [ 266.402786][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.402806][ T7671] RIP: 0033:0x7efc83d8d167 [ 266.402824][ T7671] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 266.402842][ T7671] RSP: 002b:00007efc84b9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 266.402864][ T7671] RAX: 0000000000000011 RBX: 00007efc83fa5fa0 RCX: 00007efc83d8d169 [ 266.402877][ T7671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 266.402888][ T7671] RBP: 00007efc84b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 266.402901][ T7671] R10: 0000000000000ce2 R11: 0000000000000246 R12: 0000000000000001 [ 266.402913][ T7671] R13: 0000000000000000 R14: 00007efc83fa5fa0 R15: 00007ffc4be548b8 [ 266.402950][ T7671] [ 266.584501][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.038327][ T7681] Bluetooth: MGMT ver 1.23 [ 267.580733][ T7684] loop1: detected capacity change from 0 to 256 [ 267.582299][ T7687] loop4: detected capacity change from 0 to 64 [ 267.916681][ T5938] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 268.479933][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 269.131105][ T7698] loop4: detected capacity change from 0 to 1024 [ 269.331558][ T5938] usb 3-1: config 0 has no interfaces? [ 269.342583][ T5938] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 269.353307][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.365866][ T7698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.391955][ T30] audit: type=1800 audit(1744529244.025:26): pid=7698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.451" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 269.420008][ T5938] usb 3-1: config 0 descriptor?? [ 269.651376][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.705798][ T5876] usb 3-1: USB disconnect, device number 7 [ 269.819502][ T7705] FAULT_INJECTION: forcing a failure. [ 269.819502][ T7705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.832885][ T7705] CPU: 1 UID: 0 PID: 7705 Comm: syz.1.453 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 269.832912][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.832925][ T7705] Call Trace: [ 269.832933][ T7705] [ 269.832942][ T7705] dump_stack_lvl+0x241/0x360 [ 269.832979][ T7705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.833007][ T7705] ? __pfx__printk+0x10/0x10 [ 269.833047][ T7705] should_fail_ex+0x424/0x570 [ 269.833081][ T7705] _copy_from_user+0x2d/0xb0 [ 269.833104][ T7705] snd_rawmidi_kernel_write1+0x390/0x620 [ 269.833144][ T7705] snd_rawmidi_write+0x5f2/0xc00 [ 269.833184][ T7705] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 269.833209][ T7705] ? __pfx_default_wake_function+0x10/0x10 [ 269.833243][ T7705] ? end_current_label_crit_section+0x151/0x180 [ 269.833267][ T7705] ? apparmor_file_permission+0xc5/0xe0 [ 269.833298][ T7705] ? bpf_lsm_file_permission+0x9/0x10 [ 269.833320][ T7705] ? rw_verify_area+0x246/0x630 [ 269.833341][ T7705] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 269.833369][ T7705] vfs_write+0x2bc/0xd10 [ 269.833403][ T7705] ? __pfx_vfs_write+0x10/0x10 [ 269.833427][ T7705] ? __fget_files+0x2a/0x420 [ 269.833456][ T7705] ? __fget_files+0x2a/0x420 [ 269.833487][ T7705] ? __fget_files+0x39d/0x420 [ 269.833515][ T7705] ? __fget_files+0x2a/0x420 [ 269.833555][ T7705] ksys_write+0x19d/0x2d0 [ 269.833580][ T7705] ? __pfx_ksys_write+0x10/0x10 [ 269.833609][ T7705] ? do_syscall_64+0xb6/0x230 [ 269.833665][ T7705] do_syscall_64+0xf3/0x230 [ 269.833709][ T7705] ? clear_bhb_loop+0x45/0xa0 [ 269.833734][ T7705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.833755][ T7705] RIP: 0033:0x7f96eef8d169 [ 269.833774][ T7705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.833793][ T7705] RSP: 002b:00007f96efd3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 269.833816][ T7705] RAX: ffffffffffffffda RBX: 00007f96ef1a6080 RCX: 00007f96eef8d169 [ 269.833831][ T7705] RDX: 00000000fffffd2c RSI: 0000200000000000 RDI: 0000000000000007 [ 269.833845][ T7705] RBP: 00007f96efd3e090 R08: 0000000000000000 R09: 0000000000000000 [ 269.833857][ T7705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.833870][ T7705] R13: 0000000000000000 R14: 00007f96ef1a6080 R15: 00007ffdbc5b2e88 [ 269.833902][ T7705] [ 269.860278][ T7706] loop3: detected capacity change from 0 to 4096 [ 269.861939][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.867789][ T7706] ntfs3: Unknown parameter 'syzkaller' [ 270.805895][ T7719] loop3: detected capacity change from 0 to 16 [ 270.866709][ T7719] erofs (device loop3): mounted with root inode @ nid 36. [ 271.302849][ T7722] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 271.312624][ T7722] erofs (device loop3): read error -117 @ 43 of nid 36 [ 271.322830][ T7721] loop2: detected capacity change from 0 to 4096 [ 271.419328][ T7724] loop1: detected capacity change from 0 to 512 [ 271.635487][ T7724] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #15: comm syz.1.459: casefold flag without casefold feature [ 271.717646][ T7724] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.459: couldn't read orphan inode 15 (err -117) [ 271.871335][ T7731] loop0: detected capacity change from 0 to 64 [ 271.916386][ T7724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.332241][ T7740] netlink: 'syz.2.462': attribute type 1 has an invalid length. [ 273.378967][ T7740] netlink: 'syz.2.462': attribute type 2 has an invalid length. [ 274.004496][ T7746] loop3: detected capacity change from 0 to 1024 [ 274.141064][ T7746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.231103][ T7752] loop2: detected capacity change from 0 to 256 [ 274.362690][ T30] audit: type=1800 audit(1744529248.805:27): pid=7746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.464" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 274.401708][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.479207][ T7754] netlink: 'syz.1.459': attribute type 1 has an invalid length. [ 274.487141][ T7754] netlink: 244 bytes leftover after parsing attributes in process `syz.1.459'. [ 275.828230][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.904107][ T7757] loop3: detected capacity change from 0 to 2048 [ 275.945624][ T7757] udf: Bad value for 'partition' [ 276.200977][ T7763] loop3: detected capacity change from 0 to 2048 [ 276.270662][ T7763] udf: Bad value for 'partition' [ 276.354308][ T5880] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 276.447240][ T7774] loop3: detected capacity change from 0 to 64 [ 276.514797][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 276.524239][ T5880] usb 2-1: config 0 has no interfaces? [ 276.529778][ T5880] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 276.571556][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.597794][ T7768] loop0: detected capacity change from 0 to 4096 [ 276.617024][ T5880] usb 2-1: config 0 descriptor?? [ 276.887422][ T5880] usb 2-1: USB disconnect, device number 7 [ 277.417071][ T7768] FAULT_INJECTION: forcing a failure. [ 277.417071][ T7768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.599741][ T7768] CPU: 0 UID: 0 PID: 7768 Comm: syz.0.470 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 277.599774][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 277.599787][ T7768] Call Trace: [ 277.599795][ T7768] [ 277.599804][ T7768] dump_stack_lvl+0x241/0x360 [ 277.599844][ T7768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.599874][ T7768] ? __pfx__printk+0x10/0x10 [ 277.599915][ T7768] should_fail_ex+0x424/0x570 [ 277.599950][ T7768] strncpy_from_user+0x36/0x280 [ 277.599983][ T7768] getname_flags+0xf0/0x530 [ 277.600017][ T7768] user_path_at+0x24/0x60 [ 277.600040][ T7768] __se_sys_mount+0x348/0x400 [ 277.600077][ T7768] ? __pfx___se_sys_mount+0x10/0x10 [ 277.600115][ T7768] ? __x64_sys_mount+0x20/0xc0 [ 277.600148][ T7768] do_syscall_64+0xf3/0x230 [ 277.600172][ T7768] ? clear_bhb_loop+0x45/0xa0 [ 277.600196][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.600216][ T7768] RIP: 0033:0x7efc83d8d169 [ 277.600235][ T7768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.600253][ T7768] RSP: 002b:00007efc84b9e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 277.600281][ T7768] RAX: ffffffffffffffda RBX: 00007efc83fa5fa0 RCX: 00007efc83d8d169 [ 277.600294][ T7768] RDX: 0000000000000000 RSI: 00002000000020c0 RDI: 0000000000000000 [ 277.600305][ T7768] RBP: 00007efc84b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 277.600317][ T7768] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 277.600327][ T7768] R13: 0000000000000000 R14: 00007efc83fa5fa0 R15: 00007ffc4be548b8 [ 277.600355][ T7768] [ 277.917400][ T7784] loop1: detected capacity change from 0 to 256 [ 278.218104][ T7788] loop3: detected capacity change from 0 to 512 [ 278.253228][ T7788] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 278.261368][ T7788] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 278.269583][ T7788] System zones: 0-1, 15-15, 18-18, 34-34 [ 278.275658][ T7788] EXT4-fs (loop3): orphan cleanup on readonly fs [ 278.282130][ T7788] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 278.291880][ T7788] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 278.306468][ T7788] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 278.324884][ T7788] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.476: bad orphan inode 16 [ 278.336185][ T7788] ext4_test_bit(bit=15, block=18) = 1 [ 278.341591][ T7788] is_bad_inode(inode)=0 [ 278.346315][ T7788] NEXT_ORPHAN(inode)=0 [ 278.350421][ T7788] max_ino=32 [ 278.353634][ T7788] i_nlink=2 [ 278.359035][ T7788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 278.437387][ T7792] loop4: detected capacity change from 0 to 8 [ 279.625615][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.454262][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 280.644333][ T7810] FAULT_INJECTION: forcing a failure. [ 280.644333][ T7810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.657614][ T7810] CPU: 1 UID: 0 PID: 7810 Comm: syz.0.483 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 280.657644][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 280.657657][ T7810] Call Trace: [ 280.657666][ T7810] [ 280.657674][ T7810] dump_stack_lvl+0x241/0x360 [ 280.657715][ T7810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.657747][ T7810] ? __pfx__printk+0x10/0x10 [ 280.657792][ T7810] should_fail_ex+0x424/0x570 [ 280.657828][ T7810] _copy_from_user+0x2d/0xb0 [ 280.657855][ T7810] mon_bin_ioctl+0x11c/0xf70 [ 280.657894][ T7810] ? __fget_files+0x2a/0x420 [ 280.657925][ T7810] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 280.657959][ T7810] ? __fget_files+0x2a/0x420 [ 280.657996][ T7810] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 280.658037][ T7810] __se_sys_ioctl+0xf1/0x160 [ 280.658065][ T7810] do_syscall_64+0xf3/0x230 [ 280.658092][ T7810] ? clear_bhb_loop+0x45/0xa0 [ 280.658118][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.658139][ T7810] RIP: 0033:0x7efc83d8d169 [ 280.658158][ T7810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.658177][ T7810] RSP: 002b:00007efc84b7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.658200][ T7810] RAX: ffffffffffffffda RBX: 00007efc83fa6080 RCX: 00007efc83d8d169 [ 280.658216][ T7810] RDX: 00002000000001c0 RSI: 00000000c0109207 RDI: 0000000000000006 [ 280.658230][ T7810] RBP: 00007efc84b7d090 R08: 0000000000000000 R09: 0000000000000000 [ 280.658243][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.658256][ T7810] R13: 0000000000000000 R14: 00007efc83fa6080 R15: 00007ffc4be548b8 [ 280.658289][ T7810] [ 281.414439][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 281.421682][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 281.437675][ T9] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 281.449172][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.466636][ T9] usb 5-1: Product: syz [ 281.472881][ T9] usb 5-1: Manufacturer: syz [ 281.478243][ T9] usb 5-1: SerialNumber: syz [ 281.517875][ T9] usb 5-1: config 0 descriptor?? [ 281.627276][ T7812] loop3: detected capacity change from 0 to 64 [ 281.813152][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'. [ 281.874055][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 283.346518][ T9] usb 5-1: USB disconnect, device number 10 [ 283.674042][ T7836] loop4: detected capacity change from 0 to 4096 [ 283.763705][ T7836] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 283.846003][ T7838] loop2: detected capacity change from 0 to 8 [ 286.778826][ T7863] loop0: detected capacity change from 0 to 64 [ 287.681138][ T7869] loop1: detected capacity change from 0 to 8192 [ 287.851107][ T7869] xfrm0: left promiscuous mode [ 287.892224][ T5876] lo speed is unknown, defaulting to 1000 [ 287.933174][ T7869] tipc: Started in network mode [ 287.941453][ T7869] tipc: Node identity 6, cluster identity 4711 [ 287.951793][ T7869] tipc: Node number set to 6 [ 288.137216][ T7875] loop4: detected capacity change from 0 to 64 [ 288.184971][ T7877] loop2: detected capacity change from 0 to 8 [ 289.176325][ T7873] loop3: detected capacity change from 0 to 32768 [ 289.460956][ T30] audit: type=1326 audit(1744529264.105:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.2.504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86e038d169 code=0x0 [ 290.067642][ T7894] loop4: detected capacity change from 0 to 64 [ 290.624378][ T5878] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 291.742162][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 291.852955][ T7902] loop4: detected capacity change from 0 to 4096 [ 291.910379][ T7902] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 291.920067][ T5878] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 291.928748][ T5878] usb 4-1: config 0 has no interface number 0 [ 291.962573][ T5878] usb 4-1: too many endpoints for config 0 interface 101 altsetting 65: 100, using maximum allowed: 30 [ 291.998627][ T5878] usb 4-1: config 0 interface 101 altsetting 65 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 292.062275][ T5878] usb 4-1: config 0 interface 101 has no altsetting 0 [ 292.096049][ T5878] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 292.151000][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.212640][ T5878] usb 4-1: config 0 descriptor?? [ 292.675393][ T7896] lo speed is unknown, defaulting to 1000 [ 292.686453][ T5878] usb 4-1: string descriptor 0 read error: -71 [ 292.730674][ T5878] go7007 4-1:0.101: probe with driver go7007 failed with error -12 [ 292.782061][ T5878] usb 4-1: USB disconnect, device number 10 [ 293.683534][ T7917] loop0: detected capacity change from 0 to 64 [ 293.823229][ T7923] loop1: detected capacity change from 0 to 64 [ 294.633744][ T7938] loop3: detected capacity change from 0 to 1024 [ 295.203790][ T7921] loop2: detected capacity change from 0 to 512 [ 295.272897][ T7938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.368163][ T30] audit: type=1800 audit(1744529270.005:29): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.519" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 295.544773][ T7931] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 295.559852][ T7931] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 295.572179][ T7931] EXT4-fs (loop3): This should not happen!! Data will be lost [ 295.572179][ T7931] [ 295.581841][ T7931] EXT4-fs (loop3): Total free blocks count 0 [ 295.587850][ T7931] EXT4-fs (loop3): Free/Dirty block details [ 295.593753][ T7931] EXT4-fs (loop3): free_blocks=68451041280 [ 295.599583][ T7931] EXT4-fs (loop3): dirty_blocks=64 [ 295.604756][ T7931] EXT4-fs (loop3): Block reservation details [ 295.610728][ T7931] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 295.851690][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.513143][ T7952] loop3: detected capacity change from 0 to 1024 [ 296.942607][ T7952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.964695][ T7948] loop4: detected capacity change from 0 to 64 [ 296.989528][ T30] audit: type=1800 audit(1744529271.635:30): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.521" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 297.162537][ T7945] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 297.184430][ T7945] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 297.200186][ T7945] EXT4-fs (loop3): This should not happen!! Data will be lost [ 297.200186][ T7945] [ 297.210037][ T7945] EXT4-fs (loop3): Total free blocks count 0 [ 297.216095][ T7945] EXT4-fs (loop3): Free/Dirty block details [ 297.222011][ T7945] EXT4-fs (loop3): free_blocks=68451041280 [ 297.228114][ T7945] EXT4-fs (loop3): dirty_blocks=64 [ 297.233248][ T7945] EXT4-fs (loop3): Block reservation details [ 297.239318][ T7945] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 297.762421][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.471515][ T7970] loop3: detected capacity change from 0 to 256 [ 298.618314][ T7970] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 298.667690][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 298.770675][ T30] audit: type=1326 audit(1744529273.415:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7964 comm="syz.4.525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a2ed8d169 code=0x0 [ 299.370259][ T7979] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 299.438931][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'. [ 299.447835][ T7979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.524'. [ 299.466676][ T7979] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff) [ 300.435773][ T7987] loop0: detected capacity change from 0 to 64 [ 301.194480][ T7988] loop3: detected capacity change from 0 to 512 [ 301.272265][ T7988] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 301.280332][ T7988] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 301.288437][ T7988] System zones: 0-1, 15-15, 18-18, 34-34 [ 301.294365][ T7988] EXT4-fs (loop3): orphan cleanup on readonly fs [ 301.300771][ T7988] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 301.310241][ T7988] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 301.324976][ T7988] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 301.333941][ T7988] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.527: bad orphan inode 16 [ 301.361178][ T7988] ext4_test_bit(bit=15, block=18) = 1 [ 301.366675][ T7988] is_bad_inode(inode)=0 [ 301.370819][ T7988] NEXT_ORPHAN(inode)=0 [ 301.374944][ T7988] max_ino=32 [ 301.378145][ T7988] i_nlink=2 [ 301.382451][ T7988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.716143][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.306811][ T8016] loop3: detected capacity change from 0 to 64 [ 304.470618][ T8018] loop1: detected capacity change from 0 to 512 [ 304.514613][ T8018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 304.552729][ T8018] EXT4-fs: old and new quota format mixing [ 305.151212][ T8018] loop1: detected capacity change from 0 to 1764 [ 306.964994][ T8034] loop3: detected capacity change from 0 to 512 [ 307.241909][ T8033] loop4: detected capacity change from 0 to 512 [ 307.500614][ T8034] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 307.508876][ T8034] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 307.521806][ T8034] System zones: 0-1, 15-15, 18-18, 34-34 [ 307.538449][ T8033] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 307.538590][ T8034] EXT4-fs (loop3): orphan cleanup on readonly fs [ 307.554994][ T8034] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 307.564446][ T8034] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 307.579060][ T8034] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 307.587437][ T8034] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.538: bad orphan inode 16 [ 307.600598][ T8034] ext4_test_bit(bit=15, block=18) = 1 [ 307.606158][ T8034] is_bad_inode(inode)=0 [ 307.610341][ T8034] NEXT_ORPHAN(inode)=0 [ 307.614503][ T8034] max_ino=32 [ 307.617726][ T8034] i_nlink=2 [ 307.622681][ T8034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.649883][ T8033] EXT4-fs (loop4): 1 truncate cleaned up [ 307.657568][ T8033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.967571][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.040356][ T8046] No control pipe specified [ 308.158214][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.419573][ T5876] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 308.702330][ T8052] loop0: detected capacity change from 0 to 256 [ 308.932878][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.298461][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.352505][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 309.420955][ T5876] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 309.430859][ T8062] loop1: detected capacity change from 0 to 64 [ 309.483013][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.567039][ T5876] usb 3-1: config 0 descriptor?? [ 309.935936][ T30] audit: type=1326 audit(1744529284.575:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8065 comm="syz.0.549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc83d8d169 code=0x0 [ 309.957548][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.315001][ T5876] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 310.452356][ T8048] loop2: detected capacity change from 0 to 1024 [ 310.459814][ T8048] hfsplus: Bad value for 'part' [ 310.613406][ T5876] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 310.749001][ T5880] usb 3-1: USB disconnect, device number 8 [ 310.816827][ T8079] loop0: detected capacity change from 0 to 256 [ 311.390837][ T8048] loop2: detected capacity change from 0 to 256 [ 311.435173][ T8048] exfat: Deprecated parameter 'utf8' [ 311.448079][ T8048] exfat: Unexpected value for 'utf8' [ 311.567641][ T8081] loop1: detected capacity change from 0 to 2048 [ 313.210514][ T8089] loop0: detected capacity change from 0 to 8192 [ 313.455684][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 314.462744][ T8089] xfrm0: left promiscuous mode [ 314.639847][ T8107] No control pipe specified [ 314.849039][ T8089] tipc: Started in network mode [ 314.855426][ T8089] tipc: Node identity 6, cluster identity 4711 [ 314.863227][ T8089] tipc: Node number set to 6 [ 315.177977][ T8113] FAULT_INJECTION: forcing a failure. [ 315.177977][ T8113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.191113][ T8113] CPU: 0 UID: 0 PID: 8113 Comm: syz.2.559 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 315.191144][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.191164][ T8113] Call Trace: [ 315.191174][ T8113] [ 315.191183][ T8113] dump_stack_lvl+0x241/0x360 [ 315.191224][ T8113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.191256][ T8113] ? __pfx__printk+0x10/0x10 [ 315.191299][ T8113] should_fail_ex+0x424/0x570 [ 315.191334][ T8113] _copy_to_user+0x31/0xb0 [ 315.191362][ T8113] syslog_print_all+0x2bb/0x4b0 [ 315.191394][ T8113] ? __pfx_syslog_print_all+0x10/0x10 [ 315.191438][ T8113] ? bpf_lsm_capable+0x9/0x10 [ 315.191471][ T8113] do_syslog+0x45a/0x830 [ 315.191502][ T8113] ? __pfx_do_syslog+0x10/0x10 [ 315.191523][ T8113] ? schedule+0x163/0x360 [ 315.191576][ T8113] __x64_sys_syslog+0x7c/0x90 [ 315.191602][ T8113] do_syscall_64+0xf3/0x230 [ 315.191627][ T8113] ? clear_bhb_loop+0x45/0xa0 [ 315.191653][ T8113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.191675][ T8113] RIP: 0033:0x7f86e038d169 [ 315.191693][ T8113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.191713][ T8113] RSP: 002b:00007f86e1138038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 315.191735][ T8113] RAX: ffffffffffffffda RBX: 00007f86e05a6160 RCX: 00007f86e038d169 [ 315.191751][ T8113] RDX: 00000000000000f5 RSI: 0000200000002000 RDI: 0000000000000004 [ 315.191764][ T8113] RBP: 00007f86e1138090 R08: 0000000000000000 R09: 0000000000000000 [ 315.191777][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.191790][ T8113] R13: 0000000000000001 R14: 00007f86e05a6160 R15: 00007ffc20afb408 [ 315.191822][ T8113] [ 315.449993][ T8116] FAULT_INJECTION: forcing a failure. [ 315.449993][ T8116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.463186][ T8116] CPU: 0 UID: 0 PID: 8116 Comm: syz.2.560 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 315.463216][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.463229][ T8116] Call Trace: [ 315.463238][ T8116] [ 315.463248][ T8116] dump_stack_lvl+0x241/0x360 [ 315.463281][ T8116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.463303][ T8116] ? __pfx__printk+0x10/0x10 [ 315.463332][ T8116] should_fail_ex+0x424/0x570 [ 315.463357][ T8116] _copy_to_user+0x31/0xb0 [ 315.463376][ T8116] simple_read_from_buffer+0xc4/0x170 [ 315.463401][ T8116] proc_fail_nth_read+0x1ef/0x260 [ 315.463419][ T8116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.463436][ T8116] ? rw_verify_area+0x246/0x630 [ 315.463451][ T8116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.463467][ T8116] vfs_read+0x21f/0xb90 [ 315.463487][ T8116] ? __pfx___mutex_lock+0x10/0x10 [ 315.463506][ T8116] ? __pfx_vfs_read+0x10/0x10 [ 315.463523][ T8116] ? __fget_files+0x2a/0x420 [ 315.463546][ T8116] ? __fget_files+0x39d/0x420 [ 315.463566][ T8116] ? __fget_files+0x2a/0x420 [ 315.463595][ T8116] ksys_read+0x19d/0x2d0 [ 315.463613][ T8116] ? __pfx_ksys_read+0x10/0x10 [ 315.463633][ T8116] ? do_syscall_64+0xb6/0x230 [ 315.463652][ T8116] do_syscall_64+0xf3/0x230 [ 315.463669][ T8116] ? clear_bhb_loop+0x45/0xa0 [ 315.463687][ T8116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.463702][ T8116] RIP: 0033:0x7f86e038bb7c [ 315.463716][ T8116] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 315.463729][ T8116] RSP: 002b:00007f86e117a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 315.463745][ T8116] RAX: ffffffffffffffda RBX: 00007f86e05a5fa0 RCX: 00007f86e038bb7c [ 315.463756][ T8116] RDX: 000000000000000f RSI: 00007f86e117a0a0 RDI: 0000000000000004 [ 315.463765][ T8116] RBP: 00007f86e117a090 R08: 0000000000000000 R09: 0000000000000000 [ 315.463774][ T8116] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 315.463783][ T8116] R13: 0000000000000000 R14: 00007f86e05a5fa0 R15: 00007ffc20afb408 [ 315.463805][ T8116] [ 316.013443][ T8120] loop3: detected capacity change from 0 to 64 [ 316.338485][ T30] audit: type=1326 audit(1744529290.985:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.2.562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86e038d169 code=0x0 [ 316.811274][ T8126] netlink: 76 bytes leftover after parsing attributes in process `syz.4.563'. [ 318.010784][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.024448][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.066583][ T24] usb 3-1: [UEAGLE-ATM] firmware is not available [ 322.179297][ T8159] loop0: detected capacity change from 0 to 512 [ 322.200034][ T8159] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 322.208106][ T8159] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 322.216288][ T8159] System zones: 0-1, 15-15, 18-18, 34-34 [ 322.222318][ T8159] EXT4-fs (loop0): orphan cleanup on readonly fs [ 322.228853][ T8159] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 322.238299][ T8159] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 322.253370][ T8159] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 322.262056][ T8159] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.571: bad orphan inode 16 [ 322.273618][ T8159] ext4_test_bit(bit=15, block=18) = 1 [ 322.279095][ T8159] is_bad_inode(inode)=0 [ 322.283306][ T8159] NEXT_ORPHAN(inode)=0 [ 322.287528][ T8159] max_ino=32 [ 322.290739][ T8159] i_nlink=2 [ 322.295215][ T8159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 322.405956][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.572'. [ 322.481322][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. [ 322.526293][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.559085][ T8167] loop1: detected capacity change from 0 to 512 [ 322.612558][ T8167] EXT4-fs: inline encryption not supported [ 322.782709][ T8174] loop4: detected capacity change from 0 to 64 [ 322.842443][ T8167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.877760][ T8167] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.897516][ T8156] EXT4-fs error (device loop1): ext4_do_update_inode:5182: inode #2: comm syz.1.572: corrupted inode contents [ 322.912313][ T8156] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz.1.572: mark_inode_dirty error [ 322.936528][ T8156] EXT4-fs error (device loop1): ext4_do_update_inode:5182: inode #2: comm syz.1.572: corrupted inode contents [ 322.951452][ T8156] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.572: mark_inode_dirty error [ 322.977687][ T8181] No control pipe specified [ 322.992662][ T8182] loop2: detected capacity change from 0 to 256 [ 323.662418][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.884782][ T8200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.370706][ T30] audit: type=1326 audit(1744529301.005:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.2.581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86e038d169 code=0x0 [ 326.455820][ T8212] loop0: detected capacity change from 0 to 256 [ 326.773125][ T8220] loop1: detected capacity change from 0 to 1024 [ 327.697557][ T8221] loop4: detected capacity change from 0 to 512 [ 327.753570][ T8226] xfrm0: entered promiscuous mode [ 327.823615][ T8221] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 327.831694][ T8221] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 327.839853][ T8221] System zones: 0-1, 15-15, 18-18, 34-34 [ 328.009008][ T8221] EXT4-fs (loop4): orphan cleanup on readonly fs [ 328.010917][ T8220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.015697][ T8221] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 328.037151][ T8221] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 328.051767][ T8221] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 328.058887][ T8221] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.584: bad orphan inode 16 [ 328.069120][ T30] audit: type=1800 audit(1744529302.675:35): pid=8220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.583" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 328.089548][ T8221] ext4_test_bit(bit=15, block=18) = 1 [ 328.095204][ T8221] is_bad_inode(inode)=0 [ 328.099361][ T8221] NEXT_ORPHAN(inode)=0 [ 328.103421][ T8221] max_ino=32 [ 328.106788][ T8221] i_nlink=2 [ 328.111232][ T8221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 328.632465][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.669988][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.768092][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'. [ 328.976343][ T8247] loop0: detected capacity change from 0 to 64 [ 329.072138][ T8248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.588'. [ 329.195104][ T8248] loop4: detected capacity change from 0 to 512 [ 329.202049][ T8248] EXT4-fs: inline encryption not supported [ 329.307181][ T8256] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.649411][ T8248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.663121][ T8248] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.687985][ T8246] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #2: comm syz.4.588: corrupted inode contents [ 329.707432][ T5152] Bluetooth: hci4: command 0x0406 tx timeout [ 329.721732][ T8246] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz.4.588: mark_inode_dirty error [ 329.983944][ T8246] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #2: comm syz.4.588: corrupted inode contents [ 330.000337][ T8246] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.588: mark_inode_dirty error [ 330.269238][ T30] audit: type=1326 audit(1744529304.915:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8260 comm="syz.3.592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fdef8d169 code=0x0 [ 330.430147][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.679848][ T8267] No control pipe specified [ 334.754724][ T8291] loop3: detected capacity change from 0 to 512 [ 334.777569][ T8291] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 334.785607][ T8291] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 334.793709][ T8291] System zones: 0-1, 15-15, 18-18, 34-34 [ 334.799927][ T8291] EXT4-fs (loop3): orphan cleanup on readonly fs [ 334.806467][ T8291] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 334.816001][ T8291] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 334.830722][ T8291] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 334.839420][ T8291] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.598: bad orphan inode 16 [ 334.852555][ T8291] ext4_test_bit(bit=15, block=18) = 1 [ 334.858039][ T8291] is_bad_inode(inode)=0 [ 334.862208][ T8291] NEXT_ORPHAN(inode)=0 [ 334.866354][ T8291] max_ino=32 [ 334.869579][ T8291] i_nlink=2 [ 334.874676][ T8291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 336.000847][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 336.163980][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.451468][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 337.116404][ T30] audit: type=1326 audit(1744529311.555:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.0.606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc83d8d169 code=0x0 [ 337.255446][ T8325] PKCS7: Unknown OID: [5] (bad) [ 337.260502][ T8325] PKCS7: Only support pkcs7_signedData type [ 338.797479][ T8333] No control pipe specified [ 338.811812][ T8324] loop4: detected capacity change from 0 to 4096 [ 338.860830][ T8324] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 341.800022][ T8362] loop0: detected capacity change from 0 to 64 [ 343.725439][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 