last executing test programs: 3.80415364s ago: executing program 1 (id=4349): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xb00, 0x12) 3.57352712s ago: executing program 1 (id=4352): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3.279728399s ago: executing program 1 (id=4356): r0 = syz_open_dev$video4linux(&(0x7f0000000200), 0x800000000000004, 0xc0200) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc0305602, &(0x7f0000000040)={0x1, 0x5, [0x3, 0x0, 0x0, 0x0, 0x7fff]}) 3.071108501s ago: executing program 1 (id=4359): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000280)={[{@fat=@codepage={'codepage', 0x3d, '863'}}, {@uni_xlateno}, {@numtail}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@fat=@umask={'umask', 0x3d, 0xe1}}, {@uni_xlate}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@utf8no}]}, 0x2a, 0x356, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 2.36100035s ago: executing program 1 (id=4368): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800040, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@bsdgroups}, {@nouid32}, {@i_version}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x471, &(0x7f0000000a00)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 2.145772615s ago: executing program 2 (id=4370): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x32, &(0x7f0000006c00)=0x1, 0x4) 2.095733584s ago: executing program 3 (id=4371): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) 1.853495314s ago: executing program 3 (id=4373): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xd9ffffff}]}}}]}, 0x3c}}, 0x0) 1.773276271s ago: executing program 2 (id=4374): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, 0x0) 1.696824541s ago: executing program 1 (id=4376): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 1.564495968s ago: executing program 4 (id=4377): syz_mount_image$bfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x0, 0xab, &(0x7f0000000300)="$eJzszrFJx0AYBfB3CcakyQIWbpAdHEVSamelCJnIVRwhGziANicxKARLEf3D71cc9+6+D97z29NFxiRLUmutXZIh+/3u/uHm+nY723w4y6fzQ+JkNUlKkj7J5bjnl6vtp/uaWYfMa3mttT7Of9kVAAD4mSbTIZdMUzm89N+XliTtbzcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+B/eAwAA///1dRks") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.438952851s ago: executing program 0 (id=4378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x6, 0x4, 0x80000000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 1.380877051s ago: executing program 4 (id=4379): r0 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 1.258300167s ago: executing program 2 (id=4380): r0 = getpid() sched_getscheduler(r0) 960.437807ms ago: executing program 0 (id=4381): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 846.362228ms ago: executing program 0 (id=4382): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x30314247}}) 796.125526ms ago: executing program 2 (id=4383): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) 745.187717ms ago: executing program 4 (id=4384): r0 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 744.494621ms ago: executing program 3 (id=4385): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d0d, 0x0) 636.6606ms ago: executing program 0 (id=4386): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="50030000160001082dbd700000000000fe880000000000000000000000000001fe88000000000000000000000000010100000000fffc00010000a02000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x350}}, 0x0) 582.117001ms ago: executing program 2 (id=4387): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0x5}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 479.817796ms ago: executing program 3 (id=4388): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x6, 0x5a1, 0x883d}, 0x9c) 361.53906ms ago: executing program 4 (id=4389): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 361.3241ms ago: executing program 0 (id=4390): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@uni_xlateno}, {@shortname_win95}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@fat=@uid}, {@rodir}, {@shortname_win95}, {@fat=@umask={'umask', 0x3d, 0x89}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8}}, {@fat=@nfs}]}, 0x1, 0x2b0, &(0x7f0000000640)="$eJzs3T9rO3UcB/DPpWkSdUhmEbzB+Ufb1SUdWhA7KR100WJbKE0QWihUxLSTq0/ARyAIrj4HF5+B4Co4FiycXO6uaf6dVprWH329ln76ve/7vn96IUPJN5+/Mzw9TOP4+uvfotNJotGPftwk0YtGVK5iSv+7AABeZzdZFn9mhYfkkojorG5aAMAKzb3/J0l94KenmRcAsDoff/Lph9t7ezsfpWkndoffXuzn7//5z+L69nGcxCCOYiO6cRuR3Snq3SzLRs0014v3hqOL/Tw5/OyX8v7bf0SM85vRjd64aTr/wd7OZlq4lx/l83izHL+f57eiG39NjV/9g2Jnay4fEc3e9PxfRTd+/SK+jEEcjicxGf+bzTQ9+bnakTyfjC722+N+E9naE/w5AAAAAAAAAAAAAAAAAAAAAAB4IV6VZ+e0Y3x+T95Unr+zdpv/sh5ppTd9Pk+RvzstcOZ8oFEW31fn62ykaZqVHSf5ZrzdjObzrBoAAAAAAAAAAAAAAAAAAAD+X84vvzo9GAyOzh6lqE4DqD7W/1/v07/X8m4s7ZwPc9CejNUoy5o7x1rVJ4monUa+iEfalvri6vKNZXP+4ceaeGdRqvPPg67X7c/jFNXTdXqQFHuYzPRpx2QVRRGN+w9kK87Os38zVmvZpexBj19r4aXug9feemtcjGr6RFI3sfd/L7ahbElmV9Ea7+rC+HpZlPHG3NPbyVtay+Jzr5Qp+asscVoHAAAAAAAAAAAAAAAAAACs1ORDvwsuXtdGG1l7ZdMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCc1+f7/u6IRsy2zxagM1/Upi1acnT/zEgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgB/g4AAP//6w9Qcg==") 330.25427ms ago: executing program 3 (id=4391): r0 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x27, 0x2, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V\x00', 0x37303250}) 218.067172ms ago: executing program 2 (id=4392): syz_mount_image$xfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x4004000, &(0x7f0000000140)={[{@qnoenforce}, {@nodiscard}, {@nouuid}, {@usrquota}, {@inode32}, {@pquota}, {@lazytime}, {@usrquota}, {@gquota}, {}]}, 0x1, 0x975c, &(0x7f000001c600)="$eJzs/QWcbXWhuP/PgUM3giBSUmKSEqJIhyJKihKCtKSACCgdSqigCCjd3d2d0t3d3R3/14EDKj5wvd/f/V+8Ps/zYmbPjlnz2Z/3Wou9Z83Ze6n5FptrYGDMgfd6//RvXbTbvcstPtpC6528y+Bb9t5x4SeGXjz8eydjzTH0dM6hp3MNDAwMGrqcQe9dNnj2k04eZmDwwJD//taoI408zKgDAyMPPTt0OQMzv3cyyiHv3+6dD8UDnXTIj9vhvY93G23IQoZ8sczyb609MDAw4t99/5BxTftPd1TaUnPOP9/frD5wG2bo1YP+dt27p4Pf+xjlgIGBUfYb+Oj1Y8hth/u77/3fbMjPHHPygSXu/QR+9v+5lppz/gU/5D9kWxx26GUzD9nGP7wNGvvwer7jYms8NnQKBw2duMF/t718Euv9/1NLzTnfQgMfvR0PLDzvpo++8+5+c/A8AwOD5x0YGDzfwMDg+T9pj/qf6RNd+aqqquoTac65ZhjynH2YDz0eGPH9x7X0uPCyN6d7cGBg8MLvPU8cvPz7zwWrqqqqqqqq6t+zOeeaYW54/j/mxz3/n/TMbcbq+X9VVVVVVVXV/50WnHOuGYY81//Q8//xP+75/7OPH33we3/7P8fM733X25/snaiqqqqqqqqqj22+BfH5/6Qf9/z/ipMmvbrn/1VVVVVVVVX/d1r0nXfe2fzvXmdv6MVTv389Pf8/+5G7l/3EBlxVVVVVVVVV/+3efuqMc/72mu8TD3zo9d7fbejvBQYdd961135iA/33aNA//z5ki096TP9fG+I84hGTDgysvcQnPZT6BPo/81r19f+X8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9x/P+D1/8/+4QV338v+M9POcOtZ/ztO9997//BCy/41Jaf0NA/if5Tj/8PrD5oYGCo75irDwwMLDznootPPTAwcMatM0w5xcAH180y5LrZxh723TeIf/+ficw7Fi94i8neOx2yogyM88Eyjnt3+Qu+s/+wgz40iL9rrFMOPni1pV6Z8cOnU330/Rjmg69GO/nx9/8tyzAfutGIH/HN7y///fvyYeehY596yNin2WCtdadZf+NNvrL6WiusuvKqK6896/QzTTfjrLPONNM0q6y+5srTvvf5o+Zs0nc/z/2vzNmoH56zp+b8+zn78H37qDmb9OPn7N0l7nr5iN96f84G/zfnbO6Pn7NJVx/6g8aaY7iB5d+dm0EDA2PNM9zARkPOTDfCwMBY8w697fhDbvuNsYcZGNj5b3d0yFcjfLAODtpiyG2Wmm+xud7bTQ0M/O30b33E+9kPP3Tkcww9nXPo6Vzv/ZgxB/62Kg6e/aSThxkyF/8wHaOONPIwow4MjDz07NDlDMz63snIZ75/u494n/UPDfTdl1nZ4b2PdxttYGBglCFfTLzC2dsOmfr/hfdp/3/6//8/ec0y6IP1cdDQj6G3ec9rzvkX/NvPencahszdsEMvm3mIyf/wW9v/Q/803klHHJj0Y8b7Ma+L8260fq15xrhb/U+9Lg6Nd/yPGe/HvI7vR453yQf3eOy9Rf2PjfdD+7qF3v08x7+yrxv4+H3dsLSAla+a6MP7uu989BD/YXf5/hyN8KEbfdS+bvy9JtliyPLn+Ph93UJDxj7cP+zrhhkYGGvu9/d1Q3Z88w03sPOQM9MPOTP/cAOHDTkzw7tnRho4b8iZr664zporDblggX9eD6Ye9A9/oAnb2Xwf2s4G/d19H/Shv+8c/N7pKAe8/x5OH7HfHDT0bv2X+wpab8f8mPF+zPtP4TwPuWyl40cc93/q/adovCN+/Hg/6v2yP3K8O7189r3/w+P9YDsb7u+ma4F/ZTub9B+3syF3cdi/2zL+1cdhK8Ht3/t6/A+WtuFmj3/wmGK4Dy33v3pMscDHb2djrv6h79t+v4FBHzc38/8rczPhP+2Dtvz7uflXH29NPfl71w/7MXMzwqzLTfX+3Az/35yb+f+7czPHwLD/ODeDB+YdGBiYYuj+Yb5/ZW7G//i5+VfXm5Hh9u99vfIHF82z4xGXvD83H56L/2pu5vvvzs2kH6w3U7x73WTDDAw//MBGK2ywwXrTvff5/bPTv/f547fBef6VuRzzf2YuJxj8UXP5t1V11AevPuC/2Ab/aZ/+/vLn+e/O5cAHczmw+oc3lvp3rd//ucvfXf7u8neXv7v83eUv7iOO/3/w+v+7jznbLkN/uTHc1ZOMt90nPd5PuP/o4/9Dff/h+P92401y9TADH1z3scdn37vNv+Xx2ZnfOxnlkPdv9+HjgzzQjz4+u9+sM2/zv3R89v+p97fVf+H3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/tO//HcAj0y3y/NADocM9sfXSi3zS4/2E+48+/j/U9x+O/y+y9NZPDDPwwXUfe/z/vds4jv/f/8Z8O/07H/9/f1vt+H/9F+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/HO//HcDRR++xyft/D3DjWDuc8UmP9xPuP/X4f+//7639v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c0OP/Ax96e8vvt15gcPz//3Yf4b9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/AcN5I9Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5U/ZvEfJ3/M4j9u/pjF/9P5Yxb/8fLHLP7j549Z/D+TP2bxnyB/zOL/2fwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/1z+mMV/svf9R/yExvVvmsV/8rZ/zOI/Rf6YxX/K/DGL/1T5Yxb/z+ePWfynzh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7X8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/PX/M4j9b/pjF/xv5Yxb/b+aPWfxnzx+z+H8rf8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/7fzxyz+38kfs/gvlD9m8f9u/pjFf+H8MYv/9/LHLP7fzx+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP4/yB+z+C+VP2bx/2H+mMX/R/ljFv+l88cs/svkj1n8l80fs/gvlz9m8f9x/pjFf/n8MYv/CvljFv+f5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/j/NH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/j/LH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/DfPHLP6/yB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/3X+mMX/N/ljFv/t88cs/jvkj1n8d8wfs/jvlD9m8f9t/pjF/3f5Yxb/3+ePWfx3zh+z+O+SP2bx/0P+mMX/j/ljFv9d88cs/n/KH7P475Y/ZvHfPX/M4r9H/pjF/8/5Yxb/v+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9B/9H/4f31c/6ZZ/A9r+8cs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+T+L9b/v+cxH/QlfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/Lf/h6UKL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4v/ul/n/cxb/QfljFv9h8scs/sPmj1n8B+ePWfyHyx+z+A+fP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9P5Y9Z/MfJH7P4j5s/ZvH/dP6YxX+8/DGL//j5Yxb/z+SPWfwnyB+z+H82f8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfw/lz9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+n88fs/hPnT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/afLHLP7T5o8Numi34QYGBv7j/afLH7Ns/9Pnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif+wA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+XP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP6fzx+z+E+dP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+gwfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyh+z+I+TP2bxHzd/zOL/6fwxi/94+WMW//Hzxyz+n8kfs/hPkD9m8f9s/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/Ln/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8P58/ZvGfOn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/9fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/9fwxi/9s+WMW/2/kj1n8v5k/ZvGfPX/M4v+t/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/t/OH7P4fyd/zOK/UP6Yxf+7+WMW/4Xzxyz+38sfs/h/P3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/IcbyB+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvEffiB/zOI/KH/M4j9M/pjFf9j8MYv/4Pwxi/9w+WMW/+Hzxyz+I+SPWfxHzB+z+I+UP2bxHzl/zOI/Sv6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4v+p/DGL/zj5Yxb/cfPHLP6fzh+z+I+XP2bxHz9/zOL/mfwxi/8E+WMW/8/mj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi//n8scs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/8/ljFv+p88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fy1/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fzx+z+M+WP2bx/0b+mMX/m/ljFv/Z88cs/t/KH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8zi/+38MYv/d/LHLP4L5Y9Z/L+bP2bxXzh/zOL/vfwxi//388cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/8P8scs/kvlj1n8f5g/ZvH/Uf6YxX/p/LH/UP9BH7Iefpn8sf9Q/3f7++1/2fwxi/9y+WMW/x/nj1n8l88fs/ivkD9m8f9J/pjFf8X8sUEXDRo6M//Z/ivlj1m2/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzHxgJLrP4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/hIH8MYv/oPwxi/8w+WMW/2Hzxyz+g/PHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+QxvxH85Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf1v0b42w+G+XNmbx/3X+mMX/N/ljFv/t88cs/jvkj1n8d3zP/613Pqlx/Ztm8d+p7R+z+P82f8zi/7v8MYv/7/PHLP47549Z/HfJH7P4/yF/zOL/x/wxi/+u+WMW/z/lj1n8d8sfs/jvnj9m8d8jf8zi/+f8MYv/X/LHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5/zR+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGJ/4gD+WMW/0H5Yxb/YfLHLP7D5o9Z/Afnj1n8h8sfs/gPnz9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/T+WPWfzHyR+z+I+bP2bx/3T+mMV/vPwxi//4+WMW/8/kj1n8J8gfs/h/Nn/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8P5c/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv+p8scs/p/PH7P4T50/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf9r+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/3r+mMV/tvwxi/838scs/t/MH7P4z54/ZvH/Vv6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv9v549Z/L+TP2bxXyh/zOL/3fwxi//C+WMW/+/lj1n8v58/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8f5A/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOL/4/wxi//y+WMW/xXyxyz+P8kfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYP/oMEDIz6dP2bwH7L9P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TPybxH2kgf8ziPyh/zOI/TP6YxX/Y/DGL/+D8MYv/cPljFv/h88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOL/qfwxi/84+WMW/3Hzxyz+n84fs/iPlz9m8R8/f8zi/5n8MYv/BPljFv/P5o9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/5/LHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF//P5Yxb/qfPHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP03+mMV/2oGBzT+pIf07Z/Gfru0fs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+Iw/kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/lT9m8R8nf8ziP27+mMX/0/ljFv/x8scs/uPnj1n8P5M/ZvGfIH/M4v/Z/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/XP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOI/df6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/6/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/DGL/x/yxyz+f8wfs/jvmj9m8f9T/pjFf7f8MYv/7vljFv898scs/n/OH7P4/yV/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/1/wxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8ykD9m8R+UP2bxHyZ/zOI/bP6YxX9w/pjFf7j8MYv/8PljFv8R8scs/iPmj1n8R8ofs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bx/1T+mMV/nPwxi/+4+WMW/0/nj1n8x8sfs/iPnz9m8f9M/pjFf4L8MYv/Z/PHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/3P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v/5/DGL/9T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/lj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/nj1n8Z8sfs/h/I3/M4v/N/DGL/+z5Yxb/b+WPWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/dv6Yxf87+WMW/4Xyxyz+380fs/gvnD9m8f9e/pjF//v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/wf5Yxb/pfLHLP4/zB+z+P8of8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+P84fs/gvnz9m8V8hf8zi/5P8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/p/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/Z/ljFv/18scs/uvnj1n8N8gfs/j/PH/M4r9h/pjF/xf5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP6/zh+z+P8mf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+v80fs/j/Ln/M4v/7/DGL/875Yxb/XfLHLP5/yB+z+P8xf8ziv2v+mMX/T/ljFv/d8scs/rvnj1n898gfs/j/OX/M4v+X/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mflj7/sPjDgw8J/sf1b+mGX7Pzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8/5o/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/ljzn8k/+oHP4DozzRWoBZ/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/Ugfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/6fyxyz+4+SPWfzHzR+z+H86f8ziP17+mMV//Pwxi/9n8scs/hPkj1n8P5s/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/p/LH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv/P549Z/KfOH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOL/tfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H89f8ziP1v+mMX/G/ljFv9v5o9Z/GfPH7P4fyt/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/t/PHLP7fyR+z+C+UP2bx/27+mMV/4fwxi//38scs/t/PH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/j/IH7P4L5U/ZvH/Yf6Yxf9H+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/3H+mMV/+fwxi/8K+WMW/5/kj1n8V8wfs/ivZPT/F+6wxX9lo/+/kMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6jDeSPWfwH5Y9Z/IfJH7P4D5s/ZvEfnD9m8R8uf8ziP3z+mMV/hPwxi/+I+WMW/5Hyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/D+VP2bxHyd/zOI/bv6Yxf/T+WMW//Hyxyz+4+ePWfw/kz9m8Z8gf8zi/9n8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8f9c/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/h/Pn/M4j91/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/r+WPWfxnyh+z+M+cP2bxnyV/7B/8h1425ic8pv9PfYT/rPljlu3/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/LH/VP8RP+T/h/yx/1T/gQ/5/zF/zOK/a/6Yxf9P+WMW/93yxyz+u+ePWfz3yB+z+P85f8zi/5f8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/X/PHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/5MP+W/wvj+vfNIv/o23/mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP/pA/pjFf1D+mMV/mPwxi/+w+WMW/8H5Yxb/4fLHLP7D549Z/EfIH7P4j5g/ZvEfKX/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMX/U/ljFv9x8scs/uPmj1n8P50/ZvEfL3/M4j9+/pjF/zP5Yxb/CfLHLP6fzR+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/z+WPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/+fzxyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif8YA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+X//+PnbsP97qu7zj+454sZ592Xeo122UXGnNtRiKjUQtRUTzenDLRzHuEw01yIzcSYApstFLHpkvdLNjEwjFnq5Y43Fx3KxqWNVsjtlY5xbUwxhwsMmfsOnAOwdnbc+182ffr8v14/ME5v9/x/Ut5Xi9/Py+uq1CW/sP0D2Xpf5z+oSz9j9c/lKX/a/UPZek/XP9Qlv6/oH8oS/8T9A9l6f+L+oey9H+d/qEs/X9J/1CW/r+sfyhL/xP1D2Xp/3r9Q1n6j9A/lKX/G/QPZel/kv6hLP1H6h/K0v9k/UNZ+o/SP5Sl/6/oH8rSf7T+oSz936h/KEv/X9U/lKX/GP1DWfq/Sf9Qlv5v1j+Upf+v6R/K0v8t+oey9B+rfyhL/1P0D2XpP07/UJb+p+ofytL/NP1DWfqfrn8oS//x+oey9D9D/1CW/mfqH8rSf4L+oSz9z9I/lKV/m/6hLP3P1j+Upf85+oey9D9X/1CW/ufpH8rSv13/UJb+b9U/lKX/2/QPZel/vv6hLP3frn8oS/8L9A9l6T9R/1CW/hfqH8rS/yL9Q1n6v0P/UJb+F+sfytL/nfqHsvS/RP9Qlv6X6h/K0v8y/UNZ+l+ufyhL/yv0D2Xpf6X+oSz9r9I/lKX/JP1DWfpfrX8oS//J+oey9J+ifyhL/w79Q1n6T9U/lKX/NP1DWfpP1z+Upf8M/UNZ+r9L/1CW/tfoH8rSf6b+oSz9Z+kfytJ/tv6hLP3n6B/K0v9a/UNZ+s/VP5Sl/zz9Q1n6z9c/lKX/Av1DWfpfp38oS/+F+oey9H+3/qEs/RfpH8rSf7H+oSz9l+gfytL/ev1DWfq/R/9Qlv436B/K0v9G/UNZ+i/VP5Sl/zL9Q1n6L9c/lKX/r+sfytL/N