last executing test programs: 3m47.11763045s ago: executing program 1 (id=461): syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x2000480, &(0x7f0000000140)={[{@bsdgroups}, {@dax}, {@bsdgroups}, {@qnoenforce}]}, 0x7, 0x9883, &(0x7f00000133c0)="$eJzs3Qnc5XPBuP8zZjD2pUQqZEurNUtK9qWkrJE9e9aQUPalLBUlVBSKpBRCRaSSUHbZ933f9/X/GjPEdJF+/+eJZ67rejVztu997s/5vM/n233meztn5cWXX3gwmHQwshdP/9mZB96wxgoTLb3lSfsPu/zQfZa5e9TV44w8mWzBUacLjTpdeDAYDBl1P0NGXjdsgRNPGmswbDDif/9swvHGH2vCwWD8URdH3c9gnpEnExz14nbPjxYPdLoR327vkX9eaKIRdzLizGprPbvZYDAY/rKvHzGu2f7lgUpbeaElFv+n1UtuY426ecg/b3vhdNjIPxMcMRhMcNjg1Z8fI7Yd+2Vf+99sxPecdIbBije8Ad/7/1wrL7TEUqP5j1iLQ0ddN8+INT76GjQ2+vN8n+U3vnPUFA4ZNXHDXrZe3ojn/f9TKy+0+NKDV1/Hg2UW2+GO51/Ybw5bdDAYtthgMGzxwWDYEm+0R/3P9IY++aqqquoNaaGF5xzxmn2s0X4eGP7iz7X0c+HZz8x+y2AwbJmRrxOHrfXia8GqqqqqqqqqenO20MJzLgKv/yd9rdf/0526+2S9/q+qqqqqqqr6v9NSCy0854jX+qO9/p/qtV7/P3DXsUeO/N3/BecZ+VXPvbEPoqqqqqqqqqpes8WXwtf/073W6/9zT5zu/F7/V1VVVVVVVf3fabk5F19k8LL32Rt19Swv3k6v/0+7/brV36jxVlVVVVVVVdV/3nP3nnL6P9/zfZrBaO/3/kKj/l1gyHFnXHjhGzbQN0dD/vXfQ3Z+o8f0/7cRzsOPmW4w2GzFN3oo9Qb0f+a96ut/pfzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9yrHP9/6f3/TzthnRc/C/49M815xSn//MoXPvt/2DJL3bvLGzT0N6Ix9fj/YKMhg8Eo30k3GgwGyyy03AqzDAaDU66Yc6YZBy/dNu+I2+affOgLHxD/4n8msthkfMc7Tz/ydMQTZfDWl+7juBfuf6nnDx86ZLRBvKzJTj7yyA1Xfnyu0U9nfvXHMdZL5yY66a4X/1uWsUbbaPirfPGL9//iYxndedTYZxkx9lm33nSLWbfabvsPbrTp2hust8F6m803x9yzzzXffHPPPev6G22y3mwj/361OZvuhb8XeT1zNuHoc3bvQi+fs9Ef26vN2XSvPWcv3OMB5wz/+ItzNuw/nLNFXnvOptto1DeabMGxB2u9MDdDBoPJFh17sO2IC7OPOxhMttiobacase1HJx9rMNjvnw90xLlxX3oODtl5xDYrL778wiN3U4PBP0//2at8nv04o0a+4KjThUadLjzy20w6+OdTcdgCJ5401oi5eMV0TDje+GNNOBiMP+riqPsZzDfyZPxTX9zuVT5nfbSBvvA2K3uP/PNCEw0GgwlGnJlm7dP2GDH1/4XPaf9/+v//f/Gad8hLz8cho/6M2mak10JLLPXP7/XCNIyYu6GjrptnhMn/8Efbv6J/Ge90wwfTvcZ4X+N9cV6Inl+bnDLFrv9T74tD453qNcb7Gu/j+6rjXemWg+8ceVf/Y+MdbV+39At/L/h69nWD197XDaU7WO+8d42+r/vkqw/xFbvLF+do3NE2erV93VSHTLvziPtf8LX3dUuPGPvYr9jXjTUYTLbIi/u6ETu+xcce7DfiwhwjLiwx9uDoERfmfOHCeIMzRlz40Dqbb7LuiCuW/NfnwSxDXvELmrDOFh9tnQ152WMfMtrvdw4beTrBES9+htOr7DeHjHpY/3ZfQc/bSV9jvK/x+VM4zyOuW/f44VP8T33+FI13+GuP99U+L/tVx7vvY6fd8D883pfW2dgvm64lX886m+6V62zEQxz6spXxen8OWxe2H3l+qpfubZsd73rpZ4qxR7vff/czxZKvvc4m3Wi0r9vrsMGQ15qbJV7P3LzzX/ZBu7x8bl7vz1uzzDDy9qGvMTfjzrfGzC/OzTj/4dws8Z/OzYKDoa+cm2GDxQaDwYyj9g+Lv565meq15+b1Pm/Gh+1Hnl/vpasW3eeYs16cm9Hn4t/NzeL/6dxM99LzZsYXbpt+rME44wy2XXvrrbecfeTfL16cY+Tfr70GF309cznp/8xcTj3s1ebyn0/VCW85/4h/swb/ZZ/+4v0v+p/O5eCluRxsNPpiqTdr/fufu/zd5e8uf3f5u8vfXf7iXuX4/0vv/3/QpPPvP+ofN8Y+f9op93yjx/sGN0Yf/x/l+4rj/3tOOe35Yw1euu01j8+O3OZNeXx2npEnExz14najHx/kgb768dnD5ptn9//S8dn/p15cq6/j3+Ha/7vL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFvcrx/9le/D2A22df9qFRB0LHvnu3VZd9o8f7BjdGH/8f5fuK4//Lrrrb3WMNXrrtNY//j9zGcfz/pqcX3/fNfPz/xbXa8f/6N+XvDv1Hfw+QGmNr/bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uJe5fj/gi/+HsCxxx68/Yu/D3DpZHuf8kaP9w1uTD3+3+f/e2v/7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hc36vj/YLSPt/xMzwsMjv//3+5V/JfNH7P4L5c/NdZg4PBfPn/Msv5XyB+z+K+YP2bxXyl/zOL/2fwxi//K+WMW/1Xyxyz+n8sfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfw/nz9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+H8hf8ziv3H+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+H8xf8ziv2X+mMV/q/wxi//W+WMW/y/lj1n8t8kfs/h/OX/M4r9t/pjFf7v8MYv/9vljFv+v5I9Z/L+aP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/XfLHLP675o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjF/2v5Yxb/r+ePWfz3yh+z+O+dP2bx3yd/zOK/b/6Yxf8b+WMW/2/mj1n8v5U/ZvHfL3/M4r9//pjF/9v5Yxb/7+SPWfwPyB+z+H83f8zif2D+mMX/oPwxi//B+WMW/+/lj1n8v58/ZvH/Qf6Yxf+Q/DGL/6H5Yxb/H+aPWfx/lD9m8T8sf8zif3j+mMX/iPwxi/+P88cs/j/JH7P4H5k/ZvE/Kn/M4v/T/DGL/9H5Yxb/n+WPWfyPyR+z+P88f8zi/4v8MYv/sfljFv9f5o9Z/H+VP2bxPy5/zOJ/fP6Yxf+E/DGL/6/zxyz+J+aPWfxPyh+z+J+cP2bx/03+mMX/t/ljFv/f5Y9Z/E/JH7P4n5o/ZvH/ff6Yxf+0/DGL/+n5Yxb/P+SPWfzPyB+z+P8xf8zi/6f8MYv/n/PHLP5n5o9Z/P+SP2bxPyt/zOL/1/wxi//Z+WMW/3Pyxyz+5+aPWfz/lj9m8f97/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/H/ljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549J/IcM8scs/kPyxyz+Y+WPWfyH5o9Z/Iflj1n8x84fs/iPkz9m8R83f8ziPzx/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4j9Z/pjFf/L8MYv/W/LHLP5vzR+z+E+RP2bxf1v+mMV/yvwxi/9U+WMW/7fnj1n8p84fs/i/I3/M4v/O/DGL/7vyxyz+0+SPWfynzR+z+E+XP2bxf3f+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+L8nf8ziP0v+mMX/vfljFv/35Y9Z/N+fP2bx/0D+mMX/g/ljFv8P5Y9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv8P549Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjF/yP5Yxb/+fPHLP4fzR+z+H8sf8ziv0D+mMX/4/ljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+S+WPWfw/kT9m8f9k/pjFf+n8MYv/p/LHLP7L5I9Z/D+dP2bx/0z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bx/2z+mMV/5fwxi/8q+WMW/8/lj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+n88fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfy/kD9m8d84f8ziv0n+mMV/U53/eK9rK4v/Zjr/15fFf/P8MYv/FvljFv8v5o9Z/LfMH7P4b5U/ZvHfOn/M4v+l/DGL/zb5Yxb/L+ePWfy3zR+z+G+XP2bx3z5/zOL/lfwxi/9X88cs/jvkj1n8d8wfs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+e+SPWfz3zB+z+H8tf8zi//X8MYv/XvljFv+988cs/vvkj1n8980fs/h/I3/M4v/N/DGL/7fyxyz+++WPWfz3zx+z+H87f8zi/538MYv/AfljFv/v5o9Z/A8c6T/1GzWsN2sW/4Na/5jF/+D8MYv/9/LHLP7fzx+z+P8gf8zif0j+mMX/0Pwxi/8P88cs/j/KH7P4H5Y/ZvE/PH/M4n9E/pjF/8f5Yxb/n+SPWfyPzB+z+B+VP2bx/+kr/W/7r4/rTZrF/+jWP2bx/1n+mMX/mPwxi//P88cs/r/IH7P4H5s/ZvH/Zf6Yxf9X+WMW/+Pyxyz+x+ePWfxPyB+z+P86f8zif2L+mMX/pPwxi//J+WMW/9/kj1n8f5s/ZvH/Xf6Yxf+U/DGL/6n5Yxb/3+ePWfxPyx+z+J+eP2bx/0P+mMX/jPwxi/8f88cs/n/KH7P4//nf+A//3x7XmzSL/5mtf8zi/5f8MYv/WfljFv+/5o9Z/M/OH7P4n5M/ZvE/N39M4v9C+f9rEv8hf88fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+P8jf8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzn+0ho06dfhfkz9mWf/X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz8m8X/hbP7/msV/SP6YxX+s/DGL/9D8MYv/sPwxi//Y+WMW/3Hyxyz+4+aPWfyH549Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8J8sfs/hPnj9m8X9L/pjF/635Yxb/KfLHLP5vyx+z+E+ZP2bxnyp/zOL/9vwxi//U+WMW/3fkj1n835k/ZvF/V/6YxX+a/DGL/7T5Yxb/6fLHLP7vzh+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/9+SPWfxnyR+z+L83f8zi/778MYv/+/PHLP4fyB+z+H8wf8zi/6H8MYv/rPljFv/Z8seGnHng2IPBYIz3nz1/zLL+58gfs/jPmT9m8Z8rf8zi/+H8MYv/3PljFv958scs/vPmj1n858sfs/h/JH/M4j9//pjF/6P5Yxb/j+WPWfwXyB+z+H88f8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOK/ZP6YxX+p/DGL/yfyxyz+n8wfs/gvnT9m8f9U/pjFf5n8MYv/p/PHLP6fyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP6fzR+z+K+cP2bxXyV/zOL/ufwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6Yxf/z+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/xfyxyz+G+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/xfzxyz+W+aPWfy3yh+z+G+dP2bx/1L+mMV/m/wxi/+X88cs/tvmj1n8t8sfs/hvnz9m8f9K/pjF/6v5Yxb/HfLHLP475o9Z/HfKH7P475w/ZvHfJX/M4r9r/pjFf7f8MYv/7vljFv898scs/nvmj1n8v5Y/ZvH/ev6YxX+v/DGL/975Yxb/ffLHLP775o9Z/L+RP2bx/2b+mMX/W/ljFv/98scs/vvnj1n8v50/ZvH/Tv6Yxf+A/DGL/3fzxyz+B+aPWfwPyh+z+B+cP2bx/17+mMX/+/ljFv8f5I9Z/A/JH7P4H5o/ZvH/Yf6Yxf9H+WMW/8Pyxyz+h+ePWfyPyB+z+P84f8zi/5P8MYv/kfljFv+j8scs/j/NH7P4H50/ZvH/Wf6Yxf+Y/DGL/8/zxyz+v8gfs/gfmz9m8f9l/pjF/1f5Yxb/4/LHLP7H549Z/E/IH7P4/zp/zOJ/Yv6Yxf+k/DGL/8n5Yxb/3+SPWfx/mz9m8f9d/pjF/5T8MYv/qfljFv/f549Z/E/LH7P4n54/ZvH/Q/6Yxf+M/DGL/x/zxyz+f8ofs/j/OX/M4n9m/pjF/y/5Yxb/s/LHLP5/zR+z+J+dP2bxPyd/zOJ/bv6Yxf9v+WMW/7/nj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfz/kT9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjEf+ggf8ziPyR/zOI/Vv6YxX9o/pjFf1j+mMV/7Pwxi/84+WMW/3Hzxyz+w/PHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/pPlj1n8J88fs/i/JX/M4v/W/DGL/xT5Yxb/t+WPWfynzB+z+E+VP2bxf3v+mMV/6vwxi/878scs/u/MH7P4vyt/zOI/Tf6YxX/a/DGL/3T5Yxb/d+ePWfynzx+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/3vyxyz+s+SPWfzfmz9m8X9f/pjF//35Yxb/D+SPWfw/mD9m8f9Q/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8f/wa/uP+78+rjdpFv+5W/+YxX+e/DGL/7z5Yxb/+fLHLP4fyR+z+M+fP2bx/2j+mMX/Y/ljFv8F8scs/h/PH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/gvmT9m8V8qf8zi/4n8MYv/J/PHLP5L549Z/D+VP2bxXyZ/zOL/6fwxi/9n8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi/9n88cs/ivnj1n8V8kfs/h/Ln/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8f98/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/hvmD9m8d8of8zi/4X8MYv/xvljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8zi/8X8MYv/lvljFv+t8scs/lvnj1n8v5Q/ZvHfJn/M4v/l/DGL/7b5Yxb/7fLHLP7b549Z/L+SP2bx/2r+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+O+aP2bx3y1/zOK/e/6YxX+P/DGL/54a/0n/o60t/l/T+P9nWfy/nj9m8d8rf8ziv3f+mMV/n/wxi/+++WMW/2/kj1n8v5k/ZvH/Vv6YxX+//DGL//75Yxb/b+ePWfy/kz9m8T8gf8zi/938MYv/gfljFv+D8scs/gfnj1n8v5c/ZvH/fv6Yxf8H+WMW/0Pyxyz+h+aPWfx/mD9m8f9R/pjF/7D8MYv/4fljFv8j8scs/j/OH7P4/yR/zOJ/ZP6Yxf+o/DGL/0/zxyz+R+ePWfx/lj9m8T8mf8zi//P8MYv/L/LHLP7H5o9Z/H+ZPzbG+w9/4ezQX+WPjfH+Ixt6XP6Yxf/4/DGL/wn5Yxb/X+ePWfxPzB+z+J+UP2bxPzl/zOL/m/wxi/9v88cs/r/LH7P4n5I/ZvE/NX/M4v/7/DGL/2n5Yxb/0/PHLP5/yB+z+J+RP2bx/2P+mMX/T/ljFv8/549Z/M/MH7P4/yV/zOJ/Vv6Yxf+v+WMW/7Pzxyz+5+SPWfzPzR+z+P8tf8zi//f8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/8/8scs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH5P4Dxvkj1n8h+SPWfzHyh+z+A/NH7P4D8sfs/iPnT9m8R8nf8ziP27+mMV/eP6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf7L8MYv/5PljFv+35I+96P/0Cc+/0Jjq/9b8Mcv6nyJ/zOL/tvwxi/+U+WMW/6nyxyz+b88fs/hPnT9m8X9H/pjF/535Yxb/d+WPWfynyR+z+E+bP2bxny5/zOL/7vwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxf0/+mMV/lvwxi/9788cs/u/LH7P4vz9/zOL/gfwxi/8H88cs/h/KH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/h/OH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv/R/LHLP7z549Z/D+aP2bx/1j+mMV/gfwxi//H88cs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+H8if8zi/8nX8Dc/Lyz+S8udXy2L/6fyxyz+y+SPWfw/nT9m8f9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/ivlD9m8f9s/pjFf+X8MYv/KvljFv/P5Y9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/p/PH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8N88cs/hvlj1n8v5A/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkjw0588Bhg8FgjPf/Yv6YZf1vmT9m8d8qf8ziv3X+mMX/S/ljFv9t8scs/l/OH7P4b5s/ZvHfLn/M4r99/pjF/yv5Yxb/r+aPWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/PfIH7P475k/ZvH/Wv6Yxf/r+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx/0b+mMX/m/ljFv9v5Y9Z/PfLH7P4758/ZvH/dv6Yxf87+WMW/wPyxyz+380fs/gfmD9m8T8of8zif3D+mMX/e/ljFv/v549Z/H+QP2bxPyR/zOJ/aP6Yxf+H+WMW/x/lj1n8D8sfs/gfnj9m8T8if8zi/+P8MYv/T/LHLP5H5o9Z/I/KH7P4/zR/zOJ/dP6Yxf9n+WMW/2Pyxyz+P88fs/j/In/M4n9s/pjF/5f5Yxb/X+WPWfyPyx+z+B+fP2bxPyF/zOL/6/wxi/+J+WMW/5Pyxyz+J+ePWfx/kz9m8f9t/pjF/3f5Yxb/U/LHLP6n5o9Z/H+fP2bxPy1/zOJ/ev6Yxf8P+WMW/zPyxyz+f8wfs/j/KX/M4v/n/DGL/5n5Yxb/v+SPWfzPyh+z+P81f8zif3b+mMX/nPwxi/+5+WMW/7/lj1n8/54/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8f9H/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5YxL/sQf5Yxb/IfljFv+x8scs/kPzxyz+w/LHLP5j549Z/MfJH7P4j5s/ZvEfnj9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOI/ef6Yxf8t+WMW/7fmj1n8p8gfs/i/LX/M4j9l/pjFf6r8MYv/2/PHLP5T549Z/N+RP2bxf2f+mMX/XfljFv9p8scs/tPmj1n8p8sfs/i/O3/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n835M/ZvGfJX/M4v/e/DGL//vyxyz+788fs/h/IH/M4v/B/DGL/4fyxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/4fzxyz+c+ePWfznyR+z+M+bP2bxny9/zOL/kfwxi//8+WMW/4/mj1n8P5Y/ZvFfIH/M4v/x/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/p/IH7P4fzJ/zOK/dP6Yxf9T+WMW/2Xyxyz+n84fs/h/Jn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/h/Nn/M4r9y/pjFf5X8MYv/5/LHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv/P549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv+N8scs/l/IH7P4b5w/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/l/MH7P4b5k/ZvHfKn/M4r91/pjF/0v5Yxb/bfLHLP5fzh+z+G+bP2bx3y5/zOK/ff6Yxf8r+WMW/6/mj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx/1r+mMX/6/ljFv+98scs/nvnj1n898kfs/jvmz9m8f9G/pjF/5v5Yxb/b+WPWfz3yx+z+O+fP2bx/3b+mMX/O/ljFv8D8scs/t/NH7P4H5g/ZvE/KH/M4n9w/pjF/3v5Yxb/7+ePWfx/kD9m8T8kf8zif2j+mMX/h/ljFv8f5Y9Z/A/LH7P4H54/ZvE/In/M4v/j/DGL/0/yx17mP85gDPY/Mn/Msv6Pyh+z+P80f8zif3T+mMX/Z/ljFv9j8scs/j/PH7P4/yJ/zOJ/bP6Yxf+X+WMW/1/lj1n8j8sfs/gfnz9m8T8hf8zi/+v8MYv/ifljFv+T8scs/ifnj1n8f5M/ZvH/bf6Yxf93+WMW/1Pyxyz+p+aPWfx/nz9m8T8tf8zif3r+mMX/D/ljFv8z8scs/n/MH7P4/yl/zOL/5/wxi/+Z+WMW/7/kj1n8z8ofs/j/NX/M4n92/pjF/5z8MYv/ufljFv+/5Y9Z/P+eP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvH/R/6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMS/3EG+WMW/yH5Yxb/sfLHLP5D88cs/sPyxyz+Y+ePWfzHyR+z+I+bP2bxH54/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8Z8sf8ziP3n+mMX/LfljFv+35o9Z/KfIH7P4vy1/zOI/Zf6YxX+q/DGL/9tfh/+w/81xvUmz+E/d+scs/u/IH7P4vzN/zOL/rvwxi/80+WMW/2nzxyz+0+WPWfzfnT9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+78kfs/jPkj9m8X9v/pjF/335Yxb/9+ePWfw/kD9m8f9g/pjF/0P5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/8P5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvH/SP6YxX/+/DGL/0fzxyz+H8sfs/gvkD9m8f94/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/0/kj1n8P5k/ZvFfOn/M4v+p/DGL/zL5Yxb/T+ePWfw/kz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfw/mz9m8V85f8ziv0r+mMX/c/ljFv9V88fGUP8ho1mPs1r+2Bjq/0IvX/+r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjF//P5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/F/LHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/F/PHLP5b5o9Z/LfKH7P4b50/ZvH/Uv6YxX+b/DGL/5fzxyz+2+aPWfy3yx+z+G+fP2bx/0r+mMX/q/ljFv8d8scs/jvmj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfy/lj9m8f96/pjFf6/8MYv/3vljFv998scs/vvmj1n8v5E/ZvH/Zv6Yxf9b+WMW//3yxyz+++ePWfy/nT9m8f9O/pjF/4D8MYv/d/PHLP4H5o9Z/A/KH7P4H5w/ZvH/Xv6Yxf/7+WMW/x/kj1n8D8kfs/gfmj9m8f9h/pjF/0f5Yxb/w/LHLP6H549Z/I/IH7P4/zh/zOL/k/wxi/+R+WMW/6Pyxyz+P80fs/gfnT9m8f9Z/pjF/5j8MYv/z/PHLP6/yB+z+B+bP2bx/2X+mMX/V/ljFv/j8scs/sfnj1n8T8gfs/j/On/M4n9i/pjF/6T8MYv/yfljFv/f5I9Z/H/r89/p9Wxk8f+dz/91ZfE/JX/M4n9q/pjF//dO//v/3QYW/9Oc/v82i//p+WMW/z/kj1n8z8gfs/j/MX/M4v+n/DGL/5/zxyz+Z+aPWfz/kj9m8T8rf8zi/9f8MYv/2S7/uW95nRta/M9x+b/uLP7n5o9Z/P+WP2bx/3v+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf8f+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP7YC/6DwRjv/0j+g/HgOsv6fzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYn/uIP8MYv/kPwxi/9Y+WMW/6H5Yxb/YfljFv+x88cs/uPkj1n8x80fs/gPzx+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4T5b/qIa/4pLFf/L8MYv/W/LHLP5vzR+z+E+RP2bxf1v+mMV/yvwxi/9U+WMW/7fnj1n8p84fs/i/I3/M4v/O/DGL/7vyxyz+0+SPWfynzR+z+E+XP2bxf3f+mMV/+vwxi/8M+WMW/xnzx8ZE/8Ezz7/Qy/1nyh8bE/1p/c+cP2bxf0/+mMV/lvwxi/9788cs/u/LH7P4vz9/zOL/gfwxi/8H88cs/h/KH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/h/OH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv/R/LHLP7z549Z/D+aP2bx/1j+mMV/gfwxi//H88cs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+H8if8zi/8n8MYv/0vljFv9P5Y9Z/JfJH7P4fzp/zOL/mfwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOL/2fwxi//K+WMW/1Xyxyz+n8sfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfw/nz9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+H8hf8ziv3H+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+H8xf8ziv2X+mMV/q/wxi//W+WMW/y/lj1n8t8kfs/h/OX/M4r9t/pjFf7v8MYv/9vljFv+v5I9Z/L+aP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/XfLHLP675o9Z/HfLH7P4754/ZvHfA/17Rlj890wbs/h/LX/M4v/1/DGL/175Yxb/vfPHLP775I9Z/PfNH7P4fyN/zOL/zfwxi/+38scs/vsZ/cf995tY/Pc3+r+OLP7fzh+z+H8nf8zif0D+mMX/u/ljFv8D88cs/gflj1n8D84fs/h/L3/M4v/9/DGL/w/yxyz+h+SPWfwPzR+z+P8wf8zi/6P8MYv/YfljFv/D88cs/kfkj1n8f5w/ZvH/Sf6Yxf/I/DGL/1H5Yxb/n+aPWfyPzh+z+P8sf8zif0z+mMX/5/ljFv9f5I9Z/I/NH7P4/zJ/zOL/q/wxi/9x+WMW/+Pzxyz+J+SPWfx/nT9m8T8xf8zif1L+mMX/5Pwxi/9v8scs/r/NH7P4/y5/zOJ/Sv6Yxf/U/DGL/+/zxyz+p+WPWfxPzx+z+P8hf8zif0b+mMX/j/ljFv8/5Y9Z/P+cP2bxPzN/zOL/l/wxi/9Z+WMW/7/mj1n8z84fs/ifkz9m8T83f8zi/7f8MYv/3/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH9szPV/+OXc416UPzbm+r9y/V+cP2bxvyR/zOJ/af6Yxf8f+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5nX4b/iOf+bA3tzZvF/tvWPWfyfyx+z+D+fPybxHz7IH7P4D8kfs/iPlT9m8R+aP2bxH5Y/ZvEfO3/M4j9O/pjFf9z8MYv/8Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/yfPHLP5vyR+z+L81f8ziP0X+mMX/bfljFv8p88cs/lPlj1n8354/ZvGfOn/M4v+O/DGL/zvzxyz+78ofs/hPkz9m8Z82f8ziP13+mMX/3fljFv/p88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8zi/578MYv/LPljFv/35o9Z/N+XP2bxf3/+mMX/A/ljFv8P5o9Z/D+UP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/D+cP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/j+SPWfznzx+z+H80f8zi/7H8MYv/AvljFv+P549Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8f9E/pjF/5P5Yxb/pfPHLP6fyh+z+C+TP2bx/3T+mMX/M/ljFv9l88cs/svlj1n8l//P/Hf+Hx/XmzSL/wqtf8ziv2L+mMV/pfwxi/9n88cs/ivnj1n8V8kfs/h/Ln/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8f98/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/hvmD9m8d8of8zi/4X8MYv/xvljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8zi/8X8MYv/lvljFv+t8scs/lvnj1n8v5Q/ZvHfJn/M4v/l/DGL/7b5Yxb/7fLHLP7b549Z/L+SP2bx/2r+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+O+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/r+WPWfy/nj9m8d8rf8ziv3f+mMV/n/wxi/+++WMW/2/kj1n8v5k/ZvH/Vv6YxX+//DGL//75Yxb/b+ePWfy/kz9m8T8gf8zi/938MYv/gfljFv+D8scs/gfnj1n8v5c/ZvH/fv6Yxf8H+WMW/0Pyxyz+h+aPWfx/mD9m8f9R/pjF/7D8MYv/4fljFv8j8scs/j/OH7P4/yR/zOJ/ZP6Yxf+o/DGL/0/zxyz+R+ePWfx/ZvFf56H/aHOL/zEW//8wi//P88cs/r/IH7P4H5s/ZvH/Zf6Yxf9X+WMW/+Pyxyz+x+ePWfxPyB+z+P86f8zif2L+mMX/pPwxi//J+WMW/9/kj1n8f5s/ZvH/Xf6Yxf+U/DGL/6n5Yxb/3+ePWfxPyx+z+J+eP2bx/0P+mMX/jPwxi/8f88cs/n/KH7P4/zl/zOJ/Zv6Yxf8v+WMW/7Pyxyz+f80fs/ifnT9m8T8nf8zif27+mMX/b/ljFv+/549Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8/5E/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6YxH+8Qf6YxX9I/pjFf6z8MYv/0Pwxi/+w/DGL/9j5Yxb/cfLHLP7j5o9Z/Ifnj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+E+eP2bxf0v+mMX/rfljFv8p8scs/m/LH7P4T5k/ZvGfKn/M4v/2/DGL/9T5Yxb/d+SPWfzfmT9m8X9X/pjFf5r8MYv/tPljFv/p8scs/u/OH7P4T58/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv/35I9Z/GfJH7P4vzd/zOL/vvwxi//788cs/h/IH7P4fzB/zOL/ofwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+M+ZP/aC/7SDwWAM958rf8yy/j+cP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/j+SPWfznzx+z+H80f8zi/7H8MYv/AvljFv+P549Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8f9E/pjF/5P5Yxb/pfPHLP6fyh+z+C+TP2bx/3T+mMX/M/ljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMX/s/ljFv+V88cs/qvkj1n8P5c/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/h/Pn/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8f9C/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8f9i/pjFf8v8MYv/VvljFv+t88cs/l/KH7P4b5M/ZvH/cv6YxX/b/DGL/3b5Yxb/7fPHLP5fyR+z+H81f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/9fyxyz+X88fs/jvlT825MwDHxt1doz23zt/zLL+98kfs/jvmz9m8f9G/pjF/5v5Yxb/b+WPWfz3yx+z+O+fP2bx/3b+mMX/O/ljFv8D8scs/t/NH7P4H5g/ZvE/KH/M4n9w/pjF/3v5Yxb/7+ePWfx/kD9m8T8kf8zif2j+mMX/h/ljFv8f5Y9Z/A/LH7P4H54/ZvE/In/M4v/j/DGL/0/yxyz+R+aPWfyPyh+z+P80f8zif3T+mMX/Z/ljFv9j8scs/j/PH7P4/yJ/zOJ/bP6Yxf+X+WMW/1/lj1n8j8sfs/gfnz9m8T8hf8zi/+v8MYv/ifljFv+T8scs/ifnj1n8f5M/ZvH/bf6Yxf93+WMW/1Pyxyz+p+aPWfx/nz9m8T8tf8zif3r+mMX/D/ljFv8z8scs/n/MH7P4/yl/zOL/5/wxi/+Z+WMW/7/kj1n8z8ofs/j/NX/M4n92/pjF/5z8MYv/ufljFv+/5Y9Z/P+eP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvH/R/6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMS//EH+WMW/yH5Yxb/sfLHLP5D88cs/sPyxyz+Y+ePWfzHyR+z+I+bP2bxH54/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8Z8sf8ziP3n+mMX/LfljFv+35o9Z/KfIH7P4vy1/zOI/Zf6YxX+q/DGL/9vzxyz+U+ePWfzfkT9m8X9n/pjF/135Yxb/afLHLP7T5o9Z/KfLH7P4vzt/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/N+TP2bxnyV/zOL/3vwxi//78scs/u/PH7P4fyB/zOL/wfwxi/+H8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi/+H88cs/nPnj1n858kfs/jPmz9m8Z8vf8zi/5H8MYv//PljFv+P5o9Z/D+WP2bxXyB/zOL/8fwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP6fyB+z+H8yf8ziv3T+mMX/U/ljFv9l8scs/p/OH7P4fyZ/zOK/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4fzZ/zOK/cv6YxX+V/DGL/+fyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/z+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP5fyB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5fzB+z+G+ZP2bx3yp/zOK/df6Yxf9L+WMW/23yxyz+X84fs/hvmz9m8d8uf8ziv33+mMX/K/ljFv+v5o9Z/HfIH7P475g/ZvHfKX/M4r9z/pjFf5f8MYv/rvljFv/d8sfGPP+hL519uf/u+WNjnj+v/z3yxyz+e+aPWfy/lj9m8f96/pjFf6/8MYv/3vljFv998scs/vvmj1n8v5E/ZvH/Zv6Yxf9b+WMW//3yxyz+++ePWfy/nT9m8f9O/pjF/4D8MYv/d/PHLP4H5o9Z/A/KH7P4H5w/ZvH/Xv6Yxf/7+WMW/x/kj1n8D8kfs/gfmj9m8f9h/pjF/0f5Yxb/w/LHLP6H549Z/I/IH7P4/zh/zOL/k/wxi/+R+WMW/6Pyxyz+P80fs/gfnT9m8f9Z/pjF/5j8MYv/z/PHLP6/yB+z+B+bP2bx/2X+mMX/V/ljFv/j8scs/sfnj1n8T8gfs/j/On/M4n9i/pjF/6T8MYv/yfljFv/f5I9Z/H+bP2bx/13+mMX/lPwxi/+p+WMW/9/nj1n8T8sfs/ifnj9m8f9D/pjF/4z8MYv/H/PHLP5/yh+z+P85f8zif2b+mMX/L/ljFv+z8scs/n/NH7P4n50/ZvE/J3/M4n9u/pjF/2/5Yxb/v+ePWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/P+RP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8l/MBj6r1dZ/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Hv3H+e+N602axH+CQesfs/gPyR+z+I+VP2bxH5o/ZvEflj9m8R87f8ziP07+mMV/3Pwxi//w/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/J88cs/m/JH7P4vzV/zOI/Rf6Yxf9t+WMW/ynzxyz+U+WPWfzfnj9m8Z86f8zi/478MYv/O/PHLP7vyh+z+E+TP2bxnzZ/zOI/Xf6Yxf/d+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOL/nvwxi/8s+WMW//fmj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n8P5Q/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8P5w/ZvGfO3/M4j9P/pjFf978MYv/fPljFv+P5I9Z/OfPH7P4fzR/zOL/sfwxi/8C+WMW/4/nj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bx/0T+mMX/k/ljFv+l88cs/p/KH7P4L5M/ZvH/dP6Yxf8z+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOK/Uv6Yxf+z+WMW/5Xzxyz+q+SPWfw/lz9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+H8+f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx/0L+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx/2L+mMV/y/wxi/9W+WMW/63zxyz+X8ofs/hvkz9m8f9y/pjFf9v8MYv/dvljY67/Jc+/3H/7/LEx1/+V6/8r+WMW/6/mj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx/1r+mMX/6/ljFv+98scs/nvnj1n898kfs/jvmz9m8f9G/pjF/5v5Yxb/b+WPWfz3yx+z+O+fP2bx/3b+mMX/O/ljFv8D8scs/t/NH7P4H5g/ZvE/KH/M4n9w/pjF/3v5Yxb/7+ePWfx/kD9m8T8kf8zif2j+mMX/h/ljFv8f5Y9Z/A/LH7P4H54/ZvE/In/M4v/j/DGL/0/yxyz+R+aPWfyPyh+z+P80f8zif3T+mMX/Z/ljFv9j8scs/j/PH7P4/yJ/zOJ/bP6Yxf+X+WMW/1/lj1n8j8sfs/gfnz9m8T8hf8zi/+v8MYv/ifljFv+T8scs/ifnj1n8f5M/ZvH/bf6Yxf93+WMW/1Pyxyz+p+aPveg/GD4YjMn+v88fs6z/0/LHLP6n549Z/P+QP2bxPyN/zOL/x/wxi/+f8scs/n/OH7P4n5k/ZvH/S/6Yxf+s/DGL/1/zxyz+Z+ePWfzPyR+z+J+bP2bx/1v+mMX/7/ljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/3/8q39PB5H/ZYFjFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/bKT/YDDYecz2vyV/zLL+b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f0ziP+Egf8ziPyR/bEz2f5n3hGPlj43J/i9f/0Pzxyz+w/LHLP5jv4r/5VcMXfO/NbQ3Yxb/cVr/mMV/3Pwxi//w/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5T/v7SzyH/i/DGL/yT5Yxb/SfPHLP6T5Y9Z/CfPH7P4vyV/zOL/1vwxi/8U+WMW/7flj1n8p8wfs/hPlT9m8X97/pjFf+r8MYv/O/LHLP7vzB+z+L8rf8ziP03+mMV/2vwxi/90+WMW/3fnj1n8p88fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/978scs/rPkj1n835s/ZvF/X/6Yxf/9+WMW/w/kj1n8P5g/ZvH/UP6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvH/cP6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/D+SP2bxnz9/zOL/0fwxi//H8scs/gvkj1n8P54/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8ziv1T+mMX/E/ljFv9P5o9Z/JfOH7P4fyp/zOK/TP6Yxf/T+WMW/8/kj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/8/mj1n8V84fs/ivkj9m8f9c/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8zi//n8MYv/OvljFv91jf6v4wFb/Ncz+r+OLP7r549Z/DfIH7P4b5g/ZvHfKH/M4v+F/DGL/8b5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4v/F/DGL/5b5Yxb/rfLHLP5b549Z/L+UP2bx3yZ/zOL/5fwxi/+2+WMW/+3yxyz+2+ePWfy/kj9m8f9q/pjFf4f8MYv/jvljFv+d8scs/jvnj1n8d8kfs/jvmj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/6/lj1n8v54/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv9v5I9Z/L+ZP2bx/1b+mMV/v/wxi//++WMW/2/nj1n8v5M/ZvE/IH/M4v/d/DGL/4H5Yxb/g/LHLP4H549Z/L+XP2bx/37+mMX/B/ljFv9D8scs/ofmj1n8f5g/ZvH/Uf6Yxf+w/DGL/+H5Yxb/I/LHLP4/zh+z+P8kf8zif2T+mMX/qPwxi/9P88cs/kfnj1n8f5Y/ZvE/Jn/M4v/z/DGL/y/yxyz+x+aPWfx/mT9m8f9V/pjF/7j8MYv/8fljFv8T8scs/r/OH7P4n5g/ZvE/KX/M4n9y/pjF/zf5Yxb/3+aPWfx/lz9m8T8lf8zif2r+mMX/9/ljFv/T8scs/qfnj1n8/5A/ZvE/I3/M4v/H/DGL/5/yxyz+f84fs/ifmT9m8f9L/pjF/6z8MYv/X/PHLP5n549Z/M/JH7P4n5s/ZvH/W/6Yxf/v+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/f+SPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz8m8Z9okD9m8R+SP2bxHyt/zOI/NH/M4j8sf8ziP3b+mMV/nPwxi/+4+WMW/+H5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/J8scs/pPnj1n835I/ZvF/a/6YxX+K/DGL/9vyxyz+U+aPWfynyh+z+L89f8ziP3X+mMX/HfljFv935o9Z/N+VP2bxnyZ/zOI/bf6YxX+6/DGL/7vzxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6Yxf89+WMW/1nyxyz+780fs/i/L3/M4v/+/DGL/wfyxyz+H8wfs/h/KH/M4j9r/pjFf7b8MYv/7PljFv858scs/nPmj1n858ofs/h/OH/M4j93/pjFf578MYv/vPljFv/58scs/h/JH7P4z58/ZvH/aP6Yxf9j+WMW/wXyxyz+H88fs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOL/ifwxi/8n88cs/kvnj1n8P5U/ZvFfJn/M4v/p/DGL/2fyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/2fzxyz+K+ePWfxXyR+z+H8uf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bx/3z+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOL/hfwxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOL/xfwxi/+W+WMW/63yxyz+W+ePWfy/lD9m8d8mf8zi/+X8MYv/tvljFv/t8scs/ttb/Ye/9s0W/69Y/f9NFv+v5o9Z/HfIH7P475g/ZvHfKX/M4r9z/pjFf5f8MYv/rvljFv/d8scs/rvnj1n898gfs/jvmT9m8f9a/pjF/+v5Yxb/vfLHLP57549Z/PfJH7P475s/ZvH/Rv6Yxf+b+WMW/2/lj1n898sfs/jvnz82pvoPH83/2/ljY6r/YDT/7+SPWfwPyB+z+H83f8zif2D+mMX/oPwxi//B+WMW/+/lj1n8v58/ZvH/Qf6Yxf+Q/DGL/6H5Yxb/H+aPWfx/lD9m8T8sf8zif3j+mMX/iPwxi/+P88cs/j/JH7P4H5k/ZvE/Kn/M4v/T/DGL/9H5Yxb/n+WPWfyPyR+z+P88f8zi/4v8MYv/sfljFv9f5o9Z/H+VP2bxPy5/zOJ/fP6Yxf+E/DGL/6/zxyz+J+aPWfxPyh+z+J+cP2bx/03+mMX/t/ljFv/f5Y9Z/E/JH7P4n5o/ZvH/vdJ/+L/dwuJ/mtL/32fxPz1/zOL/h/wxi/8Z+WMW/z/mj1n8/5Q/ZvH/c/6Yxf/M/DGL/1/yxyz+Z+WPWfz/mj9m8T87f8zif07+mMX/3Pwxi//f8scs/n/PH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/j/I3/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535f9C04122eJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePSfwnHuSPWfyH5I9Z/MfKH7P4D80fs/gPyx+z+I+dP2bxHyd/zOI/bv6YxX94/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi//k+WMW/7fkj1n835o/ZvGfIn/M4v+2/DGL/5T5Yxb/qfLHLP5vzx+z+E+dP2bxf0f+mMX/nfljFv935Y9Z/KfJH7P4T5s/ZvGfLn/M4v/u/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvF/T/6YxX+WV/o/P/S/PrA3Zxb/97b+MYv/+/LHLP7vzx+z+H8gf8zi/8H8MYv/h/LHLP6z5o9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/h/PHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4v+R/DGL//z5Yxb/j77o35PgFVn8PxY9ZvFfIH/M4v/x/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/p/IH7P4fzJ/zOK/dP6Yxf9T+WMW/2Xyxyz+n84fs/h/Jn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/h/Nn/M4r9y/pjFf5X8MYv/5/LHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv/P549Z/NfJH7P4r5s/ZvFfL3/M4r9+/tiQMw9cZZKRZ8do/w3yxyzrf8P8MYv/RvljFv8v5I9Z/DfOH7P4b5I/ZvHfNH/M4r+Z3n8nvNbiv7nen7P4b5E/ZvH/Yv6YxX/L/DGL/1b5Yxb/rfPHLP5fyh+z+G+TP2bx/3L+mMV/2/wxi/92+WMW/+3zxyz+X8kfs/h/NX/M4r9D/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8d80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi//X8scs/l/PH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/N/LHLP7fzB+z+H8rf8ziv1/+mMV///wxi/+388cs/t/JH7P4H5A/ZvH/bv6Yxf/A/DGL/0H5Yxb/g/PHLP7fyx+z+H8/f8zi/4P8MYv/ISL/Yf/Bthb/Q0X+/0kW/x/mj1n8f5Q/ZvE/LH/M4n94/pjF/4j8MYv/j/PHLP4/yR+z+B+ZP2bxPyp/zOL/0/wxi//R+WMW/5/lj1n8j8kfs/j/PH/M4v+L/DGL/7H5Yxb/X+aPWfx/lT9m8T8uf8zif3z+mMX/hPwxi/+v88cs/ifmj1n8T8ofs/ifnD9m8f9N/pjF/7f5Yxb/3+WPWfxPyR+z+J+aP2bx/33+mMX/tPwxi//p+WMW/z/kj1n8z8gfs/j/MX/M4v+n/DGL/5/zxyz+Z+aPWfz/kj9m8T8rf8zi/9f8MYv/2fljFv9z8scs/ufmj1n8/5Y/ZvH/e/6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjEf8hgsHP+kMR/4sta/5jF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//5/9X/qvzquN2kW/wda/5jF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/TOI/ySB/zOI/JH/M4j9W/pjFf2j+mMV/WP6YxX/s/DGL/zj5Yxb/cfPHLP7D88cs/uPlj/1/7Nx9vNZ1fcfxi3tCSb+2qUsbDo25NiOR0aiFqCgeb06ZaOY96hFIELmRBFNxo5U6Nl3qZsmmlo45W7XU6ea6W9mwrNkasbXKKa6FMeZgoTljjwPnEOfs41nnx34/jc/z+Qec6zp+rpDX4+118eDxKEv/EfqHsvTfTf9Qlv676x/K0n+k/qEs/V+pfyhL/z30D2Xpv6f+oSz9i/6hLP330j+Upf+r9A9l6f8z+oey9P9Z/UNZ+u+tfyhL/330D2Xpv6/+oSz9f07/UJb+r9Y/lKX/fvqHsvTfX/9Qlv6v0T+Upf/P6x/K0n+U/qEs/Q/QP5Sl/y/oH8rSf7T+oSz9D9Q/lKX/QfqHsvR/rf6hLP3H6B/K0v8X9Q9l6X+w/qEs/X9J/1CW/q/TP5Sl/y/rH8rS/1f0D2Xpf4j+oSz9X69/KEv/sfqHsvR/g/6hLP0P1T+Upf84/UNZ+h+mfyhL//H6h7L0/1X9Q1n6T9A/lKX/G/UPZen/a/qHsvSfqH8oS/836R/K0v/N+oey9P91/UNZ+r9F/1CW/pP0D2Xpf7j+oSz9J+sfytL/CP1DWfofqX8oS/+j9A9l6T9F/1CW/kfrH8rS/xj9Q1n6T9U/lKX/sfqHsvRv0z+Upf9x+oey9D9e/1CW/ifoH8rS/0T9Q1n6t+sfytL/rfqHsvR/m/6hLP1P0j+Upf/b9Q9l6X+y/qEs/afpH8rS/xT9Q1n6n6p/KEv/d+gfytL/NP1DWfq/U/9Qlv6n6x/K0v8M/UNZ+p+pfyhL/7P0D2Xpf7b+oSz9z9E/lKX/ufqHsvSfrn8oS//z9A9l6X++/qEs/S/QP5Slf4f+oSz9L9Q/lKX/DP1DWfrP1D+Upf8s/UNZ+r9L/1CW/hfpH8rSf7b+oSz95+gfytL/Yv1DWfrP1T+Upf8l+oey9J+nfyhL//n6h7L0X6B/KEv/hfqHsvS/VP9Qlv6L9A9l6f9u/UNZ+l+mfyhL/8X6h7L0X6J/KEv/y/UPZen/Hv1DWfpfoX8oS/8r9Q9l6X+V/qEs/ZfqH8rS/2r9Q1n6/4b+oSz9f1P/UJb+y/QPZen/Xv1DWfr/lv6hLP3fp38oS//36x/K0v8a/UNZ+l+rfyhL/+v0D2Xp/9v6h7L0X65/KEv/39E/lKX/7+ofytL/ev1DWfrfoH8oS//f0z+Upf8H9A9l6X+j/qEs/W/SP5Sl/836h7L0/339Q1n6/4H+oSz9b9E/lKX/B/UPZen/If1DWfrfqn8oS/8V+oey9P9D/UNZ+v+R/qEs/W/TP5Sl/+36h7L0v0P/UJb+H9Y/lKX/R/QPZel/Z+/+oxr+db1MZel/l/2HsvT/Y/1DWfqv1D+Upf+f6B/K0v9u/UNZ+v+p/qFdsf+gri937H+P/qFdsX+0/4/qH8rS/8/0D2Xp/zH9Q1n6f1z/UJb+n9A/lKX/n+sfytL/k/qHsvS/V/9Qlv736R/K0v9+/UNZ+v+F/qEs/R/QP5Sl/4P6h7L0/0v9Q1n6/5X+oSz9H9I/lKX/X+sfytL/U/qHsvT/tP6hLP0/o38oS//P6h/K0v9z+oey9P8b/UNZ+n9e/1CW/l/QP5Sl/8P6h7L0/6L+oSz9/1b/UJb+q/QPZen/iP6hLP2/pH8oS/8v6x/K0v9R/UNZ+n9F/1CW/l/VP5Sl/9/pH8rS/zH9Q1n6f03/UJb+f69/KEv/r+sfytL/H/QPZem/Wv9Qlv7f0D+Upf8a/UNZ+v+j/qEs/f9J/1CW/t/UP5Sl/z/rH8rS/1v6h7L0/7b+oSz9v6N/KEv/x/UPZen/L/qHsvR/Qv9Qlv5P6h/K0n+t/qEs/Z/SP5Sl/7/qH8rS/7v6h7L0/zf9Q1n6f0//UJb+6/QPZen/tP6hLP2/r38oS//1+oey9P93/UNZ+m/QP5Sl/3/oH8rS/xn9Q1n6/6f+oSz9N+ofytJ/k/6hLP3/S/9Qlv4/0D+Upf9m/UNZ+j+rfyhL/+f0D2Xp/0P9Q1n6P69/KEv//9Y/lKX/C/qHsvT/kf6hLP236B9K0n/Plv6hLP0H6B/K0n+g/qEs/QfpH8rSf7D+oSz9h+gfytJ/qP6hLP2H6R/K0n+4/qEs/V+hfyhL/xH6h7L0303/UJb+u+sfytJ/pP6hLP1fqX8oS/899A/tcv0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABebhYsXnLR9NmzO+b7whe+8MX2L17q/zIBAAD/3378of+l/pUAAAAAAAAAAAAAAAAAAABAXk3834m91P+OAAAAAAAAAAAAAADw066t/Yj1gwb0eGrQjg9e82jH1p/Hbz5t5p133l+6f+769vHBSw7c8cGWLVu2rHhm0pSuh8NarVbn/9qeXY+H9z7ufP2lo27dd9ujMvnzNz9+9rSRJ8y/74bB31hxXfvTQ7Y+O6R17oWzZne8YWCrVY4a0rqs88GhA1qtcsyQ1vWdD8Z1Ppg6pLWy88FhWx+8ovWZzgevP3/u7As6nzi28u8Z7Cra2pe2BvVYbKvHfw123P/SUU/M7P65j5fsfrXBra79j77vS/v0+l63F9l/9+uXI3rvv9//gsCL6t/+n1vT/XMfL/m/3v8/vGrzkuh7L77/7tcvR9o/1Cf4/N9jo70/9/f6/H9A8JLb7w8fvurGzv23nXL3/l1PDf5JPv//+PXLUb33P7DH5//Oz/FTuj//D2u1ytE7+dsBqbS1X72+r/f/vvc/+NW9bgbsuP87vrJ298793/V8a1nXU0P6uf8pfb3/X9Pr1wr0T1v77Vt6vf//3/sf2up+/x8TvOT2/a+7b+TWz/9r7zl/7x2+15/9H917/2MXzrlk7ILFSw6ZNWf6jI4ZHRdPHDfh0PETJ06YMHbrJ4JtP+7kbwoksXPv/60RvW4GtFod2+8fvvu6KZ373/Dgso90PTW8n/s/ps/3/wO8/0No9MDW0KGty6YvXDj/0G0/dj8ct+3Hbf9YsP9+/Pn/wIO7/rHuvzMc0Grtu/1+zNkTh3Xu//J55YGup4b2c/9T+9z/5J5/Vwn0z06+/1/Q66bH/g9fd+Wizv0f9IO91nY91d8//x/b5/5v8/4PO6OtvVXrm2jn/g8bdvVx1a5Lm7//g/o0sf9RG6/fVO26HGf/UJ8m9j9t+ZvPq3Zdjrd/qE8T+79/zjnLq12XE+wf6tPE/l941ab9ql2XE+0f6tPE/h/77lN3Vrsu7fYP9Wli/x+8pf2watflrfYP9Wli/4dc+uykatflbfYP9Wli/xfudvLKatflJPuH+jSx/+O2HLl3tevydvuH+jSx/wFXf29ptetysv1DfZrY/5PTl8+tdl2m2T/Up4n9rxw15rlq1+UU+4f6NLH/ZU+/cWq163Kq/UN9mtj/V2+69bFq1+Ud9g/1aWL/nzhzr1urXZfT7B/q08T+fzj6wRHVrss77R/q08T+V69eeW+163K6/UN9mtj/ipWDRle7LmfYP9Snif1fdeyMR6tdlzPtH+rTxP7HT/jyGdWuy1n2D/VpYv/7fu5bT1W7LmfbP9Snif2f/NCiBdWuyzn2D/VpYv+L9vv4j6pdl3PtH+rTxP7f0rHfzGrXZbr9Q32a2H+5YcTqatflPPuH+jSx/9M33D652nU53/6hPk3s/4E9vvCxatflAvuH+jSx/43zLp5Y7bp02D/Up4n9f+e9V72v2nW50P6hPk3s/8bnv16qXZcZ9g/1aWL/68adfma16zLT/qE+Tez/9hOeeaTadZll/1CfJva//IHHF1a7Lu+yf6hPE/t/+OHjn6h2XS6yf6hPE/s/aMzYkT2fffYnvC6z7R/q08T+55627EPVrssc+4f6NLH/o+656bXVrsvF9g/1aWL/w7826ZPVrstc+4f6NLH/T096/6eqXZdL7B/q08T+N00+8OBq12We/UN9mtj/mnvH3Vztusy3f6hPE/v/wCO3VLwuC+wf6tPE/ue97oUN1a7LQvuH+jSx/zdNO3Vxtetyqf1DfZrY/963Tf1iteuyyP6hPk3s/6xvf/+katfl3fYP9Wli/wfuc97+1a7LZfYP9Wli/zNnrbq22nVZbP9Qnyb2P2XFmvHVrssS+4f6NLH/PZ5ccEe163K5/UN9mtj/+kH7nFjturzH/qE+Tez/rise+ma163KF/UN9mtj/tdd8tKPadbnS/qE+Tez/s5uHbqx2Xa6yfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6HHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5WwfRuwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAUAAP//efzxqQ==") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f00000002c0)=ANY=[], 0xfe37, 0x1) 3m44.53202296s ago: executing program 1 (id=470): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f0000000300)}, {0x0}], 0x4}, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_force}]}, 0x1, 0x559a, &(0x7f000000ac40)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x29f) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) 3m42.390940385s ago: executing program 1 (id=476): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x86) fchdir(r6) ioctl$EVIOCGID(r6, 0x80084502, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m41.643941277s ago: executing program 1 (id=477): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x32) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x40000301) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) 3m41.521412115s ago: executing program 1 (id=478): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000080, &(0x7f0000000200)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRES8], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b2) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) mknod$loop(0x0, 0x8, 0x0) 3m40.043056551s ago: executing program 1 (id=482): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75'], 0xa) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)=ANY=[]) socketpair$unix(0x1, 0xcdfb1e3e5376233e, 0x0, &(0x7f00000002c0)) write$cgroup_devices(r1, &(0x7f0000000340)={'c', ' *:* ', 'rwm\x00'}, 0xa) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1e}, 0x0, 0x40010000, 0x1}) r3 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0xcc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}) 3m39.508453642s ago: executing program 32 (id=482): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75'], 0xa) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)=ANY=[]) socketpair$unix(0x1, 0xcdfb1e3e5376233e, 0x0, &(0x7f00000002c0)) write$cgroup_devices(r1, &(0x7f0000000340)={'c', ' *:* ', 'rwm\x00'}, 0xa) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1e}, 0x0, 0x40010000, 0x1}) r3 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0xcc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}) 8.563434473s ago: executing program 4 (id=1087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4441, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) write$binfmt_format(r0, 0x0, 0x0) 7.633770137s ago: executing program 4 (id=1091): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000100), 0x2, 0x181) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 7.002343384s ago: executing program 4 (id=1092): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4441, &(0x7f0000004480)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x189) write$binfmt_format(r1, &(0x7f0000000000)='1\x00', 0x2400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 4.932615514s ago: executing program 4 (id=1102): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80801) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 3.807840699s ago: executing program 4 (id=1106): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x74, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x57, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_b, @device_a, @initial, {0x6, 0x3}}, 0x4, @default, 0xb403, @val, @val, @val={0x3, 0x1, 0x5}, @val={0x4, 0x6, {0xff, 0x3, 0xff81, 0x5}}, @val={0x6, 0x2, 0x3}, @val={0x2d, 0x1a, {0x2000, 0x1, 0x5, 0x0, {0x7, 0xff, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1}, 0xb00, 0x8000, 0x1}}, @void, @void}}]}, 0x74}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.234922732s ago: executing program 2 (id=1108): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='pimreg\x00', 0x10) 3.10686677s ago: executing program 2 (id=1109): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000100), 0x2, 0x181) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.955094979s ago: executing program 2 (id=1111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tm'], 0xa) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)=ANY=[]) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40010000, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(0xffffffffffffffff, 0x749d, 0x4, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.540675103s ago: executing program 0 (id=1114): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80801) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1.89914664s ago: executing program 2 (id=1115): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x50, 0x59, 0x54, 0xc0, 0x40, 0x45e, 0x4e7, 0x8279, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x1, 0x80, 0x40, [{{0x9, 0x4, 0x1c, 0x4, 0x0, 0xa0, 0xac, 0x2a, 0x3}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x6, &(0x7f0000000500)=@string={0x6, 0x3, "18db27e5"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x439}}, {0x54, &(0x7f0000000580)=@string={0x54, 0x3, "6240ea3b05ac62b489f281a1cb10d1949d85426559776a3f49765879c424a4cd15169d69bbbf4f8033ee4071d8d9918e8bcd0865085f1c8d3857a5d1ddbec19e09896fe1e3cad3fcaaa57ad4f802070cb85a"}}]}) 1.825431554s ago: executing program 3 (id=1116): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) 1.824519094s ago: executing program 0 (id=1117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000340)={0xb000}) 1.540331621s ago: executing program 3 (id=1118): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x0, 0x7fff7ffc}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) 1.509860123s ago: executing program 0 (id=1119): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000100), 0x2, 0x181) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.442409706s ago: executing program 3 (id=1120): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000240)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)) 1.419964528s ago: executing program 4 (id=1121): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x14, {0x14, 0x0, "392cdaab4a537016caeff33ec12652fa6cef"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x0, 0x5, 0x5, &(0x7f00000001c0)={0x19, "247f23e017bb486c5c4b7165920bf04121f0330100"}}) 1.339020073s ago: executing program 0 (id=1122): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000040)={0x0, 0x2, 0xfffffffe, 0x6}) 1.204142751s ago: executing program 0 (id=1123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tm'], 0xa) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)=ANY=[]) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40010000, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(0xffffffffffffffff, 0x749d, 0x4, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 502.210761ms ago: executing program 3 (id=1124): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c56, &(0x7f0000001040)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_win95}, {@shortname_lower}, {@fat=@debug}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlateno}, {@shortname_lower}, {@utf8}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 377.158498ms ago: executing program 3 (id=1125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0xc0c4) 226.582367ms ago: executing program 0 (id=1126): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80801) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 226.245977ms ago: executing program 2 (id=1127): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r1, r1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x150d, 0x103) 55.228497ms ago: executing program 2 (id=1128): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000700)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 0s ago: executing program 3 (id=1129): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x74, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x57, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_b, @device_a, @initial, {0x6, 