last executing test programs: 44.616362593s ago: executing program 4 (id=202): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)={{0x108, 0x2, 0x7, 0x32f, 0x12c, 0x7, 0x1a3, 0x7}, "68414d3d125d120619b851c2bea0ac", ['\x00', '\x00', '\x00', '\x00']}, 0x42f) fdatasync(r1) syz_usb_disconnect(r0) 42.784399908s ago: executing program 1 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x408001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYBLOB="3db1bd3c9389ce300f92cc8091d7dfbdcfffeed8bb90e543382e29209562d6483c6fcfdf79d0b465e6bc8ea70762049054a683ca4394e098765d85fa3b798fc191119debc7d45cce724609d275eabc974abf88d2270db005808488efc289084aff3069b2b0a78cdfa1f780c10f6c51d7c9ced6ab3e8a7aa716d5ebe1e8cb6255366a32ca4bfad14e3b1315ec", @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRES64], 0x1, 0x620f, &(0x7f000000cb40)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgCYsmKB8iCLTseAEs2EiirFKqZc8Y1nW73+DJdPT6/nzSu+vpUTZ/yv6svU1V9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIH/7gx2eqiLj0q3TDsYjPRT+iF7HS1GsRsbJ2LC8/iIgXYrs5no+I4VJElRufjXg9Ij4+GnH33q315qaz++zH9//yzz/85MiP/vGn4an//fVG/41py928+dv//u32o28vAAAAlKiu67pKH/OPp8/3va47BQDMRX79r5N8u3rh6s0F649arVarD2HdVk92u11ExGZ7neY9g8PxAHDIbMYnXXeBDsm/aIOIONJ1J4CFVnXdAQ7E3Xu31quUb9V+PVjbac/nguzJf7Pavb5j2nSW8XNM5vX42op+PDelPytz6sMiyfn3xvO/tNM+SssddP7zMi3/0c6lT8XJ+ffH8x/z9OTfm5h/qXL+g4fKvy9/AAAAAABYYPnv/8c6Pv679Pibsi8POv67Nqc+AAAAAAAAAMCT9rjj/+2qjP8HAAAAi6r5rN743dH7t037Lrbm9otVxDNjywOFSRfLrHbdDwAAAAAAAAAAAAAoyWDnHN6LVcQwIp5ZXa3ruvlpG68f1uOuf9iVvv1Qsq6f5AEAYMfHR8eu5a8iliPiYvquv+Hq6mpdL6+s1qv1ylJ+PztaWq5XWp9r87S5bWm0jzfEg1Hd/LLl1nptsz4vz2of/33NfY3q/j46Nh8dBg4AEbHzanTXK9JTpq6fja7f5XA4TNr/+908bHlC7P/sR9ePUwAAAODg1XVdV+nrvI+nY/69rjsFAMxFfv0fPy6gVqvVarX66avb6slut4uI2Gyv07xnMBw/ABwym/FJ112gQ/Iv2iAiXui6E8BCq7ruAAfi7r1b61XKt2q/HqTx3fO5IHvy36y218vrT5rOMn6OybweX1vRj+em9Of5OfVhkeT8e+P5X9ppH6XlDjr/eZmWf7OdxzroT9dy/v3x/Mc8Pfn3JuZfqpz/4KHy78sfAAAAAAAWWP77/7GFOv47etTNmelBx3/XDuxeAQAAAAAAAOBg3b13az1f95qP/39hwnKu/3w65fwr+Rcp598by/+rY8u1xwO+8/b9/P9z79b6H2/8+/N5ut/8l/JMlR5ZVXpEVOmeqkGaPs7WfdbWsD9q7mlY9fqDdM5PPXw3rsTV2IjTe5btpf+P++1n9rQ3PR1ut9f9nfaze9oHu+15/XN72ofpTKd6JbefjPX4eVyNd7bbm7alGdu/PKO9ntGe8+/b/4uU8x+0fpr8V1N7NTZt3Pmo95n9vj2ddD9vXfnib04f/ObMtBX93W1ra7bvpQ76s/1/cmQUv7y+ce3kzcs3blw7E2my59azkSZPWM5/mH52n/9f3mnPz/vt/fXOR6OHzn9RbMVgav4vt+ab7X1lzn3rQs5/lH5y/u+k9sn7/2HOf/r+/2oH/QEAAAAAAAAAAAAAAIAHqet6+xLRtyLifLr+p6trMwGA+cqv/3WSb59X3X/U9f+8dzu66r9aPee6WrD+zLX+tF6s/qjVh7Fuqyd7s11ExN/b6zTvGX496ZcBAIvs04j4V9edoDPyL1j+vr9meqLrzgBzdf2DD396+erVjWvXu+4JAAAAAAAAAPCo8vifa63xn0/UdX17bLk947++HWuPO/7nIM/sDjA6ZaDq/sNv04Ns9Ub9Xmu48Rdj2vjfw925B43/PZhxf8MZ7aMZ7Usz2pdntE+80KMl5/9ia7zzExFxfGz49RLGfx0f874EOf+XWo/nJv+vjC3Xzr/+/WHOv7cn/1M33v/FqesffPjalfcvv7fx3sbPzp05c/rc+fMXLlw49e6Vqxund/7tsMcHK+efx752HmhZcv45c/mXJef/pVTLvyw5/y+nWv5lyfnn93vyL0vOP3/2kX9Zcv6vpFr+Zcn5fy3V8i9Lzv/VVMu/LDn/r6da/mXJ+b+WavmXJed/MtXyL0vO/1Sq95n/ykH3i/nI+ecjXPb/suT885kN8i9Lzv9squVflpz/uVTLvyw5/9dTLf+y5Py/kWr5lyXnfz7V8i9Lzv+bqZZ/WXL+F1It/7Lk/L+VavmXJef/7VTLvyw5/zdSLf+y5Py/k2r5lyXn/91Uy78sOf/vpVr+Zcn5v5lq+Zfl/vf/mzFjxkye6fqZCQAAAAAAAAAAAAAYN4/TibveRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLe3cXIddb3Az+zb147kBgI+Tv5m7B2jDHOJrt+iV9oXUx4bXgrCaHQF2zXuzYLfsNrl0Cj2lGgRMKoqKJtuGgLCLW5qbAqLmgFKBeoVaVKpL2gN4gKlYuoCiggVaIVZKuZ8zzPzszOzqy9482Zcz4fify8M2fmnDnzzOx+bb47AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GzLm2Y/U8uyrFar5RdszLKX1Of6iY2NS17/4h4fAAAAsHq/bPz3+VvSBYdXcKOmbf7pzu9+fWFhYSH7wPCfjn5hYSFdMZFlo+uyrHFddPWHH6w1bxM8no3Xhpq+Huqx++Ee14/0uH60x/VjPa5f1+P68R7XLzkBS6zPaunOtjX+uDE/pdmt2Wjjum0dbvV4bd1Q/dyl22a1xm0WRk9kc9mpbDabbtk+37bW2P6bW+r7ensW9zXUtK/N9RXy00ePx2OohXO8rWVfi/cZ/fiN2cTPfvro8b++8NztnWbP09Byf/lx7thaP85PhUvyY61l69I5icc51HScmzs8J8Mtx1lr3K7+5/bjfH6Fxzm8eJhrqv05H8+GGn9+pnGeRmpZh/O0OVz287uyLLu8eNjt2yzZVzaUbWi5ZGjx+RnPV2T9PupL6eXZyDWt0y0rWKf1ObOtdZ22vybi878l3G5kmWNofpp+/NhY0/P+i4XrWadR/VEv91ppX4P9fq0UZQ3GdfFM40E/0XENbguP/9Hty6/BjmunwxpMj7tpDW7ttQaHxoYbx5yehFrjNotrcFfL9sONPdUa89nt3dfg1IXT56bmP/HJe+ZOHzs5e3L2zJ5du6b37Nt34MCBqRNzp2an8/9e59kuvg3ZUHoNbA3nLr4GXtu2bfNSXfjy2JL33+t9HY53eR1ubNu236/DkfYHV1ubF+TSNZ2/Nt5XP+njV4ayZV5jjedn5+pfh+lxN70OR5pehx2/p3R4HY6s4HVY3+bczpX9zDLS9L9Ox7D894LVrcGNTWuw/eeR9jXY759HirIGx8O6+P7O5b8XbA7H+8Tktf48MrxkDaaHG9576pekn/fHDzRGp3V5R/2Km8ayi/Oz5+995NiFC+d3ZWGsiVc0rZX29bqh6TFlS9br0DWv18Nzdz5xR4fLN4ZzNX5P/T/jyz5X9W323tv9uWp8d+t8Plsu3Z2F0WdrfT47fTevn8+xLPvidx578FuPfvFNy57Pet781NTqfxZPubTp/Xd0mfffmPtfyPeX7urx4dGR/PU7nM7OaMv7cetTNdJ476o19v381Mrej0fD/9b6/fjWLu/Hm9q27ff78Wj7g4vvx7Vef9uxOu3P53hYJ6emu78f17fZtPta1+RI1/fju8KshfP/upAUUi5qWjvLrdu0r5GR0fC4RuIeWtfpnpbt43qr7+up3de3Tnfcld/XcHp0i9ZqnU60bdvvdZr+7mu5dVrr9bdv16f9+RwP6+LWPd3XaX2bp/eu/r1zffxj03vnWK81ODo8Vj/m0bQIG+/32cL6uAbvzY5nZ7NT2Uzj2rHGeqo19jV538rW4Fj431q/V27qsgZ3tG3b7zWYvo8tt/ZqI0sffB+0P5/jYV08eV/3NVjf5s37+/uz645wSdqm6WfX9r9fW+7vvO5oO003aq2MhOP8zv7ufzdb3+bUgWvNmd3P093hkps6nKf21+9yr6mZbG3O06ZwnM8dWP481Y+nvs0XDq5wPR3OsuzSx+5v/H1v+PeVv7v4va+3/LtLp3/TufSx+3/y0hP/eC3HD8DgeyEfG/LvdU3/MrWSf/8HAAAABkLM/UNhJvI/AAAAlEbM/fH/FZ7I/wAAAFAaMfePhJlUJP9vevNzcy9cylIzfyGI16fT8EC+Xey4ToevJxYW1S+//6uz//0Pl1a276Esy37xwB903H7TA/G4chPhOK++pfXyJb5+z4r2ffThS2m/zf31L4X7j49npcugUwV3Osuyb97yucZ+Jj54pTGffuBoYz54+YnH69s8fzD/Ot7+2Vfk2/9FKP8ePnGs5fbPhvPwozCn39H5fMTbfe3K6zbvf//i/uLtaltvbjzsJz+U32/8PTmffzzfPp7n5Y7/W5996mv17R95TefjvzTU+fifCvf71TD/51X59s3PQf3reLtPh+OP+4u3u/cr3+54/Fc/k29/7q35dkfDjPvfEb7e9tbn5prP1yO1Yy2PK3tbvl3c//T3/rhxfby/eP/txz9+5ErL+WhfH0//W34/U23bx8vjfqK/b9t//X6a12fc/1N/dLTlPPfa/9UHn31V/X7b939323bnPrazsf/F+2v9jU1/+enPddxfPJ7Df3uu5fEcfm94HYf9P/mhsB7D9f97Nb+/9t+ucPS9re8/cfsvbbzU8niit/8s3//VN5xszHXj6zfc9JKX3nz51fVzl2XPrMvvr9f+T/7V2Zbj//Jt+fmI18eOfvv+lxP3f/7jk2fOzl+cm0ln9dFbGr8755358cTjvSW8t7Z/feTshQ/Pnp+YnpjOsony/gq96/aVMH+Sj8vdt15Y8g668+HwfN7x59/csP1fPxsv//f35ZdfeUf+feu1YbvPh8s3hufv2va/1JNbbmu8vmtPhyNcWPr7gldj87b/OrCiDcPjb/+5IK73c6/8cOM81K9rfN+Ir+tVHv8PZvL7+UY4rwvhNzNvvW1xf83bx9+NcOWh/PW+6vMX3ubi8/o34fl+14/y+4/HFR/vD8LPMd/e1Pp+F9fHNy4Ntd9/47d4XA7vJ9nl/Pq4VTzfV56/rePhxd9Dkl2+vfH1n6T7uf2aHuZy5j8xP3Vq7szFR6YuzM5fmJr/xCePnD578cyFI43f5XnkI71uv/j+tKHx/jQzu29v1ni3OpuPG+zFPv5zDx+f2T+9fWb2xLGLJy48fG72/Mnj8/PHZ2fmtx87cWL2471uPzdzaNfug3v27548OTdz6MDBg3sOTs6dOVs/jPygetg3/dHJM+ePNG4yf2jvwV333bd3evL02ZnZQ/unpycv9rp943vTZP3Wvz95fvbUsQtzp2cn5+c+OXto18F9+3b3/G2Ap8+dmJ+YOn/xzNTF+dnzU/ljmbjQuLj+va/X7Smn+f/If55tV8t/EV/2nrv3pd/PWvfVx5a9q3yTtl8g+lz4XTT//LJzB1bydcz9o2EmFcn/AAAAUAUx94+Fmcj/AAAAUBox968LM5H/AQAAoDRi7h8PM6lI/i9d/3/TpRXtX/9f/7/5fOn/V6z//1DR+v/5+4X+f3+stn+v/x/o/+v/6//r/+v/0wdF6//H3L8+yyqZ/wEAAKAKYu7fEGYi/wMAAEBpxNx/U5iJ/A8AAAClEXP/S8JMKpL/9f/1//X/9f/1/zvvX/9/MOn/d6f/34P+/1RWrf7/5X4ev/6//j9LFa3/H3P/S8NMKpL/AQAAoApi7r85zET+BwAAgNKIuf+WMBP5HwAAAEoj5v6NYSYVyf/6//r/+v/6//r/nfev/z+Y9P+70//vQf/f5//r/+v/01dF6//H3P+yMJOK5H8AAACogpj7Xx5mIv8DAABA8Yxc381i7n9FmMmS/H+dOwAAAABedDH335q1FcEr8u//+v/6/8Xv/69L1+n/6/9nhez/D2f6/8Wh/9+d/n8P+v/6//r/+v/0VdH6/43cn41nrwwzqUj+BwAAgCqIuf+2MBP5HwAAAEoj5v7/F2Yi/wMAAEBpxNy/KcykIvlf/1//v/j9f5//r/9f9P6/z/8vEv3/7vT/e9D/1//X/9f/p6+K1v+Puf/2MJOK5H8AAACogpj77wgzkf8BAACgNGLu//9hJvI/AAAAlEbM/ZvDTCqS//X/C97/j81R/X/9f/1//X/9/xXR/+9O/78H/X/9f/1//X/6qmj9/5j7XxVmUpH8DwAAAFUQc/+dYSbyPwAAAJRGzP2vDjOR/wEAAKA0Yu6fCDOpSP7X/y94/z/vwY/5/H/9f/1//X/9/5XR/+9O/78H/X/9/770/xcu6f/r/5MrWv8/5v4tYSYVyf8AAABQBTH3bw0zkf8BAACgNGLuvyvMRP4HAACA0oi5f1uYSUXyv/7/QPT/M/1//X/9f/1//f+V0f/vTv+/B/1//X+f/6//T18Vrf8fc/9rwkwqkv8BAACgCmLu3x5mIv8DAABAacTc/9owE/kfAAAASiPm/h1hJhXJ//r/+v/6//r/+v+d96//P5j0/7vT/+9B/1//X/9f/5++Klr/P+b+14WZVCT/AwAAQBXE3L8zzET+BwAAgNKIuf/uMBP5HwAAAEoj5v7JMJOK5H/9f/1//X/9f/3/zvvX/x9M+v/d6f/3oP/fr/78sP6//r/+P1kB+/8x998TZlKR/A8AAABVEHP/vWEm8j8AAACURsz9U2Em8j8AAACURsz902EmFcn/+v/6/6vu/zc9eP3/CvT/X714v/r/Of3/YtH/707/v4f+9f9Hsmr3/33+/3X3/0f1/ymVovX/Y+7fFWZSkfwPAAAAVRBz/+4wE/kfAAAASiPm/j1hJvI/AAAAlEbM/XvDTCqS//X/9f99/r/+v8//77x//f/BpP/fXf/7//Eh6v/7/H/9f5//r//PUkXr/8fcf1+YSUXyPwAAAFRBzP37wkzkfwAAACiNmPv3h5nI/wAAAFAaMfcfCDOpSP7X/9f/1//X/9f/77x//f/BpP/fXdU//39jrwPQ/9f/1//X/2eVHvrD5q+K1v+Puf9gmElF8j8AAABUQcz9rw8zkf8BAACgNGLu/5UwE/kfAAAASiPm/l8NMylL/u/RPNT/1//X/9f/1//vvH/9/8Gk/99d1fv/Pen/6//r/+v/01dF6//H3H8ozKQs+R8AAABIuf/XwkzkfwAAACiNmPvfEGYi/wMAAEBpxNx/OMykIvlf/1//X/9f/1//v/P+17r/PxbvV/9/VfT/u9P/70H/X/9f/1//n74qWv8/5v43hplUJP8DAABAFcTcf3+YifwPAAAApRFz/5vCTOR/AAAAKI2Y+98cZlKR/K//r/+v/6//r//fef8+/38w6f93txb9/2H9f/1//X/9f/1/gqL1/2Puf0uYSUXyPwAAAFRBzP1vDTOR/wEAAKA0Yu5/W5iJ/A8AAAClEXP/28NMKpL/9f/1//X/9f/1/zvvX/9/MOn/d+fz/3vQ/9f/1//X/6evitb/j7n/18NMKpL/AQAAoApi7n8gzET+BwAAgNKIuf8dYSbyPwAAAJRGzP3vDDOpSP7X/9f/1//X/9f/77x//f/BpP/f3YD1/395c7hc/z+n/1/s47/W/v9I29c3pP//w+X6/wvr2m+v/8+NULT+f8z97wozqUj+BwAAgCqIuf/dYSbyPwAAAJRGzP3vCTOR/wEAAKA0Yu7/jTCTiuR//f/6cSy2l/X/y9r/H9L/1//X/68I/f/uBqz/7/P/2+j/F/v4ff6//j9LFa3/H3P/e8NMKpL/AQAAoApi7n8wzET+BwAAgNKIuf+hMBP5HwAAAEoj5v73hZlUJP/r//v8/2r0/33+f6b/r/9fEfr/3en/96D/r/9ftP7/f+r/M9iK1v+Puf/hMJOK5H8AAACogpj73x9mIv8DAABAacTc/5thJvI/AAAAlEbM/R8IM6lI/tf/H5T+/8SA9v8f0/+/gf3/O2/Ot9P/1/9nkf5/d/r/Pej/6/8Xrf/v8/8ZcEXr/8fc/8Ewk5Xn//EVbwkAAAC8KGLu/60wk4r8+z8AAABUQcz9vx1mIv8DAABAacTc/zthJhXJ//r/N6T/3/jS5//7/P/29eHz//X/9f9vvLXr/8d3Hv1//X/9/0j/v0D9/4v6/xRD0fr/Mff/bphJRfI/AAAAVEHM/R8KM5H/AQAAYCB0+ky2djH3Hwkzkf8BAACgNGLuPxpmUpH8r/8/KJ//r/+fVa3//2db/+X733330V36//r/+v/XZE0//7/+4vf5//r/+v+J/n+B+v8+/5+CKFr/P+b+Y2EmFcn/AAAAUAUx9/9emIn8DwAAAKURc//xMBP5HwAAAEoj5v6ZMJOK5H/9f/1//f+C9v8H+PP/4/nQ/2/Vt/5/fNPV/+8o79+nVXRj+//vX+yJ6/9fa/9/rOOl+v/6/4N8/Pr/+v8sVbT+f8z9s2EmFcn/AAAAUAUh9w+dyOfiFfI/AAAAlEbM/SfDTOR/AAAAKI2Y+z8cZlKR/K//r/+v/6//7/P/O++/W/+/NuLz/4sq9e9/3nih6P+3KU7/vzP9f/3/QT5+/X/9f5YqWv8/5v65MJOK5H8AAACogpj7PxJmIv8DAABAacTc/9EwE/kfAAAASiPm/lNhJhXJ//r/+v/6//r/+v+d91/Yz//X/+9qtf17/f9A/1//X/9f/1//nz4oWv8/5v7TYSYVyf8AAABQBTH3nwkzkf8B/o+9O2myqz7vOH47SKVWwSK7LLJJVZZ5CSySdfICssgmi6QqlUVIQhIyIzKPJNjGs43B84AHMBhjGzwP4Akbz2Abz/OAJ4xNyUX38zxS3z59bnfrdvc5///ns+CJOjT3Qqkk/dT6+gAAQDNy918Vt9j/AAAA0Izc/X8at3Sy//X/+v9m+//f1P/v9fr6f/1/y/T/4/T/K+j/9f/6f/0/azW1/j93/5/FLZ3sfwAAAOhB7v4/j1vsfwAAAGhG7v6r4xb7HwAAAJqRu/8v4pZO9v9S/7+xmFj/n33tEff/+TL6/5b6f8//3/P19f/6/5Ydb/9/3ZM/8un/9f/6/6D/31f/f2avz9f/06Kp9f+5+/8ybulk/wMAAEAPcvf/Vdxi/wMAAEAzcvdfE7fY/wAAANCM3P1/Hbd0sv/X9/z/s1sf9/z/C/T/+v/l7x/6f/2//v/oef7/uJ76/6sfvPxPHr3zV+86yOvr//X/nv+v/2e9ptb/5+7/m7ilk/0PAAAAPcjd/7dxi/0PAAAAzcjd/3dxi/0PAAAAzcjd//dxSyf7f339/9E8/z/p//X/C/2//n/p30f/r/8fov8fN/X+/7Tn/+v/Z/z+9f/6f3abWv+fu/8f4pZO9j8AAAD0IHf/P8Yt9j8AAAA0I3f/tXGL/Q8AAADNyN1/Lm7pZP/r/4++/39C/6//j6v/1//r/4+e/n/c1Pv/dT7//zCvr//X/+v/9f+s19T6/9z918Utnex/AAAA6EHu/n+KW+x/AAAAaEbu/n+OW+x/AAAAaEbu/n+JWzrZ//p/z//X/+v/9f/Dr6//nyf9/zj9/wr6/0vt50/r//X/+n8udsD+//GRH7bX0v/n7v/XuKWT/Q8AAAA9yN3/b3GL/Q8AAADNyN3/73GL/Q8AAADNyN3/H3FLJ/tf/6//1//r/w/d/+/+rrdF/z9M/3889P/jJtP/b5wa/HC3/f9j22+0gf7f8//1//p/dpja8/9z9/9n3NLJ/gcAAIAe5O7/r7hlZP8f+DfzAQAAgBOVu/+/4xZf/wcAAIDZy+osd///xC2d7H/9v/5f/6//9/z/4dcf6//vuuj96f+nRf8/bjL9/x667f8XF96v/n++71//r/9nt6n1/7n7/zdu6WT/AwAAQA9y918ft9j/AAAA0Izc/f8Xt9j/AAAA0Izc/f8ft3Sy/4f7/wv/f/3//uj/d75//f/w94919f/5T9T/j/b/v+X5/33S/487/v7/jP5/5z9f/3+ETvr9N97/n131+fp/hkyt/8/df0Pc0sn+BwAAgB7k7n9K3GL/AwAAQDNy9z81brH/AQAAoBm5+58Wt3Sy/z3/X/+v/59f/7/8/P+k/992HM//Xxx7/39K/79P+v9xnv+/gv5f/6//9/x/1mpq/X/u/hvjlk72PwAAAPTgxscWW7v/6YuF/Q8AAABzdPGfHVj+A6Uhd/8z4hb7HwAAAJqRu/+ZcUsn+1//r//X/8+///f8/x76f8//3y/9/zj9/wr6/6Po50811v/ftNfnT6H/v1b/z8Ts6P/vufDxk+r/c/c/K27pZP8DAABAD3L3Pztusf8BAACgGbn7nxO32P8AAADQjNz9z41bOtn/R97/n937tfX/+n/9v/5f/6//Xzf9/zj9/wr6f8//9/x//T9rtaP/v8hJ9f+5+58Xt3Sy/wEAAKAHufufH7fY/wAAANCM3P03xS32PwAAADQjd/8L4pZO9r/n/+v/9f/6f/3/8Ovr/+dJ/z9O/7+C/l//r//X/7NWU+v/c/ffHLd0sv8BAACgB7n7b4lb7H8AAABoRu7+F8Yt9j8AAAA0I3f/i+KWTva//v9o+//8uP5f/7/Q/+v/9f/Hotv+f2PoZ6Ld9uj/7/+jc7+z8yP6f/2//l//r/9nDSbR/5+/8KvL3P0vjls62f8AAADQg9z9L4lb7H8AAABoRu7+l8Yt9j8AAAA0I3f/y+KWA+7/X17ruzo++n/P/9f/6//1/8Ovr/+fp9n1/6d3ftPz//X/+v/5vn/9v/6f3SbR/1/07dz9L49bfP0fAAAAmpG7/xVxi/0PAAAAzcjd/8q4xf4HAACAZuTuf1Xc0sn+1//r//X/+n/9//DrH7b/31wM0/8fj9n1/0v0//p//f9837/+X//PblPr/3P33xq3dLL/AQAAoAe5+18dt9j/AAAA0Izc/a+JW+x/AAAAaEbu/tfGLZ3sf/2//l//r//X/w+/vuf/z5P+f5z+f7FY3DbyBob6//Nn9P/6f/2//p9Dmlr/n7v/dXFLJ/sfAAAAepC7/7a4xf4HAACAZuTuvz1usf8BAACgGbn7Xx+3dLL/9f/6f/2//l//P/z6+v950v+P0/+v4Pn/+n/9v/6ftZpa/5+7/464pZP9DwAAAD3I3X9n3GL/AwAAQDNy978hbrH/AQAAoBm5+++KWzrZ//p//b/+X/9/JP3/Of3/Mv3/8Ti6/n+h/9f/6/9X0P/r//X/LDuu/v/x+PF+Vf+fu/+NcUsn+x8AAAB6kLv/7rjF/gcAAIBm5O5/U9xi/wMAAEAzcve/OW7pZP/r//X/+n/9v+f/D7++/n+ePP9/nP5/Bf2//l//r/9nrY6r/9+r91/+du7+t8Qtnex/AAAA6EHu/nviFvsfAAAAmpG7/964xf4HAACAZuTuf2vc0sn+1//r/3f2/4uF/l//r//fdgz9/+ZC/792+v9x+v8V9P9t9v+/tGio/z+75+fr/5miqfX/ufvfFrd0sv8BAACgB7n73x632P8AAADQjNz974hb7H8AAABoRu7+d8YtLe3/J/ZO3+bf/59Z+kT9/2KxeOgaz//X/4+8vv5/Mv1//VfV/6+P/n+c/n8F/X+b/b/n/+v/OTFT6/9z978rbmlp/wMAAEDncve/O26x/wEAAKAZufvfE7fY/wAAANCM3P3vjVs62f/z7/+XP1H/v7ik5//r/7c+oP/X/+v/Z+tS+/ubN+PnNP2//l//P9jPb+zx656F/l//r/9nwNT6/9z974tbOtn/AAAA0IPc/ffFLfY/AAAANCN3//1xi/0PAAAAzcjd//64pZP9r//X/+v/59n/b+r/9f/6/0F79vdX7O/z1/X8/yuv/O0H9P/6/xb7/zH6f/2//p9lU+v/c/d/IG7pZP8DAABAD3L3fzBusf8BAACgGbn7PxS32P8AAADQjNz9H45bOtn/u/v/04vtQnXbUP8fjZr+/yL6/53vX/8//P3D8//1//r/o3epz99fV//v+f+He//6f/3/nN//gfr/X9v9+fp/WjS1/j93/wNxy8jw2/stAQAAAFOUu/8jcUsnX/8HAACAHuTu/2jcYv8DAABAM3L3Pxi3dLL/Pf9f/6//1//r/4dfX/8/T/r/cfr/FfT/+n/P/7/qDy7T/7M+U+v/c/d/LG7ZGn6/fsUh/zUBAACACcnd//G4pZOv/wMAAEAPcvd/Im6x/wEAAKAZufs/Gbd0sv/1//p//b/+X/8//Pr6/3nS/4/T/6/QT/+/OfTBk+7nL9VJv/9m+n/P/2eNptb/5+7/VNzSyf4HAACAHuTu/3TcYv8DAABAM3L3fyZusf8BAACgGbn7H4pbOtn/+n/9f/v9/+/r/5deX/+v/2+Z/j9/Rh+m/1+hn/5/0En383N///r/sf7/4D8e0oap9f+5+x+OWzrZ/wAAANCD3P2fjVvsfwAAAGhG7v7PxS32PwAAADQjd//n45ZO9r/+v6/+f2PRY//v+f/6f/1/T+bT/99yauijnv+v/9f/z/f96/89/5/dptb/5+5/ZONUl/sfAAAA5up3f+OPH97v3/vI1l83F1+IW+x/AAAAaEbu/i/GLfY/AAAANCN3/5filk72v/6/r/6/z+f/6//1//r/nsyn/x+m/9f/6//n+/71//p/dpta/5+7/8txy0XDb/B/oAcAAACYjdz9X4lbOvn6PwAAAPQgd/9X45Zd+//8Pv9UOwAAADA1ufu/Frd08vV//f/E+//FEfX/8ffp/7fp//X/Q6+v/58n/f+4S+z/z2/o//X/I/T/+n/9P8um1v/n7r/7jkWX+x8AAAAateN3FL6+9dfNxTfiFvsfAAAAmpG7/5txi/0PAAAAzcjd/624pZP9r/+feP9/qOf/n63/y/P/O+//r98cfH39v/6/Zfr/cZ7/v4L+X/+v/9f/s1YH6P+3BulR9/+5+78dt3Sy/wEAAKAHufu/E7fY/wAAANCM3P3fjVvsfwAAAGhG7v7vxS2d7H/9/wn0/zecWSyOtP/fx/P/9f999P97vH47/f+vXH7uvt/7w9tv1f9zwXH2//l9Qf+v/9f/b9P/6//1/yyb2vP/c/d/P27pZP8DAABAD3L3Pxq32P8AAADQjNz9P4hbntz/957UuwIAAADWKXf/D+OWTr7+r/9v8fn/8+z/87/1CfT/5+bX/2dT3Hv/7/n/+v/dPP9/nP5/Bf2//l//r/9nrabW/+fu/1Hc0sn+BwAAgB7k7v9x3JL7f+PAv3UPAAAATEzu/p/ELb7+DwAAAM3I3f9Y3NLJ/tf/6/8P2/+f9fx/z//X/2/R/0+L/n+c/n8F/b/+X/+v/2etptb/5+7/adzSyf4HAACAHuTufzxusf8BAACgGbn7fxa32P8AAADQjNz9P49bOtn/+n/9/1Se/5/0/xc+T/+/Tf+v/z8I/f+4g/T/lw38ukD/r/8fo//X/+v/WTa1/j93/y8CAAD//zJLcR4=") chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7420, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9}}, 0x50) read$FUSE(r4, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r7, r4, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x80086601, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x702, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000024000900000000001f00000006000000"], 0x14}}, 0x0) 41.452612909s ago: executing program 1 (id=212): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8d}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x400) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES64=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 40.224479324s ago: executing program 1 (id=215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1004400, &(0x7f0000001940), 0x6, 0x588, &(0x7f0000000300)="$eJzs3U1sHFcdAPD/TOzsOnGaFHooCGgohYCirmOnjapeWi5IUFUgFU49pNZ6Y0VeZyPvutTGB+fEgSsSlTjBhQsnDpU4IPWEuHKDG5dyQCooAtVICE014914d7ObbOOPiePfTxrte/P1f2/kfeN5szMvgBPrYkRsR8TpiHgnIs5HUsxPulO8vjvl631yd6u+c3ernkSWvfWvqe4etuq99XvORsRPR8Sq9KXbG5sri81mY62bn+us3p5rb2y+eHN1cbmx3Li1sHBt/tqVV66+vHBgdX1u9Xcff+fmGz/6w++//NGft7/1k7zMr3WX5XXrWzXJsmz/AV/rHZfpmO3OSiMiP3Jv7H/vj4VT3fqcLrsgPJL87/FzEfF8N31PtbwyAQCHK8vOR3a+P78nHchlWTJiHQDg+Mmv+WcjSWvd6//ZSNNarejDqz4TZ9Jmq925fKO1fivpdfFNpzduNhtXir7CiEpMJ3l+PiIuFNNufmEofzUino6In1dminyt3moulfIfDwBwduj8/59Kfv6vTLKpOwQAcJw5kwPAyXP/+X+6lHIAAEfH9T8AnDx95/+J7vwDAMdfdejZ/5Gy5EjKAgAcjZH9/2+f20s/mwy94gsAOO7c/weAE+UHb76ZT9lOlhTvv156d2N9pfXui0uN9kptdb1eq7fWbteWW63l4p09qyN2cac/02y1bs+/FOvvzXUa7c5ce2Pz+mpr/VbnevFe7+sNDxYAQPmefu7DvyYRsf3qTDFFbyyHh/8gADjm0oiZsssAlONU2QUASjNVdgGA0uiPBx72496RPxGaiYj3x2+jYwEeb5e+MKb/f/h/g8H7Af8/gNGxgZJ1v9a6AeAE2l//v94DOM4efOL3YBA8ybIsMZ4/AJwwE1zB+4kgPOEe6f4/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnHCzxZSkte5Y4LORprVaxLmIuBDTyY2bzcaViHgqIv5Sma7k+fmyCw0A7FP6j6Q7/tel8y/MDi89nfy3UnxGxI9/+dYv3lvs9IYOvDe/834xv7O2MDJA5fDrAAD0mRqe0TtPF599F/Kf3N2q96ajLODH396Lv3N3q743HvFUt/DVyOed+XcyUJnkgAYm3r4TEc8O1z+9t/xCd+TT4fh57HOHFj+KGs4OxB/8Nyotlu1+5sfi8zMTxjuAMsOT4sO8/Xl91PcvjYvFZ/f7NzXYmFbjZ/c3ro+gaP+qETvZbvu30xc/3//3z1WLtmZU+3dx0hgv/fG7Y5fdOZV9cSqiF3unr/3ZVS1So+K/MGH8v33pK8+PO1jZryIuxYPi76bmOqu359obm7/93gd/Wm4sN24tLFybv3bllasvL8wVfdRzvZ7q+/3z1ctPja9/xJkx8asPqf/XJ6z/r//3zttffUD8b35tVPw0nnlA/Pyc+I1Ymyj+4pkPxg7fncdfGlP/qYH4pwe2y+ddHt7ZmD/Ij/6+uTRRQQGAI9He2FxZbDYba5Mk0thcWexdaE681UBi5pG2mjARh7bn0YnpgYNQPaxYZ8cs+s1n3uF0HOnxObDEnc+wcqWcop6KZq8/6qErd9fb3k/QLNtHmS9OsE5JDRJwZPa+9GWXBAAAAAAAAAAAAAAAGKf9w+4r/w74oaj+h+HKriMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPrk8DAAD//xa4xxY=") syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[], 0x1, 0x206, &(0x7f0000002040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010000000000000000007e"], 0x14}}, 0x0) (fail_nth: 1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) 35.76865857s ago: executing program 1 (id=219): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./bus\x00', 0xb00890, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x4, 0x644, &(0x7f0000000980)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000880)=""/150, 0x96) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b4020000000000006111a100000000008500009acf007d6c000095000000000000002362ad830e4a3ef5a3615f5ca553589a7850a46ad7db69a85495e8ff83fc448917b6d7afed5ea6d4a8aabed1032fe6cc031153117b10b0926b6a7204c23a179b31f50d11ca5a7a6a1b5cadd7b91bd8770560bc34429f27b2ef1b958e90d19d5717"], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./bus\x00', 0xc0ed000e, &(0x7f0000000900)={[{@noblock_validity}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@resuid}, {@debug}]}, 0xfe, 0x477, &(0x7f0000001380)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) r5 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x4, 0x0, 0x4000, 0x2000, &(0x7f0000826000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) ptrace(0x10, r4) ptrace(0x11, r4) open_by_handle_at(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000000200000000008a"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 34.835932169s ago: executing program 4 (id=222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x161, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8}, 0x90) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwritev2(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, 0x20a6, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000700)={{0x0, 0x0, 0x80}}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 34.441966182s ago: executing program 1 (id=224): socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440), 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="5200030007"], 0xd) write$binfmt_elf64(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x98, 0x70, 0x31, 0x8, 0x681, 0x10, 0xabe9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x26, 0xaf, 0x7}}]}}]}}, 0x0) 34.005635618s ago: executing program 4 (id=226): syz_io_uring_setup(0x24fa, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000040)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20048004, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) 33.003375753s ago: executing program 4 (id=227): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 32.92455506s ago: executing program 1 (id=228): ioperm(0x0, 0xa875, 0x10000005) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mq_open(&(0x7f0000000000)='\x00', 0x40, 0x8, &(0x7f0000000100)={0xffffffffffffff6a, 0xd804, 0x3}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000180)={0x0, 0x1, 0x7}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 32.305485262s ago: executing program 4 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x8020404) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000001c0)='/dev/loop-control\x00', 0xfffffffffffffffc) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x120) write$UHID_DESTROY(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x4c80, &(0x7f00000014c0)={0x0, 0x0, "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", "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"}) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1021800, &(0x7f0000000440), 0x4, 0x518, &(0x7f0000000f80)="$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") ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_clone(0x6000080, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000180), 0x0) ptrace$ARCH_GET_CPUID(0x1e, r4, 0x0, 0x1011) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) kcmp(r4, r5, 0x2, r2, 0xffffffffffffffff) 28.108491716s ago: executing program 4 (id=235): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x0, 0xc801, 0x0, 0xffffffffffffffff}], 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000640), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000100)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RVERSION(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\b\x009P2000.u'], 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000006a00000126bd7000fddbdf250200000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="080001000000000004000b0008000a000200000004000b00080001000200000004"], 0x54}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x20000880) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) io_uring_setup(0x3ab6, &(0x7f0000000480)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ocfs2_dlmfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 14.698877959s ago: executing program 0 (id=259): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x3, 0x200000) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000100)="6a8f826fbdf3aaacec92fed9e7379a82fd456aa88c1ab5ecf3a4d9bb797bcdf34fdd7bcb42cf51ba8a382cab340b6dc5fe003a423f1f85f10cad02d730f26f709a51b6cfbe50387238d06189c33004c1cff4a9af45ef3b9815e293e6ad6e22e98a3fbf0fb3ee1d7b8d66a2dd933711298b4b6b6434cd827c34fed32769ea00f13ace71201e61e3f93f618c32c28bfea280341b7a6ef54c8b9efd751bc91a8c53e9d4fcac59f18fdc1de6e8f32eb87a9bacdadd27a1c497c668c08bd064455762ce7c78de7b220f4cdfb6a2c3fb34555d9f84cb214c6dee3cedf74ca0df2379daa47647fc720ab8290d0afa348e49") r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000d00)=ANY=[@ANYBLOB="1201000300000020253b9a20e9ba3696513dad637a05a8a44000010203010902240001017f2010090400090207010104090501022000040006"], &(0x7f0000000600)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x56, 0x7, 0xb, 0xff, 0x6}, 0x29, &(0x7f00000003c0)={0x5, 0xf, 0x29, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "bbd3cf5d42130590ba09be4cb80a1dbf"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x5, 0x7d, 0x1}]}, 0x4, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x424}}, {0xcf, &(0x7f0000000440)=@string={0xcf, 0x3, "8d1a987d85febddfda88d586ad7b7ceda9cebee66dbd3b21f7697d6e9f485ff6fad0a480cdb3d37ad034f885ca9ca4798695259980f4676becb827cbb4d47671c562fad32f0804c3354505bfc117f65eb54f3b3c3767bfeecce9037398d3dc84cff8ab4f3263ef8475d62a95352a0432f5a473dbc17ed09409ff195410fd6b9623f7505895ef591a711e531549452d74ee3084ea4fb65707766abd989322334d93adfacfc11cae78861dbffa19d51926b984d75c9c3d44c49020122396b167e67b4a4d35da03096550278422a0"}}, {0x70, &(0x7f0000000540)=@string={0x70, 0x3, "409faf7d7ea2324f9ea69c9ca4fa262c064a55792c088563878192d3a3c746d07a1351d934268efd19a099c93d18a6cf8a1e5a48bb4f7ee033b1cf16f3f911a7309bcd98006cb32c6526d2fcc945967afcb893e21a162db1d486635792761871957d7e5ef5549811969db8109b01"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xf4ff}}]}) syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000680)={0x40, 0x9, 0x26, {0x26, 0x22, "5471b27133fc0c62f619d88ff4b18433dacaa7f5f60d6dcd6226b105fc93dd69b91f96c0"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}, &(0x7f0000000700)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x90, 0x2, 0x200}, @wireless={0xb, 0x10, 0x1, 0x8, 0x24, 0x2, 0x4, 0x0, 0x8}, @generic={0x1e, 0x10, 0x4, "db7725186ea4420d418670cd445dcdd101ca7bccd371f068dd4f7d"}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x1, 0x5, "616aba25", "eff0861f"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x1, 0x7f, 0x0, 0x1, 0x400, 0x2}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x40, 0x9, 0x3b, "625691b6d5e77a602222dd054c976651c7a177034d702070f203ad8db267cc6a99cd5cbffed22e5ba9fbe9c25815f3215ec55ea0877d5c2f2ef987"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x21}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x20}}, &(0x7f0000000980)={0x40, 0x7, 0x2}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "6cba"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "01b7"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0xa}}) (async) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000200), 0x1, 0x50ed, &(0x7f000000a2c0)="$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") (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, &(0x7f0000000180)=""/216, 0x46, 0xd8, 0x1}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r2 = getpid() (rerun: 32) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (rerun: 32) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback=0x7f000002}, 0x57) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfdef}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = dup3(r6, r7, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x20, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) (async) write$binfmt_script(r6, 0x0, 0x0) 10.813815397s ago: executing program 0 (id=266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d2, 0x0) 10.476416745s ago: executing program 3 (id=268): syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@largeio}, {@prjquota}]}, 0x1, 0xb8e1, &(0x7f0000013cc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4995}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff}}]}}}]}, 0x58}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60efc70000042f0000000000000700f1ffffff0000000000ff0200000000000000000000000000010000883e"], 0x0) sendto$inet(r7, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x43, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xf7e, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/185, 0x10}}], 0x1, 0x12040, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0xb8, &(0x7f0000000200)="3ad5aa69e1f418dc25b36ef21eb2a1e9df701826ff283f598242bfda63e1854c6bc43150aea39d4321e3ce6a1ebccd9cc39cc24dcb8511c3ac96e9b02fc68530f9f0b1c4ac1472505021986ab01ec4853491d782e7ec399317f1d2b788b33bf723aa2ec647796447a4cf49fe5c7632a03d7408e766de168127bbe0ee6447858796e4a1fd91d819bf67516a4eeeac0f9cc019b8f3abee607bbef8a8791c83826db04d97dd5151fdf6be00b55686ee8625d22cd684ba95c791", 0xba, 0x0, &(0x7f00000003c0)="b5d0064118d5c34507f9c79976ca22892fec7b702894eabab31ed847b9e324437966bb7c0809fbe82f78ee93bda33ba6b8d3f7b0e6cd7d69cc235c6495857b70b5f095531c5bd8a433967832b60d5a4a9cfe94b36b3bf41619bfc06c0b29ce96b990f795b86cb8b4500e568c78e60fba46fd79f9bfe80062c60362c3304dff75dbaf30ce9630b5480d3ce56966f1962b5eb5887954f5abc1f0ab696d372119dfcee13b15d40201801fa981004ea3d75da9cf68c28052e5b1d0ec"}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c9002000c0000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 9.772624964s ago: executing program 0 (id=269): prlimit64(0x0, 0xe, &(0x7f00000014c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$rose(0xffffffffffffffff, 0x104, 0x2, &(0x7f0000000140), 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x8c540) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000640)={0x10, 0x3, 0x1, 'queue1\x00', 0x4}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x74, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4000000000070101000000000c00034000000000000000040c0002400000000d00008eaf0c0003400000000000000004f9b3f58439846cca74db60d777c3a3d4a6a3801a1483c270e759c9a8854aa210521d510dbf8df93b55518dea2f7dd305b7a08c36eea1fa24b020dc6a1ff358b489a12eac340b418365d0edc51723b286"], 0x40}}, 0x24000000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="680000000206010300000000fffff000000000000500010006000000050005000a0000000900020073797a32000000000500040000000000140007800800064000000000080013400000004011000300686173683a6970"], 0x68}}, 0x0) getresgid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x80, 0x7362, 0x80, 0x1, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x4, 0x3, 0x3, 0xc}, 0x48) 7.402737475s ago: executing program 0 (id=270): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x7fffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0020000000000000000000", @ANYRES64=r0, @ANYRES16=r2, @ANYRES64=r1, @ANYRESDEC=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000008c0)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x541003, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create1(0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f00000008c0)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x10001, 0x401f, 0x3}) socket$nl_rdma(0x10, 0x3, 0x14) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create(0x4) 6.87027282s ago: executing program 3 (id=271): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) dup2(r0, r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000040)={0x0, 0x0, 0x802}) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)="0800000084830000", 0x8}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000140)={0x1000200, 0xaf0b, 0x80000000, 0xcfe, 0xfc, "4ae24ce17df2e98c69ba36c40909000000d88f", 0x0, 0xfffffffd}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r5, 0x4b2f, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x1d, 0x20, 0x0}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000002840)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x3a) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x3f0, 0x0, 0x200, 0x200, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'veth0_macvtap\x00'}) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 6.806464545s ago: executing program 3 (id=272): unshare(0x4040600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0ffffffff]}, 0x8) 5.709681797s ago: executing program 3 (id=274): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000580)=ANY=[@ANYBLOB="d8010000", @ANYRESDEC, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x2}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xd}, [@NFTA_SET_ID={0x8}]}], {0x14}}, 0x44}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r4, &(0x7f0000001300)=""/77, 0x4d) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "eef294b85700c433b35f"}}, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5.080436731s ago: executing program 2 (id=276): ioperm(0x0, 0xa875, 0x10000005) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mq_open(&(0x7f0000000000)='\x00', 0x40, 0x8, &(0x7f0000000100)={0xffffffffffffff6a, 0xd804, 0x3}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1, 0x0) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000180)={0x0, 0x1, 0x7}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.163977678s ago: executing program 2 (id=277): syz_mount_image$ntfs3(&(0x7f00000000c0), &(0x7f000001f3c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7370617273652c7370617273652c646d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d63703836362c707265616c6c6f632c003678e60a79e941d93209f05ea7dc6238b7b5969b735ff11d9cdcfecb098c00f414932892e98630d0b353e6004cbc2a3864f2d3976c7f2e2da4f5821a3675c3ff4d92049c58f933190350fd581e479d10d1561791cd53ca536610a909c7baeab3c9b2c02c71a54e351478ad2acd37e8be5821ca0fb38e25cba9f6aefc99e64d72d425ec318bb745870bb201a1244ea63ddf49a4d31c05"], 0x5, 0x1f393, &(0x7f000005db40)="$eJzs3QmYTfX/B/Dv2fd9sTMY+77v+y77FrJvIVu2KBUq0iKVJNmSbElCJUkkUZJdEpIkSVIJSfwfd+5Mcwf/um2n3z3v1/OYc+fM957zufdz77zPOfeY802rKc3a1G+dlJSURESapLhAYowlY8kVJuU2G513JTr9iRBCEUKScg+2Fh8Z0OTqPD3XutvHLM2zfrjSbpX+pkC2mV2+OVP62DZ/W5ZvLrfp229YUr9hSYMGD0/qntRj8ODh3XsM6J3Uq9+w24ontRjQu/uw3kn9Bg3rPTTmx30GDB4yZHRS90G9NHnI0N7DhiV1HzQ66bbeo5OGD04aPnR0Uvdbu/cblFS8ePEkTSbwB7VdEnQFAAAAAAAAAAAAAAAAAADw97hyhVyhgi4CAAAAAAAAAAAAAAAAAAAA/pL6jZrUK0m4tO8pQpGahCJzKUKI+Nu41P/3z2S4v0kI6Ra5lTnytWHqrc2VSw64uJ+60ZS/XjHXORGhJCGkb9ryadI4couKVsz97nrIkeiC9qdMUtfLMsmkKalP2kS/Hxut/eqjT19I9ei0ZuqMM8x1p1aNlGdoecxyMj5b6ZZjxkzSphaV8kcYrly5cuV6T9Hf69r6IEzQ/3BD///XxJsvqRGeOo3NF+aG+d8tQ/4z0VSkM6zv38j/IWnLp0mrePM/Kbqg6DR1vWJa/jcl/chQMjQ6/0bbAVTG5zfp+tPc9JV0z+9/XcZuQrig/+GG/ocbfU3+0/9P/tP/i/mfduQiZZo+/5uQweRWUp/0IwNI7+j8G+V/jeg0Lf8zLDd1mrsmFbkT8h/++9D/cEP/w+3a/Gei+X8iQ/7z0W0ANsMSzGhepuZ/yT+Z/7HH+SnSIu6cj5W6fIFJJu3IYDKAjCADSe/IcsemrYcmvdLWyI69+jhSPw9wIz8tG32HuGQOZZOUZCecHb1/ZF7KAO7q7n8STWLGZPwZiW4rlUxbP0vs6K1hZDS5k9xGupMBka2R1OMRV7d9CqaN54ia9kxH+xV95GPT5mdOOy6U+Xe3QzJ2E8IF/Q839D/c2Gvyn43m/5brfP7P3mD//+/K/7+0n5/6AXr0r/+n38+vRYaT4WQoqUt6kz7R+bHbAcwf3g6YRK7dDojMi3M74EbHGVJl/Bwn9XGlTi2qfmT6144zYPs/3ND/cEP/w+3a/X8ukkhMyrWAMuz/czc4/+//y/+8U7+NmabOz/9bsqXd77fPEShS96/v/0eWTzHFI9+3iMnb3173N/pcv6gZO7XoOpHpFEJI+6s32JTthorRuySTRqQMKRl5HFT0iaGiz0/B6L/0RWbO8FzOjdZIsTWjz3Sshumf8OtMU9dvUfUi3y9PPW7AphxnEDPUmVIL8z/yOQX8M3D+V7ih/+F27fl/fHT/v/11Pv/nA/r8P/35/3F/LhDNx5ppjy+FwCST2qQfGU4Gku5kSNz74zUzzLeoBpHp/1aeYvs/3ND/cEP/w+3a/X8hmv/rr3P8X/iHj/+nz/kmf9N5/lwk5weTwWR45Pv/6nH/P/r/C6zocv6e7Qy8/8MN/Q839D/crs1/MZr/Y6+T/2Lg5/8zf+L8/1jpzwuoTbqTXqRO5NzAYSQlT2PPo6PTbo2NOT7/22IvR2+mHZ8/kyt2GpW6Njp6tYX/xnECvP/DDf0PN/Q/3K7NfymS/xIRmdj85yI/+1v//k9Sxmqo3z3+/7f8v4DIegUmmbQmvUlPMoIMJb0z5Ptv74vU/fHfPn9POWd2CBU7vbq0uqQ1sWqljJxCSMqfHoqeJ7A+7fP3q+NSxtgk9jyB5dF/KY/WjT7+lCa0TF4ZeX5Sp2Oj48YQQhqRRteMn3vocG2a+m2ausnSK2Y8kzb+jM1cuDomdUoyLD99v+no49tCfju/YFG6x5c63szw+KZH/5HIEZWUegumnoN8g3VnHHej5yDjuBs99oyP47+xHRYUfP4bbuh/uF37+b/8//z9Pznwz/+ZP5H/qRWnTNN//t+WDCF1SHcyLJr/1zsun7oX/9v/+6evO82dNCkyTV0O4VKOHyRFz8NLJo3IINKHDI7eK3XjR+2X7bY77jl4IOPj/ndyCdv/4Yb+hxv6H27X7v8r0fP/H6TGXnP+nxKZjohZwp/Ofyn2/H/y7+3/R9Z7Nf/rkVFkOOlNBpFekf3ZUVTq/iwdOf/x987rb0il/LsqS8ojIN1Is+jzGP0aZ335o5sGPJNMmpMepD9plHaOwt+9/JaEiZwX0Z0QkjW6/L6RT1j++vJFJpm0Ir3JENKdDI1sYZFrXjfY/w4a9v/CDf0Pt2v3/9XIvi5FCl7n/H/1Hzz/L+i/yxP7uT+Vdiux8wnb/+GG/ocb+h9u1+7/a/9P/mvI/wSD93+4of/hhv6H27X5r/8/+a8j/xMM3v/hhv6HG/ofbtfmv/H/5L+B/E8weP+HG/ofbuh/uF2b/2b0XPcpJDb/qbR7xPq78j+xc/a/Cu//cEP/ww39D7dr899C/ocI3v/hhv6HG/ofbtfmv/2P5z8Zi/z/r8D7P9zQ/3BD/8Pt2vx3sP8fInj/hxv6H27of7hdm/8u8j9E8P4PN/Q/3ND/cLs2/z3kf4jg/R9u6H+4of/hdm3++8j/EMH7P9zQ/3BD/8Pt2vzPhPwPEbz/ww39Dzf0P9yuzX8qcv0fjYyir73+X+b/9/p/QuTrH73+T/4/ef3fZtHr//w9178ZkXb9m8j1fyJPScp1BtunXc+2edp9LZLh+j/prgucFL3ubMHoZY2u+RtDVOwDTn8d3TNp66XJjrT1towZm36966P/SOR8jZLR5z16fdzocmMeePS5uJJB+m660Ssctk93Pd4/vhxy/cd8nceL7bz/Evz+Dzf0P9xunP/drvP3/7L8jdf//S/kf/rr602J/g3C1Bw2r5P/DonN4SRy7YP438o5vP/DDf0PN/Q/3G6c/w9eJ/+zXueKkf9G/g9JWz4VuTrt35H/N7o+7ZTU9UW3A1qkbQe0SltGxu2AmtF/V2WPTpMiV0uMXDNxbo7oM5vxeQt+OwHX/ww39D/c0P9wS7n+b+EM+V+RMGRKhuP/XIYruP+W+ylSc/+LCScjuXufdipmmjo/iVx73X/6/93vT6mqSYbr/v/eejIu7+p6i0Xu2Yf0IwNI7+hx86t5b6a77v8Z8vvX/T8S/UfS8p4i3SIVEpIt+v3v1hd9FrKyafWR69WX4wbLz7jcjNNrnlA24/JLEZKup6nbIzvSjmmkfA4iRm9dvW/V6ONun/ZzNjIvc/T/jRKeJclN2rdtVDdlmenmNbjOvKbN6/72wvvfOF7yn8fGN7z3P1UH/E9A/8Ot9w3ynyJbqIz53yvmnn8h/68RT/7/3fk6Nlo7FdmDv/Z4WM30Dzjd8lKnuamxker/5dz8dly0rL+Wm73+/F0hAaD/4Yb+By3Y3Oh1w/zvm2H/n/+D+f+7+6XX2UP5M/n/9+z/ZrzuH512a320NykYsjo6XyVk7nJCSDPSLvL1qk5kOBlIhpBOZBgZTe4kxUg/MpB0J7eS3pF/g0gZUppUJOVIOVKJVCDlSElSiXRKtyUSe7sGqUE6/c1LjX2dsdHXWa8bvM64v/o6u/JczOsM/pvw+z/c0P9wu3H+k2uO/8eX/3mnfhszTZ3/V/f/U4///956UvfX5egSrq63ww3yP579/9TlpU5zU+P+3/3/q+scHs3XKWk/ZyPz/up2XOSzB4UnI4b1Hlp8VPfhw4eWItHJdX5WmkQnEanbfxBm6H+4of9B++/t/9OR/C/5J/f/M+Zxxmn8+Z+yP5ox/39vPdHD+6Rg3pTptcf/y2RYD7nudsZfX09K4N5oOyP1Vs30Dzzd8lKnuZnx/8DnDL3+pc8Z4L8Jv//DDf0P2n8v/1P2/3f8yc///878H5Kuqjbx5nJ0fz216tRcltJyuTjpSQaTAdER8R4HSF1u6jQ39cD/4HkAeP+HG/ofbuh/0P5r+X9VxdS8E9PPFWLGYH8wEQhBFwCBQv/DDf0PNyGO/I/5BvmfEMSgC4BAof/hhv6HmxhH/ksxY5D/iUAKugAIFPofbuh/uElx5L8cMwb5nwjkoAuAQKH/4Yb+h5scR/4rMWOQ/4lACboACBT6H27of7gpceS/GjMG+Z8I1KALgECh/+GG/oebGkf+azFjkP+JQAu6AAgU+h9u6H+4aXHkvx4zBvmfCPSgC4BAof/hhv6Hmx5H/hsxY5D/icAIugAIFPofbuh/uBlx5H/sZXuR/4ngmksxQ6ig/+GG/oebGUf+WzFjkP+JwAq6AAgU+h9u6H+4WXHkvx0zBvmfCOygC4BAof/hhv6Hmx1H/jsxY5D/icAJugAIFPofbuh/uDlx5L8bMwb5nwjcoAuAQKH/4Yb+h5sbR/57MWOQ/4nAC7oACBT6H27of7h5ceS/HzMG+Z8I/KALgECh/+GG/oeb/0fz/2dCMsWMQf4ngkxBFwCBQv/DDf0Pt0xx7P9njoT+vdHvkP+JIHPQBUCg0P9wQ//DLXMc+Z8lZgzyPxFkCboACBT6H27of7hliSP/s8aMQf4ngqxBFwCBQv/DDf0Pt6xx5H+2mDHI/0SQLegCIFDof7ih/+GWLY78zx4zBvmfCLIHXQAECv0PN/Q/3LLHkf85YsYg/xNBjqALgECh/+GG/odbjjjyP2fMGOR/IsgZdAEQKPQ/3ND/cMsZR/7nihmD/E8EuYIuAAKF/ocb+h9uueLI/6SYMcj/RJAUdAEQKPQ/3ND/cEuKI/9zx4xB/ieC3EEXAIFC/8MN/Q+33HHkf56YMcj/RJAn6AIgUOh/uKH/4ZYnjvzPGzMG+Z8I8gZdAAQK/Q839D/c8saR/8kxY5D/iSA56AIgUOh/uKH/4ZYcR/7nixmD/E8E+YIuAAKF/ocb+h9u+eLI//wxY5D/iSB/0AVAoND/cEP/wy1/HPlfIGYM8j8RFAi6AAhOpZeCrgAChvd/uBWII/8LxoxB/ieCgkEXAIFC/8MN/Q+3gnHkf6GYMcj/RFAo6AIgUOh/uKH/4VYojvwvHDMG+Z8ICgddAAQK/Q839D/cCseR/0VixiD/E0GRoAuAQKH/4Yb+h1uROPK/aMwY5H8iKBp0ARAo9D/c0P9wKxpH/heLGYP8TwTFgi4AAoX+hxv6H27F4sj/4jFjkP+JoHjQBUCg0P9wQ//DrXgc+V8iZgzyPxGUCLoACBT6H27of7iViCP/S8aMQf4ngpJBFwCBQv/DDf0Pt5Jx5H+pmDHI/0RQKugCIFDof7ih/+FWKo78Lx0zBvmfCEoHXQAECv0PN/Q/3ErHkf9lYsYg/xNBmaALgECh/+GG/odbmTjyv2zMGOR/IigbdAEQKPQ/3ND/cCsbR/6XixmD/E8E5YIuAAKF/ocb+h9u5eLI//IxY5D/iaB80AVAoND/cEP/w618HPlfIWYM8j8RVAi6AAgU+h9u6H+4VYgj/yvGjEH+J4KKQRcAgUL/ww39D7eKceR/pZgxyP9EUCnoAiBQ6H+4of/hVimO/K8cMwb5nwgqB10ABAr9Dzf0P9wqx5H/VWLGIP8TQZWgC4BAof/hhv6HW5U48r9qzBjkfyKoGnQBECj0P9zQ/3CrGkf+V4sZg/xPBNWCLgAChf6HG/ofbtXiyP/qMWOQ/4mgetAFQKDQ/3BD/8Otehz5XyNmDPI/EdQIugAIFPofbuh/uNWII/9rxoxB/ieCmkEXAIFC/8MN/Q+3mnHkf62YMcj/RFAr6AIgUOh/uKH/4VYrjvyvHTMG+Z8IagddAAQK/Q839D/caseR/3VixiD/E0GdoAuAQKH/4Yb+h1udOPK/bswY5H8iqBt0ARAo9D/c0P9wqxtH/teLGYP8TwT1gi4AAoX+hxv6H2714sj/+jFjkP+JoH7QBUCg0P9wQ//DrX4c+d8gZgzyPxE0CLoACBT6H27of7g1iCP/G8aMQf4ngoZBFwCBQv/DDf0Pt4Zx5H+jmDHI/0TQKOgCIFDof7ih/+HWKI78bxwzBvmfCBoHXQAECv0PN/Q/3BrHkf83xYxB/ieCm4IuAAKF/ocb+h9uN8WR/01ixiD/E0GToAuAQKH/4Yb+h1uTOPK/acwY5H8iaBp0ARAo9D/c0P9waxpH/jeLGYP8TwTNgi4AAoX+hxv6H27N4sj/5jFjkP+JoHnQBUCg0P9wQ//DrXkc+d8iZgzyPxG0CLoACBT6H27of7i1iCP/W8aMQf4ngpZBFwCBQv/DDf0Pt5Zx5H+rmDHI/0TQKugCIFDof7ih/+HWKo78bx0zBvmfCFoHXQAECv0PN/Q/3FrHkf9tYsYg/xNBm6ALgECh/+GG/odbmzjyv23MGOR/ImgbdAEQKPQ/3ND/cGsbR/63ixmD/E8E7YIuAAKF/ocb+h9u7eLI/5tjxiD/E8HNQRcAgUL/ww39D7eb48j/9jFjkP+JoH3QBUCg0P9wQ//DrX0c+d8hZgzyPxF0CLoACBT6H27of7h1iCP/O8aMQf4ngo5BFwCBQv/DDf0Pt45x5P8tMWOQ/4nglqALgECh/+GG/ofbLXHkf6eYMcj/RNAp6AIgUOh/uKH/4dYpjvzvHDMG+Z8IOgddAAQK/Q839D/cOseR/11ixiD/E0GXoAuAQKH/4Yb+h1uXOPK/a8wY5H8i6Bp0ARAo9D/c0P9w6xpH/neLGYP8TwTdgi4AAoX+hxv6H27d4sj/7jFjkP+JoHvQBUCg0P9wQ//DrXsc+d8jZgzyPxH0CLoACBT6H27of7j1iCP/e8aMQf4ngp5BFwCBQv/DDf0Pt56EIuxY1yQkyUyZ4xJCaELMlOjPTK5QuQhFR77hkgghSVdvK5mvfm9eM5+4KeOplPn21a+KmzI2/TzikrcpJ22ckjaOOhIzj2Qmi4kds/7cv61/7jXzAQAAAAAAAOAPS7+vHrvfDgAAAAAAAAD/ixo1q9u+IJGumV+QELKaJ+SEkfK9RvZT17s/G/3al7SK3OJSv26uXHLAxf3UDafR8w2InDLho9+KTDKpRYaT4WQoqUt6kz6RuVT0VEQx/vVkkH49tUl30ovUIQPICDIsMleI/pwn3UiLP/V4amZYjxBZTz8ynAwk3ckQIkTX0400iW/5SdEFJsUun4ssfzAZTIaTfmQASTlvQvmD9Wvk/3mezNT665FRZDjpTQaRXiTlNAv6T/SBjXnFpO9DEzKY3ErqR+rvHe03iU67kcbxredI9K77Y58nlkkmTUl90iZtySlf434cN+iDmLb8pqQfGUqGppxHE31nSfG/nq7tR1JqP1qT3qQnGUGGkt7Rt4/8J5ZPR97VJNrR9K/XtmQIqUO6k2GkN2Eic5m/o/605bcjgyPvuYGkd9ry2pO6f3X5kdcrxRRP156r/W0Ts9y8U7+N3P9G09T3ca90bS4W6WCf6OuzOOkZqT9lRLboejK+n7+YcDKyvPu0UzHT1PkZ608ixCwWuWfqekpG5ue8wfJTl5ex/tT5qY9DTvc4OsQsv1Sk/7lusPzffZ5SyiMF88Y+T78tv3Rk/j+3/DIxz5+Z9kqGP04LugAIFPofbuh/uKH/4aaRq3sTbUgt0ozUJbVIK1KXdCWNSDNSnzQnrUhTUou0IY1Ic9LsH6rATHf76r5zdLOPNIxOkyMVtCGtSCNSm7QlbUg90pU0IY0idf/zktLdHpvu9pWoZFKfNCJNIlU1I7VIU1LvX6jqNyXT3a5NSHQvipDa0Y3hZNKc1CaNST1Sh7SJ9Lbuv1pfzRvcTt3Fv/r6u1pb20iH25AOpCupS+qR1qROZE4L0ibySvyntEh3+/r9bUeakyakbaSz/36P0/+Ftprp93HSnr/Y+v7N9+5VQzLUp0Zvp06TI79Xrv6GCcbYG8z/rb+NIr/76pH2pCtpRZqT5v/K75VUU9Ldrvm79dUiTUgT0pzU+Vd6e9XcdLev//6oHXnfXn21tfiHa7me5b9bXytSj7SIZFvryDukBWkeeU7/nS6vv0F9qc1OJvVIrQDet6l2ZCgp9b/8p05T6gvOkRv+JOUXYHLk/dCANCD1ItsubSPPXZO0LGkd2XaoF/mt/Y9IdyRv7I1+AAAA8B9z/sp1/BZdYzPOqhF792tPHAAAAAAAAACA/5wzNnMh/aHqMZEj1+zYhoSQ9tF5KX8TsGz0s0eXTCJ2hr8LkDllXoa/B/h731/VMnllZFlj41j/HOra9Ufm/Yn1zz10uDZN/Xa4vld0/SXTfR6Xsv7sKUOYmL9xGPn6R9YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+SMzVwg1G/fjyGEUIQd25AQ0j46zyWE0KQsoaPfTSI2oVLuw9mRSeaUeSkDuCRCSBJNfvf7q1omr4wsa2wc659DXbv+yLw/sf65hw7XpqnISiN6RddfkhBSM2b92VOGMC65QuVKXX/k6x9ZDwAAAAAAAECwKEIThrCEIzwRiEgkIhOFqEQjOjGISSxiE4e4xCM+yUQykywkK8lGspMcJCfJRZJIbpKH5CXJJB/JTwqQgqQQKUyKkKKkGClOSpCSpBQpTcqQsqQcKU8qkIqkEqlMqpCqpBqpTmqQmqQWqU3qkLqkHqlPGpCGpBFpTG4iTUhT0ow0Jy1IS9KKtCZtSFvSjtxM2pMOpCO5hXQinUkX0pV0+1P3v4uMIXeTe8i9ZCwZR8aT+8j95AEygUwkD5JJ5CHyMHmEPEomk8fIFPI4eYI8SaaSp8g08jSZTp4hM8izZCaZRWaTOWQueY7MI8+T+eQFsoAsJIvIYrKEvEiWkpfIMvIyWU5eISvISrKKvEpeI6+T1eQNsoa8SdaSt8g68jZZTzaQd8hG8i7ZRN4jm8kW8j75gGwlH5Jt5COynewgO8kuspvsIXvJPvIx2U8+IQfIp+QgOUQOk8/ivP/5DPcfRRGKUDRFUyzFUjzFUyIlUjIlUyqlUjqlUyZlUjZlUy7lUj7lU5mpzFRWKiuVncpO5aRyUklUEpWHykMlU8lUfio/VZAqSBWmClNFqaJUcao4VZIqRZWmSlNlqbJUeao8VZGqRFWiqlBVqGpUNaoGVYOqRdWi6lB1qHpUPaoB1YBqRDWmGlNNqCZUM6oZ1YJqQbWiWlFtqDZUO6od1Z5qT3WkOlKdqE5UF6oL1Y3qRvWgelC9qF5UH6oP1ZfqS/Wn+lMDqAHUIGoQNYQaQg2lhlLDqeHUSGokNYoaTY2m7qLuou6m7qbuperQ46jx1Hjqfup+agI1kZpITaIeoh6mHqYepSZTj1FTqMepx6knqanUOWoa9TQ1nZpOVaOfpWZSs6gkeg41l5pLzaPmUfOp+dQCaiG1kFpMLaFepJZSS6ll1MvUy9Qr1ApqJbWSepV6lXqdWk2tptZQb1JrqbXUOuo8tZ7aQL1DbaTepTZR71KbqS3UZuoDaiv1AbWN2kZtp7ZTO6md1G5qN7WX2kt9TH1MfUJ9Qn1KfUpNpg5Th6kj1BHqKHWUOkYdo45Tx6kT1AnqJHWSOkWdok5Tp6kz1PfUD9T31FnqLHWOOk9doC5QF6mL1CXqEnWZunz1zU9fxdIszdM8LdIiLdMyrdIqrdM6bdImbdM27dIu7dM+nZnOTGels9LZ6ex0TjonnUTnpvPQeehkOpnOT+enC9IF6cJ0YbooXZQuThenS9Il6dJ0abosXY4uT1egK9KV6Mp0FboKXY2uTtega9K16Fp0HbouXY+uT9enG9IN6cZ0Y7oJ3YRuRjejBxcdWLQVPY6aQLWlr3amPf0Y1ZGeQnWiO9Nd6K70k1R3ugc9lepF96b70LfST1PTqP50j6ID6IH0IHomNYQeVHQWNYweTs+hRtJ30KPo0fSd9F30GLpX0Xvoe+kF1Dh6PL2Yup9+gJ5AT6SXUXXpqx2rRz9KT6Yfo6fQj9OvU0/SU+mn6Gn00/R0+hl6Bv0sPZOeRc+m59Bz6efoefTz9Hz6BXoBvZBeRC+ml9Av0kvpl+hl9Mv0cvoVegW9kl5Fv0q/Rr9Or6bfoNfQb9Jr6bfodfTb9Hp6A/0OvZF+l95Ev0dvprfQ79Mf0FvpD+lt9Ef0dnoHvZPeRe+m99B76X30x/R++hP6AP0pfZA+RB+mP6OP0J/TR+kv6GP0l/Rx+iv6BP01fZL+hj5Ff0ufpr+jz9Df0z/QP9Jn6Z/oc/R5+gL9M32R/oW+RP9KX6av0IShGJphGJbhGJ4RGJGRGJlRGJXRGJ0xGJOxGJtxGJfxGJ/JxGRmsjBZmWxMdiYHk5PJxSQxuZk8TF4mmcnH5GcKMAWZQkxhpghTlCnGFGdKMCWZUkxppgxTlinHlGcqMBWZSkxlpgpTlanGVGdqMDWZWkxtpg5Tl6nH1GcaMA2ZRkxj5iamCdOUacY0Z1