last executing test programs: 16m43.683296061s ago: executing program 0 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, 0x0, r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file1\x00', 0x0) getdents(r2, 0x0, 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00') 16m43.489304152s ago: executing program 0 (id=680): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 16m43.090883931s ago: executing program 0 (id=682): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x7ff, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x64) 16m42.938143361s ago: executing program 0 (id=684): syz_mount_image$ntfs3(&(0x7f0000000080), &(0x7f000001f740)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfe, 0x1f755, &(0x7f000005e640)="$eJzs3Qm4DfX/B/Dv7Ps+R0hckiRkj2TfZd9Csu97tpBsyZbsIdmSbElCJUkkqSS77EmSJGlDKv6Puefe7sKvpu3bf7xfz+Mz58w9Z+ZzlvfMnHFmzlf1JtZqULl+QkJCAmFlkugiSWUoGUquWImX+fi4K/HheUIIQwipW21yg/HPzyxxdZyZbf1Dg5bl2NBHa7TafEMi2+zmX50rdGJbhm2ZvrrcoGOn3gmdeid079EnoVVC6x49+rRq3bVdQttOvbvkT6jTtV2r3u0SOnXv3a5Xqj+379qjZ88BCa26tzXUnr3a9e6d0Kr7gIQu7QYk9OmR0KfXgIRWHVp16p6QP3/+BEMl8Ac1XEq7AwAAAAAAAAAAAAAAAAAA+HtcuUKuMLSbAAAAAAAAAAAAAAAAAAAAgL+kcrUalQoQLvk6QxhSnDBkBpPiYP8UF5NuaRNCWgaXMga1atKlsovydr20n7neULxWE9f4AkIBQkjH5OmzpHpwiSFCME743fmQnvEJdU0cJM2X53KSmqQyaRC/PjTeO0PKpmqkdHxYNmnEOe6aQ6dM4jOzItV0uHSPJ3k6duIggaQeOgwbDK9cuXLlWk/RPyN9n/DfFvZ9lnRKj6Rh6vcZd938N06Tfy6eDjbF5P/p/PdMnj5L6oXNv536eUiar5yc/5qkE+lFesXHX285cL3nNe0wO3MlxfP6/wVLuwGgik2Xf/Z/5J8Nm38h/fLgX8t/cvOJw5T5r0F6kA6kMulEupJ28fHXy3+Z+DA5/2mmmzTMXjbxTsg//P+RPv9cPP/H0uRfjC8DkkbZ8bwk5b/An1z/p97OZ0id0DlPLWn6EpeTNCI9SFfSl3Qj7YLpDk2eD0vaJs+RH3r1cSR9HvCDvxaJJ8MncxmXMIlzEdz4/YNxiTcQrm6/J7Ak1W3S/o3El5UFkufPEzd+qTcZQAaSLqQV6RosjZK2R64u+3In314gevIzHX+d4o98aPL4jMnbgxn/8HKI//2bQITx6fLPx/O/4Rqf//k06/+/K/9/y3Z+/Kx/Kdfz5Ugf0of0IhVJO9I+Pj71coD7w8uBMST9ciAYF3I5EPpzhpp66DCVg+Hfs52B9f+NLf36XwjyzyW+NdKs/4U0+//S5j/IbDyXB4q0yZdymDQ+12/v7OT7/fY5giEV//r6P5g+w+UPrtdJlbff3u9Jd0zOW3xHXF479dBhKwTDiYSQxlcv8InLjeLxu+Qk1UhhUiB4HEz8iWHiz0/u+L+UTWZMs9dmXrxHhi+b9AymUpWkeMKvMUyav8NUCq6vSNpu4BO3M+Q0fSb1krT/B25k6ff/ifH1f51rfP4X/+X9fyn3/4f+XBDPR9nkx5Xo6ueC8qQT6UO6kVakZ+j1cdk04x2mSjD8//W5PwnW/ze29Ot/KZ7/NdfY/pf+oe3/lDmvETbnaf4jLWn6QpDzHqQH6RNc/69u919vOyTt0IlP5+9dziD/N7b0+Zfj+e9/jfzL1P7/j/sT+/9TS7lfoDxpRdqSCsG+wd4kMU+p96OxyZeGpto+/22yl+MXk7fPz2VLPYxLmhsbP8vCf2s7Afm/saXPvxLkX0m9sz/+yVT5e77/k5C2C+Z3t///lv8XCOZ7dfu/PmlH2pC+pBdplybfv+UhaX382+fvxCejJ5N6eHVqFUl94pRLvOVEQsgx8tt+gg3Jn7+v3i7xNi5JvZ9gRfxf4qP1448/8RsbdXOuCp6fpOHQ+O0GEUKqkWrpbj/vyNHyLPPbMGmR1faat+fIOZe7ePU2SUOSZvokxevNxh/fe+S3/QuLUzy+pNvbaR7fjPg/EmxRJc4/d9Kb6zrzTnu76z0HaW93vcee9nH8t5bDtKT//K/+j+//qdQ+/3N/Iv9JnSYOU37+b0h6kgqkFekdz/+1tsuT1uK//b8/e81h9oQxwTBpOkRI3H5IiO+Hy0mqke6kPekRv1fSwk/vdHOXhwcfPpj2cf+770us/29s6df/Wnz//1A2/f4/7e9Z/9tpu/iX1v/BfK/mvxLpT/qQdqQ7aRuszxI/6yTmtjHz+/v1qzKJ/67KlPgISEtSK/78xWvI/nLFFw0il5PUJq1JZ1IteR/F3z39uqRvsF+kFeFI5vj0OwafsP769K9+vqpH2pGepBXpFSxhU8P6978k/fpfJyRY/ydcY/+//g/s/6P9vZzUn/uZ5Es3xvsT6/8bW/r1v/E/8m8g/xGD/N/Y0uff/B/5N5H/iEH+b2zp82/9j/xbyH/EIP83tvT5t4P8EzKapM4/k3yP3273d+T/xsjZfxXyf2NLn38H+b+BIP83tvT5d5H/Gwjyf2NLn38P+b+BIP83tvT595H/Gwjyf2NLn/8Y8n8DQf5vbOnznwH5v4Eg/ze29Pm/Cfm/gSD/N7b0+U88/7dBerLpj//L+Dcc/5frTx7/Wyt+/M/fe/xL4vGs/YOnIvE4w8bJx7PWTr6vQ9Ic/5PiuOCE+JOUO35YU7rvGDGpH3DK42jPJc+XJTuS51s31W1TzndD/B8J9tMUiD/v8eNj49NN9cDjz8WVNFK+/n78CMfGKY7HDTuda32vKu3jxXL+v+j6+b/W+b8zRST/KY+vmxj/DmJSDgtcI/8eSZ3DBJL+Qfz/fJ9j/X9ju37+h14j/5n/huN/w+T/t/P/MMnn//mnjk+dmDQ/9rfzDSYuB+olTyPtcqBsivMDZIkPE4KjJINjJefdEn9GU/pvLSdw/s8bW+Lxv3nS5P/q8mA0m/b8P58Fw99ynygp9yWWtwrO83u9YcI1jvtn/+d6P7GbtOcD/L35pJ3e1fnmC+7ZPv57H4nbzVfzbqc47v/cHzif77Gkc/sk550hLYMOCbk5fv13+4s/C5n55P7Itfq75c9OPy0+7fQLpvjjZ8nLox3J2zSJn4Pk+KWr9703/rgbJ/+dD8ZljP9/MRF5krNG44bVKiZONcW4KtcYV7N2RfJ1uXgH/43l4I3qs+vkP/35/wVyPBj+hfynEyb/f3e+hl7nvOBJ0p73N2l6ScPszJCg+387N8Pibf09uTn+1ycBfwnd98/x6+a/Zbrz//+1/F/rp2b+kfyndZ313/XO97kh/pok4sjq+Pir2/PLCCE1giMSE9fJzYKziPckzeK/4pOPdArOKt6BtAv+dSeFSSFSkBQmRUkRUpgUJkVIsxTLodSXy5AypNnfOs307y8+zfvreJr3l/BX319Xnk31/oL/tuvn/+J/bP3/h7f/4+vrpJ/NuTrfJtfJf5j1f5qf4SHZmaH/c/1/dZ594svvicl/54Nxf3X5HXz20ETSt3e7Xvn7t+rTp1dBEh9c42+FSHwQSJ1LrP9p+++t/9kg/7mvsf5vXOWP5z/pd3/+fP4T10e/l/+084mv9kjuWxOH6bf/C6eZD/lDy5nw80kM3PWWM0mXyqZ84CmmlzTMzg37Bz9nHCf/zucMuJ7/Xv4T1//vhVz/p/29r7TDMPnvmaKbBmly+XvzSVpfJ53zOSmXSnIu85M2we+CJt4i7HZA0nSThtmZEf+P9wNg/U/bfy3/JJ7B4iTtz8NKKe4H0SDRbgCokkLkP/H3JZD/KJFpNwBUySHyrwQV+Y8ShXYDQJUSIv+Je76R/yhRaTcAVKkh8p/4zVvkP0o02g0AVVqI/Cd+rx35jxKddgNAlR4i/0ZQkf8oMWg3AFQZIfJvBhX5jxKTdgNAlRki/1ZQkf8osWg3AFRZIfKf+AU45D9K0h2SDTcUO0T+g7NgIf+R4tBuAKhyQuQ/8Vc2kf8ocWk3AFS5IfIfnP0K+Y8Uj3YDQJUXIv/BkUTIf6T4tBsAqvwQ+Y8FFfmPkhjtBoCqWIj8Zwgq8h8lGWg3AFRlCJH/m4KK/EfJTbQbAKpuCpH/xLNlIv9RkpF2A0BVxhD5zxRU5D9KMtFuAKjKFCL/mYOK/EdJZtoNAFWZQ+Q/8Qz8yH+U3Ey7AaDq5hD5T/zFK+Q/SrLQbgCoyhIi/4m/SIf8R8kttBsAqm4Jkf+sQUX+oyQr7QaAqqwh8p8tqMh/lGSj3QBQlS1E/hN/pQT5j5Jr/SoT3DgSQuQ/e1CR/yjJTrsBoCp7iPznCCryHyU5aDcAVOUIkf/EH6RF/qPkVtoNAFW3hsh/zqAi/1GSk3YDQFXOEPm/LajIf5TcRrsBoOq2EPnPFVTkP0py0W4AqMoVIv+3BxX5j5LbaTcAVN0eIv+5g4r8R0lu2g0AVblD5P+OoF65MhT5j4w7aDcAVN0RIv95gor1f5Tkod0AUJUnRP7vDCryHyV30m4AqLozRP7zBhX5j5K8tBuAf87F379J3hD5zxdU5D9K8tFuAKjKFyL/+YOK/EdJftoNAFX5Q+T/rqAi/1FyF+0GgKq7QuS/QFCR/ygpQLsBoKpAiPwXDCryHyUFaTcAVBUMkf9CQUX+o6QQ7QaAqkIh8l84qMh/lBSm3QBQVThE/osEFfmPkiK0GwCqioTIf9GgIv9RUpR2A0BV0RD5LxZU5D9KitFuAKgqFiL/dwcV+Y+Su2k3AFTdHSL/wRjkP1KK024AqCoeIv8lgor8R0kJ2g0AVSVC5P+eoCL/kcAkDu6h3QdQdU+I/JcMKvIfJSVpNwBUlQyR/3uDivxHyb20GwCq7g2R/1JBRf6jpBTtBoCqUiHyXzqoyH+UlKbdAFBVOkT+ywQV+Y+SMrQbgL8JM/TP3KtMiPyXDSryHyVlaTcAVJUNkf9yQUX+o6Qc7QaAqnIh8l8+qMh/lJSn3QBQVT5E/isEFfmPkgq0GwCqKoTIf8WgIv9RUpF2A0BVxRD5rxRU5D9KKtFuAKiqFCL/lYOK/EdJZdoNAFWVQ+S/SlCR/yipQrsBoKpKiPxXDSryHyVVaTcAVFUNkf9qQUX+o6Qa7QaAqmoh8l89qMh/lFSn3QBQVT1E/u8LKvIfJffRbgCoui9E/msEFfmPkhq0GwCqaoTIf82gIv9RUpN2A0BVzRD5rxVU5D9KatFuAKiqFSL/tYOK/EdJbdoNAFW1Q+S/TlCR/yipQ7sBoKpOiPzXDSryHyV1aTcAVNUNkf96QUX+o6Qe7QaAqnoh8l8/qMh/lNSn3QBQVT9E/hsEFfmPkga0GwCqGoTIf8OgIv9R0pB2A0BVw/+d/1SHhzUKKvIfJY1oNwBUNQqx/r8/qMh/lNxPuwGg6v4Q+W8cVOQ/ShrTbgCoahzkX/lD+W8SVOQ/SprQbgCoahJi/d80qMh/lDSl3QBQ1TRE/h8IKvIfJQ/QbgCoeiBE/psFFfmPkma0GwCqmoXI/4NBRf6j5EHaDQBVD4bIf/OgIv9R0px2A0BV8xD5bxFU5D9KWtBuAKhqESL/LYOK/EdJS9oNAFUtQ+S/VVCR/yhpRbsBoKpVmvwLQb12/lsHFfmPkta0GwCqWodY/7cJKvIfJW1oNwBUtQmR/7ZBRf6jpC3tBoCqttfMf7JU+W8XVOQ/StrRbgCoahdi/d8+qMh/lLSn3QBQ1T5E/jsEFfmPkg60GwCqOoTIf8egIv9R0pF2A0BVxxD57xRU5D9KOtFuAKjqFCL/nYOK/EdJZ9oNAFWdQ+S/S1CR/yjpQrsBoKpLiPx3DSryHyVdaTcAVHX9X/lflDr/3YKK/EdJN9oNAFXdQqz/uwcV+Y+S7rQbAKq6h8h/j6Ai/1HSg3YDQFWPEPnvGVTkP0p60m4AqOoZIv8PBRX5j5KHaDcAVD0UIv+9gor8R0kv2g0AVb1C5L93UJH/KOlNuwGgqneI/PcJKvIfJX1oNwBU9QmR/75BRf6jpC/tBoCqviHy3y+oyH9E8LQbAPr6hcj/w0FF/qPkYdoNAFUPh8h//6Ai/1HSn3YDQFX/EPkfEFTkP0oG0G4AqBoQIv8Dg4r8R8lA2g3Av2pomusDQ+T/kaAi/1HyCO0GgKpHQuR/UFCR/ygZRLsBoGpQiPw/GlTkP0oepd0AUPVoiPwPDiryHyWDaTcAVA0Okf8hQUX+o2QI7QaAqiEh8p+47xD5j5K0+4MhyjQj7ZihIfI/LKjIf5QMo90AUDUsRP6HBxX5j5LhtBsAqoaHyP9jQUX+o+Qx2g0AVY+FyP+IoCL/UTKCdgNA1YgQ+X88qMh/lDxOuwGg6vEQ+R8ZVOQ/SkbSbgCoGhki/6OCivxHySjaDQBVo0Lkf3RQkf8oGU27AaBqdIj8jwkq8h8lY2g3AFSNCZH/sUFF/qNkLO0GgKqxIfL/RFCR/yh5gnYDQNUTIfI/LqjIf5SMo90AUDUuRP6fDCryHyVP0m4AqHoyRP7HBxX5j5LxtBsAqsaHyP+EoCL/UTKBdgNA1YQQ+Z8YVOQ/SibSbgComhgi/5OCivxHySTaDQBVk0Lkf3JQkf8omUy7AaBqcoj8Twkq8h8lU2g3AFRNCZH/qUFF/qNkKu0GgKqpIfL/VFCR/yh5inYDQNVTIfI/LajIf5RMo90AUDUtRP6nBxX5j5LptBsAqqaHyP+MoCL/UTKDdgNA1YwQ+X86qMh/lDxNuwGg6ulr5r/M0Gvlf2ZQkf8omUm7AaBqZoj1/zNBRf6j5BnaDQBVz4TI/6ygIv9RMot2A0DVrBD5nx1U5D9KZtNuAKiaHSL/c4KK/EfJHNoNAFVzQuR/blCR/yiZS7sBoGpuiPzPCyryHyXzaDcAVM0Lkf9ng4r8R8mztBsAqp4Nkf/5QUX+o2Q+7QaAqvkh8v9cUJH/KHmOdgNA1XMh8r8gqMh/lCyg3QBQtSBE/p8PKvIfJc/TbgCoej5E/hcGFfmPkoW0GwCqFobI/6KgIv9Rsoh2A0DVohD5XxxU5D9KFtNuAKhaHCL/S4KK/EfJEtoNAFVLQuR/aVCR/yhZSrsBoGppiPy/EFTkP0peoN0AUPVCiPwvCyryHyXLaDcAVC0Lkf8Xg4r8R8mLtBsAql4Mkf/lQUX+o2Q57QaAquUh8v9SUJH/KHmJdgNA1Ush8r8iqMh/lKyg3QBQtSJE/l8OKvIfJS/TbgCoejlE/lcGFfmPkpW0GwCqVobI/6qgJuVf+DfbhH/IKtoNAFWrQuR/dVCx/o+S1bQbgH9XmgO+VofI/ytBRf6j5BXaDQBVr4TI/6tBRf6j5FXaDQBVr4bI/2tBRf7/W6S/dO/X/rY+gCLmz97xtRD5XxNU5D9K1tBuAKhaEyL/rwcV+Y+S12k3AFS9HiL/a4OK/EfJWtoNAFVrSWWZ/MH8vxFU5D9K3qDdAFD1Roj1/7qgIv9Rso52A0DVuhD5fzOoyH+UvEm7AaDqzRD5Xx9U5D9K1tNuAKhaHyL/bwUV+Y+St2g3AFS9FSL/G4KK/EfJBtoNAFUbQuR/Y1CR/yjZSLsBoGpjiPy/HVTkP0rept0AUPV2iPxvCiryHyWbaDcAVG0Kkf93gor8R8k7tBsAqt4Jkf/NQU2R/6z/WpvwD9lMuwGganOI/L8bVKz/o+Rd2g0AVe+GyP+WoCL/UbKFdgNA1ZYQ+X8vqMh/lLxHuwGg6r0Q+X8/qMh/lLxPuwGg6v0Q+f8gqMh/lHxAuwGg6oMQ+d8aVOQ/SrbSbgCo2hoi/x8GFfn//0e/7l8+/Ff7gP+aD0Pkf1tQkf//sOsH/Tq2/TN9wP8T20Lk/6OgIv9R8hHtBoCqj0Lkf3tQkf8o2U67AaBqe4j87wgq8h8lO2g3AFTtCJH/nUFF/qNkJ+0GgKqdIfK/K6jIf5Tsot0AULUrRP53BxX5j5LdtBsAqnaHyP+eoCL/UbKHdgNA1Z4Q+d8bVOQ/SvbSbgCo2hsi//uCivxHyT7aDQBV+0Lk/+OgIv9R8jHtBoCqj0Pkf39Qkf8o2U+7AaBqf4j8Hwgq8h8lB2g3AFQdSMp/qlhfO/8Hg4r8R8lB2g0AVQdDrP8PBRX5j5JDtBsAqg6FyP/hoCL/UXKYdgNA1eEQ+T8SVOQ/So7QbgCoOhIi/0eDivxHyVHaDQBVR0Pk/5OgIv9R8gntBoCqT0Lk/1hQkf8oOUa7AaDqWLr8Z7tu/j8NKvIfJZ/SbgCo+pQwhB/q24Qk2IljfEIIS4gtB9cykitMNsKwwRUhgRCScPWylvHqdTvdeOIn3p5JHO9erZqfeNuU44hP3mK85NtpybdjjqUaRzKSJcRNNf/sv81/XrrxAAAAAAAAAPCHpfysnvpzOwAAAAAAAAD8f1StVsXGuYmSbnxuQsgakZBTVuJ1g+xnrnV/Pl47knrBJSGpll2Ut+ul/cx1h/HvGxA1cSDGr8pcTlKO9CF9SC9SkbQj7YOxDEn8PoIcfj5ppJxPedKKtCUVSFfSl/QOxkrxv4ukJanzpx5P2TTzkYL5dCJ9SDfSivQkUnw+LUmNcNNPiE8wIfX0hWD6PUgP0od0Il1J4vcmtD/Yv0H+x/NkJ/VfifQnfUg70p20JYlfs2D/xOvAp3rHpHwdapAepAOpHPTfLv56k/iwJakebj4943ftmvp54rmcpCapTBokTzmx/un3rZ3+/ZQ4/ZqkE+lFeiV+jyaeLCX8+yn965GQ9HrUJ+1IG9KX9CLt4vFR/8T02SDVJP6Kpny/NiQ9SQXSivQm7eLfDOT+jv6Tp9+I9Agy1420S55eY1Lxr04/eEUYLn9wPSH59W2QaroHirTJd/X+1xsmva5t49O9Op18wSvYPv7+zE/aXO0/1XcjmXR5LrG8VTC96w3T9p9AiJ0vuGfSfAoE47P+2enHH4ea4nE0STX9gsHrn+0PTj/p+UmefmJ7JPetqZ+n36ZfKBj/z02/cKrnz05+J8MfZ9BuAKjC639jw+t/Y8Prf2MzyNVPEw1IOVKLVCTlSD1SkbQg1UgtUpnUJvVITVKONCDVSG1S6x/qwE5xuWz82KOrqsaHOYMOGpB6pBopTxqSBqQSaUFqkGpB3/+8hBSXh6a4fCUuJ6lMqpEaQVe1SDlSk1T6F7r6TYEUl8sTEv8URUj5+MZwTlKblCfVSSVSgTQIXtuK/2p/Za9zOekj/tX339XeGgavcAPShLQgFUklUp9UCMbUIQ2Cd+I/pU6Ky9d+fRuR2qQGaRi8sv/+a9wyxeWyKT/jJD9/qfv7N7N7Vc80/enxy0nDnMFy5eoSho6h1xn/2+tbLVj2VSKNSQtSj9Qmtf+V5UqSiSkul/3d/sqRGqQGqU0qkHLSP//aXjUvxeVr56N8kNur77Y6/3Av17Lid/urRyqROsG6rX6QkDqkdvCc/juv8obr9Jf0YucklUg5CrlNsiNNS3L8ctIwsT96rn+EeuICMGeQhyqkCqkUbLs0DJ67GsnrkvrBtkOlYKn9j0ixJ2/o9f4AAADwH3PhyjX8tuoamjQq6Xq21He/3uY1AAAAAAAAAPyHnHO5iyl3VQ8K9lzzQ6sSQhrHxyWeE7BI/P8efTKGuGnOC5AxcVya8wH+3vWr6uZcFUxraIj5z2XSzz8Y9yfmP+/I0fIs89vu+rbx+RdI8f9xifPPkngTLtU5DoP6R+YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/8k5l7tImN+uDyKEMIQfWpUQ0jg+zieEsKQIYePXxhCXMIn3EdxgkDFxXOINhARCSAJLfvf6VXVzriIMw5OhIeY/l0k//2Dcn5j/vCNHy7NMMNNA2/j8CxBCyqaaf5bEm3A+ucJkS5p/UP/IfAAAAAAAAADoYghLOMITgYhEIjJRiEo0ohODmMQiNnGISzzikxjJQG4iGUkmkpncTLKQW0hWko0kkOwkB7mV5CS3kVzkdpKb3EHykDtJXpKP5Cd3kQKkIClECpMipCgpRu4mxUkJcg8pSe4lpUhpUoaUJeVIeVKBVCSVSGVShVQl1Uh1ch+pQWqSWqQ2qUPqknqkPmlAGpJG5H7SmDQhTckDpBl5kDQnLUjLP3X/R8gg8igZTIaQoWQYGU4eIyPI42QkGUVGkzFkLHmCjCNPkvFkAplIJpHJZAqZSp4i08h0MoM8TWaSZ8gsMpvMIXPJPPIsmU+eIwvI82QhWUQWkyVkKXmBLCMvkuXkJbKCvExWklVkNXmFvEpeI2vI62QteYOsI2+S9eQtsoFsJG+TTeQdspm8S7aQ98j75AOylXxItpGPyHayg+wku8husofsJfvIx2Q/OUAOkkPkMDlCjpJPQt7/Qpr792cIQxiWYRme4RmRERmZkRmVURmd0RmTMRlbsRmXcRmf8ZkMTAYmI5ORycxkZrIwWZisTFYmgUlgcjA5mJxMTiYXk4vJzeRm8jB5mLwMS/Iz+ZkCTEGmEFOIKcIUYYoxxZjiTAmmBFOSKcmUYkoxZZgyTDmmHFOBqcBUYioxVZgqTDWmOlOdqcHUYGoxtZg6TB2mHlOPacA0YBoxjZjGTGOmKdOUacY0Y5ozzZmWTEumNdOaacu0Zdoz7ZmOTEemM9OZ6cp0Zboz3ZmeTE+mF9OL6cP0Yfox/Zj+zABmAPMI8wjzKPMoM4SpwA5jhjPDmRHMCGYkM4oZxYxhxjJPME8wTzLjmQnMRGYSM4mZwkxlzjPTmOnMDGYGU4p9hpnFzGYS2LnMPGYeM5+ZzyxgFjALmUXMImYJs5R5gVnGLGOWMy8xLzEvMyuZVcwq5hXmFeY1Zg2zhlnLvMGsY9Yx65kLzAZmI/M2s4l5h9nMvMNsYd5jtjAfMFuZD5htzDZmO7Od2cnsZHYzu5m9zF7mY+Zj5gBzgDnEHGLGM0eZo8wx5hhznDnOnGBOMCeZk8wp5hRzmjnNnGHOMGeZs8w55lvmO+Zb5gfmB+Y8c4G5yFxkLjGXmF+YX5jLzOWr4Wev4lmeFVmRlVmZVVmV1VmdNVmTtVmbdVmX9VmfzcBmYDOyGdnMbGY2C5uFzcpmZRPY7GwONgebk83J5mJzsbnZ3GweNg+bl83L5mfzswXYAmwhthBbhC3KFmPvZouzJdh72JJsSbYUW5otw5Zly7Hl2ApsRbYSW5mtzFZlq7LV2epsDbYGW4utxfbI2y1vPXYYM5JpyF59ZRqzE5im7ESmGfsg25xtwU5hWrGt2alMW7Yd257twE5npjGd2dZ5u7Ld2O7sLKYn2z3vbKY324edy/RjH2b7swPYgewj7CC2bd7B7BB2ITOMHc4uYUawj7Mj2VHscqYie/UVq8Q+yY5nJ7AT2Unsa8wUdir7FDuNnc7OYJ9mZ7LPsLPY2ewcdi47j32Wnc8+xy5gn2cXsovYxewSdin7AruMfZFdzr7ErmBfZleyq9jV7Cvsq+xr7Br2dXYt+wa7jn2TXc++xW5gN7Jvs5vYd9jN7LvsFvY99n32A3Yr+yG7jf2I3c7uYHeyu9jd7B52L7uP/Zjdzx5gD7KH2MPsEfYo+wl7jP2UPc5+xp5gP2dPsl+wp9gv2dPsV+wZ9mv2LPsNe479lv2O/Z79gf2RPc9eYC+yP7GX2J/ZX9hf2cvsFZZwDMdyHMdzAidyEidzCqdyGqdzBmdyFmdzDudyHudzMS4DdxOXkcvEZeZu5rJwt3BZuWxcApedy8HdyuXkbuNycbdzubk7uDzcnVxeLh+Xn7uLK8AV5ApxhbkiXFGuGHc3V5wrwd3DleTu5UpxpbkyXFmuHFeeq8BV5CpxlbkqXFWuGledu4+rwdXkanG1uTpcXa4eV59rwDXkGnH3c425JlxT7gGuGfcg15xrwbXkWnGtuTZcW64d157rwHXkOnGduS5cV64b153rwfXkenK9uF5cH64v14/rx/XnBnADuV+5y9wVbjA3hBvKDeOGc49xI7jHuZHcKG40N4Ybyz3BjeOe5MZzE7iJ3CRuMjeFm8o9xU3jpnMzuKe5mdwz3CxuNjeHm8vN457l5nPPcQu457mF3CJuMbeEW8q9wI2MT2nFH7j/29e4/7hg7tu5HdxObhe3m9vD7eX2cdu5/dx+7iB3kDvMHeaOcke5Y9wx7jh3nDvBneBOcie5U9wp7jR3mjvDneHOcme5c9y33E/c99wP3I/cee4Cd4H7ibvEXeJ+iT8HhGd4lud4nhd4kZd4mVd4ldd4nTd4k7d4m3d4l/d4n4/xGfib+Ix8Jj4zfzOfhb+Fz8pn4xP47HwO/lY+J38bn4u/nc/N38Hn4e/k8/L5+Pz8XX/5/r/XX0u+Jd+ab8235dvy7fn2fEe+I9+Z78x35bvy3fnufE++J9+L78X34fvw/fh+fH++Pz+QH8gP4gfxg/nB/FB+KD+cf4wfwT/Oj+RH8aP5MfxYfiw/jh/Hj+fH8xP5ifxkfjI/lZ/KT+On8TP4GfxMfiY/i5/Fz+Hn8PP4efx8fj6/gF/AL+QX8ov5xfxSfim/jF/GL+eX8yv4FfxKfiW/ml/Nv8q/yq/h1/Br+bX8On4dv55fz2/gN/Ib+U38Jn4zv5nfwm/h3+ff57fyW/lt/DZ+A7+D38Hv4nfxe/g9/D5+H7+f388f5A/yh/nD/FH+KH+MP8Yf54/zJ/gT/En+JH+KP8Wf5k/zZ/gz/Fn+LH+OP8d/x3/H/8D/wJ/nz/MX+Yv8Jf4S/wv/C3+Zv3x1s09gBVbgBV4QBVGQBVlQBVXQBV0wBVOwBVtwBVfwBV/IIGQQMgoZhcxCZiGLkEXIKmQVEoQEIYeQQ8gp3CbkEm4Xcgt3CHmEO4W8Qj4hv3CXUEAoKBQSCgtFhKJCMeFuobhQQrhHKCncK5QSSgtlhLJCOaG8UEGoKFQSKgtVhKpCNaG6cJ9QQ6gp1BJqC3WEukI9ob7QQGgoNBLuFxoLTYSmwgNCM+FBobnQQmj5t05/lDBaGCOMFZ4QxglPCuOFCcJEYZIwWZgiTBWeEqYJ04UZwtPCTOEZYZYwW5gjzBXmCc8K84XnhAXC88JCYZGwWFgiLBVeEJYJLwrLhZeEFcLLwkphlbBaeEV4VXhNWCO8LqwV3hDWCW8K64W3hA3CRuFtYZPwjrBZeFfYIrwnvC98IGwVPhS2CR8J24Udwk5hl7Bb2CPsFfYJHwv7hQPCQeGQcFg4IhwVPhGOCZ8Kx4XPhBPC58JJ4QvhlPClcFr4SjgjfC2cFb4RzgnfCt8J3ws/CD8K54ULwkXhJ+GS8LPwi/CrcFm4IhCREVmRE3lREEVREmVREVVRE3XREE3REm3REV3RE30xJmYQbxIzipnEzOLNYhbxFjGrmE1MELOLOcRbxZzibWIu8XYxt3iHmEe8U8wr5hPzi3eJBcSCYiGxsFhELCoWE+8Wi4slxHvEkuK9YimxtFhGLCuWE8uLFcSKYiWxslhFrCpWE6uL94k1xJpiLbG2WEesK9YT64sNxIZiI/F+sbHYRGwqPiA2Ex8Um4stxJZiK7G12EZsK7YT24sdxI5iJ7Gz2EXsKnYTu4s9xJ7iQ2IvsbfYR+wr9hMfFvuLA8SB4iPiIPFRcbA4RBwqDhOHi4+JI8THxZHiKHG0OEYcKz4hjhOfFMeLE8SJ4iRxsjhFnCo+JU4Tp4szxKfFmeIz4ixxtjhHnCvOE58V54vPiQvE58WF4iJxsbhEXCq+IC4TXxSXiy+JK8SXxZXiKnG1+Ir4qviauEZ8XVwrviGuE98U14tviRvEjeLb4ibxHXGz+K64RXxPfF/8QNwqfihuEz8St4s7xJ3iLnG3uEfcK+4TPxb3iwfEg+Ih8bB4RDwqfiIeEz8Vj4ufiSfEz8WT4hfiKfFL8bT4lXhG/Fo8K34jnhO/Fb8Tvxd/EH8Uz4sXxIviT+Il8WfxF/FX8bJ4RSQSI7ESJ/GSIImSJMmSIqmSJumSIZmSJdmSI7mSJ/lSTMog3SRllDJJmaWbpSzSLVJWKZuUIGWXcki3Sjml26Rc0u1SbukOKY90p5RXyifll+6SCkgFpUJSYamIVFQqJt0tFZdKSPdIJaV7pVJSaamMVFYqJ5WXKkgVpUpSZamKVFWqJlWX7pNqSDWlWlJtqY5UV6on1ZcaSA2lRtL9UmOpidRUekBqJj0oNZdaSC2lVlJrqY3UVmontZc6SB2lTlJnqYvUVeomdZd6SD2lh6ReUm+pj9RX6ic9LPWXBkgDpUekQdKj0mBpiDRUGiYNlx6TRkiPSyOlUdJoaYw0VnpCGic9KY2XJkgTpUnSZGmKNFV6SpomTZdmSE9LM6VnpFnSbGmONFeaJz0rzZeekxZIz0sLpUXSYmmJtFR6QVomvSgtl16SVkgvSyulVdJqiZBXpdekNdLr0lrpDWmd9Ka0XnpL2iBtlN6WNknvSJuld6Ut0nvS+9IH0lbpQ2mb9JG0Xdoh7ZR2SbulPdJeaZ/0sbRfOiAdlA5Jh6Uj0lHpE+mY9Kl0XPpMOiF9Lp2UvpBOSV9Kp6WvpDPS19JZ6RvpnPSt9J30vfSD9KN0XrogXZR+ki5JP0u/SL9Kl6UrEpEZmZU5mZcFWZQlWZYVWZU1WZcN2ZQt2ZYd2ZU92Zdjcgb5JjmjnEnOLN8sZ5FvkbPK2eQEObucQ75VzinfJueSb5dzy3fIeeQ75bxyPjm/fJdcQC4oF5ILy0XkonIx+W65uFxCvkcuKd8rl5JLy2XksnI5ubxcQa4oV5Iry1XkqnI1ubp8n1xDrinXkmvLdeS6cj25vtxAbig3ku+XG8tN5KbyA3Iz+UG5udxCbim3klvLbeS2cju5vdxB7ih3kjvLXeSucje5u9xD7ik/JPeSe8t95L5yP/lhub88QB4oPyIPkh+VB8tD5KHyMHm4/Jg8Qn5cHimPkkfLY+Sx8hPyOPlJebw8QZ4oT5Iny1PkqfJT8jR5ujxDflqeKT8jz5Jny3PkufI8+Vl5vvycvEB+Xl4oL5IXy0vkpfIL8jL5RXm5/JK8Qn5ZXimvklfLr8ivyq/Ja+TX5bXyG/I6+U15vfyWvEHeKL8tb5LfkTfL78pb5Pfk9+UP5K3yh/I2+SN5u7xD3invknfLe+S98j75Y3m/fEA+KB+SD8tH5KPyJ/Ix+VP5uPyZfEL+XD4pfyGfkr+UT8tfyWfkr+Wz8jfyOflb+Tv5e/kH+Uf5vHxBvij/JF+Sf5Z/kX+VL8tXZKIwCqtwCq8IiqhIiqwoiqpoiq4YiqlYiq04iqt4iq/ElAzKTUpGJZOSWblZyaLcomRVsikJSnYlh3KrklO5Tcml3K7kVu5Q8ih3KnmVfEp+5S6lgFJQKaQUVoooRZViyt1KcaWEco9SUrlXKaWUVsooZZVySnmlglJRqaRUVqooVZVqSnXlPqWGUlOppdRW6ih1lXpKfaWB0lBppNyvNFaaKE2VB5RmyoNKc6WF0lJppbRW2ihtlXZKe6WD0lHppHRWuihdlW5Kd6WH0lN5SOml9Fb6KH2VfsrDSn9lgDJQeUQZpDyqDFaGKEOVYcpw5TFlhPK4MlIZpYxWxihjlSeUccqTynhlgjJRmaRMVqYoU5WnlGnKdGWG8rQyU3lGmaXMVuYoc5V5yrPKfOU5ZYHyvLJQWaQsVpYoS5UXlGXKi8py5SVlhfKyslJZpaxWXlFeVV5T1iivK2uVN5R1ypvKeuUtZYOyUXlb2aS8o2xW3lW2KO8p7ysfKFuVD5VtykfKdmWHslPZpexW9ih7lX3Kx8p+5YByUDmkHFaOKEeVT5RjyqfKceUz5YTyuXJS+UI5pXypnFa+Us4oXytnlW+Uc8q3ynfK98oPyo/KeeWCclH5Sbmk/Kz8ovyqXFauKERlVFblVF4VVFGVVFlVVFXVVF01VFO1VFt1VFf1VF+NqRnUm9SMaiY1s3qzmkW9Rc2qZlMT1OxqDvVWNad6m5pLvV3Nrd6h5lHvVPOq+dT86l1qAbWgWkgtrBZRi6rF1LvV4moJ9R61pHqvWkotrZZRy6rl1PJqBbWiWkmtrFZRq6rV1OrqfWoNtaZaS62t1lHrqvXU+moDtaHaSL1fbaw2UZuqD6jN1AfV5moLtaXaSm2ttlHbqu3U9moHtaPaSe2sdlG7qt3U7moPtaf6kNpL7a32Ufuq/dSH1f7qAHWg+og6SH1UHawOUYeqw9Th6mPqCPVxdaQ6Sh2tjlHHqk+o49Qn1fHqBHWiOkmdrE5Rp6pPqdPU6eoM9Wl1pvqMOkudrc5R56rz1GfV+epz6gL1eXWhukhdrC5Rl6ovqMvUF9Xl6kvqCvVldaW6Sl2tvqK+qr6mrlFfV9eqb6jr1DfV9epb6gZ1o/q2ukl9R92svqtuUd9T31c/ULeqH6rb1I/U7eoOdae6S92t7lH3qvvUj9X96gH1oHpIPaweUY+qn6jH1E/V4+pn6gn1c/Wk+oV6Sv1SPa1+pZ5Rv1bPqt+o59Rv1e/U79Uf1B/V8+oF9aL6k3pJ/Vn9Rf1VvaxeUYnGaKzGabwmaKImabKmaKqmabpmaKZmabbmaK7mab4W0zJoN2kZtUxaZu1mLYt2i5ZVy6YlaNm1HNqtWk7tNi2XdruWW7tDy6PdqeXV8mn5tbu0AlpBrZBWWCuiFdWKaXdrxbUS2j1aSe1erZRWWiujldXKaeW1ClpFrZJWWauiVdWqadW1+7QaWk2tllZbq6PV1epp9bUGWkOtkXa/1lhrol25cmVIM+1BrbnWQmuptdJaa220tlo7rb3WQeuoddI6a120rlo3rbvWQ+upPaT10nprfbS+Wj/tYa2/NkAbqD2iDdIe1QZrQ7Sh2jBtuPaYNkJ7XBupjdJGa2O0sdoT2jjtSW28NkGbqE3SJmtTtKnaU9o0bbo2Q3tam6k9o83SZmtztLnaPO1Zbb72nLZAe15bqC3SFmtLtKXaC9oy7UVtufaStkJ7WVuprdJWa69or2qvaWu017W12hvaOu1Nbb32lrZB26i9rW3S3tE2a+9qW7T3tPe1D7St2ofaNu0jbbu2Q9up7dJ2a3u0vdo+7WNtv3ZAO6gd0g5rR7Sj2ifaMe1T7bj2mXZC+1w7qX2hndK+1E5rX2lntK+1s9o32jntW+077XvtB+1H7bx2Qbuo/aRd0n7WftF+1S5rVzSiMzqrczqvC7qoS7qsK7qqa7quG7qpW7qtO7qre7qvx/QM+k16Rj2Tnlm/Wc+i36Jn1bPpCXp2PYd+q55Tv03Ppd+u59bv0PPod+p59Xx6fv0uvYBeUC+kF9aL6EX1YvrdenG9hH6PXlK/Vy+ll9bL6GX1cnp5vYJeUa+kV9ar6FX1anp1/T69hl5Tr6XX1uvodfV6en29gd5Qb6TfrzfWm+hN9Qf0ZvqDenO9hd5Sb6W31tvobfV2enu9g95R76R31rvoXfVuene9h95Tf0jvpffW++h99X76w3p/fYA+UH9EH6Q/qg/Wh+hD9WH6cP0xfYT+uD5SH6WP1sfoY/Un9HH6k/p4fYI+UZ+kT9an6FP1p/Rp+nR9hv60PlN/Rp+lz9bn6HP1efqz+nz9OX2B/ry+UF+kL9aX6Ev1F/Rl+ov6cv0lfYX+sr5SX6Wv1l/RX9Vf09for+tr9Tf0dfqb+nr9LX2DvlF/W9+kv6Nv1t/Vt+jv6e/rH+hb9Q/1bfpH+nZ9h75T36Xv1vfoe/V9+sf6fv2AflA/pB/Wj+hH9U/0Y/qn+nH9M/2E/rl+Uv9CP6V/qZ/Wv9LP6F/rZ/Vv9HP6t/p3+vf6D/qP+nn9gn5R/0m/pP+s/6L/ql/Wr+jEYAzW4AzeEAzRkAzZUAzV0AzdMAzTsAzbcAzX8AzfiBkZjJuMjEYmI7Nxs5HFuMXIamQzEozsRg7jViOncZuRy7jdyG3cYeQx7jTyGvmM/MZdRgGjoFHIKGwUMYoaxYy7jeJGCeMeo6Rxr1HKKG2UMcoa5YzyRgWjolHJqGxUMaoa1Yzqxn1GDaOmUcuobdQx6hr1jPpGA6Oh0ci432hsNDGaGg8YzYwHjeZGC6Ol0cpobbQx2hrtjPZGB6Oj0cnobHQxuhrdjO5GD6On8ZDRy+ht9DH6Gv2Mh43+xgBjoPGIMch41BhsDDGGGsOM4cZjxgjjcWOkMcoYbYwxxhpPGOOMJ43xxgRjojHJmGxMMaYaTxnTjOnGDONpY6bxjDHLmG3MMeYa84xnjfnGc8YC43ljobHIWGwsMZYaLxjLjBeN5cZLxgrjZWOlscpYbbxivGq8ZqwxXjfWGm8Y64w3jfXGW8YGY6PxtrHJeMfYbLxrbDHeM943PjC2Gh8a24yPjO3GDmOnscvYbewx9hr7jI+N/cYB46BxyDhsHDGOGp8Yx4xPjePGZ8YJ43PjpPGFccr40jhtfGWcMb42zhrfGOeMb43vjO+NH4wfjfPGBeOi8ZNxyfjZ+MX41bhsXDGIyZisyZm8KZiiKZmyqZiqqZm6aZimaZm26Ziu6Zm+GTMzmDeZGc1MZmbzZjOLeYuZ1cxmJpjZzRzmrWZO8zYzl3m7mdu8w8xj3mnmNfOZ+c27zAJmQbOQWdgsYhY1i5l3m8XNEuY9ZknzXrOUWdosY5Y1y5nlzQpmRbOSWdmsYlY1q5nVzfvMGmZNs5ZZ26xj1jXrmfXNBmZDs5F5v9nYbGI2NR8wm5kPms3NFmZLs5XZ2mxjtjXbme3NDmZHs5PZ2exidjW7md3NHmZP8yGzl9nb7GP2NfuZD5v9zQHmQPMRc5D5qDnYHGIONYeZw83HzBHm4+ZIc5Q52hxjjjWfMMeZT5rjzQnmRHOSOdmcYk41nzKnmdPNGebT5kzzGXOWOducY84155nPmvPN58wF5vPmQnORudhcYi41XzCXmS+ay82XzBXmy+ZKc5W52nzFfNV8zVxjvm6uNd8w15lvmuvNt8wN5kbzbXOT+Y652XzX3GK+Z75vfmBuNT80t5kfmdvNHeZOc5e529xj7jX3mR+b+80D5kHzkHnYPGIeNT8xj5mfmsfNz8wT5ufmSfML85T5pXna/Mo8Y35tnjW/Mc+Z35rfmd+bP5g/mufNC+ZF8yfzkvmz+Yv5q3nZvGISi7FYi7N4S7BES7JkS7FUS7N0y7BMy7I4QohreZZvxawM1k1WRiuTldm62cpi3WJltbJZCVZ2K4d1q5XTus3KZd1u5bbusPJYd1p5rXxWfusuq4BV0CpkFbaKWEWtYtbdVnGrhHWPVdK61ypllbbKWGWtclZ5q4JV0apkVbaqWFWtalZ16z6rhlXTqmXVtupYda16Vn2rgdXQamTdbzW2mlhNrQesZtaDVnOrhdXSamW1ttpYba12Vnurg9XR6mR1trpYXa1uVnerh9XTesjqZfW2+lh9rX7Ww1Z/a4A10HrEGmQ9ag22hlhDrWHWcOsxa4T1uDXSGmWNtsZYY60nrHHWk9Z4a4I10ZpkTbamWFOtp6xp1nRrhvW0NdN6xpplzbbmWHOtedaz1nzrOWuB9by10FpkLbaWWEutF6xl1ovWcusla4X1srXSWmWttl6xXrVes9ZYr1trrTesddab1nrrLWuDtdF629pkvWNttt7V4/8lb221PrS2WR9Z260d1k5rl7Xb2mPttfZZH1v7rQPWQeuQddg6Yh21PrGOWZ9ax63PrBPW59ZJ6wvrlPWlddr6yjpjfW2dtb6xzlnfWt9Z31s/WD9a560L1kXrJ+uS9bP1i/Wrddm6YhGbsVmbs3lbsEVbsmVbsVVbs3XbsE3bsm3bsV3bs307Zmewb7Iz2pnszPbNdhb7Fjurnc1OsLPbOexb7Zz2bXYu+3Y7t32Hnce+085r57Pz23fZBeyCdiG7sF3ELmoXs++2i9sl7Hvskva9dim7tF3GLmuXs8vbFeyKdiW7sl3FrmpXs6vb99k17Jp2Lbu2Xceua9ez69sN7IZ2I/t+u7HdxG5qP2A3sx+0m9st7JZ2K7u13cZua7ez29sd7I52J7uz3cXuanezu9s97J72Q3Yvu7fdx+5r97MftvvbA+yB9iP2IPtRe7A9xB5qD7OH24/ZI+zH7ZH2KHu0PcYeaz9hj7OftMfbE+yJ9iR7sj3Fnmo/ZU+zp9sz7KftmfYz9ix7tj3HnmvPs5+159vP2Qvs5+2F9iJ7sb3EXmq/YC+zX7SX2y/ZK+yX7ZX2Knu1/Yr9qv2avcZ+3V5rv2Gvs9+019tv2Rvsjfbb9ib7HXuz/a69xX7Pft/+wN5qf2hvsz+yt9s77J32Lnu3vcfea++zP7b32wfsg/Yh+7B9xD5qf2Ifsz+1j9uf2Sfsz+2T9hf2KftL+7T9lX3G/to+a39jn7O/tb+zv7d/sH+0z9sX7Iv2T/Yl+2f7F/tX+7J9xSYO47AO5/CO4IiO5MiO4qiO5uiO4ZiO5diO47iO5/hOzMng3ORkdDI5mZ2bnSzOLU5WJ5uT4GR3cji3Ojmd25xczu1ObucOJ49zp5PXyefkd+5yCjgFnUJOYaeIU9Qp5tztFHdKOPc4JZ17nVJOaaeMU9Yp55R3KjgVnUpOZaeKU9Wp5lR37nNqODWdWk5tp45T16nn1HcaOA2dRs79TmOnidPUecBp5jzoNHdaOC2dVk5rp43T1mnntHc6OB2dTk5np4vT1enmdHd6OD2dh5xeTm+nj9PX6ec87PR3BjgDnUecQc6jzmBniDPUGeYMdx5zRjiPOyOdUc5oZ4wz1nnCGec86Yx3JjgTnUnOZGeKM3UYcaY5050ZztPOTOcZZ5Yz25njzHXmOc86853nnAXO885CZ5Gz2FniLHVecJY5LzrLnZecFc7LzkpnlbPaecV51XnNWeO87qx13nDWOW866523nA3ORudtZ5PzjrPZedfZ4rznvO984Gx1PnS2OR85250dzk5nl7Pb2ePsdfY5Hzv7nQPOQeeQc9g54hx1PnGOOZ86x53PnBPO585J5wvnlPOlc9r5yjnjfO2cdb5xzjnfOt853zs/OD86550LzkXnJ+eS87Pzi/Orc9m54hCXcVmXc3lXcEVXcmVXcVVXc3XXcE3Xcm3XcV3Xc3035mZwb3IzupnczO7Nbhb3Fjerm81NcLO7Odxb3ZzubW4u93Y3t3uHm8e9083r5nPzu3e5BdyCbiG3sFvELeoWc+92i7sl3Hvcku69bim3tFvGLeuWc8u7FdyKbiW3slvFrepWc6u797k13JpuLbe2W8et69Zz67sN3IZuI/d+t7HbxG3qPuA2cx90m7st3JZuK7e128Zt67Zz27sd3I5uJ7ez28Xt6nZzu7s93J7uQ24vt7fbx+3r9nMfdvu7A9yB7iPuIPdRd7A7xB3qDnOHu4+5I9zH3ZHuKHe0O8Yd6z7hjnOfdMe7E9yJ7iR3sjvFneo+5U5zp7sz3Kfdme4z7ix3tjvHVcg891l3vvucu8B93l3oLnIXu0vcpe4L7jL3RXe5+5K7wn3ZXemucle7r7ivuq+5a9zX3bXuG+469013vfuWu8Hd6L7tbnLfcTe777pb3Pfc990P3K3uh+429yN3u7vD3enucne7e9y97j73Y3e/e8A96B5yD7tH3KPuJ+4x91P3uPuZe8L93D3pfuGecr90T7tfuWfcr92z7jfuOfdb9zv3e/cH90f3vHvBvej+5F5yf3Z/cX91L7tXXOIxHutxHu8JnuhJnuwpnuppnu4ZnulZnu05nut5nu/FvAzeTV5GL5OX2bvZy+Ld4mX1snkJXnYvh3erl9O7zcvl3e7l9u7w8nh3enm9fF5+7y6vgFfQK+QV9op4Rb1i3t1eca+Ed49X0rvXK+WV9sp4Zb1yXnmvglfRq+RV9qp4Vb1qXnXvPq+GV9Or5dX26nh1vXpefa+B19Br5N3vNfaaeE29B7xm3oNec6+F19Jr5bX22nhtvXZee6+D19Hr5HX2unhdvW5ed6+H19OzvF5eb6+P19fr5z3s9fcGeAO9R7xB3qPeYG+IN9Qb5g33HvNGeI97I71R3mhvjDfWe8Ib5z3pjfcmeBO9Sd5kb4o31XvKm+ZN92Z4T3szvWe8Wd5sb44315vnPevN957zFnjPewu9Rd5ib4m31HvBW+a96C33XvJWeC97K71V3mrvFe9V7zVvjfe6t9Z7w1vnvemt997yNngbvbe9Td473mbvXW+L9573vveBt9X70NvmfeRt93Z4O71d3m5vj7fX2+d97O33DngHvUPeYe+Id9T7xDvmfeod9z7zTnifeye9L7xT3pfeae8r74z3tXfW+8Y7533rfed97/3g/eid9y54F72fvEvez94v3q/eZe+KR3zGZ33O533BF33Jl33FV33N133DN33Lt33Hd33P9/2Yn8G/yc/oZ/Iz+zf7Wfxb/Kx+Nj/Bz+7n8G/1c/q3+bn82/3c/h1+Hv9OP6+fz8/v3+UX8Av6hfzCfhG/qF/Mv9sv7pfw7/FL+vf6pfzSfhm/rF/OL+9X8Cv6lfzKfhW/ql/Nr+7f59fwa/q1/Np+Hb+uX8+v7zfwG/qN/Pv9xn4Tv6n/gN/Mf9Bv7rfwW/qt/NZ+G7+t385v73fwO/qd/M5+F7+r383v7vfwe/oP+b383n4fv6/fz3/Y7+8P8Af6j/iD/Ef9wf4Qf6g/zB/uP+aP8B/3R/qj/NH+GH+s/4Q/zn/SH+9P8Cf6k/zJ/hR/qv+UP82f7s/wn/Zn+s/4s/zZ/hx/rj/Pf9af7z/nL/Cf9xf6i/zF/hJ/qf+Cv8x/0V/uv+Sv8F/2V/qr/NX+K/6r/mv+Gv91f63/hr/Of9Nf77/lb/A3+m/7m/x3/M3+u/4W/z3/ff8Df6v/ob/N/8jf7u/wd/q7/N3+Hn+vv8//2N/vH/AP+of8w/4R/6j/iX/M/9Q/7n/mn/A/90/6X/in/C/90/5X/hn/a/+s/41/zv/W/87/3v/B/9E/71/wL/o/+Zf8n/1f/F/9y/4Vn8SYGBvjYnxMiIkxKSbHlJga02J6zIiZMStmx5yYG/NifiwWyxC7KZYxlimWOXZzLEvslljWWLZYQix7LEfs1ljO2G2xXLHbY7ljd8TyxO6M5Y3li+WP3RUrECsYKxQrHCsSKxorFrs7VjxWInZPrGTs3lipWOlYmVjZWLlY+ViFWMVYpVjlWJVY1Vi1WPXYfbEasZqxWrHasTqxurF6sfqxBrGGsUax+2ONY01iTWMPxJrFHow1j7WItYy1irWOtYm1jbWLtY91iHWMdYp1jnWJdY11i3WP9Yj1jD0U6xXrHesT6xvrF3s41j82IDYw9kjs/2i7xx9Pg/Zt8D2253Jdturyd2zbtm3btm3b7rFnemzbtnqmN/dvN5s8e7/YZLNPvfukUpXz+APOHP2RAchAZBAyGBmCDEWGIcOREchIZBQyGhmDjEXGIeORCchEZBIyGZmCTEWmIdORGchMZBYyG5mDzEXmIfORBchCZBGyGFmCLEWWIcuRFchKZBWyGlmDrEXWIeuRDchGZBOyGdmCbEW2IduRHchOZBeyG0kZFxe3D4lH9iMHkIPIIeQwcgQ5ihxDjiMnkJPIKeQ0cgY5iyQg55DzyAXkInIJuYxcQa4i15DryA3kJnILuY3cQe4i95D7yAPkIfIIeYw8QZ4iz5DnyAvkJfIKeY28Qd4i75D3yAfkI/IJ+Yx8Qb4i35DvyA/kJ/IL+Y38QRKRv8g/JAmJQ5OhydEUaEo0FZoaTYOmRdOh6dEMaEY0E5oZzYJmRbOh2dEcaE4UQVEUQ3GUQEmUQgFKowzKohzKowIqohIqowqqohqqowZqohZqoxB1UBf1UB8N0BCN0BiaC82N5kHzovnQ/GgBtCBaCC2MFkGLosXQ4mgJtCRaCi2NlkHLouXQ8mgFtCJaCa2MVkGrotXQ6mgNtCZaC62N1kHrovXQ+mgDtCHaCG2MNkGbos3Q5mgLtCXaCm2NtkHbou3Q9mgHtCPaCe2MdkG7ot3Q7mgPtCfaC+2N9kH7ov3Q/ugAdCA6CB2MDkGHosPQ4egIdCQ6Ch2NjkHHouPQ8egEdCI6CZ2MTkGnotPQ6egMdCY6C52NzkHnovPQ+egCdCG6CF2MLkGXosvQ5egKdCW6Cl2NrkHXouvQ9egGdCO6Cd2MbkG3otvQ7egOdCe6C92N7kH3ovvQeHQ/egA9iB5CD6NH0KPoMfQ4egI9iZ5CT6Nn0LNoAnoOPY9eQC+il9DL6BX0KnoNvY7eQG+it9Db6B30LnoPvY8+QB+ij9DH6BP0KfoMfY6+QF+ir9DX6Bv0LfoOfY9+QD+in9DP6Bf0K/oN/Y7+QH+iv9Df6B80Ef2L/kOT0DgsGZYcS4GlxFJhqbE0WFosHZYey4BlxDJhmbEsWFYsG5Ydy4HlxBAMxTAMxwiMxCgMYDTGYCzGYTwmYCImYTKmYCqmYTpmYCZmYTYGMQdzMQ/zsQALsQiLYbmw3FgeLC+WD8uPFcAKYoWwwlgRrChWDCuOlcBKYqWw0lgZrCxWDiuPVcAqYpWwylgVrCpWDauO1cBqYrWw2lgdrC5WD6uPNcAaYo2wxlgTrCnWDGuOtcBaYq2w1lgbrC3WDmuPdcA6Yp2wzlgXrCvWDeuO9cB6Yr2w3lgfrC/WD+uPDcAGYoOwwdgQbCg2DBuOjcBGYqOw0dgYbCw2DhuPTcAmYpOwydgUbCo2DZuOzcBmYrOw2dgcbC42D5uPLcAWYouwxdgSbCm2DFuOrcBWYquw1dgabC22DluPbcA2YpuwzdgWbCu2DduO7cB2Yruw3dgebC+2D4vH9mMHsIPYIewwdgQ7ih3DjmMnsJPYKew0dgY7iyVg57Dz2AXsInYJu4xdwa5i17Dr2A3sJnYLu43dwe5i97D72APsIfYIe4w9wZ5iz7Dn2AvsJfYKe429wd5i77D32AfsI/YJ+4x9wb5i37Dv2A/sJ/YL+439wRKxv9g/LAmLw5PhyfEUeEo8FZ4aT4OnxdPh6fEMeEY8E54Zz4JnxbPh2fEceE4cwVEcw3GcwEmcwgFO4wzO4hzO4wIu4hIu4wqu4hqu4wZu4hZu4xB3cBf3cB8P8BCP8BieC8+N58Hz4vnw/HgBvCBeCC+MF8GL4sXw4ngJvCReCi+Nl8HL4uXw8ngFvCJeCa+MV8Gr4tXw6ngNvCZeC6+N18Hr4vXw+ngDvCHeCG+MN8Gb4s3w5ngLvCXeCm+Nt8Hb4u3w9ngHvCPeCe+Md8G74t3w7ngPvCfeC++dug/eF++H98cH4APxQfhgfAg+FB+GD8dH4CPxUfhofAw+Fh+Hj8cn4BPxSfhkfAo+FZ+GT8dn4DPxWfhsfA4+F5+Hz8cX4AvxRfhifAm+FF+GL8dX4CvxVfhqfA2+Fl+Hr8c34BvxTfhmfAu+Fd+Gb8d34DvxXfhufA++F9+Hx+P78QP4QfwQfhg/gh/Fj+HH8RP4SfwUfho/g5/FE/Bz+Hn8An4Rv4Rfxq/gV/Fr+HX8Bn4Tv4Xfxu/gd/F7+H38Af4Qf4Q/xp/gT/Fn+HP8Bf4Sf4W/xt/gb/F3+Hv8A/4R/4R/xr/gX/Fv+Hf8B/4T/4X/xv/gifhf/B+ehMcRyYjkRAoiJZGKSE2kIdIS6Yj0RAYiI5GJyExkIbIS2YjsRA4iJ4EQKIEROEEQJEERgKAJhmAJjuAJgRAJiZAJhVCTkgidMAiTsAibgIRDuIRH+ERAhERExIhcRG4iD5GXyEfkJwoQBYlCRGGiCFGUKEYUJ0oQJYlSRGmiDFGWKEeUJyoQFYlKRGWiClGVqEZUJ2oQNYlaRG2iDlGXqEfUJxoQDYlGRGOiCdGUaEY0J1oQLYlWRGuiDdGWaEe0JzoQHYlORGeiC9GV6EZ0J3oQPYleRG+iD9GX6Ef0JwYQA4lBxGBiCDGUGEYMJ0YQI4lRxGhiDDGWGEeMJyYQE4lJxGRiCjGVmEZMJ2YQM4lZxGxiDjGXmEfMJxYQC4lFxGJiCbGUWEYsJ1YQK4lVxGpiDbGWWEesJzYQG4lNxGZiC7GV2EZsJ3YQO4ldxG5iD7GX2EfEE/uJA8RB4hBxmDhCHCWOEceJE8RJ4hRxmjhDnCUSiHPEeeICcZG4RFwmrhBXiWvEdeIGcZO4Rdwm7hB3iXvEfeIB8ZB4RDwmnhBPiWfEc+IF8ZJ4Rbwm3hBviXfEe+ID8ZH4RHwmvhBfiW/Ed+IH8ZP4Rfwm/hCJxF/iH5FExJHJyORkCjIlmYpMTaYh05LpyPRkBjIjmYnMTGYhs5LZyOxkDjIniZAoiZE4SZAkSZGApEmGZEmO5EmBFEmJlEmFVEmN1EmDNEmLtElIOqRLeqRPBmRIRmSMzEXmJvOQecl8ZH6yAFmQLEQWJouQRcliZHGyBFmSLEWWJsuQZclyZHmyAlmRrERWJquQVclqZHWyBlmTrEXWJuuQdcl6ZH2yAdmQbEQ2JpuQTclmZHOyBdmSbEW2JtuQbcl2ZHuyA9mR7ER2JruQXcluZHeyB9mT7EX2JvuQfcl+ZH9yADmQHEQOJoeQQ8lh5HByBDmSHEWOJseQY8lx5HhyAjmRnEROJqeQU8lp5HRyBjmTnEXOJueQc8l55HxyAbmQXEQuJpeQS8ll5HJyBbmSXEWuJteQa8l15HpyA7mR3ERuJreQW8lt5HZyB7mT3EXuJveQe8l9ZDy5nzxAHiQPkYfJI+RR8hh5nDxBniRPkafJM+RZMoE8R54nL5AXyUvkZfIKeZW8Rl4nb5A3yVvkbfIOeZe8R94nH5APyUfkY/IJ+ZR8Rj4nX5AvyVfka/IN+ZZ8R74nP5AfyU/kZ/IL+ZX8Rn4nf5A/yV/kb/IPmUj+Jf+RSWQclYxKTqWgUlKpqNRUGiotlY5KT2WgMlKZqMxUFiorlY3KTuWgclIIhVIYhVMERVIUBSiaYiiW4iieEiiRkiiZUiiV0iidMiiTsiibgpRDuZRH+VRAhVRExahcVG4qD5WXykflpwpQBalCVGGqCFWUKkYVp0pQJalSVGmqDFWWKkeVpypQFalKVGWqClWVqkZVp2pQNalaVG2qDlWXqkfVpxpQDalGVGOqCdWUakY1p1pQLalWVGuqDdWWake1pzpQHalOVGeqC9WV6kZ1p3pQPaleVG+qD9WX6kf1pwZQA6lB1GBqCDWUGkYNp0ZQI6lR1GhqDDWWGkeNpyZQE6lJ1GRqCjWVmkZNp2ZQM6lZ1GxqDjWXmkfNpxZQC6lF1GJqCbWUWkYtp1ZQK6lV1GpqDbWWWketpzZQG6lN1GZqC7WV2kZtp3ZQO6ld1G5qD7WX2kfFU/upA9RB6hB1mDpCHaWOUcepE9RJ6hR1mjpDnaUSqHPUeeoCdZG6RF2mrlBXqWvUdeoGdZO6Rd2m7lB3qXvUfeoB9ZB6RD2mnlBPqWfUc+oF9ZJ6Rb2m3lBvqXfUe+oD9ZH6RH2mvlBfqW/Ud+oH9ZP6Rf2m/lCJ1F/qH5VExYFkIDlIAVKCVCA1SAPSgnQgPcgAMoJMIDPIArKCbCA7yAFyAgSgAAM4IAAJKAAADRjAAg7wQAAikIAMFKACDejAACawgA0gcIALPOCDAIQgAjGQC+QGeUBekA/kBwVAQVAIFAZFQFFQDBQHJUBJUAqUBmVAWVAOlAcVQEVQCVQGVUBVUA1UBzVATVAL1AZ1QF1QD9QHDUBD0Ag0Bk1AU9AMNActQEvQCrQGbUBb0A60Bx1AR9AJdAZdQFfQDXQHPUBP0Av0Bn1AX9AP9AcDwEAwCAwGQ8BQMAwMByPASDAKjAZjwFgwDowHE8BEMAlMBlPAVDANTAczwEwwC8wGc8BcMA/MBwvAQrAILAZLwFKwDCwHK8BKsAqsBmvAWrAOrAcbwEawCWwGW8BWsA1sBzvATrAL7AZ7wF6wD8SD/eAAOAgOgcPgCDgKjoHj4AQ4CU6B0+AMOAsSwDlwHlwAF8ElcBlcAVfBNXAd3AA3wS1wG9wBd8E9cB88AA/BI/AYPAFPwTPwHLwAL8Er8Bq8AW/BO/AefAAfwSfwGXwBX8E38B38AD/BL/Ab/AGJ4C/4B5JAHJ2MTk6noFPSqejUdBo6LZ2OTk9noDPSmejMdBY6K52Nzk7noHPSCI3SGI3TBE3SFA1ommZoluZonhZokZZomVZoldZonTZok7Zom4a0Q7u0R/t0QId0RMfoXHRuOg+dl85H56cL0AXpQnRhughdlC5GF6dL0CXpUnRpugxdli5Hl6cr0BXpSnRlugpdla5GV6dr0DXpWnRtug5dl65H16cb0A3pRnRjugndlG5GN6db0C3pVnRrug3dlm5Ht6c70B3pTnRnugvdle5Gd6d70D3pXnRvesCqvnQ/uj/dzBpID6IH00PoofQwejg9gh5Jj6JH02PosfQ4ejw9gZ5IT6In01PoqfQ0ejo9g55Jz6Jn03PoufQ8ej69gF5IL6IX00vopfQyejm9gl5Jr6JX02votfQ6ej29gd5Ib6I301vorfQ2eju9g95J76J303vovfQ+Op7eTx+gD9KH6MP0EfoofYw+Tp+gT9Kn6NP0GfosnUCfo8/TF+iL9CX6Mn2Fvkpfo6/TN+ib9C36Nn2Hvkvfo+/TD+iH9CP6Mf2Efko/o5/TL+iX9Cv6Nf2Gfku/o9/TH+iP9Cf6M/2F/kp/o7/TP+if9C/6N/2HTqT/0v/oJDqOiWOSM8mZlExKJjWTmknLpGXSM+mZjExGJjOTmcnKZGWyM9mZnExOBmVQBmdwhmRIBjCA+c/hGI4RGIGRGIlRGIXRGI0xGIOxGIuBDGRcxmV8xmdCJmRiTIzJzeRm8jJ5mfxMfqYgU5ApzBRmijJFmeJMcaYkU5IpzZRmyjJlmfJMeaYiU5GpzFRmqjJVmepMdaYmU5OpzdRm6jJ1mfpMfaYh05BpzDRmmjJNmeZMc6Yl05JpzbRm2jJtmfZMe6Yj05HpzHRmujJdme5Md6Yn05PpzfRm+jJ9mf5Mf2YgM5AZzAxmhjJDmeHMcGYkM5IZzYxmxjJjmfHMeGYiM5GZzExmpjJTmenMdGYmM4uZzcxh5jLzmPnMAmYhs4hZzCxmljJLmeXMcmYls5JZzaxm1jJrmfXMemYjs5HZzGxmtjJbme3MdmYns5PZzexm9jJ7mXgmnjnAHGAOMYeYI8wR5hhzjDnBnGBOMaeYM8wZJoFJYM4z55mLzEXmMnOZucpcZa4z15mbzE3mNnObucvcZe4z95mHzEPmMfOYeco8ZZ4zz5mXzEvmNfOaecu8Zd4z75mPzEfmM/OZ+cp8Zb4z35mfzE/mN/ObSWQSmX/MPyYtm45Nz2ZgM7KZ2MxsFvb/aZwlWJKlWMDSLMpi/4sZlmU1VmcN1mQt1mYh6/yXc7N52LxsPjY/W4AtyBb6L5dmy7Bl2XJsebYCW5It9b+4IluJrczWYauy9djqbAO2JtuIrc3WYeuy9dj6bAO2IduIbc22Yduy7dj2bAe2I9vpv7yX3ceeYk+zZ9iz7G32DvuT/cW+Zt+wv9k/7EB2EDuaHcOOZcex49kJ7ER20n95NjuHncvOY+ezC9iF7KL/8mp2DbuWXceuZzewG9lN/+Xd7B52KxvPbmd3sDvZXf/j/8wUz+5nD7AH2aRBh9kjbAJ7jD3OnmBP/t+zJrDn2PPsBfYme4u9zF5hr7LX2Ovsjf/xf3LcZe+x99kH7Ev2FfuYfcI+Zd+yz9kX/+P/5HvLvmPfsx/Yj+wn9jObyH5lv7Hf2R//k/8/2RPZv+w/NomN45JxybkUXEouFZeaS8Ol5dJx6bkMXEYuE5eZy8Jl5bJx2bkcXE4O4VAO43CO4EiO4gBHcwzHchzHcwInchIncwqnchqncwZnchZnc5BzOJfzOJ8LuJCLuBiXi8vN5eHycvm4/FwBriBXiCvMFeGKcsW44lwJriRXiivNleHKcuW48lwFriJXiavMVeGqctW46lwNriZXi6vN1eHqcvW4+lwDriHXiGvMNeGacs245lwLriXXimvNteHacu249lwHriPXievMdeG6ct247lwPrifXi+vN9eH6cv24/twAbiA3iBvMDeGGcsO44dwIbiQ3ihvNjeHGcuO48dwEbiI3iZvMTeGmctO46dwMbiY3i5vNzeHmcvO4+dwCbiG3iFvMLeGWcsu45dwKbiW3ilvNreHWcuu49dwGbiO3idvMbeG2ctu47dwObie3i9vN7eH2cvu4eG4/d4A7yB3iDnNHuKPcMe44d4I7yZ3iTnNnuLNcAneOO89d4C5yl7jL3BXuKneNu87d4G5yt7jb3B3uLnePu8894B5yj7jH3BPuKfeMe8694F5yr7jX3BvuLfeOe8994D5yn7jP3BfuK/eN+8794H5yv7jf3B8ukfvL/eOSuDg+GZ+cT8Gn5FPxqfk0fFo+HZ+ez8Bn5DPxmfksfFY+G5+dz8Hn5BEe5TEe5wme5Cke8DTP8CzP8Twv8CIv8TKv8Cqv8Tpv8CZv8TYPeYd3eY/3+YAP+YiP8bn43HwePi+fj8/PF+AL8oX4wnwRvihfjC/Ol+BL8qX40nwZvixfji/PV+B9vhJfma/CV+Wr8dX5GnxNvhZfm6/D1+Xr8fX5BnxDvhHfmG/CN+Wb8c35FnxLvhXfmm/Dt+Xb8e35DnxHvtP/6/1gfgg/lB/GD+NH8CP5Ufxofgw/lh/Hj+cn8BP5Sfxkfgo/lZ/GT+dn8DP5Wfxsfg4/l5/Hz+cX8Av5Rfxifgm/lF/GL+dX8Cv5Vfxqfg2/ll/Hr+c38Bv5Tfxmfgu/ld/Gb+d38Dv5Xfxufg+/l9/Hx/P7+QP8Qf4Qf5g/wh/lj/HH+RP8Sf4Uf5o/w5/lE/hz/Hn+An+Rv8Rf5q/wV/lr/HX+Bn+Tv8Xf5u/wd/l7/H3+Af+Qf8Q/5p/wT/ln/HP+Bf+Sf8W/5t/wb/l3/Hv+A/+R/8R/5r/wX/lv/Hf+B/+T/8X/5v/wifxf/h+fxMcJyYTkQgohpZBKSC2kEdIK6YT0QgYho5BJyCxkEbIK2YTsQg4hp4AIqIAJuEAIpEAJQKAFRmAFTuAFQRAFSZAFRVAFTdAFQzAFS7AFKDiCK3iCLwRCKERCTMgl5BbyCHmFfEJ+oYBQUCgkFBaKCEWFYkJxoYRQUigllBbKCGWFckJ5oYJQUagkVBaqCFWFakJ1oYZQU6gl1BbqCHWFekJ9oYHQUGgkNBaaCE2FZkJzoYXQUmgltBbaCG2FdkJ7oYPQUegkdBa6CF2FbkJ3oYfQU+gl9Bb6CH2FfkJ/YYAwUBgkDBaGCEOFYcJwYYQwUhgljBbGCGOFccJ4YYIwUZgkTBamCFOFacJ0YYYwU5glzBbmCHOFecJ8YYGwUFgkLBaWCEuFZcJyYYWwUlglrBbWCGuFdcJ6YYOwUdgkbBa2CFuFbcJ2YYewU9gl7Bb2CHuFfUK8sF84IBwUDgmHhSPCUeGYcFw4IZwUTgmnhTPCWSFBOCecFy4IF4VLwmXhinBVuCZcF24IN4Vbwm3hjnBXuCfcFx4ID4VHwmPhifBUeCY8F14IL4VXwmvhjfBWeCe8Fz4IH4VPwmfhi/BV+CZ8F34IP4Vfwm/hj5Ao/BX+CUlCnJhMTC6mEFOKqcTUYhoxrZhOTC9mEDOKmcTMYhYxq5hNzC7mEHOKiIiKmIiLhEiKlAhEWmREVuREXhREUZREWVREVdREXTREc9f3pCQRio7oip7oi4EYipEYE3OJucU8Yl4xn5hfLCAWFAuJhcUiYlGxmFhcLCGWFEuJpcUyYlmxnFherCBWFCuJlcUqYlWxmlhdrCHWFGuJtcU6Yl2xnlhfbCA2FBuJjcUmYlOxmdhcbCG2FFuJrcU2Yluxndhe7CB2FDuJncUuYlexm9hd7CH2FHuJvcU+Yl+xn9hfHCAOFAeJg8Uh4lBxmDhcHCGOFEeJo8Ux4lhxnDhenCBOFCeJk8Up4lRxmjhdnCHOFGeJs8U54lxxnjhfXCAuFBeJi8Ul4lJxmbhcXCGuFFeJq8U14lpxnbhe3CBuFDeJm8Ut4lZxm7hd3CHuFHeJu8U94l5xnxgv7hcPiAfFQ+Jh8Yh4VDwmHhdPiCfFU+Jp8Yx4VkwQz4nnxQviRfGSeFm8Il4Vr4nXxRviTfGWeFu8I94V74n3xQfiQ/GR+Fh8Ij4Vn4nPxRfiS/GV+Fp8I74V34nvxQ/iR/GT+Fn8In4Vv4nfxR/iT/GX+Fv8IyaKf8V/YpIYJyWTkksppJRSKim1lEZKK6WT0ksZpIxSJimzlEXKKmWTsks5pJwSIqESJuESIZESJQGJlhiJlTiJlwRJlCRJlhRJlTRJlwzJlCzJlqDkSK7kSb4USKEUSTEpl5RbyiPllfJJ+aUCUkGpkFRYKiIVlYpJxaUSUkmplFRaKiOVlcpJ5aUKUkWpklRZqiJVlapJ1aUaUk2pllRbqiPVlepJ9aUGUkOpkdRYaiI1lZpJzaUWUkupldRaaiO1ldpJ7aUOUkepk9RZ6iJ1lbpJ3aUeUk+pl9Rb6iP1lfpJ/aUB0kBpkDRYGiINlYZJw6UR0khplDRaGiONlcZJ46UJ0kRpkjRZmiJNlaZJ06UZ0kxpljRbmiPNleZJ86UF0kJpkbRYWiItlZZJy6UV0kpplbRaWiOtldZJ66UN0kZpk7RZ2iJtlbZJ26Ud0k5pl7Rb2iPtlfZJ8dJ+6YB0UDokHZaOSEelY9Jx6YR0UjolnZbOSGelBOmcdF668P/pzWvpjfRWeie9lz5IH6VP0mfpi/RV+iZ9l35IP6Vf0m/pj5Qo/ZX+SUlSnJxMTi6nkFPKqeTUcho5rZxOTi9nkDPKmeTMchY5q5xNzi7nkHPKiIzKmIzLhEzKlAxkWmZkVuZkXhZkUZZkWVZkVdZkXTZkU7ZkW4ayI7uyJ/tyIIdyJMfkXHJuOY+cV84n55cLyAXlQnJhuYhcVC4mF5dLyCXlUnJpuYxcVi4nl5cryBXlSnJluYpcVa4mV5dryDXlWnJtuY5cV64n15cbyA3lRnJjuYncVG4mN5dbyC3lVnJruY3cVm4nt5c7yB3lTnJnuYvcVe4md5d7yD3lXnJvuY/cV+4n95cHyAPlQfJgeYg8VB4mD5dHyCPlUfJoeYw8Vh4nj5cnyBPlSfJkeYo8VZ4mT5dnyDNvgull4+Li4uR58nx5gbxQXiQvlpfIS+Vl8nJ5hbxSXiWvltfIa+V18np5g7xR3iRvlrfIW+Vt8nZ5h7xT3iXvlvfIe+V9cry8Xz4gH5QPyYflI/JR+Zh8XD4hn5RPyaflM/JZOUE+J5+XL8gX5UvyZfmKfFW+Jl+Xb8g35VvybfmOfFe+J9+XH8gP5UfyY/mJ/FR+Jj+XX8gv5Vfya/mN/FZ+J7+XP8gf5U/yZ/mL/FX+Jn+Xf8g/5V/yb/mPnCj/lf/JSXKckkxJrqRQUiqplNRKGiWtkk5Jr2RQMiqZlMxKFiWrkk3JruRQciqIgiqYgiuEQiqUAhRaYRRW4RReERRRkRRZURRV0RRdMRRTsRRbgYqjuIqn+EqghEqkxJRcSm4lj5JXyafkVwooBZVCSmGliFJUKaYUV0ooJZVSSmmljFJWKaeUVyooFZVKSmWlilJVqaZUV2ooNZVaSm2ljlJXqafUVxooDZVGSmOlidJUaaY0V1ooLZVWSmuljdJWaae0VzooHZVOSmeli9JV6aZ0V3ooPZVeSm+lj9JX6af0VwYoA5VBymBliDJUGaYMV0YoI5VRymhljDJWGaeMVyYoE5VJymRlijJVmaZMV2YoM5VZymxljjJXmafMVxYoC5VFymJlibJUWaYsV1YoK5VVympljbJWWaesVzYoG5VNymZli7JV2aZsV3YoO5Vdym5lj7JX2afEK/uVA8pB5ZByWDmiHFWOKceVE8pJ5ZRyWjmjnFUSlHPKeeWCclG5pFxWrihXlWvKdeWGclO5pdxW7ih3lXvKfeWB8lB5pDxWnihPlWfKc+WF8lJ5pbxW3ihvlXfKe+WD8lH5pHxWvihflW/Kd+WH8lP5pfxW/iiJyl/ln5KkxKnJ1ORqCjWlmkpNraZR06rp1PRqBjWjmknNrGZRs6rZ1OxqDjWniqioiqm4SqikSqlApVVGZVVO5VVBFVVJlVVFVVVN1VVDNVVLtVWoOqqreqqvBmqoRmpMzaXmVvOoedV8an61gFpQLaQWVouoRdVianG1hFpSLaWWVsuoZdVyanm1glpRraRWVquoVdVqanW1hlpTraXWVuuoddV6an21gdpQbaQ2VpuoTdVmanO1hdpSbaW2VtuobdV2anu1g9pR7aR2VruoXdVuane1h9pT7aX2VvuofdV+an91gDpQHaQOVoeoQ9Vh6nB1hDpSHaWOVseoY9Vx6nh1gjpRnaROVqeoU9Vp6nR1hjpTnaXOVueoc9V56nx1gbpQXaQuVpeoS9Vl6nJ1hbpSXaWuVteoa9V16np1g7pR3aRuVreoW9Vt6nZ1h7pT3aXuVveoe9V9ary6Xz2gHlQPqYfVI+pR9Zh6XD2hnlRPqafVM+pZNUE9p55XL6gX1UvqZfWKelW9pl5Xb6g31VvqbfWOele9p95XH6gP1UfqY/WJ+lR9pj5XX6gv1Vfqa/WN+lZ9p75XP6gf1U/qZ/WL+lX9pn5Xf6g/1V/qb/WPmqj+Vf+pSWqclkxLrqXQUmqptNRaGi2tlk5Lr2XQMmqZtMxaFi2rlk3LruXQcmqIhmqYhmuERmqUBjRaYzRW4zReEzRRkzRZUzRV0zRdMzRTszRbg5qjuZqn+VqghVqkxbRcWm4tj5ZXy6fl1wpoBbVCWmGtiFZUK6YV10poJbVSWmmtjFZWK6eV1ypoFbVKWmWtilZVq6ZV12poNbVaWm2tjlZXq6fV1xpoDbVGWmOtidZUa6Y111poLbVWWmutjdZWa6e11zpoHbVOWmeti9ZV66Z113poPbVeWm+tj9ZX66f11wZoA7VB2mBtiDZUG6YN10ZoI7VR2mhtjDZWG6eN1yZoE7VJ2mRtijZVm6ZN12ZoM7VZ2mxtjjZXm6fN1xZoC7VF2mJtibZUW6Yt11ZoK7VV2mptjbZWW6et1zZoG7VN2mZti7ZV26Zt13ZoO7Vd2m5tj7ZX26fFa/u1A9pB7ZB2WDuiHdWOace1E9pJ7ZR2WjujndUStHPaee2CdlG7pF3WrmhXtWvade2GdlO7pd3W7mh3tXvafe2B9lB7pD3WnmhPtWfac+2F9lJ7pb3W3mhvtXfae+2D9lH7pH3WvmhftW/ad+2H9lP7pf3W/miJ2l/tn5akxenJ9OR6Cj2lnkpPrafR0+rp9PR6Bj2jnknPrGfRs+rZ9Ox6Dj2njuiojum4TuikTulAp3VGZ3VO53VBF3VJl3VFV3VN13VDN3VLt3WoO7qre7qvB3qoR3pMz6Xn1vPoefV8en69gF5QL6QX1ovoRfVienG9hF5SL6WX1svoZfVyenm9gl5Rr6RX1qvoVfVqenW9hl5Tr6XX1uvodfV6en29gd5Qb6Q31pvoTfVmenO9hd5Sb6W31tvobfV2enu9g95R76R31rvoXfVuene9h95T76X31vvoffV+en99gD5QH6QP1ofoQ/Vh+nB9hD5SH6WP1sfoY/Vx+nh9gj5Rn6RP1qfoU/Vp+nR9hj5Tn6XP1ufoc/V5+nx9gb5QX6Qv1pfoS/Vl+nJ9hb5SX6Wv1tfoa/V1+np9g75R36Rv1rfoW/Vt+nZ9h75T36Xv1vfoe/V9ery+Xz+gH9QP6Yf1I/pR/Zh+XD+hn9RP6af1M/pZPUE/p5/XL+gX9Uv6Zf2KflW/pl/Xb+g39Vv6bf2Ofle/p9/XH+gP9Uf6Y/2J/lR/pj/XX+gv9Vf6a/2N/lZ/p7/XP+gf9U/6Z/2L/lX/pn/Xf+g/9V/6b/2Pnqj/1f/pSXqckcxIbqQwUhqpjNRGGiOtkc5Ib2QwMhqZjMxGFiOrkc3IbuQwchqIgRqYgRuEQRqUAQzaYAzW4AzeEAzRkAzZUAzV0AzdMAzTsAzbgIZjuIZn+EZghEZkxIxcRm4jj5HXyGfkNwoYBY1CRmGjiFHUKGYUN0oYJY1SRrK4/7MKpLxRwahoVDIqG1WMqkY1o7pRw6hp1DJqG3WMukY9o77RwGhoNDIaG02MpkYzo7nRwmhptDJaG22MtkY7o73RwehodDI6G12MrkY3o7vRw+hp9DJ6G32MvkY/o78xwBhoDDIGG0OMocYwY7gxwhhpjDJGG2OMscY4Y7wxwZhoTDImG1OMqcY0Y7oxw5hpzDJmG3OMucY8Y76xwFhoLDIWG0uMpcYyY7mxwlhprDJWG2uMtcY6Y72xwdhobDI2G1uMrcY2Y7uxw9hp7DJ2G3uMvcY+I97YbxwwDhqHjMPGEeOoccw4bpwwThqnjNPGGeOskWCcM84bF4yLxiXjsnHFuGpcM64bN4ybxi3jtnHHuGvcM+4bD4yHxiPjsfHEeGo8M54bL4yXxivjtfHGeGu8M94bH4yPxifjs/HF+Gp8M74bP4yfxi/jt/HHSDT+Gv+MJCPOTGYmN1OYKc1UZmozjZnWTGemNzOYGc1MZmYzi5nVzGZmN3OYOU3ERE3MxE3CJE3KBCZtMiZrciZvCqZoSqZsKqZqaqZuGqZpWqZtQtMxXdMzfTMwQzMyY2YuM7eZx8xr5jPzmwXMgmYhs7BZxCxqFjOLmyXMkmYps7RZxixrljPLmxXMimYls7JZxaxqVjOrmzXMmmYts7ZZx6xr1jPrmw3MhmYjs7HZxGxqNjObmy3MlmYrs7XZxmxrtjPbmx3MjmYns7PZxexqdjO7mz3MnmYvs7fZx+xr9jP7mwPMgeYgc7A5xBxqDjOHmyPMkeYoc7Q5xhxrjjPHmxPMieYkc7I5xZxqTjOnmzPMmeYsc7Y5x5xrzjPnmwvMheYic7G5xFxqLjOXmyvMleYqc7W5xlxrrjPXmxvMjeYmc7O5xdxqbjO3mzvMneYuc7e5x9xr7jPjzf3mAfOgecg8bB4xj5rHzOPmCfOkeco8bZ4xz5oJ5jnzvHnBvGheMi+bV8yr5jXzunnDvGneMm+bd8y75j3zvvnAfGg+Mh+bT8yn5jPzufnCfGm+Ml+bb8y35jvzvfnB/Gh+Mj+bX8yv5jfzu/nD/Gn+Mn+bf8xE86/5z0wy46xkVnIrhZXSSmWlttJYaa10Vnorg5XRymRltrJYWa1sVnYrh5XTQizUwizcIizSoixg0RZjsRZn8ZZgiZZkyZZiqZZm6ZZhmZZl2Ra0HOt/7/+NrMZWY6up1cxqbuVNXjB5K6uV1cZqY7Wz2lkdrI5WJ6uz1cXqanW1uls9rB5WL6u31cfqa/Wz+lsDrIHWIGuwNdgaag21hlvDrZHWSGu0Ndoaa421xlvjrYnWRGuyNdmaak21plvTrZnWTGu2Nduaa8215lvzrYXWQmuxtdhaai21llvLrZXWSmu1tdpaa6211lvrrY3WRmuztdnaam21tlvbrZ3WTmu3tdvaa+214q1464B1wDpkHbKOWEesY9Yx64R1wjplnbLOWGesBCvBOm+dty5aF63L1mXrqnXVum5dt25aN63b1m3rrnXXum/dtx5aD63H1mPrqfXMem69sF5ar6zX1hvrrfXOem99sD5an6zP1hfrq/XN+m79sH5av6zf1h8r0fpr/bOSrP8/9xcVW7U1W7cN27Qt27ah7diu7dm+HdihHdkxO5ed285j57Xz2fntAnZBu5Bd2C5iF7WL2cXtEnZJu5Rd2i5jl7XL2eXtCnZFu5Jd2a5iV7Wr2dXtGnZNu5Zd265j17Xr2fXtBnZDu5Hd2G5iN7Wb2c3tFnZLu5Xd2m5jt7Xb2e3tDnZHu5Pd2e5id7W72d3tHnZPu5fd2+5j97X72f3tAfZAe5A92B5iD7WH2cPtEfZIe5Q92h5jj7XH2ePtCfZEe5I92Z5iT7Wn2dPtGfZMe5Y9255jz7Xn2fPtBfZCe5G92F5iL7WX2cvtFfZKe5W92l5jr7XX2evtDfZGe5O92d5ib7W32dvtHfZOe5e9295j77X32fH2fvuAfdA+ZB+2j9hH7WP2cfuEfdI+ZZ+2z9hn7QT7nH3evmBftC/Zl+0r9lX7mn3dvmHftG/Zt+079l37nn3ffmA/tB/Zj+0n9lP7mf3cfmG/tF/Zr+039lv7nf3e/mB/tD/Zn+0v9lf7m/3d/mH/tH/Zv+0/dqL91/5nJ9lxMBlMDlPAlDAVTA3TwLQwHUwPM8CMMBPMDLPArDAbzA5zwJwQgSjEIA4JSEIKAkhDBrKQgzwUoAglKEMFqlCDOjSgCS1oQwgd6EIP+jCAIYxgDOaCuWEemBfmg/lhAVgQFoKFYRFYFBaDxWEJWBKWgqVhGVgWloPlYQVYEVaClWEVWBVWg9VhDVgT1oK1YR1YF9aD9WED2BA2go1hE9gUNoPNYQvYEraCrWEb2Ba2g+1hB9gRdoKdYRfYFXaD3WEP2BP2gr1hH9gX9oP94QA4EA6Cg+EQOBQOg8PhCDgSjoKj4Rg4Fo6D4+EEOBFOgpPhFDgVToPT4Qw4E86Cs+EcOBfOg/PhArgQLoKL4RK4FC6Dy+EKuBKugqvhGrgWroPr4Qa4EW6Cm+EWuBVug9vhDrgT7oK74R64F+6D8XA/PAAPwkPwMDwCj8Jj8Dg8AU/CU/A0PAPPwgR4Dp6HF+BFeAlehlfgVXgNXoc34E14C96Gd+BdeA/ehw/gQ/gIPoZP4FP4DD6HL+BL+Aq+hm/gW/gOvocf4Ef4CX6GX+BX+A1+hz/gT/gL/oZ/YCL8C//BJBjnJHOSOymclE4qJ7WTxknrpHPSOxmcjE4mJ7OTxcnqZHOyOzmcnA7ioA7m4A7hkA7lAId2GId1OId3BEd0JEd2FEd1NEd3DMd0LMd2oOM4ruM5vhM4oRM5MSeXk9vJ4+R18jn5nQJOQaeQU9gp4hR1ijnFnRJOSaeUU9op45R1yjnlnQpORaeSU9mp4lR1qjnVnRpOTaeWU9up49R16jn1nQZOQ6eR09hp4jR1mjnNnRZOS6eV09pp47R12jntnQ5OR6eT09np4nR1ujndnR5OT6eX09vp4/R1+jn9nQHOQGeQM9gZ4gx1hjnDnRHOSGeUM9oZ44x1xjnjnQnORGeSM9mZ4kx1pjnTnRnOTGeWM9uZ48x15jnznQXOQmeRs9hZ4ix1ljnLnRXOSmeVs9pZ46x11jnrnQ3ORmeTs9nZ4mx1tjnbnR3OTmeXs9vZ4+x19jnxzn7ngHPQOeQcdo44R51jznHnhHPSOeWcds44Z50E55xz3rngXHQuOZedK85V55pz3bnh3HRuObedO85d555z33ngPHQeOY+dJ85T55nz3HnhvHReOa+dN85b553z3vngfHQ+OZ+dL85X55vz3fnh/HR+Ob+dP06i89f55yQ5cW4yN7mbwk3ppnJTu2nctG46N72bwc3oZnIzu1ncrG42