/QPZem/Qv9Qlv7v1T+Upf9v6h/K0v99+oey9H+//qEs/W/SP5Sl/836h7L0v0X/UJb+v6V/KEv/lfqHsvT/bf1DWfr/jv6hLP1v1T+Upf9t+oey9P9d/UNZ+n9A/1CW/rfrH8rS/w79Q1n636l/KEv/39M/lKX/7+sfytL/Lv1DWfp/UP9Qlv4f0j+Upf8q/UNZ+q/WP5Sl/x/oH8rS/w/1D2Xpf7f+oSz91+gfytL/Hv1DWfp/WP9Qlv4f0T+Upf9a/UNZ+t+rfyhL/z/SP5Sl/zr9Q1n6/7H+oSz979M/lKX/n+gfytL/fv1DWfp/VP9Qlv5/qn8oS/+P6R/K0v/j+oey9P+E/qEs/f9M/1CW/p/UP5Sl/wP6h7L0X69/KEv/B/UPZen/5/qHsvTfoH8oS/+H9A9l6f8X+oey9P9L/UNZ+j+sfyhL/7/SP5Sl/6f0D2Xp/2n9Q1n6f0b/UJb+n9U/lKX/5/QPZen/1/qHsvT/vP6hLP2/oH8oS/+N+oey9P+i/qEs/f9G/1CW/pv0D2Xp/4j+oSz9v6R/KEv/L+sfytL/Uf1DWfp/Rf9Qlv5f1T+Upf/f6h/K0v8x/UNZ+n9N/1CW/n+nfyhL/6/rH8rS/+/1D2Xpv1n/UJb+39A/lKX/Fv1DWfr/g/6hLP3/Uf9Qlv7f1D+Upf8/6R/K0v9b+oey9P+2/qEs/b+jfyhL/8f1D2Xp/8/6h7L0f0L/UJb+T+ofytJ/q/6hLP2f0j+Upf+/6B/K0v+7+oey9P9X/UNZ+n9P/1CW/tv0D2Xp/7T+oSz9v69/KEv/7fqHsvT/N/1DWfrv0D+Upf+/6x/K0v8Z/UNZ+v+H/qEs/XfqH8rSf5f+oSz9/1P/UJb+P9A/lKX/bv1DWfr/UP9Qlv7P6h/K0v9H+oey9H9O/1CW/v+lfyhL/+f1D2Xp/2P9Q1n679E/lKT/K1v6h7L076d/KEv//vqHsvQfoH8oS/+B+oey9B+kfyhL/8H6h7L0H6J/KEv/ofqHsvR/mf6hLP0P0z+Upf/L9Q9l6f8K/UNZ+h+ufyhL/5/RP5Sl/xH6h15y/QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6/mb94yTWTZs7smOcb3/jGN/u/ebH/zQQAAPxf+8mH/hf77wQAAAAAAAAAAAAAAAAAAADyauL/TuzF/mcEAAAAAAAAAAAAAICfdm3tp24f0O+gpwYc+ODnH+3Y+3XU7ounr137YOn+2vXjc4KX7H/ggz179uxZ/czY8V0Ph7Rarc7/tVd2PR7a87jz9Zcdu+rofY/KuM/f+fgVEw8/d9762wZ+Y/Ut7U8P2vvsoNZVU2fM7HhD/1arnD6otajzwUn9Wq1y5qDWrZ0PRnY+mDCota7zwcl7H7ys9ZnOB6+fPGfmlM4nzqr8ewYvFW3ty1oDDlps66B/Gxy4/2XHPjG9+2svL9n9agNbXfsftv5LR/X4WbcX2H/365dTe+6/z/+AwAvq2/6f3dL9tZeX/B/v/x/etHtJ9LMX3n/365fT7B/qE3z+P2ijPT/39/j8/5rgJfffnzJ00+2d+2+78L5Xdz018H/z+f8nr19O77n//gd9/u/8HD+++/P/kFarnHGIvx2QSlv78u29vf/3vv+BP9fjpt+B+7/nK1tf0bn/e59rreh6alAf9z++t/f/m3r8vQJ909a+Zk+P9/8+7L81PHjJ/fvftv7wvZ//t94/+cgDftaX/Z/Rc/8jFsy6dsT8xUtOnDFr0rSOaR2zx4wcfdKoMWNGjx6x9xPBvl8P8TcFkji09//WYT1u+rVaHfvvN953y/jO/e94aMVHup4a2sf9n9nr+/9rvP9DaFj/1uDBrUWTFiyYd9K+X7sfjtz3676/LNh/H/77/7gTuv6y7j8z7NdqHb3/fvgVY4Z07v/6uWVD11OD+7j/Cb3uf9zBf1YJ9M0hvv9P6XFz0P5P2Xbjws79H/+DV23teqqv//1/Vq/7v9v7PxyKtvZWrW+infs/ecjys6tdlzZ//gf1aWL/x+68dVe163K2/UN9mtj/xJVvvrradTnH/qE+Tez/wVlXrqx2Xc61f6hPE/t//md3HVPtupxn/1CfJvb/2HefWlvturTbP9Snif1/8K72k6tdl7faP9Snif2feN0Px1a7Lm+zf6hPE/uf+vIL1lW7LufbP9Snif2fvee0I6tdl7fbP9Snif33W/69ZdWuywX2D/VpYv9PTlo5p9p1mWj/UJ8m9r/u2OHPVrsuF9o/1KeJ/a94+o0Tql2Xi+wf6tPE/r96x6rHql2Xd9g/1KeJ/X/isletqnZdLrZ/qE8T+//RsIcOq3Zd3mn/UJ8m9r9587oHql2XS+wf6tPE/levGzCs2nW51P6hPk3sf+lZ0x6tdl0us3+oTxP7HzX6y5dWuy6X2z/Up4n9H/25bz1V7bpcYf9Qnyb2f8HDC+dXuy5X2j/Up4n9Lzzm4z+udl2usn+oTxP7f0vHMdOrXZdJ9g/1aWL/5bbDNle7LlfbP9Snif1fsmPNuGrXZbL9Q32a2P+GI77wsWrXZYr9Q32a2P/OubPHVLsuHfYP9Wli/99579L3VbsuU+0f6tPE/m9/7uul2nWZZv9Qnyb2v23kJZdVuy7T7R/q08T+15z7zCPVrssM+4f6NLH/lRseX1DturzL/qE+Tex/48Zznqh2Xa6xf6hPE/s/fviIw6tdl5n2D/VpYv9zLl7xoWrXZZb9Q32a2P/p99/x2mrXZbb9Q32a2P/Qr439ZLXrMsf+oT5N7P/TY9//qWrX5Vr7h/o0sf9d4447odp1mWv/UJ8m9r/lgZF3Vrsu8+wf6tPE/j/wyF0Vr8t8+4f6NLH/ua97fke167LA/qE+Tez/TRMvWlztulxn/1CfJvZ/5N0Tvljtuiy0f6hPE/u//NvfP7/adXm3/UN9mtj/cUdd/epq12WR/UN9mtj/9Bmbbq52XRbbP9Snif2PX71lVLXrssT+oT5N7P+IJ+ffU+26XG//UJ8m9r99wFHnVbsu77F/qE8T+7/3hoe/We263GD/UJ8m9n/zTR/tqHZdbrR/qE8T+//s7sE7q12XpfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2D6N0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//8mu+jL") symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') 213.85655ms ago: executing program 4 (id=4393): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x66000000) 110.714473ms ago: executing program 3 (id=4394): r0 = syz_open_dev$vim2m(&(0x7f0000000880), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @win={{0x3, 0x8, 0x8, 0x9}, 0x1, 0x80000001, 0x0, 0x4, 0x0, 0x9}}}) 63.847333ms ago: executing program 0 (id=4395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=4396): r0 = syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x2218a5d, &(0x7f0000000140), 0x0, 0x965a, &(0x7f0000012c40)="$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") ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000000)={0x1, 0x5800000}) kernel console output (not intermixed with test programs): load catalog file [ 452.036547][ T6020] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 452.072557][ T36] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xab36da95f7d629ca8cc302fd0fd3c25f2e0c358a27b6cae5b3699304a6c15a5c level 0 [ 452.073814][ T6020] keyspan 4-1:0.11: device disconnected [ 452.179020][T14076] BTRFS error (device loop1): failed to load root extent [ 452.221743][T14076] BTRFS warning (device loop1): try to load backup roots slot 1 [ 452.261492][T14076] BTRFS info (device loop1): rebuilding free space tree [ 452.303919][T14076] BTRFS info (device loop1): disabling free space tree [ 452.316784][T14076] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 452.358732][T14084] loop0: detected capacity change from 0 to 40427 [ 452.365734][T14076] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 452.399730][T14076] BTRFS info (device loop1): checking UUID tree [ 452.408401][T14084] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 452.428620][T14076] BTRFS info (device loop1): enabling ssd optimizations [ 452.439029][T14084] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 452.474806][T14076] BTRFS info (device loop1): using spread ssd allocation scheme [ 452.482727][T14084] F2FS-fs (loop0): Encoding requested by superblock is unknown [ 452.493488][T14076] BTRFS info (device loop1): turning on async discard [ 452.517373][T14076] BTRFS info (device loop1): enabling disk space caching [ 452.574064][T14076] BTRFS info (device loop1): force clearing of disk cache [ 452.593065][T14076] BTRFS info (device loop1): trying to use backup root at mount time [ 452.644830][T14076] BTRFS info (device loop1): use lzo compression, level 1 [ 452.679565][T14076] BTRFS info (device loop1): max_inline set to 4096 [ 452.831183][ T1227] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 452.952509][ T5947] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 453.008231][T14126] loop0: detected capacity change from 0 to 1024 [ 453.025325][T14126] EXT4-fs: Ignoring removed orlov option [ 453.031064][T14126] EXT4-fs: inline encryption not supported [ 453.066418][ T1227] usb 4-1: Using ep0 maxpacket: 8 [ 453.074101][ T1227] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 453.084422][T14129] loop2: detected capacity change from 0 to 512 [ 453.091270][T14126] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 453.111755][ T1227] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 453.132387][T14129] EXT4-fs (loop2): bad geometry: block count 2048 exceeds size of device (128 blocks) [ 453.142392][T14126] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 453.164788][ T1227] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 453.202085][T14126] EXT4-fs (loop0): invalid journal inode [ 453.219207][ T1227] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 453.231883][T14126] EXT4-fs (loop0): can't get journal size [ 453.268325][ T1227] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 453.296946][ T1227] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.327171][T14126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 453.332851][ T1227] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 453.351814][ T1227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.393526][ T1227] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 453.652887][ T6020] usb 4-1: USB disconnect, device number 94 [ 453.691127][ T5949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.032045][T14146] loop0: detected capacity change from 0 to 4096 [ 454.063057][T14146] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 454.082589][T14146] ntfs3(loop0): $Volume is corrupted. [ 454.173026][T14150] loop2: detected capacity change from 0 to 2048 [ 454.224129][T14150] NILFS (loop2): invalid segment: Inconsistency found [ 454.230971][T14150] NILFS (loop2): trying rollback from an earlier position [ 454.304229][T14150] NILFS (loop2): recovery complete [ 454.315482][T14153] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 454.462735][T14155] loop3: detected capacity change from 0 to 1024 [ 454.514334][T14140] loop4: detected capacity change from 0 to 32768 [ 454.566719][T14155] hfsplus: failed to load root directory [ 454.594529][T14140] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32 [ 454.634093][T14140] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 454.694858][T14160] loop2: detected capacity change from 0 to 1764 [ 454.701372][T14140] OCFS2: File system is now read-only. [ 454.745118][T14140] (syz.4.3578,14140,1):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 454.753521][T14140] (syz.4.3578,14140,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 454.785601][T14140] (syz.4.3578,14140,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 454.796697][T14140] (syz.4.3578,14140,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 454.809200][T14140] (syz.4.3578,14140,1):ocfs2_mount_volume:1758 ERROR: status = -30 [ 454.826844][T14144] XFS (loop1): Metadata CRC error detected at xfs_sb_read_verify+0x368/0x4d0, xfs_sb block 0x0 [ 454.837571][T14144] XFS (loop1): Unmount and run xfs_repair [ 454.843600][T14140] (syz.4.3578,14140,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 454.852223][T14144] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 454.859658][T14144] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00 XFSB.......... . [ 454.869809][T14144] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 454.879063][T14144] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 454.888607][T14144] 00000030: 00 00 00 00 00 00 00 08 00 00 00 00 00 00 18 00 ................ [ 454.897845][T14144] 00000040: 00 00 00 00 00 00 18 01 00 00 00 00 00 00 18 02 ................ [ 454.907173][T14144] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00 ...... ......... [ 454.916393][T14144] 00000060: 00 00 0b e8 b4 b5 02 00 04 00 00 02 00 00 00 00 ................ [ 454.926358][T14144] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32 ...............2 [ 454.936030][T14144] XFS (loop1): SB validate failed with error -74. [ 455.397287][ T6034] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 455.482518][T14185] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 455.526088][ T1227] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 455.600408][ T6034] usb 3-1: Using ep0 maxpacket: 8 [ 455.607832][ T6034] usb 3-1: config 2 has an invalid interface number: 169 but max is 0 [ 455.616351][ T6034] usb 3-1: config 2 has no interface number 0 [ 455.640019][ T6034] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 455.660732][ T6034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.704515][ T6034] cypress_m8 3-1:2.169: DeLorme Earthmate USB converter detected [ 455.721292][ T1227] usb 4-1: config 9 has an invalid interface number: 32 but max is 0 [ 455.731560][ T6034] earthmate ttyUSB0: required endpoint is missing [ 455.750097][ T1227] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 455.792272][ T1227] usb 4-1: config 9 has no interface number 0 [ 455.811984][ T1227] usb 4-1: config 9 interface 32 altsetting 9 endpoint 0xA has invalid wMaxPacketSize 0 [ 455.835145][ T1227] usb 4-1: config 9 interface 32 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 455.848656][ T1227] usb 4-1: config 9 interface 32 has no altsetting 0 [ 455.858071][ T1227] usb 4-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 455.878092][ T1227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.893361][ T1227] usb 4-1: Product: syz [ 455.902690][ T1227] usb 4-1: Manufacturer: syz [ 455.920294][ T6034] usb 3-1: USB disconnect, device number 114 [ 455.936520][ T6034] cypress_m8 3-1:2.169: device disconnected [ 455.952273][ T1227] usb 4-1: SerialNumber: syz [ 456.092300][ T10] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 456.139574][T14197] loop4: p1 p2 p3 p4 [ 456.139574][T14197] p1: [ 456.160956][T14197] loop4: partition table partially beyond EOD, truncated [ 456.172554][T14197] loop4: p1 size 262144 extends beyond EOD, truncated [ 456.183661][T14197] loop4: p2 start 4293394690 is beyond EOD, truncated [ 456.192220][T14197] loop4: p3 size 100663552 extends beyond EOD, truncated [ 456.222887][T14197] loop4: p4 size 50331648 extends beyond EOD, truncated [ 456.243509][T14197] loop4: p5 size 262144 extends beyond EOD, truncated [ 456.251936][ T1227] usb 4-1: USB disconnect, device number 95 [ 456.261209][T14197] loop4: p6 start 4293394690 is beyond EOD, truncated [ 456.274916][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 456.286952][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 456.307443][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 456.334640][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 456.349289][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.357929][ T10] usb 2-1: Product: syz [ 456.363249][ T10] usb 2-1: Manufacturer: syz [ 456.368472][ T10] usb 2-1: SerialNumber: syz [ 456.477226][ T6034] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 456.515162][ T8324] udevd[8324]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 456.528080][ T6075] udevd[6075]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 456.543228][ T8339] udevd[8339]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 456.554167][ T7145] udevd[7145]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 456.614126][ T10] usb 2-1: 2:1 : unsupported format bits 0x40 [ 456.652232][ T6034] usb 1-1: Using ep0 maxpacket: 16 [ 456.668509][ T6034] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.704831][ T6034] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 456.714538][ T6034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.753535][ T6034] usb 1-1: Product: syz [ 456.766530][ T6034] usb 1-1: Manufacturer: syz [ 456.771199][ T6034] usb 1-1: SerialNumber: syz [ 456.779887][ T10] usb 2-1: USB disconnect, device number 100 [ 456.809034][ T6034] usb 1-1: config 0 descriptor?? [ 456.880143][ T6034] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 456.934958][ T6075] udevd[6075]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.081648][ T1166] usb 1-1: Failed to submit usb control message: -71 [ 457.082856][ T6020] usb 1-1: USB disconnect, device number 106 [ 457.095033][ T1166] usb 1-1: unable to send the bmi data to the device: -71 [ 457.121376][ T1166] usb 1-1: unable to get target info from device [ 457.127785][ T1166] usb 1-1: could not get target info (-71) [ 457.133918][ T1166] usb 1-1: could not probe fw (-71) [ 457.443435][T14212] set_capacity_and_notify: 4 callbacks suppressed [ 457.443457][T14212] loop2: detected capacity change from 0 to 32768 [ 457.472689][T14212] btrfs: Deprecated parameter 'usebackuproot' [ 457.486720][T14212] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 457.514372][T14212] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3610 (14212) [ 457.556006][T14212] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 457.599377][T14212] BTRFS info (device loop2): using blake2b checksum algorithm [ 457.631418][T14212] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 457.804665][ T599] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xab36da95f7d629ca8cc302fd0fd3c25f2e0c358a27b6cae5b3699304a6c15a5c level 0 [ 457.850296][T14212] BTRFS error (device loop2): failed to load root extent [ 457.867126][T14212] BTRFS warning (device loop2): try to load backup roots slot 1 [ 457.948291][T14218] loop4: detected capacity change from 0 to 32768 [ 457.952479][T14212] BTRFS info (device loop2): rebuilding free space tree [ 458.011322][T14212] BTRFS info (device loop2): disabling free space tree [ 458.017831][ T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 458.037691][T14212] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 458.050756][T14218] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 458.085550][T14212] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 458.102422][T14218] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 458.159477][T14212] BTRFS info (device loop2): checking UUID tree [ 458.219586][T14212] BTRFS info (device loop2): enabling ssd optimizations [ 458.230637][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 458.236296][T14212] BTRFS info (device loop2): using spread ssd allocation scheme [ 458.256766][T14218] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 5ms [ 458.264477][ T10] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 458.272593][ T10] usb 2-1: config 0 has no interface number 0 [ 458.277462][T14212] BTRFS info (device loop2): turning on async discard [ 458.287017][ T1227] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 458.293825][ T1227] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 458.310170][T14212] BTRFS info (device loop2): enabling disk space caching [ 458.317353][ T10] usb 2-1: config 0 interface 89 has no altsetting 0 [ 458.327837][T14258] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 458.329805][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 458.333348][T14258] PKCS7: Only support pkcs7_signedData type [ 458.359077][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.361149][T14212] BTRFS info (device loop2): force clearing of disk cache [ 458.367108][ T10] usb 2-1: Product: syz [ 458.399497][T14212] BTRFS info (device loop2): trying to use backup root at mount time [ 458.411196][ T10] usb 2-1: Manufacturer: syz [ 458.416278][ T10] usb 2-1: SerialNumber: syz [ 458.428722][T14236] loop3: detected capacity change from 0 to 32768 [ 458.437681][T14212] BTRFS info (device loop2): use lzo compression, level 1 [ 458.449681][ T10] usb 2-1: config 0 descriptor?? [ 458.473476][ T10] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 458.479214][T14212] BTRFS info (device loop2): max_inline set to 4096 [ 458.490185][ T10] em28xx 2-1:0.89: Video interface 89 found: bulk [ 458.533163][T14236] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 