last executing test programs:

4.187165236s ago: executing program 2 (id=2749):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000009000000070000000200001304000000030000000200000000100000040000000800000008000000002e2e616102305f"], 0x0, 0x45, 0x0, 0x8, 0x3}, 0x28)

3.989395122s ago: executing program 0 (id=2753):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000500000001000004018000001531b7a8969c591a00000000002e005f5f2e"], &(0x7f0000000580)=""/5, 0x37, 0x5, 0x1, 0x7fffffff}, 0x28)

3.863056859s ago: executing program 2 (id=2755):
syz_mount_image$ufs(&(0x7f0000009e00), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000100)=ANY=[@ANYBLOB="6f6e6572726f723d7265703e2bc5081284d6b2a1d76169722c00"], 0x1, 0x9e18, &(0x7f000001dac0)="$eJwsmlMU5wcDY6e2zamtW7tT21Pbtnvr/n82atvusLZt27bbPd/u5jFPSc65bxkxwJEDHDXA0QMcM8CxA7xrgHcP8J4B3jvA+wZ4/wAfGOCDA3xogA8P8JEBPjrAxwb4+ACfGOCTA3xqgE8P8JkBPjvA5wb4/ABfGOCLA3xpgC8P8JUB/jfVkP+r1wf4xgDfHOBbA3x7gO8M8N0BvjfA9wf4wQA/HOBHA/x4gJ8M8NMBfjbAzwf4xQC/HOBXA/x6gN8M8NsBfjfA7wf4wwB/HOBPA/x5gL8M8NcB/jbA3wf4xwD/HOBfA/x7gP8M8N//ZRzgkADHCXDcAMcLcPwAJwhwwgAnCnDiACcJcNIAJwtw8gCnCHDKAKcKcOoApwlw2gCnC3D6AGcIcMYAZwpw5gBnCXDWAGcLcPYA5whwzgCHBjhXgHMHOE+A8wY4X4DzB7hAgAsGuFCACwe4SICLBrhYgIsHuESASwa4VIAEuHSAywS4bIDLBbh8gCsEuGKAKwW4coCrBLhqgKsFuHqAawQ4LMA1A1wrwLUDXCfAdQNcL8D1A9wgwA0D3CjAjQPcJMBNA9wswM0D3CLALQPcKsCtAxwe4DYBbhvgdgFuH+AO/3+/nQLcOcBdAtw1wN0C3D3APQLcM8C9Atw7wH0C3DfA/QLcP8ADAjwwwIMCPDjAQwI8NMDDAjw8wCMCPDLAowI8OsBjAjw2wOMCPD7AEwI8MUADPCnAkwM8JcBTAzwtwNMDPCPAMwMcBBgEGAYYBRgHmASYBpgFmAdYBFgGWAVYB9gE2AbYBdgHeFaAZwd4ToDnBnhegOcHeEGAFwZ4UYAXB3hJgJcGeFmAlwd4RYBXBnhVgFcHeE2A1wZ4XYDXB3hDgDcGeFOANwd4S4C3BnhbgLcHeEeAdwY4IsCRAY4KcHSAYwIcG+BdAd4d4D0B3hvgfQHeH+ADAT4Y4EMBPhzgIwE+GuBjAT4e4BMBPhngUwE+HeAzAT4b4HMBPh/gCwG+GOBLAb4c4CsBvhrgawG+HuAbAb4Z4FsBvh3gOwG+G+B7Ab4f4AcBfhjgRwF+HOAnAX4a4GcBfh7gFwF+GeBXAX4d4DcBfhvgdwF+H+APAf4Y4E8B/hzgLwH+GuBvAf4e4B8B/hngXwH+HeA/Af4b4H8BDglxnBDHDXG8EMcPcYIQJwxxohAnDnGSECcNcbIQJw9xihCnDHGqEKcOcZoQpw1xuhCnD3GGEGcMcaYQZw5xlhBnDXG2EGcPcY4Q5wxxaIhzhTh3iPOEOG+I84U4f4gLhLhgiAuFuHCIi4S4aIiLhbh4iEuEuGSIS4VIiEuHuEyIy4a4XIjLh7hCiCuGuFKIK4e4SoirhrhaiKuHuEaIw0JcM8S1Qlw7xHVCXDfE9UJcP8QNQtwwxI1C3DjETULcNMTNQtw8xC1C3DLErULcOsThIW4T4rYhbhfi9iHuEOKOIe4U4s4h7hLiriHuFuLuIe4R4p4h7hXi3iHuE+K+Ie4X4v4hHhDigSEeFOLBIR4S4qEhHhbi4SEeEeKRIR4V4tEhHhPisSEeF+LxIZ4Q4okhGuJJIZ4c4ikhnhriaSGeHuIZIZ4Z4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsSzQjw7xHNCPDfE80I8P8QLQrwwxItCvDjES0K8NMTLQrw8xCtCvDLEq0K8OsRrQrw2xOtCvD7EG0K8McSbQrw5xFtCvDXE20K8PcQ7QrwzxBEhjgxxVIijQxwT4tgQ7wrx7hDvCfHeEO8L8f4QHwjxwRAfCvHhEB8J8dEQHwvx8RCfCPHJEJ8K8ekQnwnx2RCfC/H5EF8I8cUQXwrx5RBfCfHVEF8L8fUQ3wjxzRDfCvHtEN8J8d0Q3wvx/RA/CPHDED8K8eMQPwnx0xA/C/HzEL8I8csQvwrx6xC/CfHbEL8L8fsQfwjxxxB/CvHnEH8J8dcQfwvx9xD/CPHPEP8K8e8Q/wnx3xD/C3FIhONEOG6E40U4foQTRDhhhBNFOHGEk0Q4aYSTRTh5hFNEOGWEU0U4dYTTRDhthNNFOH2EM0Q4Y4QzRThzhLNEOGuEs0U4e4RzRDhnhEMjnCvCuSOcJ8J5I5wvwvkjXCDCBSNcKMKFI1wkwkUjXCzCxSNcIsIlI1wqQiJcOsJlIlw2wuUiXD7CFSJcMcKVIlw5wlUiXDXC1SJcPcI1IhwW4ZoRrhXh2hGuE+G6Ea4X4foRbhDhhhFuFOHGEW4S4aYRbhbh5hFuEeGWEW4V4dYRDo9wmwi3jXC7CLePcIcId4xwpwh3jnCXCHeNcLcId49wjwj3jHCvCPeOcJ8I941wvwj3j/CACA+M8KAID47wkAgPjfCwCA+P8IgIj4zwqAiPjvCYCI+N8LgIj4/whAhPjNAIT4rw5AhPifDUCE+L8PQIz4jwzAgHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYRnhXh2RGeE+G5EZ4X4fkRXhDhhRFeFOHFEV4S4aURXhbh5RFeEeGVEV4V4dURXhPhtRFeF+H1Ed4Q4Y0R3hThzRHeEuGtEd4W4e0R3hHhnRGOiHBkhKMiHB3hmAjHRnhXhHdHeE+E90Z4X4T3R/hAhA9G+FCED0f4SISPRvhYhI9H+ESET0b4VIRPR/hMhM9G+FyEz0f4QoQvRvhShC9H+EqEr0b4WoSvR/hGhG9G+FaEb0f4ToTvRvhehO9H+EGEH0b4UYQfR/hJhJ9G+FmEn0f4RYRfRvhVhF9H+E2E30b4XYTfR/hDhD9G+FOEP0f4S4S/RvhbhL9H+EeEf0b4V4R/R/hPhP9G+F+EQ2IcJ8ZxYxwvxvFjnCDGCWOcKMaJY5wkxkljnCzGyWOcIsYpY5wqxqljnCbGaWOcLsbpY5whxhljnCnGmWOcJcZZY5wtxtljnCPGOWMcGuNcMc4d4zwxzhvjfDHOH+MCMS4Y40IxLhzjIjEuGuNiMS4e4xIxLhnjUjES49IxLhPjsjEuF+PyMa4Q44oxrhTjyjGuEuOqMa4W4+oxrhHjsBjXjHGtGNeOcZ0Y141xvRjXj3GDGDeMcaMYN45xkxg3jXGzGDePcYsYt4xxqxi3jnF4jNvEuG2M28W4fYw7xLhjjDvFuHOMu8S4a4y7xbh7jHvEuGeMe8W4d4z7xLhvjPvFuH+MB8R4YIwHxXhwjIfEeGiMh8V4eIxHxHhkjEfFeHSMx8R4bIzHxXh8jCfEeGKMxnhSjCfHeEqMp8Z4Woynx3hGjGfGOIgxiDGMMYoxjjGJMY0xizGPsYixjLGKsY6xibGNsYuxj/GsGM+O8ZwYz43xvBjPj/GCGC+M8aIYL47xkhgvjfGyGC+P8YoYr4zxqhivjvGaGK+N8boYr4/xhhhvjPGmGG+O8ZYYb43xthhvj/GOGO+McUSMI2McFePoGMfEODbGu2K8O8Z7Yrw3xvtivD/GB2J8MMaHYnw4xkdifDTGx2J8PMYnYnwyxqdifDrGZ2J8NsbnYnw+xhdifDHGl2J8OcZXYnw1xtdifD3GN2J8M8a3Ynw7xndifDfG92J8P8YPYvwwxo9i/DjGT2L8NMbPYvw8xi9i/DLGr2L8OsZvYvw2xu9i/D7GH2L8McafYvw5xl9i/DXG32L8PcY/Yvwzxr9i/DvGf2L8N8b/YhyS4DgJjpvgeAmOn+AECU6Y4EQJTpzgJAlOmuBkCU6e4BQJTpngVAlOneA0CU6b4HQJTp/gDAnOmOBMCc6c4CwJzprgbAnOnuAcCc6Z4NAE50pw7gTnSXDeBOdLcP4EF0hwwQQXSnDhBBdJcNEEF0tw8QSXSHDJBJdKkASXTnCZBJdNcLkEl09whQRXTHClBFdOcJUEV01wtQRXT3CNBIcluGaCayW4doLrJLhugusluH6CGyS4YYIbJbhxgpskuGmCmyW4eYJbJLhlglsluHWCwxPcJsFtE9wuwe0T3CHBHRPcKcGdE9wlwV0T3C3B3RPcI8E9E9wrwb0T3CfBfRPcL8H9EzwgwQMTPCjBgxM8JMFDEzwswcMTPCLBIxM8KsGjEzwmwWMTPC7B4xM8IcETEzTBkxI8OcFTEjw1wdMSPD3BMxI8M8FBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn2CZyV4doLnJHhugucleH6CFyR4YYIXJXhxgpckeGmClyV4eYJXJHhlglcleHWC1yR4bYLXJXh9gjckeGOCNyV4c4K3JHhrgrcleHuCdyR4Z4IjEhyZ4KgERyc4JsGxCd6V4N0J3pPgvQnel+D9CT6Q4IMJPpTgwwk+kuCjCT6W4OMJPpHgkwk+leDTCT6T4LMJPpfg8wm+kOCLCb6U4MsJvpLgqwm+luDrCb6R4JsJvpXg2wm+k+C7Cb6X4PsJfpDghwl+lODHCX6S4KcJfpbg5wl+keCXCX6V4NcJfpPgtwl+l+D3Cf6Q4I8J/pTgzwn+kuCvCf6W4O8J/pHgnwn+leDfCf6T4L8J/pfgkBTHSXHcFMdLcfwUJ0hxwhQnSnHiFCdJcdIUJ0tx8hSnSHHKFKdKceoUp0lx2hSnS3H6FGdIccYUZ0px5hRnSXHWFGdLcfYU50hxzhSHpjhXinOnOE+K86Y4X4rzp7hAigumuFCKC6e4SIqLprhYiounuESKS6a4VIqkuHSKy6S4bIrLpbh8iiukuGKKK6W4coqrpLhqiquluHqKa6Q4LMU1U1wrxbVTXCfFdVNcL8X1U9wgxQ1T3CjFjVPcJMVNU9wsxc1T3CLFLVPcKsWtUxye4jYpbpvidilun+IOKe6Y4k4p7pziLinumuJuKe6e4h4p7pniXinuneI+Ke6b4n4p7p/iASkemOJBKR6c4iEpHpriYSkenuIRKR6Z4lEpHp3iMSkem+JxKR6f4gkpnpiiKZ6U4skpnpLiqSmeluLpKZ6R4pkpDlIMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsUzwrxbNTPCfFc1M8L8XzU7wgxQtTvCjFi1O8JMVLU7wsxctTvCLFK1O8KsWrU7wmxWtTvC7F61O8IcUbU7wpxZtTvCXFW1O8LcXbU7wjxTtTHJHiyBRHpTg6xTEpjk3xrhTvTvGeFO9N8b4U70/xgRQfTPGhFB9O8ZEUH03xsRQfT/GJFJ9M8akUn07xmRSfTfG5lPGeT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9M8asUv07xmxS/TfG7FL9P8YcUf0zxpxR/TvGXFH9N8bcUf0/xjxT/TPGvFP9O8Z8U/03xvxSHZDhOhuNmOF6G42c4QYYTZjhRhhNnOEmGk2Y4WYaTZzhFhlNmOFWGU2c4TYbTZjhdhtNnOEOGM2Y4U4YzZzhLhrNmOFuGs2c4R4ZzZjg0w7kynDvDeTKcN8P5Mpw/wwUyXDDDhTJcOMNFMlw0w8UyXDzDJTJcMsOlMiTDpTNcJsNlM1wuw+UzXCHDFTNcKcOVM1wlw1UzXC3D1TNcI8NhGa6Z4VoZrp3hOhmum+F6Ga6f4QYZbpjhRhlunOEmGW6a4WYZbp7hFhlumeFWGW6d4fAMt8lw2wy3y3D7DHfIcMcMd8pw5wx3yXDXDHfLcPcM98hwz//1HIJ7Z7hPhvtmuF+G+2d4QIYHZnhQhgdneEiGh2Z4WIaHZ3hEhkdmeFSGR2d4TIbHZnhchsdneEKGJ2ZohidleHKGp2R4aoanZXh6hmdkeGaGgwyDDMMMowzjDJMM0wyzDPMMiwzLDKsM6wybDNsMuwz7DM/K8OwMz8nw3AzPy/D8DC/I8MIML8rw4gwvyfDSDC/L8PIMr8jwygyvyvDqDK/J8NoMr8vw+gxvyPDGDG/K8OYMb8nw1gxvy/D2DO/I8M4MR2Q4MsNRGY7OcEyGYzO8K8O7M7wnw3szvC/D+zN8IMMHM3wow4czfCTDRzN8LMPHM3wiwyczfCrDpzN8JsNnM3wuw+czfCHDFzN8KcOXM3wlw1czfO1/bA3BNzJ8M8O3Mnw7w3cyfDfD9zJ8P8MPMvwww48y/DjDTzL8NMPPMvw8wy8y/DLDrzL8OsNvMvw2w+8y/D7DHzL8McOfMvw5w18y/DXD3zL8PcM/Mvwzw78y/DvDfzL8N8P/MhyS4zg5jpvjeDmOn+MEOU6Y40Q5TpzjJDlOmuNkOU6e4xQ5TpnjVDlOneM0OU6b43Q5Tp/jDDnOmONMOc6c4yw5zprjbDnOnuMcOc6Z49Ac58px7hznyXHeHOfLcf4cF8hxwRwXynHhHBfJcdEcF8tx8RyXyHHJHJfKkRyXznGZHJfNcbkcl89xhRxXzHGlHFfOcZUcV81xtRxXz3GNHIfluGaOa+W4do7r5LhujuvluH6OG+S4YY4b5bhxjpvkuGmOm+W4eY5b5LhljlvluHWOw3PcJsdtc9wux+1z3CHHHXPcKcedc9wlx11z3C3H3XPcI8c9c9wrx71z3CfHfXPcL8f9czwgxwNzPCjHg3M8JMdDczwsx8NzPCLHI3M8Ksejczwmx2NzPC7H43M8IccTczTHk3I8OcdTcjw1x9NyPD3HM3I8M8dBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn2OZ+V4do7n5HhujufleH6OF+R4YY4X5XhxjpfkeGmOl+V4eY5X5HhljlfleHWO1+R4bY7X5Xh9jjfkeGOON+V4c4635HhrjrfleHuOd+R4Z44jchyZ46gcR+c4JsexOd6V49053pPjvTnel+P9OT6Q44M5PpTjwzk+kuOjOT6W4+M5PpHjkzk+lePTOT6T47M5Ppfj8zm+kOOLOb6U48s5vpLjqzm+luPrOb6R45s5vpXj2zm+k+O7Ob6X4/s5fpDjhzl+lOPHOX6S46c5fpbj5zl+keOXOX6V49c5fpPjtzl+l+P3Of6Q4485/pTjzzn+kuOvOf6W4+85/pHjnzn+lePfOf6T4785/pfjkALHKXDcAscrcPwCJyhwwgInKnDiAicpcNICJytw8gKnKHDKAqcqcOoCpylw2gKnK3D6AmcocMYCZypw5gJnKXDWAmcrcPYC5yhwzgKHFjhXgXMXOE+B8xY4X4HzF7hAgQsWuFCBCxe4SIGLFrhYgYsXuESBSxa4VIEUuHSByxS4bIHLFbh8gSsUuGKBKxW4coGrFLhqgasVuHqBaxQ4rMA1C1yrwLULXKfAdQtcr8D1C9ygwA0L3KjAjQvcpMBNC9yswM0L3KLALQvcqsCtCxxe4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeA+Be5b4H4F7l/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFHl3gMQUeW+BxBR5f4AkFnligBZ5U4MkFnlLgqQWeVuDpBZ5R4JkFDgoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsCzyrwLMLPKfAcws8r8DzC7ygwAsLvKjAiwu8pMBLC7yswMsLvKLAKwu8qsCrC7ymwGsLvK7A6wu8ocAbC7ypwJsLvKXAWwu8rcDbC7yjwDsLHFHgyAJHFTi6wDEFji3wrgLvLvCeAu8t8L4C7y/wgQIfLPChAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyzwqwK/LvCbAr8t8LsCvy/whwJ/LPCnAn8u8JcCfy3wtwJ/L/CPAv8s8K8C/y7wnwL/LfC/AoeUOE6J45Y4XonjlzhBiROWOFGJE5c4SYmTljhZiUPGmWX4FCVOWeJUJU5d4jQlTlvidCVOX+IMJc5Y4kwlzlziLCXOWuJsJc5e4hwlzlni0BLnKnHuEucpcd4S5ytx/hIXKHHBEhcqceESFylx0RIXK3HxEpcocckSlyqREpcucZkSly1xuRKXL3GFElcscaUSVy5xlRJXLXG1ElcvcY0Sh5W4Zolrlbh2ieuUuG6J65W4fokblLhhiRuVuHGJm5S4aYmblbh5iVuUuGWJW5W4dYnDS9ymxG1L3K7E7UvcocQdS9ypxJ1L3KXEXUvcrcTdS9yjxD1L3KvEvUvcp8R9S9yvxP1LPKDEA0s8qMSDSzykxENLPKzEw0s8osQjSzyqxKNLPKbEY0s8rsTjSzyhxBNLtMSTSjy5xFNKPLXE00o8vcQzSjyzxEGJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2JfYlnlXh2ieeUeG6J55V4fokXlHhhiReVeHGJl5R4aYmXlXh5iVeUeGWJV5V4dYnXlHhtideVeH2JN5R4Y4k3lXhzibeUeGuJt5V4e4l3lHhniSNKHFniqBJHlzimxLEl3lXi3SXeU+K9Jd5X4v0lPlDigyU+VOLDJT5S4qMlPlbi4yU+UeKTJT5V4tMlPlPisyU+V+LzJb5Q4oslvlTiyyW+UuKrJb5W4uslvlHimyW+VeLbJb5T4rslvlfi+yV+UOKHJX5U4sclflLipyV+VuLnJX5R4pclflXi1yV+U+K3JX5X4vcl/lDijyX+VOLPJf5S4q8l/lbi7yX+UeKfJf5V4t8l/lPivyX+9z+eKxynwnErHK/C8SucoMIJK5yowokrnKTCSSucrMLJK5yiwikrnKrCqSucpsJpK5yuwukrnKHCGSucqcKZK5ylwlkrnK3C2Suco8I5Kxxa4VwVzl3hPBXOW+F8Fc5f4QIVLljhQhUuXOEiFS5a4WIVLl7hEhUuWeFSFVLh0hUuU+GyFS5X4fIVrlDhihWuVOHKFa5S4aoVrlbh6hWuUeGwCtescK0K165wnQrXrXC9CtevcIMKN6xwowo3rnCTCjetcLMKN69wiwq3rHCrCreucHiF21S4bYXbVbh9hTtUuGOFO1W4c4W7VLhrhbtVuHuFe1S4Z4V7Vbh3hftUuG+F+1W4f4UHVHhghQdVeHCFh1R4aIWHVXh4hUdUeGSFR1V4dIXHVHhshcdVeHyFJ1R4YoVWeFKFJ1d4SoWnVnhahadXeEaFZ1Y4qDCoMKwwqjCuMKkwrTCrMK+wqLCssKqwrrCpsK2wq7Cv8KwKz67wnArPrfC8Cs+v8IIKL6zwogovrvCSCi+t8LIKL6/wigqvrPCqCq+u8JoKr63wugqvr/CGCm+s8KYKb67wlgpvrfC2Cm+v8I4K76xwRIUjKxxV4egKx1Q4tprw/x1yh+A9Fd5b4X0V3l/hAxU+WOFDFT5c4SMVPlrhYxU+XuETFT5Z4VMVPl3hMxU+W+FzFT5f4QsVvljhSxW+XOErFb5a4WsVvl7hGxW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4V8V/l3hPxX+W+F/FQ6pcZwax61xvBrHr3GCGiescaIaJ65xkhonrXGyGievcYoap6xxqhqnrnGaGqetcboap69xhhpnrHGmGmeucZYaZ61xthpnr3GOGuescWiNc9U4d43z1DhvjfPVOH+NC9S4YI0L1bhwjYvUuGiNi9W4eI1L1LhkjUvVSI1L17hMjcvWuFyNy9e4Qo0r1rhSjSvXuEqNq9a4Wo2r17hGjcNqXLPGtWpcu8Z1aly3xvVqXL/GDWrcsMaNaty4xk1q3LTGzWrcvMYtatyyxq1q3LrG4TVuU+O2NW5X4/Y17lDjjjXuVOPONe5S46417lbj7jXuUeOeNe5V49417lPjvjXuV+P+NR5Q44E1HlTjwTUeUuOhNR5WM2zIkCEeUeORNR5V49E1HlPjsTUeV+PxNZ5Q44k1WuNJNZ5c4yk1nlrjaTWeXuMZNZ5Z46DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsazajy7xnNqPLfG82o8v8YLarywxotqvLjGS2q8tMbLary8xitqvLLGq2q8usZrary2xutqvL7GG2q8scabary5xltqvLXG22q8vcY7aryzxhE1jqxxVI2jaxxT49ga76rx7hrvqfHeGu+r8f4aH6jxwRofqvHhGh+p8dEaH6vx8RqfqPHJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6nx0xo/q/HzGr+o8csav6rx6xq/qfHbGr+r8fsaf6jxxxp/qvHnGn+p8dcaf6vx9xr/qPHPGv+q8e8a/6nx3xr/q3FIg+M0OG6D4zU4foMTNDhhgxM1OHGDkzQ4aYOT/c8bMmTIFA1O2eBUDU7d4DQNTtvgdA1O3+AMDc7Y4EwNztzgLA3O2uBsDc7e4BwNztng0AbnanDuBudpcN4G52tw/gYXaHDBBhdqcOEGF2lw0QYXa3DxBpdocMkGl2qQBpducJkGl21wuQaXb3CFBldscKUGV25wlQZXbXC1BldvcI0GhzW4ZoNrNbh2g+s0uG6D6zXjDlm/wQ0a3LDBjRrcuMFNGty0wc0a3LzBLRrcssGtGty6weENbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ3a4EkNntzgKQ2e2uBpDZ7e4BkNntngoMGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wbMaPLvBcxo8t8HzGjy/wQsavLDBixq8uMFLGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsavLPBEQ2ObHBUg6MbHNPg2AbvavDuBu9p8N4G72vw/gYfaPDBBh9q8OEGH2nw0QYfa/DxBp9o8MkGn2rw6QafafDZBp9r8PkGX2jwxQZfavDlBl9p8NUGX2vw9QbfaPDNBt9q8O0G32nw3Qbfa/D9Bj9o8MMGP2rw4wY/afDTBj9r8PMGv2jwywa/avDrBr9p8NsGv2vw+wZ/aPDHBn9q8OcGf2nw1wZ/a/D3Bv9o8M8G/2rw7wb/afDfBv9rcEiL47Q4bovjtTh+ixO0OGGLE7U4cYuTtDhpi5O1OHmLU7Q4ZYtTtTh1i9O0OG2L07U4fYsztCOGztjiTC3O3OIsLc7a4mwtzt7iHC3O2eLQFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2hxyRaXapEWl25xmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRaHtbhmi2u1uHaL67S4bovrtbh+ixu0uGGLG7W4cYubtLhpi5u1uHmLW7S4ZYtbtbh1i8Nb3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1u0xZNaPLnFU1o8tcXTWjy9xTNaPLPFQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i2e1eHaL57R4bovntXh+ixe0eGGLF7V4cYuXtHhpi5e1eHmLV7R4ZYtXtXh1i9e0eG2L17V4fYs3tHhjize1eHOLt7R4a4u3tXh7i3e0eGeLI1oc2eKoFke3OKbFsS3e1eLdLd7T4r0t3tfi/S0+0OKDLT7U4sMtPtLioy0+1uLjLT7R4pMtPtXi0y0+0+KzLT7X4vMtvtDiiy2+1OLLLb7S4qstvtbi6y2+0eKbLb7V4tstvtPiuy2+1+L7LX7Q4octftTixy1+0uKnLX7W4uctftHily1+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4p8t/tXi3y3+0+K/Lf7X4pAOx+lw3A7H63D8DifocMIOJ+pw4g4n6XDSDifrcPIOp+hwyg6n6nDqDqfpcNoOp+tw+g5n6HDGDmfqcOYOZ+lw1g5n63D2DufocM4Oh3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh0t2uFSHdLh0h8t0uGyHy3W4fIcrdLhihyt1uHKHq3S4aoerdbh6h2t0OKzDNTtcq8O1O1ynw3U7XK/D9TvcoMMNO9yow4073KTDTTvcrMPNO9yiwy073KrDrTsc3uE2HW7b4XYdbt/hDh3u2OFOHe7c4S4d7trhbh3u3uEeHe7Z4V4d7t3hPh3u2+F+He7f4QEdHtjhQR0e3OEhHR7a4WEdHt7hER0e2eFRHR7d4TEdHtvhcR0e3+EJHZ7YoR2e1OHJHZ7S4akdntbh6R2e0eGZHQ46DDoMO4w6jDtMOkw7zDrMOyw6LDusOqw7bDpsO+w67Ds8q8OzOzynw3M7PK/D8zu8oMMLO7yow4s7vKTDSzu8rMPLO7yiwys7vKrDqzu8psNrO7yuw+s7vKHDGzu8qcObO7ylw1s7vK3D2zu8o8M7OxzR4cgOR3U4usMxHY7t8K4O7+7wng7v7fC+Du/v8IEOH+zwoQ4f7vCRDh/t8LEOH+/wiQ6f7PCpDp/u8JkOn+3wuQ6f7/CFDl/s8KUOX+7wlQ5f7fC1Dl/v8I0O3+zwrQ7f7vCdDt/t8L0O3+/wgw4/7PCjDj/u8JMOP+3wsw4/7/CLDr/s8KsOv+7wmw6/7fC7Dr/v8IcOf+zwpw5/7vCXDn/t8LcOf+/wjw7/7PCvDv/u8J8O/+3wvw6H9DhOj+P2OF6P4/c4QY8T9jhRjxP3OEmPk/Y4WY+T9zhFj1P2OFWPU/c4TY/T9jhdj9P3OEOPM/Y4U48z9zhLj7P2OFuPs/c4R49z9ji0x7l6nLvHeXqct8f5epy/xwV6XLDHhXpcuMdFely0x8V6XLzHJXpcsseleqTHpXtcpsdle1yux+V7XKHHFXtcqceVe1ylx1V7XK3H1Xtco8dhPa7Z41o9rt3jOj2u2+N6Pa7f4wY9btjjRj1u3OMmPW7a42Y9bt7jFj1u2eNWPW7d4/Aet+lx2x6363H7Hnfoccced+px5x536XHXHnfrcfce9+hxzx736nHvHvfpcd8e9+tx/x4P6PHAHg/q8eAeD+nx0B4P6/HwHo/o8cgej+rx6B6P6fHYHo/r8fgeT+jxxB7t8aQeT+7xlB5P7fG0Hk/v8Ywez+xx0GPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12Pf41k9nt3jOT2e2+N5PZ7f4wU9XtjjRT1e3OMlPV7a42U9Xt7jFT1e2eNVPV7d4zU9XtvjdT1e3+MNPd7Y40093tzjLT3e2uNtPd7e4x093tnjiB5H9jiqx9E9julxbI939Xh3/3+ItAcmvg9AwaJpU9u23d7atm3b9q1t/n82aptJw9q2bRs783Z33uc4B4cNcPgAHxngiAGOHOCoAY4e4JgBjh3gowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLAX45wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D/CPAf45wL8G+PcA/xngvwP8b4BDAhwnwHEDHBrgeAGOH+AEAU4Y4EQBThzgJAFOGuBkAU4e4BQBThngVAFOHeA0AU4b4HQBTh/gDAHOGOBMAc4c4CwBzhrgbAHOHuAcAc4Z4FwBzh3gPAHOG+B8Ac4f4AIBLhjgQgEuHOAiAS4a4GIBLh7gEgEuGeBSARLg0gEuE+CyAS4X4PIBrhDgigGuFODKAa4S4KoBrhbg6gGuEeCaAa4V4NoBrhPgugGuF+D6AW4Q4IYBbhTgxgFuEuCmAW4W4OYBbhHglgFuFeDWAW4T4LYBbhfg9gHuEOCOAe4U4M4B7hLgrgHuFuDuAe4R4J4B7hXg3gHuE+C+Ae4X4P4BHhDggQEeFODBAR4S4KEBHhbg4QEeEeCRAR4V4NEBHhPgsQEeF+DxAZ4Q4IkBnhTgyQEa4CkBnhrgaQGeHuAZAZ4Z4FkBnh3gOQGeG+B5AZ4f4AUBXhjgRQFeHOAlAV4a4GUBXh7gFQFeGeBVAV4d4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7ArwzwLsCvDvAewK8N8D7Arw/wAcCfDDAhwJ8OMBhAQ4P8JEARwQ4MsBRAY4OcEyAYwN8NMDHAnw8wCcCfDLApwJ8OsBnAnw2wOcCfD7AFwJ8McCXAnw5wFcCfDXA1wJ8PcA3AnwzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAvwL8O8B/Avw3wP8CHBLiOCEO/X86Ml6I44c4QYgThjhRiBOHOEmIk4Y4WYiThzhFiFOGOFWIU4c4TYjThjhdiNOHOEOIM4Y4U4gzhzhLiLOGOFuIs4c4R4hzhjhXiHOHOE+I84Y4X4jzh7hAiAuGuFCIC4e4SIiLhrhYiIuHuESIS4a4VIiEuHSIy4S4bIjLhbh8iCuEuGKIK4W4coirhLhqiKuFuHqIa4S4Zohrhbh2iOuEuG6I64W4fogbhLhhiBuFuHGIm4S4aYibhbh5iFuEuGWIW4W4dYjbhLhtiNuFuH2IO4S4Y4g7hbhziLuEuGuIu4W4e4h7hLhniHuFuHeI+4S4b4j7hbh/iAeEeGCIB4V4cIiHhHhoiIeFeHiIR4R4ZIhHhXh0iMeEeGyIx4V4fIgnhHhiiCeFeHKIhnhKiKeGeFqIp4d4RohnhnhWiGeHeE6I54Z4Xojnh3hBiBeGeFGIF4d4SYiXhnhZiJeHeEWIV4Z4VTh0yNUhDkIMQgxDjEKMQ0xCTEPMQsxDLEIsQ6xCrENsQmxD7ELsQ7wmxGtDvC7E60O8IcQbQ7wpxJtDvCXEW0O8LcTbQ7wjxDtDvCvEu0O8J8R7Q7wvxPtDfCDEB0N8KMSHQxwW4vBw4v+xwBEhjgxxVIijQxwT4tgQHw3xsRAfD/GJEJ8M8akQnw7xmRCfDfG5EJ8P8YUQXwzxpRBfDvGVEF8N8bUQXw/xjRDfDPGtEN8O8Z0Q3w3xvRDfD/GDED8M8aMQPw7xkxA/DfGzED8P8YsQvwzxqxC/DvGbEL8N8bsQvw/xhxB/DPGnEH8O8ZcQfw3xtxB/D/GPEP8M8a8Q/w7xnxD/DfG/EIdEOE6E40Y4NMLxIhw/wgkinDDCiSKcOMJJIpw0wskinDzCKSKcMsKpIpw6wmkinDbC6SKcPsIZIpwxwpkinDnCWSKcNcLZIpw9wjkinDPCuSKcO8J5Ipw3wvkinD/CBSJcMMKFIlw4wkUiXDTCxSJcPMIlIlwywqUiJMKlI1wmwmUjXC7C5SNcIcIVI1wpwpUjXCXCVSNcLcLVI1wjwjUjXCvCtSNcJ8J1I1wvwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM8JsJjIzwuwuMjPCHCEyM8KcKTIzTCUyI8NcLTIjw9wjMiPDPCsyI8O8JzIjw3wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hNdEeG2E10V4fYQ3RHhjhDdFeHOEt0R4a4S3RXh7hHdEeGeEd0V4d4T3RHhvhPdFeH+ED0T4YIQPRfhwhMMiHB7hIxGOiHBkhKMiHB3hmAjHRvhohI9F+HiET0T4ZIRPRfh0hM9E+GyEz0X4fIQvRPhihC9F+HKEr0T4aoSvRfh6hG9E+GaEb0X4doTvRPhuhO9F+H6EH0T4YYQfRfhxhJ9E+GmEn0X4eYRfRPhlhF9F+HWE30T4bYTfRfh9hD9E+GOEP0X4c4S/RPhrhL9F+HuEf0T4Z4R/Rfh3hP9E+G+E/0U4JMZxYhw3xqExjhfj+DFOEOOEMU4U48QxThLjpDFOFuPkMU4R45QxThXj1DFOE+O0MU4X4/QxzhDjjDHOFOPMMc4S46wxzhbj7DHOEeOcMc4V49wxzhPjvDHOF+P8MS4Q44IxLhTjwjEuEuOiMS4W4+IxLhHjkjEuFSMxLh3jMjEuG+NyMS4f4woxrhjjSjGuHOMqMa4a42oxrh7jGjGuGeNaMa4d4zoxrhvjejGuH+MGMW4Y40YxbhzjJjFuGuNmMW4e4xYxbhnjVjFuHeM2MW4b43Yxbh/jDjHuGONOMe4c4y4x7hrjbjHuHuMeMe4Z414x7h3jPjHuG+N+Me4f4wExHhjjQTEeHOMhMR4a42ExHh7jETEeGeNRMR4d4zExHhvjcTEeH+MJMZ4Y40kxnhyjMZ4S46kxnhbj6TGeEeOZMZ4V49kxnhPjuTGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTFeFePVMQ5iDGIMY4xijGNMYkxjzGLMYyxiLGOsYqxjbGJsY+xi7GO8JsZrY7wuxutjvCHGG2O8KcabY7wlxltjvC3G22O8I8Y7Y7wrxrtjvCfGe2O8L8b7Y3wgxgdjfCjGh2McFuPwGB+JcUSMI2McFePoGMfEODbGR2N8LMbHY3wixidjfCrGp2N8JsZnY3wuxudjfCHGF2N8KcaXY3wlxldjfC3G12N8I8Y3Y3wrxrdjfCfGd2N8L8b3Y/wgxg9j/CjGj2P8JMZPY/wsxs9j/CLGL2P8KsavY/wmxm9j/C7G72P8IcYfY/wpxp9j/CXGX2P8LcbfY/wjxj9j/CvGv2P8J8Z/Y/wvxiEJjpPguAkOTXC8BMdPcIIEJ0xwogQnTnCSBCdNcLIEJ09wigSnTHCqBKdOcJoEp01wugSnT3CGBGdMcKYEZ05wlgRnTXC2BGdPcI4E50xwrgTnTnCeBOdNcL4E509wgQQXTHChBBdOcJEEF01wsQQXT3CJBJdMcKkESXDpBJdJcNkEl0tw+QRXSHDFBFdKcOUEV0lw1QRXS3D1BNdIcM0E10pw7QTXSXDdBNdLcP0EN0hwwwQ3SnDjBDdJcNMEN0tw8wS3SHDLBLdKcOsEt0lw2wS3S3D7BHdIcMcEd0pw5wR3SXDXBHdLcPcE90hwzwT3SnDvBPdJcN8E90tw/wQPSPDABA9K8OAED0nw0AQPS/DwBI9I8MgEj0rw6ASPSfDYBI9L8PgET0jwxARPSvDkBE3wlARPTfC0BE9P8IwEz0zwrATPTvCcBM9N8LwEz0/wggQvTPCiBC9O8JIEL03wsgQvT/CKBK9M8KoEr05wkGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2Cf4DUJXpvgdQlen+ANCd6Y4E0J3pzgLQnemuBtCd6e4B0J3pngXQneneA9Cd6b4H0J3p/gAwk+mOBDCT6c4LAEhyf4SIIjEhyZ4KgERyc4JsGxCT6a4GMJPp7gEwk+meBTCT6d4DMJPpvgcwk+n+ALCb6Y4EsJvpzgKwm+muBrCb6e4BsJvpngWwm+neA7Cb6b4HsJvp/gBwl+mOBHCX6c4CcJfprgZwl+nuAXCX6Z4FcJfp3gNwl+m+B3CX6f4A8J/pjgTwn+nOAvCf6a4G8J/p7gHwn+meBfCf6d4D8J/pvgfwkOSXGcFMdNcWiK46U4fooTpDhhihOlOHGKk6Q4aYqTpTh5ilOkOGWKU6U4dYrTpDhtitOlOH2KM6Q4Y4ozpThzirOkOGuKs6U4e4pzpDhninOlOHeK86Q4b4rzpTh/igukuGCKC6W4cIqLpLhoiouluHiKS6S4ZIpLpUiKS6e4TIrLprhcisunuEKKK6a4Uoorp7hKiqumuFqKq6e4RoprprhWimunuE6K66a4Xorrp7hBihumuFGKG6e4SYqbprhZipunuEWKW6a4VYpbp7hNitumuF2K26e4Q4o7prhTijunuEuKu6a4W4q7p7hHinumuFeKe6e4T4r7prhfivuneECKB6Z4UIoHp3hIioemeFiKh6d4RIpHpnhUikeneEyKx6Z4XIrHp3hCiif+//aaoimekuKpKZ6W4ukpnpHimSmeleLZKZ6T4rkpnpfi+SlekOKFKV6U4sUpXpLipSleluLlKV6R4pUpXpXi1SkOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTvCbFa1O8LsXrU7whxRtTvCnFm1O8JcVbU7wtxdtTvCPFO1O8K8W7U7wnxXtTvC/F+1N8IMUHU3woxYdTHJbi8BQfSXFEiiNTHJXi6BTHpDg2xUdTfCzFx1N8IsUnU3wqxadTfCbFZ1N8LsXnU3whxRdTfCnFl1N8JcVXU3wtxddTfCPFN1N8K8W3U3wnxXdTfC/F91P8IMUPU/woxY9T/CTFT1P8LMXPU/wixS9T/CrFr1P8JsVvU/wuxe9T/CHFH1P8KcWfU/wlxV9T/C3F31P8I8U/U/wrxb9T/CfFf1P8L8UhGY6T4bgZDs1wvAzHz3CCDCfMcKIMJ85wkgwnzXCyDCfPcIoMp8xwqgynznCaDKfNcLoMp89whgxnzHCmDGfOcJYMZ81wtgxnz3CODOfMcK4M585wngznzXC+DOfPcIEMF8xwoQwXznCRDBfNcLEMF89wiQyXzHCpDMlw6QyXyXDZDJfLcPkMV8hwxQxXynDlDFfJcNUMV8tw9QzXyHDNDNfKcO0M18lw3QzXy3D9DDfIcMMMN8pw4ww3yXDTDDfLcPMMt8hwywy3ynDrDLfJcNsMt8tw+wx3yHDHDHfKcOcMd8lw1wx3y3D3DPfIcM8M98pw7wz3yXDfDPfLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMT8rw5AzN8JQMT83wtAxPz/CMDM/M8KwMz87wnAzPzfC8DM/P8IIML8zwogwvzvCSDC/N8LIML8/wigyvzPCqDK/OcJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+E1GV6b4XUZXp/hDRnemOFNGd6c4S0Z3prhbRnenuEdGd6Z4V0Z3p3hPRnem+F9Gd6f4QMZPpjhQxk+nOGwDIdn+EiGIzIcmeGoDEdnOCbDsRk+muFjGT6e4RMZPpnhUxk+neEzGT6b4XMZPp/hCxm+mOFLGb6c4SsZvprhaxm+nuEbGb6Z4VsZvp3hOxm+m+F7Gb6f4QcZfpjhRxl+nOEnGX6a4WcZfp7hFxl+meFXGX6d4TcZfpvhdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/Gf6b4X8ZDslxnBzHzXFojuPlOH6OE+Q4YY4T5ThxjpPkOGmOk+U4eY5T5DhljlPlOHWO0+Q4bY7T5Th9jjPkOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkuGSOS+VIjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOa+a4Vo5r57hOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5nhSjifnaI6n5HhqjqfleHqOZ+R4Zo5n5Xh2jufkeG6O5+V4fo4X5HhhjhfleHGOl+R4aY6X5Xh5jlfkeGWOV+V4dY6DHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPscr8nx2hyvy/H6HG/I8cYcb8rx5hxvyfHWHG/L8fYc78jxzhzvyvHuHO/J8d4c78vx/hwfyPHBHB/K8eEch+U4PMdHchyR48gcR+U4OscxOY7N8dEcH8vx8RyfyPHJHJ/K8ekcn8nx2Ryfy/H5HF/I8cUcX8rx5RxfyfHVHF/L8fUc38jxzRzfyvHtHN/J8d0c38vx/Rw/yPHDHD/K8eMcP8nx0xw/y/HzHL/I8cscv8rx6xy/yfHbHL/L8fscf8jxxxx/yvHnHH/J8dccf8vx9xz/yPHPHP/K8e8c/8nx3xz/y3FIgeMUOG6BQwscr8DxC5ygwAkLnKjAiQucpMBJC5yswMkLnKLAKQucqsCpC5ymwGkLnK7A6QucocAZC5ypwJkLnKXAWQucrcDZC5yjwDkLnKvAuQucp8B5C5yvwPkLXKDABQtcqMCFC1ykwEULXKzAxQtcosAlC1yqQApcusBlCly2wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tsDjCjy+wBMKPLHAkwo8uUALPKXAUws8rcDTCzyjwDMLPKvAsws8p8BzCzyvwPMLvKDACwu8qMCLC7ykwEsLvKzAywu8osArC7yqwKsLHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF3hNgdcWeF2B1xd4Q4E3FnhTgTcXeEuBtxZ4W4G3F3hHgXcWeFeBdxd4T4H3FnhfgfcX+ECBDxb4UIEPFziswOEFPlLgiAJHFjiqwNEFjilwbIGPFvhYgY8X+ESBTxb4VIFPF/hMgc8W+FyBzxf4QoEvFvhSgS8X+EqBrxb4WoGvF/hGgW8W+FaBbxf4ToHvFvhege8X+EGBHxb4UYEfF/hJgZ8W+FmBnxf4RYFfFvhVgV8X+E2B3xb4XYHfF/hDgT8W+FOBPxf4S4G/Fvhbgb8X+EeBfxb4V4F/F/hPgf8W+F+BQ0ocp8RxSxxa4ngljl/iBCVOWOJEJU5c4iQlTlriZCVOXuIUJU5Z4lQlTl3iNCVOW+J0JU5f4gwlzljiTCXOXOIsJc5a4mwlzl7iHCXOWeJcJc5d4jwlzlvifCXOX+ICJS5Y4kIlLlziIiUuWuJiJS5e4hIlLlniUiVS4tIlLlPisiUuV+LyJa5Q4oolrlTiyiWuUuKqJa5W4uolrlHimiWuVeLaJa5T4rolrlfi+iVuUOKGJW5U4sYlblLipiVuVuLmJW5R4pYlblXi1iVuU+K2JW5X4vYl7lDijiXuVOLOJe5S4q4l7lbi7iXuUeKeJe5V4t4l7lPiviXuV+L+JR5Q4oElHlTiwSUeUuKhJR5W4uElHlHikSUeVeLRJR5T4rElHlfi8SWeUOKJJZ5U4sklWuIpJZ5a4mklnl7iGSWeWeJZJZ5d4jklnlvieSWeX+IFJV5Y4kUlXlziJSVeWuJlJV5e4hUlXlniVSVeXeKgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7Ea0q8tsTrSry+xBtKvLHEm0q8ucRbSry1xNtKvL3EO0q8s8S7Sry7xHtKvLfE+0q8v8QHSnywxIdKfLjEYSUOL/GREkeUOLLEUSWOLnFMiWNLfLTEx0p8vMQnSnyyxKdKfLrEZ0p8tsTnSny+xBdKfLHEl0p8ucRXSny1xNdKfL3EN0p8s8S3Sny7xHdKfLfE90p8v8QPSvywxI9K/LjET0r8tMTPSvy8xC9K/LLEr0r8usRvSvy2xO9K/L7EH0r8scSfSvy5xF9K/LXE30r8vcQ/SvyzxL9K/LvEf0r8t8T/ShxS4TgVjlvh0ArHq3D8CieocMIKJ6pw4gonqXDSCiercPIKp6hwygqnqnDqCqepcNoKp6tw+gpnqHDGCmeqcOYKZ6lw1gpnq3D2CueocM4K56pw7grnqXDeCuercP4KF6hwwQoXqnDhChepcNEKF6tw8QqXqHDJCpeqkAqXrnCZCpetcLkKl69whQpXrHClCleucJUKV61wtQpXr3CNCtescK0K165wnQrXrXC9CtevcIMKN6xwowo3rnCTCjetcLMKN69wiwq3rHCrCreucJsKt61wuwq3r3CHCnescKcKd65wlwp3rXC3CnevcI8K96xwrwr3rnCfCvetcL8K96/wgAoPrPCgCg+u8JAKD63wsAoPr/CICo+s8KgKj67wmAqPrfC4Co+v8IQKT6zwpApPrtAKT6nw1ApPq/D0Cs+o8MwKz6rw7ArPqfDcCs+r8PwKL6jwwgovqvDiCi+p8NIKL6vw8gqvqPDKCq+q8OoKBxUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2FV5T4bUVXlfh9RXeUOGNFd5U4c0V3lLhrRXeVuHtFd5R4Z0V3lXh3RXeU+G9Fd5X4f0VPlDhgxU+VOHDFQ6rcHiFj1Q4osKRFY6qcHSFYyocW+GjFT5W4eMVPlHhkxU+VeHTFT5T4bMVPlfh8xW+UOGLFb5U4csVvlLhqxW+VuHrFb5R4ZsVvlXh2xW+U+G7Fb5X4fsVflDhhxV+VOHHFX5S4acVflbh5xV+UeGXFX5V4dcVflPhtxV+V+H3Ff5Q4Y8V/lThzxX+UuGvFf5W4e8V/lHhnxX+VeHfFf5T4b8V/lfhkBrHqXHcGofWOF6N49c4QY0T1jhRjRPXOEmNk9Y4WY2T1zhFjVPWOFWNU9c4TY3T1jhdjdPXOEONM9Y4U40z1zhLjbPWOFuNs9c4R41z1jhXjXPXOE+N89Y4X43z17hAjQvWuFCNC9e4SI2L1rhYjYvXuESNS9a4VI3UuHSNy9S4bI3L1bh8jSvUuGKNK9W4co2r1LhqjavVuHqNa9S4Zo1r1bh2jevUuG6N69W4fo0b1LhhjRvVuHGNm9S4aY2b1bh5jVvUuGX9v3dymxq3rXG7GrevcYcad6xxpxp3rnGXGnetcbcad69xjxr3rHGvGveucZ8a961xvxr3r/GAGg+s8aAaD67xkBoPrfGwGg+v8Ygaj6zxqBqPrvGYGo+t8bgaj6/xhBpPrPGkGk+u0RpPqfHUGk+r8fQaz6jxzBrPqvHsGs+p8dwaz6vx/BovqPHCGi+q8eIaL6nx0hovq/HyGq+o8coar6rx6hoHNQY1hjVGNcY1JjWmNWY15jUWNZY1VjXWNTY1tjV2NfY1XlPjtTVeV+P1Nd5Q44013lTjzTXeUuOtNd5W4+013lHjnTXeVePdNd5T47013lfj/TU+UOODNT5U48M1DqtxeI2P1DiixpE1jqpxdI1jahxb46M1Plbj4zU+UeOTNT5V49M1PlPjszU+V+PzNb5Q44s1vlTjyzW+UuOrNb5W4+s1vlHjmzW+VePbNb5T47s1vlfj+zV+UOOHNX5U48c1flLjpzV+VuPnNX5R45c1flXj1zV+U+O3NX5X4/c1/lDjjzX+VOPPNf5S4681/lbj7zX+UeOfNf5V4981/lPjvzX+V+OQBsdpcNwGhzY4XoPjNzhBgxM2OFGDEzc4SYOTNjhZg5M3OEWDUzY4VYNTNzhNg9M2OF2D0zc4Q4MzNjhTgzM3OEuDszY4W4OzNzhHg3M2OFeDczc4T4PzNjhfg/M3uECDCza4UIMLN7hIg4s2uFiDize4RINLNrhUgzS4dIPLNLhsg8s1uHyDKzS4YoMrNbhyg6s0uGqDqzW4eoNrNLhmg2s1uHaD6zS4boPrNbh+gxs0uGGDGzW4cYObNLhpg5s1uHmDWzS4ZYNbNbh1g9s0uG2D2zW4fYM7NLhjgzs1uHODuzS4a4O7Nbh7g3s0uGeDezW4d4P7NLhvg/s1uH+DBzR4YIMHNXhwg4c0eGiDhzV4eINHNHhkg0c1eHSDxzR4bIPHNXh8gyc0eGKDJzV4coM2eEqDpzZ4WoOnN3hGg2c2eFaDZzd4ToPnNnheg+c3eEGDFzZ4UYMXN3hJg5c2eFmDlzdD/+fQXtngVQ1e3eCgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7Baxq8tsHrGry+wRsavLHBmxq8ucFbGry1wdsavL3BOxq8s8G7Gry7wXsavLfB+xq8v8EHGnywwYcafLjBYQ0Ob/CRBkc0OLLBUQ2ObnBMg2MbfLTBxxp8vMEnGnyywacafLrBZxp8tsHnGny+wRcafLHBlxp8ucFXGny1wdcafL3BNxp8s8G3Gny7wXcafLfB9xp8v8EPGvywwY8a/LjBTxr8tMHPGvy8wS8a/LLBrxr8usFvGvy2we8a/L7BHxr8scGfGvy5wV8a/LXB3xr8vcE/Gvyzwb8a/LvBfxr8t8H/GhzS4jgtjtvi0BbHa3H8FidoccIWJ2px4hYnaXHSFidrcfIWp2hxyhananHqFqdpcdoWp2tx+hZnaHHGFmdqceYWZ2lx1hZna3H2Fudocc4W52px7hbnaXHeFudrcf4WF2hxwRYXanHhFhdpcdEWF2tx8RaXaHHJFpdqkRaXbnGZFpdtcbkWl29xhRZXbHGlFlducZUWV21xtRZXb3GNFtdsca0W125xnRbXbXG9FtdvcYMWN2xxoxY3bnGTFjdtcbMWN29xixa3bHGrFrducZsWt21xuxa3b3GHFndscacWd25xlxZ3bXG3FndvcY8W92xxrxb3bv/vR9+3xf1a3L/FA1o8sMWDWjy4xUNaPLTFw1o8vMUjWjyyxaNaPLrFY1o8tsXjWjy+xRNaPLHFk1o8uUVbPKXFU1s8rcXTWzyjxTNbPKvFs1s8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxUtbvKzFy1u8osUrW7yqxatbHLQYtBi2GLUYt5i0mLaYtZi3WLRYtli1WLfYtNi22LXYt3hNi9e2eF2L17d4Q4s3tnhTize3eEuLt7Z4W4u3t3hHi3e2eFeLd7d4T4v3tnhfi/e3+ECLD7b4UIsPtzisxeEtPtLiiBZHtjiqxdEtjmlxbIuPtvhYi4+3+ESLT7b4VItPt/hMi8+2+FyLz7f4QosvtvhSiy+3+EqLr7b4Wouvt/hGi2+2+FbLOEOGnOE7Lb7b4nstvt/iBy1+2OJHLX7c4ictftriZy1+3uIXLX7Z4lctft3iNy1+2+J3LX7f4g8t/tjiTy3+3OIvLf7a4m8t/t7iHy3+2eJfLf7d4j8t/tvify0O6XCcDsftcGiH43U4focTdDhhhxN1OHGHk3Q4aYeTdTh5h1N0OGWHU3U4dYfTdDhth9N1OH2HM3Q4Y4czdThzh7N0OGuHs3U4e4dzdDhnh3N1OHeH83Q4b4fzdTh/hwt0uGCHC3W4cIeLdLhoh4t1uHiHS3S4ZIdLdUiHS3e4TIfLdrhch8t3uEKHK3a4Uocrd7hKh6t2uFqHq3e4RodrdrhWh2t3uE6H63a4Xofrd7hBhxt2uFGHG3e4SYebdrhZh5t3uEWHW3a4VYdbd7hNh9t2uF2H23e4Q4c7drhThzt3uEuHu3a4W4e7d7hHh3t2uFeHe3e4T4f7drhfh/t3eECHB3Z4UIcHd3hIh4d2eFiHh3d4RIdHdnhUh0d3eEyHx3Z4XIfHd3hChyd2eFKHJ3doh6d0eGqHp3V4eodndHhmh2d1eHaH53R4bofndXh+hxd0eGGHF3V4cYeXdHhph5d1eHmHV3R4ZYdXdXh1h4MOgw7DDqMO4w6TDtMOsw7zDosOyw6rDusOmw7bDrsO+w6v6fDaDq/r8PoOb+jwxg5v6vDmDm/p8NYOb+vw9g7v6PDODu/q8O4O7+nw3g7v6/D+Dh/o8MEOH+rw4Q6HdTi8w0c6HNHhyA5HdTi6wzEdju3w0Q4f6/DxDp/o8MkOn+rw6Q6f6fDZDp/r8PkOX+jwxQ5f6vDlDl/p8NUOX+vw9Q7f6PDNDt/q8O0O3+nw3Q7f6/D9Dj/o8MMOP+rw4w4/6fDTDj/r8PMOv+jwyw6/6vDrDr/p8NsOv+vw+w5/6PDHDn/q8OcOf+nw1w5/6/D3Dv/o8M8O/+rw7w7/6fDfDv/rcEiP4/Q4bo9Dexyvx/F7nKDHCXucqMeJe5ykx0l7nKzHyXucoscpe5yqx6l7nKbHaXucrsfpe5yhxxl7nKnHmXucpcdZe5ytx9l7nKPHOXucq8e5e5ynx3l7nK/H+XtcoMcFe1yox4V7XKTHRXtcrMfFe1yixyV7XKpHely6x2V6XLbH5XpcvscVelyxx5V6XLnHVXpctcfVely9xzV6XLPHtXpcu8d1ely3x/V6XL/HDXrcsMeNety4x0163LTHzXrcvMctetyyx6163LrHbXrctsftety+xx163LHHnXrcucddety1x9163L3HPXrcs8e9ety7x3163LfH/Xrcv8cDejywx4N6PLjHQ3o8tMfDejy8xyN6PLLHo3o8usdjejy2x+N6PL7HE3o8sceTejy5R3s8pcdTezytx9N7PKPHM3s8q8ezezynx3N7PK/H83u8oMcLe7yox4t7vKTHS3u8rMfLe7yixyt7vKrHq3sc9Bj0GPYY9Rj3mPSY9pj1mPdY9Fj2WPVY99j02PbY9dj3eE2P1/Z4XY/X93hDjzf2eFOPN/d4S4+39nhbj7f3eEePd/Z4V49393hPj/f2eF+P9/f4QI8P9vhQjw/3OKzH4T0+0uOIHkf2OKrH0T2O6XHs/2HhHJs4Pxgdutt2t7Zt89S2bdu2T23bxv9no7aWtW3bxp1n5n6DJJNM3p0BjhjgyAGOGuDoAY4Z4NgBPj3AZwb47ACfG+DzA3xhgC8O8KUBvjzAVwb46gBfG+DrA3xjgG8O8K0Bvj3Adwb47gDfG+D7A/xggB8O8KMBfjzATwb46QA/G+DnA/xigF8O8KsBfj3Abwb47QC/G+D3A/xhgD8O8KcB/jzAXwb46wB/G+DvA/xjgH8O8K8B/j3Afwb47wD/G+CQAIcGOE6A4wY4XoDDAhwe4PgBThDghAFOFODEAU4S4KQBThbg5AFOEeCUAU4V4NQBThPgtAFOF+D0Ac4Q4IwBzhTgzAHOEuCsAc4W4OwBzhHgnAHOFeDcAc4T4LwBzhfg/AEuEOCCAS4U4MIBLhLgogEuFuDiAS4RIAEuGeBSAS4d4DIBLhvgcgEuH+AKAa4Y4EoBrhzgKgGuGuBqAa4e4BoBrhngWgGuHeA6Aa4b4HoBrh/gBgFuGOBGAW4c4CYBbhrgZgFuHuAWAW4Z4FYBbh3gNgFuG+B2AW4f4A4B7hjgTgHuHOAuAe4a4G4B7h7gHgHuGeBeAe4d4D4B7hvgfgHuH+ABAR4Y4EEBHhzgIQEeGuBhAR4e4BEBHhngUQEeHeAxAR4b4HEBHh/gCQGeGKABnhTgyQGeEuCpAZ4W4OkBnhHgmQGeFeDZAZ4T4LkBnhfg+QFeEOCFAV4U4MUBXhLgpQFeFuDlAV4R4JUBXhXg1QFeE+C1AV4X4PUB3hDgjQHeFODNAd4S4K0B3hbg7QHeEeCdAQ4CDAIMA4wCjANMAkwDzALMAywCLAOsAqwDbAJsA+wC7AO8K8C7A7wnwHsDvC/A+wN8IMAHA3wowIcDfCTARwN8LMDHA3wiwCcDfCrAEQGODHBUgKMDHBPg2ACfDvCZAJ8N8LkAnw/whQBfDPClAF8O8JUAXw3wtQBfD/CNAN8M8K0A3w7wnQDfDfC9AN8P8IMAPwzwowA/DvCTAD8N8LMAPw/wiwC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8A/wzwrwD/DvCfAP8N8L8Ah4Q4NMRxQhw3xPFCHBbi8BDHD3GCECcMcaIQJw5xkhAnDXGyECcPcYoQpwxxqhCnDnGaEKcNcboQpw9xhhBnDHGmEGcOcZYQZw1xthBnD3GOEOcMca4Q5w5xnhDnDXG+EOcPcYEQFwxxoRAXDnGREBcNcbEQFw9xiRAJcckQlxqKS4e4TIjLhrhciMuHuEKIK4a4Uogrh7hKiKuGuFqIq4e4RohrhrhWiGuHuE6I64a4Xojrh7hBiBuGuFGIG4e4SYibhrhZiJuHuEWIW4a4VYhbh7hNiNuGuF2I24e4Q4g7hrhTiDuHuEuIu4a4W4i7h7hHiHuGuFeIe4e4T4j7hrhfiPuHeECIB4Z4UIgHh3hIiIeGeFiIh4d4RIhHhnhUiEeHeEyIx4Z4XIjHh3hCiCeGaIgnhXhyiKeEeGqIp4V4eohnhHhmiGeFeHaI54R4bojnhXh+iBeEeGGIF4V4cYiXhHhpiJeFeHmIV4R4ZYhXhXh1iNeEeG2I14V4fYg3hHhjiDeFeHOIt4R4a4i3hXh7iHeEeGeIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EO8K8e4Q7wnx3hDvC/H+EB8I8cEQHwrx4RAfCfHREB8L8fEQnwjxyRCfCnFEiCNDHBXi6BDHhDg2xKdDfCbEZ0N8LsTnQ3whxBdDfCnEl0N8JcRXQ3wtxNdDfCPEN0N8K8S3Q3wnxHdDfC/E90P8IMQPQ/woxI9D/CTET0P8LMTPQ/wixC9D/CrEr0P8JsRvQ/wuxO9D/CHEH0P8KcSfQ/wlxF9D/C3E30P8I8Q/Q/wrxL9D/CfEf0P8L8QhEQ6NcJwIx41wvAiHRTg8wvEjnCDCCSOcKMKJI5wkwkkjnCzCySOcIsIpI5wqwqkjnCbCaSOcLsLpI5whwhkjnCnCmSOcJcJZI5wtwtkjnCPCOSOcK8K5I5wnwnkjnC/C+SNcIMIFI1wowoUjXCTCRSNcLMLFI1wiQiJcMsKlIlw6wmUiXDbC5SJcPsIVIlwxwpUiXDnCVSJcNcLVIlw9wjUiXDPCtSJcO8J1Ilw3wvUiXD/CDSLcMMKNItw4wk0i3DTCzSLcPMItItwywq0i3DrCbSLcNsLtItw+wh0i3DHCnSLcOcJdItw1wt0i3D3CPSLcM8K9Itw7wn0i3DfC/SLcP8IDIjwwwoMiPDjCQyI8NMLDIjw8wiMiPDLCoyI8OsJjIjw2wuMiPD7CEyI8MUIjPCnCkyM8JcJTIzwtwtMjPCPCMyM8K8KzIzwnwnMjPC/C8yO8IMILI7wowosjvCTCSyO8LMLLI7wiwisjvCrCqyO8JsJrI7wuwusjvCHCGyO8KcKbI7wlwlsjvC3C2yO8I8I7IxxEGEQYRhhFGEeYRJhGmEWYR1hEWEZYRVhH2ETYRthF2Ed4V4R3R3hPhPdGeF+E90f4QIQPRvhQhA9H+EiEj0b4WISPR/hEhE9G+FSEIyIcGeGoCEdHOCbCsRE+HeEzET4b4XMRPh/hCxG+GOFLEb4c4SsRvhrhaxG+HuEbEb4Z4VsRvh3hOxG+G+F7Eb4f4QcRfhjhRxF+HOEnEX4a4WcRfh7hFxF+GeFXEX4d4TcRfhvhdxF+H+EPEf4Y4U8R/hzhLxH+GuFvEf4e4R8R/hnhXxH+HeE/Ef4b4X8RDolxaIzjxDhujOPFOCzG4TGOH+MEMU4Y40QxThzjJDFOGuNkMU4e4xQxThnjVDFOHeM0MU4b43QxTh/jDDHOGONMMc4c4ywxzhrjbDHOHuMcMc4Z41wxzh3jPDHOG+N8Mc4f4wIxLhjjQjEuHOMiMS4a42IxLh7jEjES45IxLhXj0jEuE+Oy//MzBJePcYUYV4xxpRhXjnGVGFeNcbUYV49xjRjXjHGtGNeOcZ0Y141xvRjXj3GDGDeMcaMYN45xkxg3jXGzGDePcYsYt4xxqxi3jnGbGLeNcbsYt49xhxh3jHGnGHeOcZcYd41xtxh3j3GPGPeMca8Y945xnxj3jXG/GPeP8YAYD4zxoBgPjvGQGA+N8bAYD4/xiBiPjPGoGI+O8ZgYj43xuBiPj/GEGE+M0RhPivHkGE+J8dQYT4vx9BjPiPHMGM+K8ewYz4nx3BjPi/H8GC+I8cIYL4rx4hgvifHSGC+L8fIYr4jxyhivivHqGK+J8doYr4vx+hhviPHGGG+K8eYYb4nx1hhvi/H2GO+I8c4YBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2Md4V490x3hPjvTHeF+P9MT4Q44MxPhTjwzE+EuOjMT4W4+MxPhHjkzE+FeOIGEfGOCrG0TGOiXFsjE/H+EyMz8b4XIzPx/hCjC/G+FKML8f4SoyvxvhajK/H+EaMb8b4Voxvx/hOjO/G+F6M78f4QYwfxvhRjB/H+EmMn8b4WYyfx/hFjF/G+FWMX8f4TYzfxvhdjN/H+EOMP8b4U4w/x/hLjL/G+FuMv8f4R4x/xvhXjH/H+E+M/8b4X4xDEhya4DgJjpvgeAkOS3B4guMnOEGCEyY4UYITJzhJgpMmOFmCkyc4RYJTJjhVglMnOE2C0yY4XYLTJzhDgjMmOFOCMyc4S4KzJjhbgrMnOEeCcyY4V4JzJzhPgvMmOF+C8ye4QIILJrhQggsnuEiCiya4WIKLJ7hEgiS4ZIJLJbh0gsskuGyCyyW4fIIrJLhigisluHKCqyS4aoKrJbh6gmskDJliyBDXSnDtBNdJcN0E10tw/QQ3SHDDBDdKcOMEN0lw0wQ3S3DzBLdIcMsEt0pw6wS3SXDbBLdLcPsEd0hwxwR3SnDnBHdJcNcEd0tw9wT3SHDPBPdKcO8E90lw3wT3S3D/BA9I8MAED0rw4AQPSfDQBA9L8PAEj0jwyASPSvDoBI9J8NgEj0vw+ARPSPDEBE3wpARPTvCUBE9N8LQET0/wjATPTPCsBM9O8JwEz03wvATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTvCaBK9N8LoEr0/whgRvTPCmBG9O8JYEb03wtgRvT/COBO9McJBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn+BdCd6d4D0J3pvgfQnen+ADCT6Y4EMJPpzgIwk+muBjCT6e4BMJPpngUwmOSHBkgqMSHJ3gmATHJvh0gs8MH+KzCT6X4PMJvpDgiwm+lODLCb6S4KsJvpbg6wm+keCbCb6V4NsJvpPguwm+l+D7CX6Q4IcJfpTgxwl+kuCnCX6W4OcJfpHglwl+leDXCX6T4LcJfpfg9wn+kOCPCf6U4M8J/pLgrwn+luDvCf6R4J8J/pXg3wn+k+C/Cf6X4JAUh6Y4TorjpjheisNSHJ7i+ClOkOKEKU6U4sQpTpLipClOluLkKU6R4pQpTpXi1ClOk+K0KU6X4vQpzpDijCnOlOLMKc6S4qwpzpbi7CnOkeKcKc6V4twpzpPivCnOl+L8KS6Q4oIpLpTiwikukuKiKS6W4uIpLpEiKS6Z4lIpLp3iMikum+JyKS6f4goprpjiSimunOIqKa6a4moprp7iGimumeJaKa6d4joprpvieimun+IGKW6Y4kYpbpziJilumuJmKW6e4hYpbpniViluneI2KW6b4nYpbp/iDinumOJOKe6c4i4p7pribinunuIeKe6Z4l4p7p3iPinum+J+Ke6f4gEpHpjiQSkenOIhKR6a4mEpHp7iESkemeJRKR6d4jEpHpvicSken+IJKZ6YoimelOLJKZ6S4qkpnpbi6SmekeKZKZ6V4tkpnpPiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4p0pDlIMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsU7wrxbtTvCfFe1O8L8X7U3wgxQdTfCjFh1N8JMVHU3wsxcdTfCLFJ1N8KsURKY5McVSKo1Mck+LYFJ9O8ZkUn03xuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9M8asUv07xmxS/TfG7FL9P8YcUf0zxpxR/TvGXFH9N8bcUf0/xjxT/TPGvFP9O8Z8U/03xvxSHZDg0w3EyHDfD8TIcluHwDMfPcIIMJ8xwogwnznCSDCfNcLIMJ89wigynzHCqDKfOcJoMp81wugynz3CGDGfMcKYMZ85wlgxnzXC2DGfPcI4M58xwrgznznCeDOfNcL4M589wgQwXzHChDBfOcJEMF81wsQwXz3CJDMlwyQyXynDpDJfJcNkMl8tw+QxXyHDFDFfKcOUMV8lw1QxXy3D1DNfIcM0M18pw7QzXyXDdDNfLcP0MN8hwwww3ynDjDDfJcNMMN8tw8wy3yHDLDLfKcOsMt8lw2wy3y3D7DHfIcMcMd8pw5wx3yXDXDHfLcPcM98hwzwz3ynDvDPfJcN8M98tw/wwPyPDADA/K8OAMD8nw0AwPy/DwDI/I8MgMj8rw6AyPyfDYDI/L8PgMT8jwxAzN8KQMT87wlAxPzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JIML83wsgwvz/CKDK/M8KoMr87wmgyvzfC6DK/P8IYMb8zwpgxvzvCWDG/N8LYMb8/wjgzvzHCQYZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ/hXRneneE9Gd6b4X0Z3p/hAxk+mOFDGT6c4SMZPprhYxk+nuETGT6Z4VMZjshwZIajMhyd4ZgMx2b4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobvZfh+hh9k+GGGH2X4cYafZPhphp9l1JMPGeIXGX6Z4VcZfp3hNxl+m+F3GX6f4Q8Z/pjhTxn+nOEvGf6a4W8Z/p7hHxn+meFfGf6d4T8Z/pvhfxkOyXFojuPkOG6O4+U4LMfhOY6f4wQ5TpjjRDlOnOMkOU6a42Q5Tp7jFDlOmeNUOU6d4zQ5TpvjdDlOn+MMOc6Y40w5zpzjLDnOmuNsOc6e4xw5zpnjXDnOneM8Oc6b43w5zp/jAjkumONCOS6c4yI5LprjYjkunuMSOZLjkjkulePSOS6T47I5Lpfj8jmukOOKOa6U48o5rpLjqjmuluPqOa6R45o5rpXj2jmuk+O6Oa6X4/o5bpDjhjlulOPGOW6S46Y5bpbj5sOGDPlfhlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5miOJ+V4co6n5HhqjqfleHqOZ+R4Zo5n5Xh2jufkeG6O5+V4fo4X5HhhjhfleHGOl+R4aY6X5Xh5jlfkeGWOV+V4dY7X5HhtjtfleH2ON+R4Y4435XhzjrfkeGuOt+V4e4535HhnjoMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+xzvyvHuHO/J8d4c78vx/hwfyPHBHB/K8eEcH8nx0Rwfy/HxHJ/I8ckcn8pxRI4jcxyV4+gcx+Q4Nsenc3wmx2dzfC7H53N8IccXc3wpx5dzfCXHV3N8LcfXc3wjxzdzfCvHt3N8J8d3c3wvx/dz/CDHD3P8KMePc/wkx09z/CzHz3P8Iscvc/wqx69z/CbHb3P8Lsfvc/whxx9z/CnHn3P8Jcdfc/wtx99z/CPHP3P8K8e/c/wnx39z/C/HIQUOLXCcAsctcLwChxU4vMDxC5ygwAkLnKjAiQucpMBJC5yswMkLnKLAKQucqsCpC5ymwGkLnK7A6QucocAZC5ypwJkLnKXAWQucrcDZC5yjwDkLnKvAuQucp8B5C5yvwPkLXKDABQtcqMCFC1ykwEULXKzAxQtcokAKXLLApQpcusBlCly2wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tsDjCjy+wBMKPLFACzypwJMLPKXAUws8rcDTCzyjwDMLPKvAsws8p8BzCzyvwPMLvKDACwu8qMCLC7ykwEsLvKzAywu8osArC7yqwKsLvKbAawu8rsDrC7yhwBsLvKnAmwu8pcBbC7ytwNsLvKPAOwscFBgUGBYYFRgXmBSYFpgVmBdYFFgWWBVYF9gU2BYM/1+X+wLvKvDuAu8p8N4C7yvw/gIfKPDBAh8q8OECHynw0QIfK/DxAp8o8MkCnypwRIEjCxxV4OgCxxQ4tsCnC3ymwGcLfK7A5wt8ocAXC3ypwJcLfKXAVwt8rcDXC3yjwDcLfKvAtwt8p8B3C3yvwPcL/KDADwv8qMCPC/ykwE8L/KzAzwv8osAvC/yqwK8L/KbAbwv8rsDvC/yhwB8L/KnAnwv8pcBfC/ytwN8L/KPAPwv8q8C/C/ynwH8L/K/AISUOLXGcEsctcbwSh5U4vMTxS5ygxAlLnKjEiUucpMRJS5ysxMlLnKLEKUucqsSpS5ymxGlLnK7E6UucocQZS5ypxJlLnKXEWUucrcTZS5yjxDlLnKvEuUucp8R5S5yvxPlLXKDEBUtcqMSFS1ykxEVLXKzExUtcokRKXLLEpUpcusRlSly2xOVKXL7EFUpcscSVSly5xFVKXLXE1UpcvcQ1SlyzxLVKXLvEdUpct8T1Sly/xA1K3LDEjUrcuOR/j++mJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSUeV+LxJZ5Q4oklWuJJJZ5c4iklnlriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lnioMSgxLDEqMS4xKTEtMSsxLzEosSyxKrEusSmxLbErsS+xLtKvLvEe0q8t8T7Sry/xAdKfLDEh0p8uMRHSny0xMdKfLzEJ0p8ssSnShxR4sgSR5U4usQxJY4t8ekSnynx2RKfK/H5El8o8cUSXyrx5RJfKfHVEl8r8fUS3yjxzRLfKvHtEt8p8d0S3yvx/RI/KPHDEj8q8eMSPynx0xI/K/HzEr8o8csSvyrx6xK/KfHbEr8r8fsSfyjxxxJ/KvHnEn8p8dcSfyvx9xL/KPHPEv8q8e8S/ynx3xL/K3FIhUMrHKfCcSscr8JhFQ6vcPwKJ6hwwgonqnDiCiepcNIKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6pw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QoXqxj6vx0uUSEVLlnhUhUuXeEyFS5b4XIVLl/hChWuWOFKFa5c4SoVrlrhahWuXuEaFa5Z4VoVrl3hOhWuW+F6Fa5f4QYVbljhRhVuXOEmFW5a4WYVbl7hFhVuWeFWFW5d4TYVblvhdhVuX+EOFe5Y4U4V7lzhLhXuWuFuFe5e4R4V7lnhXhXuXeE+Fe5b4X4V7l/hARUeWOFBFR5c4SEVHlrhYRUeXuERFR5Z4VEVHl3hMRUeW+FxFR5f4QkVnlihFZ5U4ckVnlLhqRWeVuHpFZ5R4ZkVnlXh2RWeU+G5FZ5X4fkVXlDhhRVeVOHFFV5S4aUVXlbh5RVeUeGVFV5V4dUVXlPhtRVeV+H1Fd5Q4Y0V3lThzRXeUuGtFd5W4e0V3lHhnRUOKgwqDCuMKowrTCpMK8wqzCssKiwrrCqsK2wqbCvsKuwrvKvCuyu8p8J7K7yvwvsrfKDCByt8qMKHK3ykwkcrfKzCxyt8osInK3yqwhEVjqxwVIWjKxxT4dgKn67wmQqfrfC5Cp+v8IUKX6zwpQpfrvCVCl+t8LUKX6/wjQrfrPCtCt+u8J0K363wvQrfr/CDCj+s8KMKP67wkwo/rfCzCj+v8IsKv6zwqwq/rvCbCr+t8LsKv6/whwp/rPCnCn+u8JcKf63wtwp/r/CPCv+s8K8K/67wnwr/rfC/CofUOLTGcWoct8bxahxW4/Aax69xghonrHGiGieucZIaJ61xshonr3GKGqescaoap65xmhqnrXG6GqevcYYaZ6xxphpnrnGWGmetcbYaZ69xjhrnrHGuGueucZ4a561xvhrnr3GBGhescaEaF65xkRoXrXGxGhevcYkaqXHJGpeqcekal6lx2RqXq3H5GleoccUaV6px5RpXqXHVGlercfUa16hxzRrXqnHtGtepcd0a16tx/Ro3qHHDGjeqceMaN6lx0xo3q3HzGreoccsat6px6xq3qXHbGrercfsad6hxxxp3qnHnGnepcdcad6tx9xr3qHHPGveqce8a96lx3xr3q3H/Gg+o8cAaD6rx4BoPqfHQGg+r8fAaj6jxyBqPqvHoGo+p8dgaj6vx+BpPqPHEGq3xpBpPrvGUGk+t8bQaT6/xjBrPrPGsGs+u8Zwaz63xvBrPr/GCGi+s8aIaL67xkhovrfGyGi+v8Yoar6zxqhqvrvGaGq+t8boar6/xhhpvrPGmGm+u8ZYab63xthpvr/GOGu+scVBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX+NdNd5d4z013lvjfTXeX+MDNT5Y40M1PlzjIzU+WuNjNT5e4xM1PlnjUzWOqHFkjaNqHF3jmBrH1vh0jc/U+GyNz9X4fI0v1PhijS/V+HKNr9T4ao2v1fh6jW/U+GaNb9X4do3v1Phuje/V+H6NH9T4YY0f1fhxjZ/U+GmNn9X4eY1f1PhljV/V+HWN39T4bY3f1fh9jT/U+GONP9X4c42/1Phrjb/V+HuNf9T4Z41/1fh3jf/U+G+N/9U4pMGhDY7T4LgNjtfgsAaHNzh+gxM0OGGDEzU4cYOTNDhpg5M1OHmDUzQ4ZYNTNTh1g9M0OG2D0zU4fYMzNDhjgzM1OHODszQ4a4OzNTh7g3M0OGeDczU4d4PzNDhvg/M1OH+DCzS4YIMLNbhwg4s0uGiDizW4eINLNEiDSza4VINLN7hMg8s2uFyDyze4QoMrNrhSgys3uEqDqza4WoOrN7hGg2s2uFaDaze4ToPrNrheg+s3uEGDGza4UYMbN7hJg5s2uFmDmze4RYNbNrhVg1s3uE2D2za4XYPbN7hDgzs2uFODOze4S4O7Nrhbg7s3uEeDeza4V4N7N7hPg/s2uF+D+zd4QIMHNnhQgwc3eEiDhzZ4WIOHN3jEZP8PIGnw6AaPafDYBo9r8PgGT2jwxAZt8KQGT27wlAZPbfC0Bk9v8IwGz2zwrAbPbvCcBs9t8LwGz2/wggYvbPCiBi9u8JIGL23wsgYvb/CKBq9s8KoGr27wmgavbfC6Bq9v8IYGb2zwpgZvbvCWBm9t8LYGb2/wjgbvbHDQYNBg2GDUYNxg0mDaDDNrMG+waLBssGqwbrBpsG2wa7Bv8K4G727wngbvbfC+Bu9v8IEGH2zwoQYfbvCRBh9t8LEGH2/wiQafbPCpBkc0OLLBUQ2ObnBMg2MbfLrBZxp8tsHnGny+wRcafLHBlxp8ucFXGny1wdcafL3BNxp8s8G3Gny7wXcafLfB9xp8v8EPGvywwY8a/LjBTxr8tMHPGvy8wS8a/LLBrxr8usFvGvy2we8a/L7BHxr8scGfGvy5wV8a/LXB3xr8vcE/Gvyzwb8a/LvBfxr8t8H/GhzS4tAWx2lx3BbHa3FYi8NbHL/FCVqcsMWJWpy4xUlanLTFyVqcvMUpWpyyxalanLrFaVqctsXpWpy+xRlanLHFmVqcucVZWpy1xdlanL3FOVqcs8W5Wpy7xXlanLfF+Vqcv8UFWlywxYVaXLjFRVpctMXFWly8xSVapMUlW1yqxaVbXKbFZVtcrsXlW1yhxRVbXKnFlVtcpcVVW1ytxdVbXKPFNVtcq8W1W1ynxXVbXK/F9VvcoMUNW9yoxY1b3KTFTVvcrMXNW9yixS1b3KrFrVvcpsVtW9yuxe1b3KHFHVvcqcWdW9ylxV1b3K3F3Vvco8U9W9yrxb1b3KfFfVvcr8X9WzygxQNbPKjFg1s8pMVDWzysxcNbPKLFI1s8qsWjWzymxWNbPK7F41s8ocUTW7TFk1o8ucVTWjy1xdNaPL3FM1o8s8WzWjy7xXNaPLfF81o8v8ULWrywxYtavLjFS1q8tMXLWry8xStavLLFq1q8usVrWry2xetavL7FG1q8scWbWry5xVtavLXF21q8vcU7WryzxUGLQYthi1GLcYtJi2mLWYt5i0WLZYtVi3WLTYtti12LfYt3tXh3i/e0eG+L97V4f4sPtPhgiw+1+HCLj7T4aIuPtfh4i0+0+GSLT7U4osWRLY5qcXSLY1oc2+LTLT7T4rMtPtfi8y2+0OKLLb7U4sstvtLiqy2+1uLrLb7R4pstvtXi2y2+0+K7Lb7X4vstftDihy1+1OLHLX7S4qctftbi5y1+0eKXLX7V4tctftPity1+1+L3Lf7Q4o8t/tTizy3+0uKvLf7W4u8t/tHiny3+1eLfLf7T4r8t/tfikA6HdjhOh+N2OF6Hwzoc3uH4HU7Q4YQdTtThxB1O0uGkHU7W4eQdTtHhlB1O1eHUHU7T4bQdTtfh9B3O0OGMHc7U4cwdztLhrB3O1uHsHc7R4ZwdztXh3B3O0+G8Hc7X4fwdLtDhgh0u1OHCHS7S4aIdLtbh4h0u0SEdLtnhUh0u3eEyHS7b4XIdLt/hCh2u2OFKHa7c4Sodrtrhah2u3uEaHa7Z4Vodrt3hOh2u2+F6Ha7f4QYdbtjhRh1u3OEmHW7a4WYdbt7hFh1u2eFWHW7d4TYdbtvhdh1u3+EOHe7Y4U4d7tzhLh3u2uFuHe7e4R4d7tnhXh3u3eE+He7b4X4d7t/hAR0e2OFBHR7c4SEdHtrhYR0e3uERHR7Z4VEdHt3hMR0e2+FxHR7f4QkdntihHZ7U4ckdntIN89QOT+vw9A7P6PDMDs/q8OwOz+nw3A7P6/D8Di/o8MIOL+rw4g4v6fDSDi/r8PIOr+jwyg6v6vDqDq/p8NoOr+vw+g5v6PDGDm/q8OYOb+nw1g5v6/D2Du/o8M4OBx0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh32Hd7V4d0d3tPhvR3e1+H9HT7Q4YMdPtThwx0+0uGjHT7W4eMdPtHhkx0+1eGIDkd2OKrD0R2O6XBsh093+EyHz3b4XIfPd/hChy92+FKHL3f4Soevdvhah693+EaHb3b4Vodvd/hOh+92+F6H73f4QYcfdvhRhx93+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHv3f4R4d/dvhXh393+E+H/3b4X4dDehza4zg9jtvjeD0O63F4j+P3OEGPE/Y4UY8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj/S4ZI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H/U9fOmTIET0e2eNRPR7d4zE9HtvjcT0e3+MJPZ7Yoz2e1OPJPZ7S46k9ntbj6T2e0eOZPZ7V49k9ntPjuT2e1+P5PV7Q44U9XtTjxT1e0uOlPV7W4+U9XtHjlT1e1ePVPV7T47U9Xtfj9T3e0OONPd7U48093tLjrT3e1uPtPd7R4509DnoMegx7jHqMe0x6THvMesx7LHose6x6rHtsemx77Hrse7yrx7t7vKfHe3u8r8f7e3ygxwd7fKjHh3t8pMdHe3ysx8d7fKLHJ3t8qscRPY7scVSPo3sc0+PY/+PBnpr4PhxGiSdt0zZlatvu1rZt27a3tm3b7u9ro7Zt24zO/GeeOa9grz43O8AXBvjiAF8a4MsDfGWArw7wtQG+PsA3BvjmAN8a4NsDfGeA7w7wvQG+P8APBvjhAD8a4McD/GSAnw7wswF+PsAvBvjlAL8a4NcD/GaA3w7wuwF+P8AfBvjjAH8a4M8D/GWAvw7wtwH+PsA/BvjnAP8a4N8D/GeA/w7wvwGOHOCoAY4e4JgBjh3gkACHBjhOgOMGOF6AwwIcP8AJApwwwOEBThTgxAFOEuCkAU4W4OQBjghwigCnDHCqAKcOcJoApw1wugCnD3CGAGcMcKYAZw5wlgBnDXC2AGcPcI4A5wxwrgDnDnCeAOcNcL4A5w9wgQAXDHChABcOcJEAFw1wsQAXD5AAlwhwyQCXCnDpAJcJcNkAlwtw+QBXCHDFAFcKcOUAVwlw1QBXC3D1ANcIcM0A1wpw7QDXCXDdANcLcP0ANwhwwwA3CnDjADcJcNMANwtw8wC3CHDLALcKcOsAtwlw2wC3C3D7AHcIcMcAdwpw5wB3CXDXAHcLcPcA9whwzwD3CnDvAPcJcN8A9wtw/wAPCPDAAA8K8OAADwnw0AAPC/DwAI8I8MgAjwrw6ACPCfDYAI8L8PgATwjQAE8M8KQATw7wlABPDfC0AE8P8IwAzwzwrADPDvCcAM8N8LwAzw/wggAvDPCiAC8O8JIALw3wsgAvD/CKAK8M8KoArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDPCuAO8O8J4A7w3wvgDvD/CBAB8M8KEAHw7wkQAfDfCxAB8P8IkABwEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH2AT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8B/h3gPwH+G+B/AY4McFSAowMcE+DYAIeEODTEcUIcN8TxQhwW4vghThDihCEOD3GiECcOcZIQJw1xshAnD3FEiFOEOGWIU4U4dYjThDhtiNOFOH2IM4Q4Y4gzhThziLOEOGuIs4U4e4hzhDhniHOFOHeI84Q4b4jzhTh/iAuEuGCIC4W4cIiLhLhoiIuFuHiIhLhE+H8PbAguHeIyIS4b4nIhLh/iCiGuGOJKIa4c4iohrhriaiGuHuIaIa4Z4lohrh3iOiGuG+J6Ia4f4gYhbhjiRiFuHOImIW4a4mYhbh7iFiFuGeJWIW4d4jYhbhvidiFuH+IOIe4Y4k4h7hziLiHuGuJuIe4e4h4h7hniXiHuHeI+Ie4b4n4h7h/iASEeGOJBIR4c4iEhHhriYSEeHuIRIR4Z4lEhHh3iMSEeG+JxIR4f4gkhGuKJIZ4U4skhnhLiqSGeFuLpIZ4R4pkhnhXi2SGeE+K5IZ4X4vkhXhDihSFeFOLFIV4S4qUhXhbi5SFeEeKVIV4V4tUhXhPitSFeF+L1Id4Q4o0h3hTizSHeEuKtId4W4u0h3hHinSHeFeLdId4T4r0h3hfi/SE+EOKDIT4U4sMhPhLioyE+FuLjIT4R4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsQnQ3wqxKdDfCbEZ0N8LsTnQ3whxBdDfCnEl0N8JcRXQ3wtxNdDfCPEN0N8K8S3Q3wnxHdDfC/E90P8IMQPQ/woxI9D/CTET0P8LMTPQ/wixC9D/CrEr0P8JsRvQ/wuxO9D/CHEH0P8KcSfQ/wlxF9D/C3E30P8I8Q/Q/wrxL9D/CfEf0P8L8SRIY4KcXSIY0IcG+KQCIdGOE6E40Y4XoTDIhw/wgkinDDC4RFOFOHEEU4S4aQRThbh5BGOiHCKCKeMcKoIp45wmginjXC6CKePcIYIZ4xwpghnjnCWCGeNcLYIZ49wjgjnjHCuCOeOcJ4I541wvgjnj3CBCBeMcKEIF45wkQgXjXCxCBePkAiXiHDJCJeKcOkIl4lw2QiXi3D5CFeIcMUIV4pw5QhXiXDVCFeLcPUI14hwzQjXinDtCNeJcN0I14tw/Qg3iHDDCDeKcOMIN4lw0wg3i3DzCLeIcMsIt4pw6wi3iXDbCLeLcPsId4hwxwh3inDnCHeJcNcId4tw9wj3iHDPCPeKcO8I94lw3wj3i3D/CA+I8MAID4rw4AgPifDQCA+L8PAIj4jwyAiPivDoCI+J8NgIj4vw+AhPiNAIT4zwpAhPjvCUCE+N8LQIT4/wjAjPjPCsCM+O8JwIz43wvAjPj/CCCC+M8KIIL47wkggvjfCyCC+P8IoIr4zwqgivjvCaCK+N8LoIr4/whghvjPCmCG+O8JYIb43wtghvj/COCO+M8K4I747wngjvjfC+CO+P8IEIH4zwoQgfjvCRCB+N8LEIH4/wiQgHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYRPhnhUxE+HeEzET4b4XMRPh/hCxG+GOFLEb4c4SsRvhrhaxG+HuEbEb4Z4VsRvh3hOxG+G+F7Eb4f4QcRfhjhRxF+HOEnEX4a4WcRfh7hFxF+GeFXEX4d4TcRfhvhdxF+H+EPEf4Y4U8R/hzhLxH+GuFvEf4e4R8R/hnhXxH+HeE/Ef4b4X8RjoxwVISjIxwT4dgIh8Q4NMZxYhw3xvFiHBbj+DFOEOOEMQ6PcaIYJ45xkhgnjXGyGCePcUSMU8Q4ZYxTxTh1jNPEOG2M08U4fYwzxDhjjDPFOHOMs8Q4a4yzxTh7jHPEOGeMc8U4d4zzxDhvjPPFOH+MC8S4YIwLxbhwjIvEuGiMi8W4eIzEuESMS8a4VIxLx7hMjMvGuFyMy8e4QowrxrhSjCvHuEqMq8a4Woyrx7hGjGvGuFaMa8e4TozrxrhejOvHuEGMG8a4UYwbx7hJjJvGuFmMm8e4RYxbxrhVjFvHuE2M28a4XYzbx7hDjDvGuFOMO8e4S4y7xrhbjLvHuEeMe8a4V4x7x7hPjPvGuF+M+8d4QIwHxnhQjAfHeEiMh8Z4WIyHx3hEjEfGeFSMR8d4TIzHxnhcjMfHeEKMxnhijCfFeHKMp8R4aoynxXh6jGfEeGaMZ8V4doznxHhujOfFeH6MF8R4YYwXxXhxjJfEeGmMl8V4eYxXxHhljFfFeHWM18R4bYzXxXh9jDfEeGOMN8V4c4y3xHhrjLfFeHuMd8R4Z4x3xXh3jPfEeG+M98V4f4wPxPhgjA/F+HCMj8T4aIyPxfh4jE/EOIgxiDGMMYoxjjGJMY0xizGPsYixjLGKsY6xibGNsYuxj/HJGJ+K8ekYn4nx2Rifi/H5GF+I8cUYX4rx5RhfifHVGF+L8fUY34jxzRjfivHtGN+J8d0Y34vx/Rg/iPHDGD+K8eMYP4nx0xg/i/HzGL+I8csYv4rx6xi/ifHbGL+L8fsYf4jxxxh/ivHnGH+J8dcYf4vx9xj/iPHPGP+K8e8Y/4nx3xj/i3FkjKNiHB3jmBjHxjgkwaEJjpPguAmOl+CwBMdPcIIEJ0xweIITJThxgpMkOGmCkyU4eYIjEpwiwSkTnCrBqROcJsFpE5wuwekTnCHBGROcKcGZE5wlwVkTnC3B2ROcI8E5E5wrwbkTnCfBeROcL8H5E1wgwQUTXCjBhRNcJMFFE1wswcUTJMElElwywaUSXDrBZRJcNsHlElw+wRUSXDHBlRJcOcFVElw1wdUSXD3BNRJcM8G1Elw7wXUSXDfB9RJcP8ENEtwwwY0S3DjBTRLcNMHNEtw8wS0S3DLBrRLcOsFtEtw2we0S3D7BHRLcMcGdEtw5wV0S3DXB3RLcPcE9Etwzwb0S3DvBfRLcN8H9Etw/wQMSPDDBgxI8OMFDEjw0wcMSPDzBIxI8MsGjEjw6wWMSPDbB4xI8PsETEjTBExM8KcGTEzwlwVMTPC3B0xM8I8EzEzwrwbMTPCfBcxM8L8HzE7wgwQsTvCjBixO8JMFLE7wswcsTvCLBKxO8KsGrE7wmwWsTvC7B6xO8IcEbE7wpwZsTvCXBWxO8LcHbE7wjwTsTvCvBuxO8J8F7E7wvwfsTfCDBBxN8KMGHE3wkwUcTfCzBxxN8IsFBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn2CTyb4VIJPJ/hMgs8m+FyCzyf4QoIvJvhSgi8n+EqCryb4WoKvJ/hGgm8m+FaCbyf4ToLvJvhegu8n+EGCHyb4UYIfJ/hJgp8m+FmCnyf4RYJfJvhVgl8n+E2C3yb4XYLfJ/hDgj8m+FOCPyf4S4K/Jvhbgr8n+EeCfyb4V4J/J/hPgv8m+F+CIxMcleDoBMckODbBISkOTXGcFMdNcbwUh6U4fooTpDhhisNTnCjFiVOcJMVJU5wsxclTHJHiFClOmeJUKU6d4jQpTpvidClOn+IMKc6Y4kwpzpziLCnOmuJsKc6e4hwpzpniXCnOneI8Kc6b4nwpzp/iAikumOJCKS6c4iIpLpriYikuniIpLpHikikuleLSKS6T4rIpLpfi8imukOKKKa6U4soprpLiqimuluLqKa6R4poprpXi2imuk+K6Ka6X4vopbpDihilulOLGKW6S4qYpbpbi5ilukeKWKW6V4tYpbpPitilul+L2Ke6Q4o4p7pTizinukuKuKe6W4u4p7pHininuleLeKe6T4r4p7pfi/ikekOKBKR6U4sEpHpLioSkeluLhKR6R4pEpHpXi0Skek+KxKR6X4vEpnpCiKZ6Y4kkpnpziKSmemuJpKZ6e4hkpnpniWSmeneI5KZ6b4nkpnp/iBSlemOJFKV6c4iUpXpriZSlenuIVKV6Z4lUpXp3iNSlem+J1KV6f4g0p3pjiTSnenOItKd6a4m0p3p7iHSnemeJdKd6d4j0p3pvifSnen+IDKT6Y4kMpPpziIyk+muJjKT6e4hMpDlIMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsU3wyxadSfDrFZ1J8NsXnUnw+xRdSfDHFl1J8OcVXUnw1xddSfD3FN1J8M8W3Unw7xXdSfDfF91J8P8UPUvwwxY9S/DjFT1L8NMXPUvw8xS9S/DLFr1L8OsVvUvw2xe9S/D7FH1L8McWfUvw5xV9S/DXF31L8PcU/Uvwzxb9S/DvFf1L8N8X/UhyZ4qgUR6c4JsWxKQ7JcGiG42Q4bobjZTgsw/EznCDDCTMcnuFEGU6c4SQZTprhZBlOnuGIDKfIcMoMp8pw6gynyXDaDKfLcPoMZ8hwxgxnynDmDGfJcNYMZ8tw9gznyHDODOfKcO4M58lw3gzny3D+DBfIcMEMF8pw4QwXyXDRDBfLcPEMyXCJDJfMcKkMl85wmQyXzXC5DJfPcIUMV8xwpQxXznCVDFfNcLUMV89wjQzXzHCtDNfOcJ1s+P//ietnuEGGG2a4UYYbZ7hJhptmuFmGm2e4RYZbZrhVhltnuE2G22a4XYbbZ7hDhjtmuFOGO2e4S4a7ZrhbhrtnuEeGe2a4V4Z7Z7hPhvtmuF+G+2d4QIYHZnhQhgdneEiGh2Z4WIaHZ3hEhkdmeFSGR2d4TIbHZnhcxrDjMzwhQzM8McOTMjw5w1MyPDXD0zI8PcMzMjwzw7MyPDvDczI8N8PzMjw/wwsyvDDDizK8OMNLMrw0w8syvDzDKzK8MsOrMrw6w2syvDbD6zK8PsMbMrwxw5syvDnDWzK8NcPbMrw9wzsyvDPDuzK8O8N7Mrw3w/syvD/DBzJ8MMOHMnw4w0cyfDTDxzJ8PMMnMhxkGGQYZhhlGGeYZJhmmGWYZ1hkWGZYZVhn2GTYZthl2Gf4ZIZPZfh0hs9k+GyGz2X4fIYvZPhihi9l+HKGr2T4aoavZfh6hm9k+GaGb2X4dobvZPhuhu9l+H6GH2T4YYYfZfhxhp9k+GmGn2X4eYZfZPhlhl9l+HWG32T4bYbfZfh9hj9k+GOGP2X4c4a/ZPhrhr9l+HuGf2T4Z4Z/Zfh3hv9k+G+G/2U4MsNRGY7OcEyGYzMckuPQHMfJcdwcx8txWI7j5zhBjhPmODzHiXKcOMdJcpw0x8lynDzHETlOkeOUOU6V49Q5TpPjtDlOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpfj/DkukOOCOS6U48I5LpLjojkuluPiOZLjEjkumeNSOS6d4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjmuneM6Oa6b43o5rp/jBjlumONGOW6c4yY5bprjZjlunuMWOW6Z41Y5bp3jNjlum+N2OW6f4w457pjjTjnunOMuOe6a42457p7jHjnumeNeOe6d4z457pvjfjnun+MBOR6Y40E5HpzjITkemuNhOR6e4xE5HpnjUTkeneMxOR6b43E5Hp/jCTma44k5npTjyTmekuOpOZ6W4+k5npHjmTmelePZOZ6T47k5npfj+TlekOOFOV6U48U5XpLjpTleluPlOV6R45U5XpXj1Tlek+O1OV6X4/U53pDjjTnelOPNOd6S46053pbj7TnekeOdOd6V49053pPjvTnel+P9OT6Q44M5PpTjwzk+kuOjOT6W4+M5PpHjIMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+xydzfCrHp3N8Jsdnc3wux+dzfCHHF3N8KceXc3wlx1dzfC3H13N8I8c3c3wrx7dzfCfHd3N8L8f3c/wgxw9z/CjHj3P8JMdPc/wsx89z/CLHL3P8Ksevc/wmx29z/C7H73P8Iccfc/wpx59z/CXHX3P8Lcffc/wjxz9z/CvHv3P8J8d/c/wvx5E5jspxdI5jchyb45AChxY4ToHjFjhegcMKHL/ACQqcsMDhBU5U4MQFTlLgpAVOVuDkBY4ocIoCpyxwqgKnLnCaAqctcLoCpy9whgJnLHCmAmcucJYCZy1wtgJnL3COAucscK4C5y5wngLnLXC+AucvcIECFyxwoQIXLnCRAhctcLECFy+QApcocMkClypw6QKXKXDZApcrcPkCVyhwxQJXKnDlAlcpcNUCVytw9QLXKHDNAtcqcO0C1ylw3QLXK3D9AjcocMMCNypw4wI3KXDTAjcrcPMCtyhwywK3KnDrArcpcNsCtytw+wJ3KHDHAncqcOcCdylw1wJ3K3D3AvcocM8C9ypw7wL3KXDfAvcrcP8CDyjwwAIPKvDgAg8p8NACDyvw8AKPKPDIAo8q8OgCjynw2AKPK/D4Ak8o0AJPLPCkAk8u8JQCTy3wtAJPL/CMAs8s8KwCzy7wnALPLfC8As8v8IICLyzwogIvLvCSAi8t8LICLy/wigKvLPCqAq8u8JoCry3wugKvL/CGAm/8X2co3lzgLQXeWuBtBd5e4B0F3lngXQXeXeA9Bd5b4H0F3l/gAwU+WOBDBT5c4CMFPlrgYwU+XuATBQ4KDAoMC4wKjAtMCkwLzArMCywKLAusCqwLbApsC+wK7At8ssCnCny6wGcKfLbA5wp8vsAXCnyxwJcKfLnAVwp8tcDXCny9wDcKfLPAtwp8u8B3Cny3wPcKfL/ADwr8sMCPCvy4wE8K/LTAzwr8vMAvCvyywK8K/LrAbwr8tsDvCvy+wB8K/LHAnwr8ucBfCvy1wN8K/L3APwr8s8C/Cvy7wH8K/LfA/wocWeCoAkcXOKbAsQUOKXFoieOUOG6J45U4rMTxS5ygxAlLHF7iRCVOXOIkJU5a4mQlTl7iiBKnKHHKEqcqceoSpylx2hKnK3H6EmcoccYSZypx5hJnKXHWEmcrcfYS5yhxzhLnKnHuEucpcd4S5ytx/hIXKHHBEhcqceESFylx0RIXK3HxEilxiRKXLHGpEpcucZkSly1xuRKXL3GFElcscaUSVy5xlRJXLXG1ElcvcY0S1yxxrRLXLnGdEtctcb0S1y9xgxI3LHGjEjcucZMSNy1xsxI3L3GLErcscasSty5xmxK3LXG7ErcvcYcSdyxxpxJ3LnGXEnctcbcSdy9xjxL3LHGvEvcucZ8S9y1xvxL3L/GAEg8s8aASDy7xkBIPLfGwEg8v8YgSjyzxqBKPLvGYEo8t8bgSjy/xhBIt8cQSTyrx5BJPKfHUEk8r8fQSzyjxzBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEu8q8e4S7ynx3hLvK/H+Eh8o8cESHyrx4RIfKfHREh8r8fESnyhxUGJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2Jf4pMlPlXi0yU+U+KzJT5X4vMlvjBiyJD/mXmpxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxE9L/KzEz0v8osQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfS/ytxN9L/KPEP0v8q8S/S/ynxH9L/K/EkSWOKnF0iWNKHFvikAqHVjhOheNWOF6Fwyocv8IJKpywwuEVTlThxBVOUuGkFU5W4eQVjqhwigqnrHCqCqeucJoKp61wugqnr3CGCmescKYKZ65wlgpnrXC2CmevcI4K56xwrgrnrnCeCuetcL4K569wgQoXrHChCheucJEKF61wsQoXr5AKl6hwyQqXqnDpCpepcNkKl6tw+QpXqHDFCleqcOUKV6lw1QpXq3D1CteocM0K16pw7QrXqXDdCtercP0KN6hwwwo3qnDjCjepcNMKN6tw8wq3qHDLCreqcOsKt6lw2wq3q3D7CneocMcKd6pw5wp3qXDXCnercPcK96hwzwr3qnDvCvepcN8K96tw/woPqPDACg+q8OAKD6nw0AoPq/DwCo+o8MgKj6rw6AqPqfDYCo+r8PgKT6jQCk+s8KQKT67wlApPrfC0Ck+v8IwKz6zwrArPrvCcCs+t8LwKz6/wggovrPCiCi+u8JIKL63wsgovr/CKCq+s8KoKr67wmgqvrfC6Cq+v8IYKb6zwpgpvrvCWCm+t8LYKb6/wjgrvrPCuCu+u8J4K763wvgrvr/CBCh+s8KEKH67wkQofrfCxCh+v8IkKBxUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2FT5Z4VMVPl3hMxU+W+FzFT5f4QsVvljhSxW+XOErFb5a4WsVvl7hGxW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4V8V/l3hPxX+W+F/FY6scFSFoyscU+HYCofUOLTGcWoct8bxahxW4/g1TlDjhDUOr3GiGieucZIaJ61xshonr3FEjVPUOGWNU9U4dY3T1DhtjdPVOH2NM9Q4Y40z1ThzjbPUOGuNs9U4e41z1DhnjXPVOHeN89Q4b43z1Th/jQvUuGCNC9W4cI2L1LhojYvVuHiN1LhEjUvWuFSNS9e4TI3L1rhcjcvXuEKNK9a4Uo0r17hKjavWuFqNq9e4Ro1r1rhWjWvXuE6N69a4Xo3r17hBjRvWuFGNG9e4SY2b1rhZjZvXuEWNW9a4VY1b17hNjdvWuF2N29e4Q4071rhTjTvXuEuNu9a4W42717hHjXvWuFeNe9e4T4371rhfjfvXeECNB9Z4UI0H13hIjYfWeFiNh9d4RI1H1nhUjUfXeEyNx9Z4XI3H13hCjdZ4Yo0n1XhyjafUeGqNp9V4eo1n1HhmjWfVeHaN59R4bo3n1Xh+jRfUeGGNF9V4cY2X1HhpjZfVeHmNV9R4ZY1X1Xh1jdfUeG2N19V4fY031HhjjTfVeHONt9R4a4231Xh7jXfUeGeNd9V4d4331HhvjffVeH+ND9T4YI0P1fhwjY/U+GiNj9X4eI1P1DioMagxrDGqMa4xqTGtMasxr7GosayxqrGusamxrbGrsa/xyRqfqvHpGp+p8dkan6vx+RpfqPHFGl+q8eUaX6nx1Rpfq/H1Gt+o8c0a36rx7RrfqfHdGt+r8f0aP6jxwxo/qvHjGj+p8dMaP6vx8xq/qPHLGr+q8esav6nx2xq/q/H7Gn+o8ccaf6rx5xp/qfHXGn+r8fca/6jxzxr/qvHvGv+p8d8a/6txZI2jahxd45gax9Y4pMGhDY7T4LgNjtfgsAbHb3CCBidscHiDEzU4cYOTNDhpg5M1OHmDIxqcosEpG5yqwakbnKbBaRucrsHpG5yhwRkbnKnBmRucpcFZG5ytwdkbnKPBORucq8G5G5ynwXkbnK/B+RtcoMEFG1yowYUbXKTBRRtcrMHFG6TBJRpcssGlGly6wWUaXLbB5RpcvsEVGlyxwZUaXLnBVRpctcHVGly9wTUaXLPBtRpcu8F1Gly3wfUaXL/BDRrcsMGNGty4wU0a3LTBzRrcvMEtGtyywa0a3LrBbRrctsHtGty+wR0a3LHBnRrcucFdGty1wd0a3L3BPRrcs8G9Gty7wX0a3LfB/Rrcv8EDGjywwYMaPLjBQxo8tMHDGjy8wSMaPLLBoxo8usFjGjy2weMaPL7BExq0wRMbPKnBkxs8pcFTGzytwdMbPKPBMxs8q8GzGzynwXMbPK/B8xu8oMELG7yowYsbvKTBSxu8rMHLG7yiwSsbvKrBqxu8psFrG7yuwesbvKHBGxu8qcGbG7ylwVsbvK3B2xu8o8E7G7yrwbsbvKfBexu8r8H7G3ygwQcbfKjBhxt8pMFHG3yswccbfKLBQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN9g082+FSDTzf4TIPPNvhcg883+EKDLzb4UoMvN/hKg682+FqDrzf4RoNvNvhWg283+E6D7zb4XoPvN/hBgx82+FGDHzf4SYOfNvhZg5//n8MvG/yqwa8b/KbBbxv8rsHvG/yhwR8b/KnBnxv8pcFfG/ytwd8b/KPBPxv8q8G/G/ynwX8b/K/BkQ2OanB0g2MaHNvgkBaHtjhOi+O2OF6Lw1ocv8UJWpywxeEtTtTixC1O0uKkLU7W4uQtjmhxihanbHGqFqducZoWp21xuhanb3GGFmdscaYWZ25xlhZnbXG2FmdvcY4W52xxrhbnbnGeFudtcb4W529xgRYXbHGhFhducZEWF21xsRYXb5EWl2hxyRaXanHpFpdpcdkWl2tx+RZXaHHFFldqceUWV2lx1RZXa3H1Ftdocc0W12px7RbXaXHdFtdrcf0WN2hxwxY3anHjFjdpcdMWN2tx8xa3aHHLFrdqcesWt2lx2xa3a3H7FndocccWd2px5xZ3aXHXFndrcfcW92hxzxb3anHvFvdpcd8W92tx/xYPaPHAFg9q8eAWD2nx0BYPa/HwFo9o8cgWj2rx6BaPafHYFo9r8fgWT2jRFk9s8aQWT27xlBZPbfG0Fk9v8YwWz2zxrBbPbvGcFs9t8bwWz2/xghYvbPGiFi9u8ZIWL23xshYvb/GKFq9s8aoWr27xmhavbfG6Fq9v8YYWb2zxphZvbvGWFm9t8bYWb2/xjhbvbPGuFu9u8Z4W723xvhbvb/GBFh9s8aEWH27xkRYfbfGxFh9v8YkWBy0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32LT7Z4lMtPt3iMy0+2+JzLT7f4gstvtjiS/8zM2TIkFdafLXF11p8vcU3WnyzxbdafLvFd1p8t8X3Wny/xQ9a/LDFj1r8uMVPWvy0xc9a/LzFL1r8ssWvWvy6xW9a/LbF71r8vsUfWvyxxZ9a/LnFX1r8tcXfWvy9xT9a/LPFv1r8u8V/Wvy3xf9aHNniqBZHtzimxbEtDulwaIfjdDhuh+N1OKzD8TucoMMJOxze4UQdTtzhJB1O2uFkHU7e4YgOp+hwyg6n6nDqDqfpcNoOp+tw+g5n6HDGDmfqcOYOZ+lw1g5n63D2DufocM4O5+pw7g7n6XDeDufrcP4OF+hwwQ4X6nDhDhfpcNEOF+tw8Q7pcIkOl+xwqQ6X7nCZDpftcLkOl+9whQ5X7HClDlfucJUOV+1wtQ5X73CNDtfscK0O1+5wnQ7X7XC9DtfvcIMON+xwow437nCTDjftcLMON+9wiw637HCrDrfucJsOt+1wuw6373CHDnfscKcOd+5wlw537XC3DnfvcI8O9+xwrw737nCfDvftcL8O9+/wgA4P7PCgDg/u8JAOD+3wsA4P7/CIDo/s8KgOj+7wmA6P7fC4Do/v8IQO7fDEDk/q8OQOT+nw1A5P6/D0Ds/o8MwOz+rw7A7P6fDcDs/r8PwOL+jwwg4v6vDiDi/p8NIOL+vw8g6v6PDKDq/q8OoOr+nw2g6v6/D6Dm/o8MYOb+rw5g5v6fDWDm/r8PYO7+jwzg7v6vDuDu/p8N4O7+vw/g4f6PDBDh/q8OEOH+nw0Q4f6/DxDp/ocNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+GTHT7V4dMdPtPhsx0+1+HzHb7Q4YsdvtThyx2+0uGrHb7W4esdvtHhmx2+1eHbHb7TDfHdDt/r8P0OP+jwww4/6vDjDj/p8NMOP+vw8w6/6PDLDr/q8OsOv+nw2w6/6/D7Dn/o8McOf+rw5w5/6fDXDn/r8PcO/+jwzw7/6vDvDv/p8N8O/+twZIejOhzd4ZgOx3Y4pMehPY7T47g9jtfjsB7H73GCHifscXiPE/U4cY+T9Dhpj5P1OHmPI3qcoscpe5yqx6l7nKbHaXucrsfpe5yhxxl7nKnHmXucpcdZe5ytx9l7nKPHOXucq8e5e5ynx3l7nK/H+XtcoMcFe1yox4V7XKTHRXtcrMfFe6THJXpcsselely6x2V6XLbH5XpcvscVelyxx5V6XLnHVXpctcfVely9xzV6XLPHtXpcu8d1ely3x/V6XL/HDXrcsMeNety4x0163LTHzXrcvMctetyyx6163LrHbXrctsftety+xx163LHHnXrcucddety1x9163L3HPXrcs8e9ety7x3163LfH/Xrcv8cDejywx4N6PLjHQ3o8tMfDejy8xyN6PLLHo3o8usdjejy2x+N6PL7HE3q0xxN7PKnHk3s8pcdTezytx9N7PKPHM3s8q8ezezynx3N7PK/H83u8oMcLe7yox4t7vKTHS3u8rMfLe7yixyt7vKrHq3u8psdre7yux+t7vKHHG3u8qcebe7ylx1t7vK3H23u8o8c7e7yrx7t7vKfHe3u8r8f7e3ygxwd7fKjHh3t8pMdHe3ysx8d7fKLHQY//LwAA///e2bfE")