N7ubw83pIi7qYi7uEi7pUi5waZdxWZdzeVdwRVdyZVdxVVdzdddwTddybRe6juu6nuu7gRu6kRtzc7m53TxuXjefm98t4BZ0C7mF3SJuUbeYW9wt4ZZ0S7ml3TJuWbecW96t4FZ0K7mV3SpuVbeaW92t4dZ0a7m13TpuXbeeW99t4DZ0G7mN3SZuU7eZ29xt4bZ0W7mt3TZuW7ed297t4HZ0O7md3S5uV7eb293t4fZ0e7m93T5uX7ef298d4A50B7mD3SHuUHeYO9wd4Y50R7mj3THuWHecO96d4E50J7mT3SnuVHeaO92d4c50Z7mz3TnuXHeeO99d4C50F7mL3SXuUneZu9xd4a50V7mr3TXuWnedu97d4G50N7mb3S3uVnebu93d4e50d7m73T3uXnefG+/udw+4B91D7mH3iHvUPeYed0+4J91T7mn3jHvWTXDPuefdC+5F95J72b3iXnWvudfdG+5N95Z7273j3nXvuffdB+5D95H72H3iPnWfuc/dF+5L95X72n3jvnXfue/dD+5H95P72f3ifnW/ud/dH+5P95f72/3jJrp/3X9ukhvnJfOSeym8lF4qL7WXxkvrpfPSexm8jF4mL7OXxcvqZfOyezm8nB7ioR7m4R7hkR7lAY/2GI/1OI/3BE/0JE/2FE/1NE/3DM/0LM/2oOd4rud5vhd4oRd5MS+Xl9vL4+X18nn5vQJeQa+QV9gr4hX1innFvRJeSa+UV9or45X1ynnlvQpeRa+SV9mr4lX1qnnVvRpeTa+WV9ur49X16nn1vQZeQ6+R19hr4jX1mnnNvRZeS6+V19pr47X12nntvQ5eR6+T19nr4nX1unndvR5eT6+X19vr4/X1+nn9vQHeQG+QN9gb4g31hnnDvRHeSG+UN9ob4431xnnjvQneRG+SN9mb4k31pnnTvRneTG+WN9ub48315nnzvQXeQm+Rt9hb4i31lnnLvRXeSm+Vt9pb46311nnrvQ3eRm+Tt9nb4m31tnnbvR3eTm+Xt9vb4+319nnx3n7vgHfQO+Qd9o54R71j3nHvhHfSO+Wd9s54Z70E75x33rvgXfQueZe9K95V75p33bvh3fRuebe9O95d755333vgPfQeeY+9J95T75n33HvhvfReea+9N95b75333vvgffQ+eZ+9L95X75v33fvh/fR+eb+9P16i99f75yV5cX4yP7mfwk/pp/JT+2n8tH46P72fwc/oZ/Iz+1n8rH42P7ufw8/pIz7qYz7uEz7pUz7waZ/xWZ/zeV/wRV/yZV/xVV/zdd/wTd/ybR/6ju/6nu/7gR/6kR/zc/m5/Tx+Xj+fn98v4Bf0C/mF/SJ+Ub+YX9wv4Zf0S/ml/TJ+Wb+cX96v4Ff0K/mV/Sp+Vb+aX92v4df0a/m1/Tp+Xb+eX99v4Df0G/mN/SZ+U7+Z39xv4bf0W/mt/TZ+W7+d397v4Hf0O/md/S5+V7+b393v4ff0e/m9/T5+X7+f398f4A/0B/mD/SH+UH+YP9wf4Y/0R/mj/TH+WH+cP96f4E/0J/mT/Sn+VH+aP92f4c/0Z/mz/Tn+XH+eP99f4C/0F/mL/SX+Un+Zv9xf4a/0V/mr/TX+Wn+dv97f4G/0N/mb/S3+Vn+bv93f4e/0d/m7/T3+Xn+fH+/v9w/4B/1D/mH/iH/UP+Yf90/4J/1T/mn/jH/WT/DP+ef9C/5F/5J/2b/iX/Wv+df9G/5N/5Z/27/j3/Xv+ff9B/5D/5H/2H/iP/Wf+c/9F/5L/5X/2n/jv/Xf+e/9D/5H/5P/2f/if/W/+d/9H/5P/5f/2//jJ/p//X9+kh8XJAuSBymClEGqIHWQJkgbpAvSBxmCjEGmIHOQJcgaZAuyBzmCnAESoAEW4AERkAEVgIAOmIANuIAPhEAMpEAOlEANtEAPjMAMrMAOYOAEbuAFfhAEYRAFsSBXkDvIE+QN8gX5gwJBwaBQUDgoEhQNigXFgxJByaBUUDooE5QNygXlgwpBxaBSUDmoElQNqgXVgxpBzaBWUDuoE9QN6gX1gwZBw6BR0DhoEjQNmgXNgxZBy6BV0DpoE7QN2gXtgw5Bx6BT0DnoEnQNugXdgx5Bz6BX0DvoE/QN+gX9gwHBwGBQMDgYEgwNhgXDgxHByGBUMDoYE4wNxgXjgwnBxGBSMDmYEkwNpgXTgxnBzGBWMDuYE8wN5gXzgwXBwmBRsDhYEiwNlgXLgxXBymBVsDpYE6wN1gXrgw3BxmBTsDnYEmwNtgXbgx3BzmBXsDvYE+wN9gXxwf7gQHAwOBQcDo4ER4NjwfHgRHAyOBWcDs4EZ4OE4FxwPrgQXAwuBZeDK8HV4FpwPbgR3AxuBbeDO8Hd4F5wP3gQPAweBY+DJ8HT4FnwPHgRvAxeBa+DN8Hb4F3wPvgQfAw+BZ+DL8HX4FvwPfgR/Ax+Bb+DP0Fi8Df4FyQFcWGyMHmYIkwZpgpTh2nCtGG6MH2YIcwYZgozh1nCrGG2MHuYI8wZIiEaYiEeEiEZUiEI6ZAJ2ZAL+VAIxVAK5VAJ1VAL9dAIzdAK7RCGTuiGXuiHQRiGURgLc4W5wzxh3jBfmD8sEBYMC4WFwyJh0bBYWDwsEZYMS4WlwzJh2bBcWD6sEFYMK4WVwyph1bBaWD2sEdYMa4W1wzph3bBeWD9sEDYMG4WNwyZh07BZ2DxsEbYMW4WtwzZh27Bd2D7sEHYMO4Wdwy5h17Bb2D3sEfYMe4W9wz5h37Bf2D8cEA4MB4WDwyHh0HBYODwcEY4MR4WjwzHh2HBcOD6cEE4MJ4WTwynh1HBaOD3Z/9VQHM4J54bzwvnhgnBhuChcHC4Jl4bLwuXhinBluCpcHa4J14brwvXhhnBjuCncHG4Jt4bbwu3hjnBnuCvcHe4J94b7wvhwf3ggPBgeCg+HR8Kj4bHweHgiPBmeCk+HZ8KzYUJ4LjwfXggvhpfCy+GV8Gp4Lbwe3ghvhrfC2+Gd8G54L7wfPggfho/Cx+GT8Gn4LHwevghfhq/C1+Gb8G34Lnwffgg/hp/Cz+GX8Gv4Lfwe/gh/hr/C3+GfMDH8G/4Lk8K4KFmUPEoRpYxSRamjNFHaKF2UPsoQZYwyRZmjLFHWKFuUPcoR5YyQCI2wCI+IiIyoCER0xERsxEV8JERiJEVypERqpEV6ZERmZEV2BCMnciMv8qMgCqMoikW5otxRnihvlC/KHxWICkaFosJRkahoVCwqHpWISkalotJRmahsVC4qH1WIKkaVospRlahqVC2qHtWIaka1otpRnahuVC+qHzWIGkaNosZRk6hp1CxqHrWIWkatotZRm6ht1C5qH3WIOkados5Rl6hr1C3qHvWIeka9ot5Rn6hv1C/qHw2IBkaDosHRkGhoNCwaHo2IRkajotHRmGhsNC4aH02IJkaTosnRlGhqNC2aHs2IZkazotnRnGhuNC+aHy2IFkaLosXRkmhptCxaHq2IVkarotXRmmhttC5aH22INkabos3RlmhrtC3aHu2Idka7ot3RnmhvtC+Kj/ZHB6KD0aHocHQkOhodi45HJ6KT0anodHQmOhslROei89GF6GJ0KbocXYmuRtei69GN6GZ0K7od3YnuRvei+9GD6GH0KHocPYmeRs+i59GL6GX0KnodvYneRu+i99GH6GP0KfocfYm+Rt+i79GP6Gf0K/od/YkSo7/RvygpiosliyWPpYiljKWKpY6liaWNpYulj2WIZYxlimWOZYlljWWLZY/liOWMITE0hsXwGBEjY1QMxOgYE2NjXIyPCTExJsXkmBJTY1pMjxkxM2bF7BiMOTE35sX8WBALY1EsFssVyx3LE8sbyxfLHysQKxgrFCscKxIrGisWKx4rESsZKxUrHSsTKxsrFysfqxCrGKsUqxyrEqsaqxarHqsRq/l/sHQPi5k1CQBAk7Zt28a1Wdeq+tq2bdu2bdu2bVtpm5nF/C9xtgergdXEamG1sTpYXaweVh9rgDXEGmGNsSZYU6wZ1hxrgbXEWmGtsTZYW6wd1h7rgHXEOmGdsS5YV6wb1h3rgfXEemG9sT5YX6wf1h8bgA3EBmGDsSHYUGwYNhwbgY3ERmGjsTHYWGwcNh6bgE3EJmGTsSnYVGwaNh2bgc3EZmGzsTnYXGweNh9bgC3EFmGLsSXYUmwZthxbga3EVmGrsTXYWmwdth7bgG3ENmGbsS3YVmwbth3bge3EdmG7sT3YXmwfth87gB3EDmGHsSPYUewYdhw7gZ3ETmGnsTPYWewcdh67gF3ELmGXsSvYVewadh27gd3EbmG3sTvYXewedh97gD3EHmGPsSfYU+wZ9hx7gb3EXmGvsTdYAvYWe4e9xz5gH7FP2GfsC/YV+4Z9x34k/Yn9wn5jf7C/2D8sEYvD4/EkeFI8GZ4cT4GnxFPhqfE0eFo8HZ4ez4BnxDPhmfEseFY8G54dz4HnxHPhufE8eF48H54fL4AXxAvhhfEieFG8GF4cL4GXxEvhpfEyeFm8HF4er4BXxCvhlfEqeFW8Gl4dx3AcJ3ASp3AaZ3AW53AeF3ARl3AZV3AV13AdB7iBm7iF27iDu7iH+3iAh3iEQxzhMbwGXhOvhdfG6+B18Xp4fbwB3hBvhDfGm+BN8WZ4c7xFfLL/K423xdvh7fEOeEe8E94Z74J3xbvh3fEeeE+8F94b74P3xfvh/fEB+EB8ED4YH4IPxYfhw/ER+Eh8FD4aH4OPxcfh4/EJ+ER8Ej4Zn4JPxafh0/EZ+Ex8Fj4bn4PPxefh8/EF+EJ8Eb4YX4IvxZfhy/EV+Ep8Fb4aX4Ovxdfh6/EN+EZ8E74Z34Jvxbfh2/Ed+E58F74b34Pvxffh+/ED+EH8EH4YP4IfxY/hx/ET+En8FH4aP4Ofxc/h5/EL+EX8En4Zv4Jfxa/h1/Eb+E38Fn4bv4Pfxe/h9/EH+EP8Ef4Yf4I/xZ/hz/EX+Ev8Ff4af4Mn4G/xd/h7/AP+Ef+Ef8a/4F/xb/h3/Af+E/+F/8b/4H/xf3giHkfEE0mIpEQyIjmRgkhJpCJSE2mItEQ6Ij2RgchIZCIyE1mIrEQ2IjuRg8hJ5CJyE3mIvEQ+Ij9RgChIFCIKE0WIokQxojhRgihJlCJKE2WIskQ5ojxRgahIVCIqE1WIqkQ1ojqBEThBECRBETTBECzBETwhECIhETKhECqhEToBCIMwCYuwCYdwCY/wiYAIiYiABCJiRA2iJlGLqE3UIeoS9Yj6RAOiIdGIaEw0IZoSzYjmRAuiJdGKaE20IdoS7Yj2RAeiI9GJ6Ex0IboS3YjuRA+iJ9GL6E30IfoS/Yj+xABiIDGIGEwMIYYSw4jhxAhiJDGKGE2MIcYS44jxxARiIjGJmExMIaYS04jpxAxiJjGLmE3MIeYS84j5xAJiIbGIWEwsIZYSy4jlxApiJbGKWE2sIdYS64j1xAZiI7GJ2ExsIbYS24jtxA5iJ7GL2E3sIfYS+4j9xAHiIHGIOEwcIY4Sx4jjxAniJHGKOE2cIc4S54jzxAXiInGJuExcIa4S14jrxA3iJnGLuE3cIe4S94j7xAPiIfGIeEw8IZ4Sz4jnxAviJfGKeE28IRKIt8Q74j3xgfhIfCI+E1+Ir8Q34jvxg/hJ/CJ+E3+Iv8Q/IpGII+PJJGRSMhmZnExBpiRTkanJNGRaMh2ZnsxAZiQzkZnJLGRWMhuZncxB5iRzkbnJPGReMh+ZnyxAFiQLkYXJImRRshhZnCxBliRLkaXJMmRZshxZnqxAViQrkZXJKmRVshpZncRInCRIkqRImmRIluRInhRIkZRImVRIldRInQSkQZqkRdqkQ7qkR/pkQIZkREISkTGyBlmTrEXWJuuQdcl6ZH2yAdmQbEQ2JpuQTclmZHOyBdmSbEW2JtuQbcl2ZHuyA9mR7ER2JruQXcluZHeyB9mT7EX2JvuQfcl+ZH9yADmQHEQOJoeQQ8lh5HByBDmSHEWOJseQY8lx5HhyAjmRnEROJqeQU8lp5HRyBjmTnEXOJueQc8l55HxyAbmQXEQuJpeQS8ll5HJyBbmSXEWuJteQa8l15HpyA7mR3ERuJreQW8lt5HZyB7mT3EXuJveQe8l95H7yAHmQPEQeJo+QR8lj5HHyBHmSPEWeJs+QZ8lz5HnyAnmRvEReJq+QV8lrZGLcDfImeYu8Td4h75L3yPvkA/Ih+Yh8TD4hn5LPyOfkC/Il+Yp8Tb4hE8i35DvyPfmB/Eh+Ij+TX8iv5DfyO/mD/En+In+Tf8i/5D8ykYyj4qkkVFIqGZWcSkGlpFJRqak0VFoqHZWeykBlpDJRmaksVFYqG5WdykHlpHJRuak8VF4qH5WfKkAVpApRhakiVFGqGFWcKkGVpEpRpakyVFmqHFWeqkBVpCpRlakqVFWqGlWdwiicIiiSoiiaYiiW4iieEiiRkiiZUiiV0iidApRBmZRF2ZRDuZRH+VRAhVREQQpRMaoGVZOqRdWm6lB1qXpUfaoB1ZBqRDWmmlBNqWZUc6oF1ZJqRbWm2lBtqXZUe6oD1ZHqRHWmulBdqW5Ud6oH1ZPqRfWm+lB9qX5Uf2oANZAaRA2mhlBDqWHUcGoENZIaRY2mxlBjqXHUeGoCNZGaRE2mplBTqWnUdGoGNZOaRc2m5lBzqXnUfGoBtZBaRC2mllBLqWXUcmoFtZJaRa2m1lBrqXXUemoDtZHaRG2mtlBbqW3UdmoHtZPaRe2m9lB7qX3UfuoAdZA6RB2mjlBHqWPUceoEdZI6RZ2mzlBnqXPUeeoCdZG6RF2mrlBXqWvUdeoGdZO6Rd2m7lB3qXvUfeoB9ZB6RD2mnlBPqWfUc+oF9ZJ6Rb2m3lAJ1FvqHfWe+kB9pD5Rn6kv1FfqG/Wd+kH9pH5Rv6k/1F/qH5VIxdHxdBI6KZ2MTk6noFPSqejUdBo6LZ2OTk9noDPSmejMdBY6K52Nzk7noHPSuejcdB46L52Pzk8XoAvShejCdBG6KF2MLk6XoEvSpejSdBm6LF2OLk9XoCvSlejKdBW6Kl2Nrk5jNE4TNElTNE0zNEtzNE8LtEhLtEwrtEprtE4D2qBN2qJt2qFd2qN9OqBDOqIhjegYXYOuSdeia9N16Lp0Pbo+3YBuSDeiG9NN6KZ0M7o53YJuSbeiW9Nt6LZ0O7o93YHuSHeiO9Nd6K50N7o73YPuSfeie9N96L50P7o/PYAeSA+iB9ND6KH0MHo4PYIeSY+iR9Nj6LH0OHo8PYGeSE+iJ9NT6Kn0NHo6PYOeSc+iZ9Nz6Ln0PHo+vYBeSC+iF9NL6KX0Mno5vYJeSa+iV9Nr6LX0Ono9vYHeSG+iN9Nb6K30Nno7vYPeSe+id9N76L30Pno/fYA+SB+iD9NH6KP0Mfo4fYI+SZ+iT9Nn6LP0Ofo8fYG+SF+iL9NX6Kv0Nfo6fYO+Sd+ib9N36Lv0Pfo+/YB+SD+iH9NP6Kf0M/o5/YJ+Sb+iX9Nv6AT6Lf2Ofk9/oD/Sn+jP9Bf6K/2N/k7/oH/Sv+jf9B/6L/2PTqTjmHgmCZOUScYkZ1IwKZlUTGomDZOWScekZzIwGZlMTGYmC5OVycZkZ3IwOZlcTG4mD5OXycfkZwowBZlCTGGmCFOUKcYUZ0owJZlSTGmmDFOWKceUZyowFZlKTGWmClOVqcZUZzAGZwiGZCiGZhiGZTiGZwRGZCRGZhRGZTRGZwBjMCZjMTbjMC7jMT4TMCETMZBBTIypwdRkajG1mTpMXaYeU59pwDRkGjGNmSZMU6YZ05xpwbRkWjGtmTZMW6Yd057pwHRkOjGdmS5MV6Yb053pwfRkejG9mT5MX6Yf058ZwAxkBjGDmSHMUGYYM5wZwYxkRjGjmTHMWGYcM56ZwExkJjGTmSnMVGYaM52ZwcxkZjGzmTnMXGYeM59ZwCxkFjGLmSXMUmYZs5xZwaxkVjGrmTXMWmYds57ZwGxkNjGbmS3MVmYbs53ZwexkdjG7mT3MXmYfs585wBxkDjGHmSPMUeYYc5w5wZxkTjGnmTPMWeYcc565wFxkLjGXmSvMVeYac525wdxkbjG3mTvMXeYec595wDxkHjGPmSfMU+YZ85x5wbxkXjGvmTdMAvOWece8Zz4wH5lPzGfmC/OV+cZ8Z34wP5lfzG/mD/OX+cckMnFsPJuETcomY5OzKdiUbCo2NZuGTcumY9OzGdiMbCY2M5uFzcpmY7OzOdicbC42N5uHzcvmY/OzBdiCbCG2MFuELcoWY4uzJdiSbCm2NFuGLcuWY8uzFdiKbCW2MluFrcpWY6uzGIuzBEuyFEuzDMuyHMuzAiuyEiuzCquyGquzgDVYk7VYm3VYl/VYnw3YkI1YyCI2xtZga7K12NpsHbYuW4+tzzZgG7KN2MZsE7Yp24xtzrZgW7Kt2NZsG7Yt245tz3ZgO7Kd2M5sF7Yr243tzvZge7K92N5sH7Yv24/tzw5gB7KD2MHsEHYoO4wdzo5gR7Kj2NHsGHYsO44dz05gJ7KT2MnsFHYqO42dzs5gZ7Kz2NnsHHYuO4+dzy5gF7KL2MXsEnYpu4xdzq5gV7Kr2NXsGnYtu45dz25gN7Kb2M3sFnYru43dzu5gd7K72N3sHnYvu4/dzx5gD7KH2MPsEfYoe4w9zp5gT7Kn2NPsGfYse449z15gL7KX2MvsFfYqe429zt5gb7K32NvsHfYue4+9zz5gH7KP2MfsE/Yp+4x9zr5gX7Kv2NfsGzaBfcu+Y9+zH9iP7Cf2M/uF/cp+Y7+zP9if7C/2N/uH/cv+YxPZOC6eS8Il5ZJxybkUXEouFZeaS8Ol5dJx6bkMXEYuE5eZy8Jl5bJx2bkcXE4uF5eby8Pl5fJx+bkCXEGuEFeYK8IV5YpxxbkSXEmuFFeaK8OV5cpx5bkKXEWuEleZq8JV5apx1TmMwzmCIzmKozmGYzmO4zmBEzmJkzmFUzmN0znAGZzJWZzNOZzLeZzPBVzIRRzkEBfjanA1uVpcba4OV5erx9XnGnANuUZcY64J15RrxjXnWnAtuVZca64N15Zrx7XnOnAduU5cZ64L15XrxqWO68H15Hpxvbk+XF+uH9efG8AN5AZxg7kh3FBuGDecG8GN5EZxo7kx3FhuHDeem8BN5CZxk7kp3FRuGjedm8HN5GZxs7k53FxuHjefW8At5BZxi7kl3FJuGbecW8Gt5FZxq7k13FpuHbee28Bt5DZxm7kt3FZuG7ed28Ht5HZxu7k93F5uH7efO8Ad5A5xh7kj3FHuGHecO8Gd5E5xp7kz3FnuHHeeu8Bd5C5xl7kr3FXuGnedu8Hd5G5xt7k73F3uHnefe8A95B5xj7kn3FPuGfece8G95F5xr7k3XAL3lnvHvec+cB+5T9xn7gv3lfvGfed+cD+5X9xv7g/3l/vHJXJxfDyfhE/KJ+OT8yn4lHwqPjWfhk/Lp+PT8xn4jHwmPjOfhc/KZ+Oz8zn4nHwuPjefh8/L5+Pz8wX4gnwhvjBfhC/KF+OL8yX4knwpvjRfhi/Ll+PL8xX4inwlvjJfha/KV+Or8xiP8wRP8hRP8wzP8hzP8wIv8hIv8wqv8hqv84A3eJO3eJt3eJf3eJ8P+JCPeMgjPsbX4GvytfjafB2+Ll+Pr8834BvyjfjGfBO+Kd+Mb8634FvyrfjWfBu+Ld+Ob8934DvynfjOfBe+K9+N78734HvyvfjefB++L9+P788P4Afyg/jB/BB+KD+MH86P4Efyo/jR/Bh+LD+OH89P4Cfyk/jJ/BR+Kj+Nn87P4Gfys/jZ/Bx+Lj+Pn88v4Bfyi/jF/BJ+Kb+MX86v4Ffyq/jV/Bp+Lb+OX89v4Dfym/jN/BZ+K7+N387v4Hfyu/jd/B5+L7+P388f4A/yh/jD/BH+KH+MP86f4E/yp/jT/Bn+LH+OP89f4C/yl/jL/BX+Kn+Nv87f4G/yt/jb/B3+Ln+Pv88/4B/yj/jH/BP+Kf+Mf86/4F/yr/jX/Bs+gX/Lv+Pf8x/4j/wn/jP/hf/Kf+O/8z/4n/wv/jf/h//L/+MT+TghXkgiJBWSCcmFFEJKIZWQWkgjpBXSCemFDEJGIZOQWcgiZBWyCdmFHEJOIZeQW8gj5BXyCfmFAkJBoZBQWCgiFBWKCcWFEkJJoZRQWigjlBXKCeWFCkJFoZJQWagiVBWqCdUFTMAFQiAFSqAFRmAFTuAFQRAFSZAFRVAFTdAFIBiCKViCLTiCK3iCLwRCkri4OCggISbUEGoKtYTaQh2hrlBPqC80EBoKjYTGQhOhqdBMaC60EFoKrYTWQhuhrdBOaC90EDoKnYTOQhehq9BN6C70EHoKvYTeQh+hr9BP6C8MEAYKg4TBwhBhqDBMGC6MEEYKo4TRwhhhrDBOGC9MECYKk4TJwhRhqjBNmC7MEGYKs4TZwhxhrjBPmC8sEBYKi4TFwhJhqbBMWC6sEFYKq4TVwhphrbBOWC9sEDYKm4TNwhZhq7BN2C7sEHYKu4Tdwh5hr7BP2C8cEA4Kh4TDwhHhqHAsbUJcnHBSOCWcFs4IZ4VzwnnhgnBRuCRcFq4IV4VrwnXhhnBTuCXcFu4Id4V7wn3hgfBQeCQ8Fp4IT4VnwnPhhfBSeCW8Ft4ICcJb4Z3wXvggfBQ+CZ+FL8JX4ZvwXfgh/BR+Cb+FP8Jf4Z+QKMSJ8WISMamYTEwuphBTiqnE1GIaMa2YTkwvZhAzipnEzGIWMauYTcwu5hBzirnE3GIeMa+YT8wvFhALioXEwmIRsahYTCwulhBLiqXE0mIZsaxYTiwvVhAripXEymIVsapYTawuYiIuEiIpUiItMiIrciIvCqIoSqIsKqIqaqIuAtEQTdESbdERXdETfTEQQzESoYjEmFhDrCnWEmuLdcS6Yj2xvthAbCg2EhuLTcSmYjOxudhCbCm2EluLbcS2YjuxvdhB7Ch2EjuLXcSuYjexu9hD7Cn2EnuLfcS+Yj+xvzhAHCgOEgeLQ8Sh4jBxuDhCHCmOEkeLY8Sx4jhxvDhBnChOEieLU8Sp4jRxujhDnCnOEmeLc8S54jxxvrhAXCguEheLS8Sl4jJxubhCXCmuEleLa8S14jpxvbhB3ChuEjeLW8St4jZxu7hD3CnuEneLe8S94j5xv3hAPCgeEg+LR8Sj4jHxuHhCPCmeEk+LZ8Sz4jnxvHhBvCheEi+LV8Sr4jXxunhDvCneEm+Ld8S74j3xvvhAfCg+Eh+LT8Sn4jPxufhCfCm+El+Lb8QE8a34TnwvfhA/ip/Ez+IX8av4Tfwu/hB/ir/E3+If8a/4T0wU46R4KYmUVEomJZdSSCmlVFJqKY2UVkonpZcySBmlTFJmKYuUVcomZZdySDmlXFJuKY+UV8on5ZcKSAWlQlJhqYhUVComFZdKSCWlUlJpqYxUVionlZcqSBWlSlJlqYpUVaomVZcwCZcIiZQoiZYYiZU4iZcESZQkSZYUSZU0SZeAZEimZEm25Eiu5Em+FEihFElQQlJMqiHVlGpJtaU6Ul2pnlRfaiA1lBpJjaUmUlOpmdRcaiG1lFpJraU2UlupndRe6iB1lDpJnaUuUlepm9Rd6iH1lHpJvaU+Ul+pn9RfGiANlAZJg6Uh0lBpmDRcGiGNlEZJo6Ux0lhpnDRemiBNlCZJk6Up0lRpmjRdmiHNlGZJs6U50lxpnjRfWiAtlBZJi6Ul0lJpmbRcWiGtlFZJq6U10lppnbRe2iBtlDZJm6Ut0lZpm7Rd2iHtlHZJu6U90l5pn7RfOiAdlA5Jh6Uj0lHpmHRcOiGdlE5Jp6Uz0lnpnHReuiBdlC5Jl6Ur0lXpmnRduiHdlG5Jt6U70l3pnnRfeiA9lB5Jj6Un0lPpmfRceiG9lF5Jr6U3UoL0VnonvZc+SB+lT9Jn6Yv0VfomfZd+SD+lX9Jv6Y/0V/onJUpxcrycRE4qx8cll1PIKeVUcmo5jZxWTienlzPIGeVMcmY5i5xVziZnl3PIOeVccm45j5xXzifnlwvIBeVCcmG5iFxULiYXl0vIJeVScmm5jFxWLieXlyvIFeVKcmW5ilxVriZXlzEZlwmZlCmZlhmZlTmZlwVZlCVZlhVZlTVZl4FsyKZsybbsyK7syb4cyKEcyVBGckyuIdeUa8m15TpyXbmeXF9uIDeUG8mN5SZyU7mZ3FxuIbeUW8mt5TZyW7md3F7uIHeUO8md5S5yV7mb3F3uIfeUe8m95T5yX7mf3F8eIA+UB8mD5SHyUHmYPFweIY+UR8mj5THyWHmcPF6eIE+UJ8mT5SnyVHmaPF2eIc+UZ8mz5TnyXHmePF9eIC+UF8mL5SXyUnmZvFxeIa+UV8mr5TXyWnmdvF7eIG+UN8mb5S3yVnmbvF3eIe+Ud8m75T3yXnmfvF8+IB+UD8mH5SPyUfmYfFw+IZ+UT8mn5TPyWfmcfF6+IF+UL8mX5SvyVfmafF2+Id+Ub8m35TvyXfmefF9+ID+UH8mP5SfyU/mZ/Fx+Ib+UX8mv5TdygvxWfie/lz/IH+VP8mf5i/xV/iZ/l3/IP+Vf8m/5j/xX/icnynFKvJJESaokU5IrKZSUSioltZJGSaukU9IrGZSMSiYls5JFyapkU7IrOZScSi4lt5JHyavkU/IrBZSCSiGlsFJEKaoUU4orJZSSSimltFJGKauUU8orFZSKSiWlslJFqapUU6ormIIrhEIqlEIrjMIqnMIrgiIqkiIriqIqmqIrQDEUU7EUW3EUV/EUXwmUUIkUqCAlptRQaiq1lNpKHaWuUk+przRQGiqNlMZKE6Wp0kxprrRQWiqtlNZKG6Wt0k5pr3RQOiqdlM5KF6Wr0k3prvRQeiq9lN5KH6Wv0k/prwxQBiqDlMHKEGWoMkwZroxQRiqjlNHKGGWsMk4Zr0xQJiqTlMnKFGWqMk2ZrsxQZiqzlNnKHGWuMk+ZryxQFiqLlMXKEmWpskxZrqxQViqrlNXKGmWtsk5Zr2xQNiqblM3KFmWrsi0+Ttmh7FR2KbuVPcpeZZ+yXzmgHFQOKYeVI8pR5ZhyXDmhnFROKaeVM8pZ5ZxyXrmgXFQuKZeVK8pV5ZpyXbmh3FRuKbeVO8pd5Z5yX3mgPFQeKY+VJ8pT5ZnyXHmhvFReKa+VN0qC8lZ5p7xXPigflU/KZ+WL8lX5pnxXfig/lV/Kb+WP8lf5pyQqcWq8mkRNqiZTk6sp1JRqKjW1mkZNq6ZT06sZ1IxqJjWzmkXNqmZTs6s51JxqLjW3mkfNq+ZT86sF1IJqIbWwWkQtqhZTi6sl1JJqKbW0WkYtq5ZTy6sV1IpqJbWyWkWtqlZTq6uYiquESqqUSquMyqqcyquCKqqSKquKqqqaqqsA/HdgqY7qqp7qq4EaqpEKVaTG1BpqTbWWWluto9ZV66n11QZqQ7WR2lhtojZVm6nN1RZqS7WV2lpto7ZV26nt1Q5qR7WT2lntonZVu6nd1R5qT7WX2lvto/ZV+6n91QHqQHWQOlgdog5Vh6nD1RHqSHWUOlodo45Vx6nj1QnqRHWSOlmdok5Vp6nT1RnqTHWWOludo85V56nz1QXqQnWRulhdoi5Vl6nL1RXqSnWVulpdo65V16nr1Q3qRnWTulndom5Vt6nb1R3qTnWXulvdo+5V96n71QPqQfWQelg9oh5Vj6nH1RPqSfWUelo9o55Vz6nn1QvqRfWSelm9ol5Vr6nX1RvqTfWWelu9o95V76n31QfqQ/WR+lh9oj5Vn6nP1RfqS/WV+lp9oyaob9V36nv1g/pR/aR+Vr+oX9Vv6nf1h/pT/aX+Vv+of9V/aqIap8VrSbSkWjItuZZCS6ml0lJrabS0WjotvZZBy6hl0jJrWbSsWjYtu5ZDy6nl0nJrebS8Wj4tv1ZAK6gV0gprRbSiWjGtuFZCK6mV0kprZbSyWjmtvFZBq6hV0iprVbSqWjWtuoZpuEZopEZptMZorMZpvCZooiZpsqZoqqZpugY0QzM1S7M1R3M1T/O1QAu1SIMa0mJaDa2mVkurrdXR6mr1tPpaA62h1khrrDXRmmrNtOZaC62l1kprrbXR2mrttPZaB62j1knrrHXRumrdtO5aD62n1kvrrfXR+mr9tP7aAG2gNkgbrA3RhmrDtOHaCG2kNkobrY3RxmrjtPHaBG2iNkmbrE3RpmrTtOnaDG2mNkubrc3R5mrztPnaAm2htkhbrC3RlmrLtOXaCm2ltkpbra3R1mrrtPXaBm2jtknbrG3RtmrbtO3aDm2ntkvbre3R9mr7tP3aAe2gdkg7rB3RjmrHtOPaCe2kdko7rZ3RzmrntPPaBe2idkm7rF3RrmrXtOvaDe2mdku7rd3R7mr3tPvaA+2h9kh7rD3RnmrPtOfaC+2l9kp7rb3RErS32jvtvfZB+6h90j5rX7Sv2jftu/ZD+6n90n5rf7S/2j8tUYvT4/UkelI9mZ5cT6Gn1FPpqfU0elo9nZ5ez6Bn1DPpmfUselY9m55dz6Hn1HPpufU8el49n55fL6AX1AvphfUielG9mF5cL6GX1EvppfUyelm9nF5er6BX1CvplfUqelW9ml5dx3RcJ3RSp3RaZ3RW53ReF3RRl3RZV3RV13RdB7qhm7ql27qju7qn+3qgh3qkQx3pMb2GXlOvpdfW6+h19Xp6fb2B3lBvpDfWm+hN9WZ6c72F3lJvpbfW2+ht9XZ6e72D3lHvpHfWu+hd9W56d72H3lPvpffW++h99X56f32APlAfpA/Wh+hD9WH6cH2EPlIfpY/Wx+hj9XH6eH2CPlGfpE/Wp+hT9Wn6dH2GPlOfpc/W5+hz9Xn6fH2BvlBfpC/Wl+hL9WX6cn2FvlJfpa/W1+hr9XX6en2DvlHfpG/Wt+hb9W36dn2HvlPfpe/W9+h79X36fv2AflA/pB/Wj+hH9WP6cf2EflI/pZ/Wz+hn9XP6ef2CflG/pF/Wr+hX9Wv6df2GflO/pd/W7+h39Xv6ff2B/lB/pD/Wn+hP9Wf6c/2F/lJ/pb/W3+gJ+lv9nf5e/6B/1D/pn/Uv+lf9m/5d/6H/1H/pv/U/+l/9n56ox4F4kAQkBclAcpACpASpQGqQBqQF6UB6kAFkBJlAZpAFZAXZQHaQA+QEuUBukAfkBflAflAAFASFQGFQBBQFxUBxUAKUBKVAaVAGlAXlQHlQAVQElUBlUAVUBdVAdYABHBCABBSgAQNYwAEeCEAEEpCBAlSgAR0AYAATWMAGDnCBB3wQgBBEAAIEYqAGqAlqgdqgDqgL6oH6oAFoCBqBxqAJaAqageagBWgJWoHWoA1oC9qB9qAD6Ag6gc6gC+gKuoHuoAfoCXqB3qAP6Av6gf5gABgIBoHBYAgYCoaB4WAEGAlGgdFgDBgLxoHxYAKYCCaByWAKmAqmgelgBpgJZoHZYA6YC+aB+WABWAgWgcVgCVgKloHlYAVYCVaB1WANWAvWgfVgA9gINoHNYAvYCraB7WAH2Al2gd1gD9gL9oH94AA4CA6Bw+AIOAqOgePgBDgJToHT4Aw4C86B8+ACuAgugcvgCrgKroHr4Aa4CW6B2+AOuAvugfvgAXgIHoHH4Al4Cp6B5+AFeAlegdfgDUgAb8E78B58AB/BJ/AZfAFfwTfwHfwAP8Ev8Bv8AX/BP5AI4ox4I4mR1EhmJDdSGCmNVEZqI42R1khnpDcyGBmNTEZmI4uR1chmZDdyGDmNXEZuI4+R18hn5DcKGAWNQkZho4hR1ChmFDdKGCWNUkZpo4xR1ihnlDcqGBWNSkZlo4pR1ahmVDcwAzcIgzQogzYYgzU4gzcEQzQkQzYUQzU0QzeAYRimYRm24Riu4Rm+ERihERnQQEbMqGHUNGoZtY06Rl2jnlHfaGA0NBoZjY0mRlOjmdHcaGG0NFoZrY02RlujndHe6GB0NDoZnY0uRlejm9Hd6GH0NHoZvY0+Rl+jn9HfGGAMNAYZg40hxlBjmDHcGGGMNEYZo40xxlhjnDHemGBMNCYZk40pxlRjmjHdmGHMNGYZs405xlxjnjHfWGAsNBYZi40lxlJjmbHcWGGsNFYZq401xlpjnbHe2GBsNDYZm40txlZjm7Hd2GHsNHYZu409xl5jn7HfOGAcNA4Zh40jxlHjmHHcOGGcNE4Zp40zxlnjnHHeuGBcNC4Zl40rxlXjmnHduGHcNG4Zt407xl3jnnHfeGA8NB4Zj40nxlPjmfHceGG8NF4Zr403RoLx1nhnvDc+GB+NT8Zn44vx1fhmfDd+GD+NX8Zv44/x1/hnJBpxZryZxExqJjOTmynMlGYqM7WZxkxrpjPTmxnMjGYmM7OZxcxqZjOzmznMnGYuM7eZx8xr5jPzmwXMgmYhs7BZxCxqFjOLmyXMkmYps7RZxixrljPLmxXMimYls7JZxaxqVjOrm5iJm4RJmpRJm4zJmpzJm4IpmpIpm4qpmpqpm8A0TNO0TNt0TNf0TN8MzNCMTGgiM2bWMGuatczaZh2zrlnPrG82MBuajczGZhOzqdnMbG62MFuarczWZhuzrdnObG92MDuanczOZhezq9nN7G72MHuavczeZh+zr9nP7G8OMAeag8zB5hBzqDnMHG6OMEeao8zR5hhzrDnOHG9OMCeak8zJ5hRzqjnNnG7OMGeas8zZ5hxzrjnPnG8uMBeai8zF5hJzqbnMXG6uMFeaq8zV5hpzrbnOXG9uMDeam8zN5hZzq7nN3G7uMHeau8zd5h5zr7nP3G8eMA+ah8zD5hHzqHnMPG6eME+ap8zT5hnzrHnOPG9eMC+al8zL5hXzqnnNvG7eMG+at8zb5h3zrnnPvG8+MB+aj8zH5hPzqfnMfG6+MF+ar8zX5hszwXxrvjPfmx/Mj+Yn87P5xfxqfjO/mz/Mn+Yv87f5x/xr/jMTzTgr3kpiJbWSWcmtFFZKK5WV2kpjpbXSWemtDFZGK5OV2cpiZbWyWdmtHFZOK5eV28pj5bXyWfmtAlZBq5BV2CpiFbWKWcWtElZJq5RV2ipjlbXKWeWtClZFq5JV2apiVbWqWdUtzMItwiItyqItxmItzuItwRItyZItxVItzdItYBmWaVmWbTmWa3mWbwVWaEUWtJAVs2pYNa1aVm2rjlXXqmfVtxpYDa1GVmOridXUamY1t1pYLa1WVmurjdXWame1tzpYHa1OVmeri9XV6mZ1t3pYPa1eVm+rj9XX6mf1twZYA61B1mBriDXUGmYNt0ZYI61R1mhrjDXWGmeNtyZYE61J1mRrijXVmmZNt2ZYM61Z1mxrjjXXmmfNtxZYC61F1mJribXUWmYtt1ZYK61V1mprjbXWWmettzZYG61N1mZri7XV2mZtt3ZYO61d1m5rj7XX2mfttw5YB61D1mHriHXUOmYdt05YJ61T1mnrjHXWOmedty5YF61L1mXrinXVumZdt25YN61b1m3rjnXXumfdtx5YD61H1mPrifXUemY9t15YL61X1mvrjZVgvbXeWe+tD9ZH65P12fpifbW+Wd+tH9ZP65f12/pj/bX+WYlWnB1vJ7GT2sns5HYKO6Wdyk5tp7HT2uns9HYGO6Odyc5sZ7Gz2tns7HYOO6edy85t57Hz2vns/HYBu6BdyC5sF7GL2sXs4nYJu6Rdyi5tl7HL2uXs8nYFu6Jdya5sV7Gr2tXs6jZm4zZhkzZl0zZjszZn87Zgi7Zky7Ziq7Zm6zawDdu0Ldu2Hdu1Pdu3Azu0IxvayI7ZNeyadi27tl3HrmvXs+vbDeyGdiO7sd3Ebmo3s5vbLeyWdiu7td3Gbmu3s9vbHeyOdie7s93F7mp3s7vbPeyedi+7t93H7mv3s/vbA+yB9iB7sD3EHmoPs4fbI+yR9ih7tD3GHmuPs8fbE+yJ9iR7sj3FnmpPs6fbM+yZ9ix7tj3HnmvPs+fbC+yF9iJ7sb3EXmovs5fbK+yV9ip7tb3GXmuvs9fbG+yN9iZ7s73F3mpvs7fbO+yd9i57t73H3mvvs/fbB+yD9iH7sH3EPmofs4/bJ+yT9in7tH3GPmufs8/bF+yL9iX7sn3Fvmpfs6/bN+yb9i37tn3Hvmvfs+/bD+yH9iP7sf3Efmo/s5/bL+yX9iv7tf3GTrDf2u/s9/YH+6P9yf5sf7G/2t/s7/YP+6f9y/5t/7H/2v/sRDvOiXeSOEmdZE5yJ4WT0knlpHbSOGmddE56J4OT0cnkZHayOFmdbE52J4eT08nl5HbyOHmdfE5+p4BT0CnkFHaKOEWdYk5xp4RT0inllHbKOGWdck55p4JT0ankVHaqOFWdak51B3Nwh3BIh3Joh3FYh3N4R3BER3JkR3FUR3N0BziGYzqWYzuO4zqe4zuBEzqRAx3kxJwaTk2nllPbqePUdeo59Z0GTkOnkdPYaeI0dZo5zZ0WTkunldPaaeO0ddo57Z0OTkenk9PZ6eJ0dbo53Z0eTk+nl9Pb6eP0dfo5/Z0BzkBnkDPYGeIMdYY5w50RzkhnlDPaGeOMdcY5450JzkRnkjPZmeJMdaY5050ZzkxnljPbmePMdeY5850FzkJnkbPYWeIsdZY5y50VzkpnlbPaWeOsddY5650NzkZnk7PZ2eJsdbY5250dzk5nl7Pb2ePsdfY5+50DzkHnkHPYOeIcdY45x50TzknnlHPaOeOcdc45550LzkXnknPZueJcda45150bzk3nlnPbuePcde45950HzkPnkfPYeeI8dZ45z50XzkvnlfPaeeMkOG+dd85754Pz0fnkfHa+OF+db85354fz0/nl/Hb+OH+df06iE+fGu0ncpG4yN7mbwk3ppnJTu2nctG46N72bwc3oZnIzu1ncrG42N7ubw83p5nJzu3ncvG4+N79bwC3oFnILu0Xcom4xt7hbwi3plnJLu2Xcsm45t7xbwa3oVnIru1Xcqm41t7qLubhLuKRLubTLuKzLubwruKIrubKruKqruboLXMM1Xcu1Xcd1Xc/13cAN3ciFLnJjbg23plvLre3Wceu69dz6bgO3odvIbew2cZu6zdzmbgu3pdvKbe22cdu67dz2bge3o9vJ7ex2cbu63dzubg+3p9vL7e32cfu6/dz+7gB3oDvIHewOcYe6w9zh7gh3pDvKHe2Occe649zx7gR3ojvJnexOcae609zp7gx3pjvLne3Ocee689z57gJ3obvIXewucZe6y9zl7gp3pbvKXe2ucde669z17gZ3o7vJ3exucbe629zt7g53p7vL3e3ucfe6+9z97gH3oHvIPewecY+6x9zj7gn3pHvKPe2ecc+659zz7gX3onvJvexeca+619zr7g33pnvLve3ece+699z77gP3ofvIfew+cZ+6z9zn7gv3pfvKfe2+cRPct+479737wf3ofnI/u1/cr+4397v7w/3p/nJ/u3/cv+4/N9GN8+K9JF5SL5mX3EvhpfRSeam9NF5aL52X3svgZfQyeZm9LF5WL5uX3cvh5fRyebm9PF5eL5+X3yvgFfQKeYW9Il5Rr5hX3CvhlfRKeaW9Ml5Zr5xX3qvgVfQqeZW9Kl5Vr5pX3cM83CM80qM82mM81uM83hM80ZM82VM81dM83QOe4Zme5dme47me5/le4IVe5EEPeTGvhlfTq+XV9up4db16Xn2vgdfQa+Q19pp4Tb1mXnOvhdfSa+W19tp4bb12Xnuvg9fR6+R1TtbF6+p187p7PbyeXi+vt9fH6+v18/p7A7yB3iBvsDfEG+oN84Z7I7yR3ihvtDfGG+uN88Z7E7yJ3iRvsjfFm+pN86Z7M7yZ3ixvtjfHm+vN8+Z7C7yF3iJvsbfEW+ot85Z7K7yV3ipvtbfGW+ut89Z7G7yN3iZvs7fF2+pt87Z7O7yd3i5vt7fH2+vt8/Z7B7yD3iHvsHfEO+od8457J7yT3invtHfGO+ud8857F7yL3iXvsnfFu+pd8657N7yb3i3vtnfHu+vd8+57D7yH3iPvsffEe+o98557L7yX3ivvtffGS/Deeu+8994H76P3yfvsffG+et+8794P76f3y/vt/fH+ev+8RC/Oj/eT+En9ZH5yP4Wf0k/lp/bT+Gn9dH56P4Of0c/kZ/az+Fn9bH52P4ef08/l5/bz+Hn9fH5+v4Bf0C/kF/aL+EX9Yn5xv4Rf0i/ll/bL+GX9cn55v4Jf0a/kV/ar+FX9an51H/Nxn/BJn/Jpn/FZn/N5X/BFX/JlX/FVX/N1H/iGb/qWb/uO7/qe7/uBH/qRD33kx/wafk2/ll/br+PX9ev59f0GfkO/kd/Yb+I39Zv5zf0Wfku/ld/ab+O39dv57f0Ofke/k9/Z7+J39bv53f0efk+/l9/b7+P39fv5/f0B/kB/kD/YH+IP9Yf5w/0R/kh/lD/aH+OP9cf54/0J/kR/kj/Zn+JP9af50/0Z/kx/lj/bn+PP9ef58/0F/kJ/kb/YX+Iv9Zf5y/0V/kp/lb/aX+Ov9df56/0N/kZ/k7/Z3+Jv9bf52/0d/k5/l7/b3+Pv9ff5+/0D/kH/kH/YP+If9Y/5x/0T/kn/lH/aP+Of9c/55/0L/kX/kn/Zv+Jf9a/51/0b/k3/ln/bv+Pf9e/59/0H/kP/kf/Yf+I/9Z/5z/0X/kv/lf/af+Mn+G/9d/57/4P/0f/kf/a/+F/9b/53/4f/0//l//b/+H/9f36iHxfEB0mCpEGyIHmQIkgZpApSB2mCtEG6IH2QIcgYZAoyB1mCrEG2IHuQI8gZ5ApyB3mCvEG+IH9QICgYFAoKB0WCokGxoHhQIigZlApKB2WCskG5oHxQIagYVAoqB1WCqkG1oHqABXhABGRABXTABGzABXwgBGIgBXKgBGqgBXoAAiMwAyuwAydwAy/wgyAIgyiAAQpiQY2gZlArqB3UCeoG9YL6QYOgYdAoaBw0CZoGzYLmQYugZdAqaB20CdoG7YL2QYegY9Ap6Bx0CboG3YLuQY+gZ9Ar6B30CfoG/YL+wYBgYDAoGBwMCYYGw4LhwYhgZDAqGB2MCcYG44LxwYRgYjApmBxMCaYG04LpwYxgZjArmB3MCeYG84L5wYJgYbAoWBwsCZYGy4LlwYpgZbAqWB2sCdYG64L1wYZgY7Ap2BxsCbYG24LtwY5gZ7Ar2B3sCfYG+4L9wYHgYHAoOBwcCY4Gx4LjwYngZHAqOB2cCc4G54LzwYXgYnApuBxcCa4G14LrwY3gZnAruB3cCe4G94L7wYPgYfAoeBw8CZ4Gz4LnwYvgZfAqeB28CRKCt8G74H3wIfgYfAo+B1+Cr8G34HvwI/gZ/Ap+B3+Cv8G/IDGIC+PDJGHSMFmYPEwRpgxThanDNGHaMF2YPswQZgwzhZnDLGHWMFuYPcwR5gxzhbnDPGHeMF+YPywQFgwLhYXDImHRsFhYPCwRlgxLhaXDMmHZsFxYPqwQVgwrhZXDKmHVsFpYPcRCPCRCMqRCOmRCNuRCPhRCMZRCOVRCNdRCPQShEZqhFdqhE7qhF/phEIZhFMIQhbGwRlgzrBXWDuuEdcN6Yf2wQdgwbBQ2DpuETcNmYfOwRdgybBW2DtuEbcN2YfuwQ9gx7BR2DruEXcNuYfewR9gz7BX2DvuEfcN+Yf9wQDgwHBQODoeEQ8Nh4fBwRDgyHBWODseEY8Nx4fhwQjgxnBRODqeEU8Np4fRwRjgznBXODueEc8N54fxwQbgwXBQuDpeES8Nl4fJwRbgyXBWuDteEa8N14fpwQ7gx3BRuDreEW8Nt4fZwR7gz3BXuDveEe8N94f7wQHgwPBQeDo+ER8Nj4fHwRHgyPBWeDs+EZ8Nz4fnwQngxvBReDq+EV8Nr4fXwRngzvBXeDu+Ed8N74f3wQfgwfBQ+Dp+ET8Nn4fPwRfgyfBW+Dt+ECeHb8F34PvwQfgw/hZ/DL+HX8Fv4PfwR/gx/hb/DP+Hf8F+YGMZF8VGSKGmULEoepYhSRqmi1FGaKG2ULkofZYgyRpmizFGWKGuULcoe5YhyRrmi3FGeKG+UL8ofFYgKRoWiwlGRqGhULCoelYhKRqWi0lGZqGxULiofVYgqRpWiylGVqGpULaoeYREeEREZUREdMREbcREfCZEYSZEcKZEaaZEegciIzMiK7MiJ3MiL/CiIwiiKYISiWFQjqhnVimpHdaK6Ub2oftQgahg1ihpHTaKmUbOoedQiahm1ilpHbaK2UbuofdQh6hh1ijpHXaKuUbeoe9Qj6hn1inpHfaK+Ub+ofzQgGhgNigZHQ6Kh0bBoeDQiGhmNikZHY6Kx0bhofDQhmhhNiiZHU6Kp0bRoejQjmhnNimZHc6K50bxofrQgWhgtihZHS6Kl0bJoebQiWhmtilZHa6K10bpofbQh2hhtijZHW6Kt0bZoe7Qj2hntinZHe6K90b5of3QgOhgdig5HR6Kj0bHoeHQiOhmdik5HZ6Kz0bnofHQhuhhdii5HV6Kr0bXoenQjuhndim5Hd6K70b3ofvQgehg9ih5HT6Kn0bPoefQiehm9il5Hb6KE6G30LnoffYg+Rp+iz9GX6Gv0Lfoe/Yh+Rr+i39Gf6G/0L0qM4mA8TAKTwmQwOUwBU8JUMDVMA9PCdDA9zAAzwkwwM8wCs8JsMDvMAXPCXDA3zAPzwnwwPywAC8JCsDAsAovCYrA4LAFLwlKwNCwDy8JysDysACvCSrAyrAKrwmqwOsQgDglIQgrSkIEs5CAPBShCCcpQgSrUoA4BNKAJLWhDB7rQgz4MYAgjCCGCMVgD1oS1YG1YB9aF9WB92AA2hI1gY9gENoXNYHPYAraErWBr2Aa2he1ge9gBdoSdYGfYBXaF3WB32AP2hL1gb9gH9oX9YH84AA6Eg+BgOAQOhcPgcDgCjoSj4Gg4Bo6F4+B4OAFOhJPgZDgFToXT4HQ4A86Es+BsOAfOhfPgfLgALoSL4GK4BC6Fy+ByuAKuhKvgargGroXr4Hq4AW6Em+BmuAVuhdvgdrgD7oS74G64B+6F++B+eAAehIfgYXgEHoXH4HF4Ap6Ep+BpeAaehefgeXgBXoSX4GV4BV6F1+B1eAPehLfgbXgH3oX34H34AD6Ej+Bj+AQ+hc/gc/gCvoSv4Gv4BibAt/AdfA8/wI/wE/wMv8Cv8Bv8Dn/An/AX/A3/wL/wH0yEcSgeJUFJUTKUHKVAKVEqlBqlQWlROpQeZUAZUSaUGWVBWVE2lB3lQDlRLpQb5UF5UT6UHxVABVEhVBgVQUVRMVQclUAlUSlUGpVBZVE5VB5VQBVRJVQZVUFVUTVUHWEIRwQiEYVoxCAWcYhHAhKRhGSkIBVpSEcAGchEFrKRg1zkIR8FKEQRggihGKqBaqJaqDaqg+qieqg+aoAaokaoMWqCmqJmqDlqgVqiVqg1aoPaonaoPeqAOqJOqDPqgrqibqg76oF6ol6oN+qD+qJ+qD8agAaiQWgwGoKGomFoOBqBRqJRaDQag8aicWg8moAmokloMpqCpqJpaDqagWaiWWg2moPmonloPlqAFqJFaDFagpaiZWg5WoFWolVoNVqD1qJ1aD3agDaiTWgz2oK2om1oO9qBdqJdaDfag/aifWg/OoAOokPoMDqCjqJj6Dg6gU6iU+g0OoPOonPoPLqALqJL6DK6gq6ia+g6uoFuolvoNrqD7qJ76D56gB6iR+gxeoKeomfoOXqBXqJX6DV6gxLQW/QOvUcf0Ef0CX1GX9BX9A19Rz/QT/QL/UZ/0F/0DyWiuFh8LEksaSxZLHksRSxlLFUsdSxNLG0sXSx9LEMsYyxTLHMsSyxrLFsseyxHLGcsVyx3LE8sbyxfLH+sQKxgrFCscKxIrGisWKx4rESsZKxUrHSsTKxsrFysfKxCrGKsUqxyrEqsaqxarHoMi+ExIkbGqBgdY2JsjIvxMSEmxqSYHFNiakyL6TEQM2JmzIrZMSfmxryYHwtiYSyKwRiKxWI1YjVjtWK1Y3Vi/2PhHhvzSAIAAKdt2qS2bdu2reXMrG29tW3btm3btm1b9+X+yAMwiCGMwViMw3hMwERMwmRMwVRMw3TMwEzMwmzMwVzMw3wswEIswmJYN6w71gPrifXCemN9sL5YP6w/NgAbiA3CBmNDsKHYMGw4NgIbiY3CRmNjsLHYOGw8NgGbiE3CJmNTsKnYNGw6NgObic3CZmNzsLnYPGw+tgBbiC3CFmNLsKXYMmw5tgJbia3CVmNrsLXYOmw9tgHbiG3CNmNbsK3YNmw7tgPbie3CdmN7sL3YPmw/dgA7iB3CDmNHsKPYMew4dgI7iZ3CTmNnsLPYOew8dgG7iF3CLmNXsKvYNew6dgO7id3CbmN3sLvYPew+9gB7iD3CHmNPsKfYM+w59gJ7ib3CXmNvsLfYO+w99gH7iH3CPmNfsK/YN+w79gP7if3CfmN/sL/YPywOT4InxZPh8XhyPAWegCfiKfFUeGo8DZ4WT4enxzPgGfFMeGY8C54Vz4Znx3PgOfFceG48D54Xz4fnxwvgBfFCeGG8CF4UL4YXx0vgJfFSeGm8DF4WL4eXxyvgFfFKeGW8Cl4Vr4ZXx2vgNfFaeG28Dl4Xr4fXxxvgDfFGeGO8Cd4Ub4Y3x1vgLfFWeGu8Dd4Wb4e3xzvgHfFOeGe8C94Vx3AcJ3ASp3AaBzjEEc7gLM7hPC7gIi7hMq7gKq7hOm7gJm7hNu7gLu7hPh7gIR7hMbwb3h3vgffEe+G98T54X7wf3h8fgA/EB+GD8SH4UHwYPhwfgY/ER+Gj8TH4WHwcPh6fgE/EJ+GT8Sn4VHwaPh2fgc/EZ+Gz8Tn4XHwePh9fgC/EF+GL8SX4UnwZvhxfga/EV+Gr8TX4Wnwdvh7fgG/EN+Gb8S34Vnwbvh2Px3fiu/Dd+B58L74P348fwA/ih/DD+BH8KH4MP46fwE/ip/DT+Bn8LH4OP49fwC/il/DL+BX8Kn4Nv47fwG/it/Db+B38Ln4Pv48/wB/ij/DH+BP8Kf4Mf46/wF/ir/DX+Bv8Lf4Of49/wD/in/DP+Bf8K/4N/47/wH/iv/Df+B/8L/4PjyOSEEmJZEQ8kZxIQSQQiURKIhWRmkhDpCXSEemJDERGIhORmchCZCWyEdmJHEROIheRm8hD5CXyEfmJAkRBohBRmChCFCWKEcWJEkRJohRRmihDlCXKEeWJCkRFohJRmahCVCWqEdWJGkRNohZRm6hD1CXqEfWJBkRDohHRmGhCNCWaEc2JFkRLohXRmmhDtCXaEe2JDkRHohPRmehCdCUwAicIgiQogiYAAQlEMARLcARPCIRISIRMKIRKaIROGIRJWIRNOIRLeIRPBERIRESM6EZ0J3oQPYleRG+iD9GX6Ef0JwYQA4lBxGBiCDGUGEYMJ0YQI4lRxGhiDDGWGEeMJyYQE4lJxGRiCjGVmEZMJ2YQM4lZxGxiDjGXmEfMJxYQC4lFxGJiCbGUWEYsJ1YQK4lVxGpiDbGWWEesJzYQG4lNxGZiC7GV2EZsJ3YQO4ldxG5iD7GX2EfsJw4QB4lDxGHiCHGUOEYcJ04QJ4lTxGniDHGWOEecJy4QF4lLxGXiCnGVuEZcJ24QN4lbxG3iDnGXuEfcJx4QD4lHxGPiCfGUeEY8J14QL4lXxGviDfGWeEe8Jz4QH4lPxGfiC/GV+EZ8J34QP4lfxG/iD/GX+EfEkUnIpGQyMp5MTqYgE8hEMiWZikxNpiHTkunI9GQGMiOZicxMZiGzktnI7GQOMieZi8xN5iHzkvnI/GQBsiBZiCxMFiGLksXI4mQJsiRZiixNliHLkuXI8mQFsiJZiaxMViGrktXI6mQNsiZZi6xN1iHrkvXI+mQDsiHZiGxMNiGbks3I5mQLsiXZimxNtiHbku3I9mQHsiPZiexMdiG7khiJkwRJkhRJk4CEJCIZkiU5kicFUiQlUiYVUiU1UicN0iQt0iYd0iU90icDMiQjMkZ2I7uTPcieZC+yN9mH7Ev2I/uTA8iB5CByMDmEHEoOI4eTI8iR5ChyNDmGHEuOI8eTE8iJ5CRyMjmFnEpOI6eTM8iZ5CxyNjmHnEvOI+eTC8iF5CJyMbmEXEouI5eTK8iV5CpyNbmGXEuuI9eTG8iN5CZyM7mF3EpuI7eTO8id5C5yN7mH3EvuI/eTB8iD5CHyMHmEPEoeI4+TJ8iT5CnyNHmGPEueI8+TF8iL5CXyMnmFvEpeI6+TN8ib5C3yNnmHvEveI++TD8iH5CPyMfmEfEo+I5+TL8iX5CvyNfmGfEu+I9+TH8iP5CfyM/mF/Ep+I7+TP8if5C/yN/mH/Ev+I+OoJFRSKhkVTyWnUlAJVCKVkkpFpabSUGmpdFR6KgOVkcpEZaayUFmpbFR2KgeVk8pF5abyUHmpfFR+qgBVkCpEFaaKUEWpYlRxqgRVkipFlabKUGWpclR5qgJVkapEVaaqUFWpalR1qgZVk6pF1abqUHWpelR9qgHVkGpENaaaUE2pZlRzqgXVkmpFtabaUG2pdlR7qgPVkepEdaa6UF0pjMIpgiIpiqIpQEEKUQzFUhzFUwIlUhIlUwqlUhqlUwZlUhZlUw7lUh7lUwEVUhEVo7pR3akeVE+qF9Wb6kP1pfpR/akB1EBqEDWYGkINpYZRw6kR1EhqFDWaGkONpcZR46kJ1ERqEjWZmkJNpaZR06kZ1ExqFjWbmkPNpeZR86kF1EJqEbWYWkItpZZRy6kV1EpqFbWaWkOtpdZR66kN1EZqE7WZ2kJtpbZR26kd1E5qF7Wb2kPtpfZR+6kD1EHqEHWYOkIdpY5Rx6kT1EnqFHWaOkOdpc5R56kL1EXqEnWZukJdpa5R16kb1E3qFnWbukPdpe5R96kH1EPqEfWYekI9pZ5Rz6kX1EvqFfWaekO9pd5R76kP1EfqE/WZ+kJ9pb5R36kf1E/qF/Wb+kP9pf5RcXQSOimdjI6nk9Mp6AQ6kU5Jp6JT02notHQ6Oj2dgc5IZ6Iz01norHQ2Ojudg85J56Jz03novHQ+Oj9dgC5IF6IL00XoonQxujhdgi5Jl6JL02XosnQ5ujxdga5IV6Ir01XoqnQ1ujpdg65J16Jr03XounQ9uj7dgG5IN6Ib003opnQzujndgm5Jt6Jb023otnQ7uj3dge5Id6I7013orjRG4zRBkzRF0zSgIY1ohmZpjuZpgRZpiZZphVZpjdZpgzZpi7Zph3Zpj/bpgA7piI7R3ejudA+6J92L7k33ofvS/ej+9AB6ID2IHkwPoYfSw+jh9Ah6JD2KHk2PocfS4+jx9AR6Ij2JnkxPoafS0+jp9Ax6Jj2Lnk3PoefS8+j59AJ6Ib2IXkwvoZfSy+jl9Ap6Jb2KXk2vodfS6+j19AZ6I72J3kxvobfS2+jt9A56J72L3k3voffS++j99AH6IH2IPkwfoY/Sx+jj9An6JH2KPk2foc/S5+jz9AX6In2Jvkxfoa/S1+jr9A36Jn2Lvk3foe/S9+j79AP6If2Ifkw/oZ/Sz+jn9Av6Jf2Kfk2/od/S7+j39Af6I/2J/kx/ob/S3+jv9A/6J/2L/k3/of/S/+g4kAQkBclAPEgOUoAEkAhSglQgNUgD0oJ0ID3IADKCTCAzyAKygmwgO8gBcoJcIDfIA/KCfCA/KAAKgkKgMCgCioJioDgoAUqCUqA0KAPKgnKgPKgAKoJKoDKoAqqCaqA6qAFqglqgNqgD6oJ6oD5oABqCRqAxaAKagmagOWgBWoJWoDVoA9qCdqA96AA6gk6gM+gCugIM4IAAJKAADQCAAAEGsIADPBCACCQgAwWoQAM6MIAJLGADB7jAAz4IQAgiEAPdQHfQA/QEvUBv0Af0Bf1AfzAADASDwGAwBAwFw8BwMAKMBKPAaDAGjAXjwHgwAUwEk8BkMAVMBdPAdDADzASzwGwwB8wF88B8sAAsBIvAYrAELAXLwHKwAqwEq8BqsAasBevAerABbASbwGawBWwF28B2sAPsBLvAbrAH7AX7wH5wABwEh8BhcAQcBcfAcXACnASnwGlwBpwF58B5cAFcBJfAZXAFXAXXwHVwA9wEt8BtcAfcBffAffAAPASPwGPwBDwFz8Bz8AK8BK/Aa/AGvAXvwHvwAXwEn8Bn8AV8Bd/Ad/AD/AS/wG/wB/wF/0AcTAKTwmQwHiaHKWACTIQpYSqYGqaBaWE6mB5mgBlhJpgZZoFZYTaYHeaAOWEumBvmgXlhPpgfFoAFYSFYGBaBRWExWByWgCVhKVgaloFlYTlYHlaAFWElWBlWgVVhNVgd1oA1YS1YG9aBdWE9WB82gA1hI9gYNoFNYTPYHLaALWEr2Bq2gW1hO9gedoAdYSfYGXaBXSEGcUhAElKQhgBCiCADWchBHgpQhBKUoQJVqEEdGtCEFrShA13oQR8GMIQRjMFusDvsAXvCXrA37AP7wn6wPxwAB8JBcDAcAofCYXA4HAFHwlFwNBwDx8JxcDycACfCSXAynAKnwmlwOpwBZ8JZcDacA+fCeXA+XAAXwkVwMVwCl8JlcDlcAVfCVXA1XAPXwnVwPdwAN8JNcDPcArfCbXA73AF3wl1wN9wD98J9cD88AA/CQ/AwPAKPwmPwODwBT8JT8DQ8A8/Cc/A8vAAvwkvwMrwCr8Jr8Dq8AW/CW/A2vAPvwnvwPnwAH8JH8DF8Ap/CZ/A5fAFfwlfwNXwD38J38D38AD/CT/Az/AK/wm/wO/wBf8Jf8Df8A//CfzAOJUFJUTIUj5KjFCgBJaKUKBVKjdKgtCgdSo8yoIwoE8qMsqCsKBvKjnKgnCgXyo3yoLwoH8qPCqCCqBAqjIqgoqgYKo5KoJKoFCqNyqCyqBwqjyqgiqgSqoyqoKqoGqqOaqCaqBaqjeqguqgeqo8aoIaoEWqMmqCmqBlqjlqglqgVao3aoLaoHWqPOqCOqBPqjLqgrghDOCIQiShEI4AgQohBLOIQjwQkIgnJSEEq0pCODGQiC9nIQS7ykI8CFKIIxVA31B31QD1RL9Qb9UF9UT/UHw1AA9EgNBgNQUPRMDQcjUAj0Sg0Go1BY9E4NB5NQBPRJDQZTUFT0TQ0Hc1AM9EsNBvNQXPRPDQfLUAL0SK0GC1BS9EytBytQCvRKrQarUFr0Tq0Hm1AG9EmtBltQVvRNrQd7UA70S60G+1Be9E+tB8dQAfRIXQYHUFH0TF0HJ1AJ9EpdBqdQWfROXQeXUAX0SV0GV1BV9E1dB3dQDfRLXQb3UF30T10Hz1AD9Ej9Bg9QU/RM/QcvUAv0Sv0Gr1Bb9E79B59QB/RJ/QZfUFf0Tf0Hf1AP9Ev9Bv9QX/RPxTHJGGSMsmYeCY5k4JJYBKZlEwqJjWThknLpGPSMxmYjEwmJjOThcnKZGOyMzmYnEwuJjeTh8nL5GPyMwWYgkwhpjBThCnKFGOKMyWYkkwppjRThinLlGPKMxWYikwlpjJThanKVGOqMzWYmkwtpjZTh6nL1GPqMw2YhkwjpjHThGnKNGOaMy2YlkwrpjXThmnLtGPaMx2YjkwnpjPThenKYAzOEAzJUAzNAAYyiGEYluEYnhEYkZEYmVEYldEYnTEYk7EYm3EYl/EYnwmYkImYGNON6c70YHoyvZjeTB+mL9OP6c8MYAYyg5jBzBBmKDOMGc6MYEYyo5jRzBhmLDOOGc9MYCYyk5jJzBRmKjONmc7MYGYys5jZzBxmLjOPmc8sYBYyi5jFzBJmKbOMWc6sYFYyq5jVzBpmLbOOWc9sYDYym5jNzBZmK7ON2c7sYHYyu5jdzB5mL7OP2c8cYA4yh5jDzBHmKHOMOc6cYE4yp5jTzBnmLHOOOc9cYC4yl5jLzBXmKnONuc7cYG4yt5jbzB3mLnOPuc88YB4yj5jHzBPmKfOMec68YF4yr5jXzBvmLfOOec98YD4yn5jPzBfmK/ON+c78YH4yv5jfzB/mL/OPiWOTsEnZZGw8m5xNwSawiWxKNhWbmk3DpmXTsenZDGxGNhObmc3CZmWzsdnZHGxONhebm83D5mXzsfnZAmxBthBbmC3CFmWLscXZEmxJthRbmi3DlmXLseXZCmxFthJbma3CVmWrsdXZGmxNthZbm63D1mXrsfXZBmxDthHbmG3CNmWbsc3ZFmxLthXbmm3DtmXbse3ZDmxHthPbme3CdmUxFmcJlmQplmYBC1nEMizLcizPCqzISqzMKqzKaqzOGqzJWqzNOqzLeqzPBmzIRmyM7cZ2Z3uwPdlebG+2D9uX7cf2ZwewA9lB7GB2CDuUHcYOZ0ewI9lR7Gh2DDuWHceOZyewE9lJ7GR2CjuVncZOZ2ewM9lZ7Gx2DjuXncfOZxewC9lF7GJ2CbuUXcYuZ1ewK9lV7Gp2DbuWXceuZzewG9lN7GZ2C7uV3cZuZ3ewO9ld7G52D7uX3cfuZw+wB9lD7GH2CHuUPcYeZ0+wJ9lT7Gn2DHuWPceeZy+wF9lL7GX2CnuVvcZeZ2+wN9lb7G32DnuXvcfeZx+wD9lH7GP2CfuUfcY+Z1+wL9lX7Gv2DfuWfce+Zz+wH9lP7Gf2C/uV/cZ+Z3+wP9lf7G/2D/uX/cfGcUm4pFwyLp5LzqXgErhELiWXikvNpeHScum49FwGLiOXicvMZeGyctm47FwOLieXi8vN5eHycvm4/FwBriBXiCvMFeGKcsW44lwJriRXiivNleHKcuW48lwFriJXiavMVeGqctW46lwNriZXi6vN1eHqcvW4+lwDriHXiGvMNeGacs245lwLriXXimvNteHacu249lwHriPXievMdeG6chiHcwRHchRHc4CDHOIYjuU4jucETuQkTuYUTuU0TucMzuQszuYczuU8zucCLuQiLsZ147pzPbieXC+uN9eH68v14/pzA7iB3CBuMDeEG8oN44ZzI7iR3ChuNDeGG8uN48ZzE7iJ3CRuMjeFm8pN46ZzM7iZ3CxuNjeHm8vN4+ZzC7iF3CJuMbeEW8ot45ZzK7iV3CpuNbeGW8ut49ZzG7iN3CZuM7eF28pt47ZzO7id3C5uN7eH28vt4/ZzB7iD3CHuMHeEO8od445zJ7iT3CnuNHeGO8ud485zF7iL3CXuMneFu8pd465zN7ib3C3uNneHu8vd4+5zD7iH3CPuMfeEe8o9455zL7iX3CvuNfeGe8u9495zH7iP3CfuM/eF+8p9475zP7if3C/uN/eH+8v94+L4JHxSPhkfzyfnU/AJfCKfkk/Fp+bT8Gn5dHx6PgOfkc/EZ+az8Fn5bHx2Pgefk8/F5+bz8Hn5fHx+vgBfkC/EF+aL8EX5YnxxvgRfki/Fl+bL8GX5cnx5vgJfka/EV+ar8FX5anx1vgZfk6/F1+br8HX5enx9vgHfkG/EN+ab8E35ZnxzvgXfkm/Ft+bb8G35dnx7vgPfke/Ed+a78F15jMd5gid5iqd5wEMe8QzP8hzP8wIv8hIv8wqv8hqv8wZv8hZv8w7v8h7v8wEf8hEf47vx3fkefE++F9+b78P35fvx/fkB/EB+ED+YH8IP5Yfxw/kR/Eh+FD+aH8OP5cfx4/kJ/ER+Ej+Zn8JP5afx0/kZ/Ex+Fj+bn8PP5efx8/kF/EJ+Eb+YX8Iv5Zfxy/kV/Ep+Fb+aX8Ov5dfx6/kN/EZ+E7+Z38Jv5bfx2/kd/E5+F7+b38Pv5ffx+/kD/EH+EH+YP8If5Y/xx/kT/En+FH+aP8Of5c/x5/kL/EX+En+Zv8Jf5a/x1/kb/E3+Fn+bv8Pf5e/x9/kH/EP+Ef+Yf8I/5Z/xz/kX/Ev+Ff+af8O/5d/x7/kP/Ef+E/+Z/8J/5b/x3/kf/E/+F/+b/8P/5f/xcUISIamQTIgXkgsphAQhUUgppBJSC2mEtEI6Ib2QQcgoZBIyC1mErEI2IbuQQ8gp5BJyC3mEvEI+Ib9QQCgoFBIKC0WEokIxobhQQigplBJKC2WEskI5obxQQagoVBIqC1WEqkI1obpQQ6gp1BJqC3WEukI9ob7QQGgoNBIaC02EpkIzobnQQmgptBJaC22EtkI7ob3QQegodBI6C12ErgIm4AIhkAIl0AIQoIAERmAFTuAFQRAFSZAFRVAFTdAFQzAFS7AFR3AFT/CFQAiFSIgJ3YTuQg+hp9BL6C30EfoK/YT+wgBhoDBIGCwMEYYKw4ThwghhpDBKGC2MEcYK44TxwgRhojBJmCxMEaYK04TpwgxhpjBLmC3MEeYK84T5wgJhobBIWCwsEZYKy4TlwgphpbBKWC2sEdYK64T1wgZho7BJ2CxsEbYK24Ttwg5hp7BL2C3sEfYK+4T9wgHhoHBIOCwcEY4Kx4TjwgnhpHBKOC2cEc4K54TzwgXhonBJuCxcEa4K14Trwg3hpnBLuC3cEe4K94T7wgPhofBIeCw8EZ4Kz4TnwgvhpfBKeC28Ed4K74T3wgfho/BJ+Cx8Eb4K34Tvwg/hp/BL+C38Ef4K/4Q4MYmYVEwmxovJxRRigpgophRTianFNGJaMZ2YXswgZhQziZnFLGJWMZuYXcwh5hRzibnFPGJeMZ+YXywgFhQLiYXFImJRsZhYXCwhlhRLiaXFMmJZsZxYXqwgVhQriZXFKmJVsZpYXawh1hRribXFOmJdsZ5YX2wgNhQbiY3FJmJTsZnYXGwhthRbia3FNmJbsZ3YXuwgdhQ7iZ3FLmJXERNxkRBJkRJpEYhQRCIjsiIn8qIgiqIkyqIiqqIm6qIhmqIl2qIjuqIn+mIghmIkxsRuYnexh9hT7CX2FvuIfcV+Yn9xgDhQHCQOFoeIQ8Vh4nBxhDhSHCWOFseIY8Vx4nhxgjhRnCROFqeIU8Vp4nRxhjhTnCXOFueIc8V54nxxgbhQXCQuFpeIS8Vl4nJxhbhSXCWuFteIa8V14npxg7hR3CRuFreIW8Vt4nZxh7hT3CXuFveIe8V94n7xgHhQPCQeFo+IR8Vj4nHxhHhSPCWeFs+IZ8Vz4nnxgnhRvCReFq+IV8Vr4nXxhnhTvCXeFu+Id8V74n3xgfhQfCQ+Fp+IT8Vn4nPxhfhSfCW+Ft+Ib8V34nvxg/hR/CR+Fr+IX8Vv4nfxh/hT/CX+Fv+If8V/YpyUREoqJZPipeRSCilBSpRSSqmk1FIaKa2UTkovZZAySpmkzFIWKauUTcou5ZBySrmk3FIeKa+UT8ovFZAKSoWkwlIRqahUTCoulZBKSqWk0lIZqaxUTiovVZAqSpWkylIVqapUTaou1ZBqSrWk2lIdqa5UT6ovNZAaSo2kxlITqanUTGoutZBaSq2k1lIbqa3UTmovdZA6Sp2kzlIXqauESbhESKRESbQEJCghiZFYiZN4SZBESZJkSZFUSZN0yZBMyZJsyZFcyZN8KZBCKZJiUjepu9RD6in1knpLfaS+Uj+pvzRAGigNkgZLQ6Sh0jBpuDRCGimNkkZLY6Sx0jhpvDRBmihNkiZLU6Sp0jRpujRDminNkmZLc6S50jxpvrRAWigtkhZLS6Sl0jJpubRCWimtklZLa6S10jppvbRB2ihtkjZLW6St0jZpu7RD2intknZLe6S90j5pv3RAOigdkg5LR6Sj0jHpuHRCOimdkk5LZ6Sz0jnpvHRBuihdki5LV6Sr0jXpunRDuindkm5Ld6S70j3pvvRAeig9kh5LT6Sn0jPpufRCeim9kl5Lb6S30jvpvfRB+ih9kj5LX6Sv0jfpu/RD+in9kn5Lf6S/0j8pTk4iJ5WTyfFycjmFnCAnyinlVHJqOY2cVk4np5czyBnlTHJmOYucVc4mZ5dzyDnlXHJuOY+cV84n55cLyAXlQnJhuYhcVC4mF5dLyCXlUnJpuYxcVi4nl5cryBXlSnJluYpcVa4mV5dryDXlWnJtuY5cV64n15cbyA3lRnJjuYncVG4mN5dbyC3lVnJruY3cVm4nt5c7yB3lTnJnuYvcVcZkXCZkUqZkWgYylJHMyKzMybwsyKIsybKsyKqsybpsyKZsybbsyK7syb4cyKEcyTG5m9xd7iH3lHvJveU+cl+5n9xfHiAPlAfJg+Uh8lB5mDxcHiGPlEfJo+Ux8lh5nDxeniBPlCfJk+Up8lR5mjxdniHPlGfJs+U58lx5njxfXiAvlBfJi+Ul8lJ5mbxcXiGvlFfJq+U18lp5nbxe3iBvlDfJm+Ut8lZ5m7xd3iHvlHfJu+U98l55n7xfPiAflA/Jh+Uj8lH5mHxcPiGflE/Jp+Uz8ln5nHxeviBflC/Jl+Ur8lX5mnxdviHflG/Jt+U78l35nnxffiA/lB/Jj+Un8lP5mfxcfiG/lF/Jr+U38lv5nfxe/iB/lD/Jn+Uv8lf5m/xd/iH/lH/Jv+U/8l/5nxynJFGSKsmUeCW5kkJJUBKVlEoqJbWSRkmrpFPSKxmUjEomJbOSRcmqZFOyKzmUnEouJbeSR8mr5FPyKwWUgkohpbBSRCmqFFOKKyWUkkoppbRSRimrlFPKKxWUikolpbJSRamqVFOqKzWUmkotpbZSR6mr1FPqKw2UhkojpbHSRGmqNFOaKy2UlkorpbXSRmmrtFPaKx2UjkonpbPSRemqYAquEAqpUAqtAAUqSGEUVuEUXhEUUZEUWVEUVdEUXTEUU7EUW3EUV/EUXwmUUImUmNJN6a70UHoqvZTeSh+lr9JP6a8MUAYqg5TByhBlqDJMGa6MUEYqo5TRyhhlrDJOGa9MUCYqk5TJyhRlqjJNma7MUGYqs5TZyhxlrjJPma8sUBYqi5TFyhJlqbJMWa6sUFYqq5TVyhplrbJOWa9sUDYqm5TNyhZlq7JN2a7sUHYqu5Tdyh5lr7JP2a8cUA4qh5TDyhHlqHJMOa6cUE4qp5TTyhnlrHJOOa9cUC4ql5TLyhXlqnJNua7cUG4qt5Tbyh3lrnJPua88UB4qj5THyhPlqfJMea68UF4qr5TXyhvlrfJOea98UD4qn5TPyhflq/JN+a78UH4qv5Tfyh/lr/JPiVOTqEnVZGq8mlxNoSaoiWpKNZWaWk2jplXTqenVDGpGNZOaWc2iZlWzqdnVHGpONZeaW82j5lXzqfnVAmpBtZBaWC2iFlWLqcXVEmpJtZRaWi2jllXLqeXVCmpFtZJaWa2iVlWrqdXVGmpNtZZaW62j1lXrqfXVBmpDtZHaWG2iNlWbqc3VFmpLtZXaWm2jtlXbqe3VDmpHtZPaWe2idlUxFVcJlVQplVaBClWkMiqrciqvCqqoSqqsKqqqaqquGqqpWqqtOqqreqqvBmqoRmpM7aZ2V3uoPdVeam+1j9pX7af2VweoA9VB6mB1iDpUHaYOV0eoI9VR6mh1jDpWHaeOVyeoE9VJ6mR1ijpVnaZOV2eoM9VZ6mx1jjpXnafOVxeoC9VF6mJ1ibpUXaYuV1eoK9VV6mp1jbpWXaeuVzeoG9VN6mZ1i7pV3aZuV3eoO9VdauL/zM1+9YB6UD2kHlaPqEfVY+px9YR6Uj2lnlbPqGfVc+p59YJ6Ub2kXlavqFfVa+p19YZ6U72l3lbvqHfVe+p99YH6UH2kPlafqE/VZ+pz9YX6Un2lvlbfqG/Vd+p79YP6Uf2kfla/qF/Vb+p39Yf6U/2l/lb/qH/Vf2qclkRLqiXT4rXkWgotQUvUUmqptNRaGi2tlk5Lr2XQMmqZtMxaFi2rlk3LruXQcmq5tNxaHi2vlk/LrxXQCmqFtMJaEa2oVkwrrpXQSmqltNJaGa2sVk4rr1XQKmqVtMpaFa2qVk2rrtXQamq1tNpaHa2uVk+rrzXQGmqNtMZaE62p1kxrrrXQWmqttNZaG62t1k5rr3XQOmqdtM5aF62rhmm4RmikRmm0BjSoIY3RWI3TeE3QRE3SZE3RVE3TdM3QTM3SbM3RXM3TfC3QQi3SYlo3rbvWQ+up9dJ6a320vlo/rb82QBuoDdIGa0O0odowbbg2QhupjdJGa2O0sdo4bbw2QZuoTdIma1O0qdo0bbo2Q5upzdJma3O0udo8bb62QFuoLdIWa0u0pdoybbm2QluprdJWa2u0tdo6bb22QduobdI2a1u0rdo2bbu2Q9up7dJ2a3u0vdo+bb92QDuoHdIOa0e0o9ox7bh2QjupndJOa2e0s9o57bx2QbuoXdIua1e0q9o17bp2Q7up3dJua3e0u9o97b72QHuoPdIea0+0p9oz7bn2QnupvdJea2+0t9o77b32QfuofdI+a1+0r9o37bv2Q/up/dJ+a3+0v9o/LU5PoifVk+nxenI9hZ6gJ+op9VR6aj2NnlZPp6fXM+gZ9Ux6Zj2LnlXPpmfXc+g59Vx6bj2PnlfPp+fXC+gF9UJ6Yb2IXlQvphfXS+gl9VJ6ab2MXlYvp5fXK+gV9Up6Zb2KXlWvplfXa+g19Vp6bb2OXlevp9fXG+gN9UZ6Y72J3lRvpjfXW+gt9VZ6a72N3lZvp7fXO+gd9U56Z72L3lXHdFwndFKndFoHOtSRzuiszum8LuiiLumyruiqrum6buimbum27uiu7um+HuihHukxvZveXe+h99R76b31PnpfvZ/eXx+gD9QH6YP1IfpQfZg+XB+hj9RH6aP1MfpYfZw+Xp+gT9Qn6ZP1KfpUfZo+XZ+hz9Rn6bP1OfpcfZ4+X1+gL9QX6Yv1JfpSfZm+XF+hr9RX6av1NfpafZ2+Xt+gb9Q36Zv1LfpWfZu+Xd+h79R36bv1PfpefZ++Xz+gH9QP6Yf1I/pR/Zh+XD+hn9RP6af1M/pZ/Zx+Xr+gX9Qv6Zf1K/pV/Zp+Xb+h39Rv6bf1O/pd/Z5+X3+gP9Qf6Y/1J/pT/Zn+XH+hv9Rf6a/1N/pb/Z3+Xv+gf9Q/6Z/1L/pX/Zv+Xf+h/9R/6b/1P/pf/Z8eZyQxkhrJjHgjuZHCSDASjYS4VEZqI42R1khnpDcyGBmNTEZmI4uR1chmZDdyGDmNXEZuI4+R18hn5DcKGAWNQkZho4hR1ChmFDdKGCWNUkZpo4xR1ihnlDcqGBWNSkZlo4pR1ahmVDdqGDWNWkZto45R16hn1DcaGA2NRkZjo4nR1GhmNDdaGC2NVkZro43R1mhntDc6GB2NTkZno4vR1cAM3CAM0qAM2gAGNJDBGKzBGbwhGKIhGbKhGKqhGbphGKZhGbbhGK7hGb4RGKERGTGjm9Hd6GH0NHoZvY0+Rl+jn9HfGGAMNAYZg40hxlBjmDHcGGGMNEYZo40xxlhjnDHemGBMNCYZk40pxlRjmjHdmGHMNGYZs405xlxjnjHfWGAsNBYZi40lxlJjmbHcWGGsNFYZq401xlpjnbHe2GBsNDYZm40txlZjm7Hd2GHsNHYZu409xl5jn7HfOGAcNA4Zh40jxlHjmHHcOGGcNE4Zp40zxlnjnHHeuGBcNC4Zl40rxlXjmnHduGHcNG4Zt407xl3jnnHfeGA8NB4Zj40nxlPjmfHceGG8NF4Zr403xlvjnfHe+GB8ND4Zn40vxlfjm/Hd+GH8NH4Zv40/xl/jnxFnJjGTmsnMeDO5mcJMMBPNlGYqM7WZxkxrpjPTmxnMjGYmM7OZxcxqZjOzmznMnGYuM7eZx8xr5jPzmwXMgmYhs7BZxCxqFjOLmyXMkmYps7RZxixrljPLmxXMimYls7JZxaxqVjOrmzXMmmYts7ZZx6xr1jPrmw3MhmYjs7HZxGxqNjObmy3MlmYrs7XZxmxrtjPbmx3MjmYns7PZxexqYiZuEiZpUiZtAhOayGRM1uRM3hRM0ZRM2VRM1dRM3TRM07RM23RM1/RM3wzM0IzMmNnN7G72MHuavczeZh+zr9nP7G8OMAeag8zB5hBzqDnMHG6OMEeao8zR5hhzrDnOHG9OMCeak8zJ5hRzqjnNnG7OMGeas8zZ5hxzrjnPnG8uMBeai8zF5hJzqbnMXG6uMFeaq8zV5hpzrbnOXG9uMDeam8zN5hZzq7nN3G7uMHeau8zd5h5zr7nP3G8eMA+ah8zD5hHzqHnMPG6eME+ap8zT5hnzrHnOPG9eMC+al8zL5hXzqnnNvG7eMG+at8zb5h3zrnnPvG8+MB+aj8zH5hPzqfnMfG6+MF+ar8zX5hvzrfnOfG9+MD+an8zP5hfzq/nN/G7+MH+av8zf5h/zr/nPjLOSWEmtZFa8ldxKYSVYiVZKK5WV2kpjpbXSWemtDFZGK5OV2cpiZbWyWdmtHFZOK5eV28pj5bXyWfmtAlZBq5BV2CpiFbWKWcWtElZJq5RV2ipjlbXKWeWtClZFq5JV2apiVbWqWdWtGlZNq5ZV26pj1bXqWfWtBlZDq5HV2GpiNbWaWc2tFlZLq5XV2mpjtbXaWe2tDlZHq5PV2epidbUwC7cIi7Qoi7aABS1kMRZrcRZvCZZoSZZsKZZqaZZuGZZpWZZtOZZreZZvBVZoRVbM6mZ1t3pYPa1eVm+rj9XX6mf1twZYA61B1mBriDXUGmYNt0ZYI61R1mhrjDXWGmeNtyZYE61J1mRrijXVmmZNt2ZYM61Z1mxrjjXXmmfNtxZYC61F1mJribXUWmYtt1ZYK61V1mprjbXWWmettzZYG61N1mZri7XV2mZtt3ZYO61d1m5rj7XX2mfttw5YB61D1mHriHXUOmYdt05YJ61T1mnrjHXWOmedty5YF61L1mXrinXVumZdt25YN61b1m3rjnXXumfdtx5YD61H1mPrifXUemY9t15YL61X1mvrjfXWeme9tz5YH61P1mfri/XV+mZ9t35YP61f1m/rj/XX+mfF2UnspHYyO95ObqewE+xEO6Wdyk5tp7HT2uns9HYGO6Odyc5sZ7Gz2tns7HYOO6edy85t57Hz2vns/HYBu6BdyC5sF7GL2sXs4nYJu6Rdyi5tl7HL2uXs8nYFu6Jdya5sV7Gr2tXs6nYNu6Zdy65t17Hr2vXs+nYDu6HdyG5sN7Gb2s3s5nYLu6Xdym5tt7Hb2u3s9nYHu6Pdye5sd7G72piN24RN2pRN28CGNrIZm7U5m7cFW7QlW7YVW7U1W7cN27Qt27Yd27U927cDO7QjO2Z3s7vbPeyedi+7t93H7mv3s/vbA+yB9iB7sD3EHmoPs4fbI+yR9ih7tD3GHmuPs8fbE+yJ9iR7sj3FnmpPs6fbM+yZ9ix7tj3HnmvPs+fbC+yF9iJ7sb3EXmovs5fbK+yV9ip7tb3GXmuvs9fbG+yN9iZ7s73F3mpvs7fbO+yd9i57t73H3mvvs/fbB+yD9iH7sH3EPmofs4/bJ+yT9in7tH3GPmufs8/bF+yL9iX7sn3Fvmpfs6/bN+yb9i37tn3Hvmvfs+/bD+yH9iP7sf3Efmo/s5/bL+yX9iv7tf3Gfmu/s9/bH+yP9if7s/3F/mp/s7/bP+yf9i/7t/3H/mv/s+OcJE5SJ5kT7yR3UjgJTqKT0knlpHbSOGmddE56J4OT0cnkZHayOFmdbE52J4eT08nl5HbyOHmdfE5+p4BT0CnkFHaKOEWdYk5xp4RT0inllHbKOGWdck55p4JT0ankVHaqOFWdak51p4ZT06nl1HbqOHWdek59p4HT0GnkNHaaOE2dZk5zp4XT0mnltHbaOG2ddk57p4PT0enkdHa6OF0dzMEdwiEdyqEd4EAHOYzDOpzDO4IjOpIjO4qjOpqjO4ZjOpZjO47jOp7jO4ETOpETc7o53Z0eTk+nl9Pb6eP0dfo5/Z0BzkBnkDPYGeIMdYY5w50RzkhnlDPaGeOMdcY5450JzkRnkjPZmeJMdaY5050ZzkxnljPbmePMdeY5850FzkJnkbPYWeIsdZY5y50VzkpnlbPaWeOsddY5650NzkZnk7PZ2eJsdbY5250dzk5nl7Pb2ePsdfY5+50DzkHnkHPYOeIcdY45x50TzknnlHPaOeOcdc45550LzkXnknPZueJcda45150bzk3nlnPbuePcde45950HzkPnkfPYeeI8dZ45z50XzkvnlfPaeeO8dd45750Pzkfnk/PZ+eJ8db45350fzk/nl/Pb+eP8df45cW4SN6mbzI13k7sp3AQ30U3ppnJTu2nctG46N72bwc3oZnIzu1ncrG42N7ubw83p5nJzu3ncvG4+N79bwC3oFnILu0