458.574682][T14236] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Inode #77 has refcount flag but no i_refcount_loc [ 458.599916][ T1227] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 286ms [ 458.612623][ T1227] gfs2: fsid=syz:syz.0: jid=0: Done [ 458.619911][T14218] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 458.645463][T14236] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 458.663141][T14236] OCFS2: File system is now read-only. [ 458.668760][T14236] (syz.3.3619,14236,1):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 458.752319][T14236] (syz.3.3619,14236,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 458.771284][ T10] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 458.800808][T14236] (syz.3.3619,14236,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=12, slot=0 [ 458.818901][T14236] (syz.3.3619,14236,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 458.845674][ T5948] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 458.877912][T14236] (syz.3.3619,14236,0):ocfs2_mount_volume:1758 ERROR: status = -30 [ 458.914774][T14236] (syz.3.3619,14236,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 458.929126][ T10] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 458.965220][ T10] em28xx 2-1:0.89: board has no eeprom [ 459.053914][ T10] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 459.061201][ T10] em28xx 2-1:0.89: analog set to bulk mode. [ 459.097460][ T1227] em28xx 2-1:0.89: Registering V4L2 extension [ 459.112396][ T10] usb 2-1: USB disconnect, device number 101 [ 459.195305][ T10] em28xx 2-1:0.89: Disconnecting em28xx [ 459.283053][ T1227] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 459.321216][ T1227] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 459.364049][ T1227] em28xx 2-1:0.89: No AC97 audio processor [ 459.408206][ T1227] usb 2-1: Decoder not found [ 459.442227][T14269] loop2: detected capacity change from 0 to 4096 [ 459.449809][ T1227] em28xx 2-1:0.89: failed to create media graph [ 459.456129][ T1227] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 459.472251][T14269] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 459.518057][T14269] ntfs3(loop2): ino=3, mi_enum_attr [ 459.530684][T14275] loop1: detected capacity change from 0 to 64 [ 459.543905][ T1227] em28xx 2-1:0.89: Registering snapshot button... [ 459.556640][T14275] MINIX-fs: bad superblock [ 459.588774][T14269] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 459.595891][T14269] ntfs3(loop2): Failed to load $AttrDef (-22) [ 459.638697][ T1227] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input37 [ 459.700300][ T1227] em28xx 2-1:0.89: Remote control support is not available for this card. [ 459.803100][ T10] em28xx 2-1:0.89: Closing input extension [ 459.810078][ T10] em28xx 2-1:0.89: Deregistering snapshot button [ 459.941952][T14286] random: crng reseeded on system resumption [ 459.955524][T14285] loop3: detected capacity change from 0 to 512 [ 459.996122][ T10] em28xx 2-1:0.89: Freeing device [ 460.018366][T14285] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 460.043201][T14285] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.3635: invalid block [ 460.147595][T14285] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 460.155144][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 460.170854][ C1] EXT4-fs (loop3): initial error at time 2000000176: ext4_get_branch:178: inode 13: block 1024 [ 460.181301][ C1] EXT4-fs (loop3): last error at time 2000000176: ext4_get_branch:178: inode 13: block 1024 [ 460.200891][T14285] EXT4-fs (loop3): Remounting filesystem read-only [ 460.207809][T14285] EXT4-fs (loop3): 1 truncate cleaned up [ 460.224890][T14285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.333913][ T5952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.679306][ T5959] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 460.801795][T14293] loop2: detected capacity change from 0 to 32768 [ 460.824013][T14293] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3639 (14293) [ 460.843374][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 460.860900][ T5959] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 460.872601][ T6061] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 460.882268][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.882268][ T6034] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 460.882298][ T5959] usb 1-1: Product: syz [ 460.903889][ T5959] usb 1-1: Manufacturer: syz [ 460.908651][ T5959] usb 1-1: SerialNumber: syz [ 460.913642][T14293] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 460.920858][ T5959] usb 1-1: config 0 descriptor?? [ 460.930777][T14301] loop3: detected capacity change from 0 to 32768 [ 460.947109][T14293] BTRFS error (device loop2): unsupported checksum algorithm: 255 [ 460.955785][T14301] btrfs: Deprecated parameter 'usebackuproot' [ 460.967767][T14301] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 460.979415][T14293] BTRFS error (device loop2): open_ctree failed: -22 [ 460.994142][T14301] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3636 (14301) [ 461.013101][ T5959] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 461.041395][T14301] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 461.059474][T14301] BTRFS info (device loop3): using blake2b checksum algorithm [ 461.074891][ T6034] usb 2-1: Using ep0 maxpacket: 32 [ 461.078672][ T6061] usb 5-1: Using ep0 maxpacket: 16 [ 461.085787][ T6034] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 461.093889][ T6034] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.104797][ T6034] usb 2-1: config 0 has no interface number 0 [ 461.111022][ T6034] usb 2-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 461.124324][ T6034] usb 2-1: config 0 interface 8 has no altsetting 0 [ 461.132969][T14301] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 461.147385][ T6061] usb 5-1: config 0 has no interfaces? [ 461.158220][ T6034] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 461.179494][ T6061] usb 5-1: config 0 has no interfaces? [ 461.179967][ T6034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.199707][ T6034] usb 2-1: Product: syz [ 461.208899][ T6061] usb 5-1: config 0 has no interfaces? [ 461.218347][ T6034] usb 2-1: Manufacturer: syz [ 461.223117][ T6034] usb 2-1: SerialNumber: syz [ 461.238895][ T6061] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 461.264902][ T10] usb 1-1: USB disconnect, device number 107 [ 461.271061][ T6061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 461.271253][ T36] usb 1-1: Failed to submit usb control message: -71 [ 461.291243][ T6061] usb 5-1: Product: syz [ 461.301502][ T6034] usb 2-1: config 0 descriptor?? [ 461.303837][ T6061] usb 5-1: Manufacturer: syz [ 461.326505][ T6061] usb 5-1: config 0 descriptor?? [ 461.329096][ T36] usb 1-1: unable to send the bmi data to the device: -71 [ 461.362982][ T36] usb 1-1: unable to get target info from device [ 461.380382][ T36] usb 1-1: could not get target info (-71) [ 461.381480][ T13] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xab36da95f7d629ca8cc302fd0fd3c25f2e0c358a27b6cae5b3699304a6c15a5c level 0 [ 461.401710][ T36] usb 1-1: could not probe fw (-71) [ 461.483847][T14301] BTRFS error (device loop3): failed to load root extent [ 461.491021][T14301] BTRFS warning (device loop3): try to load backup roots slot 1 [ 461.544001][ T6034] ath6kl: Failed to submit usb control message: -71 [ 461.565360][ T6034] ath6kl: unable to send the bmi data to the device: -71 [ 461.573878][ T6034] ath6kl: Unable to send get target info: -71 [ 461.581114][ T6034] ath6kl: Failed to init ath6kl core: -71 [ 461.610931][T14301] BTRFS info (device loop3): rebuilding free space tree [ 461.624404][ T6034] ath6kl_usb 2-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 461.664003][ T6061] usb 5-1: USB disconnect, device number 98 [ 461.687042][T14301] BTRFS info (device loop3): disabling free space tree [ 461.698631][T14301] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 461.711096][T14301] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 461.727198][ T6034] usb 2-1: USB disconnect, device number 102 [ 461.782995][T14301] BTRFS info (device loop3): checking UUID tree [ 461.806767][T14301] BTRFS info (device loop3): enabling ssd optimizations [ 461.835689][T14301] BTRFS info (device loop3): using spread ssd allocation scheme [ 461.845577][T14301] BTRFS info (device loop3): turning on async discard [ 461.852398][T14301] BTRFS info (device loop3): enabling disk space caching [ 461.867458][T14301] BTRFS info (device loop3): force clearing of disk cache [ 461.888778][T14301] BTRFS info (device loop3): trying to use backup root at mount time [ 461.929524][T14301] BTRFS info (device loop3): use lzo compression, level 1 [ 461.951131][T14301] BTRFS info (device loop3): max_inline set to 4096 [ 462.167322][ T5952] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 462.326123][ T6034] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 462.500336][ T6034] usb 3-1: Using ep0 maxpacket: 16 [ 462.515507][ T6034] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 462.548601][ T6034] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 462.603981][ T6034] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.636802][ T6034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.664936][ T6034] usb 3-1: Product: syz [ 462.670710][ T6034] usb 3-1: Manufacturer: syz [ 462.676459][ T6034] usb 3-1: SerialNumber: syz [ 462.699948][ T10] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 462.791505][T14350] loop3: detected capacity change from 0 to 8192 [ 462.825991][T14350] loop3: AHDI p1 p2 p3 p4 [ 462.831765][T14350] loop3: p1 size 67108873 extends beyond EOD, truncated [ 462.842647][T14350] loop3: p2 start 16741127 is beyond EOD, truncated [ 462.849338][T14350] loop3: p3 start 1671679 is beyond EOD, truncated [ 462.871329][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 462.880765][ T10] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 462.900746][ T10] usb 1-1: config 0 has no interface number 0 [ 462.920952][ T6034] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 462.938967][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 462.949671][ T9] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 462.960031][ T6034] usb 3-1: unit 4 not found! [ 462.978199][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.001456][ T10] usb 1-1: Product: syz [ 463.006834][ T10] usb 1-1: Manufacturer: syz [ 463.023053][ T10] usb 1-1: SerialNumber: syz [ 463.046808][T14359] loop1: detected capacity change from 0 to 2048 [ 463.062115][ T10] usb 1-1: config 0 descriptor?? [ 463.090307][T14359] UDF-fs: warning (device loop1): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor. [ 463.133291][ T6034] usb 3-1: USB disconnect, device number 115 [ 463.142270][T14359] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=67108863, location=67108863 [ 463.164656][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 463.184945][T14359] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 463.197450][ T9] usb 5-1: config 1 has an invalid interface number: 233 but max is 0 [ 463.227555][ T9] usb 5-1: config 1 has no interface number 0 [ 463.248639][ T9] usb 5-1: config 1 interface 233 has no altsetting 0 [ 463.271612][ T9] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 463.284311][ T7145] udevd[7145]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.313681][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.325581][ T6075] udevd[6075]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 463.339860][ T10] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 463.351942][ T9] usb 5-1: Product: syz [ 463.363002][ T10] uvcvideo 1-1:0.31: No streaming interface found for terminal 32774. [ 463.379524][ T9] usb 5-1: Manufacturer: syz [ 463.392099][ T10] usb 1-1: USB disconnect, device number 108 [ 463.405900][ T9] usb 5-1: SerialNumber: syz [ 463.656306][ T9] imon_raw 5-1:1.233: IR endpoint missing [ 463.689195][ T9] usb 5-1: USB disconnect, device number 99 [ 463.970573][T14365] loop1: detected capacity change from 0 to 32768 [ 464.012627][T14365] btrfs: Deprecated parameter 'usebackuproot' [ 464.047127][T14365] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 464.068602][T14365] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3661 (14365) [ 464.083534][T14379] loop3: detected capacity change from 0 to 8192 [ 464.104079][T14365] BTRFS info (device loop1 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 464.115589][T14365] BTRFS info (device loop1 state S): using blake2b checksum algorithm [ 464.126850][ T6108] Dev loop3: RDB in block 1 has bad checksum [ 464.142950][T14379] Dev loop3: RDB in block 1 has bad checksum [ 464.159867][T14365] workqueue: max_active 4349 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 464.196091][T14365] workqueue: max_active 4349 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 464.230079][T14365] workqueue: max_active 4349 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 464.259289][T14365] workqueue: max_active 4349 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 464.273595][ T6061] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 464.294476][T14365] workqueue: max_active 4349 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 464.356565][T14365] workqueue: max_active 4349 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 464.435482][ T6061] usb 3-1: config 8 has an invalid interface number: 8 but max is 1 [ 464.443969][ T6061] usb 3-1: config 8 has an invalid interface number: 8 but max is 1 [ 464.453048][ T6061] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 464.465040][ T6061] usb 3-1: config 8 has no interface number 0 [ 464.471215][ T6061] usb 3-1: config 8 interface 8 has no altsetting 1 [ 464.480127][ T599] BTRFS warning (device loop1 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x3226f9dadc896f8f7b9a0be7c609110345c27f6019125c38f3283b3a68e897a5 found 0xc31f6b8dd4e8410de7c99134cc770d2b2c9962171fae204af998e9068094381a level 0, ignored [ 464.480940][ T6061] usb 3-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=33.93 [ 464.514610][ T6061] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.522855][ T6061] usb 3-1: Product: syz [ 464.527056][ T6061] usb 3-1: Manufacturer: syz [ 464.533758][ T6061] usb 3-1: SerialNumber: syz [ 464.547094][T14365] BTRFS warning (device loop1 state ES): devid 1099511599873 uuid a3373a75-1192-444c-9807-48156503709a is missing [ 464.576540][T14365] BTRFS warning (device loop1 state ES): devid 1 uuid a3370675-1192-444c-9807-48156503709a is missing [ 464.592048][ T6061] qmi_wwan 3-1:8.8: probe with driver qmi_wwan failed with error -22 [ 464.600531][ T5959] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 464.615321][T14365] BTRFS warning (device loop1 state ES): couldn't read tree root [ 464.631974][T14365] BTRFS warning (device loop1 state ES): try to load backup roots slot 1 [ 464.659356][T14365] BTRFS warning (device loop1 state ES): couldn't read tree root [ 464.667386][T14365] BTRFS warning (device loop1 state ES): try to load backup roots slot 2 [ 464.717516][T14365] BTRFS warning (device loop1 state ES): couldn't read tree root [ 464.727152][T14365] BTRFS warning (device loop1 state ES): try to load backup roots slot 3 [ 464.740063][T14365] BTRFS warning (device loop1 state ES): couldn't read tree root [ 464.798292][ T5959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 464.818638][T14365] BTRFS error (device loop1 state ES): open_ctree failed: -5 [ 464.834556][ T5959] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 464.871416][ T6034] usb 3-1: USB disconnect, device number 116 [ 464.878091][ T5959] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 464.909404][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 464.949423][ T5959] usb 4-1: SerialNumber: syz [ 465.240529][ T5959] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 465.266707][ T5959] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 465.277746][ T6061] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 465.319679][ T5959] usb 4-1: USB disconnect, device number 96 [ 465.501816][ T6061] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.514075][ T6061] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 465.577601][ T6061] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.588571][ T6061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 465.596607][ T6061] usb 5-1: SerialNumber: syz [ 465.650618][ T6061] cdc_ether 5-1:1.0: skipping garbage [ 465.683388][ T6061] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 465.757640][T14428] loop2: detected capacity change from 0 to 128 [ 465.888010][ T6061] usb 5-1: USB disconnect, device number 100 [ 465.921394][T14420] loop1: detected capacity change from 0 to 32768 [ 465.949229][T14430] loop3: detected capacity change from 0 to 1024 [ 465.956002][T14420] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3682 (14420) [ 466.011248][T14432] loop2: detected capacity change from 0 to 128 [ 466.027733][T14420] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 466.049815][T14420] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 466.091265][T14422] loop0: detected capacity change from 0 to 32768 [ 466.112517][T14422] BTRFS: device fsid a4d06b90-61a4-49cd-bf5f-2183c3574322 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3683 (14422) [ 466.159666][T14422] BTRFS info (device loop0): first mount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322 [ 466.171801][T14446] loop3: detected capacity change from 0 to 128 [ 466.184381][T14422] BTRFS info (device loop0): using blake2b checksum algorithm [ 466.198365][T14420] BTRFS info (device loop1): enabling ssd optimizations [ 466.220126][T14420] BTRFS info (device loop1): turning on async discard [ 466.227312][T14420] BTRFS info (device