0x3}}, 0x4, @default, 0xb403, @val, @val, @val={0x3, 0x1, 0x5}, @val={0x4, 0x6, {0xff, 0x3, 0xff81, 0x5}}, @val={0x6, 0x2, 0x3}, @val={0x2d, 0x1a, {0x2000, 0x1, 0x5, 0x0, {0x7, 0xff, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1}, 0xb00, 0x8000, 0x1}}, @void, @void}}]}, 0x74}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ing ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.876951][ T1188] usb 5-1: USB disconnect, device number 7 [ 363.010875][ T9856] tipc: Enabling of bearer rejected, already enabled [ 363.961047][ T5812] usb 3-1: USB disconnect, device number 13 [ 364.025755][ T9862] loop3: detected capacity change from 0 to 64 [ 364.034644][ T9860] loop0: detected capacity change from 0 to 1024 [ 364.137463][ T28] audit: type=1800 audit(1770595779.941:39): pid=9862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.827" name="file2" dev="loop3" ino=21 res=0 errno=0 [ 364.169767][ T9862] syz.3.827: attempt to access beyond end of device [ 364.169767][ T9862] loop3: rw=34817, sector=39, nr_sectors = 125 limit=64 [ 364.229879][ T9862] syz.3.827: attempt to access beyond end of device [ 364.229879][ T9862] loop3: rw=34817, sector=167, nr_sectors = 1 limit=64 [ 364.276837][ T9862] syz.3.827: attempt to access beyond end of device [ 364.276837][ T9862] loop3: rw=34817, sector=169, nr_sectors = 1 limit=64 [ 364.336681][ T9862] syz.3.827: attempt to access beyond end of device [ 364.336681][ T9862] loop3: rw=34817, sector=171, nr_sectors = 7 limit=64 [ 364.403932][ T9862] syz.3.827: attempt to access beyond end of device [ 364.403932][ T9862] loop3: rw=34817, sector=179, nr_sectors = 263 limit=64 [ 364.774310][ T9880] 9pnet_fd: Insufficient options for proto=fd [ 364.919044][ T9875] loop2: detected capacity change from 0 to 32768 [ 364.937377][ T9875] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.831 (9875) [ 364.955568][ T9858] loop4: detected capacity change from 0 to 32768 [ 364.965772][ T9875] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 364.976232][ T9875] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 364.985042][ T9875] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 364.995913][ T9875] BTRFS info (device loop2): trying to use backup root at mount time [ 365.004979][ T9875] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 365.014528][ T9875] BTRFS info (device loop2): force zstd compression, level 3 [ 365.022232][ T9875] BTRFS info (device loop2): enabling disk space caching [ 365.029424][ T9875] BTRFS info (device loop2): force clearing of disk cache [ 365.037039][ T9875] BTRFS info (device loop2): disk space caching is enabled [ 365.069160][ T9858] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 365.180089][ T9875] BTRFS info (device loop2): auto enabling async discard [ 365.206855][ T9875] BTRFS info (device loop2): rebuilding free space tree [ 365.222430][ T9875] BTRFS info (device loop2): disabling free space tree [ 365.229564][ T9875] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 365.239365][ T9875] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 365.254744][ T9898] loop3: detected capacity change from 0 to 1024 [ 365.306679][ T9898] EXT4-fs: Ignoring removed bh option [ 365.341848][ T28] audit: type=1800 audit(1770595781.141:40): pid=9875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.831" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 365.443045][ T5778] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 365.481661][ T9898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.595318][ T9898] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.833: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 365.744710][ T9898] EXT4-fs (loop3): Remounting filesystem read-only [ 365.934386][ T23] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 365.957638][ T5771] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 366.124478][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.173374][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.202936][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.208107][ T23] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 366.255450][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.305427][ T23] usb 5-1: config 0 descriptor?? [ 366.385109][ T7146] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop2 scanned by udevd (7146) [ 366.410258][ T9918] loop3: detected capacity change from 0 to 64 [ 366.503321][ T28] audit: type=1800 audit(1770595782.301:41): pid=9918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.840" name="file2" dev="loop3" ino=21 res=0 errno=0 [ 366.534421][ T9918] syz.3.840: attempt to access beyond end of device [ 366.534421][ T9918] loop3: rw=34817, sector=39, nr_sectors = 125 limit=64 [ 366.569688][ T9918] syz.3.840: attempt to access beyond end of device [ 366.569688][ T9918] loop3: rw=34817, sector=167, nr_sectors = 1 limit=64 [ 366.591780][ T9918] syz.3.840: attempt to access beyond end of device [ 366.591780][ T9918] loop3: rw=34817, sector=169, nr_sectors = 1 limit=64 [ 366.642933][ T9918] syz.3.840: attempt to access beyond end of device [ 366.642933][ T9918] loop3: rw=34817, sector=171, nr_sectors = 7 limit=64 [ 366.675254][ T9918] syz.3.840: attempt to access beyond end of device [ 366.675254][ T9918] loop3: rw=34817, sector=179, nr_sectors = 263 limit=64 [ 366.750725][ T9923] loop0: detected capacity change from 0 to 1024 [ 366.763961][ T23] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 366.876495][ T23] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 367.032989][ T23] cp2112 0003:10C4:EA90.0017: error requesting version [ 367.108178][ T23] cp2112: probe of 0003:10C4:EA90.0017 failed with error -5 [ 367.443679][ T9935] 9pnet_fd: Insufficient options for proto=fd [ 367.993494][ T9928] loop3: detected capacity change from 0 to 32768 [ 368.071278][ T9928] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 368.244913][ T9947] loop0: detected capacity change from 0 to 32768 [ 368.254008][ T9947] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 368.286608][ T7146] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 368.323506][ T5778] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 368.573710][ T9954] loop3: detected capacity change from 0 to 1024 [ 368.630808][ T9954] EXT4-fs: Ignoring removed bh option [ 368.766582][ T9954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.914081][ T9954] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.850: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 368.943025][ T9954] EXT4-fs (loop3): Remounting filesystem read-only [ 369.025748][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.136916][ T23] usb 5-1: USB disconnect, device number 8 [ 369.227365][ T9961] loop0: detected capacity change from 0 to 64 [ 369.280882][ T28] audit: type=1800 audit(1770595785.081:42): pid=9961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.852" name="file2" dev="loop0" ino=21 res=0 errno=0 [ 369.303009][ T9961] syz.0.852: attempt to access beyond end of device [ 369.303009][ T9961] loop0: rw=34817, sector=39, nr_sectors = 125 limit=64 [ 369.365802][ T9961] syz.0.852: attempt to access beyond end of device [ 369.365802][ T9961] loop0: rw=34817, sector=167, nr_sectors = 1 limit=64 [ 369.449690][ T9961] syz.0.852: attempt to access beyond end of device [ 369.449690][ T9961] loop0: rw=34817, sector=169, nr_sectors = 1 limit=64 [ 369.483649][ T9961] syz.0.852: attempt to access beyond end of device [ 369.483649][ T9961] loop0: rw=34817, sector=171, nr_sectors = 7 limit=64 [ 369.502933][ T9966] loop3: detected capacity change from 0 to 1024 [ 369.598851][ T9961] syz.0.852: attempt to access beyond end of device [ 369.598851][ T9961] loop0: rw=34817, sector=179, nr_sectors = 263 limit=64 [ 369.670970][ T9964] loop4: detected capacity change from 0 to 32768 [ 369.782936][ T9969] 9pnet_fd: Insufficient options for proto=fd [ 370.623510][ T9987] loop2: detected capacity change from 0 to 32768 [ 370.648432][ T9987] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 370.658738][ T9987] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 370.667526][ T9987] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 370.678402][ T9987] BTRFS info (device loop2): trying to use backup root at mount time [ 370.686613][ T9987] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 370.696079][ T9987] BTRFS info (device loop2): force zstd compression, level 3 [ 370.703513][ T9987] BTRFS info (device loop2): enabling disk space caching [ 370.710733][ T9987] BTRFS info (device loop2): force clearing of disk cache [ 370.717997][ T9987] BTRFS info (device loop2): disk space caching is enabled [ 370.775613][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 370.812962][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 370.819824][ T9987] BTRFS info (device loop2): auto enabling async discard [ 370.831416][ T9987] BTRFS info (device loop2): rebuilding free space tree [ 370.872321][ T9987] BTRFS info (device loop2): disabling free space tree [ 370.879525][ T9987] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 370.889707][ T9987] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 370.964089][ T28] audit: type=1800 audit(1770595786.761:43): pid=9987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.861" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 370.990753][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.048104][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.065288][ T9978] loop3: detected capacity change from 0 to 32768 [ 371.082926][ T23] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 371.100202][ T9978] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 371.113241][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.143651][ T23] usb 1-1: config 0 descriptor?? [ 371.497681][ T7146] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 371.549310][ T5771] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 371.588664][ T23] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 371.633905][ T23] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 371.681355][T10013] loop4: detected capacity change from 0 to 1024 [ 371.783399][ T23] cp2112 0003:10C4:EA90.0018: error requesting version [ 371.800529][ T5778] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop2 scanned by udevd (5778) [ 371.820965][ T23] cp2112: probe of 0003:10C4:EA90.0018 failed with error -5 [ 372.279678][T10017] loop3: detected capacity change from 0 to 32768 [ 372.366346][T10017] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 372.428004][T10028] 9pnet_fd: Insufficient options for proto=fd [ 372.434581][T10017] XFS (loop3): Ending clean mount [ 372.446127][ T9] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 372.543666][ T9] XFS (loop3): Unmount and run xfs_repair [ 372.571637][ T9] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 372.592889][ T9] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 372.603893][ T9] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 372.617669][ T9] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 372.629615][ T9] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 372.642190][ T9] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 372.653605][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 372.682696][ T9] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 372.714857][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 372.755208][T10017] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 372.767093][T10017] XFS (loop3): Failed to initialize disk quotas. [ 372.900782][ T5770] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 373.443383][T10041] loop3: detected capacity change from 0 to 32768 [ 373.890816][ T9] usb 1-1: USB disconnect, device number 15 [ 374.139461][T10033] loop4: detected capacity change from 0 to 32768 [ 374.210577][T10033] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 374.262783][T10052] loop2: detected capacity change from 0 to 32768 [ 374.297554][T10052] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 374.308051][T10052] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 374.317132][T10052] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 374.328891][T10052] BTRFS info (device loop2): trying to use backup root at mount time [ 374.337078][T10052] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 374.346668][T10052] BTRFS info (device loop2): force zstd compression, level 3 [ 374.354123][T10052] BTRFS info (device loop2): enabling disk space caching [ 374.361266][T10052] BTRFS info (device loop2): force clearing of disk cache [ 374.368517][T10052] BTRFS info (device loop2): disk space caching is enabled [ 374.450928][T10059] loop0: detected capacity change from 0 to 1024 [ 374.458874][T10059] EXT4-fs: Ignoring removed bh option [ 374.530869][T10059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.588118][T10052] BTRFS info (device loop2): auto enabling async discard [ 374.635802][T10052] BTRFS info (device loop2): rebuilding free space tree [ 374.676360][T10052] BTRFS info (device loop2): disabling free space tree [ 374.683609][T10052] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 374.693533][T10052] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 374.768307][ T28] audit: type=1800 audit(1770595790.551:44): pid=10052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.873" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 374.816982][ T5778] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 374.938060][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.087398][T10050] loop3: detected capacity change from 0 to 32768 [ 375.127318][T10050] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 375.239746][T10081] 9pnet_fd: Insufficient options for proto=fd [ 375.280659][T10052] BTRFS info (device loop2): space_info DATA+METADATA (sub-group id 0) has 0 free, is not full [ 375.291678][T10052] BTRFS info (device loop2): space_info total=3276800, used=49152, pinned=274432, reserved=102400, may_use=2850816, readonly=0 zone_unusable=0 [ 375.306430][T10052] BTRFS info (device loop2): global_block_rsv: size 1048576 reserved 1048576 [ 375.315264][T10052] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 375.323064][T10052] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 375.330818][T10052] BTRFS info (device loop2): delayed_block_rsv: size 32768 reserved 32768 [ 375.339474][T10052] BTRFS info (device loop2): delayed_refs_rsv: size 1703936 reserved 1703936 [ 375.709687][T10083] loop4: detected capacity change from 0 to 32768 [ 375.747082][ T7149] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 375.829965][ T5771] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 376.030740][ T11] read_mapping_page failed! [ 376.103336][ T11] ERROR: (device loop4): txCommit: [ 376.103336][ T11] [ 376.146998][T10089] loop0: detected capacity change from 0 to 32768 [ 376.187759][ T11] ERROR: (device loop4): remounting filesystem as read-only [ 376.242141][ T11] jfs_write_inode: jfs_commit_inode failed! [ 376.632331][T10097] loop3: detected capacity change from 0 to 1024 [ 376.825709][ T5812] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 377.049092][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.105524][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.156223][ T5812] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 377.205464][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.263259][ T5812] usb 5-1: config 0 descriptor?? [ 377.300170][T10112] loop3: detected capacity change from 0 to 1024 [ 377.354789][T10112] EXT4-fs: Ignoring removed bh option [ 377.417125][T10112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.550734][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.739677][ T5812] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 377.758427][ T5760] kernel write not supported for file /amidi2 (pid: 5760 comm: kworker/0:3) [ 377.769947][ T5812] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 377.810238][T10099] loop0: detected capacity change from 0 to 32768 [ 377.840222][T10099] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 377.939528][ T5812] cp2112 0003:10C4:EA90.0019: error requesting version [ 377.949713][ T5812] cp2112: probe of 0003:10C4:EA90.0019 failed with error -5 [ 378.072336][ T5778] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 378.503502][T10118] loop2: detected capacity change from 0 to 32768 [ 378.534102][T10118] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 378.672794][ T7146] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 378.725462][ T5863] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 378.928328][ T5863] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 378.960343][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.973253][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.991576][T10138] tipc: Enabling of bearer rejected, already enabled [ 379.738022][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.750044][ T5863] usb 1-1: config 0 has no interface number 0 [ 379.767709][ T5863] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 379.785583][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.793663][ T5863] usb 1-1: Product: syz [ 379.812729][T10129] loop3: detected capacity change from 0 to 32768 [ 379.814195][ T5863] usb 1-1: Manufacturer: syz [ 379.824179][ T5863] usb 1-1: SerialNumber: syz [ 379.834222][ T5863] usb 1-1: config 0 descriptor?? [ 379.847714][ T5863] ims_pcu 1-1:0.41: Missing CDC union descriptor [ 379.857941][ T5863] ims_pcu: probe of 1-1:0.41 failed with error -22 [ 379.867099][T10129] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 380.024801][ T5812] usb 5-1: USB disconnect, device number 9 [ 380.244950][T10142] loop2: detected capacity change from 0 to 32768 [ 380.369993][T10142] JBD2: Ignoring recovery information on journal [ 380.672780][T10142] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 381.156942][ T28] audit: type=1800 audit(1770595796.961:45): pid=10142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.898" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 381.178884][T10142] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 381.198682][ T5871] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 381.209721][T10142] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 381.218999][T10146] loop4: detected capacity change from 0 to 4096 [ 381.219870][T10142] OCFS2: File system is now read-only. [ 381.231591][T10142] (syz.2.898,10142,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 381.239555][T10142] (syz.2.898,10142,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 381.247697][T10142] (syz.2.898,10142,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 381.256325][T10142] (syz.2.898,10142,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 381.264897][T10142] (syz.2.898,10142,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 381.273311][T10142] (syz.2.898,10142,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 381.281805][T10142] (syz.2.898,10142,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 381.291656][T10142] (syz.2.898,10142,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 381.300494][T10142] (syz.2.898,10142,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 381.309641][T10142] (syz.2.898,10142,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 381.318651][T10142] (syz.2.898,10142,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 381.327540][T10142] (syz.2.898,10142,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 381.336457][T10142] (syz.2.898,10142,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 381.345799][T10142] (syz.2.898,10142,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 