last executing test programs: 7.15046408s ago: executing program 3 (id=3783): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x800000, &(0x7f0000006a80)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="53d2d9de939847c9dd37ed564f2be0a4f9d29f7e23b3a032bbe730dc52348cbe87ceee766fd6025fe3e79ae4be665c25801faff43856dd4a90209ef9ad9a90beca5921e77f0b0248d2793d9a477240b4d3e13b1079fb066ea5b89316eaa679c336a781bafb6020144f23f787a4057fcb152a4a807a2fda22545953e4650264b5f42a2712642c0e"], 0x25, 0x55a6, &(0x7f0000006d40)="$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") 6.324888577s ago: executing program 2 (id=3789): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200031010203010902120001000000000904"], 0x0) 4.671291899s ago: executing program 1 (id=3798): syz_usb_connect(0x2, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000385353608f20446b76e8e01022601090259000104f2000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909090702020005cbad092403"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 4.31146825s ago: executing program 2 (id=3803): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0xa08811, &(0x7f0000000100)={[{@discard}, {@ssd_spread}, {@enospc_debug}, {@flushoncommit}, {@barrier}, {@rescue={'rescue', 0x3d, 'all'}}, {@acl}, {@subvol={'subvol', 0x3d, 'nobarrier'}}]}, 0xfb, 0x5164, &(0x7f000000a2c0)="$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") 4.301340101s ago: executing program 3 (id=3805): syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x4, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr=0x4, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x3b, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private, 0x4}, {@dev}, {@private}]}]}}}}}}}, 0x0) 4.12767746s ago: executing program 5 (id=3806): syz_read_part_table(0x106a, &(0x7f0000000000)="$eJzsz7FJxVAUBuD/5ibxpnUB17C0EGwsFXexUcERnECwsbLWDdzCFbJAxECEt8B7r/i+6pyfHw4nHNTUtdOP5Py5vqQleUxyNySp45ik/Be/vq//luF1bicpNRf9Gi+fb/dbqSb91XyTYXkoP0u3ZuVyajsHu6ezus319n0/XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAcfsNAAD//3OqEK8=") 3.875000392s ago: executing program 0 (id=3808): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x21b, &(0x7f0000000180)="$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") 3.66009613s ago: executing program 0 (id=3809): syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x4e20, 0x0, 0x28, 0x0, @gue={{0x2, 0x1, 0x1, 0x5}, "45333bf14f023e428034a55b3c7ba737067570cb89b46e6e"}}}}}}, 0x0) 3.280183109s ago: executing program 0 (id=3810): syz_clone3(&(0x7f0000002c00)={0x9828000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.100799946s ago: executing program 5 (id=3811): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000407, &(0x7f0000000000)={[{@grpjquota}, {@norecovery}, {@journal_path={'journal_path', 0x2c, './file1'}}, {@i_version}]}, 0x4, 0x5ca, &(0x7f0000001400)="$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") 2.802978179s ago: executing program 1 (id=3812): syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b20710200e01015a000000000109021b0001000000000904", @ANYBLOB="19"], 0x0) 2.62895209s ago: executing program 0 (id=3813): syz_open_dev$tty20(0xc, 0x4, 0x0) 2.542569099s ago: executing program 5 (id=3814): syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) 2.51071135s ago: executing program 3 (id=3815): syz_emit_ethernet(0x4e, &(0x7f0000000840)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58f", 0x18, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) 2.287953871s ago: executing program 4 (id=3816): syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x10, 0x2c, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x787b}}}}}}, 0x0) 2.12174576s ago: executing program 3 (id=3817): syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xff, 0x1, 0x428}}}, 0x7) 2.102526243s ago: executing program 4 (id=3818): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@usrjquota}, {@noload}, {@nodiscard}]}, 0x64, 0x51e, &(0x7f0000000c40)="$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") 2.009685672s ago: executing program 2 (id=3819): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x1804818, &(0x7f0000000180)=ANY=[], 0xfc, 0x6c3, &(0x7f0000000500)="$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") 1.774486298s ago: executing program 3 (id=3820): syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7370617273652c61636c2c6e6f68696464656e2c696f636861727365743d63701037352c7370617273652c696f636861727365743d6575632d6a702c61636c2c696f636861727365743d63703433372c646973636172642c696f636861727365743d63703934392c696f636861727365743d6d61636963656c616e642c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x4, 0x1f77c, &(0x7f00000400c0)="$eJzs3Qm8DfXfB/Df7Ps+R3aXbpKQfUmyr9m3kGzZ92whcUm2ZImQbEm2JKGSJJIoyS4JSZIkaZfE8zL33Nu9F/+atl/P+Lx79Z1z5p4z8z3LZ2bOODPny4aT6jau1ighISGBsCxJdo6kk0SSyCUr+bIdH3eJSx4yhBCeEDIxsWDrmj3qa5fHmbnW3z9kWZ4N/bSmq83XJLLdbvXl2aLHt2fanuXLi407d+mb0KVvQs9e/RLaJrTr1atf23bdOyS079K3W6GE+t07tO3bIaFLz74d+qT7c8fuvXr3HpTQtmd7Q+3dp0Pfvgltew5K6NZhUEK/Xgn9+gxKaNupbZeeCYUKFUowVAJ/UJOltDsAAAAAAAAAAAAAAAAAAIC/x6VL5BJDuwkAAAAAAAAAAAAAAAAAAAD4S6rVrF21MOFSrzOEIaUJQ2akHNgfl3Ix5ZY2IaRNcClzUGvELyUtMQt0P3+AudZQvFoTV/kCQmFCSOfU6bOkVnCJIUIwTvjd+ZDu8QnFhynz5blEUodUI43j15PivTOkQrpGLsaHFVJGXOCuOnQvJZ8SYUW66XBXPJ4KGZ7IBJJ+6DByMLx06dKlqz1F/4wr+4T/trDvM5mkH6Z/n3HXzH+zDPnn4ulIOUXIv5H/3qnTZ0nDsPm30zSaJv9yav7rkC6kD+kTH3+t5QCX8Xm1rz7MzSefEeXfze9fxdJuAKhir8g/+z/yz/5/yn9q88nDtPmvTXqRTqQa6UK6kw7x8dfKf0qYU/OfYbopwzyE4XjkH/5fuTL/XDz/RzPkX4wvA1JG2fG8pOS/8J/Mf/rtfIbUD53z9FKmL3GJpCnpRbqT/qQH6RBMNyl1PixpnzpHPuny40j5POAHfy0eT4ZP5jIuYZLnIrjx+wfjkm8gXN5+T2BJuttk/BuJLysLp86fJ278Ul8yiAwm3Uhb0j1YGvXZknz7y8u+fKm3F4ie+kzHX6f4I09KHZ85dWsl8x9eDvG/fxOIMP6K/PPx/G+4yud/PsP6/+/K/19az+vxCcXP+pd2PV+R9CP9SB9ShXQgHePj0y8HuD+8HBhLrlwOBONCLgeutZ2R8rymbmdkeFwpw9xc5uBOf892Btb/17cr1/9CkH8u+a2RYf0vZNj/97/yf8DulW6YMj7vb5+cU+/32+cIhlT56+v/YPoMVyi4Xj9d3n57v6c8tNS8+cmDAnb6YW7BCuYxiRDSLLhj8nKjdHzfXSKpSYqRwsHjYOJPDB9/fvLF/0/bZOYMe23mxXtk+ArxZzhZym1qkDRP+FWGKfPPzfvBbFakbDfwydsZcoY+U3pJ2f8D17Mr9/+J8fV//at8/hf/5c//aff/h/5cwKefdtrPBZVIF9KP9CBtSe9rro9TZNyfmnqT+DA3k+1vXB//27D+v75duf6X4vlfc5Xtf+kf2v5Pm/PaYXOe4R/SUqYvBDnvRXqRfsH1/+p2vxQfpi5nMv7DYHzoxP8B5+9dziD/17cr8y/H8z/wKvmXqe3/5/7E/v/00u4XqETakvakcrBvsC9JzlP6/Whs6qWkdNvnab4fEA9u6vb5hVzph3Epc2MvJd/hv7WdgPxf367MvxLkX0m/sz/+yVT5e77/k5CxC+Z3t///ln8XCOZ7efu/EelA7iP9SR/SIUO+0+QhPoXUfPPJT0ZvJv3w8tSqkEYkD8NkZ+L7CY6S3/YTbEj9/H35dslTc+Mf9FP2E6yI/5/8aIMdESk/t0IaJK4Knp+UYVJ8/BBCSE1SM+X2pHD8Gx7zDh+pxDK/DVMeR/ur3p4jZ13u3OXbpAxJhumTNK83G398W8lv+xcWp3l8Kbe3Sfr9IDPi/5Ngiyp5/vlS3lzXmHfG213rOch4u2s99oyP47+1HKblys//6v/4/p9K7fM/9yfyn9Jp8jDt5/8mpDepTNqSvvH8X227fFh8+Nu/+7NXHeZJIjnYNNv3REjefkiI74dLJDVJT9KR9IrfK2Xhp3fJ1u2BoYcOZnzc/+77Euv/69uV638tvv8/ib1y/5/296z/7Yxd/Evr/2C+l/NflQwk/UgH0pO0D9ZnyZ91knPbjPn9/fo1mOT/L8uS/AhIG1I3/vwl17D95Y0vGkQukdQj7UhXUjN1H8XfPf0GpH+wX6Qt4UjW+PQ7B5+w/vr0L3++akg6kN6kLekTLGHTw/r3v+TK9b9OSLD+T7jK/n/9H9j/R/t7Oek/9zOpl66P9yfW/9e3K9f/xv/Iv4H8Rwzyf327Mv/m/8i/ifxHDPJ/vUmfvyvzb/2P/FvIf8Qg/9e3K/NvB/knZAxJn38m9R6/3e7vyP/1kbP/KuT/+nZl/h3k//8n+c/cCfm/vl2Zfxf5v44g/9e3K/PvIf/XEeT/+nZl/n3k/zqC/F/frsx/DPm/jiD/17cr858J+b+OIP/XtyvzfwPyfx1B/q9vV+Y/+fzfBunNXnn8X+a/4fi/vH/y+N+68eN//t7jX5KPZx0YPBXJxxk2Sz2etV7qfR2S4fifNMcFJ8SfpHzxw5qu+I4Rk/4Bpz2O9mzqfFmyM3W+DdLdNu18N8T/J8F+msLx5z1+fGx8umkfeMpzcSmDtK+/Hz/CsVma43HDTudq36vK+HixnP8vunb+r3b+7ywRyX/a4+smxb+DmJLDwlfJv0fS5zCBXPkg/n++z7H+v75dO/9JV8l/1r/h+N8w+f/t/D9M6vl//qnjUyelzI/97XyDycuBhqnTyLgcqJDm/ADZ48OE+Il7dULm5Yg/o2n9t5YTOP/n9S35+N/8GfJ/eXkwhs14/p8TwfC33CdLyf0MrnuQu9LjeqQbpoxPuMpx/+z/XO8nd5PxfIC/N5+M07s834LBPTvGf+8jebv5ct7tNMf9n/0D5/M9mnJun9S8M6RN0CEh2eLXM/aVcZjyPb2saX4H7Gr95fiz08+Izzj9Imn+eCJ1ebQzdZsm+XOQHL90+b53xB93s9S/88G4zCmnTRZ5kli7WZOaVZKnmmZc9auMq1OvCvmqYryD/8Zy8Hp14hr5v/L8/wL5LBheK/+/9768YqUfMv9/d76SrnFe8JSWUs/7k2F6KcPcLBvsyvy3czM83tbfk5vP/vok4C+h+/757Jr5b3PF+f//Wv6v9lMz/0j+M7rG+u9a5/vcEH9NknFkTXz85e35FYSQuqRpUC9rGZxFvDdpGf8Vn4KkS3BW8U6kQ/B/T1KcFCUlSLHgv1KkMClBipKWaZZE6S+XJ+VJy795qunfX3yG99dnGd5fwl99f116Ot37C/7brp3/c/+x9X/K9v8fXc6k/GzO5fk2v0b+r7b+T5HxvP8ZfoaH5Gb4/7n+vzzPfvHl96TUv/PBuL+6/A4+e2gi6d+3Q59CA9v269enCIkPrvK3oiQ+CKTPJdb/tP331v9skP98V1n/N6v+x/Of8rs/fz7/yeuj38t/xvmQxOTp5LsxeXjl9n+xDPMhf2g5E34+yYG71nIm5XC91OVMhumlDHMrQspyJv7Vib/zffIZ+Xc+Z8C1/Pfyn7z+3xpy/Z/x974yDsPkv3eabhpnyOXvzSel55RzPqfkUknNZSFyX/C7oMm3CLsdkDLdlGFuxvx/vB8A63/a/mv5J/EMliYZfx72v/j7FfDXSLQbAKqkEPlP3mJF/qPkT500BCJDDpF/JajIf5QotBuAf84f+HKXEiL/yXu+kf8oUWk3AFSpIfKf/M1b5D9KNNoNwL8ta9qd7lqI/Cd/rx35jxKddgNAlR4i/0ZQkf8oMWg3AFQZIfJvBhX5jxKTdgNAlRki/8m/SI/8R4lFuwGgygqR/+TDd5H/KLnikGy4rtgh8h+cBQv5jxSHdgNAlRMi/8m/son8R4lLuwGgyg2R/+DsV8h/pHi0GwCqvBD5D44kQv4jxafdAFDlh8h/LKjIf5TEaDcAVMVC5D9TUJH/KMlEuwGgKlOI/N8QVOQ/Sm6g3QBQdQOO/72uZabdAFCVOUT+swQV+Y+SLLQbAKqyhMh/1qAi/1GSlXYDQFXWEPlPPgM/8h8l2Wg3AFRlC5H/5F+8Qv6jJDvtBoCq7CHyn/yLdMh/lOSg3QBQlSNE/nMGFfmPkpy0GwCqcv7B/LdM/RvyHyW5aDcAVOUKsf5P/pUS5D9KrvarTHD9SAiR/9xBRf6jJDftBoCq3CHynyeoyH+U5KHdAFCVJ0T+k3+QFvmPkhtpNwBU3Rgi/8k/UI38R0ki7QaAqsQQ+b8pqMh/lNxEuwGg6qYQ+c8bVOQ/SvLSbgCoyhsi/zcHFfmPkptpNwBU3Rwi//mCivxHST7aDQBV+ULk/5agIv9RcgvtBoCqW0LkP39Qkf8oyU+7AaAqf4j83xpU5D9KbqXdAFB1a4j8Fwgq8h8lBWg3AFQVCJH/gkFF/qOkIO0GgKqCIfJfKKjIf5QUot0AUFUoRP5vCyryHyW30W4AqLotRP4LBxX5j5LCtBsAqgqHyH+RoCL////99moXodoH0FYkRP6LBhX5j5KitBsAqoqGyH+xoCL/UVKMdgNAVbE/nn8xeYD8R0lx2g0AVcVDrP9LBBX5j5IStBsAqkqEyH/JoCL/UVKSdgNAVckQ+S8VVOQ/SkrRbgCoKhUi/8EY5D9SStNuAKgqHSL/ZYKK/EdJGdoNAFVlQuT/9qAi/1FyO+0GgKrbQ+S/bFCR/ygpS7sBoKpsiPzfEVTkP0ruoN0A/I3E0Pe4I0T+ywUV+Y+ScrQbAKrKhcj/nUFF/qPkTtoNAFV3hsh/+aAi/1FSnnYDQFX5EPmvEFTkP0oq0G4AqKoQIv8Vg4r8R0lF2g0AVRVD5L9SUJH/KKlEuwGgqlKI/FcOKvIfJZVpNwBUVQ6R/ypBRf6jpArtBoCqKiHyXzWoyH+UVKXdAFBVNUT+qwUV+Y+SarQbAKqqhch/9aAi/1FSnXYDQFX1EPmvEVTkP0pq0G4AqKoRIv81g4r8R0lN2g0AVTVD5L9WUJH/KKlFuwGgqlaI/N8VVOQ/Su6i3QBQdVeI/NcOarr8y/9Sm/APqU27AaCqdoj81wkq1v9RUod2A0BVnRD5rxtU5D9K6tJuAKiqGyL/9YKK/EdJPdoNAFX1QuS/flCR/yipT7sBoKp+iPw3CCryHyUNaDcAVDUIkf+GQUX+o6Qh7QaAqoYh8t8oqMh/lDSi3QBQ1ShE/hsHFfmPksa0GwCqGofIf5OgIv9R0oR2A0BVkxD5bxpU5D9KmtJuAKhqGiL/dwcV+Y+Su2k3AFTdHSL/zYKK/EdJM9oNAFXNQuS/eVCR/yhpTrsBoKp5iPy3CCryHyUtaDcAVLUIkf97gor8R8k9tBsAqu4Jkf+WQUX+o6Ql7QaAqpYh8n9vUJH/KLmXdgNA1b2/5T9N1q+e/1ZBRf6jpBXtBoCqViHW/62DivxHSWvaDQBVrUPkv01Qkf8oaUO7AaCqTYj8tw0q8h8lbWk3AFS1DZH/dkFF/qOkHe0GgKp2IfJ/X1CR/yi5j3YDQNV9IfLfPqjIf5S0p90AUNU+RP47BBX5j5IOtBsAqjqEyH/HoCL/UdKRdgNAVccQ+e8UVOQ/SjrRbgCo6hQi/52DivxHSWfaDQBVnUPkv0tQkf8o6UK7AaCqS4j8dw0q8h8lXWk3AFR1DZH/bkFF/qOkG+0GgKpuIfLfPajIf5R0p90AUNU9RP57BBX5j5IetBsAqnqEyH/PoCL/UdKTdgNAVc8Q+e8VVOQ/SnrRbgCo6nWV/CvXyH/voCL/UdKbdgNAVe8Q6//7g4r8R8n9tBsAqu4Pkf8+QUX+o6QP7QaAqj4h8t83qMh/lPSl3QBQ1TdE/vsFFfmPkn60GwCq+oXIf/+gIv9R0p92A0BV/xD5HxBU5D868On/ejcgRP4fCCryHyUP0G4AqHogRP4HBhX5j5KBtBuAfx2T5vLAEPkfFFTkP0oG0W4AqBoUIv+Dg4r8R8lg2g0AVYND5P/BoCL/UfIg7QaAqgdD5H9IUJH/KBlCuwGgakiI/D8UVOQ/Sh6i3QBQ9VCI/A8NKvIfJUNpNwBUDQ2R/2FBRf6jZBjtBoCqYSHynxRU5D9Kkmg3AFQlhcj/8KAi/1EynHYDQNXwEPkfEVTkP0pG0G4AqBoRIv8PBxX5j5KHaTcAVD0cIv8jg4r8R8lI2g0AVSND5P+RoCL/UfII7QaAqkdC5H9UUJH/KBlFuwGgalSI/I8OKvIfJaNpNwBUjQ6R/zFBRf6jZAztBoCqMSHyPzaoyH+UjKXdAFA1NkT+xwUV+Y+ScbQbAKrGhcj/o0FF/qPkUdoNAFWPhsj/+KAi/1EynnYDQNX4EPl/LKjIf5Q8RrsBoOqxEPmfEFTkP0om0G4AqJoQIv8Tg4r8R8lE2g0AVRND5H9SUJH/KJlEuwGgalKI/E8OKvIfJZNpNwBUTQ6R/8eDivxHyeO0GwCqHg+R/ylBRf6jZArtBoCqKSHyPzWoyH+UTKXdANDikuD1/+P5fyKoyH+UPEG7AaDqiRD5nxZU5D9KptFuAKiaFiL/04OK/EfJdNoNAFXTQ+R/RlCR/yiZQbsBoGpGiPw/GVTkP0qepN0AUPVkiPzPDCryHyUzaTcAVM0Mkf+ngor8R8lTtBsAqp4Kkf9ZQUX+o2QW7QaAqlkh8j87qMh/lMym3QBQNTtE/ucEFfmPkjm0GwCq5oTI/9ygIv9RMpd2A0DV3BD5nxdU5D9K5tFuAKiaFyL/TwcV+Y+Sp2k3AFQ9HSL/84OK/EfJfNoNAFXzQ+T/maAi/1HyDO0GgKpnQuR/QVCR/yhZQLsBoGpBiPw/G1TkP0qepd0AUPVsiPwvDCryHyULaTcAVC0Mkf9FQUX+o2QR7QaAqkUh8r84qMh/lCym3QBQtThE/pcEFfmPkiW0GwCqloTI/9KgIv9RspR2A0DV0hD5fy6oyH+UPEe7AaDquRD5XxZU5D9KltFuAKhaFiL/zwcV+Y+S52k3AFQ9HyL/y4OK/EfJctoNAFXLQ+T/haAi/1HyAu0GgKoXQuR/RVCR/yhZQbsBoGpFiPy/GFTkP0pepN0AUPViiPyvDCryHyUraTcAVK0Mkf9VQUX+o2QV7QaAqlUh8r86qMh/lKym3QBQtTpE/l8KKvIfJS/RbgCoeilE/l8OKvIfJS/TbgCoejlE/l8JKvIfJa/QbgCoeiVE/tcEFfmPkjW0GwCq1oTI/6tBRf6j5FXaDQBVr4bI/9qgIv9RspZ2A0DV2hD5fy2oyH+UvEa7AaDqtRD5XxdU5D9K1tFuAKhaFyL/rwcV+Y+S12k3AFS9HiL/64OK/EfJetoNAFXrQ+T/jaAi/1HyBu0GgKo3QuR/Q1CR/yjZQLsBoGpDiPxvDCryHyUbaTcAVG0Mkf83g4r8R8mbtBsAqt4Mkf9NQUX+o2QT7QaAqk0h8v9WUJH/KHmLdgNA1Vsh8r85qMh/lGym3QBQtTlE/t8OKvIfJW/TbgCoejtE/rcEFfmPki20GwCqtoTI/9agIv9RspV2A0DV1hD5fyeoyH+UvEO7AaDqnRD5fzeoyH+UvEu7AaDq3RD53xZU5D9KttFuAKjaFiL/7wUV+Y+S92g3AFS9FyL/24OK/EfJdtoNAFXbQ+T//aAi/1HyPu0GgKr3Q+R/R1CR/yjZQbsBoGpHiPzvDCryHyU7aTcAVO0Mkf9dQUX+o2QX7QaAql0h8r87qMh/lOym3QBQtTtE/vcEFfmPkj20GwCq9oTI/96gIv9Rspd2A0DV3hD53xdU5D9K9tFuAKjaFyL/+4OK/EfJftoNAFX7Q+T/g6Ai/1HyAe0GgKoPQuT/QFCR/yg5QLsBoOpAiPx/GFTkP0o+pN0AUPVhiPwfDCryHyUHaTcAVB0Mkf+Pgor8R8lHtBsAqj4Kkf9DQUX+o+QQ7QaAqkMh8n84qMh/lBym3QBQdThE/o8EFfmPkiO0GwCqjoTI/8dBRf6j5GPaDQBVH4fI/9GgIv9RcpR2A0DV0RD5/ySoyH+UfEK7AaDqkxD5PxZU5D9KjtFuAKg6FiL/nwYV+Y+ST2k3AFR9GiL/x4OK/EfJcdoNAFXHCUP4JN8mJMFOHuMTQlhCbDm4lplcYnIRhg2uCAmEkITLl7XMl6/bV4wnfvLtmeTx7uWq+cm3TTuO+OQNxku9nZZ6O+ZomnHMuUuBdPPP/dv8510xHgAAAAAAAAD+sLSf1dN/bgeAKKlZt0qzfES5Ynw+QsgakZCTVvJ1gxxgrnZ/Pl47k4bBJSFek5aYBbqfP8Bca0j0+ATU5IEYvypziaQi6Uf6kT6kCulAOgZjGZK8P1IOP58M0s6nEmlL2pPKpDvpT/oGY6X430XShtQPN5+Ufyth0s9HCubThfQjPUhb0ptI8fm0IbXDTT8hPsGE9NMXgun3Ir1IP9KFdCfBvlSi/cH+DfI/nic7pf+qZCDpRzqQnqQ9Sd7Nyv6J14FP945J+zrUJr1IJ1It6L9D2ieRMKQNqRVuPt3jd+2e/nniuURSh1QjjdO9TEz4xxHfT54yTPs4kqdfh3QhfUif5P3o8WQp4d9PV74eCSmvRyPSgdxH+pM+pEM8PuqfmD4bpJrEX9G079cmpDepTNqSvqRD/F8Gub+j/9TpNyW9gsz1IB1Sp9eMVPmr0w9eEYYrFFxPSH19G6eb7gG7V3D/aw1T3qbt49O9PJ2CwSvYMf7+TCIk6D/5Ftni88mY5xlc92B6pcf1uDy8PNXgesr4jP0nEGIXDO6ZMp/Cwfic15h+fLrMofiwdIZhyuNQ0zyO5vG7J0+/SPD65/qd6acMU56f1OknJk83343pn6ff+i8ajP/npl8s3fNnp76T4Y8zaDcAVOH1v77h9b++4fW/vhnk8qeJxqQiqUuqkIqkIalCWpOapC6pRuqRhqQOqUgak5qkHqn7D3Vgp7lcIf7dw8tqxIeJQQeNSUNSk1QiTUhjUpW0JrVJzaDvf15CmstJaS5fiksk1UhNUjvoqi6pSOqQqv9CV78pnOZyJULin6IIqRTfGE4k9UglUotUJZVJ4+C1rfKv9lfhGpdTPuJffv9d7q1J8Ao3Js1Ja1KFVCWNSOVgTH3SOHgn/lPqp7l89de3KalHapMmwSv777/GbdJcrpD2M07q85e+v38zu5f1ztBfym69lGFisFy5vIShI+ka4397fWsGy76qpBlpTRqSeqTev7JcSTEpzeUKv9tfRVKb1Cb1SOV/5bW9bF6ay1fPR6Ugt5ffbfX/4V6uZsXv9teQVCX1g3VboyAh9Um94Dn9d17lDdfoL+XFTiRVSUUKuU2xM0NLcvxyyjC5P3qufYR68gIwMchDdVKdVA22XZoEz13t1HVJo2DboWqw1P5HpNmTl3StPwD8R11iLv3dcoWYfdLvTUz6nQlcGPaXHv61Ng8ArgtnXe5c2lXVkGDNxSdd/vzdLD4u+Zig4vHPHj4ZS9wM3wvKnDwuw/FAv3f9sgaJq4JpJYWY/1zmyvkH4/7E/OcdPlKJZX5bXbePz79wmu3x5PlnT74Jl+4Yp6D+kfkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8f3LW5c4R5rfrQwghDOGTahBCmsXH+YQQlhQnbPzaWOISJvk+ghsMMiePS76BkEAISWDJ716/rEHiqmBaSSHmP5e5cv7BuD8x/3mHj1RimWCmgfbx+RcmhFRIN//syTfhfHKJyZUy/6D+kfkA/DcxhCUc4YlARCIRmShEJRrRiUFMYhGbOMQlHvFJjGQiN5DMJAvJSrKR7CQHyUlykQSSm+QhN5JEchPJS24m+cgtJD+5lRQgBacXIreRwqQIKUqKkeKkBClJSpHSpAy5nZQld5By5E5SnlQgFUklUplUIVVJNVKd1CA1SS1yF6lN6pC6pB6pTxqQhqQRaUyakKbkbtKMNCctyD2kJbmXtCKtSZs/df8HyRDyEBlKhpEkMpyMIA+TkeQRMoqMJmPIWDKOPErGk8fIBDKRTCKTyeNkCplKniDTyHQygzxJZpKnyCwym8whc8k88jSZT54hC8izZCFZRBaTJWQpeY4sI8+T5eQFsoK8SFaSVWQ1eYm8TF4ha8irZC15jawjr5P15A2ygWwkb5JN5C2ymbxNtpCt5B3yLtlG3iPbyftkB9lJdpHdZA/ZS/aR/eQDcoB8SA6Sj8ghcpgcIR+HvP9PGe4/kCEMYViGZXiGZ0RGZGRGZlRGZXRGZ0zGZGzGZlzGZXzGZzIxmZjMTGYmK5OVyc5kZ3IyOZkEJoHJw+RhEplEJi+Tl8nH5GPyM/mZAkwBphBTiCnMFGGKMkWZ4kxxpiRTkinNlGHKMGWZskw5phxTninPVGQqMpWZykxVpipTnanO1GRqMbWY2kxtpi5Tl6nP1GcaMg2ZxkxjpinTlGnGNGNaMC2YlkxLphXTimnDtGHaMe2Y9kx7piPTkenMdGa6Ml2Z7kx3pifTk+nN9Gb6MH2Yfkw/ZgAzgBnIDGIGMQ8yDzIPMQ8xw5jK7HBmBDOCGcmMZEYxo5nRzFhmHPMo8yjzGDOBmchMYiYzk5kpzFTmR2YaM52ZwcxgyrFPMbOY2UwCO5eZx8xj5jPzmQXMAmYhs4hZxCxhljLPMcuYZcxy5gXmBeZFZiWzilnFvMS8xLzCrGHWMGuZ15h1zDpmPfMTs4HZyLzJbGLeYjYzbzFbmK3MFuZdZhvzLrOd2c7sYHYwu5hdzB5mD7OP2cd8wHzAfMh8yHzEfMRMYI4wR5ijzFHmGHOMOc4cZ04wJ5iTzEnmFHOKOc2cZs4wZ5izzDfMt8w3zPfM98yPzE/MOeYcc545z1xgLjAXmYuXw89exrM8K7IiK7Myq7Iqq7M6a7Ima7M267Iu67M+m4nNxGZmM7NZ2axsdjY7m5PNySawudk8bB42kU1k87J52XxsPjY/m58twBZgC7GF2MJsYbYoW5QtzpZgS7Kl2NJsGfZ2tixbli3H3smWZyuwFdmKbGW2CluVrcZWY2uwNdhabC22NlubrcvWZXsV6FGgITucGcU0YS+/Ms3YiUwLdhLTkr2XbcW2Zqcwbdl27FSmPduB7ch2Yqcz05iubLsC3dkebE92FtOb7VlgNtOX7cfOZQawD7AD2UHsYPZBdgjbvsBQdhi7kBnOjmCXMCPZR9hR7Gh2OVOFvfyKVWUfYyewE9lJ7GT2FWYKO5V9gp3GTmdnsE+yM9mn2FnsbHYOO5edxz7NzmefYRewz7IL2UXsYnYJu5R9jl3GPs8uZ19gV7AvsivZVexq9iX2ZfYVdg37KruWfY1dx77OrmffYDewG9k32U3sW+xm9m12C7uVfYd9l93GvsduZ99nd7A72V3sbnYPu5fdx+5nP2APsB+yB9mP2EPsYfYI+zF7lP2EPcZ+yh5nP2NPsJ+zJ9kv2FPsl+xp9iv2DPs1e5b9hv2W/Y79nv2B/ZH9iT3H/syeZ39hL7C/shfZSyzhGI7lOI7nBE7kJE7mFE7lNE7nDM7kLM7mHM7lPM7nYlwm7gYuM5eFy8pl47JzObicXC4ugcvN5eFu5BK5m7i83M1cPu4WLj93K1eAK8gV4m7jCnNFuKJcMa44V4IryZXiSnNluNu5stwdXDnuTq48V4GryFXiKnNVuKpcNa46V4OrydXi7uJqc3W4ulw9rj7XgGvINeIac024ptzdXDOuOdeCu4dryd3LteJac224tlw77j6uPdeB68h14jpzXbiuXDeuO9eD68n14npzvbk+XB+uH9efG8AN4AZyg7jB3K/cRe4SN5QbxiVxw7kR3MPcSO4RbhQ3mhvDjeXGcY9y47nHuAncRG4SN5l7nJvCTeWe4KZx07kZ3JPcTO4pbhY3m5vDzeXmcU9z87lnuAXcs9xCbhG3mFvCLeWe40bFp7TiD9z/zavcf3ww9x3cTm4Xt5vbw+3l9nH7uR3cAe4Ad5A7yB3iDnFHuCPcUe4od4w7xh3njnMnuBPcSe4kd4o7xZ3mTnNnuDPcWe4b7mfuO+577gfuR+4n7ifuZ+48d567EH8OCM/wLM/xPC/wIi/xMq/wKq/xOm/wJm/xNu/wLu/xPh/jM/E38Jn5LHxWPhufnc/B5+Rz8Ql8bj4PfyOfyN/E5+Vv5vPxt/D5+Vv5AnxBvhB/21++/+/114Zvw7fj2/Ht+fZ8R74j35nvzHflu/Ld+e58T74n35vvzffh+/D9+H78AH4AP5AfyA/mB/ND+CH8UH4on8Qn8SP4h/mR/CP8KH40P4Yfy4/jx/Hj+fH8BH4CP4mfxD/OP85P5afy0/hp/Ax+Bj+Tn8nP4mfxc/g5/Dx+Hj+fn88v4BfwC/mF/GJ+Mb+UX8ov45fxy/nl/Ap+Bb+SX8mv5lfzL/Mv82v4Nfxafi2/jl/Hr+fX8xv4jfxGfhO/id/Mb+a38Fv4d/h3+G38Nn47v53fwO/kd/K7+d38Xn4vv5/fzx/gD/AH+YP8If4Qf4Q/wh/lj/LH+GP8cf44f4I/wZ/kT/Kn+FP8af40f4Y/w5/lz/Lf8t/y3/Pf8z/yP/Ln+HP8ef48f4G/wF/kL17e7BNYgRV4gRdEQRRkQRZUQRV0QRdMwRRswRZcwRV8wRcyCZmEzEJmIauQVcguZBdyCjmFBCFByCPkERKFm4S8ws1CPuEWIb9wq1BAKCgUEm4TCgtFhKJCMaG4UEIoKZQSSgtlhNuFssIdQjnhTqG8UEGoKFQSKgtVhKpCNaG6UEOoKdQS7hJqC3WEukI9ob7QQGgoNBIaC02EpsLdQjOhudBCuEdoKdwrtBJaC23+1umPFsYIY4VxwqPCeOExYYIwUZgkTBYeF6YIU4UnhGnCdGGG8KQwU3hKmCXMFuYIc4V5wtPCfOEZYYHwrLBQWCQsFpYIS4XnhGXC88Jy4QVhhfCisFJYJawWXhJeFl4R1givCmuF14R1wuvCeuENYYOwUXhT2CS8JWwW3ha2CFuFd4R3hW3Ce8J24X1hh7BT2CXsFvYIe4V9wn7hA+GA8KFwUPhIOCQcFo4IHwtHhU+EY8KnwnHhM+GE8LlwUvhCOCV8KZwWvhLOCF8LZ4VvhG+F74TvhR+EH4WfhHPCz8J54RfhgvCrcFG4JBCREVmRE3lREEVREmVREVVRE3XREE3REm3REV3RE30xJmYSbxAzi1nErGI2MbuYQ8wp5hITxNxiHvFGMVG8Scwr3izmE28R84u3igXEgmIh8TaxsFhELCoWE4uLJcSSYimxtFhGvF0sK94hlhPvFMuLFcSKYiWxslhFrCpWE6uLNcSaYi3xLrG2WEesK9YT64sNxIZiI7Gx2ERsKt4tNhObiy3Ee8SW4r1iK7G12EZsK7YT7xPbix3EjmInsbPYRewqdhO7iz3EnmIvsbd4v9hH7Cv2E/uLA8QHxIHiIHGw+KA4RHxIHCoOE5PE4eII8WFxpPiIOEocLY4Rx4rjxEfF8eJj4gRxojhJnCw+Lk4Rp4pPiNPE6eIM8UlxpviUOEucLc4R54rzxKfF+eIz4gLxWXGhuEhcLC4Rl4rPicvE58Xl4gviCvFFcaW4SlwtviS+LL4irhFfFdeKr4nrxNfF9eIb4gZxo/imuEl8S9wsvi1uEbeK74jvitvE98Tt4vviDnGnuEvcLe4R94r7xP3iB+IB8UPxoPiReEg8LB4RPxaPip+Ix8RPxePiZ+IJ8XPxpPiFeEr8UjwtfiWeEb8Wz4rfiN+K34nfiz+IP4o/iefEn8Xz4i/iBfFX8aJ4SSQSI7ESJ/GSIImSJMmSIqmSJumSIZmSJdmSI7mSJ/lSTMok3SBllrJIWaVsUnYph5RTyiUlSLmlPNKNUqJ0k5RXulnKJ90i5ZdulQpIBaVC0m1SYamIVFQqJhWXSkglpVJSaamMdLtUVrpDKifdKZWXKkgVpUpSZamKVFWqJlWXakg1pVrSXVJtqY5UV6on1ZcaSA2lRlJjqYnUVLpbaiY1l1pI90gtpXulVlJrqY3UVmon3Se1lzpIHaVOUmepi9RV6iZ1l3pIPaVeUm/pfqmP1FfqJ/WXBkgPSAOlQdJg6UFpiPSQNFQaJiVJw6UR0sPSSOkRaZQ0WhojjZXGSY9K46XHpAnSRGmSNFl6XJoiTZWekKZJ06UZ0pPSTOkpaZY0W5ojzZXmSU9L86VnpAXSs9JCaZG0WFoiLZWek5ZJz0vLpRekFdKL0kpplbRaekl6WXpFWiO9Kq2VXpPWSa9L66U3pA3SRulNaZP0lrRZelvaIm2V3pHelbZJ70nbpfelHdJOaZe0W9oj7ZX2SfulD6QD0ofSQekj6ZB0WDoifSwdlT6RjkmfSselz6QT0ufSSekL6ZT0pXRa+ko6I30tnZW+kb6VvpO+l36QfpR+ks5JP0vnpV+kC9Kv0kXpkkRkRmZlTuZlQRZlSZZlRVZlTdZlQzZlS7ZlR3ZlT/blmJxJvkHOLGeRs8rZ5OxyDjmnnEtOkHPLeeQb5UT5JjmvfLOcT75Fzi/fKheQC8qF5NvkwnIRuahcTC4ul5BLyqXk0nIZ+Xa5rHyHXE6+Uy4vV5ArypXkynIVuapcTa4u15BryrXku+Tach25rlxPri83kBvKjeTGchO5qXy33ExuLreQ75FbyvfKreTWchu5rdxOvk9uL3eQO8qd5M5yF7mr3E3uLveQe8q95N7y/XIfua/cT+4vD5AfkAfKg+TB8oPyEPkheag8TE6Sh8sj5IflkfIj8ih5tDxGHiuPkx+Vx8uPyRPkifIkebL8uDxFnio/IU+Tp8sz5CflmfJT8ix5tjxHnivPk5+W58vPyAvkZ+WF8iJ5sbxEXio/Jy+Tn5eXyy/IK+QX5ZXyKnm1/JL8svyKvEZ+VV4rvyavk1+X18tvyBvkjfKb8ib5LXmz/La8Rd4qvyO/K2+T35O3y+/LO+Sd8i55t7xH3ivvk/fLH8gH5A/lg/JH8iH5sHxE/lg+Kn8iH5M/lY/Ln8kn5M/lk/IX8in5S/m0/JV8Rv5aPit/I38rfyd/L/8g/yj/JJ+Tf5bPy7/IF+Rf5YvyJZkojMIqnMIrgiIqkiIriqIqmqIrhmIqlmIrjuIqnuIrMSWTcoOSWcmiZFWyKdmVHEpOJZeSoORW8ig3KonKTUpe5WYln3KLkl+5VSmgFFQKKbcphZUiSlGlmFJcKaGUVEoppZUyyu1KWeUOpZxyp1JeqaBUVCoplZUqSlWlmlJdqaHUVGopdym1lTpKXaWeUl9poDRUGimNlSZKU+VupZnSXGmh3KO0VO5VWimtlTZKW6Wdcp/SXumgdFQ6KZ2VLkpXpZvSXemh9FR6Kb2V+5U+Sl+ln9JfGaA8oAxUBimDlQeVIcpDylBlmJKkDFdGKA8rI5VHlFHKaGWMMlYZpzyqjFceUyYoE5VJymTlcWWKMlV5QpmmTFdmKE8qM5WnlFnKbGWOMleZpzytzFeeURYozyoLlUXKYmWJslR5TlmmPK8sV15QVigvKiuVVcpq5SXlZeUVZY3yqrJWeU1Zp7yurFfeUDYoG5U3lU3KW8pm5W1li7JVeUd5V9mmvKdsV95Xdig7lV3KbmWPslfZp+xXPlAOKB8qB5WPlEPKYeWI8rFyVPlEOaZ8qhxXPlNOKJ8rJ5UvlFPKl8pp5SvljPK1clb5RvlW+U75XvlB+VH5STmn/KycV35RLii/KheVSwpRGZVVOZVXBVVUJVVWFVVVNVVXDdVULdVWHdVVPdVXY2om9QY1s5pFzapmU7OrOdScai41Qc2t5lFvVBPVm9S86s1qPvUWNb96q1pALagWUm9TC6tF1KJqMbW4WkItqZZSS6tl1NvVsuodajn1TrW8WkGtqFZSK6tV1KpqNbW6WkOtqdZS71Jrq3XUumo9tb7aQG2oNlIbq03UpurdajO1udpCvUdtqd6rtlJbq23Utmo79T61vdpB7ah2UjurXdSuaje1u9pD7an2Unur96t91L5qP7W/OkB9QB2oDlIHqw+qQ9SH1KHqMDVJHa6OUB9WR6qPqKPU0eoYdaw6Tn1UHa8+pk5QJ6qT1Mnq4+oUdar6hDpNna7OUJ9UZ6pPqbPU2eocda46T31ana8+oy5Qn1UXqovUxeoSdan6nLpMfV5drr6grlBfVFeqq9TV6kvqy+or6hr1VXWt+pq6Tn1dXa++oW5QN6pvqpvUt9TN6tvqFnWr+o76rrpNfU/drr6v7lB3qrvU3eoeda+6T92vfqAeUD9UD6ofqYfUw+oR9WP1qPqJekz9VD2ufqaeUD9XT6pfqKfUL9XT6lfqGfVr9az6jfqt+p36vfqD+qP6k3pO/Vk9r/6iXlB/VS+ql1SiMRqrcRqvCZqoSZqsKZqqaZquGZqpWZqtOZqreZqvxbRM2g1aZi2LllXLpmXXcmg5tVxagpZby6PdqCVqN2l5tZu1fNotWn7tVq2AVlArpN2mFdaKaEW1YlpxrYRWUiulldbKaLdrZbU7tHLanVp5rYJWUaukVdaqaFW1alp1rYZWU6ul3aXV1upodbV6Wn2tgdZQa6Q11ppoTbW7tWZac62Fdo/WUrtXa6W11tpobbV22n1ae62D1lHrpHXWumhdtW5ad62H1lPrpfXW7tf6aH21flp/bYD2gDZQG6QN1h7UhmgPaUO1YVqSNlwboT2sjdQe0UZpo7Ux2lhtnPaoNl57TJugTdQmaZO1x7Up2lTtCW2aNl2boT2pzdSe0mZps7U52lxtnva0Nl97RlugPast1BZpi7Ul2lLtOW2Z9ry2XHtBW6G9qK3UVmmrtZe0l7VXtDXaq9pa7TVtnfa6tl57Q9ugbdTe1DZpb2mbtbe1LdpW7R3tXW2b9p62XXtf26Ht1HZpu7U92l5tn7Zf+0A7oH2oHdQ+0g5ph7Uj2sfaUe0T7Zj2qXZc+0w7oX2undS+0E5pX2qnta+0M9rX2lntG+1b7Tvte+0H7UftJ+2c9rN2XvtFu6D9ql3ULmlEZ3RW53ReF3RRl3RZV3RV13RdN3RTt3Rbd3RX93Rfj+mZ9Bv0zHoWPaueTc+u59Bz6rn0BD23nke/UU/Ub9Lz6jfr+fRb9Pz6rXoBvaBeSL9NL6wX0YvqxfTiegm9pF5KL62X0W/Xy+p36OX0O/XyegW9ol5Jr6xX0avq1fTqeg29pl5Lv0uvrdfR6+r19Pp6A72h3khvrDfRm+p368305noL/R69pX6v3kpvrbfR2+rt9Pv09noHvaPeSe+sd9G76t307noPvafeS++t36/30fvq/fT++gD9AX2gPkgfrD+oD9Ef0ofqw/Qkfbg+Qn9YH6k/oo/SR+tj9LH6OP1Rfbz+mD5Bn6hP0ifrj+tT9Kn6E/o0fbo+Q39Sn6k/pc/SZ+tz9Ln6PP1pfb7+jL5Af1ZfqC/SF+tL9KX6c/oy/Xl9uf6CvkJ/UV+pr9JX6y/pL+uv6Gv0V/W1+mv6Ov11fb3+hr5B36i/qW/S39I362/rW/St+jv6u/o2/T19u/6+vkPfqe/Sd+t79L36Pn2//oF+QP9QP6h/pB/SD+tH9I/1o/on+jH9U/24/pl+Qv9cP6l/oZ/Sv9RP61/pZ/Sv9bP6N/q3+nf69/oP+o/6T/o5/Wf9vP6LfkH/Vb+oX9KJwRiswRm8IRiiIRmyoRiqoRm6YRimYRm24Riu4Rm+ETMyGTcYmY0sRlYjm5HdyGHkNHIZCUZuI49xo5Fo3GTkNW428hm3GPmNW40CRkGjkHGbUdgoYhQ1ihnFjRJGSaOUUdooY9xulDXuMMoZdxrljQpGRaOSUdmoYlQ1qhnVjRpGTaOWcZdR26hj1DXqGfWNBkZDo5HR2GhiNDXuNpoZzY0Wxj1GS+Neo5XR2mhjtDXaGfcZ7Y0ORkejk9HZ6GJ0NboZ3Y0eRk+jl9HbuN/oY/Q1+hn9jQHGA8ZAY5Ax2HjQGGI8ZAw1hhlJxnBjhPGwMdJ4xBhljDbGGGONccajxnjjMWOCMdGYZEw2HjemGFONJ4xpxnRjhvGkMdN4yphlzDbmGHONecbTxnzjGWOB8ayx0FhkLDaWGEuN54xlxvPGcuMFY4XxorHSWGWsNl4yXjZeMdYYrxprjdeMdcbrxnrjDWODsdF409hkvGVsNt42thhbjXeMd41txnvGduN9Y4ex09hl7Db2GHuNfcZ+4wPjgPGhcdD4yDhkHDaOGB8bR41PjGPGp8Zx4zPjhPG5cdL4wjhlfGmcNr4yzhhfG2eNb4xvje+M740fjB+Nn4xzxs/GeeMX44Lxq3HRuGQQkzFZkzN5UzBFUzJlUzFVUzN10zBN0zJt0zFd0zN9M2ZmMm8wM5tZzKxmNjO7mcPMaeYyE8zcZh7zRjPRvMnMa95s5jNvMfObt5oFzIJmIfM2s7BZxCxqFjOLmyXMkmYps7RZxrzdLGveYZYz7zTLmxXMimYls7JZxaxqVjOrmzXMmmYt8y6ztlnHrGvWM+ubDcyGZiOzsdnEbGrebTYzm5stzHvMlua9ZiuztdnGbGu2M+8z25sdzI5mJ7Oz2cXsanYzu5s9zJ5mL7O3eb/Zx+xr9jP7mwPMB8yB5iBzsPmgOcR8yBxqDjOTzOHmCPNhc6T5iDnKHG2OMcea48xHzfHmY+YEc6I5yZxsPm5OMaeaT5jTzOnmDPNJc6b5lDnLnG3OMeea88ynzfnmM+YC81lzobnIXGwuMZeaz5nDzefN5eYL5grzRXOlucpcbb5kvmy+Yq4xXzXXmq+Z68zXzfXmG+YGc6P5prnJfMvcbL5tbjG3mu+Y75rbzPfM7eb75g5zp7nL3G3uMfea+8z95gfmAfND86D5kXnIPGweMT82j5qfmMfMT83j5mfmCfNz86T5hXnK/NI8bX5lnjG/Ns+a35jfmt+Z35s/mD+aP5nnzJ/N8+Yv5gXzV/OieckkFmOxFmfxlmCJlmTJlmKplmbplmGZlmXZlmO5lmf5VszKZN1gZbayWFmtbFZ2K4eV08plJVi5rTzWjVaidZOV17rZymfdYuW3brUKWAWtQtZtVmGriFXUKmYVt0pYJa1SVmmrjHW7Vda6wypn3WmVtypYFa1KVmWrilXVqmZVt2pYNa1a1l1WbauOVdeqZ9W3GlgNrUZWY6uJ1dS622pmNbdaWPdYLa17rVZWa6uN1dZqZ91ntbc6WB2tTlZnq4vV1epmdbd6WD2tXlZv636rj9XX6mf1twZYD1gDrUHWYOtBa4j1kDXUGmYlWcOtEdbD1kjrEWuUNdoaY421xlmPWuOtxywmaaI1yZpsPW5NsaZaT1jTrOnWDOtJa6b1lDXLmm3NseZa86ynrfnWM9YC61lrobXIWmwtsZZaz1nLrOet5dYL1grrRWultcpabb1kvWy9Yq2xXrXWWq9Z66zXrfXWG9YGa6P1prXJesvabL1tbbG2Wu9Y71rbrPes7db71g5rp7XL2m3tsfZa+6z91gfWAetD66D1kXXIOmwdsT62jlqfWMesT63j1mfWCetz66T1hXXK+tI6bX1lnbG+ts5a31jfWt9Z31s/WD9aP1nnrJ+t89Yv1gXrV+uidckiNmOzNmfztmCLtmTLtmKrtmbrtmGbtmXbtmO7tmf7dszOZN9gZ7az2FntbHZ2O4ed085lJ9i57Tz2jXaifZOd177ZzmffYue3b7UL2AXtQvZtdmG7iF3ULmYXt0vYJe1Sdmm7jH27Xda+wy5n32mXtyvYFe1KdmW7il3VrmZXt2vYNe1a9l12bbuOXdeuZ9e3G9gN7UZ2Y7uJ3dS+225mN7db2PfYLe177VZ2a7uN3dZuZ99nt7c72B3tTnZnu4vd1e5md7d72D3tXnZv+367j93X7mf3twfYD9gD7UH2YPtBe4j9kD3UHmYn2cPtEfbD9kj7EXuUPdoeY4+1x9mP2uPtx+wJ9kR7kj3ZftyeYk+1n7Cn2dPtGfaT9kz7KXuWPdueY8+159lP2/PtZ+wF9rP2QnuRvdheYi+1n7OX2c/by+0X7BX2i/ZKe5W92n7Jftl+xV5jv2qvtV+z19mv2+vtN+wN9kb7TXuT/Za92X7b3mJvtd+x37W32e/Z2+337R32TnuXvdveY++199n77Q/sA/aH9kH7I/uQfdg+Yn9sH7U/sY/Zn9rH7c/sE/bn9kn7C/uU/aV92v7KPmN/bZ+1v7G/tb+zv7d/sH+0f7LP2T/b5+1f7Av2r/ZF+5JNHMZhHc7hHcERHcmRHcVRHc3RHcMxHcuxHcdxHc/xnZiTybnByexkcbI62ZzsTg4np5PLSXByO3mcG51E5yYnr3Ozk8+5xcnv3OoUcAo6hZzbnMJOEaeoU8wp7pRwSjqlnNJOGed2p6xzh1POudMp71RwKjqVnMpOFaeqU82p7tRwajq1nLuc2k4dp65Tz6nvNHAaOo2cxk4Tp6lzt9PMae60cO5xWjr3Oq2c1k4bp63TzrnPae90cDo6nZzOThenq9PN6e70cHo6vZzezv1OH6ev08/p7wxwHnAGOoOcwc6DzhDnIWeoM8xJcoY7I5yHnZHOI84oZ7QzxhnrjHMedcY7jzkTnInOJGey87gzxZnqPOFMc6Y7M5wnnZnOU84sZ7Yzx5nrzHOeduY7zzgLnGedhc4iZ7GzxFnqPOcsc553ljsvOCucF52VzipntfOS87LzirPGedVZ67zmrHNed9Y7bzgbnI3Om84m5y1ns/O2s8XZ6rzjvOtsc95ztjvvOzucnc4uZ7ezx9nr7HP2Ox84B5wPnYPOR84h57BzxPnYOep84hxzPnWOO585J5zPnZPOF84p50vntPOVc8b52jnrfON863znfO/84Pzo/OScc352zju/OBeW/OpcdC45xGVc1uVc3hVc0ZVc2VVc1dVc3TVc07Vc23Vc1/Vc3425mdwb3MxuFjerm83N7uZwc7q53AQ3t5vHvdFNdG9y87o3u/ncW9z87q1uAbegW8i9zS3sFnGLusXc4m4Jt6Rbyi3tlnFvd8u6d7jl3Dvd8m4Ft6Jbya3sVnGrutXc6m4Nt6Zby73Lre3Wceu69dz6bgO3odvIbew2cZu6d7vN3OZuC/cet6V7r9vKbe22cdu67dz73PZuB7ej28nt7HZxu7rd3O5uD7en28vt7d7v9nH7uv3c/u4A9wF3oDvIHew+6A5xH3KHusPcJHe4O8J92B3pPuKOcke7Y9yx7jj3UXe8+5g7wZ3oTnInu4+7U9yp7hPuNHe6O8N90p3pPuXOcme7c9y57jz3aXe++4y7wH3WXeguche7S9yl7nPuMvd5d7n7grvCfdFd6a5yV7svuS+7r7hr3Ffdte5r7jr3dXe9+4a7wd3ovuluct9yN7tvu1vcre477rvuNvc9d7v7vrvD3enucne7e9y97j53v/uBe8D90D3ofuQecg+7R9yP3aPuJ+4x91P3uPuZe8L93D3pfuGecr90T7tfuWfcr92z7jfut+537vfuD+6P7k/uOfdn97z7i3vB/dW96F5yicd4rMd5vCd4oid5sqd4qqd5umd4pmd5tud4rud5vhfzMnk3eJm9LF5WL5uX3cvh5fRyeQlebi+Pd6OX6N3k5fVu9vJ5t3j5vVu9Al5Br5B3m1fYK+IV9Yp5xb0SXkmvlFfaK+Pd7pX17vDKeXd65b0KXkWvklfZq+JV9ap51b0aXk2vlneXV9ur49X16nn1vQZeQ6+R19hr4jX17vaaec29Ft49XkvvXq+V19pr47X12nn3ee29Dl5Hr5PX2evidfW6ed29Hl5Pr5fX27vf6+P19fp5/b0B3gPeQG+QN9h70BviPeQN9YZ5Sd5wb4T3sDfSe8Qb5Y32xnhjvXHeo9547zFvgjfRm+RN9h73pnhTvSe8ad50b4b3pDfTe8qb5c325nhzvXne09587xlvgfest9Bb5C32lnhLvee8Zd7z3nLvBW+F96K30lvlrfZe8l72XvHWeK96a73XvHXe69567w1vg7fRe9Pb5L3lbfbe9rZ4W713vHe9bd573nbvfW+Ht9Pb5e329nh7vX3efu8D74D3oXfQ+8g75B32jngfe0e9T7xj3qfece8z74T3uXfS+8I75X3pnfa+8s54X3tnvW+8b73vvO+9H7wfvZ+8c97P3nnvF++C96t30bvkEZ/xWZ/zeV/wRV/yZV/xVV/zdd/wTd/ybd/xXd/zfT/mZ/Jv8DP7WfysfjY/u5/Dz+nn8hP83H4e/0Y/0b/Jz+vf7Ofzb/Hz+7f6BfyCfiH/Nr+wX8Qv6hfzi/sl/JJ+Kb+0X8a/3S/r3+GX8+/0y/sV/Ip+Jb+yX8Wv6lfzq/s1/Jp+Lf8uv7Zfx6/r1/Pr+w38hn4jv7HfxG/q3+0385v7Lfx7/Jb+vX4rv7Xfxm/rt/Pv89v7HfyOfie/s9/F7+p387v7Pfyefi+/t3+/38fv6/fz+/sD/Af8gf4gf7D/oD/Ef8gf6g/zk/zh/gj/YX+k/4g/yh/tj/HH+uP8R/3x/mP+BH+iP8mf7D/uT/Gn+k/40/zp/gz/SX+m/5Q/y5/tz/Hn+vP8p/35/jP+Av9Zf6G/yF/sL/GX+s/5y/zn/eX+C/4K/0V/pb/KX+2/5L/sv+Kv8V/11/qv+ev81/31/hv+Bn+j/6a/yX/L3+y/7W/xt/rv+O/62/z3/O3++/4Of6e/y9/t7/H3+vv8/f4H/gH/Q/+g/5F/yD/sH/E/9o/6n/jH/E/94/5n/gn/c/+k/4V/yv/SP+1/5Z/xv/bP+t/43/rf+d/7P/g/+j/55/yf/fP+L/4F/1f/on/JJzEmxsa4GB8TYmJMiskxJabGtJgeM2JmzIrZMSfmxryYH4vFMsVuiGWOZYlljWWLZY/liOWM5YolxHLH8sRujCXGborljd0cyxe7JZY/dmusQKxgrFDstljhWJFY0VixWPFYiVjJWKlY6ViZ2O2xsrE7YuVid8bKxyrEKsYqxSrHqsSqxqrFqsdqxGrGasXuitWO1YnVjdWL1Y81iDWMNYo1jjWJNY3dHWsWax5rEbsn1jJ2b6xVrHWsTaxtrF3svlj7WIdYx1inWOdYl1jXWLdY91iPWM9Yr1jv2P2xPrG+sX6x/rEBsQdiA2ODYoNjD8aGxB6KDY0NiyXF/o92e3z2I+gbPx/bydie6Znp8Te2bdu2bdu2bZ/YycmJbevETk6Sret+sFX3Xg+2amt//exVXd31ef8Bn6HIMGQ4MgIZiYxCRiNjkLHIOGQ8MgGZiExCJiNTkKnINGQ6MgOZicxCZiNzkLnIPGQ+sgBZiCxCFiNLkKXIMmQ5sgJZiaxCViNrkLXIOmQ9sgHZiGxCNiNbkK3INmQ7sgPZiexCdiN7kL3IPmQ/EoccQA4ih5DDyBHkKHIMOY6cQE4ip5DTyBnkLHIOiUfOIwnIBeQicgm5jFxBriLXkOvIDeQmcgu5jdxB7iL3kPvIA+Qh8gh5jDxBniLPkOdD/iEvkVfIa+QNkoi8Rd4h75EPyEfkE/IZ+YJ8Rb4h35EfyE/kF/IbSUL+IH+Rf0gyNDmaAk2JpkJTo2nQtGg6ND2aAc2IZkIzo1nQrGg2NDuaA82J5kIRFEUxFEcJlEQplEYZlEU5lEcFVEQlVEYVVEU1VEcNFKAmaqE2ClEHdVEP9dEADdEIjaG50TxoXjQfmh8tgBZEC6GF0SJoUbQYWhwtgZZES6Gl0TJoWbQcWh6tgFZEK6GV0SpoVbQaWh2tgdZEa6G10TpoXbQeWh9tgDZEG6GN0SZoU7QZ2hxtgbZEW6Gt0TZoW7Qd2h7tgHZEO6Gd0S5oV7Qb2h3tgfZEe6G90T5oX7Qf2h8dgA5EB6GD0SHoUHQYOhwdgY5ER6Gj0THoWHQcOh6dgE5EJ6GT0SnoVHQaOh2dgc5EZ6Gz0TnoXHQeOh9dgC5EF6GL0SXoUnQZuhxdga5EV6Gr0TXoWnQduh7dgG5EN6Gb0S3oVnQbuh3dge5Ed6G70T3oXnQfuh+NQw+gB9FD6GH0CHoUPYYeR0+gJ9FT6Gn0DHoWPYfGo+fRBPQCehG9hF5Gr6BX0WvodfQGehO9hd5G76B30XvoffQB+hB9hD5Gn6BP0Wfoc/QF+hJ9hb5G36CJ6Fv0Hfoe/YB+RD+hn9Ev6Ff0G/od/YH+RH+hv9Ek9A/6F/2HJsOSYymwlFgqLDWWBkuLpcPSYxmwjFgmLDOWBcuKZcOyYzmwnFguDMFQDMNwjMBIjMJojMFYjMN4TMBETMJkTMFUTMN0zMAAZmIWZmMQczAX8zAfC7AQi7AYlhvLg+XF8mH5sQJYQawQVhgrghXFimHFsRJYSawUVhorg5XFymHlsQpYRawSVhmrglXFqmHVsRpYTawWVhurg9XF6mH1sQZYQ6wR1hhrgjXFmmHNsRZYS6wV1hprg7XF2mHtsQ5YR6wT1hnrgnXFumHdsR5YT6wX1hvrg/XF+mH9sQHYQGwQNhgbgg3FhmHDsRHYSGwUNhobg43FxmHjsQnYRGwSNhmbgk3FpmHTsRnYTGwWNhubg83F5mHzsQXYQmwRthhbgi3FlmHLsRXYSmwVthpbg63F1mHrsQ3YRmwTthnbgm3FtmHbsR3YTmwXthvbg+3F9mH7sTjsAHYQO4Qdxo5gR7Fj2HHsBHYSO4Wdxs5gZ7FzWDx2HkvALmAXsUvYZewKdhW7hl3HbmA3sVvYbewOdhe7h93HHmAPsUfYY+wJ9hR7hj3HXmAvsVfYa+wNloi9xd5h77EP2EfsE/YZ+4J9xb5h37Ef2E/sF/YbS8L+YH+xf1gyPDmeAk+Jp8JT42nwtHg6PD2eAc+IZ8Iz41nwrHg2PDueA8+J58IRHMUxHMcJnMQpnMYZnMU5nMcFXMQlXMYVXMU1XMcNHOAmbuE2DnEHd3EP9/EAD/EIj+G58Tx4Xjwfnh8vgBfEC+GF8SJ4UbwYXhwvgZfES+Gl8TJ4WbwcXh6vgFfEK+GV8Sp4VbwaXh2vgdfEa+G18Tp4XbweXh9vgDfEG+GN8SZ4U7wZ3hxvgbfEW+Gt8TZ4W7wd3h7vgHfEO+Gd8S54V7wb3h3vgffEe+G98T54X7wf3h8fgA/EB+GD8SH4UHwYPhwfgY/ER+Gj8TH4WHwcPh6fgE/EJ+GT8Sn4VHwaPh2fgc/EZ+Gz8Tn4XHwePh9fgC/EF+GL8SX4UnwZvhxfga/EV+Gr8TX4Wnwdvh7fgG/EN+Gb8S34Vnwbvh3fge/Ed+G78T34Xnwfvh+Pww/gB/FD+GH8CH4UP4Yfx0/gJ/FT+Gn8DH4WP4fH4+fxBPwCfhG/hF/Gr+BX8Wv4dfwGfhO/hd/G7+B38Xv4ffwB/hB/hD/Gn+BP8Wf4c/wF/hJ/hb/G3+CJ+Fv8Hf4e/4B/xD/hn/Ev+Ff8G/4d/4H/xH/hv/Ek/A/+F/+HJyOSEymIlEQqIjWRhkhLpCPSExmIjEQmIjORhchKZCOyEzmInEQuAiFQAiNwgiBIgiJogiFYgiN4QiBEQiJkQiFUQiN0wiAAYRIWYROQcAiX8AifCIiQiIgYkZvIQ+Ql8hH5iQJEQaIQUZgoQhQlihHFiRJESaIUUZooQ5QlyhHliQpERaISUZmoQlQlqhHViRpETaIWUZuoQ9Ql6hH1iQZEQ6IR0ZhoQjQlmhHNiRZES6IV0ZpoQ7Ql2hHtiQ5ER6IT0ZnoQnQluhHdiR5ET6IX0ZvoQ/Ql+hH9iQHEQGIQMZgYQgwlhhHDiRHESGIUMZoYQ4wlxhHjiQnERGISMZmYQkwlphHTiRnETGIWMZuYQ8wl5hHziQXEQmIRsZhYQiwllhHLiRXESmIVsZpYQ6wl1hHriQ3ERmITsZnYQmwlthHbiR3ETmIXsZvYQ+wl9hH7iTjiAHGQOEQcJo4QR4ljxHHiBHGSOEWcJs4QZ4lzRDxxnkggLhAXiUvEZeIKcZW4RlwnbhA3iVvEbeIOcZe4R9wnHhAPiUfEY+IJ8ZR4RjwnXhAviVfEa+INkUi8Jd4R74kPxEfiE/GZ+EJ8Jb4R34kfxE/iF/GbSCL+EH+Jf0QyMjmZgkxJpiJTk2nItGQ6Mj2ZgcxIZiIzk1nIrGQ2MjuZg8xJ5iIREiUxEicJkiQpkiYZkiU5kicFUiQlUiYVUiU1UicNEpAmaZE2CUmHdEmP9MmADMmIjJG5yTxkXjIfmZ8sQBYkC5GFySJkUbIYWZwsQZYkS5GlyTJkWbIcWZ6sQFYkK5GVySrpqpLVyOpkDbImWYusTdYh65L1yPpkA7Ih2YhsTDYhm5LNyOZkC7Il2YpsTbYh25LtyPZkB7Ij2YnsTHYhu5LdyO5kD7In2YvsTfYh+5L9yP7kAHIgOYgcTA4hh5LDyOHkCHIkOYocTY4hx5LjyPHkBHIiOYmcTE4hp5LTyOnkDHImOYucTc4h55LzyPnkAnIhuYhcTC4hl5LLyOXkCnIluYpcTa4h15LryPXkBnIjuYncTG4ht5LbyO3kDnInuYvcTe4h95L7yP1kHHmAPEgeIg+TR8ij5DHyOHmCPEmeIk+TZ8iz5DkynjxPJpAXyIvkJfIyeYW8Sl4jr5M3yJvkLfI2eYe8S94j75MPyIfkI/Ix+YR8Sj4jn5MvyJfkK/I1+YZMJN+S78j35AfyI/mJ/Ex+Ib+S38jv5A/yJ/mL/E0mkX/Iv+Q/MhmVnEpBpaRSUampNFRaKh2VnspAZaQyUZmpLFRWKhuVncpB5aRyUQiFUhiFUwRFUhRFUwzFUhzFUwIlUhIlUwqlUhqlUwYFKJOyKJuClEO5lEf5VECFVETFqNxUHiovlY/KTxWgClKFqMJUEaooVYwqTpWgSlKlqNJUGaosVY4qT1WgKlKVqMpUFaoqVY2qTtWgalK1qNpUHaouVY+qTzWgGlKNqMZUE6op1YxqTrWgWlKtqNZUG6ot1Y5qT3WgOlKdqM5UF6or1Y3qTvWgelK9qN5UH6ov1Y/qTw2gBlKDqMHUEGooNYwaTo2gRlKjqNHUGGosNY4aT02gJlKTqMnUFGoqNY2aTs2gZlKzqNnUHGouNY+aTy2gFlKLqMXUEmoptYxaTq2gVlKrqNXUGmottY5aT22gNlKbqM3UFmortY3aTu2gdlK7qN3UHmovtY/aT8VRB6iD1CHqMHWEOkodo45TJ6iT1CnqNHWGOkudo+Kp81QCdYG6SF2iLlNXqKvUNeo6dYO6Sd2iblN3qLvUPeo+9YB6SD2iHlNPqKfUM+o59YJ6Sb2iXlNvqETqLfWOek99oD5Sn6jP1BfqK/WN+k79oH5Sv6jfVBL1h/pL/aOS0cnpFHRKOhWdmk5Dp6XT0enpDHRGOhOdmc5CZ6Wz0dnpHHROOheN0CiN0ThN0CRN0TTN0CzN0Twt0CIt0TKt0Cqt0Tpt0IA2aYu2aUg7tEt7tE8HdEhHdIzOTeeh89L56Px0AbogXYguTBehi9LF6OJ0CbokXYouTZehy9Ll6PJ0BboiXYmuTFehq9LV6Op0DbomXYuuTdeh69L16Pp0A7oh3YhuTDehm9LN6OZ0C7ol3YpuTbeh29Lt6PZ0B7oj3YnuTHehu9Ld6O50D7on3YvuTfeh+9L96P70AHogPYgeTA+hh9LD6OH0CHokPYoeTY+hx9Lj6PH0BHoiPYmeTE+hp9LT6On0DHomPYueTc+h59Lz6Pn0AnohvYheTC+hl9LL6OX0CnolvYpeTa+h19Lr6PX0BnojvYneTG+ht9Lb6O30DnonvYveTe+h99L76P10HH2APkgfog/TR+ij9DH6OH2CPkmfok/TZ+iz9Dk6nj5PJ9AX6Iv0JfoyfYW+Sl+jr9M36Jv0Lfo2fYe+S9+j79MP6If0I/ox/YR+Sj+jn9Mv6Jf0K/o1/YZOpN/S7+j39Af6I/2J/kx/ob/S3+jv9A/6J/2L/k0n0X/ov/Q/OhmTnEnBpGRSMamZNExaJh2TnsnAZGQyMZmZLExWJhuTncnB5GRyMQiDMhiDMwRDMhRDMwzDMhzDMwIjMhIjMwqjMhqjMwYDGJOxGJuBjMO4jMf4TMCETMTEmNxMHiYvk4/JzxRgCjKFmMJMEaYoU4wpzpRgSjKlmNJMGaYsU44pz1RgKjKVmMpMFaYqU42pztRgajK1mNpMHaYuU4+pzzRgGjKNmMZME6Yp04xpzrRgWjKtmNZMG6Yt045pz3RgOjKdmM5MF6Yr043pzvRgejK9mN5MH2bg6n5Mf2YA09waxAxmhjBDmWHMcGYEM5IZxYxmxjBjmXHMeGYCM5GZxExmpjBTmWnMdGYGM5OZxcxm5jBzmXnMfGYBs5BZxCxmljBLmWXMcmYFs5JZxaxm1jBrmXXMemYDs5HZxGxmtjBbmW3MdmYHs5PZxexm9jB7mX3MfiaOOcAcZA4xh5kjzFHmGHOcOcGcZE4xp5kzzFnmHBPPnGcSmAvMReYSc5m5wlxlrjHXmRvMTeYWc5u5w9xl7jH3mQfMQ+YR85h5wjxlnjHPmRfMS+YV85p5wyQyb5l3zHvmA/OR+cR8Zr4wX5lvzHfmB/OT+cX8ZpKYP8xf5h+TjE3GpmBTsKnYVGwaNg2bjk3HZmAzsJnYTGwWNgubjc3G5mBzsLnYXCzKoizO4izJkizN0ux/Ds/yrMiKrMzKrMqqrM7qLGABa7EWC1nIuqzL+qzPhmzIxtgYm4fNw+Zj87EF2AJsIbYQW4QtwhZji7El2BJsKbYUW4Ytw5Zjy7EV2ApsJbYSW4WtwlZjq7E12BpsLbYWW4etw9Zj67EN2AZsI7YR24RtwjZjm7Et2BZsK7YV24Ztw7Zj27Ed2A5sJ7YT24XtwnZju7E92B5sL7YX24ftw/Zj+7ED2AHsIHYQO4Qdwg5jh7Ej2BHsKHYUO4Ydw45jx7ET2AnsJHYSO4Wdwk5jp7Ez2BnsLHY2O4edy85j57ML2IXsInYxu4Rdwi5jl7Er2BXsKnYVu4Zdw65j17Eb2A3sJnYTu4Xdwm5jt7E72B3sLnYXu4fdw+5j97FxbBx7kD3IHmYPs0fZo+xx9jh7kj3JnmZPs2fZs2w8G88msAnsRfYie5m9zF5lr7LX2evsTfYme5u9zd5l77L32fvsQ/Yh+5h9zD5ln7LP2efsS/Yl+5p9zSayiew79h37gf3AfmI/sV/YL+w39hv7g/3B/mJ/sUlsEvuX/cum49JzGbiMXCYuM5eFy8r9P41zBEdyFEdzDIdy2P8yy3Gczhkc4EzO4mwOcs5/OQ+Xl8vH5ecKcAW5Qlzh/3IZrixXjivPVeAqcqW40v/LlbjKXBWuLleNq8/V4BpytbjGXB2uLlePq8814BpyjbjGXBuuLdeOa8914DpynbjO/+V93H7uNHeGO8ud425zd7gf3E/uNfeG+8X95gZxg7kx3FhuHDeem8BN5CZxk//Lc7i53DxuPreAW8gt4hb/l9dwa7l13HpuA7eR28Rt/i/v4fZy27g4bge3k9vF7f4f/2emOO4Ad5A7xB3mjnBHuXjuOHeCO8md+r9njefOcwncBe4md4u7zF3hrnLXuOvcjf/xfzrucve4+9wD7iX3invMPeGeconcc+7F//g/fYncW+4d9577wH3kPnFJ3BfuK/eN+/4//f9pT+L+cH+5f1wyPjmfgk/Jp+JT82n4tHw6Pj2fgc/IZ+Iz81n4rHw2Pjufg8/J5+IRHuUxHucJnuQpnuYZnuU5nucFXuQlXuYVXuU1XucNHvAmb/E2D3mHd3mP9/mAD/mIj/G5+Tx8Xj4fn58vwBfkC/GF+SJ8Ub4YX5wvwZfkS/Gl+TJ8Wb4cX56vwFfkK/GV+Sp8Vb4aX52vwdfka/G1+Tp8Xb4eX59vwDfkG/GN+SZ8U74Z35xvwbfkW/Gt+TZ8W74d357vwHfkO/Gd+S58V74b353vwffke/G9+T58X74f358fwA/kB/GD+SH8UH4YP5wfwY/kR/Gj+TH8WH4cP56fwE/kJ/GT+Sn8VH4aP52fwc/kZ/Gz+Tn8XH4eP59fwC/kF/GL+SX8Un4Zv5xfwa/kV/Gr+TX8Wn4dv57fwG/kN/Gb+S38Vn4bv53fwe/kd/G7+T38Xn4fv5+P4w/wB/lD/GH+CH+UP8Yf50/wJ/lT/Gn+DH+WP8fH8+f5BP4Cf5G/xF/mr/BX+Wv8df4Gf5O/xd/m7/B3+Xv8ff4B/5B/xD/mn/BP+Wf8c/4F/5J/xb/m3/CJ/Fv+Hf+e/8B/5D/xn/kv/Ff+G/+d/8H/5H/xv/kk/g//l//HJxOSCymElEIqIbWQRkgrpBPSCxmEjEImIbOQRcgqZBOyCzmEnEIuARFQARNwgRBIgRJogRFYgRN4QRBEQRJkQRFUQRN0wRCAYAqWYAtQcARX8ARfCIRQiISYkFvII+QV8gn5hQJCQaGQUFgoIhQVignFhRJCSaGUUFooI5QVygnlhQpCRcEXKgtVhKpCNaG6UEOoKdQSagt1hLpCPaG+0EBoKDQSGgtNhKZCM6G50EJoKbQSWgtthLZCO6G90EHoKHQSOv+/3g8RhgrDhOHCcGGkMEoYLYwRxgrjhPHCBGGiMEmYLEwRpgrThOnCDGGmMEuYLcwR5grzhPnCAmGhsEhYLCwRlgrLhOXCCmGlsEpYLawR1grrhPXCBmGjsEnYLGwRtgrbhO3CDmGnsEvYLewR9gr7hP1CnHBAOCgcEg4LR4SjwjHhuHBCOCmcEk4LZ4SzwjkhXjgvJAgXhIvCJeGycEW4KlwTrgs3hJvCLeG2cEe4K9wT7gsPhIfCI+Gx8ER4KjwTngsvhJfCK+G18EZIFN4K74T3wgfho/BJ+Cx8Eb4K34Tvwg/hp/BL+C0kCX+Ev8I/IZmYXEwhphRTianFNGJaMZ2YXswgZhQziZnFLGJWMZuYXcwh5hRziYiIipiIi4RIipRIi4zIipzIi4IoipIoi4qoipqoi4YIRFO0RFuEoiO6oif6YiCGYiTGxNxiHjGvmE/MLxYQC4qFxMJiEbGoWEwsLpYQS4qlxNJiGbGsWE4sL1YQK4qVxMpiFbGqWE2sLtYQa4q1xNpiHbGuWE+sLzYQG4qNxMZiE7Gp2ExsLrYQW4qtxNZiG7Gt2E5sL3YQO4qdxM5iFzGt2E3sLvYQe4q9xN5iH7Gv2E/sLw4QB4qDxMHiEHGoOEwcLo4QR4qjxNHiGHGsOE4cL04QJ4qTxMniFHGqOE2cLs4QZ4qzxNniHHGuOE+cLy4QF4qLxMXiEnGpuExcLq4QV4qrxNXiGnGtuE5cL24QN4qbxM3iFnGruE3cLu4Qd4q7xN3iHnGvuE/cL8aJB8SD4iHxsHhEPCoeE4+LJ8ST4inxtHhGPCueE+PF82KCeEG8KF4SL4tXxKviNfG6eEO8Kd4Sb4t3xLviPfG++EB8KD4SH4tPxKfiM/G5+EJ8Kb4SX4tvxETxrfhOfC9+ED+Kn8TP4hfxq/hN/C7+EH+Kv8TfYpL4R/wr/hOTScmlFFJKKZWUWkojpZXSSemlDFJGKZOUWcoiZZWySdmlHFJOKZeESKiESbhESKRESbTESKzESbwkSKIkSbKkSKqkSbpkSEAyJUuyJSg5kit5ki8FUihFUkzKLeWR8kr5pPxSAamgVEgqLBWRikrFpOJSCamkVEoqLZWRykrlpPJSBamiVEmqLFWRqkrVpOpSDammVEuqLdWR6kr1pPpSA6mh1EhqLDWRmkrNpOZSC6ml1EpqLbWR2krtpPZSB6mj1EnqLHWRukrdpO5SD6mn1EvqLfWR+kr9pP7SAGmgNEgaLA2RhkrDpOHSCGmkNEoaLY2RxkrjpPHSBGmiNEmaLE2RpkrTpOnSDGmmNEuaLc2R5krzpPnSAmmhtEhaLC2RlkrLpOXSCmmltEpaLa2R1krrpPXSBmmjtEnaLG2RtkrbpO3SDmmntEvaLe2R9kr7pP1SnHRAOigdkg5LR6Sj0jHpuHRCOimdkk5LZ6Sz0jkpXjovJUgXpIvSJemydEW6Kl2Trks3pJvSLem2dEe6K92T7ksPpIfSI+mx9ER6Kj2TnksvpJfSK+m19EZKlN5K76T30gfpo/RJ+ix9kb5K36Tv0g/pp/RL+i0lSX+kv9I/KZmcXE4hp5RTyanlNHJaOZ2cXs4gZ5QzyZnlLHJWOZucXc4h55RzyYiMypiMy4RMypRMy4zMypzMy4IsypIsy4qsypqsy4YMZFO2ZFuGsiO7sif7ciCHciTH5NxyHjmvnE/OLxeQC8qF5MJyEbmoXEwuLpeQS8ql5NJyGbmsXE4uL1eQK8qV5MpyFbmqXE2uLteQa8q15NpyHbmuXE+uLzeQG8qN5MZyE7mp3ExuLreQW8qt5NZyG7mt3E5uL3eQO8qd5M5yF7mr3E3uLveQe8q95N5yH7mv3E/uLw+QB8qD5MHyEHmoPEweLo+QR8qj5NHyGHmsPE4eL0+QJ8qT5MnyFHmqPE2eLs+QZ8qz5NnyHHmuPE+eLy+QF8qL5MXyEnmpvExeLq+QV8qr5NXyGnmtvE5eL2+QN8qb5M3yFnmrvE3eLu+Qd8q75N3yHnmvvE/eL8fJB+SD8iH5sHxEPiofk4/LJ+ST8in5tHxGPiufk+Pl83KCfOH/05vX8hs5UX4rv5Pfyx/kj/In+bP8Rf4qf5O/yz/kn/Iv+becJP+R/8r/5GRKciWFklJJpaRW0ihplXRKeiWDklHJpGRWsihZlWxKdiWHklPJpSAKqmAKrhAKqVAKrTAKq3AKrwiKqEiKrCiKqmiKrhgKUEzFUmwFKo7iKp7iK4ESKpESU3IreZS8Sj4lv1JAKagUUgorRZSiSjGluFJCKamUUkorZZSySjmlvFJBqahUUiorVZSqSjWlulJDqanUUmordZS6Sj2lvtJAaag0UhorTZSmSjOludJCaam0UlorbZS2SjulvdJB6ah0UjorXZSuSjelu9JD6an0UnorfZS+Sj+lvzJAGagMUgYrQ5ShyjBluDJCGamMUkYrY5SxyjhlvDJBmahMUiYrU5SpyjRlujJDmanMUmYrc5S5yjxlvrJAWagsUhYrS5SlyjJlubJCWamsUlYra5S1yjplvbJB2ahsUjYrW5StyjZlu7JD2ansUnYre5S9yj5lvxKnHFAOKoeUw8oR5ahyTDmunFBOKqeU08oZ5axyTolXzisJygXlonJJuaxcUa4q15Tryg3lpnJLua3cUe4q95T7ygPlofJIeaw8UZ4qz5TnygvlpfJKea28URKVt8o75b3yQfmofFI+K1+Ur8o35bvyQ/mp/FJ+K0nKH+Wv8k9JpiZXU6gp1VRqajWNmlZNp6ZXM6gZ1UxqZjWLmlXNpmZXc6g51VwqoqIqpuIqoZIqpdIqo7Iqp/KqoIqqpMqqoqqqpuqqoQLVVC3VVqHqqK7qqb4aqKEaqTE1t5pHzavmU/OrBdSCaiG1sFpELaoWU4urJdSSaim1tFpGLauWU8urFdSKaiW1slpFrapWU6urNdSaai21tlpHravWU+urDdSGaiO1sdpEbao2U5urLdSWaiu1tdpGbau2U9urHdSOaie1s9pF7ap2U7urPdSeai+1t9pH7av2U/urA9SB6iB1sDpEHaoOU4erI9SR6ih1tDpGHauOU8erE9SJ6iR1sjpFnapOU6erM9SZ6ix1tjpHnavOU+erC9SF6iJ1sbpEXaouU5erK9SV6ip1tbpGXauuU9erG9SN6iZ1s7pF3apuU7erO9Sd6i51t7pH3avuU/erceoB9aB6SD2sHlGPqsfU4+oJ9aR6Sj2tnlHPqufUePW8mqBeUC+ql9TL6hX1qnpNva7eUG+qt9Tb6h31rnpPva8+UB+qj9TH6hP1qfpMfa6+UF+qr9TX6hs1UX2rvlPfqx/Uj+on9bP6Rf2qflO/qz/Un+ov9beapP5R/6r/1GRaci2FllJLpaXW0mhptXRaei2DllHLpGXWsmhZtWxadi2HllPLpSEaqmEarhEaqVEarTEaq3EarwmaqEmarCmaqmmarhka0EzN0mwNao7map7ma4EWapEW03JrebS8Wj4tv1ZAK6gV0gprRbSiWjGtuFZCK6mV0kprZbSyWjmtvFZBq6hV0iprVbSqWjWtulZDq6nV0mprdbS6Wj2tvtZAa6g10hprTbSmWjOtudZCa6m10lprbbS2WjutvdZB66h10jprXbSuWjetu9ZD66n10nprfbS+Wj+tvzZAG6gN0gZrQ7Sh2jBtuDZCG6mN0kZrY7Sx2jhtvDZBm6hN0iZrU7Sp2jRtujZDm6nN0mZrc7S52jxtvrZAW6gt0hZrS7Sl2jJtubZCW6mt0lZra7S12jptvbZB26ht0jZrW7St2jZtu7ZD26nt0nZre7S92j5tvxanHdAOaoe0w9oR7ah2TDuundBOaqe009oZ7ax2TovXzmsJ2gXtonZJu6xd0a5q17Tr2g3tpnZLu63d0e5q97T72gPtofZIe6w90Z5qz7Tn2gvtpfZKe6290RK1t9o77b32QfuofdI+a1+0r9o37bv2Q/up/dJ+a0naH+2v9k9LpifXU+gp9VR6aj2NnlZPp6fXM+gZ9Ux6Zj2LnlXPpmfXc+g59Vw6oqM6puM6oZM6pdM6o7M6p/O6oIu6pMu6oqu6puu6oQPd1C3d1qHu6K7u6b4e6KEe6TE9t55Hz6vn0/PrBfSCeiG9sF5EL6oX04vrJfSSeim9tF5GL6uX08vrFfSKeiW9sl5Fr6pX06vrNfSaei29tl5Hr6vX0+vrDfSGeiO9sd5Eb6o305vrLfSWeiu9td5Gb6u309vrHfSOeie9s95F76p307vrPfSeei+9t95H76v30/vrA/SB+iB9sD5EH6oP04frI/SR+ih9tD5GH6uP08frE/SJ+iR9sj5Fn6pP06frM/SZ+ix9tj5Hn6vP0+frC/SF+iJ9sb5EX6ov05frK/SV+ip9tb5GX6uv09frG/SN+iZ9s75F36pv07frO/Sd+i59t75H36vv0/frcfoB/aB+SD+sH9GP6sf04/oJ/aR+Sj+tn9HP6uf0eP28nqBf0C/ql/TL+hX9qn5Nv67f0G/qt/Tb+h39rn5Pv68/0B/qj/TH+hP9qf5Mf66/0F/qr/TX+hs9UX+rv9Pf6x/0j/on/bP+Rf+qf9O/6z/0n/ov/beepP/R/+r/9GRGciOFkdJIZaQ20hhpjXRGeiODkdHIZGQ2shhZjWxGdiOHkdPIZSAGamAGbhAGaVAGbTAGa3AGbwiGaEiGbCiGamiGbhgGMEzDMmwDGo7hGp7hG4ERGpERM3IbeYy8Rj4jv1HAKGgUMgobRYyiRjGjuFHCKGmUMkobZYyyRjmjvFHBqGhUMiobVYyqRjWjulHDqGnUMmobdYy6Rj2jvtHAaGg0MhobTYymRjOjudHCaGm0MlobbYy2RjujvdHB6Gh0MjobXYyuRjeju9HD6Gn0MnobfYy+Rj+jvzHAGGgMMgYbQ4yhxrDkqYwRxkhjlDHaGGOMNcYZ440JxkRjkjHZmGJMNaYZ040ZxkxjljHbmGPMNeYZ840FxkJjkbHYWGIsNZYZy40VxkpjlbHaWGOsNdYZ640NxkZjk7HZ2GJsNbYZ240dxk5jl7Hb2GPsNfYZ+40444Bx0DhkHDaOGEeNY8Zx44Rx0jhlnDbOGGeNc0a8cd5IMC4YF41LxmXjinHVuGZcN24YN41bxm3jjnHXuGfcNx4YD41HxmPjifHUeGY8N14YL41XxmvjjZFovDXeGe+ND8ZH45Px2fhifDW+Gd+NH8ZP45fx20gy/hh/jX9GMpAcpAApQSqQGqQBaUE6kB5kABlBJpAZZAFZQTaQHeQAOUEugAAUYAAHBCABBWjAABZwgAcCEIEEZKAAFWhABwYAwAQWsAEEDnCBB3wQgBBEIAZygzwgL8gH8oMCoCAoBAqDIqAoKAaKgxKgJCgFSoMyoCwoB8qDCqAiqAQqgyqgKqgGqoMaoCaoBWqDOqAuqAfqgwagIWgEGoMmoCloBpqDFqAlaAVagzagLWgH2oMOoCPoBDqDLqAr6Aa6gx6gJ+gFeoM+oC/oB/qDAWAgGAQGgyFgKBgGhoMRYCQYBUaDMWAsGAfGgwlgIpgEJoMpYCqYBqaDGWAmmAVmgzlgLpgH5oMFYCFYBBaDJWApWAaWgxVgJVgFVoM1YC1YB9aDDWAj2AQ2gy1gK9gGtoMdYCfYBXaDPWAv2Af2gzhwABwEh8BhcAQcBcfAcXACnASnwGlwBpwF50A8OA8SwAVwEVwCl8EVcBVcA9fBDXAT3AK3wR1wF9wD98ED8BA8Ao/BE/AUPAPPwQvwErwCr8EbkAjegnfgPfgAPoJP4DP4Ar6Cb+A7+AF+gl/gN0gCf8Bf8A8kM5ObKcyUZioztZnGTGumM9ObGcyMZiYzs5nFzGpmM7ObOcycZi4TMVETM3GTMEmTMmmTMVmTM3lTMEVTMmVTMVVTM3XTMIFpmpZpm9B0TNf0TN8MzNCMzJiZ28xj5jXzmfnNAmZBs5BZ2CxiFjWLmcXNEmZJs5RZ2ixjljXLmeXNCmZFs5JZ2axiVjWrmdXNGmZNs5ZZ26xj1jXrmfXNBmZDs5HZ2GxiNjWbmc3NFmZLs5XZ2mxjtjXbme3NDmZHs5PZ2exidjW7md3NHmZPs5fZ2+xj9jX7mf3NAeZAc5A52BxiDjWHmcPNEeZIc5Q52hxjjjXHmePNCeZEc5I52ZxiTjWnmdPNGeZMc5Y525xjzjXnmfPNBeZCc5G52FxiLjWXmcvNFeZKc5W52lxjrjXXmevNDeZGc5O52dxibjW3mdvNHeZOc5e529xj7jX3mfvNOPOAedA8ZB42j5hHzWPmcfOEedI8ZZ42z5hnzXNmvHneTDAvmBfNS+Zl84p51bxmXjdvmDfNW+Zt845517xn3jcfmA/NR+Zj84n51HxmPjdfmC/NV+Zr842ZaL4135nvzQ/mR/OT+dn8Yn41v5nfzR/mT/OX+dtMMv+Yf81/ZjIruZXCSmmlslJbaay0VjorvZXBymhlsjJbWaysVjYru5XDymnlshALtTALtwiLtCiLthiLtTiLtwRLtCRLthRLtTRLtwwLWKZlWbYFLcf6P/t/Y6uJ1cRqZjW3Wlj5UhRK0dpqbbW12lrtrfZWR6uT1dnqYnW1ulndrB5WT6un1dvqY/W1+ln9rQHWQGuQNdgaYg2xhlnDrBHWCGuUNcoaY42xxlnjrAnWBGuSNcmaYk2xplnTrBnWDGuWNcuaY82x5lnzrAXWAmuRtchaYi2xllnLrBXWCmuVtcpaY62x1lnrrA3WBmuTtcnaYm2xtlnbrB3WDmuXtcvaY+2x9ln7rDgrzjpoHbQOW4eto9ZR67h13DppnbROW6ets9ZZK96KtxKsBOuiddG6bF22rlpXrevWdeumddO6bd227lp3rfvWfeuh9dB6bD22nlrPrOfWC+ul9cp6bb2xEq231jvrvfXB+mh9sj5bX6yv1jfru/XD+mn9sn5bSdYf66/1z/r/c39RtTVbtw0b2KZt2bYNbcd2bc/27cAO7ciO2bntPHZeO5+d3y5gF7QL2YXtInZRu5hd3C5hl7RL2aXtMnZZu5xd3q5gV7Qr2ZXtKnZVu5pd3a5h17Rr2bXtOnZdu55d325gN7Qb2Y3tJnZTu5nd3G5ht7Rb2a3tNnZbu53d3u5gd7Q72Z3tLnZXu5vd3e5h97R72b3tPnZfu5/d3x5gD7QH2YPtIfZQe5g93B5hj7RH2aPtMfZYe5w93p5gT7Qn2ZPtKfZUe5o93Z5hz7Rn2bPtOfZce549315gL7QX2YvtJfZSe5m93F5hr7RX2avtNfZae5293t5gb7Q32ZvtLfZWe5u93d5h77R32bvtPfZee5+9346zD9gH7UP2YfuIfdQ+Zh+3T9gn7VP2afuMfdY+Z8fb5+0E+4J90b5kX7av2Ffta/Z1+4Z9075l37bv2Hfte/Z9+4H90H5kP7af2E/tZ/Zz+4X90n5lv7bf2In2W/ud/d7+YH+0P9mf7S/2V/ub/d3+Yf+0f9m/7ST7j/3X/mcng8lhCpgSpoKpYRqYFqaD6WEGmBFmgplhFpgVZoPZYQ6YE+aCCEQhBnFIQBJSkIYMZCEHeShAEUpQhgpUoQZ1aEAATWhBG0LoQBd60IcBDGEEYzA3zAPzwnwwPywAC8JCsDAsAovCYrA4LAFLwlKwNCwDy8JysDysACvCSrAyrAKrwmqwOqwBa8JasDasA+vCerA+bAAbwkawMWwCm8JmsDlsAVvCVrA1bAPbwnawPewAO8JOsDPsArvCbrA77AF7wl6wN+wD+8J+sD8cAAfCQXAwHAKHwmFwOBwBR8JRcDQcA8fCcXA8nAAnwklwMpwCp8JpcDqcAWfCWXA2nAPnwnlwPlwAF8JFcDFcApfCZXA5XAFXwlVwNVwD18J1cD3cADfCTXAz3AK3wm1wO9wBd8JdcDfcA/fCfXA/jIMH4EF4CB6GR+BReAwehyfgSXgKnoZn4Fl4DsbD8zABXoAX4SV4GV6BV+E1eB3egDfhLXgb3oF34T14Hz6AD+Ej+Bg+gU/hM/gcvoAv4Sv4Gr6BifAtfAffww/wI/wEP8Mv8Cv8Br/DH/An/AV/wyT4B/6F/2AyJ7mTwknppHJSO2mctE46J72TwcnoZHIyO1mcrE42J7uTw8np5HIQB3UwB3cIh3Qoh3YYh3U4h3cER3QkR3YUR3U0R3cMBzimYzm2Ax3HcR3P8Z3ACZ3IiTm5nTxOXiefk98p4BR0CjmFnSJOUaeYU9wp4ZR0SjmlnTJOWaecU96p4FR0KjmVnSpOVaeaU92p4dR0ajm1nTpOXaeeU99p4DR0GjmNnSZOU6eZ09xp4bR0WjmtnTZOW6ed097p4HR0OjmdnS5OV6eb093p4fR0ejm9nT5OX6ef098Z4Ax0BjmDnSHOUGeYM9wZ4Yx0RjmjnTHOWGecM96Z4Ex0JjmTnSnOVGeaM92Z4cx0ZjmznTnOXGeeM99Z4Cx0FjmLnSXOUmeZs9xZ4ax0VjmrnTXOWmeds97Z4Gx0NjmbnS3OVmebs93Z4ex0djm7nT3OXmefs9+Jcw44B51DzmHniHPUOeYcd044J51TzmnnjHPWOefEO+edBOeCc9G55Fx2rjhXnWvOdeeGc9O55dx27jh3nXvOfeeB89B55Dx2njhPnWfOc+eF89J55bx23jiJzlvnnfPe+eB8dD45n50vzlfnm/Pd+eH8dH45v50k54/z1/nnJHOTuynclG4qN7Wbxk3rpnPTuxncjG4mN7Obxc3qZnOzuzncnG4uF3FRF3Nxl3BJl3Jpl3FZl3N5V3BFV3JlV3FVV3N113CBa7qWa7vQdVzX9VzfDdzQjdyYm9vN4+Z187n53QJuQbeQW9gt4hZ1i7nF3RJuSbeUW9ot45Z1y7nl3QpuRbeSW9mt4lZ1q7nV3RpuTbeWW9ut49Z167n13QZuQ7eR29ht4jZ1m7nN3RZuS7eV29pt47Z127nt3Q5uR7eT29nt4nZ1u7nd3R5uT7eX29vt4/Z1+7n93QHuQHeQO9gd4g51h7nD3RHuSHeUO9od4451x7nj3QnuRHeSO9md4k51p7nT3RnuTHeWO9ud485157nz3QXuQneRu9hd4i51l7nL3RXuSneVu9pd465117nr3Q3uRneTu9nd4m51t7nb3R3uTneXu9vd4+5197n73Tj3gHvQPeQedo+4R91j7nH3hHvSPeWeds+4Z91zbrx73k1wL7gX3UvuZfeKe9W95l53b7g33VvubfeOe9e95953H7gP3UfuY/eJ+9R95j53X7gv3Vfua/eNm+i+dd+5790P7kf3k/vZ/eJ+db+5390f7k/3l/vbTXL/uH/df24yL7mXwkvppfJSe2m8tF46L72XwcvoZfIye1m8rF42L7uXw8vp5fIQD/UwD/cIj/Qoj/YYj/U4j/cET/QkT/YUT/U0T/cMD3imZ3m2Bz3Hcz3P873AC73Ii3m5vTxeXi+fl98r4BX0CnmFvSJeUa+YV9wr4ZX0SnmlvTJeWa+cV96r4FX0KnmVvSpeVa+aV92r4dX0anm1vTpeXa+eV99r4DX0GnmNvSZeU6+Z19xr4bX0WnmtvTZeW6+d197r4HX0OnmdvS5eV6+b193r4fX0enm9vT5eX6+f198b4A30BnmDvSHeUG+YN9wb4Y30RnmjvTHeWG+cN96b4E30JnmTvSneVG+aN92b4c30ZnmzvTneXG+eN99b4C30FnmLvSXeUm+Zt9xb4a30VnmrvTXeWm+dt97b4G30NnmbvS3eVm+bt93b4e30dnm7vT3eXm+ft9+L8w54B71D3mHviHfUO+Yd9054J71T3mnvjHfWO+fFe+e9BO+Cd9G75F32rnhXvWvede+Gd9O75d327nh3vXvefe+B99B75D32nnhPvWfec++F99J75b323niJ3lvvnffe++B99D55n70v3lfvm/fd++H99H55v70k74/31/vnJfOT+yn8lH4qP7Wfxk/rp/PT+xn8jH4mP7Ofxc/qZ/Oz+zn8nH4uH/FRH/Nxn/BJn/Jpn/FZn/N5X/BFX/JlX/FVX/N13/CBb/qWb/vQd3zX93zfD/zQj/yYn9vP4+f18/n5/QJ+Qb+QX9gv4hf1i/nF/RJ+Sb+UX9ov45f1y/nl/Qp+Rb+SX9mv4lf1q/nV/Rp+Tb+WX9uv49f16/n1/QZ+Q7+R39hv4jf1m/nN/RZ+S7+V39pv47f12/nt/Q5+R7+T39nv4nf1u/nd/R5+T7+X39vv4/f1+/n9/QH+QH+QP9gf4g/1h/nD/RH+SH+UP9of44/1x/nj/Qn+RH+SP9mf4k/1p/nT/Rn+TH+WP9uf48/15/nz/QX+Qn+Rv9hf4i/1l/nL/RX+Sn+Vv9pf46/11/nr/Q3+Rn+Tv9nf4m/1t/nb/R3+Tn+Xv9vf4+/19/n7/Tj/gH/QP+Qf9o/4R/1j/nH/hH/SP+Wf9s/4Z/1zfrx/3k/wL/gX/Uv+Zf+Kf9W/5l/3b/g3/Vv+bf+Of9e/59/3H/gP/Uf+Y/+J/9R/5j/3X/gv/Vf+a/+Nn+i/9d/57/0P/kf/k//Z/+J/9b/53/0f/k//l//bT/L/+H/9f36yIHmQIkgZpApSB2mCtEG6IH2QIcgYZAoyB1mCrEG2IHuQI8gZ5AqQAA2wAA+IgAyogA6YgA24gA+EQAykQA6UQA20QA+MAARmYAV2AAMncAMv8IMgCIMoiAW5gzxB3iBfkD8oEBQMCgWFgyJB0aBYUDwoEZQMSgWlgzJB2aBcUD6oEFQMKgWVgypB1aBaUD2oEdQMagW1gzpB3aBeUD9oEDQMGgWNgyZB06BZ0DxoEbQMWgWtgzZB26Bd0D7oEHQMOgWdgy5B16Bb0D3oEfQMegW9gz5B36Bf0D8YEAwMBgWDgyHB0GBYMDwYEYwMRgWjgzHB2GBcMD6YEEwMJgWTgynB1GBaMD2YEcwMZgWzgznB3GBeMD9YECwMFgWLgyXB0mBZsDxYEawMVgWrgzXB2mBdsD7YEGwMNgWbgy3B1mBbsD3YEewMdgW7gz3B3mBfsD+ICw4EB4NDweHgSHA0OBYcD04EJ4NTwengTHA2OBfEB+eDhOBCcDG4FFwOrgRXg2vB9eBGcDO4FdwO7gR3g3vB/eBB8DB4FDwOngRPg2fB8+BF8DJ4FbwO3gSJwdvgXfA++BB8DD4Fn4MvwdfgW/A9+BH8DH4Fv4Ok4E/wN/gXJAuThynClGGqMHWYJkwbpgvThxnCjGGmMHOYJcwaZguzhznCnGGuEAnREAvxkAjJkArpkAnZkAv5UAjFUArlUAnVUAv10AhBaIZWaIcwdEI39EI/DMIwjMJYmDvME+YN84X5wwJhwbBQWDgsEhYNi4XFwxJhybBUWDosE5YNy4XlwwphxbBSWDmsElYNq4XVwxphzbBWWDusE9YN64X1wwZhw7BR2DhsEjYNm4XNwxZhy7BV2DpsE7YN24Xtww5hx7BT2DnsEnYNu4Xdwx5hz7BX2DvsE/YN+4X9wwHhwHBQODgcEg4Nh4XDwxHhyHBUODocE44Nx4XjwwnhxHBSODmcEk4Np4XTwxnhzHBWODucE84N54XzwwXhwnBRuDhcEi4Nl4XLwxXhynBVuDpcE64N14Xrww3hxnBTuDncEm4Nt4Xbwx3hznBXuDvcE+4N94X7w7jwQHgwPBQeDo+ER8Nj4fHwRHgyPBWeDs+EZ8NzYXx4PkwIL4QXw0vh5fBKeDW8Fl4Pb4Q3w1vh7fBOeDe8F94PH4QPw0fh4/BJ+DR8Fj4PX4Qvw1fh6/BNmBi+Dd+F78MP4cfwU/g5/BJ+Db+F38Mf4c/wV/g7TAr/hH/Df2GyKHmUIkoZpYpSR2mitFG6KH2UIcoYZYoyR1mirFG2KHuUI8oZ5YqQCI2wCI+IiIyoiI6YiI24iI+ESIykSI6USI20SI+MCERmZEV2BCMnciMv8qMgCqMoikW5ozxR3ihflD8qEBWMCkWFoyJR0ahYVDwqEZWMSkWlozJR2ahcVD6qEFWMKkWVoypR1ahaVD2qEdWMakW1ozpR3aheVD9qEDWMGkWNoyZR06hZ1DxqEbWMWkWtozZR26hd1D7qEHWMOkWdoy5R16hb1D3qEfWMekW9oz5R36hf1D8aEA2MBkWDoyHR0GhYNDwaEY2MRkWjozHR2GhcND6aEE2MJkWToynR1GhaND2aEc2MZkWzoznR3GheND9aEC2MFkWLoyXR0mhZtDxaEa2MVkWrozXR2mhdtD7aEG2MNkWboy3R1mhbtD3aEe2MdkW7oz3R3mhftD+Kiw5EB6ND0eHoSHQ0OhYdj05EJ6NT0enoTHQ2OhfFR+ejhOhCdDG6FF2OrkRXo2vR9ehGdDO6Fd2O7kR3o3vR/ehB9DB6FD2OnkRPo2fR8+hF9DJ6Fb2O3kSJ0dvoXfQ++hB9jD5Fn6Mv0dfoW/Q9+hH9jH5Fv6Ok6E/0N/oXJauRLFmyWMpYqljqWJpY2li6WPpYhljGWKZY5liWWNZYtlj2WI5YzliuGBJDY1gMjxExMkbF6BgTY2NcjI8JMTEmxeSYElNjWkyPGTEQM2NWzI7BmBNzY17MjwWxMBbFYrHcsTyxvLF8sfyxArGCsUKxwrEisaKxYrHisRKxkrFSsdKxMrGysXKx8rEKsYqxSrHKsSqxqrFqseqxGrGasf+LAHgArDMHAADcsbNtezf/tq0kb7ZtdbZt27Zt2+xsW70vhtXEamG1sTpYXaweVh9rgDXEGmGNsSZYU6wZ1hxrgbXEWmGtsTZYW6wd1h7rgHXEOmGdsS5YV6wb1h3rgfXEemG9sQSsD9YX64f1xwZgA7FB2GBsCDYUG4YNx0ZgI7FR2GhsDDYWG4eNxyZgE7FJ2GRsCjYVm4ZNx2ZgM7FZ2GxsDjYXm4fNxxZgC7FF2GJsCbYUW4Ytx1ZgK7FV2GpsDbYWW4etxzZgG7FN2GZsC7YV24Ztx3ZgO7Fd2G5sD7YX24ftxw5gB7FD2GHsCHYUO4Ydx05gJ7FT2GnsDHYWO4edxy5gF7FL2GXsCnYVu4Zdx25gN7Fb2G3sDnYXu4fdxx5gD7FE7BH2GHuCPcWeYc+xF9hL7BX2GnuDvcXeYe+xD9hH7BP2GfuCfcW+Yd+xH9hP7Bf2G/uD/cX+YUlYHJ4MT46nwFPiqfDUeDyeBk+Lp8PT4xnwjHgmPDOeBc+KZ8Oz4znwnHguPDeeB8+L58Pz4wXwgnghvDBeBC+KF8OL4yXwkngpvDReBi+Ll8PL4xXwivh/eCW8Ml4Fr4pXw6vjNXAMx3ECJ3EKp3EGZ3EO53EBF3EJl3EFV3EN13EDN3ELt3EHd3EP9/EAD/EIBzjEER7Da+K18Np4HbwuXg+vjzfAG+KN8MZ4E7wp3gxvjrfAW+Kt8NZ4G7wt3g5vj3fAO+Kd8M54F7wr3g3vjvfAe+K98N54At4H74v3w/vjA/CB+CB8MD4EH4oPw4fjI/CR+Ch8ND4GH4uPw8fjE/CJ+CR8Mj4Fn4pPw6fjM/CZ+Cx8Nj4Hn4vPw+fjC/CF+CJ8Mb4EX4ovw5fjK/CV+Cp8Nb4GX4uvw9fjG/CN+CZ8M74F34pvw7fjO/Cd+C58N74H34vvw/fjB/CD+CH8MH4EP4ofw4/jJ/CT+Cn8NH4GP4ufw8/jF/CL+CX8Mn4Fv4pfw6/jN/Cb+C38Nn4Hv4vfw+/jD/CHeCL+CH+MP8Gf4s/w5/gL/CX+Cn+Nv8Hf4u/w9/gH/CP+Cf+Mf8G/4t/w7/gP/Cf+C/+N/8H/4v/wJDyOSEYkJ1IQKYlURGoinkhDpCXSEemJDERGIhORmchCZCWyEdmJHEROIheRm8hD5CXyEfmJAkRBohBRmChCFCWKEcWJEkRJohRRmihDlCXKEeWJCkRF4j+iElGZqEJUJaoR1YkaBEbgBEGQBEXQBEOwBEfwhECIhETIhEKohEbohEGYhEXYhEO4hEf4RECEREQAAhKIiBE1iVpEbaIOUZeoR9QnGhANiUZEY6IJ0ZRoRjQnWhAtiVZEa6IN0ZZoR7QnOhAdiU5EZ6IL0ZXoRnQnehA9iV5EbyKB6EP0JfoR/YkBxEBiEDGYGEIMJYYRw4kRxEhiFDGaGEOMJcYR44kJxERiEjGZmEJMJaYR04kZxExiFjGbmEPMJeYR84kFxEJiEbGYWEIsJZYRy4kVxEpiFbGaWEOsJdYR64kNxEZiE7GZ2EJsJbYR24kdxE5iF7Gb2EPsJfYR+4kDxEHiEHGYOEIcJY4Rx4kTxEniFHGaOEOcJc4R54kLxEXiEnGZuEJcJa4R14kbxE3iFnGbuEPcJe4R94kHxEMikXhEPCaeEE+JZ8Rz4gXxknhFvCbeEG+Jd8R74gPxkfhEfCa+EF+Jb8R34gfxk/hF/Cb+EH+Jf0QSEUcmI5OTKciUZCoyNRlPpiHTkunI9GQGMiOZicxMZiGzktnI7GQOMieZi8xN5iHzkvnI/GQBsiBZiCxMFiGLksXI4mQJsiRZiixNliHLkuXI8mQFsiL5H1mJrExWIauS1cjqZA0SI3GSIEmSImmSIVmSI3lSIEVSImVSIVVSI3XSIE3SIm3SIV3SI30yIEMyIgEJSUTGyJpkLbI2WYesS9Yj65MNyIZkI7Ix2YRsSjYjm5MtyJZkK7I12YZsS7Yj25MdyI5kJ7Iz2YXsSnYju5M9yJ5kL7I3mUD2IfuS/cj+5AByIDmIHEwOIYeSw8jh5AhyJDmKHE2OIceS48jx5ARyIjmJnExOIaeS08jp5AxyJjmLnE3OIeeS88j55AJyIbmIXEwuIZeSy8jl5ApyJbmKXE2uIdeS68j15AZyI7mJ3ExuIbeS28jt5A5yJ7mL3E3uIfeS+8j95AHyIHmIPEweIY+Sx8jj5AnyJHmKPE2eIc+S58jz5AXyInmJvExeIa+S18jr5A3yJnmLvE3eIe+S98j75APyIZlIPiIfk0/Ip+Qz8jn5gnxJviJfk2/It+Q78j35gfxIfiI/k1/Ir+Q38jv5g/xJ/iJ/k3/Iv+Q/MomMo5JRyakUVEoqFZWaiqfSUGmpdFR6KgOVkcpEZaayUFmpbFR2KgeVk8pF5abyUHmpfFR+qgBVkCpEFaaKUEWpYlRxqgRVkipFlabKUGWpclR5qgJVkfqPqkRVpqpQValqVHWqBoVROEVQJEVRNMVQLMVRPCVQIiVRMqVQKqVROmVQJmVRNuVQLuVRPhVQIRVRgIIUomJUTaoWVZuqQ9Wl6lH1qQZUQ6oR1ZhqQjWlmlHNqRZUS6oV1ZpqQ7Wl2lHtqQ5UR6oT1ZnqQnWlulHdqR5UT6oX1ZtKoPpQfal+VH9qADWQGkQNpoZQQ6lh1HBqBDWSGkWNpsZQY6lx1HhqAjWRmkRNpqZQU6lp1HRqBjWTmkXNpuZQc6l51HxqAbWQWkQtppZQS6ll1HJqBbWSWkWtptZQa6l11HpqA7WR2kRtprZQW6lt1HZqB7WT2kXtpvZQe6l91H7qAHWQOkQdpo5QR6lj1HHqBHWSOkWdps5QZ6lz1HnqAnWRukRdpq5QV6lr1HXqBnWTukXdpu5Qd6l71H3qAfWQSqQeUY+pJ9RT6hn1nHpBvaReUa+pN9Rb6h31nvpAfaQ+UZ+pL9RX6hv1nfpB/aR+Ub+pP9Rf6h+VRMXRyejkdAo6JZ2KTk3H02notHQ6Oj2dgc5IZ6Iz01norHQ2Ojudg85J56Jz03novHQ+Oj9dgC5IF6IL00XoonQxujhdgi5Jl6JL02XosnQ5ujxdga5I/0dXoivTVeiqdDW6Ol2DxmicJmiSpmiaZmiW5mieFmiRlmiZVmiV1midNmiTtmibdmiX9mifDuiQjmhAQxrRMbomXYuuTdeh69L16Pp0A7oh3YhuTDehm9LN6OZ0C7ol3YpuTbeh29Lt6PZ0B7oj3YnuTHehu9Ld6O50D7on3YvuTSfQfei+dD+6Pz2AHkgPogfTQ+ih9DB6OD2CHkmPokfTY+ix9Dh6PD2BnkhPoifTU+ip9DR6Oj2DnknPomfTc+i59Dx6Pr2AXkgvohfTS+il9DJ6Ob2CXkmvolfTa+i19Dp6Pb2B3khvojfTW+it9DZ6O72D3knvonfTe+i99D56P32APkgfog/TR+ij9DH6OH2CPkmfok/TZ+iz9Dn6PH2Bvkhfoi/TV+ir9DX6On2Dvknfom/Td+i79D36Pv2Afkgn0o/ox/QT+in9jH5Ov6Bf0q/o1/Qb+i39jn5Pf6A/0p/oz/QX+iv9jf5O/6B/0r/o3/Qf+i/9j06i45hkTHImBZOSScWkZuKZNExaJh2TnsnAZGQyMZmZLExWJhuTncnB5GRyMbmZPExeJh+TnynAFGQKMYWZIkxRphhTnCnBlGRKMaWZMkxZphxTnqnAVGT+YyoxlZkqTFWmGlOdqcFgDM4QDMlQDM0wDMtwDM8IjMhIjMwojMpojM4YjMlYjM04jMt4jM8ETMhEDGAgg5gYU5OpxdRm6jB1mXpMfaYB05BpxDRmmjBNmWZMc6YF05JpxbRm2jBtmXZMe6YD05HpxHRmujBdmW5Md6YH05PpxfRmEpg+TF+mH9OfGcAMZAYxg5khzFBmGDOcGcGMZEYxo5kxzFhmHDOemcBMZCYxk5kpzFRmGjOdmcHMZGYxs5k5zFxmHjOfWcAsZBYxi5klzFJmGbOcWcGsZFYxq5k1zFpmHbOe2cBsZDYxm5ktzFZmG7Od2cHsZHYxu5k9zF5mH7OfOcAcZA4xh5kjzFHmGHOcOcGcZE4xp5kzzFnmHHOeucBcZC4xl5krzFXmGnOducHcZG4xt5k7zF3mHnOfecA8ZBKZR8xj5gnzlHnGPGdeMC+ZV8xr5g3zlnnHvGc+MB+ZT8xn5gvzlfnGfGd+MD+ZX8xv5g/zl/nHJDFxbDI2OZuCTcmmYlOz8WwaNi2bjk3PZmAzspnYzGwWNiubjc3O5mBzsrnY3GweNi+bj83PFmALsoXYwmwRtihbjC3OlmBLsqXY0mwZtixbji3PVmArsv+xldjKbBW2KluNrc7WYDEWZwmWZCmWZhmWZTmWZwVWZCVWZhVWZTVWZw3WZC3WZh3WZT3WZwM2ZCMWsJBFbIytydZia7N12LpsPbY+24BtyDZiG7NN2KZsM7Y524JtybZiW7Nt2LZsO7Y924HtyHZiO7Nd2K5sN7Y724PtyfZie7MJbB+2L9uP7c8OYAeyg9jB7BB2KDuMHc6OYEeyo9jR7Bh2LDuOHc9OYCeyk9jJ7BR2KjuNnc7OYGeys9jZ7Bx2LjuPnc8uYBeyi9jF7BJ2KbuMXc6uYFeyq9jV7Bp2LbuOXc9uYDeym9jN7BZ2K7uN3c7uYHeyu9jd7B52L7uP3c8eYA+yh9jD7BH2KHuMPc6eYE+yp9jT7Bn2LHuOPc9eYC+yl9jL7BX2KnuNvc7eYG+yt9jb7B32LnuPvc8+YB+yiewj9jH7hH3KPmOfsy/Yl+wr9jX7hn3LvmPfsx/Yj+wn9jP7hf3KfmO/sz/Yn+wv9jf7h/3L/mOT2DguGZecS8Gl5FJxqbl4Lg2XlkvHpecycBm5TFxmLguXlcvGZedycDm5XFxuLg+Xl8vH5ecKcAW5QlxhrghXlCvGFedKcCW5UlxprgxXlivHlecqcBW5/7hKXGWuCleVq8ZV52pwGIdzBEdyFEdzDMdyHMdzAidyEidzCqdyGqdzBmdyFmdzDudyHudzARdyEQc4yCEuxtXkanG1uTpcXa4eV59rwDXkGnGNuSZcU64Z15xrwbXkWnGtuTZcW64d157rwHXkOnGduS5cV64b153rwfXkenG9uQSuD9eX68f15wZwA7lB3GBuCDeUG8YN50ZwI7lR3GhuDDeWG8eN5yZwE7lJ3GRuCjeVm8ZN52ZwM7lZ3GxuDjeXm8fN5xZwC7lF3GJuCbeUW8Yt51ZwK7lV3GpuDbeWW8et5zZwG7lN3GZuC7eV28Zt53ZwO7ld3G5uD7eX28ft5w5wB7lD3GHuCHeUO8Yd505wJ7lT3GnuDHeWO8ed5y5wF7lL3GXuCneVu8Zd525wN7lb3G3uDneXu8fd5x5wD7lE7hH3mHvCPeWecc+5F9xL7hX3mnvDveXece+5D9xH7hP3mfvCfeW+cd+5H9xP7hf3m/vD/eX+cUlcHJ+MT86n4FPyqfjUfDyfhk/Lp+PT8xn4jHwmPjOfhc/KZ+Oz8zn4nHwuPjefh8/L5+Pz8wX4gnwhvjBfhC/KF+OL8yX4knwpvjRfhi/Ll+PL8xX4ivx/fCW+Ml+Fr8pX46vzNXiMx3mCJ3mKp3mGZ3mO53mBF3mJl3mFV3mN13mDN3mLt3mHd3mP9/mAD/mIBzzkER/ja/K1+Np8Hb4uX4+vzzfgG/KN+MZ8E74p34xvzrfgW/Kt+NZ8G74t345vz3fgO/Kd+M58F74r343vzvfge/K9+N58At+H78v34/vzA/iB/CB+MD+EH8oP44fzI/iR/Ch+ND+GH8uP48fzE/iJ/CR+Mj+Fn8pP46fzM/iZ/Cx+Nj+Hn8vP4+fzC/iF/CJ+Mb+EX8ov45fzK/iV/Cp+Nb+GX8uv49fzG/iN/CZ+M7+FT4zbxm/nd/A7+V38bn4Pv5ffx+/nD/AH+UP8Yf4If5Q/xh/nT/An+VP8af4Mf5Y/x5/nL/AX+Uv8Zf4Kf5W/xl/nb/A3+Vv8bf4Of5e/x9/nH/AP+UT+Ef+Yf8I/5Z/xz/kX/Ev+Ff+af8O/5d/x7/kP/Ef+E/+Z/8J/5b/x3/kf/E/+F/+b/8P/5f/xSXyckExILqQQUgqphNRCvJBGSCukE9ILGYSMQiYhs5BFyCpkE7ILOYScQi4ht5BHyCvkE/ILBYSCQiGhsFBEKCoUE4oLJYSSQimhtFBGKCuUE8oLFYSKwn9CJaGyUEWoKlQTqgs1BEzABUIgBUqgBUZgBU7gBUEQBUmQBUVQBU3QBUMwBUuwBUdwBU/whUAIhUgAAhSQEBNqCrWE2kIdoa5QT6gvNBAaCo2ExkIToanQTGgutBBaCq2E1kIboa3QTmgvdBA6Cp2EzkIXoavQTegu9BB6Cr2E3kKC0EfoK/QT+gsDhIHCIGGwMEQYKgwThgsjhJHCKGG0MEYYK4wTxgsThInCJGGyMEWYKkwTpgszhJnCLGG2MEeYK8wT5gsLhIXCImGxsERYKiwTlgsrhJXCKmG1sEZYK6wT1gsbhI3CJmGzsEXYKmwTtgs7hJ3CLmG3sEfYK+wT9gsHhIPCIeGwcEQ4KhwTjgsnhJPCKeG0cEY4K5wTzgsXhIvCJeGycEW4KlwTrgs3hJvCLeG2cEe4K9wT7gsPhIdCovBIeCw8EZ4Kz4TnwgvhpfBKeC28Ed4K74T3wgfho/BJ+Cx8Eb4K34Tvwg/hp/BL+C38Ef4K/4QkIU5MJiYXU4gpxVRiajFeTCOmFdOJ6cUMYkYxk5hZzCJmFbOJ2cUcYk4xl5hbzCPmFfOJ+cUCYkGxkFhYLCIWFYuJxcUSYkmxlFhaLCOWFcuJ5cUKYkXxP7GSWFmsIlYVq4nVxRoiJuIiIZIiJdIiI7IiJ/KiIIqiJMqiIqqiJuqiIZqiJdqiI7qiJ/piIIZiJAIRikiMiTXFWmJtsY5YV6wn1hcbiA3FRmJjsYnYVGwmNhdbiC3FVmJrsY3YVmwnthc7iB3FTmJnsYvYVewmdhd7iD3FXmJvMUHsI/YV+4n9xQHiQHGQOFgcIg4Vh4nDxRHiSHGUOFocI44Vx4njxQniRHGSOFmcIk4Vp4nTxRniTHGWOFucI84V54nzxQXiQnGRuFhcIi4Vl4nLxRXiSnGVuFpcI64V14nrxQ3iRnGTuFncIm4Vt4nbxR3iTnGXuFvcI+4V94n7xQPiQfGQeFg8Ih4Vj4nHxRPiSfGUeFo8I54Vz4nnxSTxonhJvCxeEa+K18Tr4g3xpnhLvC3eEe+K98T74gPxoZgoPhIfi0/Ep+Iz8bn4QnwpvhJfi2/Et+I78b34QfwofhI/i1/Er+I38bv4Q/wp/hJ/i3/Ev+I/MUmMk5JJyaUUUkoplZRaipfSSGmldFJ6KYOUUcokZZaySFmlbFJ2KYeUU8ol5ZbySHmlfFJ+qYBUUCokFZaKSEWlYlJxqYRUUiollZbKSGWlclJ5qYJUUfpPqiRVlqpIVaVqUnWphoRJuERIpERJtMRIrMRJvCRIoiRJsqRIqqRJumRIpmRJtuRIruRJvhRIoRRJQIISkmJSTamWVFuqI9WV6kn1pQZSQ6mR1FhqIjWVmknNpRZSS6mV1FpqI7WV2kntpQ5SR6mT1FnqInWVukndpR5ST6mX1FtKkPpIfaV+Un9pgDRQGiQNloZIQ6Vh0nBphDRSGiWNlsZIY6Vx0nhpgjRRmiRNlqZIU6Vp0nRphjRTmiXNluZIc6V50nxpgbRQWiQtlpZIS6Vl0nJphbRSWiWtltZIa6V10nppg7RR2iRtlrZIW6Vt0nZph7RT2iXtlvZIe6V90n7pgHRQOiQdlo5IR6Vj0nHphHRSOiWdls5IZ6Vz0nnpgnRRuiRdlq5IV6Vr0nXphnRTuiXdlu5Id6V70n3pgfRQSpQeSY+lJ9JT6Zn0XHohvZReSa+lN9Jb6Z30XvogfZQ+SZ+lL9JX6Zv0Xfoh/ZR+Sb+lP9Jf6Z+UJMXJyeTkcgo5pZxKTi3Hy2nktHI6Ob2cQc4oZ5Izy1nkrHI2ObucQ84p55Jzy3nkvHI+Ob9cQC4oF5ILy0XkonIxubhcQi4pl5JLy2XksnI5ubxcQa4o/ydXkivLVeSqcjW5ulxDxmRcJmRSpmRaZmRW5mReFmRRlmRZVmRV1mRdNmRTtmRbdmRX9mRfDuRQjmQgQxnJMbmmXEuuLdeR68r15PpyA7mh3EhuLDeRm8rN5OZyC7ml3EpuLbeR28rt5PZyB7mj3EnuLHeRu8rd5O5yD7mn3EvuLSfIfeS+cj+5vzxAHigPkgfLQ+Sh8jB5uDxCHimPkkfLY+Sx8jh5vDxBnihPkifLU+Sp8jR5ujxDninPkmfLc+S58jx5vrxAXigvkhfLS+Sl8jJ5ubxCXimvklfLa+S18jp5vbxB3ihvkjfLW+St8jZ5u7xD3invknfLe+S98j55v3xAPigfkg/LR+Sj8jH5uHxCPimfkk/LZ+Sz8jn5vHxBvihfki/LV+Sr8jX5unxDvinfkm/Ld+S78j35vvxAfignyo/kx/IT+an8TH4uv5Bfyq/k1/Ib+a38Tn4vf5A/yp/kz/IX+av8Tf4u/5B/yr/k3/If+a/8T06S45RkSnIlhZJSSaWkVuKVNEpaJZ2SXsmgZFQyKZmVLEpWJZuSXcmh5FRyKbmVPEpeJZ+SXymgFFQKKYWVIkpRpZhSXCmhlFRKKaWVMkpZpZxSXqmgVFT+UyoplZUqSlWlmlJdqaFgCq4QCqlQCq0wCqtwCq8IiqhIiqwoiqpoiq7Ex8XFWYqtOIqreIqvBEqoRApQoIKUmFJTqaXUVuoodZV6Sn2lgdJQaaQ0VpooTZVmSnOlhdJSaaW0VtoobZV2Snulg9JR6aR0VrooXZVuSnelh9JT6aX0VhKUPkpfpZ/SXxmgDFQGKYOVIcpQZZgyXBmhjFRGKaOVMcpYZZwyXpmgTFQmKZOVKcpUZZoyXZmhzFRmKbOVOcpcZZ4yX1mgLFQWKYuVJcpSZZmyXFmhrFRWKauVNcpaZZ2yXtmgbFQ2KZuVLcpWZZuyXdmh7FR2KbuVPcpeZZ+yXzmgHFQOKYeVI8pR5ZhyXDmhnFROKaeVM8pZ5ZxyXrmgXFQuKZeVK8pV5ZpyXbmh3FRuKbeVO8pd5Z5yX3mgPFQSlUfKY+WJ8lR5pjxXXigvlVfKa+WN8lZ5p7xXPigflU/KZ+WL8lX5pnxXfig/lV/Kb+WP8lf5pyQpcWoyNbmaQk2pplJTq/FqGjWtmk5Nr2ZQM6qZ1MxqFjWrmk3NruZQc6q51NxqHjWvmk/NrxZQC6qF1MJqEbWoWkwtrpZQS6ql1NJqGbWsWk4tr1ZQK6r/qZXUymoVtapaTa2u1lAxFVcJlVQplVYZlVU5lVcFVVQlVVYVVVU1VVcN1VQt1VYd1VU91VcDNVQjFahQRWpMranWUmurddS6aj21vtpAbag2UhurTdSmajO1udpCbam2UlurbdS2aju1vdpB7ah2UjurXdSuaje1u9pD7an2UnurCWofta/aT+2vDlAHqoPUweoQdag6TB2ujlBHqqPU0eoYdaw6Th2vTlAnqpPUyeoUdao6TZ2uzlBnqrPU2eocda46T52vLlAXqovUxeoSdam6TF2urlBXqqvU1eoada26Tl2vblA3qpvUzeoWdau6Td2u7lB3qrvU3eoeda+6T92vHlAPqofUw+oR9ah6TD2unlBPqqfU0+oZ9ax6Tj2vXlAvqpfUy+oV9ap6Tb2u3lBvqrfU2+od9a56T72vPlAfqonqI/Wx+kR9qj5Tn6sv1JfqK/W1+kZ9q75T36sf1I/qJ/Wz+kX9qn5Tv6s/1J/qL/W3+kf9q/5Tk9Q4LZmWXEuhpdRSaam1eC2NllZLp6XXMmgZtUxaZi2LllXLpmXXcmg5tVxabi2PllfLp+XXCmgFtUJaYa2IVlQrphXXSmgltVJaaa2MVlYrp5XXKmgVtf+0SlplrYpWVaumVddqaJiGa4RGapRGa4zGapzGa4ImapIma4qmapqma4ZmapZma47map7ma4EWapEGNKghLabV1GpptbU6Wl2tnlZfa6A11BppjbUmWlOtmdZca6G11FpprbU2WlutndZe66B11DppnbUuWletm9Zd66H11HppvbUErY/WV+un9dcGaAO1QdpgbYg2VBumDddGaCO1UdpobYw2VhunjdcmaBO1SdpkbYo2VZumTddmaDO1WdpsbY42V5unzdcWaAu1RdpibYm2VFumLddWaCu1VdpqbY22Vlunrdc2aBu1TdpmbYu2Vdumbdd2aDu1XdpubY+2V9un7dcOaAe1Q9ph7Yh2VDumHddOaCe1U9pp7Yx2VjunndcuaBe1S9pl7Yp2VbumXdduaDe1W9pt7Y52V7un3dceaA+1RO2R9lh7oj3VnmnPtRfaS+2V9lp7o73V3mnvtQ/aR+2T9ln7on3VvmnftR/aT+2X9lv7o/3V/mlJWpyeTE+up9BT6qn01Hq8nkZPq6fT0+sZ9Ix6Jj2znkXPqmfTs+s59Jx6Lj23nkfPq+fT8+sF9IJ6Ib2wXkQvqhfTi+sl9JJ6Kb20XkYvq5fTy+sV9Ir6f3olvbJeRa+qV9Or6zV0TMd1Qid1Sqd1Rmd1Tud1QRd1SZd1RVd1Tdd1Qzd1S7d1R3d1T/f1QA/1SAc61JEe02vqtfTaeh29rl5Pr6830BvqjfTGehO9qd5Mb6630FvqrfTWehu9rd5Ob6930DvqnfTOehe9q95N76730HvqvfTeeoLeR++r99P76wP0gfogfbA+RB+qD9OH6yP0kfoofbQ+Rh+rj9PH6xP0ifokfbI+RZ+qT9On6zP0mfosfbY+R5+rz9Pn6wv0hfoifbG+RF+qL9OX6yv0lfoqfbW+Rl+rr9PX6xv0jfomfbO+Rd+qb9O36zv0nfoufbe+R9+r79P36wf0g/oh/bB+RD+qH9OP6yf0k/op/bR+Rj+rn9PP6xf0i/ol/bJ+Rb+qX9Ov6zf0m/ot/bZ+R7+r39Pv6w/0h3qi/kh/rD/Rn+rP9Of6C/2l/kp/rb/R3+rv9Pf6B/2j/kn/rH/Rv+rf9O/6D/2n/kv/rf/R/+r/9CQ9zkhmJDdSGCmNVEZqI95IY6Q10hnpjQxGRiOTkdnIYmQ1shnZjRxGTiOXkdvIY+Q18hn5jQJGQaOQUdgoYhQ1ihnFjRJGSaOUUdooY5Q1yhnljQpGReM/o5JR2ahiVDWqGdWNGgZm4AZhkAZl0AZjsAZn8IZgiIZkyIZiqIZm6IZhmIZl2IZjuIZn+EZghEZkAAMayIgZNY1aRm2jjlHXqGfUNxoYDY1GRmOjidHUaGY0N1oYLY1WRmujjdHWaGe0NzoYHY1ORmeji9HV6GZ0N3oYPY1eRm8jwehj9DX6Gf2NAcZAY5Ax2BhiDDWGGcONEcZIY5Qx2hhjjDXGGeONCcZEY5Ix2ZhiTDWmGdONGcZMY5Yx25hjzDXmGfONBcZCY5Gx2FhiLDWWGcuNFcZKY5Wx2lhjrDXWGeuNDcZGY5Ox2dhibDW2GduNHcZOY5ex29hj7DX2GfuNA8ZB45Bx2DhiHDWOGceNE8ZJ45Rx2jhjnDXOGeeNC8ZF45Jx2bhiXDWuGdeNG8ZN45Zx27hj3DXuGfeNB8ZDI9F4ZDw2nhhPjWfGc+OF8dJ4Zbw23hhvjXfGe+OD8dH4ZHw2vhhfjW/Gd+OH8dP4Zfw2/hh/jX9GkhFnJjOTmynMlGYqM7UZb6Yx05rpzPRmBjOjmcnMbGYxs5rZzOxmDjOnmcvMbeYx85r5zPxmAbOgWcgsbBYxi5rFzOJmCbOkWcosbZYxy5rlzPJmBbOi+Z9ZyaxsVjGrmtXM6mYNEzNxkzBJkzJpkzFZkzN5UzBFUzJlUzFVUzN10zBN0zJt0zFd0zN9MzBDMzKBCU1kxsyaZi2ztlnHrGvWM+ubDcyGZiOzsdnEbGo2M5ubLcyWZiuztdnGbGu2M9ubHcyOZiezs9nF7Gp2M7ubPcyeZi+zt5lg9jH7mv3M/uYAc6A5yBxsDjGHmsPM4eYIc6Q5yhxtjjHHmuPM8eYEc6I5yZxsTjGnmtPM6eYMc6Y5y5xtzjHnmvPM+eYCc6G5yFxsLjGXmsvM5eYKc6W5ylxtrjHXmuvM9eYGc6O5ydxsbjG3mtvM7eYOc6e5y9xt7jH3mvvM/eYB86B5yDxsHjGPmsfM4+YJ86R5yjxtnjHPmufM8+YF86J5ybxsXjGvmtfM6+YN86Z5y7xt3jHvmvfM++YD86GZaD4yH5tPzKfmM/O5+cJ8ab4yX5tvzLfmO/O9+cH8aH4yP5tfzK/mN/O7+cP8af4yf5t/zL/mPzPJjLOSWcmtFFZKK5WV2oq30lhprXRWeiuDldHKZGW2slhZrWxWdiuHldPKZeW28lh5rXxWfquAVdAqZBW2ilhFrWJWcauEVdIqZZW2ylhlrXJWeauCVdH6z6pkVbaqWFWtalZ1q4aFWbhFWKRFWbTFWKzFWbwlWKIlWbKlWKqlWbplWKZlWbblWK7lWb4VWKEVWcCCFrJiVk2rllXbqmPVtepZ9a0GVkOrkdXYamI1tZpZza0WVkurldXaamO1tdpZ7a0OVkerk9XZ6mJ1tbpZ3a0eVk+rl9XbSrD6WH2tflZ/a4A10BpkDbaGWEOtYdZwa4Q10hpljbbGWGOtcdZ4a4I10ZpkTbamWFOtadZ0a4Y105plzbbmWHOtedZ8a4G10FpkLbaWWEutZdZya4W10lplrbbWWGutddZ6a4O10dpkbba2WFutbdZ2a4e109pl7bb2WHutfdZ+64B10DpkHbaOWEetY9Zx64R10jplnbbOWGetc9Z564J10boUf9m6Yl21rlnXrRvWTeuWddu6Y9217ln3rQfWQyvRemQ9tp5YT61n1nPrhfXSemW9tt5Yb6131nvrg/XR+mR9tr5YX61v1nfrh/XT+mX9tv5Yf61/VpIVZyezk9sp7JR2Kju1HW+nsdPa6ez0dgY7o53JzmxnsbPa2ezsdg47p53Lzm3nsfPa+ez8dgG7oF3ILmwXsYvaxezidgm7pF3KLm2Xscva5ezydgW7ov2fXcmubFexq9rV7Op2DRuzcZuwSZuyaZuxWZuzeVuwRVuyZVuxVVuzdduwTduybduxXduzfTuwQzuygQ1tZMfsmnYtu7Zdx65r17Pr2w3shnYju7HdxG5qN7Ob2y3slnYru7Xdxm5rt7Pb2x3sjnYnu7Pdxe5qd7O72z3snnYvu7edYPex+9r97P72AHugPcgebA+xh9rD7OH2CHukPcoebY+xx9rj7PH2BHuiPcmebE+xp9rT7On2DHumPcuebc+x59rz7Pn2AnuhvchebC+xl9rL7OX2Cnulvcpeba+x19rr7PX2BnujvcnebG+xt9rb7O32Dnunvcvebe+x99r77P32Afugfcg+bB+xj9rH7OP2Cfukfco+bZ+xz9rn7PP2Bfuifcm+bF+xr9rX7Ov2Dfumfcu+bd+x79r37Pv2A/uhnWg/sh/bT+yn9jP7uf3Cfmm/sl/bb+y39jv7vf3B/mh/sj/bX+yv9jf7u/3D/mn/sn/bf+y/9j87yY5zkjnJnRROSieVk9qJd9I4aZ10Tnong5PRyeRkdrI4WZ1sTnYnh5PTyeXkdvI4eZ18Tn6ngFPQKeQUdoo4RZ1iTnGnhFPSKeWUdso4ZZ1yTnmnglPR+c+p5FR2qjhVnWpOdaeGgzm4QzikQzm0wziswzm8IziiIzmyoziqozm6YzimYzm24ziu4zm+EzihEznAgQ5yYk5Np5ZT26nj1HXqOfWdBk5Dp5HT2GniNHWaOc2dFk5Lp5XT2mnjtHXaOe2dDk5Hp5PT2enidHW6Od2dHk5Pp5fT20lw+jh9nX5Of2eAM9AZ5Ax2hjhDnWHOcGeEM9IZ5Yx2xjhjnXHOeGeCM9GZ5Ex2pjhTnWnOdGeGM9OZ5cx25jhznXnOfGeBs9BZ5Cx2ljhLnWXOcmeFs9JZ5ax21jhrnXXOemeDs9HZ5Gx2tjhbnW3OdmeHs9PZ5ex29jh7nX3OfueAc9A55Bx2jjhHnWPOceeEc9I55Zx2zjhnnXPOeeeCc9G55Fx2rjhXnWvOdeeGc9O55dx27jh3nXvOfeeB89BJdB45j50nzlPnmfPceeG8dF45r503zlvnnfPe+eB8dD45n50vzlfnm/Pd+eH8dH45v50/zl/nn5PkxLnJ3ORuCjelm8pN7ca7ady0bjo3vZvBzehmcjO7WdysbjY3u5vDzenmcnO7edy8bj43v1vALegWcgu7RdyibjG3uFvCLemWcku7Zdyybjm3vFvBrej+51ZyK7tV3KpuNbe6W8PFXNwlXNKlXNplXNblXN4VXNGVXNlVXNXVXN01XNO1XNt1XNf1XN8N3NCNXOBCF7kxt6Zby63t1nHruvXc+m4Dt6HbyG3sNnGbus3c5m4Lt6Xbym3ttnHbuu3c9m4Ht6Pbye3sdnG7ut3c7m4Pt6fby+3tJrh93L5uP7e/O8Ad6A5yB7tD3KHuMHe4O8Id6Y5yR7tj3LHuOHe8O8Gd6E5yJ7tT3KnuNHe6O8Od6c5yZ7tz3LnuPHe+u8Bd6C5yF7tL3KXuMne5u8Jd6a5yV7tr3LXuOne9u8Hd6G5yN7tb3K3uNne7u8Pd6e5yd7t73L3uPne/e8A96B5yD7tH3KPuMfe4e8I96Z5yT7tn3LPuOfe8e8G96F5yL7tX3KvuNfe6e8O96d5yb7t33LvuPfe++8B96Ca6j9zH7hP3qfvMfe6+cF+6r9zX7hv3rfvOfe9+cD+6n9zP7hf3q/vN/e7+cH+6v9zf7h/3r/vPTXLjvGReci+Fl9JL5aX24r00XlovnZfey+Bl9DJ5mb0sXlYvm5fdy+Hl9HJ5ub08Xl4vn5ffK+AV9Ap5hb0iXlGvmFfcK+GV9Ep5pb0yXlmvnFfeq+BV9P7zKnmVvSpeVa+aV92r4WEe7hEe6VEe7TEe63Ee7wme6Eme7Cme6mme7hme6Vme7Tme63me7wVe6EUe8KCHvJhX06vl1fbqeHW9el59r4HX0GvkNfaaeE29Zl5zr4XX0mvltfbaeG29dl57r4PX0evkdfa6eF29bl53r4fX0+vl9fYSvD5eX6+f198b4A30BnmDvSHeUG+YN9wb4Y30RnmjvTHeWG+cN96b4E30JnmTvSneVG+aN92b4c30ZnmzvTneXG+eN99b4C30FnmLvSXeUm+Zt9xb4a30VnmrvTXeWm+dt97b4G30NnmbvS3eVm+bt93b4e30dnm7vT3eXm+ft9874B30DnmHvSPeUe+Yd9w74Z30TnmnvTPeWe+cd9674F30LnmXvSveVe+ad9274d30bnm3vTveXe+ed9974D30Er1H3mPviffUe+Y99154L71X3mvvjffWe+e99z54H71P3mfvi/fV++Z99354P71f3m/vj/fX++cleXF+Mj+5n8JP6afyU/vxfho/rZ/OT+9n8DP6mfzMfhY/q5/Nz+7n8HP6ufzcfh4/r5/Pz+8X8Av6hfzCfhG/qF/ML+6X8Ev6pfzSfhm/rF/OL+9X8Cv6//mV/Mp+Fb+qX82v7tfwMR/3CZ/0KZ/2GZ/1OZ/3BV/0JV/2FV/1NV/3Dd/0Ld/2Hd/1Pd/3Az/0Ix/40Ed+zK/p1/Jr+3X8un49v77fwG/oN/Ib+038pn4zv7nfwm/pt/Jb+238tn47v73fwe/od/I7+138rn43v7vfw+/p9/J7+wl+H7+v38/v7w/wB/qD/MH+EH+oP8wf7o/wR/qj/NH+GH+sP84f70/wJ/qT/Mn+FH+qP82f7s/wZ/qz/Nn+HH+uP8+f7y/wF/qL/MX+En+pv8xf7q/wV/qr/NX+Gn+tv85f72/wN/qb/M3+Fn+rv83f7u/wd/q7/N3+Hn+vv8/f7x/wD/qH/MP+Ef+of8w/7p/wT/qn/NP+Gf+sf84/71/wL/qX/Mv+Ff+qf82/7t/wb/q3/Nv+Hf+uf8+/7z/wH/qJ/iP/sf/Ef+o/85/7L/yX/iv/tf/Gf+u/89/7H/yP/if/s//F/+p/87/7P/yf/i//t//H/+v/85P8uCBZkDxIEaQMUgWpg/ggTZA2SBekDzIEGYNMQeYgS5A1yBZkD3IEOYNcQe4gT5A3yBfkDwoEBYNCQeGgSFA0KBYUD0oEJYNSQemgTFA2KBeUDyoEFROSB5WCykGVoGpQLage1AiwAA+IgAyogA6YgA24gA+EQAykQA6UQA20QA+MwAyswA6cwA28wA+CIAyiAAQwQEEsqBnUCmoHdYK6Qb2gftAgaBg0ChoHTYKmQbOgedAiaBm0CloHbYK2QbugfdAh6Bh0CjoHXYKuQbege9Aj6Bn0CnoHCUGfoG/QL+gfDAgGBoOCwcGQYGgwLBgejAhGBqOC0cGYYGwwLhgfTAgmBpOCycGUYGowLZgezAhmBrOC2cGcYG4wL5gfLAgWBouCxcGSYGmwLFgerAhWBquC1cGaYG2wLlgfbAg2BpuCzcGWYGuwLdge7Ah2BruC3cGeYG+wL9gfHAgOBoeCw8GR4GhwLDgenAhOBqeC08GZ4GxwLjgfXAguBpeCy8GV4GpwLbge3AhuBreC28Gd4G5wL7gfPAgeBonBo+Bx8CR4GjwLngcvgpfBq+B18CZ4G7wL3gcfgo/Bp+Bz8CX4GnwLvgc/gp/Br+B38Cf4G/wLkoK4MFmYPEwRpgxThanD+DBNmDZMF6YPM4QZw0xh5jBLmDXMFmYPc4Q5w1xh7jBPmDfMF+YPC4QFw0Jh4bBIWDQsFhYPS4Qlw1Jh6bBMWDYsF5YPK4QVw//CSmHlsEpYNawWVg9rhFiIh0RIhlRIh0zIhlzIh0IohlIoh0qohlqoh0ZohlZoh07ohl7oh0EYhlEIQhiiMBbWDGuFtcM6Yd2wXlg/bBA2DBuFjcMmYdOwWdg8bBG2DFuFrcM2YduwXdg+7BB2DDuFncMuYdewW9g97BH2DHuFvcOEsE/YN+wX9g8HhAPDQeHgcEg4NBwWDg9HhCPDUeHocEw4NhwXjg8nhBPDSeHkcEo4NZwWTg9nhDPDWeHscE44N5wXzg8XhAvDReHicEm4NFwWLg9XhCvDVeHqcE24NlwXrg83hBvDTeHmcEu4NdwWbg93hDvDXeHucE+4N9wX7g8PhAfDQ+Hh8Eh4NDwWHg9PhCfDU+Hp8Ex4NjwXng8vhBfDS+Hl8Ep4NbwWXg9vhDfDW+Ht8E54N7wX3g8fhA/DxPBR+Dh8Ej4Nn4XPwxfhy/BV+Dp8E74N34Xvww/hx/BT+Dn8En4Nv4Xfwx/hz/BX+Dv8E/4N/4VJYVyULEoepYhSRqmi1FF8lCZKG6WL0kcZooxRpihzlCXKGmWLskc5opxRrih3lCfKG+WL8kcFooJRoahwVCQqGhWLikclopJRqah0VCYqG5WLykcVoorRf1GlqHJUJaoaVYuqRzUiLMIjIiIjKqIjJmIjLuIjIRIjKZIjJVIjLdIjIzIjK7IjJ3IjL/KjIAqjKAIRjFAUi2pGtaLaUZ2oblQvqh81iBpGjaLGUZOoadQsah61iFpGraLWUZuobdQuah91iDpGnaLOUZeoa9Qt6h71iHpGvaLeUULUJ+ob9Yv6RwOigdGgaHA0JBoaDYuGRyOikdGoaHQ0JhobjYvGRxOiidGkaHI0JZoaTYumRzOimdGsaHY0J5obzYvmRwuihdGiaHG0JFoaLYuWRyuildGqaHW0JlobrYvWRxuijdGmaHO0JdoabYu2RzuindGuaHe0J9ob7Yv2Rweig9Gh6HB0JDoaHYuORyeik9Gp6HR0JjobnYvORxeii9Gl6HJ0JboaXYuuRzeim9Gt6HZ0J7ob3YvuRw+ih1Fi9Ch6HD2JnkbPoufRi+hl9Cp6Hb2J3kbvovfRh+hj9Cn6HH2Jvkbfou/Rj+hn9Cv6Hf2J/kb/oqQoDiQDyUEKkBKkAqlBPEgD0oJ0ID3IADKCTCAzyAKygmwgO8gBcoJcIDfIA/KCfCA/KAAKgkKgMCgCioJioDgoAUqCUqA0KAPKgnKgPKgAKoL/QCVQGVQBVUE1UB3UABjAAQFIQAEaMIAFHOCBAEQgARkoQAUa0IEBTGABGzjABR7wQQBCEAEAIEAgBmqCWqA2qAPqgnqgPmgAGoJGoDFoApqCZqA5aAFaglagNWgD2oJ2oD3oADqCTqAz6AK6gm6gO+gBeoJeoDdIAH1AX9AP9AcDwEAwCAwGQ8BQMAwMByPASDAKjAZjwFgwDowHE8BEMAlMBlPAVDANTAczwEwwC8wGc8BcMA/MBwvAQrAILAZLwFKwDCwHK8BKsAqsBmvAWrAOrAcbwEawCWwGW8BWsA1sBzvATrAL7AZ7wF6wD+wHB8BBcAgcBkfAUXAMHAcnwElwCpwGZ8BZcA6cBxfARXAJXAZXwFVwDVwHN8BNcAvcBnfAXXAP3AcPwEOQCB6Bx+AJeAqegefgBXgJXoHX4A14C96B9+AD+Ag+gc/gC/gKvoHv4Af4CX6B3+AP+Av+gSQQB5PB5DAFTAlTwdQwHqaBaWE6mB5mgBlhJpgZZoFZYTaYHeaAOWEumBvmgXlhPpgfFoAFYSFYGBaBRWExWByWgCVhKVgaloFlYTlYHlaAFeF/sBKsDKvAqrAarA5rQAzikIAkpCANGchCDvJQgCKUoAwVqEIN6tCAJrSgDR3oQg/6MIAhjCCAECIYgzVhLVgb1oF1YT1YHzaADWEj2Bg2gU1hM9gctoAtYSvYGraBbWE72B52gB1hJ9gZdoFdYTfYHfaAPWEv2BsmwD6wL+wH+8MBcCAcBAfDIXAoHAaHwxFwJBwFR8MxcCwcB8fDCXAinAQnwylwKpwGp8MZcCacBWfDOXAunAfnwwVwIVwEF8MlcClcBpfDFXAlXAVXwzVwLVwH18MNcCPcBDfDLXAr3Aa3wx1wJ9wFd8M9cC/cB/fDA/AgPAQPwyPwKDwGj8MT8CQ8BU/DM/AsPAfPwwvwIrwEL8Mr8Cq8Bq/DG/AmvAVvwzvwLrwH78MH8CFMhI/gY/gEPoXP4HP4Ar6Er+Br+Aa+he/ge/gBfoSf4Gf4BX6F3+B3+AP+hL/gb/gH/oX/YBKMQ8lQcpQCpUSpUGoUj9KgtCgdSo8yoIwoE8qMsqCsKBvKjnKgnCgXyo3yoLwoH8qPCqCCqBAqjIqgoqgYKo5KoJKoFCqNyqCyqBwqjyqgiug/VAlVRlVQVVQNVUc1EIZwRCASUYhGDGIRh3gkIBFJSEYKUpGGdGQgE1nIRg5ykYd8FKAQRQggiBCKoZqoFqqN6qC6qB6qjxqghqgRaoyaoKaoGWqOWqCWqBVqjdqgtqgdao86oI6oE+qMuqCuqBvqjnqgnqgX6o0SUB/UF/VD/dEANBANQoPREDQUDUPD0Qg0Eo1Co9EYNBaNQ+PRBDQRTUKT0RQ0FU1D09EMNBPNQrPRHDQXzUPz0QK0EC1Ci9EStBQtQ8vRCrQSrUKr0Rq0Fq1D69EGtBFtQpvRFrQVbUPb0Q60E+1Cu9EetBftQ/vRAXQQHUKH0RF0FB1Dx9EJdBKdQqfRGXQWnUPn0QV0EV1Cl9EVdBVdQ9fRDXQT3UK30R10F91D99ED9BAlokfoMXqCnqJn6Dl6gV6iV+g1eoPeonfoPfqAPqJP6DP6gr6ib+g7+oF+ol/oN/qD/qJ/KAnFxZLFksdSxFLGUsVSx+JjaWJpY+li6WMZYhljmWKZY1liWWPZYtljOWI5Y7liuWN5Ynlj+WL5YwViBWOFYoVjRWJFY8VixWMlYiVjpWKlY2ViZWPlYuVjFWIVY//FKsUqx6rEqsaqxarHasSwGB4jYmSMitExJsbGuBgfE2JiTIrJMSWmxrSYHjNiZsyK2TEn5sa8mB8LYmEsioEYjKHY/wTAA2CVQQAA4Gy7Zdu2bf22rbt72bZt27Zt2zaWsfVhGI4RGIlRGI0xGItxGI8JmIhJmIwpmIppmI4ZmIlZmI05mIt5mI8FWIhFGMAghrAY1hPrhfXG+mB9sX5Yf2wANhAbhA3GhmBDsWHYcGwENhIbhY3GxmBjsXHYeGwCNhGbhE3GpmBTsWnYdGwGNhObhc3G5mBzsXnYfGwBthBbhC3GlmBLsWXYcmwFthJbha3G1mBrsXXYemwDthHbhG3GtmBbsW3YdmwHthPbhe3G9mB7sX3YfuwAdhA7hB3GjmBHsWPYcewEdhI7hZ3GzmBnsXPYeewCdhG7hF3GrmBXsWvYdewGdhO7hd3G7mB3sXvYfewB9hB7hD3GnmBPsWfYc+wF9hJ7hb3G3mBvsXfYe+wD9hH7hH3GvmDx2FfsG/Yd+4H9xH5hv7E/2F/sH5aAJWJJ8KR4Mjw5ngJPiafCU+Np8LR4Ojw9ngHPiGfCM+NZ8Kx4Njw7ngPPiefCc+N58Lx4HJ4Pz48XwAvihfDCeBG8KF4ML46XwEvipfDSeBm8LF4OL49XwCvilfDKeBW8Kl4Nr47XwGvitfDaeB28Ll4Pr483wBvijfDGeBO8Kd4Mb463wFvirfDWeBu8Ld4Ob493wDvinfDOeBe8K94N7473wDEcxwmcxCmcxhmcxTmcxwVcxCVcxhVcxTVcxw3cxC3cxh3cxT3cxwM8xCMc4BBHeAzviffCe+N98L54P7w/PgAfiA/CB+ND8KH4MHw4PgIfiY/CR+Nj8LH4OHw8PgGfiE/CJ+NT8Kn4NHw6PgOfic/CZ+Nz8Ln4PHw+vgBfiC/CF+NL8KX4Mnw5vgJfia/CV+Nr8LX4Onw9vgHfiG/CN+Nb8K34Nnw7vgPfie/Cd+N78L34Pnw/fgA/iB/CD+NH8KP4Mfw4fgI/iZ/CT+Nn8LP4Ofw8fgG/iF/CL+NX8Kv4Nfw6fgO/id/Cb+N38Lv4Pfw+/gB/iD/CH+NP8Kf4M/w5/gJ/ib/CX+Nv8Lf4O/w9/gH/iH/CP+Nf8Hj8K/4N/47/wH/iv/Df+B/8L/4PT8AT8SREUiIZkZxIQaQkUhGpiTREWiIdkZ7IQGQkMhGZiSxEViIbkZ3IQeQkchG5iTxEXiKOyEfkJwoQBYlCRGGiCFGUKEYUJ0oQJYlSRGmiDFGWKEeUJyoQFYlKRGWiClGVqEZUJ2oQNYlaRG2iDlGXqEfUJxoQDYlGRGOiCdGUaEY0J1oQLYlWRGuiDdGWaEe0JzoQHYlORGeiC9GV6EZ0J3oQGIETBEESFEETDMESHMETAiESEiETCqESGqETBmESFmETDuESHuETARESEQEISCAiRvQkehG9iT5EX6If0Z8YQAwkBhGDiSHEUGIYMZwYQYwkRhGjiTHEWGIcMZ6YQEwkJhGTiSnEVGIaMZ2YQcwkZhGziTnEXGIeMZ9YQCwkFhGLiSXEUmIZsZxYQawkVhGriTXEWmIdsZ7YQGwkNhGbiS3EVmIbsZ3YQewkdhG7iT3EXmIfsZ84QBwkDhGHiSPEUeIYcZw4QZwkThGniTPEWeIccZ64QFwkLhGXiSvEVeIacZ24QdwkbhG3iTvEXeIecZ94QDwkHhGPiSfEU+IZ8Zx4QbwkXhGviTfEW+Id8Z74QHwkPhGfiS9EPPGV+EZ8J34QP4lfxG/iD/GX+EckEIlEEjIpmYxMTqYgU5KpyNRkGjItmY5MT2YgM5KZyMxkFjIrmY3MTuYgc5K5yNxkHjIvGUfmI/OTBciCZCGyMFmELEoWI4uTJciSZCmyNFmGLEuWI8uTFciKZCWyMlmFrEpWI6uTNciaZC2yNlmHrEvWI+uTDciGZCOyMdmEbEo2I5uTLciWZCuyNdmGbEu2I9uTHciOZCeyM9mF7Ep2I7uTPUiMxEmCJEmKpEmGZEmO5EmBFEmJlEmFVEmN1EmDNEmLtEmHdEmP9MmADMmIBCQkERkje5K9yN5kH7Iv2Y/sTw4gB5KDyMHkEHIoOYwcTo4gR5KjyNHkGHIsOY4cT04gJ5KTyMnkFHIqOY2cTs4gZ5KzyNnkHHIuOY+cTy4gF5KLyMXkEnIpuYxcTq4gV5KryNXkGnItuY5cT24gN5KbyM3kFnIruY3cTu4gd5K7yN3kHnIvuY/cTx4gD5KHyMPkEfIoeYw8Tp4gT5KnyNPkGfIseY48T14gL5KXyMvkFfIqeY28Tt4gb5K3yNvkHfIueY+8Tz4gH5KPyMfkE/Ip+Yx8Tr4gX5KvyNfkG/It+Y58T34gP5KfyM/kFzKe/Ep+I7+TP8if5C/yN/mH/Ev+IxPIRDIJlZRKRiWnUlApqVRUaioNlZZKR6WnMlAZqUxUZioLlZXKRmWnclA5qVxUbioPlZeKo/JR+akCVEGqEFWYKkIVpYpRxakSVEmqFFWaKkOVpcpR5akKVEWqElWZqkJVpapR1akaVE2qFlWbqkPVpepR9akGVEOqEdWYakI1pZpRzakWVEuqFdWaakO1pdpR7akOVEeqE9WZ6kJ1pbpR3akeFEbhFEGRFEXRFEOxFEfxlECJlETJlEKplEbplEGZlEXZlEO5lEf5VECFVEQBClKIilE9qV5Ub6oP1ZfqR/WnBlADqUHUYGoINZQaRg2nRlAjqVHUaGoMNZYaR42nJlATqUnUZGoKNZWaRk2nZlAzqVnUbGoONZeaR82nFlALqUXUYmoJtZRaRi2nVlArqVXUamoNtZZaR62nNlAbqU3UZmoLtZXaRm2ndlA7qV3UbmoPtZfaR+2nDlAHqUPUYeoIdZQ6Rh2nTlAnqVPUaeoMdZY6R52nLlAXqUvUZeoKdZW6Rl2nblA3qVvUbeoOdZe6R92nHlAPqUfUY+oJ9ZR6Rj2nXlAvqVfUa+oN9ZZ6R72nPlAfqU/UZ+oLFU99pb5R36kf1E/qF/Wb+kP9pf5RCVQilYROSiejk9Mp6JR0Kjo1nYZOS6ej09MZ6Ix0JjoznYXOSmejs9M56Jx0Ljo3nYfOS8fR+ej8dAG6IF2ILkwXoYvSxejidAm6JF2KLk2XocvS5ejydAW6Il2JrkxXoavS1ejqdA26Jl2Lrk3XoevS9ej6dAO6Id2Ibkw3oZvSzejmdAu6Jd2Kbk23odvS7ej2dAe6I92J7kx3obvS3ejudA8ao3GaoEmaommaoVmao3laoEVaomVaoVVao3XaoE3aom3aoV3ao306oEM6ogENaUTH6J50L7o33YfuS/ej+9MD6IH0IHowPYQeSg+jh9Mj6JH0KHo0PYYeS4+jx9MT6In0JHoyPYWeSk+jp9Mz6Jn0LHo2PYeeS8+j59ML6IX0InoxvYReSi+jl9Mr6JX0Kno1vYZeS6+j19Mb6I30JnozvYXeSm+jt9M76J30Lno3vYfeS++j99MH6IP0IfowfYQ+Sh+jj9Mn6JP0Kfo0fYY+S5+jz9MX6Iv0JfoyfYW+Sl+jr9M36Jv0Lfo2fYe+S9+j79MP6If0I/ox/YR+Sj+jn9Mv6Jf0K/o1/YZ+S7+j39Mf6I/0J/oz/YWOp7/S3+jv9A/6J/2L/k3/of/S/+gEOpFOwiRlkjHJmRRMSiYVk5pJw6Rl0jHpmQxMRiYTk5nJwmRlsjHZmRxMTiYXk5vJw+Rl4ph8TH6mAFOQKcQUZoowRZliTHGmBFOSKcWUZsowZZlyTHmmAlORqcRUZqowVZlqTHWmBlOTqcXUZuowdZl6TH2mAdOQacQ0ZpowTZlmTHOmBdOSacW0ZtowbZl2THumA9OR6cR0ZrowXZluTHemB4MxOEMwJEMxNMMwLMMxPCMwIiMxMqMwKqMxOmMwJmMxNuMwLuMxPhMwIRMxgIEMYmJMT6YX05vpw/Rl+jH9mQHMQGYQM5gZwgxlhjHDmRHMSGYUM5oZw4xlxjHjmQnMRGYSM5mZwkxlpjHTmRnMTGYWM5uZw8xl5jHzmQXMQmYRs5hZwixlljHLmRXMSmYVs5pZw6xl1jHrmQ3MRmYTs5nZwmxltjHbmR3MTmYXs5vZw+xl9jH7mQPMQeYQc5g5whxljjHHmRPMSeYUc5o5w5xlzjHnmQvMReYSc5m5wlxlrjHXmRvMTeYWc5u5w9xl7jH3mQfMQ+YR85h5wjxlnjHPmRfMS+YV85p5w7xl3jHvmQ/MR+YT85n5wsQzX5lvzHfmB/OT+cX8Zv4wf5l/TAKTyCRhk7LJ2ORsCjYlm4pNzaZh07Lp2PRsBjYjm4nNzGZhs7LZ2OxsDjYnm4vNzeZh87JxbD42P1uALcgWYguzRdiibDG2OFuCLcmWYkuzZdiybDm2PFuBrchWYiuzVdiqbDW2OluDrcnWYmuzddi6bD22PtuAbcg2YhuzTdimbDO2OduCbcm2Yluzbdi2bDu2PduB7ch2YjuzXdiubDe2O9uDxVicJViSpViaZViW5VieFViRlViZVViV1VidNViTtVibdViX9VifDdiQjVjAQhaxMbYn24vtzfZh+7L92P7sAHYgO4gdzA5hh7LD2OHsCHYkO4odzY5hx7Lj2PHsBHYiO4mdzE5hp7LT2OnsDHYmO4udzc5h57Lz2PnsAnYhu4hdzC5hl7LL2OXsCnYlu4pdza5h17Lr2PXsBnYju4ndzG5ht7Lb2O3sDnYnu4vdze5h97L72P3sAfYge4g9zB5hj7LH2OPsCfYke4o9zZ5hz7Ln2PPsBfYie4m9zF5hr7LX2OvsDfYme4u9zd5h77L32PvsA/Yh+4h9zD5hn7LP2OfsC/Yl+4p9zb5h37Lv2PfsB/Yj+4n9zH5h49mv7Df2O/uD/cn+Yn+zf9i/7D82gU1kk3BJuWRcci4Fl5JLxaXm0nBpuXRcei4Dl5HLxGXmsnBZuWxcdi4Hl5PLxeXm8nB5uTguH5efK8AV5ApxhbkiXFGuGFecK8GV5EpxpbkyXFmuHFeeq8BV5CpxlbkqXFWuGledq8HV5Gpxtbk6XF2uHlefa8A15BpxjbkmXFOuGdeca8G15Fpxrbk2XFuuHdee68B15DpxnbkuXFeuG9ed68FhHM4RHMlRHM0xHMtxHM8JnMhJnMwpnMppnM4ZnMlZnM05nMt5nM8FXMhFHOAgh7gY15PrxfXm+nB9uX5cf24AN5AbxA3mhnBDuWHccG4EN5IbxY3mxnBjuXHceG4CN5GbxE3mpnBTuWncdG4GN5Obxc3m5nBzuXncfG4Bt5BbxC3mlnBLuWXccm4Ft5Jbxa3m1nBruXXcem4Dt5HbxG3mtnBbuW3cdm4Ht5Pbxe3m9nB7uX3cfu4Ad5A7xB3mjnBHuWPcce4Ed5I7xZ3mznBnuXPcee4Cd5G7xF3mrnBXuWvcde4Gd5O7xd3m7nB3uXvcfe4B95B7xD3mnnBPuWfcc+4F95J7xb3m3nBvuXfce+4D95H7xH3mvnDx3FfuG/ed+8H95H5xv7k/3F/uH5fAJXJJ+KR8Mj45n4JPyafiU/Np+LR8Oj49n4HPyGfiM/NZ+Kx8Nj47n4PPyefic/N5+Lx8HJ+Pz88X4AvyhfjCfBG+KF+ML86X4EvypfjSfBm+LF+OL89X4CvylfjKfBW+Kl+Nr87X4GvytfjafB2+Ll+Pr8834BvyjfjGfBO+Kd+Mb8634FvyrfjWfBu+Ld+Ob8934DvynfjOfBe+K9+N78734DEe5wme5Cme5hme5Tme5wVe5CVe5hVe5TVe5w3e5C3e5h3e5T3e5wM+5CMe8JBHfIzvyffie/N9+L58P74/P4AfyA/iB/ND+KH8MH44P4IfyY/iR/Nj+LH8OH48P4GfyE/iJ/NT+Kn8NH46P4Ofyc/iZ/Nz+Ln8PH4+v4BfyC/iF/NL+KX8Mn45v4Jfya/iV/Nr+LX8On49v4HfyG/iN/Nb+K38Nn47v4Pfye/id/N7+L38Pn4/f4A/yB/iD/NH+KP8Mf44f4I/yZ/iT/Nn+LP8Of48f4G/yF/iL/NX+Kv8Nf46f4O/yd/ib/N3+Lv8Pf4+/4B/yD/iH/NP+Kf8M/45/4J/yb/iX/Nv+Lf8O/49/4H/yH/iP/Nf+Hj+K/+N/87/4H/yv/jf/B/+L/+PT+AT+SRCUiGZkFxIIaQUUgmphTRCWiGdkF7IIGQUMgmZhSxCViGbkF3IIeQUcgm5hTxCXiFOyCfkFwoIBYVCQmGhiFBUKCYUF0oIJYVSQmmhjFBWKCeUFyoIFYVKQmWhilBVqCZUF2oINYVaQm2hjlBXqCfUFxoIDYVGQmOhidBUaCY0F1oILYVWQmuhjdBWaCe0FzoIHYVOQmehi9BV6CZ0F3oImIALhEAKlEALjMAKnMALgiAKkiALiqAKmqALhmAKlmALjuAKnuALgRAKkQAEKCAhJvQUegm9hT5CX6Gf0F8YIAwUBgmDhSHCUGGYMFwYIYwURgmjhTHCWGGcMF6YIEwUJgmThSnCVGGaMF2YIcwUZgmzhTnCXGGeMF9YICwUFgmLhSXCUmGZsFxYIawUVgmrhTXCWmGdsF7YIGwUNgmbhS3CVmGbsF3YIewUdgm7hT3CXmGfsF84IBwUDgmHhSPCUeGYcFw4IZwUTgmnhTPCWeGccF64IFwULgmXhSvCVeGacF24IdwUbgm3hTvCXeGecF94IDwUHgmPhSfCU+GZ8Fx4IbwUXgmvhTfCW+Gd8F74IHwUPgmfhS9CvPBV+CZ8F34IP4Vfwm/hj/BX+CckCIlCEjGpmExMLqYQU4qpxNRiGjGtmE5ML2YQM4qZxMxiFjGrmE3MLuYQc4q5xNxiHjGvGCfmE/OLBcSCYiGxsFhELCoWE4uLJcSSYimxtFhGLCuWE8uLFcSKYiWxslhFrCpWE6uLNcSaYi2xtlhHrCvWE+uLDcSGYiOxsdhEbCo2E5uLLcSWYiuxtdhGbCu2E9uLHcSOYiexs9hF7Cp2E7uLPURMxEVCJEVKpEVGZEVO5EVBFEVJlEVFVEVN1EVDNEVLtEVHdEVP9MVADMVIBCIUkRgTe4q9xN5iH7Gv2E/sLw4QB4qDxMHiEHGoOEwcLo4QR4qjxNHiGHGsOE4cL04QJ4qTxMniFHGqOE2cLs4QZ4qzxNniHHGuOE+cLy4QF4qLxMXiEnGpuExcLq4QV4qrxNXiGnGtuE5cL24QN4qbxM3iFnGruE3cLu4Qd4q7xN3iHnGvuE/cLx4QD4qHxMPiEfGoeEw8Lp4QT4qnxNPiGfGseE48L14QL4qXxMviFfGqeE28Lt4Qb4q3xNviHfGueE+8Lz4QH4qPxMfiE/Gp+Ex8Lr4QX4qvxNfiG/Gt+E58L34QP4qfxM/iFzFe/Cp+E7+LP8Sf4i/xt/hH/Cv+ExPERDGJlFRKJiWXUkgppVRSaimNlFZKJ6WXMkgZpUxSZimLlFXKJmWXckg5pVxSbimPlFeKk/JJ+aUCUkGpkFRYKiIVlYpJxaUSUkmplFRaKiOVlcpJ5aUKUkWpklRZqiJVlapJ1aUaUk2pllRbqiPVlepJ9aUGUkOpkdRYaiI1lZpJzaUWUkupldRaaiO1ldpJ7aUOUkepk9RZ6iJ1lbpJ3aUeEibhEiGREiXREiOxEifxkiCJkiTJkiKpkibpkiGZkiXZkiO5kif5UiCFUiQBCUpIikk9pV5Sb6mP1FfqJ/WXBkgDpUHSYGmINFQaJg2XRkgjpVHSaGmMNFYaJ42XJkgTpUnSZGmKNFWaJk2XZkgzpVnSbGmONFeaJ82XFkgLpUXSYmmJtFRaJi2XVkgrpVXSammNtFZaJ62XNkgbpU3SZmmLtFXaJm2Xdkg7pV3SbmmPtFfaJ+2XDkgHpUPSYemIdFQ6Jh2XTkgnpVPSaemMdFY6J52XLkgXpUvSZemKdFW6Jl2Xbkg3pVvSbemOdFe6J92XHkgPpUfSY+mJ9FR6Jj2XXkgvpVfSa+mN9FZ6J72XPkgfpU/SZ+mLFC99lb5J36Uf0k/pl/Rb+iP9lf5JCVKilEROKieTk8sp5JRyKjm1nEZOK6eT08sZ5IxyJjmznEXOKmeTs8s55JxyLjm3nEfOK8fJ+eT8cgG5oFxILiwXkYvKxeTicgm5pFxKLi2XkcvK5eTycgW5olxJrixXkavK1eTqcg25plxLri3XkevK9eT6cgO5odxIbiw3kZvKzeTmcgu5pdxKbi23kdvK7eT2cge5o9xJ7ix3kbvK3eTucg8Zk3GZkEmZkmmZkVmZk3lZkEVZkmVZkVVZk3XZkE3Zkm3ZkV3Zk305kEM5koEMZSTH5J5yL7m33EfuK/eT+8sD5IHyIHmwPEQeKg+Th8sj5JHyKHm0PEYeK4+Tx8sT5InyJHmyPEWeKk+Tp8sz5JnyLHm2PEeeK8+T58sL5IXyInmxvEReKi+Tl8sr5JXyKnm1vEZeK6+T18sb5I3yJnmzvEXeKm+Tt8s75J3yLnm3vEfeK++T98sH5IPyIfmwfEQ+Kh+Tj8sn5JPyKfm0fEY+K5+Tz8sX5IvyJfmyfEW+Kl+Tr8s35JvyLfm2fEe+K9+T78sP5IfyI/mx/ER+Kj+Tn8sv5JfyK/m1/EZ+K7+T38sf5I/yJ/mz/EWOl7/K3+Tv8g/5p/xL/i3/kf/K/+QEOVFOoiRVkinJlRRKSiWVklpJo6RV0inplQxKRiWTklnJomRVsinZlRxKTiWXklvJo+RV4pR8Sn6lgFJQKaQUVoooRZViSnGlhFJSKaWUVsooZZVySnmlglJRqaRUVqooVZVqSnWlhlJTqaXUVuoodZV6Sn2lgdJQaaQ0VpooTZVmSnOlhdJSaaW0VtoobZV2Snulg9JR6aR0VrooXZVuSnelh4IpuEIopEIptMIorMIpvCIooiIpsqIoqqIpumIopmIptuIoruIpvhIooRIpQIEKUmJKT6WX0lvpo/RV+in9lQHKQGWQMlgZogxVhinDlRHKSGWUMloZo4xVxinjlQnKRGWSMlmZokxVpinTlRnKTGWWMluZo8xV5inzlQXKQmWRslhZoixVlinLlRXKSmWVslpZo6xV1inrlQ3KRmWTslnZomxVtinblR3KTmWXslvZo+xV9in7lQPKQeWQclg5ohxVjinHlRPKSeWUclo5o5xVzinnlQvKReWSclm5olxVrinXlRvKTeWWclu5o9xV7in3lQfKQ+WR8lh5ojxVninPlRfKS+WV8lp5o7xV3invlQ/KR+WT8ln5osQrX5Vvynflh/JT+aX8Vv4of5V/SoKSqCRRk6rJ1ORqCjWlmkpNraZR06rp1PRqBjWjmknNrGZRs6rZ1OxqDjWnmkvNreZR86pxaj41v1pALagWUgurRdSiajG1uFpCLamWUkurZdSyajm1vFpBrahWUiurVdSqajW1ulpDranWUmurddS6aj21vtpAbag2UhurTdSmajO1udpCbam2UlurbdS2aju1vdpB7ah2UjurXdSuaje1u9pDxVRcJVRSpVRaZVRW5VReFVRRlVRZVVRV1VRdNVRTtVRbdVRX9VRfDdRQjVSgQhWpMbWn2kvtrfZR+6r91P7qAHWgOkgdrA5Rh6rD1OHqCHWkOkodrY5Rx6rj1PHqBHWiOkmdrE5Rp6rT1OnqDHWmOkudrc5R56rz1PnqAnWhukhdrC5Rl6rL1OXqCnWlukpdra5R16rr1PXqBnWjukndrG5Rt6rb1O3qDnWnukvdre5R96r71P3qAfWgekg9rB5Rj6rH1OPqCfWkeko9rZ5Rz6rn1PPqBfWiekm9rF5Rr6rX1OvqDfWmeku9rd5R76r31PvqA/Wh+kh9rD5Rn6rP1OfqC/Wl+kp9rb5R36rv1PfqB/Wj+kn9rH5R49Wv6jf1u/pD/an+Un+rf9S/6j81QU1Uk2hJtWRaci2FllJLpaXW0mhptXRaei2DllHLpGXWsmhZtWxadi2HllPLpeXW8mh5tTgtn5ZfK6AV1ApphbUiWlGtmFZcK6GV1EpppbUyWlmtnFZeq6BV1CpplbUqWlWtmlZdq6HV1GpptbU6Wl2tnlZfa6A11BppjbUmWlOtmdZca6G11FpprbU2WlutndZe66B11DppnbUuWletm9Zd66FhGq4RGqlRGq0xGqtxGq8JmqhJmqwpmqppmq4ZmqlZmq05mqt5mq8FWqhFGtCghrSY1lPrpfXW+mh9tX5af22ANlAbpA3WhmhDtWHacG2ENlIbpY3WxmhjtXHaeG2CNlGbpE3WpmhTtWnadG2GNlObpc3W5mhztXnafG2BtlBbpC3WlmhLtWXacm2FtlJbpa3W1mhrtXXaem2DtlHbpG3WtmhbtW3adm2HtlPbpe3W9mh7tX3afu2AdlA7pB3WjmhHtWPace2EdlI7pZ3WzmhntXPaee2CdlG7pF3WrmhXtWvade2GdlO7pd3W7mh3tXvafe2B9lB7pD3WnmhPtWfac+2F9lJ7pb3W3mhvtXfae+2D9lH7pH3Wvmjx2lftm/Zd+6H91H5pv7U/2l/tn5agJWpJ9KR6Mj25nkJPqafSU+tp9LR6Oj29nkHPqGfSM+tZ9Kx6Nj27nkPPqefSc+t59Lx6nJ5Pz68X0AvqhfTCehG9qF5ML66X0EvqpfTSehm9rF5OL69X0CvqlfTKehW9ql5Nr67X0GvqtfTaeh29rl5Pr6830BvqjfTGehO9qd5Mb6630FvqrfTWehu9rd5Ob6930DvqnfTOehe9q95N76730DEd1wmd1Cmd1hmd1Tmd1wVd1CVd1hVd1TVd1w3d1C3d1h3d1T3d1wM91CMd6FBHekzvqffSe+t99L56P72/PkAfqA/SB+tD9KH6MH24PkIfqY/SR+tj9LH6OH28PkGfqE/SJ+tT9Kn6NH26PkOfqc/SZ+tz9Ln6PH2+vkBfqC/SF+tL9KX6Mn25vkJfqa/SV+tr9LX6On29vkHfqG/SN+tb9K1x2/Tt+g59p75L363v0ffq+/T9+gH9oH5IP6wf0Y/qx/Tj+gn9pH5KP62f0c/q5/Tz+gX9on5Jv6xf0a/q1/Tr+g39pn5Lv63f0e/q9/T7+gP9of5If6w/0Z/qz/Tn+gv9pf5Kf62/0d/q7/T3+gf9o/5J/6x/0eP1r/o3/bv+Q/+p/9J/63/0v/o/PUFP1JMYSY1kRnIjhZHSSGWkNtIYaY10Rnojg5HRyGRkNrIYWY1sRnYjh5HTyGXkNvIYeY04I5+R3yhgFDQKGYWNIkZRo5hR3ChhlDRKGaWNMkZZo5xR3qhgVDQqGZWNKkZVo5pR3ahh1DRqGbWNOkZdo55R32hgNDQaGY2NJkZTo5nR3GhhtDRaGa2NNkZbo53R3uhgdDQ6GZ2NLkZXo5vR3ehhYAZuEAZpUAZtMAZrcAZvCIZoSIZsKIZqaIZuGIZpWIZtOIZreIZvBEZoRAYwoIGMmNHT6GX0NvoYfY1+Rn9jgDHQGGQMNoYYQ41hxnBjhDHSGGWMNsYYY41xxnhjgjHRmGRMNqYYU41pxnRjhjHTmGXMNuYYc415xnxjgbHQWGQsNpYYS41lxnJjhbHSWGWsNtYYa411xnpjg7HR2GRsNrYYW41txnZjh7HT2GXsNvYYe419xn7jgHHQOGQcNo4YR41jxnHjhHHSOGWcNs4YZ41zxnnjgnHRuGRcNq4YV41rxnXjhnHTuGXcNu4Yd417xn3jgfHQeGQ8Np4YT41nxnPjhfHSeGW8Nt4Yb413xnvjg/HR+GR8Nr4Y8cZX45vx3fhh/DR+Gb+NP8Zf45+RYCQaScykZjIzuZnCTGmmMlObacy0ZjozvZnBzGhmMjObWcysZjYzu5nDzGnmMnObecy8ZpyZz8xvFjALmoXMwmYRs6hZzCxuljBLmqXM0mYZs6xZzixvVjArmpXMymYVs6pZzaxu1jBrmrXM2mYds65Zz6xvNjAbmo3MxmYTs6nZzGxutjBbmq3M1mYbs63ZzmxvdjA7mp3MzmYXs6vZzexu9jAxEzcJkzQpkzYZkzU5kzcFUzQlUzYVUzU1UzcN0zQt0zYd0zU90zcDMzQjE5jQRGbM7Gn2Mnubfcy+Zj+zvznAHGgOMgebQ8yh5jBzuDnCHGmOMkebY8yx5jhzvDnBnGhOMiebU8yp5jRzujnDnGnOMmebc8y55jxzvrnAXGguMhebS8yl5jJzubnCXGmuMleba8y15jpzvbnB3GhuMjebW8yt5jZzu7nD3GnuMnebe8y95j5zv3nAPGgeMg+bR8yj5jHzuHnCPGmeMk+bZ8yz5jnzvHnBvGheMi+bV8yr5jXzunnDvGneMm+bd8y75j3zvvnAfGg+Mh+bT8yn5jPzufnCfGm+Ml+bb8y35jvzvfnB/Gh+Mj+bX8x486v5zfxu/jB/mr/M3+Yf86/5z0wwE80kVlIrmZXcSmGltFJZqa00VlornZXeymBltDJZma0sVlYrm5XdymHltHJZua08Vl4rzspn5bcKWAWtQlZhq4hV1CpmFbdKWCWtUlZpq4xV1ipnlbcqWBWtSlZlq4pV1apmVbdqWDWtWlZtq45V16pn1bcaWA2tRlZjq4nV1GpmNbdaWC2tVlZrq43V1mpntbc6WB2tTlZnq4vV1epmdbd6WJiFW4RFWpRFW4zFWpzFW4IlWpIlW4qlWpqlW4ZlWpZlW47lWp7lW4EVWpEFLGghK2b1tHpZva0+Vl+rn9XfGmANtAZZg60h1lBrmDXcGmGNtEZZo60x1lhrnDXemmBNtCZZk60p1lRrmjXdmmHNtGZZs6051lxrnjXfWmAttBZZi60l1lJrmbXcWmGttFZZq6011lprnbXe2mBttDZZm60t1lZrm7Xd2mHttHZZu6091l5rn7XfOmAdtA5Zh60j1lHrmHXcOmGdtE5Zp60z1lnrnHXeumBdtC5Zl60r1lXrmnXdumHdtG5Zt6071l3rnnXfemA9tB5Zj60n1lPrmfXcemG9tF5Zr6031lvrnfXe+mB9tD5Zn60vVrz11fpmfbd+WD+tX9Zv64/11/pnJViJVhI7qZ3MTm6nsFPaqezUdho7rZ3OTm9nsDPamezMdhY7q53Nzm7nsHPauezcdh47rx1n57Pz2wXsgnYhu7BdxC5qF7OL2yXsknYpu7Rdxi5rl7PL2xXsinYlu7Jdxa5qV7Or2zXsmnYtu7Zdx65r17Pr2w3shnYju7HdxG5qN7Ob2y3slnYru7Xdxm5rt7Pb2x3sjnYnu7Pdxe5qd7O72z1szMZtwiZtyqZtxmZtzuZtwRZtyZZtxVZtzdZtwzZty7Ztx3Ztz/btwA7tyAY2tJEds3vavezedh+7r93P7m8PsAfag+zB9hB7qD3MHm6PsEfao+zR9hh7rD3OHm9PsCfak+zJ9hR7qj3Nnm7PsGfas+zZ9hx7rj3Pnm8vsBfai+zF9hJ7qb3MXm6vsFfaq+zV9hp7rb3OXm9vsDfam+zN9hZ7q73N3m7vsHfau+zd9h57r73P3m8fsA/ah+zD9hH7qH3MPm6fsE/ap+zT9hn7rH3OPm9fsC/al+zL9hX7qn3Nvm7fsG/at+zb9h37rn3Pvm8/sB/aj+zH9hP7qf3Mfm6/sF/ar+zX9hv7rf3Ofm9/sD/an+zP9hc73v5qf7O/2z/sn/Yv+7f9x/5r/7MT7EQ7iZPUSeYkd1I4KZ1UTmonjZPWSeekdzI4GZ1MTmYni5PVyeZkd3I4OZ1cTm4nj5PXiXPyOfmdAk5Bp5BT2CniFHWKOcWdEk5Jp5RT2injlHXKOeWdCk5Fp5JT2aniVHWqOdWdGk5Np5ZT26nj1HXqOfWdBk5Dp5HT2GniNHWaOc2dFk5Lp5XT2mnjtHXaOe2dDk5Hp5PT2enidHW6Od2dHg7m4A7hkA7l0A7jsA7n8I7giI7kyI7iqI7m6I7hmI7l2I7juI7n+E7ghE7kAAc6yIk5PZ1eTm+nj9PX6ef0dwY4A51BzmBniDPUGeYMd0Y4I51RzmhnjDPWGeeMdyY4E51JzmRnijPVmeZMd2Y4M51ZzmxnjjPXmefMdxY4C51FzmJnibPUWeYsd1Y4K51VzmpnjbPWWeesdzY4G51NzmZni7PV2eZsd3Y4O51dzm5nj7PX2efsdw44B51DzmHniHPUOeYcd044J51TzmnnjHPWOeecdy44F51LzmXninPVueZcd244N51bzm3njnPXuefcdx44D51HzmPnifPUeeY8d144L51XzmvnjfPWeee8dz44H51PzmfnixPvfHW+Od+dH85P55fz2/nj/HX+OQlOopPETeomc5O7KdyUbio3tZvGTeumc9O7GdyMbiY3s5vFzepmc7O7Odycbi43t5vHzevGufnc/G4Bt6BbyC3sFnGLusXc4m4Jt6Rbyi3tlnHLuuXc8m4Ft6Jbya3sVnGrutXc6m4Nt6Zby63t1nHruvXc+m4Dt6HbyG3sNnGbus3c5m4Lt6Xbym3ttnHbuu3c9m4Ht6Pbye3sdnG7ut3c7m4PF3Nxl3BJl3Jpl3FZl3N5V3BFV3JlV3FVV3N113BN13Jt13Fd13N9N3BDN3KBC13kxtyebi+3t9vH7ev2c/u7A9yB7iB3sDvEHeoOc4e7I9yR7ih3tDvGHeuOc8e7E9yJ7iR3sjvFnepOc6e7M9yZ7ix3tjvHnevOc+e7C9yF7iJ3sbvEXeouc5e7K9yV7ip3tbvGXeuuc9e7G9yN7iZ3s7vF3epuc7e7O9yd7i53t7vH3evuc/e7B9yD7iH3sHvEPeoec4+7J9yT7in3tHvGPeuec8+7F9yL7iX3cvwV96p7zb3u3nBvurfc2+4d9657z73vPnAfuo/cx+4T96n7zH3uvnBfuq/c1+4b9637zn3vfnA/up/cz+4XN9796n5zv7s/3J/uL/e3+8f96/5zE9xEN4mX1EvmJfdSeCm9VF5qL42X1kvnpfcyeBm9TF5mL4uX1cvmZfdyeDm9XF5uL4+X14vz8nn5vQJeQa+QV9gr4hX1innFvRJeSa+UV9or45X1ynnlvQpeRa+SV9mr4lX1qnnVvRpeTa+WV9ur49X16nn1vQZeQ6+R19hr4jX1mnnNvRZeS6+V19pr47X12nntvQ5eR6+T19nr4nX1unndvR4e5uEe4ZEe5dEe47Ee5/Ge4Ime5Mme4qme5ume4Zme5dme47me5/le4IVe5AEPesiLeT29Xl5vr4/X1+vn9fcGeAO9Qd5gb4g31BvmDfdGeCO9Ud5ob4w31hvnjfcmeBO9Sd5kb4o31ZvmTfdmeDO9Wd5sb44315vnzfcWeAu9Rd5ib4m31FvmLfdWeCu9Vd5qb4231lvnrfc2eBu9Td5mb4u31dvmbfd2eDu9Xd5ub4+319vn7fcOeAe9Q95h74h31DvmHfdOeCe9U95p74x31jvnnfcueBe9S95l74p31bvmXfdueDe9W95t745317vn3fceeA+9R95j74n31HvmPfdeeC+9V95r74331nvnvfc+eB+9T95n74sX7331vnnfvR/eT++X99v74/31/nkJXqKXxE/qJ/OT+yn8lH4qP7Wfxk/rp/PT+xn8jH4mP7Ofxc/qZ/Oz+zn8nH4uP7efx8/rx/n5/Px+Ab+gX8gv7Bfxi/rF/OJ+Cb+kX8ov7Zfxy/rl/PJ+Bb+iX8mv7Ffxq/rV/Op+Db+mX8uv7dfx6/r1/Pp+A7+h38hv7Dfxm/rN/OZ+C7+l38pv7bfx2/rt/PZ+B7+j38nv7Hfxu/rd/O5+Dx/zcZ/wSZ/yaZ/xWZ/zeV/wRV/yZV/xVV/zdd/wTd/ybd/xXd/zfT/wQz/ygQ995Mf8nn4vv7ffx+/r9/P7+wP8gf4gf7A/xB/qD/OH+yP8kf4of7Q/xh/rj/PH+xP8if4kf7I/xZ/qT/On+zP8mf4sf7Y/x5/rz/Pn+wv8hf4if7G/xF/qL/OX+yv8lf4qf7W/xl/rr/PX+xv8jf4mf7O/xd/qb/O3+zv8nf4uf7e/x9/r7/P3+wf8g/4h/7B/xD/qH/OP+yf8k/4p/7R/xj/rn/PP+xf8i/4l/7J/xb/qX/Ov+zf8m/4t/7Z/x7/r3/Pv+w/8h/4j/7H/xH/qP/Of+y/8l/4r/7X/xn/rv/Pf+x/8j/4n/7P/xY/3v/rf/O/+D/+n/8v/7f/x//r//AQ/0U8SJA2SBcmDFEHKIFWQOkgTpA3SBemDDEHGIFOQOcgSZA2yBdmDHEHOIFeQO8gT5A3ignxB/qBAUDAoFBQOigRFg2JB8aBEUDIoFZQOygRlg3JB+aBCUDGoFFQOqgRVg2pB9aBGUDOoFdQO6gR1g3pB/aBB0DBoFDQOmgRNg2ZB86BF0DJoFbQO2gRtg3ZB+6BD0DHoFHQOugRdg25B96BHgAV4QARkQAV0wARswAV8IARiIAVyoARqoAV6YARmYAV24ARu4AV+EARhEAUggAEKYkHPoFfQO+gT9A36Bf2DAcHAYFAwOBgSDA2GBcODEcHIYFQwOhgTjA3GBeODCcHEYFIwOZgSTA2mBdODGcHMYFYwO5gTzA3mBfODBcHCYFGwOFgSLA2WBcuDFcHKYFWwOlgTrA3WBeuDDcHGYFOwOdgSbA22BduDHcHOYFewO9gT7A32BfuDA8HB4FBwODgSHA2OBceDE8HJ4FRwOjgTnA3OBeeDC8HF4FJwObgSXA2uBdeDG8HN4FZwO7gT3A3uBfeDB8HD4FHwOHgSPA2eBc+DF8HL4FXwOngTvA3eBe+DD8HH4FPwOfgSxAdfg2/B9+BH8DP4FfwO/gR/g39BQpAYJAmThsnC5GGKMGWYKkwdpgnThunC9GGGMGOYKcwcZgmzhtnC7GGOMGeYK8wd5gnzhnFhvjB/WCAsGBYKC4dFwqJhsbB4WCIsGZYKS4dlwrJhubB8WCGsGFYKK4dVwqphtbB6WCOsGdYKa4d1wrphvbB+2CBsGDYKG4dNwqZhs7B52CJsGbYKW4dtwrZhu7B92CHsGHYKO4ddwq5ht7B72CPEQjwkQjKkQjpkQjbkQj4UQjGUQjlUQjXUQj00QjO0Qjt0Qjf0Qj8MwjCMQhDCEIWxsGfYK+wd9gn7hv3C/uGAcGA4KBwcDgmHhsPC4eGIcGQ4KhwdjgnHhuPC8eGEcGI4KZwcTgmnhtPC6eGMcGY4K5wdzgnnhvPC+eGCcGG4KFwcLgmXhsvC5eGKcGW4KlwdrgnXhuvC9eGGcGO4Kdwcbgm3htvC7eGOcGe4K9wd7gn3hvvC/eGB8GB4KDwcHgmPhsfC4+GJ8GR4KjwdngnPhufC8+GF8GJ4KbwcXgmvhtfC6+GN8GZ4K7wd3gnvhvfC++GD8GH4KHwcPgmfhs/C5+GL8GX4Knwdvgnfhu/C9+GH8GP4Kfwcfgnjw6/ht/B7+CP8Gf4Kf4d/wr/hvzAhTAyTREmjZFHyKEWUMkoVpY7SRGmjdFH6KEOUMcoUZY6yRFmjbFH2KEeUM8oV5Y7yRHmjuChflD8qEBWMCkWFoyJR0ahYVDwqEZWMSkWlozJR2ahcVD6qEFWMKkWVoypR1ahaVD2qEdWMakW1ozpR3aheVD9qEDWMGkWNoyZR06hZ1DxqEbWMWkWtozZR26hd1D7qEHWMOkWdoy5R16hb1D3qEWERHhERGVERHTERG3ERHwmRGEmRHCmRGmmRHhmRGVmRHTmRG3mRHwVRGEURiGCEoljUM+oV9Y76RH2jflH/aEA0MBoUDY6GREOjYdHwaEQ0MhoVjY7GRGOjcdH4aEI0MZoUTY6mRFOjadH0aEY0M5oVzY7mRHOjedH8aEG0MFoULY6WREujZdHyaEW0MloVrY7WRGujddH6aEO0MdoUbY62RFujbdH2aEe0M9oV7Y72RHujfdH+6EB0MDoUHY6OREejY9Hx6ER0MjoVnY7ORGejc9H56EJ0MboUXY6uRFeja9H16EZ0M7oV3Y7uRHeje9H96EH0MHoUPY6eRE+jZ9Hz6EX0MnoVvY7eRG+jd9H76EP0MfoUfY6+RPHR1+hb9D36Ef2MfkW/oz/R3+hflBAlRklAUpAMJAcpQEqQCqQGaUBakA6kBxlARpAJZAZZQFaQDWQHOUBOkAvkBnlAXhAH8oH8oAAoCAqBwqAIKAqKgeKgBCgJSoHSoAwoC8qB8qACqAgqgcqgCqgKqoHqoAaoCWqB2qAOqAvqgfqgAWgIGoHGoAloCpqB5qAFaAlagdagDWgL2oH2oAPoCDqBzqAL6Aq6ge6gB8AADghAAgrQgAEs4AAPBCACCchAASrQgA4MYAIL2MABLvCADwIQgggAAAECMdAT9AK9QR/QF/QD/cEAMBAMAoPBEDAUDAPDwQgwEowCo8EYMBaMA+PBBDARTAKTwRQwFUwD08EMMBPMArPBHDAXzAPzwQKwECwCi8ESsBQsA8vBCrASrAKrwRqwFqwD68EGsBFsApvBFrAVbAPbwQ6wE+wCu8EesBfsA/vBAXAQHAKHwRFwFBwDx8EJcBKcAqfBGXAWnAPnwQVwEVwCl8EVcBVcA9fBDXAT3AK3wR1wF9wD98ED8BA8Ao/BE/AUPAPPwQvwErwCr8Eb8Ba8A+/BB/ARfAKfwRcQD76Cb+A7+AF+gl/gN/gD/oJ/IAEkgiQwKUwGk8MUMCVMBVPDNDAtTAfTwwwwI8wEM8MsMCvMBrPDHDAnzAVzwzwwL4yD+WB+WAAWhIVgYVgEFoXFYHFYApaEpWBpWAaWheVgeVgBVoSVYGVYBVaF1WB1WAPWhLVgbVgH1oX1YH3YADaEjWBj2AQ2hc1gc9gCtoStYGvYBraF7WB72AF2hJ1gZ9gFdoXdYHfYA2IQhwQkIQVpyEAWcpCHAhShBGWoQBVqUIcGNKEFbehAF3rQhwEMYQQBhBDBGOwJe8HesA/sC/vB/nAAHAgHwcFwCBwKh8HhcAQcCUfB0XAMHAvHwfFwApwIJ8HJcAqcCqfB6XAGnAlnwdlwDpwL58H5cAFcCBfBxXAJXAqXweVwBVwJV8HVcA1cC9fB9XAD3Ag3wc1wC9wKt8HtcAfcCXfB3XAP3Av3wf3wADwID8HD8Ag8Co/B4/AEPAlPwdPwDDwLz8Hz8AK8CC/By/AKvAqvwevwBrwJb8Hb8A68C+/B+/ABfAgfwcfwCXwKn8Hn8AV8CV/B1/ANfAvfwffwA/wIP8HP8AuMh1/hN/gd/oA/4S/4G/6Bf+E/mAATYRKUFCVDyVEKlBKlQqlRGpQWpUPpUQaUEWVCmVEWlBVlQ9lRDpQT5UK5UR6UF8WhfCg/KoAKokKoMCqCiqJiqDgqgUqiUqg0KoPKonKoPKqAKqJKqDKqgqqiaqg6qoFqolqoNqqD6qJ6qD5qgBqiRqgxaoKaomaoOWqBWqJWqDVqg9qidqg96oA6ok6oM+qCuqJuqDvqgTCEIwKRiEI0YhCLOMQjAYlIQjJSkIo0pCMDmchCNnKQizzkowCFKEIAQYRQDPVEvVBv1Af1Rf1QfzQADUSD0GA0BA1Fw9BwNAKNRKPQaDQGjUXj0Hg0AU1Ek9BkNAVNRdPQdDQDzUSz0Gw0B81F89B8tAAtRIvQYrQELUXL0HK0Aq1Eq9BqtAatRevQerQBbUSb0Ga0BW1F29B2tAPtRLvQbrQH7UX70H50AB1Eh9BhdAQdRcfQcXQCnUSn0Gl0Bp1F59B5dAFdRJfQZXQFXUXX0HV0A91Et9BtdAfdRffQffQAPUSP0GP0BD1Fz9Bz9AK9RK/Qa/QGvUXv0Hv0AX1En9Bn9AXFo6/oG/qOfqCf6Bf6jf6gv+gfSkCJKEksaSxZLHksRSxlLFUsdSxNLG0sXSx9LEMsYyxTLHMsSyxrLFsseyxHLGcsVyx3LE8sbywuli+WP1YgVjBWKFY4ViRWNFYsVjxWIlYyVipWOlYmVjZWLlY+ViFWMVYpVjlWJVY1Vi1WPVYjVjNWK1Y7VidWN1YvVj/WINYw1ijWONYk1jTWLNY81iLWMtYq1jrWJtY21i7WPtYh1jHWKdY51iXWNdYt1j3WI/afBHgKrHNJAACc2k5t27ZtJalt67dtzcyp7d7atm3btrkP+yVgiVgS1gvrjfXB+mL9sP7YAGwgNggbjA3BhmLDsOHYCGwkNgobjY3BxmLjsPHYBGwiNgmbjE3BpmLTMAzDMQIjMQqjMQZjMQ7jMQETMQmTMQVTMQ3TMQMzMQuzMQdzMQ/zsQALsQgDGMQQFsOmYzOwmdgsbDY2B5uLzcPmYwuwhdgibDG2BFuKLcOWYyuwldgq7D9sNbYGW4utw9ZjG7CN2CZsM7YF24ptw7ZjO7Cd2C5sN7YH24vtw/ZjB7CD2CHsMHYEO4odw45jJ7CT2CnsNHYGO4udw85jF7CL2CXsMnYFu4pdw65jN7Cb2C3sNnYHu4vdw+5jD7CH2CPsMfYEe4o9w55jL7CX2CvsNfYGe4u9w95jH7CP2CfsM/YF+4p9w75jP7Cf2C/sN/YH+4v9w+LwZHhyPAWeEk+Fp8bT4GnxdHh6PAOeEc+EZ8az4FnxbHh2PAcej+fEc+G58Tx4Xjwfnh8vgBfEC+GF8SJ4UbwYXhwvgZfES+Gl8TJ4WbwcXh6vgFfEK+GV8Sp4VbwaXh2vgdfEa+G18Tp4XbweXh9vgDfEG+GN8SZ4U7wZ3hxvgbfEW+Gt8TZ4W7wd3h7vgHfEO+Gd8S54V7wb3h3vgffEE/BEPAnvhffG++B98X54f3wAPhAfhA/Gh+BD8WH4cHwEPhIfhY/Gx+Bj8XH4eHwCPhGfhE/Gp+BT8Wk4huM4gZM4hdM4g7M4h/O4gIu4hMu4gqu4huu4gZu4hdu4g7u4h/t4gId4hAMc4giP4dPxGfhMfBY+G5+Dz8Xn4fPxBfhCfBG+GF+CL8WX4cvxFfhKfBX+H74aX4Ovxdfh6/EN+EZ8E74Z34Jvxbfh2/Ed+E58F54ybg++F9+H78cP4AfxQ/hh/Ah+FD+GH8dP4CfxU/hp/Ax+Fj+Hn8cv4BfxS/hl/Ap+Fb+GX8dv4DfxW/ht/A5+F7+H38cf4A/xR/hj/An+FH+GP8df4C/xV/hr/A3+Fn+Hv8c/4B/xT/hn/Av+Ff+Gf8d/4D/xX/hv/A/+F/+HxxHJiORECiIlkYpITaQh0hLpiPREBiIjkYnITGQhshLZiOxEDiKeyEnkInITeYi8RD4iP1GAKEgUIgoTRYiiRDGiOFGCKEmUIkoTZYiyRDmiPFGBqEhUIioTVYiqRDWiOlGDqEnUImoTdYi6RD2iPtGAaEg0IhoTTYimRDOiOdGCaEm0IloTbYi2RDuiPdGB6Eh0IjoTXYiuRDeiO9GD6EkkEIlEEtGL6E30IfoS/Yj+xABiIDGIGEwMIYYSw4jhxAhiJDGKGE2MIcYS44jxxARiIjGJmExMIaYS0wiMwAmCIAmKoAmGYAmO4AmBEAmJkAmFUAmN0AmDMAmLsAmHcAmP8ImACImIAAQkEBEjphMziJnELGI2MYeYS8wj5hMLiIXEImIxsYRYSiwjlhMriJXEKuI/YjWxhlhLrCPWExuIjcQmYjOxhdhKbCO2EzuIncQuYjexh9hL7CP2EweIg8Qh4jBxhDhKHCOOEyeIk8Qp4jRxhjhLnCPOExeIi8Ql4jJxhbhKXCOuEzeIm8Qt4jZxh7hL3CPuEw+Ih8Qj4jHxhHhKPCOeEy+Il8Qr4jXxhnhLvCPeEx+Ij8Qn4jPxhfhKfCO+Ez+In8Qv4jfxh/hL/CPiyGRkcjIFmZJMRaYm05BpyXRkejIDmZHMRGYms5BZyWxkdjIHGU/mJHORuck8ZF4yH5mfLEAWJAuRhckiZFGyGFmcLEGWJEuRpckyZFmyHFmerEBWJCuRlckqZFWyGlmdrEHWJGuRtck6ZF2yHlmfbEA2JBuRjckmZFOyGdmcbEG2JFuRrck2ZFuyHdme7EB2JDuRnckuZFeyG9md7EH2JBPIRDKJ7EX2JvuQfcl+ZH9yADmQHEQOJoeQQ8lh5HByBDmSHEWOJseQY8lx5HhyAjmRnEROJqeQU8lpJEbiJEGSJEXSJEOyJEfypECKpETKpEKqpEbqpEGapEXapEO6pEf6ZECGZEQCEpKIjJHTyRnkTHIWOZucQ84l55HzyQXkQnIRuZhcQi4ll5HLyRXkSnIV+R+5mlxDriXXkevJDeRGchO5mdxCbiW3kdvJHeROche5m9xD7iX3kfvJA+RB8hB5mDxCHiWPkcfJE+RJ8hR5mjxDniXPkefJC+RF8hJ5mbxCXiWvkdfJG+RN8hZ5m7xD3iXvkffJB+RD8hH5mHxCPiWfkc/JF+RL8hX5mnxDviXfke/JD+RH8hP5mfxCfiW/kd/JH+RP8hf5m/xD/iX/kXFUMio5lYJKSaWiUlNpqLRUOio9lYHKSGWiMlNZqKxUNio7lYOKp3JSuajcVB4qL5WPyk8VoApShajCVBGqKFWMKk6VoEpSpajSVBmqLFWOKk9VoCpSlajKVBWqKlWNqk7VoGpStajaVB2qLlWPqk81oBpSjajGVBOqKdWMak61oFpSrajWVBuqLdWOak91oDpSnajOVBeqK9WN6k71oHpSCVQilUT1onpTfai+VD+qPzWAGkgNogZTQ6ih1DBqODWCGkmNokZTY6ix1DhqPDWBmkhNoiZTU6ip1DQKo3CKoEiKomiKoViKo3hKoERKomRKoVRKo3TKoEzKomzKoVzKo3wqoEIqogAFKUTFqOnUDGomNYuaTc2h5lLzqPnUAmohtYhaTC2hllLLqOXUCmoltYr6j1pNraHWUuuo9dQGaiO1idpMbaG2Utuo7dQOaie1i9pN7aH2Uvuo/dQB6iB1iDpMHaGOUseo49QJ6iR1ijpNnaHOUueo89QF6iJ1ibpMXaGuUteo69QN6iZ1i7pN3aHuUveo+9QD6iH1iHpMPaGeUs+o59QL6iX1inpNvaHeUu+o99QH6iP1ifpMfaG+Ut+o79QP6if1i/pN/aH+Uv+oODoZnZxOQaekU9Gp6TR0WjodnZ7OQGekM9GZ6Sx0VjobnZ3OQcfTOelcdG46D52XzkfnpwvQBelCdGG6CF2ULkYXp0vQJelSdGm6DF2WLkeXpyvQFelKdGW6Cl2VrkZXp2vQNeladG26Dl2XrkfXpxvQDelGdGO6Cd2UbkY3p1vQLelWdGu6Dd2Wbke3pzvQHelOdGe6C92V7kZ3p3vQPekEOpFOonvRvek+dF+6H92fHkAPpAfRg+kh9FB6GD2cHkGPpEfRo+kx9Fh6HD2enkBPpCfRk+kp9FR6Go3ROE3QJE3RNM3QLM3RPC3QIi3RMq3QKq3ROm3QJm3RNu3QLu3RPh3QIR3RgIY0omP0dHoGPZOeRc+m59Bz6Xn0fHoBvZBeRC+ml9BL6WX0cnoFvZJeRf9Hr6bX0GvpdfR6egO9kd5Eb6a30FvpbfR2ege9k95F76b30HvpffR++gB9kD5EH6aP0EfpY/Rx+gR9kj5Fn6bP0Gfpc/R5+gJ9kb5EX6av0Ffpa/R1+gZ9k75F36bv0Hfpe/R9+gH9kH5EP6af0E/pZ/Rz+gX9kn5Fv6bf0G/pd/R7+gP9kf5Ef6a/0F/pb/R3+gf9k/5F/6b/0H/pf3Qck4xJzqRgUjKpmNRMGiYtk45Jz2RgMjKZmMxMFiYrk43JzuRg4pmcTC4mN5OHycvkY/IzBZiCTCGmMFOEKcoUY4ozJZiSTCmmNFOGKcuUY8ozFZiKTCWmMlOFqcpUY6ozNZiaTC2mNlOHqcvUY+ozDZiGTCOmMdOEaco0Y5ozLZiWTCumNdOGacu0Y9ozHZiOTCemM9OF6cp0Y7ozPZieTAKTyCQxvZjeTB+mL9OP6c8MYAYyg5jBzBBmKDOMGc6MYEYyo5jRzBhmLDOOGc9MYCYyk5jJzBRmKjONwRicIRiSoRiaYRiW4RieERiRkRiZURiV0RidMRiTsRibcRiX8RifCZiQiRjAQAYxMWY6M4OZycxiZjNzmLnMPGY+s4BZyCxiFjNLmKXMMmY5s4JZyaxi/mNWM2uYtcw6Zj2zgdnIbGI2M1uYrcw2Zjuzg9nJ7GJ2M3uYvcw+Zj9zgDnIHGIOM0eYo8wx5jhzgjnJnGJOM2eYs8w55jxzgbnIXGIuM1eYq8w15jpzg7nJ3GJuM3eYu8w95j7zgHnIPGIeM0+Yp8wz5jnzgnnJvGJeM2+Yt8w75j3zgfnIfGI+M1+Yr8w35jvzg/nJ/GJ+M3+Yv8w/Jo5NxiZnU7Ap2VRsajYNm5ZNx6ZnM7AZ2UxsZjYLm5XNxmZnc7DxbE42F5ubzcPmZfOx+dkCbEG2EFuYLcIWZYuxxdkSbEm2FFuaLcOWZcux5dkKbEW2EluZrcJWZaux1dkabE22FlubrcPWZeux9dkGbEO2EduYbcI2ZZuxzdkWbEu2FduabcO2Zdux7dkObEe2E9uZ7cJ2Zbux3dkebE82gU1kk9hebG+2D9uX7cf2ZwewA9lB7GB2CDuUHcYOZ0ewI9lR7Gh2DDuWHceOZyewE9lJ7GR2CjuVncZiLM4SLMlSLM0yLMtyLM8KrMhKrMwqrMpqrM4arMlarM06rMt6rM8GbMhGLGAhi9gYO52dwc5kZ7Gz2TnsXHYeO59dwC5kF7GL2SXsUnYZu5xdwa5kV7F83Gp2DbuWXceuZzewG9lN7GZ2C7uV3cZuZ3ewO9ld7G52D7uX3cfuZw+wB9lD7GH2CHuUPcYeZ0+wJ9lT7Gn2DHuWPceeZy+wF9lL7GX2CnuVvcZeZ2+wN9lb7G32DnuXvcfeZx+wD9lH7GP2CfuUfcY+Z1+wL9lX7Gv2DfuWfce+Zz+wH9lP7Gf2C/uV/cZ+Z3+wP9lf7G/2D/uX/cfGccm45FwKLiWXikvNpeHScum49FwGLiOXicvMZeGyctm47FwOLp7LyeXicnN5uLxcPi4/V4AryBXiCnNFuKJcMa44V4IryZXiSnNluLJcOa48V4GryFXiKnNVuKpcNa46V4OrydXianN1uLpcPa4+14BryDXiGnNNuKZcM64514JrybXiWnNtuLZcO64914HryHXiOnNduK5cN64714PrySVwiVwS14vrzfXh+nL9uP7cAG4gN4gbzA3hhnLDuOHcCG4kN4obzY3hxnLjuPHcBG4iN4mbzE3hpnLTOIzDOYIjOYqjOYZjOY7jOYETOYmTOYVTOY3TOYMzOYuzOYdzOY/zuYALuYgDHOQQF+OmczO4mdwsbjY3h5vLzePmcwu4hdwibjG3hFvKLeOWcyu4ldwq7j9uNbeGW8ut49ZzG7iN3CZuM7eF28pt47ZzO7id3C5uN7eH28vt4/ZzB7iD3CHuMHeEO8od445zJ7iT3CnuNHeGO8ud485zF7iL3CXuMneFu8pd465zN7ib3C3uNneHu8vd4+5zD7iH3CPuMfeEe8o9455zL7iX3CvuNfeGe8u9495zH7iP3CfuM/eF+8p9475zP7if3C/uN/eH+8v94+L4ZHxyPgWfkk/Fp+bT8Gn5dHx6PgOfkc/EZ+az8Fn5bHx2Pgcfz+fkc/G5+Tx8Xj4fn58vwBfkC/GF+SJ8Ub4YX5wvwZfkS/Gl+TJ8Wb4cX56vwFfkK/GV+Sp8Vb4aX52vwdfka/G1+Tp8Xb4eX59vwDfkG/GN+SZ8U74Z35xvwbfkW/Gt+TZ8W74d357vwHfkO/Gd+S58V74b353vwffkE/hEPonvxffm+/B9+X58f34AP5AfxA/mh/BD+WH8cH4EP5IfxY/mx/Bj+XH8eH4CP5GfxE/mp/BT+Wk8xuM8wZM8xdM8w7M8x/O8wIu8xMu8wqu8xuu8wZu8xdu8w7u8x/t8wId8xAMe8oiP8dP5GfxMfhY/m5/Dz+Xn8fP5BfxCfhG/mF/CL+WX8cv5FfxKfhX/H7+aX8Ov5dfx6/kN/EZ+E7+Z38Jv5bfx2/kd/E5+F7+b38Pv5ffx+/kD/EH+EH+YP8If5Y/xx/kT/En+FH+aP8Of5c/x5/kL/EX+En+Zv8Jf5a/x1/kb/E3+Fn+bv8Pf5e/x9/kH/EP+Ef+Yf8I/5Z/xz/kX/Ev+Ff+af8O/5d/x7/kP/Ef+E/+Z/8J/5b/x3/kf/E/+F/+b/8P/5f/xcUIyIbmQQkgppBJSC2mEtEI6Ib2QQcgoZBIyC1mErEI2IbuQQ4gXcgq5hNxCHiGvkE/ILxQQCgqFhMJCEaGoUEwoLpQQSgqlhNJCGaGsUE4oL1QQKgqVhMpCFaGqUE2oLtQQagq1hNpCHaGuUE+oLzQQGgqNhMZCE6Gp0ExoLrQQWgqthNZCG6Gt0E5oL3QQOgqdhM5CF6Gr0E3oLvQQegoJQqKQJPQSegt9hL5CP6G/MEAYKAwSBgtDhKHCMGG4MEIYKYwSRgtjhLHCOGG8MEGYKEwSJgtThKnCNAETcIEQSIESaIERWIETeEEQREESZEERVEETdMEQTMESbMERXMETfCEQQiESgAAFJMSE6cIMYaYwS5gtzBHmCvOE+cICYaGwSFgsLBGWCsuE5cIKYaWwSvhPWC2sEdYK64T1wgZho7BJ2CxsEbYK24Ttwg5hp7BL2C3sEfYK+4T9wgHhoHBIOCwcEY4Kx4TjwgnhpHBKOC2cEc4K54TzwgXhonBJuCxcEa4K14Trwg3hpnBLuC3cEe4K94T7wgPhofBIeCw8EZ4Kz4TnwgvhpfBKeC28Ed4K74T3wgfho/BJ+Cx8Eb4K34Tvwg/hp/BL+C38Ef4K/4Q4MZmYXEwhphRTianFNGJaMZ2YXswgZhQziZnFLGJWMZuYXcwhxos5xVxibjGPmFfMJ+YXC4gFxUJiYbGIWFQsJhYXS4glxVJiabGMWFYsJ5YXK4gVxUpiZbGKWFWsJlYXa4g1xVpibbGOWFesJ9YXG4gNxUZiY7GJ2FRsJjYXW4gtxVZia7GN2FZsJ7YXO4gdxU5iZ7GL2FXsJnYXe4g9xQQxUUwSe4m9xT5iX7Gf2F8cIA4UB4mDxSHiUHGYOFwcIY4UR4mjxTHiWHGcOF6cIE4UJ4mTxSniVHGaiIm4SIikSIm0yIisyIm8KIiiKImyqIiqqIm6aIimaIm26Iiu6Im+GIihGIlAhCISY+J0cYY4U5wlzhbniHPFeeJ8cYG4UFwkLhaXiEvFZeJycYW4Ulwl/ieuFteIa8V14npxg7hR3CRuFreIW8Vt4nZxh7hT3CXuFveIe8V94n7xgHhQPCQeFo+IR8Vj4nHxhHhSPCWeFs+IZ8Vz4nnxgnhRvCReFq+IV8Vr4nXxhnhTvCXeFu+Id8V74n3xgfhQfCQ+Fp+IT8Vn4nPxhfhSfCW+Ft+Ib8V34nvxg/hR/CR+Fr+IX8Vv4nfxh/hT/CX+Fv+If8V/YpyUTEoupZBSSqmk1FIaKa2UTkovZZAySpmkzFIWKauUTcou5ZDipZxSLim3lEfKK+WT8ksFpIJSIamwVEQqKhWTikslpJJSKam0VEYqK5WTyksVpIpSJamyVEWqKlWTqks1pJpSLam2VEeqK9WT6ksNpIZSI6mx1ERqKjWTmkstpJZSK6m11EZqK7WT2ksdpI5SJ6mz1EXqKnWTuks9pJ5SgpQoJUm9pN5SH6mv1E/qLw2QBkqDpMHSEGmoNEwaLo2QRkqjpNHSGGmsNE4aL02QJkqTpMnSFGmqNE3CJFwiJFKiJFpiJFbiJF4SJFGSJFlSJFXSJF0yJFOyJFtyJFfyJF8KpFCKJCBBCUkxabo0Q5opzZJmS3OkudI8ab60QFooLZIWS0ukpdIyabm0QloprZL+k1ZLa6S10jppvbRB2ihtkjZLW6St0jZpu7RD2intknZLe6S90j5pv3RAOigdkg5LR6Sj0jHpuHRCOimdkk5LZ6Sz0jnpvHRBuihdki5LV6Sr0jXpunRDuindkm5Ld6S70j3pvvRAeig9kh5LT6Sn0jPpufRCeim9kl5Lb6S30jvpvfRB+ih9kj5LX6Sv0jfpu/RD+in9kn5Lf6S/0j8pTk4mJ5dTyCnlVHJqOY2cVk4np5czyBnlTHJmOYucVc4mZ5dzyPFyTjmXnFvOI+eV88n55QJyQbmQXFguIheVi8nF5RJySbmUXFouI5eVy8nl5QpyRbmSXFmuIleVq8nV5RpyTbmWXFuuI9eV68n15QZyQ7mR3FhuIjeVm8nN5RZyS7mV3FpuI7eV28nt5Q5yR7mT3FnuIneVu8nd5R5yTzlBTpST5F5yb7mP3FfuJ/eXB8gD5UHyYHmIPFQeJg+XR8gj5VHyaHmMPFYeJ4+XJ8gT5UnyZHmKPFWeJmMyLhMyKVMyLTMyK3MyLwuyKEuyLCuyKmuyLhuyKVuyLTuyK3uyLwdyKEcykKGM5Jg8XZ4hz5RnybPlOfJceZ48X14gL5QXyYvlJfJSeZm8XF4hr5RXyf/Jq+U18lp5nbxe3iBvlDfJm+Ut8lZ5m7xd3iHvlHfJu+U98l55n7xfPiAflA/Jh+Uj8lH5mHxcPiGflE/Jp+Uz8ln5nHxeviBflC/Jl+Ur8lX5mnxdviHflG/Jt+U78l35nnxffiA/lB/Jj+Un8lP5mfxcfiG/lF/Jr+U38lv5nfxe/iB/lD/Jn+Uv8lf5m/xd/iH/lH/Jv+U/8l/5nxynJFOSKymUlEoqJbWSRkmrpFPSKxmUjEomJbOSRcmqZFOyKzmUeCWnkkvJreRR8ir5lPxKAaWgUkgprBRRiirFlOJKCaWkUkoprZRRyirllPJKBaWiUkmprFRRqirVlOpKDaWmUkuprdRR6ir1lPpKA6Wh0khprDRRmirNlOZKC6Wl0kpprbRR2irtlPZKB6Wj0knprHRRuirdlO5KD6WnkqAkKklKL6W30kfpq/RT+isDlIHKIGWwMkQZqgxThisjlJHKKGW0MkYZq4xTxisTlInKJGWyMkWZqkxTMAVXCIVUKIVWGIVVOIVXBEVUJEVWFEVVNEVXDMVULMVWHMVVPMVXAiVUIgUoUEFKTJmuzFBmKrOU2cocZa4yT5mvLFAWKouUxcoSZamyTFmurFBWKquU/5TVyhplrbJOWa9sUDYqm5TNyhZlq7JN2a7sUHYqu5Tdyh5lr7JP2a8cUA4qh5TDyhHlqHJMOa6cUE4qp5TTyhnlrHJOOa9cUC4ql5TLyhXlqnJNua7cUG4qt5Tbyh3lrnJPua88UB4qj5THyhPlqfJMea68UF4qr5TXyhvlrfJOea98UD4qn5TPyhflq/JN+a78UH4qv5Tfyh/lr/JPiVOTqcnVFGpKNZWaWk2jplXTqenVDGpGNZOaWc2iZlWzqdnVHGq8mlPNpeZW86h51XxqfrWAWlAtpBZWi6hF1WJqcbWEWlItpZZWy6hl1XJqebWCWlGtpFZWq6hV1WpqdbWGWlOtpdZW66h11XpqfbWB2lBtpDZWm6hN1WZqc7WF2lJtpbZW26ht1XZqe7WD2lHtpHZWu6hd1W5qd7WH2lNNUBPVJLWX2lvto/ZV+6n91QHqQHWQOlgdog5Vh6nD1RHqSHWUOlodo45Vx6nj1QnqRHWSOlmdok5Vp6mYiquESqqUSquMyqqcyquCKqqSKquKqqqaqquGaqqWaquO6qqe6quBGqqRClSoIjWmTldnqDPVWepsdY46V52nzlcXqAvVRepidYm6VF2mLldXqCvVVep/6mp1jbpWXaeuVzeoG9VN6mZ1i7pV3aZuV3eoO9Vd6m51j7pX3afuVw+oB9VD6mH1iHpUPaYeV0+oJ9VT6mn1jHpWPaeeVy+oF