last executing test programs: 10m44.710607319s ago: executing program 1 (id=602): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x200000fe, &(0x7f00000000c0)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000580)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/37, 0x25}], 0x1}, 0xdd26}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/145, 0x91}], 0x1, &(0x7f0000000480)=""/212, 0xd4}, 0x3}], 0x2, 0x10041, &(0x7f00000005c0)={0x77359400}) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x1000007fd) 10m41.969841374s ago: executing program 1 (id=612): syz_open_dev$dri(0x0, 0xd20, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) fanotify_mark(r0, 0x1, 0x1000, r0, &(0x7f0000000240)='./file0\x00') setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e049c7b0c15d2748402e0732e84d36a6f2ac943d0e62bc289161f"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 10m41.867190128s ago: executing program 1 (id=614): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r0, &(0x7f0000000680)=""/4096, 0x1000) r1 = syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) clock_gettime(0x0, &(0x7f00000025c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000000000a0000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d5c00128038000180090001006c61737400000000280002800c000240fffffffffffffffe0800014000800000080001400000000d0800014000010102200001800a00010071756f746100000055fe02800c000140000000000000000408000340000001"], 0xe8}}, 0x20050800) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000004000000020000000010"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x10400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044801}, 0x10) syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000180)={0x0, 0xba86, 0x80, 0x3, 0x205, 0x0, r1}, &(0x7f0000001680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7392, 0x9604, 0x0, 0x36b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdac8, 0x8004, 0x3, 0x3b0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeadc, 0x400, 0x0, 0x288, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x82ad, 0x8, 0x1, 0x135, 0x0, r1}, 0xffffffffffffffff}], 0x4, &(0x7f0000003600)={0x2e, 0x14, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xd}, 0x0, 0x0, '\x00', {0x3, 0x193, 0x0, &(0x7f0000002600)=@buf_512="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"}}, &(0x7f0000003680)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r8, 0x1a, &(0x7f00000036c0), 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x2908020, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c0b66646e6f3d0cb3c522c5300d17a5b3267c927b4c701e827c96581cc7ef0410ae86f27f5bccadbeb3185de3c3d96cc19fb3efd5de7f1a952e8a79d282f8daa02b3604e562065e1396dc1a049f664ceed6ff643827ddb7cc5d23f41ac81fa58f5e9b77a836dc3936315ef2b59e602671bf48d43fbd480e8bc3099355f30a8a76", @ANYRESHEX=r4, @ANYBLOB=',noextend,\x00']) creat(&(0x7f0000000100)='./file0\x00', 0x4a) 10m40.987939382s ago: executing program 1 (id=623): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) acct(&(0x7f0000000000)='./file0\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0xff, 0xfffff00c}, {0xb1, 0x20, 0x40, 0xffffefff}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1400c800) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x3}) r5 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x181000) ioctl$MON_IOCX_MFETCH(r5, 0xc00c9207, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r8, &(0x7f0000000040)=0x8080000001ca, 0x12) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x4}, {0x3, 0x1}}, {{0x0, 0x1, 0x1}, {0x4, 0x1}}], 0x28) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 10m39.499847369s ago: executing program 1 (id=626): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000000)=""/249, 0xf9}, {0x0}, {0x0}], 0x3, &(0x7f0000001a80)=""/239, 0xef}, 0x9}, {{&(0x7f0000001b80)=@nfc_llcp, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c00)=""/42, 0x2a}, {&(0x7f0000001c40)=""/129, 0x81}], 0x2, &(0x7f0000001d40)=""/100, 0x64}, 0x8e7}], 0x2, 0x2, 0x0) kexec_load(0x5, 0x4, &(0x7f00000022c0)=[{0x0, 0x0, 0x9, 0x80000001}, {&(0x7f0000000240), 0x0, 0x7ff, 0x3}, {&(0x7f00000005c0)="b4676a9c8b47901f795605068516a31341ad0ac0a85c74ba9901f5742b829bedbc22441203f53c96b939fe1eacd6e5c5bd93088ba6f9f09d03a18084b870cb89d3c747fff5707c39ad4016ba3667545af3ac656666aa2cce26eea530e75f241d9f067fcd398ed0784f18b71c092912ed71df8878d6ebc47d8a590abba327d57d02dcfe0b8767aef0433c2a05f09aefebabade01b1f2670826dd212c9bf0db58aba1bba64051434f02d4a8bbf6f146da910b5f1195626d977ba8857d4917fba055d38aa9b89", 0xc5, 0x6}, {&(0x7f00000006c0)="4dda58c6ca18bfb18900d8571cfce28a53d1eb74babb4dee57a7cfcdbfa3bd15d3875079beb38ed1ba0b7f4e44f2d2db2c5f7b35407689c2eafd716da21d06b2bd965614f28a466a9332f2d92f", 0x4d, 0x100, 0x1}], 0x30000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 10m38.531116701s ago: executing program 1 (id=629): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) 10m23.359632357s ago: executing program 32 (id=629): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) 9m27.298587924s ago: executing program 2 (id=815): r0 = fsopen(&(0x7f0000000000)='fusectl\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) getpgrp(0xffffffffffffffff) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, 0x0, &(0x7f0000000140)) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x2b, 0x23, 0x0, 0x2, 0x2, 0x400a9, 0x8, 0x2, 0x1}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = io_uring_setup(0x2dfd, &(0x7f0000000700)={0x0, 0xb11e, 0x8, 0x2, 0x30a}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x7}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x43b6, 0x1, 0x0, 0x28e}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r4], 0x1) r7 = socket(0x2d, 0x2, 0x0) connect$qrtr(r7, 0x0, 0x0) connect$qrtr(r7, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000000240)="27050200340f3c00060f2f2fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b0000000001004057000000060000000000000080", 0x48}], 0x1}, 0x9cdc2384056f013d) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000280)=0x1f) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) 9m26.202936026s ago: executing program 2 (id=818): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x1c0) 9m26.094288267s ago: executing program 2 (id=819): r0 = fsopen(&(0x7f0000000000)='fusectl\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) getpgrp(0xffffffffffffffff) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, 0x0, &(0x7f0000000140)) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x2b, 0x23, 0x0, 0x2, 0x2, 0x400a9, 0x8, 0x2, 0x1}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x2dfd, &(0x7f0000000700)={0x0, 0xb11e, 0x8, 0x2, 0x30a}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x7}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x43b6, 0x1, 0x0, 0x28e}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000), 0x0) r6 = socket(0x2d, 0x2, 0x0) connect$qrtr(r6, 0x0, 0x0) connect$qrtr(r6, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000000240)="27050200340f3c00060f2f2fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b0000000001004057000000060000000000000080", 0x48}], 0x1}, 0x9cdc2384056f013d) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000280)=0x1f) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) 9m24.545501802s ago: executing program 2 (id=828): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0xffffffffffffffa8, &(0x7f0000000040)={0x1}) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 9m23.435957246s ago: executing program 2 (id=834): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) acct(&(0x7f0000000000)='./file0\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0xff, 0xfffff00c}, {0xb1, 0x20, 0x40, 0xffffefff}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1400c800) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x3}) r6 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x181000) ioctl$MON_IOCX_MFETCH(r6, 0xc00c9207, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r9, &(0x7f0000000040)=0x8080000001ca, 0x12) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x4}, {0x3, 0x1}}, {{0x0, 0x1, 0x1}, {0x4, 0x1}}], 0x28) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 9m22.893744527s ago: executing program 2 (id=837): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x3de}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = getpgid(0xffffffffffffffff) getpriority(0x2, r8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r9, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000031c0)=[{&(0x7f0000003240)=ANY=[], 0x404}, {&(0x7f0000000640)={0x11c, 0x31, 0x10, 0x70bd27, 0x25dfdbfe, "", [@typed={0x5, 0x43, 0x0, 0x0, @str='\x00'}, @nested={0x35, 0x4b, 0x0, 0x1, [@generic="6ce9a3840df453ee6371cb83a66f93d1a27c764c6c29222f8444530b3b1e4294d983f5a2a814549a2c8a6f222f01d11d2b"]}, @nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @u32=0x8}]}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0x6}, @typed={0x11, 0x37, 0x0, 0x0, @str='/dev/urandom\x00'}, @nested={0x3f, 0x80, 0x0, 0x1, [@generic="49022c4b5cd85b3a47b21488589dacc7574c1a060d3d1b2c56e307e033c8b2d4946c0c751a795dae9929de6e8e417f7a3aaac65cb29cc4bcd69d87"]}, @generic="134ca5a96c85261c97cf8928b12a6537bc46e8454dde951dcbb39cf0127c3980221aadbfd6b45e7f152b5801568dd99ebfefd12686476a26394248b30ff4110dee5bae19891034380985f8b90cd018d573d14749c1a66c7626f942d5d2ea75"]}, 0x11c}, {0x0}, {&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="b1b58bbd256232fca30c1a44f8d2bf118bfd11dc1256e6f950dccdf915f22634b8a235bd924139a7593b0b716108710bd48b4a4746b83a308e66929b41bf4dc80a319c32854bec876cd2d5993c5d5eaa31ef400a71d25ba85e9d77719a4fb9d46f3da3d64d198b6baf6eb15da599080a8e9c7a92e51ffca0550800e700", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="0400df8000000000ec6024954b2e511af35710bd3940ac00f97f9622515653cc1db03b1b20402a868a5fa1f171833dcf6819d909aa333380a7f4033cbef3d18174397005042313679e1529b67b882227d0c4a3df9750a4db7fc9e9160f4897dcaa65e757fc61b015a2e30c5a0aa157a36807472425e343ffe23fc5cddc45eccf45e55cd3aab58bb2edd50dce94ae2d1eac90033e748433461d69e7f57d21a154c423c2e015ecff3de5907e18b6a72a66936f8f0843963e722e6dcc051c01d122a613926a5e8b6feeabfe351b812e47cc8b8a5d410ef6ad0aeff953334efad557c77636ef216d5337a98d1eb1755ec624deadf1e40fd80478f23a8acc1d95d24fc8a41b524a4a19e867ad8afcc619809822feeb96b92044860d404cfcb072146d38becb23fd4167da5bfee69c16449c115ef222bd313d4b07d773fd731c894bd37702fe694448dd52febddf18247c71592e3df53d7dd506d6491b280e0049e3e79a908e842bb04c11e93fb90b8cc27c83fb362512b37b4ca27a0f806cc4b51a666051984d1cd6c81ab1bf2bf1726bb57c7370f7da432e0a26b7822d3d7248517c8d869e6738725ddbacb7b68dc3ab33991aa1197e4f66f9468405187bff675d5fbc32e87d4db79b55d65b256c410c4f56bb9af6f617ba309e651cd7f967388f2633f31ddebae46ef1aa6e336a9739268cc4b188c37e48f930401404e0f97e1fa093e4ddd79efd6693360afbdd85b72bb0a92a7daf082c24ff470f5d72fbd2fe9e7f3d139f6ff125c8e618c500bb77223b64f76b3183d3279a71b5ecb41f9cba797c2639c9544cb05d27a6419f76dc0335b0708f043bdde3646adb44d0fa989bd53479e8a829ddf99c22776d4201575aa021db3d8e7eab476e623f9386293cfe98a33c60ab9d131c3d14fd4d50d5dd8f2310938418f511d904d8a490ad66acdbba8096835e785957c1a240a5550e37eb3113de2b79e7015b73eaf04e933729938a957c512f2032725350255cbbe406ae82859f75e75f8c7c69321b47f4b1266823007126a9e4ecc8fe32144af5a6f73ccd9ab82763fc23cc636ecb10872ebbfb06a1b0b0c6a80fc611e7e73e6b73690e27e3292350050cfae935030f17df56d9d2c43c95db3b781acffd7d2bdfa0429e8928dd7e22951cfb15c23a4c13fb90cfe9b19be68d9fd70bd12790666112e5c099276d0b48a