last executing test programs: 10.817569923s ago: executing program 1 (id=1692): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$eJzs3N1qHFUcAPD/TPNh0+pGrV5owUgRgx/5aEpssKCCl15ZX2BN0hLdNrZZwZZcKIh9APUBxMv6CF6Id4LgTfHaO6VQJMm1rMxmdjNudmO+ltHu7wcHzpnZ4Zz/zOyek3MOCWBgTUTEpxExEhEfREQlP57kKd7cTtnntjbWF7OURKNx+c+keX5zY30xCtdkTuWFyTQi/TyJZ7vUu3br9ofVWm35Zl6erl/7aHrt1u1XV65Vry5fXb4+N7OwMDN3cX5h/thi/T3u/Hbp3tuVL38+9+uP7787n7X3dH6uGMdxmYiJ9j3pNHXclZXskUI+GSqxIRxIGhEnImKo+f2vxInYeXiV+L5SauMAgL5oNN7oKAMAD79Enw8AA6b1d//mxvpiK5UxD1GWB29tL15t5mubW+34h9orIcMd61vHaSIivvv6teeyFH1ahwQAKPohG/9c7Db+S+Ns4XMnI2Is39t1OiIejYjHCvvFDmuio7x7/JPeP2IVe8rGf5cKe9u2CvHnxk/kpSzm8RhOrqzUlmfy+CdjeDQrz+5Rx9nLT//V61xx/JelrP7WWDBvx/2h0X9es1StV48Sc9GDzyKeGeoWf9Ie/ybNuA/v9Rt3n+p17t/j76/GNxEvdn3+Ozv3kr33J04334fp1lux252XXrjRq/6y48+e/9je8Y8nxf2aawev46cLK7/0OnfY938kea+ZH8mPfVKt12/ORowk7+w+fn7n2la59fks/slz3b//Z2LnTjweEU9ExJMRzeM9X+guXql9+/zh4++vLP6lAz3/g2fGvrh7r1f9+3v+F5q5yfzIfn7/9tvAo9w7AAAA+L9Im/O5STrVzqfp1NT2PO+ZGEtrq2v1l6+sfnx9aXvedzyG09ZMV6UwHzqbzxG2yuc7ynP5HMpXoyeb5anF1dpS2cEDwIA61aP/z/wxWnbrAIC+6dfmdgDgv0v/DwCDR/8PAINH/w8Ag0f/DwCDR/8PAAPlKP/XT0ZG5mHNlP3LBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQrr8DAAD//3JA1T8=") chown(0x0, 0xee01, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x4) 10.482811848s ago: executing program 1 (id=1693): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 9.711698691s ago: executing program 2 (id=1696): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 8.591012109s ago: executing program 3 (id=1698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 8.329725643s ago: executing program 1 (id=1700): socket$kcm(0xa, 0x1, 0x106) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x800}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x48062, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0xe9, 0x82, 0x32315659, 0x7, 0x0, [{}, {}, {0x0, 0x9}, {0x0, 0x320}, {0x0, 0x4}, {0x2, 0xfffffff9}, {0x0, 0x8}, {0x5b1, 0x3}], 0x0, 0x5, 0x8, 0x0, 0x6}}) 7.644728895s ago: executing program 3 (id=1703): socket$kcm(0xa, 0x1, 0x106) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x800}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0xe9, 0x82, 0x32315659, 0x7, 0x0, [{}, {}, {0x0, 0x9}, {0x0, 0x320}, {0x0, 0x4}, {0x2, 0xfffffff9}, {0x0, 0x8}, {0x5b1, 0x3}], 0x0, 0x5, 0x8, 0x0, 0x6}}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 7.067743404s ago: executing program 2 (id=1704): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 6.08993328s ago: executing program 1 (id=1707): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000280)=0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x80, 0xffffffff, 0x40001c8, 0x0, r1}, &(0x7f0000002840), &(0x7f0000002880)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 5.245895514s ago: executing program 3 (id=1708): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.536765156s ago: executing program 0 (id=1709): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2d, 0x0, 0x0) syz_mount_image$jfs(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0xa, &(0x7f0000000340)=ANY=[@ANYRES8=0x0], 0xfa, 0x6158, &(0x7f000000c680)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x71, 0x1038, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) 4.100412963s ago: executing program 3 (id=1710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9fae702d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b9f802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963cd14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb193213f4bccab1c34c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f0d9ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d579531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a785d820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37dfd149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f2729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab21842da1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336343f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a99b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f8f4ed0b27cedd1c5e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.818466477s ago: executing program 2 (id=1711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 3.703617439s ago: executing program 0 (id=1712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 3.630307101s ago: executing program 1 (id=1713): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.355678475s ago: executing program 3 (id=1714): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000200), 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) r5 = syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x80, 0xffffffff, 0x40001c8}, &(0x7f0000002840), &(0x7f0000002880)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) 2.845212174s ago: executing program 2 (id=1715): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 2.257849223s ago: executing program 3 (id=1716): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000fc0)={0x44, &(0x7f0000000d80)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.929989749s ago: executing program 0 (id=1717): write$char_usb(0xffffffffffffffff, 0x0, 0x0) 1.872386199s ago: executing program 2 (id=1718): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.787699011s ago: executing program 0 (id=1719): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 922.200935ms ago: executing program 2 (id=1720): syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000009640)='./file0\x00', 0x208800, &(0x7f00000006c0)={[{@nogrpid}, {@prjquota}, {@ikeep}, {@inode32}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$eJzs2gm8pnPhuP/nDGOXMVRSaiqiRdYsUc0MZigkS7QjS8pSUqESSgoVEe3Zt2xlCWVrJdlbKCFUskRabMP8X8ecYYyLb/36/l++dV3X63XO8zz3c9/3+Tyf972cw2wyaYOJg8Ecg2mNG8zceddOnjLm6nXvOGrz+Y9d5tR7DnjsiouOH3mcMPI4cTAYjBp5e2jasrGD004fNZj14eWPNveccw3NOxgsO/JyZD+DFac9zHvF9PWmztTMAx169Ns+074ebr7hHzH85PAD9jpiMBiMmWH7ocFgaPfHfVBpm0yYPOlRq0fchq1Gjzyf8Wu2aV/zXjwYzHvmgI+PGdcdego+0vDP3P0l545e9yn42f9xbTJh8loz+Q+fi7OMLFtx+Byf+Rw0NvNxfttim648MoUPH2+DwfAl7jHnyn9Em0yYtPbgia/zg6NWuXCfqdOum7MPpt0o5hwMBnONXF/neapd6t9rwsTlHr5nT389wj79WN6djosT3n7yQ8M36cFgsMBgMHbN6feCqqqq+s9owsTlVoP7/xxPdv8/5ZSFz+z+X1VV9Z/bWhMmLjd8r5/p/j/Pk93/d1z4oj2n/bf/8StO2+qhp/ZDVFVV1b/UpLXw/j/mye7/K6522drd/6uqqv5zW3+dh+//88x0/1/wye7/bzl5lUVG1pv+e8ODM+xyaIb/n/DADMtnmWH5/TMsHz3DfmZcf7YZlt87w/LZh9+D9ccNBmOn/3vBKY8uHjtu+L2R5ffNsHz8o/9OZ9HVZ1g+YYblk2ZYPnFkrMPLJ8+wfPIM66/5JFNdVVX1f6b1l5u02mCGf2c/snih6e/T/f+Cs65b8qkab1VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVf1n9tAdZ587GAyGBoPBqMFgymDk+YyPg6lTp04dfn3K+Zdf/pQN9P9GQ+ddO3nKmKvXveOozec/dplT7zng0Vn6j+0//xPUv9Ow/xzHjxsMtt/oqR5KPQV1/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMPJ89+mPZ+3/5reOrLryxqfedfCjWy46fpuRZ+ddO3nKNk/B2J+ChoY/65ir173jqM3nP3aZU+854L/g7PnP/wT17/Sw/zZDg8HI+T1m+Fxed8L6Gy4xGAwOvuvUjVcYPPLeSsPvrTJ2lsEsD2+6xMPf11iUd7z7mtMexw9/W/CRfZzy8P7XmnrYLEMzDWKGXnXejUe9a5N7lp/5cfEn/hyjpj854voz7p46derUxywcaY4n2Hj6/qd/lpnP85GxLzE89qV22u69S71/l12X3Ga7zbbecustt19muZWWX2HZZVZY+RVLbbXNtlsuPe37E8zZuIe/r/bPzNk8M8/ZHRNmnLOZP9sTzdm4J5+zh/c4ZdehDafP2az/4pyt9uRzNm6bkR+06PjRg00fnpqhwWDR1UcPdh5+sczsg8Gia4ysu9DwuquOHTUY7P/oBx1+Nvsjx+DQ7sPrbDJpg4mPjuzxn/Bx1+nHrLjo+JHHCSOPE6cNcdzg0UNx7OC000cNz8VjpnnuOecamncwWHbk5ch+BiuPvHvo9PWmztTMAx169Ns+074ebr7hnQw/effSZ18zfC7OtP3/H/0/Xf8f57XS0CMTNTTyNbLONK8Jk9d69Gc9PA3DczfLyLIVh01mnrP/zR433nGzDsY8yXgnrTVxueHFM83/9E3w+LpzsQs/PO3YGr/itK0e+n9GofHO8yTjXWsCjneeJxvv8R+59PRpu/pfG+9M17q1H/4+/p+51g2e/Fo3C+1gy0sWmfla97onHuJjzuPpczT7TCs90bVu50OW3X14/+Of/Fq39vDYRz/mWjdqMFh0tenXuuEL36TRg/2HXyw7/GLy6MGxwy+We/jFnIPzh1+8/J07bLvF8II1p8/J0sP7HT926GH3C1e8dfGpB06duvrIWMaPfexYR46PcTPezyeMnTaZ07edvt/hVafv95ZnTntv0sh+J/wL+52+LY33rvmmvTd5ZL8TZ9rv6CfZ7/RtH3c+LDH0yIXrCa43k2a63oz8jTP9xz3ma7ZpX/NePBjMeyb5zrTu/3jNpPN3jicZ74SJy602PL6Zzt9HDkc6fy+dfPXwvWLewWCwwGAwds3pY/8XG3qi8c765OOdCOOd9cnGe+Vx263zvzDewQzjfcxxtsn6046VNUeOs8n/wvE7fduZr2OjH3532mV/zX/mOjbucdexPWYZNdNkz9AT/c62Baw/7flCj/6ee+1Jx0yf+9Ez7fd/+p1ths8yBNexMTP9PT9qzRsGQzTnux+/6mVDBz35nI8ePPZvi+lzPn3bJ5vzyf/MnD/nyef8n/09eYkXTnt/9Ezjn3HO19vv2ftOn/PZZtrv/zTnk5/83vH4OR8/GE1zvvT90+btya6nTzTn07edPufDH3GVsbMO1hi+Z43M+aR/Zs4X+t85zueC9ac93/KRReccdeobp8/5zHP8P835pH91zsc9cpwv+vB7Lxg1mG22wc6b7bTTjstM+z795bLTvvO16N5rp83zk91Ln8ho+rZPdl6s/s8YjfmnjIb+J6OFZ30io0dPrSN32PEZ/6/XotX/VaMBX4uuPmbavD3Z70VPNOfTt6X74IIzbD/z36Hrr/Pw793zzHQfnL4J3gfPOWvtvafvcmSzB2ca5vT76gMzLJ9lhuX3z7B89Az7mXH92WZYfu8My4c/wmwzrD+dddzw37wjy6c8uvrY4V+exo0sv2+G5eMf3XbR1WdYPmGG5ZNmWD7x0UNj0ckzLJ88w/prDv7Fpv836W1mvsjXP1v//ddd/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMO350MjjYPeh9W5/zfDjYDAYveKJU9d7qsf7FDd03rWTp4y5et07jtp8/mOXOfWeA/4Lzp7//E9Q/04P+28zNBiMnN9jthkMButOWH/DJQaDwXpTT1xx1OCR9xYafm/VsaMGg/2HHrOD2R9ZZ2j34XU2mbTBxMFgjpE1xj3uhz7uPHrMiouOH3mcMPI4cdr1adzg0eN17OC000cNZn14+aPNPedcQ/MOBsuOvBzZz2DFaQ/zXjF9vakzNfNAhx79ts+0r4ebb/hHDD/ZeevJzx2eq5m2/z/T9Gv1NqP+x1U7/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u/jX/jpb/thJ1l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3vojrPPHTkGRg0GUwbTng/tPvI4GDr5tBePHCKjd7nq6MOe6vE+xQ2dd+3kKWOuXveOozaf/9hlTr3ngP+Cs+c//xPUv9PD/tsMDQYj5/eYbQaDwboT1t9wicFgcNjRV+0yavDIewsNv7fq2FGDwf5Dj9nB7I+sM7T78DqbTNpg4mAwx8ga4x73Qx93Hj1mxUXHjzxOGHmcOO36NG7w6PE6dnDa6aMGsz68/NHmnnOuoXkHg2VHXo7sZ7DitId5r5i+3tSZmnmgQ49+22fa18PNN/wjhp/sNc+1Jw/P1Uzb/59p+rV6m1H/46qd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uoTvOPnfkGBg1GEwZTHs+auRxaPebb9ptw+HH4dfzr7n3tU/1eJ/ihs67dvKUMVeve8dRm89/7DKn3nPAf8HZ85//Cerfadh/juPHDQbbb/RUD6Wegjr/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9xDd5x97sjTUY8uHbV7xwU2dN61k6eMuXrdO47afP5jlzn1ngOe6gH9uz2B/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf5ZB/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkP/jmnXk0eD/wvwxy/m/aP6YxX+x/DGL/4vyxyz+i+ePWfyXyB+z+L84f8zi/5L8MYv/S/PHLP4vyx+z+C+ZP2bxf3n+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxf0X+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxfmT9m8V8lf8ziv2r+mMX/VfljFv9X549Z/F+TP2bxH58/ZvGfkD9m8Z+YP2bxXy1/zOK/ev6YxX+N/DGL/6T8MYv/ZJX/LP/0mhb/NVX+/3wW/7Xyxyz+r80fs/i/Ln/M4r92/pjFf538MYv/uvljFv/X549Z/NfLH7P4vyF/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP5vzB+z+G+cP2bx3yR/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//b88cs/u/IH7P4b5o/ZvHfLH/M4r95/pjF/535Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvF/V/6YxX+b/DGL/7vzxyz+78kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/9788cs/u/LH7P475g/ZvF/f/6YxX+n/DGL/wfyxyz+H8wfs/h/KH/M4r9z/pjFf5f8MYv/rvljFv8P549Z/D+SP2bx/2j+mMV/t/wxi//H8scs/rvnj1n898gfs/jvmT9m8f94/pjF/xP5Yxb/vfLHLP6fzB+z+O+dP2bx/1T+mMX/0/ljFv998scs/vvmj1n898sfs/h/Jn/M4v/Z/DGL/+fyxyz+++ePWfwPyB+z+H8+f8zif2D+mMX/oPwxi/8X8scs/gfnj1n8D8kfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+b+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOL/rfwxi/+388cs/qfmj1n8T8sfs/ifnj9m8T8jf8zi/538MYv/mfljFv+z8scs/mfnj1n8v5s/ZvH/Xv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/+F+WMW/4vyxyz+P80fs/hfnD9m8f9Z/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif3X+mMX/mvwxi/+v88cs/r/JH7P4X5s/ZvH/bf6Yxf+6/DGL//X5Yxb/G/LHLP6/yx+z+N+YP2bxvyl/zOJ/c/6Yxf/3+WMW/z/kj1n8/5g/ZvG/JX/M4v+n/DGL/635Yxb/2/LHLP63549Z/O/IH7P4/zl/zOJ/Z/6Yxf+u/DGL/1/yxyz+d+ePWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/5T8MYv/g/ljFv+H8scs/lPzxyT+sw7yxyz+Q/ljFv9R+WMW/1nyxyz+s+aPWfxH549Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n8n5Y/ZvGfL3/M4j8mf8ziP3/+mMV/bP6YxX+B/DGL/4L5Yxb/p+ePWfyfkT9m8X9m/pjFf6H8MYv/s/LHLP4L549Z/J+dP2bxf07+mMV/kfwxi/9z88cs/s/LH7P4j8sfs/g/P3/M4v+C/DGL/wvzxyz+i+aPWfwXyx+z+L8of8ziv3j+mMV/ifwxi/+L88cs/i/JH7P4vzR/zOL/svwxi/+S+WMW/5fnj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/1fkj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/lfljFv9V8scs/qvmj1n8X5U/ZvF/df6Yxf81+WMW//H5Yxb/CfljFv+J+WMW/9Xyxyz+q+ePWfzXyB+z+E/KH7P4T84fs/ivmT9m8V8rf8zi/9r8MYv/6/LHLP5r549Z/NfJH7P4r5s/ZvF/ff6YxX+9/DGL/xsGl+cPWfzX7/zHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxHz3IH7P4D+WPWfxH5Y9Z/GfJH7P4z5o/ZvEfnT9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxf1r+mMV/vvwxi/+Y/DGL//z5Yxb/sfljFv8F8scs/gvmj1n8n54/ZvF/Rv6Yxf+Z+WMW/4Xyxyz+z8ofs/gvnD9m8X92/pjF/zn5Yxb/RfLHLP7PzR+z+D8vf8ziPy5/zOL//Pwxi/8L8scs/i/MH7P4L5o/ZvFfLH/M4v+i/DGL/+L5Yxb/JfLHLP4vzh+z+L8kf8zi/9L8MYv/y/LHLP5L5o9Z/F+eP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/F+RP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/V+aPWfxXyR+z+K+aP2bxf1X+mMX/1fljFv/X5I9Z/Mfnj1n8J+SPWfwn5o9Z/FfLH7P4r54/ZvFfI3/M4j8pf8ziPzl/zOK/Zv6YxX+t/DGL/2vzxyz+r8sfs/ivnT9m8V8nf8ziv27+mMX/9fljFv/18scs/m/IH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/G/PHLP4b549Z/DfJH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4vy1/zOL/9vwxi/878scs/pvmj1n8N8sfs/hvnj9m8X9n/pjFf4v8MYv/lvljFv+t8scs/lvnj1n835U/ZvHfJn/M4v/u/DGL/3vyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/3vwxi//78scs/jvmj1n8358/ZvHfKX/M4v+B/DGL/wfzxyz+H8ofs/jvnD9m8d8lf8ziv2v+mMX/w/ljFv+P5I9Z/D+aP2bx3y1/zOL/sfwxi//u+WMW/z3yxyz+e+aPWfw/nj9m8f9E/pjFf6/8MYv/J/PHLP57549Z/D+VP2bx/3T+mMV/n/wxi/+++WMW//3yxyz+n8kfs/h/Nn/M4v+5/DGL//75Yxb/A/LHLP6fzx+z+B+YP2bxPyh/zOL/hfwxi//B+WMW/0Pyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvH/Zv6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4fyt/zOL/7fwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+H8nf8zif2b+mMX/rPwxi//Z+WMW/+/mj1n8v5c/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/t/PH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOJ/Yf6Yxf+i/DGL/0/zxyz+F+ePWfx/lj9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+F+dP2bxvyZ/zOL/6/wxi/9v8scs/tfmj1n8f5s/ZvG/Ln/M4n99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/2yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW/6flj1n858sfs/iPyR+z+M+fP2bxH5s/ZvFfIH/M4r9g/pjF/+n5Yxb/Z+SPWfyfmT9m8V8of8zi/6z8MYv/wvljFv9n549Z/J+TP2bxXyR/zOL/3Pwxi//z8scs/uPyxyz+z88fs/i/IH/M4v/C/DGL/6L5Yxb/xfLHLP4vyh+z+C+eP2bxXyJ/zOL/4vwxi/9L8scs/i/NH7P4vyx/zOK/ZP6Yxf/l+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf8V+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxf2X+mMV/lfwxi/+q+WMW/1flj1n8X50/ZvF/Tf6YxX98/pjFf0L+mMV/Yv6YxX+1/DGL/+r5Yxb/NfLHLP6T8scs/pPzxyz+a+aPWfzXyh+z+L82f8zi/7r8MYv/2vljFv918scs/uvmj1n8X58/ZvFfL3/M4v+G/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4vzF/zOK/cf6YxX+T/DGL/5vyxyz+b84fs/i/JX/M4v/W/DGL/9vyxyz+b88fs/i/I3/M4r9p/pjFf7P8MYv/5vljFv935o9Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/135Yxb/bfLHLP7vzh+z+L8nf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+780fs/i/L3/M4r9j/pjF//35Yxb/nfLHLP4fyB+z+H8wf8zi/6H8MYv/zvljFv9d8scs/rvmj1n8P5w/ZvH/SP6Yxf+j+WMW/93yxyz+H8sfs/jvnj9m8d8jf8ziv2f+mMX/4/ljFv9P5I9Z/PfKH7P4fzJ/zOK/d/6Yxf9T+WMW/0/nj1n898kfs/jvmz9m8d8vf8zi/5n8MYv/Z/PHLP6fyx+z+O+fP2bxPyB/zOL/+fwxi/+B+WMW/4Pyxyz+X8gfs/gfnD9m8T8kf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/b+aPWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/7fyxyz+384fs/ifmj9m8T8tf8zif3r+mMX/jPwxi/938scs/mfmj1n8z8ofs/ifnT9m8f9u/pjF/3v5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+F+aPWfwvyh+z+P80f8zif3H+mMX/Z/ljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi//V+WMW/2vyxyz+v84fs/j/Jn/M4n9t/pjF/7f5Yxb/6/LHLP7X549Z/G/IH7P4/y5/zOJ/Y/6Yxf+m/DGL/835Yxb/3+ePWfz/kD9m8f9j/pjF/5b8MYv/n/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4v/n/DGL/535Yxb/u/LHLP5/yR+z+N+dP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP5T8scs/g/mj1n8H8ofs/hPzR+T+M8+yB+z+A/lj1n8R+WPWfxnyR+z+M+aP2bxH50/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8X9a/pjFf778MYv/mPwxi//8+WMW/7H5Yxb/BfLHLP4L5o9Z/J+eP2bxf0b+mMX/mfljFv+F8scs/s/KH7P4L5w/ZvF/dv6Yxf85+WMW/0Xyxyz+z80fs/g/L3/M4j8uf8zi//z8MYv/C/LHLP4vzB+z+C+aP2bxXyx/zOL/ovwxi//i+WMW/yXyxyz+L84fs/i/JH/M4v/S/DGL/8vyxyz+S+aPWfxfnj9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxfkT9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1fmj1n8V8kfs/ivmj9m8X9V/pjF/9X5Yxb/1+SPWfzH549Z/Cfkj1n8J+aPWfxXyx+z+K+eP2bxXyN/zOI/KX/M4j85f8ziv2b+mMV/rfwxi/9r88cs/q/LH7P4r50/ZvFfJ3/M4r9u/pjF//X5Yxb/9fLHLP5vyB+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/xvzxyz+G+ePWfw3yR+z+L8pf8zi/+b8MYv/W/LHLP5vzR+z+L8tf8zi//b8MYv/O/LHLP6b5o9Z/DfLH7P4b54/ZvF/Z/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+VP2bx3yZ/zOL/7vwxi/978scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/978MYv/+/LHLP475o9Z/N+fP2bx3yl/zOL/gfwxi/8H88cs/h/KH7P475w/ZvHfJX/M4r9r/pjF/8P5Yxb/j+SPWfw/mj9m8d8tf8zi/7H8MYv/7vljFv898scs/nvmj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/vvljFv/98scs/p/JH7P4fzZ/zOL/ufwxi//++WMW/wPyxyz+n88fs/gfmD9m8T8of8zi/4X8MYv/wfljFv9D8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bx/2b+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+H8rf8zi/+38MYv/qfljFv/T8scs/qfnj1n8z8gfs/h/J3/M4n9m/pjF/6z8MYv/2fljFv/v5o9Z/L+XP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif2H+mMX/ovwxi/9P88cs/hfnj1n8f5Y/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hfnT9m8b8mf8zi/+v8MYv/b/LHLP7X5o9Z/H+bP2bxvy5/zOJ/ff6Yxf+G/DGL/+/yxyz+N+aPWfxvyh+z+N+cP2bx/33+mMX/D/ljFv8/5o9Z/G/JH7P4/yl/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP5/zh+z+N+ZP2bxvyt/zOL/l/wxi//d+WMW/7/mj1n8/5Y/ZvH/e/6Yxf8f+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOI/JX/M4v9g/pjF/6H8MYv/1Pwxif8cg/wxi/9Q/pjFf1T+mMV/lvwxi/+s+WMW/9H5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv+n5Y9Z/OfLH7P4j8kfs/jPnz9m8R+bP2bxXyB/zOK/YP6Yxf/p+WMW/2fkj1n8n5k/ZvFfKH/M4v+s/DGL/8L5Yxb/Z+ePWfyfkz9m8V8kf8zi/9z8MYv/8/LHLP7j8scs/s/PH7P4vyB/zOL/wvwxi/+i+WMW/8Xyxyz+L8ofs/gvnj9m8V8if8zi/+L8MYv/S/LHLP4vzR+z+L8sf8ziv2T+mMX/5fljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMX/FfljFv8V8scs/ivmj1n8V8ofs/ivnD9m8X9l/pjFf5X8MYv/qvljFv9X5Y9Z/F+dP2bxf03+mMV/fP6YxX9C/pjFf2L+mMV/tfwxi//q+WMW/zXyxyz+k/LHLP6T88cs/mvmj1n818ofs/i/Nn/M4v+6/DGL/9r5Yxb/dfLHLP7r5o9Z/F+fP2bxXy9/zOL/hvwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+L8xf8ziv3H+mMV/k/wxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/m/PH7P4vyN/zOK/af6YxX+z/DGL/+b5Yxb/d+aPWfy3yB+z+G+ZP2bx3yp/zOK/df6Yxf9d+WMW/23yxyz+784fs/i/J3/M4r9t/pjFf7v8MYv/9vljFv8d8scs/u/NH7P4vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPOcgfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz/2WP/RT/Vw/v2ewP+6/DHL+X99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/1yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf+y/33+OR97K//H99/s/3Fzz5I9Z/OfNH7P4Py1/zOI/X/6YxX9M/pjFf/78MYv/2Pwxi/8C+WMW/wXzxyz+T88fs/g/I3/M4v/M/DGL/0L5Yxb/Z+WPWfwXzh+z+D87f8zi/5z8MYv/IvljFv/n5o9Z/J+XP2bxH5c/ZvF/fv6Yxf8F+WMW/xfmj1n8F80fs/gvlj9m8X9R/pjFf/H8MYv/EvljFv8X549Z/F+SP2bxf2n+mMX/ZfljFv8l88cs/i/PH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/q/IH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/K/PHLP6r5I9Z/FfNH7P4vyp/zOL/6vwxi/9r8scs/uPzxyz+E/LHLP4T88cs/qvlj1n8V88fs/ivkT9m8Z+UP2bxn5w/ZvFfM3/M4r9W/pjF/7X5Yxb/1+WPWfzXzh+z+K+TP2bxXzd/zOL/+vwxi/96+WMW/zfkj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/jfljFv+N88cs/pvkj1n835Q/ZvF/c/6Yxf8t+WMW/7fmj1n835Y/ZvF/e/6Yxf8d+WMW/03zxyz+m+WPWfw3zx+z+L8zf8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+78ofs/hvkz9m8X93/pjF/z35Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvF/b/6Yxf99+WMW/x3zxyz+788fs/jvlD9m8f9A/pjF/4P5Yxb/D+WPWfx3zh+z+O+SP2bx3zV/zOL/4fwxi/9H8scs/h/NH7P475Y/ZvH/WP6YxX/3/DGL/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf+5B/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkD9m8X9h/pjFf9H8MYv/YvljFv8X5Y9Z/BfPH7P4L5E/ZvF/cf6Yxf8l+WMW/5fmj1n8X5Y/ZvFfMn/M4v/y/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v+K/