last executing test programs: 6.152211314s ago: executing program 0 (id=5710): io_setup(0x9, &(0x7f0000000000)=0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x20, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000040)='\x00', 0x1, 0x400}]) 5.817495514s ago: executing program 0 (id=5714): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x2, 0x67}, 0x2) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 5.065648797s ago: executing program 1 (id=5722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) 4.792039634s ago: executing program 0 (id=5726): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b00010400000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0xffffffffffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f0000000780)=[{&(0x7f0000000480)=""/33, 0x21}, {0x0}], 0x2) 4.574395511s ago: executing program 1 (id=5727): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) io_setup(0x1, 0x0) 3.557407232s ago: executing program 2 (id=5736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0) 3.338939856s ago: executing program 2 (id=5738): syz_mount_image$jfs(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0xa, &(0x7f0000006600)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRES64, @ANYRES8, @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES32], 0xfe, 0x625a, &(0x7f0000006680)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10000, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.194034212s ago: executing program 3 (id=5739): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x201}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@data_journal}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 2.921406823s ago: executing program 1 (id=5741): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4) 2.697515995s ago: executing program 3 (id=5743): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x5, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 2.516518993s ago: executing program 1 (id=5744): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)=""/26, 0x1a}, 0x2}], 0x1, 0x10122, 0x0) 2.499503023s ago: executing program 2 (id=5745): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xaf}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x200}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000840) 2.42103196s ago: executing program 4 (id=5746): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x80000) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 2.378275876s ago: executing program 3 (id=5747): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r0, 0xee01, 0x0) 2.272600867s ago: executing program 4 (id=5748): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f00000000c0)={[{@lazytime}, {@uqnoenforce}, {@quota}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$eJzs3Am4pnMBuP/3DGOXMVRSaiqiRdYsUWYGMxSSJdqRJWUpqdCmRUoqItqzb9nKEsrWSrK3UEKoZIm02Ib5X2fmDGPcpF+//+VX931f1znv+z7v8zzn+34/z3KO5mrzSRtPHAzmGkxv3GDWzr1m8pQxV21w+5FbLXjMcqfcvf8jV1x8/MjjhJHHiYPBYNTI20PTl40dnHraqMHs05Y/3LxzzzM0/2Cw/MjLkf0MVp7+MP/lM9abOkuzDnTo4W/7TP+a1gLDP2L4yWH773X4YDAYM9P2Q4PB0J6P+qDSNp8wedLDVg+5DVuNHnk+89cc07/mv2gwmP+MAR8fM6879CR8pOGfueeLzhm9wZPws//r2nzC5HVn8R8+F2cbWbby8Dk+6zlobNbj/NYltlh1ZAqnHW+DwfAl7hHnyn9Fm0+YtN7gsa/zgyNXu2CfqdOvm3MOpt8o5h4MBvOMXF/ne7Jd6j9rwsQVpt2zZ7weYZ9xLO9Jx8XxbznpweGb9GAwWGgwGLvOjHtBVVVV/Xc0YeIKa8L9f67Hu/+ffPKiZ3T/r6qq+u9t3QkTVxi+189y/5/v8e7/uyx64cem/7f/8StP3+rBJ/dDVFVV1b/VpHXx/j/m8e7/K6956Xrd/6uqqv5722j9aff/+Wa5/y/8ePf/N5602mIj6834veGBmXY5NNP/nnD/TMtnm2n5fTMtHz3TfmZef46Zlt8z0/I5h9+D9ccNBmNn/HvBKQ8vHjtu+L2R5ffOtHz8w/9OZ/G1Zlo+Yablk2ZaPnFkrMPLJ8+0fPJM66/zOFNdVVX1/0wbrTBpzcFM/85+ZPEiM96n+//5Z1679JM13qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqvrv7MHbzzpnMBgMDQaDUYPBlMHI85kfB1OnTp06/Prk8y677Ekb6P8bDZ17zeQpY67a4PYjt1rwmOVOuXv/h2fpv7b//k9Q/0nD/nMdN24w2GnTJ3so9STU+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iHrz9rHNGjoFRg8GUwcjzPWc8nrnfG940suqqm51y50EPb7n4+O1Hnp17zeQp2z8JY38SGhr+rGOu2uD2I7da8JjlTrl7//+Bs+e//xPUf9I0/+2HBoOR83vM8Lm8wYSNNllqMBgcdOcpm600eOi9VYbfW23sbIPZpm261LTvay/OO95znemP44e/LfzQPk6etv91px4629Asg5ipV5x7w5Fv3/zuFWd9XPKxP8eoGU8Ov+70u6ZOnTr1EQtHmusxNp6x/xmfZdbzfGTsSw2PfZldd3zXMu/ZfY+lt99xy+222W6bnZZbYZUVV1p+uZVWfdky226/wzbLTv/+GHM2btr3NZ/InM0365zdPmHmOZv1sz3WnI17/DmbtscpewxtMmPOZv8352zNx5+zcduP/KDFx48ebDFtaoYGg8XXGj3YbfjFcnMOBouvPbLuIsPrrj521GCw38MfdPjZnA8dg0N7Dq+z+aSNJz48skd/wkddpx+x4uLjRx4njDxOnD7EcYOHD8Wxg1NPGzU8F4+Y5nnnnmdo/sFg+ZGXI/sZrDry7iEz1ps6S7MOdOjhb/tM/5rWAsM7GX7yjmXPunr4XJxl+/8/+j+6/j/Ka5WhhyZqaORrZJ3pXhMmr/vwz5o2DcNzN9vIspWHTWads/+bPWq842YfjHmc8U5ad+IKw4tnmf8Zm+DxdccSF3xg+rE1fuXpWz34f4xC453vcca77gQc73yPN97jPnjJadN39X9tvLNc69ab9n38E7nWDR7/Wjcb7WCbixeb9Vr36sce4iPO4xlzNOcsKz3WtW63g5ffc3j/4x//Wrfe8NhHP+JaN2owWHzNGde64QvfpNGD/YZfLD/8YvLowTHDL1aY9mLuwXnDL176tp132Hp4wToz5mTZ4f2OHzs0zf2ClW9ZcuoBU6euNTKW8WMfOdaR42PczPfzCWOnT+aMbWfsd3jVGfu9+enT35s0st8J/8Z+Z2xL471zgenvTR7Z78RZ9jv6cfY7Y9tHnQ9LDT104XqM682kWa43I3/jzPhxj/iaY/rX/BcNBvOfQb6zrPsvr5l0/s71OOOdMHGFNYfHN8v5+9DhSOfvJZOvGr5XzD8YDBYaDMauM2Ps/2ZDjzXe2R9/vBNhvLM/3nivOHbH9f8vjHcw03gfcZxtvtH0Y2WdkeNs8r9x/M7Ydtbr2Ohp706/7K/zRK5j4x51HfvobKNmmeyZeqzf2baG9ac/X+Th33OvOfHoGXM/epb9/qvf2Wb6LENwHRszy9/zo9a5fjBEc77ncatfOnTg48/56MEj/7aYMecztn28OZ/8ROb8WY8/50/09+Slnj/9/dGzjH/mOd9w32d+ZsaczzHLfv/VnE9+/HvHo+d8/GA0zfmy902ft8e7nj7WnM/YdsacD3/E1cbOPlh7+J41MueTnsicL/J/5zifB9af/nybhxadfeQpr5sx57PO8b+a80n/7pyPe+g4X3zae88bNZhjjsFuW+666y7LTf8+4+Xy07/zteiea6bP8+PdSx/LaMa2j3derPVEjMY8IaOhf2W06OyPZfTwqXXEzrs87f/0WrTWv2s04GvRVUdPn7fH+73oseZ8xrZ0H1x4pu1n/Tt0o/Wn/d493yz3wRmb4H3w7DPX23vGLkc2e2CWYc64r94/0/LZZlp+30zLR8+0n5nXn2Om5ffMtHz4I8wx0/ozWMcN/807snzKw6uPHf7ladzI8ntnWj7+4W0XX2um5RNmWj5ppuUTHz40Fp880/LJM62/zuDfbMZ/k95+1ot8PdH677/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFPXj7WeeMHAOjBoMpg+nPh0YeB3sObXjbGsOPg8Fg9MonTN3wyR7vk9zQuddMnjLmqg1uP3KrBY9Z7pS79/8fOHv++z9B/SdN899+aDAYOb/HbD8YDDaYsNEmSw0Ggw2nnrDyqMFD7y0y/N7qY0cNBvsNPWIHcz60ztCew+tsPmnjiYPBXCNrjHvUD33UefSIFRcfP/I4YeRx4vTr07jBw8fr2MGpp40azD5t+cPNO/c8Q/MPBsuPvBzZz2Dl6Q/zXz5jvamzNOtAhx7+ts/0r2ktMPwjhp/stt3kZw/P1Szb/z/TjGv19qP+5aqd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93/55/R8v/Wom6y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u3/ff+7/X8ZRT06d/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3IO3n3XOyDEwajCYMpj+fGjPkcfB0EmnvnDkEBm9+5VHHfpkj/dJbujcayZPGXPVBrcfudWCxyx3yt37/w+cPf/9n6D+k6b5bz80GIyc32O2HwwGG0zYaJOlBoPBoUddufuowUPvLTL83upjRw0G+w09YgdzPrTO0J7D62w+aeOJg8FcI2uMe9QPfdR59IgVFx8/8jhh5HHi9OvTuMHDx+vYwamnjRrMPm35w8079zxD8w8Gy4+8HNnPYOXpD/NfPmO9qbM060CHHv62z/SvaS0w/COGn+w13zUnDc/VLNv/P9OMa/X2o/7lqp3/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+7B2886Z+QYGDUYTBlMfz5q5HFoz5tu/PAmw4/DrxdcZ+9rnuzxPskNnXvN5Cljrtrg9iO3WvCY5U65e///gbPnv/8T1H/SsP9cx40bDHba9MkeSj0Jdf67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uAdvP+uckaejHl46as+OC2zo3GsmTxlz1Qa3H7nVgscsd8rd+z/ZA/pPewz/j+aPWfw/lj9m8f94/pjF/xP5Yxb/vfLHLP6fzB+z+O+dP2bx/1T+mMX/0/ljFv998scs/p/JH7P475s/ZvH/bP6Yxf9z+WMW/8/nj1n898sfs/jvnz9m8f9C/pjF/4D8MYv/gfljFv8v5o9Z/A/KH7P4H5w/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8v5k/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi/+38scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/2/ljFv/v5I9Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/7v5Yxb/M/LHLP5n5o9Z/M/KH7P4fy9/zOL//fwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/p/ljFv8L8scs/hfmj1n8f5Y/ZvG/KH/M4v/z/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/xf5Yxb/X+aPWfx/lT9m8f91/pjF/6r8MYv/1fljFv/f5I9Z/H+bP2bxvyZ/zOL/u/wxi/+1+WMW/+vyxyz+1+ePWfx/nz9m8b8hf8zif2P+mMX/pvwxi/8f8scs/n/MH7P4/yl/zOJ/c/6Yxf/P+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bx/0v+mMX/jvwxi/+d+WMW/7/mj1n878ofs/j/LX/M4v/3/DGL/z/yxyz+/8wfs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/yn5Yxb/B/LHLP4P5o9Z/Kfmj0n8Zxvkj1n8h/LHLP6j8scs/rPlj1n8Z88fs/iPzh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4PyV/zOK/QP6YxX9M/pjFf8H8MYv/2Pwxi/9C+WMW/4Xzxyz+T80fs/g/LX/M4v/0/DGL/yL5Yxb/Z+SPWfwXzR+z+D8zf8zi/6z8MYv/YvljFv9n549Z/J+TP2bxH5c/ZvF/bv6Yxf95+T+q2UceDf7Pzx+znP+L549Z/JfIH7P4vyB/zOK/ZP6YxX+p/DGL/wvzxyz+L8ofs/i/OH/M4v+S/DGL/9L5Yxb/l+aPWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/l+WPWfxXyh+z+K+cP2bxXyV/zOK/av6Yxf/l+WMW/9Xyxyz+q+ePWfxfkT9m8X9l/pjFf438MYv/+Pwxi/+E/DGL/8T8MYv/mvljFv+18scs/mvnj1n8J+WPWfwnq/xne8JrWvzXUfk/8Sz+6+aPWfxflT9m8X91/pjFf738MYv/+vljFv8N8scs/q/JH7P4b5g/ZvF/bf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/F+XP2bx3yx/zOK/ef6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvHfIn/M4r9l/pjFf6v8MYv/2/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/2/DGL//b5Yxb/d+SPWfzfmT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3flj1n8350/ZvHfJX/M4v+e/DGL/675Yxb/9+aPWfzflz9m8X9//pjFf7f8MYv/7vljFv898scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P475k/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvHfK3/M4v/J/DGL/975Yxb/T+WPWfw/nT9m8d8nf8zi/5n8MYv/vvljFv/P5o9Z/D+XP2bx/3z+mMV/v/wxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/6D8MYv/wfljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8rf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/nT9m8f9O/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5s/ZvE/I3/M4n9m/pjF/6z8MYv/9/LHLP7fzx+z+J+dP2bxPyf/aR042yNfW/zPzR+z+J+XP2bxPz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/hfkj1n8L8wfs/j/LH/M4n9R/pjF/+f5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/L/LHLP6/zB+z+P8qf8zi/+v8MYv/VfljFv+r88cs/r/JH7P4/zZ/zOJ/Tf6Yxf93+WMW/2vzxyz+1+WPWfyvzx+z+P8+f8zif0P+mMX/xvwxi/9N+WMW/z/kj1n8/5g/ZvH/U/6Yxf/m/DGL/5/zxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOL/l/wxi/8d+WMW/zvzxyz+f80fs/jflT9m8f9b/pjF/+/5Yxb/f+SPWfz/mT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+U/LHLP4P5I9Z/B/MH7P4T80fk/jPPsgfs/gP5Y9Z/Eflj1n8Z8sfs/jPnj9m8R+dP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvF/Sv6YxX+B/DGL/5j8MYv/gvljFv+x+WMW/4Xyxyz+C+ePWfyfmj9m8X9a/pjF/+n5Yxb/RfLHLP7PyB+z+C+aP2bxf2b+mMX/WfljFv/F8scs/s/OH7P4Pyd/zOI/Ln/M4v/c/DGL//Pyxyz+z88fs/gvnj9m8V8if8zi/4L8MYv/kvljFv+l8scs/i/MH7P4vyh/zOL/4vwxi/9L8scs/kvnj1n8X5o/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8X5Y/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+X549Z/FfLH7P4r54/ZvF/Rf6Yxf+V+WMW/zXyxyz+4/PHLP4T8scs/hPzxyz+a+aPWfzXyh+z+K+dP2bxn5Q/ZvGfnD9m8V8nf8ziv27+mMX/VfljFv9X549Z/NcT+q/xBNax+K8v9H8iWfw3yB+z+L8mf8ziv2H+mMX/tYPL8ocs/ht1/mMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/6EH+mMV/KH/M4j8qf8ziP1v+mMV/9vwxi//o/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/U/LHLP4L5I9Z/Mfkj1n8F8wfs/iPzR+z+C+UP2bxXzh/zOL/1Pwxi//T8scs/k/PH7P4L5I/ZvF/Rv6YxX/R/DGL/zPzxyz+z8ofs/gvlj9m8X92/pjF/zn5Yxb/cfljFv/n5o9Z/J+XP2bxf37+mMV/8fwxi/8S+WMW/xfkj1n8l8wfs/gvlT9m8X9h/pjF/0X5Yxb/F+ePWfxfkj9m8V86f8zi/9L8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8zi/7L8MYv/SvljFv+V88cs/qvkj1n8V80fs/i/PH/M4r9a/pjFf/X8MYv/K/LHLP6vzB+z+K+RP2bxH58/ZvGfkD9m8Z+YP2bxXzN/zOK/Vv6YxX/t/DGL/6T8MYv/5Pwxi/86+WMW/3Xzxyz+r8ofs/i/On/M4r9e/pjFf/38MYv/BvljFv/X5I9Z/DfMH7P4vzZ/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6vyx+z+G+WP2bx3zx/zOL/+vwxi/8b8scs/m/MH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4b5E/ZvHfMn/M4r9V/pjF/235Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvF/e/6YxX/7/DGL/zvyxyz+78wfs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/+78scs/u/OH7P475I/ZvF/T/6YxX/X/DGL/3vzxyz+78sfs/i/P3/M4r9b/pjFf/f8MYv/HvljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/PfMH7P4fzR/zOL/sfwxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8f9M/pjFf9/8MYv/Z/PHLP6fyx+z+H8+f8ziv1/+mMV///wxi/8X8scs/gfkj1n8D8wfs/h/MX/M4n9Q/pjF/+D8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zi/838MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfy/lT9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+384fs/h/J3/M4n9K/pjF/9T8MYv/afljFv/T88cs/t/NH7P4n5E/ZvE/M3/M4n9W/pjF/3v5Yxb/7+ePWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+P80fs/hfkD9m8b8wf8zi/7P8MYv/RfljFv+f549Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/r/IH7P4/zJ/zOL/q/wxi/+v88cs/lflj1n8r84fs/j/Jn/M4v/b/DGL/zX5Yxb/3+WPWfyvzR+z+F+XP2bxvz5/zOL/+/wxi/8N+WMW/xvzxyz+N+WPWfz/kD9m8f9j/pjF/0/5Yxb/m/PHLP5/zh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/1/yxyz+d+SPWfzvzB+z+P81f8zif1f+mMX/b/ljFv+/549Z/P+RP2bx/2f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+E/JH7P4P5A/ZvF/MH/M4j81f0ziP8cgf8ziP5Q/ZvEflT9m8Z8tf8ziP3v+mMV/dP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjF/yn5Yxb/BfLHLP5j8scs/gvmj1n8x+aPWfwXyh+z+C+cP2bxf2r+mMX/afljFv+n549Z/BfJH7P4PyN/zOK/aP6Yxf+Z+WMW/2flj1n8F8sfs/g/O3/M4v+c/DGL/7j8MYv/c/PHLP7Pyx+z+D8/f8ziv3j+mMV/ifwxi/8L8scs/kvmj1n8l8ofs/i/MH/M4v+i/DGL/4vzxyz+L8kfs/gvnT9m8X9p/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8X9Z/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8X54/ZvFfLX/M4r96/pjF/xX5Yxb/V+aPWfzXyB+z+I/PH7P4T8gfs/hPzB+z+K+ZP2bxXyt/zOK/dv6YxX9S/pjFf3L+mMV/nfwxi/+6+WMW/1flj1n8X50/ZvFfL3/M4r9+/pjFf4P8MYv/a/LHLP4b5o9Z/F+bP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/1+WPWfw3yx+z+G+eP2bxf33+mMX/DfljFv835o9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/LfIH7P4b5k/ZvHfKn/M4v+2/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4vz1/zOK/ff6Yxf8d+WMW/3fmj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMX/XfljFv93549Z/HfJH7P4vyd/zOK/a/6Yxf+9+WMW//flj1n8358/ZvHfLX/M4r97/pjFf4/8MYv/B/LHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP575o9Z/D+aP2bx/1j+mMX/4/ljFv9P5I9Z/PfKH7P4fzJ/zOK/d/6Yxf9T+WMW/0/nj1n898kfs/h/Jn/M4r9v/pjF/7P5Yxb/z+WPWfw/nz9m8d8vf8ziv3/+mMX/C/ljFv8D8scs/gfmj1n8v5g/ZvE/KH/M4n9w/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8f9m/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+38ofs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/2/nj1n8v5M/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv/v5o9Z/M/IH7P4n5k/ZvE/K3/M4v+9/DGL//fzxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/5/mj1n8L8gfs/hfmD9m8f9Z/pjF/6L8MYv/z/PHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv9f5I9Z/H+ZP2bx/1X+mMX/1/ljFv+r8scs/lfnj1n8f5M/ZvH/bf6Yxf+a/DGL/+/yxyz+1+aPWfyvyx+z+F+fP2bx/33+mMX/hvwxi/+N+WMW/5vyxyz+f8gfs/j/MX/M4v+n/DGL/835Yxb/P+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf8v+WMW/zvyxyz+d1r95378ty3+f7X6/4ss/nflj1n8/5Y/ZvH/e/6Yxf8f+WMW/3/mj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/+U/DGL/wP5Yxb/B/PHLP5T88ck/nMO8scs/kP5Yxb/UfljFv/Z8scs/rPnj1n8R+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/J+SP2bxXyB/zOI/Jn/M4r9g/pjFf2z+mMV/ofwxi//C+WMW/6fmj1n8n5Y/ZvF/ev6YxX+R/DGL/zPyxyz+i+aPWfyfmT9m8X9W/pjFf7H8MYv/s/PHLP7PyR+z+I/LH7P4Pzd/zOL/vPwxi//z88cs/ovnj1n8l8gfs/i/IH/M4r9k/pjFf6n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/0vljFv+X5o9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5Y9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+X5Yxb/1fLHLP6r549Z/F+RP2bxf2X+mMV/jfwxi//4/DGL/4T8MYv/xPwxi/+a+WMW/7Xyxyz+a+ePWfwn5Y9Z/Cfnj1n818kfs/ivmz9m8X9V/pjF/9X5Yxb/9fLHLP7r549Z/DfIH7P4vyZ/zOK/Yf6Yxf+1+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bxf13+mMV/s/wxi//m+WMW/9fnj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvF/a/6YxX+L/DGL/5b5Yxb/rfLHLP5vyx+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/9vzxyz+2+ePWfzfkT9m8X9n/pjFf4f8MYv/jvljFv+d8scs/jvnj1n835U/ZvF/d/6YxX+X/DGL/3vyxyz+u+aPWfzfmz9m8X9f/pjF//35Yxb/3fLHLP67549Z/PfIH7P4fyB/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOK/Z/6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/Z/LHLP775o9Z/D+bP2bx/1z+mMX/8/ljFv/98scs/vvnj1n8v5A/ZvE/IH/M4n9g/pjF/4v5Yxb/g/LHLP4H549Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv9v5o9Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zi/638MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8f92/pjF/zv5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvH/bv6Yxf+M/DGL/5n5Yxb/s/LHLP7fyx+z+H8/f8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfx/kD9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjF/4L8MYv/hfljFv+f5Y9Z/C/KH7P4/zx/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvH/Rf6Yxf+X+WMW/1/lj1n8f50/ZvG/Kn/M4n91/pjF/zf5Yxb/3+aPWfyvyR+z+P8uf8zif23+mMX/uvwxi//1+WMW/9/nj1n8b8gfs/jfmD9m8b8pf8zi/4f8MYv/H/PHLP5/yh+z+N+cP2bx/3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfz/kj9m8b8jf8zif2f+mMX/r/ljFv+78scs/n/LH7P4/z1/zOL/j/wxi/8/88cs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMV/Sv6Yxf+B/DGL/4P5Yxb/qfljEv+5BvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP5PyR+z+C+QP2bxH5M/ZvFfMH/M4j82f8ziv1D+mMV/4fwxi/9T88cs/k/LH7P4Pz1/zOK/SP6Yxf8Z+WMW/0Xzxyz+z8wfs/g/K3/M4r9Y/pjF/9n5Yxb/5+SPWfzH5Y9Z/J+bP2bxf17+mMX/+fljFv/F88cs/kvkj1n8X5A/ZvFfMn/M4r9U/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjFf+n8MYv/S/PHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/y/LHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9a+WMW/7Xzxyz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/3IP8MYv/UP6YxX9U/pjFf7b8MYv/7PljFv/R+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/p+SPWfwXyB+z+I/JH7P4L5g/ZvEfmz9m8V8of8ziv3D+mMX/qfljFv+n5Y9Z/J+eP2bxXyR/zOL/jPwxi/+i+WMW/2fmj1n8n5U/ZvFfLH/M4v/s/DGL/3Pyxyz+4/LHLP7PzR+z+D8vf8zi//z8MYv/4vljFv8l8scs/i/IH7P4L5k/ZvFfKn/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4r90/pjF/6X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/2X5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvF/ef6YxX+1/DGL/+r5Yxb/V+SPWfxfmT9m8V8jf8ziPz5/zOI/IX/M4j8xf8ziv2b+mMV/rfwxi//a+WMW/0n5Yxb/yfljFv918scs/uvmj1n8X5U/ZvF/df6YxX+9/DGL//r5Yxb/DfLHLP6vyR+z+G+YP2bxf23+mMV/o/wxi//G+WMW/03yxyz+m+aPWfxflz9m8d8sf8ziv3n+mMX/9fljFv835I9Z/N+YP2bxf1P+mMX/zfljFv+35I9Z/N+aP2bx3yJ/zOK/Zf6YxX+r/DGL/9vyxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/9vwxi//2+WMW/3fkj1n835k/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv935Y9Z/N+dP2bx3yV/zOL/nvwxi/+u+WMW//fmj1n835c/ZvF/f/6YxX+3/DGL/+75Yxb/PfLHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+O+ZP2bx/2j+mMX/Y/ljFv+P549Z/D+RP2bx3yt/zOL/yfwxi//e+WMW/0/lj1n8P50/ZvHfJ3/M4v+Z/DGL/775Yxb/z+aPWfw/lz9m8f98/pjFf7/8MYv//vljFv8v5I9Z/A/IH7P4H5g/ZvH/Yv6Yxf+g/DGL/8H5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/5v5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/h/K3/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8v50/ZvH/Tv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/L+bP2bxPyN/zOJ/Zv6Yxf+s/DGL//fyxyz+388fs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8f5o/ZvG/IH/M4n9h/pjF/2f5Yxb/i/LHLP4/zx+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/H+RP2bx/2X+mMX/V/ljFv9f549Z/K/KH7P4X50/ZvH/Tf6Yxf+3+WMW/2vyxyz+v8sfe6T/6Cd7OP95j+F/bf6Y5fy/Ln/M4n99/pjF//f5Yxb/G/LHLP435o9Z/G/KH7P4/yF/zOL/x/wxi/+f8scs/jfnj1n8/5w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv+/5I9Z/O/IH7P435k/ZvH/a/6Yxf+u/DGL/9/yxyz+f88fs/j/I3/M4v/P/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvGfkj9m8X8gf8zi/2D+mMV/av6YxH+eQf6YxX8of8ziPyp/zOI/W/6YxX/2/DGL/+j8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz/2v+8/10Nv5f/o/vf9pzXPfPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/isp/ad+5F+tYfFfWen/r7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9a+WMW/7Xzxyz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+bmf2HOhhmZPH/beSYxf+a/DGL/+/yxyz+1+aPWfyvyx+z+F+fP2bx/33+mMX/hvwxi/+N+WMW/5vyxyz+f8gfs/j/MX/M4v+n/DGL/835Yxb/P+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf8v+WMW/zvyxyz+d+aPWfz/mj9m8b8rf8zi/7f8MYv/3/PHLP7/yB+z+P8zf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfyn5I9Z/B/IH7P4P5g/ZvGfmj8m8Z93kD9m8e//8o2z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/lPwxi/8C+WMW/zH5Yxb/BfPHLP5j88cs/gvlj1n8F84fs/g/NX/M4v+0/DGL/9Pzxyz+i+SPWfyfkT9m8V80f8zi/8z8MYv/s/LHLP6L5Y9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfPH/M4r9E/pjF/wX5Yxb/JfPHLP5L5Y9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfOH7P4vzR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vyx/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vzx+z+K+WP2bxXz1/zOL/ivwxi/8r88cs/mvkj1n8x+ePWfwn5I9Z/Cfmj1n818wfs/ivlT9m8V87f8ziPyl/zOI/OX/M4r9O/pjFf938MYv/q/LHLP6vzh+z+K+XP2bxXz9/zOK/Qf6Yxf81+WMW/w3zxyz+r80fs/hvlD9m8d84f8ziv0n+mMV/0/yx/2X/qR95aOm8r8sf+1/2n/n83yx/zOK/ef6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvHfIn/M4r9l/pjFf6v8MYv/2/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/2/