9VL6mX1inpVvaZeV2+oN9Vb6m31jnpXvafeVx+oD9VH6mP1ifpUfaY+V1+oL9VX6mv1jfpWfae+Vz+oH9VP6mf1i/pV/aZ+V3+oP9Vf6m/1j/pX/afGacm05FoKLaWWSkutpdHSaum09FoGLaOWScusZdGyatm07FoOLV7LqeXScmt5tLxaPi2/VkArqBXSCmtFtKJaMa24VkIrqZXSSmtltLJaOa28VkGrqFXSKmtVtKpaNa26VkOrqdXSamt1tLpaPa2+1kBrqDXSGmtNtKZaM6251kJrqbXSWmtttLZaO6291kHrqHXSOmtdtK5aN6271kPrqSVoiVqS1kvrrfXR+mr9tP7aAG2gNkgbrA3RhmrDtOHaCG2kNkobrY3RxmrjtPHaBG2iNkmbrE3RpmrTNEzDNUIjNUqjNUZjNU7jNUETNUmTNUVTNU3TNUMzNUuzNUdzNU/ztUALtUgDGtSQFtOmazO0mdosbbY2R5urzdPmawu0hdoibbG2RFuqLdOWayu0ldoq7T9ttbZGW6ut09ZrG7SN2iZts7ZF26pt07ZrO7Sd2i5tt7ZH26vt0/ZrB7SD2iHtsHZEO6od045rJ7ST2inttHZGO6ud085rF7SL2iXtsnZFu6pd065rN7Sb2i3ttnZHu6vd0+5rD7SH2iPtsfZEe6o9055rL7SX2ivttfZGe6u9095rH7SP2ifts/ZF+6p9075rP7Sf2i/tt/ZH+6v90+L0ZHpyPYWeUk+lp9bT6Gn1dHp6PYOeUc+kZ9az6Fn1bHp2PYcer+fUc+m59Tx6Xj2fnl8voBfUC+mF9SJ6Ub2YXlwvoZfUS+ml9TJ6Wb2cXl6voFfUK+mV9Sp6Vb2aXl2vodfUa+m19Tp6Xb2eXl9voDfUG+mN9SZ6U72Z3lxvobfUW+mt9TZ6W72d3l7voHfUO+md9S56V72b3l3voffUE/REPUnvpffW++h99X56f32APlAfpA/Wh+hD9WH6cH2EPlIfpY/Wx+hj9XH6eH2CPlGfpE/Wp+hT9Wk6puM6oZM6pdM6o7M6p/O6oIu6pMu6oqu6puu6oZu6pdu6o7u6p/t6oId6pAMd6kiP6dP1GfpMfZY+W5+jz9Xn6fP1BfpCfZG+WF+iL9WX6cv1FfpKfZX+n75aX6Ov1dfp6/UN+kZ9k75Z36Jv1bfp2/Ud+k59l75b36Pv1ffp+/UD+kH9kH5YP6If1Y/px/UT+kn9lH5aP6Of1c/p5/UL+kX9kn5Zv6Jf1a/p1/Ub+k39ln5bv6Pf1e/p9/UH+kP9kf5Yf6I/1Z/pz/UX+kv9lf5af6O/1d/p7/UP+kf9k/5Z/6J/1b/p3/Uf+k/9l/5b/6P/1f/pcUYyI7mRwkhppDJSG2mMtEY6I72RwchoZDIyG1mMrEY2I7uRw4g3chq5jNxGHiOvkc/IbxQwChqFjMJGEaOoUcwobpQwShqljNJGGaOsUc4ob1QwKhqVjMpGFaOqUc2obtQwahq1jNpGHaOuUc+obzQwGhqNjMZGE6Op0cxobrQwWhqtjNZGG6Ot0c5ob3QwOhqdjM5GF6Or0c3obvQwehoJRqKRZPQyeht9jL5GP6O/McAYaAwyBhtDjKHGMGO4McIYaYwyRhtjjLHGOGO8McGYaEwyJhtTjKnGNAMzcIMwSIMyaIMxWIMzeEMwREMyZEMxVEMzdMMwTMMybMMxXMMzfCMwQiMygAENZMSM6cYMY6Yxy5htzDHmGvOM+cYCY6GxyFhsLDGWGsuM5cYKY6WxyvjPWG2sMdYa64z1xgZjo7HJ2GxsMbYa24ztxg5jp7HL2G3sMfYa+4z9xgHjoHHIOGwcMY4ax4zjxgnjpHHKOG2cMc4a54zzxgXjonHJuGxcMa4a14zrxg3jpnHLuG3cMe4a94z7xgPjofHIeGw8MZ4az4znxgvjpfHKeG28Md4a74z3xgfjo/HJ+Gx8Mb4a34zvxg/jp/HL+G38Mf4a/4w4M5mZ3ExhpjRTmanNNGZaM52Z3sxgZjQzmZnNLGZWM5uZ3cxhxps5zVxmbjOPmdfMZ+Y3C5gFzUJmYbOIWdQsZhY3S5glzVJmabOMWdYsZ5Y3K5gVzUpmZbOKWdWsZlY3a5g1zVpmbbOOWdesZ9Y3G5gNzUZmY7OJ2dRsZjY3W5gtzVZma7ON2dZsZ7Y3O5gdzU5mZ7OL2dXsZnY3e5g9zQQz0Uwye5m9zT5mX7Of2d8cYA40B5mDzSHmUHOYOdwcYY40R5mjzTHmWHOcOd6cYE40J5mTzSnmVHOaiZm4SZikSZm0yZisyZm8KZiiKZmyqZiqqZm6aZimaZm26Ziu6Zm+GZihGZnAhCYyY+Z0c4Y505xlzjbnmHPNeeZ8c4G50FxkLjaXmEvNZeZyc4W50lxl/meuNteYa8115npzg7nR3GRuNreYW81t5nZzh7nT3GXuNveYe8195n7zgHnQPGQeNo+YR81j5nHzhHnSPGWeNs+YZ81z5nnzgnnRvGReNq+YV81r5nXzhnnTvGXeNu+Yd8175n3zgfnQfGQ+Np+YT81n5nPzhfnSfGW+Nt+Yb8135nvzg/nR/GR+Nr+YX81v5nfzh/nT/GX+Nv+Yf81/ZpyVzEpupbBSWqms1FYaK62VzkpvZbAyWpmszFYWK6uVzcpu5bDirZxWLiu3lcfKa+Wz8lsFrIJWIauwVcQqahWzilslrJJWKau0VcYqa5WzylsVrIpWJauyVcWqalWzqls1rJpWLau2Vceqa9Wz6lsNrIZWI6ux1cRqajWzmlstrJZWK6u11cZqa7Wz2lsdrI5WJ6uz1cXqanWzuls9rJ5WgpVoJVm9rN5WH6uv1c/qbw2wBlqDrMHWEGuoNcwabo2wRlqjrNHWGGusNc4ab02wJlqTrMnWFGuqNc3CLNwiLNKiLNpiLNbiLN4SLNGSLNlSLNXSLN0yLNOyLNtyLNfyLN8KrNCKLGBBC1kxa7o1w5ppzbJmW3OsudY8a761wFpoLbIWW0uspdYya7m1wlpprbL+s1Zba6y11jprvbXB2mhtsjZbW6yt1jZru7XD2mntsnZbe6y91j5rv3XAOmgdsg5bR6yj1jHruHXCOmmdsk5bZ6yz1jnrvHXBumhdsi5bV6yr1jXrunXDumndsm5bd6y71j3rvvXAemg9sh5bT6yn1jPrufXCemm9sl5bb6y31jvrvfXB+mh9sj5bX6yv1jfru/XD+mn9sn5bf6y/1j8rzk5mJ7dT2CntVHZqO42d1k5np7cz2BntTHZmO4ud1c5mZ7dz2PF2TjuXndvOY+e189n57QJ2QbuQXdguYhe1i9nF7RJ2SbuUXdouY5e1y9nl7Qp2RbuSXdmuYle1q9nV7Rp2TbuWXduuY9e169n17QZ2Q7uR3dhuYje1m9nN7RZ2S7uV3dpuY7e129nt7Q52R7uT3dnuYne1u9nd7R52TzvBTrST7F52b7uP3dfuZ/e3B9gD7UH2YHuIPdQeZg+3R9gj7VH2aHuMPdYeZ4+3J9gT7Un2ZHuKPdWeZmM2bhM2aVM2bTM2a3M2bwu2aEu2bCu2amu2bhu2aVu2bTu2a3u2bwd2aEc2sKGN7Jg93Z5hz7Rn2bPtOfZce549315gL7QX2YvtJfZSe5m93F5hr7RX2f/Zq+019lp7nb3e3mBvtDfZm+0t9lZ7m73d3mHvtHfZu+099l57n73fPmAftA/Zh+0j9lH7mH3cPmGftE/Zp+0z9ln7nH3evmBftC/Zl+0r9lX7mn3dvmHftG/Zt+079l37nn3ffmA/tB/Zj+0n9lP7mf3cfmG/tF/Zr+039lv7nf3e/mB/tD/Zn+0v9lf7m/3d/mH/tH/Zv+0/9l/7nx3nJHOSOymclE4qJ7WTxknrpHPSOxmcjE4mJ7OTxcnqZHOyOzmceCenk8vJ7eRx8jr5nPxOAaegU8gp7BRxijrFnOJOCaekU8op7ZRxyjrlnPJOBaeiU8mp7FRxqjrVnOpODaemU8up7dRx6jr1nPpOA6eh08hp7DRxmjrNnOZOC6el08pp7bRx2jrtnPZOB6ej08np7HRxujrdnO5OD6enk+AkOklOL6e308fp6/Rz+jsDnIHOIGewM8QZ6gxzhjsjnJHOKGe0M8YZ64xzxjsTnInOJGeyM8WZ6kxzMAd3CId0KId2GCc+7v9ER3JkR3FUR3N0x3BMx3Jsx3Fcx3N8J3BCJ3KAAx3kxJzpzgxnpjPLme3MceY685z5zgJnobPIWewscZY6y5zlzgpnpbPK+c9Z7axx1jrrnPXOBmejs8nZ7GxxtjrbnO3ODmens8vZ7exx9jr7nP3OAeegc8g57BxxjjrHnOPOCeekc8o57ZxxzjrnnPPOBeeic8m57FxxrjrXnOvODeemc8u57dxx7jr3nPvOA+eh88h57DxxnjrPnOfOC+el88p57bxx3jrvnPfOB+ej88n57HxxvjrfnO/OD+en88v57fxx/jr/nDg3mZvcTeGmdFO5qd00blo3nZvezeBmdDO5md0sblY3m5vdzeHGuzndXG5uN4+b183n5ncLuAXdQm5ht4hb1C3mFndLuCXdUm5pt4xb1i3nlncruBXdSm5lt4pb1a3mVndruDXdWm5tt45b163n1ncbuA3dRm5jt4nb1G3mNndbuC3dVm5rt43b1m3ntnc7uB3dTm5nt4vb1e3mdnd7uD3dBDfRTXJ7ub3dPm5ft5/b3x3gDnQHuYPdIe5Qd5g73B3hjnRHuaPdMe5Yd5w73p3gTnQnuZPdKe5Ud5qLubhLuKRLubTLuKzLubwruKIrubKruKqrubpruKZrubbruK7rub4buKEbucCFLnJj7nR3hjvTneXOdue4c9157nx3gbvQXeQudpe4S91l7nJ3hbvSXeX+565217hr3XXueneDu9Hd5G52t7hb3W3udneHu9Pd5e5297h73X3ufveAe9A95B52j7hH3WPucfeEe9I95Z52z7hn3XPuefeCe9G95F52r7hX3WvudfeGe9O95d5277h33XvuffeB+9B95D52n7hP3Wfuc/eF+9J95b5237hv3Xfue/eD+9H95H52v7hf3W/ud/eH+9P95f52/7h/3X9unJfMS+6l8FJ6qbzUXhovrZfOS+9l8DJ6mbzMXhYvq5fNy+7l8OK9nF4uL7eXx8vr5fPyewW8gl4hr7BXxCvqFfOKeyW8kl4pr7RXxivrlfPKexW8il4lr7JXxavqVfOqezW8ml4tr7ZXx6vr1fPqew28hl4jr7HXxGvqNfOaey28ll4rr7XXxmvrtfPaex28jl4nr7PXxevqdfO6ez28nl6Cl+gleb283l4fr6/Xz+vvDfAGeoO8wd4Qb6g3zBvujfBGeqO80d4Yb6w3zhvvTfAmepO8yd4Ub6o3zcM83CM80qM82mM81uM83hM80ZM82VM81dM83TM807M823M81/M83wu80Is84EEPeTFvujfDm+nN8mZ7c7y53jxvvrfAW+gt8hZ7S7yl3jJvubfCW+mt8v7zVntrvLXeOm+9t8Hb6G3yNntbvK3eNm+7t8Pb6e3ydnt7vL3ePm+/d8A76B3yDntHvKPeMe+4d8I76Z3yTntnvLPeOe+8d8G76F3yLntXvKveNe+6d8O76d3ybnt3vLvePe++98B76D3yHntPvKfeM++598J76b3yXntvvLfeO++998H76H3yPntfvK/eN++798P76f3yfnt/vL/ePy/OT+Yn91P4Kf1Ufmo/jZ/WT+en9zP4Gf1MfmY/i5/Vz+Zn93P48X5OP5ef28/j5/Xz+fn9An5Bv5Bf2C/iF/WL+cX9En5Jv5Rf2i/jl/XL+eX9Cn5Fv5Jf2a/iV/Wr+dX9Gn5Nv5Zf26/j1/Xr+fX9Bn5Dv5Hf2G/iN/Wb+c39Fn5Lv5Xf2m/jt/Xb+e39Dn5Hv5Pf2e/id/W7+d39Hn5PP8FP9JP8Xn5vv4/f1+/n9/cH+AP9Qf5gf4g/1B/mD/dH+CP9Uf5of4w/1h/nj/cn+BP9Sf5kf4o/1Z/mYz7uEz7pUz7tMz7rcz7vC77oS77sK77qa77uG77pW77tO77re77vB37oRz7woY/8mD/dn+HP9Gf5s/05/lx/nj/fX+Av9Bf5i/0l/lJ/mb/cX+Gv9Ff5//mr/TX+Wn+dv97f4G/0N/mb/S3+Vn+bv93f4e/0d/m7/T3+Xn+fv98/4B/0D/mH/SP+Uf+Yf9w/4Z/0T/mn/TP+Wf+cf96/4F/0L/mX/Sv+Vf+af92/4d/0b/m3/Tv+Xf+ef99/4D/0H/mP/Sf+U/+Z/9x/4b/0X/mv/Tf+W/+d/97/4H/0P/mf/S/+V/+b/93/4f/0f/m//T/+X/+fHxckC5IHKYKUQaogdZAmSBukC9IHGYKMQaYgc5AlyBpkC7IHOYL4IGeQK8gd5AnyBvmC/EGBoGBQKCgcFAmKBsWC4kGJoGRQKigdlAnKBuWC8kGFoGJQKagcVAmqBtWC6kGNoGZQK6gd1AnqBvWC+kGDoGHQKGgcNAmaBs2C5kGLoGXQKmgdtAnaBu2C9kGHoGPQKegcdAm6Bt2C7kGPoGeQECQGSUGvoHfQJ+gb9Av6BwOCgcGgYHAwJBgaDAuGByOCkcGoYHQwJhgbjAvGBxOCicGkYHIwJZgaTAuwAA+IgAyogA6YgA24gA+EQAykQA6UQA20QA+MwAyswA6cwA28wA+CIAyiAAQwQEEsmB7MCGYGs4LZwZxgbjAvmB8sCBYGi4LFwZJgabAsWB6sCFYGq4L/gtXBmmBtsC5YH2wINgabgs3BlmBrsC3YHuwIdga7gt3BnmBvsC/YHxwIDgaHgsPBkeBocCw4HpwITgangtPBmeBscC44H1wILgaXgsvBleBqcC24HtwIbga3gtvBneBucC+4HzwIHgaPgsfBk+Bp8Cx4HrwIXgavgtfBm+Bt8C54H3wIPgafgs/Bl+Br8C34HvwIfga/gt/Bn+Bv8C+IC5OFycMUYcowVZg6TBOmDdOF6cMMYcYwU5g5zBJmDbOF2cMcYXyYM8wV5g7zhHnDfGH+sEBYMCwUFg6LhEXDYmHxsERYMiwVlg7LhGXDcmH5sEJYMawUVg6rhFXDamH1sEZYM6wV1g7rhHXDemH9sEHYMGwUNg6bhE3DZmHzsEXYMmwVtg7bhG3DdmH7sEPYMewUdg67hF3DbmH3sEfYM0wIE8OksFfYO+wT9g37hf3DAeHAcFA4OBwSDg2HhcPDEeHIcFQ4OhwTjg3HhePDCeHEcFI4OZwSTg2nhViIh0RIhlRIh0zIhlzIh0IohlIoh0qohlqoh0ZohlZoh07ohl7oh0EYhlEIQhiiMBZOD2eEM8NZ4exwTjg3nBfODxeEC8NF4eJwSbg0XBYuD1eEK8NV4X/h6nBNuDZcF64PN4Qbw03h5nBLuDXcFm4Pd4Q7w13h7nBPuDfcF+4PD4QHw0Ph4fBIeDQ8Fh4PT4Qnw1Ph6fBMeDY8F54PL4QXw0vh5fBKeDW8Fl4Pb4Q3w1vh7fBOeDe8F94PH4QPw0fh4/BJ+DR8Fj4PX4Qvw1fh6/BN+DZ8F74PP4Qfw0/h5/BL+DX8Fn4Pf4Q/w1/h7/BP+Df8F8ZFyaLkUYooZZQqSh2lidJG6aL0UYYoY5QpyhxlibJG2aLsUY4oPsoZ5YpyR3mivFG+KH9UICoYFYoKR0WiolGxqHhUIioZlYpKR2WislG5qHxUIaoYVYoqR1WiqlG1qHpUI6oZ1YpqR3WiulG9qH7UIGoYNYoaR02iplGzqHnUImoZtYpaR22itlG7qH3UIeoYdYo6R12irlG3qHvUI+oZJUSJUVLUK+od9Yn6Rv2i/tGAaGA0KBocDYmGRsOi4dGIaGQ0KhodjYnGRuOi8dGEaGI0KZocTYmmRtMiLMIjIiIjKqIjJmIjLuIjIRIjKZIjJVIjLdIjIzIjK7IjJ3IjL/KjIAqjKAIRjFAUi6ZHM6KZ0axodjQnmhvNi+ZHC6KF0aJocbQkWhoti5ZHK6KV0arov2h1tCZaG62L1kcboo3RpmhztCXaGm2Ltkc7op3Rrmh3tCfaG+2L9kcHooPRoehwdCQ6Gh2LjkcnopPRqeh0dCY6G52LzkcXoovRpehydCW6Gl2Lrkc3opvRreh2dCe6G92L7kcPoofRo+hx9CR6Gj2LnkcvopfRq+h19CZ6G72L3kcfoo/Rp+hz9CX6Gn2Lvkc/op/Rr+h39Cf6G/2L4kAykBykAClBKpAapAFpQTqQHmQAGUEmkBlkAVlBNpAd5ADxICfIBXKDPCAvyAfygwKgICgECoMioCgoBoqDEqAkKAVKgzKgLCgHyoMKoCKoBCqDKqAqqAaqgxqgJqgFaoM6oC6oB+qDBqAhaAQagyagKWgGmoMWoCVoBVqDNqAtaAfagw6gI+gEOoMuoCvoBrqDHqAnSACJIAn0Ar1BH9AX9AP9wQAwEAwCg8EQMBQMA8PBCDASjAKjwRgwFowD48EEMBFMApPBFDAVTAMYwAEBSEABGjCABRzggQBEIAEZKEAFGtCBAUxgARs4wAUe8EEAQhABACBAIAamgxlgJpgFZoM5YC6YB+aDBWAhWAQWgyVgKVgGloMVYCVYBf4Dq8EasBasA+vBBrARbAKbwRawFWwD28EOsBPsArvBHrAX7AP7wQFwEBwCh8ERcBQcA8fBCXASnAKnwRlwFpwD58EFcBFcApfBFXAVXAPXwQ1wE9wCt8EdcBfcA/fBA/AQPAKPwRPwFDwDz8EL8BK8Aq/BG/AWvAPvwQfwEXwCn8EX8BV8A9/BD/AT/AK/wR/wF/wDcTAZTA5TwJQwFUwN08C0MB1MDzPAjDATzAyzwKwwG8wOc8B4mBPmgrlhHpgX5oP5YQFYEBaChWERWBQWg8VhCVgSloKlYRlYFpaD5WEFWBFWgpVhFVgVVoPVYQ1YE9aCtWEdWBfWg/VhA9gQNoKNYRPYFDaDzWEL2BK2gq1hG9gWtoPtYQfYEXaCnWEX2BV2g91hD9gTJsBEmAR7wd6wD+wL+8H+cAAcCAfBwXAIHAqHweFwBBwJR8HRcAwcC8fB8XACnAgnwclwCpwKp0EM4pCAJKQgDRnIQg7yUIAilKAMFahCDerQgCa0oA0d6EIP+jCAIYwggBAiGIPT4Qw4E86Cs+EcOBfOg/PhArgQLoKL4RK4FC6Dy+EKuBKugv/B1XANXAvXwfVwA9wIN8HNcAvcCrfB7XAH3Al3wd1wD9wL98H98AA8CA/Bw/AIPAqPwePwBDwJT8HT8Aw8C8/B8/ACvAgvwcvwCrwKr8Hr8Aa8CW/B2/AOvAvvwfvwAXwIH8HH8Al8Cp/B5/AFfAlfwdfwDXwL38H38AP8CD/Bz/AL/Aq/we/wB/wJf8Hf8A/8C//BOJQMJUcpUEqUCqVGaVBalA6lRxlQRpQJZUZZUFaUDWVHOVA8yolyodwoD8qL8qH8qAAqiAqhwqgIKoqKoeKoBCqJSqHSqAwqi8qh8qgCqogqocqoCqqKqqHqqAaqiWqh2qgOqovqofqoAWqIGqHGqAlqipqh5qgFaolaodaoDWqL2qH2qAPqiDqhzqgL6oq6oe6oB+qJElAiSkK9UG/UB/VF/VB/NAANRIPQYDQEDUXD0HA0Ao1Eo9BoNAaNRePQeDQBTUST0GQ0BU1F0xCGcEQgElGIRgxiEYd4JCARSUhGClKRhnRkIBNZyEYOcpGHfBSgEEUIIIgQiqHpaAaaiWah2WgOmovmofloAVqIFqHFaAlaipah5WgFWolWof/QarQGrUXr0Hq0AW1Em9BmtAVtRdvQdrQD7US70G60B+1F+9B+dAAdRIfQYXQEHUXH0HF0Ap1Ep9BpdAadRefQeXQBXUSX0GV0BV1F19B1dAPdRLfQbXQH3UX30H30AD1Ej9Bj9AQ9Rc/Qc/QCvUSv0Gv0Br1F79B79AF9RJ/QZ/QFfUXf0Hf0A/1Ev9Bv9Af9Rf9QXCxZLHksRSxlLFUsdSxNLG0sXSx9LEMsYyxTLHMsSyxrLFsseyxHLD6WM5YrljuWJ5Y3li+WP1YgVjBWKFY4ViRWNFYsVjxWIlYyVipWOlYmVjZWLlY+ViFWMVYpVjlWJVY1Vi1WPVYjVjNWK1Y7VidWN1YvVj/WINYw1ijWONYk1jTWLNY81iLWMtYq1jrWJtY21i7WPtYh1jHWKdY51iXWNdYt1j3WI9YzlhBLjCX9jwB4AMx6CQAAnm3btq2XbdtctmutZdfftnV3X7Zt27a598P6Yf2xAdhAbBA2GBuCDcWGYcOxEdhIbBQ2GhuDjcXGYeOxCVgcNhGbhE3GpmBTsWnYdGwGNhObhc3G5mBzsXnYfGwBthBbhC3GlmBLsXhsGZaALccSsRXYSmwVthpbg63F1mHrsQ3YRmwTthnbgm3FtmEYhmMERmIURmMMxmIcxmMCJmISJmMKpmIapmMGZmIWZmMO5mIe5mMBFmIRBjCIISyGbcd2YDuxXdhubA+2F9uH7ccOYAexQ9hh7Ah2FDuGHcdOYCexU9hp7Ax2FjuHnccuYBexS9hl7Ap2FbuGXcduYDexW9ht7A52F7uH3cceYA+xR9hj7An2FHuGPcdeYC+xV9hr7A32FnuHvcc+YB+xT9hn7Av2FfuGfcd+YD+xX9hv7A/2F/uHJWHJ8OR4CjwlngpPjafB0+Lp8PR4BjwjngnPjGfBs+LZ8Ox4DjwnngvPjefB8+L58Px4AbwgXggvjBfBi+LF8OJ4CbwkXgovjZfBy+Ll8PJ4BbwiXgmvjFfBq+LV8Op4DbwmXguvjdfB6+L18Pp4A7wh3ghvjDfBm+LN8P/w5ngLvCXeCm+Nt8Hb4u3w9ngHvCPeCe+Md8G74t3w7ngPvCfeC++N98H74v3w/vgAfCA+CB+MD8GH4sPw4fgIfCQ+Ch+Nj8HH4uPw8fgEPA6fiE/CJ+NT8Kn4NHw6PgOfic/CZ+Nz8Ln4PHw+vgBfiC/CF+NL8KV4PL4MT8CX44n4Cnwlvgpfja/B1+Lr8PX4BnwjvgnfjG/Bt+LbcAzHcQIncQqncQZncQ7ncQEXcQmXcQVXcQ3XcQM3cQu3cQd3cQ/38QAP8QgHOMQRHsO34zvwnfgufDe+B9+L78P34wfwg/gh/DB+BD+KH8OP4yfwk/gp/DR+Bj+Ln8PP4xfwi/gl/DJ+Bb+KX8Ov4zfwm/gt/DZ+B7+L38Pv4w/wh/gj/DH+BH+KP8Of4y/wl/gr/DX+Bn+Lv8Pf4x/wj/gn/DP+Bf+Kf8O/4z/wn/gv/Df+B/+L/8OT8GREciIFkZJIRaQm0hBpiXREeiIDkZHIRGQmshBZiWxEdiIHkZPIReQm8hB5iXxEfqIAUZAoRBQmihBFiWJEcaIEUZIoRZQmyhBliXJEeaICUZGoRFQmqhBViWpEdaIGUZOoRdQm6hB1iXpEfaIB0ZBoRDQmmhBNiWbEf0RzogXRkmhFtCbaEG2JdkR7ogPRkehEdCa6EF2JbkR3ogfRk+hF9Cb6EH2JfkR/YgAxkBhEDCaGEEOJYcRwYgQxkhhFjCbGEGOJccR4YgIRR0wkJhGTiSnEVGIaMZ2YQcwkZhGziTnEXGIeMZ9YQCwkFhGLiSXEUiKeWEYkEMuJRGIFsZJYRawm1hBriXXEemIDsZHYRGwmthBbiW0ERuAEQZAERdAEQ7AER/CEQIiERMiEQqiERuiEQZiERdiEQ7iER/hEQIRERAACEoiIEduJHcROYhexm9hD7CX2EfuJA8RB4hBxmDhCHCWOEceJE8RJ4hRxmjhDnCXOEeeJC8RF4hJxmbhCXCWuEdeJG8RN4hZxm7hD3CXuEfeJB8RD4hHxmHhCPCWeEc+JF8RL4hXxmnhDvCXeEe+JD8RH4hPxmfhCfCW+Ed+JH8RP4hfxm/hD/CX+EUlEMjI5mYJMSaYiU5NpyLRkOjI9mYHMSGYiM5NZyKxkNjI7mYPMSeYic5N5yLxkPjI/WYAsSBYiC5NFyKJkMbI4WYIsSZYiS5NlyLJkObI8WYGsSFYiK5NVyKpkNbI6WYOsSdYia5N1yLpkPbI+2YBsSDYiG5NNyKZkM/I/sjnZgmxJtiJbk23ItmQ7sj3ZgexIdiI7k13IrmQ3sjvZg+xJ9iJ7k33IvmQ/sj85gBxIDiIHk0PIoeQwcjg5ghxJjiJHk2PIseQ4cjw5gYwjJ5KTyMnkFHIqOY2cTs4gZ5KzyNnkHHIuOY+cTy4gF5KLyMXkEnIpGU8uIxPI5WQiuYJcSa4iV5NryLXkOnI9uYHcSG4iN5NbyK3kNhIjcZIgSZIiaZIhWZIjeVIgRVIiZVIhVVIjddIgTdIibdIhXdIjfTIgQzIiAQlJRMbI7eQOcie5i9xN7iH3kvvI/eQB8iB5iDxMHiGPksfI4+QJ8iR5ijxNniHPkufI8+QF8iJ5ibxMXiGvktfI6+QN8iZ5i7xN3iHvkvfI++QD8iH5iHxMPiGfks/I5+QL8iX5inxNviHfku/I9+QH8iP5ifxMfiG/kt/I7+QP8if5i/xN/iH/kv/IJDIZlZxKQaWkUlGpqTRUWiodlZ7KQGWkMlGZqSxUVioblZ3KQeWkclG5qTxUXioflZ8qQBWkClGFqSJUUaoYVZwqQZWkSlGlqTJUWaocVZ6qQFWkKlGVqSpUVaoaVZ2qQdWkalG1qTpUXaoeVZ9qQDWkGlGNqSZUU6oZ9R/VnGpBtaRaUa2pNlRbqh3VnupAdaQ6UZ2pLlRXqhvVnepB9aR6Ub2pPlRfqh/VnxpADaQGUYOpIdRQahg1nBpBjaRGUaOpMdRYahw1nppAxVETqUnUZGoKNZWaRk2nZlAzqVnUbGoONZeaR82nFlALqUXUYmoJtZSKp5ZRCdRyKpFaQa2kVlGrqTXUWmodtZ7aQG2kNlGbqS3UVmobhVE4RVAkRVE0xVAsxVE8JVAiJVEypVAqpVE6ZVAmZVE25VAu5VE+FVAhFVGAghSiYtR2age1k9pF7ab2UP+SkpL2Uweog9Qh6jB1hDpKHaOOUyeok9Qp6jR1hjpLnaPOUxeoi9Ql6jJ1hbpKXaOuUzeom9Qt6jZ1h7pL3aPuUw+oh9Qj6jH1hHpKPaOeUy+ol9Qr6jX1hnpLvaPeUx+oj9Qn6jP1hfpKfaO+Uz+on9Qv6jf1h/pL/aOSqGR0cjoFnZJORaem09Bp6XR0ejoDnZHORGems9BZ6Wx0djoHnZPOReem89B56Xx0froAXZAuRBemi9BF6WJ0cboEXZIuRZemy9Bl6XJ0eboCXZGuRFemq9BV6Wp0dboGXZOuRdem69B16Xp0fboB3ZBuRDemm9BN6Wb0f3RzugXdkm5Ft6bb0G3pdnR7ugPdke5Ed6a70F3pbnR3ugfdk+5F96b70H3pfnR/egA9kB5ED6aH0EPpYfRwegQ9kh5Fj6bH0GPpcfR4egIdR0+kJ9GT6Sn0VHoaPZ2eQc+kZ9Gz6Tn0XHoePZ9eQC+kF9GL6SX0UjqeXkYn0MvpRHoFvZJeRa+m19Br6XX0enoDvZHeRG+mt9Bb6W00RuM0QZM0RdM0Q7M0R/O0QIu0RMu0Qqu0Ruu0QZu0Rdu0Q7u0R/t0QId0RAMa0oiO0dvpHfROehe9m95D76X30fvpA/RB+hB9mD5CH6WP0cfpE/RJ+hR9mj5Dn6XP0efpC/RF+hJ9mb5CX6Wv0dfpG/RN+hZ9m75D36Xv0ffpB/RD+hH9mH5CP6Wf0c/pF/RL+hX9mn5Dv6Xf0e/pD/RH+hP9mf5Cf6W/0d/pH/RP+hf9m/5D/6X/0Ul0MiY5k4JJyaRiUjNpmLRMOiY9k4HJyGRiMjNZmKxMNiY7k4PJyeRicjN5mLxMPiY/U4ApyBRiCjNFmKJMMaY4U4IpyZRiSjNlmLJMOaY8U4GpyFRiKjNVmKpMNaY6U4OpydRiajN1mLpMPaY+04BpyDRiGjNNmKZMM+Y/pjnTgmnJtGJaM22Ytkw7pj3TgenIdGI6M12Yrkw3pjvTg+nJ9GJ6M32Yvkw/pj8zgBnIDGIGM0OYocwwZjgzghnJjGJGM2OYscw4ZjwzgYljJjKTmMnMFGYqM42ZzsxgZjKzmNnMHGYuM4+ZzyxgFjKLmMXMEmYpE88sYxKY5Uwis4JZyaxiVjNrmLXMOmY9s4HZyGxiNjNbmK3MNgZjcIZgSIZiaIZhWIZjeEZgREZiZEZhVEZjdMZgTMZibMZhXMZjfCZgQiZiAAMZxMSY7cwOZiezi9nN7GH2MvuY/cwB5iBziDnMHGGOMseY48wJ5iRzijnNnGHOMueY88wF5iJzibnMXGGuMteY68wN5iZzi7nN3GHuMveY+8wD5iHziHnMPGGeMs+Y58wL5iXzinnNvGHeMu+Y98wH5iPzifnMfGG+Mt+Y78wP5ifzi/nN/GH+Mv+YJCYZm5xNwaZkU7Gp2TRsWjYdm57NwGZkM7GZ2SxsVjYbm53NweZkc7G52TxsXjYfm58twBZkC7GF2SJsUbYYW5wtwZZkS7Gl2TJsWbYcW56twFZkK7GV2SpsVbYaW52twdZka7G12TpsXbYeW59twDZkG7GN2SZsU7YZ+x/bnG3BtmRbsa3ZNmxbth3bnu3AdmQ7sZ3ZLmxXthvbne3B9mR7sb3ZPmxfth/bnx3ADmQHsYPZIexQdhg7nB3BjmRHsaPZMexYdhw7np3AxrET2UnsZHYKO5Wdxk5nZ7Az2VnsbHYOO5edx85nF7AL2UXsYnYJu5SNZ5exCexyNpFdwa5kV7Gr2TXsWnYdu57dwG5kN7Gb2S3sVnYbi7E4S7AkS7E0y7Asy7E8K7AiK7Eyq7Aqq7E6a7Ama7E267Au67E+G7AhG7GAhSxiY+x2dge7k93F7mb3sHvZfex+9gB7kD3EHmaPsEfZY+xx9gR7kj3FnmbPsGfZc+x59gJ7kb3EXmavsFfZa+x19gZ7k73F3mbvsHfZe+x99gH7kH3EPmafsE/ZZ+xz9gX7kn3FvmbfsG/Zd+x79gP7kf3Efma/sF/Zb+x39gf7k/3F/mb/sH/Zf2wSm4xLzqXgUnKpuNRcGi4tl45Lz2XgMnKZuMxcFi4rl43LzuXgcnK5uNxcHi4vl4/LzxXgCnKFuMJcEa4oV4wrzpXgSnKluNJcGa4sV44rz1XgKnKVuMpcFa4qV42rztXganK1uNpcHa4uV4+rzzXgGnKNuMZcE64p14z7j2vOteBacq241lwbri3XjmvPdeA6cp24zlwXrivXjevO9eB6cr243lwfri/Xj+vPDeAGcoO4wdwQbig3jBvOjeBGcqO40dwYbiw3jhvPTeDiuIncJG4yN4Wbyk3jpnMzuJncLG42N4eby83j5nMLuIXcIm4xt4RbysVzy7gEbjmXyK3gVnKruNXcGm4tt45bz23gNnKbuM3cFm4rt43DOJwjOJKjOJpjOJbjOJ4TOJGTOJlTOJXTOJ0zOJOzOJtzOJfzOJ8LuJCLOMBBDnExbju3g9vJ7eJ2c3u4vdw+bj93gDvIHeIOc0e4o9wx7jh3gjvJneJOc2e4s9w57jx3gbvIXeIuc1e4q9w17jp3g7vJ3eJuc3e4u9w97j73gHvIPeIec0+4p9wz7jn3gnvJveJec2+4t9w77j33gfvIfeI+c1+4r9w37jv3g/vJ/eJ+c3+4v9w/LolLxifnU/Ap+VR8aj4Nn5ZPx6fnM/AZ+Ux8Zj4Ln5XPxmfnc/A5+Vx8bj4Pn5fPx+fnC/AF+UJ8Yb4IX5QvxhfnS/Al+VJ8ab4MX5Yvx5fnK/AV+Up8Zb4KX5Wvxlfna/A1+Vp8bb4OX5evx9fnG/AN+UZ8Y74J35Rvxv/HN+db8C35Vnxrvg3flm/Ht+c78B35Tnxnvgvfle/Gd+d78D35Xnxvvg/fl+/H9+cH8AP5Qfxgfgg/lB/GD+dH8CP5Ufxofgw/lh/Hj+cn8HH8RH4SP5mfwk/lp/HT+Rn8TH4WP5ufw8/l5/Hz+QX8Qn4Rv5hfwi/l4/llfAK/nE/kV/Ar+VX8an4Nv5Zfx6/nN/Ab+U38Zn4Lv5XfxmM8zhM8yVM8zTM8y3M8zwu8yEu8zCu8ymu8zhu8yVu8zTu8y3u8zwd8yEc84CGP+Bi/nd/B7+R38bv5Pfxefh+/nz/AH+QP8Yf5I/xR/hh/nD/Bn+RP8af5M/xZ/hx/nr/AX+Qv8Zf5K/xV/hp/nb/B3+Rv8bf5O/xd/h5/n3/AP+Qf8Y/5J/xT/hn/nH/Bv+Rf8a/5N/xb/h3/nv/Af+Q/8Z/5L/xX/hv/nf/B/+R/8b/5P/xf/h+fxCcTkgsphJRCKiG1kEZIK6QT0gsZhIxCJiGzkEXIKmQTsgs5hJxCLiG3kEfIK+QT8gsFhIJCIaGwUEQoKhQTigslhJJCKaG0UEYoK5QTygsVhIpCJaGyUEWoKlQTqgs1hJpCLaG2UEeoK9QT6gsNhIZCI6Gx0ERoKjQT/hOaCy2ElkIrobXQRmgrtBPaCx2EjkInobPQRegqdBO6Cz2EnkIvobfQR+gr9BP6CwOEgcIgYbAwRBgqDBOGCyOEkcIoYbQwRhgrjBPGCxOEOGGiMEmYLEwRpgrThOnCDGGmMEuYLcwR5grzhPnCAmGhsEhYLCwRlgrxwjIhQVguJAorhJXCKmG1sEZYK6wT1gsbhI3CJmGzsEXYKmwTMAEXCIEUKIEWGIEVOIEXBEEUJEEWFEEVNEEXDMEULMEWHMEVPMEXAiEUIgEIUEBCTNgu7BB2CruE3cIeYa+wT9gvHBAOCoeEw8IR4ahwTDgunBBOCqeE08IZ4axwTjgvXBAuCpeEy8IV4apwTbgu3BBuCreE28Id4a5wT7gvPBAeCo+Ex8IT4anwTHguvBBeCq+E18Ib4a3wTngvfBA+Cp+Ez8IX4avwTfgu/BB+Cr+E38If4a/wT0gSkonJxRRiSjGVmFpMI6YV04npxQxiRjGTmFnMImYVs4nZxRxiTjGXmFvMI+YV84n5xQJiQbGQWFgsIhYVi4nFxRJiSbGUWFosI5YVy4nlxQpiRbGSWFmsIlYVq4nVxRpiTbGWWFusI9YV64n1xQZiQ7GR2FhsIjYVm4n/ic3FFmJLsZXYWmwjthXbie3FDmJHsZPYWewidhW7id3FHmJPsZfYW+wj9hX7if3FAeJAcZA4WBwiDhWHicPFEeJIcZQ4WhwjjhXHiePFCWKcOFGcJE4Wp4hTxWnidHGGOFOcJc4W54hzxXnifHGBuFBcJC4Wl4hLxXhxmZggLhcTxRXiSnGVuFpcI64V14nrxQ3iRnGTuFncIm4Vt4mYiIuESIqUSIuMyIqcyIuCKIqSKIuKqIqaqIuGaIqWaIuO6Iqe6IuBGIqRCEQoIjEmbhd3iDvFXeJucY+4V9wn7hcPiAfFQ+Jh8Yh4VDwmHhdPiCfFU+Jp8Yx4VjwnnhcviBfFS+Jl8Yp4VbwmXhdviDfFW+Jt8Y54V7wn3hcfiA/FR+Jj8Yn4VHwmPhdfiC/FV+Jr8Y34Vnwnvhc/iB/FT+Jn8Yv4Vfwmfhd/iD/FX+Jv8Y/4V/wnJonJpORSCimllEpKLaWR0krppPRSBimjlEnKLGWRskrZpOxSDimnlEvKLeWR8kr5pPxSAamgVEgqLBWRikrFpOJSCamkVEoqLZWRykrlpPJSBamiVEmqLFWRqkrVpOpSDammVEuqLdWR6kr1pPpSA6mh1EhqLDWRmkrNpP+k5lILqaXUSmottZHaSu2k9lIHqaPUSeosdZG6St2k7lIPqafUS+ot9ZH6Sv2k/tIAaaA0SBosDZGGSsOk4dIIaaQ0ShotjZHGSuOk8dIEKU6aKE2SJktTpKnSNGm6NEOaKc2SZktzpLnSPGm+tEBaKC2SFktLpKVSvLRMSpCWS4nSCmmltEpaLa2R1krrpPXSBmmjtEnaLG2RtkrbJEzCJUIiJUqiJUZiJU7iJUESJUmSJUVSJU3SJUMyJUuyJUdyJU/ypUAKpUgCEpSQFJO2SzukndIuabe0R9or7ZP2Swekg9Ih6bB0RDoqHZOOSyekk9Ip6bR0RjornZPOSxeki9Il6bJ0RboqXZOuSzekm9It6bZ0R7or3ZPuSw+kh9Ij6bH0RHoqPZOeSy+kl9Ir6bX0RnorvZPeSx+kj9In6bP0RfoqfZO+Sz+kn9Iv6bf0R/or/ZOSpGRycjmFnFJOJaeW08hp5XRyejmDnFHOJGeWs8hZ5WxydjmHnFPOJeeW88h55XxyfrmAXFAuJBeWi8hF5WJycbmEXFIuJZeWy8hl5XJyebmCXFGuJFeWq8hV5WpydbmGXFOuJdeW68h15XpyfbmB3FBuJDeWm8hN5Wbyf3JzuYXcUm4lt5bbyG3ldnJ7uYPcUe4kd5a7yF3lbnJ3uYfcU+4l95b7yH3lfnJ/eYA8UB4kD5aHyEPlYfJweYQ8Uh4lj5bHyGPlcfJ4eYIcJ0+UJ8mT5SnyVHmaPF2eIc+UZ8mz5TnyXHmePF9eIC+UF8mL5SXyUjleXiYnyMvlRHmFvFJeJa+W18hr5XXyenmDvFHeJG+Wt8hb5W0yJuMyIZMyJdMyI7MyJ/OyIIuyJMuyIquyJuuyIZuyJduyI7uyJ/tyIIdyJAMZykiOydvlHfJOeZe8W94j75X3yfvlA/JB+ZB8WD4iH5WPycflE/JJ+ZR8Wj4jn5XPyeflC/JF+ZJ8Wb4iX5WvydflG/JN+ZZ8W74j35XvyfflB/JD+ZH8WH4iP5Wfyc/lF/JL+ZX8Wn4jv5Xfye/lD/JH+ZP8Wf4if5W/yd/lH/JP+Zf8W/4j/5X/yUlyMiW5kkJJqaRSUitplLRKOiW9kkHJqGRSMitZlKxKNiW7kkPJqeRScit5lLxKPiW/UkApqBRSCitFlKJKMaW4UkIpqZRSSitllLJKOaW8UkGpqFRSKitVlKpKNaW6UkOpqdRSait1lLpKPaW+0kBpqDRSGitNlKZKM+U/pbnSQmmptFJaK22Utko7pb3SQemodFI6K12Urko3pbvSQ+mp9FJ6K32Uvko/pb8yQBmoDFIGK0OUocowZbgyQhmpjFJGK2OUsco4ZbwyQYlTJiqTlMnKFGWqMk2ZrsxQZiqzlNnKHGWuMk+ZryxQFiqLlMXKEmWpEq8sUxKU5UqiskJZqaxSVitrlLXKOmW9skHZqGxSNitblK3KNgVTcIVQSIVSaIVRWIVTeEVQREVSZEVRVEVTdMVQTMVSbMVRXMVTfCVQQiVSgAIVpMSU7coOZaeyS9mt7FH2KvuU/coB5aBySDmsHFGOKseU48oJ5aRySjmtnFHOKueU88oF5aJySbmsXFGuKteU68oN5aZyS7mt3FHuKveU+8oD5aHySHmsPFGeKs+U58oL5aXySnmtvFHeKu+U98oH5aPySfmsfFG+Kt+U78oP5afyS/mt/FH+Kv+UJCWZmlxNoaZUU6mp1TRqWjWdml7NoGZUM6mZ1SxqVjWbml3NoeZUc6m51TxqXjWfml8toBZUC6mF1SJqUbWYWlwtoZZUS6ml1TJqWbWcWl6toFZUK6mV1SpqVbWaWl2todZUa6m11TpqXbWeWl9toDZUG6mN1SZqU7WZ+p/aXG2htlRbqa3VNmpbtZ3aXu2gdlQ7qZ3VLmpXtZvaXe2h9lR7qb3VPmpftZ/aXx2gDlQHqYPVIepQdZg6XB2hjlRHqaPVMepYdZw6Xp2gxqkT1UnqZHWKOlWdpk5XZ6gz1VnqbHWOOledp85XF6gL1UXqYnWJulSNV5epCepyNVFdoa5UV6mr1TXqWnWdul7doG5UN6mb1S3qVnWbiqm4SqikSqm0yqisyqm8KqiiKqmyqqiqqqm6aqimaqm26qiu6qm+GqihGqlAhSpSY+p2dYe6U92l7lb3qHvVfep+9YB6UD2kHlaPqEfVY+px9YR6Uj2lnlbPqGfVc+p59YJ6Ub2kXlavqFfVa+p19YZ6U72l3lbvqHfVe+p99YH6UH2kPlafqE/VZ+pz9YX6Un2lvlbfqG/Vd+p79YP6Uf2kfla/qF/Vb+p39Yf6U/2l/lb/qH/Vf2qSmkxLrqXQUmqptNRaGi2tlk5Lr2XQMmqZtMxaFi2rlk3LruXQcmq5tNxaHi2vlk/LrxXQCmqFtMJaEa2oVkwrrpXQSmqltNJaGa2sVk4rr1XQKmqVtMpaFa2qVk2rrtXQamq1tNpaHa2uVk+rrzXQGmqNtMZaE62p1kxrpjXXmmsttZZaa6211lZrq7XX2msdtY5aZ62z1lXrqnXXums9tZ5ab6231lfrq/XX+msDtYHaYG2wNlQbpg3XhmsjtZHaaG20NlYbq43XxmtxWpw2SZusTdGmatO06doMbaY2S5utzdHmavO0+doCbaG2SFusLdGWaPFavJagJWiJWqK2UluprdZWa2u1tdp6bb22UduobdY2a1u1rRqmYRqhkRql0RqjsRqn8ZqgiZqkyZqiqZqm6ZqhmZql2ZqjuZqn+VqghVqkAQ1qSItp27Ud2k5tl7Zb26Pt1fZp+7UD2kHtkHZYO6Id1Y5px7UT2kntlHZaO6Od1c5p57UL2kXtknZZu6Jd1a5p17Ub2k3tlnZbu6Pd1e5p97UH2kPtkfZYe6I91Z5pz7UX2kvtlfZae6O91d5p77UP2kftk/ZZ+6J91b5p37Uf2k/tl/Zb+6P91f5pSVoyPbmeQk+pp9JT62n0tHo6Pb2eQc+oZ9Iz61n0rHo2PbueQ8+p59Jz63n0vHo+Pb9eQC+oF9IL60X0onoxvbheQi+hl9JL6WX0Mno5vZxeQa+gV9Ir6VX0Kno1vbpeQ6+h19Jr6XX0Ono9vZ7eQG+gN9Ib6U30JnozvZneXG+ut9Rb6q311npbva3eXm+vd9Q76p31znpXvaveXe+u99R76r313npfva/eX++vD9QH6oP1wfpQfag+XB+uj9RH6qP10fpYfaw+Xh+vx+lx+iR9kj5Fn6pP06frM/SZ+ix9tj5Hn6vP1efr8/WF+iJ9kb5EX6LH6/F6gp6gJ+qJ+kp9lb5aX6Ov0dfp6/UN+kZ9k75Z36Jv1bfpmI7rhE7qlE7rjM7qnM7rgi7qki7riq7qmq7rhm7qlm7rju7qnu7rgR7qkQ50qCM9pm/Xd+g79V36bn2Pvlffp+/XD+gH9UP6Yf2IflQ/ph/XT+gn9VP6af2MflY/p5/XL+gX9Uv6Zf2KflW/pl/Xb+g39Vv6bf2Ofle/p9/XH+gP9Uf6Y/2J/lR/pj/XX+gv9Vf6a/2N/lZ/p7/XP+gf9U/6Z/2L/lX/pn/Xf+g/9V/6b/2P/lf/pyfpyYzkRgojpZHKSG2kMdIa6Yz0RgYjo5HJyGxkMbIa2YzsRg4jp5HLyG3kMfIa+Yz8RgGjoFHIKGwUMYoaxYziRgmjpFHKKG2UMcoa5YzyRgWjolHJqGxUMaoa1YzqRg2jplHLqG3UMeoa9Yz6RgOjodHIaGw0MZoazYz/jOZGC6Ol0cpobbQx2hrtjPZGB6Oj0cnobHQxuhrdjO5GD6On0cvobfQx+hr9jP7GAGOgMcgYbAwxhhrDjOHGCGOkMcoYbYwxxhrjjPHGBCPOmGhMMiYbU4ypxjRjujHDmGnMMmYbc4y5xjxjvrHAWGgsMhYbS4ylRryxzEgwlhuJxgpjpbHKWG2sMdYa64z1xgZjo7HJ2GxsMbYa2wzMwA3CIA3KoA3GYA3O4A3BEA3JkA3FUA3N0A3DMA3LsA3HcA3P8I3ACI3IAAY0kBEzths7jJ3GLmO3scfYa+wz9hsHjIPGIeOwccQ4ahwzjhsnjJPGKeO0ccY4a5wzzhsXjIvGJeOyccW4alwzrhs3jJvGLeO2cce4a9wz7hsPjIfGI+Ox8cR4ajwznhsvjJfGK+O18cZ4a7wz3hsfjI/GJ+Oz8cX4anwzvhs/jJ/GL+O38cf4a/wzkoxkZnIzhZnSTGWmNtOYac10Znozg5nRzGRmNrOYWc1sZnYzh5nTzGXmNvOYec18ZpxZwCxoFjILm0XMomYxs7hZwixpljJLm2XMsmY5s7xZwaxoVjIrm1XMqmY1s7pZw6xp1jJrm3XMumY9s77ZwGxoNjIbm03MpmYz8z+zudnCbGm2Mlubbcy2ZjuzvdnB7Gh2MjubXcyuZjezu9nD7Gn2Mnubfcy+Zj+zvznAHGgOMgebQ8yh5jBzuDnCHGmOMkebY8yx5jhzvDnBjDMnmpPMyeYUc6o5zZxuzjBnmrPM2eYcc645z5xvLjAXmovMxeYSc6kZby4zE8zlZqK5wlxprjJXm2vMteY6c725wdxobjI3m1vMreY2EzNxkzBJkzJpkzFZkzN5UzBFUzJlUzFVUzN10zBN0zJt0zFd0zN9MzBDMzKBCU1kxszt5g5zp7nL3G3uMfea+8z95gHzoHnIPGweMY+ax8zj5gnzpHnKPG2eMc+a58zz5gXzonnJvGxeMa+a18zr5g3zpnnLvG3eMe+a98z75gPzofnIfGw+MZ+az8zn5gvzpfnKfG2+Md+a78z35gfzo/nJ/Gx+Mb+a38zv5g/zp/nL/G3+Mf+a/8wkM5mV3EphpbRSWamtNFZaK52V3spgZbQyWZmtLFZWK5uV3cph5bRyWbmtPFZeK5+V3ypgFbQKWYWtIlZRq5hV3CphlbRKWaWtMlZZq5xV3qpgVbQqWZWtKlZVq5pV3aph1bRqWbWtOlZdq55V32pgNbQaWY2tJlZTq5n1n9XcamG1tFpZra02VlurndXe6mB1tDpZna0uVlerm9Xd6mH1tHpZva0+Vl+rn9XfGmANtAZZg60h1lBrmDXcGmGNtEZZo60x1lhrnDXemmDFWROtSdZka4o11ZpmTbdmWDOtWdZsa44115pnzbcWWAutRdZia4m11Iq3llkJ1nIr0VphrbRWWautNdZaa5213tpgbbQ2WZutLdZWa5uFWbhFWKRFWbTFWKzFWbwlWKIlWbKlWKqlWbplWKZlWbblWK7lWb4VWKEVWcCCFrJi1nZrh7XT2mXttvZYe6191n7rgHXQOmQdto5YR61j1nHrhHXSOmWdts5YZ61z1nnrgnXRumRdtq5YV61r1nXrhnXTumXdtu5Yd6171n3rgfXQemQ9tp5YT61n1nPrhfXSemW9tt5Yb6131nvrg/XR+mR9tr5YX61v1nfrh/XT+mX9tv5Yf61/VpKVzE5up7BT2qns1HYaO62dzk5vZ7Az2pnszHYWO6udzc5u57Bz2rns3HYeO6+dz85vF7AL2oXswnYRu6hdzC5ul7BL2qXs0nYZu6xdzi5vV7Ar2pXsynYVu6pdza5u17Br2rXs2nYdu65dz65vN7Ab2o3sxnYTu6ndzP7Pbm63sFvarezWdhu7rd3Obm93sDvanezOdhe7q93N7m73sHvavezedh+7r93P7m8PsAfag+zB9hB7qD3MHm6PsEfao+zR9hh7rD3OHm9PsOPsifYke7I9xZ5qT7On2zPsmfYse7Y9x55rz7Pn2wvshfYie7G9xF5qx9vL7AR7uZ1or7BX2qvs1fYae629zl5vb7A32pvszfYWe6u9zcZs3CZs0qZs2mZs1uZs3hZs0ZZs2VZs1dZs3TZs07Zs23Zs1/Zs3w7s0I5sYEMb2TF7u73D3mnvsnfbe+y99j57v33APmgfsg/bR+yj9jH7uH3CPmmfsk/bZ+yz9jn7vH3Bvmhfsi/bV+yr9jX7un3Dvmnfsm/bd+y79j37vv3Afmg/sh/bT+yn9jP7uf3Cfmm/sl/bb+y39jv7vf3B/mh/sj/bX+yv9jf7u/3D/mn/sn/bf+y/9j87yU7mJHdSOCmdVE5qJ42T1knnpHcyOBmdTE5mJ4uT1cnmZHdyODmdXE5uJ4+T18nn5HcKOAWdQk5hp4hT1CnmFHdKOCWdUk5pp4xT1innlHcqOBWdSk5lp4pT1anmVHdqODWdWk5tp45T16nn1HcaOA2dRk5jp4nT1Gnm/Oc0d1o4LZ1WTmunjdPWaee0dzo4HZ1OTmeni9PV6eZ0d3o4PZ1eTm+nj9PX6ef0dwY4A51BzmBniDPUGeYMd0Y4I51RzmhnjDPWGeeMdyY4cc5EZ5Iz2ZniTHWmOdOdGc5MZ5Yz25njzHXmOfOdBc5CZ5Gz2FniLHXinWVOgrPcSXRWOCudVc7qVMmctc46Z72zwdnobHI2O1ucrc42B3Nwh3BIh3Joh3FYh3N4R3BER3JkR3FUR3N0x3BMx3Jsx3Fcx3N8J3BCJ3KAAx3kxJztzg5np7PL2e3scfY6+5z9zgHnoHPIOewccY46x5zjzgnnpHPKOe2ccc4655zzzgXnonPJuexcca4615zrzg3npnPLue3cce4695z7zgPnofPIeew8cZ46z5znzgvnpfPKee28cd4675z3zgfno/PJ+ex8cb4635zvzg/np/PL+e38cf46/5wkJ5mb3E3hpnRTuandNG5aN52b3s3gZnQzuZndLG5WN5ub3c3h5nRzubndPG5eN5+b3y3gFnQLuYXdIm5Rt5hb3C3hlnRLuaXdMm5Zt5xb3q3gVnQruZXdKm5Vt5pb3a3h1nRrubXdOm5dt55b323gNnQbuY3dJm5Tt5n7n9vcbeG2dFu5rd02blu3ndve7eB2dDu5nd0uble3m9vd7eH2dHu5vd0+bl+3n9vfHeAOdAe5g90h7lB3mDvcHeGOdEe5o90x7lh3nDveneDGuRPdSe5kd4o71Z3mTndnuDPdWe5sd447153nzncXuAvdRe5id4m71I13l7kJ7nI30V3hrnRXuavdNe5ad5273t3gbnQ3uZvdLe5Wd5uLubhLuKRLubTLuKzLubwruKIrubKruKqrubpruKZrubbruK7rub4buKEbucCFLnJj7nZ3h7vT3eXudve4e9197n73gHvQPeQedo+4R91j7nH3hHvSPeWeds+4Z91z7nn3gnvRveRedq+4V91r7nX3hnvTveXedu+4d9177n33gfvQfeQ+dp+4T91n7nP3hfvSfeW+dt+4b9137nv3g/vR/eR+dr+4X91v7nf3h/vT/eX+dv+4f91/bpKbzEvupfBSeqm81F4aL62XzkvvZfAyepm8zF4WL6uXzcvu5fByerm83F4eL6+Xz8vvFfAKeoW8wl4Rr6hXzCvulfBKeqW80l4Zr6xXzivvVfAqepW8yl4Vr6pXzavu1fBqerW82l4dr65Xz6vvNfAaeo28xl4Tr6nXzPvPa+618Fp6rbzWXhuvrdfOa+918Dp6nbzOXhevq9fN6+718Hp6vbzeXh+vr9fP6+8N8AZ6g7zB3hBvqDfMG+6N8EZ6o7zR3hhvrDfOG+9N8OK8id4kb7I3xZvqTfOmezO8md4sb7Y3x5vrzfPmewu8hd4ib7G3xFvqxXvLvARvuZforfBWequ81d4ab623zlvvbfA2epu8zd4Wb6u3zcM83CM80qM82mM81uM83hM80ZM82VM81dM83TM807M823M81/M83wu80Is84EEPeTFvu7fD2+nt8nZ7e7y93j5vv3fAO+gd8g57R7yj3jHvuHfCO+md8k57Z7yz3jnvvHfBu+hd8i57V7yr3jXvunfDu+nd8m57d7y73j3vvvfAe+g98h57T7yn3jPvuffCe+m98l57b7y33jvvvffB++h98j57X7yv3jfvu/fD++n98n57f7y/3j8vyUvmJ/dT+Cn9VH5qP42f1k/np/cz+Bn9TH5mP4uf1c/mZ/dz+Dn9XH5uP4+f18/n5/cL+AX9Qn5hv4hf1C/mF/dL+CX9Un5pv4xf1i/nl/cr+BX9Sn5lv4pf1a/mV/dr+DX9Wn5tv45f16/n1/cb+A39Rn5jv4nf1G/m/+c391v4Lf1Wfmu/jd/Wb+e39zv4Hf1Ofme/i9/V7+Z393v4Pf1efm+/j9/X7+f39wf4A/1B/mB/iD/UH+YP90f4I/1R/mh/jD/WH+eP9yf4cf5Ef5I/2Z/iT/Wn+dP9Gf5Mf5Y/25/jz/Xn+fP9Bf5Cf5G/2F/iL/Xj/WV+gr/cT/RX+Cv9Vf5qf42/1l/nr/c3+Bv9Tf5mf4u/1d/mYz7uEz7pUz7tMz7rcz7vC77oS77sK77qa77uG77pW77tO77re77vB37oRz7woY/8mL/d3+Hv9Hf5u/09/l5/n7/fP+Af9A/5h/0j/lH/mH/cP+Gf9E/5p/0z/ln/nH/ev+Bf9C/5l/0r/lX/mn/dv+Hf9G/5t/07/l3/nn/ff+A/9B/5j/0n/lP/mf/cf+G/9F/5r/03/lv/nf/e/+B/9D/5n/0v/lf/m//d/+H/9H/5v/0//l//n5/kJwuSBymClEGqIHWQJkgbpAvSBxmCjEGmIHOQJcgaZAuyBzmCnEGuIHeQJ8gb5AvyBwWCgkGhoHBQJCgaFAuKByWCkkGpoHRQJigblAvKBxWCikGloHJQJagaVAuqBzWCmkGtoHZQJ6gb1AvqBw2ChkGjoHHQJGgaNAv+C5oHLYKWQaugddAmaBu0C9oHHYKOQaegc9Al6Bp0C7oHPYKeQa+gd9An6Bv0C/oHA4KBwaBgcDAkGBoMC4YHI4KRwahgdDAmGBuMC8YHE4K4YGIwKZgcTAmmBtOC6cGMYGYwK5gdzAnmBvOC+cGCYGGwKFgcLAmWBvHBsiAhWB4kBiuClcGqYHWwJlgbrAvWBxuCjcGmYHOwJdgabAuwAA+IgAyogA6YgA24gA+EQAykQA6UQA20QA+MwAyswA6cwA28wA+CIAyiAAQwQEEs2B7sCHYGu4LdwZ5gb7Av2B8cCA4Gh4LDwZHgaHAsOB6cCE4Gp4LTwZngbHAuOB9cCC4Gl4LLwZXganAtuB7cCG4Gt4LbwZ3gbnAvuB88CB4Gj4LHwZPgafAseB68CF4Gr4LXwZvgbfAueB98CD4Gn4LPwZfga/At+B78CH4Gv4LfwZ/gb/AvSAqShcnDFGHKMFWYOkwTpg3ThenDDGHGMFOYOcwSZg2zhdnDHGHOMFeYO8wT5g3zhfnDAmHBsFBYOCwSFg2LhcXDEmHJsFRYOiwTlg3LheXDCmHFsFJYOawSVg2rhdXDGmHNsFZYO6wT1g3rhfXDBmHDsFHYOGwSNg2bhf+FzcMWYcuwVdg6bBO2DduF7cMOYcewU9g57BJ2DbuF3cMeYc+wV9g77BP2DfuF/cMB4cBwUDg4HBIODYeFw8MR4chwVDg6HBOODceF48MJYVw4MZwUTg6nhFPDaeH0cEY4M5wVzg7nhHPDeeH8cEG4MFwULg6XhEvD+HBZmBAuDxPDFeHKcFW4OlwTrg3XhevDDeHGcFO4OdwSbg23hViIh0RIhlRIh0zIhlzIh0IohlIoh0qohlqoh0ZohlZoh07ohl7oh0EYhlEIQhiiMBZuD3eEO8Nd4e5wT7g33BfuDw+EB8ND4eHwSHg0PBYeD0+EJ8NT4enwTHg2PBeeDy+EF8NL4eXwSng1vBZeD2+EN8Nb4e3wTng3vBfeDx+ED8NH4ePwSfg0fBY+D1+EL8NX4evwTfg2fBe+Dz+EH8NP4efwS/g1/BZ+D3+EP8Nf4e/wT/g3/Bcmhcmi5FGKKGWUKkodpYnSRumi9FGGKGOUKcocZYmyRtmi7FGOKGeUK8od5YnyRvmi/FGBqGBUKCocFYmKRsWi4lGJqGRUKiodlYnKRuWi8lGFqGJUKaocVYmqRtWi6lGNqGZUK6od1YnqRvWi+lGDqGHUKGocNYmaRs2i/6LmUYuoZdQqah21idpG7aL2UYeoY9Qp6hx1ibpG3aLuUY+oZ9Qr6h31ifpG/aL+0YBoYDQoGhwNiYZGw6Lh0YhoZDQqGh2NicZG46Lx0YQoLpoYTYomR1OiqdG0aHo0I5oZzYpmR3OiudG8aH60IFoYLYoWR0uipVF8tCxKiJZHidGKaGW0KlodrYnWRuui9dGGaGO0KdocbYm2RtsiLMIjIiIjKqIjJmIjLuIjIRIjKZIjJVIjLdIjIzIjK7IjJ3IjL/KjIAqjKAIRjFAUi7ZHO6Kd0a5od7Qn2hvti/ZHB6KD0aHocHQkOhodi45HJ6KT0anodHQmOhudi85HF6KL0aXocnQluhpdi65HN6Kb0a3odnQnuhvdi+5HD6KH0aPocfQkeho9i55HL6KX0avodfQmehu9i95HH6KP0afoc/Ql+hp9i75HP6Kf0a/od/Qn+hv9i5KiZCA5SAFSglQgNUgD0oJ0ID3IADKCTCAzyAKygmwgO8gBcoJcIDfIA/KCfCA/KAAKgkKgMCgCioJioDgoAUqCUqA0KAPKgnKgPKgAKoJKoDKoAqqCaqA6qAFqglqgNqgD6oJ6oD5oABqCRqAxaAKagmbgP9ActAAtQSvQGrQBbUE70B50AB1BJ9AZdAFdQTfQHfQAPUEv0Bv0AX1BP9AfDAADwSAwGAwBQ8EwMByMACPBKDAajAFjwTgwHkwAcWAimAQmgylgKpgGpoMZYCaYBWaDOWAumAfmgwVgIVgEFoMlYCmIB8tAAlgOEsEKsBKsAqvBGrAWrAPrwQawEWwCm8EWsBVsAxjAAQFIQAEaMIAFHOCBAEQgARkoQAUa0IEBTGABGzjABR7wQQBCEAEAIEAgBraDHWAn2AV2gz1gL9gH9oMD4CA4BA6DI+AoOAaOgxPgJDgFToMz4Cw4B86DC+AiuAQugyvgKrgGroMb4Ca4BW6DO+AuuAfugwfgIXgEHoMn4Cl4Bp6DF+AleAVegzfgLXgH3oMP4CP4BD6DL+Ar+Aa+gx/gJ/gFfoM/4C/4B5JAMpgcpoApYSqYGqaBaWE6mB5mgBlhJpgZZoFZYTaYHeaAOWEumBvmgXlhPpgfFoAFYSFYGBaBRWExWByWgCVhKVgaloFlYTlYHlaAFWElWBlWgVVhNVgd1oA1YS1YG9aBdWE9WB82gA1hI9gYNoFNYTP4H2wOW8CWsBVsDdvAtrAdbA87wI6wE+wMu8CusBvsDnvAnrAX7A37wL6wH+wPB8CBcBAcDIfAoXAYHA5HwJFwFBwNx8CxcBwcDyfAODgRToKT4RQ4FU6D0+EMOBPOgrPhHDgXzoPz4QK4EC6Ci+ESuBTGw2UwAS6HiXAFXAlXwdVwDVwL18H1cAPcCDfBzXAL3Aq3QQzikIAkpCANGchCDvJQgCKUoAwVqEIN6tCAJrSgDR3oQg/6MIAhjCCAECIYg9vhDrgT7oK74R64F+6D++EBeBAegofhEXgUHoPH4Ql4Ep6Cp+EZeBaeg+fhBXgRXoKX4RV4FV6D1+ENeBPegrfhHXgX3oP34QP4ED6Cj+ET+BQ+g8/hC/gSvoKv4Rv4Fr6D7+EH+BF+gp/hF/gVfoPf4Q/4E/6Cv+Ef+Bf+g0kwGUqOUqCUKBVKjdKgtCgdSo8yoIwoE8qMsqCsKBvKjnKgnCgXyo3yoLwoH8qPCqCCqBAqjIqgoqgYKo5KoJKoFCqNyqCyqBwqjyqgiqgSqoyqoKqoGqqOaqCaqBaqjeqguqgeqo8aoIaoEWqMmqCmqBn6DzVHLVBL1Aq1Rm1QW9QOtUcdUEfUCXVGXVBX1A11Rz1QT9QL9UZ9UF/UD/VHA9BANAgNRkPQUDQMDUcj0Eg0Co1GY9BYNA6NRxNQHJqIJqHJaAqaiqah6WgGmolmodloDpqL5qH5aAFaiBahxWgJWori0TKUgJajRLQCrUSr0Gq0Bq1F69B6tAFtRJvQZrQFbUXbEIZwRCASUYhGDGIRh3gkIBFJSEYKUpGGdGQgE1nIRg5ykYd8FKAQRQggiBCKoe1oB9qJdqHdaA/ai/ah/egAOogOocPoCDqKjqHj6AQ6iU6h0+gMOovOofPoArqILqHL6Aq6iq6h6+gGuoluodvoDrqL7qH76AF6iB6hx+gJeoqeoefoBXqJXqHX6A16i96h9+gD+og+oc/oC/qKvqHv6Af6iX6h3+gP+ov+oSSULJY8liKWMpYqljqWJpY2li6WPpYhljGWKZY5liWWNZYtlj2WI5YzliuWO5YnljeWL5Y/ViBWMFYoVjhWJFY0VixWPFYiVjJWKlY6ViZWNlYuVj5WIVYxVilWOVYlVjVWLVY9ViNWM1YrVjtWJ1Y3Vi9WP9Yg1jDWKNY41iTWNNYs9l+seaxFrGWsVax1rE2sbaxdrH2sQ6xjrFOsc6xLrGusW6x7rEesZ6xXrHesT6zv/yTd42JeTQIA4KRO3X61bdu2bds2U9u2bR3bxsyct7ZtptgfeyUP1hvrg/XF+mH9sQHYQGwQNhgbgg3FhmHDsRHYSGwUNhobg43FxmHjsQnYRGwSNhmbgk3FpmHTsRnYTGwWNhubg83F5mHzsQXYQiwRW4QtxpZgS7Fl2HJsBbYSW4WtxtZga7F12HpsA7YR24RtxrZgW7Ft2HZsB7YT24XtxvZge7F92H7sAHYQO4Qdxo5gR7Fj2HHsBHYSO4Wdxs5gZ7Fz2HnsAnYRu4Rdxq5gV7FrGIbhGIGRGIXRGIOxGIfxmICJmITJmIKpmIbpmIGZmIXZmIO5mIf5WICFGMAghrAIi2HXsRvYTewWdhu7g93F7mH3sQfYQ+wR9hh7gj3FnmHPsRfYS+wV9hp7g73F3mHvsQ/YR+wT9hn7gn3FvmHfsR/YT+wXloT9xv5gf7F/WBwejyfDk+Mp8JR4Kjw1ngZPwNPi6fD0eAY8I54Jz4xnwbPi/+HZ8Ox4DjwnngvPjefB8+L58Px4AbwgXggvjBfBi+LF8OJ4CbwkXgovjZfBy+Ll8PJ4BbwiXgmvjFfBq+LV8Op4DbwmXguvjdfB6+L18Pp4A7wh3ghvjDfBm+LN8OZ4C7wl3gpvjbfB2+Lt8PZ4B7wj3gnvjHfBu+Ld8O54D7wn3gvvjffB++L98P74AHwgPggfjA/Bh+LD8OH4CHwkPgofjY/Bx+Lj8PH4BHwiPgmfjE/Bp+LT8On4DHwmPgufjc/B5+Lz8Pn4AnwhnogvwhfjS/Cl+DJ8Ob4CX4mvwlfja/C1+Dp8Pb4B34hvwjfjW/Ct+DZ8O74D34nvwnfje/C9+D58P34AP4gfwg/jR/Cj+DH8OH4CP4mfwk/jZ/Cz+Dn8PH4Bv4hfwi/jV/Cr+DUcw3GcwEmcwmmcwVmcw3lcwEVcwmVcwVVcw3XcwE3cwm3cwV3cw308wEMc4BBHeITH8Ov4Dfwmfgu/jd/B7+L38Pv4A/wh/gh/jD/Bn+LP8Of4C/wl/gp/jb/B3+Lv8Pf4B/wj/gn/jH/Bv+Lf8O/4D/wn/gtPwn/jf/C/+D88jognkhHJiRRESiIVkZpIQyQQaYl0RHoiA5GRyERkJrIQWYn/iGxEdiIHkZPIReQm8hB5iXxEfqIAUZAoRBQmihBFiWJEcaIEUZIoRZQmyhBliXJEeaICUZGoRFQmqhBViWpEdaIGUZOoRdQm6hB1iXpEfaIB0ZBoRDQmmhBNiWZEc6IF0ZJoRbQm2hBtiXZEe6ID0ZHoRHQmuhBdiW5Ed6IH0ZPoRfQm+hB9iX5Ef2IAMZAYRAwmhhBDiWHEcGIEMZIYRYwmxhBjiXHEeGICMZGYREwmphBTiWnEdGIGMZOYRcwm5hBziXnEfGIBsZBIJBYRi4klxFJiGbGcWEGsJFYRq4k1xFpiHbGe2EBsJDYRm4ktxFZiG7Gd2EHsJHYRu4k9xF5iH7GfOEAcJA4Rh4kjxFHiGHGcOEGcJE4Rp4kzxFniHHGeuEBcJC4Rl4krxFXiGoEROEEQJEERNMEQLMERPCEQIiERMqEQKqEROmEQJmERNuEQLuERPhEQIQEISCAiImLEdeIGcZO4Rdwm7hB3iXvEfeIB8ZB4RDwmnhBPiWfEc+IF8ZJ4Rbwm3hBviXfEe+ID8ZH4RHwmvhBfiW/Ed+IH8ZP4RSQRv4k/xF/iHxFHxpPJyORkCjIlmYpMTaYhE8i0ZDoyPZmBzEhmIjOTWcis5H9kNjI7mYPMSeYic5N5yLxkPjI/WYAsSBYiC5NFyKJkMbI4WYIsSZYiS5NlyLJkObI8WYGsSFYiK5NVyKpkNbI6WYOsSdYia5N1yLpkPbI+2YBsSDYiG5NNyKZkM7I52YJsSbYiW5NtyLZkO7I92YHsSHYiO5NdyK5kN7I72YPsSfYie5N9yL5kP7I/OYAcSA4iB5NDyKHkMHI4OYIcSY4iR5NjyLHkOHI8OYGcSE4iJ5NTyKnkNHI6OYOcSc4iZ5NzyLnkPHI+uYBcSCaSi8jF5BJyKbmMXE6uIFeSq8jV5BpyLbmOXE9uIDeSm8jN5BZyK7mN3E7uIHeSu8jd5B5yL7mP3E8eIA+Sh8jD5BHyKHmMPE6eIE+Sp8jT5BnyLHmOPE9eIC+Sl8jL5BXyKnmNxEicJEiSpEiaZEiW5EieFEiRlEiZVEiV1EidNEiTtEibdEiX9EifDMiQBCQkERmRMfI6eYO8Sd4ib5N3yLvkPfI++YB8SD4iH5NPyKfkM/I5+YJ8Sb4iX5NvyLfkO/I9+YH8SH4iP5NfyK/kN/I7+YP8Sf4ik8jf5B/yL/mPjKPiqWRUcioFlZJKRaWm0lAJVFoqHZWeykBlpDJRmaksVFbqPyoblZ3KQeWkclG5qTxUXioflZ8qQBWkClGFqSJUUaoYVZwqQZWkSlGlqTJUWaocVZ6qQFWkKlGVqSpUVaoaVZ2qQdWkalG1qTpUXaoeVZ9qQDWkGlGNqSZUU6oZ1ZxqQbWkWlGtqTZUW6od1Z7qQHWkOlGdqS5UV6ob1Z3qQfWkelG9qT5UX6of1Z8aQA2kBlGDqSHUUGoYNZwaQY2kRlGjqTHUWGocNZ6aQE2kJlGTqSnUVGoaNZ2aQc2kZlGzqTnUXGoeNZ9aQC2kEqlF1GJqCbWUWkYtp1ZQK6lV1GpqDbWWWketpzZQG6lN1GZqC7WV2kZtp3ZQO6ld1G5qD7WX2kftpw5QB6lD1GHqCHWUOkYdp05QJ6lT1GnqDHWWOkedpy5QF6lL1GXqCnWVukZhFE4RFElRFE0xFEtxFE8JlEhJlEwplEpplE4ZlElZlE05lEt5lE8FVEgBClKIiqgYdZ26Qd2kblG3qTvUXeoedZ96QD2kHlGPqSfUU+oZ9Zx6Qb2kXlGvqTfUW+od9Z76QH2kPlGfqS/UV+ob9Z36Qf2kflFJ1G/qD/WX+kfF0fF0Mjo5nYJOSaeiU9Np6AQ6LZ2OTk9noDPSmejMdBY6K/0fnY3OTuegc9K56Nx0HjovnY/OTxegC9KF6MJ0EbooXYwuTpegS9Kl6NJ0GbosXY4uT1egK9KV6Mp0FboqXY2uTtega9K16Np0HbouXY+uTzegG9KN6MZ0E7op3YxuTregW9Kt6NZ0G7ot3Y5uT3egO9Kd6M50F7or3Y3uTvege9K96N50H7ov3Y/uTw+gB9KD6MH0EHooPYweTo+gR9Kj6NH0GHosPY4eT0+gJ9KT6Mn0FHoqPY2eTs+gZ9Kz6Nn0HHouPY+eTy+gF9KJ9CJ6Mb2EXkovo5fTK+iV9Cp6Nb2GXkuvo9fTG+iN9CZ6M72F3kpvo7fTO+id9C56N72H3kvvo/fTB+iD9CH6MH0kKXVcHH2cPkGfpE/Rp+kz9Fn6HH2evkBfpC/Rl+kr9FX6Go3ROE3QJE3RNM3QLM3RPC3QIi3RMq3QKq3ROm3QJm3RNu3QLu3RPh3QIQ1oSCM6omP0dfoGfZO+Rd+m79B36Xv0ffoB/ZB+RD+mn9BP6Wf0c/oF/ZJ+Rb+m39Bv6Xf0e/oD/ZH+RH+mv9Bf6W/0d/oH/ZP+RSfRv+k/9F/6Hx3HxDPJmORMCiYlk4pJzaRhEpi0TDomPZOBychkYjIzWZiszH9MNiY7k4PJyeRicjN5mLxMPiY/U4ApyBRiCjNFmKJMMaY4U4IpyZRiSjNlmLJMOaY8U4GpyFRiKjNVmKpMNaY6U4OpydRiajN1mLpMPaY+04BpyDRiGjNNmKZMM6Y504JpybRiWjNtmLZMO6Y904HpyHRiOjNdmK5MN6Y704PpyfRiejN9mL5MP6Y/M4AZyAxiBjNDmKHMMGY4M4IZyYxiRjNjmLHMOGY8M4GZyExiJjNTmKnMNGY6M4OZycxiZjNzmLnMPGY+s4BZyCQyi5jFzBJmKbOMWc6sYFYyq5jVzBpmLbOOWc9sYDYym5jNzBZmK7ON2c7sYHYyu5jdzB5mL7OP2c8cYA4yh5jDzBHmKHOMOc6cYE4yp5jTzBnmLHOOOc9cYC4yl5jLzBXmKnONwRicIRiSoRiaYRiW4RieERiRkRiZURiV0RidMRiTsRibcRiX8RifCZiQAQxkEBMxMeY6c4O5ydxibjN3mLvMPeY+84B5yDxiHjNPmKfMM+Y584J5ybxiXjNvmLfMO+Y984H5yHxiPjNfmK/MN+Y784P5yfxikpjfzB/mL/OPiWPj2WRscjYFm5JNxaZm07AJbFo2HZuezcBmZDOxmdksbFb2PzYbm53NweZkc7G52TxsXjYfm58twBZkC7GF2SJsUbYYW5wtwZZkS7Gl2TJsWbYcW56twFZkK7GV2SpsVbYaW52twdZka7G12TpsXbYeW59twDZkG7GN2SZsU7YZ25xtwbZkW7Gt2TZsW7Yd257twHZkO7Gd2S5sV7Yb253twfZke7G92T5sX7Yf258dwA5kB7GD2SHsUHYYO5wdEZ/i/6QDO5Ydx45nJ7AT2UnsZHYKO5Wdxk5nZ7Az2VnsbHYOO5edx85nF7AL2UR2EbuYXcIuZZexy9kV7Ep2FbuaXcOuZdex69kN7EZ2E7uZ3cJuZbex29kd7E52F7ub3cPuZfex+9kD7EH2EHuYPcIeZY+xx9kT7En2FHuaPcOeZc+x59kL7EX2EnuZvcJeZa+xGIuzBEuyFEuzDMuyHMuzAiuyEiuzCquyGquzBmuyFmuzDuuyHuuzARuygIUsYiM2xl5nb7A32VvsbfYOe5e9x95nH7AP2UfsY/YJ+5R9xj5nX7Av2Vfsa/YN+5Z9x75nP7Af2U/sZ/YL+5X9xn5nf7A/2V9sEvub/cP+Zf+xcVw8l4xLzqXgUnKpuNRcGi6BS8ul49JzGbiMXCYuM5eFyxqfGBfHZedycDm5XFxuLg+Xl8vH5ecKcAW5QlxhrghXlCvGFedKcCW5UlxprgxXlivHlecqcBW5SlxlrgpXlavGVedqcDW5Wlxtrg5Xl6vH1ecacA25RlxjrgnXlGvGNedacC25Vlxrrg3XlmvHtec6cB25TlxnrgvXlevGded6cD25Xlxvrg/Xl+vH9ecGcAO5Qdxgbgg3lBvGDedGcCO5Udxobgw3lhvHjecmcBO5Sdxkbgo3lZvGTedmcDO5Wdxsbg43l5vHzecWcAu5RG4Rt5hbwi3llnHLuRXcSm4Vt5pbw63l1nHruQ3cRm4Tt5nbwm3ltnHbuR3cTm4Xt5vbw+3l9nH7uQPcQe4Qd5g7wh3ljnHHuRPcSe4Ud5o7w53lznHnuQvcRe4Sd5m7wl3lrnEYh3MER3IUR3MMx3Icx3MCJ3ISJ3MKp3Iap3MGZ3IWZ3MO53Ie53MBF3KAgxziIi7GXeducDe5W9xt7g53l7vH3ececA+5R9xj7gn3lHvGPedecC+5V9xr7g33lnvHvec+cB+5T9xn7gv3lfvGfed+cD+5X1wS95v7w/3l/nFxfDyfjE/Op+BT8qn41HwaPoFPy6fj0/MZ+Ix8Jj4zn4XPyv/HZ+Oz8zn4nHwuPjefh8/L5+Pz8wX4gnwhvjBfhC/KF+OL8yX4knwpvjRfhi/Ll+PL8xX4inwlvjJfha/KV+Or8zX4mnwtvjZfh6/L1+Pr8w34hnwjvjHfhG/KN+Ob8y34lnwrvjXfhm/Lt+Pb8x34jnwnvjPfhe/Kd+O78z34nnwvvjffh+/L9+P78wP4gfwgfjA/hB/KD+OH8yP4kfwofjQ/hh/Lj+PH8xP4ifwkfjI/hZ/KT+On8zP4mfwsfjY/h5/Lz+Pn8wv4hXwiv4hfzC/hl/LL+OX8Cn4lv4pfza/h1/Lr+PX8Bn4jv4nfzG/ht/Lb+O38Dn4nv4vfze/h9/L7+P38Af4gf4g/zB/hj/LH+OP8Cf4kf4o/zZ/hz/Ln+PP8Bf4if4m/zF/hr/LXeIzHeYIneYqneYZneY7neYEXeYmXeYVXeY3XeYM3eYu3eYd3eY/3+YAPecBDHvERH+Ov8zf4m/wt/jZ/h7/L3+Pv8w/4h/wj/jH/hH/KP+Of8y/4l/wr/jX/hn/Lv+Pf8x/4j/wn/jP/hf/Kf+O/8z/4n/wvPon/zf/h//L/+DghXkgmJBdSCCmFVEJqIY2QIKQV0gnphQxCRiGTkFnIImQV/hOyCdmFHEJOIZeQW8gj5BXyCfmFAkJBoZBQWCgiFBWKCcWFEkJJoZRQWigjlBXKCeWFCkJFoZJQWagiVBWqCdWFGkJNoZZQW6gj1BXqCfWFBkJDoZHQWGgiNBWaCc2FFkJLoZXQWmgjtBXaCe2FDkJHoZPQWegidBW6Cd2FHkJPoZfQW+gj9BX6Cf2FAcJAYZAwWBgiDBWGCcOFEcJIYZQwWhgjjBXGCeOFCcJEYZIwWZgiTBWmCdOFGcJMYZYwW5gjzBXmCfOFBcJCIVFYJCwWlghLhWXCcmGFsFJYJawW1ghrhXXCemGDsFHYJGwWtghbhW3CdmGHsFPYJewW9gh7hX3CfuGAcFA4JBwWjghHhWPCceGEcFI4JZwWzghnhXPCeeGCcFG4JFwWrghXhWsCJuACIZACJdACI7ACJ/CCIIiCJMiCIqiCJuiCIZiCJdiCI7iCJ/hCIIQCEKCAhEiICdeFG8JN4ZZwW7gj3BXuCfeFB8JD4ZHwWHgiPBWeCc+FF8JL4ZXwWngjvBXeCe+FD8JH4ZPwWfgifBW+Cd+FH8JP4ZeQJPwW/gh/hX9CnBgvJhOTiynElGIqMbWYRkwQ04rpxPRiBjGjmEnMLGYRs4r/idnE7GIOMaeYS8wt5hHzivnE/GIBsaBYSCwsFhGLisXE4mIJsaRYSiwtlhHLiuXE8mIFsaJYSawsVhGritXE6mINsaZYS6wt1hHrivXE+mIDsaHYSGwsNhGbis3E5mILsaXYSmwtthHbiu3E9mIHsaPYSewsdhG7it3E7mIPsafYS+wt9hH7iv3E/uIAcaA4SBwsDhGHisPE4eIIcaQ4ShwtjhHHiuPE8eIEcaI4SZwsThGnitPE6eIMcaY4S5wtzhHnivPE+eICcaGYKC4SF4tLxKXiMnG5uEJcKa4SV4trxLXiOnG9uEHcKG4SN4tbxK3iNnG7uEPcKe4Sd4t7xL3iPnG/eEA8KB4SD4tHxKPiMfG4eEI8KZ4ST4tnxLPiOfG8eEG8KF4SL4tXxKviNRETcZEQSZESaZERWZETeVEQRVESZVERVVETddEQTdESbdERXdETfTEQQxGIUERiJMbE6+IN8aZ4S7wt3hHvivfE++ID8aH4SHwsPhGfis/E5+IL8aX4SnwtvhHfiu/E9+IH8aP4SfwsfhG/it/E7+IP8af4S0wSf4t/xL/iPzFOipeSScmlFFJKKZWUWkojJUhppXRSeimDlFHKJGWWskhZpf+kbFJ2KYeUU8ol5ZbySHmlfFJ+qYBUUCokFZaKSEWlYlJxqYRUUiollZbKSGWlclJ5qYJUUaokVZaqSFWlalJ1qYZUU6ol1ZbqSHWlelJ9qYHUUGokNZaaSE2lZlJzqYXUUmoltZbaSG2ldlJ7qYPUUeokdZa6SF2lblJ3qYfUU+ol9Zb6SH2lflJ/aYA0UBokDZaGSEOlYdJwaYQ0UholjZbGSGOlcdJ4aYI0UZokTZamSFOladJ0aYY0U5olzZbmSHOledJ8aYG0UEqUFkmLpSXSUmmZtFxaIa2UVkmrpTXSWmmdtF7aIG2UNkmbpS3SVmmbtF3aIe2Udkm7pT3SXmmftF86IB2UDkmHpSPSUemYdFw6IZ2UTkmnpTPSWemcdF66IF2ULkmXpSvSVemahEm4REikREm0xEisxEm8JEiiJEmypEiqpEm6ZEimZEm25Eiu5Em+FEihBCQoISmSYtJ16YZ0U7ol3ZbuSHele9J96YH0UHokPZaeSE+lZ9Jz6YX0UnolvZbeSG+ld9J76YP0UfokfZa+SF+lb9J36Yf0U/olJUm/pT/SX+mfFCfHy8nk5HIKOaWcSk4tp5ET5LRyOjm9nEHOKGeSM8tZ5Kzyf3I2ObucQ84p55JzJ8TFxcn55PxyAbmgXEguLBeRi8rF5OJyCbmkXEouLZeRy8rl5PJyBbmiXEmuLFeRq8rV5OpyDbmmXEuuLdeR68r15PpyA7mh3EhuLDeRm8rN5OZyC7ml3EpuLbeR28rt5PZyB7mj3EnuLHeRu8rd5O5yD7mn3EvuLfeR+8r95P7yAHmgPEgeLA+Rh8rD5OHyCHmkPEoeLY+Rx8rj5PHyBHmiPEmeLE+Rp8rT5OnyDHmmPEueLc+R58rz5PnyAnmhnCgvkhfLS+Sl8jJ5ubxCXimvklfLa+S18jp5vbxB3ihvkjfLW+St8jZ5u7xD3invknfLe+S98j55v3xAPigfkg/LR+Sj8jH5uHxCPimfkk/LZ+Sz8jn5vHxBvihfki/LV+Sr8jUZk3GZkEmZkmmZkVmZk3lZkEVZkmVZkVVZk3XZkE3Zkm3ZkV3Zk305kEMZyFBGciTH5OvyDfmmfEu+Ld+R78r35PvyA/mh/Eh+LD+Rn8rP5OfyC/ml/Ep+Lb+R38rv5PfyB/mj/En+LH+Rv8rf5O/yD/mn/EtOkn/Lf+S/8j85TolXkinJlRRKSiWVklpJoyQoaZV0Snolg5JRyaRkVrIoWZX/lGxKdiWHklPJpeRW8ih5lXxKfqWAUlAppBRWiihFlWJKcaWEUlIppZRWyihllXJKeaWCUlGppFRWqihVlWpKdaWGUlOppdRW6ih1lXpKfaWB0lBppDRWmihNlWZKc6WF0lJppbRW2ihtlXZKe6WD0lHppHRWuihdlW5Kd6WH0lPppfRW+ih9lX5Kf2WAMlAZpAxWhihDlWHKcGWEMlIZpYxWxihjlXHKeGWCMlGZpExWpihTlWnKdGWGMlOZpcxW5ihzlXnKfGWBslBJVBYpi5UlylJlmbJcWaGsVFYpq5U1ylplnbJe2aBsVDYpm5UtylZlm7Jd2aHsVHYpu5U9yl5ln7JfOaAcVA4ph5UjylHlmHJcOaGcVE4pp5UzylnlnHJeuaBcVC4pl5UrylXlmoIpuEIopEIptMIorMIpvCIooiIpsqIoqqIpumIopmIptuIoruIpvhIooQIUqCAlUmLKdeWGclO5pdxW7ih3lXvKfeWB8lB5pDxWnihPlWfKc+WF8lJ5pbxW3ihvlXfKe+WD8lH5pHxWvihflW/Kd+WH8lP5pSQpv5U/yl/lnxKnxqvJ1ORqCjWlmkpNraZRE9S0ajo1vZpBzahmUjOrWdSs6n9qNjW7mkPNqeZSc6t51LxqPjW/WkAtqBZSC6tF1KJqMbW4WkItqZZSS6tl1LJqObW8WkGtqFZSK6tV1KpqNbW6WkOtqdZSa6t11LpqPbW+2kBtqDZSG6tN1KZqM7W52kJtqbZSW6tt1LZqO7W92kHtqHZSO6td1K5qN7W72kPtqfZSe6t91L5qP7W/OkAdqA5SB6tD1KHqMHW4OkIdqY5SR6tj1LHqOHW8OkGdqE5SJ6tT1KnqNHW6OkOdqc5SZ6tz1LnqPHW+ukBdqCaqi9TF6hJ1qbpMXa6uUFeqq9TV6hp1rbpOXa9uUDeqm9TN6hZ1q7pN3a7uUHequ9Td6h51r7pP3a8eUA+qh9TD6hH1qHpMPa6eUE+qp9TT6hn1rHpOPa9eUC+ql9TL6hX1qnpNxVRcJVRSpVRaZVRW5VReFVRRlVRZVVRV1VRdNVRTtVRbdVRX9VRfDdRQBSpUkRqpMfW6ekO9qd5Sb6t31LvqPfW++kB9qD5SH6tP1KfqM/W5+kJ9qb5SX6tv1LfqO/W9+kH9qH5SP6tf1K/qN/W7+kP9qf5Sk9Tf6h/1r/pPjdPitWRaci2FllJLpaXW0mgJWlotnZZey6Bl1DJpmbUsWlbtPy2bll3LoeXUcmm5tTxaXi2fll8roBXUCmmFtSJaUa2YVlwroZXUSmmltTJaWa2cVl6roFXUKmmVtSpaVa2aVl2rodXUamm1tTpaXa2eVl9roDXUGmmNtSZaU62Z1lxrobXUWmmttTZaW62d1l7roHXUOmmdtS5aV62b1l3rofXUemm9tT5aX62f1l8boA3UBmmDtSHaUG2YNlwboY3URmmjtTHaWG2cNl6boE3UJmmTtSnaVG2aNl2boc3UZmmztTnaXG2eNl9boC3UErVF2mJtibZUW6Yt11ZoK7VV2mptjbZWW6et1zZoG7VN2mZti7ZV26Zt13ZoO7Vd2m5tj7ZX26ft1w5oB7VD2mHtiHZUO6Yd105oJ7VT2mntjHZWO6ed1y5oF7VL2mXtinZVu6ZhGq4RGqlRGq0xGqtxGq8JmqhJmqwpmqppmq4ZmqlZmq05mqt5mq8FWqgBDWpIi7SYdl27od3Ubmm3tTvaXe2edl97oD3UHmmPtSfaU+2Z9lx7ob3UXmmvtTfaW+2d9l77oH3UPmmftS/aV+2b9l37of3UfmlJ2m/tj/ZX+6fF6fF6Mj25nkJPqafSU+tp9AQ9rZ5OT69n0DPqmfTMehY9q/6fnk3PrufQc+q59Nx6Hj2vnk/PrxfQC+qF9MJ6Eb2oXkwvrpfQS+ql9NJ6Gb2sXk4vr1fQK+qV9Mp6Fb2qXk2vrtfQa+q19Np6Hb2uXk+vrzfQG+qN9MZ6E72p3kxvrrfQW+qt9NZ6G72t3k5vr3fQO+qd9M56F72r3k3vrvfQe+q99N56H72v3k/vrw/QB+qD9MH6EH2oPkwfro/QR+qj9NH6GH2sPk4fr0/QJ+qT9Mn6FH2qPk2frs/QZ+qz9Nn6HH2uPk+fry/QF+qJ+iJ9sb5EX6ov05frK/SV+ip9tb5GX6uv09frG/SN+iZ9s75F36pv07frO/Sd+i59t75H36vv0/frB/SD+iH9sH5EP6of04/rJ/ST+in9tH5GP6uf08/rF/SL+iX9sn5Fv6pf0zEd1wmd1Cmd1hmd1Tmd1wVd1CVd1hVd1TVd1w3d1C3d1h3d1T3d1wM91IEOdaRHeky/rt/Qb+q39Nv6Hf2ufk+/rz/QH+qP9Mf6E/2p/kx/rr/QX+qv9Nf6G/2t/k5/r3/QP+qf9M/6F/2r/k3/rv/Qf+q/9CT9t/5H/6v/0+OMeCOZkdxIYaQ0UhmpjTRGgpHWSGekNzIYGY1MRmYji5HV+M/IZmQ3chg5jVxGbiOPkdfIZ+Q3ChgFjUJGYaOIUdQoZhQ3ShgljVJGaaOMUdYoZ5Q3KhgVjUpGZaOKUdWoZlQ3ahg1jVpGbaOOUdeoZ9Q3GhgNjUZGY6OJ0dRoZjQ3WhgtjVZGa6ON0dZoZ7Q3OhgdjU5GZ6OL0dXoZnQ3ehg9jV5Gb6OP0dfoZ/Q3BhgDjUHGYGOIMdQYZgw3RhgjjVHGaGOMMdYYZ4w3JhgTjUnGZGOKMdWYZkw3ZhgzjVnGbGOOMdeYZ8w3FhgLjURjkbHYWGIsNZYZy40VxkpjlbHaWGOsNdYZ640NxkZjk7HZ2GJsNbYZ240dxk5jl7Hb2GPsNfYZ+40DxkHjkHHYOGIcNY4Zx40TxknjlHHaOGOcNc4Z540LxkXjknHZuGJcNa4ZmIEbhEEalEEbjMEanMEbgiEakiEbiqEamqEbhmEalmEbjuEanuEbgREawIAGMiIjZlw3bhg3jVvGbeOOcde4Z9w3HhgPjUfGY+OJ8dR4Zjw3XhgvjVfGa+ON8dZ4Z7w3PhgfjU/GZ+OL8dX4Znw3fhg/jV9GkvHb+GP8Nf4ZcWa8mcxMbqYwU5qpzNRmGjPBTGumM9ObGcyMZiYzs5nFzGr+Z2Yzs5s5zJxmLjO3mcfMa+Yz85sFzIJmIbOwWcQsahYzi5slzJJmKbO0WcYsa5Yzy5sVzIpmJbOyWcWsalYzq5s1zJpmLbO2Wcesa9Yz65sNzIZmI7Ox2cRsajYzm5stzJZmK7O12cZsa7Yz25sdzI5mJ7Oz2cXsanYzu5s9zJ5mL7O32cfsa/Yz+5sDzIHmIHOwOcQcag4zh5sjzJHmKHO0OcYca44zx5sTzInmJHOyOcWcak4zp5szzJnmLHO2Oceca84z55sLzIVmornIXGwuMZeay8zl5gpzpbnKXG2uMdea68z15gZzo7nJ3GxuMbea28zt5g5zp7nL3G3uMfea+8z95gHzoHnIPGweMY+ax8zj5gnzpHnKPG2eMc+a58zz5gXzonnJvGxeMa+a10zMxE3CJE3KpE3GZE3O5E3BFE3JlE3FVE3N1E3DNE3LtE3HdE3P9M3ADE1gQhOZkRkzr5s3zJvmLfO2ece8a94z75sPzIfmI/Ox+cR8aj4zn5svzJfmK/O1+cZ8a74z35sfzI/mJ/Oz+cX8an4zv5s/zJ/mLzPJ/G3+Mf+a/8w4K95KZiW3UlgprVRWaiuNlWCltdJZ6a0MVkYrk5XZymJltf6zslnZrRxWTiuXldvKY+W18ln5rQJWQauQVdgqYhW1ilnFrRJWSauUVdoqY5W1ylnlrQpWRauSVdmqYlW1qlnVrRpWTauWVduqY9W16ln1rQZWQ6uR1dhqYjW1mlnNrRZWS6uV1dpqY7W12lntrQ5WR6uT1dnqYnW1ulndrR5WT6uX1dvqY/W1+ln9rQHWQGuQNdgaYg21hlnDrRHWSGuUNdoaY421xlnjrQnWRGuSNdmaYk21plnTrRnWTGuWNduaY8215lnzrQXWQivRWmQttpZYS61l1nJrhbXSWmWtttZYa6111nprg7XR2mRttrZYW61t1nZrh7XT2mXttvZYe6191n7rgHXQOmQdto5YR61j1nHrhHXSOmWdts5YZ61z1nnrgnXRumRdtq5YV61rFmbhFmGRFmXRFmOxFmfxlmCJlmTJlmKplmbplmGZlmXZlmO5lmf5VmCFFrCghazIilnXrRvWTeuWddu6Y9217ln3rQfWQ+uR9dh6Yj21nlnPrRfWS+uV9dp6Y7213lnvrQ/WR+uT9dn6Yn21vlnfrR/WT+uXlWT9tv5Yf61/Vpwdbyezk9sp7JR2Kju1ncZOsNPa6ez0dgY7o53JzmxnsbPa/9nZ7Ox2DjunncvObeex89r57Px2AbugXcgubBexi9rF7OJ2CbukXcoubZexy9rl7PJ2BbuiXcmubFexq9rV7Op2DbumXcuubdex69r17Pp2A7uh3chubDexm9rN7OZ2C7ul3cpubbex29rt7PZ2B7uj3cnubHexu9rd7O52D7un3cvubfex+9r97P72AHugPcgebA+xh9rD7OH2CHukPcoebY+xx9rj7PH2BHuiPcmebE+xp9rT7On2DHumPcuebc+x59rz7Pn2AnuhnWgvshfbS+yl9jJ7ub3CXmmvslfba+y19jp7vb3B3mhvsjfbW+yt9jZ7u73D3mnvsnfbe+y99j57v33APmgfsg/bR+yj9jH7uH3CPmmfsk/bZ+yz9jn7vH3Bvmhfsi/bV+yr9jUbs3GbsEmbsmmbsVmbs3lbsEVbsmVbsVVbs3XbsE3bsm3bsV3bs307sEMb2NBGdmTH7Ov2Dfumfcu+bd+x79r37Pv2A/uh/ch+bD+xn9rP7Of2C/ul/cp+bb+x39rv7Pf2B/uj/cn+bH+xv9rf7O/2D/un/ctOsn/bf+y/9j87zol3kjnJnRROSieVk9pJ4yQ4aZ10Tnong5PRyeRkdrI4WZ3/nGxOdieHk9PJ5eR28jh5nXxOfqeAU9Ap5BR2ijhFnWJOcaeEU9Ip5ZR2yjhlnXJOeaeCU9Gp5FR2qjhVnWpOdaeGU9Op5dR26jh1nXpOfaeB09Bp5DR2mjhNnWZOc6eF09Jp5bR22jhtnXZOe6eD09Hp5HR2ujhdnW5Od6eH09Pp5fR2+jh9nX5Of2eAM9AZ5Ax2hjhDnWHOcGeEM9IZ5Yx2xjhjnXHOeGeCM9GZ5Ex2pjhTnWnOdGeGM9OZ5cx25jhznXnOfGeBs9BJdBY5i50lzlJnmbPcWeGsdFY5q501zlpnnbPe2eBsdDY5m50tzlZnm7Pd2eHsdHY5u509zl5nn7PfOeAcdA45h50jzlHnmHPcOeGcdE45p50zzlnnnHPeueBcdC45l50rzlXnmoM5uEM4pEM5tMM4rMM5vCM4oiM5sqM4qqM5umM4pmM5tuM4ruM5vhM4oQMc6CAncmLOdeeGc9O55dx27jh3nXvOfeeB89B55Dx2njhPnWfOc+eF89J55bx23jhvnXfOe+eD89H55Hx2vjhfnW/Od+eH89P55SQ5v50/zl/nnxPnxrvJ3ORuCjelm8pN7aZxE9y0bjo3vZvBzehmcjO7Wdys7n9uNje7m8PN6eZyc7t53LxuPje/W8At6BZyC7tF3KJuMbe4W8It6ZZyS7tl3LJuObe8W8Gt6FZyK7tV3KpuNbe6W8Ot6dZya7t13LpuPbe+28Bt6DZyG7tN3KZuM7e528Jt6bZyW7tt3LZuO7e928Ht6HZyO7td3K5uN7e728Pt6fZye7t93L5uP7e/O8Ad6A5yB7tD3KHuMHe4O8Id6Y5yR7tj3LHuOHe8O8Gd6E5yJ7tT3KnuNHe6O8Od6c5yZ7tz3LnuPHe+u8Bd6Ca6i9zF7hJ3qbvMXe6ucFe6q9zV7hp3rbvOXe9ucDe6m9zN7hZ3q7vN3e7ucHe6u9zd7h53r7vP3e8ecA+6h9zD7hH3qHvMPe6ecE+6p9zT7hn3rHvOPe9ecC+6l9zL7hX3qnvNxVzcJVzSpVzaZVzW5VzeFVzRlVzZVVzV1dy4ZHFxpmu5tuu4ruu5vhu4oQtc6CI3cmPudfeGe9O95d5277h33XvuffeB+9B95D52n7hP3Wfuc/eF+9J95b5237hv3Xfue/eD+9H95H52v7hf3W/ud/eH+9P95Sa5v90/7l/3nxvnxXvJvOReCi+ll8pL7aXxEry0XjovvZfBy+hl8jJ7Wbys3n9eNi+7l8PL6eXycnt5vLxePi+/V8Ar6BXyCntFvKJeMa+4V8Ir6ZXySntlvLJeOa+8V8Gr6FXyKntVvKpeNa+6V8Or6dXyant1vLpePa++18Br6DXyGntNvKZeM6+518Jr6bXyWnttvLZeO6+918Hr6HXyOntdvK5eN6+718Pr6fXyent9vL5eP6+/N8Ab6A3yBntDvKHeMG+4N8Ib6Y3yRntjvLHeOG+8N8Gb6E3yJntTvKneNG+6N8Ob6c3yZntzvLnePG++t8Bb6CV6i7zF3hJvqbfMW+6t8FZ6q7zV3hpvrbfOW+9t8DZ6m7zN3hZvq7fN2+7t8HZ6u7zd3h5vr7fP2+8d8A56h7zD3hHvqHfMO+6d8E56p7zT3hnvrHfOO+9d8C56l7zL3hXvqnfNwzzcIzzSozzaYzzW4zzeEzzRkzzZUzzV0zzdMzzTszzbczzX8zzfC7zQAx70kBd5Me+6d8O76d3ybnt3vLvePe++98B76D3yHntPvKfeM++598J76b3yXntvvLfeO++998H76H3yPntfvK/eN++798P76f3ykrzf3h/vr/fPi/Pj/WR+cj+Fn9JP5af20/gJflo/nZ/ez+Bn9DP5mf0sflb/Pz+bn93P4ef0c/m5/Tx+Xj+fn98v4Bf0C/mF/SJ+Ub+YX9wv4Zf0S/ml/TJ+Wb+cX96v4Ff0K/mV/Sp+Vb+aX92v4df0a/m1/Tp+Xb+eX99v4Df0G/mN/SZ+U7+Z39xv4bf0W/mt/TZ+W7+d397v4Hf0O/md/S5+V7+b393v4ff0e/m9/T5+X7+f398f4A/0B/mD/SH+UH+YP9wf4Y/0R/mj/TH+WH+cP96f4E/0J/mT/Sn+VH+aP92f4c/0Z/mz/Tn+XH+eP99f4C/0E/1F/mJ/ib/UX+Yv91f4K/1V/mp/jb/WX+ev9zf4G/1N/mZ/i7/V3+Zv93f4O/1d/m5/j7/X3+fv9w/4B/1D/mH/iH/UP+Yf90/4J/1T/mn/jH/WP+ef9y/4F/1L/mX/in/Vv+ZjPu4TPulTPu0zPutzPu8LvuhLvuwrvuprvu4bvulbvu07vut7vu8HfugDH/rIj/yYf92/4d/0b/m3/Tv+Xf+ef99/4D/0H/mP/Sf+U/+Z/9x/4b/0X/mv/Tf+W/+d/97/4H/0P/mf/S/+V/+b/93/4f/0f/lJ/m//j//X/+fHBfFBsiB5kCJIGaQKUgdpgoQgbZAuSB9kCDIGmYLMQZYga/BfkC3IHuQIcga5gtxBniBvkC/IHxQICgaFgsJBkaBoUCwoHpQISgalgtJBmaBsUC4oH1QIKgaVgspBlaBqUC2oHtQIaga1gtpBnaBuUC+oHzQIGgaNgsZBk6Bp0CxoHrQIWgatgtZBm6Bt0C5oH3QIOgadgs5Bl6Br0C3oHvQIega9gt5Bn6Bv0C/oHwwIBgaDgsHBkGBoMCwYHowIRgajgtHBmGBsMC4YH0wIJgaTgsnBlGBqMC2YHswIZgazgtnBnGBuMC+YHywIFgaJwaJgcbAkWBosC5YHK4KVwapgdbAmWBusC9YHG4KNwaZgc7Al2BpsC7YHO4Kdwa5gd7An2BvsC/YHB4KDwaHgcHAkOBocC44HJ4KTwangdHAmOBucC84HF4KLwaXgcnAluBpcC7AAD4iADKiADpiADbiAD4RADKRADpRADbRAD4zADKzADpzADbzAD4IgDEAAAxREQSy4HtwIbga3gtvBneBucC+4HzwIHgaPgsfBk+Bp8Cx4HrwIXgavgtfBm+Bt8C54H3wIPgafgs/Bl+Br8C34HvwIfga/gqTgd/An+Bv8C+LC+DBZmDxMEaYMU4WpwzRhQpg2TBemDzOEGcNMYeYwS5g1/C/MFmYPc4Q5w1xh7jBPmDfMF+YPC4QFw0Jh4bBIWDQsFhYPS4Qlw1Jh6bBMWDYsF5YPK4QVw0ph5bBKWDWsFlYPa4Q1w1ph7bBOWDesF9YPG4QNw0Zh47BJ2DRsFjYPW4Qtw1Zh67BN2DZsF7YPO4Qdw05h57BL2DXsFnYPe4Q9w15h77BP2DfsF/YPB4QDw0Hh4HBIODQcFg4PR4Qjw1Hh6HBMODYcF44PJ4QTw0nh5HBKODWcFk4PZ4Qzw1nh7HBOODecF84PF4QLw8RwUbg4XBIuDZeFy8MV4cpwVbg6XBOuDdeF68MN4cZwU7g53BJuDbeF28Md4c5wV7g73BPuDfeF+8MD4cHwUHg4PBIeDY+Fx8MT4cnwVHg6PBOeDc+F58ML4cXwUng5vBJeDa+FWIiHREiGVEiHTMiGXMiHQiiGUiiHSqiGWqiHRmiGVmiHTuiGXuiHQRiGIIQhCqMwFl4Pb4Q3w1vh7fBOeDe8F94PH4QPw0fh4/BJ+DR8Fj4PX4Qvw1fh6/BN+DZ8F74PP4Qfw0/h5/BL+DX8Fn4Pf4Q/w19hUvg7/BP+Df+FcSAeJAPJQQqQEqQCqUEakADSgnQgPcgAMoJMIDPIArKC/0A2kB3kADlBLpAb5AF5QT6QHxQABUEhUBgUAUVBMVAclAAlQSlQGpQBZUE5UB5UABVBJVAZVAFVQTVQHdQANUEtUBvUAXVBPVAfNAANQSPQGDQBTUEz0By0AC1BK9AatAFtQTvQHnQAHUEn0Bl0AV1BN9Ad9AA9QS/QG/QBfUE/0B8MAAPBIDAYDAFDwTAwHIwAI8EoMBqMAWPBODAeTAATwSQwGUwBU8E0MB3MADPBLDAbzAFzwTwwHywAC0EiWAQWgyVgKVgGloMVYCVYBVaDNWAtWAfWgw1gI9gENoMtYCvYBraDHWAn2AV2gz1gL9gH9oMD4CA4BA6DI+AoOAaOgxPgJDgFToMz4Cw4B86DC+AiuAQugyvgKrgGMIADApCAAjRgAAs4wAMBiEACMlCACjSgAwOYwAI2cIALPOCDAIQAAAgQiEAMXAc3wE1wC9wGd8BdcA/cBw/AQ/AIPAZPwFPwDDwHL8BL8Aq8Bm/AW/AOvAcfwEfwCXwGX8BX8A18Bz/AT/ALJIHf4A/4C/6BOBgPk8HkMAVMCVPB1DANTIBpYTqYHmaAGWEmmBlmgVnhfzAbzA5zwJwwF8wN88C8MB/MDwvAgrAQLAyLwKKwGCwOS8CSsBQsDcvAsrAcLA8rwIqwEqwMq8CqsBqsDmvAmrAWrA3rwLqwHqwPG8CGsBFsDJvAprAZbA5bwJawFWwN28C2sB1sDzvAjrAT7Ay7wK6wG+wOe8CesBfsDfvAvrAf7A8HwIFwEBwMh8ChcBgcDkfAkXAUHA3HwLFwHBwPJ8CJcBKcDKfAqXAanA5nwJlwFpwN58C5cB6cDxfAhTARLoKL4RK4FC6Dy+EKuBKugqvhGrgWroPr4Qa4EW6Cm+EWuBVug9vhDrgT7oK74R64F+6D++EBeBAegofhEXgUHoPH4Ql4Ep6Cp+EZeBaeg+fhBXgRXoKX4RV4FV6DGMQhAUlIQRoykIUc5KEARShBGSpQhRrUoQFNaEEbOtCFHvRhAEMIIIQIRjAGr8Mb8Ca8BW/DO/AuvAfvwwfwIXwEH8Mn8Cl8Bp/DF/AlfAVfwzfwLXwH38MP8CP8BD/DL/Ar/Aa/wx/wJ/wFk+Bv+Af+hf9gHIpHyVBylAKlRKlQapQGJaC0KB1KjzKgjCgTyoyyoKzoP5QNZUc5UE6UC+VGeVBelA