loop1): enabling free space tree [ 466.370621][T14464] loop2: detected capacity change from 0 to 16 [ 466.403296][ T5947] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 466.413592][T14422] BTRFS info (device loop0): enabling ssd optimizations [ 466.444737][T14468] erofs (device loop3): mounted with root inode @ nid 36. [ 466.452106][T14464] erofs (device loop2): mounted with root inode @ nid 36. [ 466.475849][T14422] BTRFS info (device loop0): turning on async discard [ 466.482690][T14422] BTRFS info (device loop0): enabling free space tree [ 466.743513][ T5949] BTRFS info (device loop0): last unmount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322 [ 467.474811][T14472] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 467.483871][T14472] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 467.499037][T14472] gfs2: fsid=syz:syz.s: journal 0 mapped with 9 extents in 0ms [ 467.530133][T14472] syz.4.3694: attempt to access beyond end of device [ 467.530133][T14472] loop4: rw=0, sector=274877909088, nr_sectors = 8 limit=32768 [ 467.567538][T14472] gfs2: fsid=syz:syz.s: Error parsing journal for spectator mount. [ 467.926306][T14488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.019019][ T5952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.046720][ T6034] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 468.262644][ T6034] usb 3-1: Using ep0 maxpacket: 32 [ 468.274334][ T6034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 468.297774][ T6034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 468.322015][ T6034] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 468.345631][ T6034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 468.368499][ T6034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 468.396048][ T6034] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 468.420366][ T6034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.428414][ T6034] usb 3-1: Product: syz [ 468.442158][ T6034] usb 3-1: Manufacturer: syz [ 468.446881][ T6034] usb 3-1: SerialNumber: syz [ 468.459907][ T6034] usb 3-1: config 0 descriptor?? [ 468.474484][T14478] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 468.494930][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 468.509196][ T6034] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 468.533353][T14486] set_capacity_and_notify: 4 callbacks suppressed [ 468.533370][T14486] loop4: detected capacity change from 0 to 32768 [ 468.550574][ T5180] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 468.573785][T14486] btrfs: Deprecated parameter 'usebackuproot' [ 468.580021][T14486] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 468.596899][ T5180] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 468.630343][ T5180] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 468.648743][T14486] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 63a9404e-700b-4aad-945b-818cc568f11c [ 468.661069][ T5180] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 468.672479][T14486] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3695 (14486) [ 468.686406][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 468.697695][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 468.710525][ T9] usb 4-1: config 199 has an invalid interface number: 224 but max is 0 [ 468.730214][ T9] usb 4-1: config 199 has no interface number 0 [ 468.737273][ T9] usb 4-1: config 199 interface 224 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 468.771752][ T10] usb 3-1: USB disconnect, device number 117 [ 468.782273][ T9] usb 4-1: config 199 interface 224 has no altsetting 0 [ 468.812024][T14486] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 468.838826][ T9] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=92.83 [ 468.857677][T14486] BTRFS info (device loop4): using blake2b checksum algorithm [ 468.870874][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.879010][ T9] usb 4-1: Product: syz [ 468.910668][T14486] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 468.933778][ T9] usb 4-1: Manufacturer: syz [ 468.943985][ T9] usb 4-1: SerialNumber: syz [ 469.023047][ T13] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xab36da95f7d629ca8cc302fd0fd3c25f2e0c358a27b6cae5b3699304a6c15a5c level 0 [ 469.110765][T14486] BTRFS error (device loop4): failed to load root extent [ 469.125997][T14486] BTRFS warning (device loop4): try to load backup roots slot 1 [ 469.170323][T14486] BTRFS info (device loop4): rebuilding free space tree [ 469.193891][ T9] lg-vl600 4-1:199.224: skipping garbage [ 469.207579][ T9] usb 4-1: bad CDC descriptors [ 469.217604][T14486] BTRFS info (device loop4): disabling free space tree [ 469.225729][ T9] usb 4-1: USB disconnect, device number 97 [ 469.236118][T14486] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 469.261104][T14486] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 469.287127][T14486] BTRFS info (device loop4): checking UUID tree [ 469.307758][T14486] BTRFS info (device loop4): enabling ssd optimizations [ 469.324060][T14486] BTRFS info (device loop4): using spread ssd allocation scheme [ 469.331920][T14486] BTRFS info (device loop4): turning on async discard [ 469.338715][T14486] BTRFS info (device loop4): enabling disk space caching [ 469.345844][T14486] BTRFS info (device loop4): force clearing of disk cache [ 469.353439][T14486] BTRFS info (device loop4): trying to use backup root at mount time [ 469.371658][T14486] BTRFS info (device loop4): use lzo compression, level 1 [ 469.383616][T14486] BTRFS info (device loop4): max_inline set to 4096 [ 469.430299][T14495] loop1: detected capacity change from 0 to 40427 [ 469.469403][T14495] F2FS-fs (loop1): invalid crc value [ 469.474979][T14495] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 469.586116][ T5960] BTRFS info (device loop4): last unmount of filesystem 63a9404e-700b-4aad-945b-818cc568f11c [ 469.788756][ T9] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 469.992605][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 470.022483][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 470.056363][ T9] usb 3-1: config 7 has an invalid interface number: 201 but max is 0 [ 470.085633][ T9] usb 3-1: config 7 has no interface number 0 [ 470.098873][ T9] usb 3-1: config 7 interface 201 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 470.142003][ T9] usb 3-1: config 7 interface 201 has no altsetting 0 [ 470.169994][ T9] usb 3-1: New USB device found, idVendor=07fa, idProduct=0846, bcdDevice= 8.c8 [ 470.179508][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.187645][ T9] usb 3-1: Product: syz [ 470.194963][ T9] usb 3-1: Manufacturer: syz [ 470.202706][ T9] usb 3-1: SerialNumber: syz [ 470.273931][T14521] loop4: detected capacity change from 0 to 2048 [ 470.381211][T14521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.431446][T14521] ext4 filesystem being mounted at /709/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.481755][ T9] HFC-S_USB 3-1:7.201: probe with driver HFC-S_USB failed with error -5 [ 470.529333][ T9] usb 3-1: USB disconnect, device number 118 [ 470.593208][ T5960] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.889608][T14519] loop3: detected capacity change from 0 to 32768 [ 470.940247][T14519] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 470.954180][T14517] loop1: detected capacity change from 0 to 32768 [ 470.963808][T14519] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 470.994207][T14517] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 471.001926][T14517] CPU: 0 UID: 0 PID: 14517 Comm: syz.1.3706 Not tainted syzkaller #0 PREEMPT(full) [ 471.001955][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 471.001969][T14517] Call Trace: [ 471.001978][T14517] [ 471.001986][T14517] dump_stack_lvl+0xe8/0x150 [ 471.002021][T14517] sysfs_create_dir_ns+0x271/0x2a0 [ 471.002054][T14517] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 471.002083][T14517] ? do_raw_spin_unlock+0xf5/0x210 [ 471.002109][T14517] kobject_add_internal+0x62b/0xd00 [ 471.002141][T14517] kobject_init_and_add+0x12b/0x1a0 [ 471.002170][T14517] ? __pfx_kobject_init_and_add+0x10/0x10 [ 471.002195][T14517] ? __raw_spin_lock_init+0x45/0x100 [ 471.002218][T14517] ? __init_swait_queue_head+0xa9/0x150 [ 471.002242][T14517] gfs2_sys_fs_add+0x257/0x480 [ 471.002264][T14517] ? is_dynamic_key+0x1ac/0x1c0 [ 471.002291][T14517] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 471.002324][T14517] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 471.002359][T14517] gfs2_fill_super+0x13a7/0x21d0 [ 471.002405][T14517] ? __pfx_gfs2_fill_super+0x10/0x10 [ 471.002440][T14517] ? sb_set_blocksize+0x155/0x240 [ 471.002472][T14517] ? setup_bdev_super+0x4c1/0x5b0 [ 471.002497][T14517] get_tree_bdev_flags+0x431/0x4f0 [ 471.002528][T14517] ? __pfx_gfs2_fill_super+0x10/0x10 [ 471.002557][T14517] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 471.002577][T14517] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 471.002620][T14517] gfs2_get_tree+0x51/0x1e0 [ 471.002658][T14517] vfs_get_tree+0x92/0x2a0 [ 471.002701][T14517] do_new_mount+0x341/0xd30 [ 471.002728][T14517] ? apparmor_capable+0x126/0x170 [ 471.002765][T14517] ? __pfx_do_new_mount+0x10/0x10 [ 471.002794][T14517] ? ns_capable+0x89/0xe0 [ 471.002833][T14517] ? user_path_at+0xd4/0x160 [ 471.002868][T14517] __se_sys_mount+0x31d/0x420 [ 471.002904][T14517] ? __pfx___se_sys_mount+0x10/0x10 [ 471.002939][T14517] ? __x64_sys_mount+0x20/0xc0 [ 471.002971][T14517] do_syscall_64+0x14d/0xf80 [ 471.002991][T14517] ? trace_irq_disable+0x3b/0x150 [ 471.003021][T14517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.003043][T14517] ? clear_bhb_loop+0x40/0x90 [ 471.003069][T14517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.003091][T14517] RIP: 0033:0x7f2c6979d20a [ 471.003112][T14517] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.003137][T14517] RSP: 002b:00007f2c6a595e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 471.003163][T14517] RAX: ffffffffffffffda RBX: 00007f2c6a595ee0 RCX: 00007f2c6979d20a [ 471.003179][T14517] RDX: 0000200000037f40 RSI: 0000200000037f80 RDI: 00007f2c6a595ea0 [ 471.003195][T14517] RBP: 0000200000037f40 R08: 00007f2c6a595ee0 R09: 0000000000000000 [ 471.003210][T14517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000037f80 [ 471.003225][T14517] R13: 00007f2c6a595ea0 R14: 0000000000037f19 R15: 0000200000037fc0 [ 471.003257][T14517] [ 471.003286][T14517] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 471.212398][T14519] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 471.288608][T14517] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 471.370813][ T2011] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 471.379289][ T2011] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 471.791949][ T2011] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 385ms [ 471.820513][ T2011] gfs2: fsid=syz:syz.0: jid=0: Done [ 471.825844][T14519] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 472.042541][T14526] loop4: detected capacity change from 0 to 32768 [ 472.099297][T14526] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 472.133804][T14526] CPU: 0 UID: 0 PID: 14526 Comm: syz.4.3708 Not tainted syzkaller #0 PREEMPT(full) [ 472.133833][T14526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 472.133847][T14526] Call Trace: [ 472.133856][T14526] [ 472.133867][T14526] dump_stack_lvl+0xe8/0x150 [ 472.133902][T14526] sysfs_create_dir_ns+0x271/0x2a0 [ 472.133935][T14526] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 472.133965][T14526] ? do_raw_spin_unlock+0xf5/0x210 [ 472.133992][T14526] kobject_add_internal+0x62b/0xd00 [ 472.134026][T14526] kobject_init_and_add+0x12b/0x1a0 [ 472.134057][T14526] ? __pfx_kobject_init_and_add+0x10/0x10 [ 472.134082][T14526] ? __raw_spin_lock_init+0x45/0x100 [ 472.134107][T14526] ? __init_swait_queue_head+0xa9/0x150 [ 472.134151][T14526] gfs2_sys_fs_add+0x257/0x480 [ 472.134176][T14526] ? is_dynamic_key+0x1ac/0x1c0 [ 472.134203][T14526] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 472.134238][T14526] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 472.134274][T14526] gfs2_fill_super+0x13a7/0x21d0 [ 472.134321][T14526] ? __pfx_gfs2_fill_super+0x10/0x10 [ 472.134356][T14526] ? sb_set_blocksize+0x155/0x240 [ 472.134388][T14526] ? setup_bdev_super+0x4c1/0x5b0 [ 472.134415][T14526] get_tree_bdev_flags+0x431/0x4f0 [ 472.134437][T14526] ? __pfx_gfs2_fill_super+0x10/0x10 [ 472.134467][T14526] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 472.134488][T14526] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 472.134531][T14526] gfs2_get_tree+0x51/0x1e0 [ 472.134564][T14526] vfs_get_tree+0x92/0x2a0 [ 472.134589][T14526] do_new_mount+0x341/0xd30 [ 472.134615][T14526] ? apparmor_capable+0x126/0x170 [ 472.134650][T14526] ? __pfx_do_new_mount+0x10/0x10 [ 472.134678][T14526] ? ns_capable+0x89/0xe0 [ 472.134717][T14526] ? user_path_at+0xd4/0x160 [ 472.134750][T14526] __se_sys_mount+0x31d/0x420 [ 472.134796][T14526] ? __pfx___se_sys_mount+0x10/0x10 [ 472.134841][T14526] ? __x64_sys_mount+0x20/0xc0 [ 472.134869][T14526] do_syscall_64+0x14d/0xf80 [ 472.134887][T14526] ? trace_irq_disable+0x3b/0x150 [ 472.134914][T14526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.134933][T14526] ? clear_bhb_loop+0x40/0x90 [ 472.134957][T14526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.134975][T14526] RIP: 0033:0x7f8d1d79d20a [ 472.134994][T14526] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.135010][T14526] RSP: 002b:00007f8d1e5f8e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 472.135030][T14526] RAX: ffffffffffffffda RBX: 00007f8d1e5f8ee0 RCX: 00007f8d1d79d20a [ 472.135044][T14526] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f8d1e5f8ea0 [ 472.135058][T14526] RBP: 00002000000124c0 R08: 00007f8d1e5f8ee0 R09: 0000000000000000 [ 472.135072][T14526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 472.135084][T14526] R13: 00007f8d1e5f8ea0 R14: 0000000000012493 R15: 0000200000012540 [ 472.135114][T14526] [ 472.135197][T14526] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 472.472339][T14526] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 472.793350][T14540] loop4: detected capacity change from 0 to 1024 [ 472.828722][T14542] loop0: detected capacity change from 0 to 21 [ 472.858387][T14542] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 473.002756][T14532] loop2: detected capacity change from 0 to 32768 [ 473.100835][T14532] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 473.109537][T14547] loop4: detected capacity change from 0 to 64 [ 473.158548][T14532] dlm: no local IP address has been set [ 473.194075][T14532] dlm: cannot start dlm midcomms -107 [ 473.223737][T14532] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 473.554096][T14536] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 473.612837][T14536] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 473.720572][T14536] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 473.751601][ T5959] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 473.776920][ T5959] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 474.130982][ T5959] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 331ms [ 474.149767][ T5959] gfs2: fsid=syz:syz.0: jid=0: Done [ 474.160375][T14536] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 474.431590][T14556] set_capacity_and_notify: 3 callbacks suppressed [ 474.431608][T14556] loop0: detected capacity change from 0 to 32768 [ 474.536879][T14556] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3717 (14556) [ 474.597995][T14556] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 474.658186][T14556] BTRFS info (device loop0): using crc32c checksum algorithm [ 474.899610][T14556] BTRFS info (device loop0): rebuilding free space tree [ 474.964089][T14579] loop1: detected capacity change from 0 to 2048 [ 475.019701][T14556] BTRFS info (device loop0): setting nodatasum [ 475.031683][T14556] BTRFS info (device loop0): allowing degraded mounts [ 475.049142][T14556] BTRFS info (device loop0): setting nodatacow [ 475.059810][T14556] BTRFS info (device loop0): enabling ssd optimizations [ 475.077802][T14556] BTRFS info (device loop0): using spread ssd allocation scheme [ 475.110320][T14556] BTRFS info (device loop0): turning on async discard [ 475.134829][T14556] BTRFS info (device loop0): enabling free space tree [ 475.141678][T14556] BTRFS info (device loop0): force clearing of disk cache [ 475.212300][T14556] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 475.455422][T14581] loop1: detected capacity change from 0 to 2048 [ 475.549121][T14582] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 475.909811][T14584] loop0: detected capacity change from 0 to 8192 [ 475.990765][T14586] loop1: detected capacity change from 0 to 4096 [ 476.013628][T14586] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 476.029993][T14587] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 476.610178][ T9] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 476.833975][ T9] usb 2-1: config 2 has an invalid interface number: 239 but max is 0 [ 476.856062][ T9] usb 2-1: config 2 has no interface number 0 [ 476.862226][ T9] usb 2-1: config 2 interface 239 has no altsetting 0 [ 476.898866][ T9] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=cd.e1 [ 476.907970][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.925352][T14589] loop0: detected capacity change from 0 to 32768 [ 476.945683][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 476.962659][T14589] BTRFS: device fsid 9399ba92-402c-46cb-a272-9c4c6c4f62f5 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3724 (14589) [ 477.036897][T14589] BTRFS info (device loop0): first mount of filesystem 9399ba92-402c-46cb-a272-9c4c6c4f62f5 [ 477.068511][T14589] BTRFS info (device loop0): using sha256 checksum algorithm [ 