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4vzJ/zOK/Sv6YxX/V/DGL/6vyxyz+r84fs/i/Jn/M4j8+f8ziPyF/zOI/MX/M4r9a/pjFf/X8MYv/GvljFv9J+WMW/8n5Yxb/NfPHLP5r5Y9Z/F+bP2bxf13+mMV/7fwxi/86+WMW/3Xzxyz+r88fs/ivlz9m8X9D/pjFf/38MYv/BvljFv8N88cs/hvlj1n835g/ZvHfOH/M4r9J/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/t+ePWfzfkT9m8d80f8ziv1n+mMV/8/wxi/8788cs/lvkj1n8t8wfs/hvlT9m8d86f8zi/678MYv/NvljFv93549Z/N+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/9+aPWfzflz9m8d8xf8zi//78MYv/TvljFv8P5I9Z/D+YP2bx/1D+mMV/5/wxi/8u+WMW/13zxyz+H84fs/h/JH/M4v/R/DGL/275Yxb/j+WPWfx3zx+z+O+RP2bx3zN/zOL/8fwxi/8n8scs/nvlj1n8P5k/ZvHfO3/M4v+p/DGL/6fzxyz+++SPWfz3zR+z+O+XP2bx/0z+mMX/s/ljFv/P5Y9Z/PfPH7P4H5A/ZvH/fP6Yxf/A/DGL/0H5Yxb/L+SPWfwPzh+z+B+SP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/N/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/1v5Yxb/b+ePWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf87+WMW/zPzxyz+Z+WPWfzPzh+z+H83f8zi/738MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/C/PHLP4X5Y9Z/H+aP2bxvzh/zOL/s/wxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/q/DGL/zX5Yxb/X+ePWfx/kz9m8b82f8zi/9v8MYv/dfljFv/r88cs/jfkj1n8f5c/ZvG/MX/M4n9T/pjF/+b8MYv/7/PHLP5/yB+z+P8xf8zif0v+mMX/T/ljFv9b88cs/rflj1n8b88fs/jfkT9m8f9z/pjF/878MYv/XfljFv+/5I9Z/O/OH7P4/zV/zOL/t/wxi//f88cs/v/IH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8p+WMW/wfzxyz+D+WPWfyn5o9J/OcZ5I9Z/Ifyxyz+o/LHLP6z5I9Z/GfNH7P4j84fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+D8tf8ziP1/+mMV/TP6YxX/+/DGL/9j8MYv/AvljFv8F88cs/k/PH7P4PyN/zOL/zPwxi/9C+WMW/2flj1n8F84fs/g/O3/M4v+c/DGL/yL5Yxb/5+aPWfyflz9m8R+XP2bxf37+mMX/BfljFv8X5o9Z/BfNH7P4L5Y/ZvF/Uf6YxX/x/DGL/xL5Yxb/F+ePWfxfkj9m8X9p/pjF/2X5Yxb/JfPHLP4vzx+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP6vyB+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yvzxyz+q+SPWfxXzR+z+L8qf8zi/+r8MYv/a/LHLP7j88cs/hPyxyz+E/PHLP6r5Y9Z/FfPH7P4r5E/ZvGflD9m8Z+cP2bxXzN/zOK/Vv6Yxf+1+WMW/9flj1n8184fs/ivkz9m8V83f8zi//r8MYv/evljFv835I9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/435Yxb/jfPHLP6b5I9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/N+WP2bxf3v+mMX/HfljFv9N88cs/pvlj1n8N88fs/i/M3/M4r9F/pjFf8v8MYv/VvljFv+t88cs/u/KH7P4b5M/ZvF/d/6Yxf89+WMW/23zxyz+2+WPWfy3zx+z+O+QP/aI/1Yn/1f7vzd/zHL+vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPO8gfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz9m8b8uf8zif33+mMX/hvwxi//v8scs/jfmj1n8b8ofs/jfnD9m8f99/pjF/w/5Yxb/P+aPWfxvyR+z+P8pf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+f84fs/jfmT9m8b8rf8zi/5f8MYv/3fljFv+/5o9Z/P+WP2bx/3v+mMX/H/ljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8ziPyV/zOL/YP6Yxf+h/DGL/9T8MYn/0wb5Yxb/ofwxi/+o/DGL/yz5Yxb/WfPHLP6j88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+T8sfs/jPlz9m8R+TP2bxnz9/zOI/Nn/M4r9A/pjFf8H8MYv/0/PHLP7PyB+z+D8zf8ziv1D+mMX/WfljFv+F88cs/s/OH7P4Pyd/zOK/SP6Yxf+5+WMW/+flj1n8x+WPWfyfnz9m8X9B/pjF/4X5Yxb/RfPHLP6L5Y9Z/F+UP2bxXzx/zOK/RP6Yxf/F+WMW/5fkj1n8X5o/ZvF/Wf6YxX/J/DGL/8vzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/yvyxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOL/yvwxi/8q+WMW/1Xzxyz+r8ofs/i/On/M4v+a/DGL//j8MYv/hPwxi//E/DGL/2r5Yxb/1UX+c/wL61r81xD5/ytZ/Cflj1n8J+ePWfzXzB+z+K+VP2bxf23+mMX/dfljFv+188cs/uvkj1n8180fs/i/Pn/M4r9e/pjF/w35Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxn2+QP2bxH8ofs/iPyh+z+M+SP2bxnzX/xzTLyKPFf3T+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6Yxf9p+WMW//nyxyz+Y/LHLP7z549Z/Mfmj1n8F8gfs/gvmD9m8X96/pjF/xn5Yxb/Z+aPWfwXyh+z+D8rf8ziv3D+mMX/2fljFv/n5I9Z/BfJH7P4Pzd/zOL/vPwxi/+4/DGL//Pzxyz+L8gfs/i/MH/M4r9o/pjFf7H8MYv/i/LHLP6L549Z/JfIH7P4vzh/zOL/kvwxi/9L88cs/i/LH7P4L5k/ZvF/ef6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvF/Rf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/F+ZP2bxXyV/zOK/av6Yxf9V+WMW/1fnj1n8X5M/ZvEfnz9m8Z+QP2bxn5g/ZvFfLX/M4r96/pjFf438MYv/pPwxi//k/DGL/5r5Yxb/tfLHLP6vzR+z+L8uf8ziv3b+mMV/nfwxi/+6+WMW/9fnj1n818sfs/i/IX/M4r9+/pjFf4P8MYv/hvljFv+N8scs/m/MH7P4b5w/ZvHfJH/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/9vzxyz+78gfs/hvmj9m8d8sf8ziv3n+mMX/nfljFv8t8scs/lvmj1n8t8ofs/hvnT9m8X9X/pjFf5v8MYv/u/PHLP7vyR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/3vzxyz+78sfs/jvmD9m8X9//pjFf6f8MYv/B/LHLP4fzB+z+H8of8ziv3P+mMV/l/wxi/+u+WMW/w/nj1n8P5I/ZvH/aP6YxX+3/DGL/8fyxyz+u+ePWfz3yB+z+O+ZP2bx///Yo6cEUAgACIDZeNm2bdu2bdv1kW3btm3btm3zAnuCduYKc6D/qOX/IP9Ry//B/qOW/0P8Ry3/h/qPWv4P8x+1/B/uP2r5P8J/1PJ/pP+o5f8o/1HL/9H+o5b/Y/xHLf/H+o9a/o/zH7X8H+8/avk/wX/U8n+i/6jl/yT/Ucv/yf6jlv9T/Ect/6f6j1r+T/Mftfyf7j9q+T/Df9Tyf6b/qOX/LP9Ry//Z/qOW/3P8Ry3/5/qPWv7P8x+1/J/vP2r5v8B/1PJ/of+o5f8i/1HL/8X+o5b/S/xHLf+X+o9a/i/zH7X8X+4/avm/wn/U8n+l/6jl/yr/Ucv/1f6jlv9r/Ect/9f6j1r+r/Mftfxf7z9q+b/Bf9Tyf6P/qOX/Jv9Ry//N/qOW/1v8Ry3/t/qPWv5v8x+1/N/uP2r5v8N/1PJ/p/+o5f8u/1HL/93+o5b/e/xHLf/3+o9a/u/zH7X83+8/avl/wH/U8v+g/6jl/yH/Ucv/w/6jlv9H/Ect/4/6j1r+H/Mftfw/7j9q+X/Cf9Ty/6T/qOX/Kf9Ry//T/qOW/2f8Ry3/z/qPWv6f8x+1/D/vP2r5f8F/1PL/ov+o5f8l/1HL/8v+o5b/V/xHLf+v+o9a/l/zH7X8v+4/avl/w3/U8v+m/6jl/y3/Ucv/2/6jlv93/Ect/+/6j1r+3/Mftfy/7z9q+f/Af9Ty/6H/qOX/I/9Ry//H/qOW/0/8Ry3/n/qPWv4/8x+1/H/uP2r5/8J/1PL/pf+o5f8r/1HL/9f+o5b/b/xHLf/f+o9a/r/zH7X8f+8/avn/wX/U8v+j/6jl/yf/Ucv/z/6jlv9f/Ect/7/6j1r+f/Mftfz/7j9q+f/Df9Ty/6f/qOX/L/9Ry//f/qOW/3/8Ry3///qPSv4HDOQ/avkf2H/U8j+I/6jlf1D/Ucv/YP6jlv/B/Uct/0P4j1r+h/QftfwP5T9q+R/af9TyP4z/qOV/WP9Ry/9w/qOW/+H9Ry3/I/iPWv5H9B+1/A/wH7X8j+Q/avkf2X/U8j+K/6jlf1T/Ucv/aP6jlv/R/Uct/2P4j1r+x/QftfyP5T9q+R/bf9TyP47/qOV/XP9Ry/94/qOW//H9Ry3/E/iPWv4n9B+1/E/kP2r5n9h/1PI/if+o5X9S/1HL/2T+o5b/yf1HLf9T+I9a/qf0H7X8T+U/avmf2n/U8j+N/6jlf1r/Ucv/dP6jlv/p/Uct/zP4j1r+Z/QftfzP5D9q+Z/Zf9TyP4v/qOV/Vv9Ry/9s/qOW/9n9Ry3/c/iPWv7n9B+1/M/lP2r5n9t/1PI/j/+o5X9e/1HL/3z+o5b/+f1HLf8L+I9a/hf0H7X8L+Q/avlf2H/U8r+I/6jlf1H/Ucv/Yv6jlv/F/Uct/0v4j1r+l/Qftfwv5T9q+V/af9Tyv4z/qOV/Wf9Ry/9y/qOW/+X9Ry3/K/iPWv5X9B+1/K/kP2r5X9l/1PK/iv+o5X9V/1HL/2r+o5b/1f1HLf9r+I9a/tf0H7X8r+U/avlf23/U8r+O/6jlf13/Ucv/ev6jlv/1/Uct/xv4j1r+N/Qftfxv5D9q+d/Yf9Tyv4n/qOV/U/9Ry/9m/qOW/839Ry3/W/iPWv639B+1/G/lP2r539p/1PK/jf+o5X9b/1HL/3b+o5b/7f1HLf87+I9a/nf0H7X87+Q/avnf2X/U8r+L/6jlf1f/Ucv/bv6jlv/d/Uct/3v4j1r+9/Qftfzv5T9q+d/bf9Tyv4//qOV/X/9Ry/9+/qOW//39Ry3/B/iP/nf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf+zbbWydZeHH8bvbOsb+/JMRF1yGJptcKCTCbPeQ8YKwydhWB914HgMc3dqNjXabXYddAffwYhIhPEgyyRIlypahhJnQSAwEK4ho0EVNNPgAiEIUjRMh6Ja4WHPa09Ieu8Zz1etalM/nRc+577Pfva3Jd/e9wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ns1NC48Mr5m2KnxQw8+eLil73XO0ZU3H/htz4UDr+WPl41wyXFDD3p7e3vnPDd7R/nwlKIoSj/bzvLxpMpx6fo767/Q2X8UFvS8tOT4lJ83Hjmw5vRH6rqP3l/bd7a2uGndhtaWj40rinBxbdFZOqirKYqwuLa4r3RQXzpYUls8UjqY3XdwavHt0sH5aze3NpdOLI3+nsH/iobGncX4YcUWw/40GNr/zvpv3TnwOsolB642oSj3f0XX99+q+GzACfofuH5YWNl/1b9B4ISq6/+FBQOvo1zyX+7/k59a9cpIn524/4Hrh4/rH9IZ4fl/WKOVz/0Vz/8zRrjk4P6qmq7jpf4vve3ZmeVTE/6d5/93rx8urux/3LDn/9Jz/KKB5/9TiiJcMsZvB7ynNDTuOjLa/X/0/idMr9jUDO3/jPbN+0v9P77ke0+UT9VW2f+iUe7/45ZW/FqB6jQ0frm34v5fRf/FR0a45GD/bz/x64dL/T/2+wfOHPJZNf1fUtn/rI62LbO2bu86b0Nb0/qW9S2b6mbPnzOvvm7eBXNn9T0S9H8d43cF3hvGdv8vJldsaoqiZXB/TfeBp0v9z33wwTnlU5Oq7H/xqPf/Ge7/MKIPjSsmTiw6mzo62uv6vw4c1vd/7f9hI/Rfxd//zzqn/MNqy681RTFtcH/XmXevKPX/zqFnd5dPTayy/yWj9r9g8OcFIozx/t9csRnW/8FDL/U9/y+79+AZ5VPV/v1/6aj9v+r+D2PR0FjxP/z8h5X631VcFtlpaPDf/yCdHP0/9s4NPXHr8An9Qzo5+v/d546eG7cOy/QP6eTof8LGB56PW4dL9Q/p5Oh/+dT5K+LW4TL9Qzo5+l/76rl/jluHRv1DOjn6P+dLuzvj1mG5/iGdHP0/1D5nW9w6rNA/pJOj/5+e9tBrcetwuf4hnRz9Hzt2z41x63CF/iGdHP137zn7B3HrcKX+IZ0c/V++bmGIW4er9A/p5Oh/+rQ/Ph63DlfrH9LJ0f+8P/39tLh1uEb/kE6O/u/4/Ip9cetwrf4hnRz9j7/+lRfj1mGl/iGdHP0vPXvbwrh1uE7/kE6O/pt/0twbtw6r9A/p5Oh/1td/tCFuHa7XP6STo//Dyx/dE7cON+gf0snR/566YkrcOtyof0gnR/9f++7ph+LW4ZP6h3Ry9P+bp56cH7cOq/UP6eTo/7kP3P6NuHW4Sf+QTo7+713z4llx69Ckf0gnR/8P733+i3HrsEb/kE6O/t94o+3/4tZhrf4hnRz9T5506utx69Csf0gnR/8Lb/1Ke9w6tOgf0snRf9vu7h/GrcM6/UM6Ofr/8PFpq+LWYb3+IZ0c/a+cu/f9cetws/4hnRz9v2/Zhbvi1mGD/iGdHP1f1PPRi+LWYaP+IZ0c/Xc889mvxq3DLfqHdHL0v3fma4vj1qFV/5BOjv5fXr30x3Hr0KZ/SCdH/289et2muHXYpH9IJ0f/T/7s7WNx67BZ/5BOjv7//4JFf41bhy36h3Ry9L94yZtr49bhU/qHdHL0v7H7Hy/HrUO7/iGdHP3PPHz1srh12Kp/SCdH/985r25/3Dp06B/SydH/nVfuq49bh236h3Ry9L//4F13x63DrfqHdHL0/+YvZkyPW4dP6x/SydH//VMOXRu3Dp36h3Ry9P/LTbXPxK3Ddv1DOjn6/9u+qTvi1qFL/5BOjv6ffr3nD3HrcJv+IZ0c/a+e8KuJcetwu/4hnRz9T+3acl/cOtyhf0gnR//z72k6P24dPqN/SCdH/1v/8sI349Zhh/4hna3bu25pam1taffGG2+8GXxzsv9kAlJ7N/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+yQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRC9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//+O1eBI") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)=ANY=[]) 888.544296ms ago: executing program 0 (id=1721): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2d, 0x0, 0x0) syz_mount_image$jfs(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0xa, &(0x7f0000000340)=ANY=[@ANYRES8=0x0], 0xfa, 0x6158, &(0x7f000000c680)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) 144.205038ms ago: executing program 0 (id=1722): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1723): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000fc0)={0x44, &(0x7f0000000d80)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): evice loop1): open_ctree failed: -12 [ 654.209909][T11908] loop3: detected capacity change from 0 to 32768 [ 654.243607][T11908] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1281 (11908) [ 654.301725][T11908] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 654.331359][T11908] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 654.354249][T11908] BTRFS info (device loop3): using free space tree [ 654.502768][T11908] BTRFS info (device loop3): enabling ssd optimizations [ 654.509871][T11908] BTRFS info (device loop3): auto enabling async discard [ 654.603997][ T28] audit: type=1800 audit(1753658967.713:174): pid=11908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1281" name="file1" dev="loop3" ino=263 res=0 errno=0 [ 654.673731][ T28] audit: type=1800 audit(1753658967.753:175): pid=11908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1281" name="bus" dev="loop3" ino=264 res=0 errno=0 [ 654.961906][ T5784] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 656.288742][T11953] loop1: detected capacity change from 0 to 32768 [ 656.300113][T11953] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1288 (11953) [ 656.350961][T11953] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 656.372172][T11953] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 656.385654][T11953] BTRFS info (device loop1): using free space tree [ 656.538996][T11953] BTRFS info (device loop1): enabling ssd optimizations [ 656.569967][T11953] BTRFS info (device loop1): auto enabling async discard [ 656.702708][ T28] audit: type=1800 audit(1753658969.813:176): pid=11953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1288" name="file1" dev="loop1" ino=261 res=0 errno=0 [ 656.793016][ T28] audit: type=1800 audit(1753658969.863:177): pid=11953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1288" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 656.947390][ T5788] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 658.093922][ T9689] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 658.286815][ T9689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.305858][ T9689] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 658.325800][ T9689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.352391][ T9689] usb 4-1: config 0 descriptor?? [ 658.369539][ T9689] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input106 [ 658.578066][ T5141] bcm5974 4-1:0.0: could not read from device [ 658.590927][ T5141] bcm5974 4-1:0.0: could not read from device [ 658.605738][ T9689] usb 4-1: USB disconnect, device number 18 [ 658.613204][ T5141] bcm5974 4-1:0.0: could not read from device [ 658.643862][ T5141] bcm5974 4-1:0.0: could not read from device [ 658.660876][ T8586] udevd[8586]: Error opening device "/dev/input/event4": No such device [ 658.698498][ T8586] udevd[8586]: Unable to EVIOCGABS device "/dev/input/event4" [ 658.718293][ T8586] udevd[8586]: Unable to EVIOCGABS device "/dev/input/event4" [ 658.738402][ T8586] udevd[8586]: Unable to EVIOCGABS device "/dev/input/event4" [ 658.757908][ T8586] udevd[8586]: Unable to EVIOCGABS device "/dev/input/event4" [ 659.614417][T12009] input: syz1 as /devices/virtual/input/input107 [ 659.846238][T12011] loop3: detected capacity change from 0 to 32768 [ 659.857139][T12011] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1303 (12011) [ 659.888795][T12011] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 659.910977][T12011] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 659.914011][ T5876] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 659.923876][T12011] BTRFS info (device loop3): using free space tree [ 659.985198][T12011] BTRFS info (device loop3): enabling ssd optimizations [ 659.992341][T12011] BTRFS info (device loop3): auto enabling async discard [ 660.019939][ T28] audit: type=1800 audit(1753658973.133:178): pid=12011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1303" name="file1" dev="loop3" ino=261 res=0 errno=0 [ 660.067898][ T28] audit: type=1800 audit(1753658973.183:179): pid=12011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1303" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 660.113490][ T28] audit: type=1804 audit(1753658973.203:180): pid=12011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1303" name="/newroot/341/file0/file1" dev="loop3" ino=261 res=1 errno=0 [ 660.133905][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 660.157199][ T5784] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 660.169573][ T5876] usb 3-1: config index 0 descriptor too short (expected 19730, got 18) [ 660.178536][ T5876] usb 3-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 660.197151][ T5876] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 660.224031][ T9689] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 660.247240][ T5876] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 660.286131][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.318436][ T5876] usb 3-1: Product: syz [ 660.322660][ T5876] usb 3-1: Manufacturer: syz [ 660.339129][ T5876] usb 3-1: SerialNumber: syz [ 660.377869][ T5876] usb 3-1: config 0 descriptor?? [ 660.407189][ T5876] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 660.433874][ T9689] usb 2-1: Using ep0 maxpacket: 8 [ 660.444633][ T9689] usb 2-1: config index 0 descriptor too short (expected 19730, got 18) [ 660.468701][ T9689] usb 2-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 660.674720][ T9689] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 661.300175][ T5876] gspca_sn9c2028: read1 error -110 [ 661.309394][ T5876] gspca_sn9c2028: read1 error -32 [ 661.315509][ T5876] gspca_sn9c2028: read1 error -32 [ 661.320880][ T5876] sn9c2028: probe of 3-1:0.0 failed with error -32 [ 662.843777][ T9689] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 662.852916][ T9689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.863886][T12013] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1304'. [ 662.874884][ T27] usb 3-1: USB disconnect, device number 17 [ 662.950465][ T9689] usb 2-1: Product: syz [ 662.974103][ T9689] usb 2-1: Manufacturer: syz [ 662.978757][ T9689] usb 2-1: SerialNumber: syz [ 663.016878][ T9689] usb 2-1: config 0 descriptor?? [ 663.053045][ T9689] usb 2-1: can't set config #0, error -71 [ 663.098979][ T9689] usb 2-1: USB disconnect, device number 12 [ 663.303885][ T5876] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 665.397507][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.418278][ T5876] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 665.433743][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.464538][ T5876] usb 4-1: config 0 descriptor?? [ 665.494922][ T5876] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input108 [ 665.581598][T12061] loop2: detected capacity change from 0 to 40427 [ 665.590491][T12061] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 665.598385][T12061] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 665.609050][T12061] F2FS-fs (loop2): invalid crc value [ 665.617947][T12061] F2FS-fs (loop2): Found nat_bits in checkpoint [ 665.634155][ T6662] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 665.665365][T12061] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 665.672454][T12061] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 665.690582][ T5141] bcm5974 4-1:0.0: could not read from device [ 665.702627][ T5141] bcm5974 4-1:0.0: could not read from device [ 665.736102][ T5141] bcm5974 4-1:0.0: could not read from device [ 665.754908][ T5876] usb 4-1: USB disconnect, device number 19 [ 665.773417][ T7958] bcm5974 4-1:0.0: could not read from device [ 665.830183][ T7958] udevd[7958]: Error opening device "/dev/input/event4": No such file or directory [ 665.848841][ T6662] usb 1-1: Using ep0 maxpacket: 8 [ 665.858790][ T7958] udevd[7958]: Unable to EVIOCGABS device "/dev/input/event4" [ 665.866842][ T7958] udevd[7958]: Unable to EVIOCGABS device "/dev/input/event4" [ 665.869382][ T6662] usb 1-1: config index 0 descriptor too short (expected 19730, got 18) [ 665.875109][ T7958] udevd[7958]: Unable to EVIOCGABS device "/dev/input/event4" [ 665.891185][ T7958] udevd[7958]: Unable to EVIOCGABS device "/dev/input/event4" [ 665.901202][ T6662] usb 1-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 665.917912][ T6662] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 665.928790][ T6662] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 665.940198][ T6662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.948349][ T6662] usb 1-1: Product: syz [ 666.295040][ T6662] usb 1-1: Manufacturer: syz [ 666.299687][ T6662] usb 1-1: SerialNumber: syz [ 666.306797][ T6662] usb 1-1: config 0 descriptor?? [ 666.316684][ T6662] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 666.608558][ T6662] gspca_sn9c2028: read1 error -71 [ 666.621187][ T6662] gspca_sn9c2028: read1 error -71 [ 666.634233][ T6662] gspca_sn9c2028: read1 error -71 [ 666.639382][ T6662] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 666.662680][ T6662] usb 1-1: USB disconnect, device number 20 [ 667.524026][ T5876] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 667.734217][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 667.805330][ T5876] usb 4-1: config index 0 descriptor too short (expected 19730, got 18) [ 667.919514][ T5876] usb 4-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 668.035387][ T5876] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 668.171846][ T5876] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 668.411599][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.420791][ T5876] usb 4-1: Product: syz [ 668.425356][ T5876] usb 4-1: Manufacturer: syz [ 668.429981][ T5876] usb 4-1: SerialNumber: syz [ 668.437452][ T5876] usb 4-1: config 0 descriptor?? [ 668.446129][ T5876] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 669.157959][ T5876] gspca_sn9c2028: read1 error -71 [ 669.164868][ T5876] gspca_sn9c2028: read1 error -71 [ 669.173966][ T5876] gspca_sn9c2028: read1 error -71 [ 669.179080][ T5876] sn9c2028: probe of 4-1:0.0 failed with error -71 [ 669.189203][ T5876] usb 4-1: USB disconnect, device number 20 [ 669.210498][T12098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1324'. [ 669.220499][T12098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1324'. [ 669.383967][ T5829] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 