158c4a397b2f35e34492ccbd9ccc2da4e55c54a11f4d80aea7a30bdd32010a2c86e6407dc6e731db416c5925fedfe3bd0e585a36d49dcaacac54e5c8ac6fa91e9e81af3b011706ada20b006250efdc861d263d8c2b8bdb52ad8050af876d401347f30a1ddca4ea69ef11f86c2a262562a331345b3a3fbda56b3ac8fc0bb8e05aa6dd5ec63d1922071fe6c0fd31ded91be27a62d285d0dba6066a3db94f84c69d7ef1380816052bd3ef874c954391f5fd55afe741b2458d333615416a7ba2fff2ca2554a16ff633ed3d0c8ca59cba77007a061d1445a6f50232fac956cbb33ad966b1780ebd47692173069d27d46bc3906040ea684f5a4e34d221c939a395e65d698074be52c7060e03185547d0444aa4508ecfbad9390f91560fad6f6577bcb0772550d596f66d3dde819affbe6bf7f94ee374b1fa16f2f94d6512a89cb1e820ff77ff7585afdfb46843eca83c38f4fde9a45419af1b1e746dd566176b51239a64437ceb40688b74dc5ad3a83e01efedf2d1b52184a0d50fef9924062ff31e00271a2758546292417544b50cc21672c18c7abeae9b12167fe00217da25836e2a3982c7ed2b90a74663c2124721857c4c32fb0b6c026b561f4292988a880b2076131cde96569b890fcc7ece992f9e950329ef6a67073bb474582524d69cfb306fc830a93ec8c4f21778c52ad07936418995e694a9535ca1c8a53fe048aa4a9b85cd3687c71957dd29e4829bd444aff07749caaee322498e3c9ee59697da0544ab640f221ffbdab6f4fef32be128b32b6442242528a854e07167c72418c7a08549c9004f9856bb56bc064c003c57058bd591ac9a787bebb0fe1071d65388f0c31a8a33dddf40e50e53073a9302d3990608e6b8f49c38c1172327e83815a9482e76c4434f7c18c67c267c38bf12d603b01c687140fbe61f1f4e965b1d616c7b3511433bb5bfb5a1bfb88ae07478c9f2198b50771ee368f6f344d6c461a9a47198b43f3d08d800fcc545313b0ec2a0bd7dc3b7476808d60440e44a957ada521ff94bd078a597703942c45b191266b5660722ea2b132f1fa46af881a68e7a653fd3c07addeeaaae8f30814fe1d523daa037f125a4883a1ca68b134f25fd178734a2ba9cae7c0ee96626bb492b8b33525105cea1711367b6f0dcf9ffc849f794638c9225ba32d27011766377f4eef8848b30f59aa3689ef294f038edcf75a3c24d52e556165aed4f71e9b41675b9b6a7d39523a949feb71840765462b499f87a90597d3e378e9b82a60ee5b4b2e7e671a1316d6a38f549931bcfc99b9ee15bc4ce34af9467f6c69bc5c37782730359aa51691eb5974564dad4162d9df107efd9ed8c7ddecd525f4bf46bdfafba7cafab945f8b95e45e9d78e60ca4de55412ec5cecd94eddeafbc7b7855c6390f923ce0c4d175c68f1730b996b922d672f337ea239040a5a2083ecfc6fadeca93edbfffd17c06cb7649f115f49e7323e86c6d3f0b165b0e043adec595b657921dcf1cb61c37cc99f705834a9dda7ed06e02282e92b0ce0f5abfec2ca90855cf2aa8b32de5ed2288ba53863f21da1ba3684d99331010fe2c127a81e6cfced4bb79a3ba53c2b4acbff5098d36ddbe88a9ad0d93bbfc7ef922cb69fa81cf4575578e95c2bba6049b91536036e0732766ace8dbbf8706fb0a6da9d15c04f9c7c6059bcb48515093d64c2ee062b25cb3d3e968d69c4a6d7be35293769659d9272d582103db78dff67326c3598b20532793b7d7c025e7da1b13cee5607763f50c88ed8d68173275eb36162eda85db8ab6ec114660fea815e614a17c4edce2695f44134aebbd39f3aee0b7b4857125b31bc1932c3d92218895bb43c45e4afdeb39dfbe32bb1d1aacdecd92761d10e31689f0fd0ce8212caf6818454f9e85bc9d623597e2d4b79e35b59af91289df8097a189fc4d950de2f1a658007764f2156fa32a0d888c28497b1146a2a44c972871e31e0ab8913afef68d414b3c03f2e36d88f7a434e05fe4c1bb207a463310eb6ec9354d91862a3638382a45c435d04866e6af6b9be1503ab7fc85add648c3f0f522b5958b4f9d85b435f9fc971c3fe49c10da49931f8e7fef91153d515a8ee6c03d99d1f2297e6bd25d34bab55eec312f48ec569fbe31c71947755cc42ef38323bea817ded93ce577158f9e0ce5765b9f02496f24901b5011349bbbf6e119a0f896ed351b2ac59ac6717dae0a13d1759182bb7c0fcbe93671142bafa261c7310a901824ff6170ebd841bcac3232888938dcb3008f39d8f60e252e976c80481c75b038a88b2abedb2e766b3d015149967b666c2dea0d94df6f0861de4a687af6b3e2d71269e5bb235fc62f4aed83122cded9752bd9c5475726b3274850cf5e90cdec6965a65d0ef2959fbaeb3a226fc9e3b4985fe654a410136ab0e4a95a74f222828a07a93514705bb6289828582f93cfd9ee3f394593503a50f5ff0614530d9324ca874726db7aeee8c3d0974bec5e2c45951877c4d524606dfe881afc4f5f5895f5c5225f4538b223a52f3e2023ed5ae9c433d3173a8d894d51ae8e7f97d31f62eba245b0ea88cbf4973f229d3af2d825ff1e38e6a3959139a83107953424ad354a933c35a3b34194e3010019c5cc4d837d959d1693f6c70e57db76c80e133024fe09617de1fedc12c6aad64962b17bb9d373944854b27a1f2e2fc272770ca24d09886b7c2f1d652a4c362c95666630839109cd870067f22d68a567fe7628b6dfc672140af1e6bf4f0866e6d68bebf2f3844c3a5dfb34a83088dd0509b2f77b6db0d5f4e447a5b67b6b38599b6fd4a55c801283c17e9f91a258ccd4bf70a186edd496c0743489ed8b9c3202f907c0868ac8ff67a71bad361f630a03b8274b176183269e91fb1d6c9ab3b2bdfb34b635f7f181b68299fd3537d18b67f2111910007f4f8370aceec37349f8cabe5433e3e9bc8ec1c420da19e121e889a1740b3061f7f137b75275f2c5f46d9fe3c6637d898bea417dfcccfac6f1b730039ce97ae59b5c7ed9fc1b0c46ac64c0fd139d15799412998cddf32377decd8bfffa5b5858eeeeae59d32b33f7cd383393f8189f6db9195444b2a03190c9ee97f3c660f648a8906b4e62e8a9bed99ad7e077bef569d045bbfcf0f00bddd664e73ef2f1ac2bac1f76f93929bb137d8a2e4e903e5dd78b9ad389c3a6ae2859b590d49223c78c6ef9f84ef4de55b0fd465fe6ec5f7afc19be5c07cb6b4d04d3fcf15189c5acefe06f5c76a9a13cf09a9d3c63820b0fafb1798b42b21e782d7f5d1d22fd6738cfffaac6cb02e5b35ddff9d39795e0e2fe3fb88516d0d74fc972401d2dcbe758ae60f3b5ad4f1fb2ddb1b92465ff9050c58a6fb61cebc2e3e15e0f59ef331ef9635ebe3996b6bee0aff62fd753e0f7c34f197e63b95775686df53ad468c0230ff12be9d3840599f7caa7015ac6f2d271477727d551ff7454dc38c4dd77c8954dd9f0f54f0808044524a1c9f85db003e473ee45a70f3539f7019a5062e5f3b7e3f36341c3adebdd12d288bcae49f06eab7faf3057dbbbb348e933300ca54b427b576fe71702a728c0ea6e764b073ac2a758963c8108b6f70bbe565544c61f933f317e2db95dfe7aaa456bcac37d4d7cb9313c2acd47bb41e1b5dd9fa6ff6afd78c085b65dc2f86899e355c8e88d07a2b3c8d2737c356aa4881c2aa4a954391ccec785002cb9a0be62ebfb753914ee5272219dd8aac14a753f25d7c5715bb116f1e3fc2901b12a485d97a41c0a8e957906eaf50540c383ebe6b23b6e21f87cf0f8428e9cef00a82af8a256cff9289ca41cbc8fedae045e1f7b19a320b2ded233447938beef37d7e24a5939d8b893db362ec9c442633bc502cb36dbd1dd95473ae97fc05d1fa32a418093665b4d8683092178060ccea1911f44e1a004bc98a548c79a6e4d9a3af6efab061166d3f4cdeaa03460b43bc9b2d8c99ac9067a1168210b5ff9017ae3e150a5d5593e35bc75150d1f873a1aba4e0a5870ba52f9c66ef9a86540b314067166655f3ffbee472db8c5046b693021699690e398f69d8aa0cf2f22c2dac26103c05575527a9b95b3b418d885e107e824fdb346d8ecd6c2ea9b425290fa4f44727775c9c31438f366c0c6b35d777bb3dfa265dce4b14f07f5de38f695bbd043b93739c6bc0ef5b7d96fff37fb03b3bfe7e7e46af263edb50ff5528db0359afd2410fd3cd2d786b26f22f8ced8fecbcafabbc3985883b7fbb2c4997d87fdd919eab5b2c156a335ce8d0a8a02fe3416772882af75de3ab40db9830a4d61e990d44b98d9ebe30adbaf6b26903eb2339f89af5bbbd3dafede9c9a0bb49129afcc33cdf7fd6b64c1543a155c94f9959000b02dd8524025cc143964590870615ad8068750ecd13d589cea251a694795a88ecfb9ba4f989f4ca13989a91034fb727bd75a3a810f59d3fdd84d4827b56f43d379680f8ebbca9740ab28e2e596f64f3f0652cf432f01ac5a144f93cc7e7d5e420a96543d43696a0393e0df815c69bb3a642c6985cba5dd3e46aaa9971b7a01e13af84143546b65533ed49837743817cd546e5ac3efe03b88cc077216f0566b06d5625336d502542347c96106f4f7eabff613585367a463124d74c9bf9e72c8c16cf5d177ee2f889bb2bf854d08afed44be9211250645d75350b1c64f8a3b1fedfef3c6b27d0ca5d9add2af9fd8ed916b777bf9a4f5ac9382b9d2b8d588d38ceb9146992ed93d32569b750ecc5556a5432af1ae7bc89b6342a74295d0c00ec008000000000000000b000028004008480eb24357ef15c9dc69e64c72f4fb4dc6a5df06fb16e2fd60cd65400fe2522191acccb6fe635749d4a7eaa5af794ce81cf9e93b478a089024647c639e8f9889354828f36b081badc0554a531c8aa43f9833ed15406522bebd481c539d2c96868c277a238c635614440fcfc60d020fe0f38554935848c0db7e78c7b96c66233f820d79648f408008f00cea1e5097516a1e00a0faee0950143ad80dfb4ac6e32e16e6be68f38f77467dde19d98e48919baa419775826346a9ebccf37ced72e5eedb9675f6f43775eba45a115162acc6df68d5fbfb3520202f8f8bbeedf9f9a4db3a1907cf9ffddd7a4f66ab87ad00e3aeb0e26ddf75f93767e0b9fade6485a8b754d5c0e5a4a2996a871bc31848c3540a99f7e087a88512895724b36f247c88a4c69f27c04a0c5a8b1f26b76f10fc3b93110670696bc81e0be140b23fa91bf111f63f601fc47990dd1ba5ac84a151fa7812a165ea75e5eed60a065f2ce378be8b34ed26f4ab034a627ec5b7a73f5a013f583453bcc36d359a01365f7269d189a8b354d46d5", @ANYRES32=0x0, @ANYBLOB="0400348014003900fe8000000000000000000000000000aa0400408010003d80040075800400f4800400c1000000"], 0x1344}, {&(0x7f0000002840)={0x28, 0x30, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x18, 0x2b, 0x0, 0x1, [@typed={0x14, 0xc9, 0x0, 0x0, @ipv6=@private1}]}]}, 0x28}, {&(0x7f0000000500)={0x110, 0x2f, 0x800, 0x70bd26, 0x25dfdbfc, "", [@typed={0xfe, 0x2c, 0x0, 0x0, @binary="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"}]}, 0x110}, {&(0x7f0000002ac0)={0x140, 0x1d, 0x20, 0x70bd29, 0x25dfdbfe, "", [@nested={0x15, 0xaf, 0x0, 0x1, [@typed={0x4, 0x77}, @nested={0x4, 0xeb}, @generic, @generic="4d0741a1df181bb60f"]}, @nested={0x4, 0xec}, @nested={0x114, 0x128, 0x0, 0x1, [@generic="b7fb0555c475ad685332af0145e93929e165c82fe9d3772007e4d9f0095e4eed8487da6f464ef0da9f8703e4c7d6e0faaa8f5cab6bdf0b847be56bee4fd666512dc508827b5a137b260c9b2837d871a55e91f5d17b6195c3b1dfd63c21dd96d8014e36f83100820fd09c2561f3c959f2fcaaec7918", @generic="dabbd9ed6cf1f1cfa55d2bb46e3d3f478fbd38970bfc9b4a6ed70fa1dc848aeed45140b06555f27538f5b3e72294ef402807c09479fb6936b4c0c1107fd30db1a93f4c10957eed6e209ec1ceec2afc511c649c302a26806cd59a47022a938f0d5c580fc0720faaf2f94f50a7adbcca24e2d1539a91c27ad025b503054384b9", @nested={0x4, 0x148}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x8c}]}]}, 0x140}, {&(0x7f0000002880)=ANY=[@ANYBLOB="500100003f0012042dbd7000ebdbdf25e44e6e092d15e25a0d1986d9f4ae12e7954914d017c12564e80dde669764361d6bd9689eaef669715acee8d87b09100b8505deb731e718683e124bd81d509041e6232ba0bae0d8c2cfccbe8cee8f372226d3e2dad7769dd3046b85f5316c867d62542ad7a87c87c0571593c2e6e67151d871f2adccad734f2d3050ff79886646f1aa32af9c8fb885f3a67a058b6987d665087384c725aacd75b3c68d3da4d49353ddf470ed5b0d724525e3aec299e638bb5632699894cf2a324f02371961ada6cd5759b333a63322e0a026a0cc3cda63a36fd60f76c6ee3a1179789008a050f717f0b3779fd92df5e8b7db3071da28adf382d63c75451b63d0b87a7234bc08164bcc82ffb3754d8230d2218eb698ea4d796509b5d048ccbdb4c4190c00230008000000000000001100b1002f6465762f7572616e646f6d0000000000b0a57c"], 0x150}, {&(0x7f0000003000)=ANY=[@ANYBLOB="cc0000003600000227bd7000fbdbdf2563f0372f865e46131678ef81bd2e2a1e1e4e5c580f71393f02907dcb97c7296b2b5a260430aee19d6527341faf9cd43afbe3cd337d7c8a52a85845972010795f71f5898dbbc9cfbc2a1727011dd2df533ff22a723fcc4ddfd97ee4c2e3ec4248f61a85b1bef7abfb9c27e67acca578436656a70d5602c0c144be3de7dd69061e596d32d1a57481c456eda2253de3d9cae74012f716704ec5bbd1e03a7b51aa66ff3b672c712816f5f01b00"/203], 0xcc}], 0x9, &(0x7f0000005380)=[@cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r1, 0xffffffffffffffff, r7, 0xffffffffffffffff, r7]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5, r2]}}], 0x8c, 0xc040}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc04c565d, &(0x7f00000003c0)=@fd={0x113, 0x0, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x5, 0xd2598af09f5c086f, 0x2, 0x0, 0x48, 0xf, "3076eddd"}, 0x4, 0x4, {}, 0x7ff, 0x0, r7}) sendto$inet6(r9, &(0x7f00000002c0)='E', 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 9m22.793487081s ago: executing program 33 (id=837): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x3de}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = getpgid(0xffffffffffffffff) getpriority(0x2, r8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r9, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000031c0)=[{&(0x7f0000003240)=ANY=[], 0x404}, {&(0x7f0000000640)={0x11c, 0x31, 0x10, 0x70bd27, 0x25dfdbfe, "", [@typed={0x5, 0x43, 0x0, 0x0, @str='\x00'}, @nested={0x35, 0x4b, 0x0, 0x1, [@generic="6ce9a3840df453ee6371cb83a66f93d1a27c764c6c29222f8444530b3b1e4294d983f5a2a814549a2c8a6f222f01d11d2b"]}, @nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @u32=0x8}]}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0x6}, @typed={0x11, 0x37, 0x0, 0x0, @str='/dev/urandom\x00'}, @nested={0x3f, 0x80, 0x0, 