last executing test programs: 1m10.074476012s ago: executing program 0 (id=548): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f00000000c0)) 1m10.029539492s ago: executing program 0 (id=549): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x2}}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x5, 0x1a449, 0x4, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x40, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x14}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x80}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x400}]}]}, 0x40}}, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000280)=[@wr_drn={0x6e, 0x20, {0x6, 0x5}}, @rdmsr={0x32, 0x18, {0x349}}, @wrmsr={0x1e, 0x20, {0xa24, 0x5}}, @in_dx={0x82, 0x20, {0xc2ff}}, @out_dx={0xaa, 0x28, {0x3356, 0x7, 0x100000001}}, @wr_crn={0x46, 0x20, {0x0, 0x2}}, @out_dx={0xaa, 0x28, {0xa954, 0x1, 0x5}}, @wr_drn={0x6e, 0x20, {0x4, 0xfffffffffffffff7}}, @cpuid={0x14, 0x18, {0x1, 0x5}}, @uexit={0x0, 0x18, 0x6}, @code={0xa, 0x58, {"472b9b0000000066ba200066b818e966ef66bad00466b8330066ef670fdd2b66440f38dee3470f01c50f20e035000001000f22e0b8010000000f01d966b86f008ee866ba4000ed"}}, @set_irq_handler={0xbe, 0x20, {0x50, 0x2}}], 0x1b0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000200)={@remote, 0x1, 0x0, 0x10, 0x0, [{@initdev}]}}) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000180)={0x60000, 0x0, {[0x4, 0x4, 0xff, 0x6, 0x396, 0x7, 0xf, 0x4]}}) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x8, 0x6, 0xfb, 0x2, 0xf, 0x5, 0x3, 0x31, 0x3, 0x5a, 0x9e, 0xb, 0x6, 0x7c}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x28c900, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f00000004c0)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000480)=0x8000}) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000040)={0x5, 0x8001}) 1m9.7003682s ago: executing program 0 (id=554): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x84ff, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x1, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xc801}, 0x0) 1m9.627344709s ago: executing program 0 (id=555): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000000}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f03e700028000001294", 0x2e}], 0x1}, 0x0) 1m9.444964875s ago: executing program 0 (id=557): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000040900010073797a300000000030000000030a01030000000000000000050000000900010073797a300000000008000b"], 0x78}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x280030, &(0x7f0000000440)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020603000000000000000000000000050c00078005001400fd00000011000300686173683a6e65742c6e657400000000050005000200000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0) 1m9.346824964s ago: executing program 0 (id=559): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0xc3, 0x1f00c00e}, 0x0) 54.120197391s ago: executing program 32 (id=559): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0xc3, 0x1f00c00e}, 0x0) 28.783870938s ago: executing program 4 (id=738): openat$vcs(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x80601) mount(0x0, 0x0, 0x0, 0x4002a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000040d90455a01800000000010902240001000000000904010001030000000921000000012205000905810390601466f860164d36e77a956abd319f756c50", @ANYRES16=r0, @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000008000000000ac98a3c20008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x9001) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) 26.860735288s ago: executing program 4 (id=743): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r2, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x0, 0x9b, 0x5, 0xffffffff7fffffff, 0x2, 0x3, 0x8, 0x2a, 0x38, 0x329, 0xb, 0x0, 0x20, 0x1, 0x9, 0x7ff}, [{0x2, 0x5dbf, 0x2, 0x6, 0x8000, 0x5, 0x400, 0xb}], "", ['\x00', '\x00', '\x00']}, 0x358) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x140b, 0x100, 0x70bd29, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x15) shutdown(r1, 0x1) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/43, 0x1231000, 0x800, 0xfffffffb, 0x2}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 26.616345935s ago: executing program 4 (id=746): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x22000000, 0x10}]) 25.496412351s ago: executing program 4 (id=749): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000180)=[{r1, 0x2}], 0x1, 0x7f) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000140)={0xff, 0x2}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240), 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x12, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x12, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000fedbdf250800000008000300", @ANYRES32=r8], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022abd7000fddbdf251f0000000c0006007d1cdaf02acba71408000300", @ANYRES32=r8, @ANYBLOB="0cfdc63100"/16, @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x11}, 0x2400c844) 25.276142443s ago: executing program 4 (id=750): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x894) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xfffffffc, @mcast1, 0x4}, 0x1c) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x2000, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 24.487641329s ago: executing program 4 (id=759): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) (async) listen(r1, 0x3) r2 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x60, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x72d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x9, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7f, 0xb, 0xac}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x9, 0x2, 0xbf, 0x10, 0x2}, 0x15, &(0x7f00000000c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x5, 0xf000, 0x8, [0xf]}]}, 0x2, [{0x81, &(0x7f0000000140)=ANY=[@ANYBLOB="810374ccaeefa0585fc1371adbaa3711b5b04493bee94ba4c4712d178d77913cab745528930758070000008be07140963f0eec11142ffd2ffc95c89b003a13ee41052fc6456a8cfb8684b7a27d72596311e06f4601fcf2dddecdace8790311829176e7c061f31ed45356e9cad8677e22f2e39bbd09297b154047ac5880e7138016"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41b}}]}) (async) syz_usb_connect$cdc_ncm(0x4, 0x160, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14e, 0x2, 0x1, 0xee, 0xc0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a34c8a14"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x800, 0x0, 0x5}, {0x6, 0x24, 0x1a, 0xfeff, 0x29}, [@mdlm_detail={0xd2, 0x24, 0x13, 0x6, "0008101127e58390da54910fbd0f363e1060158f964e6d390afcdcbaa5eb3e92b30a5de082c6eed2119ed3c5adb40878f5c639625e1ab6e670012252bc4d18b3d46d11597b00ba933e87dfd414537cd31809e009ec82fce549afcaa7891d6a9cb61b19fff7444c88b802820bb53dce494a459ab5acb593a4c329a2b21e52b5c70a7c42ecb139a0097849f368d18c0d4981dda4fc4fe6ce4d9848000a58189f52ea7e9ab7914fcaa45dd2d9c671341270e249eb2f6b09ee481e89b41abe4581c39f336cf908aa55523a406b398384"}, @mdlm={0x15, 0x24, 0x12, 0x8}, @dmm={0x7, 0x24, 0x14, 0x0, 0xfffe}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x4, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x9, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x40, 0x1, 0x8}}}}}}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x310, 0x7f, 0x7, 0x0, 0x18, 0x2}, 0xf9, &(0x7f0000000940)={0x5, 0xf, 0xf9, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0xec, 0xf000, 0x4, [0x3f00, 0x3f, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x77, 0x5}, @generic={0xb4, 0x10, 0xa, "d7647ca09d732fb139a5553969a5e8b9eb816cf9e3e56fbeeac847f760c503249ee07940b36622c76776c319cdc34f78c2f672f4411671fd7322e7b46407be8ebd954af5bd9beccbd798ab85bad05f415ece21b395e4210f3d4ff917e9b63ad0da78879a96a0aa8f835f34f67625ccead7bb493ea11924cd5e75afb11b1bee92b8932fd9a8f392e5cdb99ee2d3c33b911ae6f504ba47b3006ce945aab0b2a5f51ab6e79f2e7bf2d5d1610259fa941264c5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x9, 0xa6, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "edb964f7cfcf821ff015417f987b0b8e"}]}, 0x7, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x427}}, {0x28, &(0x7f0000000a80)=@string={0x28, 0x3, "3f6499b44c301ac5e8ca7a7ee3714116f05ef97c4d688fd00f14486200e48fb86e69239a5878"}}, {0x57, &(0x7f0000000ac0)=@string={0x57, 0x3, "d3419fd50580643e306d27c06dd3fc352e0f4d69399526f5470be5f10a28e26c828b59f505e2242de120ea46668ab94071503f6c62929adc8be88414d7a2039e5a2349c0f885b30360887fe117156a4cfb261c1ac5"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x827}}, {0xe2, &(0x7f0000000bc0)=@string={0xe2, 0x3, "52e8f66c5f0dc9af32366af616c1cf603a74f198f38a8469fd4c067524118cc40cec69cde4ff3f45a917eff3608b33c175c20dbbcb7b39f87912181f9d912f3d6333a6ec9985721b3296da686f81465678d4d9815789ad49c7d76221973bf0b6afa29874a10a24e518d2f2847864b2c909d1a5577e8d4684da84d2b161955cd0e0207e91d5024aaa9d70c74372dca02692c6ce790ca18b9dd37121c7bd19bd2c331dd202748d8a9a2e3dba0a6457ce4a20771d4e6e0b8f15ca9655a37c2b6fb8938cb560ae7bff378e1309568ff0d7fda4dd58e91125455c70e50cf728a4e903"}}, {0xc9, &(0x7f0000000cc0)=@string={0xc9, 0x3, "296a110ba986130fca2cf26899721e7347280f75304f1fc5fc94065c59c54c513fdc5246b68b70ac619137f6695af3df81f57d1339f4f8b4ab0cc51dd561bc6f8b360a23ceab47d3f3334059f00d780b33f8572f5f52c0cdd812ce57166d9c3f2aaf306f9fde03f659db6dde7d57734a0f3524364d856c2003b11ffe6c67bf4e1027901c8b12f33c7e30f571f75698e18a4fcf96ca77e89f2e4b52f885c37b28e0909f7f6e9736778dac7a4dbace69de2cbd05886d3b14101158271bb8be7dcb5eea437ace0d0a"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000540)={0x24, &(0x7f0000000300)={0x0, 0x6, 0x92, {0x92, 0x2, "4916c2a5e21eaf1b93b70e49232f119d29f822b0df805f18f9cb729280d66114bf91a271c6ef4a0d1fff998cc57e75d6bb96032e5f0d0a028ea455bcac26b1db45028f38fcc6f879c8662e01d8e36df5af2e6b090ca160fa953c4b2d865a36b83b005c347b35e73aa4061165154a2246f68a762b7371bcb172dd91a5ee2a1f04bd6e3dd7dea49b4eb676cd5a99e08f1d"}}, &(0x7f0000000400)={0x0, 0x3, 0x80, @string={0x80, 0x3, "9d366d2e657c2380d7c265a1894fd4cd154be58b4c20f7125e50fd79d89052264d865bc1ffccdd997ce40a4ee602806809e52034980e3ca0401e34f57c336cb77c5f0fa9aa50835ae4ed02c20085449571b159fbb1a1d2802a43e2c5489ec18e3407ddbd47c6ced3524994e1f470edd2f00e13d7237222a776ef851e15b7"}}, &(0x7f00000004c0)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0xa, "b6a1148b"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xc, "6ccc747e"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xf5, 0x1, {0x22, 0x11}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x40, 0x1, 0x5b, "52037d7e3470a6ea2500d8cdff07666e6175f0bc42cbcd5a4786d47947c3118e5c8326f69b67ec90d3d4dac68cebdd6c5ac0a8d58a5bf13e5cca25a1612fc262e9ffabdb96f1fd48ecd3422cfa73edef4885e9e91c2492bbc62c6b"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xd5}, &(0x7f0000000680)={0x20, 0x1, 0x69, "ebe5e3a62393c1e448b80a84fed2e48ab3114a1e3d8c65b5d508f167e7c2b6027e5a3f788ee39ffba12349e3ec0d0c395f4dd0199996ed5f2c531ff3466a741e9a53ce112efe305584fb19d91e573a64b20509f7fe563f87470ec7a720e7a7482a84393fe36e1adef0"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x58}}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000e40)={0xbc, 0x0, 0xc}) (async) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) 9.448477091s ago: executing program 33 (id=759): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) (async) listen(r1, 0x3) r2 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x30e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x60, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x72d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x9, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7f, 0xb, 0xac}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x9, 0x2, 0xbf, 0x10, 0x2}, 0x15, &(0x7f00000000c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x5, 0xf000, 0x8, [0xf]}]}, 0x2, [{0x81, &(0x7f0000000140)=ANY=[@ANYBLOB="810374ccaeefa0585fc1371adbaa3711b5b04493bee94ba4c4712d178d77913cab745528930758070000008be07140963f0eec11142ffd2ffc95c89b003a13ee41052fc6456a8cfb8684b7a27d72596311e06f4601fcf2dddecdace8790311829176e7c061f31ed45356e9cad8677e22f2e39bbd09297b154047ac5880e7138016"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41b}}]}) (async) syz_usb_connect$cdc_ncm(0x4, 0x160, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14e, 0x2, 0x1, 0xee, 0xc0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a34c8a14"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x800, 0x0, 0x5}, {0x6, 0x24, 0x1a, 0xfeff, 0x29}, [@mdlm_detail={0xd2, 0x24, 0x13, 0x6, "0008101127e58390da54910fbd0f363e1060158f964e6d390afcdcbaa5eb3e92b30a5de082c6eed2119ed3c5adb40878f5c639625e1ab6e670012252bc4d18b3d46d11597b00ba933e87dfd414537cd31809e009ec82fce549afcaa7891d6a9cb61b19fff7444c88b802820bb53dce494a459ab5acb593a4c329a2b21e52b5c70a7c42ecb139a0097849f368d18c0d4981dda4fc4fe6ce4d9848000a58189f52ea7e9ab7914fcaa45dd2d9c671341270e249eb2f6b09ee481e89b41abe4581c39f336cf908aa55523a406b398384"}, @mdlm={0x15, 0x24, 0x12, 0x8}, @dmm={0x7, 0x24, 0x14, 0x0, 0xfffe}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x4, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x9, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x40, 0x1, 0x8}}}}}}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x310, 0x7f, 0x7, 0x0, 0x18, 0x2}, 0xf9, &(0x7f0000000940)={0x5, 0xf, 0xf9, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0xec, 0xf000, 0x4, [0x3f00, 0x3f, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x77, 0x5}, @generic={0xb4, 0x10, 0xa, "d7647ca09d732fb139a5553969a5e8b9eb816cf9e3e56fbeeac847f760c503249ee07940b36622c76776c319cdc34f78c2f672f4411671fd7322e7b46407be8ebd954af5bd9beccbd798ab85bad05f415ece21b395e4210f3d4ff917e9b63ad0da78879a96a0aa8f835f34f67625ccead7bb493ea11924cd5e75afb11b1bee92b8932fd9a8f392e5cdb99ee2d3c33b911ae6f504ba47b3006ce945aab0b2a5f51ab6e79f2e7bf2d5d1610259fa941264c5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x9, 0xa6, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "edb964f7cfcf821ff015417f987b0b8e"}]}, 0x7, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x427}}, {0x28, &(0x7f0000000a80)=@string={0x28, 0x3, "3f6499b44c301ac5e8ca7a7ee3714116f05ef97c4d688fd00f14486200e48fb86e69239a5878"}}, {0x57, &(0x7f0000000ac0)=@string={0x57, 0x3, "d3419fd50580643e306d27c06dd3fc352e0f4d69399526f5470be5f10a28e26c828b59f505e2242de120ea46668ab94071503f6c62929adc8be88414d7a2039e5a2349c0f885b30360887fe117156a4cfb261c1ac5"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x827}}, {0xe2, &(0x7f0000000bc0)=@string={0xe2, 0x3, "52e8f66c5f0dc9af32366af616c1cf603a74f198f38a8469fd4c067524118cc40cec69cde4ff3f45a917eff3608b33c175c20dbbcb7b39f87912181f9d912f3d6333a6ec9985721b3296da686f81465678d4d9815789ad49c7d76221973bf0b6afa29874a10a24e518d2f2847864b2c909d1a5577e8d4684da84d2b161955cd0e0207e91d5024aaa9d70c74372dca02692c6ce790ca18b9dd37121c7bd19bd2c331dd202748d8a9a2e3dba0a6457ce4a20771d4e6e0b8f15ca9655a37c2b6fb8938cb560ae7bff378e1309568ff0d7fda4dd58e91125455c70e50cf728a4e903"}}, {0xc9, &(0x7f0000000cc0)=@string={0xc9, 0x3, "296a110ba986130fca2cf26899721e7347280f75304f1fc5fc94065c59c54c513fdc5246b68b70ac619137f6695af3df81f57d1339f4f8b4ab0cc51dd561bc6f8b360a23ceab47d3f3334059f00d780b33f8572f5f52c0cdd812ce57166d9c3f2aaf306f9fde03f659db6dde7d57734a0f3524364d856c2003b11ffe6c67bf4e1027901c8b12f33c7e30f571f75698e18a4fcf96ca77e89f2e4b52f885c37b28e0909f7f6e9736778dac7a4dbace69de2cbd05886d3b14101158271bb8be7dcb5eea437ace0d0a"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000540)={0x24, &(0x7f0000000300)={0x0, 0x6, 0x92, {0x92, 0x2, "4916c2a5e21eaf1b93b70e49232f119d29f822b0df805f18f9cb729280d66114bf91a271c6ef4a0d1fff998cc57e75d6bb96032e5f0d0a028ea455bcac26b1db45028f38fcc6f879c8662e01d8e36df5af2e6b090ca160fa953c4b2d865a36b83b005c347b35e73aa4061165154a2246f68a762b7371bcb172dd91a5ee2a1f04bd6e3dd7dea49b4eb676cd5a99e08f1d"}}, &(0x7f0000000400)={0x0, 0x3, 0x80, @string={0x80, 0x3, "9d366d2e657c2380d7c265a1894fd4cd154be58b4c20f7125e50fd79d89052264d865bc1ffccdd997ce40a4ee602806809e52034980e3ca0401e34f57c336cb77c5f0fa9aa50835ae4ed02c20085449571b159fbb1a1d2802a43e2c5489ec18e3407ddbd47c6ced3524994e1f470edd2f00e13d7237222a776ef851e15b7"}}, &(0x7f00000004c0)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0xa, "b6a1148b"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xc, "6ccc747e"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xf5, 0x1, {0x22, 0x11}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x40, 0x1, 0x5b, "52037d7e3470a6ea2500d8cdff07666e6175f0bc42cbcd5a4786d47947c3118e5c8326f69b67ec90d3d4dac68cebdd6c5ac0a8d58a5bf13e5cca25a1612fc262e9ffabdb96f1fd48ecd3422cfa73edef4885e9e91c2492bbc62c6b"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xd5}, &(0x7f0000000680)={0x20, 0x1, 0x69, "ebe5e3a62393c1e448b80a84fed2e48ab3114a1e3d8c65b5d508f167e7c2b6027e5a3f788ee39ffba12349e3ec0d0c395f4dd0199996ed5f2c531ff3466a741e9a53ce112efe305584fb19d91e573a64b20509f7fe563f87470ec7a720e7a7482a84393fe36e1adef0"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x58}}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000e40)={0xbc, 0x0, 0xc}) (async) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) 7.536105523s ago: executing program 2 (id=832): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00"], 0x1) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000080)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r3, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000) r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) socket$rds(0x15, 0x5, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120141016cf426203d100101ea77400203010902120001000090010904"], 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ff6000/0x3000)=nil, 0x3000}}) 5.951730458s ago: executing program 2 (id=833): r0 = userfaultfd(0x1) r1 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000017c0)={0x84, &(0x7f0000001340)={0x20, 0xa, 0x4, "4ea7b45b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000005a00)={0x84, &(0x7f0000005600)={0x20, 0x17, 0x6, "02e39b400d99"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f00004be000/0x2000)=nil, 0x2000}, 0x1}) 5.675038578s ago: executing program 3 (id=834): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$uac1(0x3, 0xee, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xb7, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x6, 0xb0, 0x8b, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x15, 0xd}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x5, "845b711eb0b2"}, @extension_unit={0xd, 0x24, 0x8, 0x5, 0x7, 0x3, "2ba32bde2f65"}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x1, 0x6, [0x9, 0x2, 0x4, 0x8, 0x8, 0x2], 0x7}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0xdc, "5df393b9ea80"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x2, 0x10, "7cb9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x1, 0x4}, @as_header={0x7, 0x24, 0x1, 0x0, 0x1, 0x3}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7f, 0x10, 0x2, "838370f9"}, @as_header={0x7, 0x24, 0x1, 0xfc, 0x2, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0xe, 0xd9, "b3380cf9e0fa"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xb, 0x1, 0x0, {0x7, 0x25, 0x1, 0x1, 0xf3, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0x9, 0x1, "afe9bbd1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x40, 0x5, 0x10, {0x7, 0x25, 0x1, 0x81, 0xfb, 0x4}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0xfb, 0x5, 0x3, 0x10, 0xb}, 0x36, &(0x7f00000001c0)={0x5, 0xf, 0x36, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xa, 0xcb, 0xe}, @ssp_cap={0x20, 0x10, 0xa, 0xc, 0x5, 0x1, 0x0, 0x7, [0xffc000, 0xc0, 0x3f00, 0x0, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x9}]}, 0x6, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x446}}, {0xfc, &(0x7f0000000440)=@string={0xfc, 0x3, "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"}}, {0x74, &(0x7f0000000540)=@string={0x74, 0x3, "82becc849e8442fdcd73e9de366b29d312a1632faebe7779669e10629a226afba8963f88f6891b0dd160625d51bebfd5225a6231a46d3a4f2f6ae04abe56ad440da93f6df67d1280bfe78cec54a6e58860af3d30e1b516e6588a6920fb0d99d5682d1f773b3502e48e7e91357ae368b3e909"}}, {0x69, &(0x7f00000005c0)=@string={0x69, 0x3, "b57cced4dcb4bc10c6d2b081f96c942aa6a3e45882f9efcbee6a413ff7c24f2610a0934821043d69433d71f2d82315fcaa8b2c07d2e3f168d40ec7b70357bff2dcd6c1ce2a6af1680637d8087b140bf6a03618f15437590ddf0517413cf0d152b16bf701864f26"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x420}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x6, 0x119, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x7d, 0x68, 0xa5, 0x8, 0x830, 0x20, 0x3930, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x2, 0xd4, 0x3, 0x80, 0x65, [{{0x9, 0x4, 0x85, 0x67, 0x3, 0x86, 0xed, 0x63, 0xe, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x25f2, 0xffff, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x8, 0xff}]}], [{{0x9, 0x5, 0x1, 0x4, 0x40, 0xff, 0xf, 0x1, [@generic={0x5d, 0xe, "a4e0549f88d4f0fef9a3b66e2ef84d1d8b1b8f9eaf4a5b3f7e7afaa8e25a3995420a72cd3da87213c2315e84d522b518ae0e79ba0db2c0f840f8c89693ba2a5b18f08da1df46bceff5a70cda0a0d82344457d4203eaf9fb24bcace"}, @generic={0x2d, 0x8, "4b241e0a594fd610f10e86a1ee273271ae287f977b90042800ef709510d8ebeb6264013d08c42e82002fd0"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x5, 0x80, 0x9}}, {{0x9, 0x5, 0x6, 0x1c, 0x10, 0x4, 0x1, 0xe6}}]}}, {{0x9, 0x4, 0xb, 0xff, 0x1, 0xea, 0x27, 0x66, 0x6, [], [{{0x9, 0x5, 0xc, 0x14, 0x20, 0x6, 0xba, 0x6, [@generic={0x20, 0x22, "16d9803bb2929c123899957db435a968424d516e7f090840fb37b0311919"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="202315"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x482841, 0x4, 0x1e}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0x0, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x0, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x7ffc, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x5, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x3, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x404f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xfff, 0xa2, 0xb, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0xfffffffd, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x1, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x60a5, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r2, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d80)={0x0, 0xc, 0x4a, "4ee2c3cfe95e8cca34f6ba73bccd0e230c369b430057bae746d2c5bbbb0bf660391de16050740c8a545e8c775c65125e4b70ef4a73284d326f1471b31143be6b1bf2aed5348d924fb2ed"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000ec0)={0x20, 0x1, 0x7e, "5439211ac2af051e0afd68f693a92f6c0762816b542109da5e659211d067b8d920d8c60fcc82df38a24d3b0aad488161d596ed3e88884300b01dc239f4f30040a1daf66bf474f4dcbb6f0b530e091e1a9302085cb8f575c6b42f4baa698c1df6c79b350d4d3a977c9554a8e5ec764c4f261d13c043ad4fcb824931309479"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0x5}}) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000740)=0x5) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 4.013544458s ago: executing program 2 (id=839): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) 3.96418609s ago: executing program 1 (id=840): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000300000000000000aaff020000000000000000000000000001"], 0xffe) 3.728756166s ago: executing program 2 (id=841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8e}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0xfffffff5) 3.467781367s ago: executing program 2 (id=842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x24, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) 3.429131811s ago: executing program 2 (id=843): r0 = openat(0xffffffffffffff9c, 0x0, 0x70000, 0x181) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_clone3(&(0x7f0000000200)={0x200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x400003b}, &(0x7f0000000100)=""/143, 0x8f, &(0x7f00000005c0)=""/4096, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6, {r0}}, 0x58) fcntl$lock(r0, 