670.210239][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.229642][ T5829] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 670.264136][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.365952][ T5829] usb 3-1: config 0 descriptor?? [ 670.415634][ T5829] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input109 [ 670.576771][ T5141] bcm5974 3-1:0.0: could not read from device [ 670.585696][ T5141] bcm5974 3-1:0.0: could not read from device [ 670.604643][ T5141] bcm5974 3-1:0.0: could not read from device [ 670.614284][ T5829] usb 3-1: USB disconnect, device number 18 [ 670.662511][ T8361] udevd[8361]: Error opening device "/dev/input/event4": No such file or directory [ 670.690386][ T8361] udevd[8361]: Unable to EVIOCGABS device "/dev/input/event4" [ 670.699222][ T8361] udevd[8361]: Unable to EVIOCGABS device "/dev/input/event4" [ 670.710264][ T8361] udevd[8361]: Unable to EVIOCGABS device "/dev/input/event4" [ 670.728942][ T8361] udevd[8361]: Unable to EVIOCGABS device "/dev/input/event4" [ 670.864446][T12122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1333'. [ 670.874506][T12122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1333'. [ 672.109373][ T5876] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 672.385660][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 672.402294][ T5876] usb 2-1: config index 0 descriptor too short (expected 19730, got 18) [ 672.411814][ T5876] usb 2-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 672.421651][ T5876] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 672.727093][ T5876] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 672.761760][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.826745][ T5876] usb 2-1: Product: syz [ 672.836895][ T5876] usb 2-1: Manufacturer: syz [ 672.843884][ T5876] usb 2-1: SerialNumber: syz [ 672.854274][ T5876] usb 2-1: config 0 descriptor?? [ 672.877186][ T5876] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 673.120213][T12133] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1337'. [ 673.151751][ T5876] gspca_sn9c2028: read1 error -71 [ 673.161728][ T5876] gspca_sn9c2028: read1 error -71 [ 673.170912][ T5876] gspca_sn9c2028: read1 error -71 [ 673.179855][ T5876] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 673.189642][ T5876] usb 2-1: USB disconnect, device number 13 [ 673.254146][ T6662] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 673.446056][ T6662] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.461629][ T6662] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.473389][ T6662] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 673.487884][ T6662] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 673.501367][ T6662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.511963][ T6662] usb 1-1: config 0 descriptor?? [ 674.246189][ T6662] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 674.280784][T12169] dccp_invalid_packet: invalid packet type [ 674.315975][ T6662] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 676.267041][ T6662] usb 1-1: USB disconnect, device number 21 [ 676.444143][T12170] fido_id[12170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:047F:FFFF.0001/report_descriptor': No such file or directory [ 676.535857][T12186] loop1: detected capacity change from 0 to 512 [ 676.567222][T12184] loop3: detected capacity change from 0 to 2048 [ 676.592330][T12186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.600331][T12184] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 676.695671][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.392407][ T6662] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 683.752420][ T6662] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.028316][ T6662] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 684.038735][ T6662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.050945][ T6662] usb 1-1: config 0 descriptor?? [ 684.068537][ T6662] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input110 [ 684.271601][ T5141] bcm5974 1-1:0.0: could not read from device [ 684.302999][ T5141] bcm5974 1-1:0.0: could not read from device [ 684.313533][ T5141] bcm5974 1-1:0.0: could not read from device [ 684.323717][ T6662] usb 1-1: USB disconnect, device number 22 [ 684.362382][ T8361] udevd[8361]: Error opening device "/dev/input/event4": No such file or directory [ 684.372483][ T8361] udevd[8361]: Unable to EVIOCGABS device "/dev/input/event4" [ 684.381694][ T8361] udevd[8361]: Unable to EVIOCGABS device "/dev/input/event4" [ 684.402793][ T8361] udevd[8361]: Unable to EVIOCGABS device "/dev/input/event4" [ 684.422003][ T8361] udevd[8361]: Unable to EVIOCGABS device "/dev/input/event4" [ 684.440108][ T8361] udevd[8361]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 684.484295][ T5156] udevd[5156]: worker [8361] terminated by signal 6 (Aborted) [ 684.653237][ T5156] udevd[5156]: worker [8361] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input110/event4' [ 684.979962][T12244] input: syz1 as /devices/virtual/input/input111 [ 685.228246][T12249] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 685.289916][T12250] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 686.094994][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.101674][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.455393][T12259] loop0: detected capacity change from 0 to 32768 [ 687.473638][T12259] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1373 (12259) [ 687.532708][T12259] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 687.550557][T12259] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 687.561388][T12259] BTRFS info (device loop0): using free space tree [ 687.621968][T12259] BTRFS info (device loop0): enabling ssd optimizations [ 687.640111][T12259] BTRFS info (device loop0): auto enabling async discard [ 687.691088][ T28] audit: type=1800 audit(1753659000.803:181): pid=12259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1373" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 687.711735][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.739043][ T28] audit: type=1800 audit(1753659000.853:182): pid=12259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1373" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 687.802913][ T28] audit: type=1804 audit(1753659000.913:183): pid=12288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1373" name="/newroot/329/file0/file1" dev="loop0" ino=260 res=1 errno=0 [ 688.113241][ T5792] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 688.844211][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 688.863732][T12299] input: syz1 as /devices/virtual/input/input112 [ 688.939840][T12302] input: syz1 as /devices/virtual/input/input113 [ 689.033980][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 689.041863][ T8] usb 2-1: config index 0 descriptor too short (expected 19730, got 18) [ 689.055010][ T8] usb 2-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 689.075111][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 689.094273][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 689.104146][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.119587][ T8] usb 2-1: Product: syz [ 689.127949][ T8] usb 2-1: Manufacturer: syz [ 689.138071][ T8] usb 2-1: SerialNumber: syz [ 689.148636][ T8] usb 2-1: config 0 descriptor?? [ 689.162786][ T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 689.393711][ T8] gspca_sn9c2028: read1 error -71 [ 689.411032][ T8] gspca_sn9c2028: read1 error -71 [ 689.420858][ T8] gspca_sn9c2028: read1 error -71 [ 689.430758][ T8] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 689.446308][ T8] usb 2-1: USB disconnect, device number 14 [ 690.373909][T12309] loop2: detected capacity change from 0 to 128 [ 696.287625][T12351] input: syz1 as /devices/virtual/input/input114 [ 696.733981][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 696.923992][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 696.930826][ T8] usb 3-1: config index 0 descriptor too short (expected 19730, got 18) [ 696.948976][ T8] usb 3-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 696.993655][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 697.047053][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 697.066098][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.086858][ T8] usb 3-1: Product: syz [ 697.091058][ T8] usb 3-1: Manufacturer: syz [ 697.116112][ T8] usb 3-1: SerialNumber: syz [ 697.148042][ T8] usb 3-1: config 0 descriptor?? [ 697.178539][ T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 697.390415][ T8] gspca_sn9c2028: read1 error -71 [ 697.427483][ T8] gspca_sn9c2028: read1 error -71 [ 697.444713][ T8] gspca_sn9c2028: read1 error -71 [ 697.449849][ T8] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 697.489285][ T8] usb 3-1: USB disconnect, device number 19 [ 699.544723][ T5876] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 699.774009][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 699.795393][ T5876] usb 3-1: config index 0 descriptor too short (expected 19730, got 18) [ 699.817956][ T5876] usb 3-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 699.839191][ T5876] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 699.938080][ T5876] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 699.975856][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.013208][ T5876] usb 3-1: Product: syz [ 700.034058][ T5876] usb 3-1: Manufacturer: syz [ 700.038894][ T5876] usb 3-1: SerialNumber: syz [ 700.054562][ T5876] usb 3-1: config 0 descriptor?? [ 700.069634][ T5876] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 700.297597][ T5876] gspca_sn9c2028: read1 error -71 [ 700.303467][ T5876] gspca_sn9c2028: read1 error -71 [ 700.309918][ T5876] gspca_sn9c2028: read1 error -71 [ 700.317597][ T5876] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 700.327812][ T5876] usb 3-1: USB disconnect, device number 20 [ 700.532297][T12386] input: syz1 as /devices/virtual/input/input115 [ 700.623935][ T5829] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 700.804028][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 700.811691][ T5829] usb 1-1: config index 0 descriptor too short (expected 19730, got 18) [ 700.821615][ T5829] usb 1-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 700.833940][ T5829] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 700.846075][ T5829] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 700.857730][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.865902][ T5829] usb 1-1: Product: syz [ 700.880299][ T5829] usb 1-1: Manufacturer: syz [ 700.889748][ T5829] usb 1-1: SerialNumber: syz [ 700.900844][ T5829] usb 1-1: config 0 descriptor?? [ 700.919261][ T5829] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 701.240693][ T5829] gspca_sn9c2028: read1 error -71 [ 701.264347][ T5829] gspca_sn9c2028: read1 error -71 [ 701.271103][ T5829] gspca_sn9c2028: read1 error -71 [ 701.277030][ T5829] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 701.316133][ T5829] usb 1-1: USB disconnect, device number 23 [ 701.917329][T12402] input: syz1 as /devices/virtual/input/input116 [ 702.492165][T12400] loop3: detected capacity change from 0 to 32768 [ 702.545786][T12400] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1409 (12400) [ 702.614039][T12400] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 702.657428][T12400] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 702.672429][T12400] BTRFS info (device loop3): force clearing of disk cache [ 702.684625][T12400] BTRFS info (device loop3): enabling auto defrag [ 702.695252][T12400] BTRFS info (device loop3): max_inline at 0 [ 702.702978][T12400] BTRFS info (device loop3): enabling disk space caching [ 702.713097][T12400] BTRFS info (device loop3): disk space caching is enabled [ 702.844900][T12400] BTRFS info (device loop3): enabling ssd optimizations [ 702.909106][T12400] BTRFS info (device loop3): rebuilding free space tree [ 703.127035][T12435] loop1: detected capacity change from 0 to 32768 [ 703.136156][T12435] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1413 (12435) [ 703.171177][T12400] BTRFS info (device loop3): disabling free space tree [ 703.225841][T12400] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 703.284721][T12400] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 703.497137][ T8586] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (8586) [ 703.847506][ T11] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 703.886588][ T5784] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 703.957765][T12445] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 704.103270][ T7958] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 14 /dev/loop3 scanned by udevd (7958) [ 704.154185][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 704.504318][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 704.517647][ T8] usb 1-1: config index 0 descriptor too short (expected 19730, got 18) [ 704.606812][ T8] usb 1-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 705.181790][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 705.193495][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 705.203585][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.353487][ T8] usb 1-1: Product: syz [ 705.358543][ T8] usb 1-1: Manufacturer: syz [ 705.363175][ T8] usb 1-1: SerialNumber: syz [ 705.601301][T12460] loop2: detected capacity change from 0 to 128 [ 705.672208][ T8] usb 1-1: config 0 descriptor?? [ 705.868166][T12455] input: syz1 as /devices/virtual/input/input117 [ 705.915976][ T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 706.296179][ T8] gspca_sn9c2028: read1 error -71 [ 706.321216][ T8] gspca_sn9c2028: read1 error -71 [ 706.343478][ T8] gspca_sn9c2028: read1 error -71 [ 706.362432][ T8] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 706.576621][ T8] usb 1-1: USB disconnect, device number 24 [ 707.953313][T12471] loop2: detected capacity change from 0 to 32768 [ 708.054161][T12471] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1421 (12471) [ 708.858158][T12471] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 709.040217][T12471] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 709.054046][T12471] BTRFS info (device loop2): using free space tree [ 709.099353][T12492] input: syz1 as /devices/virtual/input/input118 [ 709.143287][T12471] BTRFS info (device loop2): enabling ssd optimizations [ 709.193930][T12471] BTRFS info (device loop2): auto enabling async discard [ 709.269423][ T28] audit: type=1800 audit(1753659022.383:184): pid=12471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1421" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 709.368767][ T28] audit: type=1800 audit(1753659022.443:185): pid=12471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1421" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 709.561726][ T28] audit: type=1804 audit(1753659022.513:186): pid=12471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1421" name="/newroot/358/file0/file1" dev="loop2" ino=260 res=1 errno=0 [ 709.928393][ T5796] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 710.567712][ T7958] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop2 scanned by udevd (7958) [ 710.710104][ T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 710.923938][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 710.968288][ T8] usb 1-1: config index 0 descriptor too short (expected 19730, got 18) [ 710.988963][ T8] usb 1-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 711.026298][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 711.035791][ T5829] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 711.096401][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 711.126500][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.171513][ T8] usb 1-1: Product: syz [ 711.202519][ T8] usb 1-1: Manufacturer: syz [ 711.238588][ T8] usb 1-1: SerialNumber: syz [ 711.264570][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.307066][ T8] usb 1-1: config 0 descriptor?? [ 711.338778][ T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 711.351467][ T5829] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 711.419069][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.432065][ T5829] usb 4-1: config 0 descriptor?? [ 711.467026][ T5829] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input119 [ 711.592306][ T8] gspca_sn9c2028: read1 error -71 [ 711.597865][ T8] gspca_sn9c2028: read1 error -71 [ 711.603299][ T8] gspca_sn9c2028: read1 error -71 [ 711.608598][ T8] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 711.621335][ T8] usb 1-1: USB disconnect, device number 25 [ 711.682361][ T5141] bcm5974 4-1:0.0: could not read from device [ 711.741090][ T5141] bcm5974 4-1:0.0: could not read from device [ 711.792019][ T5141] bcm5974 4-1:0.0: could not read from device [ 711.820563][ T5829] usb 4-1: USB disconnect, device number 21 [ 711.839415][ T5141] bcm5974 4-1:0.0: could not read from device [ 711.899273][ T8586] udevd[8586]: Error opening device "/dev/input/event4": No such device [ 712.014746][ T8586] udevd[8586]: Unable to EVIOCGABS device "/dev/input/event4" [ 712.028860][ T8586] udevd[8586]: Unable to EVIOCGABS device "/dev/input/event4" [ 712.036530][ T8586] udevd[8586]: Unable to EVIOCGABS device "/dev/input/event4" [ 712.044194][ T8586] udevd[8586]: Unable to EVIOCGABS device "/dev/input/event4" [ 712.051986][ T8586] udevd[8586]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 712.111095][ T5156] udevd[5156]: worker [8586] terminated by signal 6 (Aborted) [ 712.119310][ T5156] udevd[5156]: worker [8586] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input119/event4' [ 712.514045][T12546] input: syz1 as /devices/virtual/input/input120 [ 713.036568][T12556] input: syz1 as /devices/virtual/input/input121 [ 713.104529][ T27] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 713.254790][T12553] loop2: detected capacity change from 0 to 32768 [ 713.288953][T12553] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 713.304567][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 713.310517][T12553] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 713.330894][ T27] usb 1-1: config index 0 descriptor too short (expected 19730, got 18) [ 713.340197][T12553] BTRFS info (device loop2): using free space tree [ 713.348916][ T27] usb 1-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 713.360261][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 713.395554][ T27] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 713.415241][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.464808][ T27] usb 1-1: Product: syz [ 713.485991][ T27] usb 1-1: Manufacturer: syz [ 713.502960][T12553] BTRFS info (device loop2): enabling ssd optimizations [ 713.510974][ T27] usb 1-1: SerialNumber: syz [ 713.520714][T12553] BTRFS info (device loop2): auto enabling async discard [ 713.539368][ T27] usb 1-1: config 0 descriptor?? [ 713.664548][ T27] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 713.683543][ T28] audit: type=1800 audit(1753659026.793:187): pid=12553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1441" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 