0x1, [@generic="49022c4b5cd85b3a47b21488589dacc7574c1a060d3d1b2c56e307e033c8b2d4946c0c751a795dae9929de6e8e417f7a3aaac65cb29cc4bcd69d87"]}, @generic="134ca5a96c85261c97cf8928b12a6537bc46e8454dde951dcbb39cf0127c3980221aadbfd6b45e7f152b5801568dd99ebfefd12686476a26394248b30ff4110dee5bae19891034380985f8b90cd018d573d14749c1a66c7626f942d5d2ea75"]}, 0x11c}, {0x0}, {&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="b1b58bbd256232fca30c1a44f8d2bf118bfd11dc1256e6f950dccdf915f22634b8a235bd924139a7593b0b716108710bd48b4a4746b83a308e66929b41bf4dc80a319c32854bec876cd2d5993c5d5eaa31ef400a71d25ba85e9d77719a4fb9d46f3da3d64d198b6baf6eb15da599080a8e9c7a92e51ffca0550800e700", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="0400df8000000000ec6024954b2e511af35710bd3940ac00f97f9622515653cc1db03b1b20402a868a5fa1f171833dcf6819d909aa333380a7f4033cbef3d18174397005042313679e1529b67b882227d0c4a3df9750a4db7fc9e9160f4897dcaa65e757fc61b015a2e30c5a0aa157a36807472425e343ffe23fc5cddc45eccf45e55cd3aab58bb2edd50dce94ae2d1eac90033e748433461d69e7f57d21a154c423c2e015ecff3de5907e18b6a72a66936f8f0843963e722e6dcc051c01d122a613926a5e8b6feeabfe351b812e47cc8b8a5d410ef6ad0aeff953334efad557c77636ef216d5337a98d1eb1755ec624deadf1e40fd80478f23a8acc1d95d24fc8a41b524a4a19e867ad8afcc619809822feeb96b92044860d404cfcb072146d38becb23fd4167da5bfee69c16449c115ef222bd313d4b07d773fd731c894bd37702fe694448dd52febddf18247c71592e3df53d7dd506d6491b280e0049e3e79a908e842bb04c11e93fb90b8cc27c83fb362512b37b4ca27a0f806cc4b51a666051984d1cd6c81ab1bf2bf1726bb57c7370f7da432e0a26b7822d3d7248517c8d869e6738725ddbacb7b68dc3ab33991aa1197e4f66f9468405187bff675d5fbc32e87d4db79b55d65b256c410c4f56bb9af6f617ba309e651cd7f967388f2633f31ddebae46ef1aa6e336a9739268cc4b188c37e48f930401404e0f97e1fa093e4ddd79efd6693360afbdd85b72bb0a92a7daf082c24ff470f5d72fbd2fe9e7f3d139f6ff125c8e618c500bb77223b64f76b3183d3279a71b5ecb41f9cba797c2639c9544cb05d27a6419f76dc0335b0708f043bdde3646adb44d0fa989bd53479e8a829ddf99c22776d4201575aa021db3d8e7eab476e623f9386293cfe98a33c60ab9d131c3d14fd4d50d5dd8f2310938418f511d904d8a490ad66acdbba8096835e785957c1a240a5550e37eb3113de2b79e7015b73eaf04e933729938a957c512f2032725350255cbbe406ae82859f75e75f8c7c69321b47f4b1266823007126a9e4ecc8fe32144af5a6f73ccd9ab82763fc23cc636ecb10872ebbfb06a1b0b0c6a80fc611e7e73e6b73690e27e3292350050cfae935030f17df56d9d2c43c95db3b781acffd7d2bdfa0429e8928dd7e22951cfb15c23a4c13fb90cfe9b19be68d9fd70bd12790666112e5c099276d0b48a158c4a397b2f35e34492ccbd9ccc2da4e55c54a11f4d80aea7a30bdd32010a2c86e6407dc6e731db416c5925fedfe3bd0e585a36d49dcaacac54e5c8ac6fa91e9e81af3b011706ada20b006250efdc861d263d8c2b8bdb52ad8050af876d401347f30a1ddca4ea69ef11f86c2a262562a331345b3a3fbda56b3ac8fc0bb8e05aa6dd5ec63d1922071fe6c0fd31ded91be27a62d285d0dba6066a3db94f84c69d7ef1380816052bd3ef874c954391f5fd55afe741b2458d333615416a7ba2fff2ca2554a16ff633ed3d0c8ca59cba77007a061d1445a6f50232fac956cbb33ad966b1780ebd47692173069d27d46bc3906040ea684f5a4e34d221c939a395e65d698074be52c7060e03185547d0444aa4508ecfbad9390f91560fad6f6577bcb0772550d596f66d3dde819affbe6bf7f94ee374b1fa16f2f94d6512a89cb1e820ff77ff7585afdfb46843eca83c38f4fde9a45419af1b1e746dd566176b51239a64437ceb40688b74dc5ad3a83e01efedf2d1b52184a0d50fef9924062ff31e00271a2758546292417544b50cc21672c18c7abeae9b12167fe00217da25836e2a3982c7ed2b90a74663c2124721857c4c32fb0b6c026b561f4292988a880b2076131cde96569b890fcc7ece992f9e950329ef6a67073bb474582524d69cfb306fc830a93ec8c4f21778c52ad07936418995e694a9535ca1c8a53fe048aa4a9b85cd3687c71957dd29e4829bd444aff07749caaee322498e3c9ee59697da0544ab640f221ffbdab6f4fef32be128b32b6442242528a854e07167c72418c7a08549c9004f9856bb56bc064c003c57058bd591ac9a787bebb0fe1071d65388f0c31a8a33dddf40e50e53073a9302d3990608e6b8f49c38c1172327e83815a9482e76c4434f7c18c67c267c38bf12d603b01c687140fbe61f1f4e965b1d616c7b3511433bb5bfb5a1bfb88ae07478c9f2198b50771ee368f6f344d6c461a9a47198b43f3d08d800fcc545313b0ec2a0bd7dc3b7476808d60440e44a957ada521ff94bd078a597703942c45b191266b5660722ea2b132f1fa46af881a68e7a653fd3c07addeeaaae8f30814fe1d523daa037f125a4883a1ca68b134f25fd178734a2ba9cae7c0ee96626bb492b8b33525105cea1711367b6f0dcf9ffc849f794638c9225ba32d27011766377f4eef8848b30f59aa3689ef294f038edcf75a3c24d52e556165aed4f71e9b41675b9b6a7d39523a949feb71840765462b499f87a90597d3e378e9b82a60ee5b4b2e7e671a1316d6a38f549931bcfc99b9ee15bc4ce34af9467f6c69bc5c37782730359aa51691eb5974564dad4162d9df107efd9ed8c7ddecd525f4bf46bdfafba7cafab945f8b95e45e9d78e60ca4de55412ec5cecd94eddeafbc7b7855c6390f923ce0c4d175c68f1730b996b922d672f337ea239040a5a2083ecfc6fadeca93edbfffd17c06cb7649f115f49e7323e86c6d3f0b165b0e043adec595b657921dcf1cb61c37cc99f705834a9dda7ed06e02282e92b0ce0f5abfec2ca90855cf2aa8b32de5ed2288ba53863f21da1ba3684d99331010fe2c127a81e6cfced4bb79a3ba53c2b4acbff5098d36ddbe88a9ad0d93bbfc7ef922cb69fa81cf4575578e95c2bba6049b91536036e0732766ace8dbbf8706fb0a6da9d15c04f9c7c6059bcb48515093d64c2ee062b25cb3d3e968d69c4a6d7be35293769659d9272d582103db78dff67326c3598b20532793b7d7c025e7da1b13cee5607763f50c88ed8d68173275eb36162eda85db8ab6ec114660fea815e614a17c4edce2695f44134aebbd39f3aee0b7b4857125b31bc1932c3d92218895bb43c45e4afdeb39dfbe32bb1d1aacdecd92761d10e31689f0fd0ce8212caf6818454f9e85bc9d623597e2d4b79e35b59af91289df8097a189fc4d950de2f1a658007764f2156fa32a0d888c28497b1146a2a44c972871e31e0ab8913afef68d414b3c03f2e36d88f7a434e05fe4c1bb207a463310eb6ec9354d91862a3638382a45c435d04866e6af6b9be1503ab7fc85add648c3f0f522b5958b4f9d85b435f9fc971c3fe49c10da49931f8e7fef91153d515a8ee6c03d99d1f2297e6bd25d34bab55eec312f48ec569fbe31c71947755cc42ef38323bea817ded93ce577158f9e0ce5765b9f02496f24901b5011349bbbf6e119a0f896ed351b2ac59ac6717dae0a13d1759182bb7c0fcbe93671142bafa261c7310a901824ff6170ebd841bcac3232888938dcb3008f39d8f60e252e976c80481c75b038a88b2abedb2e766b3d015149967b666c2dea0d94df6f0861de4a687af6b3e2d71269e5bb235fc62f4aed83122cded9752bd9c5475726b3274850cf5e90cdec6965a65d0ef2959fbaeb3a226fc9e3b4985fe654a410136ab0e4a95a74f222828a07a93514705bb6289828582f93cfd9ee3f394593503a50f5ff0614530d9324ca874726db7aeee8c3d0974bec5e2c45951877c4d524606dfe881afc4f5f5895f5c5225f4538b223a52f3e2023ed5ae9c433d3173a8d894d51ae8e7f97d31f62eba245b0ea88cbf4973f229d3af2d825ff1e38e6a3959139a83107953424ad354a933c35a3b34194e3010019c5cc4d837d959d1693f6c70e57db76c80e133024fe09617de1fedc12c6aad64962b17bb9d373944854b27a1f2e2fc272770ca24d09886b7c2f1d652a4c362c95666630839109cd870067f22d68a567fe7628b6dfc672140af1e6bf4f0866e6d68bebf2f3844c3a5dfb34a83088dd0509b2f77b6db0d5f4e447a5b67b6b38599b6fd4a55c801283c17e9f91a258ccd4bf70a186edd496c0743489ed8b9c3202f907c0868ac8ff67a71bad361f630a03b8274b176183269e91fb1d6c9ab3b2bdfb34b635f7f181b68299fd3537d18b67f2111910007f4f8370aceec37349f8cabe5433e3e9bc8ec1c420da19e121e889a1740b3061f7f137b75275f2c5f46d9fe3c6637d898bea417dfcccfac6f1b730039ce97ae59b5c7ed9fc1b0c46ac64c0fd139d15799412998cddf32377decd8bfffa5b5858eeeeae59d32b33f7cd383393f8189f6db9195444b2a03190c9ee97f3c660f648a8906b4e62e8a9bed99ad7e077bef569d045bbfcf0f00bddd664e73ef2f1ac2bac1f76f93929bb137d8a2e4e903e5dd78b9ad389c3a6ae2859b590d49223c78c6ef9f84ef4de55b0fd465fe6ec5f7afc19be5c07cb6b4d04d3fcf15189c5acefe06f5c76a9a13cf09a9d3c63820b0fafb1798b42b21e782d7f5d1d22fd6738cfffaac6cb02e5b35ddff9d39795e0e2fe3fb88516d0d74fc972401d2dcbe758ae60f3b5ad4f1fb2ddb1b92465ff9050c58a6fb61cebc2e3e15e0f59ef331ef9635ebe3996b6bee0aff62fd753e0f7c34f197e63b95775686df53ad468c0230ff12be9d3840599f7caa7015ac6f2d271477727d551ff7454dc38c4dd77c8954dd9f0f54f0808044524a1c9f85db003e473ee45a70f3539f7019a5062e5f3b7e3f36341c3adebdd12d288bcae49f06eab7faf3057dbbbb348e933300ca54b427b576fe71702a728c0ea6e764b073ac2a758963c8108b6f70bbe565544c61f933f317e2db95dfe7aaa456bcac37d4d7cb9313c2acd47bb41e1b5dd9fa6ff6afd78c085b65dc2f86899e355c8e88d07a2b3c8d2737c356aa4881c2aa4a954391ccec785002cb9a0be62ebfb753914ee5272219dd8aac14a753f25d7c5715bb116f1e3fc2901b12a485d97a41c0a8e957906eaf50540c383ebe6b23b6e21f87cf0f8428e9cef00a82af8a256cff9289ca41cbc8fedae045e1f7b19a320b2ded233447938beef37d7e24a5939d8b893db362ec9c442633bc502cb36dbd1dd95473ae97fc05d1fa32a418093665b4d8683092178060ccea1911f44e1a004bc98a548c79a6e4d9a3af6efab061166d3f4cdeaa03460b43bc9b2d8c99ac9067a1168210b5ff9017ae3e150a5d5593e35bc75150d1f873a1aba4e0a5870ba52f9c66ef9a86540b314067166655f3ffbee472db8c5046b693021699690e398f69d8aa0cf2f22c2dac26103c05575527a9b95b3b418d885e107e824fdb346d8ecd6c2ea9b425290fa4f44727775c9c31438f366c0c6b35d777bb3dfa265dce4b14f07f5de38f695bbd043b93739c6bc0ef5b7d96fff37fb03b3bfe7e7e46af263edb50ff5528db0359afd2410fd3cd2d786b26f22f8ced8fecbcafabbc3985883b7fbb2c4997d87fdd919eab5b2c156a335ce8d0a8a02fe3416772882af75de3ab40db9830a4d61e990d44b98d9ebe30adbaf6b26903eb2339f89af5bbbd3dafede9c9a0bb49129afcc33cdf7fd6b64c1543a155c94f9959000b02dd8524025cc143964590870615ad8068750ecd13d589cea251a694795a88ecfb9ba4f989f4ca13989a91034fb727bd75a3a810f59d3fdd84d4827b56f43d379680f8ebbca9740ab28e2e596f64f3f0652cf432f01ac5a144f93cc7e7d5e420a96543d43696a0393e0df815c69bb3a642c6985cba5dd3e46aaa9971b7a01e13af84143546b65533ed49837743817cd546e5ac3efe03b88cc077216f0566b06d5625336d502542347c96106f4f7eabff613585367a463124d74c9bf9e72c8c16cf5d177ee2f889bb2bf854d08afed44be9211250645d75350b1c64f8a3b1fedfef3c6b27d0ca5d9add2af9fd8ed916b777bf9a4f5ac9382b9d2b8d588d38ceb9146992ed93d32569b750ecc5556a5432af1ae7bc89b6342a74295d0c00ec008000000000000000b000028004008480eb24357ef15c9dc69e64c72f4fb4dc6a5df06fb16e2fd60cd65400fe2522191acccb6fe635749d4a7eaa5af794ce81cf9e93b478a089024647c639e8f9889354828f36b081badc0554a531c8aa43f9833ed15406522bebd481c539d2c96868c277a238c635614440fcfc60d020fe0f38554935848c0db7e78c7b96c66233f820d79648f408008f00cea1e5097516a1e00a0faee0950143ad80dfb4ac6e32e16e6be68f38f77467dde19d98e48919baa419775826346a9ebccf37ced72e5eedb9675f6f43775eba45a115162acc6df68d5fbfb3520202f8f8bbeedf9f9a4db3a1907cf9ffddd7a4f66ab87ad00e3aeb0e26ddf75f93767e0b9fade6485a8b754d5c0e5a4a2996a871bc31848c3540a99f7e087a88512895724b36f247c88a4c69f27c04a0c5a8b1f26b76f10fc3b93110670696bc81e0be140b23fa91bf111f63f601fc47990dd1ba5ac84a151fa7812a165ea75e5eed60a065f2ce378be8b34ed26f4ab034a627ec5b7a73f5a013f583453bcc36d359a01365f7269d189a8b354d46d5", @ANYRES32=0x0, @ANYBLOB="0400348014003900fe8000000000000000000000000000aa0400408010003d80040075800400f4800400c1000000"], 0x1344}, {&(0x7f0000002840)={0x28, 0x30, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x18, 0x2b, 0x0, 0x1, [@typed={0x14, 0xc9, 0x0, 0x0, @ipv6=@private1}]}]}, 0x28}, {&(0x7f0000000500)={0x110, 0x2f, 0x800, 0x70bd26, 0x25dfdbfc, "", [@typed={0xfe, 0x2c, 0x0, 0x0, @binary="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"}]}, 0x110}, {&(0x7f0000002ac0)={0x140, 0x1d, 0x20, 0x70bd29, 0x25dfdbfe, "", [@nested={0x15, 0xaf, 0x0, 0x1, [@typed={0x4, 0x77}, @nested={0x4, 0xeb}, @generic, @generic="4d0741a1df181bb60f"]}, @nested={0x4, 0xec}, @nested={0x114, 0x128, 0x0, 0x1, [@generic="b7fb0555c475ad685332af0145e93929e165c82fe9d3772007e4d9f0095e4eed8487da6f464ef0da9f8703e4c7d6e0faaa8f5cab6bdf0b847be56bee4fd666512dc508827b5a137b260c9b2837d871a55e91f5d17b6195c3b1dfd63c21dd96d8014e36f83100820fd09c2561f3c959f2fcaaec7918", @generic="dabbd9ed6cf1f1cfa55d2bb46e3d3f478fbd38970bfc9b4a6ed70fa1dc848aeed45140b06555f27538f5b3e72294ef402807c09479fb6936b4c0c1107fd30db1a93f4c10957eed6e209ec1ceec2afc511c649c302a26806cd59a47022a938f0d5c580fc0720faaf2f94f50a7adbcca24e2d1539a91c27ad025b503054384b9", @nested={0x4, 0x148}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x8c}]}]}, 