477.174279][T14589] BTRFS info (device loop0): enabling ssd optimizations [ 477.186663][ T9] gspca_sunplus: reg_r err -71 [ 477.209792][ T9] usb 2-1: USB disconnect, device number 103 [ 477.217156][T14589] BTRFS info (device loop0): turning on async discard [ 477.230483][T14589] BTRFS info (device loop0): enabling free space tree [ 477.378161][ T5949] BTRFS info (device loop0): last unmount of filesystem 9399ba92-402c-46cb-a272-9c4c6c4f62f5 [ 477.694985][T14610] loop2: detected capacity change from 0 to 4096 [ 477.745568][T14610] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 477.923785][T14614] loop0: detected capacity change from 0 to 2048 [ 477.964780][T14612] loop4: detected capacity change from 0 to 4096 [ 478.028393][T14612] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 478.052330][T14614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.168510][T14614] ext4 filesystem being mounted at /764/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.327818][ T5949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.481266][ T9] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 478.644269][T14616] loop1: detected capacity change from 0 to 32768 [ 478.661193][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 478.686366][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 478.708568][ T9] usb 3-1: config 129 has an invalid interface number: 28 but max is 0 [ 478.720479][T14616] (syz.1.3730,14616,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 478.729888][ T9] usb 3-1: config 129 has no interface number 0 [ 478.736838][ T9] usb 3-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 478.745502][T14616] (syz.1.3730,14616,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 478.816617][ T9] usb 3-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 478.849457][ T9] usb 3-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 478.894388][ T9] usb 3-1: config 129 interface 28 has no altsetting 0 [ 478.917102][ T9] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 478.932679][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.952093][ T9] usb 3-1: Product: syz [ 478.956314][ T9] usb 3-1: Manufacturer: syz [ 478.960932][ T9] usb 3-1: SerialNumber: syz [ 479.019094][T14620] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 479.288643][ T9] etas_es58x 3-1:129.28: Starting syz syz (Serial Number syz) [ 479.306906][ T9] etas_es58x 3-1:129.28: could not retrieve the product info string [ 479.375176][ T9] usb 3-1: USB disconnect, device number 119 [ 479.397295][ T9] etas_es58x 3-1:129.28: Disconnecting syz syz [ 479.976744][T14624] loop0: detected capacity change from 0 to 65536 [ 480.027108][T14624] (syz.0.3733,14624,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 480.099023][T14624] (syz.0.3733,14624,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 480.457542][T14632] loop0: detected capacity change from 0 to 4096 [ 480.480694][T14632] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 480.793647][T14634] loop0: detected capacity change from 0 to 1 [ 480.824724][T14634] syz.0.3737: attempt to access beyond end of device [ 480.824724][T14634] loop0: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 480.865744][T14634] SQUASHFS error: Failed to read block 0x0: -5 [ 480.898101][T14634] unable to read squashfs_super_block [ 481.113012][T14636] loop0: detected capacity change from 0 to 128 [ 481.161634][T14636] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 481.211624][T14622] loop4: detected capacity change from 0 to 131072 [ 481.230774][T14636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.503141][T14639] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 482.206088][T14641] loop3: detected capacity change from 0 to 256 [ 482.277749][T14641] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 482.316985][T14641] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 482.330331][T14641] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 482.359653][T14641] UDF-fs: Scanning with blocksize 512 failed [ 482.392348][T14641] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 482.433990][T14641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 482.451615][T14638] loop0: detected capacity change from 0 to 32768 [ 482.495248][T14638] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3739 (14638) [ 482.550717][T14638] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 482.576286][T14638] BTRFS info (device loop0): using blake2b checksum algorithm [ 482.718190][T14638] BTRFS info (device loop0): enabling ssd optimizations [ 482.725229][T14638] BTRFS info (device loop0): turning on async discard [ 482.760546][T14657] loop3: detected capacity change from 0 to 128 [ 482.779455][T14638] BTRFS info (device loop0): enabling free space tree [ 482.811351][T14657] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 482.891823][T14657] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 482.962044][ T5949] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 483.273322][T14660] loop3: detected capacity change from 0 to 512 [ 483.287201][T14662] loop4: detected capacity change from 0 to 128 [ 483.314789][T14662] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 483.332730][T14660] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 483.355480][T14662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 483.388968][T14660] UDF-fs: Scanning with blocksize 512 failed [ 483.402080][T14664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.499264][T14660] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 483.542772][T14660] UDF-fs: Scanning with blocksize 1024 failed [ 483.614411][T14660] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 483.645235][T14660] UDF-fs: Scanning with blocksize 2048 failed [ 483.670532][ T5947] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.690735][T14660] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 483.746390][T14660] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 484.370383][T14682] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 484.448646][T14682] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 484.481499][T14682] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 484.503147][T14682] UDF-fs: Scanning with blocksize 512 failed [ 484.538219][T14682] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 484.567456][T14682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 485.488014][T14684] set_capacity_and_notify: 5 callbacks suppressed [ 485.488034][T14684] loop2: detected capacity change from 0 to 32768 [ 485.556551][T14684] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 485.656772][T14684] XFS (loop2): Ending clean mount [ 485.792365][ T5948] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 486.468181][ T5959] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 486.655052][ T5959] usb 3-1: config 0 has an invalid interface number: 182 but max is 1 [ 486.682160][ T5959] usb 3-1: config 0 has an invalid interface number: 9 but max is 1 [ 486.690236][ T5959] usb 3-1: config 0 has no interface number 0 [ 486.725010][ T5959] usb 3-1: config 0 has no interface number 1 [ 486.742073][ T5959] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 486.778286][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.801419][ T5959] usb 3-1: config 0 descriptor?? [ 486.819046][ T5959] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 487.047578][ T5959] snd-usb-audio 3-1:0.182: probe with driver snd-usb-audio failed with error -2 [ 487.092054][ T5959] usb 3-1: USB disconnect, device number 120 [ 488.603677][T14708] loop1: detected capacity change from 0 to 256 [ 488.651138][T14708] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 488.746094][T14708] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 488.776242][T14708] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 488.788594][T14708] UDF-fs: Scanning with blocksize 512 failed [ 488.821211][T14708] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 488.878732][T14708] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 488.936224][T14702] loop3: detected capacity change from 0 to 32768 [ 488.992284][T14702] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 489.060997][T14702] XFS (loop3): Internal error hlen <= 0 || hlen > bufsize at line 2980 of file fs/xfs/xfs_log_recover.c. Caller xlog_valid_rec_header+0x1a0/0x290 [ 489.087476][T14700] loop2: detected capacity change from 0 to 65536 [ 489.120261][T14702] CPU: 1 UID: 0 PID: 14702 Comm: syz.3.3758 Not tainted syzkaller #0 PREEMPT(full) [ 489.120291][T14702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 489.120305][T14702] Call Trace: [ 489.120314][T14702] [ 489.120324][T14702] dump_stack_lvl+0xe8/0x150 [ 489.120359][T14702] xfs_corruption_error+0x122/0x170 [ 489.120395][T14702] ? xlog_valid_rec_header+0x1a0/0x290 [ 489.120426][T14702] xlog_valid_rec_header+0x205/0x290 [ 489.120453][T14702] ? xlog_valid_rec_header+0x1a0/0x290 [ 489.120495][T14702] xlog_do_recovery_pass+0x331/0xcd0 [ 489.120535][T14702] ? __pfx_xlog_do_recovery_pass+0x10/0x10 [ 489.120576][T14702] ? kfree+0x1c1/0x630 [ 489.120612][T14702] xlog_verify_head+0x136/0x440 [ 489.120646][T14702] xlog_find_tail+0x5ca/0x840 [ 489.120681][T14702] xlog_recover+0x4b/0x3e0 [ 489.120711][T14702] xfs_log_mount+0x253/0x3e0 [ 489.120751][T14702] xfs_mountfs+0xe70/0x22e0 [ 489.120790][T14702] ? __pfx_xfs_mountfs+0x10/0x10 [ 489.120820][T14702] ? trace_xfs_inode_timestamp_range+0x84/0x230 [ 489.120845][T14702] xfs_fs_fill_super+0x11b5/0x1600 [ 489.120872][T14702] get_tree_bdev_flags+0x431/0x4f0 [ 489.120895][T14702] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 489.120914][T14702] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 489.120947][T14702] vfs_get_tree+0x92/0x2a0 [ 489.120972][T14702] do_new_mount+0x341/0xd30 [ 489.120998][T14702] ? apparmor_capable+0x126/0x170 [ 489.121033][T14702] ? __pfx_do_new_mount+0x10/0x10 [ 489.121061][T14702] ? ns_capable+0x89/0xe0 [ 489.121098][T14702] ? user_path_at+0xd4/0x160 [ 489.121130][T14702] __se_sys_mount+0x31d/0x420 [ 489.121164][T14702] ? __pfx___se_sys_mount+0x10/0x10 [ 489.121198][T14702] ? __x64_sys_mount+0x20/0xc0 [ 489.121227][T14702] do_syscall_64+0x14d/0xf80 [ 489.121248][T14702] ? trace_irq_disable+0x3b/0x150 [ 489.121276][T14702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.121298][T14702] ? clear_bhb_loop+0x40/0x90 [ 489.121323][T14702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.121345][T14702] RIP: 0033:0x7fdac119d20a [ 489.121365][T14702] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.121400][T14702] RSP: 002b:00007fdac1f9ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 489.121423][T14702] RAX: ffffffffffffffda RBX: 00007fdac1f9eee0 RCX: 00007fdac119d20a [ 489.121439][T14702] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007fdac1f9eea0 [ 489.121455][T14702] RBP: 0000200000000080 R08: 00007fdac1f9eee0 R09: 0000000000808041 [ 489.121470][T14702] R10: 0000000000808041 R11: 0000000000000246 R12: 0000200000000040 [ 489.121484][T14702] R13: 00007fdac1f9eea0 R14: 0000000000009772 R15: 0000200000000000 [ 489.121518][T14702] [ 489.121527][T14702] XFS (loop3): Corruption detected. Unmount and run xfs_repair [ 489.419236][T14702] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 489.504080][T14700] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 489.582092][T14702] XFS (loop3): Starting recovery (logdev: internal) [ 489.659302][T14702] XFS (loop3): Ending recovery (logdev: internal) [ 489.748730][T14702] XFS (loop3): Quotacheck needed: Please wait. [ 489.838199][T14702] XFS (loop3): Quotacheck: Done. [ 489.838747][T14698] loop0: detected capacity change from 0 to 65536 [ 489.913497][T14698] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 490.199779][ T5952] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 491.122844][T14764] netlink: 'syz.3.3780': attribute type 66 has an invalid length. [ 491.904986][T14788] loop3: detected capacity change from 0 to 164 [ 491.958557][T14790] loop0: detected capacity change from 0 to 256 [ 491.980872][T14790] exfat: Deprecated parameter 'namecase' [ 491.988656][T14792] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 492.026303][T14790] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 492.082142][T14790] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 492.189462][T14790] exfat: Deprecated parameter 'namecase' [ 492.312344][T14797] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 492.350721][T14797] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 492.574089][T14805] netlink: 'syz.4.3799': attribute type 3 has an invalid length. [ 492.892909][T14763] loop2: detected capacity change from 0 to 65536 [ 492.930060][T14820] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 492.964224][T14763] (syz.2.3779,14763,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 493.009233][T14763] (syz.2.3779,14763,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 493.271060][T14834] netlink: 'syz.1.3814': attribute type 2 has an invalid length. [ 493.423921][T14841] netlink: 'syz.3.3817': attribute type 8 has an invalid length. [ 493.550425][T14845] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3818'. [ 493.680569][T14847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 494.060970][T14869] loop3: detected capacity change from 0 to 128 [ 494.380316][ T6061] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 494.577084][ T6061] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 494.598159][ T6061] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.649280][ T6061] usb 3-1: config 0 descriptor?? [ 494.671271][ T6061] gspca_main: spca508-2.14.0 probing 8086:0110 [ 495.043294][T14916] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 495.055325][T14916] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 495.099533][ T6061] gspca_spca508: reg_read err -71 [ 495.108434][T14918] ieee802154 phy0 wpan0: encryption failed: -90 [ 495.116206][ T6061] gspca_spca508: reg_read err -71 [ 495.132937][ T6061] gspca_spca508: reg_read err -71 [ 495.160301][ T6061] gspca_spca508: reg_read err -71 [ 495.168215][ T6061] gspca_spca508: reg write: error -71 [ 495.184760][ T6061] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 495.223790][T14923] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 495.257275][ T6061] usb 3-1: USB disconnect, device number 121 [ 495.376445][T14929] loop0: detected capacity change from 0 to 512 [ 495.389593][T14929] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 495.414877][T14929] FAT-fs (loop0): FAT read failed (blocknr 1568) [ 495.444145][T14931] ip6gre1: entered allmulticast mode [ 495.610448][ T9] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 495.758262][T14942] loop1: detected capacity change from 0 to 256 [ 495.790058][T14942] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 495.809516][T14944] loop4: detected capacity change from 0 to 1024 [ 495.817950][ T9] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 495.827440][ T9] usb 4-1: config 5 has no interface number 0 [ 495.833607][ T9] usb 4-1: config 5 interface 123 has no altsetting 0 [ 495.877371][ T9] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 495.900569][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.915411][ T9] usb 4-1: Product: syz [ 495.935211][ T9] usb 4-1: Manufacturer: syz [ 495.953097][ T9] usb 4-1: SerialNumber: syz [ 495.997784][T14944] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 496.006937][T14944] hfsplus: xattr searching failed [ 496.014681][T14944] syz.4.3866: attempt to access beyond end of device [ 496.014681][T14944] loop4: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 496.035859][T14944] Buffer I/O error on dev loop4, logical block 458752, async page read [ 496.047669][T14944] hfsplus: unable to mark blocks free: error -5 [ 496.055480][T14944] hfsplus: can't free extent: start 131, count 1 [ 496.239680][ T9] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 496.294482][ T9] usb 4-1: USB disconnect, device number 98 [ 496.377356][T14961] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 496.619891][T14970] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 496.901431][T14979] bond1: entered allmulticast mode [ 497.439530][T15006] ieee802154 phy0 wpan0: encryption failed: -22 [ 497.472047][T15009] loop3: detected capacity change from 0 to 512 [ 497.479434][T15009] EXT4-fs: Ignoring removed orlov option [ 497.537133][T15009] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 497.621210][T15009] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.3897: corrupted in-inode xattr: e_value size too large [ 497.639350][T15009] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 497.641274][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 497.657046][ C0] EXT4-fs (loop3): initial error at time 2000000211: ext4_iget_extra_inode:5025: inode 15 [ 497.662184][T15009] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3897: couldn't read orphan inode 15 (err -117) [ 497.667053][ C0] EXT4-fs (loop3): last error at time 2000000211: ext4_iget_extra_inode:5025: inode 15 [ 497.713602][T15009] loop3: lost filesystem error report for type 5 error -117 [ 497.721908][T15009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.745605][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3901'. [ 497.819282][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3902'. [ 497.846741][T15026] loop4: detected capacity change from 0 to 256 [ 497.926512][ T5952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.955893][T15018] bond2: option resend_igmp: invalid value (511) [ 498.006401][T15018] bond2: option resend_igmp: allowed values 0 - 255 [ 498.046800][T15018] bond2 (unregistering): Released all slaves [ 498.057608][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 498.066370][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 498.255922][ T2011] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 