713.922701][T12575] input: syz1 as /devices/virtual/input/input122 [ 714.013983][ T28] audit: type=1800 audit(1753659027.053:188): pid=12578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1441" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 714.055848][ T27] gspca_sn9c2028: read1 error -71 [ 714.078557][ T27] gspca_sn9c2028: read1 error -71 [ 714.109155][ T27] gspca_sn9c2028: read1 error -71 [ 714.141570][ T5796] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 714.158626][ T27] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 714.165861][ T28] audit: type=1804 audit(1753659027.163:189): pid=12578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1441" name="/newroot/360/file0/file1" dev="loop2" ino=260 res=1 errno=0 [ 714.206592][ T27] usb 1-1: USB disconnect, device number 26 [ 715.540685][ T5876] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 715.937493][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.172887][T12596] input: syz1 as /devices/virtual/input/input123 [ 716.185268][ T5876] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 716.194957][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.254307][ T5876] usb 2-1: config 0 descriptor?? [ 716.282546][ T5876] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input124 [ 716.490969][ T5141] bcm5974 2-1:0.0: could not read from device [ 716.519827][ T5141] bcm5974 2-1:0.0: could not read from device [ 716.674279][ T5876] usb 2-1: USB disconnect, device number 16 [ 716.749714][ T7958] udevd[7958]: Error opening device "/dev/input/event4": No such device [ 716.784628][T12602] loop3: detected capacity change from 0 to 32768 [ 716.785140][ T7958] udevd[7958]: Unable to EVIOCGABS device "/dev/input/event4" [ 716.803594][T12602] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1452 (12602) [ 716.859942][T12602] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 716.889135][T12602] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 716.941668][T12602] BTRFS info (device loop3): using free space tree [ 717.160958][T12608] loop0: detected capacity change from 0 to 512 [ 717.174929][T12602] BTRFS info (device loop3): enabling ssd optimizations [ 717.181929][T12602] BTRFS info (device loop3): auto enabling async discard [ 717.223257][T12608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.253945][ T28] audit: type=1800 audit(1753659030.353:190): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1452" name="file1" dev="loop3" ino=261 res=0 errno=0 [ 717.365451][ T28] audit: type=1800 audit(1753659030.383:191): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1452" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 717.470282][ T28] audit: type=1804 audit(1753659030.533:192): pid=12627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1452" name="/newroot/379/file0/file1" dev="loop3" ino=261 res=1 errno=0 [ 717.541836][ T5784] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 717.716118][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.368742][T12643] input: syz1 as /devices/virtual/input/input125 [ 719.191697][ T1194] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 719.994001][ T1194] usb 1-1: Using ep0 maxpacket: 8 [ 720.012874][ T1194] usb 1-1: config index 0 descriptor too short (expected 19730, got 18) [ 720.041742][ T1194] usb 1-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 720.078230][ T1194] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 720.090788][ T1194] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 720.104964][ T1194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.113115][ T1194] usb 1-1: Product: syz [ 720.120191][ T1194] usb 1-1: Manufacturer: syz [ 720.125312][ T27] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 720.143453][ T1194] usb 1-1: SerialNumber: syz [ 720.153290][ T1194] usb 1-1: config 0 descriptor?? [ 720.171437][ T1194] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 720.204147][ T5899] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 721.090283][ T1194] gspca_sn9c2028: read1 error -71 [ 721.097368][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 721.103079][ T1194] gspca_sn9c2028: read1 error -71 [ 721.111173][ T1194] gspca_sn9c2028: read1 error -71 [ 721.117095][ T27] usb 2-1: config index 0 descriptor too short (expected 19730, got 18) [ 721.135205][ T1194] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 721.155763][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.167686][ T27] usb 2-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 721.178953][ T1194] usb 1-1: USB disconnect, device number 27 [ 721.188282][ T5899] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 721.197594][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 721.227777][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.244909][ T27] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 721.257547][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.268052][ T27] usb 2-1: Product: syz [ 721.272298][ T5899] usb 3-1: config 0 descriptor?? [ 721.277893][ T27] usb 2-1: Manufacturer: syz [ 721.282812][ T27] usb 2-1: SerialNumber: syz [ 721.292143][ T5899] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input126 [ 721.306112][ T27] usb 2-1: config 0 descriptor?? [ 721.332243][ T27] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 721.601441][ T5141] bcm5974 3-1:0.0: could not read from device [ 721.854069][ T27] gspca_sn9c2028: read1 error -110 [ 721.860755][ T5899] usb 3-1: USB disconnect, device number 21 [ 721.867125][ T5141] bcm5974 3-1:0.0: could not read from device [ 721.884757][T12679] input: syz1 as /devices/virtual/input/input127 [ 721.898245][ T27] gspca_sn9c2028: read1 error -32 [ 721.911349][ T27] gspca_sn9c2028: read1 error -71 [ 721.916849][ T27] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 721.925771][ T27] usb 2-1: USB disconnect, device number 17 [ 721.937697][ T7978] bcm5974 3-1:0.0: could not read from device [ 722.121326][ T7978] udevd[7978]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 722.145289][ T7978] udevd[7978]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 722.177671][ T7978] udevd[7978]: Error opening device "/dev/input/event4": No such file or directory [ 722.233292][ T7978] udevd[7978]: Unable to EVIOCGABS device "/dev/input/event4" [ 722.241457][ T7978] udevd[7978]: Unable to EVIOCGABS device "/dev/input/event4" [ 722.256109][ T7978] udevd[7978]: Unable to EVIOCGABS device "/dev/input/event4" [ 722.266718][ T7978] udevd[7978]: Unable to EVIOCGABS device "/dev/input/event4" [ 724.005013][ T786] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 724.114297][T12726] loop0: detected capacity change from 0 to 32768 [ 724.242815][T12726] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1477 (12726) [ 724.431669][ T786] usb 4-1: Using ep0 maxpacket: 8 [ 724.454428][ T786] usb 4-1: config index 0 descriptor too short (expected 19730, got 18) [ 724.491518][ T786] usb 4-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 724.508313][T12726] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 724.524828][T12737] input: syz1 as /devices/virtual/input/input128 [ 724.568625][ T786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 724.585602][T12726] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 724.606247][ T786] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 724.621718][T12726] BTRFS info (device loop0): using free space tree [ 724.631741][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.687240][ T786] usb 4-1: Product: syz [ 724.691418][ T786] usb 4-1: Manufacturer: syz [ 724.714479][ T786] usb 4-1: SerialNumber: syz [ 724.754454][ T786] usb 4-1: config 0 descriptor?? [ 724.795883][ T786] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 724.838611][T12726] BTRFS info (device loop0): enabling ssd optimizations [ 724.917973][T12726] BTRFS info (device loop0): auto enabling async discard [ 725.071609][ T786] gspca_sn9c2028: read1 error -71 [ 725.083125][ T28] audit: type=1804 audit(1753659038.193:193): pid=12726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1477" name="/newroot/353/file1/bus" dev="loop0" ino=263 res=1 errno=0 [ 725.085215][ T786] gspca_sn9c2028: read1 error -71 [ 725.117211][ T786] gspca_sn9c2028: read1 error -71 [ 725.124007][ T786] sn9c2028: probe of 4-1:0.0 failed with error -71 [ 725.159001][ T786] usb 4-1: USB disconnect, device number 22 [ 725.224013][ T5899] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 725.308677][ T5792] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 725.446932][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 725.489482][ T5899] usb 3-1: config index 0 descriptor too short (expected 19730, got 18) [ 725.513851][ T5899] usb 3-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 725.553275][ T5899] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 725.701993][ T5899] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 725.738191][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.747926][ T5899] usb 3-1: Product: syz [ 725.752651][ T5899] usb 3-1: Manufacturer: syz [ 725.758154][ T5899] usb 3-1: SerialNumber: syz [ 725.765684][ T5899] usb 3-1: config 0 descriptor?? [ 725.776031][ T5899] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 725.865059][T12762] input: syz1 as /devices/virtual/input/input129 [ 726.064001][ T5899] gspca_sn9c2028: read1 error -71 [ 726.141921][ T5899] gspca_sn9c2028: read1 error -71 [ 726.147463][ T5899] gspca_sn9c2028: read1 error -71 [ 726.152942][ T5899] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 726.169157][ T5899] usb 3-1: USB disconnect, device number 22 [ 726.774800][T12780] input: syz1 as /devices/virtual/input/input130 [ 727.033373][T12778] loop1: detected capacity change from 0 to 32768 [ 727.070589][T12778] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1488 (12778) [ 727.146606][T12778] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 727.234094][T12778] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 727.367034][T12783] input: syz1 as /devices/virtual/input/input131 [ 727.378416][T12778] BTRFS info (device loop1): force clearing of disk cache [ 727.403986][T12778] BTRFS info (device loop1): enabling auto defrag [ 727.410529][T12778] BTRFS info (device loop1): max_inline at 0 [ 727.448710][T12778] BTRFS info (device loop1): enabling disk space caching [ 727.463851][T12778] BTRFS info (device loop1): disk space caching is enabled [ 727.714679][T12789] input: syz1 as /devices/virtual/input/input132 [ 727.798094][T12778] BTRFS info (device loop1): enabling ssd optimizations [ 727.830856][T12778] BTRFS info (device loop1): rebuilding free space tree [ 727.906964][T12778] BTRFS info (device loop1): disabling free space tree [ 727.925027][T12778] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 727.946151][T12778] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 728.042185][ T5788] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 728.075579][ T786] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 728.260147][T12813] loop2: detected capacity change from 0 to 512 [ 728.275764][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 728.290403][ T786] usb 1-1: config index 0 descriptor too short (expected 19730, got 18) [ 728.301494][ T786] usb 1-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 728.310726][ T786] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 728.326447][ T786] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 728.338408][T12813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.354536][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.363128][ T786] usb 1-1: Product: syz [ 728.383047][ T786] usb 1-1: Manufacturer: syz [ 728.393244][ T786] usb 1-1: SerialNumber: syz [ 728.418705][ T786] usb 1-1: config 0 descriptor?? [ 728.424747][T12813] overlayfs: missing 'workdir' [ 728.456136][ T786] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 728.580926][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.719664][ T786] gspca_sn9c2028: read1 error -71 [ 728.729012][ T786] gspca_sn9c2028: read1 error -71 [ 728.736876][ T786] gspca_sn9c2028: read1 error -71 [ 728.861941][ T786] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 728.873138][T12823] input: syz1 as /devices/virtual/input/input133 [ 728.909377][ T786] usb 1-1: USB disconnect, device number 28 [ 729.365073][T12837] input: syz1 as /devices/virtual/input/input134 [ 729.410244][T12843] input: syz1 as /devices/virtual/input/input135 [ 730.001388][T12854] loop3: detected capacity change from 0 to 128 [ 730.736465][ T28] audit: type=1326 audit(1753659043.853:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12855 comm="syz.0.1507" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c3618e9a9 code=0x0 [ 730.952546][T12859] loop2: detected capacity change from 0 to 2048 [ 730.982556][T12859] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 731.120943][T12864] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 731.496818][T12868] input: syz1 as /devices/virtual/input/input136 [ 731.756017][T12872] input: syz1 as /devices/virtual/input/input137 [ 732.014186][ T786] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 732.214567][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 732.223962][ T786] usb 3-1: config index 0 descriptor too short (expected 19730, got 18) [ 732.289684][ T786] usb 3-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 732.317746][ T786] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 732.330657][ T786] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 732.343362][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.352240][ T786] usb 3-1: Product: syz [ 732.359418][ T786] usb 3-1: Manufacturer: syz [ 732.372641][T12882] input: syz1 as /devices/virtual/input/input138 [ 732.382795][ T786] usb 3-1: SerialNumber: syz [ 732.392761][ T786] usb 3-1: config 0 descriptor?? [ 732.412536][ T786] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 732.605432][T12884] input: syz1 as /devices/virtual/input/input139 [ 732.693679][ T786] gspca_sn9c2028: read1 error -71 [ 732.704729][ T786] gspca_sn9c2028: read1 error -71 [ 732.714610][ T786] gspca_sn9c2028: read1 error -71 [ 732.725688][ T786] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 732.745301][ T786] usb 3-1: USB disconnect, device number 23 [ 732.867654][T12879] loop0: detected capacity change from 0 to 32768 [ 732.904077][T12879] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1516 (12879) [ 732.946263][T12879] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 732.958165][T12879] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 733.006829][T12879] BTRFS info (device loop0): using free space tree [ 733.136422][T12879] BTRFS info (device loop0): enabling ssd optimizations [ 733.153635][T12879] BTRFS info (device loop0): auto enabling async discard [ 733.263463][ T28] audit: type=1804 audit(1753659046.373:195): pid=12879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1516" name="/newroot/360/file1/bus" dev="loop0" ino=263 res=1 errno=0 [ 733.414965][T12914] input: syz1 as /devices/virtual/input/input140 [ 733.705460][ T5792] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 733.726433][T12920] input: syz1 as /devices/virtual/input/input141 [ 733.748939][T12891] loop3: detected capacity change from 0 to 32768 [ 733.759732][T12891] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1521 (12891) [ 733.829243][T12891] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 733.855165][T12891] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 733.871888][T12891] BTRFS info (device loop3): force clearing of disk cache [ 733.884890][T12891] BTRFS info (device loop3): enabling auto defrag [ 733.891409][T12891] BTRFS info (device loop3): max_inline at 0 [ 733.900371][T12891] BTRFS info (device loop3): enabling disk space caching [ 733.910598][T12891] BTRFS info (device loop3): disk space caching is enabled [ 734.261244][T12891] BTRFS info (device loop3): enabling ssd optimizations [ 734.419565][T12891] BTRFS info (device loop3): rebuilding free space tree [ 734.899289][T12891] BTRFS info (device loop3): disabling free space tree [ 734.942665][T12891] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 734.952461][T12891] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 735.237005][T12948] input: syz1 as /devices/virtual/input/input142 [ 735.292155][ T58] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 735.337052][ T5784] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 735.521669][T12953] loop0: detected capacity change from 0 to 4096 [ 735.639738][T12959] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 735.753401][T12958] input: syz1 as /devices/virtual/input/input143 [ 736.257420][T12966] loop1: detected capacity change from 0 to 40427 [ 736.274200][T12966] F2FS-fs (loop1): build fault injection attr: rate: 5, type: 0x7ffff [ 737.709115][T12984] input: syz1 as /devices/virtual/input/input144 [ 737.720993][T12946] loop2: detected capacity change from 0 to 65536 [ 737.882480][T12986] input: syz1 as /devices/virtual/input/input145 [ 737.906195][T12946] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 738.144709][T12946] XFS (loop2): Ending clean mount [ 739.018449][ T5796] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 739.364052][ T5899] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 739.454256][ T786] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 739.564030][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 739.571316][ T5899] usb 4-1: config index 0 descriptor too short (expected 19730, got 18) [ 739.582583][ T5899] usb 4-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 739.624950][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 739.646427][ T5899] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 739.654038][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 739.656962][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.675232][ T786] usb 1-1: config index 0 descriptor too short (expected 19730, got 18) [ 739.690581][ T786] usb 1-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 739.704395][ T786] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 739.708421][ T5899] usb 4-1: Product: syz [ 739.726447][ T5899] usb 4-1: Manufacturer: syz [ 739.741376][ T5899] usb 4-1: SerialNumber: syz [ 739.745070][ T786] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 739.762099][ T5899] usb 4-1: config 0 descriptor?? [ 739.773922][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.779033][ T5899] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 739.806755][ T786] usb 1-1: Product: syz [ 739.812819][ T786] usb 1-1: Manufacturer: syz [ 739.820325][ T786] usb 1-1: SerialNumber: syz [ 739.850985][ T786] usb 1-1: config 0 descriptor?? [ 739.908268][ T786] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 740.013733][ T5899] gspca_sn9c2028: read1 error -71 [ 740.068265][ T5899] gspca_sn9c2028: read1 error -71 [ 740.078071][ T5899] gspca_sn9c2028: read1 error -71 [ 740.083207][ T5899] sn9c2028: probe of 4-1:0.0 failed with error -71 [ 740.113896][ T5899] usb 4-1: USB disconnect, device number 23 [ 740.177081][T13019] loop2: detected capacity change from 0 to 4096 [ 740.191406][ T786] gspca_sn9c2028: read1 error -71 [ 740.212265][ T786] gspca_sn9c2028: read1 error -71 [ 740.221419][ T786] gspca_sn9c2028: read1 error -71 [ 740.241760][ T786] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 740.280495][ T786] usb 1-1: USB disconnect, device number 29 [ 740.295804][T13019] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 741.088626][T13032] input: syz1 as /devices/virtual/input/input146 [ 741.396792][T13038] input: syz1 as /devices/virtual/input/input147 [ 742.863898][ T786] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 743.060709][T13059] input: syz1 as /devices/virtual/input/input148 [ 743.253925][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 743.325313][ T786] usb 2-1: config index 0 descriptor too short (expected 19730, got 18) [ 743.417607][ T786] usb 2-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 743.445085][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 743.514707][ T786] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 743.544111][ T28] audit: type=1326 audit(1753659056.663:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13061 comm="syz.2.1567" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7ebb8e9a9 code=0x0 [ 743.546521][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.618461][ T786] usb 2-1: Product: syz [ 743.624719][ T786] usb 2-1: Manufacturer: syz [ 743.629826][ T786] usb 2-1: SerialNumber: syz [ 743.642544][ T786] usb 2-1: config 0 descriptor?? [ 743.652159][ T786] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 743.813989][ T9689] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 743.883616][T13053] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1565'. [ 743.899781][ T786] gspca_sn9c2028: read1 error -71 [ 743.914181][ T786] gspca_sn9c2028: read1 error -71 [ 743.925909][ T786] gspca_sn9c2028: read1 error -71 [ 743.930987][ T786] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 743.960604][ T786] usb 2-1: USB disconnect, device number 18 [ 744.005206][ T9689] usb 4-1: Using ep0 maxpacket: 8 [ 744.015598][ T9689] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.038333][ T9689] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 744.047884][ T9689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.059750][ T9689] usb 4-1: config 0 descriptor?? [ 744.072193][ T9689] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 744.674242][ T5899] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 744.794033][ T1194] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 744.877481][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.894274][ T5899] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 744.903700][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.932562][ T5899] usb 1-1: config 0 descriptor?? [ 744.968568][ T5899] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input149 [ 744.981289][ T1194] usb 2-1: Using ep0 maxpacket: 8 [ 745.000876][ T1194] usb 2-1: config index 0 descriptor too short (expected 19730, got 18) [ 745.039867][ T1194] usb 2-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 745.082545][ T1194] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 745.128699][ T1194] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 745.156987][ T5141] bcm5974 1-1:0.0: could not read from device [ 745.165938][ T9689] gspca_vc032x: reg_r err -32 [ 745.172626][ T9689] vc032x: probe of 4-1:0.0 failed with error -32 [ 745.179645][ T1194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.192408][ T5141] bcm5974 1-1:0.0: could not read from device [ 745.195895][ T9689] usb 4-1: USB disconnect, device number 24 [ 745.208451][ T1194] usb 2-1: Product: syz [ 745.208720][ T5141] bcm5974 1-1:0.0: could not read from device [ 745.224699][ T1194] usb 2-1: Manufacturer: syz [ 745.232504][ T5141] bcm5974 1-1:0.0: could not read from device [ 745.233803][ T5899] usb 1-1: USB disconnect, device number 30 [ 745.245411][ T5141] bcm5974 1-1:0.0: could not read from device [ 745.251097][ T1194] usb 2-1: SerialNumber: syz [ 745.272068][ T1194] usb 2-1: config 0 descriptor?? [ 745.275999][ T7978] bcm5974 1-1:0.0: could not read from device [ 745.299424][ T1194] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 745.299586][ T7978] udevd[7978]: Error opening device "/dev/input/event4": No such file or directory [ 745.323552][ T7978] udevd[7978]: Unable to EVIOCGABS device "/dev/input/event4" [ 745.332377][ T7978] udevd[7978]: Unable to EVIOCGABS device "/dev/input/event4" [ 745.356098][ T7978] udevd[7978]: Unable to EVIOCGABS device "/dev/input/event4" [ 745.364366][ T7978] udevd[7978]: Unable to EVIOCGABS device "/dev/input/event4" [ 745.372990][ T7978] udevd[7978]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 745.406129][ T5156] udevd[5156]: worker [7978] terminated by signal 6 (Aborted) [ 745.414181][ T5156] udevd[5156]: worker [7978] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input149/event4' [ 745.513362][ T1194] gspca_sn9c2028: read1 error -71 [ 745.521933][ T1194] gspca_sn9c2028: read1 error -71 [ 745.546127][ T1194] gspca_sn9c2028: read1 error -71 [ 745.556152][ T1194] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 745.578639][ T1194] usb 2-1: USB disconnect, device number 19 [ 745.844156][T13093] input: syz1 as /devices/virtual/input/input150 [ 747.024654][T13106] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 747.586827][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.593354][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.759176][T13112] input: syz1 as /devices/virtual/input/input151 [ 748.304455][ T5899] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 748.506204][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.517707][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.527619][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 748.540567][ T5899] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 748.550042][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.561074][ T5899] usb 4-1: config 0 descriptor?? [ 748.614124][ T27] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 748.644223][ T786] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 748.795646][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.806059][ T27] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 748.815211][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.826400][ T27] usb 1-1: config 0 descriptor?? [ 748.838134][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 748.857469][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 748.865048][ T786] usb 3-1: config index 0 descriptor too short (expected 19730, got 18) [ 748.873474][ T786] usb 3-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 748.882598][ T786] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 748.900124][ T786] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 748.911220][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.919402][ T786] usb 3-1: Product: syz [ 748.923885][ T786] usb 3-1: Manufacturer: syz [ 748.928515][ T786] usb 3-1: SerialNumber: syz [ 748.935935][ T786] usb 3-1: config 0 descriptor?? [ 748.946575][ T786] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 748.986548][ T5899] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 749.003144][ T5899] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 749.165103][ T786] gspca_sn9c2028: read1 error -71 [ 749.171069][ T786] gspca_sn9c2028: read1 error -71 [ 749.177012][ T786] gspca_sn9c2028: read1 error -71 [ 749.182189][ T786] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 749.194151][ T786] usb 3-1: USB disconnect, device number 24 [ 749.255257][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 749.262818][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 749.274080][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 749.281114][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 749.290474][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 749.300048][ T27] pwc: recv_control_msg error -32 req 04 val 1400 [ 749.307971][ T27] pwc: recv_control_msg error -32 req 02 val 2000 [ 749.310919][ T9689] usb 4-1: USB disconnect, device number 25 [ 749.319645][ T27] pwc: recv_control_msg error -32 req 02 val 2100 [ 749.341895][ T27] pwc: recv_control_msg error -32 req 04 val 1500 [ 749.352985][ T27] pwc: recv_control_msg error -32 req 02 val 2500 [ 749.367596][ T27] pwc: recv_control_msg error -32 req 02 val 2400 [ 749.375407][ T27] pwc: recv_control_msg error -32 req 02 val 2600 [ 749.583384][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 749.590805][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 749.597753][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 749.611764][ T27] pwc: Registered as video103. [ 749.619823][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input152 [ 749.655337][ T27] usb 1-1: USB disconnect, device number 31 [ 749.699093][ T786] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 749.924420][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 749.934180][ T786] usb 2-1: config index 0 descriptor too short (expected 19730, got 18) [ 749.952784][ T786] usb 2-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 749.975111][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 749.994225][ T786] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 750.006018][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.032321][ T786] usb 2-1: Product: syz [ 750.053867][ T786] usb 2-1: Manufacturer: syz [ 750.064773][ T786] usb 2-1: SerialNumber: syz [ 750.084795][ T786] usb 2-1: config 0 descriptor?? [ 750.103124][ T786] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 750.488001][ T27] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 750.489434][ T786] gspca_sn9c2028: read1 error -71 [ 750.513289][ T786] gspca_sn9c2028: read1 error -71 [ 750.524683][ T786] gspca_sn9c2028: read1 error -71 [ 750.529812][ T786] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 750.530664][T13138] loop2: detected capacity change from 0 to 32768 [ 750.553560][ T786] usb 2-1: USB disconnect, device number 20 [ 750.610020][T13138] JBD2: Ignoring recovery information on journal [ 750.632716][T13145] input: syz1 as /devices/virtual/input/input153 [ 750.716574][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.744875][ T27] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 750.750645][T13138] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 750.772872][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.848205][ T27] usb 4-1: config 0 descriptor?? [ 750.862789][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 750.975438][ T5796] ocfs2: Unmounting device (7,2) on (node local) [ 751.274613][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 751.285908][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 751.324639][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 751.390451][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 751.409494][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 751.424719][ T27] pwc: recv_control_msg error -32 req 04 val 1400 [ 751.446210][ T27] pwc: recv_control_msg error -32 req 02 val 2000 [ 751.455660][ T27] pwc: recv_control_msg error -32 req 02 val 2100 [ 751.476957][ T27] pwc: recv_control_msg error -32 req 04 val 1500 [ 751.488454][ T27] pwc: recv_control_msg error -32 req 02 val 2500 [ 751.646790][T13152] loop2: detected capacity change from 0 to 32768 [ 751.700584][ T27] pwc: recv_control_msg error -32 req 02 val 2400 [ 751.739364][ T27] pwc: recv_control_msg error -32 req 02 val 2600 [ 751.831975][T13152] MetaData crosses page boundary!! [ 751.837643][T13152] lblock = 621d00, size = 28672 [ 751.842608][T13152] CPU: 0 PID: 13152 Comm: syz.2.1594 Not tainted 6.6.100-syzkaller #0 [ 751.850786][T13152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 751.860874][T13152] Call Trace: [ 751.864181][T13152] [ 751.867139][T13152] dump_stack_lvl+0x16c/0x230 [ 751.871845][T13152] ? show_regs_print_info+0x20/0x20 [ 751.877078][T13152] ? load_image+0x3b0/0x3b0 [ 751.881620][T13152] __get_metapage+0xaac/0xfa0 [ 751.886336][T13152] dtSearch+0x591/0x21b0 [ 751.890764][T13152] jfs_lookup+0x156/0x380 [ 751.895300][T13152] ? jfs_get_parent+0xb0/0xb0 [ 751.900089][T13152] ? apparmor_path_rmdir+0x2f0/0x2f0 [ 751.905388][T13152] ? make_vfsuid+0x51/0xb0 [ 751.909813][T13152] ? inode_permission+0xf3/0x480 [ 751.914742][T13152] ? bpf_lsm_inode_create+0x9/0x10 [ 751.919863][T13152] ? security_inode_create+0xb7/0x100 [ 751.925238][T13152] ? jfs_get_parent+0xb0/0xb0 [ 751.929920][T13152] path_openat+0x10b8/0x3190 [ 751.934529][T13152] ? do_filp_open+0x3d0/0x3d0 [ 751.939215][T13152] do_filp_open+0x1c5/0x3d0 [ 751.943727][T13152] ? vfs_tmpfile+0x490/0x490 [ 751.948331][T13152] ? _raw_spin_unlock+0x28/0x40 [ 751.953196][T13152] ? alloc_fd+0x58f/0x630 [ 751.957554][T13152] do_sys_openat2+0x12c/0x1c0 [ 751.962251][T13152] ? do_sys_open+0xe0/0xe0 [ 751.966773][T13152] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 751.972783][T13152] ? lock_chain_count+0x20/0x20 [ 751.977659][T13152] __x64_sys_openat+0x139/0x160 [ 751.982528][T13152] do_syscall_64+0x55/0xb0 [ 751.986978][T13152] ? clear_bhb_loop+0x40/0x90 [ 751.991662][T13152] ? clear_bhb_loop+0x40/0x90 [ 751.996339][T13152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 752.002239][T13152] RIP: 0033:0x7fe7ebb8e9a9 [ 752.006673][T13152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.026285][T13152] RSP: 002b:00007fe7ec9dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 752.034725][T13152] RAX: ffffffffffffffda RBX: 00007fe7ebdb5fa0 RCX: 00007fe7ebb8e9a9 [ 752.042709][T13152] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 752.050682][T13152] RBP: 00007fe7ebc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 752.058667][T13152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.066655][T13152] R13: 0000000000000000 R14: 00007fe7ebdb5fa0 R15: 00007ffdf3c5ec68 [ 752.074661][T13152] [ 752.079487][T13152] bread failed! [ 752.083006][T13152] jfs_lookup: dtSearch returned -5 [ 752.103629][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 752.186626][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 752.202349][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 752.244385][ T27] pwc: Registered as video103. [ 752.262841][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input154 [ 752.330640][ T27] usb 4-1: USB disconnect, device number 26 [ 752.624023][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 752.813894][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 752.828665][ T8] usb 2-1: config index 0 descriptor too short (expected 19730, got 18) [ 752.838819][ T8] usb 2-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 752.851523][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 752.864918][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 752.874344][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.882353][ T8] usb 2-1: Product: syz [ 752.887457][ T8] usb 2-1: Manufacturer: syz [ 752.892079][ T8] usb 2-1: SerialNumber: syz [ 752.903540][ T8] usb 2-1: config 0 descriptor?? [ 752.913141][ T9689] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 752.924874][ T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 752.948442][T13167] loop3: detected capacity change from 0 to 32768 [ 752.959438][T13167] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1602 (13167) [ 752.979079][T13167] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 753.011851][T13167] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 753.034026][T13167] BTRFS info (device loop3): using free space tree [ 753.126522][ T9689] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.129626][T13167] BTRFS info (device loop3): enabling ssd optimizations [ 753.137129][ T9689] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 753.153511][ T9689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.165167][ T9689] usb 1-1: config 0 descriptor?? [ 753.188793][ T9689] pwc: Askey VC010 type 2 USB webcam detected. [ 753.195683][T13167] BTRFS info (device loop3): auto enabling async discard [ 753.206637][T13154] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1596'. [ 753.261330][ T8] gspca_sn9c2028: read1 error -71 [ 753.274750][ T8] gspca_sn9c2028: read1 error -71 [ 753.280942][ T8] gspca_sn9c2028: read1 error -71 [ 753.286717][ T8] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 753.299721][ T8] usb 2-1: USB disconnect, device number 21 [ 753.306522][ T28] audit: type=1800 audit(1753659066.423:197): pid=13167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1602" name="file1" dev="loop3" ino=261 res=0 errno=0 [ 753.397566][ T28] audit: type=1800 audit(1753659066.513:198): pid=13167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1602" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 753.575142][ T5784] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 753.624138][ T9689] pwc: recv_control_msg error -32 req 02 val 2b00 [ 753.635432][ T9689] pwc: recv_control_msg error -32 req 02 val 2700 [ 753.644417][ T9689] pwc: recv_control_msg error -32 req 02 val 2c00 [ 753.662858][ T9689] pwc: recv_control_msg error -32 req 04 val 1000 [ 753.806725][ T9689] pwc: recv_control_msg error -32 req 04 val 1300 [ 753.824950][ T9689] pwc: recv_control_msg error -32 req 04 val 1400 [ 753.839799][ T9689] pwc: recv_control_msg error -32 req 02 val 2000 [ 753.894434][ T9689] pwc: recv_control_msg error -32 req 02 val 2100 [ 753.914318][ T9689] pwc: recv_control_msg error -32 req 04 val 1500 [ 753.938584][ T9689] pwc: recv_control_msg error -32 req 02 val 2500 [ 753.968683][ T9689] pwc: recv_control_msg error -32 req 02 val 2400 [ 753.999429][ T9689] pwc: recv_control_msg error -32 req 02 val 2600 [ 754.006716][T13194] input: syz1 as /devices/virtual/input/input155 [ 754.335589][ T9689] pwc: recv_control_msg error -71 req 02 val 2800 [ 754.534823][ T9689] pwc: recv_control_msg error -71 req 04 val 1100 [ 754.569394][ T9689] pwc: recv_control_msg error -71 req 04 val 1200 [ 754.602407][ T9689] pwc: Registered as video103. [ 754.638743][ T9689] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input156 [ 754.716787][ T9689] usb 1-1: USB disconnect, device number 32 [ 755.632997][T13219] loop1: detected capacity change from 0 to 32768 [ 755.703947][ T786] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 755.731400][T13219] [ 755.731400][T13219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 755.731400][T13219] [ 755.974116][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 756.064279][ T786] usb 1-1: config index 0 descriptor too short (expected 19730, got 18) [ 756.202607][ T786] usb 1-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 756.312158][ T786] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 756.434462][ T786] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 756.475103][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.511177][T13219] [ 756.511177][T13219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 756.511177][T13219] [ 756.523745][T13219] [ 756.523745][T13219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 756.523745][T13219] [ 756.535317][T13219] [ 756.535317][T13219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 756.535317][T13219] [ 756.545876][T13219] [ 756.545876][T13219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 756.545876][T13219] [ 756.556594][T13219] [ 756.556594][T13219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 