0x24, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x2, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e7365740000280002800900010073797a3001000000080004400000000a080009400000000308000340000000000900010073797a30000000000900020073797a32000000001400000011000100000000"], 0x90}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000020aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516", 0x5d}, {&(0x7f0000001d00)="0092e9a7e64c32c40a81fa0f64bd9906f29b6a0aa0e850e7eb26dd111c83b33cf6f3f5bfdf52e23faac8580b58c35613a51fec2e1500747c8a72eb20d3d6b9e4e75d266a5440ad6fa037d9055e6a4a6760575b9459419cfc252cb04e3a624aaaa02bf155303808bcb8ec989fd7db312bb9807d1efe0dab699418e3", 0x7b}], 0x2, 0x0, 0x0, 0x7400}, 0x40000) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="209e10050000a0016ec90000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.421937397s ago: executing program 1 (id=844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xa7ba) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000098000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 3.192290647s ago: executing program 1 (id=845): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x206040, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x800000, 0x10}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xba98000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x1, 0x5000003a, r3, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000002c0)='./file0\x00', 0x2) read$FUSE(r4, &(0x7f0000000f40)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x0, 0x3}) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) lsetxattr$trusted_overlay_upper(&(0x7f0000000300)='./file1\x00', &(0x7f0000000380), 0x0, 0x0, 0x1) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r7, &(0x7f00000010c0)={&(0x7f0000000f00)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f40)='i', 0x1}], 0x1}, 0x8010) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x8, 0x10000}}, './file0\x00'}) r9 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) 3.178310241s ago: executing program 3 (id=846): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'multiq3\x00', [0x4f27, 0xfffffc03, 0xffffffff, 0xa4c, 0x8, 0x2, 0x8000fff, 0xfffffffa, 0x5, 0x3fd, 0xffffffff, 0x1, 0x1, 0xf7ffbffd, 0x11, 0x4, 0xffffff6e, 0x1a44a, 0x2, 0x1fb, 0xc, 0xfffffffc, 0x1, 0x20001e56, 0xfffffffc, 0xb2c, 0x3c, 0x9, 0x4000004, 0x8000000, 0x5]}) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f0000143bc0)=[{0x8000000, 0x1da2, &(0x7f0000000240)=[0xfffffffb, 0x9b7, 0x1, 0x2, 0x101, 0xffffffff, 0xfffffff7, 0x6, 0x4, 0x8, 0x0, 0x7f93, 0x5, 0x101, 0xbd, 0xe, 0x2, 0x1, 0x7fffffff, 0x7d53, 0x3ff, 0x0, 0xfffffffe, 0x1, 0xa, 0x2, 0xc62, 0x4, 0xffffffff, 0x8, 0x3, 0x2, 0x3, 0xf17, 0x5, 0xda5e, 0x80000000, 0xb, 0x9, 0xd, 0x0, 0xe62d, 0xa, 0x1000, 0x8, 0xbd, 0x9, 0x3, 0x4, 0x4, 0x2, 0x0, 0x10001, 0x9, 0x7, 0x5, 0x3e, 0x1a, 0xb3d9, 0x80, 0x0, 0x3, 0x5, 0xffffff7f, 0x231, 0x69, 0x9, 0x5, 0x1, 0x10, 0x8, 0x9, 0x6, 0x2, 0x8, 0x9, 0x60000000, 0x7, 0x88, 0xfe, 0x8, 0xd7, 0x40000000, 0xe, 0xffffff3c, 0x5, 0x680f9a8f, 0x820, 0x7, 0x2, 0x9, 0xaf24, 0x6, 0x3, 0x7, 0x3, 0xffff, 0x8, 0x5eec, 0x6, 0x5, 0x7, 0xfff, 0x0, 0x5, 0x7d, 0x2, 0x0, 0x1, 0x4, 0x2, 0x5, 0x40, 0x4, 0x0, 0x3245, 0x1, 0x172, 0xf, 0x4, 0x2, 0x10, 0x4, 0x40, 0x400, 0xb7, 0x6, 0x401, 0xfffffffc, 0x101, 0xfffffff7, 0x9, 0x5beb, 0x6, 0xa22, 0x8, 0x9, 0x5, 0xd15, 0xe, 0x0, 0x3, 0x0, 0x7, 0x0, 0x4, 0x5, 0x5, 0x7f, 0x400, 0x8, 0x5, 0x10001, 0x7ff, 0x73846816, 0xffffff7e, 0x7fffffff, 0x8, 0x9, 0x5, 0x1ff, 0x400, 0x9, 0x4, 0xffffff7f, 0xffffffff, 0xa, 0xb, 0x5b, 0x1, 0xfa73, 0xa, 0x8001, 0x1, 0x1, 0x1400, 0x8, 0x1, 0x6, 0x8, 0x18, 0x1000, 0x1, 0x97a4, 0x6, 0xe, 0xd8, 0x8, 0xffff877c, 0x85, 0x5, 0x8, 0x1e8, 0x9e7a, 0x7fffffff, 0x4, 0x800, 0x0, 0x579c, 0x63, 0x7, 0xfffffffe, 0xffff, 0xe, 0x5, 0x2, 0x4, 0x6b52, 0xfffffff8, 0x10000, 0x6, 0x5, 0xfffffffa, 0x3, 0x7, 0xa8, 0x401, 0x80000000, 0xe, 0x7, 0x3, 0x37c, 0x9, 0x80, 0x10000, 0x80, 0x8, 0x5, 0x3, 0x101, 0x1, 0x40, 0x0, 0x1, 0xb40, 0x7ff, 0xcac, 0x1, 0x7, 0x8, 0x200, 0x5, 0x6, 0x4, 0x7, 0x92, 0x7, 0x5, 0x6, 0xee, 0x0, 0x5, 0xb, 0x9, 0xfffffff7, 0xacc, 0x3, 0x4, 0x2, 0x5, 0x8, 0x0, 0x80, 0x8, 0x2, 0x4, 0xdeb, 0xf5, 0x3, 0x4cd, 0x7, 0x3, 0x9, 0x9, 0x7f, 0xfffffffd, 0x7, 0x40, 0x1, 0x1, 0xff, 0x605, 0x57, 0x1, 0x7, 0x0, 0x7, 0x3, 0x4, 0x800, 0x5, 0x4, 0x0, 0x0, 0x9, 0x8000, 0xf1a, 0x6, 0xfff, 0x6, 0xff, 0x5, 0x80000000, 0x4, 0x3, 0x3, 0x6, 0x6, 0x2, 0x6e, 0x200, 0x3ff, 0x46, 0x0, 0x8, 0x7, 0x51a4, 0x0, 0x928, 0xb, 0x8f45, 0x80000000, 0x8, 0xe, 0x400, 0x0, 0xe, 0x4, 0x8, 0x4, 0x5, 0x80000, 0xe93, 0x5, 0x5, 0x5, 0x4, 0x7, 0xab3e, 0x7f, 0x4000000, 0x40, 0x1, 0xfffffffb, 0x3ec, 0x9fd3, 0x0, 0x6, 0xfff, 0x4, 0x1, 0x0, 0x3, 0x1, 0x5, 0x8d, 0x6, 0xdb, 0x6, 0x1, 0x3, 0x8, 0x6, 0x1ff, 0x1ff, 0x1, 0x2, 0x5, 0x5, 0x4, 0x40, 0x2, 0x6, 0xd1, 0x2dd9caf3, 0x3, 0x2, 0x3, 0x8, 0x1, 0x4, 0x9, 0x3, 0x8, 0x10001, 0x7f733a1d, 0x1, 0x7, 0xf, 0x1, 0x7f, 0x7, 0x1, 0x2, 0x8, 0x5, 0x9, 0xb, 0xef, 0x17e0000, 0x5, 0x2, 0x5, 0x1, 0x80, 0x5485, 0x80, 0x514, 0xff, 0x69, 0x3, 0x7fff, 0xaa, 0x1ff, 0x3, 0x6, 0x1, 0x4, 0x4, 0x9, 0x5, 0xc, 0x6, 0x0, 0x15294abd, 0x4, 0x7, 0x8, 0x7fff, 0x6, 0x0, 0x10000000, 0xfff, 0x2, 0xef, 0x72b, 0x3, 0x9, 0x3, 0x1ff, 0x50ce, 0xc, 0x2, 0x4d, 0x7, 0x0, 0x5, 0x5, 0xe7b1, 0x0, 0x9, 0x101, 0xc, 0x8, 0x9, 0xf, 0xa971, 0x1, 0x0, 0x6, 0x6, 0x7, 0x8, 0x2, 0x1, 0x9, 0xc97a, 0x4000, 0x6, 0x800, 0x8, 0xe, 0x7, 0x1, 0xb, 0x3, 0x6, 0xdb, 0x8, 0x1, 0xad86ed14, 0x4, 0x2, 0x7c, 0x5, 0x0, 0x1, 0x1, 0x8, 0x82683055, 0xf, 0xf, 0x6, 0x1, 0x200, 0x4, 0x7, 0x7f, 0x0, 0x8001, 0x2, 0x3, 0x2, 0xfffffffd, 0x3c, 0x3, 0xd5, 0x347a, 0x7, 0x2, 0x3, 0x8, 0x8, 0x7, 0xac0, 0x3, 0x6, 0x662, 0x5, 0x6b2bf681, 0x401, 0x4, 0x1, 0x5, 0xaa5e, 0x3, 0x8, 0x1622aea3, 0x6, 0x81, 0x8, 0x8, 0x7, 0xffffffff, 0x8, 0x8, 0x2, 0x456a, 0xd53, 0x9, 0x0, 0x8, 0x2, 0x80, 0x6, 0x2ba1, 0xffffffff, 0x1, 0xffffffff, 0x1a3e, 0x0, 0xe99, 0xfffffff7, 0x9, 0x800, 0x7, 0x1, 0x9, 0x6, 0x0, 0xffffff01, 0x1000, 0xfffffffb, 0x800, 0x2, 0x5, 0x6, 0x7fffffff, 0x7, 0x6b, 0x6, 0xc32, 0x7, 0x2, 0x4, 0x7, 0x8, 0x7a0c, 0x7f, 0x80000000, 0x800, 0x0, 0x9, 0x3, 0xf, 0x1, 0x5, 0x3, 0x10000, 0x10001, 0x4, 0x47, 0x5, 0x4, 0x4, 0x5, 0x1, 0x0, 0x9, 0x8, 0x0, 0x74, 0x2e78, 0x400, 0xe7c, 0x4, 0x9570, 0x0, 0x5, 0x1, 0x400, 0x4, 0x4, 0x1, 0x7fff, 0xfffffffd, 0x9, 0x80, 0x4, 0x4, 0x3, 0x3, 0xffff, 0x5, 0x8, 0xe, 0x5, 0x2, 0x4, 0x29, 0x3, 0xae9, 0x800, 0x2, 0x7, 0x2, 0x9, 0x8, 0xd10e, 0x5, 0x8, 0x2, 0xe6, 0x80, 0x5, 0xe, 0x5, 0x0, 0x3, 0x0, 0x400, 0x0, 0xc8, 0x67, 0xb, 0x7, 0x9, 0x3, 0x5, 0x101, 0x7, 0x100, 0x1e, 0xb9ab, 0x80, 0x7fffffff, 0x158, 0x3, 0xffffff35, 0x8, 0x72f6, 0x9, 0x2, 0x0, 0x8, 0xf297, 0x2, 0x5, 0x800, 0x5775, 0xffffffff, 0x9c7, 0xfffff801, 0x6, 0x16be, 0x2, 0x10000, 0x7, 0x3, 0x73, 0x6, 0x1000, 0x9, 0xcd68, 0x5, 0xfffffff9, 0xf1, 0xd8, 0x5, 0x9, 0xbd84, 0x6, 0x9b1, 0x4, 0x331, 0x0, 0x7, 0x859, 0x7, 0x1, 0x7, 0x401, 0x2, 0x0, 0xc, 0x1, 0x2, 0x6, 0x6, 0xc6, 0x80000001, 0x6, 0x2, 0xfffffffd, 0x5, 0x65a, 0x10, 0x0, 0x9, 0x5f6c, 0x5, 0x77, 0xd, 0x3, 0x83, 0x3, 0x8, 0x2, 0xa, 0xfffffff8, 0x4, 0x4, 0x9e4, 0x580, 0x9, 0x6, 0x5, 0x10001, 0xff, 0x4d30000, 0x600c, 0x6, 0x2, 0x8, 0x3000, 0x9, 0x4, 0x401, 0x2, 0x80, 0x6, 0x7, 0x1, 0x10000, 0x5, 0x6, 0x81, 0x1ff, 0x4, 0x10, 0x8, 0x3ff80000, 0x7, 0x7, 0x2, 0xce5b, 0x2, 0x5, 0x8001, 0x2, 0xf, 0x7, 0x7f, 0x0, 0x6, 0x9, 0xd1f, 0x0, 0x1, 0x91c9, 0x6, 0xffffff24, 0x9, 0x4, 0xc1, 0xc13, 0x1b, 0x5, 0x9, 0x1000, 0x5, 0x4, 0x10, 0xd, 0x244, 0xfffffffb, 0x3, 0x1738, 0x1, 0x8, 0x6, 0x9, 0xc5, 0x7, 0x0, 0x5, 0x7, 0x7f76e0ad, 0x9, 0x7fff, 0x2, 0x6, 0x2, 0x92, 0x8001, 0x80000001, 0x8001, 0x5, 0x8, 0x3ff, 0x9, 0x7, 0x7, 0x7, 0xbf4, 0x135, 0x4, 0x5, 0x7, 0xdb35, 0x4, 0x10001, 0x2, 0x80, 0x40, 0x7, 0x0, 0x8, 0x15c, 0x9, 0x2, 0x0, 0xffffffff, 0x2, 0xa637, 0x2, 0x7, 0x8, 0x6, 0xe, 0x5, 0x200, 0x7, 0x401, 0x7, 0x7, 0x3, 0x6, 0x2, 0x2, 0x80, 0x80000001, 0x80000000, 0x5, 0x9, 0x80000000, 0x8262, 0xbc4, 0x2, 0x0, 0x101, 0x80, 0x8, 0xfff, 0x8, 0x3, 0x7, 0x9, 0x5, 0x8, 0x8, 0x7fff, 0x81, 0x7, 0x3, 0x0, 0xfffffffd, 0x7fffffff, 0x0, 0x5, 0x7fffffff, 0x2, 0x2, 0x4, 0x80, 0x3, 0x0, 0x3, 0x8000, 0x2, 0x9, 0xa1b9, 0x1, 0x6, 0x5, 0x3ff, 0x7ff, 0x81, 0x2, 0x6, 0xfff, 0x6, 0x3, 0x4, 0x5, 0x9, 0x8, 0xb0000, 0x3, 0x3, 0xa, 0x0, 0x6, 0x27, 0xe, 0x8, 0x2, 0x80000000, 0x100, 0x0, 0x1d4, 0x9, 0x10001, 0x2, 0x79, 0x200, 0x6, 0x9, 0x1000, 0x6, 0xc, 0x0, 0x2, 0x5, 0x101, 0x5, 0x2, 0x7, 0x0, 0x4, 0x86d, 0x8, 0x2, 0x81, 0x0, 0x4, 0x10, 0xe, 0x1, 0x2, 0x800, 0x10000, 0x7, 0xffff75c1, 0x3, 0x42, 0x2, 0x0, 0x1000, 0x8, 0x7, 0x1, 0x2de7c31d, 0x9, 0x40, 0x5, 0xc9fd, 0x10, 0x5, 0x5, 0x8, 0xbb4, 0x0, 0x3, 0x8001, 0x2, 0x2, 0x0, 0xfff, 0x9b, 0x2, 0x7fff, 0x7f, 0x40, 0x4, 0x3ddf, 0x80, 0x800, 0xd, 0x0, 0x7, 0x0, 0x71, 0x6, 0x5, 0x8, 0x40, 0x5, 0x3, 0x4, 0x400, 0xb3, 0x9061, 0xd, 0x5, 0x1, 0x8c, 0xfffffffe, 0xfd, 0x3, 0x5, 0xa, 0xc25, 0x8a82, 0xf, 0x4, 0xfff, 0x5, 0x6, 0x10, 0xb, 0x6, 0x10, 0xb8ea, 0x5, 0xbb67, 0x4, 0xf, 0x6, 0xfffffff6, 0xb, 0x6, 0x4, 0x6, 0x63f, 0x1, 0x6, 0x40, 0x10000, 0x7, 0x8, 0x1, 0xffffff81, 0x6, 0xffffffff, 0x4, 0x3, 0x9, 0x39, 0xa, 0x1, 0x9af, 0x4, 0x6, 0xc, 0x6f30268e, 0x4ac, 0x9, 0xfffffffe, 0x9d7, 0x1, 0xfffffff7, 0x43f, 0x8, 0x84, 0x0, 0x7fff, 0x9, 0x133, 0xd, 0x8000, 0xca83, 0x1, 0x0, 0x0, 0x5, 0xfff, 0x0, 0x5, 0x600000, 0x1, 0x1, 0x8000, 0xa, 0x8, 0x4, 0x0, 0xe8b, 0x7, 0x8, 0x66433881, 0x3ff, 0x27f7, 0x2, 0x40, 0x7, 0xb11, 0x2, 0x401, 0x8, 0x0, 0x3, 0xf08, 0xfa, 0x7, 0xff, 0x7, 0xcce9, 0x400, 0x0, 0x800, 0xfff, 0x40, 0x3, 0x3, 0x57a65c41, 0x4, 0x49d, 0x8, 0x1, 0x5, 0xd6cf, 0x0, 0x2, 0x6, 0x6, 0x3, 0x8, 0x6, 0x800, 0x3, 0x6475, 0x0, 0x8, 0xff, 0x80000001, 0x0, 0x5492, 0x5, 0x4, 0x4, 0x5, 0x10001, 0x7f, 0xc0000000, 0x8, 0x91, 0xc8, 0x1, 0x7, 0x8, 0x5, 0x424, 0xb, 0xf20, 0x8, 0x3, 0x0, 0x7, 0x6d2, 0x2, 0x7, 0x6b35, 0x4d, 0x4, 0x8, 0x9, 0x5, 0x7, 0x1, 0x7, 0x1, 0xfff, 0x400, 0x7, 0x8, 0x26, 0x8, 0x2, 0x101, 0x6, 0x8, 0x5, 0x558, 0x6, 0x7, 0x2, 0xba, 0x4, 0x1ff, 0x4, 0x3, 0x2, 0x8000, 0x1, 0x401, 0x51, 0xffff, 0x6, 0x0, 0x9, 0x3, 0x3, 0x8, 0x5, 0x6, 0x800, 0x3, 0x7, 0x0, 0x400, 0x0, 0x5, 0x6, 0x2, 0x2, 0xe, 0x5, 0x1, 0x66e, 0xfffffffd, 0x7f, 0x1, 0xffff4253, 0x2, 0xfffffffe, 0x6, 0xa00000, 0x1, 0x1000, 0x3d2d04fd, 0xd82, 0x9, 0x80, 0x1, 0xff, 0x46, 0x6, 0xffff, 0x3, 0x80, 0x7f, 0x2, 0x200, 0x8001, 0x800, 0x6, 0xfa5, 0x1, 0x7, 0x10000, 0x9, 0x4, 0x7, 0x0, 0x5, 0x0, 0xffffe065, 0xa4, 0x29e8, 0x5, 0x7, 0x2, 0x10000, 0x80000000, 0x4, 0x4, 0x7, 0x4, 0x4, 0xf, 0x8, 0x0, 0x6, 0xffff, 0xb, 0x3ff, 0x4, 0x1ff, 0x2, 0x5, 0xfffffff9, 0x5, 0x2, 0x2, 0x10, 0x7fff, 0x5, 0x9, 0x3, 0x6, 0x4, 0x7, 0x9, 0x8, 0x27, 0x5, 0x0, 0x6, 0x1000000, 0x1, 0x9, 0xb2a, 0x6, 0x8, 0x3, 0x6, 0x80000000, 0x8000, 0x3db, 0x4, 0x40, 0x3ff, 0x4, 0xa5a8, 0x800, 0x8, 0x1, 0x5, 0x7ff, 0x4, 0x40, 0x6, 0x5, 0x4e55, 0x1, 0x3, 0x4b4e, 0x3, 0x7, 0x101, 0x101, 0x1, 0x100, 0x2, 0x2, 0x6941202, 0x4, 0x8, 0x0, 0x18, 0x0, 0xfffffffb, 0x7, 0x4, 0x8, 0x6, 0x1, 0x0, 0x4, 0x4, 0x7, 0x176, 0x2, 0x7fff, 0x183, 0x3, 0x4, 0xc, 0xfffffcb8, 0xfffffffa, 0x40, 0xffffff10, 0xf, 0x7, 0x1000, 0x4, 0x0, 0x80, 0x3, 0x3, 0x0, 0x1, 0x79, 0x1, 0x3, 0x3d9, 0x0, 0x3d, 0x100, 0xff, 0x3, 0x7, 0xb, 0x1000, 0x7, 0x101, 0x8, 0xa6, 0x8, 0x8, 0x5, 0xfff, 0x1, 0x7ff, 0x10000000, 0xe12, 0x0, 0x18, 0x6, 0x0, 0xffff, 0x4d0, 0x7f, 0x6, 0x3, 0x9, 0x9b8e, 0x9, 0x2, 0x1, 0xffff, 0x2c37deae, 0x8000, 0xf, 0x401, 0x1, 0x0, 0xf, 0xfffffff8, 0xb25a, 0x1, 0x1, 0x62, 0xdbb, 0x8, 0x81, 0x8, 0x5, 0x10000, 0x0, 0x1, 0x8001, 0x8, 0x1, 0x8000, 0xfffff709, 0xff, 0x0, 0xec06, 0x9, 0xfffffffe, 0x9, 0xfffffffa, 0x10001, 0x7, 0x1e13, 0x0, 0xbe, 0x8001, 0x0, 0x1, 0x3, 0xde, 0x6, 0x6, 0x23bd3d84, 0x0, 0x7, 0x0, 0x6, 0x101, 0x8, 0x8, 0x2, 0xb, 0x6, 0xa, 0x3, 0x9, 0x0, 0xfffff001, 0x0, 0xffffff6d, 0xfffffff6, 0xe84b, 0x9, 0x6, 0x4, 0x5, 0x6, 0x3a, 0x8, 0x71, 0x7, 0xba, 0xd, 0x1, 0x9, 0x2, 0x8, 0x2, 0x800, 0x7, 0x0, 0x7, 0x3, 0x5, 0xdb, 0x6, 0x4, 0xfffffffd, 0x8, 0x0, 0x6, 0x0, 0x8000, 0x10, 0x3, 0x8, 0x1c9, 0x224, 0x3, 0x8, 0x0, 0x39c, 0xfff, 0x5, 0x3, 0x1, 0x49ab, 0x800, 0x4, 0x10, 0xb9, 0x5, 0x1, 0x10001, 0x7, 0x2, 0x7, 0x8001, 0x2, 0x9, 0x7, 0x8, 0x1, 0x7, 0x4, 0xc, 0x8, 0xa, 0xfffffffb, 0x7, 0xb858, 0x4, 0xffff7fff, 0x6, 0xffff8000, 0x81, 0xfffffff8, 0x9, 0x2, 0x8, 0x5, 0x7fffffff, 0x4, 0x9, 0x10000, 0x6, 0x4, 0xffffffab, 0x5, 0x0, 0xa, 0x98, 0xa, 0x2, 0x8, 0x80, 0xfffffc01, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x4, 0x4, 0x101, 0x5, 0xff, 0x2, 0xffff22d7, 0x8, 0x8, 0x1, 0x9, 0x7, 0x8, 0x61, 0x7, 0x0, 0xc5b, 0x0, 0x1, 0x3, 0x6e, 0x0, 0xff, 0x6e, 0x5, 0x4, 0x6, 0xa7, 0x6, 0x8, 0x400, 0x4, 0x0, 0x4, 0x3ff, 0x5, 0x9, 0x2, 0x1137, 0x2, 0x40, 0x7, 0xffff, 0x62fb, 0x6, 0x8, 0x3, 0x800, 0x3, 0x401, 0x6, 0x2, 0x7, 0x43f2167, 0x8, 0x3aa5, 0x48f1, 0x1, 0x4, 0xf59, 0xb, 0xfb, 0x100, 0x5, 0x3, 0x800, 0x101, 0xfff, 0x3, 0xa47, 0x4, 0xbe4, 0x2, 0xfffffffc, 0x10, 0xd5, 0x40, 0x9c5c, 0x8, 0x3, 0x1f1d, 0x8000, 0x0, 0x0, 0xfffffff8, 0x6, 0x3, 0x1000, 0x9, 0x8001, 0x101, 0x1, 0x9, 0x89, 0x9, 0x0, 0x40, 0xa7, 0x15, 0x7, 0x3, 0x400, 0x1, 0xccaa, 0x9, 0x2, 0x10001, 0x81, 0x9, 0x0, 0x5, 0x2, 0x8, 0x7, 0x10, 0x4, 0x1, 0x667, 0x1, 0x4, 0x35d3b6e7, 0xffff, 0x100, 0x2, 0x6, 0x200, 0x2, 0xff, 0x2, 0x7fb5, 0x6, 0x6, 0x10000, 0x5, 0x1, 0x0, 0xc, 0x2, 0x2, 0xa8, 0x99, 0x5, 0x0, 0x9, 0x6, 0xb38, 0x10, 0x4, 0xca, 0x2, 0x2c, 0x6, 0x5, 0x8, 0x6, 0xfffff139, 0x1000, 0x80, 0x8000, 0x1, 0x860, 0x7, 0x0, 0x6, 0x176b, 0x1ff, 0xa, 0x5, 0x6, 0x80, 0x9, 0x8, 0x8, 0x7fffffff, 0x7, 0x4, 0x6, 0xfffffff8, 0x40, 0x2, 0x6, 0x5a, 0x8, 0x1, 0xffffffff, 0x10, 0x7, 0x10000, 0x5, 0xffff, 0x80000000, 0x7fffffff, 0xe, 0x5, 0x7fffffff, 0x74, 0x0, 0x91d, 0x4, 0xaeb, 0x0, 0x0, 0xd6, 0x0, 0x2, 0x7, 0x50, 0x1, 0x3, 0x5, 0x1ff, 0xfffff000, 0x1, 0xfff, 0xff, 0x7, 0x2, 0x6, 0x22a0, 0x373, 0x8, 0xd6, 0x8, 0x8, 0x726e, 0x4, 0x6, 0x1, 0x3d, 0x7, 0x2ce, 0x2, 0x1, 0xffffb41e, 0x10001, 0x5, 0x100, 0x200, 0x0, 0x7, 0x1000, 0x6458, 0x401, 0x8, 0x3, 0x3, 0x40, 0x2, 0x0, 0x7, 0x6, 0x9, 0x7, 0x6, 0x80000000, 0x1, 0xfffff801, 0x5, 0xfffffffd, 0x8, 0x5, 0x6, 0x5, 0x8, 0x0, 0x0, 0xee73, 0x2, 0xffffffff, 0x3, 0x8, 0x7, 0x537, 0x6, 0x6, 0x9, 0x800, 0x7, 0x100, 0x8, 0x2baf, 0xa, 0x5, 0x2, 0x1ff, 0x80000001, 0x36, 0x7fffffff, 0x4, 0x0, 0x7, 0x7, 0x10000, 0x9, 0x5, 0x1, 0xc22, 0x1ff, 0x9, 0x0, 0xe, 0x2, 0x38, 0x4, 0x6, 0x6, 0x8001, 0x8, 0x7, 0x9, 0x6dea, 0x4, 0x5, 0x3, 0x8, 0xfffffffd, 0x12, 0xffff0000, 0x1, 0x6, 0x6, 0xb, 0x6, 0xffffa10a, 0x80000001, 0x5, 0xe21b, 0x607, 0x6, 0x2, 0x0, 0x0, 0x4, 0x9, 0x5, 0xed, 0x80, 0xf3d, 0x6, 0x2, 0x6, 0x4, 0x8, 0x8000, 0x0, 0x3, 0x4, 0x1000, 0x6, 0x1, 0xffffffff, 0x2, 0x5, 0x81, 0x1, 0x8001, 0xffffff7f, 0x900000, 0xff, 0x1, 0x126, 0x3, 0x2, 0x9, 0xe, 0x0, 0x0, 0x5, 0x7ff, 0x2a2c, 0x5, 0x0, 0x8, 0x8000, 0x3, 0x0, 0x8, 0x3ba1, 0xfffffff7, 0x8, 0x4, 0xde8f, 0x0, 0xf, 0x5, 0xf, 0x2, 0x6, 0x4000, 0x6, 0x5, 0x6, 0xfff, 0xa, 0x6, 0x7, 0x9, 0x4800000, 0x8, 0xaf, 0x4, 0x2, 0x5, 0x6, 0x800, 0xfeb7, 0x9bb, 0x8, 0xffffffff, 0x925, 0x0, 0x3, 0x2, 0x8, 0xfffffff8, 0x3, 0x5, 0x9f64, 0xf, 0xfff, 0x8, 0x10000, 0x4, 0x5, 0xffffffc0, 0x1, 0x5, 0x400, 0xfffffe00, 0xfffffff4, 0x7, 0x80, 0x2, 0xa8, 0x4, 0x6, 0x6, 0xf, 0x3ff, 0xfffffff9, 0x80000000, 0x6, 0x7fffffff, 0x6, 0x0, 0x7, 0x9, 0x101, 0x3, 0x15a1b505, 0xfffffff0, 0x7, 0xff, 0xffffffff, 0x9, 0x80, 0x9, 0xbcee, 0x9, 0x80000000, 0x8, 0x7, 0x8, 0xa6, 0x2, 0x9, 0xfffffffb, 0xb, 0x2, 0x1, 0x3, 0x63e2, 0x34, 0x3ff, 0x4, 0x400, 0x6, 0x3, 0xfa51, 0x8, 0x8000, 0x9, 0x3, 0xf7b, 0x0, 0x8, 0x1, 0x3, 0x7, 0x7, 0x2, 0x5, 0x715530c5, 0x9, 0x3, 0x400, 0x81, 0x2, 0x800, 0x6, 0x80, 0x10, 0xffff, 0x2, 0x5, 0x4, 0x0, 0x16, 0x8, 0x7, 0x9, 0x7f, 0x5, 0x5c9c, 0x6, 0x400, 0x8001, 0x7f, 0x1071, 0x2248, 0x401, 0x9, 0x4, 0x5, 0xffff7403, 0x3, 0x6, 0x80000000, 0x0, 0x1, 0xb, 0x2, 0x6, 0xd08, 0xb, 0x0, 0x3ff, 0x4, 0xd, 0xffff, 0x4, 0x6, 0x51, 0x7, 0x7, 0x3, 0xffffffff, 0x4, 0x40, 0x5, 0x86, 0x9, 0x0, 0x8, 0x1800000, 0x7fff, 0x8001, 0xffff8000, 0x3, 0xd87, 0xffffff5d, 0x6, 0xfffffffa, 0xb, 0x0, 0x4, 0xfffffffb, 0x9, 0x3, 0x4, 0x80, 0x80000001, 0x0, 0xffff120d, 0x3, 0x1, 0x358e, 0x9, 0x200, 0xd, 0x1, 0x1000, 0x0, 0x2, 0xfffffff8, 0x7fffffff, 0x7, 0x5, 0x0, 0x6, 0x8, 0xa0e1, 0xab, 0x2, 0x0, 0x6, 0x8, 0xa, 0x6, 0x247, 0x4, 0x7, 0x2, 0x1, 0x6, 0xe1, 0x8, 0xfffffff8, 0x0, 0xf1, 0x7f, 0x2f14, 0xad1, 0x5, 0x10000, 0x0, 0xfffffffd, 0xc, 0x7, 0x7cc2, 0x8, 0x9, 0x6, 0x4, 0x800, 0x8001, 0x46e, 0x2, 0x6, 0x5, 0xfffffff8, 0x800, 0x3, 0x6, 0x9, 0x5, 0xf, 0x3, 0x62, 0x1, 0x8000, 0x4, 0x3, 0x8, 0x5, 0x8, 0x2, 0x3, 0x1ff, 0x1, 0x9, 0x5, 0x0, 0x3, 0x3ff, 0x5, 0x5, 0xc8c9, 0xa, 0x3ff, 0x2, 0x5, 0x8, 0x0, 0x9, 0x4, 0xa, 0x5, 0x3, 0x8d, 0x6, 0x4, 0x800, 0x6, 0xfffff33a, 0xe6, 0x2, 0x5, 0xb, 0x10001, 0x4, 0x200, 0x100, 0x2, 0x4, 0x2, 0xffffff01, 0xffff, 0x8, 0x5, 0x8, 0x6, 0x72f, 0x9, 0x7, 0x7, 0x5, 0x5, 0xcd0f, 0x1ff, 0x8, 0x200, 0x6, 0x5, 0x9, 0x4, 0x200, 0x3ff, 0x0, 0x3f2, 0x3e, 0x29, 0x2, 0x1, 0xff, 0xe, 0x3, 0x1, 0xbe2b, 0x8, 0x1000, 0x8, 0x3, 0x2, 0xaec4, 0x9, 0x3, 0x6, 0x73ab0311, 0x1, 0x7f, 0xf2, 0x8, 0xd, 0x7ff, 0x630, 0x3, 0x7fffffff, 0x4, 0x2, 0xae, 0x7, 0x9fe, 0x33aa, 0x3, 0x2a1d, 0x2, 0x800, 0x380000, 0x1, 0xa, 0xeda, 0x8, 0x2, 0x100, 0x4, 0x5, 0x1, 0x5, 0x6, 0xfffffff8, 0xc2, 0x2, 0x6, 0x5, 0x7, 0x5, 0x63, 0x8, 0x6, 0xf3, 0x0, 0x81, 0x7, 0x6, 0x401, 0x0, 0x1, 0xd, 0x6, 0x3, 0x0, 0xee1b, 0x23, 0x4, 0x9ba, 0x10000, 0x1, 0x4, 0xfffffffc, 0x7fff, 0x4, 0x8, 0x6c4, 0x8, 0xffffffff, 0x9, 0x9, 0x5, 0xa, 0x2, 0xf42, 0xfffffffb, 0x0, 0x6, 0x370, 0x3, 0x1, 0x9f, 0x9, 0x5, 0xfffff4cc, 0x0, 0xf, 0x4, 0x10001, 0x2, 0xa98, 0xe, 0x8, 0x579, 0x92c, 0x9, 0xf, 0x89c, 0x1000, 0x4, 0x0, 0x5, 0x7ec8, 0x2, 0x10, 0x7, 0x81, 0x3, 0x68ef0da3, 0x3e, 0xdb8, 0xf45, 0x8, 0x0, 0xff, 0xf18, 0x3, 0x7fff, 0x9, 0x1, 0x5, 0xc, 0x2, 0x7, 0xfffffff9, 0x0, 0x9, 0xefd8, 0x329, 0xc7, 0x5, 0x1, 0x5, 0x1, 0x10000, 0x7, 0x80, 0xa, 0x1, 0x2, 0x4, 0x5, 0x401, 0x1000, 0x10001, 0x6, 0x80, 0x9, 0x8001, 0x7, 0x9, 0x7ff, 0x5, 0x5, 0x3, 0x3, 0x5, 0x4, 0x8, 0x1, 0x1, 0x28f4, 0x5, 0x1, 0xe, 0x7, 0x5, 0x19c, 0x1, 0x6, 0x4, 0x7f, 0x7, 0x86, 0x10001, 0x8, 0x6, 0x9, 0x7fffffff, 0x7, 0xff, 0x10000, 0x8, 0xfffffffa, 0x6, 0x4, 0x3, 0x8a84, 0xc, 0x2407, 0x4, 0x20ca, 0x4, 0x8001, 0x10001, 0xd569, 0x3, 0x10001, 0x7, 0x4, 0x2, 0x1000, 0x6, 0x8, 0x490d1619, 0x4, 0x0, 0x3, 0x1ff, 0x5, 0x3, 0x3b9, 0x7ff, 0x5, 0x8, 0xffff2390, 0x4, 0x6, 0x1, 0x6, 0x7, 0x0, 0xffff83f0, 0x8b5b, 0x4, 0x1, 0x0, 0x8, 0x3, 0x7f, 0x400, 0x5774, 0x10, 0xfffffff7, 0x2, 0xffff, 0x0, 0x0, 0x9, 0x2, 0x9, 0x38000, 0x2, 0x62b, 0x6, 0x6e, 0x2, 0xdfb, 0x0, 0x2, 0x80000000, 0x0, 0xfffffff9, 0x1, 0x7, 0x8000, 0x935, 0x0, 0x3ff, 0x81, 0x91400000, 0x10000, 0x40, 0x4, 0x2, 0x5, 0x4, 0x5df, 0x6, 0xb3ae, 0x7fff, 0xae6d, 0x9, 0x345, 0x800, 0x401, 0x2, 0x2264, 0x4, 0xf, 0x0, 0x4, 0x1800000, 0x7, 0x216d, 0x1, 0x2, 0x9, 0x3, 0x10, 0x4, 0x80000000, 0x3, 0x9, 0x7, 0xffff0001, 0xfffffffe, 0x2, 0x0, 0x2, 0x4, 0x2, 0x0, 0xfffff001, 0x7, 0x3, 0x6, 0x2, 0x7, 0x2, 0x8, 0x2, 0x7, 0x87, 0xea72, 0x8, 0x8, 0x9, 0x4, 0x2, 0x1, 0x6, 0x3, 0x7, 0x8, 0x0, 0x7, 0x101, 0x6, 0x5, 0xb, 0x7f, 0x3, 0x5, 0x6, 0x6, 0x7, 0x1, 0x5, 0x8, 0x7ff, 0x8, 0x2, 0x400, 0x8, 0x4, 0x3, 0x7, 0x0, 0x0, 0xe, 0x4, 0xc80611d3, 0x3, 0xffffff00, 0x2, 0x400, 0x0, 0x3, 0xc25, 0x9, 0x5652, 0xd, 0x4, 0x6, 0xffffffff, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x42, 0x3, 0x2, 0x7, 0xc, 0xf109, 0x9, 0x2, 0xea, 0x5, 0x4, 0xed, 0x4, 0x9, 0x6, 0x6, 0x1ff, 0x8, 0x6, 0x9, 0x1, 0x9, 0x6, 0xc0, 0xfffffff7, 0x2, 0x976, 0x9, 0x9, 0x7, 0x9, 0x8, 0x10000, 0x21, 0x3, 0xcc, 0x69b, 0x7fffffff, 0x3, 0x5, 0x1, 0xc, 0xfff, 0xf, 0x2, 0x0, 0x7f, 0x0, 0x3, 0x1, 0x9, 0x8, 0x6, 0x3ff, 0x2, 0x5, 0x2, 0xe6, 0x9, 0xcd41, 0x6, 0x6, 0x4, 0x5, 0x7, 0x7, 0x5, 0x3, 0x75eb, 0x75, 0x0, 0x8a80000, 0x3, 0x1, 0x6, 0x6f, 0x40000, 0x1, 0x9b, 0x0, 0x7, 0x5, 0x1c, 0xc, 0x8, 0x3, 0x3, 0x3fb, 0x3, 0x80000000, 0x4, 0x101, 0x7fffffff, 0x0, 0x10001, 0x0, 0x0, 0x4, 0x1, 0xffffd4be, 0x7, 0x4, 0x3, 0xfffffff8, 0xb, 0x77e, 0x10, 0x25a2, 0xbb9, 0x6, 0x8000, 0xffff, 0x1, 0x6, 0x9, 0x40, 0x101, 0x6f, 0x5, 0x9, 0x10, 0xd4, 0x3, 0x5, 0xfffffffc, 0x80000000, 0xf, 0x80, 0x971, 0x3, 0x57fd, 0x0, 0x1, 0x400, 0x3, 0x6, 0x3, 0x7000000, 0x4, 0x3, 0x7, 0x4, 0x1c5, 0x400, 0x7ff, 0x5, 0x1, 0x3, 0x7, 0xfffffe01, 0x2, 0x2, 0x5, 0xe, 0x8, 0x6, 0x1ff, 0xa4d1, 0x6c5, 0x10001, 0x9, 0x10000, 0x1ff, 0xcd00, 0x8, 0x10, 0x101, 0x10001, 0xfe2b, 0x800, 0x11, 0x3, 0x9, 0xff, 0x9, 0x6, 0x7, 0x3ff, 0x6, 0xfffffff7, 0x7ff, 0x0, 0x932, 0x7, 0xa, 0x2b, 0x1000, 0x1, 0x8, 0xfffffff8, 0x800, 0x2, 0xfd, 0x1, 0xb, 0x3, 0x5, 0xe, 0x8, 0xb01dac1, 0x3, 0x326, 0x800, 0x0, 0x10000, 0x9, 0x0, 0xffffb428, 0x8, 0x0, 0x1, 0xf4b, 0x81, 0x8, 0x2, 0x40, 0xc, 0xffffffff, 0x8, 0xffffffff, 0x4d, 0x0, 0x9, 0x2, 0x32b5, 0x3, 0xf3, 0x7fffffff, 0x8, 0x3, 0x1, 0x6, 0xab9, 0x100, 0x7f, 0xfffffff7, 0x1ff, 0x3, 0x3, 0xa, 0x6, 0x0, 0x7f, 0x800, 0x7, 0x1, 0xc7a4, 0x200, 0x7, 0x5, 0xa6d8, 0xff, 0x10000, 0x9, 0x2, 0x3, 0x0, 0xffff3269, 0x46ef, 0x8, 0xf, 0x7, 0x1, 0x5, 0x8, 0x1, 0xffff101c, 0x9, 0x8, 0x81, 0xd3, 0xe, 0x3d, 0x8, 0x7, 0x2, 0x2, 0x4, 0x2, 0x5, 0x8, 0xf, 0xffff, 0x9, 0x3ff, 0x7f, 0x5, 0x9, 0x3, 0x3, 0x8001, 0x8, 0x7, 0x3, 0xb, 0xffff91e3, 0x5, 0x80000000, 0x4, 0x2, 0x6, 0x81, 0x7f, 0x9, 0x3a, 0x401, 0x1c11, 0x5, 0x3, 0xcdad, 0xac4, 0x3, 0x6, 0xe, 0x1, 0x8, 0x80000001, 0xb71, 0xfffffffd, 0x7, 0x1, 0x2, 0x9, 0x8, 0x100, 0xffff, 0x64fd, 0x3, 0x0, 0x8e600000, 0x2, 0x4, 0x5, 0x9, 0x8, 0x800, 0x8, 0x6, 0x80000001, 0x2, 0x0, 0xf, 0x7, 0x2cec00, 0x2, 0x0, 0x0, 0x4, 0x3ff, 0x4, 0xffff, 0x6, 0xbbc, 0x9, 0x3, 0x1, 0x2, 0xffffffff, 0x0, 0x2f2c, 0x7f, 0xa4, 0xb, 0x6, 0x1, 0x8, 0x4, 0xc, 0x1, 0x0, 0x10001, 0x40, 0xe, 0xa, 0x0, 0x0, 0x0, 0x10001, 0x2, 0x7f, 0x9, 0xff, 0x438, 0x1, 0x2e9, 0x200, 0xd, 0x0, 0x6, 0x1, 0x1, 0x0, 0x3ff, 0x401, 0x4, 0x200, 0x8, 0x5, 0x7fff, 0x7, 0x752, 0x6, 0xc8, 0xb, 0x2956, 0x3, 0x1, 0x0, 0x3, 0x8, 0x101, 0x6, 0x5, 0x7, 0x2, 0x0, 0x3, 0x9851, 0x9, 0x8, 0x5, 0x8, 0x6, 0x34000000, 0x2, 0x6, 0x8, 0x8, 0x3, 0x2, 0x0, 0x5, 0xe, 0xd2a, 0x4, 0x80000000, 0x5, 0x6, 0x7, 0xfffffff8, 0x4ecb, 0x56, 0x80000000, 0x4, 0x9, 0xe, 0x2, 0x8e8b, 0x4, 0xfffffff9, 0x1, 0x7fffffff, 0x9, 0x4, 0x6, 0xfffffffd, 0x5b8a, 0x1, 0x8, 0x6, 0x9, 0x5252, 0x0, 0x10e, 0x7fff, 0x2f4d9426, 0x3ff, 0x1, 0xfffffffc, 0x401, 0x62, 0x20a, 0x1, 0x1e, 0x4, 0x2, 0x9, 0x1ff, 0x3, 0xfffffdca, 0x4, 0x4, 0x3, 0xf, 0x8, 0x9, 0x6, 0x5, 0xbceb, 0x8, 0x0, 0x7, 0x9, 0x2, 0x4, 0x0, 0x101, 0x4, 0x10000, 0x4, 0x8, 0xc, 0x4, 0x8, 0x8, 0x9, 0x9, 0x197f, 0xfffffffc, 0x6, 0x2, 0x61c8, 0x5, 0xfffff801, 0x5, 0x3, 0x100000, 0x101, 0x4, 0x4, 0xb488, 0x1ff, 0x0, 0x3, 0x4, 0x4e63, 0x6, 0x9, 0x49f8ae9a, 0x9c1, 0x5, 0x6, 0xd, 0x8, 0x4, 0x17, 0x6d, 0xb, 0x8, 0x9, 0x8001, 0x1, 0x8, 0x4, 0x80000001, 0x100, 0x9, 0x9, 0x7, 0x3, 0x40, 0x2, 0x29c1, 0x8, 0x7, 0x9, 0x7fffffff, 0x7ff, 0x7, 0x101, 0x2, 0x100, 0x4, 0x9412, 0x10, 0x4, 0x0, 0x5, 0x4, 0x8, 0x7, 0x3ff, 0xad3, 0x4, 0xcea, 0x20, 0xa, 0x0, 0x510a6a28, 0x5, 0xffffffff, 0x9, 0xd3, 0xc920, 0x7, 0x3, 0x61, 0x400, 0xf9, 0x7f, 0x80, 0xfc2, 0x8, 0x1, 0x500000, 0xa64, 0xfffffff9, 0x1, 0x80000000, 0x0, 0x2, 0x4, 0x10000, 0x1, 0xbf, 0x9f45, 0xfffffff2, 0xff, 0x6, 0x214, 0x800, 0x9, 0x7d6, 0xff, 0x0, 0x9, 0x3, 0x2, 0x800, 0x77, 0x800, 0x9, 0x5, 0x813, 0x3, 0x7, 0x0, 0x1, 0x401, 0x4, 0x10000, 0x3, 0x1, 0x9, 0x3, 0xfb, 0x3b2, 0x7, 0x80, 0xd, 0x100, 0x5, 0x7fffffff, 0xff, 0xff, 0x40, 0xffff, 0x2, 0x3, 0x5, 0x3, 0x4, 0x1, 0x0, 0x7, 0x3, 0x7, 0xd44, 0x9, 0x8001, 0x7, 0x3, 0x2, 0x589, 0x5, 0x8, 0x3, 0x5e2, 0x9, 0x15, 0xde2b, 0x7, 0x9, 0x4, 0xffffff80, 0x2, 0xfff, 0xfffffffc, 0x6, 0x21, 0xfffffff8, 0xfffff800, 0x8, 0x6, 0x7, 0x7, 0x7, 0x6, 0xff, 0xffffffff, 0xfffffff3, 0xe03, 0x3, 0x80, 0x16e, 0x7ff, 0x65, 0x40, 0x3, 0xb, 0xc3, 0xfffffff7, 0xb, 0x2, 0x1, 0xd3e6, 0x5, 0x8, 0xa5, 0x80000001, 0x7fffffff, 0x1c, 0x0, 0x0, 0x3129, 0x81, 0x8001, 0x1, 0x80000001, 0x5, 0x0, 0x1ff, 0x5, 0x0, 0x7, 0x6, 0xc3, 0x0, 0xffff, 0xfffffffe, 0x6, 0x5, 0x401, 0xfe9, 0x101, 0x7fff, 0x1, 0x401, 0x83, 0xff, 0xfffffff8, 0x7, 0x401, 0x6, 0x80, 0x1, 0x0, 0xfffffff5, 0x4, 0xb8a0, 0xe, 0x2, 0x80000000, 0x0, 0x7, 0x8, 0x6, 0x2, 0xc9, 0x0, 0x7, 0x39, 0x1000, 0xa, 0x1e, 0xfff, 0x18, 0x8, 0x8, 0x8, 0x80000000, 0xd, 0x40, 0x5, 0xfffffffd, 0xfffff0a6, 0x4, 0x80000000, 0x3, 0xa0, 0x0, 0x0, 0x6, 0x401, 0x7, 0x8, 