DGL//b5Yxb/d+SPWfzfmT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3flj1n8350/ZvHfJX/M4v+e/DGL/675Yxb/9+aPWfzflz9m8X9//pjFf7f8MYv/7vljFv898scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P475k/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvHfK3/M4v/J/DGL/975Yxb/T+WPWfw/nT9m8d8nf8zi/5n8MYv/vvljFv/P5o9Z/D+XP2bx/3z+mMV/v/wxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/6D8MYv/wfljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8rf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/nT9m8f9O/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5s/ZvE/I3/M4n9m/pjF/6z8MYv/9/LHLP7fzx+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfx/mj9m8b8gf8zif2H+mMX/Z/ljFv+L8scs/j/PH7P4X5w/ZvG/JH/M4n9p/pjF/zKf/9xPZCWL/+U+/yeUxf+K/DGL/5X5Yxb/X+SPWfx/mT9m8f9V/pjF/9f5Yxb/q/LHLP5X549Z/H+TP2bx/23+mMX/mvwxi//v8scs/tfmj1n8r8sfs/hfnz9m8f99/pjF/4b8MYv/jfljFv+b8scs/n/IH7P4/zF/zOL/p/wxi//N+WMW/z/nj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/L/ljFv878scs/nfmj1n8/5o/ZvG/K3/M4v+3/DGL/9/zxyz+/8gfs/j/M3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8p+SPWfwfyB+z+D+YP2bxn5o/JvGfb5A/ZvEfyh+z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/lPwxi/8C+WMW/zH5Yxb/BfPHLP5j88cs/gvlj1n8F84fs/g/NX/M4v+0/DGL/9Pzxyz+i+SPWfyfkT9m8V80f8zi/8z8MYv/s/LHLP6L5Y9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfPH/M4r9E/pjF/wX5Yxb/JfPHLP5L5Y9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfOH7P4vzR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vyx/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vzx+z+K+WP2bxXz1/zOL/ivwxi/8r88cs/mvkj1n8x+ePWfwn5I9Z/Cfmj1n818wfs/ivlT9m8V87f8ziPyl/zOI/OX/M4r9O/pjFf938MYv/q/LHLP6vzh+z+K+XP2bxXz9/zOK/Qf6Yxf81+WMW/w3zxyz+r80fs/hvlD9m8d84f8ziv0n+mMV/0/wxi//r8scs/pvlj1n8N88fs/i/Pn/M4v+G/DGL/xvzxyz+b8ofs/i/OX/M4v+W/DGL/1vzxyz+W+SPWfy3zB+z+G+VP2bxf1v+mMV/6/wxi/82+WMW/23zxyz+2+WPWfzfnj9m8d8+f8zi/478MYv/O/PHLP475I9Z/HfMH7P475Q/ZvHfOX/sIf9tT/qf9n9X/pjl/H93/pjFf5f8MYv/e/LHLP675o9Z/N+bP2bxf1/+mMX//fljFv/d8scs/rvnj1n898gfs/h/IH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4r9n/pjF/6P5Yxb/j+WPWfw/nj9m8f9E/pjFf6/8MYv/J/PHLP57549Z/D+VP2bx/3T+mMV/n/wxi/9n8scs/vvmj1n8P5s/ZvH/XP6Yxf/z+WMW//3yxyz+++ePWfy/kD9m8T8gf8zif2D+mMX/i/ljFv+D8scs/gfnj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/2/mj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOL/rfwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bx/3b+mMX/O/ljFv9T8scs/qfmj1n8T8sfs/ifnj9m8f9u/pjF/4z8MYv/mfljFv+z8scs/t/LH7P4fz9/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/H+QP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bx/2n+mMX/gvwxi/+F+WMW/5/lj1n8L8ofs/j/PH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8b8qf8zif3X+mMX/N/ljFv/f5o9Z/K/JH7P4/y5/zOJ/bf6Yxf+6/DGL//X5Yxb/3+ePWfxvyB+z+N+YP2bxvyl/zOL/h/wxi/8f88cs/n/KH7P435w/ZvH/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/P+SP2bxvyN/zOJ/Z/6Yxf+v+WMW/7vyxyz+f8sfs/j/PX/M4v+P/DGL/z/zxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6YxX9K/pjF/4H8MYv/g/ljFv+p+WMS//kH+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8qf8zi/+r8MYv/evljFv/188cs/hvkj1n8X5M/ZvHfMH/M4v/a/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4vy5/zOK/Wf6YxX/z/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4r9F/pjFf8v8MYv/VvljFv+35Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvHfM3/M4v/R/DGL/8fyxyz+H88fs/h/In/M4r9X/pjF/5P5Yxb/vfPHLP6fyh+z+H86f8ziv0/+mMX/M/ljFv9988cs/p/NH7P4fy5/zOL/+fwxi/9++WMW//3zxyz+X8gfs/gfkD9m8T8wf8zi/8X8MYv/QfljFv+D88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi/8388cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bx/1b+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+H87f8zi/538MYv/KfljFv9T88cs/qflj1n8T88fs/h/N3/M4n9G/pjF/8z8MYv/WfljFv/v5Y9Z/L+fP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+P80f8zif0H+mMX/wvwxi//P8scs/hflj1n8f54/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/j/In/M4v/L/DGL/6/yxyz+v84fs/hflT9m8b86f8zi/5v8MYv/b/PHLP7X5I9Z/H+XP2bxvzZ/zOJ/Xf6Yxf/6/DGL/+/zxyz+N+SPWfxvzB+z+N+UP2bx/0P+mMX/j/ljFv8/5Y9Z/G/OH7P4/zl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP5/yR+z+N+RP2bxvzN/zOL/1/wxi/9d+WMW/7/lj1n8/54/ZvH/R/6Yxf+f+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOI/JX/M4v9A/pjF/8H8MYv/1Pwxif9TBvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP5PyR+z+C+QP2bxH5M/ZvFfMH/M4j82f8ziv1D+mMV/4fwxi/9T88cs/k/LH7P4Pz1/zOK/SP6Yxf8Z+WMW/0Xzxyz+z8wfs/g/K3/M4r9Y/pjF/9n5Yxb/5+SPWfzH5Y9Z/J+bP2bxf17+mMX/+fljFv/F88cs/kvkj1n8X5A/ZvFfMn/M4r9U/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjFf+n8MYv/S/PHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/y/LHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9aIv+5/o11Lf5ri/z/nSz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/AoP8MYv/UP6YxX9U/pjFf7b8MYv/7Pk/otlGHi3+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8qf8zi/+r8MYv/evljFv/188cs/hvkj1n8X5M/ZvHfMH/M4v/a/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4vy5/zOK/Wf6YxX/z/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4r9F/pjFf8v8MYv/VvljFv+35Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj/1/7NGzFiCGAkXRZ79kYtu2bdu2bWdi27Zt27Zt254UqbLW/YLcvbtTn5b/A/2PWv7v5n/U8n93/6OW/3v4H7X839P/qOX/Xv5HLf/39j9q+b+P/1HL/339j1r+7+d/1PJ/f/+jlv8H+B+1/D/Q/6jl/0H+Ry3/D/Y/avl/iP9Ry/9D/Y9a/h/mf9Ty/3D/o5b/R/gftfw/0v+o5f9R/kct/4/2P2r5f4z/Ucv/Y/2PWv4f53/U8v94/6OW/yf4H7X8P9H/qOX/Sf5HLf9P9j9q+X+K/1HL/1P9j1r+n+Z/1PL/dP+jlv9n+B+1/D/T/6jl/1n+Ry3/z/Y/avl/jv9Ry/9z/Y9a/p/nf9Ty/3z/o5b/F/gftfy/0P+o5f9F/kct/y/2P2r5f4n/Ucv/S/2PWv5f5n/U8v9y/6OW/1f4H7X8v9L/qOX/Vf5HLf+v9j9q+X+N/1HL/2v9j1r+X+d/1PL/ev+jlv83+B+1/L/R/6jl/03+Ry3/b/Y/avl/i/9Ry/9b/Y9a/t/mf9Ty/3b/o5b/d/gftfy/0/+o5f9d/kct/+/2P2r5f4//Ucv/e/2PWv7f53/U8v9+/6OW/w/4H7X8f9D/qOX/Q/5HLf8f9j9q+f+I/1HL/0f9j1r+P+Z/1PL/cf+jlv9P+B+1/H/S/6jl/1P+Ry3/n/Y/avn/jP9Ry/9n/Y9a/j/nf9Ty/3n/o5b/L/gftfx/0f+o5f9L/kct/1/2P2r5/4r/Ucv/V/2PWv6/5n/U8v91/6OW/2/4H7X8f9P/qOX/W/5HLf/f9j9q+f+O/1HL/3f9j1r+v+d/1PL/ff+jlv8f+B+1/P/Q/6jl/0f+Ry3/P/Y/avn/if9Ry/9P/Y9a/n/mf9Ty/3P/o5b/X/gftfz/0v+o5f9X/kct/7/2P2r5/43/Ucv/b/2PWv5/53/U8v97/6OW/z/4H7X8/9H/qOX/T/5HLf9/9j9q+f+L/1HL/0H+RyX/B/zJ/6jl/5/9j1r+/8X/qOX/X/2PWv7/zf+o5f/f/Y9a/v/D/6jl/z/9j1r+/8v/qOX/v/2PWv7/x/+o5f9//Y9a/v/P/6jl///9j1r+D+Z/1PJ/cP+jlv8D/I9a/g/hf9Tyf0j/o5b/Q/kftfwf2v+o5f8w/kct/4f1P2r5P5z/Ucv/4f2PWv6P4H/U8n9E/6OW/yP5H7X8H9n/qOX/KP5HLf9H9T9q+T+a/1HL/9H9j1r+j+F/1PJ/TP+jlv9j+R+1/B/b/6jl/zj+Ry3/x/U/avk/nv9Ry//x/Y9a/k/gf9Tyf0L/o5b/E/kftfyf2P+o5f8k/kct/yf1P2r5P5n/Ucv/yf2PWv5P4X/U8n9K/6OW/1P5H7X8n9r/qOX/NP5HLf+n9T9q+T+d/1HL/+n9j1r+z+B/1PJ/Rv+jlv8z+R+1/J/Z/6jl/yz+Ry3/Z/U/avk/m/9Ry//Z/Y9a/s/hf9Tyf07/o5b/c/kftfyf2/+o5f88/kct/+f1P2r5P5//Ucv/+f2PWv4v4H/U8n9B/6OW/wv5H7X8X9j/qOX/Iv5HLf8X9T9q+b+Y/1HL/8X9j1r+L+F/1PJ/Sf+jlv9L+R+1/F/a/6jl/zL+Ry3/l/U/avm/nP9Ry//l/Y9a/q/gf9Tyf0X/o5b/K/kftfxf2f+o5f8q/kct/1f1P2r5v5r/Ucv/1f2PWv6v4X/U8n9N/6OW/2v5H7X8X9v/qOX/Ov5HLf/X9T9q+b+e/1HL//X9j1r+b+B/1PJ/Q/+jlv8b+R+1/N/Y/6jl/yb+/2bQ77Pl/6b+Ry3/N/M/avm/uf9Ry/8t/I9a/m/pf9Tyfyv/o5b/W/sftfzfxv+o5f+2/kct/7fzP2r5v73/Ucv/HfyPWv7v6H/U8n8n/6OW/zv7H7X838X/qOX/rv5HLf8H+h/94f4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Mq+/cd4XRdwHP8ccIBkGy5mDGuDfFu6pXTHj+EfTkgELvTA34gaAncgeAd0HHacGj/+IJfOH7mRYytXwrCctHnLNZ1dmlmzWLXV7IeapStrkeks2GJd+95977z7dtz6vs/3m5WPxx/3/X4+X14f4LYnnw9TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9dDY0LjoytGXJq7OCDDx9u7n2dfXTFTQd+331B/2v546XDXHLM4IOenp6e2c/O2lE+nFAUReln21k+nlg5Ll1/Z/2XOvqOwvzuFxcfn/zLxiMH1pz2cF3X0ftqe8/WFjeu29DS/IkxRREuqi06Sgd1NUURFtUW95YO6ksHi2uLh0sHs3oPTim+Wzo4b+3mlqbSiSXR3zP4f9HQuLMYO6TYYsifBoP731n/nTv6X0e4ZP/VxhXl/i/v/OGbFZ/1O0H//dcPCyr7r/o3CJxQdf0/P7//dYRL/sf9f9KTK18e7rMT999//fBJ/UM6wzz/D2m08rm/4vl/+jCXHNhfWdN5vNT/Jbc+M6N8atx/8/z/zvXDRZX9jxny/F96jl/Y//w/oSjCxaP8dsB7SkPjriMj3f9H7n/ctIpNzeD+T2/bvL/U/2OLf/B4+VRtlf0vHOH+P2ZJxa8VqE5D41d7Ku7/VfRffGyYSw70/9bjv32o1P+jf7z/jEGfVdP/xZX9z2xv3TJz6/bOcze0rl7fvL55U92sebPn1tfNPX/OzN5Hgr6vo/yuwHvD6O7/xaSKTU1RNA/sr+468FSp/zkPPDC7fGpilf0vGvH+P939H4b1kTHF+PFFx+r29ra6vq/9h/V9X/t+2DD9V/H3/zPPLv+w2vJrTVFMHdjfecZdy0v9v33omd3lU+Or7H/xiP3PH/h5gQijvP83VWyG9H/w0Iu9z/9L7zl4evlUtX//XzJi/6+4/8NoNDRW/A8/77JS/7uKSyM7DQ3++x+kk6P/R9++vjtuHT6lf0gnR/9/+MLRc+LWYan+IZ0c/Y/beP9zcetwif4hnRz9L5syb3ncOlyqf0gnR/9rXznnr3Hr0Kh/SCdH/2d/ZXdH3Dos0z+kk6P/B9tmb4tbh+X6h3Ry9P/zUx98NW4dLtM/pJOj/2PH7r4hbh0u1z+kk6P/rj1n/ShuHa7QP6STo//L1i0Icetwpf4hnRz9T5v658fi1uEq/UM6Ofqf+5d/nhq3DlfrH9LJ0f/tX1y+L24drtE/pJOj/7HXvfxC3Dqs0D+kk6P/JWdtWxC3DtfqH9LJ0X/Tz5p64tZhZbn/CYX+4V2Xo/+Z3/zJhrh1uM79H9LJ0f/hZY/siVuH6/UP6eTof09dMTluHW7QP6STo/9vfP+0Q3Hr8Gn9Qzo5+v/dk0/Mi1uHVfqHdHL0/+yHbvtW3DrcqH9IJ0f/96x54cy4dVitf0gnR/8P7X3uy3HrsEb/kE6O/l9/vfV9ceuwVv+QTo7+J0085bW4dWjSP6STo/8Ft3ytLW4dmvUP6eTov3V314/j1mGd/iGdHP1/9PjUlXHrsF7/kE6O/lfM2fvBuHW4Sf+QTo7+P7D0gl1x67BB/5BOjv4v7P74hXHrsFH/kE6O/tuf/vzX49bhZv1DOjn63zvj1UVx69Cif0gnR/8vrVry07h1aNU/pJOj/zcfuXZT3Dps0j+kk6P/J37x1rG4ddisf0gnR//vP3/h3+PWYYv+IZ0c/S9a/MbauHX4jP4hnRz9b+z610tx69Cmf0gnR/8zDl+1NG4dtuof0snR//fOrdsftw7t+od0cvR/xxX76uPWYZv+IZ0c/e8/eOddcetwi/4hnRz9v/Gr6dPi1uGz+od0cvR/3+RD18StQ4f+IZ0c/f96U+3TceuwXf+QTo7+/7Fvyo64dejUP6STo/+nXuv+U9w63Kp/SCdH/6vG/WZ83Drcpn9IJ0f/Uzq33Bu3DrfrH9LJ0f+8u1efF7cOn9M/pJOj/61/e/7bceuwQ/+QztbtnTevbmlpbvPGG2+8GXhzsv9kAlJ7J/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5WwfRuwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//9O+OOp") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000f00)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x6}]}) 1.842311084s ago: executing program 2 (id=5749): syz_mount_image$fuse(0x0, &(0x7f0000000540)='./file0\x00', 0x4400, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', &(0x7f0000000340)='\\@V\xe9\xb5\xef,(&\x00', 0x1, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.698849866s ago: executing program 2 (id=5750): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x5452, &(0x7f0000000a00)={'dvmrp0\x00', @random='c\b\x00'}) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) 1.667297567s ago: executing program 5 (id=5751): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbf, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x9, @loopback, @local, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x7, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc95a70000ffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x22}]}}, 'b'}}}}}, 0x0) 1.569355469s ago: executing program 0 (id=5752): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) 1.537853067s ago: executing program 3 (id=5753): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.451468358s ago: executing program 5 (id=5754): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.447109134s ago: executing program 1 (id=5766): r0 = socket(0x2, 0x80805, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 1.25590212s ago: executing program 1 (id=5755): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1458c2, 0x1c2) setxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x10, 0x7fff}, {0x1, 0x400}]}, 0x14, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) 966.110496ms ago: executing program 3 (id=5756): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 814.608797ms ago: executing program 5 (id=5757): syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f00000012c0)='./file0\x00', 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="0018aaa79c3b117d620d150d4ab3be1576290aab78fbeff795dcd3e77c384f9664b61fa6f4ed180d4888d10530d54845321459d677f01bd5e921b19b5714995700d49aa579d74030ef8a1f0fd3fec991fcc6f34c8d19f5cf83d6827fc0ee12e79f9125251295b9caaec76bcc307432172ebc4b46df891203fe2894d15bec23c24731c460f7fe577cd145509772f8d9343045ca57236a1b666d0c8e94fed2b9aead45dac6bfd3506fe6b7debdfb0ca51d84a2d813b70598465af6"], 0x1, 0x1a0, &(0x7f0000000000)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"}) 750.345726ms ago: executing program 3 (id=5758): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r0, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000100)=0x6, 0x4) 714.999072ms ago: executing program 4 (id=5759): timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) 621.304698ms ago: executing program 2 (id=5760): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = fanotify_init(0xf00, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 485.368174ms ago: executing program 4 (id=5761): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e25, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x571e, 0x202, 0x10000001, 0x4, r1}, 0x10) 391.239992ms ago: executing program 5 (id=5762): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) 337.244315ms ago: executing program 4 (id=5763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x74, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x28, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}, {0xfffffffffffffd78, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 228.138974ms ago: executing program 0 (id=5764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000070a050000000000000000000a0040010900010073797a31000000000900020073797a32000000000c0003"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 210.887862ms ago: executing program 5 (id=5765): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2, &(0x7f0000000000)=0x101, 0x29, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 93.710499ms ago: executing program 5 (id=5767): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550a, 0x0) 8.888088ms ago: executing program 0 (id=5768): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='noadinicb,partition=00000000000000000005,noadinicb,mode=00000000000000000003324,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c766f6c756d653d303030303030303030303030302c0000000000000000501cb5d7c12e5184d12ef849f01234cc0632d887ab83b9a499f253a549724d60457bb58a75adb74f3af03ad3ce885b137f28e47a314f31f232c3a9f530c68d8ba34bf01945e243cbc23403afab131b58d3a2aa64136e0a7c462f6b7050c665746acc89d02bf21ece3866519a7826f4e18fda118954b3c6e9738bfb06d6c52c8d07"], 0x1, 0x489, &(0x7f0000000580)="$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") symlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000080)) 0s ago: executing program 4 (id=5769): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f00000010c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) ppoll(&(0x7f0000000380)=[{r0, 0x508a}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 000-0000-0000-0000-000000000000. [ 447.060576][ T24] bigben 0003:146B:0902.0037: unexpected rdesc, please submit for review [ 447.092382][ T24] bigben 0003:146B:0902.0037: hidraw0: USB HID v1.01 Device [HID 146b:0902] on usb-dummy_hcd.5-1/input0 [ 447.110971][ T24] bigben 0003:146B:0902.0037: missing HID_OUTPUT_REPORT 0 [ 447.118090][ T24] bigben 0003:146B:0902.0037: no output report found [ 447.272010][ T24] usb 6-1: USB disconnect, device number 23 [ 447.409987][ T5931] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 447.453016][T17477] loop1: detected capacity change from 0 to 32768 [ 447.580392][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 447.609641][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.633363][T17480] loop2: detected capacity change from 0 to 40427 [ 447.643091][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.659455][T17480] F2FS-fs (loop2): build fault injection rate: 771 [ 447.669943][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 447.699938][ T5931] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 447.706512][T17480] F2FS-fs (loop2): invalid crc value [ 447.717829][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.777847][ T5931] usb 5-1: config 0 descriptor?? [ 447.854428][ T7870] udevd[7870]: symlink '../../loop2' '/dev/disk/by-diskseq/1192.tmp-b7:2' failed: Read-only file system [ 447.901605][ T7870] udevd[7870]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 447.944385][T10451] udevd[10451]: symlink '../../loop5' '/dev/disk/by-diskseq/1177.tmp-b7:5' failed: Read-only file system [ 447.979524][T17480] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 448.019449][T17480] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 448.058568][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-diskseq/1191.tmp-b7:1' failed: Read-only file system [ 448.122997][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-diskseq/1191.tmp-b7:1' failed: Read-only file system [ 448.156208][ T7870] udevd[7870]: symlink '../../loop2' '/dev/disk/by-diskseq/1192.tmp-b7:2' failed: Read-only file system [ 448.194709][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-diskseq/1193.tmp-b7:1' failed: Read-only file system [ 448.223069][ T7870] udevd[7870]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 448.267502][T10451] udevd[10451]: symlink '../../loop5' '/dev/disk/by-diskseq/1177.tmp-b7:5' failed: Read-only file system [ 448.293597][ T5931] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0038/input/input23 [ 448.345429][ T5931] microsoft 0003:045E:07DA.0038: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 448.428091][ T5931] usb 5-1: USB disconnect, device number 30 [ 448.444967][T17490] loop3: detected capacity change from 0 to 32768 [ 448.459466][T10451] udevd[10451]: symlink '../../loop5' '/dev/disk/by-diskseq/1177.tmp-b7:5' failed: Read-only file system [ 448.480435][T17490] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4916 (17490) [ 448.581797][T17490] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 448.606411][T17503] fido_id[17503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 448.630105][T17490] BTRFS info (device loop3): using sha256 checksum algorithm [ 448.841577][T17490] BTRFS info (device loop3): enabling ssd optimizations [ 448.848576][T17490] BTRFS info (device loop3): turning on async discard [ 448.920029][T17490] BTRFS info (device loop3): enabling free space tree [ 449.036014][T17496] loop1: detected capacity change from 0 to 32768 [ 449.125547][T17496] [ 449.125547][T17496] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 449.125547][T17496] [ 449.172783][ T5817] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 449.212533][T17496] [ 449.212533][T17496] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 449.212533][T17496] [ 449.249455][T17531] netlink: 'syz.2.4919': attribute type 2 has an invalid length. [ 449.267283][T17496] [ 449.267283][T17496] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 449.267283][T17496] [ 449.348731][ T109] [ 449.348731][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 449.348731][ T109] [ 449.516000][ T36] [ 449.516000][ T36] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 449.516000][ T36] [ 449.540651][ T36] [ 449.540651][ T36] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 449.540651][ T36] [ 449.598375][ T108] [ 449.598375][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 449.598375][ T108] [ 449.628609][ T5816] [ 449.628609][ T5816] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 449.628609][ T5816] [ 449.646545][T17540] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4929'. [ 449.651880][ T5816] [ 449.651880][ T5816] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 449.651880][ T5816] [ 449.716047][T17543] loop5: detected capacity change from 0 to 256 [ 449.791387][T17543] exfat: Deprecated parameter 'utf8' [ 449.796863][T17543] exfat: Deprecated parameter 'utf8' [ 449.910746][T17543] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 450.691301][T17569] loop0: detected capacity change from 0 to 64 [ 450.765818][T17573] loop3: detected capacity change from 0 to 512 [ 450.845179][T17573] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 450.890011][T17577] CUSE: DEVNAME unspecified [ 450.940645][T17573] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.4942: corrupted xattr entries [ 450.960248][T17573] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 450.969882][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 450.985590][ C1] EXT4-fs (loop3): initial error at time 1771228716: xattr_find_entry:337: inode 15 [ 450.995034][ C1] EXT4-fs (loop3): last error at time 1771228716: xattr_find_entry:337: inode 15 [ 451.019041][T17573] EXT4-fs (loop3): 1 orphan inode deleted [ 451.112009][T17573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.291547][T16500] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 