756.556594][T13219] [ 756.575473][ T111] [ 756.575473][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 756.575473][ T111] [ 756.588818][T13219] overlay: ./file1 is not a directory [ 756.594467][ T786] usb 1-1: Product: syz [ 756.598771][ T786] usb 1-1: Manufacturer: syz [ 756.600280][T13217] loop2: detected capacity change from 0 to 32768 [ 756.603358][ T786] usb 1-1: SerialNumber: syz [ 756.619451][ T786] usb 1-1: config 0 descriptor?? [ 756.628848][ T786] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 756.646122][T13217] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1613 (13217) [ 756.694921][ T1130] [ 756.694921][ T1130] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 756.694921][ T1130] [ 756.711728][T13217] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 756.741441][ T1130] [ 756.741441][ T1130] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 756.741441][ T1130] [ 756.743907][T13217] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 756.782205][ T112] [ 756.782205][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 756.782205][ T112] [ 756.803743][ T5788] [ 756.803743][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 756.803743][ T5788] [ 756.805092][T13217] BTRFS info (device loop2): using free space tree [ 756.833358][ T5788] [ 756.833358][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 756.833358][ T5788] [ 756.857816][ T786] gspca_sn9c2028: read1 error -71 [ 756.880794][ T786] gspca_sn9c2028: read1 error -71 [ 756.896364][ T786] gspca_sn9c2028: read1 error -71 [ 756.905532][ T786] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 756.916426][ T786] usb 1-1: USB disconnect, device number 33 [ 756.959088][T13217] BTRFS info (device loop2): enabling ssd optimizations [ 756.985777][T13217] BTRFS info (device loop2): auto enabling async discard [ 757.038978][ T28] audit: type=1800 audit(1753659070.153:199): pid=13217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1613" name="file1" dev="loop2" ino=261 res=0 errno=0 [ 757.100647][ T28] audit: type=1800 audit(1753659070.213:200): pid=13245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1613" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 757.159038][T13247] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 757.271771][ T5796] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 757.783875][ T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 757.806182][T13261] input: syz1 as /devices/virtual/input/input157 [ 758.005583][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.871866][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 758.881302][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.982671][ T8] usb 3-1: config 0 descriptor?? [ 759.005091][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 759.294011][ T5829] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 759.426811][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 759.456362][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 759.457040][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 759.457501][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 759.458216][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 759.458865][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 759.459518][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 759.459970][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 759.460517][ T8] pwc: recv_control_msg error -32 req 04 val 1500 [ 759.536036][ T5829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.536071][ T5829] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 759.536083][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.540242][ T5829] usb 4-1: config 0 descriptor?? [ 759.542314][ T5829] pwc: Askey VC010 type 2 USB webcam detected. [ 759.670303][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 759.672185][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 759.672567][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 759.672899][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 759.673259][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 759.673628][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 759.674778][ T8] pwc: Registered as video103. [ 759.675753][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input158 [ 759.694475][ T8] usb 3-1: USB disconnect, device number 25 [ 759.979196][ T5829] pwc: recv_control_msg error -32 req 02 val 2b00 [ 760.111514][ T5829] pwc: recv_control_msg error -32 req 02 val 2700 [ 760.126601][ T5829] pwc: recv_control_msg error -32 req 02 val 2c00 [ 760.133838][ T5829] pwc: recv_control_msg error -32 req 04 val 1000 [ 760.154073][ T5829] pwc: recv_control_msg error -32 req 04 val 1300 [ 760.174216][ T5829] pwc: recv_control_msg error -32 req 04 val 1400 [ 760.191242][ T5829] pwc: recv_control_msg error -32 req 02 val 2000 [ 760.227171][ T5829] pwc: recv_control_msg error -32 req 02 val 2100 [ 760.235163][ T5829] pwc: recv_control_msg error -32 req 04 val 1500 [ 760.242264][ T5829] pwc: recv_control_msg error -32 req 02 val 2500 [ 760.267250][ T5829] pwc: recv_control_msg error -32 req 02 val 2400 [ 760.291436][ T5829] pwc: recv_control_msg error -32 req 02 val 2600 [ 760.510596][ T5829] pwc: recv_control_msg error -71 req 02 val 2800 [ 760.548524][ T5829] pwc: recv_control_msg error -71 req 04 val 1100 [ 760.564539][ T5829] pwc: recv_control_msg error -71 req 04 val 1200 [ 760.574339][ T5829] pwc: Registered as video103. [ 760.580817][ T5829] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input159 [ 760.663528][ T5829] usb 4-1: USB disconnect, device number 27 [ 760.884367][ T8] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 761.074994][T13280] loop2: detected capacity change from 0 to 32768 [ 761.083876][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 761.096979][ T8] usb 1-1: config index 0 descriptor too short (expected 19730, got 18) [ 761.107222][ T8] usb 1-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 761.116586][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 761.126407][T13280] [ 761.126407][T13280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 761.126407][T13280] [ 761.139567][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 761.149146][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.157658][ T8] usb 1-1: Product: syz [ 761.161960][ T8] usb 1-1: Manufacturer: syz [ 761.167043][ T8] usb 1-1: SerialNumber: syz [ 761.174681][ T8] usb 1-1: config 0 descriptor?? [ 761.187902][ T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 761.209256][T13280] [ 761.209256][T13280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 761.209256][T13280] [ 761.224053][T13280] [ 761.224053][T13280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 761.224053][T13280] [ 761.254591][T13280] [ 761.254591][T13280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 761.254591][T13280] [ 761.285474][T13280] [ 761.285474][T13280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 761.285474][T13280] [ 761.300881][T13280] [ 761.300881][T13280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 761.300881][T13280] [ 761.323889][ T5829] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 761.348110][ T111] [ 761.348110][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 761.348110][ T111] [ 761.360831][T13285] non-latin1 character 0x3ff found in JFS file name [ 761.372745][T13285] mount with iocharset=utf8 to access [ 761.406634][ T8] gspca_sn9c2028: read1 error -71 [ 761.414039][ T8] gspca_sn9c2028: read1 error -71 [ 761.419462][T11377] [ 761.419462][T11377] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 761.419462][T11377] [ 761.419849][ T8] gspca_sn9c2028: read1 error -71 [ 761.439820][T11377] [ 761.439820][T11377] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 761.439820][T11377] [ 761.439871][ T8] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 761.455505][ T112] [ 761.455505][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 761.455505][ T112] [ 761.468008][ T5796] [ 761.468008][ T5796] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 761.468008][ T5796] [ 761.469833][ T8] usb 1-1: USB disconnect, device number 34 [ 761.480591][ T5796] [ 761.480591][ T5796] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 761.480591][ T5796] [ 761.514405][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 761.530757][ T5829] usb 2-1: config index 0 descriptor too short (expected 19730, got 18) [ 761.553283][ T5829] usb 2-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 761.569605][ T5829] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 761.582041][ T5829] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 761.592064][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.600205][ T5829] usb 2-1: Product: syz [ 761.604463][ T5829] usb 2-1: Manufacturer: syz [ 761.609114][ T5829] usb 2-1: SerialNumber: syz [ 761.622765][ T5829] usb 2-1: config 0 descriptor?? [ 761.632788][ T5829] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 761.847298][ T5829] gspca_sn9c2028: read1 error -71 [ 761.854630][ T5829] gspca_sn9c2028: read1 error -71 [ 761.861801][ T5829] gspca_sn9c2028: read1 error -71 [ 761.869451][ T5829] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 761.881652][ T5829] usb 2-1: USB disconnect, device number 22 [ 763.623870][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 763.885617][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.929571][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 763.948289][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.991452][ T8] usb 3-1: config 0 descriptor?? [ 764.012290][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 764.021579][T13302] input: syz1 as /devices/virtual/input/input160 [ 764.432886][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 764.560493][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 764.688252][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 764.776456][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 764.840609][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 764.908860][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 764.949260][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 764.975782][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 765.006673][ T8] pwc: recv_control_msg error -32 req 04 val 1500 [ 765.024288][ T8] pwc: recv_control_msg error -32 req 02 val 2500 [ 765.038777][ T8] pwc: recv_control_msg error -32 req 02 val 2400 [ 765.065873][ T8] pwc: recv_control_msg error -32 req 02 val 2600 [ 765.081999][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 765.092286][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 765.102742][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 765.109597][T13320] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 765.118634][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 765.135884][ T8] pwc: Registered as video103. [ 765.152770][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input161 [ 765.187985][ T8] usb 3-1: USB disconnect, device number 26 [ 765.263884][ T5829] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 765.454864][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 765.463237][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.475006][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.495535][ T5829] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 765.505192][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.524992][ T5829] usb 1-1: config 0 descriptor?? [ 765.539858][ T5829] hub 1-1:0.0: USB hub found [ 765.742430][ T5829] hub 1-1:0.0: 1 port detected [ 765.754467][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 765.971343][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 765.989119][ T8] usb 2-1: config index 0 descriptor too short (expected 19730, got 18) [ 766.299009][T13336] loop2: detected capacity change from 0 to 128 [ 766.440708][ T8] usb 2-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 766.469802][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 766.492266][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 766.509957][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.521909][ T8] usb 2-1: Product: syz [ 766.526532][ T8] usb 2-1: Manufacturer: syz [ 766.531385][ T8] usb 2-1: SerialNumber: syz [ 766.540765][ T5829] hub 1-1:0.0: activate --> -90 [ 766.558027][ T8] usb 2-1: config 0 descriptor?? [ 766.574100][ T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 766.611855][T13338] input: syz1 as /devices/virtual/input/input162 [ 766.847937][ T8] gspca_sn9c2028: read1 error -71 [ 766.897079][ T8] gspca_sn9c2028: read1 error -71 [ 766.915024][ T8] gspca_sn9c2028: read1 error -71 [ 766.942877][ T8] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 766.943286][ T5876] usb 1-1: USB disconnect, device number 35 [ 766.976986][ T8] usb 2-1: USB disconnect, device number 23 [ 767.649362][ T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 767.713883][ T5876] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 767.713987][ T5829] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 767.793429][T13354] input: syz1 as /devices/virtual/input/input163 [ 767.849031][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.859160][ T8] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 767.870603][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.884272][ T8] usb 3-1: config 0 descriptor?? [ 767.905683][ T5829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.929081][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.948540][ T5876] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 767.958498][ T5829] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 767.967632][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.978959][ T5829] usb 2-1: config 0 descriptor?? [ 767.988779][ T5829] pwc: Askey VC010 type 2 USB webcam detected. [ 768.015313][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.039536][ T5876] usb 4-1: config 0 descriptor?? [ 768.062493][ T5876] pwc: Askey VC010 type 2 USB webcam detected. [ 768.396840][ T5829] pwc: recv_control_msg error -32 req 02 val 2b00 [ 768.434155][ T5829] pwc: recv_control_msg error -32 req 02 val 2700 [ 768.466835][ T5829] pwc: recv_control_msg error -32 req 02 val 2c00 [ 768.477930][ T5829] pwc: recv_control_msg error -32 req 04 val 1000 [ 768.482073][ T5876] pwc: recv_control_msg error -32 req 02 val 2b00 [ 768.486225][ T5829] pwc: recv_control_msg error -32 req 04 val 1300 [ 768.501258][ T5829] pwc: recv_control_msg error -32 req 04 val 1400 [ 768.520724][ T5829] pwc: recv_control_msg error -32 req 02 val 2000 [ 768.520769][ T5876] pwc: recv_control_msg error -32 req 02 val 2700 [ 768.529620][ T5829] pwc: recv_control_msg error -32 req 02 val 2100 [ 768.551207][ T5876] pwc: recv_control_msg error -32 req 02 val 2c00 [ 768.554130][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 768.569681][ T5876] pwc: recv_control_msg error -32 req 04 val 1000 [ 768.584480][ T5876] pwc: recv_control_msg error -32 req 04 val 1300 [ 768.584975][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 768.585665][ T5829] pwc: recv_control_msg error -32 req 04 val 1500 [ 768.606816][ T8] usb 3-1: USB disconnect, device number 27 [ 768.613122][ T5876] pwc: recv_control_msg error -32 req 04 val 1400 [ 768.635449][ T5876] pwc: recv_control_msg error -32 req 02 val 2000 [ 768.642681][ T5829] pwc: recv_control_msg error -32 req 02 val 2500 [ 768.654799][ T5829] pwc: recv_control_msg error -32 req 02 val 2400 [ 768.663100][ T5829] pwc: recv_control_msg error -32 req 02 val 2600 [ 768.663950][ T5876] pwc: recv_control_msg error -32 req 02 val 2100 [ 768.673284][ T5829] pwc: recv_control_msg error -32 req 02 val 2900 [ 768.703013][ T5829] pwc: recv_control_msg error -32 req 02 val 2800 [ 768.722536][ T5876] pwc: recv_control_msg error -32 req 04 val 1500 [ 768.727695][ T5829] pwc: recv_control_msg error -71 req 04 val 1100 [ 768.742574][ T5829] pwc: recv_control_msg error -71 req 04 val 1200 [ 768.749952][ T5876] pwc: recv_control_msg error -32 req 02 val 2500 [ 768.757132][ T5829] pwc: Registered as video103. [ 768.773968][ T5876] pwc: recv_control_msg error -32 req 02 val 2400 [ 768.782316][ T5829] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input164 [ 768.810746][ T5876] pwc: recv_control_msg error -32 req 02 val 2600 [ 768.827531][ T5876] pwc: recv_control_msg error -71 req 02 val 2900 [ 768.844790][ T5876] pwc: recv_control_msg error -71 req 02 val 2800 [ 768.855230][ T5829] usb 2-1: USB disconnect, device number 24 [ 768.864206][ T5876] pwc: recv_control_msg error -71 req 04 val 1100 [ 768.881118][ T5876] pwc: recv_control_msg error -71 req 04 val 1200 [ 768.904109][T12682] udevd[12682]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 768.947960][T12682] udevd[12682]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 768.959551][ T5876] pwc: Registered as video103. [ 768.966527][ T5876] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input165 [ 769.009033][ T5876] usb 4-1: USB disconnect, device number 28 [ 769.353942][T12675] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 769.493965][ T27] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 769.544371][T12675] usb 1-1: Using ep0 maxpacket: 8 [ 769.551092][T12675] usb 1-1: config index 0 descriptor too short (expected 19730, got 18) [ 769.559582][T12675] usb 1-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 769.568215][T12675] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 769.579659][T12675] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 769.588826][T12675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.596954][T12675] usb 1-1: Product: syz [ 769.601137][T12675] usb 1-1: Manufacturer: syz [ 769.606050][T12675] usb 1-1: SerialNumber: syz [ 769.613197][T12675] usb 1-1: config 0 descriptor?? [ 769.626635][T12675] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 769.686604][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 769.693189][ T27] usb 3-1: config index 0 descriptor too short (expected 19730, got 18) [ 769.701690][ T5876] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 769.709474][ T27] usb 3-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 769.718301][ T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 769.730233][ T27] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 769.739314][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.747381][ T27] usb 3-1: Product: syz [ 769.751560][ T27] usb 3-1: Manufacturer: syz [ 769.756224][ T27] usb 3-1: SerialNumber: syz [ 769.763565][ T27] usb 3-1: config 0 descriptor?? [ 769.772865][ T27] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 769.787304][ T5829] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 769.845096][T12675] gspca_sn9c2028: read1 error -71 [ 769.850597][T12675] gspca_sn9c2028: read1 error -71 [ 769.856098][T12675] gspca_sn9c2028: read1 error -71 [ 769.861238][T12675] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 769.869952][T12675] usb 1-1: USB disconnect, device number 36 [ 769.916136][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.928163][ T5876] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 769.937454][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.951789][ T5876] usb 4-1: config 0 descriptor?? [ 