owLZlWTGumDdOWacfczLRnOjAdmVuYTkxnpgvTlenGdGd6MD2ZXkxvpg9zK9OX6cf0Z25jBjADmUHMYGYIM4QZygxlhjMjmJHMSGYUM5q5k/mVucxcYe5h7mXGMuOY8cx9zP3MA8wEZiLzIDOJeYh5mHmEeZSZzDzGTGEeZ55gnmSmMk8x05inmenMM8wM5llmJjOLmc3MYeYyzzHzmOeZ+cwLzAJmIbOIWcwsYV5kJkSXtPwP3P+d69z/kcjatzM7mJ3MLmY3s4fZy+xjtjP7mf3MAeYAc5A5yBxmDjNHmCPMUeYoc4w5xhxnjjMnmBPMSeYkc4o5xZxmTjNnmO+Zn5kfmbPMT8w55jxznvmZuchcZC5FnwPCUizNMizLcizPCqzISqzMKqzKaqzOGqzJWqzNOqzLeqzPZmIzs1nYrGw2Njubg83J5mKT2NxsHjYvm8zmY/OzBdiCbCG2MFuELcoWY4uzJf7y/X+vvm5sN7YH24PtxfZi+7B92L5sX7Y/258dwA5gB7GD2CHsEHYoO5Qdzg5nR7Ij2VHsKPZO9k52DDuGvYe9hx3LjmXHs/ex97MPsBPYieyD7CT2IfYh9hH2EXYyO5mdwk5hn2CfYKeyU9lp7DR2OjudncHOYGeyM9nZ7Gx2LjuXncfOY+ez89kF7AJ2EbuIXcIuYZeyS9ll7DJ2ObucXcGuYFexq9jX2NfY1exqdg27hl3LrmXXsevY9ewGdgO7kd3IbmI3sZvZzez77PvsVnYru43dxq5nd7A72F3sLnYPu4fdx+5j97P72QPsAfYge5A9zB5mj7BH2KPsUfYYe4w9zh5nT7An2JPsSfYUe4o9zZ5mz7Bn2B/YH9iz7Fn2HHuOvcBeYC+yF9lL7CX2Mnv56mYfR3M0x3Isx3M8J3IiJ3Myp3Iqp3M6Z3ImZ3M253Iu53M+l5nLzGXlsnLZuexcTi4nl8QlcXm4PFwyl4/LzxXgCnKFuMJcEa4oV4wrzpXgSnKluNJcGa4sV44rz1XgKnKVuMpcFa4qV42rztXganK1uNpcHa4uV4+rzzXgGnKNuMbcTVwTrinXjGvOteBacq241lwbri3XjruZa8914Dpyt3CduM5cF64r1+1vXf5E7kFuEvcQ9zD3CPcoN5l7jJvCPc49wT3JTeWe4qZxT3PTuWe4Gdyz3ExuFjebm8PN5Z7j5nHPc/O5F7gF3EJuEbeYW8K9yC3lXuKWcS9zy7lXuBXcSm4V9yr3Gvc6t5p7g1vDvcmt5d7i1nFvc+u5Ddw73EbuXW4T9x63mdvCvc99wG3lPuS2cR9x27kd3E5uF7eb28Pt5fZxH3P7uU+4A9yn3EHuEHeY+4w7wn3OHeW+4I5xX3LHua+4E9zX3EnuG+4U9y13mvuOO8N9z/3A/cid5X7iznHnuQvcz9xF7hfuEvcrd5m7whGe4mme4Vme43le4EVe4mVe4VVe43Xe4E3e4m3e4V3e430+E5+Zz8Jn5bPx2fkcfE4+F5/E5+bz8Hn5ZD4fn58vwBfkC/GF+SJ8Ub4YX5wvwZfkS/Gl+TJ8Wb4cX56vwFfkK/GV+Sp8Vb4aX52vwdfka/G1+Tp8Xb4eX59vwDfkG/GN+Zv4JnxTvhnfnG/Bt+Rb8a35Nnxbvh1/M9+e78B35G/hO/Gd+S58V74b353vwffke/G9+T78rXxfvh/fn7+NH8AP5Afxg/kh/O38UH4YP5wfwY/k7+BH8aP5O/m7+DH83fw9/L38WH4cP56/j7+ff4CfwE/kH+Qn8Q/xD/OP8I/yk/nH+Cn84/wT/JP8VP4pfhr/ND+df4afwT/Lz+Rn8bP5Ofxc/jl+Hv88P59/gV/AL+QX8Yv5JfyL/FL+JX4Z/zK/nH+FX8Gv5Ffxr/Kv8a/zq/k3+DX8m/xa/i1+Hf82v57fwL/Db+Tf5Tfx7/Gb+S38+/wH/Fb+Q34b/xG/nd/B7+R38bv5Pfxefh//Mb+f/4Q/wH/KH+QP8Yf5z/gj/Of8Uf4L/hj/JX+c/4o/wX/Nn+S/4U/x3/Kn+e/4M/z3/A/8j/xZ/if+HH+ev8D/zF/kf+Ev8b/yl/krPBEogRYYgRU4gRcEQRQkQRYUQRU0QRcMwRQswRYcwRU8wRcyCZmFLEJWIZuQXcgh5BRyCUlCbiGPkFdIFvIJ+YUCQkGhkFBYKCIUFYoJxYUSQkmhlFBaKCOUFcoJ5YUKQkWhklBZqCJUFaoJ1YUaQk2hllBbqCPUFeoJ9YUGQkOhkdBYuEloIjQVmgnNhRZCS6GV0FpoI7QV2gk3C+2FDkJH4Rahk9BZ6CJ0FboJ3YUeQk+hl9Bb6CPcKvQV+gn9hduEAcJAYZAwWBgi3C4MFYYJw4URwkjhDmGUMFq4U7hLGCPcLdwj3CuMFcYJ44X7hPuFB4QJwkThQWGS8JDwsPCI8KgwWXhMmCI8LjwhPClMFZ4SpglPC9OFZ4QZwrPCTGGWMFuYI8wVnhPmCc8L84UXhAXCQmGRsFhYIrwoLBVeEpYJLwvLhVeEFcJKYZXwqvCa8LqwWnhDWCO8KawV3hLWCW8L64UNwjvCRuFdYZPwnrBZ2CK8L3wgbBU+FLYJHwnbhR3CTmGXsFvYI+wV9gkfC/uFT4QDwqfCQeGQcFj4TDgifC4cFb4QjglfCseFr4QTwtfCSeEb4ZTwrXBa+E44I3wv/CD8KJwVfhLOCeeFC8LPwkXhF+GS8KtwWbgiEJESaZERWZETeVEQRVESZVERVVETddEQTdESbdERXdETfTGTmFnMImYVs4nZxRxiTjGXmCTmFvOIecVkMZ+YXywgFhQLiYXFImJRsZhYXCwhlhRLiaXFMmJZsZxYXqwgVhQriZXFKmJVsZpYXawh1hRribXFOmJdsZ5YX2wgNhQbiY3Fm8QmYlOxmdhcbCG2FFuJrcU2YluxnXiz2F7sIHYUbxE7iZ3FLmJXsZvYXewh9hR7ib3FPuKtYl+xn9hfvE0cIA4UB4mDxSHi7eJQcZg4XBwhjhTvEEeJo8U7xbvEMeLd4j3iveJYcZw4XrxPvF98QJwgThQfFCeJD4kPi4+Ij4qTxcfEKeLj4hPik+JU8Slxmvi0OF18RpwhPivOFGeJs8U54lzxOXGe+Lw4X3xBXCAuFBeJi8Ul4oviUvElcZn4srhcfEVcIa4UV4mviq+Jr4urxTfENeKb4lrxLXGd+La4XtwgviNuFN8VN4nviZvFLeL74gfiVvFDcZv4kbhd3CHuFHeJu8U94l5xn/ixuF/8RDwgfioeFA+Jh8XPxCPi5+JR8QvxmPileFz8Sjwhfi2eFL8RT4nfiqfF78Qz4vfiD+KP4lnxJ/GceF68IP4sXhR/ES+Jv4qXxSsikSiJlhiJlTiJlwRJlCRJlhRJlTRJlwzJlCzJlhzJlTzJlzJJmaUsUlYpm5RdyiHllHJJSVJuKY+UV0qW8kn5pQJSQamQVFgqIhWViknFpRJSSamUVFoqI5WVyknlpQpSRamSVFmqIlWVqknVpRpSTamWVFuqI9WV6kn1pQZSQ6mR1Fi6SWoiNZWaSc2lFlJLqZXUWmojtZXaSTdL7aUOUkfpFqmT1FnqInWVukndpR5ST6mX1FvqI90q9ZX6Sf2l26QB0kBpkDRYGiLdLg2Vhi0lhEgjpTukUdJo6U7pLmmMdLd0j3SvNFYaJ42X7pPulx6QJkgTpQelSdJD0sPSI9Kj0mTpMWmK9Lj0hPSkNFV6SpomPS1Nl56RZkjPSjOlWdJsaY40V3pOmic9L82XXpAWSAulRdJiaYn0orRUeklaJr0sLZdekVZIK6VV0qvSa9Lr0mrpDWmN9Ka0VnpLWie9La2XNkjvSBuld6VN0nvSZmmL9L70gbRV+lDaJn0kbZd2SDulXdJuaY+0V9onfSztlz6RDkifSgelQ9Jh6TPpiPS5dFT6QjomfSkdl76STkhfSyelb6RT0rfSaek76Yz0vfSD9KN0VvpJOiedly5IP0sXpV+kS9Kv0mXpikRkSqZlRmZlTuZlQRZlSZZlRVZlTdZlQzZlS7ZlR3ZlT/blTHJmOYucVc4mZ5dzyDnlXHKSnFvOI+eVk+V8cn65gFxQLiQXlovIReVicnG5hFxSLiWXlsvIZeVycnm5glxRriRXlqvIVeVqcnW5hlxTriXXluvIdeV6cn25gdxQbiQ3lm+Sm8hN5WZyc7mF3FJuJbeW28ht5XbyzXJ7uYPcUb5F7iR3lrvIXeVucne5h9xT7iX3lvvIt8p95X5yf/k2eYA8UB4kD5aHyLfLQ+Vh8nB5hDxSvkMeJY+W75TvksfId8v3yPfKY+Vx8nj5Pvl++QF5gjxRflCeJD8kPyw/Ij8qT5Yfk6fIj8tPyE/KU+Wn5Gny0/J0+Rl5hvysPFOeJc+W58hz5efkefLz8nz5BXmBvFBeJC+Wl8gvykvll+Rl8svycvkVeYW8Ul4lvyq/Jr8ur5bfkNfIb8pr5bfkdfLb8np5g/yOvFF+V94kvydvlrfI78sfyFvlD+Vt8kfydnmHvFPeJe+W98h75X3yx/J++RP5gPypfFA+JB+WP5OPyJ/LR+Uv5GPyl/Jx+Sv5hPy1fFL+Rj4lfyuflr+Tz8jfyz/IP8pn5Z/kc/J5+YL8s3xR/kW+JP8qX5avyEShFFphFFbhFF4RFFGRFFlRFFXRFF0xFFOxFFtxFFfxFF/JpGRWsihZlWxKdiWHklPJpSQpuZU8Sl4lWcmn5FcKKAWVQkphpYhSVCmmFFdKKCWVUkpppYxSVimnlFcqKBWVSkplpYpSVammVFdqKDWVWkptpY5SV6mn1FcaKA2VRkpj5SalidJUaaY0V1ooLZVWSmuljdJWaafcrLRXOigdlVuUTkpnpYvSVemmdFd6KD2VXkpvpY9yq9JX6af0V25TBigDlUHKYGWIcrsyVBmmDFdGKCOVO5RRymjlTuUuZYxyt3KPcq8yVhmnjFfuU+5XHlAmKBOVB5VJykPKw8ojyqPKZOUxZYryuPKE8qQyVXlKmaY8rUxXnlFmKM8qM5VZymxljjJXeU6ZpzyvzFdeUBYoC5VFymJlifKislR5SVmmvKwsV15RVigrlVXKq8pryuvKauUNZY3yprJWeUtZp7ytrFc2KO8oG5V3lU3Ke8pmZYvyvvKBslX5UNmmfKRsV3YoO5Vdym5lj7JX2ad8rOxXPlEOKJ8qB5VDymHlM+WI8rlyVPlCOaZ8qRxXvlJOKF8rJ5VvlFPKt8pp5TvljPK98oPyo3JW+Uk5p5xXLig/KxeVX5RLyq/KZeWKQlRKpVVGZVVO5VVBFVVJlVVFVVVN1VVDNVVLtVVHdVVP9dVMamY1i5pVzaZmV3OoOdVcapKaW82j5lWT1XxqfrWAWlAtpBZWi6hF1WJqcbWEWlItpZZWy6hl1XJqebWCWlGtpFZWq6hV1WpqdbWGWlOtpdZW66h11XpqfbWB2lBtpDZWb1KbqE3VZmpztYXaUm2ltlbbqG3VdurNanu1g9pRvUXtpHZWu6hd1W5qd7WH2lPtpfZW+6i3qn3Vfmp/9TZ1gDpQHaQOVoeot6tD1WHqcHWEOlK9Qx2ljlbvVO9Sx6h3q/eo96pj1XHqePU+9X71AXWCOlF9UJ2kPqQ+rD6iPqpOVh9Tp6iPq0+oT6pT1afUaerT6nT1GXWG+qw6U52lzlbnqHPV59R56vPqfPUFdYG6UF2kLlaXqC+qS9WX1GXqy+py9RV1hbpSXaW+qr6mvq6uVt9Q16hvqmvVt9R16tvqenWD+o66UX1X3aS+p25Wt6jvqx+oW9UP1W3qR+p2dYe6U92l7lb3qHvVferH6n71E/WA+ql6UD2kHlY/U4+on6tH1S/UY+qX6nH1K/WE+rV6Uv1GPaV+q55Wv1PPqN+rP6g/qmfVn9Rz6nn1gvqzelH9Rb2k/qpeVq+oRKM0WmM0VuM0XhM0UZM0WVM0VdM0XTM0U7M0W3M0V/M0X8ukZdayaFm1bFp2LYeWU8ulJWm5tTxaXi1Zy6fl1wpoBbVCWmGtiFZUK6YV10poJbVSWmmtjFZWK6eV1ypoFbVKWmWtilZVq6ZV12poNbVaWm2tjlZXq6fV1xpoDbVGWmPtJq2J1lRrpjXXWmgttVZaa62N1lZrp92stdc6aB21W7ROWmeti9ZV66Z113poPbVeWm+tj3ar1lfrp/XXbtMGaAO1QdpgbYh2uzZUG6YN10ZoI7U7tFHaaO1O7S5tjHa3do92rzZWG6eN1+7T7tce0CZoE7UHtUnaQ9rD2iPao9pk7TFtiva49oT2pDZVe0qbpj2tTdee0WZoz2oztVnabG2ONld7TpunPa/N117QFmgLtUXaYm2J9qK2VHtJW6a9rC3XXtFWaCu1Vdqr2mva69pq7Q1tjfamtlZ7S1unva2t1zZo72gbtXe1Tdp72mZti/a+9oG2VftQ26Z9pG3Xdmg7tV3abm2Ptlfbp32s7dc+0Q5on2oHtUPaYe0z7Yj2uXZU+0I7pn2pHde+0k5oX2sntW+0U9q32mntO+2M9r32g/ajdlb7STunndcuaD9rF7VftEvar9pl7YpGdEqndUZndU7ndUEXdUmXdUVXdU3XdUM3dUu3dUd3dU/39Ux6Zj2LnlXPpmfXc+g59Vx6kp5bz6Pn1ZP1fHp+vYBeUC+kF9aL6EX1YnpxvYReUi+ll9bL6GX1cnp5vYJeUa+kV9ar6FX1anp1vYZeU6+l19br6HX1enp9vYHeUG+kN9Zv0pvoTfVmenO9hd5Sb6W31tvobfV2+s16e72D3lG/Re+kd9a76F31bnp3vYfeU++l99b76LfqffV+en/9Nn2APlAfpA/Wh+i360P1YfpwfYQ+Ur9DH6WP1u/U79LH6Hfr9+j36mP1cfp4/T79fv0BfYI+UX9Qn6Q/pD+sP6I/qk/WH9On6I/rT+hP6lP1p/Rp+tP6dP0ZfYb+rD5Tn6XP1ufoc/Xn9Hn68/p8/QV9gb5QX6Qv1pfoL+pL9Zf0ZfrL+nL9FX2FvlJfpb+qv6a/rq/W39DX6G/qa/W39HX62/p6fYP+jr5Rf1ffpL+nb9a36O/rH+hb9Q/1bfpH+nZ9h75T36Xv1vfoe/V9+sf6fv0T/YD+qX5QP6Qf1j/Tj+if60f1L/Rj+pf6cf0r/YT+tX5S/0Y/pX+rn9a/08/o3+s/6D/qZ/Wf9HP6ef2C/rN+Uf9Fv6T/ql/Wr+jEoAzaYAzW4AzeEAzRkAzZUAzV0AzdMAzTsAzbcAzX8AzfyGRkNrIYWY1sRnYjh5HTyGUkGbmNPEZeI9nIZ+Q3ChgFjUJGYaOIUdQoZhQ3ShgljVJGaaOMUdYoZ5Q3KhgVjUpGZaOKUdWoZlQ3ahg1jVpGbaOOUdeoZ9Q3GhgNjUZGY+Mmo4nR1GhmNDdaGC2NVkZro43R1mhn3Gy0NzoYHY1bjE5GZ6OL0dXoZnQ3ehg9jV5Gb6OPcavR1+hn9DduMwYYA41BxmBjiHG7MdQYZgw3RhgjjTuMUcZo407jLmOMcbdxj3GvMdYYZ4w37jPuNx4wJhgTjQeNScZDxsPGI8ajxmTjMWOK8bjxhPGkMdV4yphmPG1MN54xZhjPGjONWcZsY44x13jOmGc8b8w3XjAWGAuNRcZiY4nxorHUeMlYZrxsLDdeMVYYK41VxqvGa8brxmrjDWON8aax1njLWGe8baw3NhjvGBuNd41NxnvGZmOL8b7xgbHV+NDYZnxkbDd2GDuNXcZuY4+x19hnfGzsNz4xDhifGgeNQ8Zh4zPjiPG5cdT4wjhmfGkcN74yThhfGyeNb4xTxrfGaeM744zxvfGD8aNx1vjJOGecNy4YPxsXjV+MS8avxmXjikFMyqRNxmRNzuRNwRRNyZRNxVRNzdRNwzRNy7RNx3RNz/TNTGZmM4uZ1cxmZjdzmDnNXGaSmdvMY+Y1k818Zn6zgFnQLGQWNouYRc1iZnGzhFnSLGWWNsuYZc1yZnmzglnRrGRWNquYVc1qZnWzhlnTrGXWNuuYdc16Zn2zgdnQbGQ2Nm8ym5hNzWZmc7OF2dJsZbY225htzXbmzWZ7s4PZ0bzF7GR2NruYXc1uZnezh9nT7GX2NvuYt5p9zX5mf/M2c4A50BxkDjaHmLebQ81h5nBzhDnSvMMcZY427zTvMseYd5v3mPeaY81x5njzPvN+8wFzgjnRfNCcZD5kPmw+Yj5qTjYfM6eYj5tPmE+aU82nzGnm0+Z08xlzhvmsOdOcZc4255hzzefMeebz5nzzBXOBudBcZC42l5gvmkvNl8xl5svmcvMVc4W50lxlvmq+Zr5urjbfMNeYb5przbfMdebb5npzg/mOudF819xkvmduNreY75sfmFvND81t5kfmdnOHudPcZe4295h7zX3mx+Z+8xPzgPmpedA8ZB42PzOPmJ+bR80vzGPml+Zx8yvzhPm1edL8xjxlfmueNr8zz5jfmz+YP5pnzZ/Mc+Z584L5s3nR/MW8ZP5qXjavmMSiLNpiLNbiLN4SLNGSLNlSLNXSLN0yLNOyLNtyLNfyLN/KZGW2slhZrWxWdiuHldPKZSVZua08Vl4r2cpn5bcKWAWtQlZhq4hV1CpmFbdKWCWtUlZpq4xV1ipnlbcqWBWtSlZlq4pV1apmVbdqWDWtWlZtq45V16pn1bcaWA2tRlZj6yaridXUamY1t1pYLa1WVmurjdXWamfdbLW3OlgdrVusTlZnq4vV1epmdbd6WD2tXlZvq491q9XX6mf1t26zBlgDrUHWYGuIdbs11BpmDbdGWCOtO6xR1mjrTusua4x1t3WPda811hpnjbfus+63HrAmWBOtB61J1kPWw9Yj1qPWZOsxa4r1uPWE9aQ11XrKmmY9bU23nrFmWM9aM61Z1mxrjjXXes6aZz1vzbdesBZYC61F1mJrifWitdR6yVpmvWwtt16xVlgrrVXWq9Zr1uvWausNa431prXWestaZ71trbc2WO9YG613rU3We9Zma4v1vvWBtdX60NpmfWRtt3ZYO61d1m5rj7XX2md9bO23PrEOWJ9aB61D1mHrM+uI9bl11PrCOmZ9aR23vrJOWF9bJ61vrFPWt9Zp6zvrjPW99YP1o3XW+sk6Z523Llg/WxetX6xL1q/WZeuKRWzKpm3GZm3O5m3BFm3Jlm3FVm3N1m3DNm3Ltm3Hdm3P9u1MdmY7i53VzmZnt3PYOe1cdpKd285j57WT7Xx2fruAXdAuZBe2i9hF7WJ2cbuEXdIuZZe2y9hl7XJ2ebuCXdGuZFe2q9hV7Wp2dbuGXdOuZde269h17Xp2fbuB3dBuZDe2b7Kb2E3tZnZzu4Xd0m5lt7bb2G3tdvbNdnu7g93RvsXuZHe2u9hd7W52d7uH3dPuZfe2+9i32n3tfnZ/+zZ7gD3QHmQPtofYt9tD7WH2cHuEPdK+wx5lj7bvtO+yx9h32/fY99pj7XH2ePs++377AXuCPdF+0J5kP2Q/bD9iP2pPth+zp9iP20/YT9pT7afsafbT9nT7GXuG/aw9055lz7bn2HPt5+x59vP2fPsFe4G90F5kL7aX2C/aS+2X7GX2y/Zy+xV7hb3SXmW/ar9mv26vtt+w19hv2mvtt+x19tv2enuD/Y690X7X3mS/Z2+2t9jv2x/YW+0P7W32R/Z2e4e9095l77b32HvtffbH9n77E/uA/al90D5kH7Y/s4/Yn9tH7S/sY/aX9nH7K/uE/bV90v7GPmV/a5+2v7PP2N/bP9g/2mftn+xz9nn7gv2zfdH+xb5k/2pftq/YxKEc2mEc1uEc3hEc0ZEc2VEc1dEc3TEc07Ec23Ec1/Ec38nkZHayOFmdbE52J4eT08nlJDm5nTxOXifZyefkdwo4BZ1CTmGniFPUKeYUd0o4JZ1STmmnjFPWKeeUdyo4FZ1KTmWnilPVqeZUd2o4NZ1aTm2njlPXqefUdxo4DZ1GTmPnJqeJ09Rp5jR3WjgtnVZOa6eN09Zp59zstHc6OB2dW5xOTmeni9PV6eZ0d3o4PZ1eTm+nj3Or09fp5/R3bnMGOAOdQc5gZ4hzuzPUGeYMd0Y4I507nFHOaOdO5y5njHO3c49zrzPWGeeMd+5z7ncecCY4E50HnUnOQ87DziPOo85k5zFnivO484TzpDPVecqZ5jztTHeecWY4zzoznVnObGeOM9d5zpnnPO/Md15wFjgLnUXOYmeJ86Kz1HnJWea87Cx3XnFWOCudVc6rzmvO685q5w1njfOms9Z5y1nnvO2sdzY47zgbnXedTc57zmZni/O+84Gz1fnQ2eZ85Gx3djg7nV3ObmePs9fZ53zs7Hc+cQ44nzoHnUPOYecz54jzuXPU+cI55nzpHHe+ck44XzsnnW+cU863zmnnO+eM873zg/Ojc9b5yTnnnHcuOD87F51fnEvOr85l54pDXMqlXcZlXc7lXcEVXcmVXcVVXc3VXcM1Xcu1Xcd1Xc/13UxuZjeLm9XN5mZ3c7g53VxukpvbzePmdZPdfG5+t4Bb0C3kFnaLuEXdYm5xt4Rb0i3llnbLuGXdcm55t4Jb0a3kVnaruFXdam51t4Zb063l1nbruHXdem59t4Hb0G3kNnZvcpu4Td1mbnO3hdvSbeW2dtu4bd127s1ue7eD29G9xe3kdna7uF3dbm53t4fb0+3l9nb7uLe6fd1+bn/3NneAO9Ad5A52h7i3u0PdYe5wd4Q70r3DHeWOdu9073LHuHe797j3umPdce549z73fvcBd4I70X3QneQ+5D7sPuI+6k52H3OnuI+7T7hPulPdp9xp7tPudPcZd4b7rDvTneXOdue4c93n3Hnu8+589wV3gbvQXeQudpe4L7pL3ZfcZe7L7nL3FXeFu9Jd5b7qvua+7q5233DXuG+6a9233HXu2+56d4P7jrvRfdfd5L7nbna3uO+7H7hb3Q/dbe5H7nZ3h7vT3eXudve4e9197sfufvcT94D7qXvQPeQedj9zj7ifu0fdL9xj7pfucfcr94T7tXvS/cY95X7rnna/c8+437s/uD+6Z92f3HPuefeC+7N70f3FveT+6l52r7jEozzaYzzW4zzeEzzRkzzZUzzV0zzdMzzTszzbczzX8zzfy+Rl9rJ4Wb1sXnYvh5fTy+Ulebm9PF5eL9nL5+X3CngFvUJeYa+IV9Qr5hX3SnglvVJeaa+MV9Yr55X3KngVvUpeZa+KV9Wr5lX3ang1vVpeba+OV9er59X3GngNvUZeY+8mr4nX1GvmNfdaeC29Vl5rr43X1mvn3ey19zp4Hb1bvE5eZ6+L19Xr5nX3eng9vV5eb6+Pd6vX1+vn9fdu8wZ4A71B3mBviHe7N9Qb5g33RngjvTu8Ud5o707vLm+Md7d3j3evN9Yb54337vPu9x7wJngTvQe9Sd5D3sPeI96j3mTvMW+K97j3hPekN9V7ypvmPe1N957xZnjPejO9Wd5sb44313vOm+c97833XvAWeAu9Rd5ib4n3orfUe8lb5r3sLfde8VZ4K71V3qvea97r3mrvDW+N96a31nvLW+e97a33NnjveBu9d71N3nveZm+L9773gbfV+9Db5n3kbfd2eDu9Xd5ub4+319vnfezt9z7xDnifege9Q95h7zPviPe5d9T7wjvmfekd977yTnhfeye9b7xT3rfeae8774z3vfeD96N31vvJO+ed9y54P3sXvV+8S96v3mXvikd8yqd9xmd9zud9wRd9yZd9xVd9zdd9wzd9y7d9x3d9z/f9TH5mP4uf1c/mZ/dz+Dn9XH6Sn9vP4+f1k/18fn6/gF/QL+QX9ov4Rf1ifnG/hF/SL+WX9sv4Zf1yfnm/gl/Rr+RX9qv4Vf1qfnW/hl/Tr+XX9uv4df16fn2/gd/Qb+Q39m/ym/hN/WZ+c7+F39Jv5bf22/ht/Xb+zX57v4Pf0b/F7+R39rv4Xf1ufne/h9/T7+X39vv4t/p9/X5+f/82f4A/0B/kD/aH+Lf7Q/1h/nB/hD/Sv8Mf5Y/27/Tv8sf4d/v3+Pf6Y/1x/nj/Pv9+/wF/gj/Rf9Cf5D/kP+w/4j/qT/Yf86f4j/tP+E/6U/2n/Gn+0/50/xl/hv+sP9Of5c/25/hz/ef8ef7z/nz/BX+Bv9Bf5C/2l/gv+kv9l/xl/sv+cv8Vf4W/0l/lv+q/5r/ur/bf8Nf4b/pr/bf8df7b/np/g/+Ov9F/19/kv+dv9rf47/sf+Fv9D/1t/kf+dn+Hv9Pf5e/29/h7/X3+x/5+/xP/gP+pf9A/9H+s21WPEFH3LnjcXbrcfVfVLq/C3d3d3d3d3d3daRpoHBp3aNzdvXGHBibvP5NJzrwXJ5k5++6XnbWyng/wxNyPeRDzMOZRzOOYJzFPY57FPI95EfMy5lXM65g3MUkxb2PexbyP+RDzMeZTzOeYLzFfY77FfI/5EfMz5lfM75jkmD8xf2P+xaRAUiKpkNRIGiQtkg5Jj2RAMiKZkMxIFiQrkg3JjuRAciK5kNxIHiQvEoMgCIpgCI4QCIlQCI0wCItwCI8IiIhIiIwoiIpoCEB0xEBMBCIWYiMO4iIe4iMBEiIRkg/JjxRACiKFkMJIEaQoUgwpjpRASiKlkNJIGaQsUg4pj1RAKiKVkMpIFaQqUg2pjtRAaiK1kNpIHaQuUg+pjzRAGiKNkMZIE6Qp0gxpjrRAWiKtkNZIG6Qt0g5pj3RAOiKdkM5IF6Qr0g3pjvRAeiK9kN5IH6Qv0g/pjwxABiKDkMHIEGQoMgwZjoxARiKjkNHIGGQsMg4Zj0xAJiKTkMnIFGQqMg2ZjsxAZiKzkNnIHGQuMg+ZjyxAFiKLkMXIEmQpsgxZjqxAViKrkNXIGmQtsg5Zj2xANiKxyCYkDtmMbEG2IvHINmQ7sgPZiexCdiN7kL3IPiQB2Y8cQA4ih5DDyBHkKHIMOY6cQE4ip5DTyBnkLJKInEPOIxeQi8gl5DJyBbmKXEOuIzeQm8gt5DZyB7mL3EPuIw+Qh8gj5DHyBHmKPEOeIy+Ql8gr5DXyBklC3iLvkPfIB+Qj8gn5jHxBviLfkO/ID+Qn8gv5jSQjf5C/yD8kBZoSTYWmRtOgadF0aHo0A5oRzYRmRrOgWdFsaHY0B5oTzYXmRvOgedEYFEFRFENxlEBJlEJplEFZlEN5VEBFVEJlVEFVVEMBqqMGaqIQtVAbdVL+3916NEQjNB+aHy2AFkQLoYXRImhRtBhaHC2BlkRLoaXRMmhZtBxaHq2AVkQroZXRKmhVtBpaHa2B1kRrobXROmhdtB5aH22ANkQboY3RJmhTtBnaHG2BtkRboa3RNmhbtB3aHu2AdkQ7oZ3RLmhXtBvaHe2B9kR7ob3RPmhftB/aHx2ADkQHoYPRIehQdBg6HB2BjkRHoaPRMehYdBw6Hp2ATkQnoZPRKehUdBo6HZ2BzkRnobPROehcdB46H12ALkQXoYvRJehSdBm6HF2BrkRXoavRNehadB26Ht2AbkRj0U1oHLoZ3YJuRePRbeh2dAe6E92F7kb3oHvRfWgCuh89gB5ED6GH0SPoUfQYehw9gZ5ET6Gn0TPoWTQRPYeeRy+gF9FL6GX0CnoVvYZeR2+gN9Fb6G30DnoXvYfeRx+gD9FH6GP0CfoUfYY+R1+gL9FX6Gv0DZqEvkXfoe/RD+hH9BP6Gf2CfkW/od/RH+hP9Bf6G01G/6B/0X9oCiwllgpLjaXB0mLpsPRYBiwjlgnLjGXBsmLZsOxYDiwnlgvLjeXB8mIxGIKhGIbhGIGRGIXRGIOxGIfxmICJmITJmIKpmIYBTMcMzMQgZmE25mDurZQvemIBFmIRlg/LjxXACmKFsMJYEawoVgwrjpXASmKlsNJYGawsVg4rj1XAKmKVsMpYFawqVg2rjtXAamK1sNpYHawuVg+rjzXAGmKNsMZYE6wp1gxrjrXAWmKtsNZYG6wt1g5rj3XAOmKdsM5YF6wr1g3rjvXAemK9sN5YH6wv1g/rjw3ABmKDsMHYEGwoNgwbjo3ARmKjsNHYGGwsNg4bj03AJmKTsMnYFGwqNg2bjs3AZmKzsNnYHGwuNg+bjy3AFmKLsMXYEmwptgxbjq3AVmKrsNXYGmwttg5bj23ANmKx2CYsDtuMbcG2YvHYNmw7tgPbie3CdmN7sL3YPiwB248dwA5ih7DD2BHsKHYMO46dwE5ip7DT2BnsLJaIncPOYxewi9gl7DJ2BbuKXcOuYzewm9gt7DZ2B7uL3cPuYw+wh9gj7DH2BHuKPcOeYy+wl9gr7DX2BkvC3mLvsPfYB+wj9gn7jH3BvmLfsO/YD+wn9gv7jSVjf7C/2D8sBZ4ST4WnTp0CT4unw9PjGfCMeCY8M54Fz4pnw7PjOfCceC48N54Hz4vH4AiO4hiO4wRO4hRO4wzO4hzO4wIu4hIu4wqu4hoOcB03cBOHuIXbuIO7uIf7eICHeITnw/PjBfCCeCG8MF4EL4oXw4vjJfCSeCm8NF4GL4uXw8vjFfCKeCW8Ml4Fr4pXw6vjNfCaeC28Nl4Hr4vXw+vjDfCGeCO8Md4Eb4o3w5vjLfCWeCu8Nd4Gb4u3w9vjHfCOeCe8M94F74p3w7vjPfCeeC+8N94H74v3w/vjA/CB+CB8MD4EH4oPw4fjI/CR+Ch8ND4GH4uPw8fjE/CJ+CR8Mj4Fn4pPw6fjM/CZ+Cx8Nj4Hn4vPw+fjC/CF+CJ8Mb4EX4ovw5fjK/CV+Cp8Nb4GX4uvw9fjG/CNeCy+CY/DN+Nb8K14PL4N347vwHfiu/Dd+B58L74PT8D34wfwg/gh/DB+BD+KH8OP4yfwk/gp/DR+Bj+LJ+Ln8PP4Bfwifgm/jF/Br+LX8Ov4Dfwmfgu/jd/B7+L38Pv4A/wh/gh/jD/Bn+LP8Of4C/wl/gp/jb/Bk/C3+Dv8Pf4B/4h/wj/jX/Cv+Df8O/4D/4n/wn/jyfgf/C/+D09BpCRSEamJNERaIh2RnshAZCQyEZmJLERW4h+RnchB5CRyEbmJPEReIoZACJTACJwgCJKgCJpgCJbgCJ4QCJGQCJlQCJXQCEDohEGYBCQswiYcwiU8wicCIiQiIh+RnyhAFCQKEYWJIkRRohhRnChBlCRKEaWJMkRZohxRnqhAVCQqEZWJKkRVohpRnahB1CRqEbWJOkRdoh5Rn2hANCQaEY2JJkRTohnRnGhBtCRaEa2JNkRboh3RnuhAdCQ6EZ2JLkRXohvRnehB9CR6Eb2JPkRfoh/RnxhADCQGEYOJIcRQYhgxnBhBjCRGEaOJMcRYYhwxnphATCQmEZOJKcRUYhoxnZhBzCRmEbOJOcRcYh4xn1hALCQWEYuJJcRSYhmxnFhBrCRWEauJNcRaYh2xnthAbCRiiU1EHLGZ2EJsJeKJbcR2Ygexk9hF7Cb2EHuJfUQCsZ84QBwkDhGHiSPEUeIYcZw4QZwkThGniTPEWSKROEecJy4QF4lLxGXiCnGVuEZcJ24QN4lbxG3iDnGXuEfcJx4QD4lHxGPiCfGUeEY8J14QL4lXxGviDZFEvCXeEe+JD8RH4hPxmfhCfCW+Ed+JH8RP4hfxm0gm/hB/iX9ECjIlmYpMTaYh05LpyPRkBjIjmYnMTGYhs5LZyOxkDjInmYvMTeYh85IxJEKiJEbiJEGSJEXSJEOyJEfypECKpETKpEKqpEYCUicN0iQhaZE26ZAu6ZE+GZAhGZH5yPxkAbIgWYgsTBYhi5LFyOJkCbIkWYosTZYhy5LlyPJkBbIiWYmsTFYhq5LVyOpkDbImWYusTdYh65L1yPpkA7Ih2YhsTDYhm5LNyOZkC7Il2YpsTbYh25LtyPZkB7Ij2YnsTHYhu5LdyO5kD7In2YvsTfYh+5L9yP7kAHIgOYgcTA4hh5LDyOHkCHIkOYocTY4hx5LjyPHkBHIiOYmcTE4hp5LTyOnkDHImOYucTc4h55LzyPnkAnIhuYhcTC4hl5LLyOXkCnIluYpcTa4h15LryPXkBnIjGUtuIuPIzeQWcisZT24jt5M7yJ3kLnI3uYfcS+4jE8j95AHyIHmIPEweIY+Sx8jj5AnyJHmKPE2eIc+SieQ58jx5gbxIXiIvk1fIq+Q18jp5g7xJ3iJvk3fIu+Q98j75gHxIPiIfk0/Ip+Qz8jn5gnxJviJfk2/IJPIt+Y58T34gP5KfyM/kF/Ir+Y38Tv4gf5K/yN9kMvmH/Ev+I1NQKalUVGoqDZWWSkelpzJQGalMVGYqC5WVykZlp3JQOalcVG4qD5WXiqEQCqUwCqcIiqQoiqYYiqU4iqcESqQkSqYUSqU0ClA6ZVAmBSmLsimHcimP8qmACqmIykflpwpQBalCVGGqCFWUKkYVp0pQJalSVGmqDFWWKkeVpypQFalKVGWqClWVqkZVp2pQNalaVG2qDlWXqkfVpxpQDalGVGOqCdWUakY1p1pQLalWVGuqDdWWake1pzpQHalOVGeqC9WV6kZ1p3pQPaleVG+qD9WX6kcNXjuAGkgNoloaQ6ih1DBqODWCGkmNokZTY6ix1DhqPDWBmkhNoiZTU6ip1DRqOjWDmknNomZTc6i51DxqPrWAWkgtohZTS6il1DJqObWCWkmtolZTa6i11DpqPbWB2kjFUpuoOGoztYXaSsVT26jt1A5qJ7WL2k3tofZS+6gEaj91gDpIHaIOU0eoo9Qx6jh1gjpJnaJOU2eos1QidY46T12gLlKXqMvUFeoqdY26Tt2gblK3qNvUHeoudY+6Tz2gHlKPqMfUE+op9Yx6Tr2gXlKvqNfUGyqJeku9o95TH6iP1CfqM/WF+kp9o75TP6if1C/qN5VM/aH+Uv+oFHQKOhWdik5Dp6HT0enoDHQGOhOdic5CZ6Gz0dnoHHQOOhedi85D56Fj6BgapVEap3GapEn6P4+lWZqneVqkRVqmZVqlVRrQgDZog4Y0pG3apl3apX3ap0M6pPPR+egCdAG6EF2ILkIXoYvRxegSdAm6FF2KLkOXocvR5egKdAW6El2JrkJXoavR1egadA26Fl2LrkPXoevR9egGdAO6Ed2IbkI3oZvRzegWdAu6Fd2KbkO3odvR7egOdAe6E92J7kJ3obvR3egedA+6Mt2L7kP3ofvR/egB9AB6ED2IHkIPoYfRw+gR9Ah6FD2KHkOPocfR4+gJ9AR6Ej2JnkJPoafR0+gZ9Ax6Fj2LnkPPpefR8+kF9EJ6Eb2YXkIvpZfRy+gV9Ap6Fb2KXkOvodfR6+gN9AY6lo6l4+g4egu9hY6n4+nt9HZ6J72T3k3vpvfSe+kEOoE+QB+gD9GH6CP0EfoYfYw+QZ+gT9Gn6DP0GTqRTqTP0+fpi/RF+jJ9mb5KX6Wv09fpm/RN+jZ9m75L36Xv0/fph/RD+jH9mH5KP6Wf08/pl/RL+jX9mk6ik+h39Dv6A/2B/kR/or/QX+hv9Df6B/2D/kX/opPpZPov/ZfOwGRkMjGZmSxMViYbk535fxtlMAZnCIZkKCaGQf4X0wzDqIzGAEZnDMZkIGP9l/Mx+ZkCTEGmEFOYKcIU/S+XY8ozFZiKTCWmMlOGKfu/uApTlanG1GdqMA2ZWkxjpg7TlKnH1GcaMA2ZRkxjpgnTlGnHtGc6MB2ZTkxnpgvT9b+8l9nHnGJOM2eYs8xt5g7zg/nJvGbeML+Y38wQZigzjhnPTGAmMpOYycwUZup/eR4zn1nALGQWMYuZJczS//I6Zj2zgdnIxDKbmDhm8395N7OHiWcSmO3MDmYns+t//J+bEpj9zAHmIHOIOcwcYRKZY8xx5gRz8v+5NZE5x5xnLjA3mVvMZeYKc5W5xlxnbvyP/5PjLnOPuc88YF4yr5jHzBPmKZPEPGde/I//ky+Jecu8Y94zH5iPzCcmmfnCfGW+Md//J/9/siczf5i/zD8mBZuSTcWmZtOwadl0bHo2A5uRzcRmZrOwWdlsbHY2B5uTzcXmZvOwedkYFmFRFmNxlmBJlmJplmFZlmN5VmBFVmJlVmFVVmMBq7MGa7KQtVibdViX9VifDdiQjdh8bH62AFuQLcQWZouwRdlibHG2BFuSLcWWZsuwZdlybHm2AluRrcRWZquwVdlqbHW2BluTrcXWZuuwddl6bH22AduQbcQ2ZpuwTdlmbHO2BduSbcW2Ztuwbdl2bHu2A9uR7cR2ZruwXdlubHe2B9uT7cX2Zvuwfdl+bH92ADuQHcQOZoewQ9lh7HB2BDuSHcWOZsewY9lx7Hh2AjuRncROZqewU9lp7HR2BjuTncXOZuewc9l57Hx2AbuQXcQuZpewS9ll7HJ2BbuSXcWuZtewa9l17Hp2A7uRjWU3sXHsZnYLu5WNZ7ex29kd7E52F7ub3cPuZfexCex+9gB7kD3EHmaPsEfZY+xx9gR7kj3FnmbPsGfZRPYce569wF5kL7GX2SvsVfYae529wd5kb7G32TvsXfYee599wD5kH7GP2SfsU/YZ+5x9wb5kX7Gv2TdsEvuWfce+Zz+wH9lP7Gf2C/uV/cZ+Z3+wP9lf7G82mf3D/mX/sSm4lFwqLjWXhkvLpePScxm4jFwmLjOXhcvKZeOyczm4nFwuLjeXh8vLxXAIh3IYh3MER3IUR3MMx3Icx3MCJ3ISJ3MKp3IaBzidMziTg5zF2ZzDuZzH+VzAhVzE5ePycwW4glwhrjBXhCvKFeOKcyW4klwprjRXhivLlePKcxW4ilwlrjLnclW5alx1rgZXk6vF1ebqcHW5elx9rgHXkGvENeaacE25ZlxzrgXXkmvFtebacG25dlx7rgPXkevEdea6cF3/t//DuOHcCG4kN5IbzY3hxnLjuPHcBG4iN4mbzE3hpnLTuOncDG4mN4ubzc3h5nLzuPncAm4ht4hbzC3hlnLLuOXcCm4lt4pbza3h1nLruPXcBm4jF8tt4uK4zdwWbisXz23jtnM7uJ3cLm43t4fby+3jErj93AHuIHeIO8wd4Y5yx7jj3AnuJHeKO82d4c5yidw57jx3gbvIXeIuc1e4q9w17jp3g7vJ3eJuc3e4u9w97j73gHvIPeIec0+4p9wz7jn3gnvJveJec2+4JO4t9457z33gPnKfuM/cF+4r9437zv3gfnK/uN9cMveH+8v941LwKflUfGo+DZ+WT8en5zPwGflMfGY+C5+Vz8Zn53PwOflcfG4+D5+Xj+ERHuUxHucJnuQpnuYZnuU5nucFXuQlXuYVXuU1HvA6b/AmD3mLt3mHd3mP9/mAD/mIz8fn5wvwBflCfGG+CF+UL8YX50vwJflSfGm+DF+WL8eX5yvwFflKfGW+Cl+Vr8ZX52vwNflafG2+Dl+Xr8fX5xvwDflGfGO+Cd+Ub8Y351vwLflWfGu+Dd+Wb8e35zvwHflOfGe+C9+V78Z353vwPflefG++D9+X78f35wfwA/lB/GB+CD+UH8YP50fwI/lR/Gh+DD+WH8eP5yfwE/lJ/GR+Cj+Vn8ZP52fwM/lZ/Gx+Dj+Xn8fP5xfwC/lF/GJ+Cb+UX8Yv51fwK/lV/Gp+Db+WX8ev5zfwG/lYfhMfx2/mt/Bb+Xh+G7+d38Hv5Hfxu/k9/F5+H5/A7+cP8Af5Q/xh/gh/lD/GH+dP8Cf5U/xp/gx/lk/kz/Hn+Qv8Rf4Sf5m/wl/lr/HX+Rv8Tf4Wf5u/w9/l7/H3+Qf8Q/4R/5h/wj/ln/HP+Rf8S/4V/5p/wyfxb/l3/Hv+A/+R/8R/5r/wX/lv/Hf+B/+T/8X/5pP5P/xf/h+fQkgppBJSC2mEtEI6Ib2QQcgoZBIyC1mErEI2IbuQQ8gp5BJyC3mEvEKMgAiogAm4QAikQAm0wAiswAm8IAiiIAmyoAiqoAlA0AVDMAUoWIItOIIreIIvBEIoREI+Ib9QQCgoFBIKC0WEokIxobhQQigplBJKC2WEskI5obxQQagoVBIqC1WEqkI1obpQQ6gp1BJqC3WEukI9ob7QQGgoNBIaC02EpkIzobnQQmgptBJaC22EtkI7ob3QQegodBI6C12ErkI3obvQQ+gp9BJ6C32EvkI/ob8wQBgoDBIGC0OEocIwYbgwQhgpjBJGC2OEscI4YbwwQZgoTBImC1OEqcI0YbowQ5gpzBJmC3OEucI8Yb6wQFgoLBIWC0uEpcIyYbmwQlgprBJWC2uEtcI6Yb2wQdgoxAqbhDhhs7BF2CrEC9uE7cIOYaewS9gt7BH2CvuEBGG/cEA4KBwSDgtHhKPCMeG4cEI4KZwSTgtnhLNConBOOC9cEC4Kl4TLwhXhqnBNuC7cEG4Kt4Tbwh3hrnBPuC88EB4Kj4THwhPhqfBMeC68EF4Kr4TXwhshSXgrvBPeCx+Ej8In4bPwRfgqfBO+Cz+En8Iv4beQLPwR/gr/hBRiSjGVmFpMI6YV04npxQxiRjGTmFnMImYVs4nZxRxiTjGXmFvMI+YVY0REREVMxEVCJEVKpEVGZEVO5EVBFEVJlEVFVEVNBKIuGqIpQtESbdERXdETfTEQQzES84n5xQJiQbGQWFgsIhYVi4nFxRJiSbGUWFosI5YVy4nlxQpiRbGSWFmsIlYVq4nVxRpiTbGWWFusI9YV64n1xQZiQ7GR2FhsIjYVm4nNxRZiS7GV2FpsI7YV24ntxQ5iR7GT2FnsInYVu4ndxR5iT7GX2FvsI/YV+4n9xQHiQHGQOFgcIg4Vh4nDxRHiSHGUOFocI44Vx4njxQniRHGSOFmcIk4Vp4nTxRniTHGWOFucI84V54nzxQXiQnGRuFhcIi4Vl4nLxRXiSnGVuFpcI64V14nrxQ3iRjFW3CTGiZvFLeJWMV7cJm4Xd4g7xV3ibnGPuFfcJyaI+8UD4kHxkHhYPCIeFY+Jx8UT4knxlHhaPCOeFRPFc+J58cL/p5nX4hsxSXwrvhPfix/Ej+In8bP4RfwqfhO/iz/En+Iv8beYLP4R/4r/xBRSSimVlFpKI6WV0knppQxSRimTlFnKImWVsknZpRxSTimXlFvKI+WVYiREQiVMwiVCIiVKoiVGYiVO4iVBEiVJkiVFUiVNApIuGZIpQcmSbMmRXMmTfCmQQimS8kn5pQJSQamQVFgqIhWViknFpRJSSamUVFoqI5WVyknlpQpSRamSVFmqIlWVqknVpRpSTamWVFuqI9WV6kn1pQZSQ6mR1FhqIjWVmknNpRZSS6mV1FpqI7WV2kntpQ5SR6mT1FnqInWVukndpR5ST6mX1FvqI/WV+kn9pQHSQGmQNFgaIg2VhknDpRHSSGmUNFoaI42VxknjpQnSRGmSNFmaIk2VpknTpRnSTGmWNFuaI82V5knzpQXSQmmRtFhaIi2VlknLpRXSSmmVtFpaI62V1knrpQ3SRilW2iTFSZulLdJWKV7aJm2Xdkg7pV3SbmmPtFfaJyVI+6UD0kHpkHRYOiIdlY5Jx6UT0knplHRaOiOdlRKlc9J56YJ0UbokXZauSFela9J16YZ0U7ol3ZbuSHele9J96YH0UHokPZaeSE+lZ9Jz6YX0UnolvZbeSEnSW+md9F76IH2UPkmfpS/SV+mb9F36If2Ufkm/pWTpj/RX+ielkFPKqeTUcho5rZxOTi9nkDPKmeTMchY5q5xNzi7nkHPKueTcch45rxwjIzIqYzIuEzIpUzItMzIrczIvC7IoS7IsK7IqazKQddmQTRnKlmzLjuzKnuzLgRzKkZxPzi8XkAvKheTCchG5qFxMLi6XkEvKpeTSchm5rFxOLi9XkCvKleTKchW5qlxNri7XkGvKteTach25rlxPri83kBvKjeTGchO5qdxMbi63kFvKreTWchu5rdxObi93kDvKneTOche5q9xN7i73kHvKveTech+5r9xP7i8PkAfKg+TB8hB5qDxMHi6PkEfKo+TR8hh5rDxOHi9PkCfKk+TJ8hR5qjxNni7PkGfKs+TZ8hx5rjxPni8vkBfKi+TF8hJ5qbxMXi6vkFfKq+TV8hp5rbxOXi9vkDfKsfImOU7eLG+Rt8rx8jZ5u7xD3invknfLe+S98j45Qd4vH5APyofkw/IR+ah8TD4un5BPyqfk0/IZ+aycKJ+Tz8sX5IvyJfmyfEW+Kl+Tr8s35JvyLfm2fEe+K9+T78sP5IfyI/mx/ER+Kj+Tn8sv5JfyK/m1/EZOkt/K7+T38gf5o/xJ/ix/kb/K3+Tv8g/5p/xL/i0ny3/kv/I/OYWSUkmlpFbSKGmVdEp6JYOSUcmkZFayKFmVbEp2JYeSU8ml5FbyKHmVGAVRUAVTcIVQSIVSaIVRWIVTeEVQREVSZEVRVEVTgKIrhmIqULEUW3EUV/EUXwmUUImUfEp+pYBSUCmkFFaKKEWVYkpxpYRSUimllFbKKGWVckp5pYJSUamkVFaqKFWVakp1pYZSU6ml1FbqKHWVekp9pYHSUGmkNFaaKE2VZkpzpYXSUmmltFbaKG2Vdkp7pYPSUemkdFa6KF2Vbkp3pYfSU+ml9Fb6KH2Vfkp/ZYAyUBmkDFaGKEOVYcpwZYQyUhmljFbGKGOVccp4ZYIyUZmkTFamKFOVacp0ZYYyU5mlzFbmKHOVecp8ZYGyUFmkLFaWKEuVZcpyZYWyUlmlrFbWKGuVdcp6ZYOyUYlVNilxymZli7JViVe2KduVHcpOZZeyW9mj7FX2KQnKfuWAclA5pBxWjihHlWPKceWEclI5pZxWzihnlUTlnHJeuaBcVC4pl5UrylXlmnJduaHcVG4pt5U7yl3lnnJfeaA8VB4pj5UnylPlmfJceaG8VF4pr5U3SpLyVnmnvFc+KB+VT8pn5YvyVfmmfFd+KD+VX8pvJVn5o/xV/ikp1JRqKjW1mkZNq6ZT06sZ1IxqJjWzmkXNqmZTs6s51JxqLjW3mkfNq8aoiIqqmIqrhEqqlEqrjMqqnMqrgiqqkiqriqqqmgpUXTVUU4Wqpdqqo7qqp/pqoIZqpOZT86sF1IJqIbWwWkQtqhZTi6sl1JJqKbW0WkYtq5ZTy6sV1IpqJbWyWkWtqlZTq6s11JpqLbW2Wketq9ZT66sN1IZqI7Wx2kRtqjZTm6st1JZqK7W12kZtq7ZT26sd1I5qJ7Wz2kXtqnZTu6s91J5qL7W32kftq/ZT+6sD1IHqIHWwOkQdqg5Th6sj1JHqKHW0OkYdq45Tx6sT1InqJHWyOkWdqk5Tp6sz1JnqLHW2Okedq85T56sL1IXqInWxukRdqi5Tl6sr1JXqKnW1ukZdq65T16sb1I1qrLpJjVM3q1vUrWq8uk3dru5Qd6q71N3qHnWvuk9NUPerB9SD6iH1sHpEPaoeU4+rJ9ST6in1tHpGPasmqufU8+oF9aJ6Sb2sXlGvqtfU6+oN9aZ6S72t3lHvqvfU++oD9aH6SH2sPlGfqs/U5+oL9aX6Sn2tvlGT1LfqO/W9+kH9qH5SP6tf1K/qN/W7+kP9qf5Sf6vJ6h/1r/pPTaGl1FJpqbU0WlotnZZey6Bl1DJpmbUsWlYtm5Zdy6Hl1HJpubU8Wl4tRkM0VMM0XCM0UqM0WmM0VuM0XhM0UZM0WVM0VdM0oOmaoZka1CzN1hzN1TzN1wIt1CItn5ZfK6AV1ApphbUiWlGtmFZcK6GV1EpppbUyWlmtnFZeq6BV1CpplbUqWlWtmlZdq6HV1GpptbU6Wl2tnlZfa6A11BppjbUmWlOtmdZca6G11FpprbU2WlutndZe66B11DppnbUuWletm9Zd66H11HppvbU+Wl+tn9ZfG6AN1AZpg7Uh2lBtmDZcG6GN1EZpo7Ux2lhtnDZem6BN1CZpk7Up2lRtmjZdm6HN1GZps7U52lxtnjZfW6At1BZpi7Ul2lJtmbZcW6Gt1FZpq7U12lptnbZe26Bt1GK1TVqctlnbom3V4rVt2nZth7ZT26Xt1vZoe7V9WoK2XzugHdQOaYe1I9pR7Zh2XDuhndROaae1M9pZLVE7p53XLmgXtUvaZe2KdlW7pl3Xbmg3tVvabe2Odle7p93XHmgPtUfaY+2J9lR7pj3XXmgvtVfaa+2NlqS91d5p77UP2kftk/ZZ+6J91b5p37Uf2k/tl/ZbS9b+aH+1f1oKkBKkAqlBGpAWpAPpQQaQEWQCmUEWkBVkA9lBDpAT5AK5QR6QF8QABKAAAzggAAkoQAMGsIADPBCACCQgAwWoQAMA6MAAJoDAAjZwgAs84IMAhCAC+UB+UAAUBIVAYVAEFAXFQHFQApQEpUBpUAaUBeVAeVABVASVQGVQBVQF1UB1UAPUBLVAbVAH1AX1QH3QADQEjUBj0AQ0Bc1Ac9ACtAStQGvQBrQF7UB70AF0BJ1AZ9AFdAXdQHfQA/QEvUBv0Af0Bf1AfzAADASDwGAwBAwFw8BwMAKMBKPAaDAGjAXjwHgwAUwEk8BkMAVMBdPAdDADzASzwGwwB8wF88B8sAAsBIvAYrAELAXLwHKwAqwEq8BqsAasBevAerABbASxYBOIA5vBFrAVxINtYDvYAXaCXWA32AP2gn0gAewHB8BBcAgcBkfAUXAMHAcnwElwCpwGZ8BZkAjOgfPgArgILoHL4Aq4Cq6B6+AGuAlugdvgDrgL7oH74AF4CB6Bx+AJeAqegefgBXgJXoHX4A1IAm/BO/AefAAfwSfwGXwBX8E38B38AD/BL/AbJIM/4C/4B1LoKfVUemo9jZ5WT6en1zPoGfVMemY9i55Vz6Zn13PoOfVcem49j55Xj9ERHdUxHdcJndQpndYZndU5ndcFXdQlXdYVXdU1Hei6buimDnVLt3VHd3VP9/VAD/VIz6fn1wvoBfVCemG9iF5UL6YX10voJfVSemm9jF5WL6eX1yvoFfVKemW9il5Vr6ZX12voNfVaem29jl5Xr6fX1xvoDfVGemO9id5Ub6Y311voLfVWemu9jd5Wb6e31zvoHfVOeme9i95V76Z313voPfVeem+9j95X76f31wfoA/VB+mB9iD5UH6YP10foI/VR+mh9jD5WH6eP1yfoE/VJ+mR9ij5Vn6ZP12foM/VZ+mx9jj5Xn6fP1xfoC/VF+mJ9ib5UX6Yv11foK/VV+mp9jb5WX6ev1zfoG/VYfZMep2/Wt+hb9Xh9m75d36Hv1Hfpu/U9+l59n56g79cP6Af1Q/ph/Yh+VD+mH9dP6Cf1U/pp/Yx+Vk/Uz+nn9Qv6Rf2Sflm/ol/Vr+nX9Rv6Tf2Wflu/o9/V7+n39Qf6Q/2R/lh/oj/Vn+nP9Rf6S/2V/lp/oyfpb/V3+nv9g/5R/6R/1r/oX/Vv+nf9h/5T/6X/1pP1P/pf/Z+ewkhppDJSG2mMtEY6I72RwchoZDIyG1mMrEY2I7uRw8hp5DJyG3mMvEaMgRiogRm4QRikQRmpUjAGa3AGbwiGaEiGbCiGamgGMHTDMEwDGpbx/2c/bfzv9jc1mhnNjBZGS6OVUSBVkVRtjbZGe6O90dHoaHQ2uhhdjW5Gd6OH0cPoZfQ2eht9jX5Gf2OAMdAYZAw2hhhDjWHGMGOEMcIYZYwyxhhjjHHGOGOCMcGYZEwyphhTjGnGNGOGMcOYZcwy5hhzjHnGPGOBscBYZCwylhhLjGXGMmOFscJYZawy1hhrjHXGOmODscGINWKNOCPO2GJsMeKNeGO7sd3Yaew0dhu7jb3GXiPBSDAOGAeMQ8Yh44hxxDhmHDNOGCeMU8Yp44xxxkg0Eo3zxnnjonHRuGxcNq4aV43rxnXjpnHTuG3cNu4ad437xn3jofHQeGw8Np4az4znxgvjpfHKeG28MZKMt8Y7473xwfhofDI+G1+Mr8Y347vxw/hp/DJ+G8nGH+Ov8c/4P9lflE3FVE3NBKZuGqZpQtMybdMxXdMzfTMwQzMy85n5zQJmQbOQWdgsYhY1i5nFzRJmSbOUWdosY5Y1y5nlzQpmRbOSWdmsYlY1q5nVzRpmTbOWWdusY9Y165n1zQZmQ7OR2dhsYjY1m5nNzRZmS7OV2dpsY7Y125ntzQ5mR7OT2dnsYnY1u5ndzR5mT7OX2dvsY/Y1+5n9zQHmQHOQOdgcYg41h5nDzRHmSHOUOdocY441x5njzQnmRHOSOdmcYk41p5nTzRnmTHOWOducY84155nzzQXmQnORudhcYi41l5nLzRXmSnOVudpcY64115nrzQ3mRjPW3GTGmZvNLeZWM97cZm43d5g7zV3mbnOPudfcZyaY+80D5kHzkHnYPGIeNY+Zx80T5knzlHnaPGOeNRPNc+Z584J50bxkXjavmFfNa+Z184Z507xl3jbvmHfNe+Z984H50HxkPjafmE/NZ+Zz84X50nxlvjbfmEnmW/Od+d78YH40P5mfzS/mV/Ob+d38Yf40f5m/zWTzj/nX/GemgClhKpgapoFpYTqYHmaAGWEmmBlmgVlhNpgd5oA5YS6YG+aBeWEMRCAKMYhDApKQgjRkIAs5yEMBilCCMlSgCjUIoA4NaEIILWhDB7rQgz4MYAgjmA/mhwVgQVgIFoZFYFFYDBaHJWBJWAqWhmVgWVgOlocVYEVYCVaGVWBVWA1WhzVgTVgL1oZ1YF1YD9aHDWBD2Ag2hk1gU9gMNoctYEvYCraGbWBb2A62hx1gR9gJdoZdYFfYDXaHPWBP2Av2hn1gX9gP9ocD4EA4CA6GQ+BQOAwOhyPgSDgKjoZj4Fg4Do6HE+BEOAlOhlPgVDgNTocz4Ew4C86Gc+BcOA/OhwvgQrgILoZL4FK4DC6HK+BKuAquhmvgWrgOrocb4EYYCzfBOLgZboFbYTzcBrfDHXAn3AV3wz1wL9wHE+B+eAAehIfgYXgEHoXH4HF4Ap6Ep+BpeAaehYnwHDwPL8CL8BK8DK/Aq/AavA5vwJvwFrwN78C78B68Dx/Ah/ARfAyfwKfwGXwOX8CX8BV8Dd/AJPgWvoPv4Qf4EX6Cn+EX+BV+g9/hD/gT/oK/YTL8A//CfzCFldJKZaW20lhprXRWeiuDldHKZGW2slhZrWxWdiuHldPKZeW28lh5rRgLsVALs3CLsEiLsmiLsViLs3hLsERLsmRLsVRLs4ClW4ZlWtCyLNtyLNfyLN8KrNCKrHxWfquAVdAqZBW2ilhFrWJWcauEVdIqZZW2ylhlrXJWeauCVdGqZFW2qlhVrWpWdauGVdOqZdW26lh1rXpWfauB1dBqZDW2mlhNrWZWc6uF1dJqZbW22lhtrXZWe6uD1dHqZHW2ulhdrW5Wd6uH1dPqZfW2+lh9rX5Wf2uANdAaZA22hlhDrWHWcGuENdIaZY22xlhjrXHWeGuCNdGaZE22plhTrWnWdGuGNdOaZc225lhzrXnWfGuBtdBaZC22llhLrWXWcmuFtdJaZa221lhrrXXWemuDtdGKtTZZcdZma4u11Yq3tlnbrR3WTmuXtdvaY+219lkJ1n7rgHXQOmQdto5YR61j1nHrhHXSOmWdts5YZ61E65x13rpgXbQuWZetK9ZV65p13bph3bRuWbetO9Zd655133pgPbQeWY+tJ9ZT65n13HphvbReWa+tN1aS9dZ6Z723PlgfrU/WZ+uL9dX6Zn23flg/rV/WbyvZ+mP9tf5ZKeyUdio7tZ3GTmuns9PbGeyMdiY7s53Fzmpns7PbOeycdi47t53HzmvH2IiN2piN24RN2pRN24zN2pzN24It2pIt24qt2poNbN02bNOGtmXbtmO7tmf7dmCHdmTns/PbBeyCdiG7sF3ELmoXs4vbJeySdim7tF3GLmuXs8vbFeyKdiW7sl3FrmpXs6vbNeyadi27tl3HrmvXs+vbDeyGdiO7sd3Ebmo3s5vbLeyWdiu7td3Gbmu3s9vbHeyOdie7s93F7mp3s7vbPeyedi+7t93H7mv3s/vbA+yB9iB7sD3EHmoPs4fbI+yR9ih7tD3GHmuPs8fbE+yJ9iR7sj3FnmpPs6fbM+yZ9ix7tj3HnmvPs+fbC+yF9iJ7sb3EXmovs5fbK+yV9ip7tb3GXmuvs9fbG+yNdqy9yY6zN9tb7K12vL3N3m7vsHfau+zd9h57r73PTrD32wfsg/Yh+7B9xD5qH7OP2yfsk/Yp+7R9xj5rJ9rn7PP2Bfuifcm+bF+xr9rX7Ov2Dfumfcu+bd+x79r37Pv2A/uh/ch+bD+xn9rP7Of2C/ul/cp+bb+xk+y39jv7vf3B/mh/sj/bX+yv9jf7u/3D/mn/sn/byfYf+6/9z07hpHRSOamdNE5aJ52T3sngZHQyOZmdLE5WJ5uT3cnh5HRyObmdPE5eJ8ZBHNTBHNwhHNKhHNphHNbhHN4RHNGRHNlRHNXRHODojuGYDnQsx3Ycx3U8x3cCJ3QiJ5+T3yngFHQKOYWdIk5Rp5hT3CnhlHRKOaWdMk5Zp5xT3qngVHQqOZWdKk5Vp5pT3anh1HRqObWdOk5dp55T32ngNHQaOY2dJk5Tp5nT3GnhtHRaOa2dNk5bp53T3ungdHQ6OZ2dLk5Xp5vT3enh9HR6Ob2dPk5fp5/T3xngDHQGOYOdIc5QZ5gz3BnhjHRGOaOdMc5YZ5wz3pngTHQmOZOdKc5UZ5oz3ZnhzHRmObOdOc5cZ54z31ngLHQWOYudJc5SZ5mz3FnhrHRWOaudNc5aZ52z3tngbHRinU1OnLPZ2eJsdeKdbc52Z4ez09nl7Hb2OHudfU6Cs9854Bx0DjmHnSPOUeeYc9w54Zx0TjmnnTPOWSfROeecdy44F51LzmXninPVueZcd244N51bzm3njnPXuefcdx44D51HzmPnifPUeeY8d144L51XzmvnjZPkvHXeOe+dD85H55Pz2fnifHW+Od+dH85P55fz20l2/jh/nX9OCjelm8pN7aZx07rp3PRuBjejm8nN7GZxs7rZ3OxuDjenm8vN7eZx87oxLuKiLubiLuGSLuXSLuOyLufyruCKruTKruKqruYCV3cN13Sha7m267iu67m+G7ihG7n53PxuAbegW8gt7BZxi7rF3OJuCbekW8ot7ZZxy7rl3PJuBbeiW8mt7FZxq7rV3OpuDbemW8ut7dZx67r13PpuA7eh28ht7DZxm7rN3OZuC7el28pt7bZx27rt3PZuB7ej28nt7HZxu7rd3O5uD7en28vt7fZx+7r93P7uAHegO8gd7A5xh7rD3OHuCHekO8od7Y5xx7rj3PHuBHeiO8md7E5xp7rT3OnuDHemO8ud7c5x57rz3PnuAnehu8hd7C5xl7rL3OXuCnelu8pd7a5x17rr3PXuBnejG+tucuPcze4Wd6sb725zt7s73J3uLne3u8fd6+5zE9z97gH3oHvIPewecY+6x9zj7gn3pHvKPe2ecc+6ie4597x7wb3oXnIvu1fcq+4197p7w73p3nJvu3fcu+499777wH3oPnIfu0/cp+4z97n7wn3pvnJfu2/cJPet+859735wP7qf3M/uF/er+8397v5wf7q/3N9usvvH/ev+c1N4Kb1UXmovjZfWS+el9zJ4Gb1MXmYvi5fVy+Zl93J4Ob1cXm4vj5fXi/EQD/UwD/cIj/Qoj/YYj/U4j/cET/QkT/YUT/U0D3i6Z3imBz3Lsz3Hcz3P873AC73Iy+fl9wp4Bb1CXmGviFfUK+YV90p4Jb1SXmmvjFfWK+eV9yp4Fb1KXmWvilfVq+ZV92p4Nb1aXm2vjlfXq+fV9xp4Db1GXmOvidfUa+Y191p4Lb1WXmuvjdfWa+e19zp4Hb1OXmevi9fV6+Z193p4Pb1eXm+vj9fX6+f19wZ4A71B3mBviDfUG+YN90Z4I71R3mhvjDfWG+eN9yZ4E71J3mRvijfVm+ZN92Z4M71Z3mxvjjfXm+fN9xZ4C71F3mJvibfUW+Yt91Z4K71V3mpvjbfWW+et9zZ4G71Yb5MX5232tnhbvXhvm7fd2+Ht9HZ5u7093l5vn5fg7fcOeAe9Q95h74h31DvmHfdOeCe9U95p74x31kv0znnnvQveRe+Sd9m74l31rnnXvRveTe+Wd9u749317nn3vQfeQ++R99h74j31nnnPvRfeS++V99p74yV5b7133nvvg/fR++R99r54X71v3nfvh/fT++X99pK9P95f75+Xwk/pp/JT+2n8tH46P72fwc/oZ/Iz+1n8rH42P7ufw8/p5/Jz+3n8vH6Mj/ioj/m4T/ikT/m0z/isz/m8L/iiL/myr/iqr/nA133DN33oW77tO77re77vB37oR34+P79fwC/oF/IL+0X8on4xv7hfwi/pl/JL+2X8sn45v7xfwa/oV/Ir+1X8qn41v7pfw6/p1/Jr+3X8un49v77fwG/oN/Ib+038pn4zv7nfwm/pt/Jb+238tn47v73fwe/od/I7+138rn43v7vfw+/p9/J7+338vn4/v78/wB/oD/IH+0P8of4wf7g/wh/pj/JH+2P8sf44f7w/wZ/oT/In+1P8qf40f7o/w5/pz/Jn+3P8uf48f76/wF/oL/IX+0v8pf4yf7m/wl/pr/JX+2v8tf46f72/wd/ox/qb/Dh/s7/F3+rH+9v87f4Of6e/y9/t7/H3+vv8BH+/f8A/6B/yD/tH/KP+Mf+4f8I/6Z/yT/tn/LN+on/OP+9f8C/6l/zL/hX/qn/Nv+7f8G/6t/zb/h3/rn/Pv+8/8B/6j/zH/hP/qf/Mf+6/8F/6r/zX/hs/yX/rv/Pf+x/8j/4n/7P/xf/qf/O/+z/8n/4v/7ef7P/x//r//BRByiBVkDpIE6QN0gXpgwxBxiBTkDnIEmQNsgXZgxxBtyBXkDvIE+QNYgIkQAMswAMiIAMqoAMmYAMu4AMhEAMpkAMlUAMtAIEeGIEZwMAK7MAJ3MAL/CAIwiAK8gX5gwJBwaBQUDgoEhQNigXFgxJByaBUUDooE5QNygXlgwpBxaBSUDmoElQNqgXVgxpBzaBWUDuoE9QN6gX1gwZBw6BR0DhoEjQNmgXNgxZBy6BV0DpoE7QN2gXtgw5Bx6BT0DnoEnQNugXdgx5Bz6BX0DvoE/QN+gX9gwHBwGBQMDgYEgwNhgXDgxHByGBUMDoYE4wNxgXjgwnBxGBSMDmYEkwNpgXTgxnBzGBWMDuYE8wN5gXzgwXBwmBRsDhYEiwNlgXLgxXBymBVsDpYE6wN1gXrgw3BxiA22BTEBZuDLcHWID7YFmwPdgQ7g13B7mBPsDfYFyQE+4MDwcHgUHA4OBIcDY4Fx4MTwcngVHA6OBOcDRKDc8H54EJwMbgUXA6uBFeDa8H14EZwM7gV3A7uBHeDe8H94EHwMHgUPA6eBE+DZ8Hz4EXwMngVvA7eBEnB2+Bd8D74EHwMPgWfgy/B1+Bb8D34EfwMfgW/g+TgT/A3+BekCFOGqcLUYZowbZguTB9mCDOGmcLMYZYwa5gtzB7mCHOGucLcYZ4wbxgTIiEaYiEeEiEZUiEdMiEbciEfCqEYSqEcKqEaaiEI9dAIzRCGVmiHTuiGXuiHQRiGUZgvzB8WCAuGhcLCYZGwaFgsLB6WCEuGpcLSYZmwbFguLB9WCCuGlcLKYZWwalgtrB7WCGuGtcLaYZ2wblgvrB82CBuGjcLGYZOwadgsbB62CFuGrcLWYZuwbdgubB92CDuGncLOYZewa9gt7B72CHuGvcLeYZ+wb9gv7B8OCAeGg8LB4ZBwaDgsHB6OCEeGo8LR4ZhwbDguHB9OCCeGk8LJ4ZRwajgtnB7OCGeGs8LZ4ZxwbjgvnB8uCBeGi8LF4ZJwabgsXB6uCFeGq8LV4ZpwbbguXB9uCDeGseGmMC7cHG4Jt4bx4bZwe7gj3BnuCneHe8K94b4wIdwfHggPhofCw+GR8Gh4LDwenghPhqfC0+GZ8GyYGJ4Lz4cXwovhpfByeCW8Gl4Lr4c3wpvhrfB2eCe8G94L74cPwofho/Bx+CR8Gj4Ln4cvwpfhq/B1+CZMCt+G78L34YfwY/gp/Bx+Cb+G38Lv4Y/wZ/gr/B0mh3/Cv+G/MEWUMkoVpY7SRGmjdFH6KEOUMcoUZY6yRFmjbFH2KEeUM8oV5Y7yRHmjmAiJ0AiL8IiIyIiK6IiJ2IiL+EiIxEiK5EiJ1EiLQKRHRmRGMLIiO3IiN/IiPwqiMIqifFH+qEBUMCoUFY6KREWjYlHxqERUMioVlY7KRGWjclH5qEJUMaoUVY6qRFWjalH1qEZUM6oV1Y7qRHWjelH9qEHUMGoUNY6aRE2jZlHzqEXUMmoVtY7aRG2jdlH7qEPUMeoUdY66RF2jblH3qEfUM+oV9Y76RH2jflH/aEA0MBoUDY6GREOjYdHwaEQ0MhoVjY7GRGOjcdH4aEI0MZoUTY6mRFOjadH0aEY0M5oVzY7mRHOjedH8aEG0MFoULY6WREujZdHyaEW0MloVrY7WRGujddH6aEO0MYqNNkVx0eZoS7Q1io+2Rf8XAfAAWEcSAAA0tW3b5l/bxsxsbbu92rZt27ZtI7VtM8m97bEdsZ2xXbHdsT2xvbF9sf2xA7GDsUOxw7EjsaOxY7HjsROxk7FTsdOxM7GzsXOx87ELsYuxS7HLsSuxq7FrseuxG7GbsVux+Njt2J3Y3di92P3Yg9jD2KPY49iT2NPYs9jz2IvYy9ir2OvYm9jb2LvY+9iH2MfYp9jn2JfY19i32PfYj9jP2K/Y79if2N/Yv1hCLDGWFIvDkmHJsRRYSiwVlhpLg6XF0mHpsQxYRiwTlhnLgmXFsmHZsRxYTiwXlhvLg+XF8mH5sQJYQawQVhgrghXFimHFsRJYSawUVhorg5XFymHlsQpYRawSVhmrglXFqmHVsRpYTawWVhuLYRiGYwRGYhRGYwzGYhzGYwImYhImYwqmYhqmYwZmYhZmYw7mYh7mYwEWYgCDGMIirA5WF6uH1ccaYA2xRlhjrAnWFGuGNcdaYC2xVlhrrA3WFmuHtcc6YB2xTlhnrAvWFeuG/Yd1x3pgPbFeWG+sD9YX64f1xwZgA7FB2GBsCDYUG4YNx0ZgI7FR2GhsDDYWG4eNxyZgE7FJ2GRsCjYVm4ZNx2ZgM7FZ2GxsDjYXm4fNxxZgC7FF2GJsCbYUW4Ytx1ZgK7FV2GpsDbYWW4etxzZgG7FN2GZsC7YV24Ztx3ZgO7Fd2G5sD7YX24ftxw5gB7FD2GHsCHYUO4Ydx05gJ7FT2GnsDHYWO4edxy5gF7FL2GXsCnYVu4Zdx25gN7FbWDx2G7uD3cXuYfexB9hD7BH2GHuCPcWeYc+xF9hL7BX2GnuDvcXeYe+xD9hH7BP2GfuCfcW+Yd+xH9hP7Bf2G/uD/cX+YQlYIpaExeHJ8OR4CjwlngpPjafB0+Lp8PR4BjwjngnPjGfBs+LZ8Ox4DjwnngvPjefB8+L58Px4AbwgXggvjBfBi+LF8OJ4CbwkXgovjZfBy+Ll8PJ4BbwiXgmvjFfBq+LV8Op4DbwmXguvjcdwDMdxAidxCqdxBmdxDudxARdxCZdxBVdxDddxAzdxC7dxB3dxD/fxAA9xgEMc4RFeB6+L18Pr4w3whngjvDHeBG+KN8Ob4y3wlngrvDXeBm+Lt8Pb4x3wjngnvDPeBe+Kd8P/w7vjPfCeeC+8N94H74v3w/vjA/CB+CB8MD4EH4oPw4fjI/CR+Ch8ND4GH4uPw8fjE/CJ+CR8Mj4Fn4pPw6fjM/CZ+Cx8Nj4Hn4vPw+fjC/CF+CJ8Mb4EX4ovw5fjK/CV+Cp8Nb4GX4uvw9fjG/CN+CZ8M74F34pvw7fjO/Cd+C58N74H34vvw/fjB/CD+CH8MH4EP4ofw4/jJ/CT+Cn8NH4GP4ufw8/jF/CL+CX8Mn4Fv4pfw6/jN/Cb+C08Hr+N38Hv4vfw+/gD/CH+CH+MP8Gf4s/w5/gL/CX+Cn+Nv8Hf4u/w9/gH/CP+Cf+Mf8G/4t/w7/gP/Cf+C/+N/8H/4v/wBDwRT8LjiGREciIFkZJIRaQm0hBpiXREeiIDkZHIRGQmshBZiWxEdiIHkZPIReQm8hB5iXxEfqIAUZAoRBQmihBFiWJEcaIEUZIoRZQmyhBliXJEeaICUZGoRFQmqhBViWpEdaIGUZOoRdQmYgRG4ARBkARF0ARDsARH8IRAiIREyIRCqIRG6IRBmIRF2IRDuIRH+ERAhAQgIIGIiKhD1CXqEfWJBkRDohHRmGhCNCWaEc2JFkRLohXRmmhDtCXaEe2JDkRHohPRmehCdCW6Ef8R3YkeRE+iF9Gb6EP0JfoR/YkBxEBiEDGYGEIMJYYRw4kRxEhiFDGaGEOMJcYR44kJxERiEjGZmEJMJaYR04kZxExiFjGbmEPMJeYR84kFxEJiEbGYWEIsJZYRy4kVxEpiFbGaWEOsJdYR64kNxEZiE7GZ2EJsJbYR24kdxE5iF7Gb2EPsJfYR+4kDxEHiEHGYOEIcJY4Rx4kTxEniFHGaOEOcJc4R54kLxEXiEnGZuEJcJa4R14kbxE3iFhFP3CbuEHeJe8R94gHxkHhEPCaeEE+JZ8Rz4gXxknhFvCbeEG+Jd8R74gPxkfhEfCa+EF+Jb8R34gfxk/hF/Cb+EH+Jf0QCkUgkEXFkMjI5mYJMSaYiU5NpyLRkOjI9mYHMSGYiM5NZyKxkNjI7mYPMSeYic5N5yLxkPjI/WYAsSBYiC5NFyKJkMbI4WYIsSZYiS5NlyLJkObI8WYGsSFYiK5NVyKpkNbI6WYOsSdYia5MxEiNxkiBJkiJpkiFZkiN5UiBFUiJlUiFVUiN10iBN0iJt0iFd0iN9MiBDEpCQRGRE1iHrkvXI+mQDsiHZiGxMNiGbks3I5mQLsiXZimxNtiHbku3I9mQHsiPZiexMdiG7kt3I/8juZA+yJ9mL7E32IfuS/cj+5AByIDmIHEwOIYeSw8jh5AhyJDmKHE2OIceS48jx5ARyIjmJnExOIaeS08jp5AxyJjmLnE3OIeeS88j55AJyIbmIXEwuIZeSy8jl5ApyJbmKXE2uIdeS68j15AZyI7mJ3ExuIbeS28jt5A5yJ7mL3E3uIfeS+8j95AHyIHmIPEweIY+Sx8jj5AnyJHmKPE2eIc+S58jz5AXyInmJvExeIa+S18jr5A3yJnmLjCdvk3fIu+Q98j75gHxIPiIfk0/Ip+Qz8jn5gnxJviJfk2/It+Q78j35gfxIfiI/k1/Ir+Q38jv5g/xJ/iJ/k3/Iv+Q/MoFMJJPIOCoZlZxKQaWkUlGpqTRUWiodlZ7KQGWkMlGZqSxUVioblZ3KQeWkclG5qTxUXioflZ8qQBWkClGFqSJUUaoYVZwqQZWkSlGlqTJUWaocVZ6qQFWkKlGVqSpUVaoaVZ2qQdWkalG1qRiFUThFUCRFUTTFUCzFUTwlUCIlUTKlUCqlUTplUCZlUTblUC7lUT4VUCEFKEghKqLqUHWpelR9qgHVkGpENaaaUE2pZlRzqgXVkmpFtabaUG2pdlR7qgPVkepEdaa6UF2pbtR/VHeqB9WT6kX1pvpQfal+VH9qADWQGkQNpoZQQ6lh1HBqBDWSGkWNpsZQY6lx1HhqAjWRmkRNpqZQU6lp1HRqBjWTmkXNpuZQc6l51HxqAbWQWkQtppZQS6ll1HJqBbWSWkWtptZQa6l11HpqA7WR2kRtprZQW6lt1HZqB7WT2kXtpvZQe6l91H7qAHWQOkQdpo5QR6lj1HHqBHWSOkWdps5QZ6lz1HnqAnWRukRdpq5QV6lr1HXqBnWTukXFU7epO9Rd6h51n3pAPaQeUY+pJ9RT6hn1nHpBvaReUa+pN9Rb6h31nvpAfaQ+UZ+pL9RX6hv1nfpB/aR+Ub+pP9Rf6h+VQCVSSVQcnYxOTqegU9Kp6NR0GjotnY5OT2egM9KZ6Mx0FjornY3OTuegc9K56Nx0HjovnY/OTxegC9KF6MJ0EbooXYwuTpegS9Kl6NJ0GbosXY4uT1egK9KV6Mp0FboqXY2uTtega9K16Np0jMZonCZokqZommZoluZonhZokZZomVZoldZonTZok7Zom3Zol/Zonw7okAY0pBEd0XXounQ9uj7dgG5IN6Ib003opnQzujndgm5Jt6Jb023otnQ7uj3dge5Id6I7013ornQ3+j+6O92D7kn3onvTfei+dD+6Pz2AHkgPogfTQ+ih9DB6OD2CHkmPokfTY+ix9Dh6PD2BnkhPoifTU+ip9DR6Oj2DnknPomfTc+i59Dx6Pr2AXkgvohfTS+il9DJ6Ob2CXkmvolfTa+i19Dp6Pb2B3khvojfTW+it9DZ6O72D3knvonfTe+i99D56P32APkgfog/TR+ij9DH6OH2CPkmfok/TZ+iz9Dn6PH2Bvkhfoi/TV+ir9DX6On2DvknfouPp2/Qd+i59j75PP6Af0o/ox/QT+in9jH5Ov6Bf0q/o1/Qb+i39jn5Pf6A/0p/oz/QX+iv9jf5O/6B/0r/o3/Qf+i/9j06gE+kkOo5JxiRnUjApmVRMaiYNk5ZJx6RnMjAZmUxMZiYLk5XJxmRncjA5mVxMbiYPk5fJx+RnCjAFmUJMYaYIU5QpxhRnSjAlmVJMaaYMU5Ypx5RnKjAVmUpMZaYKU5WpxlRnajA1mVpMbSbGYAzOEAzJUAzNMAzLcAzPCIzISIzMKIzKaIzOGIzJWIzNOIzLeIzPBEzIAAYyiImYOkxdph5Tn2nANGQaMY2ZJkxTphnTnGnBtGRaMa2ZNkxbph3TnunAdGQ6MZ2ZLkxXphvzH9Od6cH0ZHoxvZk+TF+mH9OfGcAMZAYxg5khzFBmGDOcGcGMZEYxo5kxzFhmHDOemcBMZCYxk5kpzFRmGjOdmcHMZGYxs5k5zFxmHjOfWcAsZBYxi5klzFJmGbOcWcGsZFYxq5k1zFpmHbOe2cBsZDYxm5ktzFZmG7Od2cHsZHYxu5k9zF5mH7OfOcAcZA4xh5kjzFHmGHOcOcGcZE4xp5kzzFnmHHOeucBcZC4xl5krzFXmGnOducHcZG4x8cxt5g5zl7nH3GceMA+ZR8xj5gnzlHnGPGdeMC+ZV8xr5g3zlnnHvGc+MB+ZT8xn5gvzlfnGfGd+MD+ZX8xv5g/zl/nHJDCJTBITxyZjk7Mp2JRsKjY1m4ZNy6Zj07MZ2IxsJjYzm4XNymZjs7M52JxsLjY3m4fNy+Zj87MF2IJsIbYwW4QtyhZji7Ml2JJsKbY0W4Yty5Zjy7MV2IpsJbYyW4WtylZjq7M12JpsLbY2G2MxFmcJlmQplmYZlmU5lmcFVmQlVmYVVmU1VmcN1mQt1mYd1mU91mcDNmQBC1nERmwdti5bj63PNmAbso3YxmwTtinbjG3OtmBbsq3Y1mwbti3bjm3PdmA7sp3YzmwXtivbjf2P7c72YHuyvdjebB+2L9uP7c8OYAeyg9jB7BB2KDuMHc6OYEeyo9jR7Bh2LDuOHc9OYCeyk9jJ7BR2KjuNnc7OYGeys9jZ7Bx2LjuPnc8uYBeyi9jF7BJ2KbuMXc6uYFeyq9jV7Bp2LbuOXc9uYDeym9jN7BZ2K7uN3c7uYHeyu9jd7B52L7uP3c8eYA+yh9jD7BH2KHuMPc6eYE+yp9jT7Bn2LHuOPc9eYC+yl9jL7BX2KnuNvc7eYG+yt9h49jZ7h73L3mPvsw/Yh+wj9jH7hH3KPmOfsy/Yl+wr9jX7hn3LvmPfsx/Yj+wn9jP7hf3KfmO/sz/Yn+wv9jf7h/3L/mMT2EQ2iY3jknHJuRRcSi4Vl5pLw6Xl0nHpuQxcRi4Tl5nLwmXlsnHZuRxcTi4Xl5vLw+Xl8nH5uQJcQa4QV5grwhXlinHFuRJcSa4UV5orw5XlynHluQpcRa4SV5mrwlXlqnHVuRpcTa4WV5uLcRiHcwRHchRHcwzHchzHcwInchIncwqnchqncwZnchZncw7nch7ncwEXcoCDHOIirg5Xl6vH1ecacA25RlxjrgnXlGvGNedacC25Vlxrrg3XlmvHtec6cB25TlxnrgvXlevG/cd153pwPbleXG+uD9eX68f15wZwA7lB3GBuCDeUG8YN50ZwI7lR3GhuDDeWG8eN5yZwE7lJ3GRuCjeVm8ZN52ZwM7lZ3GxuDjeXm8fN5xZwC7lF3GJuCbeUW8Yt51ZwK7lV3GpuDbeWW8et5zZwG7lN3GZuC7eV28Zt53ZwO7ld3G5uD7eX28ft5w5wB7lD3GHuCHeUO8Yd505wJ7lT3GnuDHeWO8ed5y5wF7lL3GXuCneVu8Zd525wN7lbXDx3m7vD3eXucfe5B9xD7hH3mHvCPeWecc+5F9xL7hX3mnvDveXece+5D9xH7hP3mfvCfeW+cd+5H9xP7hf3m/vD/eX+cQlcIpfExfHJ+OR8Cj4ln4pPzafh0/Lp+PR8Bj4jn4nPzGfhs/LZ+Ox8Dj4nn4vPzefh8/L5+Px8Ab4gX4gvzBfhi/LF+OJ8Cb4kX4ovzZfhy/Ll+PJ8Bb4iX4mvzFfhq/LV+Op8Db4mX4uvzcd4jMd5gid5iqd5hmd5jud5gRd5iZd5hVd5jdd5gzd5i7d5h3d5j/f5gA95wEMe8RFfh6/L1+Pr8w34hnwjvjHfhG/KN+Ob8y34lnwrvjXfhm/Lt+Pb8x34jnwnvjPfhe/Kd+P/47vzPfiefC++N9+H78v34/vzA/iB/CB+MD+EH8oP44fzI/iR/Ch+ND+GH8uP48fzE/iJ/CR+Mj+Fn8pP46fzM/iZ/Cx+Nj+Hn8vP4+fzC/iF/CJ+Mb+EX8ov45fzK/iV/Cp+Nb+GX8uv49fzG/iN/CZ+M7+F38pv47fzO/id/C5+N7+H38vv4/fzB/iD/CH+MH+EP8of44/zJ/iT/Cn+NH+GP8uf48/zF/iL/CX+Mn+Fv8pf46/zN/ib/C0+nr/N3+Hv8vf4+/wD/iH/iH/MP+Gf8s/45/wL/iX/in/Nv+Hf8u/49/wH/iP/if/Mf+G/8t/47/wP/if/i//N/+H/8v/4BD6RT+LjhGRCciGFkFJIJaQW0ghphXRCeiGDkFHIJGQWsghZhWxCdiGHkFPIJeQW8gh5hXxCfqGAUFAoJBQWighFhWJCcaGEUFIoJZQWyghlhXJCeaGCUFGoJFQWqghVhWpCdaGGUFOoJdQWYgIm4AIhkAIl0AIjsAIn8IIgiIIkyIIiqIIm6IIhmIIl2IIjuIIn+EIghAIQoICESKgj1BXqCfWFBkJDoZHQWGgiNBWaCc2FFkJLoZXQWmgjtBXaCe2FDkJHoZPQWegidBW6Cf8J3YUeQk+hl9Bb6CP0FfoJ/YUBwkBhkDBYGCIMFYYJw4URwkhhlDBaGCOMFcYJ44UJwkRhkjBZmCJMFaYJ04UZwkxhljBbmCPMFeYJ84UFwkJhkbBYWCIsFZYJy4UVwkphlbBaWCOsFdYJ64UNwkZhk7BZ2CJsFbYJ24Udwk5hl7Bb2CPsFfYJ+4UDwkHhkHBYOCIcFY4Jx4UTwknhlHBaOCOcFc4J54ULwkXhknBZuCJcFa4J14Ubwk3hlhAv3BbuCHeFe8J94YHwUHgkPBaeCE+FZ8Jz4YXwUnglvBbeCG+Fd8J74YPwUfgkfBa+CF+Fb8J34YfwU/gl/Bb+CH+Ff0KCkCgkCXFiMjG5mEJMKaYSU4tpxLRiOjG9mEHMKGYSM4tZxKxiNjG7mEPMKeYSc4t5xLxiPjG/WEAsKBYSC4tFxKJiMbG4WEIsKZYSS4tlxLJiObG8WEGsKFYSK4tVxKpiNbG6WEOsKdYSa4sxERNxkRBJkRJpkRFZkRN5URBFURJlURFVURN10RBN0RJt0RFd0RN9MRBDEYhQRGIk1hHrivXE+mIDsaHYSGwsNhGbis3E5mILsaXYSmwtthHbiu3E9mIHsaPYSewsdhG7it3E/8TuYg+xp9hL7C32EfuK/cT+4gBxoDhIHCwOEYeKw8Th4ghxpDhKHC2OEceK48Tx4gRxojhJnCxOEaeK08Tp4gxxpjhLnC3OEeeK88T54gJxobhIXCwuEZeKy8Tl4gpxpbhKXC2uEdeK68T14gZxo7hJ3CxuEbeK28Tt4g5xp7hL3C3uEfeK+8T94gHxoHhIPCweEY+Kx8Tj4gnxpHhKPC2eEc+K58Tz4gXxonhJvCxeEa+K18Tr4g3xpnhLjBdvi3fEu+I98b74QHwoPhIfi0/Ep+Iz8bn4QnwpvhJfi2/Et+I78b34QfwofhI/i1/Er+I38bv4Q/wp/hJ/i3/Ev+I/MUFMFJPEOCmZlFxKIaWUUkmppTRSWimdlF7KIGWUMkmZpSxSVimblF3KIeWUckm5pTxSXimflF8qIBWUCkmFpSJSUamYVFwqIZWUSkmlpTJSWamcVF6qIFWUKkmVpSpSVamaVF2qIdWUakm1pZiESbhESKRESbTESKzESbwkSKIkSbKkSKqkSbpkSKZkSbbkSK7kSb4USKEEJCghKZLqSHWlelJ9qYHUUGokNZaaSE2lZlJzqYXUUmoltZbaSG2ldlJ7qYPUUeokdZa6SF2lbtJ/Uneph9RT6iX1lvpIfaV+Un9pgDRQGiQNloZIQ6Vh0nBphDRSGiWNlsZIY6Vx0nhpgjRRmiRNlqZIU6Vp0nRphjRTmiXNluZIc6V50nxpgbRQWiQtlpZIS6Vl0nJphbRSWiWtltZIa6V10nppg7RR2iRtlrZIW6Vt0nZph7RT2iXtlvZIe6V90n7pgHRQOiQdlo5IR6Vj0nHphHRSOiWdls5IZ6Vz0nnpgnRRuiRdlq5IV6Vr0nXphnRTuiXFS7elO9Jd6Z50X3ogPZQeSY+lJ9JT6Zn0XHohvZReSa+lN9Jb6Z30XvogfZQ+SZ+lL9JX6Zv0Xfoh/ZR+Sb+lP9Jf6Z+UICVKSVKcnExOLqeQU8qp5NRyGjmtnE5OL2eQM8qZ5MxyFjmrnE3OLueQc8q55NxyHjmvnE/OLxeQC8qF5MJyEbmoXEwuLpeQS8ql5NJyGbmsXE4uL1eQK8qV5MpyFbmqXE2uLteQa8q15NpyTMZkXCZkUqZkWmZkVuZkXhZkUZZkWVZkVdZkXTZkU7ZkW3ZkV/ZkXw7kUAYylJEcyXXkunI9ub7cQG4oN5Iby03kpnIzubncQm4pt5Jby23ktnI7ub3cQe4od5I7y13krnI3+T+5u9xD7in3knvLfeS+cj+5vzxAHigPkgfLQ+Sh8jB5uDxCHimPkkfLY+Sx8jh5vDxBnihPkifLU+Sp8jR5ujxDninPkmfLc+S58jx5vrxAXigvkhfLS+Sl8jJ5ubxCXimvklfLa+S18jp5vbxB3ihvkjfLW+St8jZ5u7xD3invknfLe+S98j55v3xAPigfkg/LR+Sj8jH5uHxCPimfkk/LZ+Sz8jn5vHxBvihfki/LV+Sr8jX5unxDvinfkuPl2/Id+a58T74vP5Afyo/kx/IT+an8TH4uv5Bfyq/k1/Ib+a38Tn4vf5A/yp/kz/IX+av8Tf4u/5B/yr/k3/If+a/8T06QE+UkOU5JpiRXUigplVRKaiWNklZJp6RXMigZlUxKZiWLklXJpmRXcig5lVxKbiWPklfJp+RXCigFlUJKYaWIUlQpphRXSigllVJKaaWMUlYpp5RXKigVlUpKZaWKUlWpplRXaig1lVpKbSWmYAquEAqpUAqtMAqrcAqvCIqoSIqsKIqqaIquGIqpWIqtOIqreIqvBEqoAAUqSImUOkpdpZ5SX2mgNFQaKY2VJkpTpZnSXGmhtFRaKa2VNkpbpZ3SXumgdFQ6KZ2VLkpXpZvyn9Jd6aH0VHopvZU+Sl+ln9JfGaAMVAYpg5UhylBlmDJcGaGMVEYpo5UxylhlnDJemaBMVCYpk5UpylRlmjJdmaHMVGYps5U5ylxlnjJfWaAsVBYpi5UlylJlmbJcWaGsVFYpq5U1ylplnbJe2aBsVDYpm5UtylZlm7Jd2aHsVHYpu5U9yl5ln7JfOaAcVA4ph5UjylHlmHJcOaGcVE4pp5UzylnlnHJeuaBcVC4pl5UrylXlmnJduaHcVG4p8cpt5Y5yV7mn3FceKA+VR8pj5YnyVHmmPFdeKC+VV8pr5Y3yVnmnvFc+KB+VT8pn5YvyVfmmfFd+KD+VX8pv5Y/yV/mnJCiJSpISpyZTk6sp1JRqKjW1mkZNq6ZT06sZ1IxqJjWzmkXNqmZTs6s51JxqLjW3mkfNq+ZT86sF1IJqIbWwWkQtqhZTi6sl1JJqKbW0WkYtq5ZTy6sV1IpqJbWyWkWtqlZTq6s11JpqLbW2GlMxFVcJlVQplVYZlVU5lVcFVVQlVVYVVVU1VVcN1VQt1VYd1VU91VcDNVSBClWkRmodta5aT62vNlAbqo3UxmoTtanaTG2utlBbqq3U1mobta3aTm2vdlA7qp3UzmoXtavaTf1P7a72UHuqvdTeah+1r9pP7a8OUAeqg9TB6hB1qDpMHa6OUEeqo9TR6hh1rDpOHa9OUCeqk9TJ6hR1qjpNna7OUGeqs9TZ6hx1rjpPna8uUBeqi9TF6hJ1qbpMXa6uUFeqq9TV6hp1rbpOXa9uUDeqm9TN6hZ1q7pN3a7uUHequ9Td6h51r7pP3a8eUA+qh9TD6hH1qHpMPa6eUE+qp9TT6hn1rHpOPa9eUC+ql9TL6hX1qnpNva7eUG+qt9R49bZ6R72r3lPvqw/Uh+oj9bH6RH2qPlOfqy/Ul+or9bX6Rn2rvlPfqx/Uj+on9bP6Rf2qflO/qz/Un+ov9bf6R/2r/lMT1EQ1SY3TkmnJtRRaSi2VllpLo6XV0mnptQxaRi2TllnLomXVsmnZtRxaTi2XllvLo+XV8mn5tQJaQa2QVlgrohXVimnFtRJaSa2UVloro5XVymnltQpaRa2SVlmrolXVqmnVtRpaTa2WVluLaZiGa4RGapRGa4zGapzGa4ImapIma4qmapqma4ZmapZma47map7ma4EWakCDGtIirY5WV6un1dcaaA21RlpjrYnWVGumNddaaC21VlprrY3WVmuntdc6aB21TlpnrYvWVeum/ad113poPbVeWm+tj9ZX66f11wZoA7VB2mBtiDZUG6YN10ZoI7VR2mhtjDZWG6eN1yZoE7VJ2mRtijZVm6ZN12ZoM7VZ2mxtjjZXm6fN1xZoC7VF2mJtibZUW6Yt11ZoK7VV2mptjbZWW6et1zZoG7VN2mZti7ZV26Zt13ZoO7Vd2m5tj7ZX26ft1w5oB7VD2mHtiHZUO6Yd105oJ7VT2mntjHZWO6ed1y5oF7VL2mXtinZVu6Zd125oN7VbWrx2W7uj3dXuafe1B9pD7ZH2WHuiPdWeac+1F9pL7ZX2WnujvdXeae+1D9pH7ZP2WfuifdW+ad+1H9pP7Zf2W/uj/dX+aQlaopakxenJ9OR6Cj2lnkpPrafR0+rp9PR6Bj2jnknPrGfRs+rZ9Ox6Dj2nnkvPrefR8+r59Px6Ab2gXkgvrBfRi+rF9OJ6Cb2kXkovrZfRy+rl9PJ6Bb2iXkmvrFfRq+rV9Op6Db2mXkuvrcd0TMd1Qid1Sqd1Rmd1Tud1QRd1SZd1RVd1Tdd1Qzd1S7d1R3d1T/f1QA91oEMd6ZFeR6+r19Pr6w30hnojvbHeRG+qN9Ob6y30lnorvbXeRm+rt9Pb6x30jnonvbPeRe+qd9P/07vrPfSeei+9t95H76v30/vrA/SB+iB9sD5EH6oP04frI/SR+ih9tD5GH6uP08frE/SJ+iR9sj5Fn6pP06frM/SZ+ix9tj5Hn6vP0+frC/SF+iJ9sb5EX6ov05frK/SV+ip9tb5GX6uv09frG/SN+iZ9s75F36pv07frO/Sd+i59t75H36vv0/frB/SD+iH9sH5EP6of04/rJ/ST+in9tH5GP6uf08/rF/SL+iX9sn5Fv6pf06/rN/Sb+i09Xr+t39Hv6vf0+/oD/aH+SH+sP9Gf6s/05/oL/aX+Sn+tv9Hf6u/09/oH/aP+Sf+sf9G/6t/07/oP/af+S/+t/9H/6v/0BD1RT9LjjGRGciOFkdJIZaQ20hhpjXRGeiODkdHIZGQ2shhZjWxGdiOHkdPIZeQ28hh5jXxGfqOAUdAoZBQ2ihhFjWJGcaOEUdIoZZQ2yhhljXJGeaOCUdGoZFQ2qhhVjWpGdaOGUdOoZdQ2YgZm4AZhkAZl0AZjsAZn8IZgiIZkyIZiqIZm6IZhmIZl2IZjuIZn+EZghAYwoIGMyKhj1DXqGfWNBkZDo5HR2GhiNDWaGc2NFkZLo5XR2mhjtDXaGe2NDkZHo5PR2ehidDW6Gf8Z3Y0eRk+jl9Hb6GP0NfoZ/Y0BxkBjkDHYGGIMNYYZw40RxkhjlDHaGGOMNcYZ440JxkRjkjHZmGJMNaYZ040ZxkxjljHbmGPMNeYZ840FxkJjkbHYWGIsNZYZy40VxkpjlbHaWGOsNdYZ640NxkZjk7HZ2GJsNbYZ240dxk5jl7Hb2GPsNfYZ+40DxkHjkHHYOGIcNY4Zx40TxknjlHHaOGOcNc4Z540LxkXjknHZuGJcNa4Z140bxk3jlhFv3DbuGHeNe8Z944Hx0HhkPDaeGE+NZ8Zz44Xx0nhlvDbeGG+Nd8Z744Px0fhkfDa+GF+Nb8Z344fx0/hl/Db+GH+Nf0aCkWgkGXFmMjO5mcJMaaYyU5tpzLRmOjO9mcHMaGYyM5tZzKxmNjO7mcPMaeYyc5t5zLxmPjO/WcAsaBYyC5tFzKJmMbO4WcIsaZYyS5tlzLJmObO8WcGsaFYyK5tVzKpmNbO6WcOsadYya5sxEzNxkzBJkzJpkzFZkzN5UzBFUzJlUzFVUzN10zBN0zJt0zFd0zN9MzBDE5jQRGZk1jHrmvXM+mYDs6HZyGxsNjGbms3M5mYLs6XZymxttjHbmu3M9mYHs6PZyexsdjG7mt3M/8zuZg+zp9nL7G32Mfua/cz+5gBzoDnIHGwOMYeaw8zh5ghzpDnKHG2OMcea48zx5gRzojnJnGxOMaea08zp5gxzpjnLnG3OMeea88z55gJzobnIXGwuMZeay8zl5gpzpbnKXG2uMdea68z15gZzo7nJ3GxuMbea28zt5g5zp7nL3G3uMfea+8z95gHzoHnIPGweMY+ax8zj5gnzpHnKPG2eMc+a58zz5gXzonnJvGxeMa+a18zr5g3zpnnLjDdvm3fMu+Y98775wHxoPjIfm0/Mp+Yz87n5wnxpvjJfm2/Mt+Y78735wfxofjI/m1/Mr+Y387v5w/xp/jJ/m3/Mv+Y/M8FMNJPMOCuZldxKYaW0UlmprTRWWiudld7KYGW0MlmZrSxWViubld3KYeW0clm5rTxWXiufld8qYBW0ClmFrSJWUauYVdwqYZW0SlmlrTJWWaucVd6qYFW0KlmVrSpWVauaVd2qYdW0alm1rZiFWbhFWKRFWbTFWKzFWbwlWKIlWbKlWKqlWbplWKZlWbblWK7lWb4VWKEFLGghK7LqWHWtelZ9q4HV0GpkNbaaWE2tZlZzq4XV0mpltbbaWG2tdlZ7q4PV0epkdba6WF2tbtZ/Vnerh9XT6mX1tvpYfa1+Vn9rgDXQGmQNtoZYQ61h1nBrhDXSGmWNtsZYY61x1nhrgjXRmmRNtqZYU61p1nRrhjXTmmXNtuZYc6151nxrgbXQWmQttpZYS61l1nJrhbXSWmWtttZYa6111nprg7XR2mRttrZYW61t1nZrh7XT2mXttvZYe6191n7rgHXQOmQdto5YR61j1nHrhHXSOmWdts5YZ61z1nnrgnXRumRdtq5YV61r1nXrhnXTumXFW7etO9Zd655133pgPbQeWY+tJ9ZT65n13HphvbReWa+tN9Zb65313vpgfbQ+WZ+tL9ZX65v13fph/bR+Wb+tP9Zf65+VYCVaSVacncxObqewU9qp7NR2Gjutnc5Ob2ewM9qZ7Mx2Fjurnc3Obuewc9q57Nx2Hjuvnc/ObxewC9qF7MJ2EbuoXcwubpewS9ql7NJ2GbusXc4ub1ewK9qV7Mp2FbuqXc2ubtewa9q17Np2zMZs3CZs0qZs2mZs1uZs3hZs0ZZs2VZs1dZs3TZs07Zs23Zs1/Zs3w7s0AY2tJEd2XXsunY9u77dwG5oN7Ib203spnYzu7ndwm5pt7Jb223stnY7u73dwe5od7I7213srnY3+z+7u93D7mn3snvbfey+dj+7vz3AHmgPsgfbQ+yh9jB7uD3CHmmPskfbY+yx9jh7vD3BnmhPsifbU+yp9jR7uj3DnmnPsmfbc+y59jx7vr3AXmgvshfbS+yl9jJ7ub3CXmmvslfba+y19jp7vb3B3mhvsjfbW+yt9jZ7u73D3mnvsnfbe+y99j57v33APmgfsg/bR+yj9jH7uH3CPmmfsk/bZ+yz9jn7vH3Bvmhfsi/bV+yr9jX7un3DvmnfsuPt2/Yd+659z75vP7Af2o/sx/YT+6n9zH5uv7Bf2q/s1/Yb+639zn5vf7A/2p/sz/YX+6v9zf5u/7B/2r/s3/Yf+6/9z06wE+0kO85J5iR3UjgpnVROaieNk9ZJ56R3MjgZnUxOZieLk9XJ5mR3cjg5nVxObiePk9fJ5+R3CjgFnUJOYaeIU9Qp5hR3SjglnVJOaaeMU9Yp55R3KjgVnUpOZaeKU9Wp5lR3ajg1nVpObSfmYA7uEA7pUA7tMA7rcA7vCI7oSI7sKI7qaI7uGI7pWI7tOI7reI7vBE7oAAc6yImcOk5dp55T32ngNHQaOY2dJk5Tp5nT3GnhtHRaOa2dNk5bp53T3ungdHQ6OZ2dLk5Xp1t8XFyc08Pp6fRyejt9nL5OP6e/M8AZ6AxyBjtDnKHOMGe4M8IZ6YxyRjtjnLHOOGe8M8GZ6ExyJjtTnKnONGe6M8OZ6cxyZjtznLnOPGe+s8BZ6CxyFjtLnKXOMme5s8JZ6axyVjtrnLXOOme9s8HZ6GxyNjtbnK3ONme7s8PZ6exydjt7nL3OPme/c8A56BxyDjtHnKPOMee4c8I56ZxyTjtnnLPOOee8c8G56FxyLjtXnKvONee6c8O56dxy4p3bzh3nrnPPue88cB46j5zHzhPnqfPMee68cF46r5zXzhvnrfPOee98cD46n5zPzhfnq/PN+e78cH46v5zfzh/nr/PPSXASnSQnzk3mJndTuCndVG5qN42b1k3npnczuBndTG5mN4ub1c3mZndzuDndXG5uN4+b183n5ncLuAXdQm5ht4hb1C3mFndLuCXdUm5pt4xb1i3nlncruBXdSm5lt4pb1a3mVndruDXdWm5tN+ZiLu4SLulSLu0yLutyLu8KruhKruwqrupqru4arularu06rut6ru8GbugCF7rIjdw6bl23nlvfbeA2dBu5jd0mblO3mdvcbeG2dFu5rd02blu3ndve7eB2dDu5nd0uble3m/uf293t4fZ0e7m93T5uX7ef298d4A50B7mD3SHuUHeYO9wd4Y50R7mj3THuWHecO96d4E50J7mT3SnuVHeaO92d4c50Z7mz3TnuXHeeO99d4C50F7mL3SXuUneZu9xd4a50V7mr3TXuWnedu97d4G50N7mb3S3uVnebu93d4e50d7m73T3uXnefu9894B50D7mH3SPuUfeYe9w94Z50T7mn3TPuWfece9694F50L7mX3SvuVfeae9294d50b7nx7m33jnvXvefedx+4D91H7mP3ifvUfeY+d1+4L91X7mv3jfvWfee+dz+4H91P7mf3i/vV/eZ+d3+4P91f7m/3j/vX/ecmuIlukhvnJfOSeym8lF4qL7WXxkvrpfPSexm8jF4mL7OXxcvqZfOyezm8nF4uL7eXx8vr5fPyewW8gl4hr7BXxCvqFfOKeyW8kl4pr7RXxivrlfPKexW8il4lr7JXxavqVfOqezW8ml4tr7YX8zAP9wiP9CiP9hiP9TiP9wRP9CRP9hRP9TRP9wzP9CzP9hzP9TzP9wIv9IAHPeRFXh2vrlfPq+818Bp6jbzGXhOvqdfMa+618Fp6rbzWXhuvrdfOa+918Dp6nbzOXhevq9fN+8/r7vXwenq9vN5eH6+v18/r7w3wBnqDvMHeEG+oN8wb7o3wRnqjvNHeGG+sN84b703wJnqTvMneFG+qN82b7s3wZnqzvNneHG+uN8+b7y3wFnqLvMXeEm+pt8xb7q3wVnqrvNXeGm+tt85b723wNnqbvM3eFm+rt83b7u3wdnq7vN3eHm+vt8/b7x3wDnqHvMPeEe+od8w77p3wTnqnvNPeGe+sd847713wLnqXvMveFe+qd8277t3wbnq3vHjvtnfHu+vd8+57D7yH3iPvsffEe+o98557L7yX3ivvtffGe+u98957H7yP3ifvs/fF++p98757P7yf3i/vt/fH++v98xK8RC/Ji/OT+cn9FH5KP5Wf2k/jp/XT+en9DH5GP5Of2c/iZ/Wz+dn9HH5OP5ef28/j5/Xz+fn9An5Bv5Bf2C/iF/WL+cX9En5Jv5Rf2i/jl/XL+eX9Cn5Fv5Jf2a/iV/Wr+dX9Gn5Nv5Zf24/5mI/7hE/6lE/7jM/6nM/7gi/6ki/7iq/6mq/7hm/6lm/7ju/6nu/7gR/6wIc+8iO/jl/Xr+fX9xv4Df1GfmO/id/Ub+Y391v4Lf1Wfmu/jd/Wb+e39zv4Hf1Ofme/i9/V7+b/53f3e/g9/V5+b7+P39fv5/f3B/gD/UH+YH+IP9Qf5g/3R/gj/VH+aH+MP9Yf54/3J/gT/Un+ZH+KP9Wf5k/3Z/gz/Vn+bH+OP9ef58/3F/gL/UX+Yn+Jv9Rf5i/3V/gr/VX+an+Nv9Zf56/3N/gb/U3+Zn+Lv9Xf5m/3d/g7/V3+bn+Pv9ff5+/3D/gH/UP+Yf+If9Q/5h/3T/gn/VP+af+Mf9Y/55/3L/gX/Uv+Zf+Kf9W/5l/3b/g3/Vt+vH/bv+Pf9e/59/0H/kP/kf/Yf+I/9Z/5z/0X/kv/lf/af+O/9d/57/0P/kf/k//Z/+J/9b/53/0f/k//l//b/+P/9f/5CX6in+THBcmC5EGKIGWQKkgdpAnSBumC9EGGIGOQKcgcZAmyBtmC7EGOIGeQK8gd5AnyBvmC/EGBoGBQKCgcFAmKBsWC4kGJoGRQKigdlAnKBuWC8kGFoGJQKagcVAmqBtWC6kGNoGZQK6gdxAIswAMiIAMqoAMmYAMu4AMhEAMpkAMlUAMt0AMjMAMrsAMncAMv8IMgCAMQwAAFUVAnqBvUC+oHDYKGQaOgcdAkaBo0C5oHLYKWQaugddAmaBu0C9oHHYKOQaegc9Al6Bp0C/4Lugc9gp5Br6B30CfoG/QL+gcDgoHBoGBwMCQYGgwLhgcjgpHBqGB0MCYYG4wLxgcTgonBpGByMCWYGkwLpgczgpnBrGB2MCeYG8wL5gcLgoXBomBxsCRYGiwLlgcrgpXBqmB1sCZYG6wL1gcbgo3BpmBzsCXYGmwLtgc7gp3BrmB3sCfYG+wL9gcHgoPBoeBwcCQ4GhwLjgcngpPBqeB0cCY4G5wLzgcXgovBpeBycCW4GlwLrgc3gpvBrSA+uB3cCe4G94L7wYPgYfAoeBw8CZ4Gz4LnwYvgZfAqeB28Cd4G74L3wYfgY/Ap+Bx8Cb4G34LvwY/gZ/Ar+B38Cf4G/4KEIDFICuLCZGHyMEWYMkwVpg7ThGnDdGH6MEOYMcwUZg6zhFnDbGH2MEeYM8wV5g7zhHnDfGH+sEBYMCwUFg6LhEXDYmHxsERYMiwVlg7LhGXDcmH5sEJYMawUVg6rhFXDamH1sEZYM6wV1g5jIRbiIRGSIRXSIROyIRfyoRCKoRTKoRKqoRbqoRGaoRXaoRO6oRf6YRCGIQhhiMIorBPWDeuF9cMGYcOwUdg4bBI2DZuFzcMWYcuwVdg6bBO2DduF7cMOYcewU9g57BJ2DbuF/4Xdwx5hz7BX2DvsE/YN+4X9wwHhwHBQODgcEg4Nh4XDwxHhyHBUODocE44Nx4XjwwnhxHBSODmcEk4Np4XTwxnhzHBWODucE84N54XzwwXhwnBRuDhcEi4Nl4XLwxXhynBVuDpcE64N14Xrww3hxnBTuDncEm4Nt4Xbwx3hznBXuDvcE+4N94X7wwPhwfBQeDg8Eh4Nj4XHwxPhyfBUeDo8E54Nz4XnwwvhxfBSeDm8El4Nr4XXwxvhzfBWGB/eDu+Ed8N74f3wQfgwfBQ+Dp+ET8Nn4fPwRfgyfBW+Dt+Eb8N34fvwQ/gx/BR+Dr+EX8Nv4ffwR/gz/BX+Dv+Ef8N/YUKYGCaFcSAZSA5SgJQgFUgN0oC0IB1IDzKAjCATyAyygKwgG8gOcoCcIBfIDfKAvCAfyA8KgIKgECgMioCioBgoDkqAkqAUKA3KgLKgHCgPKoCKoBKoDKqAqqAaqA5qgJqgFqgNYgADOCAACShAAwawgAM8EIAIJCADBahAAzowgAksYAMHuMADPghACACAAIEI1AF1QT1QHzQADUEj0Bg0AU1BM9ActAAtQSvQGrQBbUE70B50AB1BJ9AZdAFdQTfwH+gOeoCeoBfoDfqAvqAf6A8GgIFgEBgMhoChYBgYDkaAkWAUGA3GgLFgHBgPJoCJYBKYDKaAqWAamA5mgJlgFpgN5oC5YB6YDxaAhWARWAyWgKVgGVgOVoCVYBVYDdaAtWAdWA82gI1gE9gMtoCtYBvYDnaAnWAX2A32gL1gH9gPDoCD4BA4DI6Ao+AYOA5OgJPgFDgNzoCz4Bw4Dy6Ai+ASuAyugKvgGrgOboCb4BaIB7fBHXAX3AP3wQPwEDwCj8ET8BQ8A8/BC/ASvAKvwRvwFrwD78EH8BF8Ap/BF/AVfAPfwQ/wE/wCv8Ef8Bf8AwkgESSBOJgMJocpYEqYCqaGaWBamA6mhxlgRpgJZoZZYFaYDWaHOWBOmAvmhnlgXpgP5ocFYEFYCBaGRWBRWAwWhyVgSVgKloZlYFlYDpaHFWBFWAlWhlVgVVgNVoc1YE1YC9aGMYhBHBKQhBSkIQNZyEEeClCEEpShAlWoQR0a0IQWtKEDXehBHwYwhABCiGAE68C6sB6sDxvAhrARbAybwKawGWwOW8CWsBVsDdvAtrAdbA87wI6wE+wMu8CusBv8D3aHPWBP2Av2hn1gX9gP9ocD4EA4CA6GQ+BQOAwOhyPgSDgKjoZj4Fg4Do6HE+BEOAlOhlPgVDgNTocz4Ew4C86Gc+BcOA/OhwvgQrgILoZL4FK4DC6HK+BKuAquhmvgWrgOrocb4Ea4CW6GW+BWuA1uhzvgTrgL7oZ74F64D+6HB+BBeAgehkfgUXgMHocn4El4Cp6GZ+BZeA6ehxfgRXgJXoZX4FV4DV6HN+BNeAvGw9vwDrwL78H78AF8CB/Bx/AJfAqfwefwBXwJX8HX8A18C9/B9/AD/Ag/wc/wC/wKv8Hv8Af8CX/B3/AP/Av/wQSYCJNgHEqGkqMUKCVKhVKjNCgtSofSowwoI8qEMqMsKCvKhrKjHCgnyoVyozwoL8qH8qMCqCAqhAqjIqgoKoaKoxKoJCqFSqMyqCwqh8qjCqgiqoQqoyqoKqqGqqMaqCaqhWqjGMIQjghEIgrRiEEs4hCPBCQiCclIQSrSkI4MZCIL2chBLvKQjwIUIoAgQihCdVBdVA/VRw1QQ9QINUZNUFPUDDVHLVBL1Aq1Rm1QW9QOtUcdUEfUCXVGXVBX1A39h7qjHqgn6oV6oz6oL+qH+qMBaCAahAajIWgoGoaGoxFoJBqFRqMxaCwah8ajCWgimoQmoyloKpqGpqMZaCaahWajOWgumofmowVoIVqEFqMlaClahpajFWglWoVWozVoLVqH1qMNaCPahDajLWgr2oa2ox1oJ9qFdqM9aC/ah/ajA+ggOoQOoyPoKDqGjqMT6CQ6hU6jM+gsOofOowvoIrqELqMr6Cq6hq6jG+gmuoXi0W10B91F99B99AA9RI/QY/QEPUXP0HP0Ar1Er9Br9Aa9Re/Qe/QBfUSf0Gf0BX1F39B39AP9RL/Qb/QH/UX/UAJKREkoLkoWJY9SRCmjVFHqKE2UNkoXpY8yRBmjTFHmKEuUNcoWZY9yRDmjXFHuKE+UN8oX5Y8KRAWjQlHhqEhUNCoWFY9KRCWjUlHpqExUNioXlY8qRBWjSlHlqEpUNaoWVY9qRDWjWlHtKBZhER4RERlRER0xERtxER8JkRhJkRwpkRppkR4ZkRlZkR05kRt5kR8FURiBCEYoiqI6Ud2oXlQ/ahA1jBpFjaMmUdOoWdQ8ahG1jFpFraM2UduoXdQ+6hB1jDpFnaMuUdeoW/Rf1D3qEfWMekW9oz5R36hf1D8aEA2MBkWDoyHR0GhYNDwaEY2MRkWjozHR2GhcND6aEE2MJkWToynR1GhaND2aEc2MZkWzoznR3GheND9aEC2MFkWLoyXR0mhZtDxaEa2MVkWrozXR2mhdtD7aEG2MNkWboy3R1mhb9D8H8ACdx7IAADhlatzatm3b7r+2vTszu7Vt27ZT27ZtW6nzznnftlhCbHtsR2xnbFdsd2xPbG9sX2x/7EDsYOxQ7HDsSOxo7FjseOxE7GTsVOx07EzsbOxc7HzsQuxi7FLscuxK7GrsWux67EbsZuxW7HbsTuxu7F7sfuxB7GHsUexx7EnsaexZ7HnsRexl7FXsdexN7G3sXex97EPsY+xT7HPsS+xr7Fvseywx9iP2M/Yr9jv2J/Y39i+WFIvDkmHJsRRYSiwVlhqLx9JgabF0WHosA5YRy4RlxrJgWbH/sGxYdiwHlhPLheXG8mB5sXxYfqwAVhArhBXGimBFsWJYcawEVhIrhZXGymBlsXJYeawCVhGrhFXGqmBVsWpYdawGVhOrhdXG6mB1sXpYfawB1hBrhDXGmmBNsWZYc6wF1hJrhbXG2mBtsXZYe6wD1hHrhHXGumBdsW5Yd6wH1hOLYRiGYwRGYhRGYwzGYhzGYwImYhImYwqmYhqmYwZmYhZmYw7mYh7mYwEGMIghLMQirBfWG+uD9cX6Yf2xAdhAbBA2GBuCDcWGYcOxEdhIbBQ2GhuDjcXGYeOxCdhEbBI2GZuCTcWmYdOxGdhMbBY2G5uDzcXmYfOxBdhCbBG2GFuCLcWWYcuxFdhKbBW2GluDrcXWYeuxDdhGbBO2GduCbcW2YQnYdmwHthPbhe3G9mB7sX3YfuwAdhA7hB3GjmBHsWPYcewEdhI7hZ3GzmBnsXPYeewCdhG7hF3GrmBXsWvYdewGdhO7hd3G7mB3sXvYfewB9hB7hD3GnmBPsWfYc+wF9hJ7hb3G3mBvsXfYe+wD9hH7hH3GvmBfsW/YdywR+4H9xH5hv7E/2F/sH5aExeHJ8OR4CjwlngpPjcfjafC0eDo8PZ4Bz4hnwjPjWfCsieni/g/PiefCc+N58Lx4Pjw/XgAviBfCC+NF8KJ4Mbw4XgIviZfCS+Nl8LJ4Obw8XgGviFfCK+NV8Kp4Nbw6XgOvidfCa+N18Lp4Pbw+3gBviDfCG+NN8KZ4M7w53gJvibfCW+Nt8LZ4O7w93gHviHfCO+Nd8K54N7w73gPvicdwDMdxAidxCqdxBmdxDudxARdxCZdxBVdxDddxAzdxC7dxB3dxD/fxAAc4xBEe4hHeC++N98H74v3w/vgAfCA+CB+MD8GH4sPw4fgIfCQ+Ch+Nj8HH4uPw8fgEfCI+CZ+MT8Gn4tPw6fgMfCY+C5+Nz8Hn4vPw+fgCfCG+CF+ML8GX4svw5fgKfCW+Cl+Nr8HX4uvw9fgGfCO+Cd+Mb8G34tvwBHw7vgPfie/Cd+N78L34Pnw/fgA/iB/CD+NH8KP4Mfw4fgI/iZ/CT+Nn8LP4Ofw8fgG/iF/CL+NX8Kv4Nfw6fgO/id/Cb+N38Lv4Pfw+/gB/iD/CH+NP8Kf4M/w5/gJ/ib/CX+Nv8Lf4O/w9/gH/iH/CP+Nf8K/4N/w7noj/wH/iv/Df+B/8L/4PT8LjiGREciIFkZJIRaQm4ok0RFoiHZGeyEBkJDIRmYksRFbiPyIbkZ3IQeQkchG5iTxEXiIfkZ8oQBQkChGFiSJEUaIYUZwoQZQkShGliTJEWaIcUZ6oQFQkKhGViSpEVaIaUZ2oQdQkahG1iTpEXaIeUZ9oQDQkGhGNiSZEU6IZ0ZxoQbQkWhGtiTZEW6Id0Z7oQHQkOhGdiS5EV6Ib0Z3oQfQkYgRG4ARBkARF0ARDsARH8IRAiIREyIRCqIRG6IRBmIRF2IRDuIRH+ERAAAISiAiJiOhF9Cb6EH2JfkR/YgAxkBhEDCaGEEOJYcRwYgQxkhhFjCbGEGOJccR4YgIxkZhETCamEFOJacR0YgYxk5hFzCbmEHOJecR8YgGxkFhELCaWEEuJZcRyYgWxklhFrCbWEGuJdcR6YgOxkdhEbCa2EFuJbUQCsZ3YQewkdhG7iT3EXmIfsZ84QBwkDhGHiSPEUeIYcZw4QZwkThGniTPEWeIccZ64QFwkLhGXiSvEVeIacZ24QdwkbhG3iTvEXeIecZ94QDwkHhGPiSfEU+IZ8Zx4QbwkXhGviTfEW+Id8Z74QHwkPhGfiS/EV+Ib8Z1IJH4QP4lfxG/iD/GX+EckEXFkMjI5mYJMSaYiU5PxZBoyLZmOTE9mIDOSmcjMZBYyK/kfmY3MTuYgc5K5yNxkHjIvmY/MTxYgC5KFyMJkEbIoWYwsTpYgS5KlyNJkGbIsWY4sT1YgK5KVyMpkFbIqWY2sTtYga5K1yNpkHbIuWY+sTzYgG5KNyMZkE7Ip2YxsTrYgW5KtyNZkG7It2Y5sT3YgO5KdyM5kF7Ir2Y3sTvYge5IxEiNxkiBJkiJpkiFZkiN5UiBFUiJlUiFVUiN10iBN0iJt0iFd0iN9MiABCUlEhmRE9iJ7k33IvmQ/sj85gBxIDiIHk0PIoeQwcjg5ghxJjiJHk2PIseQ4cjw5gZxITiInk1PIqeQ0cjo5g5xJziJnk3PIueQ8cj65gFxILiIXk0vIpeQycjm5glxJriJXk2vIteQ6cj25gdxIbiI3k1vIreQ2MoHcTu4gd5K7yN3kHnIvuY/cTx4gD5KHyMPkEfIoeYw8Tp4gT5KnyNPkGfIseY48T14gL5KXyMvkFfIqeY28Tt4gb5K3yNvkHfIueY+8Tz4gH5KPyMfkE/Ip+Yx8Tr4gX5KvyNfkG/It+Y58T34gP5KfyM/kF/Ir+Y38TiaSP8if5C/yN/mH/Ev+I5PIOCoZlZxKQaWkUlGpqXgqDZWWSkelpzJQGalMVGYqC5WV+o/KRmWnclA5qVxUbioPlZfKR+WnClAFqUJUYaoIVZQqRhWnSlAlqVJUaaoMVZYqR5WnKlAVqUpUZaoKVZWqRlWnalA1qVpUbaoOVZeqR9WnGlANqUZUY6oJ1ZRqRjWnWlAtqVZUa6oN1ZZqR7WnOlAdqU5UZ6oL1ZXqRnWnelA9qRiFUThFUCRFUTTFUCzFUTwlUCIlUTKlUCqlUTplUCZlUTblUC7lUT4VUICCFKJCKqJ6Ub2pPlRfqh/VnxpADaQGUYOpIdRQahg1nBpBjaRGUaOpMdRYahw1nppATaQmUZOpKdRUaho1nZpBzaRmUbOpOdRcah41n1pALaQWUYupJdRSahm1nFpBraRWUaupNdRaah21ntpAbaQ2UZupLdRWahuVQG2ndlA7qV3UbmoPtZfaR+2nDlAHqUPUYeoIdZQ6Rh2nTlAnqVPUaeoMdZY6R52nLlAXqUvUZeoKdZW6Rl2nblA3qVvUbeoOdZe6R92nHlAPqUfUY+oJ9ZR6Rj2nXlAvqVfUa+oN9ZZ6R72nPlAfqU/UZ+oL9ZX6Rn2nEqkf1E/qF/Wb+kP9pf5RSVQcnYxOTqegU9Kp6NR0PJ2GTkuno9PTGeiMdCY6M52Fzkr/R2ejs9M56Jx0Ljo3nYfOS+ej89MF6IJ0IbowXYQuSheji9Ml6JJ0Kbo0XYYuS5ejy9MV6Ip0JboyXYWuSlejq9M16Jp0Lbo2XYeuS9ej69MN6IZ0I7ox3YRuSjejm9Mt6JZ0K7o13YZuS7ej29Md6I50J7oz3YXuSneju9M96J50jMZonCZokqZommZoluZonhZokZZomVZoldZonTZok7Zom3Zol/Zonw5oQEMa0SEd0b3o3nQfui/dj+5PD6AH0oPowfQQeig9jB5Oj6BH0qPo0fQYeiw9jh5PT6An0pPoyfQUeio9jZ5Oz6Bn0rPo2fQcei49j55PL6AX0ovoxfQSeim9jF5Or6BX0qvo1fQaei29jl5Pb6A30pvozfQWeiu9jU6gt9M76J30Lno3vYfeS++j99MH6IP0IfowfYQ+Sh+jj9Mn6JP0Kfo0fYY+S5+jz9MX6Iv0JfoyfYW+Sl+jr9M36Jv0Lfo2fYe+S9+j79MP6If0I/ox/YR+Sj+jn9Mv6Jf0K/o1/YZ+S7+j39Mf6I/0J/oz/YX+Sn+jv9OJ9A/6J/2L/k3/of/S/+gkOo5JxiRnUjApmVRMaiaeScOkZdIx6ZkMTEYmE5OZycJkZf5jsjHZmRxMTiYXk5vJw+Rl8jH5mQJMQaYQU5gpwhRlijHFmRJMSaYUU5opw5RlyjHlmQpMRaYSU5mpwlRlqjHVmRpMTaYWU5upw9Rl6jH1mQZMQ6YR05hpwjRlmjHNmRZMS6YV05ppw7Rl2jHtmQ5MR6YT05npwnRlujHdmR5MTybGYAzOEAzJUAzNMAzLcAzPCIzISIzMKIzKaIzOGIzJWIzNOIzLeIzPBAxgIIOYkImYXkxvpg/Tl+nH9GcGMAOZQcxgZggzlBnGDGdGMCOZUcxoZgwzlhnHjGcmMBOZScxkZgozlZnGTGdmMDOZWcxsZg4zl5nHzGcWMAuZRcxiZgmzlFnGLGdWMCuZVcxqZg2zllnHrGc2MBuZTcxmZguzldnGJDDbmR3MTmYXs5vZw+xl9jH7mQPMQeYQc5g5whxljjHHmRPMSeYUc5o5w5xlzjHnmQvMReYSc5m5wlxlrjHXmRvMTeYWc5u5w9xl7jH3mQfMQ+YR85h5wjxlnjHPmRfMS+YV85p5w7xl3jHvmQ/MR+YT85n5wnxlvjHfmUTmB/OT+cX8Zv4wf5l/TBITxyZjk7Mp2JRsKjY1G8+mYdOy6dj0bAY2I5uJzcxmYbOy/7HZ2OxsDjYnm4vNzeZh87L52PxsAbYgW4gtzBZhi7LF2OJsCbYkW4otzZZhy7Ll2PJsBbYiW4mtzFZhq7LV2OpsDbYmW4utzdZh67L12PpsA7Yh24htzDZhm7LN2OZsC7Yl24ptzbZh27Lt2PZsB7Yj24ntzHZhu7Ld2O5sD7YnG2MxFmcJlmQplmYZlmU5lmcFVmQlVmYVVmU1VmcN1mQt1mYd1mU91mcDFrCQRWzIRmwvtjfbh+3L9mP7swPYgewgdjA7hB3KDmOHsyPYkewodjQ7hh3LjmPHsxPYiewkdjI7hZ3KTmOnszPYmewsdjY7h53LzmPnswvYhewidjG7hF3KLmOXsyvYlewqdjW7hl3LrmPXsxvYjewmdjO7hd3KbmMT2O3sDnYnu4vdze5h97L72P3sAfYge4g9zB5hj7LH2OPsCfYke4o9zZ5hz7Ln2PPsBfYie4m9zF5hr7LX2OvsDfYme4u9zd5h77L32PvsA/Yh+4h9zD5hn7LP2OfsC/Yl+4p9zb5h37Lv2PfsB/Yj+4n9zH5hv7Lf2O9sIvuD/cn+Yn+zf9i/7D82iY3jknHJuRRcSi4Vl5qL59Jwabl0XHouA5eRy8Rl5rJwWbn/uGxcdi4Hl5PLxeXm8nB5uXxcfq4AV5ArxBXminBFuWJcca4EV5IrxZXmynBluXJcea4CV5GrxFXmqnBVuWpcda4GV5OrxdXm6nB1uXpcfa4B15BrxDXmmnBNuWZcc64F15JrxbXm2nBtuXZce64D15HrxHXmunBduW5cd64H15OLcRiHcwRHchRHcwzHchzHcwInchIncwqnchqncwZnchZncw7nch7ncwEHOMghLuQirhfXm+vD9eX6cf25AdxAbhA3mBvCDeWGccO5EdxIbhQ3mhvDjeXGceO5CdxEbhI3mZvCTeWmcdO5GdxMbhY3m5vDzeXmcfO5BdxCbhG3mFvCLeWWccu5FdxKbhW3mlvDreXWceu5DdxGbhO3mdvCbeW2cQncdm4Ht5Pbxe3m9nB7uX3cfu4Ad5A7xB3mjnBHuWPcce4Ed5I7xZ3mznBnuXPcee4Cd5G7xF3mrnBXuWvcde4Gd5O7xd3m7nB3uXvcfe4B95B7xD3mnnBPuWfcc+4F95J7xb3m3nBvuXfce+4D95H7xH3mvnBfuW/cdy6R+8H95H5xv7k/3F/uH5fExfHJ+OR8Cj4ln4pPzcfzafi0fDo+PZ+Bz8hn4jPzWfis/H98Nj47n4PPyefic/N5+Lx8Pj4/X4AvyBfiC/NF+KJ8Mb44X4IvyZfiS/Nl+LJ8Ob48X4GvyFfiK/NV+Kp8Nb46X4Ovydfia/N1+Lp8Pb4+34BvyDfiG/NN+KZ8M74534JvybfiW/Nt+LZ8O74934HvyHfiO/Nd+K58N74734Pvycd4jMd5gid5iqd5hmd5jud5gRd5iZd5hVd5jdd5gzd5i7d5h3d5j/f5gAc85BEf8hHfi+/N9+H78v34/vwAfiA/iB/MD+GH8sP44fwIfiQ/ih/Nj+HH8uP48fwEfiI/iZ/MT+Gn8tP46fwMfiY/i5/Nz+Hn8vP4+fwCfiG/iF/ML+GX8sv45fwKfiW/il/Nr+HX8uv49fwGfiO/id/Mb+G38tv4BH47v4Pfye/id/N7+L38Pn4/f4A/yB/iD/NH+KP8Mf44f4I/yZ/iT/Nn+LP8Of48f4G/yF/iL/NX+Kv8Nf46f4O/yd/ib/N3+Lv8Pf4+/4B/yD/iH/NP+Kf8M/45/4J/yb/iX/Nv+Lf8O/49/4H/yH/iP/Nf+K/8N/47n8j/4H/yv/jf/B/+L/+PT+LjhGRCciGFkFJIJaQW4oU0QlohnZBeyCBkFDIJmYUsQlbhPyGbkF3IIeQUcgm5hTxCXiGfkF8oIBQUCgmFhSJCUaGYUFwoIZQUSgmlhTJCWaGcUF6oIFQUKgmVhSpCVaGaUF2oIdQUagm1hTpCXaGeUF9oIDQUGgmNhSZCU6GZ0FxoIbQUWgmthTZCW6Gd0F7oIHQUOgmdhS5CV6Gb0F3oIfQUYgIm4AIhkAIl0AIjsAIn8IIgiIIkyIIiqIIm6IIhmIIl2IIjuIIn+EIgAAEKSAiFSOgl9Bb6CH2FfkJ/YYAwUBgkDBaGCEOFYcJwYYQwUhgljBbGCGOFccJ4YYIwUZgkTBamCFOFacJ0YYYwU5glzBbmCHOFecJ8YYGwUFgkLBaWCEuFZcJyYYWwUlglrBbWCGuFdcJ6YYOwUdgkbBa2CFuFbUKCsF3YIewUdgm7hT3CXmGfsF84IBwUDgmHhSPCUeGYcFw4IZwUTgmnhTPCWeGccF64IFwULgmXhSvCVeGacF24IdwUbgm3hTvCXeGecF94IDwUHgmPhSfCU+GZ8Fx4IbwUXgmvhTfCW+Gd8F74IHwUPgmfhS/CV+Gb8F1IFH4IP4Vfwm/hj/BX+CckCXFiMjG5mEJMKaYSU4vxYhoxrZhOTC9mEDOKmcTMYhYxq/ifmE3MLuYQc4q5xNxiHjGvmE/MLxYQC4qFxMJiEbGoWEwsLpYQS4qlxNJiGbGsWE4sL1YQK4qVxMpiFbGqWE2sLtYQa4q1xNpiHbGuWE+sLzYQG4qNxMZiE7Gp2ExsLrYQW4qtxNZiG7Gt2E5sL3YQO4qdxM5iF7Gr2E3sLvYQe4oxERNxkRBJkRJpkRFZkRN5URBFURJlURFVURN10RBN0RJt0RFd0RN9MRCBCEUkhmIk9hJ7i33EvmI/sb84QBwoDhIHi0PEoeIwcbg4QhwpjhJHi2PEseI4cbw4QZwoThIni1PEqeI0cbo4Q5wpzhJni3PEueI8cb64QFwoLhIXi0vEpeIycbm4QlwprhJXi2vEteI6cb24QdwobhI3i1vEreI2MUHcLu4Qd4q7xN3iHnGvuE/cLx4QD4qHxMPiEfGoeEw8Lp4QT4qnxNPiGfGseE48L14QL4qXxMviFfGqeE28Lt4Qb4q3xNviHfGueE+8Lz4QH4qPxMfiE/Gp+Ex8Lr4QX4qvxNfiG/Gt+E58L34QP4qfxM/iF/Gr+E38LiaKP8Sf4i/xt/hH/Cv+E5PEOCmZlFxKIaWUUkmppXgpjZRWSiellzJIGaVMUmYpi5RV+k/KJmWXckg5pVxSbimPlFfKJ+WXCkgFpUJSYamIVFQqJhWXSkglpVJSaamMVFYqJ5WXKkgVpUpSZamKVFWqJlWXakg1pVpSbamOVFeqJ9WXGkgNpUZSY6mJ1FRqJjWXWkgtpVZSa6mN1FZqJ7WXOkgdpU5SZ6mL1FXqJnWXekg9pZiESbhESKRESbTESKzESbwkSKIkSbKkSKqkSbpkSKZkSbbkSK7kSb4USECCEpJCKZJ6Sb2lPlJfqZ/UXxogDZQGSYOlIdJQaZg0XBohjZRGSaOlMdJYaZw0XpogTZQmSZOlKdJUaZo0XZohzZRmSbOlOdJcaZ40X1ogLZQWSYulJdJSaZm0XFohrZRWSaulNdJaaZ20XtogbZQ2SZulLdJWaZuUIG2Xdkg7pV3SbmmPtFfaJ+2XDkgHpUPSYemIdFQ6Jh2XTkgnpVPSaemMdFY6J52XLkgXpUvSZemKdFW6Jl2Xbkg3pVvSbemOdFe6J92XHkgPpUfSY+mJ9FR6Jj2XXkgvpVfSa+mN9FZ6J72XPkgfpU/SZ+mL9FX6Jn2XEqUf0k/pl/Rb+iP9lf5JSVKcnExOLqeQU8qp5NRyvJxGTiunk9PLGeSMciY5s5xFzir/J2eTs8s55JxyLjm3nEfOK+eT88sF5IJyIbmwXEQuKheTi8sl5JJyKbm0XEYuK5eTy8sV5IpyJbmyXEWuKleTq8s15JpyLbm2XEeuK9eT68sN5IZyI7mx3ERuKjeTm8st5JZyK7m13EZuK7eT28sd5I5yJ7mz3EXuKneTu8s95J5yTMZkXCZkUqZkWmZkVuZkXhZkUZZkWVZkVdZkXTZkU7ZkW3ZkV/ZkXw5kIEMZyaEcyb3k3nIfua/cT+4vD5AHyoPkwfIQeag8TB4uj5BHyqPk0fIYeaw8Th4vT5AnypPkyfIUeao8TZ4uz5BnyrPk2fIcea48T54vL5AXyovkxfISeam8TF4ur5BXyqvk1fIaea28Tl4vb5A3ypvkzfIWeau8TU6Qt8s75J3yLnm3vEfeK++T98sH5IPyIfmwfEQ+Kh+Tj8sn5JPyKfm0fEY+K5+Tz8sX5IvyJfmyfEW+Kl+Tr8s35JvyLfm2fEe+K9+T78sP5IfyI/mx/ER+Kj+Tn8sv5JfyK/m1/EZ+K7+T38sf5I/yJ/mz/EX+Kn+Tv8uJ8g/5p/xL/i3/kf/K/+QkOU5JpiRXUigplVRKaiVeSaOkVdIp6ZUMSkYlk5JZyaJkVf5TsinZlRxKTiWXklvJo+RV8in5lQJKQaWQUlgpohRViinFlRJKSaWUUlopo5RVyinllQpKRaWSUlmpolRVqinVlRpKTaWWUlupo9RV6in1lQZKQ6WR0lhpojRVminNlRZKS6WV0lppo7RV2intlQ5KR6WT0lnponRVuindlR5KTyWmYAquEAqpUAqtMAqrcAqvCIqoSIqsKIqqaIquGIqpWIqtOIqreIqvBApQoIKUUImUXkpvpY/SV+mn9FcGKAOVQcpgZYgyVBmmDFdGKCOVUcpoZYwyVhmnjFcmKBOVScpkZYoyVZmmTFdmKDOVWcpsZY4yV5mnzFcWKAuVRcpiZYmyVFmmLFdWKCuVVcpqZY2yVlmnrFc2KBuVTcpmZYuyVdmmJCjblR3KTmWXslvZo+xV9in7lQPKQeWQclg5ohxVjinHlRPKSeWUclo5o5xVzinnlQvKReWSclm5olxVrinXlRvKTeWWclu5o9xV7in3lQfKQ+WR8lh5ojxVninPlRfKS+WV8lp5o7xV3invlQ/KR+WT8ln5onxVvinflUTlh/JT+aX8Vv4of5V/SpISpyZTk6sp1JRqKjW1Gq+mUdOq6dT0agY1o5pJzaxmUbOq/6nZ1OxqDjWnmkvNreZR86r51PxqAbWgWkgtrBZRi6rF1OJqCbWkWkotrZZRy6rl1PJqBbWiWkmtrFZRq6rV1OpqDbWmWkutrdZR66r11PpqA7Wh2khtrDZRm6rN1OZqC7Wl2kptrbZR26rt1PZqB7Wj2kntrHZRu6rd1O5qD7WnGlMxFVcJlVQplVYZlVU5lVcFVVQlVVYVVVU1VVcN1VQt1VYd1VU91VcDFahQRWqoRmovtbfaR+2r9lP7qwPUgeogdbA6RB2qDlOHqyPUkeoodbQ6Rh2rjlPHqxPUieokdbI6RZ2qTlOnqzPUmeosdbY6R52rzlPnqwvUheoidbG6RF2qLlOXqyvUleoqdbW6Rl2rrlPXqxvUjeomdbO6Rd2qblMT1O3qDnWnukvdre5R96r71P3qAfWgekg9rB5Rj6rH1OPqCfWkeko9rZ5Rz6rn1PPqBfWiekm9rF5Rr6rX1OvqDfVmylvqbfWOele9p95XH6gP1UfqY/WJ+lR9pj5XX6gv1Vfqa/WN+lZ9p75XP6gf1U/qZ/WL+lX9pn5XE9Uf6k/1l/pb/aP+Vf+pSWqclkxLrqXQUmqptNRavJZGS6ul09JrGbSMWiYts5ZFy6r9p2XTsms5tJxaLi23lkfLq+XT8msFtIJaIa2wVkQrqhXTimsltJJaKa20VkYrq5XTymsVtIpaJa2yVkWrqlXTqms1tJpaLa22Vkerq9XT6msNtIZaI62x1kRrqjXTmmsttJZaK6211kZrq7XT2msdtI5aJ62z1kXrqnXTums9tJ5aTMM0XCM0UqM0WmM0VuM0XhM0UZM0WVM0VdM0XTM0U7M0W3M0V/M0Xws0oEENaaEWab203lofra/WT+uvDdAGaoO0wdoQbag2TBuujdBGaqO00doYbaw2ThuvTdAmapO0ydoUbao2TZuuzdBmarO02docba42T5uvLdAWaou0xdoSbam2TFuurdBWaqu01doaba22TluvbdA2apu0zdoWbau2TUvQtms7tJ3aLm23tkfbq+3T9msHtIPaIe2wdkQ7qh3TjmsntJPaKe20dkY7q53TzmsXtIvaJe2ydkW7ql3Trms3tJvaLe22dke7q93T7msPtIfaI+2x9kR7qj3TnmsvtJfaK+219kZ7q73T3msftI/aJ+2z9kX7qn3TvmuJ2g/tp/ZL+6390f5q/7QkLU5PpifXU+gp9VR6aj1eT6On1dPp6fUMekY9k55Zz6Jn1f/Ts+nZ9Rx6Tj2XnlvPo+fV8+n59QJ6Qb2QXlgvohfVi+nF9RJ6Sb2UXlovo5fVy+nl9Qp6Rb2SXlmvolfVq+nV9Rp6Tb2WXluvo9fV6+n19QZ6Q72R3lhvojfVm+nN9RZ6S72V3lpvo7fV2+nt9Q56R72T3lnvonfVu+nd9R56Tz2mYzquEzqpUzqtMzqrczqvC7qoS7qsK7qqa7quG7qpW7qtO7qre7qvBzrQoY70UI/0XnpvvY/eV++n99cH6AP1QfpgfYg+VB+mD9dH6CP1UfpofYw+Vh+nj9cn6BP1SfpkfYo+VZ+mT9dn6DP1WfpsfY4+V5+nz9cX6Av1RfpifYm+VF+mL9dX6Cv1VfpqfY2+Vl+nr9c36Bv1TfpmfYu+Vd+mJ+jb9R36Tn2Xvlvfo+/V9+n79QP6Qf2Qflg/oh/Vj+nH9RP6Sf2Uflo/o5/Vz+nn9Qv6Rf2Sflm/ol/Vr+nX9Rv6Tf2Wflu/o9/V7+n39Qf6Q/2R/lh/oj/Vn+nP9Rf6S/2V/lp/o7/V3+nv9Q/6R/2T/ln/on/Vv+nf9UT9h/5T/6X/1v/of/V/epIeZyQzkhspjJRGKiO1EW+kMdIa6Yz0RgYjo5HJyGxkMbIa/xnZjOxGDiOnkcvIbeQx8hr5jPxGAaOgUcgobBQxihrFjOJGCaOkUcoobZQxyhrljPJGBaOiUcmobFQxqhrVjOpGDaOmUcuobdQx6hr1jPpGA6Oh0chobDQxmhrNjOZGC6Ol0cpobbQx2hrtjPZGB6Oj0cnobHQxuhrdjO5GD6OnETMwAzcIgzQogzYYgzU4gzcEQzQkQzYUQzU0QzcMwzQswzYcwzU8wzcCAxjQQEZoREYvo7fRx+hr9DP6GwOMgcYgY7AxxBhqDDOGGyOMkcYoY7QxxhhrjDPGGxOMicYkY7IxxZhqTDOmGzOMmcYsY7Yxx5hrzDPmGwuMhcYiY7GxxFhqLDOWGyuMlcYqY7WxxlhrrDPWGxuMjcYmY7OxxdhqbDMSjO3GDmOnscvYbewx9hr7jP3GAeOgccg4bBwxjhrHjOPGCeOkcco4bZwxzhrnjPPGBeOiccm4bFwxrhrXjOvGDeOmccu4bdwx7hr3jPvGA+Oh8ch4bDwxnhrPjOfGC+Ol8cp4bbwx3hrvjPfGB+Oj8cn4bHwxvhrfjO9GovHD+Gn8Mn4bf4y/xj8jyYgzk5nJzRRmSjOVmdqMN9OYac10Znozg5nRzGRmNrOYWc3/zGxmdjOHmdPMZeY285h5zXxmfrOAWdAsZBY2i5hFzWJmcbOEWdIsZZY2y5hlzXJmebOCWdGsZFY2q5hVzWpmdbOGWdOsZdY265h1zXpmfbOB2dBsZDY2m5hNzWZmc7OF2dJsZbY225htzXZme7OD2dHsZHY2u5hdzW5md7OH2dOMmZiJm4RJmpRJm4zJmpzJm4IpmpIpm4qpmpqpm4ZpmpZpm47pmp7pm4EJTGgiMzQjs5fZ2+xj9jX7mf3NAeZAc5A52BxiDjWHmcPNEeZIc5Q52hxjjjXHmePNCeZEc5I52ZxiTjWnmdPNGeZMc5Y525xjzjXnmfPNBeZCc5G52FxiLjWXmcvNFeZKc5W52lxjrjXXmevNDeZGc5O52dxibjW3mQnmdnOHudPcZe4295h7zX3mfvOAedA8ZB42j5hHzWPmcfOEedI8ZZ42z5hnzXPmefOCedG8ZF42r5hXzWvmdfOGedO8Zd4275h3zXvmffOB+dB8ZD42n5hPzWfmc/OF+dJ8Zb4235hvzXfme/OD+dH8ZH42v5hfzW/mdzPR/GH+NH+Zv80/5l/zn5lkxlnJrORWCiullcpKbcVbaay0VjorvZXBymhlsjJbWays1n9WNiu7lcPKaeWyclt5rLxWPiu/VcAqaBWyCltFrKJWMau4VcIqaZWySltlrLJWOau8VcGqaFWyKltVrKpWNau6VcOqadWyalt1rLpWPau+1cBqaDWyGltNrKZWM6u51cJqabWyWlttrLZWO6u91cHqaHWyOltdrK5WN6u71cPqacUszMItwiItyqItxmItzuItwRItyZItxVItzdItwzIty7Itx3Itz/KtwAIWtJAVWpHVy+pt9bH6Wv2s/tYAa6A1yBpsDbGGWsOs4dYIa6Q1yhptjbHGWuOs8dYEa6I1yZpsTbGmWtOs6dYMa6Y1y5ptzbHmWvOs+dYCa6G1yFpsLbGWWsus5dYKa6W1ylptrbHWWuus9dYGa6O1ydpsbbG2WtusBGu7tcPaae2ydlt7rL3WPmu/dcA6aB2yDltHrKPWMeu4dcI6aZ2yTltnrLPWOeu8dcG6aF2yLltXrKvWNeu6dcO6ad2yblt3rLvWPeu+9cB6aD2yHltPrKfWM+u59cJ6ab2yXltvrLfWO+u99cH6aH2yPltfrK/WN+u7lWj9sH5av6zf1h/rr/XPSrLi7GR2cjuFndJOZae24+00dlo7nZ3ezmBntDPZme0sdlb7Pzubnd3OYee0c9m57Tx2Xjufnd8uYBe0C9mF7SJ2UbuYXdwuYZe0S9ml7TJ2WbucXd6uYFe0K9mV7Sp2VbuaXd2uYde0a9m17Tp2XbueXd9uYDe0G9mN7SZ2U7uZ3dxuYbe0W9mt7TZ2W7ud3d7uYHe0O9md7S52V7ub3d3uYfe0YzZm4zZhkzZl0zZjszZn87Zgi7Zky7Ziq7Zm67Zhm7Zl27Zju7Zn+3ZgAxvayA7tyO5l97b72H3tfnZ/e4A90B5kD7aH2EPtYfZwe4Q90h5lj7bH2GPtcfZ4e4I90Z5kT7an2FPtafZ0e4Y9055lz7bn2HPtefZ8e4G90F5kL7aX2EvtZfZye4W90l5lr7bX2GvtdfZ6e4O90d5kb7a32FvtbXaCvd3eYe+0d9m77T32Xnufvd8+YB+0D9mH7SP2UfuYfdw+YZ+0T9mn7TP2Wfucfd6+YF+0L9mX7Sv2Vfuafd2+Yd+0b9m37Tv2Xfuefd9+YD+0H9mP7Sf2U/uZ/dx+Yb+0X9mv7Tf2W/ud/d7+YH+0P9mf7S/2V/ub/d1OtH/YP+1f9m/7j/3X/mcn2XFOMie5k8JJ6aRyUjvxThonrZPOSe9kcDI6mZzMThYnq/Ofk83J7uRwcjq5nNxOHievk8/J7xRwCjqFnMJOEaeoU8wp7pRwSjqlnNJOGaesU84p71RwKjqVnMpOFaeqU82p7tRwajq1nNpOHaeuU8+p7zRwGjqNnMZOE6ep08xp7rRwWjqtnNZOG6et085p73RwOjqdnM5OF6er083p7vRwejoxB3Nwh3BIh3Joh3FYh3N4R3BER3JkR3FUR3N0x3BMx3Jsx3Fcx3N8J3CAAx3khE7k9HJ6O32cvk4/p78zwBnoDHIGO0Ococ4wZ7gzwhnpjHJGO2Ocsc44Z7wzwZnoTHImO1Ocqc40Z7ozw5npzHJmO3Ocuc48Z76zwFnoLHIWO0ucpc4yZ7mzwlnprHJWO2uctc46Z72zwdnobHI2O1ucrc42J8HZ7uxwdjq7nN3OHmevs8/Z7xxwDjqHnMPOEeeoc8w57pxwTjqnnNPOGeesc84571xwLjqXnMvOFeeqc8257txwbjq3nNvOHeeuc8+57zxwHjqPnMfOE+ep88x57rxwXjqvnNfOG+et885573xwPjqfnM/OF+er88357iQ6P5yfzi/nt/PH+ev8c5KcODeZm9xN4aZ0U7mp3Xg3jZvWTeemdzO4Gd1MbmY3i5vV/c/N5mZ3c7g53VxubjePm9fN5+Z3C7gF3UJuYbeIW9Qt5hZ3S7gl3VJuabeMW9Yt55Z3K7gV3UpuZbeKW9Wt5lZ3a7g13VpubbeOW9et59Z3G7gN3UZuY7eJ29Rt5jZ3W7gt3VZua7eN29Zt57Z3O7gd3U5uZ7eL29Xt5nZ3e7g93ZiLubhLuKRLubTLuKzLubwruKIrubKruKqrubpruKZrubbruK7rub4buMCFLnJDN3J7ub3dPm5ft5/b3x3gDnQHuYPdIe5Qd5g73B3hjnRHuaPdMe5Yd5w73p3gTnQnuZPdKe5Ud5o73Z3hznRnubPdOe5cd547313gLnQXuYvdJe5Sd5m73F3hrnRXuavdNe5ad5273t3gbnQ3uZvdLe5Wd5ub4G53d7g73V3ubnePu9fd5+53D7gH3UPuYfeIe9Q95h53T7gn3VPuafeMe9Y95553L7gX3UvuZfeKe9W95l53b7g33VvubfeOe9e95953H7gP3UfuY/eJ+9R95j53X7gv3Vfua/eN+9Z95753P7gf3U/uZ/eL+9X95n53E90f7k/3l/vb/eP+df+5SW6cl8xL7qXwUnqpvNRevJfGS+ul89J7GbyMXiYvs5fFy+r952Xzsns5vJxeLi+3l8fL6+Xz8nsFvIJeIa+wV8Qr6hXzinslvJJeKa+0V8Yr65XzynsVvIpeJa+yV8Wr6lXzqns1vJpeLa+2V8er69Xz6nsNvIZeI6+x18Rr6jXzmnstvJZeK6+118Zr67Xz2nsdvI5eJ6+z18Xr6nXzuns9vJ5ezMM83CM80qM82mM81uM83hM80ZM82VM81dM83TM807M823M81/M83ws84EEPeaEXeb283l4fr6/Xz+vvDfAGeoO8wd4Qb6g3zBvujfBGeqO80d4Yb6w3zhvvTfAmepO8yd4Ub6o3zZvuzfBmerO82d4cb643z5vvLfAWeou8xd4Sb6m3zFvurfBWequ81d4ab623zlvvbfA2epu8zd4Wb6u3zUvwtns7vJ3eLm+3t8fb6+3z9nsHvIPeIe+wd8Q76h3zjnsnvJPeKe90/BnvrHfOO+9d8C56l7zL3hXvqnfNu+7d8G56t7zb3h3vrnfPu+898B56j7zH3hPvqffMe+698F56r7zX3hvvrffOe+998D56n7zP3hfvq/fN++4lej+8n94v77f3x/vr/fOSvDg/mZ/cT+Gn9FP5qf14P42f1k/np/cz+Bn9TH5mP4uf1f/Pz+Zn93P4Of1cfm4/j5/Xz+fn9wv4Bf1CfmG/iF/UL+YX90v4Jf1Sfmm/jF/WL+eX9yv4Ff1KfmW/il/Vr+ZX92v4Nf1afm2/jl/Xr+fX9xv4Df1GfmO/id/Ub+Y391v4Lf1Wfmu/jd/Wb+e39zv4Hf1Ofme/i9/V7+Z393v4Pf2Yj/m4T/ikT/m0z/isz/m8L/iiL/myr/iqr/m6b/imb/m27/iu7/m+H/jAhz7yQz/ye/m9/T5+X7+f398f4A/0B/mD/SH+UH+YP9wf4Y/0R/mj/TH+WH+cP96f4E/0J/mTkzL7U/1p/nR/hj/Tn+XP9uf4c/15/nx/gb/QX+Qv9pf4S/1l/nJ/hb/SX+Wv9tf4a/11/np/g7/R3+Rv9rf4W/1tfoK/3d/h7/R3+bv9Pf5ef5+/3z/gH/QP+Yf9I/5R/5h/3D/hn/RP+af9M/5Z/5x/3r/gX/Qv+Zf9K/5V/5p/3b/h3/Rv+bf9O/5d/55/33/gP/Qf+Y/9J/5T/5n/3H/hv/Rf+a/9N/5b/53/3v/gf/Q/+Z/9L/5X/5v/3U/0f/g//V/+b/+P/9f/5yf5cUGyIHmQIkgZpApSB/FBmiBtkC5IH2QIMgaZgsxBliBr8F+QLcge5AhyBrmC3EGeIG+QL8gfFAgKBoWCwkGRoGhQLCgelAhKBqWC0kGZoGxQLigfVAgqBpWCykGVoGpQLage1AhqBrWC2kGdoG5QL6gfNAgaBo2CxkGToGnQLGgetAhaBq2C1kGboG3QLmgfdAg6Bp2CzkGXoGvQLege9Ah6BrEAC/CACMiACuiACdiAC/hACMRACuRACdRAC/TACMzACuzACdzAC/wgCEAAAxSEQRT0CnoHfYK+Qb+gfzAgGBgMCgYHQ4KhwbBgeDAiGBmMCkYHY4KxwbhgfDAhmBhMCiYHU4KpwbRgejAjmBnMCmYHc4K5wbxgfrAgWBgsChYHS4KlwbJgebAiWBmsClYHa4K1wbpgfbAh2BhsCjYHW4KtwbYgIdge7Ah2BruC3cGeYG+wL9gfHAgOBoeCw8GR4GhwLDgenAhOBqeC08GZ4GxwLjgfXAguBpeCy8GV4GpwLbge3AhuBreC28Gd4G5wL7gfPAgeBo+Cx8GT4GnwLHgevAheBq+C18Gb4G3wLngffAg+Bp+Cz8GX4GvwLfgeJAY/gp/Br+B38Cf4G/wLkoI4kAwkBylASpAKpAbxIA1IC9KB9CADyAgygcwgC8gK/gPZQHaQA+QEuUBukAfkBflAflAAFASFQGFQBBQFxUBxUAKUBKVAaVAGlAXlQHlQAVQElUBlUAVUBdVAdVAD1AS1QG1QB9QF9UB90AA0BI1AY9AENAXNQHPQArQErUBr0Aa0Be1Ae9ABdASdQGfQBXQF3UB30AP0BDGAARwQgAQUoAEDWMABHghABBKQgQJUoAEdGMAEFrCBA1zgAR8EAAAIEAhBBHqB3qAP6Av6gf5gABgIBoHBYAgYCoaB4WAEGAlGgdFgDBgLxoHxYAKYCCaByWAKmAqmgelgBpgJZoHZYA6YC+aB+WABWAgWgcVgCVgKloHlYAVYCVaB1WANWAvWgfVgA9gINoHNYAvYCraBBLAd7AA7wS6wG+wBe8E+sB8cAAfBIXAYHAFHwTFwHJwAJ8EpcBqcAWfBOXAeXAAXwSVwGVwBV8E1cB3cADfBLXAb3AF3wT1wHzwAD8Ej8Bg8AU/BM/AcvAAvwSvwGrwBb8E78B58AB/BJ/AZfAFfwTfwHSSCH+An+AV+gz/gL/gHkkAcTAaTwxQwJUwFU8N4mAamhelgepgBZoSZYGaYBWaF/8FsMDvMAXPCXDA3zAPzwnwwPywAC8JCsDAsAovCYrA4LAFLwlKwNCwDy8JysDysACvCSrAyrAKrwmqwOqwBa8JasDasA+vCerA+bAAbwkawMWwCm8JmsDlsAVvCVrA1bAPbwnawPewAO8JOsDPsArvCbrA77AF7whjEIA4JSEIK0pCBLOQgDwUoQgnKUIEq1KAODWhCC9rQgS70oA8DCCCECIYwgr1gb9gH9oX9YH84AA6Eg+BgOAQOhcPgcDgCjoSj4Gg4Bo6F4+B4OAFOhJPgZDgFToXT4HQ4A86Es+BsOAfOhfPgfLgALoSL4GK4BC6Fy+ByuAKuhKvgargGroXr4Hq4AW6Em+BmuAVuhdtgAtwOd8CdcBfcDffAvXAf3A8PwIPwEDwMj8Cj8Bg8Dk/Ak/AUPA3PwLPwHDwPL8CL8BK8DK/Aq/AavA5vwJvwFrwN78C78B68Dx/Ah/ARfAyfwKfwGXwOX8CX8BV8Dd/At/AdfA8/wI/wE/wMv8Cv8Bv8DhPhD/gT/oK/4R/4F/6DSTAOJUPJUQqUEqVCqVE8SoPSonQoPcqAMqJMKDPKgrKi/1A2lB3lQDlRLpQb5UF5UT6UHxVABVEhVBgVQUVRMVQclUAlUSlUGpVBZVE5VB5VQBVRJVQZVUFVUTVUHdVANVEtVBvVQXVRPVQfNUANUSPUGDVBTVEz1By1QC1RK9QatUFtUTvUHnVAHVEn1Bl1QV1RN9Qd9UA9UQxhCEcEIhGFaMQgFnGIRwISkYRkpCAVaUhHBjKRhWzkIBd5yEcBAggihEIUoV6oN+qD+qJ+qD8agAaiQWgwGoKGomFoOBqBRqJRaDQag8aicWg8moAmokloMpqCpqJpaDqagWaiWWg2moPmonloPlqAFqJFaDFagpaiZWg5WoFWolVoNVqD1qJ1aD3agDaiTWgz2oK2om0oAW1HO9BOtAvtRnvQXrQP7UcH0EF0CB1GR9BRdAwdRyfQSXQKnUZn0Fl0Dp1HF9BFdAldRlfQVXQNXUc30E10C91Gd9BddA/dRw/QQ/QIPUZP0FP0DD1HL9BL9Aq9Rm/QW/QOvUcf0Ef0CX1GX9BX9A19R4noB/qJfqHf6A/6i/6hJBQXJguThynClGGqMHUYH6YJ04bpwvRhhjBjmCnMHGYJs4b/hdnC7GGOMGeYK8wd5gnzhvnC/GGBsGBYKCwcFgmLhsXC4mGJsGRYKiwdlgnLhuXC8mGFsGJYKawcVgmrhtXC6mGNsGZYK6wd1gnrhvFx9cMGYcOwUdg4bBI2DZuFzcMWYcuwVdg6bBO2DduF7cMOYcewU9g57BJ2DbuF3cMeYc8wFmIhHhIhGVIhHTIhG3IhHwqhGEqhHCqhGmqhHhqhGVqhHTqhG3qhHwYhCGGIwjCMwl5h77BP2DfsF/YPB4QDw0Hh4HBIODQcFg4PR4Qjw1Hh6HBMODYcF44PJ4QTw0nh5HBKODWcFk4PZ4Qzw1nh7HBOODecF84PF4QLw0Xh4nBJuDRcFi4PV4Qrw1Xh6nBNuDZcF64PN4Qbw03h5nBLuDXcFiaE28Md4c5wV7g73BPuDfeF+8MD4cHwUHg4PBIeDY+Fx8MT4cnwVHg6PBOeDc+F58ML4cXwUng5vBJeDa+F18Mb4c3wVng7vBPeDe+F98MH4cPwUfg4fBI+DZ+Fz8MX4cvwVfg6fBO+Dd+F78MP4cfwU/g5/BJ+Db+F38PE8Ef4M/wV/g7/hH/Df2FSGBcli5JHKaKUUaoodRQfpYnSRumi9FGGKGOUKcocZYmyRv9F2aLsUY4oZ5Qryh3lifJG+aL8UYGoYFQoKhwViYpGxaLiUYmoZFQqKh2VicpG5aLyUYWoYlQpqhxViapG1aLqUY2oZlQrqh3ViepG9aL6UYOoYdQoahw1iZpGzaLmUYuoZdQqah21idpG7aL2UYeoY9Qp6hx1ibpG3aLuUY+oZxSLsAiPiIiMqIiOmIiNuIiPhEiMpEiOlEiNtEiPjMiMrMiOnMiNvMiPgghEMEJRGEVRr6h31CfqG/WL+kcDooHRoGhwNCQaGg2LhkcjopHRqGh0NCYaG42LxkcToonRpGhyNCWaGk2LpkczopnRrGh2NCeaG82L5kcLooXRomhxtCRaGi2LlkcropXRqmh1tCZaG62L1kcboo3RpmhztCXaGm2LEqL/EQAPgHUDAQBA5862bdu2bdvefmw7udxltm3btm3baru3I7Yztiu2O7Yntje2L7Y/diB2MHYodjh2JHY0dix2PHYidjJ2KnY6diZ2NnYudj52IXYxdil2OXYldjV2LXY9diN2M3Yrdjt2J3Y3di92P/Yg9jD2KPY49iT2NPYs9jz2IvYy9ir2OvYm9jb2LvY+9iH2MfYp9jn2JfY19i32PfYj9jP2K/Y79if2N/YvFh9LiCXGkmBJsWRYciwFlhJLhcVhqbE0WFosHZYey4BlxDJhmbEsWFYsG5Ydy4HlxHJhubE8WF4sH5YfK4AVxAphhbEiWFGsGFYcK4GVxEphpbEyWFmsHFYeq4BVxCphlbEqWFWsGlYdq4HVxGphtbE6WF2sHlYfa4A1xBphjbEmWFOsGdYca4G1xFphrbE2WFusHdYe64B1xDphnbEuWFesG9Yd64H1xHphvbE+WF+sH9YfG4ANxAZhg7Eh2FBsGDYcG4GNxEZho7Ex2FhsHDYem4BNxCZhk7Ep2FRsGjYdm4HNxGIYhuEYgZEYhdEYg7EYh/GYgImYhMmYgqmYhumYgZmYhdmYg7mYh/lYgAEsxCCGsAibhc3G5mBzsXnYfGwBthBbhC3GlmBLsWXYcmwFthJbha3G1mBrsXXYemwDthHbhG3GtmBbsW3YdmwHthPbhe3G9mB7sX3YfuwAdhA7hB3GjmBHsWPYcewEdhI7hZ3GzmBnsXPYeewCdhG7hF3GrmBXsWvYdewGdhO7hd3G7mB3sXvYfewB9hB7hD3GnmBPsWfYc+wF9hJ7hb3G3mBvsXfYe+wD9hH7hH3GvmBfsW/Yd+wH9hP7hf3G/mB/sX9YPJaAJWJJ8KR4Mjw5ngJPiafC4/DUeBo8LZ4OT49nwDPimfDMeBY8K54Nz47nwHPiufDceB48L54Pz48XwAvihfDCeBG8KF4ML46XwEvipfDSeBm8LF4OL49XwCvilfDKeBW8Kl4Nr47XwGvitfDaeB28Ll4Pr483wBvijfDGeBO8Kd4Mb463wFvirfDWeBu8Ld4Ob493wDvinfDOeBe8K94N7473wHvivfDeeB+8L94P748PwAfig/DB+BB8KD4MH46PwEfio/DR+Bh8LD4OH49PwCfik/DJ+BR8Kj4Nn47PwGfiMRzDcZzASZzCaZzBWZzDeVzARVzCZVzBVVzDddzATdzCbdzBXdzDfTzAAR7iEEd4hM/CZ+Nz8Ln4PHw+vgBfiC/CF+NL8KX4Mnw5vgJfia/CV+Nr8LX4Onw9vgHfiG/CN+Nb8K34Nnw7vgPfie/Cd+N78L34Pnw/fgA/iB/CD+NH8KP4Mfw4fgI/iZ/CT+Nn8LP4Ofw8fgG/iF/CL+NX8Kv4Nfw6fgO/id/Cb+N38Lv4Pfw+/gB/iD/CH+NP8Kf4M/w5/gJ/ib/CX+Nv8Lf4O/w9/gH/iH/CP+Nf8K/4N/w7/gP/if/Cf+N/8L/4PzweT8AT8SREUiIZkZxIQaQkUhFxRGoiDZGWSEekJzIQGYlMRGYiC5GVyEZkJ3IQOYlcRG4iD5GXyEfkJwoQBYlCRGGiCFGUKEYUJ0oQJYlSRGmiDFGWKEeUJyoQFYlKRGWiClGVqEZUJ2oQNYlaRG2iDlGXqEfUJxoQDYlGRGOiCdGUaEY0J1oQLYlWRGuiDdGWaEe0JzoQHYlORGeiC9GV6EZ0J3oQPYleRG+iD9GX6Ef0JwYQA4lBxGBiCDGUGEYMJ0YQI4lRxGhiDDGWGEeMJyYQE4lJxGRiCjGVmEZMJ2YQM4kYgRE4QRAkQRE0wRAswRE8IRAiIREyoRAqoRE6YRAmYRE24RAu4RE+ERCACAlIICIiZhGziTnEXGIeMZ9YQCwkFhGLiSXEUmIZsZxYQawkVhGriTXEWmIdsZ7YQGwkNhGbiS3EVmIbsZ3YQewkdhG7iT3EXmIfsZ84QBwkDhGHiSPEUeIYcZw4QZwkThGniTPEWeIccZ64QFwkLhGXiSvEVeIacZ24QdwkbhG3iTvEXeIecZ94QDwkHhGPiSfEU+IZ8Zx4QbwkXhGviTfEW+Id8Z74QHwkPhGfiS/EV+Ib8Z34QfwkfhG/iT/EX+IfEU8kEIlEEjIpmYxMTqYgU5KpyDgyNZmGTEumI9OTGciMZCYyM5mFzEpmI7OTOcicZC4yN5mHzEvmI/OTBciCZCGyMFmELEoWI4uTJciSZCmyNFmGLEuWI8uTFciKZCWyMlmFrEpWI6uTNciaZC2yNlmHrEvWI+uTDciGZCOyMdmEbEo2I5uTLciWZCuyNdmGbEu2I9uTHciOZCeyM9mF7Ep2I7uTPcieZC+yN9mH7Ev2I/uTA8iB5CByMDmEHEoOI4eTI8iR5ChyNDmGHEuOI8eTE8iJ5CRyMjmFnEpOI6eTM8iZZIzESJwkSJKkSJpkSJbkSJ4USJGUSJlUSJXUSJ00SJO0SJt0SJf0SJ8MSECGJCQRGZGzyNnkHHIuOY+cTy4gF5KLyMXkEnIpuYxcTq4gV5KryNXkGnItuY5cT24gN5KbyM3kFnIruY3cTu4gd5K7yN3kHnIvuY/cTx4gD5KHyMPkEfIoeYw8Tp4gT5KnyNPkGfIseY48T14gL5KXyMvkFfIqeY28Tt4gb5K3yNvkHfIueY+8Tz4gH5KPyMfkE/Ip+Yx8Tr4gX5KvyNfkG/It+Y58T34gP5KfyM/kF/Ir+Y38Tv4gf5K/yN/kH/Iv+Y+MJxPIRDIJlZRKRiWnUlApqVRUHJWaSkOlpdJR6akMVEYqE5WZykJlpbJR2akcVE4qF5WbykPlpfJR+akCVEGqEFWYKkIVpYpRxakSVEmqFFWaKkOVpcpR5akKVEWqElWZqkJVpapR1akaVE2qFlWbqkPVpepR9akGVEOqEdWYakI1pZpRzakWVEuqFdWaakO1pdpR7akOVEeqE9WZ6kJ1pbpR3akeVE+qF9Wb6kP1pfpR/akB1EBqEDWYGkINpYZRw6kR1EhqFDWaGkONpcZR46kJ1ERqEjWZmkJNpaZR06kZ1EwqRmEUThEUSVEUTTEUS3EUTwmUSEmUTCmUSmmUThmUSVmUTTmUS3mUTwUUoEIKUoiKqFnUbGoONZeaR82nFlALqUXUYmoJtZRaRi2nVlArqVXUamoNtZZaR62nNlAbqU3UZmoLtZXaRm2ndlA7qV3UbmoPtZfaR+2nDlAHqUPUYeoIdZQ6Rh2nTlAnqVPUaeoMdZY6R52nLlAXqUvUZeoKdZW6Rl2nblA3qVvUbeoOdZe6R92nHlAPqUfUY+oJ9ZR6Rj2nXlAvqVfUa+oN9ZZ6R72nPlAfqU/UZ+oL9ZX6Rn2nflA/qV/Ub+oP9Zf6R8VTCVQilYROSiejk9Mp6JR0KjqOTk2nodPS6ej0dAY6I52JzkxnobPS2ejsdA46J52Lzk3nofPS+ej8dAG6IF2ILkwXoYvSxejidAm6JF2KLk2XocvS5ejydAW6Il2JrkxXoavS1ejqdA26Jl2Lrk3XoevS9ej6dAO6Id2Ibkw3oZvSzejmdAu6Jd2Kbk23odvS7ej2dAe6I92J7kx3obvS3ejudA+6J92L7k33ofvS/ej+9AB6ID2IHkwPoYfSw+jh9Ah6JD2KHk2PocfS4+jx9AR6Ij2JnkxPoafS0+jp9Ax6Jh2jMRqnCZqkKZqmGZqlOZqnBVqkJVqmFVqlNVqnDdqkLdqmHdqlPdqnAxrQIQ1pREf0LHo2PYeeS8+j59ML6IX0InoxvYReSi+jl9Mr6JX0Kno1vYZeS6+j19Mb6I30JnozvYXeSm+jt9M76J30Lno3vYfeS++j99MH6IP0IfowfYQ+Sh+jj9Mn6JP0Kfo0fYY+S5+jz9MX6Iv0JfoyfYW+Sl+jr9M36Jv0Lfo2fYe+S9+j79MP6If0I/ox/YR+Sj+jn9Mv6Jf0K/o1/YZ+S7+j39Mf6I/0J/oz/YX+Sn+jv9M/6J/0L/o3/Yf+S/+j4+kEOpFOwiRlkjHJmRRMSiYVE8ekZtIwaZl0THomA5ORycRkZrIwWZlsTHYmB5OTycXkZvIweZl8TH6mAFOQKcQUZoowRZliTHGmBFOSKcWUZsowZZlyTHmmAlORqcRUZqowVZlqTHWmBlOTqcXUZuowdZl6TH2mAdOQacQ0ZpowTZlmTHOmBdOSacW0ZtowbZl2THumA9OR6cR0ZrowXZluTHemB9OT6cX0ZvowfZl+TH9mADOQGcQMZoYwQ5lhzHBmBDOSGcWMZsYwY5lxzHhmAjORmcRMZqYwU5lpzHRmBjOTiTEYgzMEQzIUQzMMwzIcwzMCIzISIzMKozIaozMGYzIWYzMO4zIe4zMBA5iQgQxiImYWM5uZw8xl5jHzmQXMQmYRs5hZwixlljHLmRXMSmYVs5pZw6xl1jHrmQ3MRmYTs5nZwmxltjHbmR3MTmYXs5vZw+xl9jH7mQPMQeYQc5g5whxljjHHmRPMSeYUc5o5w5xlzjHnmQvMReYSc5m5wlxlrjHXmRvMTeYWc5u5w9xl7jH3mQfMQ+YR85h5wjxlnjHPmRfMS+YV85p5w7xl3jHvmQ/MR+YT85n5wnxlvjHfmR/MT+YX85v5w/xl/jHxTAKTyCRhk7LJ2ORsCjYlm4qNY1Ozadi0bDo2PZuBzchmYjOzWdisbDY2O5uDzcnmYnOzedi8bD42P1uALcgWYguzRdiibDG2OFuCLcmWYkuzZdiybDm2PFuBrchWYiuzVdiqbDW2OluDrcnWYmuzddi6bD22PtuAbcg2YhuzTdimbDO2OduCbcm2Yluzbdi2bDu2PduB7ch2YjuzXdiubDe2O9uD7cn2Ynuzfdi+bD+2PzuAHcgOYgezQ9ih7DB2ODuCHcmOYkezY9ix7Dh2PDuBnchOYiezU9ip7DR2OjuDncnGWIzFWYIlWYqlWYZlWY7lWYEVWYmVWYVVWY3VWYM1WYu1WYd1WY/12YAFbMhCFrERO4udzc5h57Lz2PnsAnYhu4hdzC5hl7LL2OXsCnYlu4pdza5h17Lr2PXsBnYju4ndzG5ht7Lb2O3sDnYnu4vdze5h97L72P3sAfYge4g9zB5hj7LH2OPsCfYke4o9zZ5hz7Ln2PPsBfYie4m9zF5hr7LX2OvsDfYme4u9zd5h77L32PvsA/Yh+4h9zD5hn7LP2OfsC/Yl+4p9zb5h37Lv2PfsB/Yj+4n9zH5hv7Lf2O/sD/Yn+4v9zf5h/7L/2Hg2gU1kk3BJuWRcci4Fl5JLxcVxqbk0XFouHZeey8Bl5DJxmbksXFYuG5edy8Hl5HJxubk8XF4uH5efK8AV5ApxhbkiXFGuGFecK8GV5EpxpbkyXFmuHFeeq8BV5CpxlbkqXFWuGledq8HV5Gpxtbk6XF2uHlefa8A15BpxjbkmXFOuGdeca8G15Fpxrbk2XFuuHdee68B15DpxnbkuXFeuG9ed68H15Hpxvbk+XF+uH9efG8AN5AZxg7kh3FBuGDecG8GN5EZxo7kx3FhuHDeem8BN5CZxk7kp3FRuGjedm8HN5GIcxuEcwZEcxdEcw7Ecx/GcwImcxMmcwqmcxumcwZmcxdmcw7mcx/lcwAEu5CCHuIibxc3m5nBzuXncfG4Bt5BbxC3mlnBLuWXccm4Ft5Jbxa3m1nBruXXcem4Dt5HbxG3mtnBbuW3cdm4Ht5Pbxe3m9nB7uX3cfu4Ad5A7xB3mjnBHuWPcce4Ed5I7xZ3mznBnuXPcee4Cd5G7xF3mrnBXuWvcde4Gd5O7xd3m7nB3uXvcfe4B95B7xD3mnnBPuWfcc+4F95J7xb3m3nBvuXfce+4D95H7xH3mvnBfuW/cd+4H95P7xf3m/nB/uX9cPJfAJXJJ+KR8Mj45n4JPyafi4/jUfBo+LZ+OT89n4DPymfjMfBY+K5+Nz87n4HPyufjcfB4+L5+Pz88X4AvyhfjCfBG+KF+ML86X4EvypfjSfBm+LF+OL89X4CvylfjKfBW+Kl+Nr87X4GvytfjafB2+Ll+Pr8834BvyjfjGfBO+Kd+Mb8634FvyrfjWfBu+Ld+Ob8934DvynfjOfBe+K9+N78734HvyvfjefB++L9+P788P4Afyg/jB/BB+KD+MH86P4Efyo/jR/Bh+LD+OH89P4Cfyk/jJ/BR+Kj+Nn87P4GfyMR7jcZ7gSZ7iaZ7hWZ7jeV7gRV7iZV7hVV7jdd7gTd7ibd7hXd7jfT7gAR/ykEd8xM/iZ/Nz+Ln8PH4+v4BfyC/iF/NL+KX8Mn45v4Jfya/iV/Nr+LX8On49v4HfyG/iN/Nb+K38Nn47v4Pfye/id/N7+L38Pn4/f4A/yB/iD/NH+KP8Mf44f4I/yZ/iT/Nn+LP8Of48f4G/yF/iL/NX+Kv8Nf46f4O/yd/ib/N3+Lv8Pf4+/4B/yD/iH/NP+Kf8M/45/4J/yb/iX/Nv+Lf8O/49/4H/yH/iP/Nf+K/8N/47/4P/yf/if/N/+L/8Pz6eT+AT+SRCUiGZkFxIIaQUUglxQmohjZBWSCekFzIIGYVMQmYhi5BVyCZkF3IIOYVcQm4hj5BXyCfkFwoIBYVCQmGhiFBUKCYUF0oIJYVSQmmhjFBWKCeUFyoIFYVKQmWhilBVqCZUF2oINYVaQm2hjlBXqCfUFxoIDYVGQmOhidBUaCY0F1oILYVWQmuhjdBWaCe0FzoIHYVOQmehi9BV6CZ0F3oIPYVeQm+hj9BX6Cf0FwYIA4VBwmBhiDBUGCYMF0YII4VRwmhhjDBWGCeMFyYIE4VJwmRhijBVmCZMF2YIM4WYgAm4QAikQAm0wAiswAm8IAiiIAmyoAiqoAm6YAimYAm24Aiu4Am+EAhACAUoICESZgmzhTnCXGGeMF9YICwUFgmLhSXCUmGZsFxYIawUVgmrhTXCWmGdsF7YIGwUNgmbhS3CVmGbsF3YIewUdgm7hT3CXmGfsF84IBwUDgmHhSPCUeGYcFw4IZwUTgmnhTPCWeGccF64IFwULgmXhSvCVeGacF24IdwUbgm3hTvCXeGecF94IDwUHgmPhSfCU+GZ8Fx4IbwUXgmvhTfCW+Gd8F74IHwUPgmfhS/CV+Gb8F34IfwUfgm/hT/CX+GfEC8kCIlCEjGpmExMLqYQU4qpxDgxtZhGTCumE9OLGcSMYiYxs5hFzCpmE7OLOcScYi4xt5hHzCvmE/OLBcSCYiGxsFhELCoWE4uLJcSSYimxtFhGLCuWE8uLFcSKYiWxslhFrCpWE6uLNcSaYi2xtlhHrCvWE+uLDcSGYiOxsdhEbCo2E5uLLcSWYiuxtdhGbCu2E9uLHcSOYiexs9hF7Cp2E7uLPcSeYi+xt9hH7Cv2E/uLA8SB4iBxsDhEHCoOE4eLI8SR4ihxtDhGHCuOE8eLE8SJ4iRxsjhFnCpOE6eLM8SZYkzERFwkRFKkRFpkRFbkRF4URFGURFlURFXURF00RFO0RFt0RFf0RF8MRCCGIhSRGImzxNniHHGuOE+cLy4QF4qLxMXiEnGpuExcLq4QV4qrxNXiGnGtuE5cL24QN4qbxM3iFnGruE3cLu4Qd4q7xN3iHnGvuE/cLx4QD4qHxMPiEfGoeEw8Lp4QT4qnxNPiGfGseE48L14QL4qXxMviFfGqeE28Lt4Qb4q3xNviHfGueE+8Lz4QH4qPxMfiE/Gp+Ex8Lr4QX4qvxNfiG/Gt+E58L34QP4qfxM/iF/Gr+E38Lv4Qf4q/xN/iH/Gv+E+MFxPERDGJlFRKJiWXUkgppVRSnJRaSiOlldJJ6aUMUkYpk5RZyiJllbJJ2aUcUk4pl5RbyiPllfJJ+aUCUkGpkFRYKiIVlYpJxaUSUkmplFRaKiOVlcpJ5aUKUkWpklRZqiJVlapJ1aUaUk2pllRbqiPVlepJ9aUGUkOpkdRYaiI1lZpJzaUWUkupldRaaiO1ldpJ7aUOUkepk9RZ6iJ1lbpJ3aUeUk+pl9Rb6iP1lfpJ/aUB0kBpkDRYGiINlYZJw6UR0khplDRaGiONlcZJ46UJ0kRpkjRZmiJNlaZJ06UZ0kwpJmESLhESKVESLTESK3ESLwmSKEmSLCmSKmmSLhmSKVmSLTmSK3mSLwUSkEIJSkiKpFnSbGmONFeaJ82XFkgLpUXSYmmJtFRaJi2XVkgrpVXSammNtFZaJ62XNkgbpU3SZmmLtFXaJm2Xdkg7pV3SbmmPtFfaJ+2XDkgHpUPSYemIdFQ6Jh2XTkgnpVPSaemMdFY6J52XLkgXpUvSZemKdFW6Jl2Xbkg3pVvSbemOdFe6J92XHkgPpUfSY+mJ9FR6Jj2XXkgvpVfSa+mN9FZ6J72XPkgfpU/SZ+mL9FX6Jn2Xfkg/pV/Sb+mP9Ff6J8VLCVKilEROKieTk8sp5JRyKjlOTi2nkdPK6eT0cgY5o5xJzixnkbPK2eTscg45p5xLzi3nkfPK+eT8cgG5oFxILiwXkYvKxeTicgm5pFxKLi2XkcvK5eTycgW5olxJrixXkavK1eTqcg25plxLri3XkevK9eT6cgO5odxIbiw3kZvKzeTmcgu5pdxKbi23kdvK7eT2cge5o9xJ7ix3kbvK3eTucg+5p9xL7i33kfvK/eT+8gB5oDxIHiwPkYfKw+Th8gh5pDxKHi2PkcfK4+Tx8gR5ojxJnixPkafK0+Tp8gx5phyTMRmXCZmUKZmWGZmVOZmXBVmUJVmWFVmVNVmXDdmULdmWHdmVPdmXAxnIoQxlJEfyLHm2PEeeK8+T58sL5IXyInmxvEReKi+Tl8sr5JXyKnm1vEZeK6+T18sb5I3yJnmzvEXeKm+Tt8s75J3yLnm3vEfeK++T98sH5IPyIfmwfEQ+Kh+Tj8sn5JPyKfm0fEY+K5+Tz8sX5IvyJfmyfEW+Kl+Tr8s35JvyLfm2fEe+K9+T78sP5IfyI/mx/ER+Kj+Tn8sv5JfyK/m1/EZ+K7+T38sf5I/yJ/mz/EX+Kn+Tv8s/5J/yL/m3/Ef+K/+T4+UEOVFOoiRVkinJlRRKSiWVEqekVtIoaZV0Snolg5JRyaRkVrIoWZVsSnYlh5JTyaXkVvIoeZV8Sn6lgFJQKaQUVoooRZViSnGlhFJSKaWUVsooZZVySnmlglJRqaRUVqooVZVqSnWlhlJTqaXUVuoodZV6Sn2lgdJQaaQ0VpooTZVmSnOlhdJSaaW0VtoobZV2Snulg9JR6aR0VrooXZVuSnelh9JT6aX0VvoofZV+Sn9lgDJQGaQMVoYoQ5VhynBlhDJSGaWMVsYoY5VxynhlgjJRmaRMVqYoU5VpynRlhjJTiSmYgiuEQiqUQiuMwiqcwiuCIiqSIiuKoiqaoiuGYiqWYiuO4iqe4iuBApRQgQpSImWWMluZo8xV5inzlQXKQmWRslhZoixVlinLlRXKSmWVslpZo6xV1inrlQ3KRmWTslnZomxVtinblR3KTmWXslvZo+xV9in7lQPKQeWQclg5ohxVjinHlRPKSeWUclo5o5xVzinnlQvKReWSclm5olxVrinXlRvKTeWWclu5o9xV7in3lQfKQ+WR8lh5ojxVninPlRfKS+WV8lp5o7xV3invlQ/KR+WT8ln5onxVvinflR/KT+WX8lv5o/xV/inxSoKSqCRRk6rJ1ORqCjWlmkqNU1OradS0ajo1vZpBzahmUjOrWdSsajY1u5pDzanmUnOredS8aj41v1pALagWUgurRdSiajG1uFpCLamWUkurZdSyajm1vFpBrahWUiurVdSqajW1ulpDranWUmurddS6aj21vtpAbag2UhurTdSmajO1udpCbam2UlurbdS2aju1vdpB7ah2UjurXdSuaje1u9pD7an2UnurfdS+aj+1vzpAHagOUgerQ9Sh6jB1uDpCHamOUkerY9Sx6jh1vDpBnahOUierU9Sp6jR1ujpDnanGVEzFVUIlVUqlVUZlVU7lVUEVVUmVVUVVVU3VVUM1VUu1VUd1VU/11UAFaqhCFamROkudrc5R56rz1PnqAnWhukhdrC5Rl6rL1OXqCnWlukpdra5R16rr1PXqBnWjukndrG5Rt6rb1O3qDnWnukvdre5R96r71P3qAfWgekg9rB5Rj6rH1OPqCfWkeko9rZ5Rz6rn1PPqBfWiekm9rF5Rr6rX1OvqDfWmeku9rd5R76r31PvqA/Wh+kh9rD5Rn6rP1OfqC/Wl+kp9rb5R36rv1PfqB/Wj+kn9rH5Rv6rf1O/qD/Wn+kv9rf5R/6r/1Hg1QU1Uk2hJtWRaci2FllJLpcVpqbU0WlotnZZey6Bl1DJpmbUsWlYtm5Zdy6Hl1HJpubU8Wl4tn5ZfK6AV1ApphbUiWlGtmFZcK6GV1EpppbUyWlmtnFZeq6BV1CpplbUqWlWtmlZdq6HV1GpptbU6Wl2tnlZfa6A11BppjbUmWlOtmdZca6G11FpprbU2WlutndZe66B11DppnbUuWletm9Zd66H11HppvbU+Wl+tn9ZfG6AN1AZpg7Uh2lBtmDZcG6GN1EZpo7Ux2lhtnDZem6BN1CZpk7Up2lRtmjZdm6HN1GIapuEaoZEapdEao7Eap/GaoImapMmaoqmapumaoZmapdmao7map/laoAEt1KCGtEibpc3W5mhztXnafG2BtlBbpC3WlmhLtWXacm2FtlJbpa3W1mhrtXXaem2DtlHbpG3WtmhbtW3adm2HtlPbpe3W9mh7tX3afu2AdlA7pB3WjmhHtWPace2EdlI7pZ3WzmhntXPaee2CdlG7pF3WrmhXtWvade2GdlO7pd3W7mh3tXvafe2B9lB7pD3WnmhPtWfac+2F9lJ7pb3W3mhvtXfae+2D9lH7pH3WvmhftW/ad+2H9lP7pf3W/mh/tX9avJagJWpJ9KR6Mj25nkJPqafS4/TUeho9rZ5OT69n0DPqmfTMehY9q55Nz67n0HPqufTceh49r55Pz68X0AvqhfTCehG9qF5ML66X0EvqpfTSehm9rF5OL69X0CvqlfTKehW9ql5Nr67X0GvqtfTaeh29rl5Pr6830BvqjfTGehO9qd5Mb6630FvqrfTWehu9rd5Ob6930DvqnfTOehe9q95N76730HvqvfTeeh+9r95P768P0Afqg/TB+hB9qD5MH66P0Efqo/TR+hh9rD5OH69P0Cfqk/TJ+hR9qj5Nn67P0GfqMR3TcZ3QSZ3SaZ3RWZ3TeV3QRV3SZV3RVV3Tdd3QTd3Sbd3RXd3TfT3QgR7qUEd6pM/SZ+tz9Ln6PH2+vkBfqC/SF+tL9KX6Mn25vkJfqa/SV+tr9LX6On29vkHfqG/SN+tb9K36Nn27vkPfqe/Sd+t79L36Pn2/fkA/qB/SD+tH9KP6Mf24fkI/qZ/ST+tn9LP6Of28fkG/qF/SL+tX9Kv6Nf26fkO/qd/Sb+t39Lv6Pf2+/kB/qD/SH+tP9Kf6M/25/kJ/qb/SX+tv9Lf6O/29/kH/qH/SP+tf9K/6N/27/kP/qf/Sf+t/9L/6Pz1eT9AT9SRGUiOZkdxIYaQ0UhlxRmojjZHWSGekNzIYGY1MRmYji5HVyGZkN3IYOY1cRm4jj5HXyGfkNwoYBY1CRmGjiFHUKGYUN0oYJY1SRmmjjFHWKGeUNyoYFY1KRmWjilHVqGZUN2oYNY1aRm2jjlHXqGfUNxoYDY1GRmOjidHUaGY0N1oYLY1WRmujjdHWaGe0NzoYHY1ORmeji9HV6GZ0N3oYPY1eRm+jj9HX6Gf0NwYYA41BxmBjiDHUGGYMN0YYI41RxmhjjDHWGGeMNyYYE41JxmRjijHVmGZMN2YYM42YgRm4QRikQRm0wRiswRm8IRiiIRmyoRiqoRm6YRimYRm24Riu4Rm+ERjACA1oICMyZhmzjTnGXGOeMd9YYCw0FhmLjSXGUmOZsdxYYaw0VhmrjTXGWmOdsd7YYGw0NhmbjS3GVmObsd3YYew0dhm7jT3GXmOfsd84YBw0DhmHjSPGUeOYcdw4YZw0ThmnjTPGWeOccd64YFw0LhmXjSvGVeOacd24Ydw0bhm3jTvGXeOecd94YDw0HhmPjSfGU+OZ8dx4Ybw0XhmvjTfGW+Od8d74YHw0PhmfjS/GV+Ob8d34Yfw0fhm/jT/GX+OfEW8kGIlGEjOpmcxMbqYwU5qpzDgztZnGTGumM9ObGcyMZiYzs5nFzGpmM7ObOcycZi4zt5nHzGvmM/ObBcyCZiGzsFnELGoWM4ubJcySZimztFnGLGuWM8ubFcyKZiWzslnFrGpWM6ubNcyaZi2ztlnHrGvWM+ubDcyGZiOzsdnEbGo2M5ubLcyWZiuztdnGbGu2M9ubHcyOZiezs9nF7Gp2M7ubPcyeZi+zt9nH7Gv2M/ubA8yB5iBzsDnEHGoOM4ebI8yR5ihztDnGHGuOM8ebE8yJ5iRzsjnFnGpOM6ebM8yZZszETNwkTNKkTNpkTNbkTN4UTNGUTNlUTNXUTN00TNO0TNt0TNf0TN8MTGCGJjSRGZmzzNnmHHOuOc+cby4wF5qLzMXmEnOpucxcbq4wV5qrzNXmGnOtuc5cb24wN5qbzM3mFnOruc3cbu4wd5q7zN3mHnOvuc/cbx4wD5qHzMPmEfOoecw8bp4wT5qnzNPmGfOsec48b14wL5qXzMvmFfOqec28bt4wb5q3zNvmHfOuec+8bz4wH5qPzMfmE/Op+cx8br4wX5qvzNfmG/Ot+c58b34wP5qfzM/mF/Or+c38bv4wf5q/zN/mH/Ov+c+MNxPMRDOJldRKZiW3UlgprVRWnJXaSmOltdJZ6a0MVkYrk5XZymJltbJZ2a0cVk4rl5XbymPltfJZ+a0CVkGrkFXYKmIVtYpZxa0SVkmrlFXaKmOVtcpZ5a0KVkWrklXZqmJVtapZ1a0aVk2rllXbqmPVtepZ9a0GVkOrkdXYamI1tZpZza0WVkurldXaamO1tdpZ7a0OVkerk9XZ6mJ1tbpZ3a0eVk+rl9Xb6mP1tfpZ/a0B1kBrkDXYGmINtYZZw60R1khrlDXaGmONtcZZ460J1kRrkjXZmmJNtaZZ060Z1kwrZmEWbhEWaVEWbTEWa3EWbwmWaEmWbCmWammWbhmWaVmWbTmWa3mWbwUWsEILWsiKrFnWbGuONdeaZ823FlgLrUXWYmuJtdRaZi23VlgrrVXWamuNtdZaZ623NlgbrU3WZmuLtdXaZm23dlg7rV3WbmuPtdfaZ+23DlgHrUPWYeuIddQ6Zh23TlgnrVPWaeuMddY6Z523LlgXrUvWZeuKddW6Zl23blg3rVvWbeuOdde6Z923HlgPrUfWY+uJ9dR6Zj23XlgvrVfWa+uN9dZ6Z723PlgfrU/WZ+uL9dX6Zn23flg/rV/Wb+uP9df6Z8VbCVailcROaiezk9sp7JR2KjvOTm2nsdPa6ez0dgY7o53JzmxnsbPa2ezsdg47p53Lzm3nsfPa+ez8dgG7oF3ILmwXsYvaxezidgm7pF3KLm2Xscva5ezydgW7ol3JrmxXsava1ezqdg27pl3Lrm3Xseva9ez6dgO7od3Ibmw3sZvazezmdgu7pd3Kbm23sdva7ez2dge7o93J7mx3sbva3ezudg+7p93L7m33sfva/ez+9gB7oD3IHmwPsYfaw+zh9gh7pD3KHm2Pscfa4+zx9gR7oj3JnmxPsafa0+zp9gx7ph2zMRu3CZu0KZu2GZu1OZu3BVu0JVu2FVu1NVu3Ddu0Ldu2Hdu1Pdu3AxvYoQ1tZEf2LHu2Pceea8+z59sL7IX2InuxvcReai+zl9sr7JX2Knu1vcZea6+z19sb7I32JnuzvcXeam+zt9s77J32Lnu3vcfea++z99sH7IP2IfuwfcQ+ah+zj9sn7JP2Kfu0fcY+a5+zz9sX7Iv2JfuyfcW+al+zr9s37Jv2Lfu2fce+a9+z79sP7If2I/ux/cR+aj+zn9sv7Jf2K/u1/cZ+a7+z39sf7I/2J/uz/cX+an+zv9s/7J/2L/u3/cf+a/+z4+0EO9FO4iR1kjnJnRROSieVE+ekdtI4aZ10Tnong5PRyeRkdrI4WZ1sTnYnh5PTyeXkdvI4eZ18Tn6ngFPQKeQUdoo4RZ1iTnGnhFPSKeWUdso4ZZ1yTnmnglPRqeRUdqo4VZ1qTnWnhlPTqeXUduo4dZ16Tn2ngdPQaeQ0dpo4TZ1mTnOnhdPSaeW0dto4bZ12Tnung9PR6eR0dro4XZ1uTnenh9PT6eX0dvo4fZ1+Tn9ngDPQGeQMdoY4Q51hznBnhDPSGeWMdsY4Y51xznhngjPRmeRMdqY4U51pznRnhjPTiTmYgzuEQzqUQzuMwzqcwzuCIzqSIzuKozqaozuGYzqWYzuO4zqe4zuBA5zQgQ5yImeWM9uZ48x15jnznQXOQmeRs9hZ4ix1ljnLnRXOSmeVs9pZ46x11jnrnQ3ORmeTs9nZ4mx1tjnbnR3OTmeXs9vZ4+x19jn7nQPOQeeQc9g54hx1jjnHnRPOSeeUc9o545x1zjnnnQvOReeSc9m54lx1rjnXnRvOTeeWc9u549x17jn3nQfOQ+eR89h54jx1njnPnRfOS+eV89p547x13jnvnQ/OR+eT89n54nx1vjnfnR/OT+eX89v54/x1/jnxToKT6CRxk7rJ3ORuCjelm8qNc1O7ady0bjo3vZvBzehmcjO7WdysbjY3u5vDzenmcnO7edy8bj43v1vALegWcgu7RdyibjG3uFvCLemWcku7Zdyybjm3vFvBrehWciu7VdyqbjW3ulvDrenWcmu7ddy6bj23vtvAbeg2chu7TdymbjO3udvCbem2clu7bdy2bju3vdvB7eh2cju7Xdyubje3u9vD7en2cnu7fdy+bj+3vzvAHegOcge7Q9yh7jB3uDvCHemOcke7Y9yx7jh3vDvBnehOcie7U9yp7jR3ujvDnenGXMzFXcIlXcqlXcZlXc7lXcEVXcmVXcVVXc3VXcM1Xcu1Xcd1Xc/13cAFbuhCF7mRO8ud7c5x57rz3PnuAnehu8hd7C5xl7rL3OXuCnelu8pd7a5x17rr3PXuBneju8nd7G5xt7rb3O3uDnenu8vd7e5x97r73P3uAfege8g97B5xj7rH3OPuCfeke8o97Z5xz7rn3PPuBfeie8m97F5xr7rX3OvuDfeme8u97d5x77r33PvuA/eh+8h97D5xn7rP3OfuC/el+8p97b5x37rv3PfuB/ej+8n97H5xv7rf3O/uD/en+8v97f5x/7r/3Hg3wU10k3hJvWReci+Fl9JL5cV5qb00XlovnZfey+Bl9DJ5mb0sXlYvm5fdy+Hl9HJ5ub08Xl4vn5ffK+AV9Ap5hb0iXlGvmFfcK+GV9Ep5pb0yXlmvnFfeq+BV9Cp5lb0qXlWvmlfdq+HV9Gp5tb06Xl2vnlffa+A19Bp5jb0mXlOvmdfca+G19Fp5rb02Xluvndfe6+B19Dp5nb0uXlevm9fd6+H19Hp5vb0+Xl+vn9ffG+AN9AZ5g70h3lBvmDfcG+GN9EZ5o70x3lhvnDfem+BN9CZ5k70p3lRvmjfdm+HN9GIe5uEe4ZEe5dEe47Ee5/Ge4Ime5Mme4qme5ume4Zme5dme47me5/le4AEv9KCHvMib5c325nhzvXnefG+Bt9Bb5C32lnhLvWXecm+Ft9Jb5a321nhrvXXeem+Dt9Hb5G32tnhbvW3edm+Ht9Pb5e329nh7vX3efu+Ad9A75B32jnhHvWPece+Ed9I75Z32znhnvXPeee+Cd9G75F32rnhXvWvede+Gd9O75d327nh3vXvefe+B99B75D32nnhPvWfec++F99J75b323nhvvXfee++D99H75H32vnhfvW/ed++H99P75f32/nh/vX9evJfgJXpJ/KR+Mj+5n8JP6afy4/zUfho/rZ/OT+9n8DP6mfzMfhY/q5/Nz+7n8HP6ufzcfh4/r5/Pz+8X8Av6hfzCfhG/qF/ML+6X8Ev6pfzSfhm/rF/OL+9X8Cv6lfzKfhW/ql/Nr+7X8Gv6tfzafh2/rl/Pr+838Bv6jfzGfhO/qd/Mb+638Fv6rfzWfhu/rd/Ob+938Dv6nfzOfhe/q9/N7+738Hv6vfzefh+/r9/P7+8P8Af6g/zB/hB/qD/MH+6P8Ef6o/zR/hh/rD/OH+9P8Cf6k/zJ/hR/qj/Nn+7P8Gf6MR/zcZ/wSZ/yaZ/xWZ/zeV/wRV/yZV/xVV/zdd/wTd/ybd/xXd/zfT/wgR/60Ed+5M/yZ/tz/Ln+PH++v8Bf6C/yF/tL/KX+Mn+5v8Jf6a/yV/tr/LX+On+9v8Hf6G/yN/tb/K3+Nn+7v8Pf6e/yd/t7/L3+Pn+/f8A/6B/yD/tH/KP+Mf+4f8I/6Z/yT/tn/LP+Of+8f8G/6F/yL/tX/Kv+Nf+6f8O/6d/yb/t3/Lv+Pf++/8B/6D/yH/tP/Kf+M/+5/8J/6b/yX/tv/Lf+O/+9/8H/6H/yP/tf/K/+N/+7/8P/6f/yf/t//L/+Pz/eT/AT/SRB0iBZkDxIEaQMUgVxQeogTZA2SBekDzIEGYNMQeYgS5A1yBZkD3IEOYNcQe4gT5A3yBfkDwoEBYNCQeGgSFA0KBYUD0oEJYNSQemgTFA2KBeUDyoEFYNKQeWgSlA1qBZUD2oENYNaQe2gTlA3qBfUDxoEDYNGQeOgSdA0aBY0D1oELYNWQeugTdA2aBe0DzoEHYNOQeegS9A16BZ0D3oEPYNeQe+gT9A36Bf0DwYEA4NBweBgSDA0GBYMD0YEI4NRwehgTDA2GBeMDyYEE4NJweRgSjA1mBZMD2YEM4NYgAV4QARkQAV0wARswAV8IARiIAVyoARqoAV6YARmYAV24ARu4AV+EAQgCAMYoCAKZgWzgznB3GBeMD9YECwMFgWLgyXB0mBZsDxYEawMVgWrgzXB2mBdsD7YEGwMNgWbgy3B1mBbsD3YEewMdgW7gz3B3mBfsD84EBwMDgWHgyPB0eBYcDw4EZwMTgWngzPB2eBccD64EFwMLgWXgyvB1eBacD24EdwMbgW3gzvB3eBecD94EDwMHgWPgyfB0+BZ8Dx4EbwMXgWvgzfB2+Bd8D74EHwMPgWfgy/B1+Bb8D34EfwMfgW/gz/B3+BfEB8kBIlBEpAUJAPJQQqQEqQCcSA1SAPSgnQgPcgAMoJMIDPIArKCbCA7yAFyglwgN8gD8oJ8ID8oAAqCQqAwKAKKgmKgOCgBSoJSoDQoA8qCcqA8qAAqgkqgMqgCqoJqoDqoAWqCWqA2qAPqgnqgPmgAGoJGoDFoApqCZqA5aAFaglagNWgD2oJ2oD3oADqCTqAz6AK6gm6gO+gBeoJeoDfoA/qCfqA/GAAGgkFgMBgChoJhYDgYAUaCUWA0GAPGgnFgPJgAJoJJYDKYAqaCaWA6mAFmghjAAA4IQAIK0IABLOAADwQgAgnIQAEq0IAODGACC9jAAS7wgA8CAEAIIEAgArPAbDAHzAXzwHywACwEi8BisAQsBcvAcrACrASrwGqwBqwF68B6sAFsBJvAZrAFbAXbwHawA+wEu8BusAfsBfvAfnAAHASHwGFwBBwFx8BxcAKcBKfAaXAGnAXnwHlwAVwEl8BlcAVcBdfAdXAD3AS3wG1wB9wF98B98AA8BI/AY/AEPAXPwHPwArwEr8Br8Aa8Be/Ae/ABfASfwGfwBXwF38B38AP8BL/Ab/AH/AX/QDxIAIkgSZg0TBYmD1OEKcNUYVyYOkwTpo1LF6YPM4QZw0xh5jBLmDXMFmYPc4Q5w1xh7jBPmDfMF+YPC4QFw0Jh4bBIWDQsFhYPS4Qlw1Jh6bBMWDYsF5YPK4QVw0ph5bBKWDWsFlYPa4Q1w1ph7bBOWDesF9YPG4QNw0Zh47BJ2DRsFjYPW4Qtw1Zh67BN2DZsF7YPO4Qdw05h57BL2DXsFnYPe4Q9w15h77BP2DfsF/YPB4QDw0Hh4HBIODQcFg4PR4Qjw1Hh6HBMODYcF44PJ4QTw0nh5HBKODWcFk4PZ4Qzw1iIhXhIhGRIhXTIhGzIhXwohGIohXKohGqohXpohGZohXbohG7ohX4YhCAMQxiiMApnhbPDOeHccF44P1wQLgwXhYvDJeHScFm4PFwRrgxXhavDNeHacF24PtwQbgw3hZvDLeHWcFu4PdwR7gx3hbvDPeHecF+4PzwQHgwPhYfDI+HR8Fh4PDwRngxPhafDM+HZ8Fx4PrwQXgwvhZfDK+HV8Fp4PbwR3gxvhbfDO+Hd8F54P3wQPgwfhY/DJ+HT8Fn4PHwRvgxfha/DN+Hb8F34PvwQfgw/hZ/DL+HX8Fv4PfwR/gx/hb/DP+Hf8F8YHyaEiWESmBQmg8lhCpgSpoJxMDVMA9PCdDA9zAAzwkwwM8wCs8JsMDvMAXPCXDA3zAPzwnwwPywAC8JCsDAsAovCYrA4LAFLwlKwNCwDy8JysDysACvCSrAyrAKrwmqwOqwBa8JasDasA+vCerA+bAAbwkawMWwCm8JmsDlsAVvCVrA1bAPbwnawPewAO8JOsDPsArvCbrA77AF7wl6wN+wD+8J+sD8cAAfCQXAwHAKHwmFwOBwBR8JRcDQcA8fCcXA8nAAnwklwMpwCp8JpcDqcAWfCGMQgDglIQgrSkIEs5CAPBShCCcpQgSrUoA4NaEIL2tCBLvSgDwMIYAghRDCCs+BsOAfOhfPgfLgALoSL4GK4BC6Fy+ByuAKuhKvgargGroXr4Hq4AW6Em+BmuAVuhdvgdrgD7oS74G64B+6F++B+eAAehIfgYXgEHoXH4HF4Ap6Ep+BpeAaehefgeXgBXoSX4GV4BV6F1+B1eAPehLfgbXgH3oX34H34AD6Ej+Bj+AQ+hc/gc/gCvoSv4Gv4Br6F7+B7+AF+hJ/gZ/gFfoXf4Hf4A/6Ev+Bv+Af+hf9gPEyAiTAJSoqSoeQoBUqJUqE4lBqlQWlROpQeZUAZUSaUGWVBWVE2lB3lQDlRLpQb5UF5UT6UHxVABVEhVBgVQUVRMVQclUAlUSlUGpVBZVE5VB5VQBVRJVQZVUFVUTVUHdVANVEtVBvVQXVRPVQfNUANUSPUGDVBTVEz1By1QC1RK9QatUFtUTvUHnVAHVEn1Bl1QV1RN9Qd9UA9US/UG/VBfVE/1B8NQAPRIDQYDUFD0TA0HI1AI9EoNBqNQWPRODQeTUAT0SQ0GU1BU9E0NB3NQDNRDGEIRwQiEYVoxCAWcYhHAhKRhGSkIBVpSEcGMpGFbOQgF3nIRwECKEQQIRShWWg2moPmonloPlqAFqJFaDFagpaiZWg5WoFWolVoNVqD1qJ1aD3agDaiTWgz2oK2om1oO9qBdqJdaDfag/aifWg/OoAOokPoMDqCjqJj6Dg6gU6iU+g0OoPOonPoPLqALqJL6DK6gq6ia+g6uoFuolvoNrqD7qJ76D56gB6iR+gxeoKeomfoOXqBXqJX6DV6g96id+g9+oA+ok/oM/qCvqJv6Dv6gX6iX+g3+oP+on8oHiWgRJQkSholi5JHKaKUUaooLkodpYnSRumi9FGGKGOUKcocZYmyRtmi7FGOKGeUK8od5YnyRvmi/FGBqGBUKCocFYmKRsWi4lGJqGRUKiodlYnKRuWi8lGFqGJUKaocVYmqRtWi6lGNqGZUK6od1YnqRvWi+lGDqGHUKGocNYmaRs2i5lGLqGXUKmodtYnaRu2i9lGHqGPUKeocdYm6Rt2i7lGPqGfUK+od9Yn6Rv2i/tGAaGA0KBocDYmGRsOi4dGIaGQ0KhodjYnGRuOi8dGEaGI0KZocTYmmRtOi6dGMaGYUi7AIj4iIjKiIjpiIjbiIj4RIjKRIjpRIjbRIj4zIjKzIjpzIjbzIj4IIRGEEIxRF0axodjQnmhvNi+ZHC6KF0aJocbQkWhoti5ZHK6KV0apodbQmWhuti9ZHG6KN0aZoc7Ql2hpti7ZH/0mAx8A8mgQAwKlt27Zt23a/2jbSNE1tvGvbmJmtbdu2bd6Pe1Asim2P7YjtjO2K7Y7tie2N7Yvtjx2IHYwdih2OHYkdjR2LHY+diJ2MnYqdjp2JnY2di52PXYhdjF2KXY5diV2NXYtdj92I3Yzdit2O3Yndjd2L3Y89iD2MPYo9jj2JPY09iz2PvYi9jL2KvY69ib2NvYu9j32IfYx9in2OfYl9jX2LfY/9iP2M/Yr9jv2J/Y39i8VhybDkWAosJZYKS42lwdJi6bD0WAYsI5YJy4xlwbJi2bDsWA4sJ5YLy43lwfJi+bD8WAGsIFYIK4wVwYpixbDiWAmsJFYKK42Vwcpi5bDyWAWsIlYJq4xVwapi1bDqWA2sJlYLq43Vwepi9bD6WAOsIdYIa4w1wZpizbDmWAusJdYKa421wdpi7bD2WAesI9YJ64x1wbpi3bDuWA+sJ9YL6431wfpi/bD+2ABsIDYIG4wNwYZiw7Dh2H/YCGwkNgobjY3BxmLjsPHYBGwiNgmbjE3BpmLTsOnYDGwmNgubjc3B5mLzsPnYAmwhtghbjMVjS7AEbCmWiC3DkrDl2ApsJbYKW42twdZi67D12AZsI7YJ24xtwbZi27AYhmE4RmAkRmE0xmAsxmE8JmAiJmEypmAqpmE6ZmAmZmE25mAu5mE+FmAhBjCIISzCtmM7sJ3YLmw3tgfbi+3D9mMHsIPYIewwdgQ7ih3DjmMnsJPYKew0dgY7i53DzmMXsIvYJewydgW7il3DrmM3sJvYLew2dge7i93D7mMPsIfYI+wx9gR7ij3DnmMvsJfYK+w19gZ7i73D3mMfsI/YJ+wz9gX7in3DvmM/sJ/YL+w39gf7i/3D4vBkeHI8BZ4ST4WnxtPgafF0eHo8A54Rz4RnxrPgWfFseHY8B54Tz4XnxvPgefF8eH68AF4QL4QXxovgRfFieHG8BF4SL4WXxsvgZfFyeHm8Al4Rr4RXxqvgVfFqeHW8Bl4Tr4XXxuvgdfF6eH28Ad4Qb4Q3xpvgTfFmeHO8Bd4Sb4W3xtvgbfF2eHu8A94R74R3xrvgXfFueHe8B94T74X3xvvgffF+eH98AD4QH4QPxofgQ/Fh+HD8P3wEPhIfhY/Gx+Bj8XH4eHwCPhGfhE/Gp+BT8Wn4dHwGPhOfhc/G5+Bz8Xn4fHwBvhBfhC/G4/EleAK+FE/El+FJ+HJ8Bb4SX4Wvxtfga/F1+Hp8A74R34RvxrfgW/FteAzHcBwncBKncBpncBbncB4XcBGXcBlXcBXXcB03cBO3cBt3cBf3cB8P8BAHOMQRHuHb8R34TnwXvhvfg+/F9+H78QP4QfwQfhg/gh/Fj+HH8RP4SfwUfho/g5/Fz+Hn8Qv4RfwSfhm/gl/Fr+HX8Rv4TfwWfhu/g9/F7+H38Qf4Q/wR/hh/gj/Fn+HP8Rf4S/wV/hp/g7/F3+Hv8Q/4R/wT/hn/gn/Fv+Hf8R/4T/wX/hv/g//F/+FxRDIiOZGCSEmkIlITaYi0RDoiPZGByEhkIjITWYisRDYiO5GDyEnkInITeYi8RD4iP1GAKEgUIgoTRYiiRDGiOFGCKEmUIkoTZYiyRDmiPFGBqEhUIioTVYiqRDWiOlGDqEnUImoTdYi6RD2iPtGAaEg0IhoTTYimRDOiOdGCaEm0IloTbYi2RDuiPdGB6Eh0IjoTXYiuRDeiO9GD6En0InoTfYi+RD+iPzGAGEgMIgYTQ4ihxDBiOPEfMYIYSYwiRhNjiLHEOGI8MYGYSEwiJhNTiKnENGI6MYOYScwiZhNziLnEPGI+sYBYSCwiFhPxxBIigVhKJBLLiCRiObGCWEmsIlYTa4i1xDpiPbGB2EhsIjYTW4itxDYiRmAEThAESVAETTAES3AETwiESEiETCiESmiEThiESViETTiES3iETwRESAACEoiIiO3EDmInsYvYTewh9hL7iP3EAeIgcYg4TBwhjhLHiOPECeIkcYo4TZwhzhLniPPEBeIicYm4TFwhrhLXiOvEDeImcYu4Tdwh7hL3iPvEA+Ih8Yh4TDwhnhLPiOfEC+Il8Yp4Tbwh3hLviPfEB+Ij8Yn4THwhvhLfiO/ED+In8Yv4Tfwh/hL/iDgyGZmcTEGmJFORqck0ZFoyHZmezEBmJDORmcksZFYyG5mdzEHmJHORuck8ZF4yH5mfLEAWJAuRhckiZFGyGFmcLEGWJEuRpckyZFmyHFmerEBWJCuRlckqZFWyGlmdrEHWJGuRtck6ZF2yHlmfbEA2JBuRjckmZFOyGdmcbEG2JFuRrck2ZFuyHdme7EB2JDuRnckuZFeyG9md7EH2JHuRvck+ZF+yH9mfHEAOJAeRg8kh5FByGDmc/I8cQY4kR5GjyTHkWHIcOZ6cQE4kJ5GTySnkVHIaOZ2cQc4kZ5GzyTnkXHIeOZ9cQC4kF5GLyXhyCZlALiUTyWVkErmcXEGuJFeRq8k15FpyHbme3EBuJDeRm8kt5FZyGxkjMRInCZIkKZImGZIlOZInBVIkJVImFVIlNVInDdIkLdImHdIlPdInAzIkAQlJREbkdnIHuZPcRe4m95B7yX3kfvIAeZA8RB4mj5BHyWPkcfIEeZI8RZ4mz5BnyXPkefICeZG8RF4mr5BXyWvkdfIGeZO8Rd4m75B3yXvkffIB+ZB8RD4mn5BPyWfkc/IF+ZJ8Rb4m35BvyXfke/ID+ZH8RH4mv5BfyW/kd/IH+ZP8Rf4m/5B/yX9kHJWMSk6loFJSqajUVBoqLZWOSk9loDJSmajMVBYqK5WNyk7loHJSuajcVB4qL5WPyk8VoApShajCVBGqKFWMKk6VoEpSpajSVBmqLFWOKk9VoCpSlajKVBWqKlWNqk7VoGpStajaVB2qLlWPqk81oBpSjajGVBOqKdWMak61oFpSrajWVBuqLdWOak91oDpSnajOVBeqK9WN6k71oHpSvajeVB+qL9WP6k8NoAZSg6jB1BBqKDWMGk79R42gRlKjqNHUGGosNY4aT02gJlKTqMnUFGoqNY2aTs2gZlKzqNnUHGouNY+aTy2gFlKLqMVUPLWESqCWUonUMiqJWk6toFZSq6jV1BpqLbWOWk9toDZSm6jN1BZqK7WNilEYhVMERVIURVMMxVIcxVMCJVISJVMKpVIapVMGZVIWZVMO5VIe5VMBFVKAghSiImo7tYPaSe2idlN7qL3UPmo/dYA6SB2iDlNHqKPUMeo4dYI6SZ2iTlNnqLPUOeo8dYG6SF2iLlNXqKvUNeo6dYO6Sd2iblN3qLvUPeo+9YB6SD2iHlNPqKfUM+o59YJ6Sb2iXlNvqLfUO+o99YH6SH2iPlNfqK/UN+o79YP6Sf2iflN/qL/UPyqOTkYnp1PQKelUdGo6DZ2WTkenpzPQGelMdGY6C52VzkZnp3PQOelcdG46D52XzkfnpwvQBelCdGG6CF2ULkYXp0vQJelSdGm6DF2WLkeXpyvQFelKdGW6Cl2VrkZXp2vQNeladG26Dl2XrkfXpxvQDelGdGO6Cd2UbkY3p1vQLelWdGu6Dd2Wbke3pzvQHelOdGe6C92V7kZ3p3vQPeledG+6D92X7kf3pwfQA+lB9GB6CD2UHkYPp/+jR9Aj6VH0aHoMPZYeR4+nJ9AT6Un0ZHoKPZWeRk+nZ9Az6Vn0bHoOPZeeR8+nF9AL6UX0YjqeXkIn0EvpRHoZnUQvp1fQK+lV9Gp6Db2WXkevpzfQG+lN9GZ6C72V3kbHaIzGaYImaYqmaYZmaY7maYEWaYmWaYVWaY3WaYM2aYu2aYd2aY/26YAOaUBDGtERvZ3eQe+kd9G76T30XnofvZ8+QB+kD9GH6SP0UfoYfZw+QZ+kT9Gn6TP0WfocfZ6+QF+kL9GX6Sv0VfoafZ2+Qd+kb9G36Tv0XfoefZ9+QD+kH9GP6Sf0U/oZ/Zx+Qb+kX9Gv6Tf0W/od/Z7+QH+kP9Gf6S/0V/ob/Z3+Qf+kf9G/6T/0X/ofHcckY5IzKZiUTComNZOGScukY9IzGZiMTCYmM5OFycpkY7IzOZicTC4mN5OHycvkY/IzBZiCTCGmMFOEKcoUY4ozJZiSTCmmNFOGKcuUY8ozFZiKTCWmMlOFqcpUY6ozNZiaTC2mNlOHqcvUY+ozDZiGTCOmMdOEaco0Y5ozLZiWTCumNdOGacu0Y9ozHZiOTCemM9OF6cp0Y7ozPZieTC+mN9OH6cv0Y/ozA5iBzCBmMDOEGcoMY4Yz/zEjmJHMKGY0M4YZy4xjxjMTmInMJGYyM4WZykxjpjMzmJnMLGY2M4eZy8xj5jMLmIXMImYxE88sYRKYpUwis4xJYpYzK5iVzCpmNbOGWcusY9YzG5iNzCZmM7OF2cpsY2IMxuAMwZAMxdAMw7AMx/CMwIiMxMiMwqiMxuiMwZiMxdiMw7iMx/hMwIQMYCCDmIjZzuxgdjK7mN3MHmYvs4/ZzxxgDjKHmMPMEeYoc4w5zpxgTjKnmNPMGeYsc445z1xgLjKXmMvMFeYqc425ztxgbjK3mNvMHeYuc4+5zzxgHjKPmMfME+Yp84x5zrxgXjKvmNfMG+Yt8455z3xgPjKfmM/MF+Yr8435zvxgfjK/mN/MH+Yv84+JY5OxydkUbEo2FZuaTcOmZdOx6dkMbEY2E5uZzcJmZbOx2dkcbE42F5ubzcPmZfOx+dkCbEG2EFuYLcIWZYuxxdkSbEm2FFuaLcOWZcux5dkKbEW2EluZrcJWZaux1dkabE22FlubrcPWZeux9dkGbEO2EduYbcI2ZZuxzdkWbEu2FduabcO2Zdux7dkObEe2E9uZ7cJ2Zbux3dkebE+2F9ub7cP2Zfux/dkB7EB2EDuYHcIOZYexw9n/2BHsSHYUO5odw45lx7Hj2QnsRHYSO5mdwk5lp7HT2RnsTHYWO5udw85l57Hz2QXsQnYRu5iNZ5ewCexSNpFdxiaxy9kV7Ep2FbuaXcOuZdex69kN7EZ2E7uZ3cJuZbexMRZjcZZgSZZiaZZhWZZjeVZgRVZiZVZhVVZjddZgTdZibdZhXdZjfTZgQxawkEVsxG5nd7A72V3sbnYPu5fdx+5nD7AH2UPsYfYIe5Q9xh5nT7An2VPsafYMe5Y9x55nL7AX2UvsZfYKe5W9xl5nb7A32VvsbfYOe5e9x95nH7AP2UfsY/YJ+5R9xj5nX7Av2Vfsa/YN+5Z9x75nP7Af2U/sZ/YL+5X9xn5nf7A/2V/sb/YP+5f9x8ZxybjkXAouJZeKS82l4dJy6bj0XAYuI5eJy8xl4bJy2bjsXA4uJ5eLy83l4fJy+bj8XAGuIFeIK8wV4YpyxbjiXAmuJFeKK82V4cpy5bjyXAWuIleJq8xV4apy1bjqXA2uJleLq83V4epy9bj6XAOuIdeIa8w14ZpyzbjmXAuuJdeKa8214dpy7bj2XAeuI9eJ68x14bpy3bjuXA+uJ9eL68314fpy/bj+3ABuIDeIG8wN4YZyw7jh3H/cCG4kN4obzY3hxnLjuPHcBG4iN4mbzE3hpnLTuOncDG4mN4ubzc3h5nLzuPncAm4ht4hbzMVzS7gEbimXyC3jkrjl3ApuJbeKW82t4dZy67j13AZuI7eJ28xt4bZy27gYh3E4R3AkR3E0x3Asx3E8J3AiJ3Eyp3Aqp3E6Z3AmZ3E253Au53E+F3AhBzjIIS7itnM7uJ3cLm43t4fby+3j9nMHuIPcIe4wd4Q7yh3jjnMnuJPcKe40d4Y7y53jznMXuIvcJe4yd4W7yl3jrnM3uJvcLe42d4e7y93j7nMPuIfcI+4x94R7yj3jnnMvuJfcK+4194Z7y73j3nMfuI/cJ+4z94X7yn3jvnM/uJ/cL+4394f7y/3j4vhkfHI+BZ+ST8Wn5tPwafl0fHo+A5+Rz8Rn5rPwWflsfHY+B5+Tz8Xn5vPwefl8fH6+AF+QL8QX5ovwRflifHG+BF+SL8WX5svwZflyfHm+Al+Rr8RX5qvwVflqfHW+Bl+Tr8XX5uvwdfl6fH2+Ad+Qb8Q35pvwTflmfHO+Bd+Sb8W35tvwbfl2fHu+A9+R78R35rvwXflufHe+B9+T78X35vvwffl+fH9+AD+QH8QP5ofwQ/lh/PBkcXFx/Eh+FD+aH8OP5cfx4/kJ/ER+Ej+Zn8JP5afx0/kZ/Ex+Fj+bn8PP5efx8/kF/EJ+Eb+Yj+eX8An8Uj6RX8Yn8cv5FfxKfhW/ml/Dr+XX8ev5DfxGfhO/md/Cb+W38TEe43Ge4Eme4mme4Vme43le4EVe4mVe4VVe43Xe4E3e4m3e4V3e430+4EMe8JBHfMRvzxn3f/wefi+/j9/PH+AP8of4w/wR/ih/jD/On+BP8qf40/wZ/ix/jj/PX+Av8pf4y/wV/ip/jb/O3+Bv8rf42/wd/i5/j7/PP+Af8o/4x/wT/in/jH/Ov+Bf8q/41/wb/i3/jn/Pf+A/8p/4z/wX/iv/jf/O/+B/8r/43/wf/i//j48TkgnJhRRCSiGVkFpII6QV0gnphQxCRiGTkFnIImQVsgnZhRxCTiGXkFvII+QV8gn5hQJCQaGQUFgoIhQVignFhRJCSaGUUFooI5QVygnlhQpCRaGSUFmoIlQVqgnVhRpCTaGWUFuoI9QV6gn1hQZCQ6GR0FhoIjQVmgnNhRZCS6GV0FpoI7QV2gnthQ5CR6GT0FnoInQVugndhR5CT6GX0FvoI/QV+gn9hQHCQGGQMFgYIgwVhgnDhf+EEcJIYZQwWhgjjBXGCeOFCcJEYZIwWZgiTBWmCdOFGcJMYZYwW5gjzBXmCfOFBcJCYZGwWIgXlggJwlIhUVgmJAnLhRXCSmGVsFpYI6wV1gnrhQ3CRmGTsFnYImwVtgkxARNwgRBIgRJogRFYgRN4QRBEQRJkQRFUQRN0wRBMwRJswRFcwRN8IRBCAQhQQEIkbBd2CDuFXcJuYY+wV9gn7BcOCAeFQ8Jh4YhwVDgmHBdOCCeFU8Jp4YxwVjgnnBcuCBeFS8Jl4YpwVbgmXBduCDeFW8Jt4Y5wV7gn3BceCA+FR8Jj4YnwVHgmPBdeCC+FV8Jr4Y3wVngnvBc+CB+FT8Jn4YvwVfgmfBd+CD+FX8Jv4Y/wV/gnxInJxORiCjGlmEpMLaYR04rpxPRiBjGjmEnMLGYRs4rZxOxiDjGnmEvMLeYR84r5xPxiAbGgWEgsLBYRi4rFxOJiCbGkWEosLZYRy4rlxPJiBbGiWEmsLFYRq4rVxOpiDbGmWEusLdYR64r1xPpiA7Gh2EhsLDYRm4rNxOZiC7Gl2EpsLbYR24rtxPZiB7Gj2EnsLHYRu4rdxO5iD7Gn2EvsLfYR+4r9xP7iAHGgOEgcLA4Rh4rDxOHif+IIcaQ4ShwtjhHHiuPE8eIEcaI4SZwsThGnitPE6eIMcaY4S5wtzhHnivPE+eICcaG4SFwsxotLxARxqZgoLhOTxOXiCnGluEpcLa4R14rrxPXiBnGjuEncLG4Rt4rbxJiIibhIiKRIibTIiKzIibwoiKIoibKoiKqoibpoiKZoibboiK7oib4YiKEIRCgiMRK3izvEneIucbe4R9wr7hP3iwfEg+Ih8bB4RDwqHhOPiyfEk+Ip8bR4RjwrnhPPixfEi+Il8bJ4RbwqXhOvizfEm+It8bZ4R7wr3hPviw/Eh+Ij8bH4RHwqPhOfiy/El+Ir8bX4RnwrvhPfix/Ej+In8bP4RfwqfhO/iz/En+Iv8bf4R/wr/hPjpGRScimFlFJKJaWW0khppXRSeimDlFHKJGWWskhZpWxSdimHlFPKJeWW8kh5pXxSfqmAVFAqJBWWikhFpWJScamEVFIqJZWWykhlpXJSeamCVFGqJFWWqkhVpWpSdamGVFOqJdWW6kh1pXpSfamB1FBqJDWWmkhNpWZSc6mF1FJqJbWW2khtpXZSe6mD1FHqJHWWukhdpW5Sd6mH1FPqJfWW+kh9pX5Sf2mANFAaJA2WhkhDpWHScOk/aYQ0UholjZbGSGOlcdJ4aYI0UZokTZamSFOladJ0aYY0U5olzZbmSHOledJ8aYG0UFokLZbipSVSgrRUSpSWSUnScmmFtFJaJa2W1khrpXXSemmDtFHaJG2WtkhbpW1STMIkXCIkUqIkWmIkVuIkXhIkUZIkWVIkVdIkXTIkU7IkW3IkV/IkXwqkUAISlJAUSdulHdJOaZe0W9oj7ZX2SfulA9JB6ZB0WDoiHZWOScelE9JJ6ZR0WjojnZXOSeelC9JF6ZJ0WboiXZWuSdelG9JN6ZZ0W7oj3ZXuSfelB9JD6ZH0WHoiPZWeSc+lF9JL6ZX0WnojvZXeSe+lD9JH6ZP0WfoifZW+Sd+lH9JP6Zf0W/oj/ZX+SXFyMjm5nEJOKaeSU8tp5LRyOjm9nEHOKGeSM8tZ5KxyNjm7nEPOKeeSc8t55LxyPjm/XEAuKBeSC8tF5KJyMbm4XEIuKZeSS8tl5LJyObm8XEGuKFeSK8tV5KpyNbm6XEOuKdeSa8t15LpyPbm+3EBuKDeSG8tN5KZyM7m53EJuKbeSW8tt5LZyO7m93EHuKHeSO8td5K5yN7m73EPuKfeSe8t95L5yP7m/PEAeKA+SB8tD5KHyMHm4/J88Qh4pj5JHy2PksfI4ebw8QZ4oT5Iny1PkqfI0ebo8Q54pz5Jny3PkufI8eb68QF4oL5IXy/HyEjlBXionysvkJHm5vEJeKa+SV8tr5LXyOnm9vEHeKG+SN8tb5K3yNjkmYzIuEzIpUzItMzIrczIvC7IoS7IsK7Iqa7IuG7IpW7ItO7Ire7IvB3IoAxnKSI7k7fIOeae8S94t75H3yvvk/fIB+aB8SD4sH5GPysfk4/IJ+aR8Sj4tn5HPyufk8/IF+aJ8Sb4sX5Gvytfk6/IN+aZ8S74t35Hvyvfk+/ID+aH8SH4sP5Gfys/k5/IL+aX8Sn4tv5Hfyu/k9/IH+aP8Sf4sf5G/yt/k7/IP+af8S/4t/5H/yv/kOCWZklxJoaRUUimplTRKWiWdkl7JoGRUMimZlSxKViWbkl3JoeRUcim5lTxKXiWfkl8poBRUCimFlSJKUaWYUlwpoZRUSimllTJKWaWcUl6poFRUKimVlSpKVaWaUl2podRUaim1lTpKXaWeUl9poDRUGimNlSZKU6Wp0lxprrRUWiqtldZKW6Wt0l5pr3RUOiqdlc5KV6Wr0l3prvRUeiq9ld5KX6Wv0l/prwxUBiqDlcHKUGWYMlwZroxQRiijlFHKGGWMMk4Zp0xQJiiTlMnKFGWqMk2ZrsxQZiqzlNnKHGWuMk+ZryxQFiqLlMVKvBKvJCgJSqKSqCQpScoKZYWySlmlrFHWKOuUdcoGZYOySdmkbFG2KNuUbQqm4AqhkAql0AqjsAqn8IqgiIqkyIqiqIqm6IqhmIql2IqjuIqn+EqghApQoIKUSNmu7FB2KruU3coeZa+yT9mvHFAOKoeUw8oR5ahyTDmunFBOKqeU08oZ5axyTjmvXFAuKpeUy8oV5apyTbmu3FBuKreU28od5a5yT7mvPFAeKo+Ux8oT5anyTHmuvFBeKq+U18ob5a3yTnmvfFA+Kp+Uz8oX5avyTfmu/FB+Kr+U38of5a/yT4lTk6nJ1RRqSjWVmlpNo6ZV06np1QxqRjWTmlnNomZVs6nZ1RxqTjWXmlvNo+ZV86n51QJqQbWQWlgtohZVi6nF1eJqSbWkWlotrZZVy6rl1fJqRbWiWlmtrFZVq6nV1epqTbWmWlutrdZV66r11fpqQ7Wh2lhtrDZVm6rN1eZqS7Wl2lptrbZV26rt1fZqR7Wj2lntrHZVu6rd1e5qT7Wn2lvtrfZV+6r91f7qQHWgOlgdrA5Vh6rD1eHqCHWEOkodpY5Rx6jj1HHqBHWCOkmdpE5Rp6rT1OnqDHWmOkudrc5R56pz1fnqfHWhukhdpMar8WqCmqAmqolqkpqkrlBXqqvU1epqda26Tl2vblA3qpvUzeoWdau6TY2pmIqrhEqqlEqrjMqqnMqrgiqqkiqriqqqmqqrhmqqlmqrjuqqnuqrgRqqQIUqUiN1u7pD3anuUnere9S96j51v3pAPageUg+rR9Sj6jH1uHpCPameUk+rZ9Sz6jn1vHpBvaheUi+rV9Sr6jX1unpDvaneUm+rd9S76j31vvpAfag+Uh+rT9Sn6jP1ufpCfam+Ul+rb9S36jv1vfpB/ah+Uj+rX9Sv6jf1u/pD/an+Un+rf9S/6j81TkumJddSaCm1VFpqLY2WVkunpdcyaBm1TFpmLYuWVcumZddyaDm1XFpuLY+WV8un5dcKaAW1QlphrYhWVCumFddKaCW1UlpprYxWViunldcqaBW1SlplrYpWVaumVddqaDW1WlptrY5WV6un1dcaaA21RlpjrYnWVGumNddaaC21VlprrY3WVmuntdc6aB21TlpnrYvWVeumddd6aD21XlpvrY/WV+un9dcGaAO1QdpgbYg2VBumDdf+00ZoI7VR2mhtjDZWG6eN1yZoE7VJ2mRtijZVm6ZN12ZoM7VZ2mxtjjZXm6fN1xZoC7VF2mItXluiJWhLtURtmZakLddWaCu1VdpqbY22Vlunrdc2aBu1TdpmbYu2VdumxTRMwzVCIzVKozVGYzVO4zVBEzVJkzVFUzVN0zVDMzVLszVHczVP87VACzWgQQ1pkbZd26Ht1HZpu7U92l5tn7ZfO6Ad1A5ph7Uj2lHtmHZcO6Gd1E5pp7Uz2lntnHZeu6Bd1C5pl7Ur2lXtmnZdu6Hd1G5pt7U72l3tnnZfe6A91B5pj7Un2lPtmfZce6G91F5pr7U32lvtnfZe+6B91D5pn7Uv2lftm/Zd+6H91H5pv7U/2l/tnxanJ9OT6yn0lHoqPbWeRk+rp9PT6xn0jHomPbOeRc+qZ9Oz6zn0nHouPbeeR8+r59Pz6wX0gnohvbBeRC+qF9OL6yX0knopvbReRi+rl9PL6xX0inolvbJeRa+qV9Or6zX0mnotvbZeR6+r19Pr6w30hnojvbHeRG+qN9Ob6y30lnorvbXeRm+rt9Pb6x30jnonvbPeRe+qd9O76z30nnovvbfeR++r99P76wP0gfogfbA+RB+qD9OH6//pI/SR+ih9tD5GH6uP08frE/SJ+iR9sj5Fn6pP06frM/SZ+ix9tj5Hn6vP0+frC/SF+iJ9sR6vL9ET9KV6or5MT9KX6yv0lfoqfbW+Rl+rr9PX6xv0jfomfbO+Rd+qb9NjOqbjOqGTOqXTOqOzOqfzuqCLuqTLuqKruqbruqGbuqXbuqO7uqf7eqCHOtChjvRI367v0Hfqu/Td+h59r75P368f0A/qh/TD+hH9qH5MP66f0E/qp/TT+hn9rH5OP69f0C/ql/TL+hX9qn5Nv67f0G/qt/Tb+h39rn5Pv68/0B/qj/TH+hP9qf5Mf66/0F/qr/TX+hv9rf5Of69/0D/qn/TP+hf9q/5N/67/0H/qv/Tf+h/9r/5PjzOSGcmNFEZKI5WR2khjpDXSGemNDEZGI5OR2chiZDWyGdmNHEZOI5eR28hj5DXyGfmNAkZBo5BR2ChiFDWKGcWNEkZJo5RR2ihjlDXKGeWNCkZFo5JR2ahiVDWqGdWNGkZNo5ZR26hj1DXqGfWNBkZDo5HR2GhiNDWaGc2NFkZLo5XR2mhjtDXaGe2NDkZHo5PR2ehidDW6Gd2NHkZPo5fR2+hj9DX6Gf2NAcZAY5Ax2BhiDDWGGcON/4wRxkhjlDHaGGOMNcYZ440JxkRjkjHZmGJMNaYZ040ZxkxjljHbmGPMNeYZ840FxkJjkbHYiDeWGAnGUiPRWGYkGcuNFcZKY5Wx2lhjrDXWGeuNDcZGY5Ox2dhibDW2GTEDM3CDMEiDMmiDMViDM3hDMERDMmRDMVRDM3TDMEzDMmzDMVzDM3wjMEIDGNBARmRsN3YYO41dxm5jj7HX2GfsNw4YB41DxmHjiHHUOGYcN04YJ41TxmnjjHHWOGecNy4YF41LxmXjinHVuGZcN24YN41bxm3jjnHXuGfcNx4YD41HxmPjifHUeGY8N14YL41XxmvjjfHWeGe8Nz4YH41Pxmfji/HV+GZ8N34YP41fxm/jj/HX+GfEmcnM5GYKM6WZykxtpjHTmunM9GYGM6OZycxsZjGzmtnM7GYOM6eZy8xt5jHzmvnM/GYBs6BZyCxsFjGLmsXM4mYJs6RZyixtljHLmuXM8mYFs6JZyaxsVjGrmtXM6mYNs6ZZy6xt1jHrmvXM+mYDs6HZyGxsNjGbms3M5mYLs6XZymxttjHbmu3M9mYHs6PZyexsdjG7mt3M7mYPs6fZy+xt9jH7mv3M/uYAc6A5yBxsDjGHmsPM4eZ/5ghzpDnKHG2OMcea48zx5gRzojnJnGxOMaea08zp5gxzpjnLnG3OMeea88z55gJzobnIXGzGm0vMBHOpmWguM5PM5eYKc6W5ylxtrjHXmuvM9eYGc6O5ydxsbjG3mtvMmImZuEmYpEmZtMmYrMmZvCmYoimZsqmYqqmZummYpmmZtumYrumZvhmYoQlMaCIzMrebO8yd5i5zt7nH3GvuM/ebB8yD5iHzsHnEPGoeM4+bJ8yT5inztHnGPGueM8+bF8yL5iXzsnnFvGpeM6+bN8yb5i3ztnnHvGveM++bD8yH5iPzsfnEfGo+M5+bL8yX5ivztfnGfGu+M9+bH8yP5ifzs/nF/Gp+M7+bP8yf5i/zt/nH/Gv+M+OsZFZyK4WV0kplpbbSWGmtdFZ6K4OV0cpkZbayWFmtbFZ2K4eV08pl5bbyWHmtfFZ+q4BV0CpkFbaKWEWtYlZxq4RV0ipllbbKWGWtclZ5q4JV0apkVbaqWFWtalZ1q4ZV06pl1bbqWHWtelZ9q4HV0GpkNbaaWE2tZlZzq4XV0mpltbbaWG2tdlZ7q4PV0epkdba6WF2tblZ3q4fV0+pl9bb6WH2tflZ/a4A10BpkDbaGWEOtYdZw6z9rhDXSGmWNtsZYY61x1nhrgjXRmmRNtqZYU61p1nRrhjXTmmXNtuZYc6151nxrgbXQWmQttuKtJVaCtdRKtJZZSdZya4W10lplrbbWWGutddZ6a4O10dpkbba2WFutbVbMwizcIizSoizaYizW4izeEizRkizZUizV0izdMizTsizbcizX8izfCqzQAha0kBVZ260d1k5rl7Xb2mPttfZZ+60D1kHrkHXYOmIdtY5Zx60T1knrlHXaOmOdtc5Z560L1kXrknXZumJdta5Z160b1k3rlnXbumPdte5Z960H1kPrkfXYemI9tZ5Zz60X1kvrlfXaemO9td5Z760P1kfrk/XZ+mJ9tb5Z360f1k/rl/Xb+mP9tf5ZcXYyO7mdwk5pp7JT22nstHY6O72dwc5oZ7Iz21nsrHY2O7udw85p57Jz23nsvHY+O79dwC5oF7IL20XsonYxu7hdwi5pl7JL22XssnY5u7xdwa5oV7Ir21XsqnY1u7pdw65p17Jr23XsunY9u77dwG5oN7Ib203spnYzu7ndwm5pt7Jb223stnY7u73dwe5od7I7213srnY3u7vdw+5p97J7233svnY/u789wB5oD7IH20PsofYwe7j9nz3CHmmPskfbY+yx9jh7vD3BnmhPsifbU+yp9jR7uj3DnmnPsmfbc+y59jx7vr3AXmgvshfb8fYSO8Feaifay+wke7m9wl5pr7JX22vstfY6e729wd5ob7I321vsrfY2O2ZjNm4TNmlTNm0zNmtzNm8LtmhLtmwrtmprtm4btmlbtm07tmt7tm8HdmgDG9rIjuzt9g57p73L3m3vsffa++z99gH7oH3IPmwfsY/ax+zj9gn7pH3KPm2fsc/a5+zz9gX7on3Jvmxfsa/a1+zr9g37pn3Lvm3fse/a9+z79gP7of3Ifmw/sZ/az+zn9gv7pf3Kfm2/sd/a7+z39gf7o/3J/mx/sb/a3+zv9g/7p/3L/m3/sf/a/+w4J5mT3EnhpHRSOamdNE5aJ52T3sngZHQyOZmdLE5WJ5uT3cnh5HRyObmdPE5eJ5+T3yngFHQKOYWdIk5Rp5hT3CnhlHRKOaWdMk5Zp5xT3qngVHQqOZWdKk5Vp5pT3anh1HRqObWdOk5dp55T32ngNHQaOY2dJk5Tp5nT3GnhtHRaOa2dNk5bp53T3ungdHQ6OZ2dLk5Xp5vT3enh9HR6Ob2dPk5fp5/T3xngDHQGOYOdIc5QZ5gz3PnPGeGMdEY5o50xzlhnnDPemeBMdCY5k50pzlRnmjPdmeHMdGY5s505zlxnnjPfWeAsdBY5i514Z4mT4Cx1Ep1lTpKz3FnhrHRWOaudNc5aZ52z3tngbHQ2OZudLc5WZ5sTczAHdwiHdCiHdhiHdTiHdwRHdCRHdhRHdTRHdwzHdCzHdhzHdTzHdwIndIADHeREznZnh7PT2eXsdvY4e519zn7ngHPQOeQcdo44R51jznHnhHPSOeWcds44Z51zznnngnPRueRcdq44V51rznXnhnPTueXcdu44d517zn3ngfPQeeQ8dp44T51nznPnhfPSeeW8dt44b513znvng/PR+eR8dr44X51vznfnh/PT+eX8dv44f51/TpybzE3upnBTuqnc1G4aN62bzk3vZnAzupnczG4WN6ubzc3u5nBzurnc3G4eN6+bz83vFnALuoXcwm4Rt6hbzC3ulnBLuqXc0m4Zt6xbzi3vVnArupXcym4Vt6pbza3u1nBrurXc2m4dt65bz63vNnAbuo3cxm4Tt6nbzG3utnBbuq3c1m4bt63bzm3vdnA7up3czm4Xt6vbze3u9nB7ur3c3m4ft6/bz+3vDnAHuoPcwe4Qd6g7zB3u/ueOcEe6o9zR7hh3rDvOHe9OcCe6k9zJ7hR3qjvNne7OcGe6s9zZ7hx3rjvPne/GxcXFLXIXu/HuEjfBXeomusvcJHe5u8Jd6a5yV7tr3LXuOne9u8Hd6G5yN7tb3K3uNjfmYi7uEi7pUi7tMi7rci7vCq7oSq7sKq7qaq7uGq7pWq7tOq7req7vBm7oAhe6yI3c7e4Od6e7y93t7nH3uvvc/e4B96B7yD3sHnGPusfc4+4J96R7yj3tnnHPuufc8+4F96J7yb3sXnGvutfc6+4N96Z7y73t3nHvuvfc++4D96H7yH3sPnGfus/c5+4L96X7yn3tvnHfuu/c9+4H96P7yf3sfnG/ut/c7+4P96f7y/3t/nH/uv/cOC+Zl9xL4aX0UnmpvTReWi+dl97L4GX0MnmZvSxeVi+bl93L4eX0cnm5vTxeXi+fl98r4BX0CnmFvSJeUa+YV9wr4ZX0SnmlvTJeWa+cV96r4FX0KnmVvSpeVa+aV92r4dX0anm1vTpeXa+eV99r4DX0GnmNvSZeU6+Z19xr4bX0WnmtvTZeW6+d197r4HX0OnmdvS5eV6+b193r4fX0enm9vT5eX6+f198b4A30BnmDvSHeUG+YN9z7zxvhjfRGeaO9Md5Yb5w33pvgTfQmeZO9Kd5Ub5o33ZvhzfRmebO9Od5cb54331vgLfQWeYu9eG+Jl+At9RK9ZV6St9xb4a30VnmrvTXeWm+dt97b4G30NnmbvS3eVm+bF/MwD/cIj/Qoj/YYj/U4j/cET/QkT/YUT/U0T/cMz/Qsz/Ycz/U8z/cCL/SABz3kRd52b4e309vl7fb2eHu9fd5+74B30DvkHfaOeEe9Y95x74R30jvlnfbOeGe9c95574J30bvkXfaueFe9a95174Z307vl3fbueHe9e95974H30HvkPfaeeE+9Z95z74X30nvlvfbeeG+9d95774P30fvkffa+eF+9b95374f30/vl/fb+eH+9f16cn8xP7qfwU/qp/NR+Gj+tn85P72fwM/qZ/Mx+Fj+rn83P7ufwc/q5/Nx+Hj+vn8/P7xfwC/qF/MJ+Eb+oX8wv7pfwS/ql/NJ+Gb+sX84v71fwK/qV/Mp+Fb+qX82v7tfwa/q1/Np+Hb+uX8+v7zfwG/qN/MZ+E7+p38xv7rfwW/qt/NZ+G7+t385v73fwO/qd/M5+F7+r383v7vfwe/q9/N5+H7+v38/v7w/wB/qD/MH+EH+oP8wf7v/nj/BH+qP80f4Yf6w/zh/vT/An+pP8yf4Uf6o/zZ/uz/Bn+rP82f4cf64/z5/vL/AX+ov8xX68v8RP8Jf6if4yP8lf7q/wV/qr/NX+Gn+tv85f72/wN/qb/M3+Fn+rv82P+ZiP+4RP+pRP+4zP+pzP+4Iv+pIv+4qv+pqv+4Zv+pZv+47v+p7v+4Ef+sCHPvIjf7u/w9/p7/J3+3v8vf4+f79/wD/oH/IP+0f8o/4x/7h/wj/pn/JP+2f8s/45/7x/wb/oX/Iv+1f8q/41/7p/w7/p3/Jv+3f8u/49/77/wH/oP/If+0/8p/4z/7n/wn/pv/Jf+2/8t/47/73/wf/of/I/+1/8r/43/7v/w//p//J/+3/8v/4/Py5IFiQPUgQpg1RB6iBNkDZIF6QPMgQZg0xB5iBLkDXIFmQPcgQ5g1xB7iBPkDfIF+QPCgQFg0JB4aBIUDQoFhQPSgQlg1JB6aBMUDYoF5QPKgQVg0pB5aBKUDWoFlQPagQ1g1pB7aBOUDeoF9QPGgQNg0ZB46BJ0DRoFjQPWgQtg1ZB66BN0DZoF7QPOgQdg05B56BL0DXoFnQPegQ9g15B76BP0DfoF/QPBgQDg0HB4GBIMDQYFgwP/gtGBCODUcHoYEwwNhgXjA8mBBODScHkYEowNZgWTA9mBDODWcHsYE4wN5gXzA8WBAuDRcHiID5YEiQES4PEYFmQFCwPVgQrg1XB6mBNsDZYF6wPNgQbg03B5mBLsDXYFsQCLMADIiADKqADJmADLuADIRADKZADJVADLdADIzADK7ADJ3ADL/CDIAgDEMAABVGwPdgR7Ax2BbuDPcHeYF+wPzgQHAwOBYeDI8HR4FhwPDgRnAxOBaeDM8HZ4FxwPrgQXAwuBZeDK8HV4FpwPbgR3AxuBbeDO8Hd4F5wP3gQPAweBY+DJ8HT4FnwPHgRvAxeBa+DN8Hb4F3wPvgQfAw+BZ+DL8HX4FvwPfgR/Ax+Bb+DP8Hf4F8QFyYLk4cpwpRhqjB1mCZMG6YL04cZwoxhpjBzmCXMGmYLs4c5wpxhrjB3mCfMG+YL84cFwoJhobBwWCQsGhYLi4clwpJhqbB0WCYsG5YLy4cVwophpbByWCWsGlYLq4c1wpphrbB2WCesG9YL64cNwoZho7Bx2CRsGjYLm4ctwpZhq7B12CZsG7YL24cdwo5hp7Bz2CXsGnYLu4c9wp5hr7B32CfsG/YL+4cDwoHhoHBwOCQcGg4Lh4f/hSPCkeGocHQ4JhwbjgvHhxPCieGkcHI4JZwaTgunhzPCmeGscHY4J5wbzgvnhwvCheGicHEYHy4JE8KlYWK4LEwKl4crwpXhqnB1uCZcG64L14cbwo3hpnBzuCXcGm4LYyEW4iERkiEV0iETsiEX8qEQiqEUyqESqqEW6qERmqEV2qETuqEX+mEQhiEIYYjCKNwe7gh3hrvC3eGecG+4L9wfHggPhofCw+GR8Gh4LDwenghPhqfC0+GZ8Gx4LjwfXggvhpfCy+GV8Gp4Lbwe3ghvhrfC2+Gd8G54L7wfPggfho/Cx+GT8Gn4LHwevghfhq/C1+Gb8G34Lnwffgg/hp/Cz+GX8Gv4Lfwe/gh/hr/C3+Gf8G/4L4wDyUBykAKkBKlAapAGpAXpQHqQAWQEmUBmkAVkBdlAdpAD5AS5QG6QB+QF+UB+UAAUBIVAYVAEFAXFQHFQApQEpUBpUAaUBeVAeVABVASVQGVQBVQF1UB1UAPUBLVAbVAH1AX1QH3QADQEjUBj0AQ0Bc1Ac9ACtAStQGvQBrQF7UB70AF0BJ1AZ9AFdAXdQHfQA/QEvUBv0Af0Bf1AfzAADASDwGAwBAwFw8Bw8B8YAUaCUWA0GAPGgnFgPJgAJoJJYDKYAqaCaWA6mAFmgllgNpgD5oJ5YD5YABaCRWAxiAdLQAJYChLBMpAEloMVYCVYBVaDNWAtWAfWgw1gI9gENoMtYCvYBmIAAzggAAkoQAMGsIADPBCACCQgAwWoQAM6MIAJLGADB7jAAz4IQAgAgACBCGwHO8BOsAvsBnvAXrAP7AcHwEFwCBwGR8BRcAwcByfASXAKnAZnwFlwDpwHF8BFcAlcBlfAVXANXAc3wE1wC9wGd8BdcA/cBw/AQ/AIPAZPwFPwDDwHL8BL8Aq8Bm/AW/AOvAcfwEfwCXwGX8BX8A18Bz/AT/AL/AZ/wF/wD8TBZDA5TAFTwlQwNUwD08J0MD3MADPCTDAzzAKzwmwwO8wBc8JcMDfMA/PCfDA/LAALwkKwMCwCi8JisDgsAUvCUrA0LAPLwnKwPKwAK8JKsDKsAqvCarA6rAFrwlqwNqwD68J6sD5sABvCRrAxbAKbwmawOWwBW8JWsDVsA9vCdrA97AA7wk6wM+wCu8JusDvsAXvCXrA37AP7wn6wPxwAB8JBcDAcAofCYXA4/A+OgCPhKDgajoFj4Tg4Hk6AE+EkOBlOgVPhNDgdzoAz4Sw4G86Bc+E8OB8ugAvhIrgYxsMlMAEuhYlwGUyCy+EKuBKugqvhGrgWroPr4Qa4EW6Cm+EWuBVugzGIQRwSkIQUpCEDWchBHgpQhBKUoQJVqEEdGtCEFrShA13oQR8GMIQAQohgBLfDHXAn3AV3wz1wL9wH98MD8CA8BA/DI/AoPAaPwxPwJDwFT8Mz8Cw8B8/DC/AivAQvwyvwKrwGr8Mb8Ca8BW/DO/AuvAfvwwfwIXwEH8Mn8Cl8Bp/DF/AlfAVfwzfwLXwH38MP8CP8BD/DL/Ar/Aa/wx/wJ/wFf8M/8C/8B+NQMpQcpUApUSqUGqVBaVE6lB5lQBlRJpQZZUFZUTaUHeVAOVEulBvlQXlRPpQfFUAFUSFUGBVBRVExVByVQCVRKVQalUFlUTlUHlVAFVElVBlVQVVRNVQd1UA1US1UG9VBdVE9VB81QA1RI9QYNUFNUTPUHLVALVEr1Bq1QW1RO9QedUAdUSfUGXVBXVE31B31QD1RL9Qb9UF9UT/UHw1AA9EgNBgNQUPRMDQc/YdGoJFoFBqNxqCxaBwajyagiWgSmoymoKloGpqOZqCZaBaajeaguWgemo8WoIVoEVqM4tESlICWokS0DCWh5WgFWolWodVoDVqL1qH1aAPaiDahzWgL2oq2oRjCEI4IRCIK0YhBLOIQjwQkIgnJSEEq0pCODGQiC9nIQS7ykI8CFCKAIEIoQtvRDrQT7UK70R60F+1D+9EBdBAdQofREXQUHUPH0Ql0Ep1Cp9EZdBadQ+fRBXQRXUKX0RV0FV1D19ENdBPdQrfRHXQX3UP30QP0ED1Cj9ET9BQ9Q8/RC/QSvUKv0Rv0Fr1D79EH9BF9Qp/RF/QVfUPf0Q/0E/1Cv9Ef9Bf9Q3FRsih5lCJKGaWKUkdporRRuih9lCHKGGWKMkdZoqxRtih7lCPKGeWKckd5orxRvih/VCAqGBWKCkdFoqJRsah4VCIqGZWKSkdlorJRuah8VCGqGFWKKkdVoqpRtah6VCOqGdWKakd1orpRvah+1CBqGDWKGkdNoqZRs6h51CJqGbWKWkdtorZRu6h91CHqGHWKOkddoq5Rt6h71CPqGfWKekd9or5Rv6h/NCAaGA2KBkdDoqHRsGh49F80IhoZjYpGR2OisdG4aHw0IZoYTYomR1OiqdG0aHo0I5oZzYpmR3OiudG8aH60IFoYLYoWR/HRkighWholRsuipGh5tCJaGa2KVkdrorXRumh9tCHaGG2KNkdboq3RtigWYREeEREZUREdMREbcREfCZEYSZEcKZEaaZEeGZEZWZEdOZEbeZEfBVEYgQhGKIqi7f8jAB4A81YCAAB367p1tjrrzbZt27Zt27Zt849tJ3eXzLZtvC+Gx4gYGaNidIyJsTEuxseEmBiTYnJMiakxLabHjJgZs2J2zIm5MS/mx4IYiMEYioWxKHY9diN2M3Yrdjt2J3Y3di92P/Yg9jD2KPY49iT2NPYs9jz2IvYy9ir2OvYm9jb2LvY+9iH2MfYp9jn2JfY19i32PfYj9jP2K/Y79if2N/YvFoclw5Jj8VgKLAFLiaXCErHUWBosLZYOS49lwDJimbDMWBYsK5YNy47lwHJiubDcWBKWB8uL5cPyYwWwglghrDBWBCuKFcP+w4pjJbCSWCmsNFYGK4uVw8pjFbCKWCWsMlYFq4pVw6pjNbCaWC2sNlYHq4vVw+pjDbCGWCOsMdYEa4o1w5pjLbCWWCusNdYGa4u1w9pjHbCOWCesM9YF64p1w7pjPbCeWC+sN9YH64v1w/pjA7CB2CBsMDYEG4oNw4ZjI7CR2ChsNDYGG4uNw8ZjE7CJ2CRsMjYFm4pNw6ZjM7CZ2CxsNjYHm4vNw+ZjC7CF2CJsMbYEW4otw5ZjK7CV2CpsNbYGW4utw9ZjG7CN2CZsM7YF24ptw7ZjO7Cd2C5sN7YH24vtw/ZjB7CD2CHsMHYEO4odw45jJ7CT2CnsNHYGO4udw85jF7CL2CXsMnYFu4pdw2IYhuEYgZEYhdEYg7EYh/GYgImYhMmYgqmYhumYgZmYhdmYg7mYh/lYgAEMYggLsQi7jt3AbmK3sNvYHewudg+7jz3AHmKPsMfYE+wp9gx7jr3AXmKvsNfYG+wt9g57j33APmKfsM/YF+wr9g37jv3AfmK/sN/YH+wv9g+Lw5PhyfF4PAWegKfEU+GJeGo8DZ4WT4enxzPgGfFMeGY8C54Vz4Znx3PgOfFceG48Cc+D58Xz4fnxAnhBvBBeGC+CF8WL4f/hxfESeEm8FF4aL4OXxcvh5fEKeEW8El4Zr4JXxavh1fEaeE28Fl4br4PXxevh9fEGeEO8Ed4Yb4I3xZvhzfEWeEu8Fd4ab4O3xdvh7fEOeEe8E94Z74J3xbvh3fEeeE+8F94b74P3xfvh/fEB+EB8ED4YH4IPxYfhw/ER+Eh8FD4aH4OPxcfh4/EJ+ER8Ej4Zn4JPxafh0/EZ+Ex8Fj4bn4PPxefh8/EF+EJ8Eb4YX4IvxZfhy/EV+Ep8Fb4aX4Ovxdfh6/EN+EZ8E74Z34Jvxbfh2/Ed+E58F74b34Pvxffh+/ED+EH8EH4YP4IfxY/hx/ET+En8FH4aP4Ofxc/h5/EL+EX8En4Zv4Jfxa/hMRzDcZzASZzCaZzBWZzDeVzARVzCZVzBVVzDddzATdzCbdzBXdzDfTzAAQ5xhId4hF/Hb+A38Vv4bfwOfhe/h9/HH+AP8Uf4Y/wJ/hR/hj/HX+Av8Vf4a/wN/hZ/h7/HP+Af8U/4Z/wL/hX/hn/Hf+A/8V/4b/wP/hf/h8cRyYjkRDyRgkggUhKpiEQiNZGGSEukI9ITGYiMRCYiM5GFyEpkI7ITOYicRC4iN5FE5CHyEvmI/EQBoiBRiChMFCGKEsWI/4jiRAmiJFGKKE2UIcoS5YjyRAWiIlGJqExUIaoS1YjqRA2iJlGLqE3UIeoS9Yj6RAOiIdGIaEw0IZoSzYjmRAuiJdGKaE20IdoS7Yj2RAeiI9GJ6Ex0IboS3YjuRA+iJ9GL6E30IfoS/Yj+xABiIDGIGEwMIYYSw4jhxAhiJDGKGE2MIcYS44jxxARiIjGJmExMIaYS04jpxAxiJjGLmE3MIeYS84j5xAJiIbGIWEwsIZYSy4jlxApiJbGKWE2sIdYS64j1xAZiI7GJ2ExsIbYS24jtxA5iJ7GL2E3sIfYS+4j9xAHiIHGIOEwcIY4Sx4jjxAniJHGKOE2cIc4S54jzxAXiInGJuExcIa4S14gYgRE4QRAkQRE0wRAswRE8IRAiIREyoRAqoRE6YRAmYRE24RAu4RE+ERCAgAQiQiIirhM3iJvELeI2cYe4S9wj7hMPiIfEI+Ix8YR4SjwjnhMviJfEK+I18YZ4S7wj3hMfiI/EJ+Iz8YX4SnwjvhM/iJ/EL+I38Yf4S/wj4shkZHIynkxBJpApyVRkIpmaTEOmJdOR6ckMZEYyE5mZzEJmJbOR2ckcZE4yF5mbTCLzkHnJfGR+sgBZkCxEFiaLkEXJYuR/ZHGyBFmSLEWWJsuQZclyZHmyAlmRrERWJquQVclqZHWyBlmTrEXWJuuQdcl6ZH2yAdmQbEQ2JpuQTclmZHOyBdmSbEW2JtuQbcl2ZHuyA9mR7ER2JruQXcluZHeyB9mT7EX2JvuQfcl+ZH9yADmQHEQOJoeQQ8lh5HByBDmSHEWOJseQY8lx5HhyAjmRnEROJqeQU8lp5HRyBjmTnEXOJueQc8l55HxyAbmQXEQuJpeQS8ll5HJyBbmSTCJXk2vIteQ6cj25gdxIbiI3k1vIreQ2cju5g9xJ7iJ3k3vIveQ+cj95gDxIHiIPk0fIo+Qx8jh5gjxJniJPk2fIs+Q58jx5gbxIXiIvk1fIq+Q1MkZiJE4SJElSJE0yJEtyJE8KpEhKpEwqpEpqpE4apElapE06pEt6pE8GJCAhiciQjMjr5A3yJnmLvE3eIe+S98j75APyIfmIfEw+IZ+Sz8jn5AvyJfmKfE2+Id+S78j35AfyI/mJ/Ex+Ib+S38jv5A/yJ/mL/E3+If+S/8g4KhmVnIqnUlAJVEoqFZVIpabSUGmpdFR6KgOVkcpEZaayUFmpbFR2KgeVk8pF5aaSqDxUXioflZ8qQBWkClGFqSJUUaoY9R9VnCpBlaRKUaWpMlRZqhxVnqpAVaQqUZWpKlRVqhpVnapB1aRqUbWpOlRdqh5Vn2pANaQaUY2pJlRTqhnVnGpBtaRaUa2pNlRbqh3VnupAdaQ6UZ2pLlRXqhvVnepB9aR6Ub2pPlRfqh/VnxpADaQGUYOpIdRQahg1nBpBjaRGUaOpMdRYahw1nppATaQmUZOpKdRUaho1nZpBzaRmUbOpOdRcah41n1pALaQWUYupJdRSahm1nFpBraRWUaupNdRaah21ntpAbaQ2UZupLdRWahu1ndpB7aR2UbupPdReah+1nzpAHaQOUYepI9RR6hh1nDpBnaROUaepM9RZ6hx1nrpAXaQuUZepK9RV6hoVozAKpwiKpCiKphiKpTiKpwRKpCRKphRKpTRKpwzKpCzKphzKpTzKpwIKUJBCVEhF1HXqBnWTukXdpu5Qd6l71H3qAfWQekQ9pp5QT6ln1HPqBfWSekW9pt5Qb6l31HvqA/WR+kR9pr5QX6lv1HfqB/WT+kX9pv5Qf6l/VBydjE5Ox9Mp6AQ6JZ2KTqRT02notHQ6Oj2dgc5IZ6Iz01norHQ2Ojudg85J56Jz00l0HjovnY/OTxegC9KF6MJ0EbooXYz+jy5Ol6BL0qXo0nQZuixdji5PV6Ar0pXoynQVuipdja5O16Br0rXo2nQdui5dj65PN6Ab0o3oxnQTuindjG5Ot6Bb0q3o1nQbui3djm5Pd6A70p3oznQXuivdje5O96B70r3o3nQfui/dj+5PD6AH0oPowfQQeig9jB5Oj6BH0qPo0fQYeiw9jh5PT6An0pPoyfQUeio9jZ5Oz6Bn0rPo2fQcei49j55PL6AX0ovoxfQSeim9jF5Or6BX0qvo1fQaei29jl5Pb6A30pvozfQWeiu9jd5O76B30rvo3fQeei+9j95PH6AP0ofow/QR+igdH3ecPkGfpE/Rp+kz9Fn6HH2evkBfpC/Rl+kr9FX6Gh2jMRqnCZqkKZqmGZqlOZqnBVqkJVqmFVqlNVqnDdqkLdqmHdqlPdqnAxrQkEZ0SEf0dfoGfZO+Rd+m79B36Xv0ffoB/ZB+RD+mn9BP6Wf0c/oF/ZJ+Rb+m39Bv6Xf0e/oD/ZH+RH+mv9Bf6W/0d/oH/ZP+Rf+m/9B/6X90HJOMSc7EMymYBCYlk4pJZFIzaZi0TDomPZOBychkYjIzWZisTDYmO5ODycnkYnIzSUweJi+Tj8nPFGAKMoWYwkwRpihTjPmPKc6UYEoypZjSTBmmLFOOKc9UYCoylZjKTBWmKlONqc7UYGoytZjaTB2mLlOPqc80YBoyjZjGTBOmKdOMac60YFoyrZjWTBumLdOOac90YDoynZjOTBemK9ON6c70YHoyvZjeTB+mL9OP6c8MYAYyg5jBzBBmKDOMGc6MYEYyo5jRzBhmLDOOGc9MYCYyk5jJzBRmKjONmc7MYGYys5jZzBxmLjOPmc8sYBYyi5jFzBJmKbOMWc6sYFYyq5jVzBpmLbOOWc9sYDYym5jNzBZmK7ON2c7sYHYyu5jdzB5mL7OP2c8cYA4yh5jDzBHmKHOMOc6cYE4yp5jTzBnmLHOOOc9cYC4yl5jLzBXmKnONiTEYgzMEQzIUQzMMwzIcwzMCIzISIzMKozIaozMGYzIWYzMO4zIe4zMBAxjIICZkIuY6c4O5ydxibjN3mLvMPeY+84B5yDxiHjNPmKfMM+Y584J5ybxiXjNvmLfMO+Y984H5yHxiPjNfmK/MN+Y784P5yfxifjN/mL/MPyaOTcYmZ+PZFGwCm5JNxSayqdk0bFo2HZuezcBmZDOxmdksbFY2G5udzcHmZHOxudkkNg+bl83H5mcLsAXZQmxhtghblC3G/scWZ0uwJdlSbGm2DFuWLceWZyuwFdlKbGW2CluVrcZWZ2uwNdlabG22DluXrcfWZxuwDdlGbGO2CduUbcY2Z1uwLdlWbGu2DduWbce2ZzuwHdlObGe2C9uV7cZ2Z3uwPdlebG+2D9uX7cf2ZwewA9lB7GB2CDuUHcYOZ0ewI9lR7Gh2DDuWHceOZyewE9lJ7GR2CjuVncZOZ2ewM9lZ7Gx2DjuXncfOZxewC9lF7GJ2CbuUXcYuZ1ewK9lV7Gp2DbuWXceuZzewG9lN7GZ2C7uV3cZuZ3ewO9ld7G52D7uX3cfuZw+wB9lD7GH2CHuUPcYeZ0+wJ9lT7Gn2DHuWPceeZy+wF9lL7GX2CnuVvcbGWIzFWYIlWYqlWYZlWY7lWYEVWYmVWYVVWY3VWYM1WYu1WYd1WY/12YAFLGQRG7IRe529wd5kb7G32TvsXfYee599wD5kH7GP2SfsU/YZ+5x9wb5kX7Gv2TfsW/Yd+579wH5kP7Gf2S/sV/Yb+539wf5kf7G/2T/sX/YfG8cl45Jz8VwKLoFLyaXiErnUXBouLZeOS89l4DJymbjMXBYuK5eNy87l4HJyubjcXBKXh8vL5ePycwW4glwhrjBXhCvKFeP+44pzJbiSXCmuNFeGK8uV48pzFbiKXCWuMleFq8pV46pzNbiaXC2uNleHq8vV4+pzDbiGXCOuMdeEa8o145pzLbiWXCuuNdeGa8u149pzHbiOXCeuM9eF68p147pzPbieXC+uN9eH68v14/pzA7iB3CBuMDeEG8oN44ZzI7iR3ChuNDeGG8uN48ZzE7iJ3CRuMjeFm8pN46ZzM7iZ3CxuNjeHm8vN4+ZzC7iF3CJuMbeEW8ot45ZzK7iV3CpuNbeGW8ut49ZzG7iN3CZuM7eF28pt47ZzO7id3C5uN7eH28vt4/ZzB7iD3CHuMHeEO8od445zJ7iT3CnuNHeGO8ud485zF7iL3CXuMneFu8pd42IcxuEcwZEcxdEcw7Ecx/GcwImcxMmcwqmcxumcwZmcxdmcw7mcx/lcwAEOcogLuYi7zt3gbnK3uNvcHe4ud4+7zz3gHnKPuMfcE+4p94x7zr3gXnKvuNfcG+4t9457z33gPnKfuM/cF+4r9437zv3gfnK/uN/cH+4v94+L45Pxyfl4PgWfwKfkU/GJfGo+DZ+WT8en5zPwGflMfGY+C5+Vz8Zn53PwOflcfG4+ic/D5+Xz8fn5AnxBvhBfmC/CF+WL8f/xxfkSfEm+FF+aL8OX5cvx5fkKfEW+El+Zr8JX5avx1fkafE2+Fl+br8PX5evx9fkGfEO+Ed+Yb8I35ZvxzfkWfEu+Fd+ab8O35dvx7fkOfEe+E9+Z78J35bvx3fkefE++F9+b78P35fvx/fkB/EB+ED+YH8IP5Yfxw/kR/Eh+FD+aH8OP5cfx4/kJ/ER+Ej+Zn8JP5afx0/kZ/Ex+Fj+bn8PP5efx8/kF/EJ+Eb+YX8Iv5Zfxy/kV/Ep+Fb+aX8Ov5dfx6/kN/EZ+E7+Z38Jv5bfx2/kd/E5+F7+b38Pv5ffx+/kD/EH+EH+YP8If5Y/xx/kT/En+FH+aP8Of5c/x5/kL/EX+En+Zv8Jf5a/xMR7jcZ7gSZ7iaZ7hWZ7jeV7gRV7iZV7hVV7jdd7gTd7ibd7hXd7jfT7gAQ95xId8xF/nb/A3+Vv8bf4Of5e/x9/nH/AP+Uf8Y/4J/5R/xj/nX/Av+Vf8a/4N/5Z/x7/nP/Af+U/8Z/4L/5X/xn/nf/A/+V/8b/4P/5f/x8cJyYTkQryQQkgQUgqphEQhtZBGSCukE9ILGYSMQiYhs5BFyCpkE7ILOYScQi4ht5Ak5BHyCvmE/EIBoaBQSCgsFBGKCsWE/4TiQgmhpFBKKC2UEcoK5YTyQgWholBJqCxUEaoK1YTqQg2hplBLqC3UEeoK9YT6QgOhodBIaCw0EZoKzYTmQguhpdBKaC20EdoK7YT2Qgeho9BJ6Cx0EboK3YTuQg+hp9BL6C30EfoK/YT+wgBhoDBIGCwMEYYKw4ThwghhpDBKGC2MEcYK44TxwgRhojBJmCxMEaYK04TpwgxhpjBLmC3MEeYK84T5wgJhobBIWCwsEZYKy4TlwgphpbBKWC2sEdYK64T1wgZho7BJ2CxsEbYK24Ttwg5hp7BL2C3sEfYK+4T9wgHhoHBIOCwcEY4Kx4TjwgnhpHBKOC2cEc4K54TzwgXhonBJuCxcEa4K14SYgAm4QAikQAm0wAiswAm8IAiiIAmyoAiqoAm6YAimYAm24Aiu4Am+EAhAgAISQiESrgs3hJvCLeG2cEe4K9wT7gsPhIfCI+Gx8ER4KjwTngsvhJfCK+G18EZ4K7wT3gsfhI/CJ+Gz8EX4KnwTvgs/hJ/CL+G38Ef4K/wT4sRkYnIxXkwhJogpxVRiophaTCOmFdOJ6cUMYkYxk5hZzCJmFbOJ2cUcYk4xl5hbTBLziHnFfGJ+sYBYUCwkFhaLiEXFYuJ/YnGxhFhSLCWWFsuIZcVyYnmxglhRrCRWFquIVcVqYnWxhlhTrCXWFuuIdcV6Yn2xgdhQbCQ2FpuITcVmYnOxhdhSbCW2FtuIbcV2Ynuxg9hR7CR2FruIXcVuYnexh9hT7CX2FvuIfcV+Yn9xgDhQHCQOFoeIQ8Vh4nBxhDhSHCWOFseIY8Vx4nhxgjhRnCROFqeIU8Vp4nRxhjhTnCXOFueIc8V54nxxgbhQXCQuFpeIS8Vl4nJxhbhSXCWuFteIa8V14npxg7hR3CRuFreIW8Vt4nZxh7hT3CXuFveIe8V94n7xgHhQPCQeFo+IR8Vj4nHxhHhSPCWeFs+IZ8Vz4nnxgnhRvCReFq+IV8VrYkzERFwkRFKkRFpkRFbkRF4URFGURFlURFXURF00RFO0RFt0RFf0RF8MRCBCEYmhGInXxRviTfGWeFu8I94V74n3xQfiQ/GR+Fh8Ij4Vn4nPxRfiS/GV+Fp8I74V34nvxQ/iR/GT+Fn8In4Vv4nfxR/iT/GX+Fv8I/4V/4lxUjIpuRQvpZASpJRSKilRSi2lkdJK6aT0UgYpo5RJyixlkbJK2aTsUg4pp5RLyi0lSXmkvFI+Kb9UQCooFZIKS0WkolIx6T+puFRCKimVkkpLZaSyUjmpvFRBqihVkipLVaSqUjWpulRDqinVkmpLdaS6Uj2pvtRAaig1khpLTaSmUjOpudRCaim1klpLbaS2UjupvdRB6ih1kjpLXaSuUjepu9RD6in1knpLfaS+Uj+pvzRAGigNkgZLQ6Sh0jBpuDRCGimNkkZLY6Sx0jhpvDRBmihNkiZLU6Sp0jRpujRDminNkmZLc6S50jxpvrRAWigtkhZLS6Sl0jJpubRCWimtklZLa6S10jppvbRB2ihtkjZLW6St0jZpu7RD2intknZLe6S90j5pv3RAOigdkg5LR6Sj0jHpuHRCOimdkk5LZ6Sz0jnpvHRBuihdki5LV6Sr0jUpJmESLhESKVESLTESK3ESLwmSKEmSLCmSKmmSLhmSKVmSLTmSK3mSLwUSkKCEpFCKpOvSDemmdEu6Ld2R7kr3pPvSA+mh9Eh6LD2RnkrPpOfSC+ml9Ep6Lb2R3krvpPfSB+mj9En6LH2RvkrfpO/SD+mn9Ev6Lf2R/kr/pDg5mZxcjpdTyAlySjmVnCinltPIaeV0cno5g5xRziRnlrPIWeVscnY5h5xTziXnlpPkPHJeOZ+cXy4gF5QLyYXlInJRuZj8n1xcLiGXlEvJpeUyclm5nFxeriBXlCvJleUqclW5mlxdriHXlGvJteU6cl25nlxfbiA3lBvJjeUmclO5mdxcbiG3lFvJreU2clu5ndxe7iB3lDvJneUucle5m9xd7iH3lHvJveU+cl+5n9xfHiAPlAfJg+Uh8lB5mDxcHiGPlEfJo+Ux8lh5nDxeniBPlCfJk+Up8lR5mjxdniHPlGfJs+U58lx5njxfXiAvlBfJi+Ul8lJ5mbxcXiGvlFfJq+U18lp5nbxe3iBvlDfJm+Ut8lZ5m7xd3iHvlHfJu+U98l55n7xfPiAflA/Jh+Uj8lH5mHxcPiGflE/Jp+Uz8ln5nHxeviBflC/Jl+Ur8lX5mhyTMRmXCZmUKZmWGZmVOZmXBVmUJVmWFVmVNVmXDdmULdmWHdmVPdmXAxnIUEZyKEfydfmGfFO+Jd+W78h35XvyffmB/FB+JD+Wn8hP5Wfyc/mF/FJ+Jb+W38hv5Xfye/mD/FH+JH+Wv8hf5W/yd/mH/FP+Jf+W/8h/5X9ynJJMSa7EKymUBCWlkkpJVFIraZS0SjolvZJByahkUjIrWZSsSjYlu5JDyankUnIrSUoeJa+ST8mvFFAKKoWUwkoRpahSTPlPKa6UUEoqpZTSShmlrFJOKa9UUCoqlZTKShWlqlJNqa7UUGoqtZTaSh2lrlJPqa80UBoqjZTGShOlqdJMaa60UFoqrZTWShulrdJOaa90UDoqnZTOShelq9JN6a70UHoqvZTeSh+lr9JP6a8MUAYqg5TByhBlqDJMGa6MUEYqo5TRyhhlrDJOGa9MUCYqk5TJyhRlqjJNma7MUGYqs5TZyhxlrjJPma8sUBYqi5TFyhJlqbJMWa6sUFYqq5TVyhplrbJOWa9sUDYqm5TNyhZlq7JN2a7sUHYqu5Tdyh5lr7JP2a8cUA4qh5TDyhHlqHJMOa6cUE4qp5TTyhnlrHJOOa9cUC4ql5TLyhXlqnJNiSmYgiuEQiqUQiuMwiqcwiuCIiqSIiuKoiqaoiuGYiqWYiuO4iqe4iuBAhSoICVUIuW6ckO5qdxSbit3lLvKPeW+8kB5qDxSHitPlKfKM+W58kJ5qbxSXitvlLfKO+W98kH5qHxSPitflK/KN+W78kP5qfxSfit/lL/KPyVOTaYmV+PVFGqCmlJNpSaqqdU0alo1nZpezaBmVDOpmdUsalY1m5pdzaHmVHOpudUkNY+aV82n5lcLqAXVQmphtYhaVC2m/qcWV0uoJdVSamm1jFpWLaeWVyuoFdVKamW1ilpVraZWV2uoNdVaam21jlpXrafWVxuoDdVGamO1idpUbaY2V1uoLdVWamu1jdpWbae2VzuoHdVOame1i9pV7aZ2V3uoPdVeam+1j9pX7af2VweoA9VB6mB1iDpUHabGqyPUkeoodbQ6Rh2rjlPHqxPUieokdbI6RZ2qTlOnqzPUmeosdbY6R52rzlPnqwvUheoidbG6RF2qLlOXqyvUleoqdbW6Rl2rrlPXqxvUjeomdbO6Rd2qblO3qzvUneoudbe6R92r7lP3qwfUg+oh9bB6RD2qHlOPqyfUk+op9bR6Rj2rnlPPqxfUi+ol9bJ6Rb2qXlNjKqbiKqGSKqXSKqOyKqfyqqCKqqTKqqKqqqbqqqGaqqXaqqO6qqf6aqACFapIDdVIva7eUG+qt9Tb6h31rnpPva8+UB+qj9TH6hP1qfpMfa6+UF+qr9TX6hv1rfpOfa9+UD+qn9TP6hf1q/pN/a7+UH+qv9Tf6h/1r/pPjdOSacm1eC2FlqCl1FJpiVpqLY2WVkunpdcyaBm1TFpmLYuWVcumZddyaDm1XFpuLUnLo+XV8mn5tQJaQa2QVlgrohXVimn/acW1ElpJrZRWWiujldXKaeW1ClpFrZJWWauiVdWqadW1GlpNrZZWW6uj1dXqafW1BlpDrZHWWGuiNdWaac21FlpLrZXWWmujtdXaae21DlpHrZPWWeuiddW6ad21HlpPrZfWW+uj9dX6af21AdpAbZA2WBuiDdWGacO1EdpIbZQ2WhujjdXGaeO1CdpEbZI2WZuiTdWmadO1GdpMbZY2W5ujzdXmafO1BdpCbZG2WFuiLdWWacu1FdpKbZW2WlujrdXWaeu1DdpGbZO2WduibdW2adu1HdpObZe2W9uj7dX2afu1A9pB7ZB2WDuiHdWOace1E9pJ7ZR2WjujndXOaee1C9pF7ZJ2WbuiXdWuaTEN03CN0EiN0miN0ViN03hN0ERN0mRN0VRN03TN0EzN0mzN0VzN03wt0IAGNaQlxsXFXdduaDe1W9pt7Y52V7un3dceaA+1R9pj7Yn2VHumPddeaC+1V9pr7Y32Vnunvdc+aB+1T9pn7Yv2Vfumfdd+aD+1X9pv7Y/2V/unxenJ9OR6vJ5CT9BT6qn0RD21nkZPq6fT0+sZ9Ix6Jj2znkXPqmfTs+s59Jx6Lj23nqTn0fPq+fT8egG9oF5IL6wX0YvqxfT/9OJ6Cb2kXkovrZfRy+rl9PJ6Bb2iXkmvrFfRq+rV9Op6Db2mXkuvrdfR6+r19Pp6A72h3khvrDfRm+rN9OZ6C72l3kpvrbfR2+rt9PZ6B72j3knvrHfRu+rd9O56D72n3kvvrffR++r99P76AH2gPkgfrA/Rh+rD9OH6CH2kPkofrY/Rx+rj9PH6BH2iPkmfrE/Rp+rT9On6DH2mPkufrc/R5+rz9Pn6An2hvkhfrC/Rl+rL9OX6Cn2lvkpfra/R1+rr9PX6Bn2jvknfrG/Rt+rb9O36Dn2nvkvfre/R9+r79P36Af2gfkg/rB/Rj+rH9OP6Cf2kfko/rZ/Rz+rn9PP6Bf2ifkm/rF/Rr+rX9JiO6bhO6KRO6bTO6KzO6bwu6KIu6bKu6Kqu6bpu6KZu6bbu6K7u6b4e6ECHOtJDPdKv6zf0m/ot/bZ+R7+r39Pv6w/0h/oj/bH+RH+qP9Of6y/0l/or/bX+Rn+rv9Pf6x/0j/on/bP+Rf+qf9O/6z/0n/ov/bf+R/+r/9PjjGRGciPeSGEkGCmNVEaikdpIY6Q10hnpjQxGRiOTkdnIYmQ1shnZjRxGTiOXkdtIMvIYeY18Rn6jgFHQKGQUNooYRY1ixn9GcaOEUdIoZZQ2yhhljXJGeaOCUdGoZFQ2qhhVjWpGdaOGUdOoZdQ26hh1jXpGfaOB0dBoZDQ2mhhNjWZGc6OF0dJoZbQ22hhtjXZGe6OD0dHoZHQ2uhhdjW5Gd6OH0dPoZfQ2+hh9jX5Gf2OAMdAYZAw2hhhDjWHGcGOEMdIYZYw2xhhjjXHGeGOCMdGYZEw2phhTjWnGdGOGMdOYZcw25hhzjXnGfGOBsdBYZCw2lhhLjWXGcmOFsdJYZaw21hhrjXXGemODsdHYZGw2thhbjW3GdmOHsdPYZew29hh7jX3GfuOAcdA4ZBw2jhhHjWPGceOEcdI4ZZw2zhhnjXPGeeOCcdG4ZFw2rhhXjWtGzMAM3CAM0qAM2mAM1uAM3hAM0ZAM2VAM1dAM3TAM07AM23AM1/AM3wgMYEADGaERGdeNG8ZN45Zx27hj3DXuGfeNB8ZD45Hx2HhiPDWeGc+NF8ZL45Xx2nhjvDXeGe+ND8ZH45Px2fhifDW+Gd+NH8ZP45fx2/hj/DX+GXFmMjO5GW+mMBPMlGYqM9FMbaYx05rpzPRmBjOjmcnMbGYxs5rZzOxmDjOnmcvMbSaZecy8Zj4zv1nALGgWMgubRcyiZjHzP7O4WcIsaZYyS5tlzLJmObO8WcGsaFYyK5tVzKpmNbO6WcOsadYya5t1zLpmPbO+2cBsaDYyG5tNzKZmM7O52cJsabYyW5ttzLZmO7O92cHsaHYyO5tdzK5mN7O72cPsafYye5t9zL5mP7O/OcAcaA4yB5tDzKHmMHO4OcIcaY4yR5tjzLHmOHO8OcGcaE4yJ5tTzKnmNHO6OcOcac4yZ5tzzLnmPHO+ucBcaC4yF5tLzKXmMnO5ucJcaa4yV5trzLXmOnO9ucHcaG4yN5tbzK3mNnO7ucPcae4yd5t7zL3mPnO/ecA8aB4yD5tHzKPmMfO4ecI8aZ4yT5tnzLPmOfO8ecG8aF4yL5tXzKvmNTNmYiZuEiZpUiZtMiZrciZvCqZoSqZsKqZqaqZuGqZpWqZtOqZreqZvBiYwoYnM0IzM6+YN86Z5y7xt3jHvmvfM++YD86H5yHxsPjGfms/M5+YL86X5ynxtvjHfmu/M9+YH86P5yfxsfjG/mt/M7+YP86f5y/xt/jH/mv/MOCuZldyKt1JYCVZKK5WVaKW20lhprXRWeiuDldHKZGW2slhZrWxWdiuHldPKZeW2kqw8Vl4rn5XfKmAVtApZha0iVlGrmPWfVdwqYZW0SlmlrTJWWaucVd6qYFW0KlmVrSpWVauaVd2qYdW0alm1rTpWXaueVd9qYDW0GlmNrSZWU6uZ1dxqYbW0WlmtrTZWW6ud1d7qYHW0OlmdrS5WV6ub1d3qYfW0elm9rT5WX6uf1d8aYA20BlmDrSHWUGuYNdwaYY20RlmjrTHWWGucNd6aYE20JlmTrSnWVGuaNd2aYc20ZlmzrTnWXGueNd9aYC20FlmLrSXWUmuZtdxaYa20VlmrrTXWWmudtd7aYG20NlmbrS3WVmubtd3aYe20dlm7rT3WXmuftd86YB20DlmHrSPWUeuYddw6YZ20TlmnrTPWWeucdd66YF20LlmXrSvWVeuaFbMwC7cIi7Qoi7YYi7U4i7cES7QkS7YUS7U0S7cMy7Qsy7Ycy7U8y7cCC1jQQlZoRdZ164Z107pl3bbuWHete9Z964H10HpkPbaeWE+tZ9Zz64X10nplvbbeWG+td9Z764P10fpkfba+WF+tb9Z364f10/pl/bb+WH+tf1acncxObsfbKewEO6Wdyk60U9tp7LR2Oju9ncHOaGeyM9tZ7Kx2Nju7ncPOaeeyc9tJdh47r53Pzm8XsAvahezCdhG7qF3M/s8ubpewS9ql7NJ2GbusXc4ub1ewK9qV7Mp2FbuqXc2ubtewa9q17Np2HbuuXc+ubzewG9qN7MZ2E7up3cxubrewW9qt7NZ2G7ut3c5ub3ewO9qd7M52F7ur3c3ubvewe9q97N52H7uv3c/ubw+wB9qD7MH2EHuoPcwebo+wR9qj7NH2GHusPc4eb0+wJ9qT7Mn2FHuqPc2ebs+wZ9qz7Nn2HHuuPc+eby+wF9qL7MX2Enupvcxebq+wV9qr7NX2Gnutvc5eb2+wN9qb7M32Fnurvc3ebu+wd9q77N32Hnuvvc/ebx+wD9qH7MP2Efuofcw+bp+wT9qn7NP2Gfusfc4+b1+wL9qX7Mv2Ffuqfc2O2ZiN24RN2pRN24zN2pzN24It2pIt24qt2pqt24Zt2pZt247t2p7t24ENbGgjO7Qj+7p9w75p37Jv23fsu/Y9+779wH5oP7If20/sp/Yz+7n9wn5pv7Jf22/st/Y7+739wf5of7I/21/sr/Y3+7v9w/5p/7J/23/sv/Y/O85J5iR34p0UToKT0knlJDqpnTROWiedk97J4GR0MjmZnSxOViebk93J4eR0cjm5nSQnj5PXyefkdwo4BZ1CTmGniFPUKeb85xR3SjglnVJOaaeMU9Yp55R3KjgVnUpOZaeKU9Wp5lR3ajg1nVpObaeOU9ep59R3GjgNnUZOY6eJ09Rp5jR3WjgtnVZOa6eN09Zp57R3OjgdnU5OZ6eL09Xp5nR3ejg9nV5Ob6eP09fp5/R3BjgDnUHOYGeIM9QZ5gx3RjgjnVHOaGeMM9YZ54x3JjgTnUnOZGeKM9WZ5kx3ZjgznVnObGeOM9eZ58x3FjgLnUXOYmeJs9RZ5ix3VjgrnVXOameNs9ZZ56x3NjgbnU3OZmeLs9XZ5mx3djg7nV3ObmePs9fZ5+x3DjgHnUPOYeeIc9Q55hx3TjgnnVPOaeeMc9Y555x3LjgXnUvOZeeKc9W55sQczMEdwiEdyqEdxmEdzuEdwREdyZEdxVEdzdEdwzEdy7Edx3Edz/GdwAEOdJATOpFz3bnh3HRuObedO85d555z33ngPHQeOY+dJ85T55nz3HnhvHReOa+dN85b553z3vngfHQ+OZ+dL85X55vz3fnh/HR+Ob+dP85f558T5yZzk7vxbgo3wU3ppnIT3dRuGjetm85N72ZwM7qZ3MxuFjerm83N7uZwc7q53NxukpvHzevmc/O7BdyCbiG3sFvELeoWcxPi4uJKuCXdUm5pt4xb1i3nlncruBXdSm5lt4pb1a3mVndruDXdWm5tt45b163n1ncbuA3dRm5jt4nb1G3mNndbuC3dVm5rt43b1m3ntnc7uB3dTm5nt4vb1e3mdnd7uD3dXm5vt4/b1+3n9ncHuAPdQe5gd4g71B3mDndHuCPdUe5od4w71h3njncnuBPdSe5kd4o71Z3mTndnuDPdWe5sd447153nzncXuAvdRe5id4m71F3mLndXuCvdVe5qd4271l3nrnc3uBvdTe5md4u71d3mbnd3uDvdXe5ud4+7193n7ncPuAfdQ+5h94h71D3mHndPuCfdU+5p94x71j3nnncvuBfdS+5l94p71b3mxlzMxV3CJV3KpV3GZV3O5V3BFV3JlV3FVV3N1V3DNV3LtV3HdV3P9d3ABS50kRu6kXvdveHedG+5t9077l33nnvffeA+dB+5j90n7lP3mfvcfeG+dF+5r9037lv3nfve/eB+dD+5n90v7lf3m/vd/eH+dH+5v90/7l/3nxvnJfOSe/FeCi/BS+ml8hK91F4aL62XzkvvZfAyepm8zF4WL6uXzcvu5fByerm83F6Sl8fL6+Xz8nsFvIJeIa+wV8Qr6hXz/vOKeyW8kl4pr7RXxivrlfPKexW8il4lr7JXxavqVfOqezW8ml4tr7ZXx6vr1fPqew28hl4jr7HXxGvqNfOaey28ll4rr7XXxmvrtfPaex28jl4nr7PXxevqdfO6ez28nl4vr7fXx+vr9fP6ewO8gd4gb7A3xBvqDfOGeyO8kd4ob7Q3xhvrjfPGexO8id4kb7I3xZvqTfOmezO8md4sb7Y3x5vrzfPmewu8hd4ib7G3xFvqLfOWeyu8ld4qb7W3xlvrrfPWexu8jd4mb7O3xdvqbfO2ezu8nd4ub7e3x9vr7fP2ewe8g94h77B3xDvqHfOOeye8k94p77R3xjvrnfPOexe8i94l77J3xbvqXfNiHubhHuGRHuXRHuOxHufxnuCJnuTJnuKpnubpnuGZnuXZnuO5nuf5XuABD3rIC73Iu+7d8G56t7zb3h3vrnfPu+898B56j7zH3hPvqffMe+698F56r7zX3hvvrffOe+998D56n7zP3hfvq/fN++798H56v7zf3h/vr/fPi/OT+cn9eD+Fn+Cn9FP5iX5qP42f1k/np/cz+Bn9TH5mP4uf1c/mZ/dz+Dn9XH5uP8nP4+f18/n5/QJ+Qb+QX9gv4hf1i/n/+cX9En5Jv5Rf2i/jl/XL+eX9Cn5Fv5Jf2a/iV/Wr+dX9Gn5Nv5Zf26/j1/Xr+fX9Bn5Dv5Hf2G/iN/Wb+c39Fn5Lv5Xf2m/jt/Xb+e39Dn5Hv5Pf2e/id/W7+d39Hn5Pv5ff2+/j9/X7+f39Af5Af5A/2B/iD/WH+cP9Ef5If5Q/2h/jj/XH+eP9Cf5Ef5I/2Z/iT/Wn+dP9Gf5Mf5Y/25/jz/Xn+fP9Bf5Cf5G/2F/iL/WX+cv9Ff5Kf5W/2l/jr/XX+ev9Df5Gf5O/2d/ib/W3+dv9Hf5Of5e/29/j7/X3+fv9A/5B/5B/2D/iH/WP+cf9E/5J/5R/2j/jn/XP+ef9C/5F/5J/2b/iX/Wv+TEf83Gf8Emf8mmf8Vmf83lf8EVf8mVf8VVf83Xf8E3f8m3f8V3f830/8IEPfeSHfuRf92/4N/1b/m3/jn/Xv+ff9x/4D/1H/mP/if/Uf+Y/91/4L/1X/mv/jf/Wf+e/9z/4H/1P/mf/i//V/+Z/93/4P/1f/m//j//X/+fHBcmC5EF8kCJICFIGqYLEIHWQJkgbpAvSBxmCjEGmIHOQJcgaZAuyBzmCnEGuIHeQFOQJ8gb5gvxBgaBgUCgoHBQJigbFgv+C4kGJoGRQKigdlAnKBuWC8kGFoGJQKagcVAmqBtWC6kGNoGZQK6gd1AnqBvWC+kGDoGHQKGgcNAmaBs2C5kGLoGXQKmgdtAnaBu2C9kGHoGPQKegcdAm6Bt2C7kGPoGfQK+gd9An6Bv2C/sGAYGAwKBgcDAmGBsOC4cGIYGQwKhgdjAnGBuOC8cGEYGIwKZgcTAmmBtOC6cGMYGYwK5gdzAnmBvOC+cGCYGGwKFgcLAmWBsuC5cGKYGWwKlgdrAnWBuuC9cGGYGOwKdgcbAm2BtuC7cGOYGewK9gd7An2BvuC/cGB4GBwKDgcHAmOBseC48GJ4GRwKjgdnAnOBueC88GF4GJwKbgcXAmuBteCWIAFeEAEZEAFdMAEbMAFfCAEYiAFcqAEaqAFemAEZmAFduAEbuAFfhAEIIABCsIgCq4HN4Kbwa3gdnAnuBvcC+4HD4KHwaPgcfAkeBo8C54HL4KXwavgdfAmeBu8C94HH4KPwafgc/Al+Bp8C74HP4Kfwa/gd/An+Bv8C+JAMpAcxIMUIAGkBKlAIkgN0oC0IB1IDzKAjCATyAyygKwgG8gOcoCcIBfIDZJAHpAX5AP5QQFQEBQChUERUBQUA/+B4qAEKAlKgdKgDCgLyoHyoAKoCCqByqAKqAqqgeqgBqgJaoHaoA6oC+qB+qABaAgagcagCWgKmoHmoAVoCVqB1qANaAvagfagA+gIOoHOoAvoCrqB7qAH6Al6gd6gD+gL+oH+YAAYCAaBwWAIGAqGgeFgBBgJRoHRYAwYC8aB8WACmAgmgclgCpgKpoHpYAaYCWaB2WAOmAvmgflgAVgIFoHFYAlYCpaB5WAFWAlWgdVgDVgL1oH1YAPYCDaBzWAL2Aq2ge1gB9gJdoHdYA/YC/aB/eAAOAgOgcPgCDgKjoHj4AQ4CU6B0+AMOAvOgfPgArgILoHL4Aq4Cq6BGMAADghAAgrQgAEs4AAPBCACCchAASrQgA4MYAIL2MABLvCADwIAAAQIhCAC18ENcBPcArfBHXAX3AP3wQPwEDwCj8ET8BQ8A8/BC/ASvAKvwRvwFrwD78EH8BF8Ap/BF/AVfAPfwQ/wE/wCv8Ef8Bf8A3EwGUwO42EKmABTwlQwEaaGaWBamA6mhxlgRpgJZoZZYFaYDWaHOWBOmAvmhkkwD8wL88H8sAAsCAvBwrAILAqLwf9gcVgCloSlYGlYBpaF5WB5WAFWhJVgZVgFVoXVYHVYA9aEtWBtWAfWhfVgfdgANoSNYGPYBDaFzWBz2AK2hK1ga9gGtoXtYHvYAXaEnWBn2AV2hd1gd9gD9oS9YG/YB/aF/WB/OAAOhIPgYDgEDoXD4HA4Ao6Eo+BoOAaOhePgeDgBToST4GQ4BU6F0+B0OAPOhLPgbDgHzoXz4Hy4AC6Ei+BiuAQuhcvgcrgCroSr4Gq4Bq6F6+B6uAFuhJvgZrgFboXb4Ha4A+6Eu+BuuAfuhfvgfngAHoSH4GF4BB6Fx+BxeAKehKfgaXgGnoXn4Hl4AV6El+BleAVehddgDGIQhwQkIQVpyEAWcpCHAhShBGWoQBVqUIcGNKEFbehAF3rQhwEEEEIEQxjB6/AGvAlvwdvwDrwL78H78AF8CB/Bx/AJfAqfwefwBXwJX8HX8A18C9/B9/AD/Ag/wc/wC/wKv8Hv8Af8CX/B3/AP/Av/wTiUDCVH8SgFSkApUSqUiFKjNCgtSofSowwoI8qEMqMsKCvKhrKjHCgnyoVyoySUB+VF+VB+VAAVRIVQYVQEFUXF0H+oOCqBSqJSqDQqg8qicqg8qoAqokqoMqqCqqJqqDqqgWqiWqg2qoPqonqoPmqAGqJGqDFqgpqiZqg5aoFaolaoNWqD2qJ2qD3qgDqiTqgz6oK6om6oO+qBeqJeqDfqg/qifqg/GoAGokFoMBqChqJhaDgagUaiUWg0GoPGonFoPJqAJqJJaDKagqaiaWg6moFmolloNpqD5qJ5aD5agBaiRWgxWoKWomVoOVqBVqJVaDVag9aidWg92oA2ok1oM9qCtqJtaDvagXaiXWg32oP2on1oPzqADqJD6DA6go6iY+g4OoFOolPoNDqDzqJz6Dy6gC6iS+gyuoKuomsohjCEIwKRiEI0YhCLOMQjAYlIQjJSkIo0pCMDmchCNnKQizzkowABBBFCIYrQdXQD3US30G10B91F99B99AA9RI/QY/QEPUXP0HP0Ar1Er9Br9Aa9Re/Qe/QBfUSf0Gf0BX1F39B39AP9RL/Qb/QH/UX/UFyYLEwexocpwoQwZZgqTAxTh2nCtGG6MH2YIcwYZgozh1nCrGG2MHuYI8wZ5gpzh0lhnjBvmC/MHxYIC4aFwsJhkbBoWCz8LywelghLhqXC0mGZsGxYLiwfVggrhpXCymGVsGpYLawe1ghrhrXC2mGdsG5YL6wfNggbho3CxmGTsGnYLGwetghbhq3C1mGbsG3YLmwfdgg7hp3CzmGXsGvYLewe9gh7hr3C3mGfsG/YL+wfDggHhoPCweGQcGg4LBwejghHhqPC0eGYcGw4LhwfTggnhpPCyeGUcGo4LZwezghnhrPC2eGccG44L5wfLggXhovCxeGScGm4LFwerghXhqvC1eGacG24Llwfbgg3hpvCzeGWcGu4Ldwe7gh3hrvC3eGecG+4L9wfHggPhofCw+GR8Gh4LDwenghPhqfC0+GZ8Gx4LjwfXggvhpfCy+GV8Gp4LYyFWIiHREiGVEiHTMiGXMiHQiiGUiiHSqiGWqiHRmiGVmiHTuiGXuiHQQhCGKIwDKPwengjvBneCm+Hd8K74b3wfvggfBg+Ch+HT8Kn4bPwefgifBm+Cl+Hb8K34bvwffgh/Bh+Cj+HX8Kv4bfwe/gj/Bn+Cn+Hf8K/4b8wLkoWJY/ioxRRQpQyShUlRqmjNFHaKF2UPsoQZYwyRZmjLFHWKFuUPcoR5YxyRbmjpChPlDfKF+WPCkQFo0JR4ahIVDQqFv0XFY9KRCWjUlHpqExUNioXlY8qRBWjSlHlqEpUNaoWVY9qRDWjWlHtqE5UN6oX1Y8aRA2jRlHjqEnUNGoWNY9aRC2jVlHrqE3UNmoXtY86RB2jTlHnqEvUNeoWdY96RD2jXlHvqE/UN+oX9Y8GRAOjQdHgaEg0NBoWDY9GRCOjUdHoaEw0NhoXjY8mRBOjSdHkaEo0NZoWTY9mRDOjWdHsaE40N5oXzY8WRAujRdHiaEm0NFoWLY9WRCujVdHqaE20NloXrY82RBujTdHmaEu0NdoWbY92RDujXdHuaE+0N9oX7Y8ORAejQ9Hh6Eh0NDoWHY9ORCejU9Hp6Ex0NjoXnY8uRBejS9Hl6Ep0NboWxSLsf5LuscGrZgEA+G62e7Jt27Zt27Zt27a92Tb+x7YxM6faau+L+0l+sTuxhNjd2L3Y/diD2MPYo9jj2JPY09iz2PPYi9jL2KvY69ib2NvYu9j72IfYx9in2OfYl9jX2LfY99iPWCyGxfAYESNjVIyOMTE2xsX4mBATY1JMjikxNabF9JgRM2NWzI45MTfmxfxYEAtjIAZjKBbFfsZ+xX7HEmN/Yn9j/2JJsTgsHkuGJcdSYCmxVFhqLA2WFkuHpccyYBmxTFhmLAuWFcuGZcdyYDmx/7BcWG4sD5YXy4flxwpgBbFCWGGsCFYUK4YVx0pgJbFSWGmsDFYWK4eVxypgFbFKWGWsClYVq4ZVx2pgNbFaWG2sDlYXq4fVxxpgDbFGWGOsCdYUa4Y1x1pgLbFWWGusDdYWa4e1xzpgHbFOWGesC9YV64Z1x3pgPbFeWG+sD9YX64f1xwZgA7FB2GBsCDYUG4YNx0ZgI7FR2GhsDDYWG4eNxyZgE7FJ2GRsCjYVm4ZNx2ZgM7FZ2GxsDjYXm4fNxxZgC7FF2GJsCbYUW4Ytx1ZgK7FV2GpsDbYWW4etxzZgG7FN2GZsC7YV24Ztx3ZgO7Fd2G5sD7YX24ftxw5gB7FD2GHsCHYUO4Ydx05gJ7FT2GnsDHYWO4edxy5gF7FL2GXsCnYVu4Zdx25gN7Fb2G3sDpaA3cXuYfexB9hD7BH2GHuCPcWeYc+xF9hL7BX2GnuDvcXeYe+xD9hH7BP2GfuCfcW+Yd+xH1gMwzAcIzASozAaYzAW4zAeEzARkzAZUzAV0zAdMzATszAbczAX8zAfC7AQAxjEEBZhP7Ff2G8sEfuD/cX+YUlYHB6PJ8OT4ynwlHgqPDWeBk+Lp8PT4xnwjHgmPDOeBc+KZ8Oz4znwnPh/eC48N54Hz4vnw/PjBfCCeCG8MF4EL4oXw4vjJfCSeCm8NF4GL4uXw8vjFfCKeCW8Ml4Fr4pXw6vjNfCaeC28Nl4Hr4vXw+vjDfCGeCO8Md4Eb4o3w5vjLfCWeCu8Nd4Gb4u3w9vjHfCOeCe8M94F74p3w7vjPfCeeC+8N94H74v3w/vjA/CB+CB8MD4EH4oPw4fjI/CR+Ch8ND4GH4uPw8fjE/CJ+CR8Mj4Fn4pPw6fjM/CZ+Cx8Nj4Hn4vPw+fjC/CF+CJ8Mb4EX4ovw5fjK/CV+Cp8Nb4GX4uvw9fjG/CN+CZ8M74F34pvw7fjO/Cd+C58N74H34vvw/fjB/CD+CH8MH4EP4ofw4/jJ/CT+Cn8NH4GP4ufw8/jF/CL+CX8Mn4Fv4pfw6/jN/Cb+C38Nn4HT8Dv4vfw+/gD/CH+CH+MP8Gf4s/w5/gL/CX+Cn+Nv8Hf4u/w9/gH/CP+Cf+Mf8G/4t/w7/gPPIZjOI4TOIlTOI0zOItzOI8LuIhLuIwruIpruI4buIlbuI07uIt7uI8HeIgDHOIIj/Cf+C/8N56I/8H/4v/wJDyOiCeSEcmJFERKIhWRmkhDpCXSEemJDERGIhORmchCZCWyEdmJHERO4j8iF5GbyEPkJfIR+YkCREGiEFGYKEIUJYoRxYkSREmiFFGaKEOUJcoR5YkKREWiElGZqEJUJaoR1YkaRE2iFlGbqEPUJeoR9YkGREOiEdGYaEI0JZoRzYkWREuiFdGaaEO0JdoR7YkOREeiE9GZ6EJ0JboR3YkeRE+iF9Gb6EP0JfoR/YkBxEBiEDGYGEIMJYYRw4kRxEhiFDGaGEOMJcYR44kJxERiEjGZmEJMJaYR04kZxExiFjGbmEPMJeYR84kFxEJiEbGYWEIsJZYRy4kVxEpiFbGaWEOsJdYR64kNxEZiE7GZ2EJsJbYR24kdxE5iF7Gb2EPsJfYR+4kDxEHiEHGYOEIcJY4Rx4kTxEniFHGaOEOcJc4R54kLxEXiEnGZuEJcJa4R14kbxE3iFnGbuEMkEHeJe8R94gHxkHhEPCaeEE+JZ8Rz4gXxknhFvCbeEG+Jd8R74gPxkfhEfCa+EF+Jb8R34gcRIzACJwiCJCiCJhiCJTiCJwRCJCRCJhRCJTRCJwzCJCzCJhzCJTzCJwIiJAABCURExE/iF/GbSCT+EH+Jf0QSEUfGk8nI5GQKMiWZikxNpiHTkunI9GQGMiOZicxMZiGzktnI7GQOMif5H5mLzE3mIfOS+cj8ZAGyIFmILEwWIYuSxcjiZAmyJFmKLE2WIcuS5cjyZAWyIlmJrExWIauS1cjqZA2yJlmLrE3WIeuS9cj6ZAOyIdmIbEw2IZuSzcjmZAuyJdmKbE22IduS7cj2ZAeyI9mJ7Ex2IbuS3cjuZA+yJ9mL7E32IfuS/cj+5AByIDmIHEwOIYeSw8jh5AhyJDmKHE2OIceS48jx5ARyIjmJnExOIaeS08jp5AxyJjmLnE3OIeeS88j55AJyIbmIXEwuIZeSy8jl5ApyJbmKXE2uIdeS68j15AZyI7mJ3ExuIbeS28jt5A5yJ7mL3E3uIfeS+8j95AHyIHmIPEweIY+Sx8jj5AnyJHmKPE2eIc+S58jz5AXyInmJvExeIa+S18jr5A3yJnmLvE3eIRPIu+Q98j75gHxIPiIfk0/Ip+Qz8jn5gnxJviJfk2/It+Q78j35gfxIfiI/k1/Ir+Q38jv5g4yRGImTBEmSFEmTDMmSHMmTAimSEimTCqmSGqmTBmmSFmmTDumSHumTARmSgIQkIiPyJ/mL/E0mkn/Iv+Q/MomMo+KpZFRyKgWVkkpFpabSUGmpdFR6KgOVkcpEZaayUFmpbFR2KgeVk/qPykXlpvJQeal8VH6qAFWQKkQVpopQRaliVHGqBFWSKkWVpspQZalyVHmqAlWRqkRVpqpQValqVHWqBlWTqkXVpupQdal6VH2qAdWQakQ1pppQTalmVHOqBdWSakW1ptpQbal2VHuqA9WR6kR1prpQXaluVHeqB9WT6kX1pvpQfal+VH9qADWQGkQNpoZQQ6lh1HBqBDWSGkWNpsZQY6lx1HhqAjWRmkRNpqZQU6lp1HRqBjWTmkXNpuZQc6l51HxqAbWQWkQtppZQS6ll1HJqBbWSWkWtptZQa6l11HpqA7WR2kRtprZQW6lt1HZqB7WT2kXtpvZQe6l91H7qAHWQOkQdpo5QR6lj1HHqBHWSOkWdps5QZ6lz1HnqAnWRukRdpq5QV6lr1HXqBnWTukXdpu5QCdRd6h51n3pAPaQeUY+pJ9RT6hn1nHpBvaReUa+pN9Rb6h31nvpAfaQ+UZ+pL9RX6hv1nfpBxSiMwimCIimKoimGYimO4imBEimJkimFUimN0imDMimLsimHcimP8qmACilAQQpREfWT+kX9phKpP9Rf6h+VRMXR8XQyOjmdgk5Jp6JT02notHQ6Oj2dgc5IZ6Iz01norHQ2Ojudg85J/0fnonPTeei8dD46P12ALkgXogvTReiidDG6OF2CLkmXokvTZeiydDm6PF2BrkhXoivTVeiqdDW6Ol2DrknXomvTdei6dD26Pt2Abkg3ohvTTeimdDO6Od2Cbkm3olvTbei2dDu6Pd2B7kh3ojvTXeiudDe6O92D7kn3onvTfei+dD+6Pz2AHkgPogfTQ+ih9DB6OD2CHkmPokfTY+ix9Dh6PD2BnkhPoifTU+ip9DR6Oj2DnknPomfTc+i59Dx6Pr2AXkgvohfTS+il9DJ6Ob2CXkmvolfTa+i19Dp6Pb2B3khvojfTW+it9DZ6O72D3knvonfTe+i99D56P32APkgfog/TR+ij9DH6OH2CPkmfok/TZ+iz9Dn6PH2Bvkhfoi/TV+ir9DX6On2Dvknfom/Td+gE+i59j75PP6Af0o/ox/QT+in9jH5Ov6Bf0q/o1/Qb+i39jn5Pf6A/0p/oz/QX+iv9jf5O/6BjNEbjNEGTNEXTNEOzNEfztECLtETLtEKrtEbrtEGbtEXbtEO7tEf7dECHNKAhjeiI/kn/on/TifQf+i/9j06i45h4JhmTnEnBpGRSMamZNExaJh2TnsnAZGQyMZmZLExWJhuTncnB5GT+Y3IxuZk8TF4mH5OfKcAUZAoxhZkiTFGmGFOcKcGUZEoxpZkyTFmmHFOeqcBUZCoxlZkqTFWmGlOdqcHUZGoxtZk6TF2mHlOfacA0ZBoxjZkmTFOmGdOcacG0ZFoxrZk2TFumHdOe6cB0ZDoxnZkuTFemG9Od6cH0ZHoxvZk+TF+mH9OfGcAMZAYxg5khzFBmGDOcGcGMZEYxo5kxzFhmHDOemcBMZCYxk5kpzFRmGjOdmcHMZGYxs5k5zFxmHjOfWcAsZBYxi5klzFJmGbOcWcGsZFYxq5nEtP8HmjcwG5lNzGZmC7OV2cZsZ3YwO5ldzG5mD7OX2cfsZw4wB5lDzGHmCHOUOcYcZ04wJ5lTzGnmDHOWOcecZy4wF5lLzGXmCnOVucZcZ24wN5lbzG3mDpPA3GXuMfeZB8xD5hHzmHnCPGWeMc+ZF8xL5hXzmnnDvGXeMe+ZD8xH5hPzmfnCfGW+Md+ZH0yMwRicIRiSoRiaYRiW4RieERiRkRiZURiV0RidMRiTsRibcRiX8RifCZiQAQxkEBMxP5lfzG8mkfnD/GX+MUlMHBvPJmOTsynYlGwqNjWbhk3LpmPTsxnYjGwmNjObhc3KZmOzsznYnOx/bC42N5uHzcvmY/OzBdiCbCG2MFuELcoWY4uzJdiSbCm2NFuGLcuWY8uzFdiKbCW2MluFrcpWY6uzNdiabC22NluHrcvWY+uzDdiGbCO2MduEbco2Y5uzLdiWbCu2NduGbcu2Y9uzHdiObCe2M9uF7cp2Y7uzPdiebC+2N9uH7cv2Y/uzA9iB7CB2MDuEHcoOY4ezI9iR7Ch2NDuGHcuOY8ezE9iJ7CR2MjuFncpOY6ezM9iZ7Cx2NjuHncvOY+ezC9iF7CJ2MbuEXcouY5ezK9iV7Cp2NbuGXcuuY9ezG9iN7CZ2M7uF3cpuY7ezO9id7C52N7uH3cvuY/ezB9iD7CH2MHuEPcoeY4+zJ9iT7Cn2NHuGPcueY8+zF9iL7CX2MnuFvcpeY6+zN9ib7C32NnuHTWDvsvfY++wD9iH7iH3MPmGfss/Y5+wL9iX7in3NvmHfsu/Y9+wH9iP7if3MfmG/st/Y7+wPNsZiLM4SLMlSLM0yLMtyLM8KrMhKrMwqrMpqrM4arMlarM06rMt6rM8GbMgCFrKIjdif7C/2N5vI/mH/sv/YJDaOi+eSccm5FFxKLhWXmkvDpeXScem5DFxGLhOXmcvCZeWycdm5HFxO7j8uF5eby8Pl5fJx+bkCXEGuEFeYK8IV5YpxxbkSXEmuFFeaK8OV5cpx5bkKXEWuEleZq8JV5apx1bkaXE2uFlebq8PV5epx9bkGXEOuEdeYa8I15ZpxzbkWXEuuFdeaa8O15dpx7bkOXEeuE9eZ68J15bpx3bkeXE+uF9eb68P15fpx/bkB3EBuEDeYG8IN5YZxw7kR3EhuFDeaG8ON5cZx47kJ3ERuEjeZm8JN5aZx07kZ3ExuFjebm8PN5eZx87kF3EJuEbeYW8It5ZZxy7kV3EpuFbeaW8Ot5dZx67kN3EZuE7eZ28Jt5bZx27kd3E5uF7eb28Pt5fZx+7kD3EHuEHeYO8Id5Y5xx7kT3EnuFHeaO8Od5c5x57kL3EXuEneZu8Jd5a5x17kb3E3uFnebu8MlcHe5e9x97gH3kHvEPeaecE+5Z9xz7gX3knvFvebecG+5d9x77gP3kfvEfea+cF+5b9x37gcX4zAO5wiO5CiO5hiO5TiO5wRO5CRO5hRO5TRO5wzO5CzO5hzO5TzO5wIu5AAHOcRF3E/uF/ebS+T+cH+5f1wSF8fH88n45HwKPiWfik/Np+HT8un49HwGPiOfic/MZ+Gz8tn47HwOPif/H5+Lz83n4fPy+fj8fAG+IF+IL8wX4YvyxfjifAm+JF+KL82X4cvy5fjyfAW+Il+Jr8xX4avy1fjqfA2+Jl+Lr83X4evy9fj6fAO+Id+Ib8w34ZvyzfjmfAu+Jd+Kb8234dvy7fj2fAe+I9+J78x34bvy3fjufA++J9+L78334fvy/fj+/AB+ID+IH8wP4Yfyw/jh/Ah+JD+KH82P4cfy4/jx/AR+Ij+Jn8xP4afy0/jp/Ax+Jj+Ln83P4efy8/j5/AJ+Ib+IX8wv4Zfyy/jl/Ap+Jb+KX82v4dfy6/j1/AZ+I7+J38xv4bfy2/jt/A5+J7+L383v4ffy+/j9/AH+IH+IP8wf4Y/yx/jj/An+JH+KP82f4c/y5/jz/AX+In+Jv8xf4a/y1/jr/A3+Jn+Lv83f4RP4u/w9/j7/gH/IP+If80/4p/wz/jn/gn/Jv+Jf82/4t/w7/j3/gf/If+I/81/4r/w3/jv/g4/xGI/zBE/yFE/zDM/yHM/zAi/yEi/zCq/yGq/zBm/yFm/zDu/yHu/zAR/ygIc84iP+J/+L/80n8n/4v/w/PomPE+KFZEJyIYWQUkglpBbSCGmFdEJ6IYOQUciUMrOQRcgqZBOyCzmEnMJ/Qi4ht5BHyCvkE/ILBYSCQiGhsFBEKCoUE4oLJYSSQimhtFBGKCuUE8oLFYSKQiWhslBFqCpUE6oLNYSaQi2htlBHqCvUE+oLDYSGQiOhsdBEaCo0E5oLLYSWQiuhtdBGaCu0E9oLHYSOQiehs9BF6Cp0E7oLPYSeQi+ht9BH6Cv0E/oLA4SBwiBhsDBEGCoME4YLI4SRwihhtDBGGCuME8YLE4SJwiRhsjBFmCpME6YLM4SZwixhtjBHmCvME+YLC4SFwiJhsbBEWCosE5YLK4SVwiphtbBGWCusE9YLG4SNwiZhs7BF2CpsE7YLO4Sdwi5ht7BH2CvsE/YLB4SDwiHhsHBEOCocE44LJ4STwinhtHBGOCucE84LF4SLwiXhsnBFuCpcE64LN4Sbwi3htnBHSBDuCveE+8ID4aHwSHgsPBGeCs+E58IL4aXwSngtvBHeCu+E98IH4aPwSfgsfBG+Ct+E78IPISZgAi4QAilQAi0wAitwAi8IgihIgiwogipogi4YgilYgi04git4gi8EQigAAQpIiISfwi/ht5Ao/BH+Cv+EJCFOjBeTicnFFGJKMZWYWkwjphXTienFDGJGMZOYWcwiZhWzidnFHGJO8T8xl5hbzCPmFfOJ+cUCYkGxkFhYLCIWFYuJxcUSYkmxlFhaLCOWFcuJ5cUKYkWxklhZrCJWFauJ1cUaYk2xllhbrCPWFeuJ9cUGYkOxkdhYbCI2FZuJzcUWYkuxldhabCO2FduJ7cUOYkexk9hZ7CJ2FbuJ3cUeYk+xl9hb7CP2FfuJ/cUB4kBxkDhYHCIOFYeJw8UR4khxlDhaHCOOFceJ48UJ4kRxkjhZnCJOFaeJ08UZ4kxxljhbnCPOFeeJ88UF4kJxkbhYXCIuFZeJy8UV4kpxlbhaXCOuFdeJ68UN4kZxk7hZ3CJuFbeJ28Ud4k5xl7hb3CPuFfeJ+8UD4kHxkHhYPCIeFY+Jx8UT4knxlHhaPCOeFc+J58UL4kXxknhZvCJeFa+J18Ub4k3xlnhbvCMmiHfFe+J98YH4UHwkPhafiE/FZ+Jz8YX4UnwlvhbfiG/Fd+J78YP4Ufwkfha/iF/Fb+J38Ud8nIiJuEiIpEiJtMiIrMiJvCiIoiiJsqiIqqiJumiIpmiJtuiIruiJvhiIoQhEKCIxEn+Kv8TfYqL4R/wr/hOTxDgpXkomJZdSSCmlVFJqKY2UVkonpZcySBmlTFJmKYuUVcomZZdySDmlHfFxcbmlPFJeKZ+UXyogFZQKSYWlIlJRqZhUXCohlZRKSaWlMlJZqZxUXqogVZQqSZWlKlJVqZpUXaoh1ZRqSbWlOlJdqZ5UX2ogNZQaSY2lJlJTqZnUXGohtZRaSa2lNlJbqZ3UXuogdZQ6SZ2lLlJXqZvUXeoh9ZR6Sb2lPlJfqZ/UXxogDZQGSYOlIdJQaZg0XBohjZRGSaOlMdJYaZw0XpogTZQmSZOlKdJUaZo0XZohzZRmSbOlOdJcaZ40X1ogLZQWSYulJdJSaZm0XFohrZRWSaulNdJaaZ20XtogbZQ2SZulLdJWaZu0Xdoh7ZR2SbulPdJeaZ+0XzogHZQOSYelI9JR6Zh0XDohnZROSaelM9JZ6Zx0XrogXZQuSZelK9JV6Zp0Xboh3ZRuSbelO1KCdFe6J92XHkgPpUfSY+mJ9FR6Jj2XXkgvpVfSa+mN9FZ6J72XPkgfpU/SZ+mL9FX6Jn2XfkgxCZNwiZBIiZJoiZFYiZN4SZBESZJkSZFUSZN0yZBMyZJsyZFcyZN8KZBCCUhQQlIk/ZR+Sb+lROmP9Ff6JyVJcXK8nExOLqeQU8qp5NRyGjmtnE5OL2eQM8qZ5MxyFjmrnE3OLueQc8r/ybnk3HIeOa+cT84vF5ALyoXkwnIRuahcTC4ul5BLyqXk0nIZuaxcTi4vV5ArypXkynIVuapcTa4u15BryrXk2nIdua5cT64vN5Abyo3kxnITuancTG4ut5Bbyq3k1nIbua3cTm4vd5A7yp3kznIXuavcTe4u95B7yr3k3nIfua/cT+4vD5AHyoPkwfIQeag8TB4uj5BHyqPk0fIYeaw8Th4vT5AnypPkyfIUeao8TZ4uz5BnyrPk2fIcea48T54vL5AXyovkxfISeam8TF4ur5BXyqvk1fIaea28Tl4vb5A3ypvkzfIWeau8Td4u75B3yrvk3fIeea+8T94vH5APyofkw/IR+ah8TD4un5BPyqfk0/IZ+ax8Tj4vX5Avypfky/IV+ap8Tb4u35Bvyrfk2/IdOUG+K9+T78sP5IfyI/mx/ER+Kj+Tn8sv5JfyK/m1/EZ+K7+T38sf5I/yJ/mz/EX+Kn+Tv8s/5JiMybhMyKRMybTMyKzMybwsyKIsybKsyKqsybpsyKZsybbsyK7syb4cyKEMZCgjOZJ/yr/k33Ki/Ef+K/+Tk+Q4JV5JpiRXUigplVRKaiWNklZJp6RXMigZlUxKZiWLklXJpmRXcig5lf+UXEpuJY+SV8mn5FcKKAWVQkphpYhSVCmmFFdKKCWVUkpppYxSVimnlFcqKBWVSkplpYpSVammVFdqKDWVWkptpY5SV6mn1FcaKA2VRkpjpYnSVGmmNFdaKC2VVkprpY3SVmmntFc6KB2VTkpnpYvSVemmdFd6KD2VXkpvpY/SV+mn9FcGKAOVQcpgZYgyVBmmDFdGKCOVUcpoZYwyVhmnjFeSkuLiJimTlSnKVGWaMl2ZocxUZimzlTnKXGWeMl9ZoCxUFimLlSXKUmWZslxZoaxUVimrlTXKWmWdsl7ZoGxUNimblS3KVmWbsl3ZoexUdim7lT3KXmWfsl85oBxUDimHlSPKUeWYclw5oZxUTimnlTPKWeWccl65oFxULimXlSvKVeWacl25odxUbim3lTtKgnJXuafcVx4oD5VHymPlifJUeaY8V14oL5VXymvljfJWeae8Vz4oH5VPymfli/JV+aZ8V34oMQVTcIVQSIVSaIVRWIVTeEVQREVSZEVRVEVTdMVQTMVSbMVRXMVTfCVQQgUoUEFKpPxUfim/lUTlj/JX+ackKXFqvJpMTa6mUFOqqdTUaho1rZpOTa9mUDOqmdTMahY1q5pNza7mUHOq/6m51NxqHjWvmk/NrxZQC6qF1MJqEbWoWkwtrpZQS6ql1NJqGbWsWk4tr1ZQK6qV1MpqFbWqWk2trtZQa6q11NpqHbWuWk+trzZQG6qN1MZqE7Wp2kxtrrZQW6qt1NZqG7Wt2k5tr3ZQO6qd1M5qF7Wr2k3trvZQe6q91N5qH7Wv2k/trw5QB6qD1MHqEHWoOkwdro5QR6qj1NHqGHWsOk4dr05QJ6qT1MnqFHWqOk2drs5QZ6qz1NnqHHWuOk+dry5QF6qL1MXqEnWpukxdrq5QV6qr1NXqGnWtuk5dr25QN6qb1M3qFnWruk3dru5Qd6q71N3qHnWvuk/drx5QD6qH1MPqEfWoekw9rp5QT6qn1NPqGfWsek49r15QL6qX1MvqFfWqek29rt5Qb6q31NvqHTVBvaveU++rD9SH6iP1sfpEfao+U5+rL9SX6iv1tfpGfau+U9+rH9SP6if1s/pF/ap+U7+rP9SYiqm4SqikSqm0yqisyqm8KqiiKqmyqqiqqqm6aqimaqm26qiu6qm+GqihClSoIjVSf6q/1N9qovpH/av+U5PUOC1eS6Yl11JoKbVUWmotjZZWS6el1zJoGbVMWmYti5ZVy6Zl13JoObX/tFxabi2PllfLp+XXCmgFtUJaYa2IVlQrphXXSmgltVJaaa2MVlYrp5XXKmgVtUpaZa2KVlWrplXXamg1tVpaba2OVlerp9XXGmgNtUZaY62J1lRrpjXXWmgttVZaa62N1lZrp7XXOmgdtU5aZ62L1lXrpnXXemg9tV5ab62P1lfrp/XXBmgDtUHaYG2INlQbpg3XRmgjtVHaaG2MNlYbp43XJmgTtUnaZG2KNlWbpk3XZmgztVnabG2ONlebp83XFmgLtUXaYm2JtlRbpi3XVmgrtVXaam2NtlZbp63XNmgbtU3aZm2LtlXbpm3Xdmg7tV3abm2Ptlfbp+3XDmgHtUPaYe2IdlQ7ph3XTmgntVPaae2MdlY7p53XLmgXtUvaZe2KdlW7pl3Xbmg3tVvabe2OlqDd1e5p97UH2kPtkfZYe6I91Z5pz7UX2kvtlfZae6O91d5p77UP2kftk/ZZ+6J91b5p37UfWkzDNFwjNFKjNFpjNFbjNF4TNFGTNFlTNFXTNF0zNFOzNFtzNFfzNF8LtFADGtSQFmk/tV/aby1R+6P91f5pSVqcHq8n05PrKfSUeio9tZ5GT6un09PrGfSMeiY9s55Fz6pn07PrOfSc+n96Lj23nkfPq+fT8+sF9IJ6Ib2wXkQvqhfTi+sl9JJ6Kb20XkYvq5fTy+sV9Ip6Jb2yXkWvqlfTq+s19Jp6Lb22Xkevq9fT6+sN9IZ6I72x3kRvqjfTm+st9JZ6K7213kZvq7fT2+sd9I56J72z3kXvqnfTu+s99J56L7233kfvq/fT++sD9IH6IH2wPkQfqg/Th+sj9JH6KH20PkYfq4/Tx+sT9In6JH2yPkWfqk/Tp+sz9Jn6LH22Pkefq8/T5+sL9IX6In2xvkRfqi/Tl+sr9JX6Kn21vkZfq6/T1+sb9I36Jn2zvkXfqm/Tt+s79J36Ln23vkffq+/T9+sH9IP6If2wfkQ/qh/Tj+sn9JP6Kf20fkY/q5/Tz+sX9Iv6Jf2yfkW/ql/Tr+s39Jv6Lf22fkdP0O/q9/T7+gP9of5If6w/0Z/qz/Tn+gv9pf5Kf62/0d/q7/T3+gf9o/5J/6x/0b/q3/Tv+g89pmM6rhM6qVM6rTM6q3M6rwu6qEu6rCu6qmu6rhu6qVu6rTu6q3u6rwd6qAMd6kiP9J/6L/23nqj/0f/q//QkPc6IN5IZyY0URkojlZHaSGOkNdIZ6Y0MRkYjk5HZyGJkNbIZ2Y0cRk7jPyOXkdvIY+Q18hn5jQJGQaOQUdgoYhQ1ihnFjRJGSaOUUdooY5Q1yhnljQpGRaOSUdmoYlQ1qhnVjRpGTaOWUduoY9Q16hn1jQZGQ6OR0dhoYjQ1mhnNjRZGS6OV0dpoY7Q12hntjQ5GR6OT0dnoYnQ1uhndjR5GT6OX0dvoY/Q1+hn9jQHGQGOQMdgYYgw1hhnDjRHGSGOUMdoYY4w1xhnjjQnGRGOSMdmYYkw1phnTjRnGTGOWMduYY8w15hnzjQXGQmORsdhYYiw1lhnLjRXGSmOVsdpYY6w11hnrjQ3GRmOTsdnYYmw1thnbjR3GTmOXsdvYY+w19hn7jQPGQeOQcdg4Yhw1jhnHjRPGSeOUcdo4Y5w1zhnnjQvGReOScdm4Ylw1rhnXjRvGTeOWcdu4YyQYd417xn3jgfHQeGQ8Np4YT41nxnPjhfHSeGW8Nt4Yb413xnvjg/HR+GR8Nr4YX41vxnfjhxEzMAM3CIM0KIM2GIM1OIM3BEM0JEM2FEM1NEM3DMM0LMM2HMM1PMM3AiM0gAENZETGT+OX8dtINP4Yf41/RpIRZ8abyczkZgozpZnKTG2mMdOa6cz0ZgYzo5nJzGxmMbOa2czsZg4zp/mfmcvMbeYx85r5zPxmAbOgWcgsbBYxi5rFzOJmCbOkWcosbZYxy5rlzPJmBbOiWcmsbFYxq5rVzOpmDbOmWcusbdYx65r1zPpmA7Oh2chsbDYxm5rNzOZmC7Ol2cpsbbYx25rtzPZmB7Oj2cnsbHYxu5rdzO5mD7On2cvsbfYx+5r9zP7mAHOgOcgcbA4xh5rDzOHmCHOkOcocbY4xx5rjzPHmBHOiOcmcbE4xp5rTzOnmDHOmOcucbc4x55rzzPnmAnOhuchcbC4xl5rLzOXmCnOlucpcba4x15rrzPXmBnOjucncbG4xt5rbzO3mDnOnucvcbe4x95r7zP3mAfOgecg8bB4xj5rHzOPmCfOkeco8bZ4xz5rnzPPmBfOiecm8bF4xr5rXzOvmDfOmecu8bd4xE8y75j3zvvnAfGg+Mh+bT8yn5jPzufnCfGm+Ml+bb8y35jvzvfnB/Gh+Mj+bX8yv5jfzu/nDjJmYiZuESZqUSZuMyZqcyZuCKZqSKZuKqZqaqZuGaZqWaZuO6Zqe6ZuBGZrAhCYyI/On+cv8bSaaf8y/5j8zyYyz4q1kVnIrhZXSSmWlttJYaa10Vnorg5XRymRltrJYWa1sVnYrh5XT+s/KZeW28lh5rXxWfquAVdAqZBW2ilhFrWJWcauEVdIqZZW2ylhlrXJWeauCVdGqZFW2qlhVrWpWdauGVdOqZdW26lh1rXpWfauB1dBqZDW2mlhNrWZWc6uF1dJqZbW22lhtrXZWe6uD1dHqZHW2ulhdrW5Wd6uH1dPqZfW2+lh9rX5Wf2uANdAaZA22hlhDrWHWcGuENdIaZY22xlhjrXHWeGuCNdGaZE22plhTrWnWdGuGNdOaZc225lhzrXnWfGuBtdBaZC22llhLrWXWcmuFtdJaZa221lhrrXXWemuDtdHaZG22tlhbrW3WdmuHtdPaZe229lh7rX3WfuuAddA6ZB22jlhHrWPWceuEddI6ZZ22zlhnrXPWeeuCddG6ZF22rlhXrWvWdeuGddO6Zd227lgJ1l3rnnXfemA9tB5Zj60n1lPrmfXcemG9tF5Zr6031lvrnfXe+mB9tD5Zn60v1lfrm/Xd+mHFLMzCLcIiLcqiLcZiLc7iLcESLcmSLcVSLc3SLcMyLcuyLcdyLc/yrcAKLWBBC1mR9dP6Zf22Eq0/1l/rn5VkxdnxdjI7uZ3CTmmnslPbaey0djo7vZ3BzmhnsjPbWeysdjY7u53Dzmn/Z+eyc9t57Lx2Pju/XcAuaBeyC9tF7KJ2Mbu4XcIuaZeyS9tl7LJ2Obu8XcGuaFeyK9tV7Kp2Nbu6XcOuadeya9t17Lp2Pbu+3cBuaDeyG9tN7KZ2M7u53cJuabeyW9tt7LZ2O7u93cHuaHeyO9td7K52N7u73cPuafeye9t97L52P7u/PcAeaA+yB9tD7KH2MHu4PcIeaY+yR9tj7LH2OHu8PcGeaE+yJ9tT7Kn2NHu6PcOeac+yZ9tz7Ln2PHu+vcBeaC+yF9tL7KX2Mnu5vcJeaa+yV9tr7LX2Onu9vcHeaG+yN9tb7K32Nnu7vcPeae+yd9t77L32Pnu/fcA+aB+yD9tH7KP2Mfu4fcI+aZ+yT9tn7LP2Ofu8fcG+aF+yL9tX7Kv2Nfu6fcO+ad+yb9t37AT7rn3Pvm8/sB/aj+zH9hP7qf3Mfm6/sF/ar+zX9hv7rf3Ofm9/sD/an+zP9hf7q/3N/m7/sGM2ZuM2YZM2ZdM2Y7M2Z/O2YIu2ZMu2Yqu2Zuu2YZu2Zdu2Y7u2Z/t2YIc2sKGN7Mj+af+yf9uJ9h/7r/3PTrLjnHgnmZPcSeGkdFI5qZ00TlonnZPeyeBkdDI5mZ0sTlYnm5PdyeHkdP5zcjm5nTxOXiefk98p4BR0CjmFnSJOUaeYU9wp4ZR0SjmlnTJOWaecU96p4FR0KjmVnSpOVaeaU92p4dR0ajm1nTpOXaeeU99p4DR0GjmNnSZOU6eZ09xp4bR0WjmtnTZOW6ed097p4HR0OjmdnS5OV6eb093p4fR0ejm9nT5OX6ef098Z4Ax0BjmDnSHOUGeYM9wZ4Yx0RjmjnTHOWGecM96Z4Ex0JjmTnSnOVGeaM92Z4cx0ZjmznTnOXGeeM99Z4Cx0FjmLnSXOUmeZs9xZ4ax0VjmrnTXOWmeds97Z4Gx0NjmbnS3OVmebs93Z4ex0djm7nT3OXmefs9854Bx0DjmHnSPOUeeYc9w54Zx0TjmnnTPOWeecc9654Fx0LjmXnSvOVeeac9254dx0bjm3nTtOgnPXuefcdx44D51HzmPnifPUeeY8d144L51XzmvnjfPWeee8dz44H51Pzmfni/PV+eZ8d344MQdzcIdwSIdyaIdxWIdzeEdwREdyZEdxVEdzdMdwTMdybMdxXMdzfCdwQgc40EFO5Px0fjm/nUTnj/PX+eckOXFuvJvMTe6mcFO6qdzUbho3rZvOTe9mcDO6mdzMbhY3q5vNze7mcHO6/7m53NxuHjevm8/N7xZwC7qF3MJuEbeoW8wt7pZwS7ql3NJuGbesW84t71ZwK7qV3MpuFbeqW82t7tZwa7q13NpuHbeuW8+t7zZwG7qN3MZuE7ep28xt7rZwW7qt3NZuG7et285t73ZwO7qd3M5uF7er283t7vZwe7q93N5uH7ev28/t7w5wB7qD3MHuEHeoO8wd7o5wR7qj3NHuGHesO84d705wJ7qT3MnuFHeqO82d7s5wZ7qz3NnuHHeuO8+d7y5wF7qL3MXuEnepu8xd7q5wV7qr3NXuGnetu85d725wN7qb3M3uFneru83d7u5wd7q73N3uHnevu8/d7x5wD7qH3MPuEfeoe8w97p5wT7qn3NPuGfese849715wL7qX3MvuFfeqe8297t5wb7q33NvuHTfBvevec++7D9yH7iP3sfvEfeo+c5+7L9yX7iv3tfvGfeu+c9+7H9yP7if3s/vF/ep+c7+7P9yYi7m4S7ikS7m0y7isy7m8K7iiK7myq7iqq7m6a7ima7m267iu67m+G7ihC1zoIjdyf7q/3N9uovvH/ev+c5PcOC/eS+Yl91J4Kb1UXmovjZfWS+el9zJ4Gb1MXmYvi5fVy+Zl93J4Ob3/vFxebi+Pl9fL5+X3CngFvUJeYa+IV9Qr5hX3SnglvVJeaa+MV9Yr55X3KngVvUpeZa+KV9Wr5lX3ang1vVpeba+OV9er59X3GngNvUZeY6+J19Rr5jX3WngtvVZea6+N19Zr57X3OngdvU5eZ6+L19Xr5nX3eng9vV5eb6+P19fr5/X3BngDvUHeYG+IN9Qb5g33RngjvVHeaG+MN9Yb5433JngTvUneZG+KN9Wb5k33ZngzvVnebG+ON9eb5833FngLvUXeYm+Jt9Rb5i33VngrvVXeam+Nt9Zb5633NngbvU3eZm+Lt9Xb5m33dng7vV3ebm+Pt9fb5+33DngHvUPeYe+Id9Q75h33TngnvVPeae+Md9Y75533LngXvUveZe+Kd9W75l33bng3vVvebe+Ol+Dd9e55970H3kPvkffYe+I99Z55z70X3kvvlffae+O99d55770P3kfvk/fZ++J99b55370fXszDPNwjPNKjPNpjPNbjPN4TPNGTPNlTPNXTPN0zPNOzPNtzPNfzPN8LvNADHvSQF3k/vV/eby/R++P99f55SV6cH+8n85P7KfyUfio/tZ/GT+un89P7GfyMfiY/s5/Fz+pn87P7Ofyc/n9+Lj+3n8fP6+fz8/sF/IJ+Ib+wX8Qv6hfzi/sl/JJ+Kb+0X8Yv65fzy/sV/Ip+Jb+yX8Wv6lfzq/s1/Jp+Lb+2X8ev69fz6/sN/IZ+I7+x38Rv6jfzm/st/JZ+K7+138Zv67fz2/sd/I5+J7+z38Xv6nfzu/s9/J5+L7+338fv6/fz+/sD/IH+IH+wP8Qf6g/zh/sj/JH+KH+0P8Yf64/zx/sT/In+JH+yP8Wf6k/zp/sz/Jn+LH+2P8ef68/z5/sL/IX+In+xv8Rf6i/zl/sr/JX+Kn+1v8Zf66/z1/sb/I3+Jn+zv8Xf6m/zt/s7/J3+Ln+3v8ff6+/z9/sH/IP+If+wf8Q/6h/zj/sn/JP+Kf+0f8Y/65/zz/sX/Iv+Jf+yf8W/6l/zr/s3/Jv+Lf+2f8dP8O/69/z7/gP/of/If+w/8Z/6z/zn/gv/pf/Kf+2/8d/67/z3/gf/o//J/+x/8b/63/zv/g8/5mM+7hM+6VM+7TM+63M+7wu+6Eu+7Cu+6mu+7hu+6Vu+7Tu+63u+7wd+6AMf+siP/J/+L/+3n+j/8f/6//wkPy6ID5IFyYMUQcogVZA6SBOkDdIF6YMMQcYgU5A5yBJkDbIF2YMcQc7gvyBXkDvIE+QN8gX5gwJBwaBQUDgoEhQNigXFgxJByaBUUDooE5QNygXlgwpBxaBSUDmoElQNqgXVgxpBzaBWUDuoE9QN6gX1gwZBw6BR0DhoEjQNmgXNgxZBy6BV0DpoE7QN2gXtgw5Bx6BT0DnoEnQNugXdgx5Bz6BX0DvoE/QN+gX9gwHBwGBQMDgYEgwNhgXDgxHByGBUMDoYE4wNxgXjgwnBxGBSMDmYEkwNpgXTgxnBzGBWMDuYE8wN5gXzgwXBwmBRsDhYEiwNlgXLgxXBymBVsDpYE6wN1gXrgw3BxmBTsDnYEmwNtgXbgx3BzmBXsDvYE+wN9gX7gwPBweBQcDg4EhwNjgXHgxPByeBUcDo4E5wNzgXngwvBxeBScDm4ElwNrgXXgxvBzeBWcDu4EyQEd4N7wf3gQfAweBQ8Dp4ET4NnwfPgRfAyeBW8Dt4Eb4N3wfvgQ/Ax+BR8Dr4EX4NvwffgRxALsAAPiIAMqIAOmIANuIAPhEAMpEAOlEANtEAPjMAMrMAOnMANvMAPgiAMQAADFETBz+BX8DtIDP4Ef4N/QVIQF8aHycLkYYowZZgqTB2mCdOG6cL0YYYwY5gpzBxmCbOG2cLsYY4wZ/hfmCvMHeYJ84b5wvxhgbBgWCgsHBYJi4bFwuJhibBkWCosHZYJy4blwvJhhbBiWCmsHFYJq4bVwuphjbBmWCusHdYJ64b1wvphg7Bh2ChsHDYJm4bNwuZhi7Bl2CpsHbYJ24btwvZhh7Bj2CnsHHYJu4bdwu5hj7Bn2CvsHfYJ+4b9wv7hgHBgOCgcHA4Jh4bDwuHhiHBkOCocHY4Jx4bjwvHhhHBiOCmcHE4Jp4bTwunhjHBmOCucHc4J54bzwvnhgnBhuChcHC4Jl4bLwuXhinBluCpcHa4J14brwvXhhnBjuCncHG4Jt4bbwu3hjnBnuCvcHe4J94b7wv3hgfBgeCg8HB4Jj4bHwuPhifBkeCo8HZ4Jz4bnwvPhhfBieCm8HF4Jr4bXwuvhjfBmeCu8Hd4JE8K74b3wfvggfBg+Ch+HT8Kn4bPwefgifBm+Cl+Hb8K34bvwffgh/Bh+Cj+HX8Kv4bfwe/gjjIVYiIdESIZUSIdMyIZcyIdCKIZSKIdKqIZaqIdGaIZWaIdO6IZe6IdBGIYghCEKo/Bn+Cv8HSaGf8K/4b8wKYwD8SAZSA5SgJQgFUgN0oC0IB1IDzKAjCATyAyygKwgG8gOcoCc4D+QC+QGeUBekA/kBwVAQVAIFAZFQFFQDBQHJUBJUAqUBmVAWVAOlAcVQEVQCVQGVUBVUA1UBzVATVAL1AZ1QF1QD9QHDUBD0Ag0Bk1AU9AMNActQEvQCrQGbUBb0A60Bx1AR9AJdAZdQFfQDXQHPUBP0Av0Bn1AX9AP9AcDwEAwCAwGQ8BQMAwMByPASDAKjAZjwFgwDowHE8BEMAlMBlPAVDANTAczwEwwC8wGc8BcMA/MBwvAQrAILAZLwFKwDCwHK8BKsAqsBmvAWrAOrAcbwEawCWwGW8BWsA1sBzvATrAL7AZ7wF6wD+wHB8BBcAgcBkfAUXAMHAcnwElwCpwGZ8BZcA6cBxfARXAJXAZXwFVwDVwHN8BNcAvcBndAArgL7oH74AF4CB6Bx+AJeAqegefgBXgJXoHX4A14C96B9+AD+Ag+gc/gC/gKvoHv4AeIAQzggAAkoAANGMACDvBAACKQgAwUoAIN6MAAJrCADRzgAg/4IAAhAAACBCLwE/wCv0Ei+AP+gn8gCcTBeJgMJocpYEqYCqaGaWBamA6mhxlgRpgJZoZZYFaYDWaHOWBO+B/MBXPDPDAvzAfzwwKwICwEC8MisCgsBovDErAkLAVLwzKwLCwHy8MKsCKsBCvDKrAqrAarwxqwJqwFa8M6sC6sB+vDBrAhbAQbwyawKWwGm8MWsCVsBVvDNrAtbAfbww6wI+wEO8MusCvsBrvDHrAn7AV7wz6wL+wH+8MBcCAcBAfDIXAoHAaHwxFwJBwFR8MxcCwcB8fDCXAinAQnwylwKpwGp8MZcCacBWfDOXAunAfnwwVwIVwEF8MlcClcBpfDFXAlXAVXwzVwLVwH18MNcCPcBDfDLXAr3Aa3wx1wJ9wFd8M9cC/cB/fDA/AgPAQPwyPwKDwGj8MT8CQ8BU/DM/AsPAfPwwvwIrwEL8Mr8Cq8Bq/DG/AmvAVvwzswAd6F9+B9+AA+hI/gY/gEPoXP4HP4Ar6Er+Br+Aa+he/ge/gBfoSf4Gf4BX6F3+B3+APGIAZxSEASUpCGDGQhB3koQBFKUIYKVKEGdWhAE1rQhg50oQd9GMAQAgghghH8CX/B3zAR/oF/4T+YBONQPEqGkqMUKCVKhVKjNCgtSofSowwoI8qEMqMsKCvKhrKjHCgn+g/lQrlRHpQX5UP5UQFUEBVChVERVBQVQ8VRCVQSlUKlURlUFpVD5VEFVBFVQpVRFVQVVUPVUQ1UE9VCtVEdVBfVQ/VRA9QQNUKNURPUFDVDzVEL1BK1Qq1RG9QWtUPtUQfUEXVCnVEX1BV1Q91RD9QT9UK9UR/UF/VD/dEANBANQoPREDQUDUPD0Qg0Eo1Co9EYNBaNQ+PRBDQRTUKT0RQ0FU1D09EMNBPNQrPRHDQXzUPz0QK0EC1Ci9EStBQtQ8vRCrQSrUKr0Rq0Fq1D69EGtBFtQpvRFrQVbUPb0Q60E+1Cu9EetBftQ/vRAXQQHUKH0RF0FB1Dx9EJdBKdQqfRGXQWnUPn0QV0EV1Cl9EVdBVdQ9fRDXQT3UK30R2UgO6ie+g+eoAeokfoMXqCnqJn6Dl6gV6iV+g1eoPeonfoPfqAPqJP6DP6gr6ib+g7+oFiCEM4IhCJKEQjBrGIQzwSkIgkJCMFqUhDOjKQiSxkIwe5yEM+ClCIAIIIoQj9RL/Qb5SI/qC/6B9KQnFRfJQsSh6liFJGqaLUUZoobZQuSh9liDJGmaLMUZYoa5Qtyh7liHJG/0W5otxRnihvlC/KHxWICkaFosJRkahoVCwqHpWISkalotJRmahsVC4qH1WIKkaVospRlahqVC2qHtWIaka1otpRnahuVC+qHzWIGkaNosZRk6hp1CxqHrWIWkatotZRm6ht1C5qH3WIOkados5Rl6hr1C3qHvWIeka9ot5Rn6hv1C/qHw2IBkaDosHRkGhoNCwaHo2IRkajotHRmGhsNC4aH02IJkaTosnRlGhqNC2aHs2IZkazotnRnGhuNC+aHy2IFkaLosXRkmhptCxaHq2IVkarotXRmmhttC5aH22INkabos3RlmhrtC3aHu2Idka7ot3RnmhvtC/aHx2IDkaHosPRkehodCw6Hp2ITkanotPRmehsdC46H12ILkaXosvRlehqdC26Ht2Ibka3otvRnSgh+h87dx2tWXEmCv/tbixYgBACMRp3dycCAQKEYBG0gUYbGmjc3d3d3YO7u7u7u8Nbvr8V0nADM/PdNXfdO5lZ/H5/nKfe2rWraletc546+6x1rutf37+hf2P/pv7N/Vv6t/Zv69/ev6N/Z/+u/t39e/r39u/r399/oP9g/6H+w/1H+o/2H+s/3n+i/2T/qf7T/Wf6z/af6z/ff6H/Yv+l/sv9V/qv9l/rv95/o/9m/63+2/13+u/23+u/3/+g/2H/o/7H/U/6n/Y/63/e/6L/Zb/fD/3YT/3cL/3ab/2u3wsDwsAwKIwSRg2jhdHDGOEHYcwwVhg7jBPGDT8M44XxwwThR2HC8OMwUfhJmDhMEn4afhZ+Hn4RfhkmDYPDZGHyMEWYMkwVpg7ThGnDdGH6MEOYMcwUZg6zhFnDbGH2MEeYM8wV5g7zhHnDfGH+sEBYMCwUFg6LhEXDr8Kvw2/Cb8NiYfHwu7BEWDIsFX4flg7LhGXDH8Jy4Y9h+bBCWDGsFFYOfwp/Dn8Jfw2rhFXDamH1sEZYMwwJa4W1wzphaFg3rBfWDxuEDcNGYVjYOGwShodNw2Zh8zAibBG2DFuFrcM2YduwXdg+7BB2DDuFncMuYdewW9g97BH2DHuFvcM+Yd+wX9g/HBAODAeFg8Mh4dBwWDg8HBGODEeFo8Mx4dhwXDg+nBBODCeFk8Mp4dRwWjg9nBHODGeFs8M54dxwXjg/XBAuDBeFi8Ml4W/h0nBZuDxcEa4MV4WrwzXh2nBduD7cEG4MN4Wbwy3h1nBbuD3cEe4Md4W7wz3h3nBfuD88EB4MD4WHwyPh0fBYeDw8EZ4MT4WnwzPh2fBceD68EF4ML4WXwyvh1fBaeD28Ed4Mb4W3wzvh3fBeeD98ED4MH4WPwyfh0/BZ+Dx8Eb4M/RBCDCnkUEINLXShFwfEgXFQHCWOGkeLo8cx4g/imHGsOHYcJ44bfxjHi+PHCeKP4oTxx3Gi+JM4cZwk/jT+LP48/iL+Mk4aB8fJ4uRxijhlnCpOHaeJ08bp4vRxhjhjnCnOHGeJs8bZ4uxxjjhnnCvOHeeJ88b54vxxgbhgXCguHBeJi8ZfxV/H38TfxsXi4vF3cYm4ZFwq/j4uHZeJy8Y/xOXiH+PycYW4Ylwprhz/FP8c/xL/GleJq8bV4upxjbhmHBLXimvHdeLQuG5cL64fN4gbxo3isLhx3CQOj5vGzeLmcUTcIm4Zt4pbx23itnG7uH3cIe4Yd4o7x13irnG3uHvcI+4Z94p7x33ivnG/uH88IB4YD4oHx0PiofGweHg8Ih4Zj4pHx2PisfG4eHw8IZ4YT4onx1PiqfG0eHo8I54Zz4pnx3PiufG8eH68IF4YL4oXx0vi3+Kl8bJ4ebwiXhmvilfHa+K18bp4fbwh3hhvijfHW+Kt8bZ4e7wj3hnvinfHe+K98b54f3wgPhgfig/HR+Kj8bH4eHwiPhmfik/HZ+Kz8bn4fHwhvhhfii/HV+Kr8bX4enwjvhnfim/Hd+K78b34fvwgfhg/ih/HT+Kn8bP4efwifhn7McQYU8yxxBpb7GIvDUgD06A0Sho1jZZGT2OkH6Qx01hp7DROGjf9MI2Xxk8TpB+lCdOP00TpJ2niNEn6afpZ+nn6RfplmjQNTpOlydMUaco0VZo6TZOmTdOl6dMMacY0U5o5zZJmTbOl2dMcac40V5o7zZPmTfOl+dMCacG0UFo4LZIWTb9Kv06/Sb9Ni6XF0+/SEmnJtFT6fVo6LZOWTX9Iy6U/puXTCmnFtFJaOf0p/Tn9Jf01rZJWTaul1dMaac00JK2V1k7rpKFp3bReWj9tkDZMG6VhaeO0SRqeNk2bpc3TiLRF2jJtlbZO26Rt03Zp+7RD2jHtlHZOu6Rd025p97RH2jPtlfZO+6R9035p/3RAOjAdlA5Oh6RD02Hp8HREOjIdlY5Ox6Rj03Hp+HRCOjGdlE5Op6RT02np9HRGOjOdlc5O56Rz03np/HRBujBdlC5Ol6S/pUvTZenydEW6Ml2Vrk7XpGvTden6dEO6Md2Ubk63pFvTben2dEe6M92V7k73pHvTfen+9EB6MD2UHk6PpEfTY+nx9ER6Mj2Vnk7PpGfTc+n59EJ6Mb2UXk6vpFfTa+n19EZ6M72V3k7vpHfTe+n99EH6MH2UPk6fpE/TZ+nz9EX6MvVTSDGllFNJNbXUpV4ekAfmQXmUPGoeLY+ex8g/yGPmsfLYeZw8bv5hHi+PnyfIP8oT5h/nifJP8sR5kvzT/LP88/yL/Ms8aR6cJ8uT5ynylHmqPHWeJk+bp8vT5xnyjHmmPHOeJc+aZ8uz5znynHmuPHeeJ8+b58vz5wXygnmhvHBeJC+af5V/nX+Tf5sXy4vn3+Ul8pJ5qfz7vHReJi+b/5CXy3/My+cV8op5pbxy/lP+c/5L/mteJa+aV8ur5zXymnlIXiuvndfJQ/O6eb28ft4gb5g3ysPyxnmTPDxvmjfLm+cReYu8Zd4qb523ydvm7fL2eYe8Y94p75x3ybvm3fLueY+8Z94r7533yfvm/fL++YB8YD4oH5wPyYfmw/Lh+Yh8ZD4qH52Pycfm4/Lx+YR8Yj4pn5xPyafm0/Lp+Yx8Zj4rn53Pyefm8/L5+YJ8Yb4oX9x1vV6+NF+WL89X5CvzVfnqfE2+Nl+Xr8835BvzTfnmfEu+Nd+Wb8935DvzXfnufE++N9+X788P5AfzQ/nh/Eh+ND+WH89P5CfzU/np/Ex+Nj+Xn88v5BfzS/nl/Ep+Nb+WX89v5DfzW/nt/E5+N7+X388f5A/zR/nj/En+NH+WP89f5C9zP4ccc8o5l1xzy13ulQFlYBlURimjltHK6GWM8oMyZhmrjF3GKeOWH5bxyvhlgvKjMmH5cZmo/KRMXCYpPy0/Kz8vvyi/LJOWwWWyMnmZokxZpipTl2nKtGW6Mn2ZocxYZiozl1nKrGW2MnuZo8xZ5ipzl3nKvGW+Mn9ZoCxYFioLl0XKouVX5dflN+W3ZbGyePldWaIsWZYqvy9Ll2XKsuUPZbnyx7J8WaGsWFYqK5c/lT+Xv5S/llXKqmW1snpZo6xZhpS1ytplnTK0rFvWK+uXDcqGZaMyrGxcNinDy6Zls7J5GVG2KFuWrcrWZZuybdmubF92KDuWncrOZZeya9mt7F72KHuWvcreZZ+yb9mv7F8OKAeWg8rB5ZByaDmsHF6OKEeWo8rR5ZhybDmuHF9OKCeWk8rJ5ZRyajmtnF7OKGeWs8rZ5ZxybjmvnF8uKBeWi8rF5ZLyt3JpuaxcXq4oV5arytXlmnJtua5cX24oN5abys3llnJrua3cXu4od5a7yt3lnnJvua/cXx4oD5aHysPlkfJoeaw8Xp4oT5anytPlmfJsea48X14oL5aXysvllfJqea28Xt4ob5a3ytvlnfJuea+8Xz4oH5aPysflk/Jp+ax8Xr4oX5Z+CSWWVHIppZZWutKrA+rAOqiOUketo9XR6xj1B3XMOlYdu45Tx60/rOPV8esE9Ud1wvrjOlH9SZ24TlJ/Wn9Wf15/UX9ZJ62D62R18jpFnbJOVaeu09Rp63R1+jpDnbHOVGeus9RZ62x19jpHnbPOVeeu89R563x1/rpAXbAuVBeui9RF66/qr+tv6m/rYnXx+ru6RF2yLlV/X5euy9Rl6x/qcvWPdfm6Ql2xrlRXrn+qf65/qX+tq9RV62p19bpGXbMOqWvVtes6dWhdt65X168b1A3rRnVY3bhuUofXTetmdfM6om5Rt6xb1a3rNnXbul3dvu5Qd6w71Z3rLnXXulvdve5R96x71b3rPnXful/dvx5QD6wH1YPrIfXQelg9vB5Rj6xH1aPrMfXYelw9vp5QT6wn1ZPrKfXUelo9vZ5Rz6xn1bPrOfXcel49v15QL6wX1YvrJfVv9dJ6Wb28XlGvrFfVq+s19dp6Xb2+3lBvrDfVm+st9dZ6W7293lHvrHfVu+s99d56X72/PlAfrA/Vh+sj9dH6WH28PlGfrE/Vp+sz9dn6XH2+vlBfrC/Vl+sr9dX6Wn29vlHfrG/Vt+s79d36Xn2/flA/rB/Vj+sn9dP6Wf28flG/rP0aaqyp5lpqra12tdcGtIFtUBuljdpGa6O3MdoP2phtrDZ2G6eN237Yxmvjtwnaj9qE7cdtovaTNnGbpP20/az9vP2i/bJN2ga3ydrkbYo2ZZuqTd2madO26dr0bYY2Y5upzdxmabO22drsbY42Z5urzd3mafO2+dr8bYG2YFuoLdwWaYu2X7Vft9+037bF2uLtd22JtmRbqv2+Ld2Wacu2P7Tl2h/b8m2FtmJbqa3c/tT+3P7S/tpWaau21drqbY22ZhvS1mprt3Xa0LZuW6+t3zZoG7aN2rC2cdukDW+bts3a5m1E26Jt2bZqW7dt2rZtu7Z926Ht2HZqO7dd2q5tt7Z726Pt2fZqe7d92r5tv7Z/O6Ad2A5qB7dD2qHtsHZ4O6Id2Y5qR7dj2rHtuHZ8O6Gd2E5qJ7dT2qnttHZ6O6Od2c5qZ7dz2rntvHZ+u6Bd2C5qF7dL2t/ape2ydnm7ol3ZrmpXt2vate26dn27od3Ybmo3t1vare22dnu7o93Z7mp3t3vave2+dn97oD3YHmoPt0fao+2x9nh7oj3ZnmpPt2fas+259nx7ob3YXmovt1faq+219np7o73Z3mpvt3fau+299n77oH3YPmoft0/ap+2z9nn7on3Z+i202FLLrbTaWutarxvQDewGdaN0o3ajdaN3Y3Q/6MbsxurG7sbpxu1+2I3Xjd9N0P2om7D7cTdR95Nu4m6S7qfdz7qfd7/oftlN2g3uJusm76bopuym6qbupumm7abrpu9m6GbsZupm7mbpZu1m62bv5ujm7Obq5u7m6ebt5uvm7xboFuwW6hbuFukW/T+6f5Vu1W61bvVujW7Nbki3Vrd2t043tFu3W69bv9ug27DbqBvWbdxt0g3vNu026zbvRnRbdFt2W3Vbd9t023bbddt3O3Q7djt1O3e7dLt2u3W7d3t0e3Z7dXt3+3T7dvt1+3cHdAd2B3UHd4d0h3aHdYd3R3RHdkd1R3fHdMd2x3XHdyd0J3YndSd3p3Sndqd1p3dndGd2Z3Vnd+d053bnded3F3QXdhd1F3eXdH/rLu0u6y7vruiu7K7qru6u6a7truuu727obuxu6m7ubulu7W7rbu/u6O7s7uru7u7p7u3u6+7vHuge7B7qHu4e6R7tHuse757onuye6p7unume7Z7rnu9e6F7sXupe7l7pXu1e617v3uje7N7q3u7e6d7t3uve7z7oPuw+6j7uPuk+7T7rPu++6L7s+l3oYpe63JWudq37+/EEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/FxZfcunFZu2N+s3nAb0BvUV7A3qnDOj1emP8r3ajjIyDvnP/eL1eb82vShN/9XWJr0t3zT/rsPT0gP8ojvbvTWbAv62atdfrrf9N/wN7S31VGjByxqP+b8fpvTyyo6f/Eb4ed5RBU/aW6S3eW3Hk511Gzv3vT//PE1l4ZFz064qPB/27cfxF/rFCl3yrn++u1j/1M963wjdx/AEDv4pd13X/3hL93/Vv58f3if3/frP//9P8Z/PL1yn86/jt/DLoP8z/a34n/w8amRUHfme8/4r8v+k3/Q/sLf+fzf+DR3Y0Mn497hjf5P9lehv0Nu9tPrL+PzoHDPju+g7+9+NkA7t/Wt//7r67m3y/2P/vN/v//Tbw3+T/gf8/+X/g/8T8/82bi3/Ef87/S/eG99brLd7boDesN3Rk/X+U/xcZGb/J/9/p9+s42aIDvrpJ/ue/P/v//Wb/v9/+bf4fNDL/v/2d/D/ayDPAKN/pYbyR+fLr/D/r/2H+//Z7/gG95f7Tef7bvu5/9EFT9lbuDe8N623Z27g39Kt+d/lmnIG9db4ZcZRd/v4cX/89YMKvrs458jtkwt7JAybo/SOz90adYOT9X9X9o8Gof//1f/DA3rfafPdab+RZadZvxh+lN8HI0ojetr3tehv1hvSGfXUa+fp9xN/PPtN+037U3tjfrPTI/Rr55Lt8Uz/xN++FJv7fnkO+u5t8v9j/7zf7//02ylf5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgn/UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/pNGbLvdRkOGDRu6uYKCgsI3hX/1TyYAAOD/tv916P9XzwQAAAAAAAAAAAAAAAAAAAC+v/4r/p3Yv/oZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA75f3lj9k2RUXX2Hw4MGDe2MMHFkZvt1ml94uvW7QP8qjjKzrRsYver3egF6vN3iy4eOf+/Kwpf9eN+6kN262wwWT37zFWCtfPu51o/ceGG/19z6e/fUHJnpgkvfaiutvMGLwBiMGbzJ8i8FDBq81fPgWQ9YaNnTwOhuM2GjmwcsNGzpkxNDBG2wyYujm37q87rDhm2667eAhm6wzzpibbj50xIjBQzbZdvBGQ7cdvMXwwVtsvu3gIesN2WCTwTPPPPPgccb8r1q7//lWOu9fPQMA/jX+vwAAAP//f2DomQ==") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r1, &(0x7f0000000280)='+', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setsig(r2, 0xa, 0x21) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./bus\x00', 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000000c0)=0x10000, 0x6, 0x0) 4.02035943s ago: executing program 0 (id=278): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="0000010400000185678950dd2f38c1bfef3ba495f7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x40015b13, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r3 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x65c7, 0x800, 0x3, 0x2c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)={0x77359400}, 0x1, 0x0, 0x1}) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) 3.671278349s ago: executing program 2 (id=279): prlimit64(0x0, 0xe, &(0x7f00000014c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$rose(0xffffffffffffffff, 0x104, 0x2, &(0x7f0000000140), 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x8c540) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000640)={0x10, 0x3, 0x1, 'queue1\x00', 0x4}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x74, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4000000000070101000000000c00034000000000000000040c0002400000000d00008eaf0c0003400000000000000004f9b3f58439846cca74db60d777c3a3d4a6a3801a1483c270e759c9a8854aa210521d510dbf8df93b55518dea2f7dd305b7a08c36eea1fa24b020dc6a1ff358b489a12eac340b418365d0edc51723b286c3d734dc"], 0x40}}, 0x24000000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="680000000206010300000000fffff000000000000500010006000000050005000a0000000900020073797a32000000000500040000000000140007800800064000000000080013400000004011000300686173683a6970"], 0x68}}, 0x0) getresgid(0x0, &(0x7f0000000040), &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x80, 0x7362, 0x80, 0x1, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x4, 0x3, 0x3, 0xc}, 0x48) 2.387491028s ago: executing program 2 (id=280): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10203) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) io_setup(0x0, &(0x7f0000000200)) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000300), 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000280)='xen_mmu_pmd_clear\x00', r5}, 0x10) semget$private(0x0, 0x1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xffff}], 0x1) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x0, "d2c4924d08b1e00000000000000000f3f70000000400000000fcff00"}) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f00000001c0)={0xdacd}) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r6]) personality(0x10) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4ab1, &(0x7f0000000440)={0x0, 0x2958, 0x100, 0x0, 0xf6}, &(0x7f0000000080), &(0x7f00000000c0)) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) 2.044457697s ago: executing program 2 (id=281): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1, 0x271, &(0x7f00000005c0)="$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") mkdir(0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8010, 0xffffffffffffffff, 0x86681000) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000e80)='./file0\x00', 0x10082, &(0x7f0000000640)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c757466383d302c73686f72746e616d653d6d697865642c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f77657865632c756e695f786c6174653d312c73686f72746e616d653d77696e39352c71756965742c004812981d"], 0x2, 0x2ad, &(0x7f0000000280)="$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") mkdir(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1ea}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dd8a) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000600000000060015000200000014001680100008"], 0x38}}, 0x0) r5 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000840)=ANY=[@ANYRES32=r1, @ANYRESOCT=r5, @ANYBLOB="0100000000000000000002000000140002000061746164765f736c6166655f310000090001"], 0x34}}, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="040027bd705eaddbdf25010000001400020070696d72656700000000000000020000140082006970766c616e30000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x20000010) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0xff600000, 0x0) 1.577960046s ago: executing program 3 (id=282): syz_io_uring_setup(0x24fa, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000040)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20048004, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000040)=@sha1={0x1, "0eed1c1956756c4b0600000000000000f4327d7b"}, 0x15, 0x0) open$dir(&(0x7f0000001640)='./file0\x00', 0x3f, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) 170.043635ms ago: executing program 3 (id=283): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000002840)={0xff}, &(0x7f0000002880)={0x0, 0x989680}, 0x0) (fail_nth: 1) 24.397878ms ago: executing program 2 (id=284): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) read(r1, &(0x7f00000000c0)=""/29, 0x1d) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xc2}, @TCA_CAKE_ATM={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xb7}}, {0x4}}]}]}, 0x78}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = socket(0x10, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) getpid() syz_open_dev$vbi(0x0, 0x3, 0x2) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000240), 0x3, 0x55a3, &(0x7f0000005600)="$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") creat(0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r7, 0x2007ffb) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) 0s ago: executing program 0 (id=285): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='mounts\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x4004662b, &(0x7f0000000180)={@id={0x2, 0x0, @d}}) (async) r6 = open(&(0x7f0000000000)='./file1\x00', 0x10b942, 0x20) (async) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x191000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4a0, &(0x7f0000000540)="$eJzs3c9rXNUeAPDvvUn60jZ9Sd97i77C6yu8PtKinUka2wYXbQXRVUGt+xiTSQiZZEJm0jahSIp/gCCioitXbgT/AEH6J4hQ0L2IKEXbunChjszkThvj5EdtksHM5wMn99x7J/P9nhnmzJw5h7kBtK3jEXEpIjoi4lRE9GbH06zE8kqp3e7e3RtjtZJEtXrl+ySS7FjjvpJsezD7t+6IeOn5iFeTP8YtLy5NjxaLhflsP1+ZmcuXF5dOT82MThYmC7NDQ4Pnhs8Pnx0e2La2Xnj2m7ff+PC5C58+ee2rke9OvlZLqyc7t7od22ml6V31x6KhMyLmdyJYC3Rk7elqdSIAAGxJ7TP+PyLiYkTcf6/V2QAAAAA7oXqxJ35OIqoAAADAnpXW18AmaS5bC9ATaZrLrazh/VccSIulcuWJidLC7PjKWtm+6EonpoqFgWytcF90JbX9wXr94f6ZNftDEXE4It7q3V/fz42ViuOt/vIDAAAA2sTBNeP/H3tXxv8AAADAHtPX6gQAAACAHWf8DwAAAHvfuuP/pHN3EwEAAAB2wguXL9dKtXH96/GriwvTpaunxwvl6dzMwlhurDQ/l5sslSbrv9k3s9n9FUuluadiduF6vlIoV/LlxaWRmdLCbGWkfl3vkYLrRAMAAMDuO/zfW18mEbH89P56qdmXnTNWh70tfbSbJzuVB7D7OlqdANAyFvhC+zLGBzYb2HfvUh4AAMDO6f+3+X9oV484/w/sIeb/oX2Z/4f2ZYwP/On5/8+2PxcAAGBn9NRLkuayucCeSNNcLuJQ/bIAXcnEVLEwEBF/j4gverv+VtsfbHXSAAAAAAAAAAAAAAAAAAAAAAAAAPAXU60mUQUAAAD2tIj02yS7/ld/74metd8P7Et+6q1vI+La+1feuT5aqcwP1o7/8OB45d3s+JlWfIMBAAAArNUYpzfG8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwne7dvTHWKLsZ984zEdHXLH5ndNe33dEVEQfuJ9G56v+SiOjYhvjLNyPiSLP4SS2t6MuyWBs/jYj9LY5/cBviQzu7Vet/LjV7/aVxvL5t/vrrzMrjunN8vf4vfdD/dazT/x3aYoyjtz/Orxv/ZsTRzub9TyN+8pj97ysvLy2td676QUR/0/ef5Hex8pWZuXx5cen01MzoZGGyMDs0NHhu+Pzw2eGB/MRUsZD9bRrjzf988utG7T+wTvy+Tdp/Yovt/+X29bv/3CD+yf81f/6PbBC/9tj/P3sfqJ3vb9SXV+qrHfvo82MbtX98nfZv9vyf3GL7T734+tdbvCkAsAvKi0vTo8ViYV5FRUXlQaXVPRMAALDdHn7ob3UmAAAAAAAAAAAAAAAAAAAA0L524+fEVsfrbl1TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA29FsAAAD//4GD1Gs=") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000008b}, 0x0) (async) read$FUSE(r6, &(0x7f0000003c80)={0x2020}, 0x2020) (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f00000002c0)=0x7) (async) sched_setscheduler(r7, 0x5, &(0x7f0000000040)=0x3) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000100), 0x0, 0x0) (async) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) kernel console output (not intermixed with test programs): 9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc6b79e79 code=0x7ffc0000 [ 108.361264][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 109.100735][ T26] audit: type=1326 audit(1724675880.522:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc6b79e79 code=0x7ffc0000 [ 109.205753][ T26] audit: type=1326 audit(1724675880.522:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3bc6b79e79 code=0x7ffc0000 [ 109.229740][ T26] audit: type=1326 audit(1724675880.522:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc6b79e79 code=0x7ffc0000 [ 109.261181][ T26] audit: type=1326 audit(1724675880.522:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc6b79e79 code=0x7ffc0000 [ 109.281540][ T4271] loop3: detected capacity change from 0 to 40427 [ 109.315622][ C0] eth0: bad gso: type: 1, size: 1408 [ 109.366784][ T4290] loop2: detected capacity change from 0 to 64 [ 109.373596][ T26] audit: type=1326 audit(1724675880.532:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3bc6b79e79 code=0x7ffc0000 [ 109.401141][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 109.439964][ T26] audit: type=1326 audit(1724675880.532:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc6b79e79 code=0x7ffc0000 [ 109.501067][ T26] audit: type=1326 audit(1724675880.532:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc6b79e79 code=0x7ffc0000 [ 109.603409][ T26] audit: type=1326 audit(1724675880.532:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3bc6b79e79 code=0x7ffc0000 [ 109.641166][ T26] audit: type=1326 audit(1724675880.532:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc6b79e79 code=0x7ffc0000 [ 109.683644][ T4288] loop0: detected capacity change from 0 to 2048 [ 109.750358][ T3866] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.830128][ T4281] loop1: detected capacity change from 0 to 40427 [ 109.854587][ T4281] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 109.894036][ C0] eth0: bad gso: type: 1, size: 1408 [ 109.908583][ T4281] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 109.951555][ T4281] F2FS-fs (loop1): invalid crc value [ 109.982580][ T4281] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.035908][ T4279] loop4: detected capacity change from 0 to 40427 [ 110.173993][ T4279] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 110.221211][ T4279] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 110.316451][ T4281] F2FS-fs (loop1): Start checkpoint disabled! [ 110.805854][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 110.996056][ T4279] F2FS-fs (loop4): invalid crc value [ 111.036146][ T4279] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 111.881127][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 112.015687][ T4315] FAULT_INJECTION: forcing a failure. [ 112.015687][ T4315] name failslab, interval 1, probability 0, space 0, times 0 [ 112.094747][ T4315] CPU: 0 PID: 4315 Comm: syz.3.138 Not tainted 6.1.106-syzkaller #0 [ 112.102765][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 112.112822][ T4315] Call Trace: [ 112.116088][ T4315] [ 112.119004][ T4315] dump_stack_lvl+0x1e3/0x2cb [ 112.123683][ T4315] ? nf_tcp_handle_invalid+0x642/0x642 [ 112.129133][ T4315] ? panic+0x764/0x764 [ 112.133189][ T4315] ? __might_sleep+0xb0/0xb0 [ 112.137781][ T4315] ? __lock_acquire+0x125b/0x1f80 [ 112.142799][ T4315] should_fail_ex+0x3a6/0x4d0 [ 112.147468][ T4315] should_failslab+0x5/0x20 [ 112.151958][ T4315] slab_pre_alloc_hook+0x59/0x300 [ 112.156970][ T4315] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 112.162681][ T4315] __kmem_cache_alloc_node+0x47/0x260 [ 112.168042][ T4315] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 112.173749][ T4315] __kmalloc+0xa1/0x230 [ 112.177890][ T4315] ? rcu_is_watching+0x11/0xb0 [ 112.182641][ T4315] tomoyo_realpath_from_path+0xcb/0x5d0 [ 112.188180][ T4315] tomoyo_path_number_perm+0x21f/0x7f0 [ 112.193627][ T4315] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 112.199244][ T4315] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 112.204700][ T4315] ? __fget_files+0x28/0x4a0 [ 112.209289][ T4315] ? __fget_files+0x28/0x4a0 [ 112.213862][ T4315] ? __fget_files+0x435/0x4a0 [ 112.218521][ T4315] ? __fget_files+0x28/0x4a0 [ 112.223100][ T4315] security_file_ioctl+0x6d/0xa0 [ 112.228024][ T4315] __se_sys_ioctl+0x47/0x160 [ 112.232609][ T4315] do_syscall_64+0x3b/0xb0 [ 112.237012][ T4315] ? clear_bhb_loop+0x45/0xa0 [ 112.241679][ T4315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.247558][ T4315] RIP: 0033:0x7f905a579e79 [ 112.251960][ T4315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.271548][ T4315] RSP: 002b:00007f905b3a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.279949][ T4315] RAX: ffffffffffffffda RBX: 00007f905a715f80 RCX: 00007f905a579e79 [ 112.287906][ T4315] RDX: 0000000020000000 RSI: 000000000000890b RDI: 0000000000000006 [ 112.295862][ T4315] RBP: 00007f905b3a5090 R08: 0000000000000000 R09: 0000000000000000 [ 112.303819][ T4315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.311772][ T4315] R13: 0000000000000000 R14: 00007f905a715f80 R15: 00007ffcd47613a8 [ 112.319739][ T4315] [ 112.330688][ T4315] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.359132][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.791217][ T4326] loop1: detected capacity change from 0 to 64 [ 112.842433][ T4326] Bluetooth: MGMT ver 1.22 [ 112.854118][ T4327] netlink: 44 bytes leftover after parsing attributes in process `syz.4.139'. [ 112.866877][ T4327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 112.871116][ T3680] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.889740][ T4306] loop0: detected capacity change from 0 to 40427 [ 112.908061][ T4306] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 112.917167][ T4328] autofs4:pid:4328:autofs_fill_super: pipe file descriptor does not contain proper ops [ 112.918303][ T4306] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 112.927262][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 112.948366][ T4306] F2FS-fs (loop0): invalid crc value [ 112.956835][ T4306] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.963400][ T3053] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.995656][ T4306] F2FS-fs (loop0): Start checkpoint disabled! [ 113.005484][ T4306] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 113.012845][ T4306] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 113.038953][ T4306] FAULT_INJECTION: forcing a failure. [ 113.038953][ T4306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.052914][ T4306] CPU: 0 PID: 4306 Comm: syz.0.135 Not tainted 6.1.106-syzkaller #0 [ 113.060897][ T4306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 113.070936][ T4306] Call Trace: [ 113.074200][ T4306] [ 113.077115][ T4306] dump_stack_lvl+0x1e3/0x2cb [ 113.081792][ T4306] ? nf_tcp_handle_invalid+0x642/0x642 [ 113.087266][ T4306] ? panic+0x764/0x764 [ 113.091359][ T4306] ? __lock_acquire+0x1f80/0x1f80 [ 113.096395][ T4306] should_fail_ex+0x3a6/0x4d0 [ 113.101072][ T4306] _copy_from_user+0x2b/0x170 [ 113.105766][ T4306] do_handle_open+0xdb/0x960 [ 113.110356][ T4306] ? __x64_compat_sys_open_by_handle_at+0x80/0x80 [ 113.116773][ T4306] ? syscall_enter_from_user_mode+0x2e/0x230 [ 113.122773][ T4306] ? lockdep_hardirqs_on+0x94/0x130 [ 113.127978][ T4306] ? syscall_enter_from_user_mode+0x2e/0x230 [ 113.133950][ T4306] do_syscall_64+0x3b/0xb0 [ 113.138356][ T4306] ? clear_bhb_loop+0x45/0xa0 [ 113.143025][ T4306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.148904][ T4306] RIP: 0033:0x7fbaa9379e79 [ 113.153308][ T4306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.172899][ T4306] RSP: 002b:00007fbaa91ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 113.181307][ T4306] RAX: ffffffffffffffda RBX: 00007fbaa9515f80 RCX: 00007fbaa9379e79 [ 113.189267][ T4306] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 113.197222][ T4306] RBP: 00007fbaa91ff090 R08: 0000000000000000 R09: 0000000000000000 [ 113.205178][ T4306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.213135][ T4306] R13: 0000000000000000 R14: 00007fbaa9515f80 R15: 00007ffea46e5348 [ 113.221102][ T4306] [ 113.225308][ T3680] usb 3-1: Using ep0 maxpacket: 8 [ 113.272179][ T3053] usb 4-1: Using ep0 maxpacket: 8 [ 113.351258][ T3680] usb 3-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ab.e9 [ 113.360900][ T3680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.372944][ T3680] usb 3-1: config 0 descriptor?? [ 113.691287][ T3053] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 113.700364][ T3053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.741057][ T3053] usb 4-1: Product: syz [ 113.745290][ T3053] usb 4-1: Manufacturer: syz [ 113.749890][ T3053] usb 4-1: SerialNumber: syz [ 113.781719][ T3053] usb 4-1: config 0 descriptor?? [ 113.961125][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 114.041663][ T3053] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 114.086109][ T4333] loop0: detected capacity change from 0 to 40427 [ 114.158527][ T4333] F2FS-fs (loop0): Found nat_bits in checkpoint [ 114.183896][ T4335] loop4: detected capacity change from 0 to 40427 [ 114.237181][ T4335] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.241132][ T4333] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 114.306626][ T4337] loop1: detected capacity change from 0 to 40427 [ 114.371708][ T4337] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.430798][ T4337] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.439325][ T4335] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 115.001147][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 115.739757][ T4352] FAULT_INJECTION: forcing a failure. [ 115.739757][ T4352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.752855][ T4352] CPU: 1 PID: 4352 Comm: syz.1.143 Not tainted 6.1.106-syzkaller #0 [ 115.760840][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 115.770898][ T4352] Call Trace: [ 115.774182][ T4352] [ 115.777117][ T4352] dump_stack_lvl+0x1e3/0x2cb [ 115.781808][ T4352] ? nf_tcp_handle_invalid+0x642/0x642 [ 115.787273][ T4352] ? panic+0x764/0x764 [ 115.791351][ T4352] ? snprintf+0xd6/0x120 [ 115.795599][ T4352] should_fail_ex+0x3a6/0x4d0 [ 115.800283][ T4352] _copy_to_user+0x2b/0x130 [ 115.804787][ T4352] simple_read_from_buffer+0xc6/0x150 [ 115.810165][ T4352] proc_fail_nth_read+0x1a3/0x210 [ 115.815205][ T4352] ? proc_fault_inject_write+0x390/0x390 [ 115.820847][ T4352] ? fsnotify_perm+0x439/0x590 [ 115.825611][ T4352] ? proc_fault_inject_write+0x390/0x390 [ 115.831250][ T4352] vfs_read+0x2ed/0xbf0 [ 115.835417][ T4352] ? __fdget_pos+0x2ba/0x360 [ 115.840015][ T4352] ? kernel_read+0x1f0/0x1f0 [ 115.844610][ T4352] ? __fget_files+0x28/0x4a0 [ 115.849201][ T4352] ? __fget_files+0x435/0x4a0 [ 115.853886][ T4352] ? __fdget_pos+0x2ba/0x360 [ 115.858473][ T4352] ? ksys_read+0x77/0x2c0 [ 115.862810][ T4352] ksys_read+0x19c/0x2c0 [ 115.867055][ T4352] ? print_irqtrace_events+0x210/0x210 [ 115.872528][ T4352] ? vfs_write+0xbc0/0xbc0 [ 115.876948][ T4352] ? syscall_enter_from_user_mode+0x2e/0x230 [ 115.882934][ T4352] ? lockdep_hardirqs_on+0x94/0x130 [ 115.888138][ T4352] ? syscall_enter_from_user_mode+0x2e/0x230 [ 115.894137][ T4352] do_syscall_64+0x3b/0xb0 [ 115.898564][ T4352] ? clear_bhb_loop+0x45/0xa0 [ 115.903249][ T4352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.909147][ T4352] RIP: 0033:0x7f8be81788bc [ 115.913569][ T4352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 115.933181][ T4352] RSP: 002b:00007f8be9001030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.941611][ T4352] RAX: ffffffffffffffda RBX: 00007f8be8316058 RCX: 00007f8be81788bc [ 115.949584][ T4352] RDX: 000000000000000f RSI: 00007f8be90010a0 RDI: 0000000000000009 [ 115.957557][ T4352] RBP: 00007f8be9001090 R08: 0000000000000000 R09: 0000000000000000 [ 115.965532][ T4352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.973505][ T4352] R13: 0000000000000000 R14: 00007f8be8316058 R15: 00007ffebbbd3f58 [ 115.981494][ T4352] [ 116.074984][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 116.114593][ T3644] syz-executor: attempt to access beyond end of device [ 116.114593][ T3644] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.123278][ T3053] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 116.131364][ T3635] syz-executor: attempt to access beyond end of device [ 116.131364][ T3635] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.151213][ T3634] syz-executor: attempt to access beyond end of device [ 116.151213][ T3634] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.171425][ T3053] usb 4-1: USB disconnect, device number 7 [ 116.217304][ T3680] usb 3-1: USB disconnect, device number 4 [ 116.315285][ T4362] FAULT_INJECTION: forcing a failure. [ 116.315285][ T4362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.337514][ T4362] CPU: 1 PID: 4362 Comm: syz.2.149 Not tainted 6.1.106-syzkaller #0 [ 116.345524][ T4362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 116.355584][ T4362] Call Trace: [ 116.358867][ T4362] [ 116.361801][ T4362] dump_stack_lvl+0x1e3/0x2cb [ 116.366496][ T4362] ? nf_tcp_handle_invalid+0x642/0x642 [ 116.371967][ T4362] ? panic+0x764/0x764 [ 116.376047][ T4362] ? __lock_acquire+0x1f80/0x1f80 [ 116.381097][ T4362] should_fail_ex+0x3a6/0x4d0 [ 116.385796][ T4362] _copy_from_user+0x2b/0x170 [ 116.390479][ T4362] iovec_from_user+0x13d/0x380 [ 116.395256][ T4362] __import_iovec+0x72/0x4c0 [ 116.399855][ T4362] ? __fget_files+0x28/0x4a0 [ 116.404440][ T4362] import_iovec+0xe6/0x120 [ 116.408850][ T4362] do_readv+0x23a/0x460 [ 116.412996][ T4362] ? generic_file_rw_checks+0x260/0x260 [ 116.418537][ T4362] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 116.424509][ T4362] ? print_irqtrace_events+0x210/0x210 [ 116.429961][ T4362] ? syscall_enter_from_user_mode+0x2e/0x230 [ 116.435931][ T4362] ? lockdep_hardirqs_on+0x94/0x130 [ 116.441122][ T4362] ? syscall_enter_from_user_mode+0x2e/0x230 [ 116.447089][ T4362] do_syscall_64+0x3b/0xb0 [ 116.451499][ T4362] ? clear_bhb_loop+0x45/0xa0 [ 116.456166][ T4362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.462049][ T4362] RIP: 0033:0x7f3bc6b79e79 [ 116.466449][ T4362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.486039][ T4362] RSP: 002b:00007f3bc7940038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 116.494440][ T4362] RAX: ffffffffffffffda RBX: 00007f3bc6d15f80 RCX: 00007f3bc6b79e79 [ 116.502396][ T4362] RDX: 0000000000000001 RSI: 00000000200004c0 RDI: 0000000000000003 [ 116.510354][ T4362] RBP: 00007f3bc7940090 R08: 0000000000000000 R09: 0000000000000000 [ 116.518379][ T4362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.526345][ T4362] R13: 0000000000000000 R14: 00007f3bc6d15f80 R15: 00007ffc98937008 [ 116.534323][ T4362] [ 117.096586][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 117.873226][ T4375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.121169][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 119.200713][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 119.301291][ T3053] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.470625][ T4382] loop2: detected capacity change from 0 to 2048 [ 119.540503][ T4382] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.541215][ T3053] usb 1-1: Using ep0 maxpacket: 16 [ 119.668640][ T4393] tipc: Started in network mode [ 119.674289][ T4393] tipc: Node identity ., cluster identity 4711 [ 119.680632][ T4393] tipc: Enabling of bearer rejected, failed to enable media [ 119.692437][ T3053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.712457][ T3053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.741106][ T3053] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 119.770570][ T3053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.821841][ T3053] usb 1-1: config 0 descriptor?? [ 119.894643][ T4382] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.154: bg 0: block 234: padding at end of block bitmap is not set [ 119.912503][ T4382] EXT4-fs (loop2): Remounting filesystem read-only [ 119.919040][ T4382] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 119.931852][ T26] kauditd_printk_skb: 86 callbacks suppressed [ 119.931865][ T26] audit: type=1804 audit(1724675892.212:385): pid=4382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.154" name="/newroot/28/file0/bus" dev="loop2" ino=16 res=1 errno=0 [ 120.049586][ T3641] EXT4-fs (loop2): unmounting filesystem. [ 120.128992][ T4397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.158810][ T4397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.201110][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 120.492601][ T4380] loop3: detected capacity change from 0 to 40427 [ 120.614501][ T3053] aquacomputer_d5next 0003:0C70:F00D.0003: unknown main item tag 0x0 [ 120.655019][ T3053] aquacomputer_d5next 0003:0C70:F00D.0003: unknown main item tag 0x0 [ 120.668622][ T4380] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.714038][ T4399] loop2: detected capacity change from 0 to 65536 [ 120.717561][ T3053] aquacomputer_d5next 0003:0C70:F00D.0003: unknown main item tag 0x0 [ 120.807213][ T3053] aquacomputer_d5next 0003:0C70:F00D.0003: unknown main item tag 0x0 [ 120.830376][ T4393] loop4: detected capacity change from 0 to 32768 [ 120.830387][ T3053] aquacomputer_d5next 0003:0C70:F00D.0003: unknown main item tag 0x0 [ 120.852648][ T4393] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.156 (4393) [ 120.894440][ T4380] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 120.908480][ T4396] loop1: detected capacity change from 0 to 40427 [ 120.910285][ T3053] aquacomputer_d5next 0003:0C70:F00D.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.0-1/input0 [ 120.937484][ T4396] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 120.951041][ T4396] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 120.988035][ T4399] XFS (loop2): Mounting V5 Filesystem [ 121.044955][ T4396] F2FS-fs (loop1): Found nat_bits in checkpoint [ 121.130825][ T4399] XFS (loop2): Ending clean mount [ 121.164128][ T4393] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 121.241140][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 121.419586][ T4393] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 122.273367][ T3645] syz-executor: attempt to access beyond end of device [ 122.273367][ T3645] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.311257][ T4393] BTRFS error (device loop4): superblock checksum mismatch [ 122.374621][ T4396] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 122.403056][ T3817] usb 1-1: USB disconnect, device number 5 [ 122.411547][ T4396] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 122.460354][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 122.478220][ T4393] BTRFS error (device loop4): open_ctree failed [ 122.509990][ T3641] XFS (loop2): Unmounting Filesystem [ 122.517074][ T4396] syz.1.157: attempt to access beyond end of device [ 122.517074][ T4396] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 122.821226][ T3979] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 123.007043][ T3817] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.196442][ T3979] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 123.216995][ T3979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.243281][ T3979] usb 5-1: config 0 descriptor?? [ 123.272502][ T3817] usb 1-1: Using ep0 maxpacket: 8 [ 123.295464][ T3979] usb 5-1: bad CDC descriptors [ 123.391313][ T3817] usb 1-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ab.e9 [ 123.421122][ T3817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.446209][ T3817] usb 1-1: config 0 descriptor?? [ 123.481317][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 123.497860][ T4144] usb 5-1: USB disconnect, device number 6 [ 123.687850][ T4428] loop2: detected capacity change from 0 to 40427 [ 123.709250][ T153] usb 1-1: USB disconnect, device number 6 [ 123.718719][ T4426] loop3: detected capacity change from 0 to 40427 [ 123.733281][ T4426] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 123.745149][ T4426] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 123.840052][ T4426] F2FS-fs (loop3): Found nat_bits in checkpoint [ 123.852890][ T4428] F2FS-fs (loop2): Found nat_bits in checkpoint [ 123.914095][ T4428] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 123.919516][ T4426] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 123.929277][ T4426] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 124.521293][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 124.581601][ T4453] FAULT_INJECTION: forcing a failure. [ 124.581601][ T4453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.637331][ T4453] CPU: 0 PID: 4453 Comm: syz.3.159 Not tainted 6.1.106-syzkaller #0 [ 124.645353][ T4453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 124.655413][ T4453] Call Trace: [ 124.658696][ T4453] [ 124.661622][ T4453] dump_stack_lvl+0x1e3/0x2cb [ 124.666298][ T4453] ? nf_tcp_handle_invalid+0x642/0x642 [ 124.671750][ T4453] ? panic+0x764/0x764 [ 124.675814][ T4453] ? snprintf+0xd6/0x120 [ 124.680047][ T4453] should_fail_ex+0x3a6/0x4d0 [ 124.684721][ T4453] _copy_to_user+0x2b/0x130 [ 124.689215][ T4453] simple_read_from_buffer+0xc6/0x150 [ 124.694585][ T4453] proc_fail_nth_read+0x1a3/0x210 [ 124.699603][ T4453] ? proc_fault_inject_write+0x390/0x390 [ 124.705232][ T4453] ? fsnotify_perm+0x439/0x590 [ 124.709985][ T4453] ? proc_fault_inject_write+0x390/0x390 [ 124.715617][ T4453] vfs_read+0x2ed/0xbf0 [ 124.719762][ T4453] ? __fdget_pos+0x2ba/0x360 [ 124.724339][ T4453] ? kernel_read+0x1f0/0x1f0 [ 124.728916][ T4453] ? __fget_files+0x28/0x4a0 [ 124.733493][ T4453] ? __fget_files+0x435/0x4a0 [ 124.738159][ T4453] ? __fdget_pos+0x2ba/0x360 [ 124.742737][ T4453] ? ksys_read+0x77/0x2c0 [ 124.747057][ T4453] ksys_read+0x19c/0x2c0 [ 124.751289][ T4453] ? print_irqtrace_events+0x210/0x210 [ 124.756741][ T4453] ? vfs_write+0xbc0/0xbc0 [ 124.761142][ T4453] ? syscall_enter_from_user_mode+0x2e/0x230 [ 124.767107][ T4453] ? lockdep_hardirqs_on+0x94/0x130 [ 124.772290][ T4453] ? syscall_enter_from_user_mode+0x2e/0x230 [ 124.778256][ T4453] do_syscall_64+0x3b/0xb0 [ 124.782663][ T4453] ? clear_bhb_loop+0x45/0xa0 [ 124.787331][ T4453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.793211][ T4453] RIP: 0033:0x7f905a5788bc [ 124.797615][ T4453] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 124.817207][ T4453] RSP: 002b:00007f905b384030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.825611][ T4453] RAX: ffffffffffffffda RBX: 00007f905a716058 RCX: 00007f905a5788bc [ 124.833568][ T4453] RDX: 000000000000000f RSI: 00007f905b3840a0 RDI: 0000000000000005 [ 124.841523][ T4453] RBP: 00007f905b384090 R08: 0000000000000000 R09: 0000000000000000 [ 124.849478][ T4453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.857432][ T4453] R13: 0000000000000001 R14: 00007f905a716058 R15: 00007ffcd47613a8 [ 124.865399][ T4453] [ 125.606257][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 125.831731][ T3641] syz-executor: attempt to access beyond end of device [ 125.831731][ T3641] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.026643][ T4478] FAULT_INJECTION: forcing a failure. [ 126.026643][ T4478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.076379][ T4478] CPU: 1 PID: 4478 Comm: syz.0.172 Not tainted 6.1.106-syzkaller #0 [ 126.084403][ T4478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 126.094461][ T4478] Call Trace: [ 126.097742][ T4478] [ 126.100677][ T4478] dump_stack_lvl+0x1e3/0x2cb [ 126.105375][ T4478] ? nf_tcp_handle_invalid+0x642/0x642 [ 126.110845][ T4478] ? panic+0x764/0x764 [ 126.114924][ T4478] ? __lock_acquire+0x1f80/0x1f80 [ 126.119965][ T4478] should_fail_ex+0x3a6/0x4d0 [ 126.124658][ T4478] _copy_from_user+0x2b/0x170 [ 126.129349][ T4478] copy_msghdr_from_user+0xaa/0x670 [ 126.134561][ T4478] ? sendmsg_copy_msghdr+0x70/0x70 [ 126.139675][ T4478] __sys_sendmsg+0x236/0x390 [ 126.144258][ T4478] ? ____sys_sendmsg+0x8f0/0x8f0 [ 126.149182][ T4478] ? vfs_write+0x6cf/0xbc0 [ 126.153601][ T4478] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 126.159575][ T4478] ? syscall_enter_from_user_mode+0x2e/0x230 [ 126.165542][ T4478] ? lockdep_hardirqs_on+0x94/0x130 [ 126.170725][ T4478] ? syscall_enter_from_user_mode+0x2e/0x230 [ 126.176695][ T4478] do_syscall_64+0x3b/0xb0 [ 126.181108][ T4478] ? clear_bhb_loop+0x45/0xa0 [ 126.185782][ T4478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.191662][ T4478] RIP: 0033:0x7fbaa9379e79 [ 126.196061][ T4478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.215649][ T4478] RSP: 002b:00007fbaa91ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.224048][ T4478] RAX: ffffffffffffffda RBX: 00007fbaa9515f80 RCX: 00007fbaa9379e79 [ 126.232003][ T4478] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 126.239957][ T4478] RBP: 00007fbaa91ff090 R08: 0000000000000000 R09: 0000000000000000 [ 126.248086][ T4478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.256041][ T4478] R13: 0000000000000000 R14: 00007fbaa9515f80 R15: 00007ffea46e5348 [ 126.264006][ T4478] [ 126.278979][ T153] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 126.297820][ T4458] loop1: detected capacity change from 0 to 40427 [ 126.400123][ T4480] loop0: detected capacity change from 0 to 2048 [ 126.426892][ T4480] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 126.442932][ T4458] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.473958][ T4480] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 126.499963][ T4480] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 126.514591][ T4480] UDF-fs: Scanning with blocksize 512 failed [ 126.550459][ T4458] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.553865][ T153] usb 5-1: Using ep0 maxpacket: 16 [ 126.576560][ T4480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.681133][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 126.851394][ T153] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.881079][ T153] usb 5-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 126.990874][ T4489] FAULT_INJECTION: forcing a failure. [ 126.990874][ T4489] name failslab, interval 1, probability 0, space 0, times 0 [ 127.004227][ T4489] CPU: 1 PID: 4489 Comm: syz.1.165 Not tainted 6.1.106-syzkaller #0 [ 127.012229][ T4489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 127.022377][ T4489] Call Trace: [ 127.025652][ T4489] [ 127.028584][ T4489] dump_stack_lvl+0x1e3/0x2cb [ 127.033282][ T4489] ? nf_tcp_handle_invalid+0x642/0x642 [ 127.038746][ T4489] ? panic+0x764/0x764 [ 127.042816][ T4489] ? __might_sleep+0xb0/0xb0 [ 127.047415][ T4489] should_fail_ex+0x3a6/0x4d0 [ 127.052101][ T4489] should_failslab+0x5/0x20 [ 127.056605][ T4489] slab_pre_alloc_hook+0x59/0x300 [ 127.061635][ T4489] ? preempt_schedule+0xd9/0xe0 [ 127.066495][ T4489] kmem_cache_alloc_node+0x52/0x310 [ 127.071784][ T4489] ? dup_task_struct+0x57/0x6d0 [ 127.076642][ T4489] dup_task_struct+0x57/0x6d0 [ 127.081329][ T4489] copy_process+0x637/0x4060 [ 127.085936][ T4489] ? finish_task_switch+0x1c5/0x810 [ 127.091143][ T4489] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 127.097137][ T4489] ? print_irqtrace_events+0x210/0x210 [ 127.102611][ T4489] ? idle_dummy+0x10/0x10 [ 127.106945][ T4489] ? finish_task_switch+0x1ca/0x810 [ 127.112148][ T4489] ? lockdep_hardirqs_on+0x94/0x130 [ 127.117354][ T4489] kernel_clone+0x222/0x920 [ 127.121860][ T4489] ? __schedule+0x1447/0x4570 [ 127.126545][ T4489] ? create_io_thread+0x180/0x180 [ 127.131588][ T4489] __x64_sys_clone+0x231/0x280 [ 127.136355][ T4489] ? __do_sys_vfork+0x110/0x110 [ 127.141207][ T4489] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 127.147209][ T4489] ? syscall_enter_from_user_mode+0x2e/0x230 [ 127.153193][ T4489] ? lockdep_hardirqs_on+0x94/0x130 [ 127.158398][ T4489] ? syscall_enter_from_user_mode+0x2e/0x230 [ 127.164381][ T4489] do_syscall_64+0x3b/0xb0 [ 127.168802][ T4489] ? clear_bhb_loop+0x45/0xa0 [ 127.173489][ T4489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.179387][ T4489] RIP: 0033:0x7f8be8179e79 [ 127.183805][ T4489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.203414][ T4489] RSP: 002b:00007f8be8fdffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 127.211835][ T4489] RAX: ffffffffffffffda RBX: 00007f8be8316130 RCX: 00007f8be8179e79 [ 127.219807][ T4489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.227777][ T4489] RBP: 00007f8be8fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 127.235770][ T4489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.243741][ T4489] R13: 0000000000000000 R14: 00007f8be8316130 R15: 00007ffebbbd3f58 [ 127.251727][ T4489] [ 127.289476][ T4490] input: syz0 as /devices/virtual/input/input5 [ 127.561675][ T3635] syz-executor: attempt to access beyond end of device [ 127.561675][ T3635] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 127.812750][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 127.820656][ T153] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.939569][ T4496] FAULT_INJECTION: forcing a failure. [ 127.939569][ T4496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.976524][ T4496] CPU: 0 PID: 4496 Comm: syz.0.176 Not tainted 6.1.106-syzkaller #0 [ 127.984533][ T4496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 127.994591][ T4496] Call Trace: [ 127.997876][ T4496] [ 128.000807][ T4496] dump_stack_lvl+0x1e3/0x2cb [ 128.005503][ T4496] ? nf_tcp_handle_invalid+0x642/0x642 [ 128.010972][ T4496] ? panic+0x764/0x764 [ 128.015046][ T4496] ? __lock_acquire+0x1f80/0x1f80 [ 128.020086][ T4496] should_fail_ex+0x3a6/0x4d0 [ 128.024783][ T4496] _copy_from_user+0x2b/0x170 [ 128.029465][ T4496] copy_msghdr_from_user+0xaa/0x670 [ 128.034679][ T4496] ? sendmsg_copy_msghdr+0x70/0x70 [ 128.039812][ T4496] __sys_recvmsg+0x24b/0x3d0 [ 128.044415][ T4496] ? ____sys_recvmsg+0x530/0x530 [ 128.049381][ T4496] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 128.055380][ T4496] ? syscall_enter_from_user_mode+0x2e/0x230 [ 128.061367][ T4496] ? lockdep_hardirqs_on+0x94/0x130 [ 128.066588][ T4496] ? syscall_enter_from_user_mode+0x2e/0x230 [ 128.072573][ T4496] do_syscall_64+0x3b/0xb0 [ 128.076998][ T4496] ? clear_bhb_loop+0x45/0xa0 [ 128.081681][ T4496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.087576][ T4496] RIP: 0033:0x7fbaa9379e79 [ 128.091998][ T4496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.111608][ T4496] RSP: 002b:00007fbaa91ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 128.120032][ T4496] RAX: ffffffffffffffda RBX: 00007fbaa9515f80 RCX: 00007fbaa9379e79 [ 128.128009][ T4496] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 128.135987][ T4496] RBP: 00007fbaa91ff090 R08: 0000000000000000 R09: 0000000000000000 [ 128.143967][ T4496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.151943][ T4496] R13: 0000000000000000 R14: 00007fbaa9515f80 R15: 00007ffea46e5348 [ 128.159932][ T4496] [ 128.171807][ T153] usb 5-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 128.191229][ T153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.199234][ T153] usb 5-1: Product: syz [ 128.216934][ T153] usb 5-1: Manufacturer: syz [ 128.238221][ T153] usb 5-1: SerialNumber: syz [ 128.424031][ T153] usb 5-1: config 0 descriptor?? [ 128.646543][ T153] sierra 5-1:0.0: Sierra USB modem converter detected [ 128.841265][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 128.885745][ T4486] loop3: detected capacity change from 0 to 40427 [ 128.928568][ T4486] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.050055][ T4486] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.094667][ T4476] loop4: detected capacity change from 0 to 4096 [ 129.111382][ T4476] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 129.351079][ T3817] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 130.014791][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 130.079382][ T4520] loop2: detected capacity change from 0 to 1024 [ 130.097623][ T4520] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 130.113614][ T153] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 130.205183][ T3645] syz-executor: attempt to access beyond end of device [ 130.205183][ T3645] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.206401][ T153] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 130.226740][ T4520] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 130.231127][ T3817] usb 2-1: Using ep0 maxpacket: 8 [ 130.237715][ T4520] EXT4-fs (loop2): invalid journal inode [ 130.247370][ T4520] EXT4-fs (loop2): can't get journal size [ 130.276303][ T153] usb 5-1: USB disconnect, device number 7 [ 130.293673][ T4520] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.320697][ T153] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 130.341698][ T153] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 130.354487][ T153] sierra 5-1:0.0: device disconnected [ 130.379519][ T4520] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 37: comm syz.2.179: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 130.400382][ T3817] usb 2-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ab.e9 [ 130.429860][ T3817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.486825][ T3817] usb 2-1: config 0 descriptor?? [ 130.497221][ T4520] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.179: path /34/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 130.759560][ T22] usb 2-1: USB disconnect, device number 2 [ 131.082523][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 131.725711][ T4532] loop1: detected capacity change from 0 to 512 [ 131.744273][ T4532] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 131.859734][ T4532] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 131.873180][ T4532] EXT4-fs (loop1): orphan cleanup on readonly fs [ 131.895454][ T4532] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.183: bg 0: block 361: padding at end of block bitmap is not set [ 131.919672][ T4532] EXT4-fs (loop1): Remounting filesystem read-only [ 131.926398][ T4532] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 131.938826][ T4532] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.183: attempt to clear invalid blocks 33619980 len 1 [ 131.958584][ T4532] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.183: invalid indirect mapped block 1811939328 (level 0) [ 131.975752][ T4532] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.183: invalid indirect mapped block 2185560079 (level 1) [ 131.994551][ T4532] EXT4-fs (loop1): 1 truncate cleaned up [ 132.000304][ T4532] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 132.121344][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 132.270617][ T4524] loop4: detected capacity change from 0 to 40427 [ 132.328297][ T4520] Zero length message leads to an empty skb [ 132.393744][ T3635] EXT4-fs (loop1): unmounting filesystem. [ 132.422291][ T3641] EXT4-fs (loop2): unmounting filesystem. [ 132.468055][ T4524] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.521089][ T4539] FAULT_INJECTION: forcing a failure. [ 132.521089][ T4539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.569572][ T4539] CPU: 1 PID: 4539 Comm: syz.1.184 Not tainted 6.1.106-syzkaller #0 [ 132.577586][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 132.587472][ T4540] loop2: detected capacity change from 0 to 2048 [ 132.587626][ T4539] Call Trace: [ 132.587635][ T4539] [ 132.600149][ T4539] dump_stack_lvl+0x1e3/0x2cb [ 132.603873][ T4528] loop3: detected capacity change from 0 to 40427 [ 132.604828][ T4539] ? nf_tcp_handle_invalid+0x642/0x642 [ 132.616672][ T4539] ? panic+0x764/0x764 [ 132.620746][ T4539] ? __lock_acquire+0x1f80/0x1f80 [ 132.625792][ T4539] should_fail_ex+0x3a6/0x4d0 [ 132.630483][ T4539] _copy_from_user+0x2b/0x170 [ 132.635160][ T4539] copy_msghdr_from_user+0xaa/0x670 [ 132.640368][ T4539] ? sendmsg_copy_msghdr+0x70/0x70 [ 132.645491][ T4539] __sys_sendmsg+0x236/0x390 [ 132.650074][ T4539] ? ____sys_sendmsg+0x8f0/0x8f0 [ 132.655002][ T4539] ? vfs_write+0x6cf/0xbc0 [ 132.659426][ T4539] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 132.665411][ T4539] ? syscall_enter_from_user_mode+0x2e/0x230 [ 132.671379][ T4539] ? lockdep_hardirqs_on+0x94/0x130 [ 132.676565][ T4539] ? syscall_enter_from_user_mode+0x2e/0x230 [ 132.682533][ T4539] do_syscall_64+0x3b/0xb0 [ 132.686938][ T4539] ? clear_bhb_loop+0x45/0xa0 [ 132.691605][ T4539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.697488][ T4539] RIP: 0033:0x7f8be8179e79 [ 132.701892][ T4539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.721486][ T4539] RSP: 002b:00007f8be9022038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.729975][ T4539] RAX: ffffffffffffffda RBX: 00007f8be8315f80 RCX: 00007f8be8179e79 [ 132.737933][ T4539] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 132.745887][ T4539] RBP: 00007f8be9022090 R08: 0000000000000000 R09: 0000000000000000 [ 132.753842][ T4539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.761799][ T4539] R13: 0000000000000000 R14: 00007f8be8315f80 R15: 00007ffebbbd3f58 [ 132.769768][ T4539] [ 132.775860][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.783348][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.793444][ T4540] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 132.829775][ T4540] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 132.853764][ T4528] F2FS-fs (loop3): Found nat_bits in checkpoint [ 132.880748][ T4540] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 132.888804][ T4524] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 132.966275][ T4540] UDF-fs: Scanning with blocksize 512 failed [ 133.033221][ T4540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.096628][ T4546] loop1: detected capacity change from 0 to 2048 [ 133.161294][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 133.249287][ T4528] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 133.307502][ T4546] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 133.819909][ T4552] input: syz0 as /devices/virtual/input/input6 [ 133.885582][ T4546] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 133.939705][ T4546] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 133.969524][ T4546] UDF-fs: Scanning with blocksize 512 failed [ 134.049574][ T4546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.201129][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 134.272577][ T4554] FAULT_INJECTION: forcing a failure. [ 134.272577][ T4554] name failslab, interval 1, probability 0, space 0, times 0 [ 134.285235][ T4554] CPU: 0 PID: 4554 Comm: syz.3.182 Not tainted 6.1.106-syzkaller #0 [ 134.293217][ T4554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 134.303270][ T4554] Call Trace: [ 134.306556][ T4554] [ 134.309487][ T4554] dump_stack_lvl+0x1e3/0x2cb [ 134.314182][ T4554] ? nf_tcp_handle_invalid+0x642/0x642 [ 134.319647][ T4554] ? panic+0x764/0x764 [ 134.323722][ T4554] ? __might_sleep+0xb0/0xb0 [ 134.328323][ T4554] should_fail_ex+0x3a6/0x4d0 [ 134.333011][ T4554] should_failslab+0x5/0x20 [ 134.337519][ T4554] slab_pre_alloc_hook+0x59/0x300 [ 134.342555][ T4554] kmem_cache_alloc_node+0x52/0x310 [ 134.347754][ T4554] ? dup_task_struct+0x57/0x6d0 [ 134.352610][ T4554] dup_task_struct+0x57/0x6d0 [ 134.357295][ T4554] ? _raw_spin_unlock_irq+0x1f/0x40 [ 134.362493][ T4554] ? lockdep_hardirqs_on+0x94/0x130 [ 134.367700][ T4554] copy_process+0x637/0x4060 [ 134.372294][ T4554] ? get_pid_task+0x1f/0x1e0 [ 134.376910][ T4554] ? idle_dummy+0x10/0x10 [ 134.381244][ T4554] ? ksys_write+0x23a/0x2c0 [ 134.385748][ T4554] ? proc_fail_nth_read+0x210/0x210 [ 134.390955][ T4554] ? __lock_acquire+0x1f80/0x1f80 [ 134.395989][ T4554] kernel_clone+0x222/0x920 [ 134.400499][ T4554] ? vfs_write+0x6cf/0xbc0 [ 134.404919][ T4554] ? create_io_thread+0x180/0x180 [ 134.409955][ T4554] ? mutex_unlock+0x10/0x10 [ 134.414470][ T4554] __x64_sys_clone+0x231/0x280 [ 134.419244][ T4554] ? __do_sys_vfork+0x110/0x110 [ 134.424093][ T4554] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 134.430092][ T4554] ? syscall_enter_from_user_mode+0x2e/0x230 [ 134.436075][ T4554] ? lockdep_hardirqs_on+0x94/0x130 [ 134.441277][ T4554] ? syscall_enter_from_user_mode+0x2e/0x230 [ 134.447261][ T4554] do_syscall_64+0x3b/0xb0 [ 134.451680][ T4554] ? clear_bhb_loop+0x45/0xa0 [ 134.456362][ T4554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.462260][ T4554] RIP: 0033:0x7f905a579e79 [ 134.466676][ T4554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.486285][ T4554] RSP: 002b:00007f905b362fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 134.494717][ T4554] RAX: ffffffffffffffda RBX: 00007f905a716130 RCX: 00007f905a579e79 [ 134.502705][ T4554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.510768][ T4554] RBP: 00007f905b363090 R08: 0000000000000000 R09: 0000000000000000 [ 134.518749][ T4554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.526728][ T4554] R13: 0000000000000000 R14: 00007f905a716130 R15: 00007ffcd47613a8 [ 134.534720][ T4554] [ 135.114250][ T4556] FAULT_INJECTION: forcing a failure. [ 135.114250][ T4556] name failslab, interval 1, probability 0, space 0, times 0 [ 135.126905][ T4556] CPU: 1 PID: 4556 Comm: syz.1.186 Not tainted 6.1.106-syzkaller #0 [ 135.134887][ T4556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 135.144939][ T4556] Call Trace: [ 135.148221][ T4556] [ 135.151154][ T4556] dump_stack_lvl+0x1e3/0x2cb [ 135.155849][ T4556] ? nf_tcp_handle_invalid+0x642/0x642 [ 135.161315][ T4556] ? panic+0x764/0x764 [ 135.165387][ T4556] ? __might_sleep+0xb0/0xb0 [ 135.169985][ T4556] should_fail_ex+0x3a6/0x4d0 [ 135.174679][ T4556] should_failslab+0x5/0x20 [ 135.179185][ T4556] slab_pre_alloc_hook+0x59/0x300 [ 135.184226][ T4556] ? __lock_acquire+0x1f80/0x1f80 [ 135.189259][ T4556] kmem_cache_alloc+0x4e/0x2d0 [ 135.194027][ T4556] ? getname_flags+0xb8/0x4f0 [ 135.198719][ T4556] getname_flags+0xb8/0x4f0 [ 135.203222][ T4556] ? build_open_flags+0x444/0x5b0 [ 135.208256][ T4556] do_sys_openat2+0xd2/0x4f0 [ 135.212859][ T4556] ? do_sys_open+0x220/0x220 [ 135.217466][ T4556] __x64_sys_openat+0x243/0x290 [ 135.222325][ T4556] ? __ia32_sys_open+0x270/0x270 [ 135.227271][ T4556] ? syscall_enter_from_user_mode+0x2e/0x230 [ 135.233255][ T4556] ? lockdep_hardirqs_on+0x94/0x130 [ 135.238455][ T4556] ? syscall_enter_from_user_mode+0x2e/0x230 [ 135.244441][ T4556] do_syscall_64+0x3b/0xb0 [ 135.248864][ T4556] ? clear_bhb_loop+0x45/0xa0 [ 135.253547][ T4556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.259446][ T4556] RIP: 0033:0x7f8be8179e79 [ 135.263860][ T4556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.283465][ T4556] RSP: 002b:00007f8be8fe0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.291885][ T4556] RAX: ffffffffffffffda RBX: 00007f8be8316130 RCX: 00007f8be8179e79 [ 135.299857][ T4556] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 135.307827][ T4556] RBP: 00007f8be8fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 135.315796][ T4556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.323766][ T4556] R13: 0000000000000000 R14: 00007f8be8316130 R15: 00007ffebbbd3f58 [ 135.331763][ T4556] [ 135.338178][ T4556] input: syz0 as /devices/virtual/input/input7 [ 135.631431][ T3645] syz-executor: attempt to access beyond end of device [ 135.631431][ T3645] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.661259][ T3634] syz-executor: attempt to access beyond end of device [ 135.661259][ T3634] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.782419][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 136.307586][ T4565] loop1: detected capacity change from 0 to 1024 [ 136.429587][ T3866] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.462903][ T4565] overlayfs: failed to resolve './file1': -2 [ 136.506789][ T4565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 136.577640][ T4568] loop4: detected capacity change from 0 to 164 [ 136.617546][ T4565] 9pnet_fd: Insufficient options for proto=fd [ 136.675284][ T3866] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.829309][ T4571] loop3: detected capacity change from 0 to 512 [ 136.841330][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 136.919083][ T4571] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 136.947933][ T4571] EXT4-fs (loop3): mount failed [ 137.036555][ T4571] loop3: detected capacity change from 0 to 256 [ 137.093440][ T4571] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.419183][ T4578] loop2: detected capacity change from 0 to 128 [ 137.429735][ T4581] FAULT_INJECTION: forcing a failure. [ 137.429735][ T4581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.443089][ T4581] CPU: 0 PID: 4581 Comm: syz.3.189 Not tainted 6.1.106-syzkaller #0 [ 137.451068][ T4581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 137.461117][ T4581] Call Trace: [ 137.464393][ T4581] [ 137.467323][ T4581] dump_stack_lvl+0x1e3/0x2cb [ 137.472019][ T4581] ? nf_tcp_handle_invalid+0x642/0x642 [ 137.477484][ T4581] ? panic+0x764/0x764 [ 137.481557][ T4581] ? __lock_acquire+0x1f80/0x1f80 [ 137.486591][ T4581] should_fail_ex+0x3a6/0x4d0 [ 137.491277][ T4581] _copy_from_user+0x2b/0x170 [ 137.495957][ T4581] copy_msghdr_from_user+0xaa/0x670 [ 137.501179][ T4581] ? sendmsg_copy_msghdr+0x70/0x70 [ 137.506318][ T4581] __sys_sendmsg+0x236/0x390 [ 137.510922][ T4581] ? ____sys_sendmsg+0x8f0/0x8f0 [ 137.515863][ T4581] ? vfs_write+0x6cf/0xbc0 [ 137.520313][ T4581] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 137.526310][ T4581] ? syscall_enter_from_user_mode+0x2e/0x230 [ 137.532294][ T4581] ? lockdep_hardirqs_on+0x94/0x130 [ 137.537495][ T4581] ? syscall_enter_from_user_mode+0x2e/0x230 [ 137.543482][ T4581] do_syscall_64+0x3b/0xb0 [ 137.547904][ T4581] ? clear_bhb_loop+0x45/0xa0 [ 137.552585][ T4581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.558480][ T4581] RIP: 0033:0x7f905a579e79 [ 137.562899][ T4581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.582514][ T4581] RSP: 002b:00007f905b363038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.590941][ T4581] RAX: ffffffffffffffda RBX: 00007f905a716130 RCX: 00007f905a579e79 [ 137.598919][ T4581] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000007 [ 137.606889][ T4581] RBP: 00007f905b363090 R08: 0000000000000000 R09: 0000000000000000 [ 137.614872][ T4581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.622853][ T4581] R13: 0000000000000000 R14: 00007f905a716130 R15: 00007ffcd47613a8 [ 137.630848][ T4581] [ 137.640894][ T3680] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.942456][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 138.043303][ T4578] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 138.057815][ T4578] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 138.093798][ T26] audit: type=1804 audit(1724675910.382:386): pid=4578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.194" name="/newroot/36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop2" ino=12 res=1 errno=0 [ 138.101113][ T3680] usb 2-1: Using ep0 maxpacket: 8 [ 138.155489][ T4585] loop3: detected capacity change from 0 to 8 [ 138.195815][ T4580] overlayfs: './file0' not a directory [ 138.224745][ T4568] loop4: detected capacity change from 0 to 32768 [ 138.261371][ T3680] usb 2-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ab.e9 [ 138.267148][ T4568] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.187 (4568) [ 138.288253][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.301611][ T3680] usb 2-1: config 0 descriptor?? [ 138.309596][ T4587] loop0: detected capacity change from 0 to 2048 [ 138.403910][ T4568] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.422322][ T4587] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 138.441878][ T4568] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 138.444312][ T4587] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 138.450855][ T4568] BTRFS info (device loop4): setting nodatacow, compression disabled [ 138.468266][ T4587] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 138.477460][ T4568] BTRFS info (device loop4): enabling auto defrag [ 138.485783][ T4568] BTRFS info (device loop4): max_inline at 0 [ 138.485884][ T3641] EXT4-fs (loop2): unmounting filesystem. [ 138.497791][ T4568] BTRFS info (device loop4): using free space tree [ 138.506245][ T4587] UDF-fs: Scanning with blocksize 512 failed [ 138.530194][ T4587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.553491][ T4144] usb 2-1: USB disconnect, device number 3 [ 138.569114][ T3979] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.001575][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 139.339993][ T3979] usb 4-1: Using ep0 maxpacket: 16 [ 139.433368][ T3680] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 139.541503][ T3979] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.550616][ T3979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 139.596980][ T3979] usb 4-1: SerialNumber: syz [ 139.663605][ T3979] cdc_acm 4-1:1.0: skipping garbage [ 139.670927][ T3979] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 139.705055][ T3979] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 139.711055][ T3680] usb 5-1: Using ep0 maxpacket: 16 [ 139.718521][ T3979] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 139.851285][ T3680] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 139.865266][ T3979] usb 4-1: USB disconnect, device number 8 [ 139.923829][ T4628] mkiss: ax0: crc mode is auto. [ 139.988028][ T4629] fuse: Unknown parameter '@ Ӟ&LlIr$NT+sviu#i֗ I|PHU (pQRVA4U|1N|pΏ3U*.