last executing test programs: 20m9.820311801s ago: executing program 1 (id=5305): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) 20m9.629794831s ago: executing program 1 (id=5308): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)="bc", 0x1}], 0x2}, 0x0) 20m9.392067863s ago: executing program 1 (id=5310): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f28bdda0a9423debbb86f9dba4a2dba4dbe076c28282900c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) 20m9.031509342s ago: executing program 1 (id=5314): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000000)={[{@umask={'umask', 0x3d, 0xe}}, {@type={'type', 0x3d, "103683de"}}, {}, {}, {@nobarrier}, {@umask={'umask', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'maccenteuro'}}]}, 0x44, 0x708, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 20m8.625614723s ago: executing program 1 (id=5320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x64) 20m8.117830519s ago: executing program 1 (id=5325): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188004ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 20m7.692966911s ago: executing program 32 (id=5325): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188004ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 2.661746604s ago: executing program 3 (id=20331): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000040)={[{}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@codepage={'codepage', 0x3d, 'maciceland'}}, {}, {@uid}, {@file_umask={'file_umask', 0x3d, 0x2b4}}, {@creator={'creator', 0x3d, "8c10b081"}}, {@file_umask={'file_umask', 0x3d, 0x2}}]}, 0x2, 0x36d, &(0x7f0000000500)="$eJzs3c9LFUEAB/Dv7PudYpsaRresoJM87VBEUIS3/oEOIZmuIG4GalBSaB06RXQLgo7dOkf9C3WJ/oE6eZBOdREJN2Z29u2+dWbfD5+r4vcDPvftzu+Znd2x3lsQ0bF1a/Lnh8sb8keUABQAXAMcAFWgCOA0RqqPFlfmV3xvNiuhgoohfwTCmGJXmJlFzxRVxlMxNFe+K6I/uY/2RxAEwa+Wof7kUhY6OCI893dxgIo+O9Xxau4l68p6GwEq+RTlEEn0sNjClrnHiYjoONHXf0dfJfr1/bvjABf1ffhRuv5HkiuIpqvdFvD0ZP7l6blub2LU9f9x3JuBkO2jWkTE6z21hJNt6ESrRFNaKpVSamcQN3cZ4chq6gBhWFU2VUaVxanNzfve2LpK4AVuaIlgw+p1Nhy6EVtpy+GvUcPaNENW3bP1qTqUZB1KlvIPdZzjl028NWc39a3cukziq/gupoSLd5jFgN5ZDIRsHBXdBWp6d9Sm875Xt6eoTjJX1bLeVMv47Dulwp2NeuDzx7iWNVu7VlGQZTGRqYj00NclAN5YWkHtHmyeFHTvjNtrp2INGWNNNN5vG2MNp2PV5kq+Nzbz0A8HfbBmz7YXjPf34rW4I0bxG58w2eh/2dUFOdVbzsz0zC9UyLAV6o36mBRVSEs/NlGD7UFHZyZh+18Q0u/T87CZi1e4j6sYWH6yujDt+95SbhtyTjQeik6VnMtj2wgHoh6Oco/8nQiDqtyQzd2zTHeCIDAeKppbLNpw2sqiHBXVVuZw6Fx536iymmb1n1L2VkGsh22YOHTTHjieNlXdtQ4zVdHXGrHk1aKT6H/D3GW/G8OIuIRL5f0dkFFW075/ptFxBVTaOlNqXWR6+9nCtN/1jERHyPLLc3rOwcjdzesHXRzKn7zvEuH6L7FeqatZR764GauRoFXiiRTHLSugQfV6Il5tCP33+4w1V599BdcXbfjeRNaa6/wl4EJip8zNQZTj83SyLqKb9UP4r5IVU7Fq6R2riW0xiR+4l7j/JyIiIiIiIiIiIiIiIiIiIiIiIiKiIyH+T//uHj9OsKM/h2T+JEZs4xh+8QYRERERERERERERERERERERERERERER0d4knv8LFNQTY8o9f/5v9MXe7T7/t9DG839Fy0d8ElEL/wMAAP//Kg5jdA==") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 2.499003643s ago: executing program 2 (id=20334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) 2.412182627s ago: executing program 3 (id=20335): r0 = syz_mount_image$ntfs3(&(0x7f000001f6c0), &(0x7f0000000100)='./file0\x00', 0x8, &(0x7f0000001240)=ANY=[@ANYBLOB='sparse,prealloc,discard,iocharset=maciceland,fmask=00000000000000000001001,prealloc,fmask=00000000000000000000003,showmeta,nohidden,nohidden,discard,force,acl,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d69736f383835392d332c7379735f696d6d757461626c652c002ce79ef6ac91652cc4339610386d2e76a2e3ca7973830419cb04ab1256e16c03d35cfacd1ce3424cdeccc01880664c98ccdbbba21a9beb245a4a5e33f86ccf324edf45bc587b95b71629384e20eefa71a800f499a8f6b75142b90245d62b87ee0c752b3894c6ea1af44ef65cc89a245662e8ea0242d3e8acc8210fde6d3609e62c2b089533d7c14f92a71862f12ea25dce4290a3d26fcb1d47c0dd5a2dce43c3"], 0x0, 0x1f2a0, &(0x7f000001f700)="$eJzs3QmYTeUfB/D37Pu+jN1grCGkIsm+Zt9SyRayky1KhURK9pBsSbYkoRISIUqyLwlJkiSphCT+z9y5M2a5qqn+Fe/38zzmnHvuOe977vnOGfM723zTaEy9JtUbx8fHxxObIUnOkzQGkUHkcvQ9PjrtcnTIRP/1b7Wg3F7z446J08zcqx8cuDDvmj5as2XmSolssVt+c7rU0S3hlqzfXGrSsVPv+E6947v36BPfJr5tjx592rTt2j6+XafeXYrHN+javk3v9vGduvdu3yvN2x269ujZc0B8m+7tDLVnr/a9e8e36T4gvkv7AfF9esT36TUgvs0DbTp1jy9evHi8oRL4g5ou+LfXAAAAAAAAAAAAAAAAAAAA/h6XL6ec2gcAAAAAAAAAAAAAAAAAAIBrVPVadaqVIErKa4YwpCZhyDyGEGJfmS/5vn/uKu0kzto6MpYl8rVm8tiZLiW7XtjHXG0oxmosxgUJJQghHVPaZ0ntyBhDhMg04Xf7IYujjUaHyf3yXAKpS6qTJtHXg6LrzpCKaVbkjuiwYvKE01zMoVMhaUstTtNOxq1WMfWGI4TIJO3QYdjI8PLly5djbaK/x9XSBDogf7ohf7ohf7ohf7ohf7oh/2vN31tXclet/zumq/+5aDXMXmW9/on6v2dK+yxplNn6v2LaDZTcr5xS/9clnUgv0is6/WrHAbj027li7GEe/nKq7fxfdbU0gQ7In27In27In27In27In27In25shvqf/Y36n/2P1/9MdMGY/aVcwZA0TF3/1yE9yAOkOulEupL20elXq/8rRIcp9X+6dpOHeSpykYVQ/8N/F/KnG/KnG/KnG/KnG/KnG/KnW8b6n4vW/6fT1f9i9BgAf5WW7Gi9nFz/l/iT9X/a6/wZ0iCz5/nTSW5f4hJIM9KDdCV9STfSPtLuoJR+WNIupUd+UOLnSL4fwI+8Wzq6p/hkBuMSJqkXwY0uH5mWNIMQTwiJZ0maedK/R6LHSkqk9M8TN2ksZf3bkK6RoxHJ1yP0JIQUSplfIHrKlo7mFl1yUMr0LClXK2S56nGIq6UJdED+dEP+dEP+dEP+tEr6fRr5X//W/MZ7yJ9ufIb6n4/W/zO1jPf/8ylHjJpkaOnvrP//0nX+yX/9PzpMfZ6/EulD+pBepCppTzpEp6c9DsD94eMAI0jG4wCRaZk8DhCp11WS0mvieieOJZDGpAmpROqRqqSSREhV0orUIvVIdVKfNCJ1SSXShNQi9Um9zMSdwdWP/6WKPnKtQ4noeM3oMCGyBk1II1KLVCZNSRNSjbQidUityHr//8WnGh+UavxyVAKpTmqROpG1qkcqkbqk2j+wVleUSDVemSTmFx2PbvIEUp9UJrVJNVKFNIlkW/UfXb+k61fYVONRTPL6NY6sW9NIwk3I3aQVqUqqkcakSmRKA9Ik8p34/9Ig1XjsfJuR+qQOaRpJ9v+csZRxUutU4xVT70kp2y/t+v39++5v65lu/fToePIwIfHnCmFJpf/jOvyWQVeZfiXfWpGffdVIc9KKNCL1Sf1/5OdKsjGpxiv+7vpVInVIHVKfVPlHsk00M9V47P2jcmS/Tfxua3DVVv5/538W/+76NSLVSANSiTSK/KRpRRqQ+pFt+s+kvOYq65ccdgKpRir9C/ttsm3pVin9fZxJ6/dX/dn8Gf7w1d+LfE2I7A81SA1SLfK7S9PItquT8n9J48jvDtUiP7X/L1KdCRp0tTf+w/4P142uzDgJ53+vdzGvr06B/OmW8fy/EKn/OWKzGc//C5EKuUTMln6v/i94tkip1MPk6QXi05SakeWu3EfARKqiv3j+P9I+wxWPvG6Q5rr+K9//yQum/K4XLTCL2mmHDlslMkz8/bB54gifdNygTHSRxN8LbyIlIp+DiW6Y5EspCkX/pV7JLOme4jAzuo4MXzHlKG1qNVNv8BjD5P4dJqkWWpx83QCfdJ2BnGY9uZR1+W/fpwD/H3j+C92QP92QP92QP92QP92QP90yPv9PjJ7/bx3j/n/xX77/P/Xz/zN9X0D0s1RM+ZxJJC6BVCadSB/SjbQhPa9633+y9M9XTP/4P4epHhn+c/X01r+wLI7/0Q350w350w350w350w350w350y3j+X8pWv9vivH3/6Tfqf///vv/WVIns3V+8oXh0WFy+0Kkzu9BepA+kdf/hev+Yx1nuNp1COmHTrSdv3acAfs/3ZA/3ZA/3ZA/3ZA/3ZA/3ZA/3TLW/3K0/n8qRv0v/2ee/89l/rkA6aR+LkBl0oa0I1UizwbsTZLq6bTP0WNTxgaluT7/SrOXoqMp1+efzp12GJXcG3s5aYF/97p77P90Q/50Q/50Q/50Q/50Q/50Q/50y1j/K5H6XyE2l7b+FyLvJVbetWK29Bfq//j0bTG/e/3/3/J3ASL9SlwCaUzak/tJX9KLtE9X31/ZP5LPx1+5/z7p2Zk9mbTDxNaqksbEqVQj8noMISTyrJzocwLWpNx/nzhfUmsuSfucgMWpnp+UJXIFQuLnT3ryT8OEpZHtkzxMfrbNQEJILVIrw/wzDx6qzDJXhsmHLNpF5ucyzH/a5c4nzpM8JOnaT503G/18m8iV5wvMS/X5kue3032+ydF/JHJFRVL/hZKfRXqVvtPPd7VtkH6+q3329J+Dzucf4P6v60CMpxP+Ucifbsifbsifbsifbsifbhnv/1ej5//nxTj/r/5n7v/nMl3/MylrnjRMff9/U9KTVCFtSO9o/R/ruvzks/hXngXNxhzmiX8qMkxuhwhJ1w/ER5/Dl0Bqke6kA+kRXSr54IfeKXuXhx47sD/95/7/1qU4/kc35E835E835E835E835E835E+3jOf/tejz/8ewGZ//p/3GEaO/UP/b6dv6h87/R/pNrP+rkf6kD2lPupN2kfPZ/Znk89ksac78/nP9azJJ/xJlTfoEpHX0rwRpyV8zuX4FoocGRC6B1CdtSWdSK+UZBX9f+1yk/Yakb+S5CG0IIdmi7XeM/m23NO0n/7nQTKy/zCWQRqQ96UnakF6RIyxp0X3+/d+G4790Q/50Q/50Q/50Q/50Q/50y3j+X4/U7gwpEeP5//o/8Py/tM/lY//wc/lmMBmfyxeZ9mf+Hn9K/0zK2PVZn+L4H92QP92QP92QP92QP92QP92QP90ynv83fqP+N66f+j836n+C/Z96yJ9uyJ9uyJ9uyJ9uyJ9uyJ8qFZV0EzLW/+Zv1P/m9VP/4/x/BPb/68HgP70k8qcb8qcb8qcb8qcb8qcb8qdbxvrf+o3636Ku/icpY6j/4fpymUP+tEP+dEP+dEP+148/cy838qcb8qdbxvo/uY6fTNLW/0zKErH9XfW/TK7HOvu/Cvs/3ZD/NU/4Kwsjf7ohf7oh/+vQ9388VeRPN+RPt4z1v/Mv1//X53n2/yrs/9e5Lr/9NvKnG/KnG/KnG/KnG/KnG/KnW8b6381Q/8uR6aj/r0fY/+mG/CnE8CmjyJ9uyJ9uyJ8ONa8yHfnTDfnTLWP97+H8P0Ww/9MN+dMN+dMN+dMN+V/PKv7uHMifbsifbhnrfx/1P0Ww/9MN+dMN+dMN+dMN+dMN+dMN+dMtY/0f/Nn6P6UJ1P/XDuz/dEP+dEP+dEP+dEP+dEP+dEP+dMtY/4c4/08R7P/UkVK/QP50Q/50Q/50Q/50Q/50Q/50y1j/x6H+pwj2f7ohf7ohf7oh/+tH7j+xDPKnG/KnG/KnW8b6nyEMqUkMMohNW//z0Xqevcrf50+ctXVkLKn+r/kH6/8ChMSnb4thMrZfghDSMaV9htSLjDFEi0zTfref9O0l9ytyCaQh6Ut6kD6kDSFkDCGkf2TTJPbDkeYkacYEUj9lWSf6gZlUxz2Sn7AaT5Kerl0ouvGYpF1MSGwjnk06kBKfbrux0X5Pp/TLkm0p/TZMM2/qftdE/5HIcxtKRLc7H80xqd00Hzy6LS6nYDMcb/GjT41pHm0nsYHfbydJSn7pP3OMz4vjPP8F+PlPN+RPN+RPN+RPN+RPN+RPt6vX/x2ZtPU/RwjJ+jvn/6/V+r8+aUs6k1qkXbQOb0Cu1OElYtT/Hklbh8eTjB/CZpLr3IO/sf3/bdj/6Yb86Yb86Yb86Yb86Yb86Yb86Xb1+n9MjPo/W3QYyz9R//dMaZ8hjf6m+l/mEkgj0p70JG1IL9KbtI++Pya5v+hxgAYpxwEapbSR/jhAxVR/cyVHdBhP9MhQJ2RmzugWTr/d/r3z4VdLE+iA/K9vqf7Uf0zIn27In27In27In27Inz6pj/lwkfq/SLr6vyLhyOR01/8LpADpGqO1K3V/kuS6f3iPwqUS6+6rDePjU7ceXbPfPO+ftHZ1onW/EF2r3+snfXuJ/RaLLNmBdCJdSfvodfNjoufsCZ9U759OqfdrkZtIichcDElb7x+O/iMp9T5DWkfWkJDs0de/u37RrZAt+pt6Yp+x1i/nn20/PT51+wVIe1IyQ56J0W9LuaYh6T4IOTqWuOzt0c/dPOV9PjItS/TvRxKRJwl1mjetVTWpzVTTasSYVrd+VfJtpWj/uC/gn1Tg314B+Fchf7ohf7ohf7ohf7oh/+uc/NtvF7hK/c+QbUz6+j9/zBb+dP0fo63M1P9/d309KLruTOQMfsbrYiqm/sCp2kse5mGGRNb+n66bB0dX68/VzbEzheuYkvoF8qcb8qcb8r++/d71vcifbsifbsj/3/bv1ov5r1r/90x3/l8k+Umsi0n/bP0fq7H/S/2fHp++/k86/z0o5c6FLCn/b2aJPl9vW8rCHFkena4TMnMxIaQeaRb5mqgF6UO6kZ6kBelNBpCHSTHSiXQjbcgDpH3kX/fIlQRlSVlyMylFSpKy5FZSlrRIdSQi7XgFUoG0+JtbTfv9lv93vt+Ev/r9dvnFNN9v8N+Cn/90Q/50Q/50Q/60GhT5ivzphvzpdvX6X85w/f+fO/9f8GyRNMO/6/x/+uv/r9ZP8mdQoy0k9nv3Ver/zJz/T24veZiHeeI3z/8n9tknWl+PSXmfj0z7q8dzIvceaCLp27t9r+L92/Tp06skiQ5ivFeKRAeR/FGX0ww//+mG/OmG/OmG/K9zym+/jfzphvz/bf+98/9spP4vE+P8fyxXq//T1+Pph5mv/5POR6ev/3+vn+jl/aRQvqRhxuv/b0rXD4l5nOGv9xMpuK96nCF5rGLqD56qveRhHm7o33ifQVKm///7DOC/CT//6Yb86Yb86Yb86Yb86Yb8/23/vfo/6fz/vr94///fWf/3TLV2TTJbl0c/Q7toC8l1uZJSlxcn95MepGt0jsxeB5DcbvIwDzM8dX0uJs/+33wOAPZ/uiF/uiF/uiF/uiF/uiF/uiH/f9t/rf4n0Ro3sQZO+4R+Keb643zwtSx2pkAL5E835E835E835E835E835E83KRP1f+w/JYD6/1r2O38eAq5zyJ9uyJ9uyJ9uyJ9uyJ9uyJ9ucibq/9iPEvmN+p/721YT/k9+5/EwcJ1D/nRD/nRD/nRD/nRD/nRD/tSIGbWSifpfjdkszv9fy2JnCrRA/nRD/jT59XKSK1OQP92Q/3Wr1R85t4v86Yb86aZmov7XYraA+v9aFjtToAXypxvypxvypxvypxvypxvyp5uWifpfj9kC6v9rWexMgRbIn27In27In27In27In27In256Jup/I2YLqP+vZbEzBVogf7ohf7ohf7ohf7ohf7ohf7pcfjztayMT9b8Zu0XU/9ew2JnCdWdC7MnI/3rw55/ig/zphvzphvzphvzphvxpdOX3RTMT9b8Vsy3U/9ey2JnC9U1IGUP+dEP+dEP+dEP+16vf/ONbjZJHkD/dkD/drEzU/3bMFlD/X8tiZwq0QP7Xn8z82VXkTzfkTzfkTzfkTzfkTzc7E/W/E7MF1P/XstiZAi2QP92QP92QP31S/66H/OmG/OmG/OnmZKL+d2O2gPr/WhY7U6AF8qcb8qcb8qcb8qcb8qcb8qebm4n634vZAur/a1nsTIEWyJ9uyJ9uyJ9uyJ9uyJ9uyJ9uXibqfz9mC6j/r2WxMwVaIH+6IX+6IX+6IX+6IX+6IX+6+Zmo/4OYLaD+v5bFzhRogfzphvzphvzphvzphvzphvzpFmSi/g9jtoD6/79jXKaXiJ0p0AL50w350w350w350w350w350y3MRP0fF7MF1P/XstiZAi2QP92QP92QP92QP92QP92QP93iMlH/ZyFCjBZQ/1/LsvzbKwD/KuRPN+RPN+RPN+RPN+RPN+RPtyyZqP+zxmwB9f+1LHamcE2SMr8I8qcb8qcb8r/+LMjEvMifbsifbsifblkzUf9ni9kC6v9rWexMgRbIn27In27In27In27In27In27ZMlH/Z4/ZAur/a1nsTIEWyJ9uyJ9uyJ9uyJ9uyJ9uyJ9u2TNR/+eI2QLq/2tZ7EyBFsifSikPckH+dEP+dEP+dEP+dEP+dMuRifo/Z8wWUP9fy2JnCrRA/nRD/nRD/nRD/nRD/te3E+Jvv4/86ZYzE/V/rpgtoP6/lsXOFGiB/OmG/ClSJ+Mk5E835E835E835E+3XJmo/3PHbAH1/7UsdqZAC+RPN+R/PWL+8JzI/3rU5w/PifzphvzphvzpljsT9X98zBZQ/1/LYmcKtED+15nRN47okonZkT/dkD/dkD/dkD/dkD/d4jNR/+eJ2QLq/2tZ7EyBFsifbsifUoOSBsifbsifbsifbsifbnkyUf/njdkC6v9rWexMgRbIn27In27In27In27In27In255M1H/54vZQibr/z9+ayL8A2JnCrRA/nRD/nRD/nRD/nRD/nRD/nTLl4n6PyFmCzj//x/xp27liZ0pXE+Gl776e8ifbsifbsifbsifbsifbsifbgmEIfwg3yYkPlrr+4QQlhBbjrzKQi4zuQnDRl4IiSVmfOK4liXxtZ1hOvGT5k86yy+4iV81P2ne1NOIT95lvJT5tJT5mMNpppEsZD5x0/Sf50r/MzNMBwAAAAAAAICrYfj0E1LV6mnrdgAAAAAAAAC4FtWqV7V5oXTX/ycqRAhZLhJy3Ep6bZB9Me/d56NfO5JGkTFhUPRE/JkuJbte2MdcdahGG4gOxehLmUsglUgf0of0IlVJe9IhMpUhSdcjyFf6Sf56pV0raZjYf6p+0kndT2XShrQjVUhX0pf0jkyVou+LpDVpcLV+Yg+j109UTNePFOmnE+lDupE2pCeRov20JnUy137y9f3xadsXIu33ID1IH9KJdCVJ101of3D9DfIb28lOXv9qpD/pQ9qT7qQdSUqX/a0cYg8Jn+Y7JnUOdUgP8gCpHln/9tG8SXTYmtTOXD+Lo8tGh8n98FwCqUuqkyYpLSd9zfTnSA64Ysbvp6T265JOpBfplXQdTXTPUjL//ZQxj0jy0uDkKX1JL9I+uvuof6J9NrJXk2iiqb9fm5KepAppQ3qT9oSLTOX+jvVPab8Z6RHZ57qR9intNSdV/2r7ke9XhiseeR2fkm+TNO0WPFukVOLyVxsm78ftou0mtlMskmCHxO/P9SW3cuT+xPVP2pFJ9mg/6ffn4T0KR9q72jD9+sfHE7tYZMkO0f2gRGR6rt9pP/36p7Qf/Rxqqs9xd5r2S0byz32V9n93OyWtHimUL+12utJ+qcj0/1/7N6XZfnbKdzL8cca/vQLwr0L+dEP+dEP+dDPIucsxXJlhUPKk6K+75GLaBgb9o6sLAAAAAAAAAH/KaZc7n/qp/AMjZ2v4QTUJIc2j05KeCVA6en7FJyOIm+6+gCxJ09I9D+D3XidqmLA00tagTPQ/g8nYf2Tan+h/5sFDlVnmyinndtH+S6Q6l5/Uf47ILOe5NM84iHz9I/0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcS0673HnCXHk9kBDCEH5QTUJI8+g0nxDCktKEjb4aQVzCJC0juJFBlqRpSTMI8YSQeJb87utEDROWRtoalIn+ZzAZ+49M+xP9zzx4qDLLRDqNaBftvwQhpGKa/nMkzcL55DKTO7n/yNc/0g8AAAAAAADAv4shLOEITwQiEonIRCEq0YhODGISi9jEIS7xiE8CEpI4koVkJdlIdpKD5CS5SG4ST/KQvCQfSSD5SQFSkBQihUkRcgMpSoqR4uRGUoKUJKXITaQ0uZncQm4lZUhZchspR24n5ckdpAKpSCqRyqQKqUqqkeqkBqlJapHa5E5Sh9Ql9Uh90oA0JI1IY9KENCXNyF2kObmb3EPuJS3IfaQlaUVa/6nlHyEDyaPkMfI4GUQGkyHkCTKUPEmGkeHkKTKCPE2eISPJs2QUGU3GkLFkHBlPJpDnyEQyiUwmz5Mp5AUylUwj08kMMpO8SGaRl8hs8jKZQ+aSeWQ+WUBeIQvJq2QReY0sJq+TJWQpWUbeIG+St8hy8jZZQVaSVeQdspq8S9aQteQ9so6sJxvI+2Qj2UQ+IB+SzeQjsoV8TLaSbWQ72UF2kl1kN9lD9pJ95BOyn3xKDpCD5BD5LJPLn0u3fH+GMIRhGZbhGZ4RGZGRGZlRGZXRGZ0xGZOxGZtxGZfxGZ8JmZDJwmRhsjHZmBxMDiYXk4uJZ+KZvExeJoFJYAowBZhCTCGmCFOEKcoUZYozxZkSTEmmFFOKKc2UZm5hbmHKMGWZskw5phxTninPVGAqMJWYSkwVpgpTjanG1GBqMLWY2kxtpg5Th6nH1GMaMA2YRkwjpgnThGnGNGOaM82Ze5h7mBZMC6Yl05JpzbRm2jJtmXZMO6YD04HpyHRkOjOdma5MV6Y7053pyfRkejG9mD5MH6Yf04/pzwxgBjCPMI8wjzKPMo8zVdjBzBBmCDOUGcoMY4Yzw5kRzNPMM8wzzLPMKGY0M4YZy4xlxjMTmLPMRGYSM5mZzJRnX2CmMtOYeHYGM5OZycxiZjGzmdnMHGYuM5eZzyxgXmEWMguZRcxrzGvM68wSZimzlHmDeYN5i1nOLGdWMCuZVcwqZjVzjlnDrGXeY9Yx65kNzHpmI7OJ2ch8yGxmPmS2MFuYrcxWZjuzndnJ7GR2M7uZvcxe5hPmE+ZT5lNmFHOIOcQcZg4zR5gjzFHmKHOMOcYcZ44zJ5gTzEnmJHOKOcWcZr5nfmC+Z84wZ5izzDnmPHOeucBcYC4yF5lLzKXEnZ9NxLM8K7IiK7Myq7Iqq7M6a7Ima7M267Iu67M+G7Ihm4XNwmZjs7E52BxsLjYXGx85eJaXTWAT2AJsAbYQW4gtwhZhi7JF2eJscbYEW4ItxZZiS7M3s7ewt7Jl2LLsbWw5thxbnr2DrcBWZCuxldgqbFW2Gludrc7WZGuytdnabB22DluPrcf2KNqtaCN2MDOMacomJtOcHc3cw45hWrD3sS3ZVux4pg3blp3AtGPbsx3YB9hJzESmM9u2aFe2G9udncr0ZLsXncb0ZvuwM5h+7ENsf3YA+zD7CDuQbVf0MfZxdg4zmB3CzmeGsk+yw9jh7CKmKpuYWDX2WXYUO5odw45l32LGsxPY59iJ7CR2Mvs8O4V9gZ3KTmOnszPYmeyL7Cz2JXY2+zI7h53LzmPnswvYV9iF7KvsIvY1djH7OruEXcouY99g32TfYpezb7Mr2JXsKvYddjX7LruGXcu+x65j17Mb2PfZjewm9gP2Q3Yz+xG7hf2Y3cpuY7ezO9id7C52N7uH3cvuYz9h97OfsgfYg+wh9jP2MPs5e4T9gj3KfskeY79ij7NfsyfYb9iT7LfsKfY79jT7PfsD+yN7hv2JPcueY8+zP7MX2F/Yi+yv7CX2Mks4hmM5juM5gRM5iZM5hVM5jdM5gzM5i7M5h3M5j/O5gAu5OC4Ll5XLxmXncnA5uVxcbi6ey8Pl5fJxCVx+rgBXkCvEFeaKcDdwRbliXHHuRq4EV5Irxd3EleZu5m7hbuXKcGW527hy3O1cee4OrgJXkavEVeaqcFW5alx1rgZXk6vF1ebu5Opwdbl6XH2uAdeQa8Q15ppwTblm3F1cc+5u7h7uXq4Fdx/XkmvFtebacG25+7l2XHuuA/cA15HrxHXmunBduW5cd64H15PryfXienF9uL5cP64f158bwD3M/cpd4i5zj3GPc4O4wdwQ7gluKPckN4wbzj3FjeCe5p7hRnLPcqO40dwYbiw3jhvPTeCe4yZyk7jJ3PPcFO4Fbio3jZvOzeBmci9ys7iXuNncy9wcbi43j5vPLeBe4YZFW1r8B5Z/L8byIyO9b+W2cdu5HdxObhe3m9vDbeX2cfu4/dx+7gB3gDvEHeIOc4e5I9wR7ih3lDvGHeOOc8e5E9wJ7iR3kjvFneJOc99zP3M/cme4n7iz3DnuHPczd4G7wF2MbgPCMzzLczzPC7zIS7zMK7zKa7zOG7zJW7zNO7zLe7zPB3zIx/FZ+Kx8Nj47n4PPyefic/PxfB4+L5+PT+Dz8wX4gnwhvjBfhL+BL8oX44vzN/7l5a+sn0gIybh+rfnWfFu+Ld+Ob8d34DvwHfmOfGe+M9+V78p357vzPfmefC++F9+H78P34/vx/fn+/MP8w/xAfiD/GP8YP4gfxA/hn+CH8k/yw/jh/FP8CP5p/ml+JD+SH8WP4sfwY/hx/Dh+Aj+Bn8hP5Cfzk/kp/BR+Kj+Vn85P52fyM/lZ/Cx+Nj+bn8PP4efx8/gF/AJ+Ib+QX8Qv4hfzi/kl/BJ+Gb+Mf5N/k1/OL+dX8Cv4VfwqfjW/ml/Dr+XX8uv4dfwGfgO/kd/If8B/wG/mN/Nb+C38Gn4bv43fwe/gd/G7+D38Hn4fv4/fz+/nD/AH+EP8If4wf5g/wh/hj/JH+WP8Mf44f5w/wZ/gT/In+VP8Kf40f5r/gf+BP8Of4c/yZ/nz/Hn+An+Bv8hf5C/xlxJ/7RNYgRV4gRdEQRRkQRZUQRV0QRdMwRRswRZcwRV8wRdCIRSyCFmEbEI2IYeQQ8gl5BLihXghr5BXSBDyCwWEgkIhobBQRLhBKCoUE4oLNwolhJJCKeEmobRws3CLcKtQRigr3CaUE24Xygt3CBWEikIlobJQRagqVBOqCzWEmkItobZwp1BHqCvUE+oLDYSGQiOhsdBEaCo0E+4Smgt3C/cI9wothPuElkIrofWfbJ8nhGRsf7jwlDBCeFp4RhgpPCuMEkYLY4SxwjhhvDBBeE6YKEwSJgvPC1OEF4SpwjRhujBDmCm8KMwSXhJmCy8Lc4S5wjxhvrBAeEVYKLwqLBJeExYLrwtLhKXCMuEN4U3hLWG58LawQlgprBLeEVYL7wprhLXCe8I6Yb2wQXhf2ChsEj4QPhQ2Cx8JW4SPha3CNmG7sEPYKewSdgt7hL3CPuETYb/wqXBAOCgcEj4TDgufC0eEL4SjwpfCMeEr4bjwtXBC+EY4KXwrnBK+E04L3ws/CD8KZ4SfhLPCOeG88LNwQfhFuCj8KlwSLgtEZERW5EReFERRlERZVERV1ERdNERTtERbdERX9ERfDMRQjBOziFnFbGJ2MYeYU8wl5hbjxTxiXjGfmCDmFwuIBcVCYmGxiHiDWFQsJhYXbxRLiCXFUuJNYmnxZvEW8VaxjFhWvE0sJ94ulhfvECuIFcVKYmWxilhVrCZWF2uINcVaYm3xTrGOWFesJ9YXG4gNxUZiY7GJ2FRsJt4lNhfvFu8R7xVbiPeJLcVWYmuxjdhWvF9sJ7YXO4gPiB3FTmJnsYvYVewmdhd7iD3FB8VeYm+xj9hX7Cc+JPYXB4gPi4+IA8VHxcfEx8VB4mBxiPiEOFR8UhwmDhefEkeIT4vPiCPFZ8VR4mhxjDhWHCeOFyeIz4kTxUniZPF5cYr4gjhVnCZOF2eIM8UXxVniS+Js8WVxjjhXnCfOFxeIr4gLxVfFReJr4mLxdXGJuFRcJr4hvim+JS4X3xZXiCvFVeI74mrxXXGNuFZ8T1wnrhc3iO+LG8VN4gfih+Jm8SNxi/ixuFXcJm4Xd4g7xV3ibnGPuFfcJ34i7hc/FQ+IB8VD4mfiYfFz8Yj4hXhU/FI8Jn4lHhe/Fk+I34gnxW/FU+J34mnxe/EH8UfxjPiTeFY8J54XfxYviL+IF8VfxUviZZFIjMRKnMRLgiRKkiRLiqRKmqRLhmRKlmRLjuRKnuRLgRRKcVIWKauUTcou5ZBySrmk3FK8lEfKK+WTEqT8UgGpoFRIKiwVkW6QikrFpOLSjVIJqaRUSrpJKi3dLN0i3SqVkcpKt0nlpNul8tIdUgWpolRJqixVkapK1aTqUg2pplRLqi3dKdWR6kr1pPpSA6mh1EhqLDWRmkrNpLuk5tLd0j3SvVIL6T6ppdRKai21kdpK90vtpPZSB+kBqaPUSeosdZG6St2k7lIPqaf0oNRL6i31kfpK/aSHpP7SAOlh6RFpoPSo9Jj0uDRIGiwNkZ6QhkpPSsOk4dJT0gjpaekZaaT0rDRKGi2NkcZK46Tx0gTpOWmiNEmaLD0vTZFekKZK06Tp0gxppvSiNEt6SZotvSzNkeZK86T50gLpFWmh9Kq0SHpNWiy9Li2RlkrLpDekN6W3pOXS29IKaaW0SnpHWi29K62R1krvSeuk9dIG6X1po7RJ+kD6UNosfSRtkT6WtkrbpO3SDmmntEvaLe2R9kr7pE+k/dKn0gHpoHRI+kw6LH0uHZG+kI5KX0rHpK+k49LX0gnpG+mk9K10SvpOOi19L/0g/SidkX6SzkrnpPPSz9IF6RfpovSrdEm6LBGZkVmZk3lZkEVZkmVZkVVZk3XZkE3Zkm3ZkV3Zk305kEM5Ts4iZ5WzydnlHHJOOZecW46X88h55XxygpxfLiAXlAvJheUi8g1yUbmYXFy+US4hl5RLyTfJpeWb5VvkW+Uycln5NrmcfLtcXr5DriBXlCvJleUqclW5mlxdriHXlGvJteU75TpyXbmeXF9uIDeUG8mN5SZyU7mZfJfcXL5bvke+V24h3ye3lFvJreU2clv5frmd3F7uID8gd5Q7yZ3lLnJXuZvcXe4h95QflHvJveU+cl+5n/yQ3F8eID8sPyIPlB+VH5MflwfJg+Uh8hPyUPlJeZg8XH5KHiE/LT8jj5SflUfJo+Ux8lh5nDxeniA/J0+UJ8mT5eflKfIL8lR5mjxdniHPlF+UZ8kvybPll+U58lx5njxfXiC/Ii+UX5UXya/Ji+XX5SXyUnmZ/Ib8pvyWvFx+W14hr5RXye/Iq+V35TXyWvk9eZ28Xt4gvy9vlDfJH8gfypvlj+Qt8sfyVnmbvF3eIe+Ud8m75T3yXnmf/Im8X/5UPiAflA/Jn8mH5c/lI/IX8lH5S/mY/JV8XP5aPiF/I5+Uv5VPyd/Jp+Xv5R/kH+Uz8k/yWfmcfF7+Wb4g/yJflH+VL8mXZaIwCqtwCq8IiqhIiqwoiqpoiq4YiqlYiq04iqt4iq8ESqjEKVmUrEo2JbuSQ8mp5FJyK/FKHiWvkk9JUPIrBZSCSiGlsFJEuUEpqhRTiis3KiWUkkop5SaltHKzcotyq1JGKavcppRTblfKK3coFZSKSiWlslJFqapUU6orNZSaSi2ltnKnUkepq9RT6isNlIZKI6Wx0kRpqjRT7lKaK3cr9yj3Ki2U+5SWSiultdJGaavcr7RT2isdlAeUjkonpbPSRemqdFO6Kz2UnsqDSi+lt9JH6av0Ux5S+isDlIeVR5SByqPKY8rjyiBlsDJEeUIZqjypDFOGK08pI5SnlWeUkcqzyihltDJGGauMU8YrE5TnlInKJGWy8rwyRXlBmapMU6YrM5SZyovKLOUlZbbysjJHmavMU+YrC5RXlIXKq8oi5TVlsfK6skRZqixT3lDeVN5SlitvKyuUlcoqpR4h5F1ljbJWeU9Zp6xXNijvKxuVTcoHyofKZuUjZYvysbJV2aZsV3YoO5Vdym5lj7JX2ad8ouxXPlUOKAeVQ8pnymHlc+WI8oVyVPlSOaZ8pRxXvlZOKN8oJ5VvlVPKd8pp5XvlB+VH5Yzyk3JWOaecV35WLii/KBeVX5VLymWFqIzKqpzKq4IqqpIqq4qqqpqqq4ZqqpZqq47qqp7qq4EaqnFqFjWrmk3NruZQc6q51NxqvJpHzavmUxPU/GoBtaBaSC2sFlFvUIuqxdTi6o1qCbWkWkq9SS2t3qzeot6qllHLqrep5dTb1fLqHWoFtaJaSa2sVlGrqtXU6moNtaZACFHvVOuoddV6an21gdpQbaQ2VpuoTdVm6l1qc/Vu9R71XrWFep/aUm2ltlbbqG3V+9V2anu1g/qA2lHtpHZWu6hd1W5qd7WH2lN9UO2l9lb7qH3VfupDan91gPqw+og6UH1UfUx9XB2kDlaHqE+oQ9Un1WHqcPUpdYT6tPqMOlJ9Vh2ljlbHqGPVcep4dYL6nDpRnaROVp9Xp6gvqFPVaep0dYY6U31RnaW+pM5WX1bnqHPVeep8dYH6irpQfVVdpL6mLlZfV5eoS9Vl6hvqm+pb6nL1bXWFulJdpb6jrlbfVdeoa9X31HXqenWD+r66Ud2kfqB+qG5WP1K3qB+rW9Vt6nZ1h7pT3aXuVveoe9V96ifqfvVT9YB6UD2kfqYeVj9Xj6hfqEfVL9Vj6lfqcfVr9YT6jXpS/VY9pX6nnla/V39Qf1TPqD+pZ9Vz6nn1Z/WC+ot6Uf1Vna1eVonGaKzGabwmaKImabKmaKqmabpmaKZmabbmaK7mab4WaKEWp2XRsmrZtOxaDi2nlkvLrcVrebS8Wj4tQcuvFdAKaoW0wloR7QatqFZMK67dqJXQSmqltJu00trN2i3arVoZrax2m1ZOu10rr92hVdAqapW0yloVrapWTauu1dBqarW02tqdWh2trlZPq6810BpqjbTGWhOtqdZMu0trrt2t3aPdq7XQ7tNaaq201lobra12v0ZIe62D9oDWUeukdda6aF21blp3rYfWU3tQ66X11vpofbV+2kNaf22A9rD2iDZQe1R7THtcG6QN1oZoT2hDtSe1Ydpw7SlthPa09ow2UntWG6WN1sZoY7Vx2nhtgvacNlGbpE3WntemaC9oU7Vp2nRthjZTe1Gbpb2kzdZe1uZoc7V52nxtgfaKtlB7VVukvaYt1l7XlmhLtWXaG9qb2lvacu1tbYW2UlulvaOt1t7V1mhrtfe0ddp6bYP2vrZR26R9oH2obdY+0rZoH2tbtW3adm2HtlPbpe3W9mh7tX3aJ9p+7VPtgHZQO6R9ph3WPteOaF9oR7UvtWPaV9px7WvthPaNdlL7Vjulfaed1r7XftB+1M5oP2lntXPaee1n7YL2i3ZR+1W7pF3WiM7orM7pvC7ooi7psq7oqq7pum7opm7ptu7oru7pvh7ooR6nZ9Gz6tn07HoOPaeeS8+tJ59FSNDz6wX0gnohvbBeRL9BL6oXU6Jv6aX0m/TS+s36Lfqtehm9rH6bXk6/XS+v36FX0CvqlfTKehW9ql5Nr67X0GvqtfTa+p16Hb2uXk+vrzfQG+qN9MZ6E72p3ky/S2+u363fo9+rt9Dv01vqrfTWehu9rX6/3k5vr3fQH9A76p30znoXvaveTe+u99B76g/qvfTeeh+9r95Pf0jvrw/QH9Yf0Qfqj+qP6Y/rg/TB+hD9CX2o/qQ+TB+uP6WP0J/Wn9FH6s/qo/TR+hh9rD5OH69P0J/TJ+qT9Mn68/oU/QV9qj5Nn67P0GfqL+qz9Jf02frL+hx9rj5Pn68v0F/RF+qv6ov01/TF+uv6En2pvkx/Q39Tf0tfrr+tr9BX6qv0d/TV+rv6Gn2t/p6+Tl+vb9Df1zfqm/QP9A/1zfpH+hb9Y32rvk3fru/Qd+q79N36Hn2vvk//RN+vf6of0A/qh/TP9MP65/oR/Qv9qP6lfkz/Sj+uf62f0L/RT+rf6qf07/TT+vf6D/qP+hn9J/2sfk4/r/+sX9B/0S/qv+qX9Ms6MRiDNTiDNwRDNCRDNhRDNTRDNwzDNCzDNhzDNTzDNwIjNOKMLEZWI5uR3chh5DRyGbmNeCOPkdfIZyQY+Y0CRkGjkFHYKGLcYBQ1ihnFjRuNEkZJo5Rxk1HauNm4xbjVKGOUNW4zyhm3G+WNO4wKRkWjklHZqGJUNaoZ1Y0aRk2jllHbuNOoY9Q16hn1jQZGQ6OR0dhoYjQ1mhl3Gc2Nu417jHuNFsZ9RkujldHaaGO0Ne432hntjQ7GA0ZHo5PR2ehidDW6Gd2NHkZP40Gjl9Hb6GP0NfoZDxn9jQHGw8YjxkDjUeMx43FjkDHYGGI8YQw1njSGGcONp4wRxtPGM8ZI41ljlDHaGGOMNcYZ440JxnPGRGOSMdl43phivGBMNaYZ040ZxkzjRWOW8ZIx23jZmGPMNeYZ840FxivGQuNVY5HxmrHYeN1YYiw1lhlvGG8abxnLjbeNFcZKY5XxjrHaeNdYY6w13jPWGeuNDcb7xkZjk/GB8aGx2fjI2GJ8bGw1thnbjR3GTmOXsdvYY+w19hmfGPuNT40DxkHjkPGZcdj43DhifGEcNb40jhlfGceNr40TxjfGSeNb45TxnXHa+N74wfjROGP8ZJw1zhnnjZ+NC8YvxkXjV+OScdkgJmOyJmfypmCKpmTKpmKqpmbqpmGapmXapmO6pmf6ZmCGZpyZxcxqZjOzmznMnGYuM7cZb+Yx85r5zAQzv1nALGgWMgubRcwbzKJmMbO4eaNZwixpljpMCDFvNm8xbzXLmGXN28xy5u1mefMOs4JZ0axkVjarmFXNamZ1s4ZZ06xl1jbvNOuYdc16Zn2zgdnQbGQ2NpuYTc1m5l1mc/Nu8x7zXrOFeZ/Z0mxltjbbmG3N+812Znuzg/mA2dHsZHY2u5hdzW5md7OH2dN80Oxl9hb7mH3NfuZDZn9zgPmw+Yg50HzUfMx83BxkDjaHmE+YQ80nzWHmcPMpc4T5tPmMOdJ81hxljjbHmGPNceZ4c4L5nDnRnGRONp83p5gvmFPNaeZ0c4Y503zRnGW+ZM42XzbnmHPNeeZ8c4H5irnQfNVcZL5mLjZfN5eYS81l5hvmm+Zb5nLzbXOFudJcZb5jrjbfNdeYa833zHXmenOD+b650dxkfmB+aG42PzK3mB+bW81t5nZzh7nT3GXuNveYe8195ifmfvNT84B50DxkfmYeNj83j5hfmEfNL81j5lfmcfNr84T5jXnS/NY8ZX5nnja/N38wfzTPmD+ZZ81z5nnzZ/OC+Yt50fzVvGReNonFWKzFWbwlWKIlWbKlWKqlWbplWKZlWbblWK7lWb4VWKEVZ2WxslrZrOxWDiunlcvKbcVbeay8Vj4rwcpvFbAKWoWswlYR6warqFXMKm7daJWwSlqlrJus0tbN1i3WrVYZq6x1m1XOut0qb91hVbAqWpWsylYVq6pVzapu1bBqWrWs2tadVh2rrlXPqm81sBpajazGVhOrqdXMustqbt1t3WPda7Ww7rNaWq2s1lYbq611v9XOam91sB6wOlqdrM5WF6ur1c3qbvWweloPWr2s3lYfq6/Vz3rI6m8NsB62HrEGWo9aj1mPW4OswdYQ6wlrqPWkNcwabj1ljbCetp6xRlrPWqOs0dYYa6w1zhpvTbCesyZak6zJ1vPWFOsFa6o1zZpuzbBmWi9as6yXrNnWy9Yca641z5pvLbBesRZar1qLrNesxdbr1hJrqbXMesN603rLWm69ba2wVlqrrHes1da71hprrfWetc5ab22w3rc2WpusD6wPrc3WR9YW62Nrq7XN2m7tsHZau6zd1h5rr7XP+sTab31qHbAOWoesz6zD1ufWEesL66j1pXXM+so6bn1tnbC+sU5a31qnrO+s09b31g/Wj9YZ6yfrrHXOOm/9bF2wfrEuWr9al6zLFrEZm7U5m7cFW7QlW7YVW7U1W7cN27Qt27Yd27U927cDO7Tj7Cx2Vjubnd3OYee0c9m57Xg7j53Xzmcn2PntAnZBu5Bd2C5i32AXtYvZxe0b7RJ2SbuUfZNd2r7ZvsW+1S5jl7Vvs8vZt9vl7TvsCnZFu5Jd2a5iV7Wr2dXtGnZNu5Zd277TrmPXtevZ9e0GdkO7kd3YbmI3tZvZd9nN7bvte+x77Rb2fXZLu5Xd2m5jt7Xvt9vZ7e0O9gN2R7uT3dnuYne1u9nd7R52T/tBu5fd2+5j97X72Q/Z/e0B9sP2I/ZA+1H7Mftxe5A92B5iP2EPtZ+0h9nD7afsEfbT9jP2SPtZe5Q92h5jj7XH2ePtCfZz9kR7kj3Zft6eYr9gT7Wn2dPtGfZM+0V7lv2SPdt+2Z5jz7Xn2fPtBfYr9kL7VXuR/Zq92H7dXmIvtZfZb9hv2m/Zy+237RX2SnuV/Y692n7XXmOvtd+z19nr7Q32+/ZGe5P9gf2hvdn+yN5if2xvtbfZ2+0d9k57l73b3mPvtffZn9j77U/tA/ZB+5D9mX3Y/tw+Yn9hH7W/tI/ZX9nH7a/tE/Y39kn7W/uU/Z192v7e/sH+0T5j/2Sftc/Z5+2f7Qv2L/ZF+1f7kn3ZJg7jsA7n8I7giI7kyI7iqI7m6I7hmA7n2I7juI7n+E7ghE6ck8XJ6mRzsjs5nJxOLie3E+/kcfI6+ZwEJ79TwCnoFHIKO0WcG5yiTjGnuHOjU8Ip6ZRybnJKOzc7tzi3OmWcss5tTjnndqe8c4dTwanoVHIqO1Wcqk41p7pTw6np1HJqO3c6dZy6Tj2nvtPAaeg0cho7TZymTjPnLqe5c7dzj3Ov08K5z2nptHJaO22cts79TjunvdPBecDp6HRyOjtdnK5ON6e708Pp6Tzo9HJ6O32cvk4/5yGnvzPAedh5xBnoPOo85jzuDHIGO0OcJ5yhzpPOMGe485QzwnnaecYZ6TzrjHJGO2Ocsc44Z7wzwXnOmehMciY7zztTnBecqc40Z7ozw5npvOjMcl5yZjsvO3Ocuc48Z76zwHnFWei86ixyXnMWO687S5ylzjLnDedN5y1nufO2s8JZ6axy3nFWO+86a5y1znvOOme9s8F539nobHI+cD50NjsfOVucj52tzjZnu7PD2enscnY7e5y9zj7nE2e/86lzwDnoHHI+cw47nztHnC+co86XzjHnK+e487VzwvnGOel865xyvnNOO987Pzg/Omecn5yzzjnnvPOzc8H5xbno/Opcci47xGVc1uVc3hVc0ZVc2VVc1dVc3TVc07Vc23Vc1/Vc3w3c0I1zs7hZ3WxudjeHm9PN5eZ24908bl43n5vg5ncLuAXdQm5ht4h7g1vULeYWd290S7gl3VLuTW5p92b3FvdWt4xb1r3NLefe7pZ373AruBXdSm5lt4pb1a3mVndruDXdWm5t9063jlvXrefWdxu4Dd1GbmO3idvUbebe5TZ373bvce91W7j3uS3dVm5rt43b1r3fbee2dzu4D7gd3U5uZ7eL29Xt5nZ3e7g93QfdXm5vt4/b1+3nPuT2dwe4D7uPuAPdR93H3MfdQe5gd4j7hDvUfdId5g53n3JHuE+7z7gj3WfdUe5od4w71h3njncnuM+5E91J7mT3eXeK+4I71Z3mTndnuDPdF91Z7kvubPdld447153nzncXuK+4C91X3UXua+5i93V3ibvUXea+4b7pvuUud992V7gr3VXuO+5q9113jbvWfc9d5653N7jvuxvdTe4H7ofuZvcjd4v7sbvV3eZud3e4O91d7m53j7vX3ed+4u53P3UPuAfdQ+5n7mH3c/eI+4V71P3SPeZ+5R53v3ZPuN+4J91v3VPud+5p93v3B/dH94z7k3vWPeeed392L7i/uBfdX91L7mWXeIzHepzHe4InepIne4qnepqne4ZnepZne47nep7ne4EXenFeFi+rl83L7uXwcnq5vNxevJfHy+vl8xK8/F4Br6BXyCvsFfFu8Ip6xbzi3o1eCa+kV8q7ySvt3ezd4t3qlfHKerd55bzbvfLeHV4Fr6JXyavsVfGqetW86l4Nr6ZXy6vt3enV8ep69bz6HuM19Bp5jb0mXlOvmXeX19y727vHu9dr4d3ntfRaea29Nl5b736vndfe6+A94HX0OnmdvS5eV6+b193r4fX0HvR6eb29Pl5fr5/3kNffG+A97D3iDfQe9R7zHvcGeYO9Id4T3lDvSW+YN9x7yhvhPe094430nvVGeaO9Md5Yb5w33pvgPedN9CZ5k73nvSneC95Ub5o33ZvhzfRe9GZ5L3mzvZe9Od5cb54331vgveIt9F71FnmveYu9170l3lJvmfeG96b3lrfce9tb4a30VnnveKu9d7013lrvPW+dt97b4L3vbfQ2eR94H3qbvY+8Ld7H3lZvm7fd2+Ht9HZ5u7093l5vn/eJuN/71DvgHfQOeZ95h73PvSPeF95R70vvmPeVd9z72jvhfeOd9L71TnnfeaeT7+3zfvLOeue8897P3gXvF++i96t3ybvsEZ/xWZ/zeV/wRV/yZV/xVV/zdd/wTd/ybd/xXd/zfT/wQz/Oz+Jn9bP52f0cfk4/l5/bj/fz+Hn9fH6Cn98v4Bf0C/mF/SL+DX5Rv5hf3L/RL+GX9Ev5N/ml/Zv9W/xb/TJ+Wf82v5x/u1/ev8Ov4Ff0K/mV/Sp+Vb+aX92v4df0a/m1/Tv9On5dv55f32/gN/Qb+Y39Jn5Tv5l/l9/cv9u/x7/Xb+Hf57f0W/mt/TZ+W/9+v53f3u/gP+B39Dv5nf0ufle/m9/d7+H39B/0e/m9/T5+X7+f/5Df3x/gP+w/4g/0H/Uf8x/3B/mD/SH+E/5Q/0l/mD/cf8of4T/tP+OP9J/1R/mj/TH+WH+cP96f4D/nT/Qn+ZP95/0p/gv+VH+aP92fscn0X/Rn+S/5s/2X/Tn+XH+eP99f4L/iL/Rf9Rf5r/mL/df9Jf5Sf5n/hv+m/5a/3H/bX+Gv9Ff57/ir/Xf9Nf5a/z1/nb/e3+C/72/0N/kf+B/6m/2P/C3+x/5Wf5u/3d/h7/R3+bv9Pf5ef5//ib/f/9Q/4B/0D/mf+Yf9z/0j/hf+Uf9L/5j/lX/c/9o/4X/jn/S/9U/53/mn/e/9H/wf/TP+T/5Z/5x/3v/Zv+D/4l/0f/Uv+Zd9EjABG3ABHwiBGEiBHCiBGmiBHhiBGViBHTiBG3iBHwRBGMQFWYKsQbYge5AjyBnkCnIH8UGeIG+QL0gI8gcFgoJBoaBwUCS4ISgaFAuKBzcGJYKSQangpqB0cHNwS3BrUCYoG9wWlAtuD8oHdwQVgopBpaByUCWoGlQLqgc1gppBraB2cGdQJ6gb1AvqBw2ChkGjoHHQJGgaNAvuCpoHdwf3BPcGLYL7gpZBq6B10CZoG9wftAvaBx2CB4KOQaegc9Al6Bp0C7oHPYKewYNBr6B30CfoG/QLHgr6BwOCh4NHgoHBo8FjwePBoGBwMCR4IhgaPBkMC4YHTwUjgqeDZ4KRwbPBqGB0MCYYG4wLxgcTgueCicGkYHLwfDAleCGYGkwLpgczgpnBi8Gs4KVgdvByMCeYG8wL5gcLgleChcGrwaLgtWBx8HqwJFgaLAveCN4M3gqWB28HK4KVwargnWB18G6wJlgbvBesC9YHG4L3g43BpuCD4MNgc/BRsCX4ONgabAu2BzuCncGuYHewJ9gb7As+CfYHnwYHgoPBoeCz4HDweXAk+CI4GnwZHAu+Co4HXwcngm+Ck8G3wangu+B08H3wQ/BjcCb4KTgbnAvOBz8HF4JfgovBr8Gl4HJAQiZkQy7kQyEUQymUQyVUQy3UQyM0Qyu0Qyd0Qy/0wyAMw7gwS5g1zBZmD3OEOcNcYe4wPswT5g3zhQlh/rBAWDAsFBYOi4Q3hEXDYmHx8MawRFgyLBXeFJYObw5vCW8Ny4Rlw9vCcuHtYfnwjrBCWDGsFFYOq4RVw2ph9bBGWDOsFdYO7wzrhHXDegwTNggbho3CxmGTsGnYLLwrbB7eHd4T3hu2CO8LW4atwtZhm7BteH/YLmwfdggfCDuGncLOYZewa9gt7B72CHuGD4a9wt5hn7Bv2C98KOwfDggfDh8JB4aPho+Fj4eDwsHhkPCJcGj4ZDgsHB4+FY4Inw6fCUeGz4ajwtHhmHBsOC4cH04InwsnhpPCyeHz4ZTwhXBqOC2cHs4IZ4YvhrPCl8LZ4cvhnHBuOC+cHy4IXwkXhq+Gi8LXwsXh6+GScGm4LHwjfDN8K1wevh2uCFeGq8J3wtXhu+GacG34XrguXB9uCN8PN4abwg/CD8PN4UfhlvDjcGu4Ldwe7gh3hrvC3eGecG+4L/wk3B9+Gh4ID4aHws/Cw+Hn4ZHwi/Bo+GV4LPwqPB5+HZ4IvwlPht+Gp8LvwtPh9+EP4Y/hmfCn8Gx4Ljwf/hxeCH8JL4a/hpfCyyGJY+LYOC6OjxPixDgpTo5T4tQ4LU6PM+LMOCvOjnPi3Dgvzo8L4sK4uLgscVnjssVlj8sRlzMuV1zuuPi4PHF54/LFJcTljysQVzCuUFzhuCJxN8QVjSsWVzzuxv/Rbo9PYgXtw+cntnFs9VEfnxPbtm3btm3bmNgTO5lMbFsTO5lktu7fVu3Ws/eLrdrap999qqu7ru8fcCE24iAu4iE+EiAhEiH5kPxIAaQgUggpjBRBiiLFkOJICaQkUgopjZRByiLlkPJIBaQiUgmpjFRBqiLVkOpIDaQmUgupjdRB6iL1kPpIA6Qh0ghpjDRBmiLNkOZIC6Ql0gppjbRB2iLtkPZIB6Qj0gnpjHRBuiLdkO5ID6Qn0gvpjfRB+iL9kP7IAGQgMggZjAxBhiLDkOHICGQkMgoZjYxBxiLjkPHIBGQiMgmZjExBpiLTkOnIDGQmMguZjcxB5iLzkPnIAmQhsghZjCxBliLLkOXICmQlsgpZjaxB1iLrkPXIBmQjsgnZjMQiW5CtyDZkO7ID2YnsQnYje5C9yD5kP3IAiUMOIoeQw8gR5ChyDDmOnEBOIqeQ08gZ5CxyDjmPxCMXkATkInIJuYxcQa4i15DryA3kJnILuY3cQe4i95D7yAPkIfIIeYw8QZ4iz5DnyAvkJfIKeY28Qd4iicg75D3yAfmIfEI+I1+Qr8g35DvyA/mJ/EJ+I3+QJOQv8g9JRmLQFGhKNBWaGk2DpkXToenRDGhGNBOaGc2CZkWzodnRHGhONBeaG82D5kURFEUxFEcJlEQplEYZlEU5lEcFVEQlVEYVFKAqqqE6aqAmClELtVEHdVEP9dEADdEIzYfmRwugBdFCaGG0CFoULYYWR0ugJdFSaGm0DFoWLYeWRyugFdFKaGW0CloVrYZWR2ugNdFaaG20DloXrYfWRxugDdFGaGO0CdoUbYY2R1ugLdFWaGu0DdoWbYe2RzugHdFOaGe0C9oV7YZ2R3ugPdFeaG+0D9oX7Yf2RwegA9FB6GB0CDoUHYYOR0egI9FR6Gh0DDoWHYeORyegE9FJ6GR0CjoVnYZOR2egM9FZ6Gx0DjoXnYfORxegC9FF6GJ0CboUXYYuR1egK9FV6Gp0DboWXYeuRzegG9FN6GY0Ft2CbkW3odvRHehOdBe6G92D7kX3ofvRA2gcehA9hB5Gj6BH0WPocfQEehI9hZ5Gz6Bn0XPoeTQevYAmoBfRS+hl9Ap6Fb2GXkdvoDfRW+ht9A56F72H3kcfoA/RR+hj9An6FH2GPkdfoC/RV+hr9A36Fk1E36Hv0Q/oR/QT+hn9gn5Fv6Hf0R/oT/QX+hv9gyahf9F/aDIag6XAUmKpsNRYGiwtlg5Lj2XAMmKZsMxYFiwrlg3LjuXAcmK5sKTkPFheDMFQDMNwjMBIjMJojMFYjMN4TMBETMJkTMEApmIapmMGZmIQszAbczAX8zAfC7AQi7B8WH6sAFYQK4QVxopgRbFiWHGsBFYSK4WVxspgZbFyWHmsAlYRq4RVxqpgVbFqWHWsBlYTq4XVxupgdbF6WH2sAdYQa4Q1xppgTbFmWHOsBdYSa4W1xtpgbbF2WHusA9YR64R1xrpgXbFuWHesB9YT64X1xvpgfbF+WH9sADYQG4QNxoZgQ7Fh2HBsBDYSG4WNxsZgY7Fx2HhsAjYRm4RNxqZgU7Fp2HRsBjYTm4XNxuZgc7F52HxsAbYQW4QtxpZgS7Fl2HJsBbYSW4WtxtZga7F12HpsA7YR24RtxmKxLdhWbBu2HduB7cR2YbuxPdhebB+2HzuAxWEHsUPYYewIdhQ7hh3HTmAnsVPYaewMdhY7h53H4rELWAJ2EbuEXcauYFexa9h17AZ2E7uF3cbuYHexeynuYw+wh9gj7DH2BHuKPcOeYy+wl9gr7DX2BnuLJWLvsPfYB+wj9gn7jH3BvmLfsO/YD+wn9gv7jf3BkrC/2D8sGYvBU+Ap8VR4ajwNnhZPh6fHM+AZ8Ux4ZjwLnhXPhmfHc+A58Vx4bjwPnhdHcBTHcBwncBKncBpncBbncB4XcBGXcBlXcICruIbruIGbOMQt3MYd3MU93McDPMQjPB+eHy+AF8QL4YXxInhRvBheHC+Bl8RL4aXxMnhZvBxeHq+AV8Qr4ZXxKnhVvBpeHa+B18Rr4bXxOnhdvB5eH2+AN8Qb4Y3xJnhTvBneHG+Bt8Rb4a3xNnhbvB3eHu+Ad8Q74Z3xLnhXvBveHe+B98R74b3xPnhfvB/eHx+AD8QH4YPxIfhQfBg+HB+Bj8RH4aPxMfhYfBw+Hp+AT8Qn4ZPxKfhUfBo+HZ+Bz8Rn4bPxOfhcfB4+H1+AL8QX4YvxJfhSfBm+HF+Br8RX4avxNfhafB2+Ht+Ab8Q34ZvxWHwLvhXfhm/Hd+A78V34bnwPvhffh+/HD+Bx+EH8EH4YP4IfxY/hx/ET+En8FH4aP4Ofxc/h5/F4/AKegF/EL+GX8Sv4Vfwafh2/gd/Eb+G38Tv4Xfwefh9/gD/EH+GP8Sf4U/wZ/hx/gb/EX+Gv8Tf4WzwRf4e/xz/gH/FP+Gf8C/4V/4Z/x3/gP/Ff+G/8D56E/8X/4cl4DJGCSEmkIlITaYi0RDoiPZGByEhkIjITWYisRDYiO5GDyEnkInITeYi8BEKgBEbgBEGQBEXQBEOwBEfwhECIhETIhEIAQiU0QicMwiQgYRE24RAu4RE+ERAhERH5iPxEAaIgUYgoTBQhihLFiOJECaIkUYooTZQhyhLliPJEBaIiUYmoTFQhqhLViOpEDaImUYuoTdQh6hL1iPpEA6Ih0YhoTDQhmhLNiOZEC6Il0YpoTbQh2hLtiPZEB6Ij0YnoTHQhuhLdiO5ED6In0YvoTfQh+hL9iP7EAGIgMYgYTAwhhhLDiOHECGIkMYoYTYwhxhLjiPHEBGIiMYmYTEwhphLTiOnEDGImMevtDGIOMZeYR8wnFhALiUXEYmIJsZRYRiwnVhAriVXEamINsZZYR6wnNhAbiU3EZiKW2EJsJbYR24kdxE5iF7Gb2EPsJfYR+4kDRBxxkDhEHCaOEEeJY8Rx4gRxkjhFnCbOEGeJc8R5Ip64QCQQF4lLxGXiCnGVuEZcJ24QN4lbxG3iDnGXuEfcJx4QD4lHxGPiCfGUeEY8J14QL4lXxGviDfGWSCTeEe+JD8RH4hPxmfhCfCW+Ed+JH8RP4hfxm/hDJBF/iX9EMhFDpiBTkqnI1GQaMi2ZjkxPZiAzkpnIzGQWMiuZjcxO5iBzkrnI3GQeMi+JkCiJkThJkCRJkTTJkCzJkTwpkCIpkTKpkIBUSY3USYM0SUhapE06pEt6pE8GZEhGZD4yP1mALEgWIguTRciiZDGyOFmCLEmWIkuTZciyZDmyPFmBrEhWIiuTVciqZDWyOlmDrEnWImuTdci6ZD2yPtmAbEg2IhuTTcimZDOyOdmCbEm2IluTbci2ZDuyPdmB7Eh2IjuTXciuZDeyO9mD7En2InuTfci+ZD+yPzmAHEgOIgeTQ8ih5DByODmCHEmOIkeTY8ix5DhyPDmBnEhOIieTU8ip5DRyOjmDnEnOImeTc8i55DxyPrmAXEguIheTS8il5DJyObmCXEmuIleTa8i15DpyPbmB3EhuIjeTseQWciu5jdxO7iB3krvI3eQeci+5j9xPHiDjyIPkIfIweYQ8Sh4jj5MnyJPkKfI0eYY8S54jz5Px5AUygbxIXiIvk1fIq+Q18jp5g7xJ3iJvk3fIu+Q98j75gHxIPiIfk0/Ip+Qz8jn5gnxJviJfk2/It2Qi+Y58T34gP5KfyM/kF/Ir+Y38Tv4gf5K/yN/kHzKJ/Ev+I5PJGCoFlZJKRaWm0lBpqXRUeioDlZHKRGWmslBZqWxUdioHlZPKReWm8lB5KYRCKYzCKYIiKYqiKYZiKY7iKYESKYmSKYUClEpplE4ZlElByqJsyqFcyqN8KqBCKqLyUfmpAlRBqhBVmCpCFaWKUcWpElRJqhRVmipDlaXKUeWpClRFqhJVmapCVaWqUdWpGlRNqhZVm6pD1aXqUfWpBlRDqhHVmGpCNaWaUc2pFlRLqhXVmmpDtaXaUe2pDlRHqhPVmepCdaW6Ud2pHlRPqhfVm+pD9aX6UYPXDqAGUoOolsYQaig1jBpOjaBGUqOo0dQYaiw1jhpPTaAmUpOoydQUaio1jZpOzaBmUrOo2dQcai41j5pPLaAWUouoxdQSaim1jFpOraBWUquo1dQaai21jlpPbaA2UpuozVQstYXaSm2jtlM7qJ3ULmo3tYfaS+2j9lMHqDjqIHWIOkwdoY5Sx6jj1AnqJHWKOk2doc5S56jzVDx1gUqgLlKXqMvUFeoqdY26Tt2gblK3qNvUHeoudY+6Tz2gHlKPqMfUE+op9Yx6Tr2gXlKvqNfUG+otlUi9o95TH6iP1CfqM/WF+kp9o75TP6if1C/qN/WHSqL+Uv+oZCqGjqFT0inp1HRqOi2dlk5Pp6cz0hnpzHRmOiudlc5OZ6dz0jnp3HRuOi+dl0ZplMZpnCZpkv7PYWmW5mmeFmmRlmmZBjSgNVqjDdqgIQ1pm7Zpl3Zpn/bpkA7pfHQ+ugBdgC5EF6KL0EXoYnQxugRdgi5Fl6LL0GXocnQ5ugJdga5EV6Kr0FXoanQ1ugZdg65F16Lr0HXoenQ9ugHdgG5EN6Kb0E3oZnQzugXdgm5Ft6Lb0G3odnQ7ugPdge5Ed6K70F3obnQ3ugfdg+5F96L70H3ofnQ/egA9gB5ED6KH0EPoYfQwegQ9gh5Fj6LH0GPocfQ4egI9gZ5ET6Kn0FPoafQ0egY9g55Fz6Ln0HPpefR8egG9kF5EL6aX0EvpZfQyegW9gl5Fr6LX0GvodfQ6egO9gd5Eb6Jj6Vh6K72V3k5vp3fSO+nd9G56L72X3k/vp+PoOPoQfYg+Qh+hj9HH6BP0CfoUfYo+Q5+hz9Hn6Hg6nk6gE+hL9CX6Cn2FvkZfo2/QN+hb9C36Dn2Hvkffox/QD+hH9CP6Cf2EfkY/o1/QL+hX9Cv6Df2GTqQT6ff0e/oj/ZH+TH+mv9Jf6e/0d/on/ZP+Tf+mk+gk+h/9j07PZGAyMpmYzEwWJiuTjfl/GmUwBmcIhmQoJi+D/C+mGYYBjMpojM4YjMlAxvov52PyMwWYgkwhpjBThCn6Xy7HlGcqMBWZSkxlpgxT9n9xFaYqU42pz9RgGjK1mMZMHaYpU4+pzzRgGjKNmMZME6Yp045pz3RgOjKdmM5MF6brf3k/c4A5w5xlzjHnmTvMXeYn84t5w7xlfjN/mCHMUGYcM56ZEDORmcRMZqYwU/9PM/+35zHzmQXMQmYRs5hZwiz9L69j1jMbmI3MJmYzE8ts+S/vZfYx25k4Ziezi9nN7Pkf/2emOOYgc4g5zBxhjjLHmHjmBHOSOcWc/r9mjWcuMAnMReYWc5u5wlxlrjHXmRvMzf/xfzruMfeZB8xD5hXzmnnCPGWeMYnMC+bl//g/fYnMO+Y984H5yHxiPjNJzFfmG/Od+fE//f9pT2L+Mv+YZCaGTcGmZFOxqdk0bFo2HZuezcBmZDOxmdksbFY2G5udzcHmZHOxudk8bF4WYVEWY3GWYEmWYmmWYVmWY3lWYEVWYmVWYQGrshqrswZrspC1WJt1WJf1WJ8N2JCN2HxsfrYAW5AtxBZmi7BF2WJscbYEW5ItxZZmy7Bl2XJsebYCW5GtxFZmq7BV2WpsdbYGW5OtxdZm67B12XpsfbYB25BtxDZmm7BN2WZsc7YF25JtxbZm27Bt2XZse7YD25HtxHZmu7Bd2W5sd7YH25PtxfZm+7B92X5sf3YAO5AdxA5mh7BD2WHscHYEO5IdxY5mx7Bj2XHseHYCO5GdxE5mp7BT2WnsdHYGO5Odxc5m57Bz2XnsfHYBu5BdxC5ml7BL2WXscnYFu5Jdxa5m17Br2XXsenYDu5HdxG5mY9kt7FZ2G7ud3cHuZHexu9k97F52H7ufPcDGsQfZQ+xh9gh7lD3GHmdPsCfZU+xp9gx7lj3Hnmfj2QtsAnuRvcReZq+wV9lr7HX2BnuTvcXeZu+wd9l77H32AfuQfcQ+Zp+wT9ln7HP2BfuSfcW+Zt+wb9lE9h37nv3AfmQ/sZ/ZL+xX9hv7nf3B/mR/sb/ZP2wS+5f9xyazMVwKLiWXikvNpeHScum49FwGLiOXicvMZeGyctm47FwOLieXi8vN5eHycgiHchiHcwRHchRHcwzHchzHcwInchIncwoHOJXTOJ0zOJODnMXZnMO5nMf5XMCFXMTl4/JzBbiCXCGuMFeEK8oV44pzJbiSXCmuNFeGK8uV48pzFbiKXCWuMudyVblqXHWuBleTq8XV5upwdbl6XH2uAdeQa8Q15ppwTblmXHOuBdeSa8W15tpwbbl2XHuuA9eR68R15rpwXf9f74dxw7kR3EhuJDeaG8ON5cZx47kJ3ERuEjeZm8JN5aZx07kZ3ExuFjebm8PN5eZx87kF3EJuEbeYW8It5ZZxy7kV3EpuFbeaW8Ot5dZx67kN3EZuE7eZi+W2cFu5bdx2bge3k9vF7eb2cHu5fdx+7gAXxx3kDnGHuSPcUe4Yd5w7wZ3kTnGnuTPcWe4cd56L5y5wCdxF7hJ3mbvCXeWucde5G9xN7hZ3m7vD3eXucfe5B9xD7hH3mHvCPeWecc+5F9xL7hX3mnvDveUSuXfce+4D95H7xH3mvnBfuW/cd+4H95P7xf3m/nBJ3F/uH5fMxfAp+JR8Kj41n4ZPy6fj0/MZ+Ix8Jj4zn4XPymfjs/M5+Jx8Lj43n4fPyyM8ymM8zhM8yVM8zTM8y3M8zwu8yEu8zCs84FVe43Xe4E0e8hZv8w7v8h7v8wEf8hGfj8/PF+AL8oX4wnwRvihfjC/Ol+BL8qX40nwZvixfji/PV+Ar8pX4yrFV+Kp8Nb46X4Ovydfia5+PiYnh6/H1+QZ8Q74R35hvwjflm/HN+RZ8S74V35pvw7fl2/Ht+Q58R74T35nvwnflu/Hd+R58T74X35vvw/fl+/H9+QH8QH4QP5gfwg/lh/HD+RH8SH4UP5ofw4/lx/Hj+Qn8RH4SP5mfwk/lp/HT+Rn8TH4WP5ufw8/l5/Hz+QX8Qn4Rv5hfwi/ll/HL+RX8Sn4Vv5pfw6/l1/Hr+Q38Rn4Tv5mP5bfwW/lt/HZ+B7+T38Xv5vfwe/l9/H7+AB/HH+QP8Yf5I/xR/hh/nD/Bn+RP8af5M/xZ/hx/no/nL/AJ/EX+En+Zv8Jf5a/x1/kb/E3+Fn+bv8Pf5e/x9/kH/EP+Ef+Yf8I/5Z/xz/kX/Ev+Ff+af8O/5RP5d/x7/gP/kf/Ef+a/8F/5b/x3/gf/k//F/+b/8En8X/4fn8zHCCmElEIqIbWQRkgrpBPSCxmEjEImIbOQRcgqZBOyCzmEnEIuIbeQR8grIAIqYAIuEAIpUAItMAIrcAIvCIIoSIIsKAIQVEETdMEQTAEKlmALjuAKnuALgRAKkZBPyC8UEAoKhYTCQhGhqFBMKC6UEEoKpYTSQhmhrFBOKC9UECoKlYTKQhWhqlBNqC7UEGoKtYTaQh2hrlBPqC80EBoKjYTGQhOhqdBMaC60EFoKrYTWQhuhrdBOaC90EDoKnYTOQhehq9BN6C70EHoKvYTeQh+hr9BP6C8MEAYKg4TBwhBhqDBMGC6MEEYKo4TRwhhhrDBOGC9MECYKk4TJwhRhqjBNmC7MEGYKs4TZwhxhrjBPmC8sEBYKi4TFwhJhqbBMWC6sEFYKq4TVwhphrbBOWC9sEDYKm4TNQqywRdgqbBO2CzuEncIuYbewR9gr7BP2CweEOOGgcEg4LBwRjgrHhOPCCeGkcEo4LZwRzgrnhPNCvHBBSBAuCpeEy8IV4apwTbgu3BBuCreE28Id4a5wT7gvPBAeCo+Ex8IT4anwTHguvBBeCq+E18Ib4a2QKLwT3gsfhI/CJ+Gz8EX4KnwTvgs/hJ/CL+G38EdIEv4K/4RkIUZMIaYUU4mpxTRiWjGdmF7MIGYUM4mZxSxiVjGbmF3MIeYUc4m5xTxiXhERURETcZEQSZESaZERWZETeVEQRVESZVERgaiKmqiLhmiKULREW3REV/REXwzEUIzEfGJ+sYBYUCwkFhaLiEXFYmJxsYRYUiwllhbLiGXFcmJ5sYJYUawkVhariFXFamJ1sYZYU6wl1hbriHXFemJ9sYHYUGwkNhabiE3FZmJzsYXYUmwlthbbiG3FdmJ7sYPYUewkdha7iF3FbmJ3sYfYU+wl9hb7iH3FfmJ/cYA4UBwkDhaHiEPFYeJwcYQ4UhwljhbHiGPFceJ4cYI4UZwkThaniFPFaeJ0cYY4U5wlzhbniHPFeeJ8cYG4UFwkLhaXiEvFZeJycYW4UlwlrhbXiGvFdeJ6cYO4UdwkbhZjxS3iVnGbuF3cIe4Ud4m7xT3iXnGfuF88IMaJB8VD4mHxiHhUPCYeF0+IJ8VT4mnxjHhWPCeeF+PFC2KCePH/05s34lsxUXwnvhc/iB/FT+Jn8Yv4Vfwmfhd/iD/FX+Jv8Y+YJP4V/4nJYoyUQkoppZJSS2mktFI6Kb2UQcooZZIyS1mkrFI2KbuUQ8op5ZJyS3mkvBIioRIm4RIhkRIl0RIjsRIn8ZIgiZIkyZIiAUmVNEmXDMmUoGRJtuRIruRJvhRIoRRJ+aT8UgGpoFRIKiwVkYpKxaTiUgmppFRKKi2VkcpK5aTyUgWpolRJqixVkapK1aTqUg2pplRLqi3VkepK9aT6UgOpodRIaiw1kZpKzaTmUguppdRKai21kdpK7aT2Ugepo9RJ6ix1kbpK3aTuUg+pp9RL6i31kfpK/aT+0gBpoDRIGiwNkYZKw6Th0ghppDRKGi2NkcZK46Tx0gRpojRJmixNkaZK06Tp0gxppjRLmi3NkeZK86T50gJpobRIWiwtkZZKy6Tl0gpppbRKWi2tkdZK66T10gZpo7RJ2izFSlukrdI2abu0Q9op7ZJ2S3ukvdI+ab90QIqTDkqHpMPSEemodEw6Lp2QTkqnpNPSGemsdE46L8VLF6QE6aJ0SbosXZGuStek69IN6aZ0S7ot3ZHuSvek+9ID6aH0SHosPZGeSs+k59IL6aX0SnotvZHeSonSO+m99EH6KH2SPktfpK/SN+m79EP6Kf2Sfkt/pCTpr/RPSpZi5BRySjmVnFpOI6eV08np5QxyRjmTnFnOImeVs8nZ5RxyTjmXnFvOI+eVERmVMRmXCZmUKZmWGZmVOZmXBVmUJVmWFRnIqqzJumzIpgxlS7ZlR3ZlT/blQA7lmJiYmPxyAbmgXEguLBeRi8rF5OJyCbmkXEouLZeRy8rl5PJyBbmiXEmuLFeRq8rV5OpyDbmmXEuuLdeR68r15PpyA7mh3EhuLDeRm8rN5OZyC7ml3EpuLbeR28rt5PZyB7mj3EnuLHeRu8rd5O5yD7mn3EvuLfeR+8r95P7yAHmgPEgeLA+Rh8rD5OHyCHmkPEoeLY+Rx8rj5PHyBHmiPEmeLE+Rp8rT5OnyDHmmPEueLc+R58rz5PnyAnmhvEheLC+Rl8rL5OXyCnmlvEpeLa+R18rr5PXyBnmjvEneLMfKW+St8jZ5u7xD3invknfLe+S98j55v3xAjpMPyofkw/IR+ah8TD4un5BPyqfk0/IZ+ax8Tj4vx8sX5AT5onxJvixfka/K1+Tr8g35pnxLvi3fke/K9+T78gP5ofxIfiw/kZ/Kz+Tn8gv5pfxKfi2/kd/KifI7+b38Qf4of5I/y1/kr/I3+bv8Q/4p/5J/y3/kJPmv/E9OlmOUFEpKJZWSWkmjpFXSKemVDEpGJZOSWcmiZFWyKdmVHEpOJZeSW8mj5FUQBVUwBVcIhVQohVYYhVU4hVcERVQkRVYUBSiqoim6YiimAhVLsRVHcRVP8ZVACZVIyafkVwooBZVCSmGliFJUKaYUV0ooJZVSSmmljFJWKaeUVyooFZVKSmWlilJVqaZUV2ooNZVaSm2ljlJXqafUVxooDZVGSmOlidJUaaY0V1ooLZVWSmuljdJWaae0VzooHZVOSmeli9JV6aZ0V3ooPZVeSm+lj9JX6af0VwYoA5VBymBliDJUGaYMV0YoI5VRymhljDJWGaeMVyYoE5VJymRlijJVmaZMV2YoM5VZymxljjJXmafMVxYoC5VFymJlibJUWaYsV1YoK5VVympljbJWWaesVzYoG5VNymYlVtmibFW2KduVHcpOZZeyW9mj7FX2KfuVA0qcclA5pBxWjihHlWPKceWEclI5pZxWzihnlXPKeSVeuaAkKBeVS8pl5YpyVbmmXFduKDeVW8pt5Y5yV7mn3FceKA+VR8pj5YnyVHmmPFdeKC+VV8pr5Y3yVklU3invlQ/KR+WT8ln5onxVvinflR/KT+WX8lv5oyQpf5V/SrISA1KAlCAVSA3SgLQgHUgPMoCMIBPIDLKArCAbyA5ygJwgF8gN8oC8AAEowAAOCEACCtCAASzgAA8EIAIJyEABAKhAAzowgAkgsIANHOACD/ggACGIQD6QHxQABUEhUBgUAUVBMVAclAAlQSlQGpQBZUE5UB5UABVBJVAZVAFVQTVQHdQANUEtUBvUAXVBPVAfNAANQSPQGDQBTUEz0By0AC1BK9AatAFtQTvQHnQAHUEn0Bl0AV1BN9Ad9AA9QS/QG/QBfUE/0B8MAAPBIDAYDAFDwTAwHIwAI8EoMBqMAWPBODAeTAATwSQwGUwBU8E0MB3MADPBLDAbzAFzwTwwHywAC8EisBgsAUvBMrAcrAArwSqwGqwBa8E6sB5sABvBJrAZxIItYCvYBraDHWAn2AV2gz1gL9gH9oMDIA4cBIfAYXAEHAXHwHFwApwEp8BpcAacBefAeRAPLoAEcBFcApfBFXAVXAPXwQ1wE9wCt8EdcBfcA/fBA/AQPAKPwRPwFDwDz8EL8BK8Aq/BG/AWJIJ34D34AD6CT+Az+AK+gm/gO/gBfoJf4Df4A5LAX/APJIMYNYWaUk2lplbTqGnVdGp6NYOaUc2kZlazqFnVbGp2NYeaU82l5lbzqHlVREVVTMVVQiVVSqVVRmVVTuVVQRVVSZVVRQWqqmqqrhqqqULVUm3VUV3VU301UEM1UvOp+dUCakG1kFpYLaIWVYupxdUSakm1lFpaLaOWVcup5dUKakW1klpZraJWVaup1dUaak21llpbraPWVeup9dUGakO1kdpYbaI2VZupzdUWaku1ldpabaO2Vdup7dUOake1k9pZ7aJ2Vbup3dUeak+1l9pb7aP2Vfup/dUB6kB1kDpYHaIOVYepw9UR6kh1lDpaHaOOVcep49UJ6kR1kjpZnaJOVaep09UZ6kx1ljpbnaPOVeep89UF6kJ1kbpYXaIuVZepy9UV6kp1lbpaXaOuVdep69UN6kZ1k7pZjVW3qFvVbep2dYe6U92l7lb3qHvVfep+9YAapx5UD6mH1SPqUfWYelw9oZ5UT6mn1TPqWfWcel6NVy+oCepF9ZJ6Wb2iXlWvqdfVG+pN9ZZ6W72j3lXvqffVB+pD9ZH6WH2iPlWfqc/VF+pL9ZX6Wn2jvlUT1Xfqe/WD+lH9pH5Wv6hf1W/qd/WH+lP9pf5W/6hJ6l/1n5qsxmgptJRaKi21lkZLq6XT0msZtIxaJi2zlkXLqmXTsms5tJxaLi23lkfLqyEaqmEaniJGIzVKozVGYzVO4zVBEzVJkzVFA5qqaZquGZqpQc3SbM3RXM3TfC3QQi3S8mn5tQJaQa2QVlgrohXVimnFtRJaSa2UVloro5XVymnltQpaRa2SVlmrolXVqmnVtRpaTa2WVluro9XV6mn1tQZaQ62R1lhrojXVmmnNtRZaS62V1lpro7XV2mnttQ5aR62T1lnronXVumndtR5aT62X1lvro/XV+mn9tQHaQG2QNlgbog3VhmnDtRHaSG2UNlobo43VxmnjtQnaRG2SNlmbok3VpmnTtRnaTG2WNlubo83V5mnztQXaQm2Rtlhboi3VlmnLtRXaSm2Vtlpbo63V1mnrtQ3aRm2TtlmL1bZoW7Vt2nZth7ZT26Xt1vZoe7V92n7tgBanHdQOaYe1I9pR7Zh2XDuhndROaae1M9pZ7Zx2XovXLmgJ2kXtknZZu6Jd1a5p17Ub2k3tlnZbu6Pd1e5p97UH2kPtkfZYe6I91Z5pz7UX2kvtlfZae6O91RK1d9p77YP2Ufukfda+aF+1b9p37Yf2U/ul/db+aEnaX+2flqzF6Cn0lHoqPbWeRk+rp9PT6xn0jHomPbOeRc+qZ9Oz6zn0nHouPbeeR8+rIzqqYzquEzqpUzqtMzqrczqvC7qoS7qsKzrQVV3Tdd3QTR3qlm7rju7qnu7rgR7qkZ5Pz68X0AvqhfTCehG9qF5ML66X0EvqpfTSehm9rF5OL69X0CvqlfTKehW9ql5Nr67X0GvqtfTaeh29rl5Pr6830BvqjfTGehO9qd5Mb6630FvqrfTWehu9rd5Ob6930DvqnfTOehe9q95N76730HvqvfTeeh+9r95P768P0Afqg/TB+hB9qD5MH66P0Efqo/TR+hh9rD5OH69P0Cfqk/TJ+hR9qj5Nn67P0Gfqs/TZ+hx9rj5Pn68v0Bfqi/TF+hJ9qb5MX66v0Ffqq/TV+hp9rb5OX69v0Dfqm/TNeqy+Rd+qb9O36zv0nfoufbe+R9+r79P36wf0OP2gfkg/rB/Rj+rH9OP6Cf2kfko/rZ/Rz+rn9PN6vH5BT9Av6pf0y/oV/ap+Tb+u39Bv6rf02/od/a5+T7+vP9Af6o/0x/oT/an+TH+uv9Bf6q/01/ob/a2eqL/T3+sf9I/6J/2z/kX/qn/Tv+s/9J/6L/23/kdP0v/q//RkPcZIYaQ0UhmpjTRGWiOdkd7IYGQ0MhmZjSxGViObkd3IYeQ0chm5jTxGXgMxUAMzcIMwSIMyaIMxWIMzeEMwREMyZEMxgKEamqEbhmEa0LCM/73/NzWaGc2MFkZLo5VRIGWRlG2NtkZ7o73R0ehodDa6GF2NbkZ3o4fRw+hl9DZ6G32NfkZ/Y4Ax0BhkDDaGGEONYcYwY4QxwhhljDLGGGOMccY4Y4IxwZhkTDKmGFOMacY0Y4Yxw5hlzDLmGHOMecY8Y4GxwFhkLDKWGEuMZcYyY4WxwlhlrDLWGGuMdcY6Y4OxwdhkbDJijVhjq7HV2G5sN3YaO43dxm5jr7HX2G/sN+KMOOOQccg4YhwxjhnHjBPGCeOUcco4Y5wxzhnnjHgj3kgwEoxLxiXjinHFuGZcM24YN4xbxi3jjnHHuGfcMx4YD4xHxiPjifHEeGY8N14YL41XxmvjjfHWSDTeGe+ND8ZH45Px2fhifDW+Gd+NH8ZP45fx2/hjJBl/jX9GsvH/5/6ibComMFVTM3XTME0TmpZpm47pmp7pm4EZmpGZz8xvFjALmoXMwmYRs6hZzCxuljBLmqXM0mYZs6xZzixvVjArmpXMymYVs6pZzaxu1jBrmrXM2mYds65Zz6xvNjAbmo3MxmYTs6nZzGxutjBbmq3M1mYbs63ZzmxvdjA7mp3MzmYXs6vZzexu9jB7mr3M3mYfs6/Zz+xvDjAHmoPMweYQc6g5zBxujjBHmqPM0eYYc6w5zhxvTjAnmpPMyeYUc6o5zZxuzjBnmrPM2eYcc645z5xvLjAXmovMxeYSc6m5zFxurjBXmqvM1eYac625zlxvbjA3mpvMzWasucXcam4zt5s7zJ3mLnO3ucfca+4z95sHzDjzoHnIPGweMY+ax8zj5gnzpHnKPG2eMc+a58zzZrx5wUwwL5qXzMvmFfOqec28bt4wb5q3zNvmHfOuec+8bz4wH5qPzMfmE/Op+cx8br4wX5qvzNfmG/OtmWi+M9+bH8yP5ifzs/nF/Gp+M7+bP8yf5i/zt/nHTDL/mv/MZDMGpoApYSqYGqaBaWE6mB5mgBlhJpgZZoFZYTaYHeaAOWEumBvmgXkhAlGIQRwSkIQUpCEDWchBHgpQhBKUoQIBVKEGdWhAE0JoQRs60IUe9GEAQxjBfDA/LAALwkKwMCwCi8JisDgsAUvCUrA0LAPLwnKwPKwAK8JKsDKsAqvCarA6rAFrwlqwNqwD68J6sD5sABvCRrAxbAKbwmawOWwBW8JWsDVsA9vCdrA97AA7wk6wM+wCu8JusDvsAXvCXrA37AP7wn6wPxwAB8JBcDAcAofCYXA4HAFHwlFwNBwDx8JxcDycACfCSXAynAKnwmlwOpwBZ8JZcDacA+fCeXA+XAAXwkVwMVwCl8JlcDlcAVfCVXA1XAPXwnVwPdwAN8JNcDOMhVvgVrgNboc74E64C+6Ge+BeuA/uhwdgHDwID8HD8Ag8Co/B4/AEPAlPwdPwDDwLz8HzMB5egAnwIrwEL8Mr8Cq8Bq/DG/AmvAVvwzvwLrwH78MH8CF8BB/DJ/ApfAafwxfwJXwFX8M38C1MhO/ge/gBfoSf4Gf4BX6F3+B3+AP+hL/gb/gHJsG/8B9MhjFWCiullcpKbaWx0lrprPRWBiujlcnKbGWxslrZrOxWDiunlcvKbeWx8lqIhVqYhVuERVqURVuMxVqcxVuCJVqSJVuKBSzV0izdMizTgpZl2ZZjuZZn+VZghVZk5bPyWwWsglYhq7BVxCpqFbOKWyWsklYpq7RVxiprlbPKWxWsilYlq7JVxapqVbOqWzWsmlYtq7ZVx6pr1bPqWw2shlYjq7HVxGpqNbOaWy2sllYrq7XVxmprtbPaWx2sjlYnq7PVxepqdbO6Wz2snlYvq7fVx+pr9bP6WwOsgdYga7A1xBpqDbOGWyOskdYoa7Q1xhprjbPGWxOsidYka7I1xZpqTbOmWzOsmdYsa7Y1x5przbPmWwushdYia7G1xFpqLbOWWyusldYqa7W1xlprrbPWWxusjdYma7MVa22xtlrbrO3WDmuntcvabe2x9lr7rP3WASvOOmgdsg5bR6yj1jHruHXCOmmdsk5bZ6yz1jnrvBVvXbASrIvWJeuydcW6al2zrls3rJvWLeu2dce6a92z7lsPrIfWI+ux9cR6aj2znlsvrJdW8tCYmDfWWyvReme9tz5YH61P1mfri/XV+mZ9t35YP61f1m/rj5Vk/bX+WclWjJ3CTmmnslPbaey0djo7vZ3BzmhnsjPbWeysdjY7u53DzmnnsnPbeey8NmKjNmbjNmGTNmXTNmOzNmfztmCLtmTLtmIDW7U1W7cN27Shbdm27diu7dm+HdihHdn57Px2AbugXcgubBexi9rF7OJ2CbukXcoubZexy9rl7PJ2BbuiXcmubFexq9rV7Op2DbumXcuubdex69r17Pp2A7uh3chubDexm9rN7OZ2C7ul3cpubbex29rt7PZ2B7uj3cnubHexu9rd7O52D7un3cvubfex+9r97P72AHugPcgebA+xh9rD7OH2CHukPcoebY+xx9rj7PH2BHuiPcmebE+xp9rT7On2DHumPcuebc+x59rz7Pn2AnuhvchebC+xl9rL7OX2Cnulvcpeba+x19rr7PX2BnujvcnebMfaW+yt9jZ7u73D3mnvsnfbe+y99j57v33AjrMP2ofsw/YR+6h9zD5un7BP2qfs0/YZ+6x9zj5vx9sX7AT7on3Jvmxfsa/a1+zr9g37pn3Lvm3fse/a9+z79gP7of3Ifmw/sZ/az+zn9gv7pf3Kfm2/sd/aifY7+739wf5of7I/21/sr/Y3+7v9w/5p/7J/23/sJPuv/c9OtmOcFE5KJ5WT2knjpHXSOemdDE5GJ5OT2cniZHWyOdmdHE5OJ5eT28nj5HUQB3UwB3cIh3Qoh3YYh3U4h3cER3QkR3YUBziqozm6YzimAx3LsR3HcR3P8Z3ACZ3Iyefkdwo4BZ1CTmGniFPUKeYUd0o4JZ1STmmnjFPWKeeUdyo4FZ1KTmWnilPVqeZUd2o4NZ1aTm2njlPXqefUdxo4DZ1GTmOnidPUaeY0d1o4LZ1WTmunjdPWaee0dzo4HZ1OTmeni9PV6eZ0d3o4PZ1eTm+nj9PX6ef0dwY4A51BzmBniDPUGeYMd0Y4I51RzmhnjDPWGeeMdyY4E51JzmRnijPVmeZMd2Y4M51ZzmxnjjPXmefMdxY4C51FzmJnibPUWeYsd1Y4K51VzmpnjbPWWeesdzY4G51NzmYn1tnibHW2OdudHc5OZ5ez29nj7HX2OfudA06cc9A55Bx2jjhHnWPOceeEc9I55Zx2zjhnnXPOeSfeueAkOBedS85l54pz1bnmXHduODedW85t545z17nn3HceOA+dR85j54nz1HnmPHdeOC+dV85r543z1kl03jnvnQ/OR+eT89n54nx1vjnfnR/OT+eX89v54yQ5f51/TrIT46ZwU7qp3NRuGjetm85N72ZwM7qZ3MxuFrdt9mxudjeHm9PN5eZ287h5XcRFXczFXcIlXcqlXcZlXc7lXcEVXcmVXcUFrupqru4arulC13Jt13Fd13N9N3BDN3LzufndAm5Bt5Bb2C3iFnWLucXdEm5Jt5Rb2i3jlnXLueXdCm5Ft5Jb2a3iVnWrudXdGm5Nt5Zb263j1nXrufXdBm5Dt5Hb2G3iNnWbuc3dFm5Lt5Xb2m3jtnXbue3dDm5Ht5Pb2e3idnW7ud3dHm5Pt5fb2+3j9nX7uf3dAe5Ad5A72B3iDnWHucPdEe5Id5Q72h3jjnXHuePdCe5Ed5I72Z3iTnWnudPdGe5Md5Y7253jznXnufPdBe5Cd5G72F3iLnWXucvdFe5Kd5W72l3jrnXXuevdDe5Gd5O72Y11t7hb3W3udneHu9Pd5e5297h73X3ufveAG+cedA+5h90j7lH3mHvcPeGedE+5p90z7ln3nHvejXcvuAnuRfeSe9m94l51r7nX3RvuTfeWe9u9495177n33QfuQ/eR+9h94j51n7nP3RfuS/eV+9p94751E9137nv3g/vR/eR+dr+4X91v7nf3h/vT/eX+dv+4Se5f95+b7MZ4KbyUXiovtZfGS+ul89J7GbyMXiYvs5fFy+pl87J7ObycXi4vt5fHy+shHuphHu4RHulRHu0xHutxHu8JnuhJnuwpHvBUT/N0z/BMD3qWZ3uO53qe53uBF3qRl8/L7xXwCnqFvMJeEa+oV8wr7pXwSnqlvNJeGa+sV84r71XwKnqVvMpeFa9qckxMjFfDq+nV8mp7dby6Xj2vvtfAa+g18hp7TbymXjOvudfCa+m18lp7bby2XjuvvdfB6+h18jp7XbyuXjevu9fD6+n18np7fby+Xj+vvzfAG+gN8gZ7Q7yh3jBvuDfCG+mN8kZ7Y7yx3jhvvDfBm+hN8iZ7U7yp3jRvujfDm+nN8mZ7c7y53jxvvrfAW+gt8hZ7S7yl3jJvubfCW+mt8lZ7a7y13jpvvbfB2+ht8jZ7sd4Wb6u3zdvu7fB2eru83d4eb6+3z9vvHfDivIPeIe+wd8Q76h3zjnsnvJPeKe+0d8Y7653zznvx3gUvwbvoXfIue1e8q94177p3w7vp3fJue3e8u9497773wHvoPfIee0+8p94z77n3wnvpvfJee2+8t16i9857733wPnqfvM/eF++r98377v3wfnq/vN/eHy/J++v985K9GD+Fn9JP5af20/hp/XR+ej+Dn9HP5Gf2s/hZ/Wx+dj+Hn9PP5ef28/h5fcRHfczHfcInfcqnfcZnfc7nfcEXY2JiYnzFB77qa77uG77pQ9/ybd/xXd/zfT/wQz/y8/n5/QJ+Qb+QX9gv4hf1i/nF/RJ+Sb+UX9ov45f1y/nl/Qp+Rb+SX9mv4lf1q/nV/Rp+Tb+WX9uv49f16/n1/QZ+Q7+R39hv4jf1m/nN/RZ+S7+V39pv47f12/nt/Q5+R7+T39nv4nf1u/nd/R5+T7+X39vv4/f1+/n9/QH+QH+QP9gf4g/1h/nD/RH+SH+UP9of44/1x/nj/Qn+RH+SP9mf4k/1p/nT/Rn+TH+WP9uf48/15/nz/QX+Qn+Rv9hf4i/1l/nL/RX+Sn+Vv9pf46/11/nr/Q3+Rn+Tv9mP9bf4W/1t/nZ/h7/T3+Xv9vf4e/19/n7/gB/nH/QP+Yf9I/5R/5h/3D/hn/RP+af9M/5Z/5x/3o/3L/gJ/kX/kn/Zv+Jf9a/51/0b/k3/ln/bv+Pf9e/59/0H/kP/kf/Yf+I/9Z/5z/0X/kv/lf/af+O/9RP9d/57/4P/0f/kf/a/+F/9b/53/4f/0//l//b/+En+X/+fn+zHBCmClEGqIHWQJkgbpAvSBxmCjEGmIHOQJcgaZAuyBzmCnEGuIHeQJ8gbIAEaYAEeEAEZUAEdMAEbcAEfCIEYSIEcKAEI1EAL9MAIzAAGVmAHTuAGXuAHQRAGUZAvyB8UCAoGhYLCQZGgaFAsKB6UCEoGpYLSQZmgbFAuKB9UCCoGlYLKQZWgalAtqB7UCGoGtYLaQZ2gblAvqB80CBoGjYLGQZOgadAsaB60CFoGrYLWQZugbdAuaB90CDoGnYLOQZega9At6B70CHoGvYLeQZ+gb9Av6B8MCAYGg4LBwZBgaDAsGB6MCEYGo4LRwZhgbDAuGB9MCCYGk4LJwZRgajAtmB7MCGYGs4LZwZxgbjAvmB8sCBYGi4LFwZJgabAsWB6sCFYGq4LVwZpgbbAuWB9sCDYGm4LNQWywJdgabAu2BzuCncGuYHewJ9gb7Av2BweCuOBgcCg4HBwJjgbHguPBieBkcCo4HZwJzgbngvNBfHAhSAguBpeCy8GV4GpwLbge3AhuBreC28Gd4G5wL7gfPAgeBo+Cx8GT4GnwLHgevAheBq+C18Gb4G2QGLwL3gcfgo/Bp+Bz8CX4GnwLvgc/gp/Br+B38CdICv4G/4LkICZMEaYMU4WpwzRh2jBdmD7MEGYMM4WZwyxh1jBbmD3MEeYMc4W5wzxh3hAJ0RAL8ZAIyZAK6ZAJ2ZAL+VAIxVAK5VAJQaiGWqiHRmiGMLRCO3RCN/RCPwzCMIzCfGH+sEBYMCwUFg6LhEXDYmHxsERYMiwVlg7LhGXDcmH5sEJYMawUVg6rhFXDamH1sEZYM6wV1g7rhHXDemH9sEHYMGwUNg6bhE3DZmHzsEXYMmwVtg7bhG3DdmH7sEPYMewUdg67hF3DbmH3sEfYM+wV9g77hH3DfmH/cEA4MBwUDg6HhEPDYeHwcEQ4MhwVjg7HhGPDceH4cEI4MZwUTg6nhFPDaeH0cEY4M5wVzg7nhHPDeeH8cEG4MFwULg6XhEvDZeHycEW4MlwVrg7XhGvDdeH6cEO4MdwUbg5jwy3h1nBbuD3cEe4Md4W7wz3h3nBfuD88EMaFB8ND4eHwSHg0PBYeD0+EJ8NT4enwTHg2PBeeD+PDC2FCeDG8FF4Or4RXw2vh9fBGeDO8Fd4O74R3w3vh/fBB+DB8FD4On4RPw2fh8/BF+DJ8Fb4O34Rvw8TwXfg+/BB+DD+Fn8Mv4dfwW/g9/BH+DH+Fv8M/YVL4N/wXJocxUYooZZQqSh2lidJG6aL0UYYoY5QpyhxlibJG2aLsUY4oZ5Qryh3lifJGSIRGWIRHRERGVERHTMRGXMTHZI+JiaRIjpQIRGqkRXpkRGYEIyuyIydyIy/yoyAKoyjKF+WPCkQFo0JR4ahIVDQqFhWPSkQlo1JR6ahMVDYqF5WPKkQVo0pR5ahKVDWqFlWPakQ1o1pR7ahOVDeqF9WPGkQNo0ZR46hJ1DRqFjWPWkQto1ZR66hN1DZqF7WPOkQdo05R56hL1DXqFnWPekQ9o15R76hP1DfqF/WPBkQDo0HR4GhINDQaFg2PRkQjo1HR6GhMNDYaF42PJkQTo0nR5GhKNDWaFk2PZkQzo1nR7GhONDeaF82PFkQLo0XR4mhJtDRaFi2PVkQro1XR6mhNtDZaF62PNkQbo03R5ig22hJtjbZF26Md0c5oV7Q72hPtjfZF+6MDUVx0MDoUHY6OREejY9Hx6ER0MjoVnY7ORGejc9H5KD66ECVEF6NL0eXoSnQ1uhZdj25EN6Nb0e3oTnQ3uhfdjx5ED6NH0ePoSfQ0ehY9j15EL6NX0evoTfQ2SozeRe+jD9HH6FP0OfoSfY2+Rd+jH9HP6Ff0O/oTJUV/o39RchSTL0W+lPlS/R8s3WN3WE+jQPGkSFLbtq1j25g5k9q23aa2bdu2bdu27bvuev5fYq/97oelwFJicVg8loClwlJjabC0WDosPZYBy4hlwjJjWbCsWEosO5YDy4nlwnJjebC8WD4sP1YAK4gVwgpjRbCiWDGsOFYCK4mVwkpjZbCyWDmsPFYBq4hVwipjVbCqWDWsOlYDwzAcIzASozAaYzAW4zAeEzARkzAZUzAV0zAdMzATszAbczAX8zAfC7AQAxjEIgxhiVhNrBZWG6uD1cXqYfWxBlhDrBHWGGuCNcWaYc2xFlhLrBXWGmuDtcXaYe2xDlhHrBPWGeuCdcW6Yd2xHlhPrBfWG+uD9cX6Yf2xJGwANhAbhA3GhmBDsWHYcGwENhIbhY3GxmBjsXHYeGwCNhGbhE3GpmBTsWnYdGwGNhObhc3G5mBzsXnYfGwBthBbhC3GlmBLsWXYcmwFthJbha3G1mBrsXXYemwDthHbhG3GtmBbsW3YdmwHthPbhe3G9mB7sX3YfuwAdhA7hB3GjmBHsWPYcewEdhI7hZ3GzmBnsXPYeewCdhG7hF3GrmBXsWvYdewGdhO7hd3G7mB3sXvYfewB9hB7hD3GnmBPY59hz7EX2EvsFfYae4O9xd5h77EP2EfsE/YZ+4J9xb5h37Ef2E/sF/Yb+4P9xf5hMXgsngxPjqfAU+JxeDyegKeKicHT4GnxdHh6PAOeEc+EZ8az4FnxbHh2PAeeE8+Fx8bEJP3/7uXHC+AF8UJ4YbwIXhQvhhfHS+Al8VJ4abwMXhYvh5fHK+AV8Up4ZbwKXhWvhlfHa+AYjuMETuIUTuMMzuIczuMCLuISLuMKruIaruMGbuIWbuMO7uIe7uMBHuIAh