0x140}, {&(0x7f0000002880)=ANY=[@ANYBLOB="500100003f0012042dbd7000ebdbdf25e44e6e092d15e25a0d1986d9f4ae12e7954914d017c12564e80dde669764361d6bd9689eaef669715acee8d87b09100b8505deb731e718683e124bd81d509041e6232ba0bae0d8c2cfccbe8cee8f372226d3e2dad7769dd3046b85f5316c867d62542ad7a87c87c0571593c2e6e67151d871f2adccad734f2d3050ff79886646f1aa32af9c8fb885f3a67a058b6987d665087384c725aacd75b3c68d3da4d49353ddf470ed5b0d724525e3aec299e638bb5632699894cf2a324f02371961ada6cd5759b333a63322e0a026a0cc3cda63a36fd60f76c6ee3a1179789008a050f717f0b3779fd92df5e8b7db3071da28adf382d63c75451b63d0b87a7234bc08164bcc82ffb3754d8230d2218eb698ea4d796509b5d048ccbdb4c4190c00230008000000000000001100b1002f6465762f7572616e646f6d0000000000b0a57c"], 0x150}, {&(0x7f0000003000)=ANY=[@ANYBLOB="cc0000003600000227bd7000fbdbdf2563f0372f865e46131678ef81bd2e2a1e1e4e5c580f71393f02907dcb97c7296b2b5a260430aee19d6527341faf9cd43afbe3cd337d7c8a52a85845972010795f71f5898dbbc9cfbc2a1727011dd2df533ff22a723fcc4ddfd97ee4c2e3ec4248f61a85b1bef7abfb9c27e67acca578436656a70d5602c0c144be3de7dd69061e596d32d1a57481c456eda2253de3d9cae74012f716704ec5bbd1e03a7b51aa66ff3b672c712816f5f01b00"/203], 0xcc}], 0x9, &(0x7f0000005380)=[@cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r1, 0xffffffffffffffff, r7, 0xffffffffffffffff, r7]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5, r2]}}], 0x8c, 0xc040}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc04c565d, &(0x7f00000003c0)=@fd={0x113, 0x0, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x5, 0xd2598af09f5c086f, 0x2, 0x0, 0x48, 0xf, "3076eddd"}, 0x4, 0x4, {}, 0x7ff, 0x0, r7}) sendto$inet6(r9, &(0x7f00000002c0)='E', 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 1m26.061701854s ago: executing program 4 (id=2971): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_setup(0x9, &(0x7f0000000240)=0x0) io_pgetevents(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x4004, @fd_index=0x3, 0xfffffffeffffffff, &(0x7f00000026c0), 0x0, 0x8, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x9, 0x0, 0x0}}}) io_uring_enter(r2, 0x4bb7, 0xfffffffd, 0xc8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000180)={0x9, 0xffffffffffffffff, 0x20, {0x1000000005, 0x2000000000}, 0x6}, 0x1) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace(0x10, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r10, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x92, 0x0) 1m24.341885433s ago: executing program 4 (id=2974): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newtclass={0x38, 0x28, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0xfff2, 0x7}, {0x9, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x7}}, @tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 1m24.194820895s ago: executing program 4 (id=2976): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x80080, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)={0x40000000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x10, 0xb}, {0x2, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x44, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x800}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x1}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xf8e}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x2}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x10000}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m23.384615763s ago: executing program 4 (id=2980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1fffff25, &(0x7f0000000400)=[{0x6, 0x1, 0x4, 0x7ffb7ffc}]}) r2 = socket(0x80000000000000a, 0x2, 0x0) getpeername(r2, &(0x7f0000000180)=@nfc_llcp, &(0x7f0000000380)=0x80) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a4, 0x128, 0x2e0, 0x128, 0x128, 0x94, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, &(0x7f0000000100), {[{{@ip={@multicast1, @multicast1, 0x67c39b28fcca17f4, 0xffffff00, 'virt_wifi0\x00', 'sit0\x00', {0xff}, {}, 0x29, 0x2, 0x6a}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x20}, 0xffffff00, 0x0, 'macvlan1\x00', 'syzkaller1\x00', {0xff}, {}, 0x4, 0x1, 0x9}, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x20, 0x7, 0x2}}}, {{@ip={@private=0xa010102, @remote, 0xff, 0xff, 'macvtap0\x00', 'netdevsim0\x00', {}, {0xff}, 0x32, 0x0, 0x44}, 0x0, 0xc0, 0xe4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}, @common=@addrtype={{0x2c}, {0x400, 0xa2, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x5, 0x2, 0x1, 0x8, 0x4, 0x1], 0x6, 0x1}}}]}, @inet=@TOS={0x24, 'TOS\x00', 0x0, {0x17, 0x4}}}, {{@ip={@remote, @rand_addr=0x64010100, 0xff0000ff, 0xff, 'virt_wifi0\x00', 'macsec0\x00', {0xff}, {}, 0x1, 0x2, 0x1b}, 0x0, 0xd4, 0x130, 0x0, {}, [@common=@icmp={{0x24}, {0xc, '/Y', 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x2, 0x4, 0x1, 0x2, 0x3], 0x1, 0x1}}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x3, 0x4, [0x3f, 0x12, 0x5, 0x22, 0x5, 0x39, 0x25, 0x1d, 0x34, 0x32, 0x3e, 0x7, 0x2f, 0x14, 0x2f, 0x12], 0x1, 0x27a8, 0x4}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000440)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}}}, 0x108) r4 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000340)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb8fd, 0x0, 0x0, 0x0, 0xfffffd80, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xff, 0x0, 0x2, 0x0, 0x2, 0xfffffffc]}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m23.225014052s ago: executing program 4 (id=2982): ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40087447, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x1, 0x0, 0x1}, {0xfff9, 0x0, 0x31, 0x8}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="0700d9f6f99a5fa7c968a2bfa3293141200000d8a755aa0020170000000002174d28d77f2cf32d5a06", 0x29, 0x20008005, &(0x7f0000000100)={0x2, 0x4e22}, 0x10) shutdown(r0, 0x1) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x7fffffffffffffff}}}, 0x28) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000040)=0x60) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001680)=0x40) 1m22.993352558s ago: executing program 4 (id=2984): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000140)={0x0, @random="0ca71cc3c4f3"}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe48, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f0000000400)=[{0x0}], 0x1, 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1e00050000000074b20012800b00010067656e65766500001800028014000700fc0000000000000000000000000000001400030067656e6576653100000000000bba00000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) sendmmsg$inet6(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x1, 0x24000045) 1m7.758752379s ago: executing program 34 (id=2984): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000140)={0x0, @random="0ca71cc3c4f3"}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe48, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f0000000400)=[{0x0}], 0x1, 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1e00050000000074b20012800b00010067656e65766500001800028014000700fc0000000000000000000000000000001400030067656e6576653100000000000bba00000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) sendmmsg$inet6(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x1, 0x24000045) 44.2453747s ago: executing program 5 (id=3075): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012720dcfe20c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="4077feee00005203b4aececa2760863eef156c105bc10da9d2461a41d1e9ea8baef5e51b4ec2025982dabdb241de10eba57bf89123e1d5fb6e8ca4fded175d3d0e8e678c2f079242d96e445ef84e25dcbbed7566320c2b09e655f827a6fc0778a4282406ff198f7da696fdca18223e"], 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b14, 0x0) 43.188118763s ago: executing program 5 (id=3078): socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x6701c0222894f689) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x686201, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cdrom(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$CDROM_SELECT_DISK(r1, 0x5322, 0x8001) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0xd0, 0x24, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff1, 0xe}, {0x6, 0x7}, {0x10, 0xfff2}}, [@TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x80, 0x6000, 0x8, 0x0, 0xfffff002, 0x0, 0x9}}, {0x16, 0x2, [0xff, 0x16, 0x26, 0x69, 0xd, 0x400, 0xfff6, 0xeb41, 0xfff7]}}, {{0x1c, 0x1, {0xc, 0x4, 0x4, 0x4, 0x1, 0x9, 0xcc21076, 0x3}}, {0xa, 0x2, [0x401, 0x7, 0x84]}}, {{0x1c, 0x1, {0xe, 0x4, 0x3, 0x6579, 0x2, 0x9, 0x1ff, 0x2}}, {0x8, 0x2, [0x4, 0x3]}}, {{0x1c, 0x1, {0x5, 0x2, 0x8000, 0x1, 0x2, 0xffff21f3, 0x8, 0x3}}, {0xa, 0x2, [0x3ff, 0x0, 0x9]}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x4d00) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xef) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x40) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) close(r5) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) 42.76248427s ago: executing program 5 (id=3079): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x207, 0x80742, 0x0, 0x32315659, 0x2, 0x490, 0x1, 0xfffffffd, 0xfeedcafe, 0x3, 0x0, 0x1}}) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x5c, 0x68, 0x1, 0x70bd2b, 0x7ffffffc, {0x0, 0x0, 0x3}, [@NHA_GROUP={0x44, 0x2, [{0x0, 0x6}, {0x2, 0x5}, {0x1, 0x5}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 42.361215558s ago: executing program 5 (id=3081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000a020605000000000000000000000000000c00078005001500050000000500010007000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x840) 42.118188193s ago: executing program 5 (id=3083): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001540)=""/74, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/182, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)={0x2, 0x0, [{0x74, 0x75, &(0x7f0000000440)=""/117}, {0x0, 0x22, &(0x7f00000004c0)=""/34}]}) 41.807190684s ago: executing program 5 (id=3085): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) fanotify_mark(r2, 0x1, 0x1000, r2, &(0x7f0000000240)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00'}) close_range(r0, r0, 0x0) 25.997961425s ago: executing program 35 (id=3085): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) fanotify_mark(r2, 0x1, 0x1000, r2, &(0x7f0000000240)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00'}) close_range(r0, r0, 0x0) 17.322318731s ago: executing program 3 (id=3131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42, 0x100}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r6, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x15, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x3, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0xdd2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x3, 0xde74, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0xffffffff}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x700, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 16.170925195s ago: executing program 3 (id=3132): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x5c) syz_open_dev$usbfs(0x0, 0xf, 0x8041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r6) close(r4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x8, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xa, 0x2, 0x6, 0x9fad, 0x4}, 0x4}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r8, &(0x7f0000001480)=0x2, 0x12) splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r9 = getpid() sched_setscheduler(r9, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000500)={0x0, 0xfffd}, 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r10, 0x0, r12, 0x0, 0x38f9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 13.054140282s ago: executing program 3 (id=3136): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2c5082, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full', 0x20, 0x80000004}, 0x2f) sendmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcf4}}], 0x2, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r5, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}, 0x0, 0x0]) 6.561729173s ago: executing program 7 (id=3119): r0 = openat$comedi(0xffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x80a000, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8040640a, 0x0) 6.366029286s ago: executing program 7 (id=3149): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004114}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300", @ANYRESOCT], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) io_setup(0x1fe, &(0x7f0000000440)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0xa, r1, 0x0, 0x0, 0xa00}]) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 5.958705409s ago: executing program 7 (id=3150): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100eb00"}) 5.798455184s ago: executing program 7 (id=3151): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1803, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000400)=[{0x0}], 0x1, 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) setresgid(0xee00, 0xee01, 0x0) setfsgid(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x44, r7, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfb16}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r7, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40000) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) ioctl$OCFS2_IOC_RESVSP64(r0, 0x402c582a, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x85, 0xff, 0x1}) 5.586171577s ago: executing program 0 (id=3153): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x50) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000140)=@ethtool_perm_addr}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newchain={0x3c, 0x64, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x7, 0x3}, {0xc, 0xe}, {0xf, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x3f}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6d}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1453a9fe1a019bf4}, 0x40) 5.265813866s ago: executing program 0 (id=3154): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x9) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$mtd(0x0, 0x48a99fbe, 0x10b241) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0xc0045103, &(0x7f0000000040)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x1, 0x400) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x18) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) readv(0xffffffffffffffff, 0x0, 0x0) 4.835496455s ago: executing program 0 (id=3155): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000740)=0x11) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 3.327349043s ago: executing program 0 (id=3156): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x18, &(0x7f00000006c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffe, 0x0, 0x200000000000000, 0x324}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb4}}, 0xc000090) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = getpid() syz_pidfd_open(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) 3.16017763s ago: executing program 3 (id=3157): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080000000000000020"], 0x24, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) sendfile(r2, r1, 0x0, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x1001, 0x7, 0x8, 0x3, 0x6, 0x19dd8887, 0x8], 0x0, 0x0, 0x7}}, 0x3c) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.671891919s ago: executing program 3 (id=3158): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 2.391527115s ago: executing program 0 (id=3159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0xfffffffd, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}}, 0x80) 2.316623747s ago: executing program 6 (id=3160): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x18, &(0x7f00000006c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffe, 0x0, 0x200000000000000, 0x324}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb4}}, 0xc000090) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (fail_nth: 9) 2.316098243s ago: executing program 3 (id=3161): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002940)=""/4107, 0x100b}, {&(0x7f0000001440)=""/244, 0xf4}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/107, 0x6b}, {&(0x7f00000025c0)=""/214, 0xd6}, {&(0x7f00000026c0)}, {&(0x7f0000002700)=""/43, 0x2b}, {&(0x7f0000002740)=""/114, 0x72}], 0x8, &(0x7f0000002800)=""/212, 0xd4}, 0x2021) pipe(&(0x7f00000001c0)) fsopen(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0xa) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x1, 0x1, 0xd59f80, 0x19ef, 0x5, 0x19ef, 0x3, 0x4, 0x27ff, 0x2f, 0x2, 0xbb6, 0x1, 0x13, {0x8, 0xfffffffb}, 0xd0, 0x9}}) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) 2.175752422s ago: executing program 0 (id=3162): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2c5082, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full', 0x20, 0x80000004}, 0x2f) sendmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcf4}}], 0x2, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r5, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}, 0x0, 0x0]) 2.096660011s ago: executing program 6 (id=3163): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x20, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15) 1.896772923s ago: executing program 6 (id=3164): r0 = openat$comedi(0xffffff9c, &(0x7f00000001c0)='/dev/comedi3\x00', 0x100, 0x0) ioctl$COMEDI_INSN(r0, 0x8020640c, &(0x7f000001bc40)={0xc000002, 0x2bb9, &(0x7f00000100c0)=[0x7, 0x6, 0x1, 0x3ff, 0x8, 0x2, 0x9, 0xc, 0xfffffff8, 0x7, 0x8, 0x1, 0x10, 0x2, 0x80000000, 0x8, 0x1, 0x3ad5cc88, 0x9, 0x3, 0x80, 0x7fff, 0x7, 0x6, 0x1ff, 0x3, 0x8, 0x80000001, 0x4, 0x10000, 0x6, 0x7fff, 0x2, 0x80000001, 0x977, 0x8, 0x9, 0xfffffff9, 0x80000000, 0x3, 0x1, 0x8, 0x1bd5, 0x81d3, 0x4, 0x0, 0x37c4, 0x7f, 0x3f8, 0xb, 0x6, 0x8, 0x750, 0x4, 0x81c, 0xc, 0x7fff, 0x2, 0x51, 0xb3, 0x7fffffff, 0x1, 0x8001, 0x9, 0xe, 0x5, 0x7c, 0x1, 0x1ff, 0x101, 0x7, 0x8, 0x4, 0x7fff, 0x0, 0x17c, 0x10, 0x92, 0xfffffff8, 0x4, 0xffff, 0x3, 0xa81, 0x3, 0x5, 0x8, 0x3, 0x2, 0x3, 0x8, 0x5, 0x673f8523, 0x3ff, 0x1, 0xa000000, 0x3, 0xa73, 0x3ff, 0x0, 0x9, 0x47d, 0x9, 0x0, 0x3, 0x1, 0xffffffeb, 0x5, 0x6, 0x401, 0x101, 0x3, 0x9, 0x400, 0x2, 0xe5e5, 0x81, 0x80, 0x7, 0x40, 0x4, 0x1, 0x41, 0xf132, 0xffffff7f, 0x4, 0x80000000, 0x6, 0x6, 0x8, 0x3, 0x9, 0x4, 0xfffffffa, 0xb, 0x3, 0x0, 0x1, 0x4, 0x7fffffff, 0xffffffff, 0x4, 0x2, 0xe319, 0x8, 0x101, 0x690c, 0xc, 0x5, 0x8, 0x401, 0xdf1, 0x9, 0xdc, 0x1000, 0x100, 0xfef, 0xfffffffe, 0x7, 0x2, 0xa, 0x0, 0x8, 0x7, 0x9, 0x885, 0xf6, 0x4, 0x3, 0x9, 0x7ff, 0xe, 0x2, 0x6, 0x8000, 0xffffffff, 0x9, 0x2, 0x9, 0x7f9, 0xffff, 0x8, 0x7, 0x8, 0x6, 0x9, 0x0, 0x184, 0xa90a, 0xfffffffa, 0x6, 0x4, 0x3d0a, 0x9ea, 0x7, 0x1, 0x80000000, 0x6, 0x4, 0x9, 0x10000, 0xc0000000, 0xd, 0x10000, 0x0, 0x9, 0xd, 0x6, 0x3, 0x5, 0x2, 0x10, 0x2, 0x80, 0xe7, 0xf5, 0x98b3, 0x3, 0x7, 0x8, 0x1, 0x3, 0x7fff, 0x40, 0xfffffffa, 0x8, 0xc91d, 0x4, 0x4, 0x1, 0x5, 0x7, 0xfffffffe, 0x7cf, 0xa, 0xffff0001, 0x3, 0xc, 0x8, 0x4, 0x80, 0xfffffff7, 0xeae, 0x5, 0x7, 0x5, 0x1, 0x3, 0xd, 0x8, 0x400, 0x6, 0x5, 0xe08, 0x400, 0x0, 0xffff, 0xfffffff5, 0x7fff, 0x6c, 0x80000000, 0x3, 0x1, 0x4a5c, 0xded, 0xd, 0x0, 0x9, 0x1, 0x7ff, 0x9, 0x8, 0x7f, 0x6, 0x1ff, 0x2, 0x101, 0xc3, 0xd, 0x896d, 0x1, 0x7, 0x7fff, 0x8, 0x8, 0x9, 0x5, 0x0, 0x2, 0x2, 0xa3, 0x2, 0x8254, 0x401, 0x80000001, 0x7294, 0x4000000, 0x1, 0x3, 0xfffffffc, 0x9, 0x8, 0x4, 0xd4c, 0x8, 0x6, 0x9, 0x1, 0xbb7, 0x3ff, 0x1, 0x1, 0x86e, 0x2, 0x7, 0x6, 0xc, 0x0, 0x0, 0x4, 0x7fff, 0x3ff, 0x6, 0x0, 0x9, 0x101, 0x7, 0x2, 0x7, 0x94ee, 0x1, 0x0, 0xfa6, 0x9, 0x3, 0x0, 0x30eb795e, 0xfffffff6, 0x7, 0xd6, 0xfffff000, 0x5, 0xfffffaa1, 0x8001, 0xbe6e, 0x9, 0x453, 0x6, 0xa409, 0x6, 0x7fff, 0x3, 0x4, 0xb, 0xfffffffa, 0xc000, 0x3, 0x6, 0x5, 0x2, 0xfffffff7, 0x6, 0xbb, 0x1, 0x0, 0xfffffff7, 0x6806, 0xd28, 0x4, 0x8001, 0x2, 0x2, 0xa, 0x1ff, 0x6, 0x0, 0x80, 0x7fff, 0x8, 0x4, 0xfff, 0x8, 0x6, 0x4, 0x0, 0x8, 0x5, 0x6, 0x7fffffff, 0x5, 0x2, 0xfffffff9, 0xe5, 0x400, 0xffffffff, 0x8b, 0x7fffffff, 0x724b983c, 0x5, 0x7, 0x9cc, 0xffffffff, 0x8001, 0xd6, 0x80, 0x9, 0x2, 0x200, 0xe5, 0xb6a, 0x8, 0x1, 0x200, 0x8, 0xff, 0x9, 0x6, 0x1, 0x1, 0x887f, 0x3, 0xd, 0x2, 0x2, 0x527, 0x6, 0x5e, 0x8, 0x7ff, 0x9, 0x1, 0x6, 0xcf, 0x7, 0xd, 0x4516, 0x101, 0x3, 0xffffffff, 0x7ff, 0x0, 0x5, 0x0, 0x1, 0x1000, 0x8e, 0x6, 0x7, 0xbd5d, 0xcdaa, 0x0, 0x2, 0x4735, 0x80, 0x2, 0x0, 0x99, 0x10001, 0x5, 0xffff1f84, 0x2, 0xb, 0x101, 0x8, 0x3ff, 0x101, 0xd9a8, 0x9, 0x93, 0x92, 0x200, 0x6, 0xc, 0xa, 0x1ff, 0x101, 0xcf2, 0xfffffff7, 0x49, 0x1000, 0x6, 0x2, 0x10000, 0x0, 0x6, 0x8, 0x9, 0x0, 0x7, 0x1, 0x1, 0x0, 0x5, 0xc00, 0x1, 0x3, 0x0, 0x2, 0x5, 0x7ff, 0xd8, 0x8, 0x8, 0x62c0, 0x9, 0x7, 0x100, 0x8000, 0x401, 0x2, 0x200, 0xab, 0x7ff, 0x9, 0x3, 0x2, 0xff, 0xfffffffb, 0x5, 0x4, 0x45, 0x7f, 0x5, 0x4481, 0x6, 0xe, 0x2f, 0x3, 0x4, 0x5, 0x2, 0x80000001, 0x2, 0x478, 0x5, 0x2, 0x401, 0x7, 0x3, 0x9, 0x1, 0x800, 0x0, 0x4, 0x5, 0xffffffb5, 0x2, 0x5, 0x7, 0x3434, 0x4, 0x3, 0xf, 0x211, 0x80, 0x8, 0x0, 0x80, 0x54, 0xc, 0x1, 0xd18b, 0x26aeb75e, 0x0, 0x7, 0x5, 0xa, 0x2, 0x3, 0x9, 0x5601, 0x1, 0x2, 0x1, 0x1, 0xffffffff, 0xfffffffb, 0x8, 0x5, 0x10001, 0xfffffff7, 0x5, 0xfffff001, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x2b, 0x7, 0x57, 0x100, 0x8, 0x2, 0x7, 0x5, 0x0, 0xfffffffe, 0x454, 0x5, 0x6, 0x9, 0x7, 0xbd, 0x8001, 0x3, 0x0, 0x5a, 0x3, 0xfffffffe, 0x8000, 0x2, 0x6, 0xe000, 0x7fff, 0xf, 0x0, 0x1, 0xd0000000, 0x1, 0xe6, 0x8000, 0x80000000, 0x7ff, 0x8, 0x9, 0x4, 0x0, 0x7, 0x10000, 0x2, 0x10000, 0x0, 0x3, 0x2, 0x81, 0x6, 0x9, 0x6, 0x2b64, 0x4, 0x7f, 0xffffc85e, 0xffff8000, 0x8000, 0x21e7a5d6, 0x5, 0x4b, 0x3, 0x4, 0x5, 0x1, 0x7, 0x9f, 0x8, 0x0, 0x191, 0x37668df1, 0x7fffffff, 0xffff, 0x6, 0x6, 0x80000001, 0x5, 0x2, 0x2, 0x5, 0x6b, 0x10, 0x0, 0xfffffffa, 0xc9dc, 0x2, 0x1, 0x1ff, 0x23eaea83, 0x7, 0x5aa, 0xd0, 0x7, 0x7, 0x400, 0x6, 0x1, 0x3, 0x0, 0x2e1f, 0x2, 0x3, 0xf9, 0x8, 0x9, 0x8, 0xf, 0x2, 0xbd0, 0x7, 0x0, 0x101, 0x0, 0x80000001, 0x5, 0x1, 0x200000, 0x80000001, 0xffffffff, 0x0, 0x200, 0x9, 0x1, 0x2, 0x4, 0x5, 0x9, 0x7, 0x8, 0x5, 0x0, 0x9, 0x7, 0x7fffffff, 0xff41, 0x3, 0x5, 0x1, 0x47, 0x3, 0x44a, 0x1ff, 0x8, 0xfffffffb, 0x5, 0xee21, 0x0, 0x1ab2, 0x800, 0x3, 0x1a, 0x7, 0xff, 0xfffffffd, 0x8, 0x6, 0x2, 0x5c68b48c, 0x8, 0x0, 0x2, 0x4, 0x3, 0xff, 0x8, 0x1, 0x6, 0x5, 0x7fffffff, 0x5, 0x7, 0xfffffffe, 0x1, 0x8, 0xfffffff9, 0x9, 0x15e, 0xdd24, 0xffffffb3, 0x200, 0xe, 0x1ff, 0xd9be, 0x8001, 0x3d, 0x9, 0x2, 0x3fc, 0x9, 0x1, 0x4c, 0x3, 0x1, 0xc, 0x2, 0x2, 0x27f2, 0x2b, 0x4, 0x1, 0xb, 0x4, 0x17, 0x4, 0x4, 0x1, 0x1, 0x7, 0x9, 0x800, 0x8, 0xcd, 0x8000, 0x6, 0xcb5, 0x5a436fd1, 0x1ff, 0x4, 0x10000, 0x2, 0x6, 0x1, 0x4, 0x4, 0x3, 0x8001, 0x5, 0x1000, 0x8, 0x3, 0x10, 0x66, 0x401, 0x8000, 0x80000001, 0x1, 0x4, 0x4, 0x7, 0x4, 0x4, 0x80000000, 0x401, 0x1, 0x10001, 0xff, 0x6, 0x5, 0x7, 0x8000, 0x8, 0x4, 0x6d, 0x10, 0x0, 0x10001, 0x2, 0xffffffff, 0x4, 0x8, 0x3, 0x7, 0x0, 0xb, 0xe, 0x5, 0x1, 0xa00, 0x101, 0x1, 0x2, 0x5, 0x37, 0x5, 0x1, 0xe, 0x4, 0x40, 0x3, 0xe8b, 0xd, 0x2, 0x0, 0x7, 0x9b, 0x6, 0x5, 0xf, 0x9, 0xfffffbff, 0x6, 0x5, 0x2, 0xffffffff, 0x0, 0x6, 0x2, 0x40, 0x3, 0x2, 0x1e49, 0x100, 0x200, 0x8001, 0x1, 0x6c, 0x2, 0x101, 0xa97, 0x7fff, 0x6, 0x2, 0xca7, 0x9, 0x1, 0xb, 0x4, 0x1, 0x6, 0x3, 