last executing test programs: 3m37.960434526s ago: executing program 0 (id=3947): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000400)) 3m37.807493437s ago: executing program 0 (id=3949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd6) 3m37.690725268s ago: executing program 0 (id=3950): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5a000a00bb6a880000d6c8db0000dba67e0602000043c59ed66b5571ca5f2ae0e28900000200df018002000000fc060f0000000000000061547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605197f71174aa951f3", 0xb8) 3m37.551579199s ago: executing program 0 (id=3952): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90324fc60100005000a000200053582c137153e3704000780fc0b09000300", 0x33fe0}], 0x1}, 0x0) 3m37.294795871s ago: executing program 0 (id=3957): syz_mount_image$ntfs3(&(0x7f0000000100), &(0x7f000001f700)='./file0\x00', 0x42, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x1f728, &(0x7f000001f740)="$eJzs3Qm8DXX/B/Df7Ps+R7a4lpCQfc2+y76FZN/3bCFxSfYsEZItyZYkVJJEEiXZJSFJJUnakIr/y9xzde/Fv2d6ql/P+Lx79Z1z5p4z8z1nzmdmzjhnztcNp9RtXK1RQkJCAmFlkuQiSSWRJJIrVtJlPj7uSnx4nhDCEEJW/ZC/5ji7Ze6r48ysGx8cuiL7pv5a07Xm6xLZabf6+lzhkzvT7czw9eXGXbr2S+jaL6FX7/4JbRPa9e7dv227Hh0TOnTt171AQv0eHdv265jQtVe/jn1T/blTj959+gxOaNurg6H26duxX7+Etr0GJ3TvODihf++E/n0HJ7Tt3LZrr4QCBQokGCqB/1CT5bQ7AAAAAAAAAAAAAAAAAACAv8aVK+QKQ7sJAAAAAAAAAAAAAAAAAAAA+K9Uq1m7akHCXbvOEIaUJAyZxaT4sn+Ki8m3tAkhbYJL6YNaI34p8WD5/D0uHWJuNhRv1MQNPoBQkBDS5dr0WVIruMQQIRgn/OF8SJ/4hHokDZLny3M5SR1SjTSOX0+M986QCqkaKRcfVkgecY674dApn/TMrEo1He66x3NtOnbSIIGkHjoMGwyvXLly5UZP0d/j+j7h3y3s6yz5lB7Jw9SvM+6m+W+WJv9cPB1sisn/9/nnk2d6nav573Nt+ixpGDb/durnIXm+8rX81yFdSV/SNz7+ZuuBmz2vaYfZmCspntf/FSztBoAq9rr8s/9P/tm/PP9xf0f+rzWfNEyZ/9qkN+lMqpGupAfpGB9/s/yXjw+v5T/NdJOH2Sok3Qn5h/8d1+efi+f/eJr8i/F1QPIoO56X5PwX/JP5T72fz5D6oXOeWvL0JS4naUp6kx5kAOlJOgbTTbw2H5Z0uDZHPvHq40h+P+AHfy0aT4ZP5jMuYZLmIrjx+wfjkm4gXN1/T2BJqtuk/RuJrysLXps/T9z4pX5kMBlCupO2pEewNkreH7m67stz7fYC0a890/HlFH/kidfGp7+2P5j+P14P8X98E4gw/rr88/H8b7rB+38+zfb/r8r/X7KfHz/rX8rtfEXSn/QnfUkV0pF0io9PvR7g/uP1wDhy/XogGBdyPRD6fYaaeugw1YLhX7Ofge3/re367b8Q5J9Lemmk2f4LaY7//X/5Lz1hV6ph8vhcCdde2dfu9/v7CIZU+e+3/8H0Ga5AcL1+qrz9/npPvuO1vMUPxOWzUw8dtnIwnEIIaXb1Ap+03igZv0tOUpMUIQWDx8HEnxgm/vzkif+fssn0aY7aLIj3yPAV4s9wajVIiif8BsPk+TtM1eD6quT9Bj5pP0NO02dyL8nHf+BWdv3xPzG+/a9/g/f/4j/8/j/l8f/Q7wvi+ahw7XElufq+oBLpSvqTnqQt6RN6e1whzXiHqR4M/7fe9yfD9v/Wdv32X4rnf90N9v+lv2n/P2XOa4fNeZp/SEuevhDkvDfpTfoH1/+t+/032w9JO3Ti0/lr1zPI/63t+vzL8fwPukH+5b9v+2+kHZX6uAD3J47/p5byuEAl0pZ0IJWDY4P9SFKeUh9HY69dSky1f/77ZC/HL17bPz+XNfUwLnlubPwsC/+u/QTk/9Z2ff6VIP9K6oP98Xemyl/z+Z+EtF0wf7j//5f8u0Aw36v7/41IR9KeDCB9Scc0+f49D8nb49/ffyc9GX2Y1MOrU6tCGhGnYtItpxBCjpPfjxNsuvb+++rtkm7jktTHCVbF/096tH788Sd9YqNBzjXB85M8TIzfbighpCaped3tFxw9Vollfh8mr7I63PD2HDnnchev3iZ5SNJMn6RY3mz88W0nvx9fWJri8SXf3k7z+GbF/yfBHpWvpF74N563H+8zT/xFeLPnIO3tbvbY0z6Of9d6mJbr3/+r/8/n/1Rq7/+5P5H/5E6Thinf/zchfUhl0pb0i+f/RvvlyVvx3//dn73hMFvCuGCYPB0iJO0/JMSPw+UkNUkv0on0jt8reeWnd83U/aFhRw6nfdz/7OsS2/9b2/Xbfy1+/D+Rvf74n/bXbP/ttF38Q9v/YL5X81+VDCL9SUfSi3QItmdJ73WSctuM+ePj+jWYpP+vypD0CEgbUjf+/CXVsP3liq8aRC4nqUfakW6k5rVjFH/19BuQAcFxkbaEIxnj0+8SvMP676d/9f1VQ9KR9CFtSd9gDZsatr//Jtdv/3VCgu1/wg2O/+t/w/E/2p/LSf2+n7l26dZ4fWL7f2u7fvtv/D/5N26c/+BWyP//IuT/1nZ9/s3/J/8mtv8Rg/zf2q7Pv/X/5N9C/iMG+b+1XZ9/O8g/IWNJ6vwz1+7x++3+ivzfGjn7t0L+b23X59/5V+Ufr8+/F57fW9v1+Xf/VfmHvxfyf2u7Pv8e8n8LQf5vbdfn30f+byHI/63t+vzHkP9bCPJ/a7s+/+mQ/1sI8n9ruz7/tyH/txDk/9Z2ff6Tzv9tkD7s9d//S/8XfP8v15/8/m/d+Pd//trvvyR9n3VQ8FQkfc+w2bXvs9a7dl+HpPn+T4rvBSfEn6Q88a81XfcZIyb1A075Pdpz1+bLkt3X5tsg1W1TzndT/H8SHKcpGH/e49+PjU835QNPfi6upJFy+fvxbzg2S3Eu9rDTudHnqtI+Xqzn/41unv8bnf87Q0Tyn/L7dVPin0FMzmHBG+TfI6lzmECufxD/m69zbP9vbTfPf+IN8p/xz3z/VyF/Ov+/n/+HuXb+n7/r+6lTkufH/n6+waT1QMNr00i7HqiQ4vwAmePDhOBbksF3JRfcHn9GU/p3rSdw/s9bW9L3f/Omyf/V9cFYNu35fz4Lhr/nPkly7mfzHwS5u9kwIeH67/2z/+92P6mbtOcD/KP5pJ3e1fnmD+7ZKf57H0n7zVfzbqf43v+5/+B8vseTz+1zLe8MaRN0SEim+PU/7C/+LGSMP7dX53mj/m7/s9NPi087/UIp/vjZtfXR7mv7NEnvg+T4pav3vSf+uJtd+zsfjEsf//diIvIkZ+1mTWpWSZpq0jjl6rjqqccFt6tTrwr5pmK8g3/HevBW9dlN8n/9+f8FciIY/un832DuYfL/V+cr8SbnBU+W9ry/ydNLHmZjhgfd//W54f/f3IyIt/XX5ObEfz8J+K/Qff2cuGn+21x3/v//Lv83+qmZvyX/ad1k+3ez831uii+TJBxZFx9/dX9+FSGkLmka1KtaBmcR70Naxn/FJz/pGpxVvDPpGPzfixQhRUjh4L9ipBApQQqRwqRlijVR6svlSXnS8i+eaurXF5/m9XUizetL+G9fX1eeSfX6gn+3m+f/Ysjtf9rf+0g7/G+3/8n7/380n+TtdfLP5lydb/Ob5D/M9j/Nz/CQbEzi/7v9vzrP/vH195Rrf+eDcf/t+jt476GJZEC/jn0LDGrbv3/fQiQ+uMHfCpP4IJA6l9j+0/bv2/6zQf7z3GD736z6P5n/pO1R6Pwn7d6TPDmShtfv/xdJMx/y59YzfzifpMDdbD2TfKlCygeeYnrJw2zciL/xfcYJ8s+8z4Cb+fflP2n7v53i9r9Pim4a/8ntf/I5n5NzqVzLZQHSPvhd0KRbhN0PSJ5u8jAbM+p/+DgAtv+0/dvyT+IZLEnS/jyslOJ+EA0S7QaAKilE/pN+XwL5jxKZdgNAlRwi/0k/24L8R4lCuwGgSgmR/6Qj38h/lKi0GwCq1BD5T/rkLfIfJRrtBoAqLUT+kz7XjvxHiU67AaBKD5H/pJ/oRv6j5LqfXYdbihEi/2ZQkf8oMWk3AFSZIfJvBRX5jxKLdgNAlRUi/0kfgEP+o+S6r2TDLcUOkf/gLFjIf6Q4tBsAqpwQ+U/6lU3kP0pc2g0AVW6I/Adnv0L+I8Wj3QBQ5YXIf/BNIuQ/UnzaDQBVfoj8x4KK/EdJjHYDQFUsRP7TBRX5j5J0tBsAqtKFyP9tQUX+o+Q22g0AVbeFyH/S2TKR/yhJT7sBoCp9iPxnCCryHyUZaDcAVGUIkf+MQUX+oyQj7QaAqowh8p90Bn7kP0oy0W4AqMoUIv9Jv3iF/EdJZtoNAFWZQ+Q/6RfpkP8ouZ12A0DV7SHynyWoyH+UZKHdAFCVJUT+swYV+Y+SrLQbAKqyhsh/0q+UIP9RcqNfZYJbR0KI/GcLKvIfJdloNwBUZQuR/+xBRf6jJDvtBoCq7CHyn/SDtMh/lOSg3QBQlSNE/nMGFfmPkpy0GwCqcobI/x1BRf6j5A7aDQBVd4TIf66gIv9Rkot2A0BVrhD5zx1U5D9KctNuAKjKHSL/eYKK/EdJHtoNAFV5QuT/zqAi/1FyJ+0GgKo7Q+Q/b1CR/yjJS7sBoCpviPzfFVTkP0ruot0AUHVXiPznCyryHyX5aDcAVOULkf/8QUX+oyQ/7QaAqvwh8l8gqMh/lBSg3QBQVSBE/u8OKvIfJXfTbgCoujtE/gsGFfmPkoK0GwCqCobIf6GgIv9RUoh2A0BVoRD5LxxU5D9KCtNuAKgqHCL/RYKK/EdJEdoNAFVFQuS/aFCR/ygpSrsBoKpoiPwXCyryHyXFaDcAVBULkf/iQUX+o6Q47QaAquIh8l8iqMh/lJSg3QBQVSJE/oMxyH+klKTdAFBVMkT+SwUV+Y+SUrQbAKpKhch/6aAi/1FSmnYDQFXpEPkvE1TkP0rK0G4AqCoTIv/3BBX5j5J7aDcAVN0TIv9lg4r8R0lZ2g0AVWVD5L9cUJH/KClHuwGgqlyI/JcPKvIfJeVpNwBUlQ+R/wpBRf6jpALtBoCqCiHyXzGoyH+UVKTdAFBVMUT+KwUV+Y+SSrQbAKoqhch/5aAi/1FSmXYDQFXlEPmvElTkP0qq0G4AqKoSIv9Vg4r8R0lV2g0AVVVD5L9aUJH/KKlGuwGgqlqI/FcPKvIfJdVpNwBUVQ+R/xpBRf6jpAbtBoCqGiHyXzOoyH+U1KTdAFBVM0T+awUV+Y+SWrQbAKpqhcj/vUFF/qPkXtoNAFX3hsh/7aAi/1FSm3YDQFXtEPmvE1TkP0rq0G4AqKoTIv91g4r8R0ld2g0AVXVD5L9eUJH/KKlHuwGgql6I/NcPKvIfJfVpNwBU1Q+R/wZBRf6jpAHtBoCqBiHy3zCoyH+UNKTdAFDVMET+GwUV+Y+SRrQbAKoahch/46Ai/1HSmHYDQFXjEPlvElTkP0qa0G4AqGoSIv9Ng4r8R0lT2g0AVU1D5P++oCL/UXIf7QaAqvtC5L9ZUJH/KGlGuwGgqlmI/DcPKvIfJc1pNwBUNQ+R/xZBRf6jpAXtBoCqFiHyf39Qkf8ouZ92A0DV/SHy3zKoyH+UtKTdAFDVMkT+Hwgq8h8lD9BuAKh6IET+WwUV+Y+SVrQbAKpahch/66Ai/1HSmnYDQFXrEPlvE1TkP0ra0G4AqGoTIv9tg4r8R0lb2g0AVW1D5L9dUJH/KGlHuwGgql2I/LcPKvIfJe1pNwBUtQ+R/w5BRf6jpAPtBoCqDiHy3zGoyH+UdKTdAFDVMUT+OwUV+Y+STrQbAKo6hch/56Ai/1HSmXYDQFXnEPnvElTkP0q60G4AqOoSIv9dg4r8R0lX2g0AVV1D5L9bUJH/KOlGuwGgqluI/HcPKvIfJd1pNwBUdQ+R/x5BRf6jpAftBoCqHiHy3zOoyP//nrzvbFt24+XWk0Y78K/RM0T+ewUV+Y+SXrQbAKp6hch/76Ai/1HSm3YDQFXvEPnvE1TkP0r60G4AqOoTIv8PBhX5j5IHaTcAVD0YIv99g4r8R0lf2g0AVX1D5L9fUJH/KOlHuwGgql+I/PcPKvIfJf1pNwBU9Q+R/wFBRf6jZADtBoCqASHyPzCoyH+UDKTdAFA1MET+Hwoq8h8lD9FuAKh6KET+BwUV+Y+SQbQbAKoGhcj/4KAi/1EymHYDQNXgEPkfElTkP0qG0G4AqBoSIv8PBxX5j5KHaTcAVD0cIv9Dg4r8R8lQ2g0AVUND5P+RoCL/UfII7QaAqkdC5H9YUJH/KBlGuwGgaliI/A8PKvIfJcNpNwBUDQ+R/8SgIv9Rkki7AaAqMUT+RwQV+Y+SEbQbAKpGhMj/yKAi/1EyknYDQNXIEPl/NKjIf5Q8SrsBoOrREPkfFVTkP0pG0W4AqBoVIv+PBRX5j5LHaDcAVD0WIv+jg4r8R8lo2g0AVaND5H9MUJH/KBlDuwGgakyI/I8NKvIfJWNpNwBUjQ2R/3FBRf6jZBztBoCqcSHyPz6oyH+UjKfdAFA1PkT+JwQV+Y+SCbQbAKomhMj/xKAi/1EykXYDQNXEEPl/PKjIf5Q8TrsBoOrxEPmfFFTkP0om0W4AqJoUIv+Tg4r8R8lk2g0AVZND5H9KUJH/KJlCuwGgakqI/E8NKvIfJVNpNwBUTQ2R/yeCivxHyRO0GwCqngiR/2lBRf6jZBrtBoCqaSHyPz2oyH+UTKfdAFA1PUT+nwwq8h8lT9JuAKh6MkT+ZwQV+Y+SGbQbAKpmhMj/zKAi/1Eyk3YDQNXMEPmfFVTkP0pm0W4AqJoVIv9PBRX5j5KnaDcAVD0VIv+zg4r8R8ls2g0AVbND5P/poCL/UfI07QaAqqdD5H9OUJH/KJlDuwGgak6I/M8NKvIfJXNpNwBUzQ2R/3lBRf6jZB7tBoCqeSHyPz+oyH+UzKfdAFA1P0T+FwQV+Y+SBbQbAKoWhMj/M0FF/qPkGdoNAFXPhMj/wqAi/1GykHYDQNXCEPl/NqjIf5Q8S7sBoOrZEPlfFFTkP0oW0W4AqFoUIv/PBRX5j5LnaDcAVD0XIv+Lg4r8R8li2g0AVYtD5H9JUJH/KFlCuwGgakmI/C8NKvIfJUtpNwBULQ2R/2VBRf6jZBntBoCqZSHyvzyoyH+ULKfdAFC1PET+nw8q8h8lz9NuAKh6PkT+VwQV+Y+SFbQbAKpWhMj/C0FF/qPkBdoNwF9JDHuHF0Lkf2VQkf8oWUm7AaBqZYj8vxhU5D9KXqTdAFD1Yoj8rwoq8h8lq2g3AFStCpH/l4KK/EfJS7QbAKpeCpH/1UFF/qNkNe0GgKrVIfK/JqjIf5Ssod0AULUmRP7XBhX5j5K1tBsAqtaGyP/LQUX+o+Rl2g0AVS+HyP8rQUX+o+QV2g0AVa+EyP+rQUX+o+RV2g0AVa+GyP+6oCL/UbKOdgNA1boQ+X8tqMh/lLxGuwGg6rUQ+V8fVOT/30f+0/dc/5f2Af9r1ofI/+tBRf6j5HXaDQBVr4fI/4agIv9RsoF2A/AXyfGn7rUhRP7fCCryHyVv0G4AqHojRP43BhX5j5KNtBsAqjaGyP+bQUX+o+RN2g0AVW+GyP+moCL/UbKJdgNA1aYQ+d8cVOQ/SjbTbgCo2hwi/28FFfmPkrdoNwBUvRUi/1uCivxHyRbaDQBVW0Lk/+2gIv9R8jbtBoCqt0Pkf2tQkf8o2Uq7AaBqa4j8vxNU5D9K3qHdAFD1Toj8bwsq8h8l22g3AFRtC5H/7UFF/qNkO+0GgKrtIfL/blCR/yh5l3YDQNW7IfL/XlCR/yh5j3YDQNV7IfK/I6jIf5TsoN0AULUjRP7fDyryHyXv024AqHo/RP53BhX5j5KdtBsAqnaGyP8HQUX+o+QD2g0AVR+EyP+uoCL/UbKLdgNA1a4Q+d8dVOQ/SnbTbgCo2h0i/3uCivxHyR7aDQBVe0Lkf29Qkf8o2Uu7AaBqb4j87wsq8h8l+2g3AFTtC5H//UFF/qNkP+0GgKr9IfJ/IKjIf5QcoN0AUHUgRP4PBhX5j5KDtBsAqg6GyP+HQUX+o+RD2g0AVR+GyP+hoCL/UXKIdgNA1aEQ+f8oqMh/lHxEuwGg6qMQ+T8cVOQ/Sg7TbgCoOhwi/x8HFfmPko9pNwBUfRwi/0eCivxHyRHaDQBVR0Lk/2hQkf8oOUq7AaDqaIj8Hwsq8h8lx2g3AFQdC5H/T4KK/EfJJ7QbAKo+CZH/40FF/qPkOO0GgKrjIfL/aVCR/yj5lHYDQNWnhCF8om8TkmAnjfEJISwhthxcS0+uMFkJwwZXhARCSMLVy1r6q9ft68YTP+n2TNJ492rV/KTbphxHfPIm4127nXbtdszxVONIerKMuKnmn+33+S+4bjwAAAAAAAAA/MdSvldP/b4dAAAAAAAAAP4X1axbpVkeolw3Pg8hZJ1IyCkr6bpBDjE3uj8fr11Iw+CSEK+JB8vn73HpEHOzIYl/3oCoSQMxflXmcpKKpD/pT/qSKqQj6RSMZUjS5xHk8PNJI+V8KpG2pAOpTHqQAaRfMFaK/10kbUj9P/V4KqSZjxTMpyvpT3qStqQPkeLzaUNqh5t+QnyCCamnLwTT7016k/6kK+lBkj43of2H/Rvk/3me7OT+q5JBpD/pSHqRDiTpYxbsn1gOfKpXTMrlUJv0Jp1JtaD/jvHlTeLDNqRWuPn0id+1R+rniedykjqkGml8bcpJ9U+/bu3rX09J069DupK+pG/S52jiyVLCv56uXx4JycujEelI2pMBpC/pGI+P+iemzwapJvElmvL12oT0IZVJW9KPdIx/MpD7K/q/Nv2mpHeQuZ6k47XpNSNV/tvpB0uE4QoE1xOuLd/GqaZbesKu4P43GyYv1w7x6V6dTv5gCXaKvz4LkPZB/0m3yBSfT9o8z+Y/CKZ3s2Ha/hMSiJ0/uGfyfAoG47PcZPr/6eNQUzyO5qmmXyhY/ln/7PST2iN5cqR+nn6ffuFg/N83/SKpnj/72isZ/nMG7QaAKiz/WxuW/60Ny//WZpCr7yYak4qkLqlCKpKGpAppTWqSuqQaqUcakjqkImlMapJ6pO7f1IGd4nKF+HePrqoRH+YMOmhMGpKapBJpQhqTqqQ1qU1qBn3//RJSXE5McflKXE5SjdQktYOu6pKKpA6p+g909buCKS5XIiT+LoqQSvGd4ZykHqlEapGqpDJpHCzbKv9ofxVucjn5Lf7V19/V3poES7gxaU5akyqkKmlEKgdj6pPGwSvx71I/xeUbL9+mpB6pTZoES/afX8ZtUlyukPI9zrXnL3V//2R2r+qTpj89fjl5mDNYr1xdw9CReJPxvy/fmsG6ryppRlqThqQeqfePrFeSTUlxucIf9leR1Ca1ST1S+R9ZtlctSHH5xvmoFOT26qut/t/cy42s+sP+GpKqpH6wbWsUJKQ+qRc8p//MUt50k/6SF3ZOUpVUpJDbZLvTtCTHLycPk/qj5+bfUE9aAeYM8lCdVCdVg32XJsFzV/vatqRRsO9QNVhr/y1SHMlLvNkfAAAA/mUuXLmB3zddicmjkq9nTX33m+1eAwAAAAAAAMC/yDmXu5jyUPXQ4Mg1n1iDENIsPi7pnIBF4//26JNxxE1zXoD0SePSnA/wj65f1SDnmmBaiSHmP5+5fv7BuD8x/wVHj1Vimd8P13eIz79gin+PS5p/5qSbcKnOcRjU/2Q+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/0vOudxFwvx+fSghhCF8Yg1CSLP4OJ8QwpKihI1fG0dcwiTdR3CDQfqkcUk3EBIIIQks+cPrVzXIuSaYVmKI+c9nrp9/MO5PzH/B0WOVWCaYaaBDfP4FCSEVUs0/c9JNOJ9cYbImzz+o/8l8AAAAAAAAAOhiCEs4whOBiEQiMlGISjSiE4OYxCI2cYhLPOKTGElHbiPpSQaSkWQimcntJAvJShJINpKd5CA5yR0kF8lN8pA7SV5yF8lH8pMC5G5SkBQihUkRUpQUI8VJCVKSlCKlSRlyDylLypHypAKpSCqRyqQKqUqqkeqkBqlJapF7SW1Sh9Ql9Uh90oA0JI1IY9KENCX3kWakOWlB7ictyQOkFWlN2vyp+z9MhpJHyDAynCSSEWQkeZSMIo+R0WQMGUvGkfFkAplIHieTyGQyhUwlT5BpZDp5kswgM8ks8hSZTZ4mc8hcMo/MJwvIM2QheZYsIs+RxWQJWUqWkeXkebKCvEBWkhfJKvISWU3WkLXkZfIKeZWsI6+R9eR1soG8QTaSN8kmspm8RbaQt8lW8g7ZRraTd8l7ZAd5n+wkH5BdZDfZQ/aSfWQ/OUAOkg/JIfIROUw+JkfIUXKMfBLy/hfS3H8QQxjCsAzL8AzPiIzIyIzMqIzK6IzOmIzJ2IzNuIzL+IzPpGPSMemZ9ExGJiOTmcnMZGGyMAlMApOdyc7kZHIyuZhcTB4mD5OXycvkY/IxBZgCTEGmEFOYKcwUZYoyxZniTEmmFFOKKcOUYcoyZZnyTHmmIlORqcxUZqoyVZnqTHWmJlOLqcXUZmozdZm6TH2mPtOQacg0ZhozTZmmTDOmGdOCacG0ZFoyrZhWTBumDdOOacd0YDownZhOTBemC9ON6cb0YHowvZheTB+mD9OX6cv0Z/ozA5mBzCBmMDOYeZh5mHmEeYQZzlRmRzAjmZHMKGYUM5oZw4xhxjHjmQnMBOZxZhIzmZnCTGWmMtOY6cx5ZgYzk5nFzGLKsk8zc5i5TAI7n1nALGAWMguZRcwiZjGzhFnCLGOWM88zK5gVzErmReZF5iVmNbOGWcO8zLzMvMqsY9Yx65nXmQ3MBmYjc4HZxGxm3mK2MG8zW5m3mW3MdmYb8x6zg3mP2cnsZHYxu5g9zB5mH7OPOcAcYD5kPmQ+Yj5iPmY+ZiYxx5hjzHHmOHOCOcGcZE4yXzBfMKeYU8xp5jRzhjnDnGXOMueY75jvme+YH5kfmfPMBeYic5G5xFxifmV+ZS4zl6+Gn72KZ3lWZEVWZmVWZVVWZ3XWZE3WZm3WZV3WZ302HZuOTc+mZzOyGdnMbGY2C5uFTWCzsdnZ7GxONiebi83F5mHzsHnZvGw+Nh9bgC3AFmQLsoXZwmxRthhbnC3BlmRLsaXZMmwZtixbji3PVmArshXZymwVtipbja3G1mBrsLXYWmxttjZbl63L9s7XM19DdgQzmmnCXl0yzdjJTAt2CtOSfYBtxbZmpzFt2XbsdKYD25HtxHZmZzIzmG5su3w92J5sL3YO04ftlW8u04/tz85nBrIPsYPYwewQ9mF2KNsh3zB2OLuYGcGOZJcxo9jH2NHsGHYlU4W9usSqso+zk9jJ7BR2KvsqM42dzj7JzmBnsrPYp9jZ7NPsHHYuO4+dzy5gn2EXss+yi9jn2MXsEnYpu4xdzj7PrmBfYFeyL7Kr2JfY1ewadi37MvsK+yq7jn2NXc++zm5g32A3sm+ym9jN7FvsFvZtdiv7DruN3c6+y77H7mDfZ3eyH7C72N3sHnYvu4/dzx5gD7IfsofYj9jD7MfsEfYoe4z9hD3OfsqeYD9jT7Kfs1+wX7Kn2K/Y0+zX7Bn2G/Ys+y17jv2O/Z79gf2R/Yk9z15gL7I/s5fYX9hf2d/Yy+wVlnAMx3Icx3MCJ3ISJ3MKp3Iap3MGZ3IWZ3MO53Ie53MxLh13G5eey8Bl5DJxmbnbuSxcVi6By8Zl53JwObk7uFxcbi4PdyeXl7uLy8fl5wpwd3MFuUJcYa4IV5QrxhXnSnAluVJcaa4Mdw9XlivHlecqcBW5SlxlrgpXlavGVedqcDW5Wty9XG2uDleXq8fV5xpwDblGXGOuCdeUu49rxjXnWnD3cy25B7hWXGuuDdeWa8e15zpwHblOXGeuC9eV68Z153pwPbleXG+uD9eH68v15fpzA7iB3EBuEDeYG8L9xl3mrnDDuOFcIjeCG8k9yo3iHuNGc2O4sdw4bjw3gZvIPc5N4iZzU7ip3BPcNG469yQ3g5vJzeKe4mZzT3NzuLncPG4+t4B7hlvIPcst4p7jFnNLuKXcMm459zw3Oj6lVf/B/d+6wf0nBnPfxe3m9nB7uX3cfu4Ad5DbxR3iDnGHucPcEe4Id4w7xh3njnMnuBPcSe4k9wX3BXeKO8Wd5k5zZ7gz3FnuLHeO+477mfuB+5H7iTvPXeAucD9zl7hL3K/x54DwDM/yHM/zAi/yEi/zCq/yGq/zBm/yFm/zDu/yHu/zMT4dfxufns/AZ+Qz8Zn52/ksfFY+gc/GZ+dz8Dn5O/hcfG4+D38nn5e/i8/H5+cL8Hf/1/f/o/7a8G34dnw7vgPfge/Ed+K78F34bnw3vgffg+/F9+L78H34vnxfvj/fnx/ID+QH8YP4IfwQfig/lB/GD+MT+UR+JP8oP4p/jB/Nj+HH8uP48fx4fiI/kZ/ET+Kn8FP4J/gn+On8dH4GP4Ofxc/iZ/Oz+Tn8HH4eP49fwC/gF/IL+UX8In4xv5hfyi/ll/PL+RX8Cn4lv5Jfxa/iV/Or+bX8Wv4V/hV+Hb+OX8+v5zfwG/iN/EZ+E7+Z38xv4bfwW/mt/DZ+G/8u/y6/g9/B7+R38pv43fxufi+/l9/P7+cP8gf5Q/wh/jB/mD/CH+GP8cf44/xx/gR/gj/Jn+S/4L/gT/Gn+NP8af4Mf4Y/y5/lz/Hn+O/57/kf+R/58/x5/iJ/kb/EX+J/5X/lL/OXr+72CazACrzAC6IgCrIgC6qgCrqgC6ZgCrZgC67gCr7gC+mEdEJ6Ib2QUcgoZBYyC1mELEKCkCBkF7ILOYU7hFxCbiGPcKeQV7hLyCfkFwoIdwsFhUJCYaGIUFQoJhQXSgglhVJCaaGMcI9QVignlBcqCBWFSkJloYpQVagmVBdqCDWFWsK9Qm2hjlBXqCfUFxoIDYVGQmOhidBUuE9oJjQXWgj3Cy2FB4RWQmuhzV86/THCWGGcMF6YIEwUHhcmCZOFKcJU4QlhmjBdeFKYIcwUZglPCbOFp4U5wlxhnjBfWCA8IywUnhUWCc8Ji4UlwlJhmbBceF5YIbwgrBReFFYJLwmrhTXCWuFl4RXhVWGd8JqwXnhd2CC8IWwU3hQ2CZuFt4QtwtvCVuEdYZuwXXhXeE/YIbwv7BQ+EHYJu4U9wl5hn7BfOCAcFD4UDgkfCYeFj4UjwlHhmPCJcFz4VDghfCacFD4XvhC+FE4JXwmnha+FM8I3wlnhW+Gc8J3wvfCD8KPwk3BeuCBcFH4WLgm/CL8KvwmXhSsCERmRFTmRFwVRFCVRFhVRFTVRFw3RFC3RFh3RFT3RF2NiOvE2Mb2YQcwoZhIzi7eLWcSsYoKYTcwu5hBzineIucTcYh7xTjGveJeYT8wvFhDvFguKhcTCYhGxqFhMLC6WEEuKpcTSYhnxHrGsWE4sL1YQK4qVxMpiFbGqWE2sLtYQa4q1xHvF2mIdsa5YT6wvNhAbio3ExmITsal4n9hMbC62EO8XW4oPiK3E1mIbsa3YTmwvdhA7ip3EzmIXsavYTewu9hB7ir3E3mIf8UGxr9hP7C8OEAeKD4mDxMHiEPFhcaj4iDhMHC4miiPEkeKj4ijxMXG0OEYcK44Tx4sTxIni4+IkcbI4RZwqPiFOE6eLT4ozxJniLPEpcbb4tDhHnCvOE+eLC8RnxIXis+Ii8TlxsbhEXCouY4j4vLhCfEFcKb4orhJfEleLa8S14sviK+Kr4jrxNXG9+Lq4QXxD3Ci+KW4SN4tviVvEt8Wt4jviNnG7+K74nrhDfF/cKX4g7hJ3i3vEveI+cb94QDwofigeEj8SD4sfi0fEo+Ix8RPxuPipeEL8TDwpfi5+IX4pnhK/Ek+LX4tnxG/Es+K34jnxO/F78QfxR/En8bx4Qbwo/ixeEn8RfxV/Ey+LV0QiMRIrcRIvCZIoSZIsKZIqaZIuGZIpWZItOZIreZIvxaR00m1SeimDlFHKJGWWbpeySFmlBCmblF3KIeWU7pBySbmlPNKdUl7pLimflF8qIN0tFZQKSYWlIlJRqZhUXCohlZRKSaWlMtI9UlmpnFReqiBVlCpJlaUqUlWpmlRdqiHVlGpJ90q1pTpSXameVF9qIDWUGkmNpSZSU+k+qZnUXGoh3S+1lB6QWkmtpTZSW6md1F7qIHWUOkmdpS5SV6mb1F3qIfWUekm9pT7Sg1JfqZ+kEEIGSg9Jg6TB0hDpYWmo9Ig0TBouJUojpJHSo9Io6TFptDRGGiuNk8ZLE6SJ0uPSJGmyNEWaKj0hTZOmS09KM6SZ0izpKWm29LQ0R5orzZPmSwukZ6SF0rPSIuk5abG0RFoqLZOWS89LK6QXpJXSi9Iq6SVptbRGWiu9LL0ivSqtk16T1kuvSxukN6SN0pvSJmmz9Ja0RXpb2iq9I22TtkvvSu9JO6T3pZ3SB9Iuabe0R9or7ZP2Swekg9KH0iHpI+mw9LF0RDoqHZM+kY5Ln0onpM+kk9Ln0hfSl9Ip6SvptPS1dEb6RjorfSudk76Tvpd+kH6UfpLOSxeki9LP0iXpF+lX6TfpsnRFIjIjszIn87Igi7Iky7Iiq7Im67Ihm7Il27Iju7In+3JMTiffJqeXM8gZ5UxyZvl2OYucVU6Qs8nZ5RxyTvkOOZecW84j3ynnle+S88n55QLy3XJBuZBcWC4iF5WLycXlEnJJuZRcWi4j3yOXlcvJ5eUKckW5klxZriJXlavJ1eUack25lnyvXFuuI9eV68n15QZyQ7mR3FhuIjeV75Obyc3lFvL9ckv5AbmV3FpuI7eV28nt5Q5yR7mT3FnuIneVu8nd5R5yT7mX3FvuIz8o95X7yf3lAfJA+SF5kDxYHiI/LA+VH5GHycPlRHmEPFJ+VB4lPyaPlsfIY+Vx8nh5gjxRflyeJE+Wp8hT5SfkafJ0+Ul5hjxTniU/Jc+Wn5bnyHPlefJ8eYH8jLxQflZeJD8nL5aXyEvlZfJy+Xl5hfyCvFJ+UV4lvySvltfIa+WX5VfkV+V18mvyevl1eYP8hrxRflPeJG+W35K3yG/LW+V35G3ydvld+T15h/y+vFP+QN4l75b3yHvlffJ++YB8UP5QPiR/JB+WP5aPyEflY/In8nH5U/mE/Jl8Uv5c/kL+Uj4lfyWflr+Wz8jfyGflb+Vz8nfy9/IP8o/yT/J5+YJ8Uf5ZviT/Iv8q/yZflq/IRGEUVuEUXhEUUZEUWVEUVdEUXTEUU7EUW3EUV/EUX4kp6ZTblPRKBiWjkknJrNyuZFGyKglKNiW7kkPJqdyh5FJyK3mUO5W8yl1KPiW/UkC5WymoFFIKK0WUokoxpbhSQimplFJKK2WUe5SySjmlvFJBqahUUiorVZSqSjWlulJDqanUUu5Vait1lLpKPaW+0kBpqDRSGitNlKbKfUozpbnSQrlfaak8oLRSWittlLZKO6W90kHpqHRSOitdlK5KN6W70kPpqfRSeit9lAeVvko/pb8yQBmoPKQMUgYrQ5SHlaHKI8owZbiSqIxQRiqPKqOUx5TRyhhlrDJOGa9MUCYqjyuTlMnKFGWq8oQyTZmuPKnMUGYqs5SnlNnK08ocZa4yT5mvLFCeURYqzyqLlOeUxcoSZamyTFmuPK+sUF5QViovKquUl5TVyhplrfKy8oryqrJOeU1Zr7yubFDeUDYqbyqblM3KW8oW5W1lq/KOsk3ZrryrvKfsUN5XdiofKLuU3coeZa+yT9mvHFAOKh8qh5SPlMPKx8oR5ahyTPlEOa58qpxQPlNOKp8rXyhfKqeUr5TTytfKGeUb5azyrXJO+U75XvlB+VH5STmvXFAuKj8rl5RflF+V35TLyhWFqIzKqpzKq4IqqpIqq4qqqpqqq4ZqqpZqq47qqp7qqzE1nXqbml7NoGZUM6mZ1dvVLGpWNUHNpmZXc6g51TvUXGpuNY96p5pXvUvNp+ZXC6h3qwXVQmphtYhaVC2mFldLqCXVUmpptYx6j1pWLaeWVyuoFdVKamW1ilpVraZWV2uoNdVa6r1qbbWOWletp9ZXG6gN1UZqY7WJ2lS9T22mNldbqPerLdUH1FZqa7WN2lZtp7ZXO6gd1U5qZ7WL2lXtpnZXe6g91V5qb7WP+qDaV+2n9lcHqAPVh9RB6mB1iPqwOlR9RB2mDlcT1RHqSPVRdZT6mDpaHaOOVcep49UJ6kT1cXWSOlmdok5Vn1CnqdPVJ9UZ6kx1lvqUOlt9Wp2jzlXnqfPVBeoz6kL1WXWR+py6WF2iLlWXqcvV59UV6gvqSvVFdZX6krpaXaOuVV9WX1FfVdepr6nr1dfVDeob6kb1TXWTull9S92ivq1uVd9Rt6nb1XfV99Qd6vvqTvUDdZe6W92j7lX3qfvVA+pB9UP1kPqRelj9WD2iHlWPqZ+ox9VP1RPqZ+pJ9XP1C/VL9ZT6lXpa/Vo9o36jnlW/Vc+p36nfqz+oP6o/qefVC+pF9Wf1kvqL+qv6m3pZvaISjdFYjdN4TdBETdJkTdFUTdN0zdBMzdJszdFczdN8Laal027T0msZtIxaJi2zdruWRcuqJWjZtOxaDi2ndoeWS8ut5dHu1PJqd2n5tPxaAe1uraBWSCusFdGKasW04loJraRWSiutldHu0cpq5bTyWgWtolZJq6xV0apq1bTqWg2tplZLu1errdXR6mr1tPpaA62h1khrrDXRmmr3ac205loL7X6tpfaA1kprrbXR2mrttPZaB62j1knrrHXRumrdtO5aD62n1kvrrfXRHtT6av20/toAbaD2kDZIG6wN0R7WhmqPaMO04VqiNkIbqT2qjdIe00ZrY7Sx2jhtvDZBm6g9rk3SJmtTtKnaE9o0bbr2pDZDm6nN0p7SZmtPa3O0udo8bb62QHtGW6g9qy3SntMWa0u0pdoybbn2vLZCe0Fbqb2ordJe0lZra7S12svaK9qr2jrtNW299rq2QXtD26i9qW3SNmtvaVu0t7Wt2jvaNm279q72nrZDe1/bqX2g7dJ2a3u0vdo+bb92QDuofagd0j7SDmsfa0e0o9ox7RPtuPapdkL7TDupfa59oX2pndK+0k5rX2tntG+0s9q32jntO+177QftR+0n7bx2Qbuo/axd0n7RftV+0y5rVzSiMzqrczqvC7qoS7qsK7qqa7quG7qpW7qtO7qre7qvx/R0+m16ej2DnlHPpGfWb9ez6Fn1BD2bnl3PoefU79Bz6bn1PPqdel79Lj2fnl8voN+tF9QL6YX1InpRvZheXC+hl9RL6aX1Mvo9elm9nF5er6BX1CvplfUqelW9ml5dr6HX1Gvp9+q19Tp6Xb2eXl9voDfUG+mN9SZ6U/0+vZneXG+h36+31B/QW+mtdVlvq7fT2+sd9I56J72z3kXvqnfTu+s99J56L7233kd/UO+r99P76wP0gfpD+iB9sD5Ef1gfqj+iD9OH64n6CH2k/qg+Sn9MH62P0cfq4/Tx+gR9ov64PkmfrE/Rp+pP6NP06fqT+gx9pj5Lf0qfrT+tz9Hn6vP0+foC/Rl9of6svkh/Tl+sL9GX6sv05frz+gr9BX2l/qK+Sn9JX62v0dfqL+uv6K/q6/TX9PX66/oG/Q19o/6mvknfrL+lb9Hf1rfq7+jb9O36u/p7+g79fX2n/oG+S9+t79H36vv0/foB/aD+oX5I/0g/rH+sH9GP6sf0T/Tj+qf6Cf0z/aT+uf6F/qV+Sv9KP61/rZ/Rv9HP6t/q5/Tv9O/1H/Qf9Z/08/oF/aL+s35J/0X/Vf9Nv6xf0YnBGKzBGbwhGKIhGbKhGKqhGbphGKZhGbbhGK7hGb4RM9IZtxnpjQxGRiOTkdm43chiZDUSjGxGdiOHkdO4w8hl5DbyGHcaeY27jHxGfqOAcbdR0ChkFDaKGEWNYkZxo4RR0ihllDbKGPcYZY1yRnmjglHRqGRUNqoYVY1qRnWjhlHTqGXca9Q26hh1jXpGfaOB0dBoZDQ2mhhNjfuMZkZzo4Vxv9HSeMBoZbQ22hhtjXZGe6OD0dHoZHQ2uhhdjW5Gd6OH0dPoZfQ2+hgPGn2NfkZ/Y4Ax0HjIGGQMNoYYDxtDjUeMYcZwI9EYYYw0HjVGGY8Zo40xxlhjnDHemGBMNB43JhmTjSnGVOMJY5ox3XjSmGHMNGYZTxmzjaeNOcZcY54x31hgPGMsNJ41FhnPGYuNJcZSY5mx3HjeWGG8YKw0XjRWGS8Zq401xlrjZeMV41VjnfGasd543dhgvGFsNN40NhmbjbeMLcbbxlbjHWObsd1413jP2GG8b+w0PjB2GbuNPcZeY5+x3zhgHDQ+NA4ZHxmHjY+NI8ZR45jxiXHc+NQ4YXxmnDQ+N74wvjROGV8Zp42vjTPGN8ZZ41vjnPGd8b3xg/Gj8ZNx3rhgXDR+Ni4Zvxi/Gr8Zl40rBjEZkzU5kzcFUzQlUzYVUzU1UzcN0zQt0zYd0zU90zdjZjrzNjO9mcHMaGYyM5u3m1nMrGaCmc3MbuYwc5p3mLnM3GYe804zr3mXmc/MbxYw7zYLmoXMwmYRs6hZzCxuljBLmqXM0mYZ8x6zrFnOLG9WMCualczKZhWzqlnNrG7WMGuatcx7zdpmHbOuWc+sbzYwG5qNzMZmE7OpeZ/ZzGxutjDvN1uaD5itzNZmG7Ot2c5sb3YwO5qdzM5mF7Or2c3sbvYwe5q9zN5mH/NBs6/Zz+xvDjAHmg+Zg8zB5hDzYXOo+Yg5zBxuJpojzJHmo+Yo8zFztDnGHGuOM8ebE8yJ5uPmJHOyOcWcaj5hTjOnm0+aM8yZ5izzKXO2+bQ5x5xrzjPnmwvMZ8yF5rPmIvM5c7G5xFxqLjOXm8+bK8wXzJXmi+Yq8yVztbnGXGu+bL5ivmquM18z15uvmxvMN8yN5pvmJnOz+Za5xXzb3Gq+Y24zt5vvmu+ZO8z3zZ3mB+Yuc7e5x9xr7jP3mwfMg+aH5iHzI/Ow+bF5xDxqHjM/MY+bn5onzM/Mk+bn5hfml+Yp8yvztPm1ecb8xjxrfmueM78zvzd/MH80fzLPmxfMi+bP5iXzF/NX8zfzsnnFJBZjsRZn8ZZgiZZkyZZiqZZm6ZZhmZZl2ZZjuZZn+VbMSmfdZqW3MlgZrUxWZut2K4uV1UqwslnZrRxWTusOK5eV28pj3Wnlte6y8ln5rQLW3VZBq5BV2CpiFbWKWcWtElZJq5RV2ipj3WOVtcpZ5a0KVkWrklXZqmJVtapZ1a0aVk2rlnWvVduqY9W16ln1rQZWQ6uR1dhqYjW17rOaWc2tFtb9VkvrAauV1dpqY7W12lntrQ5WR6uT1dnqYnW1ulndrR5WT6uX1dvqYz1o9bX6Wf2tAdZA6yFrkDXYGmI9bA21HrGGWcOtRGuENdJ61BplPWaNtsZYY61x1nhrgjXRetyaZE22plhTrSesadZ060lrhjXTmmU9Zc22nrbmWHOtedZ8a4H1jLXQetZaZD1nLbaWWEutZdZy63lrhfWCtdJ60VplvWStttZYa62XrVesV6111mvWeut1a4P1hrXRetPaZG223rK2WG9bW613rG3Wdutd6z1rh/W+tdP6wNpl7bb2WHutfdZ+64B10PrQOmR9ZB22PraOWEetY9Yn1nHrU+uE9Zl10vrc+sL60jplfWWdtr62zljfWGetb61z1nfW99YP1o/WT9Z564J10frZumT9Yv1q/WZdtq5YxGZs1uZs3hZs0ZZs2VZs1dZs3TZs07Zs23Zs1/Zs347Z6ezb7PR2BjujncnObN9uZ7Gz2gl2Nju7ncPOad9h57Jz23nsO+289l12Pju/XcC+2y5oF7IL20XsonYxu7hdwi5pl7JL22Xse+yydjm7vF3BrmhXsivbVeyqdjW7ul3DrmnXsu+1a9t17Lp2Pbu+3cBuaDeyG9tN7Kb2fXYzu7ndwr7fbmk/YLeyW9tt7LZ2O7u93cHuaHeyO9td7K52N7u73cPuafeye9t97AftvnY/u789wB5oP2QPsgfbQ+yH7aH2I/Ywe7idaI+wR9qP2qPsx+zR9hh7rD3OHm9PsCfaj9uT7Mn2FHuq/YQ9zZ5uP2nPsGfas+yn7Nn20/Yce649z55vL7CfsRfaz9qL7OfsxfYSe6m9zF5uP2+vsF+wV9ov2qvsl+zV9hp7rf2y/Yr9qr3Ofs1eb79ub7DfsDfab9qb7M32W/YW+217q/2Ovc3ebr9rv2fvsN+3d9of2Lvs3fYee6+9z95vH7AP2h/ah+yP7MP2x/YR+6h9zP7EPm5/ap+wP7NP2p/bX9hf2qfsr+zT9tf2Gfsb+6z9rX3O/s7+3v7B/tH+yT5vX7Av2j/bl+xf7F/t3+zL9hWbOIzDOpzDO4IjOpIjO4qjOpqjO4ZjOpZjO47jOp7jOzEnnXObk97J4GR0MjmZndudLE5WJ8HJ5mR3cjg5nTucXE5uJ49zp5PXucvJ5+R3Cjh3OwWdQk5hp4hT1CnmFHdKOCWdUk5pp4xzj1PWKeeUdyo4FZ1KTmWnilPVqeZUd2o4NZ1azr1ObaeOU9ep59R3GjgNnUZOY6eJ09S5z2nmNHdaOPc7LZ0HnFZOa6eN09Zp57R3OjgdnU5OZ6eL09Xp5nR3ejg9nV5Ob6eP86DT1+nn9HcGOAOdh5xBzmBniPOwM9R5xBnmDHcSnRHOSOdRZ5TzmDPaGeOMdcY5450JzkTncWeSM9mZ4kx1nnCmOdOdJ50ZzkxnlvOUM9t52pnjzHXmOfOdBc4zzkLnWWeR85yz2FniLHWWOcud550VzgvOSudFZ5XzkrPaWeOsdV52XnFeddY5rznrndedDc4bzkbnTWeTs9l5y9nivO1sdd5xtjnbnXed95wdzvvOTucDZ5ez29nj7HX2OfudA85B50PnkPORc9j52DniHHWOOZ84x51PnRPOZ85J53PnC+dL55TzlXPa+do543zjnHW+dc453znfOz84Pzo/OeedC85F52fnkvOL86vzm3PZueIQl3FZl3N5V3BFV3JlV3FVV3N113BN13Jt13Fd13N9N+amc29z07sZ3IxuJjeze7ubxc3qJrjZ3OxuDjene4eby83t5nHvdPO6d7n53PxuAfdut6BbyC3sFnGLusXc4m4Jt6Rbyi3tlnHvccu65dzybgW3olvJrexWcau61dzqbg23plvLvdet7dZx67r13PpuA7eh28ht7DZxm7r3uc3c5m4L9363pfuA28pt7bZx27rt3PZuB7ej28nt7HZxu7rd3O5uD7en28vt7fZxH3T7uv3c/u4Ad6D7kDvIHewOcR92h7qPuMPc4W6iO8Id6T7qjnIfc0e7Y9yx7jh3vDvBneg+7k5yJ7tT3KnuE+40d7r7pDvDnenOcp9yZ7tPu3Pcue48d767wH3GXeg+6y5yn3MXu0vcpe4yd7n7vLvCfcFd6b7ornJfcle7a9y17svuK+6r7jr3NXe9+7q7wX3D3ei+6W5yN7tvuVvct92t7jvuNne7+677nrvDfd/d6X7g7nJ3u3vcve4+d797wD3ofugecj9yD7sfu0fco+4x9xP3uPupe8L9zD3pfu5+4X7pnnK/ck+7X7tn3G/cs+637jn3O/d79wf3R/cn97x7wb3o/uxecn9xf3V/cy+7V1ziMR7rcR7vCZ7oSZ7sKZ7qaZ7uGZ7pWZ7tOZ7reZ7vxbx03m1eei+Dl9HL5GX2bveyeFm9BC+bl93L4eX07vByebm9PN6dXl7vLi+fl98r4N3tFfQKeYW9Il5Rr5hX3CvhlfRKeaW9Mt49XlmvnFfeq+BV9Cp5lb0qXlWvmlfdq+HV9Gp593q1vTpeXa+eV99r4DX0GnmNvSZeU+8+r5nX3Gvh3e+19B7wWnmtvTZeW6+d197r4HX0OnmdvS5eV6+b193r4fX0enm9vT7eg15fr5/X3xvgDfQe8gZ5g70h3sPeUO8Rb5g33Ev0RngjvUe9Ud5j3mhvjDfWG+eN9yZ4E73HvUneZG+KN9V7wpvmTfee9GZ4M71Z3lPebO9pb44315vnzfcWeM94C71nvUXec95ib4m31FvmLfee91Z4L3grvRe9Vd5L3mpvjbfWe9l7xXvVW+e95q33Xvc2eG94G703vU3eZu8tb4v3trfVe8fb5m333vXe83Z473s7vQ+8Xd5ub4+319vn7fcOeAe9D71D3kfeYe9j74h31DvmfeId9z71TnifeSe9z70vvC+9U95X3mnva++M94131vvWO+d9533v/eD96P3knfcueBe9n71L3i/er95v3mXvikd8xmd9zud9wRd9yZd9xVd9zdd9wzd9y7d9x3d9z/f9mJ/Ov81P72fwM/qZ/Mz+7X4WP6uf4Gfzs/s5/Jz+HX4uP7efx7/Tz+vf5efz8/sF/Lv9gn4hv7BfxC/qF/OL+yX8kn4pv7Rfxr/HL+uX88v7FfyKfiW/sl/Fr+pX86v7Nfyafi3/Xr+2X8ev69fz6/sN/IZ+I7+x38Rv6t/nN/Ob+y38+/2W/gN+K7+138Zv67fz2/sd/I5+J7+z38Xv6nfzu/s9/J5+L7+338d/0O/r9/P7+wP8gf5D/iB/sD/Ef9gf6j/iD/OH+4n+CH+k/6g/yn/MH+2P8cf64/zx/gR/ov+4P8mf7E/xp/pP+NP86f6T/gx/pj/Lf8qf7T/tz/Hn+vP8+f4C/xl/of+sv8h/zl/sL/GX+sv85f7z/gr/BX+l/6K/yn/JX+2v8df6L/uv+K/66/zX/PX+6/4G/w1/o/+mv8nf7L/lb/Hf9rf67/jb/O3+u/57/g7/fX+n/4G/y9/t7/H3+vv8/f4B/6D/oX/I/8g/7H/sH/GP+sf8T/zj/qf+Cf8z/6T/uf+F/6V/yv/KP+1/7Z/xv/HP+t/65/zv/O/9H/wf/Z/88/4F/6L/s3/J/8X/1f/Nv+xf8UmMibExLsbHhJgYk2JyTImpMS2mx4yYGbNidsyJuTEv5sdisXSx22LpYxliGWOZYpljt8eyxLLGEmLZYtljOWI5Y3fEcsVyx/LE7ozljd0VyxfLHysQuztWMFYoVjhWJFY0VixWPFYiVjJWKlY6ViZ2T6xsrFysfKxCrGKsUqxyrEqsaqxarHqsRqxmrFbs3ljtWJ1Y3Vi9WP1Yg1jDWKNY41iTWNPYfbFmseaxFrH7Yy1jD8RaxVrH2sTaxtrF2sc6xDrGOsU6x7rEusa6xbrHesR6xnrFesf6xB6M9Y31i/WPDYgNjD0UGxQbHBsSezg2NPZIbFhseCwxNiI2MvZobFTssdjo2JjY2Ni4/6Pdnn43CfrGz4/tmattVld3V/sa27Zt27Zt27Ztfce2bXtmcz8Hmzx7H2yy2V+dvVKpyuf9B3xio2KjY2NiY2PjYuNjE2ITY5Nik2NTYlNj02LTYzNiM2OzYrNjc2JzY/Ni82MLYgtji2KLY0tiS2PLYstjK2IrY6tiq2NrYmtj62LrYxtiG2ObYptjW2JbY9ti22M7Yjtju2K7Y3tie2P7YvtjB2IHY4dih2NHYkdjx2LHYydiJ2OnYqdjCbEzsbOxc7HzsQuxi7FLscuxK7GrsWux67EbsZuxW7HbsTuxu7F7sfuxB7GHsUexx7EnsaexZ7HnsRexl7FXsdexN7G3sXex97EPsY+xT7HPsS+xr7Fvse+xH7GfsV+x37E/sb+xf7FEWGIsCZYUS4Ylx1JgKbFUWGosDZYWS4elxzJgGbFMWGYsC5YVy4bFMAzDMQIjMQqjMQZjMQ7jMQETMQmTMQVTMQ3TMYAZGMRMzMJsDGEO5mIe5mMBFmIRFseyYzmwnFguLDeWB8uL5cPyYwWwglghrDBWBCuKFcOKYyWwklgprDRWBiuLlcPKYxWwilglrDJWBauKVcOqYzWwmlgtrDZWB6uL1cPqYw2whlgjrDHWBGuKNcOaYy2wllgrrDXWBmuLtcPaYx2wjlgnrDPWBeuKdcO6Yz2wnlgvrDfWB+uL9cP6YwOwgdggbDA2BBuKDcOGYyOwkdgobDQ2BhuLjcPGYxOwidgkbDI2BZuKTcOmYzOwmdgsbDY2B5uLzcPmYwuwhdgibDG2BFuKLcOWYyuwldgqbDW2BluLrcPWYxuwjdgmbDO2BduKbcO2YzuwndgubDe2B9uL7cP2Ywewg9gh7DB2BDuKHcOOYyewk9gp7DSWgJ3BzmLnsPPYBewidgm7jF3BrmLXsOvYDewmdgu7jd3B7mL3sPvYA+wh9gh7jD3BnmLPsOfYC+wl9gp7jb3B3mLvsPfYB+wj9gn7jH3BvmLfsO/YD+wn9gv7jf3B/mL/sER4YjwJnhRPhifHU+Ap8VR4ajwNnhZPh6fHM+AZ8Ux4ZjwLnhXPhsdwDMdxAidxCqdxBmdxDudxARdxCZdxBVdxDddxgBs4xE3cwm0c4Q7u4h7u4wEe4hEex7PjOfCceC48N54Hz4vnw/PjBfCCeCG8MF4EL4oXw4vjJfCSeCm8NF4GL4uXw8vjFfCKeCW8Ml4Fr4pXw6vjNfCaeC28Nl4Hr4vXw+vjDfCGeCO8Md4Eb4o3w5vjLfCWeCu8Nd4Gb4u3w9vjHfCOeCe8M94F74p3w7vjPfCeeC+8N94H74v3w/vjA/CB+CB8MD4EH4oPw4fjI/CR+Ch8ND4GH4uPw8fjE/CJ+CR8Mj4Fn4pPw6fjM/CZ+Cx8Nj4Hn4vPw+fjC/CF+CJ8Mb4EX4ovw5fjK/CV+Cp8Nb4GX4uvw9fjG/CN+CZ8M74F34pvw7fjO/Cd+C58N74H34vvw/fjB/CD+CH8MH4EP4ofw4/jJ/CT+Cn8NJ6An8HP4ufw8/gF/CJ+Cb+MX8Gv4tfw6/gN/CZ+C7+N38Hv4vfw+/gD/CH+CH+MP8Gf4s/w5/gL/CX+Cn+Nv8Hf4u/w9/gH/CP+Cf+Mf8G/4t/w7/gP/Cf+C/+N/8H/4v/wRERiIgmRlEhGJCdSECmJVERqIg2RlkhHpCcyEBmJTERmIguRlchGxAiMwAmCIAmKoAmGYAmO4AmBEAmJkAmFUAmN0AlAGAQkTMIibAIRDuESHuETARESEREnshM5iJxELiI3kYfIS+Qj8hMFiIJEIaIwUYQoShQjihMliJJEKaI0UYYoS5QjyhMViIpEJaIyUYWoSlQjqhM1iJpELaI2UYeoS9Qj6hMNiIZEI6Ix0YRoSjQjmhMtiJZEK6I10YZoS7Qj2hMdiI5EJ6Iz0YXoSnQjuhM9iJ5EL6I30YfoS/Qj+hMDiIHEIGIwMYQYSgwjhhMjiJHEKGI0MYYYS4wjxhMTiInEJGIyMYWYSkwjphMziJnELGI2MYeYS8wj5hMLiIXEImIxsYRYSiwjlhMriJXEKmI1sYZYS6wj1hMbiI3EJmIzsYXYSmwjthM7iJ3ELmI3sYfYS+wj9hMHiIPEIeIwcYQ4ShwjjhMniJPEKeI0kUCcIc4S54jzxAXiInGJuExcIa4S14jrxA3iJnGLuE3cIe4S94j7xAPiIfGIeEw8IZ4Sz4jnxAviJfGKeE28Id4S74j3xAfiI/GJ+Ex8Ib4S34jvxA/iJ/GL+E38If4S/4hEZGIyCZmUTEYmJ1OQKclUZGoyDZmWTEemJzOQGclMZGYyC5mVzEbGSIzESYIkSYqkSYZkSY7kSYEUSYmUSYVUSY3USUAaJCRN0iJtEpEO6ZIe6ZMBGZIRGSezkznInGQuMjeZh8xL5iPzkwXIgmQhsjBZhCxKFiOLkyXIkmQpsjRZhixLliPLkxXIimQlsjJZhaxKViOrkzXImmQtsjZZh6xL1iPrkw3IhmQjsjHZhGxKNiObky3IlmQrsjXZhmxLtiPbkx3IjmQnsjPZhexKdiO7kz3InmQvsjfZh+xL9iP7kwPIgeQgcjA5hBxKDiOHkyPIkeQocjQ5hhxLjiPHkxPIieQkcjI5hZxKTiOnkzPImeQscjY5h5xLziPnkwvIheQicjG5hFxKLiOXkyvIleQqcjW5hlxLriPXkxvIjeQmcjO5hdxKbiO3kzvIneQucje5h9xL7iP3kwfIg+Qh8jB5hDxKHiOPkyfIk+Qp8jSZQJ4hz5LnyPPkBfIieYm8TF4hr5LXyOvkDfImeYu8Td4h75L3yPvkA/Ih+Yh8TD4hn5LPyOfkC/Il+Yp8Tb4h35LvyPfkB/Ij+Yn8TH4hv5LfyO/kD/In+Yv8Tf4h/5L/yERUYioJlZRKRiWnUlApqVRUaioNlZZKR6WnMlAZqUxUZioLlZXKRsUojMIpgiIpiqIphmIpjuIpgRIpiZIphVIpjdIpQBkUpEzKomwKUQ7lUh7lUwEVUhEVp7JTOaicVC4qN5WHykvlo/JTBaiCVCGqMFWEKkoVo4pTJaiSVCmqNFWGKkuVo8pTFaiKVCWqMlWFqkpVo6pTNaiaVC2qNlWHqkvVo+pTDaiGVCOqMdWEako1o5pTLaiWVCuqNdWGaku1o9pTHaiOVCeqM9WF6kp1o7pTPaieVC+qN9WH6kv1o/pTA6iB1CBqMDWEGkoNo4ZTI6iR1ChqNDWGGkuNo8ZTE6iJ1CRqMjWFmkpNo6ZTM6iZ1CxqNjWHmkvNo+ZTC6iF1CJqMbWEWkoto5ZTK6iV1CpqNbWGWkuto9ZTG6iN1CZqM7WF2kpto7ZTO6id1C5qN7WH2kvto/ZTB6iD1CHqMHWEOkodo45TJ6iT1CnqNJVAnaHOUueo89QF6iJ1ibpMXaGuUteo69QN6iZ1i7pN3aHuUveo+9QD6iH1iHpMPaGeUs+o59QL6iX1inpNvaHeUu+o99QH6iP1ifpMfaG+Ut+o79QP6if1i/pN/aH+Uv+oRHRiOgmdlE5GJ6dT0CnpVHRqOg2dlk5Hp6cz0BnpTHRmOgudlc5Gx2iMxmmCJmmKpmmGZmmO5mmBFmmJlmmFVmmN1mlAGzSkTdqibRrRDu3SHu3TAR3SER2ns9M56Jx0Ljo3nYfOS+ej89MF6IJ0IbowXYQuSheji9Ml6JJ0Kbo0XYYuS5ejy9MV6Ip0JboyXYWuSlejq9M16Jp0Lbo2XYeuS9ej69MN6IZ0I7ox3YRuSjejm9Mt6JZ0K7o13YZuS7ej29Md6I50J7oz3YXuSneju9M96J50L7o33YfuS/ej+9MD6IH0IHowPYQeSg+jh9Mj6JH0KHr0/GT0WHocPZ6eQE+kJ9GT6Sn0VHoaPZ2eQc+kZ9Gz6Tn0XHoePZ9eQC+kF9GL6SX0UnoZvZxeQa+kV9Gr6TX0WnodvZ7eQG+kN9Gb6S30VnobvZ3eQe+kd9G76T30XnofvZ8+QB+kD9GH6SP0UfoYfZw+QZ+kT9Gn6QT6DH2WPkefpy/QF+lL9GX6Cn2VvkZfp2/QN+lb9G36Dn2Xvkffpx/QD+lH9GP6Cf2UfkY/p1/QL+lX9Gv6Df2Wfke/pz/QH+lP9Gf6C/2V/kZ/p3/QP+lf9G/6D/2X/kcnYhIzSZikTDImOZOCScmkYlIzaZi0TDomPZOBychkYjIzWZisTDYmxmAMzhAMyVAMzTAMy3AMzwiMyEiMzCiMymiMzgDGYCBjMhZjM4hxGJfxGJ8JmJCJmDiTncnB5GRyMbmZPExeJh+TnynAFGQKMYWZIkxRphhTnCnBlGRKMaWZMkxZphxTnqnAVGQqMZWZKkxVphpTnanB1GRqMbWZOkxdph5Tn2nANGQaMY2ZJkxTphnTnGnBtGRaMa2ZNkxbph3TnunAdGQ6MZ2ZLkxXphvTnenB9GR6Mb2ZPkxfph/TnxnADGQGMYOZIcxQZhgznBnBjGRGMaOZMcxYZhwznpnATGQmMZOZKcxUZhoznZnBzGRmMbOZOcxcZh4zn1nALGQWMYuZJcxSZhmznFnBrGRWMauZNcxaZh2zntnAbGQ2MZuZLcxWZhuzndnB7GR2MbuZPcxeZh+znznAHGQOMYeZI8xR5hhznDnBnGROMaeZBOYMc5Y5x5xnLjAXmUvMZeYKc5W5xlxnbjA3mVvMbeYOc5e5x9xnHjAPmUfMY+YJ85R5xjxnXjAvmVfMa+YN85Z5x7xnPjAfmU/MZ+YL85X5xnxnfjA/mV/Mb+YP85f5xyRiE7NJ2KRsMjY5m4JNyaZiU7Np2LRsOjY9m4HNyGZiM7NZ2KxsNjbGYizOEizJUizNMizLcizPCqzISqzMKqzKaqzOAtZgIWuyFmuziHVYl/VYnw3YkI3YOJudzcHmZHOxudk8bF42H5ufLcAWZAuxhdkibFG2GFucLcGWZEuxpdkybFm2HFuercBWZCuxldkqbFW2GludrcHWZGuxtdk6bF22HlufbcA2ZBuxjdkmbFO2GducbcG2ZFuxrdk2bFu2Hdue7cB2ZDuxndkubFe2G9ud7cH2Xd6L7c32YRtb/dj+7AB2IDuIHcwOYYeyw9jh7Ah2JDuKHc2OYcey49jx7AR2IjuJncxOYaey09jp7Ax2JjuLnc3OYeey89j57AJ2IbuIXcwuYZeyy9jl7Ap2JbuKXc2uYdey69j17AZ2I7uJ3cxuYbey29jt7A52J7uL3c3uYfey+9j97AH2IHuIPcweYY+yx9jj7An2JHuKPc0msGfYs+w59jx7gb3IXmIvs1fYq+w19jp7g73J3mJvs3fYu+w99j77gH3IPmIfs0/Yp+wz9jn7gn3JvmJfs2/Yt+w79j37gf3IfmI/s1/Yr+w39jv7g/3J/mJ/s3/Yv+w/NhGXiEvCJeGSccm4FFwKLhWXikvDpeHScem4DFwGLhOXicvCZeGycdk4jMM4giM4iqM4hmO4/xyBEziJkziFUziN0zjAAQ5ykLM4i0Mc4lzO5XzO50Iu5OJcnMvB5eBycbm4PFweLh+XjyvAFeAKcYW4IlwRrhhXjCvBleBKcaW4MlwZrhxXjqvAVeAqcZW4KlwVrhpXjavB1eBqcbW4Olwdrh5Xj2vANeAacY24JlwTrhnXjGvBteBaca24Nlwbrh3XjuvAdeA6cZ24LlwXrhvXjevB9eB6cb24Plwfrh/XjxvADeAGcYO4IdwQbhg3jBvBjeBGcaO4MdwYbhw3jpvATeAmcZO4KdwUbho3nZvBzeRmcbO5Odxcbh43n1vALeAWcYu4JdwSbhm3jFvBreBWcau4Ndwabh23jtvAbeA2cZu4LdwWbhu3jdvB7eB2cbu4Pdwebh+3jzvAHeAOcYe4I9wR7hh3jDvBneBOcae4BC6BO8ud5c5z57mL3EXuMneZu8pd5a5z17mb3E3uNnebu8vd5e5z97mH3EPuMfeYe8o95Z5zz7mX3EvuNfeae8u95d5z77mP3EfuM/eZ+8p95b5z37mf3E/uN/eb+8v95VLxqfk0fFo+HZ+ez8Bn5P+fJniSp3iaZ3iWx3j8f5njeR7wBg95k7d4m0e881/Owefkc/G5+Tx8Xj4fn/+/XIIvyZfiS/Nl+LJ8Mb74/3I5vjxfga/JV+Jr81X4unw1vj5fg6/J1+Jr83X4unw9vj7fgm/Jt+Jb8234tnw7vv1/eRe/mz/Bn+RP8af5m/wt/jv/g3/Jv+J/8r/4fnx/fgQ/kh/Fj+bH8GP5cfz4//IMfiY/i5/Nz+Hn8vP4+f/lFfxKfhW/ml/Dr+XX8ev/yzv4nfwmfg+/hd/Kb+O3/4//M9Mefi+/j9/PH+AP8of4BP4If5Q/xh//v2dN4M/wZ/lz/HX+Bn+Rv8Rf5q/wV/lr/+P/dNzm7/B3+Xv8c/4F/5B/xD/mX/NP+Wf/4//0vebf8G/5d/x7/gP/kf/Nf+a/8F/5b//T/5/23/wf/i//j08kJBaSCEmFZEJyIYWQUkglpBbSCGmFdEJ6IYOQUcgkZBayCFmFbEJMwARcIARSoARaYARW4AReEARRkARZUARV0ARdAIIhQMEULMEWkOAIruAJvhAIoRAJcSG7kEPIKeQScgt5hLxCPiG/UEAoKBQSCgtFhKJCMaG4UEIoKZQSSgtlhLJCOaG8UEGoKFQSKgtVhKpCNaG6UEOoKdQSagt1hLpCPaG+0EBoKDQSGgtNhKZCM6G50EJoKbQSWgtthLZCO6G90EHoKHQSOgtdhK5CN6G70EPoKfQSegt9hL5CP6G/MEAYKAwSBgtDhKHCMGG4MEIYKYwSRgtjhLHCOGG8MEGYKEwSJgtThKnCNGG6MEOYKcwSZgtzhLnCPGG+sEBYKCwSFgtLhKXCMmG5sEJYKawSVgtrhLXCOmG9sEHYKGwSNgtbhK3CNmG7sEPYKewSdgt7hL3CPmG/cEA4KBwSDgtHhKPCMeG4cEI4KZwSTgsJwhnhrHBOOC9cEC4Kl4TLwhXhqnBNuC7cEG4Kt4Tbwh3hrnBPuC88EB4Kj4THwhPhqfBMeC68EF4Kr4TXwhvhrfBOeC98ED4Kn4TPwhfhq/BN+C78EH4Kv4Tfwh/hr/BPSCQmFpOIScVkYnIxhZhSTCWmFtOIacV0Ynoxg5hRzCRmFrOIWcVsYkzERFwkRFKkRFpkRFbkRF4URFGURFlURFXURF0EoiFC0RQt0RaR6Iiu6Im+GIihGIlxMbuYQ8wp5hJzi3nEvGI+Mb9YQCwoFhILi0XEomIxsbhYQiwplhJLi2XEsqIvlhcriBXFSmJlsYpYVawmVhdriDXFWmJtsY5YV6wn1hcbiA3FRmJjsYnYVGwmNhdbiC3FVmJrsY3YVmwntv9/vR8gDhQHiYPFweJQcZg4XBwhjhRHiaPFMeJYcZw4XpwgThQniZPFKeJUcZo4XZwhzhRnibPFOeJccZ44X1wgLhQXiYvFJeJScZm4XFwhrhRXiavFNeJacZ24XtwgbhQ3iZvFLeJWcZu4Xdwh7hR3ibvFPeJecZ+4XzwgHhQPiYfFI+JR8Zh4XDwhnhRPiafFBPGMeFY8J54XL4gXxUviZfGKeFW8Jl4Xb4g3xVvibfGOeFe8J94XH4gPxUfiY/GJ+FR8Jj4XX4gvxVfia/GN+FZ8J74XP4gfxU/iZ/GL+FX8Jn4Xf4g/xV/ib/GP+Ff8JyaSEktJpKRSMim5lEJKKaWSUktppLRSOim9lEHKKGWSMktZpKxSNikmYRIuERIpURItMRIrcRIvCZIoSZIsKZIqaZIuAcmQoGRKlmRLSHIkV/IkXwqkUIqkuJRdyiHllHJJuaU8Ul4pn5RfKiAVlApJhaUiUlGpmFRcKiGVlEpJpaUyUlmpnFReqiBVlCpJlaUqUlWpmlRdqiHVlGpJtaU6Ul2pnlRfaiA1lBpJjaUmUlOpmdRcaiG1lFpJraU2UlupndRe6iB1lDpJnaUuUlepm9Rd6iH1lHpJvaU+Ul+pn9RfGiANlAZJg6Uh0lBpmDRcGiGNlEZJo6Ux0lhpnDRemiBNlCZJk6Up0lRpmjRdmiHNlGZJs6U50lxpnjRfWiAtlBZJi6Ul0lJpmbRcWiGtlFZJq6U10lppnbRe2iBtlDZJm6Ut0lZpm7Rd2iHtlHZJu6U90l5pn7RfOiAdlA5Jh6Uj0lHpmHRcOiGdlE5Jp6UE6Yx0VjonnZcuSBelS9Jl6Yp0VbomXZduSDelW9Jt6Y50V7on3ZceSA+lR9Jj6Yn0VHomPZdeSC+lV9Jr6Y30VnonvZc+SB+lT9Jn6Yv0VfomfZd+SD+lX9Jv6Y/0V/onJZITy0nkpHIyObmcQk4pp5JTy2nktHI6Ob2cQc4oZ5Izy1nkrHI2OSZjMi4TMilTMi0zMitzMi8LsihLsiwrsiprsi4D2ZChbMqWbMtIdmRX9mRfDuRQjuS4nF3OIeeUc8m55TxyXjmfnF8uIBeUC8mF5SJyUbmYXFwuIZeUS8ml5TJyWbmcXF6uIFeUK8mV5SpyVbmaXF2uIdeUa8m15TpyXbmeXF9uIDeUG8mN5SZyU7mZ3FxuIbeUW8mt5TZyW7md3F7uIHeUO8md5S5yV7mb3F3uIfeUe8m95T5yX7mf3F8eIA+UB8mD5SHyUHmYPFweIY+UR8mj5THyWHmcPF6eIE+UJ8mT5SnyVHmaPF2eIc+UZ8mz5TnyXHmePF9eIC+UF8mL5SXyUnmZvFxeIa+UV8mr5TXyWnmdvF7eIG+UN8mb5S3yVnmbvF3eIe+Ud8m75T3yXnmfvF8+IB+UD8mH5SPyUfmYfFw+IZ+UT8mn5QT5jHxWPiefly/IF+VL8mX5inxVviZfl2/IN+Vb8m35jnxXvifflx/ID+VH8mP5ifxUfiY/l1/IL+VX8mv5jfxWfie/lz/IH+VP8mf5i/xV/iZ/l3/IP+Vf8m/5j/xX/icnUhIrSZSkSjIluZJCSamkUlIraZS0SjolvZJByahkUjIrWZSsSjYlpmAKrhAKqVAKrTAKq3AKrwiKqEiKrCiKqmiKrgDFUKBiKpZiK0hxFFfxFF8JlFCJlLiSXcmh5FRyKbmVPEpeJZ+SXymgFFQKKYWVIkpRpZhSXCmhlFRKKaWVMkpZpZxSXqmgVFQqKZWVKkpVpZpSXamh1FRqKbWVOkpdpZ5SX2mgNFQaKY2VJkpTpZnSXGmhtFRaKa2VNkpbpZ3SXumgdFQ6KZ2VLkpXpZvSXemh9FR6Kb2VPkpfpZ/SXxmgDFQGKYOVIcpQZZgyXBmhjFRGKaOVMcpYZZwyXpmgTFQmKZOVKcpUZZoyXZmhzFRmKbOVOcpcZZ4yX1mgLFQWKYuVJcpSZZmyXFmhrFRWKauVNcpaZZ2yXtmgbFQ2KZuVLcpWZZuyXdmh7FR2KbuVPcpeZZ+yXzmgHFQOKYeVI8pR5ZhyXDmhnFROKaeVBOWMclY59//pzUvllfJaeaO8Vd4p75UPykflk/JZ+aJ8Vb4p35Ufyk/ll/Jb+aP8Vf4pidTEahI1qZpMTa6mUFOqqdTUaho1rZpOTa9mUDOqmdTMahY1q5pNjamYiquESqqUSquMyqqcyquCKqqSKquKqqqaqqtANVSomqql2ipSHdVVPdVXAzVUIzWuZldzqDnVXGpuNY+aV82n5lcLqAXVQmphtYhaVC2mFldLqCXVUmpptYxaVi2nllcrqBXVSmpltYpaVa2mVldrqDXVWmpttY5aV62n1lcbqA3VRmpjtYnaVG2mNldbqC3VVmprtY3aVm2ntlc7qB3VTmpntYvaVe2mdld7qD3VXmpvtY/aV+2n9lcHqAPVQepgdYg6VB2mDldHqCPVUepodYw6Vh2njlcnqBPVSepkdYo6VZ2mTldnqDPVWepsdY46V52nzlcXqAvVRepidYm6VF2mLldXqCvVVepqdY26Vl2nrlc3qBvVTepmdYu6Vd2mbld3qDvVXepudY+6V92n7lcPqAfVQ+ph9Yh6VD2mHldPqCfVU+ppNUE9o55Vz6nn1QvqRfWSelm9ol5Vr6nX1RvqTfWWelu9o95V76n31QfqQ/WR+lh9oj5Vn6nP1RfqS/WV+lp9o75V36nv1Q/qR/WT+ln9on5Vv6nf1R/qT/WX+lv9o/5V/6mJtMRaEi2plkxLrqXQUmqptNRaGi2tlk5Lr2XQMmqZtMxaFi2rlk2LaZiGa4RGapRGa4zGapzGa4ImapIma4qmapqma0AzNKiZmqXZGtIczdU8zdcCLdQiLa5l13JoObVcWm4tj5ZXy6fl1wpoBbVCWmGtiFZUK6YV10poJbVSWmmtjFZWK6eV1ypoFbVKWmWtilZVq6ZV12poNbVaWm2tjlZXq6fV1xpoDbVGWmOtidZUa6Y111poLbVWWmutjdZWa6e11zpoHbVOWmeti9ZV66Z113poPbVeWm+tj9ZX66f11wZoA7VB2mBtiDZUG6YN10ZoI7VR2mhtjDZWG6eN1yZoE7VJ2mRtijZVm6ZN12ZoM7VZ2mxtjjZXm6fN1xZoC7VF2mJtibZUW6Yt11ZoK7VV2mptjbZWW6et1zZoG7VN2mZti7ZV26Zt13ZoO7Vd2m5tj7ZX26ft1w5oB7VD2mHtiHZUO6Yd105oJ7VT2mktQTujndXOaee1C9pF7ZJ2WbuiXdWuade1G9pN7ZZ2W7uj3dXuafe1B9pD7ZH2WHuiPdWeac+1F9pL7ZX2WnujvdXeae+1D9pH7ZP2WfuifdW+ad+1H9pP7Zf2W/uj/dX+aYn0xHoSPameTE+up9BT6qn01HoaPa2eTk+vZ9Az6pn0zHoWPaueTY/pmI7rhE7qlE7rjM7qnM7rgi7qki7riq7qmq7rQDd0qJu6pds60h3d1T3d1wM91CM9rmfXc+g59Vx6bj2PnlfPp+fXC+gF9UJ6Yb2IXlQvphfXS+gl9VJ6ab2MXlYvp5fXK+gV9Up6Zb2KXlWvplfXa+g19Vp6bb2OXlevp9fXG+gN9UZ6Y72J3lRvpjfXW+gt9VZ6a72N3lZvp7fXO+gd9U56Z72L3lXvpnfXe+g99V56b72P3lfvp/fXB+gD9UH6YH2IPlQfpg/XR+gj9VH6aH2MPlYfp4/XJ+gT9Un6ZH2KPlWfpk/XZ+gz9Vn6bH2OPlefp8/XF+gL9UX6Yn2JvlRfpi/XV+gr9VX6an2NvlZfp6/XN+gb9U36Zn2LvlXfpm/Xd+g79V36bn2Pvlffp+/XD+gH9UP6Yf2IflQ/ph/XT+gn9VP6aT1BP6Of1c/p5/UL+kX9kn5Zv6Jf1a/p1/Ub+k39ln5bv6Pf1e/p9/UH+kP9kf5Yf6I/1Z/pz/UX+kv9lf5af6O/1d/p7/UP+kf9k/5Z/6J/1b/p3/Uf+k/9l/5b/6P/1f/piUBikAQkBclAcpACpASpQGqQBqQF6UB6kAFkBJlAZpAFZAXZQAxgAAcEIAEFaMAAFnCABwIQgQRkoAAVaEAHABgAAhNYwAYIOMAFHvBBAEIQgTjIDnKAnCAXyA3ygLwgH8gPCoCCoBAoDIqAoqAYKA5KgJKgFCgNyoCyoBwoDyqAiqASqAyqgKqgGqgOaoCaoBaoDeqAuqAeqA8agIagEWgMmoCmoBloDlqAlqAVaA3agLagHWgPOoCOoBPoDLqArqAb6A56gJ6gF+gN+oC+oB/oDwaAgWAQGAyGgKFgGBgORoCRYBQYDcaAsWAcGA8mgIlgEpgMpoCpYBqYDmaAmWAWmA3mgLlgHpgPFoCFYBFYDJaApWAZWA5WgJVgFVgN1oC1YB1YDzaAjWAT2Ay2gK1gG9gOdoCdYBfYDfaAvWAf2A8OgIPgEDgMjoCj4Bg4Dk6Ak+AUOA0SwBlwFpwD58EFcBFcApfBFXAVXAPXwQ1wE9wCt8EdcBfcA/fBA/AQPAKPwRPwFDwDz8EL8BK8Aq/BG/AWvAPvwQfwEXwCn8EX8BV8A9/BD/AT/AK/wR/wF/wDiYzERhIjqZHMSG6kMFIaqYzURhojrZHOSG9kMDIamYzMRhYjq5HNiBmYgRuEQRqUQRuMwRqcwRuCIRqSIRuKoRqaoRvAMAxomIZl2AYyHMM1PMM3AiM0IiNuZDdyGDmNXEZuI4+R18hn5DcKGAWNQkZho4hR1ChmFDdKGCWNUkZpo4xR1ihnlDcqGBWNSkZlo4pR1ahmVDdqGDWNWkZto45R16hn1DcaGA2NRkZjo4nR1GhmNDdaGC2NVkZro43R1mhntDc6GB2NTkZno4vR1ehmdDd6GD2NXkZvo4/R1+hn9DcGGAONQcZgY4gx1BhmDDdGGCONUcZoY4wx1hhnjDcmGBONScZkY4ox1ZhmTDdmGDONWcZsY44x15hnzDcWGAuNRcZiY4mx1FhmLDdWGCuNVcZqY42x1lhnrDc2GBuNTcZmY4ux1dhmbDd2GDuNXcZuY4+x19hn7DcOGAeNQ8Zh44hx1DhmHDdOGCeNU8ZpI8E4Y5w1zhnnjQvGReOScdm4Ylw1rhnXjRvGTeOWcdu4Y9w17hn3jQfGQ+OR8dh4Yjw1nhnPjRfGS+OV8dp4Y7w13hnvjQ/GR+OT8dn4Ynw1vhnfjR/GT+OX8dv4Y/w1/hmJYGKYBCaFyWBymAKmhKlgapgGpoXpYHqYAWaEmWBmmAVmhdlgDGIQhwQkIQVpyEAWcpCHAhShBGWoQBVqUIcAGhBCE1rQhgg60IUe9GEAQxjBOMwOc8CcMBfMDfPAvDAfzA8LwIKwECwMi8CisBgsDkvAkrAULA3LwLKwHCwPK8CKsBKsDKvAqrAarA5rwJqwFqwN68C6sB6sDxvAhrARbAybwKawGWwOW8CWsBVsDdvAtrAdbA87wI6wE+wMu8CusBvsDnvAnrAX7A37wL6wH+wPB8CBcBAcDIfAoXAYHA5HwJFwFBwNx8CxcBwcDyfAiXASnAynwKlwGpwOZ8CZcBacDefAuXAenA8XwIVwEVwMl8ClcBlcDlfAlXAVXA3XwLVwHVwPN8CNcBPcDLfArXAb3A53wJ1wF9wN98C9cB/cDw/Ag/AQPAyPwKPwGDwOT8CT8BQ8DRPgGXgWnoPn4QV4EV6Cl+EVeBVeg9fhDXgT3oK34R14F96D9+ED+BA+go/hE/gUPoPP4Qv4Er6Cr+Eb+Ba+g+/hB/gRfoKf4Rf4FX6D3+EP+BP+gr/hH/gX/oOJzMRmEjOpmcxMbqYwU5qpzNRmGjOtmc5Mb2YwM5qZzMxmFjOrmc2MmZiJm4RJmpRJm4zJmpzJm4IpmpIpm4qpmpqpm8A0TGiapmXaJjId0zU90zcDMzQjM25mN3OYOc1cZm4zj5nXzGfmNwuYBc1CZmGziFnULGYWN0uYJc1SZmmzjFnWLGeWNyuYFc1KZmWzilnVrGZWN2uYNc1aZm2zjlnXrGfWNxuYDc1GZmOzidnUbGY2N1uYLc1WZmuzjdnWbGe2NzuYHc1OZmezi9nV7GZ2N3uYPc1eZm+zj9nX7Gf2NweYA81B5mBziDnUHGYON0eYI81R5mhzjDnWHGeONyeYE81J5mRzijnVnGZON2eYM81Z5mxzjjnXnGfONxeYC81F5mJzibnUXGYuN1eYK81V5mpzjbnWXGeuNzeYG81N5mZzi7nV3GZuN3eYO81d5m5zj7nX3GfuNw+YB81D5mHziHnUPGYeN0+YJ81T5mkzwTxjnjXPmefNC+ZF85J52bxiXjWvmdfNG+ZN85Z527xj3jXvmffNB+ZD85H52HxiPjWfmc/NF+ZL85X52nxjvjXfme/ND+ZH85P52fxifjW/md/NH+ZP85f52/xj/jX/mYmsxFYSK6mVzEpupbBSWqms1FYaK62VzkpvZbAyWpmszFYWK6uVzYpZmIVbhEValEVbjMVanMVbgiVakiVbiqVamqVbwDIsaJmWZdkWshzr/+z/9a0GVgOrkdXYamLlSpIvSXOrudXSamm1tlpbba12Vnurg9XR6mR1srpYXa2uVnerh9XT6mX1tvpYfa1+Vn9rgDXAGmQNsoZYQ6xh1jBrhDXCGmWNssZYY6xx1jhrgjXBmmRNsqZYU6xp1jRrhjXDmmXNsuZYc6x51jxrgbXAWmQtspZYS6xl1jJrhbXCWmWtstZYa6x11jprg7XB2mRtsrZYW6xt1jZrh7XD2mXtsvZYe6x91j7rgHXAOmQdso5YR6xj1jHrhHXCOmWdshKsBOusddY6b523LloXrcvWZeuqddW6bl23blo3rdvWbeuudde6b923HloPrcfWE+up9cx6br2wXlqvrNfWG+ut9c56b32wPlqfrM/WF+ur9c36bv2wflq/rN/WH+uv9c/6/3N/UbN1G9iGDW3TtmzbRrZju7Zn+3Zgh3Zkx+3sdg47p53Lzm3nsfPa+ez8dgG7oF3ILmwXsYvaxezidgm7pF3KLm2Xscva5ezydgW7ol3JrmxXsava1ezqdg27pl3Lrm3Xseva9ez6dgO7od3Ibmw3sZvazezmdgu7pd3Kbm23sdva7ez2dge7o93J7mx3sbva3ezudg+7p93L7m33sfva/ez+9gB7oD3IHmwPsYfaw+zh9gh7pD3KHm2Pscfa4+zx9gR7oj3JnmxPsafa0+zp9gx7pj3Lnm3Psefa8+z59gJ7ob3IXmwvsZfay+zl9gp7pb3KXm2vsdfa6+z19gZ7o73J3mxvsbfa2+zt9g57p73L3m3vsffa++z99gH7oH3IPmwfsY/ax+zj9gn7pH3KPm0n2Gfss/Y5+7x9wb5oX7Iv21fsq/Y1+7p9w75p37Jv23fsu/Y9+779wH5oP7If20/sp/Yz+7n9wn5pv7Jf22/st/Y7+739wf5of7I/21/sr/Y3+7v9w/5p/7J/23/sv/Y/OxFKjJKgpCgZSo5SoJQoFUqN0qC0KB1KjzKgjCgTyoyyoKwoG4ohDOGIQCSiEI0YxCIO8UhAIpKQjBSkIg3pCCADQWQiC9kIIQe5yEM+ClCIIhRH2VEOlBPlQrlRHpQX5UP5UQFUEBVChVERVBQVQ8VRCVQSlUKlURlUFpVD5VEFVBFVQpVRFVQVVUPVUQ1UE9VCtVEdVBfVQ/VRA9QQNUKNURPUFDVDzVEL1BK1Qq1RG9QWtUPtUQfUEXVCnVEX1BV1Q91RD9QT9UK9UR/UF/VD/dEANBANQoPREDQUDUPD0Qg0Eo1Co9EYNBaNQ+PRBDQRTUKT0RQ0FU1D09EMNBPNQrPRHDQXzUPz0QK0EC1Ci9EStBQtQ8vRCrQSrUKr0Rq0Fq1D69EGtBFtQpvRFrQVbUPb0Q60E+1Cu9EetBftQ/vRAXQQHUKH0RF0FB1Dx9EJdBKdQqdRAjqDzqJz6Dy6gC6iS+gyuoKuomvoOrqBbqJb6Da6g+6ie+g+eoAeokfoMXqCnqJn6Dl6gV6iV+g1eoPeonfoPfqAPqJP6DP6gr6ib+g7+oF+ol/oN/qD/qJ/KJGT2EniJHWSOcmdFE5KJ5WT2knjpHXSOemdDE5GJ5OT2cniZHWyOTEHc3CHcEiHcmiHcViHc3hHcERHcmRHcVRHc3QHOIYDHdOxHNtBjuO4juf4TuCETuTEnexODienk8vJ7eRx8jr5nPxOAaegU8gp7BRxijrFnOJOCaekU8op7ZRxyjrlnPJOBaeiU8mp7FRxqjrVnOpODaemU8up7dRx6jr1nPpOA6eh08hp7DRxmjrNnOZOC6el08pp7bRx2jrtnPZOB6ej08np7HRxujrdnO5OD6en08vp7fRx+jr9nP7OAGegMyhRImeIM9QZ5gx3RjgjnVHOaGeMM9YZ54x3JjgTnUnOZGeKM9WZ5kx3ZjgznVnObGeOM9eZ58x3FjgLnUXOYmeJs9RZ5ix3VjgrnVXOameNs9ZZ56x3NjgbnU3OZmeLs9XZ5mx3djg7nV3ObmePs9fZ5+x3DjgHnUPOYeeIc9Q55hx3TjgnnVPOaSfBOeOcdc45550LzkXnknPZueJcda45150bzk3nlnPbuePcde45950HzkPnkfPYeeI8dZ45z50XzkvnlfPaeeO8dd45750Pzkfnk/PZ+eJ8db45350fzk/nl/Pb+eP8df45idzEbhI3qZvMTe6mcFO6qdzUbho3rZvOTe9mcDO6mdzMbhY3q5vNjbmYi7uES7qUS7uMy7qcy7uCK7qSK7uKq7qaq7vANVzomq7l2i5yHdd1Pdd3Azd0IzfuZndzuDndXG5uN4+b183n5ncLuAXdQm5ht4hb1C3mFndLuCXdUm5pt4xb1i3nlncruBXdSm5lt4pb1a3mVndruDXdWm5tt45b163n1ncbuA3dRm5jt4nb1G3mNndbuC3dVm5rt43b1m3ntnc7uB3dTm5nt4vb1e3mdnd7uD3dXm5vt4/b1+3n9ncHuAPdQe5gd4g71B3mDndHuCPdUe5od4w71h3njncnuBPdSe5kd4o71Z3mTndnuDPdWe5sd447153nzncXuAvdRe5id4m71F3mLndXuCvdVe5qd4271l3nrnc3uBvdTe5md4u71d3mbnd3uDvdXe5ud4+7193n7ncPuAfdQ+5h94h71D3mHndPuCfdU+5pN8E94551z7nn3QvuRfeSe9m94l51r7nX3RvuTfeWe9u9495177n33QfuQ/eR+9h94j51n7nP3RfuS/eV+9p9475137nv3Q/uR/eT+9n94n51v7nf3R/uT/eX+9v94/51/7mJvMReEi+pl8xL7qXwUnqpvNReGi+tl85L72XwMnqZvMxeFi+rl82LeZiHe4RHepRHe4zHepzHe4InepIne4qnepqne8AzPOiZnuXZHvIcz/U8z/cCL/QiL+5l93J4Ob1cXm4vj5fXy+fl9wp4Bb1CXmGviFfUK+YV90p4Jb1SXmmvjFfWK+eV9yp4Fb1KXmWvilfVq+ZV92p4Nb1aXm2vjlfXq+fV9xp4Db1GXmOvidfUa+Y191p4Lb1WXmuvjdfWa+e19zp4Hb1OXmevi9fV6+Z193p4Pb1eXm+vj9fX6+f19wZ4A71B3mBviDfUG+YN90Z4I71R3mhvjDfWG+eN9yZ4E71J3mRvijfVm+ZN92Z4M71Z3mxvjjfXm+fN9xZ4C71F3mJvibfUW+Yt91Z4K71V3mpvjbfWW+et9zZ4G71N3mZvi7fV2+Zt93Z4O71d3m5vj7fX2+ft9w54B71D3mHviHfUO+Yd9054J71T3mkvwTvjnfXOeee9C95F75J32bviXfWuede9G95N75Z327vj3fXuefe9B95D75H32HviPfWeec+9F95L75X32nvjvfXeee+9D95H75P32fviffW+ed+9H95P75f32/vj/fX+eYn8xH4SP6mfzE/up/BT+qn81H4aP62fzk/vZ/Az+pn8zH4WP6ufzY/5mI/7hE/6lE/7jM/6nM/7gi/6ki/7iROpvubrPvANH/qmb/m2j3zHd33P9/3AD/3Ij/vZ/Rx+Tj+Xn9vP4+f18/n5/QJ+Qb+QX9gv4hf1i/nF/RJ+Sb+UX9ov45f1y/nl/Qp+Rb+SX9mv4lf1q/nV/Rp+Tb+WX9uv49f16/n1/QZ+Q7+R39hv4jf1m/nN/RZ+S7+V39pv47f12/nt/Q5+R7+T39nv4nf1u/nd/R5+T7+X39vv4/f1+/n9/QH+QH+QP9gf4g/1h/nD/RH+SH+UP9of44/1x/nj/Qn+RH+SP9mf4k/1p/nT/Rn+TH+WP9uf48/15/nz/QX+Qn+Rv9hf4i/1l/nL/RX+Sn+Vv9pf46/11/nr/Q3+Rn+Tv9nf4m/1t/nb/R3+Tn+Xv9vf4+/19/n7/QP+Qf+Qf9g/4h/1j/nH/RP+Sf+Uf9pP8M/4Z/1z/nn/gn/Rv+Rf9q/4V/1r/nX/hn/Tv+Xf9u/4d/17/n3/gf/Qf+Q/9p/4T/1n/nP/hf/Sf+W/9t/4b/13/nv/g//R/+R/9r/4X/1v/nf/h//T/+X/9v/4f/1/fqIgcZAkSBokC5IHKYKUQaogdZAmSBukC9IHGYKMQaYgc5AlyBpkC2IBFuABEZABFdABE7ABF/CBEIiBFMiBEqiBFugBCIwABmZgBXaAAidwAy/wgyAIgyiIB9mDHEHOIFeQO8gT5A3yBfmDAkHBoFBQOCgSFA2KBcWDEkHJoFRQOigTlA3KBeWDCkHFoFJQOagSVA2qBdWDGkHNoFZQO6gT1A3qBfWDBkHDoFHQOGgSNA2aBc2DFkHLoFXQOmgTtA3aBe2DDkHHoFPQOegSdA26Bd2DHkHPoFfQO+gT9A36Bf2DAcHAYFAwOBgSDA2GBcODEcHIYFQwOhgTjA3GBeODCcHEYFIwOZgSTA2mBdODGcHMYFYwO5gTzA3mBfODBcHCYFGwOFgSLA2WBcuDFcHKYFWwOlgTrA3WBeuDDcHGYFOwOdgSbA22BduDHcHOYFewO9gT7A32BfuDA8HB4FBwODgSHA2OBceDE8HJ4FRwOkgIzgRng3PB+eBCcDG4FFwOrgRXg2vB9eBGcDO4FdwO7gR3g3vB/eBB8DB4FDwOngRPg2fB8+BF8DJ4FbwO3gRvg3fB++BD8DH4FHwOvgRfg2/B9+BH8DP4FfwO/gR/g39BojBxmCRMGiYLk4cpwpRhqjB1mCZMG6YL04cZwoxhpjBzmCXMGmYLYyEW4iERkiEV0iETsiEX8qEQiqEUyqESqqEW6iEIjRCGZmiFdohCJ3RDL/TDIAzDKIyH2cMcYc4wV5g7zBPmDfOF+cMCYcGwUFg4LBIWDYuFxcMSYcmwVFg6LBOWDcuF5cMKYcWwUlg5rBJWDauF1cMaYc2wVlg7rBPWDeuF9cMGYcOwUdg4bBI2DZuFzcMWYcuwVdg6bBO2DduF7cMOYcewU9g57BJ2DbuF3cMeYc+wV9g77BP2DfuF/cMB4cBwUDg4HBIODYeFw8MR4chwVDg6HBOODceF48MJ4cRwUjg5nBJODaeF08MZ4cxwVjg7nBPODeeF88MF4cJwUbg4XBIuDZeFy8MV4cpwVbg6XBOuDdeF68MN4cZwU7g53BJuDbeF28Md4c5wV7g73BPuDfeF+8MD4cHwUHg4PBIeDY+Fx8MT4cnwVHg6TAjPhGfDc+H58EJ4MbwUXg6vhFfDa+H18EZ4M7wV3g7vhHfDe+H98EH4MHwUPg6fhE/DZ+Hz8EX4MnwVvg7fhG/Dd+H78EP4MfwUfg6/hF/Db+H38Ef4M/wV/g7/hH/Df2GiKHGUJEoaJYuSRymilFGqKHWUJkobpYvSRxmijFGmKHOUJcoaZYtiERbhERGRERXREROxERfxkRCJkRTJkRKpkRbpEYiMCEZmZEV2hCInciMv8qMgCqMoikfZoxxRzihXlDvKE+WN8kX5owJRwahQVDgqEhWNikXFoxJRyahUVDoqE5WNykXlowpRxahSVDmqElWNqkXVoxpRzahWVDuqE9WN6kX1owZRw6hR1DhqEjWNmkXNoxZRy6hV1DpqE7WN2kXtow5Rx6hT1DnqEnWNukXdox5Rz6hX1DvqE/WN+kX9owHRwGhQNDgaEg2NhkXDoxHRyGhUNDoaE42NxkXjownRxGhSNDmaEk2NpkXToxnRzGhWNDuaE82N5kXzowXRwmhRtDhaEi2NlkXLoxXRymhVtDpaE62N1kXrow3RxmhTtDnaEm2NtkXbox3RzmhXtDvaE+2N9kX7owPRwehQdDg6Eh2NjkXHoxPRyehUdDpKiM5EZ6Nz0fnoQnQxuhRdjq5EV6Nr0fXoRnQzuhXdju5Ed6N70f3oQfQwehQ9jp5ET6Nn0fPoRfQyehW9jt5Eb6N30fvoQ/Qx+hR9jr5EX6Nv0ffoR/Qz+hX9jv5Ef6N/UaJ44niSeNJ4snjyeIp4yniqeOp4mnjaeLp4+niGeMZ4pnjmeJZ41ni2eCyOxfE4ESfjVJyOM3E2zsX5uBAX41JcjitxNa7F9TiIG3EYN+NW3I6juBN3417cjwfxMB7F4/Hs8RzxnPFc8dzxPPG88Xzx/PEC8YLxQvHC8SLxovFi8eLxEvGS8VLx0vEy8bLxcvHy8QrxivFK8crxKvGq8Wrx6vEa8ZrxWvHa8TrxuvF6/xcJ8BSgZbMAAHjDVpvt/mzrtW3NzJfbzbZt27Zt27Zt265zcR4sEUvCGmANsUZYY6wJ1hRrhjXHWmAtsVZYa6wN1hZrh7XHOmAdsU5YZ6wL1hXrhnXHemA9sV5Yb6wP1hfrh/XHBmADsUHYYGwINhQbhg3HRmAjsVHYaGwMNhYbh43HJmATsUnYZGwKNhWbhk3HZmAzsVnYbGwONhebh83HFmALsUXYYmwJthRbhi3HVmArsVXYamwNthZbh63HNmAbsU3YZmwLthXbhm3HdmA7sV3YbmwPthfbh+3HDmAHsUPYYewIdhQ7hh3HTmAnsVPYaewMdhY7h53HLmAXsUvYZewKdhW7hl3HbmA3sVvYbewOdhe7h93HHmAPsUfYY+wJ9hR7hj3HXmAvsVfYa+wN9hZ7h73HPmAfsU/YZ+wL9hX7hn3HfmA/sV/Yb+wP9hf7h8XhyfDkeAo8JR6Pp8JT42nwBDwtng5Pj2fAM+KZ8Mx4Fjwrng3PjufAc+K58Nx4Hjwvng/PjxfA/8ML4oXwwngRvCheDC+Ol8BL4qXw0ngZvCxeDi+PV8Ar4pXwyngVvCpeDa+OYziOEziJUziNMziLcziPC7iIS7iMK7iKa7iOG7iJW7iNO7iLe7iPB3iIRzjAIY7wGF4Dr4nXwmvjdfC6eD28Pp6IJ+EN8IZ4I7wx3gRvijfDm+Mt8JZ4K7w13gZvi7fD2+Md8I54J7wz3gXvinfDu+M98J54L7w33gfvi/fD++MD8IH4IHwwPgQfig/Dh+Mj8JH4KHw0PgYfi4/Dx+MT8In4JHwyPgWfik/Dp+Mz8Jn4LHw2Pgefi8/D5+ML8IX4InwxvgRfii/Dl+Mr8JX4Knw1vgZfi6/D1+Mb8I34JnwzvgXfim/Dt+M78J34Lnw3vgffi+/D9+MH8IP4IfwwfgQ/ih/Dj+Mn8JP4Kfw0fgY/i5/Dz+MX8Iv4JfwyfgW/il/Dr+M38Jv4Lfw2fge/i9/D7+MP8If4I/wx/gR/ij/Dn+Mv8Jf4K/w1/gZ/i7/D3+Mf8I/4J/wz/gX/in/Dv+M/8J/4L/w3/gf/i//D44hkRHIiBZGSiCdSEamJNEQCkZZIR6QnMhAZiUxEZiILkZXIRmQnchA5iVxEbiIPkZfIR+QnChD/EQWJQkRhoghRlChGFCdKECWJUkRpogxRlihHlCcqEBWJSkRlogpRlahGVCcwAicIgiQogiYYgiU4gicEQiQkQiYUQiU0QicMwiQswiYcwiU8wicCIiQiAhCQQESMqEHUJGoRtYk6RF2iHlGfSCSSiAZEQ6IR0ZhoQjQlmhHNiRZES6IV0ZpoQ7Ql2hHtiQ5ER6IT0ZnoQnQluhHdiR5ET6IX0ZvoQ/Ql+hH9iQHEQGIQMZgYQgwlhhHDiRHESGIUMZoYQ4wlxhHjiQnERGISMZmYQkwlphHTiRnETGIWMZuYQ8wl5hHziQXEQmIRsZhYQiwllhHLiRXESmIVsZpYQ6wl1hHriQ3ERmITsZnYQmwlthHbiR3ETmIXsZvYQ+wl9hH7iQPEQeIQcZg4QhwljhHHiRPESeIUcZo4Q5wlzhHniQvEReIScZm4QlwlrhHXiRvETeIWcZu4Q9wl7hH3iQfEQ+IR8Zh4QjwlnhHPiRfES+IV8Zp4Q7wl3hHviQ/ER+IT8Zn4QnwlvhHfiR/ET+IX8Zv4Q/wl/hFxZDIyOZmCTEnGk6nI1GQaMoFMS6Yj05MZyIxkJjIzmYXMSmYjs5M5yJxkLjI3mYfMS+Yj85MFyP/IgmQhsjBZhCxKFiOLkyXIkmQpsjRZhixLliPLkxXIimQlsjJZhaxKViOrkxiJkwRJkhRJkwzJkhzJkwIpkhIpkwqpkhqpkwZpkhZpkw7pkh7pkwEZkhEJSEgiMkbWIGuStcjaZB2yLlmPrE8mkklkA7Ih2YhsTDYhm5LNyOZkC7Il2YpsTbYh25LtyPZkB7Ij2YnsTHYhu5LdyO5kD7In2YvsTfYh+5L9yP7kAHIgOYgcTA4hh5LDyOHkCHIkOYocTY4hx5LjyPHkBHIiOYmcTE4hp5LTyOnkDHImOYucTc4h55LzyPnkAnIhuYhcTC4hl5LLyOXkCnIluYpcTa4h15LryPXkBnIjuYncTG4ht5LbyO3kDnInuYvcTe4h95L7yP3kAfIgeYg8TB4hj5LHyOPkCfIkeYo8TZ4hz5LnyPPkBfIieYm8TF4hr5LXyOvkDfImeYu8Td4h75L3yPvkA/Ih+Yh8TD4hn5LPyOfkC/Il+Yp8Tb4h35LvyPfkB/Ij+Yn8TH4hv5LfyO/kD/In+Yv8Tf4h/5L/yDgqGZWcSkGlpOKpVFRqKg2VQKWl0lHpqQxURioTlZnKQmWlslHZqRxUTioXlZvKQ+Wl8lH5qQLUf1RBqhBVmCpCFaWKUcWpElRJqhRVmipDlaXKUeWpClRFqhJVmapCVaWqUdUpjMIpgiIpiqIphmIpjuIpgRIpiZIphVIpjdIpgzIpi7Iph3Ipj/KpgAqpiAIUpBAVo2pQNalaVG2qDlWXqkfVpxKpJKoB1ZBqRDWmmlBNqWZUc6oF1ZJqRbWm2lBtqXZUe6oD1ZHqRHWmulBdqW5Ud6oH1ZPqRfWm+lB9qX5Uf2oANZAaRA2mhlBDqWHUcGoENZIaRY2mxlBjqXHUeGoCNZGaRE2mplBTqWnUdGoGNZOaRc2m5lBzqXnUfGoBtZBaRC2mllBLqWXUcmoFtZJaRa2m1lBrqXXUemoDtZHaRG2mtlBbqW3UdmoHtZPaRe2m9lB7qX3UfuoAdZA6RB2mjlBHqWPUceoEdZI6RZ2mzlBnqXPUeeoCdZG6RF2mrlBXqWvUdeoGdZO6Rd2m7lB3qXvUfeoB9ZB6RD2mnlBPqWfUc+oF9ZJ6Rb2m3lBvqXfUe+oD9ZH6RH2mvlBfqW/Ud+oH9ZP6Rf2m/lB/qX9UHJ2MTk6noFPS8XQqOjWdhk6g09Lp6PR0BjojnYnOTGehs9LZ6Ox0DjonnYvOTeeh89L56Px0Afo/uiBdiC5MF6GL0sXo4nQJuiRdii5Nl6HL0uXo8nQFuiJdia5MV6Gr0tXo6jRG4zRBkzRF0zRDszRH87RAi7REy7RCq7RG67RBm7RF27RDu7RH+3RAh3REAxrSiI7RNeiadC26Nl2HrkvXo+vTiXQS3YBuSDeiG9NN6KZ0M7o53YJuSbeiW9Nt6LZ0O7o93YHuSHeiO9Nd6K50N7o73YPuSfeie9N96L50P7o/PYAeSA+iB9ND6KH0MHo4PYIeSY+iR9Nj6LH0OHo8PYGeSE+iJ9NT6Kn0NHo6PYOeSc+iZ9Nz6Ln0PHo+vYBeSC+iF9NL6KX0Mno5vYJeSa+iV9Nr6LX0Ono9vYHeSG+iN9Nb6K30Nno7vYPeSe+id9N76L30Pno/fYA+SB+iD9NH6KP0Mfo4fYI+SZ+iT9Nn6LP0Ofo8fYG+SF+iL9NX6Kv0Nfo6fYO+Sd+ib9N36Lv0Pfo+/YB+SD+iH9NP6Kf0M/o5/YJ+Sb+iX9Nv6Lf0O/o9/YH+SH+iP9Nf6K/0N/o7/YP+Sf+if9N/6L/0PzqOScYkZ1IwKZl4JhWTmknDJDBpmXRMeiYDk5HJxGRmsjBZmWxMdiYHk5PJxeRm8jB5mXxMfqYA8x9TkCnEFGaKMEWZYkxxpgRTkinFlGbKMGWZckx5pgJTkanEVGaqMFWZakx1BmNwhmBIhmJohmFYhmN4RmBERmJkRmFURmN0xmBMxmJsxmFcxmN8JmBCJmIAAxnExJgaTE2mFlObqcPUZeox9ZlEJolpwDRkGjGNmSZMU6YZ05xpwbRkWjGtmTZMW6Yd057pwHRkOjGdmS5MV6Yb053pwfRkejG9mT5MX6Yf058ZwAxkBjGDmSHMUGYYM5wZwYxkRjGjmTHMWGYcM56ZwExkJjGTmSnMVGYaM52ZwcxkZjGzmTnMXGYeM59ZwCxkFjGLmSXMUmYZs5xZwaxkVjGrmTXMWmYds57ZwGxkNjGbmS3MVmYbs53ZwexkdjG7mT3MXmYfs585wBxkDjGHmSPMUeYYc5w5wZxkTjGnmTPMWeYcc565wFxkLjGXmSvMVeYac525wdxkbjG3mTvMXeYec595wDxkHjGPmSfMU+YZ85x5wbxkXjGvmTfMW+Yd8575wHxkPjGfmS/MV+Yb8535wfxkfjG/mT/MX+YfE8cmY5OzKdiUbDybik3NpmET2LRsOjY9m4HNyGZiM7NZ2KxsNjY7m4PNyeZic7N52LxsPjY/W4D9jy3IFmILs0XYomwxtjhbgi3JlmJLs2XYsmw5tjxbga3IVmIrs1XYqmw1tjqLsThLsCRLsTTLsCzLsTwrsCIrsTKrsCqrsTprsCZrsTbrsC7rsT4bsCEbsYCFLGJjbA22JluLrc3WYeuy9dj6bCKbxDZgG7KN2MZsE7Yp24xtzrZgW7Kt2NZsG7Yt245tz3ZgO7Kd2M5sF7Yr243tzvZge7K92N5sH7Yv24/tzw5gB7KD2MHsEHYoO4wdzo5gR7Kj2NHsGHYsO44dz05gJ7KT2MnsFHYqO42dzs5gZ7Kz2NnsHHYuO4+dzy5gF7KL2MXsEnYpu4xdzq5gV7Kr2NXsGnYtu45dz25gN7Kb2M3sFnYru43dzu5gd7K72N3sHnYvu4/dzx5gD7KH2MPsEfYoe4w9zp5gT7Kn2NPsGfYse449z15gL7KX2MvsFfYqe429zt5gb7K32NvsHfYue4+9zz5gH7KP2MfsE/Yp+4x9zr5gX7Kv2NfsG/Yt+459z35gP7Kf2M/sF/Yr+439zv5gf7K/2N/sH/Yv+4+N45JxybkUXEounkvFpebScAlcWi4dl57LwGXkMnGZuSxcVi4bl53LweXkcnG5uTxcXi4fl58rwP3HFeQKcYW5IlxRrhhXnCvBleRKcaW5MlxZrhxXnqvAVeQqcZW5KlxVrhpXncM4nCM4kqM4mmM4luM4nhM4kZM4mVM4ldM4nTM4k7M4m3M4l/M4nwu4kIs4wEEOcTGuBleTq8XV5upwdbl6XH0ukUviGnANuUZcY64J15RrxjXnWnAtuVZca64N15Zrx7XnOnAduU5cZ64L15XrxnXnenA9uV5cb64P15frx/XnBnADuUHcYG4IN5Qbxg3nRnAjuVHcaG4MN5Ybx43nJnATuUncZG4KN5Wbxk3nZnAzuVncbG4ON5ebx83nFnALuUXcYm4Jt5Rbxi3nVnAruVXcam4Nt5Zbx63nNnAbuU3cZm4Lt5Xbxm3ndnA7uV3cbm4Pt5fbx+3nDnAHuUPcYe4Id5Q7xh3nTnAnuVPcae4Md5Y7x53nLnAXuUvcZe4Kd5W7xl3nbnA3uVvcbe4Od5e7x93nHnAPuUfcY+4J95R7xj3nXnAvuVfca+4N95Z7x73nPnAfuU/cZ+4L95X7xn3nfnA/uV/cb+4P95f7x8XxyfjkfAo+JR/Pp+JT82n4BD4tn45Pz2fgM/KZ+Mx8Fj4rn43Pzufgc/K5+Nx8Hj4vn4/Pzxfg/+ML8oX4wnwRvihfjC/Ol+BL8qX40nwZvixfji/PV+Ar8pX4ynwVvipfja/OYzzOEzzJUzzNMzzLczzPC7zIS7zMK7zKa7zOG7zJW7zNO7zLe7zPB3zIRzzgIY/4GF+Dr8nX4mvzdfi6fD2+Pp/IJ/EN+IZ8I74x34Rvyjfjm/Mt+JZ8K74134Zvy7fj2/Md+I58J74z34Xvynfju/M9+J58L74334fvy/fj+/MD+IH8IH4wP4Qfyg/jh/Mj+JH8KH40P4Yfy4/jx/MT+In8JH4yP4Wfyk/jp/Mz+Jn8LH42P4efy8/j5/ML+IX8In4xv4Rfyi/jl/Mr+JX8Kn41v4Zfy6/j1/Mb+I38Jn4zv4Xfym/jt/M7+J38Ln43v4ffy+/j9/MH+IP8If4wf4Q/yh/jj/Mn+JP8Kf40f4Y/y5/jz/MX+Iv8Jf4yf4W/yl/jr/M3+Jv8Lf42f4e/y9/j7/MP+If8I/4x/4R/yj/jn/Mv+Jf8K/41/4Z/y7/j3/Mf+I/8J/4z/4X/yn/jv/M/+J/8L/43/4f/y//j44RkQnIhhZBSiBdSCamFNEKCkFZIJ6QXMggZhUxCZiGLkFXIJmQXcgg5hVxCbiGPkFfIJ+QXCgj/CQWFQkJhoYhQVCgmFBdKCCWFUkJpoYxQVignlBcqCBWFSkJloYpQVagmVBcwARcIgRQogRYYgRU4gRcEQRQkQRYUQRU0QRcMwRQswRYcwRU8wRcCIRQiAQhQQEJMqCHUFGoJtYU6Ql2hnlBfSBSShAZCQ6GR0FhoIjQVmgnNhRZCS6GV0FpoI7QV2gnthQ5CR6GT0FnoInQVugndhR5CT6GX0FvoI/QV+gn9hQHCQGGQMFgYIgwVhgnDhRHCSGGUMFoYI4wVxgnjhQnCRGGSMFmYIkwVpgnThRnCTGGWMFuYI8wV5gnzhQXCQmGRsFhYIiwVlgnLhRXCSmGVsFpYI6wV1gnrhQ3CRmGTsFnYImwVtgnbhR3CTmGXsFvYI+wV9gn7hQPCQeGQcFg4IhwVjgnHhRPCSeGUcFo4I5wVzgnnhQvCReGScFm4IlwVrgnXhRvCTeGWcFu4I9wV7gn3hQfCQ+GR8Fh4IjwVngnPhRfCS+GV8Fp4I7wV3gnvhQ/CR+GT8Fn4InwVvgnfhR/CT+GX8Fv4I/wV/glxYjIxuZhCTCnGi6nE1GIaMUFMK6YT04sZxIxiJjGzmEXMKmYTs4s5xJxiLjG3mEfMK+YT84sFxP/EgmIhsbBYRCwqFhOLiyXEkmIpsbRYRiwrlhPLixXEimIlsbJYRawqVhOri5iIi4RIipRIi4zIipzIi4IoipIoi4qoipqoi4ZoipZoi47oip7oi4EYipEIRCgiMSbWEGuKtcTaYh2xrlhPrC8mikliA7Gh2EhsLDYRm4rNxOZiC7Gl2EpsLbYR24rtxPZiB7Gj2EnsLHYRu4rdxO5iD7Gn2EvsLfYR+4r9xP7iAHGgOEgcLA4Rh4rDxOHiCHGkOEocLY4Rx4rjxPHiBHGiOEmcLE4Rp4rTxOniDHGmOEucLc4R54rzxPniAnGhuEhcLC4Rl4rLxOXiCnGluEpcLa4R14rrxPXiBnGjuEncLG4Rt4rbxO3iDnGnuEvcLe4R94r7xP3iAfGgeEg8LB4Rj4rHxOPiCfGkeEo8LZ4Rz4rnxPPiBfGieEm8LF4Rr4rXxOviDfGmeEu8Ld4R74r3xPviA/Gh+Eh8LD4Rn4rPxOfiC/Gl+Ep8Lb4R34rvxPfiB/Gj+En8LH4Rv4rfxO/iD/Gn+Ev8Lf4R/4r/xDgpmZRcSiGllOKlVFJqKY2UIKWV0knppQxSRimTlFnKImWVsknZpRxSTimXlFvKI+WV8kn5pQLSf1JBqZBUWCoiFZWKScWlElJJqZRUWiojlZXKSeWlClJFqZJUWaoiVZWqSdUlTMIlQiIlSqIlRmIlTuIlQRIlSZIlRVIlTdIlQzIlS7IlR3IlT/KlQAqlSAISlJAUk2pINaVaUm2pjlRXqifVlxKlJKmB1FBqJDWWmkhNpWZSc6mF1FJqJbWW2khtpXZSe6mD1FHqJHWWukhdpW5Sd6mH1FPqJfWW+kh9pX5Sf2mANFAaJA2WhkhDpWHScGmENFIaJY2WxkhjpXHSeGmCNFGaJE2WpkhTpWnSdGmGNFOaJc2W5khzpXnSfGmBtFBaJC2WlkhLpWXScmmFtFJaJa2W1khrpXXSemmDtFHaJG2WtkhbpW3SdmmHtFPaJe2W9kh7pX3SfumAdFA6JB2WjkhHpWPScemEdFI6JZ2WzkhnpXPSeemCdFG6JF2WrkhXpWvSdemGdFO6Jd2W7kh3pXvSfemB9FB6JD2WnkhPpWfSc+mF9FJ6Jb2W3khvpXfSe+mD9FH6JH2WvkhfpW/Sd+mH9FP6Jf2W/kh/pX9SnJxMTi6nkFPK8XIqObWcRk6Q08rp5PRyBjmjnEnOLGeRs8rZ5OxyDjmnnEvOLeeR88r55PxyAfk/uaBcSC4sF5GLysXk4nIJuaRcSi4tl5HLyuXk8nIFuaJcSa4sV5GrytXk6jIm4zIhkzIl0zIjszIn87Igi7Iky7Iiq7Im67Ihm7Il27Iju7In+3Igh3IkAxnKSI7JNeSaci25tlxHrivXk+vLiXKS3EBuKDeSG8tN5KZyM7m53EJuKbeSW8tt5LZyO7m93EHuKHeSO8td5K5yN7m73EPuKfeSe8t95L5yP7m/PEAeKA+SB8tD5KHyMHm4PEIeKY+SR8tj5LHyOHm8PEGeKE+SJ8tT5KnyNHm6PEOeKc+SZ8tz5LnyPHm+vEBeKC+SF8tL5KXyMnm5vEJeKa+SV8tr5LXyOnm9vEHeKG+SN8tb5K3yNnm7vEPeKe+Sd8t75L3yPnm/fEA+KB+SD8tH5KPyMfm4fEI+KZ+ST8tn5LPyOfm8fEG+KF+SL8tX5KvyNfm6fEO+Kd+Sb8t35LvyPfm+/EB+KD+SH8tP5KfyM/m5/EJ+Kb+SX8tv5LfyO/m9/EH+KH+SP8tf5K/yN/m7/EP+Kf+Sf8t/5L/yPzlOSaYkV1IoKZV4JZWSWkmjJChplXRKeiWDklHJpGRWsihZlWxKdiWHklPJpeRW8ih5lXxKfqWA8p9SUCmkFFaKKEWVYkpxpYRSUimllFbKKGWVckp5pYJSUamkVFaqKFWVakp1BVNwhVBIhVJohVFYhVN4RVBERVJkRVFURVN0xVBMxVJsxVFcxVN8JVBCJVKAAhWkxJQaSk2lllJbqaPUVeop9ZVEJUlpoDRUGimNlSZKU6WZ0lxpobRUWimtlTZKW6Wd0l7poHRUOimdlS5KV6Wb0l3pofRUeim9lT5KX6Wf0l8ZoAxUBimDlSHKUGWYMlwZoYxURimjlTHKWGWcMl6ZoExUJimTlSnKVGWaMl2ZocxUZimzlTnKXGWeMl9ZoCxUFimLlSXKUmWZslxZoaxUVimrlTXKWmWdsl7ZoGxUNimblS3KVmWbsl3ZoexUdim7lT3KXmWfsl85oBxUDimHlSPKUeWYclw5oZxUTimnlTPKWeWccl65oFxULimXlSvKVeWacl25odxUbim3lTvKXeWecl95oDxUHimPlSfKU+WZ8lx5obxUXimvlTfKW+Wd8l75oHxUPimflS/KV+Wb8l35ofxUfim/lT/KX+WfEqcmU5OrKdSUaryaSk2tplET1LRqOjW9mkHNqGZSM6tZ1KxqNjW7mkPNqeZSc6t51LxqPjW/WkD9Ty2oFlILq0XUomoxtbhaQi2pllJLq2XUsmo5tbxaQa2oVlIrq1XUqmo1tbqKqbhKqKRKqbTKqKzKqbwqqKIqqbKqqKqqqbpqqKZqqbbqqK7qqb4aqKEaqUCFKlJjag21plpLra3WUeuq9dT6aqKapDZQG6qN1MZqE7Wp2kxtrrZQW6qt1NZqG7Wt2k5tr3ZQO6qd1M5qF7Wr2k3trvZQe6q91N5qH7Wv2k/trw5QB6qD1MHqEHWoOkwdro5QR6qj1NHqGHWsOk4dr05QJ6qT1MnqFHWqOk2drs5QZ6qz1NnqHHWuOk+dry5QF6qL1MXqEnWpukxdrq5QV6qr1NXqGnWtuk5dr25QN6qb1M3qFnWruk3dru5Qd6q71N3qHnWvuk/drx5QD6qH1MPqEfWoekw9rp5QT6qn1NPqGfWsek49r15QL6qX1MvqFfWqek29rt5Qb6q31NvqHfWuek+9rz5QH6qP1MfqE/Wp+kx9rr5QX6qv1NfqG/Wt+k59r35QP6qf1M/qF/Wr+k39rv5Qf6q/1N/qH/Wv+k+N05JpybUUWkotXkulpdbSaAlaWi2dll7LoGXUMmmZtSxaVi2bll3LoeXUcmm5tTxaXi2fll8roP2nFdQKaYW1IlpRrZhWXCuhldRKaaW1MlpZrZxWXqugVdQqaZW1KlpVrZpWXcM0XCM0UqM0WmM0VuM0XhM0UZM0WVM0VdM0XTM0U7M0W3M0V/M0Xwu0UIs0oEENaTGthlZTq6XV1upodbV6Wn0tUUvSGmgNtUZaY62J1lRrpjXXWmgttVZaa62N1lZrp7XXOmgdtU5aZ62L1lXrpnXXemg9tV5ab62P1lfrp/XXBmgDtUHaYG2INlQbpg3XRmgjtVHaaG2MNlYbp43XJmgTtUnaZG2KNlWbpk3XZmgztVnabG2ONlebp83XFmgLtUXaYm2JtlRbpi3XVmgrtVXaam2NtlZbp63XNmgbtU3aZm2LtlXbpm3Xdmg7tV3abm2Ptlfbp+3XDmgHtUPaYe2IdlQ7ph3XTmgntVPaae2MdlY7p53XLmgXtUvaZe2KdlW7pl3Xbmg3tVvabe2Odle7p93XHmgPtUfaY+2J9lR7pj3XXmgvtVfaa+2N9lZ7p73XPmgftU/aZ+2L9lX7pn3Xfmg/tV/ab+2P9lf7p8XpyfTkego9pR6vp9JT62n0BD2tnk5Pr2fQM+qZ9Mx6Fj2rnk3PrufQc+q59Nx6Hj2vnk/PrxeIj/s/vYheVC+mF9dL6CX1UnppvYxeVi+nl9cr6BX1SnplvYpeVa+mV9cxHdcJndQpndYZndU5ndcFXdQlXdYVXdU1XdcN3dQt3dYd3dU93dcDPdQjHehQR3pMr6HX1GvptfU6el29nl5fT9ST9AZ6Q72R3lhvojfVm+nN9RZ6S72V3lpvo7fV2+nt9Q56R72T3lnvonfVu+nd9R56T72X3lvvo/fV++n99QH6QH2QPlgfog/Vh+nD9RH6SH2UPlofo4/Vx+nj9Qn6RH2SPlmfok/Vp+nT9Rn6TH2WPlufo8/V5+nz9QX6Qn2Rvlhfoi/Vl+nL9RX6Sn2Vvlpfo6/V1+nr9Q36Rn2Tvlnfom/Vt+nb9R36Tn2Xvlvfo+/V9+n79QP6Qf2Qflg/oh/Vj+nH9RP6Sf2Uflo/o5/Vz+nn9Qv6Rf2Sflm/ol/Vr+nX9Rv6Tf2Wflu/o9/V7+n39Qf6Q/2R/lh/oj/Vn+nP9Rf6S/2V/lp/o7/V3+nv9Q/6R/2T/ln/on/Vv+nf9R/6T/2X/lv/o//V/+lxRjIjuZHCSGnEG6mM1EYaI8FIa6Qz0hsZjIxGJiOzkcXIamQzshs5jJxGLiO3kcfIa+Qz8hsFjP+MgkYho7BRxChqFDOKGyWMkkYpo7RRxihrlDPKGxWMikYlo7JRxahqVDOqG5iBG4RBGpRBG4zBGpzBG4IhGpIhG4qhGpqhG4ZhGpZhG47hGp7hG4ERGpEBDGggI2bUMGoatYzaRh2jrlHPqG8kGklGA6Oh0chobDQxmhrNjOZGC6Ol0cpobbQx2hrtjPZGB6Oj0cnobHQxuhrdjO5GD6On0cvobfQx+hr9jP7GAGOgMcgYbAwxhhrDjOHGCGOkMcoYbYwxxhrjjPHGBGOiMcmYbEwxphrTjOnGDGOmMcuYbcwx5hrzjPnGAmOhschYbCwxlhrLjOXGCmOlscpYbawx1hrrjPXGBmOjscnYbGwxthrbjO3GDmOnscvYbewx9hr7jP3GAeOgccg4bBwxjhrHjOPGCeOkcco4bZwxzhrnjPPGBeOiccm4bFwxrhrXjOvGDeOmccu4bdwx7hr3jPvGA+Oh8ch4bDwxnhrPjOfGC+Ol8cp4bbwx3hrvjPfGB+Oj8cn4bHwxvhrfjO/GD+On8cv4bfwx/hr/jDgzmZncTGGmNOPNVGZqM42ZYKY105npzQxmRjOTmdnMYmY1s5nZzRxmTjOXmdvMY+Y185n5zQLmf2ZBs5BZ2CxiFjWLmcXNEmZJs5RZ2ixjljXLmeXNCmZFs5JZ2axiVjWrmdVNzMRNwiRNyqRNxmRNzuRNwRRNyZRNxVRNzdRNwzRNy7RNx3RNz/TNwAzNyAQmNJEZM2uYNc1aZm2zjlnXrGfWNxPNJLOB2dBsZDY2m5hNzWZmc7OF2dJsZbY225htzXZme7OD2dHsZHY2u5hdzW5md7OH2dPsZfY2+5h9zX5mf3OAOdAcZA42h5hDzWHmcHOEOdIcZY42x5hjzXHmeHOCOdGcZE42p5hTzWnmdHOGOdOcZc4255hzzXnmfHOBudBcZC42l5hLzWXmcnOFudJcZa4215hrzXXmenODudHcZG42t5hbzW3mdnOHudPcZe4295h7zX3mfvOAedA8ZB42j5hHzWPmcfOEedI8ZZ42z5hnzXPmefOCedG8ZF42r5hXzWvmdfOGedO8Zd4275h3zXvmffOB+dB8ZD42n5hPzWfmc/OF+dJ8Zb4235hvzXfme/OD+dH8ZH42v5hfzW/md/OH+dP8Zf42/5h/zX9mnJXMSm6lsFJa8VYqK7WVxkqw0lrprPRWBiujlcnKbGWxslrZrOxWDiunlcvKbeWx8lr5rPxWAes/q6BVyCpsFbGKWsWs4lYJq6RVyiptlbHKWuWs8lYFq6JVyapsVbGqWtWs6hZm4RZhkRZl0RZjsRZn8ZZgiZZkyZZiqZZm6ZZhmZZl2ZZjuZZn+VZghVZkAQtayIpZNayaVi2rtlXHqmvVs+pbiVaS1cBqaDWyGltNrKZWM6u51cJqabWyWlttrLZWO6u91cHqaHWyOltdrK5WN6u71cPqafWyelt9rL5WP6u/NcAaaA2yBltDrKHWMGu4NcIaaY2yRltjrLHWOGu8NcGaaE2yJltTrKnWNGu6NcOaac2yZltzrLnWPGu+tcBaaC2yFltLrKXWMmu5tcJaaa2yVltrrLXWOmu9tcHaaG2yNltbrK3WNmu7tcPaae2ydlt7rL3WPmu/dcA6aB2yDltHrKPWMeu4dcI6aZ2yTltnrLPWOeu8dcG6aF2yLltXrKvWNeu6dcO6ad2yblt3rLvWPeu+9cB6aD2yHltPrKfWM+u59cJ6ab2yXltvrLfWO+u99cH6aH2yPltfrK/WN+u79cP6af2yflt/rL/WPyvOTmYnt1PYKe14O5Wd2k5jJ9hp7XR2ejuDndHOZGe2s9hZ7Wx2djuHndPOZee289h57Xx2fruA/Z9d0C5kF7aL2EXtYnZxu4Rd0i5ll7bL2GXtcnZ5u4Jd0a5kV7ar2FXtanZ1G7Nxm7BJm7Jpm7FZm7N5W7BFW7JlW7FVW7N127BN27Jt27Fd27N9O7BDO7KBDW1kx+wadk27ll3brmPXtevZ9e1EO8luYDe0G9mN7SZ2U7uZ3dxuYbe0W9mt7TZ2W7ud3d7uYHe0O9md7S52V7ub3d3uYfe0e9m97T52X7uf3d8eYA+0B9mD7SH2UHuYPdweYY+0R9mj7TH2WHucPd6eYE+0J9mT7Sn2VHuaPd2eYc+0Z9mz7Tn2XHuePd9eYC+0F9mL7SX2UnuZvdxeYa+0V9mr7TX2Wnudvd7eYG+0N9mb7S32Vnubvd3eYe+0d9m77T32Xnufvd8+YB+0D9mH7SP2UfuYfdw+YZ+0T9mn7TP2Wfucfd6+YF+0L9mX7Sv2Vfuafd2+Yd+0b9m37Tv2Xfuefd9+YD+0H9mP7Sf2U/uZ/dx+Yb+0X9mv7Tf2W/ud/d7+YH+0P9mf7S/2V/ub/d3+Yf+0f9m/7T/2X/ufHeckc5I7KZyUTryTykntpHESnLROOie9k8HJ6GRyMjtZnKxONie7k8PJ6eRycjt5nLxOPie/U8D5zynoFHIKO0Wcok4xp7hTwinplHJKO2Wcsk45p7xTwanoVHIqO1Wcqk41p7qDObhDOKRDObTDOKzDObwjOKIjObKjOKqjObpjOKZjObbjOK7jOb4TOKETOcCBDnJiTg2nplPLqe3Uceo69Zz6TqKT5DRwGjqNnMZOE6ep08xp7rRwWjqtnNZOG6et085p73RwOjqdnM5OF6er083p7vRwejq9nN5OH6ev08/p7wxwBjqDnMHOEGeoM8wZ7oxwRjqjnNHOGGesM84Z70xwJjqTnMnOFGeqM82Z7sxwZjqznNnOHGeuM8+Z7yxwFjqLnMXOEmeps8xZ7qxwVjqrnNXOGmets85Z72xwNjqbnM3OFmers83Z7uxwdjq7nN3OHmevs8/Z7xxwDjqHnMPOEeeoc8w57pxwTjqnnNPOGeesc84571xwLjqXnMvOFeeqc8257txwbjq3nNvOHeeuc8+57zxwHjqPnMfOE+ep88x57rxwXjqvnNfOG+et885573xwPjqfnM/OF+er88357vxwfjq/nN/OH+ev88+Jc5O5yd0Ubko33k3lpnbTuAluWjedm97N4GZ0M7mZ3SxuVjebm93N4eZ0c7m53TxuXjefm98t4P7nFnQLuYXdIm5Rt5hb3C3hlnRLuaXdMm5Zt5xb3q3gVnQruZXdKm5Vt5pb3cVc3CVc0qVc2mVc1uVc3hVc0ZVc2VVc1dVc3TVc07Vc23Vc1/Vc3w3c0I1c4EIXuTG3hlvTreXWduu4dd16bn030U1yG7gN3UZuY7eJ29Rt5jZ3W7gt3VZua7eN29Zt57Z3O7gd3U5uZ7eL29Xt5nZ3e7g93V5ub7eP29ft5/Z3B7gD3UHuYHeIO9Qd5g53R7gj3VHuaHeMO9Yd5453J7gT3UnuZHeKO9Wd5k53Z7gz3VnubHeOO9ed5853F7gL3UXuYneJu9Rd5i53V7gr3VXuaneNu9Zd5653N7gb3U3uZneLu9Xd5m53d7g73V3ubnePu9fd5+53D7gH3UPuYfeIe9Q95h53T7gn3VPuafeMe9Y95553L7gX3UvuZfeKe9W95l53b7g33VvubfeOe9e95953H7gP3UfuY/eJ+9R95j53X7gv3Vfua/eN+9Z95753P7gf3U/uZ/eL+9X95n53f7g/3V/ub/eP+9f958Z5ybzkXgovpRfvpfJSe2m8BC+tl85L72XwMnqZvMxeFi+rl83L7uXwcnq5vNxeHi+vl8/L7xXw/vMKeoW8wl4Rr6hXzCvulfBKeqW80l4Zr6xXzivvVfAqepW8yl4Vr6pXzavuYR7uER7pUR7tMR7rcR7vCZ7oSZ7sKZ7qaZ7uGZ7pWZ7tOZ7reZ7vBV7oRR7woIe8mFfDq+nV8mp7dby6Xj2vvpfoJXkNvIZeI6+x18Rr6jXzmnstvJZeK6+118Zr67Xz2nsdvI5eJ6+z18Xr6nXzuns9vJ5eL6+318fr6/Xz+nsDvIHeIG+wN8Qb6g3zhnsjvJHeKG+0N8Yb643zxnsTvIneJG+yN8Wb6k3zpnszvJneLG+2N8eb683z5nsLvIXeIm+xt8Rb6i3zlnsrvJXeKm+1t8Zb663z1nsbvI3eJm+zt8Xb6m3ztns7vJ3eLm+3t8fb6+3z9nsHvIPeIe+wd8Q76h3zjnsnvJPeKe+0d8Y7653zznsXvIveJe+yd8W76l3zrns3vJveLe+2d8e7693z7nsPvIfeI++x98R76j3znnsvvJfeK++198Z7673z3nsfvI/eJ++z98X76n3zvns/vJ/eL++398f76/3z4vxkfnI/hZ/Sj/dT+an9NH6Cn9ZP56f3M/gZ/Ux+Zj+Ln9XP5mf3c/g5/Vx+bj+Pn9fP5+f3C/j/+QX9Qn5hv4hf1C/mF/dL+CX9Un5pv4xf1i/nl/cr+BX9Sn5lv4pf1a/mV/cxH/cJn/Qpn/YZn/U5n/cFX/QlX/YVX/U1X/cN3/Qt3/Yd3/U93/cDP/QjH/jQR37Mr+HX9Gv5tf06fl2/nl/fT/ST/AZ+Q7+R39hv4jf1m/nN/RZ+S7+V39pv47f12/nt/Q5+R7+T39nv4nf1u/nd/R5+T7+X39vv4/f1+/n9/QH+QH+QP9gf4g/1h/nD/RH+SH+UP9of44/1x/nj/Qn+RH+SP9mf4k/1p/nT/Rn+TH+WP9uf48/15/nz/QX+Qn+Rv9hf4i/1l/nL/RX+Sn+Vv9pf46/11/nr/Q3+Rn+Tv9nf4m/1t/nb/R3+Tn+Xv9vf4+/19/n7/QP+Qf+Qf9g/4h/1j/nH/RP+Sf+Uf9o/45/1z/nn/Qv+Rf+Sf9m/4l/1r/nX/Rv+Tf+Wf9u/49/17/n3/Qf+Q/+R/9h/4j/1n/nP/QT/pf/Kf+2/8d/67/z3/gf/o//J/+x/8b/63/zv/g//p//L/+3/8f/6//y4IFmQPEgRpAzig1RB6iBNkBCkDdIF6YMMQcYgU5A5yBJkDbIF2YMcQc4gV5A7yBPkDfIF+YMCwX9BwaBQUDgoEhQNigXFgxJByaBUUDooE5QNygXlgwpBxaBSUDmoElQNqgXVAyzAAyIgAyqgAyZgAy7gAyEQAymQAyVQAy3QAyMwAyuwAydwAy/wgyAIgygAAQxQEAtqBDWDWkHtoE5QN6gX1A8Sg6SgQdAwaBQ0DpoETYNmQfOgRdAyaBW0DtoEbYN2QfugQ9Ax6BR0DroEXYNuQfegR9Az6BX0DvoEfYN+Qf9gQDAwGBQMDoYEQ4NhwfBgRDAyGBWMDsYEY4NxwfhgQjAxmBRMDqYEU4NpwfRgRjAzmBXMDuYEc4N5wfxgQbAwWBQsDpYES4NlwfJgRbAyWBWsDtYEa4N1wfpgQ7Ax2BRsDrYEW4NtwfZgR7Az2BXsDvYEe4N9wf7gQHAwOBQcDo4ER4NjwfHgRHAyOBWcDs4EZ4NzwfngQnAxuBRcDq4EV4NrwfXgRnAzuBXcDu4Ed4N7wf3gQfAweBQ8Dp4ki4uLC54HL4KXwavgdfAmeBu8C94HH4KPwafgc/Al+Bp8C74HP4Kfwa/gd/An+Bv8C+LCZGHyMEWYMowPU4WpwzRhQpg2TBemDzOEGcNMYeYwS5g1zBZmD3OEOcNcYe4wT5g3zBfmDwuE/4UFw0Jh4bBIWDQsFhYPS4Qlw1Jh6bBMWDYsF5YPK4QVw0ph5bBKWDWsFlYPsRAPiZAMqZAOmZANuZAPhVAMpVAOlVANtVAPjdAMrdAOndANvdAPgzAMoxCEMERhLKwR1gxrhbXDOmHdsF5YP0wMk8IGYcOwUdg4bBI2DZuFzcMWYcuwVdg6bBO2DduF7cMOYcewU9g57BJ2DbuF3cMeYc+wV9g77BP2DfuF/cMB4cBwUDg4HBIODYeFw8MR4chwVDg6HBOODceF48MJ4cRwUjg5nBJODaeF08MZ4cxwVjg7nBPODeeF88MF4cJwUbg4XBIuDZeFy8MV4cpwVbg6XBOuDdeF68MN4cZwU7g53BJuDbeF28Md4c5wV7g73BPuDfeF+8MD4cHwUHg4PBIeDY+Fx8MT4cnwVHg6PBOeDc+F58ML4cXwUng5vBJeDa+F18Mb4c3wVng7vBPeDe+F98MH4cPwUfg4fBI+DZ+Fz8MX4cvwVfg6fBO+Dd+F78MP4cfwU/g5/BJ+Db+F38Mf4c/wV/g7/BP+Df+FcVGyKHmUIkoZxUepotRRmighShuli9JHGaKMUaYoc5Qlyhpli7JHOaKcUa4od5Qnyhvli/JHBaL/ooJRoahwVCQqGhWLikclopJRqah0VCYqG5WLykcVoopRpahyVCWqGlWLqkdYhEdEREZUREdMxEZcxEdCJEZSJEdKpEZapEdGZEZWZEdO5EZe5EdBFEZRBCIYoSgW1YhqRrWi2lGdqG5UL6ofJUZJUYOoYdQoahw1iZpGzaLmUYuoZdQqah21idpG7aL2UYeoY9Qp6hx1ibpG3aLuUY+oZ9Qr6h31ifpG/aL+0YBoYDQoGhwNiYZGw6Lh0YhoZDQqGh2NicZG46Lx0YRoYjQpmhxNiaZG06Lp0YxoZjQrmh3NieZG86L50YJoYbQoWhwtiZZGy6Ll0YpoZbQqWh2tidZG66L10YZoY7Qp2hxtibZG26Lt0Y5oZ7Qr2h3tifZG+6L90YHoYHQoOhwdiY5Gx6Lj0YnoZHQqOh2dic5G56Lz0YXoYnQpuhxdia5G16Lr0Y3oZnQruh3die5G96L70YPoYfQoehw9iZ5Gz6Ln0YvoZfQqeh29id5G76L30YfoY/Qp+hx9ib5G36Lv0Y/oZ/Qr+h39if5G/6I4kAwkBylAShAPUoHUIA1IAGlBOpAeZAAZQSaQGWQBWUE2kB3kADlBLpAb5AF5QT6QHxQA/4GCoBAoDIqAoqAYKA5KgJKgFCgNyoCyoBwoDyqAiqASqAyqgKqgGqgOMIADApCAAjRgAAs4wAMBiEACMlCACjSgAwOYwAI2cIALPOCDAIQgAgBAgEAM1AA1QS1QG9QBdUE9UB8kgiTQADQEjUBj0AQ0Bc1Ac9ACtAStQGvQBrQF7UB70AF0BJ1AZ9AFdAXdQHfQA/QEvUBv0Af0Bf1AfzAADASDwGAwBAwFw8BwMAKMBKPAaDAGjAXjwHgwAUwEk8BkMAVMBdPAdDADzASzwGwwB8wF88B8sAAsBIvAYrAELAXLwHKwAqwEq8BqsAasBevAerABbASbwGawBWwF28B2sAPsBLvAbrAH7AX7wH5wABwEh8BhcAQcBcfAcXACnASnwGlwBpwF58B5cAFcBJfAZXAFXAXXwHVwA9wEt8BtcAfcBffAffAAPASPwGPwBDwFz8Bz8AK8BK/Aa/AGvAXvwHvwAXwEn8Bn8AV8Bd/Ad/AD/AS/wG/wB/wF/0AcTAaTwxQwJYyHqWBqmAYmwLQwHUwPM8CMMBPMDLPArDAbzA5zwJwwF8wN88C8MB/MDwvA/2BBWAgWhkVgUVgMFoclYElYCpaGZWBZWA6WhxVgRVgJVoZVYFVYDVaHGMQhAUlIQRoykIUc5KEARShBGSpQhRrUoQFNaEEbOtCFHvRhAEMYQQAhRDAGa8CasBasDevAurAerA8TYRJsABvCRrAxbAKbwmawOWwBW8JWsDVsA9vCdrA97AA7wk6wM+wCu8JusDvsAXvCXrA37AP7wn6wPxwAB8JBcDAcAofCYXA4HAFHwlFwNBwDx8JxcDycACfCSXAynAKnwmlwOpwBZ8JZcDacA+fCeXA+XAAXwkVwMVwCl8JlcDlcAVfCVXA1XAPXwnVwPdwAN8JNcDPcArfCbXA73AF3wl1wN9wD98J9cD88AA/CQ/AwPAKPwmPwODwBT8JT8DQ8A8/Cc/A8vAAvwkvwMrwCr8Jr8Dq8AW/CW/A2vAPvwnvwPnwAH8JH8DF8Ap/CZ/A5fAFfwlfwNXwD38J38D38AD/CT/Az/AK/wm/wO/wBf8Jf8Df8A//CfzAOJUPJUQqUEsWjVCg1SoMSUFqUDqVHGVBGlAllRllQVpQNZUc5UE6UC+VGeVBelA/lRwXQf6ggKoQKoyKoKCqGiqMSqCQqhUqjMqgsKofKowqoIqqEKqMqqCqqhqojDOGIQCSiEI0YxCIO8UhAIpKQjBSkIg3pyEAmspCNHOQiD/koQCGKEEAQIRRDNVBNVAvVRnVQXVQP1UeJKAk1QA1RI9QYNUFNUTPUHLVALVEr1Bq1QW1RO9QedUAdUSfUGXVBXVE31B31QD1RL9Qb9UF9UT/UHw1AA9EgNBgNQUPRMDQcjUAj0Sg0Go1BY9E4NB5NQBPRJDQZTUFT0TQ0Hc1AM9EsNBvNQXPRPDQfLUAL0SK0GC1BS9EytBytQCvRKrQarUFr0Tq0Hm1AG9EmtBltQVvRNrQd7UA70S60G+1Be9E+tB8dQAfRIXQYHUFH0TF0HJ1AJ9EpdBqdQWfROXQeXUAX0SV0GV1BV9E1dB3dQDfRLXQb3UF30T10Hz1AD9Ej9Bg9QU/RM/QcvUAv0Sv0Gr1Bb9E79B59QB/RJ/QZfUFf0Tf0Hf1AP9Ev9Bv9QX/RPxQXSxZLHksRSxmLj6WKpY6liSXE0sbSxdLHMsQyxjLFMseyxLLGssWyx3LEcsZyxXLH8sTyxvLF8scKxP6LFYwVihWOFYkVjRWLFY+ViJWMlYqVjpWJlY2Vi5WPVYhVjFWKVY5ViVWNVYtVj2ExPEbEyBgVo2NMjI1xMT4mxMSYFJNjSkyNaTE9ZsTMmBWzY07MjXkxPxbEwlgUAzEYQ7FYrEasZqxWrHasTqxurF6sfiwxlhT7H8n2uKA3swAAeGtvbdu2bSvWZGInk7zFV9u23a1t27Zte8s9P86FPAATMYhJmIwpmIppmI4ZmIlZmI05mIt5mI8FGMJCLMJiWC+sN9YH64v9h/XD+mMDsIHYIGwwNgQbig3DhmMjsJHYKGw0NgYbi43DxmMTsInYJGwyNgWbik3DpmMzsJnYLGw2Ngebi83D5mMLsIXYImwxtgRbii3DlmMrsJVYArYKW42twdZi67D12AZsI7YJ24xtwbZi27Dt2A5sJ7YL243twfZi+7D92AHsIHYIO4wdwY5ix7Dj2AnsJHYKO42dwc5i57Dz2AXsInYJu4xdwa5i17Dr2A3sJnYLu43dwe5i97D72APsIfYIe4w9wZ5iz7Dn2AvsJfYKe429wd5i77D32AfsI/YJ+4x9wb5i37Dv2A8sEfuJ/cJ+Y3+wv9g/LAmLw5PhyfEUeEo8FZ4aT4OnxdPh6fEMeEY8Ex6PZ8az4FnxbHh2PAeeE8+F58bz4HnxfHh+vABeEC+EF8aL4EXxYnhxvAReEi+Fl8bL4GXxcnh5vAJeEa+EV8ar4FXxanh1vAZeE6+F18br4HXxenh9vAHeEG+EN8ab4E3xZnhzvAXeEm+Ft8bb4G3xdnh7vAPeEe+Ed8a74F3xbnh3vAfeE8dwHCdwEqdwGmdwFudwHhdwgIs4xCVcxhVcxTVcxw3cxC3cxh3cxT3cxwMc4SEe4TG8F94b74P3xf/D++H98QH4QHwQPhgfgg/Fh+HD8RH4SHwUPhofg4/Fx+Hj8Qn4RHwSPhmfgk/Fp+HT8Rn4THwWPhufg8/F5+Hz8QX4QnwRvhhfgi/Fl+HL8RX4SjwBX4Wvxtfga/F1+Hp8A74R34RvxrfgW/Ft+HZ8B74T34Xvxve0S4yLw/fjB/CD+CH8MH4EP4ofw4/jJ/CT+Cn8NH4GP4ufw8/jF/CL+CX8Mn4Fv4pfw6/jN/Cb+C38Nn4Hv4vfw+/jD/CH+CP8Mf4Ef4o/w5/jL/CX+Cv8Nf4Gf4u/w9/jH/CP+Cf8M/4F/4p/w7/jP/BE/Cf+C/+N/8H/4v/wJDyOSEYkJ1IQKYlURGoiDZGWSEekJzIQGYlMRDyRmchCZCWyEdmJHEROIheRm8hD5CXyEfmJAkRBohBRmChCFCWKEcWJEkRJohRRmihDlCXKEeWJCkRFohJRmahCVCWqEdWJGkRNohZRm6hD1CXqEfWJBkRDohHRmGhCNCWaEc2JFkRLohXRmmhDtCXaEe2JDkRHohPRmehCdCW6Ed2JHkRPAiNwgiBIgiJogiFYgiN4QiAAIRKQkAiZUAiV0AidMAiTsAibcAiX8AifCAhEhERExIheRG+iD9GX+I/oR/QnBhADiUHEYGIIMZQYRgwnRhAjiVHEaGIMMZYYR4wnJhATiUnEZGIKMZWYRkwnZhAziVnEbGIOMZeYR8wnFhALiUXEYmIJsZRYRiwnVhAriQRiFbGaWEOsJdYR64kNxEZiE7GZ2EJsJbYR24kdxE5iF7Gb2EPsJfYR+4kDxEHiEHGYOEIcJY4Rx4kTxEniFHGaOEOcJc4R54kLxEXiEnGZuEJcJa4R14kbxE3iFnGbuEPcJe4R94kHxEPiEfGYeEI8JZ4Rz4kXxEviFfGaeEO8Jd4R74kPxEfiE/GZ+EJ8Jb4R34kfRCLxk/hF/Cb+EH+Jf0QSEUcmI5OTKciUZCoyNZmGTEumI9OTGciMZCYynsxMZiGzktnI7GQOMieZi8xN5iHzkvnI/GQBsiBZiCxMFiGLksXI4mQJsiRZiixNliHLkuXI8mQFsiJZiaxMViGrktXI6mQNsiZZi6xN1iHrkvXI+mQDsiHZiGxMNiGbks3I5mQLsiXZimxNtiHbku3I9mQHsiPZiexMdiG7kt3I7mQPsieJkThJkCRJkTTJkCzJkTwpkIAUSUhKpEwqpEpqpE4apElapE06pEt6pE8GJCJDMiJjZC+yN9mH7Ev+R/Yj+5MDyIHkIHIwOYQcSg4jh5MjyJHkKHI0OYYcS44jx5MTyInkJHIyOYWcSk4jp5MzyJnkLHI2OYecS84j55MLyIXkInIxuYRcSi4jl5MryJVkArmKXE2uIdeS68j15AZyI7mJ3ExuIbeS28jt5A5yJ7mL3E3uIfeS+8j95AHyIHmIPEweIY+Sx8jj5AnyJHmKPE2eIc+S58jz5AXyInmJvExeIa+S18jr5A3yJnmLvE3eIe+S98j75APyIfmIfEw+IZ+Sz8jn5AvyJfmKfE2+Id+S78j35AfyI/mJ/Ex+Ib+S38jv5A8ykfxJ/iJ/k3/Iv+Q/MomMo5JRyakUVEoqFZWaSkOlpdJR6akMVEYqExVPZaayUFmpbFR2KgeVk8pF5abyUHmpfFR+qgBVkCpEFaaKUEWpYlRxqgRVkipFlabKUGWpclR5qgJVkapEVaaqUFWpalR1qgZVk6pF1abqUHWpelR9qgHVkGpENaaaUE2pZlRzqgXVkmpFtabaUG2pdlR7qgPVkepEdaa6UF2pblR3qgfVk8IonCIokqIommIoluIonhIoQIkUpCRKphRKpTRKpwzKpCzKphzKpTzKpwIKUSEVUTGqF9Wb6kP1pf6j+lH9qQHUQGoQNZgaQg2lhlHDqRHUSGoUNZoaQ42lxlHjqQnURGoSNZmaQk2lplHTqRnUTGoWNZuaQ82l5lHzqQXUQmoRtZhaQi2lllHLqRXUSiqBWkWtptZQa6l11HpqA7WR2kRtprZQW6lt1HZqB7WT2kXtpvZQe6l91H7qAHWQOkQdpo5QR6lj1HHqBHWSOkWdps5QZ6lz1HnqAnWRukRdpq5QV6lr1HXqBnWTukXdpu5Qd6l71H3qAfWQekQ9pp5QT6ln1HPqBfWSekW9pt5Qb6l31HvqA/WR+kR9pr5QX6lv1HfqB5VI/aR+Ub+pP9Rf6h+VRMXRyejkdAo6JZ2KTk2nodPS6ej0dAY6I52Jjqcz01norHQ2Ojudg85J56Jz03novHQ+Oj9dgC5IF6IL00XoonQxujhdgi5Jl6JL02XosnQ5ujxdga5IV6Ir01XoqnQ1ujpdg65J16Jr03XounQ9uj7dgG5IN6Ib003opnQzujndgm5Jt6Jb023otnQ7uj3dge5Id6I7013ornQ3ujvdg+5JYzROEzRJUzRNMzRLczRPCzSgRRrSEi3TCq3SGq3TBm3SFm3TDu3SHu3TAY3okI7oGN2L7k33ofvS/9H96P70AHogPYgeTA+hh9LD6OH0CHokPYoeTY+hx9Lj6PH0BHoiPYmeTE+hp9LT6On0DHomPYueTc+h59Lz6Pn0AnohvYheTC+hl9LL6OX0CnolnUCvolfTa+i19Dp6Pb2B3khvojfTW+it9DZ6O72D3knvonfTe+i99D56P32APkgfog/TR+ij9DH6OH2CPkmfok/TZ+iz9Dn6PH2Bvkhfoi/TV+ir9DX6On2Dvknfom/Td+i79D36Pv2Afkg/oh/TT+in9DP6Of2Cfkm/ol/Tb+i39Dv6Pf2B/kh/oj/TX+iv9Df6O/2DTqR/0r/o3/Qf+i/9j06i45hkTHImBZOSScWkZtIwaZl0THomA5ORycTEM5mZLExWJhuTncnB5GRyMbmZPExeJh+TnynAFGQKMYWZIkxRphhTnCnBlGRKMaWZMkxZphxTnqnAVGQqMZWZKkxVphpTnanB1GRqMbWZOkxdph5Tn2nANGQaMY2ZJkxTphnTnGnBtGRaMa2ZNkxbph3TnunAdGQ6MZ2ZLkxXphvTnenB9GQwBmcIhmQohmYYhmU4hmcEBjAiAxmJkRmFURmN0RmDMRmLsRmHcRmP8ZmAQUzIREyM6cX0ZvowfZn/mH5Mf2YAM5AZxAxmhjBDmWHMcGYEM5IZxYxmxjBjmXHMeGYCM5GZxExmpjBTmWnMdGYGM5OZxcxm5jBzmXnMfGYBs5BZxCxmljBLmWXMcmYFs5JJYFYxq5k1zFpmHbOe2cBsZDYxm5ktzFZmG7Od2cHsZHYxu5k9zF5mH7OfOcAcZA4xh5kjzFHmGHOcOcGcZE4xp5kzzFnmHHOeucBcZC4xl5krzFXmGnOducHcZG4xt5k7zF3mHnOfecA8ZB4xj5knzFPmGfOcecG8ZF4xr5k3zFvmHfOe+cB8ZD4xn5kvzFfmG/Od+cEkMj+ZX8xv5g/zl/nHJDFxbDI2OZuCTcmmYlOzadi0bDo2PZuBzchmYuPZzGwWNiubjc3O5mBzsrnY3GweNi+bj83PFmALsoXYwmwRtihbjC3OlmBLsqXY0mwZtixbji3PVmArspXYymwVtipbja3O1mBrsrXY2mwdti5bj63PNmAbso3YxmwTtinbjG3OtmBbsq3Y1mwbti3bjm3PdmA7sp3YzmwXtivbje3O9mB7shiLswRLshRLswzLshzLswILWJGFrMTKrMKqrMbqrMGarMXarMO6rMf6bMAiNmQjNsb2Ynuzfdi+7H9sP7Y/O4AdyA5iB7ND2KHsMHY4O4IdyY5iR7Nj2LHsOHY8O4GdyE5iJ7NT2KnsNHY6O4Odyc5iZ7Nz2LnsPHY+u4BdyC5iF7NL2KXsMnY5u4JdySawq9jV7Bp2LbuOXc9uYDeym9jN7BZ2K7uN3c7uYHeyu9jd7B52L7uP3c8eYA+yh9jD7BH2KHuMPc6eYE+yp9jT7Bn2LHuOPc9eYC+yl9jL7BX2KnuNvc7eYG+yt9jb7B32LnuPvc8+YB+yj9jH7BP2KfuMfc6+YF+yr9jX7Bv2LfuOfc9+YD+yn9jP7Bf2K/uN/c7+YBPZn+wv9jf7h/3L/mOT2DguGZecS8Gl5FJxqbk0XFouHZeey8Bl5DJx8VxmLguXlcvGZedycDm5XFxuLg+Xl8vH5ecKcAW5QlxhrghXlCvGFedKcCW5UlxprgxXlivHlecqcBW5SlxlrgpXlavGVedqcDW5Wlxtrg5Xl6vH1ecacA25RlxjrgnXlGvGNedacC25Vlxrrg3XlmvHtec6cB25TlxnrgvXlevGded6cD05jMM5giM5iqM5hmM5juM5gQOcyEFO4mRO4VRO43TO4EzO4mzO4VzO43wu4BAXchEX43pxvbk+XF8uIT4urj83gBvIDeIGc0O4odwwbjg3ghvJjeJGc2O4sdw4bjw3gZvITeImc1O4qdw0bjo3g5vJzeJmc3O4udw8bj63gFvILeIWc0u4pdwybjm3glvJJXCruNXcGm4tt45bz23gNnKbuM3cFm4rt43bzu3gdnK7uN3cHm4vt4/bzx3gDnKHuMPcEe4od4w7zp3gTnKnuNPcGe4sd447z13gLnKXuMvcFe4qd427zt3gbnK3uNvcHe4ud4+7zz3gHnKPuMfcE+4p94x7zr3gXnKvuNfcG+4t9457z33gPnKfuM/cF+4r9437zv3gErmf3C/uN/eH+8v945K4OD4Zn5xPwafkU/Gp+TR8Wj4dn57PwGfkM/HxfGY+C5+Vz8Zn53PwOflcfG4+D5+Xz8fn5wvwBflCfGG+CF+UL8YX50vwJflSfGm+DF+WL8eX5yvwFflKfGW+Cl+Vr8ZX52vwNflafG2+Dl+Xr8fX5xvwDflGfGO+Cd+Ub8Y351vwLflWfGu+Dd+Wb8e35zvwHflOfGe+C9+V78Z353vwPXmMx3mCJ3mKp3mGZ3mO53mBB7zIQ17iZV7hVV7jdd5IHcdbvM07vMt7vM8HPOJDPuJjfC++N9+H78v/x/fj+/MD+IH8IH4wP4Qfyg/jh/Mj+JH8KH40P4Yfy4/jx/MT+In8JH4yP4Wfyk/jp/Mz+Jn8LH42P4efy8/j5/ML+IX8In4xv4Rfyi/jl/Mr+JV8Ar+KX82v4dfy6/j1/AZ+I7+J38xv4bfy2/jt/A5+J7+L383v4ffy+/j9/AH+IH+IP8wf4Y/yx/jj/An+JH+KP82f4c/y5/jz/AX+In+Jv8xf4a/y1/jr/A3+Jn+Lv83f4e/y9/j7/AP+If+If8w/4Z/yz/jn/Av+Jf+Kf82/4d/y7/j3/Af+I/+J/8x/4b/y3/jv/A8+kf/J/+J/83/4v/w/PomPE5IJyYUUQkohlZBaSCOkFdIJ6YUMQkYhkxAvZBayCFmFbEJ2IYeQU8gl5BbyCHmFfEJ+oYBQUCgkFBaKCEWFYkJxoYRQUigllBbKCGWFckJ5oYJQUagkVBaqCFWFakJ1oYZQU6gl1BbqCHWFekJ9oYHQUGgkNBaaCE2FZkJzoYXQUmgltBbaCG2FdkJ7oYPQUegkdBa6CF2FbkJ3oYfQU8AEXCAEUqAEWmAEVuAEXhAEIIgCFCRBFhRBFTRBFwzBFCzBFhzBFTzBFwIBCaEQCTGhl9Bb6CP0Ff4T+gn9hQHCQGGQMFgYIgwVhgnDhRHCSGGUMFoYI4wVxgnjhQnCRGGSMFmYIkwVpgnThRnCTGGWMFuYI8wV5gnzhQXCQmGRsFhYIiwVlgnLhRXCSiFBWCWsFtYIa4V1wnphg7BR2CRsFrYIW4VtwnZhh7BT2CXsFvYIe4V9wn7hgHBQOCQcFo4IR4VjwnHhhHBSOCWcFs4IZ4VzwnnhgnBRuCRcFq4IV4VrwnXhhnBTuCXcFu4Id4V7wn3hgfBQeCQ8Fp4IT4VnwnPhhfBSeCW8Ft4Ib4V3wnvhg/BR+CR8Fr4IX4Vvwnfhh5Ao/BR+Cb+FP8Jf4Z+QJMSBZCA5SAFSglQgNUgD0oJ0ID3IADKCTCAeZAZZQFaQDWQHOUBOkAvkBnlAXpAP5AcFQEFQCBQGRUBRUAwUByVASVAKlAZlQFlQDpQHFUBFUAlUBlVAVVANVAc1QE1QC9QGdUBdUA/UBw1AQ9AINAZNQFPQDDQHLUBL0Aq0Bm1AW9AOtAcdQEfQCXQGXUBX0A10Bz1AT4ABHBCABBSgAQNYwAEeCAAAEUAgARkoQAUa0IEBTGABGzjABR7wQQAQCEEEYqAX6A36gL7gP9AP9AcDwEAwCAwGQ8BQMAwMByPASDAKjAZjwFgwDowHE8BEMAlMBlPAVDANTAczwEwwC8wGc8BcMA/MBwvAQrAILAZLwFKwDCwHK8BKkABWgdVgDVgL1oH1YAPYCDaBzWAL2Aq2ge1gB9gJdoHdYA/YC/aB/eAAOAgOgcPgCDgKjoHj4AQ4CU6B0+AMOAvOgfPgArgILoHL4Aq4Cq6B6+AGuAlugdvgDrgL7oH74AF4CB6Bx+AJeAqegefgBXgJXoHX4A14C96B9+AD+Ag+gc/gC/gKvoHv4AdIBD/BL/Ab/AF/wT+QBOLEZGJyMYWYUkwlphbTiGnFdGJ6MYOYUcwkxouZxSxiVjGbmF3MIeYUc4m5xTxiXjGfmF8sIBYUC4mFxSJiUbGYWFwsIZYUS4mlxTJiWbGcWF6sIFYUK4mVxSpiVbGaWF2sIdYUa4m1xTpiXbGeWF9sIDYUG4mNxSZiU7GZ2FxsIbYUW4mtxTZiW7Gd2F7sIHYUO4mdxS5iV7Gb2F3sIfYUMREXCZEUKZEWGZEVOZEXBRGIoghFSZRFRVRFTdRFQzRFS7RFR3RFT/TFQETxcXFxYkzsJfYW+4h9xf/EfmJ/cYA4UBwkDhaHiEPFYeJwcYQ4Ukwa+H/UNk4cL04QJ4qTxMniFHGqOE2cLs4QZ4qzxNniHHGuOE+cLy4QF4qLxMXiEnGpuExcLq4QV4oJ4ipxtbhGXCuuE9eLG8SN4iZxs7hF3CpuE7eLO8Sd4i5xt7hH3CvuE/eLB8SD4iHxsHhEPCoeE4+LJ8ST4inxtHhGPCueE8+LF8SL4iXxsnhFvCpeE6+LN8Sb4i3xtnhHvCveE++LD8SH4iPxsfhEfCo+E5+LL8SX4ivxtfhGfCu+E9+LH8SP4ifxs/hF/Cp+E7+LP8RE8af4S/wt/hH/iv/EJDEOJoPJYQqYEqaCqWEamBamg+lhBpgRZoLxMDPMArPCbDA7zAFzwlwwN8wD88J8MD8sAAvCQrAwLAKLwmKwOCwBS8JSsDQsA8vCcrA8rAArwkqwMqwCq8JqsDqsAWvCWrA2rAPrwnqwPmwAG8JGsDFsApvCZrA5bAFbwlawNWwD28J2sD3sADvCTrAz7AK7wm6wO+wBe0IM4pCAJKQgDRnIQg7yUIAAihBCCcpQgSrUoA4NaEIL2tCBLvSgDwOIYAgjGIO9YG/YB/aF/8F+sD8cAAfCQXAwHAKHwmFwOBwBR8JRcDQcA8fCcXA8nAAnwklwMpwCp8JpcDqcAWfCWXA2nAPnwnlwPlwAF8JFcDFcApfCZXA5XAFXwgS4Cq6Ga+BauA6uhxvgRrgJboZb4Fa4DW6HO+BOuAvuhnvgXrgP7ocH4EF4CB6GR+BReAwehyfgSXgKnoZn4Fl4Dp6HF+BFeAlehlfgVXgNXoc34E14C96Gd+BdeA/ehw/gQ/gIPoZP4FP4DD6HL+BL+Aq+hm/gW/gOvocf4Ef4CX6GX+BX+A1+hz9gIvwJf8Hf8A/8C//BJBgnJZOSSymklFIqKbWURkorpZPSSxmkjFImKV7KLGWRskrZpOxSDimnlEvKLeWR8kr5pPxSAamgVEgqLBWRikrFpOJSCamkVEoqLZWRykrlpPJSBamiVEmqLFWRqkrVpOpSDammVEuqLdWR6kr1pPpSA6mh1EhqLDWRmkrNpOZSC6ml1EpqLbWR2krtpPZSB6mj1EnqLHWRukrdpO5SD6mnhEm4REikREm0xEisxEm8JEhAEiUoSZIsKZIqaZIuGZIpWZItOZIreZIvBRKSQimSYlIvqbfUR+or/Sf1k/pLA6SB0iBpsDREGioNk4ZLI6SR0ihptDRGGiuNk8ZLE6SJ0iRpsjRFmipNk6ZLM6SZ0ixptjRHmivNk+ZLC6SF0iJpsbREWiotk5ZLK6SVUoK0SlotrZHWSuuk9dIGaaO0SdosbZG2Stuk7dIOaae0S9ot7ZH2Svuk/dIB6aB0SDosHZGOSsek49IJ6aR0SjotnZHOSuek89IF6aJ0SbosXZGuStek69IN6aZ0S7ot3ZHuSvek+9ID6aH0SHosPZGeSs+k59IL6aX0SnotvZHeSu+k99IH6aP0SfosfZG+St+k79IPKVH6Kf2Sfkt/pL/SPylJipOTycnlFHJKOZWcWk4jp5XTyenlDHJGOZMcL2eWs8hZ5WxydjmHnFPOJeeW88h55XxyfrmAXFAuJBeWi8hF5WJycbmEXFIuJZeWy8hl5XJyebmCXFGuJFeWq8hV5WpydbmGXFOuJdeW68h15XpyfbmB3FBuJDeWm8hN5WZyc7mF3FJuJbeW28ht5XZye7mD3FHuJHeWu8hd5W5yd7mH3FPGZFwmZFKmZFpmZFbmZF4WZCCLMpQlWZYVWZU1WZcN2ZQt2ZYd2ZU92ZcDGcmhHMkxuZfcW+4j95X/k/vJ/eUB8kB5kDxYHiIPlYfJw+UR8kh5lDxaHiOPlcfJ4+UJ8kR5kjxZniJPlafJ0+UZ8kx5ljxbniPPlefJ8+UF8kJ5kbxYXiIvlZfJy+UV8ko5QV4lr5bXyGvldfJ6eYO8Ud4kb5a3yFvlbfJ2eYe8U94l75b3yHvlffJ++YB8UD4kH5aPyEflY/Jx+YR8Uj4ln5bPyGflc/J5+YJ8Ub4kX5avyFfla/J1+YZ8U74l35bvyHfle/J9+YH8UH4kP5afyE/lZ/Jz+YX8Un4lv5bfyG/ld/J7+YP8Uf4kf5a/yF/lb/J3+YecKP+Uf8m/5T/yX/mfnCTHKcmU5EoKJaWSSkmtpFHSKumU9EoGJaOSSYlXMitZlKxKNiW7kkPJqeRScit5lLxKPiW/UkApqBRSCitFlKJKMaW4UkIpqZRSSitllLJKOaW8UkGpqFRSKitVlKpKNaW6UkOpqdRSait1lLpKPaW+0kBpqDRSGitNlKZKM6W50kJpqbRSWittlLZKO6W90kHpqHRSOitdlK5KN6W70kPpqWAKrhAKqVAKrTAKq3AKrwgKUEQFKpIiK4qiKpqiK4ZiKpZiK47iKp7iK4GClFCJlJjSS+mt9FH6Kv8p/ZT+ygBloDJIGawMUYYqw5ThyghlpDJKGa2MUcYq45TxygRlojJJmaxMUaYq05TpygxlpjJLma3MUeYq85T5ygJlobJIWawsUZYqy5TlygplpZKgrFJWK2uUtco6Zb2yQdmobFI2K1uUrco2ZbuyQ9mp7FJ2K3uUvco+Zb9yQDmoHFIOK0eUo8ox5bhyQjmpnFJOK2eUs8o55bxyQbmoXFIuK1eUq8o15bpyQ7mp3FJuK3eUu8o95b7yQHmoPFIeK0+Up8oz5bnyQnmpvFJeK2+Ut8o75b3yQfmofFI+K1+Ur8o35bvyQ0lUfiq/lN/KH+Wv8k9JUuLUZGpyNYWaUk2lplbTqGnVdGp6NYOaUc2kxquZ1SxqVjWbml3NoeZUc6m51TxqXjWfml8toBZUC6mF1SJqUbWYWlwtoZZUS6ml1TJqWbWcWl6toFZUK6mV1SpqVbWaWl2todZUa6m11TpqXbWeWl9toDZUG6mN1SZqU7WZ2lxtobZUW6mt1TZqW7Wd2l7toHZUO6md1S5qV7Wb2l3tofZUMRVXCZVUKZVWGZVVOZVXBRWoogpVSZVVRVVVTdVVQzVVS7VVR3VVT/XVQEVqqEZqTO2l9lb7qH3V/9R+an91gDpQHaQOVoeoQ9Vh6nB1hDpSHaWOVseoY9Vx6nh1gjpRnaROVqeoU9Vp6nR1hjpTnaXOVueoc9V56nx1gbpQXaQuVpeoS9Vl6nJ1hbpSTVBXqavVNepadZ26Xt2gblQ3qZvVLepWdZu6Xd2h7lR3qbvVPepedZ+6Xz2gHlQPqYfVI+pR9Zh6XD2hnlRPqafVM+pZ9Zx6Xr2gXlQvqZfVK+pV9Zp6Xb2h3lRvqbfVO+pd9Z56X32gPlQfqY/VJ+pT9Zn6XH2hvlRfqa/VN+pb9Z36Xv2gflQ/qZ/VL+pX9Zv6Xf2hJqo/1V/qb/WP+lf9pyapcVoyLbmWQkuppdJSa2m0tFo6Lb2WQcuoZdLitcxaFi2rlk3LruXQcmq5tNxaHi2vlk/LrxXQCmqFtMJaEa2oVkwrrpXQSmqltNJaGa2sVk4rr1XQKmqVtMpaFa2qVk2rrtXQamq1tNpaHa2uVk+rrzXQGmqNtMZaE62p1kxrrrXQWmqttNZaG62t1k5rr3XQOmqdtM5aF62r1k3rrvXQemqYhmuERmqURmuMxmqcxmuCBjRRg5qkyZqiqZqm6ZqhmZql2ZqjuZqn+VqgIS3UIi2m9dJ6a320vtp/Wj+tvzZAG6gN0gZrQ7Sh2jBtuDZCG6mN0kZrY7Sx2jhtvDZBm6hN0iZrU7Sp2jRtujZDm6nN0mZrc7S52jxtvrZAW6gt0hZrS7Sl2jJtubZCW6klaKu01doaba22TluvbdA2apu0zdoWbau2Tduu7dB2aru03doeba+2T9uvHdAOaoe0w9oR7ah2TDuundBOaqe009oZ7ax2TjuvXdAuape0y9oV7ap2Tbuu3dBuare029od7a52T7uvPdAeao+0x9oT7an2THuuvdBeaq+019ob7a32TnuvfdA+ap+0z9oX7av2Tfuu/dAStZ/aL+239kf7q/3TkrQ4PZmeXE+hp9RT6an1NHpaPZ2eXs+gZ9Qz6fF6Zj2LnlXPpmfXc+g59Vx6bj2PnlfPp+fXC+gF9UJ6Yb2IXlQvphfXS+gl9VJ6ab2MXlYvp5fXK+gV9Up6Zb2KXlWvplfXa+g19Vp6bb2OXlevp9fXG+gN9UZ6Y72J3lRvpjfXW+gt9VZ6a72N3lZvp7fXO+gd9U56Z72L3lXvpnfXe+g9dUzHdUIndUqndUZndU7ndUEHuqhDXdJlXdFVXdN13dBN3dJt3dHdZJ7u64GO9FCP9JjeS++t99H76v/p/fT++gB9oD5IH6wP0Yfqw/Th+gh9pD5KH62P0cfq4/Tx+gR9oj5Jn6xP0afq0/Tp+gx9pj5Ln63P0efq8/T5+gJ9ob5IX6wv0Zfqy/Tl+gp9pZ6gr9JX62v0tfo6fb2+Qd+ob9I361v0rfo2fbu+Q9+p79J363v0vfo+fb9+QD+oH9IP60f0o/ox/bh+Qj+pn9JP62f0s/o5/bx+Qb+oX9Iv61f0q/o1/bp+Q7+p39Jv63f0u/o9/b7+QH+oP9If60/0p/oz/bn+Qn+pv9Jf62/0t/o7/b3+Qf+of9I/61/0r/o3/bv+Q0/Uf+q/9N/6H/2v/k9P0uOMZEZyI4WR0khlpDbSGGmNdEZ6I4OR0chkxBuZjSxGViObkd3IYeQ0chm5jTxGXiOfkd8oYBQ0ChmFjSJGUaOYUdwoYZQ0ShmljTJGWaOcUd6oYFQ0KhmVjSpGVaOaUd2oYdQ0ahm1jTpGXaOeUd9oYDQ0GhmNjSZGU6OZ0dxoYbQ0WhmtjTZGW6Od0d7oYHQ0OhmdjS5GV6Ob0d3oYfQ0MAM3CIM0KIM2GIM1OIM3BAMYogENyZANxVANzdANwzANy7ANx3ANz/CNwEBGaERGzOhl9Db6GH2N/4x+Rn9jgDHQGGQMNoYYQ41hxnBjhDHSGGWMNsYYY41xxnhjgjHRmGRMNqYYU41pxnRjhjHTmGXMNuYYc415xnxjgbHQWGQsNpYYS41lxnJjhbHSSDBWGauNNcZaY52x3thgbDQ2GZuNLcZWY5ux3dhh7DR2GbuNPcZeY5+x3zhgHDQOGYeNI8ZR45hx3DhhnDROGaeNM8ZZ45xx3rhgXDQuGZeNK8ZV45px3bhh3DRuGbeNO8Zd455x33hgPDQeGY+NJ8ZT45nx3HhhvDReGa+NN8Zb453x3vhgfDQ+GZ+NL8ZX45vx3fhhJBo/jV/Gb+OP8df4ZyQZcWYyM7mZwkxppjJTm2nMtGY6M72ZwcxoZjLjzcxmFjOrmc3MbuYwc5q5zNxmHjOvmc/MbxYwC5qFzMJmEbOoWcwsbpYwS5qlzNJmGbOsWc4sb1YwK5qVzMpmFbOqWc2sbtYwa5q1zNpmHbOuWc+sbzYwG5qNzMZmE7Op2cxsbrYwW5qtzNZmG7Ot2c5sb3YwO5qdzM5mF7Or2c3sbvYwe5qYiZuESZqUSZuMyZqcyZuCCUzRhKZkyqZiqqZm6qZhmqZl2qZjuqZn+mZgIjM0IzNm9jJ7m33MvuZ/Zj+zvznAHGgOMgebQ8yh5jBzuDnCHGmOMkebY8yx5jhzvDnBnGhOMiebU8yp5jRzujnDnGnOMmebc8y55jxzvrnAXGguMhebS8yl5jJzubnCXGkmmKvM1eYac625zlxvbjA3mpvMzeYWc6u5zdxu7jB3mrvM3eYec6+5z9xvHjAPmofMw+YR86h5zDxunjBPmqfM0+YZ86x5zjxvXjAvmpfMy+YV86p5zbxu3jBvmrfM2+Yd8655z7xvPjAfmo/Mx+YT86n5zHxuvjBfmq/M1+Yb8635znxvfjA/mp/Mz+YX86v5zfxu/jATzZ/mL/O3+cf8a/4zk8w4K5mV3EphpbRSWamtNFZaK52V3spgZbQyWfFWZiuLldXKZmW3clg5rVxWbiuPldfKZ+W3ClgFrUJWYauIVdQqZhW3SlglrVJWaauMVdYqZ5W3KlgVrUpWZauKVdWqZlW3alg1rVpWbauOVdeqZ9W3GlgNrUZWY6uJ1dRqZjW3WlgtrVZWa6uN1dZqZ7W3OlgdrU5WZ6uL1dXqZnW3elg9LczCLcIiLcqiLcZiLc7iLcEClmhBS7JkS7FUS7N0y7BMy7Jsy7Fcy7N8K7CQFVqRFbN6Wb2tPlZf6z+rn9XfGmANtAZZg60h1lBrmDXcGmGNtEZZo60x1lhrnDXemmBNtCZZk60p1lRrmjXdmmHNtGZZs6051lxrnjXfWmAttBZZi60l1lJrmbXcWmGttBKsVdZqa4211lpnrbc2WButTdZma4u11dpmbbd2WDutXdZua4+119pn7bcOWAetQ9Zh64h11DpmHbdOWCetU9Zp64x11jpnnbcuWBetS9Zl64p11bpmXbduWDetW9Zt645117pn3bceWA+tR9Zj64n11HpmPbdeWC+tV9Zr64311npnvbc+WB+tT9Zn64v11fpmfbd+WInWT+uX9dv6Y/21/llJVpydzE5up7BT2qns1HYaO62dzk5vZ7Az2pnseDuzncXOamezs9s57Jx2Lju3ncfOa+ez89sF7IJ2IbuwXcQuahezi9sl7JJ2Kbu0XcYua5ezy9sV7Ip2JbuyXcWualezq9s17Jp2Lbu2Xceua9ez69sN7IZ2I7ux3cRuajezm9st7JZ2K7u13cZua7ez29sd7I52J7uz3cXuanezu9s97J42ZuM2YZM2ZdM2Y7M2Z/O2YANbtKEt2bKt2Kqt2bpt2KZt2bbt2K7t2b4d2MgO7ciO2b3s3nYfu6/9n93P7m8PsAfag+zB9hB7qD3MHm6PsEfao+zR9hh7rD3OHm9PsCfak+zJ9hR7qj3Nnm7PsGfas+zZ9hx7rj3Pnm8vsBfai+zF9hJ7qb3MXm6vsFfaCfYqe7W9xl5rr7PX2xvsjfYme7O9xd5qb7O32zvsnfYue7e9x95r77P32wfsg/Yh+7B9xD5qH7OP2yfsk/Yp+7R9xj5rn7PP2xfsi/Yl+7J9xb5qX7Ov2zfsm/Yt+7Z9x75r37Pv2w/sh/Yj+7H9xH5qP7Of2y/sl/Yr+7X9xn5rv7Pf2x/sj/Yn+7P9xf5qf7O/2z/sRPun/cv+bf+x/9r/7CQ7zknmJHdSOCmdVE5qJ42T1knnpHcyOBmdTE68k9nJ4mR1sjnZnRxOTieXk9vJ4+R18jn5nQJOQaeQU9gp4hR1ijnFnRJOSaeUU9op45R1yjnlnQpORaeSU9mp4lR1qjnVnRpOTaeWU9up49R16jn1nQZOQ6eR09hp4jR1mjnNnRZOS6eV09pp47R12jntnQ5OR6eT09np4nR1ujndnR5OTwdzcIdwSIdyaIdxWIdzeEdwgCM60JEc2VEc1dEc3TEc07Ec23Ec1/Ec3wkc5IRO5MScXk5vp4/T1/nP6ef0dwY4A51BzmBniDPUGeYMd0Y4I51RzmhnjDPWGeeMdyY4E51JzmRnijPVmeZMd2Y4M51ZzmxnjjPXmefMdxY4C51FzmJnibPUWeYsd1Y4K50EZ5Wz2lnjrHXWOeudDc5GZ5Oz2dnibHW2OdudHc5OZ5ez29nj7HX2OfudA85B55Bz2DniHHWOOcedE85J55Rz2jnjnHXOOeedC85F55Jz2bniXHWuOdedG85N55Zz27nj3HXuOfedB85D55Hz2HniPHWeOc+dF85L55Xz2nnjvHXeOe+dD85H55Pz2fnifHW+Od+dH06i89P55fx2/jh/nX9OkhPnJnOTuynclG4qN7Wbxk3rpnPTuxncjG4mN97N7GZxs7rZ3OxuDjenm8vN7eZx87r53PxuAbegW8gt7BZxi7rF3OJuCbekW8ot7ZZxy7rl3PJuBbeiW8mt7FZxq7rV3OpuDbemW8ut7dZx67r13PpuA7eh28ht7DZxm7rN3OZuC7el28pt7bZx27rt3PZuB7ej28nt7HZxu7rd3O5uD7eni7m4S7ikS7m0y7isy7m8K7jAFV3oSq7sKq7qaq7uGq7pWq7tOq7req7vBi5yQzdyY24vt7fbx+3r/uf2c/u7A9yB7iB3sDvEHeoOc4e7I9yR7ih3tDvGHeuOc8e7E9yJ7iR3sjvFnepOc6e7M9yZ7ix3tjvHnevOc+e7C9yF7iJ3sbvEXeouc5e7K9yVboK7yl3trnHXuuvc9e4Gd6O7yd3sbnG3utvc7e4Od6e7y93t7nH3uvvc/e4B96B7yD3sHnGPusfc4+4J96R7yj3tnnHPuufc8+4F96J7yb3sXnGvutfc6+4N96Z7y73t3nHvuvfc++4D96H7yH3sPnGfus/c5+4L96X7yn3tvnHfuu/c9+4H96P7yf3sfnG/ut/c7+4PN9H96f5yf7t/3L/uPzfJjfOSecm9FF5KL5WX2kvjpfXSeem9DF5GL5MX72X2snhZvWxedi+Hl9PL5eX28nh5vXxefq+AV9Ar5BX2inhFvWJeca+EV9Ir5ZX2ynhlvXJeea+CV9Gr5FX2qnhVvWpeda+GV9Or5dX26nh1vXpefa+B19Br5DX2mnhNvWZec6+F19Jr5bX22nhtvXZee6+D19Hr5HX2unhdvW5ed6+H19PDPNwjPNKjPNpjPNbjPN4TPOCJHvQkT/YUT/U0T/cMz/Qsz/Ycz/U8z/cCD3mhF3kxr5fX2+vj9fX+8/p5/b0B3kBvkDfYG+IN9YZ5w70R3khvlDfaG+ON9cZ5470J3kRvkjfZm+JN9aZ5070Z3kxvljfbm+PN9eZ5870F3kJvkbfYW+It9ZZ5y70V3kovwVvlrfbWeGu9dd56b4O30dvkbfa2eFu9bd52b4e309vl7fb2eHu9fd5+74B30DvkHfaOeEe9Y95x74R30jvlnfbOeGe9c95574J30bvkXfaueFe9a95174Z307vl3fbueHe9e95974H30HvkPfaeeE+9Z95z74X30nvlvfbeeG+9d95774P30fvkffa+eF+9b95374eX6P30fnm/vT/eX++fl+TF+cn85H4KP6Wfyk/tp/HT+un89H4GP6OfyY/3M/tZ/Kx+Nj+7n8PP6efyc/t5/Lx+Pj+/X8Av6BfyC/tF/KJ+Mb+4X8Iv6ZfyS/tl/LJ+Ob+8X8Gv6FfyK/tV/Kp+Nb+6X8Ov6dfya/t1/Lp+Pb++38Bv6DfyG/tN/KZ+M7+538Jv6bfyW/tt/LZ+O7+938Hv6HfyO/td/K5+N7+738Pv6WM+7hM+6VM+7TM+63M+7ws+8EUf+pIv+4qv+pqv+4Zv+pZv+47v+p7v+4GP/NCP/Jjfy+/t9/H7+v/5/fz+/gB/oD/IH+wP8Yf6w/zh/gh/pD/KH+2P8cf64/zx/gR/oj/Jn+xP8af60/zp/gx/pj/Ln+3P8ef68/z5/gJ/ob/IX+wv8Zf6y/zl/gp/pZ/gr/JX+2v8tf46f72/wd/ob/I3+1v8rf42f7u/w9/p7/J3+3v8vf4+f79/wD/oH/IP+0f8o/4x/7h/wj/pn/JP+2f8s/45/7x/wb/oX/Iv+1f8q/41/7p/w7/p3/Jv+3f8u/49/77/wH/oP/If+0/8p/4z/7n/wn/pv/Jf+2/8t/47/73/wf/of/I/+1/8r/43/7v/w0/0f/q//N/+H/+v/89P8uOCZEHyIEWQMkgVpA7SBGmDdEH6IEOQMcgUxAeZgyxB1iBbkD3IEeQMcgW5gzxB3iBfkD8oEBQMCgWFgyJB0aBYUDwoEZQMSgWlgzJB2aBcUD6oEFQMKgWVgypB1aBaUD2oEdQMagW1gzpB3aBeUD9oEDQMGgWNgyZB06BZ0DxoEbQMWgWtgzZB26Bd0D7oEHQMOgWdgy5B16Bb0D3oEfQMsAAPiIAMqIAOmIANuIAPhAAEYgADKZADJVADLdADIzADK7ADJ3ADL/CDIEBBGERBLOgV9A76BH2D/4J+Qf9gQDAwGBQMDoYEQ4NhwfBgRDAyGBWMDsYEY4NxwfhgQjAxmBRMDqYEU4NpwfRgRjAzmBXMDuYEc4N5wfxgQbAwWBQsDpYES4NlwfJgRbAySAhWBauDNcHaYF2wPtgQbAw2BZuDLcHWYFuwPdgR7Ax2BbuDPcHeYF+wPzgQHAwOBYeDI8HR4FhwPDgRnAxOBaeDM8HZ4FxwPrgQXAwuBZeDK8HV4FpwPbgR3AxuBbeDO8Hd4F5wP3gQPAweBY+DJ8HT4FnwPHgRvAxeBa+DN8Hb4F3wPvgQfAw+BZ+DL8HX4FvwPfgRJAY/g1/B7+BP8Df4FyQFcSgZSo5SoJQoFUqN0qC0KB1KjzKgjCgTikeZURaUFWVD2VEOlBPlQrlRHpQX5UP5UQFUEBVChVERVBQVQ8VRCVQSlUKlURlUFpVD5VEFVBFVQpVRFVQVVUPVUQ1UE9VCtVEdVBfVQ/VRA9QQNUKNURPUFDVDzVEL1BK1Qq1RG9QWtUPtUQfUEXVCnVEX1BV1Q91RD9QTYQhHBCIRhWjEIBZxiEcCAkhEEElIRgpSkYZ0ZCATWchGDnKRh3wUIIRCFKEY6oV6oz6oL/oP9UP90QA0EA1Cg9EQNBQNQ8PRCDQSjUKj0Rg0Fo1D49EENBFNQpPRFDQVTUPT0Qw0E81Cs9EcNBfNQ/PRArQQLUKL0RK0FC1Dy9EKtBIloFVoNVqD1qJ1aD3agDaiTWgz2oK2om1oO9qBdqJdaDfag/aifWg/OoAOokPoMDqCjqJj6Dg6gU6iU+g0OoPOonPoPLqALqJL6DK6gq6ia+g6uoFuolvoNrqD7qJ76D56gB6iR+gxeoKeomfoOXqBXqJX6DV6g96id+g9+oA+ok/oM/qCvqJv6Dv6gRLRT/QL/UZ/0F/0DyWhuDBZmDxMEaYMU4WpwzRh2jBdmD7MEGYMM4XxYeYwS5g1zBZmD3OEOcNcYe4wT5g3zBfmDwuEBcNCYeGwSFg0LBYWD0uEJcNSYemwTFg2LBeWDyuEFcNKYeWwSlg1rBZWD2uENcNaYe2wTlg3rBfWDxuEDcNGYeOwSdg0bBY2D1uELcNWYeuwTdg2bBe2DzuEHcNOYeewS9g17BZ2D3uEPUMsxEMiJEMqpEMmZEMu5EMhBKEYwlAK5VAJ1VAL9dAIzdAK7dAJ3dAL/TAIURiGURgLe4W9wz5h3/C/sF/YPxwQDgwHhYPDIeHQcFg4PBwRjgxHhaPDMeHYcFw4PpwQTgwnhZPDKeHUcFo4PZwRzgxnhbPDOeHccF44P1wQLgwXhYvDJeHScFm4PFwRrgwTwlXh6nBNuDZcF64PN4Qbw03h5nBLuDXcFm4Pd4Q7w13h7nBPuDfcF+4PD4QHw0Ph4fBIeDQ8Fh4PT4Qnw1Ph6fBMeDY8F54PL4QXw0vh5fBKeDW8Fl4Pb4Q3w1vh7fBOeDe8F94PH4QPw0fh4/BJ+DR8Fj4PX4Qvw1fh6/BN+DZ8F74PP4Qfw0/h5/BL+DX8Fn4Pf4SJ4c/wV/g7/BP+Df+FSWFclCxKHqWIUkapotRRmihtlC5KH2WIMkaZovgoc5Qlyhpli7JHOaKcUa4od5Qnyhvli/JHBaKCUaGocFQkKhoVi4pHJaKSUamodFQmKhuVi8pHFaKKUaWoclQlqhpVi6pHNaKaUa2odlQnqhvVi+pHDaKGUaOocdQkaho1i5pHLaKWUauoddQmahu1i9pHHaKOUaeoc9Ql6hp1i7pHPaKeERbhERGRERXREROxERfxkRCBSIxgJEVypERqpEV6ZERmZEV25ERu5EV+FEQoCqMoikW9ot5Rn6hv9F/UL+ofDYgGRoOiwdGQaGg0LBoejYhGRqOi0dGYaGw0LhofTYgmRpOiydGUaGo0LZoezYhmRrOi2dGcaG40L5ofLYgWRouixdGSaGm0LFoerYhWRgnRqmh1tCZaG62L1kcboo3RpmhztCXaGm2Ltkc7op3Rrmh3tCfaG+2L9kcHooPRoehwdCQ6Gh2LjkcnopPRqeh0dCY6G52LzkcXoovRpehydCW6Gl2Lrkc3opvRreh2dCe6G92L7kcPoofRo+hx9CR6Gj2LnkcvopfRq+h19CZ6G72L3kcfoo/Rp+hz9CX6Gn2Lvkc/osToZ/Qr+h39if5G/6KkKC6WLJY8liKWMpYqljqWJpY2li6WPpYhljGWKRYfyxzLEssayxbLHssRyxnLFcsdyxPLG8sXyx8rECsYKxQrHCsSKxorFiseKxErGSsVKx0rEysbKxcrH6sQqxirFKscqxKrGqsWqx6rEasZqxWrHasTqxurF6sfaxBrGGsUaxxrEmsaaxZrHmsRaxlrFWsdaxNrG2sXax/rEOsY6xTrHOsS6xrrFuse6xHrGcNieIyIkTEqRseYGBvjYnxMiIGYGIP/Y+keF4ZqEgAA92bbtm0bX7Ztu45ta2ZOtm3btm3brv2zV/JgQ7Ch2DBsODYCG4mNwkZjY7Cx2DhsPDYBm4hNwiZjU7CpGIbhGIGRGIXRGIOxGIfxmICJmITJmIKpmIbpmIGZmIXZmIO5mIf5WICFWIQBDGIIi7Fp2HRsBjYTm4XNxuZgc7F52HxsAbYQW4QtxpZgS7Fl2HJsBbYSW4WtxtZga7F12HpsA7YR24RtxrZgW7Ft2HZsB7YT24XtxvZge7F92H7sAHYQO4Qdxo5gR7Fj2HHsBHYSO4Wdxs5gZ7Fz2HnsAnYRu4Rdxq5gV7Fr2HXsBnYTu4Xdxu5gd7F72H3sAfYQe4Q9xp5gT7Fn2HPsBfYSe4W9xt5gb7F32HvsA/YR+4R9xr5gX7Fv2HfsB/YT+4X9xv5gf7F/WCI8AU+MJ8GT4snw5HgKPCWeCk+Np8HT4unw9HgGPCOeCc+MZ8Gz4tnw7HgOPCeeC8+N58Hz4vnw/HgBvCBeCC+MF8GL4sXw4ngJvCReCi+Nl8HL4uXw8ngFvCJeCa+MV8Gr4tXw6ngNvCZeC6+N18Hr4vXw+ngDvCHeCG+MN8Gb4s3w5ngL/D+8Jd4Kb423wdvi7fD2eAe8I94J74x3wbvi3fDueA+8J94L7433wfvi/fD++AB8ID4IH4wPwYfiw/Dh+Ah8JD4KH42Pwcfi4/Dx+AR8Ij4Jn4xPwafiGI7jBE7iFE7jDM7iHM7jAi7iEi7jCq7iGq7jBm7iFm7jDu7iHu7jAR7iEQ5wiCM8xqfh0/EZ+Ex8Fj4bn4PPxefh8/EF+EJ8Eb4YX4IvxZfhy/EV+Ep8Fb4aX4Ovxdfh6/EN+EZ8E74Z34Jvxbfh2/Ed+E58F74b34Pvxffh+/ED+EH8EH4YP4IfxY/hx/ET+En8FH4aP4Ofxc/h5/EL+EX8En4Zv4Jfxa/h1/Eb+E38Fn4bv4Pfxe/h9/EH+EP8Ef4Yf4I/xZ/hz/EX+Ev8Ff4af4O/xd/h7/EP+Ef8E/4Z/4J/xb/h3/Ef+E/8F/4b/4P/xf/hiYgEIjGRhEhKJCOSEymIlEQqIjWRhkhLpCPSExmIjEQmIjORhchKZCOyEzmInEQuIjeRh8hL5CPyEwWIgkQhojBRhChKFCOKEyWIkkQpojRRhihLlCPKExWIikQlojJRhahKVCOqEzWImkQtojZRh6hL1CPqEw2IhkQjojHRhGhKNCOaEy2I/4iWRCuiNdGGaEu0I9oTHYiORCeiM9GF6Ep0I7oTPYieRC+iN9GH6Ev0I/oTA4iBxCBiMDGEGEoMI4YTI4iRxChiNDGGGEuMI8YTE4iJxCRiMjGFmEpgBE4QBElQBE0wBEtwBE8IhEhIhEwohEpohE4YhElYhE04hEt4hE8EREhEBCAggYiYmEZMJ2YQM4lZxGxiDjGXmEfMJxYQC4lFxGJiCbGUWEYsJ1YQK4lVxGpiDbGWWEesJzYQG4lNxGZiC7GV2EZsJ3YQO4ldxG5iD7GX2EfsJw4QB4lDxGHiCHGUOEYcJ04QJ4lTxGniDHGWOEecJy4QF4lLxGXiCnGVuEZcJ24QN4lbxG3iDnGXuEfcJx4QD4lHxGPiCfGUeEY8J14QL4lXxGviDfGWeEe8Jz4QH4lPxGfiC/GV+EZ8J34QP4lfxG/iD/GX+EckIhPIxGQSMimZjExOpiBTkqnI1GQaMi2ZjkxPZiAzkpnIzGQWMiuZjcxO5iBzkrnI3GQeMi+Zj8xPFiALkoXIwmQRsihZjCxOliBLkqXI0mQZsixZjixPViArkpXIymQVsipZjaxO1iBrkrXI2mQdsi5Zj6xPNiAbko3IxmQTsinZjGxOtiD/I1uSrcjWZBuyLdmObE92IDuSncjOZBeyK9mN7E72IHuSvcjeZB+yL9mP7E8OIAeSg8jB5BByKDmMHE6OIEeSo8jR5BhyLDmOHE9OICeSk8jJ5BRyKomROEmQJEmRNMmQLMmRPCmQIimRMqmQKqmROmmQJmmRNumQLumRPhmQIRmRgIQkImNyGjmdnEHOJGeRs8k55FxyHjmfXEAuJBeRi8kl5FJyGbmcXEGuJFeRq8k15FpyHbme3EBuJDeRm8kt5FZyG7md3EHuJHeRu8k95F5yH7mfPEAeJA+Rh8kj5FHyGHmcPEGeJE+Rp8kz5FnyHHmevEBeJC+Rl8kr5FXyGnmdvEHeJG+Rt8k75F3yHnmffEA+JB+Rj8kn5FPyGfmcfEG+JF+Rr8k35FvyHfme/EB+JD+Rn8kv5FfyG/md/EH+JH+Rv8k/5F/yH5mISqASU0mopFQyKjmVgkpJpaJSU2motFQ6Kj2VgcpIZaIyU1morFQ2KjuVg8pJ5aJyU3movFQ+Kj9VgCpIFaIKU0WoolQxqjhVgipJlaJKU2WoslQ5qjxVgapIVaIqU1WoqlQ1qjpVg6pJ1aJqU3WoulQ9qj7VgGpINaIaU02oplQzqjnVgvqPakm1olpTbai2VDuqPdWB6kh1ojpTXaiuVDeqO9WD6kn1onpTfai+VD+qPzWAGkgNogZTQ6ih1DBqODWCGkmNokZTY6ix1DhqPDWBmkhNoiZTU6ipFEbhFEGRFEXRFEOxFEfxlECJlETJlEKplEbplEGZlEXZlEO5lEf5VECFVEQBClKIiqlp1HRqBjWTmkXNpuZQc6l51HxqAbWQWkQtppZQS6ll1HJqBbWSWkWtptZQa6l11HpqA7WR2kRtprZQW6lt1HZqB7WT2kXtpvZQe6l91H7qAHWQOkQdpo5QR6lj1HHqBHWSOkWdps5QZ6lz1HnqAnWRukRdpq5QV6lr1HXqBnWTukXdpu5Qd6l71H3qAfWQekQ9pp5QT6ln1HPqBfWSekW9pt5Qb6l31HvqA/WR+kR9pr5QX6lv1HfqB/WT+kX9pv5Qf6l/VCI6gU5MJ6GT0sno5HQKOiWdik5Np6HT0uno9HQGOiOdic5MZ6Gz0tno7HQOOiedi85N56Hz0vno/HQBuiBdiC5MF6GL0sXo4nQJuiRdii5Nl6HL0uXo8nQFuiJdia5MV6Gr0tXo6nQNuiZdi65N16Hr0vXo+nQDuiHdiG5MN6Gb0s3o5nQL+j+6Jd2Kbk23odvS7ej2dAe6I92J7kx3obvS3ejudA+6J92L7k33ofvS/ej+9AB6ID2IHkwPoYfSw+jh9Ah6JD2KHk2PocfS4+jx9AR6Ij2JnkxPoafSGI3TBE3SFE3TDM3SHM3TAi3SEi3TCq3SGq3TBm3SFm3TDu3SHu3TAR3SEQ1oSCM6pqfR0+kZ9Ex6Fj2bnkPPpefR8+kF9EJ6Eb2YXkIvpZfRy+kV9Ep6Fb2aXkOvpdfR6+kN9EZ6E72Z3kJvpbfR2+kd9E56F72b3kPvpffR++kD9EH6EH2YPkIfpY/Rx+kT9En6FH2aPkOfpc/R5+kL9EX6En2ZvkJfpa/R1+kb9E36Fn2bvkPfpe/R9+kH9EP6Ef2YfkI/pZ/Rz+kX9Ev6Ff2afkO/pd/R7+kP9Ef6E/2Z/kJ/pb/R3+kf9E/6F/2b/kP/pf/RiZgEJjGThEnKJGOSMymYlEwqJjWThknLpGPSMxmYjEwmJjOThcnKZGOyMzmYnEwuJjeTh8nL5GPyMwWYgkwhpjBThCnKFGOKMyWYkkwppjRThinLlGPKMxWYikwlpjJThanKVGOqMzWYmkwtpjZTh6nL1GPqMw2YhkwjpjHThGnKNGOaMy2Y/5iWTCumNdOGacu0Y9ozHZiOTCemM9OF6cp0Y7ozPZieTC+mN9OH6cv0Y/ozA5iBzCBmMDOEGcoMY4YzI5iRzChmNDOGGcuMY8YzE5iJzCRmMjOFmcpgDM4QDMlQDM0wDMtwDM8IjMhIjMwojMpojM4YjMlYjM04jMt4jM8ETMhEDGAgg5iYmcZMZ2YwM5lZzGxmDjOXmcfMZxYwC5lFzGJmCbOUWcYsZ1YwK5lVzGpmDbOWWcesZzYwG5lNzGZmC7OV2cZsZ3YwO5ldzG5mD7OX2cfsZw4wB5lDzGHmCHOUOcYcZ04wJ5lTzGnmDHOWOcecZy4wF5lLzGXmCnOVucZcZ24wN5lbzG3mDnOXucfcZx4wD5lHzGPmCfOUecY8Z14wL5lXzGvmDfOWece8Zz4wH5lPzGfmC/OV+cZ8Z34wP5lfzG/mD/OX+cckYhPYxGwSNimbjE3OpmBTsqnY1GwaNi2bjk3PZmAzspnYzGwWNiubjc3O5mBzsrnY3GweNi+bj83PFmALsoXYwmwRtihbjC3OlmBLsqXY0mwZtixbji3PVmArspXYymwVtipbja3O1mBrsrXY2mwdti5bj63PNmAbso3YxmwTtinbjG3OtmD/Y1uyrdjWbBu2LduObc92YDuyndjObBe2K9uN7c72YHuyvdjebB+2L9uP7c8OYAeyg9jB7BB2KDuMHc6OYEeyo9jR7Bh2LDuOHc9OYCeyk9jJ7BR2KouxOEuwJEuxNMuwLMuxPCuwIiuxMquwKquxOmuwJmuxNuuwLuuxPhuwIRuxgIUsYmN2GjudncHOZGexs9k57Fx2HjufXcAuZBexi9kl7FJ2GbucXcGuZFexq9k17Fp2Hbue3cBuZDexm9kt7FZ2G7ud3cHuZHexu9k97F52H7ufPcAeZA+xh9kj7FH2GHucPcGeZE+xp9kz7Fn2HHuevcBeZC+xl9kr7FX2GnudvcHeZG+xt9k77F32HnuffcA+ZB+xj9kn7FP2GfucfcG+ZF+xr9k37Fv2Hfue/cB+ZD+xn9kv7Ff2G/ud/cH+ZH+xv9k/7F/2H5uIS+ASc0m4pFwyLjmXgkvJpeJSc2m4tFw6Lj2XgcvIZeIyc1m4rFw2LjuXg8vJ5eJyc3m4vFw+Lj9XgCvIFeIKc0W4olwxrjhXgivJleJKc2W4slw5rjxXgavIVeIqc1W4qlw1rjpXg6vJ1eJqc3W4ulw9rj7XgGvINeIac024plwzrjnXgvuPa8m14lpzbbi2XDuuPdeB68h14jpzXbiuXDeuO9eD68n14npzfbi+XD+uPzeAG8gN4gZzQ7ih3DBuODeCG8mN4kZzY7ix3DhuPDeBm8hN4iZzU7ipHMbhHMGRHMXRHMOxHMfxnMCJnMTJnMKpnMbpnMGZnMXZnMO5nMf5XMCFXMQBDnKIi7lp3HRuBjeTm8XN5uZwc7l53HxuAbeQW8Qt5pZwS7ll3HJuBbeSW8Wt5tZwa7l13HpuA7eR28Rt5rZwW7lt3HZuB7eT28Xt5vZwe7l93H7uAHeQO8Qd5o5wR7lj3HHuBHeSO8Wd5s5wZ7lz3HnuAneRu8Rd5q5wV7lr3HXuBneTu8Xd5u5wd7l73H3uAfeQe8Q95p5wT7ln3HPuBfeSe8W95t5wb7l33HvuA/eR+8R95r5wX7lv3HfuB/eT+8X95v5wf7l/XCI+gU/MJ+GT8sn45HwKPiWfik/Np+HT8un49HwGPiOfic/MZ+Gz8tn47HwOPiefi8/N5+Hz8vn4/HwBviBfiC/MF+GL8sX44nwJviRfii/Nl+HL8uX48nwFviJfia/MV+Gr8tX46nwNviZfi6/N1+Hr8vX4+nwDviHfiG/MN+Gb8s345nwL/j++Jd+Kb8234dvy7fj2fAe+I9+J78x34bvy3fjufA++J9+L78334fvy/fj+/AB+ID+IH8wP4Yfyw/jh/Ah+JD+KH82P4cfy4/jx/AR+Ij+Jn8xP4afyGI/zBE/yFE/zDM/yHM/zAi/yEi/zCq/yGq/zBm/yFm/zDu/yHu/zAR/yEQ94yCM+5qfx0/kZ/Ex+Fj+bn8PP5efx8/kF/EJ+Eb+YX8Iv5Zfxy/kV/Ep+Fb+aX8Ov5dfx6/kN/EZ+E7+Z38Jv5bfx2/kd/E5+F7+b38Pv5ffx+/kD/EH+EH+YP8If5Y/xx/kT/En+FH+aP8Of5c/x5/kL/EX+En+Zv8Jf5a/x1/kb/E3+Fn+bv8Pf5e/x9/kH/EP+Ef+Yf8I/5Z/xz/kX/Ev+Ff+af8O/5d/x7/kP/Ef+E/+Z/8J/5b/x3/kf/E/+F/+b/8P/5f/xiYQEIbGQREgqJBOSCymElEIqIbWQRkgrpBPSCxmEjEImIbOQRcgqZBOyCzmEnEIuIbeQR8gr5BPyCwWEgkIhobBQRCgqFBOKCyWEkkIpobRQRigrlBPKCxWEikIlobJQRagqVBOqCzWEmkItobZQR6gr1BPqCw2EhkIjobHQRGgqNBOaCy2E/4SWQiuhtdBGaCu0E9oLHYSOQiehs9BF6Cp0E7oLPYSeQi+ht9BH6Cv0E/oLA4SBwiBhsDBEGCoME4YLI4SRwihhtDBGGCuME8YLE4SJwiRhsjBFmCpgAi4QAilQAi0wAitwAi8IgihIgiwogipogi4YgilYgi04git4gi8EQihEAhCggIRYmCZMF2YIM4VZwmxhjjBXmCfMFxYIC4VFwmJhibBUWCYsF1YIK4VVwmphjbBWWCesFzYIG4VNwmZhi7BV2CZsF3YIO4Vdwm5hj7BX2CfsFw4IB4VDwmHhiHBUOCYcF04IJ4VTwmnhjHBWOCecFy4IF4VLwmXhinBVuCZcF24IN4Vbwm3hjnBXuCfcFx4ID4VHwmPhifBUeCY8F14IL4VXwmvhjfBWeCe8Fz4IH4VPwmfhi/BV+CZ8F34IP4Vfwm/hj/BX+CckEhPExGISMamYTEwuphBTiqnE1GIaMa2YTkwvZhAzipnEzGIWMauYTcwu5hBzirnE3GIeMa+YT8wvFhALioXEwmIRsahYTCwulhBLiqXE0mIZsaxYTiwvVhAripXEymIVsapYTawu1hBrirXE2mIdsa5YT6wvNhAbio3ExmITsanYTGwuthD/E1uKrcTWYhuxrdhObC92EDuKncTOYhexq9hN7C72EHuKvcTeYh+xr9hP7C8OEAeKg8TB4hBxqDhMHC6OEEeKo8TR4hhxrDhOHC9OECeKk8TJ4hRxqoiJuEiIpEiJtMiIrMiJvCiIoiiJsqiIqqiJumiIpmiJtuiIruiJvhiIoRiJQIQiEmNxmjhdnCHOFGeJs8U54lxxnjhfXCAuFBeJi8Ul4lJxmbhcXCGuFFeJq8U14lpxnbhe3CBuFDeJm8Ut4lZxm7hd3CHuFHeJu8U94l5xn7hfPCAeFA+Jh8Uj4lHxmHhcPCGeFE+Jp8Uz4lnxnHhevCBeFC+Jl8Ur4lXxmnhdvCHeFG+Jt8U74l3xnnhffCA+FB+Jj8Un4lPxmfhcfCG+FF+Jr8U34lvxnfhe/CB+FD+Jn8Uv4lfxm/hd/CH+FH+Jv8U/4l/xn5hISpASS0mkpFIyKbmUQkoppZJSS2mktFI6Kb2UQcooZZIyS1mkrFI2KbuUQ8op5ZJyS3mkvFI+Kb9UQCooFZIKS0WkolIxqbhUQioplZJKS2WkslI5qbxUQaooVZIqS1WkqlI1qbpUQ6op1ZJqS3WkulI9qb7UQGooNZIaS02kplIzqbnUQvpPaim1klpLbaS2UjupvdRB6ih1kjpLXaSuUjepu9RD6in1knpLfaS+Uj+pvzRAGigNkgZLQ6Sh0jBpuDRCGimNkkZLY6Sx0jhpvDRBmihNkiZLU6SpEibhEiGREiXREiOxEifxkiCJkiTJkiKpkibpkiGZkiXZkiO5kif5UiCFUiQBCUpIiqVp0nRphjRTmiXNluZIc6V50nxpgbRQWiQtlpZIS6Vl0nJphbRSWiWtltZIa6V10nppg7RR2iRtlrZIW6Vt0nZph7RT2iXtlvZIe6V90n7pgHRQOiQdlo5IR6Vj0nHphHRSOiWdls5IZ6Vz0nnpgnRRuiRdlq5IV6Vr0nXphnRTuiXdlu5Id6V70n3pgfRQeiQ9lp5IT6Vn0nPphfRSeiW9lt5Ib6V30nvpg/RR+iR9lr5IX6Vv0nfph/RT+iX9lv5If6V/UiI5QU4sJ5GTysnk5HIKOaWcSk4tp5HTyunk9HIGOaOcSc4sZ5Gzytnk7HIOOaecS84t55Hzyvnk/HIBuaBcSC4sF5GLysXk4nIJuaRcSi4tl5HLyuXk8nIFuaJcSa4sV5GrytXk6nINuaZcS64t15HryvXk+nIDuaHcSG4sN5Gbys3k5nIL+T+5pdxKbi23kdvK7eT2cge5o9xJ7ix3kbvK3eTucg+5p9xL7i33kfvK/eT+8gB5oDxIHiwPkYfKw+Th8gh5pDxKHi2PkcfK4+Tx8gR5ojxJnixPkafKmIzLhEzKlEzLjMzKnMzLgizKkizLiqzKmqzLhmzKlmzLjuzKnuzLgRzKkQxkKCM5lqfJ0+UZ8kx5ljxbniPPlefJ8+UF8kJ5kbxYXiIvlZfJy+UV8kp5lbxaXiOvldfJ6+UN8kZ5k7xZ3iJvlbfJ2+Ud8k55l7xb3iPvlffJ++UD8kH5kHxYPiIflY/Jx+UT8kn5lHxaPiOflc/J5+UL8kX5knxZviJfla/J1+Ub8k35lnxbviPfle/J9+UH8kP5kfxYfiI/lZ/Jz+UX8kv5lfxafiO/ld/J7+UP8kf5k/xZ/iJ/lb/J3+Uf8k/5l/xb/iP/lf/JiZQEJbGSREmqJFOSKymUlEoqJbWSRkmrpFPSKxmUjEomJbOSRcmqZFOyKzmUnEouJbeSR8mr5FPyKwWUgkohpbBSRCmqFFOKKyWUkkoppbRSRimrlFPKKxWUikolpbJSRamqVFOqKzWUmkotpbZSR6mr1FPqKw2UhkojpbHSRGmqNFOaKy2U/5SWSiultdJGaau0U9orHZSOSiels9JF6ap0U7orPZSeSi+lt9JH6av0U/orA5SByiBlsDJEGaoMU4YrI5SRyihltDJGGauMU8YrE5SJyiRlsjJFmapgCq4QCqlQCq0wCqtwCq8IiqhIiqwoiqpoiq4YiqlYiq04iqt4iq8ESqhEClCggpRYmaZMV2YoM5VZymxljjJXmafMVxYoC5VFymJlibJUWaYsV1YoK5VVympljbJWWaesVzYoG5VNymZli7JV2aZsV3YoO5Vdym5lj7JX2afsVw4oB5VDymHliHJUOaYcV04oJ5VTymnljHJWOaecVy4oF5VLymXlinJVuaZcV24oN5Vbym3ljnJXuafcVx4oD5VHymPlifJUeaY8V14oL5VXymvljfJWeae8Vz4oH5VPymfli/JV+aZ8V34oP5Vfym/lj/JX+ackUhPUxGoSNamaTE2uplBTqqnU1GoaNa2aTk2vZlAzqpnUzGoWNauaTc2u5lBzqrnU3GoeNa+aT82vFlALqoXUwmoRtahaTC2ullBLqqXU0moZtaxaTi2vVlArqpXUymoVtapaTa2u1lBrqrXU2modta5aT62vNlAbqo3UxmoTtanaTG2utlD/U1uqrdTWahu1rdpOba92UDuqndTOahe1q9pN7a72UHuqvdTeah+1r9pP7a8OUAeqg9TB6hB1qDpMHa6OUEeqo9TR6hh1rDpOHa9OUCeqk9TJ6hR1qoqpuEqopEqptMqorMqpvCqooiqpsqqoqqqpumqopmqptuqoruqpvhqooRqpQIUqUmN1mjpdnaHOVGeps9U56lx1njpfXaAuVBepi9Ul6lJ1mbpcXaGuVFepq9U16lp1nbpe3aBuVDepm9Ut6lZ1m7pd3aHuVHepu9U96l51n7pfPaAeVA+ph9Uj6lH1mHpcPaGeVE+pp9Uz6ln1nHpevaBeVC+pl9Ur6lX1mnpdvaHeVG+pt9U76l31nnpffaA+VB+pj9Un6lP1mfpcfaG+VF+pr9U36lv1nfpe/aB+VD+pn9Uv6lf1m/pd/aH+VH+pv9U/6l/1n5pIS9ASa0m0pFoyLbmWQkuppdJSa2m0tFo6Lb2WQcuoZdIya1m0rFo2LbuWQ8up5dJya3m0vFo+Lb9WQCuoFdIKa0W0oloxrbhWQiupldJKa2W0slo5rbxWQauoVdIqa1W0qlo1rbpWQ6up1dJqa3W0ulo9rb7WQGuoNdIaa020plozrbnWInkiraXWSmuttdHaau209loHraPWSeusddG6at207ikSaT21XlpvrY/WV+un9dcGaAO1QdpgbYg2VBumDddGaCO1UdpobYw2VhunjdcmaBO1SdpkbYo2VcM0XCM0UqM0WmM0VuM0XhM0UZM0WVM0VdM0XTM0U7M0W3M0V/M0Xwu0UIs0oEENabE2TZuuzUj5f/dem6vN0+ZrC7SF2iJtsbZEW6ot05ZrK7SV2ipttbZGW6ut09ZrG7SN2iZts7ZF26pt07ZrO7Sd2i5tt7ZH26vt0/ZrB7SD2iHtsHZEO6od045rJ7ST2inttHZGO6ud085rF7SL2iXtsnZFu6pd065rN7Sb2i3ttnZHu6vd0+5rD7SH2iPtsfZEe6o9055rL7SX2ivttfZGe6u9095rH7SP2ifts/ZF+6p9075rP7Sf2i/tt/ZH+6v90xLpCXpiPYmeVE+mJ9dT6Cn1VHpqPY2eVk+np9cz6Bn1THpmPYueVc+mZ9dz6Dn1XHpuPY+eV8+n59cL6AX1QnphvYheVC+mF9dL6CX1UnppvYxeVi+nl9cr6BX1SnplvYpeVa+mV9dr6DX1WnptvY5eV6+n19cb6A31RnpjvYneVG+mN9db6P/pLfVWemu9jd5Wb6e31zvoHfVOeme9i95V76Z313voPfVeem+9j95X76f31wfoA/VB+mB9iD5UH6YP10foI/VR+mh9jD5WH6eP1yfoE/VJ+mR9ij5Vx3RcJ3RSp3RaZ3RW53ReF3RRl3RZV3RV13RdN3RTt3Rbd3RX93RfD/RQj3SgQx3psT5Nn67P0Gfqs/TZ+hx9rj5Pn68v0Bfqi/TF+hJ9qb5MX66v0Ffqq/TV+hp9rb5OX69v0Dfqm/TN+hZ9q75N367v0Hfqu/Td+h59r75P368f0A/qh/TD+hH9qH5MP66f0E/qp/TT+hn9rH5OP69f0C/ql/TL+hX9qn5Nv67f0G/qt/Tb+h39rn5Pv68/0B/qj/TH+hP9qf5Mf66/0F/qr/TX+hv9rf5Of69/0D/qn/TP+hf9q/5N/67/0H/qv/Tf+h/9r/5PT2QkGImNJEZSI5mR3EhhpDRSGamNNEZaI52R3shgZDQyGZmNLEZWI5uR3chh5DRyGbmNPEZeI5+R3yhgFDQKGYWNIkZRo5hR3ChhlDRKGaWNMkZZo5xR3qhgVDQqGZWNKkZVo5pR3ahh1DRqGbWNOkZdo55R32hgNDQaGY2NJkZTo5nR3Ghh/Ge0NFoZrY02RlujndHe6GB0NDoZnY0uRlejm9Hd6GH0NHoZvY0+Rl+jn9HfGGAMNAYZg40hxlBjmDHcGGGMNEYZo40xxlhjnDHemGBMNCYZk40pxlQDM3CDMEiDMmiDMViDM3hDMERDMmRDMVRDM64ahmEalmEbjuEanuEbgREakQEMaCAjNqYZ040ZxkxjljHbmGPMNeYZ840FxkJjkbHYWGIsNZYZy40VxkpjlbHaWGOsNdYZ640NxkZjk7HZ2GJsNbYZ240dxk5jl7Hb2GPsNfYZ+40DxkHjkHHYOGIcNY4Zx40TxknjlHHaOGOcNc4Z540LxkXjknHZuGJcNa4Z140bxk3jlnHbuGPcNe4Z940HxkPjkfHYeGI8NZ4Zz40XxkvjlfHaeGO8Nd4Z740Pxkfjk/HZ+GJ8Nb4Z340fxk/jl/Hb+GP8Nf4ZicwEM7GZxExqJjOTmynMlGYqM7WZxkxrpjPTmxnMjGYmM7OZxcxqZjOzmznMnGYuM7eZx8xr5jPzmwXMgmYhs7BZxCxqFjOLmyXMkmYps7RZxixrljPLmxXMimYls7JZxaxqVjOrmzXMmmYts7ZZx6xr1jPrmw3MhmYjs7HZxGxqNjObmy3M/8yWZiuztdnGbGu2M9ubHcyOZiezs9nF7Gp2M7ubPcyeZi+zt9nH7Gv2M/ubA8yB5iBzsDnEHGoOM4ebI8yR5ihztDnGHGuOM8ebE8yJ5iRzsjnFnGpiJm4SJmlSJm0yJmtyJm8KpmhKpmwqpmpqpm4apmlapm06pmt6pm8GZmhGJjChiczYnGZON2eYM81Z5mxzjjnXnGfONxeYC81F5mJzibnUXGYuN1eYK81V5mpzjbnWXGeuNzeYG81N5mZzi7nV3GZuN3eYO81d5m5zj7nX3GfuNw+YB81D5mHziHnUPGYeN0+YJ81T5mnzjHnWPGeeNy+YF81L5mXzinnVvGZeN2+YN81b5m3zjnnXvGfeNx+YD81H5mPzifnUfGY+N1+YL81X5mvzjfnWfGe+Nz+YH81P5mfzi/nV/GZ+N3+YP81f5m/zj/nX/GcmshKsxFYSK6mVzEpupbBSWqms1FYaK62VzkpvZbAyWpmszFYWK6uVzcpu5bByWrms3FYeK6+Vz8pvFbAKWoWswlYRq6hVzCpulbBKWqWs0lYZq6xVzipvVbAqWpWsylYVq6pVzapu1bBqWrWs2lYdq65Vz6pvNbAaWo2sxlYTq6nVzGputbD+s1parazWVhurrdXOam91sDpanazOVherq9XN6m71sHpavazeVsL3f//6Wf2tAdZAa5A12BpiDbWGWcOtEdZIa5Q12hpjjbXGWeOtCdZEa5I12ZpiTbUwC7cIi7Qoi7YYi7U4i7cES7QkS7YUS7U0S7cMy7Qsy7Ycy7U8y7cCK7QiC1jQQlZsTbOmWzOsmdYsa7Y1x5przbPmWwushdYia7G1xFpqLbOWWyusldYqa7W1xlprrbPWWxusjdYma7O1xdpqbbO2WzusndYua7e1x9pr7bP2Wwesg9Yh67B1xDpqHbOOWyesk9Yp67R1xjprnbPOWxesi9Yl67J1xbpqXbOuWzesm9Yt67Z1x7pr3bPuWw+sh9Yj67H1xHpqPbOeWy+sl9Yr67X1xnprvbPeWx+sj9Yn67P1xfpqfbO+Wz+sn9Yv67f1x/pr/bMS2Ql2YjuJndROZie3U9gp7VR2ajuNndZOZ6e3M9gZ7Ux2ZjuLndXOZme3c9g57Vx2bjuPndfOZ+e3C9gF7UJ2YbuIXdQuZhe3S9gl7VJ2abuMXdYuZ5e3K9gV7Up2ZbuKXdWuZle3a9g17Vp2bbuOXdeuZ9e3G9gN7UZ2Y7uJ3dRuZje3W9j/2S3tVnZru43d1m5nt7c72B3tTnZnu4vd1e5md7d72D3tXnZvu4/d1+5n97cH2APtQfZge4g91B5mD7dH2CPtUfZoe4w91h5nj7cn2BPtSfZke4o91cZs3CZs0qZs2mZs1uZs3hZs0ZZs2VZs1dZs3TZs07Zs23Zs1/Zs3w7s0I5sYEMb2bE9zZ5uz7Bn2rPs2fYce649z55vL7AX2ovsxfYSe6m9zF5ur7BX2qvs1fYae629zl5vb7A32pvszfYWe6u9zd5u77B3Juyyd9t77L32Pnu/fcA+aB+yD9tH7KP2Mfu4fcI+aZ+yT9tn7LP2Ofu8fcG+aF+yL9tX7Kv2Nfu6fcO+ad+yb9t37Lv2Pfu+/cB+aD+yH9tP7Kf2M/u5/cJ+ab+yX9tv7Lf2O/u9/cH+aH+yP9tf7K/2N/u7/cP+af+yf9t/7L/2PzuRk+AkdpI4SZ1kTnInhZPSSeWkdtI4aZ10Tnong5PRyeRkdrI4WZ1sTnYnh5PTyeXkdvI4eZ18Tn6ngFPQKeQUdoo4RZ1iTnGnhFPSKeWUdso4ZZ1yTnmnglPRqeRUdqo4VZ1qTnWnhlPTqeXUduo4dZ16Tn2ngdPQaeQ0dpo4TZ1mTnOnhfOf09Jp5bR22jhtnXZOe6eD09Hp5HR2ujhdnW5Od6eH09Pp5fR2+jh9nX5Of2eAM9AZ5Ax2hjhDnWHOcGeEM9IZ5Yx2xjhjnXHOeGeCM9GZ5Ex2pjhTHczBHcIhHcqhHcZhHc7hHcERHcmRHcVRHc3RHcMxHcuxHcdxHc/xncAJncgBDnSQEzvTnOnODGemM8uZ7cxx5jrznPnOAmehs8hZ7CxxljrLnOXOCmels8pZ7axx1jrrnPXOBmejs8nZ7GxxtjrbnO3ODmens8vZ7exx9jr7nP3OAeegc8g57BxxjjrHnOPOCeekc8o57ZxxzjrnnPPOBeeic8m57FxxrjrXnOvODeemc8u57dxx7jr3nPvOA+eh88h57DxxnjrPnOfOC+el88p57bxx3jrvnPfOB+ej88n57HxxvjrfnO/OD+en88v57fxx/jr/nERugpvYTeImdZO5yd0Ubko3lZvaTeOmddO56d0MbkY3k5vZzeJmdbO52d0cbk43l5vbzePmdfO5+d0CbkG3kFvYLeIWdYu5xd0Sbkm3lFvaLeOWdcu55d0KbkW3klvZreJWdau51d0abk23llvbrePWdeu59d0GbkO3kdvYbeI2dZu5zd0W7n9uS7eV29pt47Z127nt3Q5uR7eT29nt4nZ1u7nd3R5uT7eX29vt4/Z1+7n93QHuQHeQO9gd4g51h7nD3RHuSHeUO9od4451x7nj3QnuRHeSO9md4k51MRd3CZd0KZd2GZd1OZd3BVd0JVd2FVd1NVd3Ddd0Ldd2Hdd1Pdd3Azd0Ixe40EVu7E5zp7sz3JnuLHe2O8ed685z57sL3IXuInexu8Rd6i5zl7sr3JXuKne1u8Zd665z17sb3I3uJnezu8Xd6m5zt7s73J3uLne3u8fd6+5z97sH3IPuIfewe8Q96h5zj7sn3JPuKfe0e8Y9655zz7sX3IvuJfeye8W96l5zr7s33JvuLfe2e8e9695z77sP3IfuI/ex+8R96j5zn7sv3JfuK/e1+8Z9675z37sf3I/uJ/ez+8X96n5zv7s/3J/uL/e3+8f96/5zE3kJXmIviZfUS+Yl91J4Kb1UXmovjZfWS+el9zJ4Gb1MXmYvi5fVy+Zl93J4Ob1cXm4vj5fXy+fl9wp4Bb1CXmGviFfUK+YV90p4Jb1SXmmvjFfWK+eV9yp4Fb1KXmWvilfVq+ZV92p4Nb1aXm2vjlfXq+fV9xp4Db1GXmOvidfUa+Y191p4/3ktvVZea6+N19Zr57X3OngdvU5eZ6+L19Xr5nX3eng9vV5eb6+P19fr5/X3BngDvUHeYG+IN9Qb5g33RngjvVHeaG+MN9Yb5433JngTvUneZG+KN9XDPNwjPNKjPNpjPNbjPN4TPNGTPNlTPNXTPN0zPNOzPNtzPNfzPN8LvNCLPOBBD3mxN82b7s3wZnqzvNneHG+uN8+b7y3wFnqLvMXeEm+pt8xb7q3wVnqrvNXeGm+tt85b723wNnqbvM3eFm+rt83b7u3wdnq7vN3eHm+vt8/b7x3wDnqHvMPeEe+od8w77p3wTnqnvNPeGe+sd847713wLnqXvMveFe+qd8277t3wbnq3vNveHe+ud8+77z3wHnqPvMfeE++p98x77r3wXnqvvNfeG++t9857733wPnqfvM/eF++r98377v3wfnq/vN/eH++v989L5Cf4if0kflI/mZ/cT+Gn9FP5qf00flo/nZ/ez+Bn9DP5mf0sflY/m5/dz+Hn9HP5uf08fl4/n5/fL+AX9Av5hf0iflG/mF/cL+GX9Ev5pf0yflm/nF/er+BX9Cv5lf0qflW/ml/dr+HX9Gv5tf06fl2/nl/fb+A39Bv5jf0mflO/md/cb+H/57f0W/mt/TZ+W7+d397v4Hf0O/md/S5+V7+b393v4ff0e/m9/T5+X7+f398f4A/0B/mD/SH+UH+YP9wf4Y/0R/mj/TH+WH+cP96f4E/0J/mT/Sn+VB/zcZ/wSZ/yaZ/xWZ/zeV/wRV/yZV/xVV/zdd/wTd/ybd/xXd/zfT/wQz/ygQ995Mf+NH+6P8Of6c/yZ/tz/Ln+PH++v8Bf6C/yF/tL/KX+Mn+5v8Jf6a/yV/tr/LX+On+9v8Hf6G/yN/tb/K3+Nn+7v8Pf6e/yd/t7/L3+Pn+/f8A/6B/yD/tH/KP+Mf+4f8I/6Z/yT/tn/LP+Of+8f8G/6F/yL/tX/Kv+Nf+6f8O/6d/yb/t3/Lv+Pf++/8B/6D/yH/tP/Kf+M/+5/8J/6b/yX/tv/Lf+O/+9/8H/6H/yP/tf/K/+N/+7/8P/6f/yf/t//L/+Pz9RkBAkDpIESYNkQfIgRZAySBWkDtIEaYN0QfogQ5AxyBRkDrIEWYNsQfYgR5AzyBXkDvIEeYN8Qf6gQFAwKBQUDooERYNiQfGgRFAyKBWUDsoEZYNyQfmgQlAxqBRUDqoEVYNqQfWgRlAzqBXUDuoEdYN6Qf2gQdAwaBQ0DpoETYNmQfOgRfBf0DJoFbQO2gRtg3ZB+6BD0DHoFHQOugRdg25B96BH0DPoFfQO+gR9g35B/2BAMDAYFAwOhgRDg2HB8GBEMDIYFYwOxgRjg3HB+GBCMDGYFEwOpgRTAyzAAyIgAyqgAyZgAy7gAyEQAymQAyVQAy3QAyMwAyuwAydwAy/wgyAIgygAAQxQEAfTgunBjGBmMCuYHcwJ5gbzgvnBgmBhsChYHCwJlgbLguXBimBlsCpYHawJ1gbrgvXBhmBjsCnYHGwJtgbbgu3BjmBnsCvYHewJ9gb7gv3BgeBgcCg4HBwJjgbHguPBieBkcCo4HZwJzgbngvPBheBicCm4HFwJrgbXguvBjeBmcCu4HdwJ7gb3gvvBg+Bh8Ch4HDwJngbPgufBi+Bl8Cp4HbwJ3gbvgvfBh+Bj8Cn4HHwJvgbfgu/Bj+Bn8Cv4HfwJ/gb/gkRhQpg4TBImDZOFycMUYcowVZg6TBOmDdOF6cMMYcYwU5g5zBJmDbOF2cMcYc4wV5g7zBPmDfOF+cMCYcGwUFg4LBIWDYuFxcMSYcmwVFg6LBOWDcuF5cMKYcWwUlg5rBJWDauF1cMaYc2wVlg7rBPWDeuF9cMGYcOwUdg4bBI2DZuFzcMW4X9hy7BV2DpsE7YN24Xtww5hx7BT2DnsEnYNu4Xdwx5hz7BX2DvsE/YN+4X9wwHhwHBQODgcEg4Nh4XDwxHhyHBUODocE44Nx4XjwwnhxHBSODmcEk4NsRAPiZAMqZAOmZANuZAPhVAMpVAOlVANtVAPjdAMrdAOndANvdAPgzAMoxCEMERhHE4Lp4czwpnhrHB2OCecG84L54cLwoXhonBxuCRcGi4Ll4crwpXhqnB1uCZcG64L14cbwo3hpnBzuCXcGm4Lt4c7wp3hrnB3uCfcG+4L94cHwoPhoTAhPBIeDY+Fx8MT4cnwVHg6PBOeDc+F58ML4cXwUng5vBJeDa+F18Mb4c3wVng7vBPeDe+F98MH4cPwUfg4fBI+DZ+Fz8MX4cvwVfg6fBO+Dd+F78MP4cfwU/g5/BJ+Db+F38Mf4c/wV/g7/BP+Df+FiaKEKHGUJEoaJYuSRymilFGqKHWUJkobpYvSRxmijFGmKHOUJcoaZYuyRzminFGuKHeUJ8ob5YvyRwWiglGhqHBUJCoaFYuKRyWiklGpqHRUJioblYvKRxWiilGlqHJUJaoaVYuqRzWimlGtqHZUJ6ob1YvqRw2ihlGjqHHUJGoaNYuaRy2i/6KWUauoddQmahu1i9pHHaKOUaeoc9Ql6hp1i7pHPaKeUa+od9Qn6hv1i/pHA6KB0aBocDQkGhoNi4ZHI6KR0ahodDQmGhuNi8ZHE6KJ0aRocjQlmhphER4RERlRER0xERtxER8JkRhJkRwpkRppkR4ZkRlZkR05kRt5kR8FURhFEYhghKI4mhZNj2ZEM6NZ0exoTjQ3mhfNjxZEC6NF0eJoSbQ0WhYtj1ZEK6NV0epoTbQ2WhetjzZEG6NN0eZoS7Q12hZtj3ZEO6Nd0e5oT7Q32hftjw5EB6ND0eHoSHQ0OhYdj05EJ6NT0enoTHQ2Ohedjy5EF6NL0eXoSnQ1uhZdj25EN6Nb0e3oTnQ3uhfdjx5ED6NH0ePoSfQ0ehY9j15EL6NX0evoTfQ2ehe9jz5EH6NP0efoS/Q1+hZ9j35EP6Nf0e/oT/Q3SholAgkgMUgCkoJkIDlIAVKCVCA1SAPSgnQgPcgAMoJMIDPIArKCbCA7yAFyglwgN8gD8oJ8ID8oAAqCQqAwKAKKgmKgOCgBSoJSoDQoA8qCcqA8qAAqgkqgMqgCqoJqoDqoAWqCWqA2qAPqgnqgPmgAGoJGoDFoApqCZqA5aAH+Ay1BK9AatAFtQTvQHnQAHUEn0Bl0AV1BN9Ad9AA9QS/QG/QBfUE/0B8MAAPBIDAYDAFDwTAwHIwAI8EoMBqMAWPBODAeTAATwSQwGUwBUwEGcEAAElCABgxgAQd4IAARSEAGClCBBnRgABNYwAYOcIEHfBCAEEQAAAgQiME0MB3MADPBLDAbzAFzwTwwHywAC8EisBgsAUvBMrAcrAArwSqwGqwBa8E6sB5sABvBJrAZbAFbwTawHewAO8EusBvsAXvBPrAfHAAHwSFwGBwBR8ExcBycACfBKXAanAFnwTlwHlwAF8ElcBlcAVfBNXAd3AA3wS1wG9wBd8E9cB88AA/BI/AYPAFPwTPwHLwAL8Er8Bq8AW/BO/AefAAfwSfwGXwBX8E38B38AD/BL/Ab/AF/wT+QCCbAxDAJTAqTweQwBUwJU8HUMA1MC9PB9DADzAgzwcwwC8wKs8HsMAfMCXPB3DAPzAvzwfywACwIC8HCsAgsCovB4rAELAlLwdKwDCwLy8HysAKsCCvByrAKrAqrweqwBqwJa8HasA6sC+vB+rABbAgbwcawCWwKm8HmsAX8D7aErWBr2Aa2he1ge9gBdoSdYGfYBXaF3WB32AP2hL1gb9gH9oX9YH84AA6Eg+BgOAQOhcPgcDgCjoSj4Gg4Bo6F4+B4OAFOhJPgZDgFToUYxCEBSUhBGjKQhRzkoQBFKEEZKlCFGtShAU1oQRs60IUe9GEAQxhBACFEMIbT4HQ4A86Es+BsOAfOhfPgfLgALoSL4GK4BC6Fy+ByuAKuhKvgargGroXr4Hq4AW6Em+BmuAVuhdvgdrgD7oS74G64B+6F++B+eAAehIfgYXgEHoXH4HF4Ap6Ep+BpeAaehefgeXgBXoSX4GV4BV6F1+B1eAPehLfgbXgH3oX34H34AD6Ej+Bj+AQ+hc/gc/gCvoSv4Gv4Br6F7+B7+AF+hJ/gZ/gFfoXf4Hf4A/6Ev+Bv+Af+hf9gIpSAEqMkKClKhpKjFCglSoVSozQoLUqH0qMMKCPKhDKjLCgryoayoxwoJ8qFcqM8KC/Kh/KjAqggKoQKoyKoKCqGiqMSqCQqhUqjMqgsKofKowqoIqqEKqMqqCqqhqqjGqgmqoVqozqoLqqH6qMGqCFqhBqjJqgpaoaaoxboP9QStUKtURvUFrVD7VEH1BF1Qp1RF9QVdUPdUQ/UE/VCvVEf1Bf1Q/3RADQQDUKD0RA0FA1Dw9EINBKNQqPRGDQWjUPj0QQ0EU1Ck9EUNBVhCEcEIhGFaMQgFnGIRwISkYRkpCAVaUhHBjKRhWzkIBd5yEcBClGEAIIIoRhNQ9PRDDQTzUKz0Rw0F81D89ECtBAtQovRErQULUPL0Qq0Eq1Cq9EatBatQ+vRBrQRbUKb0Ra0FW1D29EOtBPtQrvRHrQX7UP70QF0EB1Ch9ERdBQdQ8fRCXQSnUKn0Rl0Fp1D59EFdBFdQpfRFXQVXUPX0Q10E91Ct9EddBfdQ/fRA/QQPUKP0RP0FD1Dz9EL9BK9Qq/RG/QWvUPv0Qf0EX1Cn9EX9BV9Q9/RD/QT/UK/0R/0F/1DieKEOHGcJE4aJ4uTxynilHGqOHWcJk4bp4vTxxnijHGmOHOcJc4aZ4uzxzninHGuOHecJ84b54vzxwXignGhuHBcJC4aF4uLxyXiknGpuHRcJi4bl4vLxxXiinGluHJcJa4aV4urxzXimnGtuHZcJ64b14vrxw3ihnGjuHHcJG4aN4ubxy3i/+KWcau4ddwmbhu3i9vHHeKOcae4c9wl7hp3i7vHPeKeca+4d9wn7hv3i/vHA+KB8aB4cDwkHhoP+x8B8ACY9RIAADzbtm1bL9u2uWyvtZZdf9vW3X3Ztm3b9vthY7Cx2DhsPDYBi8MmYpOwydgUbCo2DZuOzcBmYrOw2dgcbC42D5uPLcAWYouwxVg8tgRLwJZiidgyLAlbjq3AVmKrsNXYGmwttg5bj23ANmKbsM3YFmwrhmE4RmAkRmE0xmAsxmE8JmAiJmEypmAqpmE6ZmAmZmE25mAu5mE+FmAhFmEAgxjCYtg2bDu2A9uJ7cJ2Y3uwvdg+bD92ADuIHcIOY0ewo9gx7Dh2AjuJncJOY2ews9g57Dx2AbuIXcIuY1ewq9g17Dp2A7uJ3cJuY3ewu9g97D72AHuIPcIeY0+wp9gz7Dn2AnuJvcJeY2+wt9g77D32AfuIfcI+Y1+wr9g37Dv2A/uJ/cJ+Y3+wv9g/LBmeHE+Bp8RT4anxNHhaPB2eHs+AZ8Qz4ZnxLHhWPBueHc+B58Rz4bnxPHhePB+eHy+AF8QL4YXxInhRvBheHC+Bl8RL4aXxMnhZvBxeHq+AV8Qr4ZXxKnhVvBpeHa+B18Rr4bXxOnhdvB5eH2+AN8Qb4Y3xJnhTvBn+H94cb4G3xFvhrfE2eFu8Hd4e74B3xDvhnfEueFe8G94d74H3xHvhvfE+eF+8H94fH4APxAfhg/Eh+FB8GD4cH4GPxEfho/Ex+Fh8HD4en4DH4RPxSfhkfAo+FZ+GT8dn4DPxWfhsfA4+F5+Hz8cX4AvxRfhiPB5fgifgS/FEfBmehC/HV+Ar8VX4anwNvhZfh6/HN+Ab8U34ZnwLvhXHcBwncBKncBpncBbncB4XcBGXcBlXcBXXcB03cBO3cBt3cBf3cB8P8BCPcIBDHOExfBu+Hd+B78R34bvxPfhefB++Hz+AH8QP4YfxI/hR/Bh+HD+Bn8RP4afxM/hZ/Bx+Hr+AX8Qv4ZfxK/hV/Bp+Hb+B38Rv4bfxO/hd/B5+H3+AP8Qf4Y/xJ/hT/Bn+HH+Bv8Rf4a/xN/hb/B3+Hv+Af8Q/4Z/xL/hX/Bv+Hf+B/8R/4b/xP/hf/B+ejEhOpCBSEqmI1EQaIi2RjkhPZCAyEpmIzEQWIiuRjchO5CByErmI3EQeIi+Rj8hPFCAKEoWIwkQRoihRjChOlCBKEqWI0kQZoixRjihPVCAqEpWIykQVoipRjahO1CBqErWI2kQdoi5Rj6hPNCAaEo2IxkQToinRjPiPaE60IFoSrYjWRBuiLdGOaE90IDoSnYjORBeiK9GN6E70IHoSvYjeRB+iL9GP6E8MIAYSg4jBxBBiKDGMGE6MIEYSo4jRxBhiLDGOGE9MIOKIicQkYjIxhZhKTCOmEzOImcQsYjYxh5hLzCPmEwuIhcQiYjERTywhEoilRCKxjEgilhMriJXEKmI1sYZYS6wj1hMbiI3EJmIzsYXYSmAEThAESVAETTAES3AETwiESEiETCiESmiEThiESViETTiES3iETwRESEQEICCBiBixjdhO7CB2EruI3cQeYi+xj9hPHCAOEoeIw8QR4ihxjDhOnCBOEqeI08QZ4ixxjjhPXCAuEpeIy8QV4ipxjbhO3CBuEreI28Qd4i5xj7hPPCAeEo+Ix8QT4inxjHhOvCBeEq+I18Qb4i3xjnhPfCA+Ep+Iz8QX4ivxjfhO/CB+Er+I38Qf4i/xj0hGJidTkCnJVGRqMg2ZlkxHpiczkBnJTGRmMguZlcxGZidzkDnJXGRuMg+Zl8xH5icLkAXJQmRhsghZlCxGFidLkCXJUmRpsgxZlixHlicrkBXJSmRlsgpZlaxGVidrkDXJWmRtsg5Zl6xH1icbkA3JRmRjsgnZlGxG/kc2J1uQLclWZGuyDdmWbEe2JzuQHclOZGeyC9mV7EZ2J3uQPcleZG+yD9mX7Ef2JweQA8lB5GByCDmUHEYOJ0eQI8lR5GhyDDmWHEeOJyeQceREchI5mZxCTiWnkdPJGeRMchY5m5xDziXnkfPJBeRCchG5mIwnl5AJ5FIykVxGJpHLyRXkSnIVuZpcQ64l15HryQ3kRnITuZncQm4lMRInCZIkKZImGZIlOZInBVIkJVImFVIlNVInDdIkLdImHdIlPdInAzIkIxKQkERkjNxGbid3kDvJXeRucg+5l9xH7icPkAfJQ+Rh8gh5lDxGHidPkCfJU+Rp8gx5ljxHnicvkBfJS+Rl8gp5lbxGXidvkDfJW+Rt8g55l7xH3icfkA/JR+Rj8gn5lHxGPidfkC/JV+Rr8g35lnxHvic/kB/JT+Rn8gv5lUxGfid/kD/JX+Rv8g/5l/xHJqOSUymolFQqKjWVhkpLpaPSUxmojFQmKjOVhcpKZaOyUzmonFQuKjeVh8pL5aPyUwWoglQhqjBVhCpKFaOKUyWoklQpqjRVhipLlaPKUxWoilQlqjJVhapKVaOqUzWomlQtqjZVh6pL1aPqUw2ohlQjqjHVhGpKNaP+o5pTLaiWVCuqNdWGaku1o9pTHaiOVCeqM9WF6kp1o7pTPaieVC+qN9WH6kv1o/pTA6iB1CBqMDWEGkoNo4ZTI6iR1ChqNDWGGkuNo8ZTE6g4aiI1iZpMTaGmUtOo6dQMaiY1i5pNzaHmUvOo+dQCaiG1iFpMxVNLqARqKZVILaOSqOXUCmoltYpaTa2h1lLrqPXUBmojtYnaTG2htlIYhVMERVIURVMMxVIcxVMCJVISJVMKpVIapVMGZVIWZVMO5VIe5VMBFVIRBShIISpGbaO2UzuondQuaje1h9pL7aP2Uweog9Qh6jB1hDpKHaOOUyeok9Qp6jR1hjpLnaPOUxeoi9Ql6jJ1hbpKXaOuUzeom9Qt6jZ1h7pL3aPuUw+oh9Qj6jH1hHpKPaOeUy+ol9Qr6jX1hnpLvaPeUx+oj9Qn6jP1hfpKfaO+Uz+on9Qv6jf1h/pL/aOS0cnpFHRKOhWdmk5Dp6XT0enpDHRGOhOdmc5CZ6Wz0dnpHHROOhedm85D56Xz0fnpAnRBuhBdmC5CF6WL0cXpEnRJuhRdmi5Dl6XL0eXpCnRFuhJdma5CV6Wr0dXpGnRNuhZdm65D16Xr0fXpBnRDuhHdmG5CN6Wb0f/RzekWdEu6Fd2abkO3pdvR7ekOdEe6E92Z7kJ3pbvR3ekedE+6F92b7kP3pfvR/ekB9EB6ED2YHkIPpYfRw+kR9Eh6FD2aHkOPpcfR4+kJdBw9kZ5ET6an0FPpafR0egY9k55Fz6bn0HPpefR8egG9kF5EL6bj6SV0Ar2UTqSX0Un0cnoFvZJeRa+m19Br6XX0enoDvZHeRG+mt9BbaYzGaYImaYqmaYZmaY7maYEWaYmWaYVWaY3WaYM2aYu2aYd2aY/26YAO6YgGNKQRHaO30dvpHfROehe9m95D76X30fvpA/RB+hB9mD5CH6WP0cfpE/RJ+hR9mj5Dn6XP0efpC/RF+hJ9mb5CX6Wv0dfpG/RN+hZ9m75D36Xv0ffpB/RD+hH9mH5CP6Wf0c/pF/RL+hX9mn5Dv6Xf0e/pD/RH+hP9mf5Cf6W/0d/pH/RP+hf9m/5D/6X/0cmY5EwKJiWTiknNpGHSMumY9EwGJiOTicnMZGGyMtmY7EwOJieTi8nN5GHyMvmY/EwBpiBTiCnMFGGKMsWY4kwJpiRTiinNlGHKMuWY8kwFpiJTianMVGGqMtWY6kwNpiZTi6nN1GHqMvWY+kwDpiHTiGnMNGGaMs2Y/5jmTAumJdOKac20Ydoy7Zj2TAemI9OJ6cx0Yboy3ZjuTA+mJ9OL6c30Yfoy/Zj+zABmIDOIGcwMYYYyw5jhzAhmJDOKGc2MYcYy45jxzAQmjpnITGImM1OYqcw0Zjozg5nJzGJmM3OYucw8Zj6zgFnILGIWM/HMEiaBWcokMsuYJGY5s4JZyaxiVjNrmLXMOmY9s4HZyGxiNjNbmK0MxuAMwZAMxdAMw7AMx/CMwIiMxMiMwqiMxuiMwZiMxdiMw7iMx/hMwIRMxAAGMoiJMduY7cwOZiezi9nN7GH2MvuY/cwB5iBziDnMHGGOMseY48wJ5iRzijnNnGHOMueY88wF5iJzibnMXGGuMteY68wN5iZzi7nN3GHuMveY+8wD5iHziHnMPGGeMs+Y58wL5iXzinnNvGHeMu+Y98wH5iPzifnMfGG+Mt+Y78wP5ifzi/nN/GH+Mv+YZGxyNgWbkk3FpmbTsGnZdGx6NgObkc3EZmazsFnZbGx2Ngebk83F5mbzsHnZfGx+tgBbkC3EFmaLsEXZYmwZtgRbki3FlmbLsGXZcmx5tgJbka3EVmarsFXZamx1tgZbk63F1mbrsHXZemx9tgHbkG3ENmabsE3ZZux/bHO2BduSbcW2Ztuwbdl2bHu2A9uR7cR2ZruwXdlubHe2B9uT7cX2Zvuwfdl+bH92ADuQHcQOZoewQ9lh7HB2BDuSHcWOZsewY9lx7Hh2AhvHTmQnsZPZKexUdho7nZ3BzmRnsbPZOexcdh47n13ALmQXsYvZeHYJm8AuZRPZZWwSu5xdwa5kV7Gr2TXsWnYdu57dwG5kN7Gb2S3sVhZjcZZgSZZiaZZhWZZjeVZgRVZiZVZhVVZjddZgTdZibdZhXdZjfTZgQzZiAQtZxMbYbex2dge7k93F7mb3sHvZfex+9gB7kD3EHmaPsEfZY+xx9gR7kj3FnmbPsGfZc+x59gJ7kb3EXmavsFfZa+x19gZ7k73F3mbvsHfZe+x99gH7kH3EPmafsE/ZZ+xz9gX7kn3FvmbfsG/Zd+x79gP7kf3Efma/sF/Zb+x39gf7k/3F/mb/sH/Zf2wyLjmXgkvJpeJSc2m4tFw6Lj2XgcvIZeIyc1m4rFw2LjuXg8vJ5eJyc3m4vFw+Lj9XgCvIFeIKc0W4olwxrjhXgivJleJKc2W4slw5rjxXgavIVeIqc1W4qlw1rjpXg6vJ1eJqc3W4ulw9rj7XgGvINeIac024plwz7j+uOdeCa8m14lpzbbi2XDuuPdeB68h14jpzXbiuXDeuO9eD68n14npzfbi+XD+uPzeAG8gN4gZzQ7ih3DBuODeCG8mN4kZzY7ix3DhuPDeBi+MmcpO4ydwUbio3jZvOzeBmcrO42dwcbi43j5vPLeAWcou4xVw8t4RL4JZyidwyLolbzq3gVnKruNXcGm4tt45bz23gNnKbuM3cFm4rh3E4R3AkR3E0x3Asx3E8J3AiJ3Eyp3Aqp3E6Z3AmZ3E253Au53E+F3AhF3GAgxziYtw2bju3g9vJ7eJ2c3u4vdw+bj93gDvIHeIOc0e4o9wx7jh3gjvJneJOc2e4s9w57jx3gbvIXeIuc1e4q9w17jp3g7vJ3eJuc3e4u9w97j73gHvIPeIec0+4p9wz7jn3gnvJveJec2+4t9w77j33gfvIfeI+c1+4r9w37jv3g/vJ/eJ+c3+4v9w/LhmfnE/Bp+RT8an5NHxaPh2fns/AZ+Qz8Zn5LHxWPhufnc/B5+Rz8bn5PHxePh+fny/AF+QL8YX5InxRvhhfnC/Bl+RL8aX5MnxZvhxfnq/AV+Qr8ZX5KnxVvhpfna/B1+Rr8bX5Onxdvh5fn2/AN+Qb8Y35JnxTvhn/H9+cb8G35Fvxrfk2fFu+Hd+e78B35DvxnfkufFe+G9+d78H35Hvxvfk+fF++H9+fH8AP5Afxg/kh/FB+GD+cH8GP5Efxo/kx/Fh+HD+en8DH8RP5Sfxkfgo/lZ/GT+dn8DP5Wfxsfg4/l5/Hz+cX8Av5RfxiPp5fwifwS/lEfhmfxC/nV/Ar+VX8an4Nv5Zfx6/nN/Ab+U38Zn4Lv5XHeJwneJKneJpneJbneJ4XeJGXeJlXeJXXeJ03eJO3eJt3eJf3eJ8P+JCPeMBDHvExfhu/nd/B7+R38bv5Pfxefh+/nz/AH+QP8Yf5I/xR/hh/nD/Bn+RP8af5M/xZ/hx/nr/AX+Qv8Zf5K/xV/hp/nb/B3+Rv8bf5O/xd/h5/n3/AP+Qf8Y/5J/xT/hn/nH/Bv+Rf8a/5N/xb/h3/nv/Af+Q/8Z/5L/xX/hv/nf/B/+R/8b/5P/xf/h+fTEgupBBSCqmE1EIaIa2QTkgvZBAyCpmEzEIWIauQTcgu5BByCrmE3EIeIa+QT8gvFBAKCoWEwkIRoahQTCgulBBKCqWE0kIZoaxQTigvVBAqCpWEykIVoapQTagu1BBqCrWE2kIdoa5QT6gvNBAaCo2ExkIToanQTPhPaC60EFoKrYTWQhuhrdBOaC90EDoKnYTOQhehq9BN6C70EHoKvYTeQh+hr9BP6C8MEAYKg4TBwhBhqDBMGC6MEEYKo4TRwhhhrDBOGC9MEOKEicIkYbIwRZgqTBOmCzOEmcIsYbYwR5grzBPmCwuEhcIiYbEQLywREoSlQqKwTEgSlgsrhJXCKmG1sEZYK6wT1gsbhI3CJmGzsEXYKmACLhACKVACLTACK3ACLwiCKEiCLCiCKmiCLhiCKViCLTiCK3iCLwRCKEQCEKCAhJiwTdgu7BB2CruE3cIeYa+wT9gvHBAOCoeEw8IR4ahwTDgunBBOCqeE08IZ4axwTjgvXBAuCpeEy8IV4apwTbgu3BBuCreE28Id4a5wT7gvPBAeCo+Ex8IT4anwTHguvBBeCq+E18Ib4a3wTngvfBA+Cp+Ez8IX4avwTfgu/BB+Cr+E38If4a/wT0gmJhdTiCnFVGJqMY2YVkwnphcziBnFTGJmMYuYVcwmZhdziDnFXGJuMY+YV8wn5hcLiAXFQmJhsYhYVCwmFhdLiCXFUmJpsYxYViwnlhcriBXFSmJlsYpYVawmVhdriDXFWmJtsY5YV6wn1hcbiA3FRmJjsYnYVGwm/ic2F1uILcVWYmuxjdhWbCe2FzuIHcVOYmexi9hV7CZ2F3uIPcVeYm+xj9hX7Cf2FweIA8VB4mBxiDhUHCYOF0eII8VR4mhxjDhWHCeOFyeIceJEcZI4WZwiThWnidPFGeJMcZY4W5wjzhXnifPFBeJCcZG4WIwXl4gJ4lIxUVwmJonLxRXiSnGVuFpcI64V14nrxQ3iRnGTuFncIm4VMREXCZEUKZEWGZEVOZEXBVEUJVEWFVEVNVEXDdEULdEWHdEVPdEXAzEUIxGIUERiTNwmbhd3iDvFXeJucY+4V9wn7hcPiAfFQ+Jh8Yh4VDwmHhdPiCfFU+Jp8Yx4VjwnnhcviBfFS+Jl8Yp4VbwmXhdviDfFW+Jt8Y54V7wn3hcfiA/FR+Jj8Yn4VHwmPhdfiC/FV+Jr8Y34Vnwnvhc/iB/FT+Jn8Yv4Vfwmfhd/iD/FX+Jv8Y/4V/wnJpOSSymklFIqKbWURkorpZPSSxmkjFImKbOURcoqZZOySzmknFIuKbeUR8or5ZPySwWkglIhqbBURCoqFZOKSyWkklIpqbRURiorlZPKSxWkilIlqbJURaoqVZOqSzWkmlItqbZUR6or1ZPqSw2khlIjqbHURGoqNZP+k5pLLaSWUiuptdRGaiu1k9pLHaSOUieps9RF6ip1k7pLPaSeUi+pt9RH6iv1k/pLA6SB0iBpsDREGioNk4ZLI6SR0ihptDRGGiuNk8ZLE6Q4aaI0SZosTZGmStOk6dIMaaY0S5otzZHmSvOk+dICaaG0SFosxUtLpARpqZQoLZOSpOXSCmmltEpaLa2R1krrpPXSBmmjtEnaLG2RtkqYhEuEREqUREuMxEqcxEuCJEqSJEuKpEqapEuGZEqWZEuO5Eqe5EuBFEqRBCQoISkmbZO2SzukndIuabe0R9or7ZP2Swekg9Ih6bB0RDoqHZOOSyekk9Ip6bR0RjornZPOSxeki9Il6bJ0RboqXZOuSzekm9It6bZ0R7or3ZPuSw+kh9Ij6bH0RHoqPZOeSy+kl9Ir6bX0RnorvZPeSx+kj9In6bP0RfoqfZO+Sz+kn9Iv6bf0R/or/ZOSycnlFHJKOZWcWk4jp5XTyenlDHJGOZOcWc4iZ5WzydnlHHJOOZecW84j55XzyfnlAnJBuZBcWC4iF5WLycXlEnJJuZRcWi4jl5XLyeXlCnJFuZJcWa4iV5WrydXlGnJNuZZcW64j15XryfXlBnJDuZHcWG4iN5Wbyf/JzeUWcku5ldxabiO3ldvJ7eUOcke5k9xZ7iJ3lbvJ3eUeck+5l9xb7iP3lfvJ/eUB8kB5kDxYHiIPlYfJw+UR8kh5lDxaHiOPlcfJ4+UJcpw8UZ4kT5anyFPlafJ0eYY8U54lz5bnyHPlefJ8eYG8UF4kL5bj5SVygrxUTpSXyUnycnmFvFJeJa+W18hr5XXyenmDvFHeJG+Wt8hbZUzGZUImZUqmZUZmZU7mZUEWZUmWZUVWZU3WZUM2ZUu2ZUd2ZU/25UAO5UgGMpSRHJO3ydvlHfJOeZe8W94j75X3yfvlA/JB+ZB8WD4iH5WPycflE/JJ+ZR8Wj4jn5XPyeflC/JF+ZJ8Wb4iX5WvydflG/JN+ZZ8W74j35XvyfflB/JD+ZH8WH4iP5Wfyc/lF/JL+ZX8Wn4jv5Xfye/lD/JH+ZP8Wf4if5W/yd/lH/JP+Zf8W/4j/5X/ycmU5EoKJaWSSkmtpFHSKumU9EoGJaOSScmsZFGyKtmU7EoOJaeSS8mt5FHyKvmU/EoBpaBSSCmsFFGKKsWU4koJpaRSSimtlFHKKuWU8koFpaJSSamsVFGqKtWU6koNpaZSS6mt1FHqKvWU+koDpaHSSGmsNFGaKs2U/5TmSgulpdJKaa20Udoq7ZT2Sgelo9JJ6ax0Uboq3ZTuSg+lp9JL6a30Ufoq/ZT+ygBloDJIGawMUYYqw5ThyghlpDJKGa2MUcYq45TxygQlTpmoTFImK1OUqco0ZboyQ5mpzFJmK3OUuco8Zb6yQFmoLFIWK/HKEiVBWaokKsuUJGW5skJZqaxSVitrlLXKOmW9skHZqGxSNitblK0KpuAKoZAKpdAKo7AKp/CKoIiKpMiKoqiKpuiKoZiKpdiKo7iKp/hKoIRKpAAFKkiJKduU7coOZaeyS9mt7FH2KvuU/coB5aBySDmsHFGOKseU48oJ5aRySjmtnFHOKueU88oF5aJySbmsXFGuKteU68oN5aZyS7mt3FHuKveU+8oD5aHySHmsPFGeKs+U58oL5aXySnmtvFHeKu+U98oH5aPySfmsfFG+Kt+U78oP5afyS/mt/FH+Kv+UZGpyNYWaUk2lplbTqGnVdGp6NYOaUc2kZlazqFnVbGp2NYeaU82l5lbzqHnVfGp+tYBaUC2kFlaLqEXVYmpxtYRaUi2lllbLqGXVcmp5tYJaUa2kVlarqFXVamp1tYZaU62l1lbrqHXVemp9tYHaUG2kNlabqE3VZup/anO1hdpSbaW2VtuobdV2anu1g9pR7aR2VruoXdVuane1h9pT7aX2VvuofdV+an91gDpQHaQOVoeoQ9Vh6nB1hDpSHaWOVseoY9Vx6nh1ghqnTlQnqZPVKepUdZo6XZ2hzlRnqbPVOepcdZ46X12gLlQXqYvVeHWJmqAuVRPVZWqSulxdoa5UV6mr1TXqWnWdul7doG5UN6mb1S3qVhVTcZVQSZVSaZVRWZVTeVVQRVVSZVVRVVVTddVQTdVSbdVRXdVTfTVQQzVSgQpVpMbUbep2dYe6U92l7lb3qHvVfep+9YB6UD2kHlaPqEfVY+px9YR6Uj2lnlbPqGfVc+p59YJ6Ub2kXlavqFfVa+p19YZ6U72l3lbvqHfVe+p99YH6UH2kPlafqE/VZ+pz9YX6Un2lvlbfqG/Vd+p79YP6Uf2kfla/qF/Vb+p39Yf6U/2l/lb/qH/Vf2oyLbmWQkuppdJSa2m0tFo6Lb2WQcuoZdIya1m0rFo2LbuWQ8up5dJya3m0vFo+Lb9WQCuoFdIKa0W0oloxrbhWQiupldJKa2W0slo5rbxWQauoVdIqa1W0qlo1rbpWQ6up1dJqa3W0ulo9rb7WQGuoNdIaa020plozrZnWXGuutdRaaq211lpbra3WXmuvddQ6ap21zlpXravWXeuu9dR6ar213lpfra/WX+uvDdQGaoO1wdpQbZg2XBuujdRGaqO10dpYbaw2XhuvxWlx2iRtsjZFm6pN06ZrM7SZ2ixttjZHm6vN0+ZrC7SF2iJtsRavxWsJWoKWqCVqSVqStkJboa3SVmlrtDXaOm2dtkHboG3SNmlbtC0apmEaoZEapdEao7Eap/GaoImapMmaoqmapumaoZmapdmao7map/laoIVapAENakiLadu07doObae2S9ut7dH2avu0/doB7aB2SDusHdGOase049oJ7aR2SjutndHOaue089oF7aJ2SbusXdGuate069oN7aZ2S7ut3dHuave0+9oD7aH2SHusPdGeas+059oL7aX2SnutvdHeau+099oH7aP2SfusfdG+at+079oP7af2S/ut/dH+av+0ZHpyPYWeUk+lp9bT6Gn1dHp6PYOeUc+kZ9az6Fn1bHp2PYeeU8+l59bz6Hn1fHp+vYBeUC+kF9aL6EX1YnpxvYReQi+ll9LL6GX0cno5vYJeQa+kV9Kr6FX0anp1vYZeQ6+l19Lr6HX0eno9vYHeQG+kN9Kb6E30ZnozvbneXG+pt9Rb6631tnpbvb3eXu+od9Q76531rnpXvbveXe+p99R76731vnpfvb/eXx+oD9QH64P1ofpQfbg+XB+pj9RH66P1sfpYfbw+Xo/T4/RJ+iR9ij5Vn6ZP12foM/VZ+mx9jj5Xn6vP1+frC/VF+iI9Xo/XE/QEPVFP1JP0JH2FvlJfpa/WV+tr9XX6en2DvlHfpG/Wt+hbdUzHdUIndUqndUZndU7ndUEXdUmXdUVXdU3XdUM3dUu3dUd3dU/39UAP9UgHOtSRHtO36dv1HfpOfZe+W9+j79X36fv1A/pB/ZB+WD+iH9WP6cf1E/pJ/ZR+Wj+jn9XP6ef1C/pF/ZJ+Wb+iX9Wv6df1G/pN/ZZ+W7+j39Xv6ff1B/pD/ZH+WH+iP9Wf6c/1F/pL/ZX+Wn+jv9Xf6e/1D/pH/ZP+Wf+if9W/6d/1H/pP/Zf+W/+j/9X/6cmM5EYKI6WRykhtpDHSGumM9EYGI6ORychsZDGyGtmM7EYOI6eRy8ht5DHyGvmM/EYBo6BRyChsFDGKGsWM4kYJo6RRyihtlDHKGuWM8kYFo6JRyahsVDGqGtWM6kYNo6ZRy6ht1DHqGvWM+kYDo6HRyGhsNDGaGs2M/4zmRgujpdHKaG20Mdoa7Yz2Rgejo9HJ6Gx0Mboa3YzuRg+jp9HL6G30Mfoa/Yz+xgBjoDHIGGwMMYYaw4zhxghjpDHKGG2MMcYa44zxxgQjzphoTDImG1OMqcY0Y7oxw5hpzDJmG3OMucY8Y76xwFhoLDIWG/HGEiPBWGokGsuMJGO5scJYaawyVhtrjLXGOmO9scHYaGwyNhtbjK0GZuAGYZAGZdAGY7AGZ/CGYIiGZMiGYqiGZuiGYZiGZdiGY7iGZ/hGYIRGZAADGsiIGduM7cYOY6exy9ht7DH2GvuM/cYB46BxyDhsHDGOGseM48YJ46RxyjhtnDHOGueM88YF46JxybhsXDGuGteM68YN46Zxy7ht3DHuGveM+8YD46HxyHhsPDGeGs+M58YL46XxynhtvDHeGu+M98YH46PxyfhsfDG+Gt+M78YP46fxy/ht/DH+Gv+MZGZyM4WZ0kxlpjbTmGnNdGZ6M4OZ0cxkZjazmFnNbGZ2M4eZ08xl5jbzmHnNfGZ+s4BZ0CxkFjaLmEXNYmZxs4RZ0ixlljbLmGXNcmZ5s4JZ0axkVjarmFXNamZ1s4ZZ06xl1jbrmHXNemZ9s4HZ0GxkNjabmE3NZuZ/ZnOzhdnSbGW2NtuYbc12Znuzg9nR7GR2NruYXc1uZnezh9nT7GX2NvuYfc1+Zn9zgDnQHGQONoeYQ81h5nBzhDnSHGWONseYY81x5nhzghlnTjQnmZPNKeZUc5o53ZxhzjRnmbPNOeZcc54531xgLjQXmYvNeHOJmWAuNRPNZWaSudxcYa40V5mrzTXmWnOdud7cYG40N5mbzS3mVhMzcZMwSZMyaZMxWZMzeVMwRVMyZVMxVVMzddMwTdMybdMxXdMzfTMwQzMygQlNZMbMbeZ2c4e509xl7jb3mHvNfeZ+84B50DxkHjaPmEfNY+Zx84R50jxlnjbPmGfNc+Z584J50bxkXjavmFfNa+Z184Z507xl3jbvmHfNe+Z984H50HxkPjafmE/NZ+Zz84X50nxlvjbfmG/Nd+Z784P50fxkfja/mF/Nb+Z384f50/xl/jb/mH/Nf2YyK7mVwkpppbJSW2mstFY6K72VwcpoZbIyW1msrFY2K7uVw8pp5bJyW3msvFY+K79VwCpoFbIKW0WsolYxq7hVwipplbJKW2WsslY5q7xVwapoVbIqW1WsqlY1q7pVw6pp1bJqW3WsulY9q77VwGpoNbIaW02splYz6z+rudXCamm1slpbbay2VjurvdXB6mh1sjpbXayuVjeru9XD6mn1snpbfay+Vj+rvzXAGmgNsgZbQ6yh1jBruDXCGmmNskZbY6yx1jhrvDXBirMmWpOsydYUa6o1zZpuzbBmWrOs2dYca641z5pvLbAWWousxVa8tcRKsJZaidYyK8labq2wVlqrrNXWGmuttc5ab22wNlqbrM3WFmurhVm4RVikRVm0xVisxVm8JViiJVmypViqpVm6ZVimZVm25Viu5Vm+FVihFVnAghayYtY2a7u1w9pp7bJ2W3usvdY+a791wDpoHbIOW0eso9Yx67h1wjppnbJOW2ess9Y567x1wbpoXbIuW1esq9Y167p1w7pp3bJuW3esu9Y96771wHpoPbIeW0+sp9Yz67n1wnppvbJeW2+st9Y76731wfpofbI+W1+sr9Y367v1w/pp/bJ+W3+sv9Y/K5md3E5hp7RT2antNHZaO52d3s5gZ7Qz2ZntLHZWO5ud3c5h57Rz2bntPHZeO5+d3y5gF7QL2YXtInZRu5hd3C5hl7RL2aXtMnZZu5xd3q5gV7Qr2ZXtKnZVu5pd3a5h17Rr2bXtOnZdu55d325gN7Qb2Y3tJnZTu5n9n93cbmG3tFvZre02dlu7nd3e7mB3tDvZne0udle7m93d7mH3tHvZve0+dl+7n93fHmAPtAfZg+0h9lB7mD3cHmGPtEfZo+0x9lh7nD3enmDH2RPtSfZke4o91Z5mT7dn2DPtWfZse449155nz7cX2AvtRfZiO95eYifYS+1Ee5mdZC+3V9gr7VX2anuNvdZeZ6+3N9gb7U32ZnuLvdXGbNwmbNKmbNpmbNbmbN4WbNGWbNlWbNXWbN02bNO2bNt2bNf2bN8O7NCObGBDG9kxe5u93d5h77R32bvtPfZee5+93z5gH7QP2YftI/ZR+5h93D5hn7RP2aftM/ZZ+5x93r5gX7Qv2ZftK/ZV+5p93b5h37Rv2bftO/Zd+559335gP7Qf2Y/tJ/ZT+5n93H5hv7Rf2a/tN/Zb+5393v5gf7Q/2Z/tL/ZX+5v93f5h/7R/2b/tP/Zf+5+dzEnupHBSOqmc1E4aJ62TzknvZHAyOpmczE4WJ6uTzcnu5HByOrmc3E4eJ6+Tz8nvFHAKOoWcwk4Rp6hTzCnulHBKOqWc0k4Zp6xTzinvVHAqOpWcyk4Vp6pTzanu1HBqOrWc2k4dp65Tz6nvNHAaOo2cxk4Tp6nTzPnPae60cFo6rZzWThunrdPOae90cDo6nZzOThenq9PN6e70cHo6vZzeTh+nr9PP6e8McAY6g5zBzhBnqDPMGe6McEY6o5zRzhhnrDPOGe9McOKcic4kZ7IzxZnqTHOmOzOcmc4sZ7Yzx5nrzHPmOwuchc4iZ7ET7yxxEpylTqKzzElyljsrnJXOKme1s8ZZ66xz1jsbnI3OJmezs8XZ6mAO7hAO6VAO7TAO63AO7wiO6EiO7CiO6miO7hiO6ViO7TiO63iO7wRO6EQOcKCDnJizzdnu7HB2Oruc3c4eZ6+zz9nvHHAOOoecw84R56hzzDnunHBOOqec084Z56xzzjnvXHAuOpecy84V56pzzbnu3HBuOrec284d565zz7nvPHAeOo+cx84T56nzzHnuvHBeOq+c184b563zznnvfHA+Op+cz84X56vzzfnu/HB+Or+c384f56/zz0nmJndTuCndVG5qN42b1k3npnczuBndTG5mN4ub1c3mZndzuDndXG5uN4+b183n5ncLuAXdQm5ht4hb1C3mFndLuCXdUm5pt4xb1i3nlncruBXdSm5lt4pb1a3mVndruDXdWm5tt45b163n1ncbuA3dRm5jt4nb1G3m/uc2d1u4Ld1Wbmu3jdvWbee2dzu4Hd1Obme3i9vV7eZ2d3u4Pd1ebm+3j9vX7ef2dwe4A91B7mB3iDvUHeYOd0e4I91R7mh3jDvWHeeOdye4ce5Ed5I72Z3iTnWnudPdGe5Md5Y7253jznXnufPdBe5Cd5G72I13l7gJ7lI30V3mJrnL3RXuSneVu9pd465117nr3Q3uRneTu9nd4m51MRd3CZd0KZd2GZd1OZd3BVd0JVd2FVd1NVd3Ddd0Ldd2Hdd1Pdd3Azd0Ixe40EVuzN3mbnd3uDvdXe5ud4+7193n7ncPuAfdQ+5h94h71D3mHndPuCfdU+5p94x71j3nnncvuBfdS+5l94p71b3mXndvuDfdW+5t9457173n3ncfuA/dR+5j94n71H3mPndfuC/dV+5r94371n3nvnc/uB/dT+5n94v71f3mfnd/uD/dX+5v94/71/3nJvOSeym8lF4qL7WXxkvrpfPSexm8jF4mL7OXxcvqZfOyezm8nF4uL7eXx8vr5fPyewW8gl4hr7BXxCvqFfOKeyW8kl4pr7RXxivrlfPKexW8il4lr7JXxavqVfOqezW8ml4tr7ZXx6vr1fPqew28hl4jr7HXxGvqNfP+85p7LbyWXiuvtdfGa+u189p7HbyOXievs9fF6+p187p7PbyeXi+vt9fH6+v18/p7A7yB3iBvsDfEG+oN84Z7I7yR3ihvtDfGG+uN88Z7E7w4b6I3yZvsTfGmetO86d4Mb6Y3y5vtzfHmevO8+d4Cb6G3yFvsxXtLvARvqZfoLfOSvOXeCm+lt8pb7a3x1nrrvPXeBm+jt8nb7G3xtnqYh3uER3qUR3uMx3qcx3uCJ3qSJ3uKp3qap3uGZ3qWZ3uO53qe53uBF3qRBzzoIS/mbfO2ezu8nd4ub7e3x9vr7fP2ewe8g94h77B3xDvqHfOOeye8k94p77R3xjvrnfPOexe8i94l77J3xbvqXfOueze8m94t77Z3x7vr3fPuew+8h94j77H3xHvqPfOeey+8l94r77X3xnvrvfPeex+8j94n77P3xfvqffO+ez+8n94v77f3x/vr/fOS+cn9FH5KP5Wf2k/jp/XT+en9DH5GP5Of2c/iZ/Wz+dn9HH5OP5ef28/j5/Xz+fn9An5Bv5Bf2C/iF/WL+cX9En5Jv5Rf2i/jl/XL+eX9Cn5Fv5Jf2a/iV/Wr+dX9Gn5Nv5Zf26/j1/Xr+fX9Bn5Dv5Hf2G/iN/Wb+f/5zf0Wfku/ld/ab+O39dv57f0Ofke/k9/Z7+J39bv53f0efk+/l9/b7+P39fv5/f0B/kB/kD/YH+IP9Yf5w/0R/kh/lD/aH+OP9cf54/0Jfpw/0Z/kT/an+FP9af50f4Y/05/lz/bn+HP9ef58f4G/0F/kL/bj/SV+gr/UT/SX+Un+cn+Fv9Jf5a/21/hr/XX+en+Dv9Hf5G/2t/hbfczHfcInfcqnfcZnfc7nfcEXfcmXfcVXfc3XfcM3fcu3fcd3fc/3/cAP/cgHPvSRH/O3+dv9Hf5Of5e/29/j782azN/vH/AP+of8w/4R/6h/zD/un/BP+qf80/4Z/6x/zj/vX/Av+pf8y/4V/6p/zb/u3/Bv+rf82/4d/65/z7/vP/Af+o/8x/4T/6n/zH/uv/Bf+q/81/4b/63/zn/vf/A/+p/8z/4X/6v/zf/u//B/+r/83/4f/6//z08WJA9SBCmDVEHqIE2QNkgXpA8yBBmDTEHmIEuQNcgWZA9yBDmDXEHuIE+QN8gX5A8KBAWDQkHhoEhQNCgWFA9KBCWDUkHpoExQNigXlA8qBBWDSkHloEpQNagWVA9qBDWDWkHtoE5QN6gX1A8aBA2DRkHjoEnQNGgW/Bc0D1oELYNWQeugTdA2aBe0DzoEHYNOQeegS9A16BZ0D3oEPYNeQe+gT9A36Bf0DwYEA4NBweBgSDA0GBYMD0YEI4NRwehgTDA2GBeMDyYEccHEYFIwOZgSTA2mBdODGcHMYFYwO5gTzA3mBfODBcHCYFGwOIgPlgQJwdIgMVgWJAXLgxXBymBVsDpYE6wN1gXrgw3BxmBTsDnYEmwNsAAPiIAMqIAOmIANuIAPhEAMpEAOlEANtEAPjMAMrMAOnMANvMAPgiAMogAEMEBBLNgWbA92BDuDXcHuYE+wN9gX7A8OBAeDQ8Hh4EhwNDgWHA9OBCeDU8Hp4ExwNjgXnA8uBBeDS8Hl4EpwNbgWXA9uBDeDW8Ht4E5wN7gX3A8eBA+DR8Hj4EnwNHgWPA9eBC+DV8Hr4E3wNngXvA8+BB+DT8Hn4EvwNfgWfA9+BD+DX8Hv4E/wN/gXJAuThynClGGqMHWYJkwbpgvThxnCjGGmMHOYJcwaZguzhznCnGGuMHeYJ8wb5gvzhwXCgmGhsHBYJCwaFguLhyXCkmGpsHRYJiwblgvLhxXCimGlsHJYJawaVgurhzXCmmGtsHZYJ6wb1gvrhw3ChmGjsHHYJGwaNgv/C5uHLcKWYauwddgmbBu2C9uHHcKOYaewc9gl7Bp2C7uHPcKeYa+wd9gn7Bv2C/uHA8KB4aBwcDgkHBoOC4eHI8KR4ahwdDgmHBuOC8eHE8K4cGI4KZwcTgmnhtPC6eGMcGY4K5wdzgnnhvPC+eGCcGG4KFwcxodLwoRwaZgYLguTwuXhinBluCpcHa4J14brwvXhhnBjuCncHG4Jt4ZYiIdESIZUSIdMyIZcyIdCKIZSKIdKqIZaqIdGaIZWaIdO6IZe6IdBGIZRCEIYojAWbgu3hzvCneGucHe4J9wb7gv3hwfCg+Gh8HB4JDwaHguPhyfCk+Gp8HR4JjwbngvPhxfCi+Gl8HJ4JbwaXguvhzfCm+Gt8HZ4J7wb3gvvhw/Ch+Gj8HH4JHwaPgufhy/Cl+Gr8HX4Jnwbvgvfhx/Cj+Gn8HP4Jfwafgu/hz/Cn+Gv8Hf4J/wb/guTRcmjFFHKKFWUOkoTpY3SRemjDFHGKFOUOcoSZY2yRdmjHFHOKFeUO8oT5Y3yRfmjAlHBqFBUOCoSFY2KRcWjElHJqFRUOioTlY3KReWjClHFqFJUOaoSVY2qRdWjGlHNqFZUO6oT1Y3qRfWjBlHDqFHUOGoSNY2aRf9FzaMWUcuoVdQ6ahO1jdpF7aMOUceoU9Q56hJ1jbpF3aMeUc+oV9Q76hP1jfpF/aMB0cBoUDQ4GhINjYZFw6MR0choVDQ6GhONjcZF46MJUVw0MZoUTY6mRFOjadH0aEY0M5oVzY7mRHOjedH8aEG0MFoULY7ioyVRQrQ0SoyWRUnR8mhFtDJaFa2O1kRro3XR+mhDtDHaFG2OtkRbIyzCIyIiIyqiIyZiIy7iIyESIymSIyVSIy3SIyMyIyuyIydyIy/yoyAKoygCEYxQFIu2RdujHdHOaFe0O9oT7Y32RfujA9HB6FB0ODoSHY2ORcejE9HJ6FR0OjoTnY3OReejC9HF6FJ0OboSXY2uRdejG9HN6FZ0O7oT3Y3uRfejB9HD6FH0OHoSPY2eRc+jF9HL6FX0OnoTvY3eRe+jD9HH6FP0OfoSfY2+Rd+jH9HP6Ff0O/oT/Y3+RclAcpACpASpQGqQBqQF6UB6kAFkBJlAZpAFZAXZQHaQA+QEuUBukAfkBflAflAAFASFQGFQBBQFxUBxUAKUBKVAaVAGlAXlQHlQAVQElUBlUAVUBdVAdVAD1AS1QG1QB9QF9UB90AA0BI1AY9AENAXNwH+gOWgBWoJWoDVoA9qCdqA96AA6gk6gM+gCuoJuoDvoAXqCXqA36AP6gn6gPxgABoJBYDAYAoaCYWA4GAFGglFgNBgDxoJxYDyYAOLARDAJTAZTwFQwDUwHM8BMMAvMBnPAXDAPzAcLwEKwCCwG8WAJSABLQSJYBpLAcrACrASrwGqwBqwF68B6sAFsBJvAZrAFbAUYwAEBSEABGjCABRzggQBEIAEZKEAFGtCBAUxgARs4wAUe8EEAQhABACBAIAa2ge1gB9gJdoHdYA/YC/aB/eAAOAgOgcPgCDgKjoHj4AQ4CU6B0+AMOAvOgfPgArgILoHL4Aq4Cq6B6+AGuAlugdvgDrgL7oH74AF4CB6Bx+AJeAqegefgBXgJXoHX4A14C96B9+AD+Ag+gc/gC/gKvoHv4Af4CX6B3+AP+Av+gWQwOUwBU8JUMDVMA9PCdDA9zAAzwkwwM8wCs8JsMDvMAXPCXDA3zAPzwnwwPywAC8JCsDAsAovCYrA4LAFLwlKwNCwDy8JysDysACvCSrAyrAKrwmqwOqwBa8JasDasA+vCerA+bAAbwkawMWwCm8Jm8D/YHLaALWEr2Bq2gW1hO9gedoAdYSfYGXaBXWE32B32gD1hL9gb9oF9YT/YHw6AA+EgOBgOgUPhMDgcjoAj4Sg4Go6BY+E4OB5OgHFwIpwEJ8MpcCqcBqfDGXAmnAVnwzlwLpwH58MFcCFcBBfDeLgEJsClMBEug0lwOVwBV8JVcDVcA9fCdXA93AA3wk1wM9wCt0IM4pCAJKQgDRnIQg7yUIAilKAMFahCDerQgCa0oA0d6EIP+jCAIYwggBAiGIPb4Ha4A+6Eu+BuuAfuhfvgfngAHoSH4GF4BB6Fx+BxeAKehKfgaXgGnoXn4Hl4AV6El+BleAVehdfgdXgD3oS34G14B96F9+B9+AA+hI/gY/gEPoXP4HP4Ar6Er+Br+Aa+he/ge/gBfoSf4Gf4BX6F3+B3+AP+hL/gb/gH/oX/YDKUHKVAKVEqlBqlQWlROpQeZUAZUSaUGWVBWVE2lB3lQDlRLpQb5UF5UT6UHxVABVEhVBgVQUVRMVQclUAlUSlUGpVBZVE5VB5VQBVRJVQZVUFVUTVUHdVANVEtVBvVQXVRPVQfNUANUSPUGDVBTVEz9B9qjlqglqgVao3aoLaoHWqPOqCOqBPqjLqgrqgb6o56oJ6oF+qN+qC+qB/qjwaggWgQGoyGoKFoGBqORqCRaBQajcagsWgcGo8moDg0EU1Ck9EUNBVNQ9PRDDQTzUKz0Rw0F81D89ECtBAtQotRPFqCEtBSlIiWoSS0HK1AK9EqtBqtQWvROrQebUAb0Sa0GW1BWxGGcEQgElGIRgxiEYd4JCARSUhGClKRhnRkIBNZyEYOcpGHfBSgEEUIIIgQiqFtaDvagXaiXWg32oP2on1oPzqADqJD6DA6go6iY+g4OoFOolPoNDqDzqJz6Dy6gC6iS+gyuoKuomvoOrqBbqJb6Da6g+6ie+g+eoAeokfoMXqCnqJn6Dl6gV6iV+g1eoPeonfoPfqAPqJP6DP6gr6ib+g7+oF+ol/oN/qD/qJ/KFkseSxFLGUsVSx1LE0sbSxdLH0sQyxjLFMscyxLLGssWyx7LEcsZyxXLHcsTyxvLF8sf6xArGCsUKxwrEisaKxYrHisRKxkrFSsdKxMrGysXKx8rEKsYqxSrHKsSqxqrFqseqxGrGasVqx2rE6sbqxerH6sQaxhrFGscaxJrGmsWey/WPNYi1jLWKtY61ibWNtYu1j7WIdYx1inWOdYl1jXWLdY91iPWM9Yr1jvWJ9Y31i/WP/YgNjA2KDY4NiQ2NDYsNjw2IjYyNio2Oj/CYAHQDFuAACg669t27Zt27Zt27ZtW2fbSnK1bVt72HBsBDYSG4WNxsZgY7Fx2HhsAjYRm4RNxqZgU7Fp2HRsBjYTm4XNxuZgc7F52HxsAbYQW4QtxpZgS7Fl2HJsBbYSW4WtxtZga7F12HpsA7YR24RtxrZgW7Ft2HZsB7YT24XtxvZge7F92H7sAHYQO4Qdxo5gR7Fj2HHsBHYSO4Wdxs5gZ7Fz2HnsAnYRu4Rdxq5gVzEMwzECIzEKozEGYzEO4zEBEzEJkzEFUzEN0zEDMzELszEHczEP87EAC7EIAxjEEBZj17Dr2A3sJnYLu43dwe5i97D72APsIfYIe4w9wZ5iz7Dn2AvsJfYKe429wd5i77D32AfsI/YJ+4x9wb5i37Dv2A/sJ/YL+439wf5i/7D/8ER4Ap4YT4InxZPhyfEUeEo8FZ4aT4OnxdPh6fEMeEY8E54Zz4JnxbPh2fEceE48F54bz4PnxfPh+fECeEG8EF4YL4IXxYvhxfESeEm8FF4aL4OXxcvh5fEKeEW8El4Zr4JXxavh1fEaeE28Fl4br4PXxevh9fEGeEO8Ed4Yb4I3xZvhzfEWeEu8Fd4ab4O3xdvh7fEOeEe8E94Z74J3xbvh3fEeeE+8F94b74P3xfvh/fEB+EB8ED4YH4IPxYfhw/ER+Eh8FD4aH4OPxcfh4/EJ+ER8Ej4Zn4JPxafh0/EZ+Ex8Fj4bn4PPxefh8/EF+EJ8Eb4YX4IvxZfhy/EV+Ep8Fb4aX4Ovxdfh6/EN+EZ8E74Z34Jvxbfh2/Ed+E58F74b34Pvxffh+/ED+EH8EH4YP4IfxY/hx/ET+En8FH4aP4Ofxc/h5/EL+EX8En4Zv4JfxTEcxwmcxCmcxhmcxTmcxwVcxCVcxhVcxTVcxw3cxC3cxh3cxT3cxwM8xCMc4BBHeIxfw6/jN/Cb+C38Nn4Hv4vfw+/jD/CH+CP8Mf4Ef4o/w5/jL/CX+Cv8Nf4Gf4u/w9/jH/CP+Cf8M/4F/4p/w7/jP/Cf+C/8N/4H/4v/w/8jEhEJRGIiCZGUSEYkJ1IQKYlURGoiDZGWSEekJzIQGYlMRGYiC5GVyEZkJ3IQOYlcRG4iD5GXyEfkJwoQBYlCRGGiCFGUKEYUJ0oQJYlSRGmiDFGWKEeUJyoQFYlKRGWiClGVqEZUJ2oQNYlaRG2iDlGXqEfUJxoQDYlGRGOiCdGUaEY0J1oQLYlWRGuiDdGWaEe0JzoQHYlORGeiC9GV6EZ0J3oQPYleRG+iD9GX6Ef0JwYQA4lBxGBiCDGUGEYMJ0YQI4lRxGhiDDGWGEeMJyYQE4lJxGRiCjGVmEZMJ2YQM4lZxGxiDjGXmEfMJxYQC4lFxGJiCbGUWEYsJ1YQK4lVxGpiDbGWWEesJzYQG4lNxGZiC7GV2EZsJ3YQO4ldxG5iD7GX2EfsJw4QB4lDxGHiCHGUOEYcJ04QJ4lTxGniDHGWOEecJy4QF4lLxGXiCnGVwAicIAiSoAiaYAiW4AieEAiRkAiZUAiV0AidMAiTsAibcAiX8AifCIiQiAhAQAIRMXGNuE7cIG4St4jbxB3iLnGPuE88IB4Sj4jHxBPiKfGMeE68IF4Sr4jXxBviLfGOeE98ID4Sn4jPxBfiK/GN+E78IH4Sv4jfxB/iL/GP+I9MRCaQickkZFIyGZmcTEGmJFORqck0ZFoyHZmezEBmJDORmcksZFYyG5mdzEHmJHORuck8ZF4yH5mfLEAWJAuRhckiZFGyGFmcLEGWJEuRpckyZFmyHFmerEBWJCuRlckqZFWyGlmdrEHWJGuRtck6ZF2yHlmfbEA2JBuRjckmZFOyGdmcbEG2JFuRrck2ZFuyHdme7EB2JDuRnckuZFeyG9md7EH2JHuRvck+ZF+yH9mfHEAOJAeRg8kh5FByGDmcHEGOJEeRo8kx5FhyHDmenEBOJCeRk8kp5FRyGjmdnEHOJGeRs8k55FxyHjmfXEAuJBeRi8kl5FJyGbmcXEGuJFeRq8k15FpyHbme3EBuJDeRm8kt5FZyG7md3EHuJHeRu8k95F5yH7mfPEAeJA+Rh8kj5FHyGHmcPEGeJE+Rp8kz5FnyHHmevEBeJC+Rl8kr5FUSI3GSIEmSImmSIVmSI3lSIEVSImVSIVVSI3XSIE3SIm3SIV3SI30yIEMyIgEJSUTG5DXyOnmDvEneIm+Td8i75D3yPvmAfEg+Ih+TT8in5DPyOfmCfEm+Il+Tb8i35DvyPfmB/Eh+Ij+TX8iv5DfyO/mD/En+In+Tf8i/5D/yPyoRlUAlppJQSalkVHIqBZWSSkWlptJQaal0VHoqA5WRykRlprJQWalsVHYqB5WTykXlpvJQeal8VH6qAFWQKkQVpopQRaliVHGqBFWSKkWVpspQZalyVHmqAlWRqkRVpqpQValqVHWqBlWTqkXVpupQdal6VH2qAdWQakQ1pppQTalmVHOqBdWSakW1ptpQbal2VHuqA9WR6kR1prpQXaluVHeqB9WT6kX1pvpQfal+VH9qADWQGkQNpoZQQ6lh1HBqBDWSGkWNpsZQY6lx1HhqAjWRmkRNpqZQU6lp1HRqBjWTmkXNpuZQc6l51HxqAbWQWkQtppZQS6ll1HJqBbWSWkWtptZQa6l11HpqA7WR2kRtprZQW6lt1HZqB7WT2kXtpvZQe6l91H7qAHWQOkQdpo5QR6lj1HHqBHWSOkWdps5QZ6lz1HnqAnWRukRdpq5QVymMwimCIimKoimGYimO4imBEimJkimFUimN0imDMimLsimHcimP8qmACqmIAhSkEBVT16jr1A3qJnWLuk3doe5S96j71APqIfWIekw9oZ5Sz6jn1AvqJfWKek29od5S76j31AfqI/WJ+kx9ob5S36jv1A/qJ/WL+k39of5S/6j/6ER0Ap2YTkInpZPRyekUdEo6FZ2aTkOnpdPR6ekMdEY6E52ZzkJnpbPR2ekcdE46F52bzkPnpfPR+ekCdEG6EF2YLkIXpYvRxekSdEm6FF2aLkOXpcvR5ekKdEW6El2ZrkJXpavR1ekadE26Fl2brkPXpevR9ekGdEO6Ed2YbkI3pZvRzekWdEu6Fd2abkO3pdvR7ekOdEe6E92Z7kJ3pbvR3ekedE+6F92b7kP3pfvR/ekB9EB6ED2YHkIPpYfRw+kR9Eh6FD2aHkOPpcfR4+kJ9ER6Ej2ZnkJPpafR0+kZ9Ex6Fj2bnkPPpefR8+kF9EJ6Eb2YXkIvpZfRy+kV9Ep6Fb2aXkOvpdfR6+kN9EZ6E72Z3kJvpbfR2+kd9E56F72b3kPvpffR++kD9EH6EH2YPkIfpY/Rx+kT9En6FH2aPkOfpc/R5+kL9EX6En2ZvkJfpTEapwmapCmaphmapTmapwVapCVaphVapTVapw3apC3aph3apT3apwM6pCMa0JBGdExfo6/TN+ib9C36Nn2Hvkvfo+/TD+iH9CP6Mf2Efko/o5/TL+iX9Cv6Nf2Gfku/o9/TH+iP9Cf6M/2F/kp/o7/TP+if9C/6N/2H/kv/o/9jEjEJTGImCZOUScYkZ1IwKZlUTGomDZOWScekZzIwGZlMTGYmC5OVycZkZ3IwOZlcTG4mD5OXycfkZwowBZlCTGGmCFOUKcYUZ0owJZlSTGmmDFOWKceUZyowFZlKTGWmClOVqcZUZ2owNZlaTG2mDlOXqcfUZxowDZlGTGOmCdOUacY0Z1owLZlWTGumDdOWace0ZzowHZlOTGemC9OV6cZ0Z3owPZleTG+mD9OX6cf0ZwYwA5lBzGBmCDOUGcYMZ0YwI5lRzGhmDDOWGceMZyYwE5lJzGRmCjOVmcZMZ2YwM5lZzGxmDjOXmcfMZxYwC5lFzGJmCbOUWcYsZ1YwK5lVzGpmDbOWWcesZzYwG5lNzGZmC7OV2cZsZ3YwO5ldzG5mD7OX2cfsZw4wB5lDzGHmCHOUOcYcZ04wJ5lTzGnmDHOWOcecZy4wF5lLzGXmCnOVwRicIRiSoRiaYRiW4RieERiRkRiZURiV0RidMRiTsRibcRiX8RifCZiQiRjAQAYxMXONuc7cYG4yt5jbzB3mLnOPuc88YB4yj5jHzBPmKfOMec68YF4yr5jXzBvmLfOOec98YD4yn5jPzBfmK/ON+c78YH4yv5jfzB/mL/OP+Y9NxCawidkkbFI2GZucTcGmZFOxqdk0bFo2HZuezcBmZDOxmdksbFY2G5udzcHmZHOxudk8bF42H5ufLcAWZAuxhdkibFG2GFucLcGWZEuxpdkybFm2HFuercBWZCuxldkqbFW2GludrcHWZGuxtdk6bF22HlufbcA2ZBuxjdkmbFO2GducbcG2ZFuxrdk2bFu2Hdue7cB2ZDuxndkubFe2G9ud7cH2ZHuxvdk+bF+2H9ufHcAOZAexg9kh7FB2GDucHcGOZEexo9kx7Fh2HDuencBOZCexk9kp7FR2GjudncHOZGexs9k57Fx2HjufXcAuZBexi9kl7FJ2GbucXcGuZFexq9k17Fp2Hbue3cBuZDexm9kt7FZ2G7ud3cHuZHexu9k97F52H7ufPcAeZA+xh9kj7FH2GHucPcGeZE+xp9kz7Fn2HHuevcBeZC+xl9kr7FUWY3GWYEmWYmmWYVmWY3lWYEVWYmVWYVVWY3XWYE3WYm3WYV3WY302YEM2YgELWcTG7DX2OnuDvcneYm+zd9i77D32PvuAfcg+Yh+zT9in7DP2OfuCfcm+Yl+zb9i37Dv2PfuB/ch+Yj+zX9iv7Df2O/uD/cn+Yn+zf9i/7D/2Py4Rl8Al5pJwSblkXHIuBZeSS8Wl5tJwabl0XHouA5eRy8Rl5rJwWblsXHYuB5eTy8Xl5vJwebl8XH6uAFeQK8QV5opwRbliXHGuBFeSK8WV5spwZblyXHmuAleRq8RV5qpwVblqXHWuBleTq8XV5upwdbl6XH2uAdeQa8Q15ppwTblmXHOuBdeSa8W15tpwbbl2XHuuA9eR68R15rpwXbluXHeuB9eT68X15vpwfbl+XH9uADeQG8QN5oZwQ7lh3HBuBDeSG8WN5sZwY7lx3HhuAjeRm8RN5qZwU7lp3HRuBjeTm8XN5uZwc7l53HxuAbeQW8Qt5pZwS7ll3HJuBbeSW8Wt5tZwa7l13HpuA7eR28Rt5rZwW7lt3HZuB7eT28Xt5vZwe7l93H7uAHeQO8Qd5o5wR7lj3HHuBHeSO8Wd5s5wZ7lz3HnuAneRu8Rd5q5wVzmMwzmCIzmKozmGYzmO4zmBEzmJkzmFUzmN0zmDMzmLszmHczmP87mAC7mIAxzkEBdz17jr3A3uJneLu83d4e5y97j73APuIfeIe8w94Z5yz7jn3AvuJfeKe8294d5y77j33AfuI/eJ+8x94b5y37jv3A/uJ/eL+8394f5y/7j/+ER8Ap+YT8In5ZPxyfkUfEo+FZ+aT8On5dPx6fkMfEY+E5+Zz8Jn5bPx2fkcfE4+F5+bz8Pn5fPx+fkCfEG+EF+YL8IX5YvxxfkSfEm+FF+aL8OX5cvx5fkKfEW+El+Zr8JX5avx1fkafE2+Fl+br8PX5evx9fkGfEO+Ed+Yb8I35ZvxzfkWfEu+Fd+ab8O35dvx7fkOfEe+E9+Z78J35bvx3fkefE++F9+b78P35fvx/fkB/EB+ED+YH8IP5Yfxw/kR/Eh+FD+aH8OP5cfx4/kJ/ER+Ej+Zn8JP5afx0/kZ/Ex+Fj+bn8PP5efx8/kF/EJ+Eb+YX8Iv5Zfxy/kV/Ep+Fb+aX8Ov5dfx6/kN/EZ+E7+Z38Jv5bfx2/kd/E5+F7+b38Pv5ffx+/kD/EH+EH+YP8If5Y/xx/kT/En+FH+aP8Of5c/x5/kL/EX+En+Zv8Jf5TEe5wme5Cme5hme5Tme5wVe5CVe5hVe5TVe5w3e5C3e5h3e5T3e5wM+5CMe8JBHfMxf46/zN/ib/C3+Nn+Hv8vf4+/zD/iH/CP+Mf+Ef8o/45/zL/iX/Cv+Nf+Gf8u/49/zH/iP/Cf+M/+F/8p/47/zP/if/C/+N/+H/8v/4/8TEgkJQmIhiZBUSCYkF1IIKYVUQmohjZBWSCekFzIIGYVMQmYhi5BVyCZkF3IIOYVcQm4hj5BXyCfkFwoIBYVCQmGhiFBUKCYUF0oIJYVSQmmhjFBWKCeUFyoIFYVKQmWhilBVqCZUF2oINYVaQm2hjlBXqCfUFxoIDYVGQmOhidBUaCY0F1oILYVWQmuhjdBWaCe0FzoIHYVOQmehi9BV6CZ0F3oIPYVeQm+hj9BX6Cf0FwYIA4VBwmBhiDBUGCYMF0YII4VRwmhhjDBWGCeMFyYIE4VJwmRhijBVmCZMF2YIM4VZwmxhjjBXmCfMFxYIC4VFwmJhibBUWCYsF1YIK4VVwmphjbBWWCesFzYIG4VNwmZhi7BV2CZsF3YIO4Vdwm5hj7BX2CfsFw4IB4VDwmHhiHBUOCYcF04IJ4VTwmnhjHBWOCecFy4IF4VLwmXhinBVwARcIARSoARaYARW4AReEARRkARZUARV0ARdMARTsARbcARX8ARfCIRQiAQgQAEJsXBNuC7cEG4Kt4Tbwh3hrnBPuC88EB4Kj4THwhPhqfBMeC68EF4Kr4TXwhvhrfBOeC98ED4Kn4TPwhfhq/BN+C78EH4Kv4Tfwh/hr/BP+E9MJCaIicUkYlIxmZhcTCGmFFOJqcU0YloxnZhezCBmFDOJmcUsYlYxm5hdzCHmFHOJucU8Yl4xn5hfLCAWFAuJhcUiYlGxmFhcLCGWFEuJpcUyYlmxnFherCBWFCuJlcUqYlWxmlhdrCHWFGuJtcU6Yl2xnlhfbCA2FBuJjcUmYlOxmdhcbCG2FFuJrcU2Yluxndhe7CB2FDuJncUuYlexm9hd7CH2FHuJvcU+Yl+xn9hfHCAOFAeJg8Uh4lBxmDhcHCGOFEeJo8Ux4lhxnDhenCBOFCeJk8Up4lRxmjhdnCHOFGeJs8U54lxxnjhfXCAuFBeJi8Ul4lJxmbhcXCGuFFeJq8U14lpxnbhe3CBuFDeJm8Ut4lZxm7hd3CHuFHeJu8U94l5xn7hfPCAeFA+Jh8Uj4lHxmHhcPCGeFE+Jp8Uz4lnxnHhevCBeFC+Jl8Ur4lURE3GREEmREmmREVmRE3lREEVREmVREVVRE3XREE3REm3REV3RE30xEEMxEoEIRSTG4jXxunhDvCneEm+Ld8S74j3xvvhAfCg+Eh+LT8Sn4jPxufhCfCm+El+Lb8S34jvxvfhB/Ch+Ej+LX8Sv4jfxu/hD/Cn+En+Lf8S/4j/xPymRlCAllpJISaVkUnIphZRSSiWlltJIaaV0Unopg5RRyiRllrJIWaVsUnYph5RTyiXllvJIeaV8Un6pgFRQKiQVlopIRaViUnGphFRSKiWVlspIZaVyUnmpglRRqiRVlqpIVaVqUnWphlRTqiXVlupIdaV6Un2pgdRQaiQ1lppITaVmUnOphdRSaiW1ltpIbaV2Unupg9RR6iR1lrpIXaVuUneph9RT6iX1lvpIfaV+Un9pgDRQGiQNloZIQ6Vh0nBphDRSGiWNlsZIY6Vx0nhpgjRRmiRNlqZIU6Vp0nRphjRTmiXNluZIc6V50nxpgbRQWiQtlpZIS6Vl0nJphbRSWiWtltZIa6V10nppg7RR2iRtlrZIW6Vt0nZph7RT2iXtlvZIe6V90n7pgHRQOiQdlo5IR6Vj0nHphHRSOiWdls5IZ6Vz0nnpgnRRuiRdlq5IVyVMwiVCIiVKoiVGYiVO4iVBEiVJkiVFUiVN0iVDMiVLsiVHciVP8qVACqVIAhKUkBRL16Tr0g3ppnRLui3dke5K96T70gPpofRIeiw9kZ5Kz6Tn0gvppfRKei29kd5K76T30gfpo/RJ+ix9kb5K36Tv0g/pp/RL+i39kf5K/6T/5ERygpxYTiInlZPJyeUUcko5lZxaTiOnldPJ6eUMckY5k5xZziJnlbPJ2eUcck45l5xbziPnlfPJ+eUCckG5kFxYLiIXlYvJxeUSckm5lFxaLiOXlcvJ5eUKckW5klxZriJXlavJ1eUack25llxbriPXlevJ9eUGckO5kdxYbiI3lZvJzeUWcku5ldxabiO3ldvJ7eUOcke5k9xZ7iJ3lbvJ3eUeck+5l9xb7iP3lfvJ/eUB8kB5kDxYHiIPlYfJw+UR8kh5lDxaHiOPlcfJ4+UJ8kR5kjxZniJPlafJ0+UZ8kx5ljxbniPPlefJ8+UF8kJ5kbxYXiIvlZfJy+UV8kp5lbxaXiOvldfJ6+UN8kZ5k7xZ3iJvlbfJ2+Ud8k55l7xb3iPvlffJ++UD8kH5kHxYPiIflY/Jx+UT8kn5lHxaPiOflc/J5+UL8kX5knxZviJflTEZlwmZlCmZlhmZlTmZlwVZlCVZlhVZlTVZlw3ZlC3Zlh3ZlT3ZlwM5lCMZyFBGcixfk6/LN+Sb8i35tnxHvivfk+/LD+SH8iP5sfxEfio/k5/LL+SX8iv5tfxGfiu/k9/LH+SP8if5s/xF/ip/k7/LP+Sf8i/5t/xH/iv/k/9TEikJSmIliZJUSaYkV1IoKZVUSmoljZJWSaekVzIoGZVMSmYli5JVyaZkV3IoOZVcSm4lj5JXyafkVwooBZVCSmGliFJUKaYUV0ooJZVSSmmljFJWKaeUVyooFZVKSmWlilJVqaZUV2ooNZVaSm2ljlJXqafUVxooDZVGSmOlidJUaaY0V1ooLZVWSmuljdJWaae0VzooHZVOSmeli9JV6aZ0V3ooPZVeSm+lj9JX6af0VwYoA5VBymBliDJUGaYMV0YoI5VRymhljDJWGaeMVyYoE5VJymRlijJVmaZMV2YoM5VZymxljjJXmafMVxYoC5VFymJlibJUWaYsV1YoK5VVympljbJWWaesVzYoG5VNymZli7JV2aZsV3YoO5Vdym5lj7JX2afsVw4oB5VDymHliHJUOaYcV04oJ5VTymnljHJWOaecVy4oF5VLymXlinJVwRRcIRRSoRRaYRRW4RReERRRkRRZURRV0RRdMRRTsRRbcRRX8RRfCZRQiRSgQAUpsXJNua7cUG4qt5Tbyh3lrnJPua88UB4qj5THyhPlqfJMea68UF4qr5TXyhvlrfJOea98UD4qn5TPyhflq/JN+a78UH4qv5Tfyh/lr/JP+U9NpCaoidUkalI1mZpcTaGmVFOpqdU0alo1nZpezaBmVDOpmdUsalY1m5pdzaHmVHOpudU8al41n5pfLaAWVAuphdUialG1mFpcLaGWVEuppdUyalm1nFperaBWVCupldUqalW1mlpdraHWVGuptdU6al21nlpfbaA2VBupjdUmalO1mdpcbaG2VFuprdU2alu1ndpe7aB2VDupndUuale1m9pd7aH2VHupvdU+al+1n9pfHaAOVAepg9Uh6lB1mDpcHaGOVEepo9Ux6lh1nDpenaBOVCepk9Up6lR1mjpdnaHOVGeps9U56lx1njpfXaAuVBepi9Ul6lJ1mbpcXaGuVFepq9U16lp1nbpe3aBuVDepm9Ut6lZ1m7pd3aHuVHepu9U96l51n7pfPaAeVA+ph9Uj6lH1mHpcPaGeVE+pp9Uz6ln1nHpevaBeVC+pl9Ur6lUVU3GVUEmVUmmVUVmVU3lVUEVVUmVVUVVVU3XVUE3VUm3VUV3VU301UEM1UoEKVaTG6jX1unpDvaneUm+rd9S76j31vvpAfag+Uh+rT9Sn6jP1ufpCfam+Ul+rb9S36jv1vfpB/ah+Uj+rX9Sv6jf1u/pD/an+Un+rf9S/6j/1Py2RlqAl1pJoSbVkWnIthZZSS6Wl1tJoabV0Wnotg5ZRy6Rl1rJoWbVsWnYth5ZTy6Xl1vJoebV8Wn6tgFZQK6QV1opoRbViWnGthFZSK6WV1spoZbVyWnmtglZRq6RV1qpoVbVqWnWthlZTq6XV1upodbV6Wn2tgdZQa6Q11ppoTbVmWnOthdZSa6W11tpobbV2Wnutg9ZR66R11rpoXbVuWneth9ZT66X11vpofbV+Wn9tgDZQG6QN1oZoQ7Vh2nBthDZSG6WN1sZoY7Vx2nhtgjZRm6RN1qZoU7Vp2nRthjZTm6XN1uZoc7V52nxtgbZQW6Qt1pZoS7Vl2nJthbZSW6Wt1tZoa7V12nptg7ZR26Rt1rZoW7Vt2nZth7ZT26Xt1vZoe7V92n7tgHZQO6Qd1o5oR7Vj2nHthHZSO6Wd1s5oZ7Vz2nntgnZRu6Rd1q5oVzVMwzVCIzVKozVGYzVO4zVBEzVJkzVFUzVN0zVDMzVLszVHczVP87VAC7VIAxrUkBZr17Tr2g3tpnZLu63d0e5q97T72gPtofZIe6w90Z5qz7Tn2gvtpfZKe6290d5q77T32gfto/ZJ+6x90b5q37Tv2g/tp/ZL+6390f5q/7T/9ER6gp5YT6In1ZPpyfUUeko9lZ5aT6On1dPp6fUMekY9k55Zz6Jn1bPp2fUcek49l55bz6Pn1fPp+fUCekG9kF5YL6IX1YvpxfUSekm9lF5aL6OX1cvp5fUKekW9kl5Zr6JX1avp1fUaek29ll5br6PX1evp9fUGekO9kd5Yb6I31ZvpzfUWeku9ld5ab6O31dvp7fUOeke9k95Z76J31bvp3fUeek+9l95b76P31fvp/fUB+kB9kD5YH6IP1Yfpw/UR+kh9lD5aH6OP1cfp4/UJ+kR9kj5Zn6JP1afp0/UZ+kx9lj5bn6PP1efp8/UF+kJ9kb5YX6Iv1Zfpy/UV+kp9lb5aX6Ov1dfp6/UN+kZ9k75Z36Jv1bfp2/Ud+k59l75b36Pv1ffp+/UD+kH9kH5YP6If1Y/px/UT+kn9lH5aP6Of1c/p5/UL+kX9kn5Zv6Jf1TEd1wmd1Cmd1hmd1Tmd1wVd1CVd1hVd1TVd1w3d1C3d1h3d1T3d1wM91CMd6FBHeqxf06/rN/Sb+i39tn5Hv6vf0+/rD/SH+iP9sf5Ef6o/05/rL/SX+iv9tf5Gf6u/09/rH/SP+if9s/5F/6p/07/rP/Sf+i/9t/5H/6v/0/8zEhkJRmIjiZHUSGYkN1IYKY1URmojjZHWSGekNzIYGY1MRmYji5HVyGZkN3IYOY1cRm4jj5HXyGfkNwoYBY1CRmGjiFHUKGYUN0oYJY1SRmmjjFHWKGeUNyoYFY1KRmWjilHVqGZUN2oYNY1aRm2jjlHXqGfUNxoYDY1GRmOjidHUaGY0N1oYLY1WRmujjdHWaGe0NzoYHY1ORmeji9HV6GZ0N3oYPY1eRm+jj9HX6Gf0NwYYA41BxmBjiDHUGGYMN0YYI41RxmhjjDHWGGeMNyYYE41JxmRjijHVmGZMN2YYM41ZxmxjjjHXmGfMNxYYC41FxmJjibHUWGYsN1YYK41VxmpjjbHWWGesNzYYG41NxmZji7HV2GZsN3YYO41dxm5jj7HX2GfsNw4YB41DxmHjiHHUOGYcN04YJ41TxmnjjHHWOGecNy4YF41LxmXjinHVwAzcIAzSoAzaYAzW4AzeEAzRkAzZUAzV0AzdMAzTsAzbcAzX8AzfCIzQiAxgQAMZsXHNuG7cMG4at4zbxh3jrnHPuG88MB4aj4zHxhPjqfHMeG68MF4ar4zXxhvjrfHOeG98MD4an4zPxhfjq/HN+G78MH4av4zfxh/jr/HP+M9MZCaYic0kZlIzmZncTGGmNFOZqc00ZloznZnezGBmNDOZmc0sZlYzm5ndzGHmNHOZuc08Zl4zn5nfLGAWNAuZhc0iZlGzmFncLGGWNEuZpc0yZlmznFnerGBWNCuZlc0qZlWzmlndrGHWNGuZtc06Zl2znlnfbGA2NBuZjc0mZlOzmdncbGG2NFuZrc02Zluzndne7GB2NDuZnc0uZlezm9nd7GH2NHuZvc0+Zl+zn9nfHGAONAeZg80h5lBzmDncHGGONEeZo80x5lhznDnenGBONCeZk80p5lRzmjndnGHONGeZs8055lxznjnfXGAuNBeZi80l5lJzmbncXGGuNFeZq8015lpznbne3GBuNDeZm80t5lZzm7nd3GHuNHeZu8095l5zn7nfPGAeNA+Zh80j5lHzmHncPGGeNE+Zp80z5lnznHnevGBeNC+Zl80r5lUTM3GTMEmTMmmTMVmTM3lTMEVTMmVTMVVTM3XTME3TMm3TMV3TM30zMEMzMoEJTWTG5jXzunnDvGneMm+bd8y75j3zvvnAfGg+Mh+bT8yn5jPzufnCfGm+Ml+bb8y35jvzvfnB/Gh+Mj+bX8yv5jfzu/nD/Gn+Mn+bf8y/5j/zPyuRlWAltpJYSa1kVnIrhZXSSmWlttJYaa10Vnorg5XRymRltrJYWa1sVnYrh5XTymXltvJYea18Vn6rgFXQKmQVtopYRa1iVnGrhFXSKmWVtspYZa1yVnmrglXRqmRVtqpYVa1qVnWrhlXTqmXVtupYda16Vn2rgdXQamQ1tppYTa1mVnOrhdXSamW1ttpYba12Vnurg9XR6mR1trpYXa1uVnerh9XT6mX1tvpYfa1+Vn9rgDXQGmQNtoZYQ61h1nBrhDXSGmWNtsZYY61x1nhrgjXRmmRNtqZYU61p1nRrhjXTmmXNtuZYc6151nxrgbXQWmQttpZYS61l1nJrhbXSWmWtttZYa6111nprg7XR2mRttrZYW61t1nZrh7XT2mXttvZYe6191n7rgHXQOmQdto5YR61j1nHrhHXSOmWdts5YZ61z1nnrgnXRumRdtq5YVy3Mwi3CIi3Koi3GYi3O4i3BEi3Jki3FUi3N0i3DMi3Lsi3Hci3P8q3ACq3IAha0kBVb16zr1g3rpnXLum3dse5a96z71gProfXIemw9sZ5az6zn1gvrpfXKem29sd5a76z31gfro/XJ+mx9sb5a36zv1g/rp/XL+m39sf5a/6z/7ER2gp3YTmIntZPZye0Udko7lZ3aTmOntdPZ6e0MdkY7k53ZzmJntbPZ2e0cdk47l53bzmPntfPZ+e0CdkG7kF3YLmIXtYvZxe0Sdkm7lF3aLmOXtcvZ5e0KdkW7kl3ZrmJXtavZ1e0adk27ll3brmPXtevZ9e0GdkO7kd3YbmI3tZvZze0Wdku7ld3abmO3tdvZ7e0Odke7k93Z7mJ3tbvZ3e0edk+7l93b7mP3tfvZ/e0B9kB7kD3YHmIPtYfZw+0R9kh7lD3aHmOPtcfZ4+0J9kR7kj3ZnmJPtafZ0+0Z9kx7lj3bnmPPtefZ8+0F9kJ7kb3YXmIvtZfZy+0V9kp7lb3aXmOvtdfZ6+0N9kZ7k73Z3mJvtbfZ2+0d9k57l73b3mPvtffZ++0D9kH7kH3YPmIftY/Zx+0T9kn7lH3aPmOftc/Z5+0L9kX7kn3ZvmJftTEbtwmbtCmbthmbtTmbtwVbtCVbthVbtTVbtw3btC3bth3btT3btwM7tCMb2NBGdmxfs6/bN+yb9i37tn3Hvmvfs+/bD+yH9iP7sf3Efmo/s5/bL+yX9iv7tf3Gfmu/s9/bH+yP9if7s/3F/mp/s7/bP+yf9i/7t/3H/mv/s/9zEjkJTmIniZPUSeYkd1I4KZ1UTmonjZPWSeekdzI4GZ1MTmYni5PVyeZkd3I4OZ1cTm4nj5PXyefkdwo4BZ1CTmGniFPUKeYUd0o4JZ1STmmnjFPWKeeUdyo4FZ1KTmWnilPVqeZUd2o4NZ1aTm2njlPXqefUdxo4DZ1GTmOnidPUaeY0d1o4LZ1WTmunjdPWaee0dzo4HZ1OTmeni9PV6eZ0d3o4PZ1eTm+nj9PX6ef0dwY4A51BzmBniDPUGeYMd0Y4I51RzmhnjDPWGeeMdyY4E51JzmRnijPVmeZMd2Y4M51ZzmxnjjPXmefMdxY4C51FzmJnibPUWeYsd1Y4K51VzmpnjbPWWeesdzY4G51NzmZni7PV2eZsd3Y4O51dzm5nj7PX2efsdw44B51DzmHniHPUOeYcd044J51TzmnnjHPWOeecdy44F51LzmXninPVwRzcIRzSoRzaYRzW4RzeERzRkRzZURzV0RzdMRzTsRzbcRzX8RzfCZzQiRzgQAc5sXPNue7ccG46t5zbzh3nrnPPue88cB46j5zHzhPnqfPMee68cF46r5zXzhvnrfPOee98cD46n5zPzhfnq/PN+e78cH46v5zfzh/nr/PP+c9N5Ca4id0kblI3mZvcTeGmdFO5qd00blo3nZvezeBmdDO5md0sblY3m5vdzeHmdHO5ud08bl43n5vfLeAWdAu5hd0iblG3mFvcLeGWdEu5pd0yblm3nFvereBWdCu5ld0qblW3mlvdreHWdGu5td06bl23nlvfbeA2dBu5jd0mblO3mdvcbeG2dFu5rd02blu3ndve7eB2dDu5nd0uble3m9vd7eH2dHu5vd0+bl+3n9vfHeAOdAe5g90h7lB3mDvcHeGOdEe5o90x7lh3nDveneBOdCe5k90p7lR3mjvdneHOdGe5s9057lx3njvfXeAudBe5i90l7lJ3mbvcXeGudFe5q9017lp3nbve3eBudDe5m90t7lZ3m7vd3eHudHe5u9097l53n7vfPeAedA+5h90j7lH3mHvcPeGedE+5p90z7ln3nHveveBedC+5l90r7lUXc3GXcEmXcmmXcVmXc3lXcEVXcmVXcVVXc3XXcE3Xcm3XcV3Xc303cEM3coELXeTG7jX3unvDvenecm+7d9y77j33vvvAfeg+ch+7T9yn7jP3ufvCfem+cl+7b9y37jv3vfvB/eh+cj+7X9yv7jf3u/vD/en+cn+7f9y/7j/3Py+Rl+Al9pJ4Sb1kXnIvhZfSS+Wl9tJ4ab10Xnovg5fRy+Rl9rJ4Wb1sXnYvh5fTy+Xl9vJ4eb18Xn6vgFfQK+QV9op4Rb1iXnGvhFfSK+WV9sp4Zb1yXnmvglfRq+RV9qp4Vb1qXnWvhlfTq+XV9up4db16Xn2vgdfQa+Q19pp4Tb1mXnOvhdfSa+W19tp4bb12Xnuvg9fR6+R19rp4Xb1uXnevh9fT6+X19vp4fb1+Xn9vgDfQG+QN9oZ4Q71h3nBvhDfSG+WN9sZ4Y71x3nhvgjfRm+RN9qZ4U71p3nRvhjfTm+XN9uZ4c7153nxvgbfQW+Qt9pZ4S71l3nJvhbfSW+Wt9tZ4a7113npvg7fR2+Rt9rZ4W71t3nZvh7fT2+Xt9vZ4e7193n7vgHfQO+Qd9o54R71j3nHvhHfSO+Wd9s54Z71z3nnvgnfRu+Rd9q54Vz3Mwz3CIz3Koz3GYz3O4z3BEz3Jkz3FUz3N0z3DMz3Lsz3Hcz3P873AC73IAx70kBd717zr3g3vpnfLu+3d8e5697z73gPvoffIe+w98Z56z7zn3gvvpffKe+298d5677z33gfvo/fJ++x98b5637zv3g/vp/fL++398f56/7z//ER+gp/YT+In9ZP5yf0Ufko/lZ/aT+On9dP56f0MfkY/k5/Zz+Jn9bP52f0cfk4/l5/bz+Pn9fP5+f0CfkG/kF/YL+IX9Yv5xf0Sfkm/lF/aL+OX9cv55f0KfkW/kl/Zr+JX9av51f0afk2/ll/br+PX9ev59f0GfkO/kd/Yb+I39Zv5zf0Wfku/ld/ab+O39dv57f0Ofke/k9/Z7+J39bv53f0efk+/l9/b7+P39fv5/f0B/kB/kD/YH+IP9Yf5w/0R/kh/lD/aH+OP9cf54/0J/kR/kj/Zn+JP9af50/0Z/kx/lj/bn+PP9ef58/0F/kJ/kb/YX+Iv9Zf5y/0V/kp/lb/aX+Ov9df56/0N/kZ/k7/Z3+Jv9bf52/0d/k5/l7/b3+Pv9ff5+/0D/kH/kH/YP+If9Y/5x/0T/kn/lH/aP+Of9c/55/0L/kX/kn/Zv+Jf9TEf9wmf9Cmf9hmf9Tmf9wVf9CVf9hVf9TVf9w3f9C3f9h3f9T3f9wM/9CMf+NBHfuxf86/7N/yb/i3/tn/Hv+vf8+/7D/yH/iP/sf/Ef+o/85/7L/yX/iv/tf/Gf+u/89/7H/yP/if/s//F/+p/87/7P/yf/i//t//H/+v/8/8LEgUJQeIgSZA0SBYkD1IEKYNUQeogTZA2SBekDzIEGYNMQeYgS5A1yJaQPcgR5AxyBbmDPEHeIF+QPygQFAwKBYWDIkHRoFhQPCgRlAxKBaWDMkHZoFxQPqgQVAwqBZWDKkHVoFpQPagR1AxqBbWDOkHdoF5QP2gQNAwaBY2DJkHToFnQPGgRtAxaBa2DNkHboF3QPugQdAw6BZ2DLkHXoFvQPegR9Ax6Bb2DPkHfoF/QPxgQDAwGBYODIcHQYFgwPBgRjAxGBaODMcHYYFwwPpgQTAwmBZODKcHUYFowPZgRzAxmBbODOcHcYF4wP1gQLAwWBYuDJcHSYFmwPFgRrAxWBauDNcHaYF2wPtgQbAw2BZuDLcHWYFuwPdgR7Ax2BbuDPcHeYF+wPzgQHAwOBYeDI8HR4FhwPDgRnAxOBaeDM8HZ4FxwPrgQXAwuBZeDK8HVAAvwgAjIgArogAnYgAv4QAjEQArkQAnUQAv0wAjMwArswAncwAv8IAjCIApAAAMUxMG14HpwI7gZ3ApuB3eCu8G94H7wIHgYPAoeB0+Cp8Gz4HnwIngZvApeB2+Ct8G74H3wIfgYfAo+B1+Cr8G34HvwI/gZ/Ap+B3+Cv8G/4L8wUZgQJg6ThEnDZGHyMEWYMkwVpg7ThGnDdGH6MEOYMcwUZg6zhFnDbGH2MEeYM8wV5g7zhHnDfGH+sEBYMCwUFg6LhEXDYmHxsERYMiwVlg7LhGXDcmH5sEJYMawUVg6rhFXDamH1sEZYM6wV1g7rhHXDemH9sEHYMGwUNg6bhE3DZmHzsEXYMmwVtg7bhG3DdmH7sEPYMewUdg67hF3DbmH3sEfYM+wV9g77hH3DfmH/cEA4MBwUDg6HhEPDYeHwcEQ4MhwVjg7HhGPDceH4cEI4MZwUTg6nhFPDaeH0cEY4M5wVzg7nhHPDeeH8cEG4MFwULg6XhEvDZeHycEW4MlwVrg7XhGvDdeH6cEO4MdwUbg63hFvDbeH2cEe4M9wV7g73hHvDfeH+8EB4MDwUHg6PhEfDY+Hx8ER4MjwVng7PhGfDc+H58EJ4MbwUXg6vhFdDLMRDIiRDKqRDJmRDLuRDIRRDKZRDJVRDLdRDIzRDK7RDJ3RDL/TDIAzDKAQhDFEYh9fC6+GN8GZ4K7wd3gnvhvfC++GD8GH4KHwcPgmfhs/C5+GL8GX4Knwdvgnfhu/C9+GH8GP4Kfwcfgm/ht/C7+GP8Gf4K/wd/gn/hv/C/6JEUUKUOEoSJY2SRcmjFFHKKFWUOkoTpY3SRemjDFHGKFOUOcoSZY2yRdmjHFHOKFeUO8oT5Y3yRfmjAlHBqFBUOCoSFY2KRcWjElHJqFRUOioTlY3KReWjClHFqFJUOaoSVY2qRdWjGlHNqFZUO6oT1Y3qRfWjBlHDqFHUOGoSNY2aRc2jFlHLqFXUOmoTtY3aRe2jDlHHqFPUOeoSdY26Rd2jHlHPqFfUO+oT9Y36Rf2jAdHAaFA0OBoSDY2GRcOjEdHIaFQ0OhoTjY3GReOjCdHEaFI0OZoSTY2mRdOjGdHMaFY0O5oTzY3mRfOjBdHCaFG0OFoSLY2WRcujFdHKaFW0OloTrY3WReujDdHGaFO0OdoSbY22RdujHdHOaFe0O9oT7Y32RfujA9HB6FB0ODoSHY2ORcejE9HJ6FR0OjoTnY3OReejC9HF6FJ0OboSXY2wCI+IiIyoiI6YiI24iI+ESIykSI6USI20SI+MyIysyI6cyI28yI+CKIyiCEQwQlEcXYuuRzeim9Gt6HZ0J7ob3YvuRw+ih9Gj6HH0JHoaPYueRy+il9Gr6HX0JnobvYveRx+ij9Gn6HP0JfoafYu+Rz+in9Gv6Hf0J/ob/Yv+A4lAAkgMkoCkIBlIDlKAlCAVSA3SgLQgHUgPMoCMIBPIDLKArCAbyA5ygJwgF8gN8oC8IB/IDwqAgqAQKAyKgKKgGCgOSoCSoBQoDcqAsqAcKA8qgIqgEqgMqoCqoBqoDmqAmqAWqA3qgLqgHqgPGoCGoBFoDJqApqAZaA5agJagFWgN2oC2oB1oDzqAjqAT6Ay6gK6gG+gOeoCeoBfoDfqAvqAf6A8GgIFgEBgMhoChYBgYDkaAkWAUGA3GgLFgHBgPJoCJYBKYDKaAqWAamA5mgJlgFpgN5oC5YB6YDxaAhWARWAyWgKVgGVgOVoCVYBVYDdaAtWAdWA82gI1gE9gMtoCtYBvYDnaAnWAX2A32gL1gH9gPDoCD4BA4DI6Ao+AYOA5OgJPgFDgNzoCz4Bw4Dy6Ai+ASuAyugKsAAzggAAkoQAMGsIADPBCACCQgAwWoQAM6MIAJLGADB7jAAz4IQAgiAAAECMTgGrgOboCb4Ba4De6Au+AeuA8egIfgEXgMnoCn4Bl4Dl6Al+AVeA3egLfgHXgPPoCP4BP4DL6Ar+Ab+A5+gJ/gF/gN/oC/4B/4DyaCCTAxTAKTwmQwOUwBU8JUMDVMA9PCdDA9zAAzwkwwM8wCs8JsMDvMAXPCXDA3zAPzwnwwPywAC8JCsDAsAovCYrA4LAFLwlKwNCwDy8JysDysACvCSrAyrAKrwmqwOqwBa8JasDasA+vCerA+bAAbwkawMWwCm8JmsDlsAVvCVrA1bAPbwnawPewAO8JOsDPsArvCbrA77AF7wl6wN+wD+8J+sD8cAAfCQXAwHAKHwmFwOBwBR8JRcDQcA8fCcXA8nAAnwklwMpwCp8JpcDqcAWfCWXA2nAPnwnlwPlwAF8JFcDFcApfCZXA5XAFXwlVwNVwD18J1cD3cADfCTXAz3AK3wm1wO9wBd8JdcDfcA/fCfXA/PAAPwkPwMDwCj8Jj8Dg8AU/CU/A0PAPPwnPwPLwAL8JL8DK8Aq9CDOKQgCSkIA0ZyEIO8lCAIpSgDBWoQg3q0IAmtKANHehCD/owgCGMIIAQIhjDa/A6vAFvwlvwNrwD78J78D58AB/CR/AxfAKfwmfwOXwBX8JX8DV8A9/Cd/A9/AA/wk/wM/wCv8Jv8Dv8AX/CX/A3/AP/wn/wP5QIJaDEKAlKipKh5CgFSolSodQoDUqL0qH0KAPKiDKhzCgLyoqyoewoB8qJcqHcKA/Ki/Kh/KgAKogKocKoCCqKiqHiqAQqiUqh0qgMKovKofKoAqqIKqHKqAqqiqqh6qgGqolqodqoDqqL6qH6qAFqiBqhxqgJaoqaoeaoBWqJWqHWqA1qi9qh9qgD6og6oc6oC+qKuqHuqAfqiXqh3qgP6ov6of5oABqIBqHBaAgaioah4WgEGolGodFoDBqLxqHxaAKaiCahyWgKmoqmoeloBpqJZqHZaA6ai+ah+WgBWogWocVoCVqKlqHlaAVaiVah1WgNWovWofVoA9qINqHNaAvairah7WgH2ol2od1oD9qL9qH96AA6iA6hw+gIOoqOoePoBDqJTqHT6Aw6i86h8+gCuoguocvoCrqKMIQjApGIQjRiEIs4xCMBiUhCMlKQijSkIwOZyEI2cpCLPOSjAIUoQgBBhFCMrqHr6Aa6iW6h2+gOuovuofvoAXqIHqHH6Al6ip6h5+gFeoleodfoDXqL3qH36AP6iD6hz+gL+oq+oe/oB/qJfqHf6A/6i/6h/+JEcUKcOE4SJ42TxcnjFHHKOFWcOk4Tp43TxenjDHHGOFOcOc4SZ42zxdnjHHHOOFecO84T543zxfnjAnHBuFBcOC4SF42LxcXjEnHJuFRcOi4Tl43LxeXjCnHFuFJcOa4SV42rxdXjGnHNuFZcO64T143rxfXjBnHDuFHcOG4SN42bxc3jFnHLuFXcOm4Tt43bxe3jDnHHuFPcOe4Sd427xd3jHnHPuFfcO+4T9437xf3jAfHAeFA8OB4SD42H/U8CPAWKrSQAAL218Wrbtm3btm3btm3bto3YNiYzqdv92IMNx0ZgI7FR2GhsDDYWG4eNxyZgE7FJ2GRsCjYVm4ZNx2ZgM7FZ2GxsDjYXm4fNxxZgC7FF2GJsCbYUW4Ytx1ZgK7FV2GpsDbYWW4etxzZgG7FN2GZsC7YV24Ztx3ZgO7Fd2G5sD7YX24ftxw5gB7FD2GHsCHYUO4Ydx05gJ7FT2GnsDHYWO4edxy5gF7FL2GXsCnYVu4Zdx25gN7Fb2G3sDnYXu4fdxx5gD7FH2GPsCfYUe4Y9x15gL7FX2GvsDfYWe4e9xz5gH7FP2GfsC/YVwzAcIzASozAaYzAW4zAeEzARkzAZUzAV0zAdMzATszAbczAX8zAfC7AQA1iEQQxhMfYN+479wH5iv7Df2B/sL/YPS8AT4YnxJHhSPBmeHE+Bp8RT4anxNHhaPB2eHs+AZ8T/wzPhmfEseFY8G54dz4HnxHPhufE8eF48H54fL4AXxAvhhfEieFG8GF4cL4GXxEvhpfEyeFm8HF4er4BXxCvhlfEqeFW8Gl4dr4HXxGvhtfE6eF28Hl4fb4A3xBvhjfEmeFO8Gd4cb4G3xFvhrfE2eFu8Hd4e74B3xDvhnfEueFe8G94d74H3xHvhvfE+eF+8H94fH4APxAfhg/Eh+FB8GD4cH4GPxEfho/Ex+Fh8HD4en4BPxCfhk/Ep+FR8Gj4dn4HPxGfhs/E5+Fx8Hj4fX4AvxBfhi/El+FJ8Gb4cX4GvxFfhq/E1+Fp8Hb4e34BvxDfhm/Et+FZ8G74d34HvxHfhu/E9+F58H74fP4AfxA/hh/Ej+FH8GH4cP4GfxE/hp/Ez+Fn8HH4ev4BfxC/hl/Er+FX8Gn4dv4HfxG/ht/E7+F38Hn4ff4A/xB/hj/En+FP8Gf4cf4G/xF/hr/E3+Fv8Hf4e/4B/xD/hn/Ev+Fccw3GcwEmcwmmcwVmcw3lcwEVcwmVcwVVcw3XcwE3cwm3cwV3cw308wEMc4BEOcYTH+Df8O/4D/4n/wn/jf/C/+D88gUhEJCaSEEmJZERyIgWRkkhFpCbSEGmJdER6IgORkfiPyERkJrIQWYlsRHYiB5GTyEXkJvIQeYl8RH6iAFGQKEQUJooQRYliRHGiBFGSKEWUJsoQZYlyRHmiAlGRqERUJqoQVYlqRHWiBlGTqEXUJuoQdYl6RH2iAdGQaEQ0JpoQTYlmRHOiBdGSaEW0JtoQbYl2RHuiA9GR6ER0JroQXYluRHeiB9GT6EX0JvoQfYl+RH9iADGQGEQMJoYQQ4lhxHBiBDGSGEWMJsYQY4lxxHhiAjGRmERMJqYQU4lpxHRiBjGTmEXMJuYQc4l5xHxiAbGQWEQsJpYQS4llxHJiBbGSWEWsJtYQa4l1xHpiA7GR2ERsJrYQW4ltxHZiB7GT2EXsJvYQe4l9xH7iAHGQOEQcJo4QR4ljxHHiBHGSOEWcJs4QZ4lzxHniAnGRuERcJq4QV4lrxHXiBnGTuEXcJu4Qd4l7xH3iAfGQeEQ8Jp4QT4lnxHPiBfGSeEW8Jt4Qb4l3xHviA/GR+ER8Jr4QXwmMwAmCIAmKoAmGYAmO4AmBEAmJkAmFUAmN0AmDMAmLsAmHcAmP8ImACAlARAQkEBET34jvxA/iJ/GL+E38If4S/4gEMhGZmExCJiWTkcnJFGRKMhWZmkxDpiXTkenJDGRG8j8yE5mZzEJmJbOR2ckcZE4yF5mbzEPmJfOR+ckCZEGyEFmYLEIWJYuRxckSZEmyFFmaLEOWJcuR5ckKZEWyElmZrEJWJauR1ckaZE2yFlmbrEPWJeuR9ckGZEOyEdmYbEI2JZuRzckWZEuyFdmabEO2JduR7ckOZEeyE9mZ7EJ2JbuR3ckeZE+yF9mb7EP2JfuR/ckB5EByEDmYHEIOJYeRw8kR5EhyFDmaHEOOJceR48kJ5ERyEjmZnEJOJaeR08kZ5ExyFjmbnEPOJeeR88kF5EJyEbmYXEIuJZeRy8kV5EpyFbmaXEOuJdeR68kN5EZyE7mZ3EJuJbeR28kd5E5yF7mb3EPuJfeR+8kD5EHyEHmYPEIeJY+Rx8kT5EnyFHmaPEOeJc+R58kL5EXyEnmZvEJeJa+R18kb5E3yFnmbvEPeJe+R98kH5EPyEfmYfEI+JZ+Rz8kX5EvyFfmafEO+Jd+R78kP5EfyE/mZ/EJ+JTESJwmSJCmSJhmSJTmSJwVSJCVSJhVSJTVSJw3SJC3SJh3SJT3SJwMyJAEZkZBEZEx+I7+TP8if5C/yN/mH/Ev+IxOoRFRiKgmVlEpGJadSUCmpVFRqKg2VlkpHpacyUBmp/6hMVGYqC5WVykZlp3JQOalcVG4qD5WXykflpwpQBalCVGGqCFWUKkYVp0pQJalSVGmqDFWWKkeVpypQFalKVGWqClWVqkZVp2pQNalaVG2qDlWXqkfVpxpQDalGVGOqCdWUakY1p1pQLalWVGuqDdWWake1pzpQHalOVGeqC9WV6kZ1p3pQPaleVG+qD9WX6kf1pwZQA6lB1GBqCDWUGkYNp0ZQI6lR1GhqDDWWGkeNpyZQE6lJ1GRqCjWVmkZNp2ZQM6lZ1GxqDjWXmkfNpxZQC6lF1GJqCbWUWkYtp1ZQK6lV1GpqDbWWWketpzZQG6lN1GZqC7WV2kZtp3ZQO6ld1G5qD7WX2kftpw5QB6lD1GHqCHWUOkYdp05QJ6lT1GnqDHWWOkedpy5QF6lL1GXqCnWVukZdp25QN6lb1G3qDnWXukfdpx5QD6lH1GPqCfWUekY9p15QL6lX1GvqDfWWeke9pz5QH6lP1GfqC/WVwiicIiiSoiiaYiiW4iieEiiRkiiZUiiV0iidMiiTsiibciiX8iifCqiQAlREQQpRMfWN+k79oH5Sv6jf1B/qL/WPSqAT0YnpJHRSOhmdnE5Bp6RT0anpNHRaOh2dns5AZ6T/ozPRmeksdFY6G52dzkHnpHPRuek8dF46H52fLkAXpAvRhekidFG6GF2cLkGXpEvRpekydFm6HF2erkBXpCvRlekqdFW6Gl2drkHXpGvRtek6dF26Hl2fbkA3pBvRjekmdFO6Gd2cbkG3pFvRrek2dFu6Hd2e7kB3pDvRnekudFe6G92d7kH3pHvRvek+dF+6H92fHkAPpAfRg+kh9FB6GD2cHkGPpEfRo+kx9Fh6HD2enkBPpCfRk+kp9FR6Gj2dnkHPpGfRs+k59Fx6Hj2fXkAvpBfRi+kl9FJ6Gb2cXkGvpFfRq+k19Fp6Hb2e3kBvpDfRm+kt9FZ6G72d3kHvpHfRu+k99F56H72fPkAfpA/Rh+kj9FH6GH2cPkGfpE/Rp+kz9Fn6HH2evkBfpC/Rl+kr9FX6Gn2dvkHfpG/Rt+k79F36Hn2ffkA/pB/Rj+kn9FP6Gf2cfkG/pF/Rr+k39Fv6Hf2e/kB/pD/Rn+kv9Fcao3GaoEmaommaoVmao3laoEVaomVaoVVao3XaoE3aom3aoV3ao306oEMa0BENaUTH9Df6O/2D/kn/on/Tf+i/9D86gUnEJGaSMEmZZExyJgWTkknFpGbSMGmZdEx6JgOTkfmPycRkZrIwWZlsTHYmB5OTycXkZvIweZl8TH6mAFOQKcQUZoowRZliTHGmBFOSKcWUZsowZZlyTHmmAlORqcRUZqowVZlqTHWmBlOTqcXUZuowdZl6TH2mAdOQacQ0ZpowTZlmTHOmBdOSacW0ZtowbZl2THumA9OR6cR0ZrowXZluTHemB9OT6cX0ZvowfZl+TH9mADOQGcQMZoYwQ5lhzHBmBDOSGcWMZsYwY5lxzHhmAjORmcRMZqYwU5lpzHRmBjOTmcXMZuYwc5l5zHxmAbOQWcQsZpYwS5llzHJmBbOSWcWsZtYwa5l1zHpmA7OR2cRsZrYwW5ltzHZmB7OT2cXsZvYwe5l9zH7mAHOQOcQcZo4wR5ljzHHmBHOSOcWcZs4wZ5lzzHnmAnORucRcZq4wV5lrzHXmBnOTucXcZu4wd5l7zH3mAfOQecQ8Zp4wT5lnzHPmBfOSecW8Zt4wb5l3zHvmA/OR+cR8Zr4wXxmMwRmCIRmKoRmGYRmO4RmBERmJkRmFURmN0RmDMRmLsRmHcRmP8ZmACRnARAxkEBMz35jvzA/mJ/OL+c38Yf4y/5gENhGbmE3CJmWTscnZFGxKNhWbmk3DpmXTsenZDGxG9j82E5uZzcJmZbOx2dkcbE42F5ubzcPmZfOx+dkCbEG2EFuYLcIWZYuxxdkSbEm2FFuaLcOWZcux5dkKbEW2EluZrcJWZaux1dkabE22FlubrcPWZeux9dkGbEO2EduYbcI2ZZuxzdkWbEu2FduabcO2Zdux7dkObEe2E9uZ7cJ2Zbux3dkebE+2F9ub7cP2Zfux/dkB7EB2EDuYHcIOZYexw9kR7Eh2FDuaHcOOZcex49kJ7ER2EjuZncJOZaex09kZ7Ex2FjubncPOZeex89kF7EJ2EbuYXcIuZZexy9kV7Ep2FbuaXcOuZdex69kN7EZ2E7uZ3cJuZbex29kd7E52F7ub3cPuZfex+9kD7EH2EHuYPcIeZY+xx9kT7En2FHuaPcOeZc+x59kL7EX2EnuZvcJeZa+x19kb7E32FnubvcPeZe+x99kH7EP2EfuYfcI+ZZ+xz9kX7Ev2FfuafcO+Zd+x79kP7Ef2E/uZ/cJ+ZTEWZwmWZCmWZhmWZTmWZwVWZCVWZhVWZTVWZw3WZC3WZh3WZT3WZwM2ZAEbsZBFbMx+Y7+zP9if7C/2N/uH/cv+YxO4RFxiLgmXlEvGJedScCm5VFxqLg2XlkvHpecycBm5/7hMXGYuC5eVy8Zl53JwOblcXG4uD5eXy8fl5wpwBblCXGGuCFeUK8YV50pwJblSXGmuDFeWK8eV5ypwFblKXGWuCleVq8ZV52pwNblaXG2uDleXq8fV5xpwDblGXGOuCdeUa8Y151pwLblWXGuuDdeWa8e15zpwHblOXGeuC9eV68Z153pwPbleXG+uD9eX68f15wZwA7lB3GBuCDeUG8YN50ZwI7lR3GhuDDeWG8eN5yZwE7lJ3GRuCjeVm8ZN52ZwM7lZ3GxuDjeXm8fN5xZwC7lF3GJuCbeUW8Yt51ZwK7lV3GpuDbeWW8et5zZwG7lN3GZuC7eV28Zt53ZwO7ld3G5uD7eX28ft5w5wB7lD3GHuCHeUO8Yd505wJ7lT3GnuDHeWO8ed5y5wF7lL3GXuCneVu8Zd525wN7lb3G3uDneXu8fd5x5wD7lH3GPuCfeUe8Y9515wL7lX3GvuDfeWe8e95z5wH7lP3GfuC/eVwzicIziSoziaYziW4zieEziRkziZUziV0zidMziTszibcziX8zifC7iQA1zEQQ5xMfeN+8794H5yv7jf3B/uL/ePS+AT8Yn5JHxSPhmfnE/Bp+RT8an5NHxaPh2fns/AZ+T/4zPxmfksfFY+G5+dz8Hn5HPxufk8fF4+H5+fL8AX5AvxhfkifFG+GF+cL8GX5EvxpfkyfFm+HF+er8BX5CvxlfkqfFW+Gl+dr8HX5Gvxtfk6fF2+Hl+fb8A35BvxjfkmfFO+Gd+cb8G35Fvxrfk2fFu+Hd+e78B35DvxnfkufFe+G9+d78H35Hvxvfk+fF++H9+fH8AP5Afxg/kh/FB+GD+cH8GP5Efxo/kx/Fh+HD+en8BP5Cfxk/kp/FR+Gj+dn8HP5Gfxs/k5/Fx+Hj+fX8Av5Bfxi/kl/FJ+Gb+cX8Gv5Ffxq/k1/Fp+Hb+e38Bv5Dfxm/kt/FZ+G7+d38Hv5Hfxu/k9/F5+H7+fP8Af5A/xh/kj/FH+GH+cP8Gf5E/xp/kz/Fn+HH+ev8Bf5C/xl/kr/FX+Gn+dv8Hf5G/xt/k7/F3+Hn+ff8A/5B/xj/kn/FP+Gf+cf8G/5F/xr/k3/Fv+Hf+e/8B/5D/xn/kv/Fce43Ge4Eme4mme4Vme43le4EVe4mVe4VVe43Xe4E3e4m3e4V3e430+4EMe8BEPecTH/Df+O/+D/8n/4n/zf/i//D8+QUgkJBaSCEmFZEJyIYWQUkglpBbSCGmFdEJ6IYOQUfhPyCRkFrIIWYVsQnYhh5BTyCXkFvIIeYV8Qn6hgFBQKCQUFooIRYViQnGhhFBSKCWUFsoIZYVyQnmhglBRqCRUFqoIVYVqQnWhhlBTqCXUFuoIdYV6Qn2hgdBQaCQ0FpoITYVmQnOhhdBSaCW0FtoIbYV2Qnuhg9BR6CR0FroIXYVuQnehh9BT6CX0FvoIfYV+Qn9hgDBQGCQMFoYIQ4VhwnBhhDBSGCWMFsYIY4VxwnhhgjBRmCRMFqYIU4VpwnRhhjBTmCXMFuYIc4V5wnxhgbBQWCQsFpYIS4VlwnJhhbBSWCWsFtYIa4V1wnphg7BR2CRsFrYIW4VtwnZhh7BT2CXsFvYIe4V9wn7hgHBQOCQcFo4IR4VjwnHhhHBSOCWcFs4IZ4VzwnnhgnBRuCRcFq4IV4VrwnXhhnBTuCXcFu4Id4V7wn3hgfBQeCQ8Fp4IT4VnwnPhhfBSeCW8Ft4Ib4V3wnvhg/BR+CR8Fr4IXwVMwAVCIAVKoAVGYAVO4AVBEAVJkAVFUAVN0AVDMAVLsAVHcAVP8IVACAUgRAIUkBAL34Tvwg/hp/BL+C38Ef4K/4QEMZGYWEwiJhWTicnFFGJKMZWYWkwjphXTienFDGJG8T8xk5hZzCJmFbOJ2cUcYk4xl5hbzCPmFfOJ+cUCYkGxkFhYLCIWFYuJxcUSYkmxlFhaLCOWFcuJ5cUKYkWxklhZrCJWFauJ1cUaYk2xllhbrCPWFeuJ9cUGYkOxkdhYbCI2FZuJzcUWYkuxldhabCO2FduJ7cUOYkexk9hZ7CJ2FbuJ3cUeYk+xl9hb7CP2FfuJ/cUB4kBxkDhYHCIOFYeJw8UR4khxlDhaHCOOFceJ48UJ4kRxkjhZnCJOFaeJ08UZ4kxxljhbnCPOFeeJ88UF4kJxkbhYXCIuFZeJy8UV4kpxlbhaXCOuFdeJ68UN4kZxk7hZ3CJuFbeJ28Ud4k5xl7hb3CPuFfeJ+8UD4kHxkHhYPCIeFY+Jx8UT4knxlHhaPCOeFc+J58UL4kXxknhZvCJeFa+J18Ub4k3xlnhbvCPeFe+J98UH4kPxkfhYfCI+FZ+Jz8UX4kvxlfhafCO+Fd+J78UP4kfxk/hZ/CJ+FTERFwmRFCmRFhmRFTmRFwVRFCVRFhVRFTVRFw3RFC3RFh3RFT3RFwMxFIEYiVBEYix+E7+LP8Sf4i/xt/hH/Cv+ExOkRFJiKYmUVEomJZdSSCmlVFJqKY2UVkonpZcySBml/6RMUmYpi5RVyiZll3JIOaVcUm4pj5RXyifllwpIBaVCUmGpiFRUKiYVl0pIJaVSUmmpjFRWKieVlypIFaVKUmWpilRVqiZVl2pINaVaUm2pjlRXqifVlxpIDaVGUmOpidRUaiY1l1pILaVWUmupjdRWaie1lzpIHaVOUmepi9RV6iZ1l3pIPaVeUm+pj9RX6if1lwZIA6VB0mBpiDRUGiYNl0ZII6VR0mhpjDRWGieNlyZIE6VJ0mRpijRVmiZNl2ZIM6VZ0mxpjjRXmifNlxZIC6VF0mJpibRUWiYtl1ZIK6VV0mppjbRWWietlzZIG6VN0mZpi7RV2iZtl3ZIO6Vd0m5pj7RX2iftlw5IB6VD0mHpiHRUOiYdl05IJ6VT0mnpjHRWOiedly5IF6VL0mXpinRVuiZdl25IN6Vb0m3pjnRXuifdlx5ID6VH0mPpifRUeiY9l15IL6VX0mvpjfRWeie9lz5IH6VP0mfpi/RVwiRcIiRSoiRaYiRW4iReEiRRkiRZUiRV0iRdMiRTsiRbciRX8iRfCqRQAlIkQQlJsfRN+i79kH5Kv6Tf0h/pr/RPSpATyYnlJHJSOZmcXE4hp5RTyanlNHJaOZ2cXs4gZ5T/kzPJmeUsclY5m5xdziHnlHPJueU8cl45n5xfLiAXlAvJheUiclG5mFxcLiGXlEvJpeUyclm5nFxeriBXlCvJleUqclW5mlxdriHXlGvJteU6cl25nlxfbiA3lBvJjeUmclO5mdxcbiG3lFvJreU2clu5ndxe7iB3lDvJneUucle5m9xd7iH3lHvJveU+cl+5n9xfHiAPlAfJg+Uh8lB5mDxcHiGPlEfJo+Ux8lh5nDxeniBPlCfJk+Up8lR5mjxdniHPlGfJs+U58lx5njxfXiAvlBfJi+Ul8lJ5mbxcXiGvlFfJq+U18lp5nbxe3iBvlDfJm+Ut8lZ5m7xd3iHvlHfJu+U98l55n7xfPiAflA/Jh+Uj8lH5mHxcPiGflE/Jp+Uz8ln5nHxeviBflC/Jl+Ur8lX5mnxdviHflG/Jt+U78l35nnxffiA/lB/Jj+Un8lP5mfxcfiG/lF/Jr+U38lv5nfxe/iB/lD/Jn+Uv8lcZk3GZkEmZkmmZkVmZk3lZkEVZkmVZkVVZk3XZkE3Zkm3ZkV3Zk305kEMZyJEMZSTH8jf5u/xD/in/kn/Lf+S/8j85QUmkJFaSKEmVZEpyJYWSUkmlpFbSKGmVdEp6JYOSUflPyaRkVrIoWZVsSnYlh5JTyaXkVvIoeZV8Sn6lgFJQKaQUVoooRZViSnGlhFJSKaWUVsooZZVySnmlglJRqaRUVqooVZVqSnWlhlJTqaXUVuoodZV6Sn2lgdJQaaQ0VpooTZVmSnOlhdJSaaW0VtoobZV2Snulg9JR6aR0VrooXZVuSnelh9JT6aX0VvoofZV+Sn9lgDJQGaQMVoYoQ5VhynBlhDJSGaWMVsYoY5VxynhlgjJRmaRMVqYoU5VpynRlhjJTmaXMVuYoc5V5ynxlgbJQWaQsVpYoS5VlynJlhbJSWaWsVtYoa5V1ynplg7JR2aRsVrYoW5VtynZlh7JT2aXsVvYoe5V9yn7lgHJQOaQcVo4oR5VjynHlhHJSOaWcVs4oZ5VzynnlgnJRuaRcVq4oV5VrynXlhnJTuaXcVu4od5V7yn3lgfJQeaQ8Vp4oT5VnynPlhfJSeaW8Vt4ob5V3ynvlg/JR+aR8Vr4oXxVMwRVCIRVKoRVGYRVO4RVBERVJkRVFURVN0RVDMRVLsRVHcRVP8ZVACRWgRApUkBIr35Tvyg/lp/JL+a38Uf4q/5QENZGaWE2iJlWTqcnVFGpKNZWaWk2jplXTqenVDGpG9T81k5pZzaJmVbOp2dUcak41l5pbzaPmVfOp+dUCakG1kFpYLaIWVYupxdUSakm1lFpaLaOWVcup5dUKakW1klpZraJWVaup1dUaak21llpbraPWVeup9dUGakO1kdpYbaI2VZupzdUWaku1ldpabaO2Vdup7dUOake1k9pZ7aJ2Vbup3dUeak+1l9pb7aP2Vfup/dUB6kB1kDpYHaIOVYepw9UR6kh1lDpaHaOOVcep49UJ6kR1kjpZnaJOVaep09UZ6kx1ljpbnaPOVeep89UF6kJ1kbpYXaIuVZepy9UV6kp1lbpaXaOuVdep69UN6kZ1k7pZ3aJuVbep29Ud6k51l7pb3aPuVfep+9UD6kH1kHpYPaIeVY+px9UT6kn1lHpaPaOeVc+p59UL6kX1knpZvaJeVa+p19Ub6k31lnpbvaPeVe+p99UH6kP1kfpYfaI+VZ+pz9UX6kv1lfpafaO+Vd+p79UP6kf1k/pZ/aJ+VTEVVwmVVCmVVhmVVTmVVwVVVCVVVhVVVTVVVw3VVC3VVh3VVT3VVwM1VIEaqVBFaqx+U7+rP9Sf6i/1t/pH/av+UxO0RFpiLYmWVEumJddSaCm1VFpqLY2WVkunpdcyaBm1/7RMWmYti5ZVy6Zl13JoObVcWm4tj5ZXy6fl1wpoBbVCWmGtiFZUK6YV10poJbVSWmmtjFZWK6eV1ypoFbVKWmWtilZVq6ZV1zKlT0iopdXW6mh1tXpafa2B1lBrpDXWmmhNtWZac62F1lJrpbXW2mhttXZae62D1lHrpHXWumhdtW5ad62H1lPrpfXW+mh9tX5af22ANlAbpA3WhmhDtWHacG2ENlIbpY3WxmhjtXHaeG2CNlGbpE3WpmhTtWnadG2GNlObpc3W5mhztXnafG2BtlBbpC3WlmhLtWXacm2FtlJbpa3W1mhrtXXaem2DtlHbpG3WtmhbtW3adm2HtlPbpe3W9mh7tX3afu2AdlA7pB3WjmhHtWPace2EdlI7pZ3WzmhntXPaee2CdlG7pF3WrmhXtWvade2GdlO7pd3W7mh3tXvafe2B9lB7pD3WnmhPtWfac+2F9lJ7pb3W3mhvtXfae+2D9lH7pH3WvmhfNUzDNUIjNUqjNUZjNU7jNUETNUmTNUVTNU3TNUMzNUuzNUdzNU/ztUALNaBFGtSQFmvftO/aD+2n9kv7rf3R/mr/tAQ9kZ5YT6In1ZPpyfUUeko9lZ5aT6On1dPp6fUMekb9Pz2TnlnPomfVs+nZ9Rx6Tj2XnlvPo+fV8+n59QJ6Qb2QXlgvohfVi+nF9RJ6Sb2UXlovo5fVy+nl9Qp6Rb2SXlmvolfVq+nV9Rp6Tb2WXluvo9fV6+n19QZ6Q72R3lhvojfVm+nN9RZ6S72V3lpvo7fV2+nt9Q56R72T3lnvonfVu+nd9R56T72X3lvvo/fV++n99QH6QH2QPlgfog/Vh+nD9RH6SH2UPlofo4/Vx+nj9Qn6RH2SPlmfok/Vp+nT9Rn6TH2WPlufo8/V5+nz9QX6Qn2Rvlhfoi/Vl+nL9RX6Sn2Vvlpfo6/V1+nr9Q36Rn2Tvlnfom/Vt+nb9R36Tn2Xvlvfo+/V9+n79QP6Qf2Qflg/oh/Vj+nH9RP6Sf2Uflo/o5/Vz+nn9Qv6Rf2Sflm/ol/Vr+nX9Rv6Tf2Wflu/o9/V7+n39Qf6Q/2R/lh/oj/Vn+nP9Rf6S/2V/lp/o7/V3+nv9Q/6R/2T/ln/on/VMR3XCZ3UKZ3WGZ3VOZ3XBV3UJV3WFV3VNV3XDd3ULd3WHd3VPd3XAz3UgR7pUEd6rH/Tv+s/9J/6L/23/kf/q//TE4xERmIjiZHUSGYkN1IYKY1URmojjZHWSGekNzIYGY3/jExGZiOLkdXIZmQ3chg5jVxGbiOPkdfIZ+Q3ChgFjUJGYaOIUdQoZhQ3ShgljVJGaaOMUdYoZ5Q3KhgVjUpGZaOKUdWoZlQ3ahg1jVpGbaOOUdeoZ9Q3GhgNjUZGY6OJ0dRoZjQ3WhgtjVZGa6ON0dZoZ7Q3OhgdjU5GZ6OL0dXoZnQ3ehg9jV5Gb6OP0dfoZ/Q3BhgDjUHGYGOIMdQYZgw3RhgjjVHGaGOMMdYYZ4w3JhgTjUnGZGOKMdWYZkw3ZhgzjVnGbGOOMdeYZ8w3FhgLjUXGYmOJsdRYZiw3VhgrjVXGamONsdZYZ6w3NhgbjU3GZmOLsdXYZmw3dhg7jV3GbmOPsdfYZ+w3DhgHjUPGYeOIcdQ4Zhw3ThgnjVPGaeOMcdY4Z5w3LhgXjUvGZeOKcdW4Zlw3bhg3jVvGbeOOcde4Z9w3HhgPjUfGY+OJ8dR4Zjw3XhgvjVfGa+ON8dZ4Z7w3PhgfjU/GZ+OL8dXADNwgDNKgDNpgDNbgDN4QDNGQDNlQDNXQDN0wDNOwDNtwDNfwDN8IjNAARmRAAxmx8c34bvwwfhq/jN/GH+Ov8c9IMBOZic0kZlIzmZncTGGmNFOZqc00ZloznZnezGBmNP8zM5mZzSxmVjObmd3MYeY0c5m5zTxmXjOfmd8sYBY0C5mFzSJmUbOYWdwsYZY0S5mlzTJmWbOcWd6sYFY0K5mVzSpmVbOaWd2sYdY0a5m1zTpmXbOeWd9sYDY0G5mNzSZmU7OZ2dxsYbY0W5mtzTZmW7Od2d7sYHY0O5mdzS5mV7Ob2d3sYfY0e5m9zT5mX7Of2d8cYA40B5mDzSHmUHOYOdwcYY40R5mjzTHmWHOcOd6cYE40J5mTzSnmVHOaOd2cYc40Z5mzzTnmXHOeOd9cYC40F5mLzSXmUnOZudxcYa40V5mrzTXmWnOdud7cYG40N5mbzS3mVnObud3cYe40d5m7zT3mXnOfud88YB40D5mHzSPmUfOYedw8YZ40T5mnzTPmWfOced68YF40L5mXzSvmVfOaed28Yd40b5m3zTvmXfOeed98YD40H5mPzSfmU/OZ+dx8Yb40X5mvzTfmW/Od+d78YH40P5mfzS/mVxMzcZMwSZMyaZMxWZMzeVMwRVMyZVMxVVMzddMwTdMybdMxXdMzfTMwQxOYkQlNZMbmN/O7+cP8af4yf5t/zL/mPzPBSmQltpJYSa1kVnIrhZXSSmWlttJYaa10Vnorg5XR+s/KZGW2slhZrWxWdiuHldPKZeW28lh5rXxWfquAVdAqZBW2ilhFrWJWcauEVdIqZZW2ylhlrXJWeauCVdGqZFW2qlhVrWpWdauGVdOqZdW26lh1rXpWfauB1dBqZDW2mlhNrWZWc6uF1dJqZbW22lhtrXZWe6uD1dHqZHW2ulhdrW5Wd6uH1dPqZfW2+lh9rX5Wf2uANdAaZA22hlhDrWHWcGuENdIaZY22xlhjrXHWeGuCNdGaZE22plhTrWnWdGuGNdOaZc225lhzrXnWfGuBtdBaZC22llhLrWXWcmuFtdJaZa221lhrrXXWemuDtdHaZG22tlhbrW3WdmuHtdPaZe229lh7rX3WfuuAddA6ZB22jlhHrWPWceuEddI6ZZ22zlhnrXPWeeuCddG6ZF22rlhXrWvWdeuGddO6Zd227lh3rXvWfeuB9dB6ZD22nlhPrWfWc+uF9dJ6Zb223lhvrXfWe+uD9dH6ZH22vlhfLczCLcIiLcqiLcZiLc7iLcESLcmSLcVSLc3SLcMyLcuyLcdyLc/yrcAKLWBFFrSQFVvfrO/WD+un9cv6bf2x/lr/rAQ7kZ3YTmIntZPZye0Udko7lZ3aTmOntdPZ6e0Mdkb7PzuTndnOYme1s9nZ7Rx2TjuXndvOY+e189n57QJ2QbuQXdguYhe1i9nF7RJ2SbuUXdouY5e1y9nl7Qp2RbuSXdmuYle1q9nV7Rp2TbuWXduuY9e169n17QZ2Q7uR3dhuYje1m9nN7RZ2S7uV3dpuY7e129nt7Q52R7uT3dnuYne1u9nd7R52T7uX3dvuY/e1+9n97QH2QHuQPdgeYg+1h9nD7RH2SHuUPdoeY4+1x9nj7Qn2RHuSPdmeYk+1p9nT7Rn2THuWPdueY8+159nz7QX2QnuRvdheYi+1l9nL7RX2SnuVvdpeY6+119nr7Q32RnuTvdneYm+1t9nb7R32TnuXvdveY++199n77QP2QfuQfdg+Yh+1j9nH7RP2SfuUfdo+Y5+1z9nn7Qv2RfuSfdm+Yl+1r9nX7Rv2TfuWfdu+Y9+179n37Qf2Q/uR/dh+Yj+1n9nP7Rf2S/uV/dp+Y7+139nv7Q/2R/uT/dn+Yn+1MRu3CZu0KZu2GZu1OZu3BVu0JVu2FVu1NVu3Ddu0Ldu2Hdu1Pdu3Azu0gR3Z0EZ2bH+zv9s/7J/2L/u3/cf+a/+zE5xETmIniZPUSeYkd1I4KZ1UTmonjZPWSeekdzI4GZ3/nExOZieLk9XJ5mR3cjg5nVxObiePk9fJ5+R3CjgFnUJOYaeIU9Qp5hR3SjglnVJOaaeMU9Yp55R3KjgVnUpOZaeKU9Wp5lR3ajg1nVpObaeOU9ep59R3GjgNnUZOY6eJ09Rp5jR3WjgtnVZOa6eN09Zp57R3OjgdnU5OZ6eL09Xp5nR3ejg9nV5Ob6eP09fp5/R3BjgDnUHOYGeIM9QZ5gx3RjgjnVHOaGeMM9YZ54x3JjgTnUnOZGeKM9WZ5kx3ZjgznVnObGeOM9eZ58x3FjgLnUXOYmeJs9RZ5ix3VjgrnVXOameNs9ZZ56x3NjgbnU3OZmeLs9XZ5mx3djg7nV3ObmePs9fZ5+x3DjgHnUPOYeeIc9Q55hx3TjgnnVPOaeeMc9Y555x3LjgXnUvOZeeKc9W55lx3bjg3nVvObeeOc9e559x3HjgPnUfOY+eJ89R55jx3XjgvnVfOa+eN89Z557x3PjgfnU/OZ+eL89XBHNwhHNKhHNphHNbhHN4RHNGRHNlRHNXRHN0xHNOxHNtxHNfxHN8JnNABTuRABzmx88357vxwfjq/nN/OH+ev889JcBO5id0kblI3mZvcTeGmdFO5qd00blo3nZvezeBmdP9zM7mZ3SxuVjebm93N4eZ0c7m53TxuXjefm98t4BZ0C7mF3SJuUbeYW9wt4ZZ0S7ml3TJuWbecW96t4FZ0K7mV3SpuVbeaW92t4dZ0a7m13TpuXbeeW99t4DZ0G7mN3SZuU7eZ29xt4bZ0W7mt3TZuW7ed297t4HZ0O7md3S5uV7eb293t4fZ0e7m93T5uX7ef298d4A50B7mD3SHuUHeYO9wd4Y50R7mj3THuWHecO96d4E50J7mT3SnuVHeaO92d4c50Z7mz3TnuXHeeO99d4C50F7mL3SXuUneZu9xd4a50V7mr3TXuWnedu97d4G50N7mb3S3uVnebu93d4e50d7m73T3uXnefu9894B50D7mH3SPuUfeYe9w94Z50T7mn3TPuWfece9694F50L7mX3SvuVfeae9294d50b7m33TvuXfeee9994D50H7mP3SfuU/eZ+9x94b50X7mv3TfuW/ed+9794H50P7mf3S/uVxdzcZdwSZdyaZdxWZdzkyUkJIiu5Mqu4qqu5uqu4Zqu5dqu47qu5/pu4IYucCMXusiN3W/ud/eH+9P95f52/7h/3X9ugpfIS+wl8ZJ6ybzkXgovpZfKS+2l8dJ66bz0XgYvo/efl8nL7GXxsnrZvOxeDi+nl8vL7eXx8nr5vPxeAa+gV8gr7BXxinrFvOJeCa+kV8or7ZXxynrlvPJeBa+iV8mr7FXxqnrVvOpeDa+mV8ur7dXx6nr1vPpeA6+h18hr7DXxmnrNvOZeC6+l18pr7bXx2nrtvPZeB6+j18nr7HXxunrdvO5eD6+n18vr7fXx+nr9vP7eAG+gN8gb7A3xhnrDvOHeCG+kN8ob7Y3xxnrjvPHeBG+iN8mb7E3xpnrTvOneDG+mN8ub7c3x5nrzvPneAm+ht8hb7C3xlnrLvOXeCm+lt8pb7a3x1nrrvPXeBm+jt8nb7G3xtnrbvO3eDm+nt8vb7e3x9nr7vP3eAe+gd8g77B3xjnrHvOPeCe+kd8o77Z3xznrnvPPeBe+id8m77F3xrnrXvOveDe+md8u77d3x7nr3vPveA++h98h77D3xnnrPvOfeC++l98p77b3x3nrvvPfeB++j98n77H3xvnqYh3uER3qUR3uMx3qcx3uCJ3qSJ3uKp3qap3uGZ3qWZ3uO53qe53uBF3rAizzoIS/2vnnfvR/eT++X99v74/31/nkJfiI/sZ/ET+on85P7KfyUfio/tZ/GT+un89P7GfyM/n9+Jj+zn8XP6mfzs/s5/Jx+Lj+3n8fP6+fz8/sF/IJ+Ib+wX8Qv6hfzi/sl/JJ+Kb+0X8Yv65fzy/sV/Ip+Jb+yX8Wv6lfzq/s1/Jp+Lb+2X8ev69fz6/sN/IZ+I7+x38Rv6jfzm/st/JZ+K7+138Zv67fz2/sd/I5+J7+z38Xv6nfzu/s9/J5+L7+338fv6/fz+/sD/IH+IH+wP8Qf6g/zh/sj/JH+KH+0P8Yf64/zx/sT/In+JH+yP8Wf6k/zp/sz/Jn+LH+2P8ef68/z5/sL/IX+In+xv8Rf6i/zl/sr/JX+Kn+1v8Zf66/z1/sb/I3+Jn+zv8Xf6m/zt/s7/J3+Ln+3v8ff6+/z9/sH/IP+If+wf8Q/6h/zj/sn/JP+Kf+0f8Y/65/zz/sX/Iv+Jf+yf8W/6l/zr/s3/Jv+Lf+2f8e/69/z7/sP/If+I/+x/8R/6j/zn/sv/Jf+K/+1/8Z/67/z3/sf/I/+J/+z/8X/6mM+7hM+6VM+7TM+63M+7wu+6Eu+7Cu+6mu+7hu+6Vu+7Tu+63u+7wd+6AM/8qGP/Nj/5n/3f/g//V/+b/+P/9f/5ycEiYLEQZIgaZAsSB6kCFIGqYLUQZogbZAuSB9kCDIG/wWZgsxBliBrkC3IHuQIcga5gtxBniBvkC/IHxQICgaFgsJBkaBoUCwoHpQISgalgtJBmaBsUC4oH1QIKgaVgspBlaBqUC2oHtQIaga1gtpBnaBuUC+oHzQIGgaNgsZBk6Bp0CxoHrQIWgatgtZBm6Bt0C5oH3QIOgadgs5Bl6Br0C3oHvQIega9gt5Bn6Bv0C/oHwwIBgaDgsHBkGBoMCwYHowIRgajgtHBmGBsMC4YH0wIJgaTgsnBlGBqMC2YHswIZgazgtnBnGBuMC+YHywIFgaLgsXBkmBpsCxYHqwIVgargtXBmmBtsC5YH2wINgabgs3BlmBrsC3YHuwIdga7gt3BnmBvsC/YHxwIDgaHgsPBkeBocCw4HpwITgangtPBmeBscC44H1wILgaXgsvBleBqcC24HtwIbga3gtvBneBucC+4HzwIHgaPgsfBk+Bp8Cx4HrwIXgavgtfBm+Bt8C54H3wIPgafgs/Bl+BrgAV4QARkQAV0wARswAV8IARiIAVyoARqoAV6YARmYAV24ARu4AV+EARhAIIogAEK4uBb8D34EfwMfgW/gz/B3+BfkBAmChOHScKkYbIweZgiTBmmClOHacK0YbowfZghzBj+F2YKM4dZwqxhtjB7mCPMGeYKc4d5wrxhvjB/WCAsGBYKC4dFwqJhsbB4WCIsKZQKS4dlwrJhubB8WCGsGFYKK4dVwqphtbB6WCOsGdYKa4d1wrphvbB+2CBsGDYKG4dNwqZhs7B52CJsGbYKW4dtwrZhu7B92CHsGHYKO4ddwq5ht7B72CPsGfYKe4d9wr5hv7B/OCAcGA4KB4dDwqHhsHB4OCIcGY4KR4djwrHhuHB8OCGcGE4KJ4dTwqnhtHB6OCOcGc4KZ4dzwrnhvHB+uCBcGC4KF4dLwqXhsnB5uCJcGa4KV4drwrXhunB9uCHcGG4KN4dbwq3htnB7uCPcGe4Kd4d7wr3hvnB/eCA8GB5Kdjg8Eh4Nj4XHwxPhyfBUeDo8E54Nz4XnwwvhxfBSeDm8El4Nr4XXwxvhzfBWeDu8E94N74X3wwfhw/BR+Dh8Ej4Nn4XPwxfhy/BV+Dp8E74N34Xvww/hx/BT+Dn8En4NsRAPiZAMqZAOmZANuZAPhVAMpVAOlVANtVAPjdAMrdAOndANvdAPgzAMQRiFMERhHH4Lv4c/wp/hr/B3+Cf8G/4LE0AikBgkAUlBMpAcpAApQSqQGqQBaUE6kB5kABnBfyATyAyygKwgG8gOcoCcIBfIDfKAvCAfyA8KgIKgECgMioCioBgoDkqAkqAUKA3KgLKgHCgPKoCKoBKoDKqAqqAaqA5qgJqgFqgN6oC6oB6oDxqAhqARaAyagKagGWgOWoCWoBVoDdqAtqAdaA86gI6gE+gMuoCuoBvoDnqAnqAX6A36gL6gH+gPBoCBYBAYDIaAoWAYGA5GgJFgFBgNxoCxYBwYDyaAiWASmAymgKlgGpgOZoCZYBaYDeaAuWAemA8WgIVgEVgMloClYBlYDlaAlWAVWA3WgLVgHVgPNoCNYBPYDLaArWAb2A52gJ1gF9gN9oC9YB/YDw6Ag+AQOAyOgKPgGDgOToCT4BQ4Dc6As+AcOA8ugIvgErgMroCr4Bq4Dm6Am+AWuA3ugLvgHrgPHoCH4BF4DJ6Ap+AZeA5egJfgFXgN3oC34B14Dz6Aj+AT+Ay+gK8AAzggAAkoQAMGsIADPBCACCQgAwWoQAM6MIAJLGADB7jAAz4IQAgAiAAECMTgG/gOfoCf4Bf4Df6Av+AfSIgSRYmjJFHSKFmUPEoRpYxSRamjNFHaKF2UPsoQZUyS8H9R1ihblD3KEeWMckW5ozxR3ihflD8qEBWMCkWFoyJR0ahYVDwqEZWMSkWlozJR2ahcVD6qEFWMKkWVoypR1ahaVD2qEdWMakW1ozpR3aheVD9qEDWMGkWNoyZR06hZ1DxqEbWMWkWtozZR26hd1D7qEHWMOkWdoy5R16hb1D3qEfWMekW9oz5R36hf1D8aEA2MBkWDoyHR0GhYNDwaEY2MRkWjozHR2GhcND6aEE2MJkWToynR1GhaND2aEc2MZkWzoznR3GheND9aEC2MFkWLoyXR0mhZtDxaEa2MVkWrozXR2mhdtD7aEG2MNkWboy3R1mhbtD3aEe2MdkW7oz3R3mhftD86EB2MDkWHoyPR0ehYdDw6EZ2MTkWnozPR2ehcdD66EF2MLkWXoyvR1ehadD26Ed2MbkW3ozvR3ehedD96ED2MHkWPoyfR0+hZ9Dx6Eb2MXkWvozfR2+hd9D76EH2MPkWfoy/R1wiL8IiIyIiK6IiJ2IiL+EiIxEiK5EiJ1EiL9MiIzMiK7MiJ3MiL/CiIwghEUQQjFMXRt+h79CP6Gf2Kfkd/or/RvygBJoKJYRKYFCaDyWEKmBKmgqlhGpgWpoPpYQaYEf4HM8HMMAvMCrPB7DAHzAlzwdwwD8wL88H8sAAsCAvBwrAILAqLweKwBCwJS8HSsAwsC8vB8rACrAgrwcqwCqwKq8HqsAasCWvB2rAOrAvrwfqwAWwIG8HGsAlsCpvB5rAFbAlbwdawDWwL28H2sAPsCDvBzrAL7Aq7we6wB+wJe8HesA/sC/vB/nAAHAgHwcFwCBwKh8HhcAQcCUfB0XAMHAvHwfFwApwIJ8HJcAqcCqfB6XAGnAlnwdlwDpwL58H5cAFcCBfBxXAJXAqXweVwBVwJV8HVcA1cC9fB9XAD3Ag3wc1wC9wKt8HtcAfcCXfB3XAP3Av3wf3wADwID8HD8Ag8Co/B4/AEPAlPwdPwDDwLz8Hz8AK8CC/By/AKvAqvwevwBrwJb8Hb8A68C+/B+/ABfAgfwcfwCXwKn8Hn8AV8CV/B1/ANfAvfwffwA/wIP8HP8Av8CjGIQwKSkII0ZCALOchDAYpQgjJUoAo1qEMDmtCCNnSgCz3owwCGEMAIQohgDL/B7/AH/Al/wd/wD/wL/8EElAglRklQUpQMJUcpUEqUCqVGaVBalA6lRxlQRvQfyoQyoywoK8qGsqMcKCfKhXKjPCgvyofyowKoICqECqMiqCgqhoqjEqgkKoVKozKoLCqHyqMKqCKqhCqjKqgqqoaqoxqoJqqFaqM6qC6qh+qjBqghaoQaoyaoKWqGmqMWqCVqhVqjNqgtaofaow6oI+qEOqMuqCvqhrqjHqgn6oV6oz6oL+qH+qMBaCAahAajIWgoGoaGoxFoJBqFRqMxaCwah8ajCWgimoQmoyloKpqGpqMZaCaahWajOWgumofmowVoIVqEFqMlaClahpajFWglWoVWozVoLVqH1qMNaCPahDajLWgr2oa2ox1oJ9qFdqM9aC/ah/ajA+ggOoQOoyPoKDqGjqMT6CQ6hU6jM+gsOofOowvoIrqELqMr6Cq6hq6jG+gmuoVuozvoLrqH7qMH6CF6hB6jJ+gpeoaeoxfoJXqFXqM36C16h96jD+gj+oQ+oy/oK8IQjghEIgrRiEEs4hCPBCQiCclIQSrSkI4MZCIL2chBLvKQjwIUIoAiBBFCMfqGvqMf6Cf6hX6jP+gv+ocS4kRx4jhJnDROFiePU8Qp41Rx6jhNnDZOF6ePM8QZ4//iTHHmOEucNc4WZ49zxDnjXHHuOE+cN84X548LxAXjQnHhuEhcNC4WF49LxCXjUnHpuExcNi4Xl48rxBXjSnHluEpcNa4WV49rxDXjWnHtuE5cN64X148bxA3jRnHjuEncNG4WN49bxC3jVnHruE3cNm4Xt487xB3jTnHnuEvcNe4Wd497xD3jXnHvuE/cN+4X948HxAPjQfHgeEg8NB4WD49HxP9j5y7DNinORVG/I7i7w+Du7sQIECCEACFBBxhgYGBgBht0cHd3d3d3dw3u7k5XdXV19bkWDOxFsnL2Wfs6a2dl7/v+MU+9z1tdVV3TT139fT++wdVW1dbVkGqbattqaLVdtX01rBpe7VDtWO1U7VztUo2odq12q3av9qj2rPaqRlZ7V/tU+1b7VftXB1QHVgdVB1eHVIdWh1WHV0dUR1ZHVUdXx1THVsdVx1cnVCdWJ1UnV6dUp1anVadXZ1RnVmdVZ1fnVOdW51XnVxdUF1YXVRdXl1SXVpdVl1dXVFdWV1VXV9dU11bXVddXN1Q3VjdVN1e3VLdWt1W3V3dUd1Z3VXdX91T3VvdV91cPVA9WD1UPV49Uj1aPVY9XT1RPVk9VT1fPVM9Wz1V/rZ6vXqherF6qXq5eqV6tXqter96o3qzeqt6u3qnerd6r3q8+qD6sPqo+rj6pPq0+qz6vvqi+rL6qvq6+qb6tvquqKlSxqqtUNVWu2qpUXdULfULf0C/0D6OF0cMYYcwwVhg7jBPGDeOF8cMEYcIwUZg4TBImDZOFycMUYcowVZg6TBOmDdOF6cMMYUCYMcwUZg6zhFnDbGH2MEeYM8wV5g7zhHnDfGH+sEBYMCwUFg6LhEXDYmHxsERYMiwVlg7LhGXDcmH5sEL4Rfhl+FX4dfhNWDH8NqwUVg6rhN+FVcNqYfXw+7BG+ENYM/wxrBXWDuuEP4V1w5/DX8J6Yf2wQdgwbBQ2DgPDJmHTsFkYFDYPW4Qtw+CwVdg6DAnbhG3D0LBd2D4MC8PDDmHHsFPYOewSRoRdw25h97BH2DPsFUaGvcM+Yd+wX9g/HBAODAeFg8Mh4dBwWDg8HBGODEeFo8Mx4dhwXDg+nBBODCeFk8Mp4dRwWjg9nBHODGeFs8M54dxwXjg/XBAuDBeFi8Ml4dJwWbg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8Mt4dZwW7g93BHuDHeFu8M94d5wX7g/PBAeDA+Fh8Mj4dHwWHg8PBGeDE+Fp8Mz4dnwXPhreD68EF4ML4WXwyvh1fBaeD28Ed4Mb4W3wzvh3fBeeD98ED4MH4WPwyfh0/BZ+Dx8Eb4MX4Wvwzfh2/BdqEIIMdQhhSbk0IYSutCLfWLf2C/2j6PF0eMYccw4Vhw7jhPHjePF8eMEccI4UZw4ThInjZPFyeMUcco4VZw6ThOnjdPF6eMMcUCcMc4UZ46zxFnjbHH2OEecM84V547zxHnjfHH+uEBcMC4UF46LxEXjYnHxuERcMi4Vl47LxGXjcnH5uEL8Rfxl/FX8dfxNXDH+Nq4UV46rxN/FVeNqcfX4+7hG/ENcM/4xrhXXjuvEP8V145/jX+J6cf24QdwwbhQ3jgPjJnHTuFkcFDePW8Qt4+C4Vdw6DonbxG3j0Lhd3D4Oi8PjDnHHuFPcOe4SR8Rd425x97hH3DPuFUfGveM+cd+4X9w/HhAPjAfFg+Mh8dB4WDw8HhGPjEfFo+Mx8dh4XDw+nhBPjCfFk+Mp8dR4Wjw9nhHPjGfFs+M58dx4Xjw/XhAvjBfFi+Ml8dJ4Wbw8XhGvjFfFq+M18dp4Xbw+3hBvjDfFm+Mt8dZ4W7w93hHvjHfFu+M98d54X7w/PhAfjA/Fh+Mj8dH4WHw8PhGfjE/Fp+Mz8dn4XPxrfD6+EF+ML8WX4yvx1fhafD2+Ed+Mb8W34zvx3fhefD9+ED+MH8WP4yfx0/hZ/Dx+Eb+MX8Wv4zfx2/hdrGKIMdYxxSbm2MYSu9ir+9R96351/3q0evR6jHrMeqx67Hqcetx6vHr8eoJ6wnqieuJ6knrSerJ68nqKesp6qnrqepp62nq6evp6hnpAPWM9Uz1zPUs9az1bPXs9Rz1nPVc9dz1PPW89Xz1/vUC9YL1QvXC9SL1ovVi9eL1EvWS9VL10vUy9bL1cvXy9Qv2L+pf1r+pf17+pV6x/W69Ur1yvUv+uXrVerV69/n29Rv2Hes36j/Va9dr1OvWf6nXrP9d/qder1683qDesN6o3rgfWm9Sb1pvVg+rN6y3qLevB9Vb11vWQept623povV29fT2sHl7vUO9Y71TvXO9Sj6h3rXerd6/3qPes96pH1nvX+9T71vvV+9cH1AfWB9UH14fUh9aH1YfXR9RH1kfVR9fH1MfWx9XH1yfUJ9Yn1SfXp9Sn1qfVp9dn1GfWZ9Vn1+fU59bn1efXF9QX1hfVF9eX1JfWl9WX11fUV9ZX1VfX19TX1tfV19c31DfWN9U317fUt9a31bfXd9R31nfVd9f31PfW99X31w/UD9YP1Q/Xj9SP1o/Vj9dP1E/WT9VP18/Uz9bP1X+tn69fqF+sX6pfrl+pX61fq1+v36jfrN+q367fqd+t36vfrz+oP6w/qj+uP6k/rT+rP6+/qL+sv6q/rr+pvx29V1d1qGNd16lu6ly3dam7upf6pL6pX+qfRkujpzHSmGmsNHYaJ42bxkvjpwnShGmiNHGaJE2aJkuTpynSlGmqNHWaJk2bpkvTpxnSgDRjminNnGZJs6bZ0uxpjjRnmivNneZJ86b50vxpgbRgWigtnBZJi6bF0uJpibRkWiotnZZJy6bl0vJphfSL9Mv0q/Tr9Ju0YvptWimtnFZJv0urptXS6un3aY30h7Rm+mNaK62d1kl/SuumP6e/pPXS+mmDtGHaKG2cBqZN0qZpszQobZ62SFumwWmrtHUakrZJ26ahabu0fRqWhqcd0o5pp7Rz2iWNSLum3dLuaY+0Z9orjUx7p33Svmm/tH86IB2YDkoHp0PSoemwdHg6Ih2ZjkpHp2PSsem4dHw6IZ2YTkonp1PSqem0dHo6I52Zzkpnp3PSuem8dH66IF2YLkoXp0vSpemydHm6Il2ZrkpXp2vStem6dH26Id2Ybko3p1vSrem2dHu6I92Z7kp3p3vSvem+dH96ID2YHkoPp0fSo+mx9Hh6Ij2ZnkpPp2fSs+m59Nf0fHohvZheSi+nV9Kr6bX0enojvZneSm+nd9K76b30fvogfZg+Sh+nT9Kn6bP0efoifZm+Sl+nb9K36btUpZBiqlNKTcqpTSV1qdf0afo2/Zr+zWjN6M0YzZjNWM3YzTjNuM14zfjNBM2EzUTNxM0kzaTNZM3kzRTNlM1UzdTNNM20zXTN9M0MzYBmxmamZuZmlmbWZrZm9maOZs5mrmbuZp5m3ma+Zv5mgWbBZqFm4WaRZtFmsWbxZolmyWapZulmmWbZZrlm+WaF5hfNL5tfNb9uftOs2Py2WalZuVml+V2zarNas3rz+2aN5g/Nms1YvbWatZt1mj816zZ/bv7SrNes32zQbNhs1GzcDGw2aTZtNmsGNZs3WzRbNoObrZqtmyHNNs22zdBmu2b7ZlgzvNmh2bHZqdm52aUZ0eza7Nbs3uzR7Nns1Yxs9m72afZt9mv2bw5oDmwOag5uDmkObQ5rDm+OaI5sjmqObo5pjm2Oa45vTmhObE5qTm5OaU5tTmtOb85ozmzOas5uzmnObc5rzm8uaC5sLmoubi5pLm0uay5vrmiubK5qrm6uaa5trmuub25obmxuam5ubmlubW5rbm/uaO5s7mrubu5p7m3ua+5vHmgebB5qHm4eaR5tHmseb55onmyeap5unmmebZ5r/to837zQvNi81LzcvNK82rzWvN680bzZvNW83bzTvNu817zffNB82HzUfNx80nzafNZ83nzRfNl81XzdfNN823zXVE1oYlM3qWma3LRNabqml/vkvrlf7p9Hy6PnMfKYeaw8dh4nj5vHy+PnCfKEeaI8cZ4kT5ony5PnKfKUeao8dZ4mT5uny9PnGfKAPGOeKc+cZ8mz5tny7HmOPGeeK8+d58nz5vny/HmBvGBeKC+cF8mL5sXy4nmJvGReKi+dl8nL5uXy8nmF/Iv8y/yr/Ov8m7xi/m1eKa+cV8m/y6vm1fLq+fd5jfyHvGb+Y14rr53XyX/K6+Y/57/k9fL6eYO8Yd4ob5wH5k3ypnmzPChvnrfIW+bBeau8dR6St8nb5qF5u7x9HpaH5x3yjnmnvHPeJY/Iu+bd8u55j7xn3iuPzHvnffK+eb+8fz4gH5gPygfnQ/Kh+bB8eD4iH5mPykfnY/Kx+bh8fD4hn5hPyifnU/Kp+bR8ej4jn5nPymfnc/K5+bx8fr4gX5gvyhfnS/Kl+bJ8eb4iX5mvylfna/K1+bp8fb4h35hvyjfnW/Kt+bZ8e74j35nvynfne/K9+b58f34gP5gfyg/nR/Kj+bH8eH4iP5mfyk/nZ/Kz+bn81/x8fiG/mF/KL+dX8qv5tfx6fiO/md/Kb+d38rv5vfx+/iB/mD/KH+dP8qf5s/x5/iJ/mb/KX+dv8rf5u1zlkGOuc8pNzrnNJXe51/Zp+7b92v7taO3o7RjtmO1Y7djtOO247Xjt+O0E7YTtRO3E7STtpO1k7eTtFO2U7VTt1O007bTtdO307QztgHbGdqZ25naWdtZ2tnb2do52znaudu52nnbedr52/naBdsF2oXbhdpF20XaxdvF2iXbJdql26XaZdtl2uXb5doX2F+0v21+1v2779nq937YrtSu3q7S/a1dtV2tXb3/frtH+oV2z/WO7Vrt2u077p3bd9s/tX9r12vXbDdoN243ajduB7Sbtpu1m7aB283aLdst2cLtVu3U7pN2m3bYd2m7Xbt8Oa4e3O7Q7tju1O7e7tCPaXdvd2t3bPdo9273ake3e7T7tvu1+7f7tAe2B7UHtwe0h7aHtYe3h7RHtke1R7dHtMe2x7XHt8e0J7YntSe3J7Sntqe1p7entGe2Z7Vnt2e057bntee357QXthe1F7cXtJe2l7WXt5e0V7ZXtVe3V7TXtte117fXtDe2N7U3tze0t7a3tbe3t7R3tne1d7d3tPe297X3t/e0D7YPtQ+3D7SPto+1j7ePtE+2T7VPt0/1H/Qa2fb59oX2xfal9uX2lfbV9rX29faN9s32rfbt9p323fa99v/2g/bD9qP24/aT9tP2s/bz9ov2y/ar9uv2m/bb9rq3a0Ma2blPbtLlt29J2ba/0KX1Lv9K/jFZGL2OUMctYZewyThm3jFfGLxOUCctEZeIySZm0TFYmL1OUKctUZeoyTZm2TFemLzOUAWXGMlOZucxSZi2zldnLHGXOMleZu8xT5i3zlfnLAmXBslBZuCxSFi2LlcXLEmXJslRZuixTli3LleXLCuUX5ZflV+XX5TdlxfLbslJZuaxSfldWLauV1cvvyxrlD2XN8seyVlm7rFP+VNYtfy5/KeuV9csGZcOyUdm4DCyblE3LZmVQ2bxsUbYsg8tWZesypGxTti1Dy3Zl+zKsDC87lB3LTmXnsksZUXYtu5Xdyx5lz7JXGVn2LvuUfct+Zf9yQDmwHFQOLoeUQ8th5fByRDmyHFWOLseUY8tx5fhyQjmxnFROLqeUU8tp5fRyRjmznFXOLueUc8t55fxyQbmwXFQuLpeUS8tl5fJyRbmyXFWuLteUa8t15fpyQ7mx3FRuLreUW8tt5fZyR7mz3FXuLveUe8t95f7yQHmwPFQeLo+UR8tj5fHyRHmyPFWeLs+UZ8tzY/XK8+WF8mJ5qbxcXimvltfK6+WN8mZ5q7xd3invlvfK++WD8mH5qHxcPimfls/K5+WL8mX5qnxdvinflu9KVUKJpS6pNCWXtpTSlV7Xp+vb9ev6d6N1o3djdGN2Y3Vjd+N043bjdeN3E3QTdhN1E3eTdJN2k3WTd1N0U3ZTdVN303TTdtN103czdAO6GbuZupm7WbpZu9m62bs5ujm7ubq5u3m6ebv5uvm7BboFu4W6hbtFukW7xbrFuyW6JbuluqW7Zbplu+W65bsV/peuX69bv9ug27DbqNu4G9ht0m3abdYN6jbvtui27AZ3W3Vbd0O6bbptu6Hddt323bBueLdDt2O3U7dzt0s3otu1263bvduj27PbqxvZ7d3t0+3b7dft3x3QHdgd1B3cHdId2h3WHd4d0R3ZHdUd3R3THdsd1x3fndCd2J3Undyd0p3andad3p3Rndmd1Z3dndOd253Xnd9d0F3YXdRd3F3SXdpd1l3eXdFd2V3VXd1d013bXddd393Q3djd1N3c3dLd2t3W3d7d0d3Z3dXd3d3T3dvd193fPdA92D3UPdw90j3aPdY93j3RPdk91T3dPdM92z3X/bV7vnuhe7F7qXu5e6V7tXute717o3uze6t7u3une7d7r3u/+6D7sPuo+7j7pPu0+6z7vPui+7L7qvu6+6b7tvuuq7rQxa7uUtd0uWu70nVdDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xIrrrzqbxbo9fvpc59en94SvT69k/r0er3+/6Pfj80fe07Y6/U2/r415ff/rjSqNfL55ecdkl7s84/i6P/RIvr8fWqBXq+35U/j9+2t8n2rT2+073Oj/U/n6W03aqAhP4Qf5+3fb5bear0Ve2uN+jxy1Nr79Fb42UKWGxVX+DHxZb//ME60/A87c9XPxun3d/fz0zgT/hAG9H4eJ+rT9/vYdV33H23Rf42/Xyf/vf1nn7Mxez+PP3/O+v3D+l/3b+q/36jq6Pvvhv+vrv/tfhq/b2/N/2z9T/jzffhx3jF/qv/VeoN7w3rDRuX/0Tnwj/b1b+OMfbp/t6//Kvr+sxfAP1Xfv6v/vv8v9d/3X6n+f1r8D/Hf1/+qvaG9LXor9gb3hvQGjcr/o/pfflT8qf7/Ztwf44wr/HCR+udfx9/Xf79R9f/m39T/6KPOgB9TE46qlx/rf4H/xfr/+Xt+n94a/+k6/7kfxx+j3yy9dXpDe0N6O/a26Q36ftyRP83Tt7fZTzP2H/lv9/HjzwOTfv/tIqMqY9LemX0m7vX5YZbRJh51/fe5HzqM9m/v7wP69n7W52+/6406Kxf4af7+vYlHtYb3RvR27W3dG9gb8v1p9OP7yL+dfXP81H+03rg/7fSo/6dRdz7yp/yUP70PTvn/+Rzq/z/vwv/B+n//nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Hs9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+k4SN23XrgkCGDhmn8t2307/23WIbG/1WNf/bJBAAA/P/tf7z0/7NXAgAAAAAAAAAAAAAAAAAAAP/3+t/x58T+2fcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC/vk/WPGr1tVb844ABAwb0+o45Khl/3mdkb2Svm+CHdv9RuW5UrHq9Xp9er3fVN/OufPCE68/+b7nxZ7hj+90vm+muHcZZ57rxbx2j9/iEG37y5ULvPj7541N9UtbacvDwAYOHD9h26A4DBg7YZOjQHQZuMmTQgM0GD996vgFrDBk0cPigAYO3HT5o2M++3nzI0O22GzFg4LabjTf2dsMGDR8+YOC2IwZsPWjEgB2GDthh2IgBA7cYOHjbAfPNN9+A8cb+37V3//rWvuT/CQAA///4ZelR") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 3m36.954818354s ago: executing program 0 (id=3960): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) readv(r0, &(0x7f0000001b80)=[{&(0x7f0000000880)=""/150, 0x96}, {0x0}], 0x2) 3m21.820677111s ago: executing program 32 (id=3960): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) readv(r0, &(0x7f0000001b80)=[{&(0x7f0000000880)=""/150, 0x96}, {0x0}], 0x2) 3.89717277s ago: executing program 2 (id=6586): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x20000000000003b0, 0x0, 0xd) 3.556826882s ago: executing program 4 (id=6590): r0 = socket(0x11, 0x3, 0x0) sendmmsg(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xfefb}], 0x1}}], 0x1, 0x24044815) 3.511926323s ago: executing program 2 (id=6591): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendto(r0, 0x0, 0x0, 0x40040c1, 0x0, 0x0) 3.467155503s ago: executing program 4 (id=6592): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000020851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207a0af8ff00000000cf510000000000000701000000feffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 3.383611024s ago: executing program 2 (id=6594): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db1ac8225b997fc21693c0942f0686928c388bc6f6"}}) 3.247590145s ago: executing program 4 (id=6596): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x0, 0x0, 0x0) 3.139821696s ago: executing program 4 (id=6598): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xd4}}) 2.830501038s ago: executing program 2 (id=6600): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000ac0)={0x1, 0x4, 0x4, &(0x7f0000000100)={0x1, "fd5a44512b7e1b0020ed2abb4301002700"}}) 2.632581939s ago: executing program 2 (id=6605): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x80, &(0x7f0000007a40)=ANY=[], 0xfd, 0x552e, &(0x7f000000cf00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 1.427668789s ago: executing program 4 (id=6617): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 1.228516481s ago: executing program 3 (id=6620): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) 1.22394927s ago: executing program 4 (id=6621): syz_usb_connect$hid(0x5, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a09058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) 1.078158302s ago: executing program 3 (id=6623): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b904021d0804fffc000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) 956.094072ms ago: executing program 3 (id=6624): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x3, 0x0, 0x0) 941.641172ms ago: executing program 1 (id=6625): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) 877.446543ms ago: executing program 2 (id=6626): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x5, 0x1, 0x80, "2db7b70b70a1cd630b5500852ba4acf9c3b46cd560785ab56109093dfedaaeb3"}) 758.666604ms ago: executing program 3 (id=6627): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 758.115694ms ago: executing program 1 (id=6628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) 621.800155ms ago: executing program 1 (id=6629): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)={0x1c, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}, @nested={0x4, 0x84}]}, 0x1c}], 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 551.432136ms ago: executing program 1 (id=6630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb3280df659b977f16d875fcc707b3cbb7b7a9c1d65d36636748dffc9414d25c561e46fe57c40e41404929394b03cdee6a1b0981334afa94d03d91841c75a69c2069ba4bbee2bf537a1fc5b34c0c", 0x800, r0}, 0x38) 318.078527ms ago: executing program 1 (id=6631): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) 294.235028ms ago: executing program 3 (id=6632): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000b40)=0x2, 0x4) 149.447429ms ago: executing program 1 (id=6633): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) 0s ago: executing program 3 (id=6634): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x80, &(0x7f0000007a40)=ANY=[], 0xfd, 0x552e, &(0x7f000000cf00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) kernel console output (not intermixed with test programs): tected capacity change from 0 to 32768 [ 452.940789][T14830] JBD2: Ignoring recovery information on journal [ 452.955503][T14806] loop1: detected capacity change from 0 to 65536 [ 453.116028][T14806] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 453.157676][T14844] loop0: detected capacity change from 0 to 32768 [ 453.169089][T14844] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.3875 (14844) [ 453.183397][T14830] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 453.217078][T14844] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 453.237529][T14844] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 453.249237][T14844] BTRFS info (device loop0): metadata ratio 2 [ 453.263734][T14844] BTRFS info (device loop0): force zlib compression, level 3 [ 453.282087][T14806] XFS (loop1): Ending clean mount [ 453.308697][T14806] XFS: no-recovery mounts must be read-only. [ 453.329024][T14844] BTRFS info (device loop0): enabling auto defrag [ 453.379519][T14844] BTRFS info (device loop0): max_inline at 0 [ 453.410547][ T5772] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 453.428861][T14844] BTRFS info (device loop0): using free space tree [ 453.458155][T14830] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 453.508516][T14830] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 453.523434][T14830] OCFS2: File system is now read-only. [ 453.533380][T14830] (syz.3.3869,14830,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 453.638788][T14830] (syz.3.3869,14830,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 453.696181][T14830] (syz.3.3869,14830,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 453.777667][T14830] (syz.3.3869,14830,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 453.786648][T14830] (syz.3.3869,14830,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 453.796211][T14830] (syz.3.3869,14830,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 453.804778][T14830] (syz.3.3869,14830,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 453.812260][T14844] BTRFS info (device loop0): auto enabling async discard [ 453.813029][T14830] (syz.3.3869,14830,0):ocfs2_mknod:385 ERROR: status = -30 [ 453.830500][T14830] (syz.3.3869,14830,0):ocfs2_mknod:502 ERROR: status = -30 [ 453.837974][T14830] (syz.3.3869,14830,0):ocfs2_create:676 ERROR: status = -30 [ 454.005002][ T5783] ocfs2: Unmounting device (7,3) on (node local) [ 454.205312][ T5776] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 454.566215][T14892] loop3: detected capacity change from 0 to 64 [ 455.013194][T14898] loop1: detected capacity change from 0 to 4096 [ 455.241673][T14898] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 455.281036][T14898] ntfs3: loop1: Failed to load $Extend (-22). [ 455.300737][T14898] ntfs3: loop1: Failed to initialize $Extend. [ 455.690159][ T5781] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 455.700919][ T5781] Bluetooth: hci3: Injecting HCI hardware error event [ 455.711903][ T5085] Bluetooth: hci3: hardware error 0x00 [ 455.852592][T14922] IPv6: Can't replace route, no match found [ 455.962680][T14918] loop3: detected capacity change from 0 to 4096 [ 456.045182][T14918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.220752][T14918] EXT4-fs error (device loop3): ext4_get_first_dir_block:3604: inode #12: block 80: comm syz.3.3898: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 456.337245][T14918] EXT4-fs error (device loop3): ext4_get_first_dir_block:3606: inode #12: comm syz.3.3898: directory missing '..' [ 456.416371][T14906] loop0: detected capacity change from 0 to 32768 [ 456.504534][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.585016][T14906] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 456.877672][T14906] XFS (loop0): Ending clean mount [ 457.109289][ T5776] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 457.127662][T14961] bridge0: port 3(ip6gretap0) entered blocking state [ 457.134607][T14961] bridge0: port 3(ip6gretap0) entered disabled state [ 457.154524][T14961] ip6gretap0: entered allmulticast mode [ 457.166624][T14961] ip6gretap0: entered promiscuous mode [ 457.173319][T14961] bridge0: port 3(ip6gretap0) entered blocking state [ 457.181687][T14961] bridge0: port 3(ip6gretap0) entered forwarding state [ 457.186432][T14965] x_tables: duplicate underflow at hook 4 [ 457.644621][T14975] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 457.847221][ T5085] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 457.865018][T14981] snd_dummy snd_dummy.0: control 0:7841:0:syz0:0 is already present [ 458.350027][ T23] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 458.563340][ T23] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 458.590309][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.629805][ T23] usb 2-1: config 0 descriptor?? [ 458.903861][T15019] bond1: entered promiscuous mode [ 458.909492][T15019] bond1: entered allmulticast mode [ 458.915094][T15019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.083994][ T23] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0f [ 459.114556][ T23] hackrf 2-1:0.0: Could not detect board [ 459.124746][ T23] hackrf: probe of 2-1:0.0 failed with error -71 [ 459.144553][ T23] usb 2-1: USB disconnect, device number 23 [ 459.530913][T15038] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3952'. [ 459.573153][T15038] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 459.587191][T15038] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 459.875953][T15048] loop0: detected capacity change from 0 to 4096 [ 460.057034][ T5835] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 460.127147][T15052] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3959'. [ 460.136527][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3959'. [ 460.277136][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 460.300645][ T5835] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 460.327600][ T5835] usb 4-1: config 0 has no interface number 0 [ 460.336009][ T5835] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 460.368408][ T5835] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 460.392291][T15042] loop2: detected capacity change from 0 to 32768 [ 460.399011][ T5835] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 460.399047][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 460.399069][ T5835] usb 4-1: Product: syz [ 460.399086][ T5835] usb 4-1: SerialNumber: syz [ 460.401503][ T5835] usb 4-1: config 0 descriptor?? [ 460.467124][T15042] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3954 (15042) [ 460.480133][ T5835] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 460.500016][ T5835] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input20 [ 460.530931][T15042] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 460.583960][T15042] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 460.611849][T15042] BTRFS info (device loop2): using free space tree [ 460.745321][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 460.785395][T15042] BTRFS info (device loop2): enabling ssd optimizations [ 460.814890][T15042] BTRFS info (device loop2): auto enabling async discard [ 460.971439][ T5835] usb 4-1: USB disconnect, device number 35 [ 461.020886][ T5835] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 461.112588][ T5775] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 461.435248][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 461.435264][ T28] audit: type=1326 audit(1777925335.703:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.2.3967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 461.510718][ T5763] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (5763) [ 461.530637][ T28] audit: type=1326 audit(1777925335.703:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.2.3967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 461.647048][ T28] audit: type=1326 audit(1777925335.743:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.2.3967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 461.756983][ T28] audit: type=1326 audit(1777925335.743:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.2.3967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 461.857117][ T28] audit: type=1326 audit(1777925335.753:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.2.3967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 461.958431][ T28] audit: type=1326 audit(1777925335.753:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.2.3967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 462.073248][ T28] audit: type=1326 audit(1777925335.753:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.2.3967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 462.177196][ T28] audit: type=1326 audit(1777925335.753:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.2.3967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 462.277012][ T28] audit: type=1326 audit(1777925335.753:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.2.3967" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 462.358355][ T28] audit: type=1326 audit(1777925336.323:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15094 comm="syz.1.3974" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5019cdd9 code=0x7ffc0000 [ 462.417178][T15105] netlink: 'syz.2.3978': attribute type 21 has an invalid length. [ 462.545574][T15107] loop3: detected capacity change from 0 to 1764 [ 462.732783][T15111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3981'. [ 462.757880][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'. [ 462.760632][T15113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3982'. [ 463.707133][T15139] usb usb7: usbfs: process 15139 (syz.1.3995) did not claim interface 0 before use [ 463.953943][T15147] loop1: detected capacity change from 0 to 2048 [ 464.025614][T15147] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 464.096251][T15151] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 464.096584][T15147] syz.1.3998: attempt to access beyond end of device [ 464.096584][T15147] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 464.308757][T15147] syz.1.3998: attempt to access beyond end of device [ 464.308757][T15147] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 464.348169][T15147] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 464.377860][T15147] NILFS (loop1): error -5 reading inode: ino=12 [ 464.417122][T14602] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 464.607084][T14602] usb 4-1: Using ep0 maxpacket: 8 [ 464.614693][T14602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 464.647038][T14602] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 464.675463][T14602] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 464.699034][T14602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.726093][T14602] usb 4-1: Product: syz [ 464.741767][T14602] usb 4-1: Manufacturer: syz [ 464.746440][T14602] usb 4-1: SerialNumber: syz [ 464.778380][T14602] usb 4-1: config 0 descriptor?? [ 465.061757][T15155] loop2: detected capacity change from 0 to 32768 [ 465.202888][ T5835] usb 4-1: USB disconnect, device number 36 [ 466.089032][T15183] loop2: detected capacity change from 0 to 1024 [ 466.299672][ T59] hfsplus: b-tree write err: -5, ino 25 [ 466.305705][ T59] hfsplus: b-tree write err: -5, ino 4 [ 466.349367][ T59] hfsplus: b-tree write err: -5, ino 2 [ 466.397341][T15190] loop3: detected capacity change from 0 to 16 [ 466.457543][T15190] erofs: (device loop3): mounted with root inode @ nid 36. [ 466.497753][T15190] erofs: (device loop3): erofs_init_inode_xattrs: xattr_isize 12 of nid 86 is not supported yet [ 466.967327][T15203] netlink: 'syz.2.4025': attribute type 12 has an invalid length. [ 467.037024][ T5835] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 467.237107][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 467.256139][ T5835] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 467.266716][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.275765][T15210] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 467.296964][ T5835] usb 4-1: Product: syz [ 467.307189][ T5835] usb 4-1: Manufacturer: syz [ 467.311948][ T5835] usb 4-1: SerialNumber: syz [ 467.357344][ T5835] r8152-cfgselector 4-1: config 0 descriptor?? [ 467.628124][ T5835] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 467.888414][ T786] usb 4-1: USB disconnect, device number 37 [ 468.616424][T15225] loop2: detected capacity change from 0 to 32768 [ 468.661030][T15225] [ 468.661030][T15225] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 468.661030][T15225] [ 468.739205][T15225] jfs_rename: dtInsert returned -EIO [ 468.852617][ T5775] [ 468.852617][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 468.852617][ T5775] [ 468.914153][ T5775] [ 468.914153][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 468.914153][ T5775] [ 469.232197][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 469.232214][ T28] audit: type=1800 audit(1777925343.503:104): pid=15239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.4043" name="/newroot/1027/file0" dev="tmpfs" ino=5291 res=0 errno=0 [ 469.546543][T15252] loop1: detected capacity change from 0 to 1024 [ 469.626358][T15252] EXT4-fs: Ignoring removed orlov option [ 469.672507][T15252] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 469.758474][T15252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.792860][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4052'. [ 470.066670][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.075997][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 470.280571][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 470.298197][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 470.325715][ T9] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 470.362996][ T9] usb 4-1: config 1 interface 0 has no altsetting 1 [ 470.379001][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 470.400872][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.419527][ T9] usb 4-1: Product: syz [ 470.423781][ T9] usb 4-1: Manufacturer: syz [ 470.437029][ T9] usb 4-1: SerialNumber: syz [ 470.463023][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 470.667853][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 470.873518][ T9] usb 4-1: USB disconnect, device number 38 [ 471.136030][T15277] loop2: detected capacity change from 0 to 32768 [ 471.310793][T15284] netlink: 'syz.1.4062': attribute type 29 has an invalid length. [ 471.691136][T15292] netlink: 'syz.2.4066': attribute type 11 has an invalid length. [ 471.737051][T15292] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4066'. [ 471.869833][T15296] loop3: detected capacity change from 0 to 64 [ 472.209836][T15305] team0: entered promiscuous mode [ 472.215127][T15305] team_slave_0: entered promiscuous mode [ 472.226490][T15305] team_slave_1: entered promiscuous mode [ 473.249263][T15318] loop1: detected capacity change from 0 to 16 [ 473.268382][T15312] loop2: detected capacity change from 0 to 32768 [ 473.275912][T15318] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 473.308762][T15318] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 473.398962][T15315] loop3: detected capacity change from 0 to 32768 [ 473.415785][T15312] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 473.469028][T15315] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 473.590251][T15312] XFS (loop2): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 473.705733][T15315] XFS (loop3): Ending clean mount [ 473.712505][T15312] XFS (loop2): Starting recovery (logdev: internal) [ 473.716676][T15318] erofs: DAX unsupported by block device. Turning off DAX. [ 473.747375][T15318] erofs: (device loop1): mounted with root inode @ nid 36. [ 473.765258][T15315] XFS (loop3): Quotacheck needed: Please wait. [ 473.844196][T15312] XFS (loop2): Ending recovery (logdev: internal) [ 473.890999][T15312] XFS (loop2): Quotacheck needed: Please wait. [ 473.947274][T15315] XFS (loop3): Quotacheck: Done. [ 473.978322][ T5085] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4045 in[4096, 0] out[9000] [ 473.999339][T15318] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4045 in[4096, 0] out[8192] [ 474.047020][T15312] XFS (loop2): Quotacheck: Done. [ 474.077836][ T28] audit: type=1800 audit(1777925348.353:105): pid=15318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4079" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 474.198131][ T5775] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 474.357144][ T5783] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 474.821671][T15341] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4080'. [ 474.856021][T15341] tc_dump_action: action bad kind [ 475.064704][T15346] loop1: detected capacity change from 0 to 256 [ 475.083667][T15346] exfat: Deprecated parameter 'utf8' [ 475.136013][T15346] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 475.237141][ T28] audit: type=1800 audit(1777925349.503:106): pid=15346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4086" name="file2" dev="loop1" ino=1048633 res=0 errno=0 [ 476.356449][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 476.381070][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 476.390616][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 476.401628][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 476.413719][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 476.431260][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 476.478156][T15370] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4097'. [ 476.540174][T15371] wg1 speed is unknown, defaulting to 1000 [ 476.723587][T15381] loop2: detected capacity change from 0 to 16 [ 476.751541][T15381] erofs: (device loop2): mounted with root inode @ nid 36. [ 476.774052][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.822851][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 476.860646][T15381] syz.2.4101: attempt to access beyond end of device [ 476.860646][T15381] loop2: rw=524288, sector=131758, nr_sectors = 2 limit=16 [ 476.929470][T15385] netlink: 'syz.3.4103': attribute type 29 has an invalid length. [ 476.932069][T15381] syz.2.4101: attempt to access beyond end of device [ 476.932069][T15381] loop2: rw=524288, sector=74, nr_sectors = 2 limit=16 [ 476.964502][T15381] syz.2.4101: attempt to access beyond end of device [ 476.964502][T15381] loop2: rw=524288, sector=262336, nr_sectors = 2 limit=16 [ 476.980060][T15381] syz.2.4101: attempt to access beyond end of device [ 476.980060][T15381] loop2: rw=524288, sector=172, nr_sectors = 2 limit=16 [ 476.996395][T15381] syz.2.4101: attempt to access beyond end of device [ 476.996395][T15381] loop2: rw=524288, sector=131274, nr_sectors = 2 limit=16 [ 477.004024][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.012322][T15381] syz.2.4101: attempt to access beyond end of device [ 477.012322][T15381] loop2: rw=524288, sector=178, nr_sectors = 2 limit=16 [ 477.026672][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 477.036596][T15381] syz.2.4101: attempt to access beyond end of device [ 477.036596][T15381] loop2: rw=524288, sector=131284, nr_sectors = 2 limit=16 [ 477.061329][T15381] syz.2.4101: attempt to access beyond end of device [ 477.061329][T15381] loop2: rw=524288, sector=178, nr_sectors = 2 limit=16 [ 477.075387][T15381] syz.2.4101: attempt to access beyond end of device [ 477.075387][T15381] loop2: rw=524288, sector=4830, nr_sectors = 2 limit=16 [ 477.095078][T15385] netlink: 'syz.3.4103': attribute type 29 has an invalid length. [ 477.137482][T15381] syz.2.4101: attempt to access beyond end of device [ 477.137482][T15381] loop2: rw=524288, sector=1556797440, nr_sectors = 2 limit=16 [ 477.284426][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.336643][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 477.356279][T15389] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 477.383704][T15389] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 477.397767][T15389] overlayfs: missing 'lowerdir' [ 477.480754][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.491265][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 477.870706][T15371] chnl_net:caif_netlink_parms(): no params data found [ 478.379517][T15371] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.386772][T15371] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.407712][T15371] bridge_slave_0: entered allmulticast mode [ 478.423880][T15371] bridge_slave_0: entered promiscuous mode [ 478.484835][T15371] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.495049][ T5781] Bluetooth: hci2: command tx timeout [ 478.535644][T15371] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.601014][T15371] bridge_slave_1: entered allmulticast mode [ 478.622701][T15371] bridge_slave_1: entered promiscuous mode [ 478.975998][ T28] audit: type=1800 audit(1777925353.243:107): pid=15422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.4115" name="/newroot/1047/file0" dev="tmpfs" ino=5402 res=0 errno=0 [ 479.118402][T15371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.355214][T15371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.570177][T15424] loop3: detected capacity change from 0 to 32768 [ 479.593126][T15424] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 479.675841][ T5763] blk_print_req_error: 17 callbacks suppressed [ 479.675860][ T5763] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 479.677847][T15371] team0: Port device team_slave_0 added [ 479.892990][T15371] team0: Port device team_slave_1 added [ 480.118876][T15371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.137052][T15371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.217048][T15371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.269803][T15371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.277942][T15371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.367329][T15371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.567108][ T5781] Bluetooth: hci2: command tx timeout [ 480.881520][T15371] hsr_slave_0: entered promiscuous mode [ 480.898572][T15371] hsr_slave_1: entered promiscuous mode [ 480.940661][T15371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.987768][T15371] Cannot create hsr debugfs directory [ 481.157777][ T11] dvmrp0 (unregistering): left allmulticast mode [ 481.554702][T15505] loop2: detected capacity change from 0 to 1024 [ 481.870954][ T2882] hfsplus: b-tree write err: -5, ino 25 [ 481.887207][ T2882] hfsplus: b-tree write err: -5, ino 4 [ 481.892946][ T2882] hfsplus: b-tree write err: -5, ino 2 [ 481.927187][ T2882] hfsplus: b-tree write err: -5, ino 26 [ 482.397064][ T11] hsr_slave_0: left promiscuous mode [ 482.465348][ T11] hsr_slave_1: left promiscuous mode [ 482.482548][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.528516][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.569416][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.602234][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.617953][ T11] bridge_slave_1: left allmulticast mode [ 482.623695][ T11] bridge_slave_1: left promiscuous mode [ 482.644475][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.647413][ T5781] Bluetooth: hci2: command tx timeout [ 482.675702][ T11] bridge_slave_0: left allmulticast mode [ 482.684081][ T11] bridge_slave_0: left promiscuous mode [ 482.698910][T15540] libceph: resolve '0.' (ret=-3): failed [ 482.707517][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.772042][T15542] MTD: Attempt to mount non-MTD device "./file0" [ 482.779669][T15542] ./file0: Can't open blockdev [ 482.843781][ T11] veth1_macvtap: left promiscuous mode [ 482.852531][ T11] veth0_macvtap: left promiscuous mode [ 482.860392][ T11] veth1_vlan: left promiscuous mode [ 482.863136][T15544] loop2: detected capacity change from 0 to 128 [ 482.903776][T15544] Bad inode number on dev loop2: 32769 is out of range [ 483.373722][ T11] bond3 (unregistering): Released all slaves [ 483.418316][ T11] bond2 (unregistering): Released all slaves [ 483.441597][ T11] bond1 (unregistering): Released all slaves [ 483.861484][ T11] team0 (unregistering): Port device virt_wifi0 removed [ 484.191807][ T11] team0 (unregistering): Port device team_slave_1 removed [ 484.260258][ T11] team0 (unregistering): Port device team_slave_0 removed [ 484.322027][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.390848][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.727149][ T5781] Bluetooth: hci2: command tx timeout [ 484.940846][ T11] bond0 (unregistering): Released all slaves [ 485.090564][ T23] wg1 speed is unknown, defaulting to 1000 [ 485.319873][T15371] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 485.380645][T15371] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 485.470802][T15371] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 485.523989][T15371] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 485.845782][T15371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.955318][T15371] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.027608][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.034822][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.064115][T15574] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4175'. [ 486.175791][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.183144][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.311663][ T11] IPVS: stop unused estimator thread 0... [ 486.389305][T15371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.041865][T15371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.241090][T15606] netlink: 'syz.3.4182': attribute type 3 has an invalid length. [ 487.260058][T15606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4182'. [ 487.494843][T15584] loop2: detected capacity change from 0 to 32768 [ 487.629570][T15584] JBD2: Ignoring recovery information on journal [ 487.782060][T15584] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 488.102606][T15371] veth0_vlan: entered promiscuous mode [ 488.188116][T15371] veth1_vlan: entered promiscuous mode [ 488.328021][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 488.343405][T15371] veth0_macvtap: entered promiscuous mode [ 488.379256][T15371] veth1_macvtap: entered promiscuous mode [ 488.395240][T15640] loop3: detected capacity change from 0 to 2048 [ 488.440206][T15371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.454539][T15640] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 488.490354][T15371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.527575][T15644] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.537172][T15371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.597113][T15371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.629393][T15640] UBIFS error (pid: 15640): cannot open "./file0", error -22 [ 488.631159][T15371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.697010][T15371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.753269][T15371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.796321][T15371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.839548][T15371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.892289][T15371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.936627][T15371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.951481][T15371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.977568][T15371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.005099][T15371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.076349][T15371] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.123210][T15371] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.147029][T15371] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.156000][T15371] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.419261][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.437042][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.533095][ T2882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.554084][ T2882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.903713][T15680] MTD: Attempt to mount non-MTD device "./file0" [ 489.932258][T15680] ./file0: Can't open blockdev [ 489.943053][T15681] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4088'. [ 490.446443][T15701] loop2: detected capacity change from 0 to 512 [ 490.642032][T15701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.658795][T15713] loop3: detected capacity change from 0 to 16 [ 490.773949][T15713] erofs: (device loop3): mounted with root inode @ nid 36. [ 490.829675][T15701] EXT4-fs error (device loop2): ext4_validate_block_bitmap:421: comm syz.2.4215: bg 0: bad block bitmap checksum [ 490.862244][T15701] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Filesystem failed CRC [ 490.941071][T15713] bio_check_eod: 339 callbacks suppressed [ 490.941093][T15713] syz.3.4217: attempt to access beyond end of device [ 490.941093][T15713] loop3: rw=524288, sector=131758, nr_sectors = 2 limit=16 [ 490.999043][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.026787][T15713] syz.3.4217: attempt to access beyond end of device [ 491.026787][T15713] loop3: rw=524288, sector=74, nr_sectors = 2 limit=16 [ 491.091932][T15713] syz.3.4217: attempt to access beyond end of device [ 491.091932][T15713] loop3: rw=524288, sector=262336, nr_sectors = 2 limit=16 [ 491.147141][T15713] syz.3.4217: attempt to access beyond end of device [ 491.147141][T15713] loop3: rw=524288, sector=172, nr_sectors = 2 limit=16 [ 491.197628][T15713] syz.3.4217: attempt to access beyond end of device [ 491.197628][T15713] loop3: rw=524288, sector=131274, nr_sectors = 2 limit=16 [ 491.237487][T15713] syz.3.4217: attempt to access beyond end of device [ 491.237487][T15713] loop3: rw=524288, sector=178, nr_sectors = 2 limit=16 [ 491.282096][T15713] syz.3.4217: attempt to access beyond end of device [ 491.282096][T15713] loop3: rw=524288, sector=131284, nr_sectors = 2 limit=16 [ 491.327289][T15713] syz.3.4217: attempt to access beyond end of device [ 491.327289][T15713] loop3: rw=524288, sector=178, nr_sectors = 2 limit=16 [ 491.407275][T15713] syz.3.4217: attempt to access beyond end of device [ 491.407275][T15713] loop3: rw=524288, sector=4830, nr_sectors = 2 limit=16 [ 491.456023][T15713] syz.3.4217: attempt to access beyond end of device [ 491.456023][T15713] loop3: rw=524288, sector=1556797440, nr_sectors = 2 limit=16 [ 491.496520][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4227'. [ 492.702750][T15781] ax25_connect(): syz.1.4242 uses autobind, please contact jreuter@yaina.de [ 492.807375][ T5813] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 493.028083][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 493.035558][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 493.073834][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 493.109122][ T5813] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 493.153041][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 493.158143][T15799] overlayfs: cannot append lower layer [ 493.185050][ T5813] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 493.212516][ T5813] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 493.267657][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.308962][ T5813] usb 4-1: config 0 descriptor?? [ 493.315114][T15775] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 493.612396][ C1] Bluetooth: hci4: Unexpected continuation: 1 bytes [ 493.622037][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.629746][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.637077][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.644343][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.651570][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.660782][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.668084][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.675918][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.682969][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.690855][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.698688][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.706240][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.713492][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.720874][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.728183][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.737130][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.744196][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.751620][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.758837][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.766701][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.774630][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.782073][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.797025][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.804280][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.811986][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.818986][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.825938][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.833057][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.840127][ T5085] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 493.875407][ T786] usb 4-1: USB disconnect, device number 39 [ 493.877588][ T5781] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 494.158509][T15822] ipt_rpfilter: unknown options [ 494.958597][T15846] loop4: detected capacity change from 0 to 128 [ 495.033745][T15846] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 495.104635][T15846] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 495.332014][T15371] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 495.578442][T15868] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4273'. [ 495.596208][ T28] audit: type=1326 audit(1777925369.863:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15869 comm="syz.2.4275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 495.620472][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.737151][ T28] audit: type=1326 audit(1777925369.903:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15869 comm="syz.2.4275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 495.828870][ T28] audit: type=1326 audit(1777925369.913:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15869 comm="syz.2.4275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 495.853536][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.912409][T15880] xt_recent: Unsupported userspace flags (000000de) [ 495.946310][ T28] audit: type=1326 audit(1777925369.913:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15869 comm="syz.2.4275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 495.970901][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.997203][T15885] delete_channel: no stack [ 496.017809][ T28] audit: type=1326 audit(1777925369.913:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15869 comm="syz.2.4275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 496.040262][T15888] loop1: detected capacity change from 0 to 8 [ 496.041927][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.159848][T15888] SQUASHFS error: Failed to read block 0x2d7: -5 [ 496.194137][T15888] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 496.977157][T15924] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4295'. [ 497.881220][T15956] netlink: 'syz.1.4309': attribute type 21 has an invalid length. [ 497.888348][T15954] netlink: 'syz.3.4308': attribute type 3 has an invalid length. [ 497.896809][T15956] netlink: 'syz.1.4309': attribute type 1 has an invalid length. [ 498.731325][T15977] loop3: detected capacity change from 0 to 4096 [ 498.758822][T15977] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 498.882555][T15977] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 498.954035][T15989] binder: 15988:15989 ioctl c0306201 200000000380 returned -14 [ 499.165461][T15959] loop4: detected capacity change from 0 to 32768 [ 499.237299][T15959] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 499.430964][ T5767] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 499.586992][ T23] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 499.819515][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.833352][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 499.843631][ T23] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 499.870369][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.890757][ T23] usb 2-1: config 0 descriptor?? [ 500.249093][T16028] loop2: detected capacity change from 0 to 256 [ 500.318605][ T23] Bluetooth: Can't get version to change to load ram patch err [ 500.337938][ T23] Bluetooth: Loading patch file failed [ 500.343505][ T23] ath3k: probe of 2-1:0.0 failed with error -71 [ 500.385665][ T23] usb 2-1: USB disconnect, device number 24 [ 500.446996][ T28] audit: type=1326 audit(1777925374.703:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16030 comm="syz.3.4341" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 500.502271][ T28] audit: type=1326 audit(1777925374.703:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16030 comm="syz.3.4341" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 500.545932][ T28] audit: type=1326 audit(1777925374.773:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16030 comm="syz.3.4341" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 500.614233][ T28] audit: type=1326 audit(1777925374.773:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16030 comm="syz.3.4341" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 500.675840][ T28] audit: type=1326 audit(1777925374.773:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16030 comm="syz.3.4341" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 501.171235][T16050] loop3: detected capacity change from 0 to 4096 [ 501.200713][T16050] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 501.281229][T16050] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 501.389119][T16050] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 501.508326][ T5783] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 501.617718][ T28] audit: type=1326 audit(1777925375.883:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="syz.2.4359" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 501.719350][ T28] audit: type=1326 audit(1777925375.883:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="syz.2.4359" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 501.850741][ T28] audit: type=1326 audit(1777925375.913:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="syz.2.4359" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 501.926635][ T28] audit: type=1326 audit(1777925375.913:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="syz.2.4359" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 501.958317][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.964829][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.043543][T16082] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.379679][T16095] netlink: 'syz.1.4371': attribute type 1 has an invalid length. [ 502.400988][T16095] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4371'. [ 502.423225][T16095] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4371'. [ 502.486384][T16093] loop2: detected capacity change from 0 to 4096 [ 502.509358][T16093] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 502.659929][T16093] ntfs3: loop2: failed to convert "c46c" to cp861 [ 502.881236][T16110] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4377'. [ 502.895258][T16112] loop2: detected capacity change from 0 to 256 [ 503.529292][T16133] SET target dimension over the limit! [ 503.921266][T16152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4393'. [ 503.969235][T16152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4393'. [ 503.987037][ T23] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 504.166840][T16161] loop2: detected capacity change from 0 to 512 [ 504.177302][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 504.199594][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 504.226987][ T23] usb 4-1: config 0 has no interface number 0 [ 504.268901][ T23] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 504.307151][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.315257][ T23] usb 4-1: Product: syz [ 504.347121][ T23] usb 4-1: Manufacturer: syz [ 504.351813][ T23] usb 4-1: SerialNumber: syz [ 504.377563][ T23] usb 4-1: config 0 descriptor?? [ 504.390588][ T23] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 504.646096][T16176] netlink: 'syz.2.4401': attribute type 8 has an invalid length. [ 504.715744][T16180] cgroup: none used incorrectly [ 504.832849][ T23] gspca_spca1528: reg_w err -71 [ 504.877717][ T23] spca1528: probe of 4-1:0.1 failed with error -71 [ 504.900049][ T23] usb 4-1: USB disconnect, device number 40 [ 505.357076][T14602] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 505.560295][T14602] usb 2-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 505.593444][T14602] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.625449][T14602] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 505.648727][T14602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.673258][T14602] usb 2-1: Product: syz [ 505.697303][T14602] usb 2-1: Manufacturer: syz [ 505.710741][T14602] usb 2-1: SerialNumber: syz [ 505.971701][T14602] usb 2-1: 0:1 : does not exist [ 505.976821][T14602] usb 2-1: unit 6 not found! [ 506.001705][T14602] usb 2-1: unit 2 not found! [ 506.113591][T14602] usb 2-1: USB disconnect, device number 25 [ 506.213784][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.384288][T16241] loop2: detected capacity change from 0 to 256 [ 506.442768][T16241] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012a20, chksum : 0xf9fb3df0, utbl_chksum : 0xe619d30d) [ 506.552352][ T28] audit: type=1800 audit(1777925380.823:122): pid=16241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4424" name="file2" dev="loop2" ino=1048639 res=0 errno=0 [ 506.737002][ T28] audit: type=1326 audit(1777925381.003:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.3.4430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 506.837240][ T28] audit: type=1326 audit(1777925381.003:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.3.4430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 506.919328][ T28] audit: type=1326 audit(1777925381.013:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.3.4430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 506.970751][ T28] audit: type=1326 audit(1777925381.013:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.3.4430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 506.998120][ T28] audit: type=1326 audit(1777925381.013:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.3.4430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 507.023536][ T28] audit: type=1326 audit(1777925381.013:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.3.4430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 507.048707][ T28] audit: type=1326 audit(1777925381.013:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.3.4430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 507.073562][ T28] audit: type=1326 audit(1777925381.013:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.3.4430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 507.112589][ T28] audit: type=1326 audit(1777925381.013:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.3.4430" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 507.535796][T16281] team0: entered allmulticast mode [ 507.559413][T16281] team_slave_0: entered allmulticast mode [ 507.588939][T16281] team_slave_1: entered allmulticast mode [ 507.594763][T16281] virt_wifi0: entered allmulticast mode [ 507.737020][T14602] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 507.853242][T16285] block device autoloading is deprecated and will be removed. [ 507.871883][T16285] bio_check_eod: 339 callbacks suppressed [ 507.871906][T16285] syz.2.4446: attempt to access beyond end of device [ 507.871906][T16285] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 507.927247][T14602] usb 5-1: Using ep0 maxpacket: 8 [ 507.951273][T14602] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 507.970587][T14602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.989369][T14602] usb 5-1: Product: syz [ 507.993707][T14602] usb 5-1: Manufacturer: syz [ 508.009230][T14602] usb 5-1: SerialNumber: syz [ 508.174270][T16294] ./file0: Can't lookup blockdev [ 508.185483][T16295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.240497][T14602] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71 [ 508.267261][T14602] kalmia: probe of 5-1:1.0 failed with error -71 [ 508.284701][T14602] usb 5-1: USB disconnect, device number 2 [ 508.356257][T16277] loop1: detected capacity change from 0 to 40427 [ 508.412947][T16277] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 508.445104][T16277] F2FS-fs (loop1): invalid crc value [ 508.459214][T16277] F2FS-fs (loop1): invalid crc value [ 508.473081][T16277] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 508.816735][T16308] loop1: detected capacity change from 0 to 256 [ 508.853277][T16308] exfat: Deprecated parameter 'utf8' [ 508.867144][T16308] exfat: Deprecated parameter 'utf8' [ 508.894803][T16308] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 508.960573][T16308] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 508.969091][T16314] netlink: 424 bytes leftover after parsing attributes in process `syz.4.4460'. [ 508.992589][T16314] netlink: 'syz.4.4460': attribute type 1 has an invalid length. [ 509.087195][ T5835] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 509.291813][T16322] unsupported nla_type 40 [ 509.307132][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 509.319765][ T5835] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 509.343540][ T5835] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 509.360318][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.377346][ T5835] usb 3-1: Product: syz [ 509.386168][ T5835] usb 3-1: Manufacturer: syz [ 509.399501][ T5835] usb 3-1: SerialNumber: syz [ 509.414019][ T5835] r8152-cfgselector 3-1: config 0 descriptor?? [ 509.547424][ T5813] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 509.757358][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 509.775735][ T5813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.799505][ T5813] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 509.814715][ T5813] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 509.834901][ T5813] usb 5-1: config 0 interface 0 has no altsetting 1 [ 509.852624][ T5835] r8152-cfgselector 3-1: Unknown version 0x0000 [ 509.865326][ T5813] usb 5-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 509.886479][ T5835] r8152-cfgselector 3-1: USB disconnect, device number 27 [ 509.912253][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.937150][ T5813] usb 5-1: Product: syz [ 509.952892][ T5813] usb 5-1: Manufacturer: syz [ 509.959733][ T5813] usb 5-1: SerialNumber: syz [ 509.981068][ T5813] usb 5-1: config 0 descriptor?? [ 510.285551][T16351] loop1: detected capacity change from 0 to 256 [ 510.298383][T16351] exfat: Deprecated parameter 'namecase' [ 510.321181][T16351] exfat: Deprecated parameter 'utf8' [ 510.365682][T16351] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 510.572318][ T27] usb 5-1: USB disconnect, device number 3 [ 510.997171][ T5835] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 511.190154][ T5835] usb 4-1: unable to get BOS descriptor or descriptor too short [ 511.223903][ T5835] usb 4-1: string descriptor 0 read error: -22 [ 511.230710][ T5835] usb 4-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 511.247178][ T27] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 511.256088][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.308347][ T5835] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 511.391455][ T5835] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 511.447605][ T27] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 511.476761][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.497212][ T27] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 511.525113][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.566541][ T27] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 511.583348][ T5835] snd-usb-hiface: probe of 4-1:1.0 failed with error -22 [ 511.777004][ T5835] usb 4-1: can't set first interface for hiFace device. [ 511.784060][ T5835] snd-usb-hiface: probe of 4-1:1.1 failed with error -5 [ 511.806398][ T5835] usb 4-1: can't set first interface for hiFace device. [ 511.825032][ T5835] snd-usb-hiface: probe of 4-1:1.2 failed with error -5 [ 511.866183][ T5835] usb 4-1: USB disconnect, device number 41 [ 512.437834][T16418] overlayfs: disabling nfs_export due to verity=require [ 512.445477][T16418] overlayfs: conflicting options: userxattr,verity=require [ 512.677091][ T27] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 512.853501][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4496'. [ 512.887184][ T27] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 512.938038][ T27] stv0680 2-1:4.0: last error: 50, command = 0x65 [ 512.968312][ T27] usb 2-1: USB disconnect, device number 26 [ 513.545974][T16449] loop2: detected capacity change from 0 to 2048 [ 513.807470][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4506'. [ 