last executing test programs: 2m12.277661713s ago: executing program 32 (id=845): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010100000000000000000000000006000240000000002c5411"], 0x50}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2m2.587894316s ago: executing program 33 (id=884): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000280)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x400002, 0xffffffffffffffff, 0x1}) 1m44.222166274s ago: executing program 34 (id=1013): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='lp', 0x2) sendto$inet6(r0, &(0x7f0000000040)="e6", 0x1, 0x20000815, &(0x7f0000b63fe4)={0xa, 0x2, 0x5}, 0x1c) shutdown(r0, 0x1) 1m37.954759611s ago: executing program 6 (id=1054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000240)="0104001806005abeef4ba0d59844c1000000d122f0930b82758949cd5bd7c5f48ce38daa1f4417a37a5a7c279aa789f695a1a07771f077b73fa4d4a27f38c1184da7a277", 0x44}], 0x2) 1m37.9122709s ago: executing program 5 (id=1055): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x97, 0x80000000, 0x2d, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x80, 0x80, 0x3, 0x3}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 1m37.693620363s ago: executing program 5 (id=1057): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r0 = io_uring_setup(0x4562, &(0x7f0000000000)={0x0, 0xc95e, 0x1, 0x2, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m37.280996925s ago: executing program 6 (id=1059): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d7008c292a5b01000000000000000000000000000000000000000000000000000000000001"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m36.739169704s ago: executing program 5 (id=1063): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x0, @empty}, 0x2a0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m36.666112098s ago: executing program 6 (id=1064): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m36.559604262s ago: executing program 5 (id=1066): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 1m36.364145844s ago: executing program 6 (id=1068): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a4d057, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 1m36.270765052s ago: executing program 5 (id=1070): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff5}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) 1m36.136288312s ago: executing program 6 (id=1071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x8000, &(0x7f0000000080)={[{@logbufs={'logbufs', 0x3d, 0x2}}, {@noalign}, {@sysvgroups}, {@inode64}, {@nolazytime}]}, 0x1, 0xb99f, &(0x7f0000018700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x10, 0x6, 0x9586) 1m36.061537271s ago: executing program 4 (id=1072): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000) prlimit64(0x0, 0x9, 0x0, &(0x7f00000003c0)) fadvise64(r0, 0x18, 0x0, 0x4) 1m35.893228894s ago: executing program 5 (id=1073): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x84, &(0x7f000005ffe4)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x0, 0x0, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) 1m35.282743984s ago: executing program 35 (id=1073): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x84, &(0x7f000005ffe4)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x0, 0x0, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) 1m35.276377965s ago: executing program 6 (id=1075): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x2f}, 0x94) 1m35.272834799s ago: executing program 36 (id=1075): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x2f}, 0x94) 1m35.266272992s ago: executing program 4 (id=1078): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000919c00000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="110000000700000000000000", @ANYRES32=r2, @ANYRES64=0x0], 0x20) 1m35.06868077s ago: executing program 4 (id=1079): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0x5, 0x7, 0x3, 0x4, 0x9, 0x0, 0x80, 0xde, 0x0, 0x10, 0x3f, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r1, 0xe}, &(0x7f0000000280)=0x8) 1m34.946814238s ago: executing program 4 (id=1080): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 1m34.614261172s ago: executing program 4 (id=1081): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68000000490001002dbd7000ffdbdf250a"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m34.258853985s ago: executing program 4 (id=1084): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ppoll(&(0x7f00000002c0)=[{r0, 0x4400}, {r0, 0x410}], 0x2, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) 1m34.025928113s ago: executing program 37 (id=1084): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ppoll(&(0x7f00000002c0)=[{r0, 0x4400}, {r0, 0x410}], 0x2, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) 1m15.287242693s ago: executing program 0 (id=1142): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0xc0086c43, &(0x7f00000002c0)=0x700) 1m14.78303876s ago: executing program 0 (id=1148): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000000200)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000170100"], 0x28, 0x2000c000}}], 0x2, 0x88) 1m14.582478586s ago: executing program 0 (id=1149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 1m14.387991385s ago: executing program 0 (id=1152): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, 0x0, 0x20, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) 1m14.230583182s ago: executing program 0 (id=1154): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m14.049452555s ago: executing program 0 (id=1158): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2, 0x3}, &(0x7f0000000080)=0x8) 58.951183996s ago: executing program 38 (id=1158): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2, 0x3}, &(0x7f0000000080)=0x8) 16.579978802s ago: executing program 7 (id=1605): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 16.389733521s ago: executing program 7 (id=1608): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) mremap(&(0x7f0000040000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 15.913637733s ago: executing program 7 (id=1614): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0xc010}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 13.742501266s ago: executing program 7 (id=1630): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e6, &(0x7f0000000140)="$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") capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}, {@nfs_export_on}]}) 13.095364509s ago: executing program 7 (id=1635): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 12.412483868s ago: executing program 7 (id=1640): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f00000004c0)=ANY=[], 0xfd, 0x14fe, &(0x7f0000000700)="$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") syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0xfffffd49, 0x20044080, 0x1}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 11.866715171s ago: executing program 39 (id=1640): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f00000004c0)=ANY=[], 0xfd, 0x14fe, &(0x7f0000000700)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0xfffffd49, 0x20044080, 0x1}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 4.977263537s ago: executing program 9 (id=1681): unshare(0x60600) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r1, 0x0, 0x0, 0x40010000, 0x0, 0x0) 3.385941235s ago: executing program 9 (id=1695): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = syz_io_uring_setup(0xd5, &(0x7f0000000640)={0x0, 0xc12d, 0x1, 0x0, 0x109}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.066983921s ago: executing program 9 (id=1696): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100003042abd7000fbdbdf2500007400", @ANYRES32=r1, @ANYBLOB="000001000750050008001300", @ANYRES32=r2, @ANYBLOB="140003007665"], 0x3c}, 0x1, 0x0, 0x0, 0x44882}, 0x0) 2.469685171s ago: executing program 9 (id=1701): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/4105, 0xff88, 0x0, 0x0}, &(0x7f0000000280)=0x40) 2.32007256s ago: executing program 9 (id=1703): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) 2.282257331s ago: executing program 2 (id=1705): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.979772358s ago: executing program 2 (id=1707): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000000)="619ff1e3c70400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.862656887s ago: executing program 8 (id=1708): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x7}, 0x2}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 1.69210051s ago: executing program 2 (id=1710): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) syz_open_procfs$namespace(r0, 0x0) 1.674963472s ago: executing program 3 (id=1711): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x297, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x185f02, 0x2b) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201001) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) 1.55859636s ago: executing program 8 (id=1712): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003704000000020000000000000000", @ANYRES32=r2, @ANYBLOB="83040500000000002800128008000100736974001c00028006000f000200000006001000b190000008000300ac"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e1b, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.450331174s ago: executing program 3 (id=1713): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x5875, @mcast1, 0x3}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/udplite6\x00') preadv(r2, &(0x7f0000000780)=[{&(0x7f0000000240)=""/86, 0x56}], 0x1, 0xa4, 0x7) 1.388377216s ago: executing program 1 (id=1714): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.29508591s ago: executing program 3 (id=1715): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x7f}) 1.051843172s ago: executing program 8 (id=1716): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) 1.03488016s ago: executing program 3 (id=1717): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a6082210800d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a0d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa1a6a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace1d7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dc5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a59aaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb0910c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae00", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0xfffffffffffffff9, 0x1, 0x9, 0xa, 0x6, 0x5, 0x6, 0x101, 0x5bfb48bf2c6e0c14, 0x4, 0xffffffffffffffff, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x22) 982.206696ms ago: executing program 1 (id=1718): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r0, &(0x7f0000006040)={0x2020}, 0x2020) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 578.987175ms ago: executing program 1 (id=1719): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001500)=""/111, 0x6f}, {0x0}], 0x2}, 0x1}], 0x1, 0x0, 0x0) 502.113916ms ago: executing program 3 (id=1720): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) r1 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x125}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 479.162938ms ago: executing program 1 (id=1721): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0x40, 0x1, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x0, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x2, 0x2000, 0x100000, [0x3, 0x401, 0x6, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xfc}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xf7, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x84, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x5, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x5, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 456.960674ms ago: executing program 8 (id=1722): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x504a, &(0x7f0000000080)={0x0, 0x133a, 0x40, 0x3, 0x7fffe}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 416.542809ms ago: executing program 2 (id=1723): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 317.87673ms ago: executing program 8 (id=1724): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}}) 309.501876ms ago: executing program 2 (id=1725): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x3, 0x20, 0x10000000fffff}, 0x2f) r2 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0), 0x12) 218.45699ms ago: executing program 8 (id=1726): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 204.832528ms ago: executing program 1 (id=1727): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) 102.047959ms ago: executing program 3 (id=1728): syz_mount_image$ntfs3(&(0x7f0000000140), &(0x7f0000000980)='./file0\x00', 0x2004404, &(0x7f0000000780)=ANY=[], 0x1, 0x1f883, &(0x7f000003fb80)="$eJzs3Qm4TVXjx/G153neV5K4SZIQUinJPGaeUskUooRQ0SDNaZBKkhRJKqmUBs2aR6VZkiRJklSSJP6Pc8/FvZe34W16/+f7eR537bPPPmutPfz25O5zv+o4vm3nZp3y8/PzhdpAFNgoihgjxoitRsGwnB0XZMsNQoj1QojuHx25/xUnjR26bZxf/qnTzpldYf4Ip+uD/uOGWBD2+GpdrRULSi3Y86stnQcMHJ4/cHj+4CEj8nvn9xkyZETvPoP65fcdOPyU6vntB/XrPbxf/sDBw/sNK/J2/0FDhg4dld97cF/PHjqs3/Dh+b0Hj8o/pd+o/BFD8kcMG5Xf+6TeAwfnV69ePd+zBX6jLrP+6R4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+PfYulVslf7pTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/nHNWrZuWkMo219LQhJ1hCQmSUIIdcd0hYNytgyFEL0yQ6UzP1sUDk22Dhq0aZG0u1LfVSekkqNqCCEGbK9fFq0yQ5LQMuO0X21nR6UFZWG7qlJRtBHNROfs6zHZvkuiwS470qBEJ4uWkVSwROYUqUf51XrM7KvCMpIKxm/dunXrrhbRX0P++5rCv5C82/x3K5Z/Jbvl/p35H7q9fll0/JPyb27PfxsxUAwTw7Lj//v9QJAp/978/rfIf24rmX/5P+Rf/p/Kf2HnC8qd899aDBEniWZioBgk+mXH7y7/hUtmR/7VXZaRGmZK8o//HSXzr2Tzv6xY/vVsFgpHhdm8FOa/xh/Mf9HzfEm0/905L6qwfkOpKLqKIWKQOF2cKvpl6h2zvR1Z9N3eojpm23wUXg+kmXdrZ5ORiqlSLLKn5lqc/XxmXMEEWr4QIl8WRaYp/p7I7itrbG9fFXF2aLgYJc4Sp4jeYlBmb1R4PrJt31d5+/SacLcv6ex6ys75mO3jS2/fW5Uuth8qeTVSSN3tO8gFaon8q9n8z9/F9b9a7Pj/Z+X/TznPtwuKnY/zDcUIMUIME01EP9E/O77ofkD5zfuBsaLkfiAz7nfuB373dUZ2vgrLSDIy5Z9znsHxP7eVPP5rmfwrBZtGseO/ttOx5NfyX67HeUXKwvGV8kW4cw9qFLmOkEST//74n6lfUqpnXrcvkreS23vxvFXN9q6wjKSCnowXQnTbNqAW7DfqbMu0EKKiaCkOFjUy8yFlF4yZXT6Vs/927mTpYsfjadk+SmqD7BIuqkWx/m1fetmysP0ou2edU3jeoBacZ5jF+lnYl4L9x+7PDJALlBL517PH//a7uP7X/8H7/7//uqDoffadrwsaiYFihDhV9BZDf/fxuOR9+4Kh/63r/kIc/3NbyeO/kc3/vF2c/xt/0fn/zjlv/UfP//MLisL6tUzOh4ghYkTm9f/ceX92fgrLKDv6z93PkP/cVjL/Zjb/I3eRf/Mfu/+v/IH7AkXtfF+gkegt+orGmXuDw0VBnoreR5O3D40pcn6+o9py2XLH+Xn5YmWBwtak7Oh/13kC+c9tJfNvZfJvFb3Zn70ytYpd///B/OcX74X0q+f/f8r/C2Ta3Xb+30n0EyeK08Uw0a9YvnfkoXDWWxRZAkIMldQi5bbamohOItKszOvxQohlYsd9gvnbr7+3TVdQWyyK3ieYk/1XMLdpdv4Lris6VJybWT6F5ZjsdOcIIVqKliWmn/bx0kaytKMs3GX13eX0ilgXKxu3TVNYimL1i53Wt5ydv5fFjvsLd+40f4XTh8Xmb1L2n8icURW0X7lwCe+m7eLT7W4ZFJ9ud/NefD7+Xfvhf0rJ63/7P/z+n/2PXf8rfyD/hT0tKHe+/u8ihorGorcYns3/rs7LC4d2nJfLuywjyc/ceiusR2gF5w/52ftwFUVLMVj0F0Oynyrc+bkD9zrlzNFLFhefb37/D3+fksd/J3v/f4xc8v6f8+cc/8Pivfibjv+Zdrflv6kYKUaIfmKw6Js5nhVc6xTktpv06/f1W0gF/7bZs2AORC/RNrv8sj9/Z/8qZXcNulJRtBN9xMmipej7zPYl9KfW30Gcnrkv0lsooky2/gGZK6z/vv5t11cdRT8xVPQWwzJ72KI4/v6blDz+u0Jkjv/5u7j/7/4F9//+6d/LKXrdL20fyo3tk+N/bit5/Pf+Q/498v//DPnPbSXz7/+H/Pvk//8Z8p/bSuY/+A/5D8j//zPkP7eVzH+Yyb8Ql4mi+Ze2f2LHdH9G/nMjZ/9W5D+3lcx/RP5zCPnPbSXzH5P/HEL+c1vJ/CfkP4eQ/9xWMv8p+c8h5D+3lcx/HvnPIeQ/t5XMf6lfzX9Bgsn//wfkP7eVzP8eHP9zCPnPbbv7/m9PDJVLPv9X+k94/q/SH3z+t232+Z8/9/mXgudZR2YWRcFzht22P8/abvtnI1Hs+Z+dngvOzy6kytnHmkr8jpFUdIZ3fo523fZ2ZbFwe7sdiky7c7vzs/9E5j5Njexyzz4fm623yIxnl8XWYnZe/2n2CcduOz2P+3vr2dXvVRWfX/bz/0a7z/+uvv97z/8n+d/+fF02h+3FjhzW2EX+E1E0h/mi5Ez8b27nHP9z2+7zP2YX+S/zJzz/+3vyv+P7f6Tt3//zVz2fOr6wPXnH9w0W7Ac6bq+j+H6gwU7fD1A2W+ZnnpLMPCs5be/MULki/fh37Sf4/s/cVvD8b5WdtoOyQhLb9geXycW//6fgWLEj9wUKcz/6g3MzudtdmZ9f8rl/+T8e90Um98W/D/DX2ile37Z2q2U+2T/79z4Kzpu35T3c6bn/db/h+3yXFX63z/a87y16ZXooxF7Zsb/ev4Iulsku221t7qp/hfuO319/MWrx+mvuvAYy87Vtn7pw+zlNwXWQmR3a9tkjs/Pdbfv7amZc6ez/FwtdFRVbd+vSsklBrTuNa76LcW3aNRFfN8z24N+xH8xVcon8753Jf8nv/9ey2+0fzv+uWv8d+f+z8zXmd34veGF9hWUk5WXKvzs352d79efkZhcrAH+rf3b7kUrkv1w2/71KfP//f5f/Xf2pmb8m/8Xs5vi3u+/7nJ9dJwUUMS87ftv5/BwhRFvRNfNzm+6ZbxEfKrpn/4pPNTEw863iJ4l+mX+DRU1xmDhU1BEHi9riEFFD1Ba1Rfed9kRFh+uL+qL7n1xr0e1LLbZ9Sdu3LzP7d4b+y+1r661Fti/8u5XMf/ls/jf+y47/v/38v6DSwj+bs63dY3eT/99z/C/2Z3hEJJXKlLvbf29rc0R2/z1++/tqZtx/u//OXHs4ujh9eL9h1Uf2HjFiWE2RLXbxXi2RLTKK5pLj/z/t33b8z8/cA5dE5V0c/7s1333+i/+9n+Ll789/wfGoeP5/rZ3CbbryvoXzU/z4f3CxdsQu9zP/fTsFgfu9+5nC+grLSNrjL9xOJPH3XGdgd/6h/G/eXf73yR7/X/6dx/8/M/9Dt7+SMt//8UdyWfidz4W5tLbnsro4MfN3QQum+L35LKy3sIyk0v/kevwv8+n98Y/iT/FvOP7XKJL/gt//y2z3u7pmL/J5/G/j//9zW8n//69A/nMI+c9tJfO/L/nPIeQ/t5XMf0Xyn0PIf24rmf/9yH8OIf85ZatRbETJ/Fci/zmE/Oe2kvnfn/znEPKf20rmvzL5zyHkP7eVzP8B5D+HkP/cVjL/Vch/DiH/ua1k/g8k/zmE/Oe27fnfHueq5D+HkP/cVuL471Yj/zmE/Ocebafhkuf/1cl/DiH/ua1k/g8i/zmE/Oe2kvmvQf5zCPnPbSXzX5P85xDyn9tK5r8W+c8h5D+3lcz/weQ/h5D/3FYy/7XJfw4h/7mtZP4PIf85hPzntpL5P5T85xDyn9tK5v+w35T/+pk9wN/YUfwlyH9uK5n/Ohz/cwj5z20l8384+c8h5D+3lcz/EeQ/h5D/3FYy/3XJfw4h/7mtZP6PJP85hPzntpL5r0f+cwj5z20l838U+c8h5D+3lcx/ffKfQ8h/bmP9AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhBEuqYNBQiPyx4nQohZCFCM/NqubFVKi8kOfNCyxdC5G8bdkpvex2WGC9SkZleKhgfb/vppAXT7jxOpOJpKdk+nbN9OmlZkXGitLhLxEXa32dH+9NKjAcAAAAAAL/ZztfqRa/bAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5qmXbJt0qC6vE+MpCiHm6EKuCgteeWCTt6vNq9ucA0TEzpBX+nGwdNGjTImm3pchWZxcUerY+U6koGooRYoQYJpqIfqJ/ZqwkzIJ3/0A7Re3cTiPRW/QVjcUgcboYnhlrZN/XRS/R/g/Nj1msHSPTzkAxQpwqeouhwsi200u0Ll6/EGLrtqX9n5dXftH6tUz9Q8QQMUIMFIOEkxnr/Mb+e+I/LKewsP9NxUgxQvQTg0VfIWfelf/AelCLbDE7r4fWYog4STTL9L9fdn2LbNlLtPpj21W2LGxHVSqKNqKZ6FzkXemPb7fF6je3199GDBTDxLDMUhLZZFl/YHsqsT7yC9dHJ9FPnChOF8NEv2x87D9Qv5xJtciu0Z231y5iqGgseovhop9QMmOVTP3an5C7bfV3FUMymTtV9NteXzfR5L9dPpntVVKqZ14XxGQfMSC7xgvrLdfjvMznd1cWrte+2Xq31VMtswb7Z7fP6uLETP8Lptgr87NsiTyP/uDcTH27K4v3Pz9fhNUynyxsp0ZmfLnMz/J/oH4pu2XsmI9ji9RfM7P+y2ffLV7/b11Olfctupx21F8r2/O/qv6Diyy/cPuWjN/O+6c7gH8U6z+3sf5zG+s/t7H+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/TUXRSXQWDUVb0UQ0FB1FE9FTtBRtRTPRTnQUbURD0Vm0FO1E27+o/XCn4QZCiBrZ4Rbb+7etB51FR9FSNBJdRGfRVPQUrUXLTL//evk7DY/ZaXhrVkXRTLQUrTO9aisaijai6d/Qqx1q7DTcSAjRpHBYLigrinaikWglmorGonNm3Tb5W/vXYDfDQirsX6dM37pk1nBncazoKZqIpqKTaJwZ0150zmyJf5X2Ow3vev12Fe1Ea9Els2b//nXca6fhbctPLnyxffkV7d/fmd1thhbrn5sdLiwrZvYr2/Yw/4wxuxm/Y/22zOz7mopuoqfoKNqJdn/LfqXQ+J2GG/xq/xqK1qK1aCca/y3rdptpOw3vOh+NMrndtrW1/4v7sitzfrV/HUVT0T5zbOuUSUh70S6zTP+etTx/N/0rXNkVRVPR8B/IbaGFxbpkZocLy4L+/XOW7fadgh1gxUwemovmomnm3KVLZtm13n4s6ZQ5d2ia2Wv/JaQdg2N29wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/6YuvW87du3br1n+4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCftS5WNgppx+tzhBCSUMe0EEJ0y45LhRCyqC3k7KuxIhZSwWe0OFOULhhXMIGWL4TIl8Wvvt6mQ8W5mbrG/I72p0ol28+M+wPtT/t4aSNZyjSa0Tfbfg0hRINvd26/bMEkSiq2SuUL28/8/C3tAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv2RdrGwU0o7X5wghJKGOaSGE6JYdlwohZFFbyNlXY0UspILPaHGmKF0wrmACLV8IkS+LX329TYeKczN1jfkd7U+VSrafGfcH2p/28dJGspRpNKNvtv0aQogGRdovWzCJkoqtUvnC9jM/f0s7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDvJwlZKEIVmtCFIUxhCVs4whWe8EUgQhGJWCQiFXmilNhDlBZ7ijJiL1FW7C3KifIiX+wjKoh9RUWxn6gk9heVxQGiijhQVBXVRHVxkKghaopa4mBRWxwiDhWHiTricHGEqCuOFPXEUaK+aCAaikaisWgimopmorloIVqKVuJo0Vq0EW1FO9FedBAdRSfRWXQRXcUxops4VhwnjhfdxQmih+gpev2hz58tzhHnitHiPDFGnC8uEBeKi8TF4hJxqbhMjBWXiyvEleIqMU5cLcaLa8S14joxQVwvJoobxCRxo5gsbhJTxM3iFjFVTBO3iuniNjFD3C5mijvEneIuMUvcLWaLe8S94j4xR9wvHhBzxYPiIfGweETME4+Kx8Tj4gnxpHhKPC3mi2fEs+I58bx4QbwoXhIvi1fEq+I18bpY4L0h3hQLxVvibfGOeFe8J94XH4hF4kOxWHwkloiPxVLxyX/6vCj5+R+LfX6kJCQhyZIsqZIq6ZIumZIp2ZItuZIr+ZIvhVIoxVIspVIqlZJKSaWl0lIZqYxUViorlZPKSflSvlRBqiBVlCpKlaRKUmWpslRFqiJVlapK1aXqUg2pplRLqiXVlmpLh0qHSnWkw6XDpbpSXameVE+qL9WXGkoNpcZSY6mp1FRqLjWXWkqtpFZSa6m11FZqK7WX2ksdpY5SZ6mz1FXqKnWTuknHScdJ3aXuUg+ph9RL6iX1kfpIfaW+Un+pvzRAGiCdLJ0sDZIGSYOlwdJQaag0TBomjZBGSGdIZ0gjpVHSKOls6WzpXOlc6TypsXy+dIF0gXSRdJF0iXSpdKk0VrpcukK6QrpKGiddLY2XrpGuka6TJkgbpInSDdIkaZJUT75JmiLdLOXLU6Vp0jRpujRdmiHNkGZKd0h3SHdJs6S7pdnSbOle6T7pPul+6QFprjRXekh6SHpEmifNkx6THpeekJ6QnpJ+lOZLz0jPSs9Jz0svSM9LL0kvSy9Jr0qvSa9KC6QF0pvSm9Jb0lvSO9I70nvSe9IH0gfSh9KH0kfSR9I4aam0VFomLZOWS8ulFdIKaaW0UlolrZJWS6ulNdIaaa20VlonfSt9J30rrZfWSxukH6WN0kZpk7RJ2ixtlrZIW7aFX95GlVVZl3XZlE3Zlm3ZlV3Zl305lEM5lmM5lVO5lFxKLi2XlsvIZeSyclm5nFxOzpf3kSvIFeSKckW5klxJrixXlqvIVeSqclW5ulxdriHXkGvJteTa8iHyofJhch35cPkIua5cV64nHyXXlxvIDeWGcmO5idxUbiY3k1vILeRWciu5tdxabiu3lYdUPbVqR/l86RKpi7xtzXSTr5aOk8dL3eUT5B5yT/k6qbfcR54g9ZX7yf3lk+QbpInSyXKfqoPkU+XB8hRpqDy46s3ScHmEPFU6Qz5THimPks+Sz5bPkftWHS2fJ8+UzpcvkO+SLpIvli+RL5XvlZrI29ZYU/kqeZx8tTxevkZ+RLpOniBfL0+Ub5AnyTfKk+Wb5CnyzfIt8lR5mnyrPF2+TZ4h3y7PlO+Q75TvkmfJd8uz5Xvke+X75Dny/fID8lz5Qfkh+WH5EXme/Kj8mPy4/IT8pPyU/LQ8X35GflZ+Tn5efkF+UX5Jfll+RX5Vfk1+XV4gvyG/KS+U35Lflt+R35Xfk9+XP5AXyR/Ki+WP5CXyx/JS+RN5mfypvFz+TF4hfy6vlL+QV8lfyqvlr+Q18tfyWvkbeZ38rfyd/L28Xv5B3iD/KG+Uf5I3yT/Lm+Vf5C3yVlkokiIriqIqmqIrhmIqlmIrjuIqnuIrgRIqkRIriZIqeUopZQ+ltLKnUkbZSymr7K2UU8or+co+SgVlX6Wisp9SSdlfqawcoFRRDlSqKtWU6spBSg2lplJLOViprRyiHKocptRRDleOUOoqRyr1lKOU+koDpaHSSGmsNFGaKs2U5koLpaXSSjlaaa20Udoq7ZT2Sgelo9JJ6ax0UboqxyjdlGOV45Tjle7KCUoPpafSS+mt9FFOVPoq/ZT+yknKAGWgcrJyijJIOVUZrAxRhipDlWHKMGWEcrpyhnKGMlIZpZyl/KJsUbYqo5XzlDHK+coFyoXKRcrFyiXKpcplyljlcuUK5UrlKmWccrUyXrlGuVa5TpmgXK9MVG5QJik3KpOVm5Qpys3KLcpUZZpyqzJduU2ZodyuzFTuUO5U7lJmKXcrl2RrmvMbPv/sLj5/Zab1N5WFylvK28o7yrvKe8r7ypvKImWRslhZrCxRlihLlaXKMmWZslxZrqxQVigrlZXKKmWVslpZraxR1ihrlbXKOuVb5Sfle2W98oOyQflR+VH5SdmkbFI2Z5eBUCVVVhVVVTVVVw3VVC3VVh3VVT3VVwM1VCM1VhM1VfPUUuoeaml1T7WMupdaVt1bLaeWV/PVfdQK6r5qRXU/tZK6v1pZPUCtoh6oVlWrqdXVg/7rz/9a/3qpvdQ+ah+1r9pX7a/2VweoA9ST1ZPVQeogdbA6WB2qDlWHqcPUEeoI9Qz1DHWkOlI9Sz1LPUc9Rx2tjlbHqGPUC9QL1YvUi9VL1EvVy9Sx6uXq5eqV6pXqOHWcOl4dr16rXqtOUCeoE9WJ6iR1kjpZnaxOUaeot6i3qNPUaep0dbo6Q52hzlRnqneqd6qz1FnqbHW2eq96rzpHnaM+oD6gPqg+qD6sPqzOU+epj6mPqU+oT6hPqU+p89Vn1GfU59Tn1BfUF9SX1JfUV9RX1NfU19QF6gJ1vrpQXai+rb6tvqu+q76vvq8uUhepi9XF6hJ1ibpUXaouU5epy9Xl6gp1hbpSXamuUlepq9XV6hp1jbpWXauuU9ep36nfqevV9eoGdYO6Ud2oblI3qZvVzeoWdcu20z5N1mRN1VRN13TN1EzN1mzN1VzN13wt1EIt1mIt1VKtlFZKK62V1spoZbSyWlmtnFZOy9fytQpaBa2itp9WSdtfq6wdoFXRDtSqatW06tpBWg2tplZLO1irrR2iHaodptXRDteO0OpqR2r1tKO0+loDraHWSGusNdGaas205loLraXWSjtaa6210dpq7bT2Wgeto9ZJ66x10bpqx2jdtGO147Tjte7aCVoPrafW60+t/1LtMm2sdrl2hXaldpU2TrtaG69do12rXadN0K7XJmo3aJO0G7XJ2k3aFO1m7RZtqjZNu1Wbrt2mzdBu12Zqd2h3andps7S7tdnaPdq92n3aHO1+7QFtrvag9pD2sPaINk97VHtMe1x7QntSe0p7WpuvPaM9qz2nPa+9oL2ovaS9rL2ivaq9pr2uLdDe0N7UFmpvaW9r72jvau9p72sfaIu0D7XF2kfaEu1jban2ibZM+1Rbrn2mrdA+11ZqX2irtC+11dpX2hrta22t9o22TvtW+077Xluv/aBt0H7UNmo/aZu0n7XN2i/aFm2rJnRJl3VFV3VN13VDN3VLt3VHd3VP9/VAD/VIj/VET/U8vZS+h15a31Mvo++ll9X31j1RXs/X99Er6PvqFfX99Er6/npl/QC9in6gXlWvplfXD9Jr6DX1WvrBem39EP1Q/TC9jn64foReVz9Sr6cfpdfXG+gN9UZ6Y72J3lRvpjfXW+gt9Vb60XprvY3eVm+nt9c76B31TnpnvYveVT9G76Yfqx+nH69310/Qe+g99V56b72PfqLeV++n99dP0gfoA/WT9VP0Qfqp+mB9iD5UP00fpg/XR+in62foZ+oj9VH6WfrZ+jn6ufpo/Tx9jH6+foF+oX6RfrF+iX6pfpk+Vr9cv0K/Ur9KH6dfrY/Xr9Gv1a/TJ+jX6xP1G/RJ+o36ZP0mfYp+s36LPlWfpt+qT9dv02fot+sz9Tv0O/W79Fn63fps/R79Xv0+fY5+v/6APld/UH9If1h/RJ+nP6o/pj+uP6E/qT+lP63P15/Rn9Wf05/XX9Bf1F/SX9Zf0V/VX9Nf1xfob+hv6gv1t/S39Xf0d/X39Pf1D/RF+of6Yv0jfYn+sb5U/0Rfpn+qL9c/01fon+sr9S/0VfqX+mr9K32N/rW+Vv9GX6d/q3+nf6+v13/QN+g/6hv1n/RN+s/6Zv0XfYu+VReGZMiGYqiGZuiGYZiGZdiGY7iGZ/hGYIRGZMRGYqRGnlHK2MMobexplDH2MsoaexvljPJGvrGPUcHY16ho7GdUMvY3KhsHGFWMA42qRjWjunGQUcOoadQyDjZqG4cYhxqHGXWMw40jjLrGkUY94yijvtHAaGg0MhobTYymRjOjudHCaGm0Mo42WhttjLZGO6O90cHoaHQyOhtdjK7GMUY341jjOON4o7txgtHD6Gn0MnobfYwTjb5GP6O/cZIxwBhonGycYgwyTjUGG0OMocZpxjBjuDHCON04wzjTGGmMMs4yzjbOMc41RhvnGWOM840LjAuNi4yLjUuMS43LjLHG5cYVxpXGVcY442pjvHGNca1xnTHBuN6YaNxgTDJuNCYbNxlTjJuNW4ypxjTjVmO6cZsxw7jdmGncYdxp3GXMMu42Zhv3GPca9xlzjPuNB4y5xoPGQ8bDxiPGPONR4zHjceMJ40njKeNpY77xjPGs8ZzxvPGC8aLxkvGy8YrxqvGa8bqxwHjDeNNYaLxlvG28Y7xrvGe8b3xgLDI+NBYbHxlLjI+NpcYnxjLjU2O58ZmxwvjcWGl8YawyvjRWG18Za4yvjbXGN8Y641vjO+N7Y73xg7HB+NHYaPxkbDJ+NjYbvxhbjK2GMCVTNhVTNTVTNw3TNC3TNh3TNT3TNwMzNCMzNhMzNfPMUuYeZmlzT7OMuZdZ1tzbLGeWN/PNfcwK5r5mRXM/s5K5v1nZPMCsYh5oVjWrmdXNg8waZk2zlnmwWds8xDzUPMysYx5uHmHWNY8065lHmfXNBmZDs5HZ2GxiNjWbmc3NFmZLs5V5tNnabGO2NduZ7c0OZkezk9nZ7GJ2NY8xu5nHmseZx5vdzRPMHmZPs5fZ2+xjnmj2NfuZ/c2TzAHmQPNk8xRzkHmqOdgcYg41TzOHmcPNEebp5hnmmeZIc5R5lnm2eY55rjnaPM8cY55vXmBeaF5kXmxeYl5qXmaONS83rzCvNK8yx5lXm+PNa8xrzevMCeb15kTzBnOSeaM52bzJnGLebN5iTjWnmbea083bzBnm7eZM8w7zTvMuc5Z5tznbvMe817zPnGPebz5gzjUfNB8yHzYfMeeZj5qPmY+bT5hPmk+ZT5vzzWfMZ83nzOfNF8wXzZfMl81XzFfN18zXzQXmG+ab5kLzLfNt8x3zXfM9833zA3OR+aG52PzIXGJ+bC41PzGXmZ+ay83PzBXm5+ZK8wtzlfmludr8ylxjfm2uNb8x15nfmt+Z35vrzR/MDeaP5kbzJ3OT+bO52fzF3GJuNYUlWbKlWKqlWbplWKZlWbblWK7lWb4VWKEVWbGVWKmVZ5Wy9rBKW3taZay9rLLW3lY5q7yVb+1jVbD2tSpa+1mVrP2tytYBVhXrQKuqVc2qbh1k1bBqWrWsg63a1iHWodZhVh3rcOsIq651pFXPOsqqbzWwGlqNrMZWE6up1cxqbrWwWlqtrKOt1lYbq63VzmpvdbA6Wp2szlYXq6t1jNXNOtY6zjre6m6dYPWwelq9rN5WH+tEq6/Vz+pvnWQNsAZaJ1unWIOsU63B1hBrqHWaNcwabo2wTrfOsM60RlqjrLOss61zrHOt0dZ51hjrfOsC60LrIuti6xLrUusya6x1uXWFdaV1lTXOutoab11jXWtdZ02wrrcmWjdYk6wbrcnWTdYU62brFmuqNc261Zpu3WbNsG63Zlp3WHdad1mzrLut2dY91r3WfdYc637rAWuu9aD1kPWw9Yg1z3rUesx63HrCetJ6ynramm89Yz1rPWc9b71gvWi9ZL1svWK9ar1mvW4tsN6w3rQWWm9Zb1vvWO9a71nvWx9Yi6wPrcXWR9YS62NrqfWJtcz61FpufWatsD63VlpfWKusL63V1lfWGutra631jbXO+tb6zvreWm/9YG2wfrQ2Wj9Zm6yfrc3WL9YWa6slbMmWbcVWbc3WbcM2bcu2bcd2bc/27cAO7ciO7cRO7Ty7lL2HXdre0y5j72WXtfe2y9nl7Xx7H7uCva9d0d7PrmTvb1e2D7Cr2AfaVe1qdnX7ILuGXdOuZR9s17YPsQ+1D7Pr2IfbR9h17SPtevZRdn27gd3QbmQ3tpvYTe1mdnO7hd3SbmUfbbe229ht7XZ2e7uD3dHuZHe2u9hd7WPsbvax9nH28XZ3+wS7h93T7mX3tvvYJ9p97X52f/ske4A90D7ZPsUeZJ9qD7aH2EPt0+xh9nB7hH26fYZ9pj3SHmWfZZ9tn2Ofa4+2z7PH2OfbF9gX2hfZF9uX2Jfal9lj7cvtK+wr7avscfbV9nj7Gvta+zp7gn29PdG+wZ5k32hPtm+yp9g327fYU+1p9q32dPs2e4Z9uz3TvsO+077LnmXfbc+277Hvte+z59j32w/Yc+0H7Yfsh+1H7Hn2o/Zj9uP2E/aT9lP20/Z8+xn7Wfs5+3n7BftF+yX7ZfsV+1X7Nft1e4H9hv2mvdB+y37bfsd+137Pft/+wF5kf2gvtj+yl9gf20vtT+xl9qf2cvsze4X9ub3S/sJeZX9pr7a/stfYX9tr7W/sdfa39nf29/Z6+wd7g/2jvdH+yd5k/2xvtn+xt9hbbeFIjuwojupoju4YjulYju04jut4ju8ETuhETuwkTurkOaWcPZzSzp5OGWcvp6yzt1POKe/kO/s4FZx9nYrOfk4lZ3+nsnOAU8U50KnqVHOqOwc5NZyaTi3nYKe2c4hzqHOYU8c53DnCqesc6dRzjnLqOw2chk4jp7HTxGnqNHOaOy2clk4r52intdPGaeu0c9o7HZyOTiens9PF6eoc43RzjnWOc453ujsnOD2cnk4vp7fTxznR6ev0c/o7JzkDnIHOyc4pziDnVGewM8QZ6pzmDHOGOyOc050znDOdkc4o5yznbOcc51xntHOeM8Y537nAudC5yLnYucS51LnMGetc7lzhXOlc5YxzrnbGO9c41zrXOROc652Jzg3OJOdGZ7JzkzPFudm5xZnqTHNudaY7tzkznNudmc4dzp3OXc4s525ntnOPc69znzPHud95wJnrPOg85DzsPOLMcx51HnMed55wnnSecp525jvPOM86zznPOy84LzovOS87rzivOq85rzsLnDecN52FzlvO2847zrvOe877zgfOIudDZ7HzkbPE+dhZ6nziLHM+dZY7nzkrnM+dlc4XzirnS2e185WzxvnaWet846xzvnW+c7531js/OBucH52Nzk/OJudnZ7Pzi7PF2eoIV3JlV3FVV3N113BN13Jt13Fd13N9N3BDN3JjN3FTN88t5e7hlnb3dMu4e7ll3b3dcm55N9/dx63g7utWdPdzK7n7u5XdA9wq7oFuVbeaW909yK3h1nRruQe7td1D3EPdw9w67uHuEW5d90i3nnuUW99t4DZ0G7mN3SZuU7eZ29xt4bZ0W7lHu63dNm5bt53b3u3gdnQ7uZ3dLm5X9xi3m3use5x7vNvdPcHt4fZ0e7m93T7uiW5ft5/b3z3JHeAOdE92T3EHuae6g90h7lD3NHeYO9wd4Z7unuGe6Y50R7lnuWe757jnuqPd89wx7vnuBe6F7kXuxe4l7qXuZe5Y93L3CvdK9yp3nHu1O969xr3Wvc6d4F7vTnRvcCe5N7qT3ZvcKe7N7i3uVHeae6s73b3NneHe7s5073DvdO9yZ7l3u7Pde9x73fvcOe797gPuXPdB9yH3YfcRd577qPuY+7j7hPuk+5T7tDvffcZ91n3Ofd59wX3Rfcl92X3FfdV9zX3dXeC+4b7pLnTfct9233Hfdd9z33c/cBe5H7qL3Y/cJe7H7lL3E3eZ+6m73P3MXeF+7q50v3BXuV+6q92v3DXu1+5a9xt3nfut+537vbve/cHd4P7obnR/cje5P7ub3V/cLe5WV3iSJ3uKp3qap3uGZ3qWZ3uO53qe53uBF3qRF3uJl3p5XilvD6+0t6dXxtvLK+vt7ZXzynv53j5eBW9fr6K3n1fJ29+r7B3gVfEO9Kp61bzq3kFeDa+mV8s72KvtHeId6h3m1fEO947w6npHevW8o7z6XgOvodfIa+w18Zp6zbzmXguvpdfKO9pr7bXx2nrtvPZeB6+j18nr7HXxunrHeN28Y73jvOO97t4JXg+vp9fL6+318U70+nr9vP7eSd4Ab6B3sneKN8g71RvsDfGGeqd5w7zh3gjvdO8M70xvpDfKO8s72zvHO9cb7Z3njfHO9y7wLvQu8i72LvEu9S7zxnqXe1d4V3pXeeO8q73x3jXetd513gTvem+id4M3ybvRm+zd5E3xbvZu8aZ607xbvenebd4M73ZvpneHd6d3lzfLu9ub7d3j3evd583x7vce8OZ6D3oPeQ97j3jzvEe9x7zHvSe8J72nvKe9+d4z3rPec97z3gvei95L3sveK96r3mve694C7w3vTW+h95b3tveO9673nve+94G3yPvQW+x95C3xPvaWep94y7xPveXeZ94K73NvpfeFt8r70lvtfeWt8b721nrfeOu8b73vvO+99d4P3gbvR2+j95O3yfvZ2+z94m3xtnrCl3zZV3zV13zdN3zTt3zbd3zX93zfD/zQj/zYT/zUz/NL+Xv4pf09/TL+Xn5Zf2+/nF/ez/f38Sv4+/oV/f38Sv7+fmX/AL+Kf6Bf1a/mV/cP8mv4Nf1a/sF+bf8Q/1D/ML+Of7h/hF/XP9Kv5x/l1/cb+A39Rn5jv4nf1G/mN/db+C39Vv7Rfmu/jd/Wb+e39zv4Hf1Ofme/i9/VP8bv5h/rH+cf73f3T/B7+D39Xn5vv49/ot/X7+f390/yB/gD/ZP9U/xB/qn+YH+IP9Q/zR/mD/dH+Kf7Z/hn+iP9Uf5Z/tn+Of65/mj/PH+Mf75/gX+hf5F/sX+Jf6l/mT/Wv9y/wr/Sv8of51/tj/ev8a/1r/Mn+Nf7E/0b/En+jf5k/yZ/in+zf4s/1Z/m3+pP92/zZ/i3+zP9O/w7/bv8Wf7d/mz/Hv9e/z5/jn+//4A/13/Qf8h/2H/En+c/6j/mP+4/4T/pP+U/7c/3n/Gf9Z/zn/df8F/0X/Jf9l/xX/Vf81/3F/hv+G/6C/23/Lf9d/x3/ff89/0P/EX+h/5i/yN/if+xv9T/xF/mf+ov9z/zV/if+yv9L/xV/pf+av8rf43/tb/W/8Zf53/rf+d/76/3f/A3+D/6G/2f/E3+z/5m/xd/i7/VF4EUyIESqIEW6IERmIEV2IETuIEX+EEQhEEUxEESpEFeUCrYIygd7BmUCfYKygZ7B+WC8kF+sE9QIdg3qBjsF1QK9g8qBwcEVYIDg6pBtaB6cFBQI6gZ1AoODmoHhwSHBocFdYLDgyOCusGRQb3gqKB+0CBoGDQKGgdNgqZBs6B50CJoGbQKjg5aB22CtkG7oH3QIegYdAo6B12CrsExQbfg2OC44Pige3BC0CPoGfQKegd9ghODvkG/oH9wUjAgGBicHJwSDApODQYHQ4KhwWnBsGB4MCI4PTgjODMYGYwKhBBjhBBidHBeMCY4P7gguDC4KLg4uCS4NLgsGBtcHlwRXBlcFYwLrg7GB9cE1wbXBROC64OJwQ3BpODGYHJwUzAluDm4JZgaTAtuDaYHtwUzgtuDmcEdwZ3BXcGs4O5gdnBPcG9wXzAnuD94IJgbPBg8FDwcPBLMCx4NHgseD54IngyeCp4O5gfPBM8GzwXPBy8ELwYvBS8HrwSvBq8FrwcLgjeCN4OFwVvB28E7wbvBe8H7wQfBouDDYHHwUbAk+DhYGnwSLAs+DZYHnwUrgs+DlcEXwargy2B18FWwJvg6WBt8E6wLvg2+C74P1gc/BBuCH4ONwU/BpuDnYHPwS7Al2BqIUArlUAnVUAv10AjN0Art0And0Av9MAjDMArjMAnTMC8sFe4Rlg73DMuEe4Vlw73DcmH5MD/cJ6wQ7htWDPcLK4X7h5XDA8Iq4YFh1bBaWD08KKwR1gxrhQeHtcNDwkPDw8I64eHhEWHd8MiwXnhUWD9sEDYMG4WNwyZh07BZ2DxsEbYMW4VHh63DNmHbsF3YPuwQdgw7hZ3DLmHX8JiwW3hseFx4fNg9PCHsEfYMe4W9wz7hiWHfsF/YPzwpHBAODE8OTwkHhaeGg8Mh4dDwtHBYODwcEZ4enhGeGY4MR4VnhWeH54TnhqPD88Ix4fnhBeGF4UXhxeEl4aXhZeHY8PLwivDK8KpwXHh1OD68Jrw2vC6cEF4fTgxvCCeFN4aTw5vCKeHN4S3h1HBaeGs4PbwtnBHeHs4M7wjvDO8KZ4V3h7PDe8J7w/vCOeH94QPh3PDB8KHw4fCRcF74aPhY+Hj4RPhk+FT4dDg/fCZ8NnwufD58IXwxfCl8OXwlfDV8LXw9XBC+Eb4ZLgzfCt8O3wnfDd8L3w8/CBeFH4aLw4/CJeHH4dLwk3BZ+Gm4PPwsXBF+Hq4MvwhXhV+Gq8OvwjXh1+Ha8JtwXfht+F34fbg+/CHcEP4Ybgx/CjeFP4ebw1/CLeHWUERSJEdKpEZapEdGZEZWZEdO5EZe5EdBFEZRFEdJlEZ5Ualoj6h0tGdUJtorKhvtHZWLykf50T5RhWjfqGK0X1Qp2j+qHB0QVYkOjKpG1aLq0UFRjahmVCs6OKodHRIdGh0W1YkOj46I6kZHRvWio6L6UYOoYdQoahw1iZpGzaLmUYuoZdQqOjpqHbWJ2kbtovZRh6hj1CnqHHWJukbHRN2iY6PjouOj7tEJUY+oZ9Qr6h31iU6M+kb9ov7RSdGAaGB0cnRKNCg6NRocDYmGRqdFw6Lh0Yjo9OiM6MxoZDQqOis6OzonOjcaHZ0XjYnOjy6ILowuii6OLokujS6LxkaXR1dEV0ZXReOiq6Px0TXRtdF10YTo+mhidEM0KboxmhzdFE2Jbo5uiaZG06Jbo+nRbdGM6PZoZnRHdGd0VzQrujuaHd0T3RvdF82J7o8eiOZGD0YPRQ9Hj0Tzokejx6LHoyeiJ6Onoqej+dEz0bPRc9Hz0QvRi9FL0cvRK9Gr0WvR69GC6I3ozWhh9Fb0dvRO9G70XvR+9EG0KPowWhx9FC2JPo6WRp9Ey6JPo+XRZ9GK6PNoZfRFtCr6MlodfRWtib6O1kbfROuib6Pvou+j9dEP0Ybox2hj9FO0Kfo52hz9Em2JtkYilmI5VmI11mI9NmIztmI7dmI39mI/DuIwjuI4TuI0zotLxXvEpeM94zLxXnHZeO+4XFw+zo/3iSvE+8YV4/3iSvH+ceX4gLhKfGBcNa4WV48PimvENeNa8cFx7fiQ+ND4sLhOfHh8RFw3PjKuFx8V148bxA3jRnHjuEncNG4WN49bxC3jVvHRceu4Tdw2bhe3jzvEHeNOcee4S9w1PibuFh8bHxcfH3ePT4h7xD3jXnHvuE98Ytw37hf3j0+KB8QD45PjU+JB8anx4HhIPDQ+LR4WD49HxKfHZ8RnxiPjUfFZ8dnxOfG58ej4vHhMfH58QXxhfFF8cXxJfGl8WTw2vjy+Ir4yvioeF18dj4+via+Nr4snxNfHE+Mb4knxjfHk+KZ4SnxzfEs8NZ4W3xpPj2+LZ8S3xzPjO+I747viWfHd8ez4nvje+L54Tnx//EA8N34wfih+OH4knhc/Gj8WPx4/ET8ZPxU/Hc+Pn4mfjZ+Ln49fiF+MX4pfjl+JX41fi1+PF8RvxG/GC+O34rfjd+J34/fi9+MP4kXxh/Hi+KN4SfxxvDT+JF4Wfxovjz+LV8SfxyvjL+JV8Zfx6vireE38dbw2/iZeF38bfxd/H6+Pf4g3xD/GG+Of4k3xz/Hm+Jd4S7w1FomUyImSqImW6ImRmImV2ImTuImX+EmQhEmUxEmSpEleUirZIymd7JmUSfZKyiZ7J+WS8kl+sk9SIdk3qZjsl1RK9k8qJwckVZIDk6pJtaR6clBSI6mZ1EoOTmonhySHJocldZLDkyOSusmRSb3kqKR+0iBpmDRKGidNkqZJs6R50iJpmbRKjk5aJ22Stkm7pH3SIemYdEo6J12SrskxSbfk2OS45Pike3JC0iPpmfRKeid9khOTvkm/pH9yUjIgGZicnJySDEpOTQYnQ5KhyWnJsGR4MiI5PTkjOTMZmYxKzkrOTs5Jzk1GJ+clY5LzkwuSC5OLkouTS5JLk8uSscnlyRXJlclVybjk6mR8ck1ybXJdMiG5PpmY3JBMSm5MJic3JVOSm5NbkqnJtOTWZHpyWzIjuT2ZmdyR3JnclcxK7k5mJ/ck9yb3JXOS+5MHkrnJg8lDycPJI8m85NHkseTx5InkyeSp5OlkfvJM8mzyXPJ88kLyYvJS8nLySvJq8lryerIgeSN5M1mYvJW8nbyTvJu8l7yffJAsSj5MFicfJUuSj5OlySfJsuTTZHnyWbIi+TxZmXyRrEq+TFYnXyVrkq+Ttck3ybrk2+S75PtkffJDsiH5MdmY/JRsSn5ONie/JFuSrYlIpVROlVRNtVRPjdRMrdROndRNvdRPgzRMozROkzRN89JS6R5p6XTPtEy6V1o23Tstl5ZP89N90grpvmnFdL+0Urp/Wjk9IK2SHphWTaul1dOD0hppzbRWenBaOz0kPTQ9LK2THp4ekdZNj0zrpUel9dMGacO0Udo4bZI2TZulzdMWacu0VXp02jptk7ZN26Xt0w5px7RT2jntknZNj0m7pcemx6XHp93TE9Ieac+0V9o77ZOemPZN+6X905PSAenA9OT0lHRQemo6OB2SDk1PS4elw9MR6enpGemZ6ch0VHpWenZ6TnpuOjo9Lx2Tnp9ekF6YXpRenG7N/kbk5ekV6ZXpVem49Op0fHpNem16XTohvT6dmN6QTkpvTCenN6VT0pvTW9Kp6bT01nR6els6I709nZnekd6Z3pXOSu9OZ6f3pPem96Vz0vvTB9K56YPpQ+nD6SPpvPTR9LH08fSJ9Mn0qfTpdH76TPps+lz6fPpC+mL6Uvpy+kr6avpa+nq6IH0jfTNdmL6Vvp2+k76bvpe+n36QLko/TBenH6VL0o/Tpekn6bL003R5+lm6Iv08XZl+ka5Kv0xXp1+la9Kv07XpN+m69Nv0u/T7dH36Q7oh/THdmP6Ubkp/Tjenv6Rb0q2pyJPy5DwlT83T8vQ8I8/Ms/LsPCfPzfPy/LwgL8yL8uK8JC/Ny8srlbdHXum8PfPK5O2VVzZv77xyeeXz8vP2yauQt29exbz98irl7Z9XOe+AvCp5B+ZVzauWVz3voLwa/0e7PTaJEbUNnJ/YTtv26e7T3RPbtm3btm3btif2ZDKxbU3sZJJs3U9tbdWz94ut2to973516py6/h/gQnwEIgESIhESi+RB8iL5kPxIAaQgUggpjBRBiiLFkOJICaQkUgopjZRByiLlkPJIBaQiUgmpjFRBqiLVkOpIDaQmUgupjdRB6iL1kPpIA6Qh0ghpjDRBmiLNkOZIC6Ql0gppjbRB2iLtkPZIB6Qj0gnpjHRBuiLdkO5ID6Qn0gvpjfRB+iL9kP7IAGQgMggZjAxBhiLDkOHICGQkMgoZjYxBxiLjkPHIBGQiMgmZjExBpiLTkOnIDGQmMguZjcxB5iLzkPnIAmQhsghZjCxBliLLkOXICmQlsgpZjaxB1iLrkPXIBmQjsgnZjGxBtiLbkO3IDmQnsgvZjexB9iL7kP3IASQOOYgcQg4jR5CjyDHkOHICOYmcQk4jZ5CzSDxyDklAziOJyAXkInIJuYxcQa4i15DryA3kJnILuY3cQe4i95D7yAPkIfIIeYw8QZ4iz5DnyAvkJfIKeY28QZKQt8g75D3yAfmIfEI+I1+Qr8g35DvyA/mJ/EJ+I8nIH+Qv8g+JQVOgKdFUaGo0DZoWTYemRzOgGdFMaGY0C5oVzYZmR3OgOdFcaG4UQVEUQ3GUQEmUQmmUQVmUQ3lUQEVUQmVUQVVUQ3XUQE3UQm3UQQHqoh7qoxAN0BCN0Fg0D5oXzYfmRwugBdFCaGG0CFoULYYWR0ugJdFSaGm0DFoWLYeWRyugFdFKaGW0CloVrYZWR2ugNdFaaG20DloXrYfWRxugDdFGaGO0CdoUbYY2R1ugLdFWaGu0DdoWbYe2RzugHdFOaGe0C9oV7YZ2R3ugPdFeaG+0D9oX7Yf2RwegA9FB6GB0CDoUHYYOR0egI9FR6Gh0DDoWHYeORyegE9FJ6GR0CjoVnYZOR2egM9FZ6Gx0DjoXnYfORxegC9FF6GJ0CboUXYYuR1egK9FV6Gp0DboWXYeuRzegG9FN6GZ0C7oV3YZuR3egO9Fd6G50D7oX3YfuRw+gcehB9BB6GD2CHkWPocfRE+hJ9BR6Gj2DnkXj0XNoAnoeTUQvoBfRS+hl9Ap6Fb2GXkdvoDfRW+ht9A56F72H3kcfoA/RR+hj9An6FH2GPkdfoC/RV+hr9A2ahL5F36Hv0Q/oR/QT+hn9gn5Fv6Hf0R/oT/QX+htNRv+gf9F/aAyWAkuJpcJSY2mwtFg6LD2WAcuIZcIyY1mwrFg2LDuWA8uJ5cJyYwiGYhiGYwRGYhRGYwzGYhzGYwImYhImYwqmYhqmYwZmYhZmYw4GMBfzMB+DWICFWITFYnmwvFg+LD9WACuIFcIKY0WwolgxrDhWAiuJlcJKY2Wwslg5rDxWAauIVcIqY1Wwqlg1rDpWA6uJ1cJqY3Wwulg9rD7WAGuINcIaY02wplgzrDnWAmuJtcJaY22wtlg7rD3WAeuIdcI6Y12wrlg3rDvWA+uJ9cJ6Y32wvlg/rD82ABuIDcIGY0OwoVj6mOHYCGwkNgobjY3BxmLjsPHYBGwiNgmbjE3BpmLTsOnYDGwmNgubjc3B5mLzsPnYAmwhtghbjC3BlmLLsOXYCmwltgpbja3B1mLrsPXYBmwjtgnbjG3BtmLbsO3YDmwntgvbje3B9mL7sP3YASwOO4gdwg5jR7Cj2DHsOHYCO4mdwk5jZ7CzWDx2DkvAzmOJ2AXsInYJu4xdwa5i17Dr2A3sJnYLu43dwe5i97D72APsIfYIe4w9wZ5iz7Dn2AvsJfYKe429wZKwt9g77D32AfuIfcI+Y1+wr9g37Dv2A/uJ/cJ+Y8nYH+wv9g+LwVPgKfFUeGo8DZ4WT4enxzPgGfFMeGY8C54Vz4Znx3PgOfFceG4cwVEcw3GcwEmcwmmcwVmcw3lcwEVcwmVcwVVcw3XcwE3cwm3cwQHu4h7u4xAP8BCP8Fg8D54Xz4fnxwvgBfFCeGG8CF4UL4YXx0vgJfFSeGm8DF4WL4eXxyvgFfFKeGW8Cl4Vr4ZXx2vgNfFaeG28Dl4Xr4fXxxvgDfFGeGO8Cd4Ub4Y3x1vgLfFWeGu8Dd4Wb4e3xzvgHfFOeGe8C94V74Z3x3vgPfFeeG+8D94X74f3xwfgA/FB+GB8CD4UH4YPx0fgI/FR+Gh8DD4WH4ePxyfgE/FJ+GR8Cj4Vn4ZPx2fgM/FZ+Gx8Dj4Xn4fPxxfgC/FF+GJ8Cb4UX4Yvx1fgK/FV+Gp8Db4WX4evxzfgG/FN+GZ8C74V34Zvx3fgO/Fd+G58D74X34fvxw/gcfhB/BB+GD+CH8WP4cfxE/hJ/BR+Gj+Dn8Xj8XN4An4eT8Qv4BfxS/hl/Ap+Fb+GX8dv4DfxW/ht/A5+F7+H38cf4A/xR/hj/An+FH+GP8df4C/xV/hr/A2ehL/F3+Hv8Q/4R/wT/hn/gn/Fv+Hf8R/4T/wX/htPxv/gf/F/eAyRgkhJpCJSE2mItEQ6Ij2RgchIZCIyE1mIrEQ2IjuRg8hJ5CJyEwiBEhiBEwRBEhRBEwzBEhzBEwIhEhIhEwqhEhqhEwZhEhZhEw4BCJfwCJ+ARECERETEEnmIvEQ+Ij9RgChIFCIKE0WIokQxojhRgihJlCJKE2WIskQ5ojxRgahIVCIqE1WIqkQ1ojpRg6hJ1CJqE3WIukQ9oj7RgGhINCIaE02IpkQzojnRgmhJtCJaE22ItkQ7oj3RgehIdCI6E12IrkQ3ojvRg+hJ9CJ6E32IvkQ/oj8xgBhIDCIGE0OIocQwYjgxghhJjCJGE2OIscQ4YjwxgZhITCImE1OIqcQ0Yjoxg5hJzCJmE3OIucQ8Yj6xgFhILCIWE0uIpcQyYjmxglhJrCJWE2uItcQ6Yj2xgdhIbCI2E1uIrcQ2Yjuxg9hJ7CJ2E3uIvcQ+Yj9xgIgjDhKHiMPEEeIocYw4TpwgThKniNPEGeIsEU+cIxKI80QicYG4SFwiLhNXiKvENeI6cYO4SdwibhN3iLvEPeI+8YB4SDwiHhNPiKfEM+I58YJ4SbwiXhNviCTiLfGOeE98ID4Sn4jPxBfiK/GN+E78IH4Sv4jfRDLxh/hL/CNiyBRkSjIVmZpMQ6Yl05HpyQxkRjITmZnMQmYls5HZyRxkTjIXmZtESJTESJwkSJKkSJpkSJbkSJ4USJGUSJlUSJXUSJ00SJO0SJt0SEC6pEf6JCQDMiQjMpbMQ+Yl85H5yQJkQbIQWZgsQhYli5HFyRJkSbIUWZosQ5Yly5HlyQpkRbISWZmsQlYlq5HVyRpkTbIWWZusQ9Yl65H1yQZkQ7IR2ZhsQjYlm5HNyRZkS7IV2ZpsQ7Yl25HtyQ5kR7IT2ZnsQnYlu5HdyR5kT7IX2ZvsQ/Yl+5H9yQHkQHIQOZgcQg4lh5HDyRHkSHIUOZocQ44lx5HjyQnkRHISOZmcQk4lp5HTyRnkTHIWOZucQ84l55HzyQXkQnIRuZhcQi4ll5HLyRXkSnIVuZpcQ64l15HryQ3kRnITuZncQm4lt5HbyR3kTnIXuZvcQ+4l95H7yQNkHHmQPEQeJo+QR8lj5HHyBHmSPEWeJs+QZ8l48hyZQJ4nE8kL5EXyEnmZvEJeJa+R18kb5E3yFnmbvEPeJe+R98kH5EPyEfmYfEI+JZ+Rz8kX5EvyFfmafEMmkW/Jd+R78gP5kfxEfia/kF/Jb+R38gf5k/xF/iaTyT/kX/IfGUOloFJSqajUVBoqLZWOSk9loDJSmajMVBYqK5WNyk7loHJSuajcFEKhFEbhFEGRFEXRFEOxFEfxlECJlETJlEKplEbplEGZlEXZlEMByqU8yqcgFVAhFVGxVB4qL5WPyk8VoApShajCVBGqKFWMKk6VoEpSpajSVBmqLFWOKk9VoCpSlajKVBWqKlWNqk7VoGpStajaVB2qLlWPqk81oBpSjajGVBOqKdWMak61oFpSrajWVBuqLdWOak91oDpSnajOVBeqK9WN6k71oHpSvajeVB+qL9WP6k8NoAZSg6jB1BBqKDWMGk6NoEZSo6jR1BhqLDWOGk9NoCZSk6jJ1BRqKjWNmk7NoGZSs6jZ1BxqLjWPmk8toBZSi6jF1BJqKbWMWk6toFZSq6jV1BpqLbWOWk9toDZSm6jN1BZqK7WN2k7toHZSu6jd1B5qL7WP2k8doOKog9Qh6jB1hDpKHaOOUyeok9Qp6jR1hjpLxVPnqATqPJVIXaAuUpeoy9QV6ip1jbpO3aBuUreo29Qd6i51j7pPPaAeUo+ox9QT6in1jHpOvaBeUq+o19QbKol6S72j3lMfqI/UJ+oz9YX6Sn2jvlM/qJ/UL+o3lUz9of5S/6gYOgWdkk5Fp6bT0GnpdHR6OgOdkc5EZ6az0FnpbHR2Ogedk85F56YRGqUxGqcJmqQpmqYZmqU5mqcFWqQlWqYVWqU1WqcN2qQt2qYdGtAu7dE+DemADumIjqXz0HnpfHR+ugBdkC5EF6aL0EXpYnRxugRdki5Fl6bL0GXpcnR5ugJdka5EV6ar0FXpanR1ugZdk65F16br0HXpenR9ugHdkG5EN6ab0E3pZnRzugXdkm5Ft6bb0G3pdnR7ugPdke5Ed6a70F3pbnR3ugfdk+5F96b70H3pfnR/egA9kB5ED6aH0EPpYfRwegQ9kh5Fj6bH0GPpcfR4egI9kZ5ET6an0FPpafR0egY9k55Fz6bn0HPpefR8egG9kF5EL6aX0EvpZfRyegW9kl5Fr6bX0GvpdfR6egO9kd5Eb6a30FvpbfR2ege9k95F76b30HvpffR++gAdRx+kD9GH6SP0UfoYfZw+QZ+kT9Gn6TP0WTqePkcn0OfpRPoCfZG+RF+mr9BX6Wv0dfoGfZO+Rd+m79B36Xv0ffoB/ZB+RD+mn9BP6Wf0c/oF/ZJ+Rb+m39BJ9Fv6Hf2e/kB/pD/Rn+kv9Ff6G/2d/kH/pH/Rv+lk+g/9l/5HxzApmJRMKiY1k4ZJy6Rj0jMZmIxMJiYzk4XJymRjsjM5mJxMLiY3gzAogzE4QzAkQzE0wzAswzE8IzAiIzEyozAqozE6YzAmYzE24zCAcRmP8RnIBEzIREwsk4fJy+Rj8jMFmIJMIaYwU4QpyhRjijMlmJJMKaY0U4Ypy5RjyjMVmIpMJaYyU4WpylRjqjM1mJpMLaY2U4epy9Rj6jMNmIZMI6Yx04RpyjRjmjMtmJZMK6Y104Zpy7Rj2jMdmI5MJ6Yz04XpynRjujM9mJ5ML6Y304fpywxa058ZwAxkWtiDmSHMUGYYM5wZwYxkRjGjmTHMWGYcM56ZwExkJjGTmSnMVGYaM52ZwcxkZjGzmTnMXGYeM59ZwCxkFjGLmSXMUmYZs5xZwaxkVjGrmTXMWmYds57ZwGxkNjGbmS3MVmYbs53ZwexkdjG7mT3MXmYfs585wMQxB5lDzGHmCHOUOcYcZ04wJ5lTzGnmDHOWiWfOMQnMeSaRucBcZC4xl5krzFXmGnOducHcZG4xt5k7zF3mHnOfecA8ZB4xj5knzFPmGfOcecG8ZF4xr5k3TBLzlnnHvGc+MB+ZT8xn5gvzlfnGfGd+MD+ZX8xvJpn5w/xl/jExbAybkk3JpmZTs2nZtGx6Nj2bkc3IZmYzs1nZrGx2Njubk83J5mZzsyiLsjiLsyRLsjRLs/85PMuzIiuyMiuzKquyOquzJmuyNmuzgAWsx3osZCEbsiEby8ayedm8bH42P1uQLcgWZguzRdmibHG2OFuSLcmWZkuzZdmybHm2PFuRrchWZiuzVdmqbHW2OluTrcnWZmuzddm6bH22PtuQbcg2ZhuzTdmmbHO2OduSbcm2Zluzbdm2bHu2PduR7ch2ZjuzXdmubHe2O9uT7cn2Znuzfdm+bH+2PzuQHcgOZgezQ9mh7HB2ODuSHcmOZkezY9mx7Hh2PDuRnchOZiezU9mp7HR2OjuTncnOZuewc9l57Hx2AbuQXcQuZpewS9ml7HJ2ObuSXcmuZleza9m17Hp2PbuR3chuZjezW9mt7HZ2O7uT3cnuZneze9m97H52PxvHxrGH2EPsEfYIe4w9xp5gT7Cn2FPsGfYMG8/GswlsApvIJrIX2YvsZfYye5W9yl5nr7M32ZvsbfY2e5e9y95n77MP2YfsY/Yx+5R9yj5nn7Mv2Zfsa/Y1m8Qmse/Yd+wH9gP7if3EfmG/sN/Yb+wP9gf7i/3FJrPJ7F/2L5uey8Bl5DJxmbksXFYuG/d/N84RHMlRHM0xHMph/8ssx3E6Z3AmZ3E253CAc//Lebl8XH6uAFeQK8QV5or8l8ty5bjyXAWuIleJK82V+V+uzFXhqnL1uOpcA64m14irzTXh6nL1uPpcA64h14hrzDXh2nLtuPZcB64j14nrzHX5L+/nDnBnuLNcPHeOu83d4X5wP7nX3BvuF/ebG8wN4cZy47jx3ARuIjeJm8xN+S/P5eZx87kF3EJuEbeYW/JfXsut49ZzG7iN3CZuM7flv7yX28dt5+K4ndwubje353/8n5niuIPcIe4wd4Q7yh3jErgT3EnuFHf6/5o1gTvPJXIXuJvcLe4yd4W7yl3jrnM3/sf/6bjL3ePucw+4l9wr7jH3hHvKJXHPuRf/4//0JXFvuXfce+4D95H7xCVzX7iv3Dfu+//0/6c9mfvD/eX+cTF8Cj4ln4pPzafh0/Lp+PR8Bj4jn4nPzGfhs/LZ+Ox8Dj4nn4vPzSM8ymM8zhM8yVM8zTM8y3M8zwu8yEu8zCu8ymu8zhu8yVu8zTs84F3e430e8gEf8hEfy+fh8/L5+Px8Ab4gX4gvzBfhi/LF+OJ8Cb4kX4ovzZfhy/Ll+PJ8Bb4iX4mvzFfhq/LV+Op8Db4mX4uvzdfh6/L1+Pp8A74h34hvzDfhm/LN+OZ8C74l34pvzbfh2/Lt+PZ8B74j34nvzHfhu/Ld+O58D74n34vvzffh+/L9+P78AH4gP4gfzA/hh/LD+OH8CH4kP4ofzY/hx/Lj+PH8BH4iP4mfzE/hp/LT+On8DH4mP4ufzc/h5/Lz+Pn8An4hv4hfzC/hl/LL+OX8Cn4lv4pfza/h1/Lr+PX8Bn4jv4nfzG/ht/Lb+O38Dn4nv4vfze/h9/L7+P38AT6OP8gf4g/zR/ij/DH+OH+CP8mf4k/zZ/izfDx/jk/gz/OJ/AX+In+Jv8xf4a/y1/jr/A3+Jn+Lv83f4e/y9/j7/AP+If+If8w/4Z/yz/jn/Av+Jf+Kf82/4ZP4t/w7/j3/gf/If+I/81/4r/w3/jv/g//J/+J/88n8H/4v/4+PEVIIKYVUQmohjZBWSCekFzIIGYVMQmYhi5BVyCZkF3IIOYVcQm4BEVABE3CBEEiBEmiBEViBE3hBEERBEmRBEVRBE3TBEEzBEmzBEYDgCp7gC1AIhFCIhFghj5BXyCfkFwoIBYVCQmGhiFBUKCYUF0oIJYVSQmmhjFBWKCeUFyoIFYVKAhSqCFWFakJ1oYZQU6gl1BbqCHWFekJ9oYHQUGgkNBaaCE2FZkJzoYXQUmgltBbaCG2FdkJ7oYPQUegkdBa6/D/eDxWGCcOFEcIIYZQwWhgjjBXGCeOFCcJEYZIwWZgiTBWmCdOFGcJMYZYwW5gjzBXmCfOFBcJCYZGwWFgiLBWWCcuFFcJKYZWwWlgjrBXWCeuFDcJGYZOwWdgibBW2CduFHcJOYZewW9gj7BX2CfuFA0Jc+piYGOGwcEQ4KhwTjgsnhJPCKeG0cEY4K8QL54QE4byQKFwQLgqXhMvCFeGqcE24LtwQbgq3hNvCHeGucE+4LzwQHgqPhMfCE+Gp8Ex4LrwQXgqvhNfCGyFJeCu8E94LH4SPwifhs/BF+Cp8E74LP4Sfwi/ht5As/BH+Cv+EGDGFmFJMJaYW04hpxXRiejGDmFHMJGYWs4hZxWxidjGHmFPMJeYWEREVMREXCZEUKZEWGZEVOZEXBVEUJVEWFVEVNVEXDdEULdEWHRGIruiJvgjFQAzFSIwV84h5xXxifrGAWFAsJBYWi4hFxWJicbGEWFIsJZYWy4hlxXJiebGCWFGsJFYWq4hVxWpidbGGWFOsJdYW64h1xXpifbGB2FBsJDYWm4hNxWZic7GF2FJsJbYW24htxXZie7GD2FHsJHYWu4hdxW5id7GH2FPsJfYW+4h9xX5if3GAOFAcJA4Wh4hDxWHicHGEOFIcJY4Wx4hjxXHieHGCOFGcJE4Wp4hTxWnidHGGOFOcJc4W54hzxXnifHGBuFBcJC4Wl4hLxWXicnGFuFJcJa4W14hrxXXienGDuFHcJG4Wt4hbxW3idnGHuFPcJe4W94h7xX3ifvGAGCceFA+Jh8Uj4lHxmHhcPCGeFE+Jp8Uz4lkxXjwnJojnxUTxgnhRvCReFq+IV8Vr4nXxhnhTvCXeFu+Id8V74n3xgfhQfCQ+Fp+IT8Vn4nPxhfhSfCW+Ft+ISeJb8Z34XvwgfhQ/iZ/FL+JX8Zv4Xfwh/hR/ib/FZPGP+Ff8J8ZIKaSUUioptZRGSiulk9JLGaSMUiYps5RFyiplk7JLOaScUi4pt4RIqIRJuERIpERJtMRIrMRJvCRIoiRJsqRIqqRJumRIpmRJtuRIQHIlT/IlKAVSKEVSrJRHyivlk/JLBaSCUiGpsFREKioVk4pLJaSSUimptFRGKiuVk8pLFaSKUiWpslRFqipVk6pLNaSaUi2ptlRHqivVk+pLDaSGUiOpsdREaio1k5pLLaSWUiuptdRGaiu1k9pLHaSOUieps9RF6ip1k7pLPaSeUi+pt9RH6iv1k/pLA6SB0iBpsDREGioNk4ZLI6SR0ihptDRGGiuNk8ZLE6SJ0iRpsjRFmipNk6ZLM6SZ0ixptjRHmivNk+ZLC6SF0iJpsbREWiotk5ZLK6SV0ipptbRGWiutk9ZLG6SN0iZps7RF2iptk7ZLO6Sd0i5pt7RH2ivtk/ZLB6Q46aB0SDosHZGOSsek49IJ6aR0SjotnZHOSvHSOSlBOi8lSheki9Il6bJ0RboqXZOuSzekm9It6bZ0R7or3ZPuSw+kh9Ij6bH0RHoqPZOeSy+kl9Ir6bX0RkqS3krvpPfSB+mj9En6LH2RvkrfpO/SD+mn9Ev6LSVLf6S/0j8pRk4hp5RTyanlNHJaOZ2cXs4gZ5QzyZnlLHJWOZucXc4h55RzybllREZlTMZlQiZlSqZlRmZlTuZlQRZlSZZlRVZlTdZlQzZlS7ZlRwayK3uyL0M5kEM5kmPlPHJeOZ+cXy4gF5QLyYXlInJRuZhcXC4hl5RLyaXlMnJZuZxcXq4gV5QryZXlKnJVuZpcXa4h15RrybXlOnJduZ5cX24gN5QbyY3lJnJTuZncXG4ht5Rbya3lNnJbuZ3cXu4gd5Q7yZ3lLnJXuZvcXe4h95R7yb3lPnJfuZ/cXx4gD5QHyYPlIfJQeZg8XB4hj5RHyaPlMfJYeZw8Xp4gT5QnyZPlKfJUeZo8XZ4hz5RnybPlOfJceZ48X14gL5QXyYvlJfJSeZm8XF4hr5RXyavlNfJaeZ28Xt4gb5Q3yZvlLfJWeZu8Xd4h75R3ybvlPfJeeZ+8Xz4gx8kH5UPyYfmIfFQ+Jh+XT8gn5VPyafmMfFaOl8/JCfJ5OVG+8P/qzWv5jZwkv5Xfye/lD/JH+ZP8Wf4if5W/yd/lH/JP+Zf8W06W/8h/5X9yjJJCSamkUlIraZS0SjolvZJByahkUjIrWZSsSjYlu5JDyankUnIriIIqmIIrhEIqlEIrjMIqnMIrgiIqkiIriqIqmqIrhmIqlmIrjgIUV/EUX4FKoIRKpMQqeZS8Sj4lv1JAKagUUgorRZSiSjGluFJCKamUUkorZZSySjmlvFJBqahUUiorVZSqSjWlulJDqanUUmordZS6Sj2lvtJAaag0UhorTZSmSjOludJCaam0UlorbZS2SjulvdJB6ah0UjorXZSuSjelu9JD6an0UnorfZS+Sj+lvzJAGagMUgYrQ5ShyjBluDJCGamMUkYrY5SxyjhlvDJBmahMUiYrU5SpyjRlujJDmanMUmYrc5S5yjxlvrJAWagsUhYrS5SlyjJlubJCWamsUlYra5S1yjplvbJB2ahsUjYrW5StyjZlu7JD2ansUnYre5S9yj5lv3JAiVMOKoeUw8oR5ahyTDmunFBOKqeU08oZ5awSr5xTEpTzSqJyQbmoXFIuK1eUq8o15bpyQ7mp3FJuK3eUu8o95b7yQHmoPFIeK0+Up8oz5bnyQnmpvFJeK2+UJOWt8k55r3xQPiqflM/KF+Wr8k35rvxQfiq/lN9KsvJH+av8U2LUFGpKNZWaWk2jplXTqenVDGpGNZOaWc2iZlWzqdnVHGpONZeaW0VUVMVUXCVUUqVUWmVUVuVUXhVUUZVUWVVUVdVUXTVUU7VUW3VUoLqqp/oqVAM1VCM1Vs2j5lXzqfnVAmpBtZBaWC2iFlWLqcXVEmpJtZRaWi2jllXLqeXVCmpFtZJaWa2iVlWrqdXVGmpNtZZaW62j1lXrqfXVBmpDtZHaWG2iNlWbqc3VFmpLtZXaWm2jtlXbqe3VDmpHtZPaWe2idlW7qd3VHmpPtZfaW+2j9lX7qf3VAepAdZA6WB2iDlWHqcPVEepIdZQ6Wh2jjlXHqePVCepEdZI6WZ2iTlWnqdPVGepMdZY6W52jzlXnqfPVBepCdZG6WF2iLlWXqcvVFepKdZW6Wl2jrlXXqevVDepGdZO6Wd2iblW3qdvVHepOdZe6W92j7lX3qfvVA2qcelA9pB5Wj6hH1WPqcfWEelI9pZ5Wz6hn1Xj1nJqgnlcT1QvqRfWSelm9ol5Vr6nX1RvqTfWWelu9o95V76n31QfqQ/WR+lh9oj5Vn6nP1RfqS/WV+lp9oyapb9V36nv1g/pR/aR+Vr+oX9Vv6nf1h/pT/aX+VpPVP+pf9Z8ao6XQUmqptNRaGi2tlk5Lr2XQMmqZtMxaFi2rlk3LruXQcmq5tNwaoqEapuEaoZEapdEao7Eap/GaoImapMmaoqmapumaoZmapdmaowHN1TzN16AWaKEWabFaHi2vlk/LrxXQCmqFtMJaEa2oVkwrrpXQSmqltNJaGa2sVk4rr1XQKmqVtMpaFa2qVk2rrtXQamq1tNpaHa2uVk+rrzXQGmqNtMZaE62p1kxrrrXQWmqttNZaG62t1k5rr3XQOmqdtM5aF62r1k3rrvXQemq9tN5aH62v1k/rrw3QBmqDtMHaEG2oNkwbro3QRmqjtNHaGG2sNk4br03QJmqTtMnaFG2qNk2brs3QZmqztNnaHG2uNk+bry3QFmqLtMXaEm2ptkxbrq3QVmqrtNXaGm2ttk5br23QNmqbtM3aFm2rtk3bru3Qdmq7tN3aHm2vtk/brx3Q4rSD2iHtsHZEO6od045rJ7ST2inttHZGO6vFa+e0BO28lqhd0C5ql7TL2hXtqnZNu67d0G5qt7Tb2h3trnZPu6890B5qj7TH2hPtqfZMe6690F5qr7TX2hstSXurvdPeax+0j9on7bP2RfuqfdO+az+0n9ov7beWrP3R/mr/tBg9hZ5ST6Wn1tPoafV0eno9g55Rz6Rn1rPoWfVsenY9h55Tz6Xn1hEd1TEd1wmd1Cmd1hmd1Tmd1wVd1CVd1hVd1TVd1w3d1C3d1h0d6K7u6b4O9UAP9UiP1fPoefV8en69gF5QL6QX1ovoRfVienG9hF5SL6WX1svoZfVyenm9gl5Rr6RX1qvoVfVqenW9hl5Tr6XX1uvodfV6en29gd5Qb6Q31pvoTfVmenO9hd5Sb6W31tvobfV2enu9g95R76R31rvoXfVuene9h95T76X31vvoffV+en99gD5QH6QP1ofoQ/Vh+nB9hD5SH6WP1sfoY/Vx+nh9gj5Rn6RP1qfoU/Vp+nR9hj5Tn6XP1ufoc/V5+nx9gb5QX6Qv1pfoS/Vl+nJ9hb5SX6Wv1tfoa/V1+np9g75R36Rv1rfoW/Vt+nZ9h75T36Xv1vfoe/V9+n79gB6nH9QP6Yf1I/pR/Zh+XD+hn9RP6af1M/pZPV4/pyfo5/VE/YJ+Ub+kX9av6Ff1a/p1/YZ+U7+l39bv6Hf1e/p9/YH+UH+kP9af6E/1Z/pz/YX+Un+lv9bf6En6W/2d/l7/oH/UP+mf9S/6V/2b/l3/of/Uf+m/9WT9j/5X/6fHGCmMlEYqI7WRxkhrpDPSGxmMjEYmI7ORxchqZDOyGzmMnEYuI7eBGKiBGbhBGKRBGbTBGKzBGbwhGKIhGbKhGKqhGbphGKZhGbbhGMBwDc/wDWgERmhERqyRx8hr5DPyGwWMgkYho7BRxChqFDOKGyWMkkYpo7RRxihrlDPKGxWMikYlo7JRxahqVDOqGzWMmkYto7ZRx6hr1DPqGw2MhkYjo7HRxGhqNDOaGy2MlkYro7XRxmhrtDPaGx2MjkYno7PRxehqdDO6Gz2MnkYvo7fRx+hr9DP6GwOMgcYgY7AxxBhqDDOGGyOMkcYoY7QxxhhrjDPGGxOMicYko11MTMxUY5ox3ZhhzDRmGbONOcZcY54x31hgLDQWGYuNJcZSY5mx3FhhrDRWGauNNcZaY52x3thgbDQ2GZuNLcZWY5ux3dhh7DR2GbuNPcZeY5+x3zhgxBkHjUPGYeOIcdQ4Zhw3ThgnjVPGaeOMcdaIN84ZCcZ5I9G4YFw0LhmXjSvGVeOacd24Ydw0bhm3jTvGXeOecd94YDw0HhmPjSfGU+OZ8dx4Ybw0XhmvjTdGkvHWeGe8Nz4YH41Pxmfji/HV+GZ8N34YP41fxm8j2fhj/DX+GTFmCjOlmcpMbaYx05rpzPRmBjOjmcnMbGYxs5rZzOxmDjOnmcvMbSImamImbhImaVImbTIma3ImbwqmaEqmbCqmamqmbhqmaVqmbTomMF3TM30TmoEZmpEZa+Yx85r5zPxmAbOgWcgsbBYxi5rFzOJmCbOkWcosbZYxy5rlzPJmBbOiWcmsbFYxq5rVzOpmDbOmWcusbdYx65r1zPpmA7Oh2chsbDYxm5rNzOZmC7Ol2cpsbbYx25rtzPZmB7Oj2cnsbHYxu5rdzO5mD7On2cvsbfYx+5r9zP7mAHOgOcgcbA4xh5rDzOHmCHOkOcocbY4xx5rjzPHmBHOiOcmcbE4xp5rTzOnmDHOmOcucbc4x55rzzPnmAnOhuchcbC4xl5rLzOXmCnOlucpcba4x15rrzPXmBnOjucncbG4xt5rbzO3mDnOnucvcbe4x95r7zP3mATPOPGgeMg+bR8yj5jHzuHnCPGmeMk+bZ8yzZrx5zkwwz5uJ5gXzonnJvGxeMa+a18zr5g3zpnnLvG3eMe+a98z75gPzofnIfGw+MZ+az8zn5gvzpfnKfG2+MZPMt+Y78735wfxofjI/m1/Mr+Y387v5w/xp/jJ/m8nmH/Ov+c+MsVJYKa1UVmorjZXWSmeltzJYGa1MVmYri5XVymZlt3JYOa1cVm4LsVALs3CLsEiLsmiLsViLs3hLsERLsmRLsVRLs3TLsEzLsmzLsYDlWp7lW9AKrNCKrFgrj5XXymfltwpYBa1CVmGriFXUKmYVt0pYJa1SVmmrjFXWKmeVtypYFa1KVmWrilXVqmZVt2pYNa1aVm2rjlXXqmfVtxpYDa1GVmOridXUamY1t1pYLa1WVmurjdXWame1tzpYHa1OVmeri9XV6mZ1t3pYPa1eVm+rj9XX6mf1twZYA61B1mBriDXUGmYNt0ZYI61R1mhrjDXWGmeNtyZYE61J1mRrijXVmmZNt2ZYM61Z1mxrjjXXmmfNtxZYC61F1mJribXUWmYtt1ZYK61V1mprjbXWWmettzZYG61N1mZri7XV2mZtt3ZYO61d1m5rj7XX2mfttw5YcdZB65B12DpiHbWOWcetE9ZJ65R12jpjnbXirXNWgnXeSrQuWBetS9Zl64p11bpmXbduWDetW9Zt645117pn3bceWA+tR9Zj64n11HpmPbdeWC+tV9Zr642VZL213lnvrQ/WR+uT9dn6Yn21vlnfrR/WT+uX9dtKtv5Yf61/Voydwk5pp7JT22nstHY6O72dwc5oZ7Iz21nsrHY2O7udw85p57Jz24iN2piN24RN2pRN24zN2pzN24It2pIt24qt2pqt24Zt2pZt244NbNf+//f/JnZTu6nd3G5ht7Tzpyycso3dxm5nt7M72B3sTnZnu4vd1e5md7e72z3tXnYvu4/d1+5n97cH2APtQfZge4g91B5qD7eH2yPtkfZoe7Q91h5rj7fH2xPtifZke7I91Z5qT7en2zPtmfZse7Y9155rz7fn2wvthfZie7G91F5qL7eX2yvtlfZqe7W91l5rr7fX2xvtjfZme7O91d5qb7e32zvtnfZue7e9195r77f323F2nH3IPmQfsY/Yx+xj9gn7hH3KPmWfsc/Y8Xa8nWAn2Il2on3Rvmhfti/bV+2r9nX7un3Tvmnftm/bd+279n37vv3Qfmg/th/bT+1n9nP7hf3SfmW/tt/YSfZb+5393v5gf7Q/2Z/tL/ZX+5v93f5h/7R/2b/tZPuP/df+Z/9/ub+oOpqjO4ZjOpZjO44DHNfxHN+BTuCETpTq/1yvcPI7BZyCTiGnsFPEKeoUc4o7JZySTimntFPGKeuUc8o7FZyKTiWnslPFqepUc6o7NZyaTi2ntlPHqevUc+o7DZyGTiOnsdPEaeo0c5o7LZyWTiuntdPGaeu0c9o7HZyOTiens9PF6ep0c7o7PZyeTi+nt9PH6ev0c/o7A5yBziBnsDPEGeoMc4Y7I5yRzihntDPGGeuMc8Y7E5yJziRnsjPFmepMc6Y7M5yZzixntjPHmevMc+Y7C5yFziJnsbPEWeosc5Y7K5yVzipntbPGWeusc9Y7G5yNziZns7PF2epsc7Y7O5ydzi5nt7PH2evsc/Y7B5w456BzyDnsHHGOOsec484J56RzyjntnHHOOvHOOSfBOe8kOheci84l57JzxbnqXHOuOzecm84t57Zzx7nr3HPuOw+ch84j57HzxHnqPHOeOy+cl84r57Xzxkly3jrvnPfOB+ej88n57HxxvjrfnO/OD+en88v57SQ7f5y/zj8nBqQAKUEqkBqkAWlBOpAeZAAZQSaQGWQBWUE2kB3kADlBLpAbIAAFGMABAUhAARowgAUc4IEARCABGShABRrQgQFMYAEbOAAAF3jABxAEIAQRiAV5QF6QD+QHBUBBUAgUBkVAUVAMFAclQElQCpQGZUBZUA6UBxVARVAJVAZVQFVQDVQHNUBNUAvUBnVAXVAP1AcNQEPQCDQGTUBT0Aw0By1AS9AKtAZtQFvQDrQHHUBH0Al0Bl1AV9ANdAc9QE/QC/QGfUBf0A/0BwPAQDAIDAZDwFAwDAwHI8BIMAqMBmPAWDAOjAcTwEQwCUwGU8BUMA1MBzPATDALzAZzwFwwD8wHC8BCsAgsBkvAUrAMLAcrwEqwCqwGa8BasA6sBxvARrAJbAZbwFawDWwHO8BOsAvsBnvAXrAP7AcHQBw4CA6Bw+AIOAqOgePgBDgJToHT4Aw4C+LBOZAAzoNEcAFcBJfAZXAFXAXXwHVwA9wEt8BtcAfcBffAffAAPASPwGPwBDwFz8Bz8AK8BK/Aa/AGJIG34B14Dz6Aj+AT+Ay+gK/gG/gOfoCf4Bf4DZLBH/AX/AMxbgo3pZvKTe2mcdO66dz0bgY3o5vJzexmcbO62dzsbg43p5vLze0iLupiLu4SLulSLu0yLutyLu8KruhKruwqrupqru4arularu06LnBd13N9F7qBG7qRG+vmcfO6+dz8bgG3oFvILewWcYu6xdzibgm3pFvKLe2Wccu65dzybgW3olvJrexWcau61dzqbg23plvLre3Wceu69dz6bgO3odvIbew2cZu6zdzmbgu3pdvKbe22cdu67dz2bge3o9vJ7ex2cbu63dzubg+3p9vL7e32cfu6/dz+7gB3oDvIHewOcYe6w9zh7gh3pDvKHe2Occe649zx7gR3ojvJnexOcae609zp7gx3pjvLne3Ocee689z57gJ3obvIXewucZe6y9zl7gp3pbvKXe2ucde669z17gZ3o7vJ3exucbe629zt7g53p7vL3e3ucfe6+9z97gE3zj3oHnIPu0fco+4x97h7wj3pnnJPu2fcs268e85NcM+7ie4F96J7yb3sXnGvutfc6+4N96Z7y73t3nHvuvfc++4D96H7yH3sPnGfus/c5+4L96X7yn3tvnGT3LfuO/e9+8H96H5yP7tf3K/uN/e7+8P96f5yf7vJ7h/3r/vPjfFSeCm9VF5qL42X1kvnpfcyeBm9TF5mL4uX1cvmZfdyeDm9XF5uD/FQD/Nwj/BIj/Joj/FYj/N4T/BET/JkT/FUT/N0z/BMz/Jsz/GA53qe53vQC7zQi7xYL4+X18vn5fcKeAW9Ql5hr4hX1CvmFfdKeCW9Ul5pr4xX1ivnlfcqeBW9Sl5lr4pX1avmVfdqeDW9Wl5tr45X16vn1fcaeA29Rl5jr4nX1GvmNfdaeC29Vl5rr43X1mvntfc6eB29Tl5nr4vX1evmdfd6eD29Xl5vr4/X1+vn9fcGeAO9Qd5gb4g31BvmDfdGeCO9Ud5ob4w31hvnjfcmeBO9Sd5kb4o31ZvmTfdmeDO9Wd5sb44315vnzfcWeAu9Rd5ib4m31FvmLfdWeCu9Vd5qb4231lvnrfc2eBu9Td5mb4u31dvmbfd2eDu9Xd5ub4+319vn7fcOeHHeQe+Qd9g74h31jnnHvRPeSe+Ud9o745314r1zXoJ33kv0LngXvUveZe+Kd9W75l33bng3vVvebe+Od9e75933HngPvUfeY++J99R75j33XngvvVfea++Nl+S99d55770P3kfvk/fZ++J99b55370f3k/vl/fbS/b+eH+9f16Mn8JP6afyU/tp/LR+Oj+9n8HP6GfyM/tZ/Kx+Nj+7n8PP6efyc/uIj/qYj/uET/qUT/uMz/qcz/uCL/qSL/uKr/qar/uGb/qWb/uOD3zX93zfh37gh37kx/p5/Lx+Pj+/X8Av6BfyC/tF/KJ+Mb+4X8Iv6ZfyS/tl/LJ+Ob+8X8Gv6FfyK/tV/Kp+Nb+6X8Ov6dfya/t1/Lp+Pb++38Bv6DfyG/tN/KZ+M7+538Jv6bfyW/tt/LZ+O7+938Hv6HfyO/td/K5+N7+738Pv6ffye/t9/L5+P7+/P8Af6A/yB/tD/KH+MH+4P8If6Y/yR/tj/LH+OH+8P8Gf6E/yJ/tT/Kn+NH+6P8Of6c/yZ/tz/Ln+PH++v8Bf6C/yF/tL/KX+Mn+5v8Jf6a/yV/tr/LX+On+9v8Hf6G/yN/tb/K3+Nn+7v8Pf6e/yd/t7/L3+Pn+/f8CP8w/6h/zD/hH/qH/MP+6f8E/6p/zT/hn/rB/vn/MT/PN+on/Bv+hf8i/7V/yr/jX/un/Dv+nf8m/7d/y7/j3/vv/Af+g/8h/7T/yn/jP/uf/Cf+m/8l/7b/wk/63/zn/vf/A/+p/8z/4X/6v/zf/u//B/+r/8336y/8f/6//zY2AKmBKmgqlhGpgWpoPpYQaYEWaCmWEWmBVmg9lhDpgT5oK5IQJRiEEcEpCEFKQhA1nIQR4KUIQSlKECVahBHRrQhBa0oQMBdKEHfQhhAEMYwViYB+aF+WB+WAAWhIVgYVgEFoXFYHFYApaEpWBpWAaWheVgeVgBVoSVYGVYBVaF1WB1WAPWhLVgbVgH1oX1YH3YADaEjWBj2AQ2hc1gc9gCtoStYGvYBraF7WB72AF2hJ1gZ9gFdoXdYHfYA/aEvWBv2Af2hf1gfzgADoSD4GA4BA6Fw+BwOAKOhKPgaDgGjoXj4Hg4AU6Ek+BkOAVOhdPgdDgDzoSz4Gw4B86F8+B8uAAuhIvgYrgELoXL4HK4Aq6Eq+BquAauhevgergBboSb4Ga4BW6F2+B2uAPuhLvgbrgH7oX74H54AMbBg/AQPAyPwKPwGDwOT8CT8BQ8Dc/AszAenoMJ8DxMhBfgRXgJXoZX4FV4DV6HN+BNeAvehnfgXXgP3ocP4EP4CD6GT+BT+Aw+hy/gS/gKvoZvYBJ8C9/B9/AD/Ag/wc/wC/wKv8Hv8Af8CX/B3zAZ/oF/4T8YE6QIUgapgtRBmiBtkC5IH2QIMgaZgsxBliBrkC3IHuQIcga5gtwBEqABFuABEZABFdABE7ABF/CBEIiBFMiBEqiBFuiBEZiBFdiBE4DADbzAD2AQBGEQBbFBniBvkC/IHxQICgaFgsJBkaBoUCwoHpQISgalgtJBmaBsUC4oH1QIKgaVgspBlaBqUC2oHtQIaga1gtpBnaBuUC+oHzQIGgaNgsZBk6Bp0CxoHrQIWgatgtZBm6Bt0C5oH3QIOgadgs5Bl6Br0C3oHvQIega9gt5Bn6Bv0C/oHwwIBgaDgsHBkGBoMCwYHowIRgajgtHBmGBsMC4YH0wIJgaTgsnBlGBqMC2YHswIZgazgtnBnGBuMC+YHywIFgaLgsXBkmBpsCxYHqwIVgargtXBmmBtsC5YH2wINgabgs3BlmBrsC3YHuwIdga7gt3BnmBvsC/YHxwI4oKDwaHgcHAkOBocC44HJ4KTwangdHAmOBvEB+eChOB8kBhcCC4Gl4LLwZXganAtuB7cCG4Gt4LbwZ3gbnAvuB88CB4Gj4LHwZPgafAseB68CF4Gr4LXwZsgKXgbvAveBx+Cj8Gn4HPwJfgafAu+Bz+Cn8Gv4HeQHPwJ/gb/gpgwRZgyTBWmDtOEacN0YfowQ5gxzBRmDrOEWcNsYfYwR5gzzBXmDpEQDbEQD4mQDKmQDpmQDbmQD4VQDKVQDpVQDbVQD43QDK3QDp0QhG7ohX4IwyAMwyiMDfOEecN8Yf6wQFgwLBQWDouERcNiYfGwRFgyLBWWDsuEZcNyYfmwQlgxrBRWDquEVcNqYfWwRlgzrBXWDuuEdcN6Yf2wQdgwbBQ2DpuETcNmYfOwRdgybBW2DtuEbcN2YfuwQ9gx7BR2DruEXcNuYfewR9gz7BX2DvuEfcN+Yf9wQDgwHBQODoeEQ8Nh4fBwRDgyHBWODseEY8Nx4fhwQjgxnBRODqeEU8Np4fRwRjgznBXODueEc8N54fxwQbgwXBQuDpeES8Nl4fJwRbgyXBWuDteEa8N14fpwQ7gx3BRuDreEW8Nt4fZwR7gz3BXuDveEe8N94f7wQBgXHgwPhYfDI+HR8Fh4PDwRngxPhafDM+HZMD48FyaE58PE8EJ4MbwUXg6vhFfDa+H18EZ4M7wV3g7vhHfDe+H98EH4MHwUPg6fhE/DZ+Hz8EX4MnwVvg7fhEnh2/Bd+D78EH4MP4Wfwy/h1/Bb+D38Ef4Mf4W/w+TwT/g3/BfGRCmilFGqKHWUJkobpYvSRxmijFGmKHOUJcoaZYuyRzminFGuKHeERGiERXhERGRERXTERGzERXwkRGIkRXKkRGqkRXpkRGZkRXbkRCByIy/yIxgFURhFUWyUJ8ob5YvyRwWiglGhqHBUJCoaFYuKRyWiklGpqHRUJioblYvKRxWiilGlqHJUJaoaVYuqRzWimlGtqHZUJ6ob1YvqRw2ihlGjqHHUJGoaNYuaRy2illGrqHXUJmobtYvaRx2ijlGnqHPUJeoadYu6Rz2inlGvqHfUJ+ob9Yv6RwOigdGgaHA0JBoaDYuGRyOikdGoaHSULhobjYvGRxOiidGkaHI0JZoaTYumRzOimdGsaHY0J5obzYvmRwuihdGiaHG0JFoaLYuWRyuildGqaHW0JlobrYvWRxuijdGmaHO0JdoabYu2RzuindGuaHe0J9ob7Yv2RweiuOhgdCg6HB2JjkbHouPRiehkdCo6HZ2Jzkbx0bkoITofJUYXoovRpehydCW6Gl2Lrkc3opvRreh2dCe6G92L7kcPoofRo+hx9CR6Gj2LnkcvopfRq+h19CZKit5G76L30YfoY/Qp+hx9ib5G36Lv0Y/oZ/Qr+h0lR3+iv9G/KCY2RWzK2FSxqWPTxKaNTReb/v9g2R67w2oWAAonKVLbto1j23Mwk9q2bdttatu2bdu27eaud627/8X+8GCpsTRYWiwdlh7LgGXEMmGZsSxYViwblh3LgeXEcmG5sTxYXiwflh8rgBXECmGFsSJYUawYVhwrgZXESmGlsTJYWawcVh6rgFXEKmGVsSpYVawaVh3DMBwjMBKjMBpjMBbjMB4TMBGTMBlTMBXTMB0zMBOzMBtzMBfzMID5WICFWIRBDGEJWA2sJlYLq43Vwepi9bD6WAOsIdYIa4w1wZpizbDmWAusJdYKa421wdpi7bD2WAesI9YJ64x1wbpi3bDuWA+sJ9YL6431wfpi/bD+2ABsIDYIG4wNwYZiw7Dh2AhsJDYKG42NwcZi47Dx2ARsIjYJm4xNwaZi07BEbDo2A5uJzcJmY3Owudg8bD62AFuILcIWY0uwpdgybDm2AluJrcJWY2uwtdg6bD22AduIbcI2Y1uwrdg2bDu2A9uJ7cJ2Y3uwvdg+bD92ADuIHcIOY0ewo9gx7Dh2AjuJncJOY2ews9g57Dx2AbuIXcIuY1ewq9g17Dp2A7uJ3cJuY3ewu9g97D72AHuIPcIeY0+wp9gz7Dn2AnuJvcJeY2+wt9g77D32AfuIfcI+Y1+wr9g37Dv2A/uJ/cJ+Y3+wv9g/LAmLwWPxODwZnhxPgafE4/FUeGo8DZ4WT4enxzPgGfFMeGY8C54Vz4Znx3PgOfFceG48D54Xz4fnxwvgBfFCeGG8CF4UL4YXx0vgJfFSeGm8DF4WL4eXxyvgFfFKeGW8Cl4Vr4ZXxzEcxwmcxCmcxhmcxTmcxwVcxCVcxhVcxTVcxw3cxC3cxh3cxT0c4D4e4CEe4RBHeAJeA6+J18Jr43Xwung9vD7eAG+IN8Ib403wpngzvDneAm+Jt8Jb423wtng7vD3eAe+Id8I7413wrng3vDveA++J98J7433wvng/vD8+AB+ID8IH40PwofgwfDg+Ah+Jj8JH42Pwsfg4fDw+AZ+IT8In41Pwqfg0PBGfjs/AZ+Kz8Nn4HHwuPg+fjy/AF+KL8MX4Enwpvgxfjq/AV+Kr8NX4Gnwtvg5fj2/AN+Kb8M34Fnwrvg3fju/Ad+K78N34Hnwvvg/fjx/AD+KH8MP4Efwofgw/jp/AT+Kn8NP4Gfwsfg4/j1/AL+KX8Mv4Ffwqfg2/jt/Ab+K38Nv4Hfwufg+/jz/AH+KP8Mf4E/wp/gx/jr/AX+Kv8Nf4G/wt/g5/j3/AP+Kf8M/4F/wr/g3/jv/Af+K/8N/4H/wv/g9PwmOIWCKOSEYkJ1IQKYl4IhWRmkhDpCXSEemJDERGIhORmchCZCWyEdmJHEROIheRm8hD5CXyEfmJAkRBohBRmChCFCWKEcWJEkRJohRRmihDlCXKEeWJCkRFohJRmahCVCWqEdUJjMAJgiAJiqAJhmAJjuAJgRAJiZAJhVAJjdAJgzAJi7AJh3AJjwCETwRESEQEJBCRQNQgahK1iNpEHaIuUY+oTzQgGhKNiMZEE6Ip0YxoTrQgWhKtiNZEG6It0Y5oT3QgOhKdiM5EF6Ir0Y3oTvQgehK9iN5EH6IvkUj0JwYQA4lBxGBiCDGUGEYMJ0YQI4lRxGhiDDGWGEeMJyYQE4lJxGRiCjGVmEYkEtOJGcRMYhYxm5hDzCXmEfOJBcRCYhGxmFhCLCWWEcuJFcRKYhWxmlhDrCXWEeuJDcRGYhOxmdhCbCW2EduJHcROYhexm9hD7CX2EfuJA8RB4hBxmDhCHCWOEceJE8RJ4hRxmjhDnCXOEeeJC8RF4hJxmbhCXCWuEdeJG8RN4hZxm7hD3CXuEfeJB8RD4hHxmHhCPCWeEc+JF8RL4hXxmnhDvCXeEe+JD8RH4hPxmfhCfCW+Ed+JH8RP4hfxm/hD/CX+EUlEDBlLxpHJyORkCjIlGU+mIlOTaci0ZDoyPZmBzEhmIjOTWcisZDYyO5mDzEnmInOTeci8ZD4yP1mALEgWIguTRciiZDGyOFmCLEmWIkuTZciyZDmyPFmBrEhWIiuTVciqZDWyOomROEmQJEmRNMmQLMmRPCmQIimRMqmQKqmROmmQJmmRNumQLumRgPTJgAzJiIQkIhPIGmRNshZZm6xD1iXrkfXJBmRDshHZmGxCNiWbkc3JFmRLshXZmmxDtiXbke3JDmRHshPZmexCdiW7kd3JHmRPshfZm+xD9iX7kf3JAeRAchA5mBxCDiWHkcPJEeRIchQ5mhxDjiXHkePJCeREchI5mZxCTiWnkYnkdHIGOZOcRc4m55BzyXnkfHIBuZBcRC4ml5BLyWXkcnIFuZJcRa4m15BryXXkenIDuZHcRG4mt5BbyW3kdnIHuZPcRe4m95B7yX3kfvIAeZA8RB4mj5BHyWPkcfIEeZI8RZ4mz5BnyXPkefICeZG8RF4mr5BXyWvkdfIGeZO8Rd4m75B3yXvkffIB+ZB8RD4mn5BPyWfkc/IF+ZJ8Rb4m35BvyXfke/ID+ZH8RH4mv5BfyW/kd/IH+ZP8Rf4m/5B/yX9kEhlDxVJxVDIqOZWCSknFU6mo1FQaKi2VjkpPZaAyUpmozFQWKiuVjcpO5aByUrmo3FQeKi+Vj8pPFaAKUoWowlQRqihVjCpOlaBKUqWo0lQZqixVjipPVaAqUpWoylQVqipVjapOYRROERRJURRNMRRLcRRPCZRISZRMKZRKaZROGZRJWZRNOZRLeRSgfCqgQiqiIIWoBKoGVZOqRdWm6lB1qXpUfaoB1ZBqRDWmmlBNqWZUc6oF1ZJqRbWm2lBtqXZUe6oD1ZHqRHWmulBdqW5Ud6oH1ZPqRfWm+lB9qX5Uf2oANZAaRA2mhlBDqWHUcGoENZIaRY2mxlBjqXHUeGoCNZGaRE2mplBTqWlUIjWdmkHNpGZRs6k51FxqHjWfWkAtpBZRi6kl1FJqGbWcWkGtpFZRq6k11FpqHbWe2kBtpDZRm6kt1FZqG7Wd2kHtpHZRu6k91F5qH7WfOkAdpA5Rh6kj1FHqGHWcOkGdpE5Rp6kz1FnqHHWeukBdpC5Rl6kr1FXqGnWdukHdpG5Rt6k71F3qHnWfekA9pB5Rj6kn1FPqGfWcekG9pF5Rr6k31FvqHfWe+kB9pD5Rn6kv1FfqG/Wd+kH9pH5Rv6k/1F/qH5VExdCxdBydjE5Op6BT0vF0Kjo1nYZOS6ej09MZ6Ix0JjoznYXOSmejs9M56Jx0Ljo3nYfOS+ej89MF6IJ0IbowXYQuSheji9Ml6JJ0Kbo0XYYuS5ejy9MV6Ip0JboyXYWuSlejq9MYjdMETdIUTdMMzdIczdMCLdISLdMKrdIardMGbdIWbdMO7dIeDWifDuiQjmhIIzqBrkHXpGvRtek6dF26Hl2fbkA3pBvRjekmdFO6Gd2cbkG3pFvRrek2dFu6Hd2e7kB3pDvRnekudFe6G92d7kH3pHvRvek+dF+6H92fHkAPpAfRg+kh9FB6GD2cHkGPpEfRo+kx9Fh6HD2enkBPpCfRk+kp9FR6Gp1IT6dn0DPpWfRseg49l55Hz6cX0AvpRfRiegm9lF5GL6dX0CvpVfRqeg29ll5Hr6c30BvpTfRmegu9ld5Gb6d30DvpXfRueg+9l95H76cP0AfpQ/Rh+gh9lD5GH6dP0CfpU/Rp+gx9lj5Hn6cv0BfpS/Rl+gp9lb5GX6dv0DfpW/Rt+g59l75H36cf0A/pR/Rj+gn9lH5GP6df0C/pV/Rr+g39ln5Hv6c/0B/pT/Rn+gv9lf5Gf6d/0D/pX/Rv+g/9l/5HJ9ExTCwTxyRjkjMpmJRMPJOKSc2kYdIy6Zj0TAYmI5OJycxkYbIy2ZjsTA4mJ5OLyc3kYfIy+Zj8TAGmIFOIKcwUYYoyxZjiTAmmJFOKKc2UYcoy5ZjyTAWmIlOJqcxUYaoy1ZjqDMbgDMGQDMXQDMOwDMfwjMCIjMTIjMKojMbojMGYjMXYjMO4jMcAxmcCJmQiBjKISWBqMDWZWkxtpg5Tl6nH1GcaMA2ZRkxjpgnTlGnGNGdaMC2ZVkxrpg3TlmnHtGc6MB2ZTkxnpgvTlenGdGd6MD2ZXkxvpg/Tl+nH9GcGMAOZQcxgZggzlBnGDGdGMCOZUcxoZgwzlhnHjGcmMBOZScxkZgozlZnGJDLTmRnMTGYWM5uZw8xl5jHzmQXMQmYRs5hZwixlljHLmRXMSmYVs5pZw6xl1jHrmQ3MRmYTs5nZwmxltjHbmR3MTmYXs5vZw+xl9jH7mQPMQeYQc5g5whxljjHHmRPMSeYUc5o5w5xlzjHnmQvMReYSc5m5wlxlrjHXmRvMTeYWc5u5w9xl7jH3mQfMQ+YR85h5wjxlnjHPmRfMS+YV85p5w7xl3jHvmQ/MR+YT85n5wnxlvjHfmR/MT+YX85v5w/xl/jFJTAwby8axydjkbAo2JRvPpmJTs2nYtGw6Nj2bgc3IZmIzs1nYrGw2Njubg83J5mJzs3nYvGw+Nj9bgC3IFmILs0XYomwxtjhbgi3JlmJLs2XYsmw5tjxbga3IVmIrs1XYqmw1tjqLsThLsCRLsTTLsCzLsTwrsCIrsTKrsCqrsTprsCZrsTbrsC7rsYD12YAN2YiFLGIT2BpsTbYWW5utw9Zl67H12QZsQ7YR25htwjZlm7HN2RZsS7YV25ptw7Zl27Ht2Q5sR7YT25ntwnZlu7Hd2R5sT7YX25vtw/Zl+7H92QHsQHYQO5gdwg5lh7HD2RHsSHYUO5odw45lx7Hj2QnsRHYSO5mdwk5lp7GJ7HR2BjuTncXOZuewc9l57Hx2AbuQXcQuZpewS9ll7HJ2BbuSXcWuZtewa9l17Hp2A7uR3cRuZrewW9lt7HZ2B7uT3cXuZvewe9l97H72AHuQPcQeZo+wR9lj7HH2BHuSPcWeZs+wZ9lz7Hn2AnuRvcReZq+wV9lr7HX2BnuTvcXeZu+wd9l77H32AfuQfcQ+Zp+wT9ln7HP2BfuSfcW+Zt+wb9l37Hv2A/uR/cR+Zr+wX9lv7Hf2B/uT/cX+Zv+wf9l/bBIbw8VycVwyLjmXgkvJxXOpuNRcGi4tl45Lz2XgMnKZuMxcFi4rl43LzuWIiYmJiYuNieHycvm4/FwBriBXiCvMFeGKcsW44lwJriRXiivNleHKcuW48lwFriJXiavMVeGqctW46hzG4RzBkRzF0RzDsRzH8ZzAiZzEyZzCqZzG6ZzBmZzF2ZzDuZzHAc7nAi7kIg5yiEvganA1uVpcba4OV5erx9XnGnANuUZcY64J15RrxjXnWnAtuVZca64N15Zrx7XnOnAduU5cZ64L15XrxnXnenA9uV5cb64P15frx/XnBnADuUHcYG4IN5Qbxg3nRnAjuVHcaG4MN5Ybx43nJnATuUncZG4KN5WbxiVy07kZ3ExuFjebm8PN5eZx87kF3EJuEbeYW8It5ZZxy7kV3EpuFbeaW8Ot5dZx67kN3EZuE7eZ28Jt5bZx27kd3E5uF7eb28Pt5fZx+7kD3EHuEHeYO8Id5Y5xx7kT3EnuFHeaO8Od5c5x57kL3EXuEneZu8Jd5a5x17kb3E3uFnebu8Pd5e5x97kH3EPuEfeYe8I95Z5xz7kX3EvuFfeae8O95d5x77kP3EfuE/eZ+8J95b5x37kf3E/uF/eb+8P95f5xSVwMH8vH8cn45HwKPiUfz6fiU/Np+LR8Oj49n4HPyGfiM/NZ+Kx8Nj47n4PPyefic/N5+Lx8Pj4/X4AvyBfiC/NF+KJ8Mb44X4IvyZfiS/Nl+LJ8Ob48X4GvyFfiK/NV+Kp8Nb46j/E4T/AkT/E0z/Asz/E8L/AiL/Eyr/Aqr/E6b/Amb/E27/Au7/GA9/mAD/mIhzziE/gafE2+Fl+br8PX5evx9fkGfEO+Ed+Yb8I35ZvxzfkWfEu+Fd+ab8O35dvx7fkOfEe+E9+Z78J35bvx3fkefE++F9+b78P35fvx/fkB/EB+ED+YH8IP5Yfxw/kR/Eh+FD+aH8OP5cfx4/kJ/ER+Ej+Zn8JP5afxifx0fgY/k5/Fz+bn8HP5efx8fgG/kF/EL+aX8Ev5ZfxyfgW/kl/Fr+bX8Gv5dfx6fgO/kd/Eb+a38Fv5bfx2fge/k9/F7+b38Hv5ffx+/gB/kD/EH+aP8Ef5Y/xx/gR/kj/Fn+bP8Gf5c/x5/gJ/kb/EX+av8Ff5a/x1/gZ/k7/F3+bv8Hf5e/x9/gH/kH/EP+af8E/5Z/xz/gX/kn/Fv+bf8G/5d/x7/gP/kf/Ef+a/8F/5b/x3/gf/k//F/+b/8H/5f3wSHyPECnFCMiG5kEJIKcQLqYTUQhohrZBOSC9kEDIKmYTMQhYhq5BNyC7kEHIKuYTcQh4hr5BPyC8UEAoKhYTCQhGhqFBMKC6UEEoKpYTSQhmhrFBOKC9UECoKlYTKQhWhqlBNqC5gAi4QAilQAi0wAitwAi8IgihIgiwogipogi4YgilYgi04git4AhB8IRBCIRKggIQEoYZQU6gl1BbqCHWFekJ9oYHQUGgkNBaaCE2FZkJzoYXQUmgltBbaCG2FdkJ7oYPQUegkdBa6CF2FbkJ3oYfQU+gl9Bb6CH2FfkJ/YYAwUBgkDBaGCEOFYcJwYYQwUhgljBbGCGOFccJ4YYIwUZgkTBamCFOFaUKiMF2YIcwUZgmzhTnCXGGeMF9YICwUFgmLhSXCUmGZsFxYIawUVgmrhTXCWmGdsF7YIGwUNgmbhS3CVmGbsF3YIewUdgm7hT3CXmGfsF84IBwUDgmHhSPCUeGYcFw4IZwUTgmnhTPCWeGccF64IFwULgmXhSvCVeGacF24IdwUbgm3hTvCXeGecF94IDwUHgmPhSfCU+GZ8Fx4IbwUXgmvhTfCW+Gd8F74IHwUPgmfhS/CV+Gb8F34IfwUfgm/hT/CX+GfkCTEiLFinJhMTC6mEFOK8WIqMbWYRkwrphPTixnEjGImMbOYRcwqZhOziznEnGIuMbeYR8wr5hPziwXEgmIhsbBYRCwqFhOLiyXEkmIpsbRYRiwrlhPLixXEimIlsbJYRawqVhOri5iIi4RIipRIi4zIipzIi4IoipIoi4qoipqoi4ZoipZoi47oip4IRF8MxFCMRCgiMUGsIdYUa4m1xTpiXbGeWF9sIDYUG4mNxSZiU7GZ2FxsIbYUW4mtxTZiW7Gd2F7sIHYUO4mdxS5iV7Gb2F3sIfYUe4m9xT5iX7Gf2F8cIA4UB4mDxSHiUHGYOFwcIY4UR4mjxTHiWHGcOF6cIE4UJ4mTxSniVHGamChOF2eIM8VZ4mxxjjhXnCfOFxeIC8VF4mJxibhUXCYuF1eIK8VV4mpxjbhWXCeuFzeIG8VN4mZxi7hV3CZuF3eIO8Vd4m5xj7hX3CfuFw+IB8VD4mHxiHhUPCYeF0+IJ8VT4mnxjHhWPCeeFy+IF8VL4mXxinhVvCZeF2+IN8Vb4m3xjng3/p54X3wgPhQfiY/FJ+JT8Zn4XHwhvhRfia/FN+Jb8Z34XvwgfhQ/iZ/FL+JX8Zv4Xfwh/hR/ib/FP+Jf8Z+YJMZIsVKclExKLqWQUkrxUioptZRGSiulk9JLGaSMUiYps5RFyiplk7JLOaScUi4pt5RHyivlk/JLBaSCUiGpsFREKioVk4pLJaSSUimptFRGKiuVk8pLFaSKUiWpslRFqipVk6pLmIRLhERKlERLjMRKnMRLgiRKkiRLiqRKmqRLhmRKlmRLjuRKngQkXwqkUIokKCEpQaoh1ZRqSbWlOlJdqZ5UX2ogNZQaSY2lJlJTqZnUXGohtZRaSa2lNlJbqZ3UXuogdZQ6SZ2lLlJXqZvUXeoh9ZR6Sb2lPlJfqZ/UXxogDZQGSYOlIdJQaZg0XBohjZRGSaOlMdJYaZw0XpogTZQmSZOlKdJUaZqUKE2XZkgzpVnSbGmONFeaJ82XFkgLpUXSYmmJtFRaJi2XVkgrpVXSammNtFZaJ62XNkgbpU3SZmmLtFXaJm2Xdkg7pV3SbmmPtFfaJ+2XDkgHpUPSYemIdFQ6Jh2XTkgnpVPSaemMdFY6J52XLkgXpUvSZemKdFW6Jl2Xbkg3pVvSbemOdFe6J92XHkgPpUfSY+mJ9FR6Jj2XXkgvpVfSa+mN9FZ6J72XPkgfpU/SZ+mL9FX6Jn2Xfkg/pV/Sb+mP9Ff6JyVJMXKsHCcnk5PLKeSUcrycSk4tp5HTyunk9HIGOaOcSc4sZ5Gzytnk7HIOOaecS84t55Hzyvnk/HIBuaBcSC4sF5GLysXk4nIJuaRcSi4tl5HLyuXk8nIFuaJcSa4sV5GrytXk6jIm4zIhkzIl0zIjszIn87Igi7Iky7Iiq7Im67Ihm7Il27Iju7InA9mXAzmUIxnKSE6Qa8g15VpybbmOXFeuJ9eXG8gN5UZyY7mJ3FRuJjeXW8gt5VZya7mN3FZuJ7eXO8gd5U5yZ7mL3FXuJneXe8g95V5yb7mP3FfuJ/eXB8gD5UHyYHmIPFQeJg+XR8gj5VHyaHmMPFYeJ4+XJ8gT5UnyZHmKPFWeJifK0+UZ8kx5ljxbniPPlefJ8+UF8kJ5kbxYXiIvlZfJy+UV8kp5lbxaXiOvldfJ6+UN8kZ5k7xZ3iJvlbfJ2+Ud8k55l7xb3iPvlffJ++UD8kH5kHxYPiIflY/Jx+UT8kn5lHxaPiOflc/J5+UL8kX5knxZviJfla/J1+Ub8k35lnxbviPfle/J9+UH8kP5kfxYfiI/lZ/Jz+UX8kv5lfxafiO/ld/J7+UP8kf5k/xZ/iJ/lb/J3+Uf8k/5l/xb/iP/lf/JSXKMEqvEKcmU5EoKJaUSr6RSUitplLRKOiW9kkHJqGRSMitZlKxKNiW7kkPJqeRScit5lLxKPiW/UkApqBRSCitFlKJKMaW4UkIpqZRSSitllLJKOaW8UkGpqFRSKitVlKpKNaW6gim4QiikQim0wiiswim8IiiiIimyoiiqoim6YiimYim24iiu4ilA8ZVACZVIgQpSEpQaSk2lllJbqaPUVeop9ZUGSkOlkdJYaaI0VZopzZUWSkulldJaaaO0Vdop7ZUOSkelk9JZ6aJ0Vbop3ZUeSk+ll9Jb6aP0Vfop/ZUBykBlkDJYGaIMVYYpw5URykhllDJaGaOMVcYp45UJykRlkjJZmaJMVaYpicp0ZYYyU5mlzFbmKHOVecp8ZYGyUFmkLFaWKEuVZcpyZYWyUlmlrFbWKGuVdcp6ZYOyUdmkbFa2KFuVbcp2ZYeyU9ml7Fb2KHuVfcp+5YByUDmkHFaOKEeVY8px5YRyUjmlnFbOKGeVc8p55YJyUbmkXFauKFeVa8p15YZyU7ml3FbuKHeVe8p95YHyUHmkPFaeKE+VZ8pz5YXyUnmlvFbeKG+Vd8p75YPyUfmkfFa+KF+Vb8p35YfyU/ml/Fb+KH+Vf0qSEqPGqnFqMjW5mkJNqcarqdTUaho1rZpOTa9mUDOqmdTMahY1q5pNza7mUHOqudTcah41r5pPza8WUAuqhdTCahG1qFpMLa6WUEuqpdTSahm1rFpOLa9WUCuqldTKahW1qlpNra5iKq4SKqlSKq0yKqtyKq8KqqhKqqwqqqpqqq4aqqlaqq06qqt6KlB9NVBDNVKhitQEtYZaU62l1lbrqHXVemp9tYHaUG2kNlabqE3VZmpztYXaUm2ltlbbqG3Vdmp7tYPaUe2kdla7qF3Vbmp3tYfaU+2l9lb7qH3Vfmp/dYA6UB2kDlaHqEPVYepwdYQ6Uh2ljlbHqGPVcep4dYI6UZ2kTlanqFPVaWqiOl2doc5UZ6mz1TnqXHWeOl9doC5UF6mL1SXqUnWZulxdoa5UV6mr1TXqWnWdul7doG5UN6mb1S3qVnWbul3doe5Ud6m71T3qXnWful89oB5UD6mH1SPqUfWYelw9oZ5UT6mn1TPqWfWcel69oF5UL6mX1SvqVfWael29od5Ub6m31TvqXfWeel99oD5UH6mP1SfqU/WZ+lx9ob5UX6mv1TfqW/Wd+l79oH5UP6mf1S/qV/Wb+l39of5Uf6m/1T/qX/WfmqTGaLFanJZMS66l0FJq8VoqLbWWRkurpdPSaxm0jFomLbOWRcuqZdOyazm0nFouLbeWR8ur5dPyawW0glohrbBWRCuqFdOKayW0kloprbRWRiurldPKaxW0ilolrbJWRauqVdOqa5iGa4RGapRGa4zGapzGa4ImapIma4qmapqma4ZmapZma47map4GNF8LtFCLNKghLUGrodXUamm1tTpaXa2eVl9roDXUGmmNtSZaU62Z1lxrobXUWmmttTZaW62d1l7roHXUOmmdtS5aV62b1l3rofXUemm9tT5aX62f1l8boA3UBmmDtSHaUG2YNlwboY3URmmjtTHaWG2cNl6boE3UJmmTtSnaVG2alqhN12ZoM7VZ2mxtjjZXm6fN1xZoC7VF2mJtibZUW6Yt11ZoK7VV2mptjbZWW6et1zZoG7VN2mZti7ZV26Zt13ZoO7Vd2m5tj7ZX26ft1w5oB7VD2mHtiHZUO6Yd105oJ7VT2mntjHZWO6ed1y5oF7VL2mXtinZVu6Zd125oN7Vb2m3tjnZXu6fd1x5oD7VH2mPtifZUe6Y9115oL7VX2mvtjfZWe6e91z5oH7VP2mfti/ZV+6Z9135oP7Vf2m/tj/ZX+6claTF6rB6nJ9OT6yn0lHq8nkpPrafR0+rp9PR6Bj2jnknPrGfRs+rZ9Ox6Dj2nnkvPrefR8+r59Px6Ab2gXkgvrBfRi+rF9OJ6Cb2kXkovrZfRy+rl9PJ6Bb2iXkmvrFfRq+rV9Oo6puM6oZM6pdM6o7M6p/O6oIu6pMu6oqu6puu6oZu6pdu6o7u6pwPd1wM91CMd6khP0GvoNfVaem29jl5Xr6fX1xvoDfVGemO9id5Ub6Y311voLfVWemu9jd5Wb6e31zvoHfVOeme9i95V76Z313voPfVeem+9j95X76f31wfoA/VB+mB9iD5UH6YP10foI/VR+mh9jD5WH6eP1yfoE/VJ+mR9ij5Vn6Yn6tP1GfpMfZY+W5+jz9Xn6fP1BfpCfZG+WF+iL9WX6cv1FfpKfZW+Wl+jr9XX6ev1DfpGfZO+Wd+ib9W36dv1HfpOfZe+W9+j79X36fv1A/pB/ZB+WD+iH9WP6cf1E/pJ/ZR+Wj+jn9XP6ef1C/pF/ZJ+Wb+iX9Wv6df1G/pN/ZZ+W7+j39Xv6ff1B/pD/ZH+WH+iP9Wf6c/1F/pL/ZX+Wn+jv9Xf6e/1D/pH/ZP+Wf+if9W/6d/1H/pP/Zf+W/+j/9X/6Ul6jBFrxBnJjORGCiOlEW+kMlIbaYy0RjojvZHByGhkMjIbWYysRjYju5HDyGnkMnIbeYy8Rj4jv1HAKGgUMgobRYyiRjGjuFHCKGmUMkobZYyyRjmjvFHBqGhUMiobVYyqRjWjuoEZuEEYpEEZtMEYrMEZvCEYoiEZsqEYqqEZumEYpmEZtuEYruEZwPCNwAiNyIAGMhKMGkZNo5ZR26hj1DXqGfWNBkZDo5HR2GhiNDWaGc2NFkZLo5XR2mhjtDXaGe2NDkZHo5PR2ehidDW6Gd2NHkZPo5fR2+hj9DX6Gf2NAcZAY5Ax2BhiDDWGGcONEcZIY5Qx2hhjjDXGGeONCcZEY5Ix2ZhiTDWmGYnGdGOGMdOYZcw25hhzjXnGfGOBsdBYZCw2lhhLjWXGcmOFsdJYZaw21hhrjXXGemODsdHYZGw2thhbjW3GdmOHsdPYZew29hh7jX3GfuOAcdA4ZBw2jhhHjWPGceOEcdI4ZZw2zhhnjXPGeeOCcdG4ZFw2rhhXjWvGdeOGcdO4Zdw27hh3jXvGfeOB8dB4ZDw2nhhPjWfGc+OF8dJ4Zbw23hhvjXfGe+OD8dH4ZHw2vhhfjW/Gd+OH8dP4Zfw2/hh/jX9GkhFjxppxZjIzuZnCTGnGm6nM1GYaM62ZzkxvZjAzmpnMzGYWM6uZzcxu5jBzmrnM3GYeM6+Zz8xvFjALmoXMwmYRs6hZzCxuljBLmqXM0mYZs6xZzixvVjArmpXMymYVs6pZzaxuYiZuEiZpUiZtMiZrciZvCqZoSqZsKqZqaqZuGqZpWqZtOqZreiYwfTMwQzMyoYnMBLOGWdOsZdY265h1zXpmfbOB2dBsZDY2m5hNzWZmc7OF2dJsZbY225htzXZme7OD2dHsZHY2u5hdzW5md7OH2dPsZfY2+5h9zX5mf3OAOdAcZA42h5hDzWHmcHOEOdIcZY42x5hjzXHmeHOCOdGcZE42p5hTzWlmojndnGHONGeZs8055lxznjnfXGAuNBeZi80l5lJzmbncXGGuNFeZq8015lpznbne3GBuNDeZm80t5lZzm7nd3GHuNHeZu8095l5zn7nfPGAeNA+Zh80j5lHzmHncPGGeNE+Zp80z5lnznHnevGBeNC+Zl80r5lXzmnndvGHeNG+Zt8075l3znnnffGA+NB+Zj80n5lPzmfncfGG+NF+Zr8035lvznfne/GB+ND+Zn80v5lfzm/nd/GH+NH+Zv80/5l/zn5lkxlixVpyVzEpupbBSWvFWKiu1lcZKa6Wz0lsZrIxWJiuzlcXKamWzsls5rJxWLiu3lcfKa+Wz8lsFrIJWIauwVcQqahWzilslrJJWKau0VcYqa5WzylsVrIpWJauyVcWqalWzqluYhVuERVqURVuMxVqcxVuCJVqSJVuKpVqapVuGZVqWZVuO5VqeBSzfCqzQiixoISvBqmHVtGpZta06Vl2rnlXfamA1tBpZja0mVlOrmdXcamG1tFpZra02VlurndXe6mB1tDpZna0uVlerm9Xd6mH1tHpZva0+Vl+rn9XfGmANtAZZg60h1lBrmDXcGmGNtEZZo60x1lhrnDXemmBNtCZZk60p1lRrmpVoxf6fsM625lhzrXnWfGuBtdBaZC22llhLrWXWcmuFtdJaZa221lhrrXXWemuDtdHaZG22tlhbrW3WdmuHtdPaZe229lh7rX3WfuuAddA6ZB22jlhHrWPWceuEddI6ZZ22zlhnrXPWeeuCddG6ZF22rlhXrWvWdeuGddO6Zd227lh3rXvWfeuB9dB6ZD22nlhPrWfWc+uF9dJ6Zb223lhvrXfWe+uD9dH6ZH22vlhfrW/Wd+uH9dP6Zf22/lh/rX9WkhVjx9pxdjI7uZ3CTmnH26ns1HYaO62dzk5vZ7Az2pnszHYWO6udzc5u57Bz2rns3HYeO6+dz85vF7AL2oXswnYRu6hdzC5ul7BL2qXs0nYZu6xdzi5vV7Ar2pXsynYVu6pdza5uYzZuEzZpUzZtMzZrczZvC7ZoS7ZsK7Zqa7ZuG7ZpW7ZtO7ZrezawfTuwQzuyoY3sBLuGXdOuZde269h17Xp2fbuB3dBuZDe2m9hN7WZ2c7uF3dJuZbe229ht7XZ2e7uD3dHuZHe2u9hd7W52d7uH3dPuZfe2+9h97X52f3uAPdAeZA+2h9hD7WH2cHuEPdIeZY+2x9hj7XH2eHuCPdGeZE+2p9hT7Wl2oj3dnmHPtGfZs+059lx7nj3fXmAvtBfZi+0l9lJ7mb3cXmGvtFfZq+019lp7nb3e3mBvtDfZm+0t9lZ7m73d3mHvtHfZu+099l57n73fPmAftA/Zh+0j9lH7mH3cPmGftE/Zp+0z9ln7nH3evmBftC/Zl+0r9lX7mn3dvmHftG/Zt+079l37nn3ffmA/tB/Zj+0n9lP7mf3cfmG/tF/Zr+039lv7nf3e/mB/tD/Zn+0v9lf7m/3d/mH/tH/Zv+0/9l/7n51kxzixTpyTzEnupHBSOvFOKie1k8ZJ66Rz0jsZnIxOJiezk8XJ6mRzsjs5nJxOLie3k8fJ6+Rz8jsFnIJOIaewU8Qp6hRzijslnJJOKae0U8Yp65RzyjsVnIpOJaeyU8Wp6lRzqjuYgzuEQzqUQzuMwzqcwzuCIzqSIzuKozqaozuGYzqWYzuO4zqeAxzfCZzQiRzoICfBqeHUdGo5tZ06Tl2nnlPfaeA0dBo5jZ0mTlOnmdPcaeG0dFo5rZ02Ttuk+JgYp4PT0enkdHa6OF2dbk53p4fT0+nl9Hb6OH2dfk5/Z4Az0BnkDHaGOEOdYc5wZ4Qz0hnljHbGOGOdcc54Z4Iz0ZnkTHamOFOdaU6iM92Z4cx0ZjmznTnOXGeeM99Z4Cx0FjmLnSXOUmeZs9xZ4ax0VjmrnTXOWmeds97Z4Gx0NjmbnS3OVmebs93Z4ex0djm7nT3OXmefs9854Bx0DjmHnSPOUeeYc9w54Zx0TjmnnTPOWeecc9654Fx0LjmXnSvOVeeac9254dx0bjm3nTvOXeeec9954Dx0HjmPnSfOU+eZ89x54bx0XjmvnTfOW+ed89754Hx0PjmfnS/OV+eb89354fx0fjm/nT/OX+efk+TEuLFunJvMTe6mcFO68W4qN7Wbxk3rpnPTuxncjG4mN7Obxc3qZnOzuzncnG4uN7ebx83r5nPzuwXcgm4ht7BbxC3qFnOLuyXckm4pt7Rbxi3rlnPLuxXcim4lt7Jbxa3qVnOru5iLu4RLupRLu4zLupzLu4IrupIru4qrupqru4ZrupZru47rup4LXN8N3NCNXOgiN8Gt4dZ0a7m13TpuXbeeW99t4DZ0G7mN3SZuU7eZ29yNi4mJaeW2dtu4bd12bnu3g9vR7eR2dru4Xd1ubne3h9vT7eX2dvu4fd1+bn93gDvQHeQOdoe4Q91h7nB3hDvSHeWOdse4Y91x7nh3gjvRneROdqe4U91pbqI73Z3hznRnubPdOe5cd547313gLnQXuYvdJe5Sd5m73F3hrnRXuavdNe5ad5273t3gbnQ3uZvdLe5Wd5u73d3h7nR3ubvdPe5ed5+73z3gHnQPuYfdI+5R95h73D3hnnRPuafdM+5Z95x73r3gXnQvuZfdK+5V95p73b3h3nRvubfdO+5d9557333gPnQfuY/dJ+5T95n73H3hvnRfua/dN+5b95373v3gfnQ/uZ/dL+5X95v73f3h/nR/ub/dP+5f95+b5MZ4sV6cl8xL7qXwUnrxXiovtZfGS+ul89J7GbyMXiYvs5fFy+pl87J7ObycXi4vt5fHy+vl8/J7BbyCXiGvsFfEK+oV84p7JbySXimvtFfGK+uV88p7FbyKXiWvslfFq+pV86p7mId7hEd6lEd7jMd6nMd7gid6kid7iqd6mqd7hmd6lmd7jud6ngc83wu80Is86CEvwavh1fRqebW9Ol5dr55X32vgNfQaeY29Jl5Tr5nX3GvhtfRaea29Nl5br53X3uvgdfQ6eZ29Ll5Xr5vX3evh9fR6eb29Pl5fr5/X3xvgDfQGeYO9Id5Qb5g33BvhjfRGeaO9Md5Yb5w33pvgTfQmeZO9Kd5Ub5qX6E33ZngzvVnebG+ON9eb5833FngLvUXeYm+Jt9Rb5i33VngrvVXeam+Nt9Zb5633NngbvU3eZm+Lt9Xb5m33dng7vV3ebm+Pt9fb5+33DngHvUPeYe+Id9Q75h33TngnvVPeae+Md9Y75533LngXvUveZe+Kd9W75l33bng3vVvebe+Od9e75933HngPvUfeY++J99R75j33XngvvVfea++N99Z75733PngfvU/eZ++L99X75n33fng/vV/eb++P99f75yV5MSAWxIFkIDlIAVKCeJAKpAZpQFqQDqQHGUBGkAlkBllAVpANZAc5QE6QC+QGeUBekA/kBwVAQVAIFAZFQFFQDBQHJUBJUAqUBmVAWVAOlAcVQEVQCVQGVUBVUA1UBxjAAQFIQAEaMIAFHOCBAEQgARkoQAUa0IEBTGABGzjABR4AwAcBCEEEIEAgAdQANUEtUBvUAXVBPVAfNAANQSPQGDQBTUEz0By0AC1BK9AatAFtQTvQHnQAHUEn0Bl0AV1BN9Ad9AA9QS/QG/QBfUE/0B8MAAPBIDAYDAFDwTAwHIwAI8EoMBqMAWPBODAeTAATwSQwGUwBU8E0kAimgxlgJpgFZoM5YC6YB+aDBWAhWAQWgyVgKVgGloMVYCVYBVaDNWAtWAfWgw1gI9gENoMtYCvYBraDHWAn2AV2gz1gL9gH9oMD4CA4BA6DI+AoOAaOgxPgJDgFToMz4Cw4B86DC+AiuAQugyvgKrgGroMb4Ca4BW6DO+AuuAfugwfgIXgEHoMn4Cl4Bp6DF+AleAVegzfgLXgH3oMP4CP4BD6DL+Ar+Aa+gx/gJ/gFfoM/4C/4B5JAjB/rx/nJ/OR+Cj+lH++n8lP7afy0fjo/vZ/Bz+hn8jP7WfysfjY/u5/Dz+nn8nP7efy8fj4/v1/AL+gX8gv7RfyifjG/uF/CL+mX8kv7Zfyyfjm/vF/Br+hX8iv7VfyqfjW/uo/5uE/4pE/5tM/4rM/5vC/4oi/5sq/4qq/5um/4pm/5tu/4ru/5wPf9wA/9yIc+8hP8Gn5Nv5Zf26/j1/Xr+fX9Bn5Dv5Hf2G/iN/Wb+c39Fn5Lv5Xf2m/jt/Xb+e39Dn5Hv5Pf2e/id/W7+d39Hn5Pv5ff2+/j9/X7+f39Af5Af5A/2B/iD/WH+cP9Ef5If5Q/2h/jj/XH+eP9Cf5Ef5I/2Z/iT/Wn+Yn+dH+GP9Of5c/25/hz/Xn+fH+Bv9Bf5C/2l/hL/WX+cn+Fv9Jf5a/21/hr/XX+en+Dv9Hf5G/2t/hb/W3+dn+Hv9Pf5e/29/h7/X3+fv+Af9A/5B/2j/hH/WP+cf+Ef9I/5Z/2z/hn/XP+ef+Cf9G/5F/2r/hX/Wv+df+Gf9O/5d/27/h3/Xv+ff+B/9B/5D/2n/hP/Wf+c/+F/9J/5b/23/hv/Xf+e/+D/9H/5H/2v/hf/W/+d/+H/9P/5f/2//h//X9+kh8TxAZxQbIgeZAiSBnEB6mC1EGaIG2QLkgfZAgyBpmCzEGWIGuQLcge5AhyBrmC3EGeIG+QL8gfFAgKBoWCwkGRoGhQLCgelAhKBqWC0kGZoGxQLigfVAgqBpWCykGVoGpQLageYAEeEAEZUAEdMAEbcAEfCIEYSIEcKIEaaIEeGIEZWIEdOIEbeAEI/CAIwiAKYICChKBGUDOoFdQO6gR1g3pB/aBB0DBoFDQOmgRNg2ZB86BF0DJoFbQO2gRtg3ZB+6BD0DHoFHQOugRdg25B96BH0DPoFfQO+gR9g35B/2BAMDAYFAwOhgRDg2HB8GBEMDIYFYwOxgRjg3HB+GBCMDGYFEwOpgRTg2lBYjA9mBHMDGYFs4M5wdxgXjA/WBAsDBYFi4MlwdJgWbA8WBGsDFYFq4M1wdpgXbA+2BBsDDYFm4MtwdZgW7A92BHsDHYFu4M9wd5gX7A/OBAcDA4Fh4MjwdHgWHA8OBGcDE4Fp4MzwdngXHA+uBBcDC4Fl4MrwdXgWnA9uBHcDG4Ft4M7wd3gXnA/eBA8DB4Fj4MnwdPgWfA8eBG8DF4Fr4M3wdvgXfA++BB8DD4Fn4MvwdfgW/A9+BH8DH4Fv4M/wd/gX5AUxISxYVyYLEwepghThvFhqjB1mCZMG6YL04cZwoxhpjBzmCXMGmYLs4c5wpxhrjB3mCfMG+YL84cFwoIhiImJKRIWDYuFxcMSYcmwVFg6LBOWDcuF5cMKYcWwUlg5rBJWDauF1UMsxEMiJEMqpEMmZEMu5EMhFEMplEMlVEMt1EMjNEMrtEMndEMvBKEfBmEYRiEMUZgQ1ghrhrXC2mGdsG5YL6wfNggbho3CxmGTsGnYLGwetghbhq3C1mGbsG3YLmwfdgg7hp3CzmGXsGvYLewe9gh7hr3C3mGfsG/YL+wfDggHhoPCweGQcGg4LBwejghHhqPC0eGYcGw4LhwfTggnhpPCyeGUcGo4LUwMp4czwpnhrHB2OCecG84L54cLwoXhonBxuCRcGi4Ll4crwpXhqnB1uCZcG64L14cbwo3hpnBzuCXcGm4Lt4c7wp3hrnB3uCfcG+4L94cHwoPhofBweCQ8Gh4Lj4cnwpPhqfB0eCY8G54Lz4cXwovhpfByeCW8Gl4Lr4c3wpvhrfB2eCe8G94L74cPwofho/Bx+CR8Gj4Ln4cvwpfhq/B1+CZ8G74L34cfwo/hp/Bz+CX8Gn4Lv4c/wp/hr/B3+Cf8G/4Lk8KYKDaKi5JFyaMUUcooPkoVpY7SRGmjdFH6KEOUMcoUZY6yRFmjbFH2KEeUM8oV5Y7yRHmjfFH+qEBUMCoUFY6KREWjYlHxqERUMioVlY7KRGWjclH5qEJUMaoUVY6qRFWjalH1CIvwiIjIiIroiInYiIv4SIjESIrkSInUSIv0yIjMyIrsyIncyItA5EdBFEZRBCMUJUQ1oppRrah2VCeqG9WL6kcNooZRo6hx1CRqGjWLmkctopZRq6h11CZqG7WL2kcdoo5Rp6hz1CXqGnWLukc9op5Rr6h31CfqG/WL+kcDooHRoGhwNCQaGg2LhkcjopHRqGh0NCYaG42LxkcToonRpP9O8r+ixGh6NCOaGc2KZkdzornRvGh+tCBaGC2KFkdLoqXRsmh5tCJaGa2KVkdrorXRumh9tCHaGG2KNkdboq3Rtmh7tCPaGe2Kdkd7or3Rvmh/dCA6GB2KDkdHoqPRseh4dCI6GZ2KTkdnorPRueh8dCG6GF2KLkdXoqvRteh6dCO6Gd2Kbkd3orvRveh+9CB6GD2KHkdPoqfRs+h59CJ6Gb2KXkdvorfRu+h99CH6GH2KPkdfoq/Rt+h79CP6Gf2Kfkd/or/RvygpioGxMA4mg8lhCpgSxsNUMDVMA9PCdDA9zAAzwkwwM8wCs8JsMDvMAXPCXDA3zAPzwnwwPywAC8JCsDAsAovCYrA4LAFLwlKwNCwDy8JysDysACvCSrAyrAKrwmqwOsQgDglIQgrSkIEs5CAPBShCCcpQgSrUoA4NaEIL2tCBLvQggD4MYAgjCCGCCbAGrAlrwdqwDqwL68H6sAFsCBvBxrAJbAqbweawBWwJW8HWsA1sC9vB9rAD7Ag7wc6wC+wKu8HusAfsCXvB3rAP7Av7wf5wABwIB8HBcAgcCofB4XAEHAlHwdFwDBwLx8HxcAKcCCfByXAKnAqnwUQ4Hc6AM+EsOBvOgXPhPDgfLoAL4SK4GC6BS+EyuByugCvhKrgaroFr4Tq4Hm6AG+EmuBlugVvhNrgd7oA74S64G+6Be+E+uB8egAfhIXgYHoFH4TF4HJ6AJ+EpeBqegWfhOXgeXoAX4SV4GV6BV+E1eB3egDfhLXgb3oF34T14Hz6AD+Ej+Bg+gU/hM/gcvoAv4Sv4Gr6Bb+E7+B5+gB/hJ/gZfoFf4Tf4Hf6AP+Ev+Bv+gX/hP5gEY1AsikPJUHKUAqVE8SgVSo3SoLQoHUqPMqCMKBPKjLKgrCgbyo5yoJwoF8qN8qC8KB/KjwqggqgQKoyKoKKoGCqOSqCSqBQqjcqgsqgcKo8qoIqoEqqMqqCqqBqqjjCEIwKRiEI0YhCLOMQjAYlIQjJSkIo0pCMDmchCNnKQizwEkI8CFKIIQYRQAqqBaqJaqDaqg+qieqg+aoAaokaoMWqCmqJmqDlqgVqiVqg1aoPaonaoPeqAOqJOqDPqgrqibqg76oF6ol6oN+qD+qJ+qD8agAaiQWgwGoKGomFoOBqBRqJRaDQag8aicWg8moAmokloMpqCpqJpKBFNRzPQTDQLzUZz0Fw0D81HC9BCtAgtRkvQUrQMLUcr0Eq0Cq1Ga9BatA6tRxvQRrQJbUZb0Fa0DW1HO9BOtAvtRnvQXrQP7UcH0EF0CB1GR9BRdAwdRyfQSXQKnUZn0Fl0Dp1HF9BFdAldRlfQVXQNXUc30E10C91Gd9BddA/dRw/QQ/QIPUZP0FP0DD1HL9BL9Aq9Rm/QW/QOvUcf0Ef0CX1GX9BX9A19Rz/QT/QL/UZ/0F/0DyWhmITYhLiEZAnJE1IkpEyIT0iVkDohTULahHQJ6RMy/I+Gc+oOq1sAYOqmVtrUtm3bPraNvfdJbdup7Ta1bdu2beuu+/D9ilnzMINlxrJgWbFsWHYsBxaH5cRyYfFYbiwPlhfLh+XHCmAFsUJYYawIVhQrhhXHSmAlsVJYaawMVhYrh5XHKmAVsUpYZawKVhWrhlXHamA1sVpYbawOVherh9XHGmANsUZYY6wJ1hRrhjXHWmAtsVZYa6wN1hZrh7XHOmAdsU5YZ6wL1hXrhnXHMAzHCIzEKIzGGIzFOIzHBEzEJEzGFEzFNEzHDMzELMzGHMzFPMzHAizEAAYxhEVYAtYD64n1wnpjfbC+WD+sPzYAG4gNwgZjQ7Ch2DBsODYCG4mNwkZjY7Cx2DhsPDYBm4hNwiZjU7Cp2DQsEZuOzcBmYrOw2dgcbC42D5uPLcAWYouwxdgSbCm2DFuOrcBWYquw1VgStgZbi63D1mMbsI3YJmwztgXbim3DtmM7sJ3YLmw3tgfbi+3D9mMHsIPYIewwdgQ7ih3DjmMnsJPYKew0dgY7i53DzmMXsIvYJewydgW7il3DrmM3sJvYLew2dge7i93D7mMPsIfYI+wx9gR7ij3DnmMvsJfYK+w19gZ7i73D3mMfsI/YJ+wz9gX7in3DvmM/sJ/YL+w39gf7i/3DYvBkeHI8BZ4ST4WnxtPgafFYPB2eHs+AZ8Qz4ZnxLHhWPBueHc+Bx+E58Vx4PJ4bz4PnxfPh+fECeEG8EF4YL4IXxYvhxfESeEm8FF4aL4OXxcvh5fEKeEW8El4Zr4JXxavh1fEaeE28Fl4br4PXxWNj6uMN8IZ4I7wx3gRvijfDm+Mt8JZ4K7w13gZvi7fD2+Md8I54J7wz3gXvinfDu+MYjuMETuIUTuMMzuIczuMCLuISLuMKruIaruMGbuIWbuMO7uIe7uMBHuIAhzjCIzwB74H3xHvhvfE+eF+8H94fH4APxAfhg/Eh+FB8GD4cH4GPxEfho/Ex+Fh8HD4en4BPxCfhk/Ep+FR8Gp6IT8dn4DPxWfhsfA4+F5+Hz8cX4AvxRfhifAm+FF+GL8dX4CvxVfhqPAlfg6/FY2NiYjbgG/FN+GZ8C74V34Zvx3fgO/Fd+G58D74X34fvxw/gB/FD+GH8CH4UP4Yfx0/gJ/FT+Gn8DH4WP4efxy/gF/FL+GX8Cn4Vv4Zfx2/gN/Fb+G38Dn4Xv4ffxx/gD/FH+GP8Cf4Uf4Y/x1/gL/FX+Gv8Df4Wf4e/xz/gH/FP+Gf8C/4V/4Z/x3/gP/Ff+G/8D/4X/4fHEMmI5EQKIiWRikhNpCHSErFEOiI9kYHISGQiMhNZiKxENiI7kYOII3ISuYh4IjeRh8hL5CPyEwWIgkQhojBRhChKFCOKEyWIkkQpojRRhihLlCPKExWIikQlojJRhahKVCOqEzWImkQtojZRh6hL1CPqEw2IhkQjojHRhGhKNCOaEy2IlkQrojXRhmhLtCPaEx2IjkQnojPRhehKdCO6ExiBEwRBEhRBEwzBEhzBEwIhEhIhEwqhEhqhEwZhEhZhEw7hEh7hEwEREoCABCIiIoHoQfQkehG9iT5EX6If0Z8YQAwkBhGDiSHEUGIYMZwYQYwkRhGjiTHEWGIcMZ6YQEwkJhGTiSnEVGIakUhMJ2YQM4lZxGxiDjGXmEfMJxYQC4lFxGJiCbGUWEYsJ1YQK4lVxGoiiVhDrCXWEeuJDcRGYhOxmdhCbCW2EduJHcROYhexm9hD7CX2EfuJA8RB4hBxmDhCHCWOEceJE8RJ4hRxmjhDnCXOEeeJC8RF4hJxmbhCXCWuEdeJG8RN4hZxm7hD3CXuEfeJB8RD4hHxmHhCPCWeEc+JF8RL4hXxmnhDvCXeEe+JD8RH4hPxmfhCfCW+Ed+JH8RP4hfxm/hD/CX+ETFkMjI5mYJMSaYiU5NpyLRkLJmOTE9mIDOSmcjMZBYyK5mNzE7mIOPInGQuMp7MTeYh85L5yPxkAbIgWYgsTBYhi5LFyOJkCbIkWYosTZYhy5LlyPJkBbIiWYmsTFYhq5LVyOpkDbImWYusTdYh65L1yPpkA7Ih2YhsTDYhm5LNyOZkC7Il2YpsTbYh25LtyPZkB7Ij2YnsTHYhu5LdyO4kRuIkQZIkRdIkQ7IkR/KkQIqkRMqkQqqkRuqkQZqkRdqkQ7qkR/pkQIYkICGJyIhMIHuQPcleZG+yD9mX7Ef2JweQA8lB5OD/zsTkCHIkOYocTY4hx5LjyPHkBHIiOYmcTE4hp5LTyERyOjmDnEnOImeTc8i55DxyPrmAXEguIheTS8il5DJyObmCXEmuIleTSeQaci25jlxPbiA3kpvIzeQWciu5jdxO7iB3krvI3eQeci+5j9xPHiAPkofIw+QR8ih5jDxOniBPkqfI0+QZ8ix5jjxPXiAvkpfIy+QV8ip5jbxO3iBvkrfI2+Qd8i55j7xPPiAfko/Ix+QT8in5jHxOviBfkq/I1+Qb8i35jnxPfiA/kp/Iz+QX8iv5jfxO/iB/kr/I3+Qf8i/5j4yhklHJqRRUSioVlZpKQ6WlYql0VHoqA5WRykRlprJQWalsVHYqBxVH5aRyUfFUbioPlZfKR+WnClAFqUJUYaoIVZQqRhWnSlAlqVJUaaoMVZYqR5WnKlAVqUpUZaoKVZWqRlWnalA1qVpUbaoOVZeqR9WnGlANqUZUY6oJ1ZRqRjWnWlAtqVZUa6oN1ZZqR7WnOlAdqU5UZ6oL1ZXqRnWnMAqnCIqkKIqmGIqlOIqnBEqkJEqmFEqlNEqnDMqkLMqmHMqlPMqnAiqkAAUpREVUAtWD6kn1onpTfai+VD+qPzWAGkgNogZTQ6ih1DBqODWCGkmNokZTY6ix1DhqPDWBmkhNoiZTU6ip1DQqkZpOzaBmUrOo2dQcai41j5pPLaAWUouoxdQSaim1jFpOraBWUquo1VQStYZaS62j1lMbqI3UJmoztYXaSm2jtlM7qJ3ULmo3tYfaS+2j9lMHqIPUIeowdYQ6Sh2jjlMnqJPUKeo0dYY6S52jzlMXqIvUJeoydYW6Sl2jrlM3qJvULeo2dYe6S92j7lMPqIfUI+ox9YR6Sj2jnlMvqJfUK+o19YZ6S72j3lMfqI/UJ+oz9YX6Sn2jvlM/qJ/UL+o39Yf6S/2jYuhkdHI6BZ2STkWnptPQaelYOh2dns5AZ6Qz0ZnpLHRWOhudnc5Bx9E56Vx0PJ2bzkPnpfPR+ekCdEG6EF2YLkIXpYvRxekSdEm6FF2aLkOXpcvR5ekKdEW6El2ZrkJXpavR1ekadE26Fl2brkPXpevR9ekGdEO6Ed2YbkI3pZvRzekWdEu6Fd2abkO3pdvR7ekOdEe6E92Z7kJ3pbvR3WmMxmmCJmmKpmmGZmmO5mmBFmmJlmmFVmmN1mmDNmmLtmmHdmmP9umADmlAQxrREZ1A96B70r3o3nQfui/dj+5PD6AH0oPowfQQeig9jB5Oj6BH0qPo0fQYeiw9jh5PT6An0pPoyfQUeio9jU6kp9Mz6Jn0LHo2PYeeS8+j59ML6IX0InoxvYReSi+jl9Mr6JX0Kno1nUSvodfS6+j19AZ6I72J3kxvobfS2+jt9A56J72L3k3voffS++j99AH6IH2IPkwfoY/Sx+jj9An6JH2KPk2foc/S5+jz9AX6In2Jvkxfoa/S1+jr9A36Jn2Lvk3foe/S9+j79AP6If2Ifkw/oZ/Sz+jn9Av6Jf2Kfk2/od/S7+j39Af6I/2J/kx/ob/S3+jv9A/6J/2L/k3/of/S/+gYJhmTnEnBpGRSMamZNExaJpZJx6RnMjAZmUxMZiYLk5XJxmRncjBxTE4mFxPP5GbyMHmZfEx+pgBTkCnEFGaKMEWZYkxxpgRTkinFlGbKMGWZckx5pgJTkanEVGaqMFWZakx1pgZTk6nF1GbqMHWZekx9pgHTkGnENGaaME2ZZkxzpgXTkmnFtGbaMG2Zdkx7pgPTkenEdGa6MF2Zbkx3BmNwhmBIhmJohmFYhmN4RmBERmJkRmFURmN0xmBMxmJsxmFcxmN8JmBCBjCQQUzEJDA9mJ5ML6Y304fpy/Rj+jMDmIHMIGYwM4QZygxjhjMjmJHMKGY0M4YZy4xjxjMTmInMJGYyM4WZykxjEpnpzAxmJjOLmc3MYeYy85j5zAJmIbOIWcwsYZYyy5jlzApmJbOKWc0kMWuYtcw6Zj2zgdnIbGI2M1uYrcw2Zjuzg9kZG8PsZvYwe5l9zH7mAHOQOcQcZo4wR5ljzHHmBHOSiZNPM2eYs8w55jxzgbnIXGIuM1eYq8w15jpzg7nJ3GJuM3eYu8w95j7zgHnIPGIeM0+Yp8wz5jnzgnnJvGJeM2+Yt8w75j3zgfnIfGI+M1+Yr8w35jvzg/nJ/GJ+M3+Yv8w/JoZNxiZnU7Ap2VRsajYNm5aNZdOx6dkMbEY2E5uZzcJmZbOx2dkcbBybk83FxrO52TxsXjYfm58twBZkC7GF2SJsUbYYW5wtwZZkS7Gl2TJsWbYcW56twFZkK7GV2SpsVbYaW52twdZka7G12TpsXbYeW59twDZkG7GN2SZsU7YZ25xtwbZkW7Gt2TZsW7Yd257twHZkO7Gd2S5sV7Yb253FWJwlWJKlWJplWJblWJ4VWJGVWJlVWJXVWJ01WJO1WJt1WJf1WJ8N2JAFLGQRG7EJbA+2J9uL7c32Yfuy/dj+7AB2IDuIHcwOYYeyw9jh7Ah2JDuKHc2OYcey49jx7AR2IjuJncxOYaey09hEdjo7g53JzmJns3PYuew8dj67gF3ILmIXs0vYpewydjm7gl3JrmJXs0nsGnYtu45dz25gN7Kb2M3sFnYru43dzu5gd7K72N3sHnYvu4/dzx5gD7KH2MPsEfYoe4w9zp5gT7Kn2NPsGfYse449z15gL7KX2MvsFfYqe429zt5gb7K32NvsHfYue4+9zz5gH7KP2MfsE/Yp+4x9zr5gX7Kv2NfsG/Yt+459z35gP7Kf2M/sF/Yr+439zv5gf7K/2N/sH/Yv+4+N4ZJxybkUXEouFZeaS8Ol5WK5dFx6LgOXkcvEZeaycFm5bFx2LgcXx+XkcnHxXG4uD5eXy8fl5wpwBblCXGGuCFeUK8YV50pwJblSXGmuDFeWK8eV5ypwFblKXGWuCleVq8ZV52pwNblaXG2uDleXq8fV5xpwDblGXGOuCdeUa8Y151pwLblWXGuuDdeWa8e15zpwHblOXGeuC9eV68Z15zAO5wiO5CiO5hiO5TiO5wRO5CRO5hRO5TRO5wzO5CzO5hzO5TzO5wIu5AAHOcRFXALXg+vJ9eJ6c324vlw/rj83gBvIDeIGc0O4odwwbjg3ghvJjeJGc2O4sdw4bjw3gZvITeImc1O4qdw0LpGbzs3gZnKzuNncHG4uN4+bzy3gFnKLuMXcEm4pt4xbzq3gVnKruNVcEreGW8ut49ZzG7iN3CZuM7eF28pt47ZzO7id3C5uN7eH28vt4/ZzB7iD3CHuMHeEO8od445zJ7iT3CnuNHeGO8ud485zF7iL3CXuMneFu8pd465zN7ib3C3uNneHu8vd4+5zD7iH3CPuMfeEe8o9455zL7iX3CvuNfeGe8u9495zH7iP3CfuM/eF+8p9475zP7if3C/uN/eH+8v942L4ZHxyPgWfkk/Fp+bT8Gn5WD4dn57PwGfkM/GZ+Sx8Vj4bn53PwcfxOflcfDyfm8/D5+Xz8fn5AnxBvhBfmC/CF+WL8cX5EnxJvhRfmi/Dl+XL8eX5CnxFvhJfma/CV+Wr8dX5GnxNvhZfm6/D1+Xr8fX5BnxDvhHfmG/CN+Wb8c35FnxLvhXfmm/Dt+Xb8e35DnxHvhPfme/Cd+W78d15jMd5gid5iqd5hmd5jud5gRd5iZd5hVd5jdd5gzd5i7d5h3d5j/f5gA95wEMe8RGfwPfge/K9+N58H74v34/vzw/gB/KD+MH8EH4oP4wfzo/gR/Kj+NH8GH4sP44fz0/gJ/KT+Mn8FH4qP41P5KfzM/iZ/Cx+Nj+Hn8vP4+fzC/iF/CJ+Mb+EX8ov45fzK/iV/Cp+NZ/Er+HX8uv49fwGfiO/id/Mb+G38tv47fwOfie/i9/N7+H/rxz7+QP8Qf4Qf5g/wh/lj/HH+RP8Sf4Uf5o/wyfy5/jz/AX+In+Jv8xf4a/y1/jr/A3+Jn+Lv83f4e/y9/j7/AP+If+If8w/4Z/yz/jn/Av+Jf+Kf82/4d/y7/j3/Af+I/+J/8x/4b/y3/jv/A/+J/+L/83/4f/y//gYIZmQXEghpBRSCamFNEJaIVZIJ6QXMggZhUxCZiGLkFXIJmQXcghxQk4hlxAv5BbyCHmFfEJ+oYBQUCgkFBaKCEWFYkJxoYRQUigllBbKCGWFckJ5oYJQUagkVBaqCFWFakJ1oYZQU6gl1BbqCHWFekJ9oYHQUGgkNBaaCE2FZkJzoYXQUmgltBbaCG2FdkJ7oYPQUegkdBa6CF2FbkJ3ARNwgRBIgRJogRFYgRN4QRBEQRJkQRFUQRN0wRBMwRJswRFcwRN8IRBCAQhQQEIkJAg9hJ5CL6G30EfoK/QT+gsDhIHCIGGwMEQYKgwThgsjhJHCKGG0MEYYK4wTxgsThInCJGGyMEWYKkwTEoXpwgxhpjBLmC3MEeYK84T5wgJhobBIWCwsEZYKy4TlwgphpbBKWC0kCWuEtcI6Yb2wQdgobBI2C1uErcI2YbuwQ9gp7BJ2C3uEvcI+Yb9wQDgoHBIOC0eEo8Ix4bhwQjgpnBJOC2eEs8I54bxwQbgoXBIuC1eEq8I14bpwQ7gp3BJuC3eEu8I94b7wQHgoPBIeC0+Ep8Iz4bnwQngpvBJeC2+Et8I74b3wQfgofBI+C1+Er8I34bvwQ/gp/BJ+C3+Ev8I/IUZMJiYXU4gpxVRiajGNmFaMFdOJ6cUMYkYxk5hZzCJmFbOJ2cUcYpyYU8wlxou5xTxiXjGfmF8sIBYUC4mFxSJiUbGYWFwsIZYUS4mlxTJiWbGcWF6sIFYUK4mVxSpiVbGaWF2sIdYUa4m1xTpiXbGeWF9sIDYUG4mNxSZiU7GZ2FxsIbYUW4mtxTZiW7Gd2F7sIHYUO4mdxS5iV7Gb2F3ERFwkRFKkRFpkRFbkRF4URFGURFlURFXURF00RFO0RFt0RFf0RF8MxFAEIhSRGIkJYg+xp9hL7C32EfuK/cT+4gBxoDhIHCwOEYeKw8Th4ghxpDhKHC2OEceK48Tx4gRxojhJnCxOEaeK08REcbo4Q5wpzhJni3PEueI8cb64QFwoLhIXi0vEpeIycbm4QlwprhJXi0niGnGtuE5cL24QN4qbxM3iFnGruE3cLu4Qd4q7xN3iHnGvuE/cLx4QD4qHxMPiEfGoeEw8Lp4QT4qnxNPiGfGseE48L14QL4qXxMviFfGqeE28Lt4Qb4q3xNviHfGueE+8Lz4QH4qPxMfiE/Gp+Ex8Lr4QX4qvxNfiG/Gt+E58L34QP4qfxM/iF/Gr+E38Lv4Qf4q/xN/iH/Gv+E+MkZJJyaUUUkoplZRaSiOllWKldFJ6KYOUUcokZZaySFmlbFJ2KYcUJ+WUcknxUm4pj5RXyifllwpIBaVCUmGpiFRUKiYVl0pIJaVSUmmpjFRWKieVlypIFaVKUmWpilRVqiZVl2pINaVaUm2pjlRXqifVlxpIDaVGUmOpidRUaiY1l1pILaVWUmupjdRWaie1lzpIHaVOUmepi9RV6iZ1lzAJlwiJlCiJlhiJlTiJlwRJlCRJlhRJlTRJlwzJlCzJlhzJlTzJlwIplIAEJSRFUoLUQ+op9ZJ6S32kvlI/qb80QBooDZIGS0OkodIwabg0QhopjZJGS2OksdI4abw0QZooTZImS1OkqdI0KVGaLs2QZkqzpNnSHGmuNE+aLy2QFkqLpMXSEmmptExaLq2QVkqrpNVSkrRGWiutk9ZLG6SN0iZps7RF2iptk7ZLO6Sd0i5pt7RH2ivtk/ZLB6SD0iHpsHREOiodk45LJ6ST0inptHRGOiudk85LF6SL0iXpsnRFuipdk65LN6Sb0i3ptnRHuivdk+5LD6SH0iPpsfREeio9k55LL6SX0ivptfRGeiu9k95LH6SP0ifps/RF+ip9k75LP6Sf0i/pt/RH+iv9k2LkZHJyOYWcUk4lp5bTyGnlWDmdnF7OIGeUM8mZ5SxyVjmbnF3OIcfJOeVccrycW84j55XzyfnlAnJBuZBcWC4iF5WLycXlEnJJuZRcWi4jl5XLyeXlCnJFuZJcWa4iV5WrydXlGnJNuZZcW64j15XryfXlBnJDuZHcWG4iN5Wbyc3lFnJLuZXcWm4jt5Xbye3lDnJHuZPcWe4id5W7yd1lTMZl4v/QTBYTEyOzMifzsiCLsiTLsiKrsibrsiGbsiXbsiO7sif7ciCHMpChjORITpB7yD3lXnJvuY/cV+4n95cHyAPlQfJgeYg8VB4mD5dHyCPlUfJoeYw8Vh4nj5cnyBPlSfJkeYo8VZ4mJ8rT5RnyTHmWPFueI8+V58nz5QXyQnmRvFheIi+Vl8nL5RXySnmVvFpOktfIa+V18np5g7xR3iRvlrfIW+Vt8nZ5h7xT3iXvlvfIe+V98n75gHxQPiQflo/IR+Vj8nH5hHxSPiWfls/IZ+Vz8nn5gnxRviRflq/IV+Vr8nX5hnxTviXflu/Id+V78n35gfxQfiQ/lp/IT+Vn8nP5hfxSfiW/lt/Ib+V38nv5g/xR/iR/lr/IX+Vv8nf5h/xT/iX/lv/If+V/coySTEmupFBSKqmU1EoaJa0Sq6RT0isZlIxKJiWzkkXJqmRTsis5lDglp5JLiVdyK3mUvEo+Jb9SQCmoFFIKK0WUokoxpbhSQimplFJKK2WUsko5pbxSQamoVFIqK1WUqko1pbpSQ6mp1FJqK3WUuko9pb7SQGmoNFIaK02UpkozpbnSQmmptFJaK22Utko7pb3SQemodFI6K12Urko3pbuCKbhCKKRCKbTCKKzCKbwiKKIiKbKiKKqiKbpiKKZiKbbiKK7iKb4SKKECFKggJVISlB5KT6WX0lvpo/RV+in9lQHKQGWQMlgZogxVhinDlRHKSGWUMloZo4xVxinjlQnKRGWSMlmZokxVpimJynRlhjJTmaXMVuYoc5V5ynxlgbJQWaQsVpYoS5VlynJlhbJSWaWsVpKUNcpaZZ2yXtmgbFQ2KZuVLcpWZZuyXdmh7FR2KbuVPcpeZZ+yXzmgHFQOKYeVI8pR5ZhyXDmhnFROKaeVM8pZ5ZxyXrmgXFQuKZeVK8pV5ZpyXbmh3FRuKbeVO8pd5Z5yX3mgPFQeKY+VJ8pT5ZnyXHmhvFReKa+VN8pb5Z3yXvmgfFQ+KZ+VL8pX5ZvyXfmh/FR+Kb+VP8pf5Z8SoyZTk6sp1JRqKjW1mkZNq8aq6dT0agY1o5pJzaxmUbOq2dTsag41Ts2p5lLj1dxqHjWvmk/NrxZQC6qF1MJqEbWoWkwtrpZQS6ql1NJqGbWsWk4tr1ZQK6qV1MpqFbWqWk2trtZQa6q11NpqHbWuWk+trzZQG6qN1MZqE7Wp2kxtrrZQW6qt1NZqG7Wt2k5tr3ZQO6qd1M5qF7Wr2k3trmIqrhIqqVIqrTIqq3IqrwqqqEqqrCqqqmqqrhqqqVqqrTqqq3qqrwZqqAIVqkiN1AS1h9pT7aX2VvuofdV+an91gDpQHaQOVoeoQ9Vh6nB1hDpSHaWOVseoY9Vx6nh1gjoxdpI6WZ2iTlWnqYnqdHWGOlOdpc5W56hz1XnqfHWBulBdpC5Wl6hL1WXqcnWFulJdpa5Wk9Q16lp1nbpe3aBuVDepm9Ut6lZ1m7pd3aHuVHepu9U96l51n7pfPaAeVA+ph9Uj6lH1mHpcPaGeVE+pp9Uz6ln1nHpevaBeVC+pl9Ur6lX1mnpdvaHeVG+pt9U76l31nnpffaA+VB+pj9Un6lP1mfpcfaG+VF+pr9U36lv1nfpe/aB+VD+pn9Uv6lf1m/pd/aH+VH+pv9U/6l/1nxqjJdOSaym0lFoqLbWWRkurxWrptPRaBi2jlknLrGXRsmrZtOxaDi1Oy6nl0uK13FoeLa+WT8uvFdAKaoW0wloRrahWTCuuldBKaqW00loZraxWTiuvVdAqapW0yloVrapWTauu1dBqarW02lodra5WT6uvNdAaao20xloTranWTGuutdBaaq201lobra3WTmuvddA6ap20zloXravWTeuuYRquERqpURqtMRqrcRqvCZqoSZqsKZqqaZquGZqpWZqtOZqreZqvBVqoAQ1qSIu0BK2H1lPrpfXW+mh9tX5af22ANlAbpA3WhmhDtWHacG2ENlIbpY3WxmhjtXHaeG2CNlGbpE3WpmhTtWlaojZdm6HN1GZps7U52lxtnjZfW6At1BZpi7Ul2lJtmbZcW6Gt1FZpq7UkbY22Vlunrdc2aBu1TdpmbYu2Vdumbdd2aDu1XdpubY+2V9un7dcOaAe1Q9ph7Yh2VDumHddOaCe1U9pp7Yx2VjunndcuaBe1S9pl7Yp2VbumXdduaDe1W9pt7Y52V7un3dceaA+1R9pj7Yn2VHumPddeaC+1V9pr7Y32Vnunvdc+aB+1T9pn7Yv2Vfumfdd+aD+1X9pv7Y/2V/unxejJ9OR6Cj2lnkpPrafR0+qxejo9vZ5Bz6hn0jPrWfSsejY9u55Dj9Nz6rn0eD23nkfPq+fT8+sF9IJ6Ib2wXkQvqhfTi+sl9JJ6Kb20XkYvq5fTy+sV9Ip6Jb2yXkWvqlfTq+s19Jp6Lb22Xkevq9fT6+sN9IZ6I72x3kRvqjfTm+st9JZ6K7213kZvq7fT2+sd9I56J72z3kXvqnfTu+uYjuuETuqUTuuMzuqczuuCLuqSLuuKruqaruuGbuqWbuuO7uqe7uuBHupAhzrSIz1B76H31HvpvfU+el+9n95fH6AP1Afpg/Uh+lB9mD5cH6GPTBqlj9bH6GP1cfp4fYI+UZ+kT9an6FP1aXqiPl2foc/UZ+mz9Tn6XH2ePl9foC/UF+mL9SX6Un2Zvlxfoa/UV+mr9SR9jb5WX6ev1zfoG/VN+mZ9i75V36Zv13foO/Vd+m59j75X36fv1w/oB/VD+mH9iH5UP6Yf10/oJ/VT+mn9jH5WP6ef1y/oF/VL+mX9in5Vv6Zf12/oN/Vb+m39jn5Xv6ff1x/oD/VH+mP9if5Uf6Y/11/oL/VX+mv9jf5Wf6e/1z/oH/VP+mf9i/5V/6Z/13/oP/Vf+m/9j/5X/6fHGMmM5EYKI6WRykhtpDHSGrFGOiO9kcHIaGQyMhtZjKxGNiO7kcOIM3IauYx4I7eRx8hr5DPyGwWMgkYho7BRxChqFDOKGyWMkkYpo7RRxihrlDPKGxWMikYlo7JRxahqVDOqGzWMmkYto7ZRx6hr1DPqGw2MhkYjo7HRxGhqNDOaGy2MlkYro7XRxmhrtDPaGx2MjkYno7PRxehqdDO6G5iBG4RBGpRBG4zBGpzBG4IhGpIhG4qhGpqhG4ZhGpZhG47hGp7hG4ERGsCABjIiI8HoYfQ0ehm9jT5GX6Of0d8YYAw0BhmDjSHGUGOYMdwYYYw0RhmjjTHGWGOcMd6YYEw0JhmTjSnGVGOakWhMN2YYM41ZxmxjjjHXmGfMNxYYC41FxmJjibHUWGYsN1YYK41VxmojyVhjrDXWGeuNDcZGY5Ox2dhibDW2GduNHcZOY5ex29hj7DX2GfuNA8ZB45Bx2DhiHDWOGceNE8ZJ45Rx2jhjnDXOGeeNC8ZF45Jx2bhiXDWuGdeNG8ZN45Zx27hj3DXuGfeNB8ZD45Hx2HhiPDWeGc+NF8ZL45Xx2nhjvDXeGe+ND8ZH45Px2fhifDW+Gd+NH8ZP45fx2/hj/DX+GTFmMjO5mcJMaaYyU5tpzLRmrJnOTG9mMDOamczMZhYzq5nNzG7mMOPMnGYuM97MbeYx8/4XQpuFzMJmEbOoWcwsbpYwS5qlzNJmGbOsWc4sb1YwK5qVzMpmFbOqWc2sbtYwa5q1zNpmHbOuWc+sbzYwG5qNzMZmE7Op2cxsbrYwW5qtzNZmG7Ot2c5sb3YwO5qdzM5mF7Or2c3sbmImbhImaVImbTIma3ImbwqmaEqmbCqmamqmbhqmaVqmbTqma3qmbwZmaAITmsiMzASzh9nT7GX2NvuYfc1+Zn9zgDnQHGQONoeYQ81h5nBzhDnSHGWONseYY81x5nhzgjnRnGRONqeYU81pZqI53ZxhzjRnmbPNOeZcc54531xgLjQXmYvNJeZSc5m53FxhrjRXmavNJHONudZcZ643N5gbzU3mZnOLudXcZm43d5g7zV3mbnOPudfcZ+43D5gHzUPmYfOIedQ8Zh43T5gnzVPmafOMedY8Z543L5gXzUvmZfOKedW8Zl43b5g3zVvmbfOOede8Z943H5gPzUfmY/OJ+dR8Zj43X5gvzVfma/ON+dZ8Z743P5gfzU/mZ/OL+dX8Zn43f5g/zV/mb/OP+df8Z8ZYyazkVgorpZXKSm2lsdJasVY6K72VwcpoZbIyW1msrFY2K7uVw4qzclq5rHgrt5XHymvls/JbBayCViGrsFXEKmoVs4pbJaySVimrtFXGKmuVs8pbFayKViWrslXFqmpVs6pbNayaVi2rtlXHqmvVs+pbDayGViOrsdXEamo1s5pbLayWViurtdXGamu1s9pbHayOViers9XF6mp1s7pbmIVbhEValEVbjMVanMVbgiVakiVbiqVamqVbhmValmVbjuVanuVbgRVawIIWsiIrweph9bR6Wb2tPlZfq5/V3xpgDbQGWYOtIdZQa5g13BphjbRGWaOtMdZYa5w13ppgTbQmWZOtKdZUa5qVaE23ZlgzrVnWbGuONdeaZ823FlgLrUXWYmuJtdRaZi23VlgrrVXWaivJWmOttdZZ660N1kZrk7XZ2mJttbZZ260d1k5rl7Xb2mPttfZZ+60D1kHrkHXYOmIdtY5Zx60T1knrlHXaOmOdtc5Z560L1kXrknXZumJdta5Z160b1k3rlnXbumPdte5Z960H1kPrkfXYemI9tZ5Zz60X1kvrlfXaemO9td5Z760P1kfrk/XZ+mJ9tb5Z360f1k/rl/Xb+mP9tf5ZMXYyO7mdwk5pp7JT22nstHasnc5Ob2ewM9qZ7Mx2Fjurnc3Obuew4+ycdi473s5t57Hz2vns/HYBu6BdyC5sF7GL2sXs4nYJu6Rdyi5tl7HL2uXs8nYFu6Jdya5sV7Gr2tXs6nYNu6Zdy65t17Hr2vXs+nYDu6HdyG5sN7Gb2s3s5nYLu6Xdym5tt7Hb2u3s9nYHu6Pdye5sd7G72t3s7jZm4zZhkzZl0zZjszZn87Zgi7Zky7Ziq7Zm67Zhm7Zl27Zju7Zn+3ZghzawoY3syE6we9g97V52b7uP3dfuZ/e3B9gD7UH2YHuIPdQeZg+3R9gj7VH2aHuMPdYeZ4+3J9gT7Un2ZHuKPdWeZifa0+0Z9kx7lj3bnmPPtefZ8+0F9kJ7kb3YXmIvtZfZy+0V9kp7lb3aTrLX2GvtdfZ6e4O90d5kb7a32FvtbfZ2e4e9095l77b32HvtffZ++4B90D5kH7aP2EftY/Zx+4R90j5ln7bP2Gftc/Z5+4J90b5kX7av2Ffta/Z1+4Z9075l37bv2Hfte/b92JiYGPuR/dh+Yj+1n9nP7Rf2S/uV/dp+Y7+139nv7Q/2R/uT/dn+Yn+1v9nf7R/2T/uX/dv+Y/+1/9kxTjInuZPCSemkclI7aZy0TqyTzknvZHAyOpmczE4WJ6uTzcnu5HDinJxOLifeye3kcfI6+Zz8TgGnoFPIKewUcYo6xZziTgmnpFPKKe2Ucco65ZzyTgWnolPJqexUcao61ZzqTg2nplPLqe3Uceo69Zz6TgOnodPIaew0cZo6zZzmTgunpdPKae20cdo67Zz2Tgeno9PJ6ex0cbo63ZzuDubgDuGQDuXQDuOwDufwjuCIjuTIjuKojubojuGYjuXYjuO4juf4TuCEDnCgg5zISXB6OD2dXk5vp4/T1+nn9HcGOAOdQc5gZ4gz1BnmDHdGOCOdUc5oZ4wz1hnnjHcmOBOdSc5kZ4oz1ZnmJDrTnRnOTGeWM9uZ48x15jnznQXOQmeRs9hZ4ix1ljnLnRXOSmeVs9pJctY4a511znpng7PR2eRsdrY4W51tznZnh7PT2eXsdvY4e519zn7ngHPQOeQcdo44R51jznHnhHPSOeWcds44Z51zznnngnPRueRcdq44V51rznXnhnPTueXcdu44d517zn3ngfPQeeQ8dp44T51nznPnhfPSeeW8dt44b513znvng/PR+eR8dr44X51vznfnh/PT+eX8dv44f51/ToybzE3upnBTuqnc1G4aN60b66Zz07sZ3IxuJjezm8XN6mZzs7s53Dg3p5vLjXdzu3ncvG4+N79bwC3oFnILu0Xcom4xt7hbwi3plnJLu2Xcsm45t7xbwa3oVnIru1Xcqm41t7pbw63p1nJru3Xcum49t77bwG3oNnIbu03cpm4zt7nbwm3ptnJbu23ctm47t73bwe3odnI7u13crm43t7uLubhLuKRLubTLuKzLubwruKIrubKruKqrubpruKZrubbruK7rub4buKELXOgiN3IT3B5uT7eX29vt4/Z1+7n93QHuQHeQO9gd4g51h7nD3RHuSHeUO9od4451x7nj3QnuRHeSO9md4k51p7mJ7nR3hjvTneXOdue4c9157nx3gbvQXeQudpe4S91l7nJ3hbvSXeWudpPcNe5ad5273t3gbnQ3uZvdLe5Wd5u73d3h7nR3ubvdPe5ed5+73z3gHnQPuYfdI+5R95h73D3hnnRPuafdM+5Z95x73r3gXnQvuZfdK+5V95p73b3h3nRvubfdO+5d9557333gPnQfuY/dJ+5T95n73H3hvnRfua/dN+5b95373v3gfnQ/uZ/dL+5X95v73f3h/nR/ub/dP+5f958b4yXzknspvJReKi+1l8ZL68V66bz0XgYvo5fJy+xl8bJ62bzsXg4vzsvp5fLivdxeHi+vl8/L7xXwCnqFvMJeEa+oV8wr7pXwSnqlvNJeGa+sV84r71XwKnqVvMpeFa+qV82r7tXwanq1vNpeHa+uV8+r7zXwGnqNvMZeE6+p18xr7rXwWnqtvNZeG6+t185r73XwOnqdvM5eF6+r183r7mEe7hEe6VEe7TEe63Ee7wme6Eme7Cme6mme7hme6Vme7Tme63me7wVe6AEPesiLvASvh9fT6+X19vp4fb1+Xn9vgDfQG+QN9oZ4Q71h3nBvhDfSG+WN9sZ4Y71x3nhvgjfRm+RN9qZ4U71pXqI33ZvhzfRmebO9Od5cb54331vgLfQWeYu9Jd5Sb5m33FvhrfRWeau9JG+Nt9Zb5633NngbvU3eZm+Lt9Xb5m33dng7vV3ebm+Pt9fb5+33DngHvUPeYe+Id9Q75h33TngnvVPeae+Md9Y75533LngXvUveZe+Kd9W75l33bng3vVvebe+Od9e75933HngPvUfeY++J99R75j33XngvvVfea++N99Z75733PngfvU/eZ++L99X75n33fng/vV/eb++P99f758X4yfzkfgo/pZ/KT+2n8dP6sX46P72fwc/oZ/Iz+1n8rH42P7ufw4/zc/q5/Hg/t5/Hz+vn8/P7BfyCfiG/sF/EL+oX84v7JfySfim/tF/GL+uX88v7FfyKfiW/sl/Fr+pX86v7Nfyafi2/tl/Hr+vX8+v7DfyGfiO/sd/Eb+o385v7LfyWfiu/td/Gb+u389v7HfyOfie/s9/F7+p387v7mI/7hE/6lE/7jM/6nM/7gi/6ki/7iq/6mq/7hm/6lm/7ju/6nu/7gR/6wIc+8iM/we/h9/R7+b39Pn5fv5/f3x/gD/QH+YP9If5Qf5g/3B/hj/RH+aP9Mf5Yf5w/3p/gT/Qn+ZP9Kf5Uf5qf6E/3Z/gz/Vn+bH+OP9ef58/3F/gL/UX+Yn+Jv9Rf5i/3V/gr/VX+aj/JX+Ov9df56/0N/kZ/k7/Z3+Jv9bf52/0d/k5/l7/b3+Pv9ff5+/0D/kH/kH/YP+If9Y/5x/0T/kn/lH/aP+Of9c/55/0L/kX/kn/Zv+Jf9a/51/0b/k3/ln/bv+Pf9e/59/0H/kP/kf/Yf+I/9Z/5z/0X/kv/lf/af+O/9d/57/0P/kf/k//Z/+J/9b/53/0f/k//l//b/+P/9f/5MUGyIHmQIkgZpApSB2mCtEFskC5IH2QIMgaZgsxBliBrkC3IHuQI4oKcQa4gPsgd5AnyBvmC/EGBoGBQKCgcFAmKBsWC4kGJoGRQKigdlAnKBuWC8kGFoGJQKagcVAmqBtWC6kGNoGZQK6gd1AnqBvWC+kGDoGHQKGgcNAmaBs2C5kGLoGXQKmgdtAnaBu2C9kGHoGPQKegcdAm6Bt2C7gEW4AERkAEV0AETsAEX8IEQiIEUyIESqIEW6IERmIEV2IETuIEX+EEQhAEIYICCKEgIegQ9g15B76BP0DfoF/QPBgQDg0HB4GBIMDQYFgwPRgQjg1HB6GBMMDYYF4wPJgQTg0nB5GBKMDWYFiQG04MZwcxgVjA7mBPMDeYF84MFwcJgUbA4WBIsDZYFy4MVwcpgVbA6SArWBGuDdcH6YEOwMdgUbA62BFuDbcH2YEewM9gV7A72BHuDfcH+4EBwMDgUHA6OBEeDY8Hx4ERwMjgVnA7OBGeDc8H54EJwMbgUXA6uBFeDa8H14EZwM7gV3A7uBHeDe8H94EHwMHgUPA6eBE+DZ8Hz4EXwMngVvA7eBG+Dd8H74EPwMfgUfA6+BF+Db8H34EfwM/gV/A7+BH+Df0FMmCxMHqYIU4apwtRhmjBtGBumC9OHGcKMYaYwc5glzBpmC7OHOcK4MGeYK4wPc4d5wrxhvjB/WCAsGBYKC4dFwqJhsbB4WCIsGZYKS4dlwrJhubB8WCGsGFYKK4dVwqphtbB6WCOsGdYKa4d1wrphvbB+2CBsGDYKG4dNwqZhs7B52CJsGbYKW4dtwrZhu7B92CHsGHYKO4ddwq5ht7B7iIV4SIRkSIV0yIRsyIV8KIRiKIVyqIRqqIV6aIRmaIV26IRu6IV+GIRhCEIYojAKE8IeYc+wV9g77BP2DfuF/cMB4cBwUDg4HBIODYeFw8MR4chwVDg6HBOODceF48MJ4cRwUjg5nBJODaeFieH0cEY4M5wVzg7nhHPDeeH8cEG4MFwULg6XhEvDZeHycEW4MlwVrg6TwjXh2nBduD7cEG4MN4Wbwy3h1nBbuD3cEe4Md4W7wz3h3nBfuD88EB4MD4WHwyPh0fBYeDw8EZ4MT4WnwzPh2fBceD68EF4ML4WXwyvh1fBaeD28Ed4Mb4W3wzvh3fBeeD98ED4MH4WPwyfh0/BZ+Dx8Eb4MX4Wvwzfh2/Bd+D78EH4MP4Wfwy/h1/Bb+D38Ef4Mf4W/wz/h3/BfGAOSgeQgBUgJUoHUIA1IC2JBOpAeZAAZQSaQGWQBWUE2kB3kAHEgJ8gF4kFukAfkBflAflAAFASFQGFQBBQFxUBxUAKUBKVAaVAGlAXlQHlQAVQElUBlUAVUBdVAdVAD1AS1QG1QB9QF9UB90AA0BI1AY9AENAXNQHPQArQErUBr0Aa0Be1Ae9ABdASdQGfQBXQF3UB3gAEcEIAEFKABA1jAAR4IQAQSkIECVKABHRjABBawgQNc4AEfBCAEAECAQAQSQA/QE/QCvUEf0Bf0A/3BADAQDAKDwRAwFAwDw8EIMBKMAqPBGDAWjAPjwQQwEUwCk8EUMBVMA4lgOpgBZoJZYDaYA+aCeWA+WAAWgkVgMVgCloJlYDlYAVaCVWA1SAJrwFqwDqwHG8BGsAlsBlvAVrANbAc7wE6wC+wGe8BesA/sBwfAQXAIHAZHwFFwDBwHJ8BJcAqcBmfAWXAOnAcXwEVwCVwGV8BVcA1cBzfATXAL3AZ3wF1wD9wHD8BD8Ag8Bk/AU/AMPAcvwEvwCrwGb8Bb8A68Bx/AR/AJfAZfwFfwDXwHP8BP8Av8Bn/AX/APxMBkMDlMAVPCVDA1TAPTwliYDqaHGWBGmAlmhllgVpgNZoc5YBzMCXPBeJgb5oF5YT6YHxaABWEhWBgWgUVhMVgcloAlYSlYGpaBZWE5WB5WgBVhJVgZVoFVYTVYHdaANWEtWBvWgXVhPVgfNoANYSPYGDaBTWEz2By2gC1hK9gatoFtYTvYHnaAHWEn2Bl2gV1hN9gdYhCHBCQhBWnIQBZykIcCFKEEZahAFWpQhwY0oQVt6EAXetCHAQwhgBAiGMEE2AP2hL1gb9gH9oX9YH84AA6Eg+BgOAQOhcPgcDgCjoSj4Gg4Bo6F4+B4OAFOhJPgZDgFToXTYCKcDmfAmXAWnA3nwLlwHpwPF8CFcBFcDJfApXAZXA5XwJVwFVwNk+AauBaug+vhBrgRboKb4Ra4FW6D2+EOuBPugrvhHrgX7oP74QF4EB6Ch+EReBQeg8fhCXgSnoKn4Rl4Fp6D5+EFeBFegpfhFXgVXoPX4Q14E96Ct+EdeBfeg/fhA/gQPoKP4RP4FD6Dz+EL+BK+gq/hG/gWvoPv4Qf4EX6Cn+EX+BV+g9/hD/gT/oK/4R/4F/6DMSgZSo5SoJQoFUqN0qC0KBalQ+lRBpQRZUKZURaUFWVD2VEOFIdyolwoHuVGeVBelA/lRwVQQVQIFUZFUFFUDBVHJVBJVAqVRmVQWVQOlUcVUEVUCVVGVVBVVA1VRzVQTVQL1UZ1UF1UD9VHDVBD1Ag1Rk1QU9QMNUctUEvUCrVGbVBb1A61Rx1QR9QJdUZdUFfUDXVHGMIRgUhEIRoxiEUc4pGARCQhGSlIRRrSkYFMZCEbOchFHvJRgEIEEEQIRSgB9UA9US/UG/VBfVE/1B8NQAPRIDQYDUFD0TA0HI1AI9EoNBqNQWPRODQeTUAT0SQ0GU1BU9E0lIimoxloJpqFZqM5aC6ah+ajBWghWoQWoyVoKVqGlqMVaCVahVajJLQGrUXr0Hq0AW1Em9BmtAVtRdvQdrQD7US70G60B+1F+9B+dAAdRIfQYXQEHUXH0HF0Ap1Ep9BpdAadRefQeXQBXUSX0GV0BV1F19B1dAPdRLfQbXQH3UX30H30AD1Ej9Bj9AQ9Rc/Qc/QCvUSv0Gv0Br1F79B79AF9RJ/QZ/QFfUXf0Hf0A/1Ev9Bv9Af9Rf9QTJQsSh6liFJGqaLUUZoobRQbpYvSRxmijFGmKHOUJcoaZYuyRzmiuChnlCuKj3JHeaK8aWOi/FGBqGBUKCocFYmKRsWi4lGJqGRUKiodlYnKRuWi8lGFqGJUKaocVYmqRtWi6lGNqGZUK6od1YnqRvWi+lGDqGHUKGocNYmaRs2i5lGLqGXUKmodtYnaRu2i9lGHqGPUKeocdYm6Rt2i7hEW4RERkREV0RETsREX8ZEQiZEUyZESqZEW6ZERmZEV2ZETuZEX+VEQhRGIYISiKEqIekQ9o15R76hP1DfqF/WPBkQDo0HR4GhINDQaFg2PRkQjo1HR6GhMNDYaF42PJkQTo0nR5GhKNDWaFiVG06MZ0cxoVjQ7mhPNjeZF86MF0cJoUbQ4WhItjZZFy6MV0cpoVbQ6SorWRGujddH6aEO0MdoUbY62RFujbdH2aEe0M9oV7Y72RHujfdH+6EB0MDoUHY6OREejY9Hx6ER0MjoVnY7ORGejc9H56EJ0MboUXY6uRFeja9H16EZ0M7oV3Y7uRHeje9H96EH0MHoUPY6eRE+jZ9Hz6EX0MnoVvY7eRG+jd9H76EP0MfoUfY6+RF+jb9H36Ef0M/oV/Y7+RH+jf1FMQrKE5AkpElImpEpInZAmIW1CbEK6hPQJGRIyJmRKyJyQJSFrQraE7Ak5EuIScibkSoj/H3v3ACa5lvcPPI2xbdu2bdu2FdtOemzbtm3btu35P7ene+7M9Nx3/3f3vrt33/p9nqf7VKdTJ6h8z0lSlRSaCk2NpkHTounQ9GgGNCOaCc2MZkGzotnQ7GgONCeaC82N5kHzovnQ/GgBtCBaCC2MFkGLosXQ4mgJtCRaCi2NlkHLouXQ8mgFtCJaCa2MVkGrotXQ6mgNtCZaC62N1kHrovXQ+mgDtCHaCG2MNkGbos3Q5mgLtCXaCm2NtkHbou3Q9mgHtCPaCe2MdkG7ot3Q7mgPtCfaC+2N9kH7ov3Q/ugAdCA6CB2MDkGHosNQFMVQHCVQEqVQGmVQFuVQHhVQEZVQGVVQFdVQHTVQE7VQG3VQF/VQHw1Dh6Mj0JHoKHQ0OgYdi45Dx6MT0InoJHQyOgWdik5Dp6Mz0JnoLHQ2Ogedi85D56ML0IXoInQxugRdii5Dl6Mr0JXoKnQ1ugZdi65D16Mb0I3oJnQzugXdim5Dt6M70J3oLnQ3ugfdi+5D96MH0IPoIfQwegQ9ih5Dj6Mn0JPoKfQ0egY9i55Dz6MX0IvoJfQyegW9il5Dr6M30JvoLfQ2ege9i95D76MP0IfoI/Qx+gR9ij5Dn6Mv0JfoK/Q1+gZ9i75D36Mf0I/oJ/Qz+gVFsCAsGAvBQrFoWHQsBhYTi4XFxuJgcbF4WHwsAZYQS4QlxpJgSbFkWHIsBZYSS4WlxtJgabF0WHosA5YRy4RlxrJgWbFsWHYsB5YTy4XlxvJgebF8WH6sAFYQK4QVxopgRbFiWHGsBFYSK4WVxspgZbFyWHmsAlYRq4RVxqpgVbFqWHWsBlYTq4XVxupgdbF6WH2sAdYQa4Q1xppgTbFmWHOsBdYSa4W1xtpgbbF2WHusA9YR64R1xrpgXbFuWHesB9YT64X1xvpgfbF+WH9sADYQG4QNxoZgQ7FhGIphGI4RGIlRGI0xGItxGI8JmIhJmIwpmIppmI4ZmIlZmI05mIt5mI+FYcOxEdhIbBQ2GhuDjcXGYeOxCdhEbFLEW6AINh2bgc3EZmGzsTnYXGweNh9bgC3EFmGLsSXYUmwZthxbga3EVmGrsTXYWmwdth7bgG3ENmGbsS3YVmwbth3bge3EdmG7sT3YXmwfth87gB3EDmGHsSPYUewYdhw7gZ3ETmGnsTPYWewcdh67gF3ELmGXsSvYVewadh27gd3EbmG3sTvYXewedh97gD3EHmGPsSfYU+wZ9hx7gb3EXmGvsTfYW+wd9h77gH3EPmGfsS8YggfhwXgIHopHw6PjMfCYeCw8Nh4Hj4vHw+PjCfCEeCI8MZ4ET4onw5PjKfCUeCo8NZ4GT4unw9PjGfCMeCY8M54Fz4pnw7PjOfCceC48N54Hz4vnw/PjBfCCeCG8MF4EL4oXw4vjJfCSeCm8NF4GL4uXw8vjFfCKeCW8Ml4Fr4pXw6vjNfCaeC28Nl4Hr4vXw+vjDfCGeCO8Md4Eb4o3w5vjLfCWeCu8Nd4Gb4u3w9vjHfCOeCe8M94F74p3w7vjPfCeeC+8N94H74v3w/vjA/CB+CB8MD4EH4oPw1Ecw3GcwEmcwmmcwVmcw3lcwEVcwmVcwVVcw3XcwE3cwm3cwV3cw308DB+Oj8BH4qPw0fgYfCw+Dh+PT8An4pPwyfgUfCo+DZ+Oz8Bn4rPw2fgcfC4+D5+PL8AX4ovwxfgSfCm+DF+Or8BX4qvw1fgafC2+Dl+Pb8A34pvwzfgWfCu+Dd+O78B34rvw3fgefC++D9+PH8AP4ofww/gR/Ch+DD+On8BP4qfw0/gZ/Cx+Dj+PX8Av4pfwy/gV/Cp+Db+O38Bv4rfw2/gd/C5+D7+PP8Af4o/wx/gT/Cn+DH+Ov8Bf4q/w1/gb/C3+Dn+Pf8A/4p/wz/gXHCGCiGAihAglohHRiRhETCIWEZuIQ8Ql4hHxiQREQiIRkZhIQiQlkhHJiRRESiIVkZpIQ6Ql0hHpiQxERiITkZnIQmQlshHZiRxETiIXkZvIQ+Ql8hH5iQJEQaIQUZgoQhQlihHFiRJESaIUUZooQ5QlyhHliQpERaISUZmoQlQlqhHViRpETaIWUZuoQ9Ql6hH1iQZEQ6IR0ZhoQjQlmhHNiRZES6IV0ZpoQ7Ql2hHtiQ5ER6IT0ZnoQnQluhHdiR5ET6IX0ZvoQ/Ql+hH9iQHEQGIQMZgYQgwlhhEogRE4QRAkQRE0wRAswRE8IRAiIREyoRAqoRE6YRAmYRE24RAu4RE+EUYMJ0YQI4lRxGhiDDGWGEeMJyYQE4lJxGRiCjGVmEZMJ2YQM4lZxGxiDjGXmEfMJxYQC4lFxGJiCbGUWEYsJ1YQK4lVxGpiDbGWWEesJzYQG4lNxGZiC7GV2EZsJ3YQO4ldxG5iD7GX2EfsJw4QB4lDxGHiCHGUOEYcJ04QJ4lTxGniDHGWOEecJy4QF4lLxGXiCnGVuEZcJ24QN4lbxG3iDnGXuEfcJx4QD4lHxGPiCfGUeEY8J14QL4lXxGviDfGWeEe8Jz4QH4lPxGfiC4GQQWQwGUKGktHI6GQMMiYZi4xNxiHjkvHI+GQCMiGZiExMJiGTksnI5GQKMiWZikxNpiHTkunI9GQGMiOZicxMZiGzktnI7GQOMieZi8xN5iHzkvnI/GQBsiBZiCxMFiGLksXI4mQJsiRZiixNliHLkuXI8mQFsiJZiaxMViGrktXI6mQNsiZZi6xN1iHrkvXI+mQDsiHZiGxMNiGbks3I5mQLsiXZimxNtiHbku3I9mQHsiPZiexMdiG7kt3I7mQPsifZi+xN9iH7kv3I/uQAciA5iBxMDiGHksNIlMRInCRIkqRImmRIluRInhRIkZRImVRIldRInTRIk7RIm3RIl/RInwwjh5MjyJHkKHI0OYYcS44jx5MTyInkJHIyOYWcSk4jp5MzyJnkLHI2OYecS84j55MLyIXkInIxuYRcSi4jl5MryJXkKnI1uYZcS64j15MbyI3kJnIzuYXcSm4jt5M7yJ3kLnI3uYfcS+4j95MHyIPkIfIweYQ8Sh4jj5MnyJPkKfI0eYY8S54jz5MXyIvkJfIyeYW8Sl4jr5M3yJvkLfI2eYe8S94j75MPyIfkI/Ix+YR8Sj4jn5MvyJfkK/I1+YZ8S74j35MfyI/kJ/Iz+YVEqCAqmAqhQqloVHQqBhWTikXFpuJQcal4VHwqAZWQSkQlppJQSalkVHIqBZWSSkWlptJQaal0VHoqA5WRykRlprJQWalsVHYqB5WTykXlpvJQeal8VH6qAFWQKkQVpopQRaliVHGqBFWSKkWVpspQZalyVHmqAlWRqkRVpqpQValqVHWqBlWTqkXVpupQdal6VH2qAdWQakQ1pppQTalmVHOqBdWSakW1ptpQbal2VHuqA9WR6kR1prpQXaluVHeqB9WT6kX1pvpQfal+VH9qADWQGkQNpoZQQ6lhFEphFE4RFElRFE0xFEtxFE8JlEhJlEwplEpplE4ZlElZlE05lEt5lE+FUcOpEdRIahQ1mhpDjaXGUeOpCdREahI1mZpCTaWmUdOpGdRMahY1m5pDzaXmUfOpBdRCahG1mFpCLaWWUcupFdRKahW1mlpDraXWUeupDdRGahO1mdpCbaW2UdupHdROahe1m9pD7aX2UfupA9RB6hB1mDpCHaWOUcepE9RJ6hR1mjpDnaXOUeepC9RF6hJ1mbpCXaWuUdepG9RN6hZ1m7pD3aXuUfepB9RD6hH1mHpCPaWeUc+pF9RL6hX1mnpDvaXeUe+pD9RH6hP1mfpCIXQQHUyH0KF0NDo6HYOOSceiY9Nx6Lh0PDo+nYBOSCeiE9NJ6KR0Mjo5nYJOSaeiU9Np6LR0Ojo9nYHOSGeiM9NZ6Kx0Njo7nYPOSeeic9N56Lx0Pjo/XYAuSBeiC9NF6KJ0Mbo4XYIuSZeiS9Nl6LJ0Obo8XYGuSFeiK9NV6Kp0Nbo6XYOuSdeia9N16Lp0Pbo+3YBuSDeiG9NN6KZ0M7o53YJuSbeiW9Nt6LZ0O7o93YHuSHeiO9Nd6K50N7o73YPuSfeie9N96L50P7o/PYAeSA+iB9ND6KH0MBqlMRqnCZqkKZqmGZqlOZqnBVqkJVqmFVqlNVqnDdqkLdqmHdqlPdqnw+jh9Ah6JD2KHk2PocfS4+jx9AR6Ij2JnkxPoafS0+jp9Ax6Jj2Lnk3PoefS8+j59AJ6Ib2IXkwvoZfSy+jl9Ap6Jb2KXk2vodfS6+j19AZ6I72J3kxvobfS2+jt9A56J72L3k3voffS++j99AH6IH2IPkwfoY/Sx+jj9An6JH2KPk2foc/S5+jz9AX6In2Jvkxfoa/S1+jr9A36Jn2Lvk3foe/S9+j79AP6If2Ifkw/oZ/Sz+jn9Av6Jf2Kfk2/od/S7+j39Af6I/2J/kx/oREmiAlmQphQJhoTnYnBxGRiMbGZOExcJh4Tn0nAJGQSMYmZJExSJhmTnEnBpGRSMamZNExaJh2TnsnAZGQyMZmZLExWJhuTncnB5GRyMbmZPExeJh+TnynAFGQKMYWZIkxRphhTnCnBlGRKMaWZMkxZphxTnqnAVGQqMZWZKkxVphpTnanB1GRqMbWZOkxdph5Tn2nANGQaMY2ZJkxTphnTnGnBtGRaMa2ZNkxbph3TnunAdGQ6MZ2ZLkxXphvTnenB9GR6Mb2ZPkxfph/TnxnADGQGMYOZIcxQZhiDMhiDMwRDMhRDMwzDMhzDMwIjMhIjMwqjMhqjMwZjMhZjMw7jMh7jM2HMcGYEM5IZxYxmxjBjmXHMeGYCM5GZxExmpjBTmWnMdGYGM5OZxcxm5jBzmXnMfGYBs5BZxCxmljBLmWXMcmYFs5JZxaxm1jBrmXXMemYDs5HZxGxmtjBbmW3MdmYHs5PZxexm9jB7mX3MfuYAc5A5xBxmjjBHmWPMceYEc5I5xZxmzjBnmXPMeeYCc5G5xFxmrjBXmWvMdeYGc5O5xdxm7jB3mXvMfeYB85B5xDxmnjBPmWfMc+YF85J5xbxm3jBvmXfMe+YD85H5xHxmvjAIG8QGsyFsKBuNjc7GYGOysdjYbBw2LhuPjc8mYBOyidjEbBI2KZuMTc6mYFOyqdjUbBo2LZuOTc9mYDOymdjMbBY2K5uNzc7mYHOyudjcbB42L5uPzc8WYAuyhdjCbBG2KFuMLc6WYEuypdjSbBm2LFuOLc9WYCuyldjKbBW2KluNrc7WYGuytdjabB22LluPrc82YBuyjdjGbBO2KduMbc62YFuyrdjWbBu2LduObc92YDuyndjObBe2K9uN7c72YHuyvdjebB+2L9uP7c8OYAeyg9jB7BB2KDuMRVmMxVmCJVmKpVmGZVmO5VmBFVmJlVmFVVmN1VmDNVmLtVmHdVmP9dkwdjg7gh3JjmJHs2PYsew4djw7gZ3ITmIns1PYqew0djo7g53JzmJns3PYuew8dj67gF3ILmIXs0vYpewydjm7gl3JrmJXs2vYtew6dj27gd3IbmI3s1vYrew2dju7g93J7mJ3s3vYvew+dj97gD3IHmIPs0fYo+wx9jh7gj3JnmJPs2fYs+w59jx7gb3IXmIvs1fYq+w19jp7g73J3mJvs3fYu+w99j77gH3IPmIfs0/Yp+wz9jn7gn3JvmJfs2/Yt+w79j37gf3IfmI/s19YhAvigrkQLpSLxkXnYnAxuVhcbC4OF5eLx8XnEnAJuURcYi4Jl5RLxiXnUnApuVRcai4Nl5ZLx6XnMnAZuUxcZi4Ll5XLxmXncnA5uVxcbi4Pl5fLx+XnCnAFuUJcYa4IV5QrxhXnSnAluVJcaa4MV5Yrx5XnKnAVuUpcZa4KV5WrxlXnanA1uVpcba4OV5erx9XnGnANuUZcY64J15RrxjXnWnAtuVZca64N15Zrx7XnOnAduU5cZ64L15XrxnXnenA9uV5cb64P15frx/XnBnADuUHcYG4IN5QbxqEcxuEcwZEcxdEcw7Ecx/GcwImcxMmcwqmcxumcwZmcxdmcw7mcx/lcGDecG8GN5EZxo7kx3FhuHDeem8BN5CZxk7kp3FRuGjedm8HN5GZxs7k53FxuHjefW8At5BZxi7kl3FJuGbecW8Gt5FZxq7k13FpuHbee28Bt5DZxm7kt3FZuG7ed28Ht5HZxu7k93F5uH7efO8Ad5A5xh7kj3FHuGHecO8Gd5E5xp7kz3FnuHHeeu8Bd5C5xl7kr3FXuGnedu8Hd5G5xt7k73F3uHnefe8A95B5xj7kn3FPuGfece8G95F5xr7k33FvuHfee+8B95D5xn7kvXPVadasVRCJvgIYgQUgQUhIJQsYGIQgS+m3wt4fBEWVCBEE6hj9KGf67ZuSj8bEK9H1/NuiPyujILwRFHVQQQZCe3+oPRmqHPwpCooUPi/YPp/N7pV/LyOmGhmRF6iHVkaYRf/MR8x6EVPx9RjL+Ph8Vo8zkj2WioK9rZOkP9YREWZ6f64kZ8VdkmSjo6/AvX758+dUq+t8R/O+bFPgbCkb+KP8tf8p/SMSW++/M/8Bv9Qcjjf+i/Mf8lv96SC9kMDI4Yvgv24Hv/ON2IEF4+e/N778K8h/YouY/+H/If/B/Vf4jZ/5r+X3+6yIDkB5IdaQX0hfpFjH8j/IfuWZ+z3/oL8tEoQnDS8g/+O8RNf8hEfm/+lP+o0dkIXJQwoi8ROa/4D+Z/x/384OQhn865z+KrD9GSFakOTIA6YsMQ/oh3cLr5b9NJxjp+m2KofxvyxF5PJA0/L9FI5KRFJkSlBiJ2DWPljji+eHDvo4Q7bdDhYzByA/j/Pw/JKKtLPht+qFI4ohHQxACIZE+SCekb3hrFLk/8lvbl/Pb+NGQuN/WdMTrFLHk/LfhKb+1Vin/v9uh0H88Cvg/LDRK/kMj8r/1F8f/oT/1/39V/v+S/fzYX4vv+/lKyFBkKDIYqYp0Q7pHDP+xHQj5/24HDCRqOxA+7E+2A3/6OCNiuSLLREFfv43qr9nPgP4/sEXt/6OF5z/k66bxU/8f7bv94X+U//TtuR/KyOHZMyIJv5+Dgj8cRwQhVf/1/j+8/qCQ/OF/N/whb1G395/zljdi7iLLREFf58RHECT83nOhX9uNkhGnCbMitZAiSMHw5QiKWDExI9ZPzoif72cy5U9nB6dGzGNQaMWINfyjmj/N37e1F1FGTj9RRMu6NHK/IfTrfkbMn+Yzcl6+th9Rz1OCQBISJf/RI/r/hr84/o/+Hzz//+ePC348z/79cUFlpBcyFOmHdEIG/un+OOp5+6+P/ruO+yNB/x/Yovb/MSLyv/YX+/8x/pf2/7/Ped1/dv8/4j27yPqjhed8ADIAGRr+93/dfn/ke5ARZaKIwX9tOwP5D2xR8x8zIv/4L/If8z92/j/knzgv8KPvzwtURjohXZEq4ecGhyBf8/TjebTgb4/4H/bPf682fUT5+/55hp/KryKnFhQx+O+1nwD5D2xR8x8rPP+xfjzZH3FkGuun4/9/Mv8Zf56LoH+4//+XvC8QPt3f9v+bIN2QLsgwZDDS7ad8/56HyEWv+cMaQJCBQaE/lL/VVhVpgiSKFiv8bx9BkKvI7+cJtn47/v5tvK+1JUZ+PE+wNOLn69ImjVj+r8cVjbKuCF8/kSUfMR6NIEgtpFaU8adeulw5OOj3MrLJ6vrL8UOQp4lD3v42TmSJ/FQ/8t3rHRyxfHuR388vzP1u+SLHT/jT8o2N+EHC96i+Tj9n5Br+g2n/PN4frYOfx/ujZf95Of5e7fB/StTj/9j/w+f/Yv/Hjv9D/on8R87p1/L74/9myECkCtIJGRKR/1/tl0c++n2/PPiXZaKg+OGn3iLrQaJ93X/IGHEeLitSC+mPdEcGRDwrsvGL2ytNH4y9eP7n5YbP/4F/n6j9f5yI8/98cNTzf3H+mv4/4c9z8W/q/8On+1v+qyE4MhTphvRHuob3Z1+Pdb7mtmXQPz6vXzPo689vUn1dAqQjUj9i/UX8/pPzlz2iaYgekhVpgHRGeiO1vp2j+Kvrb4QMCz8v0gkJQVJH1N8z/AjrX6//t+Orxkg3ZCDSCRkc3sL+CPrfv5Oo/X9cBAnv/zP+4vx/3H/+/F/0P+r//9Ofy/nxuD/o26PA2D6h/w9sUfv/eP9D/uP9L5z/h/z/J0H+A1vU/Mf/H/IfH/L/fwzkP7BFzX+C/yH/CSD//8dA/gNb1PwnDM8/gujIj/kP+vaM38f7K/IfGDn7u4L8B7ao+U8E+Q8gkP/AFjX/iSH/AQTyH9ii5j8J5D+AQP4DW9T8J4X8BxDIf2CLmv9kkP8AAvkPbFHznxzyH0Ag/4Etav5TQP4DCOQ/sP3R/b/jIQODo17/l/IvuP4v+z95/W/9iOt//trrX75ez4qHr4qv1xm2/HY9a4Nvz02E/HT9z3fXBWeMWEk5Iy5rivIZo6AfF/j762iffptuMHL023Qb/TDu99PdGvGDhJ+nKRix3iOuj42o94cFj1gXX37y/eufNOIKx5bfXY/7Z+v51eeqfl5eaOf/jv44/7+6/3eq/yP5//76Oj/iM4iROSz4i/wnQX7MYUYk6kL8d27n0P8Htj/OP/+L/Kf+C67//TP5//3+P0Hf7v/zv3V9qh85veDf7zf4tR1o/K2On9uBit/dHyBtRJkx/CrJ8Gslp6YLf5T+h/n4e7UTcP/PwPb1+t/c320HaZEg5Lf2QA/++f4/X/uK33P/VWTu2TNMeO7+qMyYMep1/8H/Y7+PhOf+5/sB/qPp/Fzfb9PNF/7M7hHf9/F1v/m3vCf87rr/p/8f9/O9Gnlvn295T4d0DJ9DBEkTMfQfz9/XWUwdsW5/m+av5i+y7fjz9f8k9Of6C33/Cnxrj45+26f5ehwUM+LRb88tG7HcLb/9PzR8WMqI94uR6KFI1rotm9Wq+rXW74bV+MWweg2qIo8qRczB36MdDFTBUfKfLjz/Ue//Hy1iu/2n8/+rqf+J/P/V+eL/5H3BI+uLLBMFJQsv/925ESLm6q/JzS9eAPBv9Z/dfoKi5D99RP47Rrn//7+W/1991cz/Tv5/8gf93x/d73NrxGvyVQiyNmL4b/vzSxEEqY80D//9m7bhdxEfiLSN+BaffEiv8LuK90C6hf/0RwohJZDiSEmkCFIUKYYURIoiRZG237VEPz6ugFRA2v7Ftf64fYX+tH0F/bR9RftXt68v037YvsDfW9T8Z4jI/9u/Wf///7///7XSyK/N+W26rf4g/3+m///pa3iQREHJw8s/ar9/m+bQiPbb//b/0PBh/2r7HX7sESc6MmxIt8H58U5Dhw4uhEQUv/hfYSSiCPdjLqH//0/7/+//C6X5d/T/GcPPgQchOX/R/7es8cf5//n7fn4u/3z+v/ZHP+f/H00ncpvOmSVyeX7u/4v8NB3kl+3Mvz6dr4H7s+1MZH2RZaKgFH9yO/kz+4lByL/nOAP8kb/b/n+miP5/75/s///K/A/89ldQ+P0//plcRt7zOTKXsb7lMj/SJfx7Qb+O8WfzGVlvZJkoKOXf4HX8Z0H//5/2d8h/wR/y//Xzf+Hb/a+O2X94PvjvBu//B7ao7/9nhvwHEMh/YPsp/7EQJAvkP4BA/gNb1P4/K+Q/gED+A1vU/GeD/AcQyP//Pb8I7R+Kmv/skP8AAvkPbFHznwPyH0Ag/4Etav5zQv7/O1X4Z54E+Q9sUfOfC/IfQCD/gS1q/nND/gMI5D+wRc1/Hsh/AIH8B7ao+c8L+Q8gkP/AFjX/+SD/AQTyH9ii5j8/5D+AQP4DW9T8F4D8BxDIf2CLmv+CkP8AAvkPbFHzXwjyH0Ag/4Etav4LQ/4DCOQ/sEXNfxHIfwCB/Ae2qPkvCvkPIJD/wBY1/8V+nf9cMb494yvI//8FkP/AFjX/xaH/DyCQ/8AWNf8lIP8BBPIf2KLmvyTkP4BA/gNb1PyXgvwHEMh/YIua/9KQ/wAC+Q9sUfNfBvIfQCD/gS1q/stC/gMI5D+wRc1/Och/AIH8B7ao+S8P+Q8gkP/AFjX/FSD/AQTyH9iCw3MMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA9hA/ig/kQPpSPxkfnY/Ax+Vh8bD4OH5ePx8fnE/AJ+UR8Yj4Jn5RPxifnU/Ap+VR8aj4Nn5ZPx6fnM/AZ+Ux8Zj4Ln5XPxmfnc/A5+Vx8bj4Pn5fPx+fnC/AF+UJ8Yb4IX5QvxhfnS/Al+VJ8ab4MX5Yvx5fnK/AV+Up8Zb4KX5Wvxlfna/A1+Vp8bb4OX5evx9fnG/AN+RhIY74J35RvxjfnW/At+VZ8a74N35Zvx7fnO/Ad+U58Z74L35Xvxnfne/A9+V58b74P35fvx/fnB/AD+UH8YH4IP5QfxqM8xuM8wZM8xdM8w7M8x/O8wIu8xMu8wqu8xuu8wZu8xdu8w7u8x/t8GD+cH8GP5Efxo/kx/Fh+HD+en8BP5Cfxk/kp/FR+Gj+dn8HP5Gfxs/k5/Fx+Hj+fX8Av5Bfxi/kl/FJ+Gb+cX8Gv5Ffxq/k1/Fp+Hb+e38Bv5Dfxm/kt/FZ+G7+d38Hv5Hfxu/k9/F5+H7+fP8Af5A/xh/kj/FH+GH+cP8Gf5E/xp/kz/Fn+HH+ev8Bf5C/xl/kr/FX+Gn+dv8Hf5G/xt/k7/F3+Hn+ff8A/5B/xj/kn/FP+Gf+cf8G/5F/xr/k3/Fv+Hf+e/8B/5D/xn/kvPCIECcFCiBAqRBOiCzGEmEIsIbYQR4grxBPiCwmEhEIiIbGQREgqJBOSCymElEIqIbWQRkgrpBPSCxmEjEImIbOQRcgqZBOyCzmEnEIuIbeQR8gr5BPyCwWEgkIhobBQRCgqFBOKCyWEkkIpobRQRigrlBPKCxWEikIlobJQRagqVBOqCzWEmkItobZQR6gr1BPqCw2EhkIjobHQRGgqNBOaCy2ElkIrobXQRmgrtBPaCx2EjkInobPQRegqdBO6Cz2EnkIvobfQR+gr9BP6CwOEgcIgYbAwRBgqDBNQARNwgRBIgRJogRFYgRN4QRBEQRJkQRFUQRN0wRBMwRJswRFcwRN8IUwYLowQRgqjhNHCGGGsME4YL0wQJgqThMnCFGGqME2YLswQZgqzhNnCHGGuME+YLywQFgqLhMXCEmGpsExYLqwQVgqrhNXCGmGtsE5YL2wQNgqbhM3CFmGrsE3YLuwQdgq7hN3CHmGvsE/YLxwQDgqHhMPCEeGocEw4LpwQTgqnhNPCGeGscE44L1wQLgqXhMvCFeGqcE24LtwQbgq3hNvCHeGucE+4LzwQHgqPhMfCE+Gp8Ex4LrwQXgqvhNfCG+Gt8E54L3wQPgqfhM/CFwERg8RgMUQMFaOJ0cUYYkwxlhhbjCPGFeOJ8cUEYkIxkZhYTCImFZOJycUUYkoxlZhaTCOmFdOJ6cUMYkYxk5hZzCJmFbOJ2cUcYk4xl5hbzCPmFfOJ+cUCYkGxkFhYLCIWFYuJxcUSYkmxlFhaLCOWFcuJ5cUKYkWxklhZrCJWFauJ1cUaYk2xllhbrCPWFeuJ9cUGYkOxkdhYbCI2FZuJzcUWYkuxldhabCO2FduJ7cUOYkexk9hZ7CJ2FbuJ3cUeYk+xl9hb7CP2FfuJ/cUB4kBxkDhYHCIOFYeJqIiJuEiIpEiJtMiIrMiJvCiIoiiJsqiIqqiJumiIpmiJtuiIruiJvhgmDhdHiCPFUeJocYw4VhwnjhcniBPFSeJkcYo4VZwmThdniDPFWeJscY44V5wnzhcXiAvFReJicYm4VFwmLhdXiCvFVeJqcY24Vlwnrhc3iBvFTeJmcYu4Vdwmbhd3iDtDEHG3uEfcK+4T94sHxIPiIfGweEQ8Kh4Tj4snxJPiKfG0eEY8K54Tz4sXxIviJfGyeEW8Kl4Tr4s3xJviLfG2eEe8K94T74sPxIfiI/Gx+ER8Kj4Tn4svxJfiK/G1+EZ8K74T34sfxI/iJ/Gz+EVEpCApWAqRQqVoUnQphhRTiiXFluJIcaV4UnwpgZRQSiQllpJISaVkUnIphZRSSiWlltJIaaV0Unopg5RRyiRllrJIWaVsUnYph5RTyiXllvJIeaV8Un6pgFRQKiQVlopIRaViUnGphFRSKiWVlspIZaVyUnmpglRRqiRVlqpIVaVqUnWphlRTqiXVlupIdaV6Un2pgdRQaiQ1lppITaVmUnOphdRSaiW1ltpIbaV2Unupg9RR6iR1lrpIXaVuUneph9RT6iX1lvpIfaV+Un9pgDRQGiQNloZIQ6VhEiphEi4REilREi0xEitxEi8JkihJkiwpkippki4ZkilZki05kit5ki+FScOlEdJIaZQ0WhojjZXGSeOlCdJEaZI0WZoiTZWmSdOlGdJMaZY0W5ojzZXmSfOlBdJCaZG0WFoiLZWWSculFdJKaZW0WlojrZXWSeulDdJGaZO0WdoibZW2SdulHdJOaZe0W9oj7ZX2SfulA9JB6ZB0WDoiHZWOScelE9JJ6ZR0WjojnZXOSeelC9JF6ZJ0WboiXZWuSdelG9JN6ZZ0W7oj3ZXuSfelB9JD6ZH0WHoiPZWeSc+lF9JL6ZX0WnojvZXeSe+lD9JH6ZP0WfoiIXKQHCyHyKFyNDm6HEOOKceSY8tx5LhyPDm+nEBOKCeSE8tJ5KRyMjm5nEJOKaeSU8tp5LRyOjm9nEHOKGeSM8tZ5KxyNjm7nEPOKeeSc8t55LxyPjm/XEAuKBeSC8tF5KJyMbm4XEIuKZeSS8tl5LJyObm8XEGuKFeSK8tV5KpyNbm6XEOuKdeSa8t15LpyPbm+3EBuKDeSG8tN5KZyM7m53EJuKbeSW8tt5LZyO7m93EHuKHeSO8td5K5yN7m73EPuKfeSe8t95L5yP7m/PEAeKA+SB8tD5KHyMBmVMRmXCZmUKZmWGZmVOZmXBVmUJVmWFVmVNVmXDdmULdmWHdmVPdmXw+Th8gh5pDxKHi2PkcfK4+Tx8gR5ojxJnixPkafK0+Tp8gx5pjxLni3PkefK8+T58gJ5obxIXiwvkZfKy+Tl8gp5pbxKXi2vkdfK6+T18gZ5o7xJ3ixvkbfK2+Tt8g55p7xL3i3vkffK++T98gH5oHxIPiwfkY/Kx+Tj8gn5pHxKPi2fkc/K5+Tz8gX5onxJvixfka/K1+Tr8g35pnxLvi3fke/K9+T78gP5ofxIfiw/kZ/Kz+Tn8gv5pfxKfi2/kd/K7+T38gf5o/xJ/ix/kRElSAlWQpRQJZoSXYmhxFRiKbGVOEpcJZ4SX0mgJFQSKYmVJEpSJZmSXEmhpFRSKamVNEpaJZ2SXsmgZFQyKZmVLEpWJZuSXcmh5FRyKbmVPEpeJZ+SXymgFFQKKYWVIkpRpZhSXCmhlFRKKaWVMkpZpZxSXqmgVFQqKZWVKkpVpZpSXamh1FRqKbWVOkpdpZ5SX2mgNFQaKY2VJkpTpZnSXGmhtFRaKa2VNkpbpZ3SXumgdFQ6KZ2VLkpXpZvSXemh9FR6Kb2VPkpfpZ/SXxmgDFQGKYOVIcpQZZiCKpiCK4RCKpRCK4zCKpzCK4IiKpIiK4qiKpqiK4ZiKpZiK47iKp7iK2HKcGWEMlIZpYxWxihjlXHKeGWCMlGZpExWpihTlWnKdGWGMlOZpcxW5ihzlXnKfGWBslBZpCxWlihLlWXKcmWFslJZpaxW1ihrlXXKemWDslHZpGxWtihblW3KdmWHslPZpexW9ih7lX3KfuWAclA5pBxWjihHlWPKceWEclI5pZxWzihnlXPKeeWCclG5pFxWrihXlWvKdeWGclO5pdxW7ih3lXvKfeWB8lB5pDxWnihPlWfKc+WF8lJ5pbxW3ihvlXfKe+WD8lH5pHxWviiIGqQGqyFqqBpNja7GUGOqsdTYahw1rhpPja8mUBOqidTEahI1qZpMTa6mUFOqqdTUaho1rZpOTa9mUDOqmdTMahY1q5pNza7mUHOqudTcah41r5pPza8WUAuqhdTCahG1qFpMLa6WUEuqpdTSahm1rFpOLa9WUCuqldTKahW1qlpNra7WUGuqtdTaah21rlpPra82UBuqjdTGahO1qdpMba62UFuqrdTWahu1rdpOba92UDuqndTOahe1q9pN7a72UHuqvdTeah+1r9pP7a8OUAeqg9TB6hB1qDpMRVVMxVVCJVVKpVVGZVVO5VVBFVVJlVVFVVVN1VVDNVVLtVVHdVVP9dUwdbg6Qh2pjlJHq2PUseo4dbw6QZ2oTlInq1PUqeo0dbo6Q52pzlJnq3PUueo8db66QF2oLlIXq0vUpeoydbm6Ql2prlJXq2vUteo6db26Qd2oblI3q1vUreo2dbu6Q92p7lJ3q3vUveo+db96QD2oHlIPq0fUo+ox9bh6Qj2pnlJPq2fUs+o59bx6Qb2oXlIvq1fUq+o19bp6Q72p3lJvq3fUu+o99b76QH2oPlIfq0/Up+oz9bn6Qn2pvlJfq2/Ut+o79b36Qf2oflI/q19URAvSgrUQLVSLpkXXYmgxtVhabC2OFleLp8XXEmgJtURaYi2JllRLpiXXUmgptVRaai2NllZLp6XXMmgZtUxaZi2LllXLpmXXcmg5tVxabi2PllfLp+XXCmgFtUJaYa2IVlQrphXXSmgltVJaaa2MVlYrp5XXKmgVtUpaZa2KVlWrplXXamg1tVpaba2OVlerp9XXGmgNtUZaY62J1lRrpjXXWmgttVZaa62N1lZrp7XXOmgdtU5aZ62L1lXrpnXXemg9tV5ab62P1lfrp/XXBmgDtUHaYG2INlQbpqEapuEaoZEapdEao7Eap/GaoImapMmaoqmapumaoZmapdmao7map/lamDZcG6GN1EZpo7Ux2lhtnDZem6BN1CZpk7Up2lRtmjZdm6HN1GZps7U52lxtnjZfW6At1BZpi7Ul2lJtmbZcW6Gt1FZpq7U12lptnbZe26Bt1DZpm7Ut2lZtm7Zd26Ht1HZpu7U92l5tn7ZfO6Ad1A5ph7Uj2lHtmHZcO6Gd1E5pp7Uz2lntnHZeu6Bd1C5pl7Ur2lXtmnZdu6Hd1G5pt7U72l3tnnZfe6A91B5pj7Un2lPtmfZce6G91F5pr7U32lvtnfZe+6B91D5pn7UvGqIH6cF6iB6qR9Oj6zH0mHosPbYeR4+rx9Pj6wn0hHoiPbGeRE+qJ9OT6yn0lHoqPbWeRk+rp9PT6xn0jHomPbOeRc+qZ9Oz6zn0nHouPbeeR8+r59Pz6wX0gnohvbBeRC+qF9OL6yX0knopvbReRi+rl9PL6xX0inolvbJeRa+qV9Or6zX0mnotvbZeR6+r19Pr6w30hnojvbHeRG+qN9Ob6y30lnorvbXeRm+rt9Pb6x30jnonvbPeRe+qd9O76z30nnovvbfeR++r99P76wP0gfogfbA+RB+qD9NRHdNxndBJndJpndFZndN5XdBFXdJlXdFVXdN13dBN3dJt3dFd3dN9PUwfro/QR+qj9NH6GH2sPk4fr0/QJ+qT9Mn6FH2qPk2frs/QZ+qz9Nn6HH2uPk+fry/QF+qL9MX6En2pvkxfrq/QV+qr9NX6Gn2tvk5fr2/QN+qb9M36Fn2rvk3fru/Qd+q79N36Hn2vvk/frx/QD+qH9MP6Ef2ofkw/rp/QT+qn9NP6Gf2sfk4/r1/QL+qX9Mv6Ff2qfk2/rt/Qb+q39Nv6Hf2ufk+/rz/QH+qP9Mf6E/2p/kx/rr/QX+qv9Nf6G/2t/k5/r3/QP+qf9M/6Fx0xgoxgI8QINaIZ0Y0YRkwjlhHbiGPENeIZ8Y0ERkIjkZHYSGIkNZIZyY0URkojlZHaSGOkNdIZ6Y0MRkYjk5HZyGJkNbIZ2Y0cRk4jl5HbyGPkNfIZ+Y0CRkGjkFHYKGIUNYoZxY0SRkmjlFHaKGOUNcoZ5Y0KRkWjklHZqGJUNaoZ1Y0aRk2jllHbqGPUNeoZ9Y0GRkOjkdHYaGI0NZoZzY0WRkujldHaaGO0NdoZ7Y0ORkejk9HZ6GJ0NboZ3Y0eRk+jl9Hb6GP0NfoZ/Y0BxkBjkDHYGGIMNYYZqIEZuEEYpEEZtMEYrMEZvCEYoiEZsqEYqqEZumEYpmEZtuEYruEZvhFmDDdGGCONUcZoY4wx1hhnjDcmGBONScZkY4ox1ZhmTDdmGDONWcZsY44x15hnzDcWGAuNRcZiY4mx1FhmLDdWGCuNVcZqY42x1lhnrDc2GBuNTcZmY4ux1dhmbDd2GDuNXcZuY4+x19hn7DcOGAeNQ8Zh44hx1DhmHDdOGCeNU8Zp44xx1jhnnDcuGBeNS8Zl44px1bhmXDduGDeNW8Zt445x17hn3DceGA+NR8Zj44nx1HhmPDdeGC+NV8Zr443x1nhnvDc+GB+NT8Zn44uBmEFmsBlihprRzOhmDDOmGcuMbcYx45rxzPhmAjOhmchMbCYxk5rJzORmCjOlmcpMbaYx05rpzPRmBjOjmcnMbGYxs5rZzOxmDjOnmcvMbeYx85r5zPxmAbOgWcgsbBYxi5rFzOJmCbOkWcosbZYxy5rlzPJmBbOiWcmsbFYxq5rVzOpmDbOmWcusbdYx65r1zPpmA7Oh2chsbDYxm5rNzOZmC7Ol2cpsbbYx25rtzPZmB7Oj2cnsbHYxu5rdzO5mD7On2cvsbfYx+5r9zP7mAHOgOcgcbA4xh5rDTNTETNwkTNKkTNpkTNbkTN4UTNGUTNlUTNXUTN00TNO0TNt0TNf0TN8MM4ebI8yR5ihztDnGHGuOM8ebE8yJ5iRzsjnFnGpOM6ebM8yZ5ixztjnHnGvOM+ebC8yF5iJzsbnEXGouM5ebK8yV5ipztbnGXGuuM9ebG8yN5iZzs7nF3GpuM7ebO8yd5i5zt7nH3GvuM/ebB8yD5iHzsHnEPGoeM4+bJ8yT5inztHnGPGueM8+bF8yL5iXzsnnFvGpeM6+bN8yb5i3ztnnHvGveM++bD8yH5iPzsfnEfGo+M5+bL8yX5ivztfnGfGu+M9+bH8yP5ifzs/nFRKwgK9gKsUKtaFZ0K4YV04plxbbiWHGteFZ8K4GV0EpkJbaSWEmtZFZyK4WV0kplpbbSWGmtdFZ6K4OV0cpkZbayWFmtbFZ2K4eV08pl5bbyWHmtfFZ+q4BV0CpkFbaKWEWtYlZxq4RV0ipllbbKWGWtclZ5q4JV0apkVbaqWFWtalZ1q4ZV06pl1bbqWHWtelZ9q4HV0GpkNbaaWE2tZlZzq4XV0mpltbbaWG2tdlZ7q4PV0epkdba6WF2tblZ3q4fV0+pl9bb6WH2tflZ/a4A10BpkDbaGWEOtYRZqYRZuERZpURZtMRZrcRZvCZZoSZZsKZZqaZZuGZZpWZZtOZZreZZvhVnDrRHWSGuUNdoaY421xlnjrQnWRGuSNdmaYk21plnTrRnWTGuWNduaY8215lnzrQXWQmuRtdhaYi21llnLrRXWSmuVtdpaY6211lnrrQ3WRmuTtdnaYm21tlnbrR3WTmuXtdvaY+219ln7rQPWQeuQddg6Yh21jlnHrRPWSeuUddo6Y521zlnnrQvWReuSddm6Yl21rlnXrRvWTeuWddu6Y9217ln3rQfWQ+uR9dh6Yj21nlnPrRfWS+uV9dp6Y7213lnvrQ/WR+uT9dn6YiF2kB1sh9ihdjQ7uh3DjmnHsmPbcey4djw7vp3ATmgnshPbSeykdjI7uZ3CTmmnslPbaey0djo7vZ3BzmhnsjPbWeysdjY7u53DzmnnsnPbeey8dj47v13ALmgXsgvbReyidjG7uF3CLmmXskvbZeyydjm7vF3BrmhXsivbVeyqdjW7ul3DrmnXsmvbdey6dj27vt3Abmg3shvbTeymdjO7ud3Cbmm3slvbbey2dju7vd3B7mh3sjvbXeyudje7u93D7mn3snvbfey+dj+7vz3AHmgPsgfbQ+yh9jAbtTEbtwmbtCmbthmbtTmbtwVbtCVbthVbtTVbtw3btC3bth3btT3bt8Ps4fYIe6Q9yh5tj7HH2uPs8fYEe6I9yZ5s88hXM+yZ9ix7tj3HnmvPs+fbC+yF9iJ7sb3EXmovs5fbK+yV9ip7tb3GXmuvs9fbG+yN9iZ7s73F3mpvs7fbO+yd9i57t73H3mvvs/fbB+yD9iH7sH3EPmofs4/bJ+yT9in7tH3GPmufs8/bF+yL9iX7sn3Fvmpfs6/bN+yb9i37tn3Hvmvfs+/bD+yH9iP7sf3Efmo/s5/bL+yX9iv7tf3Gfmu/s9/bH+yP9if7s/3FRpwgJ9gJcUKdaE50J4YT04nlxHbiOHGdeE58J4GT0EnkJHaSOEmdZE5yJ4WT0knlpHbSOGmddE56J4OT0cnkZHayOFmdbE52J4eT08nl5HbyOHmdfE5+p4BT0CnkFHaKOEWdYk5xp4RT0inllHbKOGWdck55p4JT0ankVHaqOFWdak51p4ZT06nl1HbqOHWdek59p4HT0GnkNHaaOE2dZk5zp4XT0mnltHbaOG2ddk57p4PT0enkdHa6OF2dbk53p4fT0+nl9Hb6OH2dfk5/Z4Az0BnkDHaGOEOdYQ7qYA7uEA7pUA7tMA7rcA7vCI7oSI7sKI7qaI7uGI7pWI7tOI7reI7vhDnDnRHOSGeUM9oZ44x1xjnjnQnORGeSM9mZ4kx1pjnTnRnOTGeWM9uZ48x15jnznQXOQmeRs9hZ4ix1ljnLnRXOSmeVs9pZ46x11jnrnQ3ORmeTs9nZ4mx1tjnbnR3OTmeXs9vZ4+x19jn7nQPOQeeQc9g54hx1jjnHnRPOSeeUc9o545x1zjnnnQvOReeSc9m54lx1rjnXnRvOTeeWc9u549x17jn3nQfOQ+eR89h54jx1njnPnRfOS+eV89p547x13jnvnQ/OR+eT89n54iBukBvshrihbjQ3uhvDjenGcmO7cdy4bjw3vpvATegmchO7SdykbjI3uZvCTemmclO7ady0bjo3vZvBzehmcjO7WdysbjY3u5vDzenmcnO7edy8bj43v1vALegWcgu7RdyibjG3uFvCLemWcku7Zdyybjm3vFvBrehWciu7VdyqbjW3ulvDrenWcmu7ddy6bj23vtvAbeg2chu7TdymbjO3udvCbem2clu7bdy2bju3vdvB7eh2cju7Xdyubje3u9vD7en2cnu7fdy+bj+3vzvAHegOcge7Q9yh7jAXdTEXdwmXdCmXdhmXdTmXdwVXdCVXdhVXdTVXdw3XdC3Xdh3XdT3Xd8Pc4e4Id6Q7yh3tjnHHuuPc8e4Ed6I7yZ3sTnGnutPc6e4Md6Y7y53tznHnuvPc+e4Cd6G7yF3sLnGXusvc5e4Kd6W7yl3trnHXuuvc9e4Gd6O7yd3sbnG3utvc7e4Od6e7y93t7nH3uvvc/e4B96B7yD3sHnGPusfc4+4J96R7yj3tnnHPuufc8+4F96J7yb3sXnGvutfc6+4N96Z7y73t3nHvuvfc++4D96H7yH3sPnGfus/c5+4L96X7yn3tvnHfuu/c9+4H96P7yf3sfnERL8gL9kK8UC+aF92L4cX0YnmxvTheXC+eF99L4CX0EnmJvSReUi+Zl9xL4aX0UnmpvTReWi+dl97L4GX0MnmZvSxeVi+bl93L4eX0cnm5vTxeXi+fl98r4BX0CnmFvSJeUa+YV9wr4ZX0SnmlvTJeWa+cV96r4FX0KnmVvSpeVa+aV92r4dX0anm1vTpeXa+eV99r4DX0GnmNvSZeU6+Z19xr4bX0WnmtvTZeW6+d197r4HX0OnmdvS5eV6+b193r4fX0enm9vT5eX6+f198b4A30BnmDvSHeUG+Yh3qYh3uER3qUR3uMx3qcx3uCJ3qSJ3uKp3qap3uGZ3qWZ3uO53qe53th3nBvhDfSG+WN9sZ4Y71x3nhvgjfRm+RN9qZ4U71p3nRvhjfTm+XN9uZ4c7153nxvgbfQW+Qt9pZ4S71l3nJvhbfSW+Wt9tZ4a7113npvg7fR2+Rt9rZ4W71t3nZvh7fT2+Xt9vZ4e7193n7vgHfQO+Qd9o54R71j3nHvhHfSO+Wd9s54Z71z3nnvgnfRu+Rd9q54V71r3nXvhnfTu+Xd9u54d7173n3vgffQe+Q99p54T71n3nPvhffSe+W99t54b7133nvvg/fR++R99r54iB/kB/shfqgfzY/ux/Bj+rH82H4cP64fz4/vJ/AT+on8xH4SP6mfzE/up/BT+qn81H4aP62fzk/vZ/Az+pn8zH4WP6ufzc/u5/Bz+rn83H4eP6+fz8/vF/AL+oX8wn4Rv6hfzC/ul/BL+qX80n4Zv6xfzi/vV/Ar+pX8yn4Vv6pfza/u1/Br+rX82n4dv65fz6/vN/Ab+o38xn4Tv6nfzG/ut/Bb+q381n4bv63fzm/vd/A7+p38zn4Xv6vfze/u9/B7+r383n4fv6/fz+/vD/AH+oP8wf4Qf6g/zEd9zMd9wid9yqd9xmd9zud9wRd9yZd9xVd9zdd9wzd9y7d9x3d9z/f9MH+4P8If6Y/yR/tj/LH+OH+8P8Gf6E/yJ/tT/Kn+NH+6P8Of6c/yZ/tz/Ln+PH++v8Bf6C/yF/tL/KX+Mn+5v8Jf6a/yV/tr/LX+On+9v8Hf6G/yN/tb/K3+Nn+7v8Pf6e/yd/t7/L3+Pn+/f8A/6B/yD/tH/KP+Mf+4f8I/6Z/yT/tn/LP+Of+8f8G/6F/yL/tX/Kv+Nf+6f8O/6d/yb/t3/Lv+Pf++/8B/6D/yH/tP/Kf+M/+5/8J/6b/yX/tv/Lf+O/+9/8H/6H/yP/tffCQsKCw4LCQsNCxaWPSwGGExw2KFxQ6LExY3LF5Y/LAEYQnDEoUlDksSljQsWVjysP/Hoj02hs0tAACebdu2jc627b1b19nuuq4zkpyc2PbpbNu2bZv3y/0fT36sAFYQK4QVxopgRbFiWHGsBFYSK4WVxspgZbFyWHmsAlYRq4RVxqpgVbFqWHWsBlYTq4XVxupgdbF6WH2sAdYQa4Q1xppgTbFmWHMsBmuBtcRaYa2xNlhbrB3WHuuAdcQ6YZ2xLlhXrBvWHeuB9cR6Yb2xPlhfrB/WHxuADcQGYYOxIdhQbBg2HBuBjcRGYaOxMdhY7D9sHDYei8UmYHHYRGwSNhmbgk3FpmHTsRnYTGwWNhubg83F5mHzsQXYQmwRthiLx5ZgCdhSLBFbhiVhy7EV2EpsFbYaW4OtxdZh67ENGIbhGIEBjMQgRmE0xmAsxmE8JmAiJmEypmAqpmE6ZmAmZmE25mAu5mE+FmAhFmEIS8Y2YpuwzdgWbCu2DduO7cB2Yruw3dgebC+2D9uPHcAOYoeww9gR7Ch2DDuOncBOYqew09gZ7