498.320640][T15041] openvswitch: netlink: IP tunnel dst address not specified [ 498.412605][ T6020] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 498.443204][ T2011] usb 2-1: Using ep0 maxpacket: 8 [ 498.459553][ T2011] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 498.480069][ T2011] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 498.493337][ T2011] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 498.503202][ T2011] usb 2-1: Product: syz [ 498.507992][ T2011] usb 2-1: Manufacturer: syz [ 498.512662][ T2011] usb 2-1: SerialNumber: syz [ 498.583573][ T6020] usb 4-1: Using ep0 maxpacket: 32 [ 498.602652][ T6020] usb 4-1: config 0 has an invalid interface number: 119 but max is 4 [ 498.618954][ T6020] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 498.628819][T15049] x_tables: unsorted underflow at hook 3 [ 498.643742][ T6020] usb 4-1: config 0 has no interface number 0 [ 498.665093][ T6020] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 498.696163][ T6020] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 498.742193][ T6020] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 498.767026][ T6020] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.793937][ T2011] usb 2-1: Invalid connection information received from device [ 498.822906][ T6020] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 498.838629][ T6020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.847290][ T6020] usb 4-1: Product: syz [ 498.851886][ T6020] usb 4-1: Manufacturer: syz [ 498.856544][ T6020] usb 4-1: SerialNumber: syz [ 498.869342][ T6020] usb 4-1: config 0 descriptor?? [ 498.877018][T15053] loop4: detected capacity change from 0 to 4096 [ 498.898821][ T6020] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input40 [ 498.919725][T15053] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 499.007830][ T6020] usb 2-1: USB disconnect, device number 104 [ 499.059798][T15053] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 499.088044][T15053] ntfs3(loop4): ino=19, mi_enum_attr [ 499.178335][ T5959] usb 4-1: USB disconnect, device number 99 [ 499.351779][T15066] loop0: detected capacity change from 0 to 512 [ 499.389364][T15066] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 499.436659][T15066] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 499.458904][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 499.465421][ C1] EXT4-fs (loop0): initial error at time 2000000212: ext4_mb_generate_buddy:1315 [ 499.474802][ C1] EXT4-fs (loop0): last error at time 2000000212: ext4_mb_generate_buddy:1315 [ 499.507368][T15066] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 499.523358][T15066] EXT4-fs (loop0): 1 truncate cleaned up [ 499.532652][T15066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.721708][ T5949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.917602][T15085] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3932'. [ 500.295440][T15102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3941'. [ 500.634260][T15118] netlink: 4168 bytes leftover after parsing attributes in process `syz.2.3945'. [ 501.148370][ T6034] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 501.163119][T15141] No such timeout policy "syz1" [ 501.319876][ T6034] usb 1-1: Using ep0 maxpacket: 16 [ 501.349201][ T6034] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 501.369419][ T6034] usb 1-1: config 1 has no interface number 0 [ 501.390504][ T6034] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 501.419535][T15153] loop3: detected capacity change from 0 to 256 [ 501.426048][ T6034] usb 1-1: config 1 interface 105 has no altsetting 0 [ 501.434055][T15149] loop4: detected capacity change from 0 to 4096 [ 501.445330][ T6034] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 501.466454][T15149] NILFS (loop4): mounting unchecked fs [ 501.479354][ T6034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.491340][T15149] NILFS (loop4): recovery required for readonly filesystem [ 501.510139][ T6034] usb 1-1: Product: syz [ 501.523109][T15149] NILFS (loop4): write access will be enabled during recovery [ 501.542766][ T6034] usb 1-1: Manufacturer: syz [ 501.552055][ T6034] usb 1-1: SerialNumber: syz [ 501.571487][T15149] NILFS (loop4): invalid segment: Checksum error in segment payload [ 501.593545][T15129] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 501.613073][T15149] NILFS (loop4): trying rollback from an earlier position [ 501.685327][T15149] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 501.731823][T15149] NILFS (loop4): couldn't remount because the filesystem is in an incomplete recovery state [ 501.898865][ T6034] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 502.096854][ T6034] usb 1-1: USB disconnect, device number 109 [ 502.181087][T15168] loop4: detected capacity change from 0 to 4096 [ 502.256967][T15168] ntfs3(loop4): ino=b, Correct links count -> 1. [ 502.295401][T15168] ntfs3(loop4): ino=18, mi_enum_attr [ 502.305502][T15168] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 502.889298][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3983'. [ 502.923378][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3983'. [ 502.943785][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3983'. [ 502.964211][T15173] loop2: detected capacity change from 0 to 32768 [ 503.002466][T15173] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3972 (15173) [ 503.087629][T15201] loop3: detected capacity change from 0 to 256 [ 503.116192][T15173] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 503.160840][T15173] BTRFS info (device loop2): using sha256 checksum algorithm [ 503.176977][T15201] FAT-fs (loop3): Directory bread(block 64) failed [ 503.196521][T15201] FAT-fs (loop3): Directory bread(block 65) failed [ 503.211267][T15205] infiniband: Added to hash: ib_dev=ffff888069dec000 (0)() ndev=ffff88805877a000 (27)(hsr0) [ 503.233626][T15201] FAT-fs (loop3): Directory bread(block 66) failed [ 503.241194][T15201] FAT-fs (loop3): Directory bread(block 67) failed [ 503.256690][T15205] hsr0 speed is unknown, defaulting to 1000 [ 503.264570][T15205] hsr0 speed is unknown, defaulting to 1000 [ 503.272430][T15201] FAT-fs (loop3): Directory bread(block 68) failed [ 503.281686][T15205] hsr0 speed is unknown, defaulting to 1000 [ 503.300472][T15205] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 503.320434][T15201] FAT-fs (loop3): Directory bread(block 69) failed [ 503.324281][T15205] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 503.364989][T15201] FAT-fs (loop3): Directory bread(block 70) failed [ 503.371794][T15201] FAT-fs (loop3): Directory bread(block 71) failed [ 503.378706][T15201] FAT-fs (loop3): Directory bread(block 72) failed [ 503.385645][T15201] FAT-fs (loop3): Directory bread(block 73) failed [ 503.449834][T15205] hsr0 speed is unknown, defaulting to 1000 [ 503.470343][T15173] BTRFS info (device loop2): enabling ssd optimizations [ 503.486391][T15173] BTRFS info (device loop2): turning on async discard [ 503.495151][T15173] BTRFS info (device loop2): enabling free space tree [ 503.515780][T15205] hsr0 speed is unknown, defaulting to 1000 [ 503.554273][T15205] hsr0 speed is unknown, defaulting to 1000 [ 503.602643][T15205] hsr0 speed is unknown, defaulting to 1000 [ 503.629291][T15205] hsr0 speed is unknown, defaulting to 1000 [ 503.676192][T15173] BTRFS info (device loop2): balance: start -f [ 503.712261][T15173] BTRFS info (device loop2): balance: ended with status: 0 [ 503.931878][T15231] loop3: detected capacity change from 0 to 22 [ 503.935583][ T5948] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 503.961381][T15231] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 503.981344][T15231] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 504.375788][T15203] loop4: detected capacity change from 0 to 32768 [ 504.384289][T15236] loop0: detected capacity change from 0 to 4096 [ 504.409646][T15236] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 504.703228][T15246] loop3: detected capacity change from 0 to 1024 [ 504.766467][T15246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 504.860945][T15246] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 504.950916][T15246] System zones: 0-1, 3-36 [ 504.979680][T15259] loop2: detected capacity change from 0 to 256 [ 504.991865][T15246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.147212][T15259] FAT-fs (loop2): Directory bread(block 64) failed [ 505.153828][T15259] FAT-fs (loop2): Directory bread(block 65) failed [ 505.207569][ T5952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.221977][T15259] FAT-fs (loop2): Directory bread(block 66) failed [ 505.228689][T15259] FAT-fs (loop2): Directory bread(block 67) failed [ 505.254423][T15259] FAT-fs (loop2): Directory bread(block 68) failed [ 505.306582][T15259] FAT-fs (loop2): Directory bread(block 69) failed [ 505.339915][T15259] FAT-fs (loop2): Directory bread(block 70) failed [ 505.351495][T15259] FAT-fs (loop2): Directory bread(block 71) failed [ 505.372960][T15259] FAT-fs (loop2): Directory bread(block 72) failed [ 505.379561][T15259] FAT-fs (loop2): Directory bread(block 73) failed [ 505.493932][T15273] vlan0: entered promiscuous mode [ 505.665972][T15277] openvswitch: netlink: Unknown key attributes 2 [ 506.062868][T15292] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 506.364790][T15300] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 506.457822][T15300] bond2 (unregistering): Released all slaves [ 506.851540][T15323] netlink: 'syz.1.4035': attribute type 1 has an invalid length. [ 506.869952][T15323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4035'. [ 506.890965][T15279] loop4: detected capacity change from 0 to 40427 [ 506.920845][T15279] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 506.955754][T15279] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 506.981175][T15279] F2FS-fs (loop4): build fault injection type: 0x6 [ 507.035522][T15279] F2FS-fs (loop4): invalid crc value [ 507.390176][T15279] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 507.446109][T15279] F2FS-fs (loop4): Start checkpoint disabled! [ 507.480827][T15279] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 507.524671][T15279] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 507.535273][T15350] netlink: 'syz.1.4048': attribute type 4 has an invalid length. [ 507.554007][T15279] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 507.561642][T15350] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4048'. [ 507.578178][T15353] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4049'. [ 507.603905][T15353] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4049'. [ 507.606664][T15279] syz.4.4014: attempt to access beyond end of device [ 507.606664][T15279] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 507.748398][ T12] kworker/u8:0: attempt to access beyond end of device [ 507.748398][ T12] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 507.799167][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 507.799197][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 507.799211][ T12] Workqueue: writeback wb_workfn (flush-7:4) [ 507.799244][ T12] Call Trace: [ 507.799252][ T12] [ 507.799261][ T12] dump_stack_lvl+0xe8/0x150 [ 507.799293][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 507.799342][ T12] f2fs_write_end_io+0xcdb/0xff0 [ 507.799385][ T12] __submit_merged_bio+0x256/0x700 [ 507.799415][ T12] __submit_merged_write_cond+0x3c9/0x4e0 [ 507.799457][ T12] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 507.799511][ T12] f2fs_write_data_pages+0x2975/0x35e0 [ 507.799571][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 507.799608][ T12] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 507.799669][ T12] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 507.799730][ T12] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 507.799762][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 507.799787][ T12] do_writepages+0x32e/0x550 [ 507.799822][ T12] ? reacquire_held_locks+0x104/0x190 [ 507.799852][ T12] ? writeback_sb_inodes+0x43d/0x19a0 [ 507.799884][ T12] __writeback_single_inode+0x133/0x11a0 [ 507.799911][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 507.799938][ T12] writeback_sb_inodes+0x944/0x19a0 [ 507.799970][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 507.800008][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 507.800039][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 507.800060][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 507.800119][ T12] ? rcu_is_watching+0x15/0xb0 [ 507.800157][ T12] wb_writeback+0x456/0xb70 [ 507.800185][ T12] ? queue_io+0x271/0x4a0 [ 507.800218][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 507.800241][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 507.800277][ T12] wb_workfn+0x414/0xf50 [ 507.800312][ T12] ? look_up_lock_class+0x57/0x110 [ 507.800347][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 507.800372][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 507.800395][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 507.800438][ T12] ? process_one_work+0x87c/0x1650 [ 507.800463][ T12] process_one_work+0x949/0x1650 [ 507.800500][ T12] ? trace_irq_disable+0x20/0x150 [ 507.800538][ T12] ? __pfx_process_one_work+0x10/0x10 [ 507.800562][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 507.800599][ T12] worker_thread+0xb46/0x1140 [ 507.800651][ T12] kthread+0x388/0x470 [ 507.800672][ T12] ? __pfx_worker_thread+0x10/0x10 [ 507.800695][ T12] ? __pfx_kthread+0x10/0x10 [ 507.800715][ T12] ret_from_fork+0x51e/0xb90 [ 507.800743][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 507.800766][ T12] ? __switch_to+0xc7d/0x1450 [ 507.800791][ T12] ? __pfx_kthread+0x10/0x10 [ 507.800812][ T12] ret_from_fork_asm+0x1a/0x30 [ 507.800858][ T12] [ 507.800867][ T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 507.883941][T15360] geneve2: entered promiscuous mode [ 508.123480][T15360] geneve2: entered allmulticast mode [ 508.390063][T15371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4059'. [ 508.432894][T15371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4059'. [ 508.595849][T15348] loop0: detected capacity change from 0 to 32768 [ 508.716925][T15348] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 508.787367][T15384] loop3: detected capacity change from 0 to 512 [ 508.842439][T15384] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 508.880224][T15348] XFS (loop0): Ending clean mount [ 508.907037][T15348] XFS (loop0): Quotacheck needed: Please wait. [ 508.930368][T15384] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.4063: bad orphan inode 13 [ 508.962289][T15395] netlink: 'syz.2.4065': attribute type 6 has an invalid length. [ 508.985147][T15384] loop3: lost filesystem error report for type 5 error -117 [ 508.985523][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 508.999503][ C1] EXT4-fs (loop3): last error at time 2000000221: ext4_orphan_get:1417 [ 509.012265][T15384] ext4_test_bit(bit=12, block=18) = 1 [ 509.019030][T15384] is_bad_inode(inode)=0 [ 509.039091][T15384] NEXT_ORPHAN(inode)=0 [ 509.047996][T15384] max_ino=32 [ 509.054274][T15384] i_nlink=1 [ 509.058599][T15348] XFS (loop0): Quotacheck: Done. [ 509.075778][T15384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 509.092495][ T9] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 509.170270][T15384] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 509.215484][ T5949] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 509.245013][T15384] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4063: bg 0: block 248: padding at end of block bitmap is not set [ 509.293791][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 509.313891][T15384] Quota error (device loop3): write_blk: dquota write failed [ 509.341704][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 509.352003][T15384] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 509.372564][ T9] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 509.384833][T15384] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.4063: Failed to acquire dquot type 1 [ 509.391872][ T9] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 509.417839][ T9] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 509.471220][ T9] usb 5-1: config 128 has no interface number 0 [ 509.489136][ T9] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 509.532121][ T9] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 509.557229][ T5952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 509.579314][ T9] usb 5-1: config 128 interface 127 has no altsetting 0 [ 509.592794][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 509.617272][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.637977][ T9] usb 5-1: Product: syz [ 509.655237][ T9] usb 5-1: Manufacturer: syz [ 509.660515][ T9] usb 5-1: SerialNumber: syz [ 509.836608][T15410] loop0: detected capacity change from 0 to 512 [ 509.857544][T15410] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 509.905652][T15410] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.4073: bad orphan inode 131083 [ 509.934169][T15410] loop0: lost filesystem error report for type 5 error -117 [ 509.936524][T15410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.026752][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4075'. [ 510.069167][ T5949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.210812][T15417] bond1: option resend_igmp: invalid value (511) [ 510.222420][ T9] usb 5-1: USB disconnect, device number 101 [ 510.240039][T15417] bond1: option resend_igmp: allowed values 0 - 255 [ 510.256486][T15417] bond1 (unregistering): Released all slaves [ 510.273215][ T6075] udevd[6075]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.399402][ T6034] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 