451.322807][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.389988][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 451.480114][T16500] usb 2-1: Using ep0 maxpacket: 32 [ 451.493758][T17599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4957'. [ 451.495161][T16500] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 451.538614][T17599] netlink: 'syz.4.4957': attribute type 2 has an invalid length. [ 451.547025][T17599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4957'. [ 451.553595][T16500] usb 2-1: config 0 has no interface number 0 [ 451.557936][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.574354][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.584795][ T9] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 451.588398][T16500] usb 2-1: config 0 interface 12 has no altsetting 0 [ 451.643470][T16500] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 451.653176][T16500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.660051][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.694152][T16500] usb 2-1: Product: syz [ 451.698336][T16500] usb 2-1: Manufacturer: syz [ 451.700301][ T9] usb 6-1: config 0 descriptor?? [ 451.724566][T16500] usb 2-1: SerialNumber: syz [ 451.750491][T16500] usb 2-1: config 0 descriptor?? [ 451.849369][T17613] loop3: detected capacity change from 0 to 64 [ 451.877540][T17613] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 452.138783][ T9] stadia 0003:18D1:9400.0039: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.5-1/input0 [ 452.148044][T17617] loop2: detected capacity change from 0 to 8192 [ 452.191748][ T9] stadia 0003:18D1:9400.0039: no inputs found [ 452.218290][ T9] stadia 0003:18D1:9400.0039: force feedback init failed [ 452.403664][T16500] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 452.413118][ T5908] usb 6-1: USB disconnect, device number 24 [ 452.424832][T16500] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 452.436231][T16500] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 452.448056][T16500] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 452.474665][T16500] usb 2-1: USB disconnect, device number 25 [ 452.490839][ T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 452.662184][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.683151][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 452.710828][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 452.743767][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.760966][ T9] usb 4-1: config 0 descriptor?? [ 452.773614][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 452.784943][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 452.804089][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 452.804926][T17638] loop2: detected capacity change from 0 to 2048 [ 452.819715][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 452.829448][ T9] usb 4-1: media controller created [ 452.841179][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4975'. [ 452.841748][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.863598][T17641] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 452.894672][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 452.900702][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 452.930286][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 452.933438][ T6132] udevd[6132]: symlink '../../loop2' '/dev/disk/by-diskseq/1209.tmp-b7:2' failed: Read-only file system [ 452.980339][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 452.987320][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 453.019341][ T6132] udevd[6132]: symlink '../../loop2' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:2' failed: Read-only file system [ 453.065880][ T9] usb 4-1: USB disconnect, device number 23 [ 453.080106][T10451] udevd[10451]: symlink '../../loop5' '/dev/disk/by-diskseq/1200.tmp-b7:5' failed: Read-only file system [ 453.121333][ T7870] udevd[7870]: symlink '../../loop1' '/dev/disk/by-diskseq/1198.tmp-b7:1' failed: Read-only file system [ 453.135014][T17643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.185096][ T6132] udevd[6132]: symlink '../../loop2' '/dev/disk/by-diskseq/1209.tmp-b7:2' failed: Read-only file system [ 453.192177][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 453.221187][T17649] loop1: detected capacity change from 0 to 8 [ 453.225489][ T6132] udevd[6132]: symlink '../../loop2' '/dev/disk/by-diskseq/1209.tmp-b7:2' failed: Read-only file system [ 453.245818][T17649] SQUASHFS error: Unable to read directory block [629:46] [ 453.265914][ T7870] udevd[7870]: symlink '../../loop1' '/dev/disk/by-diskseq/1211.tmp-b7:1' failed: Read-only file system [ 453.377801][T10451] udevd[10451]: symlink '../../loop5' '/dev/disk/by-diskseq/1200.tmp-b7:5' failed: Read-only file system [ 453.383049][ T7870] udevd[7870]: symlink '../../loop2' '/dev/disk/by-diskseq/1210.tmp-b7:2' failed: Read-only file system [ 453.392720][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-diskseq/1211.tmp-b7:1' failed: Read-only file system [ 453.527937][T17655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.879026][T17667] loop3: detected capacity change from 0 to 64 [ 453.967624][T17669] loop2: detected capacity change from 0 to 256 [ 454.003083][T17669] exfat: Deprecated parameter 'utf8' [ 454.030190][T17669] exfat: Deprecated parameter 'utf8' [ 454.091680][T17669] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 454.158980][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 454.159000][ T30] audit: type=1326 audit(1771228719.315:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.4.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641b9bf79 code=0x7ffc0000 [ 454.230216][ T30] audit: type=1326 audit(1771228719.345:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.4.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641b9bf79 code=0x7ffc0000 [ 454.281741][ T30] audit: type=1326 audit(1771228719.355:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.4.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641b9bf79 code=0x7ffc0000 [ 454.308635][ T30] audit: type=1326 audit(1771228719.355:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.4.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9641b9bf79 code=0x7ffc0000 [ 454.342522][ T30] audit: type=1326 audit(1771228719.355:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.4.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641b9bf79 code=0x7ffc0000 [ 454.442792][ T30] audit: type=1326 audit(1771228719.355:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.4.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641b9bf79 code=0x7ffc0000 [ 454.557992][ T30] audit: type=1326 audit(1771228719.355:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.4.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641b9bf79 code=0x7ffc0000 [ 454.587996][T17657] loop1: detected capacity change from 0 to 40427 [ 454.654140][ T30] audit: type=1326 audit(1771228719.355:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.4.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641b9bf79 code=0x7ffc0000 [ 454.669125][T17657] F2FS-fs (loop1): build fault injection rate: 771 [ 454.730710][ T30] audit: type=1326 audit(1771228719.365:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.4.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9641b9bf79 code=0x7ffc0000 [ 454.771723][T17657] F2FS-fs (loop1): invalid crc value [ 454.817226][ T30] audit: type=1326 audit(1771228719.365:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.4.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641b9bf79 code=0x7ffc0000 [ 454.997487][T17691] loop0: detected capacity change from 0 to 128 [ 455.064614][T17691] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 455.100742][T17691] hpfs: filesystem error: improperly stopped [ 455.106822][T17691] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 455.152359][T17691] hpfs: You really don't want any checks? You are crazy... [ 455.185668][T17696] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5002'. [ 455.216697][T17657] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 455.228592][T17691] hpfs: hpfs_map_sector(): read error [ 455.241311][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5002'. [ 455.254849][T17691] hpfs: code page support is disabled [ 455.268870][T17691] hpfs: hpfs_map_4sectors(): unaligned read [ 455.306280][T17657] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 455.326314][T17691] hpfs: hpfs_map_4sectors(): unaligned read [ 455.370088][T17691] hpfs: filesystem error: unable to find root dir [ 455.523378][T17706] gfs2: path_lookup on c::;øN€…L‰´¶;o$: returned error -2 [ 455.535470][ T5816] syz-executor: attempt to access beyond end of device [ 455.535470][ T5816] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 455.631176][ T5816] CPU: 0 UID: 0 PID: 5816 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 455.631215][ T5816] Tainted: [L]=SOFTLOCKUP [ 455.631224][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 455.631239][ T5816] Call Trace: [ 455.631249][ T5816] [ 455.631259][ T5816] dump_stack_lvl+0xe8/0x150 [ 455.631301][ T5816] f2fs_handle_critical_error+0x37c/0x540 [ 455.631344][ T5816] f2fs_write_end_io+0xcdb/0xff0 [ 455.631406][ T5816] __submit_merged_bio+0x256/0x700 [ 455.631449][ T5816] __submit_merged_write_cond+0x3c9/0x4e0 [ 455.631494][ T5816] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 455.631545][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.631586][ T5816] f2fs_write_data_pages+0x2975/0x35e0 [ 455.631669][ T5816] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 455.631724][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.631754][ T5816] ? css_rstat_updated+0x23a/0x530 [ 455.631817][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.631847][ T5816] ? rcu_is_watching+0x15/0xb0 [ 455.631882][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.631912][ T5816] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 455.631950][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.631980][ T5816] ? __lock_acquire+0x6b5/0x2cf0 [ 455.632025][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.632060][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.632089][ T5816] ? __lock_acquire+0x6b5/0x2cf0 [ 455.632127][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.632157][ T5816] ? do_raw_spin_lock+0x12b/0x2f0 [ 455.632190][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.632225][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.632255][ T5816] ? do_raw_spin_unlock+0xf5/0x210 [ 455.632281][ T5816] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 455.632322][ T5816] do_writepages+0x32e/0x550 [ 455.632358][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.632391][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.632426][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.632455][ T5816] ? do_raw_spin_unlock+0xf5/0x210 [ 455.632487][ T5816] filemap_fdatawrite+0x1e9/0x2f0 [ 455.632528][ T5816] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 455.632611][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.632645][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.632680][ T5816] ? do_raw_spin_unlock+0xf5/0x210 [ 455.632712][ T5816] f2fs_sync_dirty_inodes+0x30e/0x860 [ 455.632776][ T5816] f2fs_write_checkpoint+0x9df/0x26a0 [ 455.632855][ T5816] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 455.632941][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.632971][ T5816] ? kfree+0x1c1/0x630 [ 455.633005][ T5816] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 455.633043][ T5816] kill_f2fs_super+0x314/0x720 [ 455.633090][ T5816] ? __pfx_kill_f2fs_super+0x10/0x10 [ 455.633146][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.633176][ T5816] ? lockdep_hardirqs_on+0x7a/0x110 [ 455.633203][ T5816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.633249][ T5816] deactivate_locked_super+0xbc/0x130 [ 455.633290][ T5816] cleanup_mnt+0x437/0x4d0 [ 455.633329][ T5816] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.633375][ T5816] task_work_run+0x1d9/0x270 [ 455.633407][ T5816] ? __pfx_task_work_run+0x10/0x10 [ 455.633445][ T5816] exit_to_user_mode_loop+0xed/0x480 [ 455.633475][ T5816] ? rcu_is_watching+0x15/0xb0 [ 455.633516][ T5816] do_syscall_64+0x32d/0xf80 [ 455.633542][ T5816] ? trace_irq_disable+0x3b/0x150 [ 455.633579][ T5816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.633612][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.633639][ T5816] RIP: 0033:0x7febda79d1d7 [ 455.633662][ T5816] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 455.633683][ T5816] RSP: 002b:00007ffd88cde068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 455.633710][ T5816] RAX: 0000000000000000 RBX: 00007febda831c3b RCX: 00007febda79d1d7 [ 455.633728][ T5816] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd88cde120 [ 455.633745][ T5816] RBP: 00007ffd88cde120 R08: 00007ffd88cdf120 R09: 00000000ffffffff [ 455.633763][ T5816] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd88cdf1b0 [ 455.633786][ T5816] R13: 00007febda831c3b R14: 000000000006f30e R15: 00007ffd88cdf1f0 [ 455.633827][ T5816] [ 456.055781][ T5816] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 456.066273][T17710] loop0: detected capacity change from 0 to 512 [ 456.105583][T17681] loop5: detected capacity change from 0 to 32768 [ 456.305838][T17681] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 456.314863][T17681] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 456.710082][T17681] XFS (loop5): Ending clean mount [ 456.753014][T17681] XFS (loop5): Quotacheck needed: Please wait. [ 456.962154][ T13] hfsplus: b-tree write err: -5, ino 25 [ 456.967886][ T13] hfsplus: b-tree write err: -5, ino 4 [ 457.007313][T17681] XFS (loop5): Quotacheck: Done. [ 457.021742][ T13] hfsplus: b-tree write err: -5, ino 2 [ 457.126617][T17732] set_capacity_and_notify: 1 callbacks suppressed [ 457.126641][T17732] loop0: detected capacity change from 0 to 32768 [ 457.198111][T17732] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5014 (17732) [ 457.251387][T17732] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 457.300060][T17732] BTRFS info (device loop0): using sha256 checksum algorithm [ 457.320099][ T5818] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 457.581408][T17732] BTRFS info (device loop0): enabling ssd optimizations [ 457.621945][T17732] BTRFS info (device loop0): turning on async discard [ 457.628743][T17732] BTRFS info (device loop0): enabling free space tree [ 457.894267][T17777] loop3: detected capacity change from 0 to 1024 [ 458.000432][ T7870] udevd[7870]: symlink '../../loop3' '/dev/disk/by-diskseq/1228.tmp-b7:3' failed: Read-only file system [ 458.035684][ T7870] udevd[7870]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 458.052325][ T5822] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 458.058019][T10451] udevd[10451]: symlink '../../loop2' '/dev/disk/by-diskseq/1216.tmp-b7:2' failed: Read-only file system [ 458.087455][ T7870] udevd[7870]: symlink '../../loop3' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:3' failed: Read-only file system [ 458.104735][ T49] hfsplus: b-tree write err: -5, ino 25 [ 458.120746][ T49] hfsplus: b-tree write err: -5, ino 4 [ 458.120794][T17782] loop1: detected capacity change from 0 to 4096 [ 458.126308][ T49] hfsplus: b-tree write err: -5, ino 2 [ 458.191619][ T5908] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 458.210376][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 458.239030][T17786] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 458.255473][ T7870] udevd[7870]: symlink '../../loop3' '/dev/disk/by-diskseq/1228.tmp-b7:3' failed: Read-only file system [ 458.267046][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-diskseq/1225.tmp-b7:0' failed: Read-only file system [ 458.292697][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-label/\x28\x0b\x89\xc8\xc4\xf54q\x03\xb0E\x3e\x85\x27\xd3\xc23\xfa\x26\xb7#9q\xb9\xd3cD\x01\x90\x9a\xdc\xf8\xba\x18\x18\x02\xb0\xa5\xc8f\xc5\xf5:\xfcÍ—K=l\xd9\xfd\x1b\x1f\xd6\xd0\xc9O_\x0e\xaa\xc7IAY\x95\x03\x05\xc1m\xfd\x1e\x95A\x85\x2f\xf9\xf90\xb9\x1f\x87\xa5.tmp-b7:0' failed: File name too long [ 458.332015][T10451] udevd[10451]: symlink '../../loop2' '/dev/disk/by-diskseq/1216.tmp-b7:2' failed: Read-only file system [ 458.370469][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 458.383038][ T5908] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 458.394338][ T9] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.396543][ T5908] usb 5-1: config 0 has no interface number 0 [ 458.414197][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:0' failed: Read-only file system [ 458.427923][ T5908] usb 5-1: config 0 interface 12 has no altsetting 0 [ 458.431260][ T7870] udevd[7870]: symlink '../../loop3' '/dev/disk/by-diskseq/1228.tmp-b7:3' failed: Read-only file system [ 458.437646][ T5908] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 458.465014][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 458.497433][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.510417][ T9] usb 6-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 458.513260][ T5908] usb 5-1: Product: syz [ 458.523655][ T5908] usb 5-1: Manufacturer: syz [ 458.528250][ T5908] usb 5-1: SerialNumber: syz [ 458.536129][ T5908] usb 5-1: config 0 descriptor?? [ 458.593535][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.667078][ T9] usb 6-1: config 0 descriptor?? [ 459.068470][T17806] loop1: detected capacity change from 0 to 256 [ 459.147044][ T9] hid_parser_main: 33 callbacks suppressed [ 459.147069][ T9] hid-alps 0003:044E:1215.003A: unknown main item tag 0x1 [ 459.174146][ T5908] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 459.220248][ T5908] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 459.227575][ T5908] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 459.242197][ T9] hid-alps 0003:044E:1215.003A: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.5-1/input0 [ 459.256585][T17806] FAT-fs (loop1): Directory bread(block 64) failed [ 459.280607][T17806] FAT-fs (loop1): Directory bread(block 65) failed [ 459.287197][T17806] FAT-fs (loop1): Directory bread(block 66) failed [ 459.311887][ T5908] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 459.348488][T17806] FAT-fs (loop1): Directory bread(block 67) failed [ 459.348576][ T9] usb 6-1: USB disconnect, device number 25 [ 459.393043][ T5908] usb 5-1: USB disconnect, device number 31 [ 459.403633][T17806] FAT-fs (loop1): Directory bread(block 68) failed [ 459.451388][T17806] FAT-fs (loop1): Directory bread(block 69) failed [ 459.458024][T17806] FAT-fs (loop1): Directory bread(block 70) failed [ 459.502236][T17806] FAT-fs (loop1): Directory bread(block 71) failed [ 459.508871][T17806] FAT-fs (loop1): Directory bread(block 72) failed [ 459.535272][T17806] FAT-fs (loop1): Directory bread(block 73) failed [ 459.565968][T17815] ipvlan2: entered promiscuous mode [ 459.579799][T17812] fido_id[17812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 459.582611][T17813] loop2: detected capacity change from 0 to 4096 [ 460.396429][T17819] loop1: detected capacity change from 0 to 65536 [ 460.440625][T17827] loop2: detected capacity change from 0 to 1764 [ 460.489366][T17819] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 460.584549][T17808] loop0: detected capacity change from 0 to 32768 [ 460.659087][T17819] XFS (loop1): Ending clean mount [ 460.671272][T17819] XFS (loop1): Quotacheck needed: Please wait. [ 460.690448][ T58] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_inobt block 0x8008 [ 460.770902][ T58] XFS (loop1): Unmount and run xfs_repair [ 460.776664][ T58] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 460.856687][ T58] 00000000: 49 41 42 33 00 00 00 00 d3 00 ff ff ff ff ff ff IAB3............ [ 460.886172][ T58] 00000010: 00 00 00 00 00 00 80 08 00 00 00 00 00 00 00 00 ................ [ 460.909278][ T58] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 460.935763][ T58] 00000030: 00 00 00 01 e5 03 51 91 00 00 00 00 00 00 00 00 ......Q......... [ 461.003143][ T58] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 461.022539][ T58] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 461.051159][ T58] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 461.084195][ T58] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 461.123398][ T58] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x8008 len 2 error 74 [ 461.135547][ T58] loop1: lost filesystem error report for type 5 error -117 [ 461.156329][T17819] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 461.172972][T17819] loop1: lost filesystem error report for type 5 error -117 [ 461.219501][ T5816] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 461.227078][T17861] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5067'. [ 461.334208][ T5816] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 461.644047][T17871] loop2: detected capacity change from 0 to 256 [ 461.734305][T17871] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 462.106041][T17884] loop2: detected capacity change from 0 to 512 [ 462.150799][T17884] EXT4-fs: Ignoring removed orlov option [ 462.195823][T17884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 462.270719][T17884] EXT4-fs (loop2): orphan cleanup on readonly fs [ 462.293831][T17884] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5077: bg 0: block 248: padding at end of block bitmap is not set [ 462.369556][T17884] loop2: lost filesystem error report for type 5 error -117 [ 462.371540][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 462.385312][ C1] EXT4-fs (loop2): last error at time 1771228727: ext4_validate_block_bitmap:441 [ 462.403648][T17884] __quota_error: 8 callbacks suppressed [ 462.403666][T17884] Quota error (device loop2): write_blk: dquota write failed [ 462.490120][T17884] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 462.554557][T17884] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.5077: Failed to acquire dquot type 1 [ 462.609947][T17884] loop2: lost filesystem error report for type 5 error -117 [ 462.623621][T17884] EXT4-fs (loop2): 1 truncate cleaned up [ 462.670290][T17884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 462.803685][T17884] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 462.832542][T17884] EXT4-fs error (device loop2): __ext4_remount:6806: comm syz.2.5077: Abort forced by user [ 462.862716][T17884] EXT4-fs (loop2): Remounting filesystem read-only [ 462.876131][T17884] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 462.892863][T17884] ext4 filesystem being remounted at /833/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 462.980887][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.013024][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-diskseq/1241.tmp-b7:0' failed: Read-only file system [ 463.024245][ T7870] udevd[7870]: symlink '../../loop5' '/dev/disk/by-diskseq/1227.tmp-b7:5' failed: Read-only file system [ 463.040325][ T5931] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 463.086335][T10451] udevd[10451]: symlink '../../loop2' '/dev/disk/by-diskseq/1245.tmp-b7:2' failed: Read-only file system [ 463.112180][T17923] loop5: detected capacity change from 0 to 64 [ 463.133828][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 463.151360][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-diskseq/1241.tmp-b7:0' failed: Read-only file system [ 463.184909][ T7870] udevd[7870]: symlink '../../loop5' '/dev/disk/by-diskseq/1247.tmp-b7:5' failed: Read-only file system [ 463.197453][T17923] syz.5.5096: attempt to access beyond end of device [ 463.197453][T17923] loop5: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 463.224332][ T5931] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 463.232277][T10451] udevd[10451]: symlink '../../loop2' '/dev/disk/by-diskseq/1245.tmp-b7:2' failed: Read-only file system [ 463.239488][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-diskseq/1242.tmp-b7:1' failed: Read-only file system [ 463.262781][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.272483][ T5931] usb 4-1: Product: syz [ 463.276849][ T5931] usb 4-1: Manufacturer: syz [ 463.303908][ T5931] usb 4-1: SerialNumber: syz [ 463.332768][ T7870] udevd[7870]: symlink '../../loop5' '/dev/disk/by-diskseq/1247.tmp-b7:5' failed: Read-only file system [ 463.341306][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 463.351090][T10451] udevd[10451]: symlink '../../loop2' '/dev/disk/by-diskseq/1246.tmp-b7:2' failed: Read-only file system [ 463.351232][ T5931] usb 4-1: config 0 descriptor?? [ 463.410170][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 463.437499][ T6168] udevd[6168]: symlink '../../loop1' '/dev/disk/by-diskseq/1242.tmp-b7:1' failed: Read-only file system [ 463.461081][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.492023][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 463.503136][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.523597][ T9] usb 5-1: config 0 descriptor?? [ 463.595362][T17935] xt_hashlimit: size too large, truncated to 1048576 [ 463.662439][T17911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.713061][T17911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.769429][ T5931] usb-storage 4-1:0.0: USB Mass Storage device detected [ 463.862027][ T5931] usb 4-1: USB disconnect, device number 24 [ 463.966103][ T9] logitech 0003:046D:C298.003B: item fetching failed at offset 4/5 [ 463.994707][ T9] logitech 0003:046D:C298.003B: parse failed [ 464.012809][ T9] logitech 0003:046D:C298.003B: probe with driver logitech failed with error -22 [ 464.140171][T17926] loop2: detected capacity change from 0 to 32768 [ 464.175387][ T5931] usb 5-1: USB disconnect, device number 32 [ 464.184138][T17926] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5095 (17926) [ 464.260685][T17926] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 464.291860][T17926] BTRFS info (device loop2): using crc32c checksum algorithm [ 464.553781][T17926] BTRFS info (device loop2): enabling ssd optimizations [ 464.621082][T17926] BTRFS info (device loop2): turning on flush-on-commit [ 464.662406][T17926] BTRFS info (device loop2): enabling free space tree [ 464.669399][T17926] BTRFS info (device loop2): enabling auto defrag [ 464.711006][T17926] BTRFS info (device loop2): use lzo compression, level 1 [ 464.758734][T17926] BTRFS info (device loop2): max_inline set to 4096 [ 464.773200][T17982] ipvlan3: entered promiscuous mode [ 465.017498][ T5820] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 465.277551][T18002] loop5: detected capacity change from 0 to 256 [ 465.412736][T18002] FAT-fs (loop5): Directory bread(block 64) failed [ 465.419305][T18002] FAT-fs (loop5): Directory bread(block 65) failed [ 465.456437][T18002] FAT-fs (loop5): Directory bread(block 66) failed [ 465.474974][T18002] FAT-fs (loop5): Directory bread(block 67) failed [ 465.530548][T18002] FAT-fs (loop5): Directory bread(block 68) failed [ 465.539661][T18002] FAT-fs (loop5): Directory bread(block 69) failed [ 465.549105][T18002] FAT-fs (loop5): Directory bread(block 70) failed [ 465.579339][T18002] FAT-fs (loop5): Directory bread(block 71) failed [ 465.606874][T18002] FAT-fs (loop5): Directory bread(block 72) failed [ 465.661457][T18002] FAT-fs (loop5): Directory bread(block 73) failed [ 465.866423][T18021] loop3: detected capacity change from 0 to 64 [ 466.239804][T18029] loop1: detected capacity change from 0 to 4096 [ 466.567344][T18046] loop5: detected capacity change from 0 to 164 [ 467.094405][T18055] loop0: detected capacity change from 0 to 4096 [ 467.106879][T18071] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5157'. [ 467.164854][T18055] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 467.182855][T18055] ntfs3(loop0): ino=1a, mi_enum_attr [ 467.196158][T18055] ntfs3(loop0): ino=1a, mi_enum_attr [ 467.210842][T18055] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 467.682731][T18092] ptrace attach of "./syz-executor exec"[5822] was attempted by ""[18092] [ 467.691681][T18091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5166'. [ 468.037572][ T6132] udevd[6132]: symlink '../../loop3' '/dev/disk/by-diskseq/1254.tmp-b7:3' failed: Read-only file system [ 468.045663][T18108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5176'. [ 468.125029][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-diskseq/1260.tmp-b7:0' failed: Read-only file system [ 468.159032][ T7870] udevd[7870]: symlink '../../loop5' '/dev/disk/by-diskseq/1257.tmp-b7:5' failed: Read-only file system [ 468.239080][ T6132] udevd[6132]: symlink '../../loop3' '/dev/disk/by-diskseq/1254.tmp-b7:3' failed: Read-only file system [ 468.292029][T18117] loop3: detected capacity change from 0 to 16 [ 468.308767][ T7870] udevd[7870]: symlink '../../loop5' '/dev/disk/by-diskseq/1257.tmp-b7:5' failed: Read-only file system [ 468.331613][T18117] erofs (device loop3): mounted with root inode @ nid 36. [ 468.336418][T18121] loop5: detected capacity change from 0 to 512 [ 468.370315][T18121] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 468.388465][ T6132] udevd[6132]: symlink '../../loop3' '/dev/disk/by-diskseq/1261.tmp-b7:3' failed: Read-only file system [ 468.394613][T10451] udevd[10451]: symlink '../../loop1' '/dev/disk/by-diskseq/1258.tmp-b7:1' failed: Read-only file system [ 468.418644][ T7870] udevd[7870]: symlink '../../loop2' '/dev/disk/by-diskseq/1251.tmp-b7:2' failed: Read-only file system [ 468.472008][ T6132] udevd[6132]: symlink '../../loop3' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:3' failed: Read-only file system [ 468.491127][T18121] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 468.509856][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 468.516287][ C0] EXT4-fs (loop5): initial error at time 1771228733: ext4_mb_generate_buddy:1315 [ 468.525491][ C0] EXT4-fs (loop5): last error at time 1771228733: ext4_mb_generate_buddy:1315 [ 468.567307][ T6132] udevd[6132]: symlink '../../loop2' '/dev/disk/by-diskseq/1251.tmp-b7:2' failed: Read-only file system [ 468.608641][T18121] EXT4-fs (loop5): 1 truncate cleaned up [ 468.652449][T18121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.687519][T18128] loop2: detected capacity change from 0 to 256 [ 468.725092][T18128] FAT-fs (loop2): bogus number of FAT sectors [ 468.732513][T18121] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.5.5181: path /885/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0 [ 468.762240][T18128] FAT-fs (loop2): Can't find a valid FAT filesystem [ 468.772884][T18134] loop3: detected capacity change from 0 to 256 [ 468.830123][T18134] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x28b7239b, utbl_chksum : 0xe619d30d) [ 468.923665][ T5818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.031569][T18139] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 469.337521][T18115] loop0: detected capacity change from 0 to 32768 [ 469.367186][T18147] loop2: detected capacity change from 0 to 4096 [ 469.378633][T18147] ntfs3(loop2): ino=0, mi_enum_attr [ 469.395676][T18115] (syz.0.5177,18115,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 469.413706][T18147] ntfs3(loop2): ino=0, mi_enum_attr [ 469.445517][T18115] (syz.0.5177,18115,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 469.514006][T18147] ntfs3(loop2): failed to convert "0080" to cp864 [ 469.533094][T18115] JBD2: Ignoring recovery information on journal [ 469.561136][T18147] ntfs3(loop2): ino=1e, mi_enum_attr [ 469.709799][T18115] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 469.726738][T18157] loop3: detected capacity change from 0 to 256 [ 469.774474][T18157] exfat: Deprecated parameter 'namecase' [ 469.879464][T18157] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 470.147764][T18169] loop5: detected capacity change from 0 to 256 [ 470.215961][T18169] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 470.239461][ T5822] ocfs2: Unmounting device (7,0) on (node local) [ 470.249939][ T5908] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 470.465140][ T5908] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 470.484825][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.542562][ T5908] usb 5-1: config 0 descriptor?? [ 470.551058][T18177] macsec2: entered promiscuous mode [ 470.565511][ T5908] cp210x 5-1:0.0: cp210x converter detected [ 470.640878][T18179] loop5: detected capacity change from 0 to 4096 [ 470.664157][T18179] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 470.758928][T18179] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 470.837553][T18179] ntfs3(loop5): ino=1e, mi_enum_attr [ 471.008829][ T5908] usb 5-1: cp210x converter now attached to ttyUSB0 [ 471.056369][T18191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5213'. [ 471.208994][ T5908] usb 5-1: USB disconnect, device number 33 [ 471.225263][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 471.264422][ T5908] cp210x 5-1:0.0: device disconnected [ 471.498666][T18209] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5221'. [ 471.521795][T18209] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5221'. [ 471.890721][ T5931] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 471.911986][T18228] tipc: Enabled bearer , priority 10 [ 472.012263][T18233] loop3: detected capacity change from 0 to 64 [ 472.070039][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 472.083905][T18229] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 472.103151][T18233] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 472.130883][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.180344][ T5931] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 472.223963][T18229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.248449][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.314859][T18239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.341082][ T5931] usb 6-1: config 0 descriptor?? [ 472.558354][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.610141][T18235] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 472.733995][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.871035][ T5931] glorious 0003:258A:0036.003C: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.5-1/input0 [ 472.974897][T18252] x_tables: ip_tables: statistic.0 match: invalid size 24 (kernel) != (user) 32 [ 473.061691][ T5931] usb 6-1: USB disconnect, device number 26 [ 473.084014][T18246] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 473.136086][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-diskseq/1283.tmp-b7:1' failed: Read-only file system [ 473.150383][T18246] ntfs3(loop3): ino=1a, mi_enum_attr [ 473.155331][T10451] udevd[10451]: symlink '../../loop2' '/dev/disk/by-diskseq/1284.tmp-b7:2' failed: Read-only file system [ 473.155778][T18246] ntfs3(loop3): ino=1a, mi_enum_attr [ 473.182784][T18250] fido_id[18250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 473.240220][ T6000] udevd[6000]: symlink '../../loop0' '/dev/disk/by-diskseq/1285.tmp-b7:0' failed: Read-only file system [ 473.259170][T18246] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 473.275126][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-diskseq/1283.tmp-b7:1' failed: Read-only file system [ 473.361096][T10451] udevd[10451]: symlink '../../loop2' '/dev/disk/by-diskseq/1284.tmp-b7:2' failed: Read-only file system [ 473.394803][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-diskseq/1283.tmp-b7:1' failed: Read-only file system [ 473.451146][ T7870] udevd[7870]: symlink '../../loop3' '/dev/disk/by-diskseq/1286.tmp-b7:3' failed: Read-only file system [ 473.475244][ T7870] udevd[7870]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 473.512355][ T7870] udevd[7870]: symlink '../../loop3' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:3' failed: Read-only file system [ 473.544785][ T6132] udevd[6132]: symlink '../../loop2' '/dev/disk/by-diskseq/1284.tmp-b7:2' failed: Read-only file system [ 473.580269][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 473.627855][T18266] netlink: 'syz.2.5246': attribute type 3 has an invalid length. [ 473.701230][T18269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5248'. [ 473.742087][T18269] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5248'. [ 473.768465][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.803700][ T9] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 473.857236][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 473.882682][ T9] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 473.903627][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.933299][ T9] usb 5-1: config 0 descriptor?? [ 473.976129][T18253] set_capacity_and_notify: 4 callbacks suppressed [ 473.976151][T18253] loop1: detected capacity change from 0 to 32768 [ 474.016454][T18253] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5240 (18253) [ 474.093905][T18253] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 474.142248][T18253] BTRFS info (device loop1): using sha256 checksum algorithm [ 474.279601][T18253] BTRFS info (device loop1): enabling ssd optimizations [ 474.317130][T18253] BTRFS info (device loop1): turning on async discard [ 474.343121][T18253] BTRFS info (device loop1): enabling free space tree [ 474.367477][ T9] waltop 0003:172F:0500.003D: item fetching failed at offset 12/13 [ 474.404415][ T9] waltop 0003:172F:0500.003D: probe with driver waltop failed with error -22 [ 474.598612][T16500] usb 5-1: USB disconnect, device number 34 [ 474.919946][ T9] IPVS: starting estimator thread 0... [ 475.032825][T18317] IPVS: using max 26 ests per chain, 62400 per kthread [ 475.066011][ T5816] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 475.616185][T18330] loop3: detected capacity change from 0 to 2048 [ 475.652738][T18330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 475.675656][T18306] loop5: detected capacity change from 0 to 32768 [ 475.791217][T18306] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 475.808601][T18340] loop0: detected capacity change from 0 to 2048 [ 475.870860][T18340] Dev loop0: unable to read partition block 23055453 [ 475.892663][T18340] loop0: RDSK (1311599104) unable to read partition table [ 475.950738][T18340] loop0: partition table beyond EOD, truncated [ 475.958957][T18306] XFS (loop5): Ending clean mount [ 476.018447][T18306] XFS (loop5): Quotacheck needed: Please wait. [ 476.026697][T18340] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 476.146835][T18306] XFS (loop5): Quotacheck: Done. [ 476.364442][ T5818] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 476.709565][T18369] loop3: detected capacity change from 0 to 64 [ 476.780488][T16500] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 476.948375][T16500] usb 5-1: Using ep0 maxpacket: 32 [ 476.961010][T16500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.971959][T18376] loop3: detected capacity change from 0 to 256 [ 476.985189][T18376] exfat: Deprecated parameter 'utf8' [ 477.000145][T16500] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 477.006417][T18376] exfat: Deprecated parameter 'utf8' [ 477.009178][T16500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.028038][T16500] usb 5-1: config 0 descriptor?? [ 477.060376][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 477.105053][T18376] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 477.242786][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 477.280768][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.325113][ T9] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 477.365096][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 477.387058][ T9] usb 2-1: Manufacturer: syz [ 477.416686][ T9] usb 2-1: config 0 descriptor?? [ 477.458986][T16500] uclogic 0003:28BD:0071.003E: interface is invalid, ignoring [ 477.563342][T18390] tunl0: Caught tx_queue_len zero misconfig [ 477.605696][T18390] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5292'. [ 477.692148][T16500] usb 5-1: USB disconnect, device number 35 [ 477.894774][ T9] cougar 0003:060B:700A.003F: unknown main item tag 0x0 [ 477.921223][T18402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5298'. [ 477.922524][ T9] cougar 0003:060B:700A.003F: unknown main item tag 0x0 [ 477.991216][ T9] cougar 0003:060B:700A.003F: unknown main item tag 0x0 [ 477.998196][ T9] cougar 0003:060B:700A.003F: unknown main item tag 0x0 [ 478.032344][ T9] cougar 0003:060B:700A.003F: unknown main item tag 0x0 [ 478.062962][ T9] cougar 0003:060B:700A.003F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 478.142109][ T9] usb 2-1: USB disconnect, device number 26 [ 478.192493][T10451] udevd[10451]: symlink '../../loop2' '/dev/disk/by-diskseq/1284.tmp-b7:2' failed: Read-only file system [ 478.256973][ T7870] udevd[7870]: symlink '../../loop0' '/dev/disk/by-diskseq/1294.tmp-b7:0' failed: Read-only file system [ 478.283024][T10451] udevd[10451]: symlink '../../loop5' '/dev/disk/by-diskseq/1296.tmp-b7:5' failed: Read-only file system [ 478.309654][ T6168] udevd[6168]: symlink '../../loop3' '/dev/disk/by-diskseq/1300.tmp-b7:3' failed: Read-only file system [ 478.340649][T18417] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 478.401104][ T7870] udevd[7870]: symlink '../../loop2' '/dev/disk/by-diskseq/1284.tmp-b7:2' failed: Read-only file system [ 478.427472][T10451] udevd[10451]: symlink '../../loop0' '/dev/disk/by-diskseq/1294.tmp-b7:0' failed: Read-only file system [ 478.484558][T18415] fido_id[18415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 478.509742][ T7870] udevd[7870]: symlink '../../loop3' '/dev/disk/by-diskseq/1300.tmp-b7:3' failed: Read-only file system [ 478.565365][ T7870] udevd[7870]: symlink '../../loop5' '/dev/disk/by-diskseq/1296.tmp-b7:5' failed: Read-only file system [ 478.679402][ T7870] udevd[7870]: symlink '../../loop2' '/dev/disk/by-diskseq/1284.tmp-b7:2' failed: Read-only file system [ 478.761516][ T6132] udevd[6132]: symlink '../../loop3' '/dev/disk/by-diskseq/1300.tmp-b7:3' failed: Read-only file system [ 478.825325][T18436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5312'. [ 479.257680][T18458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5324'. [ 479.398411][T18460] loop1: detected capacity change from 0 to 4096 [ 479.447523][T18460] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 479.612990][T18468] mkiss: ax0: crc mode is auto. [ 479.667952][ T30] audit: type=1800 audit(1771228744.825:288): pid=18460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5325" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 479.763695][T18475] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 480.191793][T18478] loop2: detected capacity change from 0 to 4096 [ 480.316211][T18478] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 480.400388][T18478] ntfs3(loop2): Failed to load $Extend (-22). [ 480.426858][T18478] ntfs3(loop2): Failed to initialize $Extend. [ 480.672267][T18507] loop3: detected capacity change from 0 to 16 [ 480.730538][T18507] erofs (device loop3): mounted with root inode @ nid 36. [ 481.064531][T18522] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5356'. [ 481.407185][T18542] loop1: detected capacity change from 0 to 512 [ 481.498791][T18542] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.5363: bad orphan inode 15 [ 481.530914][T16500] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 481.544103][T18542] loop1: lost filesystem error report for type 5 error -117 [ 481.544522][T18542] ext4_test_bit(bit=14, block=5) = 0 [ 481.551866][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 481.551889][ C0] EXT4-fs (loop1): initial error at time 1771228746: ext4_orphan_get:1417 [ 481.551921][ C0] EXT4-fs (loop1): last error at time 1771228746: ext4_orphan_get:1417 [ 481.614154][T18542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.719972][T16500] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 481.728080][T16500] usb 6-1: config 0 has no interface number 0 [ 481.749912][T16500] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 481.773763][T18559] hpfs: Bad value for 'gid' [ 481.779326][T18559] hpfs: Bad value for 'gid' [ 481.788639][T16500] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 481.801535][T18546] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 481.805325][T16500] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 481.833853][T16500] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 481.845671][T16500] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 481.867321][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.877878][T16500] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 481.939912][T16500] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 481.957133][T16500] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.968574][T18563] loop2: detected capacity change from 0 to 128 [ 482.002595][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 482.009436][T16500] usb 6-1: config 0 descriptor?? [ 482.017191][T18563] EXT4-fs: inline encryption not supported [ 482.024876][T18533] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 482.032901][T18563] EXT4-fs (loop2): Test dummy encryption mode enabled [ 482.040484][T18533] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 482.077981][T18566] trusted_key: encrypted_key: key user:syz not found [ 482.103879][T18563] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 482.133223][T16500] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 482.133595][T18563] ext4 filesystem being mounted at /878/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 482.187612][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 482.225751][ T9] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 482.270479][ T30] audit: type=1800 audit(1771228747.425:289): pid=18563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5374" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 482.295312][T18567] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.305023][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 482.318822][T18567] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.326418][ T9] usb 5-1: config 220 has no interface number 2 [ 482.337219][ T5820] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 482.360733][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 482.382104][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 482.410024][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 482.420689][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 482.432697][ T5931] usb 6-1: USB disconnect, device number 27 [ 482.453138][ T5931] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 482.463565][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 482.482172][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.507921][ T9] usb 5-1: Product: syz [ 482.517274][ T9] usb 5-1: Manufacturer: syz [ 482.524433][ T9] usb 5-1: SerialNumber: syz [ 482.607175][T18572] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.614436][T18572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.635402][T18572] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.642623][T18572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.725616][T18572] vlan2: left allmulticast mode [ 482.735804][T18572] team0: left allmulticast mode [ 482.745121][T18572] team_slave_0: left allmulticast mode [ 482.753599][T18572] team_slave_1: left allmulticast mode [ 482.775314][ T9] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 482.792679][ T9] uvcvideo 5-1:220.0: No valid video chain found. [ 482.799609][T18572] ipvlan2: left promiscuous mode [ 482.806631][ T9] usb 5-1: selecting invalid altsetting 0 [ 482.815102][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5380'. [ 482.838921][ T9] usb 5-1: selecting invalid altsetting 0 [ 482.876354][ T9] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 482.916778][ T9] usb 5-1: USB disconnect, device number 36 [ 483.157810][T18592] loop5: detected capacity change from 0 to 512 [ 483.222794][T18592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 483.239440][ T6132] udevd[6132]: symlink '../../loop5' '/dev/disk/by-diskseq/1311.tmp-b7:5' failed: Read-only file system [ 483.252289][T18592] ext4 filesystem being mounted at /914/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.319186][ T7870] udevd[7870]: symlink '../../loop1' '/dev/disk/by-diskseq/1309.tmp-b7:1' failed: Read-only file system [ 483.333729][ T6132] udevd[6132]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 483.409039][ T6132] udevd[6132]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0007-000000000000.tmp-b7:5' failed: Read-only file system [ 483.487857][ T6132] udevd[6132]: symlink '../../loop5' '/dev/disk/by-diskseq/1311.tmp-b7:5' failed: Read-only file system [ 483.533438][ T6132] udevd[6132]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 483.555609][ T5818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 483.568275][ T6132] udevd[6132]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0007-000000000000.tmp-b7:5' failed: Read-only file system [ 483.614514][ T7870] udevd[7870]: symlink '../../loop1' '/dev/disk/by-diskseq/1309.tmp-b7:1' failed: Read-only file system [ 483.687644][ T6132] udevd[6132]: symlink '../../loop5' '/dev/disk/by-diskseq/1311.tmp-b7:5' failed: Read-only file system [ 483.749663][ T6132] udevd[6132]: symlink '../../loop5' '/dev/disk/by-diskseq/1311.tmp-b7:5' failed: Read-only file system [ 483.787181][ T5908] kernel read not supported for file /media7 (pid: 5908 comm: kworker/1:4) [ 483.811190][T18589] loop3: detected capacity change from 0 to 32768 [ 484.615540][T18625] loop5: detected capacity change from 0 to 128 [ 484.632242][T18625] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 484.674700][T18625] hpfs: filesystem error: improperly stopped [ 484.680483][T18628] gtp0: entered promiscuous mode [ 484.684795][T18625] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 484.686953][T18628] gtp0: entered allmulticast mode [ 484.719991][T18625] hpfs: You really don't want any checks? You are crazy... [ 484.740134][T18625] hpfs: hpfs_map_sector(): read error [ 484.745604][T18625] hpfs: code page support is disabled [ 484.760762][T18625] hpfs: hpfs_map_4sectors(): unaligned read [ 484.766754][T18625] hpfs: hpfs_map_4sectors(): unaligned read [ 484.783787][T18625] hpfs: filesystem error: unable to find root dir [ 485.101514][T18636] loop5: detected capacity change from 0 to 128 [ 485.175129][T18636] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 485.201557][T18636] ext4 filesystem being mounted at /921/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 485.330111][ T5818] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 485.429528][T18646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5409'. [ 485.969810][T18662] loop3: detected capacity change from 0 to 1024 [ 486.016060][T18662] hfsplus: bad catalog entry type [ 486.577342][T18683] loop1: detected capacity change from 0 to 256 [ 486.641290][T18683] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4657f4e6, utbl_chksum : 0xe619d30d) [ 486.783701][T18686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5429'. [ 486.826909][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 487.010130][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 487.026748][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 487.040205][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 487.040236][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.043142][ T9] usb 4-1: config 0 descriptor?? [ 487.347415][T18697] xt_hashlimit: size too large, truncated to 1048576 [ 487.510728][ T9] lenovo 0003:17EF:6009.0040: hidraw0: USB HID v0.f4 Device [HID 17ef:6009] on usb-dummy_hcd.3-1/input0 [ 487.605906][T18706] loop1: detected capacity change from 0 to 256 [ 487.685186][T16500] usb 4-1: USB disconnect, device number 25 [ 487.702555][T18706] FAT-fs (loop1): Directory bread(block 64) failed [ 487.709111][T18706] FAT-fs (loop1): Directory bread(block 65) failed [ 487.764656][T18706] FAT-fs (loop1): Directory bread(block 66) failed [ 487.800286][T18706] FAT-fs (loop1): Directory bread(block 67) failed [ 487.813992][T18705] fido_id[18705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 487.850062][T18706] FAT-fs (loop1): Directory bread(block 68) failed [ 487.856702][T18706] FAT-fs (loop1): Directory bread(block 69) failed [ 487.885580][T18706] FAT-fs (loop1): Directory bread(block 70) failed [ 487.912191][T18706] FAT-fs (loop1): Directory bread(block 71) failed [ 487.940564][T18706] FAT-fs (loop1): Directory bread(block 72) failed [ 487.947108][T18706] FAT-fs (loop1): Directory bread(block 73) failed [ 488.004951][ T30] audit: type=1800 audit(1771228753.165:290): pid=18706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5437" name="file1" dev="loop1" ino=1049095 res=0 errno=0 [ 488.299397][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-diskseq/1323.tmp-b7:1' failed: Read-only file system [ 488.358789][T18725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5446'. [ 488.365724][ T7870] udevd[7870]: symlink '../../loop5' '/dev/disk/by-diskseq/1318.tmp-b7:5' failed: Read-only file system [ 488.404295][T10451] udevd[10451]: symlink '../../loop3' '/dev/disk/by-diskseq/1320.tmp-b7:3' failed: Read-only file system [ 488.411411][ T6168] udevd[6168]: symlink '../../loop0' '/dev/disk/by-diskseq/1294.tmp-b7:0' failed: Read-only file system [ 488.426356][T18725] bond0: option lp_interval: invalid value (18446744073709551612) [ 488.431232][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-diskseq/1324.tmp-b7:1' failed: Read-only file system [ 488.454761][T18727] loop3: detected capacity change from 0 to 256 [ 488.474732][T18725] bond0: option lp_interval: allowed values 1 - 2147483647 [ 488.566983][T18727] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3967cd3a, utbl_chksum : 0xe619d30d) [ 488.584166][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-diskseq/1324.tmp-b7:1' failed: Read-only file system [ 488.607275][ T7870] udevd[7870]: symlink '../../loop3' '/dev/disk/by-diskseq/1325.tmp-b7:3' failed: Read-only file system [ 488.663066][ T7870] udevd[7870]: symlink '../../loop3' '/dev/disk/by-uuid/1234-1234.tmp-b7:3' failed: Read-only file system [ 488.689019][T10451] udevd[10451]: symlink '../../loop2' '/dev/disk/by-diskseq/1310.tmp-b7:2' failed: Read-only file system [ 488.689346][ T6168] udevd[6168]: symlink '../../loop5' '/dev/disk/by-diskseq/1318.tmp-b7:5' failed: Read-only file system [ 488.703481][T18727] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 489.035436][ T5826] kernel read not supported for file /vcs (pid: 5826 comm: kworker/0:3) [ 489.162102][ T5908] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 489.235611][T18754] Bluetooth: MGMT ver 1.23 [ 489.351017][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.369804][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 489.429893][ T5908] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 489.438982][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.515885][ T5908] usb 2-1: config 0 descriptor?? [ 489.951584][ T5908] elecom 0003:056E:00FC.0041: unknown global tag 0xc [ 489.958323][ T5908] elecom 0003:056E:00FC.0041: item 0 0 1 12 parsing failed [ 489.996839][ T5908] elecom 0003:056E:00FC.0041: probe with driver elecom failed with error -22 [ 490.047312][T18784] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5474'. [ 490.074612][T18779] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 490.091516][T18779] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 490.147331][ T9] usb 2-1: USB disconnect, device number 27 [ 490.323110][T18779] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 490.353605][T18779] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 490.363554][T18779] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 490.364672][T18788] loop5: detected capacity change from 0 to 8192 [ 490.441923][T18779] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 490.468329][T18779] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 490.599055][T18779] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 490.861284][ T1204] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 490.914705][T18810] loop5: detected capacity change from 0 to 256 [ 490.923072][T18810] exfat: Deprecated parameter 'utf8' [ 490.957189][T18810] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x3e6496f2, utbl_chksum : 0xe619d30d) [ 491.064725][ T1204] usb 4-1: Using ep0 maxpacket: 32 [ 491.100443][ T1204] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 491.137015][ T1204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.159900][ T1204] usb 4-1: Product: syz [ 491.164184][ T1204] usb 4-1: Manufacturer: syz [ 491.185238][ T1204] usb 4-1: SerialNumber: syz [ 491.215898][ T1204] usb 4-1: config 0 descriptor?? [ 491.228565][ T1204] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 491.250805][ T1204] dw2102: su3000_power_ctrl: 1, initialized 0 [ 491.256936][ T1204] dvb-usb: bulk message failed: -22 (2/0) [ 491.282854][ T1204] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 491.317338][ T1204] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 491.345696][ T1204] usb 4-1: media controller created [ 491.357294][ T1204] dvb-usb: bulk message failed: -22 (6/0) [ 491.367076][ T1204] dw2102: i2c transfer failed. [ 491.382236][ T1204] dvb-usb: bulk message failed: -22 (6/0) [ 491.408509][ T1204] dw2102: i2c transfer failed. [ 491.413978][ T1204] dvb-usb: bulk message failed: -22 (6/0) [ 491.428635][ T1204] dw2102: i2c transfer failed. [ 491.449962][ T1204] dvb-usb: bulk message failed: -22 (6/0) [ 491.476171][ T1204] dw2102: i2c transfer failed. [ 491.485169][T18822] loop0: detected capacity change from 0 to 128 [ 491.509986][ T1204] dvb-usb: bulk message failed: -22 (6/0) [ 491.517862][ T1204] dw2102: i2c transfer failed. [ 491.530642][ T1204] dvb-usb: bulk message failed: -22 (6/0) [ 491.543561][ T1204] dw2102: i2c transfer failed. [ 491.554187][ T1204] dvb-usb: MAC address: 02:02:02:02:02:02 [ 491.613524][ T1204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 491.700491][ T1204] dvb-usb: bulk message failed: -22 (3/0) [ 491.706252][ T1204] dw2102: command 0x0e transfer failed. [ 491.734100][ T1204] dvb-usb: bulk message failed: -22 (3/0) [ 491.754416][ T1204] dw2102: command 0x0e transfer failed. [ 491.810615][T18826] loop2: detected capacity change from 0 to 4096 [ 492.089623][ T1204] dvb-usb: bulk message failed: -22 (3/0) [ 492.116823][ T1204] dw2102: command 0x0e transfer failed. [ 492.151414][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 492.171714][ T1204] dvb-usb: bulk message failed: -22 (3/0) [ 492.211224][ T1204] dw2102: command 0x0e transfer failed. [ 492.262714][ T1204] dvb-usb: bulk message failed: -22 (1/0) [ 492.269645][ T1204] dw2102: command 0x51 transfer failed. [ 492.379998][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 492.429797][ T1204] DVB: Unable to find symbol ds3000_attach() [ 492.460841][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 492.474299][ T1204] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 492.621951][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 492.681798][T18847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5504'. [ 492.702198][ T1204] rc_core: IR keymap rc-su3000 not found [ 492.711570][ T1204] Registered IR keymap rc-empty [ 492.729244][ T1204] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 492.788446][ T1204] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input25 [ 492.831819][ T1204] dvb-usb: schedule remote query interval to 150 msecs. [ 492.856887][ T1204] dw2102: su3000_power_ctrl: 0, initialized 1 [ 492.882392][ T1204] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 492.909920][ T5908] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 492.953235][ T1204] usb 4-1: USB disconnect, device number 26 [ 493.071775][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 493.082224][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.097935][T18855] loop0: detected capacity change from 0 to 4096 [ 493.099872][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.150376][T18855] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 493.150444][ T5908] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 493.168567][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.184021][T18855] ntfs3(loop0): Failed to load $Extend (-22). [ 493.190866][T18855] ntfs3(loop0): Failed to initialize $Extend. [ 493.209762][ T5908] usb 2-1: config 0 descriptor?? [ 493.224487][T18855] ntfs3(loop0): ino=21, "blkio.throttle.io_serviced_recursive" fallocate(0x10) is not supported [ 493.321741][ T7870] udevd[7870]: symlink '../../loop0' '/dev/disk/by-diskseq/1335.tmp-b7:0' failed: Read-only file system [ 493.356640][ T7870] udevd[7870]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 493.381266][ T1204] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 493.403662][ T7870] udevd[7870]: symlink '../../loop0' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:0' failed: Read-only file system [ 493.432525][T10451] udevd[10451]: symlink '../../loop3' '/dev/disk/by-diskseq/1326.tmp-b7:3' failed: Read-only file system [ 493.457766][T18844] loop2: detected capacity change from 0 to 32768 [ 493.490922][T18844] xfs: Deprecated parameter 'ikeep' [ 493.516577][T18844] XFS: ikeep mount option is deprecated. [ 493.546064][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-diskseq/1335.tmp-b7:0' failed: Read-only file system [ 493.622153][T18844] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 493.623315][T10451] udevd[10451]: symlink '../../loop3' '/dev/disk/by-diskseq/1326.tmp-b7:3' failed: Read-only file system [ 493.661559][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-diskseq/1335.tmp-b7:0' failed: Read-only file system [ 493.715046][ T5908] kone 0003:1E7D:2CED.0042: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 493.727298][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-diskseq/1335.tmp-b7:0' failed: Read-only file system [ 493.736254][T18844] XFS (loop2): Ending clean mount [ 493.757039][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-diskseq/1337.tmp-b7:0' failed: Read-only file system [ 493.804805][T18844] XFS (loop2): Quotacheck needed: Please wait. [ 493.881438][ T5908] kone 0003:1E7D:2CED.0042: couldn't init struct kone_device [ 493.919595][ T5908] kone 0003:1E7D:2CED.0042: couldn't install mouse [ 493.936993][ T6168] udevd[6168]: symlink '../../loop2' '/dev/disk/by-diskseq/1336.tmp-b7:2' failed: Read-only file system [ 493.977536][ T5908] kone 0003:1E7D:2CED.0042: probe with driver kone failed with error -5 [ 493.986682][T18844] XFS (loop2): Quotacheck: Done. [ 494.048710][ T5908] usb 2-1: USB disconnect, device number 28 [ 494.221736][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 494.271695][ T5820] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 494.450993][T18888] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5520'. [ 494.470860][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 494.549928][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 494.943743][T18882] loop3: detected capacity change from 0 to 32768 [ 495.041681][T18882] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 495.100550][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5519'. [ 495.251122][T18924] program syz.5.5532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.345230][T18929] loop5: detected capacity change from 0 to 128 [ 495.382456][T18882] XFS (loop3): Ending clean mount [ 495.647029][ T5817] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 496.102012][T18947] loop1: detected capacity change from 0 to 16 [ 496.169817][T18947] erofs (device loop1): mounted with root inode @ nid 36. [ 496.203425][T18947] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 496.241117][ T5827] erofs (device loop1): failed to decompress (shifted) -EOPNOTSUPP @ pa 4096 size 4096 => 4868 [ 496.261367][T18947] erofs (device loop1): failed to decompress (shifted) -EOPNOTSUPP @ pa 4096 size 4096 => 4868 [ 496.273350][T18947] erofs (device loop1): read error -95 @ 1 of nid 89 [ 496.280614][ T30] audit: type=1800 audit(1771228761.445:291): pid=18947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5544" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 496.312287][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 496.604639][T18960] loop1: detected capacity change from 0 to 512 [ 496.626318][T18965] loop5: detected capacity change from 0 to 512 [ 496.628375][ T30] audit: type=1326 audit(1771228761.785:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18966 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f119bf79 code=0x7ffc0000 [ 496.674118][T18967] loop2: detected capacity change from 0 to 512 [ 496.691479][T18965] msdos: Unknown parameter 'smackfsroot' [ 496.709255][T18960] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 496.723412][T18967] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 496.809939][ T30] audit: type=1326 audit(1771228761.785:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18966 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f119bf79 code=0x7ffc0000 [ 496.810290][T18960] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 496.904237][T18960] EXT4-fs (loop1): orphan cleanup on readonly fs [ 496.910835][T18967] EXT4-fs (loop2): 1 truncate cleaned up [ 496.918329][T18967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.966091][ T30] audit: type=1326 audit(1771228761.795:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18966 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f19f119bf79 code=0x7ffc0000 [ 496.988845][T18960] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 496.989050][ T30] audit: type=1326 audit(1771228761.795:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18966 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f19f119bce2 code=0x7ffc0000 [ 497.022922][ T30] audit: type=1326 audit(1771228761.795:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18966 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f19f115c84e code=0x7ffc0000 [ 497.056798][T18960] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 497.058450][ T30] audit: type=1326 audit(1771228761.815:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18966 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f19f119bda7 code=0x7ffc0000 [ 497.141929][ T30] audit: type=1326 audit(1771228761.815:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18966 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19f115c84e code=0x7ffc0000 [ 497.151819][T18960] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 497.179029][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.210780][T18927] loop0: detected capacity change from 0 to 40427 [ 497.259949][ T30] audit: type=1326 audit(1771228761.815:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18966 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19f119bc0b code=0x7ffc0000 [ 497.289812][T18960] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5547: bg 0: block 40: padding at end of block bitmap is not set [ 497.310858][T18927] F2FS-fs (loop0): build fault injection rate: 684 [ 497.370477][T18960] loop1: lost filesystem error report for type 5 error -117 [ 497.370831][T18960] EXT4-fs (loop1): Remounting filesystem read-only [ 497.384708][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 497.384733][ C0] EXT4-fs (loop1): initial error at time 1771228762: ext4_validate_block_bitmap:441 [ 497.384765][ C0] EXT4-fs (loop1): last error at time 1771228762: ext4_validate_block_bitmap:441 [ 497.420020][T18927] F2FS-fs (loop0): build fault injection type: 0x0 [ 497.455719][T18927] F2FS-fs (loop0): invalid crc value [ 497.488016][T18960] EXT4-fs (loop1): 1 truncate cleaned up [ 497.516420][T18960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 497.705307][T18927] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 497.723145][T18990] loop5: detected capacity change from 0 to 64 [ 497.749439][T18927] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 497.812739][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.876168][T18961] loop3: detected capacity change from 0 to 32768 [ 497.965780][T18961] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 498.318997][T18961] XFS (loop3): Ending clean mount [ 498.358660][ T6168] udevd[6168]: symlink '../../loop2' '/dev/disk/by-diskseq/1350.tmp-b7:2' failed: Read-only file system [ 498.359757][T10451] udevd[10451]: symlink '../../loop1' '/dev/disk/by-diskseq/1353.tmp-b7:1' failed: Read-only file system [ 498.377953][ T7870] udevd[7870]: symlink '../../loop5' '/dev/disk/by-diskseq/1351.tmp-b7:5' failed: Read-only file system [ 498.483486][ T6000] udevd[6000]: symlink '../../loop0' '/dev/disk/by-diskseq/1349.tmp-b7:0' failed: Read-only file system [ 498.545977][ T6132] udevd[6132]: symlink '../../loop3' '/dev/disk/by-diskseq/1352.tmp-b7:3' failed: Read-only file system [ 498.546529][T10451] udevd[10451]: symlink '../../loop0' '/dev/disk/by-diskseq/1349.tmp-b7:0' failed: Read-only file system [ 498.564313][ T7870] udevd[7870]: symlink '../../loop5' '/dev/disk/by-diskseq/1351.tmp-b7:5' failed: Read-only file system [ 498.580438][ T6168] udevd[6168]: symlink '../../loop1' '/dev/disk/by-diskseq/1353.tmp-b7:1' failed: Read-only file system [ 498.607141][ T5817] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 498.639562][T10451] udevd[10451]: symlink '../../loop0' '/dev/disk/by-diskseq/1355.tmp-b7:0' failed: Read-only file system [ 498.641202][ T6132] udevd[6132]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system [ 498.865087][T19026] loop3: detected capacity change from 0 to 2048 [ 498.927509][T19026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.019535][T19030] loop0: detected capacity change from 0 to 22 [ 499.097325][T19030] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 499.116597][T19026] EXT4-fs: Ignoring removed orlov option [ 499.130825][T19026] EXT4-fs: Ignoring removed bh option [ 499.143625][T19026] EXT4-fs: can't change dax mount option while remounting [ 499.147983][T19030] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 499.322995][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.468149][T19011] loop2: detected capacity change from 0 to 32768 [ 499.493933][T19036] program syz.0.5574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 499.588252][T19011] find_entry called with index = 0 [ 499.611880][T19011] read_mapping_page failed! [ 499.616412][T19011] ERROR: (device loop2): txCommit: [ 499.616412][T19011] [ 499.714118][T19011] ERROR: (device loop2): diFree: numfree > numinos [ 499.714118][T19011] [ 499.875779][T19053] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5582'. [ 499.904738][T19053] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5582'. [ 500.146792][T16500] kernel write not supported for file /sg0 (pid: 16500 comm: kworker/1:1) [ 500.379019][T19070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5589'. [ 500.388085][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 500.711121][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.717525][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.060286][ T1204] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 501.147769][T19090] set_capacity_and_notify: 2 callbacks suppressed [ 501.147791][T19090] loop0: detected capacity change from 0 to 1024 [ 501.231399][T19090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 501.232873][ T1204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.244218][T19090] ext4 filesystem being mounted at /885/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.290389][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 501.355095][T19065] loop5: detected capacity change from 0 to 40427 [ 501.368585][ T1204] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 501.388066][ T1204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.396385][T19065] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 501.411756][ T1204] usb 5-1: config 0 descriptor?? [ 501.420945][T19065] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 501.455560][T19065] F2FS-fs (loop5): invalid crc value [ 501.473697][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 501.511301][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.552174][ T9] usb 4-1: config 0 descriptor?? [ 501.557805][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 501.790632][T19065] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 501.828739][ T1204] sony 0003:1345:3008.0043: unknown main item tag 0x0 [ 501.837564][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 501.847385][ T1204] sony 0003:1345:3008.0043: unbalanced collection at end of report description [ 501.859073][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 501.883134][ T1204] sony 0003:1345:3008.0043: parse failed [ 501.890543][ T9] usb 4-1: USB disconnect, device number 27 [ 501.899617][T19065] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 501.917311][ T1204] sony 0003:1345:3008.0043: probe with driver sony failed with error -22 [ 501.935166][T19065] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 501.956766][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 501.956784][ T30] audit: type=1326 audit(1771228767.115:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19108 comm="syz.1.5606" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febda79bf79 code=0x0 [ 502.035570][ T30] audit: type=1800 audit(1771228767.195:313): pid=19065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5587" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 502.125985][ T1204] usb 5-1: USB disconnect, device number 37 [ 502.192466][ T5818] syz-executor: attempt to access beyond end of device [ 502.192466][ T5818] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 502.223310][ T5818] CPU: 1 UID: 0 PID: 5818 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 502.223350][ T5818] Tainted: [L]=SOFTLOCKUP [ 502.223359][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.223375][ T5818] Call Trace: [ 502.223385][ T5818] [ 502.223397][ T5818] dump_stack_lvl+0xe8/0x150 [ 502.223439][ T5818] f2fs_handle_critical_error+0x37c/0x540 [ 502.223485][ T5818] f2fs_write_end_io+0xcdb/0xff0 [ 502.223553][ T5818] __submit_merged_bio+0x256/0x700 [ 502.223598][ T5818] __submit_merged_write_cond+0x3c9/0x4e0 [ 502.223646][ T5818] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 502.223705][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.223748][ T5818] f2fs_write_data_pages+0x2975/0x35e0 [ 502.223845][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 502.223902][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.223934][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.223965][ T5818] ? css_rstat_updated+0x23a/0x530 [ 502.224029][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.224060][ T5818] ? rcu_is_watching+0x15/0xb0 [ 502.224098][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.224128][ T5818] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 502.224167][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.224197][ T5818] ? lru_gen_update_size+0x7c9/0xd10 [ 502.224245][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.224281][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.224310][ T5818] ? __lock_acquire+0x6b5/0x2cf0 [ 502.224352][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.224401][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.224438][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 502.224481][ T5818] do_writepages+0x32e/0x550 [ 502.224518][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.224553][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.224589][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.224620][ T5818] ? do_raw_spin_unlock+0xf5/0x210 [ 502.224654][ T5818] filemap_fdatawrite+0x1e9/0x2f0 [ 502.224696][ T5818] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 502.224791][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.224826][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.224864][ T5818] ? do_raw_spin_unlock+0xf5/0x210 [ 502.224898][ T5818] f2fs_sync_dirty_inodes+0x30e/0x860 [ 502.224963][ T5818] f2fs_write_checkpoint+0x9df/0x26a0 [ 502.225054][ T5818] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 502.225096][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.225208][ T5818] kill_f2fs_super+0x314/0x720 [ 502.225259][ T5818] ? __pfx_kill_f2fs_super+0x10/0x10 [ 502.225318][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.225348][ T5818] ? lockdep_hardirqs_on+0x7a/0x110 [ 502.225376][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.225426][ T5818] deactivate_locked_super+0xbc/0x130 [ 502.225467][ T5818] cleanup_mnt+0x437/0x4d0 [ 502.225507][ T5818] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.225550][ T5818] task_work_run+0x1d9/0x270 [ 502.225580][ T5818] ? __pfx_task_work_run+0x10/0x10 [ 502.225624][ T5818] exit_to_user_mode_loop+0xed/0x480 [ 502.225654][ T5818] ? rcu_is_watching+0x15/0xb0 [ 502.225697][ T5818] do_syscall_64+0x32d/0xf80 [ 502.225724][ T5818] ? trace_irq_disable+0x3b/0x150 [ 502.225760][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.225818][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.225843][ T5818] RIP: 0033:0x7fbd4bd9d1d7 [ 502.225868][ T5818] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 502.225889][ T5818] RSP: 002b:00007ffd2f45b4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 502.225914][ T5818] RAX: 0000000000000000 RBX: 00007fbd4be31c3b RCX: 00007fbd4bd9d1d7 [ 502.225932][ T5818] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2f45b560 [ 502.225948][ T5818] RBP: 00007ffd2f45b560 R08: 00007ffd2f45c560 R09: 00000000ffffffff [ 502.225966][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2f45c5f0 [ 502.225983][ T5818] R13: 00007fbd4be31c3b R14: 000000000007a92d R15: 00007ffd2f45c630 [ 502.226029][ T5818] [ 502.226040][ T5818] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 502.648543][T19106] loop0: detected capacity change from 0 to 32768 [ 502.695893][T19106] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 502.839492][T19106] XFS (loop0): Ending clean mount [ 502.935688][T19124] loop1: detected capacity change from 0 to 256 [ 503.003755][T19124] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xa0dca0b7, utbl_chksum : 0x7319d30d) [ 503.085776][ T5822] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 503.150384][ T30] audit: type=1800 audit(1771228768.305:314): pid=19124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5610" name="bus" dev="loop1" ino=1049101 res=0 errno=0 [ 503.404268][T10451] udevd[10451]: symlink '../../loop5' '/dev/disk/by-diskseq/1368.tmp-b7:5' failed: Read-only file system [ 503.437084][ T6168] udevd[6168]: symlink '../../loop3' '/dev/disk/by-diskseq/1365.tmp-b7:3' failed: Read-only file system [ 503.438779][ T7870] udevd[7870]: symlink '../../loop1' '/dev/disk/by-diskseq/1371.tmp-b7:1' failed: Read-only file system [ 503.453261][T19134] loop2: detected capacity change from 0 to 64 [ 503.505689][T10451] udevd[10451]: symlink '../../loop5' '/dev/disk/by-diskseq/1372.tmp-b7:5' failed: Read-only file system [ 503.559794][ T6000] udevd[6000]: symlink '../../loop2' '/dev/disk/by-diskseq/1362.tmp-b7:2' failed: Read-only file system [ 503.599513][ T6000] udevd[6000]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 503.626764][ T7870] udevd[7870]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 503.671501][ T6168] udevd[6168]: symlink '../../loop3' '/dev/disk/by-diskseq/1365.tmp-b7:3' failed: Read-only file system [ 503.699560][T10451] udevd[10451]: symlink '../../loop2' '/dev/disk/by-diskseq/1374.tmp-b7:2' failed: Read-only file system [ 503.747353][T10451] udevd[10451]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 