3iEIzwRr4nXwmvjdfC6eD28Pt4Ab4g3whvjTfCmeDO8Od4Cb4m3wlvjbfC2eDu8Pd4B74h3wjvjXfCueDe8O94D74n3wnvjffC+eD+8P56ED8AH4oPwwfgQfCg+DB+Oj8BH4qPw0fgYfCw+Dh+PT8An4pPwyfgUfCo+DZ+Oz8Bn4rPw2fgcfC4+D5+PL8AX4ovwxfgSfCm+DF+Or8BX4qvw1fgafC2+Dl+Pb8A34pvwzfgWfCu+Dd+O78B34rvw3fgefC++D9+PH8AP4ofww/gR/Ch+DD+On8BP4qfw0/gZ/Cx+Dj+PX8Av4pfwy/gV/Cp+Db+O38Bv4rfw2/gd/C5+D7+PP8Af4o/wx/gT/Cn+DH+Ov8Bf4q/w1/gb/C3+Dn+Pf8A/4p/wz/gX/Cv+Df+O/8B/4r/w3/gf/C/+D48hYolkRHIiBZGSiCPiiQQiFZGaSEOkJdIR6YkMREYiE5GZyEJkJbIR2YkcRE4iF5GbyEPkJfIR+YkCREGiEFGYKEIUJYoRxYkSREmiFFGaKEOUJcoR5YkKREWiElGZqEJUJaoR1YkaBEbgBEGQBEXQBEOwBEfwhECIhETIhEKohEbohEGYhEXYhEO4hEf4RECEBCAgERGISCRqErWI2kQdoi5Rj6hPNCAaEo2IxkQToinRjGhOtCBaEq2I1kQboi3RjmhPdCA6Ep2IzkQXoivRjehO9CB6Er2I3kQfoi/Rj+hPJBEDiIHEIGIwMYQYSgwjhhMjiJHEKGI0MYYYS4wjxhMTiInEJGIyMYWYSkwjphMziJnELGI2MYeYS8wj5hMLiIXEImIxsYRYSiwjlhMriJXEKmI1sYZYS6wj1hMbiI3EJmIzsYXYSmwjthM7iJ3ELmI3sYfYS+wj9hMHiIPEIeIwcYQ4ShwjjhMniJPEKeI0cYY4S5wjzhMXiIvEJeIycYW4SlwjrhM3iJvELeI2cYe4S9wj7hMPiIfEI+Ix8YR4SjwjnhMviJfEK+I18YZ4S7wj3hMfiI/EJ+Iz8YX4SnwjvhM/iJ/EL+I38Yf4S/wjYshYMhmZnExBpiTjyHgygUxFpibTkGnJdGR6MgOZkcxEZiazkFnJbGR2MgeZk8xF5ibzkHnJfGR+sgBZkCxEFiaLkEXJYmRxsgRZkixFlibLkGXJcmR5sgJZkaxEViarkFXJamR1sgaJkThJkCRJkTTJkCzJkTwpkCIpkTKpkCqpkTppkCZpkTbpkC7pkT4ZkCEJSEhGJCITyZpkLbI2WYesS9Yj65MNyIZkI7Ix2YRsSjYjm5MtyJZkK7I12YZsS7Yj25MdyI5kJ7Iz2YXsSnYju5M9yJ5kL7I32YfsS/Yj+5NJ5AByIDmIHEwOIYeSw8jh5AhyJDmKHE2OIceS48jx5ARyIjmJnExOIaeS08jp5AxyJjmLnE3OIeeS88j55AJyIbmIXEwuIZeSy8jl5ApyJbmKXE2uIdeS68j15AZyI7mJ3ExuIbeS28jt5A5yJ7mL3E3uIfeS+8j95AHyIHmIPEweIY+Sx8jj5AnyJHmKPE2eIc+S58jz5AXyInmJvExeIa+S18jr5A3yJnmLvE3eIe+S98j75APyIfmIfEw+IZ+Sz8jn5AvyJfmKfE2+Id+S78j35AfyI/mJ/Ex+Ib+S38jv5A/yJ/mL/E3+If+S/8gYKpZKRiWnUlApqTgqnkqgUlGpqTRUWiodlZ7KQGWkMlGZqSxUVioblZ3KQeWkclG5qTxUXioflZ8qQBWkClGFqSJUUaoYVZwqQZWkSlGlqTJUWaocVZ6qQFWkKlGVqSpUVaoaVZ2qQWEUThEUSVEUTTEUS3EUTwmUSEmUTCmUSmmUThmUSVmUTTmUS3mUTwVUSAEKUhGFqESqJlWLqk3VoepS9aj6VAOqIdWIakw1oZpSzajmVAuqJdWKak21odpS7aj2VAeqI9WJ6kx1obpS3ajuVA+qJ9WL6k31ofpS/aj+VBI1gBpIDaIGU0OoodQwajg1ghpJjaJGU2OosdQ4ajw1gZpITaImU1OoqdQ0ajo1g5pJzaJmU3OoudQ8aj61gFpILaIWU0uopdQyajm1glpJraJWU2uotdQ6aj21gdpIxVKbqS3UVmobtZ3aQe2kdlG7qT3UXmoftZ86QB2kDlGHqSPUUeoYdZw6QZ2kTlGnqTPUWeocdZ66QF2kLlGXqSvUVeoadZ26Qd2kblG3qTvUXeoedZ96QD2kHlGPqSfUU+oZ9Zx6Qb2kXlGvqTfUW+od9Z76QH2kPlGfqS/UV+ob9Z36Qf2kflG/qT/UX+ofFUPH0sno5HQKOiUdR8fTCXQqOjWdhk5Lp6PT0xnojHQmOjOdhc5KZ6Oz0znonHQuOjedh85L56Pz0wXognQhujBdhC5KF6OL0yXoknQpujRdhi5Ll6PL0xXoinQlujJdha5KV6Or0zVojMZpgiZpiqZphmZpjuZpgRZpiZZphVZpjdZpgzZpi7Zph3Zpj/bpgA5pQEM6ohGdSNeka9G16Tp0XboeXZ9uQDekG9GN6SZ0U7oZ3ZxuQbekW9Gt6TZ0W7od3Z7uQHekO9Gd6S50V7ob3Z3uQfeke9G96T50X7of3Z9OogfQA+lB9GB6CD2UHkYPp0fQI+lR9Gh6DD2WHkePpyfQE+lJ9GR6Cj2VnkZPp2fQM+lZ9Gx6Dj2XnkfPpxfQC+lF9GJ6Cb2UXkYvp1fQK+lV9Gp6Db2WXkevpzfQG+lN9GZ6C72V3kZvp3fQO+ld9G56D72X3kfvpw/QB+lD9GH6CH2UPkYfp0/QJ+lT9Gn6DH2WPkefpy/QF+lL9GX6Cn2VvkZfp2/QN+lb9G36Dn2Xvkffpx/QD+lH9GP6Cf2UfkY/p1/QL+lX9Gv6Df2Wfke/pz/QH+lP9Gf6C/2V/kZ/p3/QP+lf9G/6D/2X/kfHMLFMMiY5k4JJycQx8UwCk4pJzaRh0jLpmPRMBiYjk4nJzGRhsjLZmOxMDiYnk4vJzeRh8jL5mPxMAaYgU4gpzBRhijLFmOJMCaYkU4opzZRhyjLlmPJMBaYiU4mpzFRhqjLVmOpMDQZjcIZgSIZiaIZhWIZjeEZgREZiZEZhVEZjdMZgTMZibMZhXMZjfCZgQgYwkIkYxCQyNZlaTG2mDlOXqcfUZxowDZlGTGOmCdOUacY0Z1owLZlWTGumDdOWace0ZzowHZlOTGemC9OV6cZ0Z3owPZleTG+mD9OX6cf0Z5KYAcxAZhAzmBnCDGWGMcOZEcxIZhQzmhnDjGXGMeOZCcxEZhIzmZnCTGWmMdOZGcxMZhYzm5nDzGXmMfOZBcxCZhGzmFnCLGWWMcuZFcxKZhWzmlnDrGXWMeuZDcxGZhOzmdnCbGW2MduZHcxOZhezm9nD7GX2MfuZA8xB5hBzmDnCHGWOMceZE8xJ5hRzmjnDnGXOMeeZC8xF5hJzmbnCXGWuMdeZG8xN5hZzm7nD3GXuMfeZB8xD5hHzmHnCPGWeMc+ZF8xL5hXzmnnDvGXeMe+ZD8xH5hPzmfnCfGW+Md+ZH8xP5hfzm/nD/GX+MTFsLJuMTc6mYFOycWw8m8CmYlOzadi0bDo2PZuBzchmYjOzWdisbDY2O5uDzcnmYnOzedi8bD42P1uALcgWYguzRdiibDG2OFuCLcmWYkuzZdiybDm2PFuBrchWYiuzVdiqbDU2eUwNFmNxlmBJlmJplmFZlmN5VmBFVmJlVmFVVmN11mBN1mJt1mFd1mN9NmBDFrCQjVjEJrI12VpsbbYOW5etx9ZnG7AN2UZsY7YJ25RtxjZnW7At2VZsa7YN25Ztx7ZnO7Ad2U5sZ7YL25XtxnZne7A92V5sb7YP25ftx/Znk9gB7EB2EDuYHcIOZYexw9kR7Eh2FDuaHcOOZcex49kJ7ER2EjuZncJOZaex09kZ7Ex2FjubncPOZeex89kF7EJ2EbuYXcIuZZexy9kV7Ep2FbuaXcOuZdex69kN7EZ2E7uZ3cJuZbex29kd7E52F7ub3cPuZfex+9kD7EH2EHuYPcIeZY+xx9kT7En2FHuaPcOeZc+x59kL7EX2EnuZvcJeZa+x19kb7E32FnubvcPeZe+x99kH7EP2EfuYfcI+ZZ+xz9kX7Ev2FfuafcO+Zd+x79kP7Ef2E/uZ/cJ+Zb+x39kf7E/2F/ub/cP+Zf+xMVwsl4xLzqXgUnJxXDyXwKXiUnNpuLRcOi49l4HLyGXiMnNZuKxcNi47l4PLyeXicnN5uLxcPi4/V4AryBXiCnNFuKJcMa44V4IryZXiSnNluLJcOa48V4GryFXiKnNVuKpcNa46V4PDOJwjOJKjOJpjOJbjOJ4TOJGTOJlTOJXTOJ0zOJOzOJtzOJfzOJ8LuJADHOQiDnGJXE2uFlebq8PV5epx9bkGXEOuEdeYa8I15ZpxzbkWXEuuFdeaa8O15dpx7bkOXEeuE9c5ISYmhuvGded6cD25Xlxvrg/Xl+vH9eeSuAHcQG4QN5gbwg3lhnHDuRHcSG4UN5obw43lxnHjuQncRG4SN5mbwk3lpnHTuRncTG4WN5ubw83l5nHzuQXcQm4Rt5hbwi3llnHLuRXcSm4Vt5pbw63l1nHruQ3cRm4Tt5nbwm3ltnHbuR3cTm4Xt5vbw+3l9nH7uQPcQe4Qd5g7wh3ljnHHuRPcSe4Ud5o7w53lznHnuQvcRe4Sd5m7wl3lrnHXuRvcTe4Wd5u7w93l7nH3uQfcQ+4R95h7wj3lnnHPuRfcS+4V95p7w73l3nHvuQ/cR+4T95n7wn3lvnHfuR/cT+4X95v7w/3l/nExfCyfjE/Op+BT8nF8PJ/Ap+JT82n4tHw6Pj2fgc/IZ+Iz81n4rHw2Pjufg8/J5+Jz83n4vHw+Pj9fgC/IF+IL80X4onwxvjhfgi/Jl+JL82X4snw5vjxfga/IV+Ir81X4qnw1vjpfg8d4nCd4kqd4mmd4lud4nhd4kZd4mVd4ldd4nTd4k7d4m3d4l/d4nw/4kAc85CMe8Yl8Tb4WX5uvw9fl6/H1+QZ8Q74R35hvwjflm/HN+RZ8S74V35pvw7fl2/Ht+Q58R74T35nvwnflu/Hd+R58T74X35vvw/fl+/H9+SR+AD+QH8QP5ofwQ/lh/HB+BD+SH8WP5sfwY/lx/Hh+Aj+Rn8RP5qfwU/lp/HR+Bj+Tn8XP5ufwc/l5/Hx+Ab+QX8Qv5pfwS/ll/HJ+Bb+SX8Wv5tfwa/l1/Hp+A7+R38Rv5rfwW/lt/HZ+B7+T38Xv5vfwe/l9/H7+AH+QP8Qf5o/wR/lj/HH+BH+SP8Wf5s/wZ/lz/Hn+An+Rv8Rf5q/wV/lr/HX+Bn+Tv8Xf5u/wd/l7/H3+Af+Qf8Q/5p/wT/ln/HP+Bf+Sf8W/5t/wb/l3/Hv+A/+R/8R/5r/wX/lv/Hf+B/+T/8X/5v/wf/l/fIwQKyQTkgsphJRCnBAvJAiphNRCGiGtkE5IL2QQMgqZhMxCFiGrkE3ILuQQcgq5hNxCHiGvkE/ILxQQCgqFhMJCEaGoUEwoLpQQSgqlhNJCGaGsUE4oL1QQKgqVhMpCFaGqUE2oLtQQMAEXCIEUKIEWGIEVOIEXBEEUJEEWFEEVNEEXDMEULMEWHMEVPMEXAiEUgACFSEBColBTqCXUFuoIdYV6Qn2hgdBQaCQ0FpoITYVmQnOhhdBSaCW0FtoIbYV2Qnuhg9BR6CR0FroIXYVuQnehh9BT6CX0FvoIfYV+Qn8hSRggDBQGCYOFIcJQYZgwXBghjBRGCaOFMcJYYZwwXpggTBQmCZOFKcJUYZowXZghzBRmCbOFOcJcYZ4wX1ggLBQWCYuFJcJSYZmwXFghrBRWCauFNcJaYZ2wXtggbBQ2CZuFLcJWYZuwXdgh7BR2CbuFPcJeYZ+wXzggHBQOCYeFI8JR4ZhwXDghnBROCaeFM8JZ4ZxwXrggXBQuCZeFK8JV4ZpwXbgh3BRuCbeFO8Jd4Z5wX3ggPBQeCY+FJ8JT4ZnwXHghvBReCa+FN8Jb4Z3wXvggfBQ+CZ+FL8JX4ZvwXfgh/BR+Cb+FP8Jf4Z8QI8aKycTkYgoxpRgnxosJYioxtZhGTCumE9OLGcSMYiYxs5hFzCpmE7OLOcScYi4xt5hHzCvmE/OLBcSCYiGxsFhELCoWE4uLJcSSYimxtFhGLCuWE8uLFcSKYiWxslhFrCpWE6uLNURMxEVCJEVKpEVGZEVO5EVBFEVJlEVFVEVN1EVDNEVLtEVHdEVP9MVADEUgQjESkZgo1hRribXFOmJdsZ5YX2wgNhQbiY3FJmJTsZnYXGwhthRbia3FNmJbsZ3YXuwgdhQ7iZ3FLmJXsZvYXewh9hR7ib3FPmJfsZ/YX0wSB4gDxUHiYHGIOFQcJg4XR4gjxVHiaHGMOFYcJ44XJ4gTxUniZHGKOFWcJk4XZ4gzxVnibHGOOFecJ84XF4gLxUXiYnGJuFRcJi4XV4grxVXianGNuFZcJ64XN4gbxU3iZnGLuFXcJm4Xd4g7xV3ibnGPuFfcJ+4XD4gHxUPiYfGIeFQ8Jh4XT4gnxVPiafGMeFY8J54XL4gXxUviZfGKeFW8Jl4Xb4g3xVvibfGOeFe8J94XH4gPxUfiY/GJ+FR8Jj4XX4gvxVfia/GN+FZ8J74XP4gfxU/iZ/GL+FX8Jn4Xf4g/xV/ib/GP+Ff8J8ZIsVIyKbmUQkopxUnxUoKUSkotpZHSSumk9FIGKaOUScosZZGyStmk7FIOKaeUS8ot5ZHySvmk/FIBqaBUSCosFZGKSsWk4lIJqaRUSiotlZHKSuWk8lIFqaJUSaosVZGqStWk6lINCZNwiZBIiZJoiZFYiZN4SZBESZJkSZFUSZN0yZBMyZJsyZFcyZN8KZBCCUhQiiQkJUo1pVpSbamOVFeqJ9WXGkgNpUZSY6mJ1FRqJjWXWkgtpVZSa6mN1FZqJ7WXOkgdpU5SZ6mL1FXqJnWXekg9pV5Sb6mP1FfqJ/WXkqQB0kBpkDRYGiINlYZJw6UR0khplDRaGiONlcZJ46UJ0kRpkjRZmiJNlaZJ06UZ0kxpljRbmiPNleZJ86UF0kJpkbRYWiItlZZJy6UV0kpplbRaWiOtldZJ66UN0kZpk7RZ2iJtlbZJ26Ud0k5pl7Rb2iPtlfZJ+6UD0kHpkHRYOiIdlY5Jx6UT0knplHRaOiOdlc5J56UL0kXpknRZuiJdla5J16Ub0k3plnRbuiPdle5J96UH0kPpkfRYeiI9lZ5Jz6UX0kvplfRaeiO9ld5J76UP0kfpk/RZ+iJ9lb5J36Uf0k/pl/Rb+iP9lf5JMXKsnExOLqeQU8pxcrycIKeSU8tp5LRyOjm9nEHOKGeSM8tZ5KxyNjm7nEPOKeeSc8t55LxyPjm/XEAuKBeSC8tF5KJyMbm4XEIuKZeSS8tl5LJyObm8XEGuKFeSK8tV5KpyNbm6XEPGZFwmZFKmZFpmZFbmZF4WZFGWZFlWZFXWZF02ZFO2ZFt2ZFf2ZF8O5FAGMpQjGcmJck25llxbriPXlevJ9eUGckO5kdxYbiI3lZvJzeUWcku5ldxabiO3ldvJ7eUOcke5k9xZ7iJ3lbvJ3eUeck+5l9xb7iP3lfvJ/eUkeYA8UB4kD5aHyEPlYfJweYQ8Uh4lj5bHyGPlcfJ4eYI8UZ4kT5anyFPlafJ0eYY8U54lz5bnyHPlefJ8eYG8UF4kL5aXyEvlZfJyeYW8Ul4lr5bXyGvldfJ6eYO8Ud4kb5a3yFvlbfJ2eYe8U94l75b3yHvlffJ++YB8UD4kH5aPyEflY/Jx+YR8Uj4ln5bPyGflc/J5+YJ8Ub4kX5avyFfla/J1+YZ8U74l35bvyHfle/J9+YH8UH4kP5afyE/lZ/Jz+YX8Un4lv5bfyG/ld/J7+YP8Uf4kf5a/yF/lb/J3+Yf8U/4l/5b/yH/lf3KMEqskU5IrKZSUSpwSryQoqZTUSholrZJOSa9kUDIqmZTMShYlq5JNya7kUHIquZTcSh4lr5JPya8UUAoqhZTCShGlqFKsXnGlhFJSKaWUVsooZZVySnmlglJRqaRUVqooVZVqSnWlhoIpuEIopEIptMIorMIpvCIooiIpsqIoqqIpumIopmIptuIoruIpvhIooQIUqEQKUhKVmkotpbZSR6mr1FPqKw2UhkojpbHSRGmqNFOaKy2UlkorpbXSRmmrtFPaKx2UjkonpbPSRemqdFO6Kz2UnkovpbfSR+mr9FP6K0nKAGWgMkgZrAxRhirDlOHKCGWkMkoZrYxRxirjlPHKBGWiMkmZrExRpirTlOnKDGWmMkuZrcxR5irzlPnKAmWhskhZrCxRlirLlOXKCmWlskpZraxR1irrlPXKBmWjsknZrGxRtirblO3KDmWnskvZrexR9ir7lP3KAeWgckg5rBxRjirHlOPKCeWkcko5rZxRzirnlPPKBeWickm5rFxRrirXlOvKDeWmcku5rdxR7ir3lPvKA+Wh8kh5rDxRnirPlOfKC+Wl8kp5rbxR3irvlPfKB+Wj8kn5rHxRvirflO/KD+Wn8kv5rfxR/ir/lBg1Vk2mJldTqCnVODVeTVBTqanVNGpaNZ2aXs2gZlQzqZnVLGpWNZuaXc2h5lRzqbnVPGpeNZ+aXy2gFlQLqYXVImpRtZhaXC2hllRLqaXVMmpZtZxaXq2gVlQrqZXVKmpVtZpaXa2hYiquEiqpUiqtMiqrciqvCqqoSqqsKqqqaqquGqqpWqqtOqqreqqvBmqoAhWqkYrURLWmWkutrdZR66r11PpqA7Wh2khtrDZRm6rN1OZqC7Wl2kptrbZR26rt1PZqB7Wj2kntrHZRu6rd1O5qD7Wn2kvtrfZR+6r91P5qkjpAHagOUgerQ9Sh6jB1uDpCHamOUkerY9Sx6jh1vDpBnahOUierU9Sp6jR1ujpDnanOUmerc9S56jx1vrpAXaguUherS9Sl6jJ1ubpCXamuUlera9S16jp1vbpB3ahuUjerW9St6jZ1u7pD3anuUnere9S96j51v3pAPageUg+rR9Sj6jH1uHpCPameUk+rZ9Sz6jn1vHpBvaheUi+rV9Sr6jX1unpDvaneUm+rd9S76j31vvpAfag+Uh+rT9Sn6jP1ufpCfam+Ul+rb9S36jv1vfpB/ah+Uj+rX9Sv6jf1u/pD/an+Un+rf9S/6j81RovVkmnJtRRaSi1Oi9cStFRaai2NllZLp6XXMmgZtUxaZi2LllXLpmXXcmg5tVxabi2PllfLp+XXCmgFtUJaYa2IVlQrphXXSmgltVJaaa2MVlYrp5XXKmgVtUpaZa2KVlWrplXXamiYhmuERmqURmuMxmqcxmuCJmqSJmuKpmqapmuGZmqWZmuO5mqe5muBFmpAg1qkIS1Rq6nV0mprdbS6Wj2tvtZAa6g10hprTbSmWjOtudZCa6m10lprbbS2WjutvdZB66h10jprXbSuWjetu9ZD66n10nprfbS+Wj+tv5akDdAGaoO0wdoQbag2TBuujdBGaqO00doYbaw2ThuvTdAmapO0ydoUbao2TZuuzdBmarO02docba42T5uvLdAWaou0xdoSbam2TFuurdBWaqu01doaba22TluvbdA2apu0zdoWbau2Tduu7dB2aru03doeba+2T9uvHdAOaoe0w9oR7ah2TDuundBOaqe009oZ7ax2TjuvXdAuape0y9oV7ap2Tbuu3dBuare029od7a52T7uvPdAeao+0x9oT7an2THuuvdBeaq+019ob7a32TnuvfdA+ap+0z9oX7av2Tfuu/dB+ar+039of7a/2T4vRY/VkenI9hZ5Sj9Pj9QQ9lZ5aT6On1dPp6fUMekY9k55Zz6Jn1bPp2fUcek49l55bz6Pn1fPp+fUCekG9kF5YL6IX1YvpxfUSekm9lF5aL6OX1cvp5fUKekW9kl5Zr6JX1avp1fUaOqbjOqGTOqXTOqOzOqfzuqCLuqTLuqKruqbruqGbuqXbuqO7uqf7eqCHOtChHulIT9Rr6rX02nodva5eT6+vN9Ab6o30xnoTvaneTG+ut9Bb6q301nobva3eTm+vd9A76p30znoXvaveTe+u99B76r303nofva/eT++vJ+kD9IH6IH2wPkQfqg/Th+sj9JH6KH20PkYfq4/Tx+sT9In6JH2yPkXnYqbp0/UZ+kx9lj5bn6PP1efp8/UF+kJ9kb5YX6Iv1Zfpy/UV+kp9lb5aX6Ov1dfp6/UN+kZ9k75Z36Jv1bfp2/Ud+k59l75b36Pv1ffp+/UD+kH9kH5YP6If1Y/px/UT+kn9lH5aP6Of1c/p5/UL+kX9kn5Zv6Jf1a/p1/Ub+k39ln5bv6Pf1e/p9/UH+kP9kf5Yf6I/1Z/pz/UX+kv9lf5af6O/1d/p7/UP+kf9k/5Z/6J/1b/p3/Uf+k/9l/5b/6P/1f/pMUaskcxIbqQwUhpxRryRYKQyUhtpjLRGOiO9kcHIaGQyMhtZjKxGNiO7kcPIaeQycht5jLxGPiO/UcAoaBQyChtFjKJGMaO4UcIoaZQyShtljLJGOaO8UcGoaFQyKhtVjKpGNaO6UcPADNwgDNKgDNpgDNbgDN4QDNGQDNlQDNXQDN0wDNOwDNtwDNfwDN8IjNAABjQiAxmJRk2jllHbqGPUNeoZ9Y0GRkOjkdHYaGI0NZoZzY0WRkujldHaaGO0NdoZ7Y0ORkejk9HZ6GJ0NboZ3Y0eRk+jl9Hb6GP0NfoZ/Y0kY4Ax0BhkDDaGGEONYcZwY4Qx0hhljDbGGGONccZ4Y4Ix0ZhkTDamGFONacZ0Y4Yx05hlzDbmGHONecZ8Y4Gx0FhkLDaWGEuNZcZyY4Wx0lhlrDbWGGuNdcZ6Y4Ox0dhkbDa2GFuNbcZ2Y4ex09hl7Db2GHuNfcZ+44Bx0DhkHDaOGEeNY8Zx44Rx0jhlnDbOGGeNc8Z544Jx0bhkXDauGFeNa8Z144Zx07hl3DbuGHeNe8Z944Hx0HhkPDaeGE+NZ8Zz44Xx0nhlvDbeGG+Nd8Z744Px0fhkfDa+GF+Nb8Z344fx0/hl/Db+GH+Nf0aMGWsmM5ObKcyUZpwZbyaYqczUZhozrZnOTG9mMDOamczMZhYzq5nNzG7mMHOauczcZh4zr5nPzG8WMAuahczCZhGzqFnMLG6WMEuapczSZhmzrFnOLG9WMCualczKZhWzqlnNrG7WMDETNwmTNCmTNhmTNTmTNwVTNCVTNhVTNTVTNw3TNC3TNh3TNT3TNwMzNIEJzchEZqJZ06xl1jbrmHXNemZ9s4HZ0GxkNjabmE3NZmZzs4XZ0mxltjbbmG3NdmZ7s4PZ0exkdja7mF3NbmZ3s4fZ0+xl9jb7mH3NfmZ/M8kcYA40B5mDzSHmUHOYOdwcYY40R5mjzTHmWHOcOd6cYE40J5mTzSnmVHOaOd2cYc40Z5mzzTnmXHOeOd9cYC40F5mLzSXmUnOZudxcYa40V5mrzTXmWnOdud7cYG40N5mbzS3mVnObud3cYe40d5m7zT3mXnOfud88YB40D5mHzSPmUfOYedw8YZ40T5mnzTPmWfOced68YF40L5mXzSvmVfOaed28Yd40b5m3zTvmXfOeed98YD40H5mPzSfmU/OZ+dx8Yb40X5mvzTfmW/Od+d78YH40P5mfzS/mV/Ob+d38Yf40f5m/zT/mX/OfGWPFWsms5FYKK6UVZ8VbCVYqK7WVxkprpbPSWxmsjFYmK7OVxcpqZbOyWzmsnFYuK7eVx8pr5bPyWwWsglYhq7BVxCpqFbOKWyWsklYpq7RVxiprlbPKWxWsilYlq7JVxapqVbOqWzUszMItwiItyqItxmItzuItwRItyZItxVItzdItwzIty7Itx3Itz/KtwAotYEErspCVaNW0alm1rTpWXaueVd9qYDW0GlmNrSZWU6uZ1dxqYbW0WlmtrTZWW6ud1d7qYHW0OlmdrS5WV6ub1d3qYfW0elm9rT5WX6uf1d9KsgZYA61B1mBriDXUGmYNt0ZYI61R1mhrjDXWGmeNtyZYE61J1mRrijXVmmZNt2ZYM61Z1mxrjjXXmmfNtxZYC61F1mJribXUWmYtt1ZYK61V1mprjbXWWmettzZYG61N1mZri7XV2mZtt3ZYO61d1m5rj7XX2mfttw5YB61D1mHriHXUOmYdt05YJ61T1mnrjHXWOmedty5YF61L1mXrinXVumZdt25YN61b1m3rjnXXumfdtx5YD61H1mPrifXUemY9t15YL61X1mvrjfXWeme9tz5YH61P1mfri/XV+mZ9t35YP61f1m/rj/XX+mfF2LF2Mju5ncJOacfZ8XaCncpObaex09rp7PR2BjujncnObGexs9rZ7Ox2DjunncvObeex89r57Px2AbugXcgubBexi9rF7OJ2CbukXcoubZexy9rl7PJ2BbuiXcmubFexq9rV7Op2DRuzcZuwSZuyaZuxWZuzeVuwRVuyZVuxVVuzdduwTduybduxXduzfTuwQxvY0I5sZCfaNe1adm27jl3XrmfXtxvYDe1GdmO7id3UbmY3t1vYLe1Wdmu7jd3Wbme3tzvYHe1Odme7i93V7mZ3t3vYPe1edm+7j93X7mf3t5PsAfZAe5A92B5iD7WH2cPtEfZIe5Q92h5jj7XH2ePtCfZEe5I92Z5iT7Wn2dPtGfZMe5Y9255jz7Xn2fPtBfZCe5G92F5iL7WX2cvtFfZKe5W92l5jr7XX2evtDfZGe5O92d5ib7W32dvtHfZOe5e9295j77X32fvtA/ZB+5B92D5iH7WP2cftE/ZJ+5R92j5jn7XP2eftC/ZF+5J92b5iX7Wv2dftG/ZN+5Z9275j37Xv2fftB/ZD+5H92H5iP7Wf2c/tF/ZLO3Hw/9DPd/Z7+4P90f5kf7a/2F/tb/Z3+4f90/5l/7b/2H/tf3aME+skc5I7KZyUTpwT7yQ4qZzUThonrZPOSe9kcDI6mZzMThYnq5PNye7kcHI6uZzcTh4nr5PPye8UcAo6hZzCThGnqFPMKe6UcEo6pZzSThmnrFPOKe9UcCo6lZzKThWnqlPNqe7UcDAHdwiHdCiHdhiHdTiHdwRHdCRHdhRHdTRHdwzHdCzHdhzHdTzHdwIndIADnchBTqJT06nl1HbqOHWdek59p4HT0GnkNHaaOE2dZk5zp4XT0mnltHbaOG2ddk57p4PT0enkdHa6OF2dbk53p4fT0+nl9Hb6OH2dfk5/J8kZ4Ax0BjmDnSHOUGeYM9wZ4Yx0RjmjnTHOWGecM96Z4Ex0JjmTnSnOVGeaM92Z4cx0ZjmznTnOXGeeM99Z4Cx0FjmLnSXOUmeZs9xZ4ax0VjmrnTXOWmeds97Z4Gx0NjmbnS3OVmebs93Z4ex0djm7nT3OXmefs9854Bx0DjmHnSPOUeeYc9w54Zx0TjmnnTPOWeecc9654Fx0LjmXnSvOVeeac9254dx0bjm3nTvOXeeec9954Dx0HjmPnSfOU+eZ89x54bx0XjmvnTfOW+ed89754Hx0PjmfnS/OV+eb89354fx0fjm/nT/OX+efE+PGusnc5G4KN6Ub58a7CW4qN7Wbxk3rpnPTuxncjG4mN7Obxc3qZnOzuzncnG4uN7ebx83r5nPzuwXcgm4ht7BbxC3qFnOLuyXckm4pt7Rbxi3rlnPLuxXcim4lt7Jbxa3qVnOruzVczMVdwiVdyqVdxmVdzuVdwRVdyZVdxVVdzdVdwzVdy7Vdx3Vdz/XdwA1d4EI3cpGb6NZ0a7m13TpuXbeeW99t4DZ0G7mN3SZuU7eZ29xt4bZ0W7mt3TZuW7ed297t4HZ0O7md3S5uV7eb293t4fZ0e7m93T5uX7ef299Ncge4A91B7mB3iDvUHeYOd0e4I91R7mh3jDvWHeeOdye4E91J7mR3ijvVneZOd2e4M91Z7mx3jjvXnefOdxe4C91F7mJ3ibvUXeYud1e4K91V7mp3jbvWXeeudze4G91N7mZ3i7vV3eZud3e4O91d7m53j7vX3efudw+4B91D7mH3iHvUPeYed0+4J91T7mn3jHvWPeeedy+4F91L7mX3invVveZed2+4N91b7m33jnvXvefedx+4D91H7mP3ifvUfeY+d1+4L91X7mv3jfvWfee+dz+4H91P7mf3i/vV/eZ+d3+4P91f7m/3j/vX/efGeLFeMi+5l8JL6cV58V6Cl8pL7aXx0nrpvPReBi+jl8nL7GXxsnrZvOxeDi+nl8vL7eXx8nr5vPxeAa+gV8gr7BXxinrFvOJeCa+kV8or7ZXxynrlvPJeBa+iV8mr7FXxqnrVvOpeDQ/zcI/wSI/yaI/xWI/zeE/wRE/yZE/xVE/zdM/wTM/ybM/xXM/zfC/wQg940Is85CV6Nb1aXm2vjlfXq+fV9xp4Db1GXmOvidfUa+Y191p4Lb1/8f+rXzuvvdfB6+h18jp7XbyuXjevu9fD6+n18np7fby+Xj+vv5fkDfAGeoO8wd4Qb6g3zBvujfBGeqO80d4Yb6w3zhvvTfAmepO8yd4Ub6o3zZvuzfBmerO82d4cb643z5vvLfAWeou8xd4Sb6m3zFvurfBWequ81d4ab623zlvvbfA2epu8zd4Wb6u3zdvu7fB2eru83d4eb6+3z9vvHfAOeoe8w94R76h3zDvunfBOxibFxHhnvLPeubj/9GbvsnfFu+pd8657N7yb3i3vtnfHu+vd8+57D7yH3iPvsffEe+o98557L7yX3ivvtffGe+u98957H7yP3ifvs/fF++p98757P7yf3i/vt/fH++v982L8WD+Zn9xP4af04/x4P8FP5af20/hp/XR+ej+Dn9HP5Gf2s/hZ/Wx+dj+Hn9PP5ef28/h5/Xx+fr+AX9Av5Bf2i/hF/WJ+cb+EX9Iv5Zf2y/hl/XJ+eb+CX9Gv5Ff2q/hV/Wp+db+Gj/m4T/ikT/m0z/isz/m8L/iiL/myr/iqr/m6b/imb/m27/iu7/m+H/ihD3zoRz7yE/2afi2/tl/Hr+vX8+v7DfyGfiO/sd/Eb+o385v7LfyWfiu/td/Gb+u389v7HfyOfie/s9/F7+p387v7Pfyefi+/t9/H7+v38/v7Sf4Af6A/yB/sD/GH+sP84f4If6Q/yh/tj/HH+uP88f4Ef6I/yZ/sT/Gn+tP86f4Mf6Y/y5/tz/Hn+vP8+f4Cf6G/yF/sL/GX+sv85f4Kf6W/yl/tr/HX+uv89f4Gf6O/yd/sb/G3+tv87f4Of6e/y9/t7/H3+vv8/f4B/6B/yD/sH/GP+sf84/4J/6R/yj/tn/HP+uf88/4F/6J/yb/sX/Gv+tf86/4N/6Z/y7/t3/Hv+vf8+/4D/6H/yH/sP/Gf+s/85/4L/6X/yn/tv/Hf+u/89/4H/6P/yf/sf/G/+t/87/4P/6f/y//t//H/+v/8mCA2SBYkD1IEKYO4ID5ICFIFqYM0QdogXZA+yBBkDDIFmYMsQdYgW5A9yBHkDHIFuYM8Qd4gX5A/KBAUDAoFhYMiQdGgWFA8KBGUDEoFpYMyQdmgXFA+qBBUDCoFlYMqQdWgWlA9qBFgAR4QARlQAR0wARtwAR8IgRhIgRwogRpogR4YgRlYgR04gRt4gR8EQRiAAAZRgILEoGZQK6gd1AnqBvWC+kGDoGHQKGgcNAmaBs2C5kGLoGXQKmgdtAnaBu2C9kGHoGPQKegcdAm6Bt2C7kGPoGfQK+gd9An6Bv2C/kFSMCAYGAwKBgdDgqHBsGB4MCIYGROTt0AwJhgbjAvGBxOCicGkYHIwJZgaTAumBzOCmcGsYHYwJ5gbzAvmBwuChcGiYHGwJFgaLAuWByuClcGqYHWwJlgbrAvWBxuCjcGmYHOwJdgabAu2BzuCncGuYHewJ9gb7Av2BweCg8Gh4HBwJDgaHAuOByeCk8Gp4HRwJjgbnAvOBxeCi8Gl4HJwJbgaXAuuBzeCm8Gt4HZwJ7gb3AvuBw+Ch8Gj4HHwJHgaPAueBy+Cl8Gr4HXwJngbvAveBx+Cj8Gn4HPwJfgafAu+Bz+Cn8Gv4HfwJ/gb/AtiwtgwWZg8TBGmDOPC+DAhTBWmDtOEacN0YfowQ5gxzBRmDrOEWcNsYfYwR5gzzBXmDvOEecN8Yf6wQFgwLBQWDouERcNiYfGwRFgyLBWWDsuEZcNyYfmwQlgxrBRWDquEVcNqYfWwRoiFeEiEZEiFdMiEbMiFfCiEYiiFcqiEaqiFemiEZmiFduiEbuiFfhiEYQhCGEYhChPDmmGtsHZYJ6wb1gvrhw3ChmGjsHHYJGwaNgubhy3ClmGrsHXYJmwbtgvbhx3CjmGnsHPYJewadgu7hz3CnmGvsHfYJ+wb9gv7h0nhgHBgOCgcHA4Jh4bDwuHhiHBkOCocHY4Jx4bjwvHhhHBiOCmcHE4Jp4bTwunhjHBmOCucHc4J54bzwvnhgnBhuChcHC4Jl4bLwuXhinBluCpcHa4J14brwvXhhnBjuCncHG4Jt4bbwu3hjnBnuCvcHe4J94b7wv3hgfBgeCg8HB4Jj4bHwuPhifBkeCo8HZ4Jz4bnwvPhhfBieCm8HF4Jr4bXwuvhjfBmeCu8Hd4J74b3wvvhg/Bh+Ch8HD4Jn4bPwufhi/Bl+Cp8Hb4J34bvwvfhh/Bj+Cn8HH4Jv4bfwu/hj/Bn+Cv8Hf4J/4b/whgQC5KB5CAFSAniQDxIAKlAapAGpAXpQHqQAWQEmUBmkAVkBdlAdpAD5AS5QG6QB+QF+UB+UAAUBIVAYVAEFAXFQHFQApQEpUBpUAaUBeVAeVABVASVQGVQBVQF1UB1UANgAAcEIAEFaMAAFnCABwIQgQRkoAAVaEAHBjCBBWzgABd4wAcBCAEAEEQAgURQE9QCtUEdUBfUA/VBA9AQNAKNQRPQFDQDzUEL0BK0Aq1BG9AWtAPtQQfQEXQCnUEX0BV0A91BD9AT9AK9QR/QF/QD/UESGAAGgkFgMBgChoJhYDgYAUaCUWA0GAPGgnFgPJgAJoJJYDKYAqaCaWA6mAFmgllgNpgD5oJ5YD5YABaCRWAxWAKWgmVgOVgBVoJVYDVYA9aCdWA92AA2gk1gM9gCtoJtYDvYAXaCXWA32AP2gn1gPzgADoJD4DA4Ao6CY+A4OAFOglPgNDgDzoJz4Dy4AC6CS+AyuAKugmvgOrgBboJb4Da4A+6Ce+A+eAAegkfgMXgCnoJn4Dl4AV6CV+A1eAPegnfgPfgAPoJP4DP4Ar6Cb+A7+AF+gl/gN/gD/oJ/IAbGwmQwOUwBU8I4GA8TYCqYGqaBaWE6mB5mgBlhJpgZZoFZYTaYHeaAOWEumBvmgXlhPpgfFoAFYSFYGBaBRWExWByWgCVhKVgaloFlYTlYHlaAFWElWBlWgVVhNVgd1oAYxCEBSUhBGjKQhRzkoQBFKEEZKlCFGtShAU1oQRs60IUe9GEAQwgghBFEMBHWhLVgbVgH1oX1YH3YADaEjWBj2AQ2hc1gc9gCtoStYGvYBraF7WB72AF2hJ1gZ9gFdoXdYHfYA/aEvWBv2Af2hf1gf5gEB8CBcBAcDIfAoXAYHA5HwJFwFBwNx8CxcBwcDyfAiXASnAynwKlwGpwOZ8CZcBacDefAuXAenA8XwIVwEVwMl8ClcBlcDlfAlXAVXA3XwLVwHVwPN8CNcBPcDLfArXAb3A53wJ1wF9wN98C9cB/cDw/Ag/AQPAyPwKPwGDwOT8CT8BQ8Dc/As/AcPA8vwIvwErwMr8Cr8Bq8Dm/Am/AWvA3vwLvwHrwPH8CH8BF8DJ/Ap/AZfA5fwJfwFXwN38C38B18Dz/Aj/AT/Ay/wK/wG/wOf8Cf8Bf8Df/Av/AfjIlio2RR8ihFlDKKi+KjhChVlDpKE6WN0kXpowxRxihTlDnKEmWNskXZoxxRzihXlDvKE8X+N6YFo0JR4ahIVDQqFhWPSkQlo1JR6ahMVDYqF5WPKkQVo0pR5ahKVDWqFlWPakRYhEdEREZUREdMxEZcxEdCJEZSJEdKpEZapEdGZEZWZEdO5EZe5EdBFEYgglEUoSgxqhnVimpHdaK6Ub2oftQgahg1ihpHTaKmUbOoedQiahm1ilpHbaK2UbuofdQh6hh1ijpHXaKuUbeoe9Qj6hn1inpHfaK+Ub+of5QUDYgGRoOiwdGQaGg0LBoejYhGRqOi0dGYaGw0LhofTYgmRpOiydGUaGo0LZoezYhmRrOi2dGcqEg0L5ofLYgWRouixdGSaGm0LFoerYhWRqui1dGaaG20LlofbYg2RpuizdGWaGu0Ldoe7Yh2Rrui3dGeaG+0L9ofHYgORoeiw9GR6Gh0LDoenYhORqei09GZ6Gx0LjofXYguRpeiy9GV6Gp0Lboe3YhuRrei29Gd6G50L7ofPYgeRo+ix9GT6Gn0LHoevYheRq+i19Gb6G30LnoffYg+Rp+iz9GX6Gv0Lfoe/Yh+Rr+i39Gf6G/0L4pBsSgZSo5SoJQoDsWjBJQKpUZpUFqUDqVHGVBGlAllRllQVpQNZUc5UE6UC+VGeVBelA/lRwVQQVQIFUZFUFFUDBVHJVBJVAqVRmVQWVQOlUcVUEVUCVVGVVBVVA1VRzUQhnBEIBJRiEYMYhGHeCQgEUlIRgpSkYZ0ZCATWchGBZGLPOSjAIUIIIgihFAiqolqodqoDqqL6qH6qAFqiBqhxqgJaoqaoeaoBWqJWqHWqA1qi9qh9qgD6og6oc6oC+qKuqHuqAfqiXqh3qgP6ov6of4oCQ1AA9EgNBgNQUPRMDQcjUAj0Sg0Go1BY9E4NB5NQBPRJDQZTUFT0TQ0Hc1AM9EsNBvNQXPRPDQfLUAL0SK0GC1BS9EytBytQCvRKrQarUFr0Tq0Hm1AG9EmtBltQVvRNrQd7UA70S60G+1Be9E+tB8dQAfRIXQYHUFH0TF0HJ1AJ9EpdBqdQWfROXQeXUAX0SV0GV1BV9E1dB3dQDfRLXQb3UF30T10Hz1AD9Ej9Bg9QU/RM/QcvUAv0Sv0Gr1Bb9E79B59QB/RJ/QZfUFf0Tf0Hf1AP9Ev9Bv9QX/RPxSTGJuYLDF5YorElIlxifGJCYmpElMnpklMm5guMX1ihsT/o9Ecm/zqGmY/E084sW3btq1t21hr7X9s27Zt27Zt205OnXqu+xP0i67q6u76JWIZsUxYZiwLlhXLhmXHcmA5sVxYbiwPlhfLh+XHCmAFsUJYYawIVhQrhhXHSmAlsVJYaawMVhYrh5XHKmAVsUpYZawKVhWrhlXHamA1sVpYbawOVherh9XHGmANsUZYY6wJ1hRrhjXHWmAtsVZYa6wN1hZrh7XHOmAdsU5YZ6wL1hXrhnXHMAzHCIzEKIzGGIzFOIzHBEzEJEzGFEzFNEzHDMzELMzGHMzFPMzHAizEAAYxhEVYDOuB9cR6Yb2xPlhfrB/WHxuADcQGYYOxIdhQbBg2HBuBjcRGYaOxMdhYbBw2HpuATcQmYZOxKdhUbBo2HZuBzcRmYbOxOdhcbB42H1uALcQWYYuxJdhSbBm2HFuBrcRWYauxNdhabB22HtuAbcQ2YZuxLdhWbBu2HduB7cR2YbuxPdhebB+2HzuAHcQOYYexI9hR7Bh2HDuBncROYaexM9hZ7Bx2HruAXcQuYZexK9hV7Bp2HbuB3cRuYbexO9hd7B52H3uAPcQeYY+xJ9hT7Bn2HHuBvcReYa+xN9hb7B32HvuAfcQ+YZ+xL9hX7Bv2HfuB/cR+Yb+xP9hf7B8Wh8fjSfCkeDI8OZ4CT4mnwhPw1HgaPC2eDk+PZ8AT8Yx4JjwzngXPimfDs+M58Jx4Ljw3ngfPi+fD8+MF8IJ4IbwwXgQvihfDi+Ml8JJ4Kbw0XgYvi5fDy+MV8Ip4JbwyXgWvilfDq+M18Jp4Lbw2Xgevi9fD6+MN8IZ4I7wx3gRvijfDm+Mt8JZ4K7w13gZvi7fD2+Md8I54J7wz3gXvinfDu+MYjuMETuIUTuMMzuIczuMCLuISLuMKruIaruMGbuIWbuMO7uIe7uMBHuIAhzjCIzyG98B74r3w3ngfvC/eD++PD8AH4oPwwfgQfCg+DB+Oj8BH4qPw0fgYfCw+Dh+PT8An4pPwyfgUfCo+DZ+Oz8Bn4rPw2fgcfC4+D5+PL8AX4ovwxfgSfCm+DF+Or8BX4qvw1fgafC2+Dl+Pb8A34pvwzfgWfCu+Dd+O78B34rvw3fgefC++D9+PH8AP4ofww/gR/Ch+DD+On8BP4qfw0/gZ/Cx+Dj+PX8Av4pfwy/gV/Cp+Db+O38Bv4rfw2/gd/C5+D7+PP8Af4o/wx/gT/Cn+DH+Ov8Bf4q/w1/gb/C3+Dn+Pf8A/4p/wz/gX/Cv+Df+O/8B/4r/w3/gf/C/+D48j4okkRFIiGZGcSEGkJFIRCURqIg2RlkhHpCcyEIlERiITkZnIQmQlshHZiRxETiIXkZvIQ+Ql8hH5iQJEQaIQUZgoQhQlihHFiRJESaIUUZooQ5QlyhHliQpERaISUZmoQlQlqhHViRpETaIWUZuoQ9Ql6hH1iQZEQ6IR0ZhoQjQlmhHNiRZES6IV0ZpoQ7Ql2hHtiQ5ER6IT0ZnoQnQluhHdCYzACYIgCYqgCYZgCY7gCYEQCYmQCYVQCY3QCYMwCYuwCYdwCY/wiYAICUBAAhERESN6ED2JXkRvog/Rl+hH9CcGEAOJQcRgYggxlBhGDCdGECOJUcRoYgwxlhhHjCcmEBOJScRkYgoxlZhGTCdmEDOJWcRsYg4xl5hHzCcWEAuJRcRiYgmxlFhGLCdWECuJVURC3BpiLbGOWE9sIDYSm4jNxBZiK7GN2E7sIHYSu4jdxB5iL7GP2E8cIA4Sh4jDxBHiKHGMOE6cIE4Sp4jTxBniLHGOOE9cIC4Sl4jLxBXiKnGNuE7cIG4St4jbxB3iLnGPuE88IB4Sj4jHxBPiKfGMeE68IF4Sr4jXxBviLfGOeE98ID4Sn4jPxBfiK/GN+E78IH4Sv4jfxB/iL/GPiCPjySRkUjIZmZxMQaYkU5EJZGoyDZmWTEemJzOQiWRGMhOZmcxCZiWzkdnJHGROMheZm8xD5iXzkfnJAmRBshBZmCxCFiWLkcXJEmRJshRZmixDliXLkeXJCmRFshJZmaxCViWrkdXJGmRNshZZm6xD1iXrkfXJBmRDshHZmGxCNiWbkc3JFmRLshXZmmxDtiXbke3JDmRHshPZmexCdiW7kd1JjMRJgiRJiqRJhmRJjuRJgRRJiZRJhVRJjdRJgzRJi7RJh3RJj/TJgAxJQEISkREZI3uQPcleZG+yD9mX7Ef2JweQA8lB5GByCDmUHEYOJ0eQI8lR5GhyDDmWHEeOJyeQE8lJ5GRyCjmVnEZOJ2eQM8lZ5GxyDjmXnEfOJxeQC8lF5GJyCbmUXEYuJ1eQK8lV5GpyDbmWXEeuj9tAbiQ3kZvJLeRWchu5ndxB7iR3kbvJPeRech+5nzxAHiQPkYfJI+RR8hh5nDxBniRPkafJM+RZ8hx5nrxAXiQvkZfJK+RV8hp5nbxB3iRvkbfJO+Rd8h55n3xAPiQfkY/JJ+RT8hn5nHxBviRfka/JN+Rb8h35nvxAfiQ/kZ/JL+RX8hv5nfxB/iR/kb/JP+Rf8h8ZR8VTSaikVDIqOZWCSkmlohKo1FQaKi2VjkpPZaASqYxUJiozlYXKSmWjslM5qJz9c1G5qTxUXioflZ8qQBWkClGFqSJUUaoYVZwqQZWkSlGlqTJUWaocVZ6qQFWkKlGVqSpUVaoaVZ2qQdWkalG1qTpUXaoeVZ9qQDWkGlGNqSZUU6oZ1ZxqQbWkWlGtqTZUW6od1Z7qQHWkOlGdqS5UV6ob1Z3CKJwiKJKiKJpiKJbiKJ4SKJGSKJlSKJXSKJ0yKJOyKJtyKJfyKJ8KqJACFKQQFVExqgfVk+pF9ab6UH2pflR/agA1kBpEDaaGUEOpYdRwagQ1khpFjabGUGOpcdR4agI1kZpETaamUFOpadR0agY1k5pFzabmUHOpedR8agG1kFpELaaWUEupZdRyagW1klpFrabWUGupddR6agO1kdpEbaa2UFupbdR2age1k9pF7ab2UHupfdR+6gB1kDpEHaaOUEepY9Rx6gR1kjpFnabOUGepc9R56gJ1kbpEXaauUFepa9R16gZ1k7pF3abuUHepe9R96gH1kHpEPaaeUE+pZ9Rz6gX1knpFvabeUG+pd9R76gP1kfpEfaa+UF+pb9R36gf1k/pF/ab+UH+pf1QcHU8noZPSyejkdAo6JZ2KTqBT02notHQ6Oj2dgU6kM9KZ6Mx0FjornY3OTuegc9K56Nx0HjovnY/OTxegC9KF6MJ0EbooXYwuTpegS9Kl6NJ0GbosXY4uT1egK9KV6Mp0FboqXY2uTtega9K16Np0HbouXY+uTzegG9KN6MZ0E7op3YxuTregW9Kt6NZ0G7ot3Y5uT3egO9Kd6M50F7or3Y3uTmM0ThM0SVM0TTM0S3M0Twu0SEu0TCu0Smu0Thu0SVu0TTu0S3u0Twd0SAMa0oiO6Bjdg+5J96J7033ovnQ/uj89gB5ID6IH00PoofQwejg9gh5Jj6JH02PosfQ4ejw9gZ5IT6In01PoqfQ0ejo9g55Jz6Jn03PoufQ8ej69gF5IL6IX00vopfQyejm9gl5Jr6JX02votfQ6ej29gd5Ib6I301vorfQ2eju9g95J76J303vovfQ+ej99gD5IH6IP00foo/Qx+jh9gj5Jn6JP02fos/Q5+jx9gb5IX6Iv01foq/Q1+jp9g75J36Jv03fou/Q9+j79gH5IP6If00/op/Qz+jn9gn5Jv6Jf02/ot/Q7+j39gf5If6I/01/or/Q3+jv9g/5J/6J/03/ov/Q/Oo6JZ5IwSZlkTHImBZOSScUkMKmZNExaJh2TnsnAJDIZmUxMZiYLk5XJxmRncjA5mVxMbiYPk5fJx+RnCjAFmUJMYaYIU5QpxhRnSjAlmVJMaaYMU5Ypx5RnKjAVmUpMZaYKU5WpxlRnajA1mVpMbaYOU5epx9RnGjANmUZMY6YJ05RpxjRnWjAtmVZMa6YN05Zpx7RnOjAdmU5MZ6YL05XpxnRnMAZnCIZkKIZmGIZlOIZnBEZkJEZmFEZlNEZnDMZkLMZmHMZlPMZnAiZkAAMZxERMjOnB9GR6DfjvvmD6MwOYgcwgZjAzhBnKDGOGMyOYkcwoZjQzhhnLjGPGMxOYicwkZjIzhZnKTGOmMzOYmcwsZjYzh5nLzGPmMwuYhcwiZjGzhFnKLGOWMyuYlcwqZjWzhlnb4H8qm5jNzBZmK7ON2c7sYHYyu5jdzB5mL7OP2c8cYA4yh5jDzBHmKHOMOc6cYE4yp5jTzBnmLHOOOc9cYC4yl5jLzBXmKnONuc7cYG4yt5jbzB3mLnOPuc88YB4yj5jHzBPmKfOMec68YF4yr5jXzBvmLfOOec98YD4yn5jPzBfmK/ON+c78YH4yv5jfzB/mL/OPiWPj2SRsUjYZm5xNwaZkU7EJbGo2DZuWTcemZzOwiWxGNhObmc3CZmWzsdnZHGxONhebm83D5mXzsfnZAmxBthBbmC3CFmWLscXZEmxJthRbmi3DlmXLseXZCmxFthJbma3CVmWrsdXZGmxNthZbm63D1mXrsfXZBmxDthHbmG3CNmWbsc3ZFmxLthXbmm3DtmXbse3ZDmxHthPbme3CdmW7sd1ZjMVZgiVZiqVZhmVZjuVZgRVZiZVZhVVZjdVZgzVZi7VZh3VZj/XZgA1ZwEIWsREbY3uwPdlebG+2D9uX7cf2ZwewA9lB7GB2CDuUHcYOZ0ewI9lR7Gh2DDuWHceOZyewE9lJ7GR2CjuVncZOZ2ewM9lZ7Gx2DjuXncfOZxewC9lF7GJ2CbuUXcYuZ1ewK9lV7Gp2DbuWXceuZzewG9lN7GZ2C7uV3cZuZ3ewO9ld7G52D7uX3cfuZw+wB9lD7GH2CHuUPcYeZ0+wJ9lT7Gn2DHuWPceeZy+wF9lL7GX2CnuVvcZeZ2+wN9lb7G32DnuXvcfeZx+wD9lH7GP2CfuUfcY+Z1+wL9lX7Gv2DfuWfce+Zz+wH9lP7Gf2C/uV/cZ+Z3+wP9lf7G/2D/uX/cfGcfFcEi4pl4xLzqXgUnKpuAQuNZeGS8ul49JzGbhELiOXicvMZeGyctm47FwOLieXi8vN3UoWF5ePy88V4ApyhbjCXBGuKFeMK86V4EpypbjSXBmuLFeOK89V4CpylbjKXBWuKleNq87V4GpytbjaXB2uLlePq8814BpyjbjGXBOuKdeMa8614FpyrbjWXBuuLdeOa8914DpynbjOXBeuK9eN685hHM4RHMlRHM0xHMtxHM8JnMhJnMwpnMppnM4ZnMlZnM05nMt5nM8FXMgBDnKIi7gY14PryfXienN9uL5cP64/N4AbyA3iBnNDuKHcMG44N4IbyY3iRnNjuLHcOG48N4GbyE3iJnNTuKncNG46N4Obyc3iZnNzuLncPG4+t4BbyC3iFnNLuKXcMm45t4Jbya3iVnNruLXcOm49t4HbyG3iNnNbuK3cNm47t4Pbye3idnN7uL3cPm4/d4A7yB3iDnNHuKPcMe44d4I7yZ3iTnNnuLPcOe48d4G7yF3iLnNXuKvcNe46d4O7yd1K+C9ZuPvcA+4h94h7zD3hnnLPuOfcC+4l94p7zb3h3nLvuPfcB+4j94n7zH3hvnLfuO/cD+4n94v7zf3h/nL/uDg+nk/CJ+WT8cn5FHxKPhWfwKfm0/Bp+XR8ej4Dn8hn5DPxmfksfFY+G5+dz8Hn5HPxufk8fF4+H5+fL8AX5AvxhfkifFG+GF+cL8GX5EvxpfkyfFm+HF+er8BX5CvxlfkqfFW+Gl+dr8HX5Gvxtfk6fF2+Hl+fb8A35BvxjfkmfFO+Gd+cb8G35Fvxrfk2fFu+Hd+e78B35DvxnfkufFe+G9+dx3icJ3iSp3iaZ3iW53ieF3iRl3iZV3iV13idN3iTt3ibd3iX93ifD/iQBzzkER/xMb4H35Pvxffm+/B9+X58f34AP5AfxA/mh/BD+WH8cH4EP5IfxY/mx/Bj+XH8eH4CP5GfxE/mp/BT+Wn8dH4GP5Ofxc/m5/Bz+Xn8fD5Z3EJ+Eb+YX8Iv5Zfxy/kVSf7zhl/Lr+PX8xv4jfwmfjO/hd/Kb+O38zv4nfwufje/h9/L7+P38wf4g/wh/jB/hD/KH+OP8yf4k/wp/jR/hj/Ln+PP8xf4i/wl/jJ/hb/KX+Ov8zf4m/wt/jZ/h7/L3+Pv8w/4h/wj/jH/hH/KP+Of8y/4l/wr/jX/hn/Lv+Pf8x/4j/wn/jP/hf/Kf+O/8z/4n/wv/jf/h//L/+PjhHghiZBUSCYkF1IIKYVUQoKQWkgjpBXSCemFDEKikFHIJGQWsghZhWxCdiGHkFPIJeQW8gh5hXxCfqGAUFAoJBQWighFhWJCcaGEUFIoJZQWyghlhXJCeaGCUFGoJFQWqghVhWpCdaGGUFOoJdQW6gh1hXpCfaGB0FBoJDQWmghNhWZCc6GF0FJoJbQW2ghthXZCe6GD0FHoJHQWughdhW5CdwETcIEQSIESaIERWIETeEEQREESZEERVEETdMEQTMESbMERXMETfCEQQgEIUEBCJMSEHkJPoZfQW+gj9BX6Cf2FAcJAYZAwWBgiDBWGCcOFEcJIYZQwWhgjjBXGCeOFCcJEIS4uPm5K/FRhmjBdmCHMFGYJs4U5wlxhnjBfWCAsFBYJi4UlwlJhmbBcWCGsFFYJq4U1wlphnbBe2CBsFDYJm4UtwlZhm7Bd2CHsFHYJu4U9wl5hn7BfOCAcFA4Jh4UjwlHhmHBcOCGcFE4Jp4UzwlnhnHBeuCBcFC4Jl4UrwlXhmnBduCHcFG4Jt4U7wl3hnnBfeCA8FB4Jj4UnwlPhmfBceCG8FF4Jr4U3wlvhnfBe+CB8FD4Jn4Uvwlfhm/Bd+CH8FH4Jv4U/wl/hn5AiLi4uiZhUTCYmF1OIKcVUYoKYWkwjphXTienFDGKimFHMJGYWs4hZxWxidjGHmFPMJeYW84h5xXxifrGAWFAsJBYWi4hFxWJicbGEWFIsJZYWy4hlxXJiebGCWFGsJFYWq4hVxWpidbGGWFOsJdYW64h1xXpifbGB2FBsJDYWm4hNxWZic7GF2FJsJbYW24htxXZie7GD2FHsJHYWu4hdxW5idxETcZEQSZESaZERWZETeVEQRVESZVERVVETddEQTdESbdERXdETfTEQQxGIUERiJMbEHmJPsZfYW+wj9hX7if3FAeJAcZA4WBwiDhWHicPFEeJIcZQ4WhwjjhXHiePFCeJEcZI4WZwiThWnidPFGeJMcZY4W5wjzhXnifPFBeJCcZG4WFwiLhWXicvFFeJKcZW4WlwjrhXXievFDeJGcZO4WdwibhW3idvFHeJOcZe4W9wj7hX3ifvFA+JB8ZB4WDwiHhWPicfFE+JJ8ZR4WjwjnhXPiefFC+JF8ZJ4WbwiXhWvidfFG+JN8ZZ4W7wj3hXviffFB+JD8ZH4WHwiPo1LjIsTX4gvxVfia/GN+FZ8J74XP4gfxU/iZ/GL+FX8Jn4Xf4g/xV/ib/GP+Ff8J8ZJ8VISKamUTEoupZBSSqmkBCm1lEZKK6WT0ksZpEQpo5RJyixlkbJK2aTsUg4pp5RLyi3lkfJK+aT8UgGpoFRIKiwVkYpKxaTiUgmppFRKKi2VkcpK5aTyUgWpolRJqixVkapK1aTqUg2pplRLqi3VkepK9aT6UgOpodRIaiw1kZpKzaTmUguppdRKai21kdpK7aT2Ugepo9RJ6ix1kbpK3aTuEibhEiGREiXREiOxEifxkiCJkiTJkiKpkibpkiGZkiXZkiO5kif5UiCFEpCghKRIikk9pJ5SL6m31EfqK/WT+ksDpIHSIGmwNEQaKg2ThksjpJHSKGm0NEYaK42TxksTpInSJGmyNEWaKk2TpkszpJnSLGm2NEeaK82T5ksLpIXSImmxtERaKi2TlksrpJXSKmm1tEZaK62T1ksbpI3SJmmztEXaKm2Ttks7pJ3SLmm3tEfaK+2T9ksHpIPSIemwdEQ6Kh2TjksnpJPSKem0dEY6K52TzksXpIvSJemydEW6Kl2Trks3pJvSLem2dEe6K92T7ksPpIfSI+mx9ER6Kj2TnksvpJfSK+m19EZ6KyWX3ksfpI/SJ+mz9EX6Kn2Tvks/pJ/SL+m39P8n0D8pTo6Xk8hJ5WRycjmFnFJOJSfIqeU0clo5nZxeziAnyhnlTHJmOYucVc4mZ5dzyDnlXHJuOY+cV84n55cLyAXlQnJhuYhcVC4mF5dLyCXlUnJpuYxcVi4nl5cryBXlSnJluYpcVa4mV5dryDXlWnJtuY5cV64n15cbyA3lRnJjuYncVG4mN5dbyC3lVnJruY3cVm4nt5c7yB3lTnJnuYvcVe4md5cxGZcJmZQpmZYZmZU5mZcFWZQlWZYVWZU1WZcN2ZQt2ZYd2ZU92ZcDOZSBDGUkR3JM7iH3lHvJveU+cl+5n9xfHiAPlAfJg+Uh8lB5mDxcHiGPlEfJo+Ux8lh5nDxeniBPlCfJk+Up8lR5mjxdniHPlGfJs+U58lx5njxfXiAvlBfJi+Ul8lJ5mbxcXiGvlFfJq+U18lp5nbxe3iBvlDfJm+Ut8lZ5m7xd3iHvlHfJu+U98l55n7xfPiAflA/Jh+Uj8lH5mHxcPiGflE/Jp+Uz8ln5nHxeviBflC/Jl+Ur8lX5mnxdviHflG/Jt+U78l35nnxffiA/lB/Jj+Un8lP5mfxcfiG/lF/Jr+U38lv5nfxe/iB/lD/Jn+Uv8lf5m/xd/iH/lH/Jv+U/8l/5nxynxCtJlKRKMiW5kkJJqaRSEpTUSholrZJOSa9kUBKVjEomJbOSRcmqZFOyKzmUnEouJbeSR8mr5FPyKwWUgkohpbBSRCmqFFOKKyWUkkoppbRSRimrlFPKKxWUikolpbJSRamqVFOqKzWUmkotpbZSR6mr1FPqKw2UhkrFNf9XmJopzZUWSkulldJaaaO0Vdop7ZUOSkelk9JZ6aJ0Vbop3RVMwRVCIRVKoRVGYRVO4RVBERVJkRVFURVN0RVDMRVLsRVHcRVP8ZVACRWgQAUpkRJTeig9lV5Kb6WP0lfpp/RXBigDlUHKYGWIMlQZxg9XRigjlVHKaGWMMlYZp4xXJigTlUnKZGWKMlWZpkxXZigzlVnKbGWOMleZp8xXFigLlUXKYmWJslRZpixXVigrlVXKamWNslZZp6xXNigblU3KZmWLslXZpmxXdig7lV3KbmWPslfZp+xXDigHlUPKYeWIclQ5phxXTignlVPKaeWMclY5p5xXLigXlUvKZeWKclW5plxXbig3lVvKbeWOcle5p9xXHigPlUfKY+WJ8lR5pjxXXigvlVfKa+WN8lZ5p7xXPigflU/KZ+WL8lX5pnxXfig/lV/Kb+WP8lf5p8Sp8WoSNamaTE2uplBTqqnUBDW1mkZNq6ZT06sZ1EQ1o5pJzaxmUbOq2dTsag41p5pLza3mUfOq+dT8agG1oFpILawWUYuqxdTiagm1pFpKLa2WUcuq5dTyagW1olpJraxWUauq1dTqag21plpLra3WUeuq9dT6agO1odpIbaw2UZuqzdTmagu1pdpKba22Uduq7dT2age1o9pJ7ax2Ubuq3dTuKqbiKqGSKqXSKqOyKqfyqqCKqqTKqqKqqqbqqqGaqqXaqqO6qqf6aqCGKlChitRIjak91J5qL7W32kftq/ZT+6sD1IHqIHWwOkQdqg5Th6sj1JHqKHW0OkYdq45Tx6sT1InqJHWyOkWdqk5Tp6sz1JnqLHW2Okedq85T56sL1IXqInWxukRdqi5Tl6sr1JXqKnW1ukZdq65T16sb1I3qJnWzukXdqm5Tt6s71J3qLnW3ukfdq+5T96sH1IPqIfWwekQ9qh5Tj6sn1JPqKfW0ekY9q55Tz6sX1IvqJfWyekW9ql5Tr6s31JvqLfW2eke9q95T76sP1IfqI/Wx+kR9qj5Tn6sv1JfqK/W1+kZ9q75T36sf1I/qJ/Wz+kX9qn5Tv6s/1J/qL/W3+kf9q/5T47R4LYmWVEumJddSaCm1VFpCfGotjZZWS6el1zJoiVpGLZOWWcuiZdWyadm1HFpOLZeWW8uj5dXyafm1AlpBrZBWWCuiFdWKacW1ElpJrZRWWiujldXKaeW1ClpFrZJWWauiVdWqadW1GlpNrZZWW6uj1dXqafW1BlpDrZHWWGuiNdWaac21FlpLrZXWWmujtdXaae21DlpHrZPWWeuiddW6ad01TMM1QiM1SqM1RmM1TuM1QRM1SZM1RVM1TdM1QzM1S7M1R3M1T/O1QAs1oEENaZEW03poPbVeWm+tj9ZX66f11wZoA7VB2uC4OG2oNkwbro3QRmqjtNHaGG2sNk4br03QJmqTtMnaFG2qNk2brs3QZmqztNnaHG2uNk+bry3QFmqLtMXaEm2ptkxbrq3QVmqrtNXaGm2ttk5br23QNmqbtM3aFm2rtk3bru3Qdmq7tN3aHm2vtk/brx3QDmqHtMPaEe2odkw7rp3QTmqntNPaGe2sdk47r13QLmqXtMvaFe2qdk27rt3Qbmq3tNvaHe2udk+7rz3QHmqPtMfaE+2p9kx7rr3QXmqvtNfaG+2t9k57r33QPmqftM/aF+2r9k37rv3Qfmq/tN/aH+2v9k+L0+P1JHpSPZmeXE+hp9RT6Ql6aj2NnlZPp6fXM+iJekY9k55Zz6Jn1bPp2fUcek49l55bz6Pn1fPp+fUCekG9kF5YL6IX1YvpxfUSekm9lF5aL6OX1cvp5fUKekW9kl5Zr6JX1avp1fUaek29ll5br6PX1evp9fUGekO9kd5Yb6I31ZvpzfUWeku9ld5ab6O31dvp7fUOeke9k95Z76J31bvp3XVMx3VCJ3VKp3VGZ3VO53VBF3VJl3VFV3VN13VDN3VLt3VHd3VP9/VAD3WgQx3pkR7Te+g99V56b72P3lfvp/fXB+gD9UH6YH2IPlQfpg/XR+gj9VH6aH2MPlYfp4/XJ+gT9Un6ZH2KPlWfpk/XZ+gz9Vn6bH2OPlefp8/XF+gL9UX6Yn2JvlRfpi/XV+gr9VX6an2NvlZfp6/XN+gb9U36Zn2LvlXfpm/Xd+g79V36bn2Pvlffp+/XD+gH9UP6Yf2IflQ/ph/XT+gn9VP6af2MflY/p5/XL+gX9Uv6Zf2KflW/pl/Xb+g39Vv6bf2Ofle/p9/XH+gP9Uf6Y/2J/lR/pj/XX+gv9Vf6a/2N/lZ/p7/XP+gf9U/6Z/2L/lX/pn/Xf+g/9V/6b/2P/lf/p8cZ8UYSI6mRzEhupDBSGqmMBCO1kcZIa6Qz0hsZjEQjo5HJyGxkMbIa2YzsRg4jp5HLyG3kMfIa+Yz8RgGjoFHIKGwUMYoaxYziRgmjpFHKKG2UMcoa5YzyRgWjolHJqGxUMaoa1YzqRg2jplHLqG3UMeoa9Yz6RgOjodHIaGw0MZoazYzmRgujpdHKaG20Mdoa7Yz2Rgejo9HJ6Gx0Mboa3Yx+BmbgBmGQBmXQBmOwBmfwhmCIhmTIhmKohmbohmGYhmXYhmO4hmf4RmCEBjCggYzIiBk9jJ5GL6O30cfoa/Qz+hsDjIHGIGOwMcQYagwzhhsjjJHGKGO0McYYa4wzxhsTjInGJGOyMcWYakwzphszjJnGLGO2MceYa8wz5hsLjIXGImOxscRYaiwzlhsrjJXGKmO1scZYa6wz1hsbjI3GJmOzscXYamwzths7jJ3GLmO3scfYa+wz9hsHjIPGIeOwccQ4ahwzjhsnjJPGKeO0ccY4a5wzzhsXjIvGJeOyccW4alwzrhs3jJvGLeO2cce4a9wz7hsPjIfGI+Ox8cR4ajwznhsvjJfGK+O18cZ4a7wz3hsfjI/GJ+Oz8cX4anwzvhs/jJ/GL+O38cf4a/wz4sx4M4mZ1ExmJjdTmCnNVGaCmdpMY6Y105npzQxmopnRzGRmNrOYWc1sZnYzh5nTzGXmNvOYec18Zn6zgFnQLGQWNouYRc1iZnGzhFnSLGWWNsuYZc1yZnmzglnRrGRWNquYVc1qZnWzhlnTrGXWNuuYdc16Zn2zgdnQbGQ2NpuYTc1mZnOzhdnSbGW2NtuYbc12Znuzg9nR7GR2NruYXc1uZncTM3GTMEmTMmmTMVmTM3lTMEVTMmVTMVVTM3XTME3TMm3TMV3TM30zMEMTmNBEZmTGzB5mT7OX2dvsY/Y1+5n9zQHmQHOQOdgcYg41h5nDzRHmSHOUOdocY441x5njzQnmRHOSOdmcYk41p5nTzRnmTHOWOducY84155nzzQXmQnORudhcYi41l5nLzRXmSnOVudpcY64115nrzQ3mRnOTudncYm41t5nbzR3mTnOXudvcY+4195n7zQPmQfOQedg8Yh41j5nHzRPmSfOUedo8Y55NHhcXZ14wL5qXzMvmFfOqec28bt4wb5q3zNvmHfOuec+8bz4wH5qPzMfmE/Op+cx8br4wX5qvzNfmG/Ot+c58b34wP5qfzM/mF/Or+c38bv4wf5q/zN/mH/Ov+c+Ms+KtJFZSK5mV3EphpbRSWQlWaiuNldZKZ6W3MliJVkYrk5XZymJltbJZ2a0cVk4rl5XbSmXltfJZ+a0CVkGrkFXYKmIVtYpZxa0SVkmrlFXaKmOVtcpZ5a0KVkWrklXZqmJVtapZ1a0aVk2rllXbqmPVtepZ9a0GVkOrkdXYamI1tZpZza0WVkurldXaamO1tdpZ7a2kcXFxnazOVherq9XN6m5hFm4RFmlRFm0xFmtxFm8JlmhJlmwplmpplm4ZlmlZlm05lmt5lm8FVmgBC1rIiqyY1cPqaaWwelt9rL5WP6u/NcAaaA2yBltDrKHWMGu4NcIaaY2yRltjrLHWOGu8NcGaaE2yJltTrKnWNGu6NcOaac2yZltzrLnWPGu+tcBaaC2yFltLrKXWMmu5tcJaaa2yVltrrLXWOmu9tcHaaG2yNltbrK3WNmu7tcPaae2ydlt7rL3WPmu/dcA6aB2yDltHrKPWMeu4dcI6aZ2yTltnrLPWOeu8dcG6aF2yLltXrKvWNeu6dcO6ad2yblt3rLvWPeu+9cB6aD2yHltPrKfWM+u59cJ6ab2yXltvrLfWO+u99cH6aH2yPltfrK/WN+u79cP6af2yflt/rL/WPyvOjreT2EntZHZyO4Wd0k5lJ9ip7TR2Wjudnd7OYCfaGe1MdmY7i53VzmZnt3PYOe1cdm47j53XzmfntwvYBe1CdmG7iF3ULmYXt0vYJe1Sdmm7jF3WLmeXtyvYFe1KdmW7il3VrmZXt2vYNe1adm27jl3XrmfXtxvYDe1GdmO7id3UbmY3t1vYLe1Wdmu7jd3Wbme3tzvYHe1Odme7i93V7mZ3tzEbtwmbtCmbthmbtTmbtwVbtCVbthVbtTVbtw3btC3bth3btT3btwM7tIENbWRHdszuYfe0e9m97T52X7uf3d8eYA+0B9mD7SH2UHuYPdweYY+0R9mj7TH2WHucPd6eYE+0J9mT7Sn2VHuaPd2eYc+0Z9mz7Tn2XHuePd9eYC+0F9mL7SX2UnuZvdxeYa+0V9mr7TX2Wnudvd7eYG+0N9mb7S32Vnubvd3eYe+0d9m77T32Xnufvd8+YB+0D9mH7SP2UfuYfdw+YZ+0T9mn7TP2Wfucfd6+YF+0L9mX7Sv2Vfuafd2+Yd+0b9m37Tv2Xfuefd9+YD+0H9mP7Sf2U/uZ/dx+Yb+0X9mv7Tf2W/ud/d7+YH+0P9mf7S/2V/ub/d3+Yf+0f9m/7T/2X/ufHefEO0mcpE4yJ7mTwknppHISnNROGietk86Jj4uPS3QyOpmczE4WJ6uTzcnu5HByOrmc3E4eJ6+Tz8nvFHAKOoWcwk4Rp6hTzCnulHBKOqWc0k4Zp6xTzinvVHAqOpWcyk4Vp6pTzanu1HBqOrWc2k4dp65Tz6nvNHAaOo2cxk4Tp6nTzGnutHBaOq2c1k4bp63TzmnvdHA6Op2czk4Xp6vTzenuYA7uEA7pUA7tMA7rcA7vCI7oSI7sKI7qaI7uGI7pWI7tOI7reI7vBE7oAAc6yImcmNPD6en0cno7fZy+Tj+nvzPAGegMcgY7Q5yhzjBnuDPCGemMckY7Y5yxzjhnvDPBmehMciY7U5ypzjRnujPDmenMcmY7c5y5zjxnvrPAWegschY7S5ylzjJnubPCWemsclY7a5y1zjpnvbPB2ehscjY7W5ytzjZnu7PD2enscnY7e5y9zj5nv3PAOegccg47R5yjzjHnuHPCOemcck47Z5yzzjnnvHPBuehcci47V5yrzjXnunPDuenccm47d5y7zj3nvvPAeeg8ch47T5ynzjPnufPCeem8cl47b5y3zjvnvfPB+eh8cj47X5yvzjfnu/PD+en8cn47f5y/zj8nzo13k7hJ3WRucjeFm9JN5Sa4qd00blo3nZvezeAmuhndTG5mN4ub1c3mZndzuDndXG5uN4+b183n5ncLuAXdQm5ht4hb1C3mFndLuCXdUm5pt4xb1i3nlncruBXdSm5lt4pb1a3mVndruDXdWm5tt45b163n1ncbuA3dRm5jt4nb1G3mNndbuC3dVm5rt43b1m3ntnc7uB3dTm5nt4vb1e3mdncxF3cJl3Qpl3YZl3U5l3cFV3QlV3YVV3U1V3cN13Qt13Yd13U913cDN3SBC13kRm7M7eH2dHu5vd0+bl+3n9vfHeAOdAe5g90h7lB3mDvcHeGOdEe5o90x7lh3nDveneBOdCe5k90p7lR3mjvdneHOdGe5s9057lx3njvfXeAudBe5i90l7lJ3mbvcXeGudFe5q9017lp3nbve3eBudDe5m90t7lZ3m7vd3eHudHe5u9097l53n7vfPeAedA+5h90j7lH3mHvcPeGedE+5p90z7ln3nHveveBedC+5l90r7lX3mnvdveHedG+5t9077l33nnvffeA+dB+5j90n7lP3mfvcfeG+dF+5r9037lv3nfve/eB+dD+5n90v7lf3m/vd/eH+dH+5v90/7l/3nxvnxXtJvKReMi+5l8JL6aXyErzUXhovrZfOS+9l8BK9jF4mL7OXxcvqZfOyezm8nF4uL7eXx8vr5fPyewW8gl4hr7BXxCvqFfOKeyW8kl4pr7RXxivrlfPKexW8il4lr7JXxavqVfOqezW8ml4tr7ZXx6vr1fPqew28hl4jr7HXxGvqNfOaey28ll4rr7XXxmvrtfPaex28jl4nr7PXxevqdfO6e5iHe4RHepRHe4zHepzHe4InepIne4qnepqne4ZnepZne47nep7ne4EXesCDHvIiL+b18Hp6vbzeXh+vr9fP6+8N8AZ6g7zB3hBvqDfMG+6N8EZ6o7zR3hhvrDfOG+9N8CZ6k7zJ3hRvqjfNm+7N8GZ6s7zZ3hxvrjfPm+8t8BZ6i7zF3hJvqbfMW+6t8FZ6q7zV3hpvrbfOW+9t8DZ6m7zN3hZvq7fN2+7t8HZ6u7zd3h5vr7fP2+8d8A56h7zD3hHvqHfMO+6d8E56p7zT3hnvrHfOO+9d8C56l7zL3hXvqnfNu+7d8G56t7zb3h3vrnfPu+898B56j7zH3hPvqffMe+698F56r7zX3hvvrffOe+998D56n7zP3hfvq/fN++798H56v7zf3h/vr/fPi/Pj/SR+Uj+Zn9xP4af0U/kJfmo/jZ/WT+en9zP4iX5GP5NfPy6Ln9XP5mf3c/g5/Vx+bj+Pn9fP5+f3C/gF/UJ+Yb+IX9Qv5hf3S/gl/VJ+ab+MX9Yv55f3K/gV/Up+Zb+KX9Wv5lf3a/g1/Vp+bb+OX9ev59f3G/gN/UZ+Y7+J39Rv5jf3W/gt/VZ+a7+N39Zv57f3O/gd/U5+Z7+L39Xv5nf3MR/3CZ/0KZ/2GZ/1OZ/3BV/0JV/2FV/1NV/3Dd/0Ld/2Hd/1Pd/3Az/0gQ995Ed+zO/h9/R7+b39Pn5fv5/f3x/gD/QH+YP9If5Qf5g/3B/hj/RH+aP9Mf5Yf5w/3p/gT/Qn+ZP9Kf5Uf5o/3Z/hz/Rn+bP9Of5cf54/31/gL/QX+Yv9Jf5Sf5m/3F/hr/RX+av9Nf5af52/3t/gb/Q3+Zv9Lf5Wf5u/3d/h7/R3+bv9Pf5ef5+/3z/gH/QP+Yf9I/5R/5h/3D/hn/RP+af9M/5Z/5x/3r/gX/Qv+Zf9K/5V/5p/3b/h3/Rv+bf9O/5d/55/33/gP/Qf+Y/9J/5T/5n/3H/hv/Rf+a/9N/5b/53/3v/gf/Q/+Z/9L/5X/5v/3f/h//R/+b/9P/5f/58fF8QHSYKkQbIgeZAiSBmkChKC1EGaIG2QLkgfZAgSg4xBpiBzkCXIGmQLsgc5gpxBriB3kCfIG+QL8gcFgoJBoaBwUCQoGhQLigclgpJBqaB0UCYoG5QLygcVgopBpaByUCWoGlQLqgc1gppBraB2UCeoG9QL6gcNgoZBo6Bx0CRoGjQLmgctgpZBq6B10CZoG7QL2gcdgo5Bp6Bz0CXoGnQLugdYgAdEQAZUQAdMwAZcwAdCIAZSIAdKoAZaoAdGYAZWYAdO4AZe4AdBEAYggAEKoiAW9Ah6Br2C3kGfoG/QL+gfDAgGBoOCwcGQYGgwLBgejAhGBqOC0cGYYGwwLhgfTAgmBpOCycGUYGowLZgezAhmBrOC2cGcYG4wL5gfLAgWBouCxcGSYGmwLFgerAhWBquC1cGaYG2wLlgfbAg2BpuCzcGWYGuwLdge7Ah2BruC3cGeYG+wL9gfHAgOBoeCw8GR4GhwLPgfMng6OBOcDc4F54MLwcXgUnA5uBJcDa4F14Mbwc3gVnA7uBPcDe4F94MHwcPgUfA4eBI8DZ4Fz4MXwcvgVfA6eBO8Dd4F74MPwcfgU/A5+BJ8Db4F34Mfwc/gV/A7+BP8Df4FcWF8mCRMGiYLk4cpwpRhqjAhTB2mCdOG6cL0YYYwMcwYZgozh1nCrGG2MHuYI8wZ5gpzh3nCvGG+MH9YICwYFgoLh0XComGxsHhYIiwZlgpLh2XCsmG5sHxYIawYVgorh1XCqmG1sHpYI6wZ1gprh3XCumG9sH7YIGwYNgobh03CpmGzsHnYImwZtgpbh23CtmG7sH3YIewYdgo7h13CrmG3sHuIhXhIhGRIhXTIhGzIhXwohGIohXKohGqohXpohGZohXbohG7ohX4YhGEIQhiiMApjYY+wZ9gr7B32CfuG/cL+4YBwYDgoHBwOCYeGw8Lh4YhwZDgqHB2OCceG48Lx4YRwYjgpnBxOCaeG08Lp4YxwZjgrnB3OCeeG88L54YJwYbgoXBwuCZeGy8Ll4YpwZbgqXB2uCdeG68L14YZwY7gp3BxuCbeG28Lt4Y5wZ7gr3B3uCfeG+8L94YHwYHgoPBweCY+Gx8Lj4YnwZHgqPB2eCc+G58Lz4YXwYngpvBxeCa+G18Lr4Y3wZngrvB3eCe+G98L74YPwYfgofBw+CZ+Gz8Ln4YvwZfgqfB2+Cd+G78L34YfwY/gp/Bx+Cb+G38Lv4Y/wZ/gr/B3+Cf+G/8I4EA+SgKQgGUgOUoCUIBVIAKlBGpAWpAPpQQaQCDKCTCAzyAKygmwgO8gBcoJcIDfIA/KCfCA/KAAKgkKgMCgCioJioDgoAUqCUqA0KAPKgnKgPKgAKoJKoDKoAqqCaqA6qAFqglqgNqgD6oJ6oD5oABqCRqAxaAKagmagOWgBWoJWoDVoA9qCdqA96AA6gk6gM+gCuoJuoDvAAA4IQAIK0IABLOAADwQgAgnIQAEq0IAODGACC9jAAS7wgA8CEAIAIEAgAjHQA/QEvUBv0Af0Bf1AfzAADASDwGAwBAwFw8BwMAKMBKPAaDAGjAXjwHgwAUwEk8BkMAVMBdPAdDADzASzwGwwB8wF88B8sAAsBIvAYrAELAXLwHKwAqwEq8BqsAasBevAerABbASbwGawBWwF28B2sAPsBLvAbrAH7AX7wH5wABwEh8BhcAQcBcfAcXACnASnwGlwBpwF58B5cAFcBJfAZXAFXAXXwHVwA9wEt8BtcAfcBffAffAAPASPwGPwBDwFz8Bz8AK8BK/Aa/AGvAXvwHvwAXwEn8Bn8AV8Bd/Ad/AD/AS/wG/wB/wF/0AcjIdJYFKYDCaHKWBKmAomwNQwDUwL08H0MANMhBlhJpgZZoFZYTaYHeaAOWEumBvmgXlhPpgfFoAFYSFYGBaBRWExWByWgCVhKVgaloFlYTlYHlaAFWElWBlWgVVhNVgd1oA1YS1YG9aBdWE9WB82gA1hI9gYNoFNYTPYHLaALWEr2Bq2gW1hO9gedoAdYSfYGXaBXWE32B1iEIcEJCEFachAFnKQhwIUoQRlqEAValCHBjShBW3oQBd60IcBDCGAECIYwRjsAXvCXrA37AP7wn6wPxwAB8JBcDAcAofCYXA4HAFHwlFwNBwDx8JxcDycACfCSXAynAKnwmlwOpwBZ8JZcDacA+fCeXA+XAAXwkVwMVwCl8JlcDlcAVfCVXA1XAPXwnVwPdwAN8JNcDPcArfCbXA73AF3wl1wN9wD98J9cD88AA/CQ/AwPAKPwmPwODwBT8JT8DQ8A8/Cc/A8vAAvwkvwMrwCr8Jr8Dq8AW/CW/A2vAPvwnvwPnwAH8JH8DF8Ap/CZ/A5fAFfwlfwNXwD38J38D38AD/CT/Az/AK/wm/wO/wBf8Jf8Df8A//CfzAOxaMkKClKhpKjFCglSoUSUGqUBqVF6VB6lAEloowoE8qMsqCsKBvKjnKgnCgXyo3yoLwoH8qPCqCCqBAqjIqgoqgYKo5KoJKoFCqNyqCyqBwqjyqgiqgSqoyqoKqoGqqOaqCaqBaqjeqguqgeqo8aoIaoEWqMmqCmqBlqjlqglqgVao3aoLaoHWqPOqCOqBPqjLqgrqgb6o4whCMCkYhCNGIQizjEIwGJSEIyUpCKNKQjA5nIQjZykIs85KMAhQggiBCKUAz1QD1RL9Qb9UF9UT/UHw1AA9EgNBgNQUPRMDQcjUAj0Sg0Go1BY9E4NB5NQBPRJDQZTUFT0TQ0Hc1AM9EsNBvNQXPRPDQfLUAL0SK0GC1BS9EytBytQCvRKrQarUFr0Tq0Hm1AG9EmtBltQVvRNrQd7UA70S60G+1Be9E+tB8dQAfRIXQYHUFH0TF0HJ1AJ9EpdBqdQWfROXQeXUAX0SV0GV1BV9E1dB3dQDfRLXQb3UF30T10Hz1AD9Ej9Bg9QU/RM/QcvUAv0Sv0Gr1Bb9E79B59QB/RJ/QZfUFf0Tf0Hf1AP9Ev9Bv9QX/RPxQXxUdJoqRRsih5lCJKGaWKEqLUUZoobZQuSh9liBL/ZYwyRZmjLFHWKFuUPcoR5YxyRbmjPFHeKF+UPyoQFYwKRYWjIlHRqFhUPCoRlYxKRaWjMlHZqFxUPqoQVYwqRZWjKlHVqFpUPaoR1YxqRbWjOlHdqF5UP2oQNYwaRY2jJlHTqFnUPGoRtYxaRa2jNlHbqF3UPuoQdYw6RZ2jLlHXqFvUPcIiPCIiMqIiOmIiNuIiPhIiMZIiOVIiNdIiPTIiM7IiO3IiN/IiPwqiMAIRjFAURbGoR9Qz6hX1jvpEfaN+Uf9oQDQwGhQNjoZEQ6Nh0fBoRDQyGhWNjsZEY6Nx0fhoQjQxmhRNjqZEU6Np0fRoRjQzmhXNjuZEc6N50fxoQbQwWhQtjpZES6Nl0fJoRbQyWhWtjtZEa6N10fpoQ7Qx2hRtjrZEW6Nt0fZoR7Qz2hXtjvZEe6N90f7oQHQwOhQdjo5ER6Nj0fHoRHQyOhWdjs5EZ6Nz0fnoQnQxuhRdjq5EV6Nr0fXoRnQzuhXdju5Ed6N70f3oQfQwehQ9jp5ET6Nn0fPoRfQyehW9jt5Eb6N30fvoQ/Qx+hR9jr5EX6Nv0ffoR/Qz+hX9jv5Ef6N/UVwsPpYkljSWLJY8liKWMpYqlhBLHUsTSxtLF0sfyxBLjGWMZYpljmWJZY1li2WP5YjljOWK5Y7lieWN5YvljxWIFYwVihWO/T+WznFJs6bRgj22bdu2bdu2tV3bNqqesW3btm17psfuPhHfefMqVqz8kcWxElhJrBRWGiuDlcXKYeWxClhFrBJWGauCVcWqYdWxGlhNrBZWG6uD1cXqYfWxBlhDrBHWGGuCNcWaYc2xFlhLrBXWGmuDtcXaYe2xDlhHrBPWGeuCdcW6Yd2xHlhPrBfWG+uD9cX6Yf2xAdhAbBA2GBuCDcWGYcOxEdhIbBQ2GhuDjcXGYeOxCdhEbBI2GZuCTcWmYdOxGdhMbBaGYThGYCRGYTTGYABjMQ7jMQETMalPuv+f3piOGZiJWZiNOZiLeZiPBViIRRjEEBbDZmNzsLnYPGw+tgBbiC3CFmNLsKXYMmw5tgJbia3CVmNrsLXYOmw9tgHbiG3CNmNbsK3YNmw7tgPbie3CdmN7sL3YPmw/dgA7iB3CDmNHsKPYMew4dgI7iZ3CTmNnsLPYOew8dgG7iF3CLmNXsKvYNew6dgO7id3CbmN3sLvYPew+9gB7iD3CHmNPsKfYM+w59gJ7ib3CXmNvsLfYO+w99gH7iMVjn7DP2BfsK/YN+479wH5iv7Df2B/sL/YPS8ASsTg8CZ4UT4Ynx1PgKfFUeGo8DZ4WT4enxzPgGfFMeGY8C54Vz4Znx3PgOfFceG48D54Xz4fnxwvgBfFCeGG8CF4UL4YXx0vgJfFSeGm8DF4WL4eXxyvgFfFKeGW8Cl4Vr4ZXx2vgNfFaeG28Dl4Xr4fXxxvgDfFGeGO8Cd4Ub4Y3x1vgLfFWeGu8Dd4Wb4e3xzvgHfFOeGe8C94V74Z3x3vgPfFeeG+8D94X74f3xwfgA/FB+GB8CD4UH4YPx0fgI/FR+Gh8DD4WH4ePxyfgE/FJ+GR8Cj4Vn4ZPx2fgM/FZOIbjOIGTOIXTOIMDnMU5nMcFXMQlXMYVXMU1XMcN3MQt3MYd3MU93McDPMQjHOIIj+Gz8Tn4XHwePh9fgC/EF+GL8SX4UnwZvhxfga/EV+Gr8TX4Wnwdvh7fgG/EN+Gb8S34Vnwbvh3fge/Ed+G78T34Xnwfvh8/gB/ED+GH8SP4UfwYfhw/gZ/ET+Gn8TP4Wfwcfh6/gF/EL+GX8Sv4Vfwafh2/gd/Eb+G38Tv4Xfwefh9/gD/EH+GP8Sf4U/wZ/hx/gb/EX+Gv8Tf4W/wd/h7/gH/E4/FP+Gf8C/4V/4Z/x3/gP/Ff+G/8D/4X/4cn4Il4HJGESEokI5ITKYiURCoiNZGGSEukI9ITGYiMRCYiM5GFyEpkI7ITOYicRC4iN5GHyEvkI/ITBYiCRCGiMFGEKEoUI4oTJYiSRCmiNFGGKEuUI8oTFYiKRCWiMlGFqEpUI6oTNYiaRC2iNlGHqEvUI+oTDYiGRCOiMdGEaEo0I5oTLYiWRCuiNdGGaEu0I9oTHYiORCeiM9GF6Ep0I7oTPYieRC+iN9GH6Ev0I/oTA4iBxCBiMDGEGEoMI4YTI4iRxChiNDGGGEuMI8YTE4iJxCRiMjGFmEpMI6YTM4iZxCwCI3CCIEiCImiCIQDBEhzBEwIhEhIhEwqhEhqhEwZhEhZhEw7hEh7hEwEREhEBCUTEiNnEHGIuMY+YTywgFhKLiMXEEmIpsYxYTqwgVhKriNXEGmItsY5YT2wgNhKbiM3EFmIrsY3YTuwgdhK7iN3EHmIvsY/YTxwgDhKHiMPEEeIocYw4TpwgThKniNPEGeIscY44T1wgLhKXiMvEFeIqcY24TtwgbhK3iNvEHeIucY+4TzwgHhKPiMfEE+Ip8Yx4TrwgXhKviNfEG+It8Y54T3wgPhLxxCfiM/GF+Ep8I74TP4ifxC/iN/GH+Ev8IxKIRCKOTEImJZORyckUZEoyFZmaTEOmJdOR6ckMZEYyE5mZzEJmJbOR2ckcZE4yF5mbzEPmJfOR+ckCZEGyEFmYLEIWJYuRxckSZEmyFFmaLEOWJcuR5ckKZEWyElmZrEJWJauR1ckaZE2yFlmbrEPWJeuR9ckGZEOyEdmYjItP/B8tyJZkK7I12YZsS7Yj25MdyI5kJ7Iz2YXsSnYju5M9yJ5kL7I32YfsS/Yj+5MDyIHkIHIwOYQcSg4jh5MjyJHkKHI0OYYcS44jx5MTyInkJHIyOYWcSk4jp5MzyJnkLBIjcZIgSZIiaZIhAcmSHMmTAimSEimTCqmSGqmTBmmSFmmTDumSHumTARmSEQlJRMbI2eQcci45j5xPLiAXkovIxeQScim5jFxOriBXkqvI1eQaci25jlxPbiA3kpvIzeQWciu5jdxO7iB3krvI3eQeci+5j9xPHiAPkofIw+QR8ih5jDxOniBPkqfI0+QZ8ix5jjxPXiAvkpfIy+QV8ip5jbxO3iBvkrfI2+Qd8i55j7xPPiAfko/Ix+QT8in5jHxOviBfkq/I1+Qb8i35jnxPfiA/kvHkJ/Iz+YX8Sn4jv5M/yJ/kL/I3+Yf8S/4jE8hEMo5KQiWlklHJqRRUSioVlZpKQ6Wl0lHpqQxURioTlZnKQmWlslHZqRxUTioXlZvKQ+Wl8lH5qQJUQaoQVZgqQhWlilHFqRJUSaoUVZoqQ5WlylHlqQpURaoSVZmqQlWlqlHVqRpUTaoWVZuqQ9Wl6lH1qQZUQ6oR1ZhqQjWlmlHNqRZUS6oV1ZpqQ7Wl2lHtqQ5UR6oT1ZnqQnWlulHdqR5UT6oX1ZvqQ/Wl+lH9qQHUQGoQNZgaQg2lhlHDqRHUSGoUNZoaQ42lxlHjqQnURGoSNZmaQk2lplHTqRnUTGoWhVE4RVAkRVE0xVCAYimO4imBEimJkimFUimN0imDMimLsimHcimP8qmACqmIghSiYtRsag41l5pHzacWUAupRdRiagm1lFpGLadWUCupVdRqag21llpHrac2UBupTdRmagu1ldpGbad2UDupXdRuag+1l9pH7acOUAepQ9Rh6gh1lDpGHadOUCepU9Rp6gx1ljpHnacuUBepS9Rl6gp1lbpGXaduUDepW9Rt6g51l7pH3aceUA+pR9Rj6gn1lHpGPadeUC+pV9Rr6g31lnpHvac+UB+peOoT9Zn6Qn2lvlHfqR/UT+oX9Zv6Q/2l/lEJVCIVRyehk9LJ6OR0CjolnYpOTaeh09Lp6PR0BjojnYnOTGehs9LZ6Ox0DjonnYvOTeeh89L56Px0AbogXYguTBehi9LF6OJ0CbokXYouTZehy9Ll6PJ0BboiXYmuTFehq9LV6Op0DbomXYuuTdeh69L16Pp0A7oh3YhuTDehm9LN6OZ0C7ol3YpuTbeh29Lt6PZ0B7oj3YnuTHehu9Ld6O50D7on3YvuTfeh+9L96P70AHogPYgeTA+hh9LD6OH0CHokPYoeTY+hx9Lj6PH0BHoiPYmeTE+hp9LT6On0DHomPYvGaJwmaJKmaJpmaECzNEfztECLtETLtEKrtEbrtEGbtEXbtEO7tEf7dECHII6GNKJj9Gx6Dj2XnkfPpxfQC+lF9GJ6Cb2UXkYvp1fQK+lV9Gp6Db2WXkevpzfQG+lN9GZ6C72V3kZvp3fQO+ld9G56D72X3kfvpw/QB+lD9GH6CH2UPkYfp0/QJ+lT9Gn6DH2WPkefpy/QF+lL9GX6Cn2VvkZfp2/QN+lb9G36Dn2Xvkffpx/QD+lH9GP6Cf2UfkY/p1/QL+lX9Gv6Df2Wfke/pz/QH+l4+hP9mf5Cf6W/0d/pH/RP+hf9m/5D/6X/0Ql0Ih3HJGGSMsmY5EwKJiWTiknNpGHSMumY9EwGJiOTicnMZGGyMtmY7EwOJieTi8nN5GHyMvmY/EwBpiBTiCnMFGGKMsWY4kwJpiRTiinNlGHKMuWY8kwFpiJTianMVGGqMtWY6kwNpiZTi6nN1GHqMvWY+kwDpiHTiGnMNGGaMs2Y5kwLpiXTimnNtGHaMu2Y9kwHpiPTienMdGG6Mt2Y7kwPpifTi+nN9GH6Mv2Y/swAZiAziBnMDGGGMsOY4cwIZiQzihnNjGHGMuOY8cwEZiIziZnMTGGmMtOY6cwMZiYzi8EYnCEYkqEYmmEYwLAMx/CMwIiMxMiMwqiMxuiMwZiMxdiMw7iMx/hMwIRMxEAGMTFmNjOHmcvMY+YzC5iFzCJmMbOEWcosY5YzK5iVzCpmNbPmvw8/jtnIbGI2M1uYrcw2Zjuzg9nJ7GJ2M3uYvcw+Zj9zgDnIHGIOM0eYo8wx5jhzgjnJnGJOM2eYs8w55jxzgbnIXGIuM1eYq8w15jpzg7nJ3GJuM3eYu8w95j7zgHnIPGIeM0+Yp8wz5jnzgnnJvGJeM2+Yt8w7hmU+MB+ZeOYT85n5wnxlvjHfmR/MT+YX85v5w/xl/jEJTCITB5KApCAZSA5SgJQgFUgN0oC0IB1IDzKAjCATyAyygKwgG8gOcoCcIBfIDfKAvCAfyA8KgIKgECgMioCioBgoDkqAkqAUKA3KgLKgHCgPKoCKoBKoDKqAqqAaqA5qgJqgFqgN6oC6oB6oDxqAhqARaAyagKagGWgOWoCWoBVoDdqAtqAdaA86gI6gE+gMuoCuoBvoDnqAnqAX6A36gL6gH+gPBoCBYBAYDIaAoWAYGA5GgJFgFBgNxoCxYBwYDyaAiWASmAymgKlgGpgOZoCZYBbAAA4IQAIK0IABALCAAzwQgAgkIAMFqEADOjCACSxgAwe4wAM+CEAIIgABAjEwG8wBc8E8MB8sAAvBIrAYLAFLwTKwHKwAK8EqsBqsAWvBOrAebAAbwSawGWwBW8E2sB3sADvBLrAb7AF7wT6wHxwAB8EhcBgcAUfBMXAcnAAnwSlwGpwBZ8E5cB5cABfBJXAZXAFXwTVwHdwAN8EtcBvcAXfBPXAfPAAPwSPwGDwBT8Ez8By8AC/BK/AavAFvwTvwHnwAH0E8+AQ+gy/gK/gGvoMf4Cf4BX6DP+Av+AcSQCKIY5OwSdlkbHI2BZuSTcWmZtOwadl0bHo2A5uRzcRmZrOwWdlsbHY2B5uTzcXmZvOwedl8bH62AFuQLcQWZouwRdlibHG2BFuSLcWWZsuwZdlybHm2AluRrcRWZquwVdlqbHW2BluTrcXWZuuwddl6bH22AduQbcQ2ZpuwTdlmbHO2BduSbcW2Ztuwbdl2bHu2A9uR7cR2ZruwXdlubHe2B9uT7cX2Zvuwfdl+bH92ADuQHcQOZoewQ9lh7HB2BDuSHcWOZsewY9lx7Hh2AjuRncROZqewU9lp7HR2BjuTncViLM4SLMlSLM0yLGBZlmN5VmBFVmJlVmFVVmN11mBN1mJt1mFdNhHExQVsyEYsZBEbY2ezc9i57Dx2PruAXcguYhezS9il7DJ2ObuCXcmuYleza9i17Dp2PbuB3chuYjezW9it7DZ2O7uD3cnuYneze9i97D52P3uAPcgeYg+zR9ij7DH2OHuCPcmeYk+zZ9iz7Dn2PHuBvcheYi+zV9ir7DX2OnuDvcneYm+zd9i77D32PvuAfcg+Yh+zT9in7DP2OfuCfcm+Yl+zb9i37Dv2PfuB/cjGs5/Yz+wX9iv7jf3O/mB/sr/Y3+wf9i/7j01gE9k4LgmXlEvGJedScCm5VFxqLg2XlkvHpecycBm5TFxmLguXlcvGZedycDm5XFxuLg+Xl8vH5ecKcAW5QlxhrghXlCvGFedKcCW5UlxprgxXlivHlecqcBW5SlxlrgpXlavGVedqcDW5Wlxtrg5Xl6vH1ecacA25RlxjrgnXlGvGNedacC25Vlxrrg3XlmvHtec6cB25TlxnrgvXlevGded6cD25Xlxvrg/Xl+vH9ecGcAO5Qdxgbgg3lBvGDedGcCO5Udxobgw3lhvHjecmcBO5Sdxkbgo3lZvGTedmcDO5WRzG4RzBkRzF0RzDAY7lOI7nBE7kJE7mFE7lNE7nDM7kLM7mHM7lPM7nAi7kIg5yiItxs7k53FxuHjefW8At5BZxi7kl3FJuGbecW8Gt5FZxq7k13FpuHbee28Bt5DZxm7kt3FZuG7ed28Ht5HZxu7k93F5uH7efO8Ad5A5xh7kj3FHuGHecO8Gd5E5xp7kz3FnuHHeeu8Bd5C5xl7kr3FXuGnedu8Hd5G5xt7k73F3uHnefe8A95B5xj7kn3FPuGfece8G95F5xr7k33FvuHfee+8B95OK5T9xn7gv3lfvGfed+cD+5X9xv7g/3l/vHJXCJXByfhE/KJ+OT8yn4lHwqPjWfhk/Lp+PT8xn4jHwmPjOfhc/KZ+Oz8zn4nHwuPjefh8/L5+Pz8wX4gnwhvjBfhC/KF+OL8yX4knwpvjRfhi/Ll+PL8xX4inwlvjJfha/KV+Or8zX4mnwtvjZfh6/L1+Pr8w34hnwjvjHfhG/KN+Ob8y34lnwrvjXfhm/Lt+Pb8x34jnwnvjPfhe/Kd+O78z34nnwvvjffh+/L9+P78wP4gfwgfjA/hB/KD+OH8yP4kfwofjQ/hh/Lj+PH8xP4ifwkfjI/hZ/KT+On8zP4mfwsHuNxnuBJnuJpnuEBz/Icz/MCL/ISL/MKr/Iar/MGb/IWb/MO7/Ie7/MBH/IRD3nEx/jZ/JzExIREfj6/gF/IL+IX80v4pfwyfjm/gl/Jr+JX82v4tfw6fj2/gd/Ib+I381v4rfw2fju/g9/J7+J383v4vfw+fj9/gD/IH+IP80f4o/wx/jh/gj/Jn+JP82f4s/w5/jx/gb/IX+Iv81f4q/w1/jp/g7/J3+Jv83f4u/w9/j7/gH/IP+If80/4p/wz/jn/gn/Jv+Jf82/4t/w7/j3/gf/Ix/Of+M/8F/4r/43/zv/gf/K/+N/8H/4v/49P4BP5OCGJkFRIJiQXUggphVRCaiGNkFZIJ6QXMggZhUxCZiGLkFXIJmQXcgg5hVxCbiGPkFfIJ+QXCggFhUJCYaGIUFQoJhQXSgglhVJCaaGMUFYoJ5QXKggVhUpCZaGKUFWoJlQXagg1hVpCbaGOUFeoJ9QXGggNhUZCY6GJ0FRoJjQXWggthVZCa6GN0FZoJ7QXOggdhU5CZ6GL0FXoJnQXegg9hV5Cb6GP0FfoJ/QXBggDhUHCYGGIMFQYJgwXRggjhVHCaGGMMFYYJ4wXJggThUnCZGGKMFWYJkwXZggzhVkCJuACIZACJdACIwCBFTiBFwRBFCRBFhRBFTRBFwzBFCzBFhzBFTzBFwIhFCIBCkiICbOFOcJcYZ4wX1ggLBQWCYuFJcJSYZmwXFghrBRWxa0W1ghrhXXCemGDsFHYJGwWtghbhW3CdmGHsFPYJewW9gh7hX3CfuGAcFA4JBwWjghHhWPCceGEcFI4JZwWzghnhXPCeeGCcFG4JFwWrghXhWvCdeGGcFO4JdwW7gh3hXvCfeGB8FB4JDwWnghPhWfCc+GF8FJ4JbwW3ghvhXfCe+GD8FGIFz4Jn4Uvwlfhm/Bd+CH8FH4Jv4U/wl/hn5AgJApxYhIxqZhMTC6mEFOKqcTUYhoxrZhOTC9mEDOKmcTMYhYxq5hNzC7mEHOKucTcYh4xr5hPzC8WEAuKhcTCYhGxqFhMLC6WEEuKpcTSYhmxrFhOLC9WECuKlcTKYhWxqlhNrC7WEGuKtcTaYh2xrlhPrC82EBuKjcTGYhOxqdhMbC62EFuKrcTWYhuxrdhObC92EDuKncTOYhexq9hN7C72EHuKvcTeYh+xr9hP7C8OEAeKg8TB4hBxqDhMHC6OEEeKo8TR4hhxrDhOHC9OECeKk8TJ4hRxqjhNnC7OEGeKs0RMxEVCJEVKpEVGBCIrciIvCqIoSqIsKqIqaqIuGqIpWqItOqIreqIvBmIoRiIUkRgTZ4tzxLniPHG+uEBcKC4SF4uJ/7FCXCmuEleLa8S14jpxvbjhfxW2zeIWcau4Tdwu7hB3irvE3eIeca+4T9wvHhAPiofEw+IR8ah4TDwunhBPiqfE0+IZ8ax4TjwvXhAvipfEy+IV8ap4Tbwu3hBvirfE2+Id8a54T7wvPhAfio/Ex+IT8an4THwuvhBfiq/E1+Ib8a34TnwvfhA/ivHiJ/Gz+EX8Kn4Tv4s/xJ/iL/G3+Ef8K/4TE8REMU5KIiWVkknJpRRSSimVlFpKI6WV0knppQxSRimTlFnKImWVsknZpRxSTimXlFvKI+WV8kn5pQJSQamQVFgqIhWViknFpRJSSamUVFoqI5WVyknlpQpSRamSVFmqIlWVqknVpRpSTamWVFuqI9WV6kn1pQZSQ6mR1FhqIjWVmknNpRZSS6mV1FpqI7WV2kntpQ5SR6mT1FnqInWVukndpR5ST6mX1FvqI/WV+kn9pQHSQGmQNFgaIg2VhknDpRHSSGmUNFoaI42VxknjpQnSRGmSNFmaIk2VpknTpRnSTGmWhEm4REikREm0xEhAYiVO4iVBEiVJkiVFUiVN0iVDMiVLsiVHciVP8qVACqVIghKSYtJsaY40V5onzZcWSAulRdJiaYm0VFomLZdWSCulVdJqaY20VlonrZc2SBulTdJmaYu0VdombZd2SDulXdJuaY+0V9on7ZcOSAelQ9Jh6Yh0VDomHZdOSCelU9Jp6Yx0VjonnZcuSBelS9Jl6Yp0VbomXZduSDelW9Jt6Y50V7on3ZceSA+lR9Jj6Yn0VHomPZdeSC+lV9Jr6Y30VnonvZc+SB+leOmT9Fn6In2VvknfpR/ST+mX9Fv6I/2V/kkJUqIUJyeRk8rJ5ORyCjmlnEpOLaeR08rp5PRyBjmjnEnOLGeRs8rZ5OxyDjmnnEvOLeeR88r55PxyAbmgXEguLBeRi8rF5OJyCbmkXEouLZeRy8rl5PJyBbmiXEmuLFeRq8rV5OpyDbmmXEuuLdeR68r15PpyA7mh3EhuLDeRm8rN5OZyC7ml3EpuLbeR28rt5PZyB7mj3EnuLHeRu8rd5O5yD7mn3EvuLfeR+8r95P7yAHmgPEgeLA+Rh8rD5OHyCHmkPEoeLY+Rx8rj5PHyBHmiPEmeLE+Rp8rT5OnyDHmmPEvGZFwmZFKmZFpmZCCzMifzsiCLsiTLsiKrsibrsiGbsiXbsiO7sif7ciCHciRDGckxebY8R54rz5PnywvkhfIiebG8RF4qL5OXyyvklfIqebW8Rl4rr5PXyxvkjfImebO8Rd4qb5O3yzvknfIuebe8R94r75P3ywfkg/Ih+bB8RD4qH5OPyyfkk/Ip+bR8Rj4rn5PPyxfki/Il+bJ8Rb4qX5Ovyzfkm/It+bZ8R74r35Pvyw/kh/Ij+bH8RH4qP5Ofyy/kl/Ir+bX8Rn4rv5Pfyx/kj3K8/En+LH+Rv8rf5O/yD/mn/Ev+Lf+R/8r/5AQ5Uf4vlRaXXEmhpFRSKamVNEpaJZ2SXsmgZFQyKZmVLEpWJZuSXcmh5FRyKbmVPEpeJZ+SXymgFFQKKYWVIkpRpZhSXCmhlFRKKaWVMkpZpZxSXqmgVFQqKZWVKkpVpZpSXamh1FRqKbWVOkpdpZ5SX2mgNFQaKY2VJkpTpZnSXGmhtFRaKa2VNkpbpZ3SXumgdFQ6KZ2VLkpXpZvSXemh9FR6Kb2VPkpfpZ/SXxmgDFQGKYOVIcpQZZgyXBmhjFRGKaOVMcpYZZwyXpmgTFQmKZOVKcpUZZoyXZmhzFRmKZiCK4RCKpRCK4wCFFbhFF4RFFGRFFlRFFXRFF0xFFOxFFtxFFfxFF8JlFCJFKggJabMVuYoc5V5ynxlgbJQWaQsVpYoS5VlynJlhbJSWaWsVtYoa5V1ynplg7JR2aRsVrYoW5VtynZlh7JT2aXsVvYoe5V9yn7lgHJQOaQcVo4oR5VjynHlhHJSOaWcVs4oZ5VzynnlgnJRuaRcVq4oV5VrynXlhnJTuaXcVu4od5V7yn3lgfJQeaQ8Vp4oT5VnynPlhfJSeaW8Vt4ob5V3ynvlg/JRiVc+KZ+VL8pX5ZvyXfmh/FR+Kb+VP8pf5Z+SoCQqcWoSNamaTE2uplBTqqnU1GoaNa2aTk2vZlAzqpnUzGoWNauaTc2u5lBzqrnU3GoeNa+aT82vFlALqoXUwmoRtahaTC2ullBLqqXU0moZtaxaTi2vVlArqpXUymoVtapaTa2u1lBrqrXU2modta5aT62vNlAbqo3UxmoTtanaTG2utlBbqq3U1mobta3aTm2vdlA7qp3UzmoXtavaTe2u9lB7qr3U3mofta/aT+2vDlAHqoPUweoQdag6TB2ujlBHqqPU0eoYdaw6Th2vTlAnqpPUyeoUdao6TZ2uzlBnqrNUTMVVQiVVSqVVRgUqq3IqrwqqqEqqrCqqqmqqrhqqqVqqrTqqq3qqrwZqqEYqVJEaU2erc9S56jx1vrpAXaguUherS9Sl6jJ1ubpCXamuUlera9S16jp1vbpB3ahuUjerW9St6jZ1u7pD3anuUnere9S96j51v3pAPageUg+rR9Sj6jH1uHpCPameUk+rZ9Sz6jn1vHpBvaheUi+rV9Sr6jX1unpDvaneUm+rd9S76j31vvpAfag+Uh+rT9Sn6jP1ufpCfam+Ul+rb9S36jv1vfpB/ajGq5/Uz+oX9av6Tf2u/lB/qr/U3+of9a/6T01QE9U4LYmWVEumJddSaCm1VFpqLY2WVkunpdcyaBm1TFpmLYuWVcumZddyaDm1XFpuLY+WV8un5dcKaAW1QlphrYhWVCumFddKaCW1UlpprYxWViunldcqaBW1SlplrYpWVaumVddqaDW1WlptrY5WV6un1dcaaA21RlpjrYnWVGumNddaaC21VlprrY3WVmuntdc6aB21TlpnrYvWVeumddd6aD21XlpvrY/WV+un9dcGaAO1QdpgbYg2VBumDddGaCO1UdpobYw2VhunjdcmaBO1SdpkbYo2VZumTddmaDO1WRqm4RqhkRql0RqjAY3VOI3XBE3UJE3WFE3VNE3XDM3ULM3WHM3VPM3XAi3UIg1qSItps7U52lxtnjZfW6At1BZpi7Ul2lJtmbZcW6Gt1FZpq7U12lptnbZe26Bt1DZpm7Ut2lZtm7Zd26Ht1HZpu7U92l5tn7ZfO6Ad1A5ph7Uj2lHtmHZcO6Gd1E5pp7Uz2lntnHZeu6Bd1C5pl7Ur2lXtmnZdu6Hd1G5pt7U72l3tnnZfe6A91B5pj7Un2lPtmfZce6G91F5pr7U32lvtnfZe+6B91OK1T9pn7Yv2Vfumfdd+aD+1X9pv7Y/2V/unJWiJWpyeRE+qJ9OT6yn0lHoqPbWeRk+rp9PT6xn0jHomPbOeRc+qZ9Oz6zn0nHouPbeeR8+r59Pz6wX0gnohvbBeRC+qF9OL6yX0knopvbReRi+rl9PL6xX0inolvbJeRa+qV9Or6zX0mnotvbZeR6+r19Pr6w30hnojvbHeRG+qN9Ob6y30lnorvbXeRm+rt9Pb6x30jnonvbPeRe+qd9O76z30nnovvbfeR++r99P76wP0gfogfbA+RB+qD9OH6yP0kfoofbQ+Rh+rj9PH6xP0ifokfbI+RZ+qT9On6zP0mfosHdNxndBJndJpndGBzuqczuuCLuqSLuuKruqaruuGbuqWbuuO7uqe7uuBHuqRDnWkx/TZ+hx9rj5Pn68v0Bfqi/TF+hJ9qb5MX66v0Ffqq/TV+hp9rb5OX69v0Dfqm/TN+hZ9q75N367v0Hfqu/Td+h59r75P368f0A/qh/TD+hH9qH5MP66f0E/qp/TT+hn9rH5OP69f0C/ql/TL+hX9qn5Nv67f0G/qt/Tb+h39rn5Pv68/0B/qj/TH+hP9qf5Mf66/0F/qr/TX+hv9rf5Of69/0D/q8fon/bP+Rf+qf9O/6z/0n/ov/bf+R/+r/9MT9EQ9zkhiJDWSGcmNFEZKI5WR2khjpDXSGemNDEZGI5OR2chiZDWyGdmNHEZOI5eR28hj5DXyGfmNAkZBo5BR2ChiFDWKGcWNEkZJo5RR2ihjlDXKGeWNCkZFo5JR2ahiVDWqGdWNGkZNo5ZR26hj1DXqGfWNBkZDo5HR2GhiNDWaGc2NFkZLo5XR2mhjtDXaGe2NDkZHo5PR2ehidDW6Gd2NHkZPo5fR2+hj9DX6Gf2NAcZAY5Ax2BhiDDWGGcONEcZIY5Qx2hhjjDXGGeONCcZEY5Ix2ZhiTDWmGdONGcZMY5aBGbhBGKRBGbTBGMBgDc7gDcEQDcmQDcVQDc3QDcMwDcuwDcdwDc/wjcAIjciABjJixmxjjjHXmGfMNxYYC41FxmJjibHUWGYsN1YYK41VxmpjjbHWWGesNzYYG41NxmZji7HV2GZsN3YYO41dxm5jj7HX2GfsNw4YB41DxmHjiHHUOGYcN04YJ41TxmnjjHHWOGecNy4YF41LxmXjinHVuGZcN24YN41bxm3jjnHXuGfcNx4YD41HxmPjifHUeGY8N14YL41XxmvjjfHWeGe8Nz4YH41445Px2fhifDW+Gd+NH8ZP45fx2/hj/DX+GQlGohFnJjGTmsnM5GYKM6WZykxtpjHTmunM9GYGM6OZycxsZjGzmtnM7GYOM6eZy8xt5jHzmvnM/GYBs6BZyCxsFjGLmsXM4mYJs6RZyixtljHLmuXM8mYFs6JZyaxsVjGrmtXM6mYNs6ZZy6xt1jHrmvXM+mYDs6HZyGxsNjGbms3M5mYLs6XZymxttjHbmu3M9mYHs6PZyexsdjG7mt3M7mYPs6fZy+xt9jH7mv3M/uYAc6A5yBxsDjGHmsPM4eYIc6Q5yhxtjjHHmuPM8eYEc6I5yZxsTjGnmtPM6eYMc6Y5y8RM3CRM0qRM2mRMYLImZ/KmYIqmZMqmYqqmZuqmYZqmZdqmY7qmZ/pmYIZmZEITmTFztjnHnGvOM+ebC8yF5iJzsbnEXGouM5ebK8yV5ipztbnGXGuuM9ebG8yN5iZzs7nF3GpuM7ebO8yd5i5zt7nH3GvuM/ebB8yD5iHzsHnEPGoeM4+bJ8yT5inztHnGPGueM8+bF8yL5iXzsnnFvGpeM6+bN8yb5i3ztnnHvGveM++bD8yH5iPzsfnEfGo+M5+bL8yX5ivztfnGfGu+M9+bH8yPZrz5yfxsfjG/mt/M7+YP86f5y/xt/jH/mv/MBDPRjLOSWEmtZFZyK4WV0kplpbbSWGmtdFZ6K4OV0cpkZbayWFmtbFZ2K4eV08pl5bbyWHmtfFZ+q4BV0CpkFbaKWEWtYlZxq4RV0ipllbbKWGWtclZ5q4JV0apkVbaqWFWtalZ1q4ZV06pl1bbqWHWtelZ9q4HV0GpkNbaaWE2tZlZzq4XV0mpltbbaWG2tdlZ7q4PV0epkdba6WF2tblZ3q4fV0+pl9bb6WH2tflZ/a4A10BpkDbaGWEOtYdZwa4Q10hpljbbGWGOtcdZ4a4I10ZpkTbamWFOtadZ0a4Y105plYRZuERZpURZtMRawWIuzeEuwREuyZEuxVEuzdMuwTMuybMuxXMuzfCuwQiuyoIWsmDXbmmPNteZZ860F1kJrkbXYWmIttZZZy60V1kprlbXaWmOttdZZ660N1kZrk7XZ2mJttbZZ260d1k5rl7Xb2mPttfZZ+60D1kHrkHXYOmIdtY5Zx60T1knrlHXaOmOdtc5Z560L1kXrknXZumJdta5Z160b1k3rlnXbumPdte5Z960H1kPrkfXYemI9tZ5Zz60X1kvrlfXaemO9td5Z760P1kcr3vpkfba+WF+tb9Z364f10/pl/bb+WH+tf1aClWjF2UnspHYyO7mdwk5pp7JT22nstHY6O72dwc5oZ7Iz21nsrHY2O7udw85p57Jz23nsvHY+O79dwC5oF7IL20XsonYxu7hdwi5pl7JL22XssnY5u7xdwa5oV7Ir21XsqnY1u7pdw65p17Jr23XsunY9u77dwG5oN7Ib203spnYzu7ndwm5pt7Jb223stnY7u73dwe5od7I7213srnY3u7vdw+5p97J7233svnY/u789wB5oD7IH20PsofYwe7g9wh5pj7JH22PssfY4e7w9wZ5oT7In21PsqfY0e7o9w55pz7IxG7cJm7Qpm7YZG9iszdm8LdiiLdmyrdiqrdm6bdimbdm27diu7dm+HdihHdnQRnbMnm3Psefa8+z59gJ7ob3IXmwvsZfay+zl9gp7pb3KXm2vsdfa6+z19gZ7o73J3mxvsbfa2+zt9g57p73L3m3vsffa++z99gH7oH3IPmwfsY/ax+zj9gn7pH3KPm2fsc/a5+zz9gX7on3Jvmxfsa/a1+zr9g37pn3Lvm3fse/a9+z79gP7of3Ifmw/sZ/az+zn9gv7pf3Kfm2/sd/a7+z39gf7ox1vf7I/21/sr/Y3+7v9w/5p/7J/23/sv/Y/O8FOtOOcJE5SJ5mT3EnhpHRSOamdNE5aJ52T3sngZHQyOZmdLE5WJ5uT3cnh5HRyObmdPE5eJ5+T3yngFHQKOYWdIk5Rp5hT3CnhlHRKOaWdMk5Zp5xT3qngVHQqOZWdKk5Vp5pT3anh1HRqObWdOk5dp55T32ngNHQaOY2dJk5Tp5nT3GnhtHRaOa2dNk5bp53T3ungdHQ6OZ2dLk5Xp5vT3enh9HR6Ob2dPk5fp5/T3xngDHQGOYOdIc5QZ5gz3BnhjHRGOaOdMc5YZ5wz3pngTHQmOZOdKc5UZ5oz3ZnhzHRmOZiDO4RDOpRDO4wDHNbhHN4RHNGRHNlRHNXRHN0xHNOxHNtxHNfxHN8JnNCJHOggJ+bMduY4c515znxngbPQWeQsdpY4S51lznJnhbPSWeWsdtY4a511znpng7PR2eRsdrY4W51tznZnh7PT2eXsdvY4e519zn7ngHPQOeQcdo44R51jznHnhHPSOeWcds44Z51zznnngnPRueRcdq44V51rznXnhnPTueXcdu44d517zn3ngfPQeeQ8dp44T51nznPnhfPSeeW8dt44b513znvng/PRiXc+OZ+dL85X55vz3fnh/HR+Ob+dP85f55+T4CQ6cW4SN6mbzE3upnBTuqnc1G4aN62bzk3vZnAzupnczG4WN6ubzc3u5nBzurnc3G4eN6+bz83vFnALuoXcwm4Rt6hbzC3ulnBLuqXc0m4Zt6xbzi3vVnArupXcym4Vt6pbza3u1nBrurXc2m4dt65bz63vNnAbuo3cxm4Tt6nbzG3utnBbuq3c1m4bt63bzm3vdnA7up3czm4Xt6vbze3u9nB7ur3c3m4ft6/bz+3vDnAHuoPcwe4Qd6g7zB3ujnBHuqPc0e4Yd6w7zh3vTnAnupPcye4Ud6o7zZ3uznBnurNczMVdwiVdyqVdxgUu63Iu7wqu6Equ7Cqu6mqu7hqu6Vqu7Tqu63qu7wZu6EYudJEbc2e7c9y57jx3vrvAXeguche7S9yl7jJ3ubvCXemucle7a9y17jp3vbvB3ehucje7W9yt7jZ3u7vD3enucne7e9y97j53v3vAPegecg+7R9yj7jH3uHvCPemeck+7Z9yz7jn3vHvBveheci+7V9yr7jX3unvDvenecm+7d9y77j33vlso7qH7yH3sPnGfus/c5+4L96X7yn3tvnHfuu/c9+4H96Mb735yP7tf3K/uN/e7+8P96f5yf7t/3L/uPzfBTXTjvCReUi+Zl9xL4aX0UnmpvTReWi+dl97L4GX0MnmZvSxeVi+bl93L4eX0cnm5vTxeXi+fl98r4BX0CnmFvSJeUa+YV9wr4ZX0SnmlvTJeWa+cV96r4FX0KnmVvSpeVa+aV92r4dX0anm1vTpeXa+eV99r4DX0GnmNvSZeU6+Z19xr4bX0WnmtvTZekrg4tr3XwevodfI6e128rl43r7vXw+vp9fJ6e328vl4/r783wBvoDfIGe0O8od4wb7g3whvpjfJGe2O8sd44b7w3wZvoTfIme1O8qd40b7o3w5vpzfIwD/cIj/Qoj/YYD3isx3m8J3iiJ3myp3iqp3m6Z3imZ3m253iu53m+F3ihF3nQQ17Mm+3N8eZ687z53gJvobfIW+wt8ZZ6y7zl3gpvpbfKW+2t8dZ667z13gZvo7fJ2+xt8bZ627zt3g5vp7fL2+3t8fZ6+7z93gHvoHfIO+wd8Y56x7zj3gnvpHfKO+2d8c5657zz3gXvonfJu+xd8a5617zr3g3vpnfLu+3d8e5697z73gPvoffIe+w98Z56z7zn3gvvpffKe+298d5677z33gfvoxfvffI+e1+8r94377v3w/vp/fJ+e3+8v94/L8FL9OL8JH5SP5mf3E/hp/RT+an9NH5aP52f3s/gZ/Qz+Zn9LH5WP5uf3c/h5/Rz+bn9PH5eP5+f3y/gF/QL+YX9In5Rv5hf3C/hl/RL+aX9Mn5Zv5xf3q/gV/Qr+ZX9Kn5Vv5pf3a/h1/Rr+bX9On5dv55f32/gN/Qb+Y39Jn5Tv5nf3G/ht/Rb+a39Nn5bv53f3u/gd/Q7+Z39Ln5Xv5vf3e/h9/R7+b39Pn5fv5/f3x/gD/QH+YP9If5Qf5g/3B/hj/RH+aP9Mf5Yf5w/3p/gT/Qn+ZP9Kf5Uf5o/3Z/hz/Rn+ZiP+4RP+pRP+4wPfNbnfN4XfNGXfNlXfNXXfN03fNO3fNt3fNf3fN8P/NCPfOgjP+bP9uf4c/15/nx/gb/QX+Qv9pf4S/1l/nJ/hb/SX+Wv9tf4a/11/np/g7/R3+Rv9rf4W/1t/nZ/h7/T3+Xv9vf4e/19/n7/gH/QP+Qf9o/4R/1j/nH/hH/SP+Wf9s/4Z/1z/nn/gn/Rv+Rf9q/4V/1r/nX/hn/Tv+Xf9u/4d/17/n3/gf/Qf+Q/9p/4T/1n/nP/hf/Sf+W/9t/4b/13/nv/g//Rj/c/+Z/9L/5X/5v/3f/h//R/+b/9P/5f/5+f4Cf6cUGSIGmQLEgepAhSBqmC1EGaIG2QLkgfZAgyBpmCzEGWIGuQLcge5AhyBrmC3EGeIG+QL8gfFAgKBoWCwkGRoGhQLCgelAhKBqWC0kGZoGxQLigfVAgqBpWCykGVoGpQLage1AhqBrWC2kGdoG5QL6gfNAgaBo2CxkGToGnQLGgetAhaBq2C1kGboG3QLmgfdAg6Bp2CzkGXoGvQLege9Ah6Br2C3kGfoG/QL+gfDAgGBoOCwcGQYGgwLBgejAhGBqOC0cGYYGwwLhgfTAgmBpOCycGUYGowLZgezAhmBrMCLMADIiADKqADJgABG3ABHwiBGEiBHCiBGmiBHhiBGViBHTiBG3iBHwRBGEQBDFAQC2YHc4K5wbxgfrAgWBgsChYHS4KlwbJgebAiWBmsClYHa4K1wbpgfbAh2BhsCjYHW4KtwbZge7Aj2BnsCnYHe4K9wb5gf3AgOBgcCg4HR4KjwbHgeHAiOBmcCk4HZ4KzwbngfHAhuBhcCi4HV4KrwbXgenAjuBncCm4Hd4K7wb3gfvAgeBg8Ch4HT4KnwbPgefAieBm8Cl4Hb4K3wbvgffAh+BjEB5+Cz8GX4GvwLfge/Ah+Br+C38Gf4G/wL0gIEoO4MEmYNEwWJg9ThCnDVGHqME2YNkwXpg8zhBnDTGHmMEuYNcwWZg9zhDnDXGHuME+YN8wX5g8LhAXDQmHhsEhYNCwWFg9LhCXDUmHpsExYNiwXlg8rhBXDSmHlsEpYNawWVg9rhDXDWmHtsE5YN6wX1g8bhA3DRmHjsEnYNGwWNg9bhC3DVmHrsE3YNmwXtg87hB3DTmHnsEvYNewWdg97hD3DXmHvsE/YN+wX9g8HhAPDQeHgcEg4NBwWDg9HhCPDUeHocEw4NhwXjg8nhBPDSeHkcEo4NZwWTg9nhDPDWSEW4iERkiEV0iETgpANuZAPhVAMpVAOlVANtVAPjdAMrdAOndANvdAPgzAMoxCGKIyFs8M54dxwXjg/XBAuDBeFi8Ml4dJwWbg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8Mt4dZwW7g93BHuDHeFu8M94d5wX7g/PBAeDA+Fh8Mj4dHwWHg8PBGeDE+Fp8Mz4dnwXHg+vBBeDC+Fl8Mr4dXwWng9vBHeDG+Ft8M74d3wXng/fBA+DB+Fj8Mn4dPwWfg8fBG+DF+Fr8M34dvwXfg+/BB+DOPDT+Hn8Ev4NfwWfg9/hD/DX+Hv8E/4N/wXJoSJYVyUJEoaJYuSRymilFGqKHWUJkobpYvSRxmijFGmKHOUJcoaZYuyRzminFGuKHeUJ8ob5YvyRwWiglGhqHBUJCoaFYuKRyWiklGpqHRUJioblYvKRxWiilGlqHJUJaoaVYuqRzWimlGtqHZUJ6ob1YvqRw2ihlGjqHHUJGoaNYuaRy2illGrqHXUJmobtYvaRx2ijlGnqHPUJeoadYu6Rz2inlGvqHfUJ+ob9Yv6RwOigdGgaHA0JBoaDYuGRyOikdGoaHQ0JhobjYvGRxOiidGkaHI0JZoaTYumRzOimdGsCIvwiIjIiIroiIlAyv/0ZyRGUiRHSqRGWqRHRmRGVmRHTuRGXuRHQRRGUQQjFMWi2dGcaG40L5ofLYgWRouixdGSaGm0LFoerYhWRqui1dGaaG20LlofbYg2RpuizdGWaGu0Ldoe7Yh2Rrui3dGeaG+0L9ofHYgORoeiw9GR6Gh0LDoenYhORqei09GZ6Gx0LjofXYguRpeiy9GV6Gp0Lboe3YhuRrei29Gd6G50L7ofPYgeRo+ix9GT6Gn0LHoevYheRq+i19Gb6G30LnoffYg+RvHRp+hz9CX6Gn2Lvkc/op/Rr+h39Cf6G/2LEqLEKA4mgUlhMpgcpoApYSqYGqaBaWE6mB5mgBlhJpgZZoFZYTaYHeaAOWEumBvmgXlhPpgfFoAFYSFYGBaBRWExWByWgCVhKVgaloFlYTlYHlaAFWElWBlWgVVhNVgd1oA1YS1YG9aBdWE9WB82gA1hI9gYNoFNYTPYHLaALWEr2Bq2gW1hO9gedoAdYSfYGXaBXWE32B32gD1hL9gb9oF9YT/YHw6AA+EgOBgOgUPhMDgcjoAj4Sg4Go6BY+E4OB5OgBPhJDgZToFT4TQ4Hc6AM+EsiEEcEpCEFKQhAwFkIQd5KEARSlCGClShBnVoQBNa0IYOdKEHfRjAEEYQQgRjcDacA+fCeXA+XAAXwkVwMVwCl8JlcDlcAVfCVXA1XAPXwnVwPdwAN8JNcDPcArfCbXA73AF3wl1wN9wD98J9cD88AA/CQ/AwPAKPwmPwODwBT8JT8DQ8A8/Cc/A8vAAvwkvwMrwCr8Jr8Dq8AW/CW/A2vAPvwnvwPnwAH8JH8DF8Ap/CZ/A5fAFfwlfwNXwD38J38D38AD/CePgJfoZf4Ff4DX6HP+BP+Av+hn/gX/gPJsBEGIeSoKQoGUqOUqCUKBVKjdKgtCgdSo8yoIwoE8qMsqCsKBvKjnKgnCgXyo3yoLwoH8qPCqCCqBAqjIqgoqgYKo5KoJKoFCqNyqCyqBwqjyqgiqgSqoyqoKqoGqqOaqCaqBaqjeqguqgeqo8aoIaoEWqMmqCmqBlqjlqglqgVao3aoLaoHWqPOqCOqBPqjLqgrqgb6o56oJ6oF+qN+qC+qB/qjwaggWgQGoyGoKFoGBqORqCRaBQajcagsWgcGo8moIloEpqMpqCpaBqajmagmWgWwhCOCEQiCtGIQQCxiEM8EpCIJCQjBalIQzoykIksZCMHuchDPgpQiCIEEUIxNBvNQXPRPDQfLUAL0SK0GC1BS9EytBytQCvRKrQarUFr0Tq0Hm1AG9EmtBltQVvRNrQd7UA70S60G+1Be9E+tB8dQAfRIXQYHUFH0TF0HJ1AJ9EpdBqdQWfROXQeXUAX0SV0GV1BV9E1dB3dQDfRLXQb3UF30T10Hz1AD9Ej9Bg9QU/RM/QcvUAv0Sv0Gr1Bb9E79B59QB9RPPqEPqMv6Cv6hr6jH+gn+oV+oz/oL/qHElAiiosliSWNJYslj6WIpYyliqWOpYmljaWLpY9liGWMZYpljmWJZY1li2WP5YjljOWK5Y7lieWN5YvljxWIFYwVihWOFYkVjRWLFY+ViJWMlYqVjpWJlY2Vi5WPVYhVjFWKVY5ViVWNVYtVj9WI1fw/Gu6hS5Om0cJwtW3btu3qatvVtm3bdhqRNiPjadu2bds666z1fj9hD/bgnlxYLaw2Vgeri9XD6mMNsIZYI6wx1gRrijXD4rHmWALWAmuJtcJaY22wtlg7rD3WAeuIdcI6Y12wrlg3rDvWA+uJ9cISsd5YH6wv1g/rjw3ABmKDsMHYEGwoNgwbjo3ARmKjsNHYGGwsNg4bj03AJmKTsMnYFGwqNg2bjs3AZmKzsNnYHGwuNg+bjy3AFmKLsMXYEmwptgxbjq3AVmKrsNXYGmwttg5bj23ANmKbsM3YFmwrtg3bjmEYjhEYiVEYjTEYi3EYjwFMwERMwmRMwVRMw3TMwEzMwmzMwVzMw3wswEIMYhGGsBi2A9uJ7cJ2Y3uwvdg+bD92ADuIHcIOY0ewo9gx7Dh2AjuJncJOY2ews9g57Dx2AbuIXcIuY1ewq9g17Dp2A7uJ3cJuY3ewu9g97D72AHuIPcIeY0+wp9gz7Dn2AnuJvcJeY2+wt9g77D32AfuIfcI+Y1+wr9g37Dv2A/uJ/cJ+Y3+wv9g/LA5PgifFk+HJ8RR4SjwVnhpPg6fF0+Hp8Qx4RjwTnhnPgmfFs+HZ8Rx4TjwXnhvPg+fF8+H58QJ4QbwQXhgvghfFi+HF8RJ4SbwUXhovg5fFy+Hl8Qp4RbwSXhmvglfFq+HV8Rp4TbwWXhuvg9fF6+H18QZ4Q7wR3hhvgjfFm+HxeHM8AW+Bt8Rb4a3xNnhbvB3eHu+Ad8Q74Z3xLnhXvBveHe+B98R74Yl4b7wP3hfvh/fHB+AD8UH4YHwIPhQfhg/HR+Aj8VH4aHwMPhYfh4/HJ+AT8Un4ZHwKPhWfhk/HZ+Az8Vn4bHwOPhefh8/HF+AL8UX4YnwJvhRfhi/HV+Ar8VX4anwNvhZfh6/HN+Ab8U34ZnwLvhXfhm/HMRzHCZzEKZzGGZzFOZzHAS7gIi7hMq7gKq7hOm7gJm7hNu7gLu7hPh7gIQ7xCEd4DN+B78R34bvxPfhefB++Hz+AH8QP4YfxI/hR/Bh+HD+Bn8RP4afxM/hZ/Bx+Hr+AX8Qv4ZfxK/hV/Bp+Hb+B38Rv4bfxO/hd/B5+H3+AP8Qf4Y/xJ/hT/Bn+HH+Bv8Rf4a/xN/hb/B3+Hv+Af8Q/4Z/xL/hX/Bv+Hf+B/8R/4b/xP/hf/B8eRyQhkhLJiORECiIlkYpITaQh0hLpiPREBiIjkYnITGQhshLZiOxEDiInkYvITeQh8hL5iPxEAaIgUYgoTBQhihLFiOJECaIkUYooTZQhyhLliPJEBaIiUYmoTFQhqhLViOpEDaImUYuoTdQh6hL1iPpEA6Ih0YhoTDQhmhLNiHiiOZFAtCBaEq2I1kQboi3RjmhPdCA6Ep2IzkQXoivRjehO9CB6Er2IRKI30YfoS/Qj+hMDiIHEIGIwMYQYSgwjhhMjiJHEKGI0MYYYS4wjxhMTiInEJGIyMYWYSkwjphMziJnELGI2MYeYS8wj5hMLiIXEImIxsYRYSiwjlhMriJXEKmI1sYZYS6wj1hMbiI3EJmIzsYXYSmwjthMYgRMEQRIUQRMMwRIcwROAEAiRkAiZUAiV0AidMAiTsAibcAiX8AifCIiQgEREICJG7CB2EruI3cQeYi+xj9hPHCAOEoeIw8QR4ihxjDhOnCBOEqeI08QZ4ixxjjhPXCAuEpeIy8QV4ipxjbhO3CBuEreI28Qd4i5xj7hPPCAeEo+Ix8QT4inxjHhOvCBeEq+I18Qb4i3xjnhPfCA+Ep+Iz8QX4ivxjfhO/CB+Er+I38Qf4i/xj4gjk5BJyWRkcjIFmZJMRaYm05BpyXRkejIDmZHMRGYms5BZyWxkdjIHmZPMReYm85B5yXxkfrIAWZAsRBYmi5BFyWJkcbIEWZIsRZYmy5BlyXJkebICWZGsRFYmq5BVyWpkdbIGWZOsRdYm65B1yXpkfbIB2ZBsRDYmm5BNyWZkPNmcTEgTFxdHtiJbk23ItmQ7sj3ZgexIdiI7k13IrmQ3sjvZg+xJ9iITyd5kH7Iv2Y/sTw4gB5KDyMHkEHIoOYwcTo4gR5KjyNHkGHIsOY4cT04gJ5KTyMnkFHIqOY2cTs4gZ5KzyNnkHHIuOY+cTy4gF5KLyMXkEnIpuYxcTq4gV5KryNXkGnItuY5cT24gN5KbyM3kFnIruY3cTmIkThIkSVIkTTIkS3IkTwJSIEVSImVSIVVSI3XSIE3SIm3SIV3SI30yIEMSkhGJyBi5g9xJ7iJ3k3vIveQ+cj95gDxIHiIPk0fIo+Qx8jh5gjxJniJPk2fIs+Q58jx5gbxIXiIvk1fIq+Q18jp5g7xJ3iJvk3fIu+Q98j75gHxIPiIfk0/Ip+Qz8jn5gnxJviJfk2/It+Q78j35gfxIfiI/k1/Ir+Q38jv5g/xJ/iJ/k3/Iv+Q/Mo5KQiWlklHJqRRUSioVlZpKQ6Wl0lHpqQxURioTlZnKQmWlslHZqRxUTioXlZvKQ+Wl8lH5qQJUQaoQVZgqQhWlilHFqRJUSaoUVZoqQ5WlylHlqQpURaoSVZmqQlWlqlHVqRpUTaoWVZuqQ9Wl6lH1qQZUQ6oR1ZhqQjWlmlHxVHMqgWpBtaRaUa2pNlRbqh3VnupAdaQ6UZ2pLlRXqhvVnepB9aR6UYlUb6oP1ZfqR/WnBlADqUHUYGoINZQaRg2nRlAjqVHUaGoMNZYaR42nJlATqUnUZGoKNZWaRk2nZlAzqVnUbGoONZeaR82nFlALqUXUYmoJtZRaRi2nVlArqVXUamoNtZZaR62nNlAbqU3UZmoLtZXaRm2nMAqnCIqkKIqmGIqlOIqnACVQIiVRMqVQKqVROmVQJmVRNuVQLuVRPhVQIQWpiEJUjNpB7aR2UbupPdReah+1nzpAHaQOUYepI9RR6hh1nDpBnaROUaepM9RZ6hx1nrpAXaQuUZepK9RV6hp1nbpB3aRuUbepO9Rd6h51n3pAPaQeUY+pJ9RT6hn1nHpBvaReUa+pN9Rb6h31nvpAfaQ+UZ+pL9RX6hv1PWUc9ZP6Rf2m/lB/qX9UHJ2ETkono5PTKeiU8L8aptPR6ekMdEY6E52ZzkJnpbPR2ekcdE46F52bzkPnpfPR+ekCdEG6EF2YLkIXpYvRxekSdEm6FF2aLkOXpcvR5ekKdEW6El2ZrkJXpavR1ekadE26Fl2brkPXpevR9ekGdEO6Ed2YbkI3pZvR8XRzOoFuQbekW9Gt6TZ0W7od3Z7uQHekO9Gd6S50V7ob3Z3uQfeke9GJdG+6D92X7kf3pwfQA+lB9GB6CD2UHkYPp0fQI+lR9Gh6DD2WHkePpyfQE+lJ9GR6Cj2VnkZPp2fQM+lZ9Gx6Dj2XnkfPpxfQC+lF9GJ6Cb2UXkYvp1fQK+lV9Gp6Db2WXkevpzfQG+lN9GZ6C72V3kZvpzEapwmapCmaphmapTmapwEt0CIt0TKt0Cqt0Tpt0CZt0Tbt0C7t0T4d0CEN6YhGdIzeQe+kd9G76T30XnofvZ8+QB+kD9GH6SP0UfoYfZw+QZ+kT9Gn6TP0WfocfZ6+QF+kL9GX6Sv0VfoafZ2+Qd+kb9G36Tv0XfoefZ9+QD+kH9GP6Sf0U/oZ/Zx+Qb+kX9Gv6Tf0W/od/Z7+QH+kP9Gf6S/0V/ob/Z3+Qf+kf9G/6T/0X/ofHcckYZIyyZjkTAomJZOKSc2kYdIy6Zj0TAYmI5OJycxkYbIy2ZjsTA4mJ5OLyc3kYfIy+Zj8TAGmIFOIKcwUYYoyxZjiTAmmJFOKKc2UYcoy5ZjyTAWmIlOJqcxUYaoy1ZjqTA2mJlOLqc3UYeoy9Zj6TAOmIdOIacw0YZoyzZh4pjmTwLRgWjKtmNZMG6Yt045pz3RgOjKdmM5MF6Yr043pzvRgejK9mESmN9OH6cv0Y/ozA5iBzCBmMDOEGcoMY4YzI5iRzChmNDOGGcuMY8YzE5iJzCRmMjOFmcpMY6YzM5iZzCxmNjOHmcvMY+YzC5iFzCJmMbOEWcosY5YzK5iVzCpmNbOGWcusY9YzG5iNzCZmM7OF2cpsY7YzGIMzBEMyFEMzDMMyHMMzgBEYkZEYmVEYldEYnTEYk7EYm3EYl/EYnwmYkIFMxCAmxuxgdjK7mN3MHmYvs4/ZzxxgDjKHmMPMEeYoc4w5zpxgTjKnmNPMGeYsc445z1xgLjKXmMvMFeYqc425ztxgbjK3mNvMHeYuc4+5zzxgHjKPmMfME+Yp84x5zrxgXjKvmNfMG+Yt8455z3xgPjKfmM/MF+Yr8435zvxgfjK/mN/MH+Yv84+JY5OwSdlkbHI2BZuSTcWmZtOwadl0bHo2A5uRzcRmZrOwWdlsbHY2B5uTzcXmZvOwedl8bH62AFuQLcQWZouwRdlibHG2BFuSLcWWZsuwZdlybHm2AluRrcRWZquwVdlqbHW2BluTrcXWZuuwddl6bH22AduQbcQ2ZpuwTdlmbDzbnE1gW7At2VZsa7YN25Ztx7ZnO7Ad2U5sZ7YL25XtxnZne7A92V5sItub7cP2Zfux/dkB7EB2EDuYHcIOZYexw9kR7Eh2FDuaHcOOZcex49kJ7ER2EjuZncJOZaex09kZ7Ex2FjubncPOZeex89kF7EJ2EbuYXcIuZZexy9kV7Ep2FbuaXcOuZdex69kN7EZ2E7uZ3cJuZbex21mMxVmCJVmKpVmGZVmO5VnACqzISqzMKqzKaqzOGqzJWqzNOqzLeqzPBmzIQjZiERtjd7A72V3sbnYPu5fdx+5nD7AH2UPsYfYIe5Q9xh5nT7An2VPsafYMe5Y9x55nL7AX2UvsZfYKe5W9xl5nb7A32VvsbfYOe5e9x95nH7AP2UfsY/YJ+5R9xj5nX7Av2Vfsa/YN+5Z9x75nP7Af2U/sZ/YL+5X9xn5nf7A/2V/sb/YP+5f9x8ZxSbikXDIuOZciWRyXikvNpeHScum49FwGLiOXicvMZeGyctm47FwOLieXi8vN5eHycvm4/FwBriBXiCvMFeGKcsW44lwJriRXiivNleHKcuW48lwFriJXiavMVeGqctW46lwNriZXi6vN1eHqcvW4+lwDriHXiGvMNeGacs24eK45l8C14FpyrbjWXBuuLdeOa8914DpynbjOXBeuK9eN68714HpyvbhErjfXh+vL9eP6cwO4gdwgbjA3hBvKDeOGcyO4kdwobjQ3hhvLjePGcxO4idwkbjI3hZvKTeOmczO4mdwsbjY3h5vLzePmcwu4hdwibjG3hFvKLeOWcyu4ldwqbjW3hlvLrePWcxu4jdwmbjO3hdvKbeO2cxiHcwRHchRHcwzHchzHc4ATOJGTOJlTOJXTOJ0zOJOzOJtzOJfzOJ8LuJCDXMQhLsbt4HZyu7jd3B5uL7eP288d4A5yh7jD3BHuKHeMO86d4E5yp7jT3BnuLHeOO89d4C5yl7jL3BXuKneNu87d4G5yt7jb3B3uLnePu8894B5yj7jH3BPuKfeMe8694F5yr7jX3BvuLfeOe8994D5yn7jP3BfuK/eN+8794H5yv7jf3B/uL/ePi+OT8En5ZHxyPgWfkk/Fp+bT8Gn5dHx6PgOfkc/EZ+az8Fn5bHx2Pgefk8/F5+bz8Hn5fHx+vgBfkC/EF+aL8EX5YnxxvgRfki/Fl+bL8GX5cnx5vgJfka/EV+ar8FX5anx1vgZfk6/F1+br8HX5enx9vgHfkG/EN+ab8E35Znw835xP4FvwLflWfGu+Dd+Wb8e35zvwHflOfGe+C9+V78Z353vwPflefCLfm+/D9+X78f35AfxAfhA/mB/CD+WH8cP5EfxIfhQ/mh/Dj+XH8eP5CfxEfhI/mZ/CT+Wn8dP5GfxMfhY/m5/Dz+Xn8fP5BfxCfhG/mF/CL+WX8cv5FfxKfhW/ml/Dr+XX8ev5DfxGfhO/md/Cb+W38dt5jMd5gid5iqd5hmd5jud5wAu8yEu8zCu8ymu8zhu8yVu8zTu8y3u8zwd8yEM+4hEf43fwO/ld/G5+D7+X38fv5w/wB/lD/GH+CH+UP8Yf50/wJ/lT/Gn+DH+WP8ef5y/wF/lL/GX+Cn+Vv8Zf52/wN/lb/G3+Dn+Xv8ff5x/wD/lH/GP+Cf+Uf8Y/51/wL/lX/Gv+Df+Wf8e/5z/wH/lP/Gf+C/+V/8Z/53/wP/lf/G/+D/+X/8fHgSQgKUgGkoMUICVIBVKDNCAtSAfSgwwgI8gEMoMsICvIBrKDHCAnyAVygzwgL8gH8oMCoCAoBAqDIqAoKAaKgxKgJCgFSoMyoCwoB8qDCqAiqAQqgyqgKqgGqoMaoCaoBWqDOqAuqAfqgwagIWgEGoMmoCloBuJBc5AAWoCWoBVoDdqAtqAdaA86gI6gE+gMuoCuoBvoDnqAnqAXSAS9QR/QF/QD/cEAMBAMAoPBEDAUDAPDwQgwEowCo8EYMBaMA+PBBDARTAKTwRQwFUwD08EMMBPMArPBHDAXzAPzwQKwECwCi8ESsBQsA8vBCrASrAKrwRqwFqwD68EGsBFsApvBFrAVbAPbAQZwQAASUIAGDGABB3gAgABEIAEZKEAFGtCBAUxgARs4wAUe8EEAQgBBBBCIgR1gJ9gFdoM9YC/YB/aDA+AgOAQOgyPgKDgGjoMT4CQ4BU6DM+AsOAfOgwvgIrgELoMr4Cq4Bq6DG+AmuAVugzvgLrgH7oMH4CF4BB6DJ+ApeAaegxfgJXgFXoM34C14B96DD+Aj+AQ+gy/gK/gGvoMf4Cf4BX6DP+Av+AfihCRCUiGZkFxIIaQUUgmphTRCWiGdkF7IIGQUMgmZhSxCViGbkF3IIeQUcgm5hTxCXiGfkF8oIBQUCgmFhSJCUaGYUFwoIZQUSgmlhTJCWaGcUF6oIFQUKgmVhSpCVaGaUF2oIdQUagm1hTpCXaGeUF9oIDQUGgmNhSZCU6GZEC80FxKEFkJLoZXQWmgjtBXaCe2FDkJHoZPQWegidBW6Cd2FHkJPoZeQKPQW+gh9hX5Cf2GAMFAYJAwWhghDhWHCcGGEMFIYJYwWxghjhXHCeGGCMFGYJEwWpghThWnCdGGGMFOYJcwW5ghzhXnCfGGBsFBYJCwWlghLhWXCcmGFsFJYJawW1ghrhXXCemGDsFHYJGwWtghbhW3CdgETcIEQSIESaIERWIETeAEIgiAKkiALiqAKmqALhmAKlmALjuAKnuALgRAKUIgEJMSEHcJOYZewW9gj7BX2CfuFA8JB4ZBwWDgiHBWOCceFE8JJ4ZRwWjgjnBXOCeeFC8JF4ZJwWbgiXBWuCdeFG8JN4ZZwW7gj3BXuCfeFB8JD4ZHwWHgiPBWeCc+FF8JL4ZXwWngjvBXeCe+FD8JH4ZPwWfgifBW+Cd+FH8JP4ZfwW/gj/BX+CXFiEjGpmExMLqYQU4qpxNRiGjGtmE5ML2YQM4qZxMxiFjGrmE3MLuYQc4q5xNxiHjGvmE/MLxYQC4qFxMJiEbGoWEwsLpYQS4qlxNJiGbGsWE4sL1YQK4qVxMpiFbGqWE2sLtYQa4q1xNpiHbGuWE+sLzYQG4qNxMZiE7Gp2EyMF5uLCWILsaXYSmwtthHbiu3E9mIHsaPYSewsdhG7it3E7mIPsafYS0wUe4t9xL5iP7G/OEAcKA4SB4tDxKHiMHG4OEIcKY4SR4tjxLHiOHG8OEGcKE4SJ4tTxKniNHG6OEOcKc4SZ4tzxLniPHG+uEBcKC4SF4tLxKXiMnG5uEJcKa4SV4trxLXiOnG9uEHcKG4SN4tbxK3iNnG7iIm4SIikSIm0yIisyIm8CERBFEVJlEVFVEVN1EVDNEVLtEVHdEVP9MVADEUoRiISY+IOcae4S9wt7hH3ivvE/eIB8aB4SDwsHhGPisfE4+IJ8aR4SjwtnhHPiufE8+IF8aJ4SbwsXhGvitfE6+IN8aZ4S7wt3hHvivfE++ID8aH4SHwsPhGfis/E5+IL8aX4SnwtvhHfiu/E9+IH8aP4SfwsfhG/it/E7+IP8af4S/wt/hH/iv/EOCmJlFRKJiWXUkgppVRSaimNlFZKJ6WXMkgZpUxSZimLlFXKJmWXckg5pVxSbimPlFfKJ+WXCkgFpUJSYamIVFQqJhWXSkglpVJSaamMVFYqJ5WXKkgVpUpSZamKVFWqJlWXakg1pVpSbamOVFeqJ9WXGkgNpUZSY6mJ1FRqJsVLzaUEqYXUUmoltZbaSG2ldlJ7qYPUUeokdZa6SF2lblJ3qYfUU+olJUq9pT5SX6mf1F8aIA2UBkmDpSHSUGmYNFwaIY2URkmjpTHSWGmcNF6aIE2UJkmTpSnSVGmaNF2aIc2UZkmzpTnSXGmeNF9aIC2UFkmLpSXSUmmZtFxaIa2UVkmrpTXSWmmdtF7aIG2UNkmbpS3SVmmbtF3CJFwiJFKiJFpiJFbiJF4CkiCJkiTJkiKpUuo4XTIkU7IkW3IkV/IkXwqkUIJSJCEpJu2Qdkq7pN3SHmmvtE/aLx2QDkqHpMPSEemodEw6Lp2QTkqnpNPSGemsdE46L12QLkqXpMvSFemqdE26Lt2Qbkq3pNvSHemudE+6Lz2QHkqPpMfSE+mp9Ex6Lr2QXkqvpNfSG+mt9E56L32QPkqfpM/SF+mr9E36Lv2Qfkq/pN/SH+mv9E+Kk5PISeVkcnI5hZxSTiWnltPIaeV0cno5g5xRziRnlrPIWeVscnY5h5xTziXnlvPIeeV8cn65gFxQLiQXlovIReVicnG5hFxSLiWXlsvIZeVycnm5glxRriRXlqvIVeVqcnW5hlxTriXXluvIdeV6cn25gdxQbiQ3lhvLTeWmcrwcLyfICXJLuaXcWm4tt5Xbyu3l9nJHuaPcWe4sd5W7yt3l7nJPuaecKCfKfeQ+cj+5nzxAHigPkgfJQ+Qh8jB5mDxCHiGPkkfJY+Qx8jh5vDxBnihPkifLU+Sp8jR5ujxDninPkmfLc+S58jx5vrxAXiAvkhfJS+Ql8jJ5mbxCXiGvklfJa+Q18jp5nbxB3iBvkjfJW+Qt8jZ5m4zJuEzIpEzJtMzIrMzJvAxkQRZlSZZlRVZlTdZlQzZlS7ZlR3ZlT/blQA5lKEcykmPyDnmnvEveLe+R98r75P3yAfmgfEg+LB+Rj8rH5OPyCfmkfEo+LZ+Rz8rn5PPyBfmifEm+LF+Rr8rX5OvyDfmmfEu+Ld+R78r35PvyA/mh/Eh+LD+Rn8rP5OfyC/ml/Ep+Lb+R38rv5PfyB/mj/En+LH+Rv8rf5O/yD/mn/Ev+Lf+R/8r/5DgliZJUSaYkV1IoKZVUSmoljZJWSaekVzIoGZVMSmYli5JVyaZkV3IoOZVcSm4lj5JXyafkVwooBZVCSmGliFJUKaoUV4orJZWSSmmltFJWKauUV8orFZWKSmWlilJVqapUV6orNZWaSm2ltlJXqavUV+orDZWGSmOlsdJUaarEK/FKgpKgtFRaKq2V1kpbpa3SXmmvdFQ6Kp2VzkpXpavSXemu9FR6KolKotJH6aP0U/opA5QByiBlkDJEGaIMU4YpI5QRyihllDJGGaOMU8YpcXFxcZOUycoUZaoyTZmuzFBmKjOV2cpsZa4yT5mnLFAWKIuURcoSZYmyTFmmrFBWKquU1cpqZa2yTlmvbFA2KpuUzcoWZauyTdmuYAquEAqpUAqtMAqrcAqvAEVQREVSZEVRVEVTdMVQTMVSbMVRXMVTfCVQQgUqkYKUmLJD2ansUnYre5S9yj5lv3JAOagcUg4rR5SjyjHluHJCOamcUk4rZ5SzyjnlvHJBuahcUi4rV5SryjXlunJDuancUm4rd5S7yj3lvvJAeag8Uh4rT5SnyjPlufJCeam8Ul4rb5S3yjvlvfJB+ah8Uj4rX5Svyjflu/JD+an8Un4rf5S/yj8lTk2iJlWTqcnVFGpKNZWaWk2jplXTqenVDGpGNZOaWc2iZlWzqdnVHGpONZeaW82j5lXzqfnVAmpBtZBaWC2iFlWLqcXVEmpJtZRaWi2jllXLqeXVCmpFtZJaWa2iVlWrqdXVGmpNtZZaW62j1lXrqfXVBmpDtZHaWG2iNlWbqfFqczVBbaG2VFuprdU2alu1ndpe7aB2VDupndUuale1m9pd7aH2VHupiWpvtY/aV+2n9lcHqAPVQepgdYg6VB2mDldHqCPVUepodYw6Vh2njlcnqBPVSepkdYo6VZ2mTldnqDPVWepsdY46V52nzlcXqAvVRepidYm6VF2mLldXqCvVVepqdY26Vl2nrlc3qBvVTepmdYu6Vd2mblcxFVcJlVQplVYZlVU5lVeBKqiiKqmyqqiqqqm6aqimaqm26qiu6qm+GqihCtVIRWpM3aHuVHepu9U96l51n7pfPaAeVA+ph9Uj6lH1mHpcPaGeVE+pp9Uz6ln1nHpevaBeVC+pl9Ur6lX1mnpdvaHeVG+pt9U76l31nnpffaA+VB+pj9Un6lP1mfpcfaG+VF+pr9U36lv1nfpe/aB+VD+pn9Uv6lf1m/pd/aH+VH+pv9U/6l/1nxqnJdGSasm05FoKLaWWSkudLI2WVkunpdcyaBm1TFpmLYuWVcumZddyaDm1XFpuLY+WV8un5dcKaAW1QlphrYhWVCumFddKaCW1UlpprYxWViunldcqaBW1SlplrYpWVaumVddqaDW1WlptrY5WV6un1dcaaA21RlpjrYnWVGumxWvNtQSthdZSa6W11tpobbV2Wnutg9ZR66R11rpoXbVuWneth9ZT66Ular21PlpfrZ/WXxugDdQGaYO1IdpQbZg2XBuhjdRGaaO1MdpYbZw2XpugTdQmaZO1KdpUbZo2XZuhzdRmabO1OdpcbZ42X1ugLdQWaYu1JdpSbZm2XFuhrdRWaau1NdpabZ22XtugbdQ2aZu1LdpWbZu2XcM0XCM0UqM0WmM0VuM0XgOaoImapMmaoqmapumaoZmapdmao7map/laoIUa1CINaTFth7ZT26Xt1vZoe7V92n7tgHZQO6Qd1o5oR7Vj2nHthHZSO6Wd1s5oZ7Vz2nntgnZRu6Rd1q5oV7Vr2nXthnZTu6Xd1u5od7V72n3tgfZQe6Q91p5oT7Vn2nPthfZSe6W91t5ob7V32nvtg/ZR+6R91r5oX7Vv2nfth/ZT+6X91v5of7V/WpyeRE+qJ9OT6yn0lHoqPbWeRk+rp9PT6xn0jHomPbOeRc+qZ9Oz6zn0nHouPbeeR8+r59Pz6wX0gnohvbBeRC+qF9OL63EL4uJK6aX1MnpZvZxeXq+gVwRJ9Mp6Fb2qXk2vrtfQa+q19Np6Hb2uXk+vrzfQG+qN9MZ6E72p3kyP15vrCXoLvaXeSm+tt9Hb6u309noHvaPeSe+sd9G76t307noPvafeS0/Ue+t99L56P72/PkAfqA/SB+tD9KH6MH24PkIfqY/SR+tj9LH6OH28PkGfqE/SJ+tT9Kn6NH26PkOfqc/SZ+tz9Ln6PH2+vkBfqC/SF+tL9KX6Mn25vkJfqa/SV+tr9LX6On29vkHfqG/SN+tb9K36Nn27jum4TuikTum0zuiszum8DnRBF3VJl3VFV3VN13VDN3VLt3VHd3VP9/VAD3WoRzrSY/oOfae+S9+t79H36vv0/foB/aB+SD+sH9GP6sf04/oJ/aR+Sj+tn9HP6uf08/oF/aJ+Sb+sX9Gv6tf06/oN/aZ+S7+t39Hv6vf0+/oD/aH+SH+sP9Gf6s/05/oL/aX+Sn+tv9Hf6u/09/oH/aP+Sf+sf9G/6t/07/qP//HE2f/q//Q4I4mR1EhmJDdSGCmNVEZqI42R1khnpDcyGBmNTEZmI4uR1chmZDdyGDmNXEZuI4+R18hn5DcKGAWNQsnjjCJGUaOYUdwoYZQ0ShmljTJGWaOcUd6oYFQ0KhmVjSpGVaOaUd2oYdQ0ahm1jTpGXaOeUd9oYDQ0GhmNjSZGU6OZEW80NxKMFkZLo5XR2mhjtDXaGe2NDkZHo5PR2ehidDW6Gd2NHkZPo5eRaPQ2+hh9jX5Gf2OAMdAYZAw2hhhDjWHGcGOEMdIYZYw2xhhjjXHGeGOCMdGYZEw2phhTjWnGdGOGMdOYZcw25hhzjXnGfGOBsdBYZCw2lhhLjWXGcmOFsdJYZaw21hhrjXXGemODsdHYZGw2thhbjW3GdgMzcIMwSIMyaIMxWIMzeAMYgiEakiEbiqEamqEbhmEalmEbjuEanuEbgREa0IgMZMSMHcZOY5ex29hj7DX2GfuNA8ZB45Bx2DhiHDWOGceNE8ZJ45Rx2jhjnDXOGeeNC8ZF45Jx2bhiXDWuGdeNG8ZN45Zx27hj3DXuGfeNB8ZD45Hx2HhiPDWeGc+NF8ZL45Xx2nhjvDXeGe+ND8ZH45Px2fhifDW+Gd+NH8ZP45fx2/hj/DX+GXFmEjOpmcxMbqYwU5qpzNRmGjOtmc5Mb2YwM5qZzMxmFjOrmc3MbuYwc5q5zNxmHjOvmc/MbxYwC5qFzMJmEbOoWcwsbpYwS5qlzNJmGbOsWc4sb1YwK5qVzMpmFbOqWc2sbtYwa5q1zNpmHbOuWc+sbzYwG5qNzMZmE7Op2cyMN5ubCWYLs6XZymxttjHbmu3M9mYHs6PZyexsdjG7mt3M7mYPs6fZy0w0e5t9zL5mP7O/OcAcaA4yB5tDzKHmMHO4OcIcaY4yR5tjzLHmOHO8OcGcaE4yJ5tTzKnmNHO6OcOcac4yZ5tzzLlp/vuBuchcbC4xl5rLzOXmCnOlucpcba4x15rrzPXmBnOjucncbG4xt5rbzO0mZuImYZImZdImY7ImZ/ImMAVTNCVTNhVTNTVTNw3TNC3TNh3TNT3TNwMzNKEZmciMmTvMneYuc7e5x9xr7jP3mwfMg+Yh87B5xDxqHjOPmyfMk+Yp87R5xjxrnjPPmxfMi+Yl87J5xbxqXjOvmzfMm+Yt87Z5x7xr3jPvmw/Mh+Yj87H5xHya7P/XvDBfmq/M1+Yb8635znxvfjA/mp/Mz+YX86v5zfxu/jB/mr/M3+Yf86/5z4yzklhJrWRWciuFldJKZaW20lhprXRWeiuDldHKZGW2slhZrWxWdiuHldPKZeW28lh5rXxWfquAVdAqZBW2ilhFrWJWcauEVdIqZZW2ylhlrXJWeauCVdGqZFW2qlhVrWpWdauGVdOqZdW26lh1rXpWfauB1dBqZDW2mlhNrWZWvNXcSrBaWC2tVlZrq43V1mpntbc6WB2tTlZnq4vV1epmdbd6WD2tXlai1dvqY/W1+ln9rQHWQGuQNdgaYg21hlnDrRHWSGuUNdoaY421xlnjrQnWRGuSNdmaYk21plnTrRnWTGuWNduaY8215lnzrQXWQmuRtdhaYi21llnLrRXWSmuVtdpaY6211lnrrQ3WRmuTtdnaYm21tlnb/ye7W5RFW4zFWpzFW8ASLNGSLNlSLNXSLN0yLNOyLNtyLNfyLN8KrNCCVmQhK2btsHZau6zd1h5rr7XP2m8dsA5ah6zD1hHrqHXMOm6dsE5ap6zT1hnrrHXOOm9dsC5al6zL1hXrqnXNum7dsG5at6zb1h3rrnXPum89sB5aj6zH1hPrqfXMem69sF5ar6zX1hvrrfXOem99sD5an6zP1hfrq/XN+m79sH5av6zf1h/rr/XPirOT2EntZHZyO4Wd0k5lp7bT2GntdHZ6O4Od0c5kZ7az2FntbHZ2O4ed085l57bz2HntfHZ+u4Bd0C5kF7aL2EXtYnZxu4Rd0i5ll7bL2GXtcnZ5u4Jd0a5kV7ar2FXtanZ1u4Zd065l17br2HXtenZ9u4Hd0G5kN7ab2E3tZna83dxOsFvYLe1Wdmu7jd3Wbme3tzvYHe1Odme7i93V7mZ3t3vYPe1edqLd2+5j97X72f3tAfZAe5A92B5iD7WH2cPtEfZIe5Q92h5jj7XH2ePtCfZEe5I92Z5iT7Wn2dPtGfZMe5Y9255jz7Xn2fPtBfZCe5G92F5iL7WX2cvtFfZKe5W92l5jr7XX2evtDfZGe5O92d5ib7W32dttzMZtwiZtyqZtxmZtzuZtYAu2aEu2bCu2amu2bhu2aVu2bTu2a3u2bwd2aEM7spEds3fYO+1d9m57j73X3mfvtw/YB+1D9mH7iH3UPmYft0/YJ+1T9mn7jH3WPmefty/YF+1L9mX7in3VvmZft2/YN+1b9m37jn3Xvmfftx/YD+1H9mP7if3UfmY/t1/YL+1X9mv7jf3Wfme/tz/YH+1P9mf7i/3V/mZ/t3/YP+1f9m/7j/3X/mfHOUmcpE4yJ7mTwknppHJSO2mctE46J72TwcnoZHIyO1mcrE42J7uTw8np5HJyO3mcvE4+J79TwCnoFHIKO0Wcok4xp7hTwinplHJKO2Wcsk45p7xTwanoVHIqO1Wcqk41p7pTw6np1HJqO3Wcuk49p77TwGnoNHIaO02cpk4zJ95p7iQ4LZyWTiuntdPGaeu0c9o7HZyOTiens9PF6ep0c7o7PZyeTi8n0ent9HH6Ov2c/s4AZ6AzyBnsDHGGOsOc4c4IZ6QzyhntjHHGOuOc8c4EZ6IzyZnsTHGmOtOc6c4MZ6Yzy5ntzHHmOvOc+c4CZ6GzyFnsLHGWOsuc5c4KZ6WzylntrHHWOuuc9c4GZ6OzydnsbHG2Otuc7Q7m4A7hkA7l0A7jsA7n8A5wBEd0JEd2FEd1NEd3DMd0LMd2HMd1PMd3Aid0oBM5yIk5O5ydzi5nt7PH2evsc/Y7B5yDziHnsHPEOeocc447J5yTzinntHPGOeucc847F5yLziXnsnPFuepcc647N5ybzi3ntnPHuevcc+47D5yHziPnsfPEeeo8c547L5yXzivntfPGeeu8c947H5yPzifns/PF+ep8c747P5yfzi/nt/PH+ev8c+LcJG5SN5mb3E3hpnRTuandNG5aN52b3s3gZnQzuZndLG5WN5ub3c3h5nRzubndPG5eN5+b3y3gFnQLuYXdIm5Rt5hb3C3hlnRLuaXdMm5Zt5xb3q3gVnQruZXdKm5Vt5pb3a3h1nRrubXdOm5dt55b323gNnQbuY3dJm5Tt5kb7zZ3E9wWbku3ldvabeO2ddu57d0Obke3k9vZ7eJ2dbu53d0ebk+3l5vo9nb7uH3dfm5/d4A70B3kDnaHuEPdYe5wd4Q70h3ljnbHuGPdce54d4I70Z3kTnanuFPdae50d4Y7053lznbnuHPdee58d4G70F3kLnaXuEvdZe5yd4W70l3lrnbXuGvdde56d4O70d3kbna3uFvdbe52F3Nxl3BJl3Jpl3FZl3N5F7iCK7qSK7uKq7qaq7uGa7qWa7uO67qe67uBG7rQjVzkxtwd7k53l7vb3ePudfe5+90D7kH3kHvYPeIedY+5x90T7kn3lHvaPeOedc+5590L7kX3knvZveJeda+5190b7k33lnvbvePede+5990H7kP3kfvYfeI+dZ+5z90X7kv3lfvafeO+dd+5790P7kf3k/vZ/eJ+db+5390f7k/3l/vb/eP+df+5cV4SL6mXzEvupfBSeqm81F4aL62XzkvvZfAyepm8zF4WL6uXzcvu5fByerm83F4eL6+Xz8vvFfAKeoW8wl4Rr6hXzCvulfBKeqW80l4Zr6xXzivvVfAqepW8yl4Vr6pXzavu1fBqerW82l4dr65Xz6vvNfAaeo28xl4Tr6nXzIv3mnsJXguvpdfKa+218dp67bz2Xgevo9fJ6+x18bp63bzuXg+vp9fLS/R6e328vl4/r783IEWcN8gb7A3xhnrDvOHeCG+kN8ob7Y3xxnrjvPHeBG+iN8mb7E3xpnrTvOneDG+mN8ub7c3x5nrzvPneAm+ht8hb7C3xlnrLvOXeCm+lt8pb7a3x1nrrvPXeBm+jt8nb7G3xtnrbvO0e5uEe4ZEe5dEe47Ee5/Ee8ARP9CRP9hRP9TRP9wzP9CzP9hzP9TzP9wIv9KAXeciLeTu8nd4ub7e3x9vr7fP2ewe8g94h77B3xDvqHfOOeye8k94p77R3xjvrnfPOexe8i94l77J3xbvqXfOueze8m94t77Z3x7vr3fPuew+8h94j77H3xHvqPfOeey+8l94r77X3xnvrvfPeex+8j94n77P3xfvqffO+ez+8n94v77f3x/vr/fPi/CR+Uj+Zn9xP4af0U/mp/TR+Wj+dn97P4Gf0M/mZ/Sx+Vj+bn93P4ef0c/m5/Tx+Xj+fn98v4Bf0C/mF/SJ+Ub+YX9wv4Zf0S/ml/TJ+Wb+cX96v4Ff0K/mV/Sp+Vb+aX92v4df0a/m1/Tp+Xb+eX99v4Df0G/mN/SZ+U7+ZH+839xP8Fn5Lv5Xf2m/jt/Xb+e39Dn5Hv5Pf2e/id/W7+d39Hn5Pv5ef6Pf2+/h9/X5+f3+AP9Af5A/2h/hD/WH+cH+EP9If5Y/2x/hj/XH+eH+CP9Gf5E/2p/hT/Wn+dH+GP9Of5c/25/hz/Xn+fH+Bv9Bf5C/2l/hL/WX+cn+Fv9Jf5a/21/hr/XX+en+Dv9Hf5G/2t/hb/W3+dh/zcZ/wSZ/yaZ/xWZ/zeR/4gi/6ki/7iq/6mq/7hm/6lm/7ju/6nu/7gR/60I985Mf8Hf5Of5e/29/j7/X3+fv9A/5B/5B/2D/iH/WP+cf9E/5J/5R/2j/jn/XP+ef9C/5F/5J/2b/iX/Wv+df9G/5N/5Z/27/j3/Xv+ff9B/5D/5H/2H/iP/Wf+c/9F/5L/5X/2n/jv/Xf+e/9D/5H/5P/2f/if/W/+d/9H/5P/5f/2//j//X/+XFBkiBpkCxIHqQIUgapgtRBmiBtkC5IH2QIMgaZgsxBliBrkC3IHuQIcga5gtxBniBvkC/IHxQICgaFgsJBkaBoUCwoHpQISgalgtJBmaBsUC4oH1QIKgaVgspBlaBqUC2oHtQIaga1gtpBnaBuUC+oHzQIGgaNgsZBk6Bp0CyID5oHCUGLoGXQKmgdtAnaBu2C9kGHoGPQKegcdAm6Bt2C7kGPoGfQK0gMEuP6BH2DfkH/YEAwMBgUDA6GBEODYcHwYEQwMhgVjA7GBGODccH4YEIwMZgUTA6mBFODacH0YEYwM5gVzA7mBHODecH8YEGwMFgULA6WBEuDZcHyYEWwMlgVrA7WBGuDdcH6YEOwMdgUbA62BFuDbcH2AAvwgAjIgArogAnYgAv4AARCIAZSIAdKoAZaoAdGYAZWYAdO4AZe4AdBEAYwiAIUxIKUwc5gV7A72BPsDfYF+4MDwcHgUHA4OBIcDY4Fx4MTwcngVHA6OBOcDc4F54MLwcXgUnA5uBJcDa4F14Mbwc3gVnA7uBPcDe4F94MHwcPgUfA4eBI8DZ4Fz4MXwcvgVfA6eBO8Dd4F74MPwcfgU/A5+BJ8Db4F34Mfwc/gV/A7+BP8Df4FcWGSMGmYLEwepghThqnC1GGaMMl/kZMxzBRmDrOEWcNsYfYwR5gzzBXmDvOEecN8Yf6wQJgyrlBYOCwSFg2LhcXDEmHJsFRYOiwTlg3LheXDCmHFsFJYOawSVg2rhdXDGmHNsFZYO6wT1g3rhfXDBmHDsFHYOGwSNg2bhfFh8zAhbBG2DFuFrcM2YduwXdg+7BB2DDuFncMuYdewW9g97BH2DHuFiWHvsE/YN+wX9g8HhAPDQeHgcEg4NBwWDg9HhCPDUeHocEw4NhwXjg8nhBPDSeHkcEo4NZwWTg9nhDPDWeHscE44N5wXzg8XhAvDReHicEm4NFwWLg9XhCvDVeHqcE24NlwXrg83hBvDTeHmcEu4NdwWbg+xEA+JkAypkA6ZkA25kA9BKIRiKIVyqIRqqIV6aIRmaIV26IRu6IV+GIRhCMMoRGEs3BHuDHeFu8M94d5wX7g/PBAeDA+Fh8Mj4dHwWHg8PBGeDE+Fp8Mz4dnwXHg+vBBeDC+Fl8Mr4dXwWng9vBHeDG+Ft8M74d3wXng/fBA+DB+Fj8Mn4dPwWfg8fBG+DF+Fr8M34dvwXfg+Xfq4uPBT+Dn8En4Nv4Xfwx/hz/BX+Dv8E/4N/4VxMAlMCpPB5DAFTAlTwdQwDUwL08H0MAPMCDPBzDALzAqzwewwB8wJc8HcMA/MC/PB/LAALAgLwcKwCCwKi8HisAQsCUvB0rAMLAvLwfKwAqwIK8HKsAqsCqvB6rAGrAlrwdqwDqwL68H6sAFsCBvBxrAJbAqbwXjYHCbAFrAlbAVbwzawLWwH28MOsCPsBDvDLrAr7Aa7wx6wJ+wFE2Fv2Af2hf1gfzgADoSD4GCYJm4oHAaHwxFwJBwFR8MxcCwcB8fDCXAinAQnwylwKpwGp8MZcCacBWfDOXAunAfnwwVwIVwEF8MlcClcBpfDFXAlXAVXwzVwLVwH18MNcCPcBDfDLXAr3Aa3QwzikIAkpCANGchCDvIQQAGKUIIyVKAKNahDA5rQgjZ0oAs96MMAhhDCCCIYgzvgTrgL7oZ74F64D+6HB+BBeAgehkfgUXgMHocn4El4Cp6GZ+BZeA6ehxfgRXgJXoZX4FV4DV6HN+BNeAvehnfgXXgP3ocP4EP4CD6GT+BT+Aw+hy/gS/gKvoZv4Fv4Dr6HH+BH+Al+hl/gV/gNfoc/4E/4C/6Gf+Bf+A/GRUmipFGyKHmUIkoZpYpSR2mitFG6KH2UIcoYZYoyR1mirFG2KHuUI8oZ5YpyR3mivFG+KH9UICoYFYoKR0WiolGxqHhUIioZlYpKR2WislG5qHxUIaoYVYoqR1WiqlG1qHpUI6oZ1YpqR3WiulG9qH7UIGoYNYoaR02iplGzKD5qHiVELaKWUauoddQmahu1i9pHHaKOUaeoc9Ql6hp1i7pHPaKeUa8oMeod9Yn6Rv2i/tGAaGA0KBocDYmGRsOi4dGIaGQ0KhodjYnGRuOi8dGEaGI0KZocTYmmRtOi6dGMaGY0K5odzYnmRvOi+dGCaGG0KFqcYkm0NFoWLY9WRCujVdHqaE20NloXrY82RBujTdHmaEu0NdoWbY+wCI+IiIyoiI6YiI24iI9AJERiJEVypERqpEV6ZERmZEV25ERu5EV+FERhBKMoQlEs2hHtjHZFu6M90d5oX7Q/OhAdjA5Fh6Mj0dHoWHQ8OhGdjE5Fp6Mz0dnoXHQ+uhBdjC5Fl6Mr0dXoWnQ9uhHdjG5Ft6M70d3oXnQ/ehA9jB5Fj6Mn0dPoWfQ8ehG9jF5Fr6M30dvoXfQ++hB9jD5Fn6Mv0dfoW/Q9+hH9jH5Fv6M/0d/oXxSHkqCkKBlKjlKglCgVSo3SoLQoHUqPMqCMKBPKjLKgrCgbyo5yoJwoF8qN8qC8KB/KjwqggqgQKoyKoKKoGCqOSqCSqBQqjcqgsqgcKo8qoIqoEqqMqqCqqBqqjmqgmqgWqo3qoLqoHqqPGqCGqBFqjJqgpqgZikfNUQJqgVqiVqg1aoPaonaoPeqAOqJOqDPqgrqibqg76oF6ol4oEfVGfVBf1A/1RwPQQDQIDUZD0FA0DA1HI9BINAqNRmPQWDQOjUcT0EQ0CU1GU9BUNA1NRzPQTDQLzUZz0Fw0D81HC9BCtAgtRkvQUrQMLUcr0Eq0Cq1GKdFatA6tRxvQRrQJbUZb0Fa0DW1HGMIRgUhEIRoxiEUc4hFAAhKRhGSkIBVpSEcGMpGFbOQgF3nIRwEKEUQRQiiGdqCdaBfajfagvWgf2o8OoIPoEDqMjqCj6Bg6jk6gk+gUOo3OoLPoHDqPLqCL6BK6jK6gq+gauo5uoJvoFrqN7qC76B66jx6gh+gReoyeoKfoGXqOXqCX6BV6jd6gt+gdeo8+oI/oE/qMvqCv6Bv6jn6gn+gX+o3+oL/oH4qLJYkljSWLJY+liKWMpYqljqWJpY2li6WPZYhljGWKZY5liWWNZYtlj+WI5YzliuWO5YnljeWL5Y8ViBWMFYoVjhWJFY0VixWPlYiVjJWKlY6ViZWNlYuVj1WIVYxVilWOVYlVjVWLVY/ViNWM1YrVjtWJ1Y3Vi9WPNYg1jDWKNY41iTWNNYvFx5rHEmItYv9H0zko6dU0anSSiW3btm1NbNu2k4lt27azbRvdvd/Ytp2c+qu+cxcPqtZqhbXG2mAJWFusHdYe64B1xDphnbEuWFesG9Yd64H1xHphvbE+WF+sH9YfG4ANxAZhg7Eh2FBsGDYcG4GNxEZho7Ex2FhsHDYem4BNxCZhk7Ep2FRsGjYdm4HNxGZhs7E52FxsHjYfS8QWYAuxRdhibAm2FFuGLcdWYCuxVdhqbA22FluHrcc2YBuxTdhmbAu2FduGbcd2YDuxXdhubA+2F9uH7ccOYAexQ9hh7Ah2FDuGHcdOYCexU9hp7Ax2FjuHnccuYBexS9hl7Ap2FbuGXccwDMcIjMQojMYYjMU4jMcETMQkTMYULOFfXJyOGZiJWZiNOZiLeZiPBViIAQxiCIuwGHYDu4ndwm5jd7C72D3sPvYAe4g9wh5jT7Cn2DPsOfYCe4m9wl5jb7C32DvsPfYB+4h9wj5jX7Cv2DfsO/YD+4n9wn5jf7C/2D8sDk+CJ8Xj8WR4cjwFnhJPhafG0+Bp8XR4ejwDnhHPhGfGs+BZ8Wx4djwHnhPPhefG8+B58Xx4frwAXhAvhBfGi+BF8WJ4cbwEXhIvhZfGy+Bl8XJ4ebwCXhGvhFfGq+BV8Wp4dbwGXhOvhdfG6+B18Xp4fbwB3hBvhDfGm+BN8WZ4c7wF3hJvhbfG2+AJeFu8Hd4e74B3xDvhnfEueFe8G94d74H3xHvhvfE+eF+8H94fH4APxAfhg/Eh+FB8GD4cH4GPxEfho/Ex+Fh8HD4en4BPxCfhk/Ep+FR8Gj4dn4HPxGfhs/E5+Fx8Hj4fT8QX4AvxRfhifAm+FF+GL8dX4CvxVfhqfA2+Fl+Hr8c34BvxTfhmfAu+Fd+Gb8d34DvxXfhufA++F9+H78cP4AfxQ/hh/Ah+FD+GH8dP4CfxU/hp/Ax+Fj+Hn8cv4BfxS/hl/Ap+Fb+GX8cxHMcJnMQpnMYZnMU5nMcFXMQlXMYVXMU1XMcN3MQt3MYd3MU93McDPMQBDnGER3gMv4HfxG/ht/E7+F38Hn4ff4A/xB/hj/En+FP8Gf4cf4G/xF/hr/E3+Fv8Hf4e/4B/xD/hn/Ev+Ff8G/4d/4H/xH/hv/E/+F/8Hx5HJCGSEvFEMiI5kYJISaQiUhNpiLREOiI9kYHISGQiMhNZiKxENiI7kYPISeQichN5iLxEPiI/UYAoSBQiChNFiKJEMaI4UYIoSZQiShNliLJEOaI8UYGoSFQiKhNViKpENaI6UYOoSdQiahN1iLpEPaI+0YBoSDQiGhNNiKZEM6I50YJoSbQiWhNtiASiLdGOaE90IDoSnYjORBeiK9GN6E70IHoSvYjeRB+iL9GP6E8MIAYSg4jBxBBiKDGMGE6MIEYSo4jRxBhiLDGOGE9MICYSk4jJcVOIqcQ0Yjoxg5hJzCJmE3OIucQ8Yj6RSCwgFhKLiMXEEmIpsYxYTqwgVhKriNXEGmItsY5YT2wgNhKbiM3EFmIrsY3YTuwgdhK7iN3EHmIvsY/YTxwgDhKHiMPEEeIocYw4TpwgThKniNPEGeIscY44T1wgLhKXiMvEFeIqcY24TmAEThAESVAETTAES3AETwiESEiETCiESmiEThiESViETTiES3iETwRESAACEoiIiBhxg7hJ3CJuE3eIu8Q94j7xgHhIPCIeE0+Ip8Qz4jnxgnhJvCJeE2+It8Q74j0RR3wkPhGfiS/EV+Ib8Z34QfwkfhG/iT/EX+IfEUcmIZOS8WQyMjmZgkxJpiJTk2nItGQ6Mj2ZgcxIZiIzk1nIrGQ2MjuZg8xJ5iJzk3nIvGQ+Mj9ZgCxIFiILk0XIomQxsjhZgixJliJLk2XIsmQ5sjxZgaxIViIrk1XIqmQ1sjpZg6xJ1iJrk3XIumQ9sj7ZgGxINiIbk03IpmQzsjnZgmxJtiJbk23IBLIt2Y5sT3YgO5KdyM5kF7Ir2Y3sTvYge5K9yN5kH7Iv2Y/sTw4gB5KDyMHkEHIoOYwcTo4gR5KjyNHkGHIsOY4cT04gJ5KTyMnkFHIqOY2cTs4gZ5KzyNnkHHIuOY+cTyaSC8iF5CJyMbmEXEouI5eTK8iV5CpyNbmGXEuuI9eTG8iN5CZyM7mF3EpuI/+RO8id5C5yN7mH3EvuI/eTB8iD5CHyMHmEPEoeI4+TJ8iT5CnyNHmGPEueI8+TF8iL5CXyMnmFvEpeI6+TGImTBEmSFEmTDMmSHMmTAimSEimTCqmSGqmTBmmSFmmTDumSHumTARmSgIQkIiMyRt4gb5K3yNvkHfIueY+8Tz4gH5KPyMfkE/Ip+Yx8Tr4gX5KvyNfkG/It+Y58T34gP5KfyM/kF/Ir+Y38Tv4gf5K/yN/kH/Iv+Y+Mo5JQSal4KhmVnEpBpaRSUampNFRaKh2VnspAZaQyUZmpLFRWKhuVncpB5aRyUbmpPFReKh+VnypAFaQKUYWpIlRRqhhVnCpBlaRKUaWpMlRZqhxVnqpAVaQqUZWpKlRVqhpVnapB1aRqUbWpOlRdqh5Vn2pANaQaUY2pJlRTqhnVnGpBtaRaUa2pNlQC1ZZqR7WnOlAdqU5UZ6oL1ZXqRnWnelA9qV5Ub6oP1ZfqR/WnBlADqUHUYGoINZQaRg2nRlAjqVHUaGoMNZYaR42nJlATqUnUZGoKNZWaRk2nZlAzqVnUbGoONZeaR82nEqkF1EJqEbWYWkItpZZRy6kV1EpqFbWaWkOtpdZR66kN1EZqE7WZ2kJtpbZR26kd1E5qF7Wb2kPtpfZR+6kD1EHqEHWYOkIdpY5Rx6kT1EnqFHWaOkOdpc5R56kL1EXqEnWZukJdpa5R1ymMwimCIimKoimGYimO4imBEimJkimFUimN0imDMimLsimHcimP8qmACilAQQpRERWjblA3qVvUbeoOdZe6R92nHlAPqUfUY+oJ9ZR6Rj2nXlAvqVfUa+oN9ZZ6R8XFxS2Ii4uL+0x9ob5S36jv1A/qJ/WL+k39of5S/6g4OgmdlI6nk9HJ6RR0SjoVnZpOQ6el09Hp6Qx0RjoTnZnOQmels9HZ6Rx0TjoXnZvOQ+el89H56QJ0QboQXZguQheli9HF6RJ0SboUXZouQ5ely9Hl6Qp0RboSXZmuQlelq9HV6Rp0TboWXZuuQ9el69H16QZ0Q7oR3ZhuQjelm9HN6RZ0S7oV3ZpuQyfQbel2dHu6A92R7kR3prvQXeludHe6B92T7kX3pvvQfel+dH96AD2QHkQPpofQQ+lh9HB6BD2SHkWPpsfQY+lx9Hh6Aj2RnkRPpqfQU+lp9HR6Bj2TnkXPpufQc+l59Hw6kV5AL6QX0YvpJfRSehm9nF5Br6RX0avpNfRaeh29nt5Ab6Q30ZvpLfRWehu9nd5B76R30bvpPfReeh+9nz5AH6QP0YfpI/RR+hh9nD5Bn6RP0afpM/RZ+hx9nr5AX6Qv0ZfpK/RV+hp9ncZonCZokqZommZoluZonhZokZZomVZoldZonTZok7Zom3Zol/Zonw7okAY0pBEd0TH6Bn2TvkXfpu/Qd+l79H06SVxc3CP6Mf2Efko/o5/TL+iX9Cv6Nf2Gfku/o9/TH+iP9Cf6M/2F/kp/o7/TP+if9C/6N/2H/kv/o+OYJExSJp5JxiRnUjApmVRMaiYNk5ZJx6RnMjAZmUxMZiYLk5XJxmRncjA5mVxMbiYPk5fJx+RnCjAFmUJMYaYIU5QpxhRnSjAlmVJMaaYMU5Ypx5RnKjAVmUpMZaYKU5WpllidqcHUZGoxtZk6TF2mHlOfacA0ZBoxjZkmTFOmGdOcacG0ZFoxrZk2TALTlmnHtGc6MB2ZTkxnpgvTlenGdGd6MD2ZXkxvpg/Tl+nH9GcGMAOZQcxgZggzlBnGDGdGMCOZUcxoZgwzlhnHjGcmMBOZScxkZgozlZnGTGdmMDOZWcxsZg4zl5nHzGcSmQXMQmYRs5hZwixlljHLmRXMSmYVs5pZw6xl1jHrmQ3MRmYTs5nZwmxltjHbmR3MTmYXs5vZw+xl9jH7mQPMQeYQc5g5whxljjHHmRPMSeYUc5o5w5xlzjHnmQvMReYSc5m5wlxlrjHXGYzBGYIhGYqhGYZhGY7hGYERGYmRGYVRGY3RGYMxGYuxGYdxGY/xmYAJGcBABjERE2NuMDeZW8xt5g5zl7nH3GceMA+ZR8xj5gnzlHnGPGdeMC+ZV8xr5g3zlnnHvGc+MB+ZT8xn5gvzlfnGfGd+MD+ZX8xv5g/zl/nHxLFJ2KRsPJuMTc6mYFOyqdjUbBo2LZuOTc9mYDOymdjMbBY2K5uNzc7mYHOyudjcbB42L5uPzc8WYAuyhdjCbBG2KFuMLc6WYEuypdjSbBm2LFuOLc9WYCuyldjKbBW2KluNrc7WYGuytdjabB22LluPrc82YBuyjdjGbBO2KduMbc62YFuyrdjWbBs2gW3LtmPbsx3YjmwntjPbhe3KdmO7sz3Ynmwvtjfbh+3L9mP7swPYgewgdjA7hB3KDmOHsyPYkewodjQ7hh3LjmPHsxPYiewkdjI7hZ3KTmOnszPYmewsdjY7h53LzmPns4nsAnYhu4hdzC5hl7LL2OXsCnYlu4pdza5h17Lr2PXsBnYju4ndzG5ht7Lb2O3sDnYnu4vdze5h97L72P3sAfYge4g9zB5hj7LH2OPsCfYke4o9zZ5hz7Ln2PPsBfYie4m9zF5hr7LX2OssxuIswZIsxdIsw7Isx/KswIqsxMqswqqsxuqswZqsxdqsw7qsx/pswIYsYCGL2IiNsTfYm+wt9jZ7h73L3mPvsw/Yh+wj9jH7hH3KPmOfsy/Yl+wr9jX7hn3LvmPfsx/Yj+wn9jP7hf3KfmO/sz/Yn+wv9jf7h/3L/mPjuCRJ/tPXcim4lFwqLjWXhkvLpePScxm4jFwmLjOXhcvKZeOyczm4nFwuLjeXh8vL5ePycwW4glwhrjBXhCvKFeOKcyW4klwprjRXhivLlePKcxW4ilwlrjJXhavKVeOqczW4mlwtrjZXh6vL1ePqcw24hlwjrjHXhGvKNeOacy24llwrrjXXhkvg2nLtuPZcB64j14nrzHXhunLduO5cD64n14vrzfXh+nL9uP7cAG4gN4gbzA3hhnLDuOHcCG4kN4obzY3hxnLjuPHcBG4iN4mbzE3hpnLTuOncDG4mN4ubzc3h5nLzuPlcIreAW8gt4hZzS7il3DJuObeCW8mt4lZza7i13DpuPbeB28ht4jZzW7it3DZuO7eD28nt4nZze7i93D5uP3eAO8gd4g5zR7ij3DHuOHeCO8md4k5zZ7iz3DnuPHeBu8hd4i5zV7ir3DXuOodxOEdwJEdxNMdwLMdxPCdwIidxMqdwKqdxOmdwJmdxNudwLudxPhdwIQc4yCEu4mLcDe4md4u7zd3h7nL3uPvcA+4h94h7zD3hnnLPuOfcC+4l94p7zb3h3nLvuPfcB+4j94n7zH3hvnLfuO/cD+4n94v7zf3h/nL/uDg+CZ+Uj+eT8cn5FHxKPhWfmk/Dp+XT8en5DHxGPhOfmc/CZ+Wz8dn5HHxOPhefm8/D5+Xz8fn5AnxBvhBfmC/CF+WL8cX5EnxJvhRfmi/Dl+XL8eX5CnxFvhJfma/CV+Wr8dX5GnxNvhZfm6/D1+Xr8fX5BnxDvhHfmG/CN+Wb8c35FnxLvhXfmm/DJ/Bt+XZ8e74D35HvxHfmu/Bd+W58d74H35Pvxffm+/B9+X58f34AP5AfxA/mh/BD+WH8cH4EP5IfxY/mx/Bj+XH8eH4CP5GfxE/mp/BT+Wn8dH4GP5Ofxc/m5/Bz+Xn8fD6RX8Av5Bfxi/kl/FJ+Gb+cX8Gv5Ffxq/k1/Fp+Hb+e38Bv5Dfxm/kt/FZ+G7+d38Hv5Hfxu/k9/F5+H7+fP8Af5A/xh/kj/FH+GH+cP8Gf5E/xp/kz/Fn+HH+ev8Bf5C/xl/kr/FX+Gn+dx3icJ3iSp3iaZ3iW53ieF3iRl3iZV3iV13idN3iTt3ibd3iX93ifD/iQBzzkER/xMf4Gf5O/xd/m7/B3+Xv8ff4B/5B/xD/mn/BP+Wf8c/4F/5J/xb/m3/Bv+Xf8e/4D/5H/xH/mv/Bf+W/8d/4H/5P/xf/m//B/+X98nJBESCrEC8mE5EIKIaWQSkgtpBHSCumE9EIGIaOQScgsZBGyCtmE7EIOIaeQS8gt5BHyCvmE/EIBoaBQSCgsFBGKCsWE4kIJoaRQSigtlBHKCuWE8kIFoaJQSagsVBGqCtWE6kINoaZQS6gt1BHqCvWE+kIDoaHQSGgsNBGaCs2E5kILoaXQSmgttBEShLZCO6G90EHoKHQSOgtdhK5CN6G70EPoKfQSegt9hL5CP6G/MEAYKAwSBgtDhKHCMGG4MEIYKYwSRgtjhLHCOGG8MEGYKEwSJgtThKnCNGG6MEOYKcwSZgtzhLnCPGG+kCgsEBYKi4TFwhJhqbBMWC6sEFYKq4TVwhphrbBOWC9sEDYKm4TNwhZhq7BN2C7sEHYKu4Tdwh5hr7BP2C8cEA4Kh4TDwhHhqHBMOC6cEE4Kp4TTwhnhrHBOOC9cEC4Kl4TLwhXhqnBNuC5gAi4QAilQAi0wAitwAi8IgihIgiwogipogi4YgilYgi04git4gi8EQigAAQpIiISYcEO4KdwSbgt3hLvCPeG+8EB4KDwSHgtPhKfCM+G58EJ4KbwSXgtvhLfCO+G98EH4KHwSPgtfhK/CN+G78EP4KcT9d/H+E+LEJGJSMV5MJiYXU4gpxVRiajGNmFZMJ6YXM4gZxUxiZjGLmFXMJmYXc4g5xVxibjGPmFfMJ+YXC4gFxUJiYbGIWFQsJhYXS4glxVJiabGMWFYsJ5YXK4gVxUpiZbGKWFWsJlYXa4g1xVpibbGOWFesJ9YXG4gNxUZiY7GJ2FRsJjYXW4gtxVZia7GNmCC2FduJ7cUOYkexk9hZ7CJ2FbuJ3cUeYk+xl9hb7CP2FfuJ/cUB4kBxkDhYHCIOFYeJw8UR4khxlDhaHCOOFceJ48UJ4kRxkjhZnCJOFaeJ08UZ4kxxljhbnCPOFeeJ88VEcYG4UFwkLhaXiEvFZeJycYW4UlwlrhbXiGvFdeJ6cYO4Udwkbha3iFvFbeJ2cYe4U9wl7hb3iHvFfeJ+8YB4UDwkHhaPiEfFY+Jx8YR4UjwlnhbPiGfFc+J58YJ4UbwkXhaviFfFa+J1ERNxkRBJkRJpkRFZkRN5URBFURJlURFVURN10RBN0RJt0RFd0RN9MRBDEYhQRGIkxsQb4k3xlnhbvFP6rnhPvC8+EB+Kj8TH4hPxqfhMfC6+EF+Kr8TX4hvxrfhOfC9+ED+Kn8TP4hfxq/hN/C7+EH+Kv8Tf4h/xr/hPjJOSSEmleCmZlFxKIaWUUkmppTRSWimdlF7KIGWUMkmZpSxSVimblF3KIeWUckm5pTxSXimflF8qIBWUCkmFpSJSCqmYVFwqIZWUSkmlpTJSWamcVF6qIFWUKkmVpSpSVamaVF2qIdWUakm1pTpSXameVF9qIDWUGkmNpSZSU6mZ1FxqIbWUWkmtpTZSgtRWaie1lzpIHaVOUmepi9RV6iZ1l3pIPaVeUm+pj9RX6if1lwZIA6VB0mBpiDRUGiYNl0ZII6VR0mhpjDS2dpw0XpogTZQmSZOlKdJUaZo0XZohzZRmSbOlOdJcaZ40X0qUFkgLpUXSYmmJtFRaJi2XVkgrpVXSammNtFZaJ62XNkgbpU3SZmmLtFXaJm2Xdkg7pV3SbmmPtFfaJ+2XDkgHpUPSYemIdFQ6Jh2XTkgnpVPSaemMdFY6J52XLkgXpUvSZemKdFW6Jl2XMAmXCImUKImWGImVOImXBEmUJEmWFEmVNEmXDMmULMmWHMmVPMmXAimUgAQlJEVSTLoh3ZRuSbelO9Jd6Z50X3ogPZQeSY+lJ9JT6Zn0XHohvZReSa+lN9Jb6Z30XvogfZQ+SZ+lL9JX6Zv0Xfoh/ZR+Sb+lP9Jf6Z8UJyeRk8rxcjI5uZxCTimnklPLaeS0cjo5vZxBzihnkjPLWeSscjY5u5xDzinnknPLeeS8cj45v1xALigXkgvLReSicjG5uFxCLimXkkvLZeSycjm5/MI4uaJcSa4sV5GrytXk6nINuaZcS64t15HryvXk+nIDuaHcSG4sN5Gbys3k5nILuaXcSm4tt5ET5LZyO7m93EHuKHeSO8td5K5yN7m73EPuKfeSe8t95L5yP7m/PEAeKA+SB8tD5KHyMHm4PEIeKY+SR8tj5LHyOHm8PEGeKE+SJ8tT5KnyNHm6PEOeKc+SZ8tz5LnyPHm+nCgvkBfKi+TF8hJ5qbxMXi6vkFfKq+TV8hp5rbxOXi9vkDfKm+TN8hZ5q7xN3i7vkHfKu+Td8h55r7xP3i8fkA/Kh+TD8hH5qHxMPi6fkE/Kp+TT8hn5rHxOPi9fkC/Kl+TL8hX5qnxNvi5jMi4TMilTMi0zMitzMi8LsihLsiwrsiprsi4bsilbsi07sit7si8HcigDGcpIjuSYfEO+Kd+Sb8t35LvyPfm+/EB+KD+SH8tP5KfyM/m5/EJ+Kb+SX8tv5LfyO/m9/EH+KH+SP8tf5K/yN/m7/EP+Kf+Sf8t/5L/yPzlOSaIkVeKVZEpyJYWSUkmlpFbSKGmVdEp6JYOSUcmkZFayKFmVbEp2JYeSU8ml5FbyKHmVfEp+pYBSUCmkFFaKKEWVYkpxpYRSUimllFbKKGWVckp5pYJSUamkVFaqKFWVakp1pYZSU6ml1FbqKHWVekp9pYHSUGmkNFaaKE2VZkpzpYXSUmmltFbaKAlKW6Wd0l7poHRUOimdlS5KV6Wb0l3pofRUeim9lT5KX6Wf0l8ZoAxUBimDlSHKUGWYMlwZoYxURimjlTHKWGWcMl6ZoExUJimTlSnKVGWaMl2ZocxUZimzlTnKXGWeMl9JVBYoC5VFymJlibJUWaYsV1YoK5VVympljbJWWaesVzYoG5VNymZli7JV2aZsV3YoO5Vdym5lj7JX2afsVw4oB5VDymHliHJUOaYcV04oJ5VTymnljHJWOaecVy4oF5VLymXlinJVuaZcVzAFVwiFVCiFVhiFVTiFVwRFVCRFVhRFVTRFVwzFVCzFVhzFVTzFVwIlVIACFaRESky5odxUbim3lTvKXeWecl95oDxUHimPlSfKU+WZ8lx5obxUXimvlTfKW+Wd8l75oHxUPimflS/KV+Wb8l35ofxUfim/lT/KX+WfEqcmUZOq8f/LA2oKNaWaSk2tplHTqunU9GoGNaOaSc2sZlGzqtnU7GoONaeaS82t5lHzqvnU/GoBtaBaSC2sFlGLqsXU4moJtaRaSi2txseVVcup5dUKakW1klpZraJWVaup1dUaak21llpbraPWVeup9dUGakO1kdpYbaI2VZupzdUWaku1ldpabaMmqG3Vdmp7tYPaUe2kdla7qF3Vbini1B5qT7WX2lvto/ZV+6n91QHqQHWQOlgdog5Vh6nD1RHqSHWUOlodo45Vx6nj1QnqRHWSOlmdok5Vp6nT1RnqTHWWOludo85V56nz1UR1gbpQXaQuVpeoS9Vl6nJ1hbpSXaWuVteoa9V16np1g7pR3aRuVreoW9Vt6nZ1h7pT3aXuVveoe9V96n71gHpQPaQeVo+oR9Vj6nH1hHpSPaWeVs+oZ9Vz6nn1gnpRvaReVq+oV9Vr6nUVU3GVUEmVUmmVUVmVU3lVUEVVUmVVUVVVU3XVUE3VUm3VUV3VU301UEMVqFBFaqTG1BvqTfWWelu9o95V76n31QfqQ/WR+lh9oj5Vn6nP1RfqS/WV+lp9o75V36nv1Q/qR/WT+ln9on5Vv6nf1R/qT/WX+lv9o/5V/6lxWhItqRavJdOSaym0lFoqLbWWRkurpdPSaxm0jFomLbOWRcuqZdOyazm0nFouLbeWR8ur5dPyawW0glohrbBWRCuqFdOKayW0kloprbRWRiurldPKaxW0ilolrbJWRauqVdOqazW0mlotrbZWR6ur1dPqaw20hlojrbHWRGuqNdOaay20llorrbXWRkvQ2mrttPZaB62j1knrrHXRumrdtO5aD62n1kvrrfXR+mr9tP7aAG2gNkgbrA3RhmrDtOHaCG2kNkobrY3RxmrjtPHaBG2iNkmbrE3RpmrTtOnaDG2mNkubrc3R5mrztPlaorZAW6gt0hZrS7Sl2jJtubZCW6mt0lZra7S12jptvbZB26ht0jZrW7St2jZtu7ZD26nt0nZre7S92j5tv3ZAO6gd0g5rR7Sj2jHtuHZCO6md0k5rZ7Sz2jntvHZBu6hd0i5rV7Sr2jXtuoZpuEZopEZptMZorMZpvCZooiZpsqZoqqZpumZopmZptuZoruZpvhZooQY0qCEt0mLaDe2mdku7rd3R7mr3tPvaA+2h9kh7rD3RnmrPtOfaC+2l9kp7rb3R3mrvtPfaB+2j9kn7rBXUvmrftO/aD+2n9kv7rf3R/mr/tDg9iZ5Uj9eT6cn1FHpKPZWeWk+jp9XT6en1DHpGPZOeWc+iZ9Wz6dn1HHpOPZeeW8+j59Xz6fn1AnpBvZBeWC+iF9WL6cX1EnpJvZReWi+jl9XL6eX1CnpFvZJeWa+iV9Wr6dX1GnpNvZZeW6+j19Xr6fX1BnpDvZHeWG+iN9Wb6c31FnpLvZXeWm+jJ+ht9XZ6e72D3lHvpHfWu+hd9W56d72H3lPvpffW++h99X56f32APlAfpA/Wh+hD9WH6cH2EPlIfpY/Wx+hj9XH6eH2CPlGfpE/Wp+hT9Wn6dH2GPlOfpc/W5+hz9Xn6fD1RX6Av1Bfpi/Ul+lJ9mb5cX6Gv1Ffpq/U1+lp9nb5e36Bv1Dfpm/Ut+lZ9m75d36Hv1Hfpu/XUcXv1ffp+/YB+UD+kH9aP6Ef1Y/px/YR+Uj+ln9bP6Gf1c/p5/YJ+Ub+kX9av6Ff1a/p1HdNxndBJndJpndFZndN5XdBFXdJlXdFVXdN13dBN3dJt3dFd3dN9PdBDHehQR3qkx/Q4/aZ+S7+t39Hv6vf0+/oD/aH+SH+sP9Gf6s/05/oL/aX+Sn+tv9Hf6u/09/oH/aP+Sf+sf9G/6t/07/oP/af+S/+t/9H/6v/0OCOJkdSIN5IZyY0URkojlZHaSGOkNdIZ6Y0MRkYjk5HZyGJkNbIZ2Y0cRk4jl5HbyGPkNfIZ+Y0CRkGjkFHYKGIUNYoZxY0SRkmjlFHaKGOUNcoZ5Y0KRkWjklHZqGJUNaoZ1Y0aRk2jllHbqGPUNeoZ9Y0GRkOjkdHYaGI0NZoZzY0WRkujldHaaGMkGG2NdkZ7o4PR0ehkdDa6GF2NbkZ3o4fR0+hl9Db6GH2NfkZ/Y4Ax0BhkDDaGGEONYcZwY4Qx0hhljDbGGGONccZ4Y4Ix0ZhkTDamGFONacZ0Y4Yx05hlzDbmGHONecZ8I9FYYCw0FhmLjSXGUmOZsdxYYaw0VhmrjTXGWmOdsd7YYGw0NhmbjS3GVmObsd3YYew0dhm7jT3GXmOfsd84YBw0DhmHjSPGUeOYcdw4YZw0ThmnjTPGWeOccd64YFw0LhmXjSvGVeOacd3ADNwgDNKgDNpgDNbgDN4QDNGQDNlQDNXQDN0wDNOwDNtwDNfwDN8IjNAABjSQERkx44Zx07hl3DbuGHeNe8Z940HiQ+OR8dh4Yjw1nhnPjRfGS+OV8dp4Y7w13hnvjQ/GR+OT8dn4Ynw1vhnfjR/GT+OX8dv4Y/w1/hlxZhIzqRlvJjOTmynMlGYqM7WZxkxrpjPTmxnMjGYmM7OZxcxqZjOzmznMnGYuM7eZx8xr5jPzmwXMgmYhs7BZxCxqFjOLmyXMkmYps7RZxixrljPLmxXMimYls7JZxaxqVjOrmzXMmmYts7ZZx6xr1jPrmw3MhmYjs7HZxGxqNjObmy3MlmYrs7XZxkww25rtzPZmB7Oj2cnsbHYxu5rdzO5mD7On2cvsbfYx+5r9zP7mAHOgOcgcbA4xh5rDzOHmCHOkOcocbY4xx5rjzPHmBHOiOcmcbE4xp5rTzOnmDHOmOcucbc4x55rzzPlmornAXGguMhebS8yl5jJzubnCXGmuMleba8y15jpzvbnB3GhuMjebW8yt5jZzu7nD3GnuMnebe8y95j5zv3nAPGgeMg+bR8yj5jHzuHnCPGmeMk+bZ8yz5jnzvHnBvGheMi+bV8yr5jXzuomZuEmYpEmZtMmYrMmZvCmYoimZsqmYqqmZummYpmmZtumYrumZvhmYoQlMaCIzMmPmDfOmecu8bd4x75r3zPvmA/Oh+ch8bD4xn5rPzOfmC/Ol+cp8bb4x35rvzPfmB/Oj+cn8bH4xv5rfzO/mD/On+cv8bf4x/5r/zDgriZXUireSWcmtFFZKK5WV2kpjpbXSWemtDFZGK5OV2cpiZbWyWdmtHFZOK5eV28pj5bXyWfmtAlZBq5BV2CpiFbWKWcWtElZJq5RV2ipjlbXKWeWtClZFq5JV2apiVbWqWdWtGlZNq5ZV26pj1bXqWfWtBlZDq5HV2GpiNbWaWc2tFlZLq5XV2mpjJVhtrXZWe6uD1dHqZHW2ulhdrW5Wd6uH1dPqZfW2+lh9rX5Wf2uANdAaZA22hlhDrWHWcGuENdIaZY22xlhjrXHWeGuCNdGaZE22plhTrWnWdGuGNdOaZc225lhzrXnWfCvRWmAttBZZi60l1lJrmbXcWmGttFZZq6011lprnbXe2mBttDZZm60t1lZrm7Xd2mHttHZZu6091l5rn7XfOmAdtA5Zh60j1lHrmHXcOmGdtE5Zp60z1lnrnHXeumBdtC5Zl60r1lXrmnXdwizcIizSoizaYizW4izeEizRkizZUizV0izdMizTsizbcizX8izfCqzQAha0kBVZMeuGddO6Zd227lh3rXvWfeuB9dB6ZD22nlhPrWfWc+uF9dJ6Zb223lhvrXfWe+uD9dH6ZH22vlhfrW/Wd+uH9dP6Zf22/lh/rX9WnJ3ETmrH28ns5HYKO6Wdyk5tp7HT2uns9HYGO6Odyc5sZ7Gz2tns7HYOO6edy85t57Hz2vns/HYBu6BdyC5sF7GL2sXs4nYJu6Rdyi5tl7HL2uXs8nYFu6Jdya5sV7Gr2tXs6nYNu6Zdy65t17Hr2vXs+nYDu6HdyG5sN7Gb2s3s5nYLu6Xdym5tt7ET7LZ2O7u93cHuaHeyO9td7K52N7u73cPuafeye9t97L52P7u/PcAeaA+yB9tD7KH2MHu4PcIeaY+yR9tj7LH2OHu8PcGeaE+yJ9tT7Kn2NHu6PcOeac+yZ/+v7djz7Pl2or3AXmgvshfbS+yl9jJ7ub3CXmmvslfba+y19jp7vb3B3mhvsjfbW+yt9jZ7u73D3mnvsnfbe+y99j57v33APmgfsg/bR+yj9jH7uH3CPmmfsk/bZ+yz9jn7vH3Bvmhfsi/bV+yr9jX7uo3ZuE3YpE3ZtM3YrM3ZvC3Yoi3Zsq3Yqq3Zum3Ypm3Ztu3Yru3Zvh3YoQ1saCM7smP2Dfumfcu+bd+x79r37Pv2A/uh/ch+bD+xn9r/jyd4Zb+239hv7Xf2e/uD/dH+ZH+2v9hf7W/2d/uH/dP+Zf+2/9h/7X92nJPESerEO8mc5E4KJ6WTykntpHHSOumc9E4GJ6OTycnsZHGyOtmc7E4OJ6eTy8nt5HHyOvmc/E4Bp6BTyCnsFHGKOsWc4k4Jp6RTyintlHHKOuWc8k4Fp6JTyansVHGqOtWc6k4Np6ZTy6nt1HHqOvWc+k4Dp6HTyGnsNHGaOs2c5k4Lp6XTymnttHESnLZOO6e908Hp6HRyOjtdnK5ON6e708Pp6fRyejt9nL5OP6e/M8AZ6AxyBjtDnKHOMGe4M8IZ6YxyRjtjnLHOOGe8M8GZ6ExyJjtTnKnONGe6M8OZ6cxyZjtznLnOPGe+k+gscBY6i5zFzhJnqbPMWe6scFY6q5zVzhpnrbPOWe9scDY6m5zNzhZnq7PN2e7scHY6u5zdzh5nr7PP2e8ccA46h5zDzhHnqHPMOe6ccE46p5zTzhnnrHPOOe9ccC46l5zLzhXnqnPNue5gDu4QDulQDu0wDutwDu8IjuhIjuwojupoju4YjulYju04jut4ju8ETugABzrIiZyYc8O56dxybjt3nLvOPee+88B56DxyHjtPnKfOM+e588J56bxyXjtvnLfOO+e988H56HxyPjtfnK/ON+e788P56fxyfjt/nL/OPyfOTeImdePdZG5yN4Wb0k3lpnbTuGnddG56N4Ob0c3kZnazuFndbG52N4eb083l5nbzuHndfG5+t4Bb0C3kFnaLuEXdYm5xt4Rb0i3llnbLuGXdcm55t4Jb0a3kVnaruFXdam51t4Zb063l1nbruHXdem59t4Hb0G3kNnabuE3dZm5zt4Xb0m3ltnbbuAluW7ed297t4HZ0O7md3S5uV7eb293t4fZ0e7m93T5uX7ef298d4A50B7mD3SHuUHeYO9wd4Y50R7mj3THuWHecO96d4E50J7mT3SnuVHeaO92d4c50Z7mz3TnuXHeeO99NdBe4C91F7mJ3ibvUXeYud1e4K91V7mp3jbvWXeeudze4G91N7mZ3i7vV3eZud3e4O91d7m53j7vX3efudw+4B91D7mH3iHvUPeYed0+4J91T7mn3jHvWPeeedy+4F91L7mX3invVveZedzEXdwmXdCmXdhmXdTmXdwVXdCVXdhVXdTVXdw3XdC3Xdh3XdT3XdwM3dIELXeRGbsy94d50b7m33TvuXfeee9994D50H7mP3SfuU/eZ+9x94b50X7mv3TfuW/ed+9794H50P7mf3S/uV/eb+9394f50f7m/3T/uX/efG+cl8ZJ68V4yL7mXwkvppfJSe2m8tF46L72XwcvoZfIye1m8rF42L7uXw8vp5fJye3m8vF4+L79XwCvoFfIKe0W8ol4xr7hXwivplfJKe2W8sl45r7xXwavoVfIqe1W8ql41r7pXw6vp1fJqe3W8ul49r77XwGvoNfIae028pl4zr7nXwmvptfJae228BK+t185r73XwOnqdvM5eF6+r183r7vXwenq9vN5eH6+v18/r7w3wBnqDvMHeEG+oN8wb7o3wRnqjvNHeGG+sN84b703wJnqTvMneFG+qN82b7s3wZnqzvNneHG+uN8+b7yV6C7yF3iJvsbfEW+ot85Z7K7yV3ipvtbfGW+ut89Z7G7yN3iZvs7fF2+pt87Z7O7yd3i5vt7fH2+vt8/Z7B7yD3iHvsHfEO+od8457J7yT3invtHfGO+ud8857F7yL3iXvsnfFu+pd8657mId7hEd6lEd7jMd6nMd7gid6kid7iqd6mqd7hmd6lmd7jud6nud7gRd6wIMe8iIv