0xa1ee, 0xc36d, 0x1, 0x8, 0xcf34, 0x8, 0x29, 0x4, 0x1, 0x81, 0x7, 0x5, 0x8001, 0xb, 0x1, 0x0, 0x7, 0x200, 0x1, 0x1, 0x80, 0x8, 0x6, 0x8, 0x3, 0x5, 0x40, 0x9, 0xa00, 0xffffffff, 0x2, 0x6, 0x1, 0xfffffffc, 0x8, 0x0, 0x7fffffff, 0x8, 0x5, 0x9, 0x6, 0x8001, 0x1, 0x7, 0x7f, 0x9, 0x4, 0xd42, 0x4, 0x9c4, 0x8, 0x4, 0xfffffb8b, 0x1e370550, 0x0, 0x6, 0xffff0001, 0x6, 0x5, 0x3, 0x4, 0x6, 0x9, 0xe0, 0xfff, 0xfffffffb, 0x0, 0x1, 0x80000000, 0x4, 0x1, 0x6, 0x7, 0x7ff, 0x1, 0x0, 0x3b3e, 0x4, 0x8, 0x0, 0x5, 0x6c, 0xfffffffe, 0x5, 0x0, 0xfffffff7, 0x0, 0x5, 0x101, 0x10001, 0xcb6, 0x7, 0x6, 0x5, 0x6, 0xfffffff7, 0x4, 0x9, 0x8, 0x3, 0xd4, 0x7, 0x5, 0x80000001, 0x5f, 0x0, 0x5, 0x8, 0x3, 0x3, 0x633, 0x90e, 0xb09b, 0x4, 0x2, 0xd, 0x9, 0x7, 0xffff8710, 0x3, 0x4, 0x200, 0x4, 0x80, 0x0, 0x10, 0x3, 0x3f, 0x4, 0xffffffff, 0x8, 0x6, 0x3, 0x4, 0xa9b3, 0xb, 0x7, 0x6, 0x10000, 0x9, 0x10000, 0x3, 0x6, 0x3, 0xfffffffc, 0x5, 0x3, 0x488, 0x7ff, 0xf, 0x4, 0x8, 0xd, 0x5, 0x8000, 0x80000001, 0x7fffffff, 0x5, 0x0, 0x6, 0x200, 0xa, 0x8001, 0x63c, 0x4, 0x2, 0x4, 0x1, 0x5, 0x3, 0xff, 0x88, 0x1, 0x5ec8, 0x7, 0x0, 0xd, 0x2, 0xfff, 0xf, 0x5, 0x4b6, 0x101, 0xffffffff, 0x6, 0xf, 0x7fffffff, 0x0, 0x7, 0x8, 0x3, 0x3, 0x2, 0x3, 0x9, 0xfffffff7, 0x80000000, 0x3, 0x7ff, 0x5a, 0xfffffff3, 0x6, 0x6, 0x8001, 0xa, 0x8, 0x9, 0x3, 0x2, 0x62, 0x4, 0x3, 0xc1db, 0xd4, 0x6, 0x8, 0xd, 0x9, 0x9, 0x2, 0x84d, 0x2, 0x5, 0x8, 0x1, 0x8000, 0x1, 0x10001, 0x8a07, 0x2, 0x1, 0x2, 0x5, 0x101, 0x8e, 0x5, 0x2b7, 0xd, 0x7, 0x2, 0x8, 0x3, 0x3, 0x278, 0x0, 0x40004000, 0x2, 0x3df, 0xaad2, 0x5, 0x4, 0x7954, 0x8000, 0x14e4, 0xdc3a, 0x7, 0x80000001, 0x2, 0x5195eded, 0x9, 0x4e7, 0x3a, 0x7ff, 0x9, 0x6, 0x400, 0x9, 0x5, 0x5, 0xff, 0x4, 0x3, 0xb5d, 0x7, 0x3, 0x2, 0x5, 0x1000000, 0x5, 0x8, 0xff, 0xae6e, 0x9, 0x6, 0x1, 0x52, 0x1, 0x1, 0x7, 0x2, 0x81, 0x4, 0x10, 0x80000000, 0xfff, 0x3, 0x101, 0x9, 0x5, 0x0, 0x80000001, 0xfff, 0x7, 0x2, 0x0, 0x4, 0x4, 0x2, 0x5329, 0x1, 0xd, 0x800, 0x2, 0x1, 0x1, 0x9, 0x59, 0x10000, 0x7f, 0x6, 0x3, 0x200, 0x7, 0x9, 0x3, 0x9, 0xff, 0x6d2f, 0x0, 0xfffffff7, 0x5, 0xc, 0x1, 0x1, 0x6, 0x3, 0x3, 0x298, 0x0, 0x1850, 0xc26a, 0x3105, 0x15be, 0x401, 0xeac, 0x401, 0x6, 0x83, 0x1, 0xec8, 0x65d, 0x6, 0x8, 0x10, 0x3, 0x9, 0x7, 0xa9, 0x81, 0x7, 0x800, 0x9, 0x8, 0x4, 0x4, 0x4, 0x4, 0x10001, 0x8f50, 0x1, 0x80000000, 0x6, 0xac2, 0x5, 0x6, 0x1, 0x6, 0x3, 0xe5, 0x1, 0x6, 0x7, 0xc7f, 0x7, 0xf, 0x3, 0xbcd, 0x5, 0xfffffc01, 0x74c, 0x1, 0x1, 0x7, 0x1, 0x7, 0x7fff, 0x3, 0x5428, 0x0, 0xffff, 0x1ff, 0x3, 0x7, 0x401, 0x4, 0x10, 0x5, 0x7, 0x7, 0x3, 0x9, 0xa3a, 0x3, 0x3, 0x3, 0x8, 0x3, 0xe4, 0x9, 0x40, 0x8, 0x5, 0x5, 0x0, 0x934, 0x10, 0x0, 0x2, 0x1, 0x6, 0x8, 0x1, 0x6, 0x8, 0xffff, 0x6, 0x4, 0x2, 0x7, 0x0, 0x1ff, 0x7fff, 0x7, 0x8, 0x7, 0x17, 0xff, 0x1, 0x6, 0x0, 0xa7b, 0x10001, 0x4, 0x7ff, 0x10, 0x7, 0x80000000, 0x2, 0x1ff, 0x5, 0x0, 0x6, 0x2, 0x2, 0x9, 0x4, 0xd3, 0x6, 0x438, 0xffffffff, 0x8, 0x6, 0x6, 0x4, 0x9, 0x2874, 0x7, 0x0, 0x6, 0x7f, 0x3, 0x80, 0x1, 0x0, 0x6595, 0x3, 0xfffffffe, 0x6, 0xfffffff7, 0x4, 0x3, 0x0, 0x23b6, 0x4880487e, 0x5, 0x10000, 0xffffffbf, 0x7, 0x4, 0x4, 0x80, 0x3, 0x9, 0x7, 0x5, 0x4f8, 0x80000001, 0x9, 0x3fc0, 0x8001, 0x2, 0x1ff, 0x777, 0x2, 0x1, 0x9, 0x5, 0x12000000, 0x3, 0x2502, 0x5, 0x6130, 0x3, 0x4, 0x42, 0x1, 0x3, 0x4, 0x4, 0x4, 0xffffff7f, 0x8, 0x828, 0x1, 0x2, 0x1, 0x80000, 0x77, 0x0, 0x3, 0xfffffff7, 0x1, 0x5, 0x6, 0x457, 0x0, 0x101, 0x13, 0x7, 0x9, 0x58e1, 0x76, 0x5, 0x3486, 0xf, 0x5, 0x8, 0xa8, 0x4, 0x9, 0x0, 0x7, 0xea, 0x7, 0x1000000, 0x1, 0x5, 0x9, 0x0, 0x0, 0x5, 0x785800, 0x40, 0xe, 0x9, 0x7fffffff, 0x401, 0x80, 0x6, 0x100, 0x7ff, 0x6, 0x8, 0x7, 0x4, 0x9985, 0x2, 0x8, 0x4, 0x8000, 0xc, 0x200, 0x0, 0x2, 0x7, 0xffffffff, 0xcc0a, 0x2, 0x80, 0x1, 0x0, 0x3, 0x0, 0x6, 0x0, 0x5, 0x410b, 0x80, 0x0, 0x4, 0x0, 0x6, 0x9, 0x4, 0x8, 0x10000000, 0x4, 0x80000001, 0x0, 0x8, 0x6, 0xffff, 0x4, 0xe1c, 0xc7b, 0x0, 0x200, 0x3, 0x2, 0x5, 0x3, 0x0, 0x1, 0x7a, 0x2, 0x4, 0x7cdabbf0, 0x435, 0x0, 0x1ff, 0x9, 0x2, 0xffffff76, 0x10000, 0x1, 0x2, 0x101, 0x6, 0xc, 0x4, 0x40, 0x2, 0x5, 0x7, 0x2, 0x2, 0x80, 0x40, 0x1, 0x10, 0x2, 0x5, 0x3, 0x4, 0x4, 0xc7, 0x2, 0x0, 0xfff, 0x4, 0x7, 0x5, 0x6, 0x5e, 0x3, 0x4, 0x4, 0x1, 0x7, 0x9, 0x4, 0x6680, 0x7, 0x9d, 0xedce418a, 0x4, 0x7, 0x80000000, 0x0, 0x6, 0x4, 0xfa, 0x0, 0x7fffffff, 0x3, 0xb, 0xfffffff9, 0x8cd, 0x800000, 0x7, 0x9, 0x100, 0x3, 0x0, 0x7fff, 0x2675, 0x81000000, 0x83, 0xffffe4f5, 0x80000000, 0x0, 0x37aa, 0x8, 0xfffffffc, 0x7fffffff, 0x0, 0x22, 0x14c, 0x2, 0x2, 0x9, 0x1, 0x1ff, 0xb, 0x8, 0x8, 0xc61, 0x6a15, 0x4, 0x3, 0x100, 0x0, 0x0, 0x8, 0x249, 0x866a, 0x4e9, 0x1, 0x357, 0xa, 0x4, 0xd5, 0x5, 0x8, 0x0, 0x1, 0xe2a, 0x6, 0x8, 0x6, 0xfffffffc, 0x1e, 0x0, 0x3, 0x4, 0x2, 0x1, 0xf45f, 0xfffff800, 0x3, 0x8, 0x8, 0x1ff, 0xffff5600, 0xb, 0x61a, 0x107fa532, 0x0, 0xffff, 0x6, 0x2, 0x2, 0x8, 0x1, 0x1, 0x100, 0x88a5, 0xfff, 0x2, 0x4, 0x0, 0x8000, 0x9, 0x8, 0xb, 0x0, 0xfffffff8, 0x9, 0x80000001, 0x7, 0x81, 0x7, 0x3, 0xb1, 0x7, 0x3, 0x6, 0xb, 0x5, 0x2, 0xb9be, 0x4, 0x7, 0x10000, 0x7, 0x3, 0x5, 0x0, 0x90, 0x5, 0xb3, 0x5, 0x659f, 0x7, 0x3, 0xffffffff, 0x401, 0x8, 0x80000001, 0x3, 0xfffeffff, 0x6, 0x2, 0x2, 0x1, 0x6, 0x7, 0x1, 0x9, 0xf51a, 0xb7, 0x6, 0x0, 0xfffffffa, 0xc, 0x100, 0x2, 0x9, 0x5, 0xb, 0xec, 0x8, 0x0, 0xfff, 0x4, 0x8, 0x0, 0x9, 0x80, 0x7, 0x0, 0x81, 0xd, 0xd88, 0xc, 0xfff, 0x6, 0x9, 0x0, 0xfffffffa, 0x48, 0x7, 0x3, 0x7, 0x8001, 0x7, 0x280b, 0x5, 0x8, 0x8, 0x6, 0x7fff, 0x3, 0x6, 0x9, 0xbe7, 0x7fff, 0x7846, 0x0, 0x3, 0x401, 0x6, 0x2, 0x3, 0x9, 0x726, 0x6, 0x6, 0x84ac, 0xd, 0x8, 0x66, 0x4, 0xec1, 0x5, 0x4, 0x6, 0x9, 0xd408, 0x7, 0x40, 0x400, 0x5abcd009, 0xd, 0x1, 0x0, 0x6, 0x3, 0x400, 0x3, 0x5, 0x7f, 0x1, 0x100, 0x18, 0x9, 0x7, 0x0, 0x1c9, 0x8000, 0xde, 0x400, 0x1, 0x8, 0xfffffff4, 0x0, 0x400, 0xf, 0x564, 0x3, 0x81, 0x7, 0x101, 0x4, 0x5, 0x584, 0x7f, 0x7, 0x6, 0xe27, 0x4bc2, 0x6, 0x1, 0x9, 0x80000001, 0xb0, 0x0, 0x2, 0x3, 0x5, 0x7, 0x9, 0x4, 0xffffffc5, 0x6, 0x4, 0xfff, 0x2, 0x5, 0x4, 0xc, 0x3, 0x1, 0x9, 0x4, 0x1, 0x5, 0xdd4, 0x7, 0x0, 0x9, 0x6, 0x3a74, 0x843, 0x0, 0x0, 0x5, 0x9, 0x5, 0xba, 0x5c9d, 0xf, 0x0, 0x2, 0x9, 0x8, 0x8, 0x1, 0x5, 0x7, 0x0, 0x0, 0x3, 0x1, 0x3, 0x2, 0x8, 0x2b39, 0x2, 0x8001, 0x2, 0x0, 0x7, 0x1, 0x425, 0x4, 0x400, 0x8, 0xbf8, 0x84d, 0x7, 0x2d, 0x8, 0x40, 0x9, 0x1, 0x7, 0x9, 0x800, 0x8, 0x0, 0x3, 0x8, 0x3, 0xffff, 0xf, 0x9, 0x1a12, 0x100, 0x2, 0x5, 0x2, 0x1, 0x1, 0x9, 0x2, 0x3, 0x0, 0xfffffff8, 0x0, 0x8, 0x0, 0x7, 0x4, 0x9422a04, 0x6, 0xfffffff7, 0x81, 0xfffffffd, 0x6, 0x80000000, 0x1, 0x5, 0x100, 0xbd9f, 0xf02, 0x8, 0x2, 0x401, 0x0, 0x133b208d, 0x8, 0x3, 0x1, 0xb, 0x9, 0xffff0000, 0x3, 0xd3, 0x8, 0x3, 0x9, 0x7, 0x800, 0x1, 0x7, 0x9, 0x6d, 0x200, 0x8, 0xea7f, 0x9, 0x3, 0x5, 0x7, 0x2, 0x9, 0x6, 0x10001, 0x7, 0xea, 0x3, 0xe, 0x0, 0xf, 0x61, 0xff, 0x5, 0x5, 0x2, 0x1, 0x8000, 0xe, 0x10001, 0x6c7, 0xc, 0xf11, 0x7, 0x7fff, 0x0, 0x7ff, 0xc0, 0x2, 0x9, 0xfc, 0x100, 0x852, 0x8, 0x80, 0x2, 0x4, 0x7, 0xa017, 0xf574, 0x3ff, 0x6, 0x1, 0xcce, 0x4e, 0xe, 0x9, 0x2, 0x9, 0x4, 0xa1, 0x100, 0x9, 0x9, 0x6, 0x2, 0x36, 0x0, 0x4, 0x4, 0xffff0000, 0x4, 0x8000000, 0xd, 0x1, 0x1, 0xfffffffa, 0x1, 0x7, 0x80000000, 0x5, 0x7fffffff, 0x5, 0x2, 0x2, 0x101, 0x6, 0x1, 0x98e9, 0x0, 0x9, 0x5, 0x800, 0x80, 0x1, 0xfffff801, 0x9, 0x7f, 0x6, 0x6, 0x6, 0xd3, 0xdd6, 0x7, 0x3, 0x3, 0x2, 0x7a78, 0x4, 0xfffff3b0, 0xcf, 0xa3fd, 0x9, 0xc76d, 0x80000000, 0x43, 0x3, 0x470, 0x4, 0xb1, 0x3ff, 0x8, 0x1, 0xfffffffe, 0x6, 0x0, 0x0, 0xb1f, 0x3, 0x7, 0x3, 0x0, 0x2, 0x3f, 0x3, 0x0, 0x2, 0x1000, 0x9249, 0x8001, 0xb117, 0x8, 0xca6, 0x87, 0x5, 0x1, 0x80000000, 0x4, 0x0, 0x7, 0x3, 0xa, 0x2, 0x5, 0x2, 0xd21b, 0x5, 0x4, 0x3, 0x7, 0x9, 0x7ff, 0x7, 0x8, 0x7, 0x81, 0x4, 0x401, 0x10, 0x7, 0x4, 0x0, 0x0, 0x4, 0x9, 0xfffffff8, 0xafc3, 0x1, 0x7, 0x2b, 0x40, 0x10001, 0x9, 0x6, 0xb617, 0x4, 0x1, 0x1dc0, 0xeab, 0x9, 0x7, 0x8000, 0x9, 0x0, 0x8, 0x7, 0xc494, 0x7, 0x4, 0x7, 0x6, 0x0, 0x2, 0x2, 0x1, 0x2, 0x7, 0x3, 0x2, 0x8, 0x4, 0x6b, 0x2, 0x66, 0x7, 0x1, 0x5, 0x6, 0x949, 0x3, 0x8, 0x8, 0x59b2, 0x6, 0x0, 0x7, 0x9, 0x7f, 0x0, 0x7ff, 0x1, 0x2, 0x0, 0x7fff, 0x5d49565, 0x9, 0x4, 0x40, 0x5, 0xbb0, 0xc14c, 0x14, 0x5, 0x10, 0x3, 0x7, 0x0, 0x761c, 0x7ff, 0x8, 0xa0000000, 0x1, 0xfffffff7, 0x8, 0x5, 0x0, 0x1, 0x10001, 0x2, 0x3, 0x9, 0x1ff, 0x5, 0x1, 0xa3f, 0x5, 0x9, 0x9, 0x1, 0x9, 0x67a30d8a, 0xa01d, 0x100, 0x0, 0x0, 0x6, 0xddc, 0x9, 0x0, 0x106, 0x7fffffff, 0x9, 0x405, 0xf, 0x6, 0x3, 0x72, 0x4f, 0x200, 0x4, 0x2, 0x3, 0x400, 0xb, 0x6, 0xe, 0x7, 0x3, 0x78, 0x9, 0x2, 0x7, 0x89, 0x713, 0x4179, 0x8, 0x81, 0x3, 0x8, 0x8cbb, 0x4, 0x0, 0x857, 0xb, 0x8ef1, 0x0, 0x6, 0x8, 0x0, 0x7, 0x2, 0xf, 0x2, 0xd6, 0x8, 0x1, 0x823e, 0x8, 0xffff, 0xffffff7f, 0x9319, 0x8, 0x8, 0x7fff, 0x4, 0x1, 0x0, 0x8, 0x6, 0x2, 0x7, 0x1, 0x1, 0x101, 0x400, 0xc22, 0x10, 0xff, 0x8858, 0x0, 0x9, 0x7fff, 0xf7, 0x3ff, 0x200, 0x1, 0x4df, 0x6, 0x2, 0x400, 0x0, 0x40, 0x80000000, 0x223, 0x5, 0x9, 0x7f, 0x3ff, 0x7, 0x800, 0x2, 0x9, 0x6, 0x4f7b, 0x4, 0xffffffff, 0x5, 0x4, 0xf, 0x0, 0x5, 0x8, 0x0, 0xd, 0x1ff, 0x10001, 0x3d6f, 0xffffff70, 0x8000, 0x81, 0x7ff, 0x6, 0x10000, 0xfffff78d, 0x38f, 0x4, 0x4, 0x5, 0x1, 0x5, 0x6ee8, 0x1, 0x1, 0x8, 0x9, 0xf5fde99, 0xfa, 0xf, 0x8, 0x0, 0x401, 0x9, 0x401, 0x5, 0x2a9, 0x9, 0xd, 0xfffffffb, 0x9, 0x6, 0x9c5, 0xbc4, 0x7, 0x80000001, 0x5, 0x2, 0x80, 0x8, 0x8, 0x2, 0xffffff7f, 0x9, 0x7, 0x4, 0xd5f, 0x101, 0x2, 0x1, 0x5, 0x4, 0x5, 0x8, 0x1, 0xbb, 0xffffffff, 0x7e09, 0x5, 0x7ff, 0x80, 0xcc0, 0x9, 0x1000, 0xf3d, 0xff, 0x7, 0x9, 0x6, 0x9f84, 0x1, 0x7, 0x1, 0x1, 0x4, 0x94b2, 0x80000001, 0x5, 0x0, 0x2, 0x7, 0x7, 0x1, 0x1, 0x8, 0x150, 0x3, 0x80, 0xa, 0x1072, 0x80, 0x6, 0x0, 0x9, 0x0, 0x2d9c, 0x9, 0x0, 0x7, 0x3, 0x6, 0x7dd, 0x8, 0x3, 0x57, 0x3, 0x1, 0x8, 0x0, 0x3, 0xa, 0xe, 0xf, 0x5, 0x5, 0x3, 0x3, 0x0, 0x5, 0x7fff, 0x10, 0x8, 0xc816, 0x9, 0x9, 0x364, 0x7, 0x80, 0x800, 0x1, 0x0, 0x7ff, 0x6, 0xff, 0x7f, 0x3, 0xa, 0x4, 0xe, 0x1000, 0x7, 0xffff, 0x4fb, 0x7ff, 0x1000, 0xe, 0x1, 0x1, 0xcdc, 0x988, 0x9, 0x7, 0x9, 0x2, 0x5, 0x84, 0x6, 0x8, 0x4, 0x7, 0xac2, 0x200, 0x9, 0xd4, 0x8, 0x68f, 0x1, 0x0, 0x5, 0x1, 0x5, 0x7, 0xc, 0x6, 0x8, 0xf, 0x9, 0x401, 0xf, 0xb, 0x3a7, 0x8, 0xb, 0x7, 0x8, 0x1000, 0x9898, 0x8000, 0x9, 0x2, 0x70, 0x4, 0xffffff36, 0x8, 0xd8, 0x6, 0x6, 0x1, 0x58, 0x7, 0xffffffca, 0x4, 0x3e, 0x1, 0x10, 0x8, 0x2c, 0x3, 0x9, 0x2, 0x6, 0x66, 0x424, 0xffffffff, 0xf16, 0x5df1cb53, 0x8, 0x8, 0x3, 0x30d482bc, 0x5, 0xd, 0x6, 0x4, 0x80000000, 0x1, 0x6, 0x81a, 0x101, 0x1, 0x7, 0xdb, 0x9, 0x101, 0x9, 0xfff, 0x0, 0xc, 0x6, 0x4, 0x7, 0x10001, 0x1, 0x3, 0x3, 0x7fff, 0x7fffffff, 0x100, 0x800, 0xb, 0x1000, 0x66a5, 0x1, 0x9, 0x7, 0x4, 0x7, 0xfff, 0x0, 0x1a, 0xa, 0x4, 0x6, 0x4, 0xb, 0x8, 0xc80, 0x8, 0x3ff, 0x0, 0x5, 0x7fffffff, 0xd, 0x7c03, 0x1081, 0x5, 0x2, 0x70, 0x2, 0x7, 0x0, 0x9, 0x59, 0x4, 0x2, 0x2, 0x2, 0x2, 0x401, 0x8001, 0x7ee, 0x6, 0xc0ad, 0x2, 0x6, 0x8, 0x2, 0x8, 0x1020, 0x7ff, 0x6, 0x72, 0x0, 0xfffffffd, 0xfffffffe, 0x4, 0x8000, 0x0, 0x7ff, 0x0, 0x9, 0xf2b, 0xca5, 0x522, 0xfffffffc, 0x6, 0x2, 0x10, 0x2, 0x360e95c6, 0x10000, 0x1, 0x6, 0x7fffffff, 0x1, 0x68ca2c69, 0xff, 0x2, 0x7fff, 0x2, 0x8, 0x6, 0x3, 0x162, 0x3, 0x0, 0xf86b, 0x7, 0x5, 0x80000001, 0x39, 0xaa4, 0xffff, 0x1, 0x9, 0x7, 0x8, 0x1, 0x4d0, 0x6, 0x0, 0x4, 0x7, 0x2, 0x6, 0x3, 0x3, 0x367, 0x556, 0x459d, 0x2aa, 0x0, 0x2f2, 0x800, 0xfffff95a, 0x5, 0x3, 0x1, 0x3, 0x7fffffff, 0x0, 0x8, 0x7dc, 0x80, 0x4, 0x1ff, 0x1ff, 0x3, 0x9, 0xffffff0f, 0x5, 0x2, 0x75d1, 0x74c4, 0x2, 0x3, 0x7ff, 0xfff, 0x5, 0x9, 0x8, 0xa83, 0x9, 0x8, 0xfffffffd, 0x9c60, 0x5, 0x5, 0xb, 0x9, 0x92, 0x7, 0x7ff, 0x8, 0xfffffffd, 0x800, 0x7fff, 0x3fda, 0x10000, 0xa5, 0x1, 0xb3e6, 0xdca4, 0x7b55, 0x5, 0xffff, 0x7, 0x3, 0x3, 0x3ff, 0x7, 0x9, 0x0, 0x8, 0x5, 0x0, 0x6, 0x2, 0x6db7, 0x4, 0xdf, 0x81, 0x1, 0x2, 0x4, 0x80000001, 0x3, 0x1, 0x7fff, 0x7, 0x7, 0x7759, 0xffffff00, 0x7, 0x80, 0x9, 0xffff, 0x3ff, 0x6, 0x6, 0x8, 0x401, 0x7fffffff, 0x3, 0x1, 0x3, 0x3, 0x6, 0x5, 0xe773, 0x8, 0x5, 0x5, 0xfffffffb, 0x1000, 0x1, 0xfffffffb, 0x2, 0x7, 0x4a4, 0x7ff, 0x9, 0x5, 0x6, 0x1, 0x9, 0xfffffffa, 0x7fffffff, 0x81, 0x1000000, 0x0, 0xffffea3a, 0xffffffff, 0xffffffff, 0x3ff, 0x8, 0x4, 0x9, 0xa27e, 0xd31f, 0x9, 0x35, 0x8001, 0x5, 0x7f, 0x7, 0xe8, 0xc08, 0xffff0001, 0x200, 0x3, 0x1, 0xfffffffc, 0xc38, 0xffff, 0x1ff, 0xa70e3fb, 0x8, 0xfffff801, 0xfffffff1, 0x3, 0x5, 0x3ff, 0x8, 0x200, 0x3, 0xff, 0x3, 0x180000, 0xc, 0x4, 0xfbb, 0x6, 0x7fffffff, 0xfffff121, 0x5929a83c, 0x2, 0x4, 0x100, 0x1, 0xe, 0x4, 0x5, 0xffffffff, 0xa0, 0x8, 0xfffffffb, 0x1a, 0x5, 0x6f8, 0x3, 0x4, 0x4, 0x1, 0x401, 0xffffff5f, 0x5, 0x0, 0xf2, 0x9, 0x4, 0xffffff7f, 0xfffffff8, 0x8c2f, 0x7, 0x9, 0x2, 0x0, 0xffff0000, 0x7, 0xe, 0x2, 0xffffffff, 0xfffffff8, 0x2, 0x0, 0x1, 0x5, 0x5, 0x0, 0x8, 0x4, 0x5, 0x3, 0xfffffffe, 0x9, 0x0, 0x4a0b, 0x210d, 0x40, 0xf, 0x95, 0x9, 0x5, 0x80000000, 0x313, 0x100, 0x5, 0xf, 0xfffffff7, 0xf, 0x3, 0x5, 0x5, 0x1, 0xcb01, 0x7, 0x7, 0x4, 0x1ff, 0x3, 0x6, 0x4d5a0619, 0x8, 0x1, 0x3, 0x1, 0x8, 0x4b21, 0x7, 0xb, 0x83b, 0x2, 0x81, 0x6791, 0x3, 0x4, 0x1, 0xfffffff9, 0x7, 0x81, 0x6, 0xfffffffe, 0x3, 0x3, 0x400, 0x4, 0x0, 0x80000000, 0x3, 0x70, 0xe8, 0x6, 0x67e9, 0x2, 0x9, 0xf, 0x473, 0x400, 0x7, 0x100, 0x200, 0xe41f, 0x9, 0x7, 0x3, 0x9, 0x8, 0x6, 0x6, 0x24ae, 0x7, 0x5, 0x2, 0x3, 0xb, 0x8, 0x81, 0x2, 0x1, 0x9, 0x7fffffff, 0x400, 0x7, 0x5, 0x5b5, 0x3, 0x4, 0x4, 0x7f, 0x53, 0x95c, 0x1, 0x4, 0x7f, 0x4, 0x2, 0x1a, 0x3, 0x3, 0xffffff93, 0x9, 0x7, 0xb83d, 0x8, 0x5, 0x100, 0x8, 0x73, 0x5, 0x0, 0xfffffff9, 0x3, 0x6, 0x3, 0x6, 0x2, 0x7f, 0x5, 0x7, 0xa, 0x400, 0x7, 0xc7, 0x6, 0xbe3d7d9, 0x4, 0x3, 0x800, 0x5, 0x2, 0x5, 0x6, 0xf9ad, 0xf07, 0x1e, 0x0, 0xd597, 0x80, 0x2ca, 0x1, 0x0, 0x800, 0x8, 0x96, 0x4, 0x4, 0xe, 0x3, 0xffffffff, 0xd, 0x0, 0x0, 0x0, 0x401, 0x2, 0x0, 0x6, 0x40f, 0x3, 0x4, 0x34000, 0x5, 0xf, 0x1, 0x10, 0x2, 0x80, 0x40400, 0x2, 0x4, 0x3, 0x8a, 0x1, 0x80000001, 0x283736e0, 0x8, 0x0, 0x4, 0x3, 0x15, 0x7, 0x3ff, 0x80, 0x400, 0xfffffffe, 0xf40c, 0x6, 0x4a69, 0x3, 0x5, 0x9, 0x80, 0x7fff, 0x0, 0x7fffffff, 0x4, 0x40, 0x3ff, 0x7ff, 0x66, 0x4, 0xa94b2d0, 0x9, 0x101, 0xb0d, 0xe, 0x9, 0xd1, 0x7, 0x3, 0xa, 0x2, 0xc, 0xfffff49f, 0x51a, 0x401, 0xd8, 0x8, 0x8, 0x2, 0x3, 0x1, 0x2, 0x3, 0x2, 0x3, 0x7e, 0x6, 0x6, 0xc, 0x6, 0x2, 0x7, 0x5, 0x6, 0x6, 0xfffffff7, 0x6, 0x8c4, 0x8, 0x1, 0x76, 0x100, 0x5, 0xf5b, 0xfffffff7, 0xae9, 0x8, 0x0, 0x5, 0xb, 0x400, 0x10000, 0x1, 0x0, 0x80, 0x8, 0x7, 0x7, 0x10, 0x1, 0x3, 0x10, 0x3, 0x6, 0x1, 0xc0000, 0x7, 0x3, 0x8001, 0x9, 0x4, 0x3, 0xe, 0xd9, 0x9, 0xfffffe00, 0x5, 0x8b2, 0x2, 0x10000, 0x5a17, 0xfffff1df, 0x4, 0x2, 0x7, 0xfffffff2, 0x10001, 0x6, 0xea, 0x7, 0x3, 0x40, 0x1, 0x8, 0x58, 0x3, 0x2, 0x7f, 0x1000, 0xcbba, 0x800, 0x5, 0x4960, 0x2, 0x7b, 0x3, 0xfffffff9, 0x796ba27b, 0x10000, 0xc, 0x9, 0x9, 0x101, 0x8, 0x45, 0x3, 0x0, 0x7, 0x4a59, 0x5, 0x1, 0x1, 0x0, 0x3, 0xc35d, 0xff, 0x3, 0x2, 0x20000, 0x2, 0x1, 0x8, 0x2d6, 0x10, 0x5, 0x2, 0x48e, 0x3, 0x3, 0xffffffc7, 0x200c, 0x9, 0x8, 0x3, 0x1, 0x1, 0x5, 0x9, 0x85a5, 0x401, 0x64, 0x80, 0x7, 0x3, 0x2057, 0xf27, 0x0, 0x5, 0x2, 0x9, 0x101, 0x8, 0x81, 0xe, 0x57e, 0x7, 0x1, 0x7fffffff, 0x4, 0x3, 0x6, 0xf3f7, 0x0, 0x5e, 0x8000, 0x6, 0x8, 0x8001, 0x55, 0x800, 0x7fff, 0xd, 0x3aabf131, 0xbf9e, 0x6, 0xff, 0x0, 0x4ece, 0x3, 0x5, 0x0, 0x6, 0x84, 0x0, 0x7, 0x1000, 0x12de, 0xffffffff, 0x5, 0x790, 0x4, 0x3ff, 0x1, 0x134, 0x7, 0x1, 0x6, 0x80, 0x6, 0xffff, 0x5bc4, 0x9, 0x8, 0xd, 0x0, 0x2ed, 0x0, 0xd, 0x9, 0x1, 0x1, 0xf6, 0xffffff92, 0x1, 0x401, 0x7fff, 0x8, 0x6, 0x7, 0x4f6, 0x3, 0xffffffff, 0x80000000, 0x7, 0xcf46, 0xff, 0x2, 0x3, 0x0, 0xe6, 0x151957ae, 0x43, 0xf577, 0x8, 0x4, 0x9607, 0x9, 0x3, 0x2, 0x1, 0x6, 0x10, 0xfffffffd, 0xffffffff, 0x47cfc0a1, 0x9, 0x10001, 0x5, 0xb2b1, 0x80000001, 0x6, 0xfffffd25, 0x40, 0x5, 0xffff0000, 0x0, 0x3, 0xc, 0x8, 0x7, 0x8, 0x80000000, 0x4, 0x40, 0x200, 0x2, 0x3, 0x401, 0xeb44, 0x6, 0x68, 0x9, 0x8, 0xab, 0xe, 0xb, 0x5, 0x0, 0xfffffff7, 0x4, 0xfffffff1, 0x7, 0x3, 0x6, 0x887, 0x5f, 0x4, 0x4, 0x0, 0x23df3853, 0x9, 0x3ff, 0x4, 0x7, 0x0, 0x5, 0xb, 0xb6, 0x3, 0xa, 0x4, 0x5, 0x5, 0xffffff3a, 0x2384, 0x10040000, 0x7, 0x74, 0xd26, 0x5, 0xf, 0x5, 0x6, 0x8, 0xffffffff, 0x8, 0x80, 0x30d, 0x80, 0x7, 0x3ff, 0x1, 0x7ffc5b05, 0x0, 0x7fff, 0x0, 0xd, 0x4, 0xc3a, 0x81, 0x5b, 0x5, 0x8, 0x9, 0x1, 0x0, 0x3, 0x0, 0x2, 0x3, 0x7, 0x10, 0x2, 0x400, 0x0, 0x3, 0x982, 0x23, 0x6, 0x2, 0x8, 0x3, 0x1, 0xc81, 0x8e, 0xc, 0x4, 0x200, 0x0, 0x4, 0x6, 0x0, 0x8f50, 0x1, 0x2, 0x4, 0x4, 0xe, 0xfb, 0x8, 0x3, 0x80000000, 0xb, 0x81, 0x0, 0x19a7, 0x3, 0x400, 0x4, 0x9, 0x3, 0x87, 0x9, 0x6, 0x9, 0x4fa, 0x7, 0xb, 0x4, 0xe, 0x0, 0x7f, 0x5, 0x9, 0x9, 0x1, 0x3, 0x2, 0x6, 0x3, 0x1, 0x9, 0x80000000, 0xf1, 0x5, 0x3, 0x0, 0x534a, 0x4, 0xe, 0x400, 0xff, 0x6, 0x4, 0x4, 0x50000000, 0x2, 0x1400, 0xfe000000, 0x10001, 0x3a, 0x5, 0x0, 0x9, 0x1, 0x8, 0xe, 0x5, 0x4, 0x1, 0x5, 0x54, 0x6, 0x1, 0x7, 0x2b, 0xa, 0x3, 0x1, 0x800, 0x5, 0x2, 0x4, 0x80000000, 0x1ff, 0x4, 0x4, 0x10001, 0x7, 0x2, 0x4, 0xfff, 0x1, 0x200, 0x5, 0xfa5, 0x85eb, 0x7, 0x1, 0x4, 0x1, 0x6, 0x4, 0x4, 0x5, 0x3, 0xffff, 0x5, 0x8, 0x4, 0x0, 0x7a838370, 0xf02, 0x6, 0x4, 0x3, 0x6, 0xb861, 0xfff, 0x0, 0x3, 0x1ff, 0x8000, 0xf800000, 0xb55, 0xe, 0x8, 0x2, 0x9, 0x7fff, 0x5, 0x1000, 0x1, 0x8, 0x8000, 0x4, 0x6, 0x631d, 0x7, 0x8, 0x1ff, 0xfffffff1, 0x5a2, 0xfffff073, 0x8, 0x1, 0xfffffffb, 0x4, 0x2, 0xfffffffe, 0x2, 0x9, 0x8, 0x3, 0x80, 0x8, 0xfffff000, 0x8, 0x0, 0xea3, 0x7, 0x3, 0x4, 0x5, 0x2, 0xa3, 0x8ce3, 0xffff, 0x6, 0x80000000, 0xa, 0x55bc, 0x1, 0xa6, 0xf6, 0x1, 0x0, 0x3, 0x7, 0x5, 0x7, 0xf, 0x5, 0x4, 0xeae, 0x18b5, 0x0, 0x3, 0x3ff, 0x7, 0xda3, 0x7, 0x0, 0x94d7, 0x2de, 0x5, 0x7, 0x8, 0x101, 0x5, 0x6, 0x3, 0x1, 0x0, 0x1, 0x0, 0x7, 0xe, 0x6c, 0x1, 0x10001, 0x7ff, 0x8019, 0x80000001, 0x8, 0xfffffffa, 0x5, 0x2, 0x8000, 0x1, 0x0, 0x1, 0x67, 0x4, 0x1, 0xed66, 0xffff0000, 0x5, 0xffffffce, 0x80, 0x4, 0x5, 0x4c, 0x6, 0x4, 0x80000000, 0x9, 0x4d0a, 0xb, 0x9, 0x1, 0x6, 0x6, 0x0, 0x1, 0x1, 0x1, 0xc513, 0x8, 0x3, 0x0, 0x5, 0x6, 0x9e1, 0xfff, 0x2, 0x6, 0x401, 0x6, 0x8, 0x0, 0x101, 0x7, 0x7fffffff, 0x4, 0x3, 0x3, 0x5, 0x101, 0x2, 0xffffffff, 0x194, 0x5, 0x8, 0x8, 0x9, 0xb, 0xce, 0x9, 0x2e, 0x7, 0xc3c7, 0x7016e2a8, 0xf, 0x6, 0x1ff, 0x40, 0xa17, 0xb353, 0x7ff, 0x921, 0x8, 0x10000, 0xa, 0xffffffff, 0x1000, 0x5, 0x5, 0x1, 0x4, 0x9, 0x0, 0x31, 0x2, 0x8, 0x7ff, 0x3, 0x400, 0x8, 0x7, 0x80a, 0x1, 0x9, 0xffff, 0x2, 0x5, 0x0, 0xfffffffc, 0x9a5, 0x100000, 0x10000, 0x4, 0x40, 0x800, 0xffff2a01, 0x80, 0x9, 0x1000, 0x4, 0x7, 0x3, 0xffffffff, 0x1, 0x5, 0x3, 0x6, 0x923, 0xa5, 0x2, 0x1, 0x0, 0xcf, 0xb, 0x2b, 0x6201d4c6, 0x6, 0x58a, 0x664, 0x2, 0x5, 0x8000, 0x8feb, 0x800, 0x1, 0x8, 0x491, 0x6, 0x2, 0x9, 0x81, 0x7, 0x7, 0x0, 0x10001, 0x5, 0x9, 0x8, 0xfffffffa, 0xffffffff, 0xffff7c06, 0x30b, 0x5, 0x0, 0x7000000, 0xfffffff9, 0x0, 0x8, 0x7fff, 0x40, 0x6, 0x9f37, 0x6, 0x0, 0xa57, 0xe2, 0xf, 0x2, 0x40000000, 0x340, 0x7, 0xffffffff, 0x80000001, 0x8, 0x583b, 0x3, 0x0, 0x8, 0x101, 0x80000001, 0x10, 0x7, 0x7, 0x0, 0xb81b, 0x8, 0x4, 0x3, 0x8, 0x100, 0xffffffff, 0x2, 0x2, 0xf01, 0x0, 0x469fc3ef, 0x3, 0xc0000000, 0xfffffff8, 0x4, 0x4, 0x7, 0x10001, 0x984, 0x9a7, 0x1, 0x3ff, 0x4, 0xfde, 0x949, 0x9, 0xfffffffb, 0x1ff, 0x7ff, 0x7fff, 0x3, 0x4, 0x4, 0x63d, 0x2, 0xd59, 0x5, 0x7, 0x40, 0x400, 0xf2a, 0x1, 0xea, 0xe45, 0x7f8e, 0xe152, 0x20000, 0x7ff, 0x6, 0x8001, 0x9, 0x80000001, 0xafd, 0x2, 0x4, 0x96c, 0x10, 0x66, 0x3, 0xb17, 0x100, 0x7, 0x9, 0x9, 0x0, 0x3, 0x1ff, 0x1, 0x7fffffff, 0x5, 0xc8, 0x3ff, 0x6db8, 0x1000, 0x2, 0x6, 0x8, 0x0, 0x1, 0xc0d0, 0x93, 0x6, 0x10, 0x7, 0x7, 0x14, 0x1, 0xbd42, 0xfffffffb, 0x10001, 0x6, 0x7, 0x2000000, 0x3, 0x1, 0x5381f771, 0xffff, 0x3, 0x7, 0x136, 0xffffff2b, 0x200, 0x8056, 0x0, 0x539236ea, 0x9, 0x7fff, 0x44af, 0xffffffd1, 0x7fffffff, 0xc, 0x40000000, 0x2, 0x2, 0xfffffdbb, 0x6, 0x90, 0x630a, 0x5, 0x7, 0xffffffff, 0xb3, 0x7ff, 0x5, 0x9, 0x1ff, 0xd1, 0x6, 0x665, 0x4, 0x3, 0x9, 0x3, 0x5, 0x0, 0xb5, 0x0, 0x5, 0x9, 0x952, 0xdab0, 0x3, 0xff, 0xffffffff, 0x0, 0x9, 0x7ff, 0x8c01, 0x3, 0xfffffc01, 0x9, 0x8adb, 0x0, 0x80, 0x400, 0x800, 0x0, 0xc2, 0x3, 0x3, 0x1, 0x40, 0x80000000, 0x15, 0x8, 0xffffffff, 0x8efc, 0x4, 0xad3, 0x7, 0x2, 0xe339, 0x8, 0xddf, 0xf, 0xb, 0x0, 0x9, 0x1, 0x6, 0x1, 0x3, 0x1, 0x8, 0x100, 0x10, 0x5a0f, 0x1ff, 0x7f, 0x8, 0x0, 0x8, 0xe, 0x97ab, 0x8, 0x0, 0xa0000000, 0x1, 0x800, 0x6, 0xbde3, 0x8, 0x4, 0xc74f, 0x5, 0x10000, 0x8, 0x4, 0x8, 0x5, 0x7fffffff, 0x3, 0xa2f6, 0x400, 0x5, 0xfffffffe, 0x81, 0x4, 0x80000001, 0x5, 0xd8, 0x3, 0x4, 0x5, 0x7, 0x8, 0x3, 0x8, 0x80000001, 0x5, 0x7, 0xf, 0xfffff38e, 0x191, 0xff, 0x80000000, 0x9, 0x2, 0x9, 0x2, 0x7, 0x1, 0x2e, 0x6a3b, 0x3, 0x0, 0xe68, 0xf, 0xe6d3, 0xd, 0xa3f, 0x0, 0x328, 0x80, 0x0, 0x3, 0x4, 0xb, 0x8, 0x10000, 0x1ff, 0x9, 0x9, 0x0, 0x1, 0xbe, 0x2, 0x80000000, 0x8001, 0x3, 0xa, 0x7f, 0x8, 0x7, 0xffffff66, 0x8, 0x82b, 0x7, 0x7, 0x5, 0x8001, 0x6, 0x5, 0x7ff, 0x7f, 0x2, 0x8, 0x0, 0xffffffff, 0xfc000000, 0x7ff, 0x5c4, 0x8, 0x21ac, 0xf7, 0x9, 0xfffffffc, 0x5, 0x101, 0xfffffffc, 0x5, 0xd7, 0x0, 0x4, 0x8, 0x101, 0x7, 0x80000001, 0x9, 0xfff, 0x1, 0x7, 0x0, 0x6, 0x4, 0x1, 0x356, 0x10000, 0x2, 0x7, 0x2, 0x98, 0xc6, 0x0, 0xffffffff, 0x1, 0x40, 0x24f, 0x185, 0x1, 0xfffffff7, 0x7f, 0xfffffff8, 0x800, 0xc3e, 0x0, 0xfffffffb, 0x3, 0x5, 0x79445920, 0x8ee, 0x5, 0x5, 0x15d7, 0x2, 0x4, 0x92f, 0xac2, 0x3, 0x7, 0x5, 0xc9c, 0x7f, 0xf, 0x1, 0x9, 0x2, 0x0, 0xfffffffd, 0x8, 0x1, 0x3, 0x3, 0xc, 0x8, 0x9, 0x6, 0x6, 0x1c2, 0x7fffffff, 0x9, 0x6, 0x7, 0x1, 0x4, 0x0, 0xfffffff9, 0x8, 0x200, 0x3, 0x1, 0x8001, 0x6, 0x80, 0xff, 0x4, 0x6, 0x5c4ac547, 0x2, 0x2, 0x5, 0x10000, 0x3ff, 0x6, 0x70, 0x48, 0x5, 0xfffffff9, 0xe, 0xe, 0x7, 0x8f7, 0x74e4, 0x5, 0xfffffffd, 0x10001, 0xe27, 0x7, 0x100, 0x1, 0x8001, 0x76b, 0x8000, 0x1ff, 0x3, 0x5, 0x0, 0x401, 0x8, 0x1, 0xd9e, 0x3, 0x1, 0x7bd, 0x5, 0x0, 0x4, 0x9, 0x7fffffff, 0x4, 0x81, 0x0, 0x4, 0x2, 0xf4f6, 0xcd, 0xc3, 0x0, 0x1000, 0x8, 0x9d8, 0xffffffc1, 0x7, 0x3, 0x7f, 0x7fffffff, 0xd, 0xe32, 0x8, 0x54d, 0x8, 0x8001, 0x7ff, 0x8, 0x0, 0xfffff801, 0xb, 0xdcf, 0x9, 0x1c0000, 0x7, 0x8, 0x8, 0x0, 0x101, 0x2, 0x6, 0x1cdb91d2, 0x1, 0x3, 0x6, 0x401, 0x8000, 0x7ca3, 0x5, 0xfffffff7, 0x9, 0xb, 0x4, 0x770e, 0x76, 0xfffffff9, 0x400, 0x5, 0x7, 0x4, 0x5, 0x8001, 0x1, 0x2, 0x7, 0x7, 0x400, 0x9, 0x92, 0x6e, 0x10000, 0x2, 0x5, 0x2, 0x1, 0x7f80000, 0x1, 0xd3, 0x2, 0x4, 0x6, 0xffff, 0x81, 0x6, 0x4, 0x4, 0x6, 0xfffffff6, 0xfffffffc, 0x5, 0x1, 0x5, 0x9, 0x3, 0x374, 0x4, 0x10000, 0xfe000000, 0xfff, 0x3, 0x2, 0xffffffff, 0x9, 0x80000000, 0x6, 0xb7b, 0x5, 0x1000, 0xc000000, 0x7, 0x0, 0xe0000000, 0x1ff, 0x800, 0x2, 0x1, 0x8, 0x100, 0x9, 0x4, 0x3ff, 0x8f, 0x64f, 0x295, 0x6, 0x7, 0x6, 0x40, 0x7, 0x4, 0xb, 0xffffffff, 0x2, 0x2, 0x6, 0x9, 0x0, 0x32, 0xfff, 0x5, 0xd, 0x2, 0x9, 0x4, 0x81, 0x3, 0x2, 0x7a, 0x4, 0x7f, 0x9, 0xffffff80, 0x1, 0x70d1, 0x7d, 0x6c8c0999, 0x0, 0x1, 0xb, 0xffff8000, 0x52, 0x401, 0xfffffff6, 0x1ff, 0x9, 0x8, 0x3, 0x0, 0x7fff, 0xaa2, 0x4, 0x3, 0x7ff, 0x7fff, 0x0, 0x8650, 0x5, 0x7, 0x5, 0x6, 0x8, 0x8, 0x3ff, 0x7ff, 0x2efd2752, 0x1, 0x4, 0x0, 0x8000, 0x0, 0xffffffb2, 0x3, 0x6, 0x9, 0xfffffd9d, 0x1, 0xfffffff9, 0x1000, 0xff, 0xfff, 0x7fffffff, 0x800, 0x7, 0xffffffff, 0x200, 0x3, 0x9, 0x0, 0x5, 0x0, 0xda09, 0x6, 0x0, 0x101, 0x101, 0xa, 0x6, 0x1, 0x5, 0x8000, 0x9, 0x8000, 0x7a, 0x5, 0xa951, 0x5, 0x3, 0x8, 0x4, 0x3f8c, 0x5, 0x7f, 0x9, 0x6, 0x8, 0x0, 0x10000, 0x297d988a, 0xfdd, 0x4, 0xc, 0x240, 0x3ff, 0x6, 0x9, 0x1, 0xf, 0x2, 0x8, 0x3, 0xfffffff9, 0xa61, 0x7f, 0x1800, 0x7, 0x1918, 0x57d9, 0x668, 0x52a, 0xc000, 0x9, 0x9, 0xfffffffc, 0x47, 0x7, 0x8, 0xd02a, 0x5, 0x0, 0x6c96, 0x1, 0x8, 0x6, 0x4, 0x5, 0x64f, 0x0, 0x7fff, 0x4, 0x58cb, 0xfffffffb, 0xcd, 0x0, 0x4, 0xf, 0xd, 0x4, 0x9, 0x400, 0x2, 0x2, 0x9, 0x3ff, 0x3, 0xd, 0x6f6, 0x1ff, 0x8, 0x1, 0x6, 0x8, 0x3ff, 0x1ff, 0xb3, 0x9, 0x7, 0x8, 0xffffffff, 0x9, 0x0, 0x6, 0x9, 0x1, 0x1ff, 0x3, 0x6, 0x0, 0x5, 0x4, 0x5, 0x80, 0x5, 0x3, 0x6, 0x4, 0x7, 0x5, 0x8, 0xec4, 0x40, 0x8001, 0x10000, 0x4, 0x9b4, 0x5, 0x1, 0x101, 0x2, 0x3, 0xfffff801, 0x10001, 0x0, 0x3, 0x6, 0xf, 0x8, 0x8001, 0x1, 0x7fffffff, 0x8, 0x8, 0xfffffffb, 0xffffffff, 0x5, 0x1000, 0x2, 0x7, 0x2, 0x1, 0x3ff, 0x3, 0x40000000, 0x3, 0x3, 0x95f, 0x1, 0xb68, 0x8, 0xc00000, 0x80000001, 0x8, 0xf5, 0x80000001, 0x6, 0xf9ca, 0x6, 0x7, 0x0, 0x2, 0xe7, 0xfffffff1, 0x3, 0x1, 0x2, 0x5, 0x0, 0x9, 0x32f4184e, 0x2, 0xa, 0x7, 0x100, 0x7, 0x7, 0x5, 0xc, 0x3, 0x9, 0x9, 0x6, 0x5, 0x0, 0xd, 0x101, 0xe07, 0x8, 0x2, 0x7, 0x0, 0xd43e, 0x2, 0x5, 0xffffffff, 0xd71, 0x89e, 0x101, 0x2, 0xf, 0x8, 0x3, 0x8, 