3.744593059s ago: executing program 0 (id=2756):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

3.580725849s ago: executing program 2 (id=2759):
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e0c0b"], 0xf)

3.529088184s ago: executing program 0 (id=2760):
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')

3.410198225s ago: executing program 0 (id=2762):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2000010, &(0x7f0000000140)=ANY=[], 0x3, 0x6b5, &(0x7f0000001240)="$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")

3.251534381s ago: executing program 2 (id=2764):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0x4, 0x27, &(0x7f0000000180)=""/39, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)

3.001103182s ago: executing program 2 (id=2767):
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000409513000340000102030109026e00030154c00f080b0001010130040904000000010130000a24010e0a0081000000090401000009003000090401010101"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0})

2.906278263s ago: executing program 0 (id=2768):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000080)={[{@noheap}, {@nocheckpoint_merge}, {@discard_unit_block}, {@six_active_logs}, {@block_mode}, {@fault_injection={'fault_injection', 0x3d, 0x14}}, {@discard}, {@nodiscard}, {@fsync_mode_posix}, {@noacl}, {@discard_unit_block}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0x6}}]}, 0x1, 0x5517, &(0x7f0000005880)="$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")

2.607875131s ago: executing program 3 (id=2771):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x3}, {0xa4}, {0x6}]})

2.468288883s ago: executing program 3 (id=2772):
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f00000000c0)="b95d", 0x2, 0xfffffffffffffffe)

2.21879642s ago: executing program 3 (id=2773):
clock_settime(0x1ed5d7404, &(0x7f0000001140))

1.992317351s ago: executing program 3 (id=2776):
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x9, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.846657269s ago: executing program 3 (id=2779):
syz_usb_connect(0x5, 0x24, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0xf4, 0x23, 0xb0, 0x20, 0x1b3d, 0x1a2, 0x9734, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x1, 0x10, 0x58, "", [{{0x9, 0x4, 0x52, 0xb7, 0x0, 0x4a, 0x86, 0x1b, 0x4}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x71, &(0x7f0000000440)={0x5, 0xf, 0x71, 0x1, [@generic={0x6c, 0x10, 0xa, "3fd738aa48a4d1a336d0bb0a622248939c983b4b64ccf8df5d8134a1544e47de3a6a1b07016cdd919c510a763ae5f5152fb0d9697c83a6edc8c16f5eed9f6d5dd585e9a4bc35d11fcce040c90c119480cfd037fd70240900a87a5d64f2e0172ad2442306eb2e0cd224"}]}})

1.526985755s ago: executing program 0 (id=2782):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000240)={[{@flush_merge}, {@inline_dentry}, {@acl}, {@compress_cache}, {@inline_xattr}, {@compress_cache}, {@nobarrier}, {@nodiscard}, {@lazytime}, {@background_gc_off}, {@fsync_mode_strict}, {@atgc}, {@data_flush}, {@alloc_mode_reuse}]}, 0xfd, 0x551b, &(0x7f00000079c0)="$eJzs3M1rI2UYAPB3+rHb/XAt4sHbDixCC5vQ9GPRW9Vd/MAuZdWDJ02TachukilNmtaePHgUD/4nouDJo3+DB8/exIPiTVAy71S3uoLQtLHb3w8mz8w7b5553lACz0xJAC6s+fTXn5NwI1wJIUyHEK6HUOwn5VZYj+GFEMLNEMLUY1tSjv85cCmEcDWEcGOUPOZMylOf3x7eWvvprV+++e7yzLUvvv5+cqsGJm30tdLdifv73RjzVowPy/H6sF3E7uqwjPFEZy6e7+ZxfD/bKjLs14/m1Yu40orz8529/ihud+qNUWy1t4vxnV68YH/YOspTvOFhfbc4bmZbRWz38yK2DuN1Dw7jd9thfxDzNMt8HxXpw2BwFON4dpDF9ew8KmKjNyjHY968mR2M4rCM5eVCI+80izq2TvBB/8+93e7tHaTDbLffznvpWrX2UrV2p1LbzZvZIFut1LvNO6vpQqszmlYZZPXueivPW52s2si7i+lCq9Go1Grpwt1sq13vpbVadaW6VFlbLPdup6/ffy/tNNOFUXy13dsbtDv9dDvfTeM7FtPl6srLi+mtWvrOxma6+eDevY3Ndz+4+/79VzbefK2c9I+y0oXlpeXlSm2pslxbvEDr/6QseozrhxNJJl0AwPmj/wcm4cUT9P/dR+XxE/v/3QchnH7/H/T/Y3Gu+t+L3v+fwvrhRPT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX1g+zX75R7MzH42vl+DPl0HPlcRJCmAoh/P4E0+HSsZzTZZ7Zf5k/+7cavk1CkWF0jcvldjWEsF5uvz172p8CAAAAPL2++vjmZ7Fbjy/zky6IsxRv2kxd/3BM+ZIQwuz8j2PKNjV6eX5MyYq/75lwMKZsxQ2suTEli7fcZsaV7T+ZPhbmHgtJDFNnWg4AAHAmjncCZ9uFAAAAcJY+nXQBTEYSjh5lHj0LLv7z/q8HgleOHQEAAADnUDLpAgAAAIBTV/T/fv8PAAAAnm7x9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2Lmf28SBKA7AzwYv7D8tWu19W9kblLEl5JhjRAFpggJyoIY0QA3klhIiiPA4BCIOkTy2lej7JGcylvnxBsFhZqQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALj1U6ypu/t62zdnt28kzGgAAAOCSbbVe1P/MUv97c/9nc+t30y8iooyIS3P3UXw5yxw1OdXr83enz1dvariPqBMO7zFprm8R8a+5nn51/SkAAADA57VZruZptp7+zIYuiD6lRZvyx/9MeUVEVLPHTGnlIe9PprD6+z2O60xp9QLWNFNYWnIb50p7l/rnfly1m540RWrKiy87Fplt7AAAQI9GZ02/sxAAAAD6dDV0AQyjiJetzONW4CQ1zfbe17MeAAAA8AEVQxcAAAAAdK6e//d0/t/e+X8AAAAwjHT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF3aVuvFZrmat83Z7dvJMxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCZ/XlHgRAIgzDYu74zmfsfVho0NTWpAuHjbwwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAN7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725yUFQiAIomDO+N9J3/+wkqBnECECGh5V1KIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527udFbioOAPhLMpnaqjiuMocVUfCgFzud1tbexIOyePBPEJbttK6d+qPdgy1F3Is32XMvokcRQVlv/R96bqGXeuthDhXE40gyyUzaLjormKS7nw+8vG9CyPu+BJb95mUXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR5dxEn2aY3i+Pi2O0H1zey/s4jfebmzt3VrGVxVGfST4aXqztRv7lEAAAAODySsr4PIdxLd9eyPu7l9X9anpPV/N8/O4vLev7Rur/sy9o/a7/9ev/F+UC92TjZRc9vjkcnHk+l8//Nst2e+9czOvmdz9+9JPkDiT/YfmGS5vcz+vbWrfe6eXikjmwBgP/ieNkXQfn7UNYPm0wMgEOjUym8y/o/6TWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAdJtvh6TKOQgirnUWcufPg+sZe/c2du6tlO3Pjxk74enHN7BJpCOH85nh0otbZtNuVq9curo/Ho8v1B6+EEJoa/Z1i+hc/WuLkEBq5P/sP/mpHGm0L4uJhtyWfJyNo8IcSAAAHUlq0rK6/l+6uZceilRCmPzxc/79eicOS9f/9j8/cro5Vrf+Htc2w/QZblz4fXLl67c3NS+sXRhdGn751cvj28NTZ06fPDvJ3JQNvTAAAANi36XQ6ne90i1at/+OVx9f/j1XisGT9/8V3w6+qAyfq/z0tFv2azgQAAOBwe/7VP/+I9jgedbvhy/WtrcvD2Xa+f3K2bSDVfTtStGr9n6w0nRUAAABQh8l29ND6/7lKHJZc/3/mx5d+rl4zCSEcLdb/j298Nj5X33RarY4/J256jgAAADTraNGq6/9p/v1/PP/kIQ4hvPHaLC7+DeA/1v9pUf8n73/zU3Ws6vf/p+qbYivF/dn9yPt+CJ1+0xkBAABwkD1VtKzY/z3dXfvkl2Mfdn3/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFC3vwMAAP//A1BAnw==")