Xcom4xt7hbwi3plnJLu2Xcsm45t7xbwa3oVnIru1Xcqm41t7pbw63p1nJru3Xcum49t77bwG3oNnIbu03cpm4zt7nbwm3ptnJbu23ctm47t73bwe3odnI7u13cri7m4i7hki7l0i5woYtcxmVdzuVdwRVdyZVdxVVdzdVdwzVdy7Vdx3Vdz/XdwA3dyI253dzubg+3p9vL7e32cfu6/dz+7gB3oDvIHewOcYe6w9zh7gh3pDvKHe2Occe649zx7gR3ojvJnexOcae609zp7gx3pjvLne3Ocee689z57gJ3obvIXewucZe6y9zl7gp3pbvKXe2ucde669z17gZ3o7vJ3exucbe629zt7g53p7vL3e3ucfe6+9z97gH3oHvIPewecY+6x9zj7gn3pHvKPe2ecc+659zz7gX3onvJvexeca+619zr7g33pnvLve3ece+699z77gP3ofvIfew+cZ+6z9zn7gv3pfvKfe2+cd+679z37gf3o/vJ/ex+cb+639zv7g/3p/vL/e3+cf+6/9w4L4mX1EvmxXvJvRRegpfopfRSeam9NF5aL52X3svgZfQyeZm9LF5WL5uX3cvh5fRyebm9PF5eL5+X3yvgFfQKeYW9Il5Rr5hX3CvhlfRKeaW9Ml5Zr5xX3qvgVfQqeZW9Kl5Vr5pX3avh1fRqebW9Ol5dr55X32vgNfQaeY29Jl5Tr5nX3GvhtfRaea29Nl5br53X3uvgdfQ6eZ29Ll5XD/Nwj/BIj/JoD3jQQx7jsR7n8Z7giZ7kyZ7iqZ7m6Z7hmZ7l2Z7juZ7n+V7ghV7kxbxuXnevh9fT6+X19vp4fb1+Xn9vgDfQG+QN9oZ4Q71h3nBvhDfSG+WN9sZ4Y71x3nhvgjfRm+RN9qZ4U71p3nRvhjfTm+XN9uZ4c7153nxvgbfQW+Qt9pZ4S71l3nJvhbfSW+Wt9tZ4a7113npvg7fR2+Rt9rZ4W71t3nZvh7fT2+Xt9vZ4e7193n7vgHfQO+Qd9o54R71j3nHvhHfSO+Wd9s54Z71z3nnvgnfRu+Rd9q54V71r3nXvhnfTu+Xd9u54d7173n3vgffQe+Q99p54T71n3nPvhffSe+W99t54b7133nvvg/fR++R99r54X71v3nfvh/fT++X99v54f71/XpyfxE/qJ/Pj/eR+Cj/BT/RT+qn81H4aP62fzk/vZ/Az+pn8zH4WP6ufzc/u5/Bz+rn83H4eP6+fz8/vF/AL+oX8wn4Rv6hfzC/ul/BL+qX80n4Zv6xfzi/vV/Ar+pX8yn4Vv6pfza/u1/Br+rX82n4dv65fz6/vN/Ab+o38xn4Tv6nfzG/ut/Bb+q381n4bv63fzm/vd/A7+p38zn4Xv6uP+bhP+KRP+bQPfOgjn/FZn/N5X/BFX/JlX/FVX/N13/BN3/Jt3/Fd3/N9P/BDP/Jjfje/u9/D7+n38nv7ffy+fj+/vz/AH+gP8gf7Q/yh/jB/uD/CH+mP8kf7Y/yx/jh/vD/Bn+hP8if7U/yp/jR/uj/Dn+nP8mf7c/y5/jx/vr/AX+gv8hf7S/yl/jJ/ub/CX+mv8lf7a/y1/jp/vb/B3+hv8jf7W/yt/jZ/u7/D3+nv8nf7e/y9/j5/v3/AP+gf8g/7R/yj/jH/uH/CP+mf8k/7Z/yz/jn/vH/Bv+hf8i/7V/yr/jX/un/Dv+nf8m/7d/y7/j3/vv/Af+g/8h/7T/yn/jP/uf/Cf+m/8l/7b/y3/jv/vf/B/+h/8j/7X/yv/jf/u//D/+n/8n/7f/y//j8/LkgSJA2SBfFB8iBFkBAkBimDVEHqIE2QNkgXpA8yBBmDTEHmIEuQNcgWZA9yBDmDXEHuIE+QN8gX5A8KBAWDQkHhoEhQNCgWFA9KBCWDUkHpoExQNigXlA8qBBWDSkHloEpQNagWVA9qBDWDWkHtoE5QN6gX1A8aBA2DRkHjoEnQNGgWNA9aBC2DVkHroE3QNmgXtA86BB2DTkHnoEvQNcACPCACMqACOgABDFDABGzABXwgBGIgBXKgBGqgBXpgBGZgBXbgBG7gBX4QBGEQBbGgW9A96BH0DHoFvYM+Qd+gX9A/GBAMDAYFg4MhwdBgWDA8GBGMDEYFo4MxwdhgXDA+mBBMDCYFk4MpwdRgWjA9mBHMDGYFs4M5wdxgXjA/WBAsDBYFi4MlwdJgWbA8WBGsDFYFq4M1wdpgXbA+2BBsDDYFm4MtwdZgW7A92BHsDHYFu4M9wd5gX7A/OBAcDA4Fh4MjwdHgWHA8OBGcDE4Fp4MzwdngXHA+uBBcDC4Fl4MrwdXgWnA9uBHcDG4Ft4M7wd3gXnA/eBA8DB4Fj4MnwdPgWfA8eBG8DF4Fr4M3wdvgXfA++BB8DD4Fn4MvwdfgW/A9+BH8DH4Fv4M/wd/gXxAXJgmThsnC+DB5mCJMCBPDlGGqMHWYJkwbpgvThxnCjGGmMHOYJcwaZguzhznCnGGuMHeYJ8wb5gvzhwXCgmGhsHBYJCwaFguLhyXCkmGpsHRYJiwblgvLhxXCimGlsHJYJawaVgurhzXCmmGtsHZYJ6wb1gvrhw3ChmGjsHHYJGwaNgubhy3ClmGrsHXYJmwbtgvbhx3CjmGnsHPYJewaYiEeEiEZUiEdghCGKGRCNuRCPhRCMZRCOVRCNdRCPTRCM7RCO3RCN/RCPwzCMIzCWNgt7B72CHuGvcLeYZ+wb9gv7B8OCAeGg8LB4ZBwaDgsHB6OCEeGo8LR4ZhwbDguHB9OCCeGk8LJ4ZRwajgtnB7OCGeGs8LZ4ZxwbjgvnB8uCBeGi8LF4ZJwabgsXB6uCFeGq8LV4ZpwbbguXB9uCDeGm8LN4ZZwa7gt3B7uCHeGu8Ld4Z5wb7gv3B8eCA+Gh8LD4ZHwaHgsPB6eCE+Gp8LT4ZnwbHguPB9eCC+Gl8LL4ZXwangtvB7eCG+Gt8Lb4Z3wbngvvB8+CB+Gj8LH4ZPwafgsfB6+CF+Gr8LX4ZvwbfgufB9+CD+Gn8LP4Zfwa/gt/B7+CH+Gv8Lf4Z/wb/gvjIuSREmjZFF8lDxKESVEiVHKKFWUOkoTpY3SRemjDFHGKFOUOcoSZY2yRdmjHFHOKFeUO8oT5Y3yRfmjAlHBqFBUOCoSFY2KRcWjElHJqFRUOioTlY3KReWjClHFqFJUOaoSVY2qRdWjGlHNqFZUO6oT1Y3qRfWjBlHDqFHUOGoSNY2aRc2jFlHLqFXUOmoTtY3aRe2jDlHHqFPUOeoSdY2wCI+IiIyoiI5ABCMUMREbcREfCZEYSZEcKZEaaZEeGZEZWZEdOZEbeZEfBVEYRVEs6hZ1j3pEPaNeUe+oT9Q36hf1jwZEA6NB0eBoSDQ0GhYNj0ZEI6NR0ehoTDQ2GheNjyZEE6NJ0eRoSjQ1mhZNj2ZEM6NZ0exoTjQ3mhfNjxZEC6NF0eJoSbQ0WhYtj1ZEK6NV0epoTbQ2WhetjzZEG6NN0eZoS7Q12hZtj3ZEO6Nd0e5oT7Q32hftjw5EB6ND0eHoSHQ0OhYdj05EJ6NT0enoTHQ2Ohedjy5EF6NL0eXoSnQ1uhZdj25EN6Nb0e3oTnQ3uhfdjx5ED6NH0ePoSfQ0ehY9j15EL6NX0evoTfQ2ehe9jz5EH6NP0efoS/Q1+hZ9j35EP6Nf0e/oT/Q3+hfFxZLEksaSxeJjyWMpYgmxxFjKWKpY6liaWNpYulj6WIZYxlimWOZYlljWWLZY9liOWM5YrljuWJ5Y3li+WP5YgVjBWKFY4ViRWNFYsVjxWIlYyVipWOlYmVjZWLlY+ViFWMVYpVjlWJVY1Vi1WPVYjVjNWK1Y7VidWN1YvVj9WINYw1ijWONYk1jTWLNY81iLWMtYq1jrWJtY21i7WPtYh1jHWKdY51iXWNcYFsNjRIyMUTE6BmIwhmL/EQAPgHXmAACA26nzdrNt27Zt28Zv20ryZtu2bdu27fa+gdggbDA2BBuKDcOGYyOwkdgobDQ2BhuLjcPGYxOwidgkbDI2BZuKTcOmYxiGYwRGYhRGYwzGYhzGYwImYhImYwqmYhqmYwZmYhZmYw7mYh7mYwEWYhEGMIghLIbNwGZis7DZ2BxsLjYPm48twBZii7DF2BJsKbYMW46twFZiq7DV2BpsLbYOW49twDZim7DN2BZsK7YN247twHZiu7Dd2B5sL7YP248dwA5ih7DD2BHsKHYMO46dwE5ip7DT2BnsLHYOO49dwC5il7DL2BXsKnYNu47dwG5it7Db2B3sLnYPu489wB5ij7DH2BPsKfYMe469wF5ir7DX2BvsLfYOe499wD5in7DP2BfsK/YN+479wH5iv7Df2B/sL/YPS8SSsDg8Hk+GJ8dT4CnxVHgCnhpPg6fF0+Hp8Qx4RjwTnhn/D8+CZ8Wz4dnxHHhOPBeeG8+D58Xz4fnxAnhBvBBeGC+CF8WL4cXxEnhJvBReGi+Dl8XL4eXxCnhFvBJeGa+CV8Wr4dXxGnhNvBZeG6+D18Xr4fXxBnhDvBHeGG+CN8Wb4c3xFnhLvBXeGm+Dt8Xb4e3xDnhHvBPeGe+Cd8W74d3xHnhPvBfeG++D98X74f3xAfhAfBA+GB+CD8WH4cPxEfhIfBQ+Gh+Dj8XH4ePxCfhEfBI+GZ+CT8Wn4dNxDMdxAidxCqdxBmdxDudxARdxCZdxBVdxDddxAzdxC7dxB3dxD/fxAA/xCAc4xBEew2fgM/FZ+Gx8Dj4Xn4fPxxfgC/FF+GJ8Cb4UX4Yvx1fgK/FV+Gp8Db4WX4evxzfgG/FN+GZ8C74V34Zvx3fgO/Fd+G58D74X34fvxw/gB/FD+GH8CH4UP4Yfx0/gJ/FT+Gn8DH4WP4efxy/gF/FL+GX8Cn4Vv4Zfx2/gN/Fb+G38Dn4Xv4ffxx/gD/FH+GP8Cf4Uf4Y/x1/gL/FX+Gv8Df4Wf4e/xz/gH/FP+Gf8C/4V/4Z/x3/gP/Ff+G/8D/4X/4cn4kl4HBFPJCOSEymIlEQqIoFITaQh0hLpiPREBiIjkYnITPxHZCGyEtmI7EQOIieRi8hN5CHyEvmI/EQBoiBRiChMFCGKEsWI4kQJoiRRiihNlCHKEuWI8kQFoiJRiahMVCGqEtWI6kQNoiZRi6hN1CHqEvWI+kQDoiHRiGhMNCGaEs2I5kQLoiXRimhNtCHaEu2I9kQHoiPRiehMdCG6Et2I7kQPoifRi+hN9CH6Ev2I/sQAYiAxiBhMDCGGEsOI4cQIYiQxihhNjCHGEuOI8cQEYiIxiZhMTCGmEtOI6QRG4ARBkARF0ARDsARH8IRAiIREyIRCqIRG6IRBmIRF2IRDuIRH+ERAhEREAAISiIgRM4iZxCxiNjGHmEvMI+YTC4iFxCJiMbGEWEosI5YTK4iVxCpiNbGGWEusI9YTG4iNxCZiM7GF2EpsI7YTO4idxC5iN7GH2EvsI/YTB4iDxCHiMHGEOEocI44TJ4iTxCniNHGGOEucI84TF4iLxCXiMnGFuEpcI64TN4ibxC3iNnGHuEvcI+4TD4iHxCPiMfGEeEo8I54TL4iXxCviNfGGeEu8I94TH4iPxCfiM/GF+Ep8I74TP4ifxC/iN/GH+Ev8IxKJJCKOjCeTkcnJFGRKMhWZQKYm05BpyXRkejIDmZHMRGYm/yOzkFnJbGR2MgeZk8xF5ibzkHnJfGR+sgBZkCxEFiaLkEXJYmRxsgRZkixFlibLkGXJcmR5sgJZkaxEViarkFXJamR1sgZZk6xF1ibrkHXJemR9sgHZkGxENiabkE3JZmRzsgXZkmxFtibbkG3JdmR7sgPZkexEdia7kF3JbmR3sgfZk+xF9ib7kH3JfmR/cgA5kBxEDiaHkEPJYeRwcgQ5khxFjibHkGPJceR4cgI5kZxETiankFPJaeR0EiNxkiBJkiJpkiFZkiN5UiBFUiJlUiFVUiN10iBN0iJt0iFd0iN9MiBDMiIBCUlExsgZ5ExyFjmbnEPOJeeR88kF5EJyEbmYXEIuJZeRy8kV5EpyFbmaXEOuJdeR68kN5EZyE7mZ3EJuJbeR28kd5E5yF7mb3EPuJfeR+8kD5EHyEHmYPEIeJY+Rx8kT5EnyFHmaPEOeJc+R58kL5EXyEnmZvEJeJa+R18kb5E3yFnmbvEPeJe+R98kH5EPyEfmYfEI+JZ+Rz8kX5EvyFfmafEO+Jd+R78kP5EfyE/mZ/EJ+Jb+R38kf5E/yF/mb/EP+Jf+RiWQSGUfFU8mo5FQKKiWVikqgUlNpqLRUOio9lYHKSGWiMlP/UVmorFQ2KjuVg8pJ5aJyU3movFQ+Kj9VgCpIFaIKU0WoolQxqjhVgipJlaJKU2WoslQ5qjxVgapIVaIqU1WoqlQ1qjpVg6pJ1aJqU3WoulQ9qj7VgGpINaIaU02oplQzqjnVgmpJtaJaU22otlQ7qj3VgepIdaI6U12orlQ3qjvVg+pJ9aJ6U32ovlQ/qj81gBpIDaIGU0OoodQwajg1ghpJjaJGU2OosdQ4ajw1gZpITaImU1OoqdQ0ajqFUThFUCRFUTTFUCzFUTwlUCIlUTKlUCqlUTplUCZlUTblUC7lUT4VUCEVUYCCFKJi1AxqJjWLmk3NoeZS86j51AJqIbWIWkwtoZZSy6jl1ApqJbWKWk2todZS66j11AZqI7WJ2kxtobZS26jt1A5qJ7WL2k3tofZS+6j91AHqIHWIOkwdoY5Sx6jj1AnqJHWKOk2doc5S56jz1AXqInWJukxdoa5S16jr1A3qJnWLuk3doe5S96j71APqIfWIekw9oZ5Sz6jn1AvqJfWKek29od5S76j31AfqI/WJ+kx9ob5S36jv1A/qJ/WL+k39of5S/6hEKomKo+PpZHRyOgWdkk5FJ9Cp6TR0WjodnZ7OQGekM9GZ6f/oLHRWOhudnc5B56Rz0bnpPHReOh+dny5AF6QL0YXpInRRuhhdnC5Bl6RL0aXpMnRZuhxdnq5AV6Qr0ZXpKnRVuhpdna5B16Rr0bXpOnRduh5dn25AN6Qb0Y3pJnRTuhndnG5Bt6Rb0a3pNnRbuh3dnu5Ad6Q70Z3pLnRXuhvdne5B96R70b3pPnRfuh/dnx5AD6QH0YPpIfRQehg9nB5Bj6RH0aPpMfRYehw9np5AT6Qn0ZPpKfRUeho9ncZonCZokqZommZoluZonhZokZZomVZoldZonTZok7Zom3Zol/Zonw7okI5oQEMa0TF6Bj2TnkXPpufQc+l59Hx6Ab2QXkQvppfQS+ll9HJ6Bb2SXkWvptfQa+l19Hp6A72R3kRvprfQW+lt9HZ6B72T3kXvpvfQe+l99H76AH2QPkQfpo/QR+lj9HH6BH2SPkWfps/QZ+lz9Hn6An2RvkRfpq/QV+lr9HX6Bn2TvkXfpu/Qd+l79H36Af2QfkQ/pp/QT+ln9HP6Bf2SfkW/pt/Qb+l39Hv6A/2R/kR/pr/QX+lv9Hf6B/2T/kX/pv/Qf+l/dCKdRMcx8UwyJjmTgknJpGISmNRMGiYtk45Jz2RgMjKZmMzMf0wWJiuTjcnO5GByMrmY3EweJi+Tj8nPFGAKMoWYwkwRpihTjCnOlGBKMqWY0kwZpixTjinPVGAqMpWYykwVpipTjanO1GBqMrWY2kwdpi5Tj6nPNGAaMo2YxkwTpinTjGnOtGBaMq2Y1kwbpi3TjmnPdGA6Mp2YzkwXpivTjenO9GB6Mr2Y3kwfpi/Tj+nPDGAGMoOYwcwQZigzjBnOjGBGMqOY0cwYZiwzjhnPTGAmMpOYycwUZiozjZnOYAzOEAzJUAzNMAzLcAzPCIzISIzMKIzKaIzOGIzJWIzNOIzLeIzPBEzIRAxgIIOYGDODmcnMYmYzc5i5zDxmPrOAWcgsYhYzS5ilzDJmObOCWcmsYlYza5i1zDpmPbOB2chsYjYzW5itzDZmO7OD2cnsYnYze5i9zD5mP3OAOcgcYg4zR5ijzDHmOHOCOcmcYk4zZ5izzDnmPHOBuchcYi4zV5irzDXmOnODucncYm4zd5i7zD3mPvOAecg8Yh4zT5inzDPmOfOCecm8Yl4zb5i3zDvmPfOB+ch8Yj4zX5ivzDfmO/OD+cn8Yn4zf5i/zD8mkUli4th4NhmbnE3BpmRTsQlsajYNm5ZNx6ZnM7AZ2UxsZvY/Ngublc3GZmdzsDnZXGxuNg+bl83H5mcLsAXZQmxhtghblC3GFmdLsCXZUmxptgxbli3HlmcrsBXZSmxltgpbla3GVmdrsDXZWmxttg5bl63H1mcbsA3ZRmxjtgnblG3GNmdbsC3ZVmxrtg3blm3Htmc7sB3ZTmxntgvble3Gdmd7sD3ZXmxvtg/bl+3H9mcHsAPZQexgdgg7lB3GDmdHsCPZUexodgw7lh3HjmcnsBPZSexkdgo7lZ3GTmcxFmcJlmQplmYZlmU5lmcFVmQlVmYVVmU1VmcN1mQt1mYd1mU91mcDNmQjFrCQRWyMncHOZGexs9k57Fx2HjufXcAuZBexi9kl7FJ2GbucXcGuZFexq9k17Fp2Hbue3cBuZDexm9kt7FZ2G7ud3cHuZHexu9k97F52H7ufPcAeZA+xh9kj7FH2GHucPcGeZE+xp9kz7Fn2HHuevcBeZC+xl9kr7FX2GnudvcHeZG+xt9k77F32HnuffcA+ZB+xj9kn7FP2GfucfcG+ZF+xr9k37Fv2Hfue/cB+ZD+xn9kv7Ff2G/ud/cH+ZH+xv9k/7F/2H5vIJrFxXDyXjEvOpeBScqm4BC41l4ZLy6Xj0nMZuIxcJi4z9x+XhcvKZeOyczm4nFwuLjeXh8vL5ePycwW4glwhrjBXhCvKFeOKcyW4klwprjRXhivLlePKcxW4ilwlrjJXhavKVeOqczW4mlwtrjZXh6vL1ePqcw24hlwjrjHXhGvKNeOacy24llwrrjXXhmvLtePacx24jlwnrjPXhevKdeO6cz24nlwvrjfXh+vL9eP6cwO4gdwgbjA3hBvKDeOGcyO4kdwobjQ3hhvLjePGcxO4idwkbjI3hZvKTeOmcxiHcwRHchRHcwzHchzHcwInchIncwqnchqncwZnchZncw7nch7ncwEXchEHOMghLsbN4GZys7jZ3BxuLjePm88t4BZyi7jF3BJuKbeMW86t4FZyq7jV3BpuLbeOW89t4DZym7jN3BZuK7eN287t4HZyu7jd3B5uL7eP288d4A5yh7jD3BHuKHeMO86d4E5yp7jT3BnuLHeOO89d4C5yl7jL3BXuKneNu87d4G5yt7jb3B3uLnePu8894B5yj7jH3BPuKfeMe8694F5yr7jX3BvuLfeOe8994D5yn7jP3BfuK/eN+8794H5yv7jf3B/uL/ePS+SSuDg+nk/GJ+dT8Cn5VHwCn5pPw6fl0/Hp+Qx8Rj4Tn5n/j8/CZ+Wz8dn5HHxOPhefm8/D5+Xz8fn5AnxBvhBfmC/CF+WL8cX5EnxJvhRfmi/Dl+XL8eX5CnxFvhJfma/CV+Wr8dX5GnxNvhZfm6/D1+Xr8fX5BnxDvhHfmG/CN+Wb8c35FnxLvhXfmm/Dt+Xb8e35DnxHvhPfme/Cd+W78d35HnxPvhffm+/D9+X78f35AfxAfhA/mB/CD+WH8cP5EfxIfhQ/mh/Dj+XH8eP5CfxEfhI/mZ/CT+Wn8dN5jMd5gid5iqd5hmd5jud5gRd5iZd5hVd5jdd5gzd5i7d5h3d5j/f5gA/5iAc85BEf42fwM/lZ/Gx+Dj+Xn8fP5xfwC/lF/GJ+Cb+UX8Yv51fwK/lV/Gp+Db+WX8ev5zfwG/lN/GZ+C7+V38Zv53fwO/ld/G5+D7+X38fv5w/wB/lD/GH+CH+UP8Yf50/wJ/lT/Gn+DH+WP8ef5y/wF/lL/GX+Cn+Vv8Zf52/wN/lb/G3+Dn+Xv8ff5x/wD/lH/GP+Cf+Uf8Y/51/wL/lX/Gv+Df+Wf8e/5z/wH/lP/Gf+C/+V/8Z/53/wP/lf/G/+D/+X/8cn8kl8nBAvJBOSCymElEIqIUFILaQR0grphPRCBiGjkEnILPwnZBGyCtmE7EIOIaeQS8gt5BHyCvmE/EIBoaBQSCgsFBGKCsWE4kIJoaRQSigtlBHKCuWE8kIFoaJQSagsVBGqCtWE6kINoaZQS6gt1BHqCvWE+kIDoaHQSGgsNBGaCs2E5kILoaXQSmgttBHaCu2E9kIHoaPQSegsdBG6Ct2E7kIPoafQS+gt9BH6Cv2E/sIAYaAwSBgsDBGGCsOE4cIIYaQwShgtjBHGCuOE8cIEYaIwSZgsTBGmCtOE6QIm4AIhkAIl0AIjsAIn8IIgiIIkyIIiqIIm6IIhmIIl2IIjuIIn+EIghEIkAAEKSIgJM4SZwixhtjBHmCvME+YLC4SFwiJhsbBEWCosE5YLK4SVwiphtbBGWCusE9YLG4SNwiZhs7BF2CpsE7YLO4Sdwi5ht7BH2CvsE/YLB4SDwiHhsHBEOCocE44LJ4STwinhtHBGOCucE84LF4SLwiXhsnBFuCpcE64LN4Sbwi3htnBHuCvcE+4LD4SHwiPhsfBEeCo8E54LL4SXwivhtfBGeCu8E94LH4SPwifhs/BF+Cp8E74LP4Sfwi/ht/BH+Cv8ExKFJCFOjBeTicnFFGJKMZWYIKYW04hpxXRiejGDmFHMJGYW/xOziFnFbGJ2MYeYU8wl5hbziHnFfGJ+sYBYUCwkFhaLiEXFYmJxsYRYUiwllhbLiGXFcmJ5sYJYUawkVhariFXFamJ1sYZYU6wl1hbriHXFemJ9sYHYUGwkNhabiE3FZmJzsYXYUmwlthbbiG3FdmJ7sYPYUewkdha7iF3FbmJ3sYfYU+wl9hb7iH3FfmJ/cYA4UBwkDhaHiEPFYeJwcYQ4UhwljhbHiGPFceJ4cYI4UZwkThaniFPFaeJ0ERNxkRBJkRJpkRFZkRN5URBFURJlURFVURN10RBN0RJt0RFd0RN9MRBDMRKBCEUkxsQZ4kxxljhbnCPOFeeJ88UF4kJxkbhYXCIuFZeJy8UV4kpxlbhaXCOuFdeJ68UN4kZxk7hZ3CJuFbeJ28Ud4k5xl7hb3CPuFfeJ+8UD4kHxkHhYPCIeFY+Jx8UT4knxlHhaPCOeFc+J58UL4kXxknhZvCJeFa+J18Ub4k3xlnhbvCPeFe+J98UH4kPxkfhYfCI+FZ+Jz8UX4kvxlfhafCO+Fd+J78UP4kfxk/hZ/CJ+Fb+J38Uf4k/xl/hb/CP+Ff+JiWKSGCfFS8mk5FIKKaWUSkqQUktppLRSOim9lEHKKGWSMkv/SVmkrFI2KbuUQ8op5ZJyS3mkvFI+Kb9UQCooFZIKS0WkolIxqbhUQioplZJKS2WkslI5qbxUQaooVZIqS1WkqlI1qbpUQ6op1ZJqS3WkulI9qb7UQGooNZIaS02kplIzqbnUQmoptZJaS22ktlI7qb3UQeoodZI6S12krlI3qbvUQ+op9ZJ6S32kvlI/qb80QBooDZIGS0OkodIwabg0QhopjZJGS2OksdI4abw0QZooTZImS1OkqdI0abqESbhESKRESbTESKzESbwkSKIkSbKkSKqkSbpkSKZkSbbkSK7kSb4USKEUSUCCEpJi0gxppjRLmi3NkeZK86T50gJpobRIWiwtkZZKy6Tl0gpppbRKWi2tkdZK66T10gZpo7RJ2ixtkbZK26Tt0g5pp7RL2i3tkfZK+6T90gHpoHRIOiwdkY5Kx6Tj0gnppHRKOi2dkc5K56Tz0gXponRJuixdka5K16Tr0g3ppnRLui3dke5K96T70gPpofRIeiw9kZ5Kz6Tn0gvppfRKei29kd5K76T30gfpo/RJ+ix9kb5K36Tv0g/pp/RL+i39kf5K/6REKUmKk+PlZHJyOYWcUk4lJ8ip5TRyWjmdnF7OIGeUM8mZ5f/kLHJWOZucXc4h55RzybnlPHJeOZ+cXy4gF5QLyYXlInJRuZhcXC4hl5RLyaXlMnJZuZxcXq4gV5QryZXlKnJVuZpcXa4h15RrybXlOnJduZ5cX24gN5QbyY3lJnJTuZncXG4ht5Rbya3lNnJbuZ3cXu4gd5Q7yZ3lLnJXuZvcXe4h95R7yb3lPnJfuZ/cXx4gD5QHyYPlIfJQeZg8XB4hj5RHyaPlMfJYeZw8Xp4gT5QnyZPlKfJUeZo8XcZkXCZkUqZkWmZkVuZkXhZkUZZkWVZkVdZkXTZkU7ZkW3ZkV/ZkXw7kUI5kIEMZyTF5hjxTniXPlufIc+V58nx5gbxQXiQvlpfIS+Vl8nJ5hbxSXiWvltfIa+V18np5g7xR3iRvlrfIW+Vt8nZ5h7xT3iXvlvfIe+V98n75gHxQPiQflo/IR+Vj8nH5hHxSPiWfls/IZ+Vz8nn5gnxRviRflq/IV+Vr8nX5hnxTviXflu/Id+V78n35gfxQfiQ/lp/IT+Vn8nP5hfxSfiW/lt/Ib+V38nv5g/xR/iR/lr/IX+Vv8nf5h/xT/iX/lv/If+V/cqKcJMcp8UoyJbmSQkmppFISlNRKGiWtkk5Jr2RQMiqZlMzKf0oWJauSTcmu5FByKrmU3EoeJa+ST8mvFFAKKoWUwkoRpahSTCmulFBKKqWU0koZpaxSTimvVFAqKpWUykoVpapSTamu1FBqKrWU2kodpa5ST6mvNFAaKo2UxkoTpanSTGmutFBaKq2U1kobpa3STmmvdFA6Kp2UzkoXpavSTemu9FB6Kr2U3kofpa/ST+mvDFAGKoOUwcoQZagyTBmujFBGKqOU0coYZawyThmvTFAmKpOUycoUZaoyTZmuYAquEAqpUAqtMAqrcAqvCIqoSIqsKIqqaIquGIqpWIqtOIqreIqvBEqoRApQoIKUmDJDmanMUmYrc5S5yjxlvrJAWagsUhYrS5SlyjJlubJCWamsUlYra5S1yjplvbJB2ahsUjYrW5StyjZlu7JD2ansUnYre5S9yj5lv3JAOagcUg4rR5SjyjHluHJCOamcUk4rZ5SzyjnlvHJBuahcUi4rV5SryjXlunJDuancUm4rd5S7yj3lvvJAeag8Uh4rT5SnyjPlufJCeam8Ul4rb5S3yjvlvfJB+ah8Uj4rX5Svyjflu/JD+an8Un4rf5S/yj8lUUlS4tR4NZmaXE2hplRTqQlqajWNmlZNp6ZXM6gZ1UxqZvU/NYuaVc2mZldzqDnVXGpuNY+aV82n5lcLqAXVQmphtYhaVC2mFldLqCXVUmpptYxaVi2nllcrqBXVSmpltYpaVa2mVldrqDXVWmpttY5aV62n1lcbqA3VRmpjtYnaVG2mNldbqC3VVmprtY3aVm2ntlc7qB3VTmpntYvaVe2mdld7qD3VXmpvtY/aV+2n9lcHqAPVQepgdYg6VB2mDldHqCPVUepodYw6Vh2njlcnqBPVSepkdYo6VZ2mTlcxFVcJlVQplVYZlVU5lVcFVVQlVVYVVVU1VVcN1VQt1VYd1VU91VcDNVQjFahQRWpMnaHOVGeps9U56lx1njpfXaAuVBepi9Ul6lJ1mbpcXaGuVFepq9U16lp1nbpe3aBuVDepm9Ut6lZ1m7pd3aHuVHepu9U96l51n7pfPaAeVA+ph9Uj6lH1mHpcPaGeVE+pp9Uz6ln1nHpevaBeVC+pl9Ur6lX1mnpdvaHeVG+pt9U76l31nnpffaA+VB+pj9Un6lP1mfpcfaG+VF+pr9U36lv1nfpe/aB+VD+pn9Uv6lf1m/pd/aH+VH+pv9U/6l/1n5qoJqlxWryWTEuupdBSaqm0BC21lkZLq6XT0msZtIxaJi1zQpyWRcuqZdOyazm0nFouLbeWR8ur5dPyawW0glohrbBWRCuqFdOKayW0kloprbRWRiurldPKaxW0ilolrbJWRauqVdOqazW0mlotrbZWR6ur1dPqaw20hlojrbHWRGuqNdOaay20llorrbXWRmurtdPaax20jlonrbPWReuqddO6az20nlovrbfWR+ur9dP6awO0gdogbbA2RBuqDdOGayO0kdoobbQ2RhurjdPGaxO0idokbbI2RZuqTdOma5iGa4RGapRGa4zGapzGa4ImapIma4qmapqma4ZmapZma47map7ma4EWapEGNKghLabN0GZqs7TZ2hxtrjZPm68t0BZqi7TF2hJtqbZMW66t0FZqq7TV2hptrbZOW69t0DZqm7TN2hZtq7ZN267t0HZqu7Td2h5tr7ZP268d0A5qh7TD2hHtqHZMO66d0E5qp7TT2hntrHZOO69d0C5ql7TL2hXtqnZNu67d0G5qt7Tb2h3trnZPu6890B5qj7TH2hPtqfZMe6690F5qr7TX2hvtrfZOe6990D5qn7TP2hftq/ZN+6790H5qv7Tf2h/tr/ZPS9SStDg9Xk+mJ9dT6Cn1VHqCnlpPo6fV0+np9Qx6Rj2Tnln/T8+iZ9Wz6dn1HHpOPZeeW8+j59Xz6fn1AnpBvZBeWC+iF9WL6cX1EnpJvZReWi+jl9XL6eX1CnpFvZJeWa+iV9Wr6dX1GnpNvZZeW6+j19Xr6fX1BnpDvZHeWG+iN9Wb6c31FnpLvZXeWm+jt9Xb6e31DnpHvZPeWe+id9W76d31HnpPvZfeW++j99X76f31AfpAfZA+WB+iD9WH6cP1EfpIfZQ+Wh+jj9XH6eP1CfpEfZI+WZ+iT9Wn6dN1TMd1Qid1Sqd1Rmd1Tud1QRd1SZd1RVd1Tdd1Qzd1S7d1R3d1T/f1QA/1SAc61JEe02foM/VZ+mx9jj5Xn6fP1xfoC/VF+mJ9ib5UX6Yv11foK/VV+mp9jb5WX6ev1zfoG/VN+mZ9i75V36Zv13foO/Vd+m59j75X36fv1w/oB/VD+mH9iH5UP6Yf10/oJ/VT+mn9jH5WP6ef1y/oF/VL+mX9in5Vv6Zf12/oN/Vb+m39jn5Xv6ff1x/oD/VH+mP9if5Uf6Y/11/oL/VX+mv9jf5Wf6e/1z/oH/VP+mf9i/5V/6Z/13/oP/Vf+m/9j/5X/6cn6kl6nBFvJDOSGymMlEYqI8FIbaQx0hrpjPRGBiOjkcnIbPxnZDGyGtmM7EYOI6eRy8ht5DHyGvmM/EYBo6BRyChsFDGKGsWM4kYJo6RRyihtlDHKGuWM8kYFo6JRyahsVDGqGtWM6kYNo6ZRy6ht1DHqGvWM+kYDo6HRyGhsNDGaGs2M5kYLo6XRymhttDHaGu2M9kYHo6PRyehsdDG6Gt2M7kYPo6fRy+ht9DH6Gv2M/sYAY6AxyBhsDDGGGsOM4cYIY6QxyhhtjDHGGuOM8cYEY6IxyZhsTDGmGtOM6QZm4AZhkAZl0AZjsAZn8IZgiIZkyIZiqIZm6IZhmIZl2IZjuIZn+EZghEZkAAMayIgZM4yZxixjtjHHmGvMM+YbC4yFxiJjsbHEWGosM5YbK4yVxipjtbHGWGusM9YbG4yNxiZjs7HF2GpsM7YbO4ydxi5jt7HH2GvsM/YbB4yDxiHjsHHEOGocM44bJ4yTxinjtHHGOGucM84bF4yLxiXjsnHFuGpcM64bN4ybxi3jtnHHuGvcM+4bD4yHxiPjsfHEeGo8M54bL4yXxivjtfHGeGu8M94bH4yPxifjs/HF+Gp8M74bP4yfxi/jt/HH+Gv8MxKNJCPOjDeTmcnNFGZKM5WZYKY205hpzXRmejODmdHMZGY2/zOzmFnNbGZ2M4eZ08xl5jbzmHnNfGZ+s4BZ0CxkFjaLmEXNYmZxs4RZ0ixlljbLmGXNcmZ5s4JZ0axkVjarmFXNamZ1s4ZZ06xl1jbrmHXNemZ9s4HZ0GxkNjabmE3NZmZzs4XZ0mxltjbbmG3NdmZ7s4PZ0exkdja7mF3NbmZ3s4fZ0+xl9jb7mH3NfmZ/c4A50BxkDjaHmEPNYeZwc4Q50hxljjbHmGPNceZ4c4I50ZxkTjanmFPNaeZ0EzNxkzBJkzJpkzFZkzN5UzBFUzJlUzFVUzN10zBN0zJt0zFd0zN9MzBDMzKBCU1kxswZ5kxzljnbnGPONeeZ880F5kJzkbnYXGIuNZeZy80V5kpzlbnaXGOuNdeZ680N5kZzk7nZ3GJuNbeZ280d5k5zl7nb3GPuNfeZ+80D5kHzkHnYPGIeNY+Zx80T5knzlHnaPGOeNc+Z580L5kXzknnZvGJeNa+Z180b5k3zlnnbvGPeNe+Z980H5kPzkfnYfGI+NZ+Zz80X5kvzlfnafGO+Nd+Z780P5kfzk/nZ/GJ+Nb+Z380f5k/zl/nb/GP+Nf+ZiWaSGWfFW8ms5FYKK6WVykqwUltprLRWOiu9lcHKaGWyMlv/WVmsrFY2K7uVw8pp5bJyW3msvFY+K79VwCpoFbIKW0WsolYxq7hVwipplbJKW2WsslY5q7xVwapoVbIqW1WsqlY1q7pVw6pp1bJqW3WsulY9q77VwGpoNbIaW02splYzq7nVwmpptbJaW22stlY7q73VwepodbI6W12srlY3q7vVw+pp9bJ6W32svlY/q781wBpoDbIGW0OsodYwa7g1whppjbJGW2OssdY4a7w1wZpoTbImW1OsqdY0a7qFWbhFWKRFWbTFWKzFWbwlWKIlWbKlWKqlWbplWKZlWbblWK7lWb4VWKEVWcCCFrJi1gxrpjXLmm3NseZa86z51gJrobXIWmwtsZZay6zl1gprpbXKWm2tsdZa66z11gZro7XJ2mxtsbZa26zt1g5rp7XL2m3tsfZa+6z91gHroHXIOmwdsY5ax6zj1gnrpHXKOm2dsc5a56zz1gXronXJumxdsa5a16zr1g3rpnXLum3dse5a96z71gProfXIemw9sZ5az6zn1gvrpfXKem29sd5a76z31gfro/XJ+mx9sb5a36zv1g/rp/XL+m39sf5a/6xEK8mKs+PtZHZyO4Wd0k5lJ9ip7TR2Wjudnd7OYGe0M9mZ7f/sLHZWO5ud3c5h57Rz2bntPHZeO5+d3y5gF7QL2YXtInZRu5hd3C5hl7RL2aXtMnZZu5xd3q5gV7Qr2ZXtKnZVu5pd3a5h17Rr2bXtOnZdu55d325gN7Qb2Y3tJnZTu5nd3G5ht7Rb2a3tNnZbu53d3u5gd7Q72Z3tLnZXu5vd3e5h97R72b3tPnZfu5/d3x5gD7QH2YPtIfZQe5g93B5hj7RH2aPtMfZYe5w93p5gT7Qn2ZPtKfZUe5o93cZs3CZs0qZs2mZs1uZs3hZs0ZZs2VZs1dZs3TZs07Zs23Zs1/Zs3w7s0I5sYEMb2TF7hj3TnmXPtufYc+159nx7gb3QXmQvtpfYS+1l9nJ7hb3SXmWvttfYa+119np7g73R3mRvtrfYW+1t9nZ7h73T3mXvtvfYe+199n77gH3QPmQfto/YR+1j9nH7hH3SPmWfts/YZ+1z9nn7gn3RvmRftq/YV+1r9nX7hn3TvmXftu/Yd+179n37gf3QfmQ/tp/YT+1n9nP7hf3SfmW/tt/Yb+139nv7g/3R/mR/tr/YX+1vdrz9w/5p/7J/23/sv/Y/O9FOsuOceCeZk9xJ4aR0UjkJTmonjZPWSeekdzI4GZ1MTmbnPyeLk9XJ5mR3cjg5nVxObiePk9fJ5+R3CjgFnUJOYaeIU9Qp5hR3SjglnVJOaaeMU9Yp55R3KjgVnUpOZaeKU9Wp5lR3ajg1nVpObaeOU9ep59R3GjgNnUZOY6eJ09Rp5jR3WjgtnVZOa6eN09Zp57R3OjgdnU5OZ6eL09Xp5nR3ejg9nV5Ob6eP09fp5/R3BjgDnUHOYGeIM9QZ5gx3RjgjnVHOaGeMM9YZ54x3JjgTnUnOZGeKM9WZ5kx3MAd3CId0KId2GId1OId3BEd0JEd2FEd1NEd3DMd0LMd2HMd1PMd3Aid0Igc40EFOzJnhzHRmObOdOc5cZ54z31ngLHQWOYudJc5SZ5mz3FnhrHRWOaudNc5aZ52z3tngbHQ2OZudLc5WZ5uz3dnh7HR2ObudPc5eZ5+z3zngHHQOOYedI85R55hz3DnhnHROOaedM85Z55xz3rngXHQuOZedK85V55pz3bnh3HRuObedO85d555z33ngPHQeOY+dJ85T55nz3HnhvHReOa+dN85b553z3vngfHQ+OZ+dL85X55vz3fnh/HR+Ob+dP85f55+T6CQ5cW68m8xN7qZwU7qp3AQ3tZvGTeumc9O7GdyMbiY3s/ufm8XN6mZzs7s53JxuLje3m8fN6+Zz87sF3IJuIbewW8Qt6hZzi7sl3JJuKbe0W8Yt65Zzy7sV3IpuJbeyW8Wt6lZzq7s13JpuLbe2W8et69Zz67sN3IZuI7ex28Rt6jZzm7st3JZuK7e128Zt67Zz27sd3I5uJ7ez28Xt6nZzu7s93J5uL7e328ft6/Zz+7sD3IHuIHewO8Qd6g5zh7sj3JHuKHe0O8Yd645zx7sT3InuJHeyO8Wd6k5zp7uYi7uES7qUS7uMy7qcy7uCK7qSK7uKq7qaq7uGa7qWa7uO67qe67uBG7qRC1zoIjfmznBnurPc2e4cd647z53vLnAXuovcxe4Sd6m7zF3urnBXuqvc1e4ad627zl3vbnA3upvcze4Wd6u7zd3u7nB3urvc3e4ed6+7z93vHnAPuofcw+4R96h7zD3unnBPuqfc0+4Z96x7zj3vXnAvupfcy+4V96p7zb3u3nBvurfc2+4d9657z73vPnAfuo/cx+4T96n7zH3uvnBfuq/c1+4b9637zn3vfnA/up/cz+4X96v7zf3u/nB/ur/c3+4f96/7z010k9w4L95L5iX3UngpvVRegpfaS+Ol9dJ56b0MXkYvk5fZ+8/L4mX1snnZvRxeTi+Xl9vL4+X18nn5vQJeQa+QV9gr4hX1innFvRJeSa+UV9or45X1ynnlvQpeRa+SV9mr4lX1qnnVvRpeTa+WV9ur49X16nn1vQZeQ6+R19hr4jX1mnnNvRZeS6+V19pr47X12nntvQ5eR6+T19nr4nX1unndvR5eT6+X19vr4/X1+nn9vQHeQG+QN9gb4g31hnnDvRHeSG+UN9ob4431xnnjvQneRG+SN9mb4k31pnnTPczDPcIjPcqjPcZjPc7jPcETPcmTPcVTPc3TPcMzPcuzPcdzPc/zvcALvcgDHvSQF/NmeDO9Wd5sb44315vnzfcWeAu9Rd5ib4m31FvmLfdWeCu9Vd5qb4231lvnrfc2eBu9Td5mb4u31dvmbfd2eDu9Xd5ub4+319vn7fcOeAe9Q95h74h31DvmHfdOeCe9U95p74x31jvnnfcueBe9S95l74p31bvmXfdueDe9W95t745317vn3fceeA+9R95j74n31HvmPfdeeC+9V95r74331nvnvfc+eB+9T95n74v31fvmffd+eD+9X95v74/31/vnJXpJXpwf7yfzk/sp/JR+Kj/BT+2n8dP66fz0fgY/o5/Jz+z/52fxs/rZ/Ox+Dj+nn8vP7efx8/r5/Px+Ab+gX8gv7Bfxi/rF/OJ+Cb+kX8ov7Zfxy/rl/PJ+Bb+iX8mv7Ffxq/rV/Op+Db+mX8uv7dfx6/r1/Pp+A7+h38hv7Dfxm/rN/OZ+C7+l38pv7bfx2/rt/PZ+B7+j38nv7Hfxu/rd/O5+D7+n38vv7ffx+/r9/P7+AH+gP8gf7A/xh/rD/OH+CH+kP8of7Y/xx/rj/PH+BH+iP8mf7E/xp/rT/Ok+5uM+4ZM+5dM+47M+5/O+4Iu+5Mu+4qu+5uu+4Zu+5du+47u+5/t+4Id+5AMf+siP+TP8mf4sf7Y/x5/rz/Pn+wv8hf4if7G/xF/qL/OX+yv8lf4qf7W/xl/rr/PX+xv8jf4mf7O/xd/qb/O3+zv8nf4uf7e/x9/r7/P3+wf8g/4h/7B/xD/qH/OP+yf8k/4p/7R/xj/rn/PP+xf8i/4l/7J/xb/qX/Ov+zf8m/4t/7Z/x7/r3/Pv+w/8h/4j/7H/xH/qP/Of+y/8l/4r/7X/xn/rv/Pf+x/8j/4n/7P/xf/qf/O/+z/8n/4v/7f/x//r//MT/SQ/LogPkgXJgxRByiBVkBCkDtIEaYN0QfogQ5AxyBRkDv4LsgRZg2xB9iBHkDPIFeQO8gR5g3xB/qBAUDAoFBQOigRFg2JB8aBEUDIoFZQOygRlg3JB+aBCUDGoFFQOqgRVg2pB9aBGUDOoFdQO6gR1g3pB/aBB0DBoFDQOmgRNg2ZB86BF0DJoFbQO2gRtg3ZB+6BD0DHoFHQOugRdg25B96BH0DPoFfQO+gR9g35B/2BAMDAYFAwOhgRDg2HB8GBEMDIYFYwOxgRjg3HB+GBCMDGYFEwOpgRTg2nB9AAL8IAIyIAK6IAJ2IAL+EAIxEAK5EAJ1EAL9MAIzMAK7MAJ3MAL/CAIwiAKQAADFMSCGcHMYFYwO5gTzA3mBfODBcHCYFGwOFgSLA2WBcuDFcHKYFWwOlgTrA3WBeuDDcHGYFOwOdgSbA22BduDHcHOYFewO9gT7A32BfuDA8HB4FBwODgSHA2OBceDE8HJ4FRwOjgTnA3OBeeDC8HF4FJwObgSXA2uBdeDG8HN4FZwO7gT3A3uBfeDB8HD4FHwOHgSPA2eBc+DF8HL4FXwOngTvA3eBe+DD8HH4FPwOfgSfA2+Bd+DH8HP4FfwO/gT/A3+BYlBUhAXxofJwuRhijBlmCpMCFOHacK0YbowfZghzBhmCjOH/4VZwqxhtjB7mCPMGeYKc4d5wrxhvjB/WCAsGBYKC4dFwqJhsbB4WCIsGZYKS4dlwrJhubB8WCGsGFYKK4dVwqphtbB6WCOsGdYKa4d1wrphvbB+2CBsGDYKG4dNwqZhs7B52CJsGbYKW4dtwrZhu7B92CHsGHYKO4ddwq5ht7B72CPsGfYKe4d9wr5hv7B/OCAcGA4KB4dDwqHhsHB4OCIcGY4KR4djwrHhuHB8OCGcGE4KJ4dTwqnhtHB6iIV4SIRkSIV0yIRsyIV8KIRiKIVyqIRqqIV6aIRmaIV26IRu6IV+GIRhGIUghCEKY+GMcGY4K5wdzgnnhvPC+eGCcGG4KFwcLgmXhsvC5eGKcGW4KlwdrgnXhuvC9eGGcGO4Kdwcbgm3htvC7eGOcGe4K9wd7gn3hvvC/eGB8GB4KDwcHgmPhsfC4+GJ8GR4KjwdngnPhufC8+GF8GJ4KbwcXgmvhtfC6+GN8GZ4K7wd3gnvhvfC++GD8GH4KHwcPgmfhs/C5+GL8GX4Knwdvgnfhu/C9+GH8GP4Kfwcfgm/ht/C7+GP8Gf4K/wd/gn/hv/CxDApjIvio2RR8ihFlDJKFSVEqaM0UdooXZQ+yhBljDJFmaP/oixR1ihblD3KEeWMckW5ozxR3ihflD8qEBWMCkWFoyJR0ahYVDwqEZWMSkWlozJR2ahcVD6qEFWMKkWVoypR1ahaVD2qEdWMakW1ozpR3aheVD9qEDWMGkWNoyZR06hZ1DxqEbWMWkWtozZR26hd1D7qEHWMOkWdoy5R16hb1D3qEfWMekW9oz5R36hf1D8aEA2MBkWDoyHR0GhYNDwaEY2MRkWjozHR2GhcND6aEE2MJkWToynR1GhaND3CIjwiIjKiIjpiIjbiIj4SIjGSIjlSIjXSIj0yIjOyIjtyIjfyIj8KojCKIhDBCEWxaEY0M5oVzY7mRHOjedH8aEG0MFoULY6WREujZdHyaEW0MloVrY7WRGujddH6aEO0MdoUbY62RFujbdH2aEe0M9oV7Y72RHujfdH+6EB0MDoUHY6OREejY9Hx6ER0MjoVnY7ORGejc9H56EJ0MboUXY6uRFeja9H16EZ0M7oV3Y7uRHeje9H96EH0MHoUPY6eRE+jZ9Hz6EX0MnoVvY7eRG+jd9H76EP0MfoUfY6+RF+jb9H36Ef0M/oV/Y7+RH+jf1FilBTFgXiQDCQHKUBKkAokgNQgDUgL0oH0IAPICDKBzOA/kAVkBdlAdpAD5AS5QG6QB+QF+UB+UAAUBIVAYVAEFAXFQHFQApQEpUBpUAaUBeVAeVABVASVQGVQBVQF1UB1UAPUBLVAbVAH1AX1QH3QADQEjUBj0AQ0Bc1Ac9ACtAStQGvQBrQF7UB70AF0BJ1AZ9AFdAXdQHfQA/QEvUBv0Af0Bf1AfzAADASDwGAwBAwFw8BwMAKMBKPAaDAGjAXjwHgwAUwEk8BkMAVMBdPAdIABHBCABBSgAQNYwAEeCEAEEpCBAlSgAR0YwAQWsIEDXOABHwQgBBEAAAIEYmAGmAlmgdlgDpgL5oH5YAFYCBaBxWAJWAqWgeVgBVgJVoHVYA1YC9aB9WAD2Ag2gc1gC9gKtoHtYAfYCXaB3WAP2Av2gf3gADgIDoHD4Ag4Co6B4+AEOAlOgdPgDDgLzoHz4AK4CC6By+AKuAqugevgBrgJboHb4A64C+6B++ABeAgegcfgCXgKnoHn4AV4CV6B1+ANeAvegffgA/gIPoHP4Av4Cr6B7+AH+Al+gd/gD/gL/oFEkATiYDxMBpPDFDAlTAUTYGqYBqaF6WB6mAFmhJlgZvgfzAKzwmwwO8wBc8JcMDfMA/PCfDA/LAALwkKwMCwCi8JisDgsAUvCUrA0LAPLwnKwPKwAK8JKsDKsAqvCarA6rAFrwlqwNqwD68J6sD5sABvCRrAxbAKbwmawOWwBW8JWsDVsA9vCdrA97AA7wk6wM+wCu8JusDvsAXvCXrA37AP7wn6wPxwAB8JBcDAcAofCYXA4HAFHwlFwNBwDx8JxcDycACfCSXAynAKnwmlwOsQgDglIQgrSkIEs5CAPBShCCcpQgSrUoA4NaEIL2tCBLvSgDwMYwggCCCGCMTgDzoSz4Gw4B86F8+B8uAAuhIvgYrgELoXL4HK4Aq6Eq+BquAauhevgergBboSb4Ga4BW6F2+B2uAPuhLvgbrgH7oX74H54AB6Eh+BheAQehcfgcXgCnoSn4Gl4Bp6F5+B5eAFehJfgZXgFXoXX4HV4A96Et+BteAfehffgffgAPoSP4GP4BD6Fz+Bz+AK+hK/ga/gGvoXv4Hv4AX6En+Bn+AV+hd/gd/gD/oS/4G/4B/6F/2AiTIJxKB4lQ8lRCpQSpUIJKDVKg9KidCg9yoAyokwoM/oPZUFZUTaUHeVAOVEulBvlQXlRPpQfFUAFUSFUGBVBRVExVByVQCVRKVQalUFlUTlUHlVAFVElVBlVQVVRNVQd1UA1US1UG9VBdVE9VB81QA1RI9QYNUFNUTPUHLVALVEr1Bq1QW1RO9QedUAdUSfUGXVBXVE31B31QD1RL9Qb9UF9UT/UHw1AA9EgNBgNQUPRMDQcjUAj0Sg0Go1BY9E4NB5NQBPRJDQZTUFT0TQ0HWEIRwQiEYVoxCAWcYhHAhKRhGSkIBVpSEcGMpGFbOQgF3nIRwEKUYQAggihGJqBZqJZaDaag+aieWg+WoAWokVoMVqClqJlaDlagVaiVWg1WoPWonVoPdqANqJNaDPagraibWg72oF2ol1oN9qD9qJ9aD86gA6iQ+gwOoKOomPoODqBTqJT6DQ6g86ic+g8uoAuokvoMrqCrqJr6Dq6gW6iW+g2uoPuonvoPnqAHqJH6DF6gp6iZ+g5eoFeolfoNXqD3qJ36D36gD6iT+gz+oK+om/oO/qBfqJf6Df6g/6ifygRJaG4WHwsWSx5LEUsZSxVLCGWOpYmljaWLpY+liGWMZYpljn2XyxLLGssWyx7LEcsZyxXLHcsTyxvLF8sf6xArGCsUKxwrEisaKxYrHisRKxkrFSsdKxMrGysXKx8rEKsYqxSrHKsSqxqrFqseqxGrGasVqx2rE6sbqxerH6sQaxhrFGscaxJrGmsWax5rEWsZaxVrHWsTaxtrF2sfaxDrGOsU6xzrEusa6xbrHusR6xnrFesd6xPrG+sX6x/bEDsf5buqcuPplGg+MS2bdu2+cTmZDKx7YntpG27u7q6/rFt27btc/GeL7Gv9lq/wdgQbCgWjw3DErDhWCI2AhuJjcJGY2Owsdg4bDw2AZuITcImY1Owqdg0bDo2A5uJzcJmY3Owudg8bD62AEvCFmKLsMXYEmwptgxbjq3AVmKrsNXYGmwttg5bj23ANmKbsM3YFmwrhmE4RmAkRmE0xmAsxmE8JmAiJmEypmAqpmE6ZmAmZmE25mAu5mE+FmAACzGIRRjCYtg2bDu2A9uJ7cJ2Y3uwvdg+bD92ADuIHcIOY0ewo9gx7Dh2AjuJncJOY2ews9g57Dx2AbuIXcIuY1ewq9g17Dp2A7uJ3cJuY3ewu9g97D72AHuIPcIeY0+wp9gz7Dn2AnuJvcJeY2+wt9g77D32AfuIfcI+Y1+wr9g37Dv2A/uJ/cJ+Y3+wv9g/LA5PhifHU+Ap8VR4ajwNnhZPh6fHM+AZ8Ux4ZjwLnhXPhmfHc+A58Vx4bjwPnhfPh+fHC+AF8UJ4YbwIXhQvhhfHS+Al8VJ4abwMXhYvh5fHK+AV8Up4ZbwKXhWvhlfHa+A18Vp4bbwOXhevh9fHG+AN8UZ4Y7wJ3hRvhjfHW+At8VZ4a7wN3hZvh7fHO+Ad8U54Z/w/vAveFe+Gd8d74D3xXnhvvA/eF++H98cH4APxQfhgfAg+FI/Hh+EJ+HA8ER+Bj8RH4aPxMfhYfBw+Hp+AT8Qn4ZPxKfhUfBo+HZ+Bz8Rn4bPxOfhcfB4+H1+AJ+EL8UX4YnwJvhRfhi/HV+Ar8VX4anwNvhZfh6/HN+Ab8U34ZnwLvhXHcBwncBKncBpncBbncB4XcBGXcBlXcBXXcB03cBO3cBt3cBf3cB8PcICHOMQjHOExfBu+Hd+B78R34bvxPfhefB++Hz+AH8QP4YfxI/hR/Bh+HD+Bn8RP4afxM/hZ/Bx+Hr+AX8Qv4ZfxK/hV/Bp+Hb+B38Rv4bfxO/hd/B5+H3+AP8Qf4Y/xJ/hT/Bn+HH+Bv8Rf4a/xN/hb/B3+Hv+Af8Q/4Z/xL/hX/Bv+Hf+B/8R/4b/xP/hf/B8eRyQjkhMpiJREKiI1kYZIS6Qj0hMZiIxEJiIzkYXISmQjshM5iJxELiI3kYfIS+Qj8hMFiIJEIaIwUYQoShQjihMliJJEKaI0UYYoS5QjyhMViIpEJaIyUYWoSlQjqhM1iJpELaI2UYeoS9Qj6hMNiIZEI6Ix0YRoSjQjmhMtiJZEK6I10YZoS7Qj2hMdiI5EJ6Iz8R/RhehKdCO6Ez2InkQvojfRh+hL9CP6EwOIgcQgYjAxhBhKxBPDiARiOJFIjCBGEqOI0cQYYiwxjhhPTCAmEpOIycQUYioxjZhOzCBmErOI2cQcYi4xj5hPLCCSiIXEImIxsYRYSiwjlhMriJXEKmI1sYZYS6wj1hMbiI3EJmIzsYXYSmAEThAESVAETTAES3AETwiESEiETCiESmiEThiESViETTiES3iETwQEIEICEhGBiBixjdhO7CB2EruI3cQeYi+xj9hPHCAOEoeIw8QR4ihxjDhOnCBOEqeI08QZ4ixxjjhPXCAuEpeIy8QV4ipxjbhO3CBuEreI28Qd4i5xj7hPPCAeEo+Ix8QT4inxjHhOvCBeEq+I18Qb4i3xjnhPfCA+Ep+Iz8QX4ivxjfhO/CB+Er+I38Qf4i/xj4gjk5HJyRRkSjIVmZpMQ6Yl05HpyQxkRjITmZnMQmYls5HZyRxkTjIXmZvMQ+Yl85H5yQJkQbIQWZgsQhYli5HFyRJkSbIUWZosQ5Yly5HlyQpkRbISWZmsQlYlq5HVyRpkTbIWWZusQ9Yl65H1yQZkQ7IR2ZhsQjYlm5HNyRZkS7IV2ZpsQ7Yl25HtyQ5kR7IT2Zn8j+xCdiW7kd3JHmRPshfZm+xD9iX7kf3JAeRAchA5mBxCDiXjyWFkAjmcTCRHkCPJUeRocgw5lhxHjicnkBPJSeRkcgo5lZxGTidnkDPJWeRscg45l5xHzicXkEnkQnIRuZhcQi4ll5HLyRXkSnIVuZpcQ64l15HryQ3kRnITuZncQm4lMRInCZIkKZImGZIlOZInBVIkJVImFVIlNVInDdIkLdImHdIlPdInAxKQIQnJiERkjNxGbid3kDvJXeRucg+5l9xH7icPkAfJQ+Rh8gh5lDxGHidPkCfJU+Rp8gx5ljxHnicvkBfJS+Rl8gp5lbxGXidvkDfJW+Rt8g55l7xH3icfkA/JR+Rj8gn5lHxGPidfkC/JV+Rr8g35lnxHvic/kB/JT+Rn8gv5lfxGfid/kD/JX+Rv8g/5l/xHxlHJqORUCiollYpKTaWh0lLpqPRUBiojlYnKTGWhslLZqOxUDionlYvKTeWh8lL5qPxUAaogVYgqTBWhilLFqOJUCaokVYoqTZWhylLlqPJUBaoiVYmqTFWhqlLVqOpUDaomVYuqTdWh6lL1qPpUA6oh1YhqTDWhmlLNqOZUC6ol1YpqTbWh2lLtqPZUB6oj1YnqTP1HdaG6Ut2o7lQPqifVi+pN9aH6Uv2o/tQAaiA1iBpMDaGGUvHUMCqBGk4lUiOokdQoajQ1hhpLjaPGUxOoidQkajI1hZpKTaOmUzOomdQsajY1h5pLzaPmUwuoJGohtYhaTC2hllLLqOXUCmoltYpaTa2h1lLrqPXUBmojtYnaTG2htlIYhVMERVIURVMMxVIcxVMCJVISJVMKpVIapVMGZVIWZVMO5VIe5VMBBaiQglREISpGbaO2UzuondQuaje1h9pL7aP2Uweog9Qh6jB1hDpKHaOOUyeok9Qp6jR1hjpLnaPOUxeoi9Ql6jJ1hbpKXaOuUzeom9Qt6jZ1h7pL3aPuUw+oh9Qj6jH1hHpKPaOeUy+ol9Qr6jX1hnpLvaPeUx+oj9Qn6jP1hfpKfaO+Uz+on9Qv6jf1h/pL/aPi6GR0cjoFnZJORaem09Bp6XR0ejoDnZHORGems9BZ6Wx0djoHnZPOReem89B56Xx0froAXZAuRBemi9BF6WJ0cboEXZIuRZemy9Bl6XJ0eboCXZGuRFemq9BV6Wp0dboGXZOuRdem69B16Xp0fboB3ZBuRDemm9BN6WZ0c7oF3ZJuRbem29Bt6XZ0e7oD3ZHuRHem/6O70F3pbnR3ugfdk+5F96b70H3pfnR/egA9kB5ED6aH0EPpeHoYnUAPpxPpEfRIehQ9mh5Dj6XH0ePpCfREehI9mZ5CT6Wn0dPpGfRMehY9m55Dz6Xn0fPpBXQSvZBeRC+ml9BL6WX0cnoFvZJeRa+m19Br6XX0enoDvZHeRG+mt9BbaYzGaYImaYqmaYZmaY7maYEWaYmWaYVWaY3WaYM2aYu2aYd2aY/26YAGdEhDOqIRHaO30dvpHfROehe9m95D76X30fvpA/RB+hB9mD5CH6WP0cfpE/RJ+hR9mj5Dn6XP0efpC/RF+hJ9mb5CX6Wv0dfpG/RN+hZ9m75D36Xv0ffpB/RD+hH9mH5CP6Wf0c/pF/RL+hX9mn5Dv6Xf0e/pD/RH+hP9mf5Cf6W/0d/pH/RP+hf9m/5D/6X/0XFMMiY5k4JJyaRiUjNpmLRMOiY9k4HJyGRiMjNZmKxMNiY7k4PJyeRicjN5mLxMPiY/U4ApyBRiCjNFmKJMMaY4U4IpyZRiSjNlmLJMOaY8U4GpyFRiKjNVmKpMNaY6U4OpydRiajN1mLpMPaY+04BpyDRiGjNNmKZMM6Y504JpybRiWjNtmLZMO6Y904HpyHRiOjP/MV2Yrkw3pjvTg+nJ9GJ6M32Yvkw/pj8zgBnIDGIGM0OYoUw8M4xJYIYzicwIZiQzihnNjGHGMuOY8cwEZiIziZnMTGGmMtOY6cwMZiYzi5nNzGHmMvOY+cwCJolZyCxiFjNLmKXMMmY5s4JZyaxiVjNrmLXMOmY9s4HZyGxiNjNbmK0MxuAMwZAMxdAMw7AMx/CMwIiMxMiMwqiMxuiMwZiMxdiMw7iMx/hMwAAmZCATMYiJMduY7cwOZiezi9nN7GH2MvuY/cwB5iBziDnMHGGOMseY48wJ5iRzijnNnGHOMueY88wF5iJzibnMXGGuMteY68wN5iZzi7nN3GHuMveY+8wD5iHziHnMPGGeMs+Y58wL5iXzinnNvGHeMu+Y98wH5iPzifnMfGG+Mt+Y78wP5ifzi/nN/GH+Mv+YODYZm5xNwaZkU7Gp2TRsWjYdm57NwGZkM7GZ2SxsVjYbm53NweZkc7G52TxsXjYfm58twBZkC7GF2SJsUbYYW5wtwZZkS7Gl2TJsWbYcmzwuLq4iW4mtzFZhq7LV2OpsDbYmW4utzdZh67L12PpsA7Yh24htzDZhm7LN2OZsC7Yl24ptzbZh27Lt2PZsB7Yj24ntzP7HdmG7st3Y7mwPtifbi+3N9mH7sv3Y/uwAdiA7iB3MDmGHsvHsMDaBHc4msiPYkewodjQ7hh3LjmPHsxPYiewkdjI7hZ3KTmOnszPYmewsdjY7h53LzmPnswvYJHYhu4hdzC5hl7LL2OXsCnYlu4pdza5h17Lr2PXsBnYju4ndzG5ht7IYi7MES7IUS7MMy7Icy7MCK7ISK7MKq7Iaq7MGa7IWa7MO67Ie67MBC9iQhWzEIjbGbmO3szvYnewudje7h93L7mP3swfYg+wh9jB7hD3KHmOPsyfYk+wp9jR7hj3LnmPPsxfYi+wl9jJ7hb3KXmOvszfYm+wt9jZ7h73L3mPvsw/Yh+wj9jH7hH3KPmOfsy/Yl+wr9jX7hn3LpmLfsx/Yj+wn9jP7hf3KfmO/sz/Yn+wv9jf7h/3L/mPjuGRcci4Fl5JLxaXm0nBpuXRcei4Dl5HLxGXmsnBZuWxcdi4Hl5PLxeXm8nB5uXxcfq4AV5ArxBXminBFuWJcca4EV5IrxZXmynBluXJcea4CV5GrxFXmqnBVuWpcda4GV5OrxdXm6nB1uXpcfa4B15BrxDXmmnBNuWZcc64F15JrxbXm2nBtuXZce64D15HrxHXm/uO6cF25blx3rgfXk+vF9eb6cH25flx/bgA3kBvEDeaGcEO5eG4Yl8AN5xK5EdxIbhQ3mhvDjeXGceO5CdxEbhI3mZvCTeWmcdO5GdxMbhY3m5vDzeXmcfO5BVwSt5BbxC3mlnBLuWXccm4Ft5Jbxa3m1nBruXXcem4Dt5HbxG3mtnBbOYzDOYIjOYqjOYZjOY7jOYETOYmTOYVTOY3TOYMzOYuzOYdzOY/zuYADXMhBLuIQF+O2cdu5HdxObhe3m9vD7eX2cfu5A9xB7hB3mDvCHeWOcce5E9xJ7hR3mjvDneXOcee5C9xF7hJ3mbvCXeWucde5G9xN7hZ3m7vD3eXucfe5B9xD7hH3mHvCPeWecc+5F9xL7hX3mnvDveXece+5D9xH7hP3mfvCfeW+cd+5H9xP7hf3m/vD/eX+cXF8Mj45n4JPyafiU/Np+LR8Oj49n4HPyGfiM/NZ+Kx8Nj47n4PPyefic/N5+Lx8Pj4/X4AvyBfiC/NF+KJ8Mb44X4IvyZfiS/Nl+LJ8Ob48X4GvyFfiK/NV+Kp8Nb46X4Ovydfia/N1+Lp8Pb4+34BvyDfiG/NN+KZ8M74534JvybfiW/Nt+LZ8O74934HvyHfiO/P/8V34rnw3vjvfg+/J9+J78334vnw/vj8/gB/ID+IH80P4oXw8P4xP4IfzifwIfiQ/ih/Nj+HH8uP48fwEfiI/iZ/MT+Gn8tP46fwMfiY/i5/Nz+Hn8vP4+fwCPolfyC/iF/NL+KX8Mn45v4Jfya/iV/Nr+LX8On49v4HfyG/iN/Nb+K08xuM8wZM8xdM8w7M8x/O8wIu8xMu8wqu8xuu8wZu8xdu8w7u8x/t8wAM+5CEf8YiP8dv47fwOfie/i9/N7+H38vv4/fwB/iB/iD/MH+GP8sf44/wJ/iR/ij/Nn+HP8uf48/wF/iJ/ib/MX+Gv8tf46/wN/iZ/i7/N3+Hv8vf4+/wD/iH/iH/MP+Gf8s/45/wL/iX/in/Nv+Hf8u/49/wH/iP/if/Mf+G/8t/47/wP/if/i//N/+H/8v/4OCGZkFxIIaQUUgmphTRCWiGdkF7IIGQUMgmZhSxCViGbkF3IIeQUcgm5hTxCXiGfkF8oIBQUCgmFhSJCUaGYUFwoIZQUSgmlhTJCWaGcUF6oIFQUKgmVhSpCVaGaUF2oIdQUagm1hTpCXaGeUF9oIDQUGgmNhSZCU6GZ0FxoIbQUWgmthTZCW6Gd0F7oIHQUOgmdhf+ELkJXoZvQXegh9BR6Cb2FPkJfoZ/QXxggDBQGCYOFIcJQIV4YJiQIw4VEYYQwUhgljBbGCGOFccJ4YYIwUZgkTBamCFOFacJ0YYYwU5glzBbmCHOFecJ8YYGQJCwUFgmLhSXCUmGZsFxYIawUVgmrhTXCWmGdsF7YIGwUNgmbhS3CVgETcIEQSIESkiX9T+/jBUEQBUmQBUVQBU3QBUMwBUuwBUdwBU/whUAAQihAIRKQEBO2CduFHcJOYZewW9gj7BX2CfuFA8JB4ZBwWDgiHBWOCceFE8JJ4ZRwWjgjnBXOCeeFC8JF4ZJwWbgiXBWuCdeFG8JN4ZZwW7gj3BXuCfeFB8JD4ZHwWHgiPBWeCc+FF8JL4ZXwWngjvBXeCe+FD8JH4ZPwWfgifBW+Cd+FH8JP4ZfwW/gj/BX+CXFiMjG5mEJMKaYSU4tpxLRiOjG9mEHMKGYSM4tZxKxiNjG7mEPMKeYSc4t5xLxiPjG/WEAsKBYSC4tFxKJiMbG4WEIsKZYSS4tlxLJiObG8WEGsKFYSK4tVxKpiNbG6WEOsKdYSa4t1xLpiPbG+2EBsKDYSG4tNxKZiM7G52EJsKbYSW4ttxLZiO7G92EHsKHYSO4v/iV3ErmI3sbvYQ+wp9hJ7i33EvmI/sb84QBwoDhIHi0PEoWK8OExMEIeLieIIcaQ4ShwtjhHHiuPE8eIEcaI4SZwsThGnitPE6eIMcaY4S5wtzhHnivPE+eICMUlcKC4SF4tLxKXiMnG5uEJcKa4SV4trxLXiOnG9uEHcKG4SN4tbxK0iJuIiIZIiJdIiI7IiJ/KiIIqiJMqiIqqiJuqiIZqiJdqiI7qiJ/piIAIxFKEYiUiMidvE7eIOcae4S9wt7hH3ivvE/eIB8aB4SDwsHhGPisfE4+IJ8aR4SjwtnhHPiufE8+IF8aJ4SbwsXhGvitfE6+IN8aZ4S7wt3hHvivfE++ID8aH4SHwsPhGfis/E5+IL8aX4SnwtvhHfiu/E9+IH8aP4SfwsfhG/it/E7+IP8af4S/wt/hH/iv/EOCmZlFxKIaWUUkmppTRSWimdlF7KIGWUMkmZpSxSVimblF3KIeWUckm5pTxSXimflF8qIBWUCkmFpSJSUamYVFwqIZWUSkmlpTJSWamcVF6qIFWUKkmVpSpSVamaVF2qIdWUakm1pTpSXameVF9qIDWUGkmNpSZSU6mZ1FxqIbWUWkmtpTZSW6md1F7qIHWUOkmdpf+kLlJXqZvUXeoh9ZR6Sb2lPlJfqZ/UXxogDZQGSYOlIdJQKV4aJiVIw6VEaYQ0UholjZbGSGOlcdJ4aYI0UZokTZamSFOladJ0aYY0U5olzZbmSHOledJ8aYGUJC2UFkmLpSXSUmmZtFxaIa2UVkmrpTXSWmmdtF7aIG2UNkmbpS3SVgmTcImQSImSaImRWImTeEmQREmSZEmRVEmTdMmQTMmSbMmRXMmTfCmQgBRKUIokJMWkbdJ2aYe0U9ol7Zb2SHulfdJ+6YB0UDokHZaOSEelY9Jx6YR0UjolnZbOSGelc9J56YJ0UbokXZauSFela9J16YZ0U7ol3ZbuSHele9J96YH0UHokPZaeSE+lZ9Jz6YX0UnolvZbeSG+ld9J76YP0UfokfZa+SF+lb9J36Yf0U/ol/Zb+SH+lf1KcnExOLqeQU8qp5NRyGjmtnE5OL2eQM8qZ5MxyFjmrnE3OLueQc8q55NxyHjmvnE/OLxeQC8qF5MJyEbmoXEwuLpeQS8ql5NJyGbmsXE4uL1eQK8qV5MpyFbmqXE2uLteQa8q15NpyHbmuXE+uLzeQG8qN5MZyE7mp3ExuLreQW8qt5NZyG7mt3E5uL3eQO8qd5M7yf3IXuavcTe4u95B7yr3k3nIfua/cT+4vD5AHyoPkwfIQeagcLw+TE+ThcqI8Qh4pj5JHy2PksfI4ebw8QZ4oT5Iny1PkqfI0ebo8Q54pz5Jny3PkufI8eb68QE6SF8qL5MXyEnmpvExeLq+QV8qr5NXyGnmtvE5eL2+QN8qb5M3yFnmrjMm4TMikTMm0zMiszMm8LMiiLMmyrMiqrMm6bMimbMm27Miu7Mm+HMhADmUoRzKSY/I2ebu8Q94p75J3y3vkvfI+eb98QD4oH5IPy0fko/Ix+bh8Qj4pn5JPy2fks/I5+bx8Qb4oX5Ivy1fkq/I1+bp8Q74p35Jvy3fku/I9+b78QH4oP5Ify0/kp/Iz+bn8Qn4pv5Jfy2/kt/I7+b38Qf4of5I/y1/kr/I3+bv8Q/4p/5J/y3/kv/I/OU5JpiRXUigplVRKaiWNklZJp6RXMigZlUxKZiWLklXJpmRXcig5lVxKbiWPklfJp+RXCigFlUJKYaWIUlQpphRXSigllVJKaaWMUlYpp5RXKigVlUpKZaWKUlWpplRXaig1lVpKbaWOUlepp9RXGigNlUZKY6WJ0lRppjRXWigtlVZKa6WN0lZpp7RXOigdlU5KZ+U/pYvSVemmdFd6KD2VXkpvpY/SV+mn9FcGKAOVQcpgZYgyVIlXhikJynAlURmhjFRGKaOVMcpYZZwyXpmgTFQmKZOVKcpUZZoyXZmhzFRmKbOVOcpcZZ4yX1mgJCkLlUXKYmWJslRZpixXVigrlVXKamWNslZZp6xXNigblU3KZmWLslXBFFwhFFKhFFphFFbhFF4RFFGRFFlRFFXRFF0xFFOxFFtxFFfxFF8JFKCEClQiBSkxZZuyXdmh7FR2KbuVPcpeZZ+yXzmgHFQOKYeVI8pR5ZhyXDmhnFROKaeVM8pZ5ZxyXrmgXFQuKZeVK8pV5ZpyXbmh3FRuKbeVO8pd5Z5yX3mgPFQeKY+VJ8pT5ZnyXHmhvFReKa+VN8pb5Z3yXvmgfFQ+KZ+VL8pX5ZvyXfmh/FR+Kb+VP8pf5Z8SpyZTk6sp1JRqKjW1mkZNq6ZT06sZ1IxqJjWzmkXNqmZTs6s51JxqLjW3mkfNq+ZT86sF1IJqIbWwWkQtqhZTi6sl1JJqKbW0WkYtq5ZTy6sV1IpqJbWyWkWtqlZTq6s11JpqLbW2Wketq9ZT66sN1IZqI7Wx2kRtqjZTm6st1JZqK7W12kZtq7ZT26sd1I5qJ7Wz+p/aRe2qdlO7qz3UnmovtbfaR+2r9lP7qwPUgeogdbA6RB2qxqvD1AR1uJqojlBHqqPU0eoYdaw6Th2vTlAnqpPUyeoUdao6TZ2uzlBnqrPU2eocda46T52vLlCT1IXqInWxukRdqi5Tl6sr1JXqKnW1ukZdq65T16sb1I3qJnWzukXdqmIqrhIqqVIqrTIqq3IqrwqqqEqqrCqqqmqqrhqqqVqqrTqqq3qqrwYqUEMVqpGK1Ji6Td2u7lB3qrvU3eoeda+6T92vHlAPqofUw+oR9ah6TD2unlBPqqfU0+oZ9ax6Tj2vXlAvqpfUy+oV9ap6Tb2u3lBvqrfU2+od9a56T72vPlAfqo/Ux+oT9an6TH2uvlBfqq/U1+ob9a36Tn2vflA/qp/Uz+oX9av6Tf2u/lB/qr/U3+of9a/6T43TkmnJtRRaSi2VllpLo6XV0mnptQxaRi2TllnLomXVsmnZtRxaTi2XllvLo+XV8mn5tQJaQa2QVlgrohXVimnFtRJaSa2UVloro5XVymnltQpaRa2SVlmrolXVqmnVtRpaTa2WVluro9XV6mn1tQZaQ62R1lhrojXVmmrNteZaS62l1lprrbXV2mrttfZaR62j1lnrrHXRumjdtG5aD62H1kvrpfXR+mj9tH7aAG2ANkgbpA3RhmrxWryWoCVoiVqiNlIbqY3WRmtjtbHaeG2CNlGbpE3WpmhTtWnadG2GNlObpc3W5mhztXnafG2BlqQlaYu0RdoSbYm2TFumrdBWaKu0VdoabY22TlunbdA2aJu0TdoWbYuGaZhGaKRGabTGaKzGabwmaKImabKmaKqmabpmaKZmabbmaK7mab4WaEALNahFGtJi2jZtu7ZD26nt0nZre7S92j5tv3ZAO6gd0g5rR7Sj2jHtuHZCO6md0k5rZ7Sz2jntvHZBu6hd0i5rV7Sr2jXtunZDu6nd0m5rd7S72j3tvvZAe6g90h5rT7Sn2jPtufZCe6m90l5rb7S32jvtvfZB+6h90j5rX7Sv2jftu/ZD+6n90n5rf7S/2j8tTk+mJ9dT6Cn1VHpqPY2eVk+np9cz6Bn1THpmPYueVc+mZ9dz6Dn1XHpuPY+eV8+n59cL6AX1QnphvYheVC+mF9eL6yX1knppvbReVi+rl9fL6xX1inplvbJeVa+mV9er6zX1mnptvbZeV6+r19fr6w31hnpjvbHeVG+qN9eb6y31lnprvbXeVm+rt9fb6x31jnpnvbPeRe+id9O76T30HnovvZfeR++j99P76QP0AfogfZA+RB+ix+vxeoKeoCfqifpIfaQ+Wh+tj9XH6uP18fpEfZI+WZ+iT9Wn6dP1GfpMfZY+S5+jz9Hn6fP1+XqSnqQv0hfpS/Ql+jJ9mb5CX6mv0lfrq/W1+jp9vb5B36hv0jfrW/StOqbjOqGTOqXTOqOzOqfzuqCLuqTLuqKruqbruqGbuqXbuqO7uqf7eqADPdShHulIj+nb9O36Dn2nvkvfre/R9+r79P36Af2gfkg/rB/Rj+rH9OP6Cf2kfko/rZ/Rz+rn9PP6Bf2ifkm/rF/Rr+rX9Ov6Df2mfku/rd/R7+r39Pv6A/2h/kh/rD/Rn+rP9Of6C/2l/kp/rb/R3+rv9Pf6B/2j/kn/rH/Rv+rf9O/6D/2n/kv/rf/R/+r/9DgjmZHcSGGkNFIZqY00RlojnZHeyGBkNDIZmY0sRlYjm5HdyGHkNHIZuY08Rl4jn5HfKGAUNAoZhY0iRlGjmFHcKGGUNEoZpY0yRlmjnFHeqGBUNCoZlY0qRlWjmlHdqGHUNGoZtY06Rl2jnlHfaGA0NBoZjY0mRlOjmdHcaGG0NFoZrY02RlujndHe6GB0NDoZnY3/jC5GV6Ob0d3oYfQ0ehm9jT5GX6Of0d8YYAw0BhmDjSHGUCPeGGYkGMONRGOEMdIYZYw2xhhjjXHGeGOCMdGYZEw2phhTjWnGdGOGMdOYZcw25hhzjXnGfGOBkWQsNBYZi40lxlJjmbHcWGGsNFYZq401xlpjnbHe2GBsNDYZm40txlYDM3CDMEiDMmiDMViDM3hDMERDMmRDMVRDM3TDMEzDMmzDMVzDM3wjMIARGtCIDGTEjG3GdmOHsdPYZew29hh7jX3GfuOAcdA4ZBw2jhhHjWPGceOEcdI4ZZw2zhhnjXPGeeOCcdG4ZFw2rhhXjWvGdeOGcdO4Zdw27hh3jXvGfeOB8dB4ZDw2nhhPjWfGc+OF8dJ4Zbw23hhvjXfGe+OD8dH4ZHw2vhhfjW/Gd+OH8dP4Zfw2/hh/jX9GnJnMTG6mMFOaqczUZhozrZnOTG9mMDOamczMZhYzq5nNzG7mMHOauczcZh4zr5nPzG8WMAuahczCZhGzqFnMLG6WMEuapczSZhmzrFnOLG9WMCualczKZhWzqlnNrG7WMGuatczaZh2zrlnPrG82MBuajczGZhOzqdnMbG62MFuarczWZhuzrdnObG92MDuanczO5n9mF7Or2c3sbvYwe5q9zN5mH7Ov2c/sbw4wB5qDzMHmEHOoGW8OMxPM4WaiOcIcaY4yR5tjzLHmOHO8OcGcaE4yJ5tTzKnmNHO6OcOcac4yZ5tzzLnmPHO+ucBMMheai8zF5hJzqbnMXG6uMFeaq8zV5hpzrbnOXG9uMDeam8zN5hZzq4mZuEmYpEmZtMmYrMmZvCmYoimZsqmYqqmZummYpmmZtumYrumZvhmYwAxNaEYmMmPmNnO7ucPcae4yd5t7zL3mPnO/ecA8aB4yD5tHzKPmMfO4ecI8aZ4yT5tnzLPmOfO8ecG8aF4yL5tXzKvmNfO6ecO8ad4yb5t3zLvmPfO++cB8aD4yH5tPzKfmM/O5+cJ8ab4yX5tvzLfmO/O9+cH8aH4yP5tfzK/mN/O7+cP8af4yf5t/zL/mPzPOSmYlt1JYKa1UVmorjZXWSmeltzJYGa1MVmYri5XVymZlt3JYOa1cVm4rj5XXymfltwpYBa1CVmGriFXUKmYVt0pYJa1SVmmrjFXWKmeVtypYFa1KVmWrilXVqmZVt2pYNa1aVm2rjlXXqmfVtxpYDa1GVmOridXUamY1t1pYLa1WVmurjdXWame1tzpYHa1OVmfrP6uL1dXqZnW3elg9rV5Wb6uP1dfqZ/W3BlgDrUHWYGuINdSKt4ZZCdZwK9EaYY20RlmjrTHWWGucNd6aYE20JlmTrSnWVGuaNd2aYc20ZlmzrTnWXGueNd9aYCVZC61F1mJribXUWmYtt1ZYK61V1mprjbXWWmettzZYG61N1mZri7XVwizcIizSoizaYizW4izeEizRkizZUizV0izdMizTsizbcizX8izfCixghRa0IgtZMWubtd3aYe20dlm7rT3WXmuftd86YB20DlmHrSPWUeuYddw6YZ20TlmnrTPWWeucdd66YF20LlmXrSvWVeuadd26Yd20blm3rTvWXeuedd96YD20HlmPrSfWU+uZ9dx6Yb20XlmvrTfWW+ud9d76YH20PlmfrS/WV+ub9d36Yf20flm/rT/WX+ufFWcns5PbKeyUdio7tZ3GTmuns9PbGeyMdiY7s53Fzmpns7PbOeycdi47t53Hzmvns/PbBeyCdiG7sF3ELmoXs4vbJeySdim7tF3GLmuXs8vbFeyKdiW7sl3FrmpXs6vbNeyadi27tl3HrmvXs+vbDeyGdiO7sd3Ebmo3s5vbLeyWdiu7td3Gbmu3s9vbHeyOdie7s/2f3cXuanezu9s97J52L7u33cfua/ez+9sD7IH2IHuwPcQeasfbw+wEe7idaI+wR9qj7NH2GHusPc4eb0+wJ9qT7Mn2FHuqPc2ebs+wZ9qz7Nn2HHuuPc+eby+wk+yF9iJ7sb3EXmovs5fbK+yV9ip7tb3GXmuvs9fbG+yN9iZ7s73F3mpjNm4TNmlTNm0zNmtzNm8LtmhLtmwrtmprtm4btmlbtm07tmt7tm8HNrBDG9qRjeyYvc3ebu+wd9q77N32Hnuvvc/ebx+wD9qH7MP2Efuofcw+bp+wT9qn7NP2Gfusfc4+b1+wL9qX7Mv2Ffuqfc2+bt+wb9q37Nv2Hfuufc++bz+wH9qP7Mf2E/up/cx+br+wX9qv7Nf2G/ut/c5+b3+wP9qf7M/2F/ur/c3+bv+wf9q/7N/2H/uv/c+Oc5I5yZ0UTkonlZPaSeOkddI56Z0MTkYnk5PZyeJkdbI52Z0cTk4nl5PbyePkdfI5+Z0CTkGnkFPYKeIUdYo5xZ0STkmnlFPaKeOUdco55Z0KTkWnklPZqeJUdao51Z0aTk2nllPbqePUdeo59Z0GTkOnkdPYaeI0dZo5zZ0WTkunldPaaeO0ddo57Z0OTkenk9PZ+c/p4nR1ujndnR5OT6eX09vp4/R1+jn9nQHOQGeQM9gZ4gx14p1hToIz3El0RjgjnVHOaGeMM9YZ54x3JjgTnUnOZGeKM9WZ5kx3ZjgznVnObGeOM9eZ58x3FjhJzkJnkbPYWeIsdZY5y50VzkpnlbPaWeOsddY5650NzkZnk7PZ2eJsdTAHdwiHdCiHdhiHdTiHdwRHdCRHdhRHdTRHdwzHdCzHdhzHdTzHdwIHOKEDnchBTszZ5mx3djg7nV3ObmePs9fZ5+x3DjgHnUPOYeeIc9Q55hx3TjgnnVPOaeeMc9Y555x3LjgXnUvOZeeKc9W55lx3bjg3nVvObeeOc9e559x3HjgPnUfOY+eJ89R55jx3XjgvnVfOa+eN89Z557x3PjgfnU/OZ+eL89X55nx3fjg/nV/Ob+eP89f558S5ydzkbgo3pZvKTe2mcdO66dz0bgY3o5vJzexmcbO62dzsbg43p5vLze3mcfO6+dz8bgG3oFvILewWcYu6xdzibgm3pFvKLe2Wccu65dzybgW3olvJrexWcau61dzqbg23plvLre3Wceu69dz6bgO3odvIbew2cZu6zdzmbgu3pdvKbe22cdu67dz2bge3o9vJ7ez+53Zxu7rd3O5uD7en28vt7fZx+7r93P7uAHegO8gd7A5xh7rx7jA3wR3uJroj3JHuKHe0O8Yd645zx7sT3InuJHeyO8Wd6k5zp7sz3JnuLHe2O8ed685z57sL3CR3obvIXewucZe6y9zl7gp3pbvKXe2ucde669z17gZ3o7vJ3exucbe6mIu7hEu6lEu7jMu6nMu7giu6kiu7iqu6mqu7hmu6lmu7juu6nuu7gQvc0IVu5CI35m5zt7s73J3uLne3u8fd6+5z97sH3IPuIfewe8Q96h5zj7sn3JPuKfe0e8Y9655zz7sX3IvuJfeye8W96l5zr7s33JvuLfe2e8e9695z77sP3IfuI/ex+8R96j5zn7sv3JfuK/e1+8Z9675z37sf3I/uJ/ez+8X96n5zv7s/3J/uL/e3+8f96/5z47xkXnIvhZfSS+Wl9tJ4ab10Xnovg5fRy+Rl9rJ4Wb1sXnYvh5fTy+Xl9vJ4eb18Xn6vgFfQK+QV9op4Rb1iXnGvhFfSK+WV9sp4Zb1yXnmvglfRq+RV9qp4Vb1qXnWvhlfTq+XV9up4db16Xn2vgdfQa+Q19pp4Tb1mXnOvhdfSa+W19tp4bb12Xnuvg9fR6+R19v7zunhdvW5ed6+H19Pr5fX2+nh9vX5ef2+AN9Ab5A32hnhDvXhvmJfgDfcSvRHeSG+UN9ob4431xnnjvQneRG+SN9mb4k31pnnTvRneTG+WN9ub48315nnzvQVekrfQW+Qt9pZ4S71l3nJvhbfSW+Wt9tZ4a7113npvg7fR2+Rt9rZ4Wz3Mwz3CIz3Koz3GYz3O4z3BEz3Jkz3FUz3N0z3DMz3Lsz3Hcz3P873AA17oQS/ykBfztnnbvR3eTm+Xt9vb4+319nn7vQPeQe+Qd9g74h31jnnHvRPeSe+Ud9o74531znnnvQveRe+Sd9m74l31rnnXvRveTe+Wd9u749317nn3vQfeQ++R99h74j31nnnPvRfeS++V99p747313nnvvQ/eR++T99n74n31vnnfvR/eT++X99v74/31/nlxfjI/uZ/CT+mn8lP7afy0fjo/vZ/Bz+hn8jP7WfysfjY/u5/Dz+nn8nP7efy8fj4/v1/AL+gX8gv7RfyifjG/uF/CL+mX8kv7Zfyyfjm/vF/Br+hX8iv7VfyqfjW/ul/Dr+nX8mv7dfy6fj2/vt/Ab+g38hv7TfymfjO/ud/Cb+m38lv7bfy2fju/vd/B7+h38jv7//ld/K5+N7+738Pv6ffye/t9/L5+P7+/P8Af6A/yB/tD/KF+vD/MT/CH+4n+CH+kP8of7Y/xx/rj/PH+BH+iP8mf7E/xp/rT/On+DH+mP8uf7c/x5/rz/Pn+Aj/JX+gv8hf7S/yl/jJ/ub/CX+mv8lf7a/y1/jp/vb/B3+hv8jf7W/ytPubjPuGTPuXTPuOzPufzvuCLvuTLvuKrvubrvuGbvuXbvuO7vuf7fuADP/ShH/nIj/nb/O3+Dn+nv8vf7e/x9/r7/P3+Af+gf8g/7B/xj/rH/OP+Cf+kf8o/7Z/xz/rn/PP+Bf+if8m/7F/xr/rX/Ov+Df+mf8u/7d/x7/r3/Pv+A/+h/8h/7D/xn/rP/Of+C/+l/8p/7b/x3/rv/Pf+B/+j/8n/7H/xv/rf/O/+