5t3wbnq3vNveHe+ud8+77z3wHnqPvMfeE++p98x77r3wXnqvvNfeG++t9857733wPnqfvM/eF++r98377v3wfnq/vN/eH++v98+L85P4Sf14P5mf3C8zIEe5VH5qP42f1k/np/cz+Bn9TH5mP4uf1c/mZ/dz+Dn9XH5uP4+f18/n5/cL+AX9Qn5hv4hf1C/mF/dL+CX9Un5pv4xf1i/nl/cr+BX9Sn5lv4pf1a/mV/dr+DX9Wn5tv45f16/n1/cb+A39Rn5jv4nf1G/mN/db+C39Vn5rv42f4Lf12/nt/Q5+R7+T39nv4nf1u/nd/R5+T7+X39vv4/f1+/n9/QH+QH+QP9gf4g/1h/nD/RH+SH+UP9of44/1x/nj/Qn+RH+SP9mf4k/1p/nT/Rn+TH+WP9uf48/15/nz/UR/gb/QX+Qv9pf4S/1l/nJ/hb/SX+Wv9tf4a/11/np/g7/R3+Rv9rf4W/1t/nZ/h7/T3+Xv9vf4e/19/n7/gH/QP+Qf9o/4R/1j/nH/hH/SP+Wf9s/4Z/1z/nn/gn/Rv+Rf9q/4V/1r/nUf83Gf8Emf8mmf8Vmf83lf8EVf8mVf8VVf83Xf8E3f8m3f8V3f830/8EMf+NBHfuTH/Bv+Tf+Wf9u/49/17/n3/Qf+Q/+R/9h/4j/1n/nP/Rf+S/+V/9p/47/13/nv/Q/+R/+T/9n/4n/1v/nf/R/+T/+X/9v/4//1//lxSeOCpEF8kCxIHqQIUgapgtRBmiBtkC5IH2QIMgaZgsxBliBrkC3IHuQIcga5gtxBniBvkC/IHxQICgaFgsJBkaBoUCwoHpQISgalgtJBmaBsUC4oH1QIKgaVgspBlaBqUC2oHtQIaga1gtpBnaBuUC+oHzQIGgaNgsZBk6Bp0CxoHrQIWgatgtZBmyAhaBu0C9oHHYKOQaegc9Al6Bp0C7oHPYKeQa+gd9An6Bv0C/oHA4KBwaBgcDAkGBoMC4YHI4KRwahgdDAmGBuMC8YHE4KJwaRgcjAlmBpMC6YHM4KZwaxgdjAnmBvMC+YHicGCYGGwKFgcLAmWBsuC5cGKYGWwKlgdrAnWBuuC9cGGYGOwKdgcbAm2BtuC7cGOYGewK9gd7An2BvuC/cGB4GBwKDgcHAmOBseC48GJ4GRwKjgdnAnOBueC88GF4GJwKbgcXAmuBteC6wEW4AERkAEV0AETsAEX8IEQiIEUyIESqIEW6IERmIEV2IETuIEX+EEQhAEIYICCKIgFN4Kbwa3gdnAnuBvcC+4HD4KHwaPgcfAkeBo8C54HL4KXwavgdfAmeBu8C94HH4KPwafgc/Al+Bp8C74HP4Kfwa/gd/An+Bv8C+LCJGHSMD5MFiYPU4Qpw1Rh6jBNmDZMF6YPM4QZw0xh5jBLmDXMFmYPc4Q5w1xh7jBPmDfMF+YPC4QFw0Jh4bBIWDQsFhYPS4Qlw1Jh6bBMWDYsF5YPK4QVw0ph5bBKWDWsFlYPa4Q1w1ph7bBOWDesF9YPG4QNw0Zh47BJ2DRsFjYPW4Qtw1Zh67BNmBC2DduF7cMOYcewU9g57BJ2DbuF3cMeYc+wV9g77BP2DfuF/cMB4cBwUDg4HBIODYeFw8MR4chwVDg6HBOODceF48MJ4cT88XFx4ZRwajgtnB7OiI+Liwtnh3PCueG8cH6YGC4IF4aLwsXhknBpuCxcHq4IV4arwtXhmnBtuC5cH24IN4abws3hlnBruC3cHu4Id4a7wt3hnnBvuC/cHx4ID4aHwsPhkfBoeCw8Hp4IT4anwtPhmfBseC48H14IL4aXwsvhlfBqeC28HmIhHhIhGVIhHTIhG3IhHwqhGEqhHCqhGmqhHhqhGVqhHTqhG3qhHwZhGIIQhiiMwlh4I7wZ3gpvh3fCu+G98H74IHwYPgofh0/Cp+Gz8Hn4InwZvgpfh2/Ct+G78H34IfwYfgo/h1/Cr+G38Hv4I/wZ/gp/h3/Cv+G/MA4kAUlBPEgGkoMUICVIBVKDNCAtSAfSgwwgI8gEMoMsICvIBrKDHCAnyAVygzwgL8gH8oMCoCAoBAqDIqAoKAaKgxKgJCgFSoMyoCwoB8qDCqAiqAQqgyqgKqgGqoMaoCaoBWqDOqAuqAfqgwagIWgEGoMmoCloBpqDFqAlaAVagzYgAbQF7UB70AF0BJ1AZ9AFdAXdQHfQA/QEvUBv0Af0Bf1AfzAADASDwGAwBAwFw8BwMAKMBKPAaDAGjAXjwHgwAUwEk8BkMAVMBdPAdDADzASzwGwwB8wF88B8kAgWgIVgEVgMloClYBlYDlaAlWAVWA3WgLVgHVgPNoCNYBPYDLaArWAb2A52gJ1gF9gN9oC9YB/YDw6Ag+AQOAyOgKPgGDgOToCT4BQ4Dc6As+AcOA8ugIvgErgMroCr4Bq4DjCAAwKQgAI0YAALOMADAYhAAjJQgAo0oAMDmMACNnCACzzggwCEAAAIEIhADNwAN8EtcBvcAXfBPXAfPAAPwSPwGDwBT8Ez8By8AC/BK/AavAFvwTvwHnwAH8En8Bl8AV/BN/Ad/AA/wS/wG/wBf8E/EAeTwKQwHiaDyWEKmBKmgqlhGpgWpoPpYQaYEWaCmWEWmBVmg9lhDpgT5oK5YR6YF+aD+WEBWBAWgoVhEVgUFoPFYQlYEpaCpWEZWBaWg+VhBVgRVoKVYRVYFVaD1WENWBPWgrVhHVgX1oP1YQPYEDaCjWET2BQ2g81hC9gStoKtYRuYANvCdrA97AA7wk6wM+wCu8JusDvsAXvCXrA37AP7wn6wPxwAB8JBcDAcAofCYXA4HAFHwlFwNBwDx8JxcDycACfCSXAynAKnwmlwOpwBZ8JZcDacA+fCeXA+TIQL4EK4CC6GS+BSuAwuhyvgSrgKroZr4Fq4Dq6HG+BGuAluhlvgVrgNboc74E64C+6Ge+BeuA/uhwfgQXgIHoZH4FF4DB6HJ+BJeAqehmfgWXgOnocX4EV4CV6GV+BVeA1ehxjEIQFJSEEaMpCFHOShAEUoQRkqUIUa1KEBTWhBGzrQhR70YQBDCCCECEYwBm/Am/AWvA3vwLvwHrwPH8CH8BF8DJ/Ap/AZfA5fwJfwFXwN38C38B18Dz/Aj/AT/Ay/wK/wG/wOf8Cf8Bf8Df/Av/AfjENJUFIUj5Kh5CgFSolSodQoDUqL0qH0KAPKiDKhzCgLyoqyoewoB8qJcqHcKA/Ki/Kh/KgAKogKocKoCCqKiqHiqAQqiUqh0qgMKovKofKoAqqIKqHKqAqqiqqh6qgGqolqodqoDqqL6qH6qAFqiBqhxqgJaoqaoeaoBWqJWqHWqA1KQG1RO9QedUAdUSfUGXVBXVE31B31QD1RL9Qb9UF9UT/UHw1AA9EgNBgNQUPRMDQcjUAj0Sg0Go1BY9E4NB5NQBPRJDQZTUFT0TQ0Hc1AM9EsNBvNQXPRPDQfJaIFaCFahBajJWgpWoaWoxVoJVqFVqM1aC1ah9ajDWgj2oQ2oy1oK9qGtqMdaCfahXajPWgv2of2owPoIDqEDqMj6Cg6ho6jE+gkOoVOozPoLDqHzqML6CK6hC6jK+gquoauIwzhiEAkohCNGMQiDvFIQCKSkIwUpCIN6chAJrKQjRzkIg/5KEAhAggihCIUQzfQTXQL3UZ30F10D91HD9BD9Ag9Rk/QU/QMPUcv0Ev0Cr1Gb9Bb9A69Rx/QR/QJfUZf0Ff0DX1HP9BP9Av9Rn/QX/QPxUVJoqRRfJQsSh6liFJGqaLUUZoobZQuSh9liDJGmaLMUZYoa5Qtyh7liHJGuaLcUZ4ob5Qvyh8ViApGhaLCUZGoaFQsKh6ViEpGpaLSUZmobFQuKh9ViCpGlaLKUZWoalQtqh7ViGpGtaLaUZ2oblQvqh81iBpGjaLGUZOoadQsah61iFpGraLWUfK4hKht1C5qH3WIOkados5Rl6hr1C3qHvWIeka9ot5Rn6hv1C/qHw2IBkaDosHRkGhoNCwaHo2IRkajotHRmGhsNC4aH02IJkaTosnRlGhqNC2aHs2IZkazotnRnGhuNC+aHyVGC6KF0aJocbQkWhoti5ZHK6KV0apodbQmWhuti9ZHG6KN0aZoc7Ql2hpti7ZHO6Kd0a5od7Qn2hvti/ZHB6KD0aHocHQkOhodi45HJ6KT0anodHQmOhudi85HF6KL0aXocnQluhpdi65HWIRHRERGVERHTMRGXMRHQiRGUiRHSqRGWqRHRmRGVmRHTuRGXuRHQRRGIIIRiqIoFt2Ibka3otvRnehudC+6Hz2IHkaPosfRk+hp9Cx6Hr2IXkavotfRm+ht9C56H32IPkafos/Rl+hr9C36Hv2Ifka/ot/Rn+hvof/mwlh8LFkseSxFLGUsVSx1LE0sbSxdLH0sQyxjLFMscyxLLGssWyx7LEcsZyxXLHcsTyxvLF8sf6xArGCsUKxwrEisaKxYrHisRKxkrFSsdKxMrGysXKx8rEKsYqxSrHKsSqxqrFqseqxGrGasVqx2rE6sbqxerH6sQaxhrFGscaxJrGmsWax5rEWsZaxVrHWsTSwh1jbWLtY+1iHWMdYp1jnWJdY11i3WPdbj/1i0x+68m0aB4kmVpO1d27Zt27Zt27Zt27Zt42/bmpmrPi/O8y322uuH9cB6Yr2w3lgfrC/WD+uPDcAGYoOwwdgQbCg2DBuOjcBGYqOw0dgYbCw2DhuPTcAmYpOwydgUbCo2DZuOzcBmYrOw2dgcbC42D5uPLcAWYouwxdgSbCm2DFuOrcBWYquw1dgabC22DluPbcA2YpuwzdgWbCu2DduO7cB2Yruw3dgebC+2D9uPHcAOYoeww9gR7Ch2DDuOncBOYqew09gZ7Cx2DjuPXcAuYpewy9gV7Cp2DbuO3cBuYrew29gd7C52D7uPPcAeYo+wx9gT7Cn2DHuOvcBeYq+w19gb7C32DnuPfcA+Yp+wz9gX7Cv2DfuOYRiOERiJURiNMRiLcRiPCZiISZiMKZiKaZiOGZiJWZiNOZiLeZiPBViIRRjAIIawGPYD+4n9wn5jf7C/2D8sDo/Hk+HJ8RR4SjwVnoAn4kl4ajwNnhb/D0+Hp8cz4BnxTHhmPAueFc+GZ8dz4DnxXHhuPA+eF8+H58cL4AXxQnhhvAheFC+GF8dL4CXxUnhpvAxeFi+Hl8cr4BXxSnhlvApeFa+GV8dr4DXxWnhtvA5eF6+H18cb4A3xRnhjvAneFG+GN8db4C3xVnhrvA3eFm+Ht8c74B3xTnhnvAveFe+Gd8d74D3xXnhvvA/eF++H98cH4APxQfhgfAg+FB+GD8dH4CPxUfhofAw+Fh+Hj8cn4BPxSfhkfAo+FZ+GT8dn4DPxWfhsfA4+F5+Hz8cX4AvxRfhifAm+FF+GL8dX4CvxVfhqfA2+Fl+Hr8c34BvxTfhmfAu+Fd+Gb8d34DvxXfhufA++F9+H78cP4AfxQ/hh/Ah+FD+GH8dP4CfxU/hp/Ax+Fj+Hn8cv4BfxS/hl/Ap+Fb+GX8dv4DfxW/ht/A5+F7+H38cf4A/xR/hj/An+FH+GP8df4C/xV/hr/A3+Fn+Hv8c/4B/xT/hn/Av+Ff+Gf8cxHMcJnMQpnMYZnMU5nMcFXMQlXMYVXMU1XMcN3MQt3MYd3MU93McDPMQjHOAQR3gM/4H/xH/hv/E/+F/8Hx5HxBPJiORECiIlkYpIIBKJJCI1kYZIS/xHpCPSExmIjEQmIjORhchKZCOyEzmInEQuIjeRh8hL5CPyEwWIgkQhojBRhChKFCOKEyWIkkQpojRRhihLlCPKExWIikQlojJRhahKVCOqEzWImkQtojZRh6hL1CPqEw2IhkQjojHRhGhKNCOaEy2IlkQrojXRhmhLtCPaEx2IjkQnojPRhehKdCO6Ez2InkQvojfRh+hL9CP6EwOIgcQgYjAxhBhKDCOGEyOIkcQoYjQxhhhLjCPGExOIicQkYjIxhZhKTCOmEzOImcQsYjYxh5hLzCPmEwuIhcQiYjGxhFhKLCOWEyuIlcQqYjWxhlhLrCPWExuIjcQmYjOxhdhKbCO2EzuIncQuYjexh9hL7CP2EweIg8Qh4jBxhDhKHCOOEyeIk8Qp4jRxhjhLnCPOExeIi8Ql4jJxhbhKXCOuEzeIm8Qt4jZxh7hL3CPuEw+Ih8Qj4jHxhHhKPCOeEy+Il8Qr4jXxhnhLvCPeEx+Ij8Qn4jPxhfhKfCO+ExiBEwRBEhRBEwzBEhzBEwIhEhIhEwqhEhqhEwZhEhZhEw7hEh7hEwEREhEBCEggIkb8IH4Sv4jfxB/iL/GPiCPjyWRkcjIFmZJMRSaQiWQSmZpMQ6Yl/yPTkenJDGRGMhOZmcxCZiWzkdnJHGROMheZm8xD5iXzkfnJAmRBshBZmCxCFiWLkcXJEmRJshRZmixDliXLkeXJCmRFshJZmaxCViWrkdXJGmRNshZZm6xD1iXrkfXJBmRDshHZmGxCNiWbkc3JFmRLshXZmmxDtiXbke3JDmRHshPZmexCdiW7kd3JHmRPshfZm+xD9iX7kf3JAeRAchA5mBxCDiWHkcPJEeRIchQ5mhxDjiXHkePJCWRKchI5mZxCTiWnkdPJGeRMchY5m5xDziXnkfPJBeRCchG5mFxCLiWXkcvJFeRKchW5mlxDriXXkevJDeRGchO5mdxCbiW3kdvJHeROche5m9xD7iX3kfvJA+RB8hB5mDxCHiWPkcfJE+RJ8hR5mjxDniXPkefJC+RF8hJ5mVyVIi7uGnmdvEHeJG+Rt8k75F3yHnmffEA+JB+Rj8kn5FPyGfmcfEG+JF+Rr8k35FvyHfme/EB+JD+Rn8kv5FfyG/mdxEicJEiSpEiaZEiW5EieFEiRlEiZVEiV1EidNEiTtEibdEiX9EifDMiQjEhAQhKRMfIH+ZP8Rf4m/5B/yX9kHBVPJaOSUymolFQqKoFKpJKo1FQaKi31H5WOSk9loDJSmajMVBYqK5WNyk7loHJSuajcVB4qL5WPyk8VoApShajCVBGqKFWMKk6VoEpSpajSVBmqLFWOKk9VoCpSiXFxcVWoqlQ1qjpVg6pJ1aJqU3WoulQ9qj7VgGpINaIaU02oplQzqjnVgmpJtaJaU22otlQ7qj3VgepIdaI6U12orlQ3qjvVg+pJ9aJ6U32ovlQ/qj81gBpIDaIGU0OoodQwajg1ghpJjaJGU2OosdQ4ajw1gZpITaImU1OoqdQ0ajo1g5pJzaJmU3OoudQ8aj61gFpILaIWU0uopdQyajm1glpJraJWU2uotdQ6aj21gdpIbaI2U1uordQ2aju1g9pJ7aJ2U3uovdQ+aj91gDpIHaIOU0eoo9Qx6jh1gjpJnaJOU2eos9Q56jx1gbpIXaIuU1eoq9Q16jp1g7pJ3aJuU3eou9Q96j71gHpIPaIeU0+op9Qz6jn1gnpJvaJeU2+ot9Q76j31gfpIfaI+U1+or9Q36juFUThFUCRFUTTFUCzFUTwlUCIlUTKlUCqlUTplUCZlUTblUC7lUT4VUCEVUYCCFKJi1A/qJ/WL+k39of5S/6g4Op5ORienU9Ap6VR0Ap1IJ9Gp6TR0Wvo/Oh2dns5AZ6Qz0ZnpLHRWOhudnc5B56Rz0bnpPHReOh+dny5AF6QL0YXpInRRuhhdnC5Bl6RL0aXpMnRZuhxdnq5AV6Qr0ZXpKnRVuhpdna5B16Rr0bXpOnRduh5dn25AN6Qb0Y3pJnRTuhndnG5Bt6Rb0a3pNnRbuh3dnu5Ad6Q70Z3pLnRXuhvdne5B96R70b3pPnRfuh/dnx5AD6QH0YPpIfRQehg9nB5Bj6RH0aPpMfRYehw9np5AT6Qn0ZPpKfRUeho9nZ5Bz6Rn0bPpOfRceh49n15Aw3qL6MX0EnopvYxeTq+gV9Kr6NX0GnotvY5eT2+gN9Kb6M30FnorvY3eTu+gd9K76N30HnovvY/eTx+gD9KH6MP0EfoofYw+Tp+gT9Kn6NP0GfosfY4+T1+gL9KX6Mv0FfoqfY2+Tt+gb9K36Nv0HfoufY++Tz+gH9KP6Mf0E/op/Yx+Tr+gX9Kv6Nf0G/ot/Y5+T3+gP9Kf6M/0F/or/Y3+TmM0ThM0SVM0TTM0S3M0Twu0SEu0TCu0Smu0Thu0SVu0TTu0S3u0Twd0SEc0oCGN6Bj9g/5J/6J/03/ov/Q/Oo6JZ5IxyZkUTEomFZPAJDJJTGomDZOW+Y9Jx6RnMjAZmUxMZiYLk5XJxmRncjA5mVxMbiYPk5fJx+RnCjAFmUJMYaYIU5QpxhRnSjAlmVJMaaYMU5Ypx5RnKjAVmUpMZaYKU5WpxlRnajA1mVpMbaYOU5epx9RnGjANmUZMY6YJ05RpxjRnWjAtmVZMa6YN05Zpx7RnOjAdmU5MZ6YL05XpxnRnejA9mV5Mb6YP05fpx/RnBjADmUHMYGYIM5QZxgxnRjAjmVHMaGYMM5YZx4xnJjATmUnMZGYKM5WZxkxnZjAzmVnMbGYOM5eZx8xnFjALmUXMYmYJs5RZxixnVjArmVXMamYNs5ZZx6xnNjAbmU3MZmYLs5XZxmxndjA7mV3MbmYPs5fZx+xnDjAHmUPMYeYIc5Q5xhxnTjAnmVPMaeYMc5Y5x5xnLjAXmUvMZeYKc5W5xlxnbjA3mVvMbeYOc5e5x9xnHjAPmUfMY+YJ85R5xjxnXjAvmVfMa+YN85Z5x7xnPjAfmU/MZ+YL85X5xnxnMAZnCIZkKIZmGIZlOIZnBEZkJEZmFEZlNEZnDMZkLMZmHMZlPMZnAiZkIgYwkEFMjPnB/GR+Mb+ZP8xf5h8Tx8azydjkbAo2JZuKTWAT2SQ2NZuGTcv+x6Zj07MZ2IxsJjYzm4XNymZjs7M52JxsLjY3m4fNy+Zj87MF2IJsIbYwW4QtyhZji7Ml2JJsKbY0W4Yty5Zjy7MV2IpsJbYyW4WtylZjq7M12JpsLbY2W4ety9Zj67MN2IZsI7Yx24RtyjZjm7Mt2JZsK7Y124Zty7Zj27Md2I5sJ7Yz24XtynZju7M92J5sL7Y324fty/Zj+7MD2IHsIHYwO4Qdyg5jh7Mj2JHsKHY0O4Ydy45jx7MT2InsJHYyO4Wdyk5jp7Mz2JnsLHY2O4edy85j57ML2IXsInYxu4Rdyi5jl7Mr2JXsKnY1u4Zdy65j17Mb2I3sJnYzu4Xdym5jt7M72J3sLnY3u4fdy+5j97MH2IPsIfYwe4Q9yh5jj7Mn2JPsKfY0e4Y9y55jz7MX2IvsJfYye4W9yl5jr7M32JvsLfY2e4e9y95j77MP2IfsI/Yx+4R9yj5jn7Mv2JfsK/Y1+4Z9y75j37Mf2I/sJ/Yz+4X9yn5jv7MYi7MES7IUS7MMy7Icy7MCK7ISK7MKq7Iaq7MGa7IWa7MO67Ie67MBG7IRC1jIIjbG/mB/sr/Y3+wf9i/7j43j4rlkXHIuBZeSS8UlcIlcEpeaS8Ol5f7j0nHpuQxcRi4Tl5nLwmXlsnHZuRxcTi4Xl5vLw+Xl8nH5uQJcQa4QV5grwhXlinHFuRJcSa4UV5orw5XlynHluQpcRa4SV5mrwlXlqnHVuRpcTa4WV5urw9Xl6nH1uQZcQ64R15hrwjXlmnHNuRZcS64V15prw7Xl2nHtuQ5cR64T15nrwnXlunHduR5cT64X15vrw/Xl+nH9uQHcQG4QN5gbwg3lhnHDuRHcSG4UN5obw43lxnHjE/93OLgp3FRuGjedm8HN5GZxs7k53FxuHjefW8At5BZxi7kl3FJuGbecW8Gt5FZxq7k13FpuHbee28Bt5DZxm7kt3FZuG7ed28Ht5HZxu7k93F5uH7efO8Ad5A5xh7kj3FHuGHecO8Gd5E5xp7kz3FnuHHeeu8Bd5C5xl7kr3FXuGnedu8Hd5G5xt7k73F3uHnefe8A95B5xj7kn3FPuGfece8G95F5xr7k33FvuHfee+8B95D5xn7kv3FfuG/edwzicIziSoziaYziW4zieEziRkziZUziV0zidMziTszibcziX8zifC7iQizjAQQ5xMe4H95P7xf3m/nB/uX9cHB/PJ+OT8yn4lHwqPoFP5JP41HwaPu3ieD4dn57PwGfkM/GZ+Sx8Vj4bn53Pwefkc/G5+Tx8Xj4fn58vwBfkC/GF+SJ8Ub4YX5wvwZfkS/Gl+TJ8Wb4cX56vwFfkK/GV+Sp8Vb4aX52vwdfka/G1+Tp8Xb4eX59vwDfkG/GN+SZ8U74Z35xvwbfkW/Gt+TZ8W74d357vwHfkO/Gd+S58V74b353vwffke/G9+T58X74f358fwA/kB/GD+SH8UH4YP5yP40fyo/jR/Bh+LD+OH89P4Cfyk/jJ/BR+Kj+Nn87P4Gfys/jZ/Bx+Lj+Pn88v4Bfyi/jF/BJ+Kb+MX86v4Ffyq/jV/Bp+Lb+OX89v4Dfym/jN/BZ+K7+N387v4Hfyu/jd/B5+L7+P388f4A/yh/jD/BH+KH+MP86f4E/yp/jT/Bn+LH+OP89f4C/yl/jL/BX+Kn+Nv87f4G/yt/jb/B3+Ln+Pv88/4B/yj/jH/BP+Kf+Mf86/4F/yr/jX/Bv+Lf+Of89/4D/yn/jP/Bf+K/+N/85jPM4TPMlTPM0zPMtzPM8LvMhLvMwrvMprvM4bvMlbvM07vMt7vM8HfMhHPOAhj/gY/4P/yf/if/N/+L/8Pz5OiBeSCcmFFEJKIZWQICQKSUJqIY2QVvhPSCekFzIIGYVMQmYhi5BVyCZkF3IIOYVcQm4hj5BXyCfkFwoIBYVCQmGhiFBUKCYUF0oIJYVSQmmhjFBWKCeUFyoIFYVKQmWhilBVqCZUF2oINYVaQm2hjlBXqCfUFxoIDYVGQmOhidBUaCY0F1oILYVWQmuhjdBWaCe0FzoIHYVOQmehi9BV6CZ0F3oIPYVeQm+hj9BX6Cf0FwYIA4VBwmBhiDBUGCYMF0YII4VRwmhhjDBWGCeMFyYIE4VJwmRhijBVmCZMF2YIM4VZwmxhjjBXmCfMFxYIC4VFwmJhibBUWCYsF1YIK4VVwmphjbBWWCesFzYIG4VNwmZhi7BV2CZsF3YIO4Vdwm5hj7BX2CfsFw4IB4VDwmHhiHBUOCYcF04IJ4VTwmnhjHBWOCecFy4IF4VLwmXhinBVuCZcF24IN4Vbwm3hjnBXuCfcFx4ID4VHwmPhifBUeCY8F14IL4VXwmvhjfBWeCe8Fz4IH4VPwmfhi/BV+CZ8FzABFwiBFCiBFhiBFTiBFwRBFCRBFhRBFTRBFwzBFCzBFhzBFTzBFwIhFCIBCFBAQkz4IfwUfgm/hT/CX+GfECfGi8nE5GIKMaWYSkwQE8UkMbWYRkwr/iemE9OLGcSMYiYxs5hFzCpmE7OLOcScYi4xt5hHzCvmE/OLBcSCYiGxsFhELCoWE4uLJcSSYimxtFhGLCuWE8uLFcSKYiWxslhFrCpWE6uLNcSaYpJYW6wj1hXrifXFBmJDsZHYWGwiNhWbic3FFmJLsZXYWmwjthXbie3FDmJHsZPYWewidhW7id3FHmJPsZfYW+wj9hX7if3FAeJAcZA4WBwiDhWHicPFEeJIcZQ4WhwjjhXHiePFCeJEcZI4WZwiThWnidPFGeJMcZY4W5wjzhXnifPFBeJCcZG4WFwiLhWXicvFFeJKcZW4WlwjrhXXievFDeJGcZO4WdwibhW3idvFHeJOcZe4W9wj7hX3ifvFA+JB8ZB4WDwiHhWPicfFE+JJ8ZR4WjwjnhXPiefFC+JF8ZJ4WbwiXhWvidfFG+JN8ZZ4W7wj3hXviffFB+JD8ZH4WHwiPhWfic/FF+JL8ZX4WnwjvhXfie/FD+JH8ZP4WfwifhW/id9FTMRFQiRFSqRFRmRFTuRFQRRFSZRFRVRFTdRFQzRFS7RFR3RFT/TFQAzFSAQiFJEYE3+IP8Vf4m/xj/hX/CfGSfFSMim5lEJKKaWSEqREKUlKLaWR0kr/Semk9FIGKaOUScosZZGyStmk7FIOKaeUS8ot5ZHySvmk/FIBqaBUSCosFZGKSsWk4lIJqaRUSiotlZHKSuWk8lIFqaJUSaosVZGqStWk6lINqaZUS6ot1ZHqSvWk+lIDqaHUSGosNZGaSs2k5lILqaXUSmottZHaSu2k9lIHqaPUSeosdZG6St2k7lIPqafUS+ot9ZH6Sv2k/tIAaaA0SBosDZGGSsOk4dIIaaQ0ShotjZHGSuOk8dIEaaI0SZosTZGmStOk6dIMaaY0S5otzZHmSvOk+dICaaG0SFosLZGWSsuk5dIKaaW0SlotrZHWSuuk9dIGaaO0SdosbZG2Stuk7dIOaae0S9ot7ZH2Svuk/dIB6aB0SDosHZGOSsek49IJ6aR0SjotnZHOSuek89IF6aJ0SbosXZGuStek69IN6aZ0S7ot3ZHuSvek+9ID6aH0SHosPZGeSs+k59IL6aX0SnotvZHeSu+k99IH6aP0SfosfZG+St+k7xIm4RIhkRIl0RIjsRIn8ZIgiZIkyZIiqZIm6ZIhmZIl2ZIjuZIn+VIghVIkAQlKSIpJP6Sf0i/pt/RH+iv9k+LkeDmZnFxOIaeUU8kJcqKcJKeW08hp5f/kdHJ6OYOcUc4kZ5azyFnlbHJ2OYecU84l55bzyHnlfHJ+uYBcUC4kF5aLyEXlYnJxuYRcUi4ll5bLyGXlcnJ5uYJcUa4kV5aryFXlanJ1uYZcU64l15bryHXlenJ9uYHcUG4kN5abyE3lZnJzuYXcUm4lt5bbyG3ldnJ7uYPcUe4kd5a7yF3lbnJ3uYfcU+4l95b7yH3lfnJ/eYA8UB4kD5aHyEPlYfJweYQ8Uh4lj5bHyGPlcfJ4eYI8UZ4kT5anyFPlafJ0eYY8U54lz5bnyHPlefJ8eYG8UF4kL5aXyEvlZfJyeYW8Ul4lr5bXyGvldfJ6eYO8Ud4kb5a3yFvlbfJ2eYe8U94l75b3yHvlffJ++YB8UD4kH5aPyEflY/Jx+YR8Uj4ln5bPyGflc/J5+YJ8Ub4kX5avyFfla/J1+YZ8U74l35bvyHfle/J9+YH8UH4kP5afyE/lZ/Jz+YX8Un4lv5bfyG/ld/J7+YP8Uf4kf5a/yF/lb/J3GZNxmZBJmZJpmZFZmZN5WZBFWZJlWZFVWZN12ZBN2ZJt2ZFd2ZN9OZBD+d98IEMZyTH5h/xT/iX/lv/If+V/cpwSryRTkisplJRKKiVBSVSSlNRKGiWt8p+STkmvZFAyKpmUzEoWJavyPe3/x3QuJbeSR8mr5FPyKwWUgkohpbBSRCmqFFOKKyWUkkoppbRSRimrlFPKKxWUikolpbJSRamqVFOqKzWUmkotpbZSR6mr1FPqKw2UhkojpbHSRGmqNFOaKy2UlkorpbXSRmmrtFPaKx2UjkonpbPSRemqdFO6Kz2UnkovpbfSR+mr9FP6KwOUgcogZbAyRBmqDFOGKyOUkcooZbQyRhmrjFPGKxOUicokZbIyRZmqTFOmKzOUmcosZbYyR5mrzFPmKwuUhcoiZbGyRFmqLFOWKyuUlcoqZbWyRlmrrFPWKxuUjcomZbOyRdmqbFO2KzuUncouZbeyR9mr7FP2KweUg8oh5bByRDmqHFOOKyeUk8op5bRyRjmrnFPOKxeUi8ol5bJyRbmqXFOuKzeUm8ot5bZyR7mr3FPuKw+Uh8oj5bHyRHmqPFOeKy+Ul8or5bXyRnmrvFPeKx+Uj8on5bPyRfmqfFO+K5iCK4RCKpRCK4zCKpzCK4IiKpIiK4qiKpqiK4ZiKpZiK47iKp7iK4ESKpECFKggJab8UH4qv5Tfyh/lr/JPiVPj1WRqcjWFmlJNpSaoiWqSmlpNo6ZV/1PTqenVDGpGNZOaWc2iZlWzqdnVHGpONZeaW82j5lXzqfnVAmpBtZBaWC2iFlWLqcXVEmpJtZRaWi2jllXLqeXVCmpFtZJaWa2iVlWrqdXVGmpNtZZaW62j1lXrqfXVBmpDtZHaWG2iNlWbqc3VFmpLtZXaWm2jtlXbqe3VDmpHtZPaWe2idlW7qd3VHmpPtZfaW+2j9lX7qf3VAepAdZA6WB2iDlWHqcPVEepIdZQ6Wh2jjlXHqePVCepEdZI6WZ2iTlWnqdPVGepMdZY6W52jzlXnqfPVBepCdZG6WF2iLlWXqcvVFepKdZW6Wl2jrlXXqevVDepGdZO6Wd2iblW3qfG/d6g71V3qbnWPulfdp+5XD6gH1UPqYfWIelQ9ph5XT6gn1VPqafWMelY9p55XL6gX1UvqZfWKelW9pl5Xb6g31VvqbfWOele9p95XH6gP1UfqY/WJ+lR9pj5XX6gv1Vfqa/WN+lZ9p75XP6gf1U/qZ/WL+lX9pn5XMRVXCZVUKZVWGZVVOZVXBVVUJVVWFVVVNVVXDdVULdVWHdVVPdVXAzVUIxWoUEVqTP2h/lR/qb/VP+pf9Z8ap8VrybTkWgotpZZKS9AStSQttZZGS6v9p6XT0msZtIxaJi2zlkXLqmXTsms5tJxaLi23lkfLq+XT8msFtIJaIa2wVkQrqhXTimsltJJaKa20VkYrq5XTymsVtIpaJa2yVkWrqlXTqms1tJpaLa22Vkerq9XT6msNtIZaI62x1kRrqjXTmmsttJZaK6211kZrq7XT2msdtI5aJ62z1kXrqnXTums9tJ5aL6231kfrq/XT+msDtIHaIG2wNkQbqg3ThmsjtJHaKG20NkYbq43TxmsTtInaJG2yNkWbqk3TpmsztJnaLG22Nkebq83T5msLtIXaIm2xtkRbqi3TlmsrtJXaKm21tkZbq63T1msbtI3aJm2ztkXbqm3Ttms7tJ3aLm23tkfbq+3T9msHtIPaIe2wdkQ7qh3TjmsntJPaKe20dkY7q53TzmsXtIvaJe2ydkW7ql3Trms3tJvaLe22dke7q93T7msPtIfaI+2x9kR7qj3TnmsvtJfaK+219kZ7q73T3msftI/aJ+2z9kX7qn3TvmuYhmuERmqURmuMxmqcxmuCJmqSJmuKpmqapmuGZmqWZmuO5mqe5muBFmqRBjSoIS2m/dB+ar+039of7W9cXHyc3kBPpifXU+gp9VR6gp6oJ+mp9TR6Wv0/PZ2eXs+gZ9Qz6Zn1LHpWPZueXc+h59Rz6bn1PHpePZ+eXy+gF9QL6YX1InpRvZheXC+hl9RL6aX1MnpZvZxeXq+gV9Qr6ZX1KnpVvZpeXa+h19Rr6bX1OnpdvZ5eX2+gN9Qb6Y31JnpTvZneXG+ht9Rb6a31NnpbvZ3eXu+gd9Q76Z31LnpXvZveXe+h99R76b31PnpfvZ/eXx+gD9QH6YP1IfpQfZg+XB+hj9RH6aP1MfpYfZw+Xp+gT9Qn6ZP1KfpUfZo+XZ+hz9Rn6bP1OfpcfZ4+X1+gL9QX6Yv1JfpSfZm+XF+hr9RX6av1NfpafZ2+Xt+gb9Q36Zv1LfpWfZu+Xd+h79R36bv1PfpefZ++Xz+gH9QP6Yf1I/pR/Zh+XD+hn9RP6af1M/pZ/Zx+Xr+gX9Qv6Zf1K/pV/Zp+Xb+h39Rv6bf1O/pd/Z5+X3+gP9Qf6Y/1J/pT/Zn+XH+hv9Rf6a/1N/pb/Z3+Xv+gf9Q/6Z/1L/pX/Zv+Xcd0XCd0Uqd0Wmd0Vud0Xhd0UZd0WVd0Vdd0XTd0U7d0W3d0V/d0Xw/0UI90oEMd6TH9h/5T/6X/1v/of/V/epwRbyQzkhspjJRGKiPBSDSSjNRGGiOt8Z+RzkhvZDAyGpmMzEYWI6uRzchu5DByGrmM3EYeI6+Rz8hvFDAKGoWMwkYRo6hRzChulDBKGqWM0kYZo6xRzihvVDAqGpWMykYVo6pRzahu1DBqGrWM2kYdo65Rz6hvNDAaGo2MxkYTo6nRzGhutDBaGq2M1kYbo63RzmhvdDA6Gp2MzkYXo6vRzehu9DB6Gr2M3kYfo6/Rz+hvDDAGGoOMwcYQY6gxzBhujDBGGqOM0cYYY6wxzhhvTDAmGpOMycYUY6oxzZhuzDBmGrOM2cYcY64xz5hvLDAWGouMxcYSY6mxzFhurDBWGquM1cYaY62xzlhvbDA2GpuMzcYWY6uxzdhu7DB2GruM3cYeY6+xz9hvHDAOGoeMw8YR46hxzDhunDBOGqeM08YZ46xxzjhvXDAuGpeMy8YV46pxzbhu3DBuGreM28Yd465xz7hvPDAeGo+Mx8YT46nxzHhuvDBeGq+M18Yb463xznhvfDA+Gp+Mz8YX46vxzfhuYAZuEAZpUAZtMAZrcAZvCIZoSIZsKIZqaIZuGIZpWIZtOIZreIZvBEZoRAYwoIGMmPHD+Gn8Mn4bf4y/xj8jzow3k5nJzRRmSjOVmWAmmklmajONmdb8z0xnpjczmBnNTGZmM4uZ1cxmZjdzmDnNXGZuM4+Z18xn5jcLmAXNQmZhs4hZ1CxmFjdLmCXNUmZps4xZ1ixnljcrmBXNSmZls4pZ1axmVjdrmDXNWmZts45Z16xn1jcbmA3NRmZjs4nZ1GxmNjdbmC3NVmZrs43Z1mxntjc7mB3NTmZns4vZ1exmdjd7mD3NXmZvs4/Z1+xn9jcHmAPNQeZgc4g51BxmDjdHmCPNUeZoc4w51hxnjjcnmBPNSeZkMy5uqjnNnG7OMGeas8zZ5hxzrjnPnG8uMBeai8zF5hJzqbnMXG6uMFeaq8zV5hpzrbnOXG9uMDeam8zN5hZzq7nN3G7uMHeau8zd5h5zr7nP3G8eMA+ah8zD5hHzqHnMPG6eME+ap8zT5hnzrHnOPG9eMC+al8zL5hXzqnnNvG7eMG+at8zb5h3zrnnPvG8+MB+aj8zH5hPzqfnMfG6+MF+ar8zX5hvzrfnOfG9+MD+an8zP5hfzq/nN/G5iJm4SJmlSJm0yJmtyJm8KpmhKpmwqpmpqpm4apmlapm06pmt6pm8GZmhGJjChicyY+cP8af4yf5t/zL/mPzPOireSWcmtFFZKK5WVYCVaSVZqK42V1vrPSmeltzJYGa1MVmYri5XVymZlt3JYOa1cVm4rj5XXymfltwpYBa1CVmGriFXUKmYVt0pYJa1SVmmrjFXWKmeVtypYFa1KVmWrilXVqmZVt2pYNa1aVm2rjlXXqmfVtxpYDa1GVmOridXUamY1t1pYLa1WVmurjdXWame1tzpYHa1OVmeri9XV6mZ1t3pYPa1eVm+rj9XX6mf1twZYA61B1mBriDXUGmYNt0ZYI61R1mhrjDXWGmeNtyZYE61J1mRrijXVmmZNt2ZYM61Z1mxrjjXXmmfNtxZYC61F1mJribXUWmYtt1ZYK61V1mprjbXWWmettzZYG61N1mZri7XV2mZtt3ZYO61d1m5rj7XX2mfttw5YB61D1mHriHXUOmYdt05YJ61T1mnrjHXWOmedty5YF61L1mXrinXVumZdt25YN61b1m3rjnXXumfdtx5YD61H1mPrifXUemY9t15YL61X1mvrjfXWeme9tz5YH61P1mfri/XV+mZ9tzALtwiLtCiLthiLtTiLtwRLtCRLthRLtTRLtwzLtCzLthzLtTzLtwIrtCILWNBCVsz6Yf20flm/rT/WX+ufFWfH28ns5HYKO6Wdyk6wE+0kO7Wdxk5r/2ens9PbGeyMdiY7s53Fzmpns7PbOeycdi47t53Hzmvns/PbBeyCdiG7sF3ELmoXs4vbJeySdim7tF3GLmuXs8vbFeyKdiW7sl3FrmpXs6vbNeyadi27tl3HrmvXs+vbDeyGdiO7sd3Ebmo3s5vbLeyWdiu7td3Gbmu3s9vbHeyOdie7s93F7mp3s7vbPeyedi+7t93H7mv3s/vbA+yB9iB7sD3EHmoPs4fbI+yR9ih7tD3GHmuPs8fbE+yJ9iR7sj3FnmpPs6fbM+yZ9ix7tj3HnmvPs+fbC+yF9iJ7sb3EXmovs5fbK+yV9ip7tb3GXmuvs9fbG+yN9iZ7s73F3mpvs7fbO+yd9i57t73H3mvvs/fbB+yD9iH7sH3EPmofs4/bJ+yT9in7tH3GPmufs8/bF+yL9iX7sn3Fvmpfs6/bN+yb9i37tn3Hvmvfs+/bD+yH9iP7sf3Efmo/s5/bL+yX9iv7tf3Gfmu/s9/bH+yP9if7s/3F/mp/s7/bmI3bhE3alE3bjM3anM3bgi3aki3biq3amq3bhm3alm3bju3anu3bgR3akQ1saCM7Zv+wf9q/7N/2H/uv/c+Oc+KdZE5yJ4WT0knlJDiJTpKT2knjpHX+c9I56Z0MTkYnk5PZyeJkdbI52Z0cTk4nl5PbyePkdfI5+Z0CTkGnkFPYKeIUdYo5xZ0STkmnlFPaKeOUdco55Z0KTkWnklPZqeJUdao51Z0aTk2nllPbqePUdeo59Z0GTkOnkdPYaeI0dZo5zZ0WTkunldPaaeO0ddo57Z0OTkenk9PZ6eJ0dbo53Z0eTk+nl/MvoY/T1+nn9HcGOAOdQc5gZ4gz1BnmDHdGOCOdUc5oZ4wz1hnnjHcmOBOdSc5kZ4oz1ZnmTHdmODOdWc5sZ44z15nnzHcWOAudRc5iZ4mz1FnmLHdWOCudVc5qZ42z1lnnrHc2OBudTc5mZ4uz1dnmbHd2ODudXc5uZ4+z19nn7HcOOAedQ85h54hz1DnmHHdOOCedU85p54xz1jnnnHcuOBedS85l54pz1bnmXHduODedW85t545z17nn3HceOA+dR85j54nz1HnmPHdeOC+dV85r543z1nnnvHc+OB+dT85n54vz1fnmfHcwB3cIh3Qoh3YYh3U4h3cER3QkR3YUR3U0R3cMx3Qsx3Ycx3U8x3cCJ3QiBzjQQU7M+eH8dH45v50/zl/nnxPnxrvJ3ORuCjelm8pNcBPdJDe1m8ZN6/7npnPTuxncjG4mN7Obxc3qZnOzuzncnG4uN7ebx83r5nPzuwXcgm4ht7BbxC3qFnOLuyXckm4pt7Rbxi3rlnPLuxXcim4lt7Jbxa3qVnOruzXcmm4tt7Zbx63r1nPruw3chm4jt7HbxG3qNnObuy3clm4rt7Xbxm3rtnPbux3cjm4nt7Pbxe3qdnO7uz3cnm4vt7fbx+3r9nP7uwPcge4gd7A7xB3qDnOHuyPcke4od7Q7xh3rjnPHuxPcie4kd7I7xZ3qTnOnuzPcme4sd7Y7x53rznPnuwvche4id7G7xF3qLnOXuyvcle4qd7W7xl3rrnPXuxvcje4md7O7xd3qbnO3uzvcne4ud7e7x93r7nP3uwfcg+4h97B7xD3qHnOPuyfck+4p97R7xj3rnnPPuxfci+4l97J7xb3qXnOvuzfcm+4t97Z7x73r3nPvuw/ch+4j97H7xH3qPnOfuy/cl+4r97X7xn3rvnPfux/cj+4n97P7xf3qfnO/u5iLu4RLupRLu4zLupzLu4IrupIru4qrupqru4ZrupZru47rup7ru4EbupELXOgiN+b+cH+6v9zf7h/3r/vPjfPivWReci+Fl9JL5SV4iV6Sl9orFD8mc1xcXFx6L4OX0cvkZfayeFm9bF52L4eX08vl5fbyeHm9fF5+r4BX0CvkFfaKeEW9Yl5xr4RX0ivllfbKeGW9cl55r4JX0avkVfaqeFW9al51r4ZX06vl1fbqeHW9el59r4HX0GvkNfaaeE29Zl5zr4XX0mvltfbaeG29dl57r4PX0evkdfa6eF29bl53r4fX0+vl9fb6eH29fl5/b4A30BvkDfaGeEO9Yd5wb4Q30hvljfbGeGO9cd54b4I30ZvkTfameFO9ad50b4Y305vlzfbmeHO9ed58b4G30FvkLfaWeEu9Zd5yb4W30lvlrfbWeGu9dd56b4O30dvkbfa2eFu9bd52b4e309vl7fb2eHu9fd5+74B30DvkHfaOeEe9Y95x74R30jvlnfbOeGe9c95574J30bvkXfaueFe9a95174Z307vl3fbueHe9e95974H30HvkPfaeeE+9Z95z74X30nvlvfbeeG+9d95774P30fvkffa+eF+9b953D/Nwj/BIj/Joj/FYj/N4T/BET/JkT/FUT/N0z/BMz/Jsz/Fcz/N8L/BCL/KABz3kxbwf3k/vl/fb++P99f55cX68n8xP7qfwU/qp/AQ/0U/yU/tp/LT+f346P72fwc/oZ/Iz+1n8rH42P7ufw8/p5/Jz+3n8vH4+P79fwC/oF/IL+0X8on4xv7hfwi/pl/JL+2X8sn45v7xfwa/oV/Ir+1X8qn41v7pfw6/p1/Jr+3X8un49v77fwG/oN/Ib+038pn4zv7nfwm/pt/Jb+238tn47v73fwe/od/I7+138rn43v7vfw+/p9/J7+338vn4/v78/wB/oD/IH+0P8of4wf7g/wh/pj/JH+2P8sf44f7w/wZ/oT/In+1P8qf40f7o/w5/pz/Jn+3P8uf48f76/wF/oL/IX+0v8pf4yf7m/wl/pr/JX+2v8tf46f72/wd/ob/I3+1v8rf42f7u/w9/p7/J3+3v8vf4+f79/wD/oH/IP+0f8o/4x/7h/wj/pn/JP+2f8s/45/7x/wb/oX/Iv+1f8q/41/7p/w7/p3/Jv+3f8u/49/77/wH/oP/If+0/8p/4z/7n/wn/pv/Jf+2/8t/47/73/wf/of/I/+1/8r/43/7uP+bhP+KRP+bTP+KzP+bwv+KIv+bKv+Kqv+bpv+KZv+bbv+K7v+b4f+KEf+cCHPvJj/g//p//L/+3/8f/6//y4ID5IFiQPUgQpg4d3E4LEIClIHaQJ0gb/BemC9EGGIGOQKcgcZAmyBtmC7EGOIGeQK8gd5AnyBvmC/EGBoGBQKCgcFAmKBsWC4kGJoGRQKigdlAnKBuWC8kGFoGJQKagcVAmqBtWC6kGNoGZQK6gd1AnqBvWC+kGDoGHQKGgcNAmaBs2C5kGLoGXQKmgdtAnaBu2C9kGHoGPQKegcdAm6Bt2C7kGPoGfQK+gd9An6Bv2C/sGAYGAwKBgcDAmGBsOC4UHS/8DPmGBsMC4YH0wIJgaTgsnBlGBqMC2YHswIZgazgtnBnGBuMC+YHywIFgaLgsXBkmBpsCxYHqwIVgargtXBmmBtsC5YH2wINgabgs3BlmBrsC3YHuwIdga7gt3BnmBvsC/YHxwIDgaHgsPBkeBocCw4HpwITgangtPBmeBscC44H1wILgaXgsvBleBqcC24HtwIbga3gtvBneBucC+4HzwIHgaPgsfBk+Bp8Cx4HrwIXgavgtfBm+Bt8C54H3wIPgafgs/Bl+Br8C34HmABHhABGVABHTABG3ABHwiBGEiBHCiBGmiBHhiBGViBHTiBG3iBHwRBGEQBCGCAgljwI/gZ/Ap+B3+Cv8G/IC6MD5OFycMUYcowVZgQJoZJYeowTZg2/C9MF6YPM4QZw0xh5jBLmDXMFmYPc4Q5w1xh7jBPmDfMF+YPC4QFw0Jh4bBIWDQsFhYPS4Qlw1Jh6bBMWDYsF5YPK4QVw0ph5bBKWDWsFlYPa4Q1w1ph7bBOWDesF9YPG4QNw0Zh47BJ2DRsFjYPW4Qtw1Zh67BN2DZsF7YPO4Qdw05h57BL2DXsFnYPe4Q9w15h77BP2DfsF/YPB4QDw0Hh4HBIODQcFg4PR4Qjw1Hh6HBMODYcF44PJ4QTw0nh5HBKODWcFk4PZ4Qzw1nh7HBOODecF84PF4QLw0Xh4nBJuDRcFi4PV4Qrw1Xh6nBNuDZcF64PN4Qbw03h5nBLuDXcFm4Pd4Q7w13h7nBPuDfcF+4PD4QHw0Ph4fBIeDQ8Fh4PT4Qnw1Ph6fBMeDY8F54PL4QXw0vh5fBKeDW8Fl4Pb4Q3w1vh7fBOeDe8F94PH4QPw0fh4/BJ+DR8Fj4PX4Qvw1fh6/BN+DZ8F74PP4Qfw0/h5/BL+DX8Fn4PsRAPiZAMqZAOmZANuZAPhVAMpVAOlVANtVAPjdAMrdAOndANvdAPgzAMoxCEMERhLPwR/gx/hb/DP+Hf8F8YF8VHyaLkUYooZZQqSogSo6QodZQmShv9F6WL0kcZooxRpihzlCXKGmWLskc5opxRrih3lCfKG+WL8kcFooJRoahwVCQqGhWLikclopJRqah0VCYqG5WLykcVoopRpahyVCWqGlWLqkc1oppRrah2VCeqG9WL6kcNooZRo6hx1CRqGjWLmkctopZRq6h11CZqG7WL2kcdoo5Rp6hz1CXqGnWLukc9op5Rr6h31CfqG/WL+kcDooHRoGhwNCQaGg2LhkcjopHRqGh0NCYaG42LxkcToonRpGhyNCWaGk2LpkczopnRrGh2NCeaG82L5kcLooXRomhxtCRaGi2LlkcropXRqmh1tCZaG62L1kcboo3RpmhztCXaGm2Ltkc7op3Rrmh3tCfaG+2L9kcHooPRoehwdCQ6Gh2LjkcnopPRqeh0dCY6G52LzkcXoovRpehydCW6Gl2Lrkc3opvRreh2dCe6G92L7kcPoofRo+hx9CR6Gj2LnkcvopfRq+h19CZ6G72L3kcfoo/Rp/i4uLjoa/Qt+h5hER4RERlRER0xERtxER8JkRhJkRwpkRppkR4ZkRlZkR05kRt5kR8FURhFEYhghKJY9CP6Gf2Kfkd/or/RvygOxINkIDlIAVKCVCABJIIkkBqkAWnBfyAdSA8ygIwgE8gMsoCsIBvIDnKAnCAXyA3ygLwgH8gPCoCCoBAoDIqAoqAYKA5KgJKgFCgNyoCyoBwoDyqAiqASqAyqgKqgGqgOaoCaoBaoDeqAuqAeqA8agIagEWgMmoCmoBloDlqAlqAVaA3agLagHWgPOoCOoBPoDLqArqAb6A56gJ6gF+gN+oC+oB/oDwaAgWAQGAyGgKFgGBgORoCRYBQYDcaAsWAcGA8mgIlgEpgMpoCpYBqYDmaAmWAWmA3mgLlgHpgPFoCFYBFYDJaApWAZWA5WgJVgFVgN1oC1YB1YDzaAjWAT2Ay2gK1gG9gOdoCdYBfYDfaAvWAf2A8OgIPgEDgMjoCj4Bg4Dk6Ak+AUOA3OgLPgHDgPLoCL4BK4DK6Aq+AauA5ugJvgFrgN7oC74B64Dx6Ah+AReAyegKfgGXgOXoCX4BV4Dd6At+AdeA8+gI/gE/gMvoCv4Bv4DjCAAwKQgAI0YAALOMADAYhAAjJQgAo0oAMDmMACNnCACzzggwCEIAIAQIBADMSBn+AX+A3+gL/gH4g7UwUmg8lhCpgSpoIJMBEmwdQwDUwL/4PpYHqYAWaEmWBmmAVmhdlgdpgD5oS5YG6YB+aF+WB+WAAWhIVgYVgEFoXFYHFYApaEpWBpWAaWheVgeVgBVoSVYGVYBVaF1WB1WAPWhLVgbVgH1oX1YH3YADaEjWBj2AQ2hc1gc9gCtoStYGvYBraF7WB72AF2hJ1gZ9gFdoXdYHfYA/aEvWBv2Af2hf1gfzgADoSD4GA4BA6Fw+BwOAKOhKPgaDgGjoXj4Hg4AU6Ek+BkOAVOhdPgdDgDzoSz4Gw4B86F8+B8uAAuhIvgYrgELoXL4HK4Aq6Eq+BquAauhevgergBboSb4Ga4BW6F2+B2uAPuhLvgbrgH7oX74H54AB6Eh+BheAQehcfgcXgCnoSn4Gl4Bp6F5+B5eAFehJfgZXgFXoXX4HV4A96Et+BteAfehffgffgAPoSP4GP4BD6Fz+Bz+AK+hK/ga/gGvoXv4Hv4AX6En+Bn+AV+hd/gd4hBHBKQhBSkIQNZyEEeClCEEpShAlWoQR0a0IQWtKEDXehBHwYwhBEEEEIEY/AH/Al/wd/wD/wL/8E4FI+SoeQoBUqJUqEElIiSUGqUBqVF/6F0KD3KgDKiTCgzyoKyomwoO8qBcqJcKDfKg/KifCg/KoAKokKoMCqCiqJiqDgqgUqiUqg0KoPKonKoPKqAKqJKqDKqgqqiaqg6qoFqolqoNqqD6qJ6qD5qgBqiRqgxaoKaomaoOWqBWqJWqDVqg9qidqg96oA6ok6oM+qCuqJuqDvqgXqiXqg36oP6on6oPxqABqJBaDAagoaiYWg4GoFGolFoNBqDxqJxaDyagCaiSWgymoKmogQ0Hc1AM9EsNBvNQXPRPDQfLUAL0SK0GC1BS9EytBytQCvRKrQarUFr0Tq0Hm1AG9EmtBltQVvRNrQd7UA70S60G+1Be9E+tB8dQAfRIXQYHUFH0TF0HJ1AJ9EpdBqdQWfROXQeXUAX0SV0GV1BV9E1dB3dQDfRLXQb3UF30T10Hz1AD9Ej9Bg9QU/RM/QcvUAv0Sv0Gr1Bb9E79B59QB/RJ/QZfUFf0Tf0HWEIRwQiEYVoxCAWcYhHAhKRhGSkIBVpSEcGMpGFbOQgF3nIRwEKUYQAggihGPqBfqJf6Df6g/6ifyguFh9LFkseSxFLGUsVS4glxpJiqWNpYmlj/8XSxdLHMsQyxjLFMseyxLLGssWyx3LEcsZyxXLH8sTyxvLF8scKxArGCsUKx4rEisaKxYrHSsRKxkrFSsfKxMrGysXKxyrEKsYqxSrHqsSqxqrFqsdqxGrGasVqx+rE6sbqxerHGsQaxhrFGseaxJrGmsWax1rEWsZaxVrH2sTaxtrF2sc6xDrGOsU6x7rEusa6xbrHesR6xnrFesf6xPrG+sX6x/6PnbuAtqu694a9I7gUKKVAhQOlLTWsVHAqUKBAKVZBAwQIBAIJFjS4u7u7u7u7u7u7renfaBp4C22+MXrfd9xyb55njGTOM9fac809f0nG+a+ss1frBnWrd2t0a3aDu7W6tbt1uiHdut163dBu/W6Dbli3YbdRN7wb0W3cbdJt2m3Wbd6N7Lbotuy26rbutum27UZ123Xbdzt0O3Y7dTt3u3S7drt1u3d7dHt2e3V7d/t0+3b7dft3B3QHdgd1B3eHdId2h3WHd0d0R3ZHdUd3x3THdsd1x3cndCd2J3Und6d0p3andad3Z3Rndmd1Z3fndOd253Xndxd0F3YXdRd3l3SXdpd1l7cB3ZXdVd3V3TXdtd113fXdDd2N3U3dzd0t3a3dbd3t3R3dnd1d3d3dPd293X3d/d0D3YPdQ93D3SPdo91j3ePdE92T3VPd090z3bPdc93z3Qvdi91LvV5vVPdq91r3evdG92b3Vvd29073bvde9373Qfdh91H3cfdJ13Whi13qcle62rWuF/qF/mFAGBjGC+OHCcKEYaIwcZgkTBomC5OHr4QpwpRhqvDVMHX4WpgmfD1MG6YL04dvhG+Gb4VvhxlCX5gxzBS+E2YO3w3fC98Ps4QfhB+GH4Ufh5+EWcNsYfYwR5gz/DTMFX4Wfh5+EX4Z5g7zhHnDfGH+sEBYMCwUfhV+HX4TfhsWDouE34VFw2Jh8fD7sERYMiwV/hCWDn8My4Rlw3Jh+bBC+FP4c/hL+GtYMawUVg6rhFXDamFQWD2sEdYMg8NaYe2wThgS1g3rhaFh/bBBGBY2DBuF4WFE2DhsEjYNm4XNw8iwRdgybBW2DtuEbcOosF3YPuwQdgw7hZ3DLmHXsFvYPewR9gx7hb3DPmHfsF/YPxwQDgwHhYPDIeHQcFg4PBwRjgxHhaPDMeHYcFw4PpwQTgwnhZPDKeHUcFo4PZwRzgxnhbPDOeHccF44P1wQLgwXhYvDJeHScFm4PFwRrgxXhavDNeHacF24PtwQbgw3hZvDLeHWcFu4PdwR7gx3hbvDPeHecF+4PzwQHgwPhYfDI+HR8Fh4PDwRngxPhafDM+HZ8Fx4PrwQXgwvhZfDK+HV8Fp4PbwR3gxvhbfDO+Hd8F54P3wQPgwfhY/DJ6ELIcSQQg4l1NBCL/aL/eOAODCOF8ePE8QJ40Rx4jhJnDROFiePX4lTxCnjVPGrcer4tThN/HqcNk4Xp4/fiN+M34rfjjPEvjhjnCl+J84cvxu/F78fZ4k/iD+MP4o/jj+Js8bZ4uxxjjhn/GmcK/4s/jz+Iv4yzh3nifPG+eL8cYG4YFwo/ir+Ov4m/jYuHBeJv4uLxsXi4vH3cYm4ZFwq/iEuHf8Yl4nLxuXi8nGF+Kf45/iX+Ne4YlwprhxXiavG1eKguHpcI64ZB8e14tpxnTgkrhvXi0Pj+nGDOCxuGDeKw+OIuHHcJG4aN4ubx5Fxi7hl3OrTj0qO28Xt4w5xx7hT3DnuEneNu8Xd4x5xz7hX3DvuE/eN+8X94wHxwHhQPDgeEg+Nh8XD4xHxyHhUPDoeE4+Nx8Xj4wnxxHhSPDmeEk+Np8XT4xnxzHhWPDueE8+N58Xz4wXxwnhRvDheEi+Nl8XL4xXxynhVvDpeE6+N18Xr4w3xxnhTvDneEm+Nt8Xb4x3xznhXvDveE++N98X74wPxwfhQfDg+Eh+Nj8XH4xPxyfhUfDo+E5+Nz8Xn4wvxxfhSfDm+El+Nr8XX4xvxzfhWfDu+E9+N78X34wfxw/hR/Dh+ErsYYowp5lhijS32Ur/UPw1IA9N4afw0QZowTZQmTpOkSdNkafL0lTRFmjJNlb6apk5fS9Okr6dp03Rp+vSN9M30rfTtNEPqSzOmmdJ30szpu+l76ftplvSD9MP0o/Tj9JM0a5otzZ7mSHOmn6a50s/Sz9Mv0i/T3GmeNG+aL82fFkgLpoXSr9Kv02/Sb9PCaZH0u7RoWiwtnn6flkhLpqXSH9LS6Y9pmbRsWi4tn1ZIf0p/Tn9Jf00rppXSymmVtGpaLQ1Kq6c10pppcForrZ3WSUPSumm9NDStnzZIw9KGaaM0PI1IG6dN0qbpb4GPTFukLdNWaeu0Tdo2jUrbpe3TDmnHtFPaOe2Sdk27pd3THmnPtFfaO+2T9k37pf3TAenAdFA6OB2SDk2HpcPTEenIdFQ6Oh2Tjk3HpePTCenEdFI6OZ2STk2npdPTGenMdFY6O52Tzk3npfPTBenCdFG6OF2SLk2XpcvTFenKdFW6Ol2Trk3XpevTDenGdFO6Od2Sbk23pdvTHenOdFe6O92T7k33pfvTA+nB9FB6OD2SHk2PpcfTE+nJ9FR6Oj2Tnk3PpefTC+nF9FJ6Ob2SXk2vpdfTG+nN9FZ6O72T3k3vpffTB+nD9FH6OH2SuhRSTCnlVFJNLfVyv9w/D8gD83h5/DxBnjBPlCfOk+RJ82R58vyVPEWeMk+Vv5qnzl/L0+Sv52nzdHn6/I38zfyt/O08Q+7LM+aZ8nfyzPm7+Xv5+3mW/IP8w/yj/OP8kzxrni3PnufIc+af5rnyz/LP8y/yL/PceZ48b54vz58XyAvmhfKv8q/zb/Jv88J5kfy7vGheLC+ef5+XyEvmpfIf8tL5j3mZvGxeLi+fV8h/yn/Of8l/zSvmlfLKeZW8al4tD8qr5zXymnlwXiuvndfJQ/K6eb08NK+fN8jD8oZ5ozw8j8gb503ypnmzvHkembfIW+at8tZ5m7xtHpW3y9vnHfKOeae8c94l75p3y7vnPfKeea+8d94n75v3y/vnA/KB+aB8cD4kH5oPy4fnI/KR+ah8dD4mH5uPy8fnE/KJ+aR8cj4ln5pPy6fnM/KZ+ax8dj4nn5vPy+fnC/KF+aJ8cb4kX5ovy5fnK/KV+ap8db4mX5uvy9fnG/KN+aZ8c74l35pvy7fnO/Kd+a58d74n35vvy/fnB/KD+aH8cH4kP5ofy4/nJ/KT+an8dH4mP5ufy8/nF/KL+aX8cn4lv5pfy6/nN/Kb+a38dn4nv5vfy+/nD/KH+aP8cf4kdznkmFPOueSaW+6VfqV/GVAGlvHK+GWCMmGZqExcJimTlsnK5OUrZYoyZZmqfLVM3etfpilfL9OW6cr05Rvlm+Vb5dtlhtJXZiwzle+Umct3y/fK98ss5Qflh+VH5cflJ2XWMluZvcxR5iw/LXOVn5Wfl1+UX5a5yzxl3jJfmb8sUBYsC5VflV+X35TfloXLIuV3ZdGyWFm8/L4sUZYsS5U/lKXLH8syZdmyXFm+rFD+VP5c/lL+WlYsK5WVyypl1bJaGVRWL2uUNcvgslZZu6xThpR1y3plaFm/bFCGlQ3LRmV4GVE2LpsM2LRsVjYvI8sWZcuyVdm6bFO2LaPKdmX7skPZsexUdi67lF3LbmX3skfZs+xV9i77lH3LfmX/ckA5sBxUDi6HlEPLYeXwckQ5shxVji7HlGPLceX4ckI5sZxUTi6nlFPLaeX0ckY5s5xVzi7nlHPLeeX8ckG5sFxULi6XlEvLZeXyckW5slxVri7XlGvLdeX6ckO5sdxUbi63lFvLbeX2cke5s9xV7i73lHvLfeX+8kB5sDxUHi6PlEfLY+Xx8kR5sjxVni7PlGfLc+X58kJ5sbxUXi6vlFfLa+X18kZ5s7xV3i7vlHfLe+X98kH5sHxUPi6flK6EEksquZRSSyu92q/2rwPqwDpeHb9OUCesE9WJ6yR10jpZnbx+pU5x45R1qvrVOnX9Wp2mfr1OW6er09dv1G/Wb9Vv1xlqX52xzlS/U2eu363fq9+vs9Qf1B/WH9Uf15/UWetsdfY6R52z/rTOVX9Wf15/UX9Z567z1HnrfHX+ukBdsC5Uf1V/XX9Tf1sXrovU39VF62J18fr7ukRdsi5V/1CXrn+sy9Rl63J1+bpC/VP9c/1L/Wtdsa5UV66r1FXranVQXb2uUdesg+tade26Th1S163r1aF1/bpBHVY3rBvV4XVE3bhuUjetm9XN68i6Rd2yblW3rtvUbeuoul3dvu5Qd6w71Z3rLnXXulvdve5R96x71b3rPnXful/dvx5QD6wH1YPrIfXQelg9vB5Rj6xH1aPrMfXYelw9vp5QT6wn1ZPrKfXUelo9vZ5Rz6xn1bPrOfXcel49v15QL6wX1YvrJfXSelm9vF5Rr6xX1avrNfXael29vt5Qb6w31ZvrLfXWelu9vd5R76x31bvrPfXeel+9vz5QH6wP1YfrI/XR+lh9vD5Rn6xP1afrM/XZ+lx9vr5QX6wv1ZfrK/XV+lp9vb5R36xv1bfrO/Xd+l59v35QP6wf1Y/rJ7Wrocaaaq6l1tpqrx0wW683oA1s47Xx2wRtwjZRm7hN0iZtk7XJ21faFG3KNlX7apu6fa1N077epm3TtenbN9o327fat9sMra/N2GZq32kzt++277Xvt1naD9oP24/aj9tP2qxttjZ7m6PN2X7a5mo/az9vv2i/bHO3edq8bb42f1ugLdgW+i+9fsW2Ulu5rdJWbau1QW31tkZbsw1ua7W12zptSFu3rdeGtvXbBm1Y27Bt1Ia3EW3jtknbtG3WNm8j2xZty7ZV27pt07Zto9p2bfu2Q9ux7dR2bru0Xdtubfe2R9uz7dX2bvu0fdt+bf92QDuwHdQOboe0Q9th7fB2RDuyHdWObse0Y9tx7fh2QjuxndRObqe0U9tp7fR2RjuzndXObue0c9t57fx2QbuwXdQubpe0S9tl7fJ2RbuyXdWubte0a9t1a/TaDe3GdlO7ud3Sbm23tdvbHe3Odle7u93T7m33tfvbA+3B9lB7uD3SHm2PtcfbE+3J9lR7uj3Tnm3PtefbC+3F9lJ7ub3SXm2vtdfbG+3N9lZ7u73T3m3vtffbB+3D9lH7uH3SuhZabKnlVlptrfUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4L1lksSUWnr030Wdf9+v16y3a69c7tV+v15vi/5w3cEw7YCzz/O3U1Ub3ph39+6Kf9j5cb46h8dF+X2y37fV6f2vH/+JEbfQi/snsvV5vnc/m799bfHSvX2+80WPjjfU6n7Xnjpl0TPvpdQcOmLm3ZG+R3nJjvh41Zu39egt9biELjGkX+nTg3QH/sp1ywb/v1Lmfm+efd22hf9y4Xq83Ye/z7ZT9+v99O1prY9nyf8MEYxkfW5qMG+Q/bpP/OGLgvx6W/7hN/uOSf/4uUP7jNvl/mf2rdP7f1pUDxlr/r/OF+n/AmGq4/1jW+u/W/5+2/1T/98Ze/2/42fz9e8v8u/X/Qp/foE+vO+Fn9f+SvSG94b3hY8bHdh9gwBf3eaF/3c44sP3DPn9ZjS1Nxg3yH7fJf9wm/3Gb/Mdt8h+3yX/c1v+f6v/+/z/1f///yfX/Z/8F8vf2H+v/JXrDemv3FukN6Q3tDR4zPrb6f8Ex7Wf1/xfm/bSdcaEBo1+k/ufLS/7jNvmP2+Q/bpP/uE3+4zb5j9v+uf4fMKb+f/cL9f/4Y+4BjOVBwtGnLjq69/f6f/b/Yv3/+ef8+/WW/rfr/M/7dP4JBszcW6E3rDe0t0lv/d7g0fOO+uw6/XtrfnbFgaP+9j4+/XmAqUcfnWvM35Spe8f0m6rX7+9XGW+qMa8fPfb3E8br6/V6ff17nzvni8d6Y+6VzP7Z9Qf2phrTG9Eb2duit15vUG/o6LsRnz6PsGGv15ul1+tNP/qs8XqTfrbTY3Ib885HfTY+7WdPK0w71vsQY0uTcYP8x23yH7fJf9wm/3Gb/P8X+jeKevmP2waOrgsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5RDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODfNGLkFusNGjp08PAvSefdZ7p+X4Jl6Pyv6/Qb8yf+y7KeL3vnP/wPEwAA8P/c//mm/z+9EgAAAAAAAAAAAAAAAAAAABh3/Xd8nNh/+j0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzfeGOZfZdabpFl+/r6+npT9Bsz2H3+nFG9Ub025tjAMWNtTNtvzK/NVz193kcmv3udv41NPsPVG2115kzXbjzJChdOfsUEvbumWOWNd+d88a5p7prujbrcOkNG9A0Z0bfBsI37BvWtPmzYxoNWHzq4b80hI9abtW/poYMHjRjcN2SDEYOHf+7wWkOHbbjhyL5BG6w52cQbDh88YkTfoA1G9q03eGTfxsP6Nh4+sm/Q2oOGbNA366yz9k028X/X3v3Pt/zp/+kVAAAA8N/j/wsAAP//vBGzkw==") getdents64(r0, &(0x7f00000001c0)=""/162, 0xa2) 2.333732751s ago: executing program 2 (id=20336): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) 2.169719339s ago: executing program 2 (id=20339): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 1.719953962s ago: executing program 3 (id=20344): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x64, 0x0, &(0x7f0000000680)=[@enter_looper, @acquire={0x40046305, 0x3}, @free_buffer, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.497015614s ago: executing program 3 (id=20347): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x808010, &(0x7f00000002c0)=ANY=[], 0x1, 0x9b, &(0x7f0000000000)="$eJzs0s3NAQEQBuD324/gYBtw0IEatCKO3JyIREVaUYJECW7isrJhIyjAT54nmZlM3sscZnfeDlIm1SapniyWq9lkfu3p58E4/IIiSSdJN8mwvO/J4fYFyf64njZVJ3+nJgEAAL5JkVE9/l+TVpJekvYbrgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HJcAAAD//yc5MPk=") open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) 1.205828308s ago: executing program 3 (id=20352): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x400, &(0x7f0000000840)={[{@creator={'creator', 0x3d, "8d74db9c"}}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-2'}}, {@creator={'creator', 0x3d, "30c89bcb"}}, {}, {@uid}, {@gid}]}, 0x21, 0x6e8, &(0x7f0000001f80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f00000002c0)=ANY=[], 0xfe37, 0x2) 1.17321388s ago: executing program 0 (id=20353): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xfffffff7, 0x9}) 1.036942237s ago: executing program 4 (id=20354): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, 0x0, 0x0) 973.96312ms ago: executing program 0 (id=20355): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x10b240) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000180)={0x0, {0x0, 0x0, @ofdm}}) 803.368269ms ago: executing program 4 (id=20356): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x41f, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 752.168432ms ago: executing program 3 (id=20357): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@grpquota}, {@heartbeat_none}, {@intr}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 752.000462ms ago: executing program 0 (id=20358): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SLAVE(r0, 0x703, 0x1d) 653.041037ms ago: executing program 4 (id=20359): r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents64(r0, 0xffffffffffffffff, 0x18) 581.202421ms ago: executing program 0 (id=20360): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f0000001200)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c6572726f72733d636f6e74696e75652c636f6465706167653d3836322c726f6469722c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d69736f383835392d31352c696f636861727365743d63703933362c73686f72746e616d653d77696e39352c00a7439bda1b3631b9ab4ed793f61bb2844b304f15ce2bf27bc6a5c7e70903ba8e064ffb30af8ce851750da3596c63d7349b6b84"], 0x81, 0x2ae, &(0x7f0000001980)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) 532.727143ms ago: executing program 4 (id=20361): lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000040), 0x0, 0xdd, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="030000000410000004000000"], 0x50) 437.526058ms ago: executing program 2 (id=20362): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7f5b, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x4, 0xea95, 0x3001, 0x2, 0x2, 0x3, 0x0, 0x3}}) 345.763673ms ago: executing program 4 (id=20363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newroute={0x2c, 0x18, 0xffffffffffffffff, 0x70bd2e, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xc8, 0x8, 0x1000}, [@RTA_PRIORITY={0x8, 0x6, 0x6c}, @RTA_EXPIRES={0x8, 0x17, 0x800}]}, 0x2c}}, 0x0) 279.812126ms ago: executing program 0 (id=20364): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) timerfd_gettime(r0, 0x0) 233.644688ms ago: executing program 2 (id=20365): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000180)) 168.243631ms ago: executing program 4 (id=20366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="a80000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400200100000000000000000000000000020c00028005000100000000003c0001800c00028005000100000000002c00018014000300fc02000000000000000000000000000114000400fe8000000000000000000000000000aa0800074000000001140005800e"], 0xa8}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 25.773099ms ago: executing program 2 (id=20367): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) 0s ago: executing program 0 (id=20368): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): o short [ 1638.021142][T20333] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 1638.050075][T20333] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 1638.060154][T20333] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1638.070684][T20333] usb 5-1: config 129 has no interface number 0 [ 1638.077012][T20333] usb 5-1: config 129 has no interface number 1 [ 1638.087318][T20333] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1638.101510][T20333] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1638.132283][T20333] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1638.162153][T20333] usb 5-1: config 129 interface 135 has no altsetting 0 [ 1638.169315][T20333] usb 5-1: config 129 interface 5 has no altsetting 0 [ 1638.199729][T20333] usb 5-1: string descriptor 0 read error: -22 [ 1638.206136][T20333] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1638.232774][T20333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.241442][ T5759] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1638.286761][T20333] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1638.302074][T20333] usb 5-1: MIDIStreaming interface descriptor not found [ 1638.366903][ T970] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1638.429870][ T5759] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1638.479181][ T5759] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 1638.526300][ T5759] usb 4-1: USB disconnect, device number 53 [ 1638.593696][ T970] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1638.618971][ T970] usb 1-1: not running at top speed; connect to a high speed hub [ 1638.628574][ T970] usb 1-1: config 4 has an invalid interface number: 175 but max is 0 [ 1638.644223][ T970] usb 1-1: config 4 has no interface number 0 [ 1638.650220][T11067] usb 5-1: USB disconnect, device number 57 [ 1638.659471][ T970] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.17 [ 1638.689964][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.701282][ T970] usb 1-1: Product: syz [ 1638.720521][ T970] usb 1-1: Manufacturer: syz [ 1638.732118][ T970] usb 1-1: SerialNumber: syz [ 1638.824008][ T23] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1638.953523][ T970] usb 1-1: NDI device with a latency value of 1 [ 1638.967015][ T970] ftdi_sio 1-1:4.175: FTDI USB Serial Device converter detected [ 1638.985810][ T970] ftdi_sio ttyUSB0: unknown device type: 0xdc17 [ 1639.001035][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 1639.001409][ T970] usb 1-1: USB disconnect, device number 30 [ 1639.017850][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.029170][ T970] ftdi_sio 1-1:4.175: device disconnected [ 1639.057833][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.085484][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1639.111228][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.132674][ T23] usb 3-1: config 0 descriptor?? [ 1639.149613][ T23] hub 3-1:0.0: USB hub found [ 1639.355854][ T23] hub 3-1:0.0: 1 port detected [ 1639.403631][T29326] loop3: detected capacity change from 0 to 24 [ 1639.552288][ T23] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1639.558824][ T23] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1639.607891][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 1639.639247][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 1639.702034][ T23] usb 3-1: USB disconnect, device number 46 [ 1639.715830][T29343] loop4: detected capacity change from 0 to 1024 [ 1639.810139][T26550] Bluetooth: hci0: command tx timeout [ 1639.873875][T29355] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 1639.878822][ T49] hfsplus: b-tree write err: -5, ino 25 [ 1639.884963][T29355] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1639.930965][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1639.931069][ T49] hfsplus: b-tree write err: -5, ino 2 [ 1640.049559][T29363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17236'. [ 1640.069444][T29363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17236'. [ 1640.085777][T29363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17236'. [ 1640.705023][T29394] bond0: entered allmulticast mode [ 1641.218108][T29457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17255'. [ 1641.265649][T29455] loop2: detected capacity change from 0 to 4096 [ 1641.351187][T21527] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1641.532223][T21527] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1641.565053][T21527] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 24 [ 1641.588814][T21527] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1641.640890][T21527] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1641.668079][T21527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.676173][T21527] usb 1-1: Product: syz [ 1641.696324][T21527] usb 1-1: Manufacturer: syz [ 1641.705055][T21527] usb 1-1: SerialNumber: syz [ 1641.725005][T29445] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1641.765567][T29480] loop2: detected capacity change from 0 to 512 [ 1641.900868][T29480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1641.928884][T29480] ext4 filesystem being mounted at /4594/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1642.059581][T21527] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1642.067065][T21527] usb 1-1: MIDIStreaming interface descriptor not found [ 1642.090419][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1642.182679][T21527] usb 1-1: USB disconnect, device number 31 [ 1642.250718][ T6022] udevd[6022]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1642.804422][T29500] loop4: detected capacity change from 0 to 32768 [ 1642.858066][T29500] afs: Unexpected value for 'dyn' [ 1643.140272][T29529] loop3: detected capacity change from 0 to 32768 [ 1643.196861][T29529] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.17267 (29529) [ 1643.265074][T29529] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1643.291017][T29529] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1643.337574][T29529] BTRFS info (device loop3): using free space tree [ 1643.544148][T29529] BTRFS info (device loop3): enabling ssd optimizations [ 1643.551284][T29529] BTRFS info (device loop3): auto enabling async discard [ 1643.859977][ T5777] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1644.543656][T29627] loop3: detected capacity change from 0 to 256 [ 1644.612578][T29627] FAT-fs (loop3): Directory bread(block 64) failed [ 1644.641702][T29627] FAT-fs (loop3): Directory bread(block 65) failed [ 1644.697061][T29627] FAT-fs (loop3): Directory bread(block 66) failed [ 1644.715172][T29627] FAT-fs (loop3): Directory bread(block 67) failed [ 1644.745506][T29627] FAT-fs (loop3): Directory bread(block 68) failed [ 1644.752147][T29627] FAT-fs (loop3): Directory bread(block 69) failed [ 1644.800071][T29627] FAT-fs (loop3): Directory bread(block 70) failed [ 1644.814946][T29627] FAT-fs (loop3): Directory bread(block 71) failed [ 1644.865288][T29627] FAT-fs (loop3): Directory bread(block 72) failed [ 1644.903960][T29627] FAT-fs (loop3): Directory bread(block 73) failed [ 1645.071593][ T28] audit: type=1326 audit(2000001066.934:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29646 comm="syz.2.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1645.095079][ C1] vkms_vblank_simulate: vblank timer overrun [ 1645.189760][ T28] audit: type=1326 audit(2000001066.934:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29646 comm="syz.2.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1645.253909][ T28] audit: type=1326 audit(2000001066.987:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29646 comm="syz.2.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1645.304855][ T28] audit: type=1326 audit(2000001066.987:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29646 comm="syz.2.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1645.394614][ T28] audit: type=1326 audit(2000001066.998:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29646 comm="syz.2.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1645.463464][ T28] audit: type=1326 audit(2000001066.998:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29646 comm="syz.2.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1645.562791][ T28] audit: type=1326 audit(2000001066.998:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29646 comm="syz.2.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1645.631599][T29672] netlink: 'syz.4.17304': attribute type 11 has an invalid length. [ 1645.642951][ T28] audit: type=1326 audit(2000001066.998:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29646 comm="syz.2.