Cx2DjuPXcAuYpewy9gV7Cp2DbuO3cBuYrew29gd7C52D7uPPcAeYo+wx9gT7Cn2DHuOvcBeYq+w19gb7C32DnuPfcA+Yp+wz9gX7Cv2DfuO/cB+Yr+w39gf7C/2D0uBp8RT4anxNHhaPB2eHs+AZ8Qz4ZnxLHhWPBueHc+B58RzpciB58Hz4vnw/HgBvCBeCC+MF8GL4sXw4ngJvCReCi+Nl8HL4uXw8ngFvCJeCa+MV8Gr4tXw6ngNvCZeC6+N18Hr4vXw+ngDvCHeCG+MN8Gb4s3w5ngM3gJvibfCW+Nt8LZ4O7w93gHviHfCO+Nd8K54N7w73gPviffCe+N98L54P7w/PgAfiA/CB+ND8KH4MHw4PgIfiY/CR+Nj8LH4f/g4fDwei0/A4/CJ+CR8Mj4Fn4pPw6fjM/CZ+Cx8Nj4Hn4vPw+fjC/CF+CJ8MR6PL8ET8KV4Ir4MT8KX4yvwlfgqfDW+Bl+Lr8PX4xtwDMdxAgc4iUOcwmmcwVmcw3lcwEVcwmVcwVVcw3XcwE3cwm3cwV3cw308wEM8whGejG/EN+Gb8S34Vnwbvh3fge/Ed+G78T34Xnwfvh8/gB/ED+GH8SP4UfwYfhw/gZ/ET+Gn8TP4Wfwcfh6/gF/EL+GX8Sv4Vfwafh2/gd/Eb+G38Tv4Xfwefh9/gD/EH+GP8Sf4U/wZ/hx/gb/EX+Gv8Tf4W/wd/h7/gH/EP+Gf8S/4V/wb/h3/gf/Ef+G/8T/4X/wfnoJISaQiUhNpiLREOiI9kYHISGQiMhNZiKxENiI7kYPISeQichN5iLxEPiI/UYAoSBQiChNFiKJEMaI4UYIoSZQiShNliLJEOaI8UYGoSFQiKhNViKpENaI6UYOoSdQiahN1iLpEPaI+0YBoSDQiGhNNiKZEM6I5EUO0IFoSrYjWRBuiLdGOaE90IDoSnYjORBeiK9GN6E70IHoSvYjeRB+iL9GP6E8MIAYSg4jBxBBiKDGMGE6MIEYSo4jRxBhiLPEfMY4YT8QSE4g4YiIxiZhMTCGmEtOI6cQMYiYxi5hNzCHmEvOI+cQCYiGxiFhMxBNLiARiKZFILCOSiOXECmIlsYpYTawh1hLriPXEBgIjcIIgAEESkKAImmAIluAInhAIkZAImVAIldAInTAIk7AIm3AIl/AInwiIkIgIRCQTG4lNxGZiC7GV2EZsJ3YQO4ldxG5iD7GX2EfsJw4QB4lDxGHiCHGUOEYcJ04QJ4lTxGniDHGWOEecJy4QF4lLxGXiCnGVuEZcJ24QN4lbxG3iDnGXuEfcJx4QD4lHxGPiCfGUeEY8J14QL4lXxGviDfGWeEe8Jz4QH4lPxGfiC/GV+EZ8J34QP4lfxG/iD/GX+EekAClBKpAapAFpQTqQHmQAGUEmkBlkAVlBNpAd5AA5QS6QG+QBeUE+kB8UAAVBIVAYFAFFQTFQHJQAJUEpUBqUAWVBOVAeVAAVQSVQGVQBVUE1UB3UADVBLVAb1AF1QT1QHzQADUEj0Bg0AU1BM9AcxIAWoCVoBVqDNqAtaAfagw6gI+gEOoMuoCvoBrqDHqAn6AV6gz6gL+gH+oMBYCAYBAaDIWAoGAaGgxFgJBgFRoMxYCz4D4wD40EsmADiwEQwCUwGU8BUMA1MBzPATDALzAZzwFwwD8wHC8BCsAgsBvFgCUgAS0EiWAaSwHKwAqwEq8BqsAasBevAerABYAAHBACABBBQgAYMYAEHeCAAEUhABgpQgQZ0YAATWMAGDnCBB3wQgBBEAIFksBFsApvBFrAVbAPbwQ6wE+wCu8EesBfsA/vBAXAQHAKHwRFwFBwDx8EJcBKcAqfBGXAWnAPnwQVwEVwCl8EVcBVcA9fBDXAT3AK3wR1wF9wD98ED8BA8Ao/BE/AUPAPPwQvwErwCr8Eb8Ba8A+/BB/ARfAKfwRfwFXwD38EP8BP8Ar/BH/AX/AMpyJRkKjI1mYZMS6Yj05MZyIxkJjIzmYXMSmYjs5M5yJxkLjI3mYfMS+Yj85MFyIJkIbIwWYQsShYji5MlyJJkKbI0WYYsS5Yjy5MVyIpkJbIyWYWsSlYjq5M1yJpkLbI2WYesS9Yj65MNyIZkI7Ix2YRsSjYjm5MxZAuyJdmKbE22IduS7cj2ZAeyI9mJ7Ex2IbuS3cjuZA+yJ9mL7E32IfuS/cj+5AByIDmIHEwOIYeSw8jh5AhyJDmKHE2OIceS/5HjyPFkLDmBjCMnkpPIyeQUcio5jZxOziBnkrPI2eQcci45j5xPLiAXkovIxWQ8uYRMIJeSieQyMolcTq4gV5KryNXkGnItuY5cT24gMRInCRKQJAlJiqRJhmRJjuRJgRRJiZRJhVRJjdRJgzRJi7RJh3RJj/TJgAzJiERkMrmR3ERuJreQW8lt5HZyB7mT3EXuJveQe8l95H7yAHmQPEQeJo+QR8lj5HHyBHmSPEWeJs+QZ8lz5HnyAnmRvEReJq+QV8lr5HXyBnmTvEXeJu+Qd8l75H3yAfmQfEQ+Jp+QT8ln5HPyBfmSfEW+Jt+Qb8l35HvyA/mR/ER+Jr+QX8lv5HfyB/mT/EX+Jv+Qf8l/ZAqYEqaCqWEamBamg+lhBpgRZoKZYRaYFWaD2WEOmBPmgrlhHpgX5oP5YQFYEBaChWERWBQWg8VhCVgSloKlYRlYFpaD5WEFWBFWgpVhFVgVVoPVYQ1YE9aCtWEdWBfWg/VhA9gQNoKNYRPYFDaDzWEMbAFbwlawNWwD28J2sD3sADvCTrAz7AK7wm6wO+wBe8JesDfsA/vCfrA/HAAHwkFwMBwCh8JhcDgcAUfCUXA0HAPHwv/gODgexsIJMA5OhJPgZDgFToXT4HQ4A86Es+BsOAfOhfPgfLgALoSL4GIYD5fABLgUJsJlMAkuhyvgSrgKroZr4Fq4Dq6HGyAGcUhAAEkIIQVpyEAWcpCHAhShBGWoQBVqUIcGNKEFbehAF3rQhwEMYQQRTIYb4Sa4GW6BW+E2uB3ugDvhLrgb7oF74T64Hx6AB+EheBgegUfhMXgcnoAn4Sl4Gp6BZ+E5eB5egBfhJXgZXoFX4TV4Hd6AN+EteBvegXfhPXgfPoAP4SP4GD6BT+Ez+By+gC/hK/gavoFv4Tv4Hn6AH+En+Bl+gV/hN/gd/oA/4S/4G/6Bf+E/mIJKSaWiUlNpqLRUOio9lYHKSGWiMlNZqKxUNio7lYPKSeWiclN5qLxUPio/VYAqSBWiClNFqKJUMao4VYIqSZWiSlNlqLJUOao8VYGqSFWiKlNVqKpUNao6VYOqSdWialN1qLpUPao+1YBqSDWiGlNNqKZUM6o5FUO1oFpSrajWVBuqLdWOak91oDpSnajOVBeqK9WN6k71oHpSvajeVB+qL9WP6k8NoAZSg6jB1BBqKDWMGk6NoEZSo6jR1BhqLPUfNY4aT8VSE6g4aiI1iZpMTaGmUtOo6dQMaiY1i5pNzaHmUvOo+dQCaiG1iFpMxVNLqARqKZVILaOSqOXUCmoltYpaTa2h1lLrqPXUBgqjcIqgAEVSkKIommIoluIonhIokZIomVIoldIonTIok7Iom3Iol/IonwqokIooRCVTG6lN1GZqC7WV2kZtp3ZQO6ld1G5qD7WX2kftpw5QB6lD1GHqCHWUOkYdp05QJ6lT1GnqDHWWOkedpy5QF6lL1GXqCnWVukZdp25QN6lb1G3qDnWXukfdpx5QD6lH1GPqCfWUekY9p15QL6lX1GvqDfWWeke9pz5QH6lP1GfqC/WV+kZ9p35QP6lf1G/qD/WX+keloFPSqejUdBo6LZ2OTk9noDPSmejMdBY6K52Nzk7noHPSuejcdB46L52Pzk8XoAvShejCdBG6KF2MLk6XoEvSpejSdBm6LF2OLk9XoCvSlejKdBW6Kl2Nrk7XoGvStejadB26Ll2Prk83oBvSjejGdBO6Kd2Mbk7H0C3olnQrujXdhm5Lt6Pb0x3ojnQnujPdhe5Kd6O70z3onnQvujfdh+5L96P70wPogfQgejA9hB5KD6OH0yPokfQoejQ9hh5L/0ePo8fTsfQEOo6eSE+iJ9NT6Kn0NHo6PYOeSc+iZ9Nz6Ln0PHo+vYBeSC+iF9Px9BI6gV5KJ9LL6CR6Ob2CXkmvolfTa+i19Dp6Pb2BxmicJmhAkzSkKZqmGZqlOZqnBVqkJVqmFVqlNVqnDdqkLdqmHdqlPdqnAzqkIxrRyfRGehO9md5Cb6W30dvpHfROehe9m95D76X30fvpA/RB+hB9mD5CH6WP0cfpE/RJ+hR9mj5Dn6XP0efpC/RF+hJ9mb5CX6Wv0dfpG/RN+hZ9m75D36Xv0ffpB/RD+hH9mH5CP6Wf0c/pF/RL+hX9mn5Dv6Xf0e/pD/RH+hP9mf5Cf6W/0d/pH/RP+hf9m/5D/6X/0SmYlEwqJjWThknLpGPSMxmYjEwmJjOThcnKZGOyMzmYnEwuJjeTh8nL5GPyMwWYgkwhpjBThCnKFGOKMyWYkkwppjRThinLlGPKMxWYikwlpjJThanKVGOqMzWYmkwtpjZTh6nL1GPqMw2YhkwjpjHThGnKNGOaMzFMC6Yl04ppzbRh2jLtmPZMB6Yj04npzHRhujLdmO5MD6Yn04vpzfRh+jL9mP7MAGYgM4gZzAxhhjLDmOHMCGYkM4oZzYxhxjL/MeOY8UwsM4GJYyYyk5jJzBRmKjONmc7MYGYys5jZzBxmLjOPmc8sYBYyi5jFTDyzhElgljKJzDImiVnOrGBWMquY1cwaZi2zjlnPbGAwBmcIBjAkAxmKoRmGYRmO4RmBERmJkRmFURmN0RmDMRmLsRmHcRmP8ZmACZmIQUwys5HZxGxmtjBbmW3MdmYHs5PZxexm9jB7mX3MfuYAc5A5xBxmjjBHmWPMceYEc5I5xZxmzjBnmXPMeeYCc5G5xFxmrjBXmWvMdeYGc5O5xdxm7jB3mXvMfeYB85B5xDxmnjBPmWfMc+YF85J5xbxm3jBvmXfMe+YD85H5xHxmvjBfmW/Md+YH85P5xfxm/jB/mX9MCjYlm4pNzaZh07Lp2PRsBjYjm4nNzGZhs7LZ2OxsDjYnm4vNzeZh87L52PxsAbYgW4gtzBZhi7LF2OJsCbYkW4otzZZhy7Ll2PJsBbYiW4mtzFZhq7LV2OpsDbYmW4utzdZh67L12PpsA7Yh24htzDZhm7LN2OZsDNuCbcm2Yluzbdi2bDu2PduB7ch2YjuzXdiubDe2O9uD7cn2Ynuzfdi+bD+2PzuAHcgOYgezQ9ih7DB2ODuCHcmOYkezY9ix7H/sOHY8G8tOYOPYiewkdjI7hZ3KTmOnszPYmewsdjY7h53LzmPnswvYhewidjEbzy5hE9ilbCK7jE1il7Mr2JXsKnY1u4Zdy65j17MbWIzFWYIFLMlClmJplmFZlmN5VmBFVmJlVmFVVmN11mBN1mJt1mFd1mN9NmBDNmIRm8xuZDexm9kt7FZ2G7ud3cHuZHexu9k97F52H7ufPcAeZA+xh9kj7FH2GHucPcGeZE+xp9kz7Fn2HHuevcBeZC+xl9kr7FX2GnudvcHeZG+xt9k77F32HnuffcA+ZB+xj9kn7FP2GfucfcG+ZF+xr9k37Fv2Hfue/cB+ZD+xn9kv7Ff2G/ud/cH+ZH+xv9k/7F/2H5uCS8ml4lJzabi0XDouPZeBy8hl4jJzWbisXDYuO5eDy8nl4nJzebi8XD4uP1eAK8gV4gpzRbiiXDGuOFeCK8mV4kpzZbiyXDmuPFeBq8hV4ipzVbiqXDWuOleDq8nV4mpzdbi6XD2uPteAa8g14hpzTbimXDOuORfDteBacq241lwbri3XjmvPdeA6cp24zlwXrivXjevO9eB6cr243lwfri/Xj+vPDeAGcoO4wdwQbig3jBvOjeBGcqO40dwYbiz3HzeOG8/FchO4OG4iN4mbzE3hpnLTuOncDG4mN4ubzc3h5nLzuPncAm4ht4hbzMVzS7gEbimXyC3jkrjl3ApuJbeKW82t4dZy67j13AYO43CO4ABHcpCjOJpjOJbjOJ4TOJGTOJlTOJXTOJ0zOJOzOJtzOJfzOJ8LuJCLOMQlcxu5Tdxmbgu3ldvGbed2cDu5Xdxubg+3l9vH7ecOcAe5Q9xh7gh3lDvGHedOcCe5U9xp7gx3ljvHnecucBe5S9xl7gp3lbvGXeducDe5W9xt7g53l7vH3ececA+5R9xj7gn3lHvGPedecC+5V9xr7g33lnvHvec+cB+5T9xn7gv3lfvGfed+cD+5X9xv7g/3l/vHpeBT8qn41HwaPi2fjk/PZ+Az8pn4zHwWPiufjc/O5+Bz8rn43HwePi+fj8/PF+AL8oX4wnwRvihfjC/Ol+BL8qX40nwZvixfji/PV+Ar8pX4ynwVvipfja/O1+Br8rX42nwdvi5fj6/PN+Ab8o34xnwTvinfjG/Ox/At+JZ8K74134Zvy7fj2/Md+I58J74z34Xvynfju/M9+J58L74334fvy/fj+/MD+IH8IH4wP4Qfyg/jh/Mj+JH8KH40P4Yfy//Hj+PH87H8BD6On8hP4ifzU/ip/DR+Oj+Dn8nP4mfzc/i5/Dx+Pr+AX8gv4hfz8fwSPoFfyifyy/gkfjm/gl/Jr+JX82v4tfw6fj2/gcd4nCd4wJM85Cme5hme5Tme5wVe5CVe5hVe5TVe5w3e5C3e5h3e5T3e5wM+5CMe8cn8Rn4Tv5nfwm/lt/Hb+R38Tn4Xv5vfw+/l9/H7+QP8Qf4Qf5g/wh/lj/HH+RP8Sf4Uf5o/w5/lz/Hn+Qv8Rf4Sf5m/wl/lr/HX+Rv8Tf4Wf5u/w9/l7/H3+Qf8Q/4R/5h/wj/ln/HP+Rf8S/4V/5p/w7/l3/Hv+Q/8R/4T/5n/wn/lv/Hf+R/8T/4X/5v/w//l//EphJRCKiG1kEZIK6QT0gsZhIxCJiGzkEXIKmQTsgs5hJxCLiG3kEfIK+QT8gsFhIJCIaGwUEQoKhQTigslhJJCKaG0UEYoK5QTygsVhIpCJaGyUEWoKlQTqgs1hJpCLaG2UEeoK9QT6gsNhIZCI6Gx0ERoKjQTmgsxQguhpdBKaC20EdoK7YT2Qgeho9BJ6Cx0EboK3YTuQg+hp9BL6C30EfoK/YT+wgBhoDBIGCwMEYYKw4ThwghhpDBKGC2MEcYK/wnjhPFCrDBBiBMmCpOEycIUYaowTZguzBBmCrOE2cIcYa4wT5gvLBAWCouExUK8sERIEJYKicIyIUlYLqwQVgqrhNXCGmGtsE5YL2wQMAEXCAEIpAAFSqAFRmAFTuAFQRAFSZAFRVAFTdAFQzAFS7AFR3AFT/CFQAiFSEBCsrBR2CRsFrYIW4VtwnZhh7BT2CXsFvYIe4V9wn7hgHBQOCQcFo4IR4VjwnHhhHBSOCWcFs4IZ4VzwnnhgnBRuCRcFq4IV4VrwnXhhnBTuCXcFu4Id4V7wn3hgfBQeCQ8Fp4IT4VnwnPhhfBSeCW8Ft4Ib4V3wnvhg/BR+CR8Fr4IX4Vvwnfhh/BT+CX8Fv4If4V/QgoxpZhKTC2mEdOK6cT0YgYxo5hJzCxmEbOK2cTsYg4xp5hLzC3mEfOK+cT8YgGxoFhILCwWEYuKxcTiYgmxpFhKLC2WEcuK5cTyYgWxolhJrCxWEauK1cTqYg2xplhLrC3WEeuK9cT6YgOxodhIbCw2EZuKzcTmYozYQmwpthJbi23EtmI7sb3YQewodhI7i13ErmI3sbvYQ+wp9hJ7i33EvmI/sb84QBwoDhIHi0PEoeIwcbg4QhwpjhJHi2PEseIRcZw4XowVJ4hx4kRxkjhZnCJOFaeJ08UZ4kxxljhbnCPOFeeJ88UF4kJxkbhYjBeXiAniUjFRXCYmicvFFeJKcZW4WlwjrhXXievFDSIm4iIhApEUoUiJtMiIrMiJvCiIoiiJsqiIqqiJumiIpmiJtuiIruiJvhiIoRiJSEwWN4qbxM3iFnGruE3cLu4Qd4q7xN3iHnGvuE/cLx4QD4qHxMPiEfGoeEw8Lp4QT4qnxNPiGfGseE48L14QL4qXxMviFfGqeE28Lt4Qb4q3xNviHfGueE+8Lz4QH4qPxMfiE/Gp+Ex8Lr4QX4qvxNfiG/Gt+E58L34QP4qfxM/iF/Gr+E38Lv4Qf4q/xN/iH/Gv+E9MIaWUUkmppTRSWimdlF7KIGWUMkmZpSxSVimblF3KIeWUckm5pTxSXimflF8qIBWUCkmFpSJSUamYVFwqIZWUSkmlpTJSWamcVF6qIFWUKkmVpSpSVamaVF2qIdWUakm1pTpSXameVF9qIDWUGkmNpSZSU6mZ1FyKkVpILaVWUmupjdRWaie1lzpIHaVOUmepi9RV6iZ1l3pIPaVeUm+pj9RX6if1lwZIA6VB0mBpiDRUGiYNl0ZII6VR0mhpjDRW+k8aJ42XYqUJUpw0UZokTZamSFOladJ0aYY0U5olzZbmSHOledJ8aYG0UFokLZbipSVSgrRUSpSWSUnScmmFtFJaJa2W1khrpXXSemmDhEm4REhAIiUoURItMRIrcRIvCZIoSZIsKZIqaVKMZEimZEm25Eiu5Em+FEihFElISpY2SpukzdIWaau0Tdou7ZB2Sruk3dIeaa+0T9ovHZAOSoekw9IR6ah0TDounZBOSqek09IZ6ax0TjovXZAuSpeky9IV6ap0Tbou3ZBuSrek29Id6a50T7ovPZAeSo+kx9IT6an0THouvZBeSq+k19Ib6a30TnovfZA+Sp+kz9IX6av0Tfou/ZB+Sr+k39If6a/0T0ohp5RTyanlNHJaOZ2cXs4gZ5QzyZnlLHJWOZucXc4h55RzybnlPHJeOZ+cXy4gF5QLyYXlInJRuZhcXC4hl5RLyaXlMnJZuZxcXq4gV5QryZXlKnJVuZpcXa4h15RrybXlOnJduZ5cX24gN5QbyY3lJnJTuZncXI6RW8gt5VZya7mN3FZuJ7eXO8gd5U5yZ7mL3FXuJneXe8g95V5yb7mP3FfuJ/eXB8gD5UHyYHmIPFQeJg+XR8gj5VHyaHmMPFb+Tx4nj5dj5QlynDxRniRPlqfIU+Vp8nR5hjxTniXPlufIc+V58nx5gbxQXiQvluPlJXKCvFROlJfJSfJyeYW8Ul4lr5bXyGvldfJ6eYOMybhMyEAmZShTMi0zMitzMi8LsihLsiwrsiprsi4bsilbsi07sit7si8HcihHMpKT5Y3yJnmzvEXeKm+Tt8s75J3yLnm3vEfeK++T98sH5IPyIfmwfEQ+Kh+Tj8sn5JPyKfm0fEY+K5+Tz8sX5IvyJfmyfEW+Kl+Tr8s35JvyLfm2fEe+K9+T78sP5IfyI/mx/ER+Kj+Tn8sv5JfyK/m1/EZ+K7+T38sf5I/yJ/mz/EX+Kn+Tv8s/5J/yL/m3/Ef+K/+TUygplVRKaiWNklZJp6RXMigZlUxKZiWLklXJpmRXcig5lVxKbiWPklfJp+RXCigFlUJKYaWIUlQpphRXSigllVJKaaWMUlYpp5RXKigVlUpKZaWKUlWpplRXaig1lVpKbaWOUlepp9RXGigNlUZKY6WJ0lRppjRXYpQWSkulldJaaaO0Vdop7ZUOSkelk9JZ6aJ0Vbop3ZUeSk+ll9Jb6aP0Vfop/ZUBykBlkDJYGaIMVYYpw5URykhllDJaGaOMVf5TxinjlVhlghKnTFQmKZOVKcpUZZoyXZmhzFRmKbOVOcpcZZ4yX1mgLFQWKYuVeGWJkqAsVRKVZUqSslxZoaxUVimrlTXKWmWdsl7ZoGAKrhAKUEgFKpRCK4zCKpzCK4IiKpIiK4qiKpqiK4ZiKpZiK47iKp7iK4ESKpGClGRlo7JJ2axsUbYq25Ttyg5lp7JL2a3sUfYq+5T9ygHloHJIOawcUY4qx5TjygnlpHJKOa2cUc4q55TzygXlonJJuaxcUa4q15Tryg3lpnJLua3cUe4q95T7ygPlofJIeaw8UZ4qz5TnygvlpfJKea28Ud4q75T3ygflo/JJ+ax8Ub4q35Tvyg/lp/JL+a38Uf4q/5QUako1lZpaTaOmVdOp6dUMakY1k5pZzaJmVbOp2dUcak41l5pbzaPmVfOp+dUCakG1kFpYLaIWVYupxdUSakm1lFpaLaOWVcup5dUKakW1klpZraJWVaup1dUaak21llpbraPWVeup9dUGakO1kdpYbaI2VZupzdUYtYXaUm2ltlbbqG3Vdmp7tYPaUe2kdla7qF3Vbmp3tYfaU+2l9lb7qH3Vfmp/dYA6UB2kDlaHqEPVYepwdYQ6Uh2ljlbHqGPV/9Rx6ng1Vp2gxqkT1UnqZHWKOlWdpk5XZ6gz1VnqbHWOOledp85XF6gL1UXqYjVeXaImqEvVRHWZmqQuV1eoK9VV6mp1jbpWXaeuVzeomIqrhApUUoUqpdIqo7Iqp/KqoIqqpMqqoqqqpuqqoZqqpdqqo7qqp6b8vwxGarK6Ud2kbla3qFvVbep2dYe6U92l7lb3qHvVfep+9YB6UD2kHlaPqEfVY+px9YR6Uj2lnlbPqGfVc+p59YJ6Ub2kXlavqFfVa+p19YZ6U72l3lbvqHfVe+p99YH6UH2kPlafqE/VZ+pz9YX6Un2lvlbfqG/Vd+p79YP6Uf2kfla/qF/Vb+p39Yf6U/2l/lb/qH/Vf2oKLaWWSkutpdHSaum09FoGLaOWScusZdGyatm07FoOLaeWS8ut5dHyavm0/FoBraBWSCusFdGKasW04loJraRWSiutldHKauW08loFraJWSausVdGqatW06loNraZWS6ut1dHqavW0+loDraHWSGusNdGaas205lqM1kJrqbXSWmtttLZaO6291kHrqHXSOmtdtK5aN6271kPrqfXSemt9tL5aP62/NkAbqA3SBmtDtKHaMG24NkIbqY3SRmtjtLHaf9o4bbwWq03Q4rSJ2iRtsjZFm6pN06ZrM7SZ2ixttjZHm6vN0+ZrC7SF2iJtsRavLdEStKVaorZMS9KWayu0ldoqbbW2RlurrdPWaxs0TMM1QgMaqUGN0miN0ViN03hN0ERN0mRN0VRN03TN0EzN0mzN0VzN03wt0EIt0pCWrG3UNmmbtS3aVm2btl3boe3Udmm7tT3aXm2ftl87oB3UDmmHtSPaUe2Ydlw7oZ3UTmmntTPaWe2cdl67oF3ULmmXtSvaVe2adl27od3Ubmm3tTvaXe2edl97oD3UHmmPtSfaU+2Z9lx7ob3UXmmvtTfaW+2d9l77oH3UPmmftS/aV+2b9l37of3Ufmm/tT/aX+2flkJPqafSU+tp9LR6Oj29nkHPqGfSM+tZ9Kx6Nj27nkPPqefSc+t59Lx6Pj2/XkAvqBfSC+tF9KJ6Mb24XkIvqZfSS+tl9LJ6Ob28XkGvqFfSK+tV9Kp6Nb26XkOvqdfSa+t19Lp6Pb2+3kBvqDfSG+tN9KZ6M725HqO30FvqrfTWehu9rd5Ob6930DvqnfTOehe9q95N76730HvqvfTeeh+9r95P768P0Afqg/TB+hB9qD5MH66P0Efqo/TR+hh9rP6fPk4fr8fqE/Q4faI+SZ+sT9Gn6tP06foMfaY+S5+tz9Hn6vP0+foCfaG+SF+sx+tL9AR9qZ6oL9OT9OX6Cn2lvkpfra/R1+rr9PX6Bh3TcZ3QgU7qUKd0Wmd0Vud0Xhd0UZd0WVd0Vdd0XTd0U7d0W3d0V/d0Xw/0UI90pCfrG/VN+mZ9i75V36Zv13foO/Vd+m59j75X36fv1w/oB/VD+mH9iH5UP6Yf10/oJ/VT+mn9jH5WP6ef1y/oF/VL+mX9in5Vv6Zf12/oN/Vb+m39jn5Xv6ff1x/oD/VH+mP9if5Uf6Y/11/oL/VX+mv9jf5Wf6e/1z/oH/VP+mf9i/5V/6Z/13/oP/Vf+m/9j/5X/6enMFIaqYzURhojrZHOSG9kMDIamYzMRhYjq5HNyG7kMHIauYzcRh4jr5HPyG8UMAoahYzCRhGjqFHMKG6UMEoapYzSRhmjrFHOKG9UMCoalYzKRhWjqlHNqG7UMGoatYzaRh2jrlHPqG80MBoajYzGRhOjqdHMaG7EGC2MlkYro7XRxmhrtDPaGx2MjkYno7PRxehqdDO6Gz2MnkYvo7fRx+hr9DP6GwOMgcYgY7AxxBhqDDOGGyOMkcYoY7Qxxhhr/GeMM8YbscYEI86YaEwyJhtTjKnGNGO6McOYacwyZhtzjLnGPGO+scBYaCwyFhvxxhIjwVhqJBrLjCRjubHCWGmsMlYba4y1xjpjvbHBwAzcIAxgkAY0KIM2GIM1OIM3BEM0JEM2FEM1NEM3DMM0LMM2HMM1PMM3AiM0IgMZycZGY5Ox2dhibDW2GduNHcZOY5ex29hj7DX2GfuNA8ZB45Bx2DhiHDWOGceNE8ZJ45Rx2jhjnDXOGeeNC8ZF45Jx2bhiXDWuGdeNG8ZN45Zx27hj3DXuGfeNB8ZD45Hx2HhiPDWeGc+NF8ZL45Xx2nhjvDXeGe+ND8ZH45Px2fhifDW+Gd+NH8ZP45fx2/hj/DX+GSnMlGYqM7WZxkxrpjPTmxnMjGYmM7OZxcxqZjOzmznMnGYuM7eZx8xr5jPzmwXMgmYhs7BZxCxqFjOLmyXMkmYps7RZxixrljPLmxXMimYls7JZxaxqVjOrmzXMmmYts7ZZx6xr1jPrmw3MhmYjs7HZxGxqNjObmzFmjNnSbGm2Nlubbc22ZnuzvdnR7Gh2NjubXc2uZnezu9nT7Gn2Nnubfc2+Zn+zvznQHGgONgebQ82h5nBzhDnSHGmONkebY82x5jhznBlrxppxZpw5yZxsTjGnmtPM6eYMc6Y5y5xtzjHnmvPM+eYCc6G5yFxsxpvxZoKZYCaaiWaSmWSuMFeYq8xV5hpzjbnOXGduMDeYuImbwAQmNKFJm4zJmpzJm4IpmpIpm4qpmpqpm4ZpmpZpm47pmp7pm4EZmpGJzGRzo7nJ3GxuMbea28zt5g5zp7nL3G3uMfea+8z95gHzoHnIPGweMY+ax8zj5gnzpHnKPG2eMc+a58zz5gXzonnJvGxeMa+a18zr5g3zpnnLvG3eMe+a98z75gPzofnIfGw+MZ+az8zn5gvzpfnKfG2+Md+a78z35gfzo/nJ/Gx+Mb+a38zv5g/zp/nL/G3+Mf+a/8wUVkorlZXaSmOltdJZ6a0MVkYrk5XZymJltbJZ2a0cVk4rl5XbymPltfJZ+a0CVkGrkFXYKmIVtYpZxa0SVkmrlFXKKmOVscpZ5awKVgWrklXJqmJVsapZ1awaVk2rllXLqmPVsepZ9awGVgOrkdXIamI1sZpZzawYK8ZqabW0WlutrbZWW6u91d7qaHW0Oludra5WV6u71d3qafW0elu9rb5WX6u/1d8aaA20BluDraHWUGu4NdwaaY20RlujrbHWWGucNc6KtWKtOCvOmmRNsqZYU61p1nRrhjXTmmXNtuZYc6251nxrvrXQWmQtsuKteCvBSrASrUQryUqyVlgrrVXWamu1tdZaZ623NliYhVuEBSzSghZl0RZjsRZn8ZZgiZZkyZZiqZZm6ZZhmZZl2ZZjuZZn+VZghVZkISvZ2mhtsjZbW6yt1jZru7XD2mntsnZbe6y91j5rv3XAOmgdsg5bR6yj1jHruHXCOmmdsk5bZ6yz1jnrvHXBumhdsi5bV6yr1jXrunXDumndsm5bd6y71j3rvvXAemg9sh5bT6yn1jPrufXCemm9sl5bb6y31jvrvfXB+mh9sj5bX6yv1jfru/XD+mn9sn5bf6y/1j8rhZ3STmWnttPYae10dno7g53RzmRntrPYWe1sdnY7h53TzmXntvPYee18dn67gF3QLmQXtovYRe1idnG7hF3SLmWXtsvYZe1ydnm7gl3RrmRXtqvYVe1qdnW7hl3TrmXXtuvYde16dn27gd3QbmQ3tpvYTe1mdnM7xm5ht7Rb2a3tNnZbu53d3u5gd7Q72Z3tLnZXu5vd3e5h97R72b3tPnZfu5/d3x5gD7QH2YPtIfZQe5g93B5hj7RH2aPtMfZY+z97nD3ejrUn2HH2RHuSPdmeYk+1p9nT7Rn2THuWPdueY8+159nz7QX2QnuRvdiOt5fYCfZSO9FeZifZy+0V9kp7lb3aXmOvtdfZ6+0NNmbjNmEDm7ShTdm0zdiszdm8LdiiLdmyrdiqrdm6bdimbdm27diu7dm+HdihHdnITrY32pvszfYWe6u9zd5u77B32rvs3fYee6+9z95vH7AP2ofsw/YR+6h9zD5un7BP2qfs0/YZ+6x9zj5vX7Av2pfsy/YV+6p9zb5u37Bv2rfs2/Yd+659z75vP7Af2o/sx/YT+6n9zH5uv7Bf2q/s1/Yb+639zn5vf7A/2p/sz/YX+6v9zf5u/7B/2r/s3/Yf+6/9z07hpHRSOamdNE5aJ52T3sngZHQyOZmdLE5WJ5uT3cnh5HRyObmdPE5eJ5+T3yngFHQKOYWdIk5Rp5hT3CnhlHRKOaWdMk5Zp5xT3qngVHQqOZWdKk5Vp5pT3anh1HRqObWdOk5dp55T32ngNHQaOY2dJk5Tp5nT3IlxWjgtnVZOa6eN09Zp57R3OjgdnU5OZ6eL09Xp5nR3ejg9nV5Ob6eP09fp5/R3BjgDnUHOYGeIM9QZ5gx3RjgjnVHOaGeMM9b5zxnnjHdinQlOnDPRmeRMdqY4U51pznRnhjPTmeXMduY4c515znxngbPQWeQsduKdJU6Cs9RJdJY5Sc5yZ4Wz0lnlrHbWOGuddc56Z4ODObhDOMAhHehQDu0wDutwDu8IjuhIjuwojupoju4YjulYju04jut4ju8ETuhEDnKSnY3OJmezs8XZ6mxztjs7nJ3OLme3s8fZ6+xz9jsHnIPOIeewc8Q56hxzjjsnnJPOKee0c8Y565xzzjsXnIvOJeeyc8W56lxzrjs3nJvOLee2c8e569xz7jsPnIfOI+ex88R56jxznjsvnJfOK+e188Z567xz3jsfnI/OJ+ez88X56nxzvjs/nJ/OL+e388f56/xzUrgp3VRuajeNm9ZN56Z3M7gZ3UxuZjeLm9XN5mZ3c7g53VxubjePm9fN5+Z3C7gF3UJuYbeIW9Qt5hZ3S7gl3VJuabeMW9Yt55Z3K7gV3UpuZbeKW9Wt5lZ3a7g13VpubbeOW9et59Z3G7gN3UZuY7eJ29Rt5jZ3Y9wWbku3ldvabeO2ddu57d0Obke3k9vZ7eJ2dbu53d0ebk+3l9vb7eP2dfu5/d0B7kB3kDvYHeIOdYe5w90R7kh3lDvaHeOOdf9zx7nj3Vh3ghvnTnQnuZPdKe5Ud5o73Z3hznRnubPdOe5cd547313gLnQXuYvdeHeJm+AudRPdZW6Su9xd4a50V7mr3TXuWnedu97d4GIu7hIucEkXupRLu4zLupzLu4IrupIru4qrupqru4ZrupZru47rup7ru4EbupGL3GR3o7vJ3exucbe629zt7g53p7vL3e3ucfe6+9z97gH3oHvIPewecY+6x9zj7gn3pHvKPe2ecc+659zz7gX3onvJvexeca+619zr7g33pnvLve3ece+699z77gP3ofvIfew+cZ+6z9zn7gv3pfvKfe2+cd+679z37gf3o/vJ/ex+cb+639zv7g/3p/vL/e3+cf+6/9wUXkovlZfaS+Ol9dJ56b0MXkYvk5fZy+Jl9bJ52b0cXk4vl5fby+Pl9fJ5+b0CXkGvkFfYK+IV9Yp5xb0SXkmvlFfaK+OV9cp55b0KXkWvklfZq+JV9ap51b0aXk2vllfbq+PV9ep59b0GXkOvkdfYa+I19Zp5zb0Yr4XX0mvltfbaeG29dl57r4PX0evkdfa6eF29bl53r4fX0+vl9fb6eH29fl5/b4A30BvkDfaGeEO9Yd5wb4Q30hvljfbGeGO9/7xx3ngv1pvgxXkTvUneZG+KN9Wb5k33ZngzvVnebG+ON9eb5833FngLvUXeYi/eW+IleEu9RG+Zl+Qt91Z4K71V3mpvjbfWW+et9zZ4mId7hAc80oMe5dEe47Ee5/Ge4Ime5Mme4qme5ume4Zme5dme47me5/le4IVe5CEv2dvobfI2e1u8rd42b7u3w9vp7fJ2e3u8vd4+b793wDvoHfIOe0e8o94x77h3wjvpnfJOe2e8s94577x3wbvoXfIue1e8q94177p3w7vp3fJue3e8u9497773wHvoPfIee0+8p94z77n3wnvpvfJee2+8t9477733wfvoffI+e1+8r94377v3w/vp/fJ+e3+8v94/L4Wf0k/lp/bT+Gn9dH56P4Of0c/kZ/az+Fn9bH52P4ef08/l5/bz+Hn9fH5+v4Bf0C/kF/aL+EX9Yn5xv4Rf0i/ll/bL+GX9cn55v4Jf0a/kV/ar+FX9an51v4Zf06/l1/br+HX9en59v4Hf0G/kN/ab+E39Zn5zP8Zv4bf0W/mt/TZ+W7+d397v4Hf0O/md/S5+V7+b393v4ff0e/m9/T5+X7+f398f4A/0B/mD/SH+UH+YP9wf4Y/0R/mj/TH+WP8/f5w/3o/1J/hx/kR/kj/Zn+JP9af50/0Z/kx/lj/bn+PP9ef58/0F/kJ/kb/Yj/eX+An+Uj/RX+Yn+cv9Ff5Kf5W/2l/jr/XX+ev9DT7m4z7hA5/0oU/5tM/4rM/5vC/4oi/5sq/4qq/5um/4pm/5tu/4ru/5vh/4oR/5yE/2N/qb/M3+Fn+rv83f7u/wd/q7/N3+Hn+vv8/f7x/wD/qH/MP+Ef+of8w/7p/wT/qn/NP+Gf+sf84/71/wL/qX/Mv+Ff+qf82/7t/wb/q3/Nv+Hf+uf8+/7z/wH/qP/Mf+E/+p/8x/7r/wX/qv/Nf+G/+t/85/73/wP/qf/M/+F/+r/83/7v/wf/q//N/+H/+v/89PEaQMUgWpgzRB2iBdkD7IEGQMMgWZgyxB1iBbkD3IEeQMcgW5gzxB3iBfkD8oEBQMCgWFgyJB0aBYUDwoEZQMSgWlgzJB2aBcUD6oEFQMKgWVgypB1aBaUD2oEdQMagW1gzpB3aBeUD9oEDQMGgWNgyZB06BZ0DyICVoELYNWQeugTdA2aBe0DzoEHYNOQeegS9A16BZ0D3oEPYNeQe+gT9A36Bf0DwYEA4NBweBgSDA0GBYMD0YEI4NRwehgTDA2+C8YF4wPYoMJQVwwMZgUTA6mBFODacH0YEYwM5gVzA7mBHODecH8YEGwMFgULA7igyVBQrA0SAyWBUnB8mBFsDJYFawO1gRrg3XB+mBDgAV4QAQgIAMYUAEdMAEbcAEfCIEYSIEcKIEaaIEeGIEZWIEdOIEbeIEfBEEYRAEKkoONwaZgc7Al2BpsC7YHO4Kdwa5gd7An2BvsC/YHB4KDwaHgcHAkOBocC44HJ4KTwangdHAmOBucC84HF4KLwaXgcnAluBpcC64HN4Kbwa3gdnAnuBvcC+4HD4KHwaPgcfAkeBo8C54HL4KXwavgdfAmeBu8C94HH4KPwafgc/Al+Bp8C74HP4Kfwa/gd/An+Bv8C1KEKcNUYeowTZg2TBemDzOEGcNMYeYwS5g1zBZmD3OEOcNcYe4wT5g3zBfmDwuEBcNCYeGwSFg0LBYWD0uEJcNSYemwTFg2LBeWDyuEFcNKYeWwSlg1rBZWD2uENcNaYe2wTlg3rBfWDxuEDcNGYeOwSdg0bBY2D2PCFmHLsFXYOmwTtg3bhe3DDmHHsFPYOewSdg27hd3DHmHPsFfYO+wT9g37hf3DAeHAcFA4OBwSDg2HhcPDEeHIcFQ4OhwTjg3/C8eF48PYcEIYF04MJ4WTwynh1HBaOD2cEc4MZ4Wzwznh3HBeOD9cEC4MF4WLw/hwSZgQLg0Tw2VhUrg8XBGuDFeFq8M14dpwXbg+3BBiIR4SIQjJEIZUSIdMyIZcyIdCKIZSKIdKqIZaqIdGaIZWaIdO6IZe6IdBGIZRiMLkcGO4Kdwcbgm3htvC7eGOcGe4K9wd7gn3hvvC/eGB8GB4KDwcHgmPhsfC4+GJ8GR4KjwdngnPhufC8+GF8GJ4KbwcXgmvhtfC6+GN8GZ4K7wd3gnvhvfC++GD8GH4KHwcPgmfhs/C5+GL8GX4Knwdvgnfhu/C9+GH8GP4Kfwcfgm/ht/C7+GP8Gf4K/wd/gn/hv/CFFHKKFWUOkoTpY3SRemjDFHGKFOUOcoSZY2yRdmjHFHOKFeUO8oT5Y3yRfmjAlHBqFBUOCoSFY2KRcWjElHJqFRUOioTlY3KReWjClHFqFJUOaoSVY2qRdWjGlHNqFZUO6oT1Y3qRfWjBlHDqFHUOGoSNY2aRc2jmKhF1DJqFbWO2kRto3ZR+6hD1DHqFHWOukRdo25R96hH1DPqFfWO+kR9o35R/2hANDAaFA2OhkRDo2HR8GhENDIaFY2OxkRjo/+icdH4KDaaEMVFE6NJ0eRoSjQ1mhZNj2ZEM6NZ0exoTjQ3mhfNjxZEC6NF0eIoPloSJURLo8RoWZQULY9WRCujVdHqaE20NloXrY82RFiER0QEIjKCERXREROxERfxkRCJkRTJkRKpkRbpkRGZkRXZkRO5kRf5URCFURShKDnaGG2KNkdboq3Rtmh7tCPaGe2Kdkd7or3Rvmh/dCA6GB2KDkdHoqPRseh4dCI6GZ2KTkdnorPRueh8dCG6GF2KLkdXoqvRteh6dCO6Gd2Kbkd3orvRveh+9CB6GD2KHkdPoqfRs+h59CJ6Gb2KXkdvorfRu+h99CH6GH2KPkdfoq/Rt+h79CP6Gf2Kfkd/or/RvygFSolSodQoDUqL0qH0KAPKiDKhzCgLyoqyoewoB8qJcqHcKA/Ki/Kh/KgAKogKocKoCCqKiqHiqAQqiUqh0qgMKovKofKoAqqIKqHKqAqqiqqh6qgGqolqodqoDqqL6qH6qAFqiBqhxqgJaoqaoeYoBrVALVEr1Bq1QW1RO9QedUAdUSfUGXVBXVE31B31QD1RL9Qb9UF9UT/UHw1AA9EgNBgNQUPRMDQcjUAj0Sg0Go1BY9F/aBwaj2LRBBSHJqJJaDKagqaiaWg6moFmolloNpqD5qJ5aD5agBaiRWgxikdLUAJaihLRMpSElqMVaCVahVajNWgtWofWow0IQzgiEEAkgohCNGIQizjEIwGJSEIyUpCKNKQjA5nIQjZykIs85KMAhShCCCWjjWgT2oy2oK1oG9qOdqCdaBfajfagvWgf2o8OoIPoEDqMjqCj6Bg6jk6gk+gUOo3OoLPoHDqPLqCL6BK6jK6gq+gauo5uoJvoFrqN7qC76B66jx6gh+gReoyeoKfoGXqOXqCX6BV6jd6gt+gdeo8+oI/oE/qMvqCv6Bv6jn6gn+gX+o3+oL/oH0qRnDI5VXLq5DTJaZPTJadPzpCcMTlTcubkLMlZk7MlZ0/OkZwzOVdy7uQ8yXmT8yXnTy6QXDD5fyzcY2PY3AIA4K7bur2zbdu2bdu2bds2OjO2fZKTk842O6+zer/cP/Lkw/JjBbCCWCGsMFYEK4oVw4pjJbCSWCmsNFYGK4uVw8pjFbCKWCWsMlYFq4pVw6pjNbCaWC2sNlYHq4vVw+pjDbCGWCOsMdYEa4o1w5pjLbCWWCusNdYGa4u1w9pjHbCOWCesM9YF64p1w7pjPbCeWC+sN9YH64v1w/pjA7CB2CBsMDYEG4oNw4ZjI7CR2ChsNDYGG4uNw8ZjE7CJ2CRsMjYFm4pNw6ZjM7CZ2CxsNjYHm4vNw+ZjC7CF2CJsMbYEW4otw5ZjK7CV2CpsNbYGW4utw9ZjG7CN2CZsM7YF24ptw7ZjO7Cd2C5sN7YH24vtw/ZjB7CD2CHsMHYEO4odw45j8dgJ7CR2CjuNncHOYuew89gF7CJ2CbuMYRiOERiJURiNMRiLcRiPCZiISZiMKZiKaZiOGZiJWZiNOZiLeRjAfCzAIBZiCIuwBOwKdhW7hl3HbmA3sVvYbewOdhe7h93HHmAPsUfYY+wJ9hR7hj3HXmAvsVfYaywRe4O9xd5h77EP2EfsE/YZS8K+YF+xb9h37Af2E/uF/cb+YH+xf1gyFoOnwGPxlHgqPDUeh6fB0+L/4enw9HgGPCOeCc+MZ8Gz4tnw7HgOPCeeC8+N58Hz4vnw/HgBvCBeCC+MF8GL4sXw4ngJvCReCi+Nl8HL4uXw8ngFvCJeCa+MV8Gr4tXw6ngNvCZeC6+N18Hr4vXw+ngDvCHeCG+MN8Gb4s3w5ngLvCXeCm+Nt8Hb4u3w9ngHvCPeCe+Md8G74t3w7ngPvCfeC++N98H74v3w/vgAfCA+CB+MD8GH4sPw4fgIfCQ+Ch+Nj8HH4uPw8fgEfCI+qVBsTAw+FZ+GT8dn4DPxWfhsfA4+F5+Hz8cX4AvxRfhifAm+FF+GL8dX4CvxVfhqfA2+Fl+Hr8c34BvxTfhmfAu+Fd+Gb8d34DvxXfhufA++F9+H78cP4AfxQ/hh/Ah+FD+GH8fj8RP4SfwUfho/g5/Fz+Hn8Qv4RfwSfhnHcBwncBKncBpncBbncB4XcBGXcBlXcBXXcB03cBO3cBt3cBf3cID7eIBDPMQRHuEJ+BX8Kn4Nv47fwG/it/Db+B38Ln4Pv48/wB/ij/DH+BP8Kf4Mf46/wF/ir/DXeCL+Bn+Lv8Pf4x/wj/gn/DOehH/Bv+Lf8O/4D/wn/gv/jf/B/+L/8GQ8hkhBxBIpiVREaiKOSEOkJf4j0hHpiQxERiITkZnIQmQlshHZiRxETiIXkZvIQ+Ql8hH5iQJEQaIQUZgoQhQlihHFiRJESaIUUZooQ5QlyhHliQpERaISUZmoQlQlqhHViRpETaIWUZuoQ9Ql6hH1iQZEQ6IR0ZhoQjQlmhHNiRZES6IV0ZpoQ7Ql2hHtiQ5ER6IT0ZnoQnQluhHdiR5ET6IX0ZvoQ/Ql+hH9iQHEQGIQMZgYQgwlhhHDiRHESGIUMZoYQ4wlxhHjiQnERGISMZmYQkwlphHTiRnETGIWMZuYQ8wl5hHziQXEQmIRsZhYQiwllhHLiRXESmIVsZpYQ6wl1hHriQ3ERmITsZnYQmwlthHbiR3ETmIXsZvYQ+wl9hH7iQPEQeIQcZg4QhwljhHHiXjiBHGSOEWcJs4QZ4lzxHniAnGRuERcJjACJwiCJCiCJhiCJTiCJwRCJCRCJhRCJTRCJwzCJCzCJhzCJTwCED4REJAICURERAJxhbhKXCOuEzeIm8Qt4jZxh7hL3CPuEw+Ih8Qj4jHxhHhKPCOeEy+Il8Qr4jWRSLwh3hLviPfEB+Ij8Yn4TCQRX4ivxDfiO/GD+En8In4Tf4i/xD8imYghU5CxZEoyFZmajCPTkGnJ/8h0ZHoyA5mRzERmJrOQWclsZHYyB5mTzEXmJvOQecl8ZH6yAFmQLEQWJouQRcliZHGyBFmSLEWWJsuQZclyZHmyAlmRrERWJquQVclqZHWyBlmTrEXWJuuQdcl6ZH2yAdmQbEQ2JpuQTclmZHOyBdmSbEW2JtuQbcl2ZHuyA9mR7ER2JruQXcluZHeyB9mT7EX2JvuQfcl+ZH9yADmQHEQOJoeQQ8lh5HByBDmSHEWOJseQY8lx5HhyAjmRnEROJqeQU8lp5HRyBjmTnEXOJueQc8l55HxyAbmQXEQuJpeQS8ll5HJyBbmSXEWuJteQa8l15HpyA7mR3ERuJreQW8lt5HZyB7mT3EXuJveQe8l95H7yAHmQPEQeJo+QR8lj5HEynjxBniRPkafJM+RZ8hx5nrxAXiQvkZdJjMRJgiRJiqRJhmRJjuRJgRRJiZRJhVRJjdRJgzRJi7RJh3RJjwSkTwYkJEMSkRGZQF4hr5LXyOvkDfImeYu8Td4hY7LcI++TD8iH5CPyMfmEfEo+I5+TL8iX5CvyNZlIviHfku/I9+QH8iP5ifxMJpFfyK/kN/I7+YP8Sf4if5N/yL/kPzKZjKFSULFUSioVlZqKo9JQaan/qHRUeioDlZHKRGWmslBZqWxUdioHlZPKReWm8lB5qXxUfqoAVZAqRBWmilBFY2Oo4lQJqiRViipNlaHKUuWo8lQFqiJViapMVaGqUtWo6lQNqiZVi6pN1aHqUvWo+lQDqiHViGpMNaGaUs2o5lQLqiXVimpNtaHaUu2o9lQHqiPViepMdaG6Ut2o7lQPqifVi+pN9aH6Uv2o/tQAaiA1iBpMDaGGUsOo4dQIaiQ1ihpNjaHGUuOo8dQEaiI1iZpMTaGmUtOo6dQMaiY1i5pNzaHmUvOo+dQCaiG1iFpMLaGWUsuo5dQKaiW1ilpNraHWUuuo9dQGaiO1idpMbaG2Utuo7dQOaie1i9pN7aH2Uvuo/dQB6iB1iDpMHaGOUseo41Q8dYI6SZ2iTlNnqLPUOeo8dYG6SF2iLlMYhVMERVIURVMMxVIcxVMCJVISJVMKpVIapVMGZVIWZVMO5VIeBSifCihIhRSiIiqBukJdpa5R16kb1E3qFnWbukPdpe5R96kH1EPqEfWYekI9pZ5Rz6kX1EvqFfWaSqTeUG+pd9R76gP1kfpEfaaSqC/UV+ob9Z36Qf2kflG/qT/UX+oflUzF0CnoWDolnYpOTcfRaei0KWLodHR6OgOdkc5EZ6az0FnpbHR2Ogedk85F56bz0HnpfHR+ugBdkC5EF6aL0EXpYnRxugRdki5Fl6bL0GXpcnR5ugJdka5EV6ar0FXpanR1ugZdk65F16br0HXpenR9ugHdkG5EN6ab0E3pZnRzugXdkm5Ft6bb0G3pdnR7ugPdke5Ed6a70F3pbnR3ugfdk+5F96b70H3pfnR/egA9kB5ED6aH0EPpYfRwegQ9kh5Fj6bH0GPpcfR4egI9kZ5ET6an0FPpafR0egY9k55Fz6bn0HPpefR8egG9kF5EL6aX0EvpZfRyegW9kl5Fr6bX0GvpdfR6egO9kd5Eb6a30FvpbfR2ege9k95F76b30HvpffR++gB9kD5EH6aP0EfpY/RxOp4+QZ+kT9Gn6TP0WfocfZ6+QF+kL9GXaYzGaYImaYqmaYZmaY7maYEWaYmWaYVWaY3WaYM2aYu2aYd2aY8GtE8HNKRDGtERnUBfoa/S1+jr9A36Jn2Lvk3foe/S9+j79AP6If2Ifkw/oZ/Sz+jn9Av6Jf2Kfk0n0m/ot/Q7+j39gf5If6I/00n0F/or/Y3+Tv+gf9K/6N/0H/ov/Y9OpmOYFEwsk5JJxaRm4pg0TFrmPyYdk57JwGRkMjGZmSxMViYbk53JweRkcjG5mTxMXiYfk58pwBRkCjGFmSJMUaYYU5wpwZRkSjGlmTJMWaYcU56pwFRkKjGVmSpMVaYaU52pwdRkajG1mTpMXaYeU59pwDRkGjGNmSZMU6YZ05xpwbRkWjGtmTZMW6Yd057pwHRkOjGdmS5MV6Yb053pwfRkejG9mT5MX6Yf058ZwAxkBjGDmSHMUGYYM5wZwYxkRjGjmTHMWGYcM56ZwExkJjGTmSnMVGYaM52ZwcxkZjGzmTnMXGYeM59ZwCxkFjGLmSXMUmYZs5xZwaxkVjGrmTXMWmYds57ZwGxkNjGbmS3MVmYbs53ZwexkdjG7mT3MXmYfs585wBxkDjGHmSPMUeYYc5yJZ04wJ5lTzGnmDHOWOcecZy4wF5lLzGUGY3CGYEiGYmiGYViGY3hGYERGYmRGYVRGY3TGYEzGYmzGYVzGYwDjMwEDmZBBTMQkMFeYq8w15jpzg7nJ3GJuM3eYu8w95j7zgHnIPGIeM0+Yp8wz5jnzgnnJvGJeM4nMG+Yt8455z3xgPjKfmM9MEvOF+cp8Y74zP5ifzC/mN/OH+cv8Y5KZGDYFG8umZFOxqdk4Ng2blv2PTcemZzOwGdlMbGY2C5uVzcZmZ3OwOdlcbG42D5uXzcfmZwuwBdlCbGG2CFuULcYWZ0uwJdlSbGm2DFuWLceWZyuwFdlKbGW2CluVrcZWZ2uwNdlabG22DluXrcfWZxuwDdlGbGO2CduUbcY2Z1uwLdlWbGu2DduWbce2ZzuwHdlObGe2C9uV7cZ2Z3uwPdlebG+2D9uX7cf2ZwewA9lB7GB2CDuUHcYOZ0ewI9lR7Gh2DDuWHceOZyewE9lJ7GR2CjuVncZOZ2ewM9lZ7Gx2DjuXncfOZxewC9lF7GJ2CbuUXcYuZ1ewK9lV7Gp2DbuWXceuZzewG9lN7GZ2C7uV3cZuZ3ewO9ld7G52D7uX3cfuZw+wB9lD7GH2CHuUPcYeZ+PZE+xJ9hR7mj3DnmXPsefZC+xF9hJ7mcVYnCVYkqVYmmVYluVYnhVYkZVYmVVYldVYnTVYk7VYm3VYl/VYwPpswEI2ZBEbsQnsFfYqe429zt5gb7K32NvsHfYue4+9zz5gH7KP2MfsE/Yp+4x9zr5gX7Kv2NdsIvuGfcu+Y9+zH9iP7Cf2M5vEfmG/st/Y7+wP9if7i/3N/mH/sv/YZDaGS8HFcim5VFxqLo5Lw6Xl/uPScem5DFxGLhOXmcvCZeWycdm5HFxOLheXm8vD5eXycfm5AlxBrhBXmCvCFeWKccW5ElxJrhRXmivDleXKceW5ClxFrhJXmavCVeWqcdW5GlxNrhZXm6vD1eXqcfW5BlxDrhHXmGvCNeWacc25FlxLrhXXmmvDteXace25DlxHrhPXmevCdeW6cd25HlxPrhfXm+vD9eX6cf25AdxAbhA3mBvCDeWGccO5EdxIbhQ3mhvDjeXGceO5CdxEbhI3mZvCTeWmcdO5GdxMbhY3m5vDzeXmcfO5BdxCbhG3mFvCLeWWccu5FdxKbhW3mlvDreXWceu5DdxGbhO3mdvCbeW2cdu5HdxObhe3m9vD7eX2cfu5A9xB7hB3mDvCHeWOcce5eO4Ed5I7xZ3mznBnuXPcee4Cd5G7xF3mMA7nCI7kKI7mGI7lOI7nBE7kJE7mFE7lNE7nDM7kLM7mHM7lPA5wPhdwkAs5xEVcAneFu8pd465zN7ib3C3uNneHu8vd4+5zD7iH3CPuMfeEe8o9455zL7iX3CvuNZfIveHecu+499wH7iP3ifvMJXFfuK/cN+4794P7yf3ifnN/uL/cPy6Zi+FT8LF8Sj4Vn5qP49Pwafn/+HR8ej4Dn5HPxGfms/BZ+Wx8dj4Hn5PPxefm8/B5+Xx8fr4AX5AvxBfmi/BF+WJ8cb4EX5IvxZfmy/Bl+XJ8eb4CX5GvxFfmq/BV+Wp8db4GX5Ovxdfm6/B1+Xp8fb4B35BvxDfmm/BN+WZ8c74F35Jvxbfm2/Bt+XZ8e74D35HvxHfmu/BJfDe+O9+D78n34nvzffi+fD++Pz+AH8gP4gfzQ/ih/DB+OD+CH8mP4kfzY/ix/Dh+PD+Bn8hP4ifzU/ip/DR+Oj+Dn8nP4mfzc/i5/Dx+Pr+AX8gv4hfzS/il/DJ+Ob+CX8mv4lfza/i1/Dp+Pb+B38hv4jfzW/it/DZ+O7+D38nv4nfze/i9/D5+P3+AP8gf4g/zR/ij/DH+OB/Pn+BP8qf40/wZ/ix/jj/PX+Av8pf4yzzG4zzBkzzF0zzDszzH87zAi7zEy7zCq7zG67zBm7zF27zDu7zHA97nAx7yIY/4iE/gr/BX+Wv8df4Gf5O/xd/m7/B3+Xv8ff4B/5B/xD/mn/BP+Wf8c/4F/5J/xb/mE/k3/Fv+Hf+e/8B/5D/xn/kk/gv/lf/Gf+d/8D/5X/xv/g//l//HJ/MxQgohVkgppBJSC3FCGiGt8J+QTkgvZBAyCpmEzEIWIauQTcgu5BByCrmE3EIeIa+QT8gvFBAKCoWEwkIRoahQTCgulBBKCqWE0kIZoaxQTigvVBAqCpWEykIVoapQTagu1BBqCrWE2kIdoa5QT6gvNBAaCo2ExkIToanQTGgutBBaCq2E1kIboa3QTmgvdBA6Cp2EzkIXoavQTegu9BB6Cr2E3kIfoa/QT+gvDBAGCoOEwcIQYagwTBgujBBGCqOE0cIYYawwThgvTBAmCpOEycIUYaowTZguzBBmCrOE2cIcYa4wT5gvLBAWCouExcISYamwTFgurBBWCquE1cIaYa2wTlgvbBA2CpuEzcIWYauwTdgu7BB2CruE3cIeYa+wT9gvHBAOCoeEw8IR4ahwTDguxAsnhJPCKeG0cEY4K5wTzgsXhIvCJeGygAm4QAikQAm0wAiswAm8IAiiIAmyoAiqoAm6YAimYAm24Aiu4AlA8IVAgEIoICESEoQrwlXhmnBduCHcFG4Jt4U7wl3hnnBfeCA8FB4Jj4UnwlPhmfBceCG8FF4Jr4VE4Y3wVngnvBc+CB+FT8JnIUn4InwVvgnfhR/CT+GX8Fv4I/wV/gnJQoyYQowVU4qpxNRinJhGTCv+J6YT04sZxIxiJjGzmEXMKmYTs4s5xJxiLjG3mEfMK+YT84sFxIJiIbGwWEQsKhYTi4slxJJiKbG0WEYsK5YTy4sVxIpiJbGyWEWsKlYTq4s1xJpiLbG2WEesK9YT64sNxIZiI7Gx2ERsKjYTm4stxJZiK7G12EZsK7YT24sdxI5iJ7Gz2EXsKnYTu4s9xJ5iL7G32EfsK/YT+4sDxIHiIHGwOEQcKg4Th4sjxJHiKHG0OEYcK44Tx4sTxIniJHGyOEWcKk4Tp4szxJniLHG2OEecK84T54sLxIXiInGxuERcKi4Tl4srxJXiKnG1uEZcK64T14sbxI3iJnGzuEXcKm4Tt4s7xJ3iLnG3uEfcK+4T94sHxIPiIfGweEQ8Kh4Tj4vx4gnxpHhKPC2eEc+K58Tz4gXxonhJvCxiIi4SIilSIi0yIityIi8KoihKoiwqoipqoi4aoilaoi06oit6IhB9MRChGIpIjMQE8Yp4VbwmXhdviDfFW+Jt8Y54V7wn3hcfiA/FR+Jj8Yn4VHwmPhdfiC/FV+JrMVF8I74V34nvxQ/iR/GT+FlMEr+IX8Vv4nfxh/hT/CX+Fv+If8V/YrIYI6WQYqWUUioptRQnpZHSSv9J6aT0UgYpo5RJyixlkbJK2aTsUg4pp5RLyi3lkfJK+aT8UgGpoFRIKiwVkYpKxaTiUgmppFRKKi2VkcpK5aTyUgWpolRJqixVkapK1aTqUg2pplRLqi3VkepK9aT6UgOpodRIaiw1kZpKzaTmUguppdRKai21kdpK7aT2Ugepo9RJ6ix1kbpK3aTuUg+pp9RL6i31kfpK/aT+0gBpoDRIGiwNkYZKw6Th0ghppDRKGi2NkcZK46Tx0gRpojRJmixNkaZK06Tp0gxppjRLmi3NkeZK86T50gJpobRIWiwtkZZKy6Tl0gpppbRKWi2tkdZK66T10gZpo7RJ2ixtkbZK26Tt0g5pp7RL2i3tkfZK+6T90gHpoHRIOiwdkY5Kx6TjUrx0QjopnZJOS2eks9I56bx0QbooXZIuS5iES4RESpRES4zESpzES4IkSpIkS4qkSpqkS4ZkSpaUUnIkV/IkIPlSIEEplJAUSQnSFemqdE26Lt2Qbkq3pNvSHemudE+6Lz2QHkqPpMfSE+mp9Ex6Lr2QXkqvpNdSovRGeiu9k95LH6SP0ifps5QkfZG+St+k79IP6af0S/ot/ZH+Sv+kZClGTiHHyinlVHJqOU5OI6eV/5PTyenlDHJGOZOcWc4iZ5WzydnlHHJOOZecW84j55XzyfnlAnJBuZBcWC4iF5WLycXlEnJJuZRcWi4jl5XLyeXlCnJFuZJcWa4iV5WrydXlGnJNuZZcW64j15XryfXlBnJDuZHcWG4iN5Wbyc3lFnJLuZXcWm4jt5Xbye3lDnJHuZPcWe4id5W7yd3lHnJPuZfcW+4j95X7yf3lAfJAeZA8WB4iD5WHycPlEfJIeZQ8Wh4jj5XHyePlCfJEeZI8WZ4iT5WnydPlGfJMeZY8W54jz5XnyfPlBfJCeZG8WF4iL5WXycvlFfJKeZW8Wl4jr5XXyevlDfJGeZO8Wd4ib5W3ydvlHfJOeZe8W94j75X3yfvlA/JB+ZB8WD4iH5WPycflePmEfFI+JZ+Wz8hn5XPyefmCfFG+JF+WMRmXCZmUKZmWGZmVOZmXBVmUJVmWFVmVNVmXDdmULdmWHdmVPRnIvhzIUA5lJEdygnxFvipfk6/LN+Sb8i35tnxHvivfk+/LD+SH8iP5sfxEfio/k5/LL+SX8iv5tZwov5Hfyu/k9/IH+aP8Sf4sJ8lf5K/yN/m7/EP+Kf+Sf8t/5L/yPzlZjlFSKLFKSiWVklqJU9IoaZX/lHRKeiWDklHJpGRWsihZlWxKdiWHklPJpeRW8ih5lXxKfqWAUlAppBRWiihFlWJKcaWEUlIppZRWyihllXJKeaWCUlGppFRWqihVlWpKdaWGUlOppdRW6ih1lXpKfaWB0lBppDRWmihNlWZKc6WF0lJppbRW2ihtlXZKe6WD0lHppHRWuihdlW5Kd6WH0lPppfRW+ih9lX5Kf2WAMlAZpAxWhihDlWHKcGWEMlIZpYxWxihjlXHKeGWCMlGZpExWpihTlWnKdGWGMlOZpcxW5ihzlXnKfGWBslBZpCxWlihLlWXKcmWFslJZpaxW1ihrlXXKemWDslHZpGxWtihblW3KdmWHslPZpexW9ih7lX3KfuWAclA5pBxWjihHlWPKcSVeOaGcVE4pp5UzylnlnHJeuaBcVC4plxVMwRVCIRVKoRVGYRVO4RVBERVJkRVFURVN0RVDMRVLsRVHcRVPAYqvBApUQgUpkZKgXFGuKteU68oN5aZyS7mt3FHuKveU+8oD5aHySHmsPFGeKs+U58oL5aXySnmtJCpvlLfKO+W98kH5qHxSPitJyhflq/JN+a78UH4qv5Tfyh/lr/JPSVZi1BRqrJpSTaWmVuPUNGpa9T81nZpezaBmVDOpmdUsalY1m5pdzaHmVHOpudU8al41n5pfLaAWVAuphdUialG1mFpcLaGWVEuppdUyalm1nFperaBWVCupldUqalW1mlpdraHWTFVLra3WUeuq9dT6agO1odpIbaw2UZuqzdTmagu1pdpKba22Uduq7dT2age1o9pJ7ax2Ubuq3dTuag+1p9pL7a32Ufuq/dT+6gB1oDpIHawOUYeqw9Th6gh1pDpKHa2OUceq49Tx6gR1ojpJnaxOUaeq09Tp6gx1pjpLna3OUeeq89T56gJ1obpIXawuUZeqy9Tl6gp1pbpKXa2uUdeq69T16gZ1o7pJ3axuUbeq29Tt6g51p7pL3a3uUfeq+9T96gH1oHpIPaweUY+qx9Tjarx6Qj2pnlJPq2fUs+o59bx6Qb2oXlIvq5iKq4RKqpRKq4zKqpzKq4IqqpIqq4qqqpqqq4ZqqpZqq47qqp4KVF8NVKiGKlIjNUG9ol5Vr6nX1RvqTfWWelu9o95V76n31QfqQ/WR+lh9oj5Vn6nP1RfqS/WV+lpNVN+ob9V36nv1g/pR/aR+VpPUL+pX9Zv6Xf2h/lR/qb/VP+pf9Z+arMZoKbRYLaWWSkutxWlptLTaf1o6Lb2WQcuoZdIya1m0rFo2LbuWQ8up5dJya3m0vFo+Lb9WQCuoFdIKa0W0oloxrbhWQiupldJKa2W0slo5rbxWQauoVdIqa1W0qlo1rbpWQ6up1dJqa3W0ulo9rb7WQGuoNdIaa020plozrbnWQmuptdJaa220tlo7rb3WQeuoddI6a120rlo3rbvWQ+up9dJ6a320vlo/rb82QBuoDdIGa0O0odowbbg2QhupjdJGa2O0sdo4bbw2QZuoTdIma1O0qdo0bbo2Q5upzdJma3O0udo8bb62QFuoLdIWa0u0pdoybbm2QluprdJWa2u0tdo6bb22QduobdI2a1u0rdo2bbu2Q9up7dJ2a3u0vdo+bb92QDuoHdIOa0e0o9ox7bgWr53QTmqntNPaGe2sdk47r13QLmqXtMsapuEaoZEapdEao7Eap/GaoImapMmaoqmapumaoZmapdmao7mapwHN1wINaqGGtEhL0K5oV7Vr2nXthnZTu6Xd1u5od7V72n3tgfZQe6Q91p5oT7Vn2nPthfZSe6W91hK1N9pb7Z32XvugfdQ+aZ+1JO2L9lX7pn3Xfmg/tV/ab+2P9lf7pyVrMXoKPVZPqafSU+txeho9rf6fnk5Pr2fQM+qZ9Mx6Fj2rnk3PrufQc+q59Nx6Hj2vnk/PrxfQC+qF9MJ6Eb2oXkwvrpfQS+ql9NJ6Gb2sXk4vr1fQK+qV9Mp6Fb2qXk2vrtfQa+q19Np6Hb2uXk+vrzfQG+qN9MZ6E72p3kxvrrfQW+qt9NZ6G72t3k5vr3fQO+qd9M56F72r3k3vrvfQe+q99N56H72v3k/vrw/QB+qD9MH6EH2oPkwfro/QR+qj9NH6GH2sPk4fr0/QJ+qT9Mn6FH2qPk2frs/QZ+qz9Nn6HH2uPk+fry/QF+qL9MX6En2pvkxfrq/QV+qr9NX6Gn2tvk5fr2/QN+qb9M36Fn2rvk3fru/Qd+q79N36Hn2vvk/frx/QD+qH9MP6Ef2ofkw/rsfrJ/ST+in9tH5GP6uf08/rF/SL+iX9so7puE7opE7ptM7orM7pvC7ooi7psq7oqq7pum7opm7ptu7oru7pQPf1QId6qCM90hP0K/pV/Zp+Xb+h39Rv6bf1O/pd/Z5+X3+gP9Qf6Y/1J/pT/Zn+XH+hv9Rf6a/1RP2N/lZ/p7/XP+gf9U/6Zz1J/6J/1b/p3/Uf+k/9l/5b/6P/1f/pyXqMkcKINVIaqYzURpyRxkhr/GekM9IbGYyMRiYjs5HFyGpkM7IbOYycRi4jt5HHyGvkM/IbBYyCRiGjsFHEKGoUM4obJYySRimjtFHGKGuUM8obFYyKRiWjslHFqGpUM6obNYyaRi2jtlHHqGvUM+obDYyGRiOjsdHEaGo0M5obLYyWRiujtdHGaGu0M9obHYyORiejs9HF6Gp0M7obPYyeRi+jt9HH6Gv0M/obA4yBxiBjsDHEGGoMM4YbI4yRxihjtDHGGGuMM8YbE4yJxiRjsjHFmGpMM6YbM4yZxixjtjHHmGvMM+YbC4yFxiJjsbHEWGosM5YbK4yVxipjtbHGWGusM9YbG4yNxiZjs7HF2GpsM7YbO4ydxi5jt7HH2GvsM/YbB4yDxiHjsHHEOGocM44b8cYJ46RxyjhtnDHOGueM88YF46JxybhsYAZuEAZpUAZtMAZrcAZvCIZoSIZsKIZqaIZuGIZpWIZtOIZreAYwfCMwoBEayIiMBOOKcdW4Zlw3bhg3jVvGbeOOcde4Z9w3HhgPjUfGY+OJ8dR4Zjw3XhgvjVfGayPReGO8Nd4Z740Pxkfjk/HZSDK+GF+Nb8Z344fx0/hl/Db+GH+Nf0ayEWOmMGPNlGYqM7UZZ6Yx05r/menM9GYGM6OZycxsZjGzmtnM7GYOM6eZy8xt5jHzmvnM/GYBs6BZyCxsFjGLmsXM4maJ5BQxMWZps4xZ1ixnljcrmBXNSmZls4pZ1axmVjdrmDXNWmZts45Z16xn1jcbmA3NRmZjs4nZ1GxmNjdbmC3NVmZrs43Z1mxntjc7mB3NTmZns4vZ1exmdjd7mD3NXmZvs4/Z1+xn9jcHmAPNQeZgc4g51BxmDjdHmCPNUeZoc4w51kxOTl48wZxoTjInm1PMqeY0c7o5w5xpzjJnm3PMueY8c765wFxoLjIXm0vMpeYyc7m5wlxprjJXm2vMteY6c725wdxobjI3m1vMreY2c7u5w9xp7jJ3m3vMveY+c795wDxoHjIPm0fMo+Yx87gZb54wT5qnzNPmGfOsec48b14wL5qXzMsmZuImYZImZdImY7ImZ/KmYIqmZMqmYqqmZuqmYZqmZdqmY7qmZwLTNwMTmqGJzMhMMK+YV81r5nXzhnnTvGXeNu+Yd8175n3zgfnQfGQ+Np+YT81n5nPzhfnSfGW+NhPNN+Zb85353vxgfjQ/mZ/NJPOL+dX8Zn43f5g/zV/mb/OP+df8ZyabMVYKK9ZKaaWyUltxVhorrfWflc5Kb2WwMlqZrMxWFiurlc3KbuWwclq5rNxWHiuvlc/KbxWwClqFrMJWEauoVcwqbpWwSlqlrNJWGausVc4qb1WwKlqVrMpWFauqVc2qbtWwalq1rNpWHauuVc+qbzWwGlqNrMZWE6up1cxqbrWwWlqtrNZWG6ut1c5qb3WwOlqdrM5WF6ur1c3qbvWwelq9rN5WH6uv1c/qbw2wBlqDrMHWEGuoNcwabo2wRlqjrNHWGGusNc4ab02wJlqTrMnWFGuqNc2abs2wZlqzrNnWHGuuNc+aby2wFlqLrMXWEmuptcxabq2wVlqrrNXWGmuttc5ab22wNlqbrM3WFmurtc3abu2wdlq7rN3WHmuvtc/abx2wDlqHrMPWEeuodcw6bsVbJ6yT1inrtHXGOmuds85bF6yL1iXrsoVZuEVYpEVZtMVYrMVZvCVYoiVZsqVYqqVZumVYpmVZtuVYruVZwPKtwIJWaCErshKsK9ZV65p13bph3bRuWbetO9Zd655133pgPbQeWY+tJ9ZT65n13HphvbReWa+tROuN9dZ6Z723PlgfrU/WZyvJ+mJ9tb5Z360f1k/rl/Xb+mP9tf5ZyVaMncKOtVPaqezUdpydxk5r/2ens9PbGeyMdiY7s53Fzmpns7PbOeycdi47t53Hzmvns/PbBeyCdiG7sF3ELmoXs4vbJeySdim7tF3GLmuXs8vbFeyKdiW7sl3FrmpXs6vbNeyadi27tl3HrmvXs+vbDeyGdiO7sd3Ebmo3s5vbLeyWdiu7td3Gbmu3s9vbHeyOdie7s93F7mp3s7vbPeyedi+7t93H7mv3s/vbA+yB9iB7sD3EHmoPs4fbI+yR9ih7tD3GHmuPs8fbE+yJ9iR7sj3FnmpPs6fbM+yZ9ix7tj3HnmvPs+fbC+yF9iJ7sb3EXmovs5fbK+yV9ip7tb3GXmuvs9fbG+yN9iZ7s73F3mpvs7fbO+yd9i57t73H3mvvs/fbB+yD9iH7sH3EPmofs4/b8fYJ+6R9yj5tn7HP2ufs8/YF+6J9yb5sYzZuEzZpUzZtMzZrczZvC7ZoS7ZsK7Zqa7ZuG7ZpW7ZtO7ZrezawfTuwoR3ayI7sBPuKfdW+Zl+3b9g37Vv2bfuOfde+Z9+3H9gP7Uf2Y/uJ/dR+Zj+3X9gv7Vf2azvRfmO/td/Z7+0P9kf7k/3ZTrK/2F/tb/Z3+4f90/5l/7b/2H/tf3ayHeOkcGKdlE4qJ7UT56Rx0jr/Oemc9E4GJ6OTycnsZHGyOtmc7E4OJ6eTy8nt5HHyOvmc/E4Bp6BTyCnsFHGKOsWc4k4Jp6RTyintlHHKOuWc8k4Fp6JTyansVHGqOtWc6k4Np6YT59R26jh1nXpOfaeB09Bp5DR2mjhNnWZOc6eF09Jp5bR22jhtnXZOe6eD09Hp5HR2ujhdnW5Od6eH09Pp5fR2+jh9nX5Of2eAM9AZ5Ax2hjhDnWHOcGeEM9IZ5Yx2xjhjnXHOeGeCM9GZ5Ex2pjhTnWnOdGeGM9OZ5cx25jhznXnOfGeBs9BZ5Cx2ljhLnWXOcmeFs9JZ5ax21jhrnXXOemeDs9HZ5Gx2tjhbnW3OdmeHs9PZ5ex29jh7nX3OfueAc9A55Bx2jjhHnWPOcSfeOeGcdE45p50zzlnnnHPeueBcdC45lx3MwR3CIR3KoR3GYR3O4R3BER3JkR3FUR3N0R3DMR3LsR3HcR3PAY7vBA50Qgc5kZPgXHGuOtec684N56Zzy7nt3HHuOvec+84D56HzyHnsPHGeOs+c584L56XzynntJDpvnLfOO+e988H56HxyPjtJzhfnq/PN+e78cH46v5zfzh/nr/PPSXZi3BRurJvSTeWmduPcNG5a9z83nZvezeBmdDO5md0sblY3m5vdzeHmdHO5ud08bl43n5vfLeAWdAu5hd0iblG3mFvcLeGWdEu5pd0yblm3nFvereBWdCu5ld0qblW3mlvdreHWdGu5td06bl23nlvfbeA2dBu5jd0mblO3mdvcbeG2dFu5rd02blu3ndve7eB2dDu5nd0uble3m9vd7eH2dHu5vd0+bl+3n9vfHeAOdAe5g90h7lB3mDvcHeGOdEe5o90x7lh3nDveneBOdCe5k90p7lR3mjvdneHOdGe5s9057lx3njvfXeAudBe5i90l7lJ3mbvcXeGudFe5q9017lp3nbve3eBudDe5m90t7lZ3m7vd3eHudHe5u9097l53n7vfPeAedA+5h90j7lH3mHvcjXdPuCfdU+5p94x71j3nnncvuBfdS+5lF3Nxl3BJl3Jpl3FZl3N5V3BFV3JlV3FVV3N113BN13Jt13Fd13OB67uBC93QRW7kJrhX3KvuNfe6e8O96d5yb7t33LvuPfe++8B96D5yH7tP3KfuM/e5+8J96b5yX7uJ7hv3rfvOfe9+cD+6n9zPbpL7xf3qfnO/uz/cn+4v97f7x/3r/nOT3RgvhRfrpfRSeam9OC+Nl9b7z0vnpfcyeBm9TF5mL4uX1cvmZfdyeDm9XF5uL4+X18vn5fcKeAW9Ql5hr4hX1CvmFfdKeCW9Ul5pr4xX1ivnlfcqeBW9Sl5lr4pX1avmVfdqeDW9Wl5tr45X16vn1fcaeA29Rl5jr4nX1GvmNfdaeC29Vl5rr43X1mvntfc6eB29Tl5nr4vX1evmdfd6eD29Xl5vr4/X1+vn9fcGeAO9Qd5gb4g31BvmDfdGeCO9Ud5ob4w31hvnjfcmeBO9Sd5kb4o31ZvmTfdmeDO9Wd5sb44315vnzfcWeAu9Rd5ib4m31FvmLfdWeCu9Vd5qb4231lvnrfc2eBu9Td5mb4u31dvmbfd2eDu9Xd5ub4+319vn7fcOeAe9Q95h74h31DvmHffivRPeSe+Ud9o74531znnnvQveRe+Sd9nDPNwjPNKjPNpjPNbjPN4TPNGTPNlTPNXTPN0zPNOzPNtzPNfzPOD5XuBBL/SQF3kJ3hXvqnfNu+7d8G56t7zb3h3vrnfPu+898B56j7zH3hPvqffMe+698F56r7zXXqL3xnvrvfPeex+8j94n77OX5H3xvnrfvO/eD++n98v77f3x/nr/vGQvBqQAsSAlSAVSgziQBqQF/4F0ID3IADKCTCAzyAKygmwgO8gBcoJcIDfIA/KCfCA/KAAKgkKgMCgCioJioDgoAUqCUqA0KAPKgnKgPKgAKoJKoDKoAqqCaqA6qAFqglqgNqgD6oJ6oD5oABqCRqAxaAKagmagOWgBWoJWoDVoA9qCdqA96AA6gk6gM+gCuoJuoDvoAXqCXqA36AP6gn6gPxgABoJBYDAYAoaCYWA4GAFGglFgNBgDxoJxYDyYACaCSWAymAKmgmlgOpgBZoJZYDaYA+aCeWA+WAAWgkVgMVgCloJlYDlYAVaCVWA1WAPWgnVgPdgANoJNYDPYAraCbWA72AF2gl1gN9gD9oJ9YD84AA6CQ+AwOAKOgmPgOIgHJ8BJcAqcBmfAWXAOnAcXwEVwCVwGGMABAUhAARowgAUc4IEARCABGShABRrQgQFMYAEbOMAFHgDABwGAIAQIRCABXAFXwTVwHdwAN8EtcBvcAXfBPXAfPAAPwSPwGDwBT8Ez8By8AC/BK/AaJII34C14B96DD+Aj+AQ+gyTwBXwF38B38AP8BL/Ab/AH/AX/QDKI8VP4sX5KP5Wf2o/z0/hp/f/8dH56P4Of0c/kZ/az+Fn9bH52P4ef08/l5/bz+Hn9fH5+v4Bf0C/kF/aL+EX9Yn5xv4Rf0i/ll/bL+GX9cn55v4Jf0a/kV/ar+FX9an51v4Zf06/l1/br+HX9en59v4Hf0G/kN/ab+E39Zn5zv4Xf0m/lt/bb+G39dn57v4Pf0e/kd/a7+F39bn53v4ff0+/l9/b7+H39fn5/f4A/0B/kD/aH+EP9Yf5wf4Q/0h/lj/bH+GP9cf54f4I/0Z/kT/an+FP9af50f4Y/05/lz/bn+HP9ef58f4G/0F/kL/aX+Ev9Zf5yf4W/0l/lr/bX+Gv9df56f4O/0d/kb/a3+Fv9bf52f4e/09/l7/b3+Hv9ff5+/4B/0D/kH/aP+Ef9Y/5xP94/4Z/0T/mn/TP+Wf+cf96/4F/0L/mXfczHfcInfcqnfcZnfc7nfcEXfcmXfcVXfc3XfcM3fcu3fcd3fc8Hvu8HPvRDH/mRn+Bf8a/61/zr/g3/pn/Lv+3f8e/69/z7/gP/of/If+w/8Z/6z/zn/gv/pf/Kf+0n+m/8t/47/73/wf/of/I/+0n+F/+r/83/7v/wf/q//N/+H/+vH/d/ozI2SBmkClIHcUGaIG3wX5AuSB9kCDIGmYLMQZYga5AtyB7kCHIGuYLcQZ4gb5AvyB8UCAoGhYLCQZGgaFAsKB6UCEoGpYLSQZmgbFAuKB9UCCoGlYLKQZWgalAtqB7UCGoGtYLaQZ2gblAvqB80CBoGjYLGQZOgadAsaB60CFoGrYLWQZugbdAuaB90CDoGnYLOQZega9At6B70CHoGvYLeQZ+gb9Av6B8MCAYGg4LBwZBgaDAsGB6MCEYGo4LRwZhgbDAuGB9MCCYGk4LJwZRgajAtmB7MCGYGs4LZwZxgbjAvmB8sCBYGi4LFwZJgabAsWB6sCFYGq4LVwZpgbbAuWB9sCDYGm4LNwZZga7At2B7sCHYGu4LdwZ5gb7Av2B8cCA4Gh4LDwZHgaHAsOB7EByeCk8Gp4HRwJjgbnAvOBxeCi8Gl4HKABXhABGRABXTABGzABXwgBGIgBXKgBGqgBXpgBGZgBXbgBG7gBSDwgyCAQRigIAoSgivB1eBacD24EdwMbgW3gzvB3eBecD94EDwMHgWPgyfB0+BZ8Dx4EbwMXgWvg8TgTfA2eBe8Dz4EH4NPwecgKfgSfA2+Bd+DH8HP4FfwO/gT/A3+BclBDEwBY2FKmAqmhnEwDUwL/4PpYHqYAWaEmWBmmAVmhdlgdpgD5oS5YG6YB+aF+WB+WAAWhIVgYVgEFoXFYHFYApaEpWBpWAaWheVgeVgBVoSVYGVYBVaF1WB1WAPWhLVgbVgH1oX1YH3YADaEjWBj2AQ2hc1gc9gCtoStYGvYBraF7WB72AF2hJ1gZ9gFdoXdYHfYA/aEvWBv2Af2hf1gfzgADoSD4GA4BA6Fw+BwOAKOhKPgaDgGjoXj4Hg4AU6Ek+BkOAVOhdPgdDgDzoSz4Gw4B86F8+B8uAAuhIvgYrgELoXL4HK4Aq6Eq+BquAauhevgergBboSb4Ga4BW6F2+B2uAPuhLvgbrgH7oX74H54AB6Eh+BheAQehcfgcRgPT8CT8BQ8Dc/As/AcPA8vwIvwErwMMYhDApKQgjRkIAs5yEMBilCCMlSgCjWoQwOa0II2dKALPQigDwMIYQgRjGACvAKvwmvwOrwBb8Jb8Da8A+/Ce/A+fAAfwkfwMXwCn8Jn8Dl8AV/CV/A1TIRv4Fv4Dr6HH+BH+Al+hknwC/wKv8Hv8Af8CX/B3/AP/Av/wWQYE6YIY8OUYaowdRgXpgnThv+F6cL0YYYwY5gpzBxmCbOG2cLsYY4wZ5grzB3mCfOG+cL8YYGwYFgoLBwWCYuGxcLiYYmwZFgqLB2WCcuG5cLyYYWwYlgprBxWCauG1cLqYY2wZlgrrB3WCeuG9cL6YYOwYdgobBw2CZuGzcLmYYuwZdgqbB22CduG7cL2YYewY9gp7Bx2CbuG3cLuYY+wZ9gr7B32CfuG/cL+4YBwYDgoHBwOCYeGw8LMMTExI8NR4ehwTDg2HBeODyeEE8NJ4eRwSjg1nBZOD2eEM8NZ4exwTjg3nBfODxeEC8NF4eJwSbg0XBYuD1eEK8NV4epwTbg2XBeuDzeEG8NN4eZwS7g13BZuD3eEO8Nd4e5wT7g33BfuDw+EB8ND4eHwSHg0PBYeD+PDE+HJ8FR4OjwTng3PhefDC+HF8FJ4OcRCPCRCMqRCOmRCNuRCPhRCMZRCOVRCNdRCPTRCM7RCO3RCN/RCEPphEMIwDFEYhQnhlfBqeC28Ht4Ib4a3wtvhnfBueC+8Hz4IH4aPwsfhk/Bp+Cx8Hr4IX4avwtdhYvgmfBu+C9+HH8KP4afwc5gUfgm/ht/C7+GP8Gf4K/wd/gn/hv/C5DAGpUCxKCVKhVKjOJQGpUX/oXQoPcqAMqJMKDPKgrKibCg7yoFyolwoN8qD8qJ8KD8qgAqiQqgwKoKKomKoOCqBSqJSqDQqg8qicqg8qoAqokqoMqqCqqJqqDqqgWqiWqg2qoPqonqoPmqAGqJGqDFqgpqiZqg5aoFaolaoNWqD2qJ2qD3qgDqiTqgz6oK6om6oO+qBeqJeqDfqg/qifqg/GoAGokFoMBqChqJhaDgagUaiUWg0GoPGonFoPJqAJqJJaDKagqaiaWg6moFmolloNpqD5qJ5aD5agBaiRWgxWoKWomVoOVqBVqJVaDVag9aidWg92oA2ok1oM9qCtqJtaDvagXaiXWg32oP2on1oPzqADqJD6DA6go6iY+g4ikcn0El0Cp1GZ9BZdA6dRxfQRXQJXUYYwhGBSEQhGjGIRRzikYBEJCEZKUhFGtKRgUxkIRs5yEUeAshHAYIoRAhFKAFdQVfRNXQd3UA30S10G91Bd9E9dB89QA/RI/QYPUFP0TP0HL1AL9Er9BolojfoLXqH3qMP6CP6hD6jJPQFfUXf0Hf0A/1Ev9Bv9Af9Rf9QMoqJUkSxUcooVZQ6iovSRGmj/6J0UfooQ5QxyhRljrJEWaNsUfYoR5QzyhXljvJEeaN8Uf6oQFQwKhQVjopERaNiUfGoRFQyKhWVjspEZaNyUfmoQlQxqhRVjqpEVaNqUfWoRlQzqhXVjupEdaN6Uf2oQdQwahQ1jppETaNmUfOoRdQyahW1jtpEbaN2UfuoQ9Qx6hR1jrpEXaNuUfeoR9Qz6hX1jvpEfaN+Uf9oQDQwGhQNjoZEQ6Nh0fBoRDQyGhWNjsZEY6Nx0fhoQjQxmhRNjqZEU6Np0fRoRjQzmhXNjuZEc6N50fxoQbQwWhQtjpZES6Nl0fJoRbQyWhWtjtZEa6N10fpoQ7Qx2hRtjrZEW6Nt0fZoR7Qz2hXtjvZEe6N90f7oQHQwOhQdjo5ER6Nj0fEoPjoRnYxORaejM9HZ6Fx0ProQXYwuRZfj0yTWi4iIjKiIjpiIjbiIj4RIjKRIjpRIjbRIj4zIjKzIjpzIjbwIRH4URDAKIxRFUUJ0JboaXYuuRzeim9Gt6HZ0J7ob3YvuRw+ih9Gj6HH0JHoaPYueRy+il9Gr6HWUGL2J3kbvovfRh+hj9Cn6HCVFX6Kv0bfoe/Qj+hn9in5Hf6K/0b8oOYpJSJEQm5AyIVVC6oS4hDQJaRP+S0iXkD4hQ0LGhEwJmROyJGRNyJaQPSFHQs6EXAm5E/Ik5E3Il5A/oUDC/2iyx/Y8ukYBoKlS27Zt27Zt20pt27atp0iNlGN7Zu/x7Lt2z5fz/ox1rYJYIawwVgQrihXDimMlsJJYKaw0VgYri5XDymMVsIpYJawyVgWrilXDqmM1sJpYLaw2Vgeri9XD6mMNsIZYI6wx1gRrijXDmmMtsJZYK6w11gZri7XD2mMdsI5YJ6wz1gXrinXDumM9sJ5YL6w31gfri/XD+mMDsIHYIGwwNgQbig3DhmMjsJHYKGw0NgYbi43DxmMTsInYJGwyNgWbik3DpmMzsJnYLGw2Ngebi83D5mMLsIVYArYIW4wtwZZiy7Dl2ApsJbYKW42twdZi67D12AZsI7YJ24xtwbZi27Dt2A5sJ7YL243twfZi+7D92AHsIHYIO4wdwY5ix7Dj2AnsJHYKO42dwc5i57Dz2AXsInYJu4xdwa5i17Dr2A3sJnYLu43dwf7D7mL3sPvYAywRe4g9wh5jT7Cn2DPsOfYCe4m9wpKw19gb7C32DnuPfcAwDMcIjMQojMYYjMU4jMcETMQkTMYUTMU0TMcMzMQsDGAQszEHczEP87EAC7EIQ1gM+4h9wj5jX7Cv2DfsO/YD+4n9wn5jf7C/2D8sDk+GJ8dT4CnxVHg8nhpPg6fF0+Hp8Qx4RjwTnhnPgmfFs+HZ8Rx4TjwXnhvPg+fF8+H58QJ4QbwQXhgvghfFi+HF8RJ4SbwUXhovg5fFy+Hl8Qp4RbwSXhmvglfFq+HV8Rp4TbwWXhuvg9fF6+H18QZ4Q7wR3hhvgjfFm+HN8RZ4S7wV3hpvg7fF2+Ht8Q54R7wT3hnvgnfFu+Hd8R54T7wX3hvvg/fF++H98QH4QHwQPhgfgg/Fh+HD8RH4SHwUPhofg4/Fx+Hj8Qn4RHwSPhmfgk/Fp+HT8Rn4THwWPhufg8/F5+Hz8QX4QjwBX4QvxpfgS/Fl+HJ8Bb4SX4Wvxtfga/F1+Hp8A74R34RvxrfgW/Ft+HZ8B74T34Xvxvfge/F9+H78AH4QP4Qfxo/gR/Fj+HH8BH4SP4Wfxs/gZ/Fz+Hn8An4Rv4Rfxq/gV/Fr+HX8Bn4Tv4Xfxu/g/+F38Xv4ffwBnog/xB/hj/En+FP8Gf4cf4G/xF/hSfhr/A3+Fn+Hv8c/4BiO4wRO4hRO4wzO4hzO4wIu4hIu4wqu4hqu4wZu4hYOcIjbuIO7uIf7eICHeIQjPIZ/xD/hn/Ev+Ff8G/4d/4H/xH/hv/E/+F/8Hx5HJCOSEymIlEQqIp5ITaQh0hLpiPREBiIjkYnITGQhshLZiOxEDiInkYvITeQh8hL5iPxEAaIgUYgoTBQhihLFiOJECaIkUYooTZQhyhLliPJEBaIiUYmoTFQhqhLViOpEDaImUYuoTdQh6hL1iPpEA6Ih0YhoTDQhmhLNiOZEC6Il0YpoTbQh2hLtiPZEB6Ij0YnoTHQhuhLdiO5ED6In0YvoTfQh+hL9iP7EAGIgMYgYTAwhhhLDiOHECGIkMYoYTYwhxhLjiPHEBGIiMYmYTEwhphLTiOnEDGImMYuYTcwh5hLziPnEAmIhkUAsIhYTS4ilxDJiObGCWEmsIlYTa4i1xDpiPbGB2EhsIjYTW4itxDZiO7GD2EnsInYTe4i9xD5iP3GAOEgcIg4TR4ijxDHiOHGCOEmcIk4TZ4izxDniPHGBuEhcIi4TV4irxDXiOnGDuEncIm4Td4j/iLvEPeI+8YBIJB4Sj4jHxBPiKfGMeE68IF4Sr4gk4jXxhnhLvCPeEx8IjMAJgiAJiqAJhmAJjuAJgRAJiZAJhVAJjdAJgzAJiwAEJGzCIVzCI3wiIEIiIhARIz4Sn4jPxBfiK/GN+E78IH4Sv4jfxB/iL/GPiCOTkcnJFGRKMhUZT6Ym05BpyXRkejIDmZHMRGYms5BZyWxkdjIHmZPMReYm85B5yXxkfrIAWZAsRBYmi5BFyWJkcbIEWZIsRZYmy5BlyXJkebICWZGsRFYmq5BVyWpkdbIGWZOsRdYm65B1yXpkfbIB2ZBsRDYmm5BNyWZkc7IF2ZJsRbYm25BtyXZke7ID2ZHsRHYmu5BdyW5kd7IH2ZPsRfYm+5B9yX5kf3IAOZAcRA4mh5BDyWHkcHIEOZIcRY4mx5BjyXHkeHICOZGcRE4mp5BTyWnkdHIGOZOcRc4m55BzyXnkfHIBuZBMIBeRi8kl5FJyGbmcXEGuJFeRq8k15FpyHbme3EBuJDeRm8kt5FZyG7md3EHuJHeRu8k95F5yH7mfPEAeJA+Rh8kj5FHyGHmcPEGeJE+Rp8kz5FnyHHmevEBeJC+Rl8kr5FXyGnmdvEHeJG+Rt8k75H/kXfIeeZ98QCaSD8lH5GPyCfmUfEY+J1+QL8lXZBL5mnxDviXfke/JDyRG4iRBkiRF0iRDsiRH8qRAiqREyqRCqqRG6qRBmqRFAhKSNumQLumRPhmQIRmRiIyRH8lP5GfyC/mV/EZ+J3+QP8lf5G/yD/mX/EfGUcmo5FQKKiWVioqnUlNpqLRUOio9lYHKSGWiMlNZqKxUNio7lYPKSeWiclN5qLxUPio/VYAqSBWiClNFqKJUMao4VYIqSZWiSlNlqLJUOao8VYGqSFWiKlNVqJEJcXHVqRpUTaoWVZuqQ9Wl6lH1qQZUQ6oR1ZhqQjWlmlHNqRZUS6oV1ZpqQ7Wl2lHtqQ5UR6oT1ZnqQnWlulHdqR5UT6oX1ZvqQ/Wl+lH9qQHUQGoQNZgaQg2lhlHDqRHUSGoUNZoaQ42lxlHjqQnURGoSNZmaQk2lplHTqRnUTGoWNZuaQ82l5lHzqQXUQiqBWkQtppZQS6ll1HJqBbWSWkWtptZQa6l11HpqA7WR2kRtprZQW6lt1HZqB7WT2kXtpvZQe6l91H7qAHWQOkQdpo5QR6lj1HHqBHWSOkWdps5QZ6lz1HnqAnWRukRdpq5QV6lr1HXqBnWTukXdpu5Q/1F3qXvUfeoBlUg9pB5Rj6kn1FPqGfWcekG9pF5RSdRr6g31lnpHvac+UBiFUwRFUhRFUwzFUhzFUwIlUhIlUwqlUhqlUwZlUhYFKEjZlEO5lEf5VECFVEQhKkZ9pD5Rn6kv1FfqG/Wd+kH9pH5Rv6k/1F/qHxVHJ6OT0ynolHQqOp5OTaeh09Lp6PR0BjojnYnOTGehs9LZ6Ox0DjonnYvOTeeh89L56Px0AbogXYguTBehi9LF6OJ0CbokXYouTZehy9Ll6PJ0BboiXYmuTFehq9LV6Op0DbomXYuuTdeh69L16Pp0A7oh3YhuTDehm9LN6OZ0C7ol3YpuTbeh29Lt6PZ0B7oj3YnuTHehu9Ld6O50D7on3YvuTfeh+9L96P70AHogPYgeTA+hh9LD6OH0CHokPYoeTY+hx9Lj6PH0BHoiPYmeTE+hp9LT6On0DHomPYueTc+h59Lz6Pn0AnohnUAvohfTS+il9DJ6Ob2CXkmvolfTa+i19Dp6Pb2B3khvojfTW+it9DZ6O72D3knvonfTe+i99D56P32APkgfog/TR+ij9DH6OH2CPkmfok/TZ+iz9Dn6PH2Bvkhfoi/TV+ir9DX6On2Dvknfom/Td+j/6Lv0Pfo+/YBOpB/Sj+jH9BP6Kf2Mfk6/oF/Sr+gk+jX9hn5Lv6Pf0x9ojMZpgiZpiqZphmZpjuZpgRZpiZZphVZpjdZpgzZpiwY0pG3aoV3ao306oEM6ohEdoz/Sn+jP9Bf6K/2N/k7/oH/Sv+jf9B/6L/2PjmOSMcmZFExKJhUTz6Rm0jBpmXRMeiYDk5HJxGRmsjBZmWxMdiYHk5PJxeRm8jB5mXxMfqYAU5ApxBROExcXxxRjijMlmJJMKaY0U4Ypy5RjyjMVmIpMJaYyU4WpylRjqjM1mJpMLaY2U4epy9Rj6jMNmIZMI6Yx04RpyjRjmjMtmJZMK6Y104Zpy7Rj2jMdmI5MJ6Yz04XpynRjujM9mJ5ML6Y304fpy/Rj+jMDmIHMIGYwM4QZygxjhjMjmJHMKGY0M4YZy4xjxjMTmInMJGYyM4WZykxjpjMzmJnMLGY2M4eZy8xj5jMLmIVMArOIWcwsYZYyy5jlzApmJbOKWc2sYdYy65j1zAZmI7OJ2cxsYbYy25jtzA5mJ7OL2c3sYfYy+5j9zAHmIHOIOcwcYY4yx5jjzAnmJHOKOc2cYc4y55jzzAXmInOJucxcYa4y15jrzA3mJnOLuc3cYf5j7jL3mPvMAyaRecg8Yh4zT5inzDPmOfOCecm8YpKY18wb5i3zjnnPfGAwBmcIhmQohmYYhmU4hmcERmQkRmYURmU0RmcMxmQsBjCQsRmHcRmP8ZmACZmIQUyM+ch8Yj4zX5ivzDfmO/OD+cn8Yn4zf5i/zD8mjk3GJmdTsCnZVGw8m5pNw6Zl07Hp2QxsRjYTm5nNwmZls7HZ2RxsTjYXm5vNw+Zl87H52QJsQbYQW5gtwhZli7HF2RJsSbYUW5otw5Zly7Hl2QpsRbYSW5mtwlZlq7HV2RpsTbYWW5utw9Zl67H12QZsQ7YR25htwjZlm7HN2RZsS7YV25ptw7Zl27Ht2Q5sR7YT25ntwnZlu7Hd2R5sT7YX25vtw/Zl+7H92QHsQHYQO5gdwg5lh7HD2RHsSHYUO5odw45lx7Hj2QnsRHYSO5mdwk5lp7HT2Th2JjuLnc3OYeey89j57AJ2IZvALmIXs0vYpewydjm7gl3JrmJXs2vYtew6dj27gd3IbmI3s1vYrew2dju7g93J7mJ3s3vYvew+dj97gD3IHmIPs0fYo+wx9jh7gj3JnmJPs2fYs+w59jx7gb3IXmIvs1fYq+w19jp7g73J3mJvs3fY/9i77D32PvuATWQfso/Yx+wT9in7jH3OvmBfsq/YJPY1+4Z9y75j37MfWIzFWYIlWYqlWYZlWY7lWYEVWYmVWYVVWY3VWYM1WYsFLGRt1mFd1mN9NmBDNmIRG2M/sp/Yz+wX9iv7jf3O/mB/sr/Y3+wf9i/7j43jknHJuRRcSi4VF8+l5tJwabl0XHouA5eRy8QlZsjCZeWycdm5HFxOLheXm8vD5eXycfm5AlxBrhBXmCvCFeWKccW5ElxJrhRXmivDleXKceW5ClxFrhJXmavCVeWqcdW5GlxNrhZXm6vD1eXqcfW5BlxDrhHXmGvCNeWacc25FlxLrhXXmmvDteXace25DlxHrhPXmevCdeW6cd25HlxPrhfXm+vD9eX6cf25AdxAbhA3mBvCDeWGccO5EdxIbhQ3mhvDjeXGceO5CdxEbhI3mZvCTeWmcdO5GdxMbhY3m5vDzeXmcfO5BdxCLoFbxC3mlnBLuWXccm4Ft5Jbxa3m1nBruXXcem4Dt5HbxG3mtnBbuW3cdm4Ht5Pbxe3m9nB7uX3cfu4Ad5A7xB3mjnBHuWPcce4Ed5I7xZ3mznBnuXPcee4Cd5G7xF3mrnBXuWvcde4Gd5O7xd3m7nD/cXe5e9x97gGXyD3kHnGPuSfcU+4Z95x7wb3kXnFJ3GvuDfeWe8e95z5wGIdzBEdyFEdzDMdyHMdzAidyEidzCqdyGqdzBmdyFgc4yNmcw7mcx/lcwIVcxCEuxn3kPnGfuS/cV+4b9537wf3kfnG/uT/cX+4fF8cn45PzKfiUfCo+nk/Np+HT8un49HwGPiOfic/MZ+Gz8tn47HwOPiefi8/N5+Hz8vn4/HwBviBfiC/MF+GL8sX44nwJviRfii/Nl+HL8uX48nwFviJfia/MV+Gr8tX46nwNviZfi6/N1+Hr8vX4+nwDviHfiG/MN+Gb8s345nwLviXfim/Nt+Hb8u349nwHviPfie/Md+G78t347nwPviffi+/N9+H78v34/vwAfiA/iB/MD+GH8sP44fwIfiQ/ih/Nj+HH8uP48fwEfiI/iZ/MT+Gn8tP46fwMfiY/i5/Nz+Hn8vP4+fwCfiGfwC/iF/NL+KX8Mn45v4Jfya/iV/Nr+LX8On49v4HfyG/iN/Nb+K38Nn47v4Pfye/id/N7+L38Pn4/f4A/yB/iD/NH+KP8Mf44f4I/yZ/iT/Nn+LP8Of48f4G/yF/iL/NX+Kv8Nf46f4O/yd/ib/N3+P/4u/w9/j7/gE/kH/KP+Mf8E/4p/4x/zr/gX/Kv+CT+Nf+Gf8u/49/zH3iMx3mCJ3mKp3mGZ3mO53mBF3mJl3mFV3mN13mDN3mLBzzkbd7hXd7jfT7gQz7iER/jP/Kf+M/8F/4r/43/zv/gf/K/+N/8H/4v/4+PE5IJyYUUQkohlRAvpBbSCGmFdEJ6IYOQUcgkZBayCFmFbEJ2IYeQU8gl5BbyCHmFfEJ+oYBQUCgkFBaKCEWFYkJxoYRQUigllBbKCGWFckJ5oYJQUagkVBaqCFWFakJ1oYZQU6gl1BbqCHWFekJ9oYHQUGgkNBaaCE2FZkJzoYXQUmgltBbaCG2FdkJ7oYPQUegkdBa6CF2FbkJ3oYfQU+gl9Bb6CH2FfkJ/YYAwUBgkDBaGCEOFYcJwYYQwUhgljBbGCGOFccJ4YYIwUZgkTBamCFOFacJ0YYYwU5glzBbmCHOFecJ8YYGwUEgQFgmLhSXCUmGZsFxYIawUVgmrhTXCWmGdsF7YIGwUNgmbhS3CVmGbsF3YIewUdgm7hT3CXmGfsF84IBwUDgmHhSPCUeGYcFw4IZwUTgmnhTPCWeGccF64IFwULgmXhSvCVeGacF24Idz8X7gLd4V7wn3hgZAoPBQeCY+FJ8JT4ZnwXHghvBReCUnCa+GN8FZ4J7wXPgiYgAuEQAqUQAuMwAqcwAuCIAqSIAuKoAqaoAuGYAqWAAQo2IIjuIIn+EIghEIkICEmfBQ+CZ+FL8JX4ZvwXfgh/BR+Cb+FP8Jf4Z8QJyYTk4spxJRiKjFeTC2mEdOK6cT0YgYxo5hJzCxmEbOK2cTsYg4xp5hLzC3mEfOK+cT8YgGxoFhILCwWEYuKxcTiYgmxpFhKLC2WEcuK5cTyYgWxolhJrCxWEauK1cTqYg2xplhLrC3WEeuK9cT6YgOxodhIbCw2EZuKzcTmYguxpdhKbC22EduK7cT2Ygexo9hJ7Cx2EbuK3cTuYg+xp9hL7C32EfuK/cT+4gBxoDhIHCwOEYeKw8Th4ghxpDhKHC2OEceK48Tx4gRxojhJnCxOEaeK08Tp4gxxpjhLnC3OEeeK88T54gJxoZggLhIXi0vEpeIycbm4QlwprhJXi2vEteI6cb24QdwobhI3i1vEreI2cbu4Q9wp7hJ3i3vEveI+cb94QDwoHhIPi0fEo+Ix8bh4QjwpnhJPi2fEs+I58bx4QbwoXhIvi1fEq+I18bp4Q7wp3hJvi3fE/8S74j3xvvhATBQfio/Ex+IT8an4THwuvhBfiq/EJPG1+EZ8K74T34sfREzERUIkRUqkRUZkRU7kRUEURUmURUVURU3URUM0RUsEIhRt0RFd0RN9MRBDMRKRGBM/ip/Ez+IX8av4Tfwu/hB/ir/E3+If8a/4T4yTkknJpRRSSimVFC+lltJIaaV0Unopg5RRyiRllrJIWaVsUnYph5RTyiXllvJIeaV8Un6pgFRQKiQVlopIRaViUnGphFRSKiWVlspIZaVyUnmpglRRqiRVlqpIVaVqUnWphlRTqiXVlupIdaV6Un2pgdRQaiQ1lppITaVmUnOphdRSaiW1ltpIbaV2Unupg9RR6iR1lrpIXaVuUneph9RT6iX1lvpIfaV+Un9pgDRQGiQNloZIQ6Vh0nBphDRSGiWNlsZIY6Vx0nhpgjRRmiRNlqZIU6Vp0nRphjRTmiXNluZIc6V50nxpgbRQSpAWSYulJdJSaZm0XFohrZRWSaulNdJaaZ20XtogbZQ2SZulLdJWaZu0Xdoh7ZR2SbulPdJeaZ+0XzogHZQOSYelI9JR6Zh0XDohnZROSaelM9JZ6Zx0XrogXZQuSZelK9JV6Zp0Xboh3ZRuSbelO9J/0l3pnnRfeiAlSg+lR9Jj6Yn0VHomPZdeSC+lV1KS9Fp6I72V3knvpQ8SJuESIZESJdESI7ESJ/GSIImSJMmSIqmSJumSIZmSJQEJSrbkSK7kSb4USKEUSUiKSR+lT9Jn6Yv0VfomfZd+SD+lX9Jv6Y/0V/onxcnJ5ORyCjmlnEqOl1PLaeS0cjo5vZxBzihnkjPLWeSscjY5u5xDzinnknPLeeS8cj45v1xALigXkgvLReSicjG5uFxCLimXkkvLZeSycjm5vFxBrihXkivLVeSqcjW5ulxDrinXkmvLdeS6cj25vtxAbig3khvLTeSmcjO5udxCbim3klvLbeS2cju5vdxB7ih3kjvLXeSucje5u9xD7in3knvLfeS+cj+5vzxAHigPkgfLQ+Sh8jB5uDxCHimPkkfLY+Sx8jh5vDxBnihPkifLU+Sp8jR5ujxDninPkmfLc+S58jx5vrxAXignyIvkxfISeam8TF4ur5BXyqvk1fIaea28Tl4vb5A3ypvkzfIWeau8Td4u75B3yrvk3fIeea+8T94vH5APyofkw/IR+ah8TD4un5BPyqfk0/IZ+ax8Tj4vX5Avypfky/IV+ap8Tb4u35Bvyrfk2/Id+T/5rnxPvi8/kBPlh/Ij+bH8RH4qP5Ofyy/kl/IrOUl+Lb+R38rv5PfyBxmTcZmQSZmSaZmRWZmTeVmQRVmSZVmRVVmTddmQTdmSgQxlW3ZkV/ZkXw7kUI5kJMfkj/In+bP8Rf4qf5O/yz/kn/Iv+bf8R/4r/5PjlGRKciWFklJJpcQrqZU0SlolnZJeyaBkVDIpmZUsSlYlm5JdyaHkVHIpuZU8Sl4ln5JfKaAUVAophZUiSlGlmFJcKaGUVEoppZUySlmlnFJeqaBUVCoplZUqSlWlmlJdqaHUVGoptZU6Sl2lnlJfaaA0VBopjZUmSlOlmdJcaaG0VFoprZU2SlulndJe6aB0VDopnZUuSlelm9Jd6aH0VHopvZU+Sl+ln9JfGaAMVAYpg5UhylBlmDJcGaGMVEYpo5UxylhlnDJemaBMVCYpk5UpylRlmjJdmaHMVGYps5U5ylxlnjJfWaAsVBKURcpiZYmyVFmmLFdWKCuVVcpqZY2yVlmnrFc2KBuVTcpmZYuyVdmmbFd2KDuVXcpuZY+yV9mn7FcOKAeVQ8ph5YhyVDmmHFdOKCeVU8pp5YxyVjmnnFcuKBeVS8pl5YpyVbmmXFduKDeVW8pt5Y7yn3JXuafcVx4oicpD5ZHyWHmiPFWeKc+VF8pL5ZWSpLxW3ihvlXfKe+WDgim4QiikQim0wiiswim8IiiiIimyoiiqoim6YiimYilAgYqtOIqreIqvBEqoRApSYspH5ZPyWfmifFW+Kd+VH8pP5ZfyW/mj/FX+KXFqMjW5mkJNqaZS49XUaho1rZpOTa9mUDOqmdTMahY1q5pNza7mUHPOy6XmVvOoedV8an61gFpQLaQWVouoRdVianG1hFpSLaWWVsuoZdVyanm1glpRraRWVquoVdVqanW1hlpTraXWVuuoddV6an21gdpQbaQ2VpuoTdVmanO1hdpSbaW2VtuobdV2anu1g9pR7aR2VruoXdVuane1h9pT7aX2VvuofdV+an91gDpQHaQOVoeoQ9Vh6nB1hDpSHaWOVseoY9Vx6nh1gjpRnaROVqeoU9Vp6nR1hjpTnaXOVueoc9V56nx1gbpQTVAXqYvVJepSdZm6XF2hrlRXqavVNepadZ26Xt2gblQ3qZvVLepWdZu6Xd2h7lR3qbvVPepedZ+6Xz2gHlQPqYfVI+pR9Zh6XD2hnlRPqafVM+pZ9Zx6Xr2gXlQvqZfVK+pV9Zp6Xb2h3lRvqbfVO+p/6l31nnpffaAmqg/VR+pj9Yn6VH2mPldfqC/VV2qS+lp9o75V36nv1Q8qpuIqoZIqpdIqo7Iqp/KqoIqqpMqqoqqqpuqqoZqqpQIVqrbqqK7qqb4aqKEaqUiNqR/VT+pn9Yv6Vf2mfld/qD/VX+pv9Y/6V/2nxmnJtORaCi2llkqL11JrabS0WjotvZZBy6hl0jJrWbSsWjYtu5ZDy6nl0nJrebS8Wj4tv1ZAK6gV0gprRbSiWjGtuFZCK6mV0kprZbSyWjmtvFZBq6hV0iprVbSqWjWtulZDq6nV0mprdbS6Wj2tvtZAa6g10hprTbSmWjOtudZCa6m10lprbbS2WjutvdZB66h10jprXbSuWjetu9ZD66n10nprfbS+Wj+tvzZAG6gN0gZrQ7Sh2jBtuDZCG6mN0kZrY7Sx2jhtvDZBm6hN0iZrU7Sp2jRtujZDm6nN0mZrc7S52jxtvrZAW6glaIu0xdoSbam2TFuurdBWaqu01doaba22TluvbdA2apu0zdoWbau2Tduu7dB2aru03doeba+2T9uvHdAOaoe0w9oR7ah2TDuundBOaqe009oZ7ax2TjuvXdAuape0y9oV7ap2Tbuu3dBuare029od7T/trnZPu6890BK1h9oj7bH2RHuqPdOeay+0l9orLUl7rb3R3mrvtPfaBw3TcI3QSI3SaI3RWI3TeE3QRE3SZE3RVE3TdM3QTM3SgAY1W3M0V/M0Xwu0UIs0pMW0j9on7bP2RfuqfdO+az+0n9ov7bf2R/ur/dPi9GR6cj2FnlJPpcfrqfU0elo9nZ5ez6Bn1DPpmfUselY9m55dz6Hn1HPpufU8el49n55fL6AX1AvphfUielG9mF5cL6GX1EvppfUyelm9nF5er6BX1CvplfUqelW9ml5dr6HX1GvptfU6el29nl5fb6A31BvpjfUmelO9md5cb6G31FvprfU2elu9nd5e76B31DvpnfUuele9m95d76H31HvpvfU+el+9n95fH6AP1Afpg/Uh+lB9mD5cH6GP1Efpo/Ux+lh9nD5en6BP1Cfpk/Up+lR9mj5dn6HP1Gfps/U5+lx9nj5fX6Av1BP0RfpifYm+VF+mL9dX6Cv1VfpqfY2+Vl+nr9c36Bv1TfpmfYu+Vd+mb9d36Dv1XfpufY++V9+n79cP6Af1Q/ph/Yh+VD+mH9dP6Cf1U/pp/Yx+Vj+nn9cv6Bf1S/pl/Yp+Vb+mX9dv6Df1W/pt/Y7+n35Xv6ff1x/oifpD/ZH+WH+iP9Wf6c/1F/pL/ZWepL/W3+hv9Xf6e/2Djum4TuikTum0zuiszum8LuiiLumyruiqrum6buimbulAh7qtO7qre7qvB3qoRzrSY/pH/ZP+Wf+if9W/6d/1H/pP/Zf+W/+j/9X/6XFGMiO5kcJIaaQy4o3URhojrZHOSG9kMDIamYzMRhYjq5HNyG7kMHIauYzcRh4jr5HPyG8UMAoahYzCRhGjqFHMKG6UMEoapYzSRhmjrFHOKG9UMCoalYzKRhWjqlHNqG7UMGoatYzaRh2jrlHPqG80MBoajYzGRhOjqdHMaG60MFoarYzWRhujrdHOaG90MDoanYzORhejq9HN6G70MHoavYzeRh+jr9HP6G8MMAYag4zBxhBjqDHMGG6MMEYao4zRxhhjrDHOGG9MMCYak4zJxhRjqjHNmG7MMGYas4zZxhxjrjHPmG8sMBYaCcYiY7GxxFhqLDOWGyuMlcYqY7WxxlhrrDPWGxuMjcYmY7OxxdhqbDPg/9N9t7HH2GvsM/YbB4yDxiHjsHHEOGocM44bJ4yTxinjtHHGOGucM84bF4yLxiXjsnHFuGpcM64bN4ybxi3jtnHH+M+4a9wz7hsPjETjofHIeGw8MZ4az4znxgvjpfHKSDJeG2+Mt8Y7473xwcAM3CAM0qAM2mAM1uAM3hAM0ZAM2VAM1dAM3TAM07AMYEDDNhzDNTzDNwIjNCIDGTHjo/HJ+Gx8Mb4a34zvxg/jp/HL+G38Mf4a/4w4M5mZ3ExhpjRTmfFmajONmdZMZ6Y3M5gZzUxmZjOLmdXMZmY3c5g5zVxmbjOPmdfMZ+Y3C5gFzUJmYbOIWdQsZhY3S5glzVJmabOMWdYsZ5Y3K5gVzUpmZbOKWdWsZlY3a5g1zVpmbbOOWdesZ9Y3G5gNzUZmY7OJ2dRsZjY3W5gtzVZma7ON2dZsZ7Y3O5gdzU5mZ7OL2dXsZnY3e5g9zV5mb7OP2dfsZ/Y3B5gDzUHmYHOIOdQcZg43R5gjzVHmaHOMOdYcZ443J5gTzUnmZHOKOdWcZk43Z5gzzVnmbHOOOdecZ843F5gLzQRzkbnYXGIuNZeZy80V5kpzlbnaXGOuNdeZ680N5kZzk7nZ3GJuNbeZ280d5k5zl7nb3GPuNfeZ+80D5kHzkHnYPGIeNY+Zx80T5knzlHnaPGOeNc+Z580L5kXzknnZvGJeNa+Z180b5k3zlnnbvGOCpLi4e+Z984GZaD40H5mPzSfmU/OZ+dx8Yb40X5lJ5mvzjfnWfGe+Nz+YmImbhEmalEmbjMmanMmbgimakimbiqmamqmbhmmalglMaNqmY7qmZ/pmYIZmZCIzZn40P5mfzS/mV/Ob+d38Yf40f5m/zT/mX/OfGWcls5JbKayUVior3kptpbHSWums9FYGK6OVycpsZbGyWtms7FYOK6eVy8pt5bHyWvms/FYBq6BVyCpsFbGKWsWs4lYJq6RVyiptlbHKWuWs8lYFq6JVyapsVbGqWtWs6lYNq6ZVy6pt1bHqWvWs+lYDq6HVyGpsNbGaWs2s5lYLq6XVympttbHaWu2s9lYHq6PVyepsdbG6Wt2s7lYPq6fVy+pt9bH6Wv2s/tYAa6A1yBpsDbGGWsOs4dYIa6Q1yhptjbHGWuOs8dYEa6I1yZpsTbGmWtOs6dYMa6Y1y5ptzbHmWvOs+dYCa6GVYC2yFltLrKXWMmu5tcJaaa2yVltrrLXWOmu9tcHaaG2yNltbrK3WNmu7tcPaae2ydlt7rL3WPmu/dcA6aB2yDltHrKPWMeu4dcI6aZ2yTltnrLPWOeu8dcG6aF2yLltXrKvWNeu6dcO6ad2yblt3rP+su9Y96771wEq0HlqPrMfWE+up9cx6br2wXlqvrCTrtfXGemu9s95bHyzMwi3CIi3Koi3GYi3O4i3BEi3Jki3FUi3N0i3DMi3LAha0bMuxXMuzfCuwQiuykBWzPlqfrM/WF+ur9c36bv2wflq/rN/WH+uv9c+KA8lAcpACpASpQDxIDdKAtCAdSA8ygIwgE8gMsoCsIBvIDnKAnCAXyA3ygLwgH8gPCoCCoBAoDIqAoqAYKA5KgJKgFCgNyoCyoBwoDyqAiqASqAyqgKqgGqgOaoCaoBaoDeqAuqAeqA8agIagEWgMmoCmoBloDlqAlqAVaA3agLagHWgPOoCOoBPoDLqArqAb6A56gJ6gF+gN+oC+oB/oDwaAgWAQGAyGgKFgGBgORoCRYBQYDcaAsWAcGA8mgIlgEpgMpoCpYBqYDmaAmWAWmA3mgLlgHpgPFoCFIAEsAovBErAULAPLwQqwEqwCq8EasBasA+vBBrARbAKbwRawFWwD28EOsBPsArvBHrAX7AP7wQFwEBwCh8ERcBQcA8fBCXASnAKnwRlwFpwD58EFcBFcApfBFXAVXAPXwQ1wE9wCt8Ed8B+4C+6B++ABSAQPwSPwGDwBT8Ez8By8AC/BK5AEXoM34C14B96DDwADOCAACShAAwawgAM8EIAIJCADBahAAzowgAksAAAENnCACzzggwCEIAIIxMBH8Al8Bl/AV/ANfAc/wE/wC/wGf8Bf8A/EwWQwOUwBU8JUMB6mhmlgWpgOpocZYEaYCWaGWWBWmA1mhzlgTpgL5oZ5YF6YD+aHBWBBWAgWhkVgUVgMFoclYElYCpaGZWBZWA6WhxVgRVgJVoZVYFVYDVaHNWBNWAvWhnVgXVgP1ocNYEPYCDaGTWBT2Aw2hy1gS9gKtoZtYFvYDraHHWBH2Al2hl1gV9gNdoc9YE/YC/aGfWBf2A/2hwPgQDgIDoZD4FA4DA6HI+BIOAqOhmPgWDgOjocT4EQ4CU6GU+BUOA1OhzPgTDgLzoZz4Fw4D86HC+BCmAAXwcVwCVwKl8HlcAVcCVfB1XANXAvXwfVwA9wIN8HNcAvcCrfB7XAH3Al3wd1wD9wL98H98AA8CA/Bw/AIPAqPwePwBDwJT8HT8Aw8C8/B8/ACvAgvwcvwCrwKr8Hr8Aa8CW/B2/AO/A/ehffgffgAJsKH8BF8DJ/Ap/AZfA5fwJfwFUyCr+Eb+Ba+g+/hB4hBHBKQhBSkIQNZyEEeClCEEpShAlWoQR0a0IQWBBBCGzrQhR70YQBDGEEEY/Aj/AQ/wy/wK/wGv8Mf8Cf8BX/DP/Av/Afj7GR2cjuFndJOZcfbqe00dlo7nZ3ezmBntDPZme0sdlY7m53dzmHntHPZue08dl47n53fLmAXtAvZhe0idlG7mF3cLmGXtEvZpe0ydlm7nF3ermBXtCvZle0qdlW7ml3drmHXtGvZte06dl27nl3fbmA3tBvZje0mdlO7md3cbmG3tFvZre02dlu7nd3e7mB3tDvZne0udle7m93d7mH3tHvZve0+dl+7n93fHmAPtAfZg+0h9lB7mD3cHmGPtEfZo+0x9lh7nD3enmBPtCfZk+0p9lR7mj3dnmHPtGfZs+059lx7nj3fXmAvtBPsRfZie4m91F5mL7dX2CvtVfZqe4291l5nr7c32BvtTfZme4u91d5mb7d32DvtXfZue4+9195n77cP2AftQ/Zh+4h91D5mH7dP2CftU/Zp+4x91j5nn7cv2BftS/Zl+4p91b5mX7dv2DftW/Zt+479n33Xvmfftx/YifZD+5H92H5iP7Wf2c/tF/ZL+5WdZL+239hv7Xf2e/uDjdm4TdikTdm0zdiszdm8LdiiLdmyrdiqrdm6bdimbdnAhrZtO7Zre7ZvB3ZoRzayY/ZH+5P92f5if7W/2d/tH/ZP+5f92/5j/7X/2XFOMie5k8JJ6aRy4p3UThonrZPOSe9kcDI6mZzMThYnq5PNye7kcHI6uZzcTh4nr5PPye8UcAo6hZzCThGnqFPMKe6UcEo6pZzSThmnrFPOKe9UcCo6lZzKThWnqlPNqe7UcGo6tZzaTh2nrlPPqe80cBo6jZzGThOnqdPMae60cFo6rZzWThunrdPOae90cDo6nZzOThenq9PN6e70cHo6vZzeTh+nr9PP6e8McAY6g5zBzhBnqDPMGe6McEY6o5zRzhhnrDPOGe9McCY6k5zJzhRnqjPNme7McGY6s5zZzhxnrjPPme8scBY6Cc4iZ7GzxFnqLHOWOyuclc4qZ7WzxlnrrHPWOxucjc4mZ7OzxdnqbHO2Ozucnc4uZ7ezx9nr7HP2Owecg84h57BzxDnqHHOOOyeck84p57RzxjnrnHPOOxeci84l57JzxbnqXHOuOzecm84t57Zzx/nPuevcc+47D5xE56HzyHnsPHGeOs+c584L56XzyklyXjtvnLfOO+e988HBHNwhHNKhHNphHNbhHN4RHNGRHNlRHNXRHN0xHNOxHOBAx3Ycx3U8x3cCJ3QiBzkx56PzyfnsfHG+Ot+c784P56fzy/nt/HH+Ov+cODeZm9xN4aZ0U7nxbmo3jZvWTeemdzO4Gd1MbmY3i5vVzeZmd3O4Od1cbm43j5vXzefmdwu4Bd1CbmG3iFvULeYWd0u4Jd1Sbmm3jFvWLeeWdyu4Fd1KbmW3ilvVreZWd2u4Nd1abm23jlvXrefWdxu4Dd1GbmO3idvUbeY2d1u4Ld1Wbmu3jdvWbee2dzu4Hd1Obme3i9vV7eZ2d3u4Pd1ebm+3j9vX7ef2dwe4A91B7mB3iDvUHeYOd0e4I91R7mh3jDvWHeeOdye4E91J7mR3ijvVneZOd2e4M91Z7mx3jjvXnefOdxe4C90Ed5G72F3iLnWXucvdFe5Kd5W72l3jrnXXuevdDe5Gd5O72d3ibnW3udvdHe5Od5e7293j7nX3ufvdA+5B95B72D3iHnWPucfdE+5J95R72j3jnnXPuefdC+5F95J72b3iXnWvudfdG+5N95Z7273j/ufede+5990HbqL70H3kPnafuE/dZ+5z94X70n3lJrmv3TfuW/ed+9794GIu7hIu6VIu7TIu63Iu7wqu6Equ7Cqu6mqu7hqu6VoucKFru47rup7ru4EbupGL3Jj70f3kfna/uF/db+5394f70/3l/nb/uH/df26cl8xL7qXwUnqpvHgvtZfGS+ul89J7GbyMXiYvs5fFy+pl87J7ObycXi4vt5fHy+vl8/J7BbyCXiGvsFfEK+oV84p7JbySXimvdHwZr6xXzivvVfAqepW8yl4Vr6pXzavu1fBqerW82l4dr65Xz6vvNfAaeo28xl4Tr6nXzGvutfBaeq281l4br63XzmvvdfA6ep28zl4Xr6vXzevu9fB6er283l4fr6/Xz+vvDfAGeoO8wd4Qb6g3zBvujfBGeqO80d4Yb6w3zhvvTfAmepO8yd4Ub6o3zZvuzfBmerO82d4cb643z5vvLfAWegneIm+xt8Rb6i3zlnsrvJXeKm+1t8Zb663z1nsbvI3eJm+zt8Xb6m3ztns7vJ3eLm+3t8fb6+3z9nsHvIPeIe+wd8Q76h3zjnsnvJPeKe+0d8Y7653zznsXvIveJe+yd8W76l3zrns3vJveLe+2d8f7z7vr3fPuew+8RO+h98h77D3xnnrPvOfeC++l98pL8l57b7y33jvvvffBwzzcIzzSozzaYzzW4zzeEzzRkzzZUzzV0zzdMzzTszzgQc/2HM/1PM/3Ai/0Ig95Me+j98n77H3xvnrfvO/eD++n98v77f3x/nr/vDg/mZ/cT+Gn9FP58X5qP42f1k/np/cz+Bn9TH5mP4uf1c/mZ/dz+Dn9XH5uP4+f18/n5/cL+AX9Qn5hv4hf1C/mF/dL+CX9Un5pv4xf1i/nl/cr+BX9Sn5lv4pf1a/mV/dr+DX9Wn5tv45f16/n1/cb+A39Rn5jv4nf1G/mN/db+C39Vn5rv43f1m/nt/c7+B39Tn5nv4vf1e/md/d7+D39Xn5vv4/f1+/n9/cH+AP9Qf5gf4g/1B/mD/dH+CP9Uf5of4w/1h/nj/cn+BP9Sf5kf4o/1Z/mT/dn+DP9Wf5sf44/15/nz/cX+Av9BH+Rv9hf4i/1l/nL/RV+vL/KX+2v8df66/z1/gZ/o7/J3+xv8bf62/zt/g5/p7/L3+3v8ff6+/z9/gH/oH/IP+wf8Y/6x/zj/gn/pH/KP+2f8c/65/zz/gX/on/Jv+xf8a/61/zr/g3/pn/Lv+3f8f/z7/r3/Pv+Az/Rf+g/8h/7T/yn/jP/uf/Cf+m/8pP81/4b/63/zn/vf/AxH/cJn/Qpn/YZn/U5n/cFX/QlX/YVX/U1X/cN3/QtH/jQt33Hd33P9/3AD/3IR37M/+h/8j/7X/yv/jf/u//D/+n/8n/7f/y//j8/LkgWJA9SBCmDVEF8kDpIE6QN0gXpgwxBxiBTkDnIEmQNsgXZgxxBziBXkDvIE+QN8gX5gwJBwaBQUDgoEhQNigXFgxJByaBUUDooE5QNygXlgwpBxaBSUDmoElQNqgXVgxpBzaBWUDuoE9QN6gX1gwZBw6BR0DhoEjQNmgXNgxZBy6BV0DpoE7QN2gXtgw5Bx6BT0DnoEnQNugXdgx5Bz6BX0DvoE/QN+gX9gwHBwGBQMDgYEgwNhgXDgxHByGBUMDoYE4wNxgXjgwnBxGBSMDmYEkwNpgXTgxnBzGBWMDuYE8wN5gXzgwXBwiAhWBQsDpYES4NlwfJgRbAyWBWsDtYEa4N1wfpgQ7Ax2BRsDrYEW4NtwfZgR7Az2BXsDvYEe4N9wf7gQHAwOBQcDo4ER4NjwfHgRHAyOBWcDs4EZ4NzwfngQnAxuBRcDq4EV4NrwfXgRnAzuBXcDu4E/wV3g3vB/eBBkBg8DB4Fj4MnwdPgWfA8eBG8DF4FScHr4E3wNngXvA8+BFiAB0RABlRAB0zABlzAB0IgBlIgB0qgBlqgB0ZgBlYAAhjYgRO4gRf4QRCEQRSgIBZ8DD4Fn4MvwdfgW/A9+BH8DH4Fv4M/wd/gXxAXJguThynClGGqMD5MHaYJ04bpwvRhhjBjmCnMHGYJs4bZwuxhjjBnmCvMHeYJ84b5wvxhgbBgWCgsHBYJi4bFwuJhibBkWCosHZYJy4blwvJhhbBiWCmsHFYJq4bVwuphjbBmWCusHdYJ64b1wvphg7Bh2ChsHDYJm4bNwuZhi7Bl2CpsHbYJ24btwvZhh7Bj2CnsHHYJu4bdwu5hj7Bn2CvsHfYJ+4b9wv7hgHBgOCgcHA4Jh4bDwuHhiHBkOCocHY4Jx4bjwvHhhHBiOCmcHE4Jp4bTwunhjHBmOCucHc4J54bzwvnhgnBhmBAuCheHS8Kl4bJwebgiXBmuCleHa8K14bpwfbgh3BhuCjeHW8Kt4bZwe7gj3BnuCneHe8K94b5wf3ggPBgeCg+HR8Kj4bHweHgiPBmeCk+HZ8Kz4bnwfHghvBheCi+HV8Kr4bXwengjvBneCm+Hd8L/wrvhvfB++CBMDB+Gj8LH4ZPwafgsfB6+CF+Gr8Kk8HX4Jnwbvgvfhx9CLMRDIiRDKqRDJmRDLuRDIRRDKZRDJVRDLdRDIzRDKwQhDO3QCd3QC/0wCMMwClEYCz+Gn8LP4Zfwa/gt/B7+CH+Gv8Lf4Z/wb/gvjIuSRcmjFFHKKFUUH6WO0kRpo3RR+ihDlDHKFGWOskRZo2xR9ihHlDPKFeWO8kR5o3xR/qhAVDAqFBWOikRFo2JR8ahEVDIqFZWOykRlo3JR+ahCVDGqFFWOqkRVo2pR9ahGVDOqFdWO6kR1o3pR/ahB1DBqFDWOmkRNo2ZR86hF1DJqFbWO2kRto3ZR+6hD1DHqFHWOukRdo25R96hH1DPqFfWO+kR9o35R/2hANDAaFA2OhkRDo2HR8GhENDIaFY2OxkRjo3HR+GhCNDGaFE2OpkRTo2nR9GhGNDOaFc2O5kRzo3nR/GhBtDBKiBZFi6Ml0dJoWbQ8WhGtjFZFq6M10dpoXbQ+2hBtjDZFm6Mt0dZoW7Q92hHtjHZFu6M90d5oX7Q/OhAdjA5Fh6Mj0dHoWHQ8OhGdjE5Fp6Mz0dnoXHQ+uhBdjC5Fl6Mr0dXoWnQ9uhHdjG5Ft6M70X/R3ehedD96ECVGD6NH0ePoSfQ0ehY9j15EL6NXUVL0OnoTvY3eRe+jDxEW4RERkREV0RETsREX8ZEQiZEUyZESqZEW6ZERmZEVgQhGduREbuRFfhREYRRFKIpFH6NP0efoS/Q1+hZ9j35EP6Nf0e/oT/Q3+hfFoWQoOUqBUqJUKB6lRmlQWpQOpUcZUEaUCWVGWVBWlA1lRzlQTpQL5UZ5UF6UD+VHBVBBVAgVRkVQUVQMFUclUElUCpVGZVBZVA6VRxVQRVQJVUZVUFVUDVVHNVBNVAvVRnVQXVQP1UcNUEPUCDVGTVBT1Aw1Ry1QS9QKtUZtUFvUDrVHHVBH1Al1Rl1QV9QNdUc9UE/UC/VGfVBf1A/1RwPQQDQIDUZD0FA0DA1HI9BINAqNRmPQWDQOjUcT0EQ0CU1GU9BUNA1NRzPQTDQLzUZz0Fw0D81HC9BClIAWocVoCVqKlqHlaAVaiVah1WgNWovWofVoA9qINqHNaAvairah7WgH2ol2od1oD9qL9qH96AA6iA6hw+gIOoqOoePoBDqJTqHT6Aw6i86h8+gCuoguocvoCrqKrqHr6Aa6iW6h2+gO+g/dRffQffQAJaKH6BF6jJ6gp+gZeo5eoJfoFUpCr9Eb9Ba9Q+/RB4QhHBGIRBSiEYNYxCEeCUhEEpKRglSkIR0ZyEQWAggiGznIRR7yUYBCFCGEYugj+oQ+oy/oK/qGvqMf6Cf6hX6jP+gv+ofiYsliyWMpYiljqWLxsdSxNLG0sXSx9LEMsYyxTLHMsSyxrLFsseyxHLGcsVyx3LE8sbyxfLH8sQKxgrFCscKxIrGisWKx4v/Hrl1FD120f79HDBQFu+tnYqJiKyp2NzaiIClIG2BhixjYLXYgNiaK2Ind2CJd3+mevfba98lzutfz3/fa63m/TuazrplZc80cT7Nps1mzedOh2aLZstmq2brZptm26dhs12zf7NB0anZsdmp2bnZpdm12a3Zv9mj2bDo3ezV7N/s0XZp9m/2a/ZsDmgObg5qDm0OaQ5vDmsObI5ojm6Oao5tjmmOb45rjm67NCc2JzUnNyc0pzanNaU235vSme3NGc2bTo+nZnNX0ano3fZq+Tb+mf3N2M6AZ2JzTDGoGN0Oaoc2wZngzojm3Oa85v7mgGdmMai5sLmoubi5pLm1GN5c1lzdXNFc2VzVXN9c01zZjmuuasc31zQ3Njc1Nzbjm5uaW5tbmtub25o7mzuau5u7mnube5r7m/uaBZnzzYPNQ83DzSPNo81jzePNE82TzVDOhebqZ2DzTPNs81zzfvNC82LzUTGpebl5pXm1ea15v3mgmN282bzVTmrebqc07zbvNe837zQfNh81HzcfNJ82nzWfN58205ovmy+ar5uvmm+bb5rvm++aH5sfmp+bn5pdmevNr81vze/NH82fzV/N3808zo/m3mdnMamY3c5q5zbxmfrOgWdgsahY3TSMa2ahGN6axjWt8E5rYpCY3palNK7GEaC2WFEuJpcUyoo1YViwn2orlxQqinWgvVhQriZXFKmJVsZpYXawh1hRribXFOmJdsZ5YX2wgNhQtYiOxsdhEbCo2E5uLDmILsaXYSmwtthHbio5iO7G92EF0EjuKncTOYhexq9hN7C72EHuKzmIvsbfYR3QR+4r9xP7iAHGgOEgcLA4Rh4rDxOHiCHGkOEocLY4Rx4rjxPGiqzhBnChOEieLU8Sp4jTRTZwuuoszxJmih+gpzhK9RG/RR/QV/UR/cbYYIAaKc8QgMVgMEUPFMDFcjBDnivPE+eICMVKMEheKi8TF4hJxqRgtLhOXiyvEleIqcbW4RlwrxojrxFhxvbhB3ChuEuPEzeIWcau4Tdwu7hB3irvE3eIeca+4T9wvHhDjxYPiIfGweEQ8Kh4Tj4snxJPiKTFBPC0mimfEs+I58bx4QbwoXhKTxMviFfGqeE28Lt4Qk8Wb4i0xRbwtpop3xLviPfG++EB8KD4SH4tPxKfiM/G5mCa+EF+Kr8TX4hvxrfhOfC9+ED+Kn8TP4hcxXfwqfhO/iz/En+Iv8bf4R8wQ/4qZYpaYLeaIuWKemC8WiIVikVgsGiGEFEpoYYQVTngRRBRJZFFEFa3kErK1XFIuJZeWy8g2clm5nGwrl5cryHayvVxRriRXlqvIVeVqcnW5hlxTriXXluvIdeV6cn25gdxQtsiN5MZyE7mp3ExuLjvILeSWciu5tdxGbis7yu3k9nIH2UnuKHeSO8td5K5yN7m73EPuKTvLveTech/ZRe4r95P7ywPkgfIgebA8RB4qD5OHyyPkkfIoebQ8Rh4rj5PHy67yBHmiPEmeLE+Rp8rTZDd5uuwuz5Bnyh6ypzxL9pK9ZR/ZV/aT/eXZcoAcKM+Rg+RgOUQOlcPkcDlCnivPk+fLC+RIOUpeKC+SF8tL5KVytLxMXi6vkFfKq+TV8hp5rRwjr5Nj5fXyBnmjvEmOkzfLW+St8jZ5u7xD3invknfLe+S98j55v3xAjpcPyofkw/IR+ah8TD4un5BPyqfkBPm0nCifkc/K5+Tz8gX5onxJTpIvy1fkq/I1+bp8Q06Wb8q35BT5tpwq35Hvyvfk+/ID+aH8SH4sP5Gfys/k53Ka/EJ+Kb+SX8tv5LfyO/m9/EH+KH+SP8tf5HT5q/xN/i7/kH/Kv+Tf8h85Q/4rZ8pZcracI+fKeXK+XCAXykVysWykkFIqqaWRVjrpZZBRJpllkVW2Ukuo1mpJtZRaWi2j2qhl1XKqrVperaDaqfZqRbWSWlmtolZVq6nV1RpqTbWWWluto9ZV66n11QZqQ9WiNlIbq03UpmoztbnqoLZQW6qt1NZqG7Wt6qi2U9urHVQntaPaSe2sdlG7qt3U7moPtafqrPZSe6t9VBe1r9pP7a8OUAeqg9TB6hB1qDpMHa6OUEeqo9TR6hh1rDpOHa+6qhPUieokdbI6RZ2qTlPd1OmquzpDnal6qJ7qLNVL9VZ9VF/VT/VXZ6sBaqA6Rw1Sg9UQNVQNU8PVCHWuOk+dry5QI9UoNf4/vzkuVaPVZepydYW6Ul2lrlbXqGvVGHWdGquuVzeoG9VNapy6Wd2iblW3qdvVHepOdZe6W92j7lX3qfvVA2q8elA9pB5Wj6hH1WPqcfWEelI9pSaop9VE9Yx6Vj2nnlcvqBfVS2qSelm9ol5Vr6nX1RtqsnpTvaWmqLfVVPWOele9p95XH6gP1UfqY/WJ+lR9pj5X09QX6kv1lfpafaO+Vd+p79UP6kf1k/pZ/aKmq1/Vb+p39Yf6U/2l/lb/qBnqXzVTzVKz1Rw1V81T89UCtVAtUotVo4SSSimtjLLKKa+CiiqprIqqqpVeQrfWS+ql9NJ6Gd1GL6uX02318noF3U631yvqlfTKehW9ql5Nr67X0GvqtfTaeh29rl5Pr6830BvqFr2R3lhvojfVm+nNdQe9hd5Sb6W31tvobXVHvZ3eXu+gO+kd9U56Z72L3lXvpnfXe+g9dWe9l95b76O76H31fnp/fYA+UB+kD9aH6EP1YfpwfYQ+Uh+lj9bH6GP1cfp43VWfoE/UJ+mT9Sn6VH2a7qZP1931GfpM3UP31GfpXrq37qP76n66vz5bD9AD9Tl6kB6sh+ihepgerkfoc/V5+nx9gR6pR+kL9UX6Yn2JvlSP1pfpy/UV+kp9lb5aX6Ov1WP0dXqsvl7foG/UN+lx+mZ9i75V36Zv13foO/Vd+m59j75X36fv1w/o8fpB/ZB+WD+iH9WP6cf1E/pJ/ZSeoJ/WE/Uz+ln9nH5ev6Bf1C/pSfpl/Yp+Vb+mX9dv6Mn6Tf2WnqLf1lP1O/pd/Z5+X3+gP9Qf6Y/1J/pT/Zn+XE/TX+gv9Vf6a/2N/lZ/p7/XP+gf9U/6Z/2Lnq5/1b/p3/Uf+k/9l/5b/6Nn6H/1TD1Lz9Zz9Fw9T8/XC/RCvUgv1o0WWmqltTbaaqe9DjrqpLMuuupWZgnT2ixpljJLm2VMG7OsWc60NcubFUw7096saFYyK5tVzKpmNbO6WcOsadYya5t1zLpmPbO+2cBsaFrMRmZjs4nZ1GxmNjcdzBZmS7OV2dpsY7Y1Hc12Znuzg+lkdjQ7mZ3NLmZXs5vZ3exh9jSdzV5mb7OP6WL2NfuZ/c0B5kBzkDnYHGIONYeZw80R5khzlDnaHGOONceZ401Xc4I50ZxkTjanmFPNaaabOd10N2eYM00P09OcZXqZ3qaP6Wv6mf7mbDPADDTnmEFmsBlihpphZrgZYc4155nzzQVmpBllLjQXmYvNJeZSM9pcZi43V5grzVXmanONudaMMdeZseZ6c4O50dxkxpmbzS3mVnObud3cYe40d5m7zT3mXnOfud88YMabB81D5mHziHnUPGYeN0+YJ81TZoJ52kw0z5hnzXPmefOCedG8ZCaZl80r5lXzmnndvGEmmzfNW2aKedtMNe+Yd8175n3zgfnQfGQ+Np+YT81n5nMzzXxhvjRfma/NN+Zb85353vxgfjQ/mZ/NL2a6+dX8Zn43f5g/zV/mb/OPmWH+NTPNLDPbzDFzzTwz3ywwC80is9g0RhhplNHGGGuc8SaYaJLJpphqWtklbGu7pF3KLm2XsW3ssnY529Yub1ew7Wx7u6Jdya5sV7Gr2tXs6nYNu6Zdy65t17Hr2vXs+nYDu6FtsRvZje0mdlO7md3cdrBb2C3tVnZru43d1na029nt7Q62k93R7mR3trvYXe1udne7h93TdrZ72b3tPraL3dfuZ/e3B9gD7UH2YHuIPdQeZg+3R9gj7VH2aHuMPdYeZ4+3Xe0J9kR7kj3ZnmJPtafZbvZ0292eYc+0PWxPe5btZXvbPrav7Wf727PtADvQnmMH2cF2iB1qh9nhdoQ9155nz7cX2JF2lL3QXmQvtpfYS+1oe5m93F5hr7RX2avtNfZaO8ZeZ8fa6+0N9kZ7kx1nb7a32FvtbfZ2e4e9095l77b32HvtffZ++4Adbx+0D9mH7SP2UfuYfdw+YZ+0T9kJ9mk70T5jn7XP2eftC/ZF+5KdZF+2r9hX7Wv2dfuGnWzftG/ZKfZtO9W+Y9+179n37Qf2Q/uR/dh+Yj+1n9nP7TT7hf3SfmW/tt/Yb+139nv7g/3R/mR/tr/Y6fZX+5v93f5h/7R/2b/tP3aG/dfOtLPsbDvHzrXz7Hy7wC60i+xi21hhpVVWW2OtddbbYKNNNttiq23llnCt3ZJuKbe0W8a1ccu65Vxbt7xbwbVz7d2KbiW3slvFrepWc6u7Ndyabi23tlvHrevWc+u7DdyGrsVt5DZ2m7hN3WZuc9fBbeG2dFu5rd02blvX0W3ntnc7uE5uR7eT29nt4nZ1u7nd3R5uT9fZ7eX2dvu4Lm5ft5/b3x3gDnQHuYPdIe5Qd5g73B3hjnRHuaPdMe5Yd5w73nV1J7gT3UnuZHeKO9Wd5rq50113d4Y70/VwPd1Zrpfr7fq4vq6f6+/OdgPcQHeOG+QGuyFuqBvmhrsR7lx3njvfXeBGulHuQneRu9hd4i51o91l7nJ3hbvSXeWudte4a90Yd50b6653N7gb3U1unLvZ3eJudbe5290d7k53l7vb3ePudfe5+90Dbrx70D3kHnaPuEfdY+5x94R70j3lJrin3UT3jHvWPeeedy+4F91LbpJ72b3iXnWvudfdG26ye9O95aa4t91U9457173n3ncfuA/dR+5j94n71H3mPnfT3BfuS/eV+9p9475137nv3Q/uR/eT+9n94qa7X91v7nf3h/vT/eX+dv+4Ge5fN9PNcrPdHDfXzXPz3QK30C1yi13jhJNOOe2Ms84574KLLrnsiquulV/Ct/ZL+qX80n4Z38Yv65fzbf3yfgXfzrf3K/qV/Mp+Fb+qX82v7tfwa/q1/Np+Hb+uX8+v7zfwG/oWv5Hf2G/iN/Wb+c19B7+F39Jv5bf22/htfUe/nd/e7+A7+R39Tn5nv4vf1e/md/d7+D19Z7+X39vv47v4ff1+fn9/gD/QH+QP9of4Q/1h/nB/hD/SH+WP9sf4Y/1x/njf1Z/gT/Qn+ZP9Kf5Uf5rv5k/33f0Z/kzfw/f0Z/levrfv4/v6fr6/P9sP8AP9OX6QH+yH+KF+mB/uR/hz/Xn+fH+BH+lH+Qv9Rf5if4m/1I/2l/nL/RX+Sn+Vv9pf46/1Y/x1fqy/3t/gb/Q3+XH+Zn+Lv9Xf5m/3d/g7/V3+bn+Pv9ff5+/3D/jx/kH/kH/YP+If9Y/5x/0T/kn/lJ/gn/YT/TP+Wf+cf96/4F/0L/lJ/mX/in/Vv+Zf92/4yf5N/5af4t/2U/07/l3/nn/ff+A/9B/5j/0n/lP/mf/cT/Nf+C/9V/5r/43/1n/nv/c/+B/9T/5n/4uf7n/1v/nf/R/+T/+X/9v/42f4f/1MP8vP9nP8XD/Pz/cL/EK/yC/2jRdeeuW1N956570PPvrksy+++lZhidA6LBmWCkuHZUKbsGxYLrQNy4cVQrvQPqwYVgorh1XCqmG1sHpYI6wZ1gprh3XCumG9sH7YIGwYWsJGYeOwSdg0bBY2Dx3CFmHLsFXYOmwTtg0dw3Zh+7BD6BR2DDuFncMuYdewW9g97BH2DJ3DXmHvsE/oEvYN+4X9wwHhwHBQODgcEg4Nh4XDwxHhyHBUODocE44Nx4XjQ9dwQjgxnBRODqeEU8NpoVs4PXQPZ4QzQ4/QM5wVeoXeoU/oG/qF/uHsMCAMDOeEQWFwGBKGhmFheBgRzg3nhfPDBWFkGBUuDBeFi8Ml4dIwOlwWLg9XhCvDVeHqcE24NowJ14Wx4fpwQ7gx3BTGhZvDLeHWcFu4PdwR7gx3hbvDPeHecF+4PzwQxocHw0Ph4fBIeDQ8Fh4PT4Qnw1NhQng6TAzPhGfDc+H58EJ4MbwUJoWXwyvh1fBaeD28ESaHN8NbYUp4O0wN74R3w3vh/fBB+DB8FD4On4RPw2fh8zAtfBG+DF+Fr8M34dvwXfg+/BB+DD+Fn8MvYXr4NfwWfg9/hD/DX+Hv8E+YEf4NM8OsMDvMCXPDvDA/LAgLw6KwODRBBBlU0MEEG1zwIYQYUsihhBpaxSVi67hkXCouHZeJbeKycbnYNi4fV4jtYvu4YlwprhxXiavG1eLqcY24Zlwrrh3XievG9eL6cYO4YWyJG8WN4yZx07hZ3Dx2iFvELeNWceu4Tdw2dozbxe3jDrFT3DHuFHeOu8Rd425x97hH3DN2jnvFveM+sUvcN+4X948HxAPjQfHgeEg8NB4WD49HxCPjUfHoeEw8Nh4Xj49d4wnxxHhSPDmeEk+Np8Vu8fTYPZ4Rz4w9Ys94VuwVe8c+sW/sF/vHs+OAODCeEwfFwXFIHBqHxeFxRDw3nhfPjxfEkXFUvDBeFC+Ol8RL4+h4Wbw8XhGvjFfFq+M18do4Jl4Xx8br4w3xxnhTHBdvjrfEW+Nt8fZ4R7wz3hXvjvfEe+N98f74QBwfH4wPxYfjI/HR+Fh8PD4Rn4xPxQnx6TgxPhOfjc/F5+ML8cX4UpwUX46vxFfja/H1+EacHN+Mb8Up8e04Nb4T343vxffjB/HD+FH8OH4SP42fxc/jtPhF/DJ+Fb+O38Rv43fx+/hD/DH+FH+Ov8Tp8df4W/w9/hH/jH/Fv+M/cUb8N86Ms+LsOCfOjfPi/LggLoyL4uLYRBFlVFFHE2100ccQY0wxxxJrbJWWSK3TkmmptHRaJrVJy6blUtu0fFohtUvt04pppbRyWiWtmlZLq6c10ppprbR2Wietm9ZL66cN0oapJW2UNk6bpE3TZmnz1CFtkbZMW6Wt0zZp29QxbZe2TzukTmnHtFPaOe2Sdk27pd3THmnP1DntlfZO+6Quad+0X9o/HZAOTAelg9Mh6dB0WDo8HZGOTEelo9Mx6dh0XDo+dU0npBPTSenkdEo6NZ2WuqXTU/d0Rjoz9Ug901mpV+qd+qS+qV/qn85OA9LAdE4alAanIWloGpaGpxHp3HReOj9dkEamUenCdFG6OF2SLk2j02Xp8nRFujJdla5O16Rr05h0XRqbrk83pBvTTWlcujndkm5Nt6Xb0x3pznRXujvdk+5N96X70wNpfHowPZQeTo+kR9Nj6fH0RHoyPZUmpKfTxPRMejY9l55PL6QX00tpUno5vZJeTa+l19MbaXJ6M72VpqS309T0Tno3vZfeTx+kD9NH6eP0Sfo0fZY+T9PSF+nL9FX6On2Tvk3fpe/TD+nH9FP6Of2Spqdf02/p9/RH+jP9lf5O/6QZ6d80M81Ks9OcNDfNS/PTgrQwLUqLU5NEkkklnUyyySWfQooppZxKqqlVXiK3zkvmpfLSeZncJi+bl8tt8/J5hdwut88r5pXyynmVvGpeLa+e18hr5rXy2nmdvG5eL6+fN8gb5pa8Ud44b5I3zZvlzXOHvEXeMm+Vt87b5G1zx7xd3j7vkDvlHfNOeee8S94175Z3z3vkPXPnvFfeO++Tu+R98355/3xAPjAflA/Oh+RD82H58HxEPjIflY/Ox+Rj83H5+Nw1n5BPzCflk/Mp+dR8Wu6WT8/d8xn5zNwj98xn5V65d+6T++Z+uX8+Ow/IA/M5eVAenIfkoXlYHp5H5HPzefn8fEEemUflC/NF+eJ8Sb40j86X5cvzFfnKfFW+Ol+Tr81j8nV5bL4+35BvzDflcfnmfEu+Nd+Wb8935DvzXfnufE++N9+X788P5PH5wfxQfjg/kh/Nj+XH8xP5yfxUnpCfzhPzM/nZ/Fx+Pr+QX8wv5Un55fxKfjW/ll/Pb+TJ+c38Vp6S385T8zv53fxefj9/kD/MH+WP8yf50/xZ/jxPy1/kL/NX+ev8Tf42f5e/zz/kH/NP+ef8S56ef82/5d/zH/nP/Ff+O/+TZ+R/88w8K8/Oc/LcPC/PzwvywrwoL85NFllmlXU22WaXfQ455pRzLrnmVmWJ0rosWZYqS5dlSpuybFmutC3LlxVKu9K+rFhWKiuXVcqqZbWyelmjrFnWKmuXdcq6Zb2yftmgbFhaykZl47JJ2bRsVjYvHcoWZcuyVdm6bFO2LR3LdmX7skPpVHYsO5Wdyy5l17Jb2b3sUfYsncteZe+yT+lS9i37lf3LAeXAclA5uBxSDi2HlcPLEeXIclQ5uhxTji3HleNL13JCObGcVE4up5RTy2mlWzm9dC9nlDNLj9KznFV6ld6lT+lb+pX+5ewyoAws55RBZXAZUoaWYWV4GVHOLeeV88sFZWQZVS4sF5WLyyXl0jK6XFYuL1eUK8tV5epyTbm2jCnXlbHl+nJDubHcVMaVm8st5dZyW7m93FHuLHeVu8s95d5yX7m/PFDGlwfLQ+Xh8kh5tDxWHi9PlCfLU2VCebpMLM+UZ8tz5fnyQnmxvFQmlZfLK+XV8lp5vbxRJpc3y1tlSnm7TC3vlHfLe+X98kH5sHxUPi6flE/LZ+XzMq18Ub4sX5Wvyzfl2/Jd+b78UH4sP5Wfyy9levm1/FZ+L3+UP8tf5e/yT5lR/i0zy6wyu8wpc8u8Mr8sKAvLorK4NEUUWVTRxRRbXPEllFhSyaWUWlrVJWrrumRdqi5dl6lt6rJ1udq2Ll9XqO1q+7piXamuXFepq9bV6up1jbpmXauuXdep69b16vp1g7phbakb1Y3rJnXTulndvHaoW9Qt61Z167pN3bZ2rNvV7esOtVPdse5Ud6671F3rbnX3ukfds3aue9W96z61y/+r/afVbvX02r2eUc+sPWrPelbtVXvXPrVv7Vf717PrgDqwnlMH1cF1SB1ah9XhdUQ9t55Xz68X1JF1VL2wXlQvrpfUS+voelm9vF5Rr6xX1avrNfXaOqZeV8fW6+sN9cZ6Ux1Xb6631FvrbfX2eke9s95V76731HvrffX++kAdXx+sD9WH6yP10fpYfbw+UZ+sT9UJ9ek6sT5Tn63P1efrC/XF+lKdVF+ur9RX62v19fpGnVzfrG/VKfXtOrW+U9+t79X36wf1w/pR/bh+Uj+tn9XP67T6Rf2yflW/rt/Ub+t39fv6Q/2x/lR/rr/U6fXX+lv9vf5R/6x/1b/rP3VG/bfOrLPq7Dqnzq3z6vy6oC6si+ri2lRRZVVVV1NtddXXUGNNNddSax0+ctSAHgMH9h72Pxxatf4fP4JAIPxvC60AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf6DhI0cN6DFwYO9hw//bnQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4bxs+ctSAHgMH9h72Pxj+23cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8L/HvOPGHdX1oONbWlpaWi3V5T9F97+uGd1qdKva5v/Jrf9TW/E/o2nVqpVq1apVt+mdO4ztO2bI/11rv+GUoRdN3HjqiOVPnNR+cptW01bqPm9xpxnT1pi29rzStV//4S39h7cMGjyipUdLz8GDR/ToObB3S6/+wwd0bDlmYO8ew3u39B80vPew/2W6z8DBQ4aMbOkxqFe7tkOG9R4+vKXHoJEtA3qPbBkxuGXEsJEtPfr26D+opWPHji3t2v5/9Xb//3fChP92B/jv+r8CAAD//6bVChI=") rename(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chdir(&(0x7f0000000340)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000000, 0x0, 0x1, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0xfeff, 0x10000002000003, 0x0, 0x0, 0x300}) 91.948571ms ago: executing program 2 (id=1729): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='gadgetfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0xfffffffffffffffd, 0xbb) 30.796663ms ago: executing program 1 (id=1730): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x3}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010040000e2040000000800090002"], 0x34}}, 0x20000034) 0s ago: executing program 9 (id=1731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) unshare(0x6a040000) kernel console output (not intermixed with test programs): promiscuous mode [ 277.873497][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1232'. [ 277.873668][ T9657] BTRFS info (device loop9): force clearing of disk cache [ 277.907588][ T9685] veth1_macvtap: left promiscuous mode [ 277.926424][ T9657] BTRFS info (device loop9): use zstd compression, level 3 [ 277.933765][ T9657] BTRFS info (device loop9): max_inline set to 0 [ 277.961326][ T9685] macsec0 (unregistering): left promiscuous mode [ 278.012574][ T5913] usb 9-1: USB disconnect, device number 2 [ 278.342174][ T9085] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 278.577791][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 278.736653][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 278.753007][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 278.762676][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 278.783378][ T24] usb 4-1: can't read configurations, error -71 [ 278.868322][ T9687] loop7: detected capacity change from 0 to 40427 [ 278.877698][ T9687] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 278.884363][ T9687] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 279.001442][ T9687] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 279.038909][ T9687] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 279.056419][ T9687] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 279.066435][ T5913] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 279.128429][ T30] audit: type=1800 audit(1763808402.236:66): pid=9687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1233" name="bus" dev="loop7" ino=10 res=0 errno=0 [ 279.188624][ T8887] syz-executor: attempt to access beyond end of device [ 279.188624][ T8887] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 279.220177][ T8887] CPU: 0 UID: 0 PID: 8887 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 279.220210][ T8887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.220224][ T8887] Call Trace: [ 279.220233][ T8887] [ 279.220243][ T8887] dump_stack_lvl+0x189/0x250 [ 279.220286][ T8887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.220318][ T8887] ? __pfx_queue_work_on+0x10/0x10 [ 279.220345][ T8887] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 279.220378][ T8887] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 279.220426][ T8887] f2fs_handle_critical_error+0x37c/0x540 [ 279.220460][ T8887] f2fs_write_end_io+0x94b/0xc10 [ 279.220519][ T8887] __submit_merged_bio+0x256/0x6a0 [ 279.220552][ T8887] __submit_merged_write_cond+0x255/0x530 [ 279.220598][ T8887] f2fs_write_data_pages+0x2756/0x3290 [ 279.220673][ T8887] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 279.220717][ T8887] ? is_bpf_text_address+0x26/0x2b0 [ 279.220783][ T8887] ? __mod_zone_page_state+0xd7/0x140 [ 279.220822][ T8887] ? folios_put_refs+0x58b/0x670 [ 279.220871][ T8887] ? __lock_acquire+0xab9/0xd20 [ 279.220914][ T8887] ? do_raw_spin_lock+0x121/0x290 [ 279.220953][ T8887] ? do_raw_spin_unlock+0x122/0x240 [ 279.220978][ T8887] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 279.221006][ T8887] do_writepages+0x32e/0x550 [ 279.221055][ T8887] ? do_raw_spin_unlock+0x122/0x240 [ 279.221086][ T8887] filemap_fdatawrite+0x199/0x240 [ 279.221109][ T8887] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 279.221197][ T8887] ? do_raw_spin_unlock+0x122/0x240 [ 279.221227][ T8887] f2fs_sync_dirty_inodes+0x30f/0x830 [ 279.221277][ T8887] f2fs_write_checkpoint+0x93e/0x2440 [ 279.221349][ T8887] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 279.221455][ T8887] kill_f2fs_super+0x2cc/0x6d0 [ 279.221500][ T8887] ? __pfx_kill_f2fs_super+0x10/0x10 [ 279.221553][ T8887] ? shrinker_free+0x2ce/0x3e0 [ 279.221587][ T8887] deactivate_locked_super+0xbc/0x130 [ 279.221613][ T8887] cleanup_mnt+0x425/0x4c0 [ 279.221636][ T8887] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.221662][ T8887] task_work_run+0x1d4/0x260 [ 279.221690][ T8887] ? __pfx_task_work_run+0x10/0x10 [ 279.221721][ T8887] ? exit_to_user_mode_loop+0x55/0x4f0 [ 279.221756][ T8887] exit_to_user_mode_loop+0xff/0x4f0 [ 279.221785][ T8887] ? rcu_is_watching+0x15/0xb0 [ 279.221811][ T8887] do_syscall_64+0x2e9/0xfa0 [ 279.221834][ T8887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.221855][ T8887] ? clear_bhb_loop+0x60/0xb0 [ 279.221882][ T8887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.221902][ T8887] RIP: 0033:0x7f788eb90a77 [ 279.221922][ T8887] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 279.221941][ T8887] RSP: 002b:00007ffc7ecf5fa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 279.221964][ T8887] RAX: 0000000000000000 RBX: 00007f788ec13d7d RCX: 00007f788eb90a77 [ 279.221979][ T8887] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7ecf6060 [ 279.221992][ T8887] RBP: 00007ffc7ecf6060 R08: 0000000000000000 R09: 0000000000000000 [ 279.222005][ T8887] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7ecf70f0 [ 279.222020][ T8887] R13: 00007f788ec13d7d R14: 0000000000044249 R15: 00007ffc7ecf7130 [ 279.222062][ T8887] [ 279.222070][ T8887] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 279.232125][ T5913] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 279.564921][ T5913] usb 10-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 279.573314][ T5913] usb 10-1: Product: syz [ 279.577772][ T5913] usb 10-1: Manufacturer: syz [ 279.582575][ T5913] usb 10-1: SerialNumber: syz [ 279.590218][ T5913] usb 10-1: config 0 descriptor?? [ 279.598061][ T5913] ch341 10-1:0.0: ch341-uart converter detected [ 280.057714][ T9717] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1242'. [ 280.076459][ T9717] netlink: 'syz.7.1242': attribute type 7 has an invalid length. [ 280.084247][ T9717] netlink: 'syz.7.1242': attribute type 8 has an invalid length. [ 280.117553][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1242'. [ 280.155722][ T9717] erspan0: entered promiscuous mode [ 280.166609][ T9717] gretap0: entered promiscuous mode [ 280.195254][ T9717] erspan0: left promiscuous mode [ 280.218783][ T9717] gretap0: left promiscuous mode [ 280.627905][ T5913] usb 10-1: failed to send control message: -71 [ 280.635085][ T5913] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 280.658314][ T5913] usb 10-1: USB disconnect, device number 2 [ 280.674541][ T9719] loop3: detected capacity change from 0 to 32768 [ 280.683730][ T5913] ch341 10-1:0.0: device disconnected [ 280.697530][ T9719] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 280.706397][ T24] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 280.768652][ T9719] XFS (loop3): Ending clean mount [ 280.829260][ T5828] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 280.870690][ T24] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 280.919463][ T24] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 280.933547][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.963848][ T24] usb 9-1: Product: syz [ 280.973202][ T24] usb 9-1: Manufacturer: syz [ 280.983568][ T24] usb 9-1: SerialNumber: syz [ 281.039965][ T24] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 281.465614][ T24] usb 9-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 281.511480][ T24] usb 9-1: USB disconnect, device number 3 [ 281.707236][ T9746] loop9: detected capacity change from 0 to 1024 [ 281.747689][ T9746] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 281.781258][ T9746] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.793920][ T9737] loop3: detected capacity change from 0 to 32768 [ 281.802707][ T9737] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1252 (9737) [ 281.826740][ T9737] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 281.838322][ T9746] EXT4-fs error (device loop9): ext4_map_blocks:819: inode #15: comm syz.9.1256: lblock 0 mapped to illegal pblock 0 (length 6) [ 281.854054][ T9737] BTRFS info (device loop3): using blake2b (blake2b-256-lib) checksum algorithm [ 281.887795][ T9746] EXT4-fs error (device loop9): ext4_map_blocks:819: inode #15: comm syz.9.1256: lblock 0 mapped to illegal pblock 0 (length 1) [ 281.910970][ T9746] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 281.924451][ T9746] EXT4-fs (loop9): This should not happen!! Data will be lost [ 281.924451][ T9746] [ 282.052031][ T9085] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 282.075500][ T9737] BTRFS info (device loop3): enabling ssd optimizations [ 282.085896][ T9737] BTRFS info (device loop3): turning on async discard [ 282.092909][ T9737] BTRFS info (device loop3): enabling free space tree [ 282.101462][ T9737] BTRFS info (device loop3): use zstd compression, level 3 [ 282.223194][ T9771] loop7: detected capacity change from 0 to 512 [ 282.235085][ T9771] EXT4-fs (loop7): orphan cleanup on readonly fs [ 282.263424][ T9771] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1259: bg 0: block 248: padding at end of block bitmap is not set [ 282.288921][ T9771] Quota error (device loop7): write_blk: dquota write failed [ 282.298333][ T9771] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 282.308612][ T9771] EXT4-fs error (device loop7): ext4_acquire_dquot:6948: comm syz.7.1259: Failed to acquire dquot type 1 [ 282.323600][ T9771] EXT4-fs (loop7): 1 truncate cleaned up [ 282.336416][ T5948] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 282.348668][ T9771] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.475503][ T5828] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 282.491870][ T5948] usb 9-1: config 0 has an invalid interface number: 139 but max is 0 [ 282.516780][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1264'. [ 282.526115][ T5948] usb 9-1: config 0 has no interface number 0 [ 282.553678][ T5948] usb 9-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.603896][ T8887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.616765][ T5948] usb 9-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 282.634726][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.646691][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.649034][ T5948] usb 9-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 282.655964][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.694980][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.704551][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.746616][ T5948] usb 9-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 282.820525][ T5948] usb 9-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 282.866434][ T5948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.909978][ T5948] usb 9-1: Product: syz [ 282.946701][ T5948] usb 9-1: Manufacturer: syz [ 282.955870][ T9781] loop7: detected capacity change from 0 to 4096 [ 282.964066][ T5948] usb 9-1: SerialNumber: syz [ 282.976361][ T9781] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 282.985407][ T5948] usb 9-1: config 0 descriptor?? [ 282.995342][ T9768] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 283.004277][ T9768] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 283.046546][ T9781] ntfs3(loop7): ino=19, mi_enum_attr [ 283.093994][ T9781] ntfs3(loop7): failed to convert "c46c" to iso8859-15 [ 283.124194][ T9781] ntfs3(loop7): ino=20, mi_enum_attr [ 283.263392][ T5948] mct_u232 9-1:0.139: MCT U232 converter detected [ 283.272175][ T4591] bridge_slave_1: left allmulticast mode [ 283.306571][ T4591] bridge_slave_1: left promiscuous mode [ 283.312467][ T4591] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.327081][ T5948] usb 9-1: MCT U232 converter now attached to ttyUSB0 [ 283.350619][ T5948] usb 9-1: USB disconnect, device number 4 [ 283.359370][ T4591] bridge_slave_0: left allmulticast mode [ 283.365242][ T4591] bridge_slave_0: left promiscuous mode [ 283.388592][ T5948] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 283.400627][ T4591] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.418057][ T5948] mct_u232 9-1:0.139: device disconnected [ 283.602674][ T9783] loop9: detected capacity change from 0 to 32768 [ 283.690441][ T9783] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 283.797063][ T9783] XFS (loop9): Ending clean mount [ 283.956634][ T9085] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 284.205277][ T9811] loop8: detected capacity change from 0 to 2048 [ 284.233968][ T9812] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.294145][ T30] audit: type=1800 audit(1763808407.406:67): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1274" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 284.377277][ T9814] loop9: detected capacity change from 0 to 1024 [ 284.442775][ T4591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.487225][ T4591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.507124][ T9812] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 284.522132][ T9812] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 284.527120][ T4591] bond0 (unregistering): Released all slaves [ 284.542578][ T9085] hfsplus: node 4:3 still has 2 user(s)! [ 284.563387][ T9812] Remounting filesystem read-only [ 284.573759][ T9089] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 284.766885][ T52] Bluetooth: hci5: command tx timeout [ 284.834185][ C1] Unknown status report in ack skb [ 284.928509][ T9826] loop3: detected capacity change from 0 to 512 [ 285.121245][ T9778] chnl_net:caif_netlink_parms(): no params data found [ 285.388216][ T4591] hsr_slave_0: left promiscuous mode [ 285.396887][ T4591] hsr_slave_1: left promiscuous mode [ 285.403529][ T4591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.415597][ T4591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.434816][ T4591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.442473][ T4591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.476581][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 285.498622][ T4591] veth1_macvtap: left promiscuous mode [ 285.509478][ T4591] veth0_macvtap: left promiscuous mode [ 285.521975][ T4591] veth1_vlan: left promiscuous mode [ 285.533164][ T4591] veth0_vlan: left promiscuous mode [ 285.638840][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 285.648043][ T24] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 285.661431][ T24] usb 10-1: config 0 has no interface number 0 [ 285.686058][ T24] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 285.700196][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.719226][ T24] usb 10-1: Product: syz [ 285.729699][ T24] usb 10-1: Manufacturer: syz [ 285.740338][ T24] usb 10-1: SerialNumber: syz [ 285.759061][ T24] usb 10-1: config 0 descriptor?? [ 285.777836][ T24] smsc95xx v2.0.0 [ 285.820246][ T9844] loop7: detected capacity change from 0 to 32768 [ 286.251543][ T9850] loop3: detected capacity change from 0 to 4096 [ 286.430550][ T9854] loop7: detected capacity change from 0 to 2048 [ 286.483241][ T9854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.497678][ T9854] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.532105][ T9854] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1291: bg 0: block 345: padding at end of block bitmap is not set [ 286.695884][ T4591] team0 (unregistering): Port device team_slave_1 removed [ 286.763699][ T4591] team0 (unregistering): Port device team_slave_0 removed [ 286.825676][ T9859] loop3: detected capacity change from 0 to 32768 [ 286.836725][ T52] Bluetooth: hci5: command tx timeout [ 286.843886][ T9859] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1292 (9859) [ 286.861601][ T9859] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 286.872110][ T9859] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 286.893246][ T9854] EXT4-fs (loop7): Remounting filesystem read-only [ 286.910886][ T9854] fs-verity (loop7, inode 13): Error -117 writing Merkle tree block 0 [ 286.928566][ T9854] fs-verity (loop7, inode 13): Error -117 building Merkle tree [ 286.990326][ T8887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.012141][ T24] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 287.026555][ T24] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 287.036691][ T24] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 287.048837][ T24] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 287.061957][ T24] usb 10-1: USB disconnect, device number 3 [ 287.119692][ T9859] BTRFS info (device loop3): rebuilding free space tree [ 287.144257][ T9859] BTRFS info (device loop3): enabling ssd optimizations [ 287.151549][ T9859] BTRFS info (device loop3): turning on sync discard [ 287.158353][ T9859] BTRFS info (device loop3): enabling free space tree [ 287.165724][ T9859] BTRFS info (device loop3): force clearing of disk cache [ 287.173178][ T9859] BTRFS info (device loop3): enabling auto defrag [ 287.179697][ T9859] BTRFS info (device loop3): max_inline set to 0 [ 287.213195][ T30] audit: type=1800 audit(1763808410.326:68): pid=9859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1292" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 287.334757][ T5828] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 287.441565][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 287.596778][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 287.614935][ T24] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 287.634975][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.643451][ T24] usb 8-1: Product: syz [ 287.648216][ T24] usb 8-1: Manufacturer: syz [ 287.652911][ T24] usb 8-1: SerialNumber: syz [ 287.660637][ T24] usb 8-1: config 0 descriptor?? [ 287.669752][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 288.008135][ T5826] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 288.043004][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.074704][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.093017][ T9778] bridge_slave_0: entered allmulticast mode [ 288.102493][ T9778] bridge_slave_0: entered promiscuous mode [ 288.111937][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.125722][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.161784][ T9778] bridge_slave_1: entered allmulticast mode [ 288.178645][ T5826] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 288.188790][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.206841][ T9778] bridge_slave_1: entered promiscuous mode [ 288.215929][ T5826] usb 4-1: config 0 descriptor?? [ 288.239493][ T5826] cp210x 4-1:0.0: cp210x converter detected [ 288.347073][ T9778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.363479][ T9778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.432752][ T9778] team0: Port device team_slave_0 added [ 288.448173][ T9778] team0: Port device team_slave_1 added [ 288.513287][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.534642][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.586520][ T9778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.608641][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.615903][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.646048][ T5826] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 288.655383][ T9778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.873042][ T5826] usb 4-1: cp210x converter now attached to ttyUSB0 [ 288.879761][ T24] gspca_sonixj: reg_w1 err -71 [ 288.895067][ T9778] hsr_slave_0: entered promiscuous mode [ 288.904628][ T9778] hsr_slave_1: entered promiscuous mode [ 288.914245][ T9778] debugfs: 'hsr0' already exists in 'hsr' [ 288.920327][ T52] Bluetooth: hci5: command tx timeout [ 288.926561][ T9778] Cannot create hsr debugfs directory [ 288.956699][ T24] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 288.982139][ T24] usb 8-1: USB disconnect, device number 2 [ 289.077163][ T5843] usb 4-1: USB disconnect, device number 16 [ 289.098138][ T5843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 289.119073][ T5843] cp210x 4-1:0.0: device disconnected [ 289.140168][ T9902] loop9: detected capacity change from 0 to 164 [ 289.153672][ T9902] Unable to read rock-ridge attributes [ 289.165289][ T9902] Unable to read rock-ridge attributes [ 289.177988][ T9902] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 289.328639][ T9778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.369358][ T9778] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.400001][ T4591] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.407285][ T4591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.458055][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.465404][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.980841][ T9931] loop7: detected capacity change from 0 to 1024 [ 290.001192][ T9931] EXT4-fs: Ignoring removed orlov option [ 290.051787][ T9778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.085894][ T9931] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.463667][ T8887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.516207][ T9778] veth0_vlan: entered promiscuous mode [ 290.528473][ T9914] loop9: detected capacity change from 0 to 40427 [ 290.548331][ T9914] F2FS-fs (loop9): build fault injection rate: 771 [ 290.559217][ T9914] F2FS-fs (loop9): invalid crc value [ 290.566140][ T9778] veth1_vlan: entered promiscuous mode [ 290.607699][ T9778] veth0_macvtap: entered promiscuous mode [ 290.621407][ T9778] veth1_macvtap: entered promiscuous mode [ 290.648190][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.683325][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.790625][ T9914] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 290.805694][ T9914] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 290.837005][ T5843] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 290.868923][ T9914] syz.9.1307: attempt to access beyond end of device [ 290.868923][ T9914] loop9: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 290.892688][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.918200][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.943055][ T9085] syz-executor: attempt to access beyond end of device [ 290.943055][ T9085] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 290.960371][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.970391][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.978881][ T9085] CPU: 1 UID: 0 PID: 9085 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 290.978912][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.978926][ T9085] Call Trace: [ 290.978934][ T9085] [ 290.978943][ T9085] dump_stack_lvl+0x189/0x250 [ 290.978987][ T9085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.979021][ T9085] ? __pfx_queue_work_on+0x10/0x10 [ 290.979049][ T9085] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 290.979081][ T9085] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.979134][ T9085] f2fs_handle_critical_error+0x37c/0x540 [ 290.979177][ T9085] f2fs_write_end_io+0x94b/0xc10 [ 290.979226][ T9085] __submit_merged_bio+0x256/0x6a0 [ 290.979260][ T9085] __submit_merged_write_cond+0x255/0x530 [ 290.979306][ T9085] f2fs_write_data_pages+0x2756/0x3290 [ 290.979379][ T9085] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 290.979467][ T9085] ? __mod_zone_page_state+0xd7/0x140 [ 290.979506][ T9085] ? folios_put_refs+0x58b/0x670 [ 290.979556][ T9085] ? __lock_acquire+0xab9/0xd20 [ 290.979600][ T9927] loop8: detected capacity change from 0 to 40427 [ 290.979598][ T9085] ? do_raw_spin_lock+0x121/0x290 [ 290.979640][ T9085] ? do_raw_spin_unlock+0x122/0x240 [ 290.979662][ T9085] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 290.979693][ T9085] do_writepages+0x32e/0x550 [ 290.979753][ T9085] ? do_raw_spin_unlock+0x122/0x240 [ 290.979788][ T9085] filemap_fdatawrite+0x199/0x240 [ 290.979815][ T9085] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 290.979912][ T9085] ? do_raw_spin_unlock+0x122/0x240 [ 290.979947][ T9085] f2fs_sync_dirty_inodes+0x30f/0x830 [ 290.980003][ T9085] f2fs_write_checkpoint+0x93e/0x2440 [ 290.980034][ T9085] ? stack_depot_save_flags+0x40/0x860 [ 290.980112][ T9085] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 290.980216][ T9085] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 290.980250][ T9085] ? kfree+0x1c0/0x680 [ 290.980290][ T9085] kill_f2fs_super+0x2cc/0x6d0 [ 290.980332][ T9085] ? __pfx_kill_f2fs_super+0x10/0x10 [ 290.980391][ T9085] ? shrinker_free+0x2ce/0x3e0 [ 290.980433][ T9085] deactivate_locked_super+0xbc/0x130 [ 290.980462][ T9085] cleanup_mnt+0x425/0x4c0 [ 290.980489][ T9085] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.980518][ T9085] task_work_run+0x1d4/0x260 [ 290.980552][ T9085] ? __pfx_task_work_run+0x10/0x10 [ 290.980587][ T9085] ? exit_to_user_mode_loop+0x55/0x4f0 [ 290.980628][ T9085] exit_to_user_mode_loop+0xff/0x4f0 [ 290.980661][ T9085] ? rcu_is_watching+0x15/0xb0 [ 290.980691][ T9085] do_syscall_64+0x2e9/0xfa0 [ 290.980719][ T9085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.980744][ T9085] ? clear_bhb_loop+0x60/0xb0 [ 290.980775][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.980799][ T9085] RIP: 0033:0x7fbbbd390a77 [ 290.980845][ T9085] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 290.980866][ T9085] RSP: 002b:00007ffe55856828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 290.980893][ T9085] RAX: 0000000000000000 RBX: 00007fbbbd413d7d RCX: 00007fbbbd390a77 [ 290.980908][ T9085] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe558568e0 [ 290.980924][ T9085] RBP: 00007ffe558568e0 R08: 0000000000000000 R09: 0000000000000000 [ 290.980940][ T9085] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe55857970 [ 290.980955][ T9085] R13: 00007fbbbd413d7d R14: 0000000000047024 R15: 00007ffe558579b0 [ 290.981003][ T9085] [ 290.984396][ T9085] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 290.998829][ T9927] F2FS-fs (loop8): build fault injection rate: 174 [ 291.026516][ T52] Bluetooth: hci5: command tx timeout [ 291.058445][ T9927] F2FS-fs (loop8): build fault injection type: 0x3bfe8c [ 291.366545][ T5843] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.390561][ T9927] F2FS-fs (loop8): invalid crc value [ 291.407099][ T5843] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.416285][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.424375][ T5843] usb 8-1: Product: syz [ 291.434637][ T5843] usb 8-1: Manufacturer: syz [ 291.462105][ T5843] usb 8-1: SerialNumber: syz [ 291.612032][ T9927] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 291.650185][ T9927] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 291.755513][ T9961] netlink: 'syz.3.1320': attribute type 13 has an invalid length. [ 291.786827][ T9089] syz-executor: attempt to access beyond end of device [ 291.786827][ T9089] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 291.804072][ T9961] netlink: 'syz.3.1320': attribute type 13 has an invalid length. [ 291.810078][ T4591] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.831302][ T4591] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.840744][ T9089] CPU: 0 UID: 0 PID: 9089 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 291.840779][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.840793][ T9089] Call Trace: [ 291.840801][ T9089] [ 291.840810][ T9089] dump_stack_lvl+0x189/0x250 [ 291.840853][ T9089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.840886][ T9089] ? __pfx_queue_work_on+0x10/0x10 [ 291.840915][ T9089] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 291.840948][ T9089] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 291.840993][ T9089] f2fs_handle_critical_error+0x37c/0x540 [ 291.841025][ T9089] f2fs_write_end_io+0x94b/0xc10 [ 291.841079][ T9089] __submit_merged_bio+0x256/0x6a0 [ 291.841111][ T9089] __submit_merged_write_cond+0x255/0x530 [ 291.841155][ T9089] f2fs_write_data_pages+0x2756/0x3290 [ 291.841219][ T9089] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 291.841295][ T9089] ? __mod_zone_page_state+0xd7/0x140 [ 291.841330][ T9089] ? folios_put_refs+0x58b/0x670 [ 291.841375][ T9089] ? __lock_acquire+0xab9/0xd20 [ 291.841414][ T9089] ? do_raw_spin_lock+0x121/0x290 [ 291.841451][ T9089] ? do_raw_spin_unlock+0x122/0x240 [ 291.841475][ T9089] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 291.841503][ T9089] do_writepages+0x32e/0x550 [ 291.841549][ T9089] ? do_raw_spin_unlock+0x122/0x240 [ 291.841579][ T9089] filemap_fdatawrite+0x199/0x240 [ 291.841601][ T9089] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 291.841675][ T9089] ? do_raw_spin_unlock+0x122/0x240 [ 291.841705][ T9089] f2fs_sync_dirty_inodes+0x30f/0x830 [ 291.841752][ T9089] f2fs_write_checkpoint+0x93e/0x2440 [ 291.841779][ T9089] ? __lock_acquire+0xab9/0xd20 [ 291.841839][ T9089] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 291.841929][ T9089] kill_f2fs_super+0x2cc/0x6d0 [ 291.841963][ T9089] ? __pfx_kill_f2fs_super+0x10/0x10 [ 291.842010][ T9089] ? shrinker_free+0x2ce/0x3e0 [ 291.842051][ T9089] deactivate_locked_super+0xbc/0x130 [ 291.842077][ T9089] cleanup_mnt+0x425/0x4c0 [ 291.842099][ T9089] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.842123][ T9089] task_work_run+0x1d4/0x260 [ 291.842150][ T9089] ? __pfx_task_work_run+0x10/0x10 [ 291.842180][ T9089] ? exit_to_user_mode_loop+0x55/0x4f0 [ 291.842213][ T9089] exit_to_user_mode_loop+0xff/0x4f0 [ 291.842242][ T9089] ? rcu_is_watching+0x15/0xb0 [ 291.842267][ T9089] do_syscall_64+0x2e9/0xfa0 [ 291.842290][ T9089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.842311][ T9089] ? clear_bhb_loop+0x60/0xb0 [ 291.842337][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.842358][ T9089] RIP: 0033:0x7f79dd390a77 [ 291.842378][ T9089] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 291.842396][ T9089] RSP: 002b:00007ffc9a306798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 291.842419][ T9089] RAX: 0000000000000000 RBX: 00007f79dd413d7d RCX: 00007f79dd390a77 [ 291.842433][ T9089] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9a306850 [ 291.842446][ T9089] RBP: 00007ffc9a306850 R08: 0000000000000000 R09: 0000000000000000 [ 291.842458][ T9089] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9a3078e0 [ 291.842472][ T9089] R13: 00007f79dd413d7d R14: 0000000000047375 R15: 00007ffc9a307920 [ 291.842508][ T9089] [ 291.842546][ T9089] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 291.948585][ T4591] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.951039][ T9089] CPU: 0 UID: 0 PID: 9089 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 291.951078][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.951094][ T9089] Call Trace: [ 291.951104][ T9089] [ 291.951114][ T9089] dump_stack_lvl+0x189/0x250 [ 291.951163][ T9089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.951200][ T9089] ? __pfx_queue_work_on+0x10/0x10 [ 291.951233][ T9089] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 291.951271][ T9089] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 291.951324][ T9089] f2fs_handle_critical_error+0x37c/0x540 [ 291.951362][ T9089] f2fs_write_end_io+0x94b/0xc10 [ 291.951419][ T9089] __submit_merged_bio+0x256/0x6a0 [ 291.951455][ T9089] __submit_merged_write_cond+0x255/0x530 [ 291.951506][ T9089] f2fs_write_data_pages+0x2756/0x3290 [ 291.951586][ T9089] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 291.951680][ T9089] ? __mod_zone_page_state+0xd7/0x140 [ 291.951723][ T9089] ? folios_put_refs+0x58b/0x670 [ 291.951775][ T9089] ? __lock_acquire+0xab9/0xd20 [ 291.951821][ T9089] ? do_raw_spin_lock+0x121/0x290 [ 291.951865][ T9089] ? do_raw_spin_unlock+0x122/0x240 [ 291.951893][ T9089] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 291.951924][ T9089] do_writepages+0x32e/0x550 [ 291.951980][ T9089] ? do_raw_spin_unlock+0x122/0x240 [ 291.952015][ T9089] filemap_fdatawrite+0x199/0x240 [ 291.952049][ T9089] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 291.952146][ T9089] ? do_raw_spin_unlock+0x122/0x240 [ 291.952182][ T9089] f2fs_sync_dirty_inodes+0x30f/0x830 [ 291.952235][ T9089] f2fs_write_checkpoint+0x93e/0x2440 [ 291.952273][ T9089] ? __lock_acquire+0xab9/0xd20 [ 291.952348][ T9089] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 291.952461][ T9089] kill_f2fs_super+0x2cc/0x6d0 [ 291.952503][ T9089] ? __pfx_kill_f2fs_super+0x10/0x10 [ 291.952562][ T9089] ? shrinker_free+0x2ce/0x3e0 [ 291.952601][ T9089] deactivate_locked_super+0xbc/0x130 [ 291.952630][ T9089] cleanup_mnt+0x425/0x4c0 [ 291.952656][ T9089] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.952687][ T9089] task_work_run+0x1d4/0x260 [ 291.952717][ T9089] ? __pfx_task_work_run+0x10/0x10 [ 291.952753][ T9089] ? exit_to_user_mode_loop+0x55/0x4f0 [ 291.952793][ T9089] exit_to_user_mode_loop+0xff/0x4f0 [ 291.952824][ T9089] ? rcu_is_watching+0x15/0xb0 [ 291.952857][ T9089] do_syscall_64+0x2e9/0xfa0 [ 291.952882][ T9089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.952907][ T9089] ? clear_bhb_loop+0x60/0xb0 [ 291.952940][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.952963][ T9089] RIP: 0033:0x7f79dd390a77 [ 291.952987][ T9089] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 291.953007][ T9089] RSP: 002b:00007ffc9a306798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 291.953047][ T9089] RAX: 0000000000000000 RBX: 00007f79dd413d7d RCX: 00007f79dd390a77 [ 291.953064][ T9089] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9a306850 [ 291.953080][ T9089] RBP: 00007ffc9a306850 R08: 0000000000000000 R09: 0000000000000000 [ 291.953095][ T9089] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9a3078e0 [ 291.953111][ T9089] R13: 00007f79dd413d7d R14: 0000000000047375 R15: 00007ffc9a307920 [ 291.953159][ T9089] [ 291.956749][ T9089] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 291.992203][ T4591] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.267183][ T9965] loop3: detected capacity change from 0 to 1024 [ 292.346349][ T5948] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 292.640715][ T9963] loop2: detected capacity change from 0 to 32768 [ 292.742375][ T9970] netlink: 'syz.8.1321': attribute type 10 has an invalid length. [ 292.759480][ T5843] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 292.769722][ T5843] cdc_ncm 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 292.777343][ T5843] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 292.799028][ T9963] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 292.852830][ T9963] XFS (loop2): Ending clean mount [ 292.869963][ T9963] XFS (loop2): Quotacheck needed: Please wait. [ 292.882918][ T5948] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 292.893004][ T5948] usb 10-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 292.907087][ T5948] usb 10-1: Product: syz [ 292.918594][ T5948] usb 10-1: Manufacturer: syz [ 292.923344][ T5948] usb 10-1: SerialNumber: syz [ 292.957229][ T5948] usb 10-1: config 0 descriptor?? [ 292.970189][ T9963] XFS (loop2): Quotacheck: Done. [ 292.972682][ T5948] ch341 10-1:0.0: ch341-uart converter detected [ 293.016213][ T5843] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 293.077804][ T5843] usb 8-1: USB disconnect, device number 3 [ 293.109814][ T5843] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 293.154171][ T9963] XFS (loop2): User initiated shutdown received. [ 293.163550][ T9963] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:466). Shutting down filesystem. [ 293.178035][ T9963] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 293.233230][ T9778] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 293.426351][ T5835] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 293.464729][ T52] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 293.576339][ T5835] usb 9-1: Using ep0 maxpacket: 32 [ 293.583889][ T5835] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.607864][ T5835] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.638295][ T5835] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 293.663876][ T5835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.705715][ T5835] usb 9-1: config 0 descriptor?? [ 294.010624][ T5948] ch341-uart ttyUSB0: break control not supported, using simulated break [ 294.022442][ T5948] usb 10-1: ch341-uart converter now attached to ttyUSB0 [ 294.046592][ T5948] usb 10-1: USB disconnect, device number 4 [ 294.067212][ T5948] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 294.080158][ T5948] ch341 10-1:0.0: device disconnected [ 294.102953][T10009] loop7: detected capacity change from 0 to 128 [ 294.118686][T10009] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 294.144055][ T5835] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 294.226349][ T5913] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 294.389419][ T5913] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 294.404983][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.417743][ T5913] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 294.423176][ T5835] usb 9-1: USB disconnect, device number 5 [ 294.433723][ T5913] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 294.452697][ T5913] usb 3-1: Manufacturer: syz [ 294.468748][ T5913] usb 3-1: config 0 descriptor?? [ 294.546376][ T5913] rc_core: IR keymap rc-hauppauge not found [ 294.555041][ T5913] Registered IR keymap rc-empty [ 294.579122][ T5913] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 294.621000][ T5913] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 295.414998][T10021] loop7: detected capacity change from 0 to 32768 [ 295.457400][ T5913] usb 3-1: USB disconnect, device number 8 [ 295.479299][T10021] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 295.523375][T10044] loop8: detected capacity change from 0 to 128 [ 295.552088][T10021] XFS (loop7): Ending clean mount [ 295.561563][T10021] XFS (loop7): Quotacheck needed: Please wait. [ 295.566190][T10044] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.604848][T10044] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 295.661688][T10021] XFS (loop7): Quotacheck: Done. [ 295.783514][ T9089] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.825554][ T8887] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 295.843321][T10033] loop3: detected capacity change from 0 to 40427 [ 295.855448][T10033] F2FS-fs (loop3): Image doesn't support compression [ 295.863462][T10033] F2FS-fs (loop3): build fault injection rate: 690 [ 295.878364][T10033] F2FS-fs (loop3): invalid crc value [ 296.023800][T10033] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 296.075938][T10033] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 296.168693][T10033] syz.3.1346: attempt to access beyond end of device [ 296.168693][T10033] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 296.317632][ T5828] syz-executor: attempt to access beyond end of device [ 296.317632][ T5828] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 296.352097][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 296.352130][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.352144][ T5828] Call Trace: [ 296.352152][ T5828] [ 296.352162][ T5828] dump_stack_lvl+0x189/0x250 [ 296.352206][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.352240][ T5828] ? __pfx_queue_work_on+0x10/0x10 [ 296.352269][ T5828] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 296.352304][ T5828] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 296.352353][ T5828] f2fs_handle_critical_error+0x37c/0x540 [ 296.352387][ T5828] f2fs_write_end_io+0x94b/0xc10 [ 296.352440][ T5828] __submit_merged_bio+0x256/0x6a0 [ 296.352474][ T5828] __submit_merged_write_cond+0x255/0x530 [ 296.352521][ T5828] f2fs_write_data_pages+0x2756/0x3290 [ 296.352603][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 296.352647][ T5828] ? is_bpf_text_address+0x26/0x2b0 [ 296.352714][ T5828] ? __mod_zone_page_state+0xd7/0x140 [ 296.352754][ T5828] ? folios_put_refs+0x58b/0x670 [ 296.352799][ T5828] ? __pfx_folios_put_refs+0x10/0x10 [ 296.352828][ T5828] ? rcu_is_watching+0x15/0xb0 [ 296.352862][ T5828] ? __lock_acquire+0xab9/0xd20 [ 296.352915][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 296.352943][ T5828] do_writepages+0x32e/0x550 [ 296.352993][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 296.353030][ T5828] filemap_fdatawrite+0x199/0x240 [ 296.353053][ T5828] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 296.353142][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 296.353174][ T5828] f2fs_sync_dirty_inodes+0x30f/0x830 [ 296.353224][ T5828] f2fs_write_checkpoint+0x93e/0x2440 [ 296.353252][ T5828] ? __lock_acquire+0xab9/0xd20 [ 296.353321][ T5828] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 296.353428][ T5828] kill_f2fs_super+0x2cc/0x6d0 [ 296.353466][ T5828] ? __pfx_kill_f2fs_super+0x10/0x10 [ 296.353520][ T5828] ? shrinker_free+0x2ce/0x3e0 [ 296.353563][ T5828] deactivate_locked_super+0xbc/0x130 [ 296.353589][ T5828] cleanup_mnt+0x425/0x4c0 [ 296.353613][ T5828] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.353639][ T5828] task_work_run+0x1d4/0x260 [ 296.353667][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 296.353699][ T5828] ? exit_to_user_mode_loop+0x55/0x4f0 [ 296.353735][ T5828] exit_to_user_mode_loop+0xff/0x4f0 [ 296.353763][ T5828] ? rcu_is_watching+0x15/0xb0 [ 296.353791][ T5828] do_syscall_64+0x2e9/0xfa0 [ 296.353814][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.353836][ T5828] ? clear_bhb_loop+0x60/0xb0 [ 296.353864][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.353885][ T5828] RIP: 0033:0x7ff9acb90a77 [ 296.353905][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 296.353924][ T5828] RSP: 002b:00007ffe0c72cb68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 296.353947][ T5828] RAX: 0000000000000000 RBX: 00007ff9acc13d7d RCX: 00007ff9acb90a77 [ 296.353962][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0c72cc20 [ 296.353976][ T5828] RBP: 00007ffe0c72cc20 R08: 0000000000000000 R09: 0000000000000000 [ 296.353988][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0c72dcb0 [ 296.354003][ T5828] R13: 00007ff9acc13d7d R14: 00000000000484ff R15: 00007ffe0c72dcf0 [ 296.354050][ T5828] [ 296.354059][ T5828] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 296.479650][T10067] netlink: 'syz.8.1355': attribute type 12 has an invalid length. [ 296.717174][T10067] netlink: 'syz.8.1355': attribute type 29 has an invalid length. [ 296.753903][T10067] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1355'. [ 296.777689][T10067] netlink: 'syz.8.1355': attribute type 2 has an invalid length. [ 296.798580][T10067] netlink: 'syz.8.1355': attribute type 3 has an invalid length. [ 296.856698][ T5913] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 296.961317][T10063] loop9: detected capacity change from 0 to 32768 [ 296.975521][T10063] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1354 (10063) [ 296.993823][T10063] BTRFS info (device loop9): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 297.004676][T10063] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm [ 297.008727][ T5913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.043382][ T5913] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 297.074293][ T5913] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 297.105541][ T5913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.119703][ T5913] usb 8-1: config 0 descriptor?? [ 297.151694][T10063] BTRFS info (device loop9): enabling ssd optimizations [ 297.158997][T10063] BTRFS info (device loop9): turning on async discard [ 297.165932][T10063] BTRFS info (device loop9): enabling free space tree [ 297.172994][T10063] BTRFS info (device loop9): use zlib compression, level 3 [ 297.363937][ T9085] BTRFS info (device loop9): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 297.482244][ T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 297.491013][ T52] Bluetooth: hci1: Injecting HCI hardware error event [ 297.502098][ T5840] Bluetooth: hci1: hardware error 0x00 [ 297.549831][ T5913] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 297.576533][ T5913] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 297.583746][ T5913] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 297.638838][ T5913] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 297.649000][ T5913] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 297.686725][ T5913] kovaplus 0003:1E7D:2D50.