0x1, 0x2, 0x5c3, 0x682, 0x8, 0x0, 0x7, 0xc9, 0x7ff, 0x5, 0x8, 0xdd3, 0x2, 0x0, 0x8, 0x0, 0x10, 0x0, 0x6, 0x100, 0x8, 0x1, 0xffffffc0, 0x0, 0x8, 0xfffffff7, 0x6d79, 0x9, 0x80, 0x531, 0x9, 0x800, 0xa, 0x0, 0x1c8, 0x0, 0x3c31, 0x1, 0x10, 0x81, 0xa, 0x1, 0xf, 0x4, 0x5, 0x3, 0x2, 0x4, 0x10001, 0x0, 0x1, 0x6, 0x2, 0x4, 0x8, 0x8001, 0x110a, 0x8, 0x8, 0x5, 0x6, 0x1, 0xd, 0x400, 0x8, 0x0, 0x1, 0x9, 0xffffffff, 0x3ff, 0x0, 0x0, 0x11, 0xe3b, 0x7, 0x51, 0xfffffff8, 0x2, 0x6, 0x0, 0x4, 0x98, 0x8, 0x6, 0x8000, 0x100, 0x8, 0x5b3512e8, 0x5, 0x9, 0x800, 0x29a0f2f7, 0x6, 0x7, 0xc301, 0x64, 0x6, 0x4800, 0x6, 0x1, 0x8, 0x7ff, 0x3, 0x80000001, 0x3, 0x80, 0x0, 0x5, 0x4f9, 0xffffffff, 0x62, 0x7, 0x3, 0x80000001, 0x5, 0x0, 0x9, 0x8, 0x8, 0x1, 0x5, 0x8, 0x200, 0x9, 0x10001, 0x400, 0x400, 0x3, 0xd21, 0x2, 0x76b, 0x4e5, 0x1, 0x8, 0x5, 0x80, 0x7a5189bf, 0xfff, 0x1fe00, 0x5, 0x2, 0xd6, 0x7, 0xdb, 0x1539, 0x10, 0x2, 0x0, 0x401, 0x6, 0x5, 0x1, 0x5, 0xfffff937, 0x43, 0xe, 0x8, 0x2, 0x3, 0x2, 0xfffffff8, 0x7, 0x0, 0x5, 0x55800000, 0x2cf0, 0x2, 0x3, 0x0, 0x21, 0x7, 0x1, 0x8, 0x5, 0x1, 0x8, 0x8, 0x3, 0x6, 0x8, 0xff0, 0x3, 0x0, 0x10000, 0x4, 0x200, 0x6, 0xa5b2, 0xa, 0xb, 0xd, 0x9, 0x746d, 0xffffffff, 0x5, 0x8, 0x10001, 0x352, 0xa21e, 0x2, 0x4, 0x4, 0x4, 0xab, 0x1, 0x9d, 0xbac, 0x8, 0x0, 0x5, 0x6, 0x3, 0x6, 0x0, 0x2, 0x922, 0x3, 0x101, 0x5, 0x8, 0x8, 0x7, 0xe, 0xfffff0c3, 0x1, 0x10001, 0x1, 0x29ef, 0x77, 0x1000, 0x4, 0x1, 0x1, 0x10ae, 0x5, 0x800, 0x0, 0xfffffff0, 0x9, 0x0, 0x7, 0xdd9, 0x4, 0x8, 0x81, 0x4, 0x4, 0x1, 0x7fff, 0x1a, 0x8a8, 0xb, 0x1, 0x34, 0x3, 0x7, 0x8e5c, 0x8, 0xfffffffb, 0xffffffff, 0x7, 0x101, 0x10001, 0x10000, 0x5, 0x5, 0x3b, 0x7, 0x9, 0x1, 0x10001, 0x6, 0x7, 0x9, 0xc, 0x2, 0x5, 0xed, 0x73c379f1, 0x100, 0xfffffff9, 0x5, 0x97, 0x3, 0x12, 0x7, 0x3, 0x2, 0x1, 0xa, 0x31, 0x3, 0x5ce5, 0x4391, 0x101, 0xa, 0xffffffff, 0x7, 0x1, 0x5, 0xcd, 0x1, 0xe5a, 0x100, 0x0, 0xffffff09, 0xff, 0x2, 0x400, 0x7, 0x9, 0x1, 0xab17, 0xde, 0x8, 0x6, 0x80000000, 0x7, 0x0, 0xcc, 0x3, 0x7, 0x791, 0x3, 0x25, 0x1, 0x3, 0x4, 0x9, 0xffffffff, 0x1, 0x8, 0xfffffffd, 0xffffffff, 0x2, 0x4, 0x7, 0x401, 0xffffffff, 0x7, 0x8, 0x8, 0x1, 0x6, 0x0, 0x9, 0x9, 0x4, 0x9, 0xfc, 0x5, 0x81, 0xffffffff, 0x1, 0xa, 0x7ff, 0x7fc, 0x5, 0xf86a, 0x5, 0x400, 0x6, 0x6, 0x9, 0x4, 0xffffff1e, 0x800, 0x8, 0x10001, 0x8, 0x328, 0x0, 0x4, 0xffffffff, 0xfff, 0x3, 0x7, 0x9, 0xffc, 0x7, 0x401, 0x4199, 0x0, 0x7, 0x9, 0x9, 0x6, 0x4, 0x80, 0x2400, 0x8, 0x4, 0x8, 0x9, 0x4, 0x800, 0x7, 0x93d, 0x24e2, 0x1, 0x8000, 0x8, 0x5, 0x6, 0xd0a, 0x6, 0xff, 0x4, 0x9, 0x4, 0x1, 0x7, 0x7fff, 0x4, 0x381c, 0x4, 0x8, 0xc, 0x7fffffff, 0x3, 0x401, 0x0, 0x7, 0x1, 0x5, 0x101, 0x80, 0xfffffff8, 0x1, 0x4, 0xfe, 0x1, 0x10, 0x4d13, 0xf, 0x6, 0x8, 0x7, 0x21f, 0x6afd15cf, 0x6, 0xff, 0x0, 0x2, 0x6, 0x6, 0x1, 0xff, 0x3, 0x2, 0x5, 0x3, 0x4, 0x8001, 0x3, 0xb, 0x1, 0x6, 0x1ff, 0x0, 0x1, 0x6, 0x8000, 0x5, 0x80000000, 0x56, 0x7, 0x7f, 0x4, 0x1000, 0x1ff, 0x4, 0xffff85af, 0xfff, 0x45a, 0x0, 0x2, 0xfffffc01, 0x0, 0xf, 0xe, 0x1, 0x5, 0x2, 0x7ff, 0x6b0, 0x81, 0x0, 0x2, 0xffffffff, 0x80000001, 0x9, 0xfe, 0xffff, 0x9, 0x6, 0x8, 0x400, 0xb0b, 0x4, 0xfffffffc, 0x6, 0x3, 0x8, 0x9, 0x0, 0xd, 0xffffffff, 0x1, 0x0, 0x8d, 0x161fa0d2, 0x4, 0x80000000, 0x9, 0xfffffff7, 0x100, 0x5, 0x6, 0x1, 0xfff, 0x4, 0x8, 0x10001, 0x0, 0x4, 0x5, 0xeebf, 0xab63, 0x4, 0x80, 0x9, 0x7f, 0x89b, 0xd451, 0xd, 0xc7, 0xffff0000, 0x8, 0x6, 0x2, 0x4, 0xfffffff9, 0xc25e, 0x6, 0x3, 0x200, 0x8001, 0x4, 0xef, 0xb67, 0x2, 0x8, 0x3, 0xcf, 0x8, 0x1, 0x3, 0x0, 0x5, 0x0, 0x420, 0x6, 0x1b48, 0x9, 0xfff, 0xe1d1, 0x7fff, 0x3, 0xc, 0x4, 0x6, 0x1, 0xffffff8f, 0x400, 0x1, 0xff, 0x8, 0x2, 0xc, 0x2, 0x4, 0xfffffff7, 0x629, 0x5, 0x8, 0x7, 0x5, 0x7f, 0x7, 0x3, 0xffff, 0xe000, 0x4, 0xa86a, 0xe, 0x9, 0x7, 0xfffffff9, 0x8, 0xfffff800, 0xfffffffe, 0x9, 0x2, 0x8, 0x7fff, 0x4, 0x8, 0xfffff0b2, 0x0, 0x6, 0x2, 0xf, 0x5, 0x8, 0x2, 0x6c4, 0x9, 0xff2, 0x0, 0xf, 0x2, 0x2, 0x87, 0x7ff, 0x9, 0xfe8, 0x4c, 0x200, 0x1, 0x0, 0x81, 0x8c28, 0x2, 0x5, 0x1, 0x1, 0x4, 0x7, 0x0, 0xffffff7e, 0x5, 0xa1e, 0x6, 0x5, 0x8, 0x0, 0x7, 0x1, 0x8, 0x8001, 0xfe, 0x8, 0x5, 0x10001, 0x40, 0x4, 0x8, 0x8af, 0x1, 0xffff0000, 0x7, 0x8, 0x5, 0x7, 0xf, 0x8, 0xa, 0x5, 0xfffffffe, 0x5, 0x200, 0x1, 0x5, 0x80, 0x4, 0x10000, 0x7, 0x0, 0x3768, 0x8, 0x401, 0xf, 0xfffffffa, 0x3, 0xe, 0x7fff, 0x1ff, 0x0, 0x8, 0x100, 0x3, 0x8, 0x80000001, 0x4, 0x3, 0x8, 0x1, 0x4, 0x0, 0x800, 0x10000, 0x0, 0x3, 0x800, 0x0, 0xfb3c, 0x4, 0x84c00000, 0x6, 0x7, 0x10, 0xe, 0x80000000, 0x0, 0xfffffc00, 0xff, 0x0, 0x8, 0x4, 0x3, 0x3, 0x9, 0x0, 0x100, 0x6, 0xfffffffb, 0x0, 0x4d6c, 0x8e, 0x7, 0x800, 0x7f, 0xfffffffe, 0xdb8, 0x80, 0x8000, 0x4, 0x6, 0x76e, 0x6, 0x2, 0x4, 0x1, 0x9, 0x7ff, 0xff, 0x9, 0xfff, 0x10000, 0x5, 0x5, 0x4, 0xffff, 0x4, 0x7, 0x2, 0x0, 0x0, 0x4, 0x4, 0x7, 0x7, 0x6, 0x7ff, 0x7, 0x3, 0x8, 0xdead, 0x9, 0x0, 0x56bf6da2, 0x31dd, 0x7a, 0x7, 0x8001, 0x80000001, 0xfffffff8, 0x7fff, 0x2f6, 0xfffffffd, 0x100, 0x1000, 0x3, 0x2, 0xc71a, 0x6, 0x6, 0x0, 0x9, 0xfa7, 0xbb, 0x4, 0xffff, 0x8, 0x42, 0x7, 0x0, 0x1, 0x8001, 0x385a, 0x33, 0x80000000, 0x7, 0x5, 0x0, 0x0, 0x8, 0x6, 0x3534, 0x7, 0x2, 0x7a, 0xfffffff9, 0x7, 0x7, 0xfff, 0x0, 0x3, 0x547b, 0x2, 0x8, 0x8, 0x4, 0xd, 0x0, 0x6, 0x5, 0x4, 0x5, 0x2, 0xb305, 0x4, 0xf, 0x6e23, 0x1, 0xc, 0x1, 0xb5, 0x3, 0x435, 0x1, 0x7, 0x28000000, 0x200, 0x5, 0xc, 0x6, 0x83, 0x8, 0xd, 0x8, 0x18b580, 0xd, 0x10000, 0x0, 0x5bdd, 0x3, 0x50314e0c, 0x10001, 0x0, 0x1, 0xb, 0x5, 0x655b, 0x1000, 0x99, 0x3, 0xe, 0x1, 0x8, 0x4, 0xfffffff7, 0x9, 0xfffffffd, 0x504, 0xa, 0x100, 0xb, 0x3, 0x0, 0x9, 0x0, 0x8001, 0xa, 0x9, 0xff, 0xe, 0x5000000, 0x40000000, 0x4, 0xb, 0x7, 0x4c, 0x7, 0x7, 0x7fff, 0x72a, 0x2000000, 0xfffffdee, 0xfffffff7, 0x7f, 0xe, 0x3, 0x4, 0x3, 0xe1d2, 0x8001, 0x0, 0x7, 0x4, 0xb6, 0x9b, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0x5, 0x8360, 0xb, 0x4, 0x4, 0x2, 0x91e6, 0x8, 0x9, 0x0, 0x6d1, 0x400, 0xd, 0x4, 0x8172, 0x8, 0x7, 0x5, 0x2153, 0x3ff, 0x3, 0x4, 0x5, 0x2, 0x7, 0xffff0000, 0x27e, 0x3ff, 0x4, 0x7, 0x29, 0xa, 0x7, 0x6, 0x7, 0x3, 0x5, 0x80000001, 0x0, 0x7fffffff, 0x4, 0x0, 0x94, 0x7, 0x1ff, 0x2, 0x7, 0x2c1, 0xf, 0x2, 0x2, 0x0, 0x7fffffff, 0x62, 0x5, 0x7, 0xaa, 0x2, 0x7, 0x4, 0x8, 0xc, 0x7, 0x9, 0x3, 0x3, 0x400, 0x7, 0x3, 0x8, 0x8, 0x7ff, 0x8, 0x1, 0x552, 0x5, 0x5, 0x5, 0xf, 0x5, 0xf5, 0x40, 0x7, 0x3, 0x10, 0x9, 0x5, 0x101, 0x4, 0x2, 0x40, 0xb3e, 0x1, 0x7, 0x3, 0xe7, 0x2fc, 0x20a9800, 0x1, 0x100, 0x1, 0xfff, 0x10, 0x3ff, 0x3, 0xfffffffe, 0x9, 0x0, 0x3, 0x7, 0x7, 0x6, 0x1, 0x0, 0x0, 0x8, 0xd936, 0x40, 0x8, 0x1, 0x7fffffff, 0x9, 0x4, 0x3, 0x9, 0x0, 0xf08, 0x8, 0x10, 0xd8d9, 0x3, 0x8, 0x4, 0x9, 0x8, 0x60, 0x1, 0x9, 0xd801, 0x0, 0x500, 0xdc6, 0x9, 0x6, 0x6, 0xd, 0xff43, 0x3, 0xfff, 0x6, 0x8, 0x9, 0x6, 0x80, 0x1, 0x5877, 0x7, 0x2, 0x400, 0x16e0000, 0xe, 0x7, 0x7, 0x3, 0x401, 0x3, 0xfffffa08, 0x8001, 0xc99, 0x2, 0x0, 0x6, 0x5, 0x5b0, 0x2, 0x9, 0x2, 0xfffffff1, 0xaf1f, 0x8, 0x5, 0x8, 0xff, 0x2, 0x2, 0x400, 0x6, 0x8, 0x800, 0x6, 0x3ff, 0x698e, 0x9, 0x4, 0x80000000, 0x10001, 0x1000, 0x1cf7, 0x0, 0xfffffff8, 0x5, 0x2, 0x3, 0x2, 0x8, 0x9, 0x1000, 0x5, 0xb, 0xd5e, 0x7, 0x7, 0x0, 0x5, 0xfffffffe, 0x9, 0x1, 0x5, 0x5, 0x81, 0x8000, 0xffffff0c, 0x9, 0xffffff47, 0x5, 0xfff, 0x2, 0x7, 0xf, 0x8, 0x0, 0x40, 0x10, 0xfffffffd, 0x4, 0x3, 0x0, 0x1, 0xfff, 0x1, 0x4d, 0x5, 0x5, 0xd, 0x0, 0x40, 0x2, 0x4, 0x1, 0x0, 0x66ae05b2, 0x4, 0x7fff, 0x0, 0x3, 0xfffffffb, 0xfffff800, 0x7, 0x9, 0xba39, 0x5, 0x4, 0x3, 0x9, 0x5, 0x6, 0x9, 0x8, 0x200, 0x6, 0xffffffff, 0x4, 0x7, 0x200, 0x0, 0x1ff, 0xd, 0x8, 0xd2, 0x98e, 0xb, 0x6, 0x5, 0x80000000, 0xd, 0x9, 0x6, 0x80000000, 0x80000001, 0x6, 0xfffffffc, 0x1, 0x4, 0x8, 0x9, 0x1, 0x5, 0x40, 0xd73c, 0xe29, 0xffff0001, 0xb17c, 0x8000, 0x5, 0xfc, 0x33a, 0x7, 0x1a9d, 0xc4, 0x9, 0x40000000, 0x5, 0x1, 0x6, 0x3, 0x7, 0x39e7, 0x1, 0x1, 0x6, 0x5, 0x6854, 0x0, 0x2, 0xdd48, 0x0, 0x1, 0x635b28f7, 0xd, 0x718, 0x8722, 0x1, 0x7, 0x9, 0x3ff, 0x1fc6, 0x9, 0xb3, 0xfff, 0x5, 0x7, 0x8, 0x1, 0xc6, 0x762b, 0x80, 0x5, 0xa, 0x6, 0x8, 0x3, 0x0, 0x0, 0x0, 0xb, 0x7, 0xbe3, 0x1, 0x9, 0x8, 0x5, 0x2b125969, 0xffffffff, 0x7, 0xb, 0x0, 0x0, 0x2, 0xfffffffc, 0xfffffffb, 0x2, 0x4, 0x2, 0xfff, 0x7f, 0x6c85dd64, 0x5, 0x8eac, 0xa, 0x47ce, 0x9, 0x9, 0x2, 0x0, 0x3ff, 0x4, 0x1, 0xa, 0x80000000, 0x4, 0x4, 0x5, 0xfff, 0x0, 0xa, 0x1, 0x0, 0xfe, 0x3, 0x2, 0x5, 0x0, 0x800, 0x9, 0x80000000, 0x1, 0x101, 0xd368, 0x0, 0xffffffff, 0x3, 0x5, 0x772f, 0x101, 0x1, 0x3, 0x5, 0x1, 0x0, 0x8001, 0x2, 0x95, 0x612, 0x6, 0x200, 0x6, 0x10, 0x9ab, 0x401, 0x401, 0x3ff, 0x208e, 0x80000000, 0x0, 0xd4, 0x3adeca05, 0x401, 0x3, 0x7, 0x9, 0x80000000, 0x64, 0x4, 0xc, 0x6, 0x0, 0x0, 0x380, 0x4800, 0x5, 0xdd, 0x5, 0x40, 0x1, 0x2, 0x8, 0x7f, 0xd, 0xc, 0x4, 0xa3, 0x1, 0x1, 0xffc00000, 0x4, 0x1000, 0xa646, 0x1ff, 0x200, 0x29, 0x1, 0x4, 0x4, 0x4, 0x5, 0x2, 0x5391, 0x40, 0xf88, 0xff, 0x3, 0xa, 0x4, 0x8, 0xfa9, 0x4ad, 0x2, 0x3, 0x1, 0x4, 0x4471, 0x491, 0x2, 0xb, 0x200, 0x3, 0xfffffff8, 0x9, 0x8, 0x400, 0xfff, 0x3, 0x71, 0x1000, 0x2, 0x8, 0x6, 0x101, 0x100, 0x9, 0x9, 0xff, 0xd, 0x100, 0x5, 0x7, 0x38000000, 0x8, 0x40, 0x7fff, 0x1, 0x4, 0x7, 0x0, 0x8, 0x6, 0x80000001, 0x7, 0x1, 0x3, 0x3, 0xfffffff9, 0x5, 0x4, 0x4, 0x5, 0x8, 0x3, 0xfffffff8, 0x2, 0x5, 0xfffffffb, 0x5, 0x6, 0x4, 0xfffffff7, 0x10, 0x100, 0x68a, 0x0, 0x4, 0x7, 0x3, 0x4, 0x8, 0xb8, 0x5, 0xdcd7, 0x6, 0x762, 0x5f, 0xd2, 0x10000, 0x0, 0x4, 0x1, 0x3, 0x2, 0x4, 0x4, 0x4, 0x1, 0x80000001, 0x4, 0x2, 0x8, 0x1133, 0x5, 0x711, 0x6, 0x8, 0x6, 0x7, 0x1, 0x9, 0xff, 0x0, 0x3, 0x7, 0x9ed, 0x2, 0x3, 0x100, 0x2, 0x0, 0x800, 0x7fff, 0xc, 0x400, 0x8, 0x0, 0x1, 0xdae, 0x3ff, 0x400, 0xaba2, 0x3, 0x20, 0xc, 0x3, 0x4, 0x1, 0x10000, 0x4, 0x2, 0x9, 0x2, 0x4, 0xfffffff8, 0x26ed8a09, 0x6, 0x101, 0xffffff4e, 0xd, 0x8, 0x3, 0xfff, 0x100, 0x8, 0x6, 0x10001, 0xa2, 0x6, 0x0, 0x9, 0x0, 0x2, 0x4, 0xfffffff8, 0x3, 0xe292, 0x6e, 0x1, 0x9126, 0x80000001, 0x6, 0x0, 0x80000001, 0x1, 0x2, 0x1, 0x5, 0x200, 0xc521, 0x9e9f, 0x3, 0x7, 0x7, 0x6, 0x3, 0x4, 0xe10, 0x7b73, 0xcc, 0xffffffff, 0x0, 0x8, 0x3482, 0x7ff, 0xff, 0x6, 0x1, 0x6, 0x6, 0x6, 0xfffffff9, 0x4, 0x2, 0x6, 0x4ba8, 0x80000032, 0x8, 0x80000001, 0x6, 0x7, 0x2f5, 0x4, 0x0, 0x5, 0x7079, 0x6, 0x1, 0x2, 0x5, 0x3e, 0x2, 0x5, 0xb7b, 0xe5, 0x6, 0x49a5, 0x2, 0x80200, 0x3, 0x3, 0x2, 0xc, 0x1, 0x1, 0x81, 0x7, 0x7, 0x1, 0x40, 0x8, 0x7fff, 0x10001, 0x401, 0xfff, 0x943, 0x3, 0x53e3, 0xee, 0x1, 0x5, 0x4684572b, 0x5, 0xe, 0x9, 0x9, 0x1, 0x9, 0x8, 0xfff, 0x7ff, 0x40, 0x0, 0xec85, 0x2, 0x8, 0x6, 0x5, 0x8, 0xf0, 0x1000, 0xa, 0x4, 0x4, 0x7, 0xc48fa088, 0x5, 0xf7e, 0x6, 0x5, 0x7, 0x8, 0x76, 0x80000001, 0x7, 0x2, 0x3800, 0x89, 0x4, 0x10000, 0x7, 0x4, 0x2, 0x6, 0x0, 0x6, 0x7ff, 0xe59, 0x2597c38a, 0x2, 0x899, 0x1, 0x6, 0xf16, 0xc, 0x9, 0x4, 0x6, 0x81, 0x59e, 0x9, 0x9, 0x7fffffff, 0x40, 0xaf, 0x1ff, 0xfff, 0x2, 0x4, 0x7fffffff, 0x3, 0x7fffffff, 0x472, 0x7fffffff, 0xa, 0x8001, 0x81, 0x1, 0x6, 0xfffffff2, 0x7, 0x100, 0xfffffffc, 0x68, 0x7, 0x5, 0x9, 0x1, 0x5, 0x9, 0x2, 0x46d6, 0x9, 0xb806e5a, 0x3f, 0x800, 0x5b6, 0x7, 0x7, 0x2, 0xad, 0x34f3, 0x0, 0x281, 0x2, 0x0, 0x200, 0x9, 0x8000, 0x3ff, 0x79f, 0xfffffff8, 0x80000001, 0x9, 0x2, 0x7, 0x4, 0x40, 0xfffffffe, 0xa32, 0x1, 0x5, 0x4, 0x7, 0x6, 0xffff7fff, 0x630e, 0xfffffffe, 0x3, 0xffff, 0x2, 0x7, 0x8000, 0x56d1, 0x8, 0xfff, 0x6, 0xba0f, 0x2, 0x7, 0x4, 0x9, 0xffffffff, 0x8, 0x2, 0x4, 0x2, 0xe9a, 0x1c0, 0x3, 0x7, 0xffffffff, 0x7, 0x7, 0x1, 0x1, 0x3, 0x1000, 0xf8d, 0x7, 0xa0c4, 0x7f, 0x7c5, 0xb, 0x19a, 0x401, 0x7, 0x10, 0x4, 0xff, 0x4, 0x3, 0x8, 0x7, 0x0, 0x3ff, 0x5, 0x81, 0x26, 0x4, 0x0, 0x7, 0x3, 0x5, 0x47ed86d4, 0x25684d7e, 0x3, 0x5, 0xfffffffb, 0xffffffff, 0x4, 0x4a0000, 0x4, 0x5, 0x20000000, 0x0, 0x6, 0x5d, 0x9, 0x10000, 0x5, 0x8, 0x4, 