344.686727][ T30] audit: type=1326 audit(1744529319.325:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.3.619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fdef8d169 code=0x0 [ 346.005741][ T8387] loop1: detected capacity change from 0 to 512 [ 346.072362][ T8387] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 346.082131][ T8387] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 346.090314][ T8387] System zones: 0-1, 15-15, 18-18, 34-34 [ 346.096288][ T8387] EXT4-fs (loop1): orphan cleanup on readonly fs [ 346.104389][ T8387] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 346.113744][ T8387] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 346.128371][ T8387] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 346.287860][ T8387] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.621: bad orphan inode 16 [ 346.299329][ T8387] ext4_test_bit(bit=15, block=18) = 1 [ 346.307195][ T8387] is_bad_inode(inode)=0 [ 346.311450][ T8387] NEXT_ORPHAN(inode)=0 [ 346.315574][ T8387] max_ino=32 [ 346.318800][ T8387] i_nlink=2 [ 346.326308][ T8387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.506178][ T8399] loop3: detected capacity change from 0 to 1024 [ 346.610938][ T8399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.414521][ T8403] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 347.454525][ T30] audit: type=1800 audit(1744529322.095:39): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.624" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 347.516473][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.732651][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.919933][ T8411] No control pipe specified [ 349.120735][ T8420] loop3: detected capacity change from 0 to 4096 [ 349.365992][ T8420] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 349.863679][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 353.112459][ T8464] loop4: detected capacity change from 0 to 256 [ 353.150512][ T8467] loop3: detected capacity change from 0 to 512 [ 353.177207][ T8462] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 354.366489][ T8467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.422060][ T8467] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.472561][ T8471] xfrm0: entered promiscuous mode [ 354.478283][ T8471] xfrm0: entered allmulticast mode [ 354.723977][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 355.207734][ T24] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 355.289455][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.298804][ T24] usb 3-1: config 0 has no interface number 0 [ 355.317800][ T8476] No control pipe specified [ 355.331060][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 355.347473][ T24] usb 3-1: too many endpoints for config 0 interface 101 altsetting 65: 100, using maximum allowed: 30 [ 355.395236][ T24] usb 3-1: config 0 interface 101 altsetting 65 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 355.417419][ T24] usb 3-1: config 0 interface 101 has no altsetting 0 [ 355.429832][ T24] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 355.440186][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.503204][ T24] usb 3-1: config 0 descriptor?? [ 355.718055][ T8487] loop3: detected capacity change from 0 to 8192 [ 355.738807][ T24] usb 3-1: string descriptor 0 read error: -71 [ 355.754014][ T24] go7007 3-1:0.101: probe with driver go7007 failed with error -12 [ 355.801369][ T24] usb 3-1: USB disconnect, device number 9 [ 356.039287][ T8487] tipc: Started in network mode [ 356.070679][ T8487] tipc: Node identity 6, cluster identity 4711 [ 356.087948][ T8487] tipc: Node number set to 6 [ 356.229795][ T8494] loop4: detected capacity change from 0 to 4096 [ 356.270902][ T8494] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 356.288043][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 357.706117][ T8506] loop1: detected capacity change from 0 to 4096 [ 357.759987][ T8506] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 358.115974][ T30] audit: type=1326 audit(1744529332.735:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.0.651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc83d8d169 code=0x0 [ 360.920826][ T8536] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.991769][ T8531] No control pipe specified [ 361.060104][ T8535] loop0: detected capacity change from 0 to 4096 [ 361.093374][ T8535] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 362.385255][ T5938] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 362.623965][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 362.698198][ T5938] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 362.726125][ T5938] usb 4-1: config 0 has no interface number 0 [ 362.749477][ T5938] usb 4-1: too many endpoints for config 0 interface 101 altsetting 65: 100, using maximum allowed: 30 [ 362.778608][ T5938] usb 4-1: config 0 interface 101 altsetting 65 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 362.825449][ T8553] loop1: detected capacity change from 0 to 8192 [ 362.844364][ T5938] usb 4-1: config 0 interface 101 has no altsetting 0 [ 362.851230][ T5938] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 362.904633][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.517546][ T8564] loop2: detected capacity change from 0 to 1024 [ 363.875210][ T5938] usb 4-1: config 0 descriptor?? [ 363.945444][ T8564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.165120][ T30] audit: type=1800 audit(1744529338.615:41): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.665" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 364.254690][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.506213][ T8545] lo speed is unknown, defaulting to 1000 [ 364.605450][ T5938] usb 4-1: string descriptor 0 read error: -71 [ 364.626422][ T5938] go7007 4-1:0.101: probe with driver go7007 failed with error -12 [ 364.650390][ T5938] usb 4-1: USB disconnect, device number 11 [ 366.513144][ T8587] loop4: detected capacity change from 0 to 1024 [ 366.646493][ T8587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.680522][ T30] audit: type=1800 audit(1744529341.315:42): pid=8584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.669" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 366.708053][ T8590] loop3: detected capacity change from 0 to 256 [ 366.940764][ T8597] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 367.834800][ T8582] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 367.849923][ T8582] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 367.863985][ T8582] EXT4-fs (loop4): This should not happen!! Data will be lost [ 367.863985][ T8582] [ 367.873798][ T8582] EXT4-fs (loop4): Total free blocks count 0 [ 367.879840][ T8582] EXT4-fs (loop4): Free/Dirty block details [ 367.885810][ T8582] EXT4-fs (loop4): free_blocks=68451041280 [ 367.891649][ T8582] EXT4-fs (loop4): dirty_blocks=64 [ 367.896833][ T8582] EXT4-fs (loop4): Block reservation details [ 367.902832][ T8582] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 368.090391][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.190292][ T8600] xfrm0: entered promiscuous mode [ 368.195604][ T8600] xfrm0: entered allmulticast mode [ 369.651440][ T8611] No control pipe specified [ 369.716994][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 369.769363][ T8617] loop4: detected capacity change from 0 to 8 [ 372.069582][ T8637] loop3: detected capacity change from 0 to 1024 [ 372.233220][ T8639] loop0: detected capacity change from 0 to 8192 [ 372.746786][ T8642] hfsplus: xattr search failed [ 372.836900][ T8636] hfsplus: xattr searching failed [ 372.856609][ T30] audit: type=1800 audit(1744529347.485:43): pid=8636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.681" name="file1" dev="loop3" ino=3 res=0 errno=0 [ 373.066840][ T8639] xfrm0: left promiscuous mode [ 373.098073][ T8649] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.173834][ T8652] loop2: detected capacity change from 0 to 1024 [ 373.220618][ T8652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.253545][ T30] audit: type=1800 audit(1744529347.885:44): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.685" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 373.320770][ T12] hfsplus: b-tree write err: -5, ino 3 [ 373.665242][ T8644] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 373.681041][ T8644] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 