/lRwVQQVQIFUZFUFFUDBVHJVBJVAqVRmVQWVQOlUcVUEVUCVVGVVBVVA1VRzVQTVQL1UZ1UF1UD9VHDVBD1Ag1Rk1QU9QMNUctUEvUCrVGbVBb1A61Rx1QR9QJdUZdUFfUDXVHPVBP1Av1Rn1QX9QP9UcD0EA0CA1GQ9BQNAwNRyPQSDQKjUZj0Fg0Do1HE9BENAlNRlPQVDQNTUcz0Ew0C81Gc9BcNA/NRwvQQpSIFqHFaAlaipah5WgFWolWodVoDVqL1qH1aAPaiDahzWgL2oq2oe1oB9qJdqHdaA/ai/ah/egAOogOocPoCDqKjqHj6AQ6iU6h0+gMOovOofPoArqILqHL6Aq6iq4hDOGIQCSiEI0YxCIO8UhAIpKQjBSkIg3pyEAmspCNHOQiD/koQCECCCKEIhRD19ENdBPdQrfRHXQX3UP30QP0ED1Cj9ET9BQ9Q8/RC/QSvUKv0Rv0Fr1D79EH9BF9Qp/RF/QVfUPf0Q/0E/1CSeg3+oP+on8oLoqPkkXJoxRRyihVlDpKEyVEaaN0UfooQ5QxyhRljrJEWaP/omxR9ihHlDPKFeWO8kR5o3xR/qhAVDAqFBWOikRFo2JR8ahEVDIqFZWOykRlo3JR+ahCVDGqFFWOqkRVo2pR9ahGVDOqFdWO6kR1o3pR/ahB1DBqFDWOmkRNo2ZR86hF1DJqFbWO2kRto3ZR+6hD1DHqFHWOukRdo25R96hH1DPqFfWO+kR9o35R/2hANDAaFA2OhkRDo2HR8GhENDIaFY2OxkRjo3HR+GhCNDGaFE2OpkRTo2nR9GhGNDOaFc2O5kRzo3nR/GhBtDBKjBZFi6Ml0dJoWbQ8WhGtjFZFq6M10dpoXbQ+2hBtjDZFm6Mt0dZoW7Q92hHtjHZFu6M9CXujfdH+6EB0MDoUHY6OREejY9Hx6ER0MjoVnY7ORGejc9H56EJ0MboUXY6uRFejaxEW4RERkREV0RETsREX8ZEQiZEUyZESqZEW6ZERmZEV2ZETuZEX+VEQhRGIYISiKIpF16Mb0c3oVnQ7uhPdje5F96MH0cPoUfQ4ehI9jZ5Fz6MX0cvoVfQ6ehO9jd5F76MP0cfoU/Q5+hJ9jb5F36Mf0c/oV5QU/Y7+RH+jf1FcLD6WLJY8liKWMpYqljqWJpYQSxtLF0sfyxDLGMsUyxzLEssa+y+WLZY9liOWM5YrljuWJ5Y3li+WP1YgVjBWKFY4ViRWNFYsNiCuRKxkrFSsdKxMrGysXKx8rEKsYqxSrHKsSqxqrFqseqxGrGasVqx2rE6sbqxerH6sQaxhrFGscaxJrGmsWax5rEWsZaxVrHWsTaxtrF2sfaxDrGOsU6xzrEusa6xbrHusR6xnrFesd6xP7H8k3GN3Xs0CANDUtm3btm23qW3btm3btm0d28bMnKdNlbvuej/sv7H7Yf2xAVg8NhAbhA3GhmBDsWHYcGwENhIbhY3GxmBjsXHYeGwCNhGbhE3GpmBTsWnYdGwGNhObhc3G5mBzsXnYfGwBthBbhC3GlmBLsWXYcmwFthJbha3G1mBrsXXYemwDthHbhG3GtmBbsW3YdmwHthPbhe3G9mB7sX3YfuwAdhA7hB3GjmBHsWPYcewEdhI7hZ3GzmBnsXPYeewCdhG7hF3GrmBXsWvYdewGdhO7hd3G7mB3sXvYfewB9hB7hD3GnmBPsWfYc+wF9hJ7hb3G3mBvsXfYe+wD9hH7hH3GvmBfsW/YdwzDcIzASIzCaIzBWIzDeEzAREzCZEzBVEzDdMzATMzCbMzBXMzDfCzAQgxgEENYhMWwH9hPLAH7hf3G/mB/sX9YIhaHJ8GT4snw5HgKPCWeCk+Np8HT4unw9HgGPCOeCc+MZ8Gz4tnw7HgOPCeeC8+N58Hz4vnw/HgBvCBeCC+MF8GL4sXw4ngJvCReCi+Nl8HL4uXw8ngFvCJeCa+MV8Gr4tXw6ngNvCZeC6+N18Hr4vXw+ngDvCHeCG+MN8Gb4s3w5ngLvCXeCm+Nt8Hb4u3w9ngHvCPeCe+Md8G74t3w7ngPvCfeC++N98H74v3w/vgAPB4fiA/CB+ND8KH4MHw4PgIfiY/CR+Nj8LH4OHw8PgGfiE/CJ+NT8Kn4NHw6PgOfic/CZ+Nz8Ln4PHw+vgBfiC/CF+NL8KX4Mnw5vgJfia/CV+Nr8LX4Onw9vgHfiG/CN+Nb8K34Nnw7vgPfie/Cd+N78L34Pnw/fgA/iB/CD+NH8KP4Mfw4fgI/iZ/CT+Nn8LP4Ofw8fgG/iF/CL+NX8Kv4Nfw6fgO/id/Cb+N38Lv4Pfw+/gB/iD/CH+NP8Kf4M/w5/gJ/ib/CX+Nv8Lf4O/w9/gH/iH/CP+Nf8K/4N/w7juE4TuAkTuE0zuAszuE8LuAiLuEyruAqruE6buAmbuE27uAu7uE+HuAhDnCIIzzCY/gP/CeegP/Cf+N/8L/4PzwRjyOSEEmJZERyIgWRkkhFpCbSEGmJdER6IgORkchEZCayEFmJbER2IgeRk8hF5CbyEHmJfER+ogBRkChEFCaKEEWJYkRxogRRkihFlCbKEGWJckR5ogJRkahEVCaqEFWJakR1ogZRk6hF1CbqEHWJekR9ogHRkGhENCaaEE2JZkRzogXRkmhFtCbaEG2JdkR7ogPRkehEdCa6EF2JbkR3ogfRk+hF9Cb6EH2JfkR/YgARTwwkBhGDiSHEUGIYMZwYQYwkRhGjiTHEWGIcMZ6YQEwkJhGTiSnEVGIaMZ2YQcwkZhGziTnEXGIeMZ9YQCwkFhGLiSXEUmIZsZxYQawkVhGriTXEWmIdsZ7YQGwkNhGbiS3EVmIbsZ3YQewkdhG7iT3EXmIfsZ84QBwkDhGHiSPEUeIYcZw4QZwkThGniTPEWeIccZ64QFwkLhGXiSvEVeIacZ24QdwkbhG3iTvEXeIecZ94QDwkHhGPiSfEU+IZ8Zx4QbwkXhGviTfEW+Id8Z74QHwkPhGfiS/EV+Ib8Z3ACJwgCJKgCJpgCJbgCJ4QCJGQCJlQCJXQCJ0wCJOwCJtwCJfwCJ8IiJAABCQQEREx4gfxk0ggfhG/iT/EX+IfkUjEkUnIpGQyMjmZgkxJpiJTk2nItGQ6Mj2ZgcxIZiIzk1nIrGQ2MjuZg8xJ5iJzk3nIvGQ+Mj9ZgCxIFiILk0XIomQxsjhZgixJliJLk2XIsmQ5sjxZgaxIViIrk1XIqmQ1sjpZg6xJ1iJrk3XIumQ9sj7ZgGxINiIbk03IpmQzsjnZgmxJtiJbk23ItmQ7sj3ZgexIdiI7k13IrmQ3sjvZg+xJ9iJ7k33IvmQ/sj85gIwnB5KDyMHkEHIoOYwcTo4gR5KjyNHkGHIsOY4cT04gJ5KTyMnkFHIqOY2cTs4gZ5KzyNnkHHIuOY+cTy4gF5KLyMXkEnIpuYxcTq4gV5KryNXkGnItuY5cT24gN5KbyM3kFnIruY3cTu4gd5K7yN3kHnIvuY/cTx4gD5KHyMPkEfIoeYw8Tp4gT5KnyNPkGfIseY48T14gL5KXyMvkFfIqeY28Tt4gb5K3yNvkHfIueY+8Tz4gH5KPyMfkE/Ip+Yx8Tr4gX5KvyNfkG/It+Y58T34gP5KfyM/kF/Ir+Y38TmIkThIkSVIkTTIkS3IkTwqkSEqkTCqkSmqkThqkSVqkTTqkS3qkTwZkSAISkoiMyBj5g/xJJpC/yN/kH/Iv+Y9MJOOoJFRSKhmVnEpBpaRSUampNFRaKh2VnspAZaQyUZmpLFRWKhuVncpB5aRyUbmpPFReKh+VnypAFaQKUYWpIlRRqhhVnCpBlaRKUaWpMlRZqhxVnqpAVaQqUZWpKlRVqhpVnapB1aRqUbWpOlRdqh5Vn2pANaQaUY2pJlRTqhnVnGpBtaRaUa2pNlRbqh3VnupAdaQ6UZ2pLlRXqhvVnepB9aR6Ub2pPlRfqh/VnxpAxVMDqUHUYGoINZQaRg2nRlAjqVHUaGoMNZYaR42nJlATqUnUZGoKNZWaRk2nZlAzqVnUbGoONZeaR82nFlALqUXUYmoJtZRaRi2nVlArqVXUamoNtZZaR62nNlAbqU3UZmoLtZXaRm2ndlA7qV3UbmoPtZfaR+2nDlAHqUPUYeoIdZQ6Rh2nTlAnqVPUaeoMdZY6R52nLlAXqUvUZeoKdZW6Rl2nblA3qVvUbeoOdZe6R92nHlAPqUfUY+oJ9ZR6Rj2nXlAvqVfUa+oN9ZZ6R72nPlAfqU/UZ+oL9ZX6Rn2nMAqnCIqkKIqmGIqlOIqnBEqkJEqmFEqlNEqnDMqkLMqmHMqlPMqnAiqkAAUpREVUjPpB/aQSqF/Ub+oP9Zf6RyVScXQSOimdjE5Op6BT0qno1HQaOi2djk5PZ6Az0pnozHQWOiudjc5O56Bz0rno3HQeOi+dj85PF6AL0oXownQRuihdjC5Ol6BL0qXo0nQZuixdji5PV6Ar0pXoynQVuipdja5O16Br0rXo2nQdui5dj65PN6Ab0o3oxnQTuindjG5Ot6Bb0q3o1nQbui3djm5Pd6A70p3oznQXuivdje5O96B70r3o3nQfui/dj+5PD6Dj6YH0IHowPYQeSg+jh9Mj6JH0KHo0PYYeS4+jx9MT6In0JHoyPYWeSk+jp9Mz6Jn0LHo2PYeeS8+j59ML6IX0InoxvYReSi+jl9Mr6JX0Kno1vYZeS6+j19Mb6I30JnozvYXeSm+jt9M76J30Lno3vYfeS++j99MH6IP0IfowfYQ+Sh+jj9Mn6JP0Kfo0fYY+S5+jz9MX6Iv0JfoyfYW+Sl+jr9M36Jv0Lfo2fYe+S9+j79MP6If0I/ox/YR+Sj+jn9Mv6Jf0K/o1/YZ+S7+j39Mf6I/0J/oz/YX+Sn+jv9MYjdMETdIUTdMMzdIczdMCLdISLdMKrdIardMGbdIWbdMO7dIe7dMBHdKAhjSiIzpG/6B/0gn0L/o3/Yf+S/+jE+k4JgmTlEnGJGdSMCmZVExqJg2TlknHpGcyMBmZTExmJguTlcnGZGdyMDmZXExuJg+Tl8nH5GcKMAWZQkxhpghTlCnGFGdKMCWZUkxppgxTlinHlGcqMBWZSkxlpgpTlanGVGdqMDWZWkxtpg5Tl6nH1GcaMA2ZRkxjpgnTlGnGNGdaMC2ZVkxrpg3TlmnHtGc6MB2ZTkxnpgvTlenGdGd6MD2ZXkxvpg/Tl+nH9GcGMPHMQGYQM5gZwgxlhjHDmRHMSGYUM5oZw4xlxjHjmQnMRGYSM5mZwkxlpjHTmRnMTGYWM5uZw8xl5jHzmQXMQmYRs5hZwixlljHLmRXMSmYVs5pZw6xl1jHrmQ3MRmYTs5nZwmxltjHbmR3MTmYXs5vZw+xl9jH7mQPMQeYQc5g5whxljjHHmRPMSeYUc5o5w5xlzjHnmQvMReYSc5m5wlxlrjHXmRvMTeYWc5u5w9xl7jH3mQfMQ+YR85h5wjxlnjHPmRfMS+YV85p5w7xl3jHvmQ/MR+YT85n5wnxlvjHfGYzBGYIhGYqhGYZhGY7hGYERGYmRGYVRGY3RGYMxGYuxGYdxGY/xmYAJGcBABjERE2N+MD+ZBOYX85v5w/xl/jGJTBybhE3KJmOTsynYlGwqNjWbhk3LpmPTsxnYjGwmNjObhc3KZmOzsznYnGwuNjebh83L5mPzswXYgmwhtjBbhC3KFmOLsyXYkmwptjRbhi3LlmPLsxXYimwltjJbha3KVmOrszXYmmwttjZbh63L1mPrsw3YhmwjtjHbhG3KNmObsy3YlmwrtjXbhm3LtmPbsx3YjmwntjPbhe3KdmO7sz3Ynmwvtjfbh+3L9mP7swPYeHYgO4gdzA5hh7LD2OHsCHYkO4odzY5hx7Lj2PHsBHYiO4mdzE5hp7LT2OnsDHYmO4udzc5h57Lz2PnsAnYhu4hdzC5hl7LL2OXsCnYlu4pdza5h17Lr2PXsBnZjXPK4uP9jt7Hb2R3sTnYXu5vdw+5l97H72QPsQfYQe5g9wh5lj7HH2RPsSfYUe5o9w55lz7Hn2QvsRfYSe5m9wl5lr7HX2RvsTfYWe5u9w95l77H32QfsQ/YR+5h9wj5ln7HP2RfsS/YV+5p9w75l37Hv2Q/sR/YT+5n9wn5lv7HfWYzFWYIlWYqlWYZlWY7lWYEVWYmVWYVVWY3VWYM1WYu1WYd1WY/12YANWcBCFrERG2N/sD/ZBPYX+5v9w/5l/7GJbByXhEvKJeOScym4lFwqLjWXhkvLpePScxm4jFwmLjOXhcvKZeOyczm4nFwuLjeXh8vL5ePycwW4glwhrjBXhCvKFeOKcyW4klwprjRXhivLlePKcxW4ilwlrjJXhavKVeOqczW4mlwtrjZXh6vL1ePqcw24hlwjrjHXhGvKNeOacy24llwrrjXXhmvLtePacx24jlwnrjPXhevKdeO6cz24nlwvrjfXh+vL9eP6cwO4eG4gN4gbzA3hhnLDuOHcCG4kN4obzY3hxnLjuPHcBG4iN4mbzE3hpnLTuOncDG4mN4ubzc3h5nLzuPncAm4ht4hbzC3hlnLLuOXcCm4lt4pbza3h1nLruPXcBm4jt4nbzG3htnLbuO3cDm4nt4vbze3h9nL7uP3cAe4gd4g7zB3hjnLHuOPcCe4kd4o7zZ3hznLnuPPcBe4id4m7zF3hrnLXuOvcDe4md4u7zd3h7nL3uPvcA+4h94h7zD3hnnLPuOfcC+4l94p7zb3h3nLvuPfcB+4j94n7zH3hvnLfuO8cxuEcwZEcxdEcw7Ecx/GcwImcxMmcwqmcxumcwZmcxdmcw7mcx/lcwIUc4CCHuIiLcT+4n1wC94v7zf3h/nL/uEQujk/CJ+WT8cn5FHxKPhWfmk/Dp+XT8en5DHxGPhOfmc/CZ+Wz8dn5HHxOPhefm8/D5+Xz8fn5AnxBvhBfmC/CF+WL8cX5EnxJvhRfmi/Dl+XL8eX5CnxFvhJfma/CV+Wr8dX5GnxNvhZfm6/D1+Xr8fX5BnxDvhHfmG/CN+Wb8c35FnxLvhXfmm/Dt+Xb8e35DnxHvhPfme/Cd+W78d35HnxPvhffm+/D9+X78f35AXw8P5AfxA/mh/BD+WH8cH4EP5IfxY/mx/Bj+XH8eH4CP5GfxE/mp/BT+Wn8dH4GP5Ofxc/m5/Bz+Xn8fH4Bv5BfxC/ml/BL+WX8cn4Fv5Jfxa/m1/Br+XX8en4Dv5HfxG/mt/Bb+W38dn4Hv5Pfxe/m9/B7+X38fv4Af5A/xB/mj/BH+WP8cf4Ef5I/xZ/mz/Bn+XP8ef4Cf5G/xF/mr/BX+Wv8df4Gf5O/xd/m7/B3+Xv8ff4B/5B/xD/mn/BP+Wf8c/4F/5J/xb/m3/Bv+Xf8e/4D/5H/xH/mv/Bf+W/8dx7jcZ7gSZ7iaZ7hWZ7jeV7gRV7iZV7hVV7jdd7gTd7ibd7hXd7jfT7gQx7wkEd8xMf4H/xPPoH/xf/m//B/+X98Ih8nJBGSCsmE5EIKIaWQSkgtpBHSCumE9EIGIaOQScgsZBGyCtmE7EIOIaeQS8gt5BHyCvmE/EIBoaBQSCgsFBGKCsWE4kIJoaRQSigtlBHKCuWE8kIFoaJQSagsVBGqCtWE6kINoaZQS6gt1BHqCvWE+kIDoaHQSGgsNBGaCs2E5kILoaXQSmgttBHaCu2E9kIHoaPQSegsdBG6Ct2E7kIPoafQS+gt9BH6Cv2E/sIAIV4YKAwSBgtDhKHCMGG4MEIYKYwSRgtjhLHCOGG8MEGYKEwSJgtThKnCNGG6MEOYKcwSZgtzhLnCPGG+sEBYKCwSFgtLhKXCMmG5sEJYKawSVgtrhLXCOmG9sEHYKGwSNgtbhK3CNmG7sEPYKewSdgt7hL3CPmG/cEA4KBwSDgtHhKPCMeG4cEI4KZwSTgtnhLPCOeG8cEG4KFwSLgtXhKvCNeG6cEO4KdwSbgt3hLvCPeG+8EB4KDwSHgtPhKfCM+G58EJ4KbwSXgtvhLfCO+G98EH4KHwSPgtfhK/CN+G7gAm4QAikQAm0wAiswAm8IAiiIAmyoAiqoAm6YAimYAm24Aiu4Am+EAihAAQoICESYsIP4aeQIPwSfgt/hL/CPyFRiBOTiEnFZGJyMYWYUkwlphbTiGnFdGJ6MYOYUcwkZhaziFnFbGJ2MYeYU8wl5hbziHnFfGJ+sYBYUCwkFhaLiEXFYmJxsYRYUiwllhbLiGXFcmJ5sYJYUawkVhariFXFamJ1sYZYU6wl1hbriHXFemJ9sYHYUGwkNhabiE3FZmJzsYXYUmwlthbbiG3FdmJ7sYPYUewkdha7iF3FbmJ3sYfYU+wl9hb7iH3FfmJ/cYAYLw4UB4mDxSHiUHGYOFwcIY4UR4mjxTHiWHGcOF6cIE4UJ4mTxSniVHGaOF2cIc4UZ4mzxTniXHGeOF9cIC4UF4mLxSXiUnGZuFxcIa4UV4mrxTXiWnGduF7cIG4UN4mbxS3iVnGbuF3cIe4Ud4m7xT3iXnGfuF88IB4UD4mHxSPiUfGYeFw8IZ4UT4mnxTPiWfGceF68IF4UL4mXxSviVfGaeF28Id4Ub4m3xTviXfGeeF98ID4UH4mPxSfiU/GZ+Fx8Ib4UX4mvxTfiW/Gd+F78IH4UP4mfxS/iV/Gb+F3ERFwkRFKkRFpkRFbkRF4URFGURFlURFXURF00RFO0RFt0RFf0RF8MxFAEIhSRGIkx8Yf4U0wQf4m/xT/iX/GfmCjGSUmkpFIyKbmUQkoppZJSS2mktFI6Kb2UQcooZZIyS1mkrFI2KbuUQ8op5ZJyS3mkvFI+Kb9UQCooFZIKS0WkolIxqbhUQioplZJKS2WkslI5qbxUQaooVZIqS1WkqlI1qbpUQ6op1ZJqS3WkulI9qb7UQGooNZIaS02kplIzqbnUQmoptZJaS22ktlI7qb3UQeoodZI6S12krlI3qbvUQ+op9ZJ6S32kvlI/qb80QIqXBkqDpMHSEGmoNEwaLo2QRkqjpNHSGGmsNE4aL02QJkqTpMnSFGmqNE2aLs2QZkqzpNnSHGmuNE+aLy2QFkqLpMXSEmmptExaLq2QVkqrpNXSGmmttE5aL22QNkqbpM3SFmmrtE3aLu2Qdkq7pN3SHmmvtE/aLx2QDkqHpMPSEemodEw6Lp2QTkqnpNPSGemsdE46L12QLkqXpMvSFemqdE26Lt2Qbkq3pNvSHemudE+6Lz2QHkqPpMfSE+mp9Ex6Lr2QXkqvpNfSG+mt9E56L32QPkqfpM/SF+mr9E36LmESLhESKVESLTESK3ESLwmSKEmSLCmSKmmSLhmSKVmSLTmSK3mSLwVSKAEJSkiKpJj0Q/opJUi/pN/SH+mv9E9KlOLkJHJSOZmcXE4hp5RTyanlNHJaOZ2cXs4gZ5QzyZnlLHJWOZucXc4h55RzybnlPHJeOZ+cXy4gF5QLyYXlInJRuZhcXC4hl5RLyaXlMnJZuZxcXq4gV5QryZXlKnJVuZpcXa4h15RrybXlOnJduZ5cX24gN5QbyY3lJnJTuZncXG4ht5Rbya3lNnJbuZ3cXu4gd5Q7yZ3lLnJXuZvcXe4h95R7yb3lPnJfuZ/cXx4gx8sD5UHyYHmIPFQeJg+XR8gj5VHyaHmMPFYeJ4+XJ8gT5UnyZHmKPFWeJk+XZ8gz5VnybHmOPFeeJ8+XF8gL5UXyYnmJvFReJi+XV8gr5VXyanmNvFZeJ6+XN8gb5U3yZnmLvFXeJm+Xd8g75V3ybnmPvFfeJ++XD8gH5UPyYfmIfFQ+Jh+XT8gn5VPyafmMfFY+J5+XL8gX5UvyZfmKfFW+Jl+Xb8g35VvybfmOfFe+J9+XH8gP5UfyY/mJ/FR+Jj+XX8gv5Vfya/mN/FZ+J7+XP8gf5U/yZ/mL/FX+Jn+XMRmXCZmUKZmWGZmVOZmXBVmUJVmWFVmVNVmXDdmULdmWHdmVPdmXAzmUgQxlJEdyTP4h/5QT5F/yb/mP/Ff+JyfKcUoSJamSTEmupFBSKqmU1EoaJa2STkmvZFAyKpmUzEoWJauSTcmu5FByKrmU3Erq/461uAJKQaWQUlgpohRViinFlRJKSaWUUlopo5RVyinllQpKRaWSUlmpolRVqinVlRpKTaWWUlupo9RV6in1lQZKQ6WR0lhpojRVminNlRZKS6WV0lppo7RV2intlQ5KR6WT0lnponRVuindlR5KT6WX0lvpo/RV+in9lQFKvDJQGaQMVoYoQ5VhynBlhDJSGaWMVsYoY5VxynhlgjJRmaRMVqYoU5VpynRlhjJTmaXMVuYoc5V5ynxlgbJQWaQsVpYoS5VlynJlhbJSWaWsVtYoa5V1ynplg7JR2aRsVrYoW5VtynZlh7JT2aXsVvYoe5V9yn7lgHJQOaQcVo4oR5VjynHlhHJSOaWcVs4oZ5VzynnlgnJRuaRcVq4oV5VrynXlhnJTuaXcVu4od5V7yn3lgfJQeaQ8Vp4oT5VnynPlhfJSeaW8Vt4ob5V3ynvlg/JR+aR8Vr4oX5VvyncFU3CFUEiFUmiFUViFU3hFUERFUmRFUVRFU3TFUEzFUmzFUVzFU3wlUEIFKFBBSqTElB/KTyVB+aX8Vv4of5V/SqISpyZRk6rJ1ORqCjWlmkpNraZR06rp1PRqBjWjmknNrGZRs6rZ1OxqDjWnmkvNreZR86r51PxqAbWgWkgtrBZRi6rF1OJqCbWkWkotrZZRy6rl1PJqBbWiWkmtrFZRq6rV1OpqDbWmWkutrdZR66r11PpqA7Wh2khtrDZRm6rN1OZqC7Wl2kptrbZR26rt1PZqB7Wj2kntrHZRu6rd1O5qD7Wn2kvtrfZR+6r91P7qADVeHagOUgerQ9Sh6jB1uDpCHamOUkerY9Sx6jh1vDpBnahOUierU9Sp6jR1ujpDnanOUmerc9S56jx1vrpAXaguUherS9Sl6jJ1ubpCXamuUlera9S16jp1vbpB3ahuUjerW9St6jZ1u7pD3anuUnere9S96j51v3pAPageUg+rR9Sj6jH1uHpCPameUk+rZ9Sz6jn1vHpBvaheUi+rV9Sr6jX1unpDvaneUm+rd9S76j31vvpAfag+Uh+rT9Sn6jP1ufpCfam+Ul+rb9S36jv1vfpB/ah+Uj+rX9Sv6jf1u4qpuEqopEqptMqorMqpvCqooiqpsqqoqqqpumqopmqptuqoruqpvhqooQpUqCI1UmPqD/WnmqD+Un+rf9S/6j81UY3TkmhJtWRaci2FllJLpaXW0mhptXRaei2DllHLpGXWsmhZtWxadi2HllPLpeXW8mh5tXxafq2AVlArpBXWimhFtWJaca2EVlIrpZXWymhltXJaea2CVlGrpFXWqmhVtWpada2GVlOrpdXW6mh1tXpafa2B1lBrpDXWmmhNtWZac62F1lJrpbXW2mhttXZae62D1lHrpHXWumhdtW5ad62H1lPrpfXW+mh9tX5af22AFq8N1AZpg7Uh2lBtmDZcG6GN1EZpo7Ux2lhtnDZem6BN1CZpk7Up2lRtmjZdm6HN1GZps7U52lxtnjZfW6At1BZpi7Ul2lJtmbZcW6Gt1FZpq7U12lptnbZe26Bt1DZpm7Ut2lZtm7Zd26Ht1HZpu7U92t6ExMRE7YB2UDukHdaOaEe1Y9px7YR2UjulndbOaGe1c9p57YJ2UbukXdauaFe1a9p17YZ2U7ul3dbuaHe1e9p97YH2UHukPdaeaE+1Z9pz7YX2UnulvdbeaG+1d9p77YP2Ufukfda+aF+1b9p3DdNwjdBIjdJojdFYjdN4TdBETdJkTdFUTdN0zdBMzdJszdFczdN8LdBCDWhQQ1qkxbQf2k8tQful/db+aH+1f1qiFqcn0ZPqyfTkego9pZ5KT62n0dPq6fT0egY9o55Jz6xn0bPq2fTseg49p55Lz63n0fPq+fT8egG9oF5IL6wX0YvqxfTiegm9pF5KL62X0cvq5fTyegW9ol5Jr6xX0avq1fTqeg29pl5Lr63X0evq9fT6egO9od5Ib6w30ZvqzfTmegu9pd5Kb6230dvq7fT2ege9o95J76x30bvq3fTueg+9p95L76330fvq/fT++gA9Xh+oD9IH60P0ofowfbg+Qh+pj9JH62P0sfo4fbw+QZ+oT9In61P0qfo0fbo+Q5+pz9Jn63P0ufo8fb6+QF+oL9IX60v0pfoyfbm+Ql+pr9JX62v0tfo6fb2+Qd+ob9I361v0rfo2fbu+Q9+p79J363v0vfo+fb9+QD+oH9IP60f0o/ox/bh+Qj+pn9JP62f0s/o5/bx+Qb+oX9Iv61f0q/o1/bp+Q7+p39Jv63f0u/o9/b7+QH+oP9If60/0p/oz/bn+Qn+pv9Jf62/0t/o7/b3+Qf+of9I/61/0r/o3/buO6bhO6KRO6bTO6KzO6bwu6KIu6bKu6Kqu6bpu6KZu6bbu6K7u6b4e6KEOdKgjPdJj+g/9p56g/9J/63/0v/o/PVGPM5IYSY1kRnIjhZHSSGWkNtIYaY10Rnojg5HRyGRkNrIYWY1sRnYjh5HTyGXkNvIYeY18Rn6jgFHQKGQUNooYRY1iRnGjhFHSKGWUNsoYZY1yRnmjglHRqGRUNqoYVY1qRnWjhlHTqGXUNuoYdY16Rn2jgdHQaGQ0NpoYTY1mRnOjhdHSaGW0NtoYbY12Rnujg9HR6GR0NroYXY1uRnejh9HT6GX0NvoYfY1+Rn9jgBFvDDQGGYONIcZQY5gx3BhhjDRGGaONMcZYY5wx3phgTDQmGZONKcZUY5ox3ZhhzDRmGbONOcZcY54x31hgLDQWGYuNJcZSY5mx3FhhrDRWGauNNcZaY52x3thgbDQ2GZuNLcZWY5ux3dhh7DR2GbuNPcZeY5+x3zhgHDQOGYeNI8ZR45hx3DhhnDROGaeNM8ZZ45xx3rhgXDQuGZeNK8ZV45px3bhh3DRuGbeNO8Zd455x33hgPDQeGY+NJ8ZT45nx3HhhvDReGa+NN8Zb453x3vhgfDQ+GZ+NL8ZX45vx3cAM3CAM0qAM2mAM1uAM3hAM0ZAM2VAM1dAM3TAM07AM23AM1/AM3wiM0AAGNJARGTHjh/HTSDB+Gb+NP8Zf45+RaMSZScykZjIzuZnCTGmmMlObacy0ZjozvZnBzGhmMjObWcysZjYzu5nDzGnmMnObecy8Zj4zv1nALGgWMgubRcyiZjGzuFnCLGmWMkubZcyyZjmzvFnBrGhWMiubVcyqZjWzulnDrGnWMmubdcy6Zj2zvtnAbGg2MhubTcymZjOzudnCbGm2Mlubbcy2ZjuzvdnB7Gh2MjubXcyuZjezu9nD7Gn2Mnubfcy+Zj+zvznAjDcHmoPMweYQc6g5zBxujjBHmqPM0eYYc6w5zhxvTjAnmpPMyeYUc6o5zZxuzjBnmrPM2eYcc645z5xvLjAXmovMxeYSc6m5zFxurjBXmqvM1eYac625zlxvbjA3mpvMzeYWc6u5zdxu7jB3mrvM3eYec6+5z9xvHjAPmofMw+YR86h5zDxunjBPmqfM0+YZ86x5zjxvXjAvmpfMy+YV86p5zbxu3jBvmrfM2+Yd8655z7xvPjAfmo/Mx+YT86n5zHxuvjBfmq/M1+Yb8635znxvfjA/mp/Mz+YX86v5zfxuYiZuEiZpUiZtMiZrciZvCqZoSqZsKqZqaqZuGqZpWqZtOqZreqZvBmZoAhOayIzMmPnD/GkmmL/M3+Yf86/5z0w046wkVlIrmZXcSmGltFJZqa00VlornZXeymBltDJZma0sVlYrm5XdymHltHJZua08Vl4rn5XfKmAVtApZha0iVlGrmFXcKmGVtEpZpa0yVlmrnFXeqmBVtCpZla0qVlWrmlXdqmHVtGpZta06Vl2rnlXfamA1tBpZja0mVlOrmdXcamG1tFpZra02VlurndXe6mB1tDpZna0uVlerm9Xd6mH1tHpZva0+Vl+rn9XfGmDFWwOtQdZga4g11BpmDbdGWCOtUdZoa4w11hpnjbcmWBOtSdZka4o11ZpmTbdmWDOtWdZsa44115pnzbcWWAutRdZia4m11FpmLbdWWCutVdZqa4211lpnrbc2WButTdZma4u11dpmbbd2WDutXdZua4+119pn7bcOWAetQ9Zh64h11DpmHbdOWCetU9Zp64x11jpnnbcuWBetS9Zl64p11bpmXbduWDetW9Zt645117pn3bceWA+tR9Zj64n11HpmPbdeWC+tV9Zr64311npnvbc+WB+tT9Zn64v11fpmfbcwC7cIi7Qoi7YYi7U4i7cES7QkS7YUS7U0S7cMy7Qsy7Ycy7U8y7cCK7SABS1kRVbM+mH9tBKsX9Zv64/11/pnJVpxdhI7qZ3MTm6nsFPaqezUdho7rZ3OTm9nsDPamezMdhY7q53Nzm7nsHPauezcdh47r53Pzm8XsAvahezCdhG7qF3MLm6XsEvapezSdhm7rF3OLm9XsCvalezKdhW7ql3Nrm7XsGvatezadh27rl3Prm83sBvajezGdhO7qd3Mbm63sFvarezWdhu7rd3Obm93sDvanezOdhe7q93N7m73sHvavezedh+7r93P7m8PsOPtgfYge7A9xB5qD7OH2yPskfYoe7Q9xh5rj7PH2xPsifYke7I9xZ5qT7On2zPsmfYse7Y9x55rz7Pn2wvshfYie7G9xF5qL7OX2yvslfYqe7W9xl5rr7PX2xvsjfYme7O9xd5qb7O32zvsnfYue7e9x95r77P32wfsg/Yh+7B9xD5qH7OP2yfsk/Yp+7R9xj5rn7PP2xfsi/Yl+7J9xb5qX7Ov2zfsm/Yt+7Z9x75r37Pv2w/sh/Yj+7H9xH5qP7Of2y/sl/Yr+7X9xn5rv7Pf2x/sj/Yn+7P9xf5qf7O/25iN24RN2pRN24zN2pzN24It2pIt24qt2pqt24Zt2pZt247t2p7t24Ed2sCGNrIjO2b/sH/aCfYv+7f9x/5r/7MT7TgniZPUSeYkd1I4KZ1UTmonjZPWSeekdzI4GZ1MTmYni5PVyeZkd3I4OZ1cTm4nj5PXyefkdwo4BZ1CTmGniFPUKeYUd0o4JZ1STmmnjFPWKeeUdyo4FZ1KTmWnilPVqeZUd2o4NZ1aTm2njlPXqefUdxo4DZ1GTmOnidPUaeY0d1o4LZ1WTmunjdPWaee0dzo4HZ1OTmeni9PV6eZ0d3o4PZ1eTm+nj9PX6ef0dwY48c5AZ5Az2BniDHWGOcOdEc5IZ5Qz2hnjjHXGOeOdCc5EZ5Iz2ZniTHWmOdOdGc5MZ5Yz25njzHXmOfOdBc5CZ5Gz2FniLHWWOcudFc5KZ5Wz2lnjrHXWOeudDc5GZ5Oz2dnibHW2OdudHc5OZ5ez29nj7HX2OfudA85B55Bz2DniHHWOOcedE85J55Rz2jnjnHXOOeedC85F55Jz2bniXHWuOdedG85N55Zz27nj3HXuOfedB85D55Hz2HniPHWeOc+dF85L55Xz2nnjvHXeOe+dD85H55Pz2fnifHW+Od8dzMEdwiEdyqEdxmEdzuEdwREdyZEdxVEdzdEdwzEdy7Edx3Edz/GdwAkd4EAHOZETc344P50E55fz2/nj/HX+OYlOnJvETeomc5O7KdyUbio3tZvGTeumc9O7GdyMbiY3s5vFzepmc7O7Odycbi43t5vHzevmc/O7BdyCbiG3sFvELeoWc4u7JdySbim3tFvGLeuWc8u7FdyKbiW3slvFrepWc6u7Ndyabi23tlvHrevWc+u7DdyGbiO3sdvEbeo2c5u7LdyWbiu3tdvGbeu2c9u7HdyObie3s9vF7ep2c7u7Pdyebi+3t9vH7ev2c/u7A9x4d6A7yB3sDnGHusPc4e4Id6Q7yh3tjnHHuuPc8e4Ed6I7yZ3sTnGnutPc6e4Md6Y7y53tznHnuvPc+e4Cd6G7yF3sLnGXusvc5e4Kd6W7yl3trnHXuuvc9e4Gd6O7yd3sbnG3utvc7e4Od6e7y93t7nH3uvvc/e4B96B7yD3sHnGPusfc4+4J96R7yj3tnnHPuufc8+4F96J7yb3sXnGvutfc6+4N96Z7y73t3nHvuvfc++4D96H7yH3sPnGfus/c5+4L96X7yn3tvnHfuu/c9+4H96P7yf3sfnG/ut/c7y7m4i7hki7l0i7jsi7n8q7giq7kyq7iqq7m6q7hmq7l2q7juq7n+m7ghi5woYvcyI25P9yfboL7y/3t/nH/uv/cRDfOS+Il9ZJ5yb0UXkovlZfaS+Ol9dJ56b0MXkYvk5fZy+Jl9bJ52b0cXk4vl5fby+Pl9fJ5+b0CXkGvkFfYK+IV9Yp5xb0SXkmvlFfaK+OV9cp55b0KXkWvklfZq+JV9ap51b0aXk2vllfbq+PV9ep59b0GXkOvkdfYa+I19Zp5zb0WXkuvldfaa+O19dp57b0OXkevk9fZ6+J19bp53b0eXk+vl9fb6+P19fp5/b0BXrw30BvkDfaGeEO9Yd5wb4Q30hvljfbGeGO9cd54b4I30ZvkTfameFO9ad50b4Y305vlzfbmeHO9ed58b4G30FvkLfaWeEu9Zd5yb4W30lvlrfbWeGu9dd56b4O30dvkbfa2eFu9bd52b4e309vl7fb2eHu9fd5+74B30DvkHfaOeEe9Y95x74R30jvlnfbOeGe9c95574J30bvkXfaueFe9a95174Z307vl3fbueHe9e95974H30HvkPfaeeE+9Z95z74X30nvlvfbeeG+9d95774P30fvkffa+eF+9b953D/Nwj/BIj/Joj/FYj/N4T/BET/JkT/FUT/N0z/BMz/Jsz/Fcz/N8L/BCD3jQQ17kxbwf3k8vwfvl/fb+eH+9f16iF+cn8ZP6yfzkfgo/pZ/KT+2n8dP66fz0fgY/o5/Jz+xn8bP62fzsfg4/p5/Lz+3n8fP6+fz8fgG/oF/IL+wX8Yv6xfzifgm/pF/KL+2X8cv65fzyfgW/ol/Jr+xX8av61fzqfg2/pl/Lr+3X8ev69fz6fgO/od/Ib+w38Zv6zfzmfgu/pd/Kb+238dv67fz2fge/o9/J7+x38bv63fzufg+/p9/L7+338fv6/fz+/gA/3h/oD/IH+0P8of4wf7g/wh/pj/JH+2P8sf44f7w/wZ/oT/In+1P8qf40f7o/w5/pz/Jn+3P8uf48f76/wF/oL/IX+0v8pf4yf7m/wl/pr/JX+2v8tf46f72/wd/ob/I3+1v8rf42f7u/w9/p7/J3+3v8vf4+f79/wD/oH/IP+0f8o/4x/7h/wj/pn/JP+2f8s/45/7x/wb/oX/Iv+1f8q/41/7p/w7/p3/Jv+3f8u/49/77/wH/oP/If+0/8p/4z/7n/wn/pv/Jf+2/8t/47/73/wf/of/I/+1/8r/43/7uP+bhP+KRP+bTP+KzP+bwv+KIv+bKv+Kqv+bpv+KZv+bbv+K7v+b4f+KEPfOgjP/Jj/g//p5/g//J/+3/8v/4/P9GPC5IESYNkQfIgRZAySBWkDtIEaYN0QfogQ5AxyBRkDrIEWYNsQfYgR5AzyBXkDvIEeYN8Qf6gQFAwKBQUDooERYNiQfGgRFAyKBWUDsoEZYNyQfmgQlAxqBRUDqoEVYNqQfWgRlAzqBXUDuoEdYN6Qf2gQdAwaBQ0ThYXNA2aBc2DFkHLoFXQOmgTtA3aBe2DDkHHoFPQOegSdA26Bd2DHkHPoFfQO+gT9A36Bf2DAUF8MDAYFAwOhgRDg2HB8GBEMDIYFYwOxgRjg3HB+GBCMDGYFEwOpgRTg2nB9GBGMDOYFcwO5gRzg3nB/GBBsDBYFCwOlgRLg2XB8mBFsDJYFawO1gRrg3XB+mBDsDHYFGwOtgRbg23B9mBHsDPYFewO9gR7g33B/uBAcDA4FBwOjgRHg2PB8eBEcDI4FZwOzgRng3PB+eBCcDG4FFwOrgRXg2vB9eBGcDO4FdwO7gR3g3vB/eBB8DB4FDwOngRPg2fB8+BF8DJ4FbwO3gRvg3fB++BD8DH4FHwOvgRfg2/B9wAL8IAIyIAK6IAJ2IAL+EAIxEAK5EAJ1EAL9MAIzMAK7MAJ3MAL/CAIwgAEMEBBFMSCH8HPICH4FfwO/gR/g39BYhAXJgmThsnC5GGKMGWYKkwdpgnThunC9GGGMGOYKcwcZgmzhtnC7GGOMGeYK8wd5gnzhvnC/GGBsGBYKCwcFgmLhsXC4mGJsGRYKiwdlgnLhuXC8mGFsGJYKawcVgmrhtXC6mGNsGZYK6wd1gnrhvXC+mGDsGHYKGwcNgmbhs3C5mGLsGXYKmwdtgnbhu3C9mGHsGPYKewcdgm7ht3C7mGPsGfYK+wd9gn7hv3C/uGAMD4cGA4KB4dDwqHhsHB4OCIcGY4KR4djwrHhuHB8OCGcGE4KJ4dTwqnhtHB6OCOcGc4KZ4dzwrnhvHB+uCBcGC4KF4dLwqXhsnB5uCJcGa4KV4drwrXhunB9uCHcGG4KN4dbwq3htnB7uCPcGe4Kd4d7wr3hvnB/eCA8GB4KD4dHwqPhsfB4eCI8GZ4KT4dnwrPhufB8eCG8GF4KL4dXwqvhtfB6eCO8Gd4Kb4d3wrvhvfB++CB8GD4KH4dPwqfhs/B5+CJ8Gb4KX4dvwrfhu/B9+CH8GH4KP4dfwq/ht/B7iIV4SIRkSIV0yIRsyIV8KIRiKIVyqIRqqIV6aIRmaIV26IRu6IV+GIRhCEIYojAKY+GP8GeYEP4Kf4d/wr/hvzAxjANJQFKQDCQHKUBKkAqkBmlAWpAOpAcZQEaQCWQGWUBWkA1kBzlATpAL5AZ5QF6QD+QHBUBBUAgUBkVAUVAMFAclQElQCpQGZUBZUA6UBxVARVAJVAZVQFVQDVQHNUBNUAvUBnVAXVAP1AcNQEPQCDQGTUBT0Aw0By1AS9AKtAZtQFvQDrQHHUBH0Al0Bl1AV9ANdAc9QE/QC/QGfUBf0A/0BwNAPBgIBoHBYAgYCoaB4WAEGAlGgdFgDBgLxoHxYAKYCCaByWAKmAqmgelgBpgJZoHZYA6YC+aB+WABWAgWgcVgCVgKloHlYAVYCVaB1WANWAvWgfVgA9gINoHNYAvYCraB7WAH2Al2gd1gD9gL9oH94AA4CA6Bw+AIOAqOgePgBDgJToHT4Aw4C86B8+ACuAgugcvgCrgKroHr4Aa4CW6B2+AOuAvugfvgAXgIHoHH4Al4Cp6B5+AFeAlegdfgDXgL3oH34AP4CD6Bz+AL+Aq+ge8AAzggAAkoQAMGsIADPBCACCQgAwWoQAM6MIAJLGADB7jAAz4IQAgAgACBCMTAD/ATJIBf4Df4A/6CfyARxMEkMClMBpPDFDAlTAVTwzQwLUwH08MMMCPMBDPDLDArzAazwxwwJ8wFc8M8MC/MB/PDArAgLAQLwyKwKCwGi8MSsCQsBUvDMrAsLAfLwwqwIqwEK8MqsCqsBqvDGrAmrAVrwzqwLqwH68MGsCFsBBvDJrApbAabwxawJWwFW8M2sC1sB9vDDrAj7AQ7wy6wK+wGu8MesCfsBXvDPrAv7Af7wwEwHg6Eg+BgOAQOhcPgcDgCjoSj4Gg4Bo6F4+B4OAFOhJPgZDgFToXT4HQ4A86Es+BsOAfOhfPgfLgALoSL4GK4BC6Fy+ByuAKuhKvgargGroXr4Hq4AW6Em+BmuAVuhdvgdrgD7oS74G64B+6F++B+eAAehIfgYXgEHoXH4HF4Ap6Ep+BpeAaehefgeXgBXoSX4GV4BV6F1+B1eAPehLfgbXgH3oX34H34AD6Ej+Bj+AQ+hc/gc/gCvoSv4Gv4Br6F7+B7+AF+hJ/gZ/gFfoXf4HeIQRwSkIQUpCEDWchBHgpQhBKUoQJVqEEdGtCEFrShA13oQR8GMIQAQohgBGPwB/wJE+Av+Bv+gX/hP5gI41ASlBQlQ8lRCpQSpUKpURqUFqVD6VEGlBFlQplRFpQVZUPZUQ6UE+VCuVEelBflQ/lRAVQQFUKFURFUFBVDxVEJVBKVQqVRGVQWlUPlUQVUEVVClVEVVBVVQ9VRDVQT1UK1UR1UF9VD9VED1BA1Qo1RE9QUNUPNUQvUErVCrVEb1Ba1Q+1RB9QRdUKdURfUFXVD3VEP1BP1Qr1RH9QX9UP90QAUjwaiQWgwGoKGomFoOBqBRqJRaDQag8aicWg8moAmokloMpqCpqJpaDqagWaiWWg2moPmonloPlqAFqJFaDFagpaiZWg5WoFWolVoNVqD1qJ1aD3agDaiTWgz2oK2om1oO9qBdqJdaDfag/aifWg/OoAOokPoMDqCjqJj6Dg6gU6iU+g0OoPOonPoPLqALqJL6DK6gq6ia+g6uoFuolvoNrqD7qJ76D56gB6iR+gxeoKeomfoOXqBXqJX6DV6g96id+g9+oA+ok/oM/qCvqJv6DvCEI4IRCIK0YhBLOIQjwQkIgnJSEEq0pCODGQiC9nIQS7ykI8CFCKAIEIoQjH0A/1ECegX+o3+oL/oH0pEcVGSKGmULEoepYhSRqmi1FGaKG2ULkofZYgyRpmizFGWKGuULcoe5YhyRrmi3FGeKG+UL8ofFYgKRoWiwlGRqGhULCoelYhKRqWi0lGZqGxULiofVYgqRpWiylGVqGpULaoe1YhqRrWi2lGdqG5UL6ofNYgaRo2ixlGTqGnULGoetYhaRq2i1lGbqG3ULmofdYg6Rp2izlGXqGvULeoe9Yh6Rr2i3lGfqG/UL+ofDYjio4FR0ri4uCHR0GhYNDwaEY2MRkWjozHR2GhcND6aEE2MJkWToynR1GhaND2aEc2MZkWzoznR3GheND9aEC2MFkWLoyXR0mhZtDxaEa2MVkWrozXR2mhdtD7aEG2MNkWboy3R1mhbtD3aEe2MdkW7oz3R3mhftD86EB2MDkWHoyPR0ehYdDw6EZ2MTkWnozPR2ehcdD66EF2MLkWXoyvR1ehadD26Ed2MbkW3ozvR3ehedD96ED2MHkWPoyfR0+hZ9Dx6Eb2MXkWvozfR2+hd9D76EH2MPkWfoy/R1+hb9D3CIjwiIjKiIjpiIjbiIj4SIjGSIjlSIjXSIj0yIjOyIjtyIjfyIj8KojACEYxQFEWx6Ef0M0qIfkW/oz/R3+hflBjFxZLEksaSxZLHUsRSxlLFUsfSxNLG0sXSxzLEMsYyxTLHssSyxrLFssdyxHLGcsVyx/LE8sbyxfLHCsQKxgrFCseKxIrGisWKx0rESsZKxUrHysTKxsrFyscqxCrGKsUqx6rEqsaqxarHasRqxmrFasfqxOrG6sXqxxrEGsYaxRrHmsSaxprFmsdaxFrGWsVax9rE2sbaxdrHOsQ6xjrFOse6xLrGusW6x3rEesZ6xXrH+sT6xvrF+scGxOJj/2PXLoAvKw59Ue8R3N1hcHd3IpCQQEJwhwEGGBgYmMEGd3d3d3d3d3d3d1nStl6FDNxDcvLuPffVPXm59X1VM927d+/uXv1fv661q/ZG1cbVwGqTatNqs2pQtXm1RbVlNbjaqtq6GlJtU21bDa22q7avhlXDqx2qHaudqp2rXaoR1a7VbtXu1R7VntVe1d7VPtW+1X7V/tUB1YHVQdXB1SHVodVh1eHVEdWR1VHV0dUx1bHVcdXx1QnVidVJ1cnVKdWp1WnV6dUZ1ZnVWdXZ1TnVudV51fnVBdWF1UXVxdUl1aXVZdXl1RXVldVV1dXVNdW11XXV9dUN1Y3VTdXN1S3VrdVt1e3VHdWd1V3V3dU91b3VfdX91QPVg9VD1cPVI9Wj1WPV49UT1ZPVU9XT1TPVs9Vz1fPVC9WL1UvVy9Ur1avVa9Xr1RvVm9Vb1dvVO9W71XvV+9UH1YfVR9XH1SfVp9Vn1efVF9WX1VfV19U31bfVd9X31Q9VVdVVU7VVqGKVqlyVqqt6dZ+6b92v7l+PUo9aj1aPXo9Rj1mPVY9dj1OPW49Xj19PUE9YT1RPXE9ST1pPVk9eT1FPWU9VT11PU09bT1cPqKevZ6hnrGeqZ65nqWetZ6tnr+eo56znqueu56nnreer568XqBesF6oXrhepF60Xqxevl6iXrJeql66XqZetl6t/Vf+6/k3923r5eoV6jJG/LftjvVK9cv2n+s/1KvVf6lXr1erV6zXqNeu16rXrdep16/Xq9esN6g3rjeqN64H1JvWm9Wb1oHrzeot6y3pwvVW9dT2k3qbeth5ab1dvXw+rh9c71DvWO9U717vUI+pd693q3es96j3rveq9633qfev96v3rA+oD64Pqg+tD6kPrw+rD6yPqI+uj6qPrY+pj6+Pq4+sT6hPrk+qT61PqU+vT6tPrM+oz67Pqs+tz6nPr8+rz6wvqC+uL6ovrS+pL68vqy+sr6ivrq+qr62vqa+vr6uvrG+ob65vqm+tb6lvr2+rb6zvqO+u76rvre+p76/vq++sH6gfrh+qH60fqR+vH6sfrJ+on66fqp+tn6mfr5+rn6xfqF+uX6pfrV+pX69fq1+s36jfrt+q363fqd+v36vfrD+oP64/qj+tP6k/rz+rP6y/qL+uv6q/rb+pv6+/q7+sf6qqu66Zu61DHOtW5LnVX95o+Td+mX9O/GaUZtRmtGb0ZoxmzGasZuxmnGbcZrxm/maCZsJmombiZpJm0mayZvJmimbKZqpm6maaZtpmuGdBM38zQzNjM1MzczNLM2szWzN7M0czZzNXM3czTzNvM18zfLNAs2CzULNws0izaLNYs3izRLNks1SzdLNMs2yzX/Kr5dfOb5rfN8s0Kze+a3zcrNn/o0+v1/vqv+XOzSvOXZtVmtWb1Zo1mzWatZu1mnWbdZr1m/WaDZsNmo2bjZmCzSbNps1kzqNm82aLZshncbNVs3Qxptmm2bYY22zXbN8Oa4c0OzY7NTs3OzS7NiGbXZrdm92aPZpSRd9u+zX7N/s0BzYHNQc3BzSHNoc1hzeHNEc2RzVHN0c0xzbHNcc3xzQnNic1JzcnNKc2pzWnN6c0ZzZnNWc3ZzTnNuc15zfnNBc2FzUXNxc0lzaXNZc3lzRXNlc1VzdXNNc21zXXN9c0NzY3NTc3NzS3Nrc1tze3NHc2dzV3N3c09zb3Nfc39zQPNg81DzcPNI82jzWPN480TzZPNU83TzTPNs81zzfPNC82LzUvNy80rzavNa83rzRvNm81bzdvNO827zXvN+80HzYfNR83HzSfNp81nzefNF82XzVfN1803zbfNd833zQ9N1dRN07RNaGKTmtyUpmt6bZ+2b9uv7d+O0o7ajtaO3o7RjtmO1Y7djtOO247Xjt9O0E7YTtRO3E7STtpO1k7eTtFO2U7VTt1O007bTtcOaKdvZ2hnbGdqZ25naWdtZ2tnb+do52znaudu52nnbedr528XaBdsF2oXbhdpF20Xaxdvl2iXbJdql26XaZdtl2t/1f66/U3723b5doX2d+3v2xXbP7R/bFdqV27/1P65XaX9S7tqu1q7ertGu2a7Vrt2u067brteu367Qbthu1G7cTuw3aTdtN2sHdRu3m7RbtkObrdqt26HtNu027ZD2+3a7dth7fB2h3bHdqd253aXdkS7a7tbu3u7R7tnu1e7d7tPu2+7X7t/e0B7YHtQe3B7SHtoe1h7eHtEe2R7VHt0e0x7bHtce3x7Qntie1J7cntKe2p7Wnt6e0Z7ZntWe3Z7Tntue157fntBe2F7UXtxe0l7aXtZe3l7RXtle1V7dXtNe217XXt9e0N7Y3tTe3N7S3tre1t7e3tHe2d7V3t3e097b3tfe3/7QPtg+1D7cPtI+2j7WPt4+0T7ZPtU+3T7TPts+1z7fPtC+2L7Uvty+0r7avta+3r7Rvtm+1b7dvtO+277Xvt++0H7YftR+3H7Sftp+1n7eftF+2X7Vft1+037bftd+337Q1u1ddu0bRva2KY2t6Xt2l7oE/qGfqF/GCWMGkYLo4cxwphhrDB2GCeMG8YL44cJwoRhojBxmCRMGiYLk4cpwpRhqjB1mCZMG6YLA8L0YYYwY5gpzBxmCbOG2cLsYY4wZ5grzB3mCfOG+cL8YYGwYFgoLBwWCYuGxcLiYYmwZFgqLB2WCcuG5cKvwq/Db8Jvw/JhhfC78PuwYvhD+GNYKawc/hT+HFYJfwmrhtXC6mGNsGZYK6wd1gnrhvXC+mGDsGHYKGwcBoZNwqZhszAobB62CFuGwWGrsHUYErYJ24ahYbuwfRgWhocdwo5hp7Bz2CWMCLuG3cLuYY+wZ9gr7B32CfuG/cL+4YBwYDgoHBwOCYeGw8Lh4YhwZDgqHB2OCceG48Lx4YRwYjgpnBxOCaeG08Lp4YxwZjgrnB3OCeeG88L54YJwYbgoXBwuCZeGy8Ll4YpwZbgqXB2uCdeG68L14YZwY7gp3BxuCbeG28Lt4Y5wZ7gr3B3uCfeG+8L94YHwYHgoPBweCY+Gx8Lj4YnwZHgqPB2eCc+G58Lz4YXwYngpvBxeCa+G18Lr4Y3wZngrvB3eCe+G98L74YPwYfgofBw+CZ+Gz8Ln4YvwZfgqfB2+Cd+G78L34YdQhTo0oQ0hxJBCDiV0oRf7xL6xX+wfR4mjxtHi6HGMOGYcK44dx4njxvHi+HGCOGGcKE4cJ4mTxsni5HGKOGWcKk4dp4nTxunigDh9nCHOGGeKM8dZ4qxxtjh7nCPOGeeKc8d54rxxvjh/XCAuGBeKC8dF4qJxsbh4XCIuGZeKS8dl4rJxufir+Ov4m/jbuHxcIf4u/j6uGP8Q/xhXiivHP8U/x1XiX+KqcbW4elwjrhnXimvHdeK6cb24ftwgbhg3ihvHgXGTuGncLA6Km8ct4pZxcNwqbh2HxG3itnFo3C5uH4fF4XGHuGPcKe4cd4kj4q5xt7h73CPuGfeKe8d94r5xv7h/PCAeGA+KB8dD4qHxsHh4PCIeGY+KR8dj4rHxuHh8PCGeGE+KJ8dT4qnxtHh6PCOeGc+KZ8dz4rnxvHh+vCBeGC+KF8dL4qXxsnh5vCJeGa+KV8dr4rXxunh9vCHeGG+KN8db4q3xtnh7vCPeGe+Kd8d74r3xvnh/fCA+GB+KD8dH4qPxsfh4fCI+GZ+KT8dn4rPxufh8fCG+GF+KL8dX4qvxtfh6fCO+Gd+Kb8d34rvxvfh+/CB+GD+KH8dP4qfxs/h5/CJ+Gb+KX8dv4rfxu/h9/CFWsY5NbGOIMaaYY4ld7KU+qW/ql/qnUdKoabQ0ehojjZnGSmOncdK4abw0fpogTZgmShOnSdKkabI0eZoiTZmmSlOnadK0abo0IE2fZkgzppnSzGmWNGuaLc2e5khzprnS3GmeNG+aL82fFkgLpoXSwmmRtGhaLC2elkhLpqXS0mmZtGxaLv0q/Tr9Jv02LZ9WSL9Lv08rpj+kP6aV0srpT+nPaZX0l7RqWi2tntZIa6a10tppnbRuWi+tnzZIG6aN0sZpYNokbZo2S4PS5mmLtGUanLZKW6chaZu0bRqatkvbp2FpeNoh7Zh2SjunXdKItGvaLe2e9kh7pr3S3mmftG/aL+2fDkgHpoPSwemQdGg6LB2ejkhHpqPS0emYdGw6Lh2fTkgnppPSyemUdGo6LZ2ezkhnprPS2emcdG46L52fLkgXpovSxemSdGm6LF2erkhXpqvS1emadG26Ll2fbkg3ppvSzemWdGu6Ld2e7kh3prvS3emedG+6L92fHkgPpofSw+mR9Gh6LD2enkhPpqfS0+mZ9Gx6Lj2fXkgvppfSy+mV9Gp6Lb2e3khvprfS2+md9G56L72fPkgfpo/Sx+mT9Gn6LH2evkhfpq/S1+mb9G36Ln2ffkhVqlOT2hRSTCnlVFKXerlP7pv75f55lDxqHi2PnsfIY+ax8th5nDxuHi+PnyfIE+aJ8sR5kjxpnixPnqfIU+ap8tR5mjxtni4PyNPnGfKMeaY8c54lz5pny7PnOfKcea48d54nz5vny/PnBfKCeaG8cF4kL5oXy4vnJfKSeam8dF4mL5uXy7/Kv86/yb/Ny+cV8u/y7/OK+Q/5j3mlvHL+U/5zXiX/Ja+aV8ur5zXymnmtvHZeJ6+b18vr5w3yhnmjvHEemDfJm+bN8qC8ed4ib5kH563y1nlI3iZvm4fm7fL2eVgennfIO+ad8s55lzwi75p3y7vnPfKeea+8d94n75v3y/vnA/KB+aB8cD4kH5oPy4fnI/KR+ah8dD4mH5uPy8fnE/KJ+aR8cj4ln5pPy6fnM/KZ+ax8dj4nn5vPy+fnC/KF+aJ8cb4kX5ovy5fnK/KV+ap8db4mX5uvy9fnG/KN+aZ8c74l35pvy7fnO/Kd+a58d74n35vvy/fnB/KD+aH8cH4kP5ofy4/nJ/KT+an8dH4mP5ufy8/nF/KL+aX8cn4lv5pfy6/nN/Kb+a38dn4nv5vfy+/nD/KH+aP8cf4kf5o/y5/nL/KX+av8df4mf5u/y9/nH3KV69zkNoccc8o5l9zlXulT+pZ+pX8ZpYxaRiujlzHKmGWsMnYZp4xbxivjlwnKhGWiMnGZpExaJiuTlynKlGWqMnWZpkxbpisDyvRlhjJjmanMXGYps5bZyuxljjJnmavMXeYp85b5yvxlgbJgWagsXBYpi5bFyuJlibJkWaosXZYpy5blyq/Kr8tvym/L8mWF8rvy+7Ji+UP5Y1mprFz+VP5cVil/KauW1crqZY2yZlmrrF3WKeuW9cr6ZYOyYdmobFwGlk3KpmWzMqhsXrYoW5bBZauydRlStinblqFlu7J9GVaGlx3KjmWnsnPZpYwou5bdyu5lj7Jn2avsXfYp+5b9yv7lgHJgOagcXA4ph5bDyuHliHJkOaocXY4px5bjyvHlhHJiOamcXE4pp5bTyunljHJmOaucXc4p55bzyvnlgnJhuahcXC4pl5bLyuXlinJluapcXa4p15bryvXlhnJjuancXG4pt5bbyu3ljnJnuavcXe4p95b7yv3lgfJgeag8XB4pj5bHyuPlifJkeao8XZ4pz5bnyvPlhfJieam8XF4pr5bXyuvljfJmeau8Xd4p75b3yvvlg/Jh+ah8XD4pn5bPyufli/Jl+ap8Xb4p35bvyvflh1KVujSlLaHEkkoupXSl1/Xp+nb9uv7dKN2o3Wjd6N0Y3ZjdWN3Y3TjduN143fjdBN2E3UTdxN0k3aTdZN3k3RTdlN1U3dTdNN203XTdgG76boZuxm6mbuZulm7WbrZu9m6Obs5urm7ubp5u3m6+bv5ugW7BbqFu4W6RbtFusW7xboluyW6pbulumW7Zbrn/rc+v163fbdBt2G3UbdwN7DbpNu026wZ1m3dbdFt2g7utuq27Id023bbd0G67bvtuWDe826Hbsdup27nbpRvR7drt1u3e7dH16TPy+1+3X7d/d0B3YHdQd3B3SHdod1h3eHdEd2R3VHd0d0x3bHdcd3x3Qndid1J3cndKd2p3Wnd6d0Z3ZndWd3Z3Tndud153fndBd2F3UXdxd0l3aXdZd3l3RXdld1V3dXdNd213XXd9d0N3Y3dTd3N3S3drd1t3e3dHd2d3V3d3d093b3dfd3/3QPdg91D3cPdI92j3WPd490T3ZPdU93T3TPds91z3fPdC92L3Uvdy90r3avda93r3Rvdm91b3dvdO9273Xvd+90H3YfdR93H3Sfdp91n3efdF92X3Vfd19033bfdd9333Q1d1ddd0bRe62KUud6Xruh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/WmHFlZafr9fv59d9en16i/X69E7u0+v1+v+Pfj9Vf+o5fq/X2/jH2uQ//v/7kbW9Lxl3riHh5T7/rBz1P1tEn39smq/X62358/h9e3/4sdanN8qPbaP8T+fpDRk50Mjyp3n795upt3Jvhd7qI1/vPXLtfXrL/WIhZWS53E8Nqd9/Wk7Y/bgVvat/MU6/f7ie5f5uIwf0fllO0Gf0H8uu67r/bIv+z/jHdfL/b//V+2z03i/LX95n/f5p/tf+u/z3G5mOviNf/3fkf7ufx+/bW/W/mv/x/8NC/0P+R/85/yv3BveG9YaNbP9n50C/v9/X8f/zcvr+Xb/ef3t+/7/q+69eAP9Sff8h/33/X/Lf998p/z8v/m/lf8z/Sr2hvS16K/QG94b0Bo1s/2f5/ynMP+f/78b9qZyh16dff/nn38o/5r/fyPy//Xf5H3XkGfBT0/gj8/JT/uf738z/L5/z+/RW+S/n/Jd+Gn+0fjP11uwN7Q3p7djbpjfox3H3/nmevr3Nfp6x/95/vY6fvg9M/OO7C41MxsS9s/pM2Ovzt1lGmXDk539s+1uHUf76/D6gb+8Xff7+vd7Is3K+n+fv35twZG14b0Rv197WvYG9IT+eRj89j/z17Jvt5/6j9Mb+eadH/p1GXvneP7dP/vPTyuT/y+dQ//95F/4v1v/H+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D/qAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwTw0fsuvXAIUMGDVNRUVH5ufKvPpmA/9P+R+j/1SsBAAAAAAAAAAAA/lf9d/yc+F99jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8+/ls1aP/tPoKqw0YMGBAr2/fkY3NL/vs3du71433t/r4I9u6fn8r+/R6vf69Xu+omebeaMVtVhnrr23jTnfn9rtfPsPdO4y15vXj3jZa74nxN/zs6wXef2LSJ6b4rKy+5eDhAwYPH7Dt0B0GDBywydChOwzcZMigAZsNHr71PANWGTJo4PBBAwZvO3zQsF+8vfmQodttN2LAwG03G2fM7YYNGj58wMBtRwzYetCIATsMHbDDsBEDBm4xcPC2A+aZZ54B44z537Z5//bWuPT/CQAA//8+tNk8") 1.732123441s ago: executing program 0 (id=3821): syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="120100001ddcdb08ca0700b81f3101020301090212000100000000090400000003"], 0x0) 1.461194523s ago: executing program 2 (id=3822): io_setup(0xffff, &(0x7f0000000340)) 1.314963154s ago: executing program 4 (id=3823): shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000c00)=""/4096) 1.198805174s ago: executing program 1 (id=3824): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @union]}}, 0x0, 0x3e}, 0x28) 853.431783ms ago: executing program 1 (id=3825): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 838.819246ms ago: executing program 4 (id=3826): sigaltstack(&(0x7f000000b280)={0x0, 0x80000003}, 0x0) 660.157259ms ago: executing program 3 (id=3827): syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000040d07d408612a41f16fb0102030109021b0001000000000904"], 0x0) 643.243202ms ago: executing program 2 (id=3828): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x1, 0x2}]}]}, {0x0, [0x5f]}}, 0x0, 0x33, 0x0, 0x1}, 0x28) 499.797103ms ago: executing program 1 (id=3829): openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) 497.822603ms ago: executing program 5 (id=3830): kexec_load(0x4, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x80, 0xfffffffffffffff9}], 0x0) 439.112538ms ago: executing program 4 (id=3831): keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff) 363.318741ms ago: executing program 2 (id=3832): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000000000)='./file1\x00', 0x3200041, &(0x7f0000000040)={[{@eas_no}, {@err_cont}, {@eas_rw}, {@check_none}]}, 0x1, 0x9e15, &(0x7f000000a040)="$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") 262.886475ms ago: executing program 4 (id=3833): syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) 257.635704ms ago: executing program 1 (id=3834): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090501", @ANYRES64], 0x0) 198.613623ms ago: executing program 5 (id=3835): syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') 33.468919ms ago: executing program 5 (id=3836): prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) 0s ago: executing program 0 (id=3837): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0x41}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): escriptor with address 0x1A, changing to 0xA [ 543.983863][T12215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 544.007476][T12215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 544.033085][T12215] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 544.064991][T12215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.083852][T12215] usb 3-1: Product: syz [ 544.122569][ T6168] udevd[6168]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 544.128471][T12215] usb 3-1: Manufacturer: syz [ 544.150530][T12215] usb 3-1: SerialNumber: syz [ 544.159892][ T6567] udevd[6567]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 544.183721][T12215] usb 3-1: config 0 descriptor?? [ 544.212326][T12215] iguanair 3-1:0.0: failed to submit urb: -90 [ 544.247187][T12215] iguanair 3-1:0.0: probe with driver iguanair failed with error -90 [ 544.283035][ T6567] udevd[6567]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 544.318599][ T7171] udevd[7171]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 544.501262][T13502] loop1: detected capacity change from 0 to 128 [ 544.546635][T13502] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 544.590236][T12215] usb 3-1: USB disconnect, device number 95 [ 544.617731][T13502] hpfs: filesystem error: improperly stopped [ 544.664728][T13502] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 544.683567][T13502] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 544.712740][T13502] hpfs: You really don't want any checks? You are crazy... [ 544.723559][T13502] hpfs: hpfs_map_sector(): read error [ 544.734306][T13502] hpfs: code page support is disabled [ 544.740684][T13502] hpfs: hpfs_map_4sectors(): unaligned read [ 544.747152][T13502] hpfs: hpfs_map_4sectors(): unaligned read [ 544.770633][T13502] hpfs: filesystem error: unable to find root dir [ 544.868623][ T6347] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 544.939374][T13511] loop5: detected capacity change from 0 to 1024 [ 544.982582][T13511] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 545.040841][T13511] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 545.078251][ T6347] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 545.098931][T13511] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 545.122391][ T6347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 545.170659][T13511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 545.185045][ T6347] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 545.208912][ T6347] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 545.262185][ T6347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.338346][ T6347] usb 4-1: config 0 descriptor?? [ 545.423184][ T6347] usbhid 4-1:0.0: can't add hid device: -22 [ 545.450118][ T6347] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 545.450997][T13520] loop2: detected capacity change from 0 to 8 [ 545.517644][T13520] unable to read id index table [ 545.527109][ T6170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.640244][ T6299] usb 4-1: USB disconnect, device number 92 [ 545.801855][T13529] loop5: detected capacity change from 0 to 128 [ 545.840397][T13529] qnx6: superblock #1 checksum error [ 546.132946][ T24] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 546.321148][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 546.365141][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 546.410587][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 546.432275][ T6299] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 546.452415][ T24] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 546.487778][ T24] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 546.529047][ T24] usb 3-1: Product: syz [ 546.533236][ T24] usb 3-1: Manufacturer: syz [ 546.558604][ T24] usb 3-1: SerialNumber: syz [ 546.575396][ T24] usb 3-1: config 0 descriptor?? [ 546.622902][ T6299] usb 2-1: unable to get BOS descriptor or descriptor too short [ 546.653335][ T6299] usb 2-1: config 64 has an invalid interface number: 167 but max is 0 [ 546.672587][ T6299] usb 2-1: config 64 has no interface number 0 [ 546.683314][ T6299] usb 2-1: config 64 interface 167 has no altsetting 0 [ 546.704238][ T6299] usb 2-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=8c.dd [ 546.727609][ T6347] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 546.732119][ T6299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.746955][T13525] loop0: detected capacity change from 0 to 32768 [ 546.753964][ T6299] usb 2-1: Product: syz [ 546.769136][ T6299] usb 2-1: Manufacturer: syz [ 546.774659][ T6299] usb 2-1: SerialNumber: syz [ 546.789145][T13525] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section [ 546.789145][T13525] clean (size 2912): [ 546.789145][T13525] flags: 0 [ 546.789145][T13525] journal_seq: 13 [ 546.789145][T13525] usage: type=inodes v=8 [ 546.789145][T13525] usage: type=key_version v=2 [ 546.789145][T13525] usage: type=reserved v=0 [ 546.789145][T13525] usage: type=reserved v=0 [ 546.789145][T13525] usage: type=reserved v=0 [ 546.789145][T13525] usage: type=reserved v=0 [ 546.789145][T13525] data_usage: btree: 1/1 [0]=2816 [ 546.789145][T13525] data_usage: journal: 1/1 [0]=0 [ 546.789145][T13525] data_usage: user: 1/1 [0]=16 [ 546.789145][T13525] datetime: 0 [ 546.789145][T13525] clock: read=0 [ 546.789145][T13525] clock: write=1280 [ 546.789145][T13525] dev_usage: dev=1179915 [ 546.789145][T13525] [ 546.884239][T13525] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 546.953502][T13527] loop4: detected capacity change from 0 to 32768 [ 546.964791][ T24] usb 3-1: USB disconnect, device number 96 [ 546.993328][ T6347] usb 4-1: not running at top speed; connect to a high speed hub [ 547.010779][T13527] bcachefs (/dev/loop4): error reading superblock: block size (0) smaller than device block size (512) [ 547.021984][T12676] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 547.036535][ T6347] usb 4-1: config 14 has an invalid interface number: 21 but max is 0 [ 547.048580][ T6347] usb 4-1: config 14 has no interface number 0 [ 547.058893][T13527] bcachefs: bch2_fs_get_tree() error: block_size_too_small [ 547.070201][ T6347] usb 4-1: config 14 interface 21 has no altsetting 0 [ 547.085260][ T6347] usb 4-1: string descriptor 0 read error: -22 [ 547.101690][ T6347] usb 4-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 547.114409][ T6299] gspca_main: benq-2.14.0 probing 04a5:3035 [ 547.132458][ T6347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.132862][ T6299] usb 2-1: USB disconnect, device number 87 [ 547.212594][T12676] usb 6-1: unable to get BOS descriptor or descriptor too short [ 547.235188][T12676] usb 6-1: not running at top speed; connect to a high speed hub [ 547.255221][ T6347] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 547.294204][T12676] usb 6-1: config 6 has an invalid interface number: 239 but max is 0 [ 547.303813][ T6347] usb 4-1: MIDIStreaming interface descriptor not found [ 547.318728][T12676] usb 6-1: config 6 has no interface number 0 [ 547.336150][T12676] usb 6-1: config 6 interface 239 has no altsetting 0 [ 547.376930][T12676] usb 6-1: New USB device found, idVendor=1b3d, idProduct=010d, bcdDevice= 5.00 [ 547.435137][T12676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.476631][T12676] usb 6-1: Product: syz [ 547.483375][T12676] usb 6-1: Manufacturer: syz [ 547.515274][T12676] usb 6-1: SerialNumber: syz [ 547.539967][ T6347] usb 4-1: USB disconnect, device number 93 [ 547.561542][T13552] loop0: detected capacity change from 0 to 164 [ 547.822972][T12676] ftdi_sio 6-1:6.239: FTDI USB Serial Device converter detected [ 547.902406][T12676] usb 6-1: Detected FT2232C/D [ 547.922767][T12676] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 547.960228][T12676] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 548.013088][T12676] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 548.023031][T13555] loop4: detected capacity change from 0 to 2048 [ 548.074782][T12676] usb 6-1: USB disconnect, device number 81 [ 548.080844][T13555] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 548.153679][T12676] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 548.178348][T13555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 548.247207][T12676] ftdi_sio 6-1:6.239: device disconnected [ 548.298669][ T5848] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 548.329722][T13563] loop2: detected capacity change from 0 to 8 [ 548.489089][ T5848] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 548.529970][ T5848] usb 2-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 548.576585][ T5848] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 548.623653][ T5848] usb 2-1: config 8 has no interface number 0 [ 548.633370][ T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 548.650792][ T5848] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 548.704865][ T5848] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 548.750349][T13569] loop4: detected capacity change from 0 to 512 [ 548.765421][ T5848] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 548.806974][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.828446][T13569] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 548.843827][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 548.855786][ T5848] usb 2-1: Product: syz [ 548.859961][ T5848] usb 2-1: Manufacturer: syz [ 548.873488][ T5848] usb 2-1: SerialNumber: syz [ 548.888247][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 548.899100][T13569] EXT4-fs (loop4): external journal has bad superblock [ 548.929308][ T10] usb 1-1: config 0 interface 0 has no altsetting 1 [ 548.962527][ T10] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 549.030950][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 549.061588][ T10] usb 1-1: SerialNumber: syz [ 549.076967][ T10] usb 1-1: config 0 descriptor?? [ 549.156364][ T10] usb-storage 1-1:0.0: USB Mass Storage device detected [ 549.212716][ T10] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 549.226028][T13580] loop5: detected capacity change from 0 to 512 [ 549.254621][T13580] EXT4-fs (loop5): Invalid log block size: 4294967295 [ 549.282671][ T5848] usb 2-1: USB disconnect, device number 88 [ 549.389247][ T10] usb 1-1: USB disconnect, device number 64 [ 549.763233][ T24] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 549.966844][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 550.014037][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 550.052074][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.060094][ T24] usb 3-1: Product: syz [ 550.105309][ T24] usb 3-1: Manufacturer: syz [ 550.109935][ T24] usb 3-1: SerialNumber: syz [ 550.155896][ T24] usb 3-1: config 0 descriptor?? [ 550.176052][ T24] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 550.403601][ T24] pwc: Failed to set LED on/off time (-71) [ 550.439064][ T24] pwc: send_video_command error -71 [ 550.465146][T13608] loop5: detected capacity change from 0 to 512 [ 550.470582][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 550.478953][ T24] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 550.495345][T13579] loop3: detected capacity change from 0 to 32768 [ 550.540768][T13579] XFS: noikeep mount option is deprecated. [ 550.566260][ T24] usb 3-1: USB disconnect, device number 97 [ 550.576456][T13608] EXT4-fs warning (device loop5): ext4_xattr_inode_get:555: inode #11: comm syz.5.3378: EA inode hash validation failed [ 550.629996][T13608] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.3378: corrupted inode contents [ 550.644349][T13579] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 550.647198][T13608] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #15: comm syz.5.3378: mark_inode_dirty error [ 550.679854][T13608] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.3378: corrupted inode contents [ 550.713208][T13608] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #15: comm syz.5.3378: mark_inode_dirty error [ 550.732382][T13608] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2993: inode #15: comm syz.5.3378: mark inode dirty (error -117) [ 550.802487][T13608] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 550.857126][T13608] EXT4-fs (loop5): 1 orphan inode deleted [ 550.888584][T13608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.923977][T13579] XFS (loop3): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 550.946048][T13579] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 551.044294][T13579] XFS (loop3): Starting recovery (logdev: internal) [ 551.099608][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 551.117973][T13592] loop4: detected capacity change from 0 to 32768 [ 551.158771][T13579] XFS (loop3): Ending recovery (logdev: internal) [ 551.172499][ T6170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.186011][T13592] XFS (loop4): invalid log iosize: 0 [not 12-30] [ 551.302736][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 551.342984][ T10] usb 1-1: config 0 has an invalid interface number: 74 but max is 0 [ 551.358711][ T10] usb 1-1: config 0 has no interface number 0 [ 551.409136][ T10] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 551.420769][ T24] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 551.446035][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.485107][ T10] usb 1-1: Product: syz [ 551.501597][ T10] usb 1-1: Manufacturer: syz [ 551.516847][ T6175] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 551.534609][ T10] usb 1-1: SerialNumber: syz [ 551.578288][ T10] usb 1-1: config 0 descriptor?? [ 551.668617][ T24] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 551.701020][ T24] usb 2-1: config 0 has no interface number 0 [ 551.725158][ T24] usb 2-1: config 0 interface 197 has no altsetting 0 [ 551.767562][ T24] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=86.12 [ 551.790273][T13634] loop5: detected capacity change from 0 to 1024 [ 551.796249][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.844167][T13634] EXT4-fs: Invalid commit interval -2147483647, must be smaller than 21474836 [ 551.853109][ T24] usb 2-1: Product: syz [ 551.853141][ T24] usb 2-1: Manufacturer: syz [ 551.853169][ T24] usb 2-1: SerialNumber: syz [ 551.932418][ T24] usb 2-1: config 0 descriptor?? [ 551.940240][ T10] usb 1-1: USB disconnect, device number 65 [ 552.147297][T12215] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 552.200530][ T24] redrat3 2-1:0.197: Couldn't find all endpoints [ 552.251528][ T24] usb 2-1: USB disconnect, device number 89 [ 552.329103][T12215] usb 3-1: Using ep0 maxpacket: 8 [ 552.344026][T12215] usb 3-1: config 162 has an invalid interface number: 1 but max is 0 [ 552.351431][T13640] loop5: detected capacity change from 0 to 512 [ 552.365067][T12215] usb 3-1: config 162 has no interface number 0 [ 552.384956][T13640] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 552.388992][T12215] usb 3-1: config 162 interface 1 has no altsetting 0 [ 552.453259][T13640] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.3391: couldn't read orphan inode 26 (err -116) [ 552.460248][T12215] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a89, bcdDevice=26.be [ 552.489357][T13640] EXT4-fs (loop5): Remounting filesystem read-only [ 552.508682][T12215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.523343][T13640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.585586][T12215] usb 3-1: Product: syz [ 552.588909][T13640] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.589771][T12215] usb 3-1: Manufacturer: syz [ 552.663969][T12215] usb 3-1: SerialNumber: syz [ 552.891673][ T6170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.955334][T13650] loop3: detected capacity change from 0 to 8 [ 552.991543][T12215] usb 3-1: USB disconnect, device number 98 [ 553.046047][T13650] SQUASHFS error: xz decompression failed, data probably corrupt [ 553.088027][ T5848] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 553.106948][T13650] SQUASHFS error: Failed to read block 0x108: -5 [ 553.138926][T13650] SQUASHFS error: Unable to read metadata cache entry [106] [ 553.173987][T13650] SQUASHFS error: Unable to read inode 0x11f [ 553.206890][T13655] loop5: detected capacity change from 0 to 8 [ 553.283605][ T5848] usb 5-1: unable to get BOS descriptor or descriptor too short [ 553.312097][ T5848] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 553.324632][T13655] SQUASHFS error: xz decompression failed, data probably corrupt [ 553.332347][ T5848] usb 5-1: config 1 has no interface number 1 [ 553.332391][T13655] SQUASHFS error: Failed to read block 0x108: -5 [ 553.360162][T13655] SQUASHFS error: Unable to read metadata cache entry [106] [ 553.365483][ T5848] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 553.411348][ T5848] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.440890][ T44] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 553.448798][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.457713][T13655] SQUASHFS error: Unable to read inode 0x11f [ 553.514321][ T5848] usb 5-1: Product: syz [ 553.525074][ T5848] usb 5-1: Manufacturer: syz [ 553.540817][ T5848] usb 5-1: SerialNumber: syz [ 553.548023][ T24] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 553.666070][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 553.673898][ T44] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 