381.354987][T10142] (syz.2.898,10142,0):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 381.363731][T10142] (syz.2.898,10142,0):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 381.372227][T10142] (syz.2.898,10142,0):ocfs2_dio_wr_get_block:2243 ERROR: status = -30 [ 381.380593][T10142] (syz.2.898,10142,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 381.600467][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 382.311701][ T5863] usb 1-1: USB disconnect, device number 16 [ 382.374773][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 382.623119][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.645753][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 382.687874][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 382.712133][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.734364][ T9] usb 3-1: config 0 descriptor?? [ 382.745046][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 382.788904][T10150] loop3: detected capacity change from 0 to 32768 [ 382.862917][T10150] JBD2: Ignoring recovery information on journal [ 382.940307][T10150] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 383.033748][ T28] audit: type=1800 audit(1770595798.831:46): pid=10150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.900" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 383.096047][T10150] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 383.117310][T10150] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 383.130584][T10150] OCFS2: File system is now read-only. [ 383.136577][T10150] (syz.3.900,10150,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 383.144620][T10150] (syz.3.900,10150,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 383.152988][T10150] (syz.3.900,10150,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 383.161765][T10150] (syz.3.900,10150,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 383.170415][T10150] (syz.3.900,10150,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 383.205486][T10150] (syz.3.900,10150,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 383.236256][T10150] (syz.3.900,10150,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 383.245230][T10150] (syz.3.900,10150,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 383.283152][T10150] (syz.3.900,10150,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 383.309161][T10150] (syz.3.900,10150,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 383.346183][T10174] loop0: detected capacity change from 0 to 1024 [ 383.354282][T10150] (syz.3.900,10150,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 383.412935][T10150] (syz.3.900,10150,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 383.432172][T10150] (syz.3.900,10150,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 383.464670][T10150] (syz.3.900,10150,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 383.474569][T10150] (syz.3.900,10150,1):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 383.506019][T10150] (syz.3.900,10150,1):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 383.523224][T10150] (syz.3.900,10150,1):ocfs2_dio_wr_get_block:2243 ERROR: status = -30 [ 383.541925][T10150] (syz.3.900,10150,1):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 383.663233][T10179] tipc: Enabling of bearer rejected, already enabled [ 383.693719][T10150] syz.3.900 (10150) used greatest stack depth: 19600 bytes left [ 384.065277][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 384.630314][T10170] loop4: detected capacity change from 0 to 32768 [ 384.657090][T10170] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 384.811555][ T7146] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 384.869870][ T5775] usb 3-1: USB disconnect, device number 14 [ 385.260585][T10185] loop4: detected capacity change from 0 to 32768 [ 385.270317][T10185] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.909 (10185) [ 385.292075][T10185] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 385.302428][T10185] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 385.311368][T10185] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 385.322116][T10185] BTRFS info (device loop4): trying to use backup root at mount time [ 385.330314][T10185] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 385.339841][T10185] BTRFS info (device loop4): force zstd compression, level 3 [ 385.347456][T10185] BTRFS info (device loop4): enabling disk space caching [ 385.354553][T10185] BTRFS info (device loop4): force clearing of disk cache [ 385.362604][T10185] BTRFS info (device loop4): disk space caching is enabled [ 385.417734][T10182] loop0: detected capacity change from 0 to 32768 [ 385.446855][T10182] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 385.455934][ T5775] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 385.504096][T10185] BTRFS info (device loop4): auto enabling async discard [ 385.512677][T10185] BTRFS info (device loop4): rebuilding free space tree [ 385.549214][T10185] BTRFS info (device loop4): disabling free space tree [ 385.556497][T10185] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 385.566453][T10185] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 385.611757][ T28] audit: type=1800 audit(1770595801.411:47): pid=10185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.909" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 385.649215][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.693908][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.749960][ T5775] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 386.024496][ T5778] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 386.053738][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.073276][ T8121] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 386.168391][T10187] loop2: detected capacity change from 0 to 32768 [ 386.237993][ T5775] usb 4-1: config 0 descriptor?? [ 386.252206][T10187] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 386.583552][ T5871] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 386.809906][ T5812] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 386.832957][ T5775] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 386.858781][ T5775] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 387.001325][ T5775] cp2112 0003:10C4:EA90.001A: error requesting version [ 387.027343][ T5775] cp2112: probe of 0003:10C4:EA90.001A failed with error -5 [ 387.128721][ T5812] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 387.167796][ T5812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.236921][ T5812] usb 5-1: config 0 has no interface number 0 [ 387.268561][ T5812] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 387.312430][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.352959][ T5812] usb 5-1: Product: syz [ 387.379128][ T5812] usb 5-1: Manufacturer: syz [ 387.389382][ T5812] usb 5-1: SerialNumber: syz [ 387.446785][ T5812] usb 5-1: config 0 descriptor?? [ 387.479988][ T5812] ims_pcu 5-1:0.41: Missing CDC union descriptor [ 387.545496][ T5812] ims_pcu: probe of 5-1:0.41 failed with error -22 [ 387.672441][T10231] loop0: detected capacity change from 0 to 1024 [ 388.943565][T10229] loop2: detected capacity change from 0 to 32768 [ 388.985014][T10229] JBD2: Ignoring recovery information on journal [ 389.022332][ T5863] usb 4-1: USB disconnect, device number 27 [ 389.171883][T10241] tipc: Enabling of bearer rejected, already enabled [ 389.228017][T10229] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 389.831466][ T23] usb 5-1: USB disconnect, device number 10 [ 390.072007][ T28] audit: type=1800 audit(1770595805.871:48): pid=10229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.916" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 390.228240][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 390.454865][T10236] loop0: detected capacity change from 0 to 32768 [ 390.495644][T10236] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 390.640047][T10248] loop2: detected capacity change from 0 to 32768 [ 390.650841][T10248] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.921 (10248) [ 390.671200][T10248] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 390.681720][T10248] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 390.690673][T10248] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 390.701412][T10248] BTRFS info (device loop2): trying to use backup root at mount time [ 390.710575][T10248] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 390.720123][T10248] BTRFS info (device loop2): force zstd compression, level 3 [ 390.727648][T10248] BTRFS info (device loop2): enabling disk space caching [ 390.734741][T10248] BTRFS info (device loop2): force clearing of disk cache [ 390.742007][T10248] BTRFS info (device loop2): disk space caching is enabled [ 390.751198][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 390.867869][T10248] BTRFS info (device loop2): auto enabling async discard [ 390.889417][T10248] BTRFS info (device loop2): rebuilding free space tree [ 390.942344][ T5778] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 390.953683][T10248] BTRFS info (device loop2): disabling free space tree [ 390.962214][T10248] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 390.972020][T10248] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 390.999294][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.030565][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 391.107834][ T23] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.172436][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.228673][ T28] audit: type=1800 audit(1770595806.971:49): pid=10248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.921" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 391.274533][T10265] loop0: detected capacity change from 0 to 32768 [ 391.286873][ T23] usb 5-1: config 0 descriptor?? [ 391.329146][ T23] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 391.339298][T10265] JBD2: Ignoring recovery information on journal [ 391.384965][T10265] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 391.467775][ T28] audit: type=1800 audit(1770595807.271:50): pid=10265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.922" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 391.502590][T10265] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 391.521611][T10265] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 391.532618][T10265] OCFS2: File system is now read-only. [ 391.534813][T10243] loop3: detected capacity change from 0 to 32768 [ 391.538241][T10265] (syz.0.922,10265,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 391.538320][T10265] (syz.0.922,10265,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 391.560635][T10265] (syz.0.922,10265,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 391.569186][T10265] (syz.0.922,10265,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 391.577734][T10265] (syz.0.922,10265,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 391.586024][T10265] (syz.0.922,10265,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 391.594257][T10265] (syz.0.922,10265,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 391.604749][T10265] (syz.0.922,10265,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 391.613688][T10265] (syz.0.922,10265,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 391.622923][T10265] (syz.0.922,10265,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 391.632995][T10265] (syz.0.922,10265,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 391.641923][T10265] (syz.0.922,10265,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 391.650818][T10265] (syz.0.922,10265,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 391.660215][T10265] (syz.0.922,10265,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 391.669464][T10265] (syz.0.922,10265,0):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 391.677731][T10265] (syz.0.922,10265,0):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 391.686221][T10265] (syz.0.922,10265,0):ocfs2_dio_wr_get_block:2243 ERROR: status = -30 [ 391.694458][T10265] (syz.0.922,10265,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 391.697716][T10243] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 391.862774][ T5771] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 391.926728][ T5773] ocfs2: Unmounting device (7,0) on (node local) [ 392.076190][ T7149] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 393.181062][T10290] loop0: detected capacity change from 0 to 1024 [ 393.287054][T10272] loop3: detected capacity change from 0 to 32768 [ 393.313039][T10272] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 393.316011][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 393.483620][ T5871] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 393.588237][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.621786][T10295] tipc: Enabling of bearer rejected, already enabled [ 393.685488][ T5812] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 394.307436][ T23] usb 5-1: USB disconnect, device number 11 [ 394.425409][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.435286][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 394.458757][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.477440][ T9] usb 3-1: config 0 descriptor?? [ 394.620939][ T5812] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 394.633556][ T5812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.655496][ T5812] usb 1-1: config 0 has no interface number 0 [ 394.668224][ T5812] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 394.688383][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.710921][ T5812] usb 1-1: Product: syz [ 394.715235][ T5812] usb 1-1: Manufacturer: syz [ 394.745473][ T5812] usb 1-1: SerialNumber: syz [ 394.767139][ T5812] usb 1-1: config 0 descriptor?? [ 394.800855][ T5812] ims_pcu 1-1:0.41: Missing CDC union descriptor [ 394.836002][ T5812] ims_pcu: probe of 1-1:0.41 failed with error -22 [ 394.955124][ T9] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 394.986031][ T9] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 395.174540][ T9] cp2112 0003:10C4:EA90.001B: error requesting version [ 395.197127][ T9] cp2112: probe of 0003:10C4:EA90.001B failed with error -5 [ 396.297225][T10299] loop3: detected capacity change from 0 to 32768 [ 396.345288][T10299] JBD2: Ignoring recovery information on journal [ 396.407118][T10298] loop4: detected capacity change from 0 to 32768 [ 396.415959][T10298] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 396.472478][T10299] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 396.529071][ T28] audit: type=1800 audit(1770595812.331:51): pid=10299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.931" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 396.574217][T10299] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 396.594046][T10299] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 396.605199][T10299] OCFS2: File system is now read-only. [ 396.612963][T10299] (syz.3.931,10299,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 396.621087][T10299] (syz.3.931,10299,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 396.629129][T10299] (syz.3.931,10299,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 396.638087][T10299] (syz.3.931,10299,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 396.656246][T10299] (syz.3.931,10299,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 396.675006][T10299] (syz.3.931,10299,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 396.694784][T10299] (syz.3.931,10299,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 396.714111][T10299] (syz.3.931,10299,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 396.735600][T10299] (syz.3.931,10299,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 396.756138][T10299] (syz.3.931,10299,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 396.785417][T10299] (syz.3.931,10299,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 396.812757][ T5778] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 396.821726][T10299] (syz.3.931,10299,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 396.861021][T10299] (syz.3.931,10299,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 396.889081][T10299] (syz.3.931,10299,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 396.915554][T10299] (syz.3.931,10299,1):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 396.933997][T10299] (syz.3.931,10299,1):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 396.971073][T10299] (syz.3.931,10299,1):ocfs2_dio_wr_get_block:2243 ERROR: status = -30 [ 396.995723][T10299] (syz.3.931,10299,1):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 397.132900][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 397.210793][ T8] usb 1-1: USB disconnect, device number 17 [ 397.387047][ T9] usb 3-1: USB disconnect, device number 15 [ 397.643941][T10311] loop0: detected capacity change from 0 to 32768 [ 397.741290][T10311] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.934 (10311) [ 397.818113][T10309] loop4: detected capacity change from 0 to 32768 [ 397.867391][T10311] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 397.879001][T10311] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 397.887793][T10311] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 397.898512][T10311] BTRFS info (device loop0): trying to use backup root at mount time [ 397.906723][T10311] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 397.916612][T10311] BTRFS info (device loop0): force zstd compression, level 3 [ 397.924062][T10311] BTRFS info (device loop0): enabling disk space caching [ 397.931260][T10311] BTRFS info (device loop0): force clearing of disk cache [ 397.938490][T10311] BTRFS info (device loop0): disk space caching is enabled [ 398.034980][T10309] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 398.120938][T10311] BTRFS info (device loop0): auto enabling async discard [ 398.131916][T10311] BTRFS info (device loop0): rebuilding free space tree [ 398.164249][T10311] BTRFS info (device loop0): disabling free space tree [ 398.171391][T10311] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 398.182265][T10311] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 398.251397][ T28] audit: type=1800 audit(1770595814.051:52): pid=10311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.934" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 398.470623][ T5871] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 398.692475][T10311] BTRFS info (device loop0): space_info DATA+METADATA (sub-group id 0) has 0 free, is not full [ 398.703090][T10311] BTRFS info (device loop0): space_info total=3276800, used=49152, pinned=274432, reserved=102400, may_use=2850816, readonly=0 zone_unusable=0 [ 398.718434][T10311] BTRFS info (device loop0): global_block_rsv: size 1048576 reserved 1048576 [ 398.727993][T10311] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 398.735815][T10311] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 398.743627][T10311] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 398.751734][T10311] BTRFS info (device loop0): delayed_refs_rsv: size 1703936 reserved 1638400 [ 398.928200][T10346] loop2: detected capacity change from 0 to 1024 [ 399.025960][ T5773] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 399.333704][T10318] loop3: detected capacity change from 0 to 32768 [ 399.445760][T10318] JBD2: Ignoring recovery information on journal [ 399.568602][T10318] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 399.645889][ T28] audit: type=1800 