last executing test programs: 12.074983069s ago: executing program 3 (id=995): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x52aca47783dd845b, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x4, "44150501"}, 0x0, 0x0, 0x0, 0x0}) 4.603766342s ago: executing program 3 (id=1031): r0 = syz_io_uring_setup(0xd7, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_script(r3, 0x0, 0x11) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x242, 0x0) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0'}, 0xb) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) rt_sigaction(0xa, &(0x7f0000000080)={&(0x7f0000000100)="2437460f1c2bc4a2f99c9022000000c4a2f10027460f38e741c44240f29a3b470000a5c43b3be5c436fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000240)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) 3.90570859s ago: executing program 3 (id=1035): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x51}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8d, &(0x7f00000004c0)=""/141}, 0x80) 3.789139609s ago: executing program 3 (id=1037): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') close(r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x10e, &(0x7f0000000340)={[{@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@block_validity}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x10000}}, {@nolazytime}]}, 0x1, 0x451, &(0x7f0000000780)="$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") r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000005c0)={[{@min_batch_time}, {@usrquota}, {@errors_continue}, {@init_itable}, {@grpquota}, {@grpjquota, 0x2e}, {@resuid}, {@errors_remount}, {@nolazytime}, {@nomblk_io_submit}], [{@appraise}, {@smackfsdef={'smackfsdef', 0x3d, ':*{'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@uid_eq}], 0x2c}, 0x84, 0x4ac, &(0x7f0000001880)="$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") syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file0/file0\x00', 0x3a4c412, &(0x7f0000000440)=ANY=[@ANYBLOB='unhide,session=0x0000000000000013,mode=0x000000000000007c,hide,cruft,unhide,hide,unhide,gid=', @ANYRESHEX=r2, @ANYBLOB="2c63727566742c6e6f636f6d70726573732c6d61703d6e6f726d616c2c2c65f0790ce2"], 0x1, 0x9be, &(0x7f0000004180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x1) splice(r7, 0x0, r6, 0x0, 0x7ffff000, 0x0) 3.635437282s ago: executing program 0 (id=1039): socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000018, &(0x7f00000013c0)=ANY=[], 0x20, 0x694, &(0x7f0000002080)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0\x00') 3.29655783s ago: executing program 0 (id=1041): fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRES64=r0, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES16, @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES64=r1], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000800)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/161, 0xa1}], 0x1, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000600), 0x4) sendto$inet(r3, &(0x7f0000000500)="0b268a927f3db01635ffcb37fa1241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a942ac9628c61913a956c3331f88e202ff5425a3a07e758044ab4ea6f7", 0x20c8, 0x11, 0x0, 0xfd02) write$bt_hci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e0001000200"], 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], 0x0}, 0x90) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYRES32=r4], 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "1539dfe02416e80bdfe844428a7e8723f374c576ff81812a9fa25070aac6ffd0e039907557c8ee84f0c3bb101155ea2765e9906ea2b532a1aaa63c911fa3761e"}, 0x48, 0xfffffffffffffffb) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000300)={'veth0_to_batadv\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x0) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, 0x0, 0x25, 0x0, @void}, 0x10) 2.219962878s ago: executing program 0 (id=1043): socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000140)="d9", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002040)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000002080)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000), 0x8) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x80000, &(0x7f00000003c0)=ANY=[@ANYBLOB="706fc4b2fa9b1625732d4601e6dd19ea73cc16346c5c0ef297af64cee21413a57e5e55a3cff5b0a2029b50306244f330e25aff564814926f532d869d0d2e4c92b1b57828170ce4005087c116484dc881ea97ed006640e1db201c224efad89b5440ca9d09737f0f5a4ad4f7946f5af075f81c66f5a7af7f0dd1f02f10fc9817a3eae8edc17a8b75906c357a3a2a64d1537574cd480a9d9cfb9a345675edc9a7ef3848040754e0c4ce202c7b590583f9198c1cc2512618c35b13103a9fded06ac7d811c3350d7f881532142e39b21a06629cd34a7e0ba7a72e53622b"], 0x1, 0xa8e, &(0x7f0000001fc0)="$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") ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x40085874, 0xffffffffffffffff) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r2, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf7, 0x0, &(0x7f00000000c0)) 1.883822196s ago: executing program 1 (id=1047): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', r0, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.788426024s ago: executing program 4 (id=1048): r0 = io_uring_setup(0x79af, &(0x7f0000001240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_TYPE={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.764379926s ago: executing program 2 (id=1049): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, 0x0}}], 0x1, 0x2000c080) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), 0x4) 1.741491587s ago: executing program 0 (id=1050): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d0000002400000000f6430095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xa1e7, 0x81, 0xffffffff, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r2, 0x0, &(0x7f0000000040)) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.681552252s ago: executing program 4 (id=1051): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file1\x00', 0x1600008, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x3, 0x632, &(0x7f0000001840)="$eJzs3UtsG2kdAPD/OI4TB9TN7qa7Ba1EtJUWRESbh7IQLpSHUA4rtFoOnKPWbay6aZW4KK0QCi9x4MKh4lwOuXFC6j1SOcMF9ZpjJVAvPaDcjGY8dpy386qd7e8Xjb/v8zfzzX/+9jzsyJoA3lrzE1HciCTmJz5bTdub6zO1zfWZoby7FhFpvRBRbBaRLEUkz5vdN9KHr6VP5vMnB63nSXXuixevN182W8XWwkkprQ0fvNxRmguu5VOMR8RAXu412O2oO8a7eeB4+/nvn/YPshlous1XW4mDXmvssXacxU+83wL9I2meN/cYjRjJztDN64DIjw6FNxvd2TvWUQ4AAAAuqHe2Ymut0Wj0Og4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4SPL7/yf5VGjVxyNp3f+/1DF7qYehnomNXgcAAAAAAAAAACfSGOhsfWMrtmI1LrV7k+x//h9njbHs8SvxMFaiEstxLVZjIepRj+WYiojRjoFKqwv1+vJUF0tO77vk9LluNAAAAAAAAAB82f025rf//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP0giRhoFtk01qqPRqEYEcMRUUrnW4v4V6t+kW30OgAAAAB4A97Ziq1YjUutdiPJPvN/kH3uH46HsRT1qEY9alGJW9l3Ac1P/YXN9Zna5vrMvXTaO+5f/tfIdBlGNmI0v3vYf81XsjnKcTuq2TPX4mbcj1q5c5QrrXj2j+s3r9Kxf5DrMrJbeZlu+Z/zsj+MZhkZbGdkMo8tzeO7h2fih69OtaapKLS/+Rk7h5yP5GWyq+y93ZmYjkKW79QHh2ci4pvP/vaLxdrS3cXbKxP9s0kn1MxEo9HMxFDWamXiw7cqE5PZtl9ut+fjp/HzmIjx+DyWoxq/jIWoRyXG4ydZbSF/P6ePo7syVdg59I0drc+PiqSUvy7No+jxYvo4W/ZSVONncT9uRSU+zf6mYyq+G7MxG3Mdr/DlLvb6wvH2+qvfyivpIf2Pedkf0ry+25HXzmPuaNbX+cx2lt47+2Nj8et5JV3H7yLix2e4naezOxPpWeLZV5t97x+eib9m1wkrtaW7y4sLD7pc3yd5me5Hf+irs0T6fnkvfbGy1s53R9r3/r59U1nfWLuvsKfvcrvvqD21lF/D7R1pOuv7cN++mazvSkffnuut9vUQAH1s5NsjpfJ/yv8sPy3/vrxY/mz4R0PfG/qoFIP/GPx+cXLgk8JHyd/jafx6+/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwciuPHt9dqNUqy0dWkuzm/xFdzdxRad3O6fCZk/xGPscZWaVWqwxHX4RxrErt3xEdzyS9jqcfKkP99ubv7XEJOH/X6/ceXF959Pg71XsLdyp3KkuDs7Nzk3Ozn85cv12tDUT6WJnsdZTAedg+6fc6EgAAAAAAAAAAAKBbh/8MYDCf63Q/J+jxJgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX3PxEFDciianJa5Npe3N9ppZOrfr2nMWIKERE8quI5HnEjWhOMdoxXHLQep5U57548Xrz5fZYxdb8hcOW685aPsV4RAzk5VmNd/PU4yXtLUwTdrV0uuDgzPw/AAD//4oVCL4=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/43, 0x60) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 1.681146052s ago: executing program 2 (id=1052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.560436672s ago: executing program 0 (id=1053): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000200)={[{@inline_data}, {@disable_roll_forward}, {@lfs_mode}, {@noquota}, {@discard_unit_segment}, {@noextent_cache}, {@gc_merge}, {@nobarrier}, {@nodiscard}, {@fsync_mode_strict}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, '--['}}, {@dont_measure}, {@seclabel}, {@flag='lazytime'}]}, 0xfe, 0x54f9, &(0x7f000000ab40)="$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") 1.456624941s ago: executing program 2 (id=1054): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ntfs(&(0x7f00000005c0), &(0x7f000001ee80)='./file0\x00', 0x800804, &(0x7f0000000780)=ANY=[], 0xdd, 0x1ee67, &(0x7f000003dd40)="$eJzs3QmcTeX/B/Dn7Pu+ITEY+77v+y77liT7vmcLiSHZd0L2JHsIlSSRpJLskiRJkiSVbIn/y507k5nhV/P7tf2dz/v1Ms+5Z+59znPPd575nHPvMffbhlPqNq7WKCYmJoaINIl3lSQRR+LILSZ++RZJ2v5MCKEIIVfmDK+eu+/eyrfX6Rm3Pj5kdeZt/ZSmG/U3BLLHbPntxUKn9/h70n57s3HnLn1juvSN6dmrX0ybmLa9evVr07Z7h5j2Xfp2yxdTv3uHNn07xHTp2bdDnyTf7ti9V+/eg2La9Gyvyb37dOjbN6ZNz0Ex3ToMiunXK6Zfn0ExbTq16dIzJl++fDGaTOAParLynx4BAAAAAAAAAAAAAAAAAAD8OW7dIsLttvw/PRAAAAAAAAAAAAAAAAAAAAD4r1WrWbtqAcIl3qYIRSoQiiyiCCHib/djo62Y7PEmIaR1ZClN5GuNxKX/jP+D4ytACOmc2D9NakWWqOiIORLXuEDP8TePUvdqycloR0eTbpdlYkkdUo00jt6Oi4799rOP/4sG8bJG2woJK1pH/0hCgaStlS1+D61L0g+T4vkk9mMmaRJbi4rv79atW7f+4C76HySvJoQL6h9uqH+4iffM/9bJ8p+JpiKdrId75f/v5fJd859Kuep2/vdO7J8mDVOb/zHRjqJtwnbFxPyvQ7qQPqRPdP29jgMSlhLzO+bubSY6Prb/UH7fMn73Ln+t5NWEcEH9ww31Dzc6Rf7T/yH/6f+P+Z/4ykV8e2f+1ya9SCdSjXQh3UmH6Pp75X/C/49IzP9k/Sa0mSpQkQf9Pefv/yvM/3BD/cMN9Q+3lPnPRPP/bLL85+84BriTGc3LhPwv8F/mf9LX+SlSP9U5n1RC/wITS5qSXqQ76U96kA6RfuMSt0OT9olbZONuP4+E9wPcyHeLRJ+vSxZSNolPdsLZ0cdH1sXfgbt9+h9DkyT3Sf49Ej1WKpC4fZbY0aW+ZBAZTLqRNqR75Ggk4fWI28c+ORLvzxE12fsrTPSZxyWuT5P4vkOa3z0OwfwPN9Q/3FD/cEuZ/2w0/9+7y/v/7F+c///TeX7CG+jRv/5/53l+RdKP9CN9SBXSgXSMrk96HMD84eOAsSTlcUBkXSqPA+71OkOC5NcJJDyvhNaiqkXa/+11Bsz/cEP9ww31D7eU+c9FEomJ/yygZOf/t+8lJOvh9/J/Q1zFx+9sE9ZnS9ZPgSTvI1Ckyv9+/h9JTorJF7ldP0ne/vZzf6/39fOYSVuLjny0EZlCCGl2e4GNP24oEf8QKqGrAgkLZnxrRs/fcyRL+TTJrg5cFB0jxVaI7umkaty5w+/SxpKapDApQCyqauT2uoTXDdj41xnE6FNLuF/8WIT/J+9TwF8j+WyGcEH9w01Ikf989Py/2V3e/+f/off/77z+P9XvC0TzsULi84s+cyaWVCJdSD/Sg7QhvVN9Pl6BSEnWW1T1SPv/K09x/B9uqH+4of7hlvL8X4jm/7a7vP4v/G3v/9Ok9p90nT8XyflepBfpF7n9b33d/4/+/wIr2s+fc5yB+R9uqH+4of7hljL/xWj+x90l/8V//Pp/5r+4/j+pO68LqETakPakcuTawL4kPk+TXkdHJy7FJXl9/rdub0YXE1+fv5gxaRuVsDX6VvwD/h2vE2D+hxvqH26of7ilzH8pkv8SWZfs/X8u8r0/Nf9jko+G+t3X//+U/xcQ2a7AxJJGpANpR/qTPqRDsnz/7VkmnI//9v57/P/zu0GStrd7q0IaEati/D2nRN+DT7hOYEri+++37xd/H5skvU4gLvG1idvP0Y0+//giNIjdENk/CW3C/YYQQmqSminuf9Fmrt7uOKElye4fj45sl46OdxH57XqBuDvGm3B/M9l4eycemxHiRrefI+H/Q95j28nvd6/nlLi7o+P7dxwv3W/w+//+9Ef/uhrqH24p81/+D3//T/7H3/9n/ov8pxOfK0n2/n8T0ptUJm1I32j+3+11+YSz+Ap37LO7tZlixkbahH4IF//6QUz0OrxYUpP0JB1Jr+ijEg5+1C4PdHti6PFjyZ/335N3mP/hhvqHG+ofbinzX4le/z+GTnn9nxJ5RP8kPfyZ+f/3nP+zkdPY2/lflQwk/UgH0pO0j5z/DqQSzn/pyPWPd14vf7fr+mtQ8f9uSxv/DEhrUje6H+O/pnZ82aKHBjwTS+qRtqQrqZl4jcKf3X8DQkeui2hDCEkX7b9z5B2W/71/kYklDUkH0pu0IX0iR1hJ4bz+3wC//8MN9Q+3lPmvRs51KZLjLtf/q3/h9X//9N/lSfq+P5W4dH/nE+Z/uKH+4Yb6h1vK/Nf+Q/5ryP/7DOZ/uKH+4Yb6h1vK/Nf/Q/7r/3D+U4mjRv7/OTD/ww31DzfUP9xS5r/xH/Lf+Nee/0duIf9TDfM/3FD/cEP9wy1l/pvRa92nkKT5/9u5d1J/Vv7f3zn7b4X5H26of7ih/uGWMv8t5H+IYP6HG+ofbqh/uKXMfxv5HyKY/+GG+ocb6h9uKfPfQf6HCOZ/uKH+4Yb6h1vK/HeR/yGC+R9uqH+4of7hljL/PeR/iGD+hxvqH26of7ilzH8f+R8imP/hhvqHG+ofbinzP0D+hwjmf7ih/uGG+odbyvynIp//o5GBdMrP/0vzJ37+X7b/8vN/60Y//+fP+fyb/omffxP5/J/ILon/nMFmiZ9/Wy/xsRZJ9vk/d3wucExkD3G34t3lbwxRSZ/wnZ+7ezFxuzTZl7jdBknue+d2t0X/kcj1GgWi+z36ebrRfu984gn74lYyd1bTjX7CYbM7Pr/3j/cTfchd/q5S8ueL47x/E/z+DzfUP9zunf+t7/L3/9LeZ/l/5+frTYn+DcKEHC5wl/x3SNIcjiEpn8T/r5zD/A831D/cUP9wu3f+d75L/qf7h/K/d2L/VOTTaf+M/L/X59Pe+zigYWIf989xAOZ/uKH+4Yb6h9vd8j/+/f/I69pi0ns/cJefmH93vsF/hvkfbqh/uKH+4Za6/E+P/L/PYP6HG+ofbqh/uKUu/x9E/t9nMP/DDfUPN9Q/3FKX/xmQ//cZzP9wQ/3DDfUPt9Tlf0bk/30G8z/cUP9wQ/3DLXX5H4P8v89g/ocb6h9uqH+4pS7/MyH/7zOY/+GG+ocb6h9uqcv/zMj/+wzmf7ih/uGG+odb6vI/C/L/PoP5H26of7ih/uGWuvyPRf7fZzD/w43O+E+PAP5JmP/hlrr8z4r8v89g/ocb6h9uqH+4pS7/syH/7zOY/+GG+ocb6h9uqcv/7Mj/+wzmf7ih/uGG+odb6vI/B/L/PoP5H26of7ih/uGWuvzPify/z2D+hxvqH26of7ilLv9zIf/vM5j/4Yb6hxvqH26py//cyP/7DOZ/uKH+4Yb6h1vq8j8P8v8+g/kfbqh/uKH+4Za6/M+L/L/PYP6HG+ofbqh/uKUu//Mh/+8zmP/hhvqHG+ofbqnL//zI//sM5n+4of7hhvqHW+ryvwDy/z6D+R9uqH+4of7hwiS7nbr8L4j8v89g/ocb6h9uqH+4pS7/CyH/7zOY/+GG+ocb6h9uqcv/wsj/+wzmf7ih/uGG+odb6vK/CPL/PoP5H26of7ih/uGWuvwvivy/z2D+hxvqH26of7ilLv+LIf/vM5j/4Yb6hxvqH26py//iyP/7DOZ/uKH+4Yb6h1vq8r8E8v8+g/kfbqh/uKH+4Za6/C+J/L/PYP6HG+ofbqh/uKUu/0sh/+8zmP/hhvqHG+ofbqnL/9LI//sM5n+4of7hhvqHW+ryvwzy/z6D+R9uqH+4of7hlrr8L4v8v89g/ocb6h9uqH+4pS7/yyH/7zOY/+GG+ocb6h9uqcv/8sj/+wzmf7ih/uGG+ofb3fKfIhUIQ3rTSfOfjR4X8JEjhN+YCccKUQUIIWkIIauyV3x8/M2jVL6qSduE9THJRnL7cZ0TbzGkdqQfKjoyLrG/e7XJn1lM/NAIRzqSLqQ76RDZAiH1k2yHitxOE1li41xCSGz0O0Vur4ufHtztscbQKW/TJH383mBccovKSCgq2ikhZMrtfXN7iU0T2c8X48dEYklNUpgUiIyGiu5AKrofT0b/3VYx2lXryJ6I3/e3b+8pEv98/TJJ24T1MWz849OxifuB3G0/VIp85VP0v75KfD/3aptF+2sabWNT9F8wxc8HjePEfyn+nx4A/KNQ/3Dj75H/FJnNpcz/ipHf8x36dO/w2/p75f/v5lSykdwr/5Pn3r3ahNxLcK/c+7vyP44QUiJxTHQkj29vp++gwd3adO/eoc+/YoH7l40HC3/vAkf+FcPAQrc23eN/U/y9x8nc37cp+Bfi7pn/+6iU+V8pksxJ3Sv/f+88MjZZP7+X/3/Weenfmf+9E7dDR8Z1ezs1e/YbWLvuQ1R+0o/0IL1JftKXDCKDSV7ShfQgbUgn0iHyrycpRIqSAqQEKUgKkQKkJClOipL8dxzN5E9yZPPf/d5IXk0IF9Q/3FD/cGPumf9nk+U/TwipTAiRkvVwr/yvVTs+l482jG+3NY9vE9an9vX/hMfdqzWT9Zfy/D9F/ksJt/+q/M+ROBqayCT5+X/8d+Kiz53waSJHWXz0cQNJG9KP9CN9ouMe2KZfvz4Fk9+fu8v9C/12/0K/d1yQvJoQLqh/uKH+4SbdJf/pSP6byd7/v32PKoREcuxO98r/nG3ic/lyz/h24ID4NmF9avM/4XH3aqMv7ydKmf+F7rId9p7bSRh3Qpt8Ozmy3Gs7hSO3/87XGWpEblRIcj1PwlKFO3fwHeOOb2WSiakY6Qfvz4dR8tkM4YL6h5v8h8//WUJI1bu8Y3Sv/L82LD4vK49K2iasv1v+//Z6OUMaJ8vlhMfdq+2crL+E/qXEXM5H2pFepDtpHxnf35nPcYnboUn7FK8D/HUL5HdzHe//hRvqH26of7ih/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8O9BETbONQmJMeNvu4QQmhBTjNxKQ25RGQlFR25wMYSQmNvLSprbt80U64kbf38qfr19+6vixt/3znXEJW9RTuL9lMT7USeTrCNpyApiJ9l+pt+2vyjFegAAAAAAAAD4w+48V0963g4AAAAAAAAA/x/VrFulWQ4ipVifgxCyiSfkrBF/Ow05St3t8Wz0a2fSMLLERb/GNS7Qc/zNo9S9WhK93oDI8Q0fvSkysaQi6Uf6kT6kysKETVIk/noEMfXbSebO7VQibUh7Upl0J/1J38haIfp9nrQm9f+r51Mh2XaEyHa6kH6kB2lDehMhup3WpHbq+o+JdhiTtH8u0n8v0ov0I11IdxJ/3YTyB8efhvyH/WQmjL8qGUj6kQ6kJ2lP4i+zoP+LOrBJfmLurENt0ot0ItUi4+8QrXdC3VuTWqnbzsnoQ48m3U8sE0vqkGqkcWLP8V9T/TzuUQcxsf86pAvpQ/rEX0cTnVlS6n+eUtYjJqEejUgH0o70J31Ih+j0kf+L/unIrCbRit7589qE9CaVSRvSl3QgTGQt82eMP7H/pqRXZM71IB0S+2tGqty1/w1xFR+/s71X/9miP68Uky9yu2pifRsn6ffasPh+Ko9K2ias7xztr33SMhOJdIz+fOYj7SLjj79Hheh2ks/nVdnj+8tXNWmbsD75+GOi4+cSt1Mgsr7yPfqvVTu+n6MN49ttzePbhPXJfr0mPo/f+i8YqX+Ve/Sfs018P5d7xrcDB8S3CeujwyM5styr/0KR239d/4WT7D8z8ScZ/rg0//QA4B+F+ocb6h9uqH+4pSG3zyYak4qkLqlCKpKGpAppRWqSuqQaqUcakjqkImlMapJ6pO5fNALzjuXbx9LRwz5SI9rGRkbQmDQkNUkl0oQ0JlVJK1Kb1IyM+68Xc8dy3B3Lt6JiSTVSk9SOjKouqUjqRM88/i4F7liulHi8TUil6MFwLKlHKpFapCqpTBpHalvlbx1fhXssJ5zi3/75uz22JpEKNyaPkFakCqlKGpHKkTX1SePIT+Jfpf4dy3evb1NSj9QmTSKV/ftr3PqO5Qp3nuMk7r+k4/s75+5tvZONT40uJ7Sxkd8rt3/D/DPi7rH+t/rWjPzuq0qakVakIalH6v0tv1cSTLljucLvjq8iqU1qk3qk8t9S29sW3bF89/lRKTJvb/+01f+Lx3I36353fA1JVVI/km2NIjOkPqkX2ad/T5W33WN8CcWOJVVJxX9g3ibYl2xIYnQ5oY0f3z/n5D2/E/8LMDYyH6qT6qRq5NilSWTf1U7MkkaRY4eqkd/af4k7XsmLu9c3AAAA/mWu3D5IYgi5eusOv0VXXMIq4+4Pv9fhNQAAAAAAAAD8i1y0mat3vlQ9JPo3AWsQQppF18X/TcAi0fceXTKW2Mn+LkCa+HXJ/h7g792+rUHshkhfcanY/kIq5fYj6/6L7QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBKF23mKqF+uz2EEEIRNq4GIaRZdJ1LCKFJEUJHb40lNqHiH8PZkSZN/Lr4O3AxhJAYmvzu7dsaxG6I9BWXiu0vpFJuP7Luv9g+AAAAAAAAQDhQhCYMYQlHeCIQkUhEJgpRiUZ0YhCTWMQmDnGJR3wSkDQkLUlHHiDpyYMkA8lIYkgmkplkIbEkK8lGspMcJCfJRXKTPCQvyUfykwKkIClECpMipCgpRoqTEqQkKUVKkzKkLClHypMKpCKpRCqTKqQqqUaqkxqkJqlFHiK1SR1Sl9Qj9UkD0pA0Io1JE9KUPEyakUdIc/IoaUEeIy1JK9L6v3r8k2QIeYoMJcNIHBlORpCnyUjyDBlFRpMxZCwZR8aTCWQimUQmkylkKplGppMZ5Fkyk8wis8lzZA6ZS+aR+WQBWUgWkefJYvICWUJeJEvJMrKcrCArySqymrxE1pC1ZB15mawnG8hG8gp5lbxGNpHXyWbyBtlC3iRbyVtkG9lO3iY7yDtkJ3mX7CLvkffJB2Q3+ZDsIR+RvWQf2U8OkIPkEDlMjpCPyVHyCTlGPiXHyWfkBPk8lY+/kuzxAylCEYqmaIqlWIqneEqkREqmZEqlVEqndMqkTMqmbMqlXMqnfCoNlYZKR6Wj0lPpqQxUBiqGiqEyU5mpWCqWykZlo3JQOahcVC4qD5WHykflowpQBalCVCGqCFWEKkYVo0pQJamSVGmqNFWWKkuVp8pTFamKVGWqMlWVqkpVp6pTNalaVC2qNlWbqkvVpepT9amGVEOqMdWYako1pZpRzajmVHOqBdWCakm1pFpTram2VFuqPdWe6kh1pDpTnamuVFeqO9Wd6kn1pHpTvak+VB+qH9WPGkANoAZSg6hB1JPUk9RT1FPUMKoyPZwaQY2gRlIjqVHUaGo0NZYaR42nxlMTqUnUZGoKNZWaSk2nZlCXqZnULGo2NZsqS8+l5lHzqRh6IbWIWkQtphZTS6gl1FJqGbWMWkGtpFZRq6nV1BpqLbWWeplaT22gNlCvUK9Qr1GbqE3UZuoNagu1hdpKXaG2Udupt6kd1DvUTuodahf1HrWL+oDaTX1A7aH2UHupvdR+aj91kDpIHaYOUx9TH1OfUJ9Qn1KfUpOoE9QJ6iR1kjpFnaJOU6epM9QZ6ix1ljpHnaPOU+epC9QF6iL1A/Uj9QN1ibpEXaauUFepq9R16jp1g7pB3aRu3p789G0szdI8zdMiLdIyLdMqrdI6rdMmbdI2bdMu7dI+7dNp6DR0OjodnZ5OT2egM9AxdCY6M52ZjqVj6Wx0NjoHnYPOReei89B56Hx0ProAXYAuRBeii9BF6WJ0cboEXZIuRZemS9Nl6XJ0eboCXZGuSFemq9BV6Wp0NboGXYOuRdeia9O16bp0XbpXnh55GtLDqVFUE/p2ZZrRk6nm9BSqBf0Y3ZJuRU+n2tBt6RlUe7oD3ZHuRM+iZlJd6bZ5utM96J70PKo33TPPfKov3Y9eSA2gn6AH0oPowfST9BC6fZ6h9DB6KTWcHkGvoEbSz9Cj6NH0GqoKfbtiVemJ9CR6Mj2Fnkq/Rk2nZ9DP0jPpWfRs+jl6Dj2XnkfPpxfQC+lF9PP0YvoFegn9Ir2UXkYvp1fQK+lV9Gr6JXoNvZZeR79Mr6c30BvpV+hX6dfoTfTr9Gb6DXoL/Sa9lX6L3kZvp9+md9Dv0Dvpd+ld9Hv0+/QH9G76Q3oP/RG9l95H76cP0AfpQ/Rh+gj9MX2U/oQ+Rn9KH6c/o0/Qn9Mn6S/oU/SX9Gn6K/oM/TV9lv6GPkd/S5+nv6Mv0N/TF+kf6B/pn+hL9M/0ZfoKfZW+Rl+nf6Fv0L/SN+lbNGEohmYYhmU4hmcERmQkRmYURmU0RmcMxmQsxmYcxmU8xmcCJg2TlknHPMCkZx5kMjAZmRgmE5OZycLEMlmZbEx2JgeTk8nF5GbyMHmZfEx+pgBTkCnEFGaKMEWZYkxxpgRTkinFlGbKMGWZckx5pgJTkanEVGaqMFWZakx1pgZTk6nFPMTUZuowdZl6TH2mAdOQacQ0ZpowTZmHmWbMI0xz5lGmBfMY05JpxbRm2jBtmXZMe6YD05HpxHRmujBdmW5Md6YH05PpxfRmejN9mD5MP6Y/M4AZwAxkBjGDmV+Zm8wtZigzjIljhjMjmKeZkcwzzChmNDOGGcuMY8YzE5iJzCRmMjOFmcpMY6YzM5hnmZnMLGY28xwzh5nLzGPmMwuYhcwi5nlmMfMCs4R5kVnKLGOWMyuYlcwqZlS0p3V/4PFv3+XxEyJb38vsY/YzB5iDzCHmMHOE2cscZY4yx5hjzHHmOHOCOcGcZE4yp5hTzGnmNHOGOcOcZc4y55hzzHnmPHOBucBcZH5grjE/MZeYn5nLzBXmCnONuc5cZ25E9wFhKZZmGZZlOZZnBVZkJVZmFVZlNVZnDdZkLdZmHdZlPdZnAzYNm5ZNxz7ApmcfZDOwGdkYNhObmc3CxrJZ2WxsdjYHm5PNxeZm87B52Xxs/v/58b83vtZsa7Yt25Ztz7ZnO7Id2c5sZ7Yr25XtznZne7I92d5sb7YP24ftx/ZjB7AD2IHsQHYwO5gdwg5hh7JD2Tg2jh3BPs2OZJ9hR7Gj2THsWHYcO46dwE5gJ7GT2CnsFHYaO42dwc5gZ7Iz2dnsbHYOO4edx85jF7AL2EXsInYxu5hdwi5hl7JL2eXscnYlu5Jdza5m17Br2HXsOnY9u57dyG5kX2VfZTexm9jN7GZ2C7uF3cpuZbex29nt7A52B7uT3cnuYnex77Pvs7vZ3ewedg+7jd3H7mMPsAfYQ+wh9gh7hD3KHmWPscfY4+xx9gR7gj3JnmRPsafY0+xp9gx7hj3LnmXPsefY8+x59gJ7gb3IXmR/ZH9kL7GX2MvsZfYqe5W9zl5nb7A32JvszduHfRzN0RzLsRzP8ZzIiZzMyZzKqZzO6ZzJmZzN2ZzLuZzP+VwaLg2XjkvHpefScxm4DFwMF8Nl5jJzsVxWLhuXncvB5eRycbm5PFxeLh+XnyvAFeQKcYW5IlxRrhhXnCvBleRKcaW5MlxZrhxXnqvAVeQqcZW5KlxVrhpXnavB1eRqcQ9xtbk6XF2uHlefa8A15BpxjbkmXFPuYa4Z9wjXnHuUa8E9xrXkWnGt/9T+R3NjuLHcOG48N4GbyE3iJnNTuKncNG46N4N7lpvJzeJmc89xc7i53DxuPreAW8gt4p7nFnMvcEu4F7ml3DJuObeCW8mt4lZzL3FruLXcOu5lbj23gdvIvcK9yr3GbeJe5zZzb3BbuDe5rdxb3DZuO/c2t4N7h9vJvcvt4t7j3uc+4HZzH3J7uI+4vdw+bj93gDvIHeIOc0e4j7mj3CfcMe5T7jj3GXeC+5w7yX3BneK+5E5zX3FnuK+5s9w33DnuW+489x13gfueu8j9wP3I/cRd4n7mLnNXuKvcNe469wt3g/uVu8nd4ghP8TTP8CzP8Twv8CIv8TKv8Cqv8Tpv8CZv8Tbv8C7v8T4f8Gn4tHw6/gE+Pf8gn4HPyMfwmfjMfBY+ls/KZ+Oz8zn4nHwuPjefh8/L5+Pz8wX4gnwhvjBfhC/KF+OL8yX4knwpvjRfhi/Ll+PL8xX4inwlvjJfha/KV+Or8zX4mnwt/iG+Nl+Hr8vX4+vzDfiGfCO+Md+Eb8o/zDfjH+Gb84/yLfjH+JZ8K74134Zvy7fj2/Md+I58J74z34Xvynfju/M9+J58L743/zjfh+/L9+P78wP4J/iB/CB+MP8kP4R/ih/KD+Pj+OH8CP5pfiT/DD+KH82P4cfy4/jx/AR+Ij+Jn8xP4afy0/jp/Az+WX4mP4ufzT/Hz+Hn8vP4+fwCfiG/iH+eX8y/wC/hX+SX8sv45fwKfiW/il/Nv8Sv4dfy6/iX+fX8Bn4j/wr/Kv8av4l/nd/Mv8Fv4d/kt/Jv8dv47fzb/A7+HX4n/y6/i3+Pf5//gN/Nf8jv4T/i9/L7+P38Af4gf4g/zB/hP+aP8p/wx/hP+eP8Z/wJ/nP+JP8Ff4r/kj/Nf8Wf4b/mz/Lf8Of4b/nz/Hf8Bf57/iL/A/8j/xN/if+Zv8xf4a/y1/jr/C/8Df5X/iZ/iycCJdACI7ACJ/CCIIiCJMiCIqiCJuiCIZiCJdiCI7iCJ/hCIKQR0grphAeE9MKDQgYhoxAjZBIyC1mEWCGrkE3ILuQQcgq5hNxCHiGvkE/ILxQQCgqFhMJCEaGoUEwoLpQQSgqlhNJCGaGsUE4oL1QQKgqVhMpCFaGqUE2oLtQQagq1hIeE2kIdoa5QT6gvNBAaCo2ExkIToanwsNBMeERoLjwqtBAeE1oKrYTWQhuhrdBOaC90EDoKnYTOQhehq9BN6C70EHoKvYTewuNCH6Gv0E/oLwwQnhAGCoOEwcKTwhDhKWGoMEyIE4YLI4SnhZHCM8IoYbQwRhgrjBPGCxOEicIkYbIwRZgqTBOmCzOEZ4WZwixhtvCcMEeYK8wT5gsLhIXCIuF5YbHwgrBEeFFYKiwTlgsrhJXCKmG18JKwRlgrrBNeFtYLG4SNwivCq8JrwibhdWGz8IawRXhT2Cq8JWwTtgtvCzuEd4SdwrvCLuE94X3hA2G38KGwR/hI2CvsE/YLB4SDwiHhsHBE+Fg4KnwiHBM+FY4LnwknhM+Fk8IXwinhS+G08JVwRvhaOCt8I5wTvhXOC98JF4TvhYvCD8KPwk/CJeFn4bJwRbgqXBOuC78IN4RfhZvCLYGIlEiLjMiKnMiLgiiKkiiLiqiKmqiLhmiKlmiLjuiKnuiLgZhGTCumEx8Q04sPihnEjGKMmEnMLGYRY8WsYjYxu5hDzCnmEnOLecS8Yj4xv1hALCgWEguLRcSiYjGxuFhCLCmWEkuLZcSyYjmxvFhBrChWEiuLVcSqYjWxulhDrCnWEh8Sa4t1xLpiPbG+2EBsKDYSG4tNxKbiw2Iz8RGxufio2EJ8TGwpthJbi23EtmI7sb3YQewodhI7i13ErmI3sbvYQ+wp9hJ7i4+LfcS+Yj+xvzhAfEIcKA4SB4tPikPEp8Sh4jAxThwujhCfFkeKz4ijxNHiGHGsOE4cL04QJ4qTxMniFHGqOE2cLs4QnxVnirPE2eJz4hxxrjhPnC8uEBeKi8TnxcXiC+IS8UVxqbhMXC6uEFeKq8TV4kviGnGtuE58WVwvbhA3iq+Ir4qviZvE18XN4hviFvFNcav4lrhN3C6+Le4Q3xF3iu+Ku8T3xPfFD8Td4ofiHvEjca+4T9wvHhAPiofEw+IR8WPxqPiJeEz8VDwufiaeED8XT4pfiKfEL8XT4lfiGfFr8az4jXhO/FY8L34nXhC/Fy+KP4g/ij+Jl8SfxcviFfGqeE28Lv4i3hB/FW+Kt0QiURItMRIrcRIvCZIoSZIsKZIqaZIuGZIpWZItOZIreZIvBVIaKa2UTnpASi89KGWQMkoxUiYps5RFipWyStmk7FIOKaeUS8ot5ZHySvmk/FIBqaBUSCosFZGKSsWk4lIJqaRUSiotlZHKSuWk8lIFqaJUSaosVZGqStWk6lINqaZUS3pIqi3VkepK9aT6UgOpodRIaiw1kZpKD0vNpEek5tKjUgvpMaml1EpqLbWR2krtpPZSB6mj1EnqLHWRukrdpO5SD6mn1Cvhyhapn9RfGiA9IQ2UBkmDpSelIdJT0lBpmBQnDZdGSE9LI6VnpFHSaGmMNFYaJ42XJkgTpUnSZGmKNFWaJk2XZkjPSjOlWdJs6TlpjjRXmifNlxZIC6VF0vPSYukFaYn0orRUWiYtl1ZIK6VV0mrpJWmNtFZaJ70srZc2SBulV6RXpdekTdLr0mbpDWmL9Ka0VXpL2iZtl96WdkjvSDuld6Vd0nvS+9IH0m7pQ2mP9JG0V9on7ZcOSAelQ9Jh6Yj0sXRU+kQ6Jn0qHZc+k05In0snpS+kU9KX0mnpK+mM9LV0VvpGOid9K52XvpMuSN9LF6UfpB+ln6RL0s/SZemKdFW6Jl2XfpFuSL9KN6VbEpEpmZYZmZU5mZcFWZQlWZYVWZU1WZcN2ZQt2ZYd2ZU92ZcDOY2cVk4nPyCnlx+UM8gZ5Rg5k5xZziLHylnlbHJ2OYecU84l55bzyHnlfHJ+uYBcUC4kF5aLyEXlYnJxuYRcUi4ll5bLyGXlcnJ5uYJcUa4kV5aryFVlQkhcDbmmXEt+SK4t15HryvXk+nIDuaHcSG4sN5Gbyg/LzeRH5Obyo3IL+TG5pdxKbi23kdvK7eT2cge5o9xJ7ix3kbvK3eTucg+5p9xL7i0/LveR+8r95P7yAPkJeaA8SB4sPykPkZ+Sh8rD5Dh5uDxCfloeKT8jj5JHy2PksfI4ebw8QZ4oT5Iny1PkqfI0ebo8Q35WninPkmfLz8lz5LnyPHm+vEBeKC+Sn5cXyy/IS+QX5aXyMnm5vEJeKa+SV8svyWvktfI6+WV5vbxB3ii/Ir8qvyZvkl+XN8tvyFvkN+Wt8lvyNnm7/La8Q35H3im/K++S35Pflz+Qd8sfynvkj+S98j55v3xAPigfkg/LR+SP5aPyJ/Ix+VP5uPyZfEL+XD4pfyGfkr+UT8tfyWfkr+Wz8jfyOflb+bz8nXxB/l6+KP8g/yj/JF+Sf5Yvy1fkq/I1+br8i3xD/lW+Kd+SiUIptMIorMIpvCIooiIpsqIoqqIpumIopmIptuIoruIpvhIoaZS0SjrlASW98qCSQcmoxCiZlMxKFiVWyapkU7IrOZScSi4lt5JHyavkU/IrBZSCSiGlsFJEKaoUU4orJZSSSimltFJGKauUU8orFZSKSiWlslJFqapUU6orNZSaSi3lIaW2Ukepq9RT6isNlIZKI6Wx0kRpqjysNFMeUZorjyotlMeUlkorpbXSRmmrtFPaKx2UjkonpbPSRemqdFO6Kz2UnkovpbfyuNJH6av0U/orA5QnlIHKIGWw8qQyRHlKGaoMU+KU4coI5WllpPKMMkoZrYxRxirjlPHKBGWiMkmZrExRpirTlOnKDOVZZaYyS5mtPKfMUeYq85T5ygJlobJIeV5ZrLygLFFeVJYqy5TlygplpbJKWa28pKxR1irrlJeV9coGZaPyivKq8pqySXld2ay8oWxR3lS2Km8p25TtytvKDuUdZafyrrJLeU95X/lA2a18qOxRPlL2KvuU/coB5aBySDmsHFE+Vo4qnyjHlE+V48pnygnlc+Wk8oVySvlSOa18pZxRvlbOKt8o55RvlfPKd8oF5XvlovKD8qPyk3JJ+Vm5rFxRrirXlOvKL8oN5VflpnJLISql0iqjsiqn8qqgiqqkyqqiqqqm6qqhmqql2qqjuqqn+mqgplHTqunUB9T06oNqBjWjGqNmUjOrWdRYNauaTc2u5lBzqrnU3GoeNa+aT82vFlALql/cKqwWUYuqxdTiagm1pFpKLa2WUcuq5dTyagW1olpJraxWUauq1dTqag21plpLfUitrdZR66r11PpqA7Wh2khtrDZRm6oPq83UR9Tm6qNqC/UxtaXaSm2ttlHbqu3U9moHtaPaSe2sdlG7qt3U7moPtafaS+2tPq72Ufuq/dT+6gD1CXWgOkgdrD6pDlGfUoeqw9Q4dbg6Qn1aHak+o45SR6tj1LHqOHW8OkGdqE5SJ6tT1KnqNHW6OkN9Vp2pzlJnq8+pc9S56jx1vrpAXaguUp9XF6svqEvUF9Wl6jJ1ubpCXamuUlerL6lr1LXqOvVldb26Qd2ovqK+qr6mblJfVzerb6hb1DfVrepb6jZ1u/q2ukN9R92pvqvuUt9T31c/UHerH6p71I/Uveo+db96QD2oHlIPq0fUj9Wj6ifqMfVT9bj6mXpC/Vw9qX6hnlK/VE+rX6ln1K/Vs+o36jn1W/W8+p16Qf1evaj+oP6o/qReUn9WL6tX1KvqNfW6+ot6Q/1VvaneUolGabTGaKzGabwmaKImabKmaKqmabpmaKZmabbmaK7mab4WaGm0tFo67QEtvfaglkHLqMVombTMWhYtVsuqZdOyazm0nFouLbeWR8ur5dPyawW0glohrbBWRCuqFdOKayW0kloprbRWRiurldPKaxW0ilolrbJWRauqVdOqazW0mlot7SGttlZHq6vV0+prDbSGWiOtsdZEa6o9rDXTHtGaa49qLbTHtJZaK6211kZrq7XT2msdtI5aJ62z1kXrqnXTums9tJ5aL6239rjWR+ur9dP6awO0J7SB2iBtsPakNkR7ShuqDdPitOHaCO1pbaT2jDZKG62N0cZq47Tx2gRtojZJm6xN0aZq07Tp2gztWW2mNkubrT2nzdHmavO0+doCbaG2SHteW6y9oC3RXtSWasu05doKbaW2SlutvaSt0dZq67SXtfXaBm2j9or2qvaatkl7XdusvaFt0d7Utmpvadu07drb2g7tHW2n9q62S3tPe1/7QNutfajt0T7S9mr7tP3aAe2gdkg7rB3RPtaOap9ox7RPtePaZ9oJ7XPtpPaFdkr7UjutfaWd0b7WzmrfaOe0b7Xz2nfaBe177aL2g/aj9pN2SftZu6xd0a5q17Tr2i/aDe1X7aZ2SyM6pdM6o7M6p/O6oIu6pMu6oqu6puu6oZu6pdu6o7u6p/t6oKfR0+rp9Af09PqDegY9ox6jZ9Iz61n0WD2rnk3PrufQc+q59Nx6Hj2vnk/PrxfQC+qF9MJ6Eb2oXkwvrpfQS+ql9NJ6Gb2sXk4vr1fQK+qV9Mp6Fb2qXk2vrtfQa+q19If02nodva5eT6+vN9Ab6o30xnoTvan+sN5Mf0Rvrj+qt9Af01vqrfTWehu9rd5Ob6930DvqnfTOehe9q95N76730HvqvfTe+uN6H72v3k/vrw/Qn9AH6oP0wfqT+hD9KX2oPkyP04frI/Sn9ZH6M/oofbQ+Rh+rj9PH6xP0ifokfbI+RZ+qT9On6zP0Z/WZ+ix9tv6cPkefq8/T5+sL9IX6Iv15fbH+gr5Ef1Ffqi/Tl+sMWamv0lfrL+lr9LX6Ov1lfb2+Qd+ov6K/qr+mb9Jf1zfrb+hb9Df1rfpb+jZ9u/62vkN/R9+pv6vv0t/T39c/0HfrH+p79I/0vfo+fb9+QD+oH9IP60f0j/Wj+if6Mf1T/bj+mX5C/1w/qX+hn9K/1E/rX+ln9K/1s/o3+jn9W/28/p1+Qf9ev6j/oP+o/6Rf0n/WL+tX9Kv6Nf26/ot+Q/9Vv6nf0olBGbTBGKzBGbwhGKIhGbKhGKqhGbphGKZhGbbhGK7hGb4RGGmMtEY64wEjvfGgkcHIaMQYmYzMRhYj1shqZDOyGzmMnEYuI7eRx8hr5DPyGwWMgkYho7BRxChqFDOKGyWMkkYpo7RRxihrlDPKGxWMikYlo7JRxahqVDOqGzWMmkYt4yGjtlHHqGvUM+obDYyGRiOjsdHEaGo8bDQzHjGaG48aLYzHjJZGK6O10cZoa7Qz2hsdjI5GJ6Oz0cXoanQzuhs9jJ5GL6O38bjRx+hr9DP6GwOMJ4yBxiBjsPGkMcR4yhhqDDPijOHGCONpY6TxjDHKGG2MMcYa44zxxgRjojHJmGxMMaYa04zpxgzjWWOmMcuYbTxnzDHmGvOM+cYCY6GxyHjeWGy8YCwxXjSWGsuM5cYKY6WxylhtvGSsMdYa64yXjfXGBmOj8YrxqvGascl43dhsvGFsMd40thpvGduM7cbbxg7jHWOn8a6xy3jPeN/4wNhtfGjsMT4y9hr7jP3GAeOgccg4bBwxPjaOGp8Yx4xPjePGZ8YJ43PjpPGFccr40jhtfGWcMb42zhrfGOeMb43zxnfGBeN746Lxg/Gj8ZNxyfjZuGxcMa4a14zrxi/GDeNX46ZxyyAmZdImY7ImZ/KmYIqmZMqmYqqmZuqmYZqmZdqmY7qmZ/pmYKYx05rpzAfM9OaDZgYzoxljZjIzm1nMWDOrmc3MbuYwc5q5zNxmHjOvmc/MbxYwC5qFzMJmEbOoWcwsbpYwS5qlzNJmGbOsWc4sb1YwK5qVzMpmFbOqWc2sbtYwa5q1zIfM2mYds65Zz6xvNjAbmo3MxmYTs6n5sNnMfMRsbj5qtjAfM1uarczWZhuzrdnObG92MDuanczOZhezq9nN7G72MHuavcze5uNmH7Ov2c/sbw4wnzAHmoPMweaT5hDzKXOoOcyMM4ebI8ynzZHmM+Yoc7Q5xhxrjjPHmxPMieYkc7I5xZxqTjOnmzPMZ82Z5ixztvmcOceca84z55sLzIXmIvN5c7H5grnEfNFcai4zl5srzJXmKnO1+ZK5xlxrrjNfNtebG8yN5ivmq+Zr5ibzdXOz+Ya5xXzT3Gq+ZW4zt5tvmzvMd8yd5rvmLvM9833zA3O3+aG5x/zI3GvuM/ebB8yD5iHzsHnE/Ng8an5iHjM/NY+bn5knzM/Nk+YX5inzS/O0+ZV5xvzaPGt+Y54zvzXPm9+ZF8zvzYvmD+aP5k/mJfNn87J5xbxqXjOvm7+YN8xfzZvmLZNYlEVbjMVanMVbgiVakiVbiqVamqVbhmValmVbjuVanuVbgZXGSmulsx6w0lsPWhmsjFaMlcnKbGWxYq2sVjYru5XDymnlsnJbeay8Vj4rv1XAKmgVsgpbRayiVjGruFXCKmmVskpbZayyVjmrvFXBqmhVsipbVayqVjWrulXDqmnVsh6yalt1rLpWPau+1cBqaDWyGltNrKbWw1Yz6xGrufWo1cJ6zGpptbJaW22stlY7q73VwepodbI6W12srlY3q7vVw+pp9bJ6W49bfay+Vj+rvzXAesIaaA2yBltPWkOsp6yh1jArzhpujbCetkZaz1ijrNHWGGusNc4ab02wJlqTrMnWFGuqNc2abs2wnrVmWrOs2dZz1hxrrjXPmm8tsBZai6znrcXWC9YS60VrqbXMWm6tsFZaq6zV1kvWGmuttc562VpvbbA2Wq9Yr1qvWZus163N1hvWFutNa6v1lrXN2m69be2w3rF2Wu9au6z3rPetD6zd1ofWHusja6+1z9pvHbAOWoesw9YR62PrqPWJdcz61DpufWadsD63TlpfWKesL63T1lfWGetr66z1jXXO+tY6b31nXbC+ty5aP1g/Wj9Zl6yfrcvWFeuqdc26bv1i3bB+tW5atyxiUzZtMzZrczZvC7ZoS7ZsK7Zqa7ZuG7ZpW7ZtO7Zre7ZvB3YaO62dzn7ATm8/aGewM9oxdiY7s53FjrWz2tns7HYOO6edy85t57Hz2vns/HYBu6BdyC5sF7GL2sXs4nYJu6Rdyi5tl7HL2uXs8nYFu6Jdya5sV7Gr2tXs6nYNu6Zdy37Irm3Xseva9ez6dgO7od3Ibmw3sZvaD9vN7Efs5vajdgv7Mbul3cpubbex29rt7PZ2B7uj3cnubHexu9rd7O52D7un3cvubT9u97H72v3s/vYA+wl7oD3IHmw/aQ+xn7KH2sPsOHu4PcJ+2h5pP2OPskfbY+yx9jh7vD3BnmhPsifbU+yp9jR7uj3Dftaeac+yZ9vP2XPsufY8e769wF5oL7KftxfbL9hL7BftpfYye7m9wl5pr7JX2y/Za+y19jr7ZXu9vcHeaL9iv2q/Zm+yX7c322/YW+w37a32W/Y2e7v9tr3Dfsfeab9r77Lfs9+3P7B32x/ae+yP7L32Pnu/fcA+aB+yD9tH7I/to/Yn9jH7U/u4/Zl9wv7cPml/YZ+yv7RP21/ZZ+yv7bP2N/Y5+1v7vP2dfcH+3r5o/2D/aP9kX7J/ti/bV+yr9jX7uv2LfcP+1b5p37KJQzm0wziswzm8IziiIzmyoziqozm6YzimYzm24ziu4zm+EzhpnLROOucBJ73zoJPByejEOJmczE4WJ9bJ6mRzsjs5nJxOLie3k8fJ6+Rz8jsFnIJOIaewU8Qp6hRzijslnJJOKae0U8Yp65RzyjsVnIpOJaeyU8Wp6lRzqjs1nJpOLechp7ZTx6nr1HPqOw2chk4jp7HTxGnqPOw0cx5xmjuPOi2cx5yWTiuntdPGaeu0c9o7HZyOTiens9PF6ep0c7o7PZyeTi+nt/O408fp6/Rz+jsDnCecgc4gZ7DzpDPEecoZ6gxz4pzhzgjnaWek84wzyhntjHHGOuOc8c4EZ6IzyZnsTHGmOtOc6c4M51lnpjPLme0858xx5jrznPnOAmehs8h53lnsvOAscV50ljrLnOXOCmels8pZ7bzkrHHWOuucl531zgZno/OK86rzmrPJed3Z7LzhbHHedLY6bznbnO3O284O5x1np/Ous8t5z3nf+cDZ7Xzo7HE+cvY6+5z9zgHnoHPIOewccT52jjqfOMecT53jzmfOCedz56TzhXPK+dI57XzlnHG+ds463zjnnG+d8853zgXne+ei84Pzo/OTc8n52bnsXHGuOtec684vzg3nV+emc8shLuXSLuOyLufyruCKruTKruKqrubqruGaruXaruO6ruf6buCmcdO66dwH3PTug24GN6Mb42ZyM7tZ3Fg3q5vNze7mcHO6udzcbh43r5vPze8WcAu6hdzCbhG3qFvMLe6WcEu6pdzSbhm3rFvOLe9WcCu6ldzKbhW3qlvNre7WcGu6tdyH3NpuHbeuW8+t7zZwG7qN3MZuE7ep+7DbzH3Ebe4+6rZwH3Nbuq3c1m4bt63bzm3vdnA7up3czm4Xt6vbze3u9nB7ur3c3u7jbh+3r9vP7e8OcJ9wB7qD3MHuk+4Q9yl3qDvMjXOHuyPcp92R7jPuKHe0O8Yd645zx7sT3InuJHeyO8Wd6k5zp7sz3Gfdme4sd7b7nDvHnevOc+e7C9yF7iL3eXex+4K7xH3RXeouc5e7K9yV7ip3tfuSu8Zd665zX3bXuxvcje4r7qvua+4m93V3s/uGu8V9093qvuVuc7e7b7s73Hfcne677i73Pfd99wN3t/uhu8f9yN3r7nP3uwfcg+4h97B7xP3YPep+4h5zP3WPu5+5J9zP3ZPuF+4p90v3tPuVe8b92j3rfuOec791z7vfuRfc792L7g/uj+5P7iX3Z/eye8W96l5zr7u/uDfcX92b7i2XeJRHe4zHepzHe4InepIne4qnepqne4ZnepZne47nep7ne4GXxkvrpfMe8NJ7D3oZvIxejJfJy+xl8WK9rF42L7uXw8vp5fJye3m8vF4+L79XwCvoFfIKe0W8ol4xr7hXwivplfJKe2W8sl45r7xXwavoVfIqe1W8ql41r7pXw6vp1fIe8mp7dby6Xj2vvtfAa+g18hp7Tbym3sNeM+8Rr7n3qNfCe8xr6bXyWnttvLZeO6+918Hr6HXyOntdvK5eN6+718Pr6fXyenuPe328vl4/r783wHvCG+gN8gZ7T3pDvKe8od4wL84b7o3wnvZGes94o7zR3hhvrDfOG+9N8CZ6k7zJ3hRvqjfNm+7N8J71ZnqzvNnec94cb643z5vvLfAWeou8573F3gveEu9Fb6m3zFvurfBWequ81d5L3hpvrbfOe9lb723wNnqveK96r3mbvNe9zd4b3hbvTW+r95a3zdvuve3t8N7xdnrveru897z3vQ+83d6H3h7vI2+vt8/b7x3wDnqHvMPeEe9j76j3iXfM+9Q77n3mnfA+9056X3invC+9095X3hnva++s9413zvvWO+99513wvvcuej94P3o/eZe8n73L3hXvqnfNu+794t3wfvVuerc84lM+7TM+63M+7wu+6Eu+7Cu+6mu+7hu+6Vu+7Tu+63u+7wd+Gj+tn85/wE/vP+hn8DP6MX4mP7OfxY/1s/rZ/Ox+Dj+nn8vP7efx8/r5/Px+Ab+gX8gv7Bfxi/rF/OJ+Cb+kX8ov7Zfxy/rl/PJ+Bb+iX8mv7Ffxq/rV/Op+Db+mX8t/yK/t1/Hr+vX8+n4Dv6HfyG/sN/Gb+g/7zfxH/Ob+o34L/zG/pd/Kb+238dv67fz2fge/o9/J7+x38bv63fzufg+/p9/L7+0/7vfx+/r9/P7+AP8Jf6A/yB/sP+kP8Z/yh/rD/Dh/uD/Cf9of6T/jj/JH+2P8sf44f7w/wZ/oT/In+1P8qf40f7o/w3/Wn+nP8mf7z/lz/Ln+PH++v8Bf6C/yn/cX+y/4S/wX/aX+Mn+5v8Jf6a/yV/sv+Wv8tf46/2V/vb/B3+i/4r/qv+Zv8l/3N/tv+Fv8N/2t/lv+Nn+7/7a/w3/H3+m/6+/y3/Pf9z/wd/sf+nv8j/y9/j5/v3/AP+gf8g/7R/yP/aP+J/4x/1P/uP+Zf8L/3D/pf+Gf8r/0T/tf+Wf8r/2z/jf+Of9b/7z/nX/B/96/6P/g/+j/5F/yf/Yv+1f8q/41/7r/i3/D/9W/6d/ySUAFdMAEbMAFfCAEYiAFcqAEaqAFemAEZmAFduAEbuAFfhAEaYK0QbrggSB98GCQIcgYxASZgsxBliA2yBpkC7IHOYKcQa4gd5AnyBvkC/IHBYKCQaGgcFAkKBoUC4oHJYKSQamgdFAmKBuUC8oHFYKKQaWgclAlqBpUC6oHNYKaQa3goaB2UCeoG9QL6gcNgoZBo6Bx0CRoGjwcNAseCZoHjwYtgseClkGroHXQJmgbtAvaBx2CjkGnoHPQJegadAu6Bz2CnkGvoHfweNAn6Bv0C/oHA4IngoHBoGBw8GQwJHgqGBoMC+KC4cGI4OlgZPBMMCoYHYwJxgbjgvHBhGBiMCmYHEwJpgbTgunBjODZYGYwK5gdPBfMCeYG84L5wYJgYbAoeD5YHLwQLAleDJYGy4LlwYpgZbAqWB28FKwJ1v4fLff07FfQvg1+xza+y2avtXoZsW3btm3btm1rx052bNs7drKTTD2/mZqqd56DqZqat88+1dVd9/UHXHdsc2xLbGtsW2x7bEdsZ2xXbHdsT2xvbF8sPrY/diB2MHYodjh2JHY0dix2PHYidjJ2KnY6diZ2NpYQOxc7H7sQuxi7FLscuxK7GrsWux67EbsZuxW7HbsTuxu7F7sfexB7GHsUexx7EnsaexZ7HnsRexl7FXsdexNLjL2NvYu9j32IfYx9in2OfYl9jX2LfY/9iP2M/Yr9jiXF/sT+xv7F4pBkSHIkBZISSYWkRtIgaZF0SHokA5IRyYRkRrIgWZFsSHYkB5ITyYXkRmIIgqAIhuAIgZAIhdAIg7AIh/CIgIiIhMiIgqgIQDRERwwEIiZiITbiIC7iIT4SICESIXmQvEg+JD9SACmIFEIKI0WQokgxpDhSAimJlEJKI2WQskg5pDxSAamIVEIqI1WQqkg1pDpSA6mJ1EJqI3WQukg9pD7SAGmINEIaI02QpkgzpDnSAmmJtEJaI22Qtkg7pD3SAemIdEI6I12Qrkg3pDvSA+mJ9EJ6I32Qvkg/pD8yABmIDEIGI0OQocgwZDgyAhmJjEJGI2OQscg4ZDwyAZmITEImI1OQqcg0ZDoyA5mJzEJmI3OQucg8ZD6yAFmILEIWI0uQpcgyZDmyAlmJrEJWI2uQtcg6ZD2yAdmIbEI2I1uQrcg2ZDuyA9mJ7EJ2I3uQvcg+JB7ZjxxADiKHkMPIEeQocgw5jpxATiKnkNPIGeQskoCcQ84jF5CLyCXkMnIFuYpcQ64jN5CbyC3kNnIHuYvcQ+4jD5CHyCPkMfIEeYo8Q54jL5CXyCvkNfIGSUTeIu+Q98gH5CPyCfmMfEG+It+Q78gP5CfyC/mNJCF/kL/IPyQOTYYmR1OgKdFUaGo0DZoWTYemRzOgGdFMaGY0C5oVzYZmR3OgOdFcaG40hiIoimIojhIoiVIojTIoi3IojwqoiEqojCqoigJUQ3XUQCFqohZqow7qoh7qowEaohGaB82L5kPzowXQgmghtDBaBC2KFkOLoyXQkmgptDRaBi2LlkPLoxXQimgltDJaBa2KVkOrozXQmmgttDZaB62L1kProw3QhmgjtDHaBG2KNkOboy3QlmgrtDXaBm2LtkPbox3QjmgntDPaBe2KdkO7oz3QnmgvtDfaB+2L9kP7owPQgeggdDA6BB2KDkOHoyPQkegodDQ6Bh2LjkPHoxPQiegkdDI6BZ2KTkOnozPQmegsdDY6B52LzkPnowvQhegidDG6BF2KLkOXoyvQlegqdDW6Bl2LrkPXoxvQjegmdDO6Bd2KbkO3ozvQnegudDe6B92L7kPj0f3oAfQgegg9jB5Bj6LH0OPoCfQkego9jZ5Bz6IJ6Dn0PHoBvYheQi+jV9Cr6DX0OnoDvYneQm+jd9C76D30PvoAfYg+Qh+jT9Cn6DP0OfoCfYm+Ql+jb9BE9C36Dn2PfkA/op/Qz+gX9Cv6Df2O/kB/or/Q32gS+gf9i/5D47BkWHIsBZYSS4WlxtJgabF0WHosA5YRy4RlxrJgWbFsWHYsB5YTy4XlxmIYgqEYhuEYgZEYhdEYg7EYh/GYgImYhMmYgqkYwDRMxwwMYiZmYTbmYC7mYT4WYCEWYXmwvFg+LD9WACuIFcIKY0WwolgxrDhWAiuJlcJKY2Wwslg5rDxWAauIVcIqY1Wwqlg1rDpWA6uJ1cJqY3Wwulg9rD7WAGuINcIaY02wplgzrDnWAmuJtcJaY22wtlg7rD3WAeuIdcI6Y12wrlg3rDvWA+uJ9cJ6Y32wvlg/rD82ABuIDcIGY0OwodgwbDg2AhuJjcJGY2Owsdg4bDw2AZuITcImY1Owqdg0bDo2A5uJzcJmY3Owudg8bD62AFuILcIWY0uwpdgybDm2AluJrcJWY2uwtdg6bD22AduIbcI2Y1uwrdg2bDu2A9uJ7cJ2Y3uwvdg+LB7bjx3ADmKHsMPYEewodgw7jp3ATmKnsNPYGewsloCdw85jF7CL2CXsMnYFu4pdw65jN7Cb2C3sNpY8Li7uHnYfe4A9xB5hj7En2FPsGfYce4G9xF5hr7E3WCL2FnuHvcc+YB+xT9hn7Av2FfuGfcd+YD+xX9hvLAn7g/3F/mFxeDI8OZ4CT4mnwlPjafC0eDo8PZ4Bz4hnwjPjWfCseDY8O54Dz4nnwnPjMRzBURzDcZzASZzCaZzBWZzDeVzARVzCZVzBVRzgGq7jBg5xE7dwG3dwF/dwHw/wEI/wPHhePB+eHy+AF8QL4YXxInhRvBheHC+Bl8RL4aXxMnhZvBxeHq+AV8Qr4ZXxKnhVvBpeHa+B18Rr4bXxOnhdvB5eH2+AN8Qb4Y3xJnhTvBneHG+Bt8Rb4a3xNnhbvB3eHu+Ad8Q74Z3xLnhXvBveHe+B98R74b3xPnhfvB/eHx+AD8QH4YPxIfhQfBg+HB+Bj8RH4aPxMfhYfBw+Hp+AT8Qn4ZPxKfhUfBo+HZ+Bz8Rn4bPxOfhcfB4+H1+AL8QX4YvxJfhSfBm+HF+Br8RX4avxNfhafB2+Ht+Ab8Q34ZvxLfhWfBu+Hd+B78R34bvxPfhefB8ej+/HD+AH8UP4YfwIfhQ/hh/HT+An8VP4afwMfhZPwM/h5/EL+EX8En4Zv4Jfxa/h1/Eb+E38Fn4bv4Pfxe/h9/EH+EP8Ef4Yf4I/xZ/hz/EX+Ev8Ff4af4Mn4m/xd/h7/AP+Ef+Ef8a/4F/xb/h3/Af+E/+F/8aT8D/4X/wfHkckI5ITKYiURCoiNZGGSEukI9ITGYiMRCYiM5GFyEpkI7ITOYicRC4iNxEjEAIlMAInCIIkKIImGIIlOIInBEIkJEImFEIlAKEROmEQkDAJi7AJh3AJj/CJgAiJiMhD5CXyEfmJAkRBohBRmChCFCWKEcWJEkRJohRRmihDlCXKEeWJCkRFohJRmahCVCWqEdWJGkRNohZRm6hD1CXqEfWJBkRDohHRmGhCNCWaEc2JFkRLohXRmmhDtCXaEe2JDkRHohPRmehCdCW6Ed2JHkRPohfRm+hD9CX6Ef2JAcRAYhAxmBhCDCWGEcOJEcRIYhQxmhhDjCXGEeOJCcREYhIxmZhCTCWmEdOJGcRMYhYxm5hDzCXmEfOJBcRCYhGxmFhCLCWWEcuJFcRKYhWxmlhDrCXWEeuJDcRGYhOxmdhCbCW2EduJHcROYhexm9hD7CX2EfHEfuIAcZA4RBwmjhBHiWPEceIEcZI4RZwmzhBniQTiHHGeuEBcJC4Rl4krxFXiGnGduEHcJG4Rt4k7xF3iHnGfeEA8JB4Rj4knxFPiGfGceEG8JF4Rr4k3RCLxlnhHvCc+EB+JT8Rn4gvxlfhGfCd+ED+JX8RvIon4Q/wl/hFxZDIyOZmCTEmmIlOTaci0ZDoyPZmBzEhmIjOTWcisZDYyO5mDzEnmInOTMRIhURIjcZIgSZIiaZIhWZIjeVIgRVIiZVIhVRKQGqmTBglJk7RIm3RIl/RInwzIkIzIPGReMh+ZnyxAFiQLkYXJImRRshhZnCxBliRLkaXJMmRZshxZnqxAViQrkZXJKmRVshpZnaxB1iRrkbXJOmRdsh5Zn2xANiQbkY3JJmRTshnZnGxBtiRbka3JNmRbsh3ZnuxAdiQ7kZ3JLmRXshvZnexB9iR7kb3JAav6kv3I/mQzfSA5iBxMDiGHksPI4eQIciQ5ihxNjiHHkuPI8eQEciI5iZxMTiGnktPI6eQMciY5i5xNziHnkvPI+eQCciG5iFxMLiGXksvI5eQKciW5ilxNriHXkuvI9eQGciO5idxMbiG3ktvI7eQOcie5i9xN7iH3kvvIeHI/eYA8SB4iD5NHyKPkMfI4eYI8SZ4iT5NnyLNkAnmOPE9eIC+Sl8jL5BXyKnmNvE7eIG+St8jb5B3yLnmPvE8+IB+Sj8jH5BPyKfmMfE6+IF+Sr8jX5BsykXxLviPfkx/Ij+Qn8jP5hfxKfiO/kz/In+Qv8jeZRP4h/5L/yDgqjkpOJadSUimp1FRqKi2VlkpPpacyUhmpzFRmKiuVlcpOZadyUjmp3FRuCqEQCqMwiqAI6j+HoRiKozhKoARKoiRKoRQKUIDSKZ2CFKQsyqIcyqE8yqMCKqAiKqLyUnmp/FR+qiBVkCpMFaaKUkWp4lRxqiRVkipNlabKUmWp8lR5qiJVkapMVaaqUlWp6lR1qiZVk6pN1abqUnWp+lR9qiHVkGpMNaaaUk2p5lRzqiXVkmpNtabaUm2p9lR7qiPVkepMdaa6Ul2p7lR3qifVk+pN9ab6Un2p/lR/aiA1kBpMDaaGUkOp4dRwaiQ1khpNjabGUmOp8dR4aiI1kZpMTaamUlOp6dR0aiY1i5pNzaHmUvOo+dQCaiG1iFpMLaaWUkup5dRyaiW1klpNrabWUmup9dR6aiO1kdpMbaa2Ulup7dR2aie1k9pN7ab2UnupeCqeOkAdoA5Rh6gj1BHqGHWMOkGdoE5Rp6gz1BkqgUqgzlPnqYvUReoydZm6Sl2lrlPXqZvUTeo2dZu6S92l7lP3qYfUQ+ox9Zh6Sj2lnlPPqZfUS+o19ZpKpBKpd9Q76gP1gfpEfaK+UF+ob9Q36gf1g/pF/aKSqCTqL/WXSkuno9PTGeiMdCY6M52F/n8aoVEao3GaoEk6Nx37X0zRNK3QKg1ojdZpg4a0+V+O6Dx0XjofnZ8uQBekC/2XS9Nl6LJ0Obo8XYEuSZf6X1yRrkRXpuvQVel6dHW6AV2TbkTXpuvQdel6dH26Ad2QbkS3ptvQbel2dHu6A92R7vRf3kvvo0/Rp+kz9Fn6Nn2H/kH/pF/Tb+hf9G96ID2IHk2PocfS4+jx9AR6Ij3pvzybnkPPpefR8+kF9EJ60X95Nb2GXkuvo9fTG+iN9Kb/8m56D72Vjqe30zvonfSu//F/Zoqn99MH6IP0IfowfYROoI/Rx+kT9Mn/e9YE+hx9nr5A36Rv0ZfpK/RV+hp9nb7xP/5Pjrv0Pfo+/YB+Sb+iH9NP6Kd0Iv2cfvE//k++RPot/Y5+T3+gP9Kf6CT6C/2V/kZ//5/8/8meRP+h/9L/6DgmGZOcScGkZFIxqZk0TFomHZOeycBkZDIxmZksTFYmG5OdycHkZHIxuZkYgzAogzE4QzAkQzE0wzAswzE8IzAiIzEyozAqAxiN0RmDgYzJWIzNOIzLeIzPBEzIREweJi+Tj8nPFGAKMoWYwkwRpihTjCnOlGBKMqWY0kwZpixTjinPVGAqMpWYykwVpipTjanO1GBqMrWY2kwdpi5Tj6nPNGAaMo2YxkwTpinTjGnOtGBaMq2Y1kwbpi3TjmnPdGA6Mp2YzkwXpivTjenO9GB6Mr2Y3kwfpi/Tj+nPDGAGMoOYwcwQZigzjBnOjGBGMqOY0cwYZiwzjhnPTGAmMpOYycwUZiozjZnOzGBmMrOY2cwcZi4zj5nPLGAWMouYxcwSZimzjFnOrGBWMquY1cwaZi2zjlnPbGA2MpuYzcwWZiuzjdnO7GB2MruY3cweZi+zj4ln9jMHmIPMIeYwc4Q5yhxjjjMnmJPMKeY0c4Y5yyQw55jzzAXmInOJucxcYa4y15jrzA3mJnOLuc3cYe4y95j7zAPmIfOIecw8YZ4yz5jnzAvmJfOKec28YRKZt8w75j3zgfnIfGI+M1+Yr8w35jvzg/nJ/GJ+M0nMH+Yv84+JY5OxydkUbEo2FZuaTcOmZdOx6dkMbEY2E5uZzcJmZbOx2dkcbE42F5ubjbEIi7IYi7MES7IUS7MMy7Icy7MCK7ISK7MKq7KA1VidNVjImqzF2qzDuqzH+mzAhmzE5mHzsvnY/GwBtiBbiC3MFmGLssXY4mwJtiRbii3NlmHLsuXY8mwF1mErsZXZKmxVthpbna3B1mRrsbXZOmxdth5bn23ANmQbsY3ZJmxTthnbnG3BtmRbsa3ZNmxbth3bnu3AdmQ7/b/eD2aHsEPZYewwdgQ7kh3FjmbHsGPZcex4dgI7kZ3ETmansFPZaex0dgY7k53FzmbnsHPZeex8dgG7kF3ELmaXsEvZZexydgW7kl3FrmbXsGvZdex6dgO7kd3Ebma3sFvZbex2dge7k93F7mb3sHvZfWw8u589wB5kD7GH2SPsUfYYe5w9wZ5kT7Gn2TPsWTaBPceeZy+wF9lL7GX2CnuVvcZeZ2+wN9lb7G32DnuXvcfeZx+wD9lH7GP2CfuUfcY+Z1+wL9lX7Gv2DZvIvmXfse/ZD+xH9hP7mf3CfmW/sd/ZH+xP9hf7m01i/7B/2X9sHJeMS86l4FJyqbjUXBouLZeOS89l4DJymbjMXBYuK5eNy87l4HJyubjcXIxDOJTDOJwjOJKjOJpjOJbjOJ4TOJGTOJlTOJUDnMbpnMFBzuQszuYczuU8zucCLuQiLg+Xl8vH5ecKcAW5QlxhrghXlCvGFedKcCW5UlxprgxXlivHlecqcBW5SlxlrgpXlavGVedqcDW5Wlxtrg5Xl6vH1ecacA25RlxjrgnXlGvGNedacC25Vlxrrg3XlmvHtec6cB25TlxnrgvXlevGded6cD25Xlxvrg/Xl+vH9ecGcAO5Qdxgbgg3lBvGDedGcCO5Udxobgw3lhvHjecmcBO5Sdxkbgo3lZvGTedmcDO5Wdxsbg43l5vHzecWcAu5Rdxibgm3lFvGLedWcCu5Vdxqbg23llvHrec2cBu5Tdxmbgu3ldvGbed2cDu5Xdxubg+3l9vHxXP7uQPcQe4Qd5g7wh3ljnHHuRPcSe4Ud5o7w53lErhz3HnuAneRu8Rd5q5wV7lr3HXuBneTu8Xd5u5wd7l73H3uAfeQe8Q95p5wT7ln3HPuBfeSe8W95t5widxb7h33nvvAfeQ+cZ+5L9xX7hv3nfvB/eR+cb+5JO4P95f7x8XxyfjkfAo+JZ+KT82n4dPy6fj0fAY+I5+Jz8xn4bPy2fjsfA4+J5+Lz83HeIRHeYzHeYIneYqneYZneY7neYEXeYmXeYVXecBrvM4bPORN3uJt3uFd3uN9PuBDPuLz8Hn5fHx+vgBfkC/EF+aL8EX5YnxxvgRfki/Fl+bL8GX5cnx5vgJfka/EV+ar8FX5anx1vgZfk6/F1+br8HX5enx9vgHfkG/EN+ab8E35ZnxzvgXfkm/Ft+bb8G35dnx7vgPfke/Ed+a78F35bnx3vgffk+/F9+b78H35fnx/fgA/kB/ED+aH8EP5YfxwfgQ/kh/Fj+bH8GP5cfx4fgI/kZ/ET+an8FP5afx0fgY/k5/Fz+bn8HP5efx8fgG/kF/EL+aX8Ev5ZfxyfgW/kl/Fr+bX8Gv5dfx6fgO/kd/Eb+a38Fv5bfx2fge/k9/F7+b38Hv5fXw8v58/wB/kD/GH+SP8Uf4Yf5w/wZ/kT/Gn+TP8WT6BP8ef5y/wF/lL/GX+Cn+Vv8Zf52/wN/lb/G3+Dn+Xv8ff5x/wD/lH/GP+Cf+Uf8Y//zfo/2w78W/4RP4t/45/z3/gP/Kf+M/8F/4r/43/zv/gf/K/+N98Ev+H/8v/4+OEZEJyIYWQUkglpBbSCGmFdEJ6IYOQUcgkZBayCFmFbEJ2IYeQU8gl5BZiAiKgAibgAiGQAiXQAiOwAifwgiCIgiTIgiKoAhA0QRcMAQqmYAm24Aiu4Am+EAihEAl5hLxCPiG/UEAoKBQSCgtFhKJCMaG4UEIoKZQSSgtlhLJCOaG8UEGoKFQSKgtVhKpCNaG6UEOoKdQSagt1hLpCPaG+0EBoKDQSGgtNhKZCM6G50EJoKbQSWgtthLZCO6G90EHoKHQSOgtdhK5CN6G70EPoKfQSegt9hL5CP6G/MEAYKAwSBgtDhKHCMGG4MEIYKYwSRgtjhLHCOGG8MEGYKEwSJgtThKnCNGG6MEOYKcwSZgtzhLnCPGG+sEBYKCwSFgtLhKXCMmG5sEJYKawSVgtrhLXCOmG9sEHYKGwSNgtbhK3CNmG7sEPYKewSdgt7hL3CPiFe2C8cEA4Kh4TDwhHhqHBMOC6cEE4Kp4TTwhnhrJAgnBPOCxf+P715LbwREoW3wjvhvfBB+Ch8Ej4LX4Svwjfhu/BD+Cn8En4LScIf4a/wT4gTk4nJxRRiSjGVmFpMI6YV04npxQxiRjGTmFnMImYVs4nZxRxiTjGXmFuMiYiIipiIi4RIipRIi4zIipzIi4IoipIoi4qoikDURF00RCiaoiXaoiO6oif6YiCGYiTmEfOK+cT8YgGxoFhILCwWEYuKxcTiYgmxpFhKLC2WEcuK5cTyYgWxolhJrCxWEauK1cTqYg2xplhLrC3WEeuK9cT6YgOxodhIbCw2EZuKzcTmYguxpdhKbC22EduK7cT2Ygexo9hJ7Cx2EbuK3cTuYg+xp9hL7C32EfuK/cT+4gBxoDhIHCwOEYeKw8Th4ghxpDhKHC2OEceK48Tx4gRxojhJnCxOEaeK08Tp4gxxpjhLnC3OEeeK88T54gJxobhIXCwuEZeKy8Tl4gpxpbhKXC2uEdeK68T14gZxo7hJ3CxuEbeK28Tt4g5xp7hL3C3uEfeK+8R4cb94QDwoHhIPi0fEo+Ix8bh4QjwpnhJPi2fEs2KCeE48L14QL4qXxMviFfGqeE28Lt4Qb4q3xNviHfGueE+8Lz4QH4qPxMfiE/Gp+Ex8Lr4QX4qvxNfiGzFRfCu+E9+LH8SP4ifxs/hF/Cp+E7+LP8Sf4i/xt5gk/hH/iv/EOCmZlFxKIaWUUkmppTRSWimdlF7KIGWUMkmZpSxSVimblF3KIeWUckm5pZiESKiESbhESKRESbTESKzESbwkSKIkSbKkSKoEJE3SJUOCkilZki05kit5ki8FUihFUh4pr5RPyi8VkApKhaTCUhGpqFRMKi6VkEpKpaTSUhmprFROKi9VkCpKlaTKUhWpqlRNqi7VkGpKtaTaUh2prlRPqi81kBpKjaTGUhOpqdRMai61kFpKraTWUhuprdROai91kDpKnaTOUhepq9RN6i71kHpKvaTeUh+pr9RP6i8NkAZKg6TB0hBpqDRMGi6NkEZKo6TR0hhprDROGi9NkCZKk6TJ0hRpqjRNmi7NkGZKs6TZ0hxprjRPmi8tkBZKi6TF0hJpqbRMWi6tkFZKq6TV0hpprbROWi9tkDZKm6TN0hZpq7RN2i7tkHZKu6Td0h5pr7RPipf2Swekg9Ih6bB0RDoqHZOOSyekk9Ip6bR0RjorJUjnpPPSBemidEm6LF2RrkrXpOvSDemmdEu6Ld2R7kr3pPvSA+mh9Eh6LD2RnkrPpOfSC+ml9Ep6Lb2REqW30jvpvfRB+ih9kj5LX6Sv0jfpu/RD+in9kn5LSdIf6a/0T4qTk8nJ5RRySjmVnFpOI6eV08np5QxyRjmTnFnOImeVs8nZ5RxyTjmXnFuOyYiMypiMy4RMypRMy4zMypzMy4IsypIsy4qsykDWZF02ZCibsiXbsiO7sif7ciCHciTnkfPK+eT8cgG5oFxILiwXkYvKxeTicgm5pFxKLi2XkcvK5eTycgW5olxJrixXkavK1eTqcg25plxLri3XkevK9eT6cgO5odxIbiw3kZvKzeTmcgu5pdxKbi23kdvK7eT2cge5o9xJ7ix3kbvK3eTucg+5p9xL7i33kfvK/eT+8gB5oDxIHiwPkYfKw+Th8gh5pDxKHi2PkcfK4+Tx8gR5ojxJnixPkafK0+Tp8gx5pjxLni3PkefK8+T58gJ5obxIXiwvkZfKy+Tl8gp5pbxKXi2vkdfK6+T18gZ5o7xJ3ixvkbfK2+Tt8g55p7xL3i3vkffK++R4eb98QD4oH5IPy0fko/Ix+bh8Qj4pn5JPy2fks3KCfE4+L1+QL8qX5MvyFfmqfE2+Lt+Qb8q35NvyHfmufE++Lz+QH8qP5MfyE/mp/Ex+Lr+QX8qv5NfyGzlRfiu/k9/LH+SP8if5s/xF/ip/k7/LP+Sf8i/5t5wk/5H/yv/kOCWZklxJoaRUUimplTRKWiWdkl7JoGRUMimZlSxKViWbkl3JoeRUcim5lZiCKKiCKbhCKKRCKbTCKKzCKbwiKKIiKbKiKKoCFE3RFUOBiqlYiq04iqt4iq8ESqhESh4lr5JPya8UUAoqhZTCShGlqFJMKa6UUEoqpZTSShmlrFJOKa9UUCoqlZTKShWlqlJNqa7UUGoqtZTaSh2lrlJPqa80UBoqjZTGShOlqdJMaa60UFoqrZTWShulrdJOaa90UDoqnZTOShelq9JN6a70UHoqvZTeSh+lr9JP6a8MUAYqg5TByhBlqDJMGa6MUEYqo5TRyhhlrDJOGa9MUCYqk5TJyhRlqjJNma7MUGYqs5TZyhxlrjJPma8sUBYqi5TFyhJlqbJMWa6sUFYqq5TVyhplrbJOWa9sUDYqm5TNyhZlq7JN2a7sUHYqu5Tdyh5lr7JPiVf2KweUg8oh5bByRDmqHFOOKyeUk8op5bRyRjmrJCjnlPPKBeWickm5rFxRrirXlOvKDeWmcku5rdxR7ir3lPvKA+Wh8kh5rDxRnirPlOfKC+Wl8kp5rbxREpW3yjvlvfJB+ah8Uj4rX5Svyjflu/JD+an8Un4rScof5a/yT4lTk6nJ1RRqSjWVmlpNo6ZV06np1QxqRjWTmlnNomZVs6nZ1RxqTjWXmluNqYiKqpiKq4RKqpRKq4zKqpzKq4IqqpIqq4qqqkDVVF01VKiaqqXaqqO6qqf6aqCGaqTmUfOq+dT8agG1oFpILawWUYuqxdTiagm1pFpKLa2WUcuq5dTyagW1olpJraxWUauq1dTqag21plpLra3WUeuq9dT6agO1odpIbaw2UZuqzdTmagu1pdpKba22Uduq7dT2age1o9pJ7ax2Ubuq3dTuag+1p9pL7a32Ufuq/dT+6gB1oDpIHawOUYeqw9Th6gh1pDpKHa2OUceq49Tx6gR1ojpJnaxOUaeq09Tp6gx1pjpLna3OUeeq89T56gJ1obpIXawuUZeqy9Tl6gp1pbpKXa2uUdeq69T16gZ1o7pJ3axuUbeq29Tt6g51p7pL3a3uUfeq+9R4db96QD2oHlIPq0fUo2qquOPqCfWkeko9rZ6hzqoJ6jn1vHpBvaheUi+rV9Sr6jX1unpDvaneUm+rd9S76j31vvpAfag+Uh+rT9Sn6jP1ufpCfam+Ul+rb9RE9a36Tn2vflA/qp/Uz+oX9av6Tf2u/lB/qr/U32qS+kf9q/5T40AykBykAClBKpAapAFpQTqQHmQAGUEmkBlkAVlBNpAd5AA5QS6QG8QAAlCAARwQgAQUoAEDWMABHghABBKQgQJUAIAGdGAACExgARs4wAUe8EEAQhCBPCAvyAfygwKgICgECoMioCgoBoqDEqAkKAVKgzKgLCgHyoMKoCKoBCqDKqAqqAaqgxqgJqgFaoM6oC6oB+qDBqAhaAQagyagKWgGmoMWoCVoBVqDNqAtaAfagw6gI+gEOoMuoCvoBrqDHqAn6AV6gz6gL+gH+oMBYCAYBAaDIWAoGAaGgxFgJBgFRoMxYCwYB8aDCWAimAQmgylgKpgGpoMZYCaYBWaDOWAumAfmgwVgIVgEFoMlYClYBpaDFWAlWAVWgzVgLVgH1oMNYCPYBDaDLWAr2Aa2gx1gJ9gFdoM9YC/YB+LBfnAAHASHwGFwBBwFx8BxcAKcBKfAaXAGnAUJ4Bw4Dy6Ai+ASuAyugKvgGrgOboCb4Ba4De6Au+AeuA8egIfgEXgMnoCn4Bl4Dl6Al+AVeA3egETwFrwD78EH8BF8Ap/BF/AVfAPfwQ/wE/wCv0ES+AP+gn8gTkumJddSaCm1VFpqLY2WVkunpdcyaBm1TFpmLYuWVcumZddyaDm1XFpuLaYhGqphGq4RGqlRGq0xGqtxGq8JmqhJmqwpmqoBTdN0zdCgZmqWZmuO5mqe5muBFmqRlkfLq+XT8msFtIJaIa2wVkQrqhXTimsltJJaKa20VkYrq5XTymsVtIpaJa2yVkWrqlXTqms1tJpaLa22Vkerq9XT6msNtIZaI62x1kRrqjXTmmsttJZaK6211kZrq7XT2msdtI5aJ62z1kXrqnXTums9tJ5aL6231kfrq/XT+msDtIHaIG2wNkQbqg3ThmsjtJHaKG20NkYbq43TxmsTtInaJG2yNkWbqk3TpmsztJnaLG22Nkebq83T5msLtIXaIm2xtkRbqi3TlmsrtJXaKm21tkZbq63T1msbtI3aJm2ztkXbqm3Ttms7tJ3aLm23tkfbq+3T4rX92gHtoHZIO6wd0Y5qx7Tj2gntpHZKO62d0c5qCdo57bx2QbuoXdIua1e0q9o17bp2Q7up3dJua3e0u9o97b72QHuoPdIea0+0p9oz7bn2QnupvdJea2+0RO2t9k57r33QPmqftM/aF+2r9k37rv3Qfmq/tN9akvZH+6v90+L0ZHpyPYWeUk+lp9bT6Gn1dHp6PYOeUc+kZ9az6Fn1bHp2PYeeU8+l59ZjOqKjOqbjOqGTOqXTOqOzOqfzuqCLuqTLuqKrOtA1XdcNHeqm/r/3/0Z6Y72x3lRvpjfX8yYvmLyV3kpvo7fR2+nt9A56R72T3lnvonfVu+rd9R56D72X3lvvo/fV++n99QH6QH2QPlgfrA/Vh+rD9eH6SH2kPlofrY/Vx+rj9fH6RH2iPlmfrE/Vp+rT9en6TH2mPlufrc/V5+rz9fn6Qn2hvlhfrC/Vl+rL9eX6Sn2lvlpfra/V1+rr9fX6Rn2jvlnfrG/Vt+rb9e36Tn2nvlvfre/V9+rxerx+QD+gH9IP6Uf0I/ox/Zh+Qj+hn9JP6Wf0M3qCnqCf18/rF/WL+mX9sn5Vv6pf16/rN/Wb+m39tn5Xv6vf1+/rD/WH+mP9sf5Uf6Y/11/oL/VX+mv9jZ6ov9Xf6e/1D/pH/ZP+Wf+if9W/6d/1H/pP/Zf+W0/S/+h/9X/6/5/9RcmQDcVQDWBohm4YBjRMwzJswzFcwzN8IzBCIzLyGHmNfEZ+o4BR0ChkFDaKGEWNYkZxo4RR0ihllDbKGGWNckZ5o4JR0ahkVDaqGFWNakZ1o4ZR06hl1DbqGHWNekZ9o4HR0GhkNDaaGE2NZkZzo4XR0mhltDbaGG2NdkZ7o4PR0ehkdDa6GF2NbkZ3o4fR0+hl9Db6GH2NfkZ/Y4Ax0BhkDDaGGEONYcZwY4Qx0hhljDbGGGONccZ4Y4Ix0ZhkTDamGFONacZ0Y4Yx05hlzDbmGHONecZ8Y4Gx0FhkLDaWGEuNZcZyY4Wx0lhlrDbWGGuNdcZ6Y4Ox0dhkbDa2GFuNbcZ2Y4ex09hl7Db2GHuNfUa8sd84YBw0DhmHjSPGUeOYcdw4YZw0ThmnjTPGWSPBOGecNy4YF41LxmXjinHVuGZcN24YN41bxm3jjnHXuGfcNx4YD41HxmPjifHUeGY8N14YL41XxmvjjZFovDXeGe+ND8ZH45Px2fhifDW+Gd+NH8ZP45fx20gy/hh/jX9GHEwGk8MUMCVMBVPDNDAtTAfTwwwwI8wEM8MsMCvMBrPDHDAnzAVzwxhEIAoxiEMCkpCCNGQgCznIQwGKUIIyVKAKAdSgDg0IoQktaEMHutCDPgxgCCOYB+aF+WB+WAAWhIVgYVgEFoXFYHFYApaEpWBpWAaWheVgeVgBVoSVYGVYBVaF1WB1WAPWhLVgbVgH1oX1YH3YADaEjWBj2AQ2hc1gc9gCtoStYGvYBraF7WB72AF2hJ1gZ9gFdoXdYHfYA/aEvWBv2Af2hf1gfzgADoSD4GA4BA6Fw+BwOAKOhKPgaDgGjoXj4Hg4AU6Ek+BkOAVOhdPgdDgDzoSz4Gw4B86F8+B8uAAuhIvgYrgELoXL4HK4Aq6Eq+BquAauhevgergBboSb4Ga4BW6F2+B2uAPuhLvgbrgH7oX7YDzcDw/Ag/AQPAyPwKPwGDwOT8CT8BQ8Dc/AszABnoPn4QV4EV6Cl+EVeBVeg9fhDXgT3oK34R14F96D9+ED+BA+go/hE/gUPoPP4Qv4Er6Cr+EbmAjfwnfwPfwAP8JP8DP8Ar/Cb/A7/AF/wl/wN0yCf+Bf+A/GmcnM5GYKM6WZykxtpjHTmunM9GYGM6OZycxsZjGzmtnM7GYOM6eZy8xtxkzERE3MxE3CJE3KpE3GZE3O5E3BFE3JlE3FVE1gaqZuGiY0TdMybdMxXdMzfTMwQzMy85h5zXxmfrOAWdAsZBY2i5hFzWJmcbOEWdIsZZY2y5hlzXJmebOCWdGsZFY2q5hVzWpmdbOGWdOsZdY265h1zXpmfbOB2dBsZDY2m5hNzWZmc7OF2dJsZbY225htzXZme7OD2dHsZHY2u5hdzW5md7OH2dPsZfY2+5h9zX5mf3OAOdAcZA42h5hDzWHmcHOEOdIcZY42x5hjzXHmeHOCOdGcZE42p5hTzWnmdHOGOdOcZc4255hzzXnmfHOBudBcZC42l5hLzWXmcnOFudJcZa4215hrzXXmenODudHcZG42t5hbzW3mdnOHudPcZe4295h7zX1mvLnfPGAeNA+Zh80j5lHzmHncPGGeNE+Zp80z5lkzwTxnnjcvmBfNS+Zl84p51bxmXjdvmDfNW+Zt845517xn3jcfmA/NR+Zj84n51HxmPjdfmC/NV+Zr842ZaL4135nvzQ/mR/OT+dn8Yn41v5nfzR/mT/OX+dtMMv+Yf81/ZpyVzEpupbBSWqms1FYaK62VzkpvZbAyWpmszFYWK6uVzcpu5bByWrms3FbMQizUwizcIizSoizaYizW4izeEizRkizZUizVApZm6ZZhQcu0LMu2HMu1PMu3Aiu0IiuPldfKZ+W3ClgFrUJWYauIVdQqZhW3SlglrVJWaauMVdYqZ5W3KlgVrUpWZauKVdWqZlW3alg1rVpWbauOVdeqZ9W3GlgNrUZWY6uJ1dRqZjW3WlgtrVZWa6uN1dZqZ7W3OlgdrU5WZ6uL1dXqZnW3elg9rV5Wb6uP1dfqZ/W3BlgDrUHWYGuINdQaZg23RlgjrVHWaGuMNdYaZ423JlgTrUnWZGuKNdWaZk23ZlgzrVnWbGuONdeaZ823FlgLrUXWYmuJtdRaZi23VlgrrVXWamuNtdZaZ623NlgbrU3WZmuLtdXaZm23dlg7rV3WbmuPtdfaZ8Vb+60D1kHrkHXYOmIdtY5Zx60T1knrlHXaOmOdtRKsc9Z564J10bpkXbauWFeta9Z164Z107pl3bbuWHete9Z964H10HpkPbaeWE+tZ9Zz64X10nplvbbeWInWW+ud9d76YH20PlmfrS/WV+ub9d36Yf20flm/rSTrj/XX+mfF2cns5HYKO6Wdyk5tp7HT2uns9HYGO6Odyc5sZ7Gz2tns7HYOO6edy85tx2zERm3Mxm3CJm3Kpm3GZm3O5m3BFm3Jlm3FVm1ga7ZuGza0TduybduxXduzfTuwQzuy89h57Xx2fruAXdAuZBe2i9hF7WJ2cbuEXdIuZZe2y9hl7XJ2ebuCXdGuZFe2q9hV7Wp2dbuGXdOuZde269h17Xp2fbuB3dBuZDe2m9hN7WZ2c7uF3dJuZbe229ht7XZ2e7uD3dHuZHe2u9hd7W52d7uH3dPuZfe2+9h97X52f3uAPdAeZA+2h9hD7WH2cHuEPdIeZY+2x9hj7XH2eHuCPdGeZE+2p9hT7Wn2dHuGPdOeZc+259hz7Xn2fHuBvdBeZC+2l9hL7WX2cnuFvdJeZa+219hr7XX2enuDvdHeZG+2t9hb7W32dnuHvdPeZe+299h77X12vL3fPmAftA/Zh+0j9lH7mH3cPmGftE/Zp+0z9lk7wT5nn7cv2BftS/Zl+4p91b5mX7dv2DftW/Zt+459175n37cf2A/tR/Zj+4mdNu6Z/dx+Yb+0X9mv7Td2ov3Wfme/tz/YH+1P9mf7i/3V/mZ/t3/YP+1f9m87yf5j/7X/2XFOMie5k8JJ6aRyUjtpnLROOie9k8HJ6GRyMjtZnKxONie7k8PJ6eRycjsxB3FQB3Nwh3BIh3Joh3FYh3N4R3BER3LSOoqjOsDRHN0xHOiYjuXYjuO4juf4TuCETuTkcfI6+Zz8TgGnoFPIKewUcYo6xZziTgmnpFPKKe2Ucco65ZzyTgWnolPJqexUcao61ZzqTg2nplPLqe3Uceo69Zz6TgOnodPIaew0cZo6zZzmTgunpdPKae20cdo67Zz2Tgeno9PJ6ex0cbo63ZzuTg+np9PL6e30cfo6/Zz+zgBnoDPIGewMcYY6w5zhzghnpDPKGe2MccY645zxzgRnojPJmexMcaY605zpzgxnpjPLme3MceY685z5zgJnobPIWewscZY6y5zlzgpnpbPKWe2scdY665z1zgZno7PJ2exscbY625ztzg5np7PL2e3scfY6+5x4Z79zwDnoHHIOO0eco84x57hzwjnpnHJOO2ecs06Cc84571xwLjqXnMvOFeeqc8257txwbjq3nNvOHeeuc8+57zxwHjqPnMfOE+ep88x57rxwXjqvnNfOGyfReeu8c947H5yPzifns/PF+ep8c747P5yfzi/nt5Pk/HH+Ov+cODeZm9xN4aZ0U7mp3TRuWjedm97N4GZ0M7mZ3SxuVjebm93N4eZ0c7m53ZiLuKiLubhLuKRLubTLuKzLubwruKIrubKruKoLXM3VXcOFrularu06rut6ru8GbuhGbh43r5vPze8WcAu6hdzCbhG3qFvMLe6WcEu6pdzSbhm3rFvOLe9WcCu6ldzKbhW3qlvNre7WcGu6tdzabh23rlvPre82cBu6jdzGbhO3qdvMbe62cFu6rdzWbhu3rdvObe92cDu6ndzObhe3q9vN7e72cHu6vdzebh+3r9vP7e8OcAe6g9zB7hB3qDvMHe6OcEe6o9zR7hh3rDvOHe9OcCe6k9zJ7hR3qjvNne7OcGe6s9zZ7hx3rjvPne8ucBe6i9zF7hJ3qbvMXe6ucFe6q7z/a9+ou97d4G50N7mb3S3uVnebu93d4e50d7m73T3uXnefG+/udw+4B91D7mH3iHvUPeYed0+4J91T7mn3jHvWTXDPuefdC+5F95J72b3iXnWvudfdG+5N95Z7273j3nXvuffdB+5D95H72H3iPnWfuc/dF+5L95X72n3jJrpv3Xfue/eD+9H95H52v7hf3W/ud/eH+9P95f52k9w/7l/3nxvnJfOSeym8lF4qL7WXxkvrpfPSexm8jF4mL7OXxcvqZfOyezm8nF4uL7cX8xAP9TAP9wiP9CiP9hiP9TiP9wRP9CRP9hRP9YCnebpneNAzPcuzPcdzPc/zvcALvcjL4+X18nn5vQJeQa+QV9gr4hX1innFvRJeSa+UV9or45X1ynnlvQpeRa+SV9mr4lX1qnnVvRpeTa+WV9ur49X16nn1vQZeQ6+R19hr4jX1mnnNvRZeS6+V19pr47X12nntvQ5eR6+T19nr4nX1unndvR5eT6+X19vr4/X1+nn9vQHeQG+QN9gb4g31hnnDvRHeSG+UN9ob4431xnnjvQneRG+SN9mb4k31pnnTvRneTG+WN9ub48315nnzvQXeQm+Rt9hb4i31lnnLvRXeSm+Vt9pb46311nnrvQ3eRm+Tt9nb4m31tnnbvR3eTm+Xt9vb4+319nnx3n7vgHfQO+Qd9o54R71j3nHvhHfSO+Wd9s54Z70E75x33rvgXfQueZe9K95V75p33bvh3fRuebe9O95d755333vgPfQeeY+9J95T75n33HvhvfReea+9N16i99Z75733PngfvU/eZ++L99X75n33fng/vV/eby/J++P99f55cX4yP7mfwk/pp/JT+2n8tH46P72fwc/oZ/Iz+1n8rH42P7ufw8/p5/Jz+zEf8VEf83Gf8Emf8mmf8Vmf83lf8EVf8mVf8VUf+Jqv+4YPfdO3fNt3fNf3fN8P/NCP/Dx+Xj+fn98v4Bf0C/mF/SJ+Ub+YX9wv4Zf0S/mp4uLiyvrl/PJ+Bb+iX8mv7Ffxq/rV/Op+Db+mX8uv7dfx6/r1/Pp+A7+h38hv7Dfxm/rN/OZ+C7+l38pv7bfx2/rt/PZ+B7+j38nv7Hfxu/rd/O5+D7+n38vv7ffx+/r9/P7+AH+gP8gf7A/xh/rD/OH+CH+kP8of7Y/xx/rj/PH+BH+iP8mf7E/xp/rT/On+DH+mP8uf7c/x5/rz/Pn+An+hv8hf7C/xl/rL/OX+Cn+lv8pf7a/x1/rr/PX+Bn+jv8nf7G/xt/rb/O3+Dn+nv8vf7e/x9/r7/Hh/v3/AP+gf8g/7R/yj/jH/uH/CP+mf8k/7Z/yzfoJ/zj/vX/Av+pf8y/4V/6p/zb/u3/Bv+rf82/4d/65/z7/vP/Af+o/8x/4T/6n/zH/uv/Bf+q/81/4bP9F/67/z3/sf/I/+J/+z/8X/6n/zv/s//J/+L/+3n+T/8f/6//y4IFmQPEgRpAxSBamDNEHaIF2QPsgQZAwyBZmDLEHWIFuQPcgR5AxyBbmDWIAEaIAFeEAEZEAFdMAEbMAFfCAEYiAFcqAEagACLdADI4CBGViBHTiBG3iBHwRBGERBniBvkC/IHxQICgaFgsJBkaBoUCwoHpQISgalgtJBmaBsUC4oH1QIKgaVgspBlaBqUC2oHtQIaga1gtpBnaBuUC+oHzQIGgaNgsZBk6Bp0CxoHrQIWgatgtZBm6Bt0C5oH3QIOgadgs5Bl6Br0C3oHvQIega9gt5Bn6Bv0C/oHwwIBgaDgsHBkGBoMCwYHowIRgajgtHBmGBsMC4YH0wIJgaTgsnBlGBqMC2YHswIZgazgtnBnGBuMC+YHywIFgaLgsXBkmBpsCxYHqwIVgargtXBmmBtsC5YH2wINgabgs3BlmBrsC3YHuwIdga7gt3BnmBvsC+ID/YHB4KDwaHgcHAkOBocC44HJ4KTwangdHAmOBskBOeC88GF4GJwKbgcXAmuBteC68GN4GZwK7gd3AnuBveC+8GD4GHwKHgcPAmeBs+C58GL4GXwKngdvAkSg7fBu+B98CH4GHwKPgdfgq/Bt+B78CP4GfwKfgdJwZ/gb/AviAuThcnDFGHKMFWYOkwTpg3ThenDDGHGMFOYOcwSZg2zhdnDHGHOMFeYO4yFSIiGWIiHREiGVEiHTMiGXMiHQiiGUiiHSqiGINRCPTRCGJqhFdqhE7qhF/phEIZhFOYJ84b5wvxhgbBgWCgsHBYJi4bFwuJhibBkWCosHZYJy4blwvJhhbBiWCmsHFYJq4bVwuphjbBmWCusHdYJ64b1wvphg7Bh2ChsHDYJm4bNwuZhi7Bl2CpsHbYJ24btwvZhh7Bj2CnsHHYJu4bdwu5hj7Bn2CvsHfYJ+4b9wv7hgHBgOCgcHA4Jh4bDwuHhiHBkOCocHY4Jx4bjwvHhhHBiOCmcHE4Jp4bTwunhjHBmOCucHc4J54bzwvnhgnBhuChcHC4Jl4bLwuXhinBluCpcHa4J14brwvXhhnBjuCncHG4Jt4bbwu3hjnBnuCvcHe4J94b7wvhwf3ggPBgeCg+HR8Kj4bHweHgiPBmeCk+HZ8KzYUJ4LjwfXggvhpfCy+GV8Gp4Lbwe3ghvhrfC2+Gd8G54L7wfPggfho/Cx+GT8Gn4LHwevghfhq/C1+GbMDF8G74L34cfwo/hp/Bz+CX8Gn4Lv4c/wp/hr/B3mBT+Cf+G/8K4KFmUPEoRpYxSRamjNFHaKF2UPsoQZYwyRZmjLFHWKFuUPcoR5YxyRbmjWIREaIRFeEREZERFdMREbMRFfCREYiRFcqREagQiLdIjI4KRGVmRHTmRG3mRHwVRGEVRnihvlC/KHxWICkaFosJRkahoVCwqHpWISkalotJRmahsVC4qH1WIKkaVospRlahqVC2qHtWIaka1otpRnahuVC+qHzWIGkaNosZRk6hp1CxqHrWIWkatotZRm6ht1C5qH3WIOkados5Rl6hr1C3qHvWIeka9ot5Rn6hv1C/qHw2IBkaDosHRkGhoNCwaHo2IRkajotHRmOj/oBiewsXYEQAAn9q2bXtsW0mmtm3btt3e2rZt27bt/fbhH4WNxsZgY7Fx2HhsAjYRm4RNxqZgU7Fp2HRsBjYTm4XNxuZgc7F52HxsAbYQW4Qtxv7DlmBLsWXYcmwFthJbha3G1mBrsXXYemwDthHbhG3GtmBbsW3YdmwHthPbhe3G9mB7sX3YfuwAdhA7hB3GjmBHsWPYcewEdhI7hZ3GzmBnsXPYeewCdhG7hF3GrmBXsWvYdewGdhO7hd3G7mB3sXvYfewB9hB7hD3GnmBPsWfYc+wF9hJ7hb3G3mBvsXfYe+wD9hH7hH3GvmBfsW/Yd+wH9hP7hf3G/mB/sX9YAp4IT4wnwZPiyfDkeAo8JZ4KT42nwdPi6fD0eAY8I54Jz4xnwbPi2fDseA48J54Lz43nwfPi+fD8eAG8IF4IL4wXwYvixfDieAm8JF4KL42Xwcvi5fDyeAW8Il4Jr4xXwavi1fDqeA0cw3GcwEmcwmmcwVmcw3lcwEVcwmVcwVVcw3XcwE3cwm3cwV3cw308wEM8wgEOcYTHeE28Fl4br4PXxevh9fEGeEO8Ed4Yb4I3xZvhzfEWeEu8Fd4ab4O3xdvh7fEOeEe8E94Z74J3xbvh3fEeeE+8F94b74P3xfvh/fEB+EB8ED4YH4IPxYfhw/ER+Eh8FD4aH4OPxcfh4/EJ+ER8Ej4Zn4JPxafh0/EZ+Ex8Fj4bn4PPxefh8/EF+EJ8Eb4Y/w9fgi/Fl+HL8RX4SnwVvhpfg6/F1+Hr8Q34RnwTvhnfgm/Ft+Hb8R34TnwXvhvfg+/F9+H78QP4QfwQfhg/gh/Fj+HH8RP4SfwUfho/g5/Fz+Hn8Qv4RfwSfhm/gl/Fr+HX8Rv4TfwWfhu/g9/F7+H38Qf4Q/wR/hh/gj/Fn+HP8Rf4S/wV/hp/g7/F3+Hv8Q/4R/wT/hn/gn/Fv+Hf8R/4T/wX/hv/g//F/+EJRCIiMZGESEokI5ITKYiURCoiNZGGSEukI9ITGYiMRCYiM5GFyEpkI7ITOYicRC4iN5GHyEvkI/ITBYiCRCGiMFGEKEoUI4oTJYiSRCmiNFGGKEuUI8oTFYiKRCWiMlGFqEpUI6oTNQiMwAmCIAmKoAmGYAmO4AmBEAmJkAmFUAmN0AmDMAmLsAmHcAmP8ImACImIAAQkEBETNYlaRG2iDlGXqEfUJxoQDYlGRGOiCdGUaEY0J1oQLYlWRGuiDdGWaEe0JzoQHYlORGeiC9GV6EZ0J3oQPYleRG+iD9GX6Ef0JwYQA4lBxGBiCDGUGEYMJ0YQI4lRxGhiDDGWGEeMJyYQE4lJxGRiCjGVmEZMJ2YQM4lZxGxiDjGXmEfMJxYQC4lFxGLiP2IJsZRYRiwnVhAriVXEamINsZZYR6wnNhAbiU3EZmILsZXYRmwndhA7iV3EbmIPsZfYR+wnDhAHiUPEYeIIcZQ4RhwnThAniVPEaeIMcZY4R5wnLhAXiUvEZeIKcZW4RlwnbhA3iVvEbeIOcZe4R9wnHhAPiUfEY+IJ8ZR4RjwnXhAviVfEa+IN8ZZ4R7wnPhAfiU/EZ+IL8ZX4RnwnfhA/iV/Eb+IP8Zf4RySQicjEZBIyKZmMTE6mIFOSqcjUZBoyLZmOTE9mIDOSmcjMZBYyK5mNzE7mIHOSucjcZB4yL5mPzE8WIAuShcjCZBGyKFmMLE6WIEuSpcjSZBmyLFmOLE9WICuSlcjKZBWyKlmNrE7WIDESJwmSJCmSJhmSJTmSJwVSJCVSJhVSJTVSJw3SJC3SJh3SJT3SJwMyJCMSkJBEZEzWJGuRtck6ZF2yHlmfbEA2JBuRjckmZFOyGdmcbEG2JFuRrck2ZFuyHdme7EB2JDuRnckuZFeyG9md7EH2JHuRvck+ZF+yH9mfHEAOJAeRg8kh5FByGDmcHEGOJEeRo8kx5FhyHDmenEBOJCeRk8kp5FRyGjmdnEHOJGeRs8k55FxyHjmfXEAuJBeRi8n/yCXkUnIZuZxcQa4kV5GryTXkWnIduZ7cQG4kN5GbyS3kVnIbuZ3cQe4kd5G7yT3kXnIfuZ88QB4kD5GHySPkUfIYeZw8QZ4kT5GnyTPkWfIceZ68QF4kL5GXySvkVfIaeZ28Qd4kb5G3yTvkXfIeeZ98QD4kH5GPySfkU/IZ+Zx8Qb4kX5GvyTfkW/Id+Z78QH4kP5GfyS/kV/Ib+Z38Qf4kf5G/yT/kX/IfmUAlohJTSaikVDIqOZWCSkmlolJTaai0VDoqPZWBykhlojJTWaisVDYqO5WDyknlonJTeai8VD4qP1WAKkgVogpTRaiiVDGqOFWCKkmVokpTZaiyVDmqPFWBqkhVoipTVaiqVDWqOlWDwiicIiiSoiiaYiiW4iieEiiRkiiZUiiV0iidMiiTsiibciiX8iifCqiQiihAQQpRMVWTqkXVpupQdal6VH2qAdWQakQ1pppQTalmVHOqBdWSakW1ptpQbal2VHuqA9WR6kR1prpQXaluVHeqB9WT6kX1pvpQfal+VH9qADWQGkQNpoZQQ6lh1HBqBDWSGkWNpsZQY6lx1HhqAjWRmkRNpqZQU6lp1HRqBjWTmkXNpuZQc6l51HxqAbWQWkQtpv6jllBLqWXUcmoFtZJaRa2m1lBrqXXUemoDtZHaRG2mtlBbqW3UdmoHtZPaRe2m9lB7qX3UfuoAdZA6RB2mjlBHqWPUceoEdZI6RZ2mzlBnqXPUeeoCdZG6RF2mrlBXqWvUdeoGdZO6Rd2m7lB3qXvUfeoB9ZB6RD2mnlBPqWfUc+oF9ZJ6Rb2m3lBvqXfUe+oD9ZH6RH2mvlBfqW/Ud+oH9ZP6Rf2m/lB/qX9UAp2ITkwnoZPSyejkdAo6JZ2KTk2nodPS6ej0dAY6I52JzkxnobPS2ejsdA46J52Lzk3nofPS+ej8dAG6IF2ILkwXoYvSxejidAm6JF2KLk2XocvS5ejydAW6Il2JrkxXoavS1ejqdA0ao3GaoEmaommaoVmao3laoEVaomVaoVVao3XaoE3aom3aoV3ao306oEM6ogENaUTHdE26Fl2brkPXpevR9ekGdEO6Ed2YbkI3pZvRzekWdEu6Fd2abkO3pdvR7ekOdEe6E92Z7kJ3pbvR3ekedE+6F92b7kP3pfvR/ekB9EB6ED2YHkIPpYfRw+kR9Eh6FD2aHkOPpcfR4+kJ9ER6Ej2ZnkJPpafR0+kZ9Ex6Fj2bnkPPpefR8+kF9EJ6Eb2Y/o9eQi+ll9HL6RX0SnoVvZpeQ6+l19Hr6Q30RnoTvZneQm+lt9Hb6R30TnoXvZveQ++l99H76QP0QfoQfZg+Qh+lj9HH6RP0SfoUfZo+Q5+lz9Hn6Qv0RfoSfZm+Ql+lr9HX6Rv0TfoWfZu+Q9+l79H36Qf0Q/oR/Zh+Qj+ln9HP6Rf0S/oV/Zp+Q7+l39Hv6Q/0R/oT/Zn+Qn+lv9Hf6R/0T/oX/Zv+Q/+l/9EJTCImMZOEScokY5IzKZiUTComNZOGScukY9IzGZiMTCYmM5OFycpkY7IzOZicTC4mN5OHycvkY/IzBZiCTCGmMFOEKcoUY4ozJZiSTCmmNFOGKcuUY8ozFZiKTCWmMlOFqcpUY6ozNRiMwRmCIRmKoRmGYRmO4RmBERmJkRmFURmN0RmDMRmLsRmHcRmP8ZmACZmIAQxkEBMzNZlaTG2mDlOXqcfUZxowDZlGTGOmCdOUacY0Z1owLZlWTGumDdOWace0ZzowHZlOTGemC9OV6cZ0Z3owPZleTG+mD9OX6cf0ZwYwA5lBzGBmCDOUGcYMZ0YwI5lRzGhmDDOWGceMZyYwE5lJzGRmCjOVmcZMZ2YwM5lZzGxmDjOXmcfMZxYwC5lFzGLmP2YJs5RZxixnVjArmVXMamYNs5ZZx6xnNjAbmU3MZmYLs5XZxmxndjA7mV3MbmYPs5fZx+xnDjAHmUPMYeYIc5Q5xhxnTjAnmVPMaeYMc5Y5x5xnLjAXmUvMZeYKc5W5xlxnbjA3mVvMbeYOc5e5x9xnHjAPmUfMY+YJ85R5xjxnXjAvmVfMa+YN85Z5x7xnPjAfmU/MZ+YL85X5xnxnfjA/mV/Mb+YP85f5xySwidjEbBI2KZuMTc6mYFOyqdjUbBo2LZuOTc9mYDOymdjMbBY2K5uNzc7mYHOyudjcbB42L5uPzc8WYAuyhdjCbBG2KFuMLc6WYEuypdjSbBm2LFuOLc9WYCuyldjKbBW2KluNrc7WYDEWZwmWZCmWZhmWZTmWZwVWZCVWZhVWZTVWZw3WZC3WZh3WZT3WZwM2ZCMWsJBFbMzWZGuxtdk6bF22HlufbcA2ZBuxjdkmbFO2GducbcG2ZFuxrdk2bFu2Hdue7cB2ZDuxndkubFe2G9ud7cH2ZHuxvdk+bF+2H9ufHcAOZAexg9kh7FB2GDucHcGOZEexo9kx7Fh2HDuencBOZCexk9kp7FR2GjudncHOZGexs9k57Fx2HjufXcAuZBexi9n/2CXsUnYZu5xdwa5kV7Gr2TXsWnYdu57dwG5kN7Gb2S3sVnYbu53dwe5kd7G72T3sXnYfu589wB5kD7GH2SPsUfYYe5w9wZ5kT7Gn2TPsWfYce569wF5kL7GX2SvsVfYae529wd5kb7G32TvsXfYee599wD5kH7GP2SfsU/YZ+5x9wb5kX7Gv2TfsW/Yd+579wH5kP7Gf2S/sV/Yb+539wf5kf7G/2T/sX/Yfm8Al4hJzSbikXDIuOZeCS8ml4lJzabi0XDouPZeBy8hl4jJzWbisXDYuO5eDy8nl4nJzebi8XD4uP1eAK8gV4gpzRbiiXDGuOFeCK8mV4kpzZbiyXDmuPFeBq8hV4ipzVbiqXDWuOleDwzicIziSoziaYziW4zieEziRkziZUziV0zidMziTszibcziX8zifC7iQizjAQQ5xMVeTq8XV5upwdbl6XH2uAdeQa8Q15ppwTblmXHOuBdeSa8W15tpwbbl2XHuuA9eR68R15rpwXbluXHeuB9eT68X15vpwfbl+XH9uADeQG8QN5oZwQ7lh3HBuBDeSG8WN5sZwY7lx3HhuAjeRm8RN5qZwU7lp3HRuBjeTm8XN5uZwc7l53HxuAbeQW8Qt5v7jlnBLuWXccm4Ft5Jbxa3m1nBruXXcem4Dt5HbxG3mtnBbuW3cdm4Ht5Pbxe3m9nB7uX3cfu4Ad5A7xB3mjnBHuWPcce4Ed5I7xZ3mznBnuXPcee4Cd5G7xF3mrnBXuWvcde4Gd5O7xd3m7nB3uXvcfe4B95B7xD3mnnBPuWfcc+4F95J7xb3m3nBvuXfce+4D95H7xH3mvnBfuW/cd+4H95P7xf3m/nB/uX9cAp+IT8wn4ZPyyfjkfAo+JZ+KT82n4dPy6fj0fAY+I5+Jz8xn4bPy2fjsfA4+J5+Lz83n4fPy+fj8fAG+IF+IL8wX4YvyxfjifAm+JF+KL82X4cvy5fjyfAW+Il+Jr8xX4avy1fjqfA0e43Ge4Eme4mme4Vme43le4EVe4mVe4VVe43Xe4E3e4m3e4V3e430+4EM+4gEPecTHfE2+Fl+br8PX5evx9fkGfEO+Ed+Yb8I35ZvxzfkWfEu+Fd+ab8O35dvx7fkOfEe+E9+Z78J35bvx3fkefE++F9+b78P35fvx/fkB/EB+ED+YH8IP5Yfxw/kR/Eh+FD+aH8OP5cfx4/kJ/ER+Ej+Zn8JP5afx0/kZ/Ex+Fj+bn8PP5efx8/kF/EJ+Eb+Y/49fwi/ll/HL+RX8Sn4Vv5pfw6/l1/Hr+Q38Rn4Tv5nfwm/lt/Hb+R38Tn4Xv5vfw+/l9/H7+QP8Qf4Qf5g/wh/lj/HH+RP8Sf4Uf5o/w5/lz/Hn+Qv8Rf4Sf5m/wl/lr/HX+Rv8Tf4Wf5u/w9/l7/H3+Qf8Q/4R/5h/wj/ln/HP+Rf8S/4V/5p/w7/l3/Hv+Q/8R/4T/5n/wn/lv/Hf+R/8T/4X/5v/w//l//EJQiIhsZBESCokE5ILKYSUQiohtZBGSCukE9ILGYSMQiYhs5BFyCpkE7ILOYScQi4ht5BHyCvkE/ILBYSCQiGhsFBEKCoUE4oLJYSSQimhtFBGKCuUE8oLFYSKQiWhslBFqCpUE6oLNQRMwAVCIAVKoAVGYAVO4AVBEAVJkAVFUAVN0AVDMAVLsAVHcAVP8IVACIVIAAIUkBALNYVaQm2hjlBXqCfUFxoIDYVGQmOhidBUaCY0F1oILYVWQmuhjdBWaCe0FzoIHYVOQmehi9BV6CZ0F3oIPYVeQm+hj9BX6Cf0FwYIA4VBwmBhiDBUGCYMF0YII4VRwmhhjDBWGCeMFyYIE4VJwmRhijBVmCZMF2YIM4VZwmxhjjBXmCfMFxYIC4VFwmLhP2GJsFRYJiwXVggrhVXCamGNsFZYJ6wXNggbhU3CZmGLsFXYJmwXdgg7hV3CbmGPsFfYJ+wXDggHhUPCYeGIcFQ4JhwXTggnhVPCaeGMcFY4J5wXLggXhUvCZeGKcFW4JlwXbgg3hVvCbeGOcFe4J9wXHggPhUfCY+GJ8FR4JjwXXggvhVfCa+GN8FZ4J7wXPggfhU/CZ+GL8FX4JnwXfgg/hV/Cb+GP8Ff4JySIicTEYhIxqZhMTC6mEFOKqcTUYhoxrZhOTC9mEDOKmcTMYhYxq5hNzC7mEHOKucTcYh4xr5hPzC8WEAuKhcTCYhGxqFhMLC6WEEuKpcTSYhmxrFhOLC9WECuKlcTKYhWxqlhNrC7WEDERFwmRFCmRFhmRFTmRFwVRFCVRFhVRFTVRFw3RFC3RFh3RFT3RFwMxFCMRiFBEYizWFGuJtcU6Yl2xnlhfbCA2FBuJjcUmYlOxmdhcbCG2FFuJrcU2Yluxndhe7CB2FDuJncUuYlexm9hd7CH2FHuJvcU+Yl+xn9hfHCAOFAeJg8Uh4lBxmDhcHCGOFEeJo8Ux4lhxnDhenCBOFCeJk8Up4lRxmjhdnCHOFGeJs8U54lxxnjhfXCAuFBeJi8X/xCXiUnGZuFxcIa4UV4mrxTXiWnGduF7cIG4UN4mbxS3iVnGbuF3cIe4Ud4m7xT3iXnGfuF88IB4UD4mHxSPiUfGYeFw8IZ4UT4mnxTPiWfGceF68IF4UL4mXxSviVfGaeF28Id4Ub4m3xTviXfGeeF98ID4UH4mPxSfiU/GZ+Fx8Ib4UX4mvxTfiW/Gd+F78IH4UP4mfxS/iV/Gb+F38If4Uf4m/xT/iX/GfmCAlkhJLSaSkUjIpuZRCSimlklJLaaS0UjopvZRByihlkjJLWaSsUjYpu5RDyinlknJLeaS8Uj4pv1RAKigVkgpLRaSiUjGpuFRCKimVkkpLZaSyUjmpvFRBqihVkipLVaSqUjWpulRDwiRcIiRSoiRaYiRW4iReEiRRkiRZUiRV0iRdMiRTsiRbciRX8iRfCqRQiiQgQQlJsVRTqiXVlupIdaV6Un2pgdRQaiQ1lppITaVmUnOphdRSaiW1ltpIbaV2Unupg9RR6iR1lrpIXaVuUneph9RT6iX1lvpIfaV+Un9pgDRQGiQNloZIQ6Vh0nBphDRSGiWNlsZIY6Vx0nhpgjRRmiRNlqZIU6Vp0nRphjRTmiXNluZIc6V50nxpgbRQWiQtlv6TlkhLpWXScmmFtFJaJa2W1khrpXXSemmDtFHaJG2WtkhbpW3SdmmHtFPaJe2W9kh7pX3SfumAdFA6JB2WjkhHpWPScemEdFI6JZ2WzkhnpXPSeemCdFG6JF2WrkhXpWvSdemGdFO6Jd2W7kh3pXvSfemB9FB6JD2WnkhPpWfSc+mF9FJ6Jb2W3khvpXfSe+mD9FH6JH2WvkhfpW/Sd+mH9FP6Jf2W/kh/pX9SgpxITiwnkZPKyeTkcgo5pZxKTi2nkdPK6eT0cgY5o5xJzixnkbPK2eTscg45p5xLzi3nkfPK+eT8cgG5oFxILiwXkYvKxeTicgm5pFxKLi2XkcvK5eTycgW5olxJrixXkavK1eTqcg0Zk3GZkEmZkmmZkVmZk3lZkEVZkmVZkVVZk3XZkE3Zkm3ZkV3Zk305kEM5koEMZSTHck25llxbriPXlevJ9eUGckO5kdxYbiI3lZvJzeUWcku5ldxabiO3ldvJ7eUOcke5k9xZ7iJ3lbvJ3eUeck+5l9xb7iP3lfvJ/eUB8kB5kDxYHiIPlYfJw+UR8kh5lDxaHiOPlcfJ4+UJ8kR5kjxZniJPlafJ0+UZ8kx5ljxbniPPlefJ8+UF8kJ5kbxY/k9eIi+Vl8nL5RXySnmVvFpeI6+V18nr5Q3yRnmTvFneIm+Vt8nb5R3yTnmXvFveI++V98n75QPyQfmQfFg+Ih+Vj8nH5RPySfmUfFo+I5+Vz8nn5QvyRfmSfFm+Il+Vr8nX5RvyTfmWfFu+I9+V78n35QfyQ/mR/Fh+Ij+Vn8nP5RfyS/mV/Fp+I7+V38nv5Q/yR/mT/Fn+In+Vv8nf5R/yT/mX/Fv+I/+V/8kJSiIlsZJESaokU5IrKZSUSioltZJGSaukU9IrGZSMSiYls5JFyapkU7IrOZScSi4lt5JHyavkU/IrBZSCSiGlsFJEKaoUU4orJZSSSimltFJGKauUU8orFZSKSiWlslJFqapUU6orNRRMwRVCIRVKoRVGYRVO4RVBERVJkRVFURVN0RVDMRVLsRVHcRVP8ZVACZVIAQpUkBIrNZVaSm2ljlJXqafUVxooDZVGSmOlidJUaaY0V1ooLZVWSmuljdJWaae0VzooHZVOSmeli9JV6aZ0V3ooPZVeSm+lj9JX6af0VwYoA5VBymBliDJUGaYMV0YoI5VRymhljDJWGaeMVyYoE5VJymRlijJVmaZMV2YoM5VZymxljjJXmafMVxYoC5VFymLlP2WJslRZpixXVigrlVXKamWNslZZp6xXNigblU3KZmWLslXZpmxXdig7lV3KbmWPslfZp+xXDigHlUPKYeWIclQ5phxXTignlVPKaeWMclY5p5xXLigXlUvKZeWKclW5plxXbig3lVvKbeWOcle5p9xXHigPlUfKY+WJ8lR5pjxXXigvlVfKa+WN8lZ5p7xXPigflU/KZ+WL8lX5pnxXfig/lV/Kb+WP8lf5pySoidTEahI1qZpMTa6mUFOqqdTUaho1rZpOTa9mUDOqmdTMahY1q5pNza7mUHOqudTcah41r5pPza8WUAuqhdTCahG1qFpMLa6WUEuqpdTSahm1rFpOLa9WUCuqldTKahW1qlpNra7WUDEVVwmVVCmVVhmVVTmVVwVVVCVVVhVVVTVVVw3VVC3VVh3VVT3VVwM1VCMVqFBFaqzWVGuptdU6al21nlpfbaA2VBupjdUmalO1mdpcbaG2VFuprdU2alu1ndpe7aB2VDupndUuale1m9pd7aH2VHupvdU+al+1n9pfHaAOVAepg9Uh6lB1mDpcHaGOVEepo9Ux6lh1nDpenaBOVCepk9Up6lR1mjpdnaHOVGeps9U56lx1njpfXaAuVBepixMSEhLUpeoydbm6Ql2prlJXq2vUteo6db26Qd2oblI3q1vUreo2dbu6Q92p7lJ3q3vUveo+db96QD2oHlIPq0fUo+ox9bh6Qj2pnlJPq2fUs+o59bx6Qb2oXlIvq1fUq+o19bp6Q72p3lJvq3fUu+o99b76QH2oPlIfq0/Up+oz9bn6Qn2pvlJfq2/Ut+o79b36Qf2oflI/q1/Ur+o39bv6Q/2p/lJ/q3/Uv+o/NUFLpCXWkmhJtWRaci2FllJLpaXW0mhptXRaei2DllHLpGXWsmhZtWxadi2HllPLpeXW8mh5tXxafq2AVlArpBXWimhFtWJaca2EVlIrpZXWymhltXJaea2CVlGrpFXWqmhVtWpada2Ghmm4RmikRmm0xmisxmm8JmiiJmmypmiqpmm6ZmimZmm25miu5mm+FmihFmlAgxrSYq2mVkurrdXR6mr1tPpaA62h1khrrDXRmmrNtOZaC62l1kprrbXR2mrttPZaB62j1knrrHXRumrdtO5aD62n1kvrrfXR+mr9tP7aAG2gNkgbrA3RhmrDtOHaCG2kNkobrY3RxmrjtPHaBG2iNkmbrE3RpmrTtOnaDG2mNkubrc3R5mrztPnaAm2htkhbrP2nLdGWasu05doKbaW2SlutrdHWauu09doGbaO2SdusbdG2atu07doObae2S9ut7dH2avu0/doB7aB2SDusHdGOase049oJ7aR2SjutndHOaue089oF7aJ2SbusXdGuate069oN7aZ2S7ut3dHuave0+9oD7aH2SHusPdGeas+059qLZAkJCdpr7Y32Vnunvdc+aB+1T9pn7Yv2Vfumfdd+aD+1X9pv7Y/2V/unJeiJ9MR6Ej2pnkxPrqfQU+qp9NR6Gj2tnk5Pr2fQM+qZ9Mx6Fj2rnk3PrufQc+q59Nx6Hj2vnk/PrxfQC+qF9MJ6Eb2oXkwvrpfQS+ql9NJ6Gb2sXk4vr1fQK+qV9Mp6Fb2qXk2vrtfQMR3XCZ3UKZ3WGZ3VOZ3XBV3UJV3WFV3VNV3XDd3ULd3WHd3VPd3XAz3UIx3oUEd6rNfUa+m19Tp6Xb2eXl9voDfUG+mN9SZ6U72Z3lxvobfUW+mt9TZ6W72d3l7voHfUO+md9S56V72b3l3voffUe+m99T56X72f3l8foA/UB+mD9SH6UH2YPlwfoY/UR+mj9TH6WH2cPl6foE/UJ+mT9Sn6VH2aPl2foc/UZ+mz9Tn6XH2ePl9foC/UF+mL9f/0JfpSfZm+XF+hr9RX6av1NfpafZ2+Xt+gb9Q36Zv1LfpWfZu+Xd+h79R36bv1PfpefZ++Xz+gH9QP6Yf1I/pR/Zh+XD+hn9RP6af1M/pZ/Zx+Xr+gX9Qv6Zf1K/pV/Zp+Xb+h39Rv6bf1O/pd/Z5+X3+gP9Qf6Y/1J/pT/Zn+XH+hv9Rf6a/1N/pb/Z3+Xv+gf9Q/6Z/1L/pX/Zv+Xf+h/9R/6b/1P/pf/Z+eYCQyEhtJjKRGMiO5kcJIaaQyUhtpjLRGOiO9kcHIaGQyMhtZjKxGNiO7kcPIaeQycht5jLxGPiO/UcAoaBQyChtFjKJGMaO4UcIoaZQyShtljLJGOaO8UcGoaFQyKhtVjKpGNaO6UcPADNwgDNKgDNpgDNbgDN4QDNGQDNlQDNXQDN0wDNOwDNtwDNfwDN8IjNCIDGBAAxmxUdOoZdQ26hh1jXpGfaOB0dBoZDQ2mhhNjWZGc6OF0dJoZbQ22hhtjXZGe6OD0dHoZHQ2uhhdjW5Gd6OH0dPoZfQ2+hh9jX5Gf2OAMdAYZAw2hhhDjWHGcGOEMdIYZYw2xhhjjXHGeGOCMdGYZEw2phhTjWnGdGOGMdOYZcw25hhzjXnGfGOBsdBYZCw2/jOWGEuNZcZyY4Wx0lhlrDbWGGuNdcZ6Y4Ox0dhkbDa2GFuNbcZ2Y4ex09hl7Db2GHuNfcZ+44Bx0DhkHDaOGEeNY8Zx44Rx0jhlnDbOGGeNc8Z544Jx0bhkXDauGFeNa8Z144Zx07hl3DbuGHeNe8Z944Hx0HhkPDaeGE+NZ8Zz44Xx0nhlvDbeGG+Nd8Z744Px0fhkfDa+GF+Nb8Z344fx0/hl/Db+GH+Nf0aCmchMbCYxk5rJzORmCjOlmcpMbaYx05rpzPRmBjOjmcnMbGYxs5rZzOxmDjOnmcvMbeYx85r5zPxmAbOgWcgsbBYxi5rFzOJmCbOkWcosbZYxy5rlzPJmBbOiWcmsbFYxq5rVzOpmDRMzcZMwSZMyaZMxWZMzeVMwRVMyZVMxVVMzddMwTdMybdMxXdMzfTMwQzMygQlNZMZmTbOWWdusY9Y165n1zQZmQ7OR2dhsYjY1m5nNzRZmS7OV2dpsY7Y125ntzQ5mR7OT2dnsYnY1u5ndzR5mT7OX2dvsY/Y1+5n9zQHmQHOQOdgcYg41h5nDzRHmSHOUOdocY441x5njzQnmRHOSOdmcYk41p5nTzRnmTHOWOducY84155nzzQXmQnORudj8z1xiLjWXmcvNFeZKc5W52lxjrjXXmevNDeZGc5O52dxibjW3mdvNHeZOc5e529xj7jX3mfvNA+ZB85B52DxiHjWPmcfNE+ZJ85R52jxjnjXPmefNC+ZF85J52bxiXjWvmdfNG+ZN85Z527xj3jXvmffNB+ZD85H52HxiPjWfmc/NF+ZL85X52nxjvjXfme/ND+ZH85P52fxifjW/md/NH+ZP85f52/xj/jX/mQlWIiuxlcRKaiWzklsprJRWKiu1lcZKa6Wz0lsZrIxWJiuzlcXKamWzsls5rJxWLiu3lcfKa+Wz8lsFrIJWIauwVcQqahWzilslrJJWKau0VcYqa5WzylsVrIpWJauyVcWqalWzqls1LMzCLcIiLcqiLcZiLc7iLcESLcmSLcVSLc3SLcMyLcuyLcdyLc/yrcAKrcgCFrSQFVs1rVpWbauOVdeqZ9W3GlgNrUZWY6uJ1dRqZjW3WlgtrVZWa6uN1dZqZ7W3OlgdrU5WZ6uL1dXqZnW3elg9rV5Wb6uP1dfqZ/W3BlgDrUHWYGuINdQaZg23RlgjrVHWaGuMNdYaZ423JlgTrUnWZGuKNdWaZk23ZlgzrVnWbGuONdeaZ823FlgLrUXWYus/a4m11FpmLbdWWCutVdZqa4211lpnrbc2WButTdZma4u11dpmbbd2WDutXdZua4+119pn7bcOWAetQ9Zh64h11DpmHbdOWCetU9Zp64x11jpnnbcuWBetS9Zl64p11bpmXbduWDetW9Zt645117pn3bceWA+tR9Zj64n11HpmPbdeWC+tV9Zr64311npnvbc+WB+tT9Zn64v11fpmfbd+WD+tX9Zv64/11/pnJdiJ7MR2EjupncxObqewU9qp7NR2Gjutnc5Ob2ewM9qZ7Mx2Fjurnc3Obuewc9q57Nx2Hjuvnc/ObxewC9qF7MJ2EbuoXcwubpewS9ql7NJ2GbusXc4ub1ewK9qV7Mp2FbuqXc2ubtewMRu3CZu0KZu2GZu1OZu3BVu0JVu2FVu1NVu3Ddu0Ldu2Hdu1Pdu3Azu0IxvY0EZ2bNe0a9m17Tp2XbueXd9uYDe0G9mN7SZ2U7uZ3dxuYbe0W9mt7TZ2W7ud3d7uYHe0O9md7S52V7ub3d3uYfe0e9m97T52X7uf3d8eYA+0B9mD7SH2UHuYPdweYY+0R9mj7TH2WHucPd6eYE+0J9mT7Sn2VHuaPd2eYc+0Z9mz7Tn2XHuePd9eYC+0F9mL7f/sJfZSe5m93F5hr7RX2avtNfZae5293t5gb7Q32ZvtLfZWe5u93d5h77R32bvtPfZee5+93z5gH7QP2YftI/ZR+5h93D5hn7RP2aftM/ZZ+5x93r5gX7Qv2ZftK/ZV+5p93b5h37Rv2bftO/Zd+559335gP7Qf2Y/tJ/ZT+5n93H5hv7Rf2a/tN/Zb+5393v5gf7Q/2Z/tL/ZX+5v93f5h/7R/2b/tP/Zf+5+d4CRyEjtJnKROMie5k8JJ6aRyUjtpnLROOie9k8HJ6GRyMjtZnKxONie7k8PJ6eRycjt5nLxOPie/U8Ap6BRyCjtFnKJOMae4U8Ip6ZRySjtlnLJOOae8U8Gp6FRyKjtVnKpONae6U8PBHNwhHNKhHNphHNbhHN4RHNGRHNlRHNXRHN0xHNOxHNtxHNfxHN8JnNCJHOBABzmxU9Op5dR26jh1nXpOfaeB09Bp5DR2mjhNnWZOc6eF09Jp5bR22jhtnXZOe6eD09Hp5HR2ujhdnW5Od6eH09Pp5fR2+jh9nX5Of2eAM9AZ5Ax2hjhDnWHOcGeEM9IZ5Yx2xjhjnXHOeGeCM9GZ5Ex2pjhTnWnOdGeGM9OZ5cx25jhznXnOfGeBs9BZ5Cx2/nOWOEudZc5yZ4Wz0lnlrHbWOGuddc56Z4Oz0dnkbHa2OFudbc52Z4ez09nl7Hb2OHudfc5+54Bz0DnkHHaOOEedY85x54Rz0jnlnHbOOGedc85554Jz0bnkXHauOFeda85154Zz07nl3HbuOHede85954Hz0HnkPHaeOE+dZ85z54Xz0nnlvHbeOG+dd85754Pz0fnkfHa+OF+db85354fz0/nl/Hb+OH+df06Cm8hN7CZxk7rJ3ORuCjelm8pN7aZx07rp3PRuBjejm8nN7GZxs7rZ3OxuDjenm8vN7eZx87r53PxuAbegW8gt7BZxi7rF3OJuCbekW8ot7ZZxy7rl3PJuBbeiW8mt7FZxq7rV3OpuDRdzcZdwSZdyaZdxWZdzeVdwRVdyZVdxVVdzdddwTddybddxXddzfTdwQzdygQtd5MZuTbeWW9ut49Z167n13QZuQ7eR29ht4jZ1m7nN3RZuS7eV29pt47Z127nt3Q5uR7eT29nt4nZ1u7nd3R5uT7eX29vt4/Z1+7n93QHuQHeQO9gd4g51h7nD3RHuSHeUO9od4451x7nj3QnuRHeSO9md4k51p7nT3RnuTHeWO9ud485157nz3QXuQneRu9j9z13iLnWXucvdFe5Kd5W72l3jrnXXuevdDe5Gd5O72d3ibnW3udvdHe5Od5e7293j7nX3ufvdA+5B95B72D3iHnWPucfdE+5J95R72j3jnnXPuefdC+5F95J72b3iXnWvudfdG+5N95Z7273j3nXvuffdB+5D95H72H3iPnWfuc/dF+5L95X72n3jvnXfue/dD+5H95P72f3ifnW/ud/dH+5P95f72/3j/nX/uQleIi+xl8RL6iXzknspvJReKi+1l8ZL66Xz0nsZvIxeJi+zl8XL6mXzsns5vJxeLi+3l8fL6+Xz8nsFvIJeIa+wV8Qr6hXzinslvJJeKa+0V8Yr65XzynsVvIpeJa+yV8Wr6lXzqns1PMzDPcJLlJCQ8H+sx3m8J3iiJ3myp3iqp3m6Z3imZ3m253iu53m+F3ihF3nAgx7yYq+mV8ur7dXx6nr1vPpeA6+h18hr7DXxmnrNvOZeC6+l18pr7bXx2nrtvPZeB6+j18nr7HXxunrdvO5eD6+n18vr7fXx+nr9vP7eAG+gN8gb7A3xhnrDvOHeCG+kN8ob7Y3xxnrjvPHeBG+iN8mb7E3xpnrTvOneDG+mN8ub7c3x5nrzvPneAm+ht8hb7P3nLfGWesu85d4Kb6W3ylvtrfHWeuu89d4Gb6O3ydvsbfG2etu87d4Ob6e3y9vt7fH2evu8/d4B76B3yDvsHfGOese8494J76R3yjvtnfHOeue8894F76J3ybvsXfGuete8694N76Z3y7vt3fHueve8+94D76H3yHvsPfGees+8594L76X3ynvtvfHeeu+8994H76P3yfvsffG+et+8794P76f3y/vt/fH+ev+8BD+Rn9hP4if1k/nJ/RR+Sj+Vn9pP46f10/np/Qx+Rj+Tn9nP4mf1s/nZ/Rx+Tj+Xn9vP4+f18/n5/QJ+Qb+QX9gv4hf1i/nF/RJ+Sb+UX9ov45f1y/nl/Qp+Rb+SX9mv4lf1q/nV/Ro+5uM+4ZM+5dM+47M+5/O+4Iu+5Mu+4qu+5uu+4Zu+5du+47u+5/t+4Id+5AMf+siP/Zp+Lb+2X8ev69fz6/sN/IZ+I7+x38Rv6jfzm/st/JZ+K7+138Zv67fz2/sd/I5+J7+z38Xv6nfzu/s9/J5+L7+338fv6/fz+/sD/IH+IH+wP8Qf6g/zh/sj/JH+KH+0P8Yf64/zx/sT/In+JH+yP8Wf6k/zp/sz/Jn+LH+2P8ef68/z5/sL/IX+In+x/5+/xF/qL/OX+yv8lf4qf7W/xl/rr/PX+xv8jf4mf7O/xd/qb/O3+zv8nf4uf7e/x9/r7/P3+wf8g/4h/7CfkDEh4Zh/3D/hn/RP+af9M/5Z/5x/3r/gX/Qv+Zf9K/5V/5p/3b/h3/Rv+bf9O/5d/55/33/gP/Qf+Y/9J/5T/5n/3H/hv/Rf+a/9N/5b/53/3v/gf/Q/+Z/9L/5X/5v/3f/h//R/+b/9P/5f/5+fECQKEgdJgqRBsiB5kCJIGaQKUgdpgrRBuiB9kCHIGGQKMgdZgqxBtiB7kCPIGeQKcgd5grxBviB/UCAoGBQKCgdFgqJBsaB4UCIoGZQKSgdlgrJBuaB8UCGoGFQKKgdVgqpBtaB6UCPAAjwgAjKgAjpgAjbgAj4QAjGQAjlQAjXQAj0wAjOwAjtwAjfwAj8IgjCIAhDAAAVxUDOoFdQO6gR1g3pB/aBB0DBoFDQOmgRNg2ZB86BF0DJoFbQO2gRtg3ZB+6BD0DHoFHQOugRdg25B96BH0DPoFfQO+gR9g35B/2BAMDAYFAwOhgRDg2HB8GBEMDIYFYwOxgRjg3HB+GBCMDGYFEwOpgRTg2nB9GBGMDOYFcwO5gRzg3nB/GBBsDBYFCwO/guWBEuDZcHyYEWwMlgVrA7WBGuDdcH6YEOwMdgUbA62BFuDbcH2YEewM9gV7A72BHuDfcH+4EBwMDgUHA6OBEeDY8Hx4ERwMjgVnA7OBGeDc8H54EJwMbgUXA6uBFeDa8H14EZwM7gV3A7uBHeDe8H94EHwMHgUPA6eBE+DZ8Hz4EXwMngVvA7eBG+Dd8H74EPwMfgUfA6+BF+Db8H34EfwM/gV/A7+BH+Df0FCmChMHCYJk4bJwuRhijBlmCpMHaYJ04bpwvRhhjBjmCnMHGYJs4bZwuxhjjBnmCvMHeYJ84b5wvxhgbBgWCgsHBYJi4bFwuJhibBkWCosHZYJy4blwvJhhbBiWCmsHFYJq4bVwuphjRAL8ZAIyZAK6ZAJ2ZAL+VAIxVAK5VAJ1VAL9dAIzdAK7dAJ3dAL/TAIwzAKQQhDFMZhzbBWWDusE9YN64X1wwZhw7BR2DhsEjYNm4XNwxZhy7BV2DpsE7YN24Xtww5hx7BT2DnsEnYNu4Xdwx5hz7BX2DvsE/YN+4X9wwHhwHBQODgcEg4Nh4XDwxHhyHBUODocE44Nx4XjwwnhxHBSODmcEk4Np4XTwxnhzHBWODucE84N54XzwwXhwnBRuDj8L1wSLg2XhcvDFeHKcFW4OlwTrg3XhevDDeHGcFO4OdwSbg23hdvDHeHOcFe4O9wT7g33hfvDA+HB8FB4ODwSHg2PhcfDE+HJ8FR4OjwTng3PhefDC+HF8FJ4ObwSXg2vhdfDG+HN8FZ4O7wT3g3vhffDB+HD8FH4OHwSPg2fhc/DF+HL8FX4OnwTvg3fhe/DD+HH8FP4OfwSfg2/hd/DH+HP8Ff4O/wT/g3/hQlRoihxlCRKGiWLkkcpopRRqih1lCZKG6WL0kcZooxRpihzlCXKGmWLskc5opxRrih3lCfKG+WL8kcFooJRoahwVCQqGhWLikclopJRqah0VCYqG5WLykcVoopRpahyVCWqGlWLqkc1IizCIyIiIyqiIyZiIy7iIyESIymSIyVSIy3SIyMyIyuyIydyIy/yoyAKoygCEYxQFEc1o1pR7ahOVDeqF9WPGkQNo0ZR46hJ1DRqFjWPWkQto1ZR66hN1DZqF7WPOkQdo05R56hL1DXqFnWPekQ9o15R76hP1DfqF/WPBkQDo0HR4GhINDQaFg2PRkQjo1HR6GhMNDYaF42PJkQTo0nR5GhKNDWaFk2PZkQzo1nR7GhONDeaF82PFkQLo0XR4ui/aEm0NFoWLY9WRCujVdHqaE20NloXrY82RBujTdHmaEu0NdoWbY92RDujXdHuaE+0N9oX7Y8ORAejQ9Hh6Eh0NDoWHY9ORCejU9Hp6Ex0NjoXnY8uRBejS9Hl6Ep0NboWXY9uRDejW9Ht6E50N7oX3Y8eRA+jR9Hj6En0NHoWPY9eRC+jV9Hr6E30NnoXvY8+RB+jT9Hn6Ev0NfoWfY9+RD+jX9Hv6E/0N/oXJYBEIDFIApKCZCA5SAFSglQgNUgD0oJ0ID3IADKCTCAzyAKygmwgO8gBcoJcIDfIA/KCfCA/KAAKgkKgMCgCioJioDgoAUqCUqA0KAPKgnKgPKgAKoJKoDKoAqqCaqA6qAEwgAMCkIACNGAACzjAAwGIQAIyUIAKNKADA5jAAjZwgAs84IMAhCACAECAQAxqglqgNqgD6oJ6oD5oABqCRqAxaAKagmagOWgBWoJWoDVoA9qCdqA96AA6gk6gM+gCuoJuoDvoAXqCXqA36AP6gn6gPxgABoJBYDAYAoaCYWA4GAFGglFgNBgDxoJxYDyYACaCSWAymAKmgmlgOpgBZoJZYDaYA+aCeWA+WAAWgkVgMfgPLAFLwTKwHKwAK8EqsBqsAWvBOrAebAAbwSawGWwBW8E2sB3sADvBLrAb7AF7wT6wHxwAB8EhcBgcAUfBMXAcnAAnwSlwGpwBZ8E5cB5cABfBJXAZXAFXwTVwHdwAN8EtcBvcAXfBPXAfPAAPwSPwGDwBT8Ez8By8AC/BK/AavAFvwTvwHnwAH8En8Bl8AV/BN/Ad/AA/wS/wG/wBf8E/kAATwcQwCUwKk8HkMAVMCVPB1DANTAvTwfQwA8wIM8HMMAvMCrPB7DAHzAlzwdwwD8wL88H8sAAsCAvBwrAILAqLweKwBCwJS8HSsAwsC8vB8rACrAgrwcqwCqwKq8HqsAbEIA4JSEIK0pCBLOQgDwUoQgnKUIEq1KAODWhCC9rQgS70oA8DGMIIAgghgjGsCWvB2rAOrAvrwfqwAWwIG8HGsAlsCpvB5rAFbAlbwdawDWwL28H2sAPsCDvBzrAL7Aq7we6wB+wJe8HesA/sC/vB/nAAHAgHwcFwCBwKh8HhcAQcCUfB0XAMHAvHwfFwApwIJ8HJcAqcCqfB6XAGnAlnwdlwDpwL58H5cAFcCBfBxfA/uAQuhcvgcrgCroSr4Gq4Bq6F6+B6uAFuhJvgZrgFboXb4Ha4A+6Eu+BuuAfuhfvgfngAHoSH4GF4BB6Fx+BxeAKehKfgaXgGnoXn4Hl4AV6El+BleAVehdfgdXgD3oS34G14B96F9+B9+AA+hI/gY/gEPoXP4HP4Ar6Er+Br+Aa+he/ge/gBfoSf4Gf4BX6F3+B3+AP+hL/gb/gH/oX/YAJKhBKjJCgpSoaSoxQoJUqFUqM0KC1Kh9KjDCgjyoQyoywoK8qGsqMcKCfKhXKjPCgvyofyowKoICqECqMiqCgqhoqjEqgkKoVKozKoLCqHyqMKqCKqhCqjKqgqqoaqoxoIQzgiEIkoRCMGsYhDPBKQiCQkIwWpSEM6MpCJLGQjB7nIQz4KUIgiBBBECMWoJqqFaqM6qC6qh+qjBqghaoQaoyaoKWqGmqMWqCVqhVqjNqgtaofaow6oI+qEOqMuqCvqhrqjHqgn6oV6oz6oL+qH+qMBaCAahAajIWgoGoaGoxFoJBqFRqMxaCwah8ajCWgimoQmoyloKpqGpqMZaCaahWajOWgumofmowVoIVqEFqP/0BK0FC1Dy9EKtBKtQqvRGrQWrUPr0Qa0EW1Cm9EWtBVtQ9vRDrQT7UK70R60F+1D+9EBdBAdQofREXQUHUPH0Ql0Ep1Cp9EZdBadQ+fRBXQRXUKX0RV0FV1D19ENdBPdQrfRHXQX3UP30QP0ED1Cj9ET9BQ9Q8/RC/QSvUKv0Rv0Fr1D79EH9BF9Qp/RF/QVfUPf0Q/0E/1Cv9Ef9Bf9QwlxojhxnCROGieLk8cp4pRxqjh1nCZOG6eL08cZ4oxxpjhznCXOGmeLs8c54pxxrjh3nCfOG+eL88cF4oJxobhwXCQuGheLi8cl4pJxqbh0XCYuG5eLy8cV4opxpbhyXCWuGleLq8c1YizGYyImYyqmYyZmYy7mYyEWYymWYyVWYy3WYyM2Yyu2Yyd2Yy/24yAO4ygGMYxRHMc141px7bhOXDeuF9ePG8QN40Zx47hJ3DRuFjePW8Qt41Zx67hN3DZuF7ePO8Qd405x57hL3DXuFnePe8Q9415x77hP3DfuF/ePB8QD40Hx4HhIPDQeFg+PR8Qj41Hx6P8RAA+AQiQBAEB/7rJt27Ztrm1rZjbbtm3btm3btuseNhobg43FxmHjsQnYRGwSNhmbgk3FpmHTsRnYTGwWNhubg83F5mHzsQXYQmwRthhbgi3FlmHLsRXYSmwVthpbg63F1mHrsQ3YRmwTthnbgm3FtmHbsR3YTmwXthvbg+3F9mH7sQPYQewQdhg7gh3FjmHHsRPYSewUdho7g53FzmHnsQvYRewSdhm7gl3FrmHXsRvYTewWdhu7g93F7mH3sQfYQ+wR9hh7gj3FnmHPsRfYS+wV9hp7g73F3mHvsQ/YR+wT9hn7gn3FvmHfsR/YT+wX9hv7g/3F/mEJeCI8MZ4ET4onw5PjKfCU+H94Kjw1ngZPi6fD0+MZ8Ix4JjwzngXPimfDs+M58Jx4Ljw3ngfPi+fD8+MF8IJ4IbwwXgQvihfDi+Ml8JJ4Kbw0XgYvi5fDy+MV8Ip4JbwyXgWvilfDq+M18Jp4Lbw2Xgevi9fD6+MN8IZ4I7wx3gRvijfDm+Mt8JZ4K7w13gZvi7fD2+Md8I54J7wz3gXvinfDu+MYjuMETuIUTuMMzuIczuMCLuISLuMKruIaruMGbuIWbuMO7uIe7uMBHuIRDnCIIzzGe+A98V54b7wP3hfvh/fHB+AD8UH4YHwIPhQfhg/HR+Aj8VH4aHwMPhYfh4/HJ+AT8Un4ZHwKPhWfhk/HZ+Az8Vn4bHwOPhefh8/HF+AL8UX4YnwJvhRfhi/HV+Ar8VX4anwNvhZfh6/HN+Ab8U34ZnwLvhXfhm/Hd+A78V34bnwPvhffh+/HD+AH8UP4YfwIfhQ/hh/HT+An8VP4afwMfhY/h5/HL+AX8Uv4ZfwKfhW/hl/Hb+A38Vv4bfwOfhe/h9/HH+AP8Uf4Y/wJ/hR/hj/HX+Av8Vf4a/wN/hZ/h7/HP+Af8U/4Z/wL/hX/hn/Hf+A/8V/4b/wP/hf/hycQiYjERBIiKZGMSE6kIFIS/xGpiNREGiItkY5IT2QgMhKZiMxEFiIrkY3ITuQgchK5iNxEHiIvkY/ITxQgChKFiMJEEaIoUYwoTpQgShKliNJEGaIsUY4oT1QgKhKViMpEFaIqUY2oTtQgahK1iNpEHaIuUY+oTzQgGhKNiMZEE6Ip0YxoTrQgWhKtiNZEG6It0Y5oT3QgOhKdiM5EF6Ir0Y3oTmAEThAESVAETTAES3AETwiESEiETCiESmiEThiESViETTiES3iETwRESEQEICCBiJjoQfQkehG9iT5EX6If0Z8YQAwkBhGDiSHEUGIYMZwYQYwkRhGjiTHEWGIcMZ6YQEwkJhGTiSnEVGIaMZ2YQcwkZhGziTnEXGIeMZ9YQCwkFhGLiSXEUmIZsZxYQawkVhGriTXEWmIdsZ7YQGwkNhGbiS3EVmIbsZ3YQewkdhG7iT3EXmIfsZ84QBwkDhGHiSPEUeIYcZw4QZwkThGniTPEWeIccZ64QFwkLhGXiSvEVeIacZ24QdwkbhG3iTvEXeIecZ94QDwkHhGPiSfEU+IZ8Zx4QbwkXhGviTfEW+Id8Z74QHwkPhGfiS/EV+Ib8Z34QfwkfhG/iT/EX+IfkUAmIhOTScikZDIyOZmCTEn+R6YiU5NpyLRkOjI9mYHMSGYiM5NZyKxkNjI7mYPMSeYic5N5yLxkPjI/WYAsSBYiC5NFyKJkMbI4WYIsSZYiS5NlyLJkObI8WYGsSFYiK5NVyKpkNbI6WYOsSdYia5N1yLpkPbI+2YBsSDYiG5NNyKZkM7I52YJsSbYiW5NtyLZkO7I92YHsSHYiO5NdyK5kN7I7iZE4SZAkSZE0yZAsyZE8KZAiKZEyqZAqqZE6aZAmaZE26ZAu6ZE+GZAhGZGAhCQiY7IH2ZPsRfYm+5B9yX5kf3IAOZAcRA4mh5BDyWHkcHIEOZIcRY4mx5BjyXHkeHICOZGcRE4mp5BTyWnkdHIGOZOcRc4m55BzyXnkfHIBuZBcRC4ml5BLyWXkcnIFuZJcRa4m15BryXXkenIDuZHcRG4mt5BbyW3kdnIHuZPcRe4m95B7yX3kfvIAeZA8RB4mj5BHyWPkcfIEeZI8RZ4mz5BnyXPkefICeZG8RF4mr5BXyWvkdfIGeZO8Rd4m75B3yXvkffIB+ZB8RD4mn5BPyWfkc/IF+ZJ8Rb4m35BvyXfke/ID+ZH8RH4mv5BfyW/kd/IH+ZP8Rf4m/5B/yX9kApWISkwloZJSyajkVAoqJfUflYpKTaWh0lLpqPRUBiojlYnKTGWhslLZqOxUDionlYvKTeWh8lL5qPxUAaogVYgqTBWhilLFqOJUCaokVYoqTZWhylLlqPJUBaoiVYmqTFWhqlLVqOpUDaomVYuqTdWh6lL1qPpUA6oh1YhqTDWhmlLNqOZUC6ol1YpqTbWh2lLtqPZUB6oj1YnqTHWhulLdqO4URuEUQZEURdEUQ7EUR/GUQImURMmUQqmURumUQZmURdmUQ7mUR/lUQIVURAEKUoiKqR5UT6oX1ZvqQ/Wl+lH9qQHUQGoQNZgaQg2lhlHDqRHUSGoUNZoaQ42lxlHjqQnURGoSNZmaQk2lplHTqRnUTGoWNZuaQ82l5lHzqQXUQmoRtZhaQi2lllHLqRXUSmoVtZpaQ62l1lHrqQ3URmoTtZnaQm2ltlHbqR3UTmoXtZvaQ+2l9lH7qQPUQeoQdZg6Qh2ljlHHqRPUSeoUdZo6Q52lzlHnqQvUReoSdZm6Ql2lrlHXqRvUTeoWdZu6Q92l7lH3qQfUQ+oR9Zh6Qj2lnlHPqRfUS+oV9Zp6Q72l3lHvqQ/UR+oT9Zn6Qn2lvlHfqR/UT+oX9Zv6Q/2l/lEJdCI6MZ2ETkono5PTKeiU9H90Kjo1nYZOS6ej09MZ6Ix0JjoznYXOSmejs9M56Jx0Ljo3nYfOS+ej89MF6IJ0IbowXYQuSheji9Ml6JJ0Kbo0XYYuS5ejy9MV6Ip0JboyXYWuSlejq9M16Jp0Lbo2XYeuS9ej69MN6IZ0I7ox3YRuSjejm9Mt6JZ0K7o13YZuS7ej29Md6I50J7oz3YXuSneju9MYjdMETdIUTdMMzdIczdMCLdISLdMKrdIardMGbdIWbdMO7dIe7dMBHdIRDWhIIzqme9A96V50b7oP3ZfuR/enB9AD6UH0YHoIPZQeRg+nR9Aj6VH0aHoMPZYeR4+nJ9AT6Un0ZHoKPZWeRk+nZ9Az6Vn0bHoOPZeeR8+nF9AL6UX0YnoJvZReRi+nV9Ar6VX0anoNvZZeR6+nN9Ab6U30ZnoLvZXeRm+nd9A76V30bnoPvZfeR++nD9AH6UP0YfoIfZQ+Rh+nT9An6VP0afoMfZY+R5+nL9AX6Uv0ZfoKfZW+Rl+nb9A36Vv0bfoOfZe+R9+nH9AP6Uf0Y/oJ/ZR+Rj+nX9Av6Vf0a/oN/ZZ+R7+nP9Af6U/0Z/oL/ZX+Rn+nf9A/6V/0b/oP/Zf+RycwiZjETBImKZOMSc6kYFIy/zGpmNRMGiYtk45Jz2RgMjKZmMxMFiYrk43JzuRgcjK5mNxMHiYvk4/JzxRgCjKFmMJMEaYoU4wpzpRgSjKlmNJMGaYsU44pz1RgKjKVmMpMFaYqU42pztRgajK1mNpMHaYuU4+pzzRgGjKNmMZME6Yp04xpzrRgWjKtmNZMG6Yt045pz3RgOjKdmM5MF6Yr043pzmAMzhAMyVAMzTAMy3AMzwiMyEiMzCiMymiMzhiMyViMzTiMy3iMzwRMyEQMYCCDmJjpwfRkejG9mT5MX6Yf058ZwAxkBjGDmSHMUGYYM5wZwYxkRjGjmTHMWGYcM56ZwExkJjGTmSnMVGYaM52ZwcxkZjGzmTnMXGYeM59ZwCxkFjGLmSXMUmYZs5xZwaxkVjGrmTXMWmYds57ZwGxkNjGbmS3MVmYbs53ZwexkdjG7mT3MXmYfs585wBxkDjGHmSPMUeYYc5w5wZxkTjGnmTPMWeYcc565wFxkLjGXmSvMVeYac525wdxkbjG3mTvMXeYec595wDxkHjGPmSfMU+YZ85x5wbxkXjGvmTfMW+Yd8575wHxkPjGfmS/MV+Yb8535wfxkfjG/mT/MX+Yfk8AmYhOzSdikbDI2OZuCTck+Y1Oxqdk0bFo2HZuezcBmZDOxmdksbFY2G5udzcHmZHOxudk8bF42H5ufLcAWZAuxhdkibFG2GFucLcGWZEuxpdkybFm2HFuercBWZCuxldkqbFW2GludrcHWZGuxtdk6bF22HlufbcA2ZBuxjdkmbFO2GducbcG2ZFuxrdk2bFu2Hdue7cB2ZDuxndkubFe2G9udxVicJViSpViaZViW5VieFViRlViZVViV1VidNViTtVibdViX9VifDdiQjVjAQhaxMduD7cn2Ynuzfdi+bD+2PzuAHcgOYgezQ9ih7DB2ODuCHcmOYkezY9ix7Dh2PDuBnchOYiezU9ip7DR2OjuDncnOYmezc9i57Dx2PruAXcguYhezS9il7DJ2ObuCXcmuYleza9i17Dp2PbuB3chuYjezW9it7DZ2O7uD3cnuYneze9i97D52P3uAPcgeYg+zR9ij7DH2OHuCPcmeYk+zZ9iz7Dn2PHuBvcheYi+zV9ir7DX2OnuDvcneYm+zd9i77D32PvuAfcg+Yh+zT9in7DP2OfuCfcm+Yl+zb9i37Dv2PfuB/ch+Yj+zX9iv7Df2O/uD/cn+Yn+zf9i/7D82gUvEJeaScEm5ZFxyLgWXkvuPS8Wl5tJwabl0XHouA5eRy8Rl5rJwWblsXHYuB5eTy8Xl5vJwebl8XH6uAFeQK8QV5opwRbliXHGuBFeSK8WV5spwZblyXHmuAleRq8RV5qpwVblqXHWuBleTq8XV5upwdbl6XH2uAdeQa8Q15ppwTblmXHOuBdeSa8W15tpwbbl2XHuuA9eR68R15rpwXbluXHcO43CO4EiO4miO4ViO43hO4ERO4mRO4VRO43TO4EzO4mzO4VzO43wu4EIu4gAHOcTFXA+uJ9eL68314fpy/bj+3ABuIDeIG8wN4YZyw7jh3AhuJDeKG82N4cZy47jx3ARuIjeJm8xN4aZy07jp3AxuJjeLm83N4eZy87j53AJuIbeIW8wt4ZZyy7jl3ApuJbeKW82t4dZy67j13AZuI7eJ28xt4bZy27jt3A5uJ7eL283t4fZy+7j93AHuIHeIO8wd4Y5yx7jj3AnuJHeKO82d4c5y57jz3AXuIneJu8xd4a5y17jr3A3uJneLu83d4e5y97j73APuIfeIe8w94Z5yz7jn3AvuJfeKe8294d5y77j33AfuI/eJ+8x94b5y37jv3A/uJ/eL+8394f5y/7gEPhGfmE/CJ+WT8cn5FHxK/j8+FZ+aT8On5dPx6fkMfEY+E5+Zz8Jn5bPx2fkcfE4+F5+bz8Pn5fPx+fkCfEG+EF+YL8IX5YvxxfkSfEm+FF+aL8OX5cvx5fkKfEW+El+Zr8JX5avx1fkafE2+Fl+br8PX5evx9fkGfEO+Ed+Yb8I35ZvxzfkWfEu+Fd+ab8O35dvx7fkOfEe+E9+Z78J35bvx3XmMx3mCJ3mKp3mGZ3mO53mBF3mJl3mFV3mN13mDN3mLt3mHd3mP9/mAD/mIBzzkER/zPfiefC++N9+H78v34/vzA/iB/CB+MD+EH8oP44fzI/iR/Ch+ND+GH8uP48fzE/iJ/CR+Mj+Fn8pP46fzM/iZ/Cx+Nj+Hn8vP4+fzC/iF/CJ+Mb+EX8ov45fzK/iV/Cp+Nb+GX8uv49fzG/iN/CZ+M7+F38pv47fzO/id/C5+N7+H38vv4/fzB/iD/CH+MH+EP8of44/zJ/iT/Cn+NH+GP8uf48/zF/iL/CX+Mn+Fv8pf46/zN/ib/C3+Nn+Hv8vf4+/zD/iH/CP+Mf+Ef8o/45/zL/iX/Cv+Nf+Gf8u/49/zH/iP/Cf+M/+F/8p/47/zP/if/C/+N/+H/8v/4xOEREJiIYmQVEgmJBdSCCmF/4RUQmohjZBWSCekFzIIGYVMQmYhi5BVyCZkF3IIOYVcQm4hj5BXyCfkFwoIBYVCQmGhiFBUKCYUF0oIJYVSQmmhjFBWKCeUFyoIFYVKQmWhilBVqCZUF2oINYVaQm2hjlBXqCfUFxoIDYVGQmOhidBUaCY0F1oILYVWQmuhjdBWaCe0FzoIHYVOQmehi9BV6CZ0FzABFwiBFCiBFhiBFTiBFwRBFCRBFhRBFTRBFwzBFCzBFhzBFTzBFwIhFCIBCFBAQiz0EHoKvYTeQh+hr9BP6C8MEAYKg4TBwhBhqDBMGC6MEEYKo4TRwhhhrDBOGC9MECYKk4TJwhRhqjBNmC7MEGYKs4TZwhxhrjBPmC8sEBYKi4TFwhJhqbBMWC6sEFYKq4TVwhphrbBOWC9sEDYKm4TNwhZhq7BN2C7sEHYKu4Tdwh5hr7BP2C8cEA4Kh4TDwhHhqJA44bhwQjgpnBJOC2eEs8I54bxwQbgoXBIuC1eEq8I14bpwQ7gp3Pr1T7gj3BXuCfeFB8JD4ZHwWHgiPBWeCc+FF8JL4ZXwWngjvBXeCe+FD8JH4ZPwWfgifBW+Cd+FH8JP4ZfwW/gj/BX+CQliIjGxmERMKiYTk4spxJTif2IqMbWYRkwrphPTixnEjGImMbOYRcwqZhOziznEnGIuMbeYR8wr5hPziwXEgmIhsbBYRCwqFhOLiyXEkmIpsbRYRiwrlhPLixXEimIlsbJYRawqVhOrizXEmmItsbZYR6wr1hPriw3EhmIjsbHYRGwqNhObiy3ElmIrsbXYRmwrthPbix3EjmInsbPYRewqdhO7i5iIi4RIipRIi4zIipzIi4IoipIoi4qoipqoi4ZoipZoi47oip7oi4EYipEIRCgiMRZ7iD3FXmJvsY/YV+wn9hcHiAPFQeJgcYg4VBwmDhdHiCPFUeJocYw4VhwnjhcniBPFSeJkcYo4VZwmThdniDPFWeJscY44V5wnzhcXiAvFReJicYm4VFwmLhdXiCvFVeJqcY24Vlwnrhc3iBvFTeJmcYu4Vdwmbhd3iDvFXeJucY+4V9wn7hcPiAfFQ+Jh8Yh4VDwmHhdPiCfFU+Jp8Yx4VjwnnhcviBfFS+Jl8Yp4VbwmXhdviDfFW+Jt8Y54V7wn3hcfiA/FR+Jj8Yn4VHwmPhdfiC/FV+Jr8Y34Vnwnvhc/iB/FT+Jn8Yv4Vfwmfhd/iD/FX+Jv8Y/4V/wnJkiJpMRSEimplExKLqWQUkr/Samk1FIaKa2UTkovZZAySpmkzFIWKauUTcou5ZBySrmk3FIeKa+UT8ovFZAKSoWkwlIRqahUTCoulZBKSqWk0lIZqaxUTiovVZAqSpWkylIVqapUTaou1ZBqSrWk2lIdqa5UT6ovNZAaSo2kxlITqanUTGoutZBaSq2k1lIbqa3UTmovdZA6Sp2kzlIXqavUTeouYRIuERIpURItMRIrcRIvCZIoSZIsKZIqaZIuGZIpWZItOZIreZIvBVIoRRKQoISkWOoh9ZR6Sb2lPlJfqZ/UXxogDZQGSYOlIdJQaZg0XBohjZRGSaOlMdJYaZw0XpogTZQmSZOlKdJUaZo0XZohzZRmSbOlOdJcaZ40X1ogLZQWSYulJdJSaZm0XFohrZRWSaulNdJaaZ20XtogbZQ2SZulLdJWaZu0Xdoh7ZR2SbulPdJeaZ+0XzogHZQOSYelI9JR6Zh0XDohnZROSaelM9JZ6Zx0XrogXZQuSZelK9JV6Zp0Xboh3ZRuSbelO9Jd6Z50X3ogPZQeSY+lJ9JT6Zn0XHohvZReSa+lN9Jb6Z30XvogfZQ+SZ+lL9JX6Zv0Xfoh/ZR+Sb+lP9Jf6Z+UICeSE8tJ5KRyMjm5nEJOKf8np5JTy2nktHI6Ob2cQc4oZ5Izy1nkrHI2ObucQ84p55Jzy3nkvHI+Ob9cQC4oF5ILy0XkonIxubhcQi4pl5JLy2XksnI5ubxcQa4oV5Iry1XkqnI1ubpcQ64p15Jry3XkunI9ub7cQG4oN5Iby03kpnIzubncQm4pt5Jby23ktnI7ub3cQe4od5I7y13krnI3ubuMybhMyKRMybTMyKzMybwsyKIsybKsyKqsybpsyKZsybbsyK7syb4cyKEcyUCGMpJjuYfcU+4l95b7yH3lfnJ/eYA8UB4kD5aHyEPlYfJweYQ8Uh4lj5bHyGPlcfJ4eYI8UZ4kT5anyFPlafJ0eYY8U54lz5bnyHPlefJ8eYG8UF4kL5aXyEvlZfJyeYW8Ul4lr5bXyGvldfJ6eYO8Ud4kb5a3yFvlbfJ2eYe8U94l75b3yHvlffJ++YB8UD4kH5aPyEflY/Jx+YR8Uj4ln5bPyGflc/J5+YJ8Ub4kX5avyFfla/J1+YZ8U74l35bvyHfle/J9+YH8UH4kP5afyE/lZ/Jz+YX8Un4lv5bfyG/ld/J7+YP8Uf4kf5a/yF/lb/J3+Yf8U/4l/5b/yH/lf3KCkkhJrCRRkirJlORKCiWl8p+SSkmtpFHSKumU9EoGJaOSScmsZFGyKtmU7EoOJaeSS8mt5FHyKvmU/EoBpaBSSCmsFFGKKsWU4koJpaRSSimtlFHKKuWU8koFpaJSSamsVFGqKtWU6koNpaZSS6mt1FHqKvWU+koDpaHSSGmsNFGaKs2U5koLpaXSSmmttFHaKu2U9koHpaPSSemsdFG6Kt2U7gqm4AqhkAql0AqjsAqn8IqgiIqkyIqiqIqm6IqhmIql2IqjuIqn+EqghEqkAAUqSImVHkpPpZfSW+mj9FX6Kf2VAcpAZZAyWBmiDFWGKcOVEcpIZZQyWhmjjFXGKeOVCcpEZZIyWZmiTFWmKdOVGcpMZZYyW5mjzFXmKfOVBcpCZZGyWFmiLFWWKcuVFcpKZZWyWlmjrFXWKeuVDcpGZZOyWdmibFW2KduVHcpOZZeyW9mj7FX2KfuVA8pB5ZByWDmiHFWOKceVE8pJ5ZRyWjmjnFXOKeeVC8pF5ZJyWbmiXFWuKdeVG8pN5ZZyW7mj3FXuKfeVB8pD5ZHyWHmiPFWeKc+VF8pL5ZXyWnmjvFXeKe+VD8pH5ZPyWfmifFW+Kd+VH8pP5ZfyW/mj/FX+KQlqIjWxmkRNqiZTk6sp1JTqf2oqNbWaRk2rplPTqxnUjGomNbOaRc2qZlOzqznUnGouNbeaR82r5lPzqwXUgmohtbBaRC2qFlOLqyXUkmoptbRaRi2rllPLqxXUimoltbJaRa2qVlOrqzXUmmottbZaR62r1lPrqw3UhmojtbHaRG2qNlObqy3UlmortbXaRm2rtlPbqx3UjmontbPaRe2qdlO7q5iKq4RKqpRKq4zKqpzKq4IqqpIqq4qqqpqqq4ZqqpZqq47qqp7qq4EaqpEKVKgiNVZ7qD3VXmpvtY/aV+2n9lcHqAPVQepgdYg6VB2mDldHqCPVUepodYw6Vh2njlcnqBPVSepkdYo6VZ2mTldnqDPVWepsdY46V52nzlcXqAvVRepidYm6VF2mLldXqCvVVepqdY26Vl2nrlc3qBvVTepmdYu6Vd2mbld3qDvVXepudY+6V92n7lcPqAfVQ+ph9Yh6VD2mHldPqCfVU+pp9Yx6Vj2nnlcvqBfVS+pl9Yp6Vb2mXldvqDfVW+pt9Y56V72n3lcfqA/VR+pj9Yn6VH2mPldfqC/VV+pr9Y36Vn2nvlc/qB/VT+pn9Yv6Vf2mfld/qD/VX+pv9Y/6V/2nJmiJtMRaEi2plkxLrqXQUmr/aam01FoaLa2WTkuvZdAyapm0zFoWLauWTcuu5dByarm03FoeLa+WT8uvFdAKaoW0wloRrahWTCuuldBKaqW00loZraxWTiuvVdAqapW0yloVrapWTauu1dBqarW02lodra5WT6uvNdAaao20xloTranWTGuutdBaaq201lobra3WTmuvddA6ap20zloXravWTeuuYRquERqpURqtMRqrcRqvCZqoSZqsKZqqaZquGZqpWZqtOZqreZqvBVqoRRrQoIa0WOuh9dR6ab21PlpfrZ/WXxugDdQGaYO1IdpQbZg2XBuhjdRGaaO1MdpYbZw2XpugTdQmaZO1KdpUbZo2XZuhzdRmabO1OdpcbZ42X1ugLdQWaYu1JdpSbZm2XFuhrdRWaau1NdpabZ22XtugbdQ2aZu1LdpWbZu2Xduh7dR2abu1PdpebZ+2XzugHdQOaYe1I9pR7Zh2XDuhndROaae1M9pZ7Zx2XrugXdQuaZe1K9pV7Zp2Xbuh3dRuabe1O9pd7Z52X3ugPdQeaY+1J9pT7Zn2XHuhvdReaa+1N9pb7Z32XvugfdQ+aZ+1L9pX7Zv2Xfuh/dR+ab+1P9pf7Z+WoCfSE+tJ9KR6Mj25nkJPqf+np9JT62n0tHo6Pb2eQc+oZ9Iz61n0rHo2PbueQ8+p59Jz63n0vHo+Pb9eQC+oF9IL60X0onoxvbheQi+pl9JL62X0sno5vbxeQa+oV9Ir61X0qno1vbpeQ6+p19Jr63X0uno9vb7eQG+oN9Ib6030pnozvbneQm+pt9Jb6230tno7vb3eQe+od9I76130rno3vbuO6bhO6KRO6bTO6KzO6bwu6KIu6bKu6Kqu6bpu6KZu6bbu6K7u6b4e6KEe6UCHOtJjvYfeU++l99b76H31fnp/fYA+UB+kD9aH6EP1YfpwfYQ+Uh+lj9bH6GP1cfp4fYI+UZ+kT9an6FP1afp0fYY+U5+lz9bn6HP1efp8fYG+UF+kL9aX6Ev1ZfpyfYW+Ul+lr9bX6Gv1dfp6fYO+Ud+kb9a36Fv1bfp2fYe+U9+l79b36Hv1ffp+/YB+UD+kH9aP6Ef1Y/px/YR+Uj+ln9bP6Gf1c/p5/YJ+Ub+kX9av6Ff1a/p1/YZ+U7+l39bv6Hf1e/p9/YH+UH+kP9af6E/1Z/pz/YX+Un+lv9bf6G/1d/p7/YP+Uf+kf9a/6F/1b/p3/Yf+U/+l/9b/6H/1f3qCkchIbCQxkhrJjORGCiOl8Z+RykhtpDHSGumM9EYGI6ORychsZDGyGtmM7EYOI6eRy8ht5DHyGvmM/EYBo6BRyChsFDGKGsWM4kYJo6RRyihtlDHKGuWM8kYFo6JRyahsVDGqGtWM6kYNo6ZRy6ht1DHqGvWM+kYDo6HRyGhsNDGaGs2M5kYLo6XRymhttDHaGu2M9kYHo6PRyehsdDG6Gt2M7gZm4AZhkAZl0AZjsAZn8IZgiIZkyIZiqIZm6IZhmIZl2IZjuIZn+EZghEZkAAMayIiNHkZPo5fR2+hj9DX6Gf2NAcZAY5Ax2BhiDDWGGcONEcZIY5Qx2hhjjDXGGeONCcZEY5Ix2ZhiTDWmGdONGcZMY5Yx25hjzDXmGfONBcZCY5Gx2FhiLDWWGcuNFcZKY5Wx2lhjrDXWGeuNDcZGY5Ox2dhibDW2GduNHcZOY5ex29hj7DX2GfuNA8ZB45Bx2DhiHDWOGceNE8ZJ45Rx2jhjnDXOGeeNC8ZF45Jx2bhiXDWuGdeNG8ZN45Zx27hj3DXuGfeNB8ZD45Hx2HhiPDWeGc+NF8ZL45Xx2nhjvDXeGe+ND8ZH45Px2fhifDW+Gd+NH8ZP45fx2/hj/DX+GQlmIjOxmcRMaiYzk5spzJTmf2YqM7WZxkxrpjPTmxnMjGYmM7OZxcxqZjOzmznMnGYuM7eZx8xr5jPzmwXMgmYhs7BZxCxqFjOLmyXMkmYps7RZxixrljPLmxXMimYls7JZxaxqVjOrmzXMmmYts7ZZx6xr1jPrmw3MhmYjs7HZxGxqNjObmy3MlmYrs7XZxmxrtjPbmx3MjmYns7PZxexqdjO7m5iJm4RJmpRJm4zJmpzJm4IpmpIpm4qpmpqpm4ZpmpZpm47pmp7pm4EZmpEJTGgiMzZ7mD3NXmZvs4/Z1+xn9jcHmAPNQeZgc4g51BxmDjdHmCPNUeZoc4w51hxnjjcnmBPNSeZkc4o51ZxmTjdnmDPNWeZsc44515xnzjcXmAvNReZic4m51FxmLjdXmCvNVeZqc4251lxnrjc3mBvNTeZmc4u51dxmbjd3mDvNXeZuc4+519xn7jcPmAfNQ+Zh84h51DxmHjdPmCfNU+Zp84x51jxnnjcvmBfNS+Zl84p51bxmXjdvmDfNW+Zt845517xn3jcfmA/NR+Zj84n51HxmPjdfmC/NV+Zr84351nxnvjc/mB/NT+Zn84v51fxmfjd/mD/NX+Zv84/51/xnJliJrMRWEiuplcxKbqWwUlr/Wams1FYaK62VzkpvZbAyWpmszFYWK6uVzcpu5bByWrms3FYeK6+Vz8pvFbAKWoWswlYRq6hVzCpulbBKWqWs0lYZq6xVzipvVbAqWpWsylYVq6pVzapu1bBqWrWs2lYdq65Vz6pvNbAaWo2sxlYTq6nVzGputbBaWq2s1lYbq63VzmpvdbA6Wp2szlYXq6vVzepuYRZuERZpURZtMRZrcRZvCZZoSZZsKZZqaZZuGZZpWZZtOZZreZZvBVZoRRawoIWs2Oph9bR6Wb2tPlZfq5/V3xpgDbQGWYOtIdZQa5g13BphjbRGWaOtMdZYa5w13ppgTbQmWZOtKdZUa5o13ZphzbRmWbOtOdZca54131pgLbQWWYutJdZSa5m13FphrbRWWautNdZaa5213tpgbbQ2WZutLdZWa5u13dph7bR2WbutPdZea5+13zpgHbQOWYetI9ZR65h13DphnbROWaetM9ZZ65x13rpgXbQuWZetK9bVyYOs69YN66Z1y7pt3bHuWves+9YD66H1yHpsPbGeWs+s59YL66X1ynptvbHeWu+s99YH66P1yfpsfbG+Wt+s79YP66f1y/pt/bH+Wv+sBDuRndhOYie1k9nJ7RR2Svs/O5Wd2k5jp7XT2entDHZGO5Od2c5iZ7Wz2dntHHZOO5ed285j57Xz2fntAnZBu5Bd2C5iF7WL2cXtEnZJu5Rd2i5jl7XL2eXtCnZFu5Jd2a5iV7Wr2dXtGnZNu5Zd265j17Xr2fXtBnZDu5Hd2G5iN7Wb2c3tFnZLu5Xd2m5jt7Xb2e3tDnZHu5Pd2e5id7W72d1tzMZtwiZtyqZtxmZtzuZtwRZtyZZtxVZtzdZtwzZty7Ztx3Ztz/btwA7tyAY2tJEd2z3snnYvu7fdx+5r97P72wPsgfYge7A9xB5qD7OH2yPskfYoe7Q9xh5rj7PH2xPsifYke7I9xZ5qT7On2zPsmfYse7Y9x55rz7Pn2wvshfYie7G9xF5qL7OX2yvslfYqe7W9xl5rr7PX2xvsjfYme7O9xd5qb7O32zvsnfYue7e9x95r77P32wfsg/Yh+7B9xD5qH7OP2yfsk/Yp+7R9xj5rn7PP2xfsi/Yl+7J9xb5qX7Ov2zfsm/Yt+7Z9x75r37Pv2w/sh/Yj+7H9xH5qP7Of2y/sl/Yr+7X9xn5rv7Pf2x/sj/Yn+7P9xf5qf7O/2z/sn/Yv+7f9x/5r/7MTnEROYieJk9RJ5iR3Ujgpnf+cVE5qJ42T1knnpHcyOBmdTE5mJ4uT1cnmZHdyODmdXE5uJ4+T18nn5HcKOAWdQk5hp4hT1CnmFHdKOCWdUk5pp4xT1innlHcqOBWdSk5lp4pT1anmVHdqODWdWk5tp45T16nn1HcaOA2dRk5jp4nT1GnmNHdaOC2dVk5rp43T1mnntHc6OB2dTk5np4vT1enmdHcwB3cIh3Qoh3YYh3U4h3cER3QkR3YUR3U0R3cMx3Qsx3Ycx3U8x3cCJ3QiBzjQQU7s9HB6Or2c3k4fp6/Tz+nvDHAGOoOcwc4QZ6gzzBnujHBGOqOc0c4YZ6wzzhnvTHAmOpOcyc4UZ6ozzZnuzHBmOrOc2c4cZ64zz5nvLHAWOoucxc4SZ6mzzFnurHBWOquc1c4aZ62zzlnvbHA2Opuczc4WZ6uzzdnu7HB2Oruc3c4eZ6+zz9nvHHAOOoecw84R56hzzDnunHBOOqec084Z56xzzjnvXHAuOpecy84V56pzzbnu3HBuOrec284d565zz7nvPHAeOo+cx84T56nzzHnuvHBeOq+c184b563zznnvfHA+Op+cz84X56vzzfnu/HB+Or+c384f56/zz0lwE7mJ3SRuUjeZm9xN4aZ0/3NTuandNG5aN52b3s3gZnQzuZndLG5WN5ub3c3h5nRzubndPG5eN5+b3y3gFnQLuYXdIm5Rt5hb3C3hlnRLuaXdMm5Zt5xb3q3gVnQruZXdKm5Vt5rbIKGGW9Ot5dZ267h13XpufbeB29Bt5DZ2m7hN3WZuc7eF29Jt5bZ227ht3XZue7eD29Ht5HZ2u7hd3W5udxdzcZdwSZdyaZdxWZdzeVdwRVdyZVdxVVdzdddwTddybddxXddzfTdwQzdygQtd5MZuD7en28vt7fZx+7r93P7uAHegO8gd7A5xh7rD3OHuCHekO8od7Y5xx7rj3PHuBHeiO8md7E5xp7rT3OnuDHemO8ud7c5x57rz3PnuAnehu8hd7C5xl7rL3OXuCnelu8pd7a5x17rr3PXuBneju8nd7G5xt7rb3O3uDnenu8vd7e5x97r73P3uAfege8g97B5xj7rH3OPuCfeke8o97Z5xz7rn3PPuBfeie8m97F5xr7rX3OvuDfeme8u97d5x77r33PvuA/eh+8h97D5xn7rP3OfuC/el+8p97b5x37rv3PfuB/ej+8n97H5xv7rf3O/uD/en+8v97f5x/7r/3AQvkZfYS+Il9ZJ5yb0UXkrvPy+Vl9pL46X10nnpvQxeRi+Tl9nL4mX1snnZvRxeTi+Xl9vL4+X18nn5vQJeQa+QV9gr4hX1innFvRJeSa+UV9or45X1ynnlvQpeRa+SV9mr4lX1qnnVvRpeTa+WV9ur49X16nn1vQZeQ6+R19hr4jX1mnnNvRZeS6+V19pr47X12nntvQ5eR6+T19nr4nX1unndPczDPcIjPcqjPcZjPc7jPcETPcmTPcVTPc3TPcMzPcuzPcdzPc/zvcALvcgDHvSQF3s9vJ5eL6+318fr6/Xz+nsDvIHeIG+wN8Qb6g3zhnsjvJHeKG+0N8Yb643zxnsTvIneJG+yN8Wb6k3zpnszvJneLG+2N8eb683z5nsLvIXeIm+xt8Rb6i3zlnsrvJXeKm+1t8Zb663z1nsbvI3eJm+zt8Xb6m3ztns7vJ3eLm+3t8fb6+3z9nsHvIPeIe+wd8Q76h3zjnsnvJPeKe+0d8Y7653zznsXvIveJe+yd8W76l3zrns3vJveLe+2d8e7693z7nsPvIfeI++x98R76j3znnsvvJfeK++198Z7673z3nsfvI/eJ++z98X76n3zvns/vJ/eL++398f76/3zEvxEfmI/iZ/UT+Yn91P4Kf3//FR+aj+Nn9ZP56f3M/gZ/Ux+Zj+Ln9XP5mf3c/g5/Vx+bj+Pn9fP5+f3C/gF/UJ+Yb+IX9Qv5hf3S/gl/VJ+ab+MX9Yv55f3K/gV/Up+Zb+KX9Wv5lf3a/g1/Vp+bb+OX9ev59f3G/gN/UZ+Y7+J39Rv5jf3W/gt/VZ+a7+N39Zv57f3O/gd/U5+Z7+L39Xv5nf3MR/3CZ/0KZ/2GZ/1OZ/3BV/0JV/2FV/1NV/3Dd/0Ld/2Hd/1Pd/3Az/0Ix/40Ed+7Pfwe/q9/N5+H7+v38/v7w/wB/qD/MH+EH+oP8wf7o/wR/qj/NH+GH+sP84f70/wJ/qT/Mn+FH+qP82f7s/wZ/qz/Nn+HH+uP8+f7y/wF/qL/MX+En+pv8xf7q/wV/qr/NX+Gn+tv85f72/wN/qb/M3+Fn+rv83f7u/wd/q7/N3+Hn+vv8/f7x/wD/qH/MP+Ef+of8w/7p/wT/qn/NP+Gf+sf84/71/wL/qX/Mv+Ff+qf82/7t/wb/q3/Nv+Hf+uf8+/7z/wH/qP/Mf+E/+p/8x/7r/wX/qv/Nf+G/+t/85/73/wP/qf/M/+F/+r/83/7v/wf/q//N/+H/+v/89PCBIFiYMkQdIgWZA8SBGkDP4LUgWpgzRB2iBdkD7IEGQMMgWZgyxB1iBbkD3IEeQMcgW5gzxB3iBfkD8oEBQMCgWFgyJB0aBYUDwoEZQMSgWlgzJB2aBcUD6oEFQMKgWVgypB1aBaUD2oEdQMagW1gzpB3aBeUD9oEDQMGgWNgyZB06BZ0DxoEbQMWgWtgzZB26Bd0D7oEHQMOgWdgy5B16Bb0D3AAjwgAjKgAjpgAjbgAj4QAjGQAjlQAjXQAj0wAjOwAjtwAjfwAj8IgjCIAhDAAAVx0CPoGfQKegd9gr5Bv6B/MCAYGAwKBgdDgqHBsGB4MCIYGYwKRgdjgrHBuGB8MCGYGEwKJgdTgqnBtGB6MCOYGcwKZgdzgrnBvGB+sCBYGCwKFgdLgqXBsmB5sCJYGawKVgdrgrXBumB9sCHYGGwKNgdbgq3BtmB7sCPYGewKdgd7gr3BvmB/cCA4GBwKDgdHgqPBseB4cCI4GZwKTgdngrPBueB8cCG4GFwKLgdXgqvBteB6cCO4GdwKbgd3grvBveB+8CB4GDwKHgdPgqfBs+B58CJ4GbwKXgdvgrfBu+B98CH4GHwKPgdfgq/Bt+B78CP4GfwKfgd/gr/BvyAhTBQmDpOEScNkYfIwRZgy/C9MFaYO04Rpw3Rh+jBDmDHMFGYOs4RZw2xh9jBHmDPMFeYO84R5w3xh/rBAWDAsFBYOi4RFw2Jh8bBEWDIsFZYOy4Rlw3Jh+bBCWDGsFFYOq4RVw2ph9bBGWDOsFdYO64R1w3ph/bBB2DBsFDYOm4RNw2Zh87BF2DJsFbYO24Rtw3Zh+7BD2DHsFHYOu4Rdw25h9xAL8ZAIyZAK6ZAJ2ZAL+VAIxVAK5VAJ1VAL9dAIzdAK7dAJ3dAL/TAIwzAKQQhDFMZhj7Bn2CvsHfYJ+4b9wv7hgHBgOCgcHA4Jh4bDwuHhiHBkOCocHY4Jx4bjwvHhhHBiOCmcHE4Jp4bTwunhjHBmOCucHc4J54bzwvnhgnBhuChcHC4Jl4bLwuXhinBluCpcHa4J14brwvXhhnBjuCncHG4Jt4bbwu3hjnBnuCvcHe4J94b7wv3hgfBgeCg8HB4Jj4bHwuPhifBkeCo8HZ4Jz4bnwvPhhfBieCm8HF4Jr4bXwuvhjfBmeCu8Hd4J74b3wvvhg/Bh+Ch8HD4Jn4bPwufhi/Bl+Cp8Hb4J34bvwvfhh/Bj+Cn8HH4Jv4bfwu/hj/Bn+Cv8Hf4J/4b/woQoUZQ4ShIljZJFyaMUUcrovyhVlDpKE6WN0kXpowxRxihTlDnKEmWNskXZoxxRzihXlDvKE+WN8kX5owJRwahQVDgqEhWNikXFoxJRyahUVDoqE5WNykXlowpRxahSVDmqElWNqkXVoxpRzahWVDuqE9WN6kX1owZRw6hR1DhqEjWNmkXNoxZRy6hV1DpqE7WN2kXtow5Rx6hT1DnqEnWNukXdIyzCIyIiIyqiIyZiIy7iIyESIymSIyVSIy3SIyMyIyuyIydyIy/yoyAKoygCEYxQFEc9op5Rr6h31CfqG/WL+kcDooHRoGhwNCQaGg2LhkcjopHRqGh0NCYaG42LxkcToonRpGhyNCWaGk2LpkczopnRrGh2NCeaG82L5kcLooXRomhxtCRaGi2LlkcropXRqmh1tCZaG62L1kcboo3RpmhztCXaGm2Ltkc7op3Rrmh3tCfaG+2L9kcHooPRoehwdCQ6Gh2LjkcnopPRqeh0dCY6G52LzkcXoovRpehydCW6Gl2Lrkc3opvRreh2dCe6G92L7kcPoofRo+hx9CR6Gj2LnkcvopfRq+h19CZ6G72L3kcfoo/Rp+hz9CX6Gn2Lvkc/op/Rr+h39Cf6G/2LEkAikBgkAUlBMpAcpAApwX8gFUgN0oC0IB1IDzKAjCATyAyygKwgG8gOcoCcIBfIDfKAvCAfyA8KgIKgECgMioCioBgoDkqAkqAUKA3KgLKgHCgPKoCKoBKoDKqAqqAaqA5qgJqgFqgN6oC6oB6oDxqAhqARaAyagKagGWgOWoCWoBVoDdqAtqAdaA86gI6gE+gMuoCuoBvoDjCAAwKQgAI0YAALOMADAYhAAjJQgAo0oAMDmMACNnCACzzggwCEIAIAQIBADHqAnqAX6A36gL6gH+gPBoCBYBAYDIaAoWAYGA5GgJFgFBgNxoCxYBwYDyaAiWASmAymgKlgGpgOZoCZYBaYDeaAuWAemA8WgIVgEVgMloClYBlYDlaAlWAVWA3WgLVgHVgPNoCNYBPYDLaArWAb2A52gJ1gF9gN9oC9YB/YDw6Ag+AQOAyOgKPgGDgOToCT4BQ4Dc6As+AcOA8ugIvgErgMroCr4Bq4Dm6Am+AWuA3ugLvgHrgPHoCH4BF4DJ6Ap+AZeA5egJfgFXgN3oC34B14Dz6Aj+AT+Ay+gK/gG/gOfoCf4Bf4Df6Av+AfSICJYGKYBCaFyWBymAKmhP/BVDA1TAPTwnQwPcwAM8JMMDPMArPCbDA7zAFzwlwwN8wD88J8MD8sAAvCQrAwLAKLwmKwOCwBS8JSsDQsA8vCcrA8rAArwkqwMqwCq8JqsDqsAWvCWrA2rAPrwnqwPmwAG8JGsDFsApvCZrA5bAFbwlawNWwD28J2sD3sADvCTrAz7AK7wm6wO8QgDglIQgrSkIEs5CAPBShCCcpQgSrUoA4NaEIL2tCBLvSgDwMYwggCCCGCMewBe8JesDfsA/vCfrA/HAAHwkFwMBwCh8JhcDgcAUfCUXA0HAPHwnFwPJwAJ8JJcDKcAqfCaXA6nAFnwllwNpwD58J5cD5cABfCRXAxXAKXwmVwOVwBV8JVcDVcA9fCdXA93AA3wk1wM9wCt8JtcDvcAXfCXXA33AP3wn1wPzwAD8JD8DA8Ao/CY/A4PAFPwlPwNDwDz8Jz8Dy8AC/CS/AyvAKvwmvwOrwBb8Jb8Da8A+/Ce/A+fAAfwkfwMXwCn8Jn8Dl8AV/CV/A1fAPfwnfwPfwAP8JP8DP8Ar/Cb/A7/AF/wl/wN/wD/8J/MAElQolREpQUJUPJUQqUEv2HUqHUKA1Ki9Kh9CgDyogyocwoC8qKsqHsKAfKiXKh3CgPyovyofyoACqICqHCqAgqioqh4qgEKolKodKoDCqLyqHyqAKqiCqhyqgKqoqqoeqoBqqJaqHaqA6qi+qh+qgBaogaocaoCWqKmqHmqAVqiVqh1qgNaovaofaoA+qIOqHOqAvqirqh7ghDOCIQiShEIwaxiEM8EpCIJCQjBalIQzoykIksZCMHuchDPgpQiCIEEEQIxagH6ol6od6oD+qL+qH+aAAaiAahwWgIGoqGoeFoBBqJRqHRaAwai8ah8WgCmogmocloCpqKpqHpaAaaiWah2WgOmovmofloAVqIFqHFaAlaipah5WgFWolWodVoDVqL1qH1aAPaiDahzWgL2oq2oe1oB9qJdqHdaA/ai/ah/egAOogOocPoCDqKjqHj6AQ6iU6h0+gMOovOofPoArqILqHL6Aq6iq6h6+gGuoluodvoDrqL7qH76AF6iB6hx+gJeoqeoefoBXqJXqHX6A16i96h9+gD+og+oc/oC/qKvqHv6Af6iX6h3+gP+ov+oYQ4UZw4ThInjZPFyeMUccr4vzhVnDpOE6eN08Xp4wxxxjhTnDnOEmeNs8XZ4xxxzjhXnDvOE+eN88X54wJxwbhQXDguEheNi8XF4xJxybhUXDouE5eNy8Xl4wpxxbhSXDmuEleNq8XV4xpxzbhWXDuuE9eN68X14wZxw7hR3DhuEjeNm8XN4xZxy7hV3DpuE7eN28Xt4w5xx7hT3DnuEneNu8XdYyzGYyImYyqmYyZmYy7mYyEWYymWYyVWYy3WYyM2Yyu2Yyd2Yy/24yAO4ygGMYxRHMc94p5xr7h33CfuG/eL+8cD4oHxoHhwPCQeGg+Lh8cj4pHxqP9puqeFsZUEAMB/bfPUtm3btm0jtjMzMWrbtm3btu292if5MIBBDGEWZmMO5mIe5mMBFmIRFmMzsJnYLGw2Ngebi83D5mMLsIXYImwxtgRbii3DlmMrsJXYKmw1tgZbi63D1mMbsI3YJmwztgXbim3DtmM7sJ3YLmw3tgfbi+3D9mMHsIPYIewwdgQ7ih3DjmMnsJPYKew0dgY7i53DzmMXsIvYJewydgW7il3DrmM3sJvYLew2dge7i93D7mMPsIfYI+wx9gR7ij3DnmMvsJfYK+w19gZ7i73D3mMfsI/YJ+wz9gX7in3DvmM/sJ/YL+w39gf7i/3DEvBEeGI8CZ4UT4Ynx1PgKfFUeGo8DZ4WT4enxzPgGfFMeGY8C54Vz4Znx3PgOfH/8Fx4bjwPnhfPh+fHC+AF8UJ4YbwIXhQvhhfHS+Al8VJ4abwMXhYvh5fHK+AV8Up4ZbwKXhWvhlfHa+A18Vp4bbwOXhevh9fHG+AN8UZ4Y7wJ3hRvhjfHW+At8VZ4a7wN3hZvh7fHO+Ad8U54Z7wL3hXvhnfHe+A98V54b7wP3hfvh/fHB+AD8UH4YHwIPhQfhg/HR+Aj8VH4aHwMPhYfh4/HJ+AT8Un4ZHwKPhWfhk/HMRzHCZzEKZzGGZzFOZzHBVzEJVzGFVzFNVzHDdzEAQ5xhFv//iUk4C7u4T4e4CEe4TE+A5+Jz8Jn43Pwufg8fD6+AF+IL8IX40vwpfgyfDm+Al+Jr8JX42vwtfg6fD2+Ad+Ib8I341vwrfg2fDu+A9+J78J343vwvfg+fD9+AD+IH8IP40fwo/gx/Dh+Aj+Jn8JP42fws/g5/Dx+Ab+IX8Iv41fwq/g1/Dp+A7+J38Jv43fwu/g9/D7+AH+IP8If40/wp/gz/Dn+An+Jv8Jf42/wt/g7/D3+Af+If8I/41/wr/g3/Dv+A/+J/8J/43/wv/g/PIFIRCQmkhBJiWREciIFkZJIRaQm0hBpiXREeiIDkZHIRGQmshBZiWxEdiIHkZP4j8hF5CbyEHmJfER+ogBRkChEFCaKEEWJYkRxogRRkihFlCbKEGWJckR5ogJRkahEVCaqEFWJakR1ogZRk6hF1CbqEHWJekR9ogHRkGhENCaaEE2JZkRzogXRkmhFtCbaEG2JdkR7ogPRkehEdCa6EF2JbkR3ogfRk+hF9Cb6EH2JfkR/YgAxkBhEDCaGEEOJYcRwYgQxkhhFjCbGEGOJccR4YgIxkZhETCamEFOJacR0AiNwgiBIgiJogiFYgiN4QiBEQiJkQiFUQiN0wiBMAhCQQIRF2IRDuIRH+ERAhERExMQMYiYxi5hNzCHmEvOI+cQCYiGxiFhMLCGWEsuI5cQKYiWxilhNrCHWEuuI9cQGYiOxidhMbCG2EtuI7cQOYiexi9hN7CH2EvuI/cQB4iBxiDhMHCGOEseI48QJ4iRxijhNnCHOEueI88QF4iJxibhMXCGuEteI68QN4iZxi7hN3CHuEveI+8QD4iHxiHhMPCGeEs+I58QL4iXxinhNvCHeEu+I98QH4iPxifhMfCG+Et+I78QP4ifxi/hN/CH+Ev+IBDIRmZhMQiYlk5HJyRRkSjIVmZpMQ6Yl05HpyQxkRjITmZnMQmYls5HZyRxkTvI/MheZm8xD5iXzkfnJAmRBshBZmCxCFiWLkcXJEmRJshRZmixDliXLkeXJCmRFshJZmaxCViWrkdXJGmRNshZZm6xD1iXrkfXJBmRDshHZmGxCNiWbkc3JFmRLshXZmmxDtiXbke3JDmRHshPZmexCdiW7kd3JHmRPshfZm+xD9iX7kf3JAeRAchA5mBxCDiWHkcPJEeRIchQ5mhxDjiXHkePJCeREchI5mZxCTiWnkdNJjMRJgiRJiqRJhmRJjuRJgRRJiZRJhVRJjdRJgzRJQEISkRZpkw7pkh7pkwEZkhEZkzPImeQscjY5h5xLziPnkwvIheQicjG5hFxKLiOXkyvIleQqcjW5hlxLriPXkxvIjeQmcjO5hdxKbiO3kzvIneQucje5h9xL7iP3kwfIg+Qh8jB5hDxKHiOPkyfIk+Qp8jR5hjxLniPPkxfIi+Ql8jJ5hbxKXiOvkzfIm+Qt8jZ5h7xL3iPvkw/Ih+Qj8jH5hHxKPiOfky/Il+Qr8jX5hnxLviPfkx/Ij+Qn8jP5hfxKfiO/kz/In+Qv8jf5h/xL/iMTqERUYioJlZRKRiWnUlApqVRUaioNlZZKR6WnMlAZqUxUZioLlZXKRmWnclA5kyVQuajcVB4qL5WPyk8VoApShajCVBGqKFWMKk6VoEpSpajSVBmqLFWOKk9VoCpSlajKVBWqKlWNqk7VoGpStajaVB2qLlWPqk81oBpSjajGVBOqKdWMak61oFpSrajWVBuqLdWOak91oDpSnajOVBeqK9WN6k71oHpSvajeVB+qL9WP6k8NoAZSg6jB1BBqKDWMGk6NoEZSo6jR1BhqLDWOGk9NoCZSk6jJ1BRqKjWNmk5hFE4RFElRFE0xFEtxFE8JlEhJlEwplEpplE4ZlEkBClKIsiibciiX8iifCqiQiqiYmkHNpGZRs6k51FxqHjWfWkAtpBZRi6kl1FJqGbWcWkGtpFZRq6k11FpqHbWe2kBtpDZRm6kt1FZqG7Wd2kHtpHZRu6k91F5qH7WfOkAdpA5Rh6kj1FHqGHWcOkGdpE5Rp6kz1FnqHHWeukBdpC5Rl6kr1FXqGnWdukHdpG5Rt6k71F3qHnWfekA9pB5Rj6kn1FPqGfWcekG9pF5Rr6k31FvqHfWe+kB9pD5Rn6kv1FfqG/Wd+kH9pH5Rv6k/1F/qH5VAJ6IT00nopHQyOjmdgk5Jp6JT02notHQ6Oj2dgc5IZ6Iz01norHQ2Ojudg85J/0fnonPTeei8dD46P12ALkgXogvTReiidDG6OF2CLkmXokvTZeiydDm6PF2BrkhXoivTVeiqdLU5GRIS6Jp0Lbo2XYeuS9ej69MN6IZ0I7ox3YRuSjejm9Mt6JZ0K7o13YZuS7ej29Md6I50J7oz3YXuSneju9M96J50L7o33YfuS/ej+9MD6IH0IHowPYQeSg+jh9Mj6JH0KHo0PYYeS4+jx9MT6In0JHoyPYWeSk+jp9MYjdMETdIUTdMMzdIczdMCLdISLdMKrdIardMGbdKAhjSiLdqmHdqlPdqnAzqkIzqmZ9Az6Vn0bHoOPZeeR8+nF9AL6UX0YnoJvZReRi+nV9Ar6VX0anoNvZZeR6+nN9Ab6U30ZnoLvZXeRm+nd9A76V30bnoPvZfeR++nD9AH6UP0YfoIfZQ+Rh+nT9An6VP0afoMfZY+R5+nL9AX6Uv0ZfoKfZW+Rl+nb9A36Vv0bfoOfZe+R9+nH9AP6Uf0Y/oJ/ZR+Rj+nX9Av6Vf0a/oN/ZZ+R7+nP9Af6U/0Z/oL/ZX+Rn+nf9A/6V/0b/oP/Zf+RycwiZjETBImKZOMSc6kYFIyqZjUTBomLZOOSc9kYDIymZjMTBYmK5ONyc7kYHIy/zG5mNxMHiYvk4/JzxRgCjKFmMJMEaYoU4wpzpRgSjKlmNJMGaYsU44pz1RgKjKVmMpMFaYqU42pztRgajK1mNpMHaYuU4+pzzRgGjKNmMZME6Yp04xpzrRgWjKtmNZMG6Yt045pz3RgOjKdmM5MF6Yr043pzvRgejK9mN5MH6Yv04/pzwxgBjKDmMHMEGYoM4wZzoxgRjKjmNHMGGYsM44Zz0xgJjKTmMnMFGYqM42ZzmAMzhAMyVAMzTAMy3AMzwiMyEiMzCiMymiMzhiMyQAGMoixGJtxGJfxGJ8JmJCJmJiZwcxkZjGzmTnMXGYeM59ZwCxkFjGLmSXMUmYZs5xZwaxkVjGrmTXMWmYds57ZwGxkNjGbmS3MVmYbs53ZwexkdjG7mT3MXmYfs585wBxkDjGHmSPMUeYYc5w5wZxkTjGnmTPMWeYcc565wFxkLjGXmSvMVeYac525wdxkbjG3mTvMXeYec595wDxkHjGPmSfMU+YZ85x5wbxkXjGvmTfMW+Yd8575wHxkPjGfmS/MV+Yb8535ce94QgLzm/nD/GX+MQlsIjYxm4RNyiZjk7Mp2JRsKjY1m4ZNy6Zj07MZ2IxsJjYzm4XNymZjs7M52Jzsf2wuNjebh83L5mPzswXYgmwhtjBbhC3KFmOLsyXYkmwptjRbhi3LlmPLsxXYimwltjJbha3KVmOrszXYmmwttjZbh63L1mPrsw3YhmwjtjHbhG3KNmObsy3YlmwrtjXbhm3LtmPbsx3YjmwntjPbhe3KdmO7sz3Ynmwvtjfbh+3L9mP7swPYgewgdjA7hB3KDmOHsyPYkewodjQ7hh3LjmPHsxPYiewkdjI7hZ3KTmOnsxiLswRLshRLswzLshzLswIrshIrswqrshqrswZrsoCFLGIt1mYd1mU91mcDNmQjNmZnsDPZWexsdg47l53HzmcXsAvZRexidgm7lF3GLmdXsCvZVexqdg27ll3Hrmc3sBvZTexmdgu7ld3Gbmd3sDvZXexudg+7l93H7mcPsAfZQ+xh9gh7lD3GHmdPsCfZU+xp9gx7lj3HnmcvsBfZS+xl9gp7lb3GXmdvsDfZW+xt9g57l73H3mcfsA/ZR+xj9gn7lH3GPmdfsC/ZV+xr9g37ln3Hvmc/sB/ZT+xn9gv7lf3Gfmd/sD/ZX+xv9g/7l/3HJnCJuMRcEi4pl4xLzqXgUnKpuNRcGi4tl45Lz2XgMnKZuMxcFi4rl43LzuXgcnL/cbm43FweLi+Xj8vPFeAKcoW4wlwRrihXjCvOleBKcqW40lwZrixXjivPVeAqcpW4ylwVripXjavO1eBqcrW42lwdri5Xj6vPNeAaco24xlwTrinXjGvOteBacq241lwbri3XjmvPdeA6cp24zlwXrivXjevO9eB6cr243lwfri/Xj+vPDeAGcoO4wdwQbig3jBvOjeBGcqO40dwYbiw3jhvPTeAmcpO4ydwUbio3jZvOYRzOERzJURzNMRzLcRzPCZzISZzMKZzKaZzOGZzJAQ5yiLM4m3M4l/M4nwu4kIu4mJvBzeRmcbO5Odxcbh43n1vALeQWcYu5JdxSbhm3nFvBreRWcau5Ndxabh23ntvAbeQ2cZu5LdxWbhu3ndvB7eR2cbu5Pdxebh+3nzvAHeQOcYe5I9xR7hh3nDvBneROcae5M9xZ7hx3nrvAXeQucZe5K9xV7hp3nbvB3eRucbe5O9xd7h53n3vAPeQe/R9U4J5zL7iX3CvuNfeGe8u9495zH7iP3CfuM/eF+8p9475zP7if3C/uN/eH+8v94xL4RHxiPgmflE/GJ+dT8Cn5VHxqPg2flk/Hp+cz8Bn5THxmPguflc/GZ+dz8Dn5//hcfG4+D5+Xz8fn5wvwBflCfGG+CF+UL8YX50vwJflSfGm+DF+WL8eX5yvwFflKfGW+Cl+Vr8ZX52vwNflafG2+Dl+Xr8fX5xvwDflGfGO+Cd+Ub8Y351vwLflWfGu+Dd+Wb8e35zvwHflOfGe+C9+V78Z353vwPflefG++D9+X78f35wfwA/lB/GB+CD+UH8YP50fwI/lR/Gh+DD+WH8eP5yfwE/lJ/GR+Cj+Vn8ZP5zEe5wme5Cme5hme5Tme5wVe5CVe5hVe5TVe5w3e5AEPecRbvM07vMt7vM8HfMhHfMzP4Gfys/jZ/Bx+Lj+Pn88v4Bfyi/jF/BJ+Kb+MX86v4Ffyq/jV/Bp+Lb+OX89v4Dfym/jN/BZ+K7+N387v4Hfyu/jd/B5+L7+P388f4A/yh/jD/BH+KH+MP86f4E/yp/jT/Bn+LH+OP89f4C/yl/jL/BX+Kn+Nv87f4G/yt/jb/B3+Ln+Pv88/4B/yj/jH/BP+Kf+Mf86/4F/yr/jX/Bv+Lf+Of89/4D/yn/jP/Bf+K/+N/87/4H/yv/jf/B/+L/+PTxASCYmFJEJSIZmQXEghpBRSCamFNEJaIZ2QXsggZBQyCZmFLEJWIZuQXcgh5BT+E3IJuYU8Ql4hn5BfKCAUFAoJhYUiQlGhmFBcKCGUFEoJpYUyQlmhnFBeqCBUFCoJlYUqQlWhmlBdqCHUFGoJtYU6Ql2hnlBfaCA0FBoJjYUmQlOhmdBcaCG0FFoJrYU2QluhndBe6CB0FDoJnYUuQlehm9Bd6CH0FHoJvYU+Ql+hn9BfGCAMFAYJg4UhwlBhmDBcGCGMFEYJo4UxwlhhnDBemCBMFCYJk4UpwlRhmjBdwARcIARSoARaYARW4AReEARRkARZUARV0ARdMARTAAIUkGAJtuAIruAJvhAIoRAJsTBDmCnMEmYLc4S5wjxhvrBAWCgsEhYLS4SlwjJhubBCWCmsElYLa4S1wjphvbBB2ChsEjYLW4StwjZhu7BD2CnsEnYLe4S9wj5hv3BAOCgcEg4LR4SjwjHhuHBCOCmcEk4LZ4SzwjnhvHBBuChcEi4LV4SrwjXhunBDuCncEm4Ld4S7wj3hvvBAeCg8Eh4LT4SnwjPhufBCeCm8El4Lb4S3wjvhvfBB+Ch8Ej4LX4Svwjfhu/BD+Cn8En4Lf4S/wj8hQUwkJhaTiEnFZGJyMYWYUkwlphbTiGnFdGJ6MYOYUcwkZhaziFnFbGJ2MYeYU/xPzCXmFvOIecV8Yn6xgFhQbJCQkFBELCoWE4uLJcSSYimxtFhGLCuWE8uLFcSKYiWxslhFrCpWE6uLNcSaYi2xtlhHrCvWE+uLDcSGYiOxsdhEbCo2E5uLLcSWYiuxtdhGbCu2E9uLHcSOYiexs9hF7Cp2E7uLPcSeYi+xt9hH7Cv2E/uLA8SB4iBxsDhEHCoOE4eLI8SR4ihxtDhGHCuOE8eLE8SJ4iRxsjhFnCpOE6eLmIiLhEiKlEiLjMiKnMiLgiiKkiiLiqiKmqiLhmiKQIQiEi3RFh3RFT3RFwMxFCMxFmeIM8VZ4mxxjjhXnCfOFxeIC8VF4mJxibhUXCYuF1eIK8VV4mpxjbhWXCeuFzeIG8VN4mZxi7hV3CZuF3eIO8Vd4m5xj7hX3CfuFw+IB8VD4mHxiHhUPCYeF0+IJ8VT4mnxjHhWPCeeFy+IF8VL4mXxinhVvCZeF2+IN8Vb4m3xjnhXvCfeFx+ID8VH4mPxifhUfCY+F1+IL8VX4mvxjfhWfCe+Fz+IH8VP4mfxi/hV/CZ+F3+IP8Vf4m/xj/hX/CcmSImkxFISKamUTEoupZBSSqmk1FIaKa2UTkovZZAySpmkzFIWKauUTcou5ZBySv9JuaTcUh4pr5RPyi8VkApKhaTCUhGpqFRMKi6VkEpKpaTSUhmprFROKi9VkCpKlaTKUhWpqlRNqi7VkGpKtaTaUh2prlRPqi81kBpKjaTGUhOpqdRMai61kFpKraTWUhuprdROai91kDpKnaTOUhepq9RN6i71kHpKvaTeUh+pr9RP6i8NkAZKg6TB0hBpqDRMGi6NkEZKo6TR0hhprDROGi9NkCZKk6TJ0hRpqjRNmi5hEi4REilREi0xEitxEi8JkihJkiwpkippki4ZkikBCUpIsiRbciRX8iRfCqRQiqRYmiHNlGZJs6U50lxpnjRfWiAtlBZJi6Ul0lJpmbRcWiGtlFZJq6U10lppnbRe2iBtlDZJm6Ut0lZpm7Rd2iHtlHZJu6U90l5pn7RfOiAdlA5Jh6Uj0lHpmHRcOiGdlE5Jp6Uz0lnpnHReuiBdlC5Jl6Ur0lXpmnRduiHdlG5Jt6U70l3pnnRfeiA9lB5Jj6Un0lPpmfRceiG9lF5Jr6U30lvpnfRe+iB9lD5Jn6Uv0lfpm/Rd+iH9lH5Jv6U/0l/pn5QgJ5ITy0nkpHIyObmcQk4pp5JTy2nktHI6Ob2cQc4oZ5Izy1nkrHI2ObucQ84p/yfnknPLeeS8cj45v1xALigXkgvLReSicjG5uFxCLimXkkvLZeSycjm5vFxBrihXkivLVeSqcjW5ulxDrinXkmvLdeS6cj25vtxAbig3khvLTeSmcjO5udxCbim3klvLbeS2cju5vdxB7ih3kjvLXeSucje5u9xD7in3knvLfeS+cj+5vzxAHigPkgfLQ+Sh8jB5uDxCHimPkkfLY+Sx8jh5vDxBnihPkifLU+Sp8jR5uozJuEzIpEzJtMzIrMzJvCzIoizJsqzIqqzJumzIpgxkKCPZkm3ZkV3Zk305kEM5kmN5hjxTniXPlufIc+V58nx5gbxQXiQvlpfIS+Vl8nJ5hbxSXiWvltfIa+V18np5g7xR3iRvlrfIW+Vt8nZ5h7xT3iXvlvfIe+V98n75gHxQPiQflo/IR+Vj8nH5hHxSPiWfls/IZ+Vz8nn5gnxRviRflq/IV+Vr8nX5hnxTviXflu/Id+V78n35gfxQfiQ/lp/IT+Vn8nP5hfxSfiW/lt/Ib+V38nv5g/xR/iR/lr/IX+Vv8nf5h/xT/iX/lv/If+V/coKSSEmsJFGSKsmU5EoKJaWSSkmtpFHSKumU9EoGJaOSScmsZFGyKtmU7EoOJafyn5JLya3kUfIq+ZT8SgGloFJIKawUUYoqxZTiSgmlpFJKKa2UUcoq5ZTySgWlolJJqaxUUaoq1ZTqSg2lplJLqa3UUeoq9ZT6SgOlodJIaaw0UZoqzZTmSgulpdJKaa20Udoq7ZT2Sgelo9JJ6ax0Uboq3ZTuSg+lp9JL6a30Ufoq/ZT+ygBloDJIGawMUYYqw5ThyghlpDJKGa2MUcYq45TxygRlojJJmaxMUaYq05TpCqbgCqGQCqXQCqOwCqfwiqCIiqTIiqKoiqboiqGYClCgghRLsRVHcRVP8ZVACZVIiZUZykxlljJbmaPMVeYp85UFykJlkbJYWaIsVZYpy5UVykpllbJaWaOsVdYp65UNykZlk7JZ2aJsVbYp25Udyk5ll7Jb2aPsVfYp+5UDykHlkHJYOaIcVY4px5UTyknllHJaOaOcVc4p55ULykXlknJZuaJcVa4p15Ubyk3llnJbuaPcVe4p95UHykPlkfJYeaI8VZ4pz5UXykvllfJaeaO8Vd4p75UPykflk/JZ+aJ8Vb4p35Ufyk/ll/Jb+aP8Vf4pCWoiNbGaRE2qJlOTqynUlGoqNbWaRk2rplPTqxnUjGomNbOaRc2qZlOzqznUnOp/ai41t5pHzavmU/OrBdSCaiG1sFpELaoWU4urJdSSaim1tFpGLauWU8urFdSKaiW1slpFrapWU6urNdSaai21tlpHravWU+urDdSGaiO1sdpEbao2U5urLdSWaiu1tdpGbau2U9urHdSOaie1s9pF7ap2U7urPdSeai+1t9pH7av2U/urA9SB6iB1sDpEHaoOU4erI9SR6ih1tDpGHauOU8erE9SJ6iR1sjpFnapOU6ermIqrhEqqlEqrjMqqnMqrgiqqkiqriqqqmqqrhmqqQIUqUi3VVh3VVT3VVwM1VCM1VmeoM9VZ6mx1jjpXnafOVxeoC9VF6mJ1ibpUXaYuV1eoK9VV6mp1jbpWXaeuVzeoG9VN6mZ1i7pV3aZuV3eoO9Vd6m51j7pX3afuVw+oB9VD6mH1iHpUPaYeV0+oJ9VT6mn1jHpWPaeeVy+oF9VL6mX1inpVvaZeV2+oN9Vb6m31jnpXvafeVx+oD9VH6mP1ifpUfaY+V1+oL9VX6mv1jfpWfae+Vz+oH9VP6mf1i/pV/aZ+V3+oP9Vf6m/1j/pX/acmaIm0xFoSLamWTEuupdBSaqm01FoaLa2WTkuvZdAyapm0zFoWLauWTcuu5dByav9pubTcWh4tr5ZPy68V0ApqhbTCWhGtqFZMK66V0EpqpbTSWhmtrFZOK69V0CpqlbTKWhWtqlZNq67V0GpqtbTa2r8kCQn1tPpaA62h1khrrDXRmmrNtOZaC62l1kprrbXR2mrttPZaB62j1knrrHXRumrdtO5aD62n1kvrrfXR+mr9tP7aAG2gNkgbrA3RhmrDtOHaCG2kNkobrY3RxmrjtPHaBG2iNkmbrE3RpmrTtOkapuEaoZEapdEao7Eap/GaoImapMmaoqmapumaoZka0KCGNEuzNUdzNU/ztUALtUiLtRnaTG2WNlubo83V5mnztQXaQm2Rtlhboi3VlmnLtRXaSm2Vtlpbo63V1mnrtQ3aRm2Ttlnbom3VtmnbtR3aTm2Xtlvbo+3V9mn7tQPaQe2Qdlg7oh3VjmnHtRPaSe2Udlo7o53VzmnntQvaRe2Sdlm7ol3VrmnXtRvaTe2Wdlu7o93V7mn3tQfaQ+2R9lh7oj3VnmnPtRfaS+2V9lp7o73V3mnvtQ/aR+2T9ln7on3VvmnftR/aT+2X9lv7o/3V/mkJeiI9sZ5ET6on05PrKfSUeio9tZ5GT6un09PrGfSMeiY9s55Fz6pn07PrOfSc+n96Lj23nkfPq+fT8+sF9IJ6Ib2wXkQvqhfTi+sl9JJ6Kb20XkYvq5fTy+sV9Ip6Jb2yXkWvqlfTq+s19Jp6Lb22Xkevq9fT6+sN9IZ6I72x3kRvqjfTm+st9JZ6K7213kZvq7fT2+sd9I56J72z3kXvqnfTu+s99J56L7233kfvq/fT++sD9IH6IH2wPkQfqg/Th+sj9JH6KH20PkYfq4/Tx+sT9In6JH2yPkWfqk/Tp+uYjuuETuqUTuuMzuqczuuCLuqSLuuKruqaruuGbupAhzrSLd3WHd3VPd3XAz3UIz3WZ+gz9Vn6bH2OPlefp8/XF+gL9UX6Yn2JvlRfpi/XV+gr9VX6an2NvlZfp6/XN+gb9U36Zn2LvlXfpm/Xd+g79V36bn2Pvlffp+/XD+gH9UP6Yf2IflQ/ph/XT+gn9VP6af2MflY/p5/XL+gX9Uv6Zf2KflW/pl/Xb+g39Vv6bf2Ofle/p9/XH+gP9Uf6Y/2J/lR/pj/XX+gv9Vf6a/2N/lZ/p7/XP+gf9U/6Z/2L/lX/pn/Xf+g/9V/6b/2P/lf/pycYiYzERhIjqZHMSG6kMFIaqYzURhojrZHOSG9kMDIamYzMRhYjq5HNyG7kMHIa/xm5jNxGHiOvkc/IbxQwChqFjMJGEaOoUcwobpQwShqljNJGGaOsUc4ob1QwKhqVjMpGFaOqUc2obtQwahq1jNpGHaOuUc+obzQwGhqNjMZGE6Op0cxobrQwWhqtjNZGG6Ot0c5ob3QwOhqdjM5GF6Or0c3obvQwehq9jN5GH6Ov0c/obwwwBhqDjMHGEGOoMcwYbowwRhqjjNHGGGOsMc4Yb0wwJhqTjMnGFGOqMc2YbmAGbhAGaVAGbTAGa3AGbwiGaEiGbCiGamiGbhiGaQADGsiwDNtwDNfwDN8IjNCIjNiYYcw0ZhmzjTnGXGOeMd9YYCw0FhmLjSXGUmOZsdxYYaw0VhmrjTXGWmOdsd7YYGw0NhmbjS3GVmObsd3YYew0dhm7jT3GXmOfsd84YBw0DhmHjSPGUeOYcdw4YZw0ThmnjTPGWeOccd64YFw0LhmXjSvGVeOacd24Ydw0bhm3jTvGXeOecd94YDw0HhmPjSfGU+OZ8dx4Ybw0XhmvjTfGW+Od8d74YHw0PhmfjS/GV+Ob8d34Yfw0fhm/jT/GX+OfkWAmMhObScykZjIzuZnCTGmmMlObacy0ZjozvZnBzGhmMjObWcysZjYzu5nDzGn+Z+Yyc5t5zLxmPjO/WcAsaBYyC5tFzKJmMbO4WcIsaZYyS5tlzLJmObO8WcGsaFYyK5tVzKpmNbO6WcOsadYya5t1zLpmPbO+2cBsaDYyG5tNzKZmM7O52cJsabYyW5ttzLZmO7O92cHsaHYyO5tdzK5mN7O72cPsafYye5t9zL5mP7O/OcAcaA4yB5tDzKHmMHO4OcIcaY4yR5tjzLHmOHO8OcGcaE4yJ5tTzKnmNHO6iZm4SZikSZm0yZisyZm8KZiiKZmyqZiqqZm6aZimCUxoItMybdMxXdMzfTMwQzMyY3OGOdOcZc4255hzzXnmfHOBudBcZC42l5hLzWXmcnOFudJcZa4215hrzXXmenODudHcZG42t5hbzW3mdnOHudPcZe4295h7zX3mfvOAedA8ZB42j5hHzWPmcfOEedI8ZZ42z5hnzXPmefOCedG8ZF42r5hXzWvmdfOGedO8Zd4275h3zXvmffOB+dB8ZD42n5hPzWfmc/OF+dJ8Zb4235hvzXfme/OD+dH8ZH42v5hfzW/md/OH+dP8Zf42/5h/zX9mAkgEEoMkIClIBpKDFCAlSAVSgzQgLUgH0oMMICPIBDKDLCAryAaygxwgJ/gP5AK5QR6QF+QD+UEBUBAUAoVBEVAUFAPFQQlQEpQCpUEZUBaUA+VBBVARVAKVQRVQFVQD1UENUBPUArVBHVAX1AP1QQPQEDQCjUET0BQ0A81BC9AStAKtQRvQFrQD7UEH0BF0Ap1BF9AVdAPdQQ/QE/QCvUEf0Bf0A/3BADAQDAKDwRAwFAwDw8EIMBKMAqPBGDAWjAPjwQQwEUwCk8EUMBVMA9MBBnBAABJQgAYMYAEHeCAAEUhABgpQgQZ0YAATAAABAhawgQNc4AEfBCAEEYjBDDATzAKzwRwwF8wD88ECsBAsAovBErAULAPLwQqwEqwCq8EasBasA+vBBrARbAKbwRawFWwD28EOsBPsArvBHrAX7AP7wQFwEBwCh8ERcBQcA8fBCXASnAKnwRlwFpwD58EFcBFcApfBFXAVXAPXwQ1wE9wCt8EdcBfcA/fBA/AQPAKPwRPwFDwDz8EL8BK8Aq/BG/AWvAPvwQfwEXwCn8EX8BV8A9/BD/AT/AK/wR/wF/wDCTARTAyTwKQwGUwOU8CUMBVMDdPAtDAdTA8zwIwwE8wMs8CsMBvMDnPAnPA/mAvmhnlgXpgP5ocFYEFYCBaGRWBRWAwWhyVgSVgKloZlYFlYDpaHFWBFWAlWhlVgVVgNVoc1YE1YC9aGdWBdWA/Whw1gQ9gINoZNYFPYDDaHLWBL2Aq2hm1gW9gOtocdYEfYCXaGXWBX2A12hz1gT9gL9oZ9YF/YD/aHA+BAOAgOhkPgUDgMDocj4Eg4Co6GY+BYOA6OhxPgRDgJToZT4FQ4DU6HGMQhAUlIQRoykIUc5KEARShBGSpQhRrUoQFNCCCECFrQhg50oQd9GMAQRjCGM+BMOAvOhnPgXDgPzocL4EK4CC6GS+BSuAwuhyvgSrgKroZr4Fq4Dq6HG+BGuAluhlvgVrgNboc74E64C+6Ge+BeuA/uhwfgQXgIHoZH4FF4DB6HJ+BJeAqehmfgWXgOnocX4EV4CV6GV+BVeA1ehzfgTXgL3oZ34F14D96HD+BD+Ag+hk/gU/gMPocv4Ev4Cr6Gb+Bb+A6+hx/gR/gJfoZf4Ff4DX6HP+BP+Av+hn/gX/gPJqBEKDFKgpKiZCg5SoFSolQoNUqD0qJ0KD3KgDKiTCgzyoKyomwoO8qBcqL/UC6UG+VBeVE+lB8VQAVRIVQYFUFFUTFUHJVAJVEpVBqVQWVROVQeVUAVUSVUGVVBVVE1VB3VQDVRLVQb1UF1UT1UHzVADVEj1Bg1QU1RM9QctUAtUSvUGrVBbVE71B51QB1RJ9QZdUFdUTfUHfVAPVEv1Bv1QX1RP9QfDUAD0SA0GA1BQ9EwNByNQCPRKDQajUFj0Tg0Hk1AE9EkNBlNQVPRNDQdYQhHBCIRhWjEIBZxiEcCEpGEZKQgFWlIRwYyEUAQIWQhGznIRR7yUYBCFKEYzUAz0Sw0G81Bc9E8NB8tQAvRIrQYLUFL0TK0HK1AK9EqtBqtQWvROrQebUAb0Sa0GW1BW9E2tB3tQDvRLrQb7UF70T60Hx1AB9EhdBgdQUfRMXQcnUAn0Sl0Gp1BZ9E5dB5dQBfRJXQZXUFX0TV0Hd1AN9EtdBvdQXfRPXQfPUAP0SP0GD1BT9Ez9By9QC/RK/QavUFv0Tv0Hn1AH9En9Bl9QV/RN/Qd/UA/0S/0G/1Bf9E/lGAlshJbSaykVkJCciuFldJKZaW20lhprXRWeiuDldHKZGW2slhZrWxWdiuHldP6z8pl5bbyWHmtfFZ+q4BV0CpkFbaKWEWtYlZxq4RV0ipllbbKWGWtclZ5q4JV0apkVbaqWFWtalZ1q4ZV06pl1bbqWHWtelZ9q4HV0GpkNbaaWE2tZlZzq4XV0mpltbbaWG2tdlZ7q4PV0epkdba6WF2tblZ3q4fV0+pl9bb6WH2tflZ/a4A10BpkDbaGWEOtYdZwa4Q10hpljbbGWGOtcdZ4a4I10ZpkTbamWFOtadZ0C7Nwi7BIi7Joi7FYi7N4S7BES7JkS7FUS7N0y7BMC1jQQpZl2ZZjuZZn+VZghVZkxdYMa6Y1y5ptzbHmWvOs+dYCa6G1yFpsLbGWWsus5dYKa6W1ylptrbHWWuus9dYGa6O1ydpsbbG2Wtus7dYOa6e1y9pt7bH2Wvus/dYB66B1yDpsHbGOWses49YJ66R1yjptnbHOWues89YF66J1ybpsXbGuWtes69YN66Z1y7pt3bHuWves+9YD66H1yHpsPbGeWs+s59YL66X1ynptvbHeWu+s99YH66P1yfpsfbG+Wt+s79YP66f1y/pt/bH+Wv+sBDuRndhOYie1k9nJ7RR2SjuVndpOY6e109np7Qx2RjuTndnOYme1s9nZ7Rx2Tvs/O5ed285j57Xz2fntAnZBu5BdOFERu6hdzC5ul7BL2qXs0nYZu6xdzi5vV7Ar2pXsynYVu6pdza5u17Br2rXs2nYdu65dz65vN7Ab2o3sxnYTu6ndzG5ut7Bb2q3s1nYbu63dzm5vd7A72p3sznYXu6vdze5u97B72r3s3nYfu6/dz+5vD7AH2oPswfYQe6g9zB5uj7BH2qPs0fYYe6w9zh5vT7An2pPsyfYUe6o9zZ5uYzZuEzZpUzZtMzZrczZvC7ZoS7ZsK7Zqa7ZuG7ZpAxvayLZs23Zs1/Zs3w7s0I7s2J5hz7Rn2bPtOfZce549315gL7QX2YvtJfZSe5m93F5hr7RX2avtNfZae5293t5gb7Q32ZvtLfZWe5u93d5h77R32bvtPfZee5+93z5gH7QP2YftI/ZR+5h93D5hn7RP2aftM/ZZ+5x93r5gX7Qv2ZftK/ZV+5p93b5h37Rv2bftO/Zd+559335gP7Qf2Y/tJ/ZT+5n93H5hv7Rf2a/tN/Zb+5393v5gf7Q/2Z/tL/ZX+5v93f5h/7R/2b/tP/Zf+5+d4CRyEjtJnKROMie5k8JJ6aRyUjtpnLROOie9k8HJ6GRyMjtZnKxONie7k8PJ6fzn5HJyO3mcvE4+J79TwCnoFHIKO0Wcok4xp7hTwinplHJKO2Wcsk45p7xTwanoVHIqO1Wcqk41p7pTw6np1HJqO3Wcuk49p77TIHFDp5HT2GniNHWaOc2dFk5Lp5XT2mnjtHXaOe2dDk5Hp5PT2enidHW6Od2dHk5Pp5fT2+nj9HX6Of2dAc5AZ5Az2BniDHWGOcOdEc5IZ5Qz2hnjjHXGOeOdCc5EZ5Iz2ZniTHWmOdMdzMEdwiEdyqEdxmEdzuEdwREdyZEdxVEdzdEdwzEd4EAHOZZjO47jOp7jO4ETOpETOzOcmc4sZ7Yzx5nrzHPmOwuchc4iZ7GzxFnqLHOWOyuclc4qZ7WzxlnrrHPWOxucjc4mZ7OzxdnqbHO2Ozucnc4uZ7ezx9nr7HP2Owecg84h57BzxDnqHHOOOyeck84p57RzxjnrnHPOOxeci84l57JzxbnqXHOuOzecm84t57Zzx7nr3HPuOw+ch84j57HzxHnqPHOeOy+cl84r57XzxnnrvHPeOx+cj84n57PzxfnqfHO+Oz+cn84v57fzx/nr/HMS3ERuYjeJm9RN5iZ3U7gp3VRuajeNm9ZN56Z3M7gZ3UxuZjeLm9XN5mZ3c7g53f/cXG5uN4+b183n5ncLuAXdQm5ht4hb1C3mFndLuCXdUm5pt4xb1i3nlncruBXdSm5lt4pb1a3mVndruDXdWm5tt45b163n1ncbuA3dRm5jt4nb1G3mNndbuC3dVm5rt43b1m3ntnc7uB3dTm5nt4vb1e3mdnd7uD3dXm5vt4/b1+3n9ncHuAPdQe5gd4g71B3mDndHuCPdUe5od4w71h3njncnuBPdSe5kd4o71Z3mTncxF3cJl3Qpl3YZl3U5l3cFV3QlV3YVV3U1V3cN13SBC13kWq7tOq7req7vBm7oRm7sznBnurPc2e4cd647z53vLnAXuovcxe4Sd6m7zF3urnBXuqvc1e4ad627zl3vbnA3upvcze4Wd6u7zd3u7nB3urvc3e4ed6+7z93vHnAPuofcw+4R96h7zD3unnBPuqfc0+4Z96x7zj3vXnAvupfcy+4V96p7zb3u3nBvurfc2+4d9657z73vPnAfuo/cx+4T96n7zH3uvnBfuq/c1+4b9637zn3vfnA/up/cz+4X96v7zf3u/nB/ur/c3+4f96/7z03wEnmJvSReUi+Zl9xL4aX0UnmpvTReWi+dl97L4GX0MnmZvSxeVi+bl93L4eX0/vNyebm9PF5eL5+X3yvgFfQKeYW9Il5Rr5hX3CvhlfRKeaW9Ml5Zr5xX3qvgVfQqeZW9Kl5Vr5pX3avh1fRqebW9Ol5dr55X32vgNfQaeY29Jl5Tr5nX3GvhtfRaea29Nl5br53X3uvgdfQ6eZ29Ll5Xr5vX3evh9fR6eb29Pl5fr5/X3xvgDfQGeYO9Id5Qb5g33BvhjfRGeaO9Md5Yb5w33pvgTfQmeZO9Kd5Ub5o33cM83CM80qM82mM81uM83hM80ZM82VM81dM83TM80wMe9JBnebbneK7neb4XeKEXebE3w5vpzfJme3O8ud48b763wFvoLfIWe0u8pd4yb7m3wlvprfJWe2u8td46b723wdvobfI2e1u8rd42b7u3w9vp7fJ2e3u8vd4+b793wDvoHfIOe0e8o94x77h3wjvpnfJOe2e8s94577x3wbvoXfIue1e8q94177p3w7vp3fJue3e8u9497773wHvoPfIee0+8p94z77n3wnvpvfJee2+8t9477733wfvoffI+e1+8r94377v3w/vp/fJ+e3+8v94/L8FP5Cf2k/hJ/WR+cj+Fn9JP5af20/hp/XR+ej+Dn9HP5Gf2s/hZ/Wx+dj+Hn9P/z8/l5/bz+Hn9fH5+v4Bf0C/kF/aL+EX9Yn5xv4Rf0i/ll/bL+GX9cn55v4Jf0a/kV/ar+FX9an51v4Zf06/l1/br+HX9en59v4Hf0G/kN/ab+E39Zn5zv4Xf0m/lt/bb+G39dn57v4Pf0e/kd/a7+F39bn53v4ff0+/l9/b7+H39fn5/f4A/0B/kD/aH+EP9Yf5wf4Q/0h/lj/bH+GP9cf54f4I/0Z/kT/an+FP9af50H/Nxn/BJn/Jpn/FZn/N5X/BFX/JlX/FVX/N13/BNH/jQR77l277ju77n+37gh37kx/4Mf6Y/y5/tz/Hn+vP8+f4Cf6G/yF/sL/GX+sv85f4Kf6W/yl/tr/HX+uv89f4Gf6O/yd/sb/G3+tv87f4Of6e/y9/t7/H3+vv8/f4B/6B/yD/sH/GP+sf84/4J/6R/yj/tn/HP+uf88/4F/6J/yb/sX/Gv+tf86/4N/6Z/y7/t3/Hv+vf8+/4D/6H/yH/sP/Gf+s/85/4L/6X/yn/tv/Hf+u/89/4H/6P/yf/sf/G/+t/87/4P/6f/y//t//H/+v/8hCBRkDhIEiQNkgXJgxRByiBVkDpIE6QN0gXpgwxBxiBTkDnIEmQNsgXZgxxBzuC/IFeQO8gT5A3yBfmDAkHBoFBQOCgSFA2KBcWDEkHJoFRQOigTlA3KBeWDCkHFoFJQOagSVA2qBdWDGkHNoFZQO6gT1A3qBfWDBkHDoFHQOGgSNA2aBc2DFkHLoFXQOmgTtA3aBe2DDkHHoFPQOegSdA26Bd2DHkHPoFfQO+gT9A36Bf2DAcHAYFAwOBgSDA2GBcODEcHIYFQwOhgTjA3GBeODCcHEYFIwOZgSTA2mBdMDLMADIiADKqADJmADLuADIRADKZADJVADLdADIzADEMAABVZgB07gBl7gB0EQBlEQBzOCmcGsYHYwJ5gbzAvmBwuChcGiYHGwJFgaLAuWByuClcGqYHWwJlgbrAvWBxuCjcGmYHOwJdgabAu2BzuCncGuYHewJ9gb7Av2BweCg8Gh4HBwJDgaHAuOByeCk8Gp4HRwJjgbnAvOBxeCi8Gl4HJwJbgaXAuuBzeCm8Gt4HZwJ7gb3AvuBw+Ch8Gj4HHwJHgaPAueBy+Cl8Gr4HXwJngbvAveBx+Cj8Gn4HPwJfgafAu+Bz+Cn8Gv4HfwJ/gb/AsSwkRh4jBJmDRMFiYPU4Qpw1Rh6jBNmDZMF6YPM4QZw0xh5jBLmDXMFmYPc4Q5w//CXGHuME+YN8wX5g8LhAXDQmHhsEhYNCwWFg9LhCXDUmHpsExYNiwXlg8rhBXDSmHlsEpYNawWVg9rhDXDWmHtsE5YN6wX1g8bhA3DRmHjsEnYNGwWNg9bhC3DVmHrsE3YNmwXtg87hB3DTmHnsEvYNewWdg97hD3DXmHvsE/YN+wX9g8HhAPDQeHgcEg4NBwWDg9HhCPDUeHocEw4NhwXjg8nhBPDSeHkcEo4NZwWTg+xEA+JkAypkA6ZkA25kA+FUAylUA6VUA21UA+N0AxBCEMUWqEdOqEbeqEfBmEYRmEczghnhrPC2eGccG44L5wfLggXhovCxeGScGm4LFwerghXhqvC1eGacG24Llwfbgg3hpvCzeGWcGu4Ldwe7gh3hrvC3eGecG+4L9wfHggPhofCw+GR8Gh4LDwenghPhqfC0+GZ8Gx4LjwfXggvhpfCy+GV8Gp4Lbwe3ghvhrfC2+Gd8G54L7wfPggfho/Cx+GT8Gn4LHwevghfhq/C1+Gb8G34Lnwffgg/hp/Cz+GX8Gv4Lfwe/gh/hr/C3+Gf8G/4L0yIEkWJoyRR0ihZlDxKEaWMUkWpozRR2ihdlD7KEGWMMkWZoyxR1ihblD3KEeWM/otyRbmjPFHeKF+UPyoQFYwKRYWjIlHRqFhUPCoRlYxKRaWjMlHZqFxUPqoQVYwqRZWjKlHVqFpUPaoR1YxqRbWjOlHdqF5UP2oQNYwaRY2jJlHTqFnUPGoRtYxaRa2jNlHbqF3UPuoQdYw6RZ2jLlHXqFvUPeoR9Yx6Rb2jPlHfqF/UPxoQDYwGRYOjIdHQaFg0PBoRjYxGRaOjMdHYaFw0PpoQTYwmRZOjKdHUaFo0PcIiPCIiMqIiOmIiNuIiPhIiMZIiOVIiNdIiPTIiMwIRjFBkRXbkRG7kRX4URGEURXE0I5oZzYpmR3OiudG8aH60IFoYLYoWR0uipdGyaHm0IloZrYpWR2uitdG6aH20IdoYbYo2R1uirdG2aHu0I9oZ7Yp2R3uivdG+aH90IDoYHYoOR0eio9Gx6Hh0IjoZnYpOR2eis9G56Hx0IboYXYouR1eiq9G16Hp0I7oZ3YpuR3eiu9G96H70IHoYPYoeR0+ip9Gz6Hn0InoZvYpeR2+it9G76H30IfoYfYo+R1+ir9G36Hv0I/oZ/Yp+R3+iv9G/KCFOFCeOk8RJ42Rx8jhFnDJOFaeO08Rp43Rx+jhDnDHOFGeOs8RZ42xx9jhHnDP+L84V547zxHnjfHH+uEBcMC4UF46LxEXjYnHxuERcMi4Vl47LxGXjcnH5uEJcMa4UV46rxFXjanH1uEZcM64V147rxHXjenH9uEHcMG4UN46bxE3jZnHzuEXcMm4Vt47bxG3jdnH7uEPcMe4Ud467xF3jbnH3uEfcM+4V9477xH3jfnH/eEA8MB4UD46HxEPjYfHweEQ8Mh4Vj47HxGPjcfH4eEI8MZ4UT46nxFPjafH0GIvxmIjJmIrpmInZmIv5WIjFWIrlWInVWIv12IjNGMQwRvH/SICnQLGVBACgt7Zt27Zt99W2bdtGbDuTzCS1bdu2rf3Ysx7bgG3ENmGbsS3YVmwbth3DMBwjMBKjMBpjMBbjMB4TMBGTMBlTMBXTMB0zMBOzMBtzMBfzMB8DWICFGMQQFmExtgPbie3CdmN7sL3YPmw/dgA7iB3CDmNHsKPYMew4dgI7iZ3CTmNnsLPYOew8dgG7iF3CLmNXsKvYNew6dgO7id3CbmN3sLvYPew+9gB7iD3CHmNPsKfYM+w59gJ7ib3CXmNvsLfYO+w99gH7iH3CPmNfsK/YN+w79gP7if3CfmN/sL/YPywBT4QnxpPgSfFkeHI8BZ4ST4WnxtPgafF0eHo8A54Rz4RnxrPgWfFseHY8B54Tz4XnxvPgefF8eH68AF4QL4QXxovgRfFieHG8BF4SL4WXxsvgZfFyeHm8Al4Rr4RXxqvgVfFqeHW8Bl4Tr4XXxuvgdfF6eH28Ad4Qb4Q3xpvgTfFmeHO8Bd4Sb4W3xtvgbfF2eHu8A94R74R3xrvgXfFueHf8P7wH3hPvhffG++B98X54f3wAPhAfhA/Gh+BD8WH4cHwEPhIfhY/Gx+Bj8XH4eHwCPhGfhE/Gp+BT8Wn4dHwGPhOfhc/G5+Bz8Xn4fHwBvhBfhC/Gl+BL8WX4cnwFvhJfha/G1+Br8XX4enwDvhHfhG/Gt+Bb8W34dhzDcZzASZzCaZzBWZzDeVzARVzCZVzBVVzDddzATdzCbdzBXdzDfRzgAR7iEEd4hMf4Dnwnvgvfje/B9+L78P34Afwgfgg/jB/Bj+LH8OP4Cfwkfgo/jZ/Bz+Ln8PP4Bfwifgm/jF/Br+LX8Ov4Dfwmfgu/jd/B7+L38Pv4A/wh/gh/jD/Bn+LP8Of4C/wl/gp/jb/B3+Lv8Pf4B/wj/gn/jH/Bv+Lf8O/4D/wn/gv/jf/B/+L/8AQiEZGYSEIkJZIRyYkUREoiFZGaSEOkJdIR6YkMREYiE5GZyEJkJbIR2YkcRE4iF5GbyEPkJfIR+YkCREGiEFGYKEIUJYoRxYkSREmiFFGaKEOUJcoR5YkKREWiElGZqEJUJaoR1YkaRE2iFlGbqEPUJeoR9YkGREOiEdGYaEI0JZoRzYkWREuiFdGaaEO0JdoR7YkOREeiE9GZ6EJ0JboR3Yn/iB5ET6IX0ZvoQ/Ql+hH9iQHEQGIQMZgYQgwlhhHDiRHESGIUMZoYQ4wlxhHjiQnERGISMZmYQkwlphHTiRnETGIWMZuYQ8wl5hHziQXEQmIRsZhYQiwllhHLiRXESmIVsZpYQ6wl1hHriQ3ERmITsZnYQmwlthHbCYzACYIgCYqgCYZgCY7gCYEQCYmQCYVQCY3QCYMwCYuwCYdwCY/wCUAEREhAAhERERM7iJ3ELmI3sYfYS+wj9hMHiIPEIeIwcYQ4ShwjjhMniJPEKeI0cYY4S5wjzhMXiIvEJeIycYW4SlwjrhM3iJvELeI2cYe4S9wj7hMPiIfEI+Ix8YR4SjwjnhMviJfEK+I18YZ4S7wj3hMfiI/EJ+Iz8YX4SnwjvhM/iJ/EL+I38Yf4S/wjEshEZGIyCZmUTEYmJ1OQKclUZGoyDZmWTEemJzOQGclMZGYyC5mVzEZmJ3OQOclcZG4yD5mXzEfmJwuQBclCZGGyCFmULEYWJ0uQJclSZGmyDFmWLEeWJyuQFclKZGWyClmVrEZWJ2uQNclaZG2yDlmXrEfWJxuQDclGZGOyCdmUbEY2J1uQLclWZGuyDdmWbEe2JzuQHclOZGeyC9mV7EZ2J/8je5A9yV5kb7IP2ZfsR/YnB5ADyUHkYHIIOZQcRg4nR5AjyVHkaHIMOZYcR44nJ5ATyUnkZHIKOZWcRk4nZ5AzyVnkbHIOOZecR84nF5ALyUXkYnIJuZRcRi4nV5AryVXkanINuZZcR64nN5AbyU3kZnILuZXcRm4nMRInCZIkKZImGZIlOZInBVIkJVImFVIlNVInDdIkLdImHdIlPdInARmQIQlJREZkTO4gd5K7yN3kHnIvuY/cTx4gD5KHyMPkEfIoeYw8Tp4gT5KnyNPkGfIseY48T14gL5KXyMvkFfIqeY28Tt4gb5K3yNvkHfIueY+8Tz4gH5KPyMfkE/Ip+Yx8Tr4gX5KvyNfkG/It+Y58T34gP5KfyM/kF/Ir+Y38Tv4gf5K/yN/kH/Iv+Y9MoBJRiakkVFIqGZWcSkGlpFJRqak0VFoqHZWeykBlpDJRmaksVFYqG5WdykHlpHJRuak8VF4qH5WfKkAVpApRhakiVFGqGFWcKkGVpEpRpakyVFmqHFWeqkBVpCpRlakqVFWqGlWdqkHVpGpRtak6VF2qHlWfakA1pBpRjakmVFOqGdWcakG1pFpRrak2VFuqHdWe6kB1pDpRnakuVFeqG9Wd+o/qQfWkelG9qT5UX6of1Z8aQA2kBlGDqSHUUGoYNZwaQY2kRlGjqTHUWGocNZ6aQE2kJlGTqSnUVGoaNZ2aQc2kZlGzqTnUXGoeNZ9aQC2kFlGLqSXUUmoZtZxaQa2kVlGrqTXUWmodtZ7aQG2kNlGbqS3UVmobtZ3CKJwiKJKiKJpiKJbiKJ4SKJGSKJlSKJXSKJ0yKJOyKJtyKJfyKJ8CVECFFKQQFVExtYPaSe2idlN7qL3UPmo/dYA6SB2iDlNHqKPUMeo4dYI6SZ2iTlNnqLPUOeo8dYG6SF2iLlNXqKvUNeo6dYO6Sd2iblN3qLvUPeo+9YB6SD2iHlNPqKfUM+o59YJ6Sb2iXlNvqLfUO+o99YH6SH2iPlNfqK/UN+o79YP6Sf2iflN/qL/UPyqBTkQnppPQSelkdHI6BZ2STkWnptPQael0dHo6A52RzkRnprPQWelsdHY6B52TzkXnpvPQeel8dH66AF2QLkQXpovQRelidHG6BF2SLkWXpsvQZelydHm6Al2RrkRXpqvQVelqdHW6Bl2TrkXXpuvQdel6dH26Ad2QbkQ3ppvQTelmdHO6Bd2SbkW3ptvQbel2dHu6A92R7kR3prvQXeludHf6P7oH3ZPuRfem+9B96X50f3oAPZAeRA+mh9BD6WH0cHoEPZIeRY+mx9Bj6XH0eHoCPZGeRE+mp9BT6Wn0dHoGPZOeRc+m59Bz6Xn0fHoBvZBeRC+ml9BL6WX0cnoFvZJeRa+m19Br6XX0enoDvZHeRG+mt9Bb6W30dhqjcZqgSZqiaZqhWZqjeVqgRVqiZVqhVVqjddqgTdqibdqhXdqjfRrQAR3SkEZ0RMf0DnonvYveTe+h99L76P30AfogfYg+TB+hj9LH6OP0CfokfYo+TZ+hz9Ln6PP0BfoifYm+TF+hr9LX6Ov0DfomfYu+Td+h79L36Pv0A/oh/Yh+TD+hn9LP6Of0C/ol/Yp+Tb+h39Lv6Pf0B/oj/Yn+TH+hv9Lf6O/0D/on/Yv+Tf+h/9L/6AQmEZOYScIkZZIxyZkUTEomFZOaScOkZdIx6ZkMTEYmE5OZycJkZbIx2ZkcTE4mF5ObycPkZfIx+ZkCTEGmEFOYKcIUZYoxxZkSTEmmFFOaKcOUZcox5ZkKTEWmElOZqcJUZaox1ZkaTE2mFlObqcPUZeox9ZkGTEOmEdOYacI0ZZoxzZkWTEumFdOaacO0Zdox7ZkOTEemE9OZ6cJ0Zbox3Zn/mB5MT6YX05vpw/Rl+jH9mQHMQGYQM5gZwgxlhjHDmRHMSGYUM5oZw4xlxjHjmQnMRGYSM5mZwkxlpjHTmRnMTGYWM5uZw8xl5jHzmQXMQmYRs5hZwixlljHLmRXMSmYVs5pZw6xl1jHrmQ3MRmYTs5nZwmxltjHbGYzBGYIhGYqhGYZhGY7hGYERGYmRGYVRGY3RGYMxGYuxGYdxGY/xGcAETMhABjEREzM7mJ3MLmY3s4fZy+xj9jMHmIPMIeYwc4Q5yhxjjjMnmJPMKeY0c4Y5y5xjzjMXmIvMJeYyc4W5ylxjrjM3mJvMLeY2c4e5y9xj7jMPmIfMI+Yx84R5yjxjnjMvmJfMK+Y184Z5y7xj3jMfmI/MJ+Yz84X5ynxjvjM/mJ/ML+Y384f5y/xjEthEbGI2CZuUTcYmZ1OwKdlUbGo2DZuWTcemZzOwGdlMbGY2C5uVzcZmZ3OwOdlcbG42D5uXzcfmZwuwBdlCbGG2CFuULcYWZ0uwJdlSbGm2DFuWLceWZyuwFdlKbGW2CluVrcZWZ2uwNdlabG22DluXrcfWZxuwDdlGbGO2CduUbcY2Z1uwLdlWbGu2DduWbce2ZzuwHdlObGe2C9uV7cZ2Z/9je7A92V5sb7YP25ftx/ZnB7AD2UHsYHYIO5Qdxg5nR7Aj2VHsaHYMO5Ydx45nJ7AT2UnsZHYKO5Wdxk5nZ7Az2VnsbHYOO5edx85nF7AL2UXsYnYJu5Rdxi5nV7Ar2VXsanYNu5Zdx65nN7Ab2U3sZnYLu5Xdxm5nMRZnCZZkKZZmGZZlOZZnBVZkJVZmFVZlNVZnDdZkLdZmHdZlPdZnARuwIQtZxEZszO5gd7K72N3sHnYvu4/dzx5gD7KH2MPsEfYoe4w9zp5gT7Kn2NPsGfYse449z15gL7KX2MvsFfYqe429zt5gb7K32NvsHfYue4+9zz5gH7KP2MfsE/Yp+4x9zr5gX7Kv2NfsG/Yt+459z35gP7Kf2M/sF/Yr+439zv5gf7K/2N/sH/Yv+49N4BJxibkkXFIuGZecS8Gl5FJxqbk0XFouHZeey8Bl5DJxmbksXFYuG5edy8Hl5HJxubk8XF4uH5efK8AV5ApxhbkiXFGuGFecK8GV5EpxpbkyXFmuHFeeq8BV5CpxlbkqXFWuGledq8HV5Gpxtbk6XF2uHlefa8A15BpxjbkmXFOuGdeca8G15Fpxrbk2XFuuHdee68B15DpxnbkuXFeuG9ed+4/rwfXkenG9uT5cX64f158bwA3kBnGDuSHcUG4YN5wbwY3kRnGjuTHcWG4cN56bwE3kJnGTuSncVG4aN52bwc3kZnGzuTncXG4eN59bwC3kFnGLuSXcUm4Zt5xbwa3kVnGruTXcWm4dt57bwG3kNnGbuS3cVm4bt53DOJwjOJKjOJpjOJbjOJ4TOJGTOJlTOJXTOJ0zOJOzOJtzOJfzOJ8DXMCFHOQQF3Ext4Pbye3idnN7uL3cPm4/d4A7yB3iDnNHuKPcMe44d4I7yZ3iTnNnuLPcOe48d4G7yF3iLnNXuKvcNe46d4O7yd3ibnN3uLvcPe4+94B7yD3iHnNPuKfcM+4594J7yb3iXnNvuLfcO+4994H7yH3iPnNfuK/cN+4794P7yf3ifnN/uL/cPy6BT8Qn5pPwSflkfHI+BZ+ST8Wn5tPwafl0fHo+A5+Rz8Rn5rPwWflsfHY+B5+Tz8Xn5vPwefl8fH6+AF+QL8QX5ovwRflifHG+BF+SL8WX5svwZflyfHm+Al+Rr8RX5qvwVflqfHW+Bl+Tr8XX5uvwdfl6fH2+Ad+Qb8Q35pvwTflmfHO+Bd+Sb8W35tvwbfl2fHu+A9+R78R35rvwXflufHf+P74H35Pvxffm+/B9+X58f34AP5AfxA/mh/BD+WH8