553.694364][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.717952][ T44] usb 2-1: config 0 descriptor?? [ 553.754686][ T24] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 553.774506][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.789749][ T44] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 553.816458][ T24] usb 1-1: Product: syz [ 553.823174][ T24] usb 1-1: Manufacturer: syz [ 553.830222][ T24] usb 1-1: SerialNumber: syz [ 553.837639][ T5848] usb 5-1: found format II with max.bitrate = 26774, frame size=2 [ 553.853932][ T24] usb 1-1: config 0 descriptor?? [ 553.859132][ T5848] usb 5-1: found format II with max.bitrate = 26774, frame size=2 [ 553.884322][ T5848] usb 5-1: failed to enable PITCH for EP 0x82 [ 553.976375][T13664] loop2: detected capacity change from 0 to 512 [ 553.998882][ T44] gspca_sunplus: reg_r err -71 [ 554.012132][T13664] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 554.044496][ T44] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 554.061786][ T5848] usb 5-1: USB disconnect, device number 90 [ 554.089925][ T24] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 554.128244][ T24] peak_usb 1-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 554.154746][ T44] usb 2-1: USB disconnect, device number 90 [ 554.270101][T13667] loop3: detected capacity change from 0 to 2048 [ 554.340769][ T24] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 554.403589][ T24] usb 1-1: USB disconnect, device number 66 [ 554.507849][T13664] EXT4-fs (loop2): failed to open journal device unknown-block(11,127) -6 [ 554.938266][T12215] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 554.974965][T13681] loop1: detected capacity change from 0 to 1024 [ 555.013238][T13681] hfsplus: invalid btree extent records (0 size) [ 555.038713][T13681] hfsplus: failed to load extents file [ 555.120581][T12215] usb 4-1: Using ep0 maxpacket: 32 [ 555.140800][ T24] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 555.146474][T12215] usb 4-1: config 0 has an invalid interface number: 74 but max is 0 [ 555.174858][T12215] usb 4-1: config 0 has no interface number 0 [ 555.215061][T12215] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 555.239721][T12215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.279145][T12215] usb 4-1: Product: syz [ 555.290297][T12215] usb 4-1: Manufacturer: syz [ 555.294909][T12215] usb 4-1: SerialNumber: syz [ 555.324257][T12215] usb 4-1: config 0 descriptor?? [ 555.363324][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 555.425902][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 555.489246][ T24] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d1.54 [ 555.525521][ T24] usb 3-1: New USB device strings: Mfr=222, Product=2, SerialNumber=3 [ 555.562182][ T24] usb 3-1: Product: syz [ 555.579229][ T24] usb 3-1: Manufacturer: syz [ 555.583839][ T24] usb 3-1: SerialNumber: syz [ 555.652934][ T24] usb 3-1: config 0 descriptor?? [ 555.653602][T12215] usb 4-1: USB disconnect, device number 94 [ 555.694003][ T24] usb 3-1: invalid MIDI EP [ 555.719314][ T24] usb 3-1: snd-bcd2000: error during probing [ 555.754758][ T24] snd-bcd2000 3-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 555.936555][T13672] loop5: detected capacity change from 0 to 32768 [ 555.974618][T13672] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3404 (13672) [ 555.987903][ T10] usb 3-1: USB disconnect, device number 99 [ 556.041920][T13672] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 556.078951][T13672] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 556.088960][T13704] loop1: detected capacity change from 0 to 512 [ 556.103078][ T5848] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 556.165553][T13704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.274115][ T5848] usb 1-1: Using ep0 maxpacket: 32 [ 556.281337][ T5848] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.301491][ T5848] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 556.306861][T13672] BTRFS info (device loop5): rebuilding free space tree [ 556.325133][ T5848] usb 1-1: config 1 has no interface number 1 [ 556.338056][ T5848] usb 1-1: config 1 interface 2 has no altsetting 0 [ 556.385761][ T5848] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 556.403215][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.411992][T13672] BTRFS info (device loop5): allowing degraded mounts [ 556.420810][T13672] BTRFS info (device loop5): enabling ssd optimizations [ 556.428116][ T5848] usb 1-1: Product: syz [ 556.436053][ T6172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.453864][T13672] BTRFS info (device loop5): enabling free space tree [ 556.464366][T13672] BTRFS info (device loop5): force clearing of disk cache [ 556.469177][ T5848] usb 1-1: Manufacturer: syz [ 556.477320][ T44] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 556.480737][T13672] BTRFS info (device loop5): use zstd compression, level 3 [ 556.493332][ T5848] usb 1-1: SerialNumber: syz [ 556.493896][T13672] BTRFS info (device loop5): max_inline set to 0 [ 556.535065][ T5848] hub 1-1:1.0: Invalid hub with more than one config or interface [ 556.578956][ T5848] hub 1-1:1.0: probe with driver hub failed with error -22 [ 556.660461][ T44] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 556.692546][ T44] usb 5-1: config 5 has no interface number 0 [ 556.711875][ T44] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 556.712743][T13729] qnx4: no qnx4 filesystem (no root dir). [ 556.749601][ T44] usb 5-1: config 5 interface 123 has no altsetting 0 [ 556.812662][ T44] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 556.840320][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.872654][ T44] usb 5-1: Product: syz [ 556.874165][T12215] usb 1-1: USB disconnect, device number 67 [ 556.884144][ T44] usb 5-1: Manufacturer: syz [ 556.898921][ T44] usb 5-1: SerialNumber: syz [ 556.924402][ T6170] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 557.195638][ T44] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 557.305788][ T44] usb 5-1: USB disconnect, device number 91 [ 557.586097][T13745] loop1: detected capacity change from 0 to 8 [ 557.608542][T13739] loop2: detected capacity change from 0 to 4096 [ 557.653919][T13739] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 557.666136][T13745] SQUASHFS error: xz decompression failed, data probably corrupt [ 557.694262][T13739] ntfs3(loop2): ino=0, mi_enum_attr [ 557.700844][T13739] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 557.713274][T13745] SQUASHFS error: Failed to read block 0x108: -5 [ 557.736150][T13739] ntfs3(loop2): failed to replay log file. Can't mount rw! [ 557.758437][T13745] SQUASHFS error: Unable to read metadata cache entry [106] [ 557.778399][T13745] SQUASHFS error: Unable to read inode 0x11f [ 558.023142][ T44] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 558.059241][T12676] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 558.233685][ T44] usb 4-1: config 0 interface 0 has no altsetting 0 [ 558.259309][ T44] usb 4-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=3b.70 [ 558.271176][T12676] usb 1-1: unable to get BOS descriptor or descriptor too short [ 558.280745][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.290185][T12676] usb 1-1: config 64 has an invalid interface number: 167 but max is 0 [ 558.309389][T12676] usb 1-1: config 64 has no interface number 0 [ 558.315869][ T44] usb 4-1: config 0 descriptor?? [ 558.324116][T12676] usb 1-1: config 64 interface 167 has no altsetting 0 [ 558.357779][T12676] usb 1-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=8c.dd [ 558.389906][T12676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.392167][ T44] snd_usb_podhd 4-1:0.0: Line 6 POD HDDESKTOP found [ 558.418066][T12676] usb 1-1: Product: syz [ 558.424330][T13764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.448276][T12676] usb 1-1: Manufacturer: syz [ 558.452885][T12676] usb 1-1: SerialNumber: syz [ 558.457072][ T44] usb 4-1: selecting invalid altsetting 1 [ 558.493032][ T44] snd_usb_podhd 4-1:0.0: set_interface failed [ 558.507865][ T44] snd_usb_podhd 4-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 558.542621][ T44] snd_usb_podhd 4-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 558.607032][ T44] usb 4-1: USB disconnect, device number 95 [ 558.670256][T13769] block nbd4: Attempted send on invalid socket [ 558.684175][T13769] I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 558.701105][T13769] gfs2: error -5 reading superblock [ 558.730463][T12676] gspca_main: benq-2.14.0 probing 04a5:3035 [ 558.780110][T12676] usb 1-1: USB disconnect, device number 68 [ 559.042990][T13776] loop1: detected capacity change from 0 to 8 [ 559.072940][T13776] SQUASHFS error: lzo decompression failed, data probably corrupt [ 559.112612][T13776] SQUASHFS error: Failed to read block 0x91: -5 [ 559.145635][T13776] SQUASHFS error: Unable to read metadata cache entry [8f] [ 559.167204][T13776] SQUASHFS error: Unable to read inode 0x11f [ 559.177683][T13753] loop5: detected capacity change from 0 to 32768 [ 559.243664][T13753] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section [ 559.243664][T13753] clean (size 2912): [ 559.243664][T13753] flags: 0 [ 559.243664][T13753] journal_seq: 8 [ 559.243664][T13753] usage: type=inodes v=8 [ 559.243664][T13753] usage: type=key_version v=0 [ 559.243664][T13753] usage: type=reserved v=0 [ 559.243664][T13753] usage: type=reserved v=0 [ 559.243664][T13753] usage: type=reserved v=0 [ 559.243664][T13753] usage: type=reserved v=0 [ 559.243664][T13753] data_usage: btree: 1/1 [0]=2816 [ 559.243664][T13753] data_usage: journal: 1/1 [0]=0 [ 559.243664][T13753] data_usage: user: 1/1 [0]=32 [ 559.243664][T13753] dev_usage: dev=0 [ 559.243664][T13753] free: buckets=83 sectors=0 fragmented=0 [ 559.243664][T13753] sb: buckets=25 sectors=6152 fragmented=248 [ 559.243664][T13753] journal: buckets=8 sectors=2048 fragmented=0 [ 559.243664][T13753] btree: buckets=11 sectors=2816 fragmented=1970324836974592 [ 559.243664][T13753] user: buckets=0 sectors=32 fragmented=224 [ 559.243664][T13753] cached: buckets=0 sectors=0 fragmented=0 [ 559.243664][T13753] parity: buckets=0 sectors=0 fragmented=0 [ 559.243664][T13753] stripe: buckets=0 sectors=0 fragmented=0 [ 559.243664][T13753] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 559.243664][T13753] need_discard: buckets=0 sectors=0 fragmented=0 [ 559.243664][T13753] clock: read=0 [ 559.243664][T13753] clock: write=1288 [ 559.243664][T13753] btree_root: btree=extents level=0 u64s 11 type btree_pt [ 559.244173][T13753] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 559.414035][T13778] loop4: detected capacity change from 0 to 512 [ 559.424007][T13778] EXT4-fs: Ignoring removed oldalloc option [ 559.578615][T13778] EXT4-fs error (device loop4): ext4_xattr_inode_iget:432: comm syz.4.3447: Parent and EA inode have the same ino 15 [ 559.597887][T13784] ufs: You didn't specify the type of your ufs filesystem [ 559.597887][T13784] [ 559.597887][T13784] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 559.597887][T13784] [ 559.597887][T13784] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 559.695980][T13778] EXT4-fs error (device loop4): ext4_xattr_inode_iget:432: comm syz.4.3447: Parent and EA inode have the same ino 15 [ 559.802303][T13784] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 559.813232][T13778] EXT4-fs (loop4): 1 orphan inode deleted [ 559.857390][T13778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.097097][T13796] tmpfs: Bad value for 'mpol' [ 560.237645][ T6182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.606066][T13807] loop1: detected capacity change from 0 to 2048 [ 560.683921][T13807] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 560.721334][ T44] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 560.729081][T13807] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 560.777413][T13807] UDF-fs: Scanning with blocksize 512 failed [ 560.854049][T13807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 560.930050][ T5848] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 560.962749][ T44] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 560.994080][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.025099][ T44] usb 1-1: Product: syz [ 561.029316][ T44] usb 1-1: Manufacturer: syz [ 561.048254][ T44] usb 1-1: SerialNumber: syz [ 561.081086][ T44] usb 1-1: config 0 descriptor?? [ 561.105396][ T44] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 069 [ 561.152916][ T5848] usb 6-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 561.177622][T13816] loop4: detected capacity change from 0 to 4096 [ 561.198348][ T5848] usb 6-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0 [ 561.224071][T13816] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 561.234538][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 561.253998][ T5848] usb 6-1: config 16 interface 0 has no altsetting 0 [ 561.298096][ T5848] usb 6-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 561.332553][ T44] (null): failure setting delay to 10us [ 561.342045][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.354546][ T44] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 561.354799][T13816] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 561.387969][T13810] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 561.427524][ T44] usb 1-1: USB disconnect, device number 69 [ 561.430844][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 561.471794][ T10] usb 4-1: config 2 has an invalid interface number: 47 but max is 0 [ 561.495877][ T10] usb 4-1: config 2 has no interface number 0 [ 561.539399][ T10] usb 4-1: config 2 interface 47 altsetting 2 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 561.580416][ T10] usb 4-1: config 2 interface 47 altsetting 2 bulk endpoint 0x9 has invalid maxpacket 1023 [ 561.590984][ T10] usb 4-1: config 2 interface 47 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 561.607850][ T10] usb 4-1: config 2 interface 47 has no altsetting 0 [ 561.623263][T10983] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 561.633149][ T10] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0002, bcdDevice=aa.e7 [ 561.653162][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.672110][ T10] usb 4-1: Product: syz [ 561.672751][ T5848] usb 6-1: string descriptor 0 read error: -71 [ 561.682907][ T10] usb 4-1: Manufacturer: syz [ 561.692415][ T5848] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 561.704534][ T10] usb 4-1: SerialNumber: syz [ 561.728549][T13820] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 561.729983][ T5848] imon 6-1:16.0: unable to initialize intf0, err -19 [ 561.783225][ T5848] imon:imon_probe: failed to initialize context! [ 561.789601][ T5848] imon 6-1:16.0: unable to register, err -19 [ 561.810398][ T5848] usb 6-1: USB disconnect, device number 82 [ 561.836238][T10983] usb 3-1: unable to get BOS descriptor or descriptor too short [ 561.844135][ T6299] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 561.872815][T10983] usb 3-1: config 1 has an invalid interface number: 43 but max is 1 [ 561.887080][T10983] usb 3-1: config 1 has no interface number 1 [ 561.893967][T10983] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 561.907511][T10983] usb 3-1: config 1 interface 0 has no altsetting 0 [ 561.918415][T10983] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 561.928735][T10983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.937240][T10983] usb 3-1: Product: syz [ 561.960321][ T10] kvaser_usb 4-1:2.47: error -ENODEV: Cannot get usb endpoint(s) [ 561.971557][T10983] usb 3-1: Manufacturer: syz [ 561.992592][T10983] usb 3-1: SerialNumber: syz [ 562.003331][ T10] usb 4-1: USB disconnect, device number 96 [ 562.036357][ T6299] usb 2-1: Using ep0 maxpacket: 8 [ 562.044309][ T6299] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 562.063858][ T6299] usb 2-1: config 0 has no interface number 0 [ 562.093132][ T6299] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 562.111317][ T6299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.130309][ T6299] usb 2-1: Product: syz [ 562.141098][ T6299] usb 2-1: Manufacturer: syz [ 562.151946][ T6299] usb 2-1: SerialNumber: syz [ 562.169017][ T6299] usb 2-1: config 0 descriptor?? [ 562.284967][T10983] smsusb:smsusb_probe: board id=8, interface number 0 [ 562.368065][T10983] smsusb:smsusb_probe: board id=8, interface number 43 [ 562.398426][T10983] usb 3-1: USB disconnect, device number 100 [ 562.402897][T13836] loop0: detected capacity change from 0 to 512 [ 562.436238][ T6299] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 562.478620][ T6299] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 562.557264][ T6299] usb 2-1: USB disconnect, device number 91 [ 563.041519][ T6299] usb 4-1: new low-speed USB device number 97 using dummy_hcd [ 563.235088][ T6299] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x1 is Bulk; changing to Interrupt [ 563.260421][ T6299] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 563.288155][ T6299] usb 4-1: config 1 interface 0 has no altsetting 0 [ 563.294906][ T10] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 563.343677][ T6299] usb 4-1: string descriptor 0 read error: -22 [ 563.350196][ T6299] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 563.387851][ T6299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.427622][T13842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 563.486855][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 563.502635][T13834] loop4: detected capacity change from 0 to 32768 [ 563.520321][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 563.566293][T13834] o2cb: This node has not been configured. [ 563.568567][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 563.591437][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.593732][T13834] o2cb: Cluster check failed. Fix errors before retrying. [ 563.600273][ T10] usb 6-1: Product: syz [ 563.611237][ T10] usb 6-1: Manufacturer: syz [ 563.615835][ T10] usb 6-1: SerialNumber: syz [ 563.624459][T13834] (syz.4.3474,13834,0):ocfs2_dlm_init:3354 ERROR: status = -22 [ 563.633727][ T10] usb 6-1: config 0 descriptor?? [ 563.662371][ T10] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 563.716106][T13834] (syz.4.3474,13834,0):ocfs2_mount_volume:1735 ERROR: status = -22 [ 563.726690][T13834] (syz.4.3474,13834,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 563.794833][T12215] usb 4-1: USB disconnect, device number 97 [ 564.036945][ T10] usb 6-1: USB disconnect, device number 83 [ 564.231396][ T6564] udevd[6564]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.262517][ T6299] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 564.452354][ T6299] usb 5-1: Using ep0 maxpacket: 32 [ 564.481651][ T6299] usb 5-1: unable to get BOS descriptor or descriptor too short [ 564.501802][ T6299] usb 5-1: config 5 has an invalid interface number: 114 but max is 0 [ 564.523538][ T6299] usb 5-1: config 5 has no interface number 0 [ 564.558719][ T6299] usb 5-1: config 5 interface 114 has no altsetting 0 [ 564.590913][ T6299] usb 5-1: New USB device found, idVendor=1b3d, idProduct=9316, bcdDevice=28.00 [ 564.605878][ T6299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.634144][ T6299] usb 5-1: Product: syz [ 564.642796][ T6299] usb 5-1: Manufacturer: syz [ 564.648954][T13880] loop0: detected capacity change from 0 to 512 [ 564.691716][ T6299] usb 5-1: SerialNumber: syz [ 564.696717][T13880] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 564.738762][T13880] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 564.823204][T13880] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 564.864566][T13880] EXT4-fs (loop0): orphan cleanup on readonly fs [ 564.932207][T13880] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 4: comm syz.0.3496: lblock 0 mapped to illegal pblock 4 (length 1) [ 565.006353][T13880] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 565.045687][T13880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 565.048182][ T6299] ftdi_sio 5-1:5.114: FTDI USB Serial Device converter detected [ 565.127687][ T6299] usb 5-1: Detected FT2233HP [ 565.139928][ T6299] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 565.158014][ T6299] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 565.201571][ T6299] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 565.241661][ T6299] usb 5-1: USB disconnect, device number 92 [ 565.268390][ T6299] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 565.303426][ T6299] ftdi_sio 5-1:5.114: device disconnected [ 565.459873][ T6169] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.681163][T13911] loop3: detected capacity change from 0 to 64 [ 565.756603][T12676] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 565.852927][ T10] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 565.877236][T13917] loop0: detected capacity change from 0 to 512 [ 565.939040][T12676] usb 3-1: Using ep0 maxpacket: 16 [ 565.974759][T12676] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 566.025140][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 566.038577][T12676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.061280][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 566.074367][T13916] loop4: detected capacity change from 0 to 4096 [ 566.107037][T12676] usb 3-1: Product: syz [ 566.120211][ T10] usb 6-1: config 0 interface 0 has no altsetting 1 [ 566.128010][T12676] usb 3-1: Manufacturer: syz [ 566.145032][T12676] usb 3-1: SerialNumber: syz [ 566.155600][ T10] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 566.164778][T13916] EXT4-fs (loop4): cluster size (1024) smaller than block size (4096) [ 566.178571][T13919] loop3: detected capacity change from 0 to 16 [ 566.192715][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 566.217295][T12676] usb 3-1: config 0 descriptor?? [ 566.247164][T12676] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 566.259978][ T10] usb 6-1: SerialNumber: syz [ 566.270973][T13919] erofs (device loop3): mounted with root inode @ nid 36. [ 566.292127][T12676] usb 3-1: Detected FT232H [ 566.311969][ T10] usb 6-1: config 0 descriptor?? [ 566.352438][ T10] usb-storage 6-1:0.0: USB Mass Storage device detected [ 566.359520][T13921] loop0: detected capacity change from 0 to 512 [ 566.437662][ T10] usb-storage 6-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 566.494099][T12676] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 566.497658][T13921] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 566.511151][T12676] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 566.527220][T12676] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 566.557147][T12676] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 566.661341][ T10] usb 6-1: USB disconnect, device number 84 [ 566.677235][T12676] usb 3-1: USB disconnect, device number 101 [ 566.679781][ T5848] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 566.735220][T12676] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 566.804924][T12676] ftdi_sio 3-1:0.0: device disconnected [ 566.911808][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 566.937895][ T5848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.969306][ T5848] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 567.004976][T13913] loop1: detected capacity change from 0 to 32768 [ 567.031005][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 567.054764][T13913] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3510 (13913) [ 567.066052][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 567.113107][ T5848] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 567.137265][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.149841][T13913] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 567.160928][ T5848] usb 5-1: Product: syz [ 567.165100][ T5848] usb 5-1: Manufacturer: syz [ 567.196286][ T5848] usb 5-1: SerialNumber: syz [ 567.196345][T13913] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 567.222644][ T5848] usb 5-1: config 0 descriptor?? [ 567.268242][ T5848] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input36 [ 567.365199][T13913] BTRFS info (device loop1): rebuilding free space tree [ 567.383412][ T6299] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 567.424164][T13913] BTRFS info (device loop1): allowing degraded mounts [ 567.464591][T13913] BTRFS info (device loop1): enabling ssd optimizations [ 567.497565][T13913] BTRFS info (device loop1): enabling free space tree [ 567.542744][T13913] BTRFS info (device loop1): force clearing of disk cache [ 567.549915][T13913] BTRFS info (device loop1): use zstd compression, level 3 [ 567.603613][T13913] BTRFS info (device loop1): max_inline set to 0 [ 567.614842][ T6299] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 567.640074][ T6299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.667862][ T6299] usb 4-1: Product: syz [ 567.673986][T10983] usb 5-1: USB disconnect, device number 93 [ 567.692705][ T6299] usb 4-1: Manufacturer: syz [ 567.723173][ T6299] usb 4-1: SerialNumber: syz [ 567.771472][ T6299] usb 4-1: config 0 descriptor?? [ 567.806331][ T6299] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 568.001751][ T6299] gspca_sn9c2028: read1 error -71 [ 568.014181][ T6299] gspca_sn9c2028: read1 error -71 [ 568.030398][ T6299] gspca_sn9c2028: read1 error -71 [ 568.055243][ T6299] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 568.075402][ T6172] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 568.085320][ T6299] usb 4-1: USB disconnect, device number 98 [ 568.392808][T13965] nfs: Unknown parameter 'fscontext' [ 568.705236][T13949] loop2: detected capacity change from 0 to 32768 [ 568.878702][T13949] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 568.936223][T13967] loop5: detected capacity change from 0 to 4096 [ 569.075350][T13967] ntfs3(loop5): Failed to load $Secure (-22). [ 569.086422][T13949] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 569.098528][T13985] loop0: detected capacity change from 0 to 256 [ 569.113489][T13967] ntfs3(loop5): Failed to initialize $Secure (-22). [ 569.146715][T13985] exfat: Deprecated parameter 'utf8' [ 569.190805][T13985] exfat: Bad value for 'time_offset' [ 569.191029][T13949] XFS (loop2): Starting recovery (logdev: internal) [ 569.338385][T13949] XFS (loop2): Ending recovery (logdev: internal) [ 569.720785][ T6166] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 569.841731][T13971] loop4: detected capacity change from 0 to 32768 [ 569.913775][T13971] JBD2: Ignoring recovery information on journal [ 570.093661][T14004] loop1: detected capacity change from 0 to 512 [ 570.164510][T14004] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 570.164541][T13971] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 570.220880][T14004] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 570.290817][T14004] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 570.299086][T14004] EXT4-fs (loop1): orphan cleanup on readonly fs [ 570.344186][T14004] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 4: comm syz.1.3543: lblock 0 mapped to illegal pblock 4 (length 1) [ 570.383259][T14004] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 570.394178][T14004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 570.594624][ T6172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.620209][ T6182] ocfs2: Unmounting device (7,4) on (node local) [ 570.838417][T14016] loop1: detected capacity change from 0 to 64 [ 570.875336][T14016] hfs: found bad thread record in catalog [ 570.920367][T14016] hfs: get root inode failed [ 571.296732][T14020] loop1: detected capacity change from 0 to 512 [ 571.308401][T13997] loop3: detected capacity change from 0 to 32768 [ 571.359795][T13997] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3540 (13997) [ 571.383955][T14020] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 571.442083][T13997] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 571.444131][T14020] EXT4-fs (loop1): orphan cleanup on readonly fs [ 571.481397][T14020] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 571.520336][T13997] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 571.543196][T14020] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 571.558516][T14020] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #16: comm syz.1.3551: iget: immutable or append flags not allowed on symlinks [ 571.599779][T14020] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.3551: couldn't read orphan inode 16 (err -117) [ 571.640672][T13999] loop0: detected capacity change from 0 to 40427 [ 571.653996][T13999] F2FS-fs: heap/no_heap options were deprecated [ 571.714151][T14020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 571.764929][ T10] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 571.778441][T13999] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 3) [ 571.811740][T13997] BTRFS info (device loop3): rebuilding free space tree [ 571.839726][T13999] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 571.871899][T13999] F2FS-fs (loop0): Invalid log blocks per segment (512) [ 571.879004][T13999] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 571.879235][T13997] BTRFS info (device loop3): allowing degraded mounts [ 571.893144][T12676] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 571.925285][T13997] BTRFS info (device loop3): enabling ssd optimizations [ 571.932301][T13997] BTRFS info (device loop3): enabling free space tree [ 571.946796][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 571.953284][T13997] BTRFS info (device loop3): force clearing of disk cache [ 571.996775][T13997] BTRFS info (device loop3): use zstd compression, level 3 [ 572.004200][ T10] usb 5-1: config 5 has an invalid interface number: 168 but max is 0 [ 572.016582][ T10] usb 5-1: config 5 has no interface number 0 [ 572.032304][T13997] BTRFS info (device loop3): max_inline set to 0 [ 572.044114][ T10] usb 5-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 572.075951][ T10] usb 5-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 572.106977][T12676] usb 6-1: Using ep0 maxpacket: 8 [ 572.114276][ T6172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.131219][ T10] usb 5-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 572.171122][T12676] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 572.202922][ T10] usb 5-1: config 5 interface 168 has no altsetting 0 [ 572.235301][T12676] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.278774][ T10] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 572.287834][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.306771][T12676] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 572.347758][ T10] usb 5-1: Product: syz [ 572.351941][ T10] usb 5-1: Manufacturer: syz [ 572.363546][T12676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.392777][ T10] usb 5-1: SerialNumber: syz [ 572.409627][T12676] usbtmc 6-1:16.0: bulk endpoints not found [ 572.423068][ T6175] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 572.460165][T14025] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 572.467448][T14025] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 572.482022][T14053] loop0: detected capacity change from 0 to 512 [ 572.553996][T14053] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 572.660517][ T5848] usb 6-1: USB disconnect, device number 85 [ 572.692498][T14053] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.3558: iget: bogus i_mode (5) [ 572.779852][ C0] usb 5-1: NFC: Urb failure (status -71) [ 572.787216][ C0] usb 5-1: NFC: Urb failure (status -71) [ 572.794756][ T10] usb 5-1: NFC: Unable to get FW version [ 572.800663][ T10] pn533_usb 5-1:5.168: probe with driver pn533_usb failed with error -71 [ 572.810511][T14053] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.3558: couldn't read orphan inode 15 (err -117) [ 572.844126][ T10] usb 5-1: USB disconnect, device number 94 [ 572.906658][T14053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.948916][T14053] ext2 filesystem being mounted at /514/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.210503][T14068] loop1: detected capacity change from 0 to 256 [ 573.338819][ T6169] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.582439][ T6299] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 573.625091][T14068] FAT-fs (loop1): codepage cp851 not found [ 573.807074][ T6299] usb 4-1: Using ep0 maxpacket: 8 [ 573.820618][ T6299] usb 4-1: unable to get BOS descriptor or descriptor too short [ 573.828885][T14080] NILFS (loop2): device size too small [ 573.864791][ T6299] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 573.892294][T12215] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 573.915711][ T6299] usb 4-1: config 0 has no interface number 0 [ 573.921847][ T6299] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 573.978128][ T6299] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 574.014718][ T6299] usb 4-1: config 0 interface 88 has no altsetting 0 [ 574.071179][ T6299] usb 4-1: string descriptor 0 read error: -22 [ 574.078103][T12215] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 574.104570][ T6299] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 574.119851][T12676] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 574.137099][ T6299] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 574.145331][T12215] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 574.145381][T12215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 30768, setting to 64 [ 574.145431][T12215] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 574.191731][T12215] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 574.214823][T12215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.222932][T12215] usb 1-1: Product: syz [ 574.251007][T12215] usb 1-1: Manufacturer: syz [ 574.253306][T14087] loop2: detected capacity change from 0 to 2048 [ 574.255624][T12215] usb 1-1: SerialNumber: syz [ 574.314265][T14087] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 574.344318][ T6299] usb 4-1: config 0 descriptor?? [ 574.357938][T12215] usb 1-1: config 0 descriptor?? [ 574.373821][T12676] usb 5-1: Using ep0 maxpacket: 32 [ 574.384351][T12676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.407430][ T6299] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input37 [ 574.423366][T12215] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input38 [ 574.449010][T12676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.498292][T12676] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 574.534784][ C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 574.597042][T12676] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 574.633022][T12215] usb 1-1: USB disconnect, device number 70 [ 574.633183][ C1] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 574.651249][T12676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.692147][ T10] usb 4-1: USB disconnect, device number 99 [ 574.719720][T14093] loop1: detected capacity change from 0 to 8 [ 574.737903][T12676] usb 5-1: config 0 descriptor?? [ 574.787735][T12676] usbhid 5-1:0.0: can't add hid device: -22 [ 574.826310][T12676] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 574.841980][T14095] loop2: detected capacity change from 0 to 512 [ 574.883672][T14093] unable to read xattr id index table [ 574.924545][ T6564] udevd[6564]: Error opening device "/dev/input/event5": No such file or directory [ 574.950075][ T6564] udevd[6564]: Unable to EVIOCGABS device "/dev/input/event5" [ 574.959678][ T6564] udevd[6564]: Unable to EVIOCGABS device "/dev/input/event5" [ 574.978809][T14095] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 575.060644][T12215] usb 5-1: USB disconnect, device number 95 [ 575.485338][T14104] 9pnet_fd: p9_fd_create_unix (14104): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 575.807386][T14091] loop5: detected capacity change from 0 to 32768 [ 576.018120][T14091] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 576.169803][T12215] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 576.207529][ T10] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 576.221440][ T6170] ocfs2: Unmounting device (7,5) on (node local) [ 576.345216][T12215] usb 3-1: descriptor type invalid, skip [ 576.350904][T12215] usb 3-1: descriptor type invalid, skip [ 576.385472][T14125] loop5: detected capacity change from 0 to 22 [ 576.397993][T12215] usb 3-1: descriptor type invalid, skip [ 576.407858][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 576.426478][T12215] usb 3-1: descriptor type invalid, skip [ 576.433097][T14125] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 576.438263][ T10] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 576.463297][T12215] usb 3-1: descriptor type invalid, skip [ 576.471479][ T10] usb 5-1: config 0 has no interface number 0 [ 576.478253][T12215] usb 3-1: descriptor type invalid, skip [ 576.479869][T14125] VFS: Can't find a romfs filesystem on dev loop5. [ 576.479869][T14125] [ 576.495853][T12215] usb 3-1: not running at top speed; connect to a high speed hub [ 576.526376][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 576.552062][T12215] usb 3-1: config 0 has no interfaces? [ 576.558198][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.591014][T12215] usb 3-1: New USB device found, idVendor=10c4, idProduct=89fb, bcdDevice=34.21 [ 576.601325][ T10] usb 5-1: Product: syz [ 576.605495][ T10] usb 5-1: Manufacturer: syz [ 576.630502][T12215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.638507][T12215] usb 3-1: Product: syz [ 576.648746][ T10] usb 5-1: SerialNumber: syz [ 576.677967][T12215] usb 3-1: Manufacturer: syz [ 576.690859][ T10] usb 5-1: config 0 descriptor?? [ 576.710906][T12215] usb 3-1: SerialNumber: syz [ 576.764081][T12215] usb 3-1: config 0 descriptor?? [ 576.874065][T14129] loop3: detected capacity change from 0 to 2048 [ 576.904555][T14129] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 576.974362][ T10] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 576.992086][ T10] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 577.028471][T14129] NILFS (loop3): ifile inode (checkpoint number=2) corrupted [ 577.041956][T14105] loop0: detected capacity change from 0 to 32768 [ 577.067828][ T10] usb 5-1: USB disconnect, device number 96 [ 577.097646][T14105] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 577.097646][T14105] clean (size 2912): [ 577.097646][T14105] flags: 0 [ 577.097646][T14105] journal_seq: 10 [ 577.097646][T14105] usage: type=inodes v=8 [ 577.097646][T14105] usage: type=key_version v=2 [ 577.097646][T14105] usage: type=reserved v=0 [ 577.097646][T14105] usage: type=reserved v=0 [ 577.097646][T14105] usage: type=reserved v=0 [ 577.097646][T14105] usage: type=reserved v=0 [ 577.097646][T14105] data_usage: btree: 1/1 [0]=2816 [ 577.097646][T14105] data_usage: journal: 1/1 [0]=0 [ 577.097646][T14105] data_usage: user: 1/1 [0]=32 [ 577.097646][T14105] dev_usage: dev=0 [ 577.097646][T14105] free: buckets=83 sectors=0 fragmented=0 [ 577.097646][T14105] sb: buckets=25 sectors=6152 fragmented=248 [ 577.097646][T14105] journal: buckets=8 sectors=2048 fragmented=0 [ 577.097646][T14105] btree: buckets=11 sectors=2816 fragmented=0 [ 577.097646][T14105] user: buckets=1 sectors=32 fragmented=224 [ 577.097646][T14105] cached: buckets=0 sectors=0 fragmented=0 [ 577.097646][T14105] parity: buckets=0 sectors=0 fragmented=0 [ 577.097646][T14105] stripe: buckets=0 sectors=0 fragmented=0 [ 577.097646][T14105] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 577.097646][T14105] need_discard: buckets=0 sectors=0 fragmented=0 [ 577.097646][T14105] clock: read=0 [ 577.097646][T14105] clock: write=1336 [ 577.097646][T14105] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 83 [ 577.098061][T14105] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 577.110454][T14129] NILFS (loop3): error -5 while loading last checkpoint (checkpoint number=2) [ 577.264049][T14133] loop5: detected capacity change from 0 to 128 [ 577.270148][T12215] usb 3-1: USB disconnect, device number 102 [ 577.396690][T14133] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 577.432838][T14133] vxfs: unsupported VxFS version (-1232326277) [ 577.793838][T14139] trusted_key: encrypted_key: master key parameter '' is invalid [ 577.921780][T14123] loop1: detected capacity change from 0 to 32768 [ 577.997845][T14123] bcachefs (/dev/loop1): error validating superblock: Filesystem has incompatible feature bit 63, highest supported small_image (22) [ 578.072511][T14123] bcachefs: bch2_fs_get_tree() error: invalid_sb_features [ 578.455099][T14155] loop5: detected capacity change from 0 to 256 [ 578.456028][T14154] loop0: detected capacity change from 0 to 128 [ 578.524345][T14154] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 578.553233][T14154] qnx6: wrong signature (magic) in superblock #1. [ 578.558448][T14155] exfat: Deprecated parameter 'utf8' [ 578.609206][T14154] qnx6: unable to read the first superblock [ 578.756686][T12215] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 578.938633][T12215] usb 4-1: Using ep0 maxpacket: 32 [ 578.954602][T12215] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 578.984057][T12215] usb 4-1: config 0 has no interface number 0 [ 579.033734][T12215] usb 4-1: config 0 interface 55 has no altsetting 0 [ 579.078158][T12215] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=e4.85 [ 579.100762][T12215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.155081][T12215] usb 4-1: Product: syz [ 579.159264][T12215] usb 4-1: Manufacturer: syz [ 579.184239][T12215] usb 4-1: SerialNumber: syz [ 579.211432][T12215] usb 4-1: config 0 descriptor?? [ 579.271264][T14165] loop5: detected capacity change from 0 to 4096 [ 579.292532][T14165] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 579.317325][T14173] loop0: detected capacity change from 0 to 164 [ 579.324758][ T6299] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 579.362151][T14173] isofs_fill_super: root inode is not a directory. Corrupted media? [ 579.393734][T10983] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 579.417409][T14165] ntfs3(loop5): Failed to initialize $Secure (-22). [ 579.513881][T12215] option 4-1:0.55: GSM modem (1-port) converter detected [ 579.515026][ T6299] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 579.555364][T12215] usb 4-1: USB disconnect, device number 100 [ 579.578720][T10983] usb 5-1: Using ep0 maxpacket: 16 [ 579.585719][ T6299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.597234][T10983] usb 5-1: config 4 has an invalid interface number: 9 but max is 0 [ 579.616424][ T6299] usb 3-1: Product: syz [ 579.620737][T10983] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 579.644302][T12215] option 4-1:0.55: device disconnected [ 579.652953][ T6299] usb 3-1: Manufacturer: syz [ 579.659931][ T6299] usb 3-1: SerialNumber: syz [ 579.668420][T10983] usb 5-1: config 4 has no interface number 0 [ 579.690680][ T6299] usb 3-1: config 0 descriptor?? [ 579.718041][T10983] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 579.734727][ T6299] gm12u320 3-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 579.760294][T10983] usb 5-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.789678][ T6299] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5 [ 579.814598][T10983] usb 5-1: config 4 interface 9 has no altsetting 0 [ 579.830144][ T6299] usb-storage 3-1:0.0: USB Mass Storage device detected [ 579.859657][T10983] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 579.877727][T10983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.912889][ T6299] usb-storage 3-1:0.0: device ignored [ 579.932833][T10983] usb 5-1: Product: syz [ 579.945730][T10983] usb 5-1: Manufacturer: syz [ 579.954179][T10983] usb 5-1: SerialNumber: syz [ 579.966851][T14171] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 579.998663][T10983] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 580.083205][ T6299] usb 3-1: USB disconnect, device number 103 [ 580.291817][ T37] usb 5-1: Failed to submit usb control message: -71 [ 580.292735][T10983] usb 5-1: USB disconnect, device number 97 [ 580.320802][ T37] usb 5-1: unable to send the bmi data to the device: -71 [ 580.327978][ T37] usb 5-1: unable to get target info from device [ 580.398124][ T37] usb 5-1: could not get target info (-71) [ 580.419896][ T37] usb 5-1: could not probe fw (-71) [ 580.642159][T14169] loop1: detected capacity change from 0 to 40427 [ 580.693102][T14169] F2FS-fs (loop1): Image doesn't support compression [ 580.711887][T14169] F2FS-fs (loop1): FLUSH_MERGE not compatible with readonly mode [ 581.185241][T14203] loop2: detected capacity change from 0 to 512 [ 581.262586][T14203] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 581.309351][T14203] EXT4-fs (loop2): orphan cleanup on readonly fs [ 581.389754][T14203] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 581.482890][T10983] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 581.488528][T14203] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 581.508518][T14203] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #16: comm syz.2.3627: iget: immutable or append flags not allowed on symlinks [ 581.556079][T14186] loop5: detected capacity change from 0 to 32768 [ 581.579154][T14203] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3627: couldn't read orphan inode 16 (err -117) [ 581.603409][T14186] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3619 (14186) [ 581.625169][T14203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 581.659759][T14186] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 581.707728][T10983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.709456][T14186] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 581.741144][T10983] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 581.767344][T10983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.797057][T10983] usb 5-1: Product: syz [ 581.801230][T10983] usb 5-1: Manufacturer: syz [ 581.838694][T10983] usb 5-1: SerialNumber: syz [ 581.874922][T10983] usb 5-1: config 0 descriptor?? [ 581.946896][ T6166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.013234][T14186] BTRFS info (device loop5): enabling ssd optimizations [ 582.030623][T14186] BTRFS info (device loop5): disabling tree log [ 582.037577][T14186] BTRFS info (device loop5): disabling log replay at mount time [ 582.045610][T14186] BTRFS info (device loop5): turning on async discard [ 582.052756][T14186] BTRFS info (device loop5): enabling free space tree [ 582.059542][T14186] BTRFS info (device loop5): force clearing of disk cache [ 582.067543][T14186] BTRFS info (device loop5): doing ref verification [ 582.175850][ T24] usb 5-1: USB disconnect, device number 98 [ 582.376736][T14197] loop0: detected capacity change from 0 to 32768 [ 582.392763][T14197] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value [ 582.414503][ T6170] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 582.509121][ T10] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 582.521684][T10983] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 582.626151][T14212] loop3: detected capacity change from 0 to 32768 [ 582.679679][T14212] jfs_mount: diMount failed w/rc = -5 [ 582.697340][T14212] Mount JFS Failure: -5 [ 582.699539][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 582.716220][T14212] jfs_mount failed w/return code = -5 [ 582.723945][T10983] usb 2-1: Using ep0 maxpacket: 32 [ 582.747129][T10983] usb 2-1: config 0 has an invalid interface number: 103 but max is 0 [ 582.749948][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 582.780726][T10983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.842439][ T10] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 582.845347][T10983] usb 2-1: config 0 has no interface number 0 [ 582.872972][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.904927][ T10] usb 3-1: Product: syz [ 582.909139][ T10] usb 3-1: Manufacturer: syz [ 582.910234][T10983] usb 2-1: config 0 interface 103 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 582.936111][ T10] usb 3-1: SerialNumber: syz [ 582.992021][ T10] usb 3-1: config 0 descriptor?? [ 582.992462][T10983] usb 2-1: config 0 interface 103 