audit(1770595815.441:53): pid=10318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.933" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 399.705647][T10318] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 399.728218][ T23] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 399.734710][T10318] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 399.798605][T10318] OCFS2: File system is now read-only. [ 399.819756][T10318] (syz.3.933,10318,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 399.856590][T10318] (syz.3.933,10318,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 399.893667][T10318] (syz.3.933,10318,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 399.912936][T10318] (syz.3.933,10318,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 399.946255][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.965624][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 399.965627][T10318] (syz.3.933,10318,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 399.965679][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.997063][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.016969][ T23] usb 1-1: config 0 descriptor?? [ 400.028366][ T23] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 400.058494][T10318] (syz.3.933,10318,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 400.068176][T10318] (syz.3.933,10318,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 400.093435][T10318] (syz.3.933,10318,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 400.105033][T10318] (syz.3.933,10318,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 400.117235][T10318] (syz.3.933,10318,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 400.127604][T10318] (syz.3.933,10318,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 400.136516][T10318] (syz.3.933,10318,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 400.150803][T10318] (syz.3.933,10318,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 400.160360][T10318] (syz.3.933,10318,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 400.170212][T10318] (syz.3.933,10318,1):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 400.178549][T10318] (syz.3.933,10318,1):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 400.191935][T10318] (syz.3.933,10318,1):ocfs2_dio_wr_get_block:2243 ERROR: status = -30 [ 400.200736][T10318] (syz.3.933,10318,1):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 400.271025][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 400.450681][T10351] loop4: detected capacity change from 0 to 32768 [ 400.482524][T10351] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 400.664380][T10350] loop2: detected capacity change from 0 to 32768 [ 400.696902][T10350] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 400.745240][ T7146] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 400.866762][T10364] tipc: Enabling of bearer rejected, already enabled [ 401.690884][ T5871] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 401.947018][ T1188] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 402.045748][ T5775] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 402.057992][T10360] loop4: detected capacity change from 0 to 32768 [ 402.105104][T10360] JBD2: Ignoring recovery information on journal [ 402.154268][T10360] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 402.165551][ T1188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.178519][ T1188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.188943][ T1188] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 402.198307][ T1188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.213466][ T1188] usb 4-1: config 0 descriptor?? [ 402.235249][ T28] audit: type=1800 audit(1770595818.031:54): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.942" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 402.281165][T10360] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 402.302660][T10360] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 402.314879][ T5775] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 402.316886][T10360] OCFS2: File system is now read-only. [ 402.333552][ T5775] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.344824][T10360] (syz.4.942,10360,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 402.354186][ T5775] usb 3-1: config 0 has no interface number 0 [ 402.360658][T10360] (syz.4.942,10360,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 402.360694][T10360] (syz.4.942,10360,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 402.360720][T10360] (syz.4.942,10360,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 402.360746][T10360] (syz.4.942,10360,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 402.360772][T10360] (syz.4.942,10360,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 402.360798][T10360] (syz.4.942,10360,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 402.360823][T10360] (syz.4.942,10360,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 402.360849][T10360] (syz.4.942,10360,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 402.361135][T10360] (syz.4.942,10360,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 402.407581][ T5775] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 402.447986][T10360] (syz.4.942,10360,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 402.459536][T10360] (syz.4.942,10360,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 402.470195][T10360] (syz.4.942,10360,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 402.487955][T10360] (syz.4.942,10360,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 402.501431][T10360] (syz.4.942,10360,0):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 402.524580][ T23] usb 1-1: USB disconnect, device number 18 [ 402.532143][T10360] (syz.4.942,10360,0):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 402.548343][ T5775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.571286][ T5775] usb 3-1: Product: syz [ 402.590327][ T5775] usb 3-1: Manufacturer: syz [ 402.602468][ T5775] usb 3-1: SerialNumber: syz [ 402.615206][T10360] (syz.4.942,10360,1):ocfs2_dio_wr_get_block:2243 ERROR: status = -30 [ 402.625499][ T5775] usb 3-1: config 0 descriptor?? [ 402.648495][ T5775] ims_pcu 3-1:0.41: Missing CDC union descriptor [ 402.655109][ T5775] ims_pcu: probe of 3-1:0.41 failed with error -22 [ 402.664889][T10360] (syz.4.942,10360,1):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 402.691530][ T1188] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 402.726058][ T1188] cp2112 0003:10C4:EA90.001C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 402.808192][ T8121] ocfs2: Unmounting device (7,4) on (node local) [ 403.103985][ T1188] cp2112 0003:10C4:EA90.001C: Part Number: 0x82 Device Version: 0xFE [ 403.953946][ T1188] cp2112 0003:10C4:EA90.001C: error requesting SMBus config [ 403.971780][ T1188] cp2112: probe of 0003:10C4:EA90.001C failed with error -32 [ 404.158021][ T5775] usb 4-1: reset high-speed USB device number 28 using dummy_hcd [ 404.179533][T10374] loop0: detected capacity change from 0 to 32768 [ 404.218929][T10374] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 404.379508][ T7146] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 404.525545][T10384] loop0: detected capacity change from 0 to 1024 [ 404.996094][T10386] loop0: detected capacity change from 0 to 32768 [ 405.050533][T10386] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.948 (10386) [ 405.077322][T10386] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 405.087792][T10386] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 405.096712][T10386] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 405.107571][T10386] BTRFS info (device loop0): trying to use backup root at mount time [ 405.116347][T10386] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 405.125834][T10386] BTRFS info (device loop0): force zstd compression, level 3 [ 405.133267][T10386] BTRFS info (device loop0): enabling disk space caching [ 405.140407][T10386] BTRFS info (device loop0): force clearing of disk cache [ 405.148550][T10386] BTRFS info (device loop0): disk space caching is enabled [ 405.224001][ T23] usb 3-1: USB disconnect, device number 16 [ 405.300400][ T1188] usb 4-1: USB disconnect, device number 28 [ 405.336315][T10386] BTRFS info (device loop0): auto enabling async discard [ 405.345234][T10386] BTRFS info (device loop0): rebuilding free space tree [ 405.381199][T10386] BTRFS info (device loop0): disabling free space tree [ 405.388392][T10386] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 405.398373][T10386] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 405.496729][ T28] audit: type=1800 audit(1770595821.291:55): pid=10386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.948" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 406.080233][ T5773] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 406.577839][T10414] loop4: detected capacity change from 0 to 32768 [ 406.606174][T10414] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 406.610798][T10413] loop2: detected capacity change from 0 to 32768 [ 406.672990][T10413] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 406.725561][ T5775] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 406.890748][T10419] loop3: detected capacity change from 0 to 32768 [ 406.949581][ T5778] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 406.961876][ T5775] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.989464][T10419] JBD2: Ignoring recovery information on journal [ 406.998106][ T5775] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 407.026191][ T5775] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 407.037175][ T5871] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 407.045596][ T5775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.069782][ T5775] usb 1-1: config 0 descriptor?? [ 407.091796][ T5775] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 407.194799][T10428] tipc: Enabling of bearer rejected, already enabled [ 407.423682][T10419] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 407.905732][ T28] audit: type=1800 audit(1770595823.671:56): pid=10419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.952" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 408.015688][T10419] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 408.029137][T10432] loop4: detected capacity change from 0 to 1024 [ 408.055812][T10419] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 408.066578][T10419] OCFS2: File system is now read-only. [ 408.072203][T10419] (syz.3.952,10419,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 408.082924][T10419] (syz.3.952,10419,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 408.102888][T10419] (syz.3.952,10419,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 408.118096][T10419] (syz.3.952,10419,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 408.136263][T10419] (syz.3.952,10419,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 408.155086][T10419] (syz.3.952,10419,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 408.165193][T10419] (syz.3.952,10419,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 408.187578][T10419] (syz.3.952,10419,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 408.203476][T10419] (syz.3.952,10419,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 408.255540][T10419] (syz.3.952,10419,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 408.275307][T10419] (syz.3.952,10419,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 408.320598][T10419] (syz.3.952,10419,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 408.350009][T10419] (syz.3.952,10419,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 408.367689][T10419] (syz.3.952,10419,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 408.377409][T10419] (syz.3.952,10419,1):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 408.386226][T10419] (syz.3.952,10419,1):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 408.397806][T10419] (syz.3.952,10419,1):ocfs2_dio_wr_get_block:2243 ERROR: status = -30 [ 408.423967][T10419] (syz.3.952,10419,1):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 408.569644][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 408.620133][ T5775] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 408.688712][T10427] loop2: detected capacity change from 0 to 32768 [ 408.733661][T10427] JBD2: Ignoring recovery information on journal [ 408.787060][T10427] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 408.818197][ T5775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.830341][ T5775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.841051][ T5775] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 408.850791][ T5775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.864088][ T5775] usb 5-1: config 0 descriptor?? [ 408.911645][ T28] audit: type=1800 audit(1770595824.711:57): pid=10427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.955" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 408.966352][T10427] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 409.012214][T10427] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 409.048359][T10427] OCFS2: File system is now read-only. [ 409.057722][T10427] (syz.2.955,10427,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 409.068868][T10427] (syz.2.955,10427,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 409.101205][T10427] (syz.2.955,10427,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 409.123907][T10427] (syz.2.955,10427,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 409.136611][T10427] (syz.2.955,10427,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 409.175503][T10427] (syz.2.955,10427,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 409.189917][T10427] (syz.2.955,10427,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 409.207689][T10427] (syz.2.955,10427,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 409.223652][T10427] (syz.2.955,10427,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 409.233935][T10427] (syz.2.955,10427,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 409.245243][T10427] (syz.2.955,10427,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 409.254967][T10427] (syz.2.955,10427,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 409.265184][T10427] (syz.2.955,10427,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 409.280127][T10427] (syz.2.955,10427,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 409.289685][T10427] (syz.2.955,10427,0):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 409.302520][T10427] (syz.2.955,10427,0):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 409.311316][T10427] (syz.2.955,10427,0):ocfs2_dio_wr_get_block:2243 ERROR: status = -30 [ 409.326895][T10427] (syz.2.955,10427,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 409.403328][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 409.527583][ T5775] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 409.573818][ T5775] cp2112 0003:10C4:EA90.001D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 409.683040][ T8] usb 1-1: USB disconnect, device number 19 [ 409.746766][ T5775] cp2112 0003:10C4:EA90.001D: Part Number: 0x82 Device Version: 0xFE [ 409.884357][ T5775] cp2112 0003:10C4:EA90.001D: error requesting SMBus config [ 409.921424][ T5775] cp2112: probe of 0003:10C4:EA90.001D failed with error -32 [ 410.475803][ T5812] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 410.547882][T10461] loop3: detected capacity change from 0 to 32768 [ 410.565061][T10461] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.962 (10461) [ 410.588975][T10461] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 410.599446][T10461] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 410.608788][T10461] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 410.619518][T10461] BTRFS info (device loop3): trying to use backup root at mount time [ 410.627695][T10461] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 410.637745][T10461] BTRFS info (device loop3): force zstd compression, level 3 [ 410.645209][T10461] BTRFS info (device loop3): enabling disk space caching [ 410.652385][T10461] BTRFS info (device loop3): force clearing of disk cache [ 410.659654][T10461] BTRFS info (device loop3): disk space caching is enabled [ 410.674428][ T5812] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 410.697149][ T5812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.709852][ T5812] usb 3-1: config 0 has no interface number 0 [ 410.735476][ T5812] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 410.757951][T10461] BTRFS info (device loop3): auto enabling async discard [ 410.760684][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.784588][T10461] BTRFS info (device loop3): rebuilding free space tree [ 410.807888][ T5812] usb 3-1: Product: syz [ 410.812311][T10461] BTRFS info (device loop3): disabling free space tree [ 410.819410][T10461] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 410.821677][ T5812] usb 3-1: Manufacturer: syz [ 410.829223][T10461] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 410.882364][ T5812] usb 3-1: SerialNumber: syz [ 410.890120][ T28] audit: type=1800 audit(1770595826.681:58): pid=10461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.962" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 410.935008][ T5812] usb 3-1: config 0 descriptor?? [ 410.974804][ T5812] ims_pcu 3-1:0.41: Missing CDC union descriptor [ 410.993055][ T5812] ims_pcu: probe of 3-1:0.41 failed with error -22 [ 411.231145][T10463] loop0: detected capacity change from 0 to 32768 [ 411.284840][T10463] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 411.455802][ T5778] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 411.532391][ T5770] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 411.713604][ T23] usb 5-1: USB disconnect, device number 12 [ 412.572031][T10490] tipc: Enabling of bearer rejected, already enabled [ 413.343411][ T5812] usb 3-1: USB disconnect, device number 17 [ 413.438441][ T7146] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop3 scanned by udevd (7146) [ 413.793884][T10498] loop2: detected capacity change from 0 to 1024 [ 414.408262][T10489] loop3: detected capacity change from 0 to 32768 [ 414.431294][T10489] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 414.555959][T10494] loop4: detected capacity change from 0 to 32768 [ 414.555989][ T23] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 414.603247][ T7146] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 414.629997][T10494] JBD2: Ignoring recovery information on journal [ 414.699087][T10494] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 414.865652][ T28] audit: type=1800 audit(1770595830.661:59): pid=10494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.967" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 414.923141][T10494] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 414.984169][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 414.997858][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 415.008491][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.073795][T10494] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 415.093080][ T23] usb 3-1: config 0 descriptor?? [ 415.103428][ T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 415.111036][T10494] OCFS2: File system is now read-only. [ 415.121192][T10494] (syz.4.967,10494,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 415.143623][T10494] (syz.4.967,10494,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 415.153768][T10494] (syz.4.967,10494,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 