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.7-1/input0 [ 297.874691][T10111] loop8: detected capacity change from 0 to 128 [ 297.908786][T10111] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 298.218535][ T5913] kovaplus 0003:1E7D:2D50.000E: couldn't init struct kovaplus_device [ 298.228151][ T5913] kovaplus 0003:1E7D:2D50.000E: couldn't install mouse [ 298.248436][ T5913] kovaplus 0003:1E7D:2D50.000E: probe with driver kovaplus failed with error -71 [ 298.265381][ T5913] usb 8-1: USB disconnect, device number 4 [ 298.387189][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 298.454189][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1378'. [ 298.548539][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.561258][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.574018][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.589099][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.607157][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.628835][ T24] usb 9-1: config 0 descriptor?? [ 299.160072][ T24] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 299.306358][ T43] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 299.456378][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 299.463553][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.487594][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.516336][ T43] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 299.525442][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.538088][ T43] usb 8-1: config 0 descriptor?? [ 299.556535][ T5840] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 299.558064][ T43] hub 8-1:0.0: USB hub found [ 299.629743][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d60c00: rx timeout, send abort [ 299.633754][ T24] usb 9-1: USB disconnect, device number 6 [ 299.754999][ T43] hub 8-1:0.0: 1 port detected [ 300.131864][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d60000: rx timeout, send abort [ 300.140407][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d60c00: abort rx timeout. Force session deactivation [ 300.172492][T10155] loop3: detected capacity change from 0 to 65536 [ 300.234011][T10155] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 300.300849][T10155] XFS (loop3): Ending clean mount [ 300.312128][T10155] XFS (loop3): Quotacheck needed: Please wait. [ 300.332867][T10174] batadv_slave_1: entered promiscuous mode [ 300.341692][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1392'. [ 300.351244][T10174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.372055][T10155] XFS (loop3): Quotacheck: Done. [ 300.401832][ T43] hub 8-1:0.0: activate --> -90 [ 300.429652][T10174] batadv_slave_1 (unregistering): left promiscuous mode [ 300.438783][T10174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.444621][ T30] audit: type=1804 audit(1763808423.556:69): pid=10155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1387" name="/newroot/330/file0/file1" dev="loop3" ino=70 res=1 errno=0 [ 300.507995][ T5828] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 300.538254][ T5913] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 300.616493][ T24] usb 8-1: USB disconnect, device number 5 [ 300.628202][ T43] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 300.640235][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d60000: abort rx timeout. Force session deactivation [ 300.706619][ T5913] usb 9-1: Using ep0 maxpacket: 32 [ 300.720449][ T5913] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 300.742709][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.754347][ T5913] usb 9-1: config 0 descriptor?? [ 300.981092][ T5913] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 300.994126][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 301.011967][ T5913] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 301.019451][ T5913] usb 9-1: media controller created [ 301.047202][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.159764][ T5913] DVB: Unable to find symbol dib7000p_attach() [ 301.165990][ T5913] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 301.326591][ T5913] rc_core: IR keymap rc-dib0700-rc5 not found [ 301.335444][ T5913] Registered IR keymap rc-empty [ 301.340806][ T5913] dvb-usb: could not initialize remote control. [ 301.348333][ T5913] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 301.377015][T10190] loop3: detected capacity change from 0 to 2048 [ 301.385400][T10190] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 301.407501][T10192] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 301.456516][ T5913] usb 9-1: USB disconnect, device number 7 [ 301.501911][ T5913] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 301.632497][T10194] netlink: 'syz.3.1399': attribute type 1 has an invalid length. [ 301.642482][T10194] netlink: 'syz.3.1399': attribute type 2 has an invalid length. [ 301.671267][T10184] loop9: detected capacity change from 0 to 32768 [ 301.708959][T10184] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 301.724649][T10203] loop2: detected capacity change from 0 to 1024 [ 301.791534][T10184] XFS (loop9): Ending clean mount [ 301.860770][ T9085] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 302.908081][T10248] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1420'. [ 303.063401][T10255] loop3: detected capacity change from 0 to 8 [ 303.120239][ T5913] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 303.131181][T10255] SQUASHFS error: Failed to read block 0x4de: -5 [ 303.143508][T10255] SQUASHFS error: Failed to read block 0x4de: -5 [ 303.150959][ T30] audit: type=1800 audit(1763808426.256:70): pid=10255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1423" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 303.197516][T10255] SQUASHFS error: Failed to read block 0x4de: -5 [ 303.209433][T10255] SQUASHFS error: Failed to read block 0x4de: -5 [ 303.283511][T10266] netlink: 'syz.9.1428': attribute type 1 has an invalid length. [ 303.296802][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 303.307843][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.344969][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.345136][T10266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.389780][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.426489][ T5913] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 303.435705][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.467894][T10269] bond1: (slave geneve2): making interface the new active one [ 303.476962][ T5913] usb 3-1: config 0 descriptor?? [ 303.486505][T10269] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 303.599344][T10277] loop3: detected capacity change from 0 to 256 [ 303.935821][ T5913] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0010/input/input14 [ 304.006604][ T5913] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 304.124805][ T6557] usb 3-1: USB disconnect, device number 9 [ 304.853124][T10299] loop7: detected capacity change from 0 to 32768 [ 304.950162][T10299] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 304.960796][T10298] loop8: detected capacity change from 0 to 32768 [ 305.003196][T10298] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1440 (10298) [ 305.185288][T10299] XFS (loop7): Ending clean mount [ 305.208844][T10299] XFS (loop7): Quotacheck needed: Please wait. [ 305.297946][T10299] XFS (loop7): Quotacheck: Done. [ 305.342725][T10316] loop3: detected capacity change from 0 to 32768 [ 305.370218][T10298] BTRFS info (device loop8): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 305.389688][T10316] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 305.398700][T10316] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 305.399459][T10298] BTRFS info (device loop8): using blake2b (blake2b-256-lib) checksum algorithm [ 305.439292][T10298] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 305.468126][T10298] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 305.523417][T10298] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 305.539567][T10316] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 305.548881][T10298] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 305.564462][ T5843] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 305.577048][ T5843] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 305.583943][T10298] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 305.653344][ T8887] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 305.685846][T10298] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 305.752966][ T5843] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 175ms [ 305.765893][ T5843] gfs2: fsid=syz:syz.0: jid=0: Done [ 305.773732][T10316] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 305.861075][T10298] BTRFS info (device loop8): enabling ssd optimizations [ 305.868615][T10298] BTRFS info (device loop8): using spread ssd allocation scheme [ 305.876920][T10298] BTRFS info (device loop8): turning off barriers [ 305.898633][T10298] BTRFS info (device loop8): enabling free space tree [ 305.905527][T10298] BTRFS info (device loop8): force zlib compression, level 3 [ 306.156923][T10298] BTRFS info (device loop8 state M): resize thread pool 2097158 -> 4 [ 306.252463][T10298] BTRFS info (device loop8 state M): force compression, level 0 [ 306.372825][T10324] loop2: detected capacity change from 0 to 32768 [ 306.407764][ T9089] BTRFS info (device loop8): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 306.458972][T10324] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 306.602380][T10324] XFS (loop2): Ending clean mount [ 306.660225][T10347] loop9: detected capacity change from 0 to 40427 [ 306.734013][T10324] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 306.969527][ T9778] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 307.091568][T10347] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 307.127465][T10347] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 307.296026][ T30] audit: type=1800 audit(1763808430.366:71): pid=10347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1451" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 307.485382][ T9085] syz-executor: attempt to access beyond end of device [ 307.485382][ T9085] loop9: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 307.549950][ T9085] CPU: 0 UID: 0 PID: 9085 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 307.549980][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.550010][ T9085] Call Trace: [ 307.550019][ T9085] [ 307.550028][ T9085] dump_stack_lvl+0x189/0x250 [ 307.550080][ T9085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.550115][ T9085] ? __pfx_queue_work_on+0x10/0x10 [ 307.550143][ T9085] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 307.550176][ T9085] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 307.550221][ T9085] f2fs_handle_critical_error+0x37c/0x540 [ 307.550251][ T9085] f2fs_write_end_io+0x94b/0xc10 [ 307.550299][ T9085] __submit_merged_bio+0x256/0x6a0 [ 307.550329][ T9085] __submit_merged_write_cond+0x255/0x530 [ 307.550374][ T9085] f2fs_write_data_pages+0x2756/0x3290 [ 307.550448][ T9085] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 307.550533][ T9085] ? __page_cache_release+0x8a6/0xbb0 [ 307.550574][ T9085] ? folios_put_refs+0x584/0x670 [ 307.550620][ T9085] ? __lock_acquire+0xab9/0xd20 [ 307.550660][ T9085] ? do_raw_spin_lock+0x121/0x290 [ 307.550699][ T9085] ? do_raw_spin_unlock+0x122/0x240 [ 307.550724][ T9085] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 307.550750][ T9085] do_writepages+0x32e/0x550 [ 307.550796][ T9085] ? do_raw_spin_unlock+0x122/0x240 [ 307.550826][ T9085] filemap_fdatawrite+0x199/0x240 [ 307.550848][ T9085] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 307.550932][ T9085] ? do_raw_spin_unlock+0x122/0x240 [ 307.550964][ T9085] f2fs_sync_dirty_inodes+0x30f/0x830 [ 307.551014][ T9085] f2fs_write_checkpoint+0x93e/0x2440 [ 307.551042][ T9085] ? __lock_acquire+0xab9/0xd20 [ 307.551117][ T9085] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 307.551220][ T9085] kill_f2fs_super+0x2cc/0x6d0 [ 307.551258][ T9085] ? __pfx_kill_f2fs_super+0x10/0x10 [ 307.551310][ T9085] ? shrinker_free+0x2ce/0x3e0 [ 307.551344][ T9085] deactivate_locked_super+0xbc/0x130 [ 307.551368][ T9085] cleanup_mnt+0x425/0x4c0 [ 307.551391][ T9085] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.551415][ T9085] task_work_run+0x1d4/0x260 [ 307.551443][ T9085] ? __pfx_task_work_run+0x10/0x10 [ 307.551474][ T9085] ? exit_to_user_mode_loop+0x55/0x4f0 [ 307.551509][ T9085] exit_to_user_mode_loop+0xff/0x4f0 [ 307.551537][ T9085] ? rcu_is_watching+0x15/0xb0 [ 307.551565][ T9085] do_syscall_64+0x2e9/0xfa0 [ 307.551588][ T9085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.551609][ T9085] ? clear_bhb_loop+0x60/0xb0 [ 307.551637][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.551658][ T9085] RIP: 0033:0x7fbbbd390a77 [ 307.551677][ T9085] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 307.551695][ T9085] RSP: 002b:00007ffe55856828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 307.551719][ T9085] RAX: 0000000000000000 RBX: 00007fbbbd413d7d RCX: 00007fbbbd390a77 [ 307.551733][ T9085] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe558568e0 [ 307.551746][ T9085] RBP: 00007ffe558568e0 R08: 0000000000000000 R09: 0000000000000000 [ 307.551760][ T9085] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe55857970 [ 307.551774][ T9085] R13: 00007fbbbd413d7d R14: 000000000004b087 R15: 00007ffe558579b0 [ 307.551816][ T9085] [ 307.551825][ T9085] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 308.037289][ T9085] CPU: 1 UID: 0 PID: 9085 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 308.037321][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.037334][ T9085] Call Trace: [ 308.037352][ T9085] [ 308.037362][ T9085] dump_stack_lvl+0x189/0x250 [ 308.037405][ T9085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.037440][ T9085] ? __pfx_queue_work_on+0x10/0x10 [ 308.037468][ T9085] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 308.037502][ T9085] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 308.037552][ T9085] f2fs_handle_critical_error+0x37c/0x540 [ 308.037585][ T9085] f2fs_write_end_io+0x94b/0xc10 [ 308.037638][ T9085] __submit_merged_bio+0x256/0x6a0 [ 308.037671][ T9085] __submit_merged_write_cond+0x255/0x530 [ 308.037718][ T9085] f2fs_write_data_pages+0x2756/0x3290 [ 308.037792][ T9085] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 308.037881][ T9085] ? __page_cache_release+0x8a6/0xbb0 [ 308.037926][ T9085] ? folios_put_refs+0x584/0x670 [ 308.037976][ T9085] ? __lock_acquire+0xab9/0xd20 [ 308.038018][ T9085] ? do_raw_spin_lock+0x121/0x290 [ 308.038058][ T9085] ? do_raw_spin_unlock+0x122/0x240 [ 308.038083][ T9085] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 308.038112][ T9085] do_writepages+0x32e/0x550 [ 308.038161][ T9085] ? do_raw_spin_unlock+0x122/0x240 [ 308.038193][ T9085] filemap_fdatawrite+0x199/0x240 [ 308.038215][ T9085] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 308.038303][ T9085] ? do_raw_spin_unlock+0x122/0x240 [ 308.038334][ T9085] f2fs_sync_dirty_inodes+0x30f/0x830 [ 308.038391][ T9085] f2fs_write_checkpoint+0x93e/0x2440 [ 308.038419][ T9085] ? __lock_acquire+0xab9/0xd20 [ 308.038488][ T9085] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 308.038594][ T9085] kill_f2fs_super+0x2cc/0x6d0 [ 308.038632][ T9085] ? __pfx_kill_f2fs_super+0x10/0x10 [ 308.038685][ T9085] ? shrinker_free+0x2ce/0x3e0 [ 308.038720][ T9085] deactivate_locked_super+0xbc/0x130 [ 308.038746][ T9085] cleanup_mnt+0x425/0x4c0 [ 308.038769][ T9085] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.038795][ T9085] task_work_run+0x1d4/0x260 [ 308.038824][ T9085] ? __pfx_task_work_run+0x10/0x10 [ 308.038855][ T9085] ? exit_to_user_mode_loop+0x55/0x4f0 [ 308.038890][ T9085] exit_to_user_mode_loop+0xff/0x4f0 [ 308.038919][ T9085] ? rcu_is_watching+0x15/0xb0 [ 308.038946][ T9085] do_syscall_64+0x2e9/0xfa0 [ 308.038970][ T9085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.038991][ T9085] ? clear_bhb_loop+0x60/0xb0 [ 308.039019][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.039040][ T9085] RIP: 0033:0x7fbbbd390a77 [ 308.039060][ T9085] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 308.039079][ T9085] RSP: 002b:00007ffe55856828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 308.039104][ T9085] RAX: 0000000000000000 RBX: 00007fbbbd413d7d RCX: 00007fbbbd390a77 [ 308.039118][ T9085] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe558568e0 [ 308.039131][ T9085] RBP: 00007ffe558568e0 R08: 0000000000000000 R09: 0000000000000000 [ 308.039144][ T9085] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe55857970 [ 308.039158][ T9085] R13: 00007fbbbd413d7d R14: 000000000004b087 R15: 00007ffe558579b0 [ 308.039200][ T9085] [ 308.378885][ T9085] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 309.076755][ T5826] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 309.247799][ T5826] usb 4-1: Using ep0 maxpacket: 32 [ 309.255803][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.287614][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.306531][ T5826] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 309.336316][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.347751][ T5826] usb 4-1: config 0 descriptor?? [ 309.788401][ T5826] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 310.089023][ T5913] usb 4-1: USB disconnect, device number 17 [ 310.172744][T10408] loop2: detected capacity change from 0 to 40427 [ 310.197653][T10408] F2FS-fs (loop2): invalid crc value [ 310.203275][T10421] veth2: entered promiscuous mode [ 310.208679][T10421] veth2: entered allmulticast mode [ 310.320629][T10408] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 310.330457][T10408] F2FS-fs (loop2): Start checkpoint disabled! [ 310.338078][T10408] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 310.347791][T10408] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 310.405727][T10408] syz.2.1469: attempt to access beyond end of device [ 310.405727][T10408] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 310.423601][T10408] CPU: 1 UID: 0 PID: 10408 Comm: syz.2.1469 Not tainted syzkaller #0 PREEMPT(full) [ 310.423634][T10408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.423648][T10408] Call Trace: [ 310.423656][T10408] [ 310.423666][T10408] dump_stack_lvl+0x189/0x250 [ 310.423708][T10408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.423743][T10408] ? __pfx_queue_work_on+0x10/0x10 [ 310.423770][T10408] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 310.423804][T10408] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 310.423970][T10408] f2fs_handle_critical_error+0x37c/0x540 [ 310.424001][T10408] f2fs_write_end_io+0x94b/0xc10 [ 310.424050][T10408] __submit_merged_bio+0x256/0x6a0 [ 310.424082][T10408] __submit_merged_write_cond+0x255/0x530 [ 310.424128][T10408] f2fs_write_data_pages+0x2756/0x3290 [ 310.424155][T10408] ? is_bpf_text_address+0x292/0x2b0 [ 310.424218][T10408] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 310.424292][T10408] ? __lock_acquire+0xab9/0xd20 [ 310.424350][T10408] ? __lock_acquire+0xab9/0xd20 [ 310.424394][T10408] ? do_raw_spin_lock+0x121/0x290 [ 310.424431][T10408] ? do_raw_spin_unlock+0x122/0x240 [ 310.424457][T10408] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 310.424485][T10408] do_writepages+0x32e/0x550 [ 310.424534][T10408] ? do_raw_spin_unlock+0x122/0x240 [ 310.424563][T10408] filemap_write_and_wait_range+0x21f/0x320 [ 310.424592][T10408] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 310.424658][T10408] ? __se_sys_ioctl+0x47/0x170 [ 310.424679][T10408] ? do_syscall_64+0xfa/0xfa0 [ 310.424699][T10408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.424728][T10408] ? fiemap_prep+0x1c7/0x250 [ 310.424756][T10408] f2fs_fiemap+0x177/0x1180 [ 310.424787][T10408] ? __lock_acquire+0xab9/0xd20 [ 310.424824][T10408] ? __pfx_f2fs_fiemap+0x10/0x10 [ 310.424915][T10408] ? __might_fault+0xb0/0x130 [ 310.424966][T10408] do_vfs_ioctl+0x1173/0x1430 [ 310.424990][T10408] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 310.425026][T10408] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 310.425104][T10408] ? __fget_files+0x3a0/0x420 [ 310.425137][T10408] ? __fget_files+0x2a/0x420 [ 310.425172][T10408] ? bpf_lsm_file_ioctl+0x9/0x20 [ 310.425206][T10408] __se_sys_ioctl+0x82/0x170 [ 310.425233][T10408] do_syscall_64+0xfa/0xfa0 [ 310.425255][T10408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.425277][T10408] ? clear_bhb_loop+0x60/0xb0 [ 310.425305][T10408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.425326][T10408] RIP: 0033:0x7f4bc6f8f749 [ 310.425347][T10408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.425366][T10408] RSP: 002b:00007f4bc7f10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.425389][T10408] RAX: ffffffffffffffda RBX: 00007f4bc71e5fa0 RCX: 00007f4bc6f8f749 [ 310.425405][T10408] RDX: 0000200000000280 RSI: 00000000c020660b RDI: 0000000000000005 [ 310.425419][T10408] RBP: 00007f4bc7013f91 R08: 0000000000000000 R09: 0000000000000000 [ 310.425432][T10408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.425445][T10408] R13: 00007f4bc71e6038 R14: 00007f4bc71e5fa0 R15: 00007ffc75bd6418 [ 310.425482][T10408] [ 310.425881][T10408] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 310.626492][ T5826] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 310.828671][T10413] loop7: detected capacity change from 0 to 65536 [ 310.866152][T10413] XFS (loop7): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 310.910022][T10413] XFS (loop7): Ending clean mount [ 310.985008][ T30] audit: type=1804 audit(1763808434.086:72): pid=10413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1471" name="/newroot/88/file0/file1" dev="loop7" ino=70 res=1 errno=0 [ 311.027435][ T5826] usb 9-1: config 1 has an invalid descriptor of length 238, skipping remainder of the config [ 311.051045][ T5826] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.068917][ T5826] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 311.106357][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 311.114414][ T5826] usb 9-1: SerialNumber: syz [ 311.148060][ T8887] XFS (loop7): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 311.206781][T10442] loop3: detected capacity change from 0 to 64 [ 311.434618][ T5826] usb 9-1: 0:2 : does not exist [ 311.497358][ T5826] usb 9-1: 5:0: cannot get min/max values for control 7 (id 5) [ 311.560819][ T5826] usb 9-1: USB disconnect, device number 8 [ 311.694470][T10450] loop3: detected capacity change from 0 to 1024 [ 311.747522][T10450] EXT4-fs: Ignoring removed orlov option [ 311.754252][T10450] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 311.888903][T10450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.046648][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.161988][ T5913] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 312.192449][ T5913] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 312.826356][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 312.986332][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 313.005775][ T24] usb 9-1: config 0 has an invalid interface number: 214 but max is 0 [ 313.034583][ T24] usb 9-1: config 0 has no interface number 0 [ 313.044712][ T24] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 313.062061][ T24] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 313.074504][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.136650][ T24] usb 9-1: Product: syz [ 313.146311][ T24] usb 9-1: Manufacturer: syz [ 313.150981][ T24] usb 9-1: SerialNumber: syz [ 313.204947][ T24] usb 9-1: config 0 descriptor?? [ 313.423598][T10478] loop2: detected capacity change from 0 to 64 [ 313.484605][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1494'. [ 313.579510][T10470] loop3: detected capacity change from 0 to 32768 [ 313.589423][T10470] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1499 (10470) [ 313.606446][T10470] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 313.617905][T10470] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 313.767571][T10470] BTRFS info (device loop3): rebuilding free space tree [ 313.803584][T10470] BTRFS info (device loop3): disabling free space tree [ 313.826100][T10470] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 313.848739][ T24] usbtouchscreen 9-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 313.869884][T10470] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 313.887470][ T24] usb 9-1: USB disconnect, device number 9 [ 313.901419][T10470] BTRFS info (device loop3): enabling ssd optimizations [ 313.921772][T10470] BTRFS info (device loop3): force clearing of disk cache [ 313.950131][T10487] loop2: detected capacity change from 0 to 512 [ 313.952497][T10470] BTRFS info (device loop3): enabling auto defrag [ 313.979566][T10470] BTRFS info (device loop3): use zstd compression, level 3 [ 313.990213][T10470] BTRFS info (device loop3): max_inline set to 0 [ 314.022284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 314.316683][T10511] loop7: detected capacity change from 0 to 128 [ 314.342848][T10511] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 314.361384][T10511] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 314.418351][ T5828] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 314.664270][ T8887] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 314.850500][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1507'. [ 315.629872][ T5826] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 315.809212][ T5826] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 315.817934][ T5826] usb 4-1: config 179 has no interface number 0 [ 315.824511][ T5826] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 315.841837][ T5826] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 315.860749][ T5826] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 315.876627][ T5826] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 315.889022][ T5826] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 315.905535][ T5826] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 315.915068][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.932983][T10547] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 315.941113][T10547] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 316.346120][ T5948] usb 4-1: USB disconnect, device number 18 [ 316.346216][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 316.360904][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 317.108294][T10598] loop9: detected capacity change from 0 to 7 [ 317.115934][T10598] Dev loop9: unable to read RDB block 7 [ 317.122052][T10598] loop9: AHDI p3 p4 [ 317.141786][T10598] loop9: partition table partially beyond EOD, truncated [ 317.162166][T10598] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 317.321775][T10600] loop7: detected capacity change from 0 to 4096 [ 317.336453][ T5826] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 317.373577][T10607] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.472432][T10592] loop8: detected capacity change from 0 to 32768 [ 317.486352][ T5826] usb 4-1: Using ep0 maxpacket: 16 [ 317.500277][ T5826] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.501322][T10600] loop7: detected capacity change from 4096 to 0 [ 317.519174][ C0] I/O error, dev loop7, sector 224 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.528890][T10611] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=0) [ 317.539869][ T5826] usb 4-1: config 0 interface 0 has no altsetting 0 [ 317.555995][ T5826] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 317.569643][ T5835] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 317.577917][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.589058][T10592] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 317.608271][ T5826] usb 4-1: config 0 descriptor?? [ 317.619947][ T8887] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 317.629411][ T8887] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=12) [ 317.640272][ T8887] Buffer I/O error on dev loop7, logical block 511, lost sync page write [ 317.651717][ T8887] NILFS (loop7): unable to write superblock: err=-5 [ 317.661384][ T8887] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 317.673044][ T8887] NILFS (loop7): unable to write superblock: err=-5 [ 317.680000][ T8887] Remounting filesystem read-only [ 317.685280][ T8887] NILFS (loop7): error -5 truncating bmap (ino=12) [ 317.699905][ T8887] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 317.730969][T10592] XFS (loop8): Ending clean mount [ 317.796058][ T5835] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 317.822914][ T5835] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 317.843312][ T5835] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 317.890150][ T5835] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 317.906309][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.935253][T10605] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 317.951847][ T9089] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 318.064406][ T5826] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 318.322620][T10627] loop7: detected capacity change from 0 to 64 [ 318.340880][T10627] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing [ 318.540907][ T24] usb 4-1: USB disconnect, device number 19 [ 319.456547][ T5948] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 319.548986][ T5835] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 319.567106][ T5835] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input16 [ 319.621950][ T5835] usb 3-1: USB disconnect, device number 10 [ 319.628025][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 319.648746][ T5948] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 319.676331][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.688106][ T5948] usb 4-1: config 0 descriptor?? [ 319.695613][ T5948] cp210x 4-1:0.0: cp210x converter detected [ 319.742590][T10656] loop7: detected capacity change from 0 to 128 [ 319.782617][T10656] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 319.795591][T10656] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 319.855818][T10644] loop8: detected capacity change from 0 to 40427 [ 319.871618][T10644] F2FS-fs (loop8): invalid crc value [ 319.877197][ T8887] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.021489][T10644] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 320.032181][T10644] F2FS-fs (loop8): Start checkpoint disabled! [ 320.040781][T10644] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 320.050551][T10644] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 320.110624][ T5948] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 320.111183][T10644] syz.8.1551: attempt to access beyond end of device [ 320.111183][T10644] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 320.119780][T10642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.169429][T10642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.232702][ T5948] usb 4-1: cp210x converter now attached to ttyUSB0 [ 320.318982][T10667] F2FS-fs (loop8): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 320.362845][T10670] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1559'. [ 320.401883][T10394] kworker/u8:20: attempt to access beyond end of device [ 320.401883][T10394] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 320.419687][T10394] CPU: 1 UID: 0 PID: 10394 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 320.419719][T10394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.419734][T10394] Workqueue: writeback wb_workfn (flush-7:8) [ 320.419767][T10394] Call Trace: [ 320.419776][T10394] [ 320.419786][T10394] dump_stack_lvl+0x189/0x250 [ 320.419826][T10394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.419860][T10394] ? __pfx_queue_work_on+0x10/0x10 [ 320.419889][T10394] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 320.419923][T10394] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 320.419973][T10394] f2fs_handle_critical_error+0x37c/0x540 [ 320.420007][T10394] f2fs_write_end_io+0x94b/0xc10 [ 320.420059][T10394] __submit_merged_bio+0x256/0x6a0 [ 320.420092][T10394] __submit_merged_write_cond+0x255/0x530 [ 320.420139][T10394] f2fs_write_data_pages+0x2756/0x3290 [ 320.420213][T10394] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 320.420350][T10394] ? f2fs_write_meta_pages+0x357/0x450 [ 320.420390][T10394] ? __lock_acquire+0xab9/0xd20 [ 320.420425][T10394] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 320.420453][T10394] do_writepages+0x32e/0x550 [ 320.420496][T10394] ? reacquire_held_locks+0x127/0x1d0 [ 320.420528][T10394] ? writeback_sb_inodes+0x3bc/0x1950 [ 320.420568][T10394] __writeback_single_inode+0x133/0x12f0 [ 320.420610][T10394] writeback_sb_inodes+0x984/0x1950 [ 320.420687][T10394] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 320.420776][T10394] ? rcu_is_watching+0x15/0xb0 [ 320.420809][T10394] wb_writeback+0x42b/0xb10 [ 320.420850][T10394] ? queue_io+0x301/0x590 [ 320.420883][T10394] ? __pfx_wb_writeback+0x10/0x10 [ 320.420924][T10394] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.420964][T10394] wb_workfn+0x3f9/0xef0 [ 320.421010][T10394] ? __pfx_wb_workfn+0x10/0x10 [ 320.421041][T10394] ? __lock_acquire+0xab9/0xd20 [ 320.421086][T10394] ? process_one_work+0x868/0x15e0 [ 320.421123][T10394] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.421160][T10394] ? process_one_work+0x868/0x15e0 [ 320.421186][T10394] process_one_work+0x93a/0x15e0 [ 320.421212][T10394] ? __lock_acquire+0xab9/0xd20 [ 320.421271][T10394] ? __pfx_process_one_work+0x10/0x10 [ 320.421313][T10394] ? assign_work+0x3a1/0x410 [ 320.421349][T10394] worker_thread+0x9b0/0xee0 [ 320.421416][T10394] kthread+0x711/0x8a0 [ 320.421442][T10394] ? __pfx_worker_thread+0x10/0x10 [ 320.421471][T10394] ? __pfx_kthread+0x10/0x10 [ 320.421495][T10394] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.421526][T10394] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.421544][T10394] ? __pfx_kthread+0x10/0x10 [ 320.421567][T10394] ret_from_fork+0x599/0xb30 [ 320.421598][T10394] ? __pfx_ret_from_fork+0x10/0x10 [ 320.421642][T10394] ? __switch_to_asm+0x39/0x70 [ 320.421668][T10394] ? __switch_to_asm+0x33/0x70 [ 320.421688][T10394] ? __pfx_kthread+0x10/0x10 [ 320.421711][T10394] ret_from_fork_asm+0x1a/0x30 [ 320.421758][T10394] [ 320.421767][T10394] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 320.508908][T10672] loop7: detected capacity change from 0 to 2048 [ 320.575368][ T24] usb 4-1: USB disconnect, device number 20 [ 320.621009][T10676] loop9: detected capacity change from 0 to 1024 [ 320.633106][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 320.791729][T10672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.828479][ T24] cp210x 4-1:0.0: device disconnected [ 321.075957][T10672] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1560: bg 0: block 234: padding at end of block bitmap is not set [ 321.101770][T10672] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 321.136400][T10672] EXT4-fs (loop7): This should not happen!! Data will be lost [ 321.136400][T10672] [ 321.305790][ T8887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.706647][ T24] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 321.716434][ T5948] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 321.740814][T10691] loop9: detected capacity change from 0 to 32768 [ 321.818184][T10691] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 321.878003][ T5948] usb 9-1: Using ep0 maxpacket: 32 [ 321.888159][T10691] XFS (loop9): Ending clean mount [ 321.897351][ T24] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 321.909915][ T5948] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 321.920071][ T5948] usb 9-1: config 0 has no interface number 0 [ 321.926438][ T5948] usb 9-1: config 0 interface 184 has no altsetting 0 [ 321.935308][ T24] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 321.945086][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.953514][ T24] usb 8-1: Product: syz [ 321.958643][ T5948] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 321.967808][ T24] usb 8-1: Manufacturer: syz [ 321.969398][T10691] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 321.972566][ T5948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.989156][ T24] usb 8-1: SerialNumber: syz [ 321.997371][ T5948] usb 9-1: Product: syz [ 322.002267][ T5948] usb 9-1: Manufacturer: syz [ 322.009586][ T24] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 322.025725][ T5948] usb 9-1: SerialNumber: syz [ 322.041672][ T5948] usb 9-1: config 0 descriptor?? [ 322.061225][ T5948] smsc75xx v1.0.0 [ 322.431699][ T24] usb 8-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 322.537233][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.544113][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.625649][T10719] loop3: detected capacity change from 0 to 40427 [ 322.650596][T10719] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 322.665137][T10719] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 322.676957][ T5948] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 322.690283][T10719] F2FS-fs (loop3): Image doesn't support compression [ 322.697501][ T5948] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 322.706790][T10719] F2FS-fs (loop3): build fault injection rate: 690 [ 322.706817][T10719] F2FS-fs (loop3): build fault injection type: 0x35f7 [ 322.747324][T10719] F2FS-fs (loop3): invalid crc value [ 322.823287][T10719] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 322.836767][T10719] F2FS-fs (loop3): Start checkpoint disabled! [ 322.858163][T10719] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 322.887735][T10719] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 322.909937][T10719] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 322.986474][ T30] audit: type=1800 audit(1763808446.096:73): pid=10719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1576" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 323.078627][T10749] loop9: detected capacity change from 0 to 64 [ 323.115899][ T6482] kworker/u8:19: attempt to access beyond end of device [ 323.115899][ T6482] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 323.133055][ T5948] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 323.147024][ T6482] CPU: 1 UID: 0 PID: 6482 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 323.147054][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.147070][ T6482] Workqueue: writeback wb_workfn (flush-7:3) [ 323.147104][ T6482] Call Trace: [ 323.147113][ T6482] [ 323.147123][ T6482] dump_stack_lvl+0x189/0x250 [ 323.147164][ T6482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.147199][ T6482] ? __pfx_queue_work_on+0x10/0x10 [ 323.147229][ T6482] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 323.147263][ T6482] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 323.147312][ T6482] f2fs_handle_critical_error+0x37c/0x540 [ 323.147355][ T6482] f2fs_write_end_io+0x94b/0xc10 [ 323.147406][ T6482] __submit_merged_bio+0x256/0x6a0 [ 323.147438][ T6482] __submit_merged_write_cond+0x255/0x530 [ 323.147484][ T6482] f2fs_write_data_pages+0x2756/0x3290 [ 323.147510][ T6482] ? kasan_quarantine_put+0xdd/0x220 [ 323.147581][ T6482] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 323.147635][ T6482] ? __rb_erase_color+0x63d/0xa70 [ 323.147711][ T6482] ? update_load_avg+0x572/0x1880 [ 323.147774][ T6482] ? update_load_avg+0x572/0x1880 [ 323.147825][ T6482] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 323.147853][ T6482] do_writepages+0x32e/0x550 [ 323.147896][ T6482] ? reacquire_held_locks+0x127/0x1d0 [ 323.147928][ T6482] ? writeback_sb_inodes+0x3bc/0x1950 [ 323.147967][ T6482] __writeback_single_inode+0x133/0x12f0 [ 323.148009][ T6482] writeback_sb_inodes+0x984/0x1950 [ 323.148081][ T6482] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 323.148170][ T6482] ? rcu_is_watching+0x15/0xb0 [ 323.148205][ T6482] wb_writeback+0x42b/0xb10 [ 323.148245][ T6482] ? queue_io+0x301/0x590 [ 323.148278][ T6482] ? __pfx_wb_writeback+0x10/0x10 [ 323.148319][ T6482] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.148369][ T6482] wb_workfn+0x3f9/0xef0 [ 323.148415][ T6482] ? __pfx_wb_workfn+0x10/0x10 [ 323.148446][ T6482] ? __lock_acquire+0xab9/0xd20 [ 323.148491][ T6482] ? process_one_work+0x868/0x15e0 [ 323.148528][ T6482] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.148564][ T6482] ? process_one_work+0x868/0x15e0 [ 323.148600][ T6482] process_one_work+0x93a/0x15e0 [ 323.148626][ T6482] ? __lock_acquire+0xab9/0xd20 [ 323.148692][ T6482] ? __pfx_process_one_work+0x10/0x10 [ 323.148735][ T6482] ? assign_work+0x3a1/0x410 [ 323.148770][ T6482] worker_thread+0x9b0/0xee0 [ 323.148838][ T6482] kthread+0x711/0x8a0 [ 323.148864][ T6482] ? __pfx_worker_thread+0x10/0x10 [ 323.148893][ T6482] ? __pfx_kthread+0x10/0x10 [ 323.148917][ T6482] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.148948][ T6482] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.148967][ T6482] ? __pfx_kthread+0x10/0x10 [ 323.148990][ T6482] ret_from_fork+0x599/0xb30 [ 323.149022][ T6482] ? __pfx_ret_from_fork+0x10/0x10 [ 323.149066][ T6482] ? __switch_to_asm+0x39/0x70 [ 323.149086][ T6482] ? __switch_to_asm+0x33/0x70 [ 323.149113][ T6482] ? __pfx_kthread+0x10/0x10 [ 323.149136][ T6482] ret_from_fork_asm+0x1a/0x30 [ 323.149185][ T6482] [ 323.149194][ T6482] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 323.459008][ T5948] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 323.468957][ T5948] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 323.478877][ T5948] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 323.495570][ T5948] usb 9-1: USB disconnect, device number 10 [ 323.944881][T10769] loop9: detected capacity change from 0 to 2048 [ 323.995694][T10769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.024806][T10769] UDF-fs: warning (device loop9): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 3200 lbcount: 4096 extent 56+4096 [ 324.529017][ T5948] usb 8-1: USB disconnect, device number 6 [ 324.751158][T10802] loop8: detected capacity change from 0 to 2048 [ 324.783017][T10802] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 324.794917][T10802] UDF-fs: Scanning with blocksize 512 failed [ 324.805981][T10804] loop7: detected capacity change from 0 to 1024 [ 324.823804][T10802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.857626][T10804] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.990589][T10813] loop8: detected capacity change from 0 to 512 [ 325.028320][T10813] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.041733][T10813] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 325.214047][ T6482] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 325.276347][ T6482] EXT4-fs (loop7): Remounting filesystem read-only [ 325.287627][ T8887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.676882][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 325.736363][ T5826] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 325.848675][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.866438][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.896570][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 325.918700][ T5826] usb 8-1: config 0 has no interfaces? [ 325.921323][ T9089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.936536][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 325.958399][ T5826] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 325.969417][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.986303][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.994364][ T5826] usb 8-1: Product: syz [ 326.005614][ T9] usb 10-1: config 0 descriptor?? [ 326.016468][ T5826] usb 8-1: Manufacturer: syz [ 326.026425][ T5826] usb 8-1: SerialNumber: syz [ 326.046417][ T5826] usb 8-1: config 0 descriptor?? [ 326.071059][T10824] loop2: detected capacity change from 0 to 40427 [ 326.082074][T10824] F2FS-fs (loop2): build fault injection rate: 771 [ 326.098207][T10824] F2FS-fs (loop2): invalid crc value [ 326.206154][T10824] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 326.219615][T10824] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 326.318594][ T9778] syz-executor: attempt to access beyond end of device [ 326.318594][ T9778] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 326.354172][ T9778] CPU: 1 UID: 0 PID: 9778 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 326.354205][ T9778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.354218][ T9778] Call Trace: [ 326.354227][ T9778] [ 326.354236][ T9778] dump_stack_lvl+0x189/0x250 [ 326.354281][ T9778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.354315][ T9778] ? __pfx_queue_work_on+0x10/0x10 [ 326.354344][ T9778] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 326.354377][ T9778] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 326.354427][ T9778] f2fs_handle_critical_error+0x37c/0x540 [ 326.354462][ T9778] f2fs_write_end_io+0x94b/0xc10 [ 326.354515][ T9778] __submit_merged_bio+0x256/0x6a0 [ 326.354548][ T9778] __submit_merged_write_cond+0x255/0x530 [ 326.354596][ T9778] f2fs_write_data_pages+0x2756/0x3290 [ 326.354671][ T9778] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 326.354715][ T9778] ? is_bpf_text_address+0x26/0x2b0 [ 326.354782][ T9778] ? __mod_zone_page_state+0xd7/0x140 [ 326.354821][ T9778] ? folios_put_refs+0x58b/0x670 [ 326.354871][ T9778] ? __lock_acquire+0xab9/0xd20 [ 326.354912][ T9778] ? do_raw_spin_lock+0x121/0x290 [ 326.354953][ T9778] ? do_raw_spin_unlock+0x122/0x240 [ 326.354978][ T9778] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 326.355011][ T9778] do_writepages+0x32e/0x550 [ 326.355063][ T9778] ? do_raw_spin_unlock+0x122/0x240 [ 326.355094][ T9778] filemap_fdatawrite+0x199/0x240 [ 326.355116][ T9778] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 326.355201][ T9778] ? do_raw_spin_unlock+0x122/0x240 [ 326.355231][ T9778] f2fs_sync_dirty_inodes+0x30f/0x830 [ 326.355281][ T9778] f2fs_write_checkpoint+0x93e/0x2440 [ 326.355309][ T9778] ? stack_depot_save_flags+0x40/0x860 [ 326.355381][ T9778] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 326.355467][ T9778] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 326.355495][ T9778] ? kfree+0x1c0/0x680 [ 326.355533][ T9778] kill_f2fs_super+0x2cc/0x6d0 [ 326.355571][ T9778] ? __pfx_kill_f2fs_super+0x10/0x10 [ 326.355625][ T9778] ? shrinker_free+0x2ce/0x3e0 [ 326.355661][ T9778] deactivate_locked_super+0xbc/0x130 [ 326.355688][ T9778] cleanup_mnt+0x425/0x4c0 [ 326.355712][ T9778] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.355737][ T9778] task_work_run+0x1d4/0x260 [ 326.355767][ T9778] ? __pfx_task_work_run+0x10/0x10 [ 326.355799][ T9778] ? exit_to_user_mode_loop+0x55/0x4f0 [ 326.355834][ T9778] exit_to_user_mode_loop+0xff/0x4f0 [ 326.355863][ T9778] ? rcu_is_watching+0x15/0xb0 [ 326.355892][ T9778] do_syscall_64+0x2e9/0xfa0 [ 326.355915][ T9778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.355937][ T9778] ? clear_bhb_loop+0x60/0xb0 [ 326.355966][ T9778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.355987][ T9778] RIP: 0033:0x7f4bc6f90a77 [ 326.356013][ T9778] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 326.356032][ T9778] RSP: 002b:00007ffc75bd56a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 326.356055][ T9778] RAX: 0000000000000000 RBX: 00007f4bc7013d7d RCX: 00007f4bc6f90a77 [ 326.356070][ T9778] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc75bd5760 [ 326.356084][ T9778] RBP: 00007ffc75bd5760 R08: 0000000000000000 R09: 0000000000000000 [ 326.356098][ T9778] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc75bd67f0 [ 326.356112][ T9778] R13: 00007f4bc7013d7d R14: 000000000004fa58 R15: 00007ffc75bd6830 [ 326.356155][ T9778] [ 326.356165][ T9778] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 326.446643][ T9] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 326.766589][ T9] usb 8-1: USB disconnect, device number 7 [ 326.970423][ T5840] Bluetooth: min 12 > max 0 [ 327.028244][T10847] loop8: detected capacity change from 0 to 32768 [ 327.494231][T10861] loop7: detected capacity change from 0 to 64 [ 327.649092][T10859] loop3: detected capacity change from 0 to 32768 [ 327.673523][ C1] plantronics 0003:047F:FFFF.0014: usb_submit_urb(ctrl) failed: -1 [ 327.685178][T10859] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 327.693486][T10859] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 327.709295][T10861] overlayfs: upper fs needs to support d_type. [ 327.772225][T10861] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 327.808017][T10859] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 327.822102][ T5826] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 327.826363][T10861] overlayfs: failed to set xattr on upper [ 327.834698][T10861] overlayfs: ...falling back to redirect_dir=nofollow. [ 327.842143][ T5826] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 327.884612][T10861] overlayfs: ...falling back to index=off. [ 327.919299][T10861] overlayfs: ...falling back to uuid=null. [ 327.934627][T10861] overlayfs: ...falling back to xino=off. [ 327.940727][T10861] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 327.998799][ T5826] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 156ms [ 328.006560][ T5826] gfs2: fsid=syz:syz.0: jid=0: Done [ 328.016873][T10859] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 328.452346][ T9] usb 10-1: USB disconnect, device number 5 [ 328.630403][ T5988] bridge_slave_1: left allmulticast mode [ 328.636115][ T5988] bridge_slave_1: left promiscuous mode [ 328.699255][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.842705][ T5988] bridge_slave_0: left allmulticast mode [ 328.856368][ T5988] bridge_slave_0: left promiscuous mode [ 328.868300][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.968209][T10871] loop8: detected capacity change from 0 to 32768 [ 328.996691][ T5840] Bluetooth: hci5: command tx timeout [ 329.064151][T10871] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 329.201428][T10871] XFS (loop8): Ending clean mount [ 329.235240][T10871] XFS (loop8): Quotacheck needed: Please wait. [ 329.382847][T10871] XFS (loop8): Quotacheck: Done. [ 329.500284][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.513578][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.527587][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.540849][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.563713][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.652917][ T9089] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 330.289586][T10909] loop2: detected capacity change from 0 to 32768 [ 330.309002][T10909] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1644 (10909) [ 330.396583][T10909] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 330.417287][T10909] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 330.456168][T10909] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 330.475481][T10913] loop9: detected capacity change from 0 to 32768 [ 330.483149][T10913] btrfs: Deprecated parameter 'usebackuproot' [ 330.489349][T10913] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 330.499645][T10913] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1645 (10913) [ 330.557540][T10913] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.595372][T10913] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm [ 330.617115][T10913] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 330.683906][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.701249][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.714768][ T5988] bond0 (unregistering): Released all slaves [ 330.854296][ T5826] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 330.891244][T10909] BTRFS info (device loop2): rebuilding free space tree [ 330.891429][ T6481] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 330.914136][T10909] BTRFS info (device loop2): disabling free space tree [ 330.925939][T10909] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 330.936468][T10909] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 330.951641][T10913] BTRFS error (device loop9): failed to load root extent [ 330.951689][T10909] BTRFS info (device loop2): enabling ssd optimizations [ 330.959447][T10913] BTRFS warning (device loop9): try to load backup roots slot 1 [ 330.966018][T10909] BTRFS info (device loop2): enabling disk space caching [ 330.980995][T10909] BTRFS info (device loop2): force clearing of disk cache [ 330.998915][T10909] BTRFS info (device loop2): enabling auto defrag [ 331.005695][ T6482] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 331.006998][T10909] BTRFS info (device loop2): max_inline set to 0 [ 331.019670][ T43] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 331.034246][ T5826] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 331.042909][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.054370][ T5826] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 331.063841][ T5826] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 331.074437][T10913] BTRFS warning (device loop9): couldn't read tree root [ 331.081653][T10913] BTRFS warning (device loop9): try to load backup roots slot 2 [ 331.089823][ T5826] usb 9-1: Manufacturer: syz [ 331.089944][ T6482] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 331.097991][ T5826] usb 9-1: config 0 descriptor?? [ 331.125503][T10913] BTRFS warning (device loop9): couldn't read tree root [ 331.151815][T10913] BTRFS warning (device loop9): try to load backup roots slot 3 [ 331.209075][ T5826] rc_core: IR keymap rc-hauppauge not found [ 331.228526][T10913] BTRFS info (device loop9): rebuilding free space tree [ 331.232575][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.255780][ T5826] Registered IR keymap rc-empty [ 331.267119][ T5826] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 331.268009][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 331.294438][ T5826] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input17 [ 331.307304][ T43] usb 4-1: config 1 has no interface number 0 [ 331.313600][ T43] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.328433][T10913] BTRFS info (device loop9): disabling free space tree [ 331.340827][T10913] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 331.341936][ T5826] usb 9-1: USB disconnect, device number 11 [ 331.378950][ T43] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 331.397671][T10913] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 331.408505][ T43] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 331.435416][ T43] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 331.467407][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.476738][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.491069][ T43] usb 4-1: Product: syz [ 331.495310][ T43] usb 4-1: Manufacturer: syz [ 331.504804][T10913] BTRFS info (device loop9): setting nodatasum [ 331.509765][ T43] usb 4-1: SerialNumber: syz [ 331.526548][T10913] BTRFS info (device loop9): setting nodatacow [ 331.533954][T10913] BTRFS info (device loop9): enabling ssd optimizations [ 331.541010][ T9778] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 331.552176][T10913] BTRFS info (device loop9): turning off barriers [ 331.560464][T10913] BTRFS info (device loop9): turning on sync discard [ 331.567969][T10913] BTRFS info (device loop9): enabling disk space caching [ 331.575375][T10913] BTRFS info (device loop9): force clearing of disk cache [ 331.582738][T10913] BTRFS info (device loop9): enabling auto defrag [ 331.589375][T10913] BTRFS info (device loop9): trying to use backup root at mount time [ 331.598188][T10913] BTRFS info (device loop9): max_inline set to 0 [ 331.636583][ T5840] Bluetooth: hci0: command tx timeout [ 331.667677][T10906] chnl_net:caif_netlink_parms(): no params data found [ 331.729620][ T5988] hsr_slave_0: left promiscuous mode [ 331.760034][ T5988] hsr_slave_1: left promiscuous mode [ 331.776157][ T9085] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.788075][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.795598][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.846124][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.860437][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.993379][ T5988] veth1_macvtap: left promiscuous mode [ 332.016377][ T5988] veth0_macvtap: left promiscuous mode [ 332.035349][ T5988] veth1_vlan: left promiscuous mode [ 332.040867][ T5988] veth0_vlan: left promiscuous mode [ 332.208535][ T5948] kernel read not supported for file bpf-prog (pid: 5948 comm: kworker/1:6) [ 332.500243][T10980] loop2: detected capacity change from 0 to 512 [ 332.542311][ T43] cdc_ncm 4-1:1.1: bind() failure [ 332.621323][T10980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.635756][T10980] ext4 filesystem being mounted at /66/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.702762][ T30] audit: type=1800 audit(1763808455.816:74): pid=10980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1658" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 332.729336][ T30] audit: type=1800 audit(1763808455.826:75): pid=10980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1658" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 332.785639][ T43] usb 4-1: USB disconnect, device number 21 [ 332.913501][ T9778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.046384][ T5948] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 333.216806][ T5948] usb 9-1: Using ep0 maxpacket: 32 [ 333.231440][ T5948] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 333.258894][ T5948] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.284723][ T5948] usb 9-1: config 0 descriptor?? [ 333.294861][ T5948] gspca_main: sunplus-2.14.0 probing 041e:400b [ 333.422830][T10994] loop2: detected capacity change from 0 to 4096 [ 333.438011][ T5988] team0 (unregistering): Port device team_slave_1 removed [ 333.544026][T10999] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.566621][ T5988] team0 (unregistering): Port device team_slave_0 removed [ 333.697776][T11001] loop3: detected capacity change from 0 to 4096 [ 333.713340][T11001] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 333.722589][ T5840] Bluetooth: hci0: command tx timeout [ 334.087129][T11011] netlink: 'syz.3.1669': attribute type 2 has an invalid length. [ 334.095182][T11011] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1669'. [ 334.112586][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1671'. [ 334.514096][ T5948] gspca_sunplus: reg_w_riv err -71 [ 334.524231][ T5948] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 334.537818][ T5948] usb 9-1: USB disconnect, device number 12 [ 334.730041][T11019] loop3: detected capacity change from 0 to 16 [ 334.745809][T11019] erofs (device loop3): mounted with root inode @ nid 36. [ 334.878344][T10906] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.907342][T10906] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.914813][T10906] bridge_slave_0: entered allmulticast mode [ 334.924847][T10906] bridge_slave_0: entered promiscuous mode [ 334.935021][T10906] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.942733][T10906] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.950112][T10906] bridge_slave_1: entered allmulticast mode [ 334.958806][T10906] bridge_slave_1: entered promiscuous mode [ 335.141575][T10906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.181603][T10906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.289912][T10906] team0: Port device team_slave_0 added [ 335.315377][T10906] team0: Port device team_slave_1 added [ 335.482245][T10906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.502314][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.569124][T10906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.578775][T11016] loop9: detected capacity change from 0 to 32768 [ 335.612390][T10906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.647906][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.680636][T10906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.779970][T11016] XFS (loop9): DAX unsupported by block device. Turning off DAX. [ 335.796371][ T5840] Bluetooth: hci0: command tx timeout [ 335.807942][T11016] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 335.857741][T10906] hsr_slave_0: entered promiscuous mode [ 335.865084][T10906] hsr_slave_1: entered promiscuous mode [ 335.872043][T10906] debugfs: 'hsr0' already exists in 'hsr' [ 335.886448][T10906] Cannot create hsr debugfs directory [ 335.901854][T11016] XFS (loop9): Ending clean mount [ 335.935165][T11016] XFS (loop9): Quotacheck needed: Please wait. [ 336.030729][T11016] XFS (loop9): Quotacheck: Done. [ 336.089690][T11027] loop8: detected capacity change from 0 to 32768 [ 336.147252][ T9085] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.159637][T11027] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.266850][T11027] XFS (loop8): Ending clean mount [ 336.285955][T11027] XFS (loop8): Quotacheck needed: Please wait. [ 336.353872][T11027] XFS (loop8): Quotacheck: Done. [ 336.368875][T11059] loop3: detected capacity change from 0 to 1024 [ 336.418591][ T30] audit: type=1800 audit(1763808459.506:76): pid=11059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1682" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 336.425345][T11059] hfsplus: b-tree write err: -5, ino 3 [ 336.552447][ T5988] hfsplus: bad catalog file entry [ 336.557946][ T9089] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.566749][ T5988] hfsplus: b-tree write err: -5, ino 3 [ 336.815945][T10906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.881824][T10906] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.899178][ T4591] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.906546][ T4591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.944051][ T4591] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.951338][ T4591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.635139][T10906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.881256][ T5840] Bluetooth: hci0: command tx timeout [ 337.909841][T11101] loop8: detected capacity change from 0 to 256 [ 337.917991][T11101] exfat: Deprecated parameter 'utf8' [ 337.923635][T11101] exfat: Deprecated parameter 'utf8' [ 337.959537][T11101] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 338.348238][T11110] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 338.372236][ T30] audit: type=1326 audit(1763808461.476:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11111 comm="syz.8.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79dd38f749 code=0x7fc00000 [ 338.700793][T10906] veth0_vlan: entered promiscuous mode [ 338.741382][T10906] veth1_vlan: entered promiscuous mode [ 338.872069][T10906] veth0_macvtap: entered promiscuous mode [ 338.886875][T11129] netlink: 'syz.2.1705': attribute type 1 has an invalid length. [ 338.895899][T10906] veth1_macvtap: entered promiscuous mode [ 338.949381][T11129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.977079][T10906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.017553][T11129] bond1: (slave geneve2): making interface the new active one [ 339.032885][T11129] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 339.052171][T10906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.146317][ T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 339.158935][ T30] audit: type=1326 audit(1763808462.266:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11111 comm="syz.8.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79dd38f749 code=0x7fc00000 [ 339.245771][ T5988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.271776][ T5988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.359740][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 339.379125][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.397572][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.415198][ T24] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.430456][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.448961][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.458101][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.492412][T11146] loop3: detected capacity change from 0 to 64 [ 339.500316][ T24] usb 10-1: config 0 descriptor?? [ 339.534320][ T30] audit: type=1800 audit(1763808462.636:79): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1711" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 339.579664][ T30] audit: type=1800 audit(1763808462.636:80): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1711" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 340.202174][T11164] GUP no longer grows the stack in syz.8.1716 (11164): 200000004000-20000000a000 (200000002000) [ 340.214316][T11164] CPU: 0 UID: 0 PID: 11164 Comm: syz.8.1716 Not tainted syzkaller #0 PREEMPT(full) [ 340.214347][T11164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.214362][T11164] Call Trace: [ 340.214386][T11164] [ 340.214396][T11164] dump_stack_lvl+0x189/0x250 [ 340.214461][T11164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.214494][T11164] ? __pfx__printk+0x10/0x10 [ 340.214515][T11164] ? find_vma+0xe7/0x160 [ 340.214563][T11164] __get_user_pages+0x2465/0x29f0 [ 340.214633][T11164] get_user_pages_remote+0x2f1/0xac0 [ 340.214651][T11164] ? __pfx_mtree_load+0x10/0x10 [ 340.214678][T11164] ? __pfx_get_user_pages_remote+0x10/0x10 [ 340.214700][T11164] ? __access_remote_vm+0x367/0x7d0 [ 340.214731][T11164] __access_remote_vm+0x211/0x7d0 [ 340.214764][T11164] ? __pfx___access_remote_vm+0x10/0x10 [ 340.214792][T11164] ? alloc_pages_noprof+0xbe/0x190 [ 340.214826][T11164] proc_pid_cmdline_read+0x430/0x810 [ 340.214861][T11164] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 340.214884][T11164] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 340.214910][T11164] ? vfs_readv+0x57d/0x850 [ 340.214950][T11164] vfs_readv+0x5aa/0x850 [ 340.214979][T11164] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 340.215007][T11164] ? __pfx_vfs_readv+0x10/0x10 [ 340.215056][T11164] ? __fget_files+0x2a/0x420 [ 340.215092][T11164] ? __fget_files+0x3a0/0x420 [ 340.215122][T11164] ? __fget_files+0x2a/0x420 [ 340.215162][T11164] __x64_sys_preadv+0x197/0x2a0 [ 340.215193][T11164] ? __pfx___x64_sys_preadv+0x10/0x10 [ 340.215235][T11164] do_syscall_64+0xfa/0xfa0 [ 340.215258][T11164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.215280][T11164] ? clear_bhb_loop+0x60/0xb0 [ 340.215301][T11164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.215316][T11164] RIP: 0033:0x7f79dd38f749 [ 340.215331][T11164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.215358][T11164] RSP: 002b:00007f79de1dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 340.215382][T11164] RAX: ffffffffffffffda RBX: 00007f79dd5e5fa0 RCX: 00007f79dd38f749 [ 340.215398][T11164] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 340.215411][T11164] RBP: 00007f79dd413f91 R08: 0000000000000000 R09: 0000000000000000 [ 340.215424][T11164] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 340.215438][T11164] R13: 00007f79dd5e6038 R14: 00007f79dd5e5fa0 R15: 00007ffc9a307508 [ 340.215464][T11164] [ 340.521825][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 340.546533][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 340.578479][ T24] usb 10-1: USB disconnect, device number 6 [ 341.099270][T11192] loop3: detected capacity change from 0 to 4096 [ 341.117118][T11192] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 341.210333][T11198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1730'. [ 341.255763][T11192] [ 341.258157][T11192] ====================================================== [ 341.265287][T11192] WARNING: possible circular locking dependency detected [ 341.272692][T11192] syzkaller #0 Not tainted [ 341.277214][T11192] ------------------------------------------------------ [ 341.284534][T11192] syz.3.1728/11192 is trying to acquire lock: [ 341.290607][T11192] ffff88807b030f80 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xb0/0x130 [ 341.299556][T11192] [ 341.299556][T11192] but task is already holding lock: [ 341.306941][T11192] ffff8880683ab3f8 (&ni->ni_lock/5){+.+.}-{4:4}, at: ntfs_fiemap+0x10a/0x1a0 [ 341.315799][T11192] [ 341.315799][T11192] which lock already depends on the new lock. [ 341.315799][T11192] [ 341.326497][T11192] [ 341.326497][T11192] the existing dependency chain (in reverse order) is: [ 341.335619][T11192] [ 341.335619][T11192] -> #1 (&ni->ni_lock/5){+.+.}-{4:4}: [ 341.343443][T11192] lock_acquire+0x117/0x350 [ 341.348511][T11192] __mutex_lock+0x187/0x1350 [ 341.353825][T11192] attr_data_get_block+0x2ec/0x1ec0 [ 341.359568][T11192] ntfs_file_mmap_prepare+0x53f/0x850 [ 341.365473][T11192] mmap_region+0xb2b/0x1d40 [ 341.370679][T11192] do_mmap+0xc45/0x10d0 [ 341.375513][T11192] vm_mmap_pgoff+0x2a6/0x4d0 [ 341.380919][T11192] ksys_mmap_pgoff+0x51f/0x760 [ 341.386231][T11192] do_syscall_64+0xfa/0xfa0 [ 341.391287][T11192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.397891][T11192] [ 341.397891][T11192] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 341.405470][T11192] validate_chain+0xb9b/0x2130 [ 341.411219][T11192] __lock_acquire+0xab9/0xd20 [ 341.416608][T11192] lock_acquire+0x117/0x350 [ 341.421644][T11192] __might_fault+0xcc/0x130 [ 341.427203][T11192] _copy_to_user+0x2c/0xb0 [ 341.432150][T11192] fiemap_fill_next_extent+0x1c0/0x390 [ 341.438155][T11192] ni_fiemap+0x89c/0xbf0 [ 341.443013][T11192] ntfs_fiemap+0x11d/0x1a0 [ 341.447963][T11192] do_vfs_ioctl+0x1173/0x1430 [ 341.453171][T11192] __se_sys_ioctl+0x82/0x170 [ 341.458376][T11192] do_syscall_64+0xfa/0xfa0 [ 341.463408][T11192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.469870][T11192] [ 341.469870][T11192] other info that might help us debug this: [ 341.469870][T11192] [ 341.480117][T11192] Possible unsafe locking scenario: [ 341.480117][T11192] [ 341.487575][T11192] CPU0 CPU1 [ 341.492964][T11192] ---- ---- [ 341.498365][T11192] lock(&ni->ni_lock/5); [ 341.502719][T11192] lock(&mm->mmap_lock); [ 341.509580][T11192] lock(&ni->ni_lock/5); [ 341.516529][T11192] rlock(&mm->mmap_lock); [ 341.520955][T11192] [ 341.520955][T11192] *** DEADLOCK *** [ 341.520955][T11192] [ 341.529099][T11192] 1 lock held by syz.3.1728/11192: [ 341.534229][T11192] #0: ffff8880683ab3f8 (&ni->ni_lock/5){+.+.}-{4:4}, at: ntfs_fiemap+0x10a/0x1a0 [ 341.543492][T11192] [ 341.543492][T11192] stack backtrace: [ 341.549512][T11192] CPU: 1 UID: 0 PID: 11192 Comm: syz.3.1728 Not tainted syzkaller #0 PREEMPT(full) [ 341.549535][T11192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 341.549547][T11192] Call Trace: [ 341.549554][T11192] [ 341.549563][T11192] dump_stack_lvl+0x189/0x250 [ 341.549596][T11192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.549622][T11192] ? __pfx__printk+0x10/0x10 [ 341.549644][T11192] ? print_lock_name+0xde/0x100 [ 341.549664][T11192] print_circular_bug+0x2ee/0x310 [ 341.549690][T11192] check_noncircular+0x134/0x160 [ 341.549720][T11192] validate_chain+0xb9b/0x2130 [ 341.549752][T11192] ? __pfx_wnd_map+0x10/0x10 [ 341.549778][T11192] __lock_acquire+0xab9/0xd20 [ 341.549805][T11192] ? __might_fault+0xb0/0x130 [ 341.549822][T11192] lock_acquire+0x117/0x350 [ 341.549844][T11192] ? __might_fault+0xb0/0x130 [ 341.549867][T11192] ? __might_fault+0xb0/0x130 [ 341.549885][T11192] __might_fault+0xcc/0x130 [ 341.549902][T11192] ? __might_fault+0xb0/0x130 [ 341.549921][T11192] _copy_to_user+0x2c/0xb0 [ 341.549939][T11192] fiemap_fill_next_extent+0x1c0/0x390 [ 341.549962][T11192] ? __pfx_fiemap_fill_next_extent+0x10/0x10 [ 341.549984][T11192] ? ni_find_attr+0x2f6/0x570 [ 341.549999][T11192] ? run_lookup_entry+0x3de/0x570 [ 341.550024][T11192] ni_fiemap+0x89c/0xbf0 [ 341.550040][T11192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.550065][T11192] ? __pfx_ni_fiemap+0x10/0x10 [ 341.550084][T11192] ? __lock_acquire+0xab9/0xd20 [ 341.550110][T11192] ? fiemap_prep+0x1ac/0x250 [ 341.550130][T11192] ntfs_fiemap+0x11d/0x1a0 [ 341.550151][T11192] ? __pfx_ntfs_fiemap+0x10/0x10 [ 341.550174][T11192] do_vfs_ioctl+0x1173/0x1430 [ 341.550192][T11192] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 341.550220][T11192] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 341.550258][T11192] ? __fget_files+0x3a0/0x420 [ 341.550283][T11192] ? __fget_files+0x2a/0x420 [ 341.550308][T11192] ? bpf_lsm_file_ioctl+0x9/0x20 [ 341.550334][T11192] __se_sys_ioctl+0x82/0x170 [ 341.550353][T11192] do_syscall_64+0xfa/0xfa0 [ 341.550371][T11192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.550388][T11192] ? clear_bhb_loop+0x60/0xb0 [ 341.550407][T11192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.550426][T11192] RIP: 0033:0x7ff9acb8f749 [ 341.550443][T11192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.550459][T11192] RSP: 002b:00007ff9aadee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.550477][T11192] RAX: ffffffffffffffda RBX: 00007ff9acde5fa0 RCX: 00007ff9acb8f749 [ 341.550491][T11192] RDX: 0000200000000040 RSI: 00000000c020660b RDI: 0000000000000004 [ 341.550502][T11192] RBP: 00007ff9acc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 341.550514][T11192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.550525][T11192] R13: 00007ff9acde6038 R14: 00007ff9acde5fa0 R15: 00007ffe0c72d8d8 [ 341.550546][T11192] [ 341.552911][ T5843] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 342.026384][ T5843] usb 9-1: Using ep0 maxpacket: 16 [ 342.033128][ T5843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.044985][ T5843] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 342.058000][ T5843] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 342.067306][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.077179][ T5843] usb 9-1: config 0 descriptor?? [ 342.492483][ T5843] HID 045e:07da: Invalid code 65791 type 1 [ 342.503692][ T5843] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0015/input/input18 [ 342.517172][ T5843] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 343.303711][ T24] usb 9-1: USB disconnect, device number 13