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1645.710655][ T28] audit: type=1326 audit(2000001066.998:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29646 comm="syz.2.17297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1645.874009][T21527] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1646.059852][T21527] usb 1-1: Using ep0 maxpacket: 32 [ 1646.067398][T21527] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1646.097365][T21527] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.117109][T21527] usb 1-1: config 0 has no interface number 0 [ 1646.123554][T21527] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1646.161817][T21527] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1646.187633][T21527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.213736][T21527] usb 1-1: Product: syz [ 1646.218911][T18563] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1646.238322][T21527] usb 1-1: Manufacturer: syz [ 1646.243004][T21527] usb 1-1: SerialNumber: syz [ 1646.268592][T21527] usb 1-1: config 0 descriptor?? [ 1646.287340][T21527] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1646.317920][T21527] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 1646.449905][T29675] loop2: detected capacity change from 0 to 32768 [ 1646.488971][T21527] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1646.520785][T21527] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 1646.531340][T29675] afs: Unexpected value for 'dyn' [ 1646.748967][T21527] usb 1-1: USB disconnect, device number 32 [ 1646.880944][T29219] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1646.955612][T29728] loop2: detected capacity change from 0 to 1024 [ 1647.085325][ T49] hfsplus: b-tree write err: -5, ino 25 [ 1647.093850][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1647.107574][T18563] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1647.121526][ T49] hfsplus: b-tree write err: -5, ino 2 [ 1647.415702][T29705] loop4: detected capacity change from 0 to 32768 [ 1647.470016][T29705] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.17313 (29705) [ 1647.565437][T29705] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1647.617541][T29705] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1647.626472][T29705] BTRFS info (device loop4): using free space tree [ 1647.806359][T29705] BTRFS info (device loop4): enabling ssd optimizations [ 1647.854810][T10473] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1647.864347][T29705] BTRFS info (device loop4): auto enabling async discard [ 1647.897414][T10473] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1647.972043][T18154] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1647.984612][T29782] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1648.262097][ T23] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1648.302589][ T5784] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (5784) [ 1648.615192][ T23] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1648.832577][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1648.882722][ T23] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 1648.922893][ T23] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 1648.931343][ T23] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1648.969871][ T23] usb 1-1: config 129 has no interface number 0 [ 1648.976218][ T23] usb 1-1: config 129 has no interface number 1 [ 1649.007376][ T23] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1649.067657][ T23] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1649.100375][T29834] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 1649.127642][ T23] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1649.171489][ T23] usb 1-1: config 129 interface 135 has no altsetting 0 [ 1649.189312][ T23] usb 1-1: config 129 interface 5 has no altsetting 0 [ 1649.213718][ T23] usb 1-1: string descriptor 0 read error: -22 [ 1649.220435][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1649.258617][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.308648][ T23] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1649.356632][ T23] usb 1-1: MIDIStreaming interface descriptor not found [ 1649.576131][ T23] usb 1-1: USB disconnect, device number 33 [ 1650.026388][ T28] audit: type=1326 audit(2000001072.253:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29896 comm=162E44A480DB682108B49543019E91 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff10b19c819 code=0x0 [ 1650.027096][T29895] loop3: detected capacity change from 0 to 136 [ 1650.071485][T29895] Attempt to read inode for relocated directory [ 1650.107970][T29895] syz.3.17348: attempt to access beyond end of device [ 1650.107970][T29895] loop3: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 1650.145047][T29895] syz.3.17348: attempt to access beyond end of device [ 1650.145047][T29895] loop3: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 1650.180358][ T28] audit: type=1800 audit(2000001072.414:3501): pid=29895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.17348" name="file1" dev="loop3" ino=1487 res=0 errno=0 [ 1650.919463][T29934] netlink: 115 bytes leftover after parsing attributes in process `syz.0.17359'. [ 1651.113968][T29947] loop4: detected capacity change from 0 to 64 [ 1651.158952][T29949] netlink: 'syz.2.17364': attribute type 15 has an invalid length. [ 1651.211957][T29953] loop3: detected capacity change from 0 to 64 [ 1651.589927][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1652.811200][ T28] audit: type=1326 audit(2000001075.234:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30047 comm="syz.4.17395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd32f99c819 code=0x0 [ 1653.495314][T30090] netlink: 104 bytes leftover after parsing attributes in process `syz.3.17408'. [ 1653.521706][T30090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17408'. [ 1653.534275][T30090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17408'. [ 1653.595206][T21527] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1653.796523][T21527] usb 5-1: Using ep0 maxpacket: 8 [ 1653.822671][T21527] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1653.843329][T21527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1653.874740][T21527] usb 5-1: Product: syz [ 1653.879083][T21527] usb 5-1: Manufacturer: syz [ 1653.900648][T21527] usb 5-1: SerialNumber: syz [ 1653.901557][T30111] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 1653.926570][T21527] usb 5-1: config 0 descriptor?? [ 1653.945533][T21527] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1653.958443][T30105] loop0: detected capacity change from 0 to 4096 [ 1654.089518][T30105] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1654.119694][T30105] ntfs3: loop0: Failed to load $Extend (-22). [ 1654.144608][T30105] ntfs3: loop0: Failed to initialize $Extend. [ 1654.299382][T30128] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1654.315733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1654.348493][T21527] gspca_sn9c2028: read1 error -71 [ 1654.372464][T21527] gspca_sn9c2028: read1 error -71 [ 1654.413741][T21527] sn9c2028: probe of 5-1:0.0 failed with error -71 [ 1654.453328][T21527] usb 5-1: USB disconnect, device number 58 [ 1654.477015][T30139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17421'. [ 1654.544213][T30145] netlink: 'syz.2.17422': attribute type 1 has an invalid length. [ 1654.580693][T30147] loop3: detected capacity change from 0 to 64 [ 1655.096051][T30176] openvswitch: netlink: Flow actions attr not present in new flow. [ 1655.153854][T30180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17432'. [ 1656.035457][T30221] netlink: 168 bytes leftover after parsing attributes in process `syz.2.17446'. [ 1656.061656][T30172] loop3: detected capacity change from 0 to 32768 [ 1656.088124][T30172] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.17430 (30172) [ 1656.172033][T30172] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1656.207198][T30172] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1656.259379][T30172] BTRFS info (device loop3): enabling ssd optimizations [ 1656.281274][T30172] BTRFS info (device loop3): not using ssd optimizations [ 1656.288418][T30172] BTRFS info (device loop3): turning off barriers [ 1656.319350][T30172] BTRFS info (device loop3): using free space tree [ 1656.572828][ T5777] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1657.056060][T30266] binder: 30264:30266 ioctl c018620c 200000000280 returned -22 [ 1657.402826][T30280] libceph: resolve '400' (ret=-3): failed [ 1657.949386][T30296] loop2: detected capacity change from 0 to 4096 [ 1657.969882][T30296] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1658.064922][T30296] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 1658.383382][T30268] loop4: detected capacity change from 0 to 32768 [ 1658.459045][T30268] jfs_strtoUCS: char2uni returned -22. [ 1658.479642][T30268] charset = cp936, char = 0xd4 [ 1658.599212][T30332] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1658.742161][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1658.876590][T30345] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1658.964976][T30341] loop0: detected capacity change from 0 to 4096 [ 1659.507204][T30367] loop3: detected capacity change from 0 to 1024 [ 1659.513885][T30370] netlink: 'syz.0.17483': attribute type 2 has an invalid length. [ 1659.732249][T10473] hfsplus: b-tree write err: -5, ino 25 [ 1659.767922][T10473] hfsplus: b-tree write err: -5, ino 4 [ 1659.773658][T10473] hfsplus: b-tree write err: -5, ino 2 [ 1659.852794][ T28] audit: type=1326 audit(2000001082.794:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30386 comm="syz.0.17489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1659.951000][ T28] audit: type=1326 audit(2000001082.816:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30386 comm="syz.0.17489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1659.981400][ T28] audit: type=1326 audit(2000001082.816:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30386 comm="syz.0.17489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1660.009169][ T28] audit: type=1326 audit(2000001082.816:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30386 comm="syz.0.17489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1660.067594][ T28] audit: type=1326 audit(2000001082.837:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30386 comm="syz.0.17489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1660.141335][ T28] audit: type=1326 audit(2000001082.837:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30386 comm="syz.0.17489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1660.168081][T30400] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17492'. [ 1660.215130][ T28] audit: type=1326 audit(2000001082.837:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30386 comm="syz.0.17489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1660.244620][T30400] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17492'. [ 1660.285103][ T28] audit: type=1326 audit(2000001082.837:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30386 comm="syz.0.17489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1660.331875][ T28] audit: type=1326 audit(2000001082.837:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30386 comm="syz.0.17489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1660.739018][T30429] netlink: 'syz.0.17501': attribute type 2 has an invalid length. [ 1660.803472][T30429] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.17501'. [ 1661.492705][T18563] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1661.494301][T30475] loop2: detected capacity change from 0 to 164 [ 1661.710029][T18563] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.730783][T18563] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.750302][T18563] usb 1-1: config 1 interface 1 has no altsetting 1 [ 1661.765985][T18563] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1661.781286][T18563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.803043][T18563] usb 1-1: Product: syz [ 1661.807318][T18563] usb 1-1: Manufacturer: syz [ 1661.826409][T18563] usb 1-1: SerialNumber: syz [ 1661.851776][T18563] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1661.885572][T18563] cdc_ncm 1-1:1.0: bind() failure [ 1661.910990][T18563] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1661.938470][T18563] cdc_ncm 1-1:1.1: bind() failure [ 1661.984658][T30491] loop3: detected capacity change from 0 to 4096 [ 1661.984764][T30501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17521'. [ 1662.021580][T30491] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1662.095315][T30491] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1662.174841][T18563] usb 1-1: USB disconnect, device number 34 [ 1663.132723][T30507] loop4: detected capacity change from 0 to 32768 [ 1663.180818][T30507] ERROR: (device loop4): dtSearch: stack overrun! [ 1663.180818][T30507] [ 1663.190970][T30519] loop3: detected capacity change from 0 to 32768 [ 1663.213150][T30507] ERROR: (device loop4): remounting filesystem as read-only [ 1663.252914][T30519] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1663.264534][T30507] btstack dump: [ 1663.290619][T30507] bn = 0, index = 4 [ 1663.299162][T30507] bn = 0, index = 4 [ 1663.317868][T30507] bn = 0, index = 4 [ 1663.357882][T30507] bn = 0, index = 4 [ 1663.413576][T30507] bn = 0, index = 4 [ 1663.417752][T30507] bn = 0, index = 4 [ 1663.433535][T30507] bn = 0, index = 4 [ 1663.437432][T30507] bn = 0, index = 0 [ 1663.452200][T30519] XFS (loop3): Ending clean mount [ 1663.456496][T30507] jfs_lookup: dtSearch returned -5 [ 1663.644797][T30562] loop0: detected capacity change from 0 to 4096 [ 1663.818746][T30558] syz.2.17535 (30558): drop_caches: 2 [ 1663.818792][T30519] XFS (loop3): Quotacheck needed: Please wait. [ 1663.830673][T30562] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1663.983404][T30562] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 1664.008911][T30519] XFS (loop3): Quotacheck: Done. [ 1664.410374][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1664.451967][T30575] lo speed is unknown, defaulting to 1000 [ 1665.054074][T30571] loop2: detected capacity change from 0 to 32768 [ 1665.118780][T30601] openvswitch: netlink: Actions may not be safe on all matching packets [ 1665.190443][T30571] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1665.303946][T30610] loop4: detected capacity change from 0 to 256 [ 1665.398609][T30610] FAT-fs (loop4): Directory bread(block 64) failed [ 1665.436437][T30610] FAT-fs (loop4): Directory bread(block 65) failed [ 1665.466179][T30610] FAT-fs (loop4): Directory bread(block 66) failed [ 1665.472817][T30610] FAT-fs (loop4): Directory bread(block 67) failed [ 1665.475674][T30621] loop3: detected capacity change from 0 to 64 [ 1665.511545][T30610] FAT-fs (loop4): Directory bread(block 68) failed [ 1665.518168][T30610] FAT-fs (loop4): Directory bread(block 69) failed [ 1665.539068][T30610] FAT-fs (loop4): Directory bread(block 70) failed [ 1665.555919][T30610] FAT-fs (loop4): Directory bread(block 71) failed [ 1665.564305][T30571] XFS (loop2): Ending clean mount [ 1665.572690][T30610] FAT-fs (loop4): Directory bread(block 72) failed [ 1665.599969][T30610] FAT-fs (loop4): Directory bread(block 73) failed [ 1665.756379][ T5770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1666.073596][T30637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17550'. [ 1666.884675][T30688] netlink: 'syz.2.17559': attribute type 1 has an invalid length. [ 1666.908833][T30688] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17559'. [ 1666.923253][T30688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17559'. [ 1667.041413][T30692] loop3: detected capacity change from 0 to 64 [ 1667.426106][T30711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17564'. [ 1667.686203][T30717] loop2: detected capacity change from 0 to 4096 [ 1667.705996][T30717] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1667.848764][T30717] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 1667.927056][T30717] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1668.067783][ T5770] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 1668.116167][T30734] loop0: detected capacity change from 0 to 256 [ 1668.133042][T30734] exfat: Deprecated parameter 'utf8' [ 1668.458312][T20333] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1668.637449][T20333] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1668.658122][T20333] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1668.700787][T20333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.740854][T20333] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1668.801580][T30776] loop0: detected capacity change from 0 to 64 [ 1669.081790][T30791] loop0: detected capacity change from 0 to 8 [ 1669.391038][T21527] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1669.568058][T21527] usb 4-1: Using ep0 maxpacket: 16 [ 1669.585728][T21527] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1669.606093][T21527] usb 4-1: config 198 has an invalid interface number: 59 but max is 0 [ 1669.630073][T21527] usb 4-1: config 198 has no interface number 0 [ 1669.640096][T21527] usb 4-1: config 198 interface 59 altsetting 6 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1669.661087][T21527] usb 4-1: config 198 interface 59 altsetting 6 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1669.677812][T21527] usb 4-1: config 198 interface 59 has no altsetting 0 [ 1669.694657][T21527] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=58.84 [ 1669.705456][T21527] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.720877][T20333] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1669.726206][T21527] usb 4-1: Product: syz [ 1669.731446][T21527] usb 4-1: Manufacturer: syz [ 1669.762281][T21527] usb 4-1: SerialNumber: syz [ 1669.911318][T20333] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1669.933365][T20333] stv0680 3-1:4.0: last error: 50, command = 0x65 [ 1669.970683][T20333] usb 3-1: USB disconnect, device number 47 [ 1670.008869][T21527] comedi comedi5: Endpoint has wrong direction [ 1670.037094][T21527] dt9812 4-1:198.59: driver 'dt9812' failed to auto-configure device. [ 1670.069779][T21527] usb 4-1: USB disconnect, device number 54 [ 1670.187145][T30851] netlink: 3 bytes leftover after parsing attributes in process `syz.4.17597'. [ 1670.559796][T30865] SET target dimension over the limit! [ 1670.935300][T30874] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17605'. [ 1670.954686][T30874] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17605'. [ 1671.306654][T30859] loop0: detected capacity change from 0 to 32768 [ 1671.341198][T30859] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1671.370607][T30884] loop2: detected capacity change from 0 to 2048 [ 1671.410028][T30884] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1671.492723][T30884] syz.2.17608: attempt to access beyond end of device [ 1671.492723][T30884] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1671.513214][T30892] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1671.817827][ T5784] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1671.983582][T21527] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1672.197920][T21527] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1672.225913][T21527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.281986][T21527] usb 4-1: config 0 descriptor?? [ 1672.499384][T21527] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 1672.508680][T21527] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1672.618613][T11067] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1672.675050][T30909] loop0: detected capacity change from 0 to 40427 [ 1672.687863][T30909] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 1672.701122][T21527] [drm:udl_init] *ERROR* Selecting channel failed [ 1672.712783][T30909] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1672.749336][T30909] F2FS-fs (loop0): invalid crc value [ 1672.764170][T21527] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 1672.793072][T21527] [drm] Initialized udl on minor 2 [ 1672.794459][T11067] usb 3-1: Using ep0 maxpacket: 32 [ 1672.808990][T21527] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1672.823942][T11067] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.837491][T21527] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1672.845335][T30909] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1672.860652][T11067] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1672.878221][T18563] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1672.904084][T11067] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.913155][T21527] usb 4-1: USB disconnect, device number 55 [ 1672.923656][T11067] usb 3-1: Product: syz [ 1672.927570][T18563] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1672.933480][T11067] usb 3-1: Manufacturer: syz [ 1672.962615][T11067] usb 3-1: SerialNumber: syz [ 1672.979465][T11067] usb 3-1: config 0 descriptor?? [ 1673.026802][T11067] usb 3-1: bad CDC descriptors [ 1673.043502][T11067] usb 3-1: unsupported MDLM descriptors [ 1673.064589][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1673.077788][T30909] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1673.102129][T30909] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1673.252851][T11067] usb 3-1: USB disconnect, device number 48 [ 1673.288720][T18563] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1673.493776][T18563] usb 5-1: Using ep0 maxpacket: 16 [ 1673.501443][T18563] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1673.515306][T18563] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1673.526225][T18563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.548459][T18563] usb 5-1: Product: syz [ 1673.553124][T18563] usb 5-1: Manufacturer: syz [ 1673.557777][T18563] usb 5-1: SerialNumber: syz [ 1673.566874][T18563] usb 5-1: config 0 descriptor?? [ 1673.585119][T18563] asix: probe of 5-1:0.0 failed with error -22 [ 1673.739899][T30999] loop0: detected capacity change from 0 to 64 [ 1673.879445][T11067] usb 5-1: USB disconnect, device number 59 [ 1674.307111][T31033] usb usb7: usbfs: process 31033 (syz.2.17636) did not claim interface 0 before use [ 1674.520359][T31046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17641'. [ 1674.802701][T31060] loop3: detected capacity change from 0 to 8 [ 1675.275039][T18563] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1675.312625][T31091] netlink: 'syz.3.17651': attribute type 1 has an invalid length. [ 1675.343380][T31095] loop0: detected capacity change from 0 to 512 [ 1675.345822][T31094] bond0: option use_carrier: invalid value (255) [ 1675.385331][T31095] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1675.435244][T31095] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.17652: ea_inode file size=4 entry size=6 [ 1675.455185][T18563] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.466434][T18563] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1675.482726][T18563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.495607][T31095] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1675.499708][T18563] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1675.549269][T31095] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.17652: corrupted inode contents [ 1675.587639][T31095] EXT4-fs (loop0): Remounting filesystem read-only [ 1675.594808][T31095] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -5) [ 1675.604328][T31095] EXT4-fs (loop0): 1 orphan inode deleted [ 1675.614899][T31095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1675.805431][ T28] audit: type=1326 audit(2000001099.889:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31115 comm="syz.3.17659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1675.830315][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.927348][ T28] audit: type=1326 audit(2000001099.889:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31115 comm="syz.3.17659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1675.995983][ T28] audit: type=1326 audit(2000001099.921:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31115 comm="syz.3.17659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1676.067592][ T28] audit: type=1326 audit(2000001100.017:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31115 comm="syz.3.17659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1676.129133][ T28] audit: type=1326 audit(2000001100.017:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31115 comm="syz.3.17659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1676.329531][T31134] loop0: detected capacity change from 0 to 4096 [ 1676.416821][T31143] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1676.506660][T18563] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 1676.697152][T18563] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1676.721076][T18563] stv0680 5-1:4.0: last error: 86, command = 0x70 [ 1676.770361][T18563] usb 5-1: USB disconnect, device number 60 [ 1677.056998][T20333] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1677.198855][T31193] loop2: detected capacity change from 0 to 512 [ 1677.224486][T31193] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1677.242792][T20333] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1677.253278][T20333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.290459][T31193] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.17679: bg 0: block 384: padding at end of block bitmap is not set [ 1677.315993][T20333] usb 1-1: config 0 descriptor?? [ 1677.341753][T31193] EXT4-fs (loop2): Remounting filesystem read-only [ 1677.372838][T31193] EXT4-fs (loop2): 1 truncate cleaned up [ 1677.382124][T31202] 8021q: VLANs not supported on lo [ 1677.390662][T31193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1677.492228][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1677.548935][T20333] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 1677.588740][T20333] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1677.747379][T20333] [drm:udl_init] *ERROR* Selecting channel failed [ 1677.780540][T20333] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 1677.794385][T20333] [drm] Initialized udl on minor 2 [ 1677.802121][T20333] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1677.816569][T20333] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1677.834373][T11067] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1677.853276][T11067] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1677.877621][T20333] usb 1-1: USB disconnect, device number 35 [ 1678.133108][ T28] audit: type=1326 audit(2000001102.387:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31244 comm="syz.4.17688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32f99c819 code=0x7ffc0000 [ 1678.222382][ T28] audit: type=1326 audit(2000001102.387:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31244 comm="syz.4.17688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32f99c819 code=0x7ffc0000 [ 1678.236738][T31251] loop2: detected capacity change from 0 to 512 [ 1678.285021][ T28] audit: type=1326 audit(2000001102.441:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31244 comm="syz.4.17688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fd32f99c819 code=0x7ffc0000 [ 1678.313284][ T28] audit: type=1326 audit(2000001102.441:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31244 comm="syz.4.17688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32f99c819 code=0x7ffc0000 [ 1678.338999][T31251] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1678.400465][T31251] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.17690: ea_inode file size=4 entry size=6 [ 1678.454625][ T28] audit: type=1326 audit(2000001102.441:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31244 comm="syz.4.17688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32f99c819 code=0x7ffc0000 [ 1678.487770][T31251] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.17690: corrupted inode contents [ 1678.535841][T31251] EXT4-fs (loop2): Remounting filesystem read-only [ 1678.554992][T31251] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -5) [ 1678.569543][T31251] EXT4-fs (loop2): 1 orphan inode deleted [ 1678.577305][T31251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1678.589628][T20333] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1678.700760][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1678.806298][T20333] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1678.827279][T20333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.835365][T20333] usb 4-1: Product: syz [ 1678.867528][T20333] usb 4-1: Manufacturer: syz [ 1678.872199][T20333] usb 4-1: SerialNumber: syz [ 1678.910954][T20333] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1678.932894][T11067] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1679.141742][T31293] loop0: detected capacity change from 0 to 4096 [ 1679.205859][T31293] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1679.253530][T31293] ntfs3: loop0: Failed to load $Extend (-22). [ 1679.288604][T31293] ntfs3: loop0: Failed to initialize $Extend. [ 1679.557530][T20333] usb 4-1: USB disconnect, device number 56 [ 1679.927984][T11067] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1679.935155][T11067] ath9k_htc: Failed to initialize the device [ 1679.964027][T20333] usb 4-1: ath9k_htc: USB layer deinitialized [ 1680.207648][ T23] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1680.402643][ T23] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1680.427250][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.448031][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1680.484483][ T23] usb 3-1: config 1 has no interface number 0 [ 1680.496893][ T23] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1680.527122][ T23] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1680.563316][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1680.581813][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.604909][ T23] usb 3-1: Product: syz [ 1680.627483][ T23] usb 3-1: Manufacturer: syz [ 1680.643287][ T23] usb 3-1: SerialNumber: syz [ 1680.836603][T31384] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.17724'. [ 1681.116897][ T23] usb 3-1: USB disconnect, device number 49 [ 1681.266772][T31408] netlink: 'syz.4.17728': attribute type 1 has an invalid length. [ 1681.275083][T31408] netlink: 228 bytes leftover after parsing attributes in process `syz.4.17728'. [ 1681.320287][T31363] loop3: detected capacity change from 0 to 32768 [ 1681.435043][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1681.468144][T31399] syz.0.17727 (31399): drop_caches: 2 [ 1681.490838][T31363] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 1681.490838][T31363] [ 1681.522388][T31363] ialloc: diAlloc returned -5! [ 1682.037376][T31431] loop3: detected capacity change from 0 to 4096 [ 1682.119840][T31439] smc: removing ib device syz0 [ 1682.125538][T31441] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1683.183439][T18563] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1683.443391][T18563] usb 1-1: Using ep0 maxpacket: 8 [ 1683.455891][T18563] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1683.475210][T18563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.492831][T18563] usb 1-1: Product: syz [ 1683.497078][T18563] usb 1-1: Manufacturer: syz [ 1683.528463][T18563] usb 1-1: SerialNumber: syz [ 1683.581117][T18563] usb 1-1: config 0 descriptor?? [ 1683.609751][T18563] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1683.781906][T31450] syz.4.17738 (31450): drop_caches: 2 [ 1684.000250][T18563] gspca_sonixj: reg_r err -71 [ 1684.017799][T18563] sonixj: probe of 1-1:0.0 failed with error -71 [ 1684.052380][T18563] usb 1-1: USB disconnect, device number 36 [ 1684.430033][T31518] usb usb8: usbfs: process 31518 (syz.3.17754) did not claim interface 0 before use [ 1684.548599][T31519] loop2: detected capacity change from 0 to 4096 [ 1684.633745][T31519] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1685.307986][T31548] vivid-008: disconnect [ 1685.314154][T31545] loop0: detected capacity change from 0 to 4096 [ 1685.320900][T31547] vivid-008: reconnect [ 1685.555272][T31527] syz.3.17757 (31527): drop_caches: 2 [ 1685.561194][T31545] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1685.696849][T31545] ntfs: volume version 3.1. [ 1686.179743][T31579] loop3: detected capacity change from 0 to 8 [ 1686.288140][T31579] SQUASHFS error: Unable to read directory block [1d0:0] [ 1686.757037][T31606] loop2: detected capacity change from 0 to 4096 [ 1686.851464][T31606] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1686.983776][T31606] ntfs3: loop2: Failed to load $Extend (-22). [ 1687.005552][T31606] ntfs3: loop2: Failed to initialize $Extend. [ 1687.410203][ T28] audit: type=1800 audit(2000001112.339:3522): pid=31622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.17786" name="/" dev="sockfs" ino=127404 res=0 errno=0 [ 1687.445625][T31642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17792'. [ 1687.478081][T31642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17792'. [ 1687.515596][T31642] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17792'. [ 1687.748377][T31661] x_tables: duplicate underflow at hook 3 [ 1688.109278][T31676] loop3: detected capacity change from 0 to 1024 [ 1688.147494][T31686] smb3: Unexpected value for 'rdma' [ 1688.261845][T29219] hfsplus: b-tree write err: -5, ino 25 [ 1688.287113][T29219] hfsplus: b-tree write err: -5, ino 4 [ 1688.306110][T29219] hfsplus: b-tree write err: -5, ino 2 [ 1688.382221][T31696] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1688.586006][T31705] netlink: 188 bytes leftover after parsing attributes in process `syz.3.17812'. [ 1688.623365][T31709] netlink: 'syz.2.17814': attribute type 21 has an invalid length. [ 1688.638026][T31709] netlink: 'syz.2.17814': attribute type 1 has an invalid length. [ 1688.657263][T31709] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17814'. [ 1689.002343][T31725] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1689.367299][T31698] loop4: detected capacity change from 0 to 32768 [ 1689.429157][T31698] jfs_lookup: iget failed on inum 4 [ 1689.787176][ T28] audit: type=1326 audit(2000001114.891:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31754 comm="syz.2.17828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1689.873905][ T28] audit: type=1326 audit(2000001114.891:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31754 comm="syz.2.17828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1689.978105][ T28] audit: type=1326 audit(2000001114.934:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31754 comm="syz.2.17828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1690.076568][ T28] audit: type=1326 audit(2000001114.934:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31754 comm="syz.2.17828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1690.164574][T31764] xt_nat: multiple ranges no longer supported [ 1690.218555][T31728] loop0: detected capacity change from 0 to 32768 [ 1690.260618][T31728] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1690.309086][ T5784] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1690.800616][T21527] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1691.027386][T21527] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1691.045898][T21527] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.086137][T21527] usb 5-1: config 220 has no interface number 2 [ 1691.104555][T21527] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1691.153425][T21527] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1691.174043][T21527] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1691.192791][T21527] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1691.204150][T21527] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1691.220514][T21527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.228577][T21527] usb 5-1: Product: syz [ 1691.241334][T21527] usb 5-1: Manufacturer: syz [ 1691.246114][T21527] usb 5-1: SerialNumber: syz [ 1691.463675][ T28] audit: type=1400 audit(2000001116.682:3527): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=31829 comm="syz.3.17849" [ 1691.501057][T21527] usb 5-1: selecting invalid altsetting 0 [ 1691.519906][T21527] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1691.526345][T21527] usb 5-1: No valid video chain found. [ 1691.571423][T21527] usb 5-1: selecting invalid altsetting 0 [ 1691.593670][T21527] usbtest: probe of 5-1:220.1 failed with error -22 [ 1691.617549][T21527] usb 5-1: USB disconnect, device number 61 [ 1691.926435][T31865] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17857'. [ 1691.947845][T31865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17857'. [ 1692.184955][T31878] loop4: detected capacity change from 0 to 256 [ 1692.232319][T31878] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1692.351374][T31878] exFAT-fs (loop4): invalid start cluster (520) [ 1692.769164][T31910] netlink: 'syz.3.17871': attribute type 1 has an invalid length. [ 1692.809356][T31910] netlink: 'syz.3.17871': attribute type 1 has an invalid length. [ 1693.012199][T31923] xt_cgroup: invalid path, errno=-2 [ 1693.439629][T31946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17884'. [ 1693.902299][T31973] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1694.009030][T21527] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1694.221237][T21527] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1694.240461][T21527] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.272223][T21527] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1694.297795][T21527] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1694.335194][T21527] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1694.356992][T21527] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1694.386178][T21527] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1694.406121][T21527] usb 5-1: Product: syz [ 1694.413003][T32001] loop3: detected capacity change from 0 to 22 [ 1694.419330][T21527] usb 5-1: Manufacturer: syz [ 1694.431426][T32001] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1694.445933][T21527] cdc_wdm 5-1:1.0: skipping garbage [ 1694.461159][T21527] cdc_wdm 5-1:1.0: skipping garbage [ 1694.483611][T21527] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1694.494015][T32001] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1694.520206][T21527] cdc_wdm 5-1:1.0: Unknown control protocol [ 1694.671881][T31960] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 1694.705952][T21527] usb 5-1: USB disconnect, device number 62 [ 1694.865856][T32031] x_tables: duplicate entry at hook 3 [ 1695.042554][T32046] loop2: detected capacity change from 0 to 256 [ 1695.143570][T32051] syz.0.17910: attempt to access beyond end of device [ 1695.143570][T32051] nbd0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1695.197594][T32051] F2FS-fs (nbd0): Unable to read 1th superblock [ 1695.221106][T32051] syz.0.17910: attempt to access beyond end of device [ 1695.221106][T32051] nbd0: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1695.235693][ T23] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1695.254034][T32051] F2FS-fs (nbd0): Unable to read 2th superblock [ 1695.339101][T32059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17912'. [ 1695.437564][ T23] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1695.446562][ T23] usb 4-1: config 0 has no interface number 0 [ 1695.471120][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1695.501933][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.527444][ T23] usb 4-1: Product: syz [ 1695.542701][ T23] usb 4-1: Manufacturer: syz [ 1695.556653][ T23] usb 4-1: SerialNumber: syz [ 1695.579482][ T23] usb 4-1: config 0 descriptor?? [ 1695.840591][ T23] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 1695.872067][ T23] usb 4-1: No valid video chain found. [ 1695.894261][ T23] usb 4-1: USB disconnect, device number 57 [ 1696.624704][T32129] loop4: detected capacity change from 0 to 16 [ 1696.651659][T32129] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1697.328008][T18563] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1697.514700][T18563] usb 5-1: Using ep0 maxpacket: 8 [ 1697.528859][T18563] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1697.551558][T18563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.559641][T18563] usb 5-1: Product: syz [ 1697.595094][T18563] usb 5-1: Manufacturer: syz [ 1697.607976][T18563] usb 5-1: SerialNumber: syz [ 1697.623868][T18563] usb 5-1: config 0 descriptor?? [ 1697.651091][T18563] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1697.661892][T32120] loop0: detected capacity change from 0 to 32768 [ 1697.717575][T32120] JBD2: Ignoring recovery information on journal [ 1697.806555][T32120] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1697.866084][T32120] (syz.0.17926,32120,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 1697.883119][T32120] (syz.0.17926,32120,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1697.892148][T32120] (syz.0.17926,32120,1):ocfs2_mknod:298 ERROR: status = -2 [ 1697.899779][T32120] (syz.0.17926,32120,1):ocfs2_mknod:502 ERROR: status = -2 [ 1697.907409][T32120] (syz.0.17926,32120,1):ocfs2_create:676 ERROR: status = -2 [ 1697.925845][T11067] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1697.967290][ T5769] ocfs2: Unmounting device (7,0) on (node local) [ 1698.041499][T18563] gspca_sonixj: reg_r err -71 [ 1698.055706][T18563] sonixj: probe of 5-1:0.0 failed with error -71 [ 1698.065557][ T23] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1698.066899][T18563] usb 5-1: USB disconnect, device number 63 [ 1698.101980][T11067] usb 4-1: Using ep0 maxpacket: 16 [ 1698.115555][T11067] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1698.130357][T11067] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.145206][T11067] usb 4-1: Product: syz [ 1698.150476][T11067] usb 4-1: Manufacturer: syz [ 1698.155140][T11067] usb 4-1: SerialNumber: syz [ 1698.179097][T11067] r8152-cfgselector 4-1: config 0 descriptor?? [ 1698.253890][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1698.278280][ T23] usb 3-1: not running at top speed; connect to a high speed hub [ 1698.306031][ T23] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 1698.325717][ T23] usb 3-1: config 0 has no interface number 0 [ 1698.331970][ T23] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1698.360165][ T23] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1698.371155][ T23] usb 3-1: config 0 interface 88 has no altsetting 0 [ 1698.391772][ T23] usb 3-1: string descriptor 0 read error: -22 [ 1698.398175][ T23] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1698.409063][ T23] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1698.422024][ T23] usb 3-1: config 0 descriptor?? [ 1698.446762][T32206] loop0: detected capacity change from 0 to 2048 [ 1698.448650][ T23] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input92 [ 1698.488432][T32206] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1698.514957][ T23] input: failed to attach handler mousedev to device input92, error: -5 [ 1698.543943][T32214] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1698.588093][T11067] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1698.606277][T32206] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1698.621834][T11067] r8152-cfgselector 4-1: USB disconnect, device number 58 [ 1698.670048][ T23] usb 3-1: USB disconnect, device number 50 [ 1698.683214][T32206] Remounting filesystem read-only [ 1698.723619][ T6023] udevd[6023]: Error opening device "/dev/input/event4": No such device [ 1698.748366][ T6023] udevd[6023]: Unable to EVIOCGABS device "/dev/input/event4" [ 1698.760533][ T6023] udevd[6023]: Unable to EVIOCGABS device "/dev/input/event4" [ 1699.202384][T11067] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1699.389276][T11067] usb 1-1: Using ep0 maxpacket: 16 [ 1699.396819][T11067] usb 1-1: config 0 has no interfaces? [ 1699.423423][T11067] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1699.453440][T11067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.471713][T32272] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1699.479500][T11067] usb 1-1: Product: syz [ 1699.498053][T11067] usb 1-1: Manufacturer: syz [ 1699.508219][T11067] usb 1-1: SerialNumber: syz [ 1699.528272][T11067] r8152-cfgselector 1-1: config 0 descriptor?? [ 1699.741542][T11067] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1699.937112][T11067] usb 1-1: USB disconnect, device number 37 [ 1700.034257][T32306] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.17966'. [ 1700.056666][T32309] loop2: detected capacity change from 0 to 64 [ 1700.076246][T32306] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 1700.551083][T21527] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1700.634746][T32343] loop4: detected capacity change from 0 to 1024 [ 1700.750399][T21527] usb 4-1: Using ep0 maxpacket: 16 [ 1700.780373][T21527] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.820921][T21527] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1700.849323][T21527] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1700.861949][T21527] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1700.875107][T21527] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1700.892558][T21527] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.925369][T21527] usb 4-1: Product: syz [ 1700.942267][T21527] usb 4-1: Manufacturer: syz [ 1700.967013][T21527] usb 4-1: SerialNumber: syz [ 1701.033904][T32369] loop2: detected capacity change from 0 to 512 [ 1701.123145][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1701.159395][T32369] FAT-fs (loop2): FAT read failed (blocknr 128) [ 1701.375018][T21527] usb 4-1: 0:2 : does not exist [ 1701.428035][T21527] usb 4-1: USB disconnect, device number 59 [ 1701.503256][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1701.505196][T32382] loop2: detected capacity change from 0 to 4096 [ 1701.615646][T32382] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1701.634322][T32382] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1701.693615][T32382] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1701.756851][T32382] ntfs: volume version 3.1. [ 1701.823321][T32382] ntfs: (device loop2): ntfs_nlstoucs(): Name using character set utf8 contains characters that cannot be converted to Unicode. [ 1701.840171][T32416] openvswitch: netlink: Key type 81 is out of range max 32 [ 1701.851021][T32382] ntfs: (device loop2): ntfs_lookup(): Failed to convert name to Unicode. [ 1702.467526][T32450] MTD: Attempt to mount non-MTD device "./file0" [ 1702.494691][T32450] ./file0: Can't open blockdev [ 1702.496860][T32452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1703.046444][T32481] loop2: detected capacity change from 0 to 8 [ 1703.126277][T32486] loop3: detected capacity change from 0 to 512 [ 1703.323433][T32486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1703.346819][T32502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18015'. [ 1703.356637][T32486] ext4 filesystem being mounted at /4367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1703.374570][T32486] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1703.783634][T32526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18021'. [ 1703.877149][T32534] netlink: 'syz.4.18024': attribute type 10 has an invalid length. [ 1703.887326][T32534] veth1_vlan: left allmulticast mode [ 1703.893630][T32534] team0: Device veth1_vlan is already a lower device of the team interface [ 1704.131055][T32548] loop4: detected capacity change from 0 to 8 [ 1704.390824][T32561] QAT: failed to copy from user cfg_data. [ 1704.489927][T32570] netlink: 'syz.4.18034': attribute type 153 has an invalid length. [ 1704.507307][T32570] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.18034'. [ 1704.556350][ T28] audit: type=1326 audit(2000001130.731:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32571 comm="syz.3.18035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1704.648390][ T28] audit: type=1326 audit(2000001130.731:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32571 comm="syz.3.18035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1704.759331][ T28] audit: type=1326 audit(2000001130.741:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32571 comm="syz.3.18035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1704.834876][ T28] audit: type=1326 audit(2000001130.741:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32571 comm="syz.3.18035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1706.199206][T32667] netlink: 'syz.0.18066': attribute type 1 has an invalid length. [ 1706.226081][T32662] loop2: detected capacity change from 0 to 4096 [ 1706.271269][T32662] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1706.418072][T32662] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 1706.741593][T32693] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1707.029207][T32707] loop0: detected capacity change from 0 to 4096 [ 1707.056586][T32710] loop4: detected capacity change from 0 to 512 [ 1707.148768][T32717] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1707.150374][T32707] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1707.251117][T32707] Remounting filesystem read-only [ 1707.309461][T32725] netlink: 'syz.2.18082': attribute type 3 has an invalid length. [ 