1.469710648s ago: executing program 1 (id=2783):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.286908934s ago: executing program 2 (id=2785):
syz_usb_connect(0x2, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000385353608f20446b76e8e01022601090259000104f2000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909090702020005cbad092403"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})

1.28496339s ago: executing program 1 (id=2786):
syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file1\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1529, &(0x7f0000006f40)="$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")

1.12827732s ago: executing program 4 (id=2787):
syz_emit_ethernet(0x1f, &(0x7f00000004c0)={@random="0f691bf3d441", @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0xe779a1243231d632, "c700", "0bf2fb", 0x88a8, "1a3e1c72ddd9751d"}}}}}, 0x0)

1.025177641s ago: executing program 4 (id=2788):
syz_emit_ethernet(0x50, &(0x7f0000000840)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "364e02", 0x1a, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], "8a56a4984628f8290d76d3fcf61313928119e0094c2765798508"}}}}}, 0x0)

902.576823ms ago: executing program 4 (id=2789):
syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0xc, 0x0, @opaque="75d0148a"}}}}}, 0x0)

808.950609ms ago: executing program 1 (id=2790):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000000180)={[{@adinicb}, {@utf8}, {@fileset={'fileset', 0x3d, 0x3}}, {@uid}, {}, {@umask}, {@mode={'mode', 0x3d, 0x1000}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@adinicb}, {@uid_forget}, {@umask={'umask', 0x3d, 0x3}}, {}, {@unhide}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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")

720.085108ms ago: executing program 4 (id=2791):
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@broadcast}, {@rand_addr=0x640100fe}]}, @ssrr={0x89, 0xf, 0xce, [@private=0xa010101, @empty, @private=0xa010100]}, @lsrr={0x83, 0x3, 0x4a}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffd}}}}}}, 0x0)

559.841524ms ago: executing program 4 (id=2792):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48)

387.075872ms ago: executing program 1 (id=2793):
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x280, 0x0)

216.837683ms ago: executing program 1 (id=2794):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)

104.263415ms ago: executing program 3 (id=2795):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x108, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4706, &(0x7f0000008f40)="$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")

82.471866ms ago: executing program 4 (id=2796):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@nobarrier}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000600)="$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")

0s ago: executing program 1 (id=2797):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2000000, {0x1, 0x2}}]}}, 0x0, 0x32}, 0x28)

kernel console output (not intermixed with test programs):