cH4EP5IfxY/mx/Bj+XH8eH4CP5GfxE/mp/BT+Wn8dH4GP5Ofxc/m5/Bz+Xn8fH4Bv5BfxC/ml/BL+WX8cn4Fv5Jfxa/m1/Br+XX8en4Dv5HfxG/mt/Bb+W38dh7jcZ7gSZ7iaZ7hWZ7jeV7gRV7iZV7hVV7jdd7gTd7ibd7hXd7jfR7wAR/ykEd8xMf8Dn4nv4vfze/h9/L7+P38Af4gf4g/zB/hj/LH+OP8Cf4kf4o/zZ/hz/Ln+PP8Bf4if4m/zF/hr/LX+Ov8Df4mf4u/zd/h7/L3+Pv8A/4h/4h/zD/hn/LP+Of8C/4l/4p/zb/h3/Lv+Pf8B/4j/4n/zH/hv/Lf+O/8D/4n/4v/zf/h//L/+AQhkZBYSCIkFZIJyYUUQkohlZBaSCOkFdIJ6YUMQkYhk5BZyCJkFbIJ2YUcQk4hl5BbyCPkFfIJ+YUCQkGhkFBYKCIUFYoJxYUSQkmhlFBaKCOUFcoJ5YUKQkWhklBZqCJUFaoJ1YUaQk2hllBbqCPUFeoJ9YUGQkOhkdBYaCI0FZoJzYUWQkuhldBaaCO0FdoJ7YUOQkehk9BZ6CJ0FboJ3YX/hB5CT6GX0FvoI/QV+gn9hQHCQGGQMFgYIgwVhgnDhRHCSGGUMFoYI4wVxgnjhQnCRGGSMFmYIkwVpgnThRnCTGGWMFuYI8wV5gnzhQXCQmGRsFhYIiwVlgnLhRXCSmGVsFpYI6wV1gnrhQ3CRmGTsFnYImwVtgnbBUzABUIgBUqgBUZgBU7gBUEQBUmQBUVQBU3QBUMwBUuwBUdwBU/wBSAEQihAAQmREAs7hJ3CLmG3sEfYK+wT9gsHhIPCIeGwcEQ4KhwTjgsnhJPCKeG0cEY4K5wTzgsXhIvCJeGycEW4KlwTrgs3hJvCLeG2cEe4K9wT7gsPhIfCI+Gx8ER4KjwTngsvhJfCK+G18EZ4K7wT3gsfhI/CJ+Gz8EX4KnwTvgs/hJ/CL+G38Ef4K/wTEsREYmIxiZhUTCYmF1OIKcVUYmoxjZhWTCemFzOIGcVMYmYxi5hVzCZmF3OIOcVcYm4xj5hXzCfmFwuIBcVCYmGxiFhULCYWF0uIJcVSYmmxjFhWLCeWFyuIFcVKYmWxilhVrCZWF2uINcVaYm2xjlhXrCfWFxuIDcVGYmOxidhUbCY2F1uILcVWYmuxjdhWbCe2FzuIHcVOYmexi9hV7CZ2F/8Te4g9xV5ib7GP2FfsJ/YXB4gDxUHiYHGIOFQcJg4XR4gjxVHiaHGMOFYcJ44XJ4gTxUniZHGKOFWcJk4XZ4gzxVnibHGOOFecJ84XF4gLxUXiYnGJuFRcJi4XV4grxVXianGNuFZcJ64XN4gbxU3iZnGLuFXcJm4XMREXCZEUKZEWGZEVOZEXBVEUJVEWFVEVNVEXDdEULdEWHdEVPdEXgRiIoQhFJEZiLO4Qd4q7xN3iHnGvuE/cLx4QD4qHxMPiEfGoeEw8Lp4QT4qnxNPiGfGseE48L14QL4qXxMviFfGqeE28Lt4Qb4q3xNviHfGueE+8Lz4QH4qPxMfiE/Gp+Ex8Lr4QX4qvxNfiG/Gt+E58L34QP4qfxM/iF/Gr+E38Lv4Qf4q/xN/iH/Gv+E9MkBJJiaUkUlIpmZRcSiGllFJJqaU0UlopnZReyiBllDJJmaUsUlYpm5RdyiHllHJJuaU8Ul4pn5RfKiAVlApJhaUiUlGpmFRcKiGVlEpJpaUyUlmpnFReqiBVlCpJlaUqUlWpmlRdqiHVlGpJtaU6Ul2pnlRfaiA1lBpJjaUmUlOpmdRcaiG1lFpJraU2UlupndRe6iB1lDpJnaUuUlepm9Rd+k/qIfWUekm9pT5SX6mf1F8aIA2UBkmDpSHSUGmYNFwaIY2URkmjpTHSWGmcNF6aIE2UJkmTpSnSVGmaNF2aIc2UZkmzpTnSXGmeNF9aIC2UFkmLpSXSUmmZtFxaIa2UVkmrpTXSWmmdtF7aIG2UNkmbpS3SVmmbtF3CJFwiJFKiJFpiJFbiJF4SJFGSJFlSJFXSJF0yJFOyJFtyJFfyJF8CUiCFEpSQFEmxtEPaKe2Sdkt7pL3SPmm/dEA6KB2SDktHpKPSMem4dEI6KZ2STktnpLPSOem8dEG6KF2SLktXpKvSNem6dEO6Kd2Sbkt3pLvSPem+9EB6KD2SHktPpKfSM+m59EJ6Kb2SXktvpLfSO+m99EH6KH2SPktfpK/SN+m79EP6Kf2Sfkt/pL/SPylBTiQnlpPISeVkcnI5hZxSTiWnltPIaeV0cno5g5xRziRnlrPIWeVscnY5h5xTziXnlvPIeeV8cn65gFxQLiQXlovIReVicnG5hFxSLiWXllPKZeVycnm5glxRriRXlqvIVeVqcnW5hlxTriXXluvIdeV6cn25gdxQbiQ3lpvITeVmcnO5hdxSbiW3ltvIbeV2cnu5g9xR7iR3lrvIXeVucnf5P7mH3FPuJfeW+8h95X5yf3mAPFAeJA+Wh8hD5WHycHmEPFIeJY+Wx8hj5XHyeHmCPFGeJE+Wp8hT5WnydHmGPFOeJc+W58hz5XnyfHmBvFBeJC+Wl8hL5WXycnmFvFJeJa+W18hr5XXyenmDvFHeJG+Wt8hb5W3ydhmTcZmQSZmSaZmRWZmTeVmQRVmSZVmRVVmTddmQTdmSbdmRXdmTfRnIgRzKUEZyJMfyDnmnvEveLe+R98r75P3yAfmgfEg+LB+Rj8rH5ONJTsgn5VPyafmMfFY+J5+XL8gX5UvyZfmKfFW+Jl+Xb8g35VvybfmOfFe+J9+XH8gP5UfyY/mJ/FR+Jj+XX8gv5Vfya/mN/FZ+J7+XP8gf5U/yZ/mL/FX+Jn+Xf8g/5V/yb/mP/Ff+JycoiZTEShIlqZJMSa6kUFIqqZTUSholrZJOSa9kUDIqmZTMShYlq5JNya7kUHIquZTcSh4lr5JPya8UUAoqhZTCShGlqFJMKa6UUEoqpZTSShmlrFJOKa9UUCoqlZTKShWlqlJNqa7UUGoqtZTaSh0lUUKihPpKA6Wh0lBprDRWmipNleZKc6Wl0lJprbRW2iptlfZKe6Wj0lHprHRWuipdle5Kd6WH0kPppfRS+ih9lH5KP2WAMlAZpAxShihDlGHKMGWEMkIZpYxSxihjlHHKeGWCMlGZpExWpihTlWnKdGWGMlOZpcxW5ihzlXnKfGWBskBZpCxSlihLlGXKMmWFskJZpaxS1ihrlHXKOmWDskHZpGxStihblG3KNgVTcIVQSIVSaIVRWIVTeEVQREVSZEVRVEVTdMVQTMVSbMVRXMVTfAUogRIqUEFKpMTKDmWnskvZrexR9ir7lP3KAeWgckg5rBxRjirHlOPKCeWkcko5rZxRzirnlPPKBeWickm5rFxRrirXlOvKDeWmcku5rdxR7ir3lPvKA+Wh8kh5rDxRnirPlOfKC+Wl8kp5rbxR3irvlPfKB+Wj8kn5rHxRvirflO/KD+Wn8kv5rfxR/ir/lAQ1kZpYTaImVZOpydUUako1lZpaTaOmVdOp6dUMakY1k5pZzaJmVbOp2dUcak41l5pbzaPmVfOp+dUCakG1kFpYLawWVYuqxdXiakm1pFpaLa2WVcuq5dXyakW1klpZraxWVauq1dXqak21plpbra3WVeuq9dX6akO1odpYbaw2VZuqzdXmaku1pdpaba22Vduq7dX2ake1o9pZ7ax2Vbuq3dXuag+1h9pL7aX2Ufuo/dR+6gB1gDpIHaQOUYeow9Rh6gh1hDpKHaWOUceo49Rx6gR1ojpJnaxOUaeq09Tp6gx1pjpTna3OVueq89R56gJ1gbpIXaQuUZeoy9Rl6gp1pbpKXa2uVteq69T16gZ1o7pJ3axuUbeq29TtKqbiKqGSKqXSKqOyKqfyqqCKqqTKqqKqqqbqqqGaqqXaqqO6qqf6KlADNVShitRIjdUd6k51l7pb3aPuVfep+9UD6kH1kHpYPaIeVY+px9UT6kn1lHpaPaOeVc+p59UL6kX1knpZvaJeVa+p19Ub6k31lnpbvaPeVe+p99UH6kP1kfpYfaI+VZ+pz9UX6kv1lfpafaO+Vd+p79UP6kf1k/pZ/aJ+Vb+p39Uf6k/1l/pb/aP+Vf+pCVoiLbGWREuqJdOSaym0lFoqLbWWRkurpdPSaxm0jFomLbOWRcuqZdOyazm0nFouLbeWR8ur5dPyawW0glohrbBWRCuqFdOKayW0kloprbRWRiurldPKaxW0ilolrbJWRauqVdOqazW0mlotrbZWR6ur1dPqaw20hlojrbHWRGuqNdOaay20llorrbXWRmurtdPaax20jlonrbPWReuqddO6a/9pPbSeWi+tt9ZH66v10/prA7SB2iBtsDZEG6oN04ZrI7SR2ihttDZGG6uN08ZrE7SJ2iRtsjZFm6pN06ZrM7SZ2ixttjZHm6vN0+ZrC7SF2iJtsbZEW6ot05ZrK7SV2ipttbZGW6ut09ZrG7SN2iZts7ZF26pt07ZrmIZrhEZqlEZrjMZqnMZrgiZqkiZriqZqmqZrhmZqlmZrjuZqnuZrQAu0UIMa0iIt1nZoO7Vd2m5tj7ZX26ft1w5oB7VD2mHtiHZUO6Yd105oJ7VT2mntjHZWO6ed1y5oF7VL2mXtinZVu6Zd125oN7Vb2m3tjnZXu6fd1x5oD7VH2mPtifZUe6Y9115oL7VX2mvtjfZWe6e91z5oH7VP2mfti/ZV+6Z9135oP7Vf2m/tj/ZX+6cl6In0xHoSPameTE+up9BT6qn01HoaPa2eTk+vZ9Az6pn0zHoWPaueTc+u59Bz6rn03HoePa+eT8+vF9AL6oX0wnoRvaheTC+ul9BL6qX00noZvaxeTi+vV9Ar6pX0ynoVvapeTa+u19Br6rX02nodva5eT6+vN9Ab6o30xnoTvaneTG+ut9Bb6q301nobva3eTm+vd9A76p30znoXvaveTe+u/6f30HvqvfTeeh+9r95P768P0Afqg/TB+hB9qD5MH66P0Efqo/TR+hh9rD5OH69P0Cfqk/TJ+hR9qj5Nn67P0Gfqs/TZ+hx9rj5Pn68v0Bfqi/TF+hJ9qb5MX66v0Ffqq/TV+hp9rb5OX69v0Dfqm/TN+hZ9q75N365jOq4TOqlTOq0zOqtzOq8LuqhLuqwruqpruq4buqlbuq07uqt7uq8DPdBDHepIj/RY36Hv1Hfpu/U9+l59n75fP6Af1A/ph/Uj+lH9mH5cP6Gf1E/pp/Uz+ln9nH5ev6Bf1C/pl/Ur+lX9mn5dv6Hf1G/pt/U7+l39nn5ff6A/1B/pj/Un+lP9mf5cf6G/1F/pr/U3+lv9nf5e/6B/1D/pn/Uv+lf9m/5d/6H/1H/pv/U/+l/9n55gJDISG0mMpEYyI7mRwkhppDJSG2mMtEY6I72RwchoZDIyG1mMrEY2I7uRw8hp5DJyG3mMvEY+I79RwChoFDIKG0WMokYxo7hRwihplDJKG2WMskY5o7xRwahoVDIqG1WMqkY1o7pRw6hp1DJqG3WMukY9o77RwGhoNDIaG02MpkYzo7nRwmhptDJaG22MtkY7o73RwehodDI6G12MrkY3o7vxn9HD6Gn0MnobfYy+Rj+jvzHAGGgMMgYbQ4yhxjBjuDHCGGmMMkYbY4yxxjhjvDHBmGhMMiYbU4ypxjRjujHDmGnMMmYbc4y5xjxjvrHAWGgsMhYbS4ylxjJjubHCWGmsMlYba4y1xjpjvbHB2GhsMjYbW4ytxjZju4EZuEEYpEEZtMEYrMEZvCEYoiEZsqEYqqEZumEYpmEZtuEYruEZvgGMwAgNaCAjMmJjh7HT2GXsNvYYe419xn7jgHHQOGQcNo4YR41jxnHjhHHSOGWcNs4YZ41zxnnjgnHRuGRcNq4YV41rxnXjhnHTuGXcNu4Yd417xn3jgfHQeGQ8Np4YT41nxnPjhfHSeGW8Nt4Yb413xnvjg/HR+GR8Nr4YX41vxnfjh/HT+GX8Nv4Yf41/RoKZyExsJjGTmsnM5GYKM6WZykxtpjHTmunM9GYGM6OZycxsZjGzmtnM7GYOM6eZy8xt5jHzmvnM/GYBs6BZyCxsFjGLmsXM4mYJs6RZyixtljHLmuXM8mYFs6JZyaxsVjGrmtXM6mYNs6ZZy6xt1jHrmvXM+mYDs6HZyGxsNjGbms3M5mYLs6XZymxttjHbmu3M9mYHs6PZyexsdjG7mt3M7uZ/Zg+zp9nL7G32Mfua/cz+5gBzoDnIHGwOMYeaw8zh5ghzpDnKHG2OMcea48zx5gRzojnJnGxOMaea08zp5gxzpjnLnG3OMeea88z55gJzobnIXGwuMZeay8zl5gpzpbnKXG2uMdea68z15gZzo7nJ3GxuMbea28ztJmbiJmGSJmXSJmOyJmfypmCKpmTKpmKqpmbqpmGapmXapmO6pmf6JjADMzShiczIjM0d5k5zl7nb3GPuNfeZ+80D5kHzkHnYPGIeNY+Zx80T5knzlHnaPGOeNc+Z580L5kXzknnZvGJeNa+Z180b5k3zlnnbvGPeNe+Z980H5kPzkfnYfGI+NZ+Zz80X5kvzlfnafGO+Nd+Z780P5kfzk/nZ/GJ+Nb+Z380f5k/zl/nb/GP+Nf+ZCVYiK7GVxEpqJbOSWymslFYqK7WVxkprpbPSWxmsjFYmK7OVxcpqZbOyWzmsnFYuK7eVx8pr5bPyWwWsglYhq7BVxCpqFbOKWyWsklYpq7RVxiprlbPKWxWsilYlq7JVxapqVbOqWzWsmlYtq7ZVx6pr1bPqWw2shlYjq7HVxGpqNbOaWy2sllYrq7XVxmprtbPaWx2sjlYnq7PVxepqdbO6W/9ZPayeVi+rt9XH6mv1s/pbA6yB1iBrsDXEGmoNs4ZbI6yR1ihrtDXGGmuNs8ZbE6yJ1iRrsjXFmmpNs6ZbM6yZ1ixrtjXHmmvNs+ZbC6yF1iJrsbXEWmots5ZbK6yV1iprtbXGWmuts9ZbG6yN1iZrs7XF2mpts7ZbmIVbhEValEVbjMVanMVbgiVakiVbiqVamqVbhmValmVbjuVanuVbwAqs0IIWsiIrtnZYO61d1m5rj7XX2mfttw5YB61D1mHriHXUOmYdt05YJ61T1mnrjHXWOmedty5YF61L1mXrinXVumZdt25YN61b1m3rjnXXumfdtx5YD61H1mPrifXUemY9t15YL61X1mvrjfXWeme9tz5YH61P1mfri/XV+mZ9t35YP61f1m/rj/XX+mcl2InsxHYSO6mdzE5up7BT2qns1HYaO62dzk5vZ7Az2pnszHYWO6udzc5u57Bz2rns3HYeO6+dz85vF7AL2oXswnYRu6hdzC5ul7BL2qXs0nYZu6xdzi5vV7Ar2pXsynYVu6pdza5u17Br2rXs2nYdu65dz65vN7Ab2o3sxnYTu6ndzG5ut7Bb2q3s1nYbu63dzm5vd7A72p3sznYXu6vdze5u/2f3sHvavezedh+7r93P7m8PsAfag+zB9hB7qD3MHm6PsEfao+zR9hh7rD3OHm9PsCfak+zJ9hR7qj3Nnm7PsGfas+zZ9hx7rj3Pnm8vsBfai+zF9hJ7qb3MXm6vsFfaq+zV9hp7rb3OXm9vsDfam+zN9hZ7q73N3m5jNm4TNmlTNm0zNmtzNm8LtmhLtmwrtmprtm4btmlbtm07tmt7tm8DO7BDG9rIjuzY3mHvtHfZu+099l57n73fPmAftA/Zh+0j9lH7mH3cPmGftE/Zp+0z9ln7nH3evmBftC/Zl+0r9lX7mn3dvmHftG/Zt+079l37nn3ffmA/tB/Zj+0n9lP7mf3cfmG/tF/Zr+039lv7nf3e/mB/tD/Zn+0v9lf7m/3d/mH/tH/Zv+0/9l/7n53gJHISO0mcpE4yJ7mTwknppHJSO2mctE46J72TwcnoZHIyO1mcrE42J7uTw8np5HJyO3mcvE4+J79TwCnoFHIKO0Wcok4xp7hTwinplHJKO2Wcsk45p7xTwanoVHIqO1Wcqk41p7pTw6np1HJqO3Wcuk49p77TwGnoNHIaO02cpk4zp7nTwmnptHJaO22ctk47p73TwenodHI6O12crk43p7vzn9PD6en0cno7fZy+Tj+nvzPAGegMcgY7Q5yhzjBnuDPCGemMckY7Y5yxzjhnvDPBmehMciY7U5ypzjRnujPDmenMcmY7c5y5zjxnvrPAWegschY7S5ylzjJnubPCWemsclY7a5y1zjpnvbPB2ehscjY7W5ytzjZnu4M5uEM4pEM5tMM4rMM5vCM4oiM5sqM4qqM5umM4pmM5tuM4ruM5vgOcwAkd6CAncmJnh7PT2eXsdvY4e519zn7ngHPQOeQcdo44R51jznHnhHPSOeWcds44Z51zznnngnPRueRcdq44V51rznXnhnPTueXcdu44d517zn3ngfPQeeQ8dp44T51nznPnhfPSeeW8dt44b513znvng/PR+eR8dr44X51vznfnh/PT+eX8dv44f51/ToKbyE3sJnGTusnc5G4KN6Wbyk3tpnHTuunc9G4GN6Obyc3sZnGzutnc7G4ON6eby83t5nHzuvnc/G4Bt6BbyC3sFnGLusXc4m4Jt6Rbyi3tlnHLuuXc8m4Ft6Jbya3sVnGrutXc6m4Nt6Zby63t1nHruvXc+m4Dt6HbyG3sNnGbus3c5m4Lt6Xbym3ttnHbuu3c9m4Ht6Pbye3sdnG7ut3c7u5/bg+3p9vL7e32cfu6/dz+7gB3oDvIHewOcYe6w9zh7gh3pDvKHe2Occe649zx7gR3ojvJnexOcae609zp7gx3pjvLne3Ocee689z57gJ3obvIXewucZe6y9zl7gp3pbvKXe2ucde669z17gZ3o7vJ3exucbe629ztLubiLuGSLuXSLuOyLufyruCKruTKruKqrubqruGaruXaruO6ruf6LnADN3Shi9zIjd0d7k53l7vb3ePudfe5+90D7kH3kHvYPeIedY+5x90T7kn3lHvaPeOedc+5590L7kX3knvZveJeda+5190b7k33lnvbvePede+5990H7kP3kfvYfeI+dZ+5z90X7kv3lfvafeO+dd+5790P7kf3k/vZ/eJ+db+5390f7k/3l/vb/eP+df+5CV4iL7GXxEvqJfOSeym8lF4qL7WXxkvrpfPSexm8jF4mL7OXxcvqZfOyezm8nF4uL7eXx8vr5fPyewW8gl4hr7BXxCvqFfOKeyW8kl4pr7RXxivrlfPKexW8il4lr7JXxavqVfOqezW8ml4tr7ZXx6vr1fPqew28hl4jr7HXxGvqNfOaey28ll4rr7XXxmvrtfPaex28jl4nr7PXxevqdfO6e/95PbyeXi+vt9fH6+v18/p7A7yB3iBvsDfEG+oN84Z7I7yR3ihvtDfGG+uN88Z7E7yJ3iRvsjfFm+pN86Z7M7yZ3ixvtjfHm+vN8+Z7C7yF3iJvsbfEW+ot85Z7K7yV3ipvtbfGW+ut89Z7G7yN3iZvs7fF2+pt87Z7mId7hEd6lEd7jMd6nMd7gid6kid7iqd6mqd7hmd6lmd7jud6nud7wAu80IMe8iIv9nZ4O71d3m5vj7fX2+ft9w54B71D3mHviHfUO+Yd9054J71T3mnvjHfWO+ed9y54F71L3mXvinfVu+Zd9254N71b3m3vjnfXu+fd9x54D71H3mPviffUe+Y99154L71X3mvvjffWe+e99z54H71P3mfvi/fV++Z99354P71f3m/vj/fX++cl+In8xH4SP6mfzE/up/BT+qn81H4aP62fzk/vZ/Az+pn8zH4WP6ufzc/u5/Bz+rn83H4eP6+fz8/vF/AL+oX8wn4Rv6hfzC/ul/BL+qX80n4Zv6xfzi/vV/Ar+pX8yn4Vv6pfza/u1/Br+rX82n4dv65fz6/vN/Ab+o38xn4Tv6nfzG/ut/Bb+q381n4bv63fzm/vd/A7+p38zn4Xv6vfze/u/+f38Hv6vfzefh+/r9/P7+8P8Af6g/zB/hB/qD/MH+6P8Ef6o/zR/hh/rD/OH+9P8Cf6k/zJ/hR/qj/Nn+7P8Gf6s/zZ/hx/rj/Pn+8v8Bf6i/zF/hJ/qb/MX+6v8Ff6q/zV/hp/rb/OX+9v8Df6m/zN/hZ/q7/N3+5jPu4TPulTPu0zPutzPu8LvuhLvuwrvuprvu4bvulbvu07vut7vu8DP/BDH/rIj/zY3+Hv9Hf5u/09/l5/n7/fP+Af9A/5h/0j/lH/mH/cP+Gf9E/5p/0z/ln/nH/ev+Bf9C/5l/0r/lX/mn/dv+Hf9G/5t/07/l3/nn/ff+A/9B/5j/0n/lP/mf/cf+G/9F/5r/03/lv/nf/e/+B/9D/5n/0v/lf/m//d/+H/9H/5v/0//l//n58AEoHEIAlICpKB5CAFSAlSgdQgDUgL0oH0IAPICDKBzCALyAqygewgB8gJcoHcIA/IC/KB/KAAKAgKgcKgCCgKioHioAQoCUqB0qAMKAvKgfKgAqgIKoHKoAqoCqqB6qAGqAlqgdqgDqgL6oH6oAFoCBqBxqAJaAqageagBWgJWoHWoA1oC9qB9qAD6Ag6gc6gC+gKuoHu4D/QA/QEvUBv0Af0Bf1AfzAADASDwGAwBAwFw8BwMAKMBKPAaDAGjAXjwHgwAUwEk8BkMAVMBdPAdDADzASzwGwwB8wF88B8sAAsBIvAYrAELAXLwHKwAqwEq8BqsAasBevAerABbASbwGawBWwF28B2gAEcEIAEFKABA1jAAR4IQAQSkIECVKABHRjABBawgQNc4AEfABCAEECAQARisAPsBLvAbrAH7AX7wH5wABwEh8BhcAQcBcfAcXACnASnwGlwBpwF58B5cAFcBJfAZXAFXAXXwHVwA9wEt8BtcAfcBffAffAAPASPwGPwBDwFz8Bz8AK8BK/Aa/AGvAXvwHvwAXwEn8Bn8AV8Bd/Ad/AD/AS/wG/wB/wF/0BCkChIHCQJkgbJguRBiiBlkCpIHaQJ0gbpgvRBhiBjkCnIHGQJsgbZguxBjiBnkCvIHeQJ8gb5gvxBgaBgUCgoHBQJigbFguJBiaBkUCooHZQJygblgvJBhaBiUCmoHFQJqgbVgupBjaBmUCuoHdQJ6gb1gvpBg6Bh0ChoHDQJmgbNguZBi6Bl0CpoHbQJ2gbtgvZBh6Bj0CnoHHQJugbdgu5BsoT/6x30CfoG/YL+wYBgYDAoGBwMCYYGw4LhwYhgZDAqGB2MCcYG44LxwYRgYjApmBxMCaYG04LpwYxgZjArmB3MCeYG84L5wYJgYbAoWBwsCZYGy4LlwYpgZbAqWB2sCdYG64L1wYZgY7Ap2BxsCbYG24LtARbgARGQARXQAROwARfwgRCIgRTIgRKogRbogRGYgRXYgRO4gRf4AQiCIAxggIIoiIMdwc5gV7A72BPsDfYF+4MDwcHgUHA4OBIcDY4Fx4MTwcngVHA6OBOcDc4F54MLwcXgUnA5uBJcDa4F14Mbwc3gVnA7uBPcDe4F94MHwcPgUfA4eBI8DZ4Fz4MXwcvgVfA6eBO8Dd4F74MPwcfgU/A5+BJ8Db4F34Mfwc/gV/A7+BP8Df4FCWGiMHGYJEwaJguTJyxISAhThanDNGHaMF2YPswQZgwzhZnDLGHWMFuYPcwR5gxzhbnDPGHeMF+YPywQFgwLhYXDImHRsFhYPCwRlgxLhaXDMmHZsFxYPqwQVgwrhZXDKmHVsFpYPawR1gxrhbXDOmHdsF5YP2wQNgwbhY3DJmHTsFnYPGwRtgxbha3DNmHbsF3YPuwQdgw7hZ3DLmHXsFvYPfwv7BH2DHuFvcM+Yd+wX9g/HBAODAeFg8Mh4dBwWDg8HBGODEeFo8Mx4dhwXDg+nBBODCeFk8Mp4dRwWjg9nBHODGeFs8M54dxwXjg/XBAuDBeFi8Ml4dJwWbg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8Mt4dZwW7g9xEI8JEIypEI6ZEI25EI+FEIxlEI5VEI11EI9NEIztEI7dEI39EI/BGEQhiEMURiFcbgj3BnuCneHe8K94b5wf3ggPBgeCg+HR8Kj4bHweHgiPBmeCk+HZ8Kz4bnwfHghvBheCi+HV8Kr4bXwengjvBneCm+Hd8K74b3wfvggfBg+Ch+HT8Kn4bPwefgifBm+Cl+Hb8K34bvwffgh/Bh+Cj+HX8Kv4bfwe/gj/Bn+Cn+Hf8K/4b8wASaCiWESmBQmg8lhCpgSpoKpYRqYFqaD6WEGmBFmgplhFpgVZoPZYQ6YE+aCuWEemBfmg/lhAVgQFoKFYRFYFBaDxWEJWBKWgqVhGVgWloPlYQVYEVaClWEVWBVWg9VhDVgT1oK1YR1YF9aD9WED2BA2go1hE9gUNoPNYQvYEraCrWEb2Ba2g+1hB9gRdoKdYRfYFXaD3eF/sAfsCXvB3rAP7Av7wf5wABwIB8HBcAgcCofB4XAEHAlHwdFwDBwLx8HxcAKcCCfByXAKnAqnwelwBpwJZ8HZcA6cC+fB+XABXAgXwcVwCVwKl8HlcAVcCVfB1XANXAvXwfVwA9wIN8HNcAvcCrfB7RCDOCQgCSlIQwaykIM8FKAIJShDBapQgzo0oAktaEMHutCDPgQwgCGEEMEIxnAH3Al3wd1wD9wL98H98AA8CA/Bw/AIPAqPwePwBDwJT8HT8Aw8C8/B8/ACvAgvwcvwCrwKr8Hr8Aa8CW/B2/AOvAvvwfvwAXwIH8HH8Al8Cp/B5/AFfAlfwdfwDXwL38H38AP8CD/Bz/AL/Aq/we/wB/wJf8Hf8A/8C//BBJQIJUZJUFKUDCVHKVBKlAqlRmlQWpQOpUcZUEaUCWVGWVBWlA1lRzlQTpQL5UZ5UF6UD+VHBVBBVAgVRkVQUVQMFUclUElUCpVGZVBZVA6VRxVQRVQJVUZVUFVUDVVHNVBNVAvVRnVQXVQP1UcNUEPUCDVGTVBT1Aw1Ry1QS9QKtUZtUFvUDrVHHVBH1Al1Rl1QV9QNdUf/oR6oJ+qFeqM+qC/qh/qjAWggGoQGoyFoKBqGhqMRaCQahUajMWgsGofGowloIpqEJqMpaCqahqajGWgmmoVmozloLpqH5qMFaCFahBajJWgpWoaWoxVoJVqFVqM1aC1ah9ajDWgj2oQ2oy1oK9qGtiMM4YhAJKIQjRjEIg7xSEAikpCMFKQiDenIQCaykI0c5CIP+QigAIUIIoQiFKMdaCfahXajPWgv2of2owPoIDqEDqMj6Cg6ho6jE+gkOoVOozPoLDqHzqML6CK6hC6jK+gquoauoxvoJrqFbqM76C66h+6jB+gheoQeoyfoKXqGnqMX6CV6hV6jN+gteofeow/oI/qEPqMv6Cv6hr6jH+gn+oV+oz/oL/qHEqJEUeIoSZQ0ShYlj1JEKaNUUeooTZQ2SheljzJEGaNMUeYoS5Q1yhZlj3JEOaNcUe4oT5Q3yhfljwpEBaNCUeGoSFQ0KhYVj0pEJaNSUemoTFQ2KheVjypEFaNKUeWoSlQ1qhZVj2pENaNaUe2oTlQ3qhfVjxpEDaNGUeOoSdQ0ahY1j1pELaNWUeuoTdQ2ahe1jzpEHaNOUeeoS9Q16hZ1j/6LekQ9o15R76hP1DfqF/WPBkQDo0HR4GhINDQaFg2PRkQjo1HR6GhMNDYaF42PJkQTo0nR5GhKNDWaFk2PZkQzo1nR7GhONDeaF82PFkQLo0XR4mhJtDRaFi2PVkQro1XR6mhNtDZaF62PNkQbo03R5mhLtDXaFm2PsAiPiIiMqIiOmIiNuIiPhEiMpEiOlEiNtEiPjMiMrMiOnMiNvMiPQBREYQQjFEVRHO2IdkaJEhIS9kR7o33R/uhAdDA6FB2OjkRHo2PR8ehEdDI6FZ2OzkRno3PR+ehCdDG6FF2OrkRXo2vR9ehGdDO6Fd2O7kR3o3vR/ehB9DB6FD2OnkRPo2fR8+hF9DJ6Fb2O3kRvo3fR++hD9DH6FH2OvkRfo2/R9+hHooToV/Q7+hP9jf5FCXGiOHGcJE4aJ4uTxynilHGqOHWcJk4bp4vTxxnijHGmOHOcJc4aZ4uzxzninHGuOHecJ84b54vzxwXignGhuHBcJC4aF4uLxyXiknGpuHRcJi4bl4vLxxXiinGluHJcJa4aV4urxzXimnGtuHZcJ64b14vrxw3ihnGjuHHcJG4aN4ubxy3ilnGruHXcJm4bt4vbxx3ijnGnuHPcJe4ad4u7x//FPeKeca+4d9wn7hv3i/vHA+KB8aB4cDwkHhoPi4fHI+KR8ah4dDwmHhuPi8fHE+KJ8aR4cjwlnhpPi6fHM+KZ8ax4djwnnhvPi+fHC+KF8aJ4cbwkXhovi5fHK+KV8ap4dbwmXhuvi9fHG+KN/yMAHgDFxgEAgO7Ptm+2bdu2bdu2bdtmbbtN2nS2bW/3sE3YZmwLthXbhm3HdmA7sV3YbmwPthfbh+3HDmAHsUPYYewIdhQ7hh3HTmAnsVPYaewMdhY7h53HLmAXsUvYZewKdhW7hl3HMAzHCIzEKIzGGIzFOIzHBEzEJEzGFEzFNEzHDMzELMzGHMzFPMzHAgxgEAuxCENYjN3AbmK3sNvYHewudg+7jz3AHmKPsMfYE+wp9gx7jr3AXmKvsNfYG+wt9g57j33APmKfsM/YF+wr9g37jv3AfmK/sN/YH+wv9g9LhCfgifEkeFI8GZ4cT4GnxFPhqfE0eFo8HZ4ez4BnxDPhmfEseFY8G54dz4HnxHPhufH/8Dx4Xjwfnh8vgBfEC+GF8SJ4UbwYXhwvgZfES+Gl8TJ4WbwcXh6vgFfEK+GV8Sp4VbwaXh2vgdfEa+G18Tp4XbweXh9vgDfEG+GN8SZ4U7wZ3hxvgbfEW+Gt8TZ4W7wd3h7vgHfEO+Gd8S54V7wb3h3vgffEe+G98T54X7wf3h8fgA/EB+GD8SH4UHwYPhwfgY/ER+Gj8TH4WHwcPh6fgE/EJ+GT8Sn4VHwaPh2fgc/EZ+Gz8Tn4XHwePh9fgC/EF+GL8SX4UnwZvhxfga/EV+Gr8TX4Wnwdvh7fgG/EN+Gb8S34Vnwbvh3fge/Ed+G78T34Xnwfvh8/gB/ED+GH8SP4UfwYfhw/gZ/ET+Gn8TP4Wfwcfh6/gF/EL+GX8Sv4Vfwafh3HcBwncBKncBpncBbncB4XcBGXcBlXcBXXcB03cBO3cBt3cBf3cB8PcIBDPMQjHOExfgO/id/Cb+N38Lv4Pfw+/gB/iD/CH+NP8Kf4M/w5/gJ/ib/CX+Nv8Lf4O/w9/gH/iH/CP+Nf8K/4N/w7/gP/if/Cf+N/8L/4PzwRkUAkJpIQSYlkRHIiBZGSSEWkJtIQaYl0RHoiA5GRyERkJrIQWYlsRHYiB5GTyEXkJv4j8hB5iXxEfqIAUZAoRBQmihBFiWJEcaIEUZIoRZQmyhBliXJEeaICUZGoRFQmqhBViWpEdaIGUZOoRdQm6hB1iXpEfaIB0ZBoRDQmmhBNiWZEc6IF0ZJoRbQm2hBtiXZEe6ID0ZHoRHQmuhBdiW5Ed6IH0ZPoRfQm+hB9iX5Ef2IAMZAYRAwmhhBDiWHEcGIEMZIYRYwmxhBjiXHEeGICMZGYREwmphBTiWnEdGIGMZOYRcwm5hBziXnEfGIBsZBYRCwmlhBLiWXEcmIFsZJYRawm1hBriXXEemIDsZHYRGwmthBbiW3EdmIHsZPYRewm9hB7iX3EfuIAcZA4RBwmjhBHiWPEceIEcZI4RZwmzhBniXPEeeICcZG4RFwmrhBXiWvEdQIjcIIgSIIiaIIhWIIjeEIgREIiZEIhVEIjdMIgTMIibMIhXMIjfCIgAAGJkIgIRMTEDeImcYu4Tdwh7hL3iPvEA+Ih8Yh4TDwhnhLPiOfEC+Il8Yp4Tbwh3hLviPfEB+Ij8Yn4THwhvhLfiO/ED+In8Yv4Tfwh/hL/iERkApmYTEImJZORyckUZEoyFZmaTEOmJdOR6ckMZEYyE5mZzEJmJbOR2ckcZE4yF5mb/I/MQ+Yl85H5yQJkQbIQWZgsQhYli5HFyRJkSbIUWZosQ5Yly5HlyQpkRbISWZmsQlYlq5HVyRpkTbIWWZusQ9Yl65H1yQZkQ7IR2ZhsQjYlm5HNyRZkS7IV2ZpsQ7Yl25HtyQ5kR7IT2ZnsQnYlu5HdyR5kT7IX2ZvsQ/Yl+5H9yQHkQHIQOZgcQg4lh5HDyRHkSHIUOZocQ44lx5HjyQnkRHISOZmcQk4lp5HTyRnkTHIWOZucQ84l55HzyQXkQnIRuZhcQi4ll5HLyRXkSnIVuZpcQ64l15HryQ3kRnITuZncQm4lt5HbyR3kTnIXuZvcQ+4l95H7yQPkQfIQeZg8Qh4lj5HHyRPkSfIUeZo8Q54lz5HnyQvkRfISeZm8Ql4lr5HXSYzESYIkSYqkSYZkSY7kSYEUSYmUSYVUSY3USYM0SYu0SYd0SY/0yYAEJCRDMiIRGZM3yJvkLfI2eYe8S94j75MPyIfkI/Ix+YR8Sj4jn5MvyJfkK/I1+YZ8S74j35MfyI/kJ/Iz+YX8Sn4jv5M/yJ/kL/I3+Yf8S/4jE1EJVGIqCZWUSkYlp1JQKalUVGoqDZWWSkelpzJQGalMVGYqC5WVykZlp3JQOalcVG7qPyoPlZfKR+WnClAFqUJUYaoIVZQqRhWnSlAlqVJUaaoMVZYqR5WnKlAVqUpUZaoKVZWqRlWnalA1qVpUbaoOVZeqR9WnGlANqUZUY6oJ1ZRqRjWnWlAtqVZUa6oN1ZZqR7WnOlAdqU5UZ6oL1ZXqRnWnelA9qV5Ub6oP1ZfqR/WnBlADqUHUYGoINZQaRg2nRlAjqVHUaGoMNZYaR42nJlATqUnUZGoKNZWaRk2nZlAzqVnUbGoONZeaR82nFlALqUXUYmoJtZRaRi2nVlArqVXUamoNtZZaR62nNlAbqU3UZmoLtZXaRm2ndlA7qV3UbmoPtZfaR+2nDlAHqUPUYeoIdZQ6Rh2nTlAnqVPUaeoMdZY6R52nLlAXqUvUZeoKdZW6Rl2nMAqnCIqkKIqmGIqlOIqnBEqkJEqmFEqlNEqnDMqkLMqmHMqlPMqnAgpQkAqpiEJUTN2gblK3qNvUHeoudY+6Tz2gHlKPqMfUE+op9Yx6Tr2gXlKvqNfUG+ot9Y56T32gPlKfqM/UF+or9Y36Tv2gflK/qN/UH+ov9Y9KRCfQiekkdFI6GZ2cTkGnpFPRqek0dFo6HZ2ezkBnpDPRmeksdFY6G52dzkHnpHPRuen/6Dx0XjofnZ8uQBekC9GF6SJ0UboYXZwuQZekS9Gl6TJ0WbocXZ6uQFekK9GV6Sp0VboaXZ2uQdeka9G16Tp0XboeXZ9uQDekG9GN6SZ0U7oZ3ZxuQbekW9Gt6TZ0W7od3Z7uQHekO9Gd6S50V7ob3Z3uQfeke9G96T50X7of3Z8eQA+kB9GD6SH0UHoYPZweQY+kR9Gj6TH0WHocPZ6eQE+kJ9GT6Sn0VHoaPZ2eQc+kZ9Gz6Tn0XHoePZ9eQC+kF9GL6SX0UnoZvZxeQa+kV9Gr6TX0WnodvZ7eQG+kN9Gb6S30VnobvZ3eQe+kd9G76T30XnofvZ8+QB+kD9GH6SP0UfoYfZw+QZ+kT9Gn6TP0WfocfZ6+QF+kL9GX6Sv0VfoafZ3GaJwmaJKmaJpmaJbmaJ4WaJGWaJlWaJXWaJ02aJO2aJt2aJf2aJ8OaEBDOqQjGtExfYO+Sd+ib9N36Lv0Pfo+/YB+SD+iH9NP6Kf0M/o5/YJ+Sb+iX9Nv6Lf0O/o9/YH+SH+iP9Nf6K/0N/o7/YP+Sf+if9N/6L/0PzoRk8AkZpIwSZlkTHImBZOSScWkZtIwaZl0THomA5ORycRkZrIwWZlsTHYmB5OTycXkZv5j8jB5mXxMfqYAU5ApxBRmijBFmWJMcaYEU5IpxZRmyjBlmXJMeaYCU5GpxFRmqjBVmWpMdaYGU5OpxdRm6jB1mXpMfaYB05BpxDRmmjBNmWZMc6YF05JpxbRm2jBtmXZMe6YD05HpxHRmujBdmW5Md6YH05PpxfRm+jB9mX5Mf2YAM5AZxAxmhjBDmWHMcGYEM5IZxYxmxjBjmXHMeGYCM5GZxExmpjBTmWnMdGYGM5OZxcxm5jBzmXnMfGYBs5BZxCxmljBLmWXMcmYFs5JZxaxm1jBrmXXMemYDs5HZxGxmtjBbmW3MdmYHs5PZxexm9jB7mX3MfuYAc5A5xBxmjjBHmWPMceYEc5I5xZxmzjBnmXPMeeYCc5G5xFxmrjBXmWvMdQZjcIZgSIZiaIZhWIZjeEZgREZiZEZhVEZjdMZgTMZibMZhXMZjfCZgAAOZkIkYxMTMDeYmc4u5zdxh7jL3mPvMA+Yh84h5zDxhnjLPmOfMC+Yl84p5zbxh3jLvmPfMB+Yj84n5zHxhvjLfmO/MD+Yn84v5zfxh/jL/mERsApuYTcImZZOxydkUbEo2FZuaTcOmZdOx6dkMbEY2E5uZzcJmZbOx2dkcbE42F5ub/Y/Nw+Zl87H52QJsQbYQW5gtwhZli7HF2RJsSbYUW5otw5Zly7Hl2QpsRbYSW5mtwlZlq7HV2RpsTbYWW5utw9Zl67H12QZsQ7YR25htwjZlm7HN2RZsS7YV25ptw7Zl27Ht2Q5sR7YT25ntwnZlu7Hd2R5sT7YX25vtw/Zl+7H92QHsQHYQO5gdwg5lh7HD2RHsSHYUO5odw45lx7Hj2QnsRHYSO5mdwk5lp7HT2RnsTHYWO5udw85l57Hz2QXsQnYRu5hdwi5ll7HL2RXsSnYVu5pdw65l17Hr2Q3sRnYTu5ndwm5lt7Hb2R3sTnYXu5vdw+5l97H72QPsQfYQe5g9wh5lj7HH2RPsSfYUe5o9w55lz7Hn2QvsRfYSe5m9wl5lr7HXWYzFWYIlWYqlWYZlWY7lWYEVWYmVWYVVWY3VWYM1WYu1WYd1WY/12YAFLGRDNmIRG7M32JvsLfY2e4e9y95j77MP2IfsI/Yx+4R9yj5jn7Mv2JfsK/Y1+4Z9y75j37Mf2I/sJ/Yz+4X9yn5jv7M/2J/sL/Y3+4f9y/5jE3EJXGIuCZeUS8Yl51JwKblUXGouDZeWS8el5zJwGblMXGYuC5eVy8Zl53JwOblcXG4uEZeHy8vl4/JzBbiCXCGuMFeEK8oV44pzJbiSXCmuNFeGK8uV48pzFbiKXCWuMleFq8pV46pzNbiaXC2uNleHq8vV4+pzDbiGXCOuMdeEa8o145pzLbiWXCuuNdeGa8u149pzHbiOXCeuM9eF68p147pzPbieXC+uN9eH68v14/pzA7iB3CBuMDeEG8oN44ZzI7iR3ChuNDeGG8uN48ZzE7iJ3CRuMjeFm8pN46ZzM7iZ3CxuNjeHm8vN4+ZzC7iF3CJuMbeEW8ot45ZzK7iV3CpuNbeGW8ut49ZzG7iN3CZuM7eF28pt47ZzO7id3C5uN7eH28vt4/ZzB7iD3CHuMHeEO8od445zJ7iT3CnuNHeGO8ud485zF7iL3CXuMneFu8pd465zGIdzBEdyFEdzDMdyHMdzAidyEidzCqdyGqdzBmdyFmdzDudyHudzAQc4yIVcxCEu5m5wN7lb3G3uDneXu8fd5x5wD7lH3GPuCfeUe8Y9515wL7lX3GvuDfeWe8e95z5wH7lP3GfuC/eV+8Z9535wP7lf3G/uD/eX+8cl4hP4xHwSPimfjE/Op+BT8qn41HwaPi2fjk/PZ+Az8pn4zHwWPiufjc/O5+Bz8rn43Px/fB4+L5+Pz88X4AvyhfjCfBG+KF+ML86X4EvypfjSfBm+LF+OL89X4CvylfjKfBW+Kl+Nr87X4GvytfjafB2+Ll+Pr8834BvyjfjGfBO+Kd+Mb8634FvyrfjWfBu+Ld+Ob8934DvynfjOfBe+K9+N78734HvyvfjefB++L9+P788P4Afyg/jB/BB+KD+MH86P4Efyo/jR/Bh+LD+OH89P4Cfyk/jJ/BR+Kj+Nn87P4Gfys/jZ/Bx+Lj+Pn88v4Bfyi/jF/BJ+Kb+MX86v4Ffyq/jV/Bp+Lb+OX89v4Dfym/jN/BZ+K7+N387v4Hfyu/jd/B5+L7+P388f4A/yh/jD/BH+KH+MP86f4E/yp/jT/Bn+LH+OP89f4C/yl/jL/BX+Kn+Nv85jPM4TPMlTPM0zPMtzPM8LvMhLvMwrvMprvM4bvMlbvM07vMt7vM8HPOAhH/IRj/iYv8Hf5G/xt/k7/F3+Hn+ff8A/5B/xj/kn/FP+Gf+cf8G/5F/xr/k3/Fv+Hf+e/8B/5D/xn/kv/Ff+G/+d/8H/5H/xv/k//F/+H59ISBASC0mEpEIyIbmQQkgppBJSC2mEtEI6Ib2QQcgoZBIyC1mErEI2IbuQQ8gp5BJyC/8JeYS8Qj4hv1BAKCgUEgoLRYSiQjGhuFBCKCmUEkoLZYSyQjmhvFBBqChUEioLVYSqQjWhulBDqCnUEmoLdYS6Qj2hvtBAaCg0EhoLTYSmQjOhudBCaCm0EloLbYS2QjuhvdBB6Ch0EjoLXYSuQjehu9BD6Cn0EnoLfYS+Qj+hvzBAGCgMEgYLQ4ShwjBhuDBCGCmMEkYLY4SxwjhhvDBBmChMEiYLU4SpwjRhujBDmCnMEmYLc4S5wjxhvrBAWCgsEhYLS4SlwjJhubBCWCmsElYLa4S1wjphvbBB2ChsEjYLW4StwjZhu7BD2CnsEnYLe4S9wj5hv3BAOCgcEg4LR4SjwjHhuHBCOCmcEk4LZ4SzwjnhvHBBuChcEi4LV4SrwjXhuoAJuEAIpEAJtMAIrMAJvCAIoiAJsqAIqqAJumAIpmAJtuAIruAJvhAIQIBCKEQCEmLhhnBTuCXcFu4Id4V7wn3hgfBQeCQ8Fp4IT4VnwnPhhfBSeCW8Ft4Ib4V3wnvhg/BR+CR8Fr4IX4Vvwnfhh/BT+CX8Fv4If4V/QiIxQUwsJhGTisnE5GIKMaWYSkwtphHTiunE9GIGMaOYScwsZhGzitnE7GIOMaeYS8wt/ifmEfOK+cT8YgGxoFhILCwWEYuKxcTiYgmxpFhKLC2WEcuK5cTyYgWxolhJrCxWEauK1cTqYg2xplhLrC3WEeuK9cT6YgOxodhIbCw2EZuKzcTmYguxpdhKbC22EduK7cT2Ygexo9hJ7Cx2EbuK3cTuYg+xp9hL7C32EfuK/cT+4gBxoDhIHCwOEYeKw8Th4ghxpDhKHC2OEceK48Tx4gRxojhJnCxOEaeK08Tp4gxxpjhLnC3OEeeK88T54gJxobhIXCwuEZeKy8Tl4gpxpbhKXC2uEdeK68T14gZxo7hJ3CxuEbeK28Tt4g5xp7hL3C3uEfeK+8T94gHxoHhIPCweEY8mSyQeF0+IJ8VT4mnxjHhWPCeeFy+IF8VL4mXxinhVvCZeFzERFwmRFCmRFhmRFTmRFwVRFCVRFhVRFTVRFw3RFC3RFh3RFT3RFwMRiFAMxUhEYizeEG+Kt8Tb4h3xrnhPvC8+EB+Kj8TH4hPxqfhMfC6+EF+Kr8TX4hvxrfhOfC9+ED+Kn8TP4hfxq/hN/C7+EH+Kv8Tf4h/xr/hPTCQlSImlJFJSKZmUXEohpZRSSamlNFJaKZ2UXsogZZQySZmlLFJWKZuUXcoh5ZRySbml/6Q8Ul4pn5RfKiAVlApJhaUiUlGpmFRcKiGVlEpJpaUyUlmpnFReqiBVlCpJlaUqUlWpmlRdqiHVlGpJtaU6Ul2pnlRfaiA1lBpJjaUmUlOpmdRcaiG1lFpJraU2UlupndRe6iB1lDpJnaUuUlepm9Rd6iH1lHpJvaU+Ul+pn9RfGiANlAZJg6Uh0lBpmDRcGiGNlEZJo6Ux0lhpnDRemiBNlCZJk6Up0lRpmjRdmiHNlGZJs6U50lxpnjRfWiAtlBZJi6Ul0lJpmbRcWiGtlFZJq6U10lppnbRe2iBtlDZJm6Ut0lZpm7Rd2iHtlHZJu6U90l5pn7RfOiAdlA5Jh6Uj0lHpmHRcOiGdlE5Jp6Uz0lnpnHReuiBdlC5Jl6Ur0lXpmnRdwiRcIiRSoiRaYiRW4iReEiRRkiRZUiRV0iRdMiRTsiRbciRX8iRfCiQgQSmUIglJsXRDuindkm5Ld6S70j3pvvRAeig9kh5LT6Sn0jPpufRCeim9kl5Lb6S30jvpvfRB+ih9kj5LX6Sv0jfpu/RD+in9kn5Lf6S/0j8pkZwgJ5aTyEnlZHJyOYWcUk4lp5bTyGnldHJ6OYOcUc4kZ5azyFnlbHJ2OYecU84l55b/k/PIeeV8cn65gFxQLiQXlovIReVicnG5hFxSLiWXlsvIZeVycnm5glxRriRXlqvIVeVqcnW5hlxTriXXluvIdeV6cn25gdxQbiQ3lpvITeVmcnO5hdxSbiW3ltvIbeV2cnu5g9xR7iR3lrvIXeVucne5h9xT7iX3lvvIfeV+cn95gDxQHiQPlofIQ+Vh8nB5hDxSHiWPlsfIY+Vx8nh5gjxRniRPlqfIU+Vp8nR5hjxTniXPlufIc+V58nx5gbxQXiQvlpfIS+Vl8nJ5hbxSXiWvltfIa+V18np5g7xR3iRvlrfIW+Vt8nZ5h7xT3iXvlvfIe+V98n75gHxQPiQflo/IR+Vj8nH5hHxSPiWfls/IZ+Vz8nn5gnxRviRflq/IV+Vr8nUZk3GZkEmZkmmZkVmZk3lZkEVZkmVZkVVZk3XZkE3Zkm3ZkV3Zk305kIEM5VCOZCTH8g35pnxLvi3fke/K9+T78gP5ofxIfiw/kZ/Kz+Tn8gv5pfxKfi2/kd/K7+T38gf5o/xJ/ix/kb/K3+Tv8g/5p/xL/i3/kf/K/+RESoKSWEmiJFWSKcmVFEpKJZWSWkmjpFXSKemVDEpGJZOSWcmiZFWyKdmVHEpOJZeSW/lPyaPkVfIp+ZUCSkGlkFJYKaIUVYopxZUSSkmllFJaKaOUVcop5ZUKSkWlklJZqaJUVaop1ZUaSk2lllJbqaPUVeop9ZUGSkOlkdJYaaI0VZopzZUWSkulldJaaaO0Vdop7ZUOSkelk9JZ6aJ0Vbop3ZUeSk+ll9Jb6aP0Vfop/ZUBykBlkDJYGaIMVYYpw5URykhllDJaGaOMVcYp45UJykRlkjJZmaJMVaYp05UZykxlljJbmaPMVeYp85UFykJlkbJYWaIsVZYpy5UVykpllbJaWaOsVdYp65UNykZlk7JZ2aJsVbYp25Udyk5ll7Jb2aPsVfYp+5UDykHlkHJYOaIcVY4px5UTyknllHJaOaOcVc4p55ULykXlknJZuaJcVa4p1xVMwRVCIRVKoRVGYRVO4RVBERVJkRVFURVN0RVDMRVLsRVHcRVP8ZVAAQpUQiVSkBIrN5Sbyi3ltnJHuavcU+4rD5SHyiPlsfJEeao8U54rL5SXyivltfJGeau8U94rH5SPyifls/JF+ap8U74rP5Sfyi/lt/JH+av8UxKpCWpiNYmaVE2mJldTqCnVVGpqNY2aVk2nplczqBnVTGpmNYuaVc2mZldzqDnVXGpu9T81j5pXzafmVwuoBdVCamG1iFpULaYWV0uoJdVSamm1jFpWLaeWVyuoFdVKamW1ilpVraZWV2uoNdVaam21jlpXrafWVxuoDdVGamO1idpUbaY2V1uoLdVWamu1jdpWbae2VzuoHdVOame1i9pV7aZ2V3uoPdVeam+1j9pX7af2VweoA9VB6mB1iDpUHaYOV0eoI9VR6mh1jDpWHaeOVyeoE9VJ6mR1ijpVnaZOV2eoM9VZ6mx1jjpXnafOVxeoC9VF6mJ1ibpUXaYuV1eoK9VV6mp1jbpWXaeuVzeoG9VN6mZ1i7pV3aZuV3eoO9Vd6m51j7pX3afuVw+oB9VD6mH1iHpUPaYeV0+oJ9VT6mn1jHpWPaeeVy+oF9VL6mX1inpVvaZeVzEVVwmVVCmVVhmVVTmVVwVVVCVVVhVVVTVVVw3VVC3VVh3VVT3VVwMVqFAN1UhFaqzeUG+qt9Tb6h31rnpPva8+UB+qj9TH6hP1qfpMfa6+UF+qr9TX6hv1rfpOfa9+UD+qn9TP6hf1q/pN/a7+UH+qv9Tf6h/1r/pPTaQlaIm1JFpSLZmWXEuhpdRSaam1NFpaLZ2WXsugZdQyaZm1LFpWLZuWXcuh5dRyabm1/7Q8Wl4tn5ZfK6AV1ApphbUiWlGtmFZcK6GV1EpppbUyWlmtnFZeq6BV1CpplbUqWlWtmlZdq6HV1GpptbU6Wl2tnlZfa6A11BppjbUmWlOtmdZca6G11FpprbU2WlutndZe66B11DppnbUuWletm9Zd66H11HppvbU+Wl+tn9ZfG6AN1AZpg7Uh2lBtmDZcG6GN1EZpo7Ux2lhtnDZem6BN1CZpk7Up2lRtmjZdm6HN1GZps7U52lxtnjZfW6At1BZpi7Ul2lJtmbZcW6Gt1FZpq7U12lptnbZe26Bt1DZpm7Ut2lZtm7Zd26Ht1HZpu7U92l5tn7ZfO6Ad1A5ph7Uj2lHtmHZcO6Gd1E5pp7Uz2lntnHZeu6Bd1C5pl7Ur2lXtmnZdwzRcIzRSozRaYzRW4zReEzRRkzRZUzRV0zRdMzRTszRbczRX8zRfCzSgQS3UIg1psXZDu6nd0m5rd7S72j3tvvZAe6g90h5rT7Sn2jPtufZCe6m90l5rb7S32jvtvfZB+6h90j5rX7Sv2jftu/ZD+6n90n5rf7S/2j8tkZ6gJ9aT6En1ZHpyPYWeUk+lp9bT6Gn1dHp6PYOeUc+kZ9az6Fn1bHp2PYeeU8+l59b/0/PoefV8en69gF5QL6QX1ovoRfVienG9hF5SL6WX1svoZfVyenm9gl5Rr6RX1qvoVfVqenW9hl5Tr6XX1uvodfV6en29gd5Qb6Q31pvoTfVmenO9hd5Sb6W31tvobfV2enu9g95R76R31rvoXfVuene9h95T76X31vvoffV+en99gD5QH6QP1ofoQ/Vh+nB9hD5SH6WP1sfoY/Vx+nh9gj5Rn6RP1qfoU/Vp+nR9hj5Tn6XP1ufoc/V5+nx9gb5QX6Qv1pfoS/Vl+nJ9hb5SX6Wv1tfoa/V1+np9g75R36Rv1rfoW/Vt+nZ9h75T36Xv1vfoe/V9+n79gH5QP6Qf1o/oR/Vj+nH9hH5SP6Wf1s/oZ/Vz+nn9gn5Rv6Rf1q/oV/Vr+nUd03Gd0Emd0mmd0Vmd03ld0EVd0mVd0VVd03Xd0E3d0m3d0V3d03090IEO9VCPdKTH+g39pn5Lv63f0e/q9/T7+gP9of5If6w/0Z/qz/Tn+gv9pf5Kf62/0d/q7/T3+gf9o/5J/6x/0b/q3/Tv+g/9p/5L/63/0f/q//RERoKR2EhiJDWSGcmNFEZKI5WR2khjpDXSGemNDEZGI5OR2chiZDWyGdmNHEZOI5eR2/jPyGPkNfIZ+Y0CRkGjkFHYKGIUNYoZxY0SRkmjlFHaKGOUNcoZ5Y0KRkWjklHZqGJUNaoZ1Y0aRk2jllHbqGPUNeoZ9Y0GRkOjkdHYaGI0NZoZzY0WRkujldHaaGO0NdoZ7Y0ORkejk9HZ6GJ0NboZ3Y0eRk+jl9Hb6GP0NfoZ/Y0BxkBjkDHYGGIMNYYZw40RxkhjlDHaGGOMNcYZ440JxkRjkjHZmGJMNaYZ040ZxkxjljHbmGPMNeYZ840FxkJjkbHYWGIsNZYZy40VxkpjlbHaWGOsNdYZ640NxkZjk7HZ2GJsNbYZ240dxk5jl7Hb2GPsNfYZ+40DxkHjkHHYOGIcNY4Zx40TxknjlHHaOGOcNc4Z540LxkXjknHZuGJcNa4Z1w3MwA3CIA3KoA3GYA3O4A3BEA3JkA3FUA3N0A3DMA3LsA3HcA3P8I3AAAY0QiMykBEbN4ybxi3jtnHHuGvcM+4bD4yHxiPjsfHEeGo8M54bL4yXxivjtfHGeGu8M94bH4yPxifjs/HF+Gp8M74bP4yfxi/jt/HH+Gv8MxKZCWZiM4mZ1ExmJjdTmCnNVGZqM42Z1kxnpjczmBnNTGZmM4uZ1cxmZjdzmDnNXGZu8z8zj5nXzGfmNwuYBc1CZmGziFnULGYWN0uYJc1SZmmzjFnWLGeWNyuYFc1KZmWzilnVrGZWN2uYNc1aZm2zjlnXrGfWNxuYDc1GZmOzidnUbGY2N1uYLc1WZmuzjdnWbGe2NzuYHc1OZmezi9nV7GZ2N3uYPc1eZm+zj9nX7Gf2NweYA81B5mBziDnUHGYON0eYI81R5mhzjDnWHGeONyeYE81J5mRzijnVnGZON2eYM81Z5mxzjjnXnGfONxeYC81F5mJzibnUXGYuN1eYK81V5mpzjbnWXGeuNzeYG81N5mZzi7nV3GZuN3eYO81d5m5zj7nX3GfuNw+YB81D5mHziHnUPGYeN0+YJ81T5mnzjHnWPGeeNy+YF81L5mXzinnVvGZeNzETNwmTNCmTNhmTNTmTNwVTNCVTNhVTNTVTNw3TNC3TNh3TNT3TNwMTmNAMzchEZmzeMG+at8zb5h3zrnnPvG8+MB+aj8zH5hPzqfnMfG6+MF+ar8zX5hvzrfnOfG9+MD+an8zP5hfzq/nN/G7+MH+av8zf5h/zr/nPTGQlWImtJFZSK5mV3EphpbRSWamtNFZaK52V3spgZbQyWZmtLFZWK5uV3cph5bRyWbmt/6w8Vl4rn5XfKmAVtApZha0iVlGrmFXcKmGVtEpZpa0yVlmrnFXeqmBVtCpZla0qVlWrmlXdqmHVtGpZta06Vl2rnlXfamA1tBpZja0mVlOrmdXcamG1tFpZra02VlurndXe6mB1tDpZna0uVlerm9Xd6mH1tHpZva0+Vl+rn9XfGmANtAZZg60h1lBrmDXcGmGNtEZZo60x1lhrnDXemmBNtCZZk60p1lRrmjXdmmHNtGZZs6051lxrnjXfWmAttBZZi60l1lJrmbXcWmGttFZZq6011lprnbXe2mBttDZZm60t1lZrm7Xd2mHttHZZu6091l5rn7XfOmAdtA5Zh60j1lHrmHXcOmGdtE5Zp60z1lnrnHXeumBdtC5Zl60r1lXrmnXdwizcIizSoizaYizW4izeEizRkizZUizV0izdMizTsizbcizX8izfCixgQSu0IgtZsXXDumndsm5bd6y71j3rvvXAemg9sh5bT6yn1jPrufXCemm9sl5bb6y31jvrvfXB+mh9sj5bX6yv1jfru/XD+mn9sn5bf6y/1j8rkZ1gJ7aT2EntZHZyO4Wd0k5lp7bT2GntdHZ6O4Od0c5kZ7az2FntbHZ2O4ed085l57b/s/PYee18dn67gF3QLmQXtovYRe1idnG7hF3SLmWXtsvYZe1ydnm7gl3RrmRXtqvYVe1qdnW7hl3TrmXXtuvYde16dn27gd3QbmQ3tpvYTe1mdnO7hd3SbmW3ttvYbe12dnu7g93R7mR3trvYXe1udne7h93T7mX3tvvYfe1+dn97gD3QHmQPtofYQ+1h9nB7hD3SHmWPtsfYY+1x9nh7gj3RnmRPtqfYU+1p9nR7hj3TnmXPtufYc+159nx7gb3QXmQvtpfYS+1l9nJ7hb3SXmWvttfYa+119np7g73R3mRvtrfYW+1t9nZ7h73T3mXvtvfYe+199n77gH3QPmQfto/YR+1j9nH7hH3SPmWfts/YZ+1z9nn7gn3RvmRftq/YV+1r9nUbs3GbsEmbsmmbsVmbs3lbsEVbsmVbsVVbs3XbsE3bsm3bsV3bs307sIEN7dCObGTH9g37pn3Lvm3fse/a9+z79gP7of3Ifmw/sZ/az+zn9gv7pf3Kfm2/sd/a7+z39gf7o/3J/mx/sb/a3+zv9g/7p/3L/m3/sf/a/+xEToKT2EniJHWSOcmdFE5KJ5WT2knjpHXSOemdDE5GJ5OT2cniZHWyOdmdHE5OJ5eT2/nPyePkdfI5+Z0CTkGnkFPYKeIUdYo5xZ0STkmnlFPaKeOUdco55Z0KTkWnklPZqeJUdao51Z0aTk2nllPbqePUdeo59Z0GTkOnkdPYaeI0dZo5zZ0WTkunldPaaeO0ddo57Z0OTkenk9PZ6eJ0dbo53Z0eTk+nl9Pb6eP0dfo5/Z0BzkBnkDPYGeIMdYY5w50RzkhnlDPaGeOMdcY5450JzkRnkjPZmeJMdaY5050ZzkxnljPbmePMdeY5850FzkJnkbPYWeIsdZY5y50VzkpnlbPaWeOsddY5650NzkZnk7PZ2eJsdbY5250dzk5nl7Pb2ePsdfY5+50DzkHnkHPYOeIcdY45x50TzknnlHPaOeOcdc45550LzkXnknPZueJcda451x3MwR3CIR3KoR3GYR3O4R3BER3JkR3FUR3N0R3DMR3LsR3HcR3P8Z3AAQ50QidykBM7N5ybzi3ntnPHuevcc+47D5yHziPnsfPEeeo8c547L5yXzivntfPGeeu8c947H5yPzifns/PF+ep8c747P5yfzi/nt/PH+ev8cxK5CW5iN4mb1E3mJndTuCndVG5qN42b1k3npnczuBndTG5mN4ub1c3mZndzuDndXG5u9z83j5vXzefmdwu4Bd1CbmG3iFvULeYWd0u4Jd1Sbmm3jFvWLeeWdyu4Fd1KbmW3ilvVreZWd2u4Nd1abm23jlvXrefWdxu4Dd1GbmO3idvUbeY2d1u4Ld1Wbmu3jdvWbee2dzu4Hd1Obme3i9vV7eZ2d3u4Pd1ebm+3j9vX7ef2dwe4A91B7mB3iDvUHeYOd0e4I91R7mh3jDvWHeeOdye4E91J7mR3ijvVneZOd2e4M91Z7mx3jjvXnefOdxe4C91F7mJ3ibvUXeYud1e4K91V7mp3jbvWXeeudze4G91N7mZ3i7vV3eZud3e4O91d7m53j7vX3efudw+4B91D7mH3iHvUPeYed0+4J91T7mn3jHvWPeeedy+4F91L7mX3invVveZedzEXdwmXdCmXdhmXdTmXdwVXdCVXdhVXdTVXdw3XdC3Xdh3XdT3XdwMXuNAN3chFbuzecG+6t9zb7h33rnvPve8+cB+6j9zH7hP3qfvMfe6+cF+6r9zX7hv3rfvOfe9+cD+6n9zP7hf3q/vN/e7+cH+6v9zf7h/3r/vPTeQleIm9JF5SL5mX3EvhpfRSeam9NF5aL52X3svgZfQyeZm9LF5WL5uX3cvh5fRyebm9/7w8Xl4vn5ffK+AV9Ap5hb0iXlGvmFfcK+GV9Ep5pb0yXlmvnFfeq+BV9Cp5lb0qXlWvmlfdq+HV9Gp5tb06Xl2vnlffa+A19Bp5jb0mXlOvmdfca+G19Fp5rb02Xluvndfe6+B19Dp5nb0uXlevm9fd6+H19Hp5vb0+Xl+vn9ffG+AN9AZ5g70h3lBvmDfcG+GN9EZ5o70x3lhvnDfem+BN9CZ5k70p3lRvmjfdm+HN9GZ5s7053lxvnjffW+At9BZ5i70l3lJvmbfcW+Gt9FZ5q7013lpvnbfe2+Bt9DZ5m70t3lZvm7fd2+Ht9HZ5u7093l5vn7ffO+Ad9A55h70j3lHvmHfcO+Gd9E55p70z3lnvnHfeu+Bd9C55l70r3lXvmnfdwzzcIzzSozzaYzzW4zzeEzzRkzzZUzzV0zzdMzzTszzbczzX8zzfCzzgQS/0Ig95sXfDu+nd8m57d7y73j3vvvfAe+g98h57T7yn3jPvuffCe+m98l57b7y33jvvvffB++h98j57X7yv3jfvu/fD++n98n57f7y/3j8vkZ/gJ/aT+En9ZH5yP4Wf0k/lp/bT+Gn9dH56P4Of0c/kZ/az+Fn9bH52P4ef08/l5/b/8/P4ef18fn6/gF/QL+QX9ov4Rf1ifnG/hF/SL+WX9sv4Zf1yfnm/gl/Rr+RX9qv4Vf1qfnW/hl/Tr+XX9uv4df16fn2/gd/Qb+Q39pv4Tf1mfnO/hd/Sb+W39tv4bf12fnu/g9/R7+R39rv4Xf1ufne/h9/T7+X39vv4ff1+fn9/gD/QH+QP9of4Q/1h/nB/hD/SH+WP9sf4Y/1x/nh/gj/Rn+RP9qf4U/1p/nR/hj/Tn+XP9uf4c/15/nx/gb/QX+Qv9pf4S/1l/nJ/hb/SX+Wv9tf4a/11/np/g7/R3+Rv9rf4W/1t/nZ/h7/T3+Xv9vf4e/19/n7/gH/QP+Qf9o/4R/1j/nH/hH/SP+Wf9s/4Z/1z/nn/gn/Rv+Rf9q/4V/1r/nUf83Gf8Emf8mmf8Vmf83lf8EVf8mVf8VVf83Xf8E3f8m3f8V3f830/8IEP/dCPfOTH/g3/pn/Lv+3f8e/69/z7/gP/of/If+w/8Z/6z/zn/gv/pf/Kf+2/8d/67/z3/gf/o//J/+x/8b/63/zv/g//p//L/+3/8f/6//xEQUKQOEgSJA2SBcmDFEHKIFWQOkgTpA3SBemDDEHGIFOQOcgSZA2yBdmDHEHOIFeQO/gvyBPkDfIF+YMCQcGgUFA4KBIUDYoFxYMSQcmgVFA6KBOUDcoF5YMKQcWgUlA5qBJUDaoF1YMaQc2gVlA7qBPUDeoF9YMGQcOgUdA4aBI0DZoFzYMWQcugVdA6aBO0DdoF7YMOQcegU9A56BJ0DboF3YMeQc+gV9A76BP0DfoF/YMBwcBgUDA4GBIMDYYFw4MRwchgVDA6GBOMDcYF44MJwcRgUjA5mBJMDaYF04MZwcxgVjA7mBPMDeYF84MFwcJgUbA4WBIsDZYFy4MVwcpgVbA6WBOsDdYF64MNwcZgU7A52BJsDbYF24Mdwc5gV7A72BPsDfYF+4MDwcHgUHA4OBIcDY4Fx4MTwcngVHA6OBOcDc4F54MLwcXgUnA5uBJcDa4F1wMswAMiIAMqoAMmYAMu4AMhEAMpkAMlUAMt0AMjMAMrsAMncAMv8IMgAAEMwiAKUBAHN4Kbwa3gdnAnuBvcC+4HD4KHwaPgcfAkeBo8C54HL4KXwavgdfAmeBu8C94HH4KPwafgc/Al+Bp8C74HP4Kfwa/gd/An+Bv8CxKBBJAYJAFJQTKQHKQAKUEqkBqkAWlBOpAeZAAZQSaQGWQBWUE2kB3kADlBLpAb/AfygLwgH8gPCoCCoBAoDIqAoqAYKA5KgJKgFCgNyoCyoBwoDyqAiqASqAyqgKqgGqgOaoCaoBaoDeqAuqAeqA8agIagEWgMmoCmoBloDlqAlqAVaA3agLagHWgPOoCOoBPoDLqArqAb6A56gJ6gF+gN+oC+oB/oDwaAgWAQGAyGgKFgGBgORoCRYBQYDcaAsWAcGA8mgIlgEpgMpoCpYBqYDmaAmWAWmA3mgLlgHpgPFoCFYBFYDJaApWAZWA5WgJVgFVgN1oC1YB1YDzaAjWAT2Ay2gK1gG9gOdoCdYBfYDfaAvWAf2A8OgIPgEDgMjoCj4Bg4Dk6Ak+AUOA3OgLPgHDgPLoCL4BK4DK6Aq+AauA4wgAMCkIACNGAACzjAAwGIQAIyUIAKNKADA5jAAjZwgAs84IMAAABBCCKAQAxugJvgFrgN7oC74B64Dx6Ah+AReAyegKfgGXgOXoCX4BV4Dd6At+AdeA8+gI/gE/gMvoCv4Bv4Dn6An+AX+A3+gL/gH0gEE2BimAQmhclgcpgCpoSpYGqYBqaF6WB6mAFmhJlgZpgFZoXZYHaYA+aEuWBu+B/MA/PCfDA/LAALwkKwMCwCi8JisDgsAUvCUrA0LAPLwnKwPKwAK8JKsDKsAqvCarA6rAFrwlqwNqwD68J6sD5sABvCRrAxbAKbwmawOWwBW8JWsDVsA9vCdrA97AA7wk6wM+wCu8JusDvsAXvCXrA37AP7wn6wPxwAB8JBcDAcAofCYXA4HAFHwlFwNBwDx8JxcDycACfCSXAynAKnwmlwOpwBZ8JZcDacA+fCeXA+XAAXwkVwMVwCl8JlcDlcAVfCVXA1XAPXwnVwPdwAN8JNcDPcArfCbXA73AF3wl1wN9wD98J9cD88AA/CQ/AwPAKPwmPwODwBT8JT8DQ8A8/Cc/A8vAAvwkvwMrwCr8Jr8DrEIA4JSEIK0pCBLOQgDwUoQgnKUIEq1KAODWhCC9rQgS70oA8DCCCEIYwggjG8AW/CW/A2vAPvwnvwPnwAH8JH8DF8Ap/CZ/A5fAFfwlfwNXwD38J38D38AD/CT/Az/AK/wm/wO/wBf8Jf8Df8A//CfzBRmBAmDpOEScNkYfIwRZgyTBWmDtOEacN0YfowQ5gxzBRmDrOEWcNsYfYwR5gzzBXmDv8L84R5w3xh/rBAWDAsFBYOi4RFw2Jh8bBEWDIsFZYOy4Rlw3Jh+bBCWDGsFFYOq4RVw2ph9bBGWDOsFdYO64R1w3ph/bBB2DBsFDYOm4RNw2Zh87BF2DJsFbYO24Rtw3Zh+7BD2DHsFHYOu4Rdw25h97BH2DPsFfYO+4R9w35h/4SEcGA4KBwcDgmHhsPC4eGIcGQ4KhwdjgnHhuPC8eGEcGI4KZwcTgmnhtPC6eGMcGY4K5wdzgnnhvPC+eGCcGG4KFwcLgmXhsvC5eGKcGW4KlwdrgnXhuvC9eGGcGO4Kdwcbgm3htvC7eGOcGe4K9wd7gn3hvvC/eGB8GB4KDwcHgmPhsfC4+GJ8GR4KjwdngnPhufC8+GF8GJ4KbwcXgmvhtfC6yEW4iERkiEV0iETsiEX8qEQiqEUyqESqqEW6qERmqEV2qETuqEX+mEQghCGYRiFKIzDG+HN8FZ4O7wT3g3vhffDB+HD8FH4OHwSPg2fhc/DF+HL8FX4OnwTvg3fhe/DD+HH8FP4OfwSfg2/hd/DH+HP8Ff4O/wT/g3/hYmihChxlCRKGiWLkkcpopRRqih1lCZKG6WL0kcZooxRpihzlCXKGmWLskc5opxRrih39F+UJ8ob5YvyRwWiglGhqHBUJCoaFYuKRyWiklGpqHRUJioblYvKRxWiilGlqHJUJaoaVYuqRzWimlGtqHZUJ6ob1YvqRw2ihlGjqHHUJGoaNYuaRy2illGrqHXUJmobtYvaRx2ijlGnqHPUJeoadYu6J/SIeka9ot5Rn6hv1C/qHw2IBkaDosHRkGhoNCwaHo2IRkajotHRmGhsNC4aH02IJkaTosnRlGhqNC2aHs2IZkazotnRnGhuNC+aHy2IFkaLosXRkmhptCxaHq2IVkarotXRmmhttC5aH22INkabos3RlmhrtC3aHu2Idka7ot3RnmhvtC/aHx2IDkaHosPRkehodCw6Hp2ITkanotPRmehsdC46H12ILkaXosvRlehqdC26HmERHhERGVERHTERG3ERHwmRGEmRHCmRGmmRHhmRGVmRHTmRG3mRHwURiGAURlGEoji6Ed2MbkW3ozvR3ehedD96ED2MHkWPoyfR0+hZ9Dx6Eb2MXkWvozfR2+hd9D76EH2MPkWfoy/R1+hb9D36Ef2MfkW/oz/R3+hflAgloMQoCUqKkqHkKAVKiVKh1CgNSovSofQoA8qIMqHMKAvKirKh7CgHyolyodzoP5QH5UX5UH5UABVEhVBhVAQVRcVQcVQClUSlUGlUBpVF5VB5VAFVRJVQZVQFVUXVUHVUA9VEtVBtVAfVRfVQfdQANUSNUGPUBDVFzVBz1AK1RK1Qa9QGtUXtUHvUAXVEnVBn1AV1Rd1Qd9QD9US9UG/UB/VF/VB/NAANRIPQYDQEDUXD0HA0Ao1Eo9BoNAaNRePQeDQBTUST0GQ0BU1F09B0NAPNRLPQbDQHzUXz0Hy0AC1Ei9BitAQtRcvQcrQCrUSr0Gq0Bq1F69B6tAFtRJvQZrQFbUXb0Ha0A+1Eu9ButAftRfvQfnQAHUSH0GF0BB1Fx9BxdAKdRKfQaXQGnUXn0Hl0AV1El9BldAVdRdfQdYQhHBGIRBSiEYNYxCEeCUhEEpKRglSkIR0ZyEQWspGDXOQhHwUIIIhCFCGEYnQD3US30G10B91F99B99AA9RI/QY/QEPUXP0HP0Ar1Er9Br9Aa9Re/Qe/QBfUSf0Gf0BX1F39B39AP9RL/Qb/QH/UX/UKI4IU4cJ4mTxsni5HGKOGWcKk4dp4nTxuni9HGGOGOcKc4cZ4mzxtni7HGOOGecK84d/xfnifPG+eL8cYG4YFwoLhwXiYvGxeLicYm4ZFwqLh2XicvG5eLycYW4YlwprhxXiavG1eLqcY24Zlwrrh3XievG9eL6cYO4Ydwobhw3iZvGzeLmcYu4Zdwqbh23idvG7eL2cYe4Y9wp7hx3ibvG3eLucY+4Z9wr7h33ifvG/eL+8YB4YDwoHhwPiYfGw+Lh8Yh4ZDwqHh2PicfG4+Lx8YR4YjwpnhxPiafG0+Lp8Yx4Zjwrnh3PiefG8+L58YJ4YbwoXhwviZfGy+Ll8Yp4ZbwqXh2vidfG6+L18YZ44/8EwAOg2DgAANA/3Wzbtm3btm3btm3btm3VtpEmne9hm7DN2BZsK7YN247twHZiu7Dd2B5sL7YP248dwA5ih7DD2BHsKHYMO46dwE5ip7DT2BnsLHYOO49dwC5il7DL2BXsKnYNu47dwG5it7Db2B3sLnYPu489wB5ij7DH2BPsKfYMe469wF5ir7DX2BvsLfYOe499wD5in7DP2BfsK/YN+45hGI4RGIlRGI0xGItxGI8JmIhJmIwpmIppmI4ZmIlZmI05mIt5mI8FWIgBLMIghrAY+4H9xH5hv7E/2F/sH5aAJ8IT40nwpHgy/D88OZ4CT4mnwlPjafC0eDo8PZ4Bz4hnwjPjWfCseDY8O54Dz4nnwnPjefC8eD48P14AL4gXwgvjRfCieDG8OF4CL4mXwkvjZfCyeDm8PF4Br4hXwivjVfCqeDW8Ol4Dr4nXwmvjdfC6eD28Pt4Ab4g3whvjTfCmeDO8Od4Cb4m3wlvjbfC2eDu8Pd4B74h3wjvjXfCueDe8O94D74n3wnvjffC+eD+8Pz4AH4gPwgfjQ/Ch+DB8OD4CH4mPwkfjY/Cx+Dh8PD4Bn4hPwifjU/Cp+DR8Oj4Dn4nPwmfjc/C5+Dx8Pr4AX4gvwhfjS/Cl+DJ8Ob4CX4mvwlfja/C1+Dp8Pb4B34hvwjfjW/Ct+DZ8O74D34nvwnfje/C9+D58P34AP4gfwg/jR/Cj+DH8OH4CP4mfwk/jZ/Cz+Dn8PH4Bv4hfwi/jV/Cr+DX8On4Dv4nfwm/jd/C7+D38Pv4Af4g/wh/jT/Cn+DP8Of4Cf4m/wl/jb/C3+Dv8Pf4B/4h/wj/jX/Cv+Df8O47hOE7gJE7hNM7gLM7hPC7gIi7hMq7gKq7hOm7gJm7hNu7gLu7hPh7gIQ7wCIc4wmP8B/4T/4X/xv/gf/F/eAKRiEhMJCGSEsmI/4jkRAoiJZGKSE2kIdIS6Yj0RAYiI5GJyExkIbIS2YjsRA4iJ5GLyE3kIfIS+Yj8RAGiIFGIKEwUIYoSxYjiRAmiJFGKKE2UIcoS5YjyRAWiIlGJqExUIaoS1YjqRA2iJlGLqE3UIeoS9Yj6RAOiIdGIaEw0IZoSzYjmRAuiJdGKaE20IdoS7Yj2RAeiI9GJ6Ex0IboS3YjuRA+iJ9GL6E30IfoS/Yj+xABiIDGIGEwMIYYSw4jhxAhiJDGKGE2MIcYS44jxxARiIjGJmExMIaYS04jpxAxiJjGLmE3MIeYS84j5xAJiIbGIWEwsIZYSy4jlxApiJbGKWE2sIdYS64j1xAZiI7GJ2ExsIbYS24jtxA5iJ7GL2E3sIfYS+4j9xAHiIHGIOEwcIY4Sx4jjxAniJHGKOE2cIc4S54jzxAXiInGJuExcIa4S14jrxA3iJnGLuE3cIe4S94j7xAPiIfGIeEw8IZ4Sz4jnxAviJfGKeE28Id4S74j3xAfiI/GJ+Ex8Ib4S34jvBEbgBEGQBEXQBEOwBEfwhECIhETIhEKohEbohEGYhEXYhEO4hEf4RECEBCAiAhKIiIkfxE/iF/Gb+EP8Jf4RCWQiMjGZhExKJiNTkMnJFGRKMhWZmkxDpiXTkenJDGRGMhOZmcxCZiWzkdnJHGROMheZm8xD5iXzkfnJAmRBshBZmCxCFiWLkcXJEmRJshRZmixDliXLkeXJCmRFshJZmaxCViWrkdXJGmRNshZZm6xD1iXrkfXJBmRDshHZmGxCNiWbkc3JFmRLshXZmmxDtiXbke3JDmRHshPZmexCdiW7kd3JHmRPshfZm+xD9iX7kf3JAeRAchA5mBxCDiWHkcPJEeRIchQ5mhxDjiXHkePJCeREchI5mZxCTiWnkdPJGeRMchY5m5xDziXnkfPJBeRCchG5mFxCLiWXkcvJFeRKchW5mlxDriXXkevJDeRGchO5mdxCbiW3kdvJHeROche5m9xD7iX3kfvJA+RB8hB5mDxCHiWPkcfJE+RJ8hR5mjxDniXPkefJC+RF8hJ5mbxCXiWvkdfJG+RN8hZ5m7xD3iXvkffJB+RD8hH5mHxCPiWfkc/JF+RL8hX5mnxDviXfke/JD+RH8hP5mfxCfiW/kd9JjMRJgiRJiqRJhmRJjuRJgRRJiZRJhVRJjdRJgzRJi7RJh3RJj/TJgAxJQEYkJBEZkz/In+Qv8jf5h/xL/iMTqERUYioJlZRKRv1HJadSUCmpVFRqKg2VlkpHpacyUBmpTFRmKguVlcpGZadyUDmpXFRuKg+Vl8pH5acKUAWpQlRhqghVlCpGFadKUCWpUlRpqgxVlipHlacqUBWpSlRlqgpVlapGVadqUDWpWlRtqg5Vl6pH1acaUA2pRlRjqgnVlGpGNadaUC2pVlRrqg3VlmpHtac6UB2pTlRnqgvVlepGdad6UD2pXlRvqg/Vl+pH9acGUAOpQdRgagg1lBpGDadGUCOpUdRoagw1lhpHjacmUBOpSdRkago1lZpGTadmUDOpWdRsag41l5pHzacWUAupRdRiagm1lFpGLadWUCupVdRqag21llpHrac2UBupTdRmagu1ldpGbad2UDupXdRuag+1l9pH7acOUAepQ9Rh6gh1lDpGHadOUCepU9Rp6gx1ljpHnacuUBepS9Rl6gp1lbpGXaduUDepW9Rt6g51l7pH3aceUA+pR9Rj6gn1lHpGPadeUC+pV9Rr6g31lnpHvac+UB+pT9Rn6gv1lfpGfacwCqcIiqQoiqYYiqU4iqcESqQkSqYUSqU0SqcMyqQsyqYcyqU8yqcCKqQAFVGQQlRM/aB+Ur+o39Qf6i/1j0qgE9GJ6SR0UjoZ/R+dnE5Bp6RT0anpNHRaOh2dns5AZ6Qz0ZnpLHRWOhudnc5B56Rz0bnpPHReOh+dny5AF6QL0YXpInRRuhhdnC5Bl6RL0aXpMnRZuhxdnq5AV6Qr0ZXpKnRVuhpdna5B16Rr0bXpOnRduh5dn25AN6Qb0Y3pJnRTuhndnG5Bt6Rb0a3pNnRbuh3dnu5Ad6Q70Z3pLnRXuhvdne5B96R70b3pPnRfuh/dnx5AD6QH0YPpIfRQehg9nB5Bj6RH0aPpMfRYehw9np5AT6Qn0ZPpKfRUeho9nZ5Bz6Rn0bPpOfRceh49n15AL6QX0YvpJfRSehm9nF5Br6RX0avpNfRaeh29nt5Ab6Q30ZvpLfRWehu9nd5B76R30bvpPfReeh+9nz5AH6QP0YfpI/RR+hh9nD5Bn6RP0afpM/RZ+hx9nr5AX6Qv0ZfpK/RV+hp9nb5B36Rv0bfpO/Rd+h59n35AP6Qf0Y/pJ/RT+hn9nH6x8CX9in5Nv6Hf0u/o9/QH+iP9if5Mf6G/0t/o7zRG4zRBkzRF0zRDszRH87RAi7REy7RCq7RG67RBm7RF27RDu7RH+3RAhzSgIxrSiI7pH/RP+hf9m/5D/6X/0QlMIiYxk4RJyiRj/mOSMymYlEwqJjWThknLpGPSMxmYjEwmJjOThcnKZGOyMzmYnEwuJjeTh8nL5GPyMwWYgkwhpjBThCnKFGOKMyWYkkwppjRThinLlGPKMxWYikwlpjJThanKVGOqMzWYmkwtpjZTh6nL1GPqMw2YhkwjpjHThGnKNGOaMy2YlkwrpjXThmnLtGPaMx2YjkwnpjPThenKdGO6Mz2YnkwvpjfTh+nL9GP6MwOYgcwgZjAzhBnKDGOGMyOYkcwoZjQzhhnLjGPGMxOYicwkZjIzhZnKTGOmMzOYmcwsZjYzh5nLzGPmMwuYhcwiZjGzhFnKLGOWMyuYlcwqZjWzhlnLrGPWMxuYjcwmZjOzhdnKbGO2MzuYncwuZjezh9nL7GP2MweYg8wh5jBzhDnKHGOOMyeYk8wp5jRzhjnLnGPOMxeYi8wl5jJzhbnKXGOuMzeYm8wt5jZzh7nL3GPuMw+Yh8wj5jHzhHnKPGOeMy+Yl8wr5jXzhnnLvGPeMx+Yj8wn5jPzhfnKfGO+MxiDMwRDMhRDMwzDMhzDMwIjMhIjMwqjMhqjMwZjMhZjMw7jMh7jMwETMoCJGMggJmZ+MD+ZX8xv5g/zl/nHJLCJ2MRsEjYpm4z9j03OpmBTsqnY1GwaNi2bjk3PZmAzspnYzGwWNiubjc3O5mBzsrnY3GweNi+bj83PFmALsoXYwmwRtihbjC3OlmBLsqXY0mwZtixbji