373.693843][ T8644] EXT4-fs (loop2): This should not happen!! Data will be lost [ 373.693843][ T8644] [ 373.703664][ T8644] EXT4-fs (loop2): Total free blocks count 0 [ 373.710079][ T8644] EXT4-fs (loop2): Free/Dirty block details [ 373.716400][ T8644] EXT4-fs (loop2): free_blocks=68451041280 [ 374.827022][ T8644] EXT4-fs (loop2): dirty_blocks=64 [ 374.832533][ T8644] EXT4-fs (loop2): Block reservation details [ 374.838823][ T8644] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 375.107539][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.201331][ T8668] loop1: detected capacity change from 0 to 64 [ 376.692743][ T8681] PKCS7: Unknown OID: [5] (bad) [ 376.697937][ T8681] PKCS7: Only support pkcs7_signedData type [ 376.967938][ T8691] No control pipe specified [ 377.317878][ T5880] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 378.083713][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 378.186193][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.197408][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.207620][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 378.232954][ T5880] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 378.404212][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 378.456813][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.464435][ T9] usb 4-1: config 0 has no interfaces? [ 378.696803][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.703739][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.141292][ T9] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 379.169885][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.200366][ T5880] usb 2-1: config 0 descriptor?? [ 379.266029][ T8710] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 379.565873][ T9] usb 4-1: config 0 descriptor?? [ 379.810242][ T8058] usb 4-1: USB disconnect, device number 12 [ 379.943351][ T8713] loop0: detected capacity change from 0 to 8192 [ 380.283772][ T8722] loop2: detected capacity change from 0 to 1024 [ 380.415072][ T8722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.454317][ T30] audit: type=1800 audit(1744529355.085:45): pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.699" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 380.459895][ T5880] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 380.487534][ T5880] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 380.503849][ T5880] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 380.832547][ T8714] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 380.849123][ T8714] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 380.861650][ T8714] EXT4-fs (loop2): This should not happen!! Data will be lost [ 380.861650][ T8714] [ 380.871624][ T8714] EXT4-fs (loop2): Total free blocks count 0 [ 380.877864][ T8714] EXT4-fs (loop2): Free/Dirty block details [ 380.883968][ T8714] EXT4-fs (loop2): free_blocks=68451041280 [ 380.890135][ T8714] EXT4-fs (loop2): dirty_blocks=64 [ 380.895450][ T8714] EXT4-fs (loop2): Block reservation details [ 380.901611][ T8714] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 381.377564][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.463059][ T975] usb 2-1: USB disconnect, device number 8 [ 382.358690][ T8741] loop2: detected capacity change from 0 to 64 [ 383.980773][ T8750] loop0: detected capacity change from 0 to 512 [ 384.023702][ T8756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'. [ 384.133161][ T8750] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 384.141495][ T8750] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 384.149671][ T8750] System zones: 0-1, 15-15, 18-18, 34-34 [ 384.160382][ T8750] EXT4-fs (loop0): orphan cleanup on readonly fs [ 384.170310][ T8750] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 384.179912][ T8750] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 384.197011][ T8750] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 384.208938][ T8750] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.705: bad orphan inode 16 [ 384.231085][ T8750] ext4_test_bit(bit=15, block=18) = 1 [ 384.236606][ T8750] is_bad_inode(inode)=0 [ 384.240766][ T8750] NEXT_ORPHAN(inode)=0 [ 384.244934][ T8750] max_ino=32 [ 384.248156][ T8750] i_nlink=2 [ 384.252652][ T8750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 384.408513][ T8756] loop4: detected capacity change from 0 to 512 [ 384.419543][ T8760] No control pipe specified [ 384.428903][ T8756] EXT4-fs: inline encryption not supported [ 384.503145][ T8756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.691764][ T8766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.873051][ T8756] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.895269][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.915982][ T8749] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #2: comm syz.4.707: corrupted inode contents [ 384.957102][ T8749] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz.4.707: mark_inode_dirty error [ 384.980583][ T8749] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #2: comm syz.4.707: corrupted inode contents [ 385.040552][ T8749] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.707: mark_inode_dirty error [ 385.893991][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.960818][ T8779] loop2: detected capacity change from 0 to 1024 [ 385.969030][ T8770] loop3: detected capacity change from 0 to 8192 [ 386.072926][ T8779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.092283][ T30] audit: type=1800 audit(1744529360.735:46): pid=8779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.713" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 386.276237][ T8770] xfrm0: left promiscuous mode [ 386.378249][ T8788] loop4: detected capacity change from 0 to 8192 [ 387.259801][ T8776] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 387.275699][ T8776] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 387.283994][ T8788] xfrm0: left promiscuous mode [ 387.288068][ T8776] EXT4-fs (loop2): This should not happen!! Data will be lost [ 387.288068][ T8776] [ 387.288094][ T8776] EXT4-fs (loop2): Total free blocks count 0 [ 387.288120][ T8776] EXT4-fs (loop2): Free/Dirty block details [ 387.288135][ T8776] EXT4-fs (loop2): free_blocks=68451041280 [ 387.288152][ T8776] EXT4-fs (loop2): dirty_blocks=64 [ 387.288165][ T8776] EXT4-fs (loop2): Block reservation details [ 387.288190][ T8776] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 387.468440][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.284650][ T8800] PKCS7: Unknown OID: [5] (bad) [ 388.318645][ T8800] PKCS7: Only support pkcs7_signedData type [ 388.670555][ T8810] loop2: detected capacity change from 0 to 64 [ 389.535018][ T5880] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 390.664309][ T975] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 390.786614][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.166118][ T8822] loop4: detected capacity change from 0 to 512 [ 391.214550][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.237495][ T8822] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 391.247903][ T8822] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 391.258399][ T8822] System zones: 0-1, 15-15, 18-18, 34-34 [ 391.267289][ T8822] EXT4-fs (loop4): orphan cleanup on readonly fs [ 391.273807][ T8822] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 391.284234][ T8822] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 391.288168][ T975] usb 3-1: Using ep0 maxpacket: 32 [ 391.301460][ T8822] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 391.313652][ T8822] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.722: bad orphan inode 16 [ 391.329711][ T8822] ext4_test_bit(bit=15, block=18) = 1 [ 391.335249][ T8822] is_bad_inode(inode)=0 [ 391.339431][ T8822] NEXT_ORPHAN(inode)=0 [ 391.343575][ T8822] max_ino=32 [ 391.347179][ T8822] i_nlink=2 [ 391.352192][ T8822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 391.380885][ T975] usb 3-1: config 0 has an invalid interface number: 165 but max is 0 [ 391.402089][ T975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.418443][ T975] usb 3-1: config 0 has no interface number 0 [ 391.430707][ T975] usb 3-1: config 0 interface 165 altsetting 0 has an endpoint descriptor with address 0x26, changing to 0x6 [ 391.448429][ T975] usb 3-1: config 0 interface 165 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 391.460963][ T975] usb 3-1: config 0 interface 165 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 391.469119][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.484345][ T5880] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.493541][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.555233][ T5880] usb 4-1: config 0 descriptor?? [ 391.555421][ T975] usb 3-1: config 0 interface 165 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.584840][ T975] usb 3-1: New USB device found, idVendor=13d3, idProduct=3349, bcdDevice=23.ec [ 391.600782][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.610212][ T975] usb 3-1: Product: syz [ 391.623647][ T975] usb 3-1: Manufacturer: syz [ 391.693605][ T975] usb 3-1: SerialNumber: syz [ 391.705633][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.744910][ T8826] No control pipe specified [ 391.758184][ T5880] usbhid 4-1:0.0: can't add hid device: -71 [ 391.766888][ T975] usb 3-1: config 0 descriptor?? [ 391.792915][ T5880] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 391.867263][ T975] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 391.875862][ T5880] usb 4-1: USB disconnect, device number 13 [ 392.143582][ T24] usb 3-1: USB disconnect, device number 10 [ 393.194293][ T8841] loop3: detected capacity change from 0 to 1024 [ 394.047514][ T8839] hfsplus: xattr search failed [ 395.236729][ T8858] loop1: detected capacity change from 0 to 64 [ 396.048588][ T8853] loop3: detected capacity change from 0 to 8192 [ 397.589199][ T8865] loop1: detected capacity change from 0 to 512 [ 397.883345][ T8865] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 397.891515][ T8865] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 397.899741][ T8865] System zones: 0-1, 15-15, 18-18, 34-34 [ 397.905856][ T8865] EXT4-fs (loop1): orphan cleanup on readonly fs [ 397.912283][ T8865] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 397.924332][ T8865] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 397.938949][ T8865] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 397.987965][ T8865] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.736: bad orphan inode 16 [ 398.002462][ T8865] ext4_test_bit(bit=15, block=18) = 1 [ 398.007991][ T8865] is_bad_inode(inode)=0 [ 398.012506][ T8865] NEXT_ORPHAN(inode)=0 [ 398.017171][ T8865] max_ino=32 [ 398.020400][ T8865] i_nlink=2 [ 398.089126][ T8865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.776845][ T8872] loop2: detected capacity change from 0 to 512 [ 398.804536][ T8872] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 398.812542][ T8872] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 398.822845][ T8872] System zones: 0-1, 15-15, 18-18, 34-34 [ 398.831317][ T8872] EXT4-fs (loop2): orphan cleanup on readonly fs [ 398.841875][ T8872] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 398.851402][ T8872] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 398.866018][ T8872] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 398.874569][ T8872] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.737: bad orphan inode 16 [ 398.892071][ T8872] ext4_test_bit(bit=15, block=18) = 1 [ 398.897599][ T8872] is_bad_inode(inode)=0 [ 398.902386][ T8872] NEXT_ORPHAN(inode)=0 [ 398.906820][ T8872] max_ino=32 [ 398.910069][ T8872] i_nlink=2 [ 398.915070][ T8872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.057952][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.540747][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.315568][ T8883] 9pnet: Could not find request transport: fd0x0000000000000003 [ 400.410860][ T8890] loop4: detected capacity change from 0 to 4096 [ 400.445835][ T8890] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 401.970650][ T8903] PKCS7: Unknown OID: [5] (bad) [ 401.978624][ T8903] PKCS7: Only support pkcs7_signedData type [ 402.204703][ T975] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 402.388716][ T8912] loop2: detected capacity change from 0 to 64 [ 402.776272][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 403.152164][ T975] usb 2-1: config 0 has no interfaces? [ 403.164470][ T975] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 403.173687][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.215323][ T975] usb 2-1: config 0 descriptor?? [ 403.481742][ T5938] usb 2-1: USB disconnect, device number 9 [ 403.578057][ T8914] loop4: detected capacity change from 0 to 8192 [ 403.887419][ T8918] 9pnet_fd: p9_fd_create_unix (8918): problem connecting socket: ./file0: -111 [ 405.862250][ T8927] loop1: detected capacity change from 0 to 512 [ 406.448889][ T8927] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 406.456969][ T8927] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 406.465096][ T8927] System zones: 0-1, 15-15, 18-18, 34-34 [ 406.470996][ T8927] EXT4-fs (loop1): orphan cleanup on readonly fs [ 406.477545][ T8927] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 406.486919][ T8927] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 406.501457][ T8927] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 406.510420][ T8927] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.752: bad orphan inode 16 [ 406.522366][ T8927] ext4_test_bit(bit=15, block=18) = 1 [ 406.527805][ T8927] is_bad_inode(inode)=0 [ 406.531953][ T8927] NEXT_ORPHAN(inode)=0 [ 406.536064][ T8927] max_ino=32 [ 406.539260][ T8927] i_nlink=2 [ 406.543678][ T8927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 406.981139][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.791513][ T8941] 9pnet: Could not find request transport: fd0x0000000000000003 [ 407.981394][ T8946] loop2: detected capacity change from 0 to 256 [ 408.078691][ T8946] FAT-fs (loop2): Directory bread(block 64) failed [ 408.115888][ T8946] FAT-fs (loop2): Directory bread(block 65) failed [ 408.128016][ T8949] loop1: detected capacity change from 0 to 256 [ 408.142564][ T8946] FAT-fs (loop2): Directory bread(block 66) failed [ 408.150205][ T8946] FAT-fs (loop2): Directory bread(block 67) failed [ 408.176931][ T8946] FAT-fs (loop2): Directory bread(block 68) failed [ 408.183831][ T8946] FAT-fs (loop2): Directory bread(block 69) failed [ 408.191340][ T8946] FAT-fs (loop2): Directory bread(block 70) failed [ 408.202146][ T8946] FAT-fs (loop2): Directory bread(block 71) failed [ 408.209478][ T8946] FAT-fs (loop2): Directory bread(block 72) failed [ 408.254521][ T8946] FAT-fs (loop2): Directory bread(block 73) failed [ 408.266560][ T8949] FAT-fs (loop1): Directory bread(block 64) failed [ 408.284624][ T8949] FAT-fs (loop1): Directory bread(block 65) failed [ 408.319836][ T8949] FAT-fs (loop1): Directory bread(block 66) failed [ 408.344509][ T8949] FAT-fs (loop1): Directory bread(block 67) failed [ 408.373880][ T8949] FAT-fs (loop1): Directory bread(block 68) failed [ 408.422985][ T8946] syz.2.756: attempt to access beyond end of device [ 408.422985][ T8946] loop2: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 408.438614][ T8949] FAT-fs (loop1): Directory bread(block 69) failed [ 408.455495][ T8949] FAT-fs (loop1): Directory bread(block 70) failed [ 408.474360][ T8946] syz.2.756: attempt to access beyond end of device [ 408.474360][ T8946] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 408.488008][ T8949] FAT-fs (loop1): Directory bread(block 71) failed [ 408.502544][ T30] audit: type=1800 audit(1744529383.145:47): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.756" name="file1" dev="loop2" ino=63 res=0 errno=0 [ 408.522570][ T8949] FAT-fs (loop1): Directory bread(block 72) failed [ 408.553195][ T8949] FAT-fs (loop1): Directory bread(block 73) failed [ 408.683539][ T8952] loop4: detected capacity change from 0 to 8192 [ 408.732971][ T8949] syz.1.757: attempt to access beyond end of device [ 408.732971][ T8949] loop1: rw=2049, sector=1352, nr_sectors = 8 limit=256 [ 408.752120][ T8957] loop2: detected capacity change from 0 to 16 [ 408.776251][ T8949] syz.1.757: attempt to access beyond end of device [ 408.776251][ T8949] loop1: rw=0, sector=1356, nr_sectors = 4 limit=256 [ 408.793298][ T8957] erofs (device loop2): mounted with root inode @ nid 36. [ 408.957507][ T55] erofs (device loop2): failed to decompress -26 in[46, 0] out[9000] [ 408.984778][ T8957] erofs (device loop2): failed to decompress -26 in[46, 4050] out[8192] [ 408.993493][ T8957] erofs (device loop2): read error -117 @ 0 of nid 89 [ 409.001253][ T30] audit: type=1800 