D/+n/8v/7f/x//r//LggWZA8SBGkDFIFqYM0QdogXZA+yBBkDDIFmYMsQdYgW5A9yBHkDHIFuYM8Qd4gX5A/KBAUDAoFhYMiQdGgWFA8KBGUDEoFpYMyQdmgXFA+qBBUDCoFlYMqQdWgWlA9qBHUDGoFtYM6Qd2gXlA/aBA0DBoFjYMmQdOgWdA8aBG0DFoFrYM2QdugXdA+6BB0DDoFnYP/gi5B16Bb0D3oEfQMegW9gz5B36Bf0D8YEAwMBgWDgyHB0CA+GBYkBMODxGBEMDIYFYwOxgRjg3HB+GBCMDGYFEwOpgRTg2nB9GBGMDOYFcwO5gRzg3nB/GBBkBQsDBYFi4MlwdJgWbA8WBGsDFYFq4M1wdpgXbA+2BBsDDYFm4MtwdYAC/CACMiACuiACdiAC/hACMRACuRACdRAC/TACMzACuzACdzAC/wgCEAQBjCIAhTEgm3B9mBHsDPYFewO9gR7g33B/uBAcDA4FBwOjgRHg2PB8eBEcDI4FZwOzgRng3PB+eBCcDG4FFwOrgRXg2vB9eBGcDO4FdwO7gR3g3vB/eBB8DB4FDwOngRPg2fB8+BF8DJ4FbwO3gRvg3fB++BD8DH4FHwOvgRfg2/B9+BH8DP4FfwO/gR/g39BHEgGkoMUICVIBVKDNCAtSAfSgwwgI8gEMoMsICvIBrKDHCAnyAVygzwgL8gH8oMCoCAoBAqDIqAoKAaKgxKgJCgFSoMyoCwoB8qDCqAiqAQqgyqgKqgGqoMaoCaoBWqDOqAuqAfqgwagIWgEGoMmoCloBpqDFqAlaAVagzagLWgH2oMOoCPoBDqD/0AX0BV0A91BD9AT9AK9QR/QF/QD/cEAMBAMAoPBEDAUxINhIAEMB4lgBBgJRoHRYAwYC8aB8WACmAgmgclgCpgKpoHpYAaYCWaB2WAOmAvmgflgAUgCC8EisBgsAUvBMrAcrAArwSqwGqwBa8E6sB5sABvBJrAZbAFbAQZwQAASUIAGDGABB3ggABFIQAYKUIEGdGAAE1jABg5wgQd8EAAAQgBBBBCIgW1gO9gBdoJdYDfYA/aCfWA/OAAOgkPgMDgCjoJj4Dg4AU6CU+A0OAPOgnPgPLgALoJL4DK4Aq6Ca+A6uAFuglvgNrgD7oJ74D54AB6CR+AxeAKegmfgOXgBXoJX4DV4A96Cd+A9+AA+gk/gM/gCvoJv4Dv4AX6CX+A3+AP+gn8gLkwWJg9ThCnDVGHqME2YNkwXpg8zhBnDTGHmMEuYNcwWZg9zhDnDXGHuME+YN8wX5g8LhAXDQmHhsEhYNCwWFg9LhCXDUmHpsExYNiwXlg8rhBXDSmHlsEpYNawWVg9rhDXDWmGq/00zcfXDBmHDsFHYOGwSNg2bhc3DFmHLsFXYOmwTtg3bhe3DDmHHsFPYOfwv7BJ2DbuF3cMeYc+wV9g77BP2DfuF/cMB4cBwUDg4HBIODePDYWFCODxMDEeEI8NR4ehwTDg2HBeODyeEE8NJ4eRwSjg1nBZOD2eEM8NZ4exwTjg3nBfODxeESeHCcFG4OFwSLg2XhcvDFeHKcFW4OlwTrg3XhevDDeHGcFO4OdwSbg2xEA+JkAypkA6ZkA25kA+FUAylUA6VUA21UA+N0Ayt0A6d0A290A+DEIRhCMMoRGEs3BZuD3eEO8Nd4e5wT7g33BfuDw+EB8ND4eHwSHg0PBYeD0+EJ8NT4enwTHg2PBeeDy+EF8NL4eXwSng1vBZeD2+EN8Nb4e3wTng3vBfeDx+ED8NH4ePwSfg0fBY+D1+EL8NX4evwTfg2fBe+Dz+EH8NP4efwS/g1/BZ+D3+EP8Nf4e/wT/g3/BfGwWQwOUwBU8JUMDVMA9PCdDA9zAAzwkwwM8wCs8JsMDvMAXPCXDA3zAPzwnwwPywAC8JCsDAsAovCYrA4LAFLwlKwNCwDy8JysDysACvCSrAyrAKrwmqwOqwBa8JasDasA+vCerA+bAAbwkawMWwCm8JmsDlsAVvCVrA1bAPbwnawPewAO8JOsDP8D3aBXWE32B32gD1hL9gb9oF9YT/YHw6AA+EgOBgOgUNhPBwGE+BwmAhHwJFwFBwNx8CxcBwcDyfAiXASnAynwKlwGpwOZ8CZcBacDefAuXAenA8XwCS4EC6Ci+ESuBQug8vhCrgSroKr4Rq4Fq6D6+EGuBFugpvhFrgVYhCHBCQhBWnIQBZykIcCFKEEZahAFWpQhwY0oQVt6EAXetCHAQQwhBBGEMEY3Aa3wx1wJ9wFd8M9cC/cB/fDA/AgPAQPwyPwKDwGj8MT8CQ8BU/DM/AsPAfPwwvwIrwEL8Mr8Cq8Bq/DG/AmvAVvwzvwLrwH78MH8CF8BB/DJ/ApfAafwxfwJXwFX8M38C18B9/DD/Aj/AQ/wy/wK/wGv8Mf8Cf8BX/DP/Av/AfjomRR8ihFlDJKFaWO0kRpo3RR+ihDlDHKFGWOskRZo2xR9ihHlDPKFeWO8kR5o3xR/qhAVDAqFBWOikRFo2JR8ahEVDIqFZWOykRlo3JR+ahCVDGqFFWOqkRVo2pR9ahGVDOqFdWO6kR1o3pR/ahB1DBqFDWOmkRNo2ZR86hF1DJqFbWO2kRto3ZR+6hD1DHqFHWO0v5/MbpHPaKeUa+od9Qn6hv1i/pHA6KB0aBocDQkGhrFR8OihGh4lBiNiEZGo6LR0ZhobDQuGh9NiCZGk6LJ0ZRoajQtmh7NiGZGs6LZ0ZxobjQvmh8tiJKihdGiaHG0JFoaLYuWRyuildGqaHW0JlobrYvWRxuijdGmaHO0JdoaYREeEREZUREdMREbcREfCZEYSZEcKZEaaZEeGZEZWZEdOZEbeZEfBRGIwghGUYSiWLQt2h7tiHZGu6Ld0Z5ob7Qv2h8diA5Gh6LD0ZHoaHQsOh6diE5Gp6LT0ZnobHQuOh9diC5Gl6LL0ZXoanQtuh7diG5Gt6Lb0Z3obnQvuh89iB5Gj6LH0ZPoafQseh69iF5Gr6LX0ZvobfQueh99iD5Gn6LP0Zfoa/Qt+h79iH5Gv6Lf0Z/ob/QvikPJUHKUAqVEqVBqlAalRelQepQBZUSZUGaUBWVF2VB2lAPlRLlQbpQH5UX5UH5UABVEhVBhVAQVRcVQcVQClUSlUGlUBpVF5VB5VAFVRJVQZVQFVUXVUHVUA9VEtVBtVAfVRfVQfdQANUSNUGPUBDVFzVBz1AK1RK1Qa9QGtUXtUHvUAXVEnVBn9B/qgrqibqg76oF6ol6oN+qD+qJ+qD8agAaiQWgwGoKGong0DCWg4SgRjUAj0Sg0Go1BY9E4NB5NQBPRJDQZTUFT0TQ0Hc1AM9EsNBvNQXPRPDQfLUBJaCFahBajJWgpWoaWoxVoJVqFVqM1aC1ah9ajDWgj2oQ2oy1oK8IQjghEIgrRiEEs4hCPBCQiCclIQSrSkI4MZCIL2chBLvKQjwIEUIggihBCMbQNbUc70E60C+1Ge9BetA/tRwfQQXQIHUZH0FF0DB1HJ9BJdAqdRmfQWXQOnUcX0EV0CV1GV9BVdA1dRzfQTXQL3UZ30F10D91HD9BD9Ag9Rk/QU/QMPUcv0Ev0Cr1Gb9Bb9A69Rx/QR/QJfUZf0Ff0DX1HP9BP9Av9Rn/QX/QPxcWSxZLHUsRSxlLFUsfSxNLG0sXSxzLEMsYyxTLHssSyxrLFssdyxHLGcsVyx/LE8sbyxfLHCsQKxgrFCseKxIrGisWKx0rESsZKxUrHysTKxsrFyscqxCrGKsUqx6rEqsaqxarHasRqxmrFasfqxOrG6sXqxxrEGsYaxRrHmsSaxprFmsdaxFrGWsVax9rE2sbaxdrHOsQ6xjrFOsf+i3WJdY11i3WP9Yj1jPWK9Y71ifWN9Yv1jw2IDYwNig2ODYkNjcXHhsUSYsNjibH/IwAeAMXGAQCA/lk327Zt27Zt27Zt265tI0k727Z1bzg2AhuJjcJGY2Owsdg4bDw2AZuITcImY1Owqdg0bDo2A5uJzcJmY3Owudg8bD62AFuILcIWY0uwpdgybDm2AluJrcJWY2uwtdg6bD22AduIbcI2Y1uwrdg2bDu2A9uJ7cJ2Y3uwvdg+bD92ADuIHcIOY0ewo9gx7Dh2AjuJncJOY2ews9g57Dx2AbuIXcIuY1ewqxiG4RiBkRiF0RiDsRiH8ZiAiZiEyZiCqZiG6ZiBmZiF2ZiDuZiH+ViAhRjAIIawCIuxa9h17AZ2E7uF3cbuYHexe9h97AH2EHuEPcaeYE+xZ9hz7AX2EnuFvcbeYG+xd9h77AP2EfuEfca+YF+xb9h37Af2E/uF/cb+YH+xf1gCnghPjCfBk+LJ8OR4CjwlngpPjafB/8PT4unw9HgGPCOeCc+MZ8Gz4tnw7HgOPCeeC8+N58Hz4vnw/HgBvCBeCC+MF8GL4sXw4ngJvCReCi+Nl8HL4uXw8ngFvCJeCa+MV8Gr4tXw6ngNvCZeC6+N18Hr4vXw+ngDvCHeCG+MN8Gb4s3w5ngLvCXeCm+Nt8Hb4u3w9ngHvCPeCe+Md8G74t3w7ngPvCfeC++N98H74v3w/vgAfCA+CB+MD8GH4sPw4fgIfCQ+Ch+Nj8HH4uPw8fgEfCI+CZ+MT8Gn4tPw6fgMfCY+C5+Nz8Hn4vPw+fgCfCG+CF+ML8GX4svw5fgKfCW+Cl+Nr8HX4uvw9fgGfCO+Cd+Mb8G34tvw7fgOfCe+C9+N78H34vvw/fgB/CB+CD+MH8GP4sfw4/gJ/CR+Cj+Nn8HP4ufw8/gF/CJ+Cb+MX8Gv4hiO4wRO4hRO4wzO4hzO4wIu4hIu4wqu4hqu4wZu4hZu4w7u4h7u4wEe4gCHOMIjPMav4dfxG/hN/BZ+G7+D38Xv4ffxB/hD/BH+GH+CP8Wf4c/xF/hL/BX+Gn+Dv8Xf4e/xD/hH/BP+Gf+Cf8W/4d/xH/hP/Bf+G/+D/8X/4QlEIiIxkYRISiQjkhMpiJREKiI1kYb4j0hLpCPSExmIjEQmIjORhchKZCOyEzmInEQuIjeRh8hL5CPyEwWIgkQhojBRhEiekJBQnChBlCRKEaWJMkRZohxRnqhAVCQqEZWJKkRVohpRnahB1CRqEbWJOkRdoh5Rn2hANCQaEY2JJkRTohnRnGhBtCRaEa2JNkRboh3RnuhAdCQ6EZ2JLkRXohvRnehB9CR6Eb2JPkRfoh/RnxhADCQGEYOJIcRQYhgxnBhBjCRGEaOJMcRYYhwxnphATCQmEZOJKcRUYhoxnZhBzCRmEbOJOcRcYh4xn1hALCQWEYuJJcRSYhmxnFhBrCRWEauJNcRaYh2xnthAbCQ2EZuJLcRWYhuxndhB7CR2EbuJPcReYh+xnzhAHCQOEYeJI8RR4hhxnDhBnCROEaeJM8RZ4hxxnrhAXCQuEZeJK8RVAiNwgiBIgiJogiFYgiN4QiBEQiJkQiFUQiN0wiBMwiJswiFcwiN8IiBCAhCQQERExMQ14jpxg7hJ3CJuE3eIu8Q94j7xgHhIPCIeE0+Ip8Qz4jnxgnhJvCJeE2+It8Q74j3xgfhIfCI+E1+Ir8Q34jvxg/hJ/CJ+E3+Iv8Q/IoFMRCYmk5BJyWRkcjIFmZJMRaYm05D/kWnJdGR6MgOZkcxEZiazkFnJbGR2MgeZk8xF5ibzkHnJfGR+sgBZkCxEFiaLkEXJYmRxsgRZkixFlibLkGXJcmR5sgJZkaxEViarkFXJamR1sgZZk6xF1ibrkHXJemR9sgHZkGxENiabkE3JZmRzsgXZkmxFtibbkG3JdmR7sgPZkexEdia7kF3JbmR3sgfZk+xF9ib7kH3JfmR/cgA5kBxEDiaHkEPJYeRwcgQ5khxFjibHkGPJceR4cgI5kZxETiankFPJaeR0cgY5k5xFzibnkHPJeeR8cgG5kFxELiaXkEvJZeRycgW5klxFribXkGvJdeR6cgO5kdxEbia3kFvJbeR2cge5k9xF7ib3kHvJfeR+8gB5kDxEHiaPkEfJY+Rx8gR5kjxFnibPkGfJc+R58gJ5kbxEXiavkFdJjMRJgiRJiqRJhmRJjuRJgRRJiZRJhVRJjdRJgzRJi7RJh3RJj/TJgAxJQEISkREZk9fI6+QN8iZ5i7xN3iHvkvfI++QD8iH5iHxMPiGfks/I5+QL8iX5inxNviHfku/I9+QH8iP5ifxMfiG/kt/I7+QP8if5i/xN/iH/kv/IBCoRlZhKQiWlklHJqRRUSioVlZpKQ/1HpaXSUempDFRGKhOVmcpCZaWyUdmpHFROKheVm8pD5aXyUfmpAlRBqhBVmCpCFaWKUcWpElRJqhRVmipDlaXKUeWpClRFqhJVmapCVaWqUdWpGlRNqhZVm6pD1aXqUfWpBlRDqhHVmGpCNaWaUc2pFlRLqhXVmmpDtaXaUe2pDlRHqhPVmepCdaW6Ud2pHlRPqhfVm+pD9aX6Uf2pAdRAahA1mBpCDaWGUcOpEdRIahQ1mhpDjaXGUeOpCdREahI1mZpCTaWmUdOpGdRMahY1m5pDzaXmUfOpBdRCahG1mFpCLaWWUcupFdRKahW1mlpDraXWUeupDdRGahO1mdpCbaW2UdupHdROahe1m9pD7aX2UfupA9RB6hB1mDpCHaWOUcepE9RJ6hR1mjpDnaXOUeepC9RF6hJ1mbpCXaUwCqcIiqQoiqYYiqU4iqcESqQkSqYUSqU0SqcMyqQsyqYcyqU8yqcCKqQABSlERVRMXaOuUzeom9Qt6jZ1h7pL3aPuUw+oh9Qj6jH1hHpKPaOeUy+ol9Qr6jX1hnpLvaPeUx+oj9Qn6jP1hfpKfaO+Uz+on9Qv6jf1h/pL/aMS6ER0YjoJnZRORienU9Ap6VR0ajoN/R+dlk5Hp6cz0BnpTHRmOgudlc5GZ6dz0DnpXHRuOg+dl85H56cL0AXpQnRhughdlC5GF6dL0CXpUnRpugxdli5Hl6cr0BXpSnRlugpdla5GV6dr0DXpWnRtug5dl65H16cb0A3pRnRjugndlG5GN6db0C3pVnRrug3dlm5Ht6c70B3pTnRnugvdle5Gd6d70D3pXnRvug/dl+5H96cH0APpQfRgegg9lB5GD6dH0CPpUfRoegw9lh5Hj6cn0BPpSfRkego9lZ5GT6dn0DPpWfRseg49l55Hz6cX0AvpRfRiegm9lF5GL6dX0CvpVfRqeg29ll5Hr6c30BvpTfRmegu9ld5Gb6d30DvpXfRueg+9l95H76cP0AfpQ/Rh+gh9lD5GH6dP0CfpU/Rp+gx9lj5Hn6cv0BfpS/Rl+gp9lcZonCZokqZommZoluZonhZokZZomVZoldZonTZok7Zom3Zol/Zonw7okAY0pBEd0TF9jb5O36Bv0rfo2/Qd+i59j75PP6Af0o/ox/QT+in9jH5Ov6Bf0q/o1/Qb+i39jn5Pf6A/0p/oz/QX+iv9jf5O/6B/0r/o3/Qf+i/9j05gEjGJmSRMUiYZk5xJwaRkUjGpmTTMf0xaJh2TnsnAZGQyMZmZLExWJhuTncnB5GRyMbmZPExeJh+TnynAFGQKMYWZIkxRphhTnCnBlGRKMaWZMkxZphxTnqnAVGQqMZWZKkxVphpTnanB1GRqMbWZOkxdph5Tn2nANGQaMY2ZJkxTphnTnGnBtGRaMa2ZNkxbph3TnunAdGQ6MZ2ZLkxXphvTnenB9GR6Mb2ZPkxfph/TnxnADGQGMYOZIcxQZhgznBnBjGRGMaOZMcxYZhwznpnATGQmMZOZKcxUZhoznZnBzGRmMbOZOcxcZh4zn1nALGQWMYuZJcxSZhmznFnBrGRWMauZNcxaZh2zntnAbGQ2MZuZLcxWZhuzndnB7GR2MbuZPcxeZh+znznAHGQOMYeZI8xR5hhznDnBnGROMaeZM8xZ5hxznrnAXGQuMZeZK8xVBmNwhmBIhmJohmFYhmN4RmBERmJkRmFURmN0xmBMxmJsxmFcxmN8JmBCBjCQQUzExMw15jpzg7nJ3GJuM3eYu8w95j7zgHnIPGIeM0+Yp8wz5jnzgnnJvGJeM2+Yt8w75j3zgfnIfGI+M1+Yr8w35jvzg/nJ/GJ+M3+Yv8w/JoFNxCZmk7BJ2WRscjYFm5JNxaZm07D/sWnZdGx6NgObkc3EZmazsFnZbGx2Ngebk83F5mbzsHnZfGx+tgBbkC3EFmaLsEXZYmxxtgRbki3FlmbLsGXZcmx5tgJbka3EVmarsFXZamx1tgZbk63F1mbrsHXZemx9tgHbkG3ENmabsE3ZZmxztgXbkm3FtmbbsG3Zdmx7tgPbke3Edma7sF3Zbmx3tgfbk+3F9mb7sH3Zfmx/dgA7kB3EDmaHsEPZYexwdgQ7kh3FjmbHsGPZcex4dgI7kZ3ETmansFPZaex0dgY7k53FzmbnsHPZeex8dgG7kF3ELmaXsEvZZexydgW7kl3FrmbXsGvZdex6dgO7kd3Ebma3sFvZbex2dge7k93F7mb3sHvZfex+9gB7kD3EHmaPsEfZY+xx9gR7kj3FnmbPsGfZc+x59gJ7kb3EXmavsFdZjMVZgiVZiqVZhmVZjuVZgRVZiZVZhVVZjdVZgzVZi7VZh3VZj/XZgA1ZwEIWsREbs9fY6+wN9iZ7i73N3mHvsvfY++wD9iH7iH3MPmGfss/Y5+wL9iX7in3NvmHfsu/Y9+wH9iP7if3MfmG/st/Y7+wP9if7i/3N/mH/sv/YBC4Rl5hLwiXlknHJuRRcSi4Vl5pLw/3HpeXScem5DFxGLhOXmcvCZeWycdm5HFxOLheXm8vD5eXycfm5AlxBrhBXmCvCFeWKccW5ElxJrhRXmivDleXKceW5ClxFrhJXmavCVeWqcdW5GlxNrhZXm6vD1eXqcfW5BlxDrhHXmGvCNeWacc25FlxLrhXXmmvDteXace25DlxHrhPXmevCdeW6cd25HlxPrhfXm+vD9eX6cf25AdxAbhA3mBvCDeWGccO5EdxIbhQ3mhvDjeXGceO5CdxEbhI3mZvCTeWmcdO5GdxMbhY3m5vDzeXmcfO5BdxCbhG3mFvCLeWWccu5FdxKbhW3mlvDreXWceu5DdxGbhO3mdvCbeW2cdu5HdxObhe3m9vD7eX2cfu5A9xB7hB3mDvCHeWOcce5E9xJ7hR3mjvDneXOcee5C9xF7hJ3mbvCXeUwDucIjuQojuYYjuU4jucETuQkTuYUTuU0TucMzuQszuYczuU8zucCLuQABznERVzMXeOucze4m9wt7jZ3h7vL3ePucw+4h9wj7jH3hHvKPeOecy+4l9wr7jX3hnvLvePecx+4j9wn7jP3hfvKfeO+cz+4n9wv7jf3h/vL/eMS+ER8Yj4Jn5RPxifnU/Ap+VR8aj4N/x+flk/Hp+cz8Bn5THxmPguflc/GZ+dz8Dn5XHxuPg+fl8/H5+cL8AX5QnxhvghflC/GF+dL8CX5Unxpvgxfli/Hl+cr8BX5Snxlvgpfla/GV+dr8DX5Wnxtvg5fl6/H1+cb8A35RnxjvgnflG/GN+db8C35Vnxrvg3flm/Ht+c78B35Tnxnvgvfle/Gd+d78D35Xnxvvg/fl+/H9+cH8AP5Qfxgfgg/lB/GD+dH8CP5Ufxofgw/lh/Hj+cn8BP5Sfxkfgo/lZ/GT+dn8DP5Wfxsfg4/l5/Hz+cX8Av5Rfxifgm/lF/GL+dX8Cv5Vfxqfg2/ll/Hr+c38Bv5Tfxmfgu/ld/Gb+d38Dv5Xfxufg+/l9/H7+cP8Af5Q/xh/gh/lD/GH+dP8Cf5U/xp/gx/lj/Hn+cv8Bf5S/xl/gp/lcd4nCd4kqd4mmd4lud4nhd4kZd4mVd4ldd4nTd4k7d4m3d4l/d4nw/4kAc85BEf8TF/jb/O3+Bv8rf42/wd/i5/j7/PP+Af8o/4x/wT/in/jH/Ov+Bf8q/41/wb/i3/jn/Pf+A/8p/4z/wX/iv/jf/O/+B/8r/43/wf/i//j08QEgmJhSRCUiGZkFxIIaQUUgmphTTCf0JaIZ2QXsggZBQyCZmFLEJWIZuQXcgh5BRyCbmFPEJeIZ+QXyggFBQKCYWFIkJRoZhQXCghlBRKCaWFMkJZoZxQXqggVBQqCZWFKkJVoZpQXagh1BRqCbWFOkJdoZ5QX2ggNBQaCY2FJkJToZnQXGghtBRaCa2FNkJboZ3QXuggdBQ6CZ2FLkJXoZvQXegh9BR6Cb2FPkJfoZ/QXxggDBQGCYOFIcJQYZgwXBghjBRGCaOFMcJYYZwwXpggTBQmCZOFKcJUYZowXZghzBRmCbOFOcJcYZ4wX1ggLBQWCYuFJcJSYZmwXFghrBRWCauFNcJaYZ2wXtggbBQ2CZuFLcJWYZuwXdgh7BR2CbuFPcJeYZ+wXzggHBQOCYeFI8JR4ZhwXDghnBROCaeFM8JZ4ZxwXrggXBQuCZeFK8JVARNwgRBIgRJogRFYgRN4QRBEQRJkQRFUQRN0wRBMwRJswRFcwRN8IRBCAQhQQEIkxMI14bpwQ7gp3BJuC3eEu8I94b7wQHgoPBIeC0+Ep8Iz4bnwQngpvBJeC2+Et8I74b3wQfgofBI+C1+Er8I34bvwQ/gp/BJ+C3+Ev8I/IUFMJCYWk4hJxWRicjGFmFJMJaYW04j/iWnFdGJ6MYOYUcwkZhaziFnFbGJ2MYeYU8wl5hbziHnFfGJ+sYBYUCwkFhaLiEXFYmJxsYRYUiwllhbLiGXFcmJ5sYJYUawkVhariFXFamJ1sYZYU6wl1hbriHXFemJ9sYHYUGwkNhabiE3FZmJzsYXYUmwlthbbiG3FdmJ7sYPYUewkdha7iF3FbmJ3sYfYU+wl9hb7iH3FfmJ/cYA4UBwkDhaHiEPFYeJwcYQ4UhwljhbHiGPFceJ4cYI4UZwkThaniFPFaeJ0cYY4U5wlzhbniHPFeeJ8cYG4UFwkLhaXiEvFZeJycYW4UlwlrhbXiGvFdeJ6cYO4Udwkbha3iFvFbeJ2cYe4U9wl7hb3iHvFfeJ+8YB4UDwkHhaPiEfFY+Jx8YR4UjwlnhbPiGfFc+J58YJ4UbwkXhaviFdFTMRFQiRFSqRFRmRFTuRFQRRFSZRFRVRFTdRFQzRFS7RFR3RFT/TFQAxFIEIRiZEYi9fE6+IN8aZ4S7wt3hHvivfE++ID8aH4SHwsPhGfis/E5+IL8aX4SnwtvhHfiu/E9+IH8aP4SfwsfhG/it/E7+IP8af4S/wt/hH/iv/EBCmRlFhKIiWVkknJpRRSSimVlFpKI/0npZXSSemlDFJGKZOUWcoiZZWySdmlHFJOKZeUW8oj5ZXySfmlAlJBqZBUWCoiFZWKScWlElJJqZRUWiojlZXKSeWlClJFqZJUWaoiVZWqSdWlGlJNqZZUW6oj1ZXqSfWlBlJDqZHUWGoiNZWaSc2lFlJLqZXUWmojtZXaSe2lDlJHqZPUWeoidZW6Sd2lHlJPqZfUW+oj9ZX6Sf2lAdJAaZA0WBoiDZWGScOlEdJIaZQ0WhojjZXGSeOlCdJEaZI0WZoiTZWmSdOlGdJMaZY0W5ojzZXmSfOlBdJCaZG0WFoiLZWWSculFdJKaZW0WlojrZXWSeulDdJGaZO0WdoibZW2SdulHdJOaZe0W9oj7ZX2SfulA9JB6ZB0WDoiHZWOScelE9JJ6ZR0WjojnZXOSeelC9JF6ZJ0WboiXZUwCZcIiZQoiZYYiZU4iZcESZQkSZYUSZU0SZcMyZQsyZYcyZU8yZcCKZSABCUkRVIsXZOuSzekm9It6bZ0R7or3ZPuSw+kh9Ij6bH0RHoqPZOeSy+kl9Ir6bX0RnorvZPeSx+kj9In6bP0RfoqfZO+Sz+kn9Iv6bf0R/or/ZMS5ERyYjmJnFROJieXU8gp5VRyajmN/J+cVk4np5czyBnlTHJmOYucVc4mZ5dzyDnlXHJuOY+cV84n55cLyAXlQnJhuYhcVC4mF5dLyCXlUnJpuYxcVi4nl5cryBXlSnJluYpcVa4mV5dryDXlWnJtuY5cV64n15cbyA3lRnJjuYncVG4mN5dbyC3lVnJruY3cVm4nt5c7yB3lTnJnuYvcVe4md5d7yD3lXnJvuY/cV+4n95cHyAPlQfJgeYg8VB4mD5dHyCPlUfJoeYw8Vh4nj5cnyBPlSfJkeYo8VZ4mT5dnyDPlWfJseY48V54nz5cXyAvlRfJieYm8VF4mL5dXyCvlVfJqeY28Vl4nr5c3yBvlTfJmeYu8Vd4mb5d3yDvlXfJueY+8V94n75cPyAflQ/Jh+Yh8VD4mH5dPyCflU/Jp+Yx8Vj4nn5cvyBflS/Jl+Yp8VcZkXCZkUqZkWmZkVuZkXhZkUZZkWVZkVdZkXTZkU7ZkW3ZkV/ZkXw7kUAYylJEcybF8Tb4u35Bvyrfk2/Id+a58T74vP5Afyo/kx/IT+an8TH4uv5Bfyq/k1/Ib+a38Tn4vf5A/yp/kz/IX+av8Tf4u/5B/yr/k3/If+a/8T05QEimJlSRKUiWZklxJoaRUUimplTTKf0paJZ2SXsmgZFQyKZmVLEpWJZuSXcmh5FRyKbmVPEpeJZ+SXymgFFQKKYWVIkpRpZhSXCmhlFRKKaWVMkpZpZxSXqmgVFQqKZWVKkpVpZpSXamh1FRqKbWVOkpdpZ5SX2mgNFQaKY2VJkpTpZnSXGmhtFRaKa2VNkpbpZ3SXumgdFQ6KZ2VLkpXpZvSXemh9FR6Kb2VPkpfpZ/SXxmgDFQGKYOVIcpQZZgyXBmhjFRGKaOVMcpYZZwyXpmgTFQmKZOVKcpUZZoyXZmhzFRmKbOVOcpcZZ4yX1mgLFQWKYuVJcpSZZmyXFmhrFRWKauVNcpaZZ2yXtmgbFQ2KZuVLcpWZZuyXdmh7FR2KbuVPcpeZZ+yXzmgHFQOKYeVI8pR5ZhyXDmhnFROKaeVM8pZ5ZxyXrmgXFQuKZeVK8pVBVNwhVBIhVJohVFYhVN4RVBERVJkRVFURVN0xVBMxVJsxVFcxVN8JVBCBShQQUqkxMo15bpyQ7mp3FJuK3eUu8o95b7yQHmoPFIeK0+Up8oz5bnyQnmpvFJeK2+Ut8o75b3yQfmofFI+K1+Ur8o35bvyQ/mp/FJ+K3+Uv8o/JUFNpCZWk6hJ1WRqcjWFmlJNpaZW06j/qWnVdGp6NYOaUc2kZlazqFnVbGp2NYeaU82l5lbzqHnVfGp+tYBaUC2kFlaLqEXVYmpxtYRaUi2lllbLqGXVcmp5tYJaUa2kVlarqFXVamp1tYZaU62l1lbrqHXVemp9tYHaUG2kNlabqE3VZmpztYXaUm2ltlbbqG3Vdmp7tYPaUe2kdla7qF3Vbmp3tYfaU+2l9lb7qH3Vfmp/dYA6UB2kDlaHqEPVYepwdYQ6Uh2ljlbHqGPVcep4dYI6UZ2kTlanqFPVaep0dYY6U52lzlbnqHPVeep8dYG6UF2kLlaXqEvVZepydYW6Ul2lrlbXqGvVdep6dYO6Ud2kbla3qFvVbep2dYe6U92l7lb3qHvVfep+9YB6UD2kHlaPqEfVY+px9YR6Uj2lnlbPqGfVc+p59YJ6Ub2kXlavqFdVTMVVQiVVSqVVRmVVTuVVQRVVSZVVRVVVTdVVQzVVS7VVR3VVT/XVQA1VoEIVqZEaq9fU6+oN9aZ6S72t3lHvqvfU++oD9aH6SH2sPlGfqs/U5+oL9aX6Sn2tvlHfqu/U9+oH9aP6Sf2sflG/qt/U7+oP9af6S/2t/lH/qv/UBC2RllhLoiXVkmnJtRRaSi2VllpLo/2npdXSaem1DFpGLZOWWcuiZdWyadm1HFpOLZeWW8uj5dXyafm1AlpBrZBWWCuiFdWKacW1ElpJrZRWWiujldXKaeW1ClpFrZJWWauiVdWqadW1GlpNrZZWW6uj1dXqafW1BlpDrZHWWGuiNdWaac21FlpLrZXWWmujtdXaae21DlpHrZPWWeuiddW6ad21HlpPrZfWW+uj9dX6af21AdpAbZA2WBuiDdWGacO1EdpIbZQ2WhujjdXGaeO1CdpEbZI2WZuiTdWmadO1GdpMbZY2W5ujzdXmafO1BdpCbZG2WFuiLdWWacu1FdpKbZW2WlujrdXWaeu1DdpGbZO2WduibdW2adu1HdpObZe2W9uj7dX2afu1A9pB7ZB2WDuiHdWOace1E9pJ7ZR2WjujndXOaee1C9pF7ZJ2WbuiXdUwDdcIjdQojdYYjdU4jdcETdQkTdYUTdU0TdcMzdQszdYczdU8zdcCLdSABjWkRVqsXdOuaze0m9ot7bZ2R7ur3dPuaw+0h9oj7bH2RHuqPdOeay+0l9or7bX2RnurvdPeax+0j9on7bP2RfuqfdO+az+0n9ov7bf2R/ur/dMS9ER6Yj2JnlRPpifXU+gp9VR6aj2N/p+eVk+np9cz6Bn1THpmPYueVc+mZ9dz6Dn1XHpuPY+eV8+n59cL6AX1QnphvYheVC+mF9dL6CX1UnppvYxeVi+nl9cr6BX1SnplvYpeVa+mV9dr6DX1WnptvY5eV6+n19cb6A31RnpjvYneVG+mN9db6C31VnprvY3eVm+nt9c76B31TnpnvYveVe+md9d76D31XnpvvY/eV++n99cH6AP1QfpgfYg+VB+mD9dH6CP1UfpofYw+Vh+nj9cn6BP1SfpkfYo+VZ+mT9dn6DP1WfpsfY4+V5+nz9cX6Av1RfpifYm+VF+mL9dX6Cv1VfpqfY2+Vl+nr9c36Bv1TfpmfYu+Vd+mb9d36Dv1XfpufY++V9+n79cP6Af1Q/ph/Yh+VD+mH9dP6Cf1U/pp/Yx+Vj+nn9cv6Bf1S/pl/Yp+Vcd0XCd0Uqd0Wmd0Vud0Xhd0UZd0WVd0Vdd0XTd0U7d0W3d0V/d0Xw/0UAc61JEe6bF+Tb+u39Bv6rf02/od/a5+T7+vP9Af6o/0x/oT/an+TH+uv9Bf6q/01/ob/a3+Tn+vf9A/6p/0z/oX/av+Tf+u/9B/6r/03/of/a/+T08wEhmJjSRGUiOZkdxIYaQ0UhmpjTTGf0ZaI52R3shgZDQyGZmNLEZWI5uR3chh5DRyGbmNPEZeI5+R3yhgFDQKGYWNIkZRo5hR3ChhlDRKGaWNMkZZo5xR3qhgVDQqGZWNKkZVo5pR3ahh1DRqGbWNOkZdo55R32hgNDQaGY2NJkZTo5nR3GhhtDRaGa2NNkZbo53R3uhgdDQ6GZ2NLkZXo5vR3ehh9DR6Gb2NPkZfo5/R3xhgDDQGGYONIcZQY5gx3BhhjDRGGaONMcZYY5wx3phgTDQmGZONKcZUY5ox3ZhhzDRmGbONOcZcY54x31hgLDQWGYuNJcZSY5mx3FhhrDRWGauNNcZaY52x3thgbDQ2GZuNLcZWY5ux3dhh7DR2GbuNPcZeY5+x3zhgHDQOGYeNI8ZR45hx3DhhnDROGaeNM8ZZ45xx3rhgXDQuGZeNK8ZVAzNwgzBIgzJogzFYgzN4QzBEQzJkQzFUQzN0wzBMwzJswzFcwzN8IzBCAxjQQEZkxMY147pxw7hp3DJuG3eMu8Y9477xwHhoPDIeG0+Mp8Yz47nxwnhpvDJeG2+Mt8Y7473xwfhofDK6Gl+Mr8Y347vxw/hp/DJ+G3+Mv8Y/I8FMZCY2k5hJzWRmcjOFmdJMZaY205j/mWnNdGZ6M4OZ0cxkZjazmFnNbGZ2M4eZ08xl5jbzmHnNfGZ+s4BZ0CxkFjaLmEXNYmZxs4RZ0ixlljbLmGXNcmZ5s4JZ0axkVjarmFXNamZ1s4ZZ06xl1jbrmHXNemZ9s4HZ0GxkNjabmE3NZmZzs4XZ0mxltjbbmG3NdmZ7s4PZ0exkdja7mF3NbmZ3s4fZ0+xl9jb7mH3NfmZ/c4A50BxkDjaHmEPNYeZwc4Q50hxljjbHmGPNceZ4c4I50ZxkTjanmFPNaeZ0c4Y505xlzjbnmHPNeeZ8c4G50FxkLjaXmEvNZeZyc4W50lxlrjbXmGvNdeZ6c4O50dxkbja3mFvNbeZ2c4e509xl7jb3mHvNfeZ+84B50DxkHjaPmEfNY+Zx84R50jxlnjbPmGfNc+Z584J50bxkXjavmFdNzMRNwiRNyqRNxmRNzuRNwRRNyZRNxVRNzdRNwzRNy7RNx3RNz/TNwAxNYEITmZEZm9fM6+YN86Z5y7xt3jHvmvfM++YD86H5yHxsPjGfms/M5+YL86X5ynxtvjHfmu/M9+YH86P5yfxsfjG/mt/M7+YP86f5y/xt/jH/mv/MBCuRldhKYiW1klnJrRRWSiuVldpKY/1npbXSWemtDFZGK5OV2cpiZbWyWdmtHFZOK5eV28pj5bXyWfmtAlZBq5BV2CpiFbWKWcWtElZJq5RV2ipjlbXKWeWtClZFq5JV2apiVbWqWdWtGlZNq5ZV26pj1bXqWfWtBlZDq5HV2GpiNbWaWc2tFlZLq5XV2mpjtbXaWe2tDlZHq5PV2epidbW6Wd2tHlZPq5fV2+pj9bX6Wf2tAdZAa5A12BpiDbWGWcOtEdZIa5Q12hpjjbXGWeOtCdZEa5I12ZpiTbWmWdOtGdZMa5Y125pjzbXmWfOtBdZCa5G12FpiLbWWWcutFdZKa5W12lpjrbXWWeutDdZGa5O12dpibbW2WdutHdZOa5e129pj7bX2WfutA9ZB65B12DpiHbWOWcetE9ZJ65R12jpjnbXOWeetC9ZF65J12bpiXbUwC7cIi7Qoi7YYi7U4i7cES7QkS7YUS7U0S7cMy7Qsy7Ycy7U8y7cCK7SABS1kRVZsXbOuWzesm9Yt67Z1x7pr3bPuWw+sh9Yj67H1xHpqPbOeWy+sl9Yr67X1xnprvbPeWx+sj9Yn67P1xfpqfbO+Wz+sn9Yv67f1x/pr/bMS7ER2YjuJndROZie3U9gp7VR2ajuN/Z+d1k5np7cz2BntTHZmO4ud1c5mZ7dz2DntXHZuO4+d185n57cL2AXtQnZhu4hd1C5mF7dL2CXtUnZpu4xd1i5nl7cr2BXtSnZlu4pd1a5mV7dr2DXtWnZtu45d165n17cb2A3tRnZju4nd1G5mN7db2C3tVnZru43d1m5nt7c72B3tTnZnu4vd1e5md7d72D3tXnZvu4/d1+5n97cH2APtQfZge4g91B5mD7dH2CPtUfZoe4w91h5nj7cn2BPtSfZke4o91Z5mT7dn2DPtWfZse449155nz7cX2AvtRfZie4m91F5mL7dX2CvtVfZqe4291l5nr7c32BvtTfZme4u91d5mb7d32DvtXfZue4+9195n77cP2AftQ/Zh+4h91D5mH7dP2CftU/Zp+4x91j5nn7cv2BftS/Zl+4p91cZs3CZs0qZs2mZs1uZs3hZs0ZZs2VZs1dZs3TZs07Zs23Zs1/Zs3w7s0AY2tJEd2bF9zb5u37Bv2rfs2/Yd+659z75vP7Af2o/sx/YT+6n9zH5uv7Bf2q/s1/Yb+639zn5vf7A/2p/sz/YX+6v9zf5u/7B/2r/s3/Yf+6/9z05wEjmJnSROUieZk9xJ4aR0UjmpnTTOf05aJ52T3sngZHQyOZmdLE5WJ5uT3cnh5HRyObmdPE5eJ5+T3yngFHQKOYWdIk5Rp5hT3CnhlHRKOaWdMk5Zp5xT3qngVHQqOZWdKk5Vp5pT3anh1HRqObWdOk5dp55T32ngNHQaOY2dJk5Tp5nT3GnhtHRaOa2dNk5bp53T3ungdHQ6OZ2dLk5Xp5vT3enh9HR6Ob2dPk5fp5/T3xngDHQGOYOdIc5QZ5gz3BnhjHRGOaOdMc5YZ5wz3pngTHQmOZOdKc5UZ5oz3ZnhzHRmObOdOc5cZ54z31ngLHQWOYudJc5SZ5mz3FnhrHRWOaudNc5aZ52z3tngbHQ2OZudLc5WZ5uz3dnh7HR2ObudPc5eZ5+z3zngHHQOOYedI85R55hz3DnhnHROOaedM85Z55xz3rngXHQuOZedK85VB3Nwh3BIh3Joh3FYh3N4R3BER3JkR3FUR3N0x3BMx3Jsx3Fcx3N8J3BCBzjQQU7kxM4157pzw7np3HJuO3ecu849577zwHnoPHIeO0+cp84z57nzwnnpvHJeO2+ct847573zwfnofHI+O1+cr84357vzw/np/HJ+O3+cv84/J8FN5CZ2k7hJ3WRucjeFm9JN5aZ207j/uWnddG56N4Ob0c3kZnazuFndbG52N4eb083l5nbzuHndfG5+t4Bb0C3kFnaLuEXdYm5xt4Rb0i3llnbLuGXdcm55t4Jb0a3kVnaruFXdam51t4Zb063l1nbruHXdem59t4Hb0G3kNnabuE3dZm5zt4Xb0m3ltnbbuG3ddm57t4Pb0e3kdna7uF3dbm53t4fb0+3l9nb7uH3dfm5/d4A70B3kDnaHuEPdYe5wd4Q70h3ljnbHuGPdce54d4I70Z3kTnanuFPdae50d4Y7053lznbnuHPdee58d4G70F3kLnaXuEvdZe5yd4W70l3lrnbXuGvdde56d4O70d3kbna3uFvdbe52d4e7093l7nb3uHvdfe5+94B70D3kHnaPuEfdY+5x94R70j3lnnbPuGfdc+5594J70b3kXnavuFddzMVdwiVdyqVdxmVdzuVdwRVdyZVdxVVdzdVdwzVdy7Vdx3Vdz/XdwA1d4EIXuZEbu9fc6+4N96Z7y73t3nHvuvfc++4D96H7yH3sPnGfus/c5+4L96X7yn3tvnHfuu/c9+4H96P7yf3sfnG/ut/c7+4P96f7y/3t/nH/uv/cBC+Rl9hL4iX1knnJvRReSi+Vl9pL4/3npfXSeem9DF5GL5OX2cviZfWyedm9HF5OL5eX28vj5fXyefm9Al5Br5BX2CviFfWKecW9El5Jr5RX2ivjlfXKeeW9Cl5Fr5JX2aviVfWqedW9Gl5Nr5ZX26vj1fXqefW9Bl5Dr5HX2GviNfWaec29Fl5Lr5XX2mvjtfXaee29Dl5Hr5PX2evidfW6ed29Hl5Pr5fX2+vj9fX6ef29Ad5Ab5A32BviDfWGecO9Ed5Ib5Q32hvjjfXGeeO9Cd5Eb5I32ZviTfWmedO9Gd5Mb5Y325vjzfXmefO9Bd5Cb5G32FviLfWWecu9Fd5Kb5W32lvjrfXWeeu9Dd5Gb5O32dvibfW2edu9Hd5Ob5e329vj7fX2efu9A95B75B32DviHfWOece9E95J75R32jvjnfXOeee9C95F75J32bviXfUwD/cIj/Qoj/YYj/U4j/cET/QkT/YUT/U0T/cMz/Qsz/Ycz/U8z/cCL/SABz3kRV7sXfOueze8m94t77Z3x7vr3fPuew+8h94j77H3xHvqPfOeey+8l94r77X3xnvrvfPeex+8j94n77P3xfvqffO+ez+8n94v77f3x/vr/fMS/ER+Yj+Jn9RP5if3U/gp/VR+aj+N/5+f1k/np/cz+Bn9TH5mP4uf1c/mZ/dz+Dn9XH5uP4+f18/n5/cL+AX9Qn5hv4hf1C/mF/dL+CX9Un5pv4xf1i/nl/cr+BX9Sn5lv4pf1a/mV/dr+DX9Wn5tv45f16/n1/cb+A39Rn5jv4nf1G/mN/db+C39Vn5rv43f1m/nt/c7+B39Tn5nv4vf1e/md/d7+D39Xn5vv4/f1+/n9/cH+AP9Qf5gf4g/1B/mD/dH+CP9Uf5of4w/1h/nj/cn+BP9Sf5kf4o/1Z/mT/dn+DP9Wf5sf44/15/nz/cX+Av9Rf5if4m/1F/mL/dX+Cv9Vf5qf42/1l/nr/c3+Bv9Tf5mf4u/1d/mb/d3+Dv9Xf5uf4+/19/n7/cP+Af9Q/5h/4h/1D/mH/dP+Cf9U/5p/4x/1j/nn/cv+Bf9S/5l/4p/1cd83Cd80qd82md81ud83hd80Zd82Vd81dd83Td807d823d8109ISEgI/NAHPvSRH/mxf82/7t/wb/q3/Nv+Hf+uf8+/7z/wH/qP/Mf+E/+p/8x/7r/wX/qv/Nf+G/+t/85/73/wP/qf/M/+F/+r/83/7v/wf/q//N/+H/+v/89PCBIFiYMkQdIgWZA8SBGkDFIFqYM0wX9B2iBdkD7IEGQMMgWZgyxB1iBbkD3IEeQMcgW5gzxB3iBfkD8oEBQMCgWFgyJB0aBYUDwoEZQMSgWlgzJB2aBcUD6oEFQMKgWVgypB1aBaUD2oEdQMagW1gzpB3aBeUD9oEDQMGgWNgyZB06BZ0DxoEbQMWgWtgzZB26Bd0D7oEHQMOgWdgy5B16Bb0D3oEfQMegW9gz5B36Bf0D8YEAwMBgWDgyHB0GBYMDwYEYwMRgWjgzHB2GBcMD6YEEwMJgWTgynB1GBaMD2YEcwMZgWzgznB3GBeMD9YECwMFgWLgyXB0mBZsDxYEawMVgWrgzXB2mBdsD7YEGwMNgWbgy3B1mBbsD3YEewMdgW7gz3B3mBfsD84EBwMDgWHgyPB0eBYcDw4EZwMTgWngzPB2eBccD64EFwMLgWXgyvB1QAL8IAIyIAK6IAJ2IAL+EAIxEAK5EAJ1EAL9MAIzMAK7MAJ3MAL/CAIwgAEMEBBFMTBteB6cCO4GdwKbgd3grvBveB+8CB4GDwKHgdPgqfBs+B58CJ4GbwKXgdvgrfBu+B98CH4GHwKPgdfgq/Bt+B78CP4GfwKfgd/gr/BvyAhTBQmDpOEScNkYfIwRZgyTBWmDtOE/4Vpw3Rh+jBDmDHMFGYOs4RZw2xh9jBHmDPMFeYO84R5w3xh/rBAWDAsFBYOi4RFw2Jh8bBEWDIsFZYOy4Rlw3Jh+bBCWDGsFFYOq4RVw2ph9bBGWDOsFdYO64R1w3ph/bBB2DBsFDYOm4RNw2Zh87BF2DJsFbYO24Rtw3Zh+7BD2DHsFHYOu4Rdw25h97BH2DPsFfYO+4R9w35h/3BAODAcFA4Oh4RDw2Hh8HBEODIcFY4Ox4Rjw3Hh+HBCODGcFE4Op4RTw2nh9HBGODOcFc4O54Rzw3nh/HBBuDBcFC4Ol4RLw2Xh8nBFuDJcFa4O14Rrw3Xh+nBDuDHcFG4Ot4Rbw23h9nBHuDPcFe4O94R7w33h/vBAeDA8FB4Oj4RHw2Ph8fBEeDI8FZ4Oz4Rnw3Ph+fBCeDG8FF4Or4RXQyzEQyIkQyqkQyZkQy7kQyEUQymUQyVUQy3UQyM0Qyu0Qyd0Qy/0wyAMQxDCEIVRGIfXwuvhjfBmeCu8Hd4J74b3wvvhg/Bh+Ch8HD4Jn4bPwufhi/Bl+Cp8Hb4J34bvwvfhh/Bj+Cn8HH4Jv4bfwu/hj/Bn+Cv8Hf4J/4b/wgSQCCQGSUBSkAwkBylASpAKpAZpwH8gLUgH0oMMICPIBDKDLCAryAaygxwgJ8gFcoM8IC/IB/KDAqAgKAQKgyKgKCgGioMSoCQoBUqDMqAsKAfKgwqgIqgEKoMqoCqoBqqDGqAmqAVqgzqgLqgH6oMGoCFoBBqDJqApaAaagxagJWgFWoM2oC1oB9qDDqAj6AQ6gy6gK+gGuoMeoCfoBXqDPqAv6Af6gwFgIBgEBoMhYCgYBoaDEWAkGAVGgzFgLBgHxoMJYCKYBCaDKWAqmAamgxlgJpgFZoM5YC6YB+aDBWAhWAQWgyVgKVgGloMVYCVYBVaDNWAtWAfWgw1gI9gENoMtYCvYBraDHWAn2AV2gz1gL9gH9oMD4CA4BA6DI+AoOAaOgxPgJDgFToMz4Cw4B86DC+AiuAQugyvgKsAADghAAgrQgAEs4AAPBCACCchAASrQgA4MYAIL2MABLvCADwIQAgAgQCACMbgGroMb4Ca4BW6DO+AuuAfugwfgIXgEHoMn4Cl4Bp6DF+AleAVegzfgLXgH3oMP4CP4BD6DL+Ar+Aa+gx/gJ/gFfoM/4C/4BxJgIpgYJoFJYTKYHKaAKWEqmBqmgf/BtDAdTA8zwIwwE8wMs8CsMBvMDnPAnDAXzA3zwLwwH8wPC8CCsBAsDIvAorAYLA5LwJKwFCwNy8CysBwsDyvAirASrAyrwKqwGqwOa8CasBasDevAurAerA8bwIawEWwMm8CmsBlsDlvAlrAVbA3bwLawHWwPO8COsBPsDLvArrAb7A57wJ6wF+wN+8C+sB/sDwfAgXAQHAyHwKFwGBwOR8CRcBQcDcfAsXAcHA8nwIlwEpwMp8CpcBqcDmfAmXAWnA3nwLlwHpwPF8CFcBFcDJfApXAZXA5XwJVwFVwN18C1cB1cDzfAjXAT3Ay3wK1wG9wOd8CdcBfcDffAvXAf3A8PwIPwEDwMj8Cj8Bg8Dk/Ak/AUPA3PwLPwHDwPL8CL8BK8DK/AqxCDOCQgCSlIQwaykIM8FKAIJShDBapQgzo0oAktaEMHutCDPgxgCAGEEMEIxvAavA5vwJvwFrwN78C78B68Dx/Ah/ARfAyfwKfwGXwOX8CX8BV8Dd/At/AdfA8/wI/wE/wMv8Cv8Bv8Dn/An/AX/A3/wL/wH0xAiVBilAQlRclQcpQCpUSpUGqUBv2H0qJ0KD3KgDKiTCgzyoKyomwoO8qBcqJcKDfKg/KifCg/KoAKokKoMCqCiqJiqDgqgUqiUqg0KoPKonKoPKqAKqJKqDKqgqqiaqg6qoFqolqoNqqD6qJ6qD5qgBqiRqgxaoKaomaoOWqBWqJWqDVqg9qidqg96oA6ok6oM+qCuqJuqDvqgXqiXqg36oP6on6oPxqABqJBaDAagoaiYWg4GoFGolFoNBqDxqJxaDyagCaiSWgymoKmomloOpqBZqJZaDaag+aieWg+WoAWokVoMVqClqJlaDlagVaiVWg1WoPWonVoPdqANqJNaDPagraibWg72oF2ol1oN9qD9qJ9aD86gA6iQ+gwOoKOomPoODqBTqJT6DQ6g86ic+g8uoAuokvoMrqCriIM4YhAJKIQjRjEIg7xSEAikpCMFKQiDenIQCaykI0c5CIP+ShAIQIIIoQiFKNr6Dq6gW6iW+g2uoPuonvoPnqAHqJH6DF6gp6iZ+g5eoFeolfoNXqD3qJ36D36gD6iT+gz+oK+om/oO/qBfqJf6Df6g/6ifyghShQljpJESaNkUfIoRZQyShWljtIkJERpo3RR+ihDlDHKFGWOskRZo2xR9ihHlDPKFeWO8kR5o3xR/qhAVDAqFBWOikRFo2JR8ahEVDIqFZWOykRlo3JR+ahCVDGqFFWOqkRVo2pR9ahGVDOqFdWO6kR1o3pR/ahB1DBqFDWOmkRNo2ZR86hF1DJqFbWO2kRto3ZR+6hD1DHqFHWOukRdo25R96hH1DPqFfWO+kR9o35R/2hANDAaFA2OhkRDo2HR8GhENDIaFY2OxkRjo3HR+GhCNDGaFE2OpkRTo2nR9GhGNDOaFc2O5kRzo3nR/GhBtDBaFC2OlkRLo2XR8mhFtDJaFa2O1kRro3XR+mhDtDHaFG2OtkRbo23R9mhHtDPaFe2O9kR7o33R/uhAdDA6FB2OjkRHo2PR8ehEdDI6FZ2OzkRno3PR+ehCdDG6FF2OrkRXIyzCIyIiIyqiIyZiIy7iIyESIymSIyVSIy3SIyMyIyuyIydyIy/yoyAKIxDBCEVRFEfXouvRjehmdCu6Hd2J7kb3ovvRg+hh9Ch6HD2JnkbPoufRi+hl9Cp6Hb2J3kbvovfRh+hj9Cn6HH2Jvkbfou/Rj+hn9Cv6Hf2J/kb/ooQ4UZw4ThInjZPFyeMUcco4VZw6ThP/F6eN08Xp4wxxxjhTnDnOEmeNs8XZ4xxxzjhXnDvOE+eN88X54wJxwbhQXDguEheNi8XF4xJxybhUXDouE5eNy8Xl4wpxxbhSXDmuEleNq8XV4xpxzbhWXDuuE9eN68X14wZxw7hR3DhuEjeNm8XN4xZxy7hV3DpuE7eN28Xt4w5xx7hT3DnuEneNu8Xd4x5xz7hX3DvuE/eN+8X94wHxwHhQPDgeEg+Nh8X/EwAPgEIkAQBAf7Z92bZt27Zt27Zt27bttW3NzOa6NxwbgY3ERmGjsTHYWGwcNh6bgE3EJmGTsSnYVGwaNh2bgc3EZmGzsTnYXGweNh9bgC3EFmGLsSXYUmwZthxbga3EVmGrsTXYWmwdth7bgG3ENmGbsS3YVmwbth3bge3EdmG7sT3YXmwfth87gB3EDmGHsSPYUewYdhw7gZ3ETmGnsTPYWewcdh67gF3ELmGXsSvYVewadh27gd3EbmG3sTvYXewedh97gD3EHmGPsSfYU+wZ9hx7gb3EXmGvsTfYW+wd9h77gH3EPmGfsS/YVwzDcIzASIzCaIzBWIzDeEzAREzCZEzBVEzDdMzATMzCbMzBXMzDfCzAQizCAAYxhMXYN+w79gP7if3CfmN/sL/YPywBT4QnxpPgSfFkeHI8BZ4ST4WnxtPgafF0eHo8A54Rz4RnxrPgWfFseHY8B54Tz4X/h+fG8+B58Xx4frwAXhAvhBfGi+BF8WJ4cbwEXhIvhZfGy+Bl8XJ4ebwCXhGvhFfGq+BV8Wp4dbwGXhOvhdfG6+B18Xp4fbwB3hBvhDfGm+BN8WZ4c7wF3hJvhbfG2+Bt8XZ4e7wD3hHvhHfGu+Bd8W54d7wH3hPvhffG++B98X54f3wAPhAfhA/Gh+BD8WH4cHwEPhIfhY/Gx+Bj8XH4eHwCPhGfhE/Gp+BT8Wn4dHwGPhOfhc/G5+Bz8Xn4fHwBvhBfhC/Gl+BL8WX4cnwFvhJfha/G1+Br8XX4enwDvhHfhG/Gt+Bb8W34dnwHvhPfhe/G9+B78X34fvwAfhA/hB/Gj+BH8WP4cfwEfhI/hZ/Gz+Bn8XP4efwCfhG/hF/Gr+BX8Wv4dfwGfhO/hd/G7+B38Xv4ffwB/hB/hD/Gn+BP8Wf4c/wF/hJ/hb/G3+Bv8Xf4e/wD/hH/hH/Gv+BfcQzHcQIncQqncQZncQ7ncQEXcQmXcQVXcQ3XcQM3cQu3cQd3cQ/38QAP8QgHOMQRHuPf8O/4D/wn/gv/jf/B/+L/8AQiEZGYSEIkJZIRyYkUREoiFZGaSEOkJdIR6YkMREYiE5GZyEJkJbIR2YkcRE4iF/EfkZvIQ+Ql8hH5iQJEQaIQUZgoQhQlihHFiRJESaIUUZooQ5QlyhHliQpERaISUZmoQlQlqhHViRpETaIWUZuoQ9Ql6hH1iQZEQ6IR0ZhoQjQlmhHNiRZES6IV0ZpoQ7Ql2hHtiQ5ER6IT0ZnoQnQluhHdiR5ET6IX0ZvoQ/Ql+hH9iQHEQGIQMZgYQgwlhhHDiRHESGIUMZoYQ4wlxhHjiQnERGISMZmYQkwlphHTiRnETGIWMZuYQ8wl5hHziQXEQmIRsZhYQiwllhHLiRXESmIVsZpYQ6wl1hHriQ3ERmITsZnYQmwlthHbiR3ETmIXsZvYQ+wl9hH7iQPEQeIQcZg4QhwljhHHiRPESeIUcZo4Q5wlzhHniQvEReIScZm4QlwlrhHXiRvETeIWcZu4Q9wl7hH3iQfEQ+IR8Zh4QjwlnhHPiRfES+IV8Zp4Q7wl3hHviQ/ER+IT8Zn4QnwlMAInCIIkKIImGIIlOIInBEIkJEImFEIlNEInDMIkLMImHMIlPMInAiIkIgIQkEBETHwjvhM/iJ/EL+I38Yf4S/wjEshEZGIyCZmUTEYmJ1OQKclUZGoyDZmWTEemJzOQGclMZGYyC5mVzEZmJ3OQOclc5H9kbjIPmZfMR+YnC5AFyUJkYbIIWZQsRhYnS5AlyVJkabIMWZYsR5YnK5AVyUpkZbIKWZWsRlYna5A1yVpkbbIOWZesR9YnG5ANyUZkY7IJ2ZRsRjYnW5AtyVZka7IN2ZZsR7YnO5AdyU5kZ7IL2ZXsRnYne5A9yV5kb7IP2ZfsR/YnB5ADyUHkYHIIOZQcRg4nR5AjyVHkaHIMOZYcR44nJ5ATyUnkZHIKOZWcRk4nZ5AzyVnkbHIOOZecR84nF5ALyUXkYnIJuZRcRi4nV5AryVXkanINuZZcR64nN5AbyU3kZnILuZXcRm4nd5A7yV3kbnIPuZfcR+4nD5AHyUPkYfIIeZQ8Rh4nT5AnyVPkafIMeZY8R54nL5AXyUvkZfIKeZW8Rl4nb5A3yVvkbfIOeZe8R94nH5APyUfkY/IJ+ZR8Rj4nX5AvyVfka/IN+ZZ8R74nP5AfyU/kZ/IL+ZXESJwkSJKkSJpkSJbkSJ4USJGUSJlUSJXUSJ00SJO0SJt0SJf0SJ8MyJCMSEBCEpEx+Y38Tv4gf5K/yN/kH/Iv+Y9MoBJRiakkVFIqGZWcSkGlpFJRqak0VFoqHZWeykBlpDJRmaksVFYqG5WdykHlpHJR/1G5qTxUXioflZ8qQBWkClGFqSJUUaoYVZwqQZWkSlGlqTJUWaoc9SShAlWRqkRVpqpQValqVHWqBlWTqkXVpupQdal6VH2qAdWQakQ1pppQTalmVHOqBdWSakW1ptpQbal2VHuqA9WR6kR1prpQXaluVHeqB9WT6kX1pvpQfal+VH9qADWQGkQNpoZQQ6lh1HBqBDWSGkWNpsZQY6lx1HhqAjWRmkRNpqZQU6lp1HRqBjWTmkXNpuZQc6l51HxqAbWQWkQtppZQS6ll1HJqBbWSWkWtptZQa6l11HpqA7WR2kRtprZQW6lt1HZqB7WT2kXtpvZQe6l91H7qAHWQOkQdpo5QR6lj1HHqBHWSOkWdps5QZ6lz1HnqAnWRukRdpq5QV6lr1HXqBnWTukXdpu5Qd6l71H3qAfWQekQ9pp5QT6ln1HPqBfWSekW9pt5Qb6l31HvqA/WR+kR9pr5QXymMwimCIimKoimGYimO4imBEimJkimFUimN0imDMimLsimHcimP8qmACqmIAhSkEBVT36jv1A/qJ/WL+k39of5S/6gEOhGdmE5CJ6WT0cnpFHRKOhWdmk5Dp6XT0enpDHRGOhOdmc5CZ6Wz0dnpHHROOhf9H52bzkPnpfPR+ekCdEG6EF2YLkIXpYvRxekSdEm6FF2aLkOXpcvR5ekKdEW6El2ZrkJXpavR1ekadE26Fl2brkPXpevR9ekGdEO6Ed2YbkI3pZvRzekWdEu6Fd2abkO3pdvR7ekOdEe6E92Z7kJ3pbvR3ekedE+6F92b7kP3pfvR/ekB9EB6ED2YHkIPpYfRw+kR9Eh6FD2aHkOPpcfR4+kJ9ER6Ej2ZnkJPpafR0+kZ9Ex6Fj2bnkPPpefR8+kF9EJ6Eb2YXkIvpZfRy+kV9Ep6Fb2aXkOvpdfR6+kN9EZ6E72Z3kJvpbfR2+kd9E56F72b3kPvpffR++kD9EH6EH2YPkIfpY/Rx+kT9En6FH2aPkOfpc/R5+kL9EX6En2ZvkJfpa/R1+kb9E36Fn2bvkPfpe/R9+kH9EP6Ef2YfkI/pZ/Rz+kX9Ev6Ff2afkO/pd/R7+kP9Ef6E/2Z/kJ/pTEapwmapCmaphmapTmapwVapCVaphVapTVapw3apC3aph3apT3apwM6pCMa0JBGdEx/o7/TP+if9C/6N/2H/kv/oxOYRExiJgmTlEnGJGdSMCmZVExqJg2TlknHpGcyMBmZTExmJguTlcnGZGdyMDmZXMx/TG4mD5OXycfkZwowBZlCTGGmCFOUKcYUZ0owJZlSTGmmDFOWKceUZyowFZlKTGWmClOVqcZUZ2owNZlaTG2mDlOXqcfUZxowDZlGTGOmCdOUacY0Z1owLZlWTGumDdOWace0ZzowHZlOTGemC9OV6cZ0Z3owPZleTG+mD9OX6cf0ZwYwA5lBzGBmCDOUGcYMZ0YwI5lRzGhmDDOWGceMZyYwE5lJzGRmCjOVmcZMZ2YwM5lZzGxmDjOXmcfMZxYwC5lFzGJmCbOUWcYsZ1YwK5lVzGpmDbOWWcesZzYwG5lNzGZmC7OV2cZsZ3YwO5ldzG5mD7OX2cfsZw4wB5lDzGHmCHOUOcYcZ04wJ5lTzGnmDHOWOcecZy4wF5lLzGXmCnOVucZcZ24wN5lbzG3mDnOXucfcZx4wD5lHzGPmCfOUecY8Z14wL5lXzGvmDfOWece8Zz4wH5lPzGfmC/OVwRicIRiSoRiaYRiW4RieERiRkRiZURiV0RidMRiTsRibcRiX8RifCZiQiRjAQAYxMfON+c78YH4yv5jfzB/mL/OPSWATsYnZJGxSNhmbnE3BpmRTsanZNGxaNh2bns3AZmQzsZnZLGxWNhubnc3B5mRzsf+xudk8bF42H5ufLcAWZAuxhdkibFG2GFucLcGWZEuxpdkybFm2HFuercBWZCuxldkqbFW2GludrcHWZGuxtdk6bF22HlufbcA2ZBuxjdkmbFO2GducbcG2ZFuxrdk2bFu2Hdue7cB2ZDuxndkubFe2G9ud7cH2ZHuxvdk+bF+2H9ufHcAOZAexg9kh7FB2GDucHcGOZEexo9kx7Fh2HDuencBOZCexk9kp7FR2GjudncHOZGexs9k57Fx2HjufXcAuZBexi9kl7FJ2GbucXcGuZFexq9k17Fp2Hbue3cBuZDexm9kt7FZ2G7ud3cHuZHexu9k97F52H7ufPcAeZA+xh9kj7FH2GHucPcGeZE+xp9kz7Fn2HHuevcBeZC+xl9kr7FX2GnudvcHeZG+xt9k77F32HnuffcA+ZB+xj9kn7FP2GfucfcG+ZF+xr9k37Fv2Hfue/cB+ZD+xn9kv7FcWY3GWYEmWYmmWYVmWY3lWYEVWYmVWYVVWY3XWYE3WYm3WYV3WY302YEM2YgELWcTG7Df2O/uD/cn+Yn+zf9i/7D82gUvEJeaScEm5ZFxyLgWXkkvFpebScGm5dFx6LgOXkcvEZeaycFm5bFx2LgeXk8vF/cfl5vJwebl8XH6uAFeQK8QV5opwRbliXHGuBFeSK8WV5spwZblyXHmuAleRq8RV5qpwVblqXHWuBleTq8XV5upwdbl6XH2uAdeQa8Q15ppwTblmXHOuBdeSa8W15tpwbbl2XHuuA9eR68R15rpwXbluXHeuB9eT68X15vpwfbl+XH9uADeQG8QN5oZwQ7lh3HBuBDeSG8WN5sZwY7lx3HhuAjeRm8RN5qZwU7lp3HRuBjeTm8XN5uZwc7l53HxuAbeQW8Qt5pZwS7ll3HJuBbeSW8Wt5tZwa7l13HpuA7eR28Rt5rZwW7lt3HZuB7eT28Xt5vZwe7l93H7uAHeQO8Qd5o5wR7lj3HHuBHeSO8Wd5s5wZ7lz3HnuAneRu8Rd5q5wV7lr3HXuBneTu8Xd5u5wd7l73H3uAfeQe8Q95p5wT7ln3HPuBfeSe8W95t5wb7l33HvuA/eR+8R95r5wXzmMwzmCIzmKozmGYzmO4zmBEzmJkzmFUzmN0zmDMzmLszmHczmP87mAC7mIAxzkEBdz37jv3A/uJ/eL+8394f5y/7gEPhGfmE/CJ+WT8cn5FHxKPhWfmk/Dp+XT8en5DHxGPhOfmc/CZ+Wz8dn5HHxOPhf/H5+bz8Pn5fPx+fkCfEG+EF+YL8IX5YvxxfkSfEm+FF+aL8OX5cvx5fkKfEW+El+Zr8JX5avx1fkafE2+Fl+br8PX5evx9fkGfEO+Ed+Yb8I35ZvxzfkWfEu+Fd+ab8O35dvx7fkOfEe+E9+Z78J35bvx3fkefE++F9+b78P35fvx/fkB/EB+ED+YH8IP5Yfxw/kR/Eh+FD+aH8OP5cfx4/kJ/ER+Ej+Zn8JP5afx0/kZ/Ex+Fj+bn8PP5efx8/kF/EJ+Eb+YX8Iv5Zfxy/kV/Ep+Fb+aX8Ov5dfx6/kN/EZ+E7+Z38Jv5bfx2/kd/E5+F7+b38Pv5ffx+/kD/EH+EH+YP8If5Y/xx/kT/En+FH+aP8Of5c/x5/kL/EX+En+Zv8Jf5a/x1/kb/E3+Fn+bv8Pf5e/x9/kH/EP+Ef+Yf8I/5Z/xz/kX/Ev+Ff+af8O/5d/x7/kP/Ef+E/+Z/8J/5TEe5wme5Cme5hme5Tme5wVe5CVe5hVe5TVe5w3e5C3e5h3e5T3e5wM+5CMe8JBHfMx/47/zP/if/C/+N/+H/8v/4xOEREJiIYmQVEgmJBdSCCmFVEJqIY2QVkgnpBcyCBmFTEJmIYuQVcgmZBdyCDmFXMJ/Qm4hj5BXyCfkFwoIBYVCQmGhiFBUKCYUF0oIJYVSQmmhjFBWKCeUFyoIFYVKQmWhilBVqCZUF2oINYVaQm2hjlBXqCfUFxoIDYVGQmOhidBUaCY0F1oILYVWQmuhjdBWaCe0FzoIHYVOQmehi9BV6CZ0F3oIPYVeQm+hj9BX6Cf0FwYIA4VBwmBhiDBUGCYMF0YII4VRwmhhjDBWGCeMFyYIE4VJwmRhijBVmCZMF2YIM4VZwmxhjjBXmCfMFxYIC4VFwmJhibBUWCYsF1YIK4VVwmphjbBWWCesFzYIG4VNwmZhi7BV2CZsF3YIO4Vdwm5hj7BX2CfsFw4IB4VDwmHhiHBUOCYcF04IJ4VTwmnhjHBWOCecFy4IF4VLwmXhinBVuCZcF24IN4Vbwm3hjnBXuCfcFx4ID4VHwmPhifBUeCY8F14IL4VXwmvhjfBWeCe8Fz4IH4VPwmfhi/BVwARcIARSoARaYARW4AReEARRkARZUARV0ARdMARTsARbcARX8ARfCIRQiAQgQAEJsfBN+C78EH4Kv4Tfwh/hr/BPSBATiYnFJGJSMZmYXEwhphRTianFNGJaMZ2YXswgZhQziZnFLGJWMZuYXcwh5hRzif+JucU8Yl4xn5hfLCAWFAuJhcUiYlGxmFhcLCGWFEuJpcUyYlmxnFherCBWFCuJlcUqYlWxmlhdrCHWFGuJtcU6Yl2xnlhfbCA2FBuJjcUmYlOxmdhcbCG2FFuJrcU2Yluxndhe7CB2FDuJncUuYlexm9hd7CH2FHuJvcU+Yl+xn9hfHCAOFAeJg8Uh4lBxmDhcHCGOFEeJo8Ux4lhxnDhenCBOFCeJk8Up4lRxmjhdnCHOFGeJs8U54lxxnjhfXCAuFBeJi8Ul4lJxmbhcXCGuFFeJq8U14lpxnbhe3CBuFDeJm8Ut4lZxm7hd3CHuFHeJu8U94l5xn7hfPCAeFA+Jh8Uj4lHxmHhcPCGeFE+Jp8Uz4lnxnHhevCBeFC+Jl8Ur4lXxmnhdvCHeFG+Jt8U74l3xnnhffCA+FB+Jj8Un4lPxmfhcfCG+FF+Jr8U34lvxnfhe/CB+FD+Jn8Uv4lcRE3GREEmREmmREVmRE3lREEVREmVREVVRE3XREE3REm3REV3RE30xEEMxEoEIRSTG4jfxu/hD/Cn+En+Lf8S/4j8xQUokJZaSSEmlZFJyKYWUUkolpZbSSGmldFJ6KYOUUcokZZaySFmlbFJ2KYeUU8ol/SfllvJIeaV8Un6pgFRQKiQVlopIRaViUnGphFRSKiWVlspIZaVyUnmpglRRqiRVlqpIVaVqUnWphlRTqiXVlupIdaV6Un2pgdRQaiQ1lppITaVmUnOphdRSaiW1ltpIbaV2Unupg9RR6iR1lrpIXaVuUneph9RT6iX1lvpIfaV+Un9pgDRQGiQNloZIQ6Vh0nBphDRSGiWNlsZIY6Vx0nhpgjRRmiRNlqZIU6Vp0nRphjRTmiXNluZIc6V50nxpgbRQWiQtlpZIS6Vl0nJphbRSWiWtltZIa6V10nppg7RR2iRtlrZIW6Vt0nZph7RT2iXtlvZIe6V90n7pgHRQOiQdlo5IR6Vj0nHphHRSOiWdls5IZ6Vz0nnpgnRRuiRdlq5IV6Vr0nXphnRTuiXdlu5Id6V70n3pgfRQeiQ9lp5IT6Vn0nPphfRSeiW9lt5Ib6V30nvpg/RR+iR9lr5IXyVMwiVCIiVKoiVGYiVO4iVBEiVJkiVFUiVN0iVDMiVLsiVHciVP8qVACqVIAhKUkBRL36Tv0g/pp/RL+i39kf5K/6QEOZGcWE4iJ5WTycnlFHJKOZWcWk4jp5XTyenlDHJGOZOcWc4iZ5WzydnlHHJOOZf8n5xbziPnlfPJ+eUCckG5kFxYLiIXlYvJxeUSckm5lFxaLiOXlcvJ5eUKckW5klxZriJXlavJ1eUack25llxbriPXlevJ9eUGckO5kdxYbiI3lZvJzeUWcku5ldxabiO3ldvNT0hIkDvKneTOche5q9xN7i73kHvKveTech+5r9xP7i8PkAfKg+TB8hB5qDxMHi6PkEfKo+TR8hh5rDxOHi9PkCfKk+TJ8hR5qjxNni7PkGfKs+TZ8hx5rjxPni8vkBfKi+TF8hJ5qbxMXi6vkFfKq+TV8hp5rbxOXi9vkDfKm+TN8hZ5q7xN3i7vkHfKu+Td8h55r7xP3i8fkA/Kh+TD8hH5qHxMPi6fkE/Kp+TT8hn5rHxOPi9fkC/Kl+TL8hX5qnxNvi7fkG/Kt+Tb8h35rnxPvi8/kB/Kj+TH8hP5qfxMfi6/kF/Kr+TX8hv5rfxOfi9/kD/Kn+TP8hf5q4zJuEzIpEzJtMzIrMzJvCzIoizJsqzIqqzJumzIpmzJtuzIruzJvhzIoRzJQIYykmP5m/xd/iH/lH/Jv+U/8l/5n5ygJFISK0mUpEoyJbmSQkmppFJSK2mUtEo6Jb2SQcmoZFIyK1mUrEo2JbuSQ8mp5FL+U3IreZS8Sj4lv1JAKagUUgorRZSiSjGluFJCKamUUkorZZSySjmlvFJBqahUUiorVZSqSjWlulJDqanUUmordZS6Sj2lvtJAaag0UhorTZSmSjOludJCaam0UlorbZS2SjulvdJB6ah0UjorXZSuSjelu9JD6an0UnorfZS+Sj+lvzJAGagMUgYrQ5ShyjBluDJCGamMUkYrY5SxyjhlvDJBmahMUiYrU5SpyjRlujJDmanMUmYrc5S5yjxlvrJAWagsUhYrS5SlyjJlubJCWamsUlYra5S1yjplvbJB2ahsSrpZ2aJsVbYp25Udyk5ll7Jb2aPsVfYp+5UDykHlkHJYOaIcVY4px5UTyknllHJaOaOcVc4p55ULykXlknJZuaJcVa4p15Ubyk3llnJbuaPcVe4p95UHykPlkfJYeaI8VZ4pz5UXykvllfJaeaO8Vd4p75UPykflk/JZ+aJ8VTAFVwiFVCiFVhiFVTiFVwRFVCRFVhRFVTRFVwzFVCzFVhzFVTzFVwIlVCIFKFBBSqx8U74rP5Sfyi/lt/JH+av8UxLURGpiNYmaVE2mJldTqCnVVGpqNY2aVk2nplczqBnVTGpmNYuaVc2mZldzqDnVXOp/am41j5pXzafmVwuoBdVCamG1iFpULaYWV0uoJdVSamm1jFpWLaeWVyuoFdVKamW1ilpVraZWV2uoNdVaam21jlpXrafWVxuoDdVGamO1idpUbaY2V1uoLdVWamu1jdpWbae2VzuoHdVOame1i9pV7aZ2V3uoPdVeam+1j9pX7af2VweoA9VB6mB1iDpUHaYOV0eoI9VR6mh1jDpWHaeOVyeoE9VJ6mR1ijpVnaZOV2eoM9VZ6mx1jjpXnafOVxeoC9VF6mJ1ibpUXaYuV1eoK9VV6mp1jbpWXaeuVzeoG9VN6mZ1i7pV3aZuV3eoO9Vd6m51j7pX3afuVw+oB9VD6mH1iHpUPaYeV0+oJ9VT6mn1jHpWPaeeVy+oF9VL6mX1inpVvaZeV2+oN9Vb6m31jnpXvafeVx+oD9VH6mP1ifpUfaY+V1+oL9VX6mv1jfpWfae+Vz+oH9VP6mf1i/pVxVRcJVRSpVRaZVRW5VReFVRRlVRZVVRV1VRdNVRTtVRbdVRX9VRfDdRQjVSgQhWpsfpN/a7+UH+qv9Tf6h/1r/pPTdASaYm1JFpSLZmWXEuhpdRSaam1NFpaLZ2WXsugZdQyaZm1LFpWLZuWXcuh5dRyaf9pubU8Wl4tn5ZfK6AV1ApphbUiWlGtmFZcK6GV1EpppbUyWlmtnFZeq6BV1CpplbUqWlWtmlZdq6HV1GpptbU6Wl2tnlZfa6A11BppjbUmWlOtmdZca6G11FpprbU2WlutndZe66B11DppnbUuWletm9Zd66H11HppvbU+Wl+tn9ZfG6AN1AZpg7Uh2lBtmDZcG6GN1EZpo7Ux2lhtnDZem6BN1CZpk7Up2lRtmjZdm6HN1GZps7U52lxtnjZfW6At1BZpi7Ul2lJtmbZcW6Gt1FZpq7U12lptnbZe26Bt1DZpm7Ut2lZtm7Zd26Ht1HZpu7U92l5tn7ZfO6Ad1A5ph7Uj2lHtmHZcO6Gd1E5pp7Uz2lntnHZeu6Bd1C5pl7Ur2lXtmnZdu6Hd1G5pt7U72l3tnnZfe6A91B5pj7Un2lPtmfZce6G91F5pr7U32lvtnfZe+6B91D5pn7Uv2lcN03CN0EiN0miN0ViN03hN0ERN0mRN0VRN03TN0EzN0mzN0VzN03wt0EIt0oAGNaTF2jftu/ZD+6n90n5rf7S/2j8tQU+kJ9aT6En1ZHpyPYWeUk+lp9bT6Gn1dHp6PYOeUc+kZ9az6Fn1bHp2PYeeU8+lp0xISMij59Xz6fn1AnpBvZBeWC+iF9WL6cX1EnpJvZReWi+jl9XL6eX1CnpFvZJeWa+iV9Wr6dX1GnpNvZZeW6+j19Xr6fX1BnpDvZHeWG+iN9Wb6c31FnpLvZXeWm+jt9Xb6e31DnpHvZPeWe+id9W76d31HnpPvZfeW++j99X76f31AfpAfZA+WB+iD9WH6cP1EfpIfZQ+Wh+jj9XH6eP1CfpEfZI+WZ+iT9Wn6dP1GfpMfZY+W5+jz9Xn6fP1BfpCfZG+WF+iL9WX6cv1FfpKfZW+Wl+jr9XX6ev1DfpGfZO+Wd+ib9W36dv1HfpOfZe+W9+j79X36fv1A/pB/ZB+WD+iH9WP6cf1E/pJ/ZR+Wj+jn9XP6ef1C/pF/ZJ+Wb+iX9Wv6df1G/pN/ZZ+W7+j39Xv6ff1B/pD/ZH+WH+iP9Wf6c/1F/pL/ZX+Wn+jv9Xf6e/1D/pH/ZP+Wf+if9UxHdcJndQpndYZndU5ndcFXdQlXdYVXdU1XdcN3dQt3dYd3dU93dcDPdQjHehQR3qsf9O/6z/0n/ov/bf+R/+r/9MTjERGYiOJkdRIZiQ3UhgpjVRGaiONkdZIZ6Q3MhgZjUxGZiOLkdXIZmQ3chg5jVzGf0ZuI4+R18hn5DcKGAWNQkZho4hR1ChmFDdKGCWNUkZpo4xR1ihnlDcqGBWNSkZlo4pR1ahmVDdqGDWNWkZto45R16hn1DcaGA2NRkZjo4nR1GhmNDdaGC2NVkZro43R1mhntDc6GB2NTkZno4vR1ehmdDd6GD2NXkZvo4/R1+hn9DcGGAONQcZgY4gx1BhmDDdGGCONUcZoY4wx1hhnjDcmGBONScZkY4ox1ZhmTDdmGDONWcZsY44x15hnzDcWGAuNRcZiY4mx1FhmLDdWGCuNVcZqY42x1lhnrDc2GBuNTcZmY4ux1dhmbDd2GDuNXcZuY4+x19hn7DcOGAeNQ8Zh44hx1DhmHDdOGCeNU8Zp44xx1jhnnDcuGBeNS8Zl44px1bhmXDduGDeNW8Zt445x17hn3DceGA+NR8Zj44nx1HhmPDdeGC+NV8Zr443x1nhnvDc+GB+NT8Zn44vx1cAM3CAM0qAM2mAM1uAM3hAM0ZAM2VAM1dAM3TAM07AM23AM1/AM3wiM0IgMYEADGbHxzfhu/DB+Gr+M38Yf46/xz0gwE5mJzSRmUjOZmdxMYaY0U5mpzTRmWjOdmd7MYGY0M5mZzSxmVjObmd3MYeY0c5n/mbnNPGZeM5+Z3yxgFjQLmYXNImZRs5hZ3CxhljRLmaXNMmZZs5xZ3qxgVjQrmZXNKmZVs5pZ3axh1jRrmbXNOmZds55Z32xgNjQbmY3NJmZTs5nZ3GxhtjRbma3NNmZbs53Z3uxgdjQ7mZ3NLmZXs5vZ3exh9jR7mb3NPmZfs5/Z3xxgDjQHmYPNIeZQc5g53BxhjjRHmaPNMeZYc5w53pxgTjQnmZPNKeZUc5o53ZxhzjRnmbPNOeZcc54531xgLjQXmYvNJeZSc5m53FxhrjRXmavNNeZac5253txgbjQ3mZvNLeZWc5u53dxh7jR3mbvNPeZec5+53zxgHjQPmYfNI+ZR85h53DxhnjRPmafNM+ZZ85x53rxgXjQvmZfNK+ZV85p53bxh3jRvmbfNO+Zd855533xgPjQfmY/NJ+ZT85n53HxhvjRfma/NN+Zb85353vxgfjQ/mZ/NL+ZXEzNxkzBJkzJpkzFZkzN5UzBFUzJlUzFVUzN10zBN0zJt0zFd0zN9MzBDMzKBCU1kxuY387v5w/xp/jJ/m3/Mv+Y/M8FKZCW2klhJrWRWciuFldJKZaW20lhprXRWeiuDldHKZGW2slhZrWxWdiuHldPKZf1n5bbyWHmtfFZ+q4BV0CpkFbaKWEWtYlZxq4RV0ipllbbKWGWtclZ5q4JV0apkVbaqWFWtalZ1q4ZV06pl1bbqWHWtelZ9q4HV0GpkNbaaWE2tZlZzq4XV0mpltbbaWG2tdlZ7q4PV0epkdba6WF2tblZ3q4fV0+pl9bb6WH2tflZ/a4A10BpkDbaGWEOTD7OGWyOskdYoa7Q1xhprjbPGWxOsidYka7I1xZpqTbOmWzOsmdYsa7Y1x5przbPmWwushdYia7G1xFpqLbOWWyusldYqa7W1xlprrbPWWxusjdYma7O1xdpqbbO2WzusndYua7e1x9pr7bP2Wwesg9Yh67B1xDpqHbOOWyesk9Yp67R1xjprnbPOWxesi9Yl67J1xbpqXbOuWzesm9Yt67Z1x7pr3bPuWw+sh9Yj67H1xHpqPbOeWy+sl9Yr67X1xnprvbPeWx+sj9Yn67P1xfpqYRZuERZpURZtMRZrcRZvCZZoSZZsKZZqaZZuGZZpWZZtOZZreZZvBVZoRRawoIWs2Ppmfbd+WD+tX9Zv64/11/pnJdiJ7MR2EjupncxObqewU9qp7NR2Gjutnc5Ob2ewM9qZ7Mx2Fjurnc3Obuewc9q57P/s3HYeO6+dz85vF7AL2oXswnYRu6hdzC5ul7BL2qXs0nYZu6xdzi5vV7Ar2pXsynYVu6pdza5u17Br2rXs2nYdu65dz65vN7Ab2o3sxnYTu6ndzG5ut7Bb2q3s1nYbu63dzm5vd7A72p3sznYXu6vdze5u97B72r3s3nYfu6/dz+5vD7AH2oPswfYQe6g9zB5uj7BH2qPs0fYYe6w9zh5vT7An2pPsyfYUe6o9zZ5uz7Bn2rPs2fYce649z55vL7AX2ovsxfYSe6m9zF5ur7BX2qvs1fYae629zl5vb7A32pvszfYWe6u9zd5u77B32rvs3fYee6+9z95vH7AP2ofsw/YR+6h9zD5un7BP2qfs0/YZ+6x9zj5vX7Av2pfsy/YV+6p9zb5u37Bv2rfs2/Yd+659z75vP7Af2o/sx/YT+6n9zH5uv7Bf2q/s1/Yb+639zn5vf7A/2p/sz/YX+6uN2bhN2KRN2bTN2KzN2bwt2KIt2bKt2Kqt2bpt2KZt2bbt2K7t2b4d2KEd2cCGNrJj+5v93f5h/7R/2b/tP/Zf+5+d4CRyEjtJnKROMie5k8JJ6aRyUjtpnLROOie9k8HJ6GRyMjtZnKxONie7k8PJ6eRy/nNyO3mcvE4+J79TwCnoFHIKO0Wcok4xp7hTwinplHJKO2Wcsk45p7xTwanoVHIqO1Wcqk41p7pTw6np1HJqO3Wcuk49p77TwGnoNHIaO02cpk4zp7nTwmnptHJaO22ctk47p73TwenodHI6O12crk43p7vTw+np9HJ6O32cvk4/p78zwBnoDHIGO0Ococ4wZ7gzwhnpjHJGO2Ocsc44Z7wzwZnoTHImO1Ocqc40Z7ozw5npzHJmO3Ocuc48Z76zwFnoLHIWO0ucpc4yZ7mzwlnprHJWO2uctc46Z72zwdnobHI2O1ucrc42Z7uzw9np7HJ2O3ucvc4+Z79zwDnoHHIOO0eco84x57hzwjnpnHJOO2ecs84557xzwbnoXHIuO1ecq84157pzw7np3HJuO3ecu849577zwHnoPHIeO0+cp84z57nzwnnpvHJeO2+ct847573zwfnofHI+O1+crw7m4A7hkA7l0A7jsA7n8I7giI7kyI7iqI7m6I7hmI7l2I7juI7n+E7ghE7kAAc6yImdb85354fz0/nl/Hb+OH+df06Cm8hN7CZxk7rJ3ORuCjelm8pN7aZx07rp3PRuBjejm8nN7GZxs7rZ3OxuDjenm8v9z83t5nHzuvnc/G4Bt6BbyC3sFnGLusXc4m4Jt6Rbyi3tlnHLuuXc8m4Ft6Jbya3sVnGrutXc6m4Nt6Zby63t1nHruvXc+m4Dt6HbyG3sNnGbus3c5m4Lt6Xbym3ttnHbuu3c9m4Ht6Pbye3sdnG7ut3c7m4Pt6fby+3t9nH7uv3c/u4Ad6A7yB3sDnGHusPc4e4Id6Q7yh3tjnHHuuPc8e4Ed6I7yZ3sTnGnutPc6e4Md6Y7y53tznHnuvPc+e4Cd6G7yF3sLnGXusvc5e4Kd6W7yl3trnHXuuvc9e4Gd6O7yd3sbnG3utvc7e4Od6e7y93t7nH3uvvc/e4B96B7yD3sHnGPusfc4+4J96R7yj3tnnHPuufc8+4F96J7yb3sXnGvutfc6+4N96Z7y73t3nHvuvfc++4D96H7yH3sPnGfus/c5+4L96X7yn3tvnHfuu/c9+4H96P7yf3sfnG/upiLu4RLupRLu4zLupzLu4IrupIru4qrupqru4ZrupZru47rup7ru4EbupELXOgiN3a/ud/dH+5P95f72/3j/nX/uQleIi+xl8RL6iXzknspvJReKi+1l8ZL66Xz0nsZvIxeJi+zl8XL6mXzsns5vJxeLu8/L7eXx8vr5fPyewW8gl4hr7BXxCvqFfOKeyW8kl4pr7RXxivrlfPKexW8il4lr7JXxavqVfOqezW8ml4tr7ZXx6vr1fPqew28hl4jr7HXxGvqNfOaey28ll4rr7XXxmvrtfPaex28jl4nr7PXxevqdfO6ez28nl4vr7fXx+vr9fP6ewO8gd4gb7A3xBvqDfOGeyO8kd4ob7Q3xhvrjfPGexO8id4kb7I3xZvqTfOmezO8md4sb7Y3x5vrzfPmewu8hd4ib7G3xFvqLfOWeyu8ld4qb7W3xlvrrfPWexu8jd4mb7O3xdvqbfO2ezu8nd4ub7e3x9vr7fP2ewe8g94h77B3xDvqHfOOeye8k94p77R3xjvrnfPOexe8i94l77J3xbvqXfOueze8m94t77Z3x7vr3fPuew+8h94j77H3xHvqPfOeey+8l94r77X3xnvrvfPeex+8j94n77P3xfvqYR7uER7pUR7tMR7rcR7vCZ7oSZ7sKZ7qaZ7uGZ7pWZ7tOZ7reZ7vBV7oRR7woIe82Pvmffd+eD+9X95v74/31/vnJfiJ/MR+Ej+pn8xP7qfwU/qp/NR+Gj+tn85P72fwM/qZ/Mx+Fj+rn83P7ufwc/q5/P/83H4eP6+fz8/vF/AL+oX8wn4Rv6hfzC/ul/BL+qX80n4Zv6xfzi/vV/Ar+pX8yn4Vv6pfza/u1/Br+rX82n4dv65fz6/vN/Ab+o38xn4Tv6nfzG/ut/Bb+q381n4bv63fzm/vd/A7+p38zn4Xv6vfze/u9/B7+r383n4fv6/fz+/vD/AH+oP8wf4Qf6g/zB/uj/BH+qP80f4Yf6w/zh/vT/An+pP8yf4Uf6o/zZ/uz/Bn+rP82f4cf64/z5/vL/AX+ov8xf4Sf6m/zF/ur/BX+qv81f4af62/zl/vb/A3+pv8zf4Wf6u/zd/u7/B3+rv83f4ef6+/z9/vH/AP+of8w/4R/6h/zD/un/BP+qf80/4Z/6x/zj/vX/Av+pf8y/4V/6p/zb/u3/Bv+rf82/4d/65/z7/vP/Af+o/8x/4T/6n/zH/uv/Bf+q/81/4b/63/zn/vf/A/+p/8z/4X/6uP+bhP+KRP+bTP+KzP+bwv+KIv+bKv+Kqv+bpv+KZv+bbv+K7v+b4f+KEf+cCHPvJj/5v/3f/h//R/+b/9P/5f/5+fECQKEgdJgqRBsiB5kCJIGaQKUgdpgrRBuiB9kCHIGGQKMgdZgqxBtiB7kCPIGeQK/gtyB3mCvEG+IH9QICgYFAoKB0WCokGxoHhQIigZlApKB2WCskG5oHxQIagYVAoqB1WCqkG1oHpQI6gZ1ApqB3WCukG9oH7QIGgYNAoaB02CpkGzoHnQImgZtApaB22CtkG7oH3QIegYdAo6B12CrkG3oHvQI+gZ9Ap6B32CvkG/oH8wIBgYDAoGB0OCocGwYHgwIhgZjApGB2OCscG4YHwwIZgYTAomB1OCqcG0YHowI5gZzApmB3OCucG8YH6wIFgYLAoWB0uCpcGyYHmwIlgZrApWB2uCtcG6YH2wIdgYbAo2B1uCrcG2YHuwI9gZ7Ap2B3uCvcG+YH9wIDgYHAoOB0eCo8Gx4HhwIjgZnApOB2eCs8G54HxwIbgYXAouB1eCq8G14HpwI7gZ3ApuB3eCu8G94H7wIHgYPAoeB0+Cp8Gz4HnwIngZvApeB2+Ct8G74H3wIfgYfAo+B1+CrwEW4AERkAEV0AETsAEX8IEQiIEUyIESqIEW6IERmIEV2IETuIEX+EEQhEEUgAAGKIiDb8H34EfwM/gV/A7+BH+Df0FCmChMHCYJk4bJwuRhijBlmCpMHaYJ04bpwvRhhjBjmCnMHGYJs4bZwuxhjjBnmCv8L8wd5gnzhvnC/GGBsGBYKCwcFgmLhsXC4mGJsGRYKiwdlgnLhuXC8mGFsGJYKawcVgmrhtXC6mGNsGZYK6wd1gnrhvXC+mGDsGHYKGwcNgmbhs3C5mGLsGXYKmwdtgnbhu3C9mGHsGPYKewcdgm7ht3C7mGPsGfYK+wd9gn7hv3C/uGAcGA4KBwcDgmHhsPC4eGIcGQ4KhwdjgnHhuPC8eGEcGI4KZwcTgmnhtPC6eGMcGY4K5wdzgnnhvPC+eGCcGG4KFwcLgmXhsvC5eGKcGW4KlwdrgnXhuvC9eGGcGO4Kdwcbgm3htvC7eGOcGe4K9wd7gn3hvvC/eGB8GB4KDwcHgmPhsfC4+GJ8GR4KjwdngnPhufC8+GF8GJ4KbwcXgmvhtfC6+GN8GZ4K7wd3gnvhvfC++GD8GH4KHwcPgmfhs/C5+GL8GX4Knwdvgnfhu/C9+GH8GP4Kfwcfgm/hliIh0RIhlRIh0zIhlzIh0IohlIoh0qohlqoh0ZohlZoh07ohl7oh0EYhlEIQhiiMA6/hd/DH+HP8Ff4O/wT/g3/hQlRoihxlCRKGiWLkkcpopRRqih1lCZKG6WL0kcZooxRpihzlCXKGmWLskc5opxRrui/KHeUJ8ob5YvyRwWiglGhqHBUJCoaFYuKRyWiklGpqHRUJioblYvKRxWiilGlqHJUJaoaVYuqRzWimlGtqHZUJ6ob1YvqRw2ihlGjqHHUJGoaNYuaRy2illGrqHXUJmobtYvaRx2ijlGnqHPUJeoadYu6Rz2inlGvqHfUJ+ob9Yv6RwOigdGgaHA0JBoaDYuGRyOikdGoaHQ0JhobjYvGRxOiidGkaHI0JZoaTYumRzOimdGsaHY0J5obzYvmRwuihdGiaHG0JFoaLYuWRyuildGqaHW0JlobrYvWRxuijdGmaHO0JdoabYu2RzuindGuaHe0J9ob7Yv2Rweig9Gh6HB0JDoaHYuORyeik9Gp6HR0JjobnYvORxeii9Gl6HJ0JboaXYuuRzeim9Gt6HZ0J7ob3YvuRw+ih9Gj6HH0JHoaPYueRy+il9Gr6HX0JnobvYveRx+ij9Gn6HP0JfoaYREeEREZUREdMREbcREfCZEYSZEcKZEaaZEeGZEZWZEdOZEbeZEfBVEYRRGIYISiOPoWfY9+RD+jX9Hv6E/0N/oXJYBEIDFIApKCZCA5SAFSglQgNUgD0oJ0ID3IADKCTCAzyAKygmwgO8gBcoJc4D+QG+QBeUE+kB8UAAVBIVAYFAFFQTFQHJQAJUEpUBqUAWVBOVAeVAAVQSVQGVQBVUE1UB3UADVBLVAb1AF1QT1QHzQADUEj0Bg0AU1BM9ActAAtQSvQGrQBbUE70B50AB1BJ9AZdAFdQTfQHfQAPUEv0Bv0AX1BP9AfDAADwSAwGAwBQ8EwMByMACPBKDAajAFjwTgwHkwAE8EkMBlMAVPBNDAdzAAzwSwwG8wBc8E8MB8sAAvBIrAYLAFLwTKwHKwAK8EqsBqsAWvBOrAebAAbwSawGWwBW8E2sB3sADvBLrAb7AF7wT6wHxwAB8EhcBgcAUfBMXAcnAAnwSlwGpwBZ8E5cB5cABfBJXAZXAFXwTVwHdwAN8EtcBvcAXfBPXAfPAAPwSPwGDwBT8Ez8By8AC/BK/AavAFvwTvwHnwAH8En8Bl8AV8BBnBAABJQgAYMYAEHeCAAEUhABgpQgQZ0YAATWMAGDnCBB3wQgBBEAAAIEIjBN/Ad/AA/wS/wG/wBf8E/kAATwcQwCUwKk8HkMAVMCVPB1DANTAvTwfQwA8wIM8HMMAvMCrPB7DAHzAlzwf9gbpgH5oX5YH5YABaEhWBhWAQWhcVgcVgCloSlYGlYBpaF5WB5WAFWhJVgZVgFVoXVYHVYA9aEtWBtWAfWhfVgfdgANoSNYGPYBDaFzWBz2AK2hK1ga9gGtoXtYHvYAXaEnWBn2AV2hd1gd9gD9oS9YG/YB/aF/WB/OAAOhIPgYDgEDoXD4HA4Ao6Eo+BoOAaOhePgeDgBToST4GQ4BU6F0+B0OAPOhLPgbDgHzoXz4Hy4AC6Ei+BiuAQuhcvgcrgCroSr4Gq4Bq6F6+B6uAFuhJvgZrgFboXb4Ha4A+6Eu+BuuAfuhfvgfngAHoSH4GF4BB6Fx+BxeAKehKfgaXgGnoXn4Hl4AV6El+BleAVehdfgdXgD3oS34G14B96F9+B9+AA+hI/gY/gEPoXP4HP4Ar6Er+Br+Aa+he/ge/gBfoSf4Gf4BX6FGMQhAUlIQRoykIUc5KEARShBGSpQhRrUoQFNaEEbOtCFHvRhAEMYQQAhRDCG3+B3+AP+hL/gb/gH/oX/YAJKhBKjJCgpSoaSoxQoJUqFUqM0KC1Kh9KjDCgjyoQyoywoK8qGsqMcKCfKhf5DuVEelBflQ/lRAVQQFUKFURFUFBVDxVEJVBKVQqVRGVQWlUPlUQVUEVVClVEVVBVVQ9VRDVQT1UK1UR1UF9VD9VED1BA1Qo1RE9QUNUPNUQvUErVCrVEb1Ba1Q+1RB9QRdUKdURfUFXVD3VEP1BP1Qr1RH9QX9UP90QA0EA1Cg9EQNBQNQ8PRCDQSjUKj0Rg0Fo1D49EENBFNQpPRFDQVTUPT0Qw0E81Cs9EcNBfNQ/PRArQQLUKL0RK0FC1Dy9EKtBKtQqvRGrQWrUPr0Qa0EW1Cm9EWtBVtQ9vRDrQT7UK70R60F+1D+9EBdBAdQofREXQUHUPH0Ql0Ep1Cp9EZdBadQ+fRBXQRXUKX0RV0FV1D19ENdBPdQrfRHXQX3UP30QP0ED1Cj9ET9BQ9Q8/RC/QSvUKv0Rv0Fr1D79EH9BF9Qp/RF/QVYQhHBCIRhWjEIBZxiEcCEpGEZKQgFWlIRwYykYVs5CAXechHAQpRhACCCKEYfUPf0Q/0E/1Cv9Ef9Bf9QwlxojhxnCROGieLk8cp4pRxqjh1nCZOG6eL08cZ4oxxpjhznCXOGmeLs8c54pxxrvi/OHecJ84b54vzxwXignGhuHBcJC4aF4uLxyXiknGpuHRcJi4bl4vLxxXiinGluHJcJa4aV4urxzXimnGtuHZcJ64b14vrxw3ihnGjuHHcJG4aN4ubxy3ilnGruHXcJm4bt4vbxx3ijnGnuHPcJe4ad4u7xz3innGvuHfcJ+4b94v7xwPigfGgeHA8JB4aD4v/Z+euwzUpzkXRfzODu7sM7u5OBAIECB4SdIABBgYGGGzQwd3d3d3d3d3d3aG7urqq+j4bBs4m2bnn5jx3n9zc8/v9sd763q+6qrpWv/X0+mdtUW1ZDaq2qrauBlfbVNtWQ6rtqu2rHaqh1Y7VTtXO1S7VrtWwardq92qPas9qr2rvani1T7VvtV+1f3VAdWB1UHVwdUh1aHVYdXh1RHVkdVR1dHVMdWx1XHV8dUJ1YnVSdXJ1SnVqdVp1enVGdWZ1VnV2dU51bnVedX51QXVhdVF1cXVJdWl1WXV5dUV1ZXVVdXV1TXVtdV11fXVDdWN1U3VzdUt1a3VbdXt1R3VndVd1d3VPdW91X3V/9UD1YPVQ9XD1SPVo9Vj1ePVE9WT1VPV09Uz1bPVc9Xz1QvVi9VL1cvVK9Wr1WvV69Ub1ZvVW9Xb1TvVu9V71fvVB9WH1UfVx9Un1afVZ9Xn1RfVl9VX1dfVN9W31XfV99UNVVXUVqqaKVVulKlel6qpe3afuW/erR6pHrkepR61Hq0evx6jHrMeqx67Hqcetx6vHryeoJ6wnqieuJ6knrSerJ6+nqKesp6qnrqepp63719PV09cz1DPWM9Uz17PUs9az1bPXc9Rz1nPVc9fz1PPW89Xz1wvUC9YL1QvXi9SL1ovVi9dL1EvWS9VL18vUy9a/qX9b/67+fb1cvXz9h3qFesV6pfqP9cr1KvWq9Z/q1erV6zXqNeu16rXrdeo/1+vWf6n/Wq9Xr19vUG9Yb1RvXA+oN6k3rTerB9ab11vUW9aD6q3qrevB9Tb1tvWQert6+3qHemi9Y71TvXO9S71rPazerd693qPes96r3rseXu9T71vvV+9fH1AfWB9UH1wfUh9aH1YfXh9RH1kfVR9dH1MfWx9XH1+fUJ9Yn1SfXJ9Sn1qfVp9en1GfWZ9Vn12fU59bn1efX19QX1hfVF9cX1JfWl9WX15fUV9ZX1VfXV9TX1tfV19f31DfWN9U31zfUt9a31bfXt9R31nfVd9d31PfW99X318/UD9YP1Q/XD9SP1o/Vj9eP1E/WT9VP10/Uz9bP1c/X79Qv1i/VL9cv1K/Wr9Wv16/Ub9Zv1W/Xb9Tv1u/V79ff1B/WH9Uf1x/Un9af1Z/Xn9Rf1l/VX9df1N/W39Xf1//UFd1XYe6qWPd1qnOdam7uhf6hL6hXxgpjBxGCaOG0cLoYYwwZhgrjB3GCeOG8cL4YYIwYZgoTBwmCZOGycLkYYowZZgqTB2mCdOG/mG6MH2YIcwYZgozh1nCrGG2MHuYI8wZ5gpzh3nCvGG+MH9YICwYFgoLh0XComGxsHhYIiwZlgpLh2XCsuE34bfhd+H3YbmwfPhDWCGsGFYKfwwrh1XCquFPYbWwelgjrBnWCmuHdcKfw7rhL+GvYb2wftggbBg2ChuHAWGTsGnYLAwMm4ctwpZhUNgqbB0Gh23CtmFI2C5sH3YIQ8OOYaewc9gl7BqGhd3C7mGPsGfYK+wdhod9wr5hv7B/OCAcGA4KB4dDwqHhsHB4OCIcGY4KR4djwrHhuHB8OCGcGE4KJ4dTwqnhtHB6OCOcGc4KZ4dzwrnhvHB+uCBcGC4KF4dLwqXhsnB5uCJcGa4KV4drwrXhunB9uCHcGG4KN4dbwq3htnB7uCPcGe4Kd4d7wr3hvnB/eCA8GB4KD4dHwqPhsfB4eCI8GZ4KT4dnwrPhufB8eCG8GF4KL4dXwqvhtfB6eCO8Gd4Kb4d3wrvhvfB++CB8GD4KH4dPwqfhs/B5+CJ8Gb4KX4dvwrfhu/B9+CFUoQ4hNCGGNqSQQwld6DV9mr5Nv2akZuSm69PrjdaM3ozRjNmM1YzdjNOM24zXjN9M0EzYTNRM3EzSTNpM1kzeTNFM2UzVTN1M00zb9G+ma6ZvZmhmbGZqZm5maWZtZmtmb+Zo5mzmauZu5mnmbeZr5m8WaBZsFmoWbhZpFm0WaxZvlmiWbJZqlm6WaZZtftP8tvld8/tmuWb55g/NCs2KzUrNH5uVm1WaVZs/Nas1qzdrNGs2azVrN+s0f27Wbf7S/LVZr1m/2aDZsNmo2bgZ0GzSbNps1gxsNm+2aLZsBjVbNVs3g5ttmm2bIc12zfbNDs3QZsdmp2bnZpdm12ZYs1uze7NHs2ezV7N3M7zZp9m32a/ZvzmgObA5qDm4OaQ5tDmsObw5ojmyOao5ujmmObY5rjm+OaE5sTmpObk5pTm1Oa05vTmjObM5qzm7Oac5tzmvOb+5oLmwuai5uLmkubS5rLm8uaK5srmqubq5prm2ua65vrmhubG5qbm5uaW5tbmtub25o7mzuau5u7mnube5r7m/eaB5sHmoebh5pHm0eax5vHmiebJ5qnm6eaZ5tnmueb55oXmxeal5uXmlebV5rXm9eaN5s3mrebt5p3m3ea95v/mg+bD5qPm4+aT5tPms+bz5ovmy+ar5uvmm+bb5rvm++aGpmroJTdPEpm1Sk5vSdE0v9ol9Y784Uhw5jhJHjaPF0eMYccw4Vhw7jhPHjePF8eMEccI4UZw4ThInjZPFyeMUcco4VZw6ThOnjf3jdHH6OEOcMc4UZ46zxFnjbHH2OEecM84V547zxHnjfHH+uEBcMC4UF46LxEXjYnHxuERcMi4Vl47LxGXjb+Jv4+/i7+Nycfn4h7hCXDGuFP8YV46rxFXjn+JqcfW4RlwzrhXXjuvEP8d141/iX+N6cf24QdwwbhQ3jgPiJnHTuFkcGDePW8Qt46C4Vdw6Do7bxG3jkLhd3D7uEIfGHeNOcee4S9w1Dou7xd3jHnHPuFfcOw6P+8R9435x/3hAPDAeFA+Oh8RD42Hx8HhEPDIeFY+Ox8Rj43Hx+HhCPDGeFE+Op8RT42nx9HhGPDOeFc+O58Rz43nx/HhBvDBeFC+Ol8RL42Xx8nhFvDJeFa+O18Rr43Xx+nhDvDHeFG+Ot8Rb423x9nhHvDPeFe+O98R7433x/vhAfDA+FB+Oj8RH42Px8fhEfDI+FZ+Oz8Rn43Px+fhCfDG+FF+Or8RX42vx9fhGfDO+Fd+O78R343vx/fhB/DB+FD+On8RP42fx8/hF/DJ+Fb+O38Rv43fx+/hDrGIdQ2xijG1MMccSu9hr+7R9237tSO3I7SjtqO1o7ejtGO2Y7Vjt2O047bjteO347QTthO1E7cTtJO2k7WTt5O0U7ZTtVO3U7TTttG3/drp2+naGdsZ2pnbmdpZ21na2dvZ2jnbOdq527naedt52vnb+doF2wXahduF2kXbRdrF28XaJdsl2qXbpdpl22fY37W/b37W/b5drl2//0K7Qrtiu1P6xXbldpV21/VO7Wrt6u0a7ZrtWu3a7Tvvndt32L+1f2/Xa9dsN2g3bjdqN2wHtJu2m7WbtwHbzdot2y3ZQu1W7dTu43abdth3Sbtdu3+7QDm13bHdqd253aXdth7W7tbu3e7R7tnu1e7fD233afdv92v3bA9oD24Pag9tD2kPbw9rD2yPaI9uj2qPbY9pj2+Pa49sT2hPbk9qT21PaU9vT2tPbM9oz27Pas9tz2nPb89rz2wvaC9uL2ovbS9pL28vay9sr2ivbq9qr22vaa9vr2uvbG9ob25vam9tb2lvb29rb2zvaO9u72rvbe9p72/va+9sH2gfbh9qH20faR9vH2sfbJ9on26fap9tn2mfb59rn2xfaF9uX2pfbV9pX29fa19s32jfbt9q323fad9v32vfbD9oP24/aj9tP2k/bz9rP2y/aL9uv2q/bb9pv2+/a79sf2qqt29A2bWzbNrW5LW3X9lKf1Df1SyOlkdMoadQ0Who9jZHGTGOlsdM4adw0Xho/TZAmTBOlidMkadI0WZo8TZGmTFOlqdM0adrUP02Xpk8zpBnTTGnmNEuaNc2WZk9zpDnTXGnuNE+aN82XRkkLpAXTQmnhtEhaNC2WFk9LpCXTUmnptExaNv0m/Tb9Lv0+LZeWT39IK6QV00rpj2nltEpaNf0prZZWT2ukNdNaae20TvpzWjf9Jf01rZfWTxukDdNGaeM0IG2SNk2bpYFp87RF2jINSlulrdPgtE3aNg1J26Xt0w5paNox7ZR2TrukXdOwtFvaPe2R9kx7pb3T8LRP2jftl/ZPB6QD00Hp4HRIOjQdlg5PR6Qj01Hp6HRMOjYdl45PJ6QT00np5HRKOjWdlk5PZ6Qz01np7HROOjedl85PF6QL00Xp4nRJujRdli5PV6Qr01Xp6nRNujZdl65PN6Qb003p5nRLujXdlm5Pd6Q7013p7nRPujfdl+5PD6QH00Pp4fRIejQ9lh5PT6Qn01Pp6fRMejY9l55PL6QX00vp5fRKejW9ll5Pb6Q301vp7fROeje9l95PH6QP00fp4/RJ+jR9lj5PX6Qv01fp6/RN+jZ9l75PP6Qq1SmkJsXUppRyKqlLvdwn98398kh55DxKHjWPlkfPY+Qx81h57DxOHjePl8fPE+QJ80R54jxJnjRPlifPU+Qp81R56jxNnjb3z9Pl6fMMecY8U545z5JnzbPl2fMcec48V547z5PnzfPl+fMCecG8UF44L5IXzYvlxfMSecm8VF46L5OXzb/Jv82/y7/Py+Xl8x/yCnnFvFL+Y145r5JXzX/Kq+XV8xp5zbxWXjuvk/+c181/yX/N6+X18wZ5w7xR3jgPyJvkTfNmeWDePG+Rt8yD8lZ56zw4b5O3zUPydnn7vEMemnfMO+Wd8y551zws75Z3z3vkPfNeee88PO+T98375f3zAfnAfFA+OB+SD82H5cPzEfnIfFQ+Oh+Tj83H5ePzCfnEfFI+OZ+ST82n5dPzGfnMfFY+O5+Tz83n5fPzBfnCfFG+OF+SL82X5cvzFfnKfFW+Ol+Tr83X5evzDfnGfFO+Od+Sb8235dvzHfnOfFe+O9+T78335fvzA/nB/FB+OD+SH82P5cfzE/nJ/FR+Oj+Tn83P5efzC/nF/FJ+Ob+SX82v5dfzG/nN/FZ+O7+T383v5ffzB/nD/FH+OH+SP82f5c/zF/nL/FX+On+Tv83f5e/zD7nKdQ65yTG3OeWcS+5yr/QpfUu/MlIZuYxSRi2jldHLGGXMMlYZu4xTxi3jlfHLBGXCMlGZuExSJi2TlcnLFGXKMlWZukxTpi39y3Rl+jJDmbHMVGYus5RZy2xl9jJHmbPMVeYu85R5y3xl/rJAWbAsVBYui5RFy2Jl8bJEWbIsVZYuy5Rly2/Kb8vvyu/LcmX58oeyQlmxrFT+WFYuq5RVy5/KamX1skZZs6xV1i7rlD+Xdctfyl/LemX9skHZsGxUNi4DyiZl07JZGVg2L1uULcugslXZugwu25Rty5CyXdm+7FCGlh3LTmXnskvZtQwru5Xdyx5lz7JX2bsML/uUfct+Zf9yQDmwHFQOLoeUQ8th5fByRDmyHFWOLseUY8tx5fhyQjmxnFROLqeUU8tp5fRyRjmznFXOLueUc8t55fxyQbmwXFQuLpeUS8tl5fJyRbmyXFWuLteUa8t15fpyQ7mx3FRuLreUW8tt5fZyR7mz3FXuLveUe8t95f7yQHmwPFQeLo+UR8tj5fHyRHmyPFWeLs+UZ8tz5fnyQnmxvFReLq+UV8tr5fXyRnmzvFXeLu+Ud8t75f3yQfmwfFQ+Lp+UT8tn5fPyRfmyfFW+Lt+Ub8t35fvyQ6lKXUJpSixtSSWXUrrS6/p0fbt+3UjdyN0o3ajdaN3o3RjdmN1Y3djdON243Xjd+N0E3YTdRN3E3STdpN1k3eTdFN2U3VTd1N003bRd/266bvpuhm7GbqZu5m6WbtZutm72bo5uzm6ubu5unm7ebr5u/m6BbsFuoW7hbpFu0W6xbvFuiW7Jbqlu6W6Zbtn/pevX69bvNug27DbqNu4GdJt0m3abdQO7zbstui27Qd1W3dbd4G6bbttuSLddt323Qze027Hbqdu526XbtRvW7dbt3u3R7dnt1e3dDe/26fbt9uv27w7oDuwO6g7uDukO7Q7rDu+O6I7sjuqO7o7pju2O647vTuhO7E7qTu5O6U7tTutO787ozuzO6s7uzunO7c7rzu8u6C7sLuou7i7pLu0u6y7vruiu7K7qru6u6a7truuu727obuxu6m7ubulu7W7rbu/u6O7s7uru7u7p7u3u6+7vHuge7B7qHu4e6R7tHuse757onuye6p7unume7Z7rnu9e6F7sXupe7l7pXu1e617v3uje7N7q3u7e6d7t3uve7z7oPuw+6j7uPuk+7T7rPu++6L7svuq+7r7pvu2+677vfuiqru5C13Sxa7vU5a50XdcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/xfIrrrzcvL1+v3zu0+vTW7TXp3dyn16vN9L/6Pdz8+ee4/V6vY1/bE32488Vfm4te9Gcg+PLff5RHOW/WkSfv0/N2+v1tvxl/L69lX5s9emN/GNu5P/pPL3tRgw0+Kfw87wj9Zuxt0pv+d5aIz4PH7H2Pr1lf7WQpUfEZX9OfN3vv4zjL/PTzlz9q3H6/d39/DLOeD+F/r1fx/H79P0xdl3X/Vdb9N/j79fJ/7f9s8/ZaL1fx18/Z/3+Yf2v+zf1329EdfT9T8P/d9f/dr+M37e3xj9b/+P9eh9+nne0X+p/ld6g3g69HUbk/9E58I/29W/jdH26/7Sv/y76/qsXwL9U37+r/77/N/Xf99+p/n9Z/E/xP9f/yr0hvS16y/cG9Qb3Bo7I/6P6X2ZE/KX+/2bcn+N0y/50kfrn38ff13+/EfX/9t/U/ygjzoCfU+ONqJef63/e/8X6//V7fp/eav90nf/az+OP2m/G3jq9Ib3BvZ162/QG/jju8F/m6dvb7JcZRxr+H/fx898DE/347YIjKmOi3ll9Juj1+WmWkScYcf2PuZ86jPwf7+/9+/Z+1edvv+uNOCvn/WX+kXoTjGgN7Q3r7dbbujegN/jH0+jn95H/OPtm/aX/yL2xftnpEb+nEXc+/Jf8ZL+8D072//gcGul/3oX/Hxvpx+cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/6wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8k4YO223rAYMHD9xBQ0ND45fGv/pkAgAA/t/2P176/9UrAQAAAAAAAAAAAAAAAAAAgP9z/e/4d2L/6nsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODf32drHL3qWsuv2b9///69vqONSIZf9xneG97rxv2pPdKIXDciVr1er0+v11t9xWPXOvKCUxf7j9w40965/R6XT3/3jmOuc/04t43ae2K8DT/7ev73n5jkick/K2ttOWho/0FD+287ZMf+A/pvMmTIjgM2GTyw/2aDhm49d//VBg8cMHRg/0HbDh24w6++3nzwkO22G9Z/wLabjT3GdjsMHDq0/4Bth/XfeuCw/jsO6b/jDsP6D9hiwKBt+88999z9xx7jf9fe/ftb+9L/KwAA//9puyij") r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$P9_RWSTAT(r0, &(0x7f00000001c0)={0x7, 0x7f, 0x2}, 0x7) ftruncate(r0, 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x11f, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffff00000200", "b900000000fffffffff2060000000000000200", [0x4]}) write$binfmt_script(r0, &(0x7f0000005440), 0x4) 16m42.174861141s ago: executing program 0 (id=688): io_setup(0x3f, &(0x7f0000000140)=0x0) timerfd_create(0x0, 0x0) io_submit(r0, 0x0, &(0x7f0000000500)) 16m41.612022678s ago: executing program 0 (id=693): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x60, 0x2007, @fd, 0x3, 0x0, 0x7, 0x9, 0x1, {0x3}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 16m41.505045816s ago: executing program 32 (id=693): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x60, 0x2007, @fd, 0x3, 0x0, 0x7, 0x9, 0x1, {0x3}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 14m41.124467338s ago: executing program 5 (id=1212): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f00000001c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f00000004c0)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 14m37.892327876s ago: executing program 5 (id=1223): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, r2, 0x301, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) 14m35.114434955s ago: executing program 5 (id=1246): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4880}, 0x20000000) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg$RDMA_NLDEV_CMD_GET(r0, 0x0, 0x400d0) 14m34.665811026s ago: executing program 5 (id=1251): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) 14m31.642907462s ago: executing program 5 (id=1263): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21081e, &(0x7f0000000200), 0x1, 0x4fa, &(0x7f00000005c0)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14m31.356156256s ago: executing program 5 (id=1265): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20022, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000240)) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x5845, 0x0, 0x0, 0x0, 0x22) 14m26.169293404s ago: executing program 3 (id=1282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) 14m25.150262212s ago: executing program 3 (id=1287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./bus\x00', 0x82, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172645f756e69743d626c6f636b2c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00e0729acf15d6a98e9f"], 0x1, 0x1059a, &(0x7f0000020c40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 14m21.035546289s ago: executing program 3 (id=1298): socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 14m17.162788939s ago: executing program 3 (id=1307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 14m17.045637708s ago: executing program 3 (id=1308): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21081e, &(0x7f0000000200), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") chroot(0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14m16.693486528s ago: executing program 3 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e3, &(0x7f0000000100)) 14m16.083038258s ago: executing program 33 (id=1265): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20022, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000240)) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x5845, 0x0, 0x0, 0x0, 0x22) 14m1.23926658s ago: executing program 34 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e3, &(0x7f0000000100)) 4m50.520940667s ago: executing program 2 (id=3309): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecomp\a\x00e,decompnsd=\x00'/36, @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000100), 0x2) preadv(r3, &(0x7f00000003c0), 0x0, 0x0, 0xfffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000680)={'crc32c-intel\x00'}}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@bsdgroups}, {@dax_always}, {@bsdgroups}, {@oldalloc}, {@dax_never}]}, 0x2, 0x461, &(0x7f0000000440)="$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") 4m48.327435265s ago: executing program 2 (id=3316): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16f282, 0x94) 4m47.558726467s ago: executing program 2 (id=3320): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bd"], 0x0) 4m46.170818599s ago: executing program 2 (id=3326): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3804c82, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) flistxattr(r0, 0x0, 0x0) 4m45.490474761s ago: executing program 2 (id=3329): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0xfffffffffffffe4d) socket$packet(0x11, 0x2, 0x300) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x41) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r0, 0x4, 0x80000000, 0x4}) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$FUSE(r2, &(0x7f0000002ac0)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0xbb5f}}) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000200)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="160829bd00000000000800d500", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8810) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @local, @val={@val, {0x806}}, {@mpls_mc={0x8848, {[], @ipv6=@generic={0x0, 0x6, '\x00 \x00', 0x0, 0x0, 0x0, @empty, @mcast2}}}}}, 0x0) 4m44.853798405s ago: executing program 2 (id=3333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x0, @desc3}) chdir(&(0x7f0000000000)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffc, 0x2) getdents(r2, 0x0, 0x58) 4m44.460500083s ago: executing program 35 (id=3333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x0, @desc3}) chdir(&(0x7f0000000000)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffc, 0x2) getdents(r2, 0x0, 0x58) 2m26.752747986s ago: executing program 4 (id=3886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, 0x1, 0x9, 0x583, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x80) 2m26.550910858s ago: executing program 4 (id=3888): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000012000100000000000000000010"], 0x2c}], 0x1}, 0x0) 2m26.54017993s ago: executing program 4 (id=3889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m22.915522461s ago: executing program 4 (id=3907): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000)={[{@noblock_validity}, {@grpjquota}, {@usrquota}, {@nogrpid}, {@discard}, {@lazytime}]}, 0x1, 0x562, &(0x7f0000000180)="$eJzs3d9rXFkdAPDvncykSRtN1H1YhV2Lu9Au2kyzdXeDyLaC+LagrIJvNabTEDrJlMxk24RFUvwDBBFd8EWffBH8AwTpg++KsOC+iytK0a6C+6B7l/tjmu10ppl2M5ky+XzgzP117v2eM5OcOfeem9wAjq3TEXEpIqYi4oWImC/XV8oUe0XK8r13983VLCWRpq//M4mkXJdlS8qUOVXuNlNM+mrv7F5baTYbW+VyvbNxvd7e2T23vrGy1lhrbF64sPTy8ivLLy2fP5R6ZvV69et/++mPfvWNV3/3pRt/ufyPsz/IyjtXbu/W47AV70ktey/uqUbE1iiCjcFUWZ9adF8AAHiSZX38T0fEF/L+/3xM5b25/rK+7HTPMgAAAPDkSy/Oxf+SiBQAAACYWJX8HtiksljeCzAXlcriYnEP71NxstJstTtfvNra3rxS3Cu7ELXK1fVm43zE6fliOcmWl+5dUSiWX8y3ZSm57x7gn8zP5tsXV1vNK+O44AEAAADH0Kme8///zBfn/wAAAMCEWRh3AQAAAICRc/4PAAAAk+8xzv+nR1EOAAAAYCS++dprWUq7z7++8sbO9rXWG+euNNrXFje2VxdXW1vXF9darbVmeiJi46DjNVut61+Oze2b9U6j3am3d3Yvb7S2NzuX1+97BDYAAABwhD71+dvvJBGx95XZPEV3bH9qwA7+VgAmRmXIfGn28u5oywIcrUFf88Dkqz58s9t8YYLVikky7nIA43NQAzAzKMcfR1EaAABgFM589vY7afLg+H91/9oAMKGGHf8HJs+A8f90/qgLAhy5A8b/gQlWcwcgHHsHj/8PUIz/Xzo4QpoeeCwAAGCk5vKUVBbLscC5qLyfFmIhasnV9WbjfER8MiL+PF87kS0v5Xsm/mgAAAAAAAAAAAAAAAAAAAAAAAAAAIaUpkmkj6H6WHsBAAAA4xBR+XtSPv/rzPzzc73XB6aT9/NHAX+QpumNn7/+s5srnc7WUrb+X/n66YjovFWuf3EcVzAAAACAru5T/ovz9NqYSwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADApHrv7pur3XSUce98LSIW+sWvxkw+nYlaRJz8dxLVj+yXRMTUIcTfuxURT/eLn2TFioWyFL3xKxExm5fiMOJXHxb/mTRN+8Y/9bGjw/F2O2t/Lj3w+z+9n6P/73+1SBc/bvzB7V/lXvs31Ru/WrR/nxgyxufe/k39I4vf2Z89UWyv9m//uvGTAe3vc/2CVR9c9b1v7+4OKlv6y4gzfb9/kvti1Tsb1+vtnd1z6xsra421xuaFC0svL7+y/NLy+frV9WajfO0b48fP/PaDQfHv/D7iZBm/+6Gn5RfLQjH5aln/ld76P5/N1AYded//37559zPFbK3nEHHnVsTZ5/p//k/n077v/y/+m+by74Fs+8pOedC94v2MiNPdzM/++k/PDqz/rZly7tE//7MHVz33wrd++NchswIAR6C9s3ttpdlsbI1y5vs3IppvpWk63F5Zr3T4EEnEXu+mrAN3yLWYzTpZ/Tf1jxXDHvmpgUV9dzZi9J/OY81cfJTM6YlH+mFL9p6ACh7jmen8B/IP3x132wQAAByu/d7/uEsCAAAAAAAAAAAAAAAAAAAAx9dR/F+x3ph746kqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBDfRgAAP//IjPXEA==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xf0, 0x0) 2m22.348906089s ago: executing program 4 (id=3911): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000012000100000000000000000010"], 0x2c}], 0x1}, 0x0) 2m21.714270154s ago: executing program 4 (id=3917): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m21.571051492s ago: executing program 36 (id=3917): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 14.435161616s ago: executing program 7 (id=4415): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r1}, {r1, 0x4004}], 0x2, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 13.445077944s ago: executing program 7 (id=4418): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47", 0x52}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804", 0x69}], 0x2}}], 0x1, 0xc0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 12.995669096s ago: executing program 7 (id=4422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffd) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000dfff0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r4, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r4, 0x0, 0x20000000}, 0x20) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$update(0x2, r5, 0x0, 0x0) getpid() socket(0x1, 0x5, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x4) setxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000340)={0x0, 0xfb, 0xaa, 0x4, 0x7, "1c4df58cbeb7a7e4432300a4048d34f5", "368dd666b0e1a2f79c0468eae4df1bde33d5ebcce8be3e610bdbec986b50f560e90e263b4b4d73cbe396733d561d562fac471d9d917cb565c36daa5716798e43b0374e6897710d5ffa71aad2113649dc2a9171f69fba7f2f4a937c504f54f5d34caa5b64152e5d04e3d54b8ccb9f17746f60b04a6618f7c2caa49507cdb38a5e9767597aeb28aff832e8aec5ab5f9391f62bc71216"}, 0xaa, 0x0) keyctl$instantiate(0xc, r5, 0x0, 0x0, r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xab49}, {0x6}]}, 0x10) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0xfdef) mount$tmpfs(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 11.632746712s ago: executing program 1 (id=4425): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xffffffffffffff31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x19, 0x2, "0400"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="008037"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 9.753891753s ago: executing program 7 (id=4427): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8.079831584s ago: executing program 8 (id=4430): syz_usb_connect(0x0, 0x47, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904cf0003080662ff09050c02200006060309050710000257ae01020708"], 0x0) 7.171236712s ago: executing program 6 (id=4432): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="68ba25cc1cecdb5f618e37533b49a54a"], 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.64445272s ago: executing program 7 (id=4433): sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000051}, 0x5) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x20000010) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/75, 0x8e, 0x0) 6.369239604s ago: executing program 1 (id=4436): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="260000001200010a000000efffffff"], 0x26}}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xa37, 0xb46c1) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0xc00c5512, &(0x7f0000000040)) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xa38042e7aa735c45, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000408010600024000000000050403003d00005551490d00"/36], 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000325bd7000fcdbdf250800000005000500eb00000018000680140004000000000000000000000000000000000008000300040000000800030004000000"], 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4002) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.192335386s ago: executing program 6 (id=4439): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x26, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0xfffffffe, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) setpgid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000c600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000002140000001000210b001e00010c00060003"], 0x28}, 0x1, 0x0, 0x0, 0x200440dd}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) 4.78141528s ago: executing program 9 (id=4441): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring) 4.728432109s ago: executing program 9 (id=4442): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x7ff, 0x0) open(0x0, 0x14927e, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = gettid() prlimit64(r1, 0xe, &(0x7f0000000280)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) fchdir(r2) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x624c01, 0x180) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xa18402, 0x0, 0x1, 0x0, &(0x7f0000000000)) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mount$cgroup2(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x2000800, &(0x7f00000002c0)=ANY=[@ANYBLOB="66617689b3cf37"]) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0xc01, 0x3, 0x1298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x1200, 0x3c8, 0x3c8, 0x1200, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffff00, 0xfe, 'bond_slave_1\x00', 'netpci0\x00', {0xff}, {}, 0x29, 0x1, 0x6f}, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x2, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x8513, 0x2, [0x7, 0x7, 0x1f, 0x24, 0x2d, 0x1b, 0x2, 0x8, 0x2b, 0x10, 0x38, 0x3, 0x19, 0x3f, 0x23, 0x3], 0x0, 0x3, 0x7}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xfc}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12f8) 3.894729432s ago: executing program 8 (id=4443): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="260000001200010a000000efffffff0080020000"], 0x26}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xa37, 0xb46c1) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0xc00c5512, &(0x7f0000000040)) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xa38042e7aa735c45, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000408010600024000000000050403"], 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4002) 3.797162117s ago: executing program 1 (id=4444): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1200052, &(0x7f00000003c0), 0xff, 0x7cb, &(0x7f0000001640)="$eJzs3d1rW+cZAPDnyJadOdnswWDJrgyDzRAiz5mXbLCLjF2MwQKB7XqJkRWTWbaCJYfYGJIwBrsptKHQQnuT636kd73tx20L/Qvam1JKQto6oSm9KCpHlmI5lmwptuUk/v3gJM+r8x6/5zkf73mlc5ACOLBG038yEcci4sUkYrj+ehIR2VrUH3Fmrd7D1ZV8OiVRrf7z66RW58HqSj6alkkdrheORsQH/4s4ntncbnlpeXaqWCws1MvjlbnL4+Wl5ROX5qZmCjOF+VMTk5MnT//h9ODu5frtx8tH7r70t9++feb7//7y9gsfJnEmjtTnNeexrRb5tDIao/Vtkk034QZ/7bixZ0PSZf1d3K3sQHoo962d5XEshqOvFnWm85oAwNPkWnoRrwIAB0vSweW/zxABAJ4jjc8BHqyu5NOpem1/P4/otXt/iYhDa/k37m+uzemv37M7VLsPOvQg2XC/I4mIkV1ofzQiXn/332+mU3R7HxJgB67fiIgLI6ON/n+9/0k2PbOwpvM797/roM7oY2X9H/TOe+n454+18+6ViGg6/zOPxj/RYvwz2OLcfRKjEQPN5c3nf+bOLjTTVjr++3N2/dm2h03514301Us/rY35ssnFS8VC2rf9LCLGIjuYlie2aGPs/g/3N7zQtx42j/++ufmfN9L20//Xa2Tu9D/W5U5PVaZ2mnfDvRsRv+pvlX/yaP8nbca/5zps4+9/+v9r7eal+af5NqaN+Xf7VFn3qrcifhOt829Itno+8dR47XAYbxwULbzz+atD7dpv3v/plLbfeC/QC+n+H9o6/5Gk+XnNcvdtfHRr+P1287bPv/XxP5D8qxY3Oo+rU5XKwkTEQPKPza+fXF+2UW7UT/Mf+3Xr83+r4z99T3ihw/z773711pPnv7fS/Ke72v/dB7cfzva1a7+z/T9Zi8bqr3TS/3W6gjvZdgAAAAAAAAAAAAAAAAAAAAAAAADQqUxEHIkkk3sUZzK53NpveP8ihjLFUrly/GJpcX46ar+VPRLZTOOrLoebvg91ov59+I3yyTS+vl7+fUT8PCJeHvxJrZzLl4rT+508AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANQdbvP7/6kvB/d77QCAPXNo2xr3Cz1ZEQCgZ7a//gMAzxvXfwA4eLa+/md7th4AQO94/w8AB4/rPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHvs3Nmz6VT9bnUln5anrywtzpaunJgulGdzc4v5XL60cDk3UyrNFAu5fGmuadFPW/29Yql0eTLmF6+OVwrlynh5afn8XGlxvnL+0tzUTOF8IduzzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgc+Wl5dmpYrGwsG3wSQd1Hg8G6q10t5Rgy6A6vLZRn5b12RD0d3FEdRx8ceKzo1vVubkXjbYJqteeiu2898F+9koAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz44fAwAA///ImSD4") openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x44, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) 2.976247324s ago: executing program 9 (id=4445): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x500}], 0x1, &(0x7f0000000180), 0x0, 0x0) 2.884719713s ago: executing program 8 (id=4446): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, 0x0) 2.806722879s ago: executing program 9 (id=4447): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioperm(0x0, 0x2, 0x7e) prctl$PR_SET_DUMPABLE(0x4, 0x1) syslog(0x4, 0xffffffffffffffff, 0x1000000) r1 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa0080c, &(0x7f00000003c0)={[{@noload}]}, 0x0, 0x7c1, &(0x7f0000001780)="$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") mmap(&(0x7f0000794000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x67e9b000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x5cd9c2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x13, r3, 0xb3797000) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x2008000, &(0x7f0000000480)=ANY=[@ANYBLOB="8ba10530f04a435f10203ce48b552624852220b25dc34e9886cc0e823918dabdb6637c537d453db9937504fdc8ec5e2f2b39bf82aa5f951e976f", @ANYBLOB="aacd1d6630d7b44c49df74341c5bd77616f04336e4558973bc74f6f8187fcbd7158fd887e3a9369443f256a16775f8cdfbe3481a5438ab2a8b258a4a33b687501ee3fd519a05f607e785e346bf4951f435f5a6846527092db6f8c7b1a7e6a287782ed75c22267b4759cbf0807429711f5c0e0c98763608cc066e22c73833b634663b26", @ANYBLOB="2e5113abb96490e8baa757031fd3113d8fd231aecab2c455591d3bec0b6d42a1d9572dc5078c0de5a68dc252aeb457f345aaef1744f717c71738086a77f819bf8ec2164ad9d225996868d5440c2a1f1759386c920214f5b07fdeaa34d7cbb895ee45108d8715e8678c9e65c8b76f3f4f2a1537de01264b0f6c5a5083f49b6737a25758553b72788c48c129ab89ff000e7d0b1da439dc5e7e6cfad150a664ab7d70dd127f473015976f8f2a3603f45a042d8c3578e6eb3060b986ee9e6b4dbf79896d68301c5d9ea34afe122934", @ANYBLOB="55ac88cf517af1b04b090000000ec53f9628c15cb14edefde39762fe236b4ce8c60a7c43543970516a02d827011407c1362a6f3ee218574d1d03907f069e233eb8845406027ad215c6cb94b3c1660b0b307d92fda8f7ffffffddad398c29967c9b3a2a2f4e8bcaccaa614de8b11d51221fd15e41511f4946f3ea66f5e4386903f94da6eafe8f943cbc7fb75ab04f9afe9f69e5bc6c21ca487b92ca6050937ae8af3ec55050d716ee8cccf22ea07fbe0f0eac590000000000000000000000002c4a6956a304640a061636c8a834f9bdf9ce332357af4b2a62d0fda693f4f22bc69e7ac38c41e010a61f8de542", @ANYRES16=r1, @ANYRESOCT, @ANYRES32, @ANYRES8=r2, @ANYRES16=r3], 0x0, 0x1c7, &(0x7f0000000dc0)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x13, 0x70a, &(0x7f0000000740)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101002, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40286608, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB="d1848beb5fb54d8524023a3768ee3284ec229874d58b0a1d370a7dc844e3782e35f5ef9ebf1ab38683ca64647c631ff2b42fb8ffdada4b1bb4cb0cbd65286dfad6c17a1b59095ff8c7c54475f14ce600"/92], 0x3c}, 0x1, 0x0, 0x0, 0x404c040}, 0x880) r7 = semget$private(0x0, 0x6, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300"}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0383e04, 0x0) semtimedop(r7, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(r7, &(0x7f0000000040)=[{0x2}, {}], 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@loopback, @in=@private}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getresgid(&(0x7f0000000040), &(0x7f0000000280), &(0x7f00000002c0)) getuid() r9 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) 2.806479905s ago: executing program 6 (id=4448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b40)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_b, @device_a, @from_mac=@broadcast, {0x5, 0x7}}, 0x42, @val={0x8c, 0x10, {0x63b, '\x00', @short="c52c6bdff52c0b61"}}}}]}, 0x4c}}, 0x0) 2.563953625s ago: executing program 8 (id=4449): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="68ba25cc1cecdb5f618e37533b49a54a"], 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.527146035s ago: executing program 6 (id=4450): ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) timer_settime(0x0, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) write(r1, 0x0, 0x0) 2.338578361s ago: executing program 1 (id=4451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}}, 0x4000) 2.222601143s ago: executing program 6 (id=4452): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="260000001200010a000000efffffff0080020000"], 0x26}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xa37, 0xb46c1) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0xc00c5512, &(0x7f0000000040)) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring) 2.112427586s ago: executing program 1 (id=4453): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) alarm(0x6) 1.795219179s ago: executing program 9 (id=4454): mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc240, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'hsr0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x66, 0x0, 0x0, 0x5498, &(0x7f0000000300)}) io_uring_enter(0xffffffffffffffff, 0x48cb, 0x0, 0x12, 0x0, 0x5c) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 1.05954272s ago: executing program 1 (id=4455): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x801000763, 0x183043) pipe2(&(0x7f0000000040), 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xf, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth1_to_team\x00', &(0x7f0000002fc0)=@ethtool_gfeatures}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="22000000360441fc743bced3fa34db6a13493ec3"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000040), 0x0, 0x0, 0x0) r6 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r6) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 1.059274237s ago: executing program 6 (id=4456): faccessat(0xffffffffffffff9c, 0x0, 0xa1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f00000001c0), 0xfe, 0x47a, &(0x7f00000005c0)="$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") 1.059059239s ago: executing program 8 (id=4457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@lli}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 896.708327ms ago: executing program 8 (id=4458): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="260000001200010a000000efffffff0080020000"], 0x26}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xa37, 0xb46c1) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0xc00c5512, &(0x7f0000000040)) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xa38042e7aa735c45, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000408010600024000000000050403"], 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4002) 75.298689ms ago: executing program 9 (id=4459): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x162) 0s ago: executing program 7 (id=4460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): syz.8.3783: corrupted inode contents [ 958.071597][T19926] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.3783: mark_inode_dirty error [ 958.110315][T19926] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #15: comm syz.8.3783: corrupted inode contents [ 958.137229][T19944] program syz.1.3789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 958.183916][T19926] EXT4-fs error (device loop8): ext4_truncate:4240: inode #15: comm syz.8.3783: mark_inode_dirty error [ 958.622618][T19926] EXT4-fs error (device loop8): ext4_evict_inode:267: comm syz.8.3783: couldn't truncate inode 15 (err -117) [ 959.084821][T19956] loop6: detected capacity change from 0 to 1024 [ 959.423058][T19956] 9pnet_fd: Insufficient options for proto=fd [ 959.462487][T18305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.541635][T19962] loop7: detected capacity change from 0 to 512 [ 959.567554][ T29] audit: type=1326 audit(1731075034.080:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 959.596980][ T29] audit: type=1326 audit(1731075034.100:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 959.619970][T19962] ext4: Bad value for 'min_batch_time' [ 959.648016][ T29] audit: type=1326 audit(1731075034.100:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 959.699974][ T29] audit: type=1326 audit(1731075034.100:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 959.724909][ T29] audit: type=1326 audit(1731075034.100:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 959.748618][ T29] audit: type=1326 audit(1731075034.100:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 959.751846][T18585] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 959.771658][ T29] audit: type=1326 audit(1731075034.110:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 959.837558][ T29] audit: type=1326 audit(1731075034.110:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 959.868489][ T29] audit: type=1326 audit(1731075034.110:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 959.960567][T18585] usb 5-1: device descriptor read/64, error -71 [ 959.976203][ T29] audit: type=1326 audit(1731075034.110:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 960.231036][T18585] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 960.425586][T18585] usb 5-1: device descriptor read/64, error -71 [ 960.980530][T18585] usb usb5-port1: attempt power cycle [ 961.241663][T19990] loop6: detected capacity change from 0 to 2048 [ 961.256784][T19990] EXT4-fs: Ignoring removed mblk_io_submit option [ 961.362501][T19990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.365234][T18585] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 961.411445][T18585] usb 5-1: device descriptor read/8, error -71 [ 962.344058][T18585] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 962.369620][T10044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.371016][T18585] usb 5-1: device descriptor read/8, error -71 [ 962.525426][T18585] usb usb5-port1: unable to enumerate USB device [ 962.649219][T20008] loop8: detected capacity change from 0 to 512 [ 962.665089][T20008] ext4: Bad value for 'min_batch_time' [ 962.744502][T20012] loop4: detected capacity change from 0 to 1024 [ 962.756072][T20013] loop6: detected capacity change from 0 to 1024 [ 962.981806][T20024] 9pnet_fd: Insufficient options for proto=fd [ 963.556693][ T5878] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 963.768662][ T5878] usb 9-1: device descriptor read/64, error -71 [ 964.058649][ T5878] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 964.190832][T20043] loop1: detected capacity change from 0 to 512 [ 964.198150][T20043] ext4: Bad value for 'min_batch_time' [ 964.327216][ T5878] usb 9-1: device descriptor read/64, error -71 [ 964.355057][T20050] loop7: detected capacity change from 0 to 128 [ 964.563416][ T5878] usb usb9-port1: attempt power cycle [ 964.948432][ T5878] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 965.014925][ T5878] usb 9-1: device descriptor read/8, error -71 [ 965.348890][ T5878] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 965.405864][ T5878] usb 9-1: device descriptor read/8, error -71 [ 965.537736][ T5878] usb usb9-port1: unable to enumerate USB device [ 974.526465][T12027] Bluetooth: hci0: command 0x0405 tx timeout [ 980.078951][T20060] loop1: detected capacity change from 0 to 8 [ 980.102918][T20058] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3825'. [ 980.109401][T20060] SQUASHFS error: zlib decompression failed, data probably corrupt [ 980.180542][T20060] SQUASHFS error: Failed to read block 0x9b: -5 [ 980.200599][T20060] SQUASHFS error: Unable to read metadata cache entry [99] [ 980.207841][T20060] SQUASHFS error: Unable to read inode 0x127 [ 980.448518][T20060] loop1: detected capacity change from 0 to 512 [ 980.641297][T20060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 980.856298][T20060] ext3: Unknown parameter 'defcontext' [ 980.998089][T20060] loop1: detected capacity change from 0 to 512 [ 981.004936][T20060] EXT4-fs: Ignoring removed nobh option [ 981.097083][T20060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.110051][T20060] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 981.340205][T20060] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3826: bg 0: block 224: padding at end of block bitmap is not set [ 981.355417][T20060] EXT4-fs (loop1): Remounting filesystem read-only [ 981.457007][T16018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.471204][ T3441] __quota_error: 58 callbacks suppressed [ 981.471220][ T3441] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 981.519940][ T3441] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 981.792750][T20098] blktrace: Concurrent blktraces are not allowed on sg0 [ 982.135728][T20067] loop4: detected capacity change from 0 to 65536 [ 982.170657][T20067] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 982.215971][T20067] XFS (loop4): Ending clean mount [ 982.222315][T20067] XFS (loop4): Quotacheck needed: Please wait. [ 982.325574][T20067] XFS (loop4): Quotacheck: Done. [ 983.318075][T16928] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 983.741024][T20134] loop8: detected capacity change from 0 to 8 [ 983.763372][T20134] SQUASHFS error: zlib decompression failed, data probably corrupt [ 983.785350][T20136] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3848'. [ 983.798965][T20134] SQUASHFS error: Failed to read block 0x9b: -5 [ 983.825616][T20134] SQUASHFS error: Unable to read metadata cache entry [99] [ 983.848740][T20134] SQUASHFS error: Unable to read inode 0x127 [ 983.854339][T20138] loop6: detected capacity change from 0 to 256 [ 983.897615][T20134] loop8: detected capacity change from 0 to 512 [ 983.923264][T17760] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 983.936768][T20138] FAT-fs (loop6): Directory bread(block 64) failed [ 983.939999][T20134] EXT4-fs: Ignoring removed nomblk_io_submit option [ 983.950019][T20138] FAT-fs (loop6): Directory bread(block 65) failed [ 983.950151][T20138] FAT-fs (loop6): Directory bread(block 66) failed [ 983.972758][T20138] FAT-fs (loop6): Directory bread(block 67) failed [ 983.979891][T20138] FAT-fs (loop6): Directory bread(block 68) failed [ 983.987414][T20138] FAT-fs (loop6): Directory bread(block 69) failed [ 983.994979][T20138] FAT-fs (loop6): Directory bread(block 70) failed [ 983.999249][T20134] ext3: Unknown parameter 'defcontext' [ 984.002214][T20138] FAT-fs (loop6): Directory bread(block 71) failed [ 984.026218][T20138] FAT-fs (loop6): Directory bread(block 72) failed [ 984.033134][T20138] FAT-fs (loop6): Directory bread(block 73) failed [ 984.053219][T20134] loop8: detected capacity change from 0 to 512 [ 984.059898][T20134] EXT4-fs: Ignoring removed nobh option [ 984.074583][T20134] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.087278][T20134] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 984.227899][T20144] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3847: bg 0: block 224: padding at end of block bitmap is not set [ 984.245153][T20144] EXT4-fs (loop8): Remounting filesystem read-only [ 984.340726][T18305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.351172][ T3441] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 984.368030][ T3441] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 984.400203][T20146] loop6: detected capacity change from 0 to 1024 [ 984.539480][T20149] 9pnet_fd: Insufficient options for proto=fd [ 984.678593][T20150] blktrace: Concurrent blktraces are not allowed on sg0 [ 985.388101][ T29] audit: type=1326 audit(1731075059.853:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20145 comm="syz.6.