*@Z&0x0000000000000006' [ 140.041121][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 140.258986][ T153] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.266573][ T3680] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.276578][ T3680] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 140.286481][ T3680] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 140.296347][ T3680] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 140.341121][ T3680] usb 5-1: string descriptor 0 read error: -71 [ 140.347329][ T3680] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.359134][ T3634] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.371031][ T3680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.391852][ T3680] usb 5-1: can't set config #1, error -71 [ 140.411567][ T3680] usb 5-1: USB disconnect, device number 8 [ 140.631362][ T153] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 140.640040][ T153] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 140.671064][ T153] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 140.686791][ T153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 140.699491][ T153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 140.830761][ T4638] device syzkaller0 entered promiscuous mode [ 140.838012][ T4645] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 140.841383][ T153] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 140.846922][ T4645] syzkaller0: Linktype set failed because interface is up [ 140.853606][ T153] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 140.870918][ T3976] syzkaller0: tun_net_xmit 48 [ 140.872991][ T4644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.206'. [ 140.888606][ T153] usb 2-1: Product: syz [ 140.895935][ T153] usb 2-1: Manufacturer: syz [ 140.941901][ T153] cdc_wdm 2-1:1.0: skipping garbage [ 140.949676][ T153] cdc_wdm 2-1:1.0: skipping garbage [ 140.951093][ T4645] syzkaller0: create flow: hash 1998617472 index 1 [ 140.985989][ T41] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 140.994491][ T153] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 141.000421][ T153] cdc_wdm 2-1:1.0: Unknown control protocol [ 141.067055][ T4651] tty tty2: ldisc open failed (-12), clearing slot 1 [ 141.074223][ T3680] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.081981][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 141.129729][ T4654] debugfs: Directory 'netdev:nicvf0' with parent 'phy9' already present! [ 141.152943][ T4654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.208'. [ 141.170352][ T4654] FAULT_INJECTION: forcing a failure. [ 141.170352][ T4654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.183499][ T4654] CPU: 1 PID: 4654 Comm: syz.0.208 Not tainted 6.1.106-syzkaller #0 [ 141.191496][ T4654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 141.201551][ T4654] Call Trace: [ 141.204821][ T4654] [ 141.207734][ T4654] dump_stack_lvl+0x1e3/0x2cb [ 141.212412][ T4654] ? nf_tcp_handle_invalid+0x642/0x642 [ 141.217865][ T4654] ? panic+0x764/0x764 [ 141.221919][ T4654] ? __lock_acquire+0x1f80/0x1f80 [ 141.226945][ T4654] should_fail_ex+0x3a6/0x4d0 [ 141.231635][ T4654] _copy_from_user+0x2b/0x170 [ 141.236298][ T4654] copy_msghdr_from_user+0xaa/0x670 [ 141.241494][ T4654] ? sendmsg_copy_msghdr+0x70/0x70 [ 141.246636][ T4654] __sys_sendmsg+0x236/0x390 [ 141.251240][ T4654] ? ____sys_sendmsg+0x8f0/0x8f0 [ 141.256188][ T4654] ? vfs_write+0x6cf/0xbc0 [ 141.260614][ T4654] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 141.266592][ T4654] ? syscall_enter_from_user_mode+0x2e/0x230 [ 141.272553][ T4654] ? lockdep_hardirqs_on+0x94/0x130 [ 141.277736][ T4654] ? syscall_enter_from_user_mode+0x2e/0x230 [ 141.283704][ T4654] do_syscall_64+0x3b/0xb0 [ 141.288103][ T4654] ? clear_bhb_loop+0x45/0xa0 [ 141.292774][ T4654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.298671][ T4654] RIP: 0033:0x7fbaa9379e79 [ 141.303082][ T4654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.322674][ T4654] RSP: 002b:00007fbaa91ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.331075][ T4654] RAX: ffffffffffffffda RBX: 00007fbaa9515f80 RCX: 00007fbaa9379e79 [ 141.339046][ T4654] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000007 [ 141.347010][ T4654] RBP: 00007fbaa91ff090 R08: 0000000000000000 R09: 0000000000000000 [ 141.354977][ T4654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.362930][ T4654] R13: 0000000000000000 R14: 00007fbaa9515f80 R15: 00007ffea46e5348 [ 141.370895][ T4654] [ 141.381325][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 141.388437][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 141.401984][ T3979] usb 2-1: USB disconnect, device number 4 [ 141.499980][ T4637] syzkaller0: delete flow: hash 1998617472 index 1 [ 141.541968][ T41] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.550815][ T41] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 141.567837][ T41] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.577132][ T41] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 141.589360][ T41] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 141.623283][ T3680] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.633222][ T3680] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 141.644323][ T3680] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.653547][ T3680] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 141.664625][ T3680] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 141.713157][ T41] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.722551][ T41] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.730533][ T41] usb 5-1: Product: syz [ 141.735053][ T41] usb 5-1: Manufacturer: syz [ 141.792046][ T41] cdc_wdm 5-1:1.0: skipping garbage [ 141.795183][ T3686] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.797283][ T41] cdc_wdm 5-1:1.0: skipping garbage [ 141.810341][ T3680] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.819443][ T3680] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.827529][ T3680] usb 3-1: Product: syz [ 141.831749][ T3680] usb 3-1: Manufacturer: syz [ 141.839036][ T41] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 141.847102][ T41] cdc_wdm 5-1:1.0: Unknown control protocol [ 141.882026][ T3680] cdc_wdm 3-1:1.0: skipping garbage [ 141.887266][ T3680] cdc_wdm 3-1:1.0: skipping garbage [ 141.897506][ T3680] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 141.903700][ T3680] cdc_wdm 3-1:1.0: Unknown control protocol [ 142.063161][ T3686] usb 1-1: Using ep0 maxpacket: 8 [ 142.121134][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 142.138410][ T3680] usb 5-1: USB disconnect, device number 9 [ 142.151055][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.157677][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.163744][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 142.172529][ T4642] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 142.172709][ T4661] FAULT_INJECTION: forcing a failure. [ 142.172709][ T4661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.192547][ T4661] CPU: 1 PID: 4661 Comm: syz.2.205 Not tainted 6.1.106-syzkaller #0 [ 142.200524][ T4661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 142.201436][ T3686] usb 1-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ab.e9 [ 142.210562][ T4661] Call Trace: [ 142.210573][ T4661] [ 142.225736][ T4661] dump_stack_lvl+0x1e3/0x2cb [ 142.230399][ T4661] ? nf_tcp_handle_invalid+0x642/0x642 [ 142.235851][ T4661] ? panic+0x764/0x764 [ 142.239899][ T4661] ? snprintf+0xd6/0x120 [ 142.244118][ T4661] should_fail_ex+0x3a6/0x4d0 [ 142.248774][ T4661] _copy_to_user+0x2b/0x130 [ 142.253257][ T4661] simple_read_from_buffer+0xc6/0x150 [ 142.258610][ T4661] proc_fail_nth_read+0x1a3/0x210 [ 142.263623][ T4661] ? proc_fault_inject_write+0x390/0x390 [ 142.269233][ T4661] ? fsnotify_perm+0x439/0x590 [ 142.273972][ T4661] ? proc_fault_inject_write+0x390/0x390 [ 142.279587][ T4661] vfs_read+0x2ed/0xbf0 [ 142.283722][ T4661] ? __fdget_pos+0x2ba/0x360 [ 142.288290][ T4661] ? kernel_read+0x1f0/0x1f0 [ 142.292860][ T4661] ? __fget_files+0x28/0x4a0 [ 142.297426][ T4661] ? __fget_files+0x435/0x4a0 [ 142.302094][ T4661] ? __fdget_pos+0x2ba/0x360 [ 142.306670][ T4661] ? ksys_read+0x77/0x2c0 [ 142.310980][ T4661] ksys_read+0x19c/0x2c0 [ 142.315213][ T4661] ? print_irqtrace_events+0x210/0x210 [ 142.320662][ T4661] ? vfs_write+0xbc0/0xbc0 [ 142.325063][ T4661] ? syscall_enter_from_user_mode+0x2e/0x230 [ 142.331032][ T4661] ? lockdep_hardirqs_on+0x94/0x130 [ 142.336215][ T4661] ? syscall_enter_from_user_mode+0x2e/0x230 [ 142.342179][ T4661] do_syscall_64+0x3b/0xb0 [ 142.346575][ T4661] ? clear_bhb_loop+0x45/0xa0 [ 142.351236][ T4661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.357120][ T4661] RIP: 0033:0x7f3bc6b788bc [ 142.361513][ T4661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 142.381357][ T4661] RSP: 002b:00007f3bc791f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.389747][ T4661] RAX: ffffffffffffffda RBX: 00007f3bc6d16058 RCX: 00007f3bc6b788bc [ 142.397701][ T4661] RDX: 000000000000000f RSI: 00007f3bc791f0a0 RDI: 0000000000000006 [ 142.405651][ T4661] RBP: 00007f3bc791f090 R08: 0000000000000000 R09: 0000000000000000 [ 142.413611][ T4661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.421562][ T4661] R13: 0000000000000001 R14: 00007f3bc6d16058 R15: 00007ffc98937008 [ 142.429519][ T4661] [ 142.478487][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.494981][ T3686] usb 1-1: config 0 descriptor?? [ 142.636027][ T4663] loop1: detected capacity change from 0 to 32768 [ 142.665433][ T3979] usb 3-1: USB disconnect, device number 5 [ 142.676521][ T4663] [ 142.676521][ T4663] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.676521][ T4663] [ 142.701322][ T4663] find_entry called with index = 0 [ 142.707496][ T4663] read_mapping_page failed! [ 142.712113][ T4663] ERROR: (device loop1): txCommit: [ 142.712113][ T4663] [ 143.161121][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 143.638766][ T4020] [ 143.638766][ T4020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.638766][ T4020] [ 143.657081][ T4020] [ 143.657081][ T4020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.657081][ T4020] [ 143.668757][ T3635] [ 143.668757][ T3635] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.668757][ T3635] [ 143.731820][ T4669] overlayfs: overlapping lowerdir path [ 143.846963][ T133] [ 143.846963][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.846963][ T133] [ 144.172202][ T3635] [ 144.172202][ T3635] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.172202][ T3635] [ 144.201114][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 144.232487][ T4671] loop2: detected capacity change from 0 to 512 [ 144.266839][ T4671] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 144.273811][ T4671] EXT4-fs (loop2): mount failed [ 144.324571][ T4671] loop2: detected capacity change from 0 to 256 [ 144.399107][ T4671] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.585061][ T3979] usb 1-1: USB disconnect, device number 7 [ 144.987758][ T4680] loop1: detected capacity change from 0 to 512 [ 147.181785][ T4680] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 147.188463][ T4680] EXT4-fs (loop1): mount failed [ 147.261429][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 147.316218][ T4680] loop1: detected capacity change from 0 to 256 [ 147.387642][ T4680] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.560110][ T4694] FAULT_INJECTION: forcing a failure. [ 148.560110][ T4694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.573202][ T4694] CPU: 0 PID: 4694 Comm: syz.1.215 Not tainted 6.1.106-syzkaller #0 [ 148.581195][ T4694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 148.591252][ T4694] Call Trace: [ 148.594532][ T4694] [ 148.597464][ T4694] dump_stack_lvl+0x1e3/0x2cb [ 148.602158][ T4694] ? nf_tcp_handle_invalid+0x642/0x642 [ 148.607625][ T4694] ? panic+0x764/0x764 [ 148.611703][ T4694] ? __lock_acquire+0x1f80/0x1f80 [ 148.616745][ T4694] should_fail_ex+0x3a6/0x4d0 [ 148.621437][ T4694] _copy_from_user+0x2b/0x170 [ 148.626120][ T4694] copy_msghdr_from_user+0xaa/0x670 [ 148.631330][ T4694] ? sendmsg_copy_msghdr+0x70/0x70 [ 148.636464][ T4694] __sys_sendmsg+0x236/0x390 [ 148.641064][ T4694] ? ____sys_sendmsg+0x8f0/0x8f0 [ 148.646006][ T4694] ? vfs_write+0x6cf/0xbc0 [ 148.650454][ T4694] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 148.656453][ T4694] ? syscall_enter_from_user_mode+0x2e/0x230 [ 148.662438][ T4694] ? lockdep_hardirqs_on+0x94/0x130 [ 148.667661][ T4694] ? syscall_enter_from_user_mode+0x2e/0x230 [ 148.673676][ T4694] do_syscall_64+0x3b/0xb0 [ 148.678104][ T4694] ? clear_bhb_loop+0x45/0xa0 [ 148.682789][ T4694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.688690][ T4694] RIP: 0033:0x7f8be8179e79 [ 148.693111][ T4694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.712725][ T4694] RSP: 002b:00007f8be8fe0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.721144][ T4694] RAX: ffffffffffffffda RBX: 00007f8be8316130 RCX: 00007f8be8179e79 [ 148.729117][ T4694] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000007 [ 148.737090][ T4694] RBP: 00007f8be8fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 148.745061][ T4694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.753034][ T4694] R13: 0000000000000000 R14: 00007f8be8316130 R15: 00007ffebbbd3f58 [ 148.761021][ T4694] [ 148.774040][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 148.979917][ T4696] loop0: detected capacity change from 0 to 512 [ 149.089972][ T4696] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 149.102090][ T4696] EXT4-fs (loop0): mount failed [ 149.208660][ T4696] loop0: detected capacity change from 0 to 256 [ 149.230495][ T4699] loop1: detected capacity change from 0 to 1024 [ 149.232481][ T4696] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.286393][ T4699] loop1: detected capacity change from 0 to 512 [ 149.293190][ T4699] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.317308][ T4699] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 149.484067][ T4640] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 149.497643][ T4699] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=9002c118, mo2=0002] [ 149.512577][ T4684] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 149.523741][ T4684] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 149.524130][ T4699] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.219: corrupted in-inode xattr [ 149.624943][ T4703] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 149.634486][ T4703] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 149.801169][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 150.033449][ T4699] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.219: couldn't read orphan inode 15 (err -117) [ 150.047513][ T4699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 150.079689][ T26] audit: type=1326 audit(1724675922.362:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4698 comm="syz.1.219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8be8179e79 code=0x0 [ 150.096886][ T4706] device syzkaller0 entered promiscuous mode [ 150.115085][ T4144] syzkaller0: tun_net_xmit 48 [ 150.374336][ T4712] FAULT_INJECTION: forcing a failure. [ 150.374336][ T4712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.441183][ T4712] CPU: 1 PID: 4712 Comm: syz.2.220 Not tainted 6.1.106-syzkaller #0 [ 150.449202][ T4712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 150.459261][ T4712] Call Trace: [ 150.461454][ T3635] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=24, inode=262155, rec_len=20, size=1024 fake=0 [ 150.462528][ T4712] [ 150.462538][ T4712] dump_stack_lvl+0x1e3/0x2cb [ 150.489689][ T4712] ? nf_tcp_handle_invalid+0x642/0x642 [ 150.495151][ T4712] ? panic+0x764/0x764 [ 150.499238][ T4712] ? __lock_acquire+0x1f80/0x1f80 [ 150.504290][ T4712] should_fail_ex+0x3a6/0x4d0 [ 150.508989][ T4712] _copy_from_iter+0x1de/0xff0 [ 150.513775][ T4712] ? copyout_mc+0x100/0x100 [ 150.518300][ T4712] ? mark_lock+0x9a/0x340 [ 150.522650][ T4712] tun_get_user+0x40e/0x42d0 [ 150.527268][ T4712] ? rcu_read_unlock+0xa0/0xa0 [ 150.532045][ T4712] ? tun_get+0x1e/0x2f0 [ 150.536194][ T4712] ? __lock_acquire+0x1f80/0x1f80 [ 150.541229][ T4712] ? tun_get+0x1e/0x2f0 [ 150.545377][ T4712] ? tun_get+0x27d/0x2f0 [ 150.549610][ T4712] tun_chr_write_iter+0x10c/0x1f0 [ 150.554633][ T4712] vfs_write+0x857/0xbc0 [ 150.558887][ T4712] ? file_end_write+0x250/0x250 [ 150.563738][ T4712] ? __fget_files+0x28/0x4a0 [ 150.568317][ T4712] ? __fget_files+0x435/0x4a0 [ 150.572985][ T4712] ? __fdget_pos+0x1db/0x360 [ 150.577564][ T4712] ? ksys_write+0x77/0x2c0 [ 150.581969][ T4712] ksys_write+0x19c/0x2c0 [ 150.586289][ T4712] ? print_irqtrace_events+0x210/0x210 [ 150.591744][ T4712] ? __ia32_sys_read+0x80/0x80 [ 150.596497][ T4712] ? syscall_enter_from_user_mode+0x2e/0x230 [ 150.602469][ T4712] ? lockdep_hardirqs_on+0x94/0x130 [ 150.607659][ T4712] ? syscall_enter_from_user_mode+0x2e/0x230 [ 150.613634][ T4712] do_syscall_64+0x3b/0xb0 [ 150.618041][ T4712] ? clear_bhb_loop+0x45/0xa0 [ 150.622707][ T4712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.628588][ T4712] RIP: 0033:0x7f3bc6b79e79 [ 150.632990][ T4712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.652580][ T4712] RSP: 002b:00007f3bc791f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.660980][ T4712] RAX: ffffffffffffffda RBX: 00007f3bc6d16058 RCX: 00007f3bc6b79e79 [ 150.668942][ T4712] RDX: 000000000000ffdd RSI: 00000000200000c0 RDI: 0000000000000008 [ 150.676897][ T4712] RBP: 00007f3bc791f090 R08: 0000000000000000 R09: 0000000000000000 [ 150.684853][ T4712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.692810][ T4712] R13: 0000000000000000 R14: 00007f3bc6d16058 R15: 00007ffc98937008 [ 150.700775][ T4712] [ 150.773265][ T4716] loop3: detected capacity change from 0 to 1024 [ 150.832058][ T4719] Driver unsupported XDP return value 0 on prog (id 41) dev N/A, expect packet loss! [ 150.841169][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 150.911049][ T4716] hfsplus: extend alloc file! (8192,65536,366) [ 151.029864][ T4724] loop0: detected capacity change from 0 to 512 [ 151.367539][ T4724] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 151.401080][ T4724] EXT4-fs (loop0): mount failed [ 151.868757][ T4707] EXT4-fs (loop1): unmounting filesystem. [ 151.881239][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 151.998306][ T4724] loop0: detected capacity change from 0 to 256 [ 152.026241][ T4724] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.150895][ T4732] loop3: detected capacity change from 0 to 2048 [ 152.221708][ T4732] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 152.251134][ T4732] UDF-fs: Scanning with blocksize 512 failed [ 152.293770][ T4732] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 152.432223][ T4732] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.735282][ T26] audit: type=1107 audit(1724675925.022:388): pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='CK& [ 152.735282][ T26] 6z+1򏋢 @Ϟs3Y aYr?.s' [ 152.921129][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 153.908833][ T4739] loop4: detected capacity change from 0 to 512 [ 153.961144][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 153.968583][ T4745] loop3: detected capacity change from 0 to 512 [ 153.976215][ T3866] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.976961][ T3648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.050339][ T3648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.109902][ T3648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.925146][ T3648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.947258][ T3648] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.958275][ T3648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.978722][ T3722] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.001119][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 156.041174][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 156.460205][ T4752] loop3: detected capacity change from 0 to 32768 [ 156.565988][ T4753] loop3: detected capacity change from 0 to 256 [ 156.587735][ T4753] FAT-fs (loop3): Unrecognized mount option " [ 156.587735][ T4753] " or missing value [ 156.639947][ T3866] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 156.668045][ T4734] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 156.677699][ T4734] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 156.817025][ T3634] syz-executor (3634) used greatest stack depth: 19512 bytes left [ 156.833093][ T4755] loop3: detected capacity change from 0 to 512 [ 157.033392][ T3648] Bluetooth: hci1: command tx timeout [ 157.053273][ T4755] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 157.079641][ T4755] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff) [ 157.081111][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 157.425629][ T38] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.444801][ T3645] EXT4-fs (loop3): unmounting filesystem. [ 158.121140][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 158.422368][ T3648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.432634][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.440469][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.452527][ T3648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.460345][ T3651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.467762][ T3651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.578356][ T38] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.634542][ T4144] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 158.688589][ T4785] loop3: detected capacity change from 0 to 512 [ 158.698421][ T4785] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 158.708150][ T4785] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a00ee01c, mo2=0006] [ 158.716378][ T4785] System zones: 0-2, 18-18, 34-35 [ 158.727828][ T4785] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 158.768267][ T38] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.817942][ T3645] EXT4-fs (loop3): unmounting filesystem. [ 158.920736][ T38] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.931295][ T4144] usb 1-1: Using ep0 maxpacket: 8 [ 158.948585][ T4747] chnl_net:caif_netlink_parms(): no params data found [ 159.008339][ T4789] loop3: detected capacity change from 0 to 2048 [ 159.028516][ T4789] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 159.038238][ T4789] UDF-fs: Scanning with blocksize 512 failed [ 159.065137][ T4789] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 159.076183][ T4144] usb 1-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ab.e9 [ 159.085658][ T3650] Bluetooth: hci1: command tx timeout [ 159.111180][ T4144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.120830][ T4144] usb 1-1: config 0 descriptor?? [ 159.126198][ T4789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.161105][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 159.315967][ T26] audit: type=1107 audit(1724675931.602:389): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='CK& [ 159.315967][ T26] 6z+1򏋢 @Ϟs3Y aYr?.s' [ 159.751490][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.759755][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.770103][ T4747] device bridge_slave_0 entered promiscuous mode [ 159.836796][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.865063][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.910236][ T4747] device bridge_slave_1 entered promiscuous mode [ 160.081616][ T4747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.116874][ T4783] loop2: detected capacity change from 0 to 40427 [ 160.150458][ T4783] F2FS-fs (loop2): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 160.201143][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 160.291416][ T4783] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 160.521882][ T3650] Bluetooth: hci0: command tx timeout [ 160.627943][ T4747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.639106][ T4783] F2FS-fs (loop2): invalid crc value [ 160.786169][ T3979] usb 1-1: USB disconnect, device number 8 [ 160.912246][ T4805] loop0: detected capacity change from 0 to 512 [ 160.919032][ T4805] EXT4-fs: Ignoring removed nobh option [ 160.939636][ T4783] F2FS-fs (loop2): Found nat_bits in checkpoint [ 160.961735][ T4810] loop3: detected capacity change from 0 to 512 [ 160.963719][ T4778] chnl_net:caif_netlink_parms(): no params data found [ 160.968589][ T4810] EXT4-fs: Ignoring removed nobh option [ 161.012173][ T4805] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 161.039623][ T4810] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 161.061232][ T4805] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.244: attempt to clear invalid blocks 2 len 1 [ 161.078163][ T4783] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 161.107593][ T4810] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.243: attempt to clear invalid blocks 2 len 1 [ 161.128211][ T4805] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 161.132937][ T4747] team0: Port device team_slave_0 added [ 161.147303][ T4805] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.244: invalid indirect mapped block 1819239214 (level 0) [ 161.161182][ T3650] Bluetooth: hci1: command tx timeout [ 161.170882][ T4783] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 161.181191][ T4805] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.244: invalid indirect mapped block 1819239214 (level 1) [ 161.186474][ T4783] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 161.195511][ T4810] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 161.237000][ T4747] team0: Port device team_slave_1 added [ 161.241126][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 161.266541][ T4805] EXT4-fs (loop0): 1 truncate cleaned up [ 161.282514][ T4810] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.243: invalid indirect mapped block 1819239214 (level 0) [ 161.291315][ T4805] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 161.347702][ T4810] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.243: invalid indirect mapped block 1819239214 (level 1) [ 161.371152][ T4810] EXT4-fs (loop3): 1 truncate cleaned up [ 161.377329][ T4810] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 161.392853][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.400073][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.494418][ T4747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.724900][ T4820] FAULT_INJECTION: forcing a failure. [ 161.724900][ T4820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.738030][ T4820] CPU: 1 PID: 4820 Comm: syz.0.244 Not tainted 6.1.106-syzkaller #0 [ 161.746015][ T4820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 161.756067][ T4820] Call Trace: [ 161.759348][ T4820] [ 161.762280][ T4820] dump_stack_lvl+0x1e3/0x2cb [ 161.766970][ T4820] ? nf_tcp_handle_invalid+0x642/0x642 [ 161.772438][ T4820] ? panic+0x764/0x764 [ 161.776508][ T4820] ? lockdep_hardirqs_on+0x94/0x130 [ 161.781715][ T4820] should_fail_ex+0x3a6/0x4d0 [ 161.786401][ T4820] _copy_from_user+0x2b/0x170 [ 161.791077][ T4820] move_addr_to_kernel+0x7e/0x140 [ 161.796109][ T4820] __sys_connect+0xbd/0x300 [ 161.800621][ T4820] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 161.806606][ T4820] ? __sys_connect_file+0x170/0x170 [ 161.811833][ T4820] ? syscall_enter_from_user_mode+0x2e/0x230 [ 161.817814][ T4820] ? lockdep_hardirqs_on+0x94/0x130 [ 161.823016][ T4820] __x64_sys_connect+0x76/0x80 [ 161.827788][ T4820] do_syscall_64+0x3b/0xb0 [ 161.832209][ T4820] ? clear_bhb_loop+0x45/0xa0 [ 161.836892][ T4820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.842788][ T4820] RIP: 0033:0x7fbaa9379e79 [ 161.847203][ T4820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.866808][ T4820] RSP: 002b:00007fbaa91bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 161.875226][ T4820] RAX: ffffffffffffffda RBX: 00007fbaa9516130 RCX: 00007fbaa9379e79 [ 161.883194][ T4820] RDX: 000000000000001c RSI: 0000000020000180 RDI: 000000000000000a [ 161.891166][ T4820] RBP: 00007fbaa91bd090 R08: 0000000000000000 R09: 0000000000000000 [ 161.899130][ T4820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.907083][ T4820] R13: 0000000000000000 R14: 00007fbaa9516130 R15: 00007ffea46e5348 [ 161.915055][ T4820] [ 162.281186][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 162.515579][ T3644] EXT4-fs (loop0): unmounting filesystem. [ 162.601196][ T3650] Bluetooth: hci0: command tx timeout [ 162.667674][ T4828] FAULT_INJECTION: forcing a failure. [ 162.667674][ T4828] name failslab, interval 1, probability 0, space 0, times 0 [ 162.689471][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.700273][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.741160][ T4828] CPU: 1 PID: 4828 Comm: syz.0.246 Not tainted 6.1.106-syzkaller #0 [ 162.744743][ T3645] EXT4-fs (loop3): unmounting filesystem. [ 162.749152][ T4828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 162.749165][ T4828] Call Trace: [ 162.749171][ T4828] [ 162.749179][ T4828] dump_stack_lvl+0x1e3/0x2cb [ 162.749209][ T4828] ? nf_tcp_handle_invalid+0x642/0x642 [ 162.749233][ T4828] ? panic+0x764/0x764 [ 162.749251][ T4828] ? __might_sleep+0xb0/0xb0 [ 162.749282][ T4828] should_fail_ex+0x3a6/0x4d0 [ 162.749306][ T4828] should_failslab+0x5/0x20 [ 162.749326][ T4828] slab_pre_alloc_hook+0x59/0x300 [ 162.749349][ T4828] ? __se_sys_memfd_create+0xe9/0x440 [ 162.809432][ T4828] __kmem_cache_alloc_node+0x47/0x260 [ 162.814802][ T4828] ? print_irqtrace_events+0x210/0x210 [ 162.820258][ T4828] ? __se_sys_memfd_create+0xe9/0x440 [ 162.825618][ T4828] __kmalloc+0xa1/0x230 [ 162.829765][ T4828] __se_sys_memfd_create+0xe9/0x440 [ 162.834957][ T4828] do_syscall_64+0x3b/0xb0 [ 162.839366][ T4828] ? clear_bhb_loop+0x45/0xa0 [ 162.844032][ T4828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.849910][ T4828] RIP: 0033:0x7fbaa9379e79 [ 162.854311][ T4828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.873906][ T4828] RSP: 002b:00007fbaa91fee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 162.882306][ T4828] RAX: ffffffffffffffda RBX: 000000000000046f RCX: 00007fbaa9379e79 [ 162.890266][ T4828] RDX: 00007fbaa91feef0 RSI: 0000000000000000 RDI: 00007fbaa93e8131 [ 162.898225][ T4828] RBP: 0000000020000580 R08: 00007fbaa91febb7 R09: 00007fbaa91fee40 [ 162.906191][ T4828] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000480 [ 162.914148][ T4828] R13: 00007fbaa91feef0 R14: 00007fbaa91feeb0 R15: 0000000020000000 [ 162.922115][ T4828] [ 163.103022][ T4747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.156584][ T4837] loop3: detected capacity change from 0 to 512 [ 163.163523][ T4837] EXT4-fs: Ignoring removed nobh option [ 163.249500][ T3650] Bluetooth: hci1: command tx timeout [ 163.321339][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 163.495955][ T4837] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 163.569858][ T4837] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.247: attempt to clear invalid blocks 2 len 1 [ 163.611467][ T4778] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.618697][ T4778] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.651641][ T4837] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 163.685049][ T4778] device bridge_slave_0 entered promiscuous mode [ 163.703708][ T4837] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.247: invalid indirect mapped block 1819239214 (level 0) [ 163.718791][ T4837] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.247: invalid indirect mapped block 1819239214 (level 1) [ 163.734269][ T4837] EXT4-fs (loop3): 1 truncate cleaned up [ 163.739935][ T4837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 163.792986][ T4845] loop2: detected capacity change from 0 to 256 [ 163.830702][ T4845] FAULT_INJECTION: forcing a failure. [ 163.830702][ T4845] name failslab, interval 1, probability 0, space 0, times 0 [ 163.944581][ T4845] CPU: 1 PID: 4845 Comm: syz.2.248 Not tainted 6.1.106-syzkaller #0 [ 163.952598][ T4845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 163.962916][ T4845] Call Trace: [ 163.966197][ T4845] [ 163.969130][ T4845] dump_stack_lvl+0x1e3/0x2cb [ 163.973826][ T4845] ? nf_tcp_handle_invalid+0x642/0x642 [ 163.979299][ T4845] ? panic+0x764/0x764 [ 163.983377][ T4845] ? __might_sleep+0xb0/0xb0 [ 163.987976][ T4845] ? __lock_acquire+0x125b/0x1f80 [ 163.993016][ T4845] should_fail_ex+0x3a6/0x4d0 [ 163.997704][ T4845] should_failslab+0x5/0x20 [ 164.002202][ T4845] slab_pre_alloc_hook+0x59/0x300 [ 164.007220][ T4845] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 164.012927][ T4845] __kmem_cache_alloc_node+0x47/0x260 [ 164.018295][ T4845] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 164.024000][ T4845] __kmalloc+0xa1/0x230 [ 164.028142][ T4845] ? rcu_is_watching+0x11/0xb0 [ 164.032895][ T4845] tomoyo_realpath_from_path+0xcb/0x5d0 [ 164.038434][ T4845] tomoyo_path_number_perm+0x21f/0x7f0 [ 164.043881][ T4845] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 164.049499][ T4845] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 164.054954][ T4845] ? __fget_files+0x28/0x4a0 [ 164.059542][ T4845] ? __fget_files+0x28/0x4a0 [ 164.064119][ T4845] ? __fget_files+0x435/0x4a0 [ 164.068780][ T4845] ? __fget_files+0x28/0x4a0 [ 164.073361][ T4845] security_file_ioctl+0x6d/0xa0 [ 164.078294][ T4845] __se_sys_ioctl+0x47/0x160 [ 164.082878][ T4845] do_syscall_64+0x3b/0xb0 [ 164.087287][ T4845] ? clear_bhb_loop+0x45/0xa0 [ 164.091953][ T4845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.097832][ T4845] RIP: 0033:0x7f3bc6b79e79 [ 164.102233][ T4845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.121826][ T4845] RSP: 002b:00007f3bc7940038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.130224][ T4845] RAX: ffffffffffffffda RBX: 00007f3bc6d15f80 RCX: 00007f3bc6b79e79 [ 164.138182][ T4845] RDX: 0000000020000000 RSI: 0000000082307201 RDI: 0000000000000005 [ 164.146140][ T4845] RBP: 00007f3bc7940090 R08: 0000000000000000 R09: 0000000000000000 [ 164.154095][ T4845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.162052][ T4845] R13: 0000000000000000 R14: 00007f3bc6d15f80 R15: 00007ffc98937008 [ 164.170019][ T4845] [ 164.361144][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 165.086400][ T3650] Bluetooth: hci0: command tx timeout [ 165.344356][ T4845] ERROR: Out of memory at tomoyo_realpath_from_path. [ 165.370334][ T3645] EXT4-fs (loop3): unmounting filesystem. [ 165.401119][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 165.537980][ T4778] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.555489][ T4778] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.567130][ T4855] FAULT_INJECTION: forcing a failure. [ 165.567130][ T4855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.594605][ T4778] device bridge_slave_1 entered promiscuous mode [ 165.644250][ T4747] device hsr_slave_0 entered promiscuous mode [ 165.664378][ T4857] loop2: detected capacity change from 0 to 2048 [ 165.677563][ T4855] CPU: 1 PID: 4855 Comm: syz.3.250 Not tainted 6.1.106-syzkaller #0 [ 165.685569][ T4855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 165.695632][ T4855] Call Trace: [ 165.698919][ T4855] [ 165.701859][ T4855] dump_stack_lvl+0x1e3/0x2cb [ 165.706549][ T4855] ? nf_tcp_handle_invalid+0x642/0x642 [ 165.711996][ T4855] ? panic+0x764/0x764 [ 165.716046][ T4855] ? __lock_acquire+0x1f80/0x1f80 [ 165.721069][ T4855] should_fail_ex+0x3a6/0x4d0 [ 165.725751][ T4855] _copy_from_user+0x2b/0x170 [ 165.730421][ T4855] copy_msghdr_from_user+0xaa/0x670 [ 165.735616][ T4855] ? sendmsg_copy_msghdr+0x70/0x70 [ 165.740727][ T4855] __sys_recvmsg+0x24b/0x3d0 [ 165.745310][ T4855] ? ____sys_recvmsg+0x530/0x530 [ 165.750250][ T4855] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 165.756230][ T4855] ? syscall_enter_from_user_mode+0x2e/0x230 [ 165.762198][ T4855] ? lockdep_hardirqs_on+0x94/0x130 [ 165.767390][ T4855] ? syscall_enter_from_user_mode+0x2e/0x230 [ 165.773363][ T4855] do_syscall_64+0x3b/0xb0 [ 165.777769][ T4855] ? clear_bhb_loop+0x45/0xa0 [ 165.782438][ T4855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.788332][ T4855] RIP: 0033:0x7f905a579e79 [ 165.792742][ T4855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.812335][ T4855] RSP: 002b:00007f905b384038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 165.820736][ T4855] RAX: ffffffffffffffda RBX: 00007f905a716058 RCX: 00007f905a579e79 [ 165.828695][ T4855] RDX: 0000000040000120 RSI: 0000000020001c00 RDI: 0000000000000004 [ 165.836651][ T4855] RBP: 00007f905b384090 R08: 0000000000000000 R09: 0000000000000000 [ 165.844609][ T4855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.852566][ T4855] R13: 0000000000000000 R14: 00007f905a716058 R15: 00007ffcd47613a8 [ 165.860537][ T4855] [ 165.872503][ T4747] device hsr_slave_1 entered promiscuous mode [ 165.880229][ T4747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.889551][ T4747] Cannot create hsr debugfs directory [ 165.911728][ T4857] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 165.919390][ T4857] UDF-fs: Scanning with blocksize 512 failed [ 165.975759][ T4857] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 165.993710][ T4857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.186775][ T4778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.198663][ T4778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.441181][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 167.152015][ T4144] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 167.162198][ T3650] Bluetooth: hci0: command tx timeout [ 167.167785][ T26] audit: type=1107 audit(1724675939.452:390): pid=4856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='CK& [ 167.167785][ T26] 6z+1򏋢 @Ϟs3Y aYr?.s' [ 167.481122][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 167.567690][ T4144] usb 1-1: Using ep0 maxpacket: 16 [ 167.626174][ T4876] loop2: detected capacity change from 0 to 2048 [ 167.644378][ T4876] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.653810][ T26] audit: type=1326 audit(1724675939.932:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905a579e79 code=0x7ffc0000 [ 167.677637][ T26] audit: type=1326 audit(1724675939.942:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f905a578810 code=0x7ffc0000 [ 167.700198][ T26] audit: type=1326 audit(1724675939.942:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f905a579a7b code=0x7ffc0000 [ 167.731452][ T4144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.743541][ T26] audit: type=1326 audit(1724675939.942:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f905a579a7b code=0x7ffc0000 [ 167.750692][ T4144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.784292][ T4778] team0: Port device team_slave_0 added [ 167.800653][ T26] audit: type=1326 audit(1724675939.942:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f905a579a7b code=0x7ffc0000 [ 167.823588][ T26] audit: type=1326 audit(1724675939.942:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f905a579a7b code=0x7ffc0000 [ 167.843438][ T4144] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 167.853300][ T26] audit: type=1107 audit(1724675939.992:397): pid=4875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 167.883921][ T4778] team0: Port device team_slave_1 added [ 167.889320][ T4144] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 167.912109][ T4144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.936341][ T4144] usb 1-1: config 0 descriptor?? [ 168.017962][ T4778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.035345][ T4778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.067088][ T4778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.162002][ T3686] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 168.181877][ T26] audit: type=1326 audit(1724675940.472:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f905a579a7b code=0x7ffc0000 [ 168.247821][ T26] audit: type=1326 audit(1724675940.492:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f905a579a7b code=0x7ffc0000 [ 168.445511][ T4884] netlink: 44 bytes leftover after parsing attributes in process `syz.2.258'. [ 170.015418][ T4884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 170.027404][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 170.044516][ T4778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.055776][ T4778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.091354][ T3686] usb 4-1: device descriptor read/64, error -71 [ 170.151350][ T4144] usbhid 1-1:0.0: can't add hid device: -71 [ 170.157507][ T4144] usbhid: probe of 1-1:0.0 failed with error -71 [ 170.222865][ T4144] usb 1-1: USB disconnect, device number 9 [ 170.330944][ T4778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.368448][ T3686] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 170.431876][ T38] device hsr_slave_0 left promiscuous mode [ 170.439321][ T38] device hsr_slave_1 left promiscuous mode [ 170.465965][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.474676][ T4893] FAULT_INJECTION: forcing a failure. [ 170.474676][ T4893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.479483][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.503163][ T4893] CPU: 0 PID: 4893 Comm: syz.2.260 Not tainted 6.1.106-syzkaller #0 [ 170.511162][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 170.521226][ T4893] Call Trace: [ 170.524512][ T4893] [ 170.527452][ T4893] dump_stack_lvl+0x1e3/0x2cb [ 170.532153][ T4893] ? nf_tcp_handle_invalid+0x642/0x642 [ 170.537629][ T4893] ? panic+0x764/0x764 [ 170.541718][ T4893] ? __lock_acquire+0x1f80/0x1f80 [ 170.546766][ T4893] should_fail_ex+0x3a6/0x4d0 [ 170.551463][ T4893] _copy_from_user+0x2b/0x170 [ 170.556149][ T4893] __sys_bpf+0x226/0x6c0 [ 170.560405][ T4893] ? __fget_files+0x435/0x4a0 [ 170.565095][ T4893] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 170.570497][ T4893] ? print_irqtrace_events+0x210/0x210 [ 170.575973][ T4893] ? print_irqtrace_events+0x210/0x210 [ 170.581450][ T4893] ? syscall_enter_from_user_mode+0x2e/0x230 [ 170.587443][ T4893] ? lockdep_hardirqs_on+0x94/0x130 [ 170.592657][ T4893] __x64_sys_bpf+0x78/0x90 [ 170.597091][ T4893] do_syscall_64+0x3b/0xb0 [ 170.601520][ T4893] ? clear_bhb_loop+0x45/0xa0 [ 170.606211][ T4893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.612113][ T4893] RIP: 0033:0x7f3bc6b79e79 [ 170.616534][ T4893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.636148][ T4893] RSP: 002b:00007f3bc7940038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.644572][ T4893] RAX: ffffffffffffffda RBX: 00007f3bc6d15f80 RCX: 00007f3bc6b79e79 [ 170.652557][ T4893] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000011 [ 170.660542][ T4893] RBP: 00007f3bc7940090 R08: 0000000000000000 R09: 0000000000000000 [ 170.668513][ T4893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.676480][ T4893] R13: 0000000000000000 R14: 00007f3bc6d15f80 R15: 00007ffc98937008 [ 170.684464][ T4893] [ 170.702395][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.723202][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.751668][ T38] device bridge_slave_1 left promiscuous mode [ 170.760539][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.778426][ T3686] usb 4-1: device descriptor read/64, error -71 [ 170.788182][ T38] device bridge_slave_0 left promiscuous mode [ 170.801224][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.860912][ T38] device veth1_macvtap left promiscuous mode [ 170.866521][ T4144] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 170.877975][ T38] device veth0_macvtap left promiscuous mode [ 170.885556][ T38] device veth1_vlan left promiscuous mode [ 170.901339][ T3686] usb usb4-port1: attempt power cycle [ 170.901374][ T38] device veth0_vlan left promiscuous mode [ 170.960190][ T4907] loop2: detected capacity change from 0 to 512 [ 171.005158][ T4907] EXT4-fs: Ignoring removed nobh option [ 171.050845][ T4907] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 171.070893][ T4907] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.263: attempt to clear invalid blocks 2 len 1 [ 171.083768][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 171.102234][ T4907] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 171.125552][ T4907] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.263: invalid indirect mapped block 1819239214 (level 0) [ 171.320352][ T4903] loop3: detected capacity change from 0 to 40427 [ 171.328500][ T4144] usb 1-1: Using ep0 maxpacket: 32 [ 171.335602][ T4907] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.263: invalid indirect mapped block 1819239214 (level 1) [ 171.353345][ T4903] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(11497472) blocks(1024) [ 171.362307][ T4903] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 171.370461][ T4903] F2FS-fs (loop3): Unrecognized mount option "" or missing value [ 171.387269][ T4907] EXT4-fs (loop2): 1 truncate cleaned up [ 171.393533][ T4907] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 171.455866][ T4144] usb 1-1: too many configurations: 61, using maximum allowed: 8 [ 171.503691][ T4903] loop3: detected capacity change from 0 to 1024 [ 171.580677][ T4903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.765809][ T4914] sctp: [Deprecated]: syz.2.263 (pid 4914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.765809][ T4914] Use struct sctp_sack_info instead [ 173.669792][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 173.980025][ T4144] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 174.005256][ T4144] usb 1-1: can't read configurations, error -61 [ 174.012386][ T3641] EXT4-fs (loop2): unmounting filesystem. [ 174.102371][ T3645] EXT4-fs (loop3): unmounting filesystem. [ 174.412021][ T4930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.267'. [ 174.681114][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 175.086232][ T4930] loop2: detected capacity change from 0 to 4096 [ 176.358760][ T4939] netlink: 44 bytes leftover after parsing attributes in process `syz.0.269'. [ 177.015459][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 177.017380][ T3651] Bluetooth: hci4: command 0x0406 tx timeout [ 177.030613][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 177.030624][ T26] audit: type=1326 audit(1724675947.802:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa9379e79 code=0x7ffc0000 [ 177.030882][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 177.037486][ T3649] Bluetooth: hci2: command 0x0406 tx timeout [ 177.059877][ T3639] Bluetooth: hci3: command 0x0406 tx timeout [ 177.406679][ T26] audit: type=1326 audit(1724675947.852:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa9379e79 code=0x7ffc0000 [ 177.508746][ T26] audit: type=1326 audit(1724675947.942:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbaa9379e79 code=0x7ffc0000 [ 177.623669][ T26] audit: type=1326 audit(1724675947.942:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa9379e79 code=0x7ffc0000 [ 177.661151][ T26] audit: type=1326 audit(1724675947.962:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa9379e79 code=0x7ffc0000 [ 177.693077][ T26] audit: type=1326 audit(1724675948.052:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbaa9379e79 code=0x7ffc0000 [ 177.723943][ T26] audit: type=1326 audit(1724675948.062:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa9379e79 code=0x7ffc0000 [ 177.747329][ T38] team0 (unregistering): Port device team_slave_1 removed [ 177.755972][ T26] audit: type=1326 audit(1724675948.072:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa9379e79 code=0x7ffc0000 [ 177.792843][ T26] audit: type=1326 audit(1724675948.182:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbaa9379e79 code=0x7ffc0000 [ 177.823041][ T26] audit: type=1326 audit(1724675948.182:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa9379e79 code=0x7ffc0000 [ 177.876980][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.921272][ T41] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 177.941869][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.041108][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 178.201172][ T41] usb 1-1: Using ep0 maxpacket: 8 [ 178.341238][ T41] usb 1-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 178.351683][ T41] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 178.360655][ T41] usb 1-1: New USB device found, idVendor=1fc0, idProduct=1522, bcdDevice=30.22 [ 178.370245][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.392813][ T41] usb 1-1: config 0 descriptor?? [ 178.434355][ T38] bond0 (unregistering): Released all slaves [ 178.995381][ T4778] device hsr_slave_0 entered promiscuous mode [ 179.081144][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 179.107751][ T4778] device hsr_slave_1 entered promiscuous mode [ 179.162179][ T4778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.236115][ T4778] Cannot create hsr debugfs directory [ 179.505671][ T4959] FAULT_INJECTION: forcing a failure. [ 179.505671][ T4959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.611107][ T4959] CPU: 1 PID: 4959 Comm: syz.2.275 Not tainted 6.1.106-syzkaller #0 [ 179.619129][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 179.629279][ T4959] Call Trace: [ 179.632567][ T4959] [ 179.635500][ T4959] dump_stack_lvl+0x1e3/0x2cb [ 179.640198][ T4959] ? nf_tcp_handle_invalid+0x642/0x642 [ 179.645674][ T4959] ? panic+0x764/0x764 [ 179.649761][ T4959] ? __lock_acquire+0x1f80/0x1f80 [ 179.654796][ T4959] should_fail_ex+0x3a6/0x4d0 [ 179.659467][ T4959] _copy_from_user+0x2b/0x170 [ 179.664131][ T4959] __x64_sys_rt_sigsuspend+0xe4/0x160 [ 179.669494][ T4959] ? __do_sys_pause+0x130/0x130 [ 179.674335][ T4959] ? syscall_enter_from_user_mode+0x2e/0x230 [ 179.680302][ T4959] ? lockdep_hardirqs_on+0x94/0x130 [ 179.685489][ T4959] ? syscall_enter_from_user_mode+0x2e/0x230 [ 179.691461][ T4959] do_syscall_64+0x3b/0xb0 [ 179.695867][ T4959] ? clear_bhb_loop+0x45/0xa0 [ 179.700532][ T4959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.706415][ T4959] RIP: 0033:0x7f3bc6b79e79 [ 179.710831][ T4959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.730431][ T4959] RSP: 002b:00007f3bc7940038 EFLAGS: 00000246 ORIG_RAX: 0000000000000082 [ 179.738836][ T4959] RAX: ffffffffffffffda RBX: 00007f3bc6d15f80 RCX: 00007f3bc6b79e79 [ 179.746796][ T4959] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000200000c0 [ 179.754853][ T4959] RBP: 00007f3bc7940090 R08: 0000000000000000 R09: 0000000000000000 [ 179.762813][ T4959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.770768][ T4959] R13: 0000000000000001 R14: 00007f3bc6d15f80 R15: 00007ffc98937008 [ 179.778742][ T4959] [ 179.851115][ T3979] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 179.934191][ T4747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.968707][ T4747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.066273][ T4778] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.091170][ T3979] usb 4-1: Using ep0 maxpacket: 8 [ 180.131110][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 180.211492][ T3979] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.326546][ T4747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.456409][ T4747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.472389][ T3979] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.525404][ T3979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.688847][ T3979] usb 4-1: Product: syz [ 180.716316][ T3979] usb 4-1: Manufacturer: syz [ 180.741322][ T3979] usb 4-1: SerialNumber: syz [ 180.798195][ T4144] usb 1-1: USB disconnect, device number 12 [ 180.888741][ T4778] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.007950][ T4975] loop2: detected capacity change from 0 to 4096 [ 181.045092][ T4975] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 181.056487][ T4778] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.085551][ T4975] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 181.113542][ T4975] ntfs3: loop2: Failed to load $Extend. [ 181.161205][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 181.194581][ T4778] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.254527][ T4747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.313216][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.328696][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.352858][ T4747] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.361120][ T4144] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 181.416222][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.527839][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.543599][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.550689][ T3741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.580073][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.645679][ T4986] netlink: 44 bytes leftover after parsing attributes in process `syz.2.279'. [ 181.666433][ T4986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 181.681901][ T4144] usb 1-1: Using ep0 maxpacket: 8 [ 182.211295][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 182.305785][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.341617][ T3741] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.348776][ T3741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.470226][ T4747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.527303][ T4747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.571219][ T3979] cdc_ncm 4-1:1.0: failed to get mac address [ 182.623497][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.639869][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.649430][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.651343][ T4144] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 182.665420][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.684578][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.693564][ T4144] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.700180][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.722737][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.730890][ T4144] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.751312][ T4144] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.769227][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.788829][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.791262][ T3979] cdc_ncm 4-1:1.0: bind() failure [ 182.807926][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.828362][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.833962][ T4144] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.849147][ T3979] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 182.869885][ T4144] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.881147][ T3979] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 182.911166][ T3979] usbtest: probe of 4-1:1.1 failed with error -71 [ 182.923741][ T4144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.952631][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.954458][ T3979] usb 4-1: USB disconnect, device number 12 [ 182.970865][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.985947][ T5001] loop2: detected capacity change from 0 to 256 [ 183.040909][ T4778] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.106051][ T4778] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.158058][ T4778] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.251169][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 183.347307][ T4778] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.852129][ T3686] usb 1-1: USB disconnect, device number 13 [ 183.879946][ T4778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.512009][ T26] kauditd_printk_skb: 84 callbacks suppressed [ 184.512027][ T26] audit: type=1804 audit(1724675956.322:543): pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.282" name="/newroot/59/bus/file0" dev="overlay" ino=375 res=1 errno=0 [ 184.602737][ T4778] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.700791][ T4778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.737306][ T4778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.754731][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 184.811093][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.818719][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.856469][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.928115][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.943195][ T5015] FAULT_INJECTION: forcing a failure. [ 184.943195][ T5015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.952120][ T4020] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.963372][ T4020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.972355][ T5015] CPU: 1 PID: 5015 Comm: syz.3.283 Not tainted 6.1.106-syzkaller #0 [ 184.980351][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 184.990405][ T5015] Call Trace: [ 184.993673][ T5015] [ 184.996589][ T5015] dump_stack_lvl+0x1e3/0x2cb [ 185.001278][ T5015] ? nf_tcp_handle_invalid+0x642/0x642 [ 185.006736][ T5015] ? panic+0x764/0x764 [ 185.010792][ T5015] ? __lock_acquire+0x1f80/0x1f80 [ 185.015810][ T5015] should_fail_ex+0x3a6/0x4d0 [ 185.020480][ T5015] _copy_from_user+0x2b/0x170 [ 185.025143][ T5015] get_timespec64+0x93/0x270 [ 185.029724][ T5015] ? timespec64_add_safe+0x220/0x220 [ 185.034998][ T5015] ? do_sys_open+0x220/0x220 [ 185.039581][ T5015] __se_sys_pselect6+0x18a/0x470 [ 185.044507][ T5015] ? __x64_sys_pselect6+0xf0/0xf0 [ 185.049518][ T5015] ? syscall_enter_from_user_mode+0x2e/0x230 [ 185.055483][ T5015] ? lockdep_hardirqs_on+0x94/0x130 [ 185.060666][ T5015] ? __x64_sys_pselect6+0x1d/0xf0 [ 185.065677][ T5015] do_syscall_64+0x3b/0xb0 [ 185.070081][ T5015] ? clear_bhb_loop+0x45/0xa0 [ 185.074746][ T5015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.080628][ T5015] RIP: 0033:0x7f905a579e79 [ 185.085037][ T5015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.104627][ T5015] RSP: 002b:00007f905b3a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 185.113032][ T5015] RAX: ffffffffffffffda RBX: 00007f905a715f80 RCX: 00007f905a579e79 [ 185.120991][ T5015] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 185.128955][ T5015] RBP: 00007f905b3a5090 R08: 0000000020002880 R09: 0000000000000000 [ 185.136912][ T5015] R10: 0000000020002840 R11: 0000000000000246 R12: 0000000000000001 [ 185.144869][ T5015] R13: 0000000000000000 R14: 00007f905a715f80 R15: 00007ffcd47613a8 [ 185.152844][ T5015] [ 185.155901][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.169560][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.184788][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.196190][ T4020] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.197399][ T5022] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 185.203323][ T4020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.205097][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.293220][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.323012][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.346953][ T5022] [ 185.349295][ T5022] ====================================================== [ 185.356305][ T5022] WARNING: possible circular locking dependency detected [ 185.363321][ T5022] 6.1.106-syzkaller #0 Not tainted [ 185.368433][ T5022] ------------------------------------------------------ [ 185.375440][ T5022] syz.0.285/5022 is trying to acquire lock: [ 185.381324][ T5022] ffff8880225b8400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_bmap+0x4b/0x410 [ 185.390908][ T5022] [ 185.390908][ T5022] but task is already holding lock: [ 185.398273][ T5022] ffff88807e5b63f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x323/0xc40 [ 185.408894][ T5022] [ 185.408894][ T5022] which lock already depends on the new lock. [ 185.408894][ T5022] [ 185.419295][ T5022] [ 185.419295][ T5022] the existing dependency chain (in reverse order) is: [ 185.422994][ T5025] loop2: detected capacity change from 0 to 32768 [ 185.428285][ T5022] [ 185.428285][ T5022] -> #4 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 185.436994][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.443436][ T5022] lock_acquire+0x1f8/0x5a0 [ 185.443460][ T5022] mutex_lock_io_nested+0x134/0xab0 [ 185.443474][ T5022] jbd2_journal_flush+0x29b/0xc40 [ 185.443494][ T5022] ext4_ioctl+0x3986/0x5f60 [ 185.443510][ T5022] __se_sys_ioctl+0xf1/0x160 [ 185.443529][ T5022] do_syscall_64+0x3b/0xb0 [ 185.443547][ T5022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.443565][ T5022] [ 185.443565][ T5022] -> #3 (&journal->j_barrier){+.+.}-{3:3}: [ 185.443590][ T5022] lock_acquire+0x1f8/0x5a0 [ 185.443606][ T5022] __mutex_lock+0x132/0xd80 [ 185.443625][ T5022] jbd2_journal_lock_updates+0x2b0/0x380 [ 185.451989][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.456396][ T5022] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 185.456417][ T5022] ext4_fileattr_set+0xe04/0x1770 [ 185.462712][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.467614][ T5022] vfs_fileattr_set+0x8f3/0xd30 [ 185.467637][ T5022] do_vfs_ioctl+0x1cd1/0x2a90 [ 185.467650][ T5022] __se_sys_ioctl+0x81/0x160 [ 185.467668][ T5022] do_syscall_64+0x3b/0xb0 [ 185.467686][ T5022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.467704][ T5022] [ 185.467704][ T5022] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 185.467731][ T5022] lock_acquire+0x1f8/0x5a0 [ 185.467748][ T5022] percpu_down_read+0x44/0x1a0 [ 185.467765][ T5022] ext4_writepages+0x1e5/0x3de0 [ 185.473359][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.477844][ T5022] do_writepages+0x3a2/0x670 [ 185.477866][ T5022] filemap_fdatawrite_wbc+0x121/0x180 [ 185.483180][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.489144][ T5022] filemap_write_and_wait_range+0x1a4/0x290 [ 185.489168][ T5022] ext4_change_inode_journal_flag+0x143/0x6e0 [ 185.497877][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.502100][ T5022] ext4_fileattr_set+0xe04/0x1770 [ 185.502122][ T5022] vfs_fileattr_set+0x8f3/0xd30 [ 185.502140][ T5022] do_vfs_ioctl+0x1cd1/0x2a90 [ 185.502152][ T5022] __se_sys_ioctl+0x81/0x160 [ 185.507547][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.513265][ T5022] do_syscall_64+0x3b/0xb0 [ 185.513285][ T5022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.513303][ T5022] [ 185.513303][ T5022] -> #1 ( [ 185.521627][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.527716][ T5022] mapping.invalidate_lock){++++}-{3:3}: [ 185.527736][ T5022] lock_acquire+0x1f8/0x5a0 [ 185.533383][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.541018][ T5022] down_write+0x36/0x60 [ 185.541034][ T5022] ext4_setattr+0xec7/0x1a00 [ 185.541051][ T5022] notify_change+0xce3/0xfc0 [ 185.541070][ T5022] do_truncate+0x21c/0x300 [ 185.541087][ T5022] do_sys_ftruncate+0x2e2/0x380 [ 185.547330][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.551605][ T5022] do_syscall_64+0x3b/0xb0 [ 185.551625][ T5022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.551643][ T5022] [ 185.551643][ T5022] -> #0 (&sb->s_type->i_mutex_key [ 185.557202][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.561634][ T5022] #8){++++}-{3:3}: [ 185.561657][ T5022] validate_chain+0x1661/0x5950 [ 185.561674][ T5022] __lock_acquire+0x125b/0x1f80 [ 185.561691][ T5022] lock_acquire+0x1f8/0x5a0 [ 185.561708][ T5022] down_read+0xad/0xa30 [ 185.561721][ T5022] ext4_bmap+0x4b/0x410 [ 185.561738][ T5022] bmap+0xa1/0xd0 [ 185.561755][ T5022] jbd2_journal_flush+0x5b5/0xc40 [ 185.561775][ T5022] ext4_ioctl+0x3986/0x5f60 [ 185.561793][ T5022] __se_sys_ioctl+0xf1/0x160 [ 185.561812][ T5022] do_syscall_64+0x3b/0xb0 [ 185.561829][ T5022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.561847][ T5022] [ 185.561847][ T5022] other info that might help us debug this: [ 185.561847][ T5022] [ 185.561852][ T5022] Chain exists of: [ 185.561852][ T5022] &sb->s_type->i_mutex_key#8 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 185.561852][ T5022] [ 185.561883][ T5022] Possible unsafe locking scenario: [ 185.561883][ T5022] [ 185.561887][ T5022] CPU0 CPU1 [ 185.561898][ T5022] ---- ---- [ 185.561902][ T5022] lock(&journal->j_checkpoint_mutex); [ 185.561913][ T5022] lock(&journal->j_barrier); [ 185.561925][ T5022] lock( [ 185.575707][ T5025] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.284 (5025) [ 185.576682][ T5022] &journal->j_checkpoint_mutex); [ 185.906188][ T5022] lock(&sb->s_type->i_mutex_key#8); [ 185.911554][ T5022] [ 185.911554][ T5022] *** DEADLOCK *** [ 185.911554][ T5022] [ 185.919674][ T5022] 2 locks held by syz.0.285/5022: [ 185.924675][ T5022] #0: ffff88807e5b6170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2b0/0x380 [ 185.935535][ T5022] #1: ffff88807e5b63f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x323/0xc40 [ 185.946566][ T5022] [ 185.946566][ T5022] stack backtrace: [ 185.952433][ T5022] CPU: 1 PID: 5022 Comm: syz.0.285 Not tainted 6.1.106-syzkaller #0 [ 185.960391][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 185.970425][ T5022] Call Trace: [ 185.973686][ T5022] [ 185.976599][ T5022] dump_stack_lvl+0x1e3/0x2cb [ 185.981268][ T5022] ? nf_tcp_handle_invalid+0x642/0x642 [ 185.986726][ T5022] ? print_circular_bug+0x12b/0x1a0 [ 185.991905][ T5022] check_noncircular+0x2fa/0x3b0 [ 185.996826][ T5022] ? add_chain_block+0x850/0x850 [ 186.001745][ T5022] ? lockdep_lock+0x11f/0x2a0 [ 186.006411][ T5022] ? _find_first_zero_bit+0xd0/0x100 [ 186.011681][ T5022] validate_chain+0x1661/0x5950 [ 186.016517][ T5022] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 186.022482][ T5022] ? reacquire_held_locks+0x660/0x660 [ 186.027844][ T5022] ? do_raw_spin_unlock+0x137/0x8a0 [ 186.033026][ T5022] ? validate_chain+0x112/0x5950 [ 186.037942][ T5022] ? finish_task_switch+0x299/0x810 [ 186.043133][ T5022] ? mark_lock+0x9a/0x340 [ 186.047451][ T5022] __lock_acquire+0x125b/0x1f80 [ 186.052291][ T5022] lock_acquire+0x1f8/0x5a0 [ 186.056782][ T5022] ? ext4_bmap+0x4b/0x410 [ 186.061101][ T5022] ? read_lock_is_recursive+0x10/0x10 [ 186.066469][ T5022] ? __might_sleep+0xb0/0xb0 [ 186.071041][ T5022] ? __lock_acquire+0x125b/0x1f80 [ 186.076055][ T5022] down_read+0xad/0xa30 [ 186.080194][ T5022] ? ext4_bmap+0x4b/0x410 [ 186.084510][ T5022] ? bit_waitqueue+0x30/0x30 [ 186.089087][ T5022] ? __down_common+0x8b0/0x8b0 [ 186.093839][ T5022] ? jbd2_journal_flush+0x374/0xc40 [ 186.099025][ T5022] ? __lock_acquire+0x1f80/0x1f80 [ 186.104033][ T5022] ? jbd2_cleanup_journal_tail+0x1a7/0x2c0 [ 186.109825][ T5022] ? ext4_journalled_write_end+0xec0/0xec0 [ 186.115621][ T5022] ext4_bmap+0x4b/0x410 [ 186.119762][ T5022] ? ext4_journalled_write_end+0xec0/0xec0 [ 186.125553][ T5022] bmap+0xa1/0xd0 [ 186.129177][ T5022] jbd2_journal_flush+0x5b5/0xc40 [ 186.134190][ T5022] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 186.139981][ T5022] ? __bpf_trace_jbd2_shrink_checkpoint_list+0x50/0x50 [ 186.146815][ T5022] ? bpf_lsm_capable+0x5/0x10 [ 186.151496][ T5022] ? security_capable+0x86/0xb0 [ 186.156355][ T5022] ext4_ioctl+0x3986/0x5f60 [ 186.160850][ T5022] ? kasan_set_track+0x4b/0x70 [ 186.165603][ T5022] ? security_file_ioctl+0x6d/0xa0 [ 186.170702][ T5022] ? __se_sys_ioctl+0x47/0x160 [ 186.175454][ T5022] ? do_syscall_64+0x3b/0xb0 [ 186.180037][ T5022] ? ext4_fileattr_set+0x1770/0x1770 [ 186.185319][ T5022] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 186.190159][ T5022] ? __x64_compat_sys_ioctl+0x80/0x80 [ 186.195517][ T5022] ? __lock_acquire+0x1f80/0x1f80 [ 186.200529][ T5022] ? lockdep_hardirqs_on+0x94/0x130 [ 186.205711][ T5022] ? __kmem_cache_free+0x25c/0x3c0 [ 186.210808][ T5022] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 186.216429][ T5022] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 186.222047][ T5022] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 186.227660][ T5022] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 186.233108][ T5022] ? __fget_files+0x28/0x4a0 [ 186.237687][ T5022] ? __fget_files+0x28/0x4a0 [ 186.242257][ T5022] ? __fget_files+0x435/0x4a0 [ 186.246914][ T5022] ? __fget_files+0x28/0x4a0 [ 186.251486][ T5022] ? bpf_lsm_file_ioctl+0x5/0x10 [ 186.256406][ T5022] ? security_file_ioctl+0x7d/0xa0 [ 186.261498][ T5022] ? ext4_fileattr_set+0x1770/0x1770 [ 186.266771][ T5022] __se_sys_ioctl+0xf1/0x160 [ 186.271350][ T5022] do_syscall_64+0x3b/0xb0 [ 186.275751][ T5022] ? clear_bhb_loop+0x45/0xa0 [ 186.280411][ T5022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.286291][ T5022] RIP: 0033:0x7fbaa9379e79 [ 186.290688][ T5022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.310274][ T5022] RSP: 002b:00007fbaa91de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.318677][ T5022] RAX: ffffffffffffffda RBX: 00007fbaa9516058 RCX: 00007fbaa9379e79 [ 186.326637][ T5022] RDX: 0000000020000180 RSI: 000000004004662b RDI: 0000000000000006 [ 186.334588][ T5022] RBP: 00007fbaa93e793e R08: 0000000000000000 R09: 0000000000000000 [ 186.342540][ T5022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.350492][ T5022] R13: 0000000000000000 R14: 00007fbaa9516058 R15: 00007ffea46e5348 [ 186.358451][ T5022] [ 186.361535][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.367100][ T5025] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 186.368096][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 186.377626][ T5025] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 186.393375][ T5025] BTRFS info (device loop2): using free space tree [ 186.421729][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.454791][ T4747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.523921][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.533800][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.564655][ T4747] device veth0_vlan entered promiscuous mode [ 186.577618][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.604530][ T5025] BTRFS info (device loop2): enabling ssd optimizations [ 186.614156][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.649075][ T4747] device veth1_vlan entered promiscuous mode [ 186.672230][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.686281][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.699568][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.724934][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.737888][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.751996][ T4778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.773534][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.785981][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.820775][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.830077][ T3641] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 186.847961][ T4747] device veth0_macvtap entered promiscuous mode [ 186.860452][ T38] tipc: Left network mode [ 186.869402][ T4747] device veth1_macvtap entered promiscuous mode [ 186.912243][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.934920][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.961508][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.980586][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.001072][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.020802][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.032141][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.041426][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.053064][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.068582][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.087186][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.105781][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.117563][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.127552][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.138491][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.148363][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.158906][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.169266][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.181659][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.192686][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.211149][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.219631][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.232260][ T4747] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.240954][ T4747] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.253024][ T4747] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.263566][ T4747] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.281261][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.292720][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.312971][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.323420][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.332522][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.340134][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.351561][ T4778] device veth0_vlan entered promiscuous mode [ 187.376914][ T4747] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 187.389570][ T4778] device veth1_vlan entered promiscuous mode [ 187.401343][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 187.430263][ T4020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.433203][ T4747] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 187.447642][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.462328][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.470003][ T4020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.481545][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.490031][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.504072][ T4778] device veth0_macvtap entered promiscuous mode [ 187.530093][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.540879][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.551738][ T4778] device veth1_macvtap entered promiscuous mode [ 187.563099][ T3685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.570725][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.581440][ T3685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.589456][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.600444][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.612641][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.624433][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.636005][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.646809][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.657614][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.670050][ T4778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.678953][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.688319][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.697790][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.713764][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.727146][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.737629][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.750371][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.760251][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.771039][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.780920][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.791410][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.801747][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.812179][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.823143][ T4778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.834878][ T4778] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.843638][ T4778] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.853022][ T4778] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.861780][ T4778] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.878327][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.887286][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.913050][ T4778] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 187.937245][ T4778] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 187.937248][ T4020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.937261][ T4020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.957959][ T3685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.963749][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.969657][ T3685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.985056][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.151697][ T38] device hsr_slave_0 left promiscuous mode [ 188.157784][ T38] device hsr_slave_1 left promiscuous mode [ 188.164481][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.172522][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.179942][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.187938][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.196202][ T38] device bridge_slave_1 left promiscuous mode [ 188.202879][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.210574][ T38] device bridge_slave_0 left promiscuous mode [ 188.216989][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.226021][ T38] device veth1_macvtap left promiscuous mode [ 188.232303][ T38] device veth0_macvtap left promiscuous mode [ 188.238323][ T38] device veth1_vlan left promiscuous mode [ 188.244298][ T38] device veth0_vlan left promiscuous mode [ 188.339769][ T38] team0 (unregistering): Port device team_slave_1 removed [ 188.363240][ T38] team0 (unregistering): Port device team_slave_0 removed [ 188.381995][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.402858][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.441232][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 188.453124][ T38] bond0 (unregistering): Released all slaves [ 189.491212][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 190.521196][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 191.561199][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 192.601234][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 193.641226][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 194.051197][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.057461][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.681421][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available