Mfr=1, Product=2, SerialNumber=3
[  372.346082][   T30] audit: type=1326 audit(1792338608.647:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.4.2292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25ed99c819 code=0x0
[  372.370287][ T6200] usb 1-1: Product: syz
[  372.387703][ T6200] usb 1-1: Manufacturer: syz
[  372.393033][ T6200] usb 1-1: SerialNumber: syz
[  372.714174][ T6200] usb 1-1: USB disconnect, device number 82
[  372.940360][ T6058] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  373.134889][ T6058] usb 5-1: Using ep0 maxpacket: 16
[  373.152372][ T6058] usb 5-1: unable to get BOS descriptor or descriptor too short
[  373.172628][T11246] loop2: detected capacity change from 0 to 32768
[  373.193085][ T6058] usb 5-1: config 1 has an invalid interface number: 93 but max is 0
[  373.212799][T11246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2291 (11246)
[  373.215735][ T6058] usb 5-1: config 1 has no interface number 0
[  373.264076][ T6058] usb 5-1: config 1 interface 93 has no altsetting 0
[  373.269185][T11246] BTRFS info (device loop2 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  373.304716][ T6058] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0203, bcdDevice=56.2a
[  373.313951][T11246] BTRFS info (device loop2 state S): using crc32c checksum algorithm
[  373.347882][ T6058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.387209][ T6058] usb 5-1: Product: syz
[  373.413478][ T6058] usb 5-1: Manufacturer: syz
[  373.425482][ T1180] BTRFS warning (device loop2 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x54a13536 level 0, ignored
[  373.457246][ T6058] usb 5-1: SerialNumber: syz
[  373.487036][T11246] BTRFS error (device loop2 state ES): failed to find fsid 00fe44da-de57-406a-8241-57ec7d4412cf when attempting to open seed devices
[  373.515147][T11246] BTRFS error (device loop2 state ES): failed to read chunk tree: -2
[  373.624360][T11246] BTRFS error (device loop2 state ES): open_ctree failed: -2
[  373.645933][T11282] loop0: detected capacity change from 0 to 8
[  373.674439][T11282] unable to read inode lookup table
[  373.710098][ T6058] option 5-1:1.93: GSM modem (1-port) converter detected
[  373.758348][ T6058] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0
[  373.822106][ T6058] usb 5-1: USB disconnect, device number 75
[  373.916524][ T6058] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  373.989552][ T6058] option 5-1:1.93: device disconnected
[  374.273380][T11261] loop3: detected capacity change from 0 to 40427
[  374.298865][T11261] F2FS-fs (loop3): build fault injection rate: 690
[  374.335756][T11261] F2FS-fs (loop3): build fault injection type: 0x35f7
[  374.348421][ T6703] usb 2-1: new full-speed USB device number 71 using dummy_hcd
[  374.367725][T11261] F2FS-fs (loop3): invalid crc value
[  374.396581][T11261] F2FS-fs (loop3): Mismatch valid blocks 0 vs. 4
[  374.447679][ T6196] loop3: lost filesystem error report for type 5 error -108
[  374.448569][T11261] loop3: lost filesystem error report for type 5 error -117
[  374.463510][T11261] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117)
[  374.536045][ T6703] usb 2-1: unable to get BOS descriptor or descriptor too short
[  374.580279][ T6703] usb 2-1: not running at top speed; connect to a high speed hub
[  374.632534][ T6703] usb 2-1: config 0 has an invalid interface number: 230 but max is 0
[  374.667155][ T6200] usb 3-1: new full-speed USB device number 84 using dummy_hcd
[  374.673596][ T6703] usb 2-1: config 0 has no interface number 0
[  374.707279][ T6703] usb 2-1: config 0 interface 230 has no altsetting 0
[  374.742166][ T6703] usb 2-1: New USB device found, idVendor=06bd, idProduct=0404, bcdDevice=4f.dc
[  374.764269][ T6703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.782142][ T6703] usb 2-1: Product: syz
[  374.796703][ T6703] usb 2-1: Manufacturer: syz
[  374.815964][ T6703] usb 2-1: SerialNumber: syz
[  374.847272][ T6703] usb 2-1: config 0 descriptor??
[  374.895221][ T6200] usb 3-1: unable to get BOS descriptor or descriptor too short
[  374.938053][ T6200] usb 3-1: not running at top speed; connect to a high speed hub
[  374.980113][ T6200] usb 3-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40
[  375.005118][T11315] tmpfs: Bad value for 'mpol'
[  375.010978][ T6200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.021765][T11312] loop3: detected capacity change from 0 to 2048
[  375.039345][ T6200] usb 3-1: Product: syz
[  375.055503][ T6200] usb 3-1: Manufacturer: syz
[  375.070160][ T6200] usb 3-1: SerialNumber: syz
[  375.120916][T11312] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  375.157055][ T6703] gspca_main: spca500-2.14.0 probing 06bd:0404
[  375.187894][T11312] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  375.225903][ T6703] usb 2-1: USB disconnect, device number 71
[  375.234003][T11312] UDF-fs: Scanning with blocksize 512 failed
[  375.314917][T11312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  375.360124][ T6200] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  375.386833][ T6200] usb 3-1: MIDIStreaming interface descriptor not found
[  375.566838][T11326] loop0: detected capacity change from 0 to 64
[  375.625895][T11326] hfs: invalid catalog max_key_len 7
[  375.646008][ T6200] usb 3-1: USB disconnect, device number 84
[  375.657620][T11326] hfs: unable to open catalog tree
[  375.962872][ T6048] udevd[6048]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  376.021156][T11334] loop0: detected capacity change from 0 to 4096
[  376.032590][T11334] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  376.068774][T11334] ntfs3(loop0): This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver).
[  376.068774][T11334] Volume contains 64 bits run: vcn 0, lcn 480000008000, len 2.
[  376.068774][T11334] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case
[  376.119866][T11334] ntfs3(loop0): Failed to load $UpCase (-95).
[  376.205876][ T6196] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  376.407906][ T6196] usb 2-1: Using ep0 maxpacket: 32
[  376.417201][ T6196] usb 2-1: config 51 has an invalid interface number: 208 but max is 0
[  376.428568][ T6058] usb 3-1: new full-speed USB device number 85 using dummy_hcd
[  376.439326][ T6196] usb 2-1: config 51 has no interface number 0
[  376.445652][ T6196] usb 2-1: config 51 interface 208 has no altsetting 0
[  376.457216][ T6196] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70
[  376.467813][ T6196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.475939][ T6196] usb 2-1: Product: syz
[  376.491515][ T6196] usb 2-1: Manufacturer: syz
[  376.501518][ T6196] usb 2-1: SerialNumber: syz
[  376.560170][T11353] can: request_module (can-proto-3) failed.
[  376.591107][ T6200] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  376.596497][ T6058] usb 3-1: unable to get BOS descriptor or descriptor too short
[  376.632392][ T6058] usb 3-1: not running at top speed; connect to a high speed hub
[  376.650202][ T6179] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  376.662207][ T6058] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  376.672418][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.681258][ T6058] usb 3-1: Product: syz
[  376.687348][ T6058] usb 3-1: Manufacturer: 갬륂렟�賮��蘶쑫許�᳇鞑⋧妹ꊾ鲿팷ᜟ
[  376.698904][ T6058] usb 3-1: SerialNumber: syz
[  376.754625][ T6196] f81534a_ctrl 2-1:51.208: probe with driver f81534a_ctrl failed with error -71
[  376.770393][ T6196] usb 2-1: USB disconnect, device number 72
[  376.799647][ T6200] usb 1-1: unable to get BOS descriptor or descriptor too short
[  376.820030][ T6200] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  376.831751][ T6179] usb 5-1: Using ep0 maxpacket: 32
[  376.840164][ T6200] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  376.852856][ T6179] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  376.867102][ T6179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.879369][ T6200] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  376.899559][ T6200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.908441][ T6179] usb 5-1: config 0 descriptor??
[  376.928843][ T6200] usb 1-1: Product: syz
[  376.933719][ T6179] gspca_main: sunplus-2.14.0 probing 041e:400b
[  376.941973][ T6200] usb 1-1: Manufacturer: syz
[  376.955718][ T6200] usb 1-1: SerialNumber: syz
[  376.966782][ T6058] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  376.994051][ T6058] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  377.066041][ T6058] usb 3-1: USB disconnect, device number 85
[  377.132809][ T6413] udevd[6413]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  377.149590][ T6179] gspca_sunplus: reg_w_riv err -71
[  377.176023][ T6179] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  377.199066][ T6179] usb 5-1: USB disconnect, device number 76
[  377.214776][ T6200] usb 1-1: interface 1 not found
[  377.250247][ T6200] usb 1-1: USB disconnect, device number 83
[  377.470739][T11359] loop3: detected capacity change from 0 to 32768
[  377.488624][T11359] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  377.508710][T11359] XFS (loop3): alignment check failed: sunit/swidth vs. blocksize(4096)
[  377.839184][T11377] loop3: detected capacity change from 0 to 164
[  377.887806][T11377] isofs_fill_super: root inode is not a directory. Corrupted media?
[  378.191460][T11387] loop3: detected capacity change from 0 to 256
[  378.318125][T11387] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd51, chksum : 0x8b6cff9c, utbl_chksum : 0xe619d30d)
[  378.363950][T11387] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  378.403691][T11387] exFAT-fs (loop3): failed to load alloc-bitmap
[  378.431500][T11387] exFAT-fs (loop3): failed to recognize exfat type
[  378.558363][T11398] loop4: detected capacity change from 0 to 2048
[  378.614904][T11398] UDF-fs: warning (device loop4): udf_fill_super: No fileset found
[  378.747086][ T6058] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  378.895969][T11410] loop4: detected capacity change from 0 to 128
[  378.931302][ T6058] usb 3-1: Using ep0 maxpacket: 32
[  378.947292][T11410] FAT-fs (loop4): bogus sectors per cluster 7
[  378.961903][ T6058] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  378.986345][T11410] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  378.996233][ T6058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.010041][ T6058] usb 3-1: config 0 descriptor??
[  379.051586][T11370] loop1: detected capacity change from 0 to 32768
[  379.070622][T11410] FAT-fs (loop4): Can't find a valid FAT filesystem
[  379.109238][T11370] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  379.131449][ T6058] as10x_usb: device has been detected
[  379.151218][T11370] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  379.160977][ T6058] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  379.194019][T11370] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 19 (type: exp=4, found=16), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 461
[  379.276856][T11370] CPU: 1 UID: 0 PID: 11370 Comm: syz.1.2329 Not tainted syzkaller #0 PREEMPT(full) 
[  379.276886][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  379.276913][T11370] Call Trace:
[  379.276927][T11370]  <TASK>
[  379.276938][T11370]  dump_stack_lvl+0xe8/0x150
[  379.276976][T11370]  gfs2_withdraw+0xc3/0x1b0
[  379.277008][T11370]  gfs2_meta_buffer+0x250/0x2e0
[  379.277040][T11370]  inode_go_instantiate+0xea/0x1220
[  379.277070][T11370]  ? preempt_schedule_common+0x82/0xd0
[  379.277102][T11370]  ? preempt_schedule_thunk+0x16/0x30
[  379.277129][T11370]  ? __pfx_inode_go_instantiate+0x10/0x10
[  379.277171][T11370]  gfs2_instantiate+0x168/0x220
[  379.277204][T11370]  gfs2_glock_wait+0x1d4/0x2a0
[  379.277238][T11370]  init_journal+0xc48/0x2280
[  379.277279][T11370]  ? init_inodes+0xdb/0x320
[  379.277312][T11370]  ? __pfx_init_journal+0x10/0x10
[  379.277341][T11370]  ? vsnprintf+0xdf1/0xee0
[  379.277375][T11370]  ? snprintf+0xe8/0x140
[  379.277400][T11370]  ? init_inodes+0xdb/0x320
[  379.277429][T11370]  ? __pfx_snprintf+0x10/0x10
[  379.277453][T11370]  ? gfs2_glock_nq_num+0x13d/0x170
[  379.277488][T11370]  init_inodes+0xdb/0x320
[  379.277520][T11370]  gfs2_fill_super+0x1a38/0x21d0
[  379.277567][T11370]  ? __pfx_gfs2_fill_super+0x10/0x10
[  379.277599][T11370]  ? init_locking+0xb8/0x210
[  379.277625][T11370]  ? sb_set_blocksize+0x155/0x240
[  379.277654][T11370]  ? setup_bdev_super+0x4c1/0x5b0
[  379.277681][T11370]  get_tree_bdev_flags+0x431/0x4f0
[  379.277709][T11370]  ? __pfx_gfs2_fill_super+0x10/0x10
[  379.277737][T11370]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  379.277758][T11370]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  379.277798][T11370]  gfs2_get_tree+0x51/0x1e0
[  379.277829][T11370]  vfs_get_tree+0x92/0x2a0
[  379.277853][T11370]  do_new_mount+0x341/0xd30
[  379.277880][T11370]  ? apparmor_capable+0x126/0x170
[  379.277915][T11370]  ? __pfx_do_new_mount+0x10/0x10
[  379.277943][T11370]  ? ns_capable+0x89/0xe0
[  379.277986][T11370]  ? user_path_at+0xd4/0x160
[  379.278026][T11370]  __se_sys_mount+0x31d/0x420
[  379.278062][T11370]  ? __pfx___se_sys_mount+0x10/0x10
[  379.278098][T11370]  ? __x64_sys_mount+0x20/0xc0
[  379.278126][T11370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.278149][T11370]  do_syscall_64+0x15f/0xf80
[  379.278178][T11370]  ? trace_irq_disable+0x3b/0x140
[  379.278205][T11370]  ? clear_bhb_loop+0x40/0x90
[  379.278232][T11370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.278253][T11370] RIP: 0033:0x7f3ad299da8a
[  379.278283][T11370] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.278302][T11370] RSP: 002b:00007f3ad0bf5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  379.278326][T11370] RAX: ffffffffffffffda RBX: 00007f3ad0bf5ee0 RCX: 00007f3ad299da8a
[  379.278342][T11370] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f3ad0bf5ea0
[  379.278359][T11370] RBP: 00002000000124c0 R08: 00007f3ad0bf5ee0 R09: 0000000000000000
[  379.278374][T11370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500
[  379.278388][T11370] R13: 00007f3ad0bf5ea0 R14: 00000000000124ab R15: 0000200000012540
[  379.278422][T11370]  </TASK>
[  379.590140][ T6196] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  379.600033][T11370] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5
[  379.607832][ T6058] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  379.763538][ T6058] as10x_usb: error during firmware upload part1
[  379.770576][ T6058] Registered device nBox DVB-T Dongle
[  379.773695][ T6058] usb 3-1: USB disconnect, device number 86
[  379.787091][ T6196] usb 4-1: Using ep0 maxpacket: 8
[  379.798829][ T6196] usb 4-1: unable to get BOS descriptor or descriptor too short
[  379.818027][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  379.831619][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  379.846356][ T6196] usb 4-1: config 129 has an invalid interface number: 219 but max is 0
[  379.868460][ T6058] Unregistered device nBox DVB-T Dongle
[  379.870385][ T6058] as10x_usb: device has been disconnected
[  379.904345][ T6196] usb 4-1: config 129 has no interface number 0
[  379.953595][ T6196] usb 4-1: config 129 interface 219 altsetting 7 has an invalid endpoint descriptor of length 2, skipping
[  379.982223][ T6200] usb 1-1: new full-speed USB device number 84 using dummy_hcd
[  380.021602][ T6196] usb 4-1: config 129 interface 219 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  380.074888][ T6196] usb 4-1: config 129 interface 219 has no altsetting 0
[  380.106740][ T6196] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=52.55
[  380.145335][ T6196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.154566][ T6196] usb 4-1: Product: syz
[  380.166721][ T6196] usb 4-1: Manufacturer: syz
[  380.178353][ T6196] usb 4-1: SerialNumber: syz
[  380.184093][ T6200] usb 1-1: not running at top speed; connect to a high speed hub
[  380.219634][ T6200] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  380.236658][ T6200] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  380.274997][ T6200] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1023
[  380.300651][ T6200] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  380.319089][ T6200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.340343][ T6200] usb 1-1: Product: syz
[  380.350554][ T6200] usb 1-1: Manufacturer: syz
[  380.364825][ T6200] usb 1-1: SerialNumber: syz
[  380.375426][ T6058] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  380.464288][T11441] XFS (nbd4): SB validate failed with error -5.
[  380.483491][ T6196] kvaser_usb 4-1:129.219: error -ENODEV: Cannot get usb endpoint(s)
[  380.502909][ T6196] usb 4-1: USB disconnect, device number 79
[  380.515859][ T6179] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  380.551007][ T6058] usb 2-1: Using ep0 maxpacket: 16
[  380.559123][ T6058] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  380.581749][ T6058] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  380.595711][ T6058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  380.616176][ T6058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  380.630430][ T6058] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  380.637997][ T6200] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor
[  380.652380][ T6058] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  380.668660][ T6058] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  380.679333][ T6058] usb 2-1: Product: syz
[  380.683656][ T6058] usb 2-1: SerialNumber: syz
[  380.694200][ T6200] usb 1-1: 1:1 : unsupported format bits 0x200c
[  380.700656][ T6179] usb 3-1: Using ep0 maxpacket: 16
[  380.705932][ T6200] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  380.724573][ T6179] usb 3-1: unable to get BOS descriptor or descriptor too short
[  380.727180][ T6200] usb 1-1: 0:2 : does not exist
[  380.748721][ T6200] usb 1-1: unit 1 not found!
[  380.752796][ T6179] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  380.777159][ T6179] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  380.787449][ T6058] usb 2-1: config 0 descriptor??
[  380.800166][ T6200] usb 1-1: unit 130 not found!
[  380.811278][ T6179] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  380.822617][ T6058] xbox_remote_probe: endpoint_in message size==0?
[  380.830414][ T6179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.840297][ T6179] usb 3-1: Product: syz
[  380.857178][ T6179] usb 3-1: Manufacturer: syz
[  380.869059][ T6179] usb 3-1: SerialNumber: syz
[  380.934045][ T6200] usb 1-1: USB disconnect, device number 84
[  380.961331][T11450] loop4: detected capacity change from 0 to 164
[  381.104720][ T6048] udevd[6048]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  381.138759][ T6058] usb 2-1: USB disconnect, device number 73
[  381.175135][ T6179] usb 3-1: 0:1 : does not exist
[  381.180774][ T6179] usb 3-1: unit 6 not found!
[  381.283313][ T6179] usb 3-1: USB disconnect, device number 87
[  381.366726][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  381.466412][ T6196] usb 5-1: new full-speed USB device number 77 using dummy_hcd
[  381.618108][   T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  381.631793][ T6196] usb 5-1: unable to get BOS descriptor or descriptor too short
[  381.640413][ T6196] usb 5-1: not running at top speed; connect to a high speed hub
[  381.649288][ T6196] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  381.659768][ T6196] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  381.671499][ T6196] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 288, setting to 64
[  381.686107][ T6196] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40
[  381.695582][ T6200] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  381.703957][ T6196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.712230][ T6196] usb 5-1: Product: syz
[  381.716780][ T6196] usb 5-1: Manufacturer: syz
[  381.722093][ T6196] usb 5-1: SerialNumber: syz
[  381.733466][T11452] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  381.796149][   T10] usb 4-1: Using ep0 maxpacket: 32
[  381.816691][   T10] usb 4-1: config 0 has an invalid interface number: 239 but max is 0
[  381.825213][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  381.836718][   T10] usb 4-1: config 0 has no interface number 0
[  381.842952][   T10] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  381.853641][   T10] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  381.873358][   T10] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[  381.897039][   T10] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[  381.916567][ T6200] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  381.943475][   T10] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[  381.958426][ T6200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.992224][   T10] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[  382.007724][ T6200] usb 1-1: Product: syz
[  382.025669][ T6196] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  382.033714][ T6200] usb 1-1: Manufacturer: syz
[  382.044661][ T6200] usb 1-1: SerialNumber: syz
[  382.049428][   T10] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  382.069635][   T10] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0
[  382.081324][ T6200] usb 1-1: config 0 descriptor??
[  382.087990][   T10] usb 4-1: config 0 interface 239 has no altsetting 0
[  382.100569][   T10] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  382.114855][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.124577][   T10] usb 4-1: Product: syz
[  382.131184][   T10] usb 4-1: Manufacturer: syz
[  382.165073][   T10] usb 4-1: SerialNumber: syz
[  382.205300][   T10] usb 4-1: config 0 descriptor??
[  382.234119][T11456] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  382.259604][T11456] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  382.272960][ T6196] usb 5-1: USB disconnect, device number 77
[  382.325083][ T5164] Bluetooth: hci5: urb ffff888028794400 submission failed (90)
[  382.338052][ T6200] usb 1-1: f81604_read: reg: 105 failed: -EPROTO
[  382.348039][ T6200] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  382.363170][ T6200] f81604 1-1:0.0: probe with driver f81604 failed with error -71
[  382.391129][ T6200] usb 1-1: USB disconnect, device number 85
[  382.452657][ T6058] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  382.473016][ T6048] udevd[6048]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  382.568535][   T10] usb 4-1: USB disconnect, device number 80
[  382.589632][T11474] loop2: detected capacity change from 0 to 8
[  382.600593][T11474] SQUASHFS error: xz decompression failed, data probably corrupt
[  382.609598][T11474] SQUASHFS error: Failed to read block 0x108: -5
[  382.619833][T11474] SQUASHFS error: Unable to read metadata cache entry [106]
[  382.639722][T11474] SQUASHFS error: Unable to read inode 0x11f
[  382.658304][ T6058] usb 2-1: Using ep0 maxpacket: 8
[  382.673739][ T6058] usb 2-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  382.719456][ T6058] usb 2-1: config 1 interface 0 has no altsetting 0
[  382.746964][ T6058] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40
[  382.771731][ T6058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.792961][ T6058] usb 2-1: Product: syz
[  382.804152][ T6058] usb 2-1: Manufacturer: syz
[  382.808852][ T6058] usb 2-1: SerialNumber: syz
[  383.028327][T11484] loop0: detected capacity change from 0 to 1024
[  383.040412][T11484] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  383.068357][T11484] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  383.079420][ T6058] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input29
[  383.089553][T11484] EXT4-fs (loop0): orphan cleanup on readonly fs
[  383.120272][ T6058] usb 2-1: USB disconnect, device number 74
[  383.126428][    C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  383.127945][T11484] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14
[  383.147380][ T6179] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  383.217791][T11484] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  383.262490][ T6058] appletouch 2-1:1.0: input: appletouch disconnected
[  383.271824][T11484] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.2379: Failed to acquire dquot type 0
[  383.308731][T11487] loop4: detected capacity change from 0 to 2048
[  383.320266][T11484] loop0: lost filesystem error report for type 5 error -117
[  383.320908][T11484] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14
[  383.327966][ T6179] usb 3-1: Using ep0 maxpacket: 16
[  383.329107][T11484] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  383.338184][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  383.338205][    C0] EXT4-fs (loop0): initial error at time 1792338618: ext4_acquire_dquot:7028
[  383.338231][    C0] EXT4-fs (loop0): last error at time 1792338618: ext4_acquire_dquot:7028
[  383.384704][ T6179] usb 3-1: unable to get BOS descriptor or descriptor too short
[  383.402678][ T6179] usb 3-1: config 7 has an invalid interface number: 192 but max is 0
[  383.425624][T11484] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.2379: Failed to acquire dquot type 0
[  383.431648][ T6179] usb 3-1: config 7 has no interface number 0
[  383.443757][T11487] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  383.470265][ T6179] usb 3-1: config 7 interface 192 has no altsetting 0
[  383.479772][T11484] loop0: lost filesystem error report for type 5 error -117
[  383.480359][T11484] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.2379: Freeing blocks not in datazone - block = 0, count = 4096
[  383.505501][ T6179] usb 3-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.39
[  383.511099][T11484] loop0: lost filesystem error report for type 5 error -117
[  383.530265][ T6179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.571731][T11484] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14
[  383.579891][ T6179] usb 3-1: Product: syz
[  383.586127][ T6179] usb 3-1: Manufacturer: syz
[  383.597084][ T6179] usb 3-1: SerialNumber: syz
[  383.620226][T11484] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  383.663011][T11484] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.2379: Failed to acquire dquot type 0
[  383.694818][T11484] loop0: lost filesystem error report for type 5 error -117
[  383.695730][T11484] EXT4-fs (loop0): 1 orphan inode deleted
[  383.717294][T11484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  383.804400][ T6070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.851851][ T6179] rndis_host 3-1:7.192: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  383.907325][ T6179] usb 3-1: USB disconnect, device number 88
[  383.994872][T11494] loop1: detected capacity change from 0 to 1024
[  384.021648][T11494] hfsplus: bad catalog folder entry
[  384.175629][   T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  384.241453][T11489] loop3: detected capacity change from 0 to 32768
[  384.264827][T11489] OCFS2: ERROR (device loop3): int ocfs2_validate_slot_map_block(struct super_block *, struct buffer_head *): Invalid Slot Map Buffer Head Block Number : 0, Should be >= 2
[  384.264911][T11489] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  384.299720][T11489] OCFS2: File system is now read-only.
[  384.316260][T11489] (syz.3.2382,11489,1):ocfs2_map_slot_buffers:410 ERROR: status = -30
[  384.324682][T11489] (syz.3.2382,11489,1):ocfs2_init_slot_info:448 ERROR: status = -30
[  384.333743][T11489] (syz.3.2382,11489,1):ocfs2_initialize_super:2222 ERROR: status = -30
[  384.344518][T11489] (syz.3.2382,11489,1):ocfs2_fill_super:1177 ERROR: status = -30
[  384.364979][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7
[  384.382452][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024
[  384.398171][   T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  384.411932][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.434119][   T10] usb 5-1: config 0 descriptor??
[  384.446346][ T6200] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  384.457360][ T6196] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[  384.622311][T11507] loop3: detected capacity change from 0 to 16
[  384.646593][T11507] erofs (device loop3): unsupported datalayout 7 of nid 36
[  384.658081][ T6196] usb 1-1: config 5 has an invalid interface number: 230 but max is 0
[  384.667653][ T6200] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ca.8e
[  384.690277][ T6196] usb 1-1: config 5 has no interface number 0
[  384.699232][   T10] ath6kl: Failed to submit usb control message: -71
[  384.710515][ T6200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.723513][ T6196] usb 1-1: config 5 interface 230 has no altsetting 0
[  384.730590][   T10] ath6kl: unable to send the bmi data to the device: -71
[  384.750528][   T10] ath6kl: Unable to send get target info: -71
[  384.764119][ T6196] usb 1-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=e0.9e
[  384.781821][ T6196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.796048][ T6200] pwc: Logitech QuickCam Zoom USB webcam detected.
[  384.802785][   T10] ath6kl: Failed to init ath6kl core: -71
[  384.820636][ T6196] usb 1-1: Product: syz
[  384.826587][   T10] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  384.838696][ T6196] usb 1-1: Manufacturer: syz
[  384.853891][ T6196] usb 1-1: SerialNumber: syz
[  384.869222][   T10] usb 5-1: USB disconnect, device number 78
[  384.890368][  T809] usb 3-1: new low-speed USB device number 89 using dummy_hcd
[  384.998203][ T6200] pwc: Failed to set LED on/off time (-71)
[  385.012447][ T6200] pwc: send_video_command error -71
[  385.020378][ T6200] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  385.034184][ T6200] Philips webcam 2-1:127.0: probe with driver Philips webcam failed with error -71
[  385.046716][ T6200] usb 2-1: USB disconnect, device number 75
[  385.077207][  T809] usb 3-1: unable to get BOS descriptor or descriptor too short
[  385.091577][  T809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  385.127610][  T809] usb 3-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  385.149645][  T809] usb 3-1: config 1 interface 0 has no altsetting 0
[  385.161841][ T6196] usb 1-1: USB disconnect, device number 86
[  385.174838][  T809] usb 3-1: string descriptor 0 read error: -22
[  385.187515][  T809] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  385.199659][  T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.404703][T11521] loop4: detected capacity change from 0 to 4096
[  385.413243][T11521] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  385.446036][T11521] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  385.470142][ T6058] usb 3-1: USB disconnect, device number 89
[  385.629072][ T6200] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  385.753503][T11525] loop4: detected capacity change from 0 to 8192
[  385.789900][T11525] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  385.813028][ T6200] usb 4-1: Using ep0 maxpacket: 16
[  385.824089][ T6200] usb 4-1: config 8 has an invalid interface number: 108 but max is 0
[  385.846330][ T6200] usb 4-1: config 8 has no interface number 0
[  385.863345][ T6200] usb 4-1: config 8 interface 108 has no altsetting 0
[  385.883412][ T6200] usb 4-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a
[  385.886529][T11531] loop0: detected capacity change from 0 to 512
[  385.916130][ T6200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.935881][T11531] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  385.952616][ T6200] usb 4-1: Product: syz
[  385.958788][T11533] loop1: detected capacity change from 0 to 1024
[  385.969106][ T6200] usb 4-1: Manufacturer: syz
[  385.979747][ T6200] usb 4-1: SerialNumber: syz
[  385.994893][T11525] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  386.020824][T11531] EXT4-fs (loop0): too many log groups per flexible block group
[  386.034896][T11533] hfsplus: request for non-existent node 3 in B*Tree
[  386.088718][T11531] EXT4-fs (loop0): failed to initialize mballoc (-12)
[  386.105550][T11533] hfsplus: request for non-existent node 3 in B*Tree
[  386.147045][T11531] EXT4-fs (loop0): mount failed
[  386.153700][T11533] hfsplus: invalid length 28418 has been corrected to 255
[  386.164252][T11533] hfsplus: invalid length 28418 has been corrected to 255
[  386.317175][ T6200] usb 4-1: USB disconnect, device number 81
[  386.340416][T11537] loop2: detected capacity change from 0 to 512
[  386.365588][T11537] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  386.424131][T11537] EXT4-fs (loop2): failed to initialize system zone (-117)
[  386.440291][T11537] EXT4-fs (loop2): mount failed
[  386.514033][T11544] gfs2: error -5 reading superblock
[  386.758552][T11551] loop0: detected capacity change from 0 to 4096
[  386.764647][ T6058] usb 5-1: new full-speed USB device number 79 using dummy_hcd
[  386.770316][T11551] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  386.856154][T11551] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  386.874309][T11551] ntfs3(loop0): Failed to load root (-22).
[  386.930698][T11553] loop1: detected capacity change from 0 to 8
[  386.943685][T11553] unable to read xattr id index table
[  386.951823][ T6058] usb 5-1: config 0 has an invalid interface number: 20 but max is 0
[  386.960177][ T6200] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  386.995810][ T6058] usb 5-1: config 0 has no interface number 0
[  387.031883][ T6058] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  387.070220][ T6058] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  387.118898][ T6058] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  387.140737][ T6200] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  387.148805][ T6058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.160342][ T6200] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  387.181013][ T6058] usb 5-1: Product: syz
[  387.190774][ T6058] usb 5-1: Manufacturer: syz
[  387.201224][ T6200] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  387.202955][T11559] loop0: detected capacity change from 0 to 24
[  387.216928][ T6200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.218881][ T6058] usb 5-1: SerialNumber: syz
[  387.231094][ T6200] usb 3-1: Product: syz
[  387.235346][ T6200] usb 3-1: Manufacturer: syz
[  387.239975][ T6200] usb 3-1: SerialNumber: syz
[  387.259363][ T6058] usb 5-1: config 0 descriptor??
[  387.268280][T11559] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  387.285030][T11545] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  387.312539][T11559] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  387.329849][ T6058] usb-storage 5-1:0.20: USB Mass Storage device detected
[  387.359036][ T6058] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  387.403781][ T6179] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  387.498702][ T6200] usb 3-1: 0:2 : does not exist
[  387.541679][ T6058] scsi host1: usb-storage 5-1:0.20
[  387.565149][ T6200] usb 3-1: USB disconnect, device number 90
[  387.566379][ T6179] usb 4-1: Using ep0 maxpacket: 16
[  387.602071][ T6179] usb 4-1: config 0 has an invalid interface number: 49 but max is 0
[  387.634720][ T6179] usb 4-1: config 0 has no interface number 0
[  387.647540][ T6058] usb 5-1: USB disconnect, device number 79
[  387.665173][ T6179] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  387.697242][ T6179] usb 4-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x3E, changing to 0xE
[  387.709633][ T6413] udevd[6413]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  387.726004][ T6179] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  387.754285][ T6179] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  387.765121][ T6179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.785083][ T6179] usb 4-1: Product: syz
[  387.789367][ T6179] usb 4-1: Manufacturer: syz
[  387.801737][ T6179] usb 4-1: SerialNumber: syz
[  387.826671][ T6179] usb 4-1: config 0 descriptor??
[  387.843870][T11555] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  387.988654][  T809] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  388.074855][T11563] loop1: detected capacity change from 0 to 40427
[  388.086764][T11563] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(29453)
[  388.098078][T11563] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  388.121752][ T6179] usb 4-1: USB disconnect, device number 82
[  388.131685][T11563] F2FS-fs (loop1): invalid crc value
[  388.170945][T11563] F2FS-fs (loop1): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:5, type:0, next_blkoff:0, blkofs:0
[  388.189653][  T809] usb 1-1: Using ep0 maxpacket: 32
[  388.219666][  T809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  388.232564][T11563] loop1: lost filesystem error report for type 5 error -117
[  388.232592][T11563] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117)
[  388.275108][ T6196] loop1: lost filesystem error report for type 5 error -108
[  388.277198][  T809] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  388.294210][  T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.302374][  T809] usb 1-1: Product: syz
[  388.308977][  T809] usb 1-1: Manufacturer: syz
[  388.313679][  T809] usb 1-1: SerialNumber: syz
[  388.321435][  T809] usb 1-1: config 0 descriptor??
[  388.332059][  T809] usb 1-1: No union descriptors
[  388.343090][  T809] usb 1-1: unsupported MDLM descriptors
[  388.590927][ T6179] usb 1-1: USB disconnect, device number 87
[  388.879632][T11582] ntfs3(loop2): Primary boot: invalid bytes per index 24576(6).
[  388.949491][T11582] ntfs3(loop2): try to read out of volume at offset 0x1ffe00
[  389.333394][T11579] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2422 (11579)
[  389.390278][T11579] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  389.424760][T11579] BTRFS info (device loop1): using crc32c checksum algorithm
[  389.456504][T11579] BTRFS error (device loop1): nologreplay must be used with ro mount option
[  389.462594][ T6058] usb 3-1: new low-speed USB device number 91 using dummy_hcd
[  389.490001][T11579] BTRFS error (device loop1): cannot disable free-space-tree
[  389.514134][T11579] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  389.558922][T11579] BTRFS error (device loop1): open_ctree failed: -22
[  389.672875][ T6058] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  389.725637][ T6058] usb 3-1: config 1 interface 0 has no altsetting 0
[  389.751675][T11585] JBD2: unrecognised superblock format ID
[  389.769004][ T6058] usb 3-1: string descriptor 0 read error: -22
[  389.780100][T11585] (syz.3.2425,11585,1):ocfs2_journal_init:963 ERROR: Linux journal layer error
[  389.802174][ T6058] usb 3-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.40
[  389.826507][T11585] (syz.3.2425,11585,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  389.858306][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.869611][T11585] (syz.3.2425,11585,0):ocfs2_check_volume:2432 ERROR: status = -22
[  389.900690][T11583] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  389.910997][T11585] (syz.3.2425,11585,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  389.923379][T11583] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  389.935184][T11587] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  389.963957][T11585] (syz.3.2425,11585,1):ocfs2_fill_super:1177 ERROR: status = -22
[  390.014236][T11583] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  390.069782][ T6196] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  390.088467][ T6196] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  390.253081][ T6058] usbhid 3-1:1.0: can't add hid device: -71
[  390.277001][ T6058] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  390.321948][ T6058] usb 3-1: USB disconnect, device number 91
[  390.646602][ T6196] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 515ms
[  390.687604][ T6196] gfs2: fsid=syz:syz.0: jid=0: Done
[  390.716713][T11583] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  390.922280][T11591] set_capacity_and_notify: 4 callbacks suppressed
[  390.922299][T11591] loop0: detected capacity change from 0 to 32768
[  391.017718][T11591] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  391.092218][T11591] XFS (loop0): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50.
[  391.114701][T11620] loop1: detected capacity change from 0 to 2048
[  391.122537][T11591] XFS (loop0): Starting recovery (logdev: internal)
[  391.159660][T11620] NILFS (loop1): too small inode size: 0 bytes
[  391.174368][T11619] loop2: detected capacity change from 0 to 4096
[  391.181507][T11591] XFS (loop0): Ending recovery (logdev: internal)
[  391.213532][T11619] ntfs3(loop2): Failed to load $AttrDef (-22)
[  391.277399][ T6070] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  391.761353][T11639] loop4: detected capacity change from 0 to 8
[  391.795494][T11639] SQUASHFS error: Unable to read inode 0x2000
[  392.041244][ T6179] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  392.235628][ T6179] usb 3-1: Using ep0 maxpacket: 8
[  392.248915][ T6179] usb 3-1: config 11 has an invalid interface number: 196 but max is 0
[  392.268910][ T6179] usb 3-1: config 11 has no interface number 0
[  392.277565][ T6179] usb 3-1: config 11 interface 196 has no altsetting 0
[  392.297342][ T6179] usb 3-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=70.22
[  392.324313][ T6179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.333619][ T6703] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  392.352728][ T6179] usb 3-1: Product: syz
[  392.363539][ T6179] usb 3-1: Manufacturer: syz
[  392.374492][ T6179] usb 3-1: SerialNumber: syz
[  392.380749][T11632] loop1: detected capacity change from 0 to 32768
[  392.454140][T11632] JBD2: Ignoring recovery information on journal
[  392.518325][ T6703] usb 5-1: Using ep0 maxpacket: 16
[  392.557246][ T6703] usb 5-1: unable to get BOS descriptor or descriptor too short
[  392.595908][ T6703] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  392.645030][ T6179] quatech2 3-1:11.196: Quatech 2nd gen USB to Serial Driver converter detected
[  392.660988][ T6703] usb 5-1: config 0 has no interface number 0