514.093608][T16467] loop3: detected capacity change from 0 to 512 [ 514.150031][T16467] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.4510: corrupted in-inode xattr: overlapping e_value [ 514.241308][T16467] EXT4-fs (loop3): Remounting filesystem read-only [ 514.298910][T16467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.403884][T16480] fuse: blksize only supported for fuseblk [ 514.502998][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.651593][T16487] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4516'. [ 514.780941][T16492] loop3: detected capacity change from 0 to 1024 [ 515.272548][T16509] netlink: 'syz.3.4525': attribute type 1 has an invalid length. [ 515.284012][T16511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4526'. [ 515.301182][T16509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4525'. [ 515.333270][T16511] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4526'. [ 515.386682][T16511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4526'. [ 515.635983][T16528] netlink: 'syz.2.4531': attribute type 5 has an invalid length. [ 515.652754][T16528] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4531'. [ 517.274498][T16593] loop4: detected capacity change from 0 to 764 [ 517.276535][T16595] IPv6: sit2: Disabled Multicast RS [ 517.351859][T16593] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 517.425968][T16593] Symlink component flag not implemented [ 517.447337][T16593] Symlink component flag not implemented (7) [ 517.990385][T16617] xt_TPROXY: Can be used only with -p tcp or -p udp [ 518.440690][T16635] loop3: detected capacity change from 0 to 256 [ 518.624835][T16641] bridge1: entered promiscuous mode [ 518.925033][T16647] loop2: detected capacity change from 0 to 4096 [ 518.978963][T16647] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 519.208812][T16647] ntfs3: loop2: failed to convert "c46c" to cp862 [ 519.757112][T16677] loop4: detected capacity change from 0 to 512 [ 519.778361][T16677] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 519.837205][T16679] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4591'. [ 519.943345][T16677] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 520.184949][T16685] loop1: detected capacity change from 0 to 4096 [ 520.228112][T16685] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 520.276709][T16685] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 520.625887][T16701] loop3: detected capacity change from 0 to 1024 [ 520.638246][T16701] EXT4-fs: Ignoring removed nomblk_io_submit option [ 520.683497][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4603'. [ 520.725247][T16701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.777559][T16701] VFS: Lookup of 'file0' in ext4 loop3 would have caused loop [ 520.928036][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4605'. [ 520.998688][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.445909][T16728] gtp0: entered promiscuous mode [ 521.467666][T16728] gtp0: entered allmulticast mode [ 521.717277][ T786] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 521.873098][T16717] loop2: detected capacity change from 0 to 40427 [ 521.902348][T16717] F2FS-fs (loop2): invalid crc value [ 521.943148][T16717] F2FS-fs (loop2): Found nat_bits in checkpoint [ 521.950781][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 521.961172][ T786] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 521.970932][ T786] usb 2-1: config 254 has no interface number 0 [ 521.987940][ T786] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 522.018491][ T786] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.060487][ T786] usb 2-1: config 254 interface 235 has no altsetting 0 [ 522.090705][ T786] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 522.121626][ T786] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 522.147747][ T786] usb 2-1: Product: syz [ 522.161146][ T786] usb 2-1: Manufacturer: syz [ 522.171304][ T786] usb 2-1: SerialNumber: syz [ 522.187581][T16717] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 522.198574][T16729] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 522.429115][T16729] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 522.469814][ T786] usbtest 2-1:254.235: Linux gadget zero [ 522.475554][ T786] usbtest 2-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 522.669382][ T2130] usb 2-1: USB disconnect, device number 27 [ 522.931897][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4624'. [ 522.936146][T16744] loop4: detected capacity change from 0 to 32768 [ 522.981383][T16744] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 523.082728][T16744] XFS (loop4): Ending clean mount [ 523.296447][T15371] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 524.052503][T16795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4640'. [ 524.810887][T16825] loop3: detected capacity change from 0 to 128 [ 525.483341][T16839] loop4: detected capacity change from 0 to 4096 [ 525.523345][T16839] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 525.677171][T16851] loop3: detected capacity change from 0 to 512 [ 525.747801][T16839] ntfs3: loop4: ino=5, "/" directory corrupted [ 525.754159][T16839] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 525.772414][T16851] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 525.843596][T16851] EXT4-fs (loop3): orphan cleanup on readonly fs [ 525.880426][T16851] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #3: comm syz.3.4668: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 525.976457][T16851] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.4668: Bad quota inode: 3, type: 0 [ 526.067402][T16851] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 526.118713][T16851] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 526.147965][T16851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 526.257200][T16851] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 526.285586][T16851] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 526.442094][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.504662][T16876] syz.1.4679: attempt to access beyond end of device [ 526.504662][T16876] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 526.536665][T16876] FAT-fs (loop1): unable to read boot sector [ 526.699818][T16882] loop2: detected capacity change from 0 to 512 [ 526.723364][T16882] EXT4-fs: Ignoring removed oldalloc option [ 526.744431][T16882] EXT4-fs: Ignoring removed nomblk_io_submit option [ 526.792617][T16882] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 526.832318][T16882] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 526.841053][T16882] EXT4-fs (loop2): orphan cleanup on readonly fs [ 526.848663][T16882] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 526.859980][T16882] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 526.874917][T16882] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 526.886508][T16882] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.4683: bg 0: block 40: padding at end of block bitmap is not set [ 526.902822][T16882] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 526.912394][T16882] EXT4-fs (loop2): 1 truncate cleaned up [ 526.920123][T16882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 526.976540][T16882] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.4683: bad symlink. [ 527.063633][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.143968][T16897] xt_CONNSECMARK: invalid mode: 129 [ 528.524489][T16944] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 528.783738][T16950] loop1: detected capacity change from 0 to 164 [ 528.789584][T16925] loop2: detected capacity change from 0 to 32768 [ 528.887175][T16925] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 529.069581][T16925] XFS (loop2): Ending clean mount [ 529.146371][T16960] 9pnet: Could not find request transport: f [ 529.292095][ T5775] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 529.314778][T16963] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.393805][T16967] netlink: 'syz.4.4714': attribute type 1 has an invalid length. [ 529.406057][T16967] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4714'. [ 529.673706][ T28] audit: type=1326 audit(1777925403.943:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.4.4719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d319cdd9 code=0x7ffc0000 [ 529.757605][ T28] audit: type=1326 audit(1777925403.973:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.4.4719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d319cdd9 code=0x7ffc0000 [ 529.838344][ T28] audit: type=1326 audit(1777925403.983:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.4.4719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f05d319cdd9 code=0x7ffc0000 [ 529.913551][ T28] audit: type=1326 audit(1777925403.983:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.4.4719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d319cdd9 code=0x7ffc0000 [ 529.938411][ T28] audit: type=1326 audit(1777925403.983:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.4.4719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d319cdd9 code=0x7ffc0000 [ 530.022221][T16984] QAT: Stopping all acceleration devices. [ 530.361589][T16996] netlink: 8324 bytes leftover after parsing attributes in process `syz.2.4728'. [ 530.715244][T17008] loop2: detected capacity change from 0 to 256 [ 530.759521][T17008] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 530.971178][T17015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4738'. [ 531.507543][T17035] nft_compat: unsupported protocol 1 [ 532.091784][T17022] loop3: detected capacity change from 0 to 32768 [ 532.187266][T17022] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 532.487817][T17022] XFS (loop3): Ending clean mount [ 532.736738][ T5783] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 533.135476][T17091] loop4: detected capacity change from 0 to 16 [ 533.175732][T17091] erofs: (device loop4): mounted with root inode @ nid 36. [ 533.287462][T17093] netlink: 344 bytes leftover after parsing attributes in process `syz.2.4772'. [ 533.318135][T17097] netlink: 'syz.3.4765': attribute type 10 has an invalid length. [ 533.420928][T17097] team0: Device veth1_vlan failed to register rx_handler [ 533.539451][T17102] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4776'. [ 533.947333][ T2130] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 534.148866][ T2130] usb 3-1: config 2 has an invalid interface number: 112 but max is 0 [ 534.167030][ T2130] usb 3-1: config 2 has no interface number 0 [ 534.173308][ T2130] usb 3-1: config 2 interface 112 has no altsetting 0 [ 534.218001][ T2130] usb 3-1: New USB device found, idVendor=9171, idProduct=32e3, bcdDevice=91.99 [ 534.247394][ T2130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.255484][ T2130] usb 3-1: Product: syz [ 534.287034][ T2130] usb 3-1: Manufacturer: syz [ 534.301339][ T2130] usb 3-1: SerialNumber: syz [ 534.331689][T17131] netlink: 'syz.4.4788': attribute type 10 has an invalid length. [ 534.425410][T17131] team0: Device veth1_vlan failed to register rx_handler [ 534.532408][ T2130] usb 3-1: bad CDC descriptors [ 534.574498][ T2130] usb 3-1: USB disconnect, device number 28 [ 534.612482][T17139] Scaler: ================= START STATUS ================= [ 534.636715][T17139] Scaler: ================== END STATUS ================== [ 534.754422][T17142] dlm: no locking on control device [ 535.571870][ T28] audit: type=1326 audit(1777925409.833:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17171 comm="syz.4.4810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d319cdd9 code=0x7ffc0000 [ 535.657025][ T28] audit: type=1326 audit(1777925409.833:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17171 comm="syz.4.4810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d319cdd9 code=0x7ffc0000 [ 535.752895][ T28] audit: type=1326 audit(1777925409.873:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17171 comm="syz.4.4810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f05d319cdd9 code=0x7ffc0000 [ 535.830676][T17181] loop3: detected capacity change from 0 to 2048 [ 535.861021][ T28] audit: type=1326 audit(1777925409.873:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17171 comm="syz.4.4810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d319cdd9 code=0x7ffc0000 [ 535.896557][ T28] audit: type=1326 audit(1777925409.873:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17171 comm="syz.4.4810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d319cdd9 code=0x7ffc0000 [ 535.921649][T17181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 536.828088][T17212] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4829'. [ 536.838190][T17184] loop4: detected capacity change from 0 to 32768 [ 536.906303][T17184] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 536.906303][T17184] [ 536.951664][T17184] ERROR: (device loop4): remounting filesystem as read-only [ 537.435415][T17227] loop2: detected capacity change from 0 to 8 [ 537.506825][T17227] SQUASHFS error: lzo decompression failed, data probably corrupt [ 537.515058][T17227] SQUASHFS error: Failed to read block 0x1dd: -5 [ 537.561637][T17227] SQUASHFS error: Unable to read metadata cache entry [1db] [ 537.607106][T17227] SQUASHFS error: Unable to read inode 0xa7 [ 537.866105][T17241] trusted_key: encrypted_key: keylen parameter is missing [ 538.268680][T17258] loop4: detected capacity change from 0 to 8 [ 538.295907][T17258] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 538.312607][ T5879] udevd[5879]: incorrect cramfs checksum on /dev/loop4 [ 538.338671][T17259] loop1: detected capacity change from 0 to 2048 [ 538.377930][T17259] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 538.468977][T17259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.837238][T14602] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 539.017237][T14602] usb 5-1: Using ep0 maxpacket: 16 [ 539.029530][T14602] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.046014][T14602] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 539.062239][T14602] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 539.111174][T14602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.137045][T14602] usb 5-1: Product: syz [ 539.147544][T14602] usb 5-1: Manufacturer: syz [ 539.163009][T14602] usb 5-1: SerialNumber: syz [ 539.180414][T14602] r8152-cfgselector 5-1: config 0 descriptor?? [ 539.256692][ T28] audit: type=1800 audit(1777925413.523:142): pid=17259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4853" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 539.370753][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.419233][T14602] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 539.567508][T17289] loop2: detected capacity change from 0 to 64 [ 539.632516][ T786] usb 5-1: USB disconnect, device number 4 [ 540.039602][T17305] xt_l2tp: wrong L2TP version: 0 [ 540.130287][T17309] loop2: detected capacity change from 0 to 64 [ 540.205162][T17309] Bad inode number on dev loop2: 150994946 is out of range [ 540.572937][T17325] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4884'. [ 541.167735][T17347] netlink: 'syz.4.4895': attribute type 2 has an invalid length. [ 541.185970][T17347] netlink: 'syz.4.4895': attribute type 1 has an invalid length. [ 541.312104][T17353] netlink: 'syz.4.4898': attribute type 11 has an invalid length. [ 541.509349][T17361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4902'. [ 541.537112][ T5813] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 541.759920][ T5813] usb 3-1: unable to get BOS descriptor or descriptor too short [ 541.787926][ T5813] usb 3-1: not running at top speed; connect to a high speed hub [ 541.797745][ T5813] usb 3-1: config 4 has an invalid interface number: 175 but max is 0 [ 541.806199][ T5813] usb 3-1: config 4 has no interface number 0 [ 541.816202][ T5813] usb 3-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.17 [ 541.827272][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.835680][ T5813] usb 3-1: Product: syz [ 541.840333][ T5813] usb 3-1: Manufacturer: syz [ 541.845066][ T5813] usb 3-1: SerialNumber: syz [ 542.076158][ T5813] usb 3-1: NDI device with a latency value of 1 [ 542.090328][ T5813] ftdi_sio 3-1:4.175: FTDI USB Serial Device converter detected [ 542.101323][ T5813] ftdi_sio ttyUSB0: unknown device type: 0xdc17 [ 542.116230][ T5813] usb 3-1: USB disconnect, device number 29 [ 542.133176][ T5813] ftdi_sio 3-1:4.175: device disconnected [ 542.584612][T17382] loop4: detected capacity change from 0 to 256 [ 542.719291][T17382] FAT-fs (loop4): Directory bread(block 64) failed [ 542.726080][T17382] FAT-fs (loop4): Directory bread(block 65) failed [ 542.747166][T17382] FAT-fs (loop4): Directory bread(block 66) failed [ 542.750728][T17378] loop3: detected capacity change from 0 to 32768 [ 542.757395][T17382] FAT-fs (loop4): Directory bread(block 67) failed [ 542.779006][T17382] FAT-fs (loop4): Directory bread(block 68) failed [ 542.789569][T17382] FAT-fs (loop4): Directory bread(block 69) failed [ 542.825661][T17382] FAT-fs (loop4): Directory bread(block 70) failed [ 542.842750][T17390] netlink: 'syz.2.4914': attribute type 3 has an invalid length. [ 542.848235][T17382] FAT-fs (loop4): Directory bread(block 71) failed [ 542.857689][T17382] FAT-fs (loop4): Directory bread(block 72) failed [ 542.864529][T17378] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 542.874207][T17382] FAT-fs (loop4): Directory bread(block 73) failed [ 542.888062][T17391] netlink: 'syz.1.4913': attribute type 3 has an invalid length. [ 543.085411][T17378] XFS (loop3): Ending clean mount [ 543.269553][ T5783] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 543.629245][T17410] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (39699) [ 543.710705][T17410] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 544.634701][T17449] loop3: detected capacity change from 0 to 256 [ 544.753506][T17454] netlink: 'syz.1.4943': attribute type 1 has an invalid length. [ 544.897851][ T5813] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 545.109230][ T5813] usb 5-1: config 0 has an invalid interface number: 3 but max is 2 [ 545.122103][ T5813] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 545.130948][ T5813] usb 5-1: config 0 has no interface number 1 [ 545.141190][ T5813] usb 5-1: config 0 has no interface number 2 [ 545.150742][ T5813] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 545.162054][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.194441][ T5813] usb 5-1: config 0 descriptor?? [ 545.239249][T17466] loop3: detected capacity change from 0 to 1024 [ 545.284049][T17466] hfsplus: invalid length 256 has been corrected to 255 [ 545.372714][ T2882] hfsplus: b-tree write err: -5, ino 25 [ 545.391124][ T2882] hfsplus: b-tree write err: -5, ino 4 [ 545.399104][ T2882] hfsplus: b-tree write err: -5, ino 2 [ 545.401689][T17470] loop1: detected capacity change from 0 to 64 [ 545.438566][T17447] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 545.467075][ T5813] qcserial 5-1:0.3: Qualcomm USB modem converter detected [ 545.730254][ T23] usb 5-1: USB disconnect, device number 5 [ 545.740820][ T23] qcserial 5-1:0.3: device disconnected [ 546.082902][T17486] netlink: 'syz.2.4959': attribute type 1 has an invalid length. [ 546.238555][T17492] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 546.387323][ T786] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 546.557588][T17504] loop1: detected capacity change from 0 to 256 [ 546.619458][ T786] usb 4-1: config 0 has no interfaces? [ 546.627414][ T786] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 546.636625][ T786] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 546.644918][T17508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4970'. [ 546.659714][ T5781] Bluetooth: hci0: command tx timeout [ 546.668018][ T786] usb 4-1: Manufacturer: syz [ 546.677721][T17504] FAT-fs (loop1): Directory bread(block 64) failed [ 546.684328][T17504] FAT-fs (loop1): Directory bread(block 65) failed [ 546.749544][ T786] usb 4-1: config 0 descriptor?? [ 546.757733][T17504] FAT-fs (loop1): Directory bread(block 66) failed [ 546.767202][T17504] FAT-fs (loop1): Directory bread(block 67) failed [ 546.773927][T17504] FAT-fs (loop1): Directory bread(block 68) failed [ 546.811207][T17504] FAT-fs (loop1): Directory bread(block 69) failed [ 546.831643][T17504] FAT-fs (loop1): Directory bread(block 70) failed [ 546.854277][T17504] FAT-fs (loop1): Directory bread(block 71) failed [ 546.874416][T17504] FAT-fs (loop1): Directory bread(block 72) failed [ 546.902614][T17504] FAT-fs (loop1): Directory bread(block 73) failed [ 546.995789][ T5813] usb 4-1: USB disconnect, device number 42 [ 547.249011][T17524] loop2: detected capacity change from 0 to 16 [ 547.284290][T17524] erofs: (device loop2): mounted with root inode @ nid 36. [ 547.341837][T17524] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 547.356950][T17524] syz.2.4978: attempt to access beyond end of device [ 547.356950][T17524] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 547.395143][T17524] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 547.406107][T17524] syz.2.4978: attempt to access beyond end of device [ 547.406107][T17524] loop2: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 547.420552][T17524] syz.2.4978: attempt to access beyond end of device [ 547.420552][T17524] loop2: rw=524288, sector=56, nr_sectors = 48 limit=16 [ 547.435177][T17524] syz.2.4978: attempt to access beyond end of device [ 547.435177][T17524] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 547.467767][ T28] audit: type=1800 audit(1777925421.743:143): pid=17524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4978" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 547.578051][T17532] loop1: detected capacity change from 0 to 128 [ 547.648765][T17532] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 547.695954][T17532] FAT-fs (loop1): Filesystem has been set read-only [ 547.706275][T17532] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 547.737212][T17532] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 547.774844][T17532] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 547.817126][T17532] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 547.849385][T17532] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 548.067401][T17532] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 548.095634][T17532] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 548.135975][T17532] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 548.146753][T17532] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 548.158091][ T28] audit: type=1800 audit(1777925422.433:144): pid=17532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4982" name="file2" dev="loop1" ino=1048649 res=0 errno=0 [ 548.241902][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4989'. [ 548.438765][T17555] loop3: detected capacity change from 0 to 256 [ 548.469030][T17555] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 548.578485][ T2945] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 548.649426][T17558] loop4: detected capacity change from 0 to 256 [ 548.991791][T17572] loop3: detected capacity change from 0 to 8 [ 549.025503][T17572] SQUASHFS error: Unknown inode type 257 in squashfs_iget! [ 549.539510][T17591] netlink: 'syz.1.5017': attribute type 13 has an invalid length. [ 549.574076][T17591] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5017'. [ 549.587579][T17591] erspan0: refused to change device tx_queue_len [ 549.601282][T17590] loop3: detected capacity change from 0 to 2048 [ 549.647415][T17590] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 549.744846][T17590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.794827][ T28] audit: type=1326 audit(1777925424.053:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17598 comm="syz.2.5014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 549.885417][ T28] audit: type=1326 audit(1777925424.053:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17598 comm="syz.2.5014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 549.889983][T17600] loop4: detected capacity change from 0 to 1024 [ 549.945299][T17600] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 549.982357][ T28] audit: type=1326 audit(1777925424.053:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17598 comm="syz.2.5014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 550.017328][T17600] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 550.080426][T17600] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 550.106363][ T28] audit: type=1326 audit(1777925424.053:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17598 comm="syz.2.5014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 550.131598][T17600] EXT4-fs (loop4): orphan cleanup on readonly fs [ 550.140695][T17600] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.5013: Inode bitmap for bg 0 marked uninitialized [ 550.155149][ T28] audit: type=1326 audit(1777925424.053:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17598 comm="syz.2.5014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 550.181893][T17600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 550.286350][T17600] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.5013: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 550.436416][T15371] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.461758][ T28] audit: type=1800 audit(1777925424.723:150): pid=17590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5010" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 550.518389][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.742941][T17624] loop2: detected capacity change from 0 to 128 [ 550.767139][T17626] erspan0: entered promiscuous mode [ 550.772439][T17626] erspan0: entered allmulticast mode [ 550.794807][T17624] EXT4-fs (loop2): Test dummy encryption mode enabled [ 550.804245][T17624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 550.871971][T17624] System zones: 1-3, 19-19, 35-36 [ 550.897936][T17624] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 550.979858][T17624] ext4 filesystem being mounted at /1298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.158596][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 551.432773][T17647] loop2: detected capacity change from 0 to 2048 [ 551.522327][T17647] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 551.593533][T17647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.205255][T17642] loop3: detected capacity change from 0 to 32768 [ 552.233769][T17642] (syz.3.5035,17642,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 552.272610][T17642] (syz.3.5035,17642,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 552.307977][T17642] JBD2: Ignoring recovery information on journal [ 552.349425][ T28] audit: type=1800 audit(1777925426.623:151): pid=17647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5033" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 552.401670][T17642] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 552.531735][T17659] loop4: detected capacity change from 0 to 32768 [ 552.579453][T17659] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.5041 (17659) [ 552.629246][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.647861][T17659] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 552.693636][T17659] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 552.722407][T17659] BTRFS info (device loop4): enabling ssd optimizations [ 552.739936][T17659] BTRFS info (device loop4): not using ssd optimizations [ 552.779548][T17659] BTRFS info (device loop4): turning off barriers [ 552.817723][T17659] BTRFS info (device loop4): using free space tree [ 552.935383][ T5783] ocfs2: Unmounting device (7,3) on (node local) [ 553.457677][T17700] loop1: detected capacity change from 0 to 256 [ 553.597760][T15371] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 553.636572][T17704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 553.870541][ T5763] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop4 scanned by udevd (5763) [ 554.147316][T17720] loop2: detected capacity change from 0 to 24 [ 554.187037][ T5813] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 554.330177][T17724] netlink: 'syz.1.5063': attribute type 21 has an invalid length. [ 554.359999][T17724] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5063'. [ 554.387010][T17724] netlink: 'syz.1.5063': attribute type 4 has an invalid length. [ 554.395027][T17724] netlink: 'syz.1.5063': attribute type 5 has an invalid length. [ 554.428469][ T5813] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 554.442344][ T5813] usb 4-1: config 1 has no interface number 0 [ 554.449037][T17724] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5063'. [ 554.484430][ T5813] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 554.507515][ T5813] usb 4-1: config 1 interface 105 has no altsetting 0 [ 554.556372][ T5813] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 554.587356][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.595446][ T5813] usb 4-1: Product: syz [ 554.628863][ T5813] usb 4-1: Manufacturer: syz [ 554.633647][ T5813] usb 4-1: SerialNumber: syz [ 554.928544][ T5813] aqc111: probe of 4-1:1.105 failed with error -22 [ 555.197697][ T23] usb 4-1: USB disconnect, device number 43 [ 556.717783][T17807] set match dimension is over the limit! [ 557.085706][T17819] ieee802154 phy0 wpan0: encryption failed: -90 [ 557.647003][ T23] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 557.716294][T17844] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) [ 557.852708][ T23] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 557.872667][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.898198][ T23] usb 5-1: Product: syz [ 557.912937][ T23] usb 5-1: Manufacturer: syz [ 557.927555][ T23] usb 5-1: SerialNumber: syz [ 557.944114][ T23] usb 5-1: config 0 descriptor?? [ 557.963529][ T23] cypress_cy7c63 5-1:0.0: Cypress CY7C63xxx device now attached [ 558.158629][T17862] netlink: 'syz.1.5132': attribute type 1 has an invalid length. [ 558.167480][ T23] usb 5-1: USB disconnect, device number 6 [ 558.174408][ T23] cypress_cy7c63 5-1:0.0: Cypress CY7C63xxx device now disconnected [ 558.434713][T17870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5136'. [ 558.449849][T17870] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 558.676313][T17880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5141'. [ 558.838950][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5144'. [ 558.851737][T17884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5144'. [ 559.029440][T17890] loop3: detected capacity change from 0 to 1024 [ 559.145921][T17890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.191218][T17890] EXT4-fs error (device loop3): ext4_get_first_dir_block:3595: inode #11: comm syz.3.5146: directory missing '.' [ 559.282517][T17890] EXT4-fs (loop3): Remounting filesystem read-only [ 559.437872][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.695246][T17909] loop1: detected capacity change from 0 to 4096 [ 559.835963][T17920] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 559.928392][T17909] NILFS (loop1): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 560.297703][T17937] netlink: 'syz.4.5166': attribute type 4 has an invalid length. [ 560.454543][T17941] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5169'. [ 560.727196][T17948] loop3: detected capacity change from 0 to 1024 [ 560.788250][T17950] loop4: detected capacity change from 0 to 128 [ 561.359918][T17958] xt_CT: No such helper "snmp" [ 561.425787][T17936] loop2: detected capacity change from 0 to 32768 [ 561.848442][T17980] ip6t_REJECT: ECHOREPLY is not supported [ 561.954773][T17982] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 562.057256][T14602] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 562.248229][T14602] usb 5-1: Using ep0 maxpacket: 32 [ 562.263496][T14602] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.295478][T14602] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.314650][T14602] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 562.332716][T14602] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 562.351444][T14602] usb 5-1: Product: syz [ 562.372954][T14602] usb 5-1: Manufacturer: syz [ 562.389650][T14602] hub 5-1:4.0: USB hub found [ 562.507189][ T28] audit: type=1326 audit(1777925436.733:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17997 comm="syz.3.5197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 562.577093][ T28] audit: type=1326 audit(1777925436.733:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17997 comm="syz.3.5197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 562.621362][ T28] audit: type=1326 audit(1777925436.733:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17997 comm="syz.3.5197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 562.647563][ T28] audit: type=1326 audit(1777925436.733:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17997 comm="syz.3.5197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 562.672587][ T2130] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 562.682345][T14602] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 562.711218][ T28] audit: type=1326 audit(1777925436.733:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17997 comm="syz.3.5197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 562.877836][ T2130] usb 3-1: Using ep0 maxpacket: 8 [ 562.912715][ T2130] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.949589][ T2130] usb 3-1: config 0 interface 0 has no altsetting 0 [ 562.966358][ T2130] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 562.997311][ T2130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.017613][ T2130] usb 3-1: Product: syz [ 563.021864][ T2130] usb 3-1: Manufacturer: syz [ 563.026512][ T2130] usb 3-1: SerialNumber: syz [ 563.047908][ T5835] usb 5-1: USB disconnect, device number 7 [ 563.082894][ T2130] usb 3-1: config 0 descriptor?? [ 563.102187][ T2130] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 563.323844][ T2130] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 563.352982][ T2130] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 563.375519][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.385172][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.403909][ T2130] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 563.419685][T18021] cgroup: none used incorrectly [ 563.627427][ T5835] usb 3-1: USB disconnect, device number 30 [ 563.796368][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5213'. [ 564.384884][T18027] loop3: detected capacity change from 0 to 32768 [ 564.483257][T18056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5221'. [ 564.491048][T18027] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 564.601372][T18027] XFS (loop3): Ending clean mount [ 564.767064][ T2130] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 564.816115][ T5783] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 564.987743][ T2130] usb 3-1: Using ep0 maxpacket: 8 [ 565.046369][ T2130] usb 3-1: config 6 has an invalid interface number: 220 but max is 0 [ 565.065512][ T2130] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 565.087519][ T2130] usb 3-1: config 6 has no interface number 0 [ 565.093796][ T2130] usb 3-1: config 6 interface 220 has no altsetting 0 [ 565.159711][ T2130] usb 3-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 565.186932][ T2130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.195788][ T2130] usb 3-1: Product: syz [ 565.217658][ T2130] usb 3-1: Manufacturer: syz [ 565.222349][ T2130] usb 3-1: SerialNumber: syz [ 565.433733][T18081] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5232'. [ 565.500162][ T2130] usb 3-1: USB disconnect, device number 31 [ 565.664389][ T28] audit: type=1326 audit(1777925439.933:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz.1.5235" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d5019cdd9 code=0x0 [ 565.768033][T18089] loop4: detected capacity change from 0 to 4096 [ 565.795992][T18089] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 565.834445][T18089] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 565.845532][T18089] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 565.862482][T18089] ntfs: (device loop4): read_ntfs_boot_sector(): Using backup boot sector. [ 565.890216][T18089] ntfs: volume version 3.1. [ 566.244849][T18102] netlink: 'syz.2.5242': attribute type 6 has an invalid length. [ 566.454283][T18110] loop4: detected capacity change from 0 to 256 [ 566.571688][T18110] FAT-fs (loop4): Directory bread(block 64) failed [ 566.597033][T18110] FAT-fs (loop4): Directory bread(block 65) failed [ 566.612615][T18110] FAT-fs (loop4): Directory bread(block 66) failed [ 566.645444][T18110] FAT-fs (loop4): Directory bread(block 67) failed [ 566.677159][T18110] FAT-fs (loop4): Directory bread(block 68) failed [ 566.683779][T18110] FAT-fs (loop4): Directory bread(block 69) failed [ 566.725204][T18110] FAT-fs (loop4): Directory bread(block 70) failed [ 566.739001][T18110] FAT-fs (loop4): Directory bread(block 71) failed [ 566.760794][T18110] FAT-fs (loop4): Directory bread(block 72) failed [ 566.783045][T18110] FAT-fs (loop4): Directory bread(block 73) failed [ 567.127036][ T5813] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 567.332441][ T5813] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 567.347981][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.371263][ T5813] usb 4-1: Product: syz [ 567.382172][ T5813] usb 4-1: Manufacturer: syz [ 567.392182][ T5813] usb 4-1: SerialNumber: syz [ 567.443861][ T5813] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 567.469287][ T786] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 567.701560][T18145] loop1: detected capacity change from 0 to 256 [ 567.726837][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5264'. [ 567.826916][T18145] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 568.008440][T14602] usb 4-1: USB disconnect, device number 44 [ 568.080790][T18151] cgroup: Unexpected value for 'nofavordynmods' [ 568.239814][T18141] loop2: detected capacity change from 0 to 32768 [ 568.263196][T18153] loop1: detected capacity change from 0 to 4096 [ 568.271209][T18153] __ntfs_warning: 18 callbacks suppressed [ 568.271223][T18153] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 568.333832][T18153] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 568.350887][T18153] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 568.354312][T18141] JBD2: Ignoring recovery information on journal [ 568.363862][T18153] ntfs: (device loop1): read_ntfs_boot_sector(): Using backup boot sector. [ 568.395720][T18153] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 568.414968][T18153] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 568.435562][T18153] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 568.444579][T18153] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 568.464907][T18153] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 568.473727][T18153] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 568.526581][T18153] ntfs: volume version 3.1. [ 568.543322][T18141] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 568.571228][ T786] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 568.605694][ T786] ath9k_htc: Failed to initialize the device [ 568.646340][T14602] usb 4-1: ath9k_htc: USB layer deinitialized [ 568.850616][T18163] loop4: detected capacity change from 0 to 128 [ 568.888334][T18163] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 568.975655][T18163] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 569.083014][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 569.159877][T18168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5272'. [ 569.203907][T18168] openvswitch: netlink: Missing key (keys=40, expected=80) [ 569.316531][T18171] netlink: 'syz.3.5276': attribute type 1 has an invalid length. [ 569.764514][T18186] netlink: 'syz.4.5282': attribute type 2 has an invalid length. [ 569.802132][T18186] netlink: 'syz.4.5282': attribute type 1 has an invalid length. [ 570.043063][T18196] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5289'. [ 570.269055][T18196] hsr_slave_1 (unregistering): left promiscuous mode [ 570.273888][T18206] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 571.001142][T18204] loop1: detected capacity change from 0 to 32768 [ 571.052314][T18204] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 571.084038][T18228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5303'. [ 571.361761][ T5763] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 571.540242][T18236] loop2: detected capacity change from 0 to 65 [ 571.588105][T18236] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 572.115139][T18224] loop4: detected capacity change from 0 to 40427 [ 572.129808][T18224] F2FS-fs (loop4): invalid crc value [ 572.211607][T18230] loop3: detected capacity change from 0 to 32768 [ 572.266807][T18230] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.5304 (18230) [ 572.376970][T18230] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 572.387436][T18224] F2FS-fs (loop4): Start checkpoint disabled! [ 572.402035][T18224] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 572.417519][T18230] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 572.426780][T18230] BTRFS info (device loop3): setting nodatacow, compression disabled [ 572.497059][T18230] BTRFS info (device loop3): enabling auto defrag [ 572.503786][T18230] BTRFS info (device loop3): max_inline at 0 [ 572.537971][T18230] BTRFS info (device loop3): using free space tree [ 572.701807][T18230] BTRFS info (device loop3): auto enabling async discard [ 572.866766][T18253] loop2: detected capacity change from 0 to 8192 [ 573.093832][T18250] loop1: detected capacity change from 0 to 32768 [ 573.117878][ T5783] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 573.192271][T18272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5317'. [ 573.264512][T18250] JBD2: Ignoring recovery information on journal [ 573.380534][T18250] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 574.084751][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 574.142124][T18282] loop3: detected capacity change from 0 to 4096 [ 574.200502][T18282] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 574.204443][T18286] loop4: detected capacity change from 0 to 2048 [ 574.344838][T18286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.587074][T18282] ntfs3: loop3: failed to convert "c46c" to macroman [ 574.688846][T15371] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.923760][T18303] xt_ipcomp: unknown flags 12 [ 575.171594][T18307] netlink: 'syz.2.5330': attribute type 7 has an invalid length. [ 575.390421][T18313] PKCS7: Unknown OID: [4] 0.0 [ 575.395202][T18313] PKCS7: Only support pkcs7_signedData type [ 575.871716][T18325] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5338'. [ 575.934999][T18302] loop1: detected capacity change from 0 to 32768 [ 575.995970][T18302] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 576.078553][T18325] hsr_slave_1 (unregistering): left promiscuous mode [ 576.176653][T18302] XFS (loop1): Ending clean mount [ 576.195607][T18302] XFS (loop1): Quotacheck needed: Please wait. [ 576.314946][T18302] XFS (loop1): Quotacheck: Done. [ 576.575095][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 576.700775][T18356] xt_limit: Overflow, try lower: 2147483649/3300 [ 576.724794][T18358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 577.682892][T18392] loop4: detected capacity change from 0 to 164 [ 577.769175][T18396] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 577.872449][T18392] Symlink component flag not implemented [ 577.902675][T18392] Symlink component flag not implemented (7) [ 578.105664][T18400] netlink: 'syz.3.5373': attribute type 1 has an invalid length. [ 578.114577][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5373'. [ 578.436306][T18409] loop4: detected capacity change from 0 to 2048 [ 578.484919][T18413] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 579.031215][T18430] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 579.073727][T18430] CIFS mount error: No usable UNC path provided in device string! [ 579.073727][T18430] [ 579.084831][T18430] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 579.892917][T18455] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5399'. [ 579.919415][T18433] loop1: detected capacity change from 0 to 32768 [ 579.929707][T18433] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 579.942434][T18453] loop3: detected capacity change from 0 to 2048 [ 580.013830][T18458] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 580.209203][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5402'. [ 580.209809][T18464] overlayfs: missing 'lowerdir' [ 580.226421][ T5763] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 580.247444][T18461] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5402'. [ 580.360150][T18461] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5402'. [ 580.846696][T18482] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5412'. [ 580.937283][ T5813] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 581.095881][T18492] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5416'. [ 581.169528][ T5813] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 581.187041][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.212512][ T5813] usb 4-1: config 0 descriptor?? [ 581.250334][ T5813] cp210x 4-1:0.0: cp210x converter detected [ 581.478843][ T5813] usb 4-1: cp210x converter now attached to ttyUSB0 [ 581.661842][ T5813] usb 4-1: USB disconnect, device number 45 [ 581.687839][ T5813] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 581.728150][ T5813] cp210x 4-1:0.0: device disconnected [ 582.348571][T18534] loop2: detected capacity change from 0 to 512 [ 582.388324][T18534] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 582.469525][T18534] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 582.553084][T18534] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.5437: bg 0: block 248: padding at end of block bitmap is not set [ 582.599454][T18534] __quota_error: 12 callbacks suppressed [ 582.599474][T18534] Quota error (device loop2): write_blk: dquota write failed [ 582.637021][T18534] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 582.707087][T18534] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.5437: Failed to acquire dquot type 1 [ 582.729682][ T28] audit: type=1326 audit(1777925456.993:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18548 comm="syz.3.5443" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 582.764408][T18534] EXT4-fs (loop2): 1 truncate cleaned up [ 582.778928][T18534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 582.832173][ T28] audit: type=1326 audit(1777925456.993:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18548 comm="syz.3.5443" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 582.880776][T18551] loop1: detected capacity change from 0 to 64 [ 582.911156][ T28] audit: type=1326 audit(1777925456.993:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18548 comm="syz.3.5443" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 582.968638][ T59] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 582.979755][T18553] loop3: detected capacity change from 0 to 512 [ 583.000562][ T59] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 1 [ 583.013682][T18553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 583.031696][ T28] audit: type=1326 audit(1777925457.033:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18548 comm="syz.3.5443" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 583.098914][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 583.125661][T18553] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5445: invalid indirect mapped block 4294967295 (level 1) [ 583.143781][ T28] audit: type=1326 audit(1777925457.033:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18548 comm="syz.3.5443" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 583.247259][T18553] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5445: invalid indirect mapped block 4294967295 (level 1) [ 583.264616][T18533] loop4: detected capacity change from 0 to 32768 [ 583.301012][ T28] audit: type=1326 audit(1777925457.033:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18548 comm="syz.3.5443" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 583.344059][T18553] EXT4-fs (loop3): 2 truncates cleaned up [ 583.358719][T18553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.406985][ T28] audit: type=1326 audit(1777925457.033:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18548 comm="syz.3.5443" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 583.420561][T18533] jfs_lookup: iget failed on inum 32 [ 583.485665][T18533] jfs_lookup: iget failed on inum 32 [ 583.528886][T18553] EXT4-fs error (device loop3): empty_inline_dir:1875: inode #12: block 7: comm syz.3.5445: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 583.620018][T18553] EXT4-fs warning (device loop3): empty_inline_dir:1882: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 583.817770][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.941677][T18570] kAFS: unable to lookup cell '(,c¾Ì' [ 584.478809][T18588] netlink: 'syz.4.5461': attribute type 30 has an invalid length. [ 584.505699][T18588] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 584.771970][T18599] netlink: 'syz.3.5465': attribute type 3 has an invalid length. [ 584.781129][T18596] loop1: detected capacity change from 0 to 4096 [ 584.827218][T18596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.943559][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.227193][T18612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5472'. [ 585.293403][T18612] veth4: entered promiscuous mode [ 585.311456][T18612] veth4: entered allmulticast mode [ 586.020984][T18636] loop3: detected capacity change from 0 to 4096 [ 586.062247][T18636] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 586.072868][T14602] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 586.160248][T18636] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 586.293080][ T1002] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 586.304069][ T5783] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 586.307063][T14602] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 586.323584][ T5783] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 586.337293][ T5783] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 586.356210][T14602] usb 3-1: config 179 has no interface number 0 [ 586.364428][ T11] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 586.378232][T14602] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 586.428465][T14602] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 586.472463][T14602] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 586.500757][T14602] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 586.520389][T14602] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 586.544656][T14602] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 586.557597][T14602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.577681][T18632] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 586.585062][T18632] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 586.762906][T18656] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 586.875824][T18658] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 587.095647][T18660] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 587.104320][T18660] [U] J"—e:ÀÆ" [ 587.146659][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 587.146660][ T5813] usb 3-1: USB disconnect, device number 32 [ 587.146714][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 587.289507][T18663] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.5497'. [ 587.711928][T18681] netlink: 'syz.3.5506': attribute type 1 has an invalid length. [ 587.734393][T18681] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5506'. [ 587.899100][T18687] loop4: detected capacity change from 0 to 16 [ 587.967920][ T5763] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 588.040402][T18691] loop2: detected capacity change from 0 to 2048 [ 588.113246][T18691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.185976][T18696] loop3: detected capacity change from 0 to 512 [ 588.237049][T14602] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 588.268832][T18696] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 588.322873][T18696] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 588.368486][T18696] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 588.376652][T18696] System zones: 0-1, 15-15, 18-18, 34-34 [ 588.385288][T18685] loop1: detected capacity change from 0 to 32768 [ 588.401731][T18696] EXT4-fs (loop3): orphan cleanup on readonly fs [ 588.408733][T18696] __quota_error: 2 callbacks suppressed [ 588.408748][T18696] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 588.417458][ T5085] Bluetooth: hci2: command tx timeout [ 588.425922][T18696] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 588.439018][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.448071][T14602] usb 5-1: Using ep0 maxpacket: 32 [ 588.448598][T18696] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 588.487073][T14602] usb 5-1: unable to get BOS descriptor or descriptor too short [ 588.498917][T18685] [ 588.498917][T18685] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 588.498917][T18685] [ 588.537514][T14602] usb 5-1: config 6 has an invalid interface number: 35 but max is 1 [ 588.546131][T18696] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.5512: bg 0: block 40: padding at end of block bitmap is not set [ 588.572511][T18685] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 588.572511][T18685] [ 588.579508][T14602] usb 5-1: config 6 has an invalid descriptor of length 163, skipping remainder of the config [ 588.600963][T18696] EXT4-fs (loop3): Remounting filesystem read-only [ 588.615147][T18696] EXT4-fs (loop3): 1 truncate cleaned up [ 588.636745][T18696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 588.643845][T14602] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 588.687293][T14602] usb 5-1: config 6 has no interface number 0 [ 588.701544][T14602] usb 5-1: too many endpoints for config 6 interface 35 altsetting 230: 86, using maximum allowed: 30 [ 588.720641][T14602] usb 5-1: config 6 interface 35 altsetting 230 has 0 endpoint descriptors, different from the interface descriptor's value: 86 [ 588.721528][ T2882] read_mapping_page failed! [ 588.744147][T14602] usb 5-1: config 6 interface 35 has no altsetting 0 [ 588.753863][T14602] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 588.767106][T14602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.775275][T14602] usb 5-1: Product: syz [ 588.778703][ T2882] ERROR: (device loop1): txCommit: [ 588.778703][ T2882] [ 588.796909][T14602] usb 5-1: Manufacturer: syz [ 588.801585][T14602] usb 5-1: SerialNumber: syz [ 588.805528][ T2882] jfs_write_inode: jfs_commit_inode failed! [ 588.824555][ T5772] [ 588.824555][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 588.824555][ T5772] [ 588.848972][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.864274][ T5772] [ 588.864274][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 588.864274][ T5772] [ 589.095557][T14602] ums-jumpshot 5-1:6.35: USB Mass Storage device detected [ 589.128872][T14602] ums-jumpshot 5-1:6.35: Quirks match for vid 05dc pid 0001: 2 [ 589.272995][T14602] usb 5-1: USB disconnect, device number 8 [ 589.715276][ T2130] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 589.738930][T18725] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5525'. [ 589.914535][ T2130] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 589.937001][ T2130] usb 4-1: config 179 has no interface number 0 [ 589.954483][ T2130] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 589.968781][ T2130] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 589.985435][ T2130] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 590.023920][ T2130] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 590.037578][ T2130] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 590.051617][ T2130] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 590.115394][ T2130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.152736][T18715] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 590.163153][T18715] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 590.177784][T18741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 590.737691][ T5813] usb 4-1: USB disconnect, device number 46 [ 590.737720][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 590.760802][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 591.127131][ T786] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 591.184718][T18765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.193937][T18765] batadv_slave_0: entered promiscuous mode [ 591.355347][ T786] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 591.376978][ T786] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.391984][ T786] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 591.421070][ T786] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 591.452238][ T786] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 591.492865][ T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.518535][T18775] loop3: detected capacity change from 0 to 512 [ 591.543330][ T786] hub 5-1:1.0: bad descriptor, ignoring hub [ 591.572019][ T786] hub: probe of 5-1:1.0 failed with error -5 [ 591.597836][ T786] cdc_wdm 5-1:1.0: skipping garbage [ 591.603416][ T786] cdc_wdm 5-1:1.0: invalid descriptor buffer length [ 591.668641][T18775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.706997][ T786] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 591.747078][T18775] ext4 filesystem being mounted at /1290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.767673][T18779] loop2: detected capacity change from 0 to 2048 [ 591.786480][ T786] usb 5-1: USB disconnect, device number 9 [ 591.806243][T18779] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 591.887859][T18788] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 591.932707][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.981249][T18779] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 592.018591][T18779] Remounting filesystem read-only [ 592.284106][T18795] team0: entered promiscuous mode [ 592.289407][T18795] team_slave_0: entered promiscuous mode [ 592.295305][T18795] team_slave_1: entered promiscuous mode [ 592.302454][T18795] virt_wifi0: entered promiscuous mode [ 592.308381][T18795] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 592.515383][T18799] loop2: detected capacity change from 0 to 512 [ 592.564403][T18799] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.5560: bg 0: block 473: padding at end of block bitmap is not set [ 592.603097][T18799] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 592.644188][T18809] loop3: detected capacity change from 0 to 2048 [ 592.656481][T18799] EXT4-fs (loop2): 1 orphan inode deleted [ 592.681495][ T1002] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 592.691069][T18799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.722786][T18799] ext4 filesystem being mounted at /1434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.755208][ T786] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 592.755865][T18811] loop4: detected capacity change from 0 to 256 [ 592.770162][ T1002] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 1 [ 592.792288][T18809] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255 [ 592.901329][T18811] FAT-fs (loop4): Directory bread(block 64) failed [ 592.924956][T18811] FAT-fs (loop4): Directory bread(block 65) failed [ 592.944536][T18811] FAT-fs (loop4): Directory bread(block 66) failed [ 592.957163][T18811] FAT-fs (loop4): Directory bread(block 67) failed [ 592.970462][T18811] FAT-fs (loop4): Directory bread(block 68) failed [ 592.980632][T18811] FAT-fs (loop4): Directory bread(block 69) failed [ 592.988313][T18811] FAT-fs (loop4): Directory bread(block 70) failed [ 593.007379][ T786] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 593.015905][ T786] usb 2-1: config 179 has no interface number 0 [ 593.021169][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.026036][ T786] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 593.033158][T18811] FAT-fs (loop4): Directory bread(block 71) failed [ 593.046535][ T11] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 593.073149][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1 [ 593.074789][T18811] FAT-fs (loop4): Directory bread(block 72) failed [ 593.087386][ T786] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 593.110764][ T786] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 593.124208][ T786] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 593.137073][T18811] FAT-fs (loop4): Directory bread(block 73) failed [ 593.144398][ T786] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 593.174417][ T786] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 593.213544][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.276658][T18801] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 593.286726][T18801] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 593.740584][T18823] ip6tnl1: entered allmulticast mode [ 594.030566][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 594.038975][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 594.047565][ T786] usb 2-1: USB disconnect, device number 28 [ 594.597051][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 594.806231][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 594.838564][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.869509][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 594.892487][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 594.916993][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.956128][ T9] usb 4-1: Product: syz [ 594.966579][ T9] usb 4-1: Manufacturer: syz [ 595.004676][ T9] usb 4-1: SerialNumber: syz [ 595.012129][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 595.083001][T18859] loop2: detected capacity change from 0 to 4096 [ 595.093536][T18859] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 595.261843][ T9] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 595.283359][T18859] ntfs: volume version 3.1. [ 595.329507][ T1002] usb 4-1: config 0 descriptor?? [ 595.511054][ T5813] usb 4-1: USB disconnect, device number 47 [ 595.511880][ T1002] usb 4-1: can't set config #0, error -71 [ 595.607212][ T9] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 595.809717][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 595.837641][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 595.858149][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.876697][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 595.892850][ T9] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 595.914957][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.924544][ T9] usb 2-1: Product: syz [ 595.929442][ T9] usb 2-1: Manufacturer: syz [ 595.934314][ T9] usb 2-1: SerialNumber: syz [ 596.224062][ T9] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 596.252504][ T9] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 596.283565][ T9] usb 2-1: 3:0: cannot get min/max values for control 4 (id 3) [ 596.306971][ T9] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 596.322942][ T9] usb 2-1: 3:0: cannot get min/max values for control 8 (id 3) [ 596.342240][ T9] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 596.396541][ T9] usb 2-1: 3:0: cannot get min/max values for control 11 (id 3) [ 596.417918][ T9] usb 2-1: 3:0: cannot get min/max values for control 12 (id 3) [ 596.464650][T18896] ALSA: mixer_oss: invalid OSS volume '—ˆ†åÉY¢' [ 596.495294][ T9] usb 2-1: USB disconnect, device number 29 [ 596.582822][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.631033][T18901] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5609'. [ 597.427505][T18928] netlink: 'syz.3.5622': attribute type 75 has an invalid length. [ 597.859024][T18944] loop1: detected capacity change from 0 to 8 [ 597.928491][T18944] SQUASHFS error: Failed to read block 0x2d7: -5 [ 597.935462][T18944] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 597.961731][T18944] SQUASHFS error: Failed to read block 0x8f: -5 [ 597.997364][ T28] audit: type=1800 audit(1777925472.273:167): pid=18944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5630" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 598.666960][ T2130] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 598.866933][ T2130] usb 4-1: Using ep0 maxpacket: 8 [ 598.894728][ T2130] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 598.939624][ T2130] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 598.967032][ T2130] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 598.982700][T18983] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 598.985712][ T2130] usb 4-1: Product: syz [ 599.027379][ T2130] usb 4-1: Manufacturer: syz [ 599.032173][ T2130] usb 4-1: SerialNumber: syz [ 599.084795][T18986] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5651'. [ 599.135610][T18986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.155965][T18990] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5653'. [ 599.359930][ T2130] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 599.395103][ T2130] usb 4-1: Handspring Visor / Palm OS: port 208, is for unknown use [ 599.417733][ T2130] usb 4-1: Handspring Visor / Palm OS: port 187, is for Console use [ 599.449746][ T2130] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 599.570675][ T2130] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 599.597294][ T2130] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 599.629963][ T2130] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 599.671090][ T2130] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 599.735746][ T2130] usb 4-1: USB disconnect, device number 48 [ 599.756069][ T2130] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 599.800527][ T2130] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 599.813885][T19006] loop1: detected capacity change from 0 to 2048 [ 599.831384][ T2130] visor 4-1:1.0: device disconnected [ 599.891745][T19006] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 600.180457][T19016] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5667'. [ 600.355006][T19023] loop1: detected capacity change from 0 to 8 [ 600.484834][T19023] SQUASHFS error: Unable to read directory block [629:26] [ 600.650942][T19026] loop3: detected capacity change from 0 to 4096 [ 600.685240][T19026] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 600.914252][T19026] ntfs3: loop3: ino=0, attr_set_size [ 601.220219][T19049] virtiofs: Unknown parameter 'always' [ 601.287572][T18662] Bluetooth: hci2: command 0x0406 tx timeout [ 601.937271][T19077] binder: 19076:19077 ioctl 400c620e 200000000040 returned -22 [ 601.970684][T19079] loop4: detected capacity change from 0 to 8 [ 602.016383][T19079] SQUASHFS error: zlib decompression failed, data probably corrupt [ 602.047019][T19079] SQUASHFS error: Failed to read block 0x9b: -5 [ 602.070274][T19079] SQUASHFS error: Unable to read metadata cache entry [99] [ 602.090520][T19079] SQUASHFS error: Unable to read inode 0x127 [ 602.381202][T19093] loop1: detected capacity change from 0 to 512 [ 602.404174][T19093] EXT4-fs (loop1): Test dummy encryption mode enabled [ 602.440863][T19093] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.5702: dx entry: limit 0 != root limit 125 [ 602.461452][T19093] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.5702: Corrupt directory, running e2fsck is recommended [ 602.499114][T19093] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 602.517166][T19093] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.5702: corrupted in-inode xattr: invalid ea_ino [ 602.557527][T19093] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.5702: couldn't read orphan inode 15 (err -117) [ 602.621302][T19093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.674173][T19093] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.123145][T19116] xt_cgroup: invalid path, errno=-2 [ 603.243838][T19122] loop2: detected capacity change from 0 to 512 [ 603.322048][ T5763] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 604.051953][T19150] loop4: detected capacity change from 0 to 512 [ 604.090469][T19150] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 604.131114][T19154] loop1: detected capacity change from 0 to 1024 [ 604.177454][T19150] EXT4-fs (loop4): 1 truncate cleaned up [ 604.266484][T19150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.366309][T19163] loop2: detected capacity change from 0 to 16 [ 604.400471][T19163] erofs: (device loop2): mounted with root inode @ nid 36. [ 604.412636][ T49] hfsplus: b-tree write err: -5, ino 25 [ 604.430414][ T49] hfsplus: b-tree write err: -5, ino 4 [ 604.436516][ T49] hfsplus: b-tree write err: -5, ino 2 [ 604.561817][T15371] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.229956][T19161] loop3: detected capacity change from 0 to 32768 [ 605.245821][T19181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5746'. [ 605.306313][T19181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5746'. [ 605.345666][T19161] ea_get: invalid extended attribute [ 605.362119][T19161] ffff88805e64b170: 04 00 00 00 .... [ 605.861755][T19194] comedi comedi4: bad chanlist[1]=0x0000000a chan=10 range length=2 [ 606.072066][T19174] loop2: detected capacity change from 0 to 32768 [ 606.100171][T19201] netlink: 'syz.4.5757': attribute type 1 has an invalid length. [ 606.108457][T19201] netlink: 'syz.4.5757': attribute type 3 has an invalid length. [ 606.116420][T19201] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5757'. [ 606.192374][T19174] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 606.417244][T19174] XFS (loop2): Ending clean mount [ 606.586972][ T5835] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 606.608662][ T5775] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 606.789461][ T5835] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 606.789497][ T5835] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.789519][ T5835] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 606.789543][ T5835] usb 4-1: config 1 has no interface number 1 [ 606.789590][ T5835] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 606.789631][ T5835] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 606.792214][ T5835] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 606.792246][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.792268][ T5835] usb 4-1: Product: syz [ 606.792285][ T5835] usb 4-1: Manufacturer: syz [ 606.792302][ T5835] usb 4-1: SerialNumber: syz [ 606.815827][T19225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5765'. [ 607.044157][ T5835] usb 4-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 607.075342][T19228] netlink: 'syz.4.5766': attribute type 39 has an invalid length. [ 607.080883][ T5835] usb 4-1: MIDIStreaming interface descriptor not found [ 607.206687][ T5835] usb 4-1: USB disconnect, device number 49 [ 607.326530][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.571470][T19240] trusted_key: encrypted_key: keylen parameter is missing [ 607.642876][T19242] netlink: 'syz.1.5772': attribute type 2 has an invalid length. [ 607.658257][T19242] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5772'. [ 608.230924][T19256] autofs4:pid:19256:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 608.496710][T19244] loop4: detected capacity change from 0 to 32768 [ 608.507379][T19264] 9pnet: Found fid 0 not clunked [ 608.623823][T19268] loop3: detected capacity change from 0 to 2048 [ 608.707320][T19268] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 608.751016][T19268] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 609.197256][T19283] loop4: detected capacity change from 0 to 8 [ 609.552566][T19292] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5796'. [ 609.738053][T19299] openvswitch: netlink: Actions may not be safe on all matching packets [ 609.887141][ T27] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 609.955816][T19307] loop4: detected capacity change from 0 to 8 [ 609.973837][T19309] loop2: detected capacity change from 0 to 256 [ 610.008906][T19309] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 610.060247][T19307] SQUASHFS error: Failed to read block 0x1ec: -5 [ 610.099558][ T27] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 610.103966][T19307] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 610.125924][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.192708][ T27] usb 4-1: config 0 descriptor?? [ 610.620410][ T27] usb 4-1: Cannot set MAC address [ 610.625707][ T27] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 610.692960][ T27] usb 4-1: USB disconnect, device number 50 [ 610.790226][T19327] loop1: detected capacity change from 0 to 64 [ 611.145789][T19335] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5817'. [ 611.156374][T19335] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5817'. [ 611.171570][T19337] loop1: detected capacity change from 0 to 256 [ 611.512156][T19325] loop4: detected capacity change from 0 to 32768 [ 612.046238][T19360] netlink: 'syz.1.5830': attribute type 39 has an invalid length. [ 612.078522][ T2130] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 612.277155][ T2130] usb 3-1: Using ep0 maxpacket: 16 [ 612.292880][ T2130] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.310478][ T2130] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 612.338401][ T2130] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 612.361494][ T2130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.378777][ T2130] usb 3-1: Product: syz [ 612.383106][ T2130] usb 3-1: Manufacturer: syz [ 612.385839][T19371] loop4: detected capacity change from 0 to 128 [ 612.394454][ T2130] usb 3-1: SerialNumber: syz [ 612.559059][T19373] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5836'. [ 612.824238][T19381] loop1: detected capacity change from 0 to 2048 [ 612.851862][T19381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 612.879857][ T2130] usb 3-1: cannot find UAC_HEADER [ 612.987662][ T2130] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 613.028014][ T2130] usb 3-1: USB disconnect, device number 33 [ 613.032173][T19386] xt_TPROXY: Can be used only with -p tcp or -p udp [ 613.071931][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.123750][T19387] netlink: 'syz.3.5842': attribute type 1 has an invalid length. [ 613.152481][T19387] netlink: 'syz.3.5842': attribute type 1 has an invalid length. [ 613.187066][T19387] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5842'. [ 613.324328][T19392] netlink: 'syz.3.5845': attribute type 39 has an invalid length. [ 613.350947][T19395] loop1: detected capacity change from 0 to 128 [ 613.606125][T19401] loop1: detected capacity change from 0 to 16 [ 613.637409][T19401] erofs: (device loop1): mounted with root inode @ nid 36. [ 613.716604][T19401] erofs: (device loop1): z_erofs_read_folio: read error -95 @ 8200 of nid 36 [ 614.140011][T19413] IPv6: NLM_F_CREATE should be specified when creating new route [ 614.633486][T19400] loop4: detected capacity change from 0 to 32768 [ 614.722875][T19400] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 614.738778][T19436] loop3: detected capacity change from 0 to 256 [ 614.774312][T19437] loop2: detected capacity change from 0 to 2048 [ 614.820911][T19437] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 614.901294][T19400] XFS (loop4): Ending clean mount [ 614.934168][T19400] XFS (loop4): Quotacheck needed: Please wait. [ 615.039440][T19400] XFS (loop4): Quotacheck: Done. [ 615.291610][T15371] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 615.332997][T19451] binder: 19450:19451 ioctl c018620c 2000000001c0 returned -22 [ 615.530720][T19454] loop1: detected capacity change from 0 to 64 [ 615.537219][ T2130] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 615.771797][ T2130] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 615.795714][ T2130] usb 3-1: config 0 has no interface number 0 [ 615.816535][ T2130] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 615.842027][ T2130] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 615.852927][ T2130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.892576][ T2130] usb 3-1: Product: syz [ 615.897379][ T2130] usb 3-1: Manufacturer: syz [ 615.904595][ T2130] usb 3-1: SerialNumber: syz [ 615.918509][ T2130] usb 3-1: config 0 descriptor?? [ 615.936532][ T2130] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 616.114352][T19467] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 616.155650][T19467] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.5879: lblock 2 mapped to illegal pblock 2 (length 1) [ 616.191958][T19467] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 616.207018][T19467] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 48: comm syz.4.5879: lblock 0 mapped to illegal pblock 48 (length 1) [ 616.252119][T19467] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 616.266934][T19467] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.5879: Failed to acquire dquot type 0 [ 616.282987][T19467] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 616.293404][T19467] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.5879: mark_inode_dirty error [ 616.313369][T19467] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 616.318734][ C1] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 616.324691][T19467] EXT4-fs (loop4): 1 orphan inode deleted [ 616.340847][T19467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.355258][T14691] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 616.429888][T14691] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 616.468844][T14691] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 0 [ 616.541668][ T9] usb 3-1: USB disconnect, device number 34 [ 616.551508][T15371] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.557806][ T9] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 616.577623][T14691] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 616.630903][T14691] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 616.635697][T19482] set_capacity_and_notify: 1 callbacks suppressed [ 616.635713][T19482] loop1: detected capacity change from 0 to 164 [ 616.657163][T14691] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 0 [ 616.675936][T15371] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 616.711592][T15371] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 616.739601][T19482] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 616.754621][T15371] EXT4-fs error (device loop4): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 617.130485][T19492] loop1: detected capacity change from 0 to 1024 [ 617.205591][T19492] syz.1.5890: attempt to access beyond end of device [ 617.205591][T19492] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 617.266566][T19492] buffer_io_error: 14 callbacks suppressed [ 617.266585][T19492] Buffer I/O error on dev loop1, logical block 458752, async page read [ 617.326464][T19492] syz.1.5890: attempt to access beyond end of device [ 617.326464][T19492] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 617.387878][T19492] Buffer I/O error on dev loop1, logical block 458752, async page read [ 617.698445][T19512] loop4: detected capacity change from 0 to 2048 [ 617.728951][T19512] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 617.778522][T19512] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 618.028586][T19521] loop1: detected capacity change from 0 to 256 [ 618.075159][T19521] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xc5c2f2dd, utbl_chksum : 0xe619d30d) [ 618.130027][T19521] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 618.369953][T19528] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5907'. [ 618.670276][T19515] loop3: detected capacity change from 0 to 32768 [ 618.770088][T19515] read_mapping_page failed! [ 618.775051][T19515] ERROR: (device loop3): txCommit: [ 618.775051][T19515] [ 618.916165][T19542] loop2: detected capacity change from 0 to 764 [ 618.928702][ T59] read_mapping_page failed! [ 618.933293][ T59] ERROR: (device loop3): txCommit: [ 618.933293][ T59] [ 618.977412][ T59] jfs_write_inode: jfs_commit_inode failed! [ 618.992390][T19542] rock: directory entry would overflow storage [ 619.007752][T19542] rock: sig=0x4654, size=5, remaining=4 [ 619.017105][T14602] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 619.211248][T14602] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 619.236925][T14602] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.277575][T14602] usb 2-1: config 0 has no interface number 0 [ 619.283863][T14602] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 619.317583][T14602] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.359851][T14602] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 619.385170][T14602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.427092][T14602] usb 2-1: Product: syz [ 619.431347][T14602] usb 2-1: Manufacturer: syz [ 619.463518][T14602] usb 2-1: SerialNumber: syz [ 619.480126][T14602] usb 2-1: config 0 descriptor?? [ 619.957345][T14602] usbtouchscreen: probe of 2-1:0.117 failed with error -71 [ 620.003791][T14602] usb 2-1: USB disconnect, device number 30 [ 620.772229][T19592] loop1: detected capacity change from 0 to 1024 [ 620.795108][T19576] loop4: detected capacity change from 0 to 32768 [ 620.819518][T19592] EXT4-fs (loop1): Test dummy encryption mode enabled [ 620.842379][T19592] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 620.888672][T19576] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 620.908266][T19592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.014058][T19576] XFS (loop4): Ending clean mount [ 621.045192][T14602] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 621.074117][T14602] XFS (loop4): Unmount and run xfs_repair [ 621.088480][T14602] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 621.096106][T14602] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 621.110670][T14602] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 621.152028][T14602] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 621.169770][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.174816][T14602] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 621.209178][T14602] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 621.256724][T14602] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 621.272366][T14602] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 621.309674][T14602] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 621.351288][T19576] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 621.387614][T19576] XFS (loop4): Failed to initialize disk quotas. [ 621.501682][T15371] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 621.824143][T19622] loop1: detected capacity change from 0 to 64 [ 621.857262][T19620] binder: 19617:19620 ioctl 541b 0 returned -22 [ 621.860437][T19594] loop2: detected capacity change from 0 to 32768 [ 621.878455][T19622] hfs: unable to locate alternate MDB [ 621.889829][T19622] hfs: continuing without an alternate MDB [ 621.937513][T19594] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.5941 (19594) [ 622.047743][T19594] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 622.086355][T19594] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 622.132586][T19594] BTRFS info (device loop2): force zlib compression, level 3 [ 622.142575][T19594] BTRFS info (device loop2): force clearing of disk cache [ 622.170696][T19594] BTRFS info (device loop2): setting nodatasum [ 622.187421][T19594] BTRFS info (device loop2): allowing degraded mounts [ 622.194493][T19594] BTRFS info (device loop2): using free space tree [ 622.417385][T19594] BTRFS info (device loop2): auto enabling async discard [ 622.464212][T19594] BTRFS info (device loop2): rebuilding free space tree [ 622.619978][T19594] BTRFS info (device loop2): balance: start [ 622.626197][T19594] BTRFS info (device loop2): balance: ended with status: 0 [ 622.647548][ T5813] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 622.842359][ T5775] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 622.854376][T19624] loop3: detected capacity change from 0 to 32768 [ 622.869080][ T5813] usb 5-1: Using ep0 maxpacket: 16 [ 622.879931][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 622.897698][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41692, setting to 1024 [ 622.909401][T19624] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.5951 (19624) [ 622.936625][ T5813] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 622.946670][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.957500][ T5813] usb 5-1: Product: syz [ 622.962628][ T5813] usb 5-1: Manufacturer: syz [ 622.968922][T19624] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 622.979501][T19624] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 622.990963][ T5813] usb 5-1: SerialNumber: syz [ 623.002834][ T5813] usb 5-1: config 0 descriptor?? [ 623.013997][T19624] BTRFS info (device loop3): using free space tree [ 623.052379][ T5813] hub 5-1:0.0: bad descriptor, ignoring hub [ 623.060212][ T5813] hub: probe of 5-1:0.0 failed with error -5 [ 623.061456][T19654] loop1: detected capacity change from 0 to 512 [ 623.070716][ T5813] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input26 [ 623.142190][ T5765] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 623.314879][T19624] BTRFS info (device loop3): enabling ssd optimizations [ 623.362084][T19624] BTRFS info (device loop3): auto enabling async discard [ 623.734859][ T5783] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 624.815953][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.831999][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.927308][ T23] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 624.932301][T19709] loop1: detected capacity change from 0 to 256 [ 624.982370][T19709] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 625.071727][ T49] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 625.118069][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 625.139442][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 625.161774][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 625.201534][ T23] usb 4-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 625.231589][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.265401][ T23] usb 4-1: Product: syz [ 625.282244][ T23] usb 4-1: Manufacturer: syz [ 625.296904][ T23] usb 4-1: SerialNumber: syz [ 625.328410][ T23] usb 4-1: config 0 descriptor?? [ 625.433907][T19726] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.5985'. [ 625.624593][ T23] usb 4-1: USB disconnect, device number 51 [ 625.661198][T19734] loop4: detected capacity change from 0 to 1024 [ 625.913813][T19744] netlink: 'syz.1.5992': attribute type 1 has an invalid length. [ 625.921947][T19744] netlink: 'syz.1.5992': attribute type 2 has an invalid length. [ 626.133891][T19749] loop1: detected capacity change from 0 to 1024 [ 626.151792][T19749] EXT4-fs: inline encryption not supported [ 626.197917][T19749] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 626.280072][T19749] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.5996: Freeing blocks not in datazone - block = 0, count = 4096 [ 626.338362][T19749] EXT4-fs (loop1): Remounting filesystem read-only [ 626.345120][T19749] EXT4-fs (loop1): 1 orphan inode deleted [ 626.371567][ T11] EXT4-fs (loop1): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 626.381131][T19749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.430542][ T11] Quota error (device loop1): write_blk: dquota write failed [ 626.466447][ T11] Quota error (device loop1): remove_free_dqentry: Can't write block (2) with free entries [ 626.524929][ T11] EXT4-fs (loop1): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 626.564058][ T11] Quota error (device loop1): write_blk: dquota write failed [ 626.587433][ T11] Quota error (device loop1): free_dqentry: Can't move quota data block (2) to free list [ 626.615019][T19758] loop2: detected capacity change from 0 to 4096 [ 626.621979][ T11] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 626.653701][ T11] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 626.726484][T19762] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 626.738312][T19758] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 626.777739][T19758] Remounting filesystem read-only [ 626.820094][T19764] netlink: 300 bytes leftover after parsing attributes in process `syz.4.6001'. [ 626.860969][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.880697][T19758] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 