audit(1744529383.655:48): pid=8957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.760" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 409.021363][ T8957] fuse: Bad value for 'fd' [ 409.024886][ T68] kworker/u8:4: attempt to access beyond end of device [ 409.024886][ T68] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 409.332445][ T8964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.762'. [ 409.415140][ T8965] serio: Serial port ptm0 [ 409.604159][ T8959] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 410.310027][ T30] audit: type=1326 audit(1744529384.945:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e038d169 code=0x7ffc0000 [ 410.406802][ T30] audit: type=1326 audit(1744529384.955:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86e038d169 code=0x7ffc0000 [ 410.544244][ T30] audit: type=1326 audit(1744529384.955:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e038d169 code=0x7ffc0000 Connection to 10.128.0.157 closed by remote host. [ 410.686593][ T30] audit: type=1326 audit(1744529384.955:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86e0384127 code=0x7ffc0000 [ 410.768605][ T30] audit: type=1326 audit(1744529384.955:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86e0329359 code=0x7ffc0000 [ 410.836183][ T30] audit: type=1326 audit(1744529384.955:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f86e038d169 code=0x7ffc0000 [ 410.895475][ T30] audit: type=1326 audit(1744529384.955:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86e0384127 code=0x7ffc0000 [ 411.649318][ T6055] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.822750][ T6055] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.947017][ T6055] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.049479][ T6055] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.231933][ T6055] bridge_slave_1: left allmulticast mode [ 412.238007][ T6055] bridge_slave_1: left promiscuous mode [ 412.246841][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.262102][ T6055] bridge_slave_0: left allmulticast mode [ 412.269400][ T6055] bridge_slave_0: left promiscuous mode [ 412.275489][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.608385][ T6055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.620176][ T6055] bond0 (unregistering): Released all slaves [ 412.705323][ T6055] tipc: Left network mode [ 412.736880][ T6055] IPVS: stopping master sync thread 7084 ... [ 412.909024][ T6055] hsr_slave_0: left promiscuous mode [ 412.915264][ T6055] hsr_slave_1: left promiscuous mode [ 412.921136][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.928910][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.937788][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.945341][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.966479][ T6055] [ 412.968847][ T6055] ============================================ [ 412.975001][ T6055] WARNING: possible recursive locking detected [ 412.981132][ T6055] 6.15.0-rc1-next-20250411-syzkaller #0 Not tainted [ 412.987726][ T6055] -------------------------------------------- [ 412.993863][ T6055] kworker/u8:10/6055 is trying to acquire lock: [ 413.000089][ T6055] ffff8880697b2d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 413.010197][ T6055] [ 413.010197][ T6055] but task is already holding lock: [ 413.017554][ T6055] ffff8880697b2d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 413.029156][ T6055] and the lock comparison function returns 0: [ 413.035258][ T6055] [ 413.035258][ T6055] other info that might help us debug this: [ 413.043321][ T6055] Possible unsafe locking scenario: [ 413.043321][ T6055] [ 413.050760][ T6055] CPU0 [ 413.054039][ T6055] ---- [ 413.057312][ T6055] lock(&dev_instance_lock_key#3); [ 413.062514][ T6055] lock(&dev_instance_lock_key#3); [ 413.067760][ T6055] [ 413.067760][ T6055] *** DEADLOCK *** [ 413.067760][ T6055] [ 413.075899][ T6055] May be due to missing lock nesting notation [ 413.075899][ T6055] [ 413.084226][ T6055] 5 locks held by kworker/u8:10/6055: [ 413.089607][ T6055] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 413.100485][ T6055] #1: ffffc9000b3dfc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 413.111022][ T6055] #2: ffffffff900f6710 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 413.120429][ T6055] #3: ffffffff90103248 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 413.130443][ T6055] #4: ffff8880697b2d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 413.142469][ T6055] [ 413.142469][ T6055] stack backtrace: [ 413.148358][ T6055] CPU: 1 UID: 0 PID: 6055 Comm: kworker/u8:10 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 413.148379][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 413.148390][ T6055] Workqueue: netns cleanup_net [ 413.148409][ T6055] Call Trace: [ 413.148416][ T6055] [ 413.148421][ T6055] dump_stack_lvl+0x241/0x360 [ 413.148445][ T6055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.148467][ T6055] ? __pfx__printk+0x10/0x10 [ 413.148488][ T6055] ? print_lock+0x171/0x1a0 [ 413.148517][ T6055] print_deadlock_bug+0x2be/0x2d0 [ 413.148534][ T6055] validate_chain+0x928/0x24e0 [ 413.148550][ T6055] ? check_noncircular+0xee/0x160 [ 413.148568][ T6055] ? lockdep_unlock+0x8d/0x120 [ 413.148588][ T6055] ? validate_chain+0x8a7/0x24e0 [ 413.148607][ T6055] __lock_acquire+0xad5/0xd80 [ 413.148623][ T6055] lock_acquire+0x116/0x2f0 [ 413.148654][ T6055] ? dev_set_allmulti+0x11c/0x270 [ 413.148674][ T6055] __mutex_lock+0x1a5/0x10c0 [ 413.148689][ T6055] ? dev_set_allmulti+0x11c/0x270 [ 413.148709][ T6055] ? dev_set_allmulti+0x11c/0x270 [ 413.148724][ T6055] ? __pfx___mutex_lock+0x10/0x10 [ 413.148741][ T6055] ? lockdep_hardirqs_on+0x9d/0x150 [ 413.148755][ T6055] ? __local_bh_enable_ip+0x168/0x200 [ 413.148776][ T6055] ? macsec_dev_stop+0x264/0x440 [ 413.148791][ T6055] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 413.148812][ T6055] dev_set_allmulti+0x11c/0x270 [ 413.148830][ T6055] macsec_dev_stop+0x2b8/0x440 [ 413.148845][ T6055] ? __pfx_macsec_dev_stop+0x10/0x10 [ 413.148863][ T6055] ? dev_deactivate_many+0xc09/0xca0 [ 413.148881][ T6055] ? __pfx_dev_deactivate_many+0x10/0x10 [ 413.148897][ T6055] ? notifier_call_chain+0x3cc/0x3f0 [ 413.148912][ T6055] ? __pfx_macsec_dev_stop+0x10/0x10 [ 413.148927][ T6055] __dev_close_many+0x3d7/0x760 [ 413.148943][ T6055] ? __pfx___dev_close_many+0x10/0x10 [ 413.148960][ T6055] dev_close_many+0x250/0x4c0 [ 413.148976][ T6055] ? __pfx_dev_close_many+0x10/0x10 [ 413.148993][ T6055] ? __lock_acquire+0xad5/0xd80 [ 413.149007][ T6055] unregister_netdevice_many_notify+0x628/0x2510 [ 413.149031][ T6055] ? lockdep_hardirqs_on+0x9d/0x150 [ 413.149046][ T6055] ? __local_bh_enable_ip+0x168/0x200 [ 413.149065][ T6055] ? batadv_tt_local_remove+0x119/0x230 [ 413.149086][ T6055] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 413.149105][ T6055] ? batadv_tt_local_remove+0x119/0x230 [ 413.149125][ T6055] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 413.149150][ T6055] ? unregister_netdevice_queue+0x2c4/0x400 [ 413.149172][ T6055] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 413.149191][ T6055] default_device_exit_batch+0x7ff/0x880 [ 413.149210][ T6055] ? __pfx_default_device_exit_batch+0x10/0x10 [ 413.149226][ T6055] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 413.149248][ T6055] ? __pfx_default_device_exit_batch+0x10/0x10 [ 413.149265][ T6055] cleanup_net+0x8af/0xd60 [ 413.149282][ T6055] ? __pfx_cleanup_net+0x10/0x10 [ 413.149301][ T6055] ? process_scheduled_works+0x9cb/0x18e0 [ 413.149313][ T6055] process_scheduled_works+0xac3/0x18e0 [ 413.149336][ T6055] ? __pfx_process_scheduled_works+0x10/0x10 [ 413.149352][ T6055] ? assign_work+0x367/0x3d0 [ 413.149365][ T6055] worker_thread+0x870/0xd50 [ 413.149384][ T6055] ? __kthread_parkme+0x1a8/0x200 [ 413.149399][ T6055] ? __pfx_worker_thread+0x10/0x10 [ 413.149413][ T6055] kthread+0x7b7/0x940 [ 413.149429][ T6055] ? __pfx_worker_thread+0x10/0x10 [ 413.149443][ T6055] ? __pfx_kthread+0x10/0x10 [ 413.149458][ T6055] ? __pfx_kthread+0x10/0x10 [ 413.149473][ T6055] ? __pfx_kthread+0x10/0x10 [ 413.149489][ T6055] ? __pfx_kthread+0x10/0x10 [ 413.149505][ T6055] ? _raw_spin_unlock_irq+0x23/0x50 [ 413.149517][ T6055] ? lockdep_hardirqs_on+0x9d/0x150 [ 413.149530][ T6055] ? __pfx_kthread+0x10/0x10 [ 413.149546][ T6055] ret_from_fork+0x4b/0x80 [ 413.149559][ T6055] ? __pfx_kthread+0x10/0x10 [ 413.149575][ T6055] ret_from_fork_asm+0x1a/0x30 [ 413.149592][ T6055]