415.162642][T10494] (syz.4.967,10494,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 415.184056][T10500] loop0: detected capacity change from 0 to 32768 [ 415.202620][T10494] (syz.4.967,10494,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 415.212894][T10494] (syz.4.967,10494,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 415.230051][T10494] (syz.4.967,10494,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 415.249161][T10494] (syz.4.967,10494,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 415.260735][T10500] debugfs: Directory 'B1DE653C00004D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 415.274657][T10494] (syz.4.967,10494,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 415.286098][T10494] (syz.4.967,10494,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 415.318010][T10500] JBD2: Ignoring recovery information on journal [ 415.336948][T10494] (syz.4.967,10494,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 415.354778][T10494] (syz.4.967,10494,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 415.365540][T10494] (syz.4.967,10494,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 415.377513][T10494] (syz.4.967,10494,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 415.388019][T10494] (syz.4.967,10494,0):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 415.396346][T10494] (syz.4.967,10494,0):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 415.404958][T10494] (syz.4.967,10494,0):ocfs2_dio_wr_get_block:2243 ERROR: status = -30 [ 415.413503][T10494] (syz.4.967,10494,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 415.470120][T10500] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 415.470884][ T8121] ocfs2: Unmounting device (7,4) on (node local) [ 415.615517][ T28] audit: type=1800 audit(1770595831.401:60): pid=10500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.969" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 415.770928][ T5773] ocfs2: Unmounting device (7,0) on (node local) [ 416.055772][ T27] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 416.208982][T10516] loop0: detected capacity change from 0 to 32768 [ 416.218138][T10516] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 416.272258][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.352014][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.426557][ T27] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 416.503689][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.637268][ T27] usb 4-1: config 0 descriptor?? [ 416.833142][ T7146] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 417.111668][ T27] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 417.154616][ T27] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 417.312359][ T27] cp2112 0003:10C4:EA90.001E: Part Number: 0x82 Device Version: 0xFE [ 417.330952][ T23] usb 3-1: USB disconnect, device number 18 [ 417.528075][ T27] cp2112 0003:10C4:EA90.001E: error requesting SMBus config [ 417.569640][T10536] tipc: Enabling of bearer rejected, already enabled [ 417.663715][ T27] cp2112: probe of 0003:10C4:EA90.001E failed with error -32 [ 417.665878][ T5812] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 418.519807][ T5812] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 418.529709][T10530] loop4: detected capacity change from 0 to 32768 [ 418.538244][ T5812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.557181][T10530] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 418.559040][ T5812] usb 1-1: config 0 has no interface number 0 [ 418.587017][ T5812] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 418.616803][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.625146][ T5812] usb 1-1: Product: syz [ 418.637678][ T5812] usb 1-1: Manufacturer: syz [ 418.659165][ T5812] usb 1-1: SerialNumber: syz [ 418.676065][ T5812] usb 1-1: config 0 descriptor?? [ 418.693773][ T5812] ims_pcu 1-1:0.41: Missing CDC union descriptor [ 418.701920][ T5812] ims_pcu: probe of 1-1:0.41 failed with error -22 [ 418.769059][ T7146] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 418.904935][T10541] loop4: detected capacity change from 0 to 1024 [ 419.977476][ T5812] usb 4-1: USB disconnect, device number 29 [ 420.772128][T10548] loop4: detected capacity change from 0 to 32768 [ 420.785256][T10548] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 421.051034][ T7146] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 421.090626][ T27] usb 1-1: USB disconnect, device number 20 [ 421.523224][T10556] loop0: detected capacity change from 0 to 32768 [ 421.533416][T10556] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 421.920780][ T5778] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 422.526328][T10552] loop4: detected capacity change from 0 to 32768 [ 422.546254][T10555] loop3: detected capacity change from 0 to 32768 [ 422.590899][T10552] JBD2: Ignoring recovery information on journal [ 422.601201][T10555] debugfs: Directory 'B1DE653C00004D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 422.694598][T10555] JBD2: Ignoring recovery information on journal [ 422.808284][T10552] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 422.858896][T10555] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 422.914097][ T28] audit: type=1800 audit(1770595838.711:61): pid=10552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.982" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 422.941812][T10552] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 422.983869][ T28] audit: type=1800 audit(1770595838.781:62): pid=10555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.984" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 422.989240][T10552] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 423.025530][ T5812] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 423.088739][T10552] OCFS2: File system is now read-only. [ 423.094290][T10552] (syz.4.982,10552,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 423.109644][T10552] (syz.4.982,10552,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 423.127875][T10552] (syz.4.982,10552,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 423.139322][T10552] (syz.4.982,10552,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 423.153233][T10552] (syz.4.982,10552,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 423.169425][T10552] (syz.4.982,10552,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 423.179277][T10552] (syz.4.982,10552,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 423.208712][T10552] (syz.4.982,10552,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 423.225537][T10552] (syz.4.982,10552,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 423.227740][ T5812] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 423.235303][T10552] (syz.4.982,10552,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 423.273269][ T5812] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 423.276691][T10552] (syz.4.982,10552,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 423.287410][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.301664][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 423.310076][T10552] (syz.4.982,10552,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 423.319258][T10552] (syz.4.982,10552,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 423.328549][T10552] (syz.4.982,10552,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 423.337867][T10552] (syz.4.982,10552,1):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 423.346321][T10552] (syz.4.982,10552,1):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 423.354889][T10552] (syz.4.982,10552,1):ocfs2_dio_wr_get_block:2243 ERROR: status = -30 [ 423.364462][ T5812] usb 1-1: config 0 descriptor?? [ 423.383395][ T5812] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 423.395623][T10552] (syz.4.982,10552,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 423.486115][ T8121] ocfs2: Unmounting device (7,4) on (node local) [ 424.152330][T10583] loop2: detected capacity change from 0 to 1024 [ 424.385609][ T27] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 424.470301][T10574] loop3: detected capacity change from 0 to 32768 [ 424.485181][T10574] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 424.588909][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.608570][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.612427][ T7146] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 424.642895][ T27] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 424.664456][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.699405][ T27] usb 5-1: config 0 descriptor?? [ 424.942993][T10586] loop2: detected capacity change from 0 to 32768 [ 424.952992][T10586] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 425.005673][ T23] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 425.079190][ T7146] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 425.364023][ T27] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 425.376369][ T27] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 425.389893][ T23] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 425.398801][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.409391][ T23] usb 4-1: config 0 has no interface number 0 [ 425.420120][ T23] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 425.484902][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.505441][ T23] usb 4-1: Product: syz [ 425.516450][ T23] usb 4-1: Manufacturer: syz [ 425.522103][ T23] usb 4-1: SerialNumber: syz [ 425.528454][ T27] cp2112 0003:10C4:EA90.001F: Part Number: 0x82 Device Version: 0xFE [ 425.548103][ T23] usb 4-1: config 0 descriptor?? [ 425.569864][ T23] ims_pcu 4-1:0.41: Missing CDC union descriptor [ 425.586658][ T23] ims_pcu: probe of 4-1:0.41 failed with error -22 [ 425.729442][ T27] cp2112 0003:10C4:EA90.001F: error requesting SMBus config [ 425.739173][ T27] cp2112: probe of 0003:10C4:EA90.001F failed with error -32 [ 425.784446][ T5812] usb 1-1: USB disconnect, device number 21 [ 427.159698][T10600] loop0: detected capacity change from 0 to 32768 [ 427.168526][T10600] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 427.478994][ T7146] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 427.748567][T10602] loop2: detected capacity change from 0 to 32768 [ 427.830943][T10602] JBD2: Ignoring recovery information on journal [ 427.952074][ T27] usb 5-1: USB disconnect, device number 13 [ 427.965455][ T9] usb 4-1: USB disconnect, device number 30 [ 428.084313][T10602] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 428.213614][ T28] audit: type=1800 audit(1770595844.011:63): pid=10602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.996" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 428.546750][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 429.167431][T10627] loop4: detected capacity change from 0 to 32768 [ 429.245516][ T8] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 429.406792][T10623] loop0: detected capacity change from 0 to 32768 [ 429.449117][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 429.479142][T10623] JBD2: Ignoring recovery information on journal [ 429.497257][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.532600][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.558008][ T8] usb 4-1: config 0 descriptor?? [ 429.567209][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 429.712471][T10623] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 429.812486][ T28] audit: type=1800 audit(1770595845.611:64): pid=10623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.997" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 429.955068][T10623] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 429.996605][T10623] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 430.013219][T10629] loop2: detected capacity change from 0 to 32768 [ 430.039414][T10629] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 430.065495][T10623] OCFS2: File system is now read-only. [ 430.082087][T10623] (syz.0.997,10623,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 430.115586][T10623] (syz.0.997,10623,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 430.133502][T10623] (syz.0.997,10623,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 430.151123][T10623] (syz.0.997,10623,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 430.160425][T10623] (syz.0.997,10623,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 430.168875][T10623] (syz.0.997,10623,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 430.177376][T10623] (syz.0.997,10623,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 430.186726][T10623] (syz.0.997,10623,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 430.195757][T10623] (syz.0.997,10623,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 430.204949][T10623] (syz.0.997,10623,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 430.214227][T10623] (syz.0.997,10623,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 430.245971][T10623] (syz.0.997,10623,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 430.255106][T10623] (syz.0.997,10623,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 430.284834][T10623] (syz.0.997,10623,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 430.302619][T10623] (syz.0.997,10623,1):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 430.310998][T10623] (syz.0.997,10623,1):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 430.327614][ T5871] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 430.329136][T10623] (syz.0.997,10623,1):ocfs2_dio_wr_get_block:2243 ERROR: status = -30 [ 430.354651][ T8] kernel write not supported for file /amidi2 (pid: 8 comm: kworker/0:0) [ 430.385740][T10623] (syz.0.997,10623,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 430.528700][ T5773] ocfs2: Unmounting device (7,0) on (node local) [ 430.871398][ T27] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 431.014113][T10642] loop4: detected capacity change from 0 to 32768 [ 431.027563][T10642] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1008 (10642) [ 431.056269][T10642] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 431.070874][T10642] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 431.080413][T10642] BTRFS info (device loop4): using free space tree [ 431.093117][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.104377][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.114533][ T27] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 431.124037][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.136202][ T27] usb 3-1: config 0 descriptor?? [ 431.181806][T10642] BTRFS info (device loop4): enabling ssd optimizations [ 431.189348][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 431.195878][T10642] BTRFS info (device loop4): auto enabling async discard [ 431.312110][ T8121] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 431.377414][ T9] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 431.393993][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.415590][ T9] usb 1-1: config 0 has no interface number 0 [ 431.428012][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 431.445908][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.454010][ T9] usb 1-1: Product: syz [ 431.476337][ T9] usb 1-1: Manufacturer: syz [ 431.481117][ T9] usb 1-1: SerialNumber: syz [ 431.498463][ T9] usb 1-1: config 0 descriptor?? [ 431.513295][ T9] ims_pcu 1-1:0.41: Missing CDC union descriptor [ 431.535128][ T9] ims_pcu: probe of 1-1:0.41 failed with error -22 [ 431.578892][ T27] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 431.605898][ T27] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 431.763985][ T5775] usb 4-1: USB disconnect, device number 31 [ 431.856587][ T27] cp2112 0003:10C4:EA90.0020: Part Number: 0x82 Device Version: 0xFE [ 432.111453][ T27] cp2112 0003:10C4:EA90.0020: error requesting SMBus config [ 432.320652][ T27] cp2112: probe of 0003:10C4:EA90.0020 failed with error -32 [ 432.988824][T10671] tipc: Enabling of bearer rejected, failed to enable media [ 433.188134][T10663] loop4: detected capacity change from 0 to 32768 [ 433.240154][T10663] JBD2: Ignoring recovery information on journal [ 433.380436][T10663] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 433.453875][ T28] audit: type=1800 audit(1770595849.251:65): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1009" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 433.505481][T10663] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 433.536805][T10663] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 433.563364][T10663] OCFS2: File system is now read-only. [ 433.598574][T10663] (syz.4.1009,10663,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 433.622561][ T27] usb 3-1: USB disconnect, device number 19 [ 433.646321][T10663] (syz.4.1009,10663,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 433.676134][T10663] (syz.4.1009,10663,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 433.684784][T10663] (syz.4.1009,10663,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 433.739698][T10663] (syz.4.1009,10663,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 433.759018][T10663] (syz.4.1009,10663,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 433.774597][T10663] (syz.4.1009,10663,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 433.789546][T10663] (syz.4.1009,10663,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 433.798893][T10663] (syz.4.1009,10663,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 433.813091][T10663] (syz.4.1009,10663,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 433.834298][T10663] (syz.4.1009,10663,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 433.861464][T10663] (syz.4.1009,10663,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 433.874169][T10663] (syz.4.1009,10663,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 433.886608][T10663] (syz.4.1009,10663,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 433.899401][T10663] (syz.4.1009,10663,0):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 433.945616][T10663] (syz.4.1009,10663,1):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 433.968704][T10663] (syz.4.1009,10663,1):ocfs2_dio_wr_get_block:2243 ERROR: status = -30 [ 433.999410][T10663] (syz.4.1009,10663,1):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 434.035820][ T8] usb 1-1: USB disconnect, device number 22 [ 434.180096][ T8121] ocfs2: Unmounting device (7,4) on (node local) [ 434.292182][T10682] loop3: detected capacity change from 0 to 32768 [ 434.344585][T10682] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 434.538514][T10685] loop2: detected capacity change from 0 to 32768 [ 434.557887][T10685] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 434.685987][ T7146] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 434.726908][ T23] kernel write not supported for file /amidi2 (pid: 23 comm: kworker/1:0) [ 434.791381][ T5778] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 435.210561][T10693] loop2: detected capacity change from 0 to 32768 [ 435.227362][T10693] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1018 (10693) [ 435.282922][T10693] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 435.293765][T10693] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 435.302619][T10693] BTRFS info (device loop2): using free space tree [ 435.419062][T10702] tipc: Enabling of bearer rejected, already enabled [ 435.464788][T10693] BTRFS info (device loop2): enabling ssd optimizations [ 435.472418][T10693] BTRFS info (device loop2): auto enabling async discard [ 435.662541][T10687] loop0: detected capacity change from 0 to 32768 [ 435.682630][ T5771] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 435.796479][T10687] JBD2: Ignoring recovery information on journal [ 435.808125][T10714] tipc: Enabling of bearer rejected, failed to enable media [ 435.855515][T10689] loop3: detected capacity change from 0 to 32768 [ 435.875651][T10689] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1017 (10689) [ 435.936734][T10689] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 435.961248][T10689] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 436.010425][T10687] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 436.021726][T10689] BTRFS info (device loop3): using free space tree [ 436.118199][ T28] audit: type=1800 audit(1770595851.911:66): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1015" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 436.173160][T10687] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 436.305616][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 436.327404][T10687] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 436.394879][T10687] OCFS2: File system is now read-only. [ 436.469398][T10687] (syz.0.1015,10687,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 436.489064][T10687] (syz.0.1015,10687,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 436.505192][T10689] BTRFS info (device loop3): enabling ssd optimizations [ 436.516467][T10687] (syz.0.1015,10687,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 436.535045][T10687] (syz.0.1015,10687,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 436.535826][T10689] BTRFS info (device loop3): auto enabling async discard [ 436.553809][T10687] (syz.0.1015,10687,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 436.576230][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.583155][T10687] (syz.0.1015,10687,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 436.610370][T10687] (syz.0.1015,10687,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 436.617048][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.630634][T10687] (syz.0.1015,10687,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 436.644088][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 436.650396][T10687] (syz.0.1015,10687,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 436.678194][T10687] (syz.0.1015,10687,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 436.686618][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.716880][ T9] usb 3-1: config 0 descriptor?? [ 436.726585][T10687] (syz.0.1015,10687,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 436.746876][T10687] (syz.0.1015,10687,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 436.766203][T10687] (syz.0.1015,10687,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 436.785855][T10687] (syz.0.1015,10687,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 436.797242][ T5770] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 436.806110][T10687] (syz.0.1015,10687,0):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 436.834423][T10687] (syz.0.1015,10687,0):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 436.855701][ T1188] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 436.857559][T10687] (syz.0.1015,10687,0):ocfs2_dio_wr_get_block:2243 ERROR: status = -30 [ 436.896212][T10687] (syz.0.1015,10687,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 437.074042][ T5773] ocfs2: Unmounting device (7,0) on (node local) [ 437.081984][ T1188] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 437.125530][ T1188] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.139796][ T9] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 437.186174][ T9] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 437.202174][ T1188] usb 5-1: config 0 has no interface number 0 [ 437.238793][T10744] bond0: entered promiscuous mode [ 437.243922][T10744] bond_slave_0: entered promiscuous mode [ 437.258653][ T1188] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 437.274992][T10744] bond_slave_1: entered promiscuous mode [ 437.280777][ T1188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.280807][ T1188] usb 5-1: Product: syz [ 437.280823][ T1188] usb 5-1: Manufacturer: syz [ 437.280839][ T1188] usb 5-1: SerialNumber: syz [ 437.305788][ T1188] usb 5-1: config 0 descriptor?? [ 437.352764][ T1188] ims_pcu 5-1:0.41: Missing CDC union descriptor [ 437.360595][ T9] cp2112 0003:10C4:EA90.0021: Part Number: 0x82 Device Version: 0xFE [ 437.375689][ T1188] ims_pcu: probe of 5-1:0.41 failed with error -22 [ 437.571027][ T9] cp2112 0003:10C4:EA90.0021: error requesting SMBus config [ 437.716402][ T9] cp2112: probe of 0003:10C4:EA90.0021 failed with error -32 [ 438.741300][T10755] loop0: detected capacity change from 0 to 4096 [ 438.967079][T10757] loop0: detected capacity change from 0 to 1024 [ 438.993232][T10757] EXT4-fs: Ignoring removed bh option [ 439.062403][T10757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.081875][T10747] loop3: detected capacity change from 0 to 32768 [ 439.094901][T10747] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 439.152441][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.338644][T10763] gtp0: entered promiscuous mode [ 439.350309][ T5778] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 439.370241][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 439.398730][T10764] tipc: Enabling of bearer rejected, already enabled [ 439.434425][T10763] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.729355][ T23] usb 5-1: USB disconnect, device number 14 [ 439.902428][T10766] loop3: detected capacity change from 0 to 32768 [ 439.923099][ T8] usb 3-1: USB disconnect, device number 20 [ 439.955801][T10766] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1031 (10766) [ 440.051634][T10766] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 440.064109][T10766] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 440.072898][T10766] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 440.083590][T10766] BTRFS info (device loop3): trying to use backup root at mount time [ 440.091797][T10766] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 440.101280][T10766] BTRFS info (device loop3): force zstd compression, level 3 [ 440.108926][T10766] BTRFS info (device loop3): enabling disk space caching [ 440.116191][T10766] BTRFS info (device loop3): force clearing of disk cache [ 440.123384][T10766] BTRFS info (device loop3): disk space caching is enabled [ 440.266977][T10766] BTRFS info (device loop3): auto enabling async discard [ 440.276441][T10766] BTRFS info (device loop3): rebuilding free space tree [ 440.301166][ T23] kernel write not supported for file /amidi2 (pid: 23 comm: kworker/1:0) [ 440.324383][T10766] BTRFS info (device loop3): disabling free space tree [ 440.332054][T10766] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 440.341886][T10766] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 440.400031][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.411056][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.421875][ T28] audit: type=1800 audit(1770595856.221:67): pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1031" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 440.818328][T10800] loop0: detected capacity change from 0 to 64 [ 440.874656][ T5770] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 441.088914][ T7146] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop3 scanned by udevd (7146) [ 441.223056][T10806] loop0: detected capacity change from 0 to 1024 [ 441.286627][T10806] EXT4-fs: Ignoring removed bh option [ 441.362951][T10810] loop4: detected capacity change from 0 to 256 [ 441.384263][T10806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.729947][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.936455][T10796] loop2: detected capacity change from 0 to 32768 [ 442.065781][T10796] JBD2: Ignoring recovery information on journal [ 442.132411][T10808] loop3: detected capacity change from 0 to 32768 [ 442.206028][ T23] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 442.221483][T10808] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 442.248656][T10796] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 442.377952][ T28] audit: type=1800 audit(1770595858.181:68): pid=10796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1036" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 442.409246][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.446046][T10796] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 442.468780][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.514632][T10826] loop0: detected capacity change from 0 to 2048 [ 442.537678][ T23] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 442.556964][T10826] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 442.567833][T10826] NILFS (loop0): mounting unchecked fs [ 442.567856][T10796] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 442.588054][ T7146] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 442.621912][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.632677][T10826] NILFS (loop0): recovery complete [ 442.647453][T10796] OCFS2: File system is now read-only. [ 442.656554][ T23] usb 5-1: config 0 descriptor?? [ 442.662507][T10796] (syz.2.1036,10796,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 442.677906][T10827] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 442.693524][T10796] (syz.2.1036,10796,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 442.702277][T10796] (syz.2.1036,10796,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 442.711765][T10796] (syz.2.1036,10796,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 442.735473][T10796] (syz.2.1036,10796,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 442.757320][T10796] (syz.2.1036,10796,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 442.766358][T10796] (syz.2.1036,10796,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 442.775880][T10796] (syz.2.1036,10796,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 442.830975][T10796] (syz.2.1036,10796,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 442.855675][T10796] (syz.2.1036,10796,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 442.870580][T10825] loop3: detected capacity change from 0 to 4096 [ 442.917597][T10796] (syz.2.1036,10796,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 442.981669][T10796] (syz.2.1036,10796,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 443.041517][T10825] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 443.061318][T10796] (syz.2.1036,10796,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 443.094641][T10796] (syz.2.1036,10796,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 443.117096][ T23] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 443.135036][T10825] ntfs3: loop3: Failed to load $Extend (-22). [ 443.146234][ T23] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 443.166116][T10796] (syz.2.1036,10796,1):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 443.174393][T10796] (syz.2.1036,10796,1):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 443.182995][T10825] ntfs3: loop3: Failed to initialize $Extend. [ 443.243792][T10796] (syz.2.1036,10796,1):ocfs2_dio_wr_get_block:2243 ERROR: status = -30 [ 443.260825][T10796] (syz.2.1036,10796,1):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 443.268426][ T28] audit: type=1800 audit(1770595859.071:69): pid=10825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1044" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 443.320254][ T23] cp2112 0003:10C4:EA90.0022: Part Number: 0x82 Device Version: 0xFE [ 443.420462][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 443.536276][ T23] cp2112 0003:10C4:EA90.0022: error requesting SMBus config [ 443.571857][ T23] cp2112: probe of 0003:10C4:EA90.0022 failed with error -32 [ 444.514556][T10837] loop2: detected capacity change from 0 to 32768 [ 444.524150][T10837] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 444.654535][ T7146] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 445.000736][ T9] usb 5-1: USB disconnect, device number 15 [ 445.896018][T10864] loop0: detected capacity change from 0 to 32768 [ 445.916075][T10864] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 446.141607][T10849] loop2: detected capacity change from 0 to 32768 [ 446.153157][T10855] loop4: detected capacity change from 0 to 32768 [ 446.211317][T10849] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 446.271405][T10855] JBD2: Ignoring recovery information on journal [ 446.319710][ T7146] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 446.504207][T10855] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 446.610419][ T5871] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 446.986323][ T8121] ocfs2: Unmounting device (7,4) on (node local) [ 447.026307][T10862] loop3: detected capacity change from 0 to 32768 [ 447.057427][T10862] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 447.272975][T10869] loop0: detected capacity change from 0 to 1024 [ 447.301966][T10869] EXT4-fs: Ignoring removed bh option [ 447.472639][T10869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.682533][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.075966][ T23] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 448.336824][T10887] loop3: detected capacity change from 0 to 32768 [ 448.375929][T10887] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1066 (10887) [ 448.394909][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.425673][T10887] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 448.436131][T10887] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 448.444885][T10887] BTRFS info (device loop3): turning on sync discard [ 448.451837][T10887] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 448.455686][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.462751][T10887] BTRFS info (device loop3): use zstd compression, level 3 [ 448.480310][T10887] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 448.491344][T10887] BTRFS info (device loop3): trying to use backup root at mount time [ 448.499578][T10887] BTRFS info (device loop3): enabling auto defrag [ 448.506121][T10887] BTRFS info (device loop3): using free space tree [ 448.565901][ T23] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 448.575816][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.620283][ T3478] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 448.650851][ T23] usb 3-1: config 0 descriptor?? [ 448.688034][T10884] loop0: detected capacity change from 0 to 32768 [ 448.697422][T10887] BTRFS error (device loop3): failed to load root extent [ 448.699646][T10884] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1064 (10884) [ 448.704632][T10887] BTRFS warning (device loop3): try to load backup roots slot 1 [ 448.723680][ T3478] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 448.751496][T10887] BTRFS warning (device loop3): couldn't read tree root [ 448.758755][T10887] BTRFS warning (device loop3): try to load backup roots slot 2 [ 448.769072][ T12] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 448.806077][T10887] BTRFS warning (device loop3): couldn't read tree root [ 448.813161][T10887] BTRFS warning (device loop3): try to load backup roots slot 3 [ 448.862258][T10887] BTRFS info (device loop3): enabling ssd optimizations [ 448.871979][T10887] BTRFS info (device loop3): rebuilding free space tree [ 448.920345][T10887] BTRFS info (device loop3): checking UUID tree [ 449.266596][T10908] loop4: detected capacity change from 0 to 32768 [ 449.280150][ T23] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 449.287446][T10908] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 449.320203][ T23] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 449.373057][ T5770] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 449.417732][ T23] cp2112 0003:10C4:EA90.0023: Part Number: 0x82 Device Version: 0xFE [ 449.620896][ T23] cp2112 0003:10C4:EA90.0023: error requesting SMBus config [ 449.687379][ T23] cp2112: probe of 0003:10C4:EA90.0023 failed with error -32 [ 449.852159][ T5778] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 450.084511][T10918] loop0: detected capacity change from 0 to 32768 [ 450.364016][ T7146] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (7146) [ 450.714139][T10914] loop4: detected capacity change from 0 to 32768 [ 450.731755][T10914] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 451.009808][ T5778] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 451.243664][T10928] loop0: detected capacity change from 0 to 32768 [ 451.255534][ T8] usb 3-1: USB disconnect, device number 21 [ 451.319968][T10928] JBD2: Ignoring recovery information on journal [ 451.412427][T10928] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 451.467663][ T28] audit: type=1800 audit(1770595867.261:70): pid=10928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1075" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 451.488400][ C0] vkms_vblank_simulate: vblank timer overrun [ 451.591220][T10935] tipc: Enabling of bearer rejected, already enabled [ 451.764589][ T5773] ocfs2: Unmounting device (7,0) on (node local) [ 451.872075][T10923] loop3: detected capacity change from 0 to 32768 [ 451.934480][T10923] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 451.962141][T10941] loop4: detected capacity change from 0 to 1024 [ 451.994958][T10941] EXT4-fs: Ignoring removed bh option [ 452.144984][T10941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.312418][ T5778] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 452.372627][ T8121] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.525585][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 452.722704][ T9] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 452.731272][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.763333][ T9] usb 1-1: config 0 has no interface number 0 [ 452.792428][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 452.811331][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.829140][ T9] usb 1-1: Product: syz [ 452.835727][ T8] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 452.854655][ T9] usb 1-1: Manufacturer: syz [ 452.860918][ T9] usb 1-1: SerialNumber: syz [ 452.873738][ T9] usb 1-1: config 0 descriptor?? [ 452.889056][ T9] ims_pcu 1-1:0.41: Missing CDC union descriptor [ 452.905668][ T9] ims_pcu: probe of 1-1:0.41 failed with error -22 [ 453.048814][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.065516][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.085446][ T8] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 453.115150][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.136885][ T8] usb 4-1: config 0 descriptor?? [ 453.159278][T10953] loop4: detected capacity change from 0 to 32768 [ 453.197585][T10953] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 453.758319][ T5778] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 453.802148][ T8] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 454.110033][ T8] cp2112 0003:10C4:EA90.0024: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 454.207496][ T8] cp2112 0003:10C4:EA90.0024: Part Number: 0x82 Device Version: 0xFE [ 454.243579][ T8] cp2112 0003:10C4:EA90.0024: error requesting SMBus config [ 454.277514][ T8] cp2112: probe of 0003:10C4:EA90.0024 failed with error -32 [ 454.475157][T10957] loop4: detected capacity change from 0 to 32768 [ 454.489325][T10957] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1086 (10957) [ 454.511639][T10957] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 454.522135][T10957] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 