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 583.060912][T10983] usb 2-1: New USB device found, idVendor=045e, idProduct=043a, bcdDevice=f5.69 [ 583.063991][ T10] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 583.097093][ T24] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 583.107809][T12215] usb 6-1: new low-speed USB device number 86 using dummy_hcd [ 583.114715][T10983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.154604][T10983] usb 2-1: Product: syz [ 583.175336][T10983] usb 2-1: Manufacturer: syz [ 583.209971][T10983] usb 2-1: SerialNumber: syz [ 583.252753][T10983] usb 2-1: config 0 descriptor?? [ 583.276975][T10983] ipaq 2-1:0.103: PocketPC PDA converter detected [ 583.292133][T12215] usb 6-1: No LPM exit latency info found, disabling LPM. [ 583.333443][T10983] usb 2-1: active config #0 != 1 ?? [ 583.347774][T12215] usb 6-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.349114][ T24] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 583.376869][ T1206] usb 3-1: USB disconnect, device number 104 [ 583.393734][T12215] usb 6-1: config 1 interface 0 has no altsetting 0 [ 583.402440][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.428551][ T10] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 583.446873][T12215] usb 6-1: string descriptor 0 read error: -22 [ 583.447616][ T24] usb 1-1: Product: syz [ 583.465370][T12215] usb 6-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 583.473026][ T24] usb 1-1: Manufacturer: syz [ 583.479008][ T24] usb 1-1: SerialNumber: syz [ 583.515108][T12215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.544079][ T24] usb 1-1: config 0 descriptor?? [ 583.604267][ T24] gm12u320 1-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 583.620933][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 583.635752][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.653322][ T24] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5 [ 583.679210][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 583.713856][ T24] usb-storage 1-1:0.0: USB Mass Storage device detected [ 583.720934][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 583.733582][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 583.734481][T10983] usb 2-1: USB disconnect, device number 92 [ 583.800049][ T24] usb-storage 1-1:0.0: device ignored [ 583.801261][T12215] usbhid 6-1:1.0: can't add hid device: -71 [ 583.830521][T12215] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 583.844328][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 583.854702][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 583.865269][ T10] usb 5-1: Manufacturer: syz [ 583.872369][T12215] usb 6-1: USB disconnect, device number 86 [ 583.893135][ T10] usb 5-1: config 0 descriptor?? [ 583.908936][T14248] loop3: detected capacity change from 0 to 512 [ 583.940940][T14248] EXT4-fs: Ignoring removed oldalloc option [ 583.957083][ T24] usb 1-1: USB disconnect, device number 71 [ 584.006700][T14248] EXT4-fs error (device loop3): ext4_xattr_inode_iget:432: comm syz.3.3640: Parent and EA inode have the same ino 15 [ 584.019807][T14248] EXT4-fs (loop3): Remounting filesystem read-only [ 584.026387][T14248] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 584.040921][T14248] EXT4-fs (loop3): 1 orphan inode deleted [ 584.113245][T14248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.132186][ T10] usb 5-1: USB disconnect, device number 99 [ 584.367688][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.572786][T12215] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 584.732342][T14266] loop5: detected capacity change from 0 to 16 [ 584.759604][T14266] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 584.770293][T12215] usb 3-1: Using ep0 maxpacket: 32 [ 584.783243][T12215] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 584.789367][T14266] cramfs: wrong endianness [ 584.796990][ T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 584.812018][T12215] usb 3-1: config 0 has no interface number 0 [ 584.818148][T12215] usb 3-1: config 0 interface 86 has no altsetting 0 [ 584.878465][T12215] usb 3-1: New USB device found, idVendor=0af0, idProduct=7801, bcdDevice=c6.25 [ 584.915645][T12215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.923658][T12215] usb 3-1: Product: syz [ 584.974906][T12215] usb 3-1: Manufacturer: syz [ 584.996197][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 585.009414][T12215] usb 3-1: SerialNumber: syz [ 585.025781][T14272] loop0: detected capacity change from 0 to 65 [ 585.041819][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.063764][ T10] usb 2-1: Product: syz [ 585.068483][ T10] usb 2-1: Manufacturer: syz [ 585.073248][ T10] usb 2-1: SerialNumber: syz [ 585.078948][T12215] usb 3-1: config 0 descriptor?? [ 585.086892][T12215] hso 3-1:0.86: Not our interface [ 585.100105][ T10] usb 2-1: config 0 descriptor?? [ 585.117093][ T10] usb 2-1: interface 1 not found [ 585.123269][T14272] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 585.169125][T14276] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 585.180068][T14276] cramfs: wrong magic [ 585.379051][ T6299] usb 2-1: USB disconnect, device number 93 [ 585.395775][T12215] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 585.416336][ T24] usb 3-1: USB disconnect, device number 105 [ 585.567971][T12215] usb 4-1: Using ep0 maxpacket: 8 [ 585.591407][T12215] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.618441][T12215] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.628900][T14286] loop4: detected capacity change from 0 to 65 [ 585.637243][T14286] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 585.638932][T12215] usb 4-1: New USB device found, idVendor=1d6a, idProduct=0101, bcdDevice= 0.40 [ 585.656371][T14286] BFS-fs: bfs_fill_super(): Last block not available on loop4: 65600 [ 585.701996][T12215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.713717][T12215] usb 4-1: Product: syz [ 585.718414][ T1206] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 585.734547][T12215] usb 4-1: Manufacturer: syz [ 585.743938][T12215] usb 4-1: SerialNumber: syz [ 585.812758][T10983] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 585.893257][ T1206] usb 6-1: Using ep0 maxpacket: 32 [ 585.907801][ T1206] usb 6-1: unable to get BOS descriptor or descriptor too short [ 585.920418][ T1206] usb 6-1: config 125 has an invalid interface number: 27 but max is 0 [ 585.934116][ T1206] usb 6-1: config 125 has no interface number 0 [ 585.940530][ T1206] usb 6-1: config 125 interface 27 has no altsetting 0 [ 585.953516][ T1206] usb 6-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 585.959475][T14290] loop4: detected capacity change from 0 to 64 [ 585.978799][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.000232][T10983] usb 1-1: unable to get BOS descriptor or descriptor too short [ 586.034258][ T1206] usb 6-1: Product: syz [ 586.040410][T10983] usb 1-1: not running at top speed; connect to a high speed hub [ 586.054106][ T1206] usb 6-1: Manufacturer: syz [ 586.054540][T14290] hfs: unable to open catalog tree [ 586.078001][ T1206] usb 6-1: SerialNumber: syz [ 586.079860][T14290] hfs: can't find a HFS filesystem on dev loop4 [ 586.094001][T10983] usb 1-1: config 4 has an invalid interface number: 69 but max is 0 [ 586.103467][T10983] usb 1-1: config 4 has no interface number 0 [ 586.124188][T12215] usb 4-1: USB disconnect, device number 101 [ 586.142198][T10983] usb 1-1: config 4 interface 69 has no altsetting 0 [ 586.166243][T10983] usb 1-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=90.0d [ 586.186260][T10983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.247887][T10983] usb 1-1: Product: syz [ 586.266337][T10983] usb 1-1: Manufacturer: syz [ 586.289483][ T6567] udevd[6567]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.294687][T10983] usb 1-1: SerialNumber: syz [ 586.384523][ T1206] hub 6-1:125.27: bad descriptor, ignoring hub [ 586.400958][ T1206] hub 6-1:125.27: probe with driver hub failed with error -5 [ 586.409865][ T1206] sierra 6-1:125.27: Sierra USB modem converter detected [ 586.478588][ T1206] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 586.551081][ T1206] usb 6-1: USB disconnect, device number 87 [ 586.586568][ T1206] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 586.610961][T10983] HFC-S_USB 1-1:4.69: probe with driver HFC-S_USB failed with error -5 [ 586.620680][ T1206] sierra 6-1:125.27: device disconnected [ 586.671288][T10983] usb 1-1: USB disconnect, device number 72 [ 587.224884][T14314] cgroup: Need name or subsystem set [ 587.409294][ T1206] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 587.501852][T14318] loop3: detected capacity change from 0 to 512 [ 587.566414][T14318] EXT4-fs error (device loop3): ext4_quota_enable:7123: comm syz.3.3674: Bad quota inum: 1, type: 2 [ 587.609098][ T1206] usb 6-1: Using ep0 maxpacket: 32 [ 587.624829][T14318] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 587.626699][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 587.643881][T14318] EXT4-fs (loop3): mount failed [ 587.691326][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 587.701530][ T1206] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3B, changing to 0xB [ 587.740520][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 587.774377][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 587.834519][ T1206] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 587.854503][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.892003][ T1206] usb 6-1: Product: syz [ 587.896183][ T1206] usb 6-1: Manufacturer: syz [ 587.923351][ T1206] usb 6-1: SerialNumber: syz [ 587.955228][T14296] loop4: detected capacity change from 0 to 32768 [ 587.962467][ T1206] usb 6-1: config 0 descriptor?? [ 587.972266][ T5848] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 588.005561][T14296] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section journal: duplicate journal buckets 7 [ 588.005561][T14296] journal (size 40): [ 588.005561][T14296] Buckets: 7 7 24 1 [ 588.005561][T14296] [ 588.060853][T14296] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 588.177668][ T5848] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 588.200524][ T5848] usb 1-1: config 0 has no interface number 0 [ 588.206665][ T5848] usb 1-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 588.310545][ T5848] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.333522][ T5848] usb 1-1: config 0 interface 109 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 588.362876][ T10] usb 6-1: USB disconnect, device number 88 [ 588.371367][ T5848] usb 1-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 588.410580][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.417594][T14310] loop2: detected capacity change from 0 to 32768 [ 588.457816][ T5848] usb 1-1: config 0 descriptor?? [ 588.472009][T14310] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3670 (14310) [ 588.488511][ T5848] cxacru 1-1:0.109: cxacru_bind: interface has incorrect endpoints [ 588.528534][ T5848] cxacru 1-1:0.109: usbatm_usb_probe: bind failed: -19! [ 588.553495][T14310] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 588.601881][T14310] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 588.755046][ T10] usb 1-1: USB disconnect, device number 73 [ 588.879397][T14310] BTRFS info (device loop2): rebuilding free space tree [ 588.973332][T14310] BTRFS info (device loop2): allowing degraded mounts [ 589.020845][T14310] BTRFS info (device loop2): enabling ssd optimizations [ 589.049964][T14310] BTRFS info (device loop2): enabling free space tree [ 589.076642][T14310] BTRFS info (device loop2): force clearing of disk cache [ 589.135721][T14310] BTRFS info (device loop2): use zstd compression, level 3 [ 589.153717][T14310] BTRFS info (device loop2): max_inline set to 0 [ 589.455145][T14329] loop3: detected capacity change from 0 to 32768 [ 589.498380][T14329] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 6017ae22-2e8c-4c40-a195-82b855e04ccb [ 589.501403][ T6166] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 589.571945][T14329] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3678 (14329) [ 589.622308][ T6183] Bluetooth: hci1: unexpected event for opcode 0x203d [ 589.677290][T14329] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 589.714964][T14329] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 590.138140][T14329] BTRFS info (device loop3): enabling ssd optimizations [ 590.195791][T14329] BTRFS info (device loop3): disabling tree log [ 590.202103][T14329] BTRFS info (device loop3): disabling log replay at mount time [ 590.295459][T14329] BTRFS info (device loop3): turning on async discard [ 590.345215][T14329] BTRFS info (device loop3): enabling free space tree [ 590.373778][T14329] BTRFS info (device loop3): force clearing of disk cache [ 590.427596][T14329] BTRFS info (device loop3): doing ref verification [ 590.661295][T14340] loop1: detected capacity change from 0 to 32768 [ 590.741685][ T6175] BTRFS info (device loop3): last unmount of filesystem 6017ae22-2e8c-4c40-a195-82b855e04ccb [ 590.778336][T14340] JBD2: Ignoring recovery information on journal [ 590.790293][T12215] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 590.933439][T14340] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 590.947642][T10983] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 591.063201][T12215] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.103453][T14408] loop5: detected capacity change from 0 to 8 [ 591.115241][T12215] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 591.180561][T12215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 591.192794][T10983] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 591.229184][T12215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 591.236769][T14408] SQUASHFS error: xz decompression failed, data probably corrupt [ 591.248701][T10983] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 591.274290][T10983] usb 1-1: config 7 has no interface number 0 [ 591.277172][T14408] SQUASHFS error: Failed to read block 0x108: -5 [ 591.307455][T10983] usb 1-1: config 7 interface 252 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 591.342681][T10983] usb 1-1: config 7 interface 252 has no altsetting 0 [ 591.350404][T12215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 591.368204][T10983] usb 1-1: string descriptor 0 read error: -22 [ 591.374833][T10983] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 591.390751][T14408] SQUASHFS error: Unable to read metadata cache entry [106] [ 591.418690][T10983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.432450][T14408] SQUASHFS error: Unable to read inode 0x11f [ 591.458084][T12215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 591.469944][ T6172] ocfs2: Unmounting device (7,1) on (node local) [ 591.532228][T12215] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.591582][T12215] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 591.603649][T12215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.666713][T12215] usb 3-1: Product: syz [ 591.681878][T12215] usb 3-1: Manufacturer: syz [ 591.686508][T12215] usb 3-1: SerialNumber: syz [ 591.759425][T12215] usb 3-1: config 0 descriptor?? [ 591.765770][T14416] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 591.805807][T14398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 591.813554][T10983] usb 1-1: USB disconnect, device number 74 [ 591.849810][T12215] ati_remote 3-1:0.0: Initializing ati_remote hardware failed. [ 591.867518][T14416] cramfs: wrong magic [ 591.906627][T12215] ati_remote 3-1:0.0: probe with driver ati_remote failed with error -5 [ 592.195399][T12215] usb 3-1: USB disconnect, device number 106 [ 592.249402][T14426] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 592.280567][ T10] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 592.300700][T14426] EXT4-fs (loop3): unable to read superblock [ 592.470853][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 592.510019][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.526626][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 218, using maximum allowed: 30 [ 592.553675][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 592.610687][ T10] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 592.628833][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.649124][ T10] usb 6-1: Product: syz [ 592.653334][ T10] usb 6-1: Manufacturer: syz [ 592.676120][ T10] usb 6-1: SerialNumber: syz [ 592.695431][ T10] usb 6-1: config 0 descriptor?? [ 592.858455][ T24] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 592.871432][T14442] loop0: detected capacity change from 0 to 8 [ 592.899126][T14442] squashfs image failed sanity check [ 592.923127][T10983] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 593.007796][ T5848] usb 6-1: USB disconnect, device number 89 [ 593.091416][ T24] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 593.107739][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.116019][T10983] usb 5-1: Using ep0 maxpacket: 16 [ 593.129432][T10983] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 593.149453][ T24] usb 2-1: Product: syz [ 593.160417][ T24] usb 2-1: Manufacturer: syz [ 593.165119][T10983] usb 5-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 593.183545][ T24] usb 2-1: SerialNumber: syz [ 593.188264][T10983] usb 5-1: Product: syz [ 593.197667][ T24] usb 2-1: config 0 descriptor?? [ 593.206572][T10983] usb 5-1: Manufacturer: syz [ 593.217715][T10983] usb 5-1: SerialNumber: syz [ 593.229077][ T24] gm12u320 2-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 593.248113][T10983] usb 5-1: config 0 descriptor?? [ 593.264261][ T24] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 593.279100][T10983] usb 5-1: selecting invalid altsetting 1 [ 593.299956][ T24] usb-storage 2-1:0.0: USB Mass Storage device detected [ 593.342778][T10983] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 593.351974][ T24] usb-storage 2-1:0.0: device ignored [ 593.460412][ T24] usb 2-1: USB disconnect, device number 94 [ 593.536085][ T6567] udevd[6567]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.590173][T14454] loop2: detected capacity change from 0 to 512 [ 593.595765][T10983] usb 5-1: USB disconnect, device number 100 [ 593.655223][T14454] EXT4-fs (loop2): orphan cleanup on readonly fs [ 593.710870][T14454] EXT4-fs warning (device loop2): ext4_xattr_inode_get:555: inode #11: comm syz.2.3722: EA inode hash validation failed [ 593.735404][T14454] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 593.828973][T14440] loop3: detected capacity change from 0 to 32768 [ 593.842813][T14454] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.3722: corrupted inode contents [ 593.912189][T14454] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm syz.2.3722: mark_inode_dirty error [ 593.930036][T14440] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 593.937810][ T6183] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 593.948794][ T6183] Bluetooth: hci1: Injecting HCI hardware error event [ 593.956872][ T6183] Bluetooth: hci1: hardware error 0x00 [ 593.969079][T14454] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.3722: corrupted inode contents [ 594.076007][T14454] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #15: comm syz.2.3722: mark_inode_dirty error [ 594.147915][T14454] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2993: inode #15: comm syz.2.3722: mark inode dirty (error -117) [ 594.245150][T14454] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 594.279475][T14440] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 594.324727][T14454] EXT4-fs (loop2): 1 orphan inode deleted [ 594.332651][T14454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 594.376573][T14440] XFS (loop3): Starting recovery (logdev: internal) [ 594.511928][T14440] XFS (loop3): Ending recovery (logdev: internal) [ 594.664662][ T1206] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 594.696104][ T6166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.833114][ T6175] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 594.870252][ T1206] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.911594][ T1206] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.d2 [ 594.942477][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.953997][ T24] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 594.972181][ T1206] usb 6-1: Product: syz [ 594.985304][ T1206] usb 6-1: Manufacturer: syz [ 594.990095][ T1206] usb 6-1: SerialNumber: syz [ 595.057260][ T1206] usb 6-1: config 0 descriptor?? [ 595.072131][T10983] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 595.172462][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 595.190570][ T24] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 595.221533][ T24] usb 1-1: config 0 has no interface number 0 [ 595.235203][ T24] usb 1-1: New USB device found, idVendor=1485, idProduct=0001, bcdDevice=3e.65 [ 595.255432][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.266046][T10983] usb 5-1: Using ep0 maxpacket: 8 [ 595.287987][T10983] usb 5-1: unable to get BOS descriptor or descriptor too short [ 595.306119][ T24] usb 1-1: Product: syz [ 595.308489][ T1206] f81534a_ctrl 6-1:0.0: failed to set register 0x116: -5 [ 595.316899][ T24] usb 1-1: Manufacturer: syz [ 595.330439][T10983] usb 5-1: config 7 has an invalid interface number: 142 but max is 0 [ 595.348683][ T24] usb 1-1: SerialNumber: syz [ 595.351130][ T1206] f81534a_ctrl 6-1:0.0: failed to enable ports: -5 [ 595.353356][T10983] usb 5-1: config 7 has no interface number 0 [ 595.382452][ T24] usb 1-1: config 0 descriptor?? [ 595.401096][T14493] loop2: detected capacity change from 0 to 136 [ 595.405269][T10983] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 595.420507][ T1206] f81534a_ctrl 6-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 595.427312][T10983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.465244][T10983] usb 5-1: Product: syz [ 595.472652][T10983] usb 5-1: Manufacturer: syz [ 595.481049][ T1206] usb 6-1: USB disconnect, device number 90 [ 595.502479][T10983] usb 5-1: SerialNumber: syz [ 595.680122][ T24] kaweth 1-1:0.20: Firmware present in device. [ 595.697744][ T24] kaweth 1-1:0.20: Error reading configuration (-71), no net device created [ 595.735542][ T24] kaweth 1-1:0.20: probe with driver kaweth failed with error -5 [ 595.780055][T14481] loop1: detected capacity change from 0 to 32768 [ 595.815940][T10983] usb 5-1: USB disconnect, device number 101 [ 595.830043][ T24] usb 1-1: USB disconnect, device number 75 [ 595.834400][T14481] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3731 (14481) [ 595.950677][T14481] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 595.997664][T14481] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 596.161693][ T6183] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 596.263182][T14481] BTRFS info (device loop1): enabling ssd optimizations [ 596.321624][T14481] BTRFS info (device loop1): enabling free space tree [ 596.637992][ T6172] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 596.695828][T12215] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 596.824176][ T1206] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 596.881131][T12215] usb 1-1: Using ep0 maxpacket: 32 [ 596.906510][T12215] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 596.937791][T12215] usb 1-1: config 0 has no interface number 0 [ 596.975947][T12215] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 597.037868][ T1206] usb 6-1: Using ep0 maxpacket: 8 [ 597.043105][T12215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.054025][T12215] usb 1-1: Product: syz [ 597.059993][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 597.089765][T12215] usb 1-1: Manufacturer: syz [ 597.095632][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 597.114614][T12215] usb 1-1: SerialNumber: syz [ 597.128215][ T1206] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 597.145488][T12215] usb 1-1: config 0 descriptor?? [ 597.178108][T12215] redrat3 1-1:0.83: Couldn't find all endpoints [ 597.192093][ T1206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.225528][ T1206] usb 6-1: config 0 descriptor?? [ 597.452177][T10983] usb 1-1: USB disconnect, device number 76 [ 597.504395][ T1206] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 597.562364][ T1206] usb 6-1: USB disconnect, device number 91 [ 597.577434][T14502] loop2: detected capacity change from 0 to 32768 [ 597.664162][T14520] loop3: detected capacity change from 0 to 32768 [ 597.671065][T14502] JBD2: Ignoring recovery information on journal [ 597.683489][T14502] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 597.699908][T14520] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section [ 597.699908][T14520] clean (size 2912): [ 597.699908][T14520] flags: 0 [ 597.699908][T14520] journal_seq: 10 [ 597.699908][T14520] write_buffer_keys: btree=inodes level=0 u64s 8 type deleted 0:21474836481:0 len 0 ver 562954248388608: [ 597.699908][T14520] usage: type=key_version v=0 [ 597.699908][T14520] usage: type=reserved v=0 [ 597.699908][T14520] usage: type=reserved v=0 [ 597.699908][T14520] usage: type=reserved v=0 [ 597.699908][T14520] usage: type=reserved v=0 [ 597.699908][T14520] data_usage: btree: 1/1 [0]=2816 [ 597.699908][T14520] data_usage: journal: 1/1 [0]=0 [ 597.699908][T14520] data_usage: user: 1/1 [0]=16 [ 597.699908][T14520] dev_usage: dev=0 [ 597.699908][T14520] free: buckets=83 sectors=0 fragmented=0 [ 597.699908][T14520] sb: buckets=25 sectors=6152 fragmented=248 [ 597.699908][T14520] journal: buckets=8 sectors=2048 fragmented=0 [ 597.699908][T14520] btree: buckets=11 sectors=2816 fragmented=0 [ 597.699908][T14520] user: buckets=1 sectors=16 fragmented=240 [ 597.699908][T14520] cached: buckets=0 sectors=0 fragmented=0 [ 597.699908][T14520] parity: buckets=0 sectors=0 fragmented=0 [ 597.699908][T14520] stripe: buckets=0 sectors=0 fragmented=0 [ 597.699908][T14520] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 597.699908][T14520] need_discard: buckets=0 sectors=0 fragmented=0 [ 597.699908][T14520] clock: read=0 [ 597.699908][T14520] clock: [ 597.700580][T14520] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 597.701440][T14502] JBD2: bad block at offset 32 [ 598.142549][T14502] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 598.296229][T14542] loop4: detected capacity change from 0 to 1024 [ 598.439716][T14542] hfsplus: bad catalog folder entry [ 598.710959][ T6166] ocfs2: Unmounting device (7,2) on (node local) [ 598.910019][T12215] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 598.966171][T14536] loop1: detected capacity change from 0 to 32768 [ 599.017232][T14536] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64) [ 599.017232][T14536] members_v2 (size 152): [ 599.017232][T14536] Device: 0 [ 599.017232][T14536] Label: (none) [ 599.017232][T14536] UUID: 7af6772b-00de-4159-84cd-1faead7f0000 [ 599.017232][T14536] Size: 0 [ 599.017232][T14536] read errors: 0 [ 599.017232][T14536] write errors: 0 [ 599.017232][T14536] checksum errors: 0 [ 599.017232][T14536] seqread iops: 0 [ 599.017232][T14536] seqwrite iops: 0 [ 599.017232][T14536] randread iops: 0 [ 599.017232][T14536] randwrite iops: 0 [ 599.017232][T14536] Bucket size: 131072 [ 599.017232][T14536] First bucket: 0 [ 599.017232][T14536] Buckets: 0 [ 599.017232][T14536] Last mount: 1714681267 [ 599.017232][T14536] Last superblock write: 83886122 [ 599.017232][T14536] State: rw [ 599.017232][T14536] Data allowed: journal,btree,user [ 599.017232][T14536] Has data: (none) [ 599.017232][T14536] Btree allocated bitmap blocksize:256 [ 599.017232][T14536] Btree allocated bitmap: 0000000000000000000001000010000010011000000000000000000000000000 [ 599.017232][T14536] Durability: [ 599.017524][T14536] bcachefs: bch2_fs_get_tree() error: invalid_sb_members [ 599.276280][T12215] usb 1-1: unable to get BOS descriptor or descriptor too short [ 599.291841][T12215] usb 1-1: not running at top speed; connect to a high speed hub [ 599.371632][T12215] usb 1-1: config 2 has an invalid interface number: 197 but max is 0 [ 599.405503][T12215] usb 1-1: config 2 has no interface number 0 [ 599.443609][T12215] usb 1-1: config 2 interface 197 has no altsetting 0 [ 599.532335][T12215] usb 1-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=48.a1 [ 599.571371][T12215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.592983][T12215] usb 1-1: Product: syz [ 599.597163][T12215] usb 1-1: Manufacturer: syz [ 599.646746][T12215] usb 1-1: SerialNumber: syz [ 599.764127][ T24] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 599.973823][T12215] gspca_main: spca505-2.14.0 probing 041e:401d [ 599.974061][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 600.004225][T12215] gspca_spca505: reg write: error -71 [ 600.009689][T12215] spca505 1-1:2.197: probe with driver spca505 failed with error -5 [ 600.017220][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 600.073431][ T24] usb 3-1: language id specifier not provided by device, defaulting to English [ 600.074960][T12215] usb 1-1: USB disconnect, device number 77 [ 600.125571][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 600.154936][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.170361][T10983] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 600.197678][ T24] usb 3-1: Product: syz [ 600.208034][ T24] usb 3-1: Manufacturer: 죈㍔倊럁⚃㠙䒪簞윑䡱恔㔆濯犹⿨贾ﴏᆱ藅侍溆竛앸䙏㈤䚋䩔겏ꊛǝ࣋염ℵ榕㥔앰돌徨㳌ꋼ͵샕椛썒쟲臍誊歫邇榵ൄﲡ爉롱ﶹന抛출䢗쌤ᶏ뢽㴎辷몦糈肘⑀ᕟ礼΄涊쵟幊좗툲漩뱜䟴Ꝛ捋높踭濃利髐蹱ⳆꙨ㹸꺚듳虇蕴ҏ鮆葿⟇⾮㝌妵♧㙾ޕ󫀯 [ 600.309426][ T24] usb 3-1: SerialNumber: syz [ 600.362900][T10983] usb 5-1: Using ep0 maxpacket: 32 [ 600.394022][T10983] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 600.424160][T10983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.448735][T10983] usb 5-1: Product: syz [ 600.452932][T10983] usb 5-1: Manufacturer: syz [ 600.478194][T10983] usb 5-1: SerialNumber: syz [ 600.497400][T10983] usb 5-1: config 0 descriptor?? [ 600.528374][T10983] ttusb_dec_send_command: command bulk message failed: error -22 [ 600.570957][T10983] ttusb-dec 5-1:0.0: probe with driver ttusb-dec failed with error -22 [ 600.582866][ T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 107 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 600.603314][ T24] usb 3-1: USB disconnect, device number 107 [ 600.623709][ T24] usblp0: removed [ 600.727868][ T5848] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 600.774823][ T6299] usb 5-1: USB disconnect, device number 102 [ 600.940233][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 600.956841][ T5848] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 600.981535][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 601.010936][ T5848] usb 2-1: Product: syz [ 601.022850][ T5848] usb 2-1: Manufacturer: syz [ 601.030001][ T5848] usb 2-1: SerialNumber: syz [ 601.046130][ T5848] usb 2-1: config 0 descriptor?? [ 601.060306][ T5848] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 601.083023][ T5848] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 601.160870][T14578] loop3: detected capacity change from 0 to 32768 [ 601.177350][T14578] bcachefs (/dev/loop3): error reading default superblock: Bad minimum version 0.24: unwritten_extents, greater than version field 0.9: (unknown version) [ 601.212163][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 601.221693][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 601.247335][T14578] bcachefs (/dev/loop3): error validating superblock: Bad sb offset (got 288230376151715840, read from 4096) [ 601.262180][T14578] bcachefs: bch2_fs_get_tree() error: invalid_sb_offset [ 601.279365][ T1206] usb 2-1: USB disconnect, device number 95 [ 601.363436][T14598] loop5: detected capacity change from 0 to 512 [ 601.409773][T14598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002] [ 601.430589][T14598] System zones: 1-12 [ 601.478231][T14598] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.3780: invalid indirect mapped block 8 (level 2) [ 601.558297][T14598] EXT4-fs (loop5): Remounting filesystem read-only [ 601.597338][T14598] EXT4-fs (loop5): 1 truncate cleaned up [ 601.648168][T14598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.761031][T14601] loop2: detected capacity change from 0 to 4096 [ 601.852178][T14605] loop0: detected capacity change from 0 to 4096 [ 601.853963][T14601] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 601.917391][T14605] ntfs3(loop0): Primary boot: invalid record size -14. [ 601.924619][T14601] ntfs3(loop2): Failed to load $UpCase (-22). [ 601.937908][ T6170] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.972142][T14605] ntfs3(loop0): try to read out of volume at offset 0x1ffe00 [ 602.190906][ T6299] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 602.415674][ T6299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.415828][T14613] loop1: detected capacity change from 0 to 2048 [ 602.457089][ T6299] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 602.518021][ T6299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 602.598578][ T6299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 602.645018][ T6299] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 602.702259][ T6299] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 602.712059][ T6299] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 602.767287][ T6299] usb 5-1: Manufacturer: syz [ 602.768288][T12215] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 602.780623][ T1206] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 602.786499][ T6299] usb 5-1: config 0 descriptor?? [ 602.815611][ T30] audit: type=1326 audit(2000000172.251:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14621 comm="syz.0.3791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12fd78eba9 code=0x0 [ 602.936752][T14624] loop1: detected capacity change from 0 to 512 [ 602.955012][T14624] EXT4-fs: Ignoring removed mblk_io_submit option [ 602.970158][ T1206] usb 6-1: unable to get BOS descriptor or descriptor too short [ 602.980131][ T1206] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.981423][T14624] EXT4-fs: Ignoring removed mblk_io_submit option [ 603.014250][ T1206] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 603.039873][ T5848] usb 5-1: USB disconnect, device number 103 [ 603.059199][T12215] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 603.072621][T14624] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 603.088218][T14624] EXT4-fs (loop1): Invalid default hash set in the superblock [ 603.091588][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 603.107119][T12215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.126437][T14626] loop0: detected capacity change from 0 to 1764 [ 603.134593][T12215] usb 3-1: Product: syz [ 603.138772][T12215] usb 3-1: Manufacturer: syz [ 603.155589][T12215] usb 3-1: SerialNumber: syz [ 603.163019][ T1206] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 603.179535][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.207661][T12215] usb 3-1: config 0 descriptor?? [ 603.216824][ T1206] usb 6-1: Product: syz [ 603.217364][T14626] isofs_fill_super: get root inode failed [ 603.223903][T12215] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 603.234455][ T1206] usb 6-1: Manufacturer: syz [ 603.245634][ T1206] usb 6-1: SerialNumber: syz [ 603.311338][ T1206] usb 6-1: config 0 descriptor?? [ 603.322732][T12215] usb 3-1: Detected FT4232HP [ 603.340443][T14620] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 603.355164][T14608] loop3: detected capacity change from 0 to 40427 [ 603.357961][ T1206] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 603.439458][T12215] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 603.441632][T14608] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 603.461378][T12215] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 603.466698][T14628] loop1: detected capacity change from 0 to 1024 [ 603.487961][T12215] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 603.495823][T14608] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 603.552564][T12215] usb 3-1: USB disconnect, device number 108 [ 603.574995][T14608] F2FS-fs (loop3): invalid crc value [ 603.636423][ T10] usb 6-1: USB disconnect, device number 92 [ 603.673933][T12215] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 603.719286][T12215] ftdi_sio 3-1:0.0: device disconnected [ 603.962753][T14608] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 604.040841][T14608] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 604.044776][T14641] tmpfs: Unknown parameter 'hash' [ 604.059886][T14608] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 604.318377][ T6299] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 604.378095][T14650] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 604.410506][T14650] PKCS7: Only support pkcs7_signedData type [ 604.551739][ T6299] usb 2-1: unable to get BOS descriptor or descriptor too short [ 604.577273][ T6299] usb 2-1: not running at top speed; connect to a high speed hub [ 604.620271][ T6299] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 604.649715][ T6299] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 604.692149][ T6299] usb 2-1: config 4 has no interface number 0 [ 604.724695][ T6299] usb 2-1: Dual-Role OTG device on HNP port [ 604.731080][ T6299] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 604.751063][ T6299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 604.767352][ T6299] usb 2-1: Product: syz [ 604.771530][ T6299] usb 2-1: Manufacturer: syz [ 604.785093][ T6299] usb 2-1: SerialNumber: syz [ 604.792762][T14658] loop0: detected capacity change from 0 to 64 [ 604.818479][T14658] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 604.828818][T14658] MINIX-fs: bad superblock or unable to read bitmaps [ 604.871134][ T1206] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 604.908616][T14656] loop5: detected capacity change from 0 to 8192 [ 604.973374][ T7171] loop5: p1 p2[DM] p4 [ 604.977952][ T7171] loop5: p1 size 196608 extends beyond EOD, truncated [ 605.005944][ T7171] loop5: p2 start 4292936063 is beyond EOD, truncated [ 605.033109][ T7171] loop5: p4 size 50331648 extends beyond EOD, truncated [ 605.098584][ T1206] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.110091][ T6299] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 605.132694][ T1206] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.150696][T14656] loop5: p1 p2[DM] p4 [ 605.156950][ T1206] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 605.160666][ T6299] usb 2-1: No valid video chain found. [ 605.178586][T14656] loop5: p1 size 196608 extends beyond EOD, truncated [ 605.198563][ T6299] usb 2-1: USB disconnect, device number 96 [ 605.217267][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 605.236397][T14656] loop5: p2 start 4292936063 is beyond EOD, truncated [ 605.246610][T14656] loop5: p4 size 50331648 extends beyond EOD, truncated [ 605.261273][ T1206] usb 5-1: SerialNumber: syz [ 605.543711][ T1206] usb 5-1: unknown interface protocol 0x17, assuming v1 [ 605.572768][ T1206] usb 5-1: 0:2 : does not exist [ 605.577708][ T1206] usb 5-1: unit 3 not found! [ 605.658722][ T7171] udevd[7171]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 605.688261][ T1206] usb 5-1: USB disconnect, device number 104 [ 605.691452][ T6168] udevd[6168]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 605.741950][T14665] loop5: detected capacity change from 0 to 1024 [ 605.749426][T14665] journal_path: not usable as path [ 605.814034][ T6567] udevd[6567]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.829297][T14665] EXT4-fs: error: could not find journal device path [ 605.930433][T14652] loop2: detected capacity change from 0 to 32768 [ 605.967855][ T7171] udevd[7171]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 605.976785][ T6168] udevd[6168]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 605.983344][T14652] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3803 (14652) [ 606.028447][T14652] BTRFS info (device loop2 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 606.106994][T14652] BTRFS info (device loop2 state S): using crc32c (crc32c-lib) checksum algorithm [ 606.146551][ T6347] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 606.230421][ T2950] BTRFS warning (device loop2 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x489c6eed level 0, ignored [ 606.230732][T14652] BTRFS error (device loop2 state S): devid 1 uuid ffe96fa6-2f75-4006-0000-0003f3eadbc4 is missing [ 606.230805][T14652] BTRFS error (device loop2 state S): failed to read chunk tree: -2 [ 606.322590][T14652] BTRFS error (device loop2 state S): open_ctree failed: -2 [ 606.330670][ T6347] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 606.330710][ T6347] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.330746][ T6347] usb 2-1: config 0 has no interface number 0 [ 606.330812][ T6347] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 606.330854][ T6347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.362510][ T6347] usb 2-1: config 0 descriptor?? [ 606.392345][ T1206] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 606.566886][ T1206] usb 6-1: Using ep0 maxpacket: 16 [ 606.577958][ T1206] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 606.630558][ T6183] Bluetooth: hci4: unexpected event for opcode 0x0428 [ 606.651138][ T1206] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 606.661618][T14695] loop4: detected capacity change from 0 to 512 [ 606.669682][ T1206] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 606.678437][ T6299] usb 2-1: USB disconnect, device number 97 [ 606.746138][T14695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 606.796415][ T1206] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 606.855529][ T1206] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 606.882796][T14695] EXT4-fs (loop4): orphan cleanup on readonly fs [ 606.921602][ T1206] usb 6-1: config 1 interface 0 has no altsetting 0 [ 606.941630][T14695] EXT4-fs error (device loop4): ext4_quota_enable:7128: inode #4: comm syz.4.3818: unexpected EA_INODE flag [ 606.991026][ T1206] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 607.041275][T14695] EXT4-fs error (device loop4): ext4_quota_enable:7130: comm syz.4.3818: Bad quota inode: 4, type: 1 [ 607.053428][ T1206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.077854][ T1206] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 607.101888][T14695] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 607.142314][T14695] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 607.168148][T14695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 607.212310][T14702] loop3: detected capacity change from 0 to 4096 [ 607.226450][ T6347] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 607.313033][ T6182] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.366236][ T1206] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 607.430302][ T6347] usb 1-1: Using ep0 maxpacket: 8 [ 607.466058][ T6347] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f [ 607.468132][T14702] ntfs3(loop3): $Secure::$SDH is corrupted. [ 607.513153][ T6347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.528298][ T1206] usb 6-1: USB disconnect, device number 93 [ 607.558516][ T6347] usb 1-1: Product: syz [ 607.562701][ T6347] usb 1-1: Manufacturer: syz [ 607.572473][T14702] ntfs3(loop3): Failed to initialize $Secure (-22). [ 607.618007][ T6347] usb 1-1: SerialNumber: syz [ 607.647964][ T6347] usb 1-1: config 0 descriptor?? [ 607.691842][ T6347] (null): radio-mr800 - initialization failed [ 607.752841][ T6347] radio-mr800 1-1:0.0: probe with driver radio-mr800 failed with error -22 [ 607.786616][ T6347] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 607.985032][ T6299] usb 1-1: USB disconnect, device number 78 [ 608.370144][ T6347] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 608.381019][T14726] loop2: detected capacity change from 0 to 128 [ 608.401716][T14726] hpfs: filesystem error: invalid number of hotfixes: 256, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 608.498846][T14726] hpfs: filesystem error: improperly stopped [ 608.516229][T14726] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 608.535019][T14726] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 608.555191][ T6347] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.581860][T14726] hpfs: You really don't want any checks? You are crazy... [ 608.608454][ T6347] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 608.633641][T14726] hpfs: hpfs_map_sector(): read error [ 608.650542][ T6347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.658604][ T6347] usb 4-1: Product: syz [ 608.669079][T14726] hpfs: code page support is disabled [ 608.678329][T14726] ================================================================== [ 608.686420][T14726] BUG: KASAN: use-after-free in strcmp+0xa7/0xb0 [ 608.692774][T14726] Read of size 1 at addr ffff88804d7e38a6 by task syz.2.3832/14726 [ 608.700675][T14726] [ 608.703006][T14726] CPU: 0 UID: 0 PID: 14726 Comm: syz.2.3832 Not tainted syzkaller #0 PREEMPT(full) [ 608.703055][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 608.703078][T14726] Call Trace: [ 608.703092][T14726] [ 608.703106][T14726] dump_stack_lvl+0x116/0x1f0 [ 608.703168][T14726] print_report+0xcd/0x630 [ 608.703203][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.703251][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.703297][T14726] ? __phys_addr+0xe8/0x180 [ 608.703352][T14726] ? strcmp+0xa7/0xb0 [ 608.703383][T14726] kasan_report+0xe0/0x110 [ 608.703419][T14726] ? strcmp+0xa7/0xb0 [ 608.703458][T14726] strcmp+0xa7/0xb0 [ 608.703492][T14726] hpfs_get_ea+0x1f9/0xc90 [ 608.703541][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.703590][T14726] ? __pfx_hpfs_get_ea+0x10/0x10 [ 608.703639][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.703686][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.703732][T14726] ? find_held_lock+0x2b/0x80 [ 608.703779][T14726] ? __pfx___might_resched+0x10/0x10 [ 608.703827][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.703884][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.703930][T14726] ? bdev_getblk+0x7c/0xe0 [ 608.703979][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.704025][T14726] ? __bread_gfp+0xbe/0x3c0 [ 608.704072][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.704118][T14726] ? hpfs_map_sector+0x1a8/0x390 [ 608.704158][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.704204][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 608.704247][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.704292][T14726] ? hpfs_map_fnode+0x4bf/0x770 [ 608.704350][T14726] hpfs_read_inode+0x69e/0x1270 [ 608.704402][T14726] ? rcu_is_watching+0x12/0xc0 [ 608.704451][T14726] ? __pfx_hpfs_read_inode+0x10/0x10 [ 608.704502][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.704548][T14726] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 608.704592][T14726] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 608.704636][T14726] ? __pfx_hpfs_load_code_page+0x10/0x10 [ 608.704696][T14726] hpfs_fill_super+0x13e9/0x2230 [ 608.704738][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 608.704772][T14726] ? __pfx_snprintf+0x10/0x10 [ 608.704827][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 608.704865][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.704919][T14726] ? find_held_lock+0x2b/0x80 [ 608.704961][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.705005][T14726] ? set_blocksize+0x406/0x500 [ 608.705050][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.705093][T14726] ? sb_set_blocksize+0x176/0x1d0 [ 608.705135][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.705181][T14726] ? setup_bdev_super+0x369/0x730 [ 608.705238][T14726] get_tree_bdev_flags+0x38c/0x620 [ 608.705295][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 608.705331][T14726] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 608.705394][T14726] ? apparmor_capable+0x114/0x1d0 [ 608.705437][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.705483][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.705530][T14726] ? security_capable+0x7e/0x260 [ 608.705569][T14726] vfs_get_tree+0x8e/0x340 [ 608.705619][T14726] path_mount+0x1513/0x2000 [ 608.705666][T14726] ? __pfx_path_mount+0x10/0x10 [ 608.705708][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.705754][T14726] ? kmem_cache_free+0x2d1/0x4d0 [ 608.705810][T14726] ? putname+0x154/0x1a0 [ 608.705855][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.705906][T14726] ? putname+0x154/0x1a0 [ 608.705950][T14726] ? __x64_sys_mount+0x28d/0x310 [ 608.705991][T14726] __x64_sys_mount+0x28d/0x310 [ 608.706034][T14726] ? __pfx___x64_sys_mount+0x10/0x10 [ 608.706076][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.706130][T14726] do_syscall_64+0xcd/0x4e0 [ 608.706193][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.706231][T14726] RIP: 0033:0x7f6954b9034a [ 608.706260][T14726] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.706299][T14726] RSP: 002b:00007f69559b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 608.706335][T14726] RAX: ffffffffffffffda RBX: 00007f69559b6ef0 RCX: 00007f6954b9034a [ 608.706362][T14726] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f69559b6eb0 [ 608.706388][T14726] RBP: 000020000000a000 R08: 00007f69559b6ef0 R09: 0000000003200041 [ 608.706415][T14726] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 608.706440][T14726] R13: 00007f69559b6eb0 R14: 0000000000009e15 R15: 0000200000000040 [ 608.706478][T14726] [ 608.706492][T14726] [ 609.148171][T14726] The buggy address belongs to the physical page: [ 609.154574][T14726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f098cb3a pfn:0x4d7e3 [ 609.164033][T14726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 609.171157][T14726] raw: 00fff00000000000 ffffea000135f908 ffffea000135f888 0000000000000000 [ 609.179746][T14726] raw: 00000007f098cb3a 0000000000000000 00000000ffffffff 0000000000000000 [ 609.188318][T14726] page dumped because: kasan: bad access detected [ 609.194725][T14726] page_owner tracks the page as freed [ 609.200075][T14726] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 14702, tgid 14701 (syz.3.3820), ts 607138110947, free_ts 607211234167 [ 609.218932][T14726] post_alloc_hook+0x1c0/0x230 [ 609.223713][T14726] get_page_from_freelist+0x132b/0x38e0 [ 609.229276][T14726] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 609.235200][T14726] alloc_pages_mpol+0x1fb/0x550 [ 609.240069][T14726] folio_alloc_mpol_noprof+0x36/0x2f0 [ 609.245452][T14726] vma_alloc_folio_noprof+0xed/0x1e0 [ 609.250742][T14726] do_pte_missing+0x2230/0x3ba0 [ 609.255627][T14726] __handle_mm_fault+0x152a/0x2a50 [ 609.260749][T14726] handle_mm_fault+0x589/0xd10 [ 609.265527][T14726] do_user_addr_fault+0x60c/0x1370 [ 609.270637][T14726] exc_page_fault+0x5c/0xb0 [ 609.275159][T14726] asm_exc_page_fault+0x26/0x30 [ 609.280010][T14726] page last free pid 14702 tgid 14701 stack trace: [ 609.286495][T14726] free_unref_folios+0xa61/0x16b0 [ 609.291585][T14726] folios_put_refs+0x56f/0x740 [ 609.296348][T14726] free_pages_and_swap_cache+0x3f0/0x4a0 [ 609.301992][T14726] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 609.307981][T14726] tlb_finish_mmu+0x168/0x7c0 [ 609.312668][T14726] vms_clear_ptes+0x55e/0x770 [ 609.317357][T14726] vms_complete_munmap_vmas+0x1ca/0x970 [ 609.322915][T14726] do_vmi_align_munmap+0x43b/0x7d0 [ 609.328064][T14726] do_vmi_munmap+0x204/0x3e0 [ 609.332671][T14726] __vm_munmap+0x19a/0x390 [ 609.337109][T14726] __x64_sys_munmap+0x59/0x80 [ 609.341789][T14726] do_syscall_64+0xcd/0x4e0 [ 609.346327][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.352224][T14726] [ 609.354532][T14726] Memory state around the buggy address: [ 609.360325][T14726] ffff88804d7e3780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 609.368383][T14726] ffff88804d7e3800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 609.376440][T14726] >ffff88804d7e3880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 609.384490][T14726] ^ [ 609.389588][T14726] ffff88804d7e3900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 609.397648][T14726] ffff88804d7e3980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 609.405699][T14726] ================================================================== [ 609.415197][ T6347] usb 4-1: Manufacturer: syz [ 609.427339][ T6347] usb 4-1: SerialNumber: syz [ 609.449958][T14726] Disabling lock debugging due to kernel taint [ 609.458706][ T6347] usb 4-1: config 0 descriptor?? [ 609.459814][T14726] ================================================================== [ 609.471689][T14726] BUG: KASAN: use-after-free in hpfs_get_ea+0xb51/0xc90 [ 609.478656][T14726] Read of size 1 at addr ffff88804d7e38a3 by task syz.2.3832/14726 [ 609.486548][T14726] [ 609.488876][T14726] CPU: 1 UID: 0 PID: 14726 Comm: syz.2.3832 Tainted: G B syzkaller #0 PREEMPT(full) [ 609.488930][T14726] Tainted: [B]=BAD_PAGE [ 609.488943][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 609.488964][T14726] Call Trace: [ 609.488975][T14726] [ 609.488988][T14726] dump_stack_lvl+0x116/0x1f0 [ 609.489046][T14726] print_report+0xcd/0x630 [ 609.489077][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.489118][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.489161][T14726] ? __phys_addr+0xe8/0x180 [ 609.489208][T14726] ? hpfs_get_ea+0xb51/0xc90 [ 609.489250][T14726] kasan_report+0xe0/0x110 [ 609.489282][T14726] ? hpfs_get_ea+0xb51/0xc90 [ 609.489331][T14726] hpfs_get_ea+0xb51/0xc90 [ 609.489373][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.489416][T14726] ? __pfx_hpfs_get_ea+0x10/0x10 [ 609.489462][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.489504][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.489545][T14726] ? find_held_lock+0x2b/0x80 [ 609.489587][T14726] ? __pfx___might_resched+0x10/0x10 [ 609.489632][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.489677][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.489718][T14726] ? bdev_getblk+0x7c/0xe0 [ 609.489763][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.489804][T14726] ? __bread_gfp+0xbe/0x3c0 [ 609.489846][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.489888][T14726] ? hpfs_map_sector+0x1a8/0x390 [ 609.489930][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.489971][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 609.490010][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.490054][T14726] ? hpfs_map_fnode+0x4bf/0x770 [ 609.490105][T14726] hpfs_read_inode+0x69e/0x1270 [ 609.490150][T14726] ? rcu_is_watching+0x12/0xc0 [ 609.490197][T14726] ? __pfx_hpfs_read_inode+0x10/0x10 [ 609.490243][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.490284][T14726] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 609.490326][T14726] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 609.490368][T14726] ? __pfx_hpfs_load_code_page+0x10/0x10 [ 609.490424][T14726] hpfs_fill_super+0x13e9/0x2230 [ 609.490461][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 609.490495][T14726] ? __pfx_snprintf+0x10/0x10 [ 609.490546][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 609.490582][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.490624][T14726] ? find_held_lock+0x2b/0x80 [ 609.490666][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.490706][T14726] ? set_blocksize+0x406/0x500 [ 609.490746][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.490791][T14726] ? sb_set_blocksize+0x176/0x1d0 [ 609.490830][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.490870][T14726] ? setup_bdev_super+0x369/0x730 [ 609.490926][T14726] get_tree_bdev_flags+0x38c/0x620 [ 609.490979][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 609.491011][T14726] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 609.491067][T14726] ? apparmor_capable+0x114/0x1d0 [ 609.491108][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.491148][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.491189][T14726] ? security_capable+0x7e/0x260 [ 609.491226][T14726] vfs_get_tree+0x8e/0x340 [ 609.491271][T14726] path_mount+0x1513/0x2000 [ 609.491311][T14726] ? __pfx_path_mount+0x10/0x10 [ 609.491349][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.491392][T14726] ? kmem_cache_free+0x2d1/0x4d0 [ 609.491442][T14726] ? putname+0x154/0x1a0 [ 609.491481][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.491525][T14726] ? putname+0x154/0x1a0 [ 609.491580][T14726] ? __x64_sys_mount+0x28d/0x310 [ 609.491617][T14726] __x64_sys_mount+0x28d/0x310 [ 609.491656][T14726] ? __pfx___x64_sys_mount+0x10/0x10 [ 609.491691][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.491741][T14726] do_syscall_64+0xcd/0x4e0 [ 609.491797][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.491831][T14726] RIP: 0033:0x7f6954b9034a [ 609.491859][T14726] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.491894][T14726] RSP: 002b:00007f69559b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 609.491930][T14726] RAX: ffffffffffffffda RBX: 00007f69559b6ef0 RCX: 00007f6954b9034a [ 609.491953][T14726] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f69559b6eb0 [ 609.491977][T14726] RBP: 000020000000a000 R08: 00007f69559b6ef0 R09: 0000000003200041 [ 609.492003][T14726] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 609.492026][T14726] R13: 00007f69559b6eb0 R14: 0000000000009e15 R15: 0000200000000040 [ 609.492059][T14726] [ 609.492071][T14726] [ 609.937222][T14726] The buggy address belongs to the physical page: [ 609.943621][T14726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f098cb3a pfn:0x4d7e3 [ 609.953085][T14726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 609.960205][T14726] raw: 00fff00000000000 ffffea000135f908 ffffea000135f888 0000000000000000 [ 609.968794][T14726] raw: 00000007f098cb3a 0000000000000000 00000000ffffffff 0000000000000000 [ 609.977368][T14726] page dumped because: kasan: bad access detected [ 609.983771][T14726] page_owner tracks the page as freed [ 609.989123][T14726] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 14702, tgid 14701 (syz.3.3820), ts 607138110947, free_ts 607211234167 [ 610.008157][T14726] post_alloc_hook+0x1c0/0x230 [ 610.012940][T14726] get_page_from_freelist+0x132b/0x38e0 [ 610.018511][T14726] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 610.024429][T14726] alloc_pages_mpol+0x1fb/0x550 [ 610.029277][T14726] folio_alloc_mpol_noprof+0x36/0x2f0 [ 610.034654][T14726] vma_alloc_folio_noprof+0xed/0x1e0 [ 610.039951][T14726] do_pte_missing+0x2230/0x3ba0 [ 610.044814][T14726] __handle_mm_fault+0x152a/0x2a50 [ 610.049937][T14726] handle_mm_fault+0x589/0xd10 [ 610.054713][T14726] do_user_addr_fault+0x60c/0x1370 [ 610.059831][T14726] exc_page_fault+0x5c/0xb0 [ 610.064354][T14726] asm_exc_page_fault+0x26/0x30 [ 610.069208][T14726] page last free pid 14702 tgid 14701 stack trace: [ 610.075703][T14726] free_unref_folios+0xa61/0x16b0 [ 610.080750][T14726] folios_put_refs+0x56f/0x740 [ 610.085515][T14726] free_pages_and_swap_cache+0x3f0/0x4a0 [ 610.091164][T14726] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 610.097157][T14726] tlb_finish_mmu+0x168/0x7c0 [ 610.101849][T14726] vms_clear_ptes+0x55e/0x770 [ 610.106544][T14726] vms_complete_munmap_vmas+0x1ca/0x970 [ 610.112110][T14726] do_vmi_align_munmap+0x43b/0x7d0 [ 610.117246][T14726] do_vmi_munmap+0x204/0x3e0 [ 610.121857][T14726] __vm_munmap+0x19a/0x390 [ 610.126294][T14726] __x64_sys_munmap+0x59/0x80 [ 610.130978][T14726] do_syscall_64+0xcd/0x4e0 [ 610.135508][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.141403][T14726] [ 610.143734][T14726] Memory state around the buggy address: [ 610.149352][T14726] ffff88804d7e3780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 610.157413][T14726] ffff88804d7e3800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 610.165473][T14726] >ffff88804d7e3880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 610.173526][T14726] ^ [ 610.178630][T14726] ffff88804d7e3900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 610.186688][T14726] ffff88804d7e3980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 610.194738][T14726] ================================================================== [ 610.212083][ T24] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 610.219745][T14726] ================================================================== [ 610.219765][T14726] BUG: KASAN: use-after-free in hpfs_get_ea+0xb42/0xc90 [ 610.219818][T14726] Read of size 1 at addr ffff88804d7e38a4 by task syz.2.3832/14726 [ 610.219850][T14726] [ 610.219875][T14726] CPU: 0 UID: 0 PID: 14726 Comm: syz.2.3832 Tainted: G B syzkaller #0 PREEMPT(full) [ 610.219935][T14726] Tainted: [B]=BAD_PAGE [ 610.219950][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 610.219973][T14726] Call Trace: [ 610.219986][T14726] [ 610.220000][T14726] dump_stack_lvl+0x116/0x1f0 [ 610.220058][T14726] print_report+0xcd/0x630 [ 610.220092][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.220138][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.220182][T14726] ? __phys_addr+0xe8/0x180 [ 610.220235][T14726] ? hpfs_get_ea+0xb42/0xc90 [ 610.220279][T14726] kasan_report+0xe0/0x110 [ 610.220315][T14726] ? hpfs_get_ea+0xb42/0xc90 [ 610.220366][T14726] hpfs_get_ea+0xb42/0xc90 [ 610.220412][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.220462][T14726] ? __pfx_hpfs_get_ea+0x10/0x10 [ 610.220509][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.220554][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.220597][T14726] ? find_held_lock+0x2b/0x80 [ 610.220642][T14726] ? __pfx___might_resched+0x10/0x10 [ 610.220688][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.220736][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.220780][T14726] ? bdev_getblk+0x7c/0xe0 [ 610.220827][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.220872][T14726] ? __bread_gfp+0xbe/0x3c0 [ 610.220923][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.220970][T14726] ? hpfs_map_sector+0x1a8/0x390 [ 610.221009][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.221053][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 610.221094][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.221138][T14726] ? hpfs_map_fnode+0x4bf/0x770 [ 610.221192][T14726] hpfs_read_inode+0x69e/0x1270 [ 610.221242][T14726] ? rcu_is_watching+0x12/0xc0 [ 610.221289][T14726] ? __pfx_hpfs_read_inode+0x10/0x10 [ 610.221338][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.221381][T14726] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 610.221424][T14726] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 610.221467][T14726] ? __pfx_hpfs_load_code_page+0x10/0x10 [ 610.221527][T14726] hpfs_fill_super+0x13e9/0x2230 [ 610.221567][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 610.221601][T14726] ? __pfx_snprintf+0x10/0x10 [ 610.221656][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 610.221693][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.221738][T14726] ? find_held_lock+0x2b/0x80 [ 610.221780][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.221824][T14726] ? set_blocksize+0x406/0x500 [ 610.221868][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.221918][T14726] ? sb_set_blocksize+0x176/0x1d0 [ 610.221960][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.222003][T14726] ? setup_bdev_super+0x369/0x730 [ 610.222057][T14726] get_tree_bdev_flags+0x38c/0x620 [ 610.222113][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 610.222147][T14726] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 610.222206][T14726] ? apparmor_capable+0x114/0x1d0 [ 610.222248][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.222291][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.222335][T14726] ? security_capable+0x7e/0x260 [ 610.222372][T14726] vfs_get_tree+0x8e/0x340 [ 610.222428][T14726] path_mount+0x1513/0x2000 [ 610.222475][T14726] ? __pfx_path_mount+0x10/0x10 [ 610.222522][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.222566][T14726] ? kmem_cache_free+0x2d1/0x4d0 [ 610.222618][T14726] ? putname+0x154/0x1a0 [ 610.222660][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.222704][T14726] ? putname+0x154/0x1a0 [ 610.222746][T14726] ? __x64_sys_mount+0x28d/0x310 [ 610.222785][T14726] __x64_sys_mount+0x28d/0x310 [ 610.222826][T14726] ? __pfx___x64_sys_mount+0x10/0x10 [ 610.222866][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.222922][T14726] do_syscall_64+0xcd/0x4e0 [ 610.222982][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.223018][T14726] RIP: 0033:0x7f6954b9034a [ 610.223045][T14726] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.223082][T14726] RSP: 002b:00007f69559b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 610.223116][T14726] RAX: ffffffffffffffda RBX: 00007f69559b6ef0 RCX: 00007f6954b9034a [ 610.223142][T14726] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f69559b6eb0 [ 610.223167][T14726] RBP: 000020000000a000 R08: 00007f69559b6ef0 R09: 0000000003200041 [ 610.223192][T14726] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 610.223216][T14726] R13: 00007f69559b6eb0 R14: 0000000000009e15 R15: 0000200000000040 [ 610.223252][T14726] [ 610.223265][T14726] [ 610.229437][ T5848] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 610.235375][T14726] The buggy address belongs to the physical page: [ 610.235393][T14726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f098cb3a pfn:0x4d7e3 [ 610.489611][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 610.491401][T14726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 610.491449][T14726] raw: 00fff00000000000 ffffea000135f908 ffffea000135f888 0000000000000000 [ 610.497648][ T24] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 610.502068][T14726] raw: 00000007f098cb3a 0000000000000000 00000000ffffffff 0000000000000000 [ 610.507065][ T24] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 610.512129][T14726] page dumped because: kasan: bad access detected [ 610.512149][T14726] page_owner tracks the page as freed [ 610.512161][T14726] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 14702, tgid 14701 (syz.3.3820), ts 607138110947, free_ts 607211234167 [ 610.518019][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 610.523023][T14726] post_alloc_hook+0x1c0/0x230 [ 610.528922][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.533742][T14726] get_page_from_freelist+0x132b/0x38e0 [ 610.543566][ T5848] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 610.544278][T14726] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 610.550096][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 610.553135][T14726] alloc_pages_mpol+0x1fb/0x550 [ 610.553174][T14726] folio_alloc_mpol_noprof+0x36/0x2f0 [ 610.558024][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 610.563589][T14726] vma_alloc_folio_noprof+0xed/0x1e0 [ 610.571691][ T5848] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 610.572746][T14726] do_pte_missing+0x2230/0x3ba0 [ 610.578464][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.582670][T14726] __handle_mm_fault+0x152a/0x2a50 [ 610.588274][ T5848] usb 2-1: Product: syz [ 610.592331][T14726] handle_mm_fault+0x589/0xd10 [ 610.598589][ T5848] usb 2-1: Manufacturer: syz [ 610.603188][T14726] do_user_addr_fault+0x60c/0x1370 [ 610.607938][ T5848] usb 2-1: SerialNumber: syz [ 610.613542][T14726] exc_page_fault+0x5c/0xb0 [ 610.622809][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 610.637594][T14726] asm_exc_page_fault+0x26/0x30 [ 610.637634][T14726] page last free pid 14702 tgid 14701 stack trace: [ 610.652656][ T5848] usb 2-1: config 0 descriptor?? [ 610.653959][T14726] free_unref_folios+0xa61/0x16b0 [ 610.673834][T14729] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 610.677794][T14726] folios_put_refs+0x56f/0x740 [ 610.838018][ T24] gspca_sn9c2028: read1 error -71 [ 610.846966][T14726] free_pages_and_swap_cache+0x3f0/0x4a0 [ 610.857755][ T24] gspca_sn9c2028: read1 error -71 [ 610.868154][T14726] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 610.877595][ T24] gspca_sn9c2028: read1 error -71 [ 610.882431][T14726] tlb_finish_mmu+0x168/0x7c0 [ 610.887602][ T24] sn9c2028 5-1:220.0: probe with driver sn9c2028 failed with error -71 [ 610.895237][T14726] vms_clear_ptes+0x55e/0x770 [ 610.907599][ T24] usb 5-1: USB disconnect, device number 105 [ 610.909308][T14726] vms_complete_munmap_vmas+0x1ca/0x970 [ 610.973377][ T5848] usb 2-1: USB disconnect, device number 98 [ 610.977970][T14726] do_vmi_align_munmap+0x43b/0x7d0 [ 611.033797][T14726] do_vmi_munmap+0x204/0x3e0 [ 611.038395][T14726] __vm_munmap+0x19a/0x390 [ 611.042820][T14726] __x64_sys_munmap+0x59/0x80 [ 611.047500][T14726] do_syscall_64+0xcd/0x4e0 [ 611.052011][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.057897][T14726] [ 611.060204][T14726] Memory state around the buggy address: [ 611.065822][T14726] ffff88804d7e3780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 611.073872][T14726] ffff88804d7e3800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 611.081952][T14726] >ffff88804d7e3880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 611.090000][T14726] ^ [ 611.095101][T14726] ffff88804d7e3900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 611.103152][T14726] ffff88804d7e3980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 611.111201][T14726] ================================================================== [ 611.131987][ T6347] mvusb_mdio 4-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 611.140626][T14726] ================================================================== [ 611.140648][T14726] BUG: KASAN: use-after-free in hpfs_get_ea+0xb64/0xc90 [ 611.140705][T14726] Read of size 1 at addr ffff88804d7e38a5 by task syz.2.3832/14726 [ 611.163522][T14726] [ 611.165859][T14726] CPU: 1 UID: 0 PID: 14726 Comm: syz.2.3832 Tainted: G B syzkaller #0 PREEMPT(full) [ 611.165919][T14726] Tainted: [B]=BAD_PAGE [ 611.165933][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 611.165957][T14726] Call Trace: [ 611.165970][T14726] [ 611.165984][T14726] dump_stack_lvl+0x116/0x1f0 [ 611.166045][T14726] print_report+0xcd/0x630 [ 611.166081][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.166128][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.166174][T14726] ? __phys_addr+0xe8/0x180 [ 611.166227][T14726] ? hpfs_get_ea+0xb64/0xc90 [ 611.166273][T14726] kasan_report+0xe0/0x110 [ 611.166309][T14726] ? hpfs_get_ea+0xb64/0xc90 [ 611.166361][T14726] hpfs_get_ea+0xb64/0xc90 [ 611.166410][T14726] ? __pfx_hpfs_get_ea+0x10/0x10 [ 611.166457][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.166503][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.166547][T14726] ? find_held_lock+0x2b/0x80 [ 611.166594][T14726] ? __pfx___might_resched+0x10/0x10 [ 611.166641][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.166698][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.166743][T14726] ? bdev_getblk+0x7c/0xe0 [ 611.166791][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.166836][T14726] ? __bread_gfp+0xbe/0x3c0 [ 611.166883][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.166935][T14726] ? hpfs_map_sector+0x1a8/0x390 [ 611.166974][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.167019][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 611.167061][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.167106][T14726] ? hpfs_map_fnode+0x4bf/0x770 [ 611.167162][T14726] hpfs_read_inode+0x69e/0x1270 [ 611.167212][T14726] ? rcu_is_watching+0x12/0xc0 [ 611.167260][T14726] ? __pfx_hpfs_read_inode+0x10/0x10 [ 611.167311][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.167357][T14726] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 611.167402][T14726] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 611.167446][T14726] ? __pfx_hpfs_load_code_page+0x10/0x10 [ 611.167507][T14726] hpfs_fill_super+0x13e9/0x2230 [ 611.167549][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 611.167584][T14726] ? __pfx_snprintf+0x10/0x10 [ 611.167643][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 611.167682][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.167727][T14726] ? find_held_lock+0x2b/0x80 [ 611.167771][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.167816][T14726] ? set_blocksize+0x406/0x500 [ 611.167862][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.167913][T14726] ? sb_set_blocksize+0x176/0x1d0 [ 611.167955][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.168000][T14726] ? setup_bdev_super+0x369/0x730 [ 611.168055][T14726] get_tree_bdev_flags+0x38c/0x620 [ 611.168114][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 611.168148][T14726] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 611.168208][T14726] ? apparmor_capable+0x114/0x1d0 [ 611.168251][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.168295][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.168340][T14726] ? security_capable+0x7e/0x260 [ 611.168379][T14726] vfs_get_tree+0x8e/0x340 [ 611.168429][T14726] path_mount+0x1513/0x2000 [ 611.168473][T14726] ? __pfx_path_mount+0x10/0x10 [ 611.168514][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.168560][T14726] ? kmem_cache_free+0x2d1/0x4d0 [ 611.168615][T14726] ? putname+0x154/0x1a0 [ 611.168659][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.168704][T14726] ? putname+0x154/0x1a0 [ 611.168748][T14726] ? __x64_sys_mount+0x28d/0x310 [ 611.168788][T14726] __x64_sys_mount+0x28d/0x310 [ 611.168831][T14726] ? __pfx___x64_sys_mount+0x10/0x10 [ 611.168872][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.168931][T14726] do_syscall_64+0xcd/0x4e0 [ 611.168992][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.169030][T14726] RIP: 0033:0x7f6954b9034a [ 611.169058][T14726] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.169097][T14726] RSP: 002b:00007f69559b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 611.169132][T14726] RAX: ffffffffffffffda RBX: 00007f69559b6ef0 RCX: 00007f6954b9034a [ 611.169158][T14726] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f69559b6eb0 [ 611.169184][T14726] RBP: 000020000000a000 R08: 00007f69559b6ef0 R09: 0000000003200041 [ 611.169208][T14726] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 611.169233][T14726] R13: 00007f69559b6eb0 R14: 0000000000009e15 R15: 0000200000000040 [ 611.169269][T14726] [ 611.169282][T14726] [ 611.609135][T14726] The buggy address belongs to the physical page: [ 611.615538][T14726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f098cb3a pfn:0x4d7e3 [ 611.624997][T14726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 611.632117][T14726] raw: 00fff00000000000 ffffea000135f908 ffffea000135f888 0000000000000000 [ 611.640885][T14726] raw: 00000007f098cb3a 0000000000000000 00000000ffffffff 0000000000000000 [ 611.649473][T14726] page dumped because: kasan: bad access detected [ 611.655875][T14726] page_owner tracks the page as freed [ 611.661230][T14726] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 14702, tgid 14701 (syz.3.3820), ts 607138110947, free_ts 607211234167 [ 611.680082][T14726] post_alloc_hook+0x1c0/0x230 [ 611.684868][T14726] get_page_from_freelist+0x132b/0x38e0 [ 611.690438][T14726] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 611.696357][T14726] alloc_pages_mpol+0x1fb/0x550 [ 611.701206][T14726] folio_alloc_mpol_noprof+0x36/0x2f0 [ 611.706582][T14726] vma_alloc_folio_noprof+0xed/0x1e0 [ 611.711888][T14726] do_pte_missing+0x2230/0x3ba0 [ 611.716761][T14726] __handle_mm_fault+0x152a/0x2a50 [ 611.721888][T14726] handle_mm_fault+0x589/0xd10 [ 611.726670][T14726] do_user_addr_fault+0x60c/0x1370 [ 611.731785][T14726] exc_page_fault+0x5c/0xb0 [ 611.736305][T14726] asm_exc_page_fault+0x26/0x30 [ 611.741158][T14726] page last free pid 14702 tgid 14701 stack trace: [ 611.747645][T14726] free_unref_folios+0xa61/0x16b0 [ 611.752687][T14726] folios_put_refs+0x56f/0x740 [ 611.757449][T14726] free_pages_and_swap_cache+0x3f0/0x4a0 [ 611.763097][T14726] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 611.769092][T14726] tlb_finish_mmu+0x168/0x7c0 [ 611.773780][T14726] vms_clear_ptes+0x55e/0x770 [ 611.778471][T14726] vms_complete_munmap_vmas+0x1ca/0x970 [ 611.784032][T14726] do_vmi_align_munmap+0x43b/0x7d0 [ 611.789165][T14726] do_vmi_munmap+0x204/0x3e0 [ 611.793767][T14726] __vm_munmap+0x19a/0x390 [ 611.798203][T14726] __x64_sys_munmap+0x59/0x80 [ 611.802887][T14726] do_syscall_64+0xcd/0x4e0 [ 611.807419][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.813313][T14726] [ 611.815624][T14726] Memory state around the buggy address: [ 611.821243][T14726] ffff88804d7e3780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 611.829394][T14726] ffff88804d7e3800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 611.837451][T14726] >ffff88804d7e3880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 611.845508][T14726] ^ [ 611.850606][T14726] ffff88804d7e3900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 611.858662][T14726] ffff88804d7e3980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 611.866719][T14726] ================================================================== [ 611.888788][T14726] hpfs: hpfs_map_sector(): read error [ 611.894471][T14726] ================================================================== [ 611.902531][T14726] BUG: KASAN: use-after-free in strcmp+0xa7/0xb0 [ 611.908960][T14726] Read of size 1 at addr ffff88804d7e38a6 by task syz.2.3832/14726 [ 611.916857][T14726] [ 611.919281][T14726] CPU: 1 UID: 0 PID: 14726 Comm: syz.2.3832 Tainted: G B syzkaller #0 PREEMPT(full) [ 611.919337][T14726] Tainted: [B]=BAD_PAGE [ 611.919351][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 611.919375][T14726] Call Trace: [ 611.919388][T14726] [ 611.919403][T14726] dump_stack_lvl+0x116/0x1f0 [ 611.919463][T14726] print_report+0xcd/0x630 [ 611.919498][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.919544][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.919589][T14726] ? __phys_addr+0xe8/0x180 [ 611.919643][T14726] ? strcmp+0xa7/0xb0 [ 611.919673][T14726] kasan_report+0xe0/0x110 [ 611.919709][T14726] ? strcmp+0xa7/0xb0 [ 611.919746][T14726] strcmp+0xa7/0xb0 [ 611.919779][T14726] hpfs_get_ea+0x1f9/0xc90 [ 611.919830][T14726] ? __pfx_hpfs_get_ea+0x10/0x10 [ 611.919896][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.919947][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 611.919991][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.920037][T14726] ? hpfs_map_fnode+0x4bf/0x770 [ 611.920094][T14726] hpfs_read_inode+0x711/0x1270 [ 611.920144][T14726] ? rcu_is_watching+0x12/0xc0 [ 611.920192][T14726] ? __pfx_hpfs_read_inode+0x10/0x10 [ 611.920243][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.920290][T14726] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 611.920335][T14726] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 611.920381][T14726] ? __pfx_hpfs_load_code_page+0x10/0x10 [ 611.920443][T14726] hpfs_fill_super+0x13e9/0x2230 [ 611.920484][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 611.920524][T14726] ? __pfx_snprintf+0x10/0x10 [ 611.920583][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 611.920624][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.920669][T14726] ? find_held_lock+0x2b/0x80 [ 611.920713][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.920759][T14726] ? set_blocksize+0x406/0x500 [ 611.920805][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.920855][T14726] ? sb_set_blocksize+0x176/0x1d0 [ 611.920897][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.920953][T14726] ? setup_bdev_super+0x369/0x730 [ 611.921009][T14726] get_tree_bdev_flags+0x38c/0x620 [ 611.921072][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 611.921107][T14726] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 611.921169][T14726] ? apparmor_capable+0x114/0x1d0 [ 611.921214][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.921263][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.921312][T14726] ? security_capable+0x7e/0x260 [ 611.921354][T14726] vfs_get_tree+0x8e/0x340 [ 611.921407][T14726] path_mount+0x1513/0x2000 [ 611.921455][T14726] ? __pfx_path_mount+0x10/0x10 [ 611.921501][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.921548][T14726] ? kmem_cache_free+0x2d1/0x4d0 [ 611.921609][T14726] ? putname+0x154/0x1a0 [ 611.921657][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.921707][T14726] ? putname+0x154/0x1a0 [ 611.921753][T14726] ? __x64_sys_mount+0x28d/0x310 [ 611.921797][T14726] __x64_sys_mount+0x28d/0x310 [ 611.921846][T14726] ? __pfx___x64_sys_mount+0x10/0x10 [ 611.921893][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.921960][T14726] do_syscall_64+0xcd/0x4e0 [ 611.922030][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.922073][T14726] RIP: 0033:0x7f6954b9034a [ 611.922104][T14726] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.922147][T14726] RSP: 002b:00007f69559b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 611.922186][T14726] RAX: ffffffffffffffda RBX: 00007f69559b6ef0 RCX: 00007f6954b9034a [ 611.922215][T14726] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f69559b6eb0 [ 611.922244][T14726] RBP: 000020000000a000 R08: 00007f69559b6ef0 R09: 0000000003200041 [ 611.922273][T14726] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 611.922301][T14726] R13: 00007f69559b6eb0 R14: 0000000000009e15 R15: 0000200000000040 [ 611.922341][T14726] [ 611.922355][T14726] [ 611.927962][T12215] usb 4-1: USB disconnect, device number 102 [ 611.933271][T14726] The buggy address belongs to the physical page: [ 611.933290][T14726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f098cb3a pfn:0x4d7e3 [ 611.933331][T14726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 612.336165][T14726] raw: 00fff00000000000 ffffea000135f908 ffffea000135f888 0000000000000000 [ 612.344758][T14726] raw: 00000007f098cb3a 0000000000000000 00000000ffffffff 0000000000000000 [ 612.353337][T14726] page dumped because: kasan: bad access detected [ 612.359737][T14726] page_owner tracks the page as freed [ 612.365092][T14726] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 14702, tgid 14701 (syz.3.3820), ts 607138110947, free_ts 607211234167 [ 612.383952][T14726] post_alloc_hook+0x1c0/0x230 [ 612.388741][T14726] get_page_from_freelist+0x132b/0x38e0 [ 612.394306][T14726] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 612.400567][T14726] alloc_pages_mpol+0x1fb/0x550 [ 612.405426][T14726] folio_alloc_mpol_noprof+0x36/0x2f0 [ 612.410802][T14726] vma_alloc_folio_noprof+0xed/0x1e0 [ 612.416101][T14726] do_pte_missing+0x2230/0x3ba0 [ 612.420964][T14726] __handle_mm_fault+0x152a/0x2a50 [ 612.426086][T14726] handle_mm_fault+0x589/0xd10 [ 612.430861][T14726] do_user_addr_fault+0x60c/0x1370 [ 612.435978][T14726] exc_page_fault+0x5c/0xb0 [ 612.440495][T14726] asm_exc_page_fault+0x26/0x30 [ 612.445345][T14726] page last free pid 14702 tgid 14701 stack trace: [ 612.451834][T14726] free_unref_folios+0xa61/0x16b0 [ 612.456877][T14726] folios_put_refs+0x56f/0x740 [ 612.461645][T14726] free_pages_and_swap_cache+0x3f0/0x4a0 [ 612.467289][T14726] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 612.473282][T14726] tlb_finish_mmu+0x168/0x7c0 [ 612.477968][T14726] vms_clear_ptes+0x55e/0x770 [ 612.482657][T14726] vms_complete_munmap_vmas+0x1ca/0x970 [ 612.488220][T14726] do_vmi_align_munmap+0x43b/0x7d0 [ 612.493346][T14726] do_vmi_munmap+0x204/0x3e0 [ 612.497949][T14726] __vm_munmap+0x19a/0x390 [ 612.502383][T14726] __x64_sys_munmap+0x59/0x80 [ 612.507064][T14726] do_syscall_64+0xcd/0x4e0 [ 612.511590][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.517490][T14726] [ 612.519806][T14726] Memory state around the buggy address: [ 612.525512][T14726] ffff88804d7e3780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 612.533569][T14726] ffff88804d7e3800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 612.541627][T14726] >ffff88804d7e3880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 612.549681][T14726] ^ [ 612.554780][T14726] ffff88804d7e3900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 612.562838][T14726] ffff88804d7e3980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 612.570889][T14726] ================================================================== [ 612.586758][T14726] ================================================================== [ 612.594840][T14726] BUG: KASAN: use-after-free in hpfs_get_ea+0xb51/0xc90 [ 612.601808][T14726] Read of size 1 at addr ffff88804d7e38a3 by task syz.2.3832/14726 [ 612.609696][T14726] [ 612.612017][T14726] CPU: 0 UID: 0 PID: 14726 Comm: syz.2.3832 Tainted: G B syzkaller #0 PREEMPT(full) [ 612.612069][T14726] Tainted: [B]=BAD_PAGE [ 612.612082][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 612.612105][T14726] Call Trace: [ 612.612116][T14726] [ 612.612133][T14726] dump_stack_lvl+0x116/0x1f0 [ 612.612214][T14726] print_report+0xcd/0x630 [ 612.612245][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.612290][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.612333][T14726] ? __phys_addr+0xe8/0x180 [ 612.612383][T14726] ? hpfs_get_ea+0xb51/0xc90 [ 612.612426][T14726] kasan_report+0xe0/0x110 [ 612.612459][T14726] ? hpfs_get_ea+0xb51/0xc90 [ 612.612508][T14726] hpfs_get_ea+0xb51/0xc90 [ 612.612556][T14726] ? __pfx_hpfs_get_ea+0x10/0x10 [ 612.612618][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.612666][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 612.612707][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.612751][T14726] ? hpfs_map_fnode+0x4bf/0x770 [ 612.612806][T14726] hpfs_read_inode+0x711/0x1270 [ 612.612854][T14726] ? rcu_is_watching+0x12/0xc0 [ 612.612900][T14726] ? __pfx_hpfs_read_inode+0x10/0x10 [ 612.612951][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.612994][T14726] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 612.613036][T14726] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 612.613080][T14726] ? __pfx_hpfs_load_code_page+0x10/0x10 [ 612.613138][T14726] hpfs_fill_super+0x13e9/0x2230 [ 612.613180][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 612.613213][T14726] ? __pfx_snprintf+0x10/0x10 [ 612.613283][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 612.613331][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.613375][T14726] ? find_held_lock+0x2b/0x80 [ 612.613417][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.613460][T14726] ? set_blocksize+0x406/0x500 [ 612.613502][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.613546][T14726] ? sb_set_blocksize+0x176/0x1d0 [ 612.613587][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.613630][T14726] ? setup_bdev_super+0x369/0x730 [ 612.613687][T14726] get_tree_bdev_flags+0x38c/0x620 [ 612.613743][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 612.613776][T14726] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 612.613835][T14726] ? apparmor_capable+0x114/0x1d0 [ 612.613876][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.613912][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.613946][T14726] ? security_capable+0x7e/0x260 [ 612.613975][T14726] vfs_get_tree+0x8e/0x340 [ 612.614012][T14726] path_mount+0x1513/0x2000 [ 612.614046][T14726] ? __pfx_path_mount+0x10/0x10 [ 612.614078][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.614111][T14726] ? kmem_cache_free+0x2d1/0x4d0 [ 612.614153][T14726] ? putname+0x154/0x1a0 [ 612.614186][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.614231][T14726] ? putname+0x154/0x1a0 [ 612.614266][T14726] ? __x64_sys_mount+0x28d/0x310 [ 612.614313][T14726] __x64_sys_mount+0x28d/0x310 [ 612.614344][T14726] ? __pfx___x64_sys_mount+0x10/0x10 [ 612.614375][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 612.614422][T14726] do_syscall_64+0xcd/0x4e0 [ 612.614495][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.614526][T14726] RIP: 0033:0x7f6954b9034a [ 612.614547][T14726] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.614578][T14726] RSP: 002b:00007f69559b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 612.614604][T14726] RAX: ffffffffffffffda RBX: 00007f69559b6ef0 RCX: 00007f6954b9034a [ 612.614625][T14726] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f69559b6eb0 [ 612.614646][T14726] RBP: 000020000000a000 R08: 00007f69559b6ef0 R09: 0000000003200041 [ 612.614670][T14726] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 612.614689][T14726] R13: 00007f69559b6eb0 R14: 0000000000009e15 R15: 0000200000000040 [ 612.614718][T14726] [ 612.614728][T14726] [ 612.996450][T14726] The buggy address belongs to the physical page: [ 613.002853][T14726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f098cb3a pfn:0x4d7e3 [ 613.012395][T14726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 613.019512][T14726] raw: 00fff00000000000 ffffea000135f908 ffffea000135f888 0000000000000000 [ 613.028096][T14726] raw: 00000007f098cb3a 0000000000000000 00000000ffffffff 0000000000000000 [ 613.036675][T14726] page dumped because: kasan: bad access detected [ 613.043246][T14726] page_owner tracks the page as freed [ 613.048605][T14726] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 14702, tgid 14701 (syz.3.3820), ts 607138110947, free_ts 607211234167 [ 613.067467][T14726] post_alloc_hook+0x1c0/0x230 [ 613.072263][T14726] get_page_from_freelist+0x132b/0x38e0 [ 613.077841][T14726] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 613.083759][T14726] alloc_pages_mpol+0x1fb/0x550 [ 613.088609][T14726] folio_alloc_mpol_noprof+0x36/0x2f0 [ 613.093992][T14726] vma_alloc_folio_noprof+0xed/0x1e0 [ 613.099283][T14726] do_pte_missing+0x2230/0x3ba0 [ 613.104146][T14726] __handle_mm_fault+0x152a/0x2a50 [ 613.109267][T14726] handle_mm_fault+0x589/0xd10 [ 613.114042][T14726] do_user_addr_fault+0x60c/0x1370 [ 613.119152][T14726] exc_page_fault+0x5c/0xb0 [ 613.123674][T14726] asm_exc_page_fault+0x26/0x30 [ 613.128526][T14726] page last free pid 14702 tgid 14701 stack trace: [ 613.135025][T14726] free_unref_folios+0xa61/0x16b0 [ 613.140065][T14726] folios_put_refs+0x56f/0x740 [ 613.144825][T14726] free_pages_and_swap_cache+0x3f0/0x4a0 [ 613.150472][T14726] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 613.156460][T14726] tlb_finish_mmu+0x168/0x7c0 [ 613.161146][T14726] vms_clear_ptes+0x55e/0x770 [ 613.165835][T14726] vms_complete_munmap_vmas+0x1ca/0x970 [ 613.171394][T14726] do_vmi_align_munmap+0x43b/0x7d0 [ 613.176532][T14726] do_vmi_munmap+0x204/0x3e0 [ 613.181140][T14726] __vm_munmap+0x19a/0x390 [ 613.185576][T14726] __x64_sys_munmap+0x59/0x80 [ 613.190254][T14726] do_syscall_64+0xcd/0x4e0 [ 613.194777][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.200676][T14726] [ 613.202985][T14726] Memory state around the buggy address: [ 613.208607][T14726] ffff88804d7e3780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 613.216668][T14726] ffff88804d7e3800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 613.224727][T14726] >ffff88804d7e3880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 613.232779][T14726] ^ [ 613.237877][T14726] ffff88804d7e3900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 613.245937][T14726] ffff88804d7e3980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 613.253988][T14726] ================================================================== [ 613.271603][T14726] ================================================================== [ 613.279675][T14726] BUG: KASAN: use-after-free in hpfs_get_ea+0xb42/0xc90 [ 613.286636][T14726] Read of size 1 at addr ffff88804d7e38a4 by task syz.2.3832/14726 [ 613.294526][T14726] [ 613.296853][T14726] CPU: 1 UID: 0 PID: 14726 Comm: syz.2.3832 Tainted: G B syzkaller #0 PREEMPT(full) [ 613.296902][T14726] Tainted: [B]=BAD_PAGE [ 613.296920][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 613.296942][T14726] Call Trace: [ 613.296954][T14726] [ 613.296966][T14726] dump_stack_lvl+0x116/0x1f0 [ 613.297021][T14726] print_report+0xcd/0x630 [ 613.297051][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.297092][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.297133][T14726] ? __phys_addr+0xe8/0x180 [ 613.297181][T14726] ? hpfs_get_ea+0xb42/0xc90 [ 613.297222][T14726] kasan_report+0xe0/0x110 [ 613.297254][T14726] ? hpfs_get_ea+0xb42/0xc90 [ 613.297300][T14726] hpfs_get_ea+0xb42/0xc90 [ 613.297345][T14726] ? __pfx_hpfs_get_ea+0x10/0x10 [ 613.297403][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.297443][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 613.297484][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.297524][T14726] ? hpfs_map_fnode+0x4bf/0x770 [ 613.297575][T14726] hpfs_read_inode+0x711/0x1270 [ 613.297620][T14726] ? rcu_is_watching+0x12/0xc0 [ 613.297664][T14726] ? __pfx_hpfs_read_inode+0x10/0x10 [ 613.297710][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.297751][T14726] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 613.297792][T14726] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 613.297833][T14726] ? __pfx_hpfs_load_code_page+0x10/0x10 [ 613.297889][T14726] hpfs_fill_super+0x13e9/0x2230 [ 613.297931][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 613.297963][T14726] ? __pfx_snprintf+0x10/0x10 [ 613.298014][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 613.298049][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.298089][T14726] ? find_held_lock+0x2b/0x80 [ 613.298130][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.298171][T14726] ? set_blocksize+0x406/0x500 [ 613.298213][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.298253][T14726] ? sb_set_blocksize+0x176/0x1d0 [ 613.298291][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.298331][T14726] ? setup_bdev_super+0x369/0x730 [ 613.298382][T14726] get_tree_bdev_flags+0x38c/0x620 [ 613.298436][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 613.298469][T14726] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 613.298532][T14726] ? apparmor_capable+0x114/0x1d0 [ 613.298571][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.298611][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.298652][T14726] ? security_capable+0x7e/0x260 [ 613.298688][T14726] vfs_get_tree+0x8e/0x340 [ 613.298732][T14726] path_mount+0x1513/0x2000 [ 613.298772][T14726] ? __pfx_path_mount+0x10/0x10 [ 613.298809][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.298851][T14726] ? kmem_cache_free+0x2d1/0x4d0 [ 613.298901][T14726] ? putname+0x154/0x1a0 [ 613.298945][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.298985][T14726] ? putname+0x154/0x1a0 [ 613.299024][T14726] ? __x64_sys_mount+0x28d/0x310 [ 613.299060][T14726] __x64_sys_mount+0x28d/0x310 [ 613.299098][T14726] ? __pfx___x64_sys_mount+0x10/0x10 [ 613.299136][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.299183][T14726] do_syscall_64+0xcd/0x4e0 [ 613.299239][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.299273][T14726] RIP: 0033:0x7f6954b9034a [ 613.299299][T14726] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.299333][T14726] RSP: 002b:00007f69559b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 613.299365][T14726] RAX: ffffffffffffffda RBX: 00007f69559b6ef0 RCX: 00007f6954b9034a [ 613.299388][T14726] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f69559b6eb0 [ 613.299411][T14726] RBP: 000020000000a000 R08: 00007f69559b6ef0 R09: 0000000003200041 [ 613.299434][T14726] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 613.299456][T14726] R13: 00007f69559b6eb0 R14: 0000000000009e15 R15: 0000200000000040 [ 613.299489][T14726] [ 613.299501][T14726] [ 613.681768][T14726] The buggy address belongs to the physical page: [ 613.688171][T14726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f098cb3a pfn:0x4d7e3 [ 613.697626][T14726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 613.704759][T14726] raw: 00fff00000000000 ffffea000135f908 ffffea000135f888 0000000000000000 [ 613.713346][T14726] raw: 00000007f098cb3a 0000000000000000 00000000ffffffff 0000000000000000 [ 613.721919][T14726] page dumped because: kasan: bad access detected [ 613.728319][T14726] page_owner tracks the page as freed [ 613.733677][T14726] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 14702, tgid 14701 (syz.3.3820), ts 607138110947, free_ts 607211234167 [ 613.752528][T14726] post_alloc_hook+0x1c0/0x230 [ 613.757311][T14726] get_page_from_freelist+0x132b/0x38e0 [ 613.762876][T14726] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 613.768789][T14726] alloc_pages_mpol+0x1fb/0x550 [ 613.773638][T14726] folio_alloc_mpol_noprof+0x36/0x2f0 [ 613.779016][T14726] vma_alloc_folio_noprof+0xed/0x1e0 [ 613.784306][T14726] do_pte_missing+0x2230/0x3ba0 [ 613.789167][T14726] __handle_mm_fault+0x152a/0x2a50 [ 613.794290][T14726] handle_mm_fault+0x589/0xd10 [ 613.799063][T14726] do_user_addr_fault+0x60c/0x1370 [ 613.804176][T14726] exc_page_fault+0x5c/0xb0 [ 613.808697][T14726] asm_exc_page_fault+0x26/0x30 [ 613.813549][T14726] page last free pid 14702 tgid 14701 stack trace: [ 613.820037][T14726] free_unref_folios+0xa61/0x16b0 [ 613.825078][T14726] folios_put_refs+0x56f/0x740 [ 613.829852][T14726] free_pages_and_swap_cache+0x3f0/0x4a0 [ 613.835512][T14726] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 613.841507][T14726] tlb_finish_mmu+0x168/0x7c0 [ 613.846197][T14726] vms_clear_ptes+0x55e/0x770 [ 613.850887][T14726] vms_complete_munmap_vmas+0x1ca/0x970 [ 613.856450][T14726] do_vmi_align_munmap+0x43b/0x7d0 [ 613.861577][T14726] do_vmi_munmap+0x204/0x3e0 [ 613.866192][T14726] __vm_munmap+0x19a/0x390 [ 613.870631][T14726] __x64_sys_munmap+0x59/0x80 [ 613.875321][T14726] do_syscall_64+0xcd/0x4e0 [ 613.879866][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.885937][T14726] [ 613.888245][T14726] Memory state around the buggy address: [ 613.893864][T14726] ffff88804d7e3780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 613.901925][T14726] ffff88804d7e3800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 613.909986][T14726] >ffff88804d7e3880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 613.918044][T14726] ^ [ 613.923149][T14726] ffff88804d7e3900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 613.931206][T14726] ffff88804d7e3980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 613.939266][T14726] ================================================================== [ 613.962206][T14726] ================================================================== [ 613.970276][T14726] BUG: KASAN: use-after-free in hpfs_get_ea+0xb64/0xc90 [ 613.977241][T14726] Read of size 1 at addr ffff88804d7e38a5 by task syz.2.3832/14726 [ 613.985137][T14726] [ 613.987460][T14726] CPU: 0 UID: 0 PID: 14726 Comm: syz.2.3832 Tainted: G B syzkaller #0 PREEMPT(full) [ 613.987509][T14726] Tainted: [B]=BAD_PAGE [ 613.987521][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 613.987543][T14726] Call Trace: [ 613.987554][T14726] [ 613.987567][T14726] dump_stack_lvl+0x116/0x1f0 [ 613.987621][T14726] print_report+0xcd/0x630 [ 613.987651][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.987697][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.987737][T14726] ? __phys_addr+0xe8/0x180 [ 613.987784][T14726] ? hpfs_get_ea+0xb64/0xc90 [ 613.987826][T14726] kasan_report+0xe0/0x110 [ 613.987857][T14726] ? hpfs_get_ea+0xb64/0xc90 [ 613.987903][T14726] hpfs_get_ea+0xb64/0xc90 [ 613.987948][T14726] ? __pfx_hpfs_get_ea+0x10/0x10 [ 613.988006][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.988046][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 613.988085][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.988125][T14726] ? hpfs_map_fnode+0x4bf/0x770 [ 613.988175][T14726] hpfs_read_inode+0x711/0x1270 [ 613.988220][T14726] ? rcu_is_watching+0x12/0xc0 [ 613.988264][T14726] ? __pfx_hpfs_read_inode+0x10/0x10 [ 613.988309][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.988349][T14726] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 613.988389][T14726] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 613.988429][T14726] ? __pfx_hpfs_load_code_page+0x10/0x10 [ 613.988483][T14726] hpfs_fill_super+0x13e9/0x2230 [ 613.988521][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 613.988552][T14726] ? __pfx_snprintf+0x10/0x10 [ 613.988602][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 613.988637][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.988681][T14726] ? find_held_lock+0x2b/0x80 [ 613.988721][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.988762][T14726] ? set_blocksize+0x406/0x500 [ 613.988803][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.988843][T14726] ? sb_set_blocksize+0x176/0x1d0 [ 613.988881][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.988921][T14726] ? setup_bdev_super+0x369/0x730 [ 613.988971][T14726] get_tree_bdev_flags+0x38c/0x620 [ 613.989023][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 613.989055][T14726] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 613.989109][T14726] ? apparmor_capable+0x114/0x1d0 [ 613.989147][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.989187][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.989228][T14726] ? security_capable+0x7e/0x260 [ 613.989262][T14726] vfs_get_tree+0x8e/0x340 [ 613.989306][T14726] path_mount+0x1513/0x2000 [ 613.989345][T14726] ? __pfx_path_mount+0x10/0x10 [ 613.989383][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.989423][T14726] ? kmem_cache_free+0x2d1/0x4d0 [ 613.989471][T14726] ? putname+0x154/0x1a0 [ 613.989510][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.989550][T14726] ? putname+0x154/0x1a0 [ 613.989588][T14726] ? __x64_sys_mount+0x28d/0x310 [ 613.989624][T14726] __x64_sys_mount+0x28d/0x310 [ 613.989665][T14726] ? __pfx___x64_sys_mount+0x10/0x10 [ 613.989702][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.989749][T14726] do_syscall_64+0xcd/0x4e0 [ 613.989803][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.989838][T14726] RIP: 0033:0x7f6954b9034a [ 613.989863][T14726] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.989897][T14726] RSP: 002b:00007f69559b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 613.989928][T14726] RAX: ffffffffffffffda RBX: 00007f69559b6ef0 RCX: 00007f6954b9034a [ 613.989952][T14726] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f69559b6eb0 [ 613.989975][T14726] RBP: 000020000000a000 R08: 00007f69559b6ef0 R09: 0000000003200041 [ 613.989997][T14726] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 613.990020][T14726] R13: 00007f69559b6eb0 R14: 0000000000009e15 R15: 0000200000000040 [ 613.990053][T14726] [ 613.990064][T14726] [ 614.372240][T14726] The buggy address belongs to the physical page: [ 614.378644][T14726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f098cb3a pfn:0x4d7e3 [ 614.388140][T14726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 614.395260][T14726] raw: 00fff00000000000 ffffea000135f908 ffffea000135f888 0000000000000000 [ 614.403847][T14726] raw: 00000007f098cb3a 0000000000000000 00000000ffffffff 0000000000000000 [ 614.412506][T14726] page dumped because: kasan: bad access detected [ 614.418904][T14726] page_owner tracks the page as freed [ 614.424254][T14726] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 14702, tgid 14701 (syz.3.3820), ts 607138110947, free_ts 607211234167 [ 614.443105][T14726] post_alloc_hook+0x1c0/0x230 [ 614.447892][T14726] get_page_from_freelist+0x132b/0x38e0 [ 614.453456][T14726] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 614.459367][T14726] alloc_pages_mpol+0x1fb/0x550 [ 614.464214][T14726] folio_alloc_mpol_noprof+0x36/0x2f0 [ 614.469590][T14726] vma_alloc_folio_noprof+0xed/0x1e0 [ 614.474878][T14726] do_pte_missing+0x2230/0x3ba0 [ 614.479742][T14726] __handle_mm_fault+0x152a/0x2a50 [ 614.484862][T14726] handle_mm_fault+0x589/0xd10 [ 614.489636][T14726] do_user_addr_fault+0x60c/0x1370 [ 614.494752][T14726] exc_page_fault+0x5c/0xb0 [ 614.499268][T14726] asm_exc_page_fault+0x26/0x30 [ 614.504123][T14726] page last free pid 14702 tgid 14701 stack trace: [ 614.510609][T14726] free_unref_folios+0xa61/0x16b0 [ 614.515656][T14726] folios_put_refs+0x56f/0x740 [ 614.520421][T14726] free_pages_and_swap_cache+0x3f0/0x4a0 [ 614.526070][T14726] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 614.532062][T14726] tlb_finish_mmu+0x168/0x7c0 [ 614.536836][T14726] vms_clear_ptes+0x55e/0x770 [ 614.541526][T14726] vms_complete_munmap_vmas+0x1ca/0x970 [ 614.547174][T14726] do_vmi_align_munmap+0x43b/0x7d0 [ 614.552300][T14726] do_vmi_munmap+0x204/0x3e0 [ 614.556904][T14726] __vm_munmap+0x19a/0x390 [ 614.561337][T14726] __x64_sys_munmap+0x59/0x80 [ 614.566018][T14726] do_syscall_64+0xcd/0x4e0 [ 614.570542][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.576434][T14726] [ 614.578742][T14726] Memory state around the buggy address: [ 614.584361][T14726] ffff88804d7e3780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 614.592503][T14726] ffff88804d7e3800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 614.600560][T14726] >ffff88804d7e3880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 614.608795][T14726] ^ [ 614.614417][T14726] ffff88804d7e3900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 614.622573][T14726] ffff88804d7e3980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 614.630623][T14726] ================================================================== [ 614.714801][T14726] hpfs: hpfs_map_sector(): read error [ 614.720216][T14726] ================================================================== [ 614.728284][T14726] BUG: KASAN: use-after-free in strcmp+0xa7/0xb0 [ 614.734614][T14726] Read of size 1 at addr ffff88804d7e38a6 by task syz.2.3832/14726 [ 614.742493][T14726] [ 614.744813][T14726] CPU: 1 UID: 0 PID: 14726 Comm: syz.2.3832 Tainted: G B syzkaller #0 PREEMPT(full) [ 614.744853][T14726] Tainted: [B]=BAD_PAGE [ 614.744864][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 614.744882][T14726] Call Trace: [ 614.744891][T14726] [ 614.744902][T14726] dump_stack_lvl+0x116/0x1f0 [ 614.744952][T14726] print_report+0xcd/0x630 [ 614.744978][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.745012][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.745045][T14726] ? __phys_addr+0xe8/0x180 [ 614.745085][T14726] ? strcmp+0xa7/0xb0 [ 614.745107][T14726] kasan_report+0xe0/0x110 [ 614.745134][T14726] ? strcmp+0xa7/0xb0 [ 614.745161][T14726] strcmp+0xa7/0xb0 [ 614.745186][T14726] hpfs_get_ea+0x1f9/0xc90 [ 614.745234][T14726] ? __pfx_hpfs_get_ea+0x10/0x10 [ 614.745294][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.745328][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 614.745361][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.745395][T14726] ? hpfs_map_fnode+0x4bf/0x770 [ 614.745437][T14726] hpfs_read_inode+0x784/0x1270 [ 614.745475][T14726] ? rcu_is_watching+0x12/0xc0 [ 614.745511][T14726] ? __pfx_hpfs_read_inode+0x10/0x10 [ 614.745558][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.745601][T14726] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 614.745634][T14726] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 614.745669][T14726] ? __pfx_hpfs_load_code_page+0x10/0x10 [ 614.745715][T14726] hpfs_fill_super+0x13e9/0x2230 [ 614.745747][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 614.745772][T14726] ? __pfx_snprintf+0x10/0x10 [ 614.745814][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 614.745843][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.745876][T14726] ? find_held_lock+0x2b/0x80 [ 614.745914][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.745948][T14726] ? set_blocksize+0x406/0x500 [ 614.745982][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.746016][T14726] ? sb_set_blocksize+0x176/0x1d0 [ 614.746047][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.746081][T14726] ? setup_bdev_super+0x369/0x730 [ 614.746122][T14726] get_tree_bdev_flags+0x38c/0x620 [ 614.746165][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 614.746192][T14726] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 614.746237][T14726] ? apparmor_capable+0x114/0x1d0 [ 614.746269][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.746302][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.746342][T14726] ? security_capable+0x7e/0x260 [ 614.746382][T14726] vfs_get_tree+0x8e/0x340 [ 614.746421][T14726] path_mount+0x1513/0x2000 [ 614.746455][T14726] ? __pfx_path_mount+0x10/0x10 [ 614.746486][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.746520][T14726] ? kmem_cache_free+0x2d1/0x4d0 [ 614.746561][T14726] ? putname+0x154/0x1a0 [ 614.746594][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.746627][T14726] ? putname+0x154/0x1a0 [ 614.746660][T14726] ? __x64_sys_mount+0x28d/0x310 [ 614.746698][T14726] __x64_sys_mount+0x28d/0x310 [ 614.746740][T14726] ? __pfx___x64_sys_mount+0x10/0x10 [ 614.746771][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 614.746810][T14726] do_syscall_64+0xcd/0x4e0 [ 614.746855][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.746884][T14726] RIP: 0033:0x7f6954b9034a [ 614.746905][T14726] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.746938][T14726] RSP: 002b:00007f69559b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 614.746964][T14726] RAX: ffffffffffffffda RBX: 00007f69559b6ef0 RCX: 00007f6954b9034a [ 614.746984][T14726] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f69559b6eb0 [ 614.747002][T14726] RBP: 000020000000a000 R08: 00007f69559b6ef0 R09: 0000000003200041 [ 614.747021][T14726] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 614.747040][T14726] R13: 00007f69559b6eb0 R14: 0000000000009e15 R15: 0000200000000040 [ 614.747067][T14726] [ 614.747077][T14726] [ 615.132898][T14726] The buggy address belongs to the physical page: [ 615.139303][T14726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f098cb3a pfn:0x4d7e3 [ 615.148880][T14726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 615.156007][T14726] raw: 00fff00000000000 ffffea000135f908 ffffea000135f888 0000000000000000 [ 615.164608][T14726] raw: 00000007f098cb3a 0000000000000000 00000000ffffffff 0000000000000000 [ 615.173184][T14726] page dumped because: kasan: bad access detected [ 615.179601][T14726] page_owner tracks the page as freed [ 615.184970][T14726] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 14702, tgid 14701 (syz.3.3820), ts 607138110947, free_ts 607211234167 [ 615.203830][T14726] post_alloc_hook+0x1c0/0x230 [ 615.208617][T14726] get_page_from_freelist+0x132b/0x38e0 [ 615.214186][T14726] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 615.220101][T14726] alloc_pages_mpol+0x1fb/0x550 [ 615.224954][T14726] folio_alloc_mpol_noprof+0x36/0x2f0 [ 615.230333][T14726] vma_alloc_folio_noprof+0xed/0x1e0 [ 615.235626][T14726] do_pte_missing+0x2230/0x3ba0 [ 615.240514][T14726] __handle_mm_fault+0x152a/0x2a50 [ 615.245637][T14726] handle_mm_fault+0x589/0xd10 [ 615.250424][T14726] do_user_addr_fault+0x60c/0x1370 [ 615.255541][T14726] exc_page_fault+0x5c/0xb0 [ 615.260064][T14726] asm_exc_page_fault+0x26/0x30 [ 615.264916][T14726] page last free pid 14702 tgid 14701 stack trace: [ 615.271405][T14726] free_unref_folios+0xa61/0x16b0 [ 615.276449][T14726] folios_put_refs+0x56f/0x740 [ 615.281215][T14726] free_pages_and_swap_cache+0x3f0/0x4a0 [ 615.286864][T14726] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 615.292854][T14726] tlb_finish_mmu+0x168/0x7c0 [ 615.297543][T14726] vms_clear_ptes+0x55e/0x770 [ 615.302233][T14726] vms_complete_munmap_vmas+0x1ca/0x970 [ 615.307841][T14726] do_vmi_align_munmap+0x43b/0x7d0 [ 615.312969][T14726] do_vmi_munmap+0x204/0x3e0 [ 615.317578][T14726] __vm_munmap+0x19a/0x390 [ 615.322023][T14726] __x64_sys_munmap+0x59/0x80 [ 615.326707][T14726] do_syscall_64+0xcd/0x4e0 [ 615.331232][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.337128][T14726] [ 615.339436][T14726] Memory state around the buggy address: [ 615.345064][T14726] ffff88804d7e3780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 615.353122][T14726] ffff88804d7e3800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 615.361182][T14726] >ffff88804d7e3880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 615.369246][T14726] ^ [ 615.374352][T14726] ffff88804d7e3900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 615.382410][T14726] ffff88804d7e3980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 615.390460][T14726] ================================================================== [ 615.411104][T14726] ================================================================== [ 615.419176][T14726] BUG: KASAN: use-after-free in hpfs_get_ea+0xb51/0xc90 [ 615.426139][T14726] Read of size 1 at addr ffff88804d7e38a3 by task syz.2.3832/14726 [ 615.434017][T14726] [ 615.436329][T14726] CPU: 0 UID: 0 PID: 14726 Comm: syz.2.3832 Tainted: G B syzkaller #0 PREEMPT(full) [ 615.436370][T14726] Tainted: [B]=BAD_PAGE [ 615.436381][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 615.436399][T14726] Call Trace: [ 615.436408][T14726] [ 615.436419][T14726] dump_stack_lvl+0x116/0x1f0 [ 615.436465][T14726] print_report+0xcd/0x630 [ 615.436490][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.436524][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.436558][T14726] ? __phys_addr+0xe8/0x180 [ 615.436601][T14726] ? hpfs_get_ea+0xb51/0xc90 [ 615.436645][T14726] kasan_report+0xe0/0x110 [ 615.436679][T14726] ? hpfs_get_ea+0xb51/0xc90 [ 615.436722][T14726] hpfs_get_ea+0xb51/0xc90 [ 615.436759][T14726] ? __pfx_hpfs_get_ea+0x10/0x10 [ 615.436807][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.436841][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 615.436874][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.436908][T14726] ? hpfs_map_fnode+0x4bf/0x770 [ 615.436957][T14726] hpfs_read_inode+0x784/0x1270 [ 615.436994][T14726] ? rcu_is_watching+0x12/0xc0 [ 615.437031][T14726] ? __pfx_hpfs_read_inode+0x10/0x10 [ 615.437070][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.437103][T14726] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 615.437137][T14726] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 615.437170][T14726] ? __pfx_hpfs_load_code_page+0x10/0x10 [ 615.437216][T14726] hpfs_fill_super+0x13e9/0x2230 [ 615.437247][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 615.437273][T14726] ? __pfx_snprintf+0x10/0x10 [ 615.437316][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 615.437345][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.437379][T14726] ? find_held_lock+0x2b/0x80 [ 615.437412][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.437446][T14726] ? set_blocksize+0x406/0x500 [ 615.437480][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.437513][T14726] ? sb_set_blocksize+0x176/0x1d0 [ 615.437545][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.437579][T14726] ? setup_bdev_super+0x369/0x730 [ 615.437621][T14726] get_tree_bdev_flags+0x38c/0x620 [ 615.437664][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 615.437690][T14726] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 615.437735][T14726] ? apparmor_capable+0x114/0x1d0 [ 615.437767][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.437800][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.437834][T14726] ? security_capable+0x7e/0x260 [ 615.437863][T14726] vfs_get_tree+0x8e/0x340 [ 615.437899][T14726] path_mount+0x1513/0x2000 [ 615.437937][T14726] ? __pfx_path_mount+0x10/0x10 [ 615.437968][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.438001][T14726] ? kmem_cache_free+0x2d1/0x4d0 [ 615.438042][T14726] ? putname+0x154/0x1a0 [ 615.438074][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.438108][T14726] ? putname+0x154/0x1a0 [ 615.438140][T14726] ? __x64_sys_mount+0x28d/0x310 [ 615.438169][T14726] __x64_sys_mount+0x28d/0x310 [ 615.438200][T14726] ? __pfx___x64_sys_mount+0x10/0x10 [ 615.438231][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.438270][T14726] do_syscall_64+0xcd/0x4e0 [ 615.438315][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.438343][T14726] RIP: 0033:0x7f6954b9034a [ 615.438365][T14726] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.438393][T14726] RSP: 002b:00007f69559b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 615.438418][T14726] RAX: ffffffffffffffda RBX: 00007f69559b6ef0 RCX: 00007f6954b9034a [ 615.438438][T14726] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f69559b6eb0 [ 615.438457][T14726] RBP: 000020000000a000 R08: 00007f69559b6ef0 R09: 0000000003200041 [ 615.438476][T14726] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 615.438495][T14726] R13: 00007f69559b6eb0 R14: 0000000000009e15 R15: 0000200000000040 [ 615.438522][T14726] [ 615.438532][T14726] [ 615.820742][T14726] The buggy address belongs to the physical page: [ 615.827147][T14726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f098cb3a pfn:0x4d7e3 [ 615.836775][T14726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 615.843893][T14726] raw: 00fff00000000000 ffffea000135f908 ffffea000135f888 0000000000000000 [ 615.852483][T14726] raw: 00000007f098cb3a 0000000000000000 00000000ffffffff 0000000000000000 [ 615.861054][T14726] page dumped because: kasan: bad access detected [ 615.867454][T14726] page_owner tracks the page as freed [ 615.872808][T14726] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 14702, tgid 14701 (syz.3.3820), ts 607138110947, free_ts 607211234167 [ 615.891709][T14726] post_alloc_hook+0x1c0/0x230 [ 615.896499][T14726] get_page_from_freelist+0x132b/0x38e0 [ 615.902069][T14726] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 615.907984][T14726] alloc_pages_mpol+0x1fb/0x550 [ 615.912840][T14726] folio_alloc_mpol_noprof+0x36/0x2f0 [ 615.918254][T14726] vma_alloc_folio_noprof+0xed/0x1e0 [ 615.923550][T14726] do_pte_missing+0x2230/0x3ba0 [ 615.928415][T14726] __handle_mm_fault+0x152a/0x2a50 [ 615.933540][T14726] handle_mm_fault+0x589/0xd10 [ 615.938319][T14726] do_user_addr_fault+0x60c/0x1370 [ 615.943431][T14726] exc_page_fault+0x5c/0xb0 [ 615.947948][T14726] asm_exc_page_fault+0x26/0x30 [ 615.952807][T14726] page last free pid 14702 tgid 14701 stack trace: [ 615.959300][T14726] free_unref_folios+0xa61/0x16b0 [ 615.964343][T14726] folios_put_refs+0x56f/0x740 [ 615.969107][T14726] free_pages_and_swap_cache+0x3f0/0x4a0 [ 615.974758][T14726] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 615.980751][T14726] tlb_finish_mmu+0x168/0x7c0 [ 615.985438][T14726] vms_clear_ptes+0x55e/0x770 [ 615.990128][T14726] vms_complete_munmap_vmas+0x1ca/0x970 [ 615.995689][T14726] do_vmi_align_munmap+0x43b/0x7d0 [ 616.000817][T14726] do_vmi_munmap+0x204/0x3e0 [ 616.005421][T14726] __vm_munmap+0x19a/0x390 [ 616.009870][T14726] __x64_sys_munmap+0x59/0x80 [ 616.014558][T14726] do_syscall_64+0xcd/0x4e0 [ 616.019087][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.025020][T14726] [ 616.027332][T14726] Memory state around the buggy address: [ 616.032949][T14726] ffff88804d7e3780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 616.041008][T14726] ffff88804d7e3800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 616.049086][T14726] >ffff88804d7e3880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 616.057139][T14726] ^ [ 616.062328][T14726] ffff88804d7e3900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 616.070388][T14726] ffff88804d7e3980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 616.078464][T14726] ================================================================== [ 616.091697][T14726] ================================================================== [ 616.099905][T14726] BUG: KASAN: use-after-free in hpfs_get_ea+0xb42/0xc90 [ 616.106873][T14726] Read of size 1 at addr ffff88804d7e38a4 by task syz.2.3832/14726 [ 616.114764][T14726] [ 616.117089][T14726] CPU: 0 UID: 0 PID: 14726 Comm: syz.2.3832 Tainted: G B syzkaller #0 PREEMPT(full) [ 616.117136][T14726] Tainted: [B]=BAD_PAGE [ 616.117150][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 616.117171][T14726] Call Trace: [ 616.117183][T14726] [ 616.117197][T14726] dump_stack_lvl+0x116/0x1f0 [ 616.117258][T14726] print_report+0xcd/0x630 [ 616.117288][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.117330][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.117370][T14726] ? __phys_addr+0xe8/0x180 [ 616.117417][T14726] ? hpfs_get_ea+0xb42/0xc90 [ 616.117459][T14726] kasan_report+0xe0/0x110 [ 616.117491][T14726] ? hpfs_get_ea+0xb42/0xc90 [ 616.117536][T14726] hpfs_get_ea+0xb42/0xc90 [ 616.117585][T14726] ? __pfx_hpfs_get_ea+0x10/0x10 [ 616.117644][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.117684][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 616.117723][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.117763][T14726] ? hpfs_map_fnode+0x4bf/0x770 [ 616.117814][T14726] hpfs_read_inode+0x784/0x1270 [ 616.117860][T14726] ? rcu_is_watching+0x12/0xc0 [ 616.117903][T14726] ? __pfx_hpfs_read_inode+0x10/0x10 [ 616.117949][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.117989][T14726] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 616.118029][T14726] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 616.118069][T14726] ? __pfx_hpfs_load_code_page+0x10/0x10 [ 616.118124][T14726] hpfs_fill_super+0x13e9/0x2230 [ 616.118161][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 616.118192][T14726] ? __pfx_snprintf+0x10/0x10 [ 616.118242][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 616.118278][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.118318][T14726] ? find_held_lock+0x2b/0x80 [ 616.118358][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.118398][T14726] ? set_blocksize+0x406/0x500 [ 616.118446][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.118486][T14726] ? sb_set_blocksize+0x176/0x1d0 [ 616.118525][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.118565][T14726] ? setup_bdev_super+0x369/0x730 [ 616.118619][T14726] get_tree_bdev_flags+0x38c/0x620 [ 616.118672][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 616.118704][T14726] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 616.118758][T14726] ? apparmor_capable+0x114/0x1d0 [ 616.118796][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.118836][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.118876][T14726] ? security_capable+0x7e/0x260 [ 616.118911][T14726] vfs_get_tree+0x8e/0x340 [ 616.118955][T14726] path_mount+0x1513/0x2000 [ 616.118996][T14726] ? __pfx_path_mount+0x10/0x10 [ 616.119032][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.119072][T14726] ? kmem_cache_free+0x2d1/0x4d0 [ 616.119121][T14726] ? putname+0x154/0x1a0 [ 616.119160][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.119200][T14726] ? putname+0x154/0x1a0 [ 616.119239][T14726] ? __x64_sys_mount+0x28d/0x310 [ 616.119275][T14726] __x64_sys_mount+0x28d/0x310 [ 616.119313][T14726] ? __pfx___x64_sys_mount+0x10/0x10 [ 616.119349][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.119396][T14726] do_syscall_64+0xcd/0x4e0 [ 616.119451][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.119486][T14726] RIP: 0033:0x7f6954b9034a [ 616.119512][T14726] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.119546][T14726] RSP: 002b:00007f69559b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 616.119582][T14726] RAX: ffffffffffffffda RBX: 00007f69559b6ef0 RCX: 00007f6954b9034a [ 616.119606][T14726] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f69559b6eb0 [ 616.119629][T14726] RBP: 000020000000a000 R08: 00007f69559b6ef0 R09: 0000000003200041 [ 616.119652][T14726] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 616.119674][T14726] R13: 00007f69559b6eb0 R14: 0000000000009e15 R15: 0000200000000040 [ 616.119706][T14726] [ 616.119719][T14726] [ 616.501833][T14726] The buggy address belongs to the physical page: [ 616.508235][T14726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f098cb3a pfn:0x4d7e3 [ 616.517691][T14726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 616.524810][T14726] raw: 00fff00000000000 ffffea000135f908 ffffea000135f888 0000000000000000 [ 616.533395][T14726] raw: 00000007f098cb3a 0000000000000000 00000000ffffffff 0000000000000000 [ 616.541968][T14726] page dumped because: kasan: bad access detected [ 616.548366][T14726] page_owner tracks the page as freed [ 616.553717][T14726] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 14702, tgid 14701 (syz.3.3820), ts 607138110947, free_ts 607211234167 [ 616.572574][T14726] post_alloc_hook+0x1c0/0x230 [ 616.577369][T14726] get_page_from_freelist+0x132b/0x38e0 [ 616.582939][T14726] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 616.588852][T14726] alloc_pages_mpol+0x1fb/0x550 [ 616.593701][T14726] folio_alloc_mpol_noprof+0x36/0x2f0 [ 616.599083][T14726] vma_alloc_folio_noprof+0xed/0x1e0 [ 616.604375][T14726] do_pte_missing+0x2230/0x3ba0 [ 616.609237][T14726] __handle_mm_fault+0x152a/0x2a50 [ 616.614362][T14726] handle_mm_fault+0x589/0xd10 [ 616.619135][T14726] do_user_addr_fault+0x60c/0x1370 [ 616.624247][T14726] exc_page_fault+0x5c/0xb0 [ 616.628770][T14726] asm_exc_page_fault+0x26/0x30 [ 616.633619][T14726] page last free pid 14702 tgid 14701 stack trace: [ 616.640108][T14726] free_unref_folios+0xa61/0x16b0 [ 616.645150][T14726] folios_put_refs+0x56f/0x740 [ 616.649908][T14726] free_pages_and_swap_cache+0x3f0/0x4a0 [ 616.655554][T14726] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 616.661553][T14726] tlb_finish_mmu+0x168/0x7c0 [ 616.666241][T14726] vms_clear_ptes+0x55e/0x770 [ 616.670929][T14726] vms_complete_munmap_vmas+0x1ca/0x970 [ 616.676489][T14726] do_vmi_align_munmap+0x43b/0x7d0 [ 616.681620][T14726] do_vmi_munmap+0x204/0x3e0 [ 616.686227][T14726] __vm_munmap+0x19a/0x390 [ 616.690663][T14726] __x64_sys_munmap+0x59/0x80 [ 616.695349][T14726] do_syscall_64+0xcd/0x4e0 [ 616.699874][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.705772][T14726] [ 616.708084][T14726] Memory state around the buggy address: [ 616.713702][T14726] ffff88804d7e3780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 616.721762][T14726] ffff88804d7e3800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 616.729821][T14726] >ffff88804d7e3880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 616.737870][T14726] ^ [ 616.742969][T14726] ffff88804d7e3900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 616.751027][T14726] ffff88804d7e3980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 616.759083][T14726] ================================================================== [ 616.790288][T14726] ================================================================== [ 616.798380][T14726] BUG: KASAN: use-after-free in hpfs_get_ea+0xb64/0xc90 [ 616.805350][T14726] Read of size 1 at addr ffff88804d7e38a5 by task syz.2.3832/14726 [ 616.813245][T14726] [ 616.815566][T14726] CPU: 1 UID: 0 PID: 14726 Comm: syz.2.3832 Tainted: G B syzkaller #0 PREEMPT(full) [ 616.815609][T14726] Tainted: [B]=BAD_PAGE [ 616.815620][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 616.815637][T14726] Call Trace: [ 616.815647][T14726] [ 616.815658][T14726] dump_stack_lvl+0x116/0x1f0 [ 616.815705][T14726] print_report+0xcd/0x630 [ 616.815739][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.815785][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.815836][T14726] ? __phys_addr+0xe8/0x180 [ 616.815877][T14726] ? hpfs_get_ea+0xb64/0xc90 [ 616.815912][T14726] kasan_report+0xe0/0x110 [ 616.815938][T14726] ? hpfs_get_ea+0xb64/0xc90 [ 616.815977][T14726] hpfs_get_ea+0xb64/0xc90 [ 616.816014][T14726] ? __pfx_hpfs_get_ea+0x10/0x10 [ 616.816063][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.816096][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 616.816129][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.816162][T14726] ? hpfs_map_fnode+0x4bf/0x770 [ 616.816209][T14726] hpfs_read_inode+0x784/0x1270 [ 616.816261][T14726] ? rcu_is_watching+0x12/0xc0 [ 616.816299][T14726] ? __pfx_hpfs_read_inode+0x10/0x10 [ 616.816337][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.816371][T14726] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 616.816404][T14726] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 616.816437][T14726] ? __pfx_hpfs_load_code_page+0x10/0x10 [ 616.816483][T14726] hpfs_fill_super+0x13e9/0x2230 [ 616.816515][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 616.816540][T14726] ? __pfx_snprintf+0x10/0x10 [ 616.816584][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 616.816613][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.816646][T14726] ? find_held_lock+0x2b/0x80 [ 616.816680][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.816714][T14726] ? set_blocksize+0x406/0x500 [ 616.816748][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.816782][T14726] ? sb_set_blocksize+0x176/0x1d0 [ 616.816813][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.816850][T14726] ? setup_bdev_super+0x369/0x730 [ 616.816892][T14726] get_tree_bdev_flags+0x38c/0x620 [ 616.816935][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 616.816962][T14726] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 616.817007][T14726] ? apparmor_capable+0x114/0x1d0 [ 616.817039][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.817072][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.817106][T14726] ? security_capable+0x7e/0x260 [ 616.817135][T14726] vfs_get_tree+0x8e/0x340 [ 616.817172][T14726] path_mount+0x1513/0x2000 [ 616.817205][T14726] ? __pfx_path_mount+0x10/0x10 [ 616.817236][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.817270][T14726] ? kmem_cache_free+0x2d1/0x4d0 [ 616.817319][T14726] ? putname+0x154/0x1a0 [ 616.817352][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.817397][T14726] ? putname+0x154/0x1a0 [ 616.817441][T14726] ? __x64_sys_mount+0x28d/0x310 [ 616.817471][T14726] __x64_sys_mount+0x28d/0x310 [ 616.817502][T14726] ? __pfx___x64_sys_mount+0x10/0x10 [ 616.817533][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 616.817573][T14726] do_syscall_64+0xcd/0x4e0 [ 616.817619][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.817648][T14726] RIP: 0033:0x7f6954b9034a [ 616.817670][T14726] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.817699][T14726] RSP: 002b:00007f69559b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 616.817725][T14726] RAX: ffffffffffffffda RBX: 00007f69559b6ef0 RCX: 00007f6954b9034a [ 616.817745][T14726] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f69559b6eb0 [ 616.817764][T14726] RBP: 000020000000a000 R08: 00007f69559b6ef0 R09: 0000000003200041 [ 616.817783][T14726] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 616.817801][T14726] R13: 00007f69559b6eb0 R14: 0000000000009e15 R15: 0000200000000040 [ 616.817832][T14726] [ 616.817842][T14726] [ 617.199709][T14726] The buggy address belongs to the physical page: [ 617.206104][T14726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f098cb3a pfn:0x4d7e3 [ 617.215553][T14726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 617.222671][T14726] raw: 00fff00000000000 ffffea000135f908 ffffea000135f888 0000000000000000 [ 617.231249][T14726] raw: 00000007f098cb3a 0000000000000000 00000000ffffffff 0000000000000000 [ 617.239815][T14726] page dumped because: kasan: bad access detected [ 617.246209][T14726] page_owner tracks the page as freed [ 617.251597][T14726] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 14702, tgid 14701 (syz.3.3820), ts 607138110947, free_ts 607211234167 [ 617.270446][T14726] post_alloc_hook+0x1c0/0x230 [ 617.275218][T14726] get_page_from_freelist+0x132b/0x38e0 [ 617.280771][T14726] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 617.286693][T14726] alloc_pages_mpol+0x1fb/0x550 [ 617.291535][T14726] folio_alloc_mpol_noprof+0x36/0x2f0 [ 617.296932][T14726] vma_alloc_folio_noprof+0xed/0x1e0 [ 617.302240][T14726] do_pte_missing+0x2230/0x3ba0 [ 617.307094][T14726] __handle_mm_fault+0x152a/0x2a50 [ 617.312207][T14726] handle_mm_fault+0x589/0xd10 [ 617.316974][T14726] do_user_addr_fault+0x60c/0x1370 [ 617.322085][T14726] exc_page_fault+0x5c/0xb0 [ 617.326597][T14726] asm_exc_page_fault+0x26/0x30 [ 617.331442][T14726] page last free pid 14702 tgid 14701 stack trace: [ 617.337937][T14726] free_unref_folios+0xa61/0x16b0 [ 617.342969][T14726] folios_put_refs+0x56f/0x740 [ 617.347725][T14726] free_pages_and_swap_cache+0x3f0/0x4a0 [ 617.353367][T14726] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 617.359437][T14726] tlb_finish_mmu+0x168/0x7c0 [ 617.364117][T14726] vms_clear_ptes+0x55e/0x770 [ 617.368817][T14726] vms_complete_munmap_vmas+0x1ca/0x970 [ 617.374368][T14726] do_vmi_align_munmap+0x43b/0x7d0 [ 617.379490][T14726] do_vmi_munmap+0x204/0x3e0 [ 617.384093][T14726] __vm_munmap+0x19a/0x390 [ 617.388543][T14726] __x64_sys_munmap+0x59/0x80 [ 617.393222][T14726] do_syscall_64+0xcd/0x4e0 [ 617.397741][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.403627][T14726] [ 617.405935][T14726] Memory state around the buggy address: [ 617.411636][T14726] ffff88804d7e3780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 617.419689][T14726] ffff88804d7e3800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 617.427756][T14726] >ffff88804d7e3880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 617.435816][T14726] ^ [ 617.440927][T14726] ffff88804d7e3900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 617.448987][T14726] ffff88804d7e3980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 617.457035][T14726] ================================================================== [ 617.466309][T14726] hpfs: hpfs_map_sector(): read error [ 617.491046][T14726] ================================================================== [ 617.499116][T14726] BUG: KASAN: use-after-free in strcmp+0xa7/0xb0 [ 617.505442][T14726] Read of size 1 at addr ffff88804d7e38a6 by task syz.2.3832/14726 [ 617.513321][T14726] [ 617.515640][T14726] CPU: 0 UID: 0 PID: 14726 Comm: syz.2.3832 Tainted: G B syzkaller #0 PREEMPT(full) [ 617.515682][T14726] Tainted: [B]=BAD_PAGE [ 617.515729][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 617.515747][T14726] Call Trace: [ 617.515757][T14726] [ 617.515767][T14726] dump_stack_lvl+0x116/0x1f0 [ 617.515813][T14726] print_report+0xcd/0x630 [ 617.515839][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.515875][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.515920][T14726] ? __phys_addr+0xe8/0x180 [ 617.515969][T14726] ? strcmp+0xa7/0xb0 [ 617.515992][T14726] kasan_report+0xe0/0x110 [ 617.516018][T14726] ? strcmp+0xa7/0xb0 [ 617.516046][T14726] strcmp+0xa7/0xb0 [ 617.516071][T14726] hpfs_get_ea+0x1f9/0xc90 [ 617.516110][T14726] ? __pfx_hpfs_get_ea+0x10/0x10 [ 617.516158][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.516192][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 617.516225][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.516259][T14726] ? hpfs_map_fnode+0x4bf/0x770 [ 617.516301][T14726] hpfs_read_inode+0x95f/0x1270 [ 617.516339][T14726] ? rcu_is_watching+0x12/0xc0 [ 617.516375][T14726] ? __pfx_hpfs_read_inode+0x10/0x10 [ 617.516413][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.516446][T14726] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 617.516480][T14726] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 617.516513][T14726] ? __pfx_hpfs_load_code_page+0x10/0x10 [ 617.516559][T14726] hpfs_fill_super+0x13e9/0x2230 [ 617.516590][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 617.516616][T14726] ? __pfx_snprintf+0x10/0x10 [ 617.516658][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 617.516692][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.516726][T14726] ? find_held_lock+0x2b/0x80 [ 617.516759][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.516793][T14726] ? set_blocksize+0x406/0x500 [ 617.516826][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.516861][T14726] ? sb_set_blocksize+0x176/0x1d0 [ 617.516898][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.516937][T14726] ? setup_bdev_super+0x369/0x730 [ 617.516982][T14726] get_tree_bdev_flags+0x38c/0x620 [ 617.517043][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 617.517075][T14726] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 617.517120][T14726] ? apparmor_capable+0x114/0x1d0 [ 617.517153][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.517186][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.517220][T14726] ? security_capable+0x7e/0x260 [ 617.517249][T14726] vfs_get_tree+0x8e/0x340 [ 617.517285][T14726] path_mount+0x1513/0x2000 [ 617.517319][T14726] ? __pfx_path_mount+0x10/0x10 [ 617.517350][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.517383][T14726] ? kmem_cache_free+0x2d1/0x4d0 [ 617.517424][T14726] ? putname+0x154/0x1a0 [ 617.517457][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.517490][T14726] ? putname+0x154/0x1a0 [ 617.517522][T14726] ? __x64_sys_mount+0x28d/0x310 [ 617.517552][T14726] __x64_sys_mount+0x28d/0x310 [ 617.517583][T14726] ? __pfx___x64_sys_mount+0x10/0x10 [ 617.517614][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.517653][T14726] do_syscall_64+0xcd/0x4e0 [ 617.517703][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.517731][T14726] RIP: 0033:0x7f6954b9034a [ 617.517753][T14726] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.517781][T14726] RSP: 002b:00007f69559b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 617.517807][T14726] RAX: ffffffffffffffda RBX: 00007f69559b6ef0 RCX: 00007f6954b9034a [ 617.517827][T14726] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f69559b6eb0 [ 617.517846][T14726] RBP: 000020000000a000 R08: 00007f69559b6ef0 R09: 0000000003200041 [ 617.517865][T14726] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 617.517883][T14726] R13: 00007f69559b6eb0 R14: 0000000000009e15 R15: 0000200000000040 [ 617.517911][T14726] [ 617.517921][T14726] [ 617.902809][T14726] The buggy address belongs to the physical page: [ 617.909201][T14726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f098cb3a pfn:0x4d7e3 [ 617.918646][T14726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 617.925789][T14726] raw: 00fff00000000000 ffffea000135f908 ffffea000135f888 0000000000000000 [ 617.934384][T14726] raw: 00000007f098cb3a 0000000000000000 00000000ffffffff 0000000000000000 [ 617.942958][T14726] page dumped because: kasan: bad access detected [ 617.949353][T14726] page_owner tracks the page as freed [ 617.954707][T14726] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 14702, tgid 14701 (syz.3.3820), ts 607138110947, free_ts 607211234167 [ 617.973558][T14726] post_alloc_hook+0x1c0/0x230 [ 617.978338][T14726] get_page_from_freelist+0x132b/0x38e0 [ 617.983902][T14726] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 617.989817][T14726] alloc_pages_mpol+0x1fb/0x550 [ 617.994673][T14726] folio_alloc_mpol_noprof+0x36/0x2f0 [ 618.000053][T14726] vma_alloc_folio_noprof+0xed/0x1e0 [ 618.005340][T14726] do_pte_missing+0x2230/0x3ba0 [ 618.010200][T14726] __handle_mm_fault+0x152a/0x2a50 [ 618.015320][T14726] handle_mm_fault+0x589/0xd10 [ 618.020092][T14726] do_user_addr_fault+0x60c/0x1370 [ 618.025202][T14726] exc_page_fault+0x5c/0xb0 [ 618.029719][T14726] asm_exc_page_fault+0x26/0x30 [ 618.034566][T14726] page last free pid 14702 tgid 14701 stack trace: [ 618.041051][T14726] free_unref_folios+0xa61/0x16b0 [ 618.046088][T14726] folios_put_refs+0x56f/0x740 [ 618.050846][T14726] free_pages_and_swap_cache+0x3f0/0x4a0 [ 618.056490][T14726] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 618.062477][T14726] tlb_finish_mmu+0x168/0x7c0 [ 618.067163][T14726] vms_clear_ptes+0x55e/0x770 [ 618.071851][T14726] vms_complete_munmap_vmas+0x1ca/0x970 [ 618.077415][T14726] do_vmi_align_munmap+0x43b/0x7d0 [ 618.082540][T14726] do_vmi_munmap+0x204/0x3e0 [ 618.087142][T14726] __vm_munmap+0x19a/0x390 [ 618.091590][T14726] __x64_sys_munmap+0x59/0x80 [ 618.096272][T14726] do_syscall_64+0xcd/0x4e0 [ 618.100792][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.106684][T14726] [ 618.109050][T14726] Memory state around the buggy address: [ 618.114676][T14726] ffff88804d7e3780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 618.122735][T14726] ffff88804d7e3800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 618.130789][T14726] >ffff88804d7e3880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 618.138838][T14726] ^ [ 618.143938][T14726] ffff88804d7e3900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 618.151994][T14726] ffff88804d7e3980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 618.160042][T14726] ================================================================== [ 618.226970][T14726] ================================================================== [ 618.235064][T14726] BUG: KASAN: use-after-free in hpfs_get_ea+0xb51/0xc90 [ 618.242031][T14726] Read of size 1 at addr ffff88804d7e38a3 by task syz.2.3832/14726 [ 618.249919][T14726] [ 618.252243][T14726] CPU: 1 UID: 0 PID: 14726 Comm: syz.2.3832 Tainted: G B syzkaller #0 PREEMPT(full) [ 618.252290][T14726] Tainted: [B]=BAD_PAGE [ 618.252303][T14726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 618.252324][T14726] Call Trace: [ 618.252335][T14726] [ 618.252348][T14726] dump_stack_lvl+0x116/0x1f0 [ 618.252404][T14726] print_report+0xcd/0x630 [ 618.252434][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.252475][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.252516][T14726] ? __phys_addr+0xe8/0x180 [ 618.252564][T14726] ? hpfs_get_ea+0xb51/0xc90 [ 618.252604][T14726] kasan_report+0xe0/0x110 [ 618.252637][T14726] ? hpfs_get_ea+0xb51/0xc90 [ 618.252683][T14726] hpfs_get_ea+0xb51/0xc90 [ 618.252728][T14726] ? __pfx_hpfs_get_ea+0x10/0x10 [ 618.252787][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.252827][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 618.252867][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.252908][T14726] ? hpfs_map_fnode+0x4bf/0x770 [ 618.252962][T14726] hpfs_read_inode+0x95f/0x1270 [ 618.253008][T14726] ? rcu_is_watching+0x12/0xc0 [ 618.253052][T14726] ? __pfx_hpfs_read_inode+0x10/0x10 [ 618.253098][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.253139][T14726] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 618.253179][T14726] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 618.253219][T14726] ? __pfx_hpfs_load_code_page+0x10/0x10 [ 618.253274][T14726] hpfs_fill_super+0x13e9/0x2230 [ 618.253312][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 618.253342][T14726] ? __pfx_snprintf+0x10/0x10 [ 618.253393][T14726] ? do_raw_spin_lock+0x12c/0x2b0 [ 618.253428][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.253469][T14726] ? find_held_lock+0x2b/0x80 [ 618.253510][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.253550][T14726] ? set_blocksize+0x406/0x500 [ 618.253590][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.253630][T14726] ? sb_set_blocksize+0x176/0x1d0 [ 618.253669][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.253710][T14726] ? setup_bdev_super+0x369/0x730 [ 618.253760][T14726] get_tree_bdev_flags+0x38c/0x620 [ 618.253812][T14726] ? __pfx_hpfs_fill_super+0x10/0x10 [ 618.253843][T14726] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 618.253898][T14726] ? apparmor_capable+0x114/0x1d0 [ 618.253936][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.254113][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.254164][T14726] ? security_capable+0x7e/0x260 [ 618.254208][T14726] vfs_get_tree+0x8e/0x340 [ 618.254265][T14726] path_mount+0x1513/0x2000 [ 618.254315][T14726] ? __pfx_path_mount+0x10/0x10 [ 618.254362][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.254412][T14726] ? kmem_cache_free+0x2d1/0x4d0 [ 618.254472][T14726] ? putname+0x154/0x1a0 [ 618.254521][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.254571][T14726] ? putname+0x154/0x1a0 [ 618.254619][T14726] ? __x64_sys_mount+0x28d/0x310 [ 618.254663][T14726] __x64_sys_mount+0x28d/0x310 [ 618.254706][T14726] ? __pfx___x64_sys_mount+0x10/0x10 [ 618.254751][T14726] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.254810][T14726] do_syscall_64+0xcd/0x4e0 [ 618.254880][T14726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.254934][T14726] RIP: 0033:0x7f6954b9034a [ 618.254965][T14726] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.255007][T14726] RSP: 002b:00007f69559b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 618.255046][T14726] RAX: ffffffffffffffda RBX: 00007f69559b6ef0 RCX: 00007f6954b9034a [ 618.255074][T14726] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f69559b6eb0 [ 618.255102][T14726] RBP: 000020000000a000 R08: 00007f69559b6ef0 R09: 0000000003200041 [ 618.255131][T14726] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 618.255158][T14726] R13: 00007f69559b6eb0 R14: 0000000000009e15 R15: 0000200000000040 [ 618.255198][T14726] [ 618.255213][T14726] [ 618.637068][T14726] The buggy address belongs to the physical page: [ 618.643475][T14726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f098cb3a pfn:0x4d7e3 [ 618.652930][T14726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 618.660056][T14726] raw: 00fff00000000000 ffffea000135f908 ffffea000135f888 0000000000000000 [ 618.668642][T14726] raw: 00000007f098cb3a 0000000000000000 00000000ffffffff 0000000000000000