510.540622][T15432] netlink: 'syz.3.4081': attribute type 21 has an invalid length. [ 510.610109][ T6034] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 510.634276][ T6034] usb 3-1: config 1 has no interface number 0 [ 510.655296][ T6034] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 510.697721][ T6034] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 510.728305][ T6034] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.775168][ T6034] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 510.798180][ T6034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.814221][T15442] nvme_fabrics: unknown parameter or missing value '®™' in ctrl creation request [ 510.829861][ T6034] usb 3-1: Product: syz [ 510.834098][ T6034] usb 3-1: Manufacturer: syz [ 510.854105][ T6034] usb 3-1: SerialNumber: syz [ 510.865321][T15445] loop4: detected capacity change from 0 to 1024 [ 510.886617][T15424] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 511.147755][T15424] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 511.169417][T15451] loop0: detected capacity change from 0 to 1764 [ 511.235723][T15451] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 511.367924][T15463] Driver unsupported XDP return value 0 on prog (id 255) dev N/A, expect packet loss! [ 511.406322][ T6034] usb 3-1: Incompatible driver and firmware versions [ 511.440298][ T6034] usb 3-1: USB disconnect, device number 122 [ 511.579723][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4100'. [ 512.526418][T15473] loop0: detected capacity change from 0 to 40427 [ 512.567702][T15473] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 512.575254][T15473] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 512.633872][T15473] F2FS-fs (loop0): invalid crc value [ 512.959026][T15473] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 513.045744][T15473] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 513.090160][T15473] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 513.137904][T15473] syz.0.4103: attempt to access beyond end of device [ 513.137904][T15473] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 513.163374][T15533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4130'. [ 513.225910][T15533] netlink: 'syz.4.4130': attribute type 1 has an invalid length. [ 513.254264][ T5949] syz-executor: attempt to access beyond end of device [ 513.254264][ T5949] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 513.303183][ T5949] CPU: 0 UID: 0 PID: 5949 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 513.303212][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 513.303225][ T5949] Call Trace: [ 513.303234][ T5949] [ 513.303244][ T5949] dump_stack_lvl+0xe8/0x150 [ 513.303279][ T5949] f2fs_handle_critical_error+0x37c/0x540 [ 513.303322][ T5949] f2fs_write_end_io+0xcdb/0xff0 [ 513.303370][ T5949] __submit_merged_bio+0x256/0x700 [ 513.303402][ T5949] __submit_merged_write_cond+0x3c9/0x4e0 [ 513.303447][ T5949] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 513.303511][ T5949] f2fs_write_data_pages+0x2975/0x35e0 [ 513.303581][ T5949] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 513.303626][ T5949] ? css_rstat_updated+0x23a/0x530 [ 513.303682][ T5949] ? rcu_is_watching+0x15/0xb0 [ 513.303709][ T5949] ? arch_stack_walk+0xe3/0x150 [ 513.303742][ T5949] ? unwind_next_frame+0xa5/0x23c0 [ 513.303773][ T5949] ? rcu_is_watching+0x15/0xb0 [ 513.303799][ T5949] ? __bfs+0x153/0x290 [ 513.303824][ T5949] ? __pfx_hlock_conflict+0x10/0x10 [ 513.303885][ T5949] ? lockdep_unlock+0x5d/0xd0 [ 513.303907][ T5949] ? __lock_acquire+0x146e/0x2cf0 [ 513.303939][ T5949] ? is_bpf_text_address+0x292/0x2b0 [ 513.303983][ T5949] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 513.304010][ T5949] do_writepages+0x32e/0x550 [ 513.304051][ T5949] ? do_raw_spin_unlock+0xf5/0x210 [ 513.304080][ T5949] filemap_fdatawrite+0x1e9/0x2f0 [ 513.304115][ T5949] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 513.304199][ T5949] ? do_raw_spin_unlock+0xf5/0x210 [ 513.304227][ T5949] f2fs_sync_dirty_inodes+0x30e/0x860 [ 513.304272][ T5949] f2fs_write_checkpoint+0x9df/0x26a0 [ 513.304339][ T5949] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 513.304430][ T5949] kill_f2fs_super+0x314/0x720 [ 513.304463][ T5949] ? __pfx_kill_f2fs_super+0x10/0x10 [ 513.304505][ T5949] ? lockdep_hardirqs_on+0x7a/0x110 [ 513.304543][ T5949] deactivate_locked_super+0xbc/0x130 [ 513.304576][ T5949] cleanup_mnt+0x437/0x4d0 [ 513.304597][ T5949] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.304630][ T5949] task_work_run+0x1d9/0x270 [ 513.304661][ T5949] ? __pfx_task_work_run+0x10/0x10 [ 513.304696][ T5949] exit_to_user_mode_loop+0xed/0x480 [ 513.304721][ T5949] ? rcu_is_watching+0x15/0xb0 [ 513.304754][ T5949] do_syscall_64+0x32d/0xf80 [ 513.304786][ T5949] ? trace_irq_disable+0x3b/0x150 [ 513.304814][ T5949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.304841][ T5949] ? clear_bhb_loop+0x40/0x90 [ 513.304867][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.304887][ T5949] RIP: 0033:0x7f94a259d1d7 [ 513.304908][ T5949] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 513.304926][ T5949] RSP: 002b:00007ffd54340cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 513.304948][ T5949] RAX: 0000000000000000 RBX: 00007f94a2631c3b RCX: 00007f94a259d1d7 [ 513.304961][ T5949] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd54340d80 [ 513.304973][ T5949] RBP: 00007ffd54340d80 R08: 00007ffd54341d80 R09: 00000000ffffffff [ 513.304987][ T5949] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd54341e10 [ 513.305000][ T5949] R13: 00007f94a2631c3b R14: 000000000007de70 R15: 00007ffd54341e50 [ 513.305036][ T5949] [ 513.658742][ T5949] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 513.756799][ T30] audit: type=1400 audit(2000000226.208:15): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620FFFFFFFFFFFFFFFF pid=15543 comm="syz.2.4138" [ 513.793100][T15545] netlink: 'syz.3.4139': attribute type 19 has an invalid length. [ 513.839706][T15545] netlink: 'syz.3.4139': attribute type 28 has an invalid length. [ 513.847591][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4139'. [ 514.164055][T15561] loop4: detected capacity change from 0 to 2048 [ 514.211098][T15566] autofs: Bad value for 'fd' [ 514.275924][T15561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.531185][ T5960] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.683396][T15579] loop0: detected capacity change from 0 to 2048 [ 514.834331][T15586] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 514.903123][T15579] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 514.959301][T15579] Remounting filesystem read-only [ 515.024624][T15591] overlay: ./file0 is not a directory [ 515.140421][ T5949] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 515.337386][T15563] loop3: detected capacity change from 0 to 32768 [ 515.345598][T15563] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4146 (15563) [ 515.455726][T15563] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 515.499570][T15563] BTRFS info (device loop3): using sha256 checksum algorithm [ 515.708209][T15563] BTRFS info (device loop3): rebuilding free space tree [ 515.777369][T15563] BTRFS info (device loop3): disabling free space tree [ 515.807113][T15563] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 515.816845][T15563] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 515.898248][T15563] BTRFS info (device loop3): enabling ssd optimizations [ 515.931256][T15634] loop1: detected capacity change from 0 to 1024 [ 515.937924][T15563] BTRFS info (device loop3): turning on async discard [ 515.944757][T15563] BTRFS info (device loop3): force clearing of disk cache [ 515.985562][T15563] BTRFS info (device loop3): enabling auto defrag [ 516.042268][T15563] BTRFS info (device loop3): max_inline set to 4096 [ 516.235805][T15641] loop2: detected capacity change from 0 to 1024 [ 516.248069][T15643] overlay: Bad value for 'workdir' [ 516.280620][ T5952] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 516.917130][T15639] loop4: detected capacity change from 0 to 32768 [ 517.065597][T15639] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 517.223714][T15639] XFS (loop4): Ending clean mount [ 517.288265][T15688] loop1: detected capacity change from 0 to 16 [ 517.328084][T15688] erofs (device loop1): mounted with root inode @ nid 36. [ 517.407781][ T5960] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 517.701412][ T6034] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 517.741979][T15696] loop1: detected capacity change from 0 to 512 [ 517.757186][T15696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 517.790620][T15696] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 517.805623][T15696] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 517.815579][T15696] EXT4-fs (loop1): orphan cleanup on readonly fs [ 517.824447][T15696] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 517.835778][T15696] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 517.851216][T15696] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 517.863917][T15696] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4199: bg 0: block 40: padding at end of block bitmap is not set [ 517.893477][T15696] loop1: lost filesystem error report for type 5 error -117 [ 517.902560][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 517.902602][ T6034] usb 1-1: Using ep0 maxpacket: 32 [ 517.910007][ C1] EXT4-fs (loop1): initial error at time 2000000230: ext4_validate_block_bitmap:441 [ 517.931060][ C1] EXT4-fs (loop1): last error at time 2000000230: ext4_validate_block_bitmap:441 [ 517.937228][ T6034] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 517.941331][T15696] EXT4-fs (loop1): Remounting filesystem read-only [ 517.979829][T15696] EXT4-fs (loop1): 1 truncate cleaned up [ 517.987529][T15696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 517.993991][ T6034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.030105][ T6034] usb 1-1: Product: syz [ 518.037066][ T6034] usb 1-1: Manufacturer: syz [ 518.045611][ T6034] usb 1-1: SerialNumber: syz [ 518.076608][ T6034] usb 1-1: config 0 descriptor?? [ 518.154140][T15708] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 518.226518][ T5947] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.342938][ T6034] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 518.375526][ T6034] b3 c1 69 eb 50 3d 29 15 [ 518.384196][ T6034] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 518.568318][ T6020] usb 1-1: USB disconnect, device number 110 [ 518.737997][ T30] audit: type=1400 audit(2000000230.875:16): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=15725 comm="syz.2.4212" [ 519.282284][T15748] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4223'. [ 519.323421][T15751] loop0: detected capacity change from 0 to 1024 [ 519.338567][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4223'. [ 519.369404][T15748] tc_dump_action: action bad kind [ 519.428619][T15751] hfsplus: hfsplus: Invalid key length: 29235 [ 520.990736][T15826] random: crng reseeded on system resumption [ 521.287800][T15839] tmpfs: Bad value for 'mpol' [ 521.517359][ T6020] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 521.582785][T15849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 521.708817][ T6020] usb 2-1: Using ep0 maxpacket: 8 [ 521.757739][ T6020] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.774307][ T6020] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 521.791951][ T6020] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.804721][T15832] loop2: detected capacity change from 0 to 32768 [ 521.827404][T15832] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4264 (15832) [ 521.842233][ T6020] usb 2-1: config 0 interface 0 has no altsetting 0 [ 521.882754][ T6020] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 521.896379][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.933499][ T6020] usb 2-1: Product: syz [ 521.945500][T15832] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 521.955240][ T6020] usb 2-1: Manufacturer: syz [ 521.982362][T15832] BTRFS info (device loop2): using sha256 checksum algorithm [ 521.983196][ T6020] usb 2-1: SerialNumber: syz [ 522.019704][ T6020] usb 2-1: config 0 descriptor?? [ 522.053950][ T6020] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 522.092018][T15875] binder: 15869:15875 ioctl 40046210 0 returned -14 [ 522.108893][T15832] BTRFS info (device loop2): enabling ssd optimizations [ 522.127761][T15832] BTRFS info (device loop2): turning on async discard [ 522.134682][T15832] BTRFS info (device loop2): enabling free space tree [ 522.280163][ T6020] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 522.288881][ T6020] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 522.299642][ T6020] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 522.352761][ T5948] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 522.545169][ T6020] usb 2-1: USB disconnect, device number 105 [ 522.998823][T15906] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4293'. [ 523.039718][T15906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4293'. [ 523.077583][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4293'. [ 523.312795][T15908] bond2: option miimon: invalid value (18446744073072017407) [ 523.341230][T15908] bond2: option miimon: allowed values 0 - 2147483647 [ 523.433294][T15908] bond2 (unregistering): Released all slaves [ 523.954562][ T5959] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 524.114687][ T5959] usb 2-1: Using ep0 maxpacket: 32 [ 524.124129][T15938] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 524.168123][ T5959] usb 2-1: unable to get BOS descriptor or descriptor too short [ 524.179884][ T5959] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 524.223346][ T5959] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 524.246291][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.286076][ T5959] usb 2-1: Product: syz [ 524.295952][ T5959] usb 2-1: Manufacturer: syz [ 524.316339][ T5959] usb 2-1: SerialNumber: syz [ 524.383237][T15946] loop2: detected capacity change from 0 to 256 [ 524.461379][T15946] FAT-fs (loop2): Directory bread(block 64) failed [ 524.472230][T15946] FAT-fs (loop2): Directory bread(block 65) failed [ 524.497797][T15946] FAT-fs (loop2): Directory bread(block 66) failed [ 524.524454][ T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 524.538288][T15946] FAT-fs (loop2): Directory bread(block 67) failed [ 524.551796][T15946] FAT-fs (loop2): Directory bread(block 68) failed [ 524.572411][T15946] FAT-fs (loop2): Directory bread(block 69) failed [ 524.585853][ T5959] usb 2-1: Invalid number of CPorts: 0 [ 524.590710][T15946] FAT-fs (loop2): Directory bread(block 70) failed [ 524.608292][ T5959] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 524.617268][T15946] FAT-fs (loop2): Directory bread(block 71) failed [ 524.617695][T15946] FAT-fs (loop2): Directory bread(block 72) failed [ 524.669143][T15946] FAT-fs (loop2): Directory bread(block 73) failed [ 524.730389][ T10] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 524.738887][ T10] usb 4-1: config 0 has no interface number 1 [ 524.766697][ T10] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 524.785064][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.813924][ T9] usb 2-1: USB disconnect, device number 106 [ 524.827371][ T10] usb 4-1: config 0 descriptor?? [ 524.859173][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 524.875089][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 525.161396][ T10] gspca_main: spca561-2.14.0 probing abcd:cdee [ 525.182269][ T10] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 525.228461][ T10] usb 4-1: USB disconnect, device number 100 [ 525.769941][T15985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.781241][T15981] loop4: detected capacity change from 0 to 1764 [ 525.920190][T15988] loop3: detected capacity change from 0 to 1024 [ 525.959303][T15988] EXT4-fs: Ignoring removed i_version option [ 526.002595][T15988] EXT4-fs: Ignoring removed oldalloc option [ 526.083816][T15988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.116770][T15997] loop4: detected capacity change from 0 to 256 [ 526.284544][T15988] EXT4-fs error (device loop3): ext4_empty_dir:3107: inode #11: block 623: comm syz.3.4333: Attempting to read directory block (623) that is past i_size (638464) [ 526.290691][T15997] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 526.369101][T15988] EXT4-fs (loop3): Remounting filesystem read-only [ 526.394197][T16000] loop1: detected capacity change from 0 to 128 [ 526.411879][T15997] FAT-fs (loop4): Filesystem has been set read-only [ 526.427255][T16000] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 526.490443][T16000] hpfs: filesystem error: improperly stopped [ 526.496515][T16000] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 526.573320][T16000] hpfs: You really don't want any checks? You are crazy... [ 526.592094][ T5952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.606242][T16000] hpfs: hpfs_map_sector(): read error [ 526.611688][T16000] hpfs: code page support is disabled [ 526.646876][T16000] hpfs: hpfs_map_4sectors(): unaligned read [ 526.656863][T16004] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 526.675476][T16000] hpfs: hpfs_map_4sectors(): unaligned read [ 526.695733][T16000] hpfs: filesystem error: unable to find root dir [ 526.706800][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4340'. [ 526.910135][T16010] xt_cgroup: path and classid specified [ 527.091595][T16013] loop4: detected capacity change from 0 to 4096 [ 527.135284][T15962] syz.0.4320 (15962): drop_caches: 2 [ 527.195777][T16013] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 527.206805][T16017] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 