769.960421][ T5876] pwc: Askey VC010 type 2 USB webcam detected. [ 769.974014][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 769.981894][ T5829] usb 2-1: config index 0 descriptor too short (expected 19730, got 18) [ 769.994890][T13362] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1660'. [ 769.995469][ T5829] usb 2-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 770.006112][ T27] gspca_sn9c2028: read1 error -71 [ 770.019478][ T27] gspca_sn9c2028: read1 error -71 [ 770.024986][ T27] gspca_sn9c2028: read1 error -71 [ 770.026759][ T5829] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 770.030233][ T27] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 770.052286][ T27] usb 3-1: USB disconnect, device number 28 [ 770.058504][ T5829] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 770.058531][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.080029][ T5829] usb 2-1: Product: syz [ 770.090544][ T5829] usb 2-1: Manufacturer: syz [ 770.099396][ T5829] usb 2-1: SerialNumber: syz [ 770.107418][ T5829] usb 2-1: config 0 descriptor?? [ 770.119693][ T5829] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 770.330692][T13368] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1663'. [ 770.341638][ T5829] gspca_sn9c2028: read1 error -71 [ 770.347444][ T5829] gspca_sn9c2028: read1 error -71 [ 770.354466][ T5829] gspca_sn9c2028: read1 error -71 [ 770.359590][ T5829] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 770.370415][ T5876] pwc: recv_control_msg error -32 req 02 val 2b00 [ 770.371013][ T5829] usb 2-1: USB disconnect, device number 25 [ 770.392020][ T5876] pwc: recv_control_msg error -32 req 02 val 2700 [ 770.409316][ T5876] pwc: recv_control_msg error -32 req 02 val 2c00 [ 770.430525][ T5876] pwc: recv_control_msg error -32 req 04 val 1000 [ 770.461127][ T5876] pwc: recv_control_msg error -32 req 04 val 1300 [ 770.470971][ T5876] pwc: recv_control_msg error -32 req 04 val 1400 [ 770.479360][ T5876] pwc: recv_control_msg error -32 req 02 val 2000 [ 770.488023][ T5876] pwc: recv_control_msg error -32 req 02 val 2100 [ 770.511953][ T5876] pwc: recv_control_msg error -32 req 04 val 1500 [ 770.520158][ T5876] pwc: recv_control_msg error -32 req 02 val 2500 [ 770.746811][ T5876] pwc: recv_control_msg error -71 req 02 val 2600 [ 770.756343][ T5876] pwc: recv_control_msg error -71 req 02 val 2900 [ 770.763231][ T5876] pwc: recv_control_msg error -71 req 02 val 2800 [ 770.772780][ T5876] pwc: recv_control_msg error -71 req 04 val 1100 [ 770.780246][ T5876] pwc: recv_control_msg error -71 req 04 val 1200 [ 770.791349][ T5876] pwc: Registered as video103. [ 770.799080][ T5876] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input166 [ 770.874161][ T5876] usb 4-1: USB disconnect, device number 29 [ 770.890488][T13379] input: syz1 as /devices/virtual/input/input167 [ 770.926355][ T7885] udevd[7885]: setting mode of /dev/video103 to 020660 failed: No such file or directory [ 770.936588][ T7885] udevd[7885]: setting owner of /dev/video103 to uid=0, gid=28 failed: No such file or directory [ 771.408798][ T27] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 771.599649][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.612657][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.635286][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 771.655033][ T5876] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 771.662799][ T27] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.675010][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.687660][ T27] usb 2-1: config 0 descriptor?? [ 771.868750][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.882913][ T5876] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 771.893899][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.920959][ T5876] usb 4-1: config 0 descriptor?? [ 771.940901][T13392] loop2: detected capacity change from 0 to 64 [ 772.073900][T12675] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 772.131363][ T27] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 772.146496][ T27] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 772.257059][T12675] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.267945][T12675] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 772.277574][ T6662] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 772.285793][T12675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.296487][T12675] usb 1-1: config 0 descriptor?? [ 772.310154][T12675] pwc: Askey VC010 type 2 USB webcam detected. [ 772.333371][ T27] usb 2-1: USB disconnect, device number 26 [ 772.483866][ T6662] usb 3-1: Using ep0 maxpacket: 32 [ 772.490590][ T6662] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.501595][ T6662] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.511660][ T6662] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 772.520891][ T6662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.532911][ T6662] usb 3-1: config 0 descriptor?? [ 772.549305][ T6662] hub 3-1:0.0: USB hub found [ 772.566386][ T5876] usbhid 4-1:0.0: can't add hid device: -71 [ 772.572517][ T5876] usbhid: probe of 4-1:0.0 failed with error -71 [ 772.583264][ T5876] usb 4-1: USB disconnect, device number 30 [ 772.721665][T12675] pwc: recv_control_msg error -32 req 02 val 2b00 [ 772.729169][T12675] pwc: recv_control_msg error -32 req 02 val 2700 [ 772.736507][T12675] pwc: recv_control_msg error -32 req 02 val 2c00 [ 772.743617][T12675] pwc: recv_control_msg error -32 req 04 val 1000 [ 772.753434][T12675] pwc: recv_control_msg error -32 req 04 val 1300 [ 772.760226][ T6662] hub 3-1:0.0: 1 port detected [ 772.767690][T12675] pwc: recv_control_msg error -32 req 04 val 1400 [ 772.775352][T12675] pwc: recv_control_msg error -32 req 02 val 2000 [ 772.782577][T12675] pwc: recv_control_msg error -32 req 02 val 2100 [ 772.790088][T12675] pwc: recv_control_msg error -32 req 04 val 1500 [ 772.797792][T12675] pwc: recv_control_msg error -32 req 02 val 2500 [ 772.806331][T12675] pwc: recv_control_msg error -32 req 02 val 2400 [ 772.813304][T12675] pwc: recv_control_msg error -32 req 02 val 2600 [ 773.022210][T12675] pwc: recv_control_msg error -71 req 02 val 2800 [ 773.030110][T12675] pwc: recv_control_msg error -71 req 04 val 1100 [ 773.037063][T12675] pwc: recv_control_msg error -71 req 04 val 1200 [ 773.045005][T12675] pwc: Registered as video103. [ 773.052706][T12675] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input168 [ 773.069241][T12675] usb 1-1: USB disconnect, device number 37 [ 773.184226][ T5876] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 773.383853][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 773.389086][ T6662] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 773.390101][T13294] usb 3-1: USB disconnect, device number 29 [ 773.413239][ T5876] usb 2-1: config index 0 descriptor too short (expected 19730, got 18) [ 773.433077][ T5876] usb 2-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 773.453369][ T5876] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 773.477589][ T5876] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 773.487567][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.495742][ T5876] usb 2-1: Product: syz [ 773.499945][ T5876] usb 2-1: Manufacturer: syz [ 773.504590][ T5876] usb 2-1: SerialNumber: syz [ 773.513628][ T5876] usb 2-1: config 0 descriptor?? [ 773.521942][ T5876] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 773.636820][T13404] input: syz1 as /devices/virtual/input/input169 [ 773.732849][T13406] loop0: detected capacity change from 0 to 256 [ 773.748573][T13406] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 773.807800][ T5876] gspca_sn9c2028: read1 error -71 [ 773.819244][ T5876] gspca_sn9c2028: read1 error -71 [ 773.839514][ T5876] gspca_sn9c2028: read1 error -71 [ 773.852908][ T5876] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 773.868898][ T5876] usb 2-1: USB disconnect, device number 27 [ 774.845682][T13425] input: syz1 as /devices/virtual/input/input170 [ 775.212017][T13433] loop3: detected capacity change from 0 to 256 [ 775.232794][T13433] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 775.317856][ T5876] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 775.526661][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.563856][ T5876] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 775.580512][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.643442][ T5876] usb 3-1: config 0 descriptor?? [ 775.682051][ T5876] pwc: Askey VC010 type 2 USB webcam detected. [ 776.053889][T13442] input: syz1 as /devices/virtual/input/input171 [ 776.090014][ T5876] pwc: recv_control_msg error -32 req 02 val 2b00 [ 776.116553][ T5876] pwc: recv_control_msg error -32 req 02 val 2700 [ 776.176068][ T5876] pwc: recv_control_msg error -32 req 02 val 2c00 [ 776.201058][ T5876] pwc: recv_control_msg error -32 req 04 val 1000 [ 776.209271][ T5876] pwc: recv_control_msg error -32 req 04 val 1300 [ 776.218686][ T5876] pwc: recv_control_msg error -32 req 04 val 1400 [ 776.234123][ T5876] pwc: recv_control_msg error -32 req 02 val 2000 [ 776.245392][ T5876] pwc: recv_control_msg error -32 req 02 val 2100 [ 776.260945][ T5876] pwc: recv_control_msg error -32 req 04 val 1500 [ 776.277184][ T5876] pwc: recv_control_msg error -32 req 02 val 2500 [ 776.287224][T13447] loop1: detected capacity change from 0 to 512 [ 776.294813][ T5876] pwc: recv_control_msg error -32 req 02 val 2400 [ 776.304747][ T5876] pwc: recv_control_msg error -32 req 02 val 2600 [ 776.347573][T13447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.370876][ T5776] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 776.535176][ T5876] pwc: recv_control_msg error -71 req 02 val 2800 [ 776.550777][ T5876] pwc: recv_control_msg error -71 req 04 val 1100 [ 776.557574][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.559452][ T5876] pwc: recv_control_msg error -71 req 04 val 1200 [ 776.594291][ T5876] pwc: Registered as video103. [ 776.606035][ T5876] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input172 [ 776.619475][ T5776] usb 1-1: Using ep0 maxpacket: 8 [ 776.649509][ T5776] usb 1-1: config index 0 descriptor too short (expected 19730, got 18) [ 776.661945][ T5776] usb 1-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 776.664531][ T5876] usb 3-1: USB disconnect, device number 30 [ 776.693926][ T5776] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 776.743602][ T5776] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 776.768166][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.804057][ T5776] usb 1-1: Product: syz [ 776.808413][ T5776] usb 1-1: Manufacturer: syz [ 776.813183][ T5776] usb 1-1: SerialNumber: syz [ 776.831582][ T5776] usb 1-1: config 0 descriptor?? [ 776.855226][ T5776] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 777.064012][ T5829] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 777.116254][ T5776] gspca_sn9c2028: read1 error -71 [ 777.176467][ T5776] gspca_sn9c2028: read1 error -71 [ 777.183323][ T5776] gspca_sn9c2028: read1 error -71 [ 777.201117][ T5776] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 777.213519][ T5776] usb 1-1: USB disconnect, device number 38 [ 777.258386][ T5829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.314651][ T5829] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 777.341552][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.342785][T13460] input: syz1 as /devices/virtual/input/input173 [ 777.360092][ T5829] usb 2-1: config 0 descriptor?? [ 777.386439][ T5829] pwc: Askey VC010 type 2 USB webcam detected. [ 777.584040][ T5876] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 777.791417][ T5829] pwc: recv_control_msg error -32 req 02 val 2b00 [ 777.798737][ T5829] pwc: recv_control_msg error -32 req 02 val 2700 [ 777.808367][ T5829] pwc: recv_control_msg error -32 req 02 val 2c00 [ 777.816930][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.834118][ T5829] pwc: recv_control_msg error -32 req 04 val 1000 [ 777.835950][ T5876] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 777.862440][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.862555][ T5829] pwc: recv_control_msg error -32 req 04 val 1300 [ 777.884741][ T5829] pwc: recv_control_msg error -32 req 04 val 1400 [ 777.897351][ T5829] pwc: recv_control_msg error -32 req 02 val 2000 [ 777.908274][ T5829] pwc: recv_control_msg error -32 req 02 val 2100 [ 777.913375][ T5876] usb 3-1: config 0 descriptor?? [ 777.932462][ T5876] pwc: Askey VC010 type 2 USB webcam detected. [ 778.134229][ T5829] pwc: recv_control_msg error -71 req 02 val 2500 [ 778.151281][ T5829] pwc: recv_control_msg error -71 req 02 val 2400 [ 778.172711][ T5829] pwc: recv_control_msg error -71 req 02 val 2600 [ 778.195055][ T5829] pwc: recv_control_msg error -71 req 02 val 2900 [ 778.207057][ T5829] pwc: recv_control_msg error -71 req 02 val 2800 [ 778.216600][ T5829] pwc: recv_control_msg error -71 req 04 val 1100 [ 778.227618][ T5829] pwc: recv_control_msg error -71 req 04 val 1200 [ 778.242859][ T5829] pwc: Registered as video103. [ 778.263327][ T5829] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input174 [ 778.323083][ T5829] usb 2-1: USB disconnect, device number 28 [ 778.335977][ T5876] pwc: recv_control_msg error -32 req 02 val 2b00 [ 778.372450][ T5876] pwc: recv_control_msg error -32 req 02 val 2700 [ 778.395841][ T5876] pwc: recv_control_msg error -32 req 02 val 2c00 [ 778.419325][ T5876] pwc: recv_control_msg error -32 req 04 val 1000 [ 778.434992][ T5876] pwc: recv_control_msg error -32 req 04 val 1300 [ 778.452331][ T5876] pwc: recv_control_msg error -32 req 04 val 1400 [ 778.472740][ T5876] pwc: recv_control_msg error -32 req 02 val 2000 [ 778.488332][ T5876] pwc: recv_control_msg error -32 req 02 val 2100 [ 778.600285][ T5876] pwc: recv_control_msg error -32 req 04 val 1500 [ 778.608957][ T5876] pwc: recv_control_msg error -32 req 02 val 2500 [ 778.617869][ T5876] pwc: recv_control_msg error -32 req 02 val 2400 [ 778.626995][ T5876] pwc: recv_control_msg error -32 req 02 val 2600 [ 778.643375][ T5876] pwc: recv_control_msg error -32 req 02 val 2900 [ 778.896923][ T5876] pwc: recv_control_msg error -71 req 04 val 1100 [ 778.913099][ T5876] pwc: recv_control_msg error -71 req 04 val 1200 [ 778.928036][ T5876] pwc: Registered as video103. [ 778.954003][ T5876] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input175 [ 778.994274][ T5876] usb 3-1: USB disconnect, device number 31 [ 779.059213][T13475] input: syz1 as /devices/virtual/input/input176 [ 780.584103][ T8] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 780.797694][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.831407][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 780.844075][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.859270][ T8] usb 3-1: config 0 descriptor?? [ 780.880047][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 780.976116][T13493] input: syz1 as /devices/virtual/input/input177 [ 781.454566][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 781.527234][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 781.550756][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 781.564786][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 781.582264][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 781.610818][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 781.638617][T13492] loop0: detected capacity change from 0 to 32768 [ 781.654034][T13492] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1706 (13492) [ 781.736712][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 781.782209][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 781.804238][ T8] pwc: recv_control_msg error -32 req 04 val 1500 [ 781.832800][ T8] pwc: recv_control_msg error -32 req 02 val 2500 [ 781.843001][T13492] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 781.858197][T13492] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 781.920229][ T8] pwc: recv_control_msg error -32 req 02 val 2400 [ 781.927808][ T8] pwc: recv_control_msg error -32 req 02 val 2600 [ 781.964010][T13492] BTRFS info (device loop0): using free space tree [ 782.068643][T13492] BTRFS info (device loop0): enabling ssd optimizations [ 782.091706][T13492] BTRFS info (device loop0): auto enabling async discard [ 782.135557][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 782.143576][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 782.159115][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 782.172054][ T28] audit: type=1800 audit(1753659095.283:201): pid=13492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1706" name="file1" dev="loop0" ino=261 res=0 errno=0 [ 782.186964][ T8] pwc: Registered as video103. [ 782.218289][ T28] audit: type=1800 audit(1753659095.323:202): pid=13492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1706" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 782.253517][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input178 [ 782.310245][ T8] usb 3-1: USB disconnect, device number 32 [ 782.506490][ T5792] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 782.872605][T13519] loop0: detected capacity change from 0 to 32768 [ 782.950192][T13519] MetaData crosses page boundary!! [ 782.955412][T13519] lblock = 621d00, size = 28672 [ 782.960398][T13519] CPU: 0 PID: 13519 Comm: syz.0.1709 Not tainted 6.6.100-syzkaller #0 [ 782.968566][T13519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 782.978644][T13519] Call Trace: [ 782.981944][T13519] [ 782.984881][T13519] dump_stack_lvl+0x16c/0x230 [ 782.989556][T13519] ? show_regs_print_info+0x20/0x20 [ 782.994742][T13519] ? load_image+0x3b0/0x3b0 [ 782.999241][T13519] __get_metapage+0xaac/0xfa0 [ 783.003909][T13519] dtSearch+0x591/0x21b0 [ 783.008177][T13519] jfs_lookup+0x156/0x380 [ 783.012512][T13519] ? jfs_get_parent+0xb0/0xb0 [ 783.017198][T13519] ? apparmor_path_rmdir+0x2f0/0x2f0 [ 783.022477][T13519] ? make_vfsuid+0x51/0xb0 [ 783.026919][T13519] ? inode_permission+0xf3/0x480 [ 783.031847][T13519] ? bpf_lsm_inode_create+0x9/0x10 [ 783.036944][T13519] ? security_inode_create+0xb7/0x100 [ 783.042302][T13519] ? jfs_get_parent+0xb0/0xb0 [ 783.046988][T13519] path_openat+0x10b8/0x3190 [ 783.051596][T13519] ? do_filp_open+0x3d0/0x3d0 [ 783.056277][T13519] do_filp_open+0x1c5/0x3d0 [ 783.060771][T13519] ? vfs_tmpfile+0x490/0x490 [ 783.065450][T13519] ? _raw_spin_unlock+0x28/0x40 [ 783.070293][T13519] ? alloc_fd+0x58f/0x630 [ 783.074710][T13519] do_sys_openat2+0x12c/0x1c0 [ 783.079377][T13519] ? do_sys_open+0xe0/0xe0 [ 783.083793][T13519] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 783.089782][T13519] ? lock_chain_count+0x20/0x20 [ 783.094646][T13519] __x64_sys_openat+0x139/0x160 [ 783.099498][T13519] do_syscall_64+0x55/0xb0 [ 783.103924][T13519] ? clear_bhb_loop+0x40/0x90 [ 783.108651][T13519] ? clear_bhb_loop+0x40/0x90 [ 783.113332][T13519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 783.119223][T13519] RIP: 0033:0x7f5c3618e9a9 [ 783.123629][T13519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.143231][T13519] RSP: 002b:00007f5c35fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 783.151654][T13519] RAX: ffffffffffffffda RBX: 00007f5c363b5fa0 RCX: 00007f5c3618e9a9 [ 783.159708][T13519] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 