0xffffffff, 0x8, 0xfffffff9, 0x3, 0x1, 0x6, 0x80000000, 0x3, 0x6edd860, 0x3, 0x79, 0x9, 0x8, 0x40, 0x1000, 0x8, 0x5, 0x5, 0x8a3e, 0xe, 0x80000000, 0x5, 0x5, 0x7, 0x7, 0x101, 0x777, 0x95, 0x9, 0x5, 0x3a2a6418, 0x9, 0x7, 0x8, 0x6, 0xe4, 0x3ff, 0x8, 0x8000, 0x200, 0x0, 0x2, 0x1, 0x2, 0x1ff, 0xa, 0x7ce6fda2, 0x400, 0x3, 0x2, 0x99da, 0x9, 0x5e7f, 0xff, 0x7, 0x8001, 0x3, 0x6, 0x8408, 0x0, 0x8000, 0x10, 0x1, 0x8, 0x9, 0x3, 0xe4, 0x3, 0xfffffffa, 0x2, 0x3ff, 0xcb93, 0x8, 0x4, 0x5, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x7, 0x12, 0x5, 0xffffffff, 0x7fff, 0xe4, 0x1, 0x9, 0x4, 0x7ff, 0xd, 0x92ac, 0x9, 0xff, 0x4, 0x7, 0x1, 0x8000, 0xcaa0, 0x7, 0x5, 0x1, 0x2, 0x5, 0x7, 0x1, 0x3, 0x1, 0x4, 0xfffffbfc, 0x5, 0x48, 0x2, 0x7, 0x47, 0x3, 0xaad, 0x7, 0xfffffff7, 0xfffffffb, 0x7c3, 0x1, 0x8, 0x2, 0x9, 0x200, 0x2, 0x5, 0x9, 0x800, 0x100, 0x4, 0x401, 0x21d9d797, 0xac, 0x30, 0x10001, 0x1, 0x2, 0x3, 0x9, 0x2, 0x0, 0x80000000, 0x7, 0x9, 0x2, 0x7ff, 0x3, 0xeac5, 0x8, 0x7, 0x3, 0x9, 0x9, 0x7, 0x49a99dc0, 0x7, 0x200, 0x2dc8ad53, 0x3ff, 0xc, 0x5, 0x3, 0x3, 0x5, 0x5, 0x9, 0x9, 0x3, 0xec, 0x5, 0x6, 0x2, 0x9, 0x0, 0x7, 0x50, 0x7, 0x7, 0xd1, 0x9, 0x2, 0x6, 0x0, 0x0, 0x3, 0x7, 0xff, 0x3, 0x100, 0xe03, 0xf, 0x8, 0x550e07d5, 0x9, 0x2, 0x8, 0x80000001, 0x2, 0x6, 0x4b, 0x10, 0x8, 0x100, 0x2, 0x3, 0x1, 0xc0da, 0x3, 0x74, 0x0, 0x3, 0x7, 0xbd9a, 0x8, 0x401, 0xfc9, 0x3, 0x1000, 0x5d, 0x1, 0xfffffffb, 0x2844, 0x2, 0x6, 0x0, 0x4, 0x8000, 0x80e, 0x9, 0x3, 0x1, 0x80, 0x4, 0x6, 0xd3c, 0x0, 0x0, 0x4, 0x2, 0x7], 0x8, 0x4}]}) 3.056507384s ago: executing program 3 (id=847): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) (fail_nth: 64) 2.699263885s ago: executing program 3 (id=848): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/70, 0x46, 0x2b) (async) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) (async) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000000)={0x20, 0x6, 0x0, "da43f1b3f678a14d4f92217488c74d536fd61d3cb53a25ae10519f6fe11df04beae89a"}, 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x1, 0xffffffffffffff11, "b1a995ab3dc036ebec22cc69599154d9bfc34b5e59c0e81370a916f87c939c3a18a3a88337f04f98ea79ee482723efaf41172c28d93c3cb86eea3f7207289438884a602d36b642cc55869f047635f795d3e1d3ca20b32c16b50f5b713f1186d5e18a329fc9bef685b624368c75925ff4aa0c3bf1d83467c5957bdc49091e9108cf113e5d75ba5f70b30a8c3a277196ca94d54550b68dfe3527d805d9a0b736659b"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x9}}) 2.182181403s ago: executing program 1 (id=850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x88, r1, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x10001}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (fail_nth: 5) 2.117681388s ago: executing program 3 (id=851): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a09058103", @ANYRESOCT], 0x0) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') (async) chmod(&(0x7f0000000100)='./file0\x00', 0x38c) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000100), 0xfefffffa, 0x165400) 1.719835618s ago: executing program 5 (id=852): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b00)="98", 0x1}], 0x1, 0x0, 0x15}}], 0x1, 0x4) 1.665967684s ago: executing program 1 (id=853): setreuid(0x0, 0xee00) r0 = socket$inet6(0xa, 0x1, 0xfffffffc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0xe9db8df3, @local, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$sock_linger(r2, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001, 0xbc5e}, 0x51) 1.494162732s ago: executing program 1 (id=854): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$uac1(0x3, 0xee, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xb7, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x6, 0xb0, 0x8b, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x15, 0xd}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x5, "845b711eb0b2"}, @extension_unit={0xd, 0x24, 0x8, 0x5, 0x7, 0x3, "2ba32bde2f65"}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x1, 0x6, [0x9, 0x2, 0x4, 0x8, 0x8, 0x2], 0x7}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0xdc, "5df393b9ea80"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x2, 0x10, "7cb9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x1, 0x4}, @as_header={0x7, 0x24, 0x1, 0x0, 0x1, 0x3}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7f, 0x10, 0x2, "838370f9"}, @as_header={0x7, 0x24, 0x1, 0xfc, 0x2, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0xe, 0xd9, "b3380cf9e0fa"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xb, 0x1, 0x0, {0x7, 0x25, 0x1, 0x1, 0xf3, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0x9, 0x1, "afe9bbd1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x40, 0x5, 0x10, {0x7, 0x25, 0x1, 0x81, 0xfb, 0x4}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0xfb, 0x5, 0x3, 0x10, 0xb}, 0x36, &(0x7f00000001c0)={0x5, 0xf, 0x36, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xa, 0xcb, 0xe}, @ssp_cap={0x20, 0x10, 0xa, 0xc, 0x5, 0x1, 0x0, 0x7, [0xffc000, 0xc0, 0x3f00, 0x0, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x9}]}, 0x6, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x446}}, {0xfc, &(0x7f0000000440)=@string={0xfc, 0x3, "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"}}, {0x74, &(0x7f0000000540)=@string={0x74, 0x3, "82becc849e8442fdcd73e9de366b29d312a1632faebe7779669e10629a226afba8963f88f6891b0dd160625d51bebfd5225a6231a46d3a4f2f6ae04abe56ad440da93f6df67d1280bfe78cec54a6e58860af3d30e1b516e6588a6920fb0d99d5682d1f773b3502e48e7e91357ae368b3e909"}}, {0x69, &(0x7f00000005c0)=@string={0x69, 0x3, "b57cced4dcb4bc10c6d2b081f96c942aa6a3e45882f9efcbee6a413ff7c24f2610a0934821043d69433d71f2d82315fcaa8b2c07d2e3f168d40ec7b70357bff2dcd6c1ce2a6af1680637d8087b140bf6a03618f15437590ddf0517413cf0d152b16bf701864f26"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x420}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x6, 0x119, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x7d, 0x68, 0xa5, 0x8, 0x830, 0x20, 0x3930, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x2, 0xd4, 0x3, 0x80, 0x65, [{{0x9, 0x4, 0x85, 0x67, 0x3, 0x86, 0xed, 0x63, 0xe, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x25f2, 0xffff, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x8, 0xff}]}], [{{0x9, 0x5, 0x1, 0x4, 0x40, 0xff, 0xf, 0x1, [@generic={0x5d, 0xe, "a4e0549f88d4f0fef9a3b66e2ef84d1d8b1b8f9eaf4a5b3f7e7afaa8e25a3995420a72cd3da87213c2315e84d522b518ae0e79ba0db2c0f840f8c89693ba2a5b18f08da1df46bceff5a70cda0a0d82344457d4203eaf9fb24bcace"}, @generic={0x2d, 0x8, "4b241e0a594fd610f10e86a1ee273271ae287f977b90042800ef709510d8ebeb6264013d08c42e82002fd0"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x5, 0x80, 0x9}}, {{0x9, 0x5, 0x6, 0x1c, 0x10, 0x4, 0x1, 0xe6}}]}}, {{0x9, 0x4, 0xb, 0xff, 0x1, 0xea, 0x27, 0x66, 0x6, [], [{{0x9, 0x5, 0xc, 0x14, 0x20, 0x6, 0xba, 0x6, [@generic={0x20, 0x22, "16d9803bb2929c123899957db435a968424d516e7f090840fb37b0311919"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="202315"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x482841, 0x4, 0x1e}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0x0, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x0, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x7ffc, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x5, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x3, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x404f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xfff, 0xa2, 0xb, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0xfffffffd, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x1, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x60a5, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r2, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d80)={0x0, 0xc, 0x4a, "4ee2c3cfe95e8cca34f6ba73bccd0e230c369b430057bae746d2c5bbbb0bf660391de16050740c8a545e8c775c65125e4b70ef4a73284d326f1471b31143be6b1bf2aed5348d924fb2ed"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000ec0)={0x20, 0x1, 0x7e, "5439211ac2af051e0afd68f693a92f6c0762816b542109da5e659211d067b8d920d8c60fcc82df38a24d3b0aad488161d596ed3e88884300b01dc239f4f30040a1daf66bf474f4dcbb6f0b530e091e1a9302085cb8f575c6b42f4baa698c1df6c79b350d4d3a977c9554a8e5ec764c4f261d13c043ad4fcb824931309479"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0x5}}) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000740)=0x5) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 747.162267ms ago: executing program 5 (id=855): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0x10002}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}, 0xf401}], 0x2, 0x20080058) connect$inet6(r0, 0x0, 0x0) 627.637684ms ago: executing program 5 (id=856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c000780060004401c020000060005401c02000008000640"], 0x64}, 0x1, 0x100000000000000, 0x0, 0x44008881}, 0x0) 500.325532ms ago: executing program 5 (id=857): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0x20}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x8, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xedc0, 0x5, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000002, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6e, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x8000000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0xfffffffc, 0xfffffffe], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x0, 0x0, 0x200, 0x0, 0x0, 0x8000000, 0x40, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000bbdabbbbbbbbaaaaaaaaaaaa08060001080006041c01"], 0x2e) 500.205829ms ago: executing program 3 (id=858): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 211.143058ms ago: executing program 5 (id=859): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {"0007ff9d00"}, 0x0, 0x40000000, 0x8}}}, 0x118) 0s ago: executing program 5 (id=860): syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESOCT=0x0, @ANYRES8=0x0], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000500)={0x52, 0x26, 0x217, {0x7, 0xcac}, {0x7ffc, 0x7}, @period={0x59, 0x166a, 0x0, 0xc, 0xa, {0x1, 0x1, 0x2, 0x800}, 0x0, 0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x33) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x24}, @l2cap_cid_signaling={{0x20}, [@l2cap_disconn_req={{0x6, 0x1e, 0x4}, {0x800, 0x8}}, @l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x4, 0xfad0}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x3, 0x1}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x401, 0x6}}]}}, 0x29) kernel console output (not intermixed with test programs): T7698] ? __lock_acquire+0xab9/0xd20 [ 213.432024][ T7698] ? ovl_iterate+0xcb2/0x2110 [ 213.432059][ T7698] ovl_iterate+0xd75/0x2110 [ 213.432112][ T7698] ? __pfx_ovl_iterate+0x10/0x10 [ 213.432145][ T7698] ? aa_file_perm+0x139/0x1540 [ 213.432174][ T7698] ? aa_file_perm+0x139/0x1540 [ 213.432213][ T7698] ? __lock_acquire+0xab9/0xd20 [ 213.432246][ T7698] ? wrap_directory_iterator+0x5a/0xe0 [ 213.432288][ T7698] ? down_write+0x162/0x1f0 [ 213.432304][ T7698] ? __pfx_down_write+0x10/0x10 [ 213.432329][ T7698] ? wrap_directory_iterator+0x52/0xe0 [ 213.432355][ T7698] ? __pfx_ovl_iterate+0x10/0x10 [ 213.432381][ T7698] wrap_directory_iterator+0x96/0xe0 [ 213.432410][ T7698] iterate_dir+0x399/0x570 [ 213.432440][ T7698] ovl_dir_read+0x13f/0x560 [ 213.432472][ T7698] ? __pfx_ovl_dir_read+0x10/0x10 [ 213.432494][ T7698] ? ovl_path_upper+0x105/0x170 [ 213.432518][ T7698] ? ovl_path_next+0x23c/0x470 [ 213.432542][ T7698] ovl_dir_read_merged+0x2b8/0x4b0 [ 213.432570][ T7698] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 213.432609][ T7698] ? __pfx_ovl_fill_merge+0x10/0x10 [ 213.432651][ T7698] ? __kasan_kmalloc+0x93/0xb0 [ 213.432677][ T7698] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 213.432698][ T7698] ? ovl_iterate+0xcb2/0x2110 [ 213.432720][ T7698] ? __lock_acquire+0xab9/0xd20 [ 213.432744][ T7698] ovl_iterate+0xd75/0x2110 [ 213.432791][ T7698] ? __pfx_ovl_iterate+0x10/0x10 [ 213.432819][ T7698] ? aa_file_perm+0x139/0x1540 [ 213.432843][ T7698] ? aa_file_perm+0x139/0x1540 [ 213.432876][ T7698] ? __lock_acquire+0xab9/0xd20 [ 213.432906][ T7698] ? wrap_directory_iterator+0x5a/0xe0 [ 213.432946][ T7698] ? down_write+0x162/0x1f0 [ 213.432962][ T7698] ? __pfx_down_write+0x10/0x10 [ 213.432989][ T7698] ? wrap_directory_iterator+0x52/0xe0 [ 213.433019][ T7698] ? __pfx_ovl_iterate+0x10/0x10 [ 213.433049][ T7698] wrap_directory_iterator+0x96/0xe0 [ 213.433081][ T7698] iterate_dir+0x399/0x570 [ 213.433115][ T7698] __se_sys_getdents64+0xe4/0x260 [ 213.433144][ T7698] ? __pfx___se_sys_getdents64+0x10/0x10 [ 213.433166][ T7698] ? ksys_write+0x22a/0x250 [ 213.433180][ T7698] ? __pfx_filldir64+0x10/0x10 [ 213.433206][ T7698] ? __pfx_ksys_write+0x10/0x10 [ 213.433227][ T7698] ? do_syscall_64+0xbe/0xfa0 [ 213.433277][ T7698] do_syscall_64+0xfa/0xfa0 [ 213.433299][ T7698] ? irqentry_exit+0x10f/0x640 [ 213.433320][ T7698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.433336][ T7698] ? clear_bhb_loop+0x60/0xb0 [ 213.433357][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.433372][ T7698] RIP: 0033:0x7fdffeb8f6c9 [ 213.433389][ T7698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.433404][ T7698] RSP: 002b:00007fdffcdf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 213.433424][ T7698] RAX: ffffffffffffffda RBX: 00007fdffede5fa0 RCX: 00007fdffeb8f6c9 [ 213.433437][ T7698] RDX: 000000000000ff56 RSI: 0000200000000580 RDI: 0000000000000003 [ 213.433447][ T7698] RBP: 00007fdffcdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.433458][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.433468][ T7698] R13: 00007fdffede6038 R14: 00007fdffede5fa0 R15: 00007ffe37c8fa68 [ 213.433500][ T7698] [ 213.987917][ T7676] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 214.002350][ T5915] usb 2-1: USB disconnect, device number 45 [ 214.004762][ T7676] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.076086][ T7676] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.193715][ T7676] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.266853][ T50] bridge_slave_1: left allmulticast mode [ 214.274314][ T50] bridge_slave_1: left promiscuous mode [ 214.282891][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.298093][ T50] bridge_slave_0: left allmulticast mode [ 214.306352][ T50] bridge_slave_0: left promiscuous mode [ 214.315079][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.429563][ T5912] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 214.517274][ T7712] raw_sendmsg: syz.2.641 forgot to set AF_INET. Fix it! [ 214.534697][ T7712] Mount JFS Failure: -5 [ 214.593969][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.612314][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.642272][ T5912] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 214.657283][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.684048][ T5912] usb 4-1: config 0 descriptor?? [ 214.862127][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.875635][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.887784][ T50] bond0 (unregistering): Released all slaves [ 214.906264][ T7703] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.637'. [ 215.029515][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 215.129561][ T52] Bluetooth: hci4: command tx timeout [ 215.141486][ T7727] FAULT_INJECTION: forcing a failure. [ 215.141486][ T7727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 215.179585][ T24] usb 3-1: device descriptor read/64, error -71 [ 215.195810][ T7727] CPU: 1 UID: 0 PID: 7727 Comm: syz.1.645 Not tainted syzkaller #0 PREEMPT(full) [ 215.195837][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.195856][ T7727] Call Trace: [ 215.195865][ T7727] [ 215.195874][ T7727] dump_stack_lvl+0x189/0x250 [ 215.195904][ T7727] ? __pfx____ratelimit+0x10/0x10 [ 215.195931][ T7727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.195955][ T7727] ? __pfx__printk+0x10/0x10 [ 215.195981][ T7727] ? fs_reclaim_acquire+0x7d/0x100 [ 215.196019][ T7727] should_fail_ex+0x414/0x560 [ 215.196055][ T7727] prepare_alloc_pages+0x22b/0x650 [ 215.196091][ T7727] __alloc_frozen_pages_noprof+0x123/0x370 [ 215.196124][ T7727] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 215.196164][ T7727] ? policy_nodemask+0x27c/0x720 [ 215.196200][ T7727] alloc_pages_mpol+0x232/0x4a0 [ 215.196235][ T7727] vma_alloc_folio_noprof+0xe4/0x200 [ 215.196267][ T7727] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 215.196294][ T7727] ? __pfx___might_resched+0x10/0x10 [ 215.196321][ T7727] ? percpu_ref_put+0xf9/0x180 [ 215.196351][ T7727] mfill_atomic_pte_copy+0x8b/0x3d0 [ 215.196377][ T7727] ? mm_alloc_pmd+0x246/0x410 [ 215.196402][ T7727] mfill_atomic_copy+0x51d/0x14a0 [ 215.196442][ T7727] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 215.196480][ T7727] userfaultfd_ioctl+0x2a01/0x4c80 [ 215.196509][ T7727] ? __se_sys_ioctl+0x47/0x170 [ 215.196533][ T7727] ? do_syscall_64+0xfa/0xfa0 [ 215.196558][ T7727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.196586][ T7727] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 215.196642][ T7727] ? kasan_quarantine_put+0xdd/0x220 [ 215.196667][ T7727] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.196706][ T7727] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 215.196731][ T7727] ? do_vfs_ioctl+0xbe8/0x1430 [ 215.196757][ T7727] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 215.196779][ T7727] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 215.196855][ T7727] ? __fget_files+0x2a/0x420 [ 215.196884][ T7727] ? __fget_files+0x3a0/0x420 [ 215.196905][ T7727] ? __fget_files+0x2a/0x420 [ 215.196930][ T7727] ? bpf_lsm_file_ioctl+0x9/0x20 [ 215.196958][ T7727] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 215.196981][ T7727] __se_sys_ioctl+0xfc/0x170 [ 215.197011][ T7727] do_syscall_64+0xfa/0xfa0 [ 215.197039][ T7727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.197057][ T7727] ? clear_bhb_loop+0x60/0xb0 [ 215.197082][ T7727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.197101][ T7727] RIP: 0033:0x7f352bb8f6c9 [ 215.197121][ T7727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.197138][ T7727] RSP: 002b:00007f352c9fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.197161][ T7727] RAX: ffffffffffffffda RBX: 00007f352bde5fa0 RCX: 00007f352bb8f6c9 [ 215.197176][ T7727] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 215.197189][ T7727] RBP: 00007f352c9fd090 R08: 0000000000000000 R09: 0000000000000000 [ 215.197202][ T7727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.197214][ T7727] R13: 00007f352bde6038 R14: 00007f352bde5fa0 R15: 00007ffe65e2c3d8 [ 215.197248][ T7727] [ 215.771691][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 215.921671][ T24] usb 3-1: device descriptor read/64, error -71 [ 215.947943][ T50] hsr_slave_0: left promiscuous mode [ 216.025988][ T50] hsr_slave_1: left promiscuous mode [ 216.040005][ T24] usb usb3-port1: attempt power cycle [ 216.047954][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.076996][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.111137][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.142887][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.218823][ T50] veth1_macvtap: left promiscuous mode [ 216.231043][ T50] veth0_macvtap: left promiscuous mode [ 216.238561][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 216.238605][ T30] audit: type=1326 audit(1762530864.598:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 216.271587][ T50] veth1_vlan: left promiscuous mode [ 216.280171][ T50] veth0_vlan: left promiscuous mode [ 216.291535][ T30] audit: type=1326 audit(1762530864.598:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 216.354989][ T30] audit: type=1326 audit(1762530864.638:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 216.391782][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 216.419787][ T30] audit: type=1326 audit(1762530864.638:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 216.419991][ T24] usb 3-1: device descriptor read/8, error -71 [ 216.519283][ T30] audit: type=1326 audit(1762530864.648:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 216.544378][ T30] audit: type=1326 audit(1762530864.648:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 216.581016][ T30] audit: type=1326 audit(1762530864.648:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 216.605164][ T30] audit: type=1326 audit(1762530864.658:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 216.634781][ T30] audit: type=1326 audit(1762530864.678:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 216.662235][ T30] audit: type=1326 audit(1762530864.678:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 216.789304][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 216.850611][ T24] usb 3-1: device descriptor read/8, error -71 [ 216.959993][ T24] usb usb3-port1: unable to enumerate USB device [ 217.211196][ T52] Bluetooth: hci4: command tx timeout [ 217.535275][ T5912] usbhid 4-1:0.0: can't add hid device: -71 [ 217.551121][ T5912] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 217.562038][ T50] team0 (unregistering): Port device team_slave_1 removed [ 217.574988][ T5912] usb 4-1: USB disconnect, device number 48 [ 217.601510][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 217.652747][ T50] team0 (unregistering): Port device team_slave_0 removed [ 218.037420][ T5912] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 218.199920][ T7676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.229121][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.267032][ T5912] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 218.277338][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.309275][ T5912] usb 4-1: config 0 descriptor?? [ 218.347368][ T7676] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.402463][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.409944][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.464241][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.471741][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.526484][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.557713][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.826999][ T5912] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 218.929561][ T5912] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0024/input/input50 [ 219.023987][ T7752] netlink: 96 bytes leftover after parsing attributes in process `syz.3.650'. [ 219.244113][ T5912] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 219.290495][ T52] Bluetooth: hci4: command tx timeout [ 219.297012][ T7676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.681087][ T5915] usb 4-1: USB disconnect, device number 49 [ 220.119345][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 220.188848][ T5912] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 220.266798][ T7676] veth0_vlan: entered promiscuous mode [ 220.304967][ T7676] veth1_vlan: entered promiscuous mode [ 220.308782][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 220.318718][ T24] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 220.341501][ T24] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 220.358234][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.379930][ T24] usb 2-1: Product: syz [ 220.384764][ T24] usb 2-1: Manufacturer: syz [ 220.401417][ T7810] netlink: 'syz.3.662': attribute type 10 has an invalid length. [ 220.408883][ T24] usb 2-1: SerialNumber: syz [ 220.414397][ T7676] veth0_macvtap: entered promiscuous mode [ 220.427675][ T5912] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 220.437554][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.458591][ T24] usb 2-1: config 0 descriptor?? [ 220.467592][ T7676] veth1_macvtap: entered promiscuous mode [ 220.473873][ T5912] usb 3-1: Product: syz [ 220.479226][ T5912] usb 3-1: Manufacturer: syz [ 220.484770][ T5912] usb 3-1: SerialNumber: syz [ 