3PVmArspXYymwVtipbja3O1mBrsrXY2mwdti5bj63PNmAbso3YxmwTtinbjG3OtmBbsq3Y1mwbti3bjm3PdmA7sp3YzmwXtivbje3O9mB7sr3Y3mwfti/bj+3PDmAHsoPYwewQdig7jB3OjmBHsqPY0ewYdiw7jh3PTmAnspPYyewUdio7jZ3OzmBnsrPY2ewcdi47j53PLmAXsovYxewSdim7jF3OrmBXsqvY1ewadi27jl3PbmA3spvYzewWdiu7jd3O7mB3srvY3ewedi+7j93PHmAPsofYw+wR9ih7jD3OnmBPsqfY0+wZ9ix7jj3PXmAvspfYy+wV9ip7jb3O3mBvsrfY2+wd9i57j73PPmAfso/Yx+wT9in7jH3OvmBfsq/Y1+wb9i37jn3PfmA/sp/Yz+wX9iv7jf3OYizOEizJUizNMizLcizPCqzISqzMKqzKaqzOGqzJWqzNOqzLeqzPBmzIAjZiIYvYmP3B/mR/sb/ZP+xf9h+bwCXiEnNJuKRcMu4/LjmXgkvJpeJSc2m4tFw6Lj2XgcvIZeIyc1m4rFw2LjuXg8vJ5eJyc3m4vFw+Lj9XgCvIFeIKc0W4olwxrjhXgivJleJKc2W4slw5rjxXgavIVeIqc1W4qlw1rjpXg6vJ1eJqc3W4ulw9rj7XgGvINeIac024plwzrjnXgmvJteJac224tlw7rj3XgevIdeI6c124rlw3rjvXg+vJ9eJ6c324vlw/rj83gBvIDeIGc0O4odwwbjg3ghvJjeJGc2O4sdw4bjw3gZvITeImc1O4qdw0bjo3g5vJzeJmc3O4udw8bj63gFvILeIWc0u4pdwybjm3glvJreJWc2u4tdw6bj23gdvIbeI2c1u4rdw2bju3g9vJ7eJ2c3u4vdw+bj93gDvIHeIOc0e4o9wx7jh3gjvJneJOc2e4s9w57jx3gbvIXeIuc1e4q9w17jp3g7vJ3eJuc3e4u9w97j73gHvIPeIec0+4p9wz7jn3gnvJveJec2+4t9w77j33gfvIfeI+c1+4r9w37juHcThHcCRHcTTHcCzHcTwncCIncTKncCqncTpncCZncTbncC7ncT4XcCEHuIiDHOJi7gf3k/vF/eb+cH+5f1wCn4hPzCfhk/LJ+P/45HwKPiWfik/Np+HT8un49HwGPiOfic/MZ+Gz8tn47HwOPiefi8/N5+Hz8vn4/HwBviBfiC/MF+GL8sX44nwJviRfii/Nl+HL8uX48nwFviJfia/MV+Gr8tX46nwNviZfi6/N1+Hr8vX4+nwDviHfiG/MN+Gb8s345nwLviXfim/Nt+Hb8u349nwHviPfie/Md+G78t347nwPviffi+/N9+H78v34/vwAfiA/iB/MD+GH8sP44fwIfiQ/ih/Nj+HH8uP48fwEfiI/iZ/MT+Gn8tP46fwMfiY/i5/Nz+Hn8vP4+fwCfiG/iF/ML+GX8sv45fwKfiW/il/Nr+HX8uv49fwGfiO/id/Mb+G38tv47fwOfie/i9/N7+H38vv4/fwB/iB/iD/MH+GP8sf44/wJ/iR/ij/Nn+HP8uf48/wF/iJ/ib/MX+Gv8tf46/wN/iZ/i7/N3+Hv8vf4+/wD/iH/iH/MP+Gf8s/45/wL/iX/in/Nv+Hf8u/49/wH/iP/if/Mf+G/8t/47zzG4zzBkzzF0zzDszzH87zAi7zEy7zCq7zG67zBm7zF27zDu7zH+3zAhzzgIx7yiI/5H/xP/hf/m//D/+X/8QlCIiGxkERIKiQT/hOSCymElEIqIbWQRkgrpBPSCxmEjEImIbOQRcgqZBOyCzmEnEIuIbeQR8gr5BPyCwWEgkIhobBQRCgqFBOKCyWEkkIpobRQRigrlBPKCxWEikIlobJQRagqVBOqCzWEmkItobZQR6gr1BPqCw2EhkIjobHQRGgqNBOaCy2ElkIrofWQNkJboZ3QXuggdBQ6CZ2FLkJXoZvQXegh9BR6Cb2FPkJfoZ/QXxggDBQGCYOFIcJQYZgwXBghjBRGCaOFMcJYYZwwXpggTBQmCZOFKcJUYZowXZghzBRmCbOFOcJcYZ4wX1ggLBQWCYuFJcJSYZmwXFghrBRWCauFNcJaYZ2wXtggbBQ2CZuFLcJWYZuwXdgh7BR2CbuFPcJeYZ+wXzggHBQOCYeFI8JR4ZhwXDghnBROCaeFM8JZ4ZxwXrggXBQuCZeFK8JV4ZpwXbgh3BRuCbeFO8Jd4Z5wX3ggPBQeCY+FJ8JT4ZnwXHghvBReCa+FN8Jb4Z3wXvggfBQ+CZ+FL8JX4ZvwXcAEXCAEUqAEWmAEVuAEXhAEUZAEWVAEVdAEXTAEU7AEW3AEV/AEXwiEUABCJEABCbHwQ/gp/BJ+C3+Ev8I/IUFMJCYWk4hJxWTif2JyMYWYUkwlphbTiGnFdGJ6MYOYUcwkZhaziFnFbGJ2MYeYU8wl5hbziHnFfGJ+sYBYUCwkFhaLiEXFYmJxsYRYUiwllhbLiGXFcmJ5sYJYUawkVhariFXFamJ1sYZYU6wl1hbriHXFemJ9sYHYUGwkNhabiE3FZmJzsYXYUmwlthbbiG3FdmJ7sYPYUewkdha7iF3FbmJ3sYfYU+wl9hb7iH3FfmJ/cYA4UBwkDhaHiEPFYeJwcYQ4UhwljhbHiGPFceJ4cYI4UZwkThaniFPFaeJ0cYY4U5wlzhbniHPFeeJ8cYG4UFwkLhaXiEvFZeJycYW4UlwlrhbXiGvFdeJ6cYO4Udwkbha3iFvFbeJ2cYe4U9wl7hb3iHvFfeJ+8YB4UDwkHhaPiEfFY+Jx8YR4UjwlnhbPiGfFc+J58YJ4UbwkXhaviFfFa+J18YZ4U7wl3hbviHfFe+J98YH4UHwkPhafiE/FZ+Jz8YX4UnwlvhbfiG/Fd+J78YP4Ufwkfha/iF/Fb+J3ERNxkRBJkRJpkRFZkRN5URBFURJlURFVURN10RBN0RJt0RFd0RN9MRBDEYiRCEUkxuIP8af4S/wt/hH/iv/EBCmRlFhKIiWVkkn/ScmlFFJKKZWUWkojpZXSSemlDFJGKZOUWcoiZZWySdmlHFJOKZeUW8oj5ZXySfmlAlJBqZBUWCoiFZWKScWlElJJqZRUWiojlZXKSeWlClJFqZJUWaoiVZWqSdWlGlJNqZZUW6oj1ZXqSfWlBlJDqZHUWGoiNZWaSc2lFlJLqZXUWmojtZXaSe2lDlJHqZPUWeoidZW6Sd2lHlJPqZfUW+oj9ZX6Sf2lAdJAaZA0WBoiDZWGScOlEdJIaZQ0WhojjZXGSeOlCdJEaZI0WZoiTZWmSdOlGdJMaZY0W5ojzZXmSfOlBdJCaZG0WFoiLZWWSculFdJKaZW0WlojrZXWSeulDdJGaZO0WdoibZW2SdulHdJOaZe0W9oj7ZX2SfulA9JB6ZB0WDoiHZWOScelE9JJ6ZR0WjojnZXOSeelC9JF6ZJ0WboiXZWuSdelG9JN6ZZ0W7oj3ZXuSfelB9JD6ZH0WHoiPZWeSc+lF9JL6ZX0WnojvZXeSe+lD9JH6ZP0WfoifZW+Sd8lTMIlQiIlSqIlRmIlTuIlQRIlSZIlRVIlTdIlQzIlS7IlR3IlT/KlQAolIEUSlJAUSz+kn9Iv6bf0R/or/ZMS5ERyYjmJnFROJv8nJ5dTyCnlVHJqOY2cVk4np5czyBnlTHJmOYucVc4mZ5dzyDnlXHJuOY+cV84n55cLyAXlQnJhuYhcVC4mF5dLyCXlUnJpuYxcVi4nl5cryBXlSnJluYpcVa4mV5dryDXlWnJtuY5cV64n15cbyA3lRnJjuYncVG4mN5dbyC3lVnJruY3cVm4nt5c7yB3lTnJnuYvcVe4md5d7yD3lXnJvuY/cV+4n95cHyAPlQfJgeYg8VB4mD5dHyCPlUfJoeYw8Vh4nj5cnyBPlSfJkeYo8VZ4mT5dnyDPlWfJseY48V54nz5cXyAvlRfJieYm8VF4mL5dXyCvlVfJqeY28Vl4nr5c3yBvlTfJmeYu8Vd4mb5d3yDvlXfJueY+8V94n75cPyAflQ/Jh+Yh8VD4mH5dPyCflU/Jp+Yx8Vj4nn5cvyBflS/Jl+Yp8Vb4mX5dvyDflW/Jt+Y58V74n35cfyA/lR/Jj+Yn8VH4mP5dfyC/lV/Jr+Y38Vn4nv5c/yB/lT/Jn+Yv8Vf4mf5cxGZcJmZQpmZYZmZU5mZcFWZQlWZYVWZU1WZcN2ZQt2ZYd2ZU92ZcDOZSBHMlQRnIs/5B/yr/k3/If+a/8T05QEimJlSRKUiWZ8p+SXEmhpFRSKamVNEpaJZ2SXsmgZFQyKZmVLEpWJZuSXcmh5FRyKbmVPEpeJZ+SXymgFFQKKYWVIkpRpZhSXCmhlFRKKaWVMkpZpZxSXqmgVFQqKZWVKkpVpZpSXamh1FRqKbWVOkpdpZ5SX2mgNFQaKY2VJkpTpZnSXGmhtFRaKa2VNkpbpZ3SXumgdFQ6KZ2VLkpXpZvSXemh9FR6Kb2VPkpfpZ/SXxmgDFQGKYOVIcpQZZgyXBmhjFRGKaOVMcpYZZwyXpmgTFQmKZOVKcpUZZoyXZmhzFRmKbOVOcpcZZ4yX1mgLFQWKYuVJcpSZZmyXFmhrFRWKauVNcpaZZ2yXtmgbFQ2KZuVLcpWZZuyXdmh7FR2KbuVPcpeZZ+yXzmgHFQOKYeVI8pR5ZhyXDmhnFROKaeVM8pZ5ZxyXrmgXFQuKZeVK8pV5ZpyXbmh3FRuKbeVO8pd5Z5yX3mgPFQeKY+VJ8pT5ZnyXHmhvFReKa+VN8pb5Z3yXvmgfFQ+KZ+VL8pX5ZvyXcEUXCEUUqEUWmEUVuEUXhEUUZEUWVEUVdEUXTEUU7EUW3EUV/EUXwmUUAFKpEAFKbHyQ/mp/FJ+K3+Uv8o/JUFNpCZWk6hJ1WTqf2pyNYWaUk2lplbTqGnVdGp6NYOaUc2kZlazqFnVbGp2NYeaU82l5lbzqHnVfGp+tYBaUC2kFlaLqEXVYmpxtYRaUi2lllbLqGXVcmp5tYJaUa2kVlarqFXVamp1tYZaU62l1lbrqHXVemp9tYHaUG2kNlabqE3VZmpztYXaUm2ltlbbqG3Vdmp7tYPaUe2kdla7qF3Vbmp3tYfaU+2l9lb7qH3Vfmp/dYA6UB2kDlaHqEPVYepwdYQ6Uh2ljlbHqGPVcep4dYI6UZ2kTlanqFPVaep0dYY6U52lzlbnqHPVeep8dYG6UF2kLlaXqEvVZepydYW6Ul2lrlbXqGvVdep6dYO6Ud2kbla3qFvVbep2dYe6U92l7lb3qHvVfep+9YB6UD2kHlaPqEfVY+px9YR6Uj2lnlbPqGfVc+p59YJ6Ub2kXlavqFfVa+p19YZ6U72l3lbvqHfVe+p99YH6UH2kPlafqE/VZ+pz9YX6Un2lvlbfqG/Vd+p79YP6Uf2kfla/qF/Vb+p3FVNxlVBJlVJplVFZlVN5VfgrqpIqq4qqqpqqq4ZqqpZqq47qqp7qq4EaqkCNVKgiNVZ/qD/VX+pv9Y/6V/2nJmiJtMRaEi2plkz7T0uupdBSaqm01FoaLa2WTkuvZdAyapm0zFoWLauWTcuu5dByarm03FoeLa+WT8uvFdAKaoW0wloRrahWTCuuldBKaqW00loZraxWTiuvVdAqapW0yloVrapWTauu1dBqarW02lodra5WT6uvNdAaao20xloTranWTGuutdBaaq201lobra3WTmuvddA6ap20zloXravWTeuu9dB6ar203lofra/WT+uvDdAGaoO0wdoQbag2TBuujdBGaqO00doYbaw2ThuvTdAmapO0ydoUbao2TZuuzdBmarO02docba42T5uvLdAWaou0xdoSbam2TFuurdBWaqu01doaba22TluvbdA2apu0zdoWbau2Tduu7dB2aru03doeba+2T9uvHdAOaoe0w9oR7ah2TDuundBOaqe009oZ7ax2TjuvXdAuape0y9oV7ap2Tbuu3dBuare029od7a52T7uvPdAeao+0x9oT7an2THuuvdBeaq+019ob7a32TnuvfdA+ap+0z9oX7av2TfuuYRquERqpURqtMRqrcRqvCZqoSZqsKZqqaZquGZqpWZqtOZqreZqvBVqoAS3SoIa0WPuh/dR+ab+1P9pf7Z+WoCfSE+tJ9KR6Mv0/PbmeQk+pp9JT62n0tHo6Pb2eQc+oZ9Iz61n0rHo2PbueQ8+p59Jz63n0vHo+Pb9eQC+oF9IL60X0onoxvbheQi+pl9JL62X0sno5vbxeQa+oV9Ir61X0qno1vbpeQ6+p19Jr63X0uno9vb7eQG+oN9Ib6030pnozvbneQm+pt9Jb6230tno7vb3eQe+od9I76130rno3vbveQ++p99J76330vno/vb8+QB+oD9IH60P0ofowfbg+Qh+pj9JH62P0sfo4fbw+QZ+oT9In61P0qfo0fbo+Q5+pz9Jn63P0ufo8fb6+QF+oL9IX60v0pfoyfbm+Ql+pr9JX62v0tfo6fb2+Qd+ob9I361v0rfo2fbu+Q9+p79J363v0vfo+fb9+QD+oH9IP60f0o/ox/bh+Qj+pn9JP62f0s/o5/bx+Qb+oX9Iv61f0q/o1/bp+Q7+p39Jv63f0u/o9/b7+QH+oP9If60/0p/oz/bn+Qn+pv9Jf62/0t/o7/b3+Qf+of9I/61/0r/o3/buO6bhO6KRO6bTO6KzO6bwu6KIu6bKu6Kqu6bpu6KZu6bbu6K7u6b4e6KEO9EiHOtJj/Yf+U/+l/9b/6H/1f3qCkchIbCQxkhrJjP+M5EYKI6WRykhtpDHSGumM9EYGI6ORychsZDGyGtmM7EYOI6eRy8ht5DHyGvmM/EYBo6BRyChsFDGKGsWM4kYJo6RRyihtlDHKGuWM8kYFo6JRyahsVDGqGtWM6kYNo6ZRy6ht1DHqGvWM+kYDo6HRyGhsNDGaGs2M5kYLo6XRymhttDHaGu2M9kYHo6PRyehsdDG6Gt2M7kYPo6fRy+ht9DH6Gv2M/sYAY6AxyBhsDDGGGsOM4cYIY6QxyhhtjDHGGuOM8cYEY6IxyZhsTDGmGtOM6cYMY6Yxy5htzDHmGvOM+cYCY6GxyFhsLDGWGsuM5cYKY6WxylhtrDHWGuuM9cYGY6OxydhsbDG2GtuM7cYOY6exy9ht7DH2GvuM/cYB46BxyDhsHDGOGseM48YJ46RxyjhtnDHOGueM88YF46JxybhsXDGuGteM68YN46Zxy7ht3DHuGveM+8YD46HxyHhsPDGeGs+M58YL46XxynhtvDHeGu+M98YH46PxyfhsfDG+Gt+M7wZm4AZhkAZl0AZjsAZn8IZgiIZkyIZiqIZm6IZhmIZl2IZjuIZn+EZghAYwIgMayIiNH8ZP45fx2/hj/DX+GQlmIjOxmcRMaiYz/zOTmynMlGYqM7WZxkxrpjPTmxnMjGYmM7OZxcxqZjOzmznMnGYuM7eZx8xr5jPzmwXMgmYhs7BZxCxqFjOLmyXMkmYps7RZxixrljPLmxXMimYls7JZxaxqVjOrmzXMmmYts7ZZx6xr1jPrmw3MhmYjs7HZxGxqNjObmy3MlmYrs7XZxmxrtjPbmx3MjmYns7PZxexqdjO7mz3MnmYvs7fZx+xr9jP7mwPMgeYgc7A5xBxqDjOHmyPMkeYoc7Q5xhxrjjPHmxPMieYkc7I5xZxqTjOnmzPMmeYsc7Y5x5xrzjPnmwvMheYic7G5xFxqLjOXmyvMleYqc7W5xlxrrjPXmxvMjeYmc7O5xdxqbjO3mzvMneYuc7e5x9xr7jP3mwfMg+Yh87B5xDxqHjOPmyfMk+Yp87R5xjxrnjPPmxfMi+Yl87J5xbxqXjOvmzfMm+Yt87Z5x7xr3jPvmw/Mh+Yj87H5xHxqPjOfmy/Ml+Yr87X5xnxrvjPfmx/Mj+Yn87P5xfxqfjO/m5iJm4RJmpRJm4zJmpzJm4IpmpIpm4qpmpqpm4ZpmpZpm47pmp7pm4EZmsCMTGgiMzZ/mD/NX+Zv84/51/xnJliJrMRWEiuplcz6z0pupbBSWqms1FYaK62VzkpvZbAyWpmszFYWK6uVzcpu5bByWrms3FYeK6+Vz8pvFbAKWoWswlYRq6hVzCpulbBKWqWs0lYZq6xVzipvVbAqWpWsylYVq6pVzapu1bBqWrWs2lYdq65Vz6pvNbAaWo2sxlYTq6nVzGputbBaWq2s1lYbq63VzmpvdbA6Wp2szlYXq6vVzepu9bB6Wr2s3lYfq6/Vz+pvDbAGWoOswdYQa6g1zBpujbBGWqOs0dYYa6w1zhpvTbAmWpOsydYUa6o1zZpuzbBmWrOs2dYca641z5pvLbAWWousxdYSa6m1zFpurbBWWqus1dYaa621zlpvbbA2WpuszdYWa6u1zdpu7bB2Wrus3dYea6+1z9pvHbAOWoesw9YR66h1zDpunbBOWqes09YZ66x1zjpvXbAuWpesy9YV66p1zbpu3bBuWres29Yd6651z7pvPbAeWo+sx9YT66n1zHpuvbBeWq+s19Yb6631znpvfbA+Wp+sz9YX66v1zfpuYRZuERZpURZtMRZrcRZvCZZoSZZsKZZqaZZuGZZpWZZtOZZreZZvBVZoASuyoIWs2Pph/bR+Wb+tP9Zf65+VYCeyE9tJ7KR2Mvs/O7mdwk5pp7JT22nstHY6O72dwc5oZ7Iz21nsrHY2O7udw85p57Jz23nsvHY+O79dwC5oF7IL20XsonYxu7hdwi5pl7JL22XssnY5u7xdwa5oV7Ir21XsqnY1u7pdw65p17Jr23XsunY9u77dwG5oN7Ib203spnYzu7ndwm5pt7Jb223stnY7u73dwe5od7I7213srnY3u7vdw+5p97J7233svnY/u789wB5oD7IH20PsofYwe7g9wh5pj7JH22PssfY4e7w9wZ5oT7In21PsqfY0e7o9w55pz7Jn23PsufY8e769wF5oL7IX20vspfYye7m9wl5pr7JX22vstfY6e729wd5ob7I321vsrfY2e7u9w95p77J323vsvfY+e799wD5oH7IP20fso/Yx+7h9wj5pn7JP22fss/Y5+7x9wb5oX7Iv21fsq/Y1+7p9w75p37Jv23fsu/Y9+779wH5oP7If20/sp/Yz+7n9wn5pv7Jf22/st/Y7+739wf5of7I/21/sr/Y3+7uN2bhN2KRN2bTN2KzN2bwt2KIt2bKt2Kqt2bpt2KZt2bbt2K7t2b4d2KEN7MiGNrJj+4f90/5l/7b/2H/tf3aCk8hJ7CRxkjrJnP+c5E4KJ6WTykntpHHSOumc9E4GJ6OTycnsZHGyOtmc7E4OJ6eTy8nt5HHyOvmc/E4Bp6BTyCnsFHGKOsWc4k4Jp6RTyintlHHKOuWc8k4Fp6JTyansVHGqOtWc6k4Np6ZTy6nt1HHqOvWc+k4Dp6HTyGnsNHGaOs2c5k4Lp6XTymnttHHaOu2c9k4Hp6PTyensdHG6Ot2c7k4Pp6fTy+nt9HH6Ov2c/s4AZ6AzyBnsDHGGOsOc4c4IZ6QzyhntjHHGOuOc8c4EZ6IzyZnsTHGmOtOc6c4MZ6Yzy5ntzHHmOvOc+c4CZ6GzyFnsLHGWOsuc5c4KZ6WzylntrHHWOuuc9c4GZ6OzydnsbHG2Otuc7c4OZ6ezy9nt7HH2Ovuc/c4B56BzyDnsHHGOOsec484J56RzyjntnHHOOuec884F56JzybnsXHGuOtec684N56Zzy7nt3HHuOvec+84D56HzyHnsPHGeOs+c584L56XzynntvHHeOu+c984H56PzyfnsfHG+Ot+c7w7m4A7hkA7l0A7jsA7n8I7giI7kyI7iqI7m6I7hmI7l2I7juI7n+E7ghA5wIgc6yImdH85P55fz2/nj/HX+OQluIjexm8RN6iZz/3OTuynclG4qN7Wbxk3rpnPTuxncjG4mN7Obxc3qZnOzuzncnG4uN7ebx83r5nPzuwXcgm4ht7BbxC3qFnOLuyXckm4pt7Rbxi3rlnPLuxXcim4lt7Jbxa3qVnOruzXcmm4tt7Zbx63r1nPruw3chm4jt7HbxG3qNnObuy3clm4rt7Xbxm3rtnPbux3cjm4nt7Pbxe3qdnO7uz3cnm4vt7fbx+3r9nP7uwPcge4gd7A7xB3qDnOHuyPcke4od7Q7xh3rjnPHuxPcie4kd7I7xZ3qTnOnuzPcme4sd7Y7x53rznPnuwvche4id7G7xF3qLnOXuyvcle4qd7W7xl3rrnPXuxvcje4md7O7xd3qbnO3uzvcne4ud7e7x93r7nP3uwfcg+4h97B7xD3qHnOPuyfck+4p97R7xj3rnnPPuxfci+4l97J7xb3qXnOvuzfcm+4t97Z7x73r3nPvuw/ch+4j97H7xH3qPnOfuy/cl+4r97X7xn3rvnPfux/cj+4n97P7xf3qfnO/u5iLu4RLupRLu4zLupzLu4IrupIru4qrupqru4ZrupZru47rup7ru4EbusCNXOgiN3Z/uD/dX+5v94/71/3nJniJvMReEi+pl8z7z0vupfBSeqm81F4aL62XzkvvZfAyepm8zF4WL6uXzcvu5fByerm83F4eL6+Xz8vvFfAKeoW8wl4Rr6hXzCvulfBKeqW80l4Zr6xXzivvVfAqepW8yl4Vr6pXzavu1fBqerW82l4dr65Xz6vvNfAaeo28xl4Tr6nXzGvutfBaeq281l4br63XzmvvdfA6ep28zl4Xr6vXzevu9fB6er283l4fr6/Xz+vvDfAGeoO8wd4Qb6g3zBvujfBGeqO80d4Yb6w3zhvvTfAmepO8yd4Ub6o3zZvuzfBmerO82d4cb643z5vvLfAWeou8xd4Sb6m3zFvurfBWequ81d4ab623zlvvbfA2epu8zd4Wb6u3zdvu7fB2eru83d4eb6+3z9vvHfAOeoe8w94R76h3zDvunfBOeqe8094Z76x3zjvvXfAuepe8y94V76p3zbvu3fBuere8294d7653z7vvPfAeeo+8x94T76n3zHvuvfBeeq+8194b7633znvvffA+ep+8z94X76v3zfvuYR7uER7pUR7tMR7rcR7vCZ7oSZ7sKZ7qaZ7uGZ7pWZ7tOZ7reZ7vBV7oAS/yoIe82Pvh/fR+eb+9P95f75+X4CfyE/tJ/KR+Mv8/P7mfwk/pp/JT+2n8tH46P72fwc/oZ/Iz+1n8rH42P7ufw8/p5/Jz+3n8vH4+P79fwC/oF/IL+0X8on4xv7hfwi/pl/JL+2X8sn45v7xfwa/oV/Ir+1X8qn41v7pfw6/p1/Jr+3X8un49v77fwG/oN/Ib+038pn4zv7nfwm/pt/Jb+238tn47v73fwe/od/I7+138rn43v7vfw+/p9/J7+338vn4/v78/wB/oD/IH+0P8of4wf7g/wh/pj/JH+2P8sf44f7w/wZ/oT/In+1P8qf40f7o/w5/pz/Jn+3P8uf48f76/wF/oL/IX+0v8pf4yf7m/wl/pr/JX+2v8tf46f72/wd/ob/I3+1v8rf42f7u/w9/p7/J3+3v8vf4+f79/wD/oH/IP+0f8o/4x/7h/wj/pn/JP+2f8s/45/7x/wb/oX/Iv+1f8q/41/7p/w7/p3/Jv+3f8u/49/77/wH/oP/If+0/8p/4z/7n/wn/pv/Jf+2/8t/47/73/wf/of/I/+1/8r/43/7uP+bhP+KRP+bTP+KzP+bwv+KIv+bKv+Kqv+bpv+KZv+bbv+K7v+b4f+KEP/MiHPvJj/4f/0//l//b/+H/9f35CkChIHCQJkgbJgv+C5EGKIGWQKkgdpAnSBumC9EGGIGOQKcgcZAmyBtmC7EGOIGeQK8gd5AnyBvmC/EGBoGBQKCgcFAmKBsWC4kGJoGRQKigdlAnKBuWC8kGFoGJQKagcVAmqBtWC6kGNoGZQK6gd1AnqBvWC+kGDoGHQKGgcNAmaBs2C5kGLoGXQKmgdtAnaBu2C9kGHoGPQKegcdAm6Bt2C7kGPoGfQK+gd9An6Bv2C/sGAYGAwKBgcDAmGBsOC4cGIYGQwKhgdjAnGBuOC8cGEYGIwKZgcTAmmBtOC6cGMYGYwK5gdzAnmBvOC+cGCYGGwKFgcLAmWBsuC5cGKYGWwKlgdrAnWBuuC9cGGYGOwKdgcbAm2BtuC7cGOYGewK9gd7An2BvuC/cGB4GBwKDgcHAmOBseC48GJ4GRwKjgdnAnOBueC88GF4GJwKbgcXAmuBteC68GN4GZwK7gd3AnuBveC+8GD4GHwKHgcPAmeBs+C58GL4GXwKngdvAneBu+C98GH4GPwKfgcfAm+Bt+C7wEW4AERkAEV0AETsAEX8IEQiIEUyIESqIEW6IERmIEV2IETuIEX+EEQhAEIogAGKIiDH8HP4FfwO/gT/A3+BQlhojBxmCRMGiYL/wuThynClGGqMHWYJkwbpgvThxnCjGGmMHOYJcwaZguzhznCnGGuMHeYJ8wb5gvzhwXCgmGhsHBYJCwaFguLhyXCkmGpsHRYJiwblgvLhxXCimGlsHJYJawaVgurhzXCmmGtsHZYJ6wb1gvrhw3ChmGjsHHYJGwaNgubhy3ClmGrsHXYJmwbtgvbhx3CjmGnsHPYJewadgu7hz3CnmGvsHfYJyEhISHsHw4IB4aDwsHhkHBoOCwcHo4IR4ajwtHhmHBsOC4cH04IJ4aTwsnhlHBqOC2cHs4IZ4azwtnhnHBuOC+cHy4IF4aLwsXhknBpuCxcHq4IV4arwtXhmnBtuC5cH24IN4abws3hlnBruC3cHu4Id4a7wt3hnnBvuC/cHx4ID4aHwsPhkfBoeCw8Hp4IT4anwtPhmfBseC48H14IL4aXwsvhlfBqeC28Ht4Ib4a3wtvhnfBueC+8Hz4IH4aPwsfhk/Bp+Cx8Hr4IX4avwtfhm/Bt+C58H34IP4afws/hl/Br+C38HmIhHhIhGVIhHTIhG3IhHwqhGEqhHCqhGmqhHhqhGVqhHTqhG3qhHwZhGIIwCmGIwjj8Ef4Mf4W/wz/h3/BfmAASgcQgCUgKkoH/QHKQAqQEqUBqkAakBelAepABZASZQGaQBWQF2UB2kAPkBLlAbpAH5AX5QH5QABQEhUBhUAQUBcVAcVAClASlQGlQBpQF5UB5UAFUBJVAZVAFVAXVQHVQA9QEtUBtUAfUBfVAfdAANASNQGPQBDQFzUBz0AK0BK1Aa9AGtAXtQHvQAXQEnUBn0AV0Bd1Ad9AD9AS9QG/QB/QF/UB/MAAMBIPAYDAEDAXDwHAwAowEo8BoMAaMBePAeDABTASTwGQwBUwF08B0MAPMBLPAbDAHzAXzwHywACwEi8BisAQsBcvAcrACrASrwGqwBqwF68B6sAFsBJvAZrAFbAXbwHawA+wEu8BusAfsBfvAfnAAHASHwGFwBBwFx8BxcAKcBKfAaXAGnAXnwHlwAVwEl8BlcAVcBdfAAHAD3AS3wG1wB9wF98B98AA8BI/AY/AEPAXPwHPwArwEr8Br8Aa8Be/Ae/ABfASfwGfwBXwF38B3gAEcEIAEFKABA1jAAR4IQAQSkIECVKABHRjABBawgQNc4AEfBCAEAEQAAgRi8AP8BL/Ab/AH/AX/QEKUKEocJYmSRsmi/6LkUYooZZQqSh2lidJG6aL0UYYoY5QpyhxlibJG2aLsUY4oZ5Qryh3lifJG+aL8UYGoYFQoKhwViYpGxaLiUYmoZFQqKh2VicpG5aLyUYWoYlQpqhxViapG1aLqUY2oZlQrqh3ViepG9aL6UYOoYdQoahw1iZpGzaLmUYuoZdQqah21idpG7aL2UYeoY9Qp6hx1ibpG3aLuUY+oZ9Qr6h31ifpG/aL+0YBoYDQoGhwNiYZGw6Lh0YhoZDQqGh2NicZG46Lx0YRoYjQpmhxNiaZG06Lp0YxoZjQrmh3NieZG86L50YJoYbQoWhwtiZZGy6Ll0YpoZbQqWh2tidZG66L10YZoY7Qp2hxtibZG26Lt0Y5oZ7Qr2h3tifZG+6L90YHoYHQoOhwdiY5Gx6Lj0YnoZHQqOh2dic5G56Lz0YXoYnQpuhxdia5G16Lr0Y3oZnQruh3die5G96L70YPoYfQoehw9iZ4mPIueRy+il9Gr6HX0JnobvYveRx+ij9Gn6HP0JfoafYu+R1iER0RERlRER0zERlzER0IkRlIkR0qkRlqkR0ZkRlZkR07kRl7kR0EURiCKIhihKI5+RD+jX9Hv6E/0N/oXJcBEMDFMApPCZPA/mBymgClhKpgapoFpYTqYHmaAGWEmmBlmgVlhNpgd5oA5YS6YG+aBeWE+mB8WgAVhIVgYFoFFYTFYHJaAJWEpWBqWgWVhOVgeVoAVYSVYGVaBVWE1WB3WgDVhLVgb1oF1YT1YHzaADWEj2Bg2gU1hM9gctoAtYSvYGraBbWE72B52gB1hJ9gZdoFdYTfYHfaAPWEv2Bv2gX1hP9gfDoAD4SA4GA6BQ+EwOByOgCPhKDgajoFj4Tg4Hk6AE+EkOBlOgVPhNDgdzoAz4Sw4G86Bc+E8OB8ugAvhIrgYLoFL4TK4HK6AK+EquBqugWvhOrgeboAb4Sa4GW6BW+E2uB3ugDvhLrgb7oF74T64Hx6AB+EheBgegUfhMXgcnoAn4Sl4Gp6BZ+E5eB5egBfhJXgZXoFX4TV4Hd6AN+EteBvegXfhPXgfPoAP4SP4GD6BT+Ez+By+gC/hK/gavoFv4Tv4Hn6AH+En+Bl+gV/hN/gdYhCHBCQhBWnIQBZykIcCFKEEZahAFWpQhwY0oQVt6EAXetCHAQwhgBGEEMEY/oA/4S/4G/6Bf+E/mIASocQoCUqKkqH/UHKUAqVEqVBqlAalRelQepQBZUSZUGaUBWVF2VB2lAPlRLlQbpQH5UX5UH5UABVEhVBhVAQVRcVQcVQClUSlUGlUBpVF5VB5VAFVRJVQZVQFVUXVUHVUA9VEtVBtVAfVRfVQfdQANUSNUGPUBDVFzVBz1AK1RK1Qa9QGtUXtUHvUAXVEnVBn1AV1Rd1Qd9QD9US9UG/UB/VF/VB/NAANRIPQYDQEDUXD0HA0Ao1Eo9BoNAaNRePQeDQBTUST0GQ0BU1F09B0NAPNRLPQbDQHzUXz0Hy0AC1Ei9BitAQtRcvQcrQCrUSr0Gq0Bq1F69B6tAFtRJvQZrQFbUXb0Ha0A+1Eu9ButAftRfvQfnQAHUSH0GF0BB1Fx9BxdAKdRKfQaXQGnUXn0Hl0AV1El9BldAVdRdfQdXQD3US30G10B91F99B99AA9RI/QY/QEPUXP0HP0Ar1Er9Br9Aa9Re/Qe/QBfUSf0Gf0BX1F39B3hCEcEYhEFKIRg1jEIR4JSEQSkpGCVKQhHRnIRBaykYNc5CEfBShEAEUIIoRi9AP9RL/Qb/QH/UX/UEKcKE4cJ4mTxsni/+LkcYo4ZZwqTh2nidPG6eL0cYY4Y5wpzhxnibPG2eLscY44Z5wrzh3nifPG+eL8cYG4YFwoLhwXiYvGxeLicYm4ZFwqLh2XicvG5eLycYW4YlwprhxXiavG1eLqcY24Zlwrrh3XievG9eL6cYO4Ydwobhw3iZvGzeLmcYu4Zdwqbh23idvG7eL2cYe4Y9wp7hx3ibvG3eLucY+4Z9wr7h33ifvG/eL+8YB4YDwoHhwPiYfGw+Lh8Yh4ZDwqHh2PicfG4+Lx8YR4YjwpnhxPiafG0+Lp8Yx4Zjwrnh3PiefG8+L58YJ4YbwoXhwviZfGy+Ll8Yp4ZbwqXh2vidfG6+L18YZ44//s2XXUZcWdL/zT3ViwACEEYjwQ3N0tIWiAECyCNtBAYw00ro27u7u7u7u7u7vbLn8X0PQbyM0dWzNzZ/h8/ji/OrVr19771HrWt55zukO6Q7vDusO7I7oju6O6o7tjumO747rjuxO6E7uTupO7U7pTu9O607szujO7s7qzu3O6c7vzuvO7C7oLu4u6i7tLuku7y7rLuyu6K7uruqu7a7pru+u667sbuhu7m7qbu1u6W7vbutu7O7o7u7u6u7t7unu7+7r7uwe6B7uHuoe7R7pHu8e6x7snuie7p7qnu2e6Z7vnuue7F7oXu5e6l7tXule717rXuze6N7u3ure7d7p3u/e697sPug+7j7qPu0+6T7vPus+7L7ovu64LXexSl7vS1a51vdAv9A8Dwkhh5DBKGDWMFn4URg9jhDHDWGHs8OMwThg3jBd+EsYPPw0ThJ+FCcNE4efhF+GX4Vfh12Hi0BcmCZOG34TJwuRhijBlmCpMHaYJ04bpwvRhhjBjmCnMHGYJs4bZwuxhjjBnmCvMHeYJ84b5wvxhgbBgWCj8NvwuLBx+HxYJi4bFwuJhibBk+ENYKiwdlgl/DMuGP4XlwvJhhbBiWCn8Ofwl/DX8LawcVgmrhtXC6mGNMDCsGdYKa4dBYZ2wblgvDA7rhw3ChmGjsHEYEjYJm4bNwtCwedgibBm2CluHbcK2Ybuwfdgh7Bh2CsPCzmGXsGvYLewe9gh7hr3C3mGfsG/YL+wfDggHhoPCweGQcGg4LBwejghHhqPC0eGYcGw4LhwfTggnhpPCyeGUcGo4LZwezghnhrPC2eGccG44L5wfLggXhovCxeGScGm4LFwerghXhqvC1eGacG24Llwfbgg3hpvCzeGWcGu4Ldwe7gh3hrvC3eGecG+4L9wfHggPhofCw+GR8Gh4LDwenghPhqfC0+GZ8Gx4LjwfXggvhpfCy+GV8Gp4Lbwe3ghvhrfC2+Gd8G54L7wfPggfho/Cx+GT8Gn4LHwevghfhi6EEEMKOZRQQwu92C/2jwPiSHHkOEocNY4WfxRHj2PEMeNYcez44zhOHDeOF38Sx48/jRPEn8UJ40Tx5/EX8ZfxV/HXceLYFyeJk8bfxMni5HGKOGWcKk4dp4nTxuni9HGGOGOcKc4cZ4mzxtni7HGOOGecK84d54nzxvni/HGBuGBcKP42/i4uHH8fF4mLxsXi4nGJuGT8Q1wqLh2XiX+My8Y/xeXi8nGFuGJcKf45/iX+Nf4trhxXiavG1eLqcY04MK4Z14prx0FxnbhuXC8OjuvHDeKGcaO4cRwSN4mbxs3i0Lh53CJuGbeKW8dt4rZxu7h93CHuGHeKw+LOcZe4a9wt7h73iHvGveLecZ+4b9wv7h8PiAfGg+LB8ZB4aDwsHh6PiEfGo+LR8Zh4bDwuHh9PiCfGk+LJ8ZR4ajwtnh7PiGfGs+LZ8Zx4bjwvnh8viBfGi+LF8ZJ4abwsXh6viFfGq+LV8Zp4bbwuXh9viDfGm+LN8ZZ4a7wt3h7viHfGu+Ld8Z54b7wv3h8fiA/Gh+LD8ZH4aHwsPh6fiE/Gp+LT8Zn4bHwuPh9fiC/Gl+LL8ZX4anwtvh7fiG/Gt+Lb8Z34bnwvvh8/iB/Gj+LH8ZP4afwsfh6/iF/GLoYYY4o5llhji73UL/VPA9JIaeQ0Sho1jZZ+lEZPY6Qx01hp7PTjNE4aN42XfpLGTz9NE6SfpQnTROnn6Rfpl+lX6ddp4tSXJkmTpt+kydLkaYo0ZZoqTZ2mSdOm6dL0aYY0Y5opzZxmSbOm2dLsaY40Z5orzZ3mSfOm+dL8aYG0YFoo/Tb9Li2cfp8WSYumxdLiaYm0ZPpDWiotnZZJf0zLpj+l5dLyaYW0Ylop/Tn9Jf01/S2tnFZJq6bV0uppjTQwrZnWSmunQWmdtG5aLw1O66cN0oZpo7RxGpI2SZumzdLQtHnaIm2Ztkpbp23Stmm7tH3aIe2YdkrD0s5pl7Rr2i3tnvZIe6a90t5pn7Rv2i/tnw5IB6aD0sHpkHRoOiwdno5IR6aj0tHpmHRsOi4dn05IJ6aT0snplHRqOi2dns5IZ6az0tnpnHRuOi+dny5IF6aL0sXpknRpuixdnq5IV6ar0tXpmnRtui5dn25IN6ab0s3plnRrui3dnu5Id6a70t3pnnRvui/dnx5ID6aH0sPpkfRoeiw9np5IT6anRuqlZ9Kz6bn0fHohvZheSi+nV9Kr6bX0enojvZneSm+nd9K76b30fvogfZg+Sh+nT9Kn6bP0efoifZm6FFJMKeVUUk0t9XK/3D8PyCPlkfMoedQ8Wv5RHj2PkcfMY+Wx84/zOHncPF7+SR4//zRPkH+WJ8wT5Z/nX+Rf5l/lX+eJc1+eJE+af5Mny5PnKfKUeao8dZ4mT5uny9PnGfKMeaY8c54lz5pny7PnOfKcea48d54nz5vny/PnBfKCeaH82/y7vHD+fV4kL5oXy4vnJfKS+Q95qbx0Xib/MS+b/5SXy8vnFfKKeaX85/yX/Nf8t7xyXiWvmlfLq+c18sC8Zl4rr50H5XXyunm9PDivnzfIG+aN8sZ5SN4kb5o3y0Pz5nmLvGXeKm+dt8nb5u3y9nmHvGPeKQ/LO+dd8q55t7x73iPvmffKe+d98r55v7x/PiAfmA/KB+dD8qH5sHx4PiIfmY/KR+dj8rH5uHx8PiGfmE/KJ+dT8qn5tHx6PiOfmc/KZ+dz8rn5vHx+viBfmC/KF+dL8qX5snx5viJfma/KV+dr8rX5unx9viHfmG/KN+db8q35tnx7viPfme/Kd+d78r35vnx/fiA/mB/KD+dH8qP5sfx4fiI/mZ/KT+dn8rP5ufx8fiG/mF/KL+dX8qv5tfx6fiO/md/Kb+d38rv5vfx+/iB/mD/KH+dP8qf5s/x5/iJ/mbsccswp51xyzS33Sr/SvwwoI5WRyyhl1DJa+VEZvYxRxixjlbHLj8s4ZdwyXvlJGb/8tExQflYmLBOVn5dflF+WX5Vfl4lLX5mkTFp+UyYrk5cpypRlqjJ1maZMW6Yr05cZyoxlpjJzmaXMWmYrs5c5ypxlrjJ3mafMW+Yr85cFyoJlofLb8ruycPl9WaQsWhYri5clypLlD2WpsnRZpvyxLFv+VJYry5cVyoplpfLn8pfy1/K3snJZpaxaViurlzXKwLJmWausXQaVdcq6Zb0yuKxfNigblo3KxmVI2aRsWjYrQ8vmZYuyZdmqbF22KduW7cr2ZYeyY9mpDCs7l13KrmW3snvZo+xZ9ip7l33KvmW/sn85oBxYDioHl0PKoeWwcng5ohxZjipHl2PKseW4cnw5oZxYTionl1PKqeW0cno5o5xZzipnl3PKueW8cn65oFxYLioXl0vKpeWycnm5olxZripXl2vKteW6cn25odxYbio3l1vKreW2cnu5o9xZ7ip3l3vKveW+cn95oDxYHioPl0fKo+Wx8nh5ojxZnipPl2fKs+W58nx5obxYXiovl1fKq+W18np5o7xZ3ipvl3fKu+W98n75oHxYPiofl0/Kp+Wz8nn5onxZuhJKLKnkUkotrfRqv9q/Dqgj1ZHrKHXUOlr9UR29jlHHrGPVseuP6zh13Dpe/Ukdv/60TlB/ViesE9Wf11/UX9Zf1V/XiWtfnaROWn9TJ6uT1ynqlHWqOnWdpk5bp6vT1xnqjHWmOnOdpc5aZ6uz1znqnHWuOnedp85b56vz1wXqgnWh+tv6u7pw/X1dpC5aF6uL1yXqkvUPdam6dF2m/rEuW/9Ul6vL1xXqinWl+uf6l/rX+re6cl2lrlpXq6vXNerAumZdq65dB9V16rp1vTq4rl83qBvWjerGdUjdpG5aN6tD6+Z1i7pl3apuXbep29bt6vZ1h7pj3akOqzvXXequdbe6e92j7ln3qnvXfeq+db+6fz2gHlgPqgfXQ+qh9bB6eD2iHlmPqkfXY+qx9bh6fD2hnlhPqifXU+qp9bR6ej2jnlnPqmfXc+q59bx6fr2gXlgvqhfXS+ql9bJ6eb2iXlmvqlfXa+q19bp6fb2h3lhvqjfXW+qt9bZ6e72j3lnvqnfXe+q99b56f32gPlgfqg/XR+qj9bH6eH2iPlmfqk/XZ+qz9bn6fH2hvlhfqi/XV+qr9bX6en2jvlnfqm/Xd+q79b36fv2gflg/qh/XT+qn9bP6ef2iflm7GmqsqeZaaq2t9lq/1r8NaCO1kdsobdQ2WvtRG72N0cZsY7Wx24/bOG3cNl77SRu//bRN0H7WJmwTtZ+3X7Rftl+1X7eJW1+bpE3aftMma5O3KdqUbao2dZumTduma9O3GdqMbaY2c5ulzdpma7O3Odqcba42d5unzdvma/O3BdqCbaF/1/krt1Xaqm21tnpbow1sa7a12tptUFunrdvWa4Pb+m2DtmHbqG3chrRN2qZtsza0bd62aFu2rdrWbZu2bduubd92aDu2ndqwtnPbpe3admu7tz3anm2vtnfbp+3b9mv7twPage2gdnA7pB3aDmuHtyPake2odnQ7ph3bjmvHtxPaie2kdnI7pZ3aTmuntzPame2sdnY7p53bzmvntwvahe2idnG7pF3aLmuXtyvale2qdnW7pl3brmvXtxvaje2mdnO7pd3abmu3tzvane2udne7p93b7mv3twfag+2h9nB7pD3aHmuPtyfak+2p9nR7pj3bnmvPtxfai+2l9nJ7pb3aXmuvtzfam+2t9nZ7p73b3mvvtw/ah+2j9nH7pH3aPmufty/al61rocWWWm6l1dZaDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xSLLrHUIjP1Rh7xvl+vX2+hXr/eSf16vd5o//+4kYbX0b53/ji9Xm+Nr1sTfv26+IjW/90o/8r7m6nX6603Yv7+vSW/bvUbfscj94atMNPG+9an+v2z2ntp+ERPffe6Iw2YrLd0b9HeCsPfDxt+7189/Vev35p8eF3o2441+g+/se/Wcaf45hO66DvzDPiH5xkxzzjfKSPquP2+ma+11v6VH9F/wPdXkx8W6//DZv1/2Eb7p/m/xvfyf8DwVOz/vRn+Wf7/S7n8f8z/fv/Y9VX+bzJi/v695f6t+d83fKLh9dvrjjYi/5fuDe5t1ttseP8/2wd82xqR333/5zpJ/29i+78mv/+jvr+a/G806j89Yv1/2Kz/D1v/f8j//v+X/O//PzH/R3xz8U39+/xfqjekt25v0d7g3oa9QcP7/1n+Lzi8jsj/7837bZ1koX5fnyT/+X+f9f9hs/4/bP+Y/wOG5/9b38v/Uf5uD/D3xhmel9/m/0z/zvz/7vf8/XrL/ptz/ru+nX/UAZP1VuoN6W3Y26K3UW/Q1/MOG3Gd/r21R1xxpGFfPce3vweM//XR2YY/7/i9E/uN1/sm2Xsjjzf8/K/7vhkw8lf//vf1731nzPeP9YbvlWYacf2ReuMNbw3tbdPbtrdBb2Bvw693I99+H/HV3meqEeNH7o35vd9XBgx/8mEj+icc8bvDhP/iPsTf/w+b9f9fbdi/NMD6/7D1/zofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Xg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/2bvLHbTMCosu39fX19cbrf/wzu67Y4b1hvXagG/aIw3va8Pr571er1+v1/vymJ0Xm3bogwt/1Tf2xDdsuv15k960+RgrXTb2taP27h9ntXc/muW1+ye4f6J36wrrDR7aN3ho38ZDNu8b2LfmkCGbD1xzw0F9aw8eusEMfctuOGjg0EF9gzceOmiz7xxeZ8Mhm2yyTd/Ajdcea/RNNhs0dGjfwI236dtg0DZ9mw/p23yzbfoGrjtw8MZ9M8wwQ99Yo/9XfXb/8614zn/3HQDw3+P/CwAA//+RPtEZ") 1.436178603s ago: executing program 1 (id=1055): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00'}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 1.290522795s ago: executing program 4 (id=1056): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES32, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES8, @ANYRES8, @ANYRESOCT], 0x1, 0x1db, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x2}}, 0x0) 1.036307536s ago: executing program 1 (id=1057): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x50}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00'}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000280)=""/230, &(0x7f0000000000)=0xe6) socket$inet6(0xa, 0x3, 0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) socket$inet_dccp(0x2, 0x6, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={0x0}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000040)=0x61) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x7d, &(0x7f0000000080), 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r6, 0x114, 0x5, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f0000001180)) 970.34227ms ago: executing program 4 (id=1058): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc) syz_clone(0x1108, 0x0, 0x0, 0x0, 0x0, 0x0) 920.913975ms ago: executing program 1 (id=1059): syz_open_dev$sndpcmc(&(0x7f0000000600), 0x0, 0x200fc2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000380), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 795.249965ms ago: executing program 1 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2c7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x3c}}, 0x0) 692.866023ms ago: executing program 3 (id=1061): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x112c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 624.369269ms ago: executing program 1 (id=1062): syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x90, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x2}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x18}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x90}, 0x1, 0xba01}, 0x810) getsockopt$inet_int(r1, 0x10d, 0xbb, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x7c, 0x96, 0x5c, 0x40, 0x2013, 0x251, 0xe86e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "839935191f"}]}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) tee(r0, r1, 0x6, 0xc) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000340)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x1}], 0x0, 0x0, 0x0, 0x2, 0x2}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000703ac020580406709169000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000a, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x325) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f00000005c0)={0x2, 0xfffd, @private=0xa010100}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') lseek(r9, 0xffffffffffffff8b, 0x0) syz_fuse_handle_req(r9, &(0x7f000000ebc0)="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", 0x2000, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 530.430967ms ago: executing program 4 (id=1063): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x80000000}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9, 0xf5, &(0x7f0000000600)=""/245, 0x0, 0x5, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10e7e}, 0x90) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x0) 497.854039ms ago: executing program 2 (id=1064): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) setgroups(0x1, &(0x7f0000000200)=[r0]) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$tcp_congestion(r3, 0x0, 0xffffff93) 485.648851ms ago: executing program 3 (id=1065): r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0}, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r4, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0xfd, @tick, {}, {0xf}, @addr={0x1b}}], 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) syz_open_dev$video4linux(&(0x7f0000000300), 0xef, 0x121000) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x0, "d30f388c52647612d91de4353d68b0fa00"}, 0x3c) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "01007ddb2ade27ffa5b7216fe75ebaa2855a42228bf8ec83af003751804500"}, 0x3c) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="100000001114010025bd700000000032f4f5b05891e91ad4a582487a7ea34eaffccaa1162579013752ea7d81499866b59714636ea81970b634524c60b374cb0f1e1a52440368eae0a61c68ccf274482add9fec9c60ea5a7a4f3deb348753ca7f5e1db509136287d293db0cdd274315643f75a4"], 0x10}, 0x1, 0x0, 0x0, 0x48}, 0x0) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ac38f5bd6e0630e369c7b35d21ff1f4d7ed79c31e2b0f1da"}, 0x3c) 446.730684ms ago: executing program 2 (id=1066): r0 = socket$kcm(0x10, 0x2, 0x4) socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000340)={&(0x7f0000000300), 0x0}) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000d80)={&(0x7f0000000000), &(0x7f0000002e40)=""/4109, 0x100d}) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="757466382c757466382c6e6f636f6d70726573732c6f76657272696465726f636b7065726d2c636865636b3d7374726963742c756e686964652c73657373696f6e3d307830ef3a303030303030303030303030662c00"], 0x1, 0x564, &(0x7f0000000140)="$eJzs3d1u09gWwPHl0p72BAkdHY4QqgpsyhmpSCU4CQRFXHmcnXRDYke2g9orVNEUVaQwoow07c0MN8yHZh6C23mIeYt5DDS3M1eM/BHa0nwUShvU+f8i2I697L22G3nJbWwLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQy63adsGShvHay2owtxr4zd232doHZsj1fc2QfkWs+J/MzMjFdNbF/+0uvhD/Ny9z6bs5mYmbGdk5e+E/d89PTvTWH5Lwidja3nmy2u12nn/4qumQZOxDGOnS9OBlde2Z0DdNp66VCX1VKZftm0u1UNVMQ4crYaSbyg20E/mBWnCvq0KlUlI6v+K3vXrVaejezDs3irZdVvfyLe0Eoe/dvJcP3SXTaBivnsTEi+OYO/EH8b6JVKSdplLrG91OadQA4qDCYYKKo4KKdrFYKBSLhfLtyu07tj15YIb9HjkQMf4PLcbrUx26gSObyOq/NMSIJ21ZFtX35UpVAvGlOWB5plf/v7iph/a7t/73qvzF3cWzktT/y+m7y4Pq/4BcTu61JduyI09kVbrSlY48H3tGJ/uqixZPjITii5GmOMkclc1RUpGylMWWh7IkNQlFSU2MNERLKCsSSiQ6+US5EogWRyLxJRAlC+LKdVFSkIpUpCRKtORlRXxpiyd1qYqTbGVdNpL9XhJlDcoxC/rpr7dvB4Xkep+7jhSHjJb6jz6msw/PIcM/2bEbOKq3vfoPAAAAAABOLSv57Xt8/j8ll5Kpmmloe9xpAQAAAACATyj5y/9c3EzFU5fE4vwfAAAAAIDTxkqusbNEJCdX0ql1sZJrqvglAAAAAAAAp0Ty9//LcZPcA+WKWO/uqcL5PwAAAAAAp8QPI++xH7amrd/+kCCYsl62lv9vbTpxnLN5Jm6m5cz7W4xqs9a5bCNJU06byUlXz1m9u973ot9kzfqoPKx+CXwncvgEzk/Kz3I1jbm6lrZrvSVpL7maaei86zfuFsRxzk1Eejn6+unGN5IM/0evec6S9Y1uJ//oWXctyeVlvJWXm9kNFA/cR3FILi+S+y0k11z0HfFUciFG1m8u7dfeO/6JdPWJD+jzlcynMfPZHW9z+8c/E/dZyO+Ofkr2jj7LonDEkb+Sa2nMtYVradMni2J+0M8gy6K4N4uP2heHyKI0KovSEbMAgHFZT6rQnwOrkHWw8H/EUe7jqrt8YHV/JQtpzMJscmCdnO1zRLdHHdHtI1a3Xw88A2lQjY37/eW9qvo6XuH1wH7DRtGKd+GZF5tfyYWt7Z0bG5urjzuPO0+LxVLZvmXbt4sylQwja6g9AIA++j9jJ63taf0f+RQe69aIs+r/vvtKQV4eyTPpyposJlcbJN846LvV3J6vISyOOGvNJWUyji3I4pCzun8lVzn0tlscGrs/h9Jx/xgAADhR8yPq8GHq/+KI8+79tXz42fFubOGE9wQAAP8cOnhj5aLvrSAwrYeFSqXgREtaBb57XwWmWtfKeJEO3CXHq2vVCvzId/1GPPHAVHWownar5QeRqvmBavmhWU6e/K6yR7+Huul4kXHDVkM7oVau70WOG6mqCV3Van/ZMOGSDpKVw5Z2Tc24TmR8T4V+O3B1XqlQ6z2Bpqq9yNRMPOmpVmCaTrCiHviNdlOrqg7dwLQiP91gry/j1fygmWw2P+6dDQDAZ2Jre+fJarfbeX6ME+MeIwAA2I8qDQAAAAAAAAAAAAAAAAAAAADA5+8krv9j4pRP9G4FfQxdzIxnXP+Wo6xufhc55gxvnU13+fF1MfLQ8e3xHpkAHLe/AwAA//8kH0tU") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000300fb964e23330616300000850000006e000000850000000720000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) open(&(0x7f0000000140)='./file0\x00', 0x2a440, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) dup3(r8, r7, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendto$packet(r5, &(0x7f0000000180)="0b040600e0ff020006004788aa96a13bb1000011000088ca1a00", 0x1a, 0x5, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="ec5a6c30d432"}, 0x14) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) r11 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000001001400030064766d72700900000000000000000000180012305eb196235572557131df694d46ddf480"], 0x4c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) 362.849961ms ago: executing program 4 (id=1067): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x141003, 0x0) r1 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000008000840"], 0x60}}, 0x0) 88.474763ms ago: executing program 2 (id=1068): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x100000000000000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000050004000400"], 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) pipe(&(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x50000, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a500"], &(0x7f0000000300)='GPL\x00', 0x9}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0x40086607, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000200)="b9ff03076003008cb89608f086dd8635f74bcb8dc1a4eba672c56eca47263a22fa73dbed7f87876f3ce0f88d71a721343c6c7c0f4520", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f0000000280)={0x2, 0x0, 0x0, 0xfdfdffff}) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) 0s ago: executing program 0 (id=1069): r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0xec) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 179.544271][ T5906] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.622: couldn't read orphan inode 17 (err -117) [ 179.557865][ T5906] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.591275][ T5906] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.622: bg 0: block 7: invalid block bitmap [ 179.604887][ T5882] read_mapping_page failed! [ 179.609703][ T5882] bread failed! [ 179.622203][ T5882] jfs_create: dtInsert returned -EIO [ 179.632822][ T5882] ERROR: (device loop0): jfs_create: [ 179.632822][ T5882] [ 179.651393][ T5882] ERROR: (device loop0): remounting filesystem as read-only [ 179.921241][ T4339] usb 4-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 179.932794][ T4339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.013870][ T5917] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 180.161454][ T5917] loop2: detected capacity change from 0 to 512 [ 180.259331][ T4339] usb 4-1: Product: syz [ 180.399222][ T4339] usb 4-1: Manufacturer: syz [ 180.474912][ T5917] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 180.491780][ T5917] ext4 filesystem being mounted at /18/bus supports timestamps until 2038 (0x7fffffff) [ 180.511964][ T5916] loop4: detected capacity change from 0 to 512 [ 180.518458][ T4339] usb 4-1: SerialNumber: syz [ 180.563492][ T4339] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input11 [ 180.677996][ T5916] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 180.770944][ T3013] bcm5974 4-1:1.0: could not read from device [ 180.794518][ T4339] usb 4-1: USB disconnect, device number 7 [ 180.810996][ T3013] bcm5974 4-1:1.0: could not read from device [ 181.099102][ T5926] loop0: detected capacity change from 0 to 512 [ 181.489330][ T2989] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 181.517702][ T5926] FAT-fs (loop0): bogus logical sector size 0 [ 181.523967][ T5926] FAT-fs (loop0): Can't find a valid FAT filesystem [ 181.834416][ T5933] loop4: detected capacity change from 0 to 128 [ 181.844971][ T5935] loop0: detected capacity change from 0 to 128 [ 181.902003][ T5933] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.911709][ T5935] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 181.931088][ T2989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.954746][ T2989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.969653][ T5933] FAT-fs (loop4): bogus number of FAT sectors [ 182.004599][ T5933] FAT-fs (loop4): Can't find a valid FAT filesystem [ 182.015530][ T2989] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 182.025406][ T5929] loop2: detected capacity change from 0 to 40427 [ 182.034551][ T2989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.047379][ T2989] usb 2-1: config 0 descriptor?? [ 182.126037][ T5929] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 182.151969][ T5929] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 182.215341][ T5929] F2FS-fs (loop2): invalid crc value [ 182.252727][ T5929] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.344669][ T5929] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 182.358900][ T5929] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 182.542668][ T25] audit: type=1326 audit(1723564882.136:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.4.