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 985.834824][ T29] audit: type=1326 audit(1731075059.853:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20145 comm="syz.6.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 985.978391][T20166] loop7: detected capacity change from 0 to 1024 [ 986.011606][ T29] audit: type=1326 audit(1731075059.853:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20145 comm="syz.6.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 986.054007][T20166] hfsplus: Bad value for 'session' [ 986.098146][ T29] audit: type=1326 audit(1731075060.003:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20145 comm="syz.6.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 986.181954][ T29] audit: type=1326 audit(1731075060.003:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20145 comm="syz.6.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 986.332415][ T29] audit: type=1326 audit(1731075060.003:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20145 comm="syz.6.3852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 987.111596][T20198] loop4: detected capacity change from 0 to 16 [ 987.129084][T20198] erofs: (device loop4): mounted with root inode @ nid 36. [ 987.214067][T20200] loop7: detected capacity change from 0 to 512 [ 987.271363][T20200] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.3875: invalid block [ 987.294571][T20200] EXT4-fs (loop7): Remounting filesystem read-only [ 987.317079][T20200] EXT4-fs (loop7): 2 truncates cleaned up [ 987.361519][T20200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.578086][T20216] loop4: detected capacity change from 0 to 512 [ 987.651067][T20216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.684938][T20216] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.735243][T20216] EXT4-fs error (device loop4): ext4_nfs_get_inode:1545: inode #14: comm syz.4.3879: unexpected EA_INODE flag [ 987.778577][T20216] EXT4-fs (loop4): Remounting filesystem read-only [ 987.817267][T17760] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.992132][T20237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3888'. [ 988.193281][T10192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.116305][T18585] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 989.303587][T18585] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 989.352691][T18585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.583134][T18585] usb 2-1: config 0 descriptor?? [ 989.687959][T18585] cp210x 2-1:0.0: cp210x converter detected [ 990.104908][T18585] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 990.560388][T18585] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 990.582866][T18585] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 990.599977][T18585] usb 2-1: cp210x converter now attached to ttyUSB0 [ 990.636323][T18585] usb 2-1: USB disconnect, device number 35 [ 990.746714][T20267] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3899'. [ 991.107552][T18585] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 991.116018][T18585] cp210x 2-1:0.0: device disconnected [ 991.529774][T20270] loop7: detected capacity change from 0 to 65536 [ 991.702267][T20291] loop4: detected capacity change from 0 to 512 [ 991.720940][T20291] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 991.743523][T20270] XFS (loop7): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 991.755261][T20291] EXT4-fs (loop4): orphan cleanup on readonly fs [ 991.762123][T20291] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.3907: bad orphan inode 15 [ 991.772961][T18585] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 991.805096][T20291] ext4_test_bit(bit=14, block=18) = 1 [ 991.810647][T20291] is_bad_inode(inode)=0 [ 991.820811][T20291] NEXT_ORPHAN(inode)=1023 [ 991.823608][T20270] XFS (loop7): Ending clean mount [ 991.834217][T20270] XFS (loop7): Quotacheck needed: Please wait. [ 991.861212][T20291] max_ino=32 [ 991.877437][T20291] i_nlink=0 [ 991.915284][T20291] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.3907: corrupted xattr block 19: e_value size too large [ 991.931476][T20291] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 991.941131][T20270] XFS (loop7): Quotacheck: Done. [ 991.958434][T18585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.958789][T20291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 991.977977][T18585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.001677][T18585] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 992.011010][T18585] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.031563][T18585] usb 7-1: config 0 descriptor?? [ 992.210579][T17760] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /127/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0 [ 992.240340][T17760] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 992.295751][T17760] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 992.607778][T17760] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.695007][T18585] hid-led 0003:1D34:000A.0012: probe with driver hid-led failed with error -71 [ 992.740784][T18585] usb 7-1: USB disconnect, device number 21 [ 992.872035][ T3441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.921002][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.927394][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.075932][ T3441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.237807][T20331] netlink: 'syz.1.3920': attribute type 1 has an invalid length. [ 993.316669][ T3441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.334472][T12027] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 993.349907][T12027] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 993.367214][T12027] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 993.395434][T12027] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 993.403243][T12027] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 993.411076][T12027] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 993.421282][T20335] loop1: detected capacity change from 0 to 1024 [ 993.428424][T20335] hfsplus: Unknown parameter 'nodecomp' [ 993.722054][T20340] loop1: detected capacity change from 0 to 512 [ 993.730765][T20340] EXT4-fs: Ignoring removed oldalloc option [ 993.842317][T20340] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.3921: Parent and EA inode have the same ino 15 [ 993.857679][T20340] EXT4-fs (loop1): 1 orphan inode deleted [ 993.867783][T20340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 994.077724][T20342] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 290: padding at end of block bitmap is not set [ 994.308238][ T3441] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.449648][T20344] loop8: detected capacity change from 0 to 256 [ 994.483673][T16018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.503803][T10192] XFS (loop7): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 994.778755][T20344] FAT-fs (loop8): Directory bread(block 64) failed [ 994.791185][T20344] FAT-fs (loop8): Directory bread(block 65) failed [ 994.797962][T20344] FAT-fs (loop8): Directory bread(block 66) failed [ 994.804876][T20344] FAT-fs (loop8): Directory bread(block 67) failed [ 994.811553][T20344] FAT-fs (loop8): Directory bread(block 68) failed [ 994.828246][T20344] FAT-fs (loop8): Directory bread(block 69) failed [ 994.863394][T20344] FAT-fs (loop8): Directory bread(block 70) failed [ 994.870719][T20344] FAT-fs (loop8): Directory bread(block 71) failed [ 994.903555][T20344] FAT-fs (loop8): Directory bread(block 72) failed [ 994.952810][T20344] FAT-fs (loop8): Directory bread(block 73) failed [ 995.072020][T20332] chnl_net:caif_netlink_parms(): no params data found [ 995.125400][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 995.125418][ T29] audit: type=1804 audit(1731075069.648:419): pid=20344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.3923" name="/newroot/110/bus/bus" dev="loop8" ino=1048709 res=1 errno=0 [ 995.141438][T20364] loop6: detected capacity change from 0 to 8 [ 995.220841][T20344] Invalid ELF header magic: != ELF [ 995.317048][ T3441] bridge_slave_1: left allmulticast mode [ 995.332636][ T3441] bridge_slave_1: left promiscuous mode [ 995.350748][ T3441] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.377677][T20364] SQUASHFS error: zlib decompression failed, data probably corrupt [ 995.420941][T20364] SQUASHFS error: Failed to read block 0x9b: -5 [ 995.464041][ T3441] bridge_slave_0: left allmulticast mode [ 995.472687][T20364] SQUASHFS error: Unable to read metadata cache entry [99] [ 995.483828][T16928] Bluetooth: hci2: command tx timeout [ 995.501811][ T3441] bridge_slave_0: left promiscuous mode [ 995.528594][T20364] SQUASHFS error: Unable to read inode 0x127 [ 995.537525][ T3524] kworker/u8:8: attempt to access beyond end of device [ 995.537525][ T3524] loop8: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 995.577805][ T3441] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.673101][T20364] loop6: detected capacity change from 0 to 512 [ 995.713594][T20364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 995.748778][T20364] ext3: Unknown parameter 'defcontext' [ 997.535717][ T3441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.562142][T16928] Bluetooth: hci2: command tx timeout [ 997.563501][ T3441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 997.595841][ T3441] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 997.612676][ T3441] bond0 (unregistering): Released all slaves [ 997.737804][T20402] loop7: detected capacity change from 0 to 512 [ 997.837688][T20402] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 997.912218][T20402] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 997.924228][T20411] loop1: detected capacity change from 0 to 512 [ 997.947377][T20411] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 997.997397][T20411] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0002] [ 998.006082][T20402] EXT4-fs error (device loop7): ext4_xattr_block_list:768: inode #15: comm syz.7.3937: corrupted xattr block 32: bad e_name length [ 998.010800][T20411] System zones: 1-12 [ 998.026649][T20411] EXT4-fs (loop1): 1 truncate cleaned up [ 998.047582][T20411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.110994][T20402] EXT4-fs (loop7): Remounting filesystem read-only [ 998.133812][T20332] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.172868][T20332] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.180401][T20332] bridge_slave_0: entered allmulticast mode [ 998.219638][T20332] bridge_slave_0: entered promiscuous mode [ 998.229074][T20332] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.236224][T20332] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.243638][T20332] bridge_slave_1: entered allmulticast mode [ 998.259981][T20332] bridge_slave_1: entered promiscuous mode [ 998.288294][T10192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.903044][T20426] loop8: detected capacity change from 0 to 8 [ 999.038349][T20426] SQUASHFS error: zlib decompression failed, data probably corrupt [ 999.071542][T20426] SQUASHFS error: Failed to read block 0x9b: -5 [ 999.087048][T20428] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3943'. [ 999.096354][T20426] SQUASHFS error: Unable to read metadata cache entry [99] [ 999.112581][T16018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.178222][T20426] SQUASHFS error: Unable to read inode 0x127 [ 999.217596][T20332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.290017][T20426] loop8: detected capacity change from 0 to 512 [ 999.336484][T20432] loop6: detected capacity change from 0 to 2048 [ 999.343767][T20426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 999.374554][ T3441] hsr_slave_0: left promiscuous mode [ 999.389466][T20432] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 999.404616][T20426] ext3: Unknown parameter 'defcontext' [ 999.415043][ T3441] hsr_slave_1: left promiscuous mode [ 999.527719][ T3441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.555867][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.603231][ T3441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.627347][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.640143][T16928] Bluetooth: hci2: command tx timeout [ 999.687095][ T3441] veth1_macvtap: left promiscuous mode [ 999.692708][ T3441] veth0_macvtap: left promiscuous mode [ 999.698309][ T3441] veth1_vlan: left promiscuous mode [ 999.704588][ T3441] veth0_vlan: left promiscuous mode [ 1000.961844][ T3441] team0 (unregistering): Port device team_slave_1 removed [ 1001.057949][ T3441] team0 (unregistering): Port device team_slave_0 removed [ 1001.712561][T16928] Bluetooth: hci2: command tx timeout [ 1002.039494][T20332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.071134][T20477] loop8: detected capacity change from 0 to 512 [ 1002.081182][T20477] EXT4-fs: Ignoring removed mblk_io_submit option [ 1002.172556][T20475] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3957'. [ 1002.194428][T20477] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.286943][T18305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.318237][T20486] loop1: detected capacity change from 0 to 8 [ 1002.379423][T20489] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1002.390547][T20332] team0: Port device team_slave_0 added [ 1002.438938][T20332] team0: Port device team_slave_1 added [ 1002.452171][T20486] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1002.470305][T20486] SQUASHFS error: Failed to read block 0x9b: -5 [ 1002.528526][T20486] SQUASHFS error: Unable to read metadata cache entry [99] [ 1002.555133][T20493] loop8: detected capacity change from 0 to 128 [ 1002.558966][T20486] SQUASHFS error: Unable to read inode 0x127 [ 1002.642965][T20486] loop1: detected capacity change from 0 to 512 [ 1002.703180][T20332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.731841][T20332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.758799][T20486] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1002.792773][T20486] ext3: Unknown parameter 'defcontext' [ 1002.885358][T20504] loop6: detected capacity change from 0 to 1024 [ 1002.976553][T20504] EXT4-fs: Ignoring removed bh option [ 1003.019056][T20332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.042721][T20332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.068215][T20332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.090130][T20504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.209880][T10044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.228945][T20332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.545425][T20332] hsr_slave_0: entered promiscuous mode [ 1003.663927][T20332] hsr_slave_1: entered promiscuous mode [ 1003.678196][T20332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1003.693235][T20332] Cannot create hsr debugfs directory [ 1003.966743][T20530] loop7: detected capacity change from 0 to 256 [ 1003.983891][T20530] vfat: Bad value for 'shortname' [ 1003.988164][T20332] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1004.008677][T20332] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1004.025236][T20332] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1004.101213][T20332] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1004.152938][T20530] loop7: detected capacity change from 0 to 1024 [ 1004.223722][T20530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1004.331639][T20332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.406816][ T3632] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1004.474237][T20332] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.502836][T12719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.509987][T12719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.543319][ T3632] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 1004.565503][T12719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.572682][T12719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.575522][ T3632] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1004.575522][ T3632] [ 1004.593731][ T3632] EXT4-fs (loop7): Total free blocks count 0 [ 1004.623999][ T3632] EXT4-fs (loop7): Free/Dirty block details [ 1004.648341][ T3632] EXT4-fs (loop7): free_blocks=68451041280 [ 1004.657379][ T3632] EXT4-fs (loop7): dirty_blocks=64 [ 1004.667359][ T3632] EXT4-fs (loop7): Block reservation details [ 1004.695008][ T3632] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 1004.732848][T10192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.293931][T20574] loop6: detected capacity change from 0 to 8 [ 1005.458036][ T876] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1005.523858][T20332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.630820][ T876] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1005.653207][T20583] loop6: detected capacity change from 0 to 8 [ 1005.655802][ T876] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1005.732385][ T876] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1005.741770][T20583] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1005.775974][ T876] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1005.789407][ T876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.795548][T20583] SQUASHFS error: Failed to read block 0x9b: -5 [ 1005.805627][ T876] usb 8-1: Product: syz [ 1005.814146][ T876] usb 8-1: Manufacturer: syz [ 1005.818843][ T876] usb 8-1: SerialNumber: syz [ 1005.839999][T20583] SQUASHFS error: Unable to read metadata cache entry [99] [ 1005.847209][T20583] SQUASHFS error: Unable to read inode 0x127 [ 1006.006701][T20583] loop6: detected capacity change from 0 to 512 [ 1006.054453][T20583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1006.122135][T20570] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 1006.136949][T20583] ext3: Unknown parameter 'defcontext' [ 1006.170091][T20570] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 1006.308599][T20583] loop6: detected capacity change from 0 to 512 [ 1006.318989][T20583] EXT4-fs: Ignoring removed nobh option [ 1006.371864][T20583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1006.384695][T20583] ext4 filesystem being mounted at /574/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.432454][T20583] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3982: bg 0: block 224: padding at end of block bitmap is not set [ 1006.443537][ T876] usb 8-1: 0:2 : does not exist [ 1006.478576][T20583] EXT4-fs (loop6): Remounting filesystem read-only [ 1006.495244][ T876] usb 8-1: USB disconnect, device number 29 [ 1006.516931][T10044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.521271][T20332] veth0_vlan: entered promiscuous mode [ 1006.598357][T13691] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1006.638038][T13691] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 1006.641161][T20332] veth1_vlan: entered promiscuous mode [ 1006.648794][T13691] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1006.684432][T13691] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1006.692732][T20323] udevd[20323]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1006.786626][T20332] veth0_macvtap: entered promiscuous mode [ 1006.842973][T20332] veth1_macvtap: entered promiscuous mode [ 1006.923296][T20332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.934684][T20332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.944990][T20332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.955798][T20332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.965830][T20332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.976656][T20332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.080023][T20332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.109673][T20332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.133223][T20332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.146069][T20332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.157412][T20332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.178933][T20332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.211457][T20332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.224292][T20332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.249646][T20332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.468891][T20615] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3984'. [ 1008.056612][T20332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.108385][T20332] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.117398][T20332] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.128202][T20332] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.143743][T20332] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.310921][T13691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.340299][T13691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.415389][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.450416][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.778679][T20631] loop9: detected capacity change from 0 to 8 [ 1008.886442][T20631] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1008.924669][T20631] SQUASHFS error: Failed to read block 0x9b: -5 [ 1008.956045][ T29] audit: type=1326 audit(1731075083.485:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20617 comm="syz.6.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7effd7e719 code=0x7fc00000 [ 1008.978410][ C0] vkms_vblank_simulate: vblank timer overrun [ 1008.985739][T20631] SQUASHFS error: Unable to read metadata cache entry [99] [ 1009.022693][T20631] SQUASHFS error: Unable to read inode 0x127 [ 1009.112150][T20642] loop7: detected capacity change from 0 to 512 [ 1009.121936][T20631] loop9: detected capacity change from 0 to 512 [ 1009.130420][T20638] loop1: detected capacity change from 0 to 2048 [ 1009.155515][T20644] loop6: detected capacity change from 0 to 1024 [ 1009.189587][T20631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1009.214964][T20631] ext3: Unknown parameter 'defcontext' [ 1009.240698][T20638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.264724][T20642] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1009.382249][T20638] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.386145][T20642] ext4 filesystem being mounted at /547/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.508450][T20638] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3991: bg 0: block 345: padding at end of block bitmap is not set [ 1009.628565][T16018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.692178][T10192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.900570][T20665] loop6: detected capacity change from 0 to 512 [ 1010.048474][T20665] EXT4-fs error (device loop6): __ext4_fill_super:5499: inode #2: comm syz.6.3996: casefold flag without casefold feature [ 1010.064937][T20665] EXT4-fs (loop6): get root inode failed [ 1010.070863][T20665] EXT4-fs (loop6): mount failed [ 1010.516625][T20696] loop6: detected capacity change from 0 to 8 [ 1010.562706][T20696] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1010.622791][T20696] SQUASHFS error: Failed to read block 0x9b: -5 [ 1010.670239][T20696] SQUASHFS error: Unable to read metadata cache entry [99] [ 1010.686202][T20701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.693671][T20701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.701437][T20696] SQUASHFS error: Unable to read inode 0x127 [ 1010.729769][T20701] bridge0: entered allmulticast mode [ 1010.742067][T20696] loop6: detected capacity change from 0 to 512 [ 1010.801982][T20696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1010.815398][T20703] bridge_slave_1: left allmulticast mode [ 1010.826451][T20703] bridge_slave_1: left promiscuous mode [ 1010.826575][T20696] ext3: Unknown parameter 'defcontext' [ 1010.835269][T20703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.884116][T20696] loop6: detected capacity change from 0 to 512 [ 1010.892587][T20696] EXT4-fs: Ignoring removed nobh option [ 1010.909601][T20703] bridge_slave_0: left allmulticast mode [ 1010.926293][T20703] bridge_slave_0: left promiscuous mode [ 1010.933510][T20703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.956851][T20696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.969515][T20696] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.023706][T20696] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4004: bg 0: block 224: padding at end of block bitmap is not set [ 1011.045617][T20696] EXT4-fs (loop6): Remounting filesystem read-only [ 1011.091915][T20713] loop7: detected capacity change from 0 to 512 [ 1011.115548][T20713] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1011.122717][T20713] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1011.134010][T20713] EXT4-fs (loop7): SIPHASH is not a valid default hash value [ 1011.164892][ T5881] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1011.208046][T10044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.214281][T20715] loop7: detected capacity change from 0 to 512 [ 1011.242892][T20715] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1011.259452][ T1327] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1011.280730][ T1327] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1011.335058][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 1011.343277][T20715] EXT4-fs (loop7): 1 truncate cleaned up [ 1011.356204][ T5881] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1011.363814][T20715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.365162][ T5881] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40 [ 1011.385986][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.394001][ T5881] usb 2-1: Product: syz [ 1011.400573][ T5881] usb 2-1: Manufacturer: syz [ 1011.406008][ T5881] usb 2-1: SerialNumber: syz [ 1011.484544][T16928] Bluetooth: hci5: unexpected event for opcode 0x200b [ 1011.564124][T10192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.639406][T20725] loop6: detected capacity change from 0 to 512 [ 1011.648749][ T5881] usbhid 2-1:1.0: can't add hid device: -71 [ 1011.670012][ T5881] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1011.689479][T20725] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1011.717808][ T5881] usb 2-1: USB disconnect, device number 36 [ 1011.748352][T20725] EXT4-fs (loop6): 1 truncate cleaned up [ 1011.763739][T20725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.137020][T10044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.242247][T20738] TCP: tcp_parse_options: Illegal window scaling value 112 > 14 received [ 1012.851925][T20757] loop9: detected capacity change from 0 to 256 [ 1012.865513][T20753] loop7: detected capacity change from 0 to 1024 [ 1012.893381][T20753] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1012.926196][T20757] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1012.944186][T20753] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1012.979811][T20753] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 1013.155264][T20761] exFAT-fs (loop9): start_clu is invalid cluster(0xffffffff) [ 1013.374134][T16928] Bluetooth: hci5: unexpected event for opcode 0x200b [ 1013.401116][T20761] exFAT-fs (loop9): valid_size(150994954) is greater than size(10) [ 1013.733755][T20778] loop6: detected capacity change from 0 to 128 [ 1013.861356][T20782] loop9: detected capacity change from 0 to 2048 [ 1013.888071][T20778] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1013.917918][T20782] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.969029][T20789] loop8: detected capacity change from 0 to 8 [ 1014.080835][T20782] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1014.101323][T20782] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2049 with max blocks 1 with error 28 [ 1014.115916][T20782] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1014.115916][T20782] [ 1014.135380][T20782] EXT4-fs (loop9): Total free blocks count 0 [ 1014.142453][T20782] EXT4-fs (loop9): Free/Dirty block details [ 1014.151961][T20782] EXT4-fs (loop9): free_blocks=66060288 [ 1014.160680][T20782] EXT4-fs (loop9): dirty_blocks=32 [ 1014.168384][T20782] EXT4-fs (loop9): Block reservation details [ 1014.174581][T20782] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 1014.233448][ T25] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1014.311526][T20332] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.783146][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 1014.792095][ T25] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 1014.806978][ T25] usb 9-1: config 0 has no interface number 0 [ 1014.845778][ T25] usb 9-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 27339, setting to 1024 [ 1014.860320][ T25] usb 9-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1014.913538][T18585] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1014.922095][ T25] usb 9-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1014.933207][ T25] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1014.941428][ T25] usb 9-1: Product: syz [ 1014.948052][ T25] usb 9-1: SerialNumber: syz [ 1014.960280][ T25] usb 9-1: config 0 descriptor?? [ 1014.976036][T20789] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1015.083209][T18585] usb 10-1: Using ep0 maxpacket: 8 [ 1015.108168][T18585] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1015.138285][T18585] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.152496][T18585] usb 10-1: Product: syz [ 1015.157060][T18585] usb 10-1: Manufacturer: syz [ 1015.161770][T18585] usb 10-1: SerialNumber: syz [ 1015.170669][T18585] usb 10-1: config 0 descriptor?? [ 1015.223838][ T25] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1015.234517][ T5881] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1015.242976][ T25] usb 9-1: invalid MIDI in EP 0 [ 1015.370487][ T25] snd-usb-audio 9-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1015.388416][T18585] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1015.389876][ T25] usb 9-1: USB disconnect, device number 6 [ 1015.406277][ T5881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.418207][ T5881] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1015.448900][ T5881] usb 2-1: config 1 has no interface number 0 [ 1015.465541][ T5881] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.491666][ T5881] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1015.511293][ T5881] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1015.526813][ T5881] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1015.536280][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.544464][ T5881] usb 2-1: Product: syz [ 1015.548715][ T5881] usb 2-1: Manufacturer: syz [ 1015.554674][ T5881] usb 2-1: SerialNumber: syz [ 1015.604579][T20069] udevd[20069]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1016.044134][T20860] loop7: detected capacity change from 0 to 1024 [ 1016.109242][T20860] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.153604][T20869] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 1016.214521][ T5881] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 1016.220591][ T5881] cdc_ncm 2-1:1.1: bind() failure [ 1016.252481][T20874] netlink: 'syz.8.4043': attribute type 10 has an invalid length. [ 1016.260454][T20874] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 1016.264773][T10192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.278683][ T5881] usb 2-1: USB disconnect, device number 37 [ 1016.490343][T20881] loop6: detected capacity change from 0 to 4096 [ 1016.518722][T20881] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1016.566272][T20881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1016.657885][T20881] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #15: comm syz.6.4045: corrupted inode contents [ 1016.662233][ T25] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1016.677701][T20881] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #15: comm syz.6.4045: mark_inode_dirty error [ 1016.691230][T20881] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #15: comm syz.6.4045: corrupted inode contents [ 1016.709817][T20881] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.4045: mark_inode_dirty error [ 1016.721762][T20881] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #15: comm syz.6.4045: corrupted inode contents [ 1016.737724][T20881] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.4045: mark_inode_dirty error [ 1016.753341][T20881] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #15: comm syz.6.4045: corrupted inode contents [ 1016.772563][T20881] EXT4-fs error (device loop6): ext4_truncate:4240: inode #15: comm syz.6.4045: mark_inode_dirty error [ 1016.804382][T20881] EXT4-fs error (device loop6): ext4_evict_inode:267: comm syz.6.4045: couldn't truncate inode 15 (err -117) [ 1016.828211][ T25] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1016.841221][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.864724][T10044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.873289][ T25] usb 8-1: config 0 descriptor?? [ 1016.900177][ T25] cp210x 8-1:0.0: cp210x converter detected [ 1017.330344][ T25] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1017.614507][T20900] loop8: detected capacity change from 0 to 512 [ 1017.623674][T20900] EXT4-fs: Ignoring removed mblk_io_submit option [ 1017.630214][T20900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1017.638284][T20900] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1017.650338][ T25] usb 8-1: USB disconnect, device number 30 [ 1017.669408][T20900] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.4052: corrupted in-inode xattr: bad e_name length [ 1017.683696][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1017.705550][ T25] cp210x 8-1:0.0: device disconnected [ 1017.716286][T20900] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.4052: couldn't read orphan inode 15 (err -117) [ 1017.743747][T20900] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1017.851107][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4052'. [ 1017.969207][T18305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.118509][T20911] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 1018.311539][T20915] netlink: 'syz.8.4056': attribute type 10 has an invalid length. [ 1018.319845][T18585] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1018.346618][T18585] usb 10-1: USB disconnect, device number 2 [ 1018.357099][T20915] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 1018.699602][T20925] loop8: detected capacity change from 0 to 512 [ 1018.726862][T20925] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 1019.560181][T20949] loop8: detected capacity change from 0 to 164 [ 1019.945551][T20949] ISOFS: unable to read i-node block [ 1019.959891][T20949] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1020.220524][T15946] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1020.393230][T15946] usb 8-1: Using ep0 maxpacket: 8 [ 1020.410674][T15946] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1020.434305][T15946] usb 8-1: config 212 has an invalid interface number: 35 but max is 0 [ 1020.472718][T15946] usb 8-1: config 212 has no interface number 0 [ 1020.490568][T15946] usb 8-1: config 212 interface 35 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 1023 [ 1020.539118][T15946] usb 8-1: config 212 interface 35 has no altsetting 0 [ 1020.558708][T20976] loop9: detected capacity change from 0 to 512 [ 1020.559367][T15946] usb 8-1: New USB device found, idVendor=bd45, idProduct=6de3, bcdDevice=c3.bb [ 1020.590529][T15946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.621261][T15946] usb 8-1: Product: syz [ 1020.625565][T15946] usb 8-1: Manufacturer: syz [ 1020.635303][T20976] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1020.637396][T15946] usb 8-1: SerialNumber: syz [ 1020.663084][T20956] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1020.668458][T20976] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1020.744037][T20976] EXT4-fs error (device loop9): ext4_add_entry:2444: inode #12: comm syz.9.4073: Directory hole found for htree leaf block 0 [ 1020.760762][ T25] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1020.842014][T20332] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.907176][T15946] usb-storage 