220.493671][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 220.510050][ T24] usb 2-1: setting power ON [ 220.514896][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 220.523517][ T5912] usb 3-1: config 0 descriptor?? [ 220.560457][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.580337][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 220.598345][ T7676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.599004][ T24] usb 2-1: media controller created [ 220.640541][ T7676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.667089][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.684899][ T3562] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.696552][ T7801] dvb-usb: bulk message failed: -22 (3/0) [ 220.709659][ T3562] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.719730][ T7801] dvb-usb: bulk message failed: -22 (4/0) [ 220.725597][ T7801] cxusb: i2c read failed [ 220.745030][ T3562] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.769258][ T24] usb 2-1: selecting invalid altsetting 6 [ 220.775071][ T24] usb 2-1: digital interface selection failed (-22) [ 220.778247][ T3562] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.782977][ T5912] hso 3-1:0.0: Failed to find BULK IN ep [ 220.823658][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 220.862701][ T5912] usb-storage 3-1:0.0: USB Mass Storage device detected [ 220.881973][ T24] usb 2-1: setting power OFF [ 220.887024][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 220.912334][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 220.926204][ T24] (NULL device *): no alternate interface [ 221.096348][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.137017][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.198816][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.220207][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.278829][ T793] usb 3-1: USB disconnect, device number 46 [ 221.518676][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 221.700759][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 221.712549][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 221.728287][ T10] usb 4-1: config 179 has no interface number 0 [ 221.738593][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 221.758720][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 221.788558][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 221.830447][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 221.878228][ T10] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 221.909415][ T10] usb 4-1: config 179 interface 65 has no altsetting 0 [ 221.931844][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 221.958548][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.992498][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input51 [ 222.069164][ T5180] input input51: unable to receive magic message: -110 [ 222.141264][ T5180] input input51: unable to receive magic message: -32 [ 222.246221][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.289232][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.320449][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.379608][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.406388][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.436888][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.512656][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.543422][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.575220][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.613044][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.694417][ T10] usb 4-1: USB disconnect, device number 50 [ 222.701018][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 222.918563][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 222.973104][ T24] usb 2-1: USB disconnect, device number 46 [ 223.038803][ T5891] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 223.173879][ T7869] FAULT_INJECTION: forcing a failure. [ 223.173879][ T7869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.210086][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 223.217790][ T5891] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 223.230698][ T7869] CPU: 1 UID: 0 PID: 7869 Comm: syz.1.671 Not tainted syzkaller #0 PREEMPT(full) [ 223.230730][ T7869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.230742][ T7869] Call Trace: [ 223.230751][ T7869] [ 223.230759][ T7869] dump_stack_lvl+0x189/0x250 [ 223.230791][ T7869] ? __pfx____ratelimit+0x10/0x10 [ 223.230817][ T7869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.230842][ T7869] ? __pfx__printk+0x10/0x10 [ 223.230865][ T7869] ? __might_fault+0xb0/0x130 [ 223.230902][ T7869] should_fail_ex+0x414/0x560 [ 223.230937][ T7869] _copy_from_user+0x2d/0xb0 [ 223.230963][ T7869] blkpg_do_ioctl+0xd6/0x470 [ 223.230994][ T7869] ? __pfx_blkpg_do_ioctl+0x10/0x10 [ 223.231047][ T7869] ? __might_fault+0xb0/0x130 [ 223.231075][ T7869] blkdev_ioctl+0x6f9/0x710 [ 223.231105][ T7869] ? __pfx_blkdev_ioctl+0x10/0x10 [ 223.231129][ T7869] ? __fget_files+0x3a0/0x420 [ 223.231150][ T7869] ? __fget_files+0x2a/0x420 [ 223.231176][ T7869] ? bpf_lsm_file_ioctl+0x9/0x20 [ 223.231215][ T7869] ? __pfx_blkdev_ioctl+0x10/0x10 [ 223.231241][ T7869] __se_sys_ioctl+0xfc/0x170 [ 223.231273][ T7869] do_syscall_64+0xfa/0xfa0 [ 223.231302][ T7869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.231322][ T7869] ? clear_bhb_loop+0x60/0xb0 [ 223.231347][ T7869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.231366][ T7869] RIP: 0033:0x7f352bb8f6c9 [ 223.231385][ T7869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.231404][ T7869] RSP: 002b:00007f352c9fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.231427][ T7869] RAX: ffffffffffffffda RBX: 00007f352bde5fa0 RCX: 00007f352bb8f6c9 [ 223.231442][ T7869] RDX: 0000200000000040 RSI: 0000000000001269 RDI: 0000000000000003 [ 223.231456][ T7869] RBP: 00007f352c9fd090 R08: 0000000000000000 R09: 0000000000000000 [ 223.231468][ T7869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.231488][ T7869] R13: 00007f352bde6038 R14: 00007f352bde5fa0 R15: 00007ffe65e2c3d8 [ 223.231524][ T7869] [ 223.258491][ T5891] usb 3-1: config 179 has no interface number 0 [ 223.490506][ T5891] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 223.502214][ T5891] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 223.514691][ T5891] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 223.526497][ T5891] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 223.598453][ T5891] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 223.644911][ T5891] usb 3-1: config 179 interface 65 has no altsetting 0 [ 223.664143][ T5891] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 223.679401][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.726490][ T5891] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input52 [ 223.809121][ T5180] input input52: unable to receive magic message: -110 [ 223.881862][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 223.919619][ T5180] input input52: unable to receive magic message: -32 [ 224.032174][ T10] usb 3-1: USB disconnect, device number 47 [ 224.032257][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 224.078426][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 224.121397][ T24] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 224.180832][ T24] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 224.204372][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.231686][ T24] usb 4-1: Product: syz [ 224.250854][ T24] usb 4-1: Manufacturer: syz [ 224.266242][ T24] usb 4-1: SerialNumber: syz [ 224.291756][ T24] usb 4-1: config 0 descriptor?? [ 224.315962][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 224.340157][ T24] usb 4-1: setting power ON [ 224.344999][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 224.352637][ T793] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 224.384081][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.412019][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 224.428382][ T24] usb 4-1: media controller created [ 224.470357][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.504562][ T7878] dvb-usb: bulk message failed: -22 (3/0) [ 224.516680][ T7878] cxusb: i2c rd: len=112 is too big! [ 224.516680][ T7878] [ 224.529745][ T793] usb 2-1: Using ep0 maxpacket: 16 [ 224.540886][ T24] usb 4-1: selecting invalid altsetting 6 [ 224.555613][ T793] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 224.568456][ T24] usb 4-1: digital interface selection failed (-22) [ 224.575463][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 224.588519][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.607134][ T793] usb 2-1: Product: syz [ 224.617431][ T793] usb 2-1: Manufacturer: syz [ 224.622788][ T24] usb 4-1: setting power OFF [ 224.638567][ T793] usb 2-1: SerialNumber: syz [ 224.645258][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 224.654235][ T793] usb 2-1: config 0 descriptor?? [ 224.660805][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 224.671118][ T24] (NULL device *): no alternate interface [ 224.727284][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 224.750587][ T24] usb 4-1: USB disconnect, device number 51 [ 224.770127][ T6425] udevd[6425]: setting mode of /dev/bus/usb/004/051 to 020664 failed: No such file or directory [ 224.799339][ T6425] udevd[6425]: setting owner of /dev/bus/usb/004/051 to uid=0, gid=0 failed: No such file or directory [ 224.849430][ T7891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.676'. [ 224.875638][ T7891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'. [ 225.089100][ T793] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 225.110190][ T793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 225.135281][ T793] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 225.182063][ T793] usb 2-1: media controller created [ 225.226176][ T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.669074][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 225.830279][ T793] zl10353_read_register: readreg error (reg=127, ret==0) [ 225.835263][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.837711][ T793] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 225.861863][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 225.871940][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.885334][ T793] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 225.890108][ T10] usb 5-1: config 0 descriptor?? [ 225.950425][ T793] usb 2-1: USB disconnect, device number 47 [ 226.059520][ T793] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 226.147795][ T7901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.157483][ T7901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.386446][ T10] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 226.425336][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0025/input/input53 [ 226.558653][ T10] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 226.591210][ T7901] netlink: 96 bytes leftover after parsing attributes in process `syz.4.680'. [ 226.704045][ T7934] FAULT_INJECTION: forcing a failure. [ 226.704045][ T7934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.718663][ T5849] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 226.748092][ T7934] CPU: 1 UID: 0 PID: 7934 Comm: syz.3.689 Not tainted syzkaller #0 PREEMPT(full) [ 226.748124][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 226.748136][ T7934] Call Trace: [ 226.748145][ T7934] [ 226.748154][ T7934] dump_stack_lvl+0x189/0x250 [ 226.748185][ T7934] ? __pfx____ratelimit+0x10/0x10 [ 226.748221][ T7934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.748245][ T7934] ? __pfx__printk+0x10/0x10 [ 226.748270][ T7934] ? __might_fault+0xb0/0x130 [ 226.748306][ T7934] should_fail_ex+0x414/0x560 [ 226.748340][ T7934] _copy_from_user+0x2d/0xb0 [ 226.748365][ T7934] ___sys_sendmsg+0x158/0x2a0 [ 226.748396][ T7934] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.748463][ T7934] ? __fget_files+0x2a/0x420 [ 226.748486][ T7934] ? __fget_files+0x3a0/0x420 [ 226.748521][ T7934] __x64_sys_sendmsg+0x19b/0x260 [ 226.748551][ T7934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.748586][ T7934] ? __pfx_ksys_write+0x10/0x10 [ 226.748607][ T7934] ? do_syscall_64+0xbe/0xfa0 [ 226.748636][ T7934] do_syscall_64+0xfa/0xfa0 [ 226.748663][ T7934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.748683][ T7934] ? clear_bhb_loop+0x60/0xb0 [ 226.748707][ T7934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.748726][ T7934] RIP: 0033:0x7fdffeb8f6c9 [ 226.748744][ T7934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.748760][ T7934] RSP: 002b:00007fdffcdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.748783][ T7934] RAX: ffffffffffffffda RBX: 00007fdffede5fa0 RCX: 00007fdffeb8f6c9 [ 226.748798][ T7934] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 226.748811][ T7934] RBP: 00007fdffcdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 226.748823][ T7934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.748836][ T7934] R13: 00007fdffede6038 R14: 00007fdffede5fa0 R15: 00007ffe37c8fa68 [ 226.748869][ T7934] [ 227.035855][ C0] Mem-Info: [ 227.039084][ C0] active_anon:25682 inactive_anon:0 isolated_anon:0 [ 227.039084][ C0] active_file:17739 inactive_file:39984 isolated_file:0 [ 227.039084][ C0] unevictable:768 dirty:120 writeback:0 [ 227.039084][ C0] slab_reclaimable:10910 slab_unreclaimable:94870 [ 227.039084][ C0] mapped:27843 shmem:19653 pagetables:1293 [ 227.039084][ C0] sec_pagetables:0 bounce:0 [ 227.039084][ C0] kernel_misc_reclaimable:0 [ 227.039084][ C0] free:1300815 free_pcp:16820 free_cma:0 [ 227.086211][ C0] Node 0 active_anon:102728kB inactive_anon:0kB active_file:70956kB inactive_file:159736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111372kB dirty:476kB writeback:0kB shmem:77076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11596kB pagetables:5028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 227.086263][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 227.150455][ C0] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 227.181873][ C0] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 227.187822][ C0] Node 0 DMA32 free:1303016kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102728kB inactive_anon:0kB active_file:70956kB inactive_file:159736kB unevictable:1536kB writepending:476kB zspages:0kB present:3129332kB managed:2551448kB mlocked:0kB bounce:0kB free_pcp:49792kB local_pcp:32140kB free_cma:0kB [ 227.222882][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 227.228055][ C0] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.258073][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 227.262986][ C0] Node 1 Normal free:3884900kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17344kB local_pcp:10688kB free_cma:0kB [ 227.296894][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 227.301811][ C0] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 227.316951][ C0] Node 0 DMA32: 2589*4kB (UM) 1698*8kB (UM) 631*16kB (UME) 892*32kB (UME) 180*64kB (UME) 79*128kB (UME) 53*256kB (UM) 24*512kB (UM) 13*1024kB (UM) 4*2048kB (UE) 286*4096kB (UM) = 1303028kB [ 227.336936][ C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 227.348968][ C0] Node 1 Normal: 207*4kB (UME) 57*8kB (UME) 38*16kB (UME) 70*32kB (UME) 27*64kB (UME) 13*128kB (UME) 4*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3884900kB [ 227.369057][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.378972][ C0] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 227.388433][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.398444][ C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 227.408443][ C0] 77373 total pagecache pages [ 227.413557][ C0] 1 pages in swap cache [ 227.418036][ C0] Free swap = 124996kB [ 227.422224][ C0] Total swap = 124996kB [ 227.426577][ C0] 2097051 pages RAM [ 227.430590][ C0] 0 pages HighMem/MovableOnly [ 227.435475][ C0] 427419 pages reserved [ 227.439739][ C0] 0 pages cma reserved [ 227.490670][ T5849] usb 3-1: config 0 has no interfaces? [ 227.500517][ T5849] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 227.513001][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.533341][ T5849] usb 3-1: Product: syz [ 227.533367][ T5849] usb 3-1: Manufacturer: syz [ 227.533383][ T5849] usb 3-1: SerialNumber: syz [ 227.538695][ T5849] usb 3-1: config 0 descriptor?? [ 227.608083][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 227.764430][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.776417][ T24] usb 2-1: config 0 has no interface number 0 [ 227.781492][ T10] usb 5-1: USB disconnect, device number 2 [ 227.791056][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.947918][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.957928][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 227.967007][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.987965][ T24] usb 2-1: config 0 descriptor?? [ 228.404831][ T7936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.425208][ T7936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.436071][ T7936] program syz.1.691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.455031][ T24] prodikeys 0003:041E:2801.0026: collection stack underflow [ 228.462976][ T24] prodikeys 0003:041E:2801.0026: item 0 1 0 12 parsing failed [ 228.471470][ T24] prodikeys 0003:041E:2801.0026: hid parse failed [ 228.478391][ T24] prodikeys 0003:041E:2801.0026: probe with driver prodikeys failed with error -22 [ 228.494196][ T7954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.508959][ T7954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.657448][ T10] usb 2-1: USB disconnect, device number 48 [ 228.669268][ T5915] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 228.860008][ T5915] usb 5-1: unable to get BOS descriptor or descriptor too short [ 228.868494][ T5915] usb 5-1: not running at top speed; connect to a high speed hub [ 228.880104][ T5915] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.889611][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.898609][ T5915] usb 5-1: Product: syz [ 228.903083][ T5915] usb 5-1: Manufacturer: syz [ 228.907765][ T5915] usb 5-1: SerialNumber: syz [ 229.027845][ T5849] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 229.129589][ T5915] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 229.139239][ T5915] usb 5-1: unit 2 not found! [ 229.156011][ T5915] usb 5-1: USB disconnect, device number 3 [ 229.178353][ T5849] usb 4-1: Using ep0 maxpacket: 32 [ 229.188745][ T5849] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.209293][ T5849] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 229.218316][ T6425] udevd[6425]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.234835][ T5849] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.270837][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.281411][ T5849] usb 4-1: Product: syz [ 229.286249][ T5849] usb 4-1: Manufacturer: syz [ 229.291874][ T5849] usb 4-1: SerialNumber: syz [ 229.517764][ T24] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 229.544317][ T5849] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 229.602065][ T5915] usb 3-1: USB disconnect, device number 48 [ 229.607445][ T5849] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 229.664317][ T5849] usb 4-1: USB disconnect, device number 52 [ 229.688674][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.726301][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.751545][ T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 229.780792][ T6425] udevd[6425]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.788491][ T7971] CIFS: VFS: Malformed UNC in devname [ 229.798847][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.834465][ T24] usb 2-1: config 0 descriptor?? [ 229.987672][ T5915] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 230.053619][ T7964] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.701'. [ 230.110420][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 230.119477][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 230.143021][ T24] usb 2-1: USB disconnect, device number 49 [ 230.165039][ T5915] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 230.197154][ T7986] syzkaller0: entered allmulticast mode [ 230.197606][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.237636][ T5915] usb 3-1: config 0 has no interface number 0 [ 230.244087][ T5915] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 230.271996][ T5915] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 230.295674][ T5915] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 230.310071][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.320293][ T5915] usb 3-1: Product: syz [ 230.324970][ T5915] usb 3-1: Manufacturer: syz [ 230.332466][ T5915] usb 3-1: SerialNumber: syz [ 230.351210][ T5915] usb 3-1: config 0 descriptor?? [ 230.357243][ T7969] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.399865][ T5915] vmk80xx 3-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 230.422761][ T5915] vmk80xx 3-1:0.6: probe with driver vmk80xx failed with error -22 [ 230.777609][ T5915] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 230.947624][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 230.976534][ T5915] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 230.988343][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.996620][ T5915] usb 4-1: Product: syz [ 231.002638][ T5915] usb 4-1: Manufacturer: syz [ 231.009154][ T5915] usb 4-1: SerialNumber: syz [ 231.017282][ T5915] usb 4-1: config 0 descriptor?? [ 231.026391][ T5915] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 231.047652][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 231.230039][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.241861][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.252546][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 231.262271][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.274988][ T10] usb 2-1: config 0 descriptor?? [ 231.549622][ T5915] gspca_vc032x: reg_r err -110 [ 231.555020][ T5915] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 231.708187][ T10] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 231.725047][ T10] cp2112 0003:10C4:EA90.0027: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 231.906659][ T10] cp2112 0003:10C4:EA90.0027: Part Number: 0x82 Device Version: 0xFE [ 232.304682][ T5915] usb 4-1: USB disconnect, device number 53 [ 232.406110][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.714'. [ 232.425065][ T8003] /dev/nullb0: Can't open blockdev [ 232.524690][ T7999] cp2112 0003:10C4:EA90.0027: Error starting transaction: -38 [ 232.545335][ T10] cp2112 0003:10C4:EA90.0027: error reading lock byte: -71 [ 232.575914][ T10] usb 2-1: USB disconnect, device number 50 [ 232.687525][ T5891] usb 3-1: USB disconnect, device number 49 [ 233.077539][ T8025] netlink: 'syz.2.722': attribute type 10 has an invalid length. [ 233.085706][ T8025] netlink: 40 bytes leftover after parsing attributes in process `syz.2.722'. [ 233.437269][ T5891] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 233.497217][ T5849] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 233.589928][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.604019][ T5891] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 233.613709][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.625226][ T5891] usb 5-1: config 0 descriptor?? [ 233.647900][ T5849] usb 2-1: device descriptor read/64, error -71 [ 233.847705][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.861999][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.887438][ T5849] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 234.027633][ T5849] usb 2-1: device descriptor read/64, error -71 [ 234.089500][ T5891] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 234.123469][ T5891] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0028/input/input55 [ 234.153303][ T5849] usb usb2-port1: attempt power cycle [ 234.285445][ T5891] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 234.305239][ T8031] netlink: 96 bytes leftover after parsing attributes in process `syz.4.723'. [ 234.518302][ T5849] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 234.567323][ T5849] usb 2-1: device descriptor read/8, error -71 [ 234.571333][ C0] Mem-Info: [ 234.577407][ C0] active_anon:26114 inactive_anon:0 isolated_anon:0 [ 234.577407][ C0] active_file:17754 inactive_file:39989 isolated_file:0 [ 234.577407][ C0] unevictable:768 dirty:121 writeback:0 [ 234.577407][ C0] slab_reclaimable:10817 slab_unreclaimable:95571 [ 234.577407][ C0] mapped:27830 shmem:19651 pagetables:1340 [ 234.577407][ C0] sec_pagetables:0 bounce:0 [ 234.577407][ C0] kernel_misc_reclaimable:0 [ 234.577407][ C0] free:1301181 free_pcp:14967 free_cma:0 [ 234.577531][ C0] Node 0 active_anon:104456kB inactive_anon:0kB active_file:71016kB inactive_file:159756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111320kB dirty:480kB writeback:0kB shmem:77068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11772kB pagetables:5216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 234.577621][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 234.577700][ C0] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 234.577821][ C0] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 234.577879][ C0] Node 0 DMA32 free:1304480kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104456kB inactive_anon:0kB active_file:71016kB inactive_file:159756kB unevictable:1536kB writepending:480kB zspages:652kB present:3129332kB managed:2551448kB mlocked:0kB bounce:0kB free_pcp:42508kB local_pcp:23140kB free_cma:0kB [ 234.577999][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 234.578059][ C0] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.578177][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 234.578234][ C0] Node 1 Normal free:3884900kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17344kB local_pcp:10688kB free_cma:0kB [ 234.578342][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 234.578401][ C0] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 234.578661][ C0] Node 0 DMA32: 3202*4kB (UM) 1841*8kB (UM) 807*16kB (UME) 558*32kB (UME) 249*64kB (UME) 86*128kB (UME) 61*256kB (UM) 25*512kB (UM) 13*1024kB (UM) 3*2048kB (UE) 286*4096kB (UM) = 1304576kB [ 234.578940][ C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 234.579196][ C0] Node 1 Normal: 207*4kB (UME) 57*8kB (UME) 38*16kB (UME) 70*32kB (UME) 27*64kB (UME) 13*128kB (UME) 4*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3884900kB [ 234.579451][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.579476][ C0] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.579502][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.579525][ C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.579562][ C0] 77391 total pagecache pages [ 234.579571][ C0] 1 pages in swap cache [ 234.579587][ C0] Free swap = 124224kB [ 234.579595][ C0] Total swap = 124996kB [ 234.579613][ C0] 2097051 pages RAM [ 234.579621][ C0] 0 pages HighMem/MovableOnly [ 234.579642][ C0] 427419 pages reserved [ 234.579649][ C0] 0 pages cma reserved [ 234.818171][ T5849] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 234.851423][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 234.851444][ T30] audit: type=1326 audit(1762531139.226:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.3.733" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdffeb8f6c9 code=0x0 [ 235.029773][ T5849] usb 2-1: device descriptor read/8, error -71 [ 235.133270][ T8063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.733'. [ 235.258436][ T5849] usb usb2-port1: unable to enumerate USB device [ 235.299812][ T5849] usb 5-1: USB disconnect, device number 4 [ 235.300126][ C0] keytouch 0003:0926:3333.0028: usb_submit_urb(ctrl) failed: -19 [ 235.314987][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 235.753422][ T8076] netlink: 'syz.3.736': attribute type 10 has an invalid length. [ 235.788823][ T8076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.736'. [ 235.807515][ T8076] team0: entered promiscuous mode [ 235.813705][ T8076] team_slave_0: entered promiscuous mode [ 235.842351][ T8076] team_slave_1: entered promiscuous mode [ 235.879548][ T8076] team0: entered allmulticast mode [ 235.905616][ T8076] team_slave_0: entered allmulticast mode [ 235.906429][ T8082] IPVS: set_ctl: invalid protocol: 50 172.20.20.50:20003 [ 235.926779][ T8076] team_slave_1: entered allmulticast mode [ 235.934657][ T8076] bridge0: port 3(team0) entered blocking state [ 235.995044][ T8076] bridge0: port 3(team0) entered disabled state [ 236.038478][ T8076] bridge0: port 3(team0) entered blocking state [ 236.045192][ T8076] bridge0: port 3(team0) entered forwarding state [ 236.306881][ T793] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 236.460489][ T793] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 236.469437][ T793] usb 5-1: config 0 has no interface number 0 [ 236.475983][ T793] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 20, changing to 8 [ 236.526870][ T793] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 24720, setting to 1024 [ 236.556909][ T793] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 236.573757][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.613329][ T793] usb 5-1: config 0 descriptor?? [ 237.128752][ T793] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.0029/input/input56 [ 237.284589][ T793] holtek_kbd 0003:04D9:A055.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 237.347985][ T793] usb 5-1: USB disconnect, device number 5 [ 237.537812][ T8111] fido_id[8111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 237.704459][ T8116] nfs4: Unknown parameter 'tcpÿÿÿÿÿÿÿÿ\4>' [ 237.713942][ T8116] IPv6: Can't replace route, no match found [ 238.590279][ T24] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 238.770550][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 238.800330][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.822608][ T24] usb 3-1: Product: syz [ 238.836607][ T24] usb 3-1: Manufacturer: syz [ 238.846818][ T24] usb 3-1: SerialNumber: syz [ 238.860926][ T24] usb 3-1: config 0 descriptor?? [ 239.099420][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 239.478105][ T8151] netlink: 'syz.4.750': attribute type 10 has an invalid length. [ 239.496662][ T8151] netlink: 40 bytes leftover after parsing attributes in process `syz.4.750'. [ 239.531180][ T8151] team0: entered promiscuous mode [ 239.536933][ T8151] team_slave_0: entered promiscuous mode [ 239.542964][ T8151] team_slave_1: entered promiscuous mode [ 239.556716][ T8151] team0: entered allmulticast mode [ 239.562683][ T8151] team_slave_0: entered allmulticast mode [ 239.575635][ T8151] team_slave_1: entered allmulticast mode [ 239.584988][ T8151] bridge0: port 3(team0) entered blocking state [ 239.591715][ T8151] bridge0: port 3(team0) entered disabled state [ 239.608907][ T8151] bridge0: port 3(team0) entered blocking state [ 239.615525][ T8151] bridge0: port 3(team0) entered forwarding state [ 240.009896][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 240.209836][ T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 240.233514][ T10] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 240.244009][ T10] usb 4-1: Product: syz [ 240.248757][ T10] usb 4-1: Manufacturer: syz [ 240.261822][ T10] usb 4-1: SerialNumber: syz [ 240.270889][ T10] usb 4-1: config 0 descriptor?? [ 240.279503][ T10] ch341 4-1:0.0: ch341-uart converter detected [ 240.326688][ T5849] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 240.476638][ T793] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 240.499104][ T5849] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.509891][ T5849] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 240.519290][ T5849] usb 2-1: config 1 has no interface number 0 [ 240.525619][ T5849] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.537710][ T5849] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 240.550346][ T5849] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.560279][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.569844][ T5849] usb 2-1: Product: syz [ 240.574279][ T5849] usb 2-1: Manufacturer: syz [ 240.579117][ T5849] usb 2-1: SerialNumber: syz [ 240.646716][ T793] usb 5-1: Invalid ep0 maxpacket: 32 [ 240.776387][ T793] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 240.926430][ T793] usb 5-1: Invalid ep0 maxpacket: 32 [ 240.932683][ T793] usb usb5-port1: attempt power cycle [ 241.152531][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 241.168397][ T24] usb 3-1: USB disconnect, device number 50 [ 241.276321][ T793] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 241.298367][ T793] usb 5-1: Invalid ep0 maxpacket: 32 [ 241.307326][ T10] ch341-uart ttyUSB0: break control not supported, using simulated break [ 241.318563][ T10] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 241.456613][ T793] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 241.477645][ T793] usb 5-1: Invalid ep0 maxpacket: 32 [ 241.483411][ T793] usb usb5-port1: unable to enumerate USB device [ 241.670122][ T5849] cdc_ncm 2-1:1.1: bind() failure [ 241.691045][ T5849] usb 2-1: USB disconnect, device number 55 [ 242.036207][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 242.189066][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.201369][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 242.211501][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.233731][ T10] usb 3-1: config 0 descriptor?? [ 242.457316][ T8177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.469505][ T8177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.526196][ T5849] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 242.656122][ T5849] usb 2-1: device descriptor read/64, error -71 [ 242.682179][ T10] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 242.694447][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002A/input/input57 [ 242.788687][ T793] usb 4-1: USB disconnect, device number 54 [ 242.814168][ T793] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 242.845172][ T10] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 242.847871][ T793] ch341 4-1:0.0: device disconnected [ 242.889234][ T8177] netlink: 96 bytes leftover after parsing attributes in process `syz.2.762'. [ 242.906061][ T5849] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 243.046488][ T5849] usb 2-1: device descriptor read/64, error -71 [ 243.159329][ T5849] usb usb2-port1: attempt power cycle [ 243.168870][ C0] Mem-Info: [ 243.168889][ C0] active_anon:25922 inactive_anon:0 isolated_anon:0 [ 243.168889][ C0] active_file:17754 inactive_file:39991 isolated_file:0 [ 243.168889][ C0] unevictable:768 dirty:125 writeback:0 [ 243.168889][ C0] slab_reclaimable:10763 slab_unreclaimable:95435 [ 243.168889][ C0] mapped:27829 shmem:19702 pagetables:1360 [ 243.168889][ C0] sec_pagetables:0 bounce:0 [ 243.168889][ C0] kernel_misc_reclaimable:0 [ 243.168889][ C0] free:1301669 free_pcp:14987 free_cma:0 [ 243.168949][ C0] Node 0 active_anon:103688kB inactive_anon:0kB active_file:71016kB inactive_file:159764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111316kB dirty:496kB writeback:0kB shmem:77272kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11840kB pagetables:5296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 243.169021][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 243.169076][ C0] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 243.169141][ C0] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 243.169188][ C0] Node 0 DMA32 free:1310528kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103688kB inactive_anon:0kB active_file:71016kB inactive_file:159764kB unevictable:1536kB writepending:496kB zspages:0kB present:3129332kB managed:2551448kB mlocked:0kB bounce:0kB free_pcp:38492kB local_pcp:17404kB free_cma:0kB [ 243.169252][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 243.169307][ C0] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.169368][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 243.169412][ C0] Node 1 Normal free:3880804kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21440kB local_pcp:14784kB free_cma:0kB [ 243.169476][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 243.169522][ C0] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 243.169749][ C0] Node 0 DMA32: 2824*4kB (UM) 1854*8kB (UM) 813*16kB (UME) 577*32kB (UME) 247*64kB (UME) 109*128kB (UME) 76*256kB (UM) 25*512kB (UM) 13*1024kB (UM) 3*2048kB (UE) 286*4096kB (UM) = 1310528kB [ 243.169952][ C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 243.170081][ C0] Node 1 Normal: 207*4kB (UME) 57*8kB (UME) 38*16kB (UME) 70*32kB (UME) 27*64kB (UME) 13*128kB (UME) 4*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 943*4096kB (M) = 3880804kB [ 243.170278][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.170296][ C0] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 243.170314][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.170333][ C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 243.170349][ C0] 77443 total pagecache pages [ 243.170360][ C0] 0 pages in swap cache [ 243.170369][ C0] Free swap = 124996kB [ 243.170377][ C0] Total swap = 124996kB [ 243.170387][ C0] 2097051 pages RAM [ 243.170396][ C0] 0 pages HighMem/MovableOnly [ 243.170404][ C0] 427419 pages reserved [ 243.170414][ C0] 0 pages cma reserved [ 243.226525][ T793] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 243.509443][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.638447][ T5849] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 243.638653][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.653213][ T10] usb 3-1: USB disconnect, device number 51 [ 243.657904][ T5849] usb 2-1: device descriptor read/8, error -71 [ 243.672880][ T793] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.672941][ T793] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.699233][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.713734][ T793] usb 4-1: config 0 descriptor?? [ 243.916323][ T5849] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 243.946894][ T5849] usb 2-1: device descriptor read/8, error -71 [ 244.066140][ T5849] usb usb2-port1: unable to enumerate USB device [ 244.133410][ T793] usbhid 4-1:0.0: can't add hid device: -71 [ 244.140065][ T793] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 244.158921][ T793] usb 4-1: USB disconnect, device number 55 [ 245.085969][ T793] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 245.175823][ T5912] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 245.235808][ T793] usb 4-1: Using ep0 maxpacket: 8 [ 245.245009][ T793] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 245.259012][ T793] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 245.275520][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.295801][ T793] usb 4-1: Product: syz [ 245.300229][ T793] usb 4-1: Manufacturer: syz [ 245.305252][ T793] usb 4-1: SerialNumber: syz [ 245.317081][ T793] usb 4-1: config 0 descriptor?? [ 245.325820][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 245.334196][ T5912] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 245.347495][ T793] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 245.357682][ T793] usb 4-1: setting power ON [ 245.362658][ T793] dvb-usb: bulk message failed: -22 (2/0) [ 245.371570][ T5912] usb 3-1: New USB device found, idVendor=082d, idProduct=0101, bcdDevice=70.4b [ 245.381599][ T5912] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 245.405499][ T793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 245.415137][ T5912] usb 3-1: Product: syz [ 245.421006][ T5912] usb 3-1: Manufacturer: syz [ 245.426626][ T793] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 245.435465][ T793] usb 4-1: media controller created [ 245.442462][ T5912] usb 3-1: SerialNumber: syz [ 245.457053][ T5912] usb 3-1: config 0 descriptor?? [ 245.489050][ T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.531767][ T8191] dvb-usb: bulk message failed: -22 (3/0) [ 245.537906][ T8191] dvb-usb: bulk message failed: -22 (4/0) [ 245.543871][ T8191] cxusb: i2c read failed [ 245.550622][ T793] usb 4-1: selecting invalid altsetting 6 [ 245.557125][ T793] usb 4-1: digital interface selection failed (-22) [ 245.564013][ T793] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 245.573634][ T793] usb 4-1: setting power OFF [ 245.578589][ T793] dvb-usb: bulk message failed: -22 (2/0) [ 245.584663][ T793] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 245.594452][ T793] (NULL device *): no alternate interface [ 245.614410][ T793] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 245.632889][ T793] usb 4-1: USB disconnect, device number 56 [ 245.666269][ T5912] usb 3-1: USB disconnect, device number 52 [ 245.715773][ T5915] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 245.867553][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.878927][ T5915] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 245.888297][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.898571][ T5915] usb 2-1: config 0 descriptor?? [ 246.112622][ T8203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.121934][ T8203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.244550][ T8207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.775'. [ 246.306695][ T8212] FAULT_INJECTION: forcing a failure. [ 246.306695][ T8212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 246.322289][ T8212] CPU: 1 UID: 0 PID: 8212 Comm: syz.3.777 Not tainted syzkaller #0 PREEMPT(full) [ 246.322319][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 246.322330][ T8212] Call Trace: [ 246.322340][ T8212] [ 246.322348][ T8212] dump_stack_lvl+0x189/0x250 [ 246.322381][ T8212] ? __pfx____ratelimit+0x10/0x10 [ 246.322408][ T8212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.322434][ T8212] ? __pfx__printk+0x10/0x10 [ 246.322460][ T8212] ? fs_reclaim_acquire+0x7d/0x100 [ 246.322498][ T8212] should_fail_ex+0x414/0x560 [ 246.322532][ T8212] prepare_alloc_pages+0x22b/0x650 [ 246.322568][ T8212] __alloc_frozen_pages_noprof+0x123/0x370 [ 246.322598][ T8212] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 246.322637][ T8212] ? policy_nodemask+0x27c/0x720 [ 246.322670][ T8212] alloc_pages_mpol+0x232/0x4a0 [ 246.322703][ T8212] vma_alloc_folio_noprof+0xe4/0x200 [ 246.322724][ T8212] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 246.322741][ T8212] ? __pfx___might_resched+0x10/0x10 [ 246.322753][ T8212] ? percpu_ref_put+0xf9/0x180 [ 246.322781][ T8212] mfill_atomic_pte_copy+0x8b/0x3d0 [ 246.322808][ T8212] ? mm_alloc_pmd+0x246/0x410 [ 246.322832][ T8212] mfill_atomic_copy+0x51d/0x14a0 [ 246.322867][ T8212] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 246.322888][ T8212] userfaultfd_ioctl+0x2a01/0x4c80 [ 246.322905][ T8212] ? __se_sys_ioctl+0x47/0x170 [ 246.322922][ T8212] ? do_syscall_64+0xfa/0xfa0 [ 246.322946][ T8212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.322974][ T8212] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 246.323030][ T8212] ? kasan_quarantine_put+0xdd/0x220 [ 246.323045][ T8212] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.323066][ T8212] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 246.323090][ T8212] ? do_vfs_ioctl+0xbe8/0x1430 [ 246.323114][ T8212] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 246.323134][ T8212] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 246.323191][ T8212] ? __fget_files+0x2a/0x420 [ 246.323208][ T8212] ? __fget_files+0x3a0/0x420 [ 246.323219][ T8212] ? __fget_files+0x2a/0x420 [ 246.323240][ T8212] ? bpf_lsm_file_ioctl+0x9/0x20 [ 246.323267][ T8212] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 246.323283][ T8212] __se_sys_ioctl+0xfc/0x170 [ 246.323305][ T8212] do_syscall_64+0xfa/0xfa0 [ 246.323325][ T8212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.323336][ T8212] ? clear_bhb_loop+0x60/0xb0 [ 246.323348][ T8212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.323356][ T8212] RIP: 0033:0x7fdffeb8f6c9 [ 246.323367][ T8212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.323376][ T8212] RSP: 002b:00007fdffcdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.323387][ T8212] RAX: ffffffffffffffda RBX: 00007fdffede5fa0 RCX: 00007fdffeb8f6c9 [ 246.323397][ T8212] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 246.323407][ T8212] RBP: 00007fdffcdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 246.323417][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.323426][ T8212] R13: 00007fdffede6038 R14: 00007fdffede5fa0 R15: 00007ffe37c8fa68 [ 246.323452][ T8212] [ 246.667559][ T5915] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 246.705916][ T5915] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.002B/input/input58 [ 246.718515][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 246.856905][ T10] usb 3-1: device descriptor read/64, error -71 [ 246.867826][ T8203] netlink: 96 bytes leftover after parsing attributes in process `syz.1.773'. [ 246.882089][ T5915] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 247.104148][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 247.132605][ C0] Mem-Info: [ 247.132626][ C0] active_anon:25887 inactive_anon:0 isolated_anon:0 [ 247.132626][ C0] active_file:17754 inactive_file:39993 isolated_file:0 [ 247.132626][ C0] unevictable:768 dirty:79 writeback:0 [ 247.132626][ C0] slab_reclaimable:10746 slab_unreclaimable:95632 [ 247.132626][ C0] mapped:27842 shmem:19651 pagetables:1364 [ 247.132626][ C0] sec_pagetables:0 bounce:0 [ 247.132626][ C0] kernel_misc_reclaimable:0 [ 247.132626][ C0] free:1302216 free_pcp:14307 free_cma:0 [ 247.132680][ C0] Node 0 active_anon:103548kB inactive_anon:0kB active_file:71016kB inactive_file:159772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111368kB dirty:312kB writeback:0kB shmem:77068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11712kB pagetables:5312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 247.132736][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 247.132788][ C0] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 247.132854][ C0] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 247.132903][ C0] Node 0 DMA32 free:1312716kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103548kB inactive_anon:0kB active_file:71016kB inactive_file:159772kB unevictable:1536kB writepending:312kB zspages:0kB present:3129332kB managed:2551448kB mlocked:0kB bounce:0kB free_pcp:35772kB local_pcp:15888kB free_cma:0kB [ 247.132990][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 247.133036][ C0] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 247.133096][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 247.133142][ C0] Node 1 Normal free:3880804kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21440kB local_pcp:14784kB free_cma:0kB [ 247.133339][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 247.133382][ C0] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 247.133521][ C0] Node 0 DMA32: 2757*4kB (UM) 1887*8kB (UM) 826*16kB (UME) 599*32kB (UME) 257*64kB (UME) 112*128kB (UME) 77*256kB (UM) 25*512kB (UM) 13*1024kB (UM) 3*2048kB (UE) 286*4096kB (UM) = 1312716kB [ 247.133683][ C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 247.133807][ C0] Node 1 Normal: 207*4kB (UME) 57*8kB (UME) 38*16kB (UME) 70*32kB (UME) 27*64kB (UME) 13*128kB (UME) 4*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 943*4096kB (M) = 3880804kB [ 247.134018][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.134031][ C0] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.134045][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.134060][ C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.134076][ C0] 77394 total pagecache pages [ 247.134083][ C0] 0 pages in swap cache [ 247.134091][ C0] Free swap = 124996kB [ 247.134098][ C0] Total swap = 124996kB [ 247.134108][ C0] 2097051 pages RAM [ 247.134115][ C0] 0 pages HighMem/MovableOnly [ 247.134121][ C0] 427419 pages reserved [ 247.134129][ C0] 0 pages cma reserved [ 247.245565][ T5912] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 247.265045][ T10] usb 3-1: device descriptor read/64, error -71 [ 247.497242][ T5912] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 247.593452][ T5912] usb 4-1: config 0 has no interface number 0 [ 247.593509][ T5912] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 20, changing to 8 [ 247.593542][ T5912] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 24720, setting to 1024 [ 247.593590][ T5912] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 247.593616][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.597101][ T5912] usb 4-1: config 0 descriptor?? [ 247.607346][ T10] usb usb3-port1: attempt power cycle [ 247.753487][ T5884] usb 2-1: USB disconnect, device number 60 [ 247.995534][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 248.016943][ T10] usb 3-1: device descriptor read/8, error -71 [ 248.068944][ T5912] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.002C/input/input59 [ 248.165826][ T5912] holtek_kbd 0003:04D9:A055.