[  392.672263][T11632] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  392.685466][ T6703] usb 5-1: config 0 interface 105 has no altsetting 0
[  392.696081][ T6179] usb 3-1: qt2_attach - failed to power on unit: -71
[  392.713327][ T6703] usb 5-1: New USB device found, idVendor=20dc, idProduct=079c, bcdDevice=a6.f5
[  392.734015][ T6179] quatech2 3-1:11.196: probe with driver quatech2 failed with error -71
[  392.747866][ T6703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.763086][ T6179] usb 3-1: USB disconnect, device number 92
[  392.778654][ T6703] usb 5-1: Product: syz
[  392.784716][ T6703] usb 5-1: Manufacturer: syz
[  392.796874][ T6703] usb 5-1: SerialNumber: syz
[  392.822963][ T6703] usb 5-1: config 0 descriptor??
[  392.893375][ T6080] ocfs2: Unmounting device (7,1) on (node local)
[  393.068305][ T6703] usb-storage 5-1:0.105: USB Mass Storage device detected
[  393.164027][T11653] loop3: detected capacity change from 0 to 32768
[  393.180574][ T6703] usb 5-1: USB disconnect, device number 80
[  393.227629][T11653] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  393.240924][T11653] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  393.291378][T11653] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 19 (type: exp=4, found=16), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 461
[  393.321739][T11653] CPU: 1 UID: 0 PID: 11653 Comm: syz.3.2453 Not tainted syzkaller #0 PREEMPT(full) 
[  393.321771][T11653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  393.321786][T11653] Call Trace:
[  393.321796][T11653]  <TASK>
[  393.321806][T11653]  dump_stack_lvl+0xe8/0x150
[  393.321846][T11653]  gfs2_withdraw+0xc3/0x1b0
[  393.321878][T11653]  gfs2_meta_buffer+0x250/0x2e0
[  393.321914][T11653]  inode_go_instantiate+0xea/0x1220
[  393.321947][T11653]  ? preempt_schedule_common+0x82/0xd0
[  393.321977][T11653]  ? preempt_schedule_thunk+0x16/0x30
[  393.322005][T11653]  ? __pfx_inode_go_instantiate+0x10/0x10
[  393.322046][T11653]  gfs2_instantiate+0x168/0x220
[  393.322079][T11653]  gfs2_glock_wait+0x1d4/0x2a0
[  393.322113][T11653]  init_journal+0xc48/0x2280
[  393.322155][T11653]  ? init_inodes+0xdb/0x320
[  393.322187][T11653]  ? __pfx_init_journal+0x10/0x10
[  393.322215][T11653]  ? vsnprintf+0xdf1/0xee0
[  393.322250][T11653]  ? snprintf+0xe8/0x140
[  393.322274][T11653]  ? init_inodes+0xdb/0x320
[  393.322303][T11653]  ? __pfx_snprintf+0x10/0x10
[  393.322328][T11653]  ? gfs2_glock_nq_num+0x13d/0x170
[  393.322362][T11653]  init_inodes+0xdb/0x320
[  393.322394][T11653]  gfs2_fill_super+0x1a38/0x21d0
[  393.322440][T11653]  ? __pfx_gfs2_fill_super+0x10/0x10
[  393.322480][T11653]  ? init_locking+0xb8/0x210
[  393.322506][T11653]  ? sb_set_blocksize+0x155/0x240
[  393.322537][T11653]  ? setup_bdev_super+0x4c1/0x5b0
[  393.322563][T11653]  get_tree_bdev_flags+0x431/0x4f0
[  393.322587][T11653]  ? __pfx_gfs2_fill_super+0x10/0x10
[  393.322615][T11653]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  393.322635][T11653]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  393.322669][T11653]  gfs2_get_tree+0x51/0x1e0
[  393.322701][T11653]  vfs_get_tree+0x92/0x2a0
[  393.322727][T11653]  do_new_mount+0x341/0xd30
[  393.322752][T11653]  ? apparmor_capable+0x126/0x170
[  393.322787][T11653]  ? __pfx_do_new_mount+0x10/0x10
[  393.322816][T11653]  ? ns_capable+0x89/0xe0
[  393.322861][T11653]  ? user_path_at+0xd4/0x160
[  393.322895][T11653]  __se_sys_mount+0x31d/0x420
[  393.322929][T11653]  ? __pfx___se_sys_mount+0x10/0x10
[  393.322965][T11653]  ? __x64_sys_mount+0x20/0xc0
[  393.322992][T11653]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.323016][T11653]  do_syscall_64+0x15f/0xf80
[  393.323044][T11653]  ? trace_irq_disable+0x3b/0x140
[  393.323071][T11653]  ? clear_bhb_loop+0x40/0x90
[  393.323098][T11653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.323119][T11653] RIP: 0033:0x7fad8c59da8a
[  393.323139][T11653] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  393.323157][T11653] RSP: 002b:00007fad8d3bae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  393.323181][T11653] RAX: ffffffffffffffda RBX: 00007fad8d3baee0 RCX: 00007fad8c59da8a
[  393.323197][T11653] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007fad8d3baea0
[  393.323213][T11653] RBP: 00002000000124c0 R08: 00007fad8d3baee0 R09: 0000000000000000
[  393.323228][T11653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500
[  393.323242][T11653] R13: 00007fad8d3baea0 R14: 00000000000124ab R15: 0000200000012540
[  393.323275][T11653]  </TASK>
[  393.323897][T11653] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5
[  393.662724][T11663] loop2: detected capacity change from 0 to 512
[  393.693544][T11663] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  393.817121][T11663] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  393.956435][T11663] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2455: bad orphan inode 4
[  393.986622][T11663] loop2: lost filesystem error report for type 5 error -117
[  393.987111][T11663] EXT4-fs (loop2): 1 orphan inode deleted
[  393.994534][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  393.994557][    C0] EXT4-fs (loop2): initial error at time 2000000002: ext4_orphan_get:1423
[  393.994583][    C0] EXT4-fs (loop2): last error at time 2000000002: ext4_orphan_get:1423
[  394.072545][T11663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.227875][ T6071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.240497][  T809] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  394.248538][ T6196] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  394.305218][ T6179] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  394.414397][  T809] usb 5-1: Using ep0 maxpacket: 16
[  394.430318][  T809] usb 5-1: unable to get BOS descriptor or descriptor too short
[  394.440761][ T6196] usb 1-1: Using ep0 maxpacket: 16
[  394.462033][ T6196] usb 1-1: config index 0 descriptor too short (expected 526, got 367)
[  394.472464][ T6179] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  394.480285][  T809] usb 5-1: config 128 has an invalid interface number: 35 but max is 0
[  394.500504][ T6179] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  394.508350][ T6196] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  394.517551][ T6179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.534393][  T809] usb 5-1: config 128 has no interface number 0
[  394.560394][ T6179] usb 2-1: config 0 descriptor??
[  394.562362][ T6196] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96
[  394.576806][  T809] usb 5-1: config 128 interface 35 altsetting 252 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  394.597311][ T6196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.609279][ T6179] rndis_host 2-1:0.0: rndis: master #0/ffff88803185f000 slave #1/0000000000000000
[  394.616083][  T809] usb 5-1: config 128 interface 35 has no altsetting 0
[  394.633155][ T6196] usb 1-1: Product: syz
[  394.643997][ T6196] usb 1-1: Manufacturer: syz
[  394.655351][  T809] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=71.8a
[  394.676947][ T6196] usb 1-1: SerialNumber: syz
[  394.683486][  T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.706111][ T6196] usb 1-1: config 0 descriptor??
[  394.714710][  T809] usb 5-1: Product: syz
[  394.725537][  T809] usb 5-1: Manufacturer: syz
[  394.747942][  T809] usb 5-1: SerialNumber: syz
[  394.822570][ T6196] usb 2-1: USB disconnect, device number 76
[  394.975445][ T6179] usb 1-1: USB disconnect, device number 88
[  394.988125][T11697] loop2: detected capacity change from 0 to 2048
[  395.026239][  T809] smsc75xx 5-1:128.35 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  395.045571][T11697]  loop2: p2 < > p3 < p5 > p4
[  395.062442][T11697] loop2: partition table partially beyond EOD, truncated
[  395.070254][  T809] smsc75xx 5-1:128.35: probe with driver smsc75xx failed with error -22
[  395.081846][T11697] loop2: p2 start 4278190080 is beyond EOD, truncated
[  395.106460][T11697] loop2: p4 size 8192 extends beyond EOD, truncated
[  395.115380][  T809] usb 5-1: USB disconnect, device number 81
[  395.140561][T11697] loop2: p5 size 8192 extends beyond EOD, truncated
[  395.379927][T11705] loop3: detected capacity change from 0 to 512
[  395.404654][T11705] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2474: bad orphan inode 17
[  395.429904][T11705] loop3: lost filesystem error report for type 5 error -117
[  395.431689][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  395.445596][    C1] EXT4-fs (loop3): initial error at time 2000000004: ext4_orphan_get:1423
[  395.454217][    C1] EXT4-fs (loop3): last error at time 2000000004: ext4_orphan_get:1423
[  395.471688][T11705] ext4_test_bit(bit=16, block=4) = 1
[  395.484077][T11704] loop2: detected capacity change from 0 to 4096
[  395.492161][T11704] NILFS: invalid option "cp=3": read-only option is not specified
[  395.501497][T11705] is_bad_inode(inode)=0
[  395.505898][T11705] NEXT_ORPHAN(inode)=0
[  395.512378][T11705] max_ino=32
[  395.515705][T11705] i_nlink=1
[  395.521166][T11705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  395.609280][ T6073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.673859][ T6045] udevd[6045]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  395.695769][ T6413] udevd[6413]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  395.712924][ T6047] udevd[6047]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  395.837913][T11714] isofs_fill_super: root inode is not a directory. Corrupted media?
[  396.017474][ T6703] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  396.083244][ T6179] usb 5-1: new full-speed USB device number 82 using dummy_hcd
[  396.204079][ T6703] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  396.245009][ T6703] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  396.265436][ T6703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.273851][ T6179] usb 5-1: unable to get BOS descriptor or descriptor too short
[  396.282385][ T6703] usb 3-1: Product: syz
[  396.290844][ T6179] usb 5-1: not running at top speed; connect to a high speed hub
[  396.309746][ T6703] usb 3-1: Manufacturer: syz
[  396.318646][ T6179] usb 5-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40
[  396.333024][ T6703] usb 3-1: SerialNumber: syz
[  396.344466][ T6179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.359313][ T6703] usb 3-1: config 0 descriptor??
[  396.372086][ T6179] usb 5-1: Product: syz
[  396.381799][ T6703] usb 3-1: ucan: probing device on interface #0
[  396.388468][ T6200] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  396.390893][ T6179] usb 5-1: Manufacturer: syz
[  396.404494][ T6703] usb 3-1: ucan: invalid EP count (0)
[  396.412652][ T6703] usb 3-1: ucan: probe failed; try to update the device firmware
[  396.426912][ T6179] usb 5-1: SerialNumber: syz
[  396.547820][  T809] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  396.591274][ T6200] usb 1-1: Using ep0 maxpacket: 16
[  396.600660][ T6200] usb 1-1: config 3 has an invalid interface number: 114 but max is 0
[  396.620427][ T6200] usb 1-1: config 3 has no interface number 0
[  396.628732][T11511] usb 3-1: USB disconnect, device number 93
[  396.645150][ T6200] usb 1-1: config 3 interface 114 has no altsetting 0
[  396.658566][ T6200] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice= d.d3
[  396.671975][ T6200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.681816][ T6200] usb 1-1: Product: syz
[  396.696797][ T6179] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  396.701309][ T6200] usb 1-1: Manufacturer: syz
[  396.710956][ T6200] usb 1-1: SerialNumber: syz
[  396.720074][ T6179] usb 5-1: MIDIStreaming interface descriptor not found
[  396.732274][  T809] usb 2-1: Using ep0 maxpacket: 16
[  396.742216][  T809] usb 2-1: config 1 has an invalid interface association descriptor of length 5, skipping
[  396.754480][  T809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  396.768026][  T809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024
[  396.780876][  T809] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[  396.798915][  T809] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  396.816934][  T809] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[  396.827686][  T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.836070][ T6196] usb 4-1: new full-speed USB device number 83 using dummy_hcd
[  396.847952][  T809] usb 2-1: Product: syz
[  396.853605][  T809] usb 2-1: Manufacturer: syz
[  396.859383][  T809] usb 2-1: SerialNumber: syz
[  396.883131][T11724] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  396.932591][ T6179] usb 5-1: USB disconnect, device number 82
[  397.018243][ T6196] usb 4-1: unable to get BOS descriptor or descriptor too short
[  397.028159][ T6048] udevd[6048]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  397.048637][ T6196] usb 4-1: not running at top speed; connect to a high speed hub
[  397.062182][ T6200] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  397.072915][ T6196] usb 4-1: config 7 has an invalid interface number: 7 but max is 0
[  397.083848][ T6200] gspca_sn9c2028: read1 error -71
[  397.088995][ T6196] usb 4-1: config 7 has no interface number 0
[  397.101148][ T6200] gspca_sn9c2028: read1 error -71
[  397.117437][ T6196] usb 4-1: config 7 interface 7 has no altsetting 0
[  397.129034][ T6200] gspca_sn9c2028: read1 error -71
[  397.152899][ T6196] usb 4-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=a7.4e
[  397.163982][ T6200] sn9c2028 1-1:3.114: probe with driver sn9c2028 failed with error -71
[  397.172725][  T809] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  397.183259][ T6196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.191869][  T809] usb 2-1: MIDIStreaming interface descriptor not found
[  397.203049][ T6200] usb 1-1: USB disconnect, device number 89
[  397.216524][ T6196] usb 4-1: Product: syz
[  397.222029][ T6196] usb 4-1: Manufacturer: syz
[  397.246485][ T6196] usb 4-1: SerialNumber: syz
[  397.465740][  T809] usb 2-1: USB disconnect, device number 77
[  397.521055][T11736] set_capacity_and_notify: 3 callbacks suppressed
[  397.521073][T11736] loop4: detected capacity change from 0 to 128
[  397.585282][T11736] hpfs: Bad magic ... probably not HPFS
[  397.602274][ T6196] gspca_main: spca505-2.14.0 probing 0733:0430
[  397.621408][ T6196] gspca_spca505: reg write: error -71
[  397.642204][ T6196] spca505 4-1:7.7: probe with driver spca505 failed with error -5
[  397.665823][ T6196] usb 4-1: USB disconnect, device number 83
[  397.829083][T11740] loop2: detected capacity change from 0 to 2048
[  397.884622][T11740]  loop2: p1 < > p3 p4 < >
[  397.910284][T11740] loop2: p3 start 4284289 is beyond EOD, truncated
[  398.025841][T11750] loop1: detected capacity change from 0 to 8
[  398.073434][T11750] SQUASHFS error: xz decompression failed, data probably corrupt
[  398.087362][ T6413] udevd[6413]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  398.099821][ T6047] udevd[6047]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  398.129619][T11750] SQUASHFS error: Failed to read block 0x108: -5
[  398.139899][T11750] SQUASHFS error: Unable to read metadata cache entry [106]
[  398.156540][T11750] SQUASHFS error: Unable to read inode 0x11f
[  398.192228][T11755] loop0: detected capacity change from 0 to 8
[  398.256291][T11755] SQUASHFS error: lzo decompression failed, data probably corrupt
[  398.306335][T11755] SQUASHFS error: Failed to read block 0x144: -5
[  398.333099][T11755] SQUASHFS error: Unable to read metadata cache entry [142]
[  398.343768][T11758] cgroup: none used incorrectly
[  398.351694][T11755] SQUASHFS error: Unable to read inode 0x11f
[  398.592064][T11771] loop2: detected capacity change from 0 to 512
[  398.649129][T11771] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  398.665325][  T809] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  398.705061][T11771] EXT4-fs (loop2): external journal has bad superblock
[  398.860795][  T809] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  398.897933][  T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.927081][  T809] usb 4-1: config 0 descriptor??
[  398.948069][T11782] virtio-fs: tag </dev/md0> not found
[  399.062954][ T6179] usb 1-1: new full-speed USB device number 90 using dummy_hcd
[  399.195608][  T809] ath6kl: Failed to submit usb control message: -71
[  399.208843][  T809] ath6kl: unable to send the bmi data to the device: -71
[  399.230265][  T809] ath6kl: Unable to send get target info: -71
[  399.239004][  T809] ath6kl: Failed to init ath6kl core: -71
[  399.246514][  T809] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  399.264104][  T809] usb 4-1: USB disconnect, device number 84
[  399.299836][ T6179] usb 1-1: unable to get BOS descriptor or descriptor too short
[  399.314030][ T6179] usb 1-1: not running at top speed; connect to a high speed hub
[  399.332106][T11511] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  399.345896][ T6179] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  399.367896][ T6179] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  399.399456][ T6179] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  399.419744][ T6179] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.430679][ T6179] usb 1-1: Product: syz
[  399.434924][ T6179] usb 1-1: Manufacturer: syz
[  399.439565][ T6179] usb 1-1: SerialNumber: syz
[  399.516871][T11511] usb 5-1: Using ep0 maxpacket: 8
[  399.525807][T11511] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  399.558270][T11511] usb 5-1: New USB device found, idVendor=0499, idProduct=1032, bcdDevice= 0.40
[  399.568037][T11511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.580857][T11511] usb 5-1: Product: syz
[  399.585168][T11511] usb 5-1: Manufacturer: syz
[  399.590073][T11511] usb 5-1: SerialNumber: syz
[  399.636157][ T6196] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  399.746881][ T6179] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  399.762723][ T6179] usb 1-1: selecting invalid altsetting 1
[  399.768635][ T6179] snd-usb-us122l 1-1:1.1: usb_set_interface error
[  399.775480][ T6179] snd-usb-us122l 1-1:1.1: probe with driver snd-usb-us122l failed with error -22
[  399.792626][ T6179] usb 1-1: USB disconnect, device number 90
[  399.811680][ T6196] usb 2-1: Using ep0 maxpacket: 16
[  399.840638][ T6196] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  399.853145][ T6413] udevd[6413]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  399.873508][ T6196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.885446][T11511] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  399.901735][ T6196] usb 2-1: Product: syz
[  399.925616][ T6196] usb 2-1: Manufacturer: syz
[  399.944229][ T6196] usb 2-1: SerialNumber: syz
[  399.966879][ T6196] usb 2-1: config 0 descriptor??
[  399.973989][  T809] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  400.004566][ T6196] as10x_usb: device has been detected
[  400.014471][ T6196] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  400.055509][T11511] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[  400.073888][ T6196] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  400.087033][T11511] usb 5-1: USB disconnect, device number 83
[  400.141924][ T6196] as10x_usb: error during firmware upload part1
[  400.149243][ T6196] Registered device Sky IT Digital Key (green led)
[  400.158070][  T809] usb 3-1: Using ep0 maxpacket: 8
[  400.189537][ T6413] udevd[6413]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  400.208381][  T809] usb 3-1: unable to get BOS descriptor or descriptor too short
[  400.243774][  T809] usb 3-1: config 4 has an invalid interface number: 78 but max is 0
[  400.270751][  T809] usb 3-1: config 4 has no interface number 0
[  400.279641][  T809] usb 3-1: config 4 interface 78 has no altsetting 0
[  400.288800][ T6179] usb 2-1: USB disconnect, device number 78
[  400.294939][  T809] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=6b.7c
[  400.294970][  T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.330227][  T809] usb 3-1: Product: syz
[  400.334502][  T809] usb 3-1: Manufacturer: syz
[  400.339136][  T809] usb 3-1: SerialNumber: syz
[  400.376729][  T809] usb 3-1: active config #4 != 1 ??
[  400.438440][ T6179] Unregistered device Sky IT Digital Key (green led)
[  400.445381][ T6179] as10x_usb: device has been disconnected
[  400.617817][T11511] usb 3-1: USB disconnect, device number 94
[  400.697423][T11821] loop4: detected capacity change from 0 to 8
[  400.714342][T11821] SQUASHFS error: lzo decompression failed, data probably corrupt
[  400.760060][T11821] SQUASHFS error: Failed to read block 0x91: -5
[  400.779410][T11821] SQUASHFS error: Unable to read metadata cache entry [8f]
[  400.786820][T11821] SQUASHFS error: Unable to read inode 0x11f
[  400.805573][  T809] usb 4-1: new full-speed USB device number 85 using dummy_hcd
[  400.992260][  T809] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  401.025559][  T809] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  401.044117][  T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  401.055850][  T809] usb 4-1: Product: syz
[  401.063368][  T809] usb 4-1: Manufacturer: syz
[  401.081055][  T809] usb 4-1: SerialNumber: syz
[  401.109018][  T809] usb 4-1: config 0 descriptor??
[  401.134414][  T809] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  401.160903][  T809] pctv452e: pctv452e_power_ctrl: 1
[  401.160903][  T809] 
[  401.186619][  T809] usb 4-1: selecting invalid altsetting 3
[  401.208727][  T809] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  401.208727][  T809] 
[  401.249728][  T809] dvb-usb: bulk message failed: -22 (5/0)
[  401.293963][  T809] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  401.333253][  T809] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  401.375963][  T809] usb 4-1: USB disconnect, device number 85
[  401.488169][ T6200] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  401.525095][T11841] loop2: detected capacity change from 0 to 4096
[  401.533477][T11841] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  401.548476][T11841] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  401.555732][T11511] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  401.573513][T11841] ntfs3(loop2): Failed to load $MFTMirr (-22).
[  401.683155][ T6200] usb 1-1: Using ep0 maxpacket: 32
[  401.696619][ T6200] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  401.709421][ T6200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.720810][T11845] loop4: detected capacity change from 0 to 512
[  401.727406][T11511] usb 2-1: Using ep0 maxpacket: 16
[  401.741860][T11511] usb 2-1: unable to get BOS descriptor or descriptor too short
[  401.758154][ T6200] usb 1-1: config 0 descriptor??
[  401.766922][T11511] usb 2-1: config 1 has an invalid interface number: 183 but max is 0
[  401.790725][T11845] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  401.803701][T11511] usb 2-1: config 1 has no interface number 0
[  401.811192][T11511] usb 2-1: config 1 interface 183 altsetting 6 bulk endpoint 0x85 has invalid maxpacket 1024
[  401.830087][T11845] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  401.840827][T11845] EXT4-fs (loop4): failed to initialize system zone (-117)
[  401.848633][ T6200] as10x_usb: device has been detected
[  401.854389][T11511] usb 2-1: config 1 interface 183 has no altsetting 0
[  401.862474][ T6200] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  401.884377][T11511] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=7c.05
[  401.892227][T11845] EXT4-fs (loop4): mount failed
[  401.925745][T11511] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.952941][T11511] usb 2-1: Product: syz
[  401.969683][T11511] usb 2-1: Manufacturer: syz
[  401.986929][ T6200] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  401.995799][T11511] usb 2-1: SerialNumber: syz
[  402.051944][T11835] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  402.128853][ T6200] as10x_usb: error during firmware upload part1
[  402.135917][T11852] loop3: detected capacity change from 0 to 64
[  402.136627][ T6200] Registered device nBox DVB-T Dongle
[  402.145481][ T6200] usb 1-1: USB disconnect, device number 91
[  402.191734][T11852] MINIX-fs: deleted inode referenced: 1
[  402.308364][ T6200] Unregistered device nBox DVB-T Dongle
[  402.323379][ T6200] as10x_usb: device has been disconnected
[  402.342920][T11511] opticon 2-1:1.183: opticon converter detected
[  402.386608][T11511] usb 2-1: opticon converter now attached to ttyUSB0
[  402.413816][T11859] loop3: detected capacity change from 0 to 512
[  402.445054][T11859] EXT4-fs: Ignoring removed orlov option
[  402.452052][T11511] usb 2-1: USB disconnect, device number 79
[  402.464864][T11859] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  402.480769][T11859] EXT4-fs (loop3): invalid journal inode
[  402.490256][T11511] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  402.507894][T11859] EXT4-fs (loop3): can't get journal size
[  402.515598][T11511] opticon 2-1:1.183: device disconnected
[  402.540722][T11859] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.2550: blocks 7-7 from inode overlap system zone
[  402.598182][T11859] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  402.598670][T11859] EXT4-fs (loop3): failed to initialize system zone (-117)
[  402.607945][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  402.607981][    C0] EXT4-fs (loop3): initial error at time 2000000010: ext4_protect_reserved_inode:182: inode 2
[  402.608018][    C0] EXT4-fs (loop3): last error at time 2000000010: ext4_protect_reserved_inode:182: inode 2
[  402.649973][T11860] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  402.660547][ T6703] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  402.670741][T11859] EXT4-fs (loop3): mount failed
[  402.803894][T11860] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  402.859353][ T6703] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  402.892513][ T6703] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  402.932118][ T6703] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  402.962028][ T6703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.992038][ T6703] usb 5-1: Product: syz
[  403.003874][ T6703] usb 5-1: Manufacturer: syz
[  403.026766][ T6703] usb 5-1: SerialNumber: syz
[  403.097982][T11863] set_capacity_and_notify: 1 callbacks suppressed
[  403.098002][T11863] loop0: detected capacity change from 0 to 4096
[  403.157675][T11863] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  403.239740][T11863] ntfs3(loop0): Failed to load $Extend (-22).
[  403.266176][T11863] ntfs3(loop0): Failed to initialize $Extend.
[  403.314544][ T6703] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  403.337792][ T6703] usb 5-1: unit 4 not found!
[  403.385826][T11511] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  403.500989][ T6703] usb 5-1: USB disconnect, device number 84
[  403.533117][ T6200] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  403.552829][T11877] loop1: detected capacity change from 0 to 4096
[  403.580032][T11511] usb 3-1: Using ep0 maxpacket: 8
[  403.592420][T11877] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  403.604715][T11511] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  403.629456][T11511] usb 3-1: config 1 has no interface number 0
[  403.639499][T11877] ntfs3(loop1): ino=3, mi_enum_attr
[  403.649974][T11511] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  403.696078][T11511] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40
[  403.722540][T11877] ntfs3(loop1): Failed to initialize $Secure::$SII (-22).
[  403.730618][T11511] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.743812][ T6200] usb 4-1: Using ep0 maxpacket: 8
[  403.764899][T11877] ntfs3(loop1): Failed to initialize $Secure (-22).
[  403.771888][T11511] usb 3-1: Product: syz
[  403.777859][T11511] usb 3-1: Manufacturer: syz
[  403.782971][ T6200] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 24, changing to 7
[  403.805300][T11511] usb 3-1: SerialNumber: syz
[  403.820981][ T6200] usb 4-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40
[  403.850884][ T6200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.870861][ T6200] usb 4-1: Product: syz
[  403.881423][ T6200] usb 4-1: Manufacturer: syz
[  403.905863][ T6200] usb 4-1: SerialNumber: syz
[  404.079246][T11511] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  404.127454][T11511] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  404.246650][ T6200] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  404.262561][T11511] usb 3-1: USB disconnect, device number 95
[  404.281668][ T6200] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  404.439774][ T6200] usb 4-1: USB disconnect, device number 86
[  404.525533][T11879] loop0: detected capacity change from 0 to 32768
[  404.555555][T11879] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  404.694590][T11906] loop1: detected capacity change from 0 to 1024
[  404.708852][T11906] hfsplus: invalid extent btree flag
[  404.743259][ T6413] udevd[6413]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  404.767698][T11906] hfsplus: failed to load extents file
[  404.791176][T11879] XFS (loop0): Ending clean mount
[  404.889701][T11879] XFS (loop0): Quotacheck needed: Please wait.
[  405.161446][T11879] XFS (loop0): Quotacheck: Done.
[  405.303210][ T6070] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  405.421118][ T6200] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  405.535015][T11929] loop3: detected capacity change from 0 to 128
[  405.666120][ T6200] usb 5-1: config 0 interface 0 has no altsetting 0
[  405.674818][ T6200] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  405.707566][ T6200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.725747][T11931] loop1: detected capacity change from 0 to 1024
[  405.741777][ T6200] usb 5-1: config 0 descriptor??
[  405.770293][T11931] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  405.811094][    T9] usb 3-1: new low-speed USB device number 96 using dummy_hcd
[  405.852947][T11931] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 3: comm syz.1.2582: lblock 3 mapped to illegal pblock 3 (length 1)
[  405.876725][T11931] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  405.886759][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  405.902443][    C0] EXT4-fs (loop1): initial error at time 2000000013: ext4_map_blocks:833: inode 3: block 3
[  405.912827][    C0] EXT4-fs (loop1): last error at time 2000000013: ext4_map_blocks:833: inode 3: block 3
[  405.931586][T11931] Quota error (device loop1): write_blk: dquota write failed
[  405.954349][T11931] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3
[  405.968630][T11931] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  405.988549][ T6200]  (null): keene_cmd_main failed (-71)
[  405.994276][T11931] EXT4-fs error (device loop1): ext4_acquire_dquot:7028: comm syz.1.2582: Failed to acquire dquot type 0
[  406.007016][T11931] loop1: lost filesystem error report for type 5 error -117
[  406.010489][T11931] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 3: comm syz.1.2582: lblock 3 mapped to illegal pblock 3 (length 1)
[  406.034109][T11931] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  406.035820][    T9] usb 3-1: No LPM exit latency info found, disabling LPM.
[  406.053558][T11931] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  406.073819][    T9] usb 3-1: config 172 has an invalid interface number: 182 but max is 0
[  406.088850][ T6200] video4linux radio48: keene_cmd_main failed (-71)
[  406.095782][    T9] usb 3-1: config 172 has no interface number 0
[  406.102170][T11931] EXT4-fs error (device loop1): ext4_acquire_dquot:7028: comm syz.1.2582: Failed to acquire dquot type 0
[  406.113839][    T9] usb 3-1: config 172 interface 182 altsetting 3 endpoint 0x3 has invalid maxpacket 64, setting to 8
[  406.127505][ T6200] radio-keene 5-1:0.0: V4L2 device registered as radio48
[  406.137171][T11931] loop1: lost filesystem error report for type 5 error -117
[  406.137811][T11931] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.2582: Freeing blocks not in datazone - block = 0, count = 4096
[  406.163972][ T6200] usb 5-1: USB disconnect, device number 85
[  406.170045][    T9] usb 3-1: config 172 interface 182 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 8
[  406.191968][T11931] loop1: lost filesystem error report for type 5 error -117
[  406.193656][    T9] usb 3-1: config 172 interface 182 has no altsetting 0
[  406.226807][T11931] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 3: comm syz.1.2582: lblock 3 mapped to illegal pblock 3 (length 1)
[  406.234039][   T10] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  406.255192][    T9] usb 3-1: string descriptor 0 read error: -22
[  406.261600][    T9] usb 3-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be
[  406.272334][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.283284][T11931] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  406.286978][T11931] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  406.315117][T11931] EXT4-fs error (device loop1): ext4_acquire_dquot:7028: comm syz.1.2582: Failed to acquire dquot type 0
[  406.332723][T11931] loop1: lost filesystem error report for type 5 error -117
[  406.333088][T11931] EXT4-fs (loop1): 1 orphan inode deleted
[  406.346450][    T9] gspca_main: finepix-2.14.0 probing 04cb:0127
[  406.371345][T11931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  406.439635][   T10] usb 1-1: Using ep0 maxpacket: 8
[  406.446907][   T10] usb 1-1: config 162 has an invalid interface number: 84 but max is 2
[  406.464890][   T10] usb 1-1: config 162 has an invalid interface number: 3 but max is 2
[  406.489834][   T10] usb 1-1: config 162 has no interface number 0
[  406.514185][   T10] usb 1-1: config 162 has no interface number 1
[  406.541988][   T10] usb 1-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  406.557875][ T6080] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.591429][   T10] usb 1-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  406.610100][ T6200] usb 3-1: USB disconnect, device number 96
[  406.622513][   T10] usb 1-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  406.635976][T11945] loop3: detected capacity change from 0 to 1024
[  406.662632][T11945] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  406.668289][   T10] usb 1-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  406.689517][T11945] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  406.722907][   T10] usb 1-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  406.735658][T11945] jbd2_journal_init_inode: Cannot locate journal superblock
[  406.766391][T11945] EXT4-fs (loop3): Could not load journal inode
[  406.772185][   T10] usb 1-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  406.788398][T11947] loop1: detected capacity change from 0 to 2048
[  406.814238][   T10] usb 1-1: config 162 interface 84 has no altsetting 0
[  406.822167][   T10] usb 1-1: config 162 interface 2 has no altsetting 0
[  406.850401][   T10] usb 1-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23
[  406.893305][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.927467][   T10] usb 1-1: Product: syz
[  406.935416][   T10] usb 1-1: Manufacturer: syz
[  406.949480][T11947] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  406.961500][   T10] usb 1-1: SerialNumber: syz
[  406.981447][T11947] FAT-fs (loop1): Filesystem has been set read-only
[  407.306320][ T5164] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  407.359387][T11960] loop1: detected capacity change from 0 to 64
[  407.390508][T11960] hfs: Bad value for 'dir_umask'
[  407.405592][   T10] usb 1-1: USB disconnect, device number 92
[  407.892295][T11975] loop2: detected capacity change from 0 to 4096
[  407.917407][T11975] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  407.956484][T11982] EXT4-fs: Ignoring removed bh option
[  407.986884][T11982] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  408.026544][T11982] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  408.088567][T11975] ntfs3(loop2): Failed to load root (-22).
[  408.448522][T12000] SQUASHFS error: xz decompression failed, data probably corrupt
[  408.477270][T12000] SQUASHFS error: Failed to read block 0x108: -5
[  408.497089][T12000] SQUASHFS error: Unable to read metadata cache entry [106]
[  408.517662][T12000] SQUASHFS error: Unable to read inode 0x11f
[  408.606805][ T6058] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  408.747555][   T10] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  408.779584][ T6200] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  408.791538][ T6058] usb 5-1: Using ep0 maxpacket: 8
[  408.798594][ T6058] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  408.807403][ T6058] usb 5-1: config 179 has no interface number 0
[  408.813969][ T6058] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 63, changing to 9
[  408.825407][ T6058] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  408.837180][ T6058] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  408.849568][T11998] set_capacity_and_notify: 2 callbacks suppressed
[  408.849588][T11998] loop2: detected capacity change from 0 to 32768
[  408.849690][ T6058] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  408.894064][ T6058] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  408.906540][ T6058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.908874][T11998] JBD2: Invalid start block of journal: 0
[  408.927487][T11998] (syz.2.2612,11998,0):ocfs2_journal_init:963 ERROR: Linux journal layer error
[  408.942070][ T6703] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  408.949714][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  408.951937][T11998] (syz.2.2612,11998,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  408.970844][   T10] usb 1-1: config 4 has an invalid interface number: 176 but max is 0
[  408.979282][ T6200] usb 2-1: Using ep0 maxpacket: 8
[  408.986826][   T10] usb 1-1: config 4 has no interface number 0
[  408.993229][   T10] usb 1-1: config 4 interface 176 has no altsetting 0
[  409.002052][ T6200] usb 2-1: config 2 has an invalid interface number: 152 but max is 0
[  409.010717][ T6200] usb 2-1: config 2 has no interface number 0
[  409.017306][ T6200] usb 2-1: config 2 interface 152 has no altsetting 0
[  409.026334][T11998] (syz.2.2612,11998,0):ocfs2_check_volume:2432 ERROR: status = -22
[  409.029339][   T10] usb 1-1: string descriptor 0 read error: -22
[  409.043563][T11998] (syz.2.2612,11998,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  409.050430][ T6200] usb 2-1: New USB device found, idVendor=0bda, idProduct=8155, bcdDevice=c3.4d
[  409.061517][ T6200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.069727][   T10] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=59.64
[  409.080666][ T6200] usb 2-1: Product: syz
[  409.085132][ T6200] usb 2-1: Manufacturer: syz
[  409.089941][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.098286][ T6200] usb 2-1: SerialNumber: syz
[  409.113245][T11998] (syz.2.2612,11998,1):ocfs2_fill_super:1177 ERROR: status = -22
[  409.127559][ T6200] r8152-cfgselector 2-1: Unknown version 0x0000
[  409.161146][ T6703] usb 4-1: Using ep0 maxpacket: 8
[  409.180045][ T6703] usb 4-1: config 0 has an invalid interface number: 77 but max is 0
[  409.204247][ T6703] usb 4-1: config 0 has no interface number 0
[  409.224663][ T6703] usb 4-1: config 0 interface 77 altsetting 32 endpoint 0xF has an invalid bInterval 243, changing to 7
[  409.237264][ T6703] usb 4-1: config 0 interface 77 has no altsetting 0
[  409.251692][ T6703] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=9d.de
[  409.264801][ T6703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.277711][ T6703] usb 4-1: Product: syz
[  409.282539][ T6703] usb 4-1: Manufacturer: syz
[  409.287243][ T6703] usb 4-1: SerialNumber: syz
[  409.295055][   T10] mvusb_mdio 1-1:4.176: probe with driver mvusb_mdio failed with error -5
[  409.305023][ T6058] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input30
[  409.343288][ T5199] input input30: unable to receive magic message: -71
[  409.369010][ T6703] usb 4-1: config 0 descriptor??
[  409.407134][ T6200] r8152 2-1:2.152: Expected endpoints are not found
[  409.436204][ T5199] input input30: unable to receive magic message: -71
[  409.439296][   T10] usb 1-1: USB disconnect, device number 93
[  409.486738][ T6200] r8152-cfgselector 2-1: USB disconnect, device number 80
[  409.515971][ T6058] usb 5-1: USB disconnect, device number 86
[  409.516052][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  409.531041][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  409.636919][ T6703] imon_raw 4-1:0.77: IR endpoint missing
[  409.684033][ T6703] usb 4-1: USB disconnect, device number 87
[  410.200217][T12022] loop0: detected capacity change from 0 to 1024
[  410.236623][T12022] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  410.284296][T12022] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2623: Invalid block bitmap block 0 in block_group 0
[  410.360298][T12011] loop2: detected capacity change from 0 to 32768
[  410.369469][T12022] loop0: lost filesystem error report for type 5 error -117
[  410.372085][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  410.386043][    C0] EXT4-fs (loop0): initial error at time 2000000017: ext4_read_block_bitmap_nowait:483
[  410.395869][    C0] EXT4-fs (loop0): last error at time 2000000017: ext4_read_block_bitmap_nowait:483
[  410.408845][T12022] Quota error (device loop0): write_blk: dquota write failed
[  410.460953][T12011] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  410.464496][T12028] loop4: detected capacity change from 0 to 4096
[  410.471490][T12022] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  410.486795][T12022] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.2623: Failed to acquire dquot type 0
[  410.498556][T12022] loop0: lost filesystem error report for type 5 error -117
[  410.501376][T12022] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.2623: Freeing blocks not in datazone - block = 0, count = 4096