0x8c, 0x9, 0xbe5, 0x1ff, 0x8, 0xf5a, 0x101, 0xd7d, 0x9, 0x8, 0x9, 0x2, 0x8, 0x1, 0x7, 0xf, 0xb1, 0x5, 0x6, 0x200, 0x5, 0x80000001, 0x8, 0x3, 0xf39a, 0x10001, 0x2, 0x9, 0x8, 0x8001, 0xff, 0x3f, 0xff, 0x1, 0x10, 0x7, 0x3, 0x1, 0x8, 0x400, 0x5, 0x80000000, 0xb8, 0xfffffff7, 0xa, 0xce5, 0xe1, 0x3, 0x0, 0x1, 0xffff091d, 0x9, 0x1, 0x200, 0xffff, 0x7, 0x4, 0x2, 0x57d47ec6, 0x6, 0x9, 0xd207, 0x9, 0xff, 0x100, 0x1, 0xffff, 0x4, 0x7fff, 0x0, 0x3, 0x6, 0x4, 0x4, 0x6, 0x91, 0xf, 0x2, 0xa, 0x5, 0x341b, 0x3, 0x3, 0xfffffcf8, 0x0, 0x8, 0x80000001, 0x8000, 0x6, 0xfffffff4, 0x0, 0x5, 0x7, 0xd, 0x6, 0x9, 0xfff, 0x2, 0x3, 0x2, 0xfffffff8, 0x0, 0x56, 0x63, 0x4, 0x3, 0x5, 0x3, 0x5, 0x9, 0x8aa2, 0xffff, 0x1, 0x6d25, 0x7, 0x5, 0x1000, 0xfffffff9, 0x1, 0xf, 0x1, 0x0, 0x7ff, 0x43, 0x3, 0x100, 0x4, 0x0, 0x3a3, 0x2, 0xd, 0x4, 0x3, 0x3, 0x8, 0x101, 0x3, 0x0, 0x10, 0xe18c, 0x1, 0x5, 0x3ff, 0x9574, 0x3, 0xd7e, 0x80, 0xffff, 0x3, 0x4, 0x4, 0x40, 0x101, 0x5, 0x3, 0x5a, 0x365, 0xfffffff7, 0x1, 0xffffffff, 0x0, 0x101, 0x8, 0x8, 0x5, 0x100000, 0x4, 0x8, 0x752a, 0x1, 0x8, 0xfffffff9, 0x916, 0x0, 0x1, 0x7, 0x8, 0x7, 0x7, 0x8, 0x0, 0x8, 0x1, 0x2, 0x4b1, 0x9, 0xb, 0x2, 0x8044, 0x3, 0x81, 0x9f, 0x8001, 0x8, 0x0, 0x93, 0x9, 0x7ff, 0x0, 0xfffffffc, 0x654, 0xaf0f, 0x80000000, 0x7fff, 0x2, 0x2, 0x10001, 0x8, 0x8, 0x7, 0xffff, 0xd979, 0x6, 0x2, 0x6, 0xfffffffd, 0x7f, 0x90, 0x7, 0x0, 0x0, 0x8001, 0x5, 0xc41b, 0x7ff, 0x80000000, 0x81, 0xffffffff, 0x9, 0x10000, 0x2, 0xa, 0x2, 0x2, 0x989, 0x2, 0x4, 0x2, 0x8, 0x1, 0x6, 0x80000001, 0x9, 0x5, 0x1, 0x1, 0x9, 0x8, 0x7df1, 0x6, 0x59e, 0xfffffffe, 0x8, 0x8000, 0x80, 0x9, 0x80000001, 0x10000, 0x7fffffff, 0x3e9, 0xf, 0x5, 0x5, 0x1, 0x6, 0x2, 0x4, 0x6, 0x9, 0x8, 0x3, 0xffff, 0xffff, 0x4, 0x9, 0x5, 0x1, 0x5, 0xffffffff, 0x3, 0x7, 0xa5d, 0x8, 0x3fe, 0xfffffffa, 0x7fff, 0xa00, 0x1, 0xfffffff5, 0x8, 0x14fe2301, 0x9, 0x9, 0x7, 0x1, 0x0, 0x2, 0x9, 0x3, 0x4, 0x8, 0x6, 0x1, 0xb524, 0x1, 0x9, 0x9, 0x5, 0x5, 0x7a, 0x16da, 0x6, 0x1, 0xfffffffd, 0x8, 0x5, 0x0, 0x8, 0x9, 0x0, 0xfffffffa, 0x80000000, 0x6, 0x4, 0x1, 0xedc7, 0x9, 0x437c, 0x8, 0x4, 0x3, 0xb5b2000, 0x5, 0xed, 0x3, 0x80, 0x10, 0x1811, 0x1000, 0xfff, 0x4, 0x3, 0xffffffd2, 0x7ff, 0x7416, 0x4, 0x8, 0x6, 0x2, 0xb1, 0x6, 0x313, 0x1, 0xb, 0x2, 0xb6, 0xfeab, 0x5, 0x401, 0x800, 0x7, 0xa1, 0x4, 0x3, 0x6, 0x6, 0x10001, 0x4, 0x1, 0xb5, 0x7ff, 0xb, 0x9, 0x401, 0x9, 0x3, 0xd27, 0xfffffffb, 0xffffff91, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x7, 0xe1, 0x9, 0x7fffffff, 0x36, 0xe4, 0x6, 0x1, 0x5, 0x5, 0x6, 0x0, 0x1, 0xfffffff8, 0x7, 0x2, 0x101, 0x4, 0x7, 0xe242, 0x3, 0x8, 0x81, 0x100, 0x7, 0x81, 0xc584, 0x319, 0x8000, 0x10, 0x5, 0xaa, 0xa, 0x8, 0x5, 0x7b13, 0xfffffbff, 0xf2d, 0x2, 0x7548, 0x695c, 0xffff8000, 0xfff, 0x76, 0x1, 0x1, 0x1, 0x80000000, 0x7, 0xf, 0x5, 0x3, 0x4, 0x4, 0xf92, 0x2, 0x91f2, 0x5, 0x0, 0x2e6, 0x101, 0xf, 0x9c, 0xc, 0x3, 0x16d74000, 0x2, 0x5, 0x7fffffff, 0x1000, 0x2, 0x1, 0x10, 0x9, 0x9c8a0ab6, 0x101, 0x8, 0x101, 0x0, 0xb7, 0x7, 0xd, 0x157, 0x4, 0x7, 0x4, 0x477b, 0x3, 0x2, 0xa7, 0xc39a, 0xfffffffa, 0x1, 0x9, 0xffffff82, 0xffff, 0x2, 0x10001, 0x5, 0x1, 0x1, 0x1, 0x7, 0x1ff, 0xb, 0xd, 0x6, 0x7, 0x7, 0xffffffff, 0x0, 0xd696, 0x8, 0x9222, 0x6, 0x7fffffff, 0x7b1b9516, 0x4, 0x6, 0x80, 0x2, 0xfffffffb, 0xa, 0x10001, 0x0, 0xa, 0x1, 0x0, 0x2, 0x7, 0x0, 0x10, 0x8, 0x7ff, 0x3, 0xca, 0x7fffffff, 0x8, 0x4, 0xb0, 0x6, 0x80000001, 0x6, 0x8000, 0x101, 0x50, 0x9, 0x2, 0xfffffffa, 0x6, 0x7, 0x8, 0x4, 0x3e8, 0x8, 0x8, 0x9, 0x1ff, 0x291, 0x2, 0x2, 0x3fec, 0x6, 0x1, 0xfffffffd, 0x1000, 0x3ff, 0x8000, 0x3, 0x2, 0x8000, 0x7, 0x1, 0x76d3, 0x7, 0x5, 0x8, 0x8, 0x100, 0x81, 0x1bd408c, 0x5, 0x1, 0x1, 0xbc3, 0x7, 0x8, 0x3aab5c1a, 0x3, 0xf2c, 0x8, 0x0, 0xffffffff, 0x2c, 0x40, 0x3, 0x9, 0x7, 0x81, 0x5, 0x5, 0x2, 0x7, 0x9a4, 0x0, 0xd41, 0x1a2, 0x4, 0x7, 0x5, 0x200, 0xf, 0xd4e1, 0x80000001, 0x64a, 0xe, 0x80000000, 0x0, 0x4, 0x7, 0x1, 0x2, 0x95, 0x0, 0x9, 0x6, 0x4, 0x9, 0x5, 0x4, 0x0, 0x0, 0x3, 0x1b, 0x2, 0x1, 0x6d00, 0x6, 0x3, 0x652, 0xb52e, 0x40, 0xfff, 0x5, 0x3, 0x3, 0x4, 0x4, 0xffffff01, 0x2, 0x9, 0x7fffffff, 0x6, 0x3, 0x0, 0x2, 0x50, 0x8001, 0xf3, 0xa, 0xfffff5e1, 0xff, 0x10, 0x80, 0x9, 0x9, 0x4, 0x1, 0x3, 0x3, 0x2, 0x0, 0x2, 0x7, 0x3, 0xec3, 0x3ff, 0xffffff18, 0x69, 0x6, 0x3, 0x452, 0x7f, 0x1, 0x8, 0x102, 0x1, 0x7, 0xe35, 0x6, 0x5, 0x4, 0x7fff, 0x7, 0x4, 0x6, 0x0, 0xffff, 0x4, 0x80, 0x7, 0x7af00000, 0x111c, 0x1000, 0x7, 0xb1, 0x3, 0x400, 0x7f, 0x30be0f1d, 0x101, 0x8, 0x8, 0x200, 0x8000, 0xf, 0x4, 0x5, 0xdf7, 0x4, 0x1, 0x7, 0x2, 0x4, 0x9, 0x2, 0x7f, 0x80000000, 0x3, 0xfffffffa, 0xf87, 0x0, 0x1, 0x9, 0x40, 0x7, 0x7e, 0x1, 0x3, 0xadf1, 0x33755521, 0x5, 0xffffcd15, 0x8, 0xff, 0x80, 0x10, 0x7, 0xc54e, 0x4578, 0x3, 0x4, 0x8001, 0xfff, 0x1, 0x80, 0x80000001, 0x290, 0x4, 0x4, 0x493d0857, 0x5, 0x9, 0x7736daf8, 0x3, 0x8, 0xc99d, 0x3, 0x6, 0x7, 0xdd32, 0xfffffffb, 0x1, 0x2, 0x1, 0x4, 0x7fff, 0x81, 0x6, 0x5, 0x7, 0x40, 0x2, 0x36, 0x7ff, 0x80000000, 0x4, 0x80, 0x5, 0x81, 0x9, 0x6, 0x2, 0xd, 0x9, 0x2, 0x8, 0x3, 0x2, 0x416, 0x88b, 0x7, 0x8, 0x437, 0x2, 0x0, 0xb, 0x3, 0xaa, 0x8, 0x3, 0x8997, 0x0, 0x7, 0x15d04dd2, 0xa, 0x5, 0x5, 0x7, 0x0, 0x0, 0x9, 0x722f, 0x1, 0x8001, 0xb7cc, 0x4, 0xffffff80, 0x8, 0x2, 0x4, 0xe7, 0x1, 0x8000, 0x7, 0x1aa4, 0x9, 0x10000, 0x0, 0x4, 0x3, 0x80000000, 0x4000000, 0x3, 0x6, 0xffffff14, 0x7fffffff, 0x7, 0x9, 0x10, 0x9, 0x8, 0xfffffff8, 0x0, 0x5, 0x3, 0xd, 0x1, 0x10001, 0x80, 0x1000, 0x4, 0x9, 0xcea, 0x9, 0x4, 0x7, 0x8, 0x2, 0x8, 0x5, 0x1f, 0x5, 0x4f0b, 0x8, 0x8a, 0xa5, 0x1ff, 0xcfc0, 0x4, 0x5, 0xdd, 0x2, 0x6, 0x4, 0x3, 0x7ff, 0xffffffe1, 0x4, 0x1, 0x7ecb, 0x7, 0x5, 0x40, 0x5, 0x7, 0x6193, 0x7fff, 0xad6, 0x4, 0x100, 0xfffffbe4, 0x9, 0x1, 0x6, 0x4, 0xffff, 0x100, 0xb, 0x7, 0x1, 0x4, 0x0, 0x5, 0x5, 0x5, 0x0, 0x0, 0x7, 0x7, 0xd, 0x6, 0xe, 0x4, 0x3, 0xfffeffff, 0x0, 0x4, 0x5, 0xc50, 0x8, 0x58, 0x9, 0x1, 0x8, 0x5, 0xfffffffb, 0x16cf, 0x80000000, 0x799c, 0x4, 0x81, 0x7, 0x437, 0xd, 0x5, 0xd970, 0x1, 0x7, 0x8, 0x4, 0xbebc, 0x16, 0x42000000, 0x9, 0x4, 0x7, 0x0, 0xf, 0x8, 0x7, 0x1000, 0x7, 0x6, 0x100, 0x7, 0x1, 0x9, 0xffff65bb, 0x0, 0x7, 0xc, 0x3, 0x3, 0x1, 0x3ff, 0xfffff1dd, 0x10001, 0x9, 0xf975, 0xab, 0x6, 0xa, 0x7, 0x40000000, 0x0, 0x9, 0xf, 0x1, 0x81, 0x4, 0x7, 0x8000, 0x5f6, 0x7, 0x9, 0x8, 0x9, 0x4, 0x760, 0x1, 0x401, 0x0, 0x6, 0x200, 0x2, 0x5, 0xc36, 0x4, 0x4e4, 0x5, 0x5, 0x7, 0x2, 0x5, 0x1, 0x0, 0x7, 0x7, 0x7, 0x2df, 0xfffffffb, 0x1, 0xd07, 0x4, 0x1, 0x10, 0xffffffff, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x22, 0x2, 0xa037, 0x8, 0xa00, 0xe224, 0x3, 0x2, 0xa07f, 0x80000001, 0x6, 0x8, 0x1, 0x8, 0xfffffff7, 0x9, 0x7, 0x1, 0x7, 0x7c27, 0x1, 0x5, 0x0, 0x2, 0x2, 0x9, 0x2, 0x3ff, 0x9, 0x9, 0x0, 0x8, 0x2, 0xa, 0xffffffff, 0x7, 0x5, 0x0, 0x2, 0x9, 0x1, 0x6, 0x400, 0x2, 0x3, 0x4, 0x9, 0x1, 0x1000, 0x3, 0x8, 0x5d7, 0x101, 0x495, 0xff, 0x2, 0x4, 0x5, 0x3, 0x4, 0x3ff, 0x8, 0x8, 0xc2, 0xff, 0x7, 0x6, 0x5d, 0x7, 0x3ff, 0x4, 0x3, 0x45a0, 0xcf52, 0x8, 0x5, 0xbbec, 0x6, 0x2, 0x3, 0x9, 0x4, 0x8, 0x4, 0x4, 0x8, 0x4, 0x2, 0x7ff, 0x6, 0x0, 0x4, 0x6, 0x7, 0x7, 0x5, 0x3, 0xfffff842, 0x9, 0x7000, 0x100, 0x800, 0x2, 0x1cb0, 0x3, 0x1000, 0xd97, 0x1000, 0x7, 0x700000, 0x2, 0x1265, 0x0, 0x6, 0x4, 0x4, 0x3, 0xe, 0x3, 0x9fda, 0x5c, 0x3, 0x5, 0x100, 0x1, 0x9, 0x8d2c, 0x6, 0x8, 0x10001, 0x101, 0x98, 0x8, 0xd, 0x2, 0x7, 0x31102e20, 0x3, 0x3, 0x5, 0xfffffffc, 0xdba, 0x2, 0x2, 0xd, 0x7, 0x5, 0x2, 0x9, 0x9, 0x700, 0x4, 0x2, 0x7, 0x3, 0x8, 0xb18c, 0x401, 0xebb, 0x5, 0x69be, 0xa, 0xfff, 0x5, 0x5c53, 0x5, 0x9, 0x9, 0x29d9, 0xabe7, 0x1, 0x7, 0x3, 0x0, 0x8, 0x40, 0xb, 0x5, 0x68, 0x89a4, 0x40, 0x7, 0x6, 0x0, 0xffff, 0x8, 0x1000, 0xae34, 0x2, 0x2, 0x8000, 0x3, 0x1, 0x3, 0x97d, 0x8001, 0x7, 0x8, 0x5, 0x7f, 0x2e, 0x0, 0xffffffff, 0x4, 0x10000, 0x3, 0xf2, 0x8, 0x9, 0x101, 0x1, 0x2, 0x7, 0x100, 0x5, 0x4, 0xc, 0x80000001, 0x6, 0x10001, 0x0, 0x7, 0x5d, 0x4, 0xe3, 0xaa, 0x7, 0x2, 0x0, 0x3ff, 0x6, 0x2, 0x200, 0x5, 0x7, 0xe1b3, 0x40b6, 0x5, 0x1ff, 0x9, 0x401, 0x3, 0x8, 0x8, 0x5, 0x9, 0x1, 0x0, 0x9, 0x1, 0x200, 0x7, 0xb, 0x2, 0x4, 0x1, 0x8, 0x11f2, 0xc689, 0x7, 0x7, 0x9, 0x14c, 0xc, 0x101, 0x101, 0x51dd, 0x3, 0x0, 0x537d, 0x0, 0xc9e, 0x400, 0x6, 0x4, 0x4, 0x5, 0xffffff00, 0x6, 0x818, 0x8, 0x2, 0x9, 0x2, 0xace, 0x5, 0x2, 0x6, 0x10000000, 0x0, 0x2a2d4b9d, 0x3, 0x0, 0x3, 0x6, 0x0, 0x9, 0x5, 0x1, 0xfa86087, 0x8, 0xfff, 0x615c, 0x1, 0x3716891c, 0x0, 0x3, 0x6, 0xd, 0x30d, 0xfffffffc, 0x4, 0x5, 0x6, 0x7, 0xac000000, 0xa, 0x1, 0x400, 0x7, 0xffffffff, 0x4, 0x3b3, 0x3, 0xbf, 0x71, 0xfffff001, 0x2, 0x7f, 0x7, 0x6, 0x3, 0xfffffffa, 0x0, 0x7, 0x4, 0xcb6f, 0x6, 0x2, 0x31, 0x5, 0x10, 0xfff, 0x80000000, 0x2, 0xfffffffe, 0x3, 0x2, 0x0, 0xffffffc0, 0x1, 0x1299, 0x101, 0x7, 0x8000, 0x1, 0x4c3, 0xa, 0xd, 0x5, 0x81, 0x4c9a, 0x0, 0xc732, 0x5, 0x2, 0x8000, 0xd3, 0x1, 0xfffffff7, 0x3, 0xfffff8f3, 0x0, 0x10000, 0xffffffff, 0x9, 0xfffffffa, 0x6d72000, 0x2, 0x4, 0x3, 0x2, 0x3, 0xe1c, 0x8, 0x1, 0x2, 0x2, 0xfffffff4, 0x627, 0x8, 0x7, 0xe, 0x6, 0x5, 0xe046, 0xd, 0x6, 0x6ae8, 0x9d, 0x8, 0x5, 0x1, 0x9, 0x2, 0xfff, 0x8, 0x0, 0x0, 0x0, 0x36ca, 0x4, 0x26c0000, 0x4, 0xa21, 0x5, 0xfda5, 0x7fff, 0x1ec3800, 0x24, 0x0, 0x80000001, 0x4, 0x7, 0x2, 0x10001, 0x2, 0x8, 0x6, 0x769, 0x200000, 0x8, 0x9c24, 0x0, 0x6, 0x3, 0x1, 0x7, 0x8001, 0x7, 0x8001, 0x4, 0xffffffff, 0x80000, 0x5, 0xffff, 0xffffff01, 0x9, 0x5, 0x8020000, 0x6, 0x2, 0x2, 0x0, 0x1, 0x5, 0xbe, 0x2, 0x9, 0x101, 0x6, 0xff, 0x6, 0xe2b1, 0x5, 0x7, 0xffffff36, 0x50d2, 0x6, 0x2, 0x3, 0x4, 0x8001, 0x6, 0x2, 0x10000, 0x5, 0x4, 0x2, 0x7, 0x3, 0xfffffffd, 0x6, 0x8, 0x8001, 0x9, 0x7, 0x8000, 0x5, 0x5, 0x0, 0x80000001, 0x7, 0x5, 0x3, 0xffff, 0x81, 0xf79, 0xfffffffc, 0x0, 0x400, 0x8, 0x1, 0x9, 0x5, 0x1, 0x6, 0xfffffffe, 0xfffffff7, 0x9, 0x75, 0x8001, 0x43, 0x10000, 0x7, 0x10, 0x5522, 0x3ff, 0x10001, 0x856d, 0x101, 0xffff, 0x2, 0x9, 0x101, 0xe, 0x40, 0x9, 0x4, 0x6, 0x7, 0x7, 0xffffffff, 0x81, 0x8f4, 0x6, 0x1, 0x8, 0x6, 0xf, 0x9, 0xd, 0x5, 0x1, 0x80000000, 0x1, 0x7, 0x5, 0x4, 0x0, 0xffff, 0x4, 0x4, 0x200, 0x8, 0x0, 0x3fc00000, 0x3, 0x4, 0x3, 0x5, 0x8, 0x2, 0x7ff, 0x10001, 0xaa00, 0xa82, 0x3, 0xba, 0x9, 0x0, 0xfffffffc, 0x5, 0xc, 0xc, 0x27c9, 0x2, 0x3ff, 0x0, 0x8, 0x2, 0x4, 0x7fff, 0xe9, 0xa19f, 0x1, 0x4, 0xe, 0x81, 0x4777, 0x1, 0xc, 0x2, 0x6, 0x1000, 0x9, 0x8, 0x6, 0x6, 0x5, 0xffffffff, 0x8, 0x10, 0x7, 0x200, 0x4, 0x2, 0x7fff, 0x7, 0x0, 0x7fffffff, 0x2, 0x2, 0x3, 0x8000, 0x7, 0x5, 0x4, 0x0, 0x2, 0xffff0e61, 0x3, 0x7, 0x10, 0xf, 0x8, 0x8, 0x0, 0x36dc, 0x1000, 0x5, 0x5, 0xffffffff, 0x7fffffff, 0x81, 0x7fffffff, 0x80, 0x6, 0x7a7f, 0x80000000, 0x3c6, 0xfffffffa, 0x1a, 0xffffffff, 0x6, 0x3, 0x7, 0x8, 0x79, 0x0, 0x81, 0x80000001, 0x7, 0xf, 0xe, 0xffffffff, 0x2a84, 0x7, 0x6, 0x3, 0x3, 0x2, 0x7, 0x2, 0x5, 0x0, 0x8, 0xf15e, 0xc0000000, 0x3, 0xfffffff7, 0xfffffff9, 0x6, 0x800, 0xa73, 0x2, 0x0, 0x1ff, 0xfffffffe, 0xfffffffd, 0x87, 0xf888, 0x0, 0x4, 0xafdf, 0x2a6a, 0x7f, 0x0, 0x2, 0x80000001, 0xffffff80, 0x4, 0x7f7c, 0xff, 0x47, 0x5, 0x2, 0x6, 0x0, 0x7, 0x9, 0x5, 0x4, 0x4, 0x7, 0xffff0001, 0x6, 0x2d1, 0x7, 0x7ff, 0x0, 0xffff0000, 0x4, 0xa904, 0xf, 0x7fffffff, 0x9, 0x6, 0x10001, 0x66e6, 0x2, 0x0, 0x2, 0x3, 0x4, 0x8a75, 0x4, 0x3, 0x5b, 0x9, 0x2, 0x3, 0x5, 0x2, 0x8, 0x1, 0x9, 0x5, 0x10000, 0xe089, 0xaf6f, 0x485c6a34, 0x1, 0x7f, 0x3, 0x1, 0x4a9e, 0x2, 0x10, 0x4, 0x9, 0x9, 0x9, 0x800, 0x7, 0x7, 0x4, 0x0, 0x6, 0x8, 0x8001, 0x3, 0x4, 0x7, 0x3, 0x1000, 0xc, 0x8, 0x3, 0x2, 0x8, 0x2, 0x0, 0x7f, 0x10, 0x3, 0x5, 0x1, 0x2, 0x2, 0x3, 0x8, 0x2, 0x2, 0xc, 0x7, 0x5, 0xc, 0x1, 0x10000, 0x4, 0x4, 0x9, 0x5, 0x7856, 0xcd, 0x401, 0x2, 0x5, 0xfffffffe, 0x9, 0xf43e, 0xd6, 0x101, 0x3, 0x7, 0x5, 0x3, 0xd33b, 0xcba3, 0x8001, 0x4, 0x3ff, 0x95d, 0xde1, 0x3, 0x81, 0x6, 0xffff7fff, 0x4, 