503.975893][T19149] loop1: detected capacity change from 0 to 128 [ 504.278672][T19157] loop2: detected capacity change from 0 to 512 [ 504.312597][T19157] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 504.611152][T19172] batadv_slave_1: entered promiscuous mode [ 504.642199][T19171] batadv_slave_1: left promiscuous mode [ 504.743476][T19176] loop2: detected capacity change from 0 to 512 [ 504.867148][T19176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.995286][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.070079][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 505.087412][T19194] loop3: detected capacity change from 0 to 164 [ 505.232072][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 505.241582][ T9] usb 5-1: config 0 has no interface number 0 [ 505.279203][ T9] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 505.295951][T19196] loop2: detected capacity change from 0 to 4096 [ 505.301398][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.336576][T19196] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 505.349602][ T9] usb 5-1: Product: syz [ 505.376567][ T9] usb 5-1: Manufacturer: syz [ 505.388125][ T9] usb 5-1: SerialNumber: syz [ 505.422949][ T9] usb 5-1: config 0 descriptor?? [ 505.637705][ T9] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 505.660985][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 505.681788][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 505.711801][ T9] usb 5-1: media controller created [ 505.755417][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.880359][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 505.976001][T19213] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5649'. [ 506.036031][ T9] usb 5-1: USB disconnect, device number 38 [ 506.291658][T19218] loop2: detected capacity change from 0 to 4096 [ 507.007904][T19235] loop0: detected capacity change from 0 to 4096 [ 507.067931][T19235] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 507.208814][T19235] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 507.285381][T19235] ntfs3(loop0): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 507.525963][T19253] loop1: detected capacity change from 0 to 2048 [ 507.609201][T19253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.686121][T19253] ext4 filesystem being mounted at /921/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.942450][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.056326][T19273] loop0: detected capacity change from 0 to 64 [ 508.236351][T19274] syz.0.5679: attempt to access beyond end of device [ 508.236351][T19274] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 508.273660][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5677'. [ 508.352208][T19278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5680'. [ 508.394520][T19277] team0 (unregistering): Port device team_slave_0 removed [ 508.438215][T19277] team0 (unregistering): Port device team_slave_1 removed [ 508.542692][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-diskseq/1392.tmp-b7:0' failed: Read-only file system [ 508.630258][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-diskseq/1392.tmp-b7:0' failed: Read-only file system [ 508.664570][T19280] loop0: detected capacity change from 0 to 1024 [ 508.697787][T19280] EXT4-fs: Ignoring removed nomblk_io_submit option [ 508.740579][T19254] loop5: detected capacity change from 0 to 32768 [ 508.745205][ T7870] udevd[7870]: symlink '../../loop1' '/dev/disk/by-diskseq/1393.tmp-b7:1' failed: Read-only file system [ 508.783641][T19254] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 508.798719][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-diskseq/1394.tmp-b7:0' failed: Read-only file system [ 508.847382][T19254] JBD2: Ignoring recovery information on journal [ 508.858508][T19280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.870693][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 508.926061][T19254] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 508.984567][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-diskseq/1395.tmp-b7:0' failed: Read-only file system [ 508.997659][ T6132] udevd[6132]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 509.066896][ T30] audit: type=1800 audit(1771228774.225:315): pid=19254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5670" name="file2" dev="loop5" ino=17060 res=0 errno=0 [ 509.112565][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.158216][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-diskseq/1393.tmp-b7:1' failed: Read-only file system [ 509.205348][ T7870] udevd[7870]: symlink '../../loop0' '/dev/disk/by-diskseq/1395.tmp-b7:0' failed: Read-only file system [ 509.278134][T10451] udevd[10451]: symlink '../../loop5' '/dev/disk/by-diskseq/1396.tmp-b7:5' failed: Read-only file system [ 509.328043][T19295] loop0: detected capacity change from 0 to 64 [ 509.347958][ T5818] ocfs2: Unmounting device (7,5) on (node local) [ 509.426553][T19272] loop3: detected capacity change from 0 to 32768 [ 509.433555][T19295] Trying to free block not in datazone [ 509.476818][T19295] Trying to free block not in datazone [ 509.506569][T19295] Trying to free block not in datazone [ 509.610851][T19268] loop2: detected capacity change from 0 to 40427 [ 510.117952][T19268] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 510.200574][T19268] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 510.502883][ T5820] syz-executor: attempt to access beyond end of device [ 510.502883][ T5820] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 510.528209][T19315] loop0: detected capacity change from 0 to 4096 [ 510.546892][T19315] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 510.564898][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 510.564934][ T5820] Tainted: [L]=SOFTLOCKUP [ 510.564944][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.564959][ T5820] Call Trace: [ 510.564969][ T5820] [ 510.564979][ T5820] dump_stack_lvl+0xe8/0x150 [ 510.565019][ T5820] f2fs_handle_critical_error+0x37c/0x540 [ 510.565063][ T5820] f2fs_write_end_io+0xcdb/0xff0 [ 510.565125][ T5820] __submit_merged_bio+0x256/0x700 [ 510.565169][ T5820] __submit_merged_write_cond+0x3c9/0x4e0 [ 510.565214][ T5820] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 510.565264][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.565305][ T5820] f2fs_write_data_pages+0x2975/0x35e0 [ 510.565386][ T5820] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 510.565438][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.565469][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.565499][ T5820] ? css_rstat_updated+0x23a/0x530 [ 510.565554][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.565584][ T5820] ? rcu_is_watching+0x15/0xb0 [ 510.565619][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.565649][ T5820] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 510.565687][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.565717][ T5820] ? __lock_acquire+0x6b5/0x2cf0 [ 510.565761][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.565802][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.565833][ T5820] ? __lock_acquire+0x6b5/0x2cf0 [ 510.565874][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.565904][ T5820] ? do_raw_spin_lock+0x12b/0x2f0 [ 510.565937][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.565972][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.566001][ T5820] ? do_raw_spin_unlock+0xf5/0x210 [ 510.566027][ T5820] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 510.566068][ T5820] do_writepages+0x32e/0x550 [ 510.566103][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.566135][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.566171][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.566200][ T5820] ? do_raw_spin_unlock+0xf5/0x210 [ 510.566232][ T5820] filemap_fdatawrite+0x1e9/0x2f0 [ 510.566273][ T5820] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 510.566352][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.566385][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.566421][ T5820] ? do_raw_spin_unlock+0xf5/0x210 [ 510.566453][ T5820] f2fs_sync_dirty_inodes+0x30e/0x860 [ 510.566512][ T5820] f2fs_write_checkpoint+0x9df/0x26a0 [ 510.566593][ T5820] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 510.566632][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.566727][ T5820] kill_f2fs_super+0x314/0x720 [ 510.566780][ T5820] ? __pfx_kill_f2fs_super+0x10/0x10 [ 510.566836][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.566866][ T5820] ? lockdep_hardirqs_on+0x7a/0x110 [ 510.566893][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.566940][ T5820] deactivate_locked_super+0xbc/0x130 [ 510.566980][ T5820] cleanup_mnt+0x437/0x4d0 [ 510.567018][ T5820] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.567064][ T5820] task_work_run+0x1d9/0x270 [ 510.567096][ T5820] ? __pfx_task_work_run+0x10/0x10 [ 510.567136][ T5820] exit_to_user_mode_loop+0xed/0x480 [ 510.567164][ T5820] ? rcu_is_watching+0x15/0xb0 [ 510.567204][ T5820] do_syscall_64+0x32d/0xf80 [ 510.567231][ T5820] ? trace_irq_disable+0x3b/0x150 [ 510.567266][ T5820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.567299][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.567325][ T5820] RIP: 0033:0x7f19f119d1d7 [ 510.567348][ T5820] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 510.567369][ T5820] RSP: 002b:00007fff68735048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 510.567396][ T5820] RAX: 0000000000000000 RBX: 00007f19f1231c3b RCX: 00007f19f119d1d7 [ 510.567414][ T5820] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff68735100 [ 510.567447][ T5820] RBP: 00007fff68735100 R08: 00007fff68736100 R09: 00000000ffffffff [ 510.567466][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff68736190 [ 510.567482][ T5820] R13: 00007f19f1231c3b R14: 000000000007c9a9 R15: 00007fff687361d0 [ 510.567522][ T5820] [ 510.567533][ T5820] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 511.204008][T19315] ntfs3(loop0): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 511.295685][T19299] F2FS-fs (loop5): invalid crc value [ 511.570628][T16500] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 511.647358][T19299] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 511.736868][T16500] usb 4-1: Using ep0 maxpacket: 8 [ 511.748364][T16500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 511.776267][T19299] F2FS-fs (loop5): Start checkpoint disabled! [ 511.783025][T16500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.792530][T19332] set_capacity_and_notify: 1 callbacks suppressed [ 511.792548][T19332] loop6: detected capacity change from 0 to 2640 [ 511.809996][T19299] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 511.821296][T16500] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 511.843806][T19334] netlink: 'syz.1.5702': attribute type 83 has an invalid length. [ 511.858177][T19299] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 511.875587][T16500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 511.900659][T16500] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 511.921482][T19336] loop6: detected capacity change from 2640 to 524288000 [ 511.949950][T16500] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 511.951331][ T7870] Buffer I/O error on dev loop6, logical block 0, async page read [ 511.986614][ T7870] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.000914][T16500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.011720][ T7870] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.051537][ T7870] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.070673][T16500] usb 4-1: config 0 descriptor?? [ 512.075053][ T7870] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.077281][T19323] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 512.101354][ T7870] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.129592][ T7870] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.130092][ T1155] kworker/u8:9: attempt to access beyond end of device [ 512.130092][ T1155] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 512.154235][ T7870] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.179077][ T7870] ldm_validate_partition_table(): Disk read failed. [ 512.219158][ T7870] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.226565][ T1155] CPU: 1 UID: 0 PID: 1155 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.226603][ T1155] Tainted: [L]=SOFTLOCKUP [ 512.226613][ T1155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.226629][ T1155] Workqueue: writeback wb_workfn (flush-7:5) [ 512.226680][ T1155] Call Trace: [ 512.226691][ T1155] [ 512.226701][ T1155] dump_stack_lvl+0xe8/0x150 [ 512.226742][ T1155] f2fs_handle_critical_error+0x37c/0x540 [ 512.226787][ T1155] f2fs_write_end_io+0xcdb/0xff0 [ 512.226860][ T1155] __submit_merged_bio+0x256/0x700 [ 512.226905][ T1155] __submit_merged_write_cond+0x3c9/0x4e0 [ 512.226953][ T1155] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 512.227008][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.227052][ T1155] f2fs_write_data_pages+0x2975/0x35e0 [ 512.227142][ T1155] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 512.227200][ T1155] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 512.227278][ T1155] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 512.227343][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.227400][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.227453][ T1155] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 512.227494][ T1155] do_writepages+0x32e/0x550 [ 512.227540][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.227570][ T1155] ? reacquire_held_locks+0x104/0x190 [ 512.227608][ T1155] ? writeback_sb_inodes+0x43d/0x19a0 [ 512.227650][ T1155] __writeback_single_inode+0x133/0x11a0 [ 512.227683][ T1155] ? do_raw_spin_unlock+0xf5/0x210 [ 512.227717][ T1155] writeback_sb_inodes+0x944/0x19a0 [ 512.227756][ T1155] ? ret_from_fork_asm+0x1a/0x30 [ 512.227814][ T1155] ? __lock_acquire+0x6b5/0x2cf0 [ 512.227857][ T1155] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 512.227885][ T1155] ? do_raw_spin_lock+0x12b/0x2f0 [ 512.227970][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.228000][ T1155] ? rcu_is_watching+0x15/0xb0 [ 512.228036][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.228079][ T1155] wb_writeback+0x456/0xb70 [ 512.228115][ T1155] ? queue_io+0x231/0x4a0 [ 512.228158][ T1155] ? __pfx_wb_writeback+0x10/0x10 [ 512.228186][ T1155] ? do_raw_spin_lock+0x12b/0x2f0 [ 512.228236][ T1155] wb_workfn+0x414/0xf50 [ 512.228282][ T1155] ? look_up_lock_class+0x57/0x110 [ 512.228331][ T1155] ? __pfx_wb_workfn+0x10/0x10 [ 512.228376][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.228406][ T1155] ? do_raw_spin_lock+0x12b/0x2f0 [ 512.228437][ T1155] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 512.228464][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.228504][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.228539][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.228571][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.228606][ T1155] ? process_scheduled_works+0xa25/0x1830 [ 512.228639][ T1155] ? process_scheduled_works+0xa25/0x1830 [ 512.228676][ T1155] process_scheduled_works+0xb02/0x1830 [ 512.228754][ T1155] ? __pfx_process_scheduled_works+0x10/0x10 [ 512.228803][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.228832][ T1155] ? assign_work+0x3d5/0x5e0 [ 512.228875][ T1155] worker_thread+0xa50/0xfc0 [ 512.228913][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.228966][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.229011][ T1155] kthread+0x388/0x470 [ 512.229038][ T1155] ? __pfx_worker_thread+0x10/0x10 [ 512.229070][ T1155] ? __pfx_kthread+0x10/0x10 [ 512.229098][ T1155] ret_from_fork+0x51e/0xb90 [ 512.229137][ T1155] ? __pfx_ret_from_fork+0x10/0x10 [ 512.229169][ T1155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.229199][ T1155] ? __switch_to+0xc7d/0x1450 [ 512.229235][ T1155] ? __pfx_kthread+0x10/0x10 [ 512.229263][ T1155] ret_from_fork_asm+0x1a/0x30 [ 512.229327][ T1155] [ 512.238063][ T1155] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 512.285474][ T7870] Buffer I/O error on dev loop6, logical block 0, async page read [ 512.391391][ C1] Bluetooth: hci6: Unexpected continuation: 1 bytes [ 512.414194][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.590872][ T7870] Dev loop6: unable to read RDB block 0 [ 512.593120][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.611174][ T7870] loop6: unable to read partition table [ 512.618632][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.630362][ T5908] usb 4-1: USB disconnect, device number 28 [ 512.636667][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.663439][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.670590][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.680004][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.686884][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.694089][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.701504][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.708342][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.715983][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.716404][T19332] ldm_validate_partition_table(): Disk read failed. [ 512.723223][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.723290][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.723354][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.723418][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.723481][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.723544][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.723610][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.771473][T19332] Dev loop6: unable to read RDB block 0 [ 512.778108][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.790752][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.797564][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.804475][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.811691][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.818507][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.825497][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.832524][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.840897][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.848254][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.855166][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.862228][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.869072][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.869341][T19332] loop6: unable to read partition table [ 512.876241][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.876309][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.876374][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.876437][T19344] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 512.915381][ T5827] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 512.964207][T19332] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 513.585184][T19369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5706'. [ 513.760817][ T6132] udevd[6132]: symlink '../../loop3' '/dev/disk/by-diskseq/1403.tmp-b7:3' failed: Read-only file system [ 513.902588][ T6132] udevd[6132]: symlink '../../loop3' '/dev/disk/by-diskseq/1403.tmp-b7:3' failed: Read-only file system [ 513.918380][T19353] loop2: detected capacity change from 0 to 32768 [ 513.966265][ T30] audit: type=1326 audit(1771228779.125:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.3.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281119bf79 code=0x7ffc0000 [ 513.974711][ T7870] udevd[7870]: symlink '../../loop5' '/dev/disk/by-diskseq/1409.tmp-b7:5' failed: Read-only file system [ 514.027568][T19353] (syz.2.5709,19353,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 514.048934][ T30] audit: type=1326 audit(1771228779.125:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.3.