8-1:212.35: USB Mass Storage device detected [ 1020.922289][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 1020.971698][ T25] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1020.989896][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.997925][ T25] usb 9-1: Product: syz [ 1021.027385][T15946] usb 8-1: USB disconnect, device number 31 [ 1021.029903][ T25] usb 9-1: Manufacturer: syz [ 1021.067116][ T25] usb 9-1: SerialNumber: syz [ 1021.089932][ T25] usb 9-1: config 0 descriptor?? [ 1021.155170][T20995] loop1: detected capacity change from 0 to 8 [ 1021.186069][T20995] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1021.190382][ T5878] kernel write not supported for file [eventfd] (pid: 5878 comm: kworker/0:5) [ 1021.202895][T20995] SQUASHFS error: Failed to read block 0x9b: -5 [ 1021.202941][T20995] SQUASHFS error: Unable to read metadata cache entry [99] [ 1021.202957][T20995] SQUASHFS error: Unable to read inode 0x127 [ 1021.258724][T20996] loop6: detected capacity change from 0 to 1024 [ 1021.265834][T20996] hfsplus: Unknown parameter 'nodecomp' [ 1021.282151][T20995] loop1: detected capacity change from 0 to 512 [ 1021.478256][ T25] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1021.494668][T20999] loop9: detected capacity change from 0 to 256 [ 1021.502386][T20995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1021.528888][T20999] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1021.552840][T20995] ext3: Unknown parameter 'defcontext' [ 1021.566139][T21001] misc userio: Invalid payload size [ 1021.753183][T21001] loop6: detected capacity change from 0 to 4096 [ 1021.880801][T21001] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1022.505224][T21001] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 1022.833421][T21007] loop1: detected capacity change from 0 to 512 [ 1022.845798][T21007] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 1022.858703][T10044] ntfs3(loop6): ino=1a, ntfs_sync_fs failed, -22. [ 1022.863692][T20999] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1022.866224][T10044] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1022.874935][T20999] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 1022.889796][T20999] UDF-fs: Scanning with blocksize 512 failed [ 1022.912007][T20999] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1022.932184][T20999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1023.111860][T21010] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1023.186217][T21010] kvm: pic: non byte read [ 1023.191805][T21010] kvm: pic: level sensitive irq not supported [ 1023.191999][T21010] kvm: pic: non byte read [ 1023.204875][T21010] kvm: pic: level sensitive irq not supported [ 1023.205020][T21010] kvm: pic: non byte read [ 1023.237429][T21010] kvm: pic: level sensitive irq not supported [ 1023.237594][T21010] kvm: pic: non byte read [ 1023.259212][T21010] kvm: pic: level sensitive irq not supported [ 1023.259359][T21010] kvm: pic: non byte read [ 1023.296750][T21021] loop6: detected capacity change from 0 to 8 [ 1023.318515][T21021] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1023.327083][T21021] SQUASHFS error: Failed to read block 0x9b: -5 [ 1023.348929][T21021] SQUASHFS error: Unable to read metadata cache entry [99] [ 1023.357719][T21021] SQUASHFS error: Unable to read inode 0x127 [ 1023.397354][T21021] loop6: detected capacity change from 0 to 512 [ 1023.411277][T21021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1023.443620][T21021] ext3: Unknown parameter 'defcontext' [ 1023.558756][T15507] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1023.662984][T21025] loop7: detected capacity change from 0 to 1024 [ 1023.711881][T21025] hfsplus: extend alloc file! (8192,65536,366) [ 1023.720237][T15507] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.749288][T15507] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.776874][T21033] loop6: detected capacity change from 0 to 2048 [ 1023.796201][T15507] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1023.817112][T21033] udf: Bad value for 'umask' [ 1023.825761][T15507] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1023.867556][T21038] kvm: pic: non byte write [ 1023.872272][T15507] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.927692][T15507] usb 10-1: config 0 descriptor?? [ 1023.933866][T21040] loop1: detected capacity change from 0 to 8 [ 1023.967283][T21040] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1023.993101][T21040] SQUASHFS error: Failed to read block 0x9b: -5 [ 1024.018594][T21040] SQUASHFS error: Unable to read metadata cache entry [99] [ 1024.046763][T21040] SQUASHFS error: Unable to read inode 0x127 [ 1024.117373][T21040] loop1: detected capacity change from 0 to 512 [ 1024.128449][T21040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1024.170086][T21040] ext3: Unknown parameter 'defcontext' [ 1024.354831][T21054] 9pnet_fd: Insufficient options for proto=fd [ 1024.385567][T15507] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 1024.417570][T15507] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1024.470767][T21059] loop7: detected capacity change from 0 to 256 [ 1024.571137][T21059] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 1024.760432][ T5878] usb 10-1: USB disconnect, device number 3 [ 1025.189608][T12027] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1025.236594][T12027] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1025.272519][ T25] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1025.284127][T12027] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1025.292198][ T25] usb 9-1: USB disconnect, device number 7 [ 1025.304466][T12027] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1025.314820][T12027] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1025.328869][T12027] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1025.448907][T21083] loop9: detected capacity change from 0 to 1024 [ 1025.616564][T21086] loop9: detected capacity change from 0 to 1024 [ 1025.624287][T21086] hfsplus: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 1025.657611][ T29] audit: type=1326 audit(1731075100.183:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21082 comm="syz.9.4105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb24017e719 code=0x0 [ 1025.666274][T21089] loop7: detected capacity change from 0 to 512 [ 1026.179464][T21089] Quota error (device loop7): v2_read_file_info: Free block number 100663296 out of range (1, 6). [ 1026.235861][T21089] EXT4-fs warning (device loop7): ext4_enable_quotas:7143: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1026.255161][T21076] chnl_net:caif_netlink_parms(): no params data found [ 1026.328132][T21089] EXT4-fs (loop7): mount failed [ 1026.373603][T21107] loop8: detected capacity change from 0 to 512 [ 1026.529343][T21107] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1026.695355][T21115] loop9: detected capacity change from 0 to 1024 [ 1027.116211][T21076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.124602][T21076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.187865][T21076] bridge_slave_0: entered allmulticast mode [ 1027.225725][T21076] bridge_slave_0: entered promiscuous mode [ 1027.252288][T18305] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1027.302549][T21076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.342255][T21076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.386780][T12027] Bluetooth: hci3: command tx timeout [ 1027.422451][T21076] bridge_slave_1: entered allmulticast mode [ 1027.468736][T21076] bridge_slave_1: entered promiscuous mode [ 1027.657723][T21076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.683558][T21135] loop7: detected capacity change from 0 to 512 [ 1027.712851][T21076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.762853][T21135] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1027.772481][T21135] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1027.826959][T21135] EXT4-fs (loop7): SIPHASH is not a valid default hash value [ 1027.880428][T21143] loop8: detected capacity change from 0 to 1764 [ 1027.929997][T21143] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1027.980953][T21143] ISOFS: unable to read i-node block [ 1028.011142][T21076] team0: Port device team_slave_0 added [ 1028.035444][T21148] overlayfs: failed to resolve './file1': -2 [ 1028.041831][T21143] isofs_fill_super: get root inode failed [ 1028.058315][T21076] team0: Port device team_slave_1 added [ 1028.764245][T21076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.796741][T21076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.875363][T21076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.889469][T21162] loop8: detected capacity change from 0 to 512 [ 1028.912903][T21159] loop7: detected capacity change from 0 to 512 [ 1028.951029][T21159] EXT4-fs: inline encryption not supported [ 1028.965394][T21162] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1029.009186][T21162] EXT4-fs (loop8): blocks per group (3008) and clusters per group (32768) inconsistent [ 1029.203378][T21076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.214775][T21159] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.310151][T21076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.349093][T21159] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.464054][T12027] Bluetooth: hci3: command tx timeout [ 1029.609048][T21076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.848906][T10192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.873533][T21076] hsr_slave_0: entered promiscuous mode [ 1029.925823][T21076] hsr_slave_1: entered promiscuous mode [ 1029.975585][T21076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1029.983207][T21076] Cannot create hsr debugfs directory [ 1030.426925][T21194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1030.514900][T21194] loop8: detected capacity change from 0 to 256 [ 1030.525057][T21194] x_tables: duplicate underflow at hook 2 [ 1030.709919][T21200] syzkaller0: entered promiscuous mode [ 1030.727485][T21200] syzkaller0: entered allmulticast mode [ 1030.793139][T21203] loop1: detected capacity change from 0 to 2048 [ 1030.817999][T13691] wlan1: Trigger new scan to find an IBSS to join [ 1030.854318][T21203] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1030.920221][ T29] audit: type=1326 audit(1731075105.466:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21202 comm="syz.1.4129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa93b7e719 code=0x0 [ 1031.540414][T12027] Bluetooth: hci3: command tx timeout [ 1031.571132][T21210] overlayfs: failed to resolve './file1': -2 [ 1031.875249][T21211] loop9: detected capacity change from 0 to 512 [ 1032.026617][T21211] EXT4-fs: Ignoring removed oldalloc option [ 1032.198640][T21211] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.4130: Parent and EA inode have the same ino 15 [ 1032.235228][T21211] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.4130: Parent and EA inode have the same ino 15 [ 1032.271402][T21211] EXT4-fs (loop9): 1 orphan inode deleted [ 1032.288911][T21211] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1033.614110][T12027] Bluetooth: hci3: command tx timeout [ 1034.256621][T20332] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.528235][T21229] loop9: detected capacity change from 0 to 8 [ 1034.546705][T21229] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1034.554872][T21229] SQUASHFS error: Failed to read block 0x9b: -5 [ 1034.561198][T21229] SQUASHFS error: Unable to read metadata cache entry [99] [ 1034.571095][T21229] SQUASHFS error: Unable to read inode 0x127 [ 1034.597291][T21229] loop9: detected capacity change from 0 to 512 [ 1034.617304][T21229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1034.654979][T21229] ext3: Unknown parameter 'defcontext' [ 1034.739345][T21231] loop9: detected capacity change from 0 to 8 [ 1034.780106][T21231] cgroup: Unknown subsys name 'cpuset' [ 1035.657642][T21242] loop9: detected capacity change from 0 to 512 [ 1035.793123][ T3487] wlan1: Trigger new scan to find an IBSS to join [ 1035.814867][T21245] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4142'. [ 1035.831589][T21242] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.873773][T21242] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.892168][T21076] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.940906][T21076] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1035.957006][ T29] audit: type=1800 audit(1731075110.508:423): pid=21242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4141" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1036.074266][ T29] audit: type=1800 audit(1731075110.588:424): pid=21254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4141" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 1036.608880][T21076] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.654962][T21076] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1036.753682][T20332] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.417275][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.576770][T21076] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.591349][T21076] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1037.603208][T21280] loop1: detected capacity change from 0 to 1024 [ 1037.610129][T21280] hfsplus: Unknown parameter 'nodecomp' [ 1037.940754][T21076] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.012025][T21076] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1038.268366][T21308] loop8: detected capacity change from 0 to 512 [ 1038.325344][T21308] EXT4-fs: Ignoring removed mblk_io_submit option [ 1038.352601][T21308] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1038.493033][T21308] EXT4-fs (loop8): 1 truncate cleaned up [ 1038.499597][T21308] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.682952][T21076] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1038.719738][T21076] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1038.752352][T18305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.836053][T21324] misc userio: Invalid payload size [ 1038.980389][T21324] loop1: detected capacity change from 0 to 4096 [ 1039.113027][T21324] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1039.382843][T21076] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1039.482664][T21076] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1040.007523][T21324] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 1040.139625][T21076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.186462][T21327] mac80211_hwsim hwsim25 •CTY<: renamed from wlan1 [ 1040.214354][T16018] ntfs3(loop1): ino=1a, ntfs_sync_fs failed, -22. [ 1040.221434][T16018] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1040.251614][T21076] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.268700][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.275874][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.356693][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.363887][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.474390][T21334] binder_alloc: 21333: binder_alloc_buf, no vma [ 1040.752024][T21338] loop9: detected capacity change from 0 to 1024 [ 1040.950860][T21338] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1041.484279][T21338] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.522274][T21349] netlink: 'syz.8.4159': attribute type 10 has an invalid length. [ 1041.568329][T21338] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 1041.790533][T20332] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.625960][T21076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.057567][T21374] loop9: detected capacity change from 0 to 32768 [ 1043.285875][T21374] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4161 (21374) [ 1043.727060][T21383] loop8: detected capacity change from 0 to 2048 [ 1043.898752][T21374] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1043.899062][T21385] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1043.985401][T21374] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 1044.199103][T21076] veth0_vlan: entered promiscuous mode [ 1044.210185][T21076] veth1_vlan: entered promiscuous mode [ 1044.255940][T21076] veth0_macvtap: entered promiscuous mode [ 1044.472054][T21374] BTRFS info (device loop9): rebuilding free space tree [ 1044.575607][T21076] veth1_macvtap: entered promiscuous mode [ 1044.698429][T21374] BTRFS info (device loop9): disabling free space tree [ 1044.705447][T21374] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1044.740858][T21076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.767266][T21076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.800853][T21374] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1044.827117][T21076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.838398][T21076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.848895][T21076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.859533][T21076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.869646][T21076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.880409][T21076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.896870][T21076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.468779][T21415] loop7: detected capacity change from 0 to 1024 [ 1045.475956][T21415] EXT4-fs: inline encryption not supported [ 1045.489607][T21076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.565684][T21415] EXT4-fs: Ignoring removed orlov option [ 1045.577368][T21076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.587825][T21076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.708322][T21415] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1045.715973][T21076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.726031][T21076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.736575][T21076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.746776][T21076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.757274][T21076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.767206][T21076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.778261][T21076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.790615][T21076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.803529][T21076] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.812325][T21076] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.821141][T21076] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.829921][T21076] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.888784][T20332] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1045.910149][T21420] netlink: 'syz.8.4171': attribute type 10 has an invalid length. [ 1045.927118][T21415] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.322940][T12719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.331214][T12719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.338870][T12719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.346701][T12719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.452981][T21439] loop9: detected capacity change from 0 to 128 [ 1046.480893][T21442] loop8: detected capacity change from 0 to 512 [ 1046.488791][T21442] EXT4-fs: Ignoring removed i_version option [ 1046.495470][T21442] EXT4-fs: Ignoring removed nobh option [ 1046.515381][T21442] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1046.525492][T21442] EXT4-fs (loop8): can't mount with commit=14, fs mounted w/o journal [ 1046.526483][T10192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.687936][T21439] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1046.834779][T21447] loop6: detected capacity change from 0 to 1024 [ 1046.902201][T21439] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1046.921519][T21439] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.351732][T21458] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 1048.891291][T21468] loop7: detected capacity change from 0 to 16 [ 1048.899048][T21468] erofs: (device loop7): mounted with root inode @ nid 36. [ 1049.012658][T21470] loop8: detected capacity change from 0 to 128 [ 1049.122010][ T29] audit: type=1800 audit(1731075123.615:425): pid=21470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4183" name="bus" dev="loop8" ino=1048724 res=0 errno=0 [ 1049.644276][T20332] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1049.746148][T18585] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1050.875144][T18585] usb 2-1: Using ep0 maxpacket: 32 [ 1050.963273][T18585] usb 2-1: config 110 has an invalid interface number: 139 but max is 0 [ 1050.982958][T18585] usb 2-1: config 110 has no interface number 0 [ 1051.073959][T18585] usb 2-1: config 110 interface 139 altsetting 4 endpoint 0xF has an invalid bInterval 188, changing to 11 [ 1051.119064][T18585] usb 2-1: config 110 interface 139 altsetting 4 bulk endpoint 0x7 has invalid maxpacket 16 [ 1051.185250][T18585] usb 2-1: config 110 interface 139 has no altsetting 0 [ 1051.196365][T21483] loop7: detected capacity change from 0 to 1024 [ 1051.225639][T18585] usb 2-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=8b.25 [ 1051.936560][T18585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.948035][T18585] usb 2-1: Product: syz [ 1051.952245][T18585] usb 2-1: Manufacturer: syz [ 1051.957925][T18585] usb 2-1: SerialNumber: syz [ 1052.117857][T18585] usb 2-1: can't set config #110, error -71 [ 1052.162910][T18585] usb 2-1: USB disconnect, device number 38 [ 1052.294484][T21488] dccp_close: ABORT with 32 bytes unread [ 1052.440319][T21498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4190'. [ 1052.557830][T21498] loop1: detected capacity change from 0 to 512 [ 1052.630591][T21498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.854127][T21498] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.877679][T21498] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #12: comm syz.1.4190: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1054.189370][T21510] hub 6-0:1.0: USB hub found [ 1054.195862][T21510] hub 6-0:1.0: 1 port detected [ 1054.305751][T16018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.413684][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.419997][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.636862][T21520] loop1: detected capacity change from 0 to 256 [ 1054.656953][T21517] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1054.672047][T21517] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1054.685436][T21517] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1054.703882][T21520] FAT-fs (loop1): Directory bread(block 64) failed [ 1054.732462][T21520] FAT-fs (loop1): Directory bread(block 65) failed [ 1054.739438][T21520] FAT-fs (loop1): Directory bread(block 66) failed [ 1054.787464][T21520] FAT-fs (loop1): Directory bread(block 67) failed [ 1054.844156][T21520] FAT-fs (loop1): Directory bread(block 68) failed [ 1054.909568][T21520] FAT-fs (loop1): Directory bread(block 69) failed [ 1055.208738][T21520] FAT-fs (loop1): Directory bread(block 70) failed [ 1055.308143][T21520] FAT-fs (loop1): Directory bread(block 71) failed [ 1055.473042][T21520] FAT-fs (loop1): Directory bread(block 72) failed [ 1055.678875][T21520] FAT-fs (loop1): Directory bread(block 73) failed [ 1055.731542][T21530] loop8: detected capacity change from 0 to 1024 [ 1055.739649][T21531] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1055.739649][T21531] The task syz.6.4200 (21531) triggered the difference, watch for misbehavior. [ 1057.146063][T21551] netlink: 'syz.8.4208': attribute type 10 has an invalid length. [ 1058.419517][T21568] loop9: detected capacity change from 0 to 64 [ 1059.969288][ T3632] kworker/u8:9: attempt to access beyond end of device [ 1059.969288][ T3632] loop9: rw=1, sector=159, nr_sectors = 1 limit=64 [ 1059.989587][ T3632] Buffer I/O error on dev loop9, logical block 159, lost async page write [ 1059.999489][ T3632] kworker/u8:9: attempt to access beyond end of device [ 1059.999489][ T3632] loop9: rw=1, sector=160, nr_sectors = 1 limit=64 [ 1060.020372][ T3632] Buffer I/O error on dev loop9, logical block 160, lost async page write [ 1060.033555][ T3632] kworker/u8:9: attempt to access beyond end of device [ 1060.033555][ T3632] loop9: rw=1, sector=161, nr_sectors = 1 limit=64 [ 1060.048938][ T3632] Buffer I/O error on dev loop9, logical block 161, lost async page write [ 1060.057986][ T3632] kworker/u8:9: attempt to access beyond end of device [ 1060.057986][ T3632] loop9: rw=1, sector=162, nr_sectors = 1 limit=64 [ 1060.110622][ T3632] Buffer I/O error on dev loop9, logical block 162, lost async page write [ 1060.119235][ T3632] kworker/u8:9: attempt to access beyond end of device [ 1060.119235][ T3632] loop9: rw=1, sector=163, nr_sectors = 1 limit=64 [ 1060.206126][ T3632] Buffer I/O error on dev loop9, logical block 163, lost async page write [ 1060.289305][ T3632] kworker/u8:9: attempt to access beyond end of device [ 1060.289305][ T3632] loop9: rw=1, sector=167, nr_sectors = 1 limit=64 [ 1060.303493][ T3632] Buffer I/O error on dev loop9, logical block 167, lost async page write [ 1060.312238][ T3632] kworker/u8:9: attempt to access beyond end of device [ 1060.312238][ T3632] loop9: rw=1, sector=169, nr_sectors = 1 limit=64 [ 1060.325746][ T3632] Buffer I/O error on dev loop9, logical block 169, lost async page write [ 1061.100268][T21600] loop8: detected capacity change from 0 to 1024 [ 1061.362694][T21600] hfsplus: request for non-existent node 33423360 in B*Tree [ 1061.370570][T21600] hfsplus: request for non-existent node 33423360 in B*Tree [ 1061.431497][ T3632] kworker/u8:9: attempt to access beyond end of device [ 1061.431497][ T3632] loop9: rw=1, sector=171, nr_sectors = 1 limit=64 [ 1061.689623][ T3632] Buffer I/O error on dev loop9, logical block 171, lost async page write [ 1061.698283][ T3632] kworker/u8:9: attempt to access beyond end of device [ 1061.698283][ T3632] loop9: rw=1, sector=172, nr_sectors = 1 limit=64 [ 1062.009133][T21605] loop7: detected capacity change from 0 to 16 [ 1062.089613][T21605] erofs: (device loop7): mounted with root inode @ nid 36. [ 1062.126555][T21611] loop6: detected capacity change from 0 to 1024 [ 1062.188696][T21605] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1062.195586][T21613] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1062.254847][T21605] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -5 in[46, 4050] out[1851] [ 1062.273304][T21605] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1062.309351][T16329] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1062.570979][T16329] usb 10-1: Using ep0 maxpacket: 16 [ 1062.581325][T16329] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.596328][T16329] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.690650][T16329] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1062.959269][ T35] hfsplus: b-tree write err: -5, ino 4 [ 1062.964848][T16329] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1062.964880][T16329] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.970020][T16329] usb 10-1: config 0 descriptor?? [ 1063.934466][T21631] virtio-fs: tag <(null)> not found [ 1064.467444][T16329] microsoft 0003:045E:07DA.0014: unbalanced collection at end of report description [ 1064.477434][T16329] microsoft 0003:045E:07DA.0014: parse failed [ 1064.483854][T16329] microsoft 0003:045E:07DA.0014: probe with driver microsoft failed with error -22 [ 1064.597526][T21639] loop6: detected capacity change from 0 to 128 [ 1064.735448][T17989] usb 10-1: USB disconnect, device number 4 [ 1065.789487][T19453] syz_tun (unregistering): left allmulticast mode [ 1065.796007][T19453] syz_tun (unregistering): left promiscuous mode [ 1065.802685][T19453] bridge0: port 3(syz_tun) entered disabled state [ 1065.846053][T16928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1065.865420][T16928] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1065.885946][T16928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1065.898698][T16928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1065.910742][T16928] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1065.917577][ T5878] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1065.922688][T16928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1066.114880][ T5878] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.126244][ T5878] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1066.189346][ T5878] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1066.460149][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.648263][ T5878] usb 9-1: Product: syz [ 1066.653232][ T5878] usb 9-1: Manufacturer: syz [ 1066.657946][ T5878] usb 9-1: SerialNumber: syz [ 1067.002902][T21641] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1067.042820][T21663] loop1: detected capacity change from 0 to 128 [ 1067.064658][T21644] chnl_net:caif_netlink_parms(): no params data found [ 1067.203933][T21665] loop9: detected capacity change from 0 to 4096 [ 1067.251506][ T29] audit: type=1804 audit(1731075141.814:426): pid=21668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4242" name="/newroot/289/file0/bus" dev="loop1" ino=1048726 res=1 errno=0 [ 1067.568768][ T29] audit: type=1800 audit(1731075141.844:427): pid=21668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4242" name="bus" dev="loop1" ino=1048726 res=0 errno=0 [ 1067.661212][T21644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.720990][T21644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.750586][T21644] bridge_slave_0: entered allmulticast mode [ 1067.780962][T21644] bridge_slave_0: entered promiscuous mode [ 1067.809870][T21644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.833966][T21644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.849452][T21644] bridge_slave_1: entered allmulticast mode [ 1067.864127][T21644] bridge_slave_1: entered promiscuous mode [ 1067.879856][T21641] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1067.946291][T21644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.959390][T21644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.998842][ T5878] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1068.005386][ T5878] cdc_ncm 9-1:1.0: setting rx_max = 16384 [ 1068.067769][T21644] team0: Port device team_slave_0 added [ 1068.076522][T16928] Bluetooth: hci1: command tx timeout [ 1068.089541][T21644] team0: Port device team_slave_1 added [ 1068.196924][T21644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1068.204136][ T5878] cdc_ncm 9-1:1.0: setting tx_max = 88 [ 1068.225303][T21644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1068.251275][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.265952][T21644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1068.326019][ T5878] cdc_ncm 9-1:1.0 eth21: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1068.346280][T21644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1068.354184][T21644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1068.396066][ T5878] usb 9-1: USB disconnect, device number 8 [ 1068.403302][ T5878] cdc_ncm 9-1:1.0 eth21: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 1068.422538][T21644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1068.543767][T21644] hsr_slave_0: entered promiscuous mode [ 1068.554628][T21644] hsr_slave_1: entered promiscuous mode [ 1068.562051][T21644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1068.570138][T21644] Cannot create hsr debugfs directory [ 1069.081716][T21685] loop1: detected capacity change from 0 to 128 [ 1069.118507][ T29] audit: type=1800 audit(1731075143.685:428): pid=21685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4247" name="bus" dev="loop1" ino=1048727 res=0 errno=0 [ 1069.225237][T21686] syz.1.4247: attempt to access beyond end of device [ 1069.225237][T21686] loop1: rw=0, sector=121, nr_sectors = 119 limit=128 [ 1069.289577][T21644] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.406640][ T5909] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1069.420013][ T12] kworker/u8:1: attempt to access beyond end of device [ 1069.420013][ T12] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 1069.438455][T21644] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.563203][T21644] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.576309][ T5909] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.601253][ T5909] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.613487][ T5909] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1069.620492][ T5909] usb 9-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1069.629804][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.664265][ T5909] usb 9-1: config 0 descriptor?? [ 1069.828104][T21644] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.320376][T16928] Bluetooth: hci1: command tx timeout [ 1070.826567][T21644] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1070.886275][T21644] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1070.899732][T21644] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1070.900585][ T5909] kye 0003:0458:4018.0015: unknown main item tag 0x0 [ 1070.920404][ T5909] kye 0003:0458:4018.0015: unknown main item tag 0x0 [ 1070.935096][ T5909] kye 0003:0458:4018.0015: unknown main item tag 0x0 [ 1070.935369][T21644] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1070.945377][ T5909] kye 0003:0458:4018.0015: unknown main item tag 0x0 [ 1070.985826][ T5909] kye 0003:0458:4018.0015: unknown main item tag 0x0 [ 1071.041241][ T5909] kye 0003:0458:4018.0015: hidraw0: USB HID v0.00 Device [HID 0458:4018] on usb-dummy_hcd.8-1/input0 [ 1071.208860][T21644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.230839][ T5909] usb 9-1: USB disconnect, device number 9 [ 1071.280424][T21644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.292014][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.299117][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.967187][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.974423][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.098737][T21644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1072.119269][T21707] loop6: detected capacity change from 0 to 256 [ 1072.126982][T21644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1072.218877][T21707] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1072.403688][T16928] Bluetooth: hci1: command tx timeout [ 1074.120824][T21725] loop8: detected capacity change from 0 to 4096 [ 1074.130629][T21725] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 1074.473554][T16928] Bluetooth: hci1: command tx timeout [ 1075.779224][T21644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.989620][T21644] veth0_vlan: entered promiscuous mode [ 1079.752742][T21644] veth1_vlan: entered promiscuous mode [ 1080.421929][T21792] blktrace: Concurrent blktraces are not allowed on sg0 [ 1080.987813][T21644] veth0_macvtap: entered promiscuous mode [ 1081.832099][T21644] veth1_macvtap: entered promiscuous mode [ 1081.894521][T21644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.907355][T21644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.925303][T21644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.949002][T21644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.958918][T21644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.987770][T21644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.002853][T21644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.013651][T21644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.039501][T21644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.067013][T21644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.114344][T21644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.138929][T21644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.150960][T21644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.161617][T21644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.196871][T21644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.207895][T21644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.218630][T21644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.261819][T21644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.289529][T21644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.339226][T21644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.386360][T21644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.564253][T21644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.615851][T21644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.706417][T21644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.798776][T21644] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.841668][T21644] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.863677][T21644] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.881001][T21644] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.972732][T21822] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 1083.117927][T13675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.127158][T13675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.172987][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.209640][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.568212][T21837] loop7: detected capacity change from 0 to 32768 [ 1085.233850][T21854] loop8: detected capacity change from 0 to 512 [ 1085.297117][T21854] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1085.388187][T21854] EXT4-fs (loop8): 1 truncate cleaned up [ 1085.398758][T21854] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.515882][ T29] audit: type=1800 audit(1731075160.083:429): pid=21854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4288" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 1086.271346][T18305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.827291][T18585] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1086.997148][T18585] usb 8-1: Using ep0 maxpacket: 16 [ 1087.005571][T18585] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.030012][T18585] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.040608][T21885] Bluetooth: MGMT ver 1.23 [ 1087.061849][T18585] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1087.100442][T18585] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1087.129894][T18585] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.163220][T18585] usb 8-1: config 0 descriptor?? [ 1087.456705][T16329] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1087.601759][T18585] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1087.628065][T18585] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 1087.662891][T16329] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.680866][T18585] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1087.708613][T16329] usb 7-1: New USB device found, idVendor=053f, idProduct=a4a1, bcdDevice= 0.40 [ 1087.729220][T18585] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1087.744140][T16329] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.754440][T18585] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1087.766987][T16329] usb 7-1: Product: syz [ 1087.771180][T16329] usb 7-1: Manufacturer: syz [ 1087.775792][T16329] usb 7-1: SerialNumber: syz [ 1087.786712][T18585] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1087.793966][T18585] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1087.825856][T16329] cdc_ether 7-1:1.0: skipping garbage [ 1087.855150][T16329] usb 7-1: bad CDC descriptors [ 1087.883808][T18585] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0016/input/input64 [ 1087.905742][T21893] loop1: detected capacity change from 0 to 1024 [ 1087.955277][T21893] EXT4-fs: Ignoring removed orlov option [ 1087.965945][T21893] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1088.001596][T18585] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1088.031841][T21893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.035448][T15507] usb 7-1: USB disconnect, device number 22 [ 1088.081359][T18585] usb 8-1: USB disconnect, device number 32 [ 1088.986373][T16018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.002343][T21903] loop6: detected capacity change from 0 to 512 [ 1089.002937][T21904] loop7: detected capacity change from 0 to 256 [ 1089.043522][T21903] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1089.088059][T21903] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1089.098023][T21903] System zones: 1-12 [ 1089.136084][T21903] EXT4-fs (loop6): 1 truncate cleaned up [ 1089.143556][T21903] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.236379][T21915] loop9: detected capacity change from 0 to 256 [ 1089.243453][T21915] exfat: Deprecated parameter 'namecase' [ 1089.254926][T21915] exfat: Deprecated parameter 'namecase' [ 1089.332575][T21915] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 1089.411901][T21919] loop1: detected capacity change from 0 to 2048 [ 1089.456575][T21915] exFAT-fs (loop9): start_clu is invalid cluster(0xff000008) [ 1089.475767][T21076] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.773699][T21919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1090.146036][T17989] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1090.666236][T16018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.776342][T17989] usb 8-1: Using ep0 maxpacket: 32 [ 1090.999633][T17989] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.023231][T17989] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.708035][T17989] usb 8-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 1091.717236][T17989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.728539][T17989] usb 8-1: config 0 descriptor?? [ 1091.821020][T21950] loop8: detected capacity change from 0 to 128 [ 1091.899523][T21950] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1091.929058][T21950] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1091.959135][T21950] kvm: kvm [21949]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x64 [ 1092.027606][T21958] loop1: detected capacity change from 0 to 128 [ 1092.064548][T21958] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1092.086892][T18305] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1092.185136][T17989] wacom 0003:056A:00E3.0017: hidraw0: USB HID v0.00 Device [HID 056a:00e3] on usb-dummy_hcd.7-1/input0 [ 1092.365690][ T29] audit: type=1326 audit(1731075166.947:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21968 comm="syz.8.