527.250413][T16013] NILFS (loop4): mounting fs with errors [ 527.311551][T16013] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6 [ 527.344822][T16016] loop2: detected capacity change from 0 to 4096 [ 527.792518][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4353'. [ 527.863656][T16008] loop3: detected capacity change from 0 to 32768 [ 528.122945][T16042] loop2: detected capacity change from 0 to 736 [ 528.151500][T16044] loop1: detected capacity change from 0 to 256 [ 528.291938][T16044] FAT-fs (loop1): Directory bread(block 64) failed [ 528.327350][T16044] FAT-fs (loop1): Directory bread(block 65) failed [ 528.351912][T16044] FAT-fs (loop1): Directory bread(block 66) failed [ 528.409866][T16044] FAT-fs (loop1): Directory bread(block 67) failed [ 528.445312][T16044] FAT-fs (loop1): Directory bread(block 68) failed [ 528.451924][T16044] FAT-fs (loop1): Directory bread(block 69) failed [ 528.499774][T16044] FAT-fs (loop1): Directory bread(block 70) failed [ 528.525874][T16044] FAT-fs (loop1): Directory bread(block 71) failed [ 528.541273][ T10] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 528.552786][T16044] FAT-fs (loop1): Directory bread(block 72) failed [ 528.559371][T16044] FAT-fs (loop1): Directory bread(block 73) failed [ 528.682992][T16054] loop3: detected capacity change from 0 to 4096 [ 528.745452][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 528.759548][ T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 528.773692][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.815804][ T10] usb 1-1: config 0 descriptor?? [ 528.854402][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 528.862348][T16054] ntfs3(loop3): new label is too long [ 528.987611][T16062] loop1: detected capacity change from 0 to 512 [ 529.023550][T16062] EXT4-fs: Ignoring removed i_version option [ 529.039931][T16062] EXT4-fs: Ignoring removed oldalloc option [ 529.071618][ T10] usb 1-1: Detected FT232A [ 529.091723][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 529.124510][T16062] EXT4-fs (loop1): Test dummy encryption mode enabled [ 529.158616][ T10] usb 1-1: USB disconnect, device number 111 [ 529.179866][T16062] EXT4-fs (loop1): 1 truncate cleaned up [ 529.197197][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 529.216533][ T10] ftdi_sio 1-1:0.0: device disconnected [ 529.220874][T16062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.481331][T16077] loop2: detected capacity change from 0 to 128 [ 529.505581][T16074] bond1: option miimon: invalid value (18446744073072017407) [ 529.513044][T16074] bond1: option miimon: allowed values 0 - 2147483647 [ 529.526716][ T5947] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.528730][T16077] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 529.566825][T16074] bond1 (unregistering): Released all slaves [ 529.613054][T16077] ext4 filesystem being mounted at /853/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 529.649418][T16082] loop4: detected capacity change from 0 to 64 [ 529.757047][T16085] syz.1.4376: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 529.775023][T16085] CPU: 1 UID: 0 PID: 16085 Comm: syz.1.4376 Not tainted syzkaller #0 PREEMPT(full) [ 529.775050][T16085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 529.775064][T16085] Call Trace: [ 529.775073][T16085] [ 529.775082][T16085] dump_stack_lvl+0xe8/0x150 [ 529.775117][T16085] warn_alloc+0x249/0x340 [ 529.775142][T16085] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 529.775179][T16085] ? __pfx_warn_alloc+0x10/0x10 [ 529.775210][T16085] ? kasan_save_track+0x4f/0x80 [ 529.775229][T16085] ? kasan_save_track+0x3e/0x80 [ 529.775249][T16085] ? __kasan_kmalloc+0x93/0xb0 [ 529.775268][T16085] ? __kmalloc_cache_noprof+0x31c/0x660 [ 529.775289][T16085] ? xskq_create+0x56/0x170 [ 529.775317][T16085] ? xsk_setsockopt+0x54c/0x990 [ 529.775342][T16085] ? do_sock_setsockopt+0x17c/0x1b0 [ 529.775369][T16085] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 529.775397][T16085] ? do_syscall_64+0x14d/0xf80 [ 529.775420][T16085] __vmalloc_node_range_noprof+0x132/0x1730 [ 529.775473][T16085] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 529.775511][T16085] ? __kasan_kmalloc+0x93/0xb0 [ 529.775540][T16085] vmalloc_user_noprof+0xad/0xe0 [ 529.775561][T16085] ? xskq_create+0xbf/0x170 [ 529.775592][T16085] xskq_create+0xbf/0x170 [ 529.775624][T16085] xsk_init_queue+0x8a/0xe0 [ 529.775655][T16085] xsk_setsockopt+0x54c/0x990 [ 529.775685][T16085] ? __pfx_xsk_setsockopt+0x10/0x10 [ 529.775711][T16085] ? __pfx_aa_sk_perm+0x10/0x10 [ 529.775738][T16085] ? aa_sock_opt_perm+0xff/0x1a0 [ 529.775765][T16085] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 529.775787][T16085] ? __pfx_xsk_setsockopt+0x10/0x10 [ 529.775816][T16085] do_sock_setsockopt+0x17c/0x1b0 [ 529.775850][T16085] __x64_sys_setsockopt+0x13d/0x1b0 [ 529.775885][T16085] do_syscall_64+0x14d/0xf80 [ 529.775905][T16085] ? trace_irq_disable+0x3b/0x150 [ 529.775933][T16085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.775954][T16085] ? clear_bhb_loop+0x40/0x90 [ 529.775979][T16085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.776000][T16085] RIP: 0033:0x7f2c6979bf79 [ 529.776019][T16085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.776037][T16085] RSP: 002b:00007f2c6a596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 529.776059][T16085] RAX: ffffffffffffffda RBX: 00007f2c69a15fa0 RCX: 00007f2c6979bf79 [ 529.776074][T16085] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 529.776087][T16085] RBP: 00007f2c698327e0 R08: 0000000000000004 R09: 0000000000000000 [ 529.776099][T16085] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.776112][T16085] R13: 00007f2c69a16038 R14: 00007f2c69a15fa0 R15: 00007ffcd7a2a578 [ 529.776146][T16085] [ 529.776169][T16085] Mem-Info: [ 530.065735][ T5948] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 530.169103][T16085] active_anon:7217 inactive_anon:11 isolated_anon:0 [ 530.169103][T16085] active_file:13325 inactive_file:42658 isolated_file:0 [ 530.169103][T16085] unevictable:768 dirty:606 writeback:4 [ 530.169103][T16085] slab_reclaimable:11327 slab_unreclaimable:94010 [ 530.169103][T16085] mapped:31015 shmem:1394 pagetables:1333 [ 530.169103][T16085] sec_pagetables:0 bounce:0 [ 530.169103][T16085] kernel_misc_reclaimable:0 [ 530.169103][T16085] free:1309611 free_pcp:10381 free_cma:0 [ 530.286838][T16085] Node 0 active_anon:28968kB inactive_anon:44kB active_file:53300kB inactive_file:170436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124060kB dirty:2420kB writeback:16kB shmem:4040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11728kB pagetables:5296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 530.323640][T16085] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 530.380146][T16085] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 530.453908][T16085] lowmem_reserve[]: 0 2485 2485 2485 2485 [ 530.482899][T16085] Node 0 DMA32 free:1280848kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28768kB inactive_anon:44kB active_file:53300kB inactive_file:170436kB unevictable:1536kB writepending:2436kB zspages:0kB present:3129332kB managed:2545108kB mlocked:0kB bounce:0kB free_pcp:39168kB local_pcp:19256kB free_cma:0kB [ 530.611905][T16102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4386'. [ 530.625448][T16085] lowmem_reserve[]: 0 0 0 0 0 [ 530.641980][T16085] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 530.706265][T16085] lowmem_reserve[]: 0 0 0 0 0 [ 530.761848][T16085] Node 1 Normal free:3942436kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 530.854973][T16085] lowmem_reserve[]: 0 0 0 0 0 [ 530.859816][T16085] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 530.871172][T16109] loop0: detected capacity change from 0 to 256 [ 530.880979][T16085] Node 0 DMA32: 4729*4kB (UME) 3538*8kB (UME) 1935*16kB (UME) 843*32kB (UME) 335*64kB (UME) 242*128kB (UME) 212*256kB (UM) 119*512kB (UME) 53*1024kB (UME) 29*2048kB (UM) 218*4096kB (UM) = 1279364kB [ 530.902046][T16085] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 531.001724][T16085] Node 1 Normal: 3*4kB (UME) 3*8kB (ME) 16*16kB (UME) 12*32kB (UME) 10*64kB (UME) 4*128kB (UME) 3*256kB (ME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 960*4096kB (M) = 3942436kB [ 531.119045][T16085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 531.143659][T16085] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 531.164249][ T1152] [ 531.166637][ T1152] ====================================================== [ 531.173677][ T1152] WARNING: possible circular locking dependency detected [ 531.180726][ T1152] syzkaller #0 Not tainted [ 531.185162][ T1152] ------------------------------------------------------ [ 531.192202][ T1152] kworker/u8:10/1152 is trying to acquire lock: [ 531.194828][T16085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 531.198456][ T1152] ffff8880355fc950 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a9/0x280 [ 531.217626][ T1152] [ 531.217626][ T1152] but task is already holding lock: [ 531.221411][T16085] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 531.225009][ T1152] ffff888035866b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 531.225077][ T1152] [ 531.225077][ T1152] which lock already depends on the new lock. [ 531.225077][ T1152] [ 531.225085][ T1152] [ 531.225085][ T1152] the existing dependency chain (in reverse order) is: [ 531.225094][ T1152] [ 531.225094][ T1152] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 531.225123][ T1152] percpu_down_read_internal+0x48/0x1c0 [ 531.225147][ T1152] ext4_writepages+0x205/0x3b0 [ 531.225168][ T1152] do_writepages+0x32e/0x550 [ 531.225192][ T1152] __writeback_single_inode+0x133/0x11a0 [ 531.225216][ T1152] writeback_single_inode+0x4ac/0xdc0 [ 531.225237][ T1152] write_inode_now+0x1c2/0x290 [ 531.225257][ T1152] iput+0x8c1/0xe80 [ 531.225283][ T1152] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 531.225306][ T1152] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 531.225328][ T1152] __ext4_expand_extra_isize+0x30d/0x400 [ 531.225349][ T1152] __ext4_mark_inode_dirty+0x45c/0x730 [ 531.225377][ T1152] ext4_evict_inode+0x7a1/0xeb0 [ 531.340309][ T1152] evict+0x61e/0xb10 [ 531.344745][ T1152] ext4_orphan_cleanup+0xc38/0x1470 [ 531.350510][ T1152] ext4_fill_super+0x59ff/0x6320 [ 531.355983][ T1152] get_tree_bdev_flags+0x431/0x4f0 [ 531.361630][ T1152] vfs_get_tree+0x92/0x2a0 [ 531.366591][ T1152] do_new_mount+0x341/0xd30 [ 531.371635][ T1152] __se_sys_mount+0x31d/0x420 [ 531.376850][ T1152] do_syscall_64+0x14d/0xf80 [ 531.381966][ T1152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.388396][ T1152] [ 531.388396][ T1152] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 531.395968][ T1152] down_read+0x47/0x2e0 [ 531.400664][ T1152] ext4_setattr+0x888/0x1c60 [ 531.405787][ T1152] notify_change+0xc1a/0xf40 [ 531.410916][ T1152] chown_common+0x466/0x6b0 [ 531.415950][ T1152] do_fchownat+0x14c/0x250 [ 531.420895][ T1152] __x64_sys_chown+0x82/0xa0 [ 531.426014][ T1152] do_syscall_64+0x14d/0xf80 [ 531.431142][ T1152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.437563][ T1152] [ 531.437563][ T1152] -> #0 (jbd2_handle){++++}-{0:0}: [ 531.444877][ T1152] __lock_acquire+0x15a5/0x2cf0 [ 531.450268][ T1152] lock_acquire+0xf0/0x2e0 [ 531.455223][ T1152] wait_transaction_locked+0x1c2/0x280 [ 531.461225][ T1152] start_this_handle+0x7dc/0x2290 [ 531.466792][ T1152] jbd2__journal_start+0x2c0/0x5b0 [ 531.472436][ T1152] __ext4_journal_start_sb+0x203/0x620 [ 531.478427][ T1152] ext4_do_writepages+0xf94/0x46e0 [ 531.484069][ T1152] ext4_writepages+0x241/0x3b0 [ 531.489378][ T1152] do_writepages+0x32e/0x550 [ 531.494504][ T1152] __writeback_single_inode+0x133/0x11a0 [ 531.500678][ T1152] writeback_sb_inodes+0x944/0x19a0 [ 531.506418][ T1152] __writeback_inodes_wb+0x111/0x240 [ 531.512240][ T1152] wb_writeback+0x46a/0xb70 [ 531.517286][ T1152] wb_workfn+0xb4c/0xf50 [ 531.522062][ T1152] process_one_work+0x949/0x1650 [ 531.527532][ T1152] worker_thread+0xb46/0x1140 [ 531.532749][ T1152] kthread+0x388/0x470 [ 531.537360][ T1152] ret_from_fork+0x51e/0xb90 [ 531.542495][ T1152] ret_from_fork_asm+0x1a/0x30 [ 531.547807][ T1152] [ 531.547807][ T1152] other info that might help us debug this: [ 531.547807][ T1152] [ 531.558047][ T1152] Chain exists of: [ 531.558047][ T1152] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 531.558047][ T1152] [ 531.571469][ T1152] Possible unsafe locking scenario: [ 531.571469][ T1152] [ 531.578935][ T1152] CPU0 CPU1 [ 531.584303][ T1152] ---- ---- [ 531.589673][ T1152] rlock(&sbi->s_writepages_rwsem); [ 531.595068][ T1152] lock(&ei->xattr_sem); [ 531.601927][ T1152] lock(&sbi->s_writepages_rwsem); [ 531.609657][ T1152] lock(jbd2_handle); [ 531.613736][ T1152] [ 531.613736][ T1152] *** DEADLOCK *** [ 531.613736][ T1152] [ 531.621884][ T1152] 4 locks held by kworker/u8:10/1152: [ 531.627262][ T1152] #0: ffff88801c6ca148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 531.637900][ T1152] #1: ffffc90004f6fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 531.649752][ T1152] #2: ffff8880358900e0 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 531.660318][ T1152] #3: ffff888035866b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 531.670811][ T1152] [ 531.670811][ T1152] stack backtrace: [ 531.676706][ T1152] CPU: 1 UID: 0 PID: 1152 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 531.676726][ T1152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 531.676738][ T1152] Workqueue: writeback wb_workfn (flush-8:0) [ 531.676760][ T1152] Call Trace: [ 531.676766][ T1152] [ 531.676773][ T1152] dump_stack_lvl+0xe8/0x150 [ 531.676796][ T1152] print_circular_bug+0x2e1/0x300 [ 531.676822][ T1152] check_noncircular+0x12e/0x150 [ 531.676848][ T1152] __lock_acquire+0x15a5/0x2cf0 [ 531.676871][ T1152] ? do_raw_spin_lock+0x12b/0x2f0 [ 531.676891][ T1152] lock_acquire+0xf0/0x2e0 [ 531.676910][ T1152] ? wait_transaction_locked+0x1a9/0x280 [ 531.676931][ T1152] ? wait_transaction_locked+0x1a9/0x280 [ 531.676950][ T1152] wait_transaction_locked+0x1c2/0x280 [ 531.676968][ T1152] ? wait_transaction_locked+0x1a9/0x280 [ 531.676987][ T1152] ? __pfx_wait_transaction_locked+0x10/0x10 [ 531.677007][ T1152] ? __pfx_autoremove_wake_function+0x10/0x10 [ 531.677025][ T1152] ? __pfx_stack_trace_save+0x10/0x10 [ 531.677043][ T1152] start_this_handle+0x7dc/0x2290 [ 531.677068][ T1152] ? process_one_work+0x949/0x1650 [ 531.677093][ T1152] ? __pfx_start_this_handle+0x10/0x10 [ 531.677116][ T1152] ? rcu_is_watching+0x15/0xb0 [ 531.677140][ T1152] ? trace_kmem_cache_alloc+0x29/0xf0 [ 531.677168][ T1152] ? jbd2__journal_start+0x1db/0x5b0 [ 531.677188][ T1152] ? kmem_cache_alloc_noprof+0x307/0x650 [ 531.677216][ T1152] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 531.677246][ T1152] jbd2__journal_start+0x2c0/0x5b0 [ 531.677268][ T1152] __ext4_journal_start_sb+0x203/0x620 [ 531.677313][ T1152] ext4_do_writepages+0xf94/0x46e0 [ 531.677368][ T1152] ? __pfx_ext4_do_writepages+0x10/0x10 [ 531.677410][ T1152] ext4_writepages+0x241/0x3b0 [ 531.677436][ T1152] ? __pfx_ext4_writepages+0x10/0x10 [ 531.677468][ T1152] ? do_raw_spin_unlock+0xf5/0x210 [ 531.677488][ T1152] ? __pfx_ext4_writepages+0x10/0x10 [ 531.677512][ T1152] do_writepages+0x32e/0x550 [ 531.677540][ T1152] ? reacquire_held_locks+0x104/0x190 [ 531.677567][ T1152] ? writeback_sb_inodes+0x43d/0x19a0 [ 531.677590][ T1152] __writeback_single_inode+0x133/0x11a0 [ 531.677611][ T1152] ? do_raw_spin_unlock+0xf5/0x210 [ 531.677628][ T1152] writeback_sb_inodes+0x944/0x19a0 [ 531.677657][ T1152] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 531.677675][ T1152] ? lockdep_hardirqs_on+0x7a/0x110 [ 531.677703][ T1152] ? __pfx_down_read_trylock+0x10/0x10 [ 531.677719][ T1152] ? __pfx_move_expired_inodes+0x10/0x10 [ 531.677741][ T1152] __writeback_inodes_wb+0x111/0x240 [ 531.677764][ T1152] wb_writeback+0x46a/0xb70 [ 531.677784][ T1152] ? queue_io+0x271/0x4a0 [ 531.677805][ T1152] ? __pfx_wb_writeback+0x10/0x10 [ 531.677823][ T1152] ? do_raw_spin_lock+0x12b/0x2f0 [ 531.677844][ T1152] wb_workfn+0xb4c/0xf50 [ 531.677865][ T1152] ? __pfx_wb_workfn+0x10/0x10 [ 531.677882][ T1152] ? do_raw_spin_unlock+0xf5/0x210 [ 531.677906][ T1152] ? process_one_work+0x87c/0x1650 [ 531.677925][ T1152] process_one_work+0x949/0x1650 [ 531.677952][ T1152] ? __pfx_process_one_work+0x10/0x10 [ 531.677971][ T1152] ? do_raw_spin_lock+0x12b/0x2f0 [ 531.677992][ T1152] worker_thread+0xb46/0x1140 [ 531.678022][ T1152] kthread+0x388/0x470 [ 531.678036][ T1152] ? __pfx_worker_thread+0x10/0x10 [ 531.678062][ T1152] ? __pfx_kthread+0x10/0x10 [ 531.678077][ T1152] ret_from_fork+0x51e/0xb90 [ 531.678098][ T1152] ? __pfx_ret_from_fork+0x10/0x10 [ 531.678117][ T1152] ? __switch_to+0xc7d/0x1450 [ 531.678136][ T1152] ? __pfx_kthread+0x10/0x10 [ 531.678151][ T1152] ret_from_fork_asm+0x1a/0x30 [ 531.678180][ T1152] [ 531.695413][T16085] 57226 total pagecache pages [ 532.075231][T16085] 0 pages in swap cache [ 532.079501][T16085] Free swap = 124996kB [ 532.084558][T16085] Total swap = 124996kB [ 532.089200][T16085] 2097051 pages RAM [ 532.093336][T16085] 0 pages HighMem/MovableOnly [ 532.098152][T16085] 429159 pages reserved [ 532.103372][T16085] 0 pages cma reserved [ 532.202459][T16116] loop2: detected capacity change from 0 to 32768 [ 532.229932][T16116] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 532.275104][T16116] XFS (loop2): Ending clean mount [ 532.281934][T16116] XFS (loop2): Quotacheck needed: Please wait. [ 532.296771][T16116] XFS (loop2): Quotacheck: Done. [ 532.328858][ T5948] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 532.381026][T16121] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 532.465588][T16121] XFS (loop4): Ending clean mount [ 532.505784][ T5960] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791