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec0f8a9f9 code=0x7fc00000 [ 182.582253][ T2989] gt683r_led 0003:1770:FF00.0006: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 182.679517][ T5958] loop3: detected capacity change from 0 to 2048 [ 182.864528][ T5958] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.002494][ T4339] usb 2-1: USB disconnect, device number 10 [ 183.050863][ T3616] gt683r_led 0003:1770:FF00.0006: failed to send set report request: -19 [ 183.854771][ T5989] loop0: detected capacity change from 0 to 1024 [ 183.883345][ T5985] loop1: detected capacity change from 0 to 512 [ 183.905117][ T5989] EXT4-fs (loop0): Ignoring removed oldalloc option [ 183.930874][ T3618] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 183.958132][ T5989] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 184.030304][ T5985] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.106809][ T5985] EXT4-fs (loop1): 1 truncate cleaned up [ 184.126050][ T5988] loop2: detected capacity change from 0 to 32768 [ 184.141316][ T5985] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 184.189237][ T25] audit: type=1800 audit(1723564883.806:196): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.653" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 184.218120][ T5988] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.638 (5988) [ 184.251478][ T3618] usb 5-1: Using ep0 maxpacket: 8 [ 184.352828][ T5993] chnl_net:caif_netlink_parms(): no params data found [ 184.370969][ T5988] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 184.371232][ T3618] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.381308][ T5988] BTRFS info (device loop2): setting nodatacow, compression disabled [ 184.401211][ T5988] BTRFS info (device loop2): enabling auto defrag [ 184.420998][ T5988] BTRFS info (device loop2): max_inline at 0 [ 184.431347][ T5988] BTRFS info (device loop2): using free space tree [ 184.437888][ T5988] BTRFS info (device loop2): has skinny extents [ 184.513746][ T6007] input: syz0 as /devices/virtual/input/input12 [ 184.553630][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.599367][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.611173][ T5993] device bridge_slave_0 entered promiscuous mode [ 184.648498][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.659713][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.667309][ T3618] usb 5-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 184.668418][ T5993] device bridge_slave_1 entered promiscuous mode [ 184.677526][ T3618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.692264][ T3618] usb 5-1: Product: syz [ 184.696439][ T3618] usb 5-1: Manufacturer: syz [ 184.701109][ T3618] usb 5-1: SerialNumber: syz [ 184.763981][ T5993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.770488][ T3618] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input13 [ 184.776637][ T5993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.952328][ T5993] team0: Port device team_slave_0 added [ 184.960342][ T6030] loop0: detected capacity change from 0 to 4096 [ 184.981723][ T3013] bcm5974 5-1:1.0: could not read from device [ 184.990557][ T5993] team0: Port device team_slave_1 added [ 184.992139][ T6030] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 185.011027][ T3013] bcm5974 5-1:1.0: could not read from device [ 186.343148][ T5988] sched: RT throttling activated [ 186.365162][ T3618] usb 5-1: USB disconnect, device number 6 [ 186.423230][ T3616] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.454818][ T4106] BTRFS info (device loop2): space_info 5 has 159744 free, is not full [ 186.463154][ T4106] BTRFS info (device loop2): space_info total=3276800, used=53248, pinned=0, reserved=1449984, may_use=1613824, readonly=0 zone_unusable=0 [ 186.477372][ T4106] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968 [ 186.486000][ T4106] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 186.493694][ T4106] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 186.501376][ T4106] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 186.509181][ T4106] BTRFS info (device loop2): delayed_refs_rsv: size 589824 reserved 454656 [ 186.522294][ T3617] Bluetooth: hci4: command 0x0409 tx timeout [ 186.539729][ T6030] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 186.593245][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.643167][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.693603][ T5993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.707953][ T4724] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 186.725099][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.766702][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.812341][ T5993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.066551][ T3616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.077505][ T3616] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.100799][ T3616] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.127555][ T3616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.302470][ T6046] loop0: detected capacity change from 0 to 512 [ 187.332118][ T3616] usb 2-1: config 0 descriptor?? [ 187.513587][ T6046] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 187.530653][ T6046] ext4 filesystem being mounted at /74/bus supports timestamps until 2038 (0x7fffffff) [ 187.769324][ T5993] device hsr_slave_0 entered promiscuous mode [ 187.782796][ T5993] device hsr_slave_1 entered promiscuous mode [ 187.789442][ T5993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.831291][ T5993] Cannot create hsr debugfs directory [ 187.937375][ T3616] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 187.955959][ T3616] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 187.994717][ T3616] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 188.110016][ T5993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.180821][ T5993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.261254][ T5993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.322593][ T5993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.497820][ T5993] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 188.513584][ T5993] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.614624][ T3616] Bluetooth: hci4: command 0x041b tx timeout [ 188.637380][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'. [ 188.696405][ T5993] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.719128][ T5993] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 188.748669][ T6072] loop4: detected capacity change from 0 to 512 [ 188.842463][ T6072] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.933499][ T6045] usb 2-1: USB disconnect, device number 11 [ 188.934205][ T6072] EXT4-fs (loop4): 1 truncate cleaned up [ 188.946276][ T6072] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 188.988523][ T5993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.004490][ T25] audit: type=1800 audit(1723564888.616:197): pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.660" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 189.053270][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.062700][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.109410][ T5993] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.158223][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.176348][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.191240][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.198345][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.233651][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.243971][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.262864][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.278788][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.285908][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.308748][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.325320][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.362902][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.378041][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.415660][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.460011][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.482400][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.525913][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.563157][ T5993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.581239][ T6074] loop2: detected capacity change from 0 to 32768 [ 189.589428][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.605459][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.642303][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.692485][ T6074] XFS (loop2): Mounting V5 Filesystem [ 189.705691][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.833890][ T6074] XFS (loop2): Ending clean mount [ 190.130952][ T25] audit: type=1800 audit(1723564889.736:198): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.661" name="bus" dev="loop2" ino=4427 res=0 errno=0 [ 190.245014][ T5435] XFS (loop2): Unmounting Filesystem [ 190.295139][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.306757][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.319073][ T5993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.375825][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.410599][ T6045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.413461][ T6114] loop4: detected capacity change from 0 to 128 [ 190.456352][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.472517][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.492198][ T5993] device veth0_vlan entered promiscuous mode [ 190.512827][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.533920][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.559000][ T5993] device veth1_vlan entered promiscuous mode [ 190.607623][ T6114] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.671067][ T3616] Bluetooth: hci4: command 0x040f tx timeout [ 190.687501][ T6114] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038 (0x7fffffff) [ 190.725254][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 190.748858][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 190.781936][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.794719][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.815797][ T5993] device veth0_macvtap entered promiscuous mode [ 190.905665][ T5993] device veth1_macvtap entered promiscuous mode [ 190.930822][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.975030][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.045322][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.077885][ T6127] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 191.089854][ T6127] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 191.108400][ T6127] Error parsing options; rc = [-22] [ 191.147315][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.176732][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.201649][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.212486][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.249301][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.285880][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.297422][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.310268][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.332872][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.361375][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.374796][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.391096][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 191.401999][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.435369][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.449449][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.485960][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.519124][ T6140] fuse: Unknown parameter '"0x000000000000000b' [ 191.522796][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.590380][ T6147] loop0: detected capacity change from 0 to 256 [ 191.598290][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.611047][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.633826][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.651099][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.668388][ T5993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.680256][ T5993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.698229][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.716680][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.759374][ T6147] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 191.796092][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.813348][ T5993] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.850974][ T5993] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.870047][ T5993] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.890854][ T21] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 191.908830][ T5993] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.992149][ T25] audit: type=1804 audit(1723564891.596:199): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.686" name="/newroot/79/file0/bus" dev="loop0" ino=1048697 res=1 errno=0 [ 192.058742][ T6144] loop2: detected capacity change from 0 to 32768 [ 192.067944][ T1288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.088318][ T1288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.119195][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.157464][ T4089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.168401][ T6144] XFS (loop2): Mounting V5 Filesystem [ 192.176054][ T4089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.220551][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.286993][ T6166] loop4: detected capacity change from 0 to 128 [ 192.301718][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.340995][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.365915][ T6166] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 192.456509][ T6171] loop3: detected capacity change from 0 to 128 [ 192.676301][ T6166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.757601][ T6171] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.769362][ T6171] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038 (0x7fffffff) [ 192.954760][ T21] usb 2-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 193.091078][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.305780][ T6171] fscrypt: Error allocating hmac(sha512): -2 [ 193.323570][ T4339] Bluetooth: hci4: command 0x0419 tx timeout [ 193.326394][ T6144] XFS (loop2): Ending clean mount [ 193.330434][ T21] usb 2-1: config 0 descriptor?? [ 193.524740][ T6184] loop0: detected capacity change from 0 to 4096 [ 193.643930][ T6184] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 193.672236][ T6184] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 193.708402][ T25] audit: type=1800 audit(1723564893.326:200): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.692" name="file1" dev="loop0" ino=24 res=0 errno=0 [ 193.754582][ T4724] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 193.810485][ T4724] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 193.829144][ T5435] XFS (loop2): Unmounting Filesystem [ 193.844865][ T21] waltop 0003:172F:0502.0008: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.1-1/input0 [ 194.032317][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.038681][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.059528][ T6202] loop0: detected capacity change from 0 to 256 [ 194.126105][ T1966] usb 2-1: USB disconnect, device number 12 [ 194.255140][ T6202] FAT-fs (loop0): Directory bread(block 64) failed [ 194.297454][ T6202] FAT-fs (loop0): Directory bread(block 65) failed [ 194.311742][ T6208] loop4: detected capacity change from 0 to 8 [ 194.321549][ T6202] FAT-fs (loop0): Directory bread(block 66) failed [ 194.338443][ T6202] FAT-fs (loop0): Directory bread(block 67) failed [ 194.351083][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 194.370297][ T6202] FAT-fs (loop0): Directory bread(block 68) failed [ 194.387919][ T6208] SQUASHFS error: lzo decompression failed, data probably corrupt [ 194.392908][ T6202] FAT-fs (loop0): Directory bread(block 69) failed [ 194.408058][ T6210] netlink: 60 bytes leftover after parsing attributes in process `syz.3.701'. [ 194.428082][ T6202] FAT-fs (loop0): Directory bread(block 70) failed [ 194.434987][ T6208] SQUASHFS error: Failed to read block 0x91: -5 [ 194.435080][ T6208] SQUASHFS error: Unable to read metadata cache entry [8f] [ 194.435094][ T6208] SQUASHFS error: Unable to read inode 0x11f [ 194.501060][ T6202] FAT-fs (loop0): Directory bread(block 71) failed [ 194.525091][ T6202] FAT-fs (loop0): Directory bread(block 72) failed [ 194.552572][ T6202] FAT-fs (loop0): Directory bread(block 73) failed [ 194.762426][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'. [ 194.956431][ T6220] device syzkaller0 entered promiscuous mode [ 195.007952][ T6226] mmap: syz.1.704 (6226) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 195.072082][ T25] audit: type=1326 audit(1723564894.686:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60701d49f9 code=0x7ffc0000 [ 195.133605][ T25] audit: type=1326 audit(1723564894.706:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60701d49f9 code=0x7ffc0000 [ 195.208599][ T25] audit: type=1326 audit(1723564894.706:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f60701d49f9 code=0x7ffc0000 [ 195.299631][ T25] audit: type=1326 audit(1723564894.706:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60701d49f9 code=0x7ffc0000 [ 195.434541][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 195.462763][ T6240] fuse: Bad value for 'fd' [ 195.466258][ T25] audit: type=1326 audit(1723564894.706:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60701d49f9 code=0x7ffc0000 [ 195.471435][ T6239] netlink: 40 bytes leftover after parsing attributes in process `syz.1.711'. [ 195.689245][ T6212] loop2: detected capacity change from 0 to 32768 [ 195.782191][ T6245] trusted_key: encrypted_key: insufficient parameters specified [ 197.599319][ T6250] loop3: detected capacity change from 0 to 512 [ 197.652362][ T6039] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 197.658766][ T6253] loop4: detected capacity change from 0 to 512 [ 197.729022][ T6253] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.784421][ T6250] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 197.800061][ T6253] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 197.819517][ T6253] System zones: 1-12 [ 197.859601][ T6250] EXT4-fs (loop3): group descriptors corrupted! [ 197.871344][ T6253] EXT4-fs (loop4): 1 truncate cleaned up [ 197.877010][ T6253] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,noquota,debug,,errors=continue. Quota mode: none. [ 197.931977][ T6039] usb 2-1: Using ep0 maxpacket: 8 [ 197.985832][ T6253] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 197.999377][ T6261] loop2: detected capacity change from 0 to 4096 [ 198.053138][ T6039] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 198.115256][ T6039] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.148754][ T6039] usb 2-1: config 0 has no interface number 0 [ 198.166956][ T6039] usb 2-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 198.186409][ T6039] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.242391][ T6039] usb 2-1: config 0 interface 52 has no altsetting 0 [ 198.249120][ T6039] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 198.292175][ T6261] ntfs: volume version 3.1. [ 198.296290][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 198.325310][ T6267] fuse: Unknown parameter '"0x000000000000000b' [ 198.331882][ T6039] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.461330][ T6268] loop3: detected capacity change from 0 to 256 [ 198.609400][ T6268] FAT-fs (loop3): Unrecognized mount option "shortname=l0¦-Kø" or missing value [ 198.894939][ T6039] usb 2-1: config 0 descriptor?? [ 198.910997][ T6039] usb 2-1: can't set config #0, error -71 [ 199.025062][ T6039] usb 2-1: USB disconnect, device number 13 [ 199.072789][ T6271] loop4: detected capacity change from 0 to 128 [ 199.144047][ T6271] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 199.228071][ T6271] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.304109][ T6274] loop3: detected capacity change from 0 to 4096 [ 199.384194][ T6274] ntfs: (device loop3): parse_options(): Unrecognized mount option show_sys_fil†s. [ 199.542993][ T6288] loop2: detected capacity change from 0 to 4096 [ 199.613998][ T6288] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 199.622682][ T6293] loop0: detected capacity change from 0 to 256 [ 199.643356][ T6288] ntfs3: loop2: Failed to load $BadClus. [ 199.863105][ T6297] loop3: detected capacity change from 0 to 512 [ 199.874584][ T3616] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 200.074956][ T6297] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 200.371457][ T3616] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.664291][ T3616] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.682921][ T6297] EXT4-fs (loop3): 1 orphan inode deleted [ 200.688683][ T6297] EXT4-fs (loop3): 1 truncate cleaned up [ 200.697836][ T6297] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 200.772235][ T3616] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.795448][ T6297] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz.3.730: path /13/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 200.824864][ T6311] loop0: detected capacity change from 0 to 1024 [ 200.825105][ T3616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.832766][ T6311] hfsplus: unable to parse mount options [ 200.842629][ T3616] usb 5-1: SerialNumber: syz [ 200.857544][ T6297] EXT4-fs (loop3): Remounting filesystem read-only [ 201.195526][ T6319] ceph: No path or : separator in source [ 201.598944][ T3616] usb 5-1: 0:2 : does not exist [ 201.637459][ T6325] MTD: Couldn't look up '': -22 [ 201.653354][ T6325] : Can't open blockdev [ 201.663421][ T6327] loop2: detected capacity change from 0 to 128 [ 201.909737][ T6327] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 203.365120][ T6327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.552205][ T3616] usb 5-1: USB disconnect, device number 7 [ 203.871917][ T3589] udevd[3589]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.179626][ T6357] loop0: detected capacity change from 0 to 512 [ 204.258861][ T6357] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.753: casefold flag without casefold feature [ 204.267635][ T6341] loop3: detected capacity change from 0 to 32768 [ 204.326395][ T6348] loop2: detected capacity change from 0 to 32768 [ 204.345427][ T6357] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.753: casefold flag without casefold feature [ 204.367584][ T6357] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.753: ea_inode with extended attributes [ 204.373549][ T6346] loop1: detected capacity change from 0 to 40427 [ 204.388684][ T6357] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.753: error while reading EA inode 12 err=-117 [ 204.413976][ T6357] EXT4-fs (loop0): 1 orphan inode deleted [ 204.421834][ T6348] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.747 (6348) [ 204.425302][ T6357] EXT4-fs (loop0): mounted filesystem without journal. Opts: prjquota,delalloc,,errors=continue. Quota mode: writeback. [ 204.453686][ T6341] XFS (loop3): Mounting V5 Filesystem [ 204.497644][ T6346] F2FS-fs (loop1): invalid crc value [ 204.515756][ T6348] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 204.519207][ T6346] F2FS-fs (loop1): Found nat_bits in checkpoint [ 204.525361][ T6348] BTRFS info (device loop2): setting nodatacow, compression disabled [ 204.539452][ T6348] BTRFS info (device loop2): enabling auto defrag [ 204.546066][ T6348] BTRFS info (device loop2): max_inline at 0 [ 204.552202][ T6348] BTRFS info (device loop2): using free space tree [ 204.558881][ T6348] BTRFS info (device loop2): has skinny extents [ 204.666274][ T6346] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 204.686939][ T6341] XFS (loop3): Ending clean mount [ 204.753329][ T6341] XFS (loop3): Quotacheck needed: Please wait. [ 204.783564][ T6346] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 204.813912][ T6346] overlayfs: conflicting lowerdir path [ 204.851809][ T6341] XFS (loop3): Quotacheck: Done. [ 204.905009][ T5350] attempt to access beyond end of device [ 204.905009][ T5350] loop1: rw=524288, want=45072, limit=40427 [ 204.933272][ T6391] loop0: detected capacity change from 0 to 256 [ 204.956647][ T5350] attempt to access beyond end of device [ 204.956647][ T5350] loop1: rw=0, want=45072, limit=40427 [ 204.969491][ T25] audit: type=1804 audit(1723564904.566:206): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.747" name="/newroot/39/file1/bus" dev="loop2" ino=263 res=1 errno=0 [ 205.005263][ T6391] FAT-fs (loop0): Unrecognized mount option "sys]immutable" or missing value [ 205.014308][ T25] audit: type=1804 audit(1723564904.606:207): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.747" name="/newroot/39/file1/bus" dev="loop2" ino=263 res=1 errno=0 [ 205.133243][ T25] audit: type=1804 audit(1723564904.636:208): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.747" name="/newroot/39/file1/bus" dev="loop2" ino=263 res=1 errno=0 [ 205.152226][ T1288] attempt to access beyond end of device [ 205.152226][ T1288] loop1: rw=2049, want=40992, limit=40427 [ 205.168460][ T5993] XFS (loop3): Unmounting Filesystem [ 205.637369][ T6399] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 206.816201][ T6413] netlink: 'syz.2.760': attribute type 21 has an invalid length. [ 206.824158][ T6413] netlink: 156 bytes leftover after parsing attributes in process `syz.2.760'. [ 206.856103][ T6399] usb 5-1: Using ep0 maxpacket: 8 [ 207.000814][ T6399] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 207.009872][ T6399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.038351][ T6399] usb 5-1: config 0 descriptor?? [ 207.080184][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.207465][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.347536][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.874713][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.210844][ T6045] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 208.289818][ T6438] loop0: detected capacity change from 0 to 2048 [ 208.409860][ T6438] NILFS (loop0): invalid segment: Sequence number mismatch [ 208.419132][ T6438] NILFS (loop0): trying rollback from an earlier position [ 208.471597][ T6438] NILFS (loop0): recovery complete [ 208.488801][ T6448] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.591202][ T6045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.645582][ T6045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.680990][ T6399] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 208.702048][ T6399] asix: probe of 5-1:0.0 failed with error -71 [ 208.710936][ T6045] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 208.727711][ T6399] usb 5-1: USB disconnect, device number 8 [ 208.739230][ T6045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.093872][ T6439] chnl_net:caif_netlink_parms(): no params data found [ 209.237119][ T6045] usb 4-1: config 0 descriptor?? [ 209.262283][ T6439] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.269569][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.278040][ T6439] device bridge_slave_0 entered promiscuous mode [ 209.286720][ T6439] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.294036][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.303450][ T6439] device bridge_slave_1 entered promiscuous mode [ 209.396843][ T6439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.427152][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 209.454495][ T6469] netlink: 40 bytes leftover after parsing attributes in process `syz.0.770'. [ 209.470270][ T6439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.601319][ T6439] team0: Port device team_slave_0 added [ 209.651747][ T6439] team0: Port device team_slave_1 added [ 209.708978][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.728618][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.761131][ T6398] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 209.786046][ T6439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.832259][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.839536][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.876249][ T6439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.934112][ T6430] udc-core: couldn't find an available UDC or it's busy [ 209.951281][ T6430] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 209.982597][ T6045] cm6533_jd 0003:0D8C:0022.0009: unknown global tag 0xd [ 209.996618][ T6045] cm6533_jd 0003:0D8C:0022.0009: item 0 0 1 13 parsing failed [ 210.011292][ T6045] cm6533_jd 0003:0D8C:0022.0009: parse failed [ 210.025555][ T6045] cm6533_jd: probe of 0003:0D8C:0022.0009 failed with error -22 [ 210.030823][ T6398] usb 1-1: Using ep0 maxpacket: 8 [ 210.080227][ T6439] device hsr_slave_0 entered promiscuous mode [ 210.099643][ T6439] device hsr_slave_1 entered promiscuous mode [ 210.121444][ T6439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.133274][ T6439] Cannot create hsr debugfs directory [ 210.191366][ T6398] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 210.199476][ T6398] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.232337][ T6398] usb 1-1: config 0 has no interface number 0 [ 210.241280][ T6398] usb 1-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 210.292000][ T6398] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.335547][ T6398] usb 1-1: config 0 interface 52 has no altsetting 0 [ 210.355634][ T6398] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 210.374524][ T6398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.412163][ T6398] usb 1-1: config 0 descriptor?? [ 210.424301][ T6397] Bluetooth: hci1: command 0x0409 tx timeout [ 210.627621][ T9] device hsr_slave_0 left promiscuous mode [ 210.640473][ T9] device hsr_slave_1 left promiscuous mode [ 210.667993][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.690900][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.709347][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.731030][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.756281][ T9] device bridge_slave_1 left promiscuous mode [ 210.775551][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.780526][ T6500] loop4: detected capacity change from 0 to 8192 [ 210.799180][ T9] device bridge_slave_0 left promiscuous mode [ 210.805851][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.848989][ T9] device veth1_macvtap left promiscuous mode [ 210.870956][ T6500] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.884815][ T9] device veth0_macvtap left promiscuous mode [ 210.891725][ T9] device veth1_vlan left promiscuous mode [ 210.897730][ T9] device veth0_vlan left promiscuous mode [ 210.914370][ T6500] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 210.940621][ T6500] FAT-fs (loop4): Filesystem has been set read-only [ 210.963348][ T6398] usb 1-1: USB disconnect, device number 5 [ 211.023384][ T3571] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 211.253806][ T6398] usb 4-1: USB disconnect, device number 8 [ 211.324976][ T6397] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 211.334382][ T6397] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 211.350682][ T6397] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 211.434072][ T6517] loop3: detected capacity change from 0 to 512 [ 211.441139][ T6400] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 211.475766][ T9] team0 (unregistering): Port device team_slave_1 removed [ 211.509038][ T9] team0 (unregistering): Port device team_slave_0 removed [ 211.513068][ T6517] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.777: casefold flag without casefold feature [ 211.529195][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.560615][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.602391][ T6517] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.777: missing EA_INODE flag [ 211.640285][ T6517] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.777: error while reading EA inode 12 err=-117 [ 211.683806][ T6517] EXT4-fs (loop3): 1 orphan inode deleted [ 211.704270][ T6517] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,journal_dev=0x0000000000000007,quota,init_itable=0x0000000000000004,errors=continue,errors=continue,data_err=ignore,delalloc,jqfmt=vfsold,norecovery,errors=continue,errors=continue,,errors=continue. Quota mode: writeback. [ 212.295037][ T6524] dccp_close: ABORT with 9144 bytes unread [ 212.308059][ T25] audit: type=1326 audit(1723564911.826:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.3.777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60701d49f9 code=0x0 [ 212.324405][ T9] bond0 (unregistering): Released all slaves [ 212.513231][ T6045] Bluetooth: hci1: command 0x041b tx timeout [ 212.576485][ T6400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.606332][ T6400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.628043][ T6400] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 212.654695][ T6400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.678448][ T6400] usb 5-1: config 0 descriptor?? [ 212.823496][ T6539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.785'. [ 212.966325][ T6439] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.988285][ T6439] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.006783][ T6439] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.049617][ T6439] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.291839][ T6439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.328035][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.336574][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.352795][ T6532] loop3: detected capacity change from 0 to 32768 [ 213.363222][ T6439] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.384409][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.392847][ T6400] usb 5-1: language id specifier not provided by device, defaulting to English [ 213.411423][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.427493][ T6532] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.781 (6532) [ 213.440978][ T6042] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 213.450259][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.457375][ T6397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.504966][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.541539][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.570787][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.579597][ T6536] loop0: detected capacity change from 0 to 32768 [ 213.589580][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.596702][ T6397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.633249][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.677893][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.700864][ T6042] usb 3-1: Using ep0 maxpacket: 32 [ 213.736017][ T6399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.737321][ T6536] XFS (loop0): Mounting V5 Filesystem [ 213.745502][ T6532] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 213.798657][ T6399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.804917][ T6532] BTRFS info (device loop3): setting nodatacow, compression disabled [ 213.810010][ T6400] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000B/input/input14 [ 213.815321][ T6532] BTRFS info (device loop3): enabling auto defrag [ 213.833096][ T6042] usb 3-1: config 0 has an invalid descriptor of length 109, skipping remainder of the config [ 213.838008][ T6399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.844290][ T6042] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.878978][ T6532] BTRFS info (device loop3): max_inline at 0 [ 213.886267][ T6399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.890133][ T6532] BTRFS info (device loop3): using free space tree [ 213.900907][ T6532] BTRFS info (device loop3): has skinny extents [ 213.911121][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.928373][ T6536] XFS (loop0): Ending clean mount [ 213.929355][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.943672][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.953179][ T6400] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000B/input/input15 [ 213.985349][ T6439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.021351][ T6400] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 214.034966][ T6439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.065308][ T6399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.073769][ T4724] XFS (loop0): Unmounting Filesystem [ 214.078512][ T6399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.081605][ T6042] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 214.099662][ T6400] usb 5-1: USB disconnect, device number 9 [ 214.107254][ T6042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.130928][ T6042] usb 3-1: Product: syz [ 214.135131][ T6042] usb 3-1: Manufacturer: syz [ 214.139746][ T6042] usb 3-1: SerialNumber: syz [ 214.175660][ T6042] usb 3-1: config 0 descriptor?? [ 214.461028][ T6042] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 214.502731][ T25] audit: type=1804 audit(1723564914.116:210): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.781" name="/newroot/21/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 214.521116][ T6042] usb 3-1: USB disconnect, device number 9 [ 214.557132][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.571513][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.590897][ T2989] Bluetooth: hci1: command 0x040f tx timeout [ 214.615674][ T6439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.726441][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.734709][ T25] audit: type=1804 audit(1723564914.346:211): pid=6592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.781" name="/newroot/21/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 214.766717][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.807793][ T25] audit: type=1804 audit(1723564914.346:212): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.781" name="/newroot/21/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 214.947370][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.956650][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.072628][ T6439] device veth0_vlan entered promiscuous mode [ 215.177708][ T6399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.321995][ T6399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.583715][ T6439] device veth1_vlan entered promiscuous mode [ 215.628875][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.640081][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.757257][ T6439] device veth0_macvtap entered promiscuous mode [ 215.825062][ T6439] device veth1_macvtap entered promiscuous mode [ 216.007843][ T6609] loop2: detected capacity change from 0 to 512 [ 216.084634][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.139927][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.190108][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.249054][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.309339][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.362510][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.415202][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.468803][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.519738][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.537459][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.551982][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.568965][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.596778][ T6609] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 216.606295][ T6609] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 216.635744][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.695914][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.727119][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.740892][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.755961][ T6615] Bluetooth: hci1: command 0x0419 tx timeout [ 216.770913][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.790793][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.828090][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.877496][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.891351][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.946287][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.001175][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.016840][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.051630][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.201866][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.216699][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.281566][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.301693][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.334817][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.254591][ T6439] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.270986][ T6439] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.280504][ T6439] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.292205][ T6439] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.373988][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 218.603892][ T4089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.627850][ T4089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.675694][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.709096][ T6176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.775433][ T6176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.831014][ T6662] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 218.878535][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.449533][ T6692] loop2: detected capacity change from 0 to 64 [ 219.492977][ T6651] loop3: detected capacity change from 0 to 32768 [ 219.687098][ T6666] chnl_net:caif_netlink_parms(): no params data found [ 219.747838][ T6679] loop0: detected capacity change from 0 to 32768 [ 219.764603][ T6651] XFS (loop3): invalid log iosize: 1 [not 12-30] [ 220.524434][ T6706] loop1: detected capacity change from 0 to 128 [ 220.593557][ T6679] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.800 (6679) [ 220.711193][ T6679] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 220.812602][ T6679] BTRFS info (device