454.530991][T10957] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 454.541855][T10957] BTRFS info (device loop4): trying to use backup root at mount time [ 454.550060][T10957] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 454.559837][T10957] BTRFS info (device loop4): force zstd compression, level 3 [ 454.567345][T10957] BTRFS info (device loop4): enabling disk space caching [ 454.574455][T10957] BTRFS info (device loop4): force clearing of disk cache [ 454.581696][T10957] BTRFS info (device loop4): disk space caching is enabled [ 454.641934][T10957] BTRFS info (device loop4): auto enabling async discard [ 454.651665][T10957] BTRFS info (device loop4): rebuilding free space tree [ 454.682895][T10957] BTRFS info (device loop4): disabling free space tree [ 454.690218][T10957] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 454.700122][T10957] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 454.741843][ T28] audit: type=1800 audit(1770595870.541:71): pid=10957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1086" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 455.063862][ T8121] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 455.312929][ T27] usb 1-1: USB disconnect, device number 23 [ 455.693188][T10978] loop4: detected capacity change from 0 to 32768 [ 455.732520][T10978] JBD2: Ignoring recovery information on journal [ 455.747497][ T9] usb 4-1: USB disconnect, device number 32 [ 455.871176][T10978] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 455.908514][ T28] audit: type=1800 audit(1770595871.711:72): pid=10978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1087" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 456.062375][T10986] loop3: detected capacity change from 0 to 16 [ 456.106228][T10986] erofs: (device loop3): mounted with root inode @ nid 36. [ 456.168718][T10986] erofs: (device loop3): z_erofs_readahead: readahead error at folio 12 @ nid 36 [ 456.219295][T10986] syz.3.1090: attempt to access beyond end of device [ 456.219295][T10986] loop3: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 456.309690][T10986] syz.3.1090: attempt to access beyond end of device [ 456.309690][T10986] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 456.311101][ T8121] ocfs2: Unmounting device (7,4) on (node local) [ 456.457410][T10986] syz.3.1090: attempt to access beyond end of device [ 456.457410][T10986] loop3: rw=524288, sector=525144, nr_sectors = 8 limit=16 [ 456.532981][T10989] 9pnet_fd: Insufficient options for proto=fd [ 456.645282][T10991] tipc: Enabling of bearer rejected, already enabled [ 457.133207][T10980] loop0: detected capacity change from 0 to 32768 [ 457.599246][T11003] loop0: detected capacity change from 0 to 64 [ 457.873545][T10993] loop4: detected capacity change from 0 to 32768 [ 457.950245][T10993] JBD2: Ignoring recovery information on journal [ 457.985599][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 458.019575][T11010] 9pnet_fd: Insufficient options for proto=fd [ 458.222662][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.268945][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.289572][T10993] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 458.329881][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 458.405551][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.444548][T10997] loop2: detected capacity change from 0 to 32768 [ 458.466650][ T9] usb 4-1: config 0 descriptor?? [ 458.527100][T10997] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 458.732535][T11012] loop0: detected capacity change from 0 to 65536 [ 458.805827][ T8121] ocfs2: Unmounting device (7,4) on (node local) [ 458.823764][ T5871] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 458.829013][T11012] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 458.921100][ T9] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 458.931361][T11023] loop2: detected capacity change from 0 to 128 [ 458.944168][ T9] cp2112 0003:10C4:EA90.0025: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 458.970297][T11012] XFS (loop0): Ending clean mount [ 458.984010][T11012] XFS (loop0): Quotacheck needed: Please wait. [ 459.015655][T11023] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 459.097321][ T9] cp2112 0003:10C4:EA90.0025: Part Number: 0x82 Device Version: 0xFE [ 459.117274][T11012] XFS (loop0): Quotacheck: Done. [ 459.232421][ T5773] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 459.315556][ T9] cp2112 0003:10C4:EA90.0025: error requesting SMBus config [ 459.357492][ T9] cp2112: probe of 0003:10C4:EA90.0025 failed with error -32 [ 459.379680][T11026] loop2: detected capacity change from 0 to 256 [ 459.536464][T11026] FAT-fs (loop2): Directory bread(block 64) failed [ 459.543734][T11026] FAT-fs (loop2): Directory bread(block 65) failed [ 459.585752][T11026] FAT-fs (loop2): Directory bread(block 66) failed [ 459.592381][T11026] FAT-fs (loop2): Directory bread(block 67) failed [ 459.646917][T11028] tipc: Enabling of bearer rejected, already enabled [ 459.658129][T11026] FAT-fs (loop2): Directory bread(block 68) failed [ 459.690803][T11026] FAT-fs (loop2): Directory bread(block 69) failed [ 459.735029][T11026] FAT-fs (loop2): Directory bread(block 70) failed [ 459.755232][T11026] FAT-fs (loop2): Directory bread(block 71) failed [ 459.795619][T11026] FAT-fs (loop2): Directory bread(block 72) failed [ 459.812318][T11026] FAT-fs (loop2): Directory bread(block 73) failed [ 460.349932][T11033] loop0: detected capacity change from 0 to 32768 [ 460.407948][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 460.617338][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.639254][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.669307][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 460.715436][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 460.747411][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.836538][ T1188] usb 4-1: USB disconnect, device number 33 [ 461.015019][ T9] usb 5-1: config 0 descriptor?? [ 461.255940][T11048] loop3: detected capacity change from 0 to 4096 [ 461.290713][T11048] ntfs3: loop3: Primary boot: invalid bytes per MFT record 2 (-1). [ 461.311049][T11048] ntfs3: loop3: try to read out of volume at offset 0x1ffe00 [ 461.429033][T11052] tipc: Enabling of bearer rejected, already enabled [ 461.450022][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 461.485092][ T9] usbhid: probe of 5-1:0.0 failed with error -71 [ 461.704571][ T9] usb 5-1: USB disconnect, device number 16 [ 461.864778][T11057] loop5: detected capacity change from 0 to 7 [ 461.884080][ T7146] Dev loop5: unable to read RDB block 7 [ 461.890616][ T7146] loop5: AHDI p1 p2 p3 [ 461.894951][ T7146] loop5: partition table partially beyond EOD, truncated [ 461.902495][ T7146] loop5: p1 start 1818582900 is beyond EOD, truncated [ 461.914700][ T7146] loop5: p3 start 335544320 is beyond EOD, truncated [ 461.930241][T11057] Dev loop5: unable to read RDB block 7 [ 461.936215][T11057] loop5: AHDI p1 p2 p3 [ 461.940596][T11057] loop5: partition table partially beyond EOD, truncated [ 461.950410][T11057] loop5: p1 start 1818582900 is beyond EOD, truncated [ 461.958668][T11057] loop5: p3 start 335544320 is beyond EOD, truncated [ 462.097268][ T1188] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 462.308419][ T1188] usb 3-1: config 14 has an invalid interface number: 28 but max is 0 [ 462.320953][ T1188] usb 3-1: config 14 has no interface number 0 [ 462.328503][ T1188] usb 3-1: config 14 interface 28 has no altsetting 0 [ 462.355792][ T1188] usb 3-1: New USB device found, idVendor=045e, idProduct=04e7, bcdDevice=82.79 [ 462.375576][ T1188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.398845][ T1188] usb 3-1: Product: й [ 462.403218][ T1188] usb 3-1: Manufacturer:  [ 462.413089][ T1188] usb 3-1: SerialNumber: 䁢㯪갅둢ꆁ჋铑薝敂睙㽪癉祘Ⓞ춤ᘕ榝뾻聏煀躑춋攈弈贜圸톥뻝黁褉쫣ﳓꖪ푺˸ఇ媸 [ 462.515582][ T27] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 462.672498][ T1188] usb 3-1: USB disconnect, device number 22 [ 462.777079][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.799340][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.812077][ T27] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 462.824127][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.839206][ T27] usb 5-1: config 0 descriptor?? [ 463.150923][T11076] loop3: detected capacity change from 0 to 256 [ 463.331362][ T27] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 463.397205][ T27] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 463.533974][ T27] cp2112 0003:10C4:EA90.0026: Part Number: 0x82 Device Version: 0xFE [ 463.700723][T11085] tipc: Enabling of bearer rejected, already enabled [ 463.734947][ T27] cp2112 0003:10C4:EA90.0026: error requesting SMBus config [ 463.748443][ T27] cp2112: probe of 0003:10C4:EA90.0026 failed with error -32 [ 463.990065][T11087] loop2: detected capacity change from 0 to 32768 [ 464.056488][T11087] (syz.2.1128,11087,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 464.074812][T11087] (syz.2.1128,11087,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 464.158289][T11087] JBD2: Ignoring recovery information on journal [ 464.198642][T11087] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 464.292208][T11087] [ 464.294607][T11087] ====================================================== [ 464.301631][T11087] WARNING: possible circular locking dependency detected [ 464.308676][T11087] syzkaller #0 Not tainted [ 464.313147][T11087] ------------------------------------------------------ [ 464.320193][T11087] syz.2.1128/11087 is trying to acquire lock: [ 464.326266][T11087] ffff88805d57eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770 [ 464.335624][T11087] [ 464.335624][T11087] but task is already holding lock: [ 464.343014][T11087] ffff88805d1aa8e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 464.353382][T11087] [ 464.353382][T11087] which lock already depends on the new lock. [ 464.353382][T11087] [ 464.363824][T11087] [ 464.363824][T11087] the existing dependency chain (in reverse order) is: [ 464.372851][T11087] [ 464.372851][T11087] -> #4 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 464.381386][T11087] down_read+0x46/0x2e0 [ 464.386184][T11087] ocfs2_start_trans+0x3a8/0x6f0 [ 464.391684][T11087] ocfs2_modify_bh+0xe4/0x4c0 [ 464.396913][T11087] ocfs2_local_read_info+0x1445/0x1800 [ 464.402937][T11087] dquot_load_quota_sb+0x757/0xb80 [ 464.408597][T11087] dquot_load_quota_inode+0x2dc/0x5d0 [ 464.414510][T11087] ocfs2_enable_quotas+0x1c9/0x490 [ 464.420674][T11087] ocfs2_fill_super+0x417d/0x5010 [ 464.426228][T11087] mount_bdev+0x221/0x2d0 [ 464.431101][T11087] legacy_get_tree+0xea/0x180 [ 464.436334][T11087] vfs_get_tree+0x8c/0x280 [ 464.441396][T11087] do_new_mount+0x24b/0xa40 [ 464.446426][T11087] __se_sys_mount+0x2e7/0x3d0 [ 464.451639][T11087] do_syscall_64+0x55/0xa0 [ 464.456593][T11087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.463034][T11087] [ 464.463034][T11087] -> #3 (sb_internal#4){.+.+}-{0:0}: [ 464.470534][T11087] ocfs2_start_trans+0x2a9/0x6f0 [ 464.476049][T11087] ocfs2_mknod+0xf1d/0x2300 [ 464.481099][T11087] ocfs2_create+0x196/0x430 [ 464.486159][T11087] path_openat+0x12a0/0x3230 [ 464.491306][T11087] do_filp_open+0x1f5/0x430 [ 464.496340][T11087] do_sys_openat2+0x134/0x1d0 [ 464.501558][T11087] __x64_sys_openat+0x139/0x160 [ 464.506944][T11087] do_syscall_64+0x55/0xa0 [ 464.511896][T11087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.518320][T11087] [ 464.518320][T11087] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 464.528858][T11087] down_write+0x97/0x200 [ 464.533653][T11087] ocfs2_reserve_local_alloc_bits+0x120/0x2600 [ 464.540394][T11087] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 464.547314][T11087] ocfs2_lock_allocators+0x2d9/0x5f0 [ 464.553128][T11087] ocfs2_write_begin_nolock+0x1b2b/0x43f0 [ 464.559389][T11087] ocfs2_dio_wr_get_block+0xbba/0x1820 [ 464.565436][T11087] __blockdev_direct_IO+0x1775/0x3500 [ 464.571452][T11087] ocfs2_direct_IO+0x235/0x2a0 [ 464.576754][T11087] generic_file_direct_write+0x1d4/0x3e0 [ 464.582943][T11087] __generic_file_write_iter+0x11b/0x230 [ 464.589191][T11087] ocfs2_file_write_iter+0x167a/0x1e80 [ 464.595189][T11087] vfs_write+0x46c/0x990 [ 464.599975][T11087] ksys_write+0x150/0x260 [ 464.604834][T11087] do_syscall_64+0x55/0xa0 [ 464.609781][T11087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.616201][T11087] [ 464.616201][T11087] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 464.625154][T11087] down_write+0x97/0x200 [ 464.629934][T11087] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 464.636487][T11087] ocfs2_xattr_set+0x61b/0x13e0 [ 464.641899][T11087] ocfs2_set_acl+0x4e1/0x590 [ 464.647041][T11087] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 464.652601][T11087] vfs_set_acl+0x803/0xa60 [ 464.657549][T11087] path_setxattr+0x41d/0x5d0 [ 464.662667][T11087] __x64_sys_setxattr+0xbb/0xd0 [ 464.668049][T11087] do_syscall_64+0x55/0xa0 [ 464.673100][T11087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.679519][T11087] [ 464.679519][T11087] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 464.687396][T11087] __lock_acquire+0x2df1/0x7d40 [ 464.692805][T11087] lock_acquire+0x19e/0x420 [ 464.697851][T11087] down_read+0x46/0x2e0 [ 464.702547][T11087] ocfs2_init_acl+0x30a/0x770 [ 464.707771][T11087] ocfs2_mknod+0x140f/0x2300 [ 464.712913][T11087] vfs_mknod+0x32b/0x360 [ 464.717694][T11087] do_mknodat+0x386/0x500 [ 464.722603][T11087] __x64_sys_mknod+0x8e/0xa0 [ 464.727846][T11087] do_syscall_64+0x55/0xa0 [ 464.732868][T11087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.739310][T11087] [ 464.739310][T11087] other info that might help us debug this: [ 464.739310][T11087] [ 464.749584][T11087] Chain exists of: [ 464.749584][T11087] &oi->ip_xattr_sem --> sb_internal#4 --> &journal->j_trans_barrier [ 464.749584][T11087] [ 464.763520][T11087] Possible unsafe locking scenario: [ 464.763520][T11087] [ 464.771011][T11087] CPU0 CPU1 [ 464.776405][T11087] ---- ---- [ 464.781815][T11087] rlock(&journal->j_trans_barrier); [ 464.787200][T11087] lock(sb_internal#4); [ 464.793975][T11087] lock(&journal->j_trans_barrier); [ 464.801849][T11087] rlock(&oi->ip_xattr_sem); [ 464.806587][T11087] [ 464.806587][T11087] *** DEADLOCK *** [ 464.806587][T11087] [ 464.814754][T11087] 8 locks held by syz.2.1128/11087: [ 464.819992][T11087] #0: ffff888059d84418 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 464.829345][T11087] #1: ffff88805d57ed98 (&type->i_mutex_dir_key#18/1){+.+.}-{3:3}, at: filename_create+0x20c/0x480 [ 464.840115][T11087] #2: ffff88805d6fa658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 464.853798][T11087] #3: ffff88805d6f9818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 464.867845][T11087] #4: ffff88805d5bb498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2600 [ 464.881891][T11087] #5: ffff888059d84608 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0xf1d/0x2300 [ 464.891261][T11087] #6: ffff88805d1aa8e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 464.902068][T11087] #7: ffff888059d82990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f7a/0x21c0 [ 464.911929][T11087] [ 464.911929][T11087] stack backtrace: [ 464.917832][T11087] CPU: 1 PID: 11087 Comm: syz.2.1128 Not tainted syzkaller #0 [ 464.925295][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 464.935422][T11087] Call Trace: [ 464.938728][T11087] [ 464.941764][T11087] dump_stack_lvl+0x18c/0x250 [ 464.946466][T11087] ? load_image+0x400/0x400 [ 464.950985][T11087] ? show_regs_print_info+0x20/0x20 [ 464.956223][T11087] ? print_circular_bug+0x12b/0x1a0 [ 464.961476][T11087] check_noncircular+0x2fc/0x400 [ 464.966523][T11087] ? print_deadlock_bug+0x5d0/0x5d0 [ 464.971741][T11087] ? _find_first_zero_bit+0xd3/0x100 [ 464.977039][T11087] ? add_lock_to_list+0x191/0x280 [ 464.982077][T11087] __lock_acquire+0x2df1/0x7d40 [ 464.986966][T11087] ? verify_lock_unused+0x140/0x140 [ 464.992185][T11087] ? __lock_acquire+0x7d40/0x7d40 [ 464.997225][T11087] ? do_raw_spin_lock+0x11f/0x2c0 [ 465.002397][T11087] lock_acquire+0x19e/0x420 [ 465.006910][T11087] ? ocfs2_init_acl+0x30a/0x770 [ 465.011808][T11087] ? __might_sleep+0xe0/0xe0 [ 465.016408][T11087] ? read_lock_is_recursive+0x20/0x20 [ 465.021887][T11087] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 465.028509][T11087] ? dquot_alloc_inode+0x772/0xa40 [ 465.033642][T11087] down_read+0x46/0x2e0 [ 465.037918][T11087] ? ocfs2_init_acl+0x30a/0x770 [ 465.042832][T11087] ocfs2_init_acl+0x30a/0x770 [ 465.047627][T11087] ? ocfs2_mknod_locked+0x159/0x290 [ 465.052861][T11087] ? ocfs2_acl_chmod+0x330/0x330 [ 465.057834][T11087] ? dquot_alloc_inode+0x8ac/0xa40 [ 465.063468][T11087] ? dquot_alloc_inode+0x15e/0xa40 [ 465.068614][T11087] ? ocfs2_block_signals+0x9b/0xe0 [ 465.073800][T11087] ? ocfs2_init_security_get+0x139/0x1a0 [ 465.079558][T11087] ocfs2_mknod+0x140f/0x2300 [ 465.084182][T11087] ? ocfs2_mkdir+0x430/0x430 [ 465.088788][T11087] ? verify_lock_unused+0x140/0x140 [ 465.094010][T11087] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 465.099760][T11087] ? ocfs2_inode_unlock_tracker+0x270/0x2e0 [ 465.105710][T11087] ? __lock_acquire+0x7d40/0x7d40 [ 465.110862][T11087] ? __rwlock_init+0x150/0x150 [ 465.115686][T11087] ? do_raw_spin_unlock+0x121/0x230 [ 465.121295][T11087] ? put_pid+0xde/0x120 [ 465.125485][T11087] ? ocfs2_permission+0x117/0x1e0 [ 465.130621][T11087] ? ocfs2_getattr+0x3a0/0x3a0 [ 465.135410][T11087] ? from_kgid+0x16d/0x690 [ 465.139855][T11087] ? make_kgid+0x660/0x660 [ 465.144346][T11087] ? apparmor_path_mknod+0x1ba/0x240 [ 465.149653][T11087] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 465.154621][T11087] ? ocfs2_getattr+0x3a0/0x3a0 [ 465.159402][T11087] ? bpf_lsm_inode_mknod+0x9/0x10 [ 465.164448][T11087] ? security_inode_mknod+0xc7/0x110 [ 465.169777][T11087] vfs_mknod+0x32b/0x360 [ 465.174045][T11087] do_mknodat+0x386/0x500 [ 465.178762][T11087] ? do_o_path+0x200/0x200 [ 465.183299][T11087] __x64_sys_mknod+0x8e/0xa0 [ 465.187912][T11087] do_syscall_64+0x55/0xa0 [ 465.192392][T11087] ? clear_bhb_loop+0x40/0x90 [ 465.197078][T11087] ? clear_bhb_loop+0x40/0x90 [ 465.201768][T11087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.207672][T11087] RIP: 0033:0x7f2219f9aeb9 [ 465.212097][T11087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.231892][T11087] RSP: 002b:00007f221ae0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 465.240326][T11087] RAX: ffffffffffffffda RBX: 00007f221a215fa0 RCX: 00007f2219f9aeb9 [ 465.248401][T11087] RDX: 0000000000000000 RSI: 0000000008001420 RDI: 0000200000000040 [ 465.256568][T11087] RBP: 00007f221a008c1f R08: 0000000000000000 R09: 0000000000000000 [ 465.264590][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.272601][T11087] R13: 00007f221a216038 R14: 00007f221a215fa0 R15: 00007fff11b9d778 [ 465.280594][T11087] [ 465.283718][ C1] sched: RT throttling activated [ 465.371460][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 465.379763][ T9] usb 5-1: USB disconnect, device number 17 [ 465.445782][ T1188] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 465.647309][ T1188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.658608][ T1188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.670181][ T1188] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 465.683218][ T1188] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.692463][ T1188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.702214][ T1188] usb 4-1: config 0 descriptor?? [ 466.118932][ T1188] usbhid 4-1:0.0: can't add hid device: -71 [ 466.125080][ T1188] usbhid: probe of 4-1:0.0 failed with error -71 [ 466.133925][ T1188] usb 4-1: USB disconnect, device number 34