[  410.524860][T12022] loop0: lost filesystem error report for type 5 error -117
[  410.527047][T12022] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2623: Invalid inode bitmap blk 0 in block_group 0
[  410.548847][  T179] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7
[  410.558232][  T179] EXT4-fs error (device loop0): ext4_release_dquot:7064: comm kworker/u8:6: Failed to release dquot type 0
[  410.558895][T12022] loop0: lost filesystem error report for type 5 error -117
[  410.570060][  T179] loop0: lost filesystem error report for type 5 error -117
[  410.577506][T12028] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  410.598332][T12028] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  410.613545][T12034] loop3: detected capacity change from 0 to 764
[  410.622617][T12028] ntfs3(loop4): Failed to load $LogFile (-22).
[  410.638387][T12022] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  410.671488][T12011] XFS (loop2): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50.
[  410.694824][T12022] loop0: lost filesystem error report for type 5 error -117
[  410.698325][T12022] EXT4-fs (loop0): 1 orphan inode deleted
[  410.781175][T12022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.799495][T12011] XFS (loop2): Starting recovery (logdev: internal)
[  410.889593][T12011] XFS (loop2): Ending recovery (logdev: internal)
[  411.050414][ T6070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.082835][ T6071] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  411.195722][ T6703] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  411.390604][ T6703] usb 4-1: Using ep0 maxpacket: 16
[  411.424428][ T6703] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  411.441066][ T6703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.449604][ T6703] usb 4-1: Product: syz
[  411.453913][ T6703] usb 4-1: Manufacturer: syz
[  411.458683][ T6703] usb 4-1: SerialNumber: syz
[  411.467718][ T6703] usb 4-1: config 0 descriptor??
[  411.475434][ T6703] hub 4-1:0.0: bad descriptor, ignoring hub
[  411.481897][ T6703] hub 4-1:0.0: probe with driver hub failed with error -5
[  411.501465][ T6058] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  411.677929][T12059] loop2: detected capacity change from 0 to 512
[  411.683344][ T6058] usb 5-1: Using ep0 maxpacket: 16
[  411.701753][T12057] loop0: detected capacity change from 0 to 2048
[  411.713867][ T6058] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  411.727203][ T6058] usb 5-1: config 1 has no interface number 0
[  411.748697][ T6058] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  411.767396][ T6058] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  411.782400][T12057]  loop0: p1 p2 p3
[  411.782400][T12057]  p1: <netbsd: p5 >
[  411.796172][ T6058] usb 5-1: config 1 interface 105 has no altsetting 0
[  411.804380][T12057] loop0: p2 size 458752 extends beyond EOD, truncated
[  411.815490][ T6058] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  411.825258][T12057] loop0: p3 start 3036741376 is beyond EOD, truncated
[  411.832661][ T6058] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  411.845920][    T9] usb 4-1: USB disconnect, device number 88
[  411.863345][ T6058] usb 5-1: Product: syz
[  411.882909][ T6058] usb 5-1: Manufacturer: syz
[  411.901671][ T6058] usb 5-1: SerialNumber: syz
[  411.940538][T12049] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  411.960551][T12049] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  412.011005][ T6045] udevd[6045]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  412.024454][ T7686] udevd[7686]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[  412.037334][ T6047] udevd[6047]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  412.213264][ T6058] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71
[  412.242165][ T6058] usb 5-1: USB disconnect, device number 87
[  412.451567][T12041] loop1: detected capacity change from 0 to 32768
[  412.492551][T12041] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  412.519139][T12041] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  412.564474][T12041] syz.1.2628: attempt to access beyond end of device
[  412.564474][T12041] loop1: rw=12288, sector=51539607696, nr_sectors = 8 limit=32768
[  412.599107][T12041] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5
[  412.685033][T12075] loop2: detected capacity change from 0 to 1024
[  412.732527][T12075] syz.2.2644: attempt to access beyond end of device
[  412.732527][T12075] loop2: rw=0, sector=786438, nr_sectors = 2 limit=1024
[  412.799218][T12075] Buffer I/O error on dev loop2, logical block 393219, async page read
[  412.835295][T12075] syz.2.2644: attempt to access beyond end of device
[  412.835295][T12075] loop2: rw=0, sector=786438, nr_sectors = 2 limit=1024
[  412.905566][T12075] Buffer I/O error on dev loop2, logical block 393219, async page read
[  413.611058][T12067] loop0: detected capacity change from 0 to 40427
[  413.619932][T12067] F2FS-fs: inline encryption not supported
[  413.631482][T12067] F2FS-fs (loop0): Image doesn't support compression
[  413.639691][T12067] F2FS-fs (loop0): invalid crc value
[  413.787278][ T6058] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  413.844841][T12067] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  413.861584][ T6179] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  413.887843][T12107] hfsplus: invalid file type 0113366 for inode 2
[  413.904362][T12107] hfsplus: failed to load root directory
[  413.916684][T12067] F2FS-fs (loop0): Start checkpoint disabled!
[  413.972184][ T6058] usb 2-1: unable to get BOS descriptor or descriptor too short
[  413.980846][T12067] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  413.991284][T12067] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  414.011293][ T6058] usb 2-1: config 4 has an invalid interface number: 57 but max is 0
[  414.033621][ T6058] usb 2-1: config 4 has no interface number 0
[  414.053589][ T6179] usb 5-1: unable to get BOS descriptor or descriptor too short
[  414.065912][ T6058] usb 2-1: config 4 interface 57 has no altsetting 0
[  414.080969][ T6179] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  414.094065][ T6058] usb 2-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=5a.ce
[  414.103943][ T6058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.112707][ T6058] usb 2-1: Product: syz
[  414.117407][ T6058] usb 2-1: Manufacturer: syz
[  414.124634][ T6179] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  414.140273][ T6179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.149015][ T6058] usb 2-1: SerialNumber: syz
[  414.163896][ T6179] usb 5-1: Product: syz
[  414.174461][ T6179] usb 5-1: Manufacturer: syz
[  414.199490][ T6179] usb 5-1: SerialNumber: syz
[  414.421634][ T6058] quatech2 2-1:4.57: Quatech 2nd gen USB to Serial Driver converter detected
[  414.446503][ T6058] usb 2-1: qt2_attach - failed to power on unit: -71
[  414.482679][ T6058] quatech2 2-1:4.57: probe with driver quatech2 failed with error -71
[  414.491721][ T6179] snd-ua101 5-1:1.1: invalid format type
[  414.522879][ T6179] snd-ua101 5-1:1.0: invalid num_altsetting
[  414.543783][ T6058] usb 2-1: USB disconnect, device number 81
[  414.573965][T12105] set_capacity_and_notify: 1 callbacks suppressed
[  414.573983][T12105] loop3: detected capacity change from 0 to 32768
[  414.629699][ T6179] usb 5-1: USB disconnect, device number 88
[  414.649649][T12105] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  414.861724][T12105] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50.
[  414.922328][T12105] XFS (loop3): Starting recovery (logdev: internal)
[  414.957554][T12105] XFS (loop3): Ending recovery (logdev: internal)
[  415.078151][ T6073] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  415.260890][T12133] Device name not specified.
[  415.260890][T12133] 
[  415.568593][T12145] [syz.2.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820]
[  415.637813][    T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  415.704870][T12151] loop3: detected capacity change from 0 to 2048
[  415.729141][T12151] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  415.847615][    T9] usb 2-1: config 1 has an invalid interface number: 9 but max is 1
[  415.880665][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  415.913038][    T9] usb 2-1: config 1 has no interface number 1
[  415.931433][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  415.955960][    T9] usb 2-1: config 1 interface 0 has no altsetting 1
[  415.982063][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  416.007811][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.019760][    T9] usb 2-1: Product: syz
[  416.024012][    T9] usb 2-1: Manufacturer: syz
[  416.030624][    T9] usb 2-1: SerialNumber: syz
[  416.056865][    T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  416.075358][    T9] cdc_ncm 2-1:1.0: bind() failure
[  416.081843][ T6179] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  416.097633][    T9] cdc_ncm 2-1:1.9: CDC Union missing and no IAD found
[  416.101868][T12162] loop0: detected capacity change from 0 to 8
[  416.110830][    T9] cdc_ncm 2-1:1.9: bind() failure
[  416.147930][T12162] SQUASHFS error: xz decompression failed, data probably corrupt
[  416.177046][T12162] SQUASHFS error: Failed to read block 0x108: -5
[  416.198607][T12162] SQUASHFS error: Unable to read metadata cache entry [106]
[  416.212439][T12162] SQUASHFS error: Unable to read inode 0x101f
[  416.276940][ T6179] usb 3-1: Using ep0 maxpacket: 8
[  416.299947][    T9] usb 2-1: USB disconnect, device number 82
[  416.310565][ T6179] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  416.348163][ T6179] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  416.383143][ T6179] usb 3-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40
[  416.411523][ T6179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.436475][ T6179] usb 3-1: Product: syz
[  416.449822][ T6179] usb 3-1: Manufacturer: syz
[  416.465611][ T6179] usb 3-1: SerialNumber: syz
[  416.608342][T12168] loop0: detected capacity change from 0 to 8192
[  416.628126][T12168] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  416.725251][T12168] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  416.738928][ T6179] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71
[  416.765365][ T6179] usb 3-1: USB disconnect, device number 97
[  417.011344][T12158] loop3: detected capacity change from 0 to 32768
[  417.034868][T12158] gfs2: Bad value for 'quota'
[  417.103325][T12174] loop0: detected capacity change from 0 to 512
[  417.316648][T12178] loop1: detected capacity change from 0 to 512
[  417.361574][T12178] EXT4-fs: Ignoring removed oldalloc option
[  417.402446][T12178] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  417.459130][T12178] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.2691: bad orphan inode 15
[  417.546885][T12178] loop1: lost filesystem error report for type 5 error -117
[  417.547390][T12178] EXT4-fs (loop1): Remounting filesystem read-only
[  417.555190][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  417.555211][    C1] EXT4-fs (loop1): initial error at time 2000000024: ext4_orphan_get:1423
[  417.555231][    C1] EXT4-fs (loop1): last error at time 2000000024: ext4_orphan_get:1423
[  417.630528][T12178] ext4_test_bit(bit=14, block=18) = 1
[  417.648083][T12178] is_bad_inode(inode)=0
[  417.663596][T12178] NEXT_ORPHAN(inode)=1023
[  417.675631][T12178] max_ino=32
[  417.683603][T12178] i_nlink=0
[  417.699080][T12178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  417.728064][T12178] ext2 filesystem being mounted at /527/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  417.773606][    T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  417.798644][T12166] loop4: detected capacity change from 0 to 32768
[  417.869877][   T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  417.881722][T12166] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  417.900978][ T6080] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  417.911560][T12166] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  417.972121][T12166] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[  417.990124][    T9] usb 4-1: Using ep0 maxpacket: 8
[  418.003494][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  418.020480][    T9] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  418.033647][    T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  418.046425][    T9] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  418.058853][    T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  418.073731][    T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  418.086196][    T9] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  418.086841][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  418.119747][    T9] usb 4-1: config 168 interface 0 has no altsetting 0
[  418.157298][   T10] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  418.167904][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  418.179561][    T9] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  418.193318][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.213508][    T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  418.226243][   T10] usb 3-1: config 0 descriptor??
[  418.243702][   T10] rndis_host 3-1:0.0: rndis: master #0/ffff888036394000 slave #1/0000000000000000
[  418.259671][    T9] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  418.293631][    T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  418.309399][T12180] loop0: detected capacity change from 0 to 40427
[  418.316414][    T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  418.329922][    T9] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  418.344350][    T9] usb 4-1: config 168 interface 0 has no altsetting 0
[  418.351897][T12180] F2FS-fs (loop0): Image doesn't support compression
[  418.359148][T12180] F2FS-fs (loop0): extra_attr or flexible_inline_xattr feature is off
[  418.375125][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  418.391177][    T9] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  418.437894][    T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  418.482401][    T9] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  418.516506][   T10] usb 3-1: USB disconnect, device number 98
[  418.547954][    T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  418.588656][    T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  418.627244][T12166] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  418.628326][    T9] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  418.682057][    T9] usb 4-1: config 168 interface 0 has no altsetting 0
[  418.695660][    T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  418.718694][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.741320][    T9] usb 4-1: Product: syz
[  418.752449][T12194] loop1: detected capacity change from 0 to 4096
[  418.755191][    T9] usb 4-1: Manufacturer: syz
[  418.771468][T12194] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  418.784983][    T9] usb 4-1: SerialNumber: syz
[  418.866468][T12194] ntfs3(loop1): ino=5, mi_enum_attr
[  418.883117][T12194] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  419.080243][    T9] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  419.128336][    T9] usb 4-1: USB disconnect, device number 89
[  419.308903][T12200] FAT-fs (loop1): bogus logical sector size 0
[  419.339680][T12200] FAT-fs (loop1): Can't find a valid FAT filesystem
[  419.649611][T12212] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  419.709504][T12212] NILFS (loop0): ifile inode (checkpoint number=2) corrupted
[  419.749347][ T6413] udevd[6413]: incorrect nilfs2 checksum on /dev/loop0
[  419.762316][T12212] NILFS (loop0): error -5 while loading last checkpoint (checkpoint number=2)
[  419.789664][T12214] EXT4-fs: Ignoring removed bh option
[  419.819901][T12214] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  419.873507][T12214] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000]
[  419.917772][T12214] System zones: 0-1, 3-12
[  419.952171][T12214] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 1: comm syz.2.2707: lblock 1 mapped to illegal pblock 1 (length 1)
[  420.002382][T12214] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  420.003733][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  420.019356][    C1] EXT4-fs (loop2): initial error at time 2000000026: ext4_map_blocks:833: inode 3: block 1
[  420.029499][    C1] EXT4-fs (loop2): last error at time 2000000026: ext4_map_blocks:833: inode 3: block 1
[  420.039821][T12214] EXT4-fs (loop2): Remounting filesystem read-only
[  420.046469][T12214] Quota error (device loop2): write_blk: dquota write failed
[  420.054798][T12214] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  420.067006][T12214] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  420.078696][T12214] EXT4-fs (loop2): 1 orphan inode deleted
[  420.094104][T12214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  420.267439][ T6071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.350182][T12233] set_capacity_and_notify: 3 callbacks suppressed
[  420.350202][T12233] loop1: detected capacity change from 0 to 512
[  420.383023][   T29] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  420.406476][T12233] EXT4-fs error (device loop1): __ext4_fill_super:5590: inode #2: comm syz.1.2716: inode has both inline data and extents flags
[  420.439526][T12233] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  420.440052][T12233] EXT4-fs (loop1): get root inode failed
[  420.449462][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  420.449486][    C1] EXT4-fs (loop1): initial error at time 2000000027: __ext4_fill_super:5590: inode 2
[  420.449519][    C1] EXT4-fs (loop1): last error at time 2000000027: __ext4_fill_super:5590: inode 2
[  420.480929][T12233] EXT4-fs (loop1): mount failed
[  420.590374][   T29] usb 5-1: Using ep0 maxpacket: 16
[  420.605680][   T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  420.628979][   T29] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  420.651256][   T29] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  420.685182][   T29] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping
[  420.704380][T12242] loop3: detected capacity change from 0 to 1024
[  420.712540][   T29] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  420.739994][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.776463][   T29] usb 5-1: Product: syz
[  420.809367][   T29] usb 5-1: Manufacturer: syz
[  420.828361][   T29] usb 5-1: SerialNumber: syz
[  421.290586][   T29] usb 5-1: USB disconnect, device number 89
[  421.363566][T12264] loop0: detected capacity change from 0 to 128
[  421.388146][T12264] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  421.435870][T12264] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  421.534085][ T6413] udevd[6413]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  421.739477][T12275] loop2: detected capacity change from 0 to 512
[  421.763825][T12276] loop0: detected capacity change from 0 to 512
[  421.785125][T12275] EXT4-fs: Ignoring removed nomblk_io_submit option
[  421.796451][T12276] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  421.846723][T12275] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  421.895177][T12275] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  421.973120][T12275] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.2735: Allocating blocks 41-42 which overlap fs metadata
[  421.987467][T12280] loop4: detected capacity change from 0 to 1024
[  422.010836][T12275] loop2: lost filesystem error report for type 5 error -117
[  422.018894][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  422.032829][    C0] EXT4-fs (loop2): initial error at time 2000000028: ext4_mb_mark_diskspace_used:4222
[  422.042475][    C0] EXT4-fs (loop2): last error at time 2000000028: ext4_mb_mark_diskspace_used:4222
[  422.042503][T12280] hfsplus: catalog name length corrupted
[  422.052636][T12275] EXT4-fs (loop2): Remounting filesystem read-only
[  422.068489][T12275] Quota error (device loop2): write_blk: dquota write failed
[  422.076629][T12275] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  422.086062][T12275] Quota error (device loop2): write_blk: dquota write failed
[  422.093581][T12275] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  422.104147][T12275] EXT4-fs (loop2): 1 truncate cleaned up
[  422.110094][T12280] hfsplus: failed to load root directory
[  422.159253][T12275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.231542][T12276] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  422.290043][T12276] block device autoloading is deprecated and will be removed.
[  422.322657][T12276] EXT4-fs (loop0): couldn't read superblock of external journal
[  422.348956][ T6071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.574352][T12266] loop3: detected capacity change from 0 to 32768
[  422.613117][T12266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2732 (12266)
[  422.701836][T12266] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  422.758929][T12266] BTRFS info (device loop3): using crc32c checksum algorithm
[  422.959666][T12266] BTRFS info (device loop3): setting nodatasum
[  423.006131][T12266] BTRFS info (device loop3): allowing degraded mounts
[  423.028220][T12266] BTRFS info (device loop3): enabling ssd optimizations
[  423.056367][T12266] BTRFS info (device loop3): disabling tree log
[  423.085845][T12266] BTRFS info (device loop3): turning on async discard
[  423.114831][T12266] BTRFS info (device loop3): enabling free space tree
[  423.144081][T12266] BTRFS info (device loop3): max_inline set to 0
[  423.158385][T12310] loop0: detected capacity change from 0 to 128
[  423.228347][T12278] loop1: detected capacity change from 0 to 32768
[  423.242804][T12285] loop4: detected capacity change from 0 to 40427
[  423.261584][T12278] (syz.1.2738,12278,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1263d9a4, computed 0x5c55b458. Applying ECC.
[  423.296267][T12285] F2FS-fs: quotafile must be on filesystem root
[  423.308810][ T6073] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  423.331745][T12278] (syz.1.2738,12278,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x1263d9a4, computed 0x5c55b458
[  423.416965][T12278] (syz.1.2738,12278,0):ocfs2_validate_inode_block:1441 ERROR: Checksum failed for dinode 65
[  423.453657][T12278] (syz.1.2738,12278,1):ocfs2_read_locked_inode:599 ERROR: status = -5
[  423.497117][T12278] (syz.1.2738,12278,0):ocfs2_init_global_system_inodes:444 ERROR: status = -5
[  423.545570][T12278] (syz.1.2738,12278,0):ocfs2_init_global_system_inodes:476 ERROR: status = -5
[  423.588598][T12278] (syz.1.2738,12278,0):ocfs2_initialize_super:2198 ERROR: status = -5
[  423.635802][T12278] (syz.1.2738,12278,0):ocfs2_fill_super:1177 ERROR: status = -5
[  423.782636][T12315] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.2748: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  423.828361][T12315] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  423.832140][T12315] EXT4-fs (loop0): get root inode failed
[  423.841318][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  423.841349][    C0] EXT4-fs (loop0): last error at time 2000000030: ext4_ext_check_inode:521: inode 2
[  423.925545][T12315] EXT4-fs (loop0): mount failed
[  424.421438][T12332] ufs: Bad value for 'onerror'
[  424.471275][ T2175] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  424.651815][ T2175] usb 5-1: Using ep0 maxpacket: 8
[  424.683189][ T2175] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  424.734366][ T2175] usb 5-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  424.786561][ T2175] usb 5-1: config 1 interface 0 has no altsetting 0
[  424.824182][ T2175] usb 5-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40
[  424.863918][ T2175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.898366][ T2175] usb 5-1: Product: syz
[  424.919302][ T2175] usb 5-1: Manufacturer: syz
[  424.941767][ T2175] usb 5-1: SerialNumber: syz
[  424.965086][T12348] hfsplus: request for non-existent node -709361664 in B*Tree
[  424.993939][T12348] hfsplus: request for non-existent node -709361664 in B*Tree
[  425.072406][T12348] hfsplus: b-tree write err: -5, ino 8
[  425.232374][ T2175] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input31
[  425.274083][ T5199] bcm5974 5-1:1.0: could not read from device
[  425.320625][ T2175] usb 5-1: USB disconnect, device number 90
[  425.330494][ T5199] bcm5974 5-1:1.0: could not read from device
[  425.361840][ T5199] bcm5974 5-1:1.0: could not read from device
[  425.507617][ T6058] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  425.567083][   T30] audit: type=1326 audit(2000000031.926:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12363 comm="syz.3.2771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad8c59c819 code=0x0
[  425.688340][ T6058] usb 3-1: unable to get BOS descriptor or descriptor too short
[  425.714944][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  425.750318][ T6058] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  425.751626][T12362] ntfs3(loop1): ino=19, mi_enum_attr
[  425.765347][ T6058] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  425.780805][T12362] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  425.795363][ T6058] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40
[  425.809850][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.845652][ T6058] usb 3-1: Product: syz
[  425.857068][ T6058] usb 3-1: Manufacturer: syz
[  425.865366][ T6058] usb 3-1: SerialNumber: syz
[  426.195186][T12358] set_capacity_and_notify: 5 callbacks suppressed
[  426.195206][T12358] loop0: detected capacity change from 0 to 40427
[  426.238974][T12358] F2FS-fs: heap/no_heap options were deprecated
[  426.264580][T12358] F2FS-fs (loop0): build fault injection rate: 16
[  426.292507][T12358] F2FS-fs (loop0): build fault injection type: 0x6
[  426.328017][T12358] F2FS-fs (loop0): invalid crc value
[  426.358081][ T6058] usb 3-1: USB disconnect, device number 99
[  426.380773][T12358] F2FS-fs (loop0): inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x329f/0x4a80
[  426.459795][ T6413] udevd[6413]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  426.475787][T12358] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-12)
[  426.692162][    T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  426.894325][    T9] usb 4-1: Using ep0 maxpacket: 32
[  426.923452][    T9] usb 4-1: config 6 has an invalid interface number: 82 but max is 0
[  426.944256][    T9] usb 4-1: config 6 has no interface number 0
[  426.961143][    T9] usb 4-1: config 6 interface 82 has no altsetting 0
[  426.975557][T12395] loop1: detected capacity change from 0 to 256
[  426.993726][    T9] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01a2, bcdDevice=97.34
[  427.013616][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.024100][T12395] exfat: Deprecated parameter 'utf8'
[  427.036403][    T9] usb 4-1: Product: syz
[  427.050438][    T9] usb 4-1: Manufacturer: syz
[  427.057987][T12395] exfat: Deprecated parameter 'utf8'
[  427.073813][    T9] usb 4-1: SerialNumber: syz
[  427.074629][T12395] exfat: Deprecated parameter 'utf8'
[  427.119195][T12395] exFAT-fs (loop1): bogus fat length
[  427.142210][T12395] exFAT-fs (loop1): failed to read boot sector
[  427.154776][ T6058] usb 3-1: new full-speed USB device number 100 using dummy_hcd
[  427.172420][T12395] exFAT-fs (loop1): failed to recognize exfat type
[  427.335398][    T9] ftdi_sio 4-1:6.82: FTDI USB Serial Device converter detected
[  427.351326][ T6058] usb 3-1: unable to get BOS descriptor or descriptor too short
[  427.359691][    T9] ftdi_sio ttyUSB0: unknown device type: 0x9734
[  427.379636][ T6058] usb 3-1: not running at top speed; connect to a high speed hub
[  427.392089][    T9] usb 4-1: USB disconnect, device number 90
[  427.419820][ T6058] usb 3-1: config 4 has an invalid interface number: 147 but max is 0
[  427.432275][    T9] ftdi_sio 4-1:6.82: device disconnected
[  427.444510][ T6058] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  427.483820][ T6058] usb 3-1: config 4 has no interface number 0
[  427.507504][ T6058] usb 3-1: Dual-Role OTG device on HNP port
[  427.520940][ T6058] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  427.542108][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38
[  427.564416][T12405] loop1: detected capacity change from 0 to 2048
[  427.564785][ T6058] usb 3-1: Product: syz
[  427.596342][ T6058] usb 3-1: Manufacturer: syz
[  427.615630][ T6058] usb 3-1: SerialNumber: syz
[  427.617512][T12405] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  427.713499][T12387] loop0: detected capacity change from 0 to 40427
[  427.738355][T12387] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  427.764073][T12387] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  427.798586][T12387] F2FS-fs (loop0): Image doesn't support compression
[  427.820014][T12387] F2FS-fs (loop0): invalid crc value
[  427.921895][ T6058] uvcvideo 3-1:4.147: Found UVC 0.02 device syz (04f2:b746)
[  427.942513][ T6058] uvcvideo 3-1:4.147: No valid video chain found.
[  427.970765][ T6058] usb 3-1: USB disconnect, device number 100
[  428.141516][T12417] loop4: detected capacity change from 0 to 1024
[  428.170142][T12417] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  428.231340][T12387] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  428.231600][T12417] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 5: comm syz.4.2796: lblock 5 mapped to illegal pblock 5 (length 1)
[  428.283838][T12417] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  428.284195][T12417] Quota error (device loop4): write_blk: dquota write failed
[  428.293383][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  428.293406][    C1] EXT4-fs (loop4): initial error at time 2000000034: ext4_map_blocks:833: inode 3: block 5
[  428.293447][    C1] EXT4-fs (loop4): last error at time 2000000034: ext4_map_blocks:833: inode 3: block 5
[  428.333962][ T1161] 
[  428.336336][ T1161] ======================================================
[  428.343377][ T1161] WARNING: possible circular locking dependency detected
[  428.349290][T12387] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  428.350430][ T1161] syzkaller #0 Not tainted
[  428.361878][ T1161] ------------------------------------------------------
[  428.368925][ T1161] kworker/u8:8/1161 is trying to acquire lock:
[  428.375098][ T1161] ffff888034c5c938 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a9/0x280
[  428.384729][ T1161] 
[  428.384729][ T1161] but task is already holding lock:
[  428.392217][ T1161] ffff888034c5ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  428.402261][ T1161] 
[  428.402261][ T1161] which lock already depends on the new lock.
[  428.402261][ T1161] 
[  428.412683][ T1161] 
[  428.412683][ T1161] the existing dependency chain (in reverse order) is:
[  428.421723][ T1161] 
[  428.421723][ T1161] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  428.430527][ T1161]        percpu_down_read_internal+0x48/0x1c0
[  428.436624][ T1161]        ext4_writepages+0x205/0x3b0
[  428.441934][ T1161]        do_writepages+0x32e/0x550
[  428.447071][ T1161]        __writeback_single_inode+0x133/0x10e0
[  428.453247][ T1161]        writeback_single_inode+0x4ac/0xdc0
[  428.459188][ T1161]        write_inode_now+0x1c2/0x290
[  428.464495][ T1161]        iput+0x8c1/0xe80
[  428.468847][ T1161]        ext4_xattr_block_set+0x2359/0x2ad0
[  428.474764][ T1161]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  428.481205][ T1161]        __ext4_expand_extra_isize+0x30d/0x400
[  428.487381][ T1161]        __ext4_mark_inode_dirty+0x45c/0x710
[  428.493389][ T1161]        ext4_evict_inode+0x986/0x10e0
[  428.498869][ T1161]        evict+0x61e/0xb10
[  428.503305][ T1161]        ext4_orphan_cleanup+0xc38/0x1470
[  428.509057][ T1161]        ext4_fill_super+0x5a19/0x6330
[  428.514545][ T1161]        get_tree_bdev_flags+0x431/0x4f0
[  428.520190][ T1161]        vfs_get_tree+0x92/0x2a0
[  428.525164][ T1161]        do_new_mount+0x341/0xd30
[  428.530239][ T1161]        __se_sys_mount+0x31d/0x420
[  428.535473][ T1161]        do_syscall_64+0x15f/0xf80
[  428.540634][ T1161]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.547087][ T1161] 
[  428.547087][ T1161] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[  428.554672][ T1161]        down_read+0x47/0x2e0
[  428.559492][ T1161]        ext4_setattr+0x884/0x1da0
[  428.564642][ T1161]        notify_change+0xc1a/0xf40
[  428.569781][ T1161]        chown_common+0x466/0x6b0
[  428.574835][ T1161]        do_fchownat+0x14c/0x250
[  428.579797][ T1161]        __x64_sys_chown+0x82/0xa0
[  428.584934][ T1161]        do_syscall_64+0x15f/0xf80
[  428.590075][ T1161]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.596512][ T1161] 
[  428.596512][ T1161] -> #0 (jbd2_handle){++++}-{0:0}:
[  428.603830][ T1161]        __lock_acquire+0x15a5/0x2cf0
[  428.609225][ T1161]        lock_acquire+0x106/0x350
[  428.614287][ T1161]        wait_transaction_locked+0x1c2/0x280
[  428.620325][ T1161]        start_this_handle+0x7dc/0x2290
[  428.625891][ T1161]        jbd2__journal_start+0x2c0/0x5b0
[  428.631632][ T1161]        __ext4_journal_start_sb+0x203/0x5d0
[  428.637639][ T1161]        ext4_do_writepages+0xf76/0x4670
[  428.643296][ T1161]        ext4_writepages+0x241/0x3b0
[  428.648600][ T1161]        do_writepages+0x32e/0x550
[  428.653732][ T1161]        __writeback_single_inode+0x133/0x10e0
[  428.659910][ T1161]        writeback_sb_inodes+0x979/0x19d0
[  428.665652][ T1161]        __writeback_inodes_wb+0x111/0x240
[  428.671494][ T1161]        wb_writeback+0x459/0xb00
[  428.676549][ T1161]        wb_workfn+0xb12/0xf10
[  428.681336][ T1161]        process_scheduled_works+0xb5d/0x1860
[  428.687442][ T1161]        worker_thread+0xa53/0xfc0
[  428.692582][ T1161]        kthread+0x388/0x470
[  428.697196][ T1161]        ret_from_fork+0x514/0xb70
[  428.702337][ T1161]        ret_from_fork_asm+0x1a/0x30
[  428.707665][ T1161] 
[  428.707665][ T1161] other info that might help us debug this:
[  428.707665][ T1161] 
[  428.717919][ T1161] Chain exists of:
[  428.717919][ T1161]   jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem
[  428.717919][ T1161] 
[  428.731333][ T1161]  Possible unsafe locking scenario:
[  428.731333][ T1161] 
[  428.738800][ T1161]        CPU0                    CPU1
[  428.744269][ T1161]        ----                    ----
[  428.749655][ T1161]   rlock(&sbi->s_writepages_rwsem);
[  428.754966][ T1161]                                lock(&ei->xattr_sem);
[  428.761831][ T1161]                                lock(&sbi->s_writepages_rwsem);
[  428.769566][ T1161]   lock(jbd2_handle);
[  428.773739][ T1161] 
[  428.773739][ T1161]  *** DEADLOCK ***
[  428.773739][ T1161] 
[  428.781891][ T1161] 4 locks held by kworker/u8:8/1161:
[  428.787189][ T1161]  #0: ffff88801fef9140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  428.798455][ T1161]  #1: ffffc900055dfc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  428.810929][ T1161]  #2: ffff8880346b80d8 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0
[  428.821504][ T1161]  #3: ffff888034c5ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  428.831975][ T1161] 
[  428.831975][ T1161] stack backtrace:
[  428.837881][ T1161] CPU: 1 UID: 0 PID: 1161 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  428.837902][ T1161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  428.837914][ T1161] Workqueue: writeback wb_workfn (flush-8:0)
[  428.837941][ T1161] Call Trace:
[  428.837947][ T1161]  <TASK>
[  428.837955][ T1161]  dump_stack_lvl+0xe8/0x150
[  428.837981][ T1161]  print_circular_bug+0x2e1/0x300
[  428.838002][ T1161]  check_noncircular+0x12e/0x150
[  428.838021][ T1161]  __lock_acquire+0x15a5/0x2cf0
[  428.838051][ T1161]  ? do_raw_spin_lock+0x12b/0x2f0
[  428.838069][ T1161]  ? lock_acquire+0x106/0x350
[  428.838094][ T1161]  ? wait_transaction_locked+0x1a9/0x280
[  428.838116][ T1161]  lock_acquire+0x106/0x350
[  428.838138][ T1161]  ? wait_transaction_locked+0x1a9/0x280
[  428.838163][ T1161]  ? wait_transaction_locked+0x1a9/0x280
[  428.838184][ T1161]  wait_transaction_locked+0x1c2/0x280
[  428.838205][ T1161]  ? wait_transaction_locked+0x1a9/0x280
[  428.838226][ T1161]  ? __pfx_wait_transaction_locked+0x10/0x10
[  428.838247][ T1161]  ? __pfx_autoremove_wake_function+0x10/0x10
[  428.838268][ T1161]  ? __pfx_stack_trace_save+0x10/0x10
[  428.838288][ T1161]  ? jbd2__journal_start+0x1db/0x5b0
[  428.838309][ T1161]  start_this_handle+0x7dc/0x2290
[  428.838326][ T1161]  ? kasan_save_track+0x3e/0x80
[  428.838355][ T1161]  ? ret_from_fork_asm+0x1a/0x30
[  428.838376][ T1161]  ? __pfx_start_this_handle+0x10/0x10
[  428.838400][ T1161]  ? rcu_is_watching+0x15/0xb0
[  428.838415][ T1161]  ? trace_kmem_cache_alloc+0x29/0xe0
[  428.838439][ T1161]  ? jbd2__journal_start+0x1db/0x5b0
[  428.838457][ T1161]  ? kmem_cache_alloc_noprof+0x307/0x650
[  428.838480][ T1161]  ? jbd2__journal_start+0x1db/0x5b0
[  428.838501][ T1161]  jbd2__journal_start+0x2c0/0x5b0
[  428.838520][ T1161]  __ext4_journal_start_sb+0x203/0x5d0
[  428.838544][ T1161]  ext4_do_writepages+0xf76/0x4670
[  428.838579][ T1161]  ? __pfx_ext4_do_writepages+0x10/0x10
[  428.838607][ T1161]  ? ext4_writepages+0x205/0x3b0
[  428.838629][ T1161]  ? ext4_writepages+0x205/0x3b0
[  428.838657][ T1161]  ext4_writepages+0x241/0x3b0
[  428.838686][ T1161]  ? __pfx_ext4_writepages+0x10/0x10
[  428.838714][ T1161]  ? do_raw_spin_unlock+0xf5/0x210
[  428.838733][ T1161]  ? __pfx_ext4_writepages+0x10/0x10
[  428.838755][ T1161]  do_writepages+0x32e/0x550
[  428.838778][ T1161]  ? reacquire_held_locks+0x104/0x190
[  428.838794][ T1161]  ? writeback_sb_inodes+0x463/0x19d0
[  428.838817][ T1161]  __writeback_single_inode+0x133/0x10e0
[  428.838839][ T1161]  ? do_raw_spin_unlock+0xf5/0x210
[  428.838860][ T1161]  writeback_sb_inodes+0x979/0x19d0
[  428.838891][ T1161]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  428.838926][ T1161]  ? __pfx_down_read_trylock+0x10/0x10
[  428.838946][ T1161]  ? __pfx_move_expired_inodes+0x10/0x10
[  428.838969][ T1161]  __writeback_inodes_wb+0x111/0x240
[  428.838993][ T1161]  wb_writeback+0x459/0xb00
[  428.839015][ T1161]  ? queue_io+0x211/0x470
[  428.839036][ T1161]  ? __pfx_wb_writeback+0x10/0x10
[  428.839055][ T1161]  ? do_raw_spin_lock+0x12b/0x2f0
[  428.839079][ T1161]  wb_workfn+0xb12/0xf10
[  428.839094][ T1161]  ? look_up_lock_class+0x57/0x110
[  428.839124][ T1161]  ? __pfx_wb_workfn+0x10/0x10
[  428.839143][ T1161]  ? do_raw_spin_unlock+0xf5/0x210
[  428.839163][ T1161]  ? process_scheduled_works+0xa70/0x1860
[  428.839188][ T1161]  ? process_scheduled_works+0xa70/0x1860
[  428.839214][ T1161]  ? process_scheduled_works+0xa70/0x1860
[  428.839237][ T1161]  ? process_scheduled_works+0xa70/0x1860
[  428.839261][ T1161]  process_scheduled_works+0xb5d/0x1860
[  428.839296][ T1161]  ? __pfx_process_scheduled_works+0x10/0x10
[  428.839322][ T1161]  ? assign_work+0x3d5/0x5e0
[  428.839347][ T1161]  worker_thread+0xa53/0xfc0
[  428.839381][ T1161]  kthread+0x388/0x470
[  428.839399][ T1161]  ? __pfx_worker_thread+0x10/0x10
[  428.839422][ T1161]  ? __pfx_kthread+0x10/0x10
[  428.839440][ T1161]  ret_from_fork+0x514/0xb70
[  428.839465][ T1161]  ? __pfx_ret_from_fork+0x10/0x10
[  428.839488][ T1161]  ? __switch_to+0xc79/0x1410
[  428.839509][ T1161]  ? __pfx_kthread+0x10/0x10
[  428.839527][ T1161]  ret_from_fork_asm+0x1a/0x30
[  428.839548][ T1161]  </TASK>
[  428.870378][T12387] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  428.913347][T12417] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  429.255298][T12417] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  429.265648][T12417] EXT4-fs error (device loop4): ext4_acquire_dquot:7028: comm syz.4.2796: Failed to acquire dquot type 0
[  429.278002][T12417] loop4: lost filesystem error report for type 5 error -117
[  429.279005][T12417] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 5: comm syz.4.2796: lblock 5 mapped to illegal pblock 5 (length 1)
[  429.311612][T12417] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  429.316083][T12417] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5
[  429.339120][T12417] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  429.349286][T12417] EXT4-fs error (device loop4): ext4_acquire_dquot:7028: comm syz.4.2796: Failed to acquire dquot type 0
[  429.360675][T12417] loop4: lost filesystem error report for type 5 error -117
[  429.362276][T12417] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.2796: Freeing blocks not in datazone - block = 0, count = 4096
[  429.409453][T12417] loop4: lost filesystem error report for type 5 error -117
[  429.409802][T12417] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 5: comm syz.4.2796: lblock 5 mapped to illegal pblock 5 (length 1)
[  429.457855][T12417] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  429.458118][T12417] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5
[  429.499243][T12417] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  429.509803][T12417] EXT4-fs error (device loop4): ext4_acquire_dquot:7028: comm syz.4.2796: Failed to acquire dquot type 0
[  429.523465][T12415] loop3: detected capacity change from 0 to 32768
[  429.537746][T12415] (syz.3.2795,12415,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0x61709d30. Applying ECC.
[  429.546344][T12417] loop4: lost filesystem error report for type 5 error -117
[  429.552804][T12415] (syz.3.2795,12415,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  429.576085][T12417] EXT4-fs (loop4): 1 orphan inode deleted
[  429.582669][T12415] (syz.3.2795,12415,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  429.583317][T12417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  429.625951][T12415] JBD2: Ignoring recovery information on journal
[  429.672002][T12415] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  429.709863][ T6082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.807323][ T6073] ocfs2: Unmounting device (7,3) on (node local)