loop0): setting nodatacow, compression disabled [ 220.822201][ T6679] BTRFS info (device loop0): enabling auto defrag [ 220.835625][ T6679] BTRFS info (device loop0): max_inline at 0 [ 220.843967][ T6679] BTRFS info (device loop0): using free space tree [ 220.850495][ T6679] BTRFS info (device loop0): has skinny extents [ 220.890193][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.897491][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.907963][ T6666] device bridge_slave_0 entered promiscuous mode [ 220.924578][ T6666] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.931938][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.940138][ T6666] device bridge_slave_1 entered promiscuous mode [ 220.999487][ T6729] netlink: 72 bytes leftover after parsing attributes in process `syz.1.810'. [ 221.049416][ T6734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.810'. [ 221.062578][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.072623][ T6400] Bluetooth: hci3: command 0x0409 tx timeout [ 221.106959][ T6666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.149697][ T6666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.160471][ T6721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.198615][ T6666] team0: Port device team_slave_0 added [ 221.208373][ T6666] team0: Port device team_slave_1 added [ 221.224743][ T6721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.247181][ T6666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.254496][ T6666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.281010][ T6666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.291002][ T6044] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 221.293836][ T6666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.307742][ T6666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.345432][ T6666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.412415][ T25] audit: type=1804 audit(1723564921.026:213): pid=6679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.800" name="/newroot/112/file1/bus" dev="loop0" ino=263 res=1 errno=0 [ 221.458392][ T6666] device hsr_slave_0 entered promiscuous mode [ 221.478934][ T6666] device hsr_slave_1 entered promiscuous mode [ 221.498455][ T25] audit: type=1804 audit(1723564921.096:214): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.800" name="/newroot/112/file1/bus" dev="loop0" ino=263 res=1 errno=0 [ 221.536635][ T6666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.573606][ T6666] Cannot create hsr debugfs directory [ 221.604913][ T25] audit: type=1804 audit(1723564921.096:215): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.800" name="/newroot/112/file1/bus" dev="loop0" ino=263 res=1 errno=0 [ 221.626390][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.871066][ T6044] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 221.890409][ T6044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.900539][ T6044] usb 3-1: Product: syz [ 221.910667][ T6044] usb 3-1: Manufacturer: syz [ 221.920956][ T6044] usb 3-1: SerialNumber: syz [ 221.932001][ T6044] usb 3-1: config 0 descriptor?? [ 221.972720][ T6044] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 010 [ 222.106040][ T6767] loop3: detected capacity change from 0 to 40427 [ 222.136107][ T6666] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.179352][ T6774] loop1: detected capacity change from 0 to 128 [ 222.213778][ T6666] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.301220][ T6774] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.341522][ T6774] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 222.362044][ T6767] F2FS-fs (loop3): Found nat_bits in checkpoint [ 222.479155][ T6044] (null): failure reading functionality [ 222.501692][ T6666] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.525398][ T6767] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 222.537003][ T6044] i2c i2c-1: connected i2c-tiny-usb device [ 222.707898][ T6786] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 223.145485][ T6044] usb 3-1: USB disconnect, device number 10 [ 223.223802][ T6039] Bluetooth: hci3: command 0x041b tx timeout [ 223.400579][ T6666] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.506380][ T6793] loop2: detected capacity change from 0 to 1024 [ 223.544214][ T6791] loop1: detected capacity change from 0 to 2048 [ 223.588565][ T6795] Unsupported ieee802154 address type: 0 [ 223.713808][ T6666] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.733640][ T6791] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.746518][ T6666] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.792446][ T6796] 9pnet: Insufficient options for proto=fd [ 223.796552][ T6791] EXT4-fs (loop1): shut down requested (2) [ 223.820930][ T6666] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.855854][ T6666] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.033732][ T25] audit: type=1326 audit(1723564923.646:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.1.820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd20cb189f9 code=0x0 [ 224.365493][ T6804] loop3: detected capacity change from 0 to 4096 [ 224.416779][ T6804] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 224.474831][ T6804] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 224.494507][ T6804] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 224.529843][ T6804] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 224.549519][ T6804] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 224.610466][ T6804] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 224.645288][ T6804] ntfs: volume version 3.1. [ 224.648947][ T6666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.691817][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.707305][ T6805] loop0: detected capacity change from 0 to 32768 [ 224.714580][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.758980][ T6666] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.797524][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.817473][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.830523][ T6044] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.837781][ T6044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.892131][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.905267][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.966744][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.973928][ T6808] ptrace attach of "./syz-executor exec"[4724] was attempted by ""[6808] [ 225.005552][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.012703][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.068372][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.117970][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.166858][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.228832][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.230976][ T6614] Bluetooth: hci3: command 0x040f tx timeout [ 225.339230][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.408691][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.485579][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.577791][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.666891][ T144] hfsplus: b-tree write err: -5, ino 4 [ 225.810672][ T6818] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 225.967711][ T6818] loop3: detected capacity change from 0 to 512 [ 226.157356][ T6818] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 226.174011][ T6818] ext4 filesystem being mounted at /32/bus supports timestamps until 2038 (0x7fffffff) [ 226.317048][ T6666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.352076][ T6666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.365700][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.426360][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.486839][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.952312][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.959899][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.031697][ T6666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.094908][ T6828] loop3: detected capacity change from 0 to 1024 [ 227.311809][ T3618] Bluetooth: hci3: command 0x0419 tx timeout [ 227.501122][ T6837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.831'. [ 227.997081][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'. [ 228.169433][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.199189][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.238413][ T6834] loop1: detected capacity change from 0 to 32768 [ 228.278446][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.291930][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.324593][ T6834] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.828 (6834) [ 228.353739][ T6666] device veth0_vlan entered promiscuous mode [ 228.361307][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.369436][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.422717][ T6666] device veth1_vlan entered promiscuous mode [ 228.434298][ T6834] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 228.502151][ T6834] BTRFS info (device loop1): setting nodatacow, compression disabled [ 228.539635][ T6834] BTRFS info (device loop1): enabling auto defrag [ 228.548296][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 228.566877][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 228.575084][ T6834] BTRFS info (device loop1): max_inline at 0 [ 228.601621][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.610225][ T6834] BTRFS info (device loop1): using free space tree [ 228.634889][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.661338][ T6666] device veth0_macvtap entered promiscuous mode [ 228.675908][ T6834] BTRFS info (device loop1): has skinny extents [ 228.729316][ T6666] device veth1_macvtap entered promiscuous mode [ 228.853979][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.914918][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.925470][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.949438][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.003839][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.019135][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.034626][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.046707][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.060471][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.071777][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.083594][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.095112][ T6894] loop0: detected capacity change from 0 to 1024 [ 229.097129][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.115659][ T6666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.129879][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.154461][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.183184][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 229.209104][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.234909][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.261959][ T25] kauditd_printk_skb: 14 callbacks suppressed [ 229.261974][ T25] audit: type=1804 audit(1723564928.876:217): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.828" name="/newroot/9/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 229.289689][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.314347][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.354862][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.389594][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.407579][ T25] audit: type=1804 audit(1723564928.916:218): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.828" name="/newroot/9/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 229.513338][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.370592][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.431572][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.461032][ T25] audit: type=1804 audit(1723564928.946:219): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.828" name="/newroot/9/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 230.490779][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.518428][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.547483][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.581793][ T6666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.592512][ T6666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.606160][ T6666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.615068][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.627992][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.652374][ T6666] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.675851][ T6666] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.695620][ T6666] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.707689][ T6666] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.979115][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.030043][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.073596][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.092642][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.119018][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.181339][ T5620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 231.309749][ T6926] netlink: 'syz.3.858': attribute type 5 has an invalid length. [ 231.662608][ T6935] loop4: detected capacity change from 0 to 2048 [ 232.264002][ T6935] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.707411][ T3647] Bluetooth: hci0: command 0x0406 tx timeout [ 233.007301][ T6949] loop2: detected capacity change from 0 to 512 [ 234.309351][ T6949] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 234.326603][ T6949] ext4 filesystem being mounted at /67/bus supports timestamps until 2038 (0x7fffffff) [ 234.337345][ T6963] netlink: 68 bytes leftover after parsing attributes in process `syz.1.864'. [ 234.382547][ T6965] bridge: RTM_DELNEIGH with unconfigured vlan 3 on bridge0 [ 234.570940][ T6039] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 234.821104][ T6039] usb 5-1: Using ep0 maxpacket: 32 [ 234.951038][ T6039] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 234.962763][ T6039] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 234.985021][ T6039] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 235.019758][ T6039] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 235.050932][ T6039] usb 5-1: config 0 interface 0 has no altsetting 0 [ 235.058173][ T6973] loop0: detected capacity change from 0 to 40427 [ 235.099501][ T6977] loop3: detected capacity change from 0 to 32768 [ 235.217841][ T3669] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 235.221057][ T6039] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 235.258531][ T6973] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 235.261301][ T6039] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 235.286694][ T6039] usb 5-1: Product: syz [ 235.291013][ T6039] usb 5-1: Manufacturer: syz [ 235.295475][ T6977] XFS (loop3): Mounting V5 Filesystem [ 235.295606][ T6039] usb 5-1: SerialNumber: syz [ 235.471213][ T6991] loop1: detected capacity change from 0 to 2048 [ 235.531286][ T3669] usb 3-1: Using ep0 maxpacket: 16 [ 235.561050][ T6991] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.900668][ T6039] usb 5-1: config 0 descriptor?? [ 235.915637][ T6973] F2FS-fs (loop0): Found nat_bits in checkpoint [ 235.942286][ T6039] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 236.006729][ T6039] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 236.030098][ T3669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.041274][ T3669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.051090][ T3669] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.055458][ T6973] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 236.065102][ T3669] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.081048][ T3669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.093031][ T3669] usb 3-1: config 0 descriptor?? [ 236.100258][ T6973] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 236.111555][ T6973] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 236.124226][ T6973] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 236.137205][ T6977] XFS (loop3): Ending clean mount [ 236.169133][ T6977] XFS (loop3): Quotacheck needed: Please wait. [ 236.295336][ T6977] XFS (loop3): Quotacheck: Done. [ 236.364755][ T7000] loop1: detected capacity change from 0 to 4096 [ 236.383687][ T5993] XFS (loop3): Unmounting Filesystem [ 236.449932][ T7000] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 236.604449][ T3669] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 236.638945][ T3669] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000C/input/input17 [ 236.689520][ T3669] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 236.726429][ T5623] usb 5-1: USB disconnect, device number 10 [ 236.773169][ T5623] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 236.793092][ T7008] loop0: detected capacity change from 0 to 64 [ 237.192218][ T6980] udc-core: couldn't find an available UDC or it's busy [ 237.201260][ T7018] loop3: detected capacity change from 0 to 512 [ 237.202414][ T6980] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 237.298175][ T7018] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.371988][ T7021] loop0: detected capacity change from 0 to 256 [ 237.420927][ T7018] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.877: invalid indirect mapped block 83886080 (level 1) [ 237.463673][ T7018] EXT4-fs (loop3): Remounting filesystem read-only [ 237.471109][ T7018] EXT4-fs (loop3): 1 orphan inode deleted [ 237.479540][ T7018] EXT4-fs (loop3): 1 truncate cleaned up [ 237.485341][ T7018] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,nodelalloc,block_validity,noblock_validity,. Quota mode: none. [ 237.490650][ T7004] loop1: detected capacity change from 0 to 32768 [ 237.666309][ T25] audit: type=1804 audit(1723564937.276:220): pid=7027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.883" name="/newroot/136/bus/file0" dev="fuse" ino=1 res=1 errno=0 [ 237.698467][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.886'. [ 237.702139][ T25] audit: type=1800 audit(1723564937.276:221): pid=7027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.883" name="/" dev="fuse" ino=1 res=0 errno=0 [ 237.795632][ T25] audit: type=1804 audit(1723564937.276:222): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.883" name="/newroot/136/bus/file0" dev="fuse" ino=1 res=1 errno=0 [ 237.818442][ T25] audit: type=1800 audit(1723564937.276:223): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.883" name="/" dev="fuse" ino=1 res=0 errno=0 [ 238.053957][ T7004] XFS (loop1): Mounting V5 Filesystem [ 238.158642][ T7004] XFS (loop1): Ending clean mount [ 238.175916][ T7004] XFS (loop1): Quotacheck needed: Please wait. [ 238.227097][ T6039] usb 3-1: USB disconnect, device number 11 [ 238.309592][ T7004] XFS (loop1): Quotacheck: Done. [ 238.452052][ T3622] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 238.513898][ T7048] loop3: detected capacity change from 0 to 512 [ 239.089626][ T6439] XFS (loop1): Unmounting Filesystem [ 239.170823][ T3622] usb 5-1: Using ep0 maxpacket: 32 [ 239.226639][ T7048] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 239.255334][ T7048] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 239.293659][ T3622] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.305564][ T3622] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.401219][ T7048] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 239.419306][ T7048] EXT4-fs (loop3): orphan cleanup on readonly fs [ 239.427733][ T7048] EXT4-fs error (device loop3): ext4_map_blocks:601: inode #2: block 4: comm syz.3.889: lblock 0 mapped to illegal pblock 4 (length 1) [ 239.463634][ T3622] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 239.475058][ T7048] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 239.483477][ T3622] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 239.492486][ T7048] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noquota,errors=continue,noload,init_itable=0x0000000000001000,usrjquota="init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 239.520982][ T3622] usb 5-1: Product: syz [ 239.525257][ T3622] usb 5-1: Manufacturer: syz [ 239.553603][ T7048] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (20904!=33349) [ 239.572088][ T3622] hub 5-1:4.0: USB hub found [ 239.652335][ T7062] loop1: detected capacity change from 0 to 2048 [ 239.721717][ T7064] loop2: detected capacity change from 0 to 8192 [ 239.764667][ T7062] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.776181][ T7062] ext4 filesystem being mounted at /17/bus supports timestamps until 2038 (0x7fffffff) [ 239.831869][ T3622] hub 5-1:4.0: 2 ports detected [ 239.856848][ T7064] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 239.880943][ T7064] REISERFS (device loop2): using journaled data mode [ 239.887672][ T7064] reiserfs: using flush barriers [ 239.904567][ T7064] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 239.924149][ T7064] REISERFS (device loop2): checking transaction log (loop2) [ 239.941492][ T7064] REISERFS (device loop2): Using r5 hash to sort names [ 239.950077][ T7064] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 239.969150][ T7064] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 240.015351][ T7071] loop3: detected capacity change from 0 to 256 [ 240.026130][ T7064] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 240.088972][ T7064] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 240.148456][ T7064] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 240.161042][ T3622] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 240.169730][ T3622] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 240.178483][ T25] audit: type=1804 audit(1723564939.796:224): pid=7076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.897" name="/newroot/52/bus/file0" dev="fuse" ino=1 res=1 errno=0 [ 240.335976][ T3622] usb 5-1: USB disconnect, device number 11 [ 240.809285][ T25] audit: type=1800 audit(1723564939.816:225): pid=7076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.897" name="/" dev="fuse" ino=1 res=0 errno=0 [ 241.113861][ T7087] fuse: Unknown parameter 'rootm÷`/«¯ªšËÝ?bÁ¶ode' [ 241.170799][ T25] audit: type=1804 audit(1723564939.816:226): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.897" name="/newroot/52/bus/file0" dev="fuse" ino=1 res=1 errno=0 [ 241.239505][ T25] audit: type=1800 audit(1723564939.816:227): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.897" name="/" dev="fuse" ino=1 res=0 errno=0 [ 242.231067][ T7106] netlink: 'syz.2.910': attribute type 1 has an invalid length. [ 242.271270][ T7108] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 242.330956][ T25] audit: type=1326 audit(1723564941.946:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.0.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f8f359f9 code=0x7ffc0000 [ 242.511014][ T7112] loop3: detected capacity change from 0 to 2048 [ 242.647251][ T7112] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.995778][ T25] audit: type=1326 audit(1723564941.946:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.0.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f8f359f9 code=0x7ffc0000 [ 243.071028][ T7115] loop4: detected capacity change from 0 to 16 [ 243.138764][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.917'. [ 243.166246][ T7115] erofs: (device loop4): mounted with root inode @ nid 36. [ 243.194063][ T7117] loop2: detected capacity change from 0 to 256 [ 243.248018][ T25] audit: type=1326 audit(1723564942.446:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.0.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe2f8f359f9 code=0x7ffc0000 [ 243.328440][ T25] audit: type=1326 audit(1723564942.456:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.0.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f8f359f9 code=0x7ffc0000 [ 243.373557][ T7119] device vlan2 entered promiscuous mode [ 243.399581][ T7119] device wlan0 entered promiscuous mode [ 243.453479][ T7119] device wlan0 left promiscuous mode [ 243.460695][ T25] audit: type=1326 audit(1723564942.466:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.0.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f8f359f9 code=0x7ffc0000 [ 243.461009][ T6039] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 243.483128][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.642488][ T7102] loop1: detected capacity change from 0 to 40427 [ 243.652054][ T25] audit: type=1326 audit(1723564942.496:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.0.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe2f8f359f9 code=0x7ffc0000 [ 243.674468][ T25] audit: type=1326 audit(1723564942.716:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.0.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f8f359f9 code=0x7ffc0000 [ 243.697684][ T25] audit: type=1326 audit(1723564942.716:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.0.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f8f359f9 code=0x7ffc0000 [ 243.792426][ T7132] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 243.826363][ T25] audit: type=1326 audit(1723564942.726:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.0.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fe2f8f359f9 code=0x7ffc0000 [ 244.082449][ T7102] F2FS-fs (loop1): invalid crc value [ 244.294413][ T25] audit: type=1326 audit(1723564942.726:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.0.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f8f359f9 code=0x7ffc0000 [ 244.316581][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.401416][ T6039] usb 1-1: Using ep0 maxpacket: 8 [ 244.450912][ T25] audit: type=1326 audit(1723564942.726:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.0.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f8f359f9 code=0x7ffc0000 [ 244.552573][ T6666] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 244.561807][ T7102] F2FS-fs (loop1): Found nat_bits in checkpoint [ 245.195059][ T6666] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 245.337547][ T7102] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 245.371207][ T6039] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 245.400398][ T6039] usb 1-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 245.426851][ T6039] usb 1-1: Product: syz [ 245.438174][ T6039] usb 1-1: Manufacturer: syz [ 245.459968][ T6039] r8152-cfgselector 1-1: config 0 descriptor?? [ 245.491093][ T6039] r8152-cfgselector 1-1: can't set config #0, error -71 [ 245.547780][ T6039] r8152-cfgselector 1-1: Unknown version 0x0000 [ 245.581610][ T6039] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 245.647324][ T7150] loop2: detected capacity change from 0 to 2048 [ 245.692247][ T7148] loop0: detected capacity change from 0 to 4096 [ 245.848971][ T7148] ntfs: volume version 3.1. [ 245.872978][ T7138] loop3: detected capacity change from 0 to 32768 [ 245.888717][ T7151] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.159688][ T7138] XFS (loop3): Mounting V5 Filesystem [ 246.488401][ T7167] loop2: detected capacity change from 0 to 2048 [ 246.623287][ T7167] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.035681][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'. [ 247.096468][ T7138] XFS (loop3): Ending clean mount [ 247.148223][ T7170] netlink: 60 bytes leftover after parsing attributes in process `syz.0.928'. [ 248.108755][ T7186] loop0: detected capacity change from 0 to 128 [ 248.115763][ T5993] XFS (loop3): Unmounting Filesystem [ 248.265595][ T7186] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 248.293804][ T7186] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038 (0x7fffffff) [ 248.446476][ T7195] trusted_key: encrypted_key: insufficient parameters specified [ 249.910327][ T6400] Bluetooth: hci3: command 0x0409 tx timeout [ 251.238126][ T7168] chnl_net:caif_netlink_parms(): no params data found [ 251.602051][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.609117][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.671835][ T7168] device bridge_slave_0 entered promiscuous mode [ 251.729041][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.741031][ T6039] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 251.746415][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.765373][ T7168] device bridge_slave_1 entered promiscuous mode [ 252.049760][ T7225] loop2: detected capacity change from 0 to 128 [ 252.056308][ T6039] usb 1-1: Using ep0 maxpacket: 32 [ 252.075560][ T1966] Bluetooth: hci3: command 0x041b tx timeout [ 252.085769][ T7168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.100516][ T7168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.112325][ T7225] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 252.320948][ T7227] loop1: detected capacity change from 0 to 2048 [ 252.376498][ T7225] FAT-fs (loop2): bogus number of FAT sectors [ 252.475991][ T7227] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.711903][ T7225] FAT-fs (loop2): Can't find a valid FAT filesystem [ 252.907204][ T6039] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 252.917150][ T6039] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.003283][ T6039] usb 1-1: config 0 descriptor?? [ 253.043223][ T6039] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 253.067729][ T7220] loop3: detected capacity change from 0 to 32768 [ 253.104647][ T7168] team0: Port device team_slave_0 added [ 253.218603][ T7168] team0: Port device team_slave_1 added [ 253.294126][ T25] kauditd_printk_skb: 46 callbacks suppressed [ 253.294141][ T25] audit: type=1326 audit(1723564952.906:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.2.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc37cd59f9 code=0x7fc00000 [ 253.334631][ T7220] XFS (loop3): Mounting V5 Filesystem [ 254.033883][ T6039] gspca_vc032x: reg_w err -110 [ 254.038690][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.054900][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.060215][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.101964][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.111037][ T1966] Bluetooth: hci3: command 0x040f tx timeout [ 254.161947][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.175061][ T7220] XFS (loop3): Ending clean mount [ 254.195128][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.200440][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.241557][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.252353][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.257678][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.263982][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.269273][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.275995][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.281967][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.288465][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.294321][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.299709][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.302666][ T25] audit: type=1800 audit(1723564953.916:286): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.938" name="bus" dev="loop3" ino=4427 res=0 errno=0 [ 254.305867][ T6039] gspca_vc032x: I2c Bus Busy Wait 00 [ 254.340271][ T6039] gspca_vc032x: Unknown sensor... [ 254.348047][ T6039] vc032x: probe of 1-1:0.0 failed with error -22 [ 254.384214][ T6039] usb 1-1: USB disconnect, device number 7 [ 254.401508][ T1966] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 254.428014][ T5993] XFS (loop3): Unmounting Filesystem [ 254.444858][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.508153][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.551814][ T7244] loop1: detected capacity change from 0 to 32768 [ 254.558625][ T7168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.607238][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.616175][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.659792][ T7168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.668602][ T7244] XFS (loop1): Mounting V5 Filesystem [ 254.741470][ T7168] device hsr_slave_0 entered promiscuous mode [ 254.750406][ T7168] device hsr_slave_1 entered promiscuous mode [ 254.789132][ T7168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.797823][ T7168] Cannot create hsr debugfs directory [ 254.863087][ T1966] usb 3-1: config 0 has no interfaces? [ 254.869722][ T1966] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 254.889581][ T1966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.914493][ T7244] XFS (loop1): Ending clean mount [ 254.929146][ T1966] usb 3-1: config 0 descriptor?? [ 254.943678][ T1147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.053971][ T1147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.140635][ T1147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.174794][ T7271] loop3: detected capacity change from 0 to 1024 [ 255.182675][ T6439] XFS (loop1): Unmounting Filesystem [ 255.269190][ T7271] EXT4-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 255.275360][ T1147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.531486][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.537822][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.233101][ T6400] Bluetooth: hci3: command 0x0419 tx timeout [ 256.722194][ T7287] loop3: detected capacity change from 0 to 2048 [ 256.921075][ T7287] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.227990][ T6614] usb 3-1: USB disconnect, device number 12 [ 257.347519][ T7294] loop0: detected capacity change from 0 to 128 [ 257.532992][ T7294] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.579882][ T7294] FAT-fs (loop0): bogus number of FAT sectors [ 257.588317][ T7294] FAT-fs (loop0): Can't find a valid FAT filesystem [ 257.930924][ T6614] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 258.065522][ T25] audit: type=1326 audit(1723564957.676:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f8f359f9 code=0x7fc00000 [ 258.180952][ T6614] usb 3-1: Using ep0 maxpacket: 16 [ 258.239593][ T7168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.317378][ T7316] loop1: detected capacity change from 0 to 2048 [ 258.360981][ T6614] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 258.380093][ T6614] usb 3-1: config 253 has 1 interface, different from the descriptor's value: 4 [ 258.414884][ T7168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.430580][ T7168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 258.477651][ T7327] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.524226][ T7316] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 258.570913][ T6614] usb 3-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 258.580621][ T7168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.600920][ T6614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.608973][ T6614] usb 3-1: Product: syz [ 258.626687][ T6614] usb 3-1: Manufacturer: syz [ 258.631474][ T6614] usb 3-1: SerialNumber: syz [ 258.645750][ T7316] Remounting filesystem read-only [ 258.664641][ T7316] NILFS (loop1): error -5 truncating bmap (ino=16) [ 258.703094][ T6614] r8712u: register rtl8712_netdev_ops to netdev_ops [ 258.709758][ T6614] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 258.759315][ T6439] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 258.788718][ T6439] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 258.816307][ T6439] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.855482][ T6439] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.896503][ T6439] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 258.899752][ T7168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.924716][ T6439] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 258.951025][ T6614] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 258.957648][ T6614] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 258.979242][ T7168] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.990011][ T6614] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 259.008203][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.038960][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.055956][ T6614] usb 3-1: USB disconnect, device number 13 [ 259.086261][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.107883][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.264027][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.271184][ T6397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.279655][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.288673][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.297443][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.304566][ T6397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.869003][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.881691][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.905271][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.291125][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.304594][ T7365] loop2: detected capacity change from 0 to 4096 [ 260.328941][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.368888][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.388007][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.415587][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.441673][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.466113][ T7365] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 260.478158][ T7168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.528069][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.536824][ T7351] loop0: detected capacity change from 0 to 32768 [ 260.543788][ T7365] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 260.588955][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.613854][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.645677][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.650559][ T7365] ntfs: (device loop2): ntfs_read_locked_inode(): Found compressed data but compression is disabled due to cluster size (65536) > 4kiB. [ 260.747214][ T7351] XFS (loop0): Mounting V5 Filesystem [ 260.801070][ T7365] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x3 as bad. Run chkdsk. [ 260.891627][ T7365] ntfs: (device loop2): load_system_files(): Failed to load $Volume. [ 260.902115][ T7351] XFS (loop0): Ending clean mount [ 260.924218][ T7365] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 261.009431][ T7387] loop3: detected capacity change from 0 to 2048 [ 261.026941][ T4724] XFS (loop0): Unmounting Filesystem [ 261.041450][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.049472][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.078860][ T7387] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.143434][ T7168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.217198][ T7370] loop1: detected capacity change from 0 to 40427 [ 261.383830][ T7392] loop2: detected capacity change from 0 to 764 [ 261.390137][ T7370] F2FS-fs (loop1): invalid crc value [ 261.412143][ T1147] device hsr_slave_0 left promiscuous mode [ 261.427549][ T1147] device hsr_slave_1 left promiscuous mode [ 261.455034][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.463859][ T7370] F2FS-fs (loop1): Found nat_bits in checkpoint [ 261.464015][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.479429][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.492851][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.511619][ T1147] device bridge_slave_1 left promiscuous mode [ 261.518373][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.592116][ T1147] device bridge_slave_0 left promiscuous mode [ 261.598447][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.632551][ T7370] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 261.642928][ T1147] device veth1_macvtap left promiscuous mode [ 261.648961][ T1147] device veth0_macvtap left promiscuous mode [ 261.655856][ T1147] device veth1_vlan left promiscuous mode [ 261.668904][ T7370] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 261.694576][ T1147] device veth0_vlan left promiscuous mode [ 261.721614][ T7395] attempt to access beyond end of device [ 261.721614][ T7395] loop1: rw=2049, want=45104, limit=40427 [ 261.832222][ T7406] loop0: detected capacity change from 0 to 512 [ 261.889251][ T7406] EXT4-fs (loop0): quotafile must be on filesystem root [ 262.200445][ T7399] loop3: detected capacity change from 0 to 32768 [ 262.208192][ T7410] loop0: detected capacity change from 0 to 512 [ 262.286741][ T7399] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.977 (7399) [ 262.306618][ T7410] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 262.315432][ T7410] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 262.346094][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 262.374691][ T7399] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 262.393847][ T7410] EXT4-fs error (device loop0): __ext4_iget:4861: inode #11: block 1: comm syz.0.979: invalid block [ 262.406468][ T7399] BTRFS info (device loop3): setting nodatacow, compression disabled [ 262.406604][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 262.428458][ T7399] BTRFS info (device loop3): enabling auto defrag [ 262.435643][ T7399] BTRFS info (device loop3): max_inline at 0 [ 262.442068][ T7399] BTRFS info (device loop3): using free space tree [ 262.448799][ T7399] BTRFS info (device loop3): has skinny extents [ 262.455923][ T7410] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.979: couldn't read orphan inode 11 (err -117) [ 262.468346][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.477562][ T7410] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,commit=0x0000000000000005,mblk_io_submit,stripe=0x0000000000000004,auto_da_alloc=0x0000000000000008,dioread_nolock,lazytime,quota,,errors=continue. Quota mode: writeback. [ 262.558703][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.661202][ T6400] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 263.940862][ T6400] usb 2-1: Using ep0 maxpacket: 16 [ 264.020705][ T1147] bond0 (unregistering): Released all slaves [ 264.082361][ T6400] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.092828][ T6400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.104702][ T6400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 264.117086][ T6400] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 264.127151][ T6400] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.231096][ T6400] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 264.241216][ T6400] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 264.249210][ T6400] usb 2-1: Manufacturer: syz [ 264.269754][ T6400] usb 2-1: config 0 descriptor?? [ 264.479777][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.553839][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.560022][ T7448] loop2: detected capacity change from 0 to 1024 [ 264.578061][ T7168] device veth0_vlan entered promiscuous mode [ 264.612695][ T7448] EXT4-fs (loop2): Ignoring removed orlov option [ 264.639172][ T7448] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 264.640216][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.670800][ T7448] EXT4-fs (loop2): Unrecognized mount option "fscontext=root" or missing value [ 264.672961][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.717809][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.743536][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.769813][ T7168] device veth1_vlan entered promiscuous mode [ 264.814996][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.830947][ T6400] rc_core: IR keymap rc-hauppauge not found [ 264.837733][ T6400] Registered IR keymap rc-empty [ 264.849984][ T6400] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.901078][ T6400] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.992185][ T7457] loop3: detected capacity change from 0 to 32768 [ 264.999602][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.012479][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.021100][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.038387][ T7168] device veth0_macvtap entered promiscuous mode [ 265.078258][ T6400] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 265.082692][ T7168] device veth1_macvtap entered promiscuous mode [ 265.120034][ T6400] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 265.123372][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.149257][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.170160][ T7457] XFS (loop3): Mounting V5 Filesystem [ 265.185699][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.186003][ T6400] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.199571][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.214285][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.225157][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.253572][ T6400] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.263301][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.278080][ T7457] XFS (loop3): Ending clean mount [ 265.286607][ T7457] XFS (loop3): Quotacheck needed: Please wait. [ 265.297655][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.301242][ T6400] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.308018][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.327097][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.337066][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.348323][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.361034][ T6400] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.364191][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.401026][ T6400] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.408615][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.423564][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.435025][ T6400] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.463445][ T7457] XFS (loop3): Quotacheck: Done. [ 265.471253][ T6400] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.477093][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.487534][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.503992][ T6400] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.566563][ T6400] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.608962][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.620049][ T6400] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.647184][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.674572][ T6400] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 265.675568][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.709006][ T6400] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 265.833382][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.844250][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.859747][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.876804][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.887461][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.900842][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.009336][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.031840][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.052966][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.095896][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.129083][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.141132][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.153825][ T7168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.214823][ T7168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.317226][ T7168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.326868][ T7168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.357834][ T3669] usb 2-1: USB disconnect, device number 14 [ 266.429552][ T7480] input: syz0 as /devices/virtual/input/input19 [ 266.714379][ T5993] XFS (loop3): Unmounting Filesystem [ 266.737930][ T7487] sctp: [Deprecated]: syz.0.996 (pid 7487) Use of int in maxseg socket option. [ 266.737930][ T7487] Use struct sctp_assoc_value instead [ 266.752388][ T5054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.800626][ T5054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.876189][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.935044][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.946073][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.960300][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 267.624754][ T7487] loop0: detected capacity change from 0 to 4096 [ 267.861001][ T3619] Bluetooth: hci2: command 0x0406 tx timeout [ 267.899869][ T7487] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 267.913678][ T7485] loop1: detected capacity change from 0 to 32768 [ 268.490509][ T7485] XFS (loop1): Mounting V5 Filesystem [ 268.733573][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.998'. [ 268.756850][ T7508] nbd: couldn't find device at index -1 [ 268.811232][ T7485] XFS (loop1): Ending clean mount [ 268.818215][ T7485] XFS (loop1): Quotacheck needed: Please wait. [ 268.930152][ T7485] XFS (loop1): Quotacheck: Done. [ 269.189280][ T7519] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 269.244208][ T6439] XFS (loop1): Unmounting Filesystem [ 269.490911][ T6044] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 269.750952][ T6044] usb 4-1: Using ep0 maxpacket: 32 [ 269.763389][ T7526] Attempt to restore checkpoint with obsolete wellknown handles [ 269.871426][ T6044] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 269.910914][ T6044] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 269.960942][ T6044] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 269.990501][ T6044] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.028243][ T6044] usb 4-1: config 0 descriptor?? [ 270.084855][ T7522] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 270.837828][ T6044] hub 4-1:0.0: USB hub found [ 270.947016][ T6044] hub 4-1:0.0: 2 ports detected [ 271.039691][ T7524] loop2: detected capacity change from 0 to 40427 [ 271.145241][ T7524] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 271.175620][ T7524] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 271.246796][ T7524] F2FS-fs (loop2): invalid crc value [ 271.343237][ T7524] F2FS-fs (loop2): Found nat_bits in checkpoint [ 271.524136][ T7524] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 271.540909][ T7524] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 271.605688][ T25] audit: type=1804 audit(1723564971.216:288): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1004" name="/newroot/105/file0/file1" dev="loop2" ino=10 res=1 errno=0 [ 271.655388][ T7551] attempt to access beyond end of device [ 271.655388][ T7551] loop2: rw=2049, want=45104, limit=40427 [ 272.598653][ T7547] loop0: detected capacity change from 0 to 32768 [ 272.875570][ T7547] XFS (loop0): Mounting V5 Filesystem [ 272.955584][ T7582] loop1: detected capacity change from 0 to 2048 [ 273.028515][ T7582] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.067867][ T7590] loop2: detected capacity change from 0 to 64 [ 273.074990][ T7547] XFS (loop0): Ending clean mount [ 273.158354][ T7547] XFS (loop0): Quotacheck needed: Please wait. [ 273.414920][ T6045] usb 4-1: USB disconnect, device number 9 [ 273.418665][ T7547] XFS (loop0): Quotacheck: Done. [ 273.513759][ T7594] loop1: detected capacity change from 0 to 2048 [ 273.574521][ T4724] XFS (loop0): Unmounting Filesystem [ 273.789165][ T7594] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.901791][ T3669] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 274.121686][ T7605] binder: 7604:7605 ioctl c0306201 0 returned -14 [ 274.180915][ T3669] usb 3-1: Using ep0 maxpacket: 32 [ 274.228713][ T7599] loop4: detected capacity change from 0 to 32768 [ 274.245319][ T7612] x_tables: unsorted entry at hook 2 [ 274.271803][ T7599] XFS: noikeep mount option is deprecated. [ 274.376513][ T7599] XFS (loop4): Mounting V5 Filesystem [ 274.472084][ T3669] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 274.482810][ T7627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1034'. [ 274.485791][ T7599] XFS (loop4): Ending clean mount [ 274.505608][ T3669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.571059][ T3669] usb 3-1: Product: syz [ 274.575432][ T3669] usb 3-1: Manufacturer: syz [ 274.581008][ T3669] usb 3-1: SerialNumber: syz [ 274.603505][ T7599] XFS (loop4): Quotacheck needed: Please wait. [ 274.624500][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1034'. [ 274.634346][ T3669] usb 3-1: config 0 descriptor?? [ 274.693317][ T3669] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 274.818135][ T7633] loop3: detected capacity change from 0 to 512 [ 274.836688][ T7599] XFS (loop4): Quotacheck: Done. [ 274.898012][ T7633] EXT4-fs (loop3): Invalid want_extra_isize 5 [ 274.905024][ T3669] usb 3-1: USB disconnect, device number 14 [ 274.913488][ T7637] loop1: detected capacity change from 0 to 128 [ 274.966493][ T7168] XFS (loop4): Unmounting Filesystem [ 275.029808][ T7633] loop3: detected capacity change from 0 to 512 [ 275.041180][ T7639] loop0: detected capacity change from 0 to 1024 [ 275.055363][ T7637] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.092193][ T7633] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 275.099515][ T7633] EXT4-fs (loop3): Unrecognized mount option "appraise" or missing value [ 275.128453][ T7637] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff) [ 275.166681][ T7639] hfsplus: request for non-existent node 3 in B*Tree [ 275.197187][ T7639] hfsplus: request for non-existent node 3 in B*Tree [ 275.393412][ T7633] loop3: detected capacity change from 0 to 1764 [ 275.437674][ T7641] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 275.457268][ T7637] overlayfs: upper fs needs to support d_type. [ 276.569199][ T7655] loop0: detected capacity change from 0 to 2048 [ 276.693754][ T7654] syz.2.1042 (7654): drop_caches: 2 [ 276.807553][ T7665] loop1: detected capacity change from 0 to 128 [ 276.943211][ T7665] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 276.998041][ T7665] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038 (0x7fffffff) [ 277.013769][ T7673] loop4: detected capacity change from 0 to 1024 [ 277.183702][ T7673] hfsplus: bad catalog entry type [ 277.351145][ T7682] input: syz0 as /devices/virtual/input/input20 [ 277.374625][ T7680] loop2: detected capacity change from 0 to 4096 [ 277.433868][ T7685] loop4: detected capacity change from 0 to 8 [ 277.524886][ T7685] SQUASHFS error: Unable to read directory block [631:26] [ 277.596547][ T7680] ntfs: volume version 3.1. [ 277.619605][ T7680] ntfs: (device loop2): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 277.648454][ T7680] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 277.730058][ T7680] ntfs: (device loop2): load_system_files(): Failed to load root directory. [ 277.753505][ T7680] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 278.165882][ T7707] loop2: detected capacity change from 0 to 164 [ 278.237991][ T7678] loop0: detected capacity change from 0 to 40427 [ 278.268424][ T7678] F2FS-fs (loop0): Unrecognized mount option "fscontext=root" or missing value [ 278.320899][ T3618] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 278.581905][ T3618] usb 2-1: Using ep0 maxpacket: 32 [ 278.655234][ T7715] [ 278.657565][ T7715] ===================================================== [ 278.664572][ T7715] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 278.672091][ T7715] 5.15.164-syzkaller #0 Not tainted [ 278.677267][ T7715] ----------------------------------------------------- [ 278.684262][ T7715] syz.0.1069/7715 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 278.691872][ T7715] ffffffff8c60a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigio+0xd2/0x330 [ 278.700384][ T7715] [ 278.700384][ T7715] and this task is already holding: [ 278.700945][ T3618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 278.707730][ T7715] ffff888023914138 (&f->f_owner.lock){....}-{2:2}, at: send_sigio+0x2f/0x330 [ 278.707784][ T7715] which would create a new lock dependency: [ 278.707790][ T7715] (&f->f_owner.lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 278.707824][ T7715] [ 278.707824][ T7715] but this new dependency connects a HARDIRQ-irq-safe lock: [ 278.707831][ T7715] (&dev->event_lock#2){-...}-{2:2} [ 278.707849][ T7715] [ 278.707849][ T7715] ... which became HARDIRQ-irq-safe at: [ 278.707855][ T7715] lock_acquire+0x1db/0x4f0 [ 278.707869][ T7715] _raw_spin_lock_irqsave+0xd1/0x120 [ 278.707885][ T7715] input_event+0x8a/0xd0 [ 278.707897][ T7715] psmouse_report_standard_packet+0x50/0x200 [ 278.707911][ T7715] psmouse_process_byte+0x45b/0x640 [ 278.707931][ T7715] psmouse_handle_byte+0x46/0x4b0 [ 278.792922][ T7715] psmouse_interrupt+0x697/0x10a0 [ 278.798019][ T7715] serio_interrupt+0x88/0x130 [ 278.802777][ T7715] i8042_interrupt+0x355/0x750 [ 278.807604][ T7715] __handle_irq_event_percpu+0x292/0xa70 [ 278.813297][ T7715] handle_irq_event+0xff/0x2b0 [ 278.818123][ T7715] handle_edge_irq+0x245/0xbf0 [ 278.822951][ T7715] __common_interrupt+0xd7/0x1f0 [ 278.827950][ T7715] common_interrupt+0x9f/0xc0 [ 278.832687][ T7715] asm_common_interrupt+0x22/0x40 [ 278.837776][ T7715] preempt_count_add+0xb8/0x180 [ 278.842688][ T7715] unwind_next_frame+0xbb/0x1fa0 [ 278.847690][ T7715] arch_stack_walk+0x10d/0x140 [ 278.852522][ T7715] stack_trace_save+0x113/0x1c0 [ 278.857441][ T7715] __kasan_slab_alloc+0x8e/0xc0 [ 278.862374][ T7715] slab_post_alloc_hook+0x53/0x380 [ 278.867553][ T7715] kmem_cache_alloc+0xf3/0x280 [ 278.872384][ T7715] __kernfs_new_node+0xdb/0x750 [ 278.877305][ T7715] kernfs_new_node+0x136/0x230 [ 278.882218][ T7715] __kernfs_create_file+0x45/0x2e0 [ 278.887389][ T7715] sysfs_add_file_mode_ns+0x308/0x3e0 [ 278.892826][ T7715] sysfs_merge_group+0x1fe/0x450 [ 278.897846][ T7715] dpm_sysfs_add+0xcf/0x270 [ 278.902416][ T7715] device_add+0x702/0xfd0 [ 278.906834][ T7715] platform_device_add+0x46e/0x7d0 [ 278.912019][ T7715] vimc_init+0x13/0xa0 [ 278.916154][ T7715] do_one_initcall+0x22b/0x7a0 [ 278.921068][ T7715] do_initcall_level+0x157/0x210 [ 278.926065][ T7715] do_initcalls+0x49/0x90 [ 278.930451][ T7715] kernel_init_freeable+0x425/0x5c0 [ 278.935706][ T7715] kernel_init+0x19/0x290 [ 278.940103][ T7715] ret_from_fork+0x1f/0x30 [ 278.944598][ T7715] [ 278.944598][ T7715] to a HARDIRQ-irq-unsafe lock: [ 278.951586][ T7715] (tasklist_lock){.+.+}-{2:2} [ 278.951603][ T7715] [ 278.951603][ T7715] ... which became HARDIRQ-irq-unsafe at: [ 278.964180][ T7715] ... [ 278.964186][ T7715] lock_acquire+0x1db/0x4f0 [ 278.971298][ T7715] _raw_read_lock+0x32/0x40 [ 278.975984][ T7715] do_wait+0x2a7/0xaf0 [ 278.980284][ T7715] kernel_wait+0xe5/0x230 [ 278.984756][ T7715] call_usermodehelper_exec_work+0xb5/0x220 [ 278.990705][ T7715] process_one_work+0x8a1/0x10c0 [ 278.995705][ T7715] worker_thread+0xaca/0x1280 [ 279.000443][ T7715] kthread+0x3f6/0x4f0 [ 279.004574][ T7715] ret_from_fork+0x1f/0x30 [ 279.009051][ T7715] [ 279.009051][ T7715] other info that might help us debug this: [ 279.009051][ T7715] [ 279.019250][ T7715] Chain exists of: [ 279.019250][ T7715] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock [ 279.019250][ T7715] [ 279.032424][ T7715] Possible interrupt unsafe locking scenario: [ 279.032424][ T7715] [ 279.040715][ T7715] CPU0 CPU1 [ 279.046054][ T7715] ---- ---- [ 279.051387][ T7715] lock(tasklist_lock); [ 279.055597][ T7715] local_irq_disable(); [ 279.062317][ T7715] lock(&dev->event_lock#2); [ 279.069491][ T7715] lock(&f->f_owner.lock); [ 279.076571][ T7715] [ 279.079999][ T7715] lock(&dev->event_lock#2); [ 279.084824][ T7715] [ 279.084824][ T7715] *** DEADLOCK *** [ 279.084824][ T7715] [ 279.092944][ T7715] 5 locks held by syz.0.1069/7715: [ 279.098024][ T7715] #0: ffffffff8ca3a390 (file_rwsem){.+.+}-{0:0}, at: __break_lease+0x186/0x13b0 [ 279.107125][ T7715] #1: ffff888019c44648 (&ctx->flc_lock){+.+.}-{2:2}, at: __break_lease+0x193/0x13b0 [ 279.116566][ T7715] #2: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 279.125838][ T7715] #3: ffff888063d362b8 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x16a/0x490 [ 279.134948][ T7715] #4: ffff888023914138 (&f->f_owner.lock){....}-{2:2}, at: send_sigio+0x2f/0x330 [ 279.144134][ T7715] [ 279.144134][ T7715] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 279.154515][ T7715] -> (&dev->event_lock#2){-...}-{2:2} { [ 279.160309][ T7715] IN-HARDIRQ-W at: [ 279.164521][ T7715] lock_acquire+0x1db/0x4f0 [ 279.171259][ T7715] _raw_spin_lock_irqsave+0xd1/0x120 [ 279.178692][ T7715] input_event+0x8a/0xd0 [ 279.185078][ T7715] psmouse_report_standard_packet+0x50/0x200 [ 279.193202][ T7715] psmouse_process_byte+0x45b/0x640 [ 279.200558][ T7715] psmouse_handle_byte+0x46/0x4b0 [ 279.207809][ T7715] psmouse_interrupt+0x697/0x10a0 [ 279.214974][ T7715] serio_interrupt+0x88/0x130 [ 279.221797][ T7715] i8042_interrupt+0x355/0x750 [ 279.228704][ T7715] __handle_irq_event_percpu+0x292/0xa70 [ 279.236495][ T7715] handle_irq_event+0xff/0x2b0 [ 279.243489][ T7715] handle_edge_irq+0x245/0xbf0 [ 279.250406][ T7715] __common_interrupt+0xd7/0x1f0 [ 279.257673][ T7715] common_interrupt+0x9f/0xc0 [ 279.264502][ T7715] asm_common_interrupt+0x22/0x40 [ 279.271848][ T7715] preempt_count_add+0xb8/0x180 [ 279.278856][ T7715] unwind_next_frame+0xbb/0x1fa0 [ 279.285949][ T7715] arch_stack_walk+0x10d/0x140 [ 279.292857][ T7715] stack_trace_save+0x113/0x1c0 [ 279.299863][ T7715] __kasan_slab_alloc+0x8e/0xc0 [ 279.306859][ T7715] slab_post_alloc_hook+0x53/0x380 [ 279.314123][ T7715] kmem_cache_alloc+0xf3/0x280 [ 279.321164][ T7715] __kernfs_new_node+0xdb/0x750 [ 279.328179][ T7715] kernfs_new_node+0x136/0x230 [ 279.335109][ T7715] __kernfs_create_file+0x45/0x2e0 [ 279.342458][ T7715] sysfs_add_file_mode_ns+0x308/0x3e0 [ 279.349976][ T7715] sysfs_merge_group+0x1fe/0x450 [ 279.357167][ T7715] dpm_sysfs_add+0xcf/0x270 [ 279.363820][ T7715] device_add+0x702/0xfd0 [ 279.370295][ T7715] platform_device_add+0x46e/0x7d0 [ 279.377554][ T7715] vimc_init+0x13/0xa0 [ 279.383794][ T7715] do_one_initcall+0x22b/0x7a0 [ 279.390704][ T7715] do_initcall_level+0x157/0x210 [ 279.397790][ T7715] do_initcalls+0x49/0x90 [ 279.404266][ T7715] kernel_init_freeable+0x425/0x5c0 [ 279.411608][ T7715] kernel_init+0x19/0x290 [ 279.418085][ T7715] ret_from_fork+0x1f/0x30 [ 279.424644][ T7715] INITIAL USE at: [ 279.428775][ T7715] lock_acquire+0x1db/0x4f0 [ 279.435332][ T7715] _raw_spin_lock_irqsave+0xd1/0x120 [ 279.442680][ T7715] input_inject_event+0xc0/0x300 [ 279.449690][ T7715] led_trigger_event+0x64/0xc0 [ 279.456620][ T7715] kbd_led_trigger_activate+0xb9/0x100 [ 279.464143][ T7715] led_trigger_set+0x513/0x930 [ 279.470964][ T7715] led_trigger_set_default+0x1c2/0x200 [ 279.478483][ T7715] led_classdev_register_ext+0x6cf/0x8d0 [ 279.486174][ T7715] input_leds_connect+0x503/0x740 [ 279.493259][ T7715] input_register_device+0xdae/0x1150 [ 279.500699][ T7715] atkbd_connect+0x7a7/0xa70 [ 279.507351][ T7715] serio_driver_probe+0x74/0x90 [ 279.514922][ T7715] really_probe+0x24e/0xb60 [ 279.521507][ T7715] __driver_probe_device+0x1a2/0x3d0 [ 279.528862][ T7715] driver_probe_device+0x50/0x420 [ 279.535951][ T7715] __driver_attach+0x479/0x690 [ 279.542897][ T7715] bus_for_each_dev+0x17c/0x1f0 [ 279.550071][ T7715] serio_handle_event+0x56a/0x8f0 [ 279.557203][ T7715] process_one_work+0x8a1/0x10c0 [ 279.564730][ T7715] worker_thread+0xaca/0x1280 [ 279.571464][ T7715] kthread+0x3f6/0x4f0 [ 279.577589][ T7715] ret_from_fork+0x1f/0x30 [ 279.584064][ T7715] } [ 279.586804][ T7715] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 279.596152][ T7715] -> (&client->buffer_lock){....}-{2:2} { [ 279.602208][ T7715] INITIAL USE at: [ 279.606244][ T7715] lock_acquire+0x1db/0x4f0 [ 279.612627][ T7715] _raw_spin_lock+0x2a/0x40 [ 279.619013][ T7715] evdev_pass_values+0xe7/0xb60 [ 279.625747][ T7715] evdev_events+0x198/0x2c0 [ 279.632132][ T7715] input_pass_values+0x873/0x1200 [ 279.639037][ T7715] input_handle_event+0xc9b/0x1600 [ 279.646027][ T7715] input_inject_event+0x1fc/0x300 [ 279.652935][ T7715] evdev_write+0x668/0x7c0 [ 279.659238][ T7715] vfs_write+0x30c/0xe50 [ 279.665364][ T7715] ksys_write+0x1a2/0x2c0 [ 279.671583][ T7715] do_syscall_64+0x3b/0xb0 [ 279.677899][ T7715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.685691][ T7715] } [ 279.688427][ T7715] ... key at: [] evdev_open.__key.23+0x0/0x20 [ 279.696895][ T7715] ... acquired at: [ 279.700861][ T7715] lock_acquire+0x1db/0x4f0 [ 279.705512][ T7715] _raw_spin_lock+0x2a/0x40 [ 279.710161][ T7715] evdev_pass_values+0xe7/0xb60 [ 279.715166][ T7715] evdev_events+0x198/0x2c0 [ 279.719818][ T7715] input_pass_values+0x873/0x1200 [ 279.724986][ T7715] input_handle_event+0xc9b/0x1600 [ 279.730240][ T7715] input_inject_event+0x1fc/0x300 [ 279.735407][ T7715] evdev_write+0x668/0x7c0 [ 279.739973][ T7715] vfs_write+0x30c/0xe50 [ 279.744705][ T7715] ksys_write+0x1a2/0x2c0 [ 279.749181][ T7715] do_syscall_64+0x3b/0xb0 [ 279.753763][ T7715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.759829][ T7715] [ 279.762134][ T7715] -> (&new->fa_lock){....}-{2:2} { [ 279.767398][ T7715] INITIAL USE at: [ 279.771349][ T7715] lock_acquire+0x1db/0x4f0 [ 279.777565][ T7715] _raw_write_lock_irq+0xcf/0x110 [ 279.784316][ T7715] fasync_remove_entry+0xfb/0x1d0 [ 279.791060][ T7715] lease_modify+0x19c/0x380 [ 279.797288][ T7715] locks_remove_file+0x5d3/0x1040 [ 279.804030][ T7715] __fput+0x368/0x8e0 [ 279.809727][ T7715] task_work_run+0x129/0x1a0 [ 279.816026][ T7715] exit_to_user_mode_loop+0x106/0x130 [ 279.823117][ T7715] exit_to_user_mode_prepare+0xb1/0x140 [ 279.830374][ T7715] syscall_exit_to_user_mode+0x5d/0x240 [ 279.837633][ T7715] do_syscall_64+0x47/0xb0 [ 279.843766][ T7715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.851378][ T7715] INITIAL READ USE at: [ 279.855766][ T7715] lock_acquire+0x1db/0x4f0 [ 279.862419][ T7715] _raw_read_lock_irqsave+0xd9/0x120 [ 279.869848][ T7715] kill_fasync+0x16a/0x490 [ 279.876403][ T7715] evdev_pass_values+0x5ad/0xb60 [ 279.883495][ T7715] evdev_events+0x198/0x2c0 [ 279.890158][ T7715] input_pass_values+0x873/0x1200 [ 279.897331][ T7715] input_handle_event+0xc9b/0x1600 [ 279.904585][ T7715] input_inject_event+0x1fc/0x300 [ 279.911839][ T7715] evdev_write+0x668/0x7c0 [ 279.918399][ T7715] vfs_write+0x30c/0xe50 [ 279.924788][ T7715] ksys_write+0x1a2/0x2c0 [ 279.931259][ T7715] do_syscall_64+0x3b/0xb0 [ 279.937836][ T7715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.945874][ T7715] } [ 279.948431][ T7715] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 279.957285][ T7715] ... acquired at: [ 279.961148][ T7715] lock_acquire+0x1db/0x4f0 [ 279.965796][ T7715] _raw_read_lock_irqsave+0xd9/0x120 [ 279.971228][ T7715] kill_fasync+0x16a/0x490 [ 279.975794][ T7715] evdev_pass_values+0x5ad/0xb60 [ 279.980887][ T7715] evdev_events+0x198/0x2c0 [ 279.985538][ T7715] input_pass_values+0x873/0x1200 [ 279.990709][ T7715] input_handle_event+0xc9b/0x1600 [ 279.996000][ T7715] input_inject_event+0x1fc/0x300 [ 280.001202][ T7715] evdev_write+0x668/0x7c0 [ 280.005794][ T7715] vfs_write+0x30c/0xe50 [ 280.010179][ T7715] ksys_write+0x1a2/0x2c0 [ 280.014652][ T7715] do_syscall_64+0x3b/0xb0 [ 280.019215][ T7715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.025277][ T7715] [ 280.027574][ T7715] -> (&f->f_owner.lock){....}-{2:2} { [ 280.033013][ T7715] INITIAL USE at: [ 280.036876][ T7715] lock_acquire+0x1db/0x4f0 [ 280.042910][ T7715] _raw_write_lock_irq+0xcf/0x110 [ 280.049466][ T7715] f_modown+0x38/0x340 [ 280.055064][ T7715] fcntl_dirnotify+0x688/0x890 [ 280.061358][ T7715] do_fcntl+0x605/0x1600 [ 280.067131][ T7715] __se_sys_fcntl+0xd8/0x1b0 [ 280.073250][ T7715] do_syscall_64+0x3b/0xb0 [ 280.079201][ T7715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.086626][ T7715] INITIAL READ USE at: [ 280.090928][ T7715] lock_acquire+0x1db/0x4f0 [ 280.097404][ T7715] _raw_read_lock_irqsave+0xd9/0x120 [ 280.104678][ T7715] send_sigio+0x2f/0x330 [ 280.110895][ T7715] dnotify_handle_event+0x138/0x440 [ 280.118074][ T7715] fsnotify+0x1cee/0x2450 [ 280.124373][ T7715] fsnotify_link+0x1b6/0x220 [ 280.130938][ T7715] vfs_link+0x74d/0x810 [ 280.137064][ T7715] ovl_copy_up_flags+0x1cbb/0x2e00 [ 280.144145][ T7715] ovl_nlink_start+0x278/0x4c0 [ 280.150880][ T7715] ovl_do_remove+0x23f/0xa00 [ 280.157436][ T7715] vfs_unlink+0x359/0x5f0 [ 280.163730][ T7715] do_unlinkat+0x4a3/0x950 [ 280.170112][ T7715] __x64_sys_unlink+0x45/0x50 [ 280.176841][ T7715] do_syscall_64+0x3b/0xb0 [ 280.183228][ T7715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.191098][ T7715] } [ 280.193581][ T7715] ... key at: [] __alloc_file.__key+0x0/0x10 [ 280.201760][ T7715] ... acquired at: [ 280.205541][ T7715] lock_acquire+0x1db/0x4f0 [ 280.210196][ T7715] _raw_read_lock_irqsave+0xd9/0x120 [ 280.215635][ T7715] send_sigio+0x2f/0x330 [ 280.220033][ T7715] kill_fasync+0x20c/0x490 [ 280.224597][ T7715] evdev_pass_values+0x5ad/0xb60 [ 280.229684][ T7715] evdev_events+0x198/0x2c0 [ 280.234337][ T7715] input_pass_values+0x873/0x1200 [ 280.239507][ T7715] input_handle_event+0xc9b/0x1600 [ 280.244763][ T7715] input_inject_event+0x1fc/0x300 [ 280.249937][ T7715] evdev_write+0x668/0x7c0 [ 280.254497][ T7715] vfs_write+0x30c/0xe50 [ 280.258881][ T7715] ksys_write+0x1a2/0x2c0 [ 280.263349][ T7715] do_syscall_64+0x3b/0xb0 [ 280.267908][ T7715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.273945][ T7715] [ 280.276249][ T7715] [ 280.276249][ T7715] the dependencies between the lock to be acquired [ 280.276254][ T7715] and HARDIRQ-irq-unsafe lock: [ 280.289705][ T7715] -> (tasklist_lock){.+.+}-{2:2} { [ 280.294802][ T7715] HARDIRQ-ON-R at: [ 280.298767][ T7715] lock_acquire+0x1db/0x4f0 [ 280.304898][ T7715] _raw_read_lock+0x32/0x40 [ 280.311041][ T7715] do_wait+0x2a7/0xaf0 [ 280.316739][ T7715] kernel_wait+0xe5/0x230 [ 280.322696][ T7715] call_usermodehelper_exec_work+0xb5/0x220 [ 280.330221][ T7715] process_one_work+0x8a1/0x10c0 [ 280.336789][ T7715] worker_thread+0xaca/0x1280 [ 280.343106][ T7715] kthread+0x3f6/0x4f0 [ 280.348803][ T7715] ret_from_fork+0x1f/0x30 [ 280.354842][ T7715] SOFTIRQ-ON-R at: [ 280.358795][ T7715] lock_acquire+0x1db/0x4f0 [ 280.364919][ T7715] _raw_read_lock+0x32/0x40 [ 280.371045][ T7715] do_wait+0x2a7/0xaf0 [ 280.376823][ T7715] kernel_wait+0xe5/0x230 [ 280.382770][ T7715] call_usermodehelper_exec_work+0xb5/0x220 [ 280.390291][ T7715] process_one_work+0x8a1/0x10c0 [ 280.396862][ T7715] worker_thread+0xaca/0x1280 [ 280.403175][ T7715] kthread+0x3f6/0x4f0 [ 280.408870][ T7715] ret_from_fork+0x1f/0x30 [ 280.414906][ T7715] INITIAL USE at: [ 280.418768][ T7715] lock_acquire+0x1db/0x4f0 [ 280.424808][ T7715] _raw_write_lock_irq+0xcf/0x110 [ 280.431369][ T7715] copy_process+0x22be/0x3ef0 [ 280.437598][ T7715] kernel_clone+0x210/0x960 [ 280.443634][ T7715] kernel_thread+0x168/0x1e0 [ 280.449756][ T7715] rest_init+0x21/0x330 [ 280.455442][ T7715] start_kernel+0x48c/0x540 [ 280.461479][ T7715] secondary_startup_64_no_verify+0xb1/0xbb [ 280.468905][ T7715] INITIAL READ USE at: [ 280.473200][ T7715] lock_acquire+0x1db/0x4f0 [ 280.479667][ T7715] _raw_read_lock+0x32/0x40 [ 280.486137][ T7715] do_wait+0x2a7/0xaf0 [ 280.492179][ T7715] kernel_wait+0xe5/0x230 [ 280.498496][ T7715] call_usermodehelper_exec_work+0xb5/0x220 [ 280.506362][ T7715] process_one_work+0x8a1/0x10c0 [ 280.513276][ T7715] worker_thread+0xaca/0x1280 [ 280.519919][ T7715] kthread+0x3f6/0x4f0 [ 280.525966][ T7715] ret_from_fork+0x1f/0x30 [ 280.532459][ T7715] } [ 280.534940][ T7715] ... key at: [] tasklist_lock+0x18/0x40 [ 280.542641][ T7715] ... acquired at: [ 280.546418][ T7715] lock_acquire+0x1db/0x4f0 [ 280.551072][ T7715] _raw_read_lock+0x32/0x40 [ 280.555731][ T7715] send_sigio+0xd2/0x330 [ 280.560118][ T7715] kill_fasync+0x20c/0x490 [ 280.564676][ T7715] lease_break_callback+0x22/0x30 [ 280.569846][ T7715] __break_lease+0x4d1/0x13b0 [ 280.574671][ T7715] do_dentry_open+0x77a/0xfb0 [ 280.579495][ T7715] path_openat+0x2705/0x2f20 [ 280.584226][ T7715] do_filp_open+0x21c/0x460 [ 280.588875][ T7715] do_sys_openat2+0x13b/0x4f0 [ 280.593694][ T7715] __x64_sys_openat+0x243/0x290 [ 280.598755][ T7715] do_syscall_64+0x3b/0xb0 [ 280.603316][ T7715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.609358][ T7715] [ 280.611653][ T7715] [ 280.611653][ T7715] stack backtrace: [ 280.617517][ T7715] CPU: 1 PID: 7715 Comm: syz.0.1069 Not tainted 5.15.164-syzkaller #0 [ 280.625635][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 280.635660][ T7715] Call Trace: [ 280.638912][ T7715] [ 280.641820][ T7715] dump_stack_lvl+0x1e3/0x2d0 [ 280.646558][ T7715] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 280.652166][ T7715] ? panic+0x860/0x860 [ 280.656213][ T7715] ? print_shortest_lock_dependencies+0xee/0x150 [ 280.662511][ T7715] validate_chain+0x4d01/0x5930 [ 280.667354][ T7715] ? reacquire_held_locks+0x660/0x660 [ 280.672698][ T7715] ? look_up_lock_class+0x77/0x120 [ 280.677783][ T7715] ? stack_trace_save+0x113/0x1c0 [ 280.682781][ T7715] ? slab_free_freelist_hook+0xdd/0x160 [ 280.688300][ T7715] ? __lock_acquire+0x1295/0x1ff0 [ 280.693293][ T7715] ? mark_lock+0x98/0x340 [ 280.697593][ T7715] __lock_acquire+0x1295/0x1ff0 [ 280.702425][ T7715] lock_acquire+0x1db/0x4f0 [ 280.706899][ T7715] ? send_sigio+0xd2/0x330 [ 280.711294][ T7715] ? read_lock_is_recursive+0x10/0x10 [ 280.716638][ T7715] ? read_lock_is_recursive+0x10/0x10 [ 280.721991][ T7715] ? do_raw_read_lock+0x38/0x80 [ 280.726812][ T7715] ? _raw_read_lock_irqsave+0xe5/0x120 [ 280.732243][ T7715] ? _raw_read_lock+0x40/0x40 [ 280.736890][ T7715] ? _raw_read_lock_irqsave+0xe5/0x120 [ 280.742336][ T7715] ? _raw_read_lock+0x40/0x40 [ 280.746983][ T7715] _raw_read_lock+0x32/0x40 [ 280.751458][ T7715] ? send_sigio+0xd2/0x330 [ 280.755846][ T7715] send_sigio+0xd2/0x330 [ 280.760147][ T7715] kill_fasync+0x20c/0x490 [ 280.764532][ T7715] lease_break_callback+0x22/0x30 [ 280.769528][ T7715] __break_lease+0x4d1/0x13b0 [ 280.774177][ T7715] ? lease_modify+0x380/0x380 [ 280.778827][ T7715] ? apparmor_inode_getattr+0x20/0x20 [ 280.784170][ T7715] ? do_raw_spin_unlock+0x137/0x8b0 [ 280.789342][ T7715] ? fsnotify_perm+0x442/0x590 [ 280.794078][ T7715] do_dentry_open+0x77a/0xfb0 [ 280.798729][ T7715] path_openat+0x2705/0x2f20 [ 280.803298][ T7715] ? do_filp_open+0x460/0x460 [ 280.807952][ T7715] do_filp_open+0x21c/0x460 [ 280.812437][ T7715] ? vfs_tmpfile+0x2e0/0x2e0 [ 280.817001][ T7715] ? _raw_spin_unlock+0x24/0x40 [ 280.821825][ T7715] ? alloc_fd+0x598/0x630 [ 280.826129][ T7715] do_sys_openat2+0x13b/0x4f0 [ 280.830780][ T7715] ? do_sys_open+0x220/0x220 [ 280.835343][ T7715] __x64_sys_openat+0x243/0x290 [ 280.840164][ T7715] ? __ia32_sys_open+0x270/0x270 [ 280.845070][ T7715] ? syscall_enter_from_user_mode+0x2e/0x240 [ 280.851024][ T7715] ? lockdep_hardirqs_on+0x94/0x130 [ 280.856194][ T7715] ? syscall_enter_from_user_mode+0x2e/0x240 [ 280.862144][ T7715] do_syscall_64+0x3b/0xb0 [ 280.866533][ T7715] ? clear_bhb_loop+0x15/0x70 [ 280.871182][ T7715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.877052][ T7715] RIP: 0033:0x7fe2f8f359f9 [ 280.881440][ T7715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.901110][ T7715] RSP: 002b:00007fe2f73b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 280.909500][ T7715] RAX: ffffffffffffffda RBX: 00007fe2f90d1f80 RCX: 00007fe2f8f359f9 [ 280.917456][ T7715] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 280.925409][ T7715] RBP: 00007fe2f8fa38ee R08: 0000000000000000 R09: 0000000000000000 [ 280.933353][ T7715] R10: 00000000000000ec R11: 0000000000000246 R12: 0000000000000000 [ 280.941296][ T7715] R13: 0000000000000000 R14: 00007fe2f90d1f80 R15: 00007ffec4c55a18 [ 280.949244][ T7715] [ 280.954467][ T3618] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 281.015044][ T25] audit: type=1326 audit(1723564980.626:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.0.1069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2f8f359f9 code=0x0 [ 281.021578][ T3618] usb 2-1: string descriptor 0 read error: -71 [ 281.056159][ T3618] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 281.065661][ T3618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.079594][ T3618] usb 2-1: config 0 descriptor?? [ 281.101487][ T3618] usb 2-1: can't set config #0, error -71 [ 281.127191][ T3618] usb 2-1: USB disconnect, device number 15