783.167681][T13519] RBP: 00007f5c36210d69 R08: 0000000000000000 R09: 0000000000000000 [ 783.175649][T13519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.183610][T13519] R13: 0000000000000000 R14: 00007f5c363b5fa0 R15: 00007fffbf91dde8 [ 783.191608][T13519] [ 783.194984][T13519] bread failed! [ 783.198476][T13519] jfs_lookup: dtSearch returned -5 [ 783.995099][ T6662] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 784.271344][T13535] netlink: 'syz.2.1715': attribute type 12 has an invalid length. [ 784.433894][ T6662] usb 2-1: Using ep0 maxpacket: 32 [ 784.672548][ T6662] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 784.693212][ T6662] usb 2-1: config 0 has no interface number 0 [ 784.704982][ T6662] usb 2-1: config 0 interface 89 has no altsetting 0 [ 784.719842][ T6662] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 784.737828][ T6662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.754503][ T6662] usb 2-1: Product: syz [ 784.761936][ T6662] usb 2-1: Manufacturer: syz [ 784.767322][ T6662] usb 2-1: SerialNumber: syz [ 784.778218][ T6662] usb 2-1: config 0 descriptor?? [ 784.799941][ T6662] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 784.813971][ T6662] em28xx 2-1:0.89: Video interface 89 found: bulk [ 785.163826][ T5876] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 785.251560][T13547] netlink: 'syz.0.1719': attribute type 12 has an invalid length. [ 785.373879][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 785.381323][ T5876] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 785.389840][ T5876] usb 4-1: config 0 has no interface number 0 [ 785.396100][ T5876] usb 4-1: config 0 interface 89 has no altsetting 0 [ 785.406289][ T6662] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 785.413347][ T5876] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 785.423171][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.431559][ T5876] usb 4-1: Product: syz [ 785.435981][ T5876] usb 4-1: Manufacturer: syz [ 785.440610][ T5876] usb 4-1: SerialNumber: syz [ 785.455328][ T5876] usb 4-1: config 0 descriptor?? [ 785.464820][ T5876] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 785.474506][ T5876] em28xx 4-1:0.89: Video interface 89 found: bulk [ 786.075392][ T5876] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 786.341124][ T6662] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 786.361195][ T6662] em28xx 2-1:0.89: board has no eeprom [ 786.443918][ T6662] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 786.461636][ T6662] em28xx 2-1:0.89: analog set to bulk mode. [ 786.479437][T12675] em28xx 2-1:0.89: Registering V4L2 extension [ 786.491304][T13554] loop0: detected capacity change from 0 to 32768 [ 786.524533][ T6662] usb 2-1: USB disconnect, device number 29 [ 786.534728][T13554] MetaData crosses page boundary!! [ 786.539886][T13554] lblock = 621d00, size = 28672 [ 786.544971][T13554] CPU: 0 PID: 13554 Comm: syz.0.1721 Not tainted 6.6.100-syzkaller #0 [ 786.553145][T13554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 786.560304][ T6662] em28xx 2-1:0.89: Disconnecting em28xx [ 786.563203][T13554] Call Trace: [ 786.572105][T13554] [ 786.575054][T13554] dump_stack_lvl+0x16c/0x230 [ 786.579763][T13554] ? show_regs_print_info+0x20/0x20 [ 786.584991][T13554] ? load_image+0x3b0/0x3b0 [ 786.589539][T13554] __get_metapage+0xaac/0xfa0 [ 786.594245][T13554] dtSearch+0x591/0x21b0 [ 786.598567][T13554] jfs_lookup+0x156/0x380 [ 786.602933][T13554] ? jfs_get_parent+0xb0/0xb0 [ 786.607659][T13554] ? apparmor_path_rmdir+0x2f0/0x2f0 [ 786.612996][T13554] ? make_vfsuid+0x51/0xb0 [ 786.617455][T13554] ? inode_permission+0xf3/0x480 [ 786.622428][T13554] ? bpf_lsm_inode_create+0x9/0x10 [ 786.627827][T13554] ? security_inode_create+0xb7/0x100 [ 786.633234][T13554] ? jfs_get_parent+0xb0/0xb0 [ 786.637945][T13554] path_openat+0x10b8/0x3190 [ 786.642607][T13554] ? do_filp_open+0x3d0/0x3d0 [ 786.647340][T13554] do_filp_open+0x1c5/0x3d0 [ 786.652159][T13554] ? vfs_tmpfile+0x490/0x490 [ 786.656808][T13554] ? _raw_spin_unlock+0x28/0x40 [ 786.661695][T13554] ? alloc_fd+0x58f/0x630 [ 786.666064][T13554] do_sys_openat2+0x12c/0x1c0 [ 786.670774][T13554] ? do_sys_open+0xe0/0xe0 [ 786.675221][T13554] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 786.681232][T13554] ? lock_chain_count+0x20/0x20 [ 786.686116][T13554] __x64_sys_openat+0x139/0x160 [ 786.690999][T13554] do_syscall_64+0x55/0xb0 [ 786.695438][T13554] ? clear_bhb_loop+0x40/0x90 [ 786.700135][T13554] ? clear_bhb_loop+0x40/0x90 [ 786.704837][T13554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 786.710756][T13554] RIP: 0033:0x7f5c3618e9a9 [ 786.715197][T13554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.734832][T13554] RSP: 002b:00007f5c35fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 786.743279][T13554] RAX: ffffffffffffffda RBX: 00007f5c363b5fa0 RCX: 00007f5c3618e9a9 [ 786.751278][T13554] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 786.759280][T13554] RBP: 00007f5c36210d69 R08: 0000000000000000 R09: 0000000000000000 [ 786.767277][T13554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.775272][T13554] R13: 0000000000000000 R14: 00007f5c363b5fa0 R15: 00007fffbf91dde8 [ 786.783291][T13554] [ 786.786955][T13554] bread failed! [ 786.790481][T13554] jfs_lookup: dtSearch returned -5 [ 786.844245][T12675] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 786.851702][T12675] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 786.874473][T12675] em28xx 2-1:0.89: No AC97 audio processor [ 786.908138][T12675] usb 2-1: Decoder not found [ 786.926091][ T5876] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 786.944456][T12675] em28xx 2-1:0.89: failed to create media graph [ 786.960666][ T5876] em28xx 4-1:0.89: board has no eeprom [ 786.961297][T13552] loop2: detected capacity change from 0 to 32768 [ 786.974031][T12675] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 786.976870][T13552] XFS: ikeep mount option is deprecated. [ 787.011157][T12675] em28xx 2-1:0.89: Registering snapshot button... [ 787.037458][T12675] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input179 [ 787.054859][T13552] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 787.058406][T12675] em28xx 2-1:0.89: Remote control support is not available for this card. [ 787.072315][ T5876] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 787.083866][ T5876] em28xx 4-1:0.89: analog set to bulk mode. [ 787.090125][ T6662] em28xx 2-1:0.89: Closing input extension [ 787.103893][ T6662] em28xx 2-1:0.89: Deregistering snapshot button [ 787.138879][ T5876] usb 4-1: USB disconnect, device number 31 [ 787.154808][ T5876] em28xx 4-1:0.89: Disconnecting em28xx [ 787.178956][T12675] em28xx 4-1:0.89: Registering V4L2 extension [ 787.214486][ T6662] em28xx 2-1:0.89: Freeing device [ 787.284616][T12675] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 787.304202][T12675] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 787.311280][T12675] em28xx 4-1:0.89: No AC97 audio processor [ 787.339830][T12675] usb 4-1: Decoder not found [ 787.345737][T13552] XFS (loop2): Ending clean mount [ 787.354240][T12675] em28xx 4-1:0.89: failed to create media graph [ 787.360538][T12675] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 787.380378][T13567] ================================================================== [ 787.388495][T13567] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xca/0x430 [ 787.395890][T13567] Read of size 8 at addr ffff88802d848738 by task v4l_id/13567 [ 787.403441][T13567] [ 787.405776][T13567] CPU: 1 PID: 13567 Comm: v4l_id Not tainted 6.6.100-syzkaller #0 [ 787.413591][T13567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 787.423668][T13567] Call Trace: [ 787.426963][T13567] [ 787.429900][T13567] dump_stack_lvl+0x16c/0x230 [ 787.434586][T13567] ? __lock_acquire+0x7c80/0x7c80 [ 787.439607][T13567] ? show_regs_print_info+0x20/0x20 [ 787.444798][T13567] ? load_image+0x3b0/0x3b0 [ 787.449293][T13567] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 787.454654][T13567] ? __virt_addr_valid+0x18c/0x540 [ 787.459844][T13567] ? __virt_addr_valid+0x469/0x540 [ 787.464948][T13567] print_report+0xac/0x200 [ 787.469351][T13567] ? v4l2_fh_open+0xca/0x430 [ 787.473929][T13567] kasan_report+0x117/0x150 [ 787.478460][T13567] ? v4l2_fh_open+0xca/0x430 [ 787.483039][T13567] v4l2_fh_open+0xca/0x430 [ 787.487449][T13567] em28xx_v4l2_open+0x157/0x980 [ 787.492296][T13567] v4l2_open+0x212/0x360 [ 787.496527][T13567] chrdev_open+0x59e/0x670 [ 787.500945][T13567] ? cd_forget+0x160/0x160 [ 787.505347][T13567] ? fsnotify_perm+0x3ed/0x5e0 [ 787.510100][T13567] ? cd_forget+0x160/0x160 [ 787.514505][T13567] do_dentry_open+0x8c6/0x1500 [ 787.519259][T13567] path_openat+0x274b/0x3190 [ 787.523851][T13567] ? __kasan_slab_alloc+0x6c/0x80 [ 787.528881][T13567] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 787.534942][T13567] ? verify_lock_unused+0x140/0x140 [ 787.540299][T13567] ? do_filp_open+0x3d0/0x3d0 [ 787.544967][T13567] ? __virt_addr_valid+0x18c/0x540 [ 787.550071][T13567] do_filp_open+0x1c5/0x3d0 [ 787.554564][T13567] ? vfs_tmpfile+0x490/0x490 [ 787.559150][T13567] ? _raw_spin_unlock+0x28/0x40 [ 787.563987][T13567] ? alloc_fd+0x58f/0x630 [ 787.568308][T13567] do_sys_openat2+0x12c/0x1c0 [ 787.572981][T13567] ? do_sys_open+0xe0/0xe0 [ 787.577470][T13567] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 787.583438][T13567] ? lock_chain_count+0x20/0x20 [ 787.588275][T13567] ? lock_chain_count+0x20/0x20 [ 787.593110][T13567] __x64_sys_openat+0x139/0x160 [ 787.597961][T13567] do_syscall_64+0x55/0xb0 [ 787.602367][T13567] ? clear_bhb_loop+0x40/0x90 [ 787.607030][T13567] ? clear_bhb_loop+0x40/0x90 [ 787.611700][T13567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 787.617672][T13567] RIP: 0033:0x7f6dea4a7407 [ 787.622074][T13567] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 787.641668][T13567] RSP: 002b:00007ffd0bcfc630 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 787.650072][T13567] RAX: ffffffffffffffda RBX: 00007f6deab8f880 RCX: 00007f6dea4a7407 [ 787.658029][T13567] RDX: 0000000000000000 RSI: 00007ffd0bcfdf1c RDI: ffffffffffffff9c [ 787.665983][T13567] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 787.673940][T13567] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 787.681899][T13567] R13: 00007ffd0bcfc880 R14: 00007f6deac8c000 R15: 000056203068d4d8 [ 787.689864][T13567] [ 787.692872][T13567] [ 787.695192][T13567] Allocated by task 12675: [ 787.699594][T13567] kasan_set_track+0x4e/0x70 [ 787.704175][T13567] __kasan_kmalloc+0x8f/0xa0 [ 787.708752][T13567] em28xx_v4l2_init+0x10b/0x2e70 [ 787.713676][T13567] em28xx_init_extension+0x11c/0x1b0 [ 787.718952][T13567] process_scheduled_works+0xa45/0x15b0 [ 787.724487][T13567] worker_thread+0xa55/0xfc0 [ 787.729059][T13567] kthread+0x2fa/0x390 [ 787.733108][T13567] ret_from_fork+0x48/0x80 [ 787.737511][T13567] ret_from_fork_asm+0x11/0x20 [ 787.742275][T13567] [ 787.744584][T13567] Freed by task 12675: [ 787.748635][T13567] kasan_set_track+0x4e/0x70 [ 787.753212][T13567] kasan_save_free_info+0x2e/0x50 [ 787.758219][T13567] ____kasan_slab_free+0x126/0x1e0 [ 787.763314][T13567] slab_free_freelist_hook+0x130/0x1b0 [ 787.768753][T13567] __kmem_cache_free+0xba/0x1f0 [ 787.773608][T13567] em28xx_v4l2_init+0x1670/0x2e70 [ 787.778662][T13567] em28xx_init_extension+0x11c/0x1b0 [ 787.783942][T13567] process_scheduled_works+0xa45/0x15b0 [ 787.789477][T13567] worker_thread+0xa55/0xfc0 [ 787.794080][T13567] kthread+0x2fa/0x390 [ 787.798131][T13567] ret_from_fork+0x48/0x80 [ 787.802533][T13567] ret_from_fork_asm+0x11/0x20 [ 787.807283][T13567] [ 787.809589][T13567] Last potentially related work creation: [ 787.815299][T13567] kasan_save_stack+0x3e/0x60 [ 787.819972][T13567] __kasan_record_aux_stack+0xaf/0xc0 [ 787.825347][T13567] insert_work+0x3d/0x310 [ 787.829757][T13567] __queue_work+0xc39/0x1020 [ 787.834335][T13567] queue_work_on+0x121/0x1e0 [ 787.838907][T13567] sg_release+0x1b6/0x2b0 [ 787.843221][T13567] __fput+0x234/0x970 [ 787.847192][T13567] task_work_run+0x1ce/0x250 [ 787.851778][T13567] exit_to_user_mode_loop+0xe6/0x110 [ 787.857048][T13567] exit_to_user_mode_prepare+0xb1/0x140 [ 787.862581][T13567] syscall_exit_to_user_mode+0x1a/0x50 [ 787.868028][T13567] do_syscall_64+0x61/0xb0 [ 787.872447][T13567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 787.878339][T13567] [ 787.880646][T13567] The buggy address belongs to the object at ffff88802d848000 [ 787.880646][T13567] which belongs to the cache kmalloc-8k of size 8192 [ 787.894689][T13567] The buggy address is located 1848 bytes inside of [ 787.894689][T13567] freed 8192-byte region [ffff88802d848000, ffff88802d84a000) [ 787.908645][T13567] [ 787.910955][T13567] The buggy address belongs to the physical page: [ 787.917356][T13567] page:ffffea0000b61200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d848 [ 787.927575][T13567] head:ffffea0000b61200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 787.936489][T13567] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 787.944459][T13567] page_type: 0xffffffff() [ 787.948779][T13567] raw: 00fff00000000840 ffff888017842280 ffffea0000b97000 0000000000000004 [ 787.957343][T13567] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 787.965904][T13567] page dumped because: kasan: bad access detected [ 787.972301][T13567] page_owner tracks the page as allocated [ 787.977995][T13567] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13114, tgid 13113 (syz.0.1581), ts 747916536569, free_ts 729508640935 [ 788.001855][T13567] post_alloc_hook+0x1cd/0x210 [ 788.006610][T13567] get_page_from_freelist+0x195c/0x19f0 [ 788.012142][T13567] __alloc_pages+0x1e3/0x460 [ 788.016717][T13567] alloc_slab_page+0x5d/0x170 [ 788.021399][T13567] new_slab+0x87/0x2e0 [ 788.025453][T13567] ___slab_alloc+0xc6d/0x12f0 [ 788.030115][T13567] __kmem_cache_alloc_node+0x1a2/0x260 [ 788.035559][T13567] __kmalloc_node_track_caller+0xa2/0x230 [ 788.041267][T13567] kmalloc_reserve+0x117/0x260 [ 788.046017][T13567] __alloc_skb+0x138/0x2c0 [ 788.050421][T13567] netlink_dump+0x175/0xde0 [ 788.054912][T13567] netlink_recvmsg+0x677/0xdf0 [ 788.059660][T13567] sock_recvmsg_nosec+0x82/0xd0 [ 788.064593][T13567] ____sys_recvmsg+0x49b/0x5b0 [ 788.069345][T13567] ___sys_recvmsg+0x1b6/0x510 [ 788.074009][T13567] do_recvmmsg+0x360/0x7d0 [ 788.078411][T13567] page last free stack trace: [ 788.083063][T13567] free_unref_page_prepare+0x7ce/0x8e0 [ 788.088515][T13567] free_unref_page+0x32/0x2e0 [ 788.093181][T13567] __slab_free+0x35e/0x410 [ 788.097590][T13567] qlist_free_all+0x75/0xe0 [ 788.102095][T13567] kasan_quarantine_reduce+0x143/0x160 [ 788.107561][T13567] __kasan_slab_alloc+0x22/0x80 [ 788.112404][T13567] slab_post_alloc_hook+0x6e/0x4d0 [ 788.117506][T13567] kmem_cache_alloc+0x11e/0x2e0 [ 788.122344][T13567] alloc_empty_file+0x9e/0x1d0 [ 788.127095][T13567] path_openat+0x100/0x3190 [ 788.131583][T13567] do_filp_open+0x1c5/0x3d0 [ 788.136071][T13567] io_openat2+0x3b4/0x610 [ 788.140384][T13567] io_issue_sqe+0x2c5/0xc90 [ 788.144872][T13567] io_wq_submit_work+0x418/0x9c0 [ 788.149794][T13567] io_worker_handle_work+0x7ea/0x1120 [ 788.155145][T13567] io_wq_worker+0x470/0xea0 [ 788.159629][T13567] [ 788.161932][T13567] Memory state around the buggy address: [ 788.167543][T13567] ffff88802d848600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 788.175588][T13567] ffff88802d848680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 788.183628][T13567] >ffff88802d848700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 788.191670][T13567] ^ [ 788.197542][T13567] ffff88802d848780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 788.205588][T13567] ffff88802d848800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 788.213628][T13567] ================================================================== [ 788.221763][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.223250][T13552] XFS (loop2): Quotacheck needed: Please wait. [ 788.228920][T12675] em28xx 4-1:0.89: Registering snapshot button... [ 788.245491][T12675] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input180 [ 788.248631][T13567] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 788.248644][T13567] CPU: 0 PID: 13567 Comm: v4l_id Not tainted 6.6.100-syzkaller #0 [ 788.248659][T13567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 788.248669][T13567] Call Trace: [ 788.248675][T13567] [ 788.248681][T13567] dump_stack_lvl+0x16c/0x230 [ 788.248705][T13567] ? show_regs_print_info+0x20/0x20 [ 788.248722][T13567] ? load_image+0x3b0/0x3b0 [ 788.248746][T13567] panic+0x2c0/0x710 [ 788.248767][T13567] ? bpf_jit_dump+0xd0/0xd0 [ 788.248793][T13567] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 788.248814][T13567] ? _raw_spin_unlock+0x40/0x40 [ 788.248832][T13567] ? print_memory_metadata+0x314/0x400 [ 788.248849][T13567] ? v4l2_fh_open+0xca/0x430 [ 788.248866][T13567] check_panic_on_warn+0x84/0xa0 [ 788.248883][T13567] ? v4l2_fh_open+0xca/0x430 [ 788.248899][T13567] end_report+0x6f/0x140 [ 788.248914][T13567] kasan_report+0x128/0x150 [ 788.248931][T13567] ? v4l2_fh_open+0xca/0x430 [ 788.248950][T13567] v4l2_fh_open+0xca/0x430 [ 788.248970][T13567] em28xx_v4l2_open+0x157/0x980 [ 788.248995][T13567] v4l2_open+0x212/0x360 [ 788.249010][T13567] chrdev_open+0x59e/0x670 [ 788.249027][T13567] ? cd_forget+0x160/0x160 [ 788.249044][T13567] ? fsnotify_perm+0x3ed/0x5e0 [ 788.249062][T13567] ? cd_forget+0x160/0x160 [ 788.249077][T13567] do_dentry_open+0x8c6/0x1500 [ 788.249099][T13567] path_openat+0x274b/0x3190 [ 788.249125][T13567] ? __kasan_slab_alloc+0x6c/0x80 [ 788.249141][T13567] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 788.249162][T13567] ? verify_lock_unused+0x140/0x140 [ 788.249180][T13567] ? do_filp_open+0x3d0/0x3d0 [ 788.249200][T13567] ? __virt_addr_valid+0x18c/0x540 [ 788.249222][T13567] do_filp_open+0x1c5/0x3d0 [ 788.249242][T13567] ? vfs_tmpfile+0x490/0x490 [ 788.249270][T13567] ? _raw_spin_unlock+0x28/0x40 [ 788.249289][T13567] ? alloc_fd+0x58f/0x630 [ 788.249309][T13567] do_sys_openat2+0x12c/0x1c0 [ 788.249326][T13567] ? do_sys_open+0xe0/0xe0 [ 788.249343][T13567] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 788.249359][T13567] ? lock_chain_count+0x20/0x20 [ 788.249374][T13567] ? lock_chain_count+0x20/0x20 [ 788.249390][T13567] __x64_sys_openat+0x139/0x160 [ 788.249408][T13567] do_syscall_64+0x55/0xb0 [ 788.249422][T13567] ? clear_bhb_loop+0x40/0x90 [ 788.249436][T13567] ? clear_bhb_loop+0x40/0x90 [ 788.249450][T13567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 788.249469][T13567] RIP: 0033:0x7f6dea4a7407 [ 788.249483][T13567] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 788.249495][T13567] RSP: 002b:00007ffd0bcfc630 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 788.249513][T13567] RAX: ffffffffffffffda RBX: 00007f6deab8f880 RCX: 00007f6dea4a7407 [ 788.249524][T13567] RDX: 0000000000000000 RSI: 00007ffd0bcfdf1c RDI: ffffffffffffff9c [ 788.249534][T13567] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 788.249544][T13567] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 788.249553][T13567] R13: 00007ffd0bcfc880 R14: 00007f6deac8c000 R15: 000056203068d4d8 [ 788.249569][T13567] [ 788.256397][T13567] Kernel Offset: disabled