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 248.256532][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 248.291421][ T5884] usb 4-1: USB disconnect, device number 57 [ 248.318073][ T10] usb 3-1: device descriptor read/8, error -71 [ 248.426123][ T10] usb usb3-port1: unable to enumerate USB device [ 249.063763][ T8244] netlink: 'syz.3.788': attribute type 10 has an invalid length. [ 249.395326][ T793] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 249.410604][ T8261] bridge0: port 4(dummy0) entered blocking state [ 249.418536][ T8261] bridge0: port 4(dummy0) entered disabled state [ 249.425540][ T8261] dummy0: entered allmulticast mode [ 249.432495][ T8261] dummy0: entered promiscuous mode [ 249.438647][ T8261] bridge0: port 4(dummy0) entered blocking state [ 249.445752][ T8261] bridge0: port 4(dummy0) entered forwarding state [ 249.558326][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.572613][ T793] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 249.583565][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.604215][ T793] usb 4-1: config 0 descriptor?? [ 249.637507][ T8266] capability: warning: `syz.2.797' uses deprecated v2 capabilities in a way that may be insecure [ 249.820445][ T8270] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.864261][ T8250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.888743][ T8250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.967131][ T8270] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.070040][ T8270] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.121528][ T793] keytouch 0003:0926:3333.002D: fixing up Keytouch IEC report descriptor [ 250.139618][ T793] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002D/input/input61 [ 250.191096][ T8270] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.270857][ T793] keytouch 0003:0926:3333.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 250.335711][ T8250] netlink: 96 bytes leftover after parsing attributes in process `syz.3.791'. [ 250.419073][ T3071] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.452417][ T3071] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.481163][ T3071] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.508191][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.596988][ C1] Mem-Info: [ 250.597010][ C1] active_anon:25890 inactive_anon:0 isolated_anon:0 [ 250.597010][ C1] active_file:20663 inactive_file:39994 isolated_file:0 [ 250.597010][ C1] unevictable:768 dirty:85 writeback:0 [ 250.597010][ C1] slab_reclaimable:10766 slab_unreclaimable:95176 [ 250.597010][ C1] mapped:27877 shmem:19649 pagetables:1368 [ 250.597010][ C1] sec_pagetables:0 bounce:0 [ 250.597010][ C1] kernel_misc_reclaimable:0 [ 250.597010][ C1] free:1299025 free_pcp:14944 free_cma:0 [ 250.597074][ C1] Node 0 active_anon:103560kB inactive_anon:0kB active_file:82652kB inactive_file:159776kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111508kB dirty:340kB writeback:0kB shmem:77060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11644kB pagetables:5328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 250.597226][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 250.597353][ C1] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 250.597475][ C1] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 250.597574][ C1] Node 0 DMA32 free:1299952kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103560kB inactive_anon:0kB active_file:82652kB inactive_file:159776kB unevictable:1536kB writepending:340kB zspages:0kB present:3129332kB managed:2551448kB mlocked:0kB bounce:0kB free_pcp:38312kB local_pcp:20880kB free_cma:0kB [ 250.597714][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 250.597801][ C1] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.597920][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 250.598013][ C1] Node 1 Normal free:3880804kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21440kB local_pcp:6656kB free_cma:0kB [ 250.598136][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 250.598228][ C1] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 250.598564][ C1] Node 0 DMA32: 2694*4kB (UM) 1887*8kB (UM) 826*16kB (UME) 564*32kB (UME) 251*64kB (UME) 68*128kB (UME) 56*256kB (UM) 25*512kB (UM) 13*1024kB (UM) 3*2048kB (UE) 286*4096kB (UM) = 1299952kB [ 250.598915][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 250.599139][ C1] Node 1 Normal: 207*4kB (UME) 57*8kB (UME) 38*16kB (UME) 70*32kB (UME) 27*64kB (UME) 13*128kB (UME) 4*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 943*4096kB (M) = 3880804kB [ 250.599733][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.599767][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.599814][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.599848][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.599881][ C1] 80302 total pagecache pages [ 250.599907][ C1] 0 pages in swap cache [ 250.599917][ C1] Free swap = 124996kB [ 250.599941][ C1] Total swap = 124996kB [ 250.599952][ C1] 2097051 pages RAM [ 250.599975][ C1] 0 pages HighMem/MovableOnly [ 250.599984][ C1] 427419 pages reserved [ 250.600019][ C1] 0 pages cma reserved [ 251.046705][ T5915] usb 4-1: USB disconnect, device number 58 [ 251.585681][ T24] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 251.665601][ T793] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 251.726760][ T24] usb 3-1: device descriptor read/64, error -71 [ 251.828347][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.840357][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.851143][ T793] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 251.861599][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.875861][ T793] usb 2-1: config 0 descriptor?? [ 251.975046][ T24] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 252.125026][ T24] usb 3-1: device descriptor read/64, error -71 [ 252.235452][ T24] usb usb3-port1: attempt power cycle [ 252.316594][ T793] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 252.339008][ T793] cp2112 0003:10C4:EA90.002E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 252.502693][ T793] cp2112 0003:10C4:EA90.002E: Part Number: 0x82 Device Version: 0xFE [ 252.584936][ T24] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 252.615925][ T24] usb 3-1: device descriptor read/8, error -71 [ 252.855050][ T24] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 252.877723][ T24] usb 3-1: device descriptor read/8, error -71 [ 252.997105][ T24] usb usb3-port1: unable to enumerate USB device [ 253.105521][ T8303] cp2112 0003:10C4:EA90.002E: Error starting transaction: -38 [ 253.115648][ T793] cp2112 0003:10C4:EA90.002E: error reading lock byte: -71 [ 253.151470][ T793] usb 2-1: USB disconnect, device number 61 [ 253.629804][ T8323] netlink: 'syz.3.815': attribute type 10 has an invalid length. [ 253.639568][ T8323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.815'. [ 253.772914][ T8325] netlink: 'syz.3.817': attribute type 21 has an invalid length. [ 253.781145][ T8325] netlink: 128 bytes leftover after parsing attributes in process `syz.3.817'. [ 253.791635][ T8325] netlink: 'syz.3.817': attribute type 5 has an invalid length. [ 253.799873][ T8325] netlink: 'syz.3.817': attribute type 6 has an invalid length. [ 253.808493][ T8325] netlink: 3 bytes leftover after parsing attributes in process `syz.3.817'. [ 253.974787][ T5915] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 254.134733][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 254.142485][ T5915] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 254.154069][ T5915] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 254.164089][ T5891] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 254.172131][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.180810][ T5915] usb 2-1: Product: syz [ 254.185867][ T5915] usb 2-1: Manufacturer: syz [ 254.190612][ T5915] usb 2-1: SerialNumber: syz [ 254.197697][ T5915] usb 2-1: config 0 descriptor?? [ 254.205722][ T5915] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 254.214120][ T5915] usb 2-1: setting power ON [ 254.218923][ T5915] dvb-usb: bulk message failed: -22 (2/0) [ 254.228470][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.238680][ T5915] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 254.248735][ T5915] usb 2-1: media controller created [ 254.261033][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.287208][ T5915] usb 2-1: selecting invalid altsetting 6 [ 254.293150][ T5915] usb 2-1: digital interface selection failed (-22) [ 254.301201][ T5915] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 254.319008][ T5915] usb 2-1: setting power OFF [ 254.327025][ T5915] dvb-usb: bulk message failed: -22 (2/0) [ 254.336555][ T5915] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 254.354255][ T5915] (NULL device *): no alternate interface [ 254.356642][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.381774][ T5891] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 254.399968][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.421965][ T5891] usb 4-1: config 0 descriptor?? [ 254.476770][ T5915] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 254.516225][ T5915] usb 2-1: USB disconnect, device number 62 [ 254.635583][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.645348][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.854737][ T5915] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 254.865896][ T5891] keytouch 0003:0926:3333.002F: fixing up Keytouch IEC report descriptor [ 254.877928][ T5891] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002F/input/input62 [ 254.972740][ T5891] keytouch 0003:0926:3333.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 255.027703][ T5915] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 255.054688][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.085367][ T8330] netlink: 96 bytes leftover after parsing attributes in process `syz.3.818'. [ 255.092470][ T5915] usb 3-1: config 0 has no interface number 0 [ 255.101810][ T5915] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 255.118999][ T5915] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.140420][ T30] audit: type=1326 audit(1762531415.490:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 255.171451][ T30] audit: type=1326 audit(1762531415.510:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 255.201105][ T5915] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 255.223473][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.242869][ T5915] usb 3-1: Product: syz [ 255.249029][ T5915] usb 3-1: Manufacturer: syz [ 255.253995][ T5915] usb 3-1: SerialNumber: syz [ 255.263200][ T30] audit: type=1326 audit(1762531415.510:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 255.291336][ T30] audit: type=1326 audit(1762531415.510:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 255.306088][ T5915] usb 3-1: config 0 descriptor?? [ 255.363067][ T30] audit: type=1326 audit(1762531415.510:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 255.363123][ T30] audit: type=1326 audit(1762531415.510:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 255.363171][ T30] audit: type=1326 audit(1762531415.510:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 255.363233][ T30] audit: type=1326 audit(1762531415.510:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 255.363277][ T30] audit: type=1326 audit(1762531415.510:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 255.363319][ T30] audit: type=1326 audit(1762531415.510:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f352bb8f6c9 code=0x7ffc0000 [ 255.376012][ C0] Mem-Info: [ 255.376034][ C0] active_anon:26111 inactive_anon:0 isolated_anon:0 [ 255.376034][ C0] active_file:20663 inactive_file:39996 isolated_file:0 [ 255.376034][ C0] unevictable:768 dirty:68 writeback:0 [ 255.376034][ C0] slab_reclaimable:10838 slab_unreclaimable:94651 [ 255.376034][ C0] mapped:27854 shmem:19651 pagetables:1314 [ 255.376034][ C0] sec_pagetables:0 bounce:0 [ 255.376034][ C0] kernel_misc_reclaimable:0 [ 255.376034][ C0] free:1299447 free_pcp:13836 free_cma:0 [ 255.376107][ C0] Node 0 active_anon:104444kB inactive_anon:0kB active_file:82652kB inactive_file:159784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111416kB dirty:272kB writeback:0kB shmem:77068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11680kB pagetables:5112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 255.376167][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 255.376214][ C0] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 255.376273][ C0] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 255.376322][ C0] Node 0 DMA32 free:1301384kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104444kB inactive_anon:0kB active_file:82652kB inactive_file:159784kB unevictable:1536kB writepending:272kB zspages:0kB present:3129332kB managed:2551448kB mlocked:0kB bounce:0kB free_pcp:34144kB local_pcp:19240kB free_cma:0kB [ 255.376389][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 255.376434][ C0] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 255.376493][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 255.376538][ C0] Node 1 Normal free:3881060kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21184kB local_pcp:14784kB free_cma:0kB [ 255.376601][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 255.376646][ C0] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 255.376821][ C0] Node 0 DMA32: 2502*4kB (UM) 2000*8kB (UM) 855*16kB (UME) 586*32kB (UME) 264*64kB (UME) 84*128kB (UME) 55*256kB (UM) 26*512kB (UM) 12*1024kB (UM) 2*2048kB (ME) 286*4096kB (UM) = 1301320kB [ 255.377024][ C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 255.377141][ C0] Node 1 Normal: 207*4kB (UME) 57*8kB (UME) 38*16kB (UME) 72*32kB (UME) 28*64kB (UME) 14*128kB (UME) 4*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 943*4096kB (M) = 3881060kB [ 255.377327][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.377345][ C0] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.377364][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.377381][ C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.377399][ C0] 80306 total pagecache pages [ 255.377409][ C0] 0 pages in swap cache [ 255.377418][ C0] Free swap = 124996kB [ 255.377427][ C0] Total swap = 124996kB [ 255.377437][ C0] 2097051 pages RAM [ 255.377446][ C0] 0 pages HighMem/MovableOnly [ 255.377455][ C0] 427419 pages reserved [ 255.377464][ C0] 0 pages cma reserved [ 255.598562][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 256.005598][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.059898][ T5891] usb 4-1: USB disconnect, device number 59 [ 256.111355][ T5915] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 256.125551][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.139723][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.167709][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.181287][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.198851][ T5915] usb 3-1: USB disconnect, device number 61 [ 256.205409][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.568262][ T8345] chnl_net:caif_netlink_parms(): no params data found [ 256.954218][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.961981][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.969444][ T8345] bridge_slave_0: entered allmulticast mode [ 256.978900][ T8345] bridge_slave_0: entered promiscuous mode [ 256.992104][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.000500][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.009071][ T8345] bridge_slave_1: entered allmulticast mode [ 257.018957][ T8345] bridge_slave_1: entered promiscuous mode [ 257.051884][ T8345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.065252][ T8345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.121051][ T8345] team0: Port device team_slave_0 added [ 257.131740][ T8345] team0: Port device team_slave_1 added [ 257.164441][ T5915] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 257.180542][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.184630][ T5891] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 257.188220][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.226281][ T8345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.240099][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.249522][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.277024][ T8345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.325208][ T5915] usb 2-1: device descriptor read/64, error -71 [ 257.344398][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 257.351739][ T8345] hsr_slave_0: entered promiscuous mode [ 257.360435][ T8345] hsr_slave_1: entered promiscuous mode [ 257.370441][ T8345] debugfs: 'hsr0' already exists in 'hsr' [ 257.377484][ T8345] Cannot create hsr debugfs directory [ 257.380837][ T5891] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 257.404658][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.413891][ T5891] usb 4-1: Product: syz [ 257.419959][ T5891] usb 4-1: Manufacturer: syz [ 257.426834][ T5891] usb 4-1: SerialNumber: syz [ 257.445648][ T5891] usb 4-1: config 0 descriptor?? [ 257.534691][ T793] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 257.564348][ T5915] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 257.669904][ T5891] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 257.690249][ T8345] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 257.702662][ T8345] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 257.714718][ T5915] usb 2-1: device descriptor read/64, error -71 [ 257.717160][ T793] usb 3-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=77.ea [ 257.732147][ T793] usb 3-1: New USB device strings: Mfr=64, Product=2, SerialNumber=3 [ 257.736930][ T8345] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 257.753342][ T793] usb 3-1: Product: syz [ 257.758145][ T793] usb 3-1: Manufacturer: syz [ 257.763062][ T793] usb 3-1: SerialNumber: syz [ 257.773844][ T8345] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.785111][ T793] usb 3-1: config 0 descriptor?? [ 257.799643][ T793] usb 3-1: cannot find UAC_HEADER [ 257.824907][ T5915] usb usb2-port1: attempt power cycle [ 257.842057][ T793] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 257.922385][ T6425] udevd[6425]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.045360][ T8345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.076944][ T8345] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.094016][ T3071] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.101450][ T3071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.124026][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.131893][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.154266][ T793] usb 3-1: USB disconnect, device number 62 [ 258.175917][ T5915] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 258.205239][ T5915] usb 2-1: device descriptor read/8, error -71 [ 258.245064][ T52] Bluetooth: hci2: command tx timeout [ 258.411697][ T8345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.444779][ T5915] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 258.462974][ T5891] gspca_sunplus: reg_w_riv err -71 [ 258.479818][ T5915] usb 2-1: device descriptor read/8, error -71 [ 258.488817][ T5891] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 258.516326][ T5891] usb 4-1: USB disconnect, device number 60 [ 258.604547][ T5915] usb usb2-port1: unable to enumerate USB device [ 258.672566][ T8345] veth0_vlan: entered promiscuous mode [ 258.687257][ T8345] veth1_vlan: entered promiscuous mode [ 258.742353][ T8345] veth0_macvtap: entered promiscuous mode [ 258.762431][ T8345] veth1_macvtap: entered promiscuous mode [ 258.787387][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.802583][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.821627][ T3562] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.831045][ T3562] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.844699][ T3562] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.853917][ T3562] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.929476][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.938396][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.971417][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.983149][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.004359][ T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 259.177450][ T24] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 259.187467][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.196637][ T24] usb 3-1: Product: syz [ 259.201359][ T24] usb 3-1: Manufacturer: syz [ 259.207158][ T24] usb 3-1: SerialNumber: syz [ 259.285446][ T5891] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 259.344184][ T5915] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 259.450951][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.462585][ T5891] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 259.473405][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.486976][ T5891] usb 4-1: config 0 descriptor?? [ 259.504117][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 259.511648][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.524533][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.538000][ T5915] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 259.547891][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.560517][ T5915] usb 6-1: config 0 descriptor?? [ 259.575611][ T5915] hub 6-1:0.0: USB hub found [ 259.700610][ T8389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.710220][ T8389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.773444][ T5915] hub 6-1:0.0: 1 port detected [ 259.853188][ T24] rtl8150 3-1:1.0: eth5: rtl8150 is detected [ 259.942988][ T5891] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 259.999774][ T5891] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0030/input/input64 [ 260.037402][ T24] usb 3-1: USB disconnect, device number 63 [ 260.159975][ T8389] netlink: 96 bytes leftover after parsing attributes in process `syz.3.834'. [ 260.228590][ T5891] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 260.329066][ T52] Bluetooth: hci2: command tx timeout [ 260.331358][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 260.419146][ T5915] hub 6-1:0.0: activate --> -90 [ 260.469543][ C0] Mem-Info: [ 260.469562][ C0] active_anon:26351 inactive_anon:0 isolated_anon:0 [ 260.469562][ C0] active_file:20663 inactive_file:40000 isolated_file:0 [ 260.469562][ C0] unevictable:768 dirty:113 writeback:0 [ 260.469562][ C0] slab_reclaimable:11100 slab_unreclaimable:96637 [ 260.469562][ C0] mapped:33052 shmem:19654 pagetables:1486 [ 260.469562][ C0] sec_pagetables:0 bounce:0 [ 260.469562][ C0] kernel_misc_reclaimable:0 [ 260.469562][ C0] free:1285857 free_pcp:14383 free_cma:0 [ 260.469625][ C0] Node 0 active_anon:105404kB inactive_anon:0kB active_file:82652kB inactive_file:159800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132208kB dirty:448kB writeback:0kB shmem:77080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12208kB pagetables:5800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 260.469682][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 260.469735][ C0] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 260.469800][ C0] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 260.469848][ C0] Node 0 DMA32 free:1247004kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:105404kB inactive_anon:0kB active_file:82652kB inactive_file:159800kB unevictable:1536kB writepending:448kB zspages:0kB present:3129332kB managed:2551448kB mlocked:0kB bounce:0kB free_pcp:36556kB local_pcp:20412kB free_cma:0kB [ 260.469919][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 260.469966][ C0] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.470026][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 260.470072][ C0] Node 1 Normal free:3881080kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21152kB local_pcp:14784kB free_cma:0kB [ 260.470137][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 260.470180][ C0] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 260.470356][ C0] Node 0 DMA32: 3199*4kB (UME) 1866*8kB (UME) 905*16kB (UME) 599*32kB (UME) 289*64kB (UME) 99*128kB (UME) 72*256kB (UME) 33*512kB (UM) 21*1024kB (UM) 6*2048kB (UME) 265*4096kB (UM) = 1247100kB [ 260.470553][ C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 260.470674][ C0] Node 1 Normal: 204*4kB (UME) 57*8kB (UME) 38*16kB (UME) 73*32kB (UME) 28*64kB (UME) 14*128kB (UME) 4*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 943*4096kB (M) = 3881080kB [ 260.470869][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.470889][ C0] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.470915][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.470933][ C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.470951][ C0] 80313 total pagecache pages [ 260.470960][ C0] 0 pages in swap cache [ 260.470970][ C0] Free swap = 124996kB [ 260.470979][ C0] Total swap = 124996kB [ 260.470988][ C0] 2097051 pages RAM [ 260.470996][ C0] 0 pages HighMem/MovableOnly [ 260.471005][ C0] 427419 pages reserved [ 260.471014][ C0] 0 pages cma reserved [ 260.690437][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.692998][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.701836][ T8391] /dev/nullb0: Can't open blockdev [ 260.705967][ T5891] usb 6-1: USB disconnect, device number 2 [ 260.900616][ T5870] usb 4-1: USB disconnect, device number 61 [ 261.144037][ T5891] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 261.319433][ T5891] usb 6-1: Invalid ep0 maxpacket: 32 [ 261.464674][ T5891] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 261.534189][ T5877] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 261.576945][ T8430] overlay: Unknown parameter 'H³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/' [ 261.614111][ T5891] usb 6-1: Invalid ep0 maxpacket: 32 [ 261.614632][ T5891] usb usb6-port1: attempt power cycle [ 261.663501][ T8434] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 261.666998][ T8434] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 261.670194][ T8434] FAULT_INJECTION: forcing a failure. [ 261.670194][ T8434] name failslab, interval 1, probability 0, space 0, times 0 [ 261.718056][ T8434] CPU: 0 UID: 0 PID: 8434 Comm: syz.3.847 Not tainted syzkaller #0 PREEMPT(full) [ 261.718082][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.718094][ T8434] Call Trace: [ 261.718108][ T8434] [ 261.718117][ T8434] dump_stack_lvl+0x189/0x250 [ 261.718147][ T8434] ? __pfx____ratelimit+0x10/0x10 [ 261.718173][ T8434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.718197][ T8434] ? __pfx__printk+0x10/0x10 [ 261.718223][ T8434] ? __pfx___might_resched+0x10/0x10 [ 261.718245][ T8434] ? fs_reclaim_acquire+0x7d/0x100 [ 261.718277][ T8434] should_fail_ex+0x414/0x560 [ 261.718311][ T8434] should_failslab+0xa8/0x100 [ 261.718341][ T8434] __kmalloc_noprof+0xdf/0x800 [ 261.718364][ T8434] ? register_lock_class+0x51/0x320 [ 261.718381][ T8434] ? ovl_cache_entry_new+0x4d/0x7a0 [ 261.718406][ T8434] ovl_cache_entry_new+0x4d/0x7a0 [ 261.718436][ T8434] ovl_fill_merge+0x654/0xda0 [ 261.718477][ T8434] ? __pfx_ovl_fill_merge+0x10/0x10 [ 261.718508][ T8434] ? dput+0x37/0x2b0 [ 261.718528][ T8434] ? dput+0x37/0x2b0 [ 261.718546][ T8434] ? __pfx_ovl_fill_merge+0x10/0x10 [ 261.718575][ T8434] offset_readdir+0x44c/0x560 [ 261.718611][ T8434] iterate_dir+0x399/0x570 [ 261.718644][ T8434] ovl_dir_read+0x13f/0x560 [ 261.718676][ T8434] ? __pfx_ovl_dir_read+0x10/0x10 [ 261.718700][ T8434] ? ovl_path_upper+0x105/0x170 [ 261.718726][ T8434] ? ovl_path_next+0x23c/0x470 [ 261.718752][ T8434] ovl_dir_read_merged+0x3bf/0x4b0 [ 261.718783][ T8434] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 261.718812][ T8434] ? __pfx_ovl_fill_merge+0x10/0x10 [ 261.718850][ T8434] ? __kasan_kmalloc+0x93/0xb0 [ 261.718877][ T8434] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 261.718906][ T8434] ? __lock_acquire+0xab9/0xd20 [ 261.718924][ T8434] ? ovl_iterate+0xcb2/0x2110 [ 261.718956][ T8434] ovl_iterate+0xd75/0x2110 [ 261.719005][ T8434] ? __pfx_ovl_iterate+0x10/0x10 [ 261.719036][ T8434] ? aa_file_perm+0x139/0x1540 [ 261.719061][ T8434] ? aa_file_perm+0x139/0x1540 [ 261.719097][ T8434] ? __lock_acquire+0xab9/0xd20 [ 261.719127][ T8434] ? wrap_directory_iterator+0x5a/0xe0 [ 261.719169][ T8434] ? down_write+0x162/0x1f0 [ 261.719185][ T8434] ? __pfx_down_write+0x10/0x10 [ 261.719213][ T8434] ? wrap_directory_iterator+0x52/0xe0 [ 261.719240][ T8434] ? __pfx_ovl_iterate+0x10/0x10 [ 261.719268][ T8434] wrap_directory_iterator+0x96/0xe0 [ 261.719297][ T8434] iterate_dir+0x399/0x570 [ 261.719330][ T8434] ovl_dir_read+0x13f/0x560 [ 261.719363][ T8434] ? __pfx_ovl_dir_read+0x10/0x10 [ 261.719386][ T8434] ? ovl_path_upper+0x105/0x170 [ 261.719411][ T8434] ? ovl_path_next+0x23c/0x470 [ 261.719437][ T8434] ovl_dir_read_merged+0x2b8/0x4b0 [ 261.719468][ T8434] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 261.719496][ T8434] ? __pfx_ovl_fill_merge+0x10/0x10 [ 261.719535][ T8434] ? __kasan_kmalloc+0x93/0xb0 [ 261.719560][ T8434] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 261.719583][ T8434] ? ovl_iterate+0xcb2/0x2110 [ 261.719607][ T8434] ? __lock_acquire+0xab9/0xd20 [ 261.719629][ T8434] ovl_iterate+0xd75/0x2110 [ 261.719677][ T8434] ? __pfx_ovl_iterate+0x10/0x10 [ 261.719708][ T8434] ? aa_file_perm+0x139/0x1540 [ 261.719733][ T8434] ? aa_file_perm+0x139/0x1540 [ 261.719769][ T8434] ? __lock_acquire+0xab9/0xd20 [ 261.719799][ T8434] ? wrap_directory_iterator+0x5a/0xe0 [ 261.719840][ T8434] ? down_write+0x162/0x1f0 [ 261.719857][ T8434] ? __pfx_down_write+0x10/0x10 [ 261.719884][ T8434] ? wrap_directory_iterator+0x52/0xe0 [ 261.719920][ T8434] ? __pfx_ovl_iterate+0x10/0x10 [ 261.719948][ T8434] wrap_directory_iterator+0x96/0xe0 [ 261.719977][ T8434] iterate_dir+0x399/0x570 [ 261.720009][ T8434] __se_sys_getdents64+0xe4/0x260 [ 261.720039][ T8434] ? __pfx___se_sys_getdents64+0x10/0x10 [ 261.720064][ T8434] ? ksys_write+0x22a/0x250 [ 261.720079][ T8434] ? __pfx_filldir64+0x10/0x10 [ 261.720107][ T8434] ? __pfx_ksys_write+0x10/0x10 [ 261.720129][ T8434] ? do_syscall_64+0xbe/0xfa0 [ 261.720157][ T8434] do_syscall_64+0xfa/0xfa0 [ 261.720182][ T8434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.720199][ T8434] ? clear_bhb_loop+0x60/0xb0 [ 261.720222][ T8434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.720239][ T8434] RIP: 0033:0x7fdffeb8f6c9 [ 261.720259][ T8434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.720274][ T8434] RSP: 002b:00007fdffcdf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 261.720295][ T8434] RAX: ffffffffffffffda RBX: 00007fdffede5fa0 RCX: 00007fdffeb8f6c9 [ 261.720308][ T8434] RDX: 000000000000ff56 RSI: 0000200000000580 RDI: 0000000000000003 [ 261.720320][ T8434] RBP: 00007fdffcdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 261.720332][ T8434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.720343][ T8434] R13: 00007fdffede6038 R14: 00007fdffede5fa0 R15: 00007ffe37c8fa68 [ 261.720376][ T8434] [ 261.733987][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 261.738520][ T5877] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 262.404126][ T52] Bluetooth: hci2: command tx timeout [ 262.549933][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.569917][ T8457] FAULT_INJECTION: forcing a failure. [ 262.569917][ T8457] name failslab, interval 1, probability 0, space 0, times 0 [ 262.570732][ T5877] usb 3-1: Product: syz [ 262.596801][ T5877] usb 3-1: Manufacturer: syz [ 262.602182][ T5877] usb 3-1: SerialNumber: syz [ 262.611665][ T5877] usb 3-1: config 0 descriptor?? [ 262.622791][ T5877] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 262.632777][ T8457] CPU: 0 UID: 0 PID: 8457 Comm: syz.1.850 Not tainted syzkaller #0 PREEMPT(full) [ 262.632825][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.632838][ T8457] Call Trace: [ 262.632846][ T8457] [ 262.632864][ T8457] dump_stack_lvl+0x189/0x250 [ 262.632896][ T8457] ? __pfx____ratelimit+0x10/0x10 [ 262.632924][ T8457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.632949][ T8457] ? __pfx__printk+0x10/0x10 [ 262.632969][ T8457] ? save_netdev_trace_buffer+0x4b5/0x5a0 [ 262.633010][ T8457] should_fail_ex+0x414/0x560 [ 262.633044][ T8457] should_failslab+0xa8/0x100 [ 262.633076][ T8457] kmem_cache_alloc_noprof+0x88/0x700 [ 262.633102][ T8457] ? skb_clone+0x212/0x3a0 [ 262.633136][ T8457] skb_clone+0x212/0x3a0 [ 262.633168][ T8457] __netlink_deliver_tap+0x424/0x8b0 [ 262.633210][ T8457] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.633237][ T8457] netlink_deliver_tap+0x19c/0x1b0 [ 262.633266][ T8457] netlink_unicast+0x7fa/0x9e0 [ 262.633300][ T8457] ? __pfx_netlink_unicast+0x10/0x10 [ 262.633326][ T8457] ? netlink_sendmsg+0x642/0xb30 [ 262.633349][ T8457] ? skb_put+0x11b/0x210 [ 262.633378][ T8457] netlink_sendmsg+0x805/0xb30 [ 262.633416][ T8457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.633446][ T8457] ? aa_sock_msg_perm+0xf1/0x1d0 [ 262.633472][ T8457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.633498][ T8457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.633525][ T8457] __sock_sendmsg+0x21c/0x270 [ 262.633548][ T8457] ____sys_sendmsg+0x505/0x830 [ 262.633580][ T8457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.633624][ T8457] ? import_iovec+0x74/0xa0 [ 262.633651][ T8457] ___sys_sendmsg+0x21f/0x2a0 [ 262.633681][ T8457] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.633750][ T8457] ? __fget_files+0x2a/0x420 [ 262.633773][ T8457] ? __fget_files+0x3a0/0x420 [ 262.633807][ T8457] __x64_sys_sendmsg+0x19b/0x260 [ 262.633836][ T8457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.633881][ T8457] ? __pfx_ksys_write+0x10/0x10 [ 262.633905][ T8457] ? do_syscall_64+0xbe/0xfa0 [ 262.633935][ T8457] do_syscall_64+0xfa/0xfa0 [ 262.633962][ T8457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.633982][ T8457] ? clear_bhb_loop+0x60/0xb0 [ 262.634007][ T8457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.634026][ T8457] RIP: 0033:0x7f352bb8f6c9 [ 262.634045][ T8457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.634063][ T8457] RSP: 002b:00007f352c9fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.634086][ T8457] RAX: ffffffffffffffda RBX: 00007f352bde5fa0 RCX: 00007f352bb8f6c9 [ 262.634101][ T8457] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 262.634112][ T8457] RBP: 00007f352c9fd090 R08: 0000000000000000 R09: 0000000000000000 [ 262.634124][ T8457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.634136][ T8457] R13: 00007f352bde6038 R14: 00007f352bde5fa0 R15: 00007ffe65e2c3d8 [ 262.634172][ T8457] [ 263.124313][ T5884] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 263.284127][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 263.293687][ T5884] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 263.303360][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 263.321862][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 263.335285][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.356793][ T5884] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 263.371037][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.384946][ T5884] usb 4-1: config 0 descriptor?? [ 263.402817][ T5884] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input65 [ 263.463724][ T5870] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 263.604688][ T5891] usb 4-1: USB disconnect, device number 62 [ 263.628727][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.641132][ T5870] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.670050][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.696170][ T5870] usb 2-1: config 0 descriptor?? [ 263.920988][ T8467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.950158][ T8467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.198494][ T5870] keytouch 0003:0926:3333.0031: fixing up Keytouch IEC report descriptor [ 264.223072][ T8422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.843'. [ 264.237176][ T5870] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0031/input/input66 [ 264.251963][ T5877] gspca_topro: Sensor soi763a [ 264.365489][ T5870] keytouch 0003:0926:3333.0031: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 264.410131][ T8467] netlink: 96 bytes leftover after parsing attributes in process `syz.1.854'. [ 264.489001][ T52] Bluetooth: hci2: command tx timeout [ 264.500652][ T793] usb 3-1: USB disconnect, device number 64 [ 264.694201][ C1] Mem-Info: [ 264.694221][ C1] active_anon:26261 inactive_anon:0 isolated_anon:0 [ 264.694221][ C1] active_file:20663 inactive_file:40000 isolated_file:0 [ 264.694221][ C1] unevictable:768 dirty:97 writeback:0 [ 264.694221][ C1] slab_reclaimable:11046 slab_unreclaimable:97353 [ 264.694221][ C1] mapped:32982 shmem:19649 pagetables:1421 [ 264.694221][ C1] sec_pagetables:0 bounce:0 [ 264.694221][ C1] kernel_misc_reclaimable:0 [ 264.694221][ C1] free:1283927 free_pcp:15882 free_cma:0 [ 264.694275][ C1] Node 0 active_anon:105044kB inactive_anon:0kB active_file:82652kB inactive_file:159800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131928kB dirty:384kB writeback:0kB shmem:77060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12132kB pagetables:5540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 264.694327][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 264.694376][ C1] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 264.694437][ C1] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 264.694480][ C1] Node 0 DMA32 free:1239012kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:105044kB inactive_anon:0kB active_file:82652kB inactive_file:159800kB unevictable:1536kB writepending:384kB zspages:0kB present:3129332kB managed:2551448kB mlocked:0kB bounce:0kB free_pcp:42616kB local_pcp:21952kB free_cma:0kB [ 264.694541][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 264.694581][ C1] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 264.694635][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 264.694676][ C1] Node 1 Normal free:3881352kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20896kB local_pcp:6112kB free_cma:0kB [ 264.694735][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 264.694776][ C1] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 264.694943][ C1] Node 0 DMA32: 1687*4kB (UME) 1865*8kB (UME) 892*16kB (UME) 527*32kB (UME) 289*64kB (UME) 100*128kB (UME) 73*256kB (UME) 33*512kB (UM) 21*1024kB (UM) 6*2048kB (UME) 265*4096kB (UM) = 1238916kB [ 264.695123][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 264.803570][ T5891] ------------[ cut here ]------------ [ 264.812008][ C1] = 0kB [ 264.812066][ C1] Node 1 Normal: 204*4kB (UME) 57*8kB (UME) 39*16kB [ 264.851323][ T5891] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 264.860771][ C1] (UME) 75*32kB (UME) 29*64kB (UME) 15*128kB (UME) 4*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) [ 265.026226][ T5891] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_wait_one_vblank+0x570/0x5b0, CPU#0: kworker/0:5/5891 [ 265.030372][ C1] 943*4096kB (M) = 3881352kB [ 265.030408][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.041495][ T5891] Modules linked in: [ 265.046901][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.046925][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.046944][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.050156][ T5891] [ 265.057086][ C1] 80308 total pagecache pages [ 265.057102][ C1] 0 pages in swap cache [ 265.057109][ C1] Free swap = 124996kB [ 265.057122][ C1] Total swap = 124996kB [ 265.057130][ C1] 2097051 pages RAM [ 265.057140][ C1] 0 pages HighMem/MovableOnly [ 265.057145][ C1] 427419 pages reserved [ 265.057150][ C1] 0 pages cma reserved [ 265.179570][ T5891] CPU: 0 UID: 0 PID: 5891 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 265.179605][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.179622][ T5891] Workqueue: events drm_fb_helper_damage_work [ 265.179657][ T5891] RIP: 0010:drm_wait_one_vblank+0x570/0x5b0 [ 265.179685][ T5891] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 8a 95 e1 fc 4d 8b 2c 24 48 c7 c7 a0 66 f4 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 b1 69 3d fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 265.179703][ T5891] RSP: 0018:ffffc90004997860 EFLAGS: 00010246 [ 265.179724][ T5891] RAX: 603127f9c2a2c200 RBX: 1ffff11004942801 RCX: ffff88802ea6db80 [ 265.179743][ T5891] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 265.179758][ T5891] RBP: ffffc90004997948 R08: ffffffff8fbf4577 R09: 1ffffffff1f7e8ae [ 265.179774][ T5891] R10: dffffc0000000000 R11: fffffbfff1f7e8af R12: ffff8881482d3000 [ 265.274758][ T5891] R13: ffffffff8c077060 R14: 0000000000000000 R15: ffffffff8c091920 [ 265.274787][ T5891] FS: 0000000000000000(0000) GS:ffff888125a79000(0000) knlGS:0000000000000000 [ 265.274808][ T5891] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.274824][ T5891] CR2: 00007f2dc07729e0 CR3: 000000000e136000 CR4: 00000000003526f0 [ 265.274848][ T5891] Call Trace: [ 265.274858][ T5891] [ 265.274874][ T5891] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 265.274906][ T5891] ? __pfx_autoremove_wake_function+0x10/0x10 [ 265.274945][ T5891] ? drm_vblank_get+0x150/0x270 [ 265.274973][ T5891] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 265.275009][ T5891] drm_fb_helper_damage_work+0xce/0x6c0 [ 265.275048][ T5891] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 265.275079][ T5891] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.275121][ T5891] ? process_one_work+0x868/0x15d0 [ 265.275144][ T5891] process_one_work+0x94a/0x15d0 [ 265.275165][ T5891] ? __lock_acquire+0xab9/0xd20 [ 265.275210][ T5891] ? __pfx_process_one_work+0x10/0x10 [ 265.275244][ T5891] ? assign_work+0x3a1/0x410 [ 265.275273][ T5891] worker_thread+0x9f5/0xee0 [ 265.275327][ T5891] kthread+0x711/0x8a0 [ 265.275360][ T5891] ? __pfx_worker_thread+0x10/0x10 [ 265.275384][ T5891] ? __pfx_kthread+0x10/0x10 [ 265.275414][ T5891] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.275440][ T5891] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.275466][ T5891] ? __pfx_kthread+0x10/0x10 [ 265.275495][ T5891] ret_from_fork+0x599/0xb30 [ 265.275521][ T5891] ? __pfx_ret_from_fork+0x10/0x10 [ 265.275553][ T5891] ? __switch_to_asm+0x39/0x70 [ 265.275580][ T5891] ? __switch_to_asm+0x33/0x70 [ 265.275606][ T5891] ? __pfx_kthread+0x10/0x10 [ 265.275635][ T5891] ret_from_fork_asm+0x1a/0x30 [ 265.275685][ T5891] [ 265.275699][ T5891] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 265.275715][ T5891] CPU: 0 UID: 0 PID: 5891 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 265.275740][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.275753][ T5891] Workqueue: events drm_fb_helper_damage_work [ 265.275782][ T5891] Call Trace: [ 265.275791][ T5891] [ 265.275800][ T5891] dump_stack_lvl+0x99/0x250 [ 265.275827][ T5891] ? __asan_memcpy+0x40/0x70 [ 265.275853][ T5891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.275878][ T5891] ? __pfx__printk+0x10/0x10 [ 265.275917][ T5891] vpanic+0x237/0x6d0 [ 265.275937][ T5891] ? __pfx_vpanic+0x10/0x10 [ 265.275955][ T5891] ? is_bpf_text_address+0x292/0x2b0 [ 265.275984][ T5891] ? is_bpf_text_address+0x26/0x2b0 [ 265.276021][ T5891] panic+0xb9/0xc0 [ 265.276040][ T5891] ? __pfx_panic+0x10/0x10 [ 265.276071][ T5891] ? ret_from_fork_asm+0x1a/0x30 [ 265.276188][ T5891] __warn+0x334/0x4c0 [ 265.276207][ T5891] ? drm_wait_one_vblank+0x570/0x5b0 [ 265.276232][ T5891] ? drm_wait_one_vblank+0x570/0x5b0 [ 265.276253][ T5891] report_bug+0x2be/0x4f0 [ 265.276277][ T5891] ? drm_wait_one_vblank+0x570/0x5b0 [ 265.276299][ T5891] ? drm_wait_one_vblank+0x570/0x5b0 [ 265.276320][ T5891] ? drm_wait_one_vblank+0x572/0x5b0 [ 265.276341][ T5891] handle_bug+0x84/0x160 [ 265.276362][ T5891] exc_invalid_op+0x1a/0x50 [ 265.276381][ T5891] asm_exc_invalid_op+0x1a/0x20 [ 265.276401][ T5891] RIP: 0010:drm_wait_one_vblank+0x570/0x5b0 [ 265.276423][ T5891] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 8a 95 e1 fc 4d 8b 2c 24 48 c7 c7 a0 66 f4 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 b1 69 3d fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 265.276442][ T5891] RSP: 0018:ffffc90004997860 EFLAGS: 00010246 [ 265.276462][ T5891] RAX: 603127f9c2a2c200 RBX: 1ffff11004942801 RCX: ffff88802ea6db80 [ 265.276479][ T5891] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 265.276491][ T5891] RBP: ffffc90004997948 R08: ffffffff8fbf4577 R09: 1ffffffff1f7e8ae [ 265.276507][ T5891] R10: dffffc0000000000 R11: fffffbfff1f7e8af R12: ffff8881482d3000 [ 265.276524][ T5891] R13: ffffffff8c077060 R14: 0000000000000000 R15: ffffffff8c091920 [ 265.276565][ T5891] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 265.276590][ T5891] ? __pfx_autoremove_wake_function+0x10/0x10 [ 265.276626][ T5891] ? drm_vblank_get+0x150/0x270 [ 265.276653][ T5891] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 265.276685][ T5891] drm_fb_helper_damage_work+0xce/0x6c0 [ 265.276723][ T5891] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 265.276753][ T5891] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.276782][ T5891] ? process_one_work+0x868/0x15d0 [ 265.276801][ T5891] process_one_work+0x94a/0x15d0 [ 265.276821][ T5891] ? __lock_acquire+0xab9/0xd20 [ 265.276863][ T5891] ? __pfx_process_one_work+0x10/0x10 [ 265.276897][ T5891] ? assign_work+0x3a1/0x410 [ 265.276924][ T5891] worker_thread+0x9f5/0xee0 [ 265.276977][ T5891] kthread+0x711/0x8a0 [ 265.277008][ T5891] ? __pfx_worker_thread+0x10/0x10 [ 265.277031][ T5891] ? __pfx_kthread+0x10/0x10 [ 265.277058][ T5891] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.277083][ T5891] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.277132][ T5891] ? __pfx_kthread+0x10/0x10 [ 265.277160][ T5891] ret_from_fork+0x599/0xb30 [ 265.277185][ T5891] ? __pfx_ret_from_fork+0x10/0x10 [ 265.277218][ T5891] ? __switch_to_asm+0x39/0x70 [ 265.277244][ T5891] ? __switch_to_asm+0x33/0x70 [ 265.277269][ T5891] ? __pfx_kthread+0x10/0x10 [ 265.277297][ T5891] ret_from_fork_asm+0x1a/0x30 [ 265.277345][ T5891] [ 265.277511][ T5891] Kernel Offset: disabled