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281119bf79 code=0x7ffc0000 [ 514.069982][T19353] (syz.2.5709,19353,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 514.147072][ T30] audit: type=1326 audit(1771228779.125:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.3.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281119bf79 code=0x7ffc0000 [ 514.152900][T19353] JBD2: Ignoring recovery information on journal [ 514.194340][ T7870] udevd[7870]: symlink '../../loop3' '/dev/disk/by-diskseq/1403.tmp-b7:3' failed: Read-only file system [ 514.200255][ T30] audit: type=1326 audit(1771228779.165:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.3.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281119bf79 code=0x7ffc0000 [ 514.228971][ T30] audit: type=1326 audit(1771228779.165:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.3.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f281119bf79 code=0x7ffc0000 [ 514.253500][ T30] audit: type=1326 audit(1771228779.165:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.3.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281119bf79 code=0x7ffc0000 [ 514.278248][ T30] audit: type=1326 audit(1771228779.165:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.3.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281119bf79 code=0x7ffc0000 [ 514.284595][T10451] udevd[10451]: symlink '../../loop1' '/dev/disk/by-diskseq/1393.tmp-b7:1' failed: Read-only file system [ 514.302904][ T30] audit: type=1326 audit(1771228779.165:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.3.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281119bf79 code=0x7ffc0000 [ 514.379096][ T6168] udevd[6168]: symlink '../../loop5' '/dev/disk/by-diskseq/1409.tmp-b7:5' failed: Read-only file system [ 514.449250][ T6132] udevd[6132]: symlink '../../loop2' '/dev/disk/by-diskseq/1410.tmp-b7:2' failed: Read-only file system [ 514.458184][ T7870] udevd[7870]: symlink '../../loop0' '/dev/disk/by-diskseq/1407.tmp-b7:0' failed: Read-only file system [ 514.480817][T19353] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 514.503139][T19391] loop3: detected capacity change from 0 to 8 [ 514.521662][ T30] audit: type=1326 audit(1771228779.165:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.3.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281119bf79 code=0x7ffc0000 [ 514.530348][T19391] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 514.554231][ T6132] udevd[6132]: symlink '../../loop2' '/dev/disk/by-uuid/9357e9d7-5182-4c22-8242-b9b0d0fb6750.tmp-b7:2' failed: Read-only file system [ 514.561559][T10451] udevd[10451]: incorrect cramfs checksum on /dev/loop3 [ 514.652492][ T30] audit: type=1326 audit(1771228779.165:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.3.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281119bf79 code=0x7ffc0000 [ 514.763363][ T30] audit: type=1326 audit(1771228779.165:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.3.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f281119bf79 code=0x7ffc0000 [ 514.857869][ T30] audit: type=1326 audit(1771228779.205:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.3.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281119bf79 code=0x7ffc0000 [ 514.981548][ T5820] ocfs2: Unmounting device (7,2) on (node local) [ 515.296165][T19413] loop5: detected capacity change from 0 to 512 [ 515.341310][T19413] EXT4-fs: Ignoring removed orlov option [ 515.367319][T19413] EXT4-fs: Ignoring removed mblk_io_submit option [ 515.394859][T19413] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 515.430045][T19413] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.5734: attempt to clear invalid blocks 2 len 1 [ 515.449365][T19413] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 515.449869][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 515.465472][ C0] EXT4-fs (loop5): initial error at time 1771228780: ext4_clear_blocks:876: inode 13 [ 515.475006][ C0] EXT4-fs (loop5): last error at time 1771228780: ext4_clear_blocks:876: inode 13 [ 515.485402][T19413] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 515.601145][T19413] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5734: invalid indirect mapped block 1819239214 (level 0) [ 515.655930][T19413] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 515.656587][T19413] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.5734: invalid indirect mapped block 1819239214 (level 1) [ 515.657225][T19420] Set syz1 is full, maxelem 768 reached [ 515.699501][T19413] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 515.724736][T19413] EXT4-fs (loop5): 1 truncate cleaned up [ 515.757650][T19413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.935840][T19413] EXT4-fs (loop5): shut down requested (2) [ 516.087085][T19428] loop3: detected capacity change from 0 to 512 [ 516.105523][ T5818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.107093][T19428] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 516.219996][T19428] EXT4-fs (loop3): 1 truncate cleaned up [ 516.288448][T19428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.501782][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.522560][T19426] loop2: detected capacity change from 0 to 32768 [ 516.582441][T19426] find_entry called with index >= next_index [ 517.473985][T19445] loop3: detected capacity change from 0 to 32768 [ 518.492554][T19473] loop5: detected capacity change from 0 to 8 [ 518.559126][T19473] SQUASHFS error: lzo decompression failed, data probably corrupt [ 518.589996][T19473] SQUASHFS error: Failed to read block 0x91: -5 [ 518.596316][T19473] SQUASHFS error: Unable to read metadata cache entry [8f] [ 518.630972][T19473] SQUASHFS error: Unable to read inode 0x11f [ 518.827649][ T6132] udevd[6132]: symlink '../../loop5' '/dev/disk/by-diskseq/1423.tmp-b7:5' failed: Read-only file system [ 518.917665][T19468] loop1: detected capacity change from 0 to 32768 [ 518.947918][T19468] JBD2: Ignoring recovery information on journal [ 518.966292][T19486] bridge0: entered promiscuous mode [ 519.006860][T19486] macvlan2: entered promiscuous mode [ 519.146517][ T7870] udevd[7870]: symlink '../../loop0' '/dev/disk/by-diskseq/1407.tmp-b7:0' failed: Read-only file system [ 519.165069][T19468] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 519.205423][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-diskseq/1424.tmp-b7:1' failed: Read-only file system [ 519.207095][ T7870] udevd[7870]: symlink '../../loop5' '/dev/disk/by-diskseq/1423.tmp-b7:5' failed: Read-only file system [ 519.239129][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:1' failed: Read-only file system [ 519.243047][T19496] loop0: detected capacity change from 0 to 128 [ 519.274990][T19496] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 519.298009][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 519.298031][ T30] audit: type=1800 audit(1771228784.455:345): pid=19468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5755" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 519.298479][ T7870] udevd[7870]: symlink '../../loop5' '/dev/disk/by-diskseq/1423.tmp-b7:5' failed: Read-only file system [ 519.341298][T19468] [ 519.343641][T19468] ====================================================== [ 519.350652][T19468] WARNING: possible circular locking dependency detected [ 519.357671][T19468] syzkaller #0 Tainted: G L [ 519.363645][T19468] ------------------------------------------------------ [ 519.370662][T19468] syz.1.5755/19468 is trying to acquire lock: [ 519.376725][T19468] ffff88806ca26d80 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4940 [ 519.380512][T19496] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 519.390217][T19468] [ 519.390217][T19468] but task is already holding lock: [ 519.390229][T19468] ffff888052e5ce38 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0 [ 519.414117][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-diskseq/1424.tmp-b7:1' failed: Read-only file system [ 519.415797][T19468] [ 519.415797][T19468] which lock already depends on the new lock. [ 519.415797][T19468] [ 519.437288][T19468] [ 519.437288][T19468] the existing dependency chain (in reverse order) is: [ 519.446289][T19468] [ 519.446289][T19468] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}: [ 519.454110][T19468] down_read+0x47/0x2e0 [ 519.458876][T19468] ocfs2_init_acl+0x2fd/0x7e0 [ 519.464075][T19468] ocfs2_mknod+0x1679/0x2290 [ 519.469184][T19468] ocfs2_mkdir+0x181/0x490 [ 519.474113][T19468] vfs_mkdir+0x413/0x630 [ 519.478867][T19468] filename_mkdirat+0x285/0x510 [ 519.484224][T19468] __se_sys_mkdirat+0x35/0x150 [ 519.489498][T19468] do_syscall_64+0x14d/0xf80 [ 519.494606][T19468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.501445][T19468] [ 519.501445][T19468] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 519.509963][T19468] down_read+0x47/0x2e0 [ 519.514634][T19468] ocfs2_start_trans+0x3ab/0x700 [ 519.520091][T19468] ocfs2_shutdown_local_alloc+0x1f5/0xa40 [ 519.526329][T19468] ocfs2_dismount_volume+0x1ec/0x900 [ 519.532130][T19468] generic_shutdown_super+0x13d/0x2d0 [ 519.538018][T19468] kill_block_super+0x44/0x90 [ 519.543199][T19468] deactivate_locked_super+0xbc/0x130 [ 519.549084][T19468] get_tree_bdev_flags+0x44f/0x4f0 [ 519.554702][T19468] vfs_get_tree+0x92/0x2a0 [ 519.559622][T19468] do_new_mount+0x341/0xd30 [ 519.564637][T19468] __se_sys_mount+0x31d/0x420 [ 519.569833][T19468] do_syscall_64+0x14d/0xf80 [ 519.574937][T19468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.581338][T19468] [ 519.581338][T19468] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 519.588816][T19468] ocfs2_start_trans+0x2ac/0x700 [ 519.594284][T19468] ocfs2_extend_dir+0xfe0/0x4a70 [ 519.599732][T19468] ocfs2_prepare_dir_for_insert+0x34af/0x5370 [ 519.606308][T19468] ocfs2_mknod+0xa1b/0x2290 [ 519.611410][T19468] ocfs2_mkdir+0x181/0x490 [ 519.616389][T19468] vfs_mkdir+0x413/0x630 [ 519.621157][T19468] filename_mkdirat+0x285/0x510 [ 519.626521][T19468] __se_sys_mkdirat+0x35/0x150 [ 519.631794][T19468] do_syscall_64+0x14d/0xf80 [ 519.636895][T19468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.643384][T19468] [ 519.643384][T19468] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 519.653981][T19468] down_write+0x96/0x200 [ 519.658736][T19468] ocfs2_reserve_local_alloc_bits+0x11f/0x26f0 [ 519.665403][T19468] ocfs2_reserve_clusters_with_limit+0x1b9/0xc20 [ 519.672256][T19468] ocfs2_mknod+0x111f/0x2290 [ 519.677360][T19468] ocfs2_mkdir+0x181/0x490 [ 519.682287][T19468] vfs_mkdir+0x413/0x630 [ 519.687038][T19468] filename_mkdirat+0x285/0x510 [ 519.692397][T19468] __se_sys_mkdirat+0x35/0x150 [ 519.697675][T19468] do_syscall_64+0x14d/0xf80 [ 519.702780][T19468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.709181][T19468] [ 519.709181][T19468] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 519.719864][T19468] __lock_acquire+0x15a5/0x2cf0 [ 519.725230][T19468] lock_acquire+0xf0/0x2e0 [ 519.730161][T19468] down_write+0x96/0x200 [ 519.734917][T19468] ocfs2_reserve_suballoc_bits+0x16a/0x4940 [ 519.741323][T19468] ocfs2_reserve_new_metadata_blocks+0x415/0x9a0 [ 519.748167][T19468] ocfs2_init_xattr_set_ctxt+0x2f5/0x790 [ 519.754319][T19468] ocfs2_xattr_set+0xc42/0x13e0 [ 519.759688][T19468] __vfs_setxattr+0x43c/0x480 [ 519.764878][T19468] __vfs_setxattr_noperm+0x12d/0x660 [ 519.770677][T19468] vfs_setxattr+0x163/0x360 [ 519.775698][T19468] filename_setxattr+0x296/0x630 [ 519.781150][T19468] path_setxattrat+0x3eb/0x440 [ 519.786419][T19468] __x64_sys_setxattr+0xbc/0xe0 [ 519.791788][T19468] do_syscall_64+0x14d/0xf80 [ 519.796884][T19468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.803294][T19468] [ 519.803294][T19468] other info that might help us debug this: [ 519.803294][T19468] [ 519.813601][T19468] Chain exists of: [ 519.813601][T19468] &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 519.813601][T19468] [ 519.830739][T19468] Possible unsafe locking scenario: [ 519.830739][T19468] [ 519.838171][T19468] CPU0 CPU1 [ 519.843516][T19468] ---- ---- [ 519.848863][T19468] lock(&oi->ip_xattr_sem); [ 519.853444][T19468] lock(&journal->j_trans_barrier); [ 519.861239][T19468] lock(&oi->ip_xattr_sem); [ 519.868337][T19468] lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]); [ 519.875870][T19468] [ 519.875870][T19468] *** DEADLOCK *** [ 519.875870][T19468] [ 519.883991][T19468] 3 locks held by syz.1.5755/19468: [ 519.889167][T19468] #0: ffff88807b5b4420 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 519.898426][T19468] #1: ffff888052e5d100 (&sb->s_type->i_mutex_key#43){+.+.}-{4:4}, at: vfs_setxattr+0x13e/0x360 [ 519.908895][T19468] #2: ffff888052e5ce38 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x475/0x13e0 [ 519.918837][T19468] [ 519.918837][T19468] stack backtrace: [ 519.924713][T19468] CPU: 1 UID: 0 PID: 19468 Comm: syz.1.5755 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.924743][T19468] Tainted: [L]=SOFTLOCKUP [ 519.924752][T19468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 519.924767][T19468] Call Trace: [ 519.924776][T19468] [ 519.924787][T19468] dump_stack_lvl+0xe8/0x150 [ 519.924826][T19468] print_circular_bug+0x2e1/0x300 [ 519.924864][T19468] check_noncircular+0x12e/0x150 [ 519.924901][T19468] __lock_acquire+0x15a5/0x2cf0 [ 519.924934][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.924963][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.924989][T19468] ? _raw_spin_unlock+0x28/0x50 [ 519.925023][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.925051][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.925078][T19468] ? ocfs2_get_system_file_inode+0x202/0x7e0 [ 519.925108][T19468] lock_acquire+0xf0/0x2e0 [ 519.925134][T19468] ? ocfs2_reserve_suballoc_bits+0x16a/0x4940 [ 519.925167][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.925197][T19468] down_write+0x96/0x200 [ 519.925223][T19468] ? ocfs2_reserve_suballoc_bits+0x16a/0x4940 [ 519.925254][T19468] ? __pfx_down_write+0x10/0x10 [ 519.925281][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.925312][T19468] ocfs2_reserve_suballoc_bits+0x16a/0x4940 [ 519.925354][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.925380][T19468] ? do_raw_spin_lock+0x12b/0x2f0 [ 519.925402][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.925434][T19468] ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10 [ 519.925463][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.925489][T19468] ? lockdep_hardirqs_on+0x7a/0x110 [ 519.925511][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.925538][T19468] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 519.925572][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.925599][T19468] ? stack_depot_save_flags+0x3f3/0x810 [ 519.925637][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.925663][T19468] ? kasan_save_track+0x4f/0x80 [ 519.925698][T19468] ? kasan_save_track+0x3e/0x80 [ 519.925731][T19468] ? __kasan_kmalloc+0x93/0xb0 [ 519.925752][T19468] ? __kmalloc_cache_noprof+0x31c/0x660 [ 519.925787][T19468] ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0 [ 519.925823][T19468] ? ocfs2_init_xattr_set_ctxt+0x2f5/0x790 [ 519.925858][T19468] ? ocfs2_xattr_set+0xc42/0x13e0 [ 519.925891][T19468] ? __vfs_setxattr+0x43c/0x480 [ 519.925919][T19468] ? __vfs_setxattr_noperm+0x12d/0x660 [ 519.925947][T19468] ? vfs_setxattr+0x163/0x360 [ 519.925974][T19468] ? filename_setxattr+0x296/0x630 [ 519.926004][T19468] ? path_setxattrat+0x3eb/0x440 [ 519.926024][T19468] ? __x64_sys_setxattr+0xbc/0xe0 [ 519.926053][T19468] ? do_syscall_64+0x14d/0xf80 [ 519.926076][T19468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.926122][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.926149][T19468] ? __kasan_kmalloc+0x93/0xb0 [ 519.926171][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.926197][T19468] ? __kmalloc_cache_noprof+0x31c/0x660 [ 519.926233][T19468] ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0 [ 519.926264][T19468] ? __kmalloc_cache_noprof+0x15b/0x660 [ 519.926302][T19468] ocfs2_reserve_new_metadata_blocks+0x415/0x9a0 [ 519.926333][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.926363][T19468] ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10 [ 519.926395][T19468] ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10 [ 519.926430][T19468] ocfs2_init_xattr_set_ctxt+0x2f5/0x790 [ 519.926469][T19468] ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10 [ 519.926506][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.926534][T19468] ? ocfs2_xattr_set+0xc08/0x13e0 [ 519.926570][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.926597][T19468] ? up_write+0x1ab/0x410 [ 519.926631][T19468] ? __kmalloc_cache_noprof+0x15b/0x660 [ 519.926668][T19468] ocfs2_xattr_set+0xc42/0x13e0 [ 519.926717][T19468] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 519.926753][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.926780][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.926816][T19468] ? check_path+0x21/0x40 [ 519.926846][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.926872][T19468] ? check_noncircular+0xda/0x150 [ 519.926909][T19468] ? __lock_acquire+0x146e/0x2cf0 [ 519.926942][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.926968][T19468] ? evm_protected_xattr_common+0x170/0x190 [ 519.926995][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.927021][T19468] ? evm_protect_xattr+0x748/0xac0 [ 519.927050][T19468] ? __pfx_evm_protect_xattr+0x10/0x10 [ 519.927074][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.927102][T19468] ? __pfx_ocfs2_xattr_security_set+0x10/0x10 [ 519.927124][T19468] __vfs_setxattr+0x43c/0x480 [ 519.927159][T19468] __vfs_setxattr_noperm+0x12d/0x660 [ 519.927193][T19468] vfs_setxattr+0x163/0x360 [ 519.927225][T19468] ? __pfx_vfs_setxattr+0x10/0x10 [ 519.927252][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.927282][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.927311][T19468] filename_setxattr+0x296/0x630 [ 519.927340][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.927372][T19468] ? __pfx_filename_setxattr+0x10/0x10 [ 519.927405][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.927443][T19468] ? do_getname+0x151/0x250 [ 519.927471][T19468] path_setxattrat+0x3eb/0x440 [ 519.927497][T19468] ? __pfx_path_setxattrat+0x10/0x10 [ 519.927517][T19468] ? do_futex+0x333/0x420 [ 519.927560][T19468] ? rcu_is_watching+0x15/0xb0 [ 519.927590][T19468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.927620][T19468] __x64_sys_setxattr+0xbc/0xe0 [ 519.927653][T19468] do_syscall_64+0x14d/0xf80 [ 519.927676][T19468] ? trace_irq_disable+0x3b/0x150 [ 519.927707][T19468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.927733][T19468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.927756][T19468] RIP: 0033:0x7febda79bf79 [ 519.927776][T19468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.927800][T19468] RSP: 002b:00007febdb68c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 519.927822][T19468] RAX: ffffffffffffffda RBX: 00007febdaa15fa0 RCX: 00007febda79bf79 [ 519.927839][T19468] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000200000000100 [ 519.927856][T19468] RBP: 00007febda8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 519.927870][T19468] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 519.927884][T19468] R13: 00007febdaa16038 R14: 00007febdaa15fa0 R15: 00007ffd88cdedf8 [ 519.927911][T19468] [ 519.950996][ T6132] udevd[6132]: symlink '../../loop1' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:1' failed: Read-only file system [ 520.020679][T10451] udevd[10451]: symlink '../../loop0' '/dev/disk/by-diskseq/1425.tmp-b7:0' failed: Read-only file system [ 520.230815][ T6132] udevd[6132]: symlink '../../loop3' '/dev/disk/by-diskseq/1421.tmp-b7:3' failed: Read-only file system [ 520.619723][ T5816] ocfs2: Unmounting device (7,1) on (node local)