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15b7e719 code=0x7ffc0000 [ 1092.371686][T17989] usb 8-1: USB disconnect, device number 33 [ 1092.389498][ T29] audit: type=1326 audit(1731075166.947:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21968 comm="syz.8.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15b7e719 code=0x7ffc0000 [ 1092.418039][ T29] audit: type=1326 audit(1731075166.967:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21968 comm="syz.8.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fcd15b7e719 code=0x7ffc0000 [ 1092.448424][ T29] audit: type=1326 audit(1731075166.967:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21968 comm="syz.8.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15b7e719 code=0x7ffc0000 [ 1092.476278][ T29] audit: type=1326 audit(1731075166.967:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21968 comm="syz.8.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15b7e719 code=0x7ffc0000 [ 1092.499729][ T29] audit: type=1326 audit(1731075166.967:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21968 comm="syz.8.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fcd15b7e719 code=0x7ffc0000 [ 1092.546207][ T29] audit: type=1326 audit(1731075167.097:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21968 comm="syz.8.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15b7e719 code=0x7ffc0000 [ 1092.575758][ T29] audit: type=1326 audit(1731075167.097:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21968 comm="syz.8.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcd15b7e719 code=0x7ffc0000 [ 1092.600940][ T29] audit: type=1326 audit(1731075167.107:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21968 comm="syz.8.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15b7e719 code=0x7ffc0000 [ 1092.631146][ T29] audit: type=1326 audit(1731075167.107:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21968 comm="syz.8.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fcd15b7e719 code=0x7ffc0000 [ 1093.466371][T21980] loop8: detected capacity change from 0 to 2048 [ 1094.466342][T21980] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1095.061664][T21997] EXT4-fs (loop8): shut down requested (2) [ 1095.067083][T21998] loop6: detected capacity change from 0 to 256 [ 1095.105846][T22003] loop7: detected capacity change from 0 to 512 [ 1095.133428][T21998] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1095.165052][T22003] EXT4-fs: Ignoring removed i_version option [ 1095.218292][T18305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.287679][T22003] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1095.311405][T22003] EXT4-fs (loop7): 1 truncate cleaned up [ 1095.332024][T22003] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.518702][T16928] Bluetooth: Wrong link type (-71) [ 1097.581911][T21644] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.866482][T22029] loop7: detected capacity change from 0 to 8 [ 1097.886237][T22029] SQUASHFS error: Failed to read block 0x4de: -5 [ 1097.896904][T22029] SQUASHFS error: Failed to read block 0x4de: -5 [ 1097.912090][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1097.912106][ T29] audit: type=1800 audit(1731075172.489:444): pid=22029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4338" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1097.990640][T22029] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1098.004642][T22029] SQUASHFS error: Failed to read block 0x4de: -5 [ 1098.019786][T22029] SQUASHFS error: Failed to read block 0x4e2: -5 [ 1098.028634][T22029] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1098.038244][T22029] SQUASHFS error: Failed to read block 0x4de: -5 [ 1098.045815][T22029] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1098.056341][T22029] SQUASHFS error: Failed to read block 0x4de: -5 [ 1098.071480][T18585] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1098.229958][T18585] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1098.256663][T18585] usb 10-1: not running at top speed; connect to a high speed hub [ 1098.929162][T18585] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1099.052551][T18585] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1099.063347][T22043] loop1: detected capacity change from 0 to 1024 [ 1099.080223][T18585] usb 10-1: config 1 has no interface number 1 [ 1099.098643][T22045] loop8: detected capacity change from 0 to 1024 [ 1099.107451][T18585] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1099.149978][T18585] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1099.174760][T22045] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1099.203204][T22050] loop7: detected capacity change from 0 to 1024 [ 1099.276785][T18585] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1099.335564][T18585] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.377069][T18585] usb 10-1: Product: syz [ 1099.383993][T18585] usb 10-1: Manufacturer: syz [ 1099.388823][T18585] usb 10-1: SerialNumber: syz [ 1099.406256][T22045] EXT4-fs error (device loop8): ext4_generic_delete_entry:2687: inode #2: block 16: comm syz.8.4345: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1099.446869][T22045] EXT4-fs error (device loop8) in ext4_delete_entry:2758: Corrupt filesystem [ 1099.460065][T22045] EXT4-fs warning (device loop8): ext4_rename_delete:3740: inode #2: comm syz.8.4345: Deleting old file: nlink 1, error=-117 [ 1099.483023][T22050] 9pnet_fd: Insufficient options for proto=fd [ 1099.518212][ T29] audit: type=1326 audit(1731075174.100:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22048 comm="syz.7.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125cd7e719 code=0x7fc00000 [ 1099.552227][ T29] audit: type=1326 audit(1731075174.100:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22048 comm="syz.7.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125cd7e719 code=0x7fc00000 [ 1099.642081][T18585] usb 10-1: found format II with max.bitrate = 0, frame size=1 [ 1099.660985][T22045] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1099.682728][T18585] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1099.689515][T22045] EXT4-fs error (device loop8): ext4_find_dest_de:2079: inode #2: block 16: comm syz.8.4345: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1099.695946][ T29] audit: type=1326 audit(1731075174.100:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22048 comm="syz.7.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125cd7e719 code=0x7fc00000 [ 1099.821383][ T29] audit: type=1326 audit(1731075174.100:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22048 comm="syz.7.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125cd7e719 code=0x7fc00000 [ 1099.881190][ T29] audit: type=1326 audit(1731075174.100:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22048 comm="syz.7.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125cd7e719 code=0x7fc00000 [ 1099.933275][T18585] usb 10-1: USB disconnect, device number 5 [ 1099.999166][T22060] loop7: detected capacity change from 0 to 2048 [ 1100.018161][ T29] audit: type=1326 audit(1731075174.100:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22048 comm="syz.7.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125cd7e719 code=0x7fc00000 [ 1100.057247][ T29] audit: type=1326 audit(1731075174.100:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22048 comm="syz.7.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125cd7e719 code=0x7fc00000 [ 1100.079808][ T29] audit: type=1326 audit(1731075174.100:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22048 comm="syz.7.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125cd7e719 code=0x7fc00000 [ 1100.083067][T22060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1100.102579][ T29] audit: type=1326 audit(1731075174.100:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22048 comm="syz.7.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125cd7e719 code=0x7fc00000 [ 1100.164158][T18305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.450443][T20323] udevd[20323]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1101.531869][T22082] loop7: detected capacity change from 0 to 1024 [ 1101.851586][T22085] ptrace attach of ""[22093] was attempted by ""[22085] [ 1103.481034][T22105] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4363'. [ 1104.507625][T22114] loop9: detected capacity change from 0 to 1024 [ 1104.652301][ T3524] hfsplus: b-tree write err: -5, ino 4 [ 1104.756063][T22124] loop7: detected capacity change from 0 to 1024 [ 1105.079642][T22128] loop9: detected capacity change from 0 to 1024 [ 1105.112389][T22128] hfsplus: extend alloc file! (8192,65536,366) [ 1105.318284][T22128] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=32768000 (65536000 ns) > initial count (394 ns). Using initial count to start timer. [ 1105.973021][T22139] loop7: detected capacity change from 0 to 512 [ 1106.413532][T22139] EXT4-fs: inline encryption not supported [ 1106.680772][T22139] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1108.433226][T22139] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1108.436210][T12027] Bluetooth: hci4: command 0x0405 tx timeout [ 1108.561680][T22139] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #17: comm syz.7.4374: corrupted in-inode xattr: e_name out of bounds [ 1108.697749][T22139] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.4374: couldn't read orphan inode 17 (err -117) [ 1108.713112][T22139] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1108.796895][T21644] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.883945][T22154] loop1: detected capacity change from 0 to 256 [ 1109.201728][T22154] exfat: Bad value for 'allow_utime' [ 1109.373264][T12027] Bluetooth: hci0: unexpected event for opcode 0x203d [ 1109.428695][T22160] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4381'. [ 1109.626933][T22162] loop1: detected capacity change from 0 to 512 [ 1109.979114][T22167] trusted_key: encrypted_key: master key parameter '*'˜Ýñˆáë,“b8CkêÖ¤š [ 1109.979114][T22167] ' is invalid [ 1110.350174][T22166] loop9: detected capacity change from 0 to 1024 [ 1110.660367][T22170] loop8: detected capacity change from 0 to 1024 [ 1111.503348][T22187] loop6: detected capacity change from 0 to 1024 [ 1111.971653][T22195] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 1112.005683][T17457] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1112.216523][T17457] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.380441][T17457] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.566796][T17457] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1112.575961][T17457] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.638348][T17457] usb 9-1: config 0 descriptor?? [ 1112.817994][T22201] Bluetooth: MGMT ver 1.23 [ 1113.078420][T17457] hid-led 0003:0FC5:B080.0018: item fetching failed at offset 0/3 [ 1113.134348][T17457] hid-led 0003:0FC5:B080.0018: probe with driver hid-led failed with error -22 [ 1113.284551][ T5909] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1113.305662][ T5881] usb 9-1: USB disconnect, device number 10 [ 1113.474303][T12027] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1113.487089][T12027] Bluetooth: hci0: Injecting HCI hardware error event [ 1113.500529][T12027] Bluetooth: hci0: hardware error 0x00 [ 1113.567506][ T5909] usb 7-1: config 255 has an invalid interface number: 222 but max is 0 [ 1113.581691][ T5909] usb 7-1: config 255 has no interface number 0 [ 1113.621809][ T5909] usb 7-1: config 255 interface 222 has no altsetting 0 [ 1113.664736][ T5909] usb 7-1: New USB device found, idVendor=12d1, idProduct=1404, bcdDevice= 0.00 [ 1113.693666][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.745876][ T5909] usb 7-1: Product: syz [ 1113.772451][ T5909] usb 7-1: Manufacturer: syz [ 1113.777202][ T5909] usb 7-1: SerialNumber: syz [ 1114.049155][T22216] loop1: detected capacity change from 0 to 2048 [ 1114.228530][T22216] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1115.395364][T22221] loop8: detected capacity change from 0 to 65536 [ 1115.659615][T12027] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1115.724505][ T5909] usb-storage 7-1:255.222: USB Mass Storage device detected [ 1115.745537][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.758380][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.785994][T22221] XFS (loop8): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1117.183642][T22245] loop9: detected capacity change from 0 to 512 [ 1117.199448][T22245] EXT4-fs: Ignoring removed i_version option [ 1117.207037][T22245] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1117.210318][T22221] XFS (loop8): Ending clean mount [ 1117.232649][ T5909] usb 7-1: USB disconnect, device number 23 [ 1117.260513][T22245] EXT4-fs (loop9): 1 truncate cleaned up [ 1117.266894][T22245] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1117.299051][T22221] XFS (loop8): Quotacheck needed: Please wait. [ 1117.353776][T22221] XFS (loop8): Quotacheck: Done. [ 1117.392341][T22245] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4403: bg 0: block 288: padding at end of block bitmap is not set [ 1117.484136][T18585] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1117.605465][T20332] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.844138][T12027] Bluetooth: hci2: command 0x0406 tx timeout [ 1117.851783][T18585] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.871577][T18585] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.881343][T18585] usb 8-1: New USB device found, idVendor=05ac, idProduct=0062, bcdDevice= 0.00 [ 1117.890450][T18585] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.918179][T18585] usb 8-1: config 0 descriptor?? [ 1118.613481][T18585] hid-generic 0003:05AC:0062.0019: unbalanced delimiter at end of report description [ 1118.828266][T18585] hid-generic 0003:05AC:0062.0019: probe with driver hid-generic failed with error -22 [ 1118.913601][T22267] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4411'. [ 1119.001223][T22267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4411'. [ 1119.043170][T22267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4411'. [ 1119.130907][T18585] usb 8-1: USB disconnect, device number 34 [ 1120.940941][T22285] loop1: detected capacity change from 0 to 16 [ 1121.001363][T22285] erofs: (device loop1): mounted with root inode @ nid 36. [ 1121.275877][T22290] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4420'. [ 1122.906691][T22309] loop9: detected capacity change from 0 to 128 [ 1123.857883][T22314] trusted_key: encrypted_key: insufficient parameters specified [ 1124.801006][T18305] XFS (loop8): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1124.810583][T22309] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1124.864256][T22309] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1125.091645][T17457] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1125.201755][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1125.201776][ T29] audit: type=1804 audit(1731075199.723:456): pid=22309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4424" name="/newroot/84/file1/bus" dev="loop9" ino=1048761 res=1 errno=0 [ 1125.229785][ C1] vkms_vblank_simulate: vblank timer overrun [ 1125.248008][T17457] usb 2-1: Using ep0 maxpacket: 8 [ 1125.295856][T17457] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1125.332882][T17457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.347817][ T29] audit: type=1800 audit(1731075199.723:457): pid=22309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4424" name="bus" dev="loop9" ino=1048761 res=0 errno=0 [ 1125.399884][T17457] usb 2-1: config 0 descriptor?? [ 1126.737787][T17989] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1127.057748][T17989] usb 9-1: Using ep0 maxpacket: 16 [ 1127.303365][T17989] usb 9-1: config 8 has an invalid interface number: 207 but max is 0 [ 1127.332753][T17989] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.338362][T17457] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1127.364532][T17989] usb 9-1: config 8 has no interface number 0 [ 1127.396956][T17989] usb 9-1: config 8 interface 207 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 1127.411130][T17457] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1127.423439][T17457] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1127.435107][T17989] usb 9-1: config 8 interface 207 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1127.465852][T17989] usb 9-1: config 8 interface 207 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1127.475884][T17457] usb 2-1: USB disconnect, device number 39 [ 1127.497858][T17989] usb 9-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1127.513023][T17989] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.838495][T17989] usb 9-1: Product: syz [ 1127.869965][T17989] usb 9-1: Manufacturer: syz [ 1127.883633][T17989] usb 9-1: SerialNumber: syz [ 1127.914582][T22331] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1128.005121][ T11] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1128.206078][T17989] usb 9-1: USB disconnect, device number 11 [ 1128.264516][T22349] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4436'. [ 1128.307510][T22349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4436'. [ 1128.352107][T22349] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4436'. [ 1128.669165][T22356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4436'. [ 1128.734946][T22358] trusted_key: encrypted_key: insufficient parameters specified [ 1130.671496][T22373] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4443'. [ 1130.898520][T22369] xt_cgroup: path and classid specified [ 1131.002793][T22378] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4443'. [ 1131.630879][T22376] loop1: detected capacity change from 0 to 2048 [ 1131.724285][T22376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1131.857539][T22386] loop9: detected capacity change from 0 to 2048 [ 1132.000405][T22386] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1132.170054][T16018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.455156][T22407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4452'. [ 1132.749225][T20332] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.560711][T22418] loop6: detected capacity change from 0 to 512 [ 1133.853287][T22418] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4456: invalid indirect mapped block 32768 (level 0) [ 1134.091820][T22424] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4458'. [ 1134.213011][T22418] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.4456: attempt to clear invalid blocks 1024 len 1 [ 1134.509609][T22418] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1134.549857][T22424] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4458'. [ 1134.590948][T22418] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4456: invalid indirect mapped block 1819213824 (level 0) [ 1134.601331][T22433] loop9: detected capacity change from 0 to 512 [ 1134.644054][T22416] [ 1134.646399][T22416] ====================================================== [ 1134.653410][T22416] WARNING: possible circular locking dependency detected [ 1134.660434][T22416] 6.12.0-rc6-next-20241108-syzkaller #0 Not tainted [ 1134.667022][T22416] ------------------------------------------------------ [ 1134.674047][T22416] syz.1.4455/22416 is trying to acquire lock: [ 1134.680114][T22416] ffff888143f4d4f0 (&q->limits_lock){+.+.}-{4:4}, at: loop_reconfigure_limits+0x287/0x9f0 [ 1134.690064][T22416] [ 1134.690064][T22416] but task is already holding lock: [ 1134.697438][T22416] ffff888143f4cea8 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 1134.707222][T22416] [ 1134.707222][T22416] which lock already depends on the new lock. [ 1134.707222][T22416] [ 1134.712875][T22433] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1134.717613][T22416] [ 1134.717613][T22416] the existing dependency chain (in reverse order) is: [ 1134.717624][T22416] [ 1134.717624][T22416] -> #6 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 1134.717662][T22416] lock_acquire+0x1ed/0x550 [ 1134.717686][T22416] blk_mq_submit_bio+0x1510/0x2490 [ 1134.755660][T22416] __submit_bio+0x2c2/0x560 [ 1134.760686][T22416] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1134.766836][T22416] ext4_read_block_bitmap_nowait+0x7c5/0xa80 [ 1134.773331][T22416] ext4_mb_init_cache+0x484/0x1680 [ 1134.778961][T22416] ext4_mb_init_group+0x324/0x6f0 [ 1134.784501][T22416] ext4_mb_load_buddy_gfp+0xd83/0x1490 [ 1134.790474][T22416] ext4_free_blocks+0xc9d/0x2260 [ 1134.795925][T22416] ext4_ext_remove_space+0x23eb/0x4e10 [ 1134.801896][T22416] ext4_ext_truncate+0x159/0x2b0 [ 1134.807345][T22416] ext4_truncate+0xa1b/0x11c0 [ 1134.812539][T22416] ext4_evict_inode+0x90f/0xf50 [ 1134.817909][T22416] evict+0x4e8/0x9b0 [ 1134.822316][T22416] vfs_rmdir+0x3d7/0x510 [ 1134.827077][T22416] do_rmdir+0x3b5/0x580 [ 1134.831743][T22416] __x64_sys_unlinkat+0xde/0xf0 [ 1134.837108][T22416] do_syscall_64+0xf3/0x230 [ 1134.842127][T22416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.848533][T22416] [ 1134.848533][T22416] -> #5 (&ei->i_data_sem){++++}-{4:4}: [ 1134.856177][T22416] lock_acquire+0x1ed/0x550 [ 1134.861193][T22416] down_write+0x99/0x220 [ 1134.865948][T22416] ext4_map_blocks+0x7a6/0x1990 [ 1134.871311][T22416] ext4_do_writepages+0x20f7/0x3d20 [ 1134.877025][T22416] ext4_writepages+0x213/0x3c0 [ 1134.882299][T22416] do_writepages+0x35d/0x870 [ 1134.887401][T22416] __writeback_single_inode+0x14f/0x10d0 [ 1134.893543][T22416] writeback_sb_inodes+0x80c/0x1370 [ 1134.899251][T22416] __writeback_inodes_wb+0x11b/0x260 [ 1134.905045][T22416] wb_writeback+0x42f/0xbd0 [ 1134.910057][T22416] wb_workfn+0xc58/0x1090 [ 1134.914899][T22416] process_scheduled_works+0xa63/0x1850 [ 1134.920963][T22416] worker_thread+0x870/0xd30 [ 1134.926065][T22416] kthread+0x2f0/0x390 [ 1134.930647][T22416] ret_from_fork+0x4b/0x80 [ 1134.935574][T22416] ret_from_fork_asm+0x1a/0x30 [ 1134.940853][T22416] [ 1134.940853][T22416] -> #4 (jbd2_handle){++++}-{0:0}: [ 1134.948145][T22416] lock_acquire+0x1ed/0x550 [ 1134.953168][T22416] start_this_handle+0x1eb4/0x2110 [ 1134.958792][T22416] jbd2__journal_start+0x2da/0x5d0 [ 1134.964418][T22416] __ext4_journal_start_sb+0x239/0x600 [ 1134.970395][T22416] ext4_dirty_inode+0x92/0x110 [ 1134.975675][T22416] __mark_inode_dirty+0x2ee/0xe90 [ 1134.981211][T22416] touch_atime+0x413/0x690 [ 1134.986138][T22416] ext4_file_mmap+0x18c/0x540 [ 1134.991332][T22416] __mmap_region+0x2204/0x2cd0 [ 1134.996609][T22416] mmap_region+0x226/0x2c0 [ 1135.001538][T22416] do_mmap+0x8f0/0x1000 [ 1135.006206][T22416] vm_mmap_pgoff+0x214/0x430 [ 1135.011310][T22416] ksys_mmap_pgoff+0x4eb/0x720 [ 1135.016589][T22416] do_syscall_64+0xf3/0x230 [ 1135.021604][T22416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.028014][T22416] [ 1135.028014][T22416] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 1135.035569][T22416] lock_acquire+0x1ed/0x550 [ 1135.040587][T22416] __might_fault+0xc6/0x120 [ 1135.045606][T22416] _copy_from_user+0x2a/0xc0 [ 1135.050708][T22416] blk_trace_setup+0xd2/0x1e0 [ 1135.055896][T22416] sg_ioctl+0xa46/0x2e80 [ 1135.060681][T22416] __se_sys_ioctl+0xf5/0x170 [ 1135.065784][T22416] do_syscall_64+0xf3/0x230 [ 1135.070801][T22416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.077205][T22416] [ 1135.077205][T22416] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1135.085021][T22416] lock_acquire+0x1ed/0x550 [ 1135.090035][T22416] __mutex_lock+0x1ac/0xee0 [ 1135.095050][T22416] blk_mq_init_sched+0x3fa/0x830 [ 1135.100502][T22416] elevator_init_mq+0x20e/0x320 [ 1135.105869][T22416] add_disk_fwnode+0x10d/0xf80 [ 1135.111145][T22416] sd_probe+0xba6/0x1100 [ 1135.115901][T22416] really_probe+0x2b8/0xad0 [ 1135.120918][T22416] __driver_probe_device+0x1a2/0x390 [ 1135.126718][T22416] driver_probe_device+0x50/0x430 [ 1135.132263][T22416] __device_attach_driver+0x2d6/0x530 [ 1135.138145][T22416] bus_for_each_drv+0x24e/0x2e0 [ 1135.143511][T22416] __device_attach_async_helper+0x22d/0x300 [ 1135.149917][T22416] async_run_entry_fn+0xa8/0x420 [ 1135.155367][T22416] process_scheduled_works+0xa63/0x1850 [ 1135.161429][T22416] worker_thread+0x870/0xd30 [ 1135.166531][T22416] kthread+0x2f0/0x390 [ 1135.171113][T22416] ret_from_fork+0x4b/0x80 [ 1135.176039][T22416] ret_from_fork_asm+0x1a/0x30 [ 1135.181316][T22416] [ 1135.181316][T22416] -> #1 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 1135.190178][T22416] lock_acquire+0x1ed/0x550 [ 1135.195194][T22416] blk_queue_enter+0xe1/0x600 [ 1135.200385][T22416] blk_mq_alloc_request+0x26b/0xab0 [ 1135.206094][T22416] scsi_execute_cmd+0x177/0x1090 [ 1135.211542][T22416] read_capacity_16+0x2b4/0x1450 [ 1135.216998][T22416] sd_revalidate_disk+0x1019/0xbcf0 [ 1135.222714][T22416] sd_probe+0x9fa/0x1100 [ 1135.227483][T22416] really_probe+0x2b8/0xad0 [ 1135.232501][T22416] __driver_probe_device+0x1a2/0x390 [ 1135.238298][T22416] driver_probe_device+0x50/0x430 [ 1135.243837][T22416] __device_attach_driver+0x2d6/0x530 [ 1135.249721][T22416] bus_for_each_drv+0x24e/0x2e0 [ 1135.255094][T22416] __device_attach_async_helper+0x22d/0x300 [ 1135.261498][T22416] async_run_entry_fn+0xa8/0x420 [ 1135.266952][T22416] process_scheduled_works+0xa63/0x1850 [ 1135.273013][T22416] worker_thread+0x870/0xd30 [ 1135.278112][T22416] kthread+0x2f0/0x390 [ 1135.282692][T22416] ret_from_fork+0x4b/0x80 [ 1135.287618][T22416] ret_from_fork_asm+0x1a/0x30 [ 1135.292898][T22416] [ 1135.292898][T22416] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 1135.300534][T22416] validate_chain+0x18ef/0x5920 [ 1135.305900][T22416] __lock_acquire+0x1397/0x2100 [ 1135.311278][T22416] lock_acquire+0x1ed/0x550 [ 1135.316291][T22416] __mutex_lock+0x1ac/0xee0 [ 1135.321306][T22416] loop_reconfigure_limits+0x287/0x9f0 [ 1135.327291][T22416] lo_ioctl+0x1351/0x1f50 [ 1135.332142][T22416] blkdev_ioctl+0x57d/0x6a0 [ 1135.337161][T22416] __se_sys_ioctl+0xf5/0x170 [ 1135.342264][T22416] do_syscall_64+0xf3/0x230 [ 1135.347282][T22416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.353693][T22416] [ 1135.353693][T22416] other info that might help us debug this: [ 1135.353693][T22416] [ 1135.363909][T22416] Chain exists of: [ 1135.363909][T22416] &q->limits_lock --> &ei->i_data_sem --> &q->q_usage_counter(io)#22 [ 1135.363909][T22416] [ 1135.377911][T22416] Possible unsafe locking scenario: [ 1135.377911][T22416] [ 1135.385346][T22416] CPU0 CPU1 [ 1135.390700][T22416] ---- ---- [ 1135.396054][T22416] lock(&q->q_usage_counter(io)#22); [ 1135.401428][T22416] lock(&ei->i_data_sem); [ 1135.408357][T22416] lock(&q->q_usage_counter(io)#22); [ 1135.416247][T22416] lock(&q->limits_lock); [ 1135.420660][T22416] [ 1135.420660][T22416] *** DEADLOCK *** [ 1135.420660][T22416] [ 1135.428795][T22416] 3 locks held by syz.1.4455/22416: [ 1135.434016][T22416] #0: ffff8880253d9360 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x606/0x1f50 [ 1135.442987][T22416] #1: ffff888143f4cea8 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 1135.453169][T22416] #2: ffff888143f4cee0 (&q->q_usage_counter(queue)#6){+.+.}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 1135.463524][T22416] [ 1135.463524][T22416] stack backtrace: [ 1135.469399][T22416] CPU: 0 UID: 0 PID: 22416 Comm: syz.1.4455 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 1135.479623][T22416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1135.489669][T22416] Call Trace: [ 1135.492944][T22416] [ 1135.495872][T22416] dump_stack_lvl+0x241/0x360 [ 1135.500547][T22416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1135.505741][T22416] ? __pfx__printk+0x10/0x10 [ 1135.510331][T22416] print_circular_bug+0x13a/0x1b0 [ 1135.515351][T22416] check_noncircular+0x36a/0x4a0 [ 1135.520285][T22416] ? __pfx_check_noncircular+0x10/0x10 [ 1135.525762][T22416] validate_chain+0x18ef/0x5920 [ 1135.530629][T22416] ? __pfx_validate_chain+0x10/0x10 [ 1135.535845][T22416] ? __pfx_validate_chain+0x10/0x10 [ 1135.541048][T22416] ? __pfx_validate_chain+0x10/0x10 [ 1135.546241][T22416] ? lockdep_unlock+0x16a/0x300 [ 1135.551086][T22416] ? __pfx_lockdep_unlock+0x10/0x10 [ 1135.556284][T22416] ? __pfx_llist_add_batch+0x10/0x10 [ 1135.561568][T22416] ? mark_lock+0x9a/0x360 [ 1135.565898][T22416] __lock_acquire+0x1397/0x2100 [ 1135.570752][T22416] lock_acquire+0x1ed/0x550 [ 1135.575253][T22416] ? loop_reconfigure_limits+0x287/0x9f0 [ 1135.580887][T22416] ? __pfx_lock_acquire+0x10/0x10 [ 1135.585908][T22416] ? __pfx___might_resched+0x10/0x10 [ 1135.591221][T22416] ? mark_lock+0x9a/0x360 [ 1135.595636][T22416] __mutex_lock+0x1ac/0xee0 [ 1135.600143][T22416] ? loop_reconfigure_limits+0x287/0x9f0 [ 1135.605770][T22416] ? loop_reconfigure_limits+0x287/0x9f0 [ 1135.611395][T22416] ? __pfx___mutex_lock+0x10/0x10 [ 1135.616414][T22416] loop_reconfigure_limits+0x287/0x9f0 [ 1135.621866][T22416] ? __pfx_loop_reconfigure_limits+0x10/0x10 [ 1135.627837][T22416] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1135.633727][T22416] ? lockdep_hardirqs_on+0x99/0x150 [ 1135.638917][T22416] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1135.644807][T22416] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1135.651130][T22416] ? finish_wait+0xd4/0x1e0 [ 1135.655624][T22416] ? blk_mq_freeze_queue_wait+0x132/0x190 [ 1135.661342][T22416] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1135.667395][T22416] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1135.673454][T22416] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 1135.679340][T22416] ? lo_ioctl+0x1344/0x1f50 [ 1135.683838][T22416] lo_ioctl+0x1351/0x1f50 [ 1135.688159][T22416] ? mark_lock+0x9a/0x360 [ 1135.692484][T22416] ? validate_chain+0x11e/0x5920 [ 1135.697410][T22416] ? __pfx_lo_ioctl+0x10/0x10 [ 1135.702077][T22416] ? mark_lock+0x9a/0x360 [ 1135.706397][T22416] ? __lock_acquire+0x1397/0x2100 [ 1135.711419][T22416] ? __pfx_lock_acquire+0x10/0x10 [ 1135.716432][T22416] ? is_bpf_text_address+0x26/0x2a0 [ 1135.721618][T22416] ? __pfx_lock_release+0x10/0x10 [ 1135.726633][T22416] ? unwind_next_frame+0x18e6/0x22d0 [ 1135.731907][T22416] ? preempt_count_add+0x93/0x190 [ 1135.736928][T22416] ? is_bpf_text_address+0x285/0x2a0 [ 1135.742203][T22416] ? is_bpf_text_address+0x26/0x2a0 [ 1135.747390][T22416] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1135.753538][T22416] ? kernel_text_address+0xa7/0xe0 [ 1135.758639][T22416] ? __kernel_text_address+0xd/0x40 [ 1135.763835][T22416] ? unwind_get_return_address+0x4d/0x90 [ 1135.769456][T22416] ? arch_stack_walk+0xfd/0x150 [ 1135.774299][T22416] ? stack_trace_save+0x118/0x1d0 [ 1135.779315][T22416] ? __pfx_stack_trace_save+0x10/0x10 [ 1135.784685][T22416] ? stack_depot_save_flags+0x29/0x830 [ 1135.790135][T22416] ? kasan_save_track+0x51/0x80 [ 1135.794974][T22416] ? kasan_save_track+0x3f/0x80 [ 1135.799811][T22416] ? kasan_save_free_info+0x40/0x50 [ 1135.805002][T22416] ? __kasan_slab_free+0x59/0x70 [ 1135.809930][T22416] ? kfree+0x196/0x420 [ 1135.813990][T22416] ? tomoyo_path_number_perm+0x679/0x860 [ 1135.819615][T22416] ? security_file_ioctl+0xc6/0x2a0 [ 1135.824804][T22416] ? __se_sys_ioctl+0x46/0x170 [ 1135.829553][T22416] ? do_syscall_64+0xf3/0x230 [ 1135.834216][T22416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.840276][T22416] ? do_vfs_ioctl+0xf07/0x2e40 [ 1135.845035][T22416] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1135.850048][T22416] ? mark_lock+0x9a/0x360 [ 1135.854374][T22416] ? tomoyo_path_number_perm+0x206/0x860 [ 1135.859996][T22416] ? __pfx_lock_release+0x10/0x10 [ 1135.865011][T22416] ? tomoyo_path_number_perm+0x679/0x860 [ 1135.870635][T22416] ? tomoyo_path_number_perm+0x679/0x860 [ 1135.876259][T22416] ? blkdev_common_ioctl+0xfca/0x2480 [ 1135.881623][T22416] ? __lock_acquire+0x1397/0x2100 [ 1135.886639][T22416] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1135.892265][T22416] ? tomoyo_path_number_perm+0x206/0x860 [ 1135.897891][T22416] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1135.903873][T22416] ? file_to_blk_mode+0xcc/0x140 [ 1135.908804][T22416] ? __pfx_lo_ioctl+0x10/0x10 [ 1135.913473][T22416] blkdev_ioctl+0x57d/0x6a0 [ 1135.917969][T22416] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1135.922987][T22416] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1135.928003][T22416] __se_sys_ioctl+0xf5/0x170 [ 1135.932590][T22416] do_syscall_64+0xf3/0x230 [ 1135.937084][T22416] ? clear_bhb_loop+0x35/0x90 [ 1135.941756][T22416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.947639][T22416] RIP: 0033:0x7faa93b7e719 [ 1135.952048][T22416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1135.971641][T22416] RSP: 002b:00007faa948f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1135.980051][T22416] RAX: ffffffffffffffda RBX: 00007faa93d35f80 RCX: 00007faa93b7e719 [ 1135.988013][T22416] RDX: 0000000000000000 RSI: 0000000000004c09 RDI: 0000000000000003 [ 1135.995970][T22416] RBP: 00007faa93bf139e R08: 0000000000000000 R09: 0000000000000000 [ 1136.003930][T22416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1136.011888][T22416] R13: 0000000000000000 R14: 00007faa93d35f80 R15: 00007ffe4502c618 [ 1136.019853][T22416] [ 1136.024853][T22418] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4456: invalid indirect mapped block 33554432 (level 2) [ 1136.063267][T22418] EXT4-fs (loop6): 1 truncate cleaned up [ 1136.069518][T22418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1136.079607][T22433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1136.109836][T22433] System zones: 1-12 [ 1136.120224][T21076] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.123182][T22433] EXT4-fs (loop9): ext4_process_orphan: truncating inode 15 to 10 bytes [ 1136.175504][T22433] EXT4-fs (loop9): 1 truncate cleaned up [ 1136.181508][T22433] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.242283][T22433] loop9: detected capacity change from 512 to 64 [ 1136.272940][T20332] EXT4-fs warning (device loop9): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 1136.286825][T20332] EXT4-fs warning (device loop9): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 1136.300859][T20332] EXT4-fs warning (device loop9): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 1136.314797][T20332] EXT4-fs warning (device loop9): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 1136.328368][T20332] EXT4-fs warning (device loop9): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 1136.342601][T20332] EXT4-fs warning (device loop9): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 1136.356741][T20332] EXT4-fs warning (device loop9): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 1136.370604][T20332] EXT4-fs warning (device loop9): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 1136.384458][T20332] EXT4-fs warning (device loop9): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 1136.398196][T20332] EXT4-fs warning (device loop9): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 1136.657926][ T1327] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.668880][T20332] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.717460][ T1327] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.787428][ T1327] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.847396][ T1327] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.953090][ T1327] bridge_slave_1: left allmulticast mode [ 1136.958761][ T1327] bridge_slave_1: left promiscuous mode [ 1136.966472][ T1327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.975648][ T1327] bridge_slave_0: left allmulticast mode [ 1136.981318][ T1327] bridge_slave_0: left promiscuous mode [ 1136.988201][ T1327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.118799][ T1327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.144072][ T1327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.157955][ T1327] bond0 (unregistering): Released all slaves [ 1137.408365][ T1327] hsr_slave_0: left promiscuous mode [ 1137.421991][ T1327] hsr_slave_1: left promiscuous mode [ 1137.427774][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1137.450173][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.464703][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1137.478807][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.503035][ T1327] veth1_macvtap: left promiscuous mode [ 1137.508560][ T1327] veth0_macvtap: left promiscuous mode [ 1137.517271][ T1327] veth1_vlan: left promiscuous mode [ 1137.525819][ T1327] veth0_vlan: left promiscuous mode [ 1137.805515][ T1327] team0 (unregistering): Port device team_slave_1 removed [ 1137.843336][ T1327] team0 (unregistering): Port device team_slave_0 removed