1707.324268][T32707] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1707.348142][T32725] netlink: 'syz.2.18082': attribute type 1 has an invalid length. [ 1707.369902][T32707] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1708.082122][T32767] tmpfs: User quota inode hardlimit too large. [ 1708.680475][ T326] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1708.911800][ T340] netlink: 'syz.4.18108': attribute type 2 has an invalid length. [ 1708.946059][T32763] loop0: detected capacity change from 0 to 32768 [ 1709.010823][T32763] JBD2: Ignoring recovery information on journal [ 1709.021715][T20333] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1709.116549][T32763] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1709.173642][ T350] netlink: 'syz.3.18110': attribute type 10 has an invalid length. [ 1709.203278][T20333] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1709.220074][ T350] veth1_vlan: left promiscuous mode [ 1709.234705][T20333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.237957][ T350] team0: Device veth1_vlan failed to register rx_handler [ 1709.246291][T20333] usb 3-1: Product: syz [ 1709.257210][T20333] usb 3-1: Manufacturer: syz [ 1709.262556][T20333] usb 3-1: SerialNumber: syz [ 1709.303930][ T5769] ocfs2: Unmounting device (7,0) on (node local) [ 1709.315324][T20333] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1709.362290][ T23] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1709.525953][ T363] netlink: 'syz.4.18112': attribute type 1 has an invalid length. [ 1709.792438][T20333] usb 3-1: USB disconnect, device number 51 [ 1709.833084][T21527] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1710.022513][T21527] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1710.042267][T21527] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 1710.054198][T21527] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.064553][T21527] usb 4-1: config 63 has no interface number 0 [ 1710.070997][T21527] usb 4-1: config 63 interface 66 has no altsetting 0 [ 1710.081280][T21527] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1710.112695][T21527] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.120980][T21527] usb 4-1: Product: syz [ 1710.135788][ T393] netlink: 144 bytes leftover after parsing attributes in process `syz.4.18121'. [ 1710.165504][T21527] usb 4-1: Manufacturer: syz [ 1710.178204][T21527] usb 4-1: SerialNumber: syz [ 1710.272201][ T401] netlink: 'syz.0.18123': attribute type 10 has an invalid length. [ 1710.298656][ T401] veth1_vlan: left allmulticast mode [ 1710.304372][ T401] team0: Device veth1_vlan is already a lower device of the team interface [ 1710.373512][ T23] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1710.407149][ T23] ath9k_htc: Failed to initialize the device [ 1710.428488][T20333] usb 3-1: ath9k_htc: USB layer deinitialized [ 1710.435489][T21527] usb 4-1: Found UVC 0.07 device syz (174f:8acf) [ 1710.457854][T21527] usb 4-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1710.470705][ T412] netlink: 'syz.2.18125': attribute type 9 has an invalid length. [ 1710.491674][T21527] usb 4-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1710.521074][T21527] usb 4-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1710.551795][T21527] usb 4-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1710.589804][T21527] usb 4-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1710.616436][T21527] usb 4-1: No streaming interface found for terminal 29. [ 1710.633814][T21527] uvcvideo 4-1:63.66: Entity type for entity Output 5 was not initialized! [ 1710.666651][T21527] usb 4-1: USB disconnect, device number 60 [ 1711.071503][ T451] tmpfs: Bad value for 'mpol' [ 1711.099503][ T455] netlink: 'syz.3.18136': attribute type 1 has an invalid length. [ 1711.129058][ T455] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.18136'. [ 1711.176604][ T455] netlink: 1 bytes leftover after parsing attributes in process `syz.3.18136'. [ 1711.659715][ T487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18146'. [ 1711.670311][ T487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18146'. [ 1711.707054][ T487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18146'. [ 1711.973528][ T504] netlink: 220 bytes leftover after parsing attributes in process `syz.3.18151'. [ 1711.977669][ T503] virtiofs: Unknown parameter 'always' [ 1711.987097][ T504] tc_dump_action: action bad kind [ 1712.220363][T21527] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1712.329007][ T516] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1712.400696][ T481] loop2: detected capacity change from 0 to 32768 [ 1712.427096][T21527] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1712.446028][T21527] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.485707][T21527] usb 5-1: config 0 has no interface number 0 [ 1712.498921][T21527] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1712.508804][T21527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.516943][T21527] usb 5-1: Product: syz [ 1712.521338][T21527] usb 5-1: Manufacturer: syz [ 1712.523896][ T481] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1712.527654][T21527] usb 5-1: SerialNumber: syz [ 1712.548447][T21527] usb 5-1: config 0 descriptor?? [ 1712.665930][ T481] XFS (loop2): Ending clean mount [ 1712.724566][ T5770] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1712.801903][T21527] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 1712.810134][T21527] usb 5-1: No valid video chain found. [ 1713.022644][T20333] usb 5-1: USB disconnect, device number 64 [ 1713.638987][ T572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18166'. [ 1713.715403][ T540] loop3: detected capacity change from 0 to 32768 [ 1713.768400][ T540] (syz.3.18160,540,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1713.807123][ T540] (syz.3.18160,540,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1714.007409][ T540] JBD2: Ignoring recovery information on journal [ 1714.152272][ T540] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1714.426730][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 1714.536566][ T584] loop2: detected capacity change from 0 to 32768 [ 1714.599963][ T584] JBD2: Ignoring recovery information on journal [ 1714.716155][ T584] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1714.859463][ T584] (syz.2.18171,584,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 1714.878026][T21527] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1714.896385][ T584] (syz.2.18171,584,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1714.934016][ T584] (syz.2.18171,584,1):ocfs2_mknod:298 ERROR: status = -2 [ 1714.941193][ T584] (syz.2.18171,584,1):ocfs2_mknod:502 ERROR: status = -2 [ 1714.981341][ T584] (syz.2.18171,584,1):ocfs2_create:676 ERROR: status = -2 [ 1715.073707][T21527] usb 1-1: Using ep0 maxpacket: 32 [ 1715.091948][T21527] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.106059][ T5770] ocfs2: Unmounting device (7,2) on (node local) [ 1715.133685][T21527] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1715.153245][T21527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.163073][T21527] usb 1-1: Product: syz [ 1715.167855][T21527] usb 1-1: Manufacturer: syz [ 1715.172770][T21527] usb 1-1: SerialNumber: syz [ 1715.186413][ T622] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18179'. [ 1715.193824][T21527] usb 1-1: config 0 descriptor?? [ 1715.212462][T21527] cdc_ether: probe of 1-1:0.0 failed with error -22 [ 1715.218047][ T589] loop4: detected capacity change from 0 to 32768 [ 1715.236637][T21527] usb 1-1: unsupported MDLM descriptors [ 1715.356197][ T589] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1715.417670][T21527] usb 1-1: USB disconnect, device number 38 [ 1715.606318][ T589] XFS (loop4): Ending clean mount [ 1715.716079][T18154] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1716.112859][ T673] loop3: detected capacity change from 0 to 64 [ 1716.305966][ T683] netlink: 830 bytes leftover after parsing attributes in process `syz.4.18184'. [ 1716.635324][ T700] ip6t_srh: unknown srh invflags 4000 [ 1716.756805][ T28] audit: type=1400 audit(2000001143.814:3532): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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loop2: detected capacity change from 0 to 1024 [ 1717.238831][ T726] hfsplus: unable to parse mount options [ 1718.013759][ T719] loop3: detected capacity change from 0 to 32768 [ 1718.192128][ T726] loop2: detected capacity change from 0 to 32768 [ 1718.226951][ T726] JFS: Invalid value of umask [ 1718.282336][ T5784] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1718.881375][ T799] loop4: detected capacity change from 0 to 64 [ 1719.330674][ T823] AppArmor: change_hat: Invalid input 'ˆ' [ 1719.808243][ T850] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1719.900358][ T858] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18239'. [ 1720.026370][ T862] loop4: detected capacity change from 0 to 64 [ 1720.109760][ T862] Trying to free block not in datazone [ 1720.117667][ T868] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1720.137286][ T862] Trying to free block not in datazone [ 1720.170186][ T862] Trying to free block not in datazone [ 1720.395584][ T879] loop2: detected capacity change from 0 to 4096 [ 1720.435447][ T879] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1720.468257][ T879] ntfs3: loop2: Failed to load $Extend (-22). [ 1720.482045][ T879] ntfs3: loop2: Failed to initialize $Extend. [ 1720.592627][ T892] sctp: [Deprecated]: syz.4.18249 (pid 892) Use of int in max_burst socket option deprecated. [ 1720.592627][ T892] Use struct sctp_assoc_value instead [ 1720.806094][ T901] loop3: detected capacity change from 0 to 1024 [ 1720.845531][ T909] --map-set only usable from mangle table [ 1721.121276][ T925] netlink: 'syz.4.18255': attribute type 2 has an invalid length. [ 1721.141337][ T925] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.18255'. [ 1721.976449][ T983] loop4: detected capacity change from 0 to 256 [ 1722.088041][ T983] FAT-fs (loop4): Directory bread(block 64) failed [ 1722.098159][ T983] FAT-fs (loop4): Directory bread(block 65) failed [ 1722.112253][ T983] FAT-fs (loop4): Directory bread(block 66) failed [ 1722.122631][ T983] FAT-fs (loop4): Directory bread(block 67) failed [ 1722.129347][ T983] FAT-fs (loop4): Directory bread(block 68) failed [ 1722.143103][ T983] FAT-fs (loop4): Directory bread(block 69) failed [ 1722.149798][ T983] FAT-fs (loop4): Directory bread(block 70) failed [ 1722.162514][ T983] FAT-fs (loop4): Directory bread(block 71) failed [ 1722.169292][ T983] FAT-fs (loop4): Directory bread(block 72) failed [ 1722.181619][ T983] FAT-fs (loop4): Directory bread(block 73) failed [ 1722.338510][ T999] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18276'. [ 1722.584771][ T1007] loop0: detected capacity change from 0 to 2048 [ 1722.647784][ T1017] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1722.730917][ T971] loop2: detected capacity change from 0 to 32768 [ 1722.761372][ T1022] loop3: detected capacity change from 0 to 164 [ 1722.776074][ T971] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1722.887681][ T1022] Symlink component flag not implemented [ 1722.925210][ T1022] Symlink component flag not implemented (7) [ 1723.082489][ T6021] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1723.256184][ T1053] loop3: detected capacity change from 0 to 64 [ 1723.340012][ T1057] xt_l2tp: v2 doesn't support IP mode [ 1723.775278][ T1083] loop4: detected capacity change from 0 to 128 [ 1723.846770][ T1083] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1723.953222][ T1083] ext4 filesystem being mounted at /3166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1724.124102][T18154] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1724.375791][ T1121] loop0: detected capacity change from 0 to 1024 [ 1724.528819][T18563] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1724.725025][T18563] usb 4-1: Using ep0 maxpacket: 8 [ 1724.740428][T18563] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1724.773521][T18563] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1724.778492][ T1142] netlink: 'syz.4.18309': attribute type 6 has an invalid length. [ 1724.795886][T18563] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1724.823662][T18563] usb 4-1: Product: syz [ 1724.832957][T18563] usb 4-1: Manufacturer: syz [ 1724.851309][T18563] usb 4-1: SerialNumber: syz [ 1725.041302][T20333] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1725.079589][T18563] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 1725.087939][T18563] usb 4-1: Handspring Visor / Palm OS: port 208, is for unknown use [ 1725.104543][T18563] usb 4-1: Handspring Visor / Palm OS: port 187, is for Console use [ 1725.114410][T18563] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1725.157953][ T1167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18316'. [ 1725.220949][T20333] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 1725.241888][T20333] usb 3-1: config 0 has no interface number 0 [ 1725.259544][T18563] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 1725.265380][T20333] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1725.299871][T18563] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1725.305511][T20333] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1725.323705][T20333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.334292][T18563] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1725.351762][T20333] usb 3-1: Product: syz [ 1725.363312][T18563] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1725.368598][T20333] usb 3-1: Manufacturer: syz [ 1725.398762][T20333] usb 3-1: SerialNumber: syz [ 1725.407327][T18563] usb 4-1: USB disconnect, device number 61 [ 1725.424359][T20333] usb 3-1: config 0 descriptor?? [ 1725.434379][T18563] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1725.452099][ T1144] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1725.491829][T18563] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1725.510474][T20333] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 46:1f:cb:7e:64:b8 [ 1725.519012][T18563] visor 4-1:1.0: device disconnected [ 1725.751973][ T1217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18322'. [ 1726.571879][ T1263] ip6tnl3: entered allmulticast mode [ 1726.651199][T29219] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1726.684145][ T23] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1726.702535][T29219] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1727.409901][ T23] usb 3-1: USB disconnect, device number 52 [ 1727.426755][ T23] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1727.449008][T20333] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1727.597110][T20333] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1727.672860][ T1334] CIFS: VFS: Malformed UNC in devname [ 1727.722441][ T1326] loop3: detected capacity change from 0 to 4096 [ 1727.799382][ T1326] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1727.907863][ T1326] ntfs3: loop3: Failed to load $Extend (-22). [ 1727.932770][ T1326] ntfs3: loop3: Failed to initialize $Extend. [ 1728.287915][ T1368] cgroup: release_agent respecified [ 1728.429408][ T23] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1728.637071][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 1728.667246][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1728.687916][ T23] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1728.720192][ T23] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1728.741941][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.765275][ T23] usb 3-1: Product: syz [ 1728.775880][ T23] usb 3-1: Manufacturer: syz [ 1728.786575][ T23] usb 3-1: SerialNumber: syz [ 1729.048470][ T23] usb 3-1: Invalid number of CPorts: 0 [ 1729.070786][ T23] es2_ap_driver: probe of 3-1:7.0 failed with error -22 [ 1729.234774][ T23] usb 3-1: USB disconnect, device number 53 [ 1729.457416][ T1419] loop0: detected capacity change from 0 to 164 [ 1730.055749][ T1444] netlink: 152 bytes leftover after parsing attributes in process `syz.3.18368'. [ 1730.080822][ T1444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18368'. [ 1730.304717][ T1458] xt_hashlimit: overflow, try lower: 18446744073709551614/9 [ 1730.471054][ T1464] netlink: 'syz.0.18373': attribute type 3 has an invalid length. [ 1730.497363][ T1464] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.18373'. [ 1730.507996][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1731.518383][ T1456] loop3: detected capacity change from 0 to 32768 [ 1731.616454][ T1456] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1731.697926][ T1514] netlink: 308 bytes leftover after parsing attributes in process `syz.2.18386'. [ 1731.890266][ T1527] netlink: 388 bytes leftover after parsing attributes in process `syz.2.18390'. [ 1731.980924][ T1456] XFS (loop3): Ending clean mount [ 1732.271920][ T5777] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1732.362630][ T1540] netlink: 'syz.0.18394': attribute type 1 has an invalid length. [ 1732.370544][ T1540] netlink: 'syz.0.18394': attribute type 3 has an invalid length. [ 1732.431851][ T1540] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18394'. [ 1732.634696][ T1548] xt_recent: hitcount (4294967293) is larger than allowed maximum (255) [ 1733.333383][ T1355] syz.4.18349 (1355): drop_caches: 3 [ 1734.234695][ T1626] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 1734.272769][ T1630] loop4: detected capacity change from 0 to 164 [ 1735.047340][T20333] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1735.243448][T20333] usb 3-1: Using ep0 maxpacket: 16 [ 1735.259779][T20333] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 1735.270809][T20333] usb 3-1: config 254 has no interface number 0 [ 1735.277332][T20333] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1735.292191][T20333] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1735.304145][T20333] usb 3-1: config 254 interface 235 has no altsetting 0 [ 1735.314719][T20333] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1735.334372][T20333] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1735.368580][T20333] usb 3-1: Product: syz [ 1735.383156][T20333] usb 3-1: Manufacturer: syz [ 1735.387919][T20333] usb 3-1: SerialNumber: syz [ 1735.423966][ T1647] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1735.691635][ T1647] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1735.702854][T20333] usbtest 3-1:254.235: Linux gadget zero [ 1735.708583][T20333] usbtest 3-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 1735.763925][ T1695] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1735.974021][T20333] usb 3-1: USB disconnect, device number 54 [ 1736.039873][ T28] audit: type=1326 audit(2000001164.490:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1710 comm="syz.3.18444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1736.079794][ T28] audit: type=1326 audit(2000001164.522:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1710 comm="syz.3.18444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1736.126879][ T28] audit: type=1326 audit(2000001164.522:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1710 comm="syz.3.18444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1736.156730][ T28] audit: type=1326 audit(2000001164.522:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1710 comm="syz.3.18444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1736.781372][T20333] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1736.950315][T20333] usb 4-1: Using ep0 maxpacket: 16 [ 1736.956733][ T1754] netlink: 'syz.4.18455': attribute type 16 has an invalid length. [ 1736.957737][T20333] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.990303][T20333] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1736.996209][ T1757] snd_dummy snd_dummy.0: control 0:7841:0:syz0:0 is already present [ 1737.019633][T20333] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1737.032619][T20333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.062823][T20333] usb 4-1: Product: syz [ 1737.067073][T20333] usb 4-1: Manufacturer: syz [ 1737.097880][T20333] usb 4-1: SerialNumber: syz [ 1737.137654][T20333] usb 4-1: config 0 descriptor?? [ 1737.155923][T20333] appledisplay 4-1:0.0: Could not find int-in endpoint [ 1737.181311][T20333] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1737.459130][ T1774] loop2: detected capacity change from 0 to 8192 [ 1737.486335][ T1774] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1737.544070][ T1774] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1737.568293][ T1774] REISERFS (device loop2): using ordered data mode [ 1737.583737][T20333] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1737.602938][ T1774] reiserfs: using flush barriers [ 1737.628561][ T1774] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1737.671703][ T1774] REISERFS (device loop2): checking transaction log (loop2) [ 1737.779313][T20333] usb 1-1: Using ep0 maxpacket: 32 [ 1737.801905][T20333] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1737.836032][T20333] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 1737.861069][T20333] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.886172][T20333] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1737.905798][ T1774] REISERFS (device loop2): Using tea hash to sort names [ 1737.913135][T20333] usb 1-1: config 128 has no interface number 0 [ 1737.920450][ T1774] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1737.934474][T20333] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1737.946001][T20333] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1737.956474][ T1774] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1737.969722][T20333] usb 1-1: config 128 interface 127 has no altsetting 0 [ 1737.994527][T20333] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1738.018143][T20333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.036558][T20333] usb 1-1: Product: syz [ 1738.049811][T20333] usb 1-1: Manufacturer: syz [ 1738.064404][T20333] usb 1-1: SerialNumber: syz [ 1738.196886][ T1796] loop4: detected capacity change from 0 to 1024 [ 1738.401946][T20333] usb 1-1: USB disconnect, device number 39 [ 1738.463356][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1738.540828][ T1820] loop2: detected capacity change from 0 to 512 [ 1738.557828][ T1820] EXT4-fs: Ignoring removed oldalloc option [ 1738.574921][ T1820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1738.602383][ T1820] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1738.615112][ T1820] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1738.624064][ T1820] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1738.632748][ T1820] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1738.642765][ T1820] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1738.658154][ T1820] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1738.666683][ T1820] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.18465: bg 0: block 40: padding at end of block bitmap is not set [ 1738.681940][ T1820] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1738.699889][ T1820] EXT4-fs (loop2): 1 truncate cleaned up [ 1738.707543][ T1820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1738.725710][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1738.725788][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1738.767112][ T1820] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.18465: bad symlink. [ 1738.844857][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1739.027095][ T1827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18467'. [ 1739.040439][ T1827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18467'. [ 1739.167429][ T1815] loop4: detected capacity change from 0 to 32768 [ 1739.222173][T20333] usb 4-1: USB disconnect, device number 62 [ 1739.282038][ T1815] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1739.352416][ T1857] netlink: 'syz.2.18472': attribute type 1 has an invalid length. [ 1739.412107][ T1854] netlink: 'syz.3.18471': attribute type 10 has an invalid length. [ 1739.432528][ T1854] team0: Device vxcan1 is of different type [ 1739.646222][ T1815] XFS (loop4): Ending clean mount [ 1739.801639][T18154] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1740.391475][ T1899] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1740.533141][ T1905] loop4: detected capacity change from 0 to 256 [ 1740.602357][ T1905] FAT-fs (loop4): Directory bread(block 64) failed [ 1740.640350][ T1905] FAT-fs (loop4): Directory bread(block 65) failed [ 1740.651629][ T1905] FAT-fs (loop4): Directory bread(block 66) failed [ 1740.658239][ T1905] FAT-fs (loop4): Directory bread(block 67) failed [ 1740.672940][ T1905] FAT-fs (loop4): Directory bread(block 68) failed [ 1740.699766][ T1905] FAT-fs (loop4): Directory bread(block 69) failed [ 1740.736005][ T1905] FAT-fs (loop4): Directory bread(block 70) failed [ 1740.778454][ T1905] FAT-fs (loop4): Directory bread(block 71) failed [ 1740.791265][ T1905] FAT-fs (loop4): Directory bread(block 72) failed [ 1740.810062][ T1905] FAT-fs (loop4): Directory bread(block 73) failed [ 1740.971272][ T1928] netlink: 'syz.0.18495': attribute type 5 has an invalid length. [ 1741.547833][ T1960] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18503'. [ 1741.860060][ T1977] loop3: detected capacity change from 0 to 1024 [ 1741.897665][ T1977] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1741.932670][ T1977] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1741.968955][ T1977] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1742.060278][ T1977] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1742.102157][ T1977] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.18509: Inode bitmap for bg 0 marked uninitialized [ 1742.156055][ T1977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1742.290636][ T1977] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.18509: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1742.511990][ T2013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18520'. [ 1742.517540][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1742.527499][ T2013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18520'. [ 1742.949778][ T2037] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1743.411156][ T2068] netlink: 'syz.3.18538': attribute type 5 has an invalid length. [ 1743.590687][ T2074] loop2: detected capacity change from 0 to 764 [ 1743.639526][ T2080] ieee802154 phy1 wpan1: encryption failed: -22 [ 1743.949236][ T28] audit: type=1326 audit(2000001172.962:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2099 comm="syz.0.18547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1744.005568][ T28] audit: type=1326 audit(2000001172.962:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2099 comm="syz.0.18547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1744.080038][ T28] audit: type=1326 audit(2000001172.983:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2099 comm="syz.0.18547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1744.126667][ T2107] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1744.168975][ T28] audit: type=1326 audit(2000001173.005:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2099 comm="syz.0.18547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1744.249594][ T28] audit: type=1326 audit(2000001173.005:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2099 comm="syz.0.18547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1744.358186][ T28] audit: type=1326 audit(2000001173.005:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2099 comm="syz.0.18547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1744.425521][ T28] audit: type=1326 audit(2000001173.005:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2099 comm="syz.0.18547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1744.481911][ T28] audit: type=1326 audit(2000001173.005:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2099 comm="syz.0.18547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1744.577147][ T28] audit: type=1326 audit(2000001173.005:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2099 comm="syz.0.18547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1744.671338][ T2134] netlink: 'syz.3.18558': attribute type 21 has an invalid length. [ 1744.693354][ T2134] netlink: 144 bytes leftover after parsing attributes in process `syz.3.18558'. [ 1744.725450][ T2138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18560'. [ 1744.751997][ T2131] loop2: detected capacity change from 0 to 4096 [ 1744.792012][ T2131] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1745.486992][ T2167] bridge10: entered promiscuous mode [ 1745.524706][ T2167] bridge10: entered allmulticast mode [ 1745.616390][ T2175] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 1745.684856][ T2139] loop0: detected capacity change from 0 to 32768 [ 1745.836869][ T2139] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1746.070111][ T5769] ocfs2: Unmounting device (7,0) on (node local) [ 1746.151594][ T2199] loop2: detected capacity change from 0 to 256 [ 1746.277785][ T2199] FAT-fs (loop2): Directory bread(block 64) failed [ 1746.312043][ T2199] FAT-fs (loop2): Directory bread(block 65) failed [ 1746.318780][ T2199] FAT-fs (loop2): Directory bread(block 66) failed [ 1746.386795][ T2199] FAT-fs (loop2): Directory bread(block 67) failed [ 1746.393572][ T2199] FAT-fs (loop2): Directory bread(block 68) failed [ 1746.414543][ T2199] FAT-fs (loop2): Directory bread(block 69) failed [ 1746.432407][ T2199] FAT-fs (loop2): Directory bread(block 70) failed [ 1746.442054][ T2199] FAT-fs (loop2): Directory bread(block 71) failed [ 1746.448802][ T2199] FAT-fs (loop2): Directory bread(block 72) failed [ 1746.499847][ T2199] FAT-fs (loop2): Directory bread(block 73) failed [ 1748.201577][ T2300] loop4: detected capacity change from 0 to 512 [ 1748.318906][ T2300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1748.390859][ T2300] ext4 filesystem being mounted at /3241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1748.448542][ T2300] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:106: comm syz.4.18608: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 1748.648326][ T2312] bond9: entered promiscuous mode [ 1748.681519][T18154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1748.690580][ T2312] bond9: entered allmulticast mode [ 1748.690930][ T2312] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1748.906259][ T2370] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1749.370754][T11067] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 1749.553631][T11067] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.582079][T11067] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1749.614996][T11067] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1749.634865][T11067] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.656641][T11067] usb 4-1: config 0 descriptor?? [ 1749.679088][T11067] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 1749.827241][T21527] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1749.932486][T11067] usb 4-1: USB disconnect, device number 63 [ 1750.032891][T21527] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1750.058023][T21527] usb 1-1: config 0 has no interface number 0 [ 1750.074112][T21527] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1750.095482][T21527] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1750.105368][T21527] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1750.113787][T21527] usb 1-1: Manufacturer: syz [ 1750.118996][T21527] usb 1-1: SerialNumber: syz [ 1750.128665][T21527] usb 1-1: config 0 descriptor?? [ 1750.451576][ T2460] netlink: 180 bytes leftover after parsing attributes in process `syz.4.18636'. [ 1750.525863][T21527] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 1750.566030][T21527] usb 1-1: USB disconnect, device number 40 [ 1750.857701][ T2488] netlink: 'syz.3.18641': attribute type 2 has an invalid length. [ 1750.914623][ T2424] loop2: detected capacity change from 0 to 32768 [ 1750.991916][ T2424] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 1750.991916][ T2424] [ 1751.069899][ T2424] ERROR: (device loop2): remounting filesystem as read-only [ 1751.526853][T20333] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1751.729405][T20333] usb 4-1: Using ep0 maxpacket: 16 [ 1751.741701][T20333] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1751.750636][T20333] usb 4-1: config 0 has no interface number 0 [ 1751.759000][T20333] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1751.794575][T20333] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1751.826121][T20333] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1751.840255][T20333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.870388][T20333] usb 4-1: Product: syz [ 1751.874776][T20333] usb 4-1: Manufacturer: syz [ 1751.882832][T20333] usb 4-1: SerialNumber: syz [ 1751.905678][T20333] usb 4-1: config 0 descriptor?? [ 1751.932412][ T2505] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1751.962998][ T2505] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1752.148638][ T2553] loop4: detected capacity change from 0 to 2048 [ 1752.174644][ T2505] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1752.184302][ T2553] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1752.202085][ T2505] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1752.246938][ T2553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1752.427051][T20333] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1752.466428][T20333] asix: probe of 4-1:0.34 failed with error -71 [ 1752.507834][T20333] usb 4-1: USB disconnect, device number 64 [ 1752.765377][ T2594] loop4: detected capacity change from 0 to 512 [ 1752.841689][ T2594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1752.883165][ T2594] ext4 filesystem being mounted at /3262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1753.109447][ T2617] loop3: detected capacity change from 0 to 1024 [ 1753.140272][T18154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1753.228981][ T2617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1753.277719][ T2617] ext4 filesystem being mounted at /4514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1753.344256][ T2617] EXT4-fs error (device loop3): ext4_get_first_dir_block:3606: inode #12: comm syz.3.18666: directory missing '..' [ 1753.447851][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1753.577299][ T2634] loop4: detected capacity change from 0 to 4096 [ 1753.616776][ T2634] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1753.637655][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1753.768812][ T2634] ntfs: volume version 3.1. [ 1754.667775][T18563] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1754.740002][ T2637] loop0: detected capacity change from 0 to 32768 [ 1754.804130][ T2637] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1754.888547][T18563] usb 4-1: config index 0 descriptor too short (expected 65230, got 72) [ 1754.923437][T18563] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1754.934298][ T2637] XFS (loop0): Ending clean mount [ 1754.961130][ T2637] XFS (loop0): Quotacheck needed: Please wait. [ 1754.969390][T18563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.002583][T18563] usb 4-1: Product: syz [ 1755.013779][T18563] usb 4-1: Manufacturer: syz [ 1755.028008][T18563] usb 4-1: SerialNumber: syz [ 1755.052042][T18563] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1755.127622][T21527] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1755.182394][ T2637] XFS (loop0): Quotacheck: Done. [ 1755.335954][ T2723] loop4: detected capacity change from 0 to 8 [ 1755.430982][ C0] usb 4-1: ath9k_htc: invalid pkt_len (fe77) [ 1755.464859][ T5769] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1755.641620][T18563] usb 4-1: USB disconnect, device number 65 [ 1755.786325][ T2745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1756.048031][ T2754] loop4: detected capacity change from 0 to 256 [ 1756.174891][T21527] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1756.188949][T21527] ath9k_htc: Failed to initialize the device [ 1756.225464][T18563] usb 4-1: ath9k_htc: USB layer deinitialized [ 1756.511955][ T2786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18698'. [ 1756.846992][ T2849] netlink: 'syz.0.18702': attribute type 10 has an invalid length. [ 1756.881670][T20333] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1756.900243][ T2849] netlink: 2 bytes leftover after parsing attributes in process `syz.0.18702'. [ 1756.983193][ T2849] team0: Port device virt_wifi0 added [ 1757.145718][T20333] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1757.193686][T20333] usb 3-1: not running at top speed; connect to a high speed hub [ 1757.224389][T20333] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1757.249263][ T2863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18706'. [ 1757.266932][T20333] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1757.305976][T20333] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1757.325094][T20333] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 1757.364062][T20333] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1757.380500][T20333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.398015][T20333] usb 3-1: Product: syz [ 1757.405787][T20333] usb 3-1: Manufacturer: syz [ 1757.431232][T20333] usb 3-1: SerialNumber: syz [ 1757.714018][T20333] usb 3-1: 0:2 : does not exist [ 1757.792673][T20333] usb 3-1: USB disconnect, device number 55 [ 1757.862421][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1758.925932][ T2961] loop3: detected capacity change from 0 to 128 [ 1758.984654][T18563] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1759.022399][ T2961] Bad inode number on dev loop3: 32769 is out of range [ 1759.179931][T18563] usb 5-1: Using ep0 maxpacket: 8 [ 1759.196965][T18563] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1759.217615][T18563] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.244742][T18563] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1759.264344][T18563] usb 5-1: New USB device found, idVendor=0402, idProduct=c010, bcdDevice= 0.40 [ 1759.283018][T18563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.310125][T18563] usb 5-1: Product: syz [ 1759.319795][T18563] usb 5-1: Manufacturer: syz [ 1759.324469][T18563] usb 5-1: SerialNumber: syz [ 1759.596651][T18563] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 1759.651653][T18563] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1759.693565][T18563] usb 5-1: USB disconnect, device number 65 [ 1759.711545][ T2997] loop3: detected capacity change from 0 to 764 [ 1759.746150][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1759.845200][ T2997] Symlink component flag not implemented [ 1759.851090][ T2997] Symlink component flag not implemented (122) [ 1759.982053][ T3010] delete_channel: no stack [ 1760.110475][ T3020] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1760.253860][ T3025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18746'. [ 1760.527465][ T3039] netlink: 'syz.3.18751': attribute type 10 has an invalid length. [ 1760.560229][ T3039] netlink: 2 bytes leftover after parsing attributes in process `syz.3.18751'. [ 1760.611032][ T3047] loop4: detected capacity change from 0 to 64 [ 1760.613650][ T3039] team0: Port device virt_wifi0 added [ 1760.950163][ T3064] loop2: detected capacity change from 0 to 1024 [ 1760.978805][ T3064] EXT4-fs: Ignoring removed mblk_io_submit option [ 1761.033355][ T3064] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1761.058127][ T3064] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1761.146702][ T3064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1761.181995][ T3064] EXT4-fs: Ignoring removed mblk_io_submit option [ 1761.188920][ T3064] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1761.203532][ T3064] EXT4-fs: Cannot change quota options when quota turned on [ 1761.212694][ T3082] loop3: detected capacity change from 0 to 8 [ 1761.259248][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1761.271429][ T3082] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1761.280433][ T3082] SQUASHFS error: Failed to read block 0x1dd: -5 [ 1761.299432][ T3082] SQUASHFS error: Unable to read metadata cache entry [1db] [ 1761.307550][ T3082] SQUASHFS error: Unable to read inode 0xa7 [ 1761.399387][T21527] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1761.599837][T21527] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1761.625576][T21527] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.657974][T21527] usb 1-1: config 0 descriptor?? [ 1761.676300][T21527] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1761.686587][ T3106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18768'. [ 1762.066975][T21527] gp8psk: usb in 137 operation failed. [ 1762.080286][T21527] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1762.100078][T21527] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1762.130947][T21527] usb 1-1: USB disconnect, device number 41 [ 1762.583831][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1763.031450][ T3189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18790'. [ 1763.104562][ T3193] loop2: detected capacity change from 0 to 64 [ 1763.138016][ T3195] netlink: 'syz.4.18792': attribute type 1 has an invalid length. [ 1763.163950][ T3195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18792'. [ 1763.403037][ T3215] loop2: detected capacity change from 0 to 256 [ 1763.422181][ T3215] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1763.456526][ T3215] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1763.492215][ T3215] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1763.609872][T20333] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1763.731741][ T3230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18799'. [ 1763.795797][T20333] usb 5-1: Using ep0 maxpacket: 8 [ 1763.817924][T20333] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1763.853156][T20333] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1763.873139][T20333] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 1763.914711][T20333] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1763.937624][T20333] usb 5-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 1763.956913][T20333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.973676][T20333] usb 5-1: Product: syz [ 1763.982040][ T28] audit: type=1326 audit(2000001194.453:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3274 comm="syz.3.18803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1763.989253][T20333] usb 5-1: Manufacturer: syz [ 1764.029547][T20333] usb 5-1: SerialNumber: syz [ 1764.039742][ T28] audit: type=1326 audit(2000001194.485:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3274 comm="syz.3.18803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1764.102325][ T28] audit: type=1326 audit(2000001194.506:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3274 comm="syz.3.18803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1764.159284][ T28] audit: type=1326 audit(2000001194.506:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3274 comm="syz.3.18803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1764.182033][ C1] vkms_vblank_simulate: vblank timer overrun [ 1764.198824][ T28] audit: type=1326 audit(2000001194.506:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3274 comm="syz.3.18803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1764.222851][T21527] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1764.239107][ T28] audit: type=1326 audit(2000001194.506:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3274 comm="syz.3.18803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1764.269912][ T28] audit: type=1326 audit(2000001194.506:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3274 comm="syz.3.18803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1764.293069][T20333] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1764.300641][T20333] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 1764.347214][ T28] audit: type=1326 audit(2000001194.506:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3274 comm="syz.3.18803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1764.408720][ T28] audit: type=1326 audit(2000001194.517:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3274 comm="syz.3.18803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1764.431888][T21527] usb 1-1: Using ep0 maxpacket: 32 [ 1764.432025][ T3304] binder: 3298:3304 unknown command 1074553619 [ 1764.442785][T21527] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1764.453078][T21527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.463807][T21527] usb 1-1: Product: syz [ 1764.472891][T21527] usb 1-1: Manufacturer: syz [ 1764.477958][T21527] usb 1-1: SerialNumber: syz [ 1764.481465][T20333] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 1764.500741][T21527] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1764.505089][ T3304] binder: 3298:3304 ioctl c0306201 200000000640 returned -22 [ 1764.541711][T20333] usb 5-1: USB disconnect, device number 66 [ 1764.608325][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1764.664268][ T3321] loop3: detected capacity change from 0 to 16 [ 1764.707648][ T3321] erofs: (device loop3): mounted with root inode @ nid 36. [ 1764.925130][T21527] gspca_topro: reg_w err -71 [ 1764.970503][T21527] gspca_topro: Sensor soi763a [ 1765.005116][T21527] usb 1-1: USB disconnect, device number 42 [ 1765.129763][ T3337] loop3: detected capacity change from 0 to 4096 [ 1765.150956][ T3337] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1765.355225][ T3337] ntfs3: loop3: failed to convert "c46c" to macroman [ 1766.146156][ T3413] bond0: entered allmulticast mode [ 1766.178866][ T3413] bond_slave_0: entered allmulticast mode [ 1766.188569][ T3413] bond_slave_1: entered allmulticast mode [ 1766.613673][ T3439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18839'. [ 1766.648736][ T3439] netlink: 440 bytes leftover after parsing attributes in process `syz.3.18839'. [ 1767.108913][ T3467] netlink: 176 bytes leftover after parsing attributes in process `syz.3.18848'. [ 1767.210626][ T28] audit: type=1400 audit(2000001197.917:3555): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=3471 comm="syz.0.18850" [ 1767.338164][ T3483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18853'. [ 1767.347627][ T3483] netlink: 92 bytes leftover after parsing attributes in process `syz.2.18853'. [ 1767.370460][ T3483] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18853'. [ 1767.503371][ T3492] loop0: detected capacity change from 0 to 1024 [ 1767.714305][ T4329] hfsplus: b-tree write err: -5, ino 25 [ 1767.726649][ T4329] hfsplus: b-tree write err: -5, ino 4 [ 1767.736878][ T4329] hfsplus: b-tree write err: -5, ino 2 [ 1767.879950][ T3510] loop2: detected capacity change from 0 to 64 [ 1768.590538][ T3544] loop4: detected capacity change from 0 to 4096 [ 1768.641800][ T3544] ntfs: volume version 3.1. [ 1768.658860][ T3544] __ntfs_error: 15 callbacks suppressed [ 1768.658879][ T3544] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1768.707155][ T3544] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1768.766318][ T3544] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1768.794639][ T3558] loop0: detected capacity change from 0 to 256 [ 1768.826265][ T3558] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1768.844969][ T3544] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 1768.858224][ T3558] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1768.872014][ T3544] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 1768.893241][ T3558] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1768.921185][ T3544] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota/$Q index. [ 1768.971815][ T3544] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 1769.113106][ T3544] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1769.139393][ T3544] ntfs: (device loop4): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 1769.428175][ T3581] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1769.435944][ T3581] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1769.581072][ T3587] loop4: detected capacity change from 0 to 512 [ 1769.600671][ T3587] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1769.704992][ T3547] loop2: detected capacity change from 0 to 32768 [ 1769.724218][ T3587] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 1769.780510][ T3547] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1769.965007][ T3547] XFS (loop2): Ending clean mount [ 1770.014347][ T3617] loop3: detected capacity change from 0 to 512 [ 1770.068780][ T3617] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1770.095646][ T3617] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1770.138860][ T3617] System zones: 0-1, 15-15, 18-18, 34-34 [ 1770.156933][ T3617] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1770.169889][ T5770] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1770.185452][ T3617] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1770.201030][ T3617] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1770.220411][ T3617] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1770.229005][ T3617] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.18889: bad orphan inode 16 [ 1770.240031][ T3617] ext4_test_bit(bit=15, block=18) = 1 [ 1770.245591][ T3617] is_bad_inode(inode)=0 [ 1770.251081][ T3617] NEXT_ORPHAN(inode)=0 [ 1770.255355][ T3617] max_ino=32 [ 1770.259440][ T3617] i_nlink=2 [ 1770.274283][ T3617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1770.390787][ T3617] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 1770.441559][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1770.686242][ T3613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1770.697963][ T3613] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1770.932020][ T3651] loop0: detected capacity change from 0 to 64 [ 1771.009608][ T3651] Trying to free block not in datazone [ 1771.070467][ T3651] Trying to free block not in datazone [ 1771.076092][ T3651] Trying to free block not in datazone [ 1771.106479][ T3658] loop2: detected capacity change from 0 to 256 [ 1771.380736][ T3678] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18901'. [ 1771.412195][ T3678] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18901'. [ 1771.604504][ T3687] ieee802154 phy1 wpan1: encryption failed: -22 [ 1771.628093][ T3690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18907'. [ 1771.928446][T26550] Bluetooth: hci2: command 0x0406 tx timeout [ 1772.849800][ T3714] loop2: detected capacity change from 0 to 32768 [ 1772.983089][ T3714] JBD2: Ignoring recovery information on journal [ 1773.037513][ T3714] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1773.258741][ T3770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18931'. [ 1773.384184][ T5770] ocfs2: Unmounting device (7,2) on (node local) [ 1773.848248][T26550] Bluetooth: hci2: command 0x0406 tx timeout [ 1773.990001][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1773.990019][ T28] audit: type=1326 audit(2000001205.187:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3805 comm="syz.0.18944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1774.063397][ T3808] loop0: detected capacity change from 0 to 128 [ 1774.118970][ T28] audit: type=1326 audit(2000001205.230:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3805 comm="syz.0.18944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1774.170199][ T3808] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1774.182795][ T28] audit: type=1326 audit(2000001205.230:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3805 comm="syz.0.18944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffabd59c582 code=0x7ffc0000 [ 1774.223342][ T3808] ext4 filesystem being mounted at /4675/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1774.231685][ T3811] xt_CT: No such helper "netbios-ns" [ 1774.306362][ T28] audit: type=1326 audit(2000001205.241:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3805 comm="syz.0.18944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffabd55d04e code=0x7ffc0000 [ 1774.378461][ T28] audit: type=1326 audit(2000001205.241:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3805 comm="syz.0.18944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffabd59c647 code=0x7ffc0000 [ 1774.468618][ T28] audit: type=1326 audit(2000001205.252:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3805 comm="syz.0.18944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffabd55d04e code=0x7ffc0000 [ 1774.521372][ T28] audit: type=1326 audit(2000001205.252:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3805 comm="syz.0.18944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffabd59c4ab code=0x7ffc0000 [ 1774.522934][ T5769] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1774.544819][ T28] audit: type=1326 audit(2000001205.273:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3805 comm="syz.0.18944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffabd55d04e code=0x7ffc0000 [ 1774.602398][ T28] audit: type=1326 audit(2000001205.273:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3805 comm="syz.0.18944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffabd55d04e code=0x7ffc0000 [ 1774.625355][ T28] audit: type=1326 audit(2000001205.273:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3805 comm="syz.0.18944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ffabd59b687 code=0x7ffc0000 [ 1774.884691][ T3846] trusted_key: encrypted_key: keyword 'load±|óÊ“.V§í' not recognized [ 1775.035951][ T3854] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.18958'. [ 1775.069942][ T3854] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1775.108453][ T3854] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1775.347276][ T3873] loop2: detected capacity change from 0 to 1024 [ 1775.397535][ T3873] hfsplus: bad catalog folder entry [ 1775.453004][ T3873] (syz.2.18963,3873,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1775.470983][ T3873] (syz.2.18963,3873,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1775.592424][ T3885] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18967'. [ 1775.639718][ T3885] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18967'. [ 1775.673374][ T3885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18967'. [ 1775.846354][ T3897] usb usb8: usbfs: process 3897 (syz.2.18971) did not claim interface 0 before use [ 1776.388566][ T3918] loop3: detected capacity change from 0 to 4096 [ 1776.439882][ T3933] netlink: 'syz.2.18982': attribute type 5 has an invalid length. [ 1776.618741][ T3918] ntfs: volume version 3.1. [ 1777.108959][ T3960] loop2: detected capacity change from 0 to 8 [ 1777.120292][ T3960] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1777.176146][ T3960] cramfs: Error -5 while decompressing! [ 1777.184367][ T3960] cramfs: ffffffff973fe348(18)->ffff88800fea9000(4096) [ 1777.205015][ T6021] udevd[6021]: incorrect cramfs checksum on /dev/loop2 [ 1777.242870][ T3960] cramfs: Error -5 while decompressing! [ 1777.256570][ T3960] cramfs: ffffffff973fe348(18)->ffff88800fea9000(4096) [ 1777.274225][ T5784] udevd[5784]: incorrect cramfs checksum on /dev/loop2 [ 1777.338616][ T5784] udevd[5784]: incorrect cramfs checksum on /dev/loop2 [ 1777.429447][T18563] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1777.564816][ T3988] loop0: detected capacity change from 0 to 256 [ 1777.593380][ T3988] exfat: Deprecated parameter 'namecase' [ 1777.622578][T18563] usb 4-1: Using ep0 maxpacket: 16 [ 1777.650222][T18563] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.650254][T18563] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1777.653366][T18563] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1777.653399][T18563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.653420][T18563] usb 4-1: Product: syz [ 1777.653435][T18563] usb 4-1: Manufacturer: syz [ 1777.653452][T18563] usb 4-1: SerialNumber: syz [ 1777.655745][T18563] r8152-cfgselector 4-1: config 0 descriptor?? [ 1777.708480][ T3988] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1777.867810][T18563] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1777.903763][ T4008] openvswitch: netlink: Actions may not be safe on all matching packets [ 1778.066648][T11067] usb 4-1: USB disconnect, device number 66 [ 1778.958071][T20333] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1779.067441][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 1779.067461][ T28] audit: type=1326 audit(2000001210.635:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz.3.19020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1779.132295][ T28] audit: type=1326 audit(2000001210.635:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz.3.19020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1779.155214][T20333] usb 3-1: Using ep0 maxpacket: 16 [ 1779.157063][T20333] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1779.169654][T11067] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1779.184098][T20333] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1779.198353][T20333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.217442][ T28] audit: type=1326 audit(2000001210.635:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz.3.19020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1779.217573][T20333] usb 3-1: Product: syz [ 1779.250006][T20333] usb 3-1: Manufacturer: syz [ 1779.266013][ T28] audit: type=1326 audit(2000001210.635:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz.3.19020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1779.273066][T20333] usb 3-1: SerialNumber: syz [ 1779.306538][ T28] audit: type=1326 audit(2000001210.635:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4111 comm="syz.3.19020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1779.331114][T20333] r8152-cfgselector 3-1: config 0 descriptor?? [ 1779.368177][T11067] usb 1-1: Using ep0 maxpacket: 8 [ 1779.387775][T11067] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1779.406556][T11067] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1779.433611][T11067] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 1779.452243][T11067] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1779.483623][T11067] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 1779.493989][T11067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.507983][T11067] usb 1-1: Product: syz [ 1779.512277][T11067] usb 1-1: Manufacturer: syz [ 1779.517886][T11067] usb 1-1: SerialNumber: syz [ 1779.757759][T20333] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1779.789229][T20333] r8152-cfgselector 3-1: USB disconnect, device number 56 [ 1779.803857][T11067] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1779.843091][T11067] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 1780.000741][T11067] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 1780.048423][T11067] usb 1-1: USB disconnect, device number 43 [ 1780.093387][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1780.119959][ T4176] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1780.354111][ T4191] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1780.469184][ T4194] netlink: 300 bytes leftover after parsing attributes in process `syz.3.19035'. [ 1781.107557][ T4231] netlink: 'syz.2.19048': attribute type 1 has an invalid length. [ 1781.129952][ T4231] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.19048'. [ 1781.401613][ T4240] netlink: 'syz.4.19051': attribute type 21 has an invalid length. [ 1781.434773][ T4240] IPv6: NLM_F_CREATE should be specified when creating new route [ 1781.492270][ T4246] loop2: detected capacity change from 0 to 64 [ 1781.509781][ T4203] loop3: detected capacity change from 0 to 32768 [ 1781.553465][ T4203] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.19039 (4203) [ 1781.573501][ T4246] syz.2.19053: attempt to access beyond end of device [ 1781.573501][ T4246] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1781.619510][ T4203] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1781.625237][ T4246] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 1781.667378][ T4203] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1781.705487][ T4203] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1781.714715][ T4256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19054'. [ 1781.744744][ T4257] loop0: detected capacity change from 0 to 1024 [ 1781.751551][ T4203] BTRFS info (device loop3): force clearing of disk cache [ 1781.779780][ T4203] BTRFS info (device loop3): turning off barriers [ 1781.803709][ T4203] BTRFS info (device loop3): use no compression [ 1781.810906][ T4203] BTRFS info (device loop3): disabling free space tree [ 1781.859805][ T4257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1781.873696][ T4203] BTRFS info (device loop3): enabling ssd optimizations [ 1781.899328][ T4203] BTRFS info (device loop3): using spread ssd allocation scheme [ 1781.965901][ T4203] BTRFS info (device loop3): not using ssd optimizations [ 1781.986350][ T4203] BTRFS info (device loop3): not using spread ssd allocation scheme [ 1781.987438][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1782.114262][ T4279] loop4: detected capacity change from 0 to 2048 [ 1782.160152][ T4279] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1782.185766][ T4290] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1782.228548][ T4203] BTRFS info (device loop3): rebuilding free space tree [ 1782.246611][ T4203] BTRFS info (device loop3): disabling free space tree [ 1782.272828][ T4203] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1782.304514][ T4279] NILFS (loop4): error -2 truncating bmap (ino=16) [ 1782.319873][ T4203] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1782.387608][ T4203] BTRFS info (device loop3): checking UUID tree [ 1782.707179][ T5777] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1782.824918][ T4310] loop2: detected capacity change from 0 to 2048 [ 1782.908850][ T4310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1783.353148][ T4335] ipvlan1: entered promiscuous mode [ 1783.358459][ T4335] ipvlan1: entered allmulticast mode [ 1783.480992][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1783.499564][ T4341] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1783.725710][ T4353] netlink: 'syz.4.19074': attribute type 15 has an invalid length. [ 1783.848092][ T4359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19076'. [ 1783.900425][ T4359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19076'. [ 1784.183246][ T28] audit: type=1326 audit(2000001216.115:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.3.19080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1784.226216][ T4367] block device autoloading is deprecated and will be removed. [ 1784.240501][ T4367] syz.2.19078: attempt to access beyond end of device [ 1784.240501][ T4367] ram202: rw=2048, sector=18446744073709551608, nr_sectors = 8 limit=8192 [ 1784.245540][ T4374] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19081'. [ 1784.256732][ T28] audit: type=1326 audit(2000001216.115:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.3.19080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1784.338409][ T28] audit: type=1326 audit(2000001216.115:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.3.19080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1784.400130][ T28] audit: type=1326 audit(2000001216.115:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.3.19080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1784.469478][ T28] audit: type=1326 audit(2000001216.115:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.3.19080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1784.549206][ T28] audit: type=1326 audit(2000001216.115:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.3.19080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1784.586346][ T4386] netlink: zone id is out of range [ 1784.596915][ T4386] netlink: del zone limit has 8 unknown bytes [ 1784.611035][ T28] audit: type=1326 audit(2000001216.115:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.3.19080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1784.690343][ T28] audit: type=1326 audit(2000001216.115:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.3.19080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1784.749127][ T28] audit: type=1326 audit(2000001216.115:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.3.19080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1785.011714][ T28] audit: type=1326 audit(2000001217.016:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4405 comm="syz.3.19089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b959c819 code=0x7ffc0000 [ 1785.052625][ T4365] loop4: detected capacity change from 0 to 32768 [ 1785.113830][T11067] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1785.121724][ T4365] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 1785.141929][ T4365] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1785.308964][T11067] usb 3-1: Using ep0 maxpacket: 8 [ 1785.328000][ T4365] XFS (loop4): Ending clean mount [ 1785.353561][T11067] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1785.382943][ T4428] loop0: detected capacity change from 0 to 512 [ 1785.382953][T11067] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1785.382983][T11067] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1785.458257][T11067] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1785.471773][ T4428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1785.475231][T11067] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1785.497862][T11067] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1785.507108][T11067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.555426][ T4428] ext4 filesystem being mounted at /4713/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1785.568445][T18154] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1785.665740][ T4428] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.19093: Failed to acquire dquot type 0 [ 1785.760636][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1786.050113][T20333] usb 3-1: USB disconnect, device number 57 [ 1786.066721][ T4460] loop0: detected capacity change from 0 to 8 [ 1786.868106][ T4502] loop2: detected capacity change from 0 to 4096 [ 1786.987065][T18563] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1787.102445][ T4502] ntfs: volume version 3.1. [ 1787.183239][T18563] usb 4-1: Using ep0 maxpacket: 16 [ 1787.200462][T18563] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1787.225658][T18563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.248007][T18563] usb 4-1: Product: syz [ 1787.276825][T18563] usb 4-1: Manufacturer: syz [ 1787.287134][T18563] usb 4-1: SerialNumber: syz [ 1787.307675][T18563] usb 4-1: config 0 descriptor?? [ 1787.459536][ T4531] netlink: 'syz.2.19116': attribute type 1 has an invalid length. [ 1787.569517][T18563] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 1787.597437][T18563] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1787.793944][T20333] usb 4-1: USB disconnect, device number 67 [ 1787.999067][ T4565] loop0: detected capacity change from 0 to 256 [ 1788.147376][ T4565] FAT-fs (loop0): Directory bread(block 64) failed [ 1788.161587][ T4565] FAT-fs (loop0): Directory bread(block 65) failed [ 1788.168979][ T4565] FAT-fs (loop0): Directory bread(block 66) failed [ 1788.191236][ T4565] FAT-fs (loop0): Directory bread(block 67) failed [ 1788.208261][ T4565] FAT-fs (loop0): Directory bread(block 68) failed [ 1788.216543][ T4565] FAT-fs (loop0): Directory bread(block 69) failed [ 1788.231886][ T4565] FAT-fs (loop0): Directory bread(block 70) failed [ 1788.238693][ T4565] FAT-fs (loop0): Directory bread(block 71) failed [ 1788.246583][ T4565] FAT-fs (loop0): Directory bread(block 72) failed [ 1788.253647][ T4565] FAT-fs (loop0): Directory bread(block 73) failed [ 1788.451096][T20333] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1788.464209][ T4592] loop3: detected capacity change from 0 to 128 [ 1788.477773][ T4588] netlink: 460 bytes leftover after parsing attributes in process `syz.0.19130'. [ 1788.510247][ T4592] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1788.544298][ T4592] hpfs: filesystem error: improperly stopped [ 1788.566780][ T4592] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1788.619534][ T4592] hpfs: You really don't want any checks? You are crazy... [ 1788.626964][ T4592] hpfs: Code page index out of array [ 1788.633432][ T4592] hpfs: code page support is disabled [ 1788.643387][ T4592] hpfs: hpfs_map_4sectors(): unaligned read [ 1788.653963][ T4592] hpfs: hpfs_map_4sectors(): unaligned read [ 1788.655701][T20333] usb 3-1: Using ep0 maxpacket: 32 [ 1788.660570][ T4592] hpfs: filesystem error: unable to find root dir [ 1788.693250][T20333] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 1788.705663][T20333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.733140][T20333] usb 3-1: Product: syz [ 1788.737444][T20333] usb 3-1: Manufacturer: syz [ 1788.762008][T20333] usb 3-1: SerialNumber: syz [ 1788.790421][T20333] usb 3-1: config 0 descriptor?? [ 1788.818681][T20333] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 1789.005442][T20333] gspca_sn9c2028: read1 error -71 [ 1789.013663][T20333] gspca_sn9c2028: read1 error -71 [ 1789.021024][T20333] gspca_sn9c2028: read1 error -71 [ 1789.026188][T20333] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 1789.047803][T20333] usb 3-1: USB disconnect, device number 58 [ 1789.168904][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1789.168923][ T28] audit: type=1326 audit(2000001221.456:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.0.19138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1789.205786][ T28] audit: type=1326 audit(2000001221.456:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.0.19138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1789.235444][ T28] audit: type=1326 audit(2000001221.499:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.0.19138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1789.268117][ T28] audit: type=1326 audit(2000001221.499:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.0.19138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1789.297548][ T28] audit: type=1326 audit(2000001221.499:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.0.19138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1789.648529][ T4600] loop4: detected capacity change from 0 to 32768 [ 1789.688469][ T4643] loop3: detected capacity change from 0 to 2048 [ 1789.691971][ T4600] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.19133 (4600) [ 1789.702686][ T4643] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1789.782940][ T4600] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1789.790986][ T4653] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1789.848020][ T4600] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1789.850804][ T4654] netlink: 'syz.0.19145': attribute type 1 has an invalid length. [ 1789.858513][ T4600] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1789.873427][ T4643] NILFS (loop3): error -2 truncating bmap (ino=16) [ 1789.892518][ T4600] BTRFS info (device loop4): enabling auto defrag [ 1789.909419][ T4600] BTRFS info (device loop4): max_inline at 0 [ 1789.916217][ T4654] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.19145'. [ 1789.922531][ T4600] BTRFS info (device loop4): using free space tree [ 1789.951820][ T4654] netlink: 'syz.0.19145': attribute type 1 has an invalid length. [ 1790.163228][ T4600] BTRFS info (device loop4): auto enabling async discard [ 1790.362633][T20333] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1790.507594][T18154] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1790.546366][ T4699] loop0: detected capacity change from 0 to 256 [ 1790.568014][T20333] usb 3-1: Using ep0 maxpacket: 32 [ 1790.568825][ T4699] exfat: Deprecated parameter 'utf8' [ 1790.593727][T20333] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1790.622963][T20333] usb 3-1: config 0 has no interface number 0 [ 1790.629376][T20333] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1790.670577][ T4699] exfat: Deprecated parameter 'utf8' [ 1790.675576][T20333] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1790.698342][T20333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.735845][T20333] usb 3-1: Product: syz [ 1790.740122][T20333] usb 3-1: Manufacturer: syz [ 1790.761871][ T4699] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1790.764453][T20333] usb 3-1: SerialNumber: syz [ 1790.776999][ T4706] loop3: detected capacity change from 0 to 8 [ 1790.844074][T20333] usb 3-1: config 0 descriptor?? [ 1790.870716][ T4676] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1791.128653][ T4676] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1791.257935][ T4723] xt_NFQUEUE: number of total queues is 0 [ 1791.374767][T20333] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1791.413674][T20333] asix: probe of 3-1:0.188 failed with error -71 [ 1791.475337][T20333] usb 3-1: USB disconnect, device number 59 [ 1791.537037][ T4737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19161'. [ 1791.576345][ T4737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19161'. [ 1791.596049][ T4743] netlink: 'syz.3.19162': attribute type 3 has an invalid length. [ 1791.612948][ T4737] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19161'. [ 1791.640139][ T4743] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.19162'. [ 1791.806464][ T4749] netlink: 800 bytes leftover after parsing attributes in process `syz.3.19164'. [ 1791.823860][ T4749] netlink: 1301 bytes leftover after parsing attributes in process `syz.3.19164'. [ 1791.914660][ T4746] loop4: detected capacity change from 0 to 4096 [ 1791.951193][ T4746] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1792.007117][ T4746] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1792.072221][ T4746] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1792.103098][ T4746] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1792.154545][ T4746] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1792.203803][ T4746] ntfs: volume version 3.1. [ 1793.007527][T18563] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1793.216003][T18563] usb 1-1: Using ep0 maxpacket: 16 [ 1793.250057][T18563] usb 1-1: config 0 has an invalid interface number: 223 but max is 0 [ 1793.266539][ T4812] loop3: detected capacity change from 0 to 4096 [ 1793.279271][T18563] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.309869][T18563] usb 1-1: config 0 has no interface number 0 [ 1793.326194][T18563] usb 1-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1793.362484][T18563] usb 1-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1793.411434][T18563] usb 1-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1793.432445][T18563] usb 1-1: config 0 interface 223 has no altsetting 0 [ 1793.443311][T18563] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1793.457789][T18563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.466535][T18563] usb 1-1: Product: syz [ 1793.474753][T18563] usb 1-1: Manufacturer: syz [ 1793.479677][ T4812] ntfs: volume version 3.1. [ 1793.479739][T18563] usb 1-1: SerialNumber: syz [ 1793.499996][T18563] usb 1-1: config 0 descriptor?? [ 1793.692488][T21527] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1793.773847][ T4845] loop2: detected capacity change from 0 to 256 [ 1793.795446][ T4845] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1793.907932][T21527] usb 5-1: Using ep0 maxpacket: 8 [ 1793.924961][T21527] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 1793.929736][T11067] usb 1-1: USB disconnect, device number 44 [ 1793.933196][T21527] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.933221][T21527] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1793.933243][T21527] usb 5-1: config 1 has no interface number 0 [ 1793.955810][ T4853] ax25_connect(): syz.3.19192 uses autobind, please contact jreuter@yaina.de [ 1793.986304][T21527] usb 5-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1794.039934][T21527] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1794.056258][T21527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.067511][T21527] usb 5-1: Product: syz [ 1794.071831][T21527] usb 5-1: Manufacturer: syz [ 1794.079206][T21527] usb 5-1: SerialNumber: syz [ 1794.127638][T21527] cdc_wdm 5-1:1.128: skipping garbage [ 1794.137307][T21527] cdc_wdm 5-1:1.128: invalid descriptor buffer length [ 1794.155731][T21527] cdc_wdm: probe of 5-1:1.128 failed with error -22 [ 1794.288542][ T4878] netlink: 5 bytes leftover after parsing attributes in process `syz.2.19196'. [ 1794.378346][T21527] usb 5-1: USB disconnect, device number 67 [ 1794.470281][ T4892] netlink: 'syz.2.19198': attribute type 1 has an invalid length. [ 1794.547415][ T4895] netlink: 88 bytes leftover after parsing attributes in process `syz.0.19199'. [ 1794.567106][ T4883] loop3: detected capacity change from 0 to 4096 [ 1794.586084][ T4883] __ntfs_error: 23 callbacks suppressed [ 1794.586104][ T4883] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1794.627046][ T4883] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1794.648466][ T4883] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1794.661709][ T4883] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1794.679950][ T4883] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1794.776391][ T4883] ntfs: volume version 3.1. [ 1794.781310][ T4883] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1794.818810][ T4883] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1794.867223][ T4883] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1794.914963][ T4883] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1794.968102][ T4883] ntfs: (device loop3): ntfs_check_logfile(): Error mapping $LogFile page (index 0). [ 1795.727026][ T4951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19216'. [ 1795.748678][ T4950] openvswitch: netlink: IP tunnel dst address not specified [ 1795.765914][ T4944] loop2: detected capacity change from 0 to 4096 [ 1795.966796][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19219'. [ 1796.011712][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.226874][ T4964] loop0: detected capacity change from 0 to 4096 [ 1796.265833][ T4976] netlink: 'syz.2.19224': attribute type 30 has an invalid length. [ 1796.294906][ T4964] ntfs: volume version 3.1. [ 1796.445133][ T4980] veth0_to_bridge: left allmulticast mode [ 1796.471246][ T4980] veth0_to_bridge: left promiscuous mode [ 1796.479622][ T4980] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1796.496714][ T4980] bond0: (slave bond_slave_0): Releasing backup interface [ 1796.516445][ T4986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19227'. [ 1796.529303][ T4980] bond0: (slave bond_slave_1): Releasing backup interface [ 1796.562614][ T4980] team0: Port device team_slave_0 removed [ 1796.589605][ T4980] team0: Port device team_slave_1 removed [ 1796.628211][ T4980] team0: Port device macvlan0 removed [ 1796.645036][ T4980] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1796.662510][ T4980] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1796.713364][ T4980] bridge0: port 2(netdevsim0) entered disabled state [ 1796.778270][T11067] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1796.990627][ T5001] loop3: detected capacity change from 0 to 4096 [ 1797.672021][ T5035] delete_channel: no stack [ 1797.721086][T11067] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1797.750594][ T5040] loop3: detected capacity change from 0 to 64 [ 1798.074034][ T5055] loop3: detected capacity change from 0 to 64 [ 1798.528260][ T5021] loop4: detected capacity change from 0 to 32768 [ 1798.535065][ T5075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19253'. [ 1798.582920][ T5085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1798.597104][ T5021] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 1798.620914][ T5021] JBD2: Ignoring recovery information on journal [ 1798.712064][ T5021] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1798.741573][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19257'. [ 1798.862231][ T5096] loop0: detected capacity change from 0 to 2048 [ 1798.924522][ T5096] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1799.022776][ C1] vkms_vblank_simulate: vblank timer overrun [ 1799.043760][ T5107] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1799.112467][T18154] ocfs2: Unmounting device (7,4) on (node local) [ 1799.829986][ T5152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19271'. [ 1799.836644][ T5153] netlink: 'syz.4.19270': attribute type 7 has an invalid length. [ 1799.864901][ T5153] netlink: 140 bytes leftover after parsing attributes in process `syz.4.19270'. [ 1799.875215][ T5152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1801.194204][ T5219] loop0: detected capacity change from 0 to 4096 [ 1801.242780][ T5219] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1801.467705][ T5241] loop2: detected capacity change from 0 to 512 [ 1801.514102][ T5241] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1801.566470][ T5241] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.19300: dx entry: limit 0 != root limit 125 [ 1801.585410][ T5241] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.19300: Corrupt directory, running e2fsck is recommended [ 1801.601293][ T5241] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1801.610762][ T5241] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.19300: corrupted in-inode xattr: invalid ea_ino [ 1801.642265][ T5241] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.19300: couldn't read orphan inode 15 (err -117) [ 1801.675397][ T5241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1801.724245][ T5241] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1802.307413][ T5276] loop0: detected capacity change from 0 to 2048 [ 1802.364179][ T5276] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1802.413217][ T5289] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1802.980908][ T5317] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.19322'. [ 1803.342678][ T5339] loop0: detected capacity change from 0 to 64 [ 1803.496685][ T5350] netlink: 'syz.4.19331': attribute type 2 has an invalid length. [ 1803.526013][ T5350] netlink: 'syz.4.19331': attribute type 8 has an invalid length. [ 1803.560269][ T5350] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19331'. [ 1803.714725][ T5360] netlink: 'syz.2.19334': attribute type 10 has an invalid length. [ 1803.734324][ T5360] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1803.754177][ T5360] batman_adv: batadv0: Adding interface: netdevsim0 [ 1803.760862][ T5360] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1037) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1803.786877][ C1] vkms_vblank_simulate: vblank timer overrun [ 1803.887915][ T5360] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1804.626603][ T5408] loop4: detected capacity change from 0 to 4096 [ 1804.743811][ T5408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1804.862520][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19353'. [ 1804.902489][ T5427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19353'. [ 1804.974437][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19353'. [ 1805.025493][T18154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1805.058453][ T5439] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19359'. [ 1805.118982][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19358'. [ 1805.320614][ T5454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19362'. [ 1805.347429][ T5454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19362'. [ 1805.363570][ T5454] netlink: 5 bytes leftover after parsing attributes in process `syz.2.19362'. [ 1805.682598][ T5461] loop0: detected capacity change from 0 to 8192 [ 1805.711005][ T5461] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1805.725237][ T5461] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1805.735137][ T5461] REISERFS (device loop0): using ordered data mode [ 1805.742075][ T5461] reiserfs: using flush barriers [ 1805.752836][ T5461] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1805.770243][ T5461] REISERFS (device loop0): checking transaction log (loop0) [ 1806.034430][ T5461] REISERFS (device loop0): Using r5 hash to sort names [ 1806.056914][ T5461] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1806.122062][ T5814] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1806.314332][ T5814] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1806.336455][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.365026][ T5814] usb 4-1: Product: syz [ 1806.376694][ T5814] usb 4-1: Manufacturer: syz [ 1806.387603][ T5814] usb 4-1: SerialNumber: syz [ 1806.415293][ T5814] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1806.448887][T11067] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1806.815289][ C1] usb 4-1: ath: unknown panic pattern! [ 1807.048972][ T5814] usb 4-1: USB disconnect, device number 68 [ 1807.500413][T11067] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1807.512849][T11067] ath9k_htc: Failed to initialize the device [ 1807.530051][ T5814] usb 4-1: ath9k_htc: USB layer deinitialized [ 1807.857436][ T5592] loop2: detected capacity change from 0 to 256 [ 1808.666802][ T5581] loop0: detected capacity change from 0 to 32768 [ 1808.700780][ T5581] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.19391 (5581) [ 1808.741651][ T5638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19407'. [ 1808.767952][ T5581] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1808.798125][ T5581] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1808.823825][ T5581] BTRFS info (device loop0): using free space tree [ 1808.862667][T18563] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1808.952214][ T5581] BTRFS info (device loop0): enabling ssd optimizations [ 1808.969066][ T5581] BTRFS info (device loop0): auto enabling async discard [ 1809.080623][T18563] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1809.098527][T18563] usb 4-1: config 66 has an invalid interface number: 114 but max is 0 [ 1809.114795][T18563] usb 4-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.134904][T18563] usb 4-1: config 66 has no interface number 0 [ 1809.141268][T18563] usb 4-1: too many endpoints for config 66 interface 114 altsetting 115: 105, using maximum allowed: 30 [ 1809.157870][ T5769] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1809.191899][T18563] usb 4-1: config 66 interface 114 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1809.255098][T18563] usb 4-1: config 66 interface 114 has no altsetting 0 [ 1809.276049][T18563] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1809.292250][T18563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.325111][T18563] usb 4-1: Product: syz [ 1809.343062][T18563] usb 4-1: Manufacturer: syz [ 1809.350248][T18563] usb 4-1: SerialNumber: syz [ 1809.494375][ T5669] cgroup: name respecified [ 1809.611096][T18563] usb 4-1: USB disconnect, device number 69 [ 1809.972744][T11067] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1810.063916][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 1810.063935][ T28] audit: type=1326 audit(2000001243.869:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.19417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32f99c819 code=0x7ffc0000 [ 1810.124057][ T28] audit: type=1326 audit(2000001243.890:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.19417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32f99c819 code=0x7ffc0000 [ 1810.154576][T11067] usb 3-1: not running at top speed; connect to a high speed hub [ 1810.156062][ T28] audit: type=1326 audit(2000001243.912:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.19417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32f99c819 code=0x7ffc0000 [ 1810.167803][T11067] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 1810.197330][ T28] audit: type=1326 audit(2000001243.912:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.19417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32f99c819 code=0x7ffc0000 [ 1810.213872][T11067] usb 3-1: config 11 has no interface number 0 [ 1810.233308][T11067] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1810.245804][T11067] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1810.269535][T11067] usb 3-1: config 11 interface 95 has no altsetting 0 [ 1810.276635][ T5814] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 1810.280233][ T28] audit: type=1326 audit(2000001243.912:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.19417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fd32f99c819 code=0x7ffc0000 [ 1810.309126][T11067] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 1810.336005][ T28] audit: type=1326 audit(2000001243.912:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.19417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32f99c819 code=0x7ffc0000 [ 1810.349973][T11067] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1810.374064][ T28] audit: type=1326 audit(2000001243.912:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.19417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32f99c819 code=0x7ffc0000 [ 1810.405114][T11067] usb 3-1: Manufacturer: syz [ 1810.426747][ T5685] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1810.434784][ T28] audit: type=1326 audit(2000001243.912:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.19417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd32f99c819 code=0x7ffc0000 [ 1810.466025][ T28] audit: type=1326 audit(2000001243.912:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5701 comm="syz.4.19417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd32f99c819 code=0x7ffc0000 [ 1810.481255][ T5814] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 1810.508777][ T5814] usb 1-1: config 0 has no interface number 0 [ 1810.535211][ T5814] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 1810.545128][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.569118][ T5814] usb 1-1: Product: syz [ 1810.573709][ T5814] usb 1-1: Manufacturer: syz [ 1810.587770][ T5814] usb 1-1: SerialNumber: syz [ 1810.633863][ T5814] usb 1-1: config 0 descriptor?? [ 1810.666785][ T5814] ftdi_sio 1-1:0.9: FTDI USB Serial Device converter detected [ 1810.685614][T11067] usb 3-1: USB disconnect, device number 60 [ 1810.693858][ T5814] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 1810.945273][T18563] usb 1-1: USB disconnect, device number 45 [ 1810.956882][T18563] ftdi_sio 1-1:0.9: device disconnected [ 1811.136623][ T5738] loop3: detected capacity change from 0 to 4096 [ 1811.165414][ T5738] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1811.323946][ T5738] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1811.417295][ T5762] loop4: detected capacity change from 0 to 2048 [ 1811.454153][ T5762] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1811.534788][ T5762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1812.210582][ T5814] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1812.397059][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 1812.426419][ T5814] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1812.434884][ T5814] usb 1-1: config 0 has no interface number 0 [ 1812.451182][ T5814] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1812.461525][ T5841] kcapi: manufacturer command 52776558133248 unknown. [ 1812.494764][ T5814] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1812.540034][ T5814] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1812.561592][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.583796][ T5814] usb 1-1: Product: syz [ 1812.588051][ T5814] usb 1-1: Manufacturer: syz [ 1812.592687][ T5814] usb 1-1: SerialNumber: syz [ 1812.640966][ T5814] usb 1-1: config 0 descriptor?? [ 1812.674173][ T5814] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1812.716340][ T5854] loop3: detected capacity change from 0 to 16 [ 1812.758830][ T5854] erofs: (device loop3): mounted with root inode @ nid 36. [ 1812.850806][ T5854] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 1812.864160][ T5854] syz.3.19447: attempt to access beyond end of device [ 1812.864160][ T5854] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1812.864570][ T5814] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 1812.893056][ T5854] erofs: (device loop3): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 1812.930559][ T5814] quatech2: probe of 1-1:0.51 failed with error -90 [ 1812.938149][ T5854] syz.3.19447: attempt to access beyond end of device [ 1812.938149][ T5854] loop3: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 1812.985520][ T5854] syz.3.19447: attempt to access beyond end of device [ 1812.985520][ T5854] loop3: rw=524288, sector=56, nr_sectors = 48 limit=16 [ 1813.032014][ T5854] syz.3.19447: attempt to access beyond end of device [ 1813.032014][ T5854] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 1813.066710][ T28] audit: type=1800 audit(2000001247.086:3640): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.19447" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1813.175821][ T5814] usb 1-1: USB disconnect, device number 46 [ 1813.232054][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19450'. [ 1813.440324][ T5846] loop4: detected capacity change from 0 to 32768 [ 1813.496417][ T5846] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1813.656444][ T5846] XFS (loop4): Ending clean mount [ 1813.708086][ T5846] XFS (loop4): Quotacheck needed: Please wait. [ 1813.883485][ T5846] XFS (loop4): Quotacheck: Done. [ 1814.156355][T18154] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1814.412571][ T5900] loop2: detected capacity change from 0 to 32768 [ 1814.459909][ T5900] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1814.529189][ T5900] JBD2: Ignoring recovery information on journal [ 1814.607988][ T5935] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1814.703756][ T5900] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1814.806556][ T5900] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 393248 [ 1814.824724][ T5900] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1814.843802][ T5900] OCFS2: File system is now read-only. [ 1814.854652][ T5900] (syz.2.19455,5900,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 1814.886288][ T5900] (syz.2.19455,5900,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1814.910980][ T5900] (syz.2.19455,5900,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 1814.933871][ T5900] (syz.2.19455,5900,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1814.942484][ T5900] (syz.2.19455,5900,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 1814.988783][ T5900] (syz.2.19455,5900,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 1815.000610][ T5900] (syz.2.19455,5900,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 1815.013869][ T5900] (syz.2.19455,5900,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 1815.024713][ T5900] (syz.2.19455,5900,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 1815.041181][ T5900] (syz.2.19455,5900,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 1815.052285][ T5900] (syz.2.19455,5900,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 1815.068956][ T5900] (syz.2.19455,5900,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 1815.080199][ T5900] (syz.2.19455,5900,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 1815.107200][ T5900] (syz.2.19455,5900,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 1815.117020][ T5900] (syz.2.19455,5900,1):ocfs2_expand_inline_dir:2858 ERROR: status = -30 [ 1815.132079][ T5900] (syz.2.19455,5900,1):ocfs2_extend_dir:3205 ERROR: status = -30 [ 1815.163090][ T5900] (syz.2.19455,5900,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 1815.210160][ T5900] (syz.2.19455,5900,1):ocfs2_mknod:298 ERROR: status = -30 [ 1815.218964][ T5900] (syz.2.19455,5900,1):ocfs2_mknod:502 ERROR: status = -30 [ 1815.236470][ T5900] (syz.2.19455,5900,1):ocfs2_mkdir:659 ERROR: status = -30 [ 1815.407676][ T5770] ocfs2: Unmounting device (7,2) on (node local) [ 1815.433940][ T2750] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1815.626636][ T5945] loop3: detected capacity change from 0 to 32768 [ 1815.633590][ T2750] usb 1-1: Using ep0 maxpacket: 32 [ 1815.649679][ T2750] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1815.670989][ T2750] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 1815.700197][ T2750] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.719672][ T2750] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1815.729959][ T2750] usb 1-1: config 128 has no interface number 0 [ 1815.731566][ T5945] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1815.736811][ T2750] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1815.756498][ T2750] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1815.772763][ T2750] usb 1-1: config 128 interface 127 has no altsetting 0 [ 1815.784073][ T2750] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1815.800558][ T2750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.820981][ T2750] usb 1-1: Product: syz [ 1815.838802][ T2750] usb 1-1: Manufacturer: syz [ 1815.843795][ T2750] usb 1-1: SerialNumber: syz [ 1815.975353][ T5945] XFS (loop3): Ending clean mount [ 1816.076281][ T5986] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19475'. [ 1816.100111][ T5945] syz.3.19469: attempt to access beyond end of device [ 1816.100111][ T5945] loop3: rw=4096, sector=4227071, nr_sectors = 1 limit=32768 [ 1816.166761][ T2750] usb 1-1: USB disconnect, device number 47 [ 1816.204256][ T6021] udevd[6021]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1816.254677][ T5777] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1816.519307][T26550] Bluetooth: hci0: command tx timeout [ 1816.786086][ C1] vkms_vblank_simulate: vblank timer overrun [ 1816.892635][ T6037] loop0: detected capacity change from 0 to 256 [ 1817.031794][ C1] vkms_vblank_simulate: vblank timer overrun [ 1817.717968][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19497'. [ 1817.827620][ T6088] bridge11: entered promiscuous mode [ 1817.925693][ T6098] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1818.222518][ T6114] usb usb9: usbfs: process 6114 (syz.2.19507) did not claim interface 3 before use [ 1818.363330][ T6122] netdevsim netdevsim3 ªªªªªª: set [1, 0] type 2 family 0 port 20000 - 0 [ 1818.391991][ T6122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1818.416989][ T6122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1818.432536][ T6122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1818.450016][ T6122] geneve3: entered promiscuous mode [ 1818.457056][ T6130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1818.468434][ T6122] geneve3: entered allmulticast mode [ 1818.509093][ T6122] netdevsim netdevsim3 ªªªªªª: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1818.551890][ T6122] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1818.598412][ T6122] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1818.613023][ T6122] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1818.718680][ T6137] bridge9: entered promiscuous mode [ 1818.740106][ T6137] bridge9: entered allmulticast mode [ 1818.971840][ T6150] loop2: detected capacity change from 0 to 256 [ 1819.037557][ T6152] loop4: detected capacity change from 0 to 2048 [ 1819.082762][ T6152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1819.364476][ T6134] loop0: detected capacity change from 0 to 32768 [ 1819.415842][ T6134] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1819.595659][ T6134] XFS (loop0): Ending clean mount [ 1819.724668][ T28] audit: type=1326 audit(2000001254.228:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.2.19523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1819.800776][ T28] audit: type=1326 audit(2000001254.228:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.2.19523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1819.832650][ T5769] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1819.837660][ T28] audit: type=1326 audit(2000001254.239:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.2.19523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1820.009470][ T28] audit: type=1326 audit(2000001254.239:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.2.19523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1820.091714][ T28] audit: type=1326 audit(2000000000.000:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.2.19523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1820.179905][ T28] audit: type=1326 audit(2000000000.000:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.2.19523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1820.245247][ T6204] loop2: detected capacity change from 0 to 128 [ 1820.293707][ T28] audit: type=1326 audit(2000000000.000:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.2.19523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1820.365462][ T6204] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1820.435488][ T28] audit: type=1326 audit(2000000000.000:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.2.19523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1820.473020][ T6204] ext4 filesystem being mounted at /5198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1820.539547][ T6204] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.19531: No space for directory leaf checksum. Please run e2fsck -D. [ 1820.575535][ T6204] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.19531: checksumming directory block 0 [ 1820.624496][ T28] audit: type=1326 audit(2000000000.000:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.2.19523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff10b19c819 code=0x7ffc0000 [ 1820.789360][ T5770] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1821.116166][T18563] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1821.319993][T18563] usb 5-1: Using ep0 maxpacket: 16 [ 1821.332154][T18563] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 1821.377934][T18563] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1821.386190][T18563] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1821.430009][T18563] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1821.460212][T18563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.475639][T18563] usb 5-1: Product: syz [ 1821.480638][T18563] usb 5-1: Manufacturer: syz [ 1821.485626][T18563] usb 5-1: SerialNumber: syz [ 1821.496277][ T6270] loop0: detected capacity change from 0 to 256 [ 1821.529016][T18563] r8152-cfgselector 5-1: config 0 descriptor?? [ 1821.616616][ T6270] FAT-fs (loop0): Directory bread(block 64) failed [ 1821.633089][ T6270] FAT-fs (loop0): Directory bread(block 65) failed [ 1821.661022][ T6270] FAT-fs (loop0): Directory bread(block 66) failed [ 1821.673771][ T6270] FAT-fs (loop0): Directory bread(block 67) failed [ 1821.681978][ T6270] FAT-fs (loop0): Directory bread(block 68) failed [ 1821.689419][ T6270] FAT-fs (loop0): Directory bread(block 69) failed [ 1821.697379][ T6270] FAT-fs (loop0): Directory bread(block 70) failed [ 1821.750813][ T6270] FAT-fs (loop0): Directory bread(block 71) failed [ 1821.757686][ T6270] FAT-fs (loop0): Directory bread(block 72) failed [ 1821.781138][ T6270] FAT-fs (loop0): Directory bread(block 73) failed [ 1821.954765][T18563] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1821.973628][T18563] r8152-cfgselector 5-1: USB disconnect, device number 68 [ 1822.277164][ T6313] netlink: 'syz.2.19558': attribute type 21 has an invalid length. [ 1822.494001][ T6327] loop0: detected capacity change from 0 to 256 [ 1822.663132][ T6327] FAT-fs (loop0): Directory bread(block 64) failed [ 1822.687029][ T6327] FAT-fs (loop0): Directory bread(block 65) failed [ 1822.698984][ T6327] FAT-fs (loop0): Directory bread(block 66) failed [ 1822.709238][ T6327] FAT-fs (loop0): Directory bread(block 67) failed [ 1822.710413][T11067] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1822.716317][ T6327] FAT-fs (loop0): Directory bread(block 68) failed [ 1822.735748][ T6327] FAT-fs (loop0): Directory bread(block 69) failed [ 1822.743097][ T6327] FAT-fs (loop0): Directory bread(block 70) failed [ 1822.750089][ T6327] FAT-fs (loop0): Directory bread(block 71) failed [ 1822.757172][ T6327] FAT-fs (loop0): Directory bread(block 72) failed [ 1822.785486][ T6327] FAT-fs (loop0): Directory bread(block 73) failed [ 1822.917428][T11067] usb 3-1: config 0 has no interfaces? [ 1822.939364][T11067] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1822.958596][T11067] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1822.999814][T11067] usb 3-1: Manufacturer: syz [ 1823.016499][ T6352] netlink: 'syz.4.19569': attribute type 1 has an invalid length. [ 1823.019294][T11067] usb 3-1: config 0 descriptor?? [ 1823.046154][ T6352] netlink: 'syz.4.19569': attribute type 2 has an invalid length. [ 1823.060202][ T6352] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19569'. [ 1823.306646][T11067] usb 3-1: USB disconnect, device number 61 [ 1823.522736][ T6384] netlink: 60 bytes leftover after parsing attributes in process `syz.4.19577'. [ 1823.769968][ T6397] netlink: 'syz.3.19581': attribute type 1 has an invalid length. [ 1823.787970][ T6397] netlink: 'syz.3.19581': attribute type 3 has an invalid length. [ 1823.810420][ T6397] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19581'. [ 1824.051486][ T6412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19586'. [ 1824.092684][ T6414] netlink: 72 bytes leftover after parsing attributes in process `syz.4.19587'. [ 1824.109215][ T6414] netlink: 172 bytes leftover after parsing attributes in process `syz.4.19587'. [ 1824.962241][ T6468] loop4: detected capacity change from 0 to 16 [ 1824.992484][ T6468] erofs: (device loop4): mounted with root inode @ nid 36. [ 1825.339783][T18563] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1825.419572][ T6497] netlink: 'syz.0.19612': attribute type 3 has an invalid length. [ 1825.428343][ T6497] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.19612'. [ 1825.443673][ T6493] loop2: detected capacity change from 0 to 2048 [ 1825.516205][ T6501] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1825.551538][T18563] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1825.601946][T18563] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1825.651595][T18563] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1825.671104][T18563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.689761][T18563] usb 5-1: Product: syz [ 1825.693045][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19615'. [ 1825.700726][T18563] usb 5-1: Manufacturer: syz [ 1825.730074][T18563] usb 5-1: SerialNumber: syz [ 1825.764099][T18563] rtl8150 5-1:1.0: couldn't find required endpoints [ 1825.787006][T18563] rtl8150: probe of 5-1:1.0 failed with error -5 [ 1825.843019][ T6501] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1825.870927][ T6501] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1825.904727][ T6501] Remounting filesystem read-only [ 1825.923197][T15597] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 1825.941034][T15597] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 1825.952773][T15597] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 1825.974969][ T5814] usb 5-1: USB disconnect, device number 69 [ 1825.977685][T15597] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 1826.009182][T15597] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 1826.019979][T15597] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 1826.031543][T15597] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 1826.044191][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.062158][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.075559][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.106708][T15597] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 1826.113647][T15597] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 1826.131237][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.142672][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.172423][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.198036][T15597] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 1826.205319][T15597] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 1826.232471][T15597] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 1826.244376][T15597] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 1826.262459][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.282497][T15597] NILFS (loop2): discard dirty page: offset=131072, ino=3 [ 1826.290251][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.311241][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.337944][T15597] NILFS (loop2): discard dirty block: blocknr=46, size=1024 [ 1826.345337][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.368079][T15597] NILFS (loop2): discard dirty page: offset=163840, ino=3 [ 1826.382391][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.401016][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.417057][T15597] NILFS (loop2): discard dirty block: blocknr=47, size=1024 [ 1826.426541][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.443156][T15597] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 1826.455364][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.477149][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.493004][T15597] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 1826.502742][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.519756][T15597] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 1826.546629][T15597] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 1826.556994][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.576062][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.586378][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.595811][T15597] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 1826.620380][T15597] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 1826.645445][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.654678][T18563] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1826.670203][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.690401][T15597] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.703362][ T5770] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 1826.737919][ T5770] NILFS (loop2): discard dirty page: offset=0, ino=12 [ 1826.767195][ T5770] NILFS (loop2): discard dirty block: blocknr=17, size=1024 [ 1826.784263][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.801000][ T6561] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1826.804622][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.820409][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1826.853963][T18563] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1826.869337][T18563] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.929034][T18563] usb 4-1: config 220 has no interface number 2 [ 1826.942741][T18563] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1826.971470][T18563] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1826.989521][T18563] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1827.013717][T18563] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1827.025781][T18563] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1827.045451][T18563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.074726][T18563] usb 4-1: Product: syz [ 1827.078982][T18563] usb 4-1: Manufacturer: syz [ 1827.083624][T18563] usb 4-1: SerialNumber: syz [ 1827.329422][T18563] usb 4-1: selecting invalid altsetting 0 [ 1827.349896][T18563] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1827.368777][T18563] usb 4-1: No valid video chain found. [ 1827.406656][T18563] usb 4-1: selecting invalid altsetting 0 [ 1827.426384][T18563] usbtest: probe of 4-1:220.1 failed with error -22 [ 1827.467166][T18563] usb 4-1: USB disconnect, device number 70 [ 1827.695113][ T6616] loop4: detected capacity change from 0 to 4096 [ 1827.772501][ T6624] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1828.191761][ T6649] loop4: detected capacity change from 0 to 128 [ 1828.247382][ T6649] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1828.260936][ T6649] ext4 filesystem being mounted at /3500/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1828.326312][T18154] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1828.417441][T18563] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1828.433410][ T28] audit: type=1326 audit(2000000009.319:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.0.19655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1828.480136][ T28] audit: type=1326 audit(2000000009.351:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.0.19655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1828.538197][ T28] audit: type=1326 audit(2000000009.351:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.0.19655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1828.591750][ T28] audit: type=1326 audit(2000000009.351:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.0.19655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1828.629190][T18563] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1828.639452][ T28] audit: type=1326 audit(2000000009.351:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.0.19655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabd59c819 code=0x7ffc0000 [ 1828.662323][T18563] usb 4-1: config 4 has an invalid interface number: 138 but max is 0 [ 1828.670898][T18563] usb 4-1: config 4 has no interface number 0 [ 1828.677153][T18563] usb 4-1: config 4 interface 138 has no altsetting 0 [ 1828.688984][T18563] usb 4-1: string descriptor 0 read error: -22 [ 1828.696094][T18563] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 1828.706289][T18563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.958066][T18563] catc 4-1:4.138: Missing or invalid endpoints [ 1829.031133][ T6685] bridge10: entered promiscuous mode [ 1829.060602][ T6689] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1829.213316][T18563] usb 4-1: USB disconnect, device number 71 [ 1830.463450][ T6749] loop0: detected capacity change from 0 to 32768 [ 1830.518733][ T6749] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1830.541165][ T6796] loop4: detected capacity change from 0 to 2048 [ 1830.669088][ T6749] XFS (loop0): Ending clean mount [ 1830.883846][ T5769] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1831.488173][ T6847] loop2: detected capacity change from 0 to 1024 [ 1831.508004][ T6847] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1831.580849][ T6847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1831.620759][ T6847] VFS: Lookup of 'file0' in ext4 loop2 would have caused loop [ 1831.683318][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1832.393653][ T6850] loop0: detected capacity change from 0 to 32768 [ 1833.240794][ T6929] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1833.480965][T11067] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1833.657553][T11067] usb 4-1: Using ep0 maxpacket: 32 [ 1833.667704][T11067] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.704758][T11067] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1833.741451][T11067] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1833.769650][T11067] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.829074][T11067] usb 4-1: config 0 descriptor?? [ 1833.855935][T11067] hub 4-1:0.0: USB hub found [ 1834.040467][T11067] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 1834.230774][T11067] usbhid 4-1:0.0: can't add hid device: -71 [ 1834.255453][T11067] usbhid: probe of 4-1:0.0 failed with error -71 [ 1834.321083][T11067] usb 4-1: USB disconnect, device number 72 [ 1834.494189][ T6946] loop2: detected capacity change from 0 to 32768 [ 1834.520066][ T6994] netlink: 'syz.4.19738': attribute type 3 has an invalid length. [ 1834.554335][ T6946] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1834.692483][ T6946] XFS (loop2): Ending clean mount [ 1834.822047][ T7010] loop4: detected capacity change from 0 to 4096 [ 1834.888327][ T5770] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1835.149731][ T7025] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19743'. [ 1835.201589][ T7025] netlink: 43 bytes leftover after parsing attributes in process `syz.0.19743'. [ 1835.254590][ T7025] netlink: 'syz.0.19743': attribute type 6 has an invalid length. [ 1835.300674][ T7025] netlink: 'syz.0.19743': attribute type 5 has an invalid length. [ 1835.341439][ T7025] netlink: 43 bytes leftover after parsing attributes in process `syz.0.19743'. [ 1836.396145][ T7073] loop2: detected capacity change from 0 to 1024 [ 1836.413681][ T7073] EXT4-fs: inline encryption not supported [ 1836.434563][ T7073] EXT4-fs: Ignoring removed bh option [ 1836.459817][ T7073] EXT4-fs: inline encryption not supported [ 1836.503840][ T7073] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1836.578473][ T7073] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1836.595570][ T7073] EXT4-fs error (device loop2): ext4_quota_enable:7144: comm syz.2.19759: inode #2304: comm syz.2.19759: iget: illegal inode # [ 1836.615757][ T7073] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.19759: Bad quota inode: 2304, type: 2 [ 1836.644771][ T7073] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 1836.658137][ T7038] loop4: detected capacity change from 0 to 32768 [ 1836.664305][ T7073] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1836.678294][ T7073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1836.713217][ T7073] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1836.744849][ T7073] EXT4-fs error (device loop2): ext4_quota_enable:7144: comm syz.2.19759: inode #2304: comm syz.2.19759: iget: illegal inode # [ 1836.766393][ T7073] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.19759: Bad quota inode: 2304, type: 2 [ 1836.839475][ T7073] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 1836.934735][ T7096] xt_limit: Overflow, try lower: 0/0 [ 1836.976374][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1837.124831][ T7103] overlayfs: missing 'workdir' [ 1837.235343][ T7112] netlink: 'syz.3.19770': attribute type 1 has an invalid length. [ 1837.268366][ T7112] netlink: 'syz.3.19770': attribute type 2 has an invalid length. [ 1837.294576][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19770'. [ 1837.453009][ T7121] netlink: 'syz.3.19773': attribute type 58 has an invalid length. [ 1837.470723][ T7121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19773'. [ 1837.802294][ T7143] loop0: detected capacity change from 0 to 64 [ 1837.931245][ T7143] syz.0.19777: attempt to access beyond end of device [ 1837.931245][ T7143] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1837.964697][ T7143] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 1838.084001][ T7151] loop3: detected capacity change from 0 to 4096 [ 1838.156804][ T7163] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1838.249548][ T7151] NILFS error (device loop3): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 1838.297725][ T7151] Remounting filesystem read-only [ 1838.323266][ T7170] loop0: detected capacity change from 0 to 256 [ 1838.432289][ T7170] FAT-fs (loop0): Directory bread(block 64) failed [ 1838.438934][ T7170] FAT-fs (loop0): Directory bread(block 65) failed [ 1838.488575][ T7170] FAT-fs (loop0): Directory bread(block 66) failed [ 1838.517588][ T7170] FAT-fs (loop0): Directory bread(block 67) failed [ 1838.524364][ T7170] FAT-fs (loop0): Directory bread(block 68) failed [ 1838.583314][ T7170] FAT-fs (loop0): Directory bread(block 69) failed [ 1838.590057][ T7170] FAT-fs (loop0): Directory bread(block 70) failed [ 1838.645987][ T7170] FAT-fs (loop0): Directory bread(block 71) failed [ 1838.669699][ T7170] FAT-fs (loop0): Directory bread(block 72) failed [ 1838.688987][ T7170] FAT-fs (loop0): Directory bread(block 73) failed [ 1838.844720][ T7193] loop3: detected capacity change from 0 to 16 [ 1838.892059][ T7193] erofs: (device loop3): mounted with root inode @ nid 36. [ 1838.936707][T26550] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1838.952796][ T7193] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1839.009899][ T28] audit: type=1800 audit(2000000020.622:3655): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.19791" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1839.808665][ T7237] loop4: detected capacity change from 0 to 16 [ 1839.882361][ T7237] erofs: (device loop4): mounted with root inode @ nid 36. [ 1839.910419][ T7234] loop3: detected capacity change from 0 to 4096 [ 1839.945132][ T7234] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1840.050592][ T7202] loop2: detected capacity change from 0 to 32768 [ 1840.096203][ T7202] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.19794 (7202) [ 1840.129168][ T7234] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1840.140504][ T7202] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1840.163103][ T7234] ntfs3: loop3: Failed to load $Extend (-22). [ 1840.174460][ T7202] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1840.195654][ T7234] ntfs3: loop3: Failed to initialize $Extend. [ 1840.212211][ T7202] BTRFS info (device loop2): force zlib compression, level 3 [ 1840.240429][ T7202] BTRFS info (device loop2): force clearing of disk cache [ 1840.273208][ T7202] BTRFS info (device loop2): setting nodatasum [ 1840.289073][ T7202] BTRFS info (device loop2): allowing degraded mounts [ 1840.295980][ T7202] BTRFS info (device loop2): enabling disk space caching [ 1840.307695][ T7202] BTRFS info (device loop2): disk space caching is enabled [ 1840.388761][ T28] audit: type=1800 audit(2000000022.134:3656): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19803" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 1840.549280][ T7202] BTRFS info (device loop2): auto enabling async discard [ 1840.581870][ T7202] BTRFS info (device loop2): rebuilding free space tree [ 1840.627068][ T7202] BTRFS info (device loop2): disabling free space tree [ 1840.650474][ T7202] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1840.684841][ T7202] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1841.034655][ T5770] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1841.378403][ T5784] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop2 scanned by udevd (5784) [ 1841.777762][ C1] vkms_vblank_simulate: vblank timer overrun [ 1842.215280][ C1] vkms_vblank_simulate: vblank timer overrun [ 1842.338095][ C1] vkms_vblank_simulate: vblank timer overrun [ 1842.750110][ T7377] netlink: 'syz.4.19841': attribute type 1 has an invalid length. [ 1843.234474][ T7402] loop0: detected capacity change from 0 to 8 [ 1843.265020][ T7402] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1843.290449][ T7408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19850'. [ 1843.304511][ T5784] udevd[5784]: incorrect cramfs checksum on /dev/loop0 [ 1843.353876][ T7402] cramfs: Error -3 while decompressing! [ 1843.378268][ T5784] udevd[5784]: incorrect cramfs checksum on /dev/loop0 [ 1843.392306][ T7402] cramfs: ffffffff973fa368(26)->ffff88805cc60000(4096) [ 1843.427693][ T7402] cramfs: Error -3 while decompressing! [ 1843.449718][ T7402] cramfs: ffffffff973fa382(26)->ffff8880775a6000(4096) [ 1843.465829][ T7402] cramfs: Error -3 while decompressing! [ 1843.481786][ T7402] cramfs: ffffffff973fa39c(16)->ffff888059009000(4096) [ 1843.498830][ T7402] cramfs: Error -3 while decompressing! [ 1843.514273][ T7402] cramfs: ffffffff973fa368(26)->ffff88805cc60000(4096) [ 1843.561136][T11067] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1843.740212][T11067] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1843.756868][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1843.765953][T11067] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1843.817009][T11067] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1843.831038][T11067] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1843.853703][T11067] usb 4-1: SerialNumber: syz [ 1843.870738][ T7433] loop2: detected capacity change from 0 to 4096 [ 1843.910293][ T7433] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1844.045536][ T7433] ntfs3: loop2: failed to convert "c46c" to ascii [ 1844.080652][T11067] usb 4-1: 0:2 : does not exist [ 1844.192386][T11067] usb 4-1: USB disconnect, device number 73 [ 1844.333654][ T6021] udevd[6021]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1844.558075][ T7484] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19865'. [ 1844.671088][ T7488] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1844.964750][ T7502] loop0: detected capacity change from 0 to 512 [ 1845.063297][ T7502] EXT4-fs (loop0): mounted filesystem 00000088-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1845.165104][ T7502] ext4 filesystem being mounted at /4907/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1845.178948][ T7521] usb usb9: usbfs: process 7521 (syz.2.19876) did not claim interface 0 before use [ 1845.298487][ T7502] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.19870: directory missing '..' [ 1845.476792][ T5769] EXT4-fs (loop0): unmounting filesystem 00000088-0000-0000-0000-000000000000. [ 1845.703722][ T7545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19883'. [ 1845.739441][ T7545] veth6: entered promiscuous mode [ 1845.752972][ T7545] veth6: entered allmulticast mode [ 1846.412752][ T7540] loop2: detected capacity change from 0 to 32768 [ 1846.451908][ T7540] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.19884 (7540) [ 1846.493990][ T7540] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1846.518847][ T7540] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1846.536684][ T7540] BTRFS info (device loop2): force clearing of disk cache [ 1846.583763][ T7540] BTRFS info (device loop2): enabling auto defrag [ 1846.604192][ T7540] BTRFS info (device loop2): max_inline at 0 [ 1846.620343][ T7540] BTRFS info (device loop2): enabling ssd optimizations [ 1846.647686][ T7540] BTRFS info (device loop2): using spread ssd allocation scheme [ 1846.655538][ T7540] BTRFS info (device loop2): using free space tree [ 1846.905814][ T7540] BTRFS info (device loop2): rebuilding free space tree [ 1847.238334][ T5770] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1847.386763][ T5784] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (5784) [ 1848.350037][ T7678] loop0: detected capacity change from 0 to 4096 [ 1848.398791][ T7678] ntfs: (device loop0): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 1848.447328][ T7678] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1848.474119][ T7678] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1848.532376][ T7678] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1848.596728][ T7678] ntfs: volume version 3.1. [ 1848.606474][ T7699] loop3: detected capacity change from 0 to 64 [ 1848.643405][ T7678] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 1848.679054][ T7678] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1848.736755][ T7678] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 1848.754816][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 1848.789150][ T7678] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1848.800007][ T7707] loop2: detected capacity change from 0 to 256 [ 1848.817186][ T7707] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 1848.840574][ T7678] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5. [ 1848.852398][ T7678] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1849.466751][ T7742] loop2: detected capacity change from 0 to 8 [ 1849.532459][ T7742] cramfs: bad data blocksize 3222268820 [ 1849.546127][ T7742] cramfs: Error -3 while decompressing! [ 1849.572239][ T7742] cramfs: ffffffff973fe39c(16)->ffff8880bfe37000(4096) [ 1849.609349][ T7742] cramfs: bad data blocksize 4165569313 [ 1849.629759][ T7742] cramfs: bad data blocksize 3825676623 [ 1849.659142][ T7742] cramfs: bad data blocksize 4294480561 [ 1849.678360][ T7742] cramfs: bad data blocksize 1076736 [ 1849.688458][ T7742] cramfs: bad data blocksize 485460736 [ 1849.706363][ T7742] cramfs: bad data blocksize 3808479469 [ 1849.723075][ T7754] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1849.739496][ T7742] cramfs: bad data blocksize 3222268820 [ 1849.778920][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19936'. [ 1850.673596][ T7811] tmpfs: Bad value for 'mpol' [ 1850.857287][ T7821] ip6t_srh: unknown srh match flags 4000 [ 1851.390274][ T7854] loop4: detected capacity change from 0 to 512 [ 1851.399959][ T7854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1851.461932][ T7854] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1851.515346][ T7854] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1851.587617][ T7854] System zones: 0-1, 15-15, 18-18, 34-34 [ 1851.621067][ T7854] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1851.632837][ T7863] loop2: detected capacity change from 0 to 1764 [ 1851.663698][ T7854] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1851.710833][ T7854] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1851.730842][ T7854] EXT4-fs (loop4): 1 truncate cleaned up [ 1851.738191][ T7854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1852.020271][T18154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1852.449069][ T7911] loop4: detected capacity change from 0 to 64 [ 1852.541854][ T7911] syz.4.19980: attempt to access beyond end of device [ 1852.541854][ T7911] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1852.611780][ T7911] Buffer I/O error on dev loop4, logical block 512, async page read [ 1852.618633][ T7922] loop0: detected capacity change from 0 to 128 [ 1852.644656][ T7911] syz.4.19980: attempt to access beyond end of device [ 1852.644656][ T7911] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1852.650470][ T7922] EXT4-fs: Ignoring removed nobh option [ 1852.696908][ T7911] Buffer I/O error on dev loop4, logical block 56576, async page read [ 1852.738181][ T7922] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1852.781113][ T7922] ext4 filesystem being mounted at /4930/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1853.019382][ T5769] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1853.309871][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.894062][ T7917] loop3: detected capacity change from 0 to 40427 [ 1853.931292][ T7917] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 1853.938353][ T7917] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1853.986243][ T7917] F2FS-fs (loop3): build fault injection attr: rate: 2, type: 0x7ffff [ 1853.998424][ T7917] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 1854.029150][ T7917] F2FS-fs (loop3): invalid crc value [ 1854.077661][ T7917] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1854.310018][ T7917] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1854.337368][ T7917] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1854.499261][ T7917] f2fs_printk: 10 callbacks suppressed [ 1854.499283][ T7917] F2FS-fs (loop3): inject orphan in f2fs_acquire_orphan_inode of __f2fs_tmpfile+0x1a8/0x340 [ 1854.924363][ T7980] loop4: detected capacity change from 0 to 32768 [ 1855.316595][ T8035] loop0: detected capacity change from 0 to 128 [ 1855.358247][ T8035] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1855.445699][ T8035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1855.807134][ T8045] loop4: detected capacity change from 0 to 4096 [ 1855.875592][ T8045] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1856.094131][ T8045] ntfs3: loop4: failed to convert "c46c" to cp857 [ 1856.736882][T11067] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1856.942229][T11067] usb 3-1: Using ep0 maxpacket: 32 [ 1856.949937][T11067] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1856.983003][T11067] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1857.013757][T11067] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.032702][T11067] usb 3-1: Product: syz [ 1857.051941][T11067] usb 3-1: Manufacturer: syz [ 1857.072997][T11067] usb 3-1: SerialNumber: syz [ 1857.096155][T11067] usb 3-1: config 0 descriptor?? [ 1857.121621][T11067] usb 3-1: bad CDC descriptors [ 1857.129248][T11067] usb 3-1: unsupported MDLM descriptors [ 1857.199457][ T8135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20042'. [ 1857.266516][ T8137] loop3: detected capacity change from 0 to 512 [ 1857.316400][ T8137] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0022] [ 1857.329242][ T8137] System zones: 1-12 [ 1857.383051][ T8137] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.20043: Directory hole found for htree index block 0 [ 1857.436268][ T8137] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 1857.447039][ T8137] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.20043: Directory hole found for htree index block 0 [ 1857.450827][T11067] usb 3-1: USB disconnect, device number 62 [ 1857.480118][ T8137] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1857.509926][ T8137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1857.575530][ T8137] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 1857.619050][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1857.679422][T18563] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1857.906163][T18563] usb 1-1: Using ep0 maxpacket: 32 [ 1857.935104][T18563] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1857.954843][T18563] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.989566][T18563] usb 1-1: config 0 descriptor?? [ 1858.003595][T18563] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1858.401292][T18563] gspca_sunplus: reg_w_riv err -71 [ 1858.422413][T18563] sunplus: probe of 1-1:0.0 failed with error -71 [ 1858.461996][T18563] usb 1-1: USB disconnect, device number 48 [ 1858.893932][ T8233] loop4: detected capacity change from 0 to 1024 [ 1858.908492][ T8233] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1858.966338][ T8233] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #3: block 5: comm syz.4.20066: lblock 5 mapped to illegal pblock 5 (length 1) [ 1858.994199][ T8233] __quota_error: 9 callbacks suppressed [ 1858.994217][ T8233] Quota error (device loop4): write_blk: dquota write failed [ 1859.073619][ T8233] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1859.125228][ T8233] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1859.125313][ T8233] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.20066: Failed to acquire dquot type 0 [ 1859.126923][ T8233] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 5: comm syz.4.20066: lblock 5 mapped to illegal pblock 5 (length 1) [ 1859.127246][ T8233] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 1859.127314][ T8233] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1859.127358][ T8233] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.20066: Failed to acquire dquot type 0 [ 1859.127949][ T8233] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.20066: Freeing blocks not in datazone - block = 0, count = 4096 [ 1859.128364][ T8233] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 5: comm syz.4.20066: lblock 5 mapped to illegal pblock 5 (length 1) [ 1859.166885][ T8233] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 1859.166966][ T8233] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1859.167008][ T8233] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.20066: Failed to acquire dquot type 0 [ 1859.171098][ T8233] EXT4-fs (loop4): 1 orphan inode deleted [ 1859.172660][ T8233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1859.226457][ T8233] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 5: comm syz.4.20066: lblock 5 mapped to illegal pblock 5 (length 1) [ 1859.232454][ T8233] Quota error (device loop4): find_next_id: Can't read quota tree block 5 [ 1859.577453][T18154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1859.746410][ T8265] loop4: detected capacity change from 0 to 2048 [ 1859.805978][ T8270] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1859.844007][ T8265] NILFS error (device loop4): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1859.921360][ T8265] Remounting filesystem read-only [ 1860.177255][ T8288] netlink: 'syz.4.20080': attribute type 3 has an invalid length. [ 1860.213890][ T8288] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.20080'. [ 1860.579349][ T8311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20088'. [ 1860.617271][ T8311] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20088'. [ 1861.241674][ T8345] random: crng reseeded on system resumption [ 1861.251931][ T8347] binder: binder_mmap: 8346 200000001000-20000000b000 bad vm_flags failed -1 [ 1861.665810][ T8327] loop4: detected capacity change from 0 to 40427 [ 1861.691085][ T8327] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 1861.726180][ T8327] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1861.763304][ T8327] F2FS-fs (loop4): build fault injection attr: rate: 2, type: 0x7ffff [ 1861.771701][ T8327] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 1861.840139][ T8327] F2FS-fs (loop4): invalid crc value [ 1861.888545][ T8327] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1861.942611][ T8374] netlink: 'syz.0.20108': attribute type 4 has an invalid length. [ 1862.089865][ T8377] binder: 8376:8377 ioctl c0046209 0 returned -22 [ 1862.108322][ T8327] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1862.115458][ T8327] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1862.348965][ T8327] F2FS-fs (loop4): inject orphan in f2fs_acquire_orphan_inode of __f2fs_tmpfile+0x1a8/0x340 [ 1862.563523][ T8397] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 1862.574638][ T8397] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 1863.339050][ T8441] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20129'. [ 1863.780157][ T8465] loop0: detected capacity change from 0 to 512 [ 1863.821596][ T8465] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1863.882851][ T8465] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1863.957017][ T8465] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.20136: bg 0: block 248: padding at end of block bitmap is not set [ 1864.029518][ T8465] Quota error (device loop0): write_blk: dquota write failed [ 1864.037072][ T8465] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1864.084259][ T8465] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.20136: Failed to acquire dquot type 1 [ 1864.148478][ T8465] EXT4-fs (loop0): 1 truncate cleaned up [ 1864.185310][ T8465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1864.469257][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1864.523231][T20333] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1864.606288][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20150'. [ 1864.723674][T20333] usb 5-1: Using ep0 maxpacket: 32 [ 1864.740267][T20333] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1864.765762][T20333] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.789430][T20333] usb 5-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1864.822102][T20333] usb 5-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 1864.850665][T20333] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1864.873522][T20333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.905811][T20333] usb 5-1: Product: syz [ 1864.910112][T20333] usb 5-1: Manufacturer: syz [ 1864.933808][T20333] usb 5-1: SerialNumber: syz serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.