626.918631][T19758] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 627.265467][T19772] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 627.347647][T19776] tc_dump_action: action bad kind [ 627.960830][T14602] usb 5-1: USB disconnect, device number 10 [ 628.292008][T19813] tmpfs: Bad value for 'mpol' [ 628.728096][ T27] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 628.782919][T19834] pimreg: entered allmulticast mode [ 628.932808][ T27] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 628.951597][ T27] usb 2-1: config 0 has no interface number 0 [ 628.982044][ T27] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 629.006396][ T28] audit: type=1326 audit(1777925503.273:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.3.6038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 629.022713][ T27] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 629.065338][ T28] audit: type=1326 audit(1777925503.273:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.3.6038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 629.065535][T19843] netlink: 'syz.4.6039': attribute type 6 has an invalid length. [ 629.094438][ T28] audit: type=1326 audit(1777925503.283:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.3.6038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 629.114002][ T27] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 629.144418][ T27] usb 2-1: config 0 interface 11 has no altsetting 0 [ 629.174881][ T27] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 629.186051][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.192503][ T28] audit: type=1326 audit(1777925503.283:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.3.6038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 629.248283][ T27] usb 2-1: config 0 descriptor?? [ 629.264680][T19820] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 629.265220][ T28] audit: type=1326 audit(1777925503.283:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.3.6038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 629.274950][T19820] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 629.303670][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.413544][ T27] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 629.440285][ T27] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 629.449297][T19853] Timeout policy `syz0' can only be used by L4 protocol number 6 [ 629.461922][ T27] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 629.480344][ T27] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 629.517050][ T27] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 629.527808][ T27] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 629.536166][ T27] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 629.578590][ T27] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 629.609360][ T27] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 629.654889][ T27] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 629.684578][ T27] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 629.715693][ T27] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 629.739149][ T27] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 629.767067][ T27] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 629.806086][ T27] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 629.845559][ T27] usb 2-1: USB disconnect, device number 31 [ 629.898608][ T27] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 629.908561][T19866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6050'. [ 629.965564][ T27] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 630.017114][ T27] keyspan 2-1:0.11: device disconnected [ 630.798542][T19868] loop2: detected capacity change from 0 to 32768 [ 630.904271][T19868] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 630.904271][T19868] [ 630.946424][T19868] ERROR: (device loop2): remounting filesystem as read-only [ 631.246024][T19906] netlink: 209860 bytes leftover after parsing attributes in process `syz.2.6068'. [ 631.737074][T19923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6077'. [ 631.818160][T19927] loop1: detected capacity change from 0 to 256 [ 631.910458][T19927] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 632.024355][T19927] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 632.045203][T19927] FAT-fs (loop1): Filesystem has been set read-only [ 632.087244][ T9] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 632.293309][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.320943][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x61, skipping [ 632.329623][T19942] netlink: 'syz.3.6086': attribute type 10 has an invalid length. [ 632.351769][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 632.357055][T19942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6086'. [ 632.372109][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 632.372149][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 632.407757][T19942] netlink: 'syz.3.6086': attribute type 10 has an invalid length. [ 632.415847][T19942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6086'. [ 632.441109][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 632.458131][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 632.481371][ T9] usb 5-1: Manufacturer: syz [ 632.489307][ T9] usb 5-1: config 0 descriptor?? [ 632.816133][ T27] usb 5-1: USB disconnect, device number 11 [ 633.392612][T19973] loop1: detected capacity change from 0 to 64 [ 633.445956][T19975] (null): rxe_set_mtu: Set mtu to 1024 [ 633.568557][T19958] loop2: detected capacity change from 0 to 32768 [ 633.698946][T19958] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 633.698946][T19958] [ 633.769712][T19958] ERROR: (device loop2): remounting filesystem as read-only [ 633.795610][T19958] ERROR: (device loop2): jfs_unlink: [ 633.795610][T19958] [ 633.922093][ T5775] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 633.922093][ T5775] [ 634.058892][T19987] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 634.154886][T19975] infiniband syz0: set active [ 634.177940][T19975] infiniband syz0: added bridge_slave_1 [ 634.288781][T19975] RDS/IB: syz0: added [ 634.294703][T19975] smc: adding ib device syz0 with port count 1 [ 634.302091][T19975] smc: ib device syz0 port 1 has pnetid [ 634.389195][T19994] loop2: detected capacity change from 0 to 512 [ 634.470008][T19994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.493199][T19994] ext4 filesystem being mounted at /1573/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.665595][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.683103][T20000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.862446][T20002] loop2: detected capacity change from 0 to 512 [ 634.901522][T20002] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 634.973328][T20002] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 635.007318][T20002] __quota_error: 4 callbacks suppressed [ 635.007338][T20002] Quota error (device loop2): write_blk: dquota write failed [ 635.078835][T20002] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 635.100560][T19989] syz.4.6110: vmalloc error: size 33177600, failed to allocated page array size 64800, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 635.156246][T20002] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.6114: Failed to acquire dquot type 0 [ 635.179150][T20002] EXT4-fs (loop2): 1 truncate cleaned up [ 635.186380][T20002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.186929][T19989] CPU: 0 PID: 19989 Comm: syz.4.6110 Not tainted syzkaller #0 [ 635.206379][T19989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 635.216557][T19989] Call Trace: [ 635.219868][T19989] [ 635.222832][T19989] dump_stack_lvl+0x18c/0x250 [ 635.227571][T19989] ? show_regs_print_info+0x20/0x20 [ 635.232817][T19989] ? load_image+0x420/0x420 [ 635.237373][T19989] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 635.244016][T19989] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 635.250583][T19989] warn_alloc+0x246/0x340 [ 635.254995][T19989] ? zone_watermark_ok_safe+0x230/0x230 [ 635.260616][T19989] ? _raw_spin_unlock+0x28/0x40 [ 635.265506][T19989] ? __vb2_queue_alloc+0x794/0x1410 [ 635.270741][T19989] __vmalloc_node_range+0x662/0x1330 [ 635.276164][T19989] ? free_vm_area+0x50/0x50 [ 635.281143][T19989] vmalloc_user+0x74/0x80 [ 635.285504][T19989] ? vb2_vmalloc_alloc+0xef/0x330 [ 635.290555][T19989] vb2_vmalloc_alloc+0xef/0x330 [ 635.295518][T19989] ? __copy_timestamp+0x1f0/0x1f0 [ 635.300564][T19989] __vb2_queue_alloc+0x794/0x1410 [ 635.305632][T19989] vb2_core_reqbufs+0xa74/0x1180 [ 635.310603][T19989] ? vb2_verify_memory_type+0x570/0x570 [ 635.316180][T19989] __vb2_init_fileio+0x2f1/0xd00 [ 635.321151][T19989] ? asan.module_dtor+0x20/0x20 [ 635.326032][T19989] ? vb2_fop_read+0x101/0x360 [ 635.330747][T19989] __vb2_perform_fileio+0x340/0x1590 [ 635.336064][T19989] ? __asan_memset+0x22/0x40 [ 635.340866][T19989] vb2_fop_read+0x27c/0x360 [ 635.345401][T19989] v4l2_read+0x19a/0x2c0 [ 635.349672][T19989] do_iter_read+0x4fa/0xc90 [ 635.354210][T19989] ? video_device_pipeline+0xa0/0xa0 [ 635.359514][T19989] ? vfs_iter_read+0xa0/0xa0 [ 635.364124][T19989] ? __import_iovec+0x5f2/0x850 [ 635.368997][T19989] ? import_iovec+0x73/0xa0 [ 635.373528][T19989] do_preadv+0x236/0x390 [ 635.377905][T19989] ? do_writev+0x480/0x480 [ 635.382381][T19989] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 635.388418][T19989] ? lock_chain_count+0x20/0x20 [ 635.393293][T19989] ? lockdep_hardirqs_on+0x98/0x150 [ 635.398526][T19989] do_syscall_64+0x55/0xa0 [ 635.402965][T19989] ? clear_bhb_loop+0x40/0x90 [ 635.407662][T19989] ? clear_bhb_loop+0x40/0x90 [ 635.412362][T19989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.418362][T19989] RIP: 0033:0x7f05d319cdd9 [ 635.422795][T19989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.442595][T19989] RSP: 002b:00007f05d3ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 635.451058][T19989] RAX: ffffffffffffffda RBX: 00007f05d3415fa0 RCX: 00007f05d319cdd9 [ 635.459049][T19989] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000003 [ 635.467035][T19989] RBP: 00007f05d3232d69 R08: 0000000000000007 R09: 0000000000000000 [ 635.475033][T19989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.483019][T19989] R13: 00007f05d3416038 R14: 00007f05d3415fa0 R15: 00007ffeaeab5f18 [ 635.491110][T19989] [ 635.620480][T20002] Quota error (device loop2): write_blk: dquota write failed [ 635.626946][T19989] Mem-Info: [ 635.635311][T19989] active_anon:7808 inactive_anon:28 isolated_anon:0 [ 635.635311][T19989] active_file:5905 inactive_file:42172 isolated_file:0 [ 635.635311][T19989] unevictable:768 dirty:253 writeback:0 [ 635.635311][T19989] slab_reclaimable:7696 slab_unreclaimable:97519 [ 635.635311][T19989] mapped:25371 shmem:1445 pagetables:726 [ 635.635311][T19989] sec_pagetables:0 bounce:0 [ 635.635311][T19989] kernel_misc_reclaimable:0 [ 635.635311][T19989] free:1333550 free_pcp:12051 free_cma:0 [ 635.677212][T20002] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 635.710032][T20008] loop1: detected capacity change from 0 to 64 [ 635.718612][T20002] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.6114: Failed to acquire dquot type 0 [ 635.747053][T19989] Node 0 active_anon:31232kB inactive_anon:112kB active_file:23620kB inactive_file:168432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101432kB dirty:1012kB writeback:0kB shmem:4244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11180kB pagetables:2904kB sec_pagetables:0kB all_unreclaimable? no [ 635.827415][T19989] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 635.935453][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.947003][T19989] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.007139][T19989] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 636.013038][T19989] Node 0 DMA32 free:1423228kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:31096kB inactive_anon:112kB active_file:23620kB inactive_file:167604kB unevictable:1536kB writepending:1012kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:28624kB local_pcp:9484kB free_cma:0kB [ 636.076703][T19989] lowmem_reserve[]: 0 0 0 0 0 [ 636.097447][T19989] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.142659][T20010] loop1: detected capacity change from 0 to 256 [ 636.154468][T19989] lowmem_reserve[]: 0 0 0 0 0 [ 636.159484][T19989] Node 1 Normal free:3894976kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19904kB local_pcp:11360kB free_cma:0kB [ 636.198148][T20010] exfat: Deprecated parameter 'namecase' [ 636.204136][T20010] exfat: Deprecated parameter 'utf8' [ 636.212035][ T28] audit: type=1326 audit(1777925510.433:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20011 comm="syz.2.6117" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 636.271980][T20010] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 636.302932][T19989] lowmem_reserve[]: 0 0 0 0 0 [ 636.309363][T19989] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 636.324854][T19989] Node 0 DMA32: 1*4kB (M) 26*8kB (UME) 155*16kB (E) 110*32kB (ME) 139*64kB (ME) 59*128kB (UME) 44*256kB (ME) 16*512kB (ME) 12*1024kB (ME) 4*2048kB (M) 332*4096kB (M) = 1422468kB [ 636.359006][ T28] audit: type=1326 audit(1777925510.433:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20011 comm="syz.2.6117" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 636.366988][T19989] Node 0 [ 636.411501][T20010] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 636.435693][T19989] Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 636.461666][ T28] audit: type=1326 audit(1777925510.443:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20011 comm="syz.2.6117" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 636.485448][T19989] Node 1 Normal: 246*4kB (UE) 61*8kB (UME) 50*16kB (UE) 213*32kB (UME) 55*64kB (UME) 9*128kB (UE) 3*256kB (UE) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 946*4096kB (M) = 3894976kB [ 636.489807][ T28] audit: type=1326 audit(1777925510.443:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20011 comm="syz.2.6117" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a919cdd9 code=0x7ffc0000 [ 636.577031][T19989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 636.586767][T19989] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 636.601777][T20016] loop2: detected capacity change from 0 to 16 [ 636.651516][T19989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 636.664855][T20016] erofs: (device loop2): mounted with root inode @ nid 36. [ 636.697264][T19989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 636.706722][T19989] 48755 total pagecache pages [ 636.727986][T19989] 28 pages in swap cache [ 636.732315][T19989] Free swap = 124472kB [ 636.736508][T19989] Total swap = 124996kB [ 636.806967][T19989] 2097051 pages RAM [ 636.810870][T19989] 0 pages HighMem/MovableOnly [ 636.815682][T19989] 416927 pages reserved [ 636.867032][T19989] 0 pages cma reserved [ 637.042352][T20022] loop2: detected capacity change from 0 to 24 [ 637.095588][T20022] romfs: read error for inode 0x8000 [ 637.627673][T20037] netlink: 'syz.3.6131': attribute type 9 has an invalid length. [ 637.648689][T20037] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6131'. [ 638.138747][T20058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 638.680596][T20078] loop1: detected capacity change from 0 to 512 [ 638.747409][T20078] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 638.823262][T20078] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 638.895182][T20078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.903410][T20086] loop4: detected capacity change from 0 to 4096 [ 638.997460][T20091] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 639.128238][T20086] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 639.151708][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.161562][T20086] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 639.220155][T20086] Remounting filesystem read-only [ 639.238143][T20086] NILFS (loop4): error -5 truncating bmap (ino=12) [ 639.428347][T20095] bond3: entered promiscuous mode [ 639.439354][T15371] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 639.454048][T20095] bond3: entered allmulticast mode [ 639.462362][T20095] 8021q: adding VLAN 0 to HW filter on device bond3 [ 639.475063][T15371] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 639.493418][T15371] NILFS (loop4): discard dirty block: blocknr=14, size=4096 [ 639.525125][T15371] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 639.557031][T15371] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 639.564532][T15371] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 639.589764][T15371] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 639.600212][T15371] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 639.626964][T15371] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 639.830393][T20106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.020196][T20098] loop1: detected capacity change from 0 to 32768 [ 640.073068][T20098] (syz.1.6158,20098,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 640.108681][T20098] (syz.1.6158,20098,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 640.216129][T20098] JBD2: Ignoring recovery information on journal [ 640.427947][T20098] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 640.624030][T20110] loop2: detected capacity change from 0 to 32768 [ 640.672028][T20126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6172'. [ 640.758737][T20110] ERROR: (device loop2): dbFindCtl: Corrupt dmapctl page [ 640.758737][T20110] [ 640.778927][ T27] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 640.787336][T20110] ERROR: (device loop2): remounting filesystem as read-only [ 640.812250][T20110] jfs_mkdir: dtInsert returned -EIO [ 640.823115][T20110] ERROR: (device loop2): jfs_mkdir: [ 640.823115][T20110] [ 640.997322][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.010317][T20098] syz.1.6158 (20098) used greatest stack depth: 18768 bytes left [ 641.023528][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 641.045638][ T27] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 641.055748][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 641.073773][ T27] usb 4-1: SerialNumber: syz [ 641.315326][ T27] usb 4-1: 0:2 : does not exist [ 641.333965][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 641.343114][ T27] usb 4-1: USB disconnect, device number 52 [ 641.462273][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.680712][T20140] loop2: detected capacity change from 0 to 1024 [ 641.727061][T20140] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 641.810325][T20140] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.6180: lblock 2 mapped to illegal pblock 2 (length 1) [ 641.853182][T20134] loop4: detected capacity change from 0 to 32768 [ 641.868109][T20134] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.6177 (20134) [ 641.942122][T20140] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 641.987448][T20140] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.6180: lblock 0 mapped to illegal pblock 48 (length 1) [ 642.007748][T20134] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 642.040902][T20140] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 642.060627][T20134] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 642.079820][T20140] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.6180: Failed to acquire dquot type 0 [ 642.098754][T20134] BTRFS info (device loop4): using free space tree [ 642.179401][T20140] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 642.197931][T20140] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.6180: mark_inode_dirty error [ 642.240761][T20140] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 642.256670][T20160] netlink: zone id is out of range [ 642.289244][T20140] EXT4-fs (loop2): 1 orphan inode deleted [ 642.296500][T20140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.320846][T20160] netlink: set zone limit has 4 unknown bytes [ 642.387685][ T59] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 642.428414][T20134] BTRFS info (device loop4): enabling ssd optimizations [ 642.457156][T20134] BTRFS info (device loop4): auto enabling async discard [ 642.458964][ T59] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 642.517161][ T59] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 0 [ 642.624565][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.653021][ T11] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 642.721973][ T11] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 642.740900][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 0 [ 642.741089][T15371] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 642.777656][ T5775] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 642.820119][ T5775] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 642.867035][ T5775] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 642.882627][T20174] loop1: detected capacity change from 0 to 4096 [ 642.895429][T20177] loop3: detected capacity change from 0 to 8 [ 642.911858][T20174] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 642.916486][T20177] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 643.003116][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3 [ 643.113260][T20177] cramfs: bad data blocksize 4294934200 [ 643.121533][T20181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6189'. [ 643.138138][T20177] cramfs: bad data blocksize 4294934200 [ 643.157076][ T28] audit: type=1800 audit(1777925517.403:181): pid=20177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6190" name="file1" dev="loop3" ino=33092 res=0 errno=0 [ 643.166911][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6189'. [ 643.178201][ C1] vkms_vblank_simulate: vblank timer overrun [ 643.220412][T20174] ntfs3: loop1: failed to convert "c46c" to ascii [ 644.113389][T20203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6201'. [ 644.160814][T20207] Zero length message leads to an empty skb [ 644.330539][T20210] loop1: detected capacity change from 0 to 64 [ 644.498123][ T5763] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 644.606579][T20217] loop4: detected capacity change from 0 to 256 [ 644.914089][T20200] loop2: detected capacity change from 0 to 32768 [ 645.003002][T20200] JBD2: Ignoring recovery information on journal [ 645.214305][T20200] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 645.254272][T20238] loop1: detected capacity change from 0 to 128 [ 645.293012][T20238] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 645.307189][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 645.345521][T20238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 645.497341][T20200] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 645.527241][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 645.533699][T20242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6219'. [ 645.539538][ T9] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 645.565599][ T9] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 645.582457][T20200] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 645.593580][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 645.607584][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 127, changing to 10 [ 645.623720][T20200] OCFS2: File system is now read-only. [ 645.629523][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1287, setting to 1024 [ 645.641286][T20200] (syz.2.6199,20200,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 645.653065][T20200] (syz.2.6199,20200,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 645.661670][T20200] (syz.2.6199,20200,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 645.683973][ T9] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 645.708157][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.716650][T20200] (syz.2.6199,20200,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 645.723530][T20244] binder: 20243:20244 ioctl c0306201 200000001580 returned -14 [ 645.737021][ T9] usb 5-1: Product: syz [ 645.741258][ T9] usb 5-1: Manufacturer: syz [ 645.760551][T20200] (syz.2.6199,20200,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 645.769497][ T9] usb 5-1: SerialNumber: syz [ 645.784090][ T9] usb 5-1: config 0 descriptor?? [ 645.789299][T20200] (syz.2.6199,20200,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 645.804856][T20228] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 645.814663][T20200] (syz.2.6199,20200,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 645.824063][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 645.840393][T20200] (syz.2.6199,20200,0):ocfs2_mknod:385 ERROR: status = -30 [ 645.849632][ T9] hub: probe of 5-1:0.0 failed with error -5 [ 645.865804][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 645.876244][T20200] (syz.2.6199,20200,0):ocfs2_mknod:502 ERROR: status = -30 [ 645.891660][T20200] (syz.2.6199,20200,0):ocfs2_mkdir:659 ERROR: status = -30 [ 646.003220][ C1] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 646.076500][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 646.202808][ T5813] usb 5-1: USB disconnect, device number 12 [ 646.202901][ C0] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -19 [ 646.327158][ T23] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 646.411281][T20257] program syz.3.6227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 646.519065][ T23] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 646.537057][ T23] usb 2-1: config 0 has no interface number 0 [ 646.548322][ T23] usb 2-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 646.577138][ T23] usb 2-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 646.596469][ T23] usb 2-1: config 0 interface 216 has no altsetting 0 [ 646.624155][ T23] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 646.645800][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.668532][ T23] usb 2-1: config 0 descriptor?? [ 646.678249][T20251] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 646.695886][ T23] usb 2-1: NFC: intf ffff888060fd4000 id ffffffff8da45bc0 [ 646.978680][ T23] usb 2-1: USB disconnect, device number 32 [ 647.375552][T20291] IPv6: sit3: Disabled Multicast RS [ 647.398530][T20291] sit3: entered allmulticast mode [ 647.536665][T20295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6245'. [ 648.052268][T20315] netlink: zone id is out of range [ 648.120583][T20315] netlink: set zone limit has 4 unknown bytes [ 648.128868][T20319] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6256'. [ 648.672991][T20337] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6265'. [ 648.966764][T20345] usb usb7: usbfs: process 20345 (syz.3.6269) did not claim interface 0 before use [ 649.693630][T20343] loop1: detected capacity change from 0 to 32768 [ 649.783823][T20343] (syz.1.6268,20343,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 649.827471][T20343] (syz.1.6268,20343,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 649.898588][T20343] JBD2: Ignoring recovery information on journal [ 650.033862][T20343] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 650.444770][T20387] netlink: 'syz.3.6289': attribute type 7 has an invalid length. [ 650.452980][T20387] netlink: 'syz.3.6289': attribute type 8 has an invalid length. [ 650.469055][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 650.913645][T20400] loop4: detected capacity change from 0 to 512 [ 650.946247][T20400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 651.029627][T20400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.081931][T20400] ext4 filesystem being mounted at /499/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 651.267100][T20400] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 651.297089][T20400] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 651.312000][T20400] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.6295: Failed to acquire dquot type 1 [ 651.470631][T15371] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.692712][T20429] netlink: 'syz.4.6305': attribute type 9 has an invalid length. [ 651.714618][T20429] netlink: 'syz.4.6305': attribute type 7 has an invalid length. [ 651.742756][T20429] netlink: 'syz.4.6305': attribute type 8 has an invalid length. [ 652.082858][T20443] loop3: detected capacity change from 0 to 128 [ 652.126425][T20439] loop1: detected capacity change from 0 to 4096 [ 652.178589][T20439] EXT4-fs: Ignoring removed orlov option [ 652.238444][T20439] EXT4-fs (loop1): Test dummy encryption mode enabled [ 652.273715][T20439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.408691][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.623355][T20453] loop4: detected capacity change from 0 to 4096 [ 652.708590][T20453] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 652.733841][T20453] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 653.222572][T20475] netlink: 'syz.2.6330': attribute type 21 has an invalid length. [ 653.237768][T20475] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6330'. [ 653.632496][T20489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6337'. [ 653.931998][T20501] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6343'. [ 653.988364][T20501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.743120][T20525] loop1: detected capacity change from 0 to 1024 [ 654.831348][T20499] loop2: detected capacity change from 0 to 32768 [ 654.859915][T20499] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.6342 (20499) [ 654.947919][T20499] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 654.989570][T20499] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 655.040141][T20499] BTRFS info (device loop2): using free space tree [ 655.043446][T20533] netlink: 'syz.3.6359': attribute type 2 has an invalid length. [ 655.095028][T20533] netlink: 'syz.3.6359': attribute type 1 has an invalid length. [ 655.159427][T20544] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6360'. [ 655.240663][T20552] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6362'. [ 655.250539][T20552] unsupported nlmsg_type 40 [ 655.251355][T20499] BTRFS info (device loop2): enabling ssd optimizations [ 655.317175][T20499] BTRFS info (device loop2): auto enabling async discard [ 655.360631][T20557] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 655.492488][ T5775] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 655.765077][T20567] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6369'. [ 655.785494][T20567] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 656.621755][T20597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6381'. [ 657.014531][T20613] netlink: 'syz.4.6389': attribute type 1 has an invalid length. [ 657.222879][T20620] loop1: detected capacity change from 0 to 16 [ 657.250508][T20620] erofs: (device loop1): mounted with root inode @ nid 36. [ 657.297393][T20620] cifs: Unknown parameter 'cache_strategy' [ 657.474458][T20625] loop2: detected capacity change from 0 to 1764 [ 658.244290][T20655] loop3: detected capacity change from 0 to 256 [ 659.064747][T20679] loop2: detected capacity change from 0 to 4096 [ 659.098489][T20679] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 659.315318][T20679] ntfs: (device loop2): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 659.352049][T20679] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 659.352559][T20689] loop1: detected capacity change from 0 to 4096 [ 659.392353][T20679] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 659.415233][T20689] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 659.449184][T20679] ntfs: volume version 3.1. [ 659.482527][T20679] ntfs: (device loop2): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 659.515660][T20679] ntfs: (device loop2): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 659.566238][T20679] ntfs: (device loop2): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 660.011260][T20705] loop1: detected capacity change from 0 to 764 [ 660.111004][T20705] Symlink component flag not implemented [ 660.142301][T20705] Symlink component flag not implemented (15) [ 660.721545][T20728] loop3: detected capacity change from 0 to 16 [ 660.758574][T20728] erofs: (device loop3): mounted with root inode @ nid 36. [ 660.778080][ T23] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 660.791275][T20728] syz.3.6445: attempt to access beyond end of device [ 660.791275][T20728] loop3: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 660.834450][T20728] syz.3.6445: attempt to access beyond end of device [ 660.834450][T20728] loop3: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 660.868195][ T28] audit: type=1800 audit(1777925535.133:182): pid=20728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6445" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 660.955278][T20732] loop4: detected capacity change from 0 to 256 [ 661.007002][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 661.019557][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 661.060861][ T23] usb 2-1: config 6 has an invalid interface number: 4 but max is 1 [ 661.097531][ T23] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 661.151398][T20732] FAT-fs (loop4): Directory bread(block 64) failed [ 661.163715][ T23] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 661.177053][T20732] FAT-fs (loop4): Directory bread(block 65) failed [ 661.197083][ T23] usb 2-1: config 6 has no interface number 0 [ 661.203713][T20732] FAT-fs (loop4): Directory bread(block 66) failed [ 661.237430][ T23] usb 2-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 6.d0 [ 661.254657][T20732] FAT-fs (loop4): Directory bread(block 67) failed [ 661.262128][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.281389][T20732] FAT-fs (loop4): Directory bread(block 68) failed [ 661.297324][ T23] usb 2-1: Product: syz [ 661.301649][ T23] usb 2-1: Manufacturer: syz [ 661.306285][ T23] usb 2-1: SerialNumber: syz [ 661.311141][T20732] FAT-fs (loop4): Directory bread(block 69) failed [ 661.335383][T20732] FAT-fs (loop4): Directory bread(block 70) failed [ 661.354584][T20732] FAT-fs (loop4): Directory bread(block 71) failed [ 661.377329][T20732] FAT-fs (loop4): Directory bread(block 72) failed [ 661.384083][T20732] FAT-fs (loop4): Directory bread(block 73) failed [ 661.580829][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 661.724946][ T23] usb 2-1: USB disconnect, device number 33 [ 661.812273][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:6.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 662.528719][T20767] loop4: detected capacity change from 0 to 736 [ 662.771990][T20767] rock: directory entry would overflow storage [ 662.808845][T20767] rock: sig=0x3b10, size=4, remaining=3 Stopping sshd: [ 663.197143][T20783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6471'. [ 663.263120][T20778] loop1: detected capacity change from 0 to 4096 stopped /usr/sbin/sshd (pid 5533) [ 663.330674][T20778] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. OK [ 663.377023][T20778] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 663.477211][T20778] ntfs: volume version 3.1. Stopping crond: stopped /usr/sbin/crond (pid 5512) OK [ 664.417335][T20818] netlink: 'syz.3.6484': attribute type 12 has an invalid length. [ 664.425426][T20818] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6484'. Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5433) [ 664.943991][T20842] loop2: detected capacity change from 0 to 164 Stopping network: [ 665.521383][T20848] loop1: detected capacity change from 0 to 4096 [ 665.663919][T20858] loop3: detected capacity change from 0 to 1764 [ 666.222782][T20872] loop4: detected capacity change from 0 to 512 [ 666.400744][T20872] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 666.711311][T20880] loop3: detected capacity change from 0 to 4096 [ 666.761723][T20880] __ntfs_error: 12 callbacks suppressed [ 666.761741][T20880] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 666.957928][T20880] ntfs: volume version 3.1. OK [ 667.652698][ T28] audit: type=1400 audit(1777925541.923:183): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=20909 comm="syz.4.6520" Stopping iptables: OK Stopping system message bus: [ 668.894000][T20917] loop2: detected capacity change from 0 to 32768 [ 668.959315][T20917] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.6521 (20917) [ 669.044634][T20917] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 669.092495][T20917] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 669.118837][T20917] BTRFS info (device loop2): using free space tree [ 669.349657][T20917] BTRFS info (device loop2): enabling ssd optimizations [ 669.393000][T20917] BTRFS info (device loop2): auto enabling async discard done [ 669.773663][ T5775] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 669.894928][T20992] loop3: detected capacity change from 0 to 1024 [ 670.168646][ T11] hfsplus: b-tree write err: -5, ino 25 [ 670.174599][ T11] hfsplus: b-tree write err: -5, ino 4 [ 670.246519][ T11] hfsplus: b-tree write err: -5, ino 2 [ 670.440253][T21006] netlink: 'syz.2.6544': attribute type 27 has an invalid length. [ 671.047566][T21025] netlink: 'syz.2.6556': attribute type 1 has an invalid length. [ 671.726998][T21049] cgroup: Name too long Stopping klogd: [ 672.524816][T21071] devpts: called with bogus options OK [ 672.709502][ T28] audit: type=1326 audit(1777925546.983:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21075 comm="syz.3.6579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 672.797021][ T28] audit: type=1326 audit(1777925546.983:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21075 comm="syz.3.6579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 Stopping acpid: [ 672.900777][ T28] audit: type=1326 audit(1777925546.983:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21075 comm="syz.3.6579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 672.992017][ T28] audit: type=1326 audit(1777925546.983:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21075 comm="syz.3.6579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 673.052824][T21045] loop1: detected capacity change from 0 to 40427 [ 673.073599][ T28] audit: type=1326 audit(1777925546.983:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21075 comm="syz.3.6579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 673.105943][T21045] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 673.136587][T21045] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 673.143431][ T28] audit: type=1326 audit(1777925547.033:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21075 comm="syz.3.6579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 673.168131][T21045] F2FS-fs (loop1): invalid crc value [ 673.212334][ T28] audit: type=1326 audit(1777925547.033:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21075 comm="syz.3.6579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 673.293652][ T28] audit: type=1326 audit(1777925547.033:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21075 comm="syz.3.6579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 673.329019][ T28] audit: type=1326 audit(1777925547.033:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21075 comm="syz.3.6579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbf3939cdd9 code=0x7ffc0000 [ 673.472592][T21045] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 673.493824][T21045] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 673.635719][T21110] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 673.655944][T21093] f2fs_ckpt-7:1: attempt to access beyond end of device [ 673.655944][T21093] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 673.680394][T21093] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 673.688282][T21113] bridge0: port 3(hsr0) entered blocking state [ 673.721133][T21113] bridge0: port 3(hsr0) entered disabled state [ 673.751887][T21113] hsr0: entered allmulticast mode [ 673.757688][T21113] hsr_slave_0: entered allmulticast mode [ 673.765266][T21113] hsr0: entered promiscuous mode [ 673.776460][T21113] bridge0: port 3(hsr0) entered blocking state [ 673.782881][T21113] bridge0: port 3(hsr0) entered forwarding state [ 674.187096][ T5813] usb 5-1: new high-speed USB device number 13 using dummy_hcd OK [ 674.407620][ T5813] usb 5-1: Using ep0 maxpacket: 16 [ 674.418979][ T5813] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 674.428652][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.437542][ T5813] usb 5-1: Product: syz [ 674.446912][ T5813] usb 5-1: Manufacturer: syz [ 674.451944][ T5813] usb 5-1: SerialNumber: syz [ 674.487978][ T5813] usb 5-1: config 0 descriptor?? [ 674.500596][ T5813] visor 5-1:0.0: Sony Clie 3.5 converter detected Stopping syslogd: stopped /sbin/syslogd (pid 5121) OK [ 674.929567][ T5813] usb 5-1: clie_3_5_startup: get interface number failed: -71 [ 674.948563][ T5813] visor: probe of 5-1:0.0 failed with error -71 [ 674.967727][ T5813] usb 5-1: USB disconnect, device number 13 [ 675.072141][T21153] loop1: detected capacity change from 0 to 2048 [ 675.101497][T21153] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 675.171173][T21159] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 675.182908][T21153] syz.1.6610: attempt to access beyond end of device [ 675.182908][T21153] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 675.241221][T21153] syz.1.6610: attempt to access beyond end of device [ 675.241221][T21153] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 675.283304][T21153] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) umount: can't remount debugfs read-only [ 675.372690][T21163] x_tables: duplicate underflow at hook 3 [ 675.476507][T21139] loop2: detected capacity change from 0 to 40427 [ 675.506144][T21139] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 675.544656][T21139] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 675.575333][T21139] F2FS-fs (loop2): invalid crc value [ 675.811681][T21139] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 675.837080][T21139] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 676.024885][T21168] f2fs_ckpt-7:2: attempt to access beyond end of device [ 676.024885][T21168] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 676.059690][T21168] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 676.157398][ T5813] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 676.314806][T21191] loop3: detected capacity change from 0 to 1024 [ 676.374480][ T5813] usb 5-1: Using ep0 maxpacket: 16 [ 676.435257][ T5813] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 676.449980][T21191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.477183][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.530833][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.587695][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 676.642570][ T5813] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 676.688011][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.708428][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.708678][ T5813] usb 5-1: config 0 descriptor?? [ 676.771112][ T5813] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input28 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.65 closed by remote host. [ 677.125348][ T5813] usb 5-1: USB disconnect, device number 14 [ 678.131863][ T2882] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.256040][ T2882] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 678.334277][ T2882] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.395620][ T2882] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.525455][ T2882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.612016][ T2882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.686204][ T2882] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 678.695858][ T2882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.771214][ T2882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.086637][ T2882] bridge0: port 3(ip6gretap0) entered disabled state [ 679.190479][ T2882] ip6gretap0 (unregistering): left allmulticast mode [ 679.197764][ T2882] ip6gretap0 (unregistering): left promiscuous mode [ 679.204655][ T2882] bridge0: port 3(ip6gretap0) entered disabled state [ 680.009264][ T2882] IPVS: stopping backup sync thread 13841 ... [ 680.422555][T21210] smc: removing ib device syz0 [ 680.452289][T21210] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 680.474065][T21210] ACPI: PM: Preparing to enter system sleep state S5 [ 680.491644][T21210] kvm: exiting hardware virtualization [ 680.503432][T21210] reboot: Power down serialport: VM disconnected.