0x3, 0x7, 0xf, 0x4, 0x7fff, 0x6, 0x8001, 0x8, 0x6, 0x800, 0x0, 0x5, 0x6, 0x2d1, 0xcc, 0x6, 0x7, 0x4, 0x0, 0xfffffff2, 0x5, 0x6, 0x4, 0xc0e8, 0x5, 0x6, 0x7, 0x7, 0xd, 0x7, 0x6, 0xd, 0x333, 0x7, 0x732b, 0x1000, 0x1ff, 0x40, 0xd, 0x4, 0x10001, 0x3, 0x80, 0x3, 0x2, 0x8, 0x9, 0x10, 0x0, 0x7, 0x80000, 0x534, 0x3, 0x1, 0x8, 0x1, 0x7, 0x6, 0x2, 0x7ff, 0x2, 0x6, 0x10, 0x0, 0x1, 0x7, 0x4, 0xa87d, 0x1, 0x0, 0x7, 0xfffff801, 0x400, 0x1, 0x80000001, 0x5, 0x9, 0x3c, 0x80000001, 0x10001, 0x5, 0x4, 0x3, 0xb, 0x0, 0x2, 0xcbd, 0xfffffc01, 0xac, 0x2, 0x9a, 0x0, 0x2000, 0x0, 0x4, 0x8001, 0x5c6, 0xc, 0x5b0c, 0x7, 0x7fffffff, 0x9, 0x5, 0x1, 0x39, 0x3ff, 0x8, 0x1, 0x3, 0x0, 0x80000000, 0x40, 0x6, 0x3, 0x2, 0x565e, 0x0, 0x100, 0x9, 0x9, 0xff, 0x3, 0x8, 0x8, 0x1200, 0x5, 0x6, 0x7fffffff, 0x9, 0xfff, 0x1, 0x80, 0x2, 0x2, 0x9, 0xcba, 0xff, 0xfffffffc, 0x0, 0x1820a5a0, 0x4, 0xfffffffd, 0xf, 0x9, 0x6, 0x4035, 0x6, 0x4, 0x6, 0x6, 0x7, 0xed17, 0x1, 0x6, 0x3, 0x10000000, 0xfffffff1, 0x6, 0x60d, 0x5, 0xf, 0xa0ff80d, 0x5, 0x4, 0x3, 0x92, 0x7fffffff, 0x0, 0x666, 0x6, 0x0, 0x6, 0x2, 0x2, 0x5, 0xfffffffb, 0x5, 0x5, 0xe538, 0x5, 0x6, 0x9, 0x9, 0x0, 0x3cc2, 0x1, 0x14b, 0x5, 0x1, 0x9, 0x6, 0xf, 0x8, 0x3, 0x9, 0x3, 0x7, 0x4, 0x2, 0x7, 0x80000001, 0xffffffff, 0x9, 0x1, 0xc6b, 0x200, 0x36, 0x5, 0xf, 0x5, 0xc, 0xff, 0x9, 0x1, 0x4, 0x1, 0x9, 0x8, 0x4, 0x9, 0x0, 0x0, 0x6, 0x10001, 0xea4, 0x3, 0x9632, 0x3, 0xae, 0x7, 0x6, 0x8, 0x7f, 0x0, 0x4, 0x0, 0x3, 0x8000, 0x5, 0xe, 0x5, 0x6, 0x57d2, 0xa2bc, 0x4, 0xff, 0xff, 0x63, 0xfffffff9, 0x7, 0x0, 0x9, 0x9f, 0x7, 0x4, 0xfffffffd, 0xf4, 0x3, 0x6, 0x7, 0x7ff, 0x3, 0xf, 0xfd, 0x7, 0x40, 0x5d0f, 0x7e2, 0x1, 0x8, 0x2, 0x7, 0x6b, 0x40, 0xc21b, 0x0, 0x7fff, 0x7, 0x3, 0x8, 0x5, 0xbe8e, 0x7, 0x7, 0x7f, 0x2, 0xf3a, 0xb, 0x5, 0x6, 0x5, 0x4, 0xc00000, 0x8, 0x6, 0x10, 0x10, 0x8, 0x0, 0x0, 0x0, 0x1a375dbc, 0x3, 0x80, 0x3, 0x4, 0xd, 0x3, 0x2aa7, 0x7, 0x7, 0x1880000, 0x8, 0x21d0, 0x88, 0x5, 0x3, 0x1, 0x3, 0x8, 0x2, 0x5, 0xfffffffc, 0x5, 0x9, 0x800, 0x1, 0x3, 0x5, 0x6, 0x7, 0x555b, 0x36a9f85e, 0x82, 0x1, 0x3, 0x80000001, 0x7f, 0x1000, 0xffffffff, 0x4, 0x7, 0xfffffff7, 0x8, 0x8, 0xbca, 0x5, 0x101, 0x4, 0x1, 0x2, 0x9, 0x1, 0xffffff1c, 0x3, 0xffffffff, 0x0, 0x9, 0x5, 0xb, 0xc2, 0x2, 0x7f, 0x40, 0x4, 0x0, 0xfffffff8, 0xffffff00, 0x400, 0x0, 0x10000, 0x2, 0x10000, 0xac70, 0x81, 0x3, 0x100, 0x4, 0x1, 0xe, 0x5, 0xfff, 0x0, 0x3, 0x1, 0x1, 0xfffffffc, 0x6, 0x3, 0x9, 0xa, 0x4, 0x3, 0x6, 0x6, 0x80000001, 0x80, 0x0, 0x0, 0x7, 0x9, 0x3, 0x8000, 0x6, 0x375d, 0x4, 0x1, 0x2, 0x1, 0x8, 0x7, 0x0, 0x0, 0xbc, 0x0, 0x4, 0x25940, 0xffffff11, 0x6a, 0x6, 0x5, 0x0, 0xffffff00, 0x9, 0x66, 0x8, 0x247, 0x3, 0x1, 0x4, 0x3, 0xbc, 0x5, 0xffffff10, 0x2, 0x6, 0x0, 0xd14, 0x7fffffff, 0x0, 0xec4, 0xfffffff4, 0xfffffbff, 0x8, 0x8001, 0x4fd4, 0xbdf3, 0x2, 0x2, 0x6, 0x29, 0x4, 0x2, 0x4000, 0x0, 0x9, 0xc0b, 0x0, 0x1, 0x800, 0x7, 0x3ff, 0xfffffffa, 0xfff, 0x6, 0x23, 0xaf0, 0xc0, 0x8, 0x0, 0x7, 0x4, 0x2, 0x8000, 0x100, 0x0, 0x1, 0x1, 0x6, 0x6, 0x7, 0x200, 0x2, 0x2d, 0xffff, 0x8001, 0x40, 0x8, 0x418, 0x29eb, 0x7fff, 0xf, 0x47c, 0x7, 0x3, 0x5, 0x5, 0x7, 0x2, 0xfffffffd, 0x1, 0x80, 0x52, 0x338, 0x9, 0x3, 0x4, 0x1, 0x2, 0x1c00, 0x6cc915ec, 0x12, 0x4, 0x2, 0xffff, 0x7, 0x6, 0x1, 0x9, 0xf, 0xffff, 0x1, 0x6, 0x80, 0x4, 0x5, 0x6, 0x40000000, 0x3, 0x3, 0x8000, 0x3, 0x1ff, 0x7, 0xf9, 0x8, 0x8, 0x7ff, 0x2, 0x7, 0xf9, 0x0, 0x6, 0x0, 0x5, 0x4, 0x4, 0x40, 0x0, 0x7fff, 0xc, 0xb2, 0x8, 0x1, 0x3, 0x9, 0x7fff, 0x690, 0xb, 0xffffffff, 0x80, 0x10, 0x9, 0x96, 0x200, 0x9664, 0x6, 0xfff, 0x0, 0xea0, 0x6, 0x0, 0x23a, 0x4b3, 0x200, 0x8b8, 0x7, 0x7ff, 0x1, 0xffffffff, 0x3, 0x6, 0xffffff81, 0x7, 0x1ff, 0x1, 0x9, 0x7, 0x5, 0x0, 0x6, 0x6, 0xffffffc6, 0x6, 0x3, 0xffff, 0x101, 0x1, 0x401, 0x25, 0x3, 0x6, 0xf633, 0x1, 0x6, 0x7b1, 0x0, 0x80000001, 0x8, 0x8, 0x5, 0x8, 0xa3c, 0x28, 0x7, 0x9, 0x1, 0x6f, 0x0, 0x232d1b4a, 0x7ff, 0x81, 0x3, 0xc40, 0x6, 0x1ed, 0x1, 0xb16, 0x3, 0xc5, 0x4, 0x28e5, 0x710, 0xfffffff7, 0x9, 0x2, 0xffffffff, 0x6, 0x100, 0x3df, 0x80, 0x4, 0x7, 0x4, 0xb4, 0x0, 0x81, 0x7, 0x8, 0x5, 0x400000, 0x1, 0xfff, 0x81, 0x5, 0x400, 0x5, 0xb2ac, 0x6892, 0x9, 0x19, 0xfffffff7, 0x7, 0xe10, 0x4, 0x0, 0x10000, 0x4, 0x2, 0x1, 0x0, 0x5, 0x3, 0x2, 0x0, 0xf5, 0x6, 0x4, 0xe6, 0x8000, 0x2, 0x0, 0x80, 0x7, 0x500, 0x6, 0x8, 0xfffffff7, 0xe217, 0xc45e, 0x0, 0xfffffffd, 0x7ff, 0xe, 0x6, 0x7f, 0x1, 0x3, 0x8, 0x2, 0x4, 0x7, 0x7, 0x2e5f, 0x6, 0xffff, 0x76, 0x10, 0x400, 0xfffff801, 0xc, 0x2, 0x4, 0xfff, 0xdfc, 0x7, 0x7, 0x10001, 0x9, 0xa5f, 0x1000, 0x80000000, 0x1, 0x7, 0x6, 0x2, 0x7, 0x4, 0xd0, 0x100, 0x3, 0xd, 0x3, 0x4, 0x0, 0x3, 0x4c, 0x80000001, 0x7ff, 0x0, 0x1, 0x0, 0x5, 0x8000, 0x7dba, 0xb, 0x9, 0x1, 0x8, 0x79b267e3, 0x7, 0x2, 0x7, 0x7, 0x70000, 0x8, 0xb, 0x26482e6d, 0x80000001, 0x2, 0x1, 0xfffffffb, 0x7b, 0x80000000, 0x2, 0x101, 0x7, 0x6, 0x466, 0x5, 0x1, 0x10001, 0x0, 0x7f, 0x0, 0x5, 0x3a8b, 0x1, 0x6, 0x7ff, 0x1, 0xdc9, 0x4, 0x0, 0xe, 0x6, 0x7, 0x9, 0x2, 0x6, 0x7ff, 0xb7, 0x2, 0x8, 0x0, 0x6, 0x3, 0xfffffff8, 0x9, 0x1, 0x81, 0x8000, 0x8, 0x7, 0xfffffc00, 0x7fffffff, 0x2, 0x0, 0x0, 0x282, 0x40, 0x0, 0x4e, 0x3c99, 0xf, 0x6, 0x1, 0xb7, 0x0, 0x3, 0x2, 0x4, 0x9, 0x1, 0x81, 0x6a56, 0x1, 0xff, 0x5, 0x5, 0x0, 0x5, 0x0, 0xff, 0xa, 0x2, 0x5, 0x5, 0x0, 0x5, 0x1, 0x8, 0x10, 0x7fff, 0x8000, 0x8001, 0x5, 0x5, 0x2, 0xc6, 0x6, 0x0, 0xbb, 0x0, 0x9, 0x0, 0x7ff, 0xe00d, 0x2, 0xd, 0x44, 0x9, 0x8, 0xfffff801, 0xc, 0xfffffb29, 0x7, 0x3, 0x6, 0x3ff, 0x101, 0x9, 0x8, 0x2, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x200, 0x1, 0x6f, 0x2, 0x1ff, 0x101, 0x1, 0x1, 0x100, 0x8, 0x9, 0x4, 0xe, 0x7f, 0x6, 0x4, 0x3a158407, 0xffff, 0x4410038a, 0x2, 0x800, 0x0, 0x7, 0x40, 0x401, 0x2, 0x7, 0x3ff, 0x4, 0x5, 0x2, 0xb, 0xc, 0x20d, 0x61f, 0x10001, 0x3, 0xfffffe01, 0x3, 0x7, 0x5, 0x7, 0xffff, 0xccc, 0x2, 0xffffff7f, 0x95b4, 0xd4, 0x1, 0x7f, 0xd51, 0x1, 0x3, 0xffffffbd, 0x6, 0xc0000000, 0x10, 0x8, 0x9, 0x4, 0x101, 0xd, 0x1ff, 0x0, 0xfffffff8, 0x0, 0x4, 0x9, 0x2, 0x7fffffff, 0x5, 0xfffffc00, 0x6, 0x8001, 0x3, 0x6, 0x0, 0x7, 0x2, 0x4, 0x2, 0x2, 0x3, 0x4, 0x10001, 0xfffffff9, 0x1, 0x425fe90, 0x7ff, 0x4, 0xa3, 0xfff, 0x0, 0x7, 0x1, 0x400, 0x2, 0x7, 0xd0, 0x7f, 0x1000, 0x8, 0xc, 0xffffffff, 0x24c9b429, 0x5, 0x4, 0x1, 0x81, 0x7, 0x36, 0x5, 0x2, 0x0, 0x34b, 0x7, 0x9, 0xfffffa7e, 0x40, 0x2, 0x1000, 0x2, 0x0, 0xffffffff, 0x19, 0x1800, 0x9, 0x1, 0x94ed, 0x3, 0x80000000, 0x5, 0x4, 0x3, 0x0, 0x2, 0x3ff, 0x4, 0x7, 0x4, 0x4c8, 0x6, 0xeb66, 0x2, 0x8, 0x9, 0x6, 0x9, 0x0, 0x0, 0xa, 0x9, 0x8001, 0x1ff, 0x5, 0x7fff, 0x7, 0x9, 0xfffffff8, 0x0, 0xf, 0x9, 0x6, 0x0, 0x2, 0x5, 0x9, 0x3, 0x5, 0x9, 0xfffffffe, 0x1, 0x4, 0x2, 0x7, 0x5, 0x6, 0xffff, 0x7, 0x5, 0x6, 0x800, 0xf, 0xd3, 0x8, 0x0, 0x200, 0x8, 0x6, 0x6, 0xf506, 0x1f6a, 0x7, 0x1, 0x7fffffff, 0x67e7, 0x78, 0x97, 0x7, 0x7, 0x400, 0x0, 0x6, 0x8, 0x81, 0xeb9, 0x2d3a, 0x4, 0x200, 0x9, 0x6, 0x1, 0x2, 0xfffffffd, 0x7, 0x7, 0x7, 0x7, 0x438f, 0x4, 0xe, 0x2, 0x60, 0x10001, 0x9, 0x5, 0x6, 0x6, 0xa2, 0x3, 0x6, 0x1, 0x1000, 0x3, 0x2ba82e15, 0x8, 0xa014, 0x8000000, 0xa45c, 0x7, 0x80000001, 0x3, 0x8001, 0x3, 0x1, 0xfe, 0x8, 0x0, 0x200, 0x3, 0x70, 0x8, 0x7, 0xfffffffc, 0x6, 0x6, 0x5, 0x4, 0x8, 0x3, 0x4, 0x1, 0x6, 0xca, 0x7, 0x0, 0x4ae, 0x7fff, 0x9, 0x2d47, 0x8, 0x8000, 0x4, 0x0, 0x5, 0x3, 0x3, 0x4, 0x6, 0x710, 0x10, 0x2, 0x3, 0x9, 0x8, 0x9, 0x0, 0x68a, 0x10001, 0x8, 0x8, 0x6a62, 0xe, 0x5, 0x5, 0x2, 0x2, 0x3, 0xce, 0xf, 0xb, 0x6, 0x8, 0x2, 0x8, 0x2, 0x33c00000, 0xfffffff8, 0x4, 0xee6, 0x7fff, 0x8, 0x7fffffff, 0x1664, 0x3, 0x0, 0x80, 0x7db, 0x7, 0x0, 0x3ef1, 0x40000000, 0xb8, 0x7fff, 0x3, 0x1ff, 0xe6, 0x3, 0x8, 0x0, 0x4, 0x0, 0x3f, 0x565475d6, 0x4, 0xbcb, 0xfffffbff, 0x6, 0x2, 0xfffffff1, 0xd, 0x4, 0x7, 0x400, 0x2, 0x41a, 0x3, 0x6, 0x1ff, 0xfffffffb, 0x1, 0x6, 0x7, 0x8ce5, 0x0, 0x80, 0x3, 0x8, 0x9, 0xffffffff, 0x1, 0xd, 0xd24, 0x8, 0x8, 0xff, 0x3, 0xd40e, 0x55, 0x9, 0x40, 0xf36, 0x5, 0x1, 0xfffffffb, 0x2, 0x26d, 0x4b, 0x1000, 0x9b, 0x37aa, 0xa07, 0x7, 0x7ff, 0x0, 0x6, 0x3, 0x1, 0x7f, 0x1000, 0x7f, 0x80, 0x0, 0x81, 0x7f, 0xd43, 0x7f, 0x8, 0x40, 0x1, 0x2d2, 0x3, 0x7, 0x8, 0x3, 0x6, 0x18e, 0x1, 0xb6, 0x5, 0xffffffff, 0x7fffffff, 0x0, 0x0, 0x9, 0xac, 0x4, 0x1, 0x8, 0xc0, 0x3, 0x7, 0x401, 0x8, 0x6, 0x6, 0x3, 0x7, 0x5, 0x2, 0x6, 0x7fff, 0x40, 0x7, 0xb000000, 0x4, 0x9, 0x5, 0x4, 0x1, 0x4, 0x3, 0x4, 0x0, 0x6, 0x0, 0x7fffffff, 0xfffffff7, 0x1, 0x8, 0x3, 0x7ff, 0x6, 0x0, 0xe9d4, 0x2, 0x199a, 0x3, 0x9, 0x3, 0x4, 0xfffffffe, 0x5, 0x80000000, 0xffffffff, 0x5, 0xfff, 0x2, 0x21a, 0xfffffff8, 0xa33, 0x8, 0x1, 0x392c, 0x9fb, 0x3, 0x4, 0xb, 0x2, 0x0, 0x1, 0x3, 0x6, 0xc, 0x80000000, 0x3e87, 0x1, 0x401, 0x7fff, 0x3, 0x3ff, 0x2472b47b, 0x9, 0x662, 0x2, 0x8365, 0x3, 0xb782, 0x9, 0xfffff800, 0x8, 0x7, 0x0, 0xffff7fff, 0x2, 0xfff, 0xad8, 0x7, 0x0, 0x4, 0x1, 0x101, 0x6, 0x0, 0x7, 0x5, 0x0, 0x3, 0x3, 0xfff, 0xa7, 0x0, 0x101, 0x7, 0x2, 0x85, 0x0, 0x5, 0xe1, 0x4, 0x80, 0x80000001, 0x0, 0x80, 0x5, 0x7, 0x1, 0x7, 0xf044, 0xfffffeff, 0x8, 0x1, 0x9, 0x1, 0xcb3, 0x4, 0x80, 0x8000, 0x3e9, 0x7, 0x10000, 0x88b, 0x7, 0x2, 0x2, 0xfffff093, 0x8, 0xa78, 0x3, 0x7fff, 0x7, 0x5, 0xf3, 0x80000001, 0x401, 0x7e32741e, 0x3, 0x47, 0x8, 0x1, 0x1ff, 0x9, 0x0, 0x1, 0x10000, 0x7ff, 0x3, 0x8, 0x78e1, 0x8, 0x1, 0x2, 0xf077, 0xffffffff, 0x5, 0xfe, 0x80000000, 0x9, 0x6, 0x0, 0x492, 0x3, 0x17f, 0x80000000, 0x6, 0x6, 0x8, 0xf, 0x5, 0x1, 0x3, 0x1, 0xd, 0x1000, 0x2, 0x0, 0x8, 0x1, 0xc, 0x401, 0x7, 0x5, 0x3, 0x400, 0x6, 0x8, 0xfffffffc, 0x6, 0x7fff, 0x2, 0x446d, 0x40, 0x9, 0x9, 0x2, 0x2, 0x6, 0x8000, 0x8, 0x6, 0x3, 0x7, 0x8001, 0x200, 0x9, 0x80000000, 0x5, 0x2, 0xffffffff, 0x7, 0x9, 0xf, 0xfffffff9, 0x10000, 0x7, 0x5, 0x8, 0x3, 0x1, 0x7, 0x7fff, 0x12, 0x1000, 0x2, 0x8d83, 0xf, 0x8, 0x1b70, 0x0, 0x6, 0x20, 0x4, 0x80, 0x6, 0x8, 0x1, 0x989, 0xffffc06f, 0x3, 0x6, 0x4, 0x4, 0xa, 0x800, 0x5, 0xe, 0x0, 0xfffffffb, 0x8, 0xffffffff, 0xffffffff, 0x7, 0xffff, 0xc, 0xb, 0x9, 0xc, 0x3, 0x3, 0x3, 0x8, 0x9, 0x1, 0x9e, 0x1, 0x8, 0x5, 0xcf, 0x9, 0x4, 0x2, 0x6, 0xc381, 0xff, 0x7, 0x6909, 0x70, 0x5, 0xf, 0x6, 0x0, 0x1, 0x7, 0xd, 0x8, 0x1, 0x4, 0x3, 0x9a, 0x7, 0x80000001, 0x3, 0x6, 0x9, 0x8, 0x3ff, 0xfffffffd, 0x10001, 0x20000000, 0x6, 0x1, 0xae47, 0xfffff9aa, 0x9, 0x9, 0x2, 0xfef, 0x4, 0x7, 0x0, 0x7f, 0x4, 0x1, 0xc853fcc, 0x5, 0x5, 0x7, 0xfff, 0x9, 0x28d3800, 0x9, 0x2, 0x10, 0x6, 0xfffffffd, 0x3, 0xfffffffd, 0x2, 0x10001, 0x6, 0x1, 0x10000, 0x8, 0x9, 0x2, 0x1, 0x5, 0x2, 0xc, 0xe61d, 0xfffff9e9, 0xffff, 0xfffffffa, 0x7, 0x6, 0x6, 0x9, 0x3, 0x100, 0x1, 0xf, 0x1000, 0x2, 0x9, 0x93b0, 0x5, 0x386a877e, 0x4, 0x200, 0x6, 0x7, 0x1, 0x4, 0x9, 0x4, 0x6, 0x4, 0x1000, 0x5, 0x8, 0x6, 0x5d0, 0x7, 0x4, 0x8, 0x0, 0xffffffff, 0x6, 0x1, 0x2b41, 0x4, 0x5, 0x0, 0xa1b, 0x0, 0xb, 0x6, 0xb, 0xf, 0x8001, 0x51a7, 0x7fff, 0x0, 0x69, 0x33, 0x10001, 0x6, 0x9, 0xdcb1, 0x8, 0x7fffffff, 0xb62, 0x0, 0x7, 0x8, 0x0, 0x1, 0x5, 0x9, 0x10, 0x6, 0x1, 0x60, 0x20000000, 0x1, 0x1, 0x1, 0x8, 0x2, 0x3, 0x8d, 0x19412591, 0x28d82ebc, 0x7, 0xaee2, 0x8, 0x8, 0xcd, 0x5, 0x8, 0x1, 0x1, 0x7, 0x200, 0x5, 0x0, 0x5, 0xba29, 0x2, 0x0, 0x1, 0x6, 0x8d51132, 0xe, 0x1, 0x10001, 0x1, 0x200, 0x8, 0x5, 0xd0, 0x101, 0x5, 0x0, 0x5, 0x100, 0xfffffff7, 0x5b8aed57, 0x9387, 0x6, 0x7f7, 0x8, 0x7, 0x8, 0xa293, 0x100, 0x7, 0x3, 0x4, 0xc7, 0x7, 0x47, 0x26a, 0x9, 0x0, 0xfffffff7, 0x200, 0xe, 0xd5d3, 0x6, 0x1, 0x80000000, 0xd, 0x8, 0x8, 0x5, 0x9, 0x2, 0x0, 0x8e, 0x5, 0x3, 0x8000, 0x4, 0x8, 0x8, 0x2, 0x0, 0x8d, 0x7, 0x4, 0x7, 0x7fffffff, 0x8000, 0x52, 0xa1, 0x9, 0x5, 0x2, 0x4, 0xfffffffe, 0x2, 0x5, 0x9, 0x1, 0x7, 0x101, 0xfff, 0x7, 0x1, 0x9, 0x6, 0x9, 0x1ff, 0x1ff, 0x80000001, 0x1, 0x5, 0x9, 0xffffe078, 0xfffffff8, 0x9, 0xf9, 0x5, 0x8c85, 0x1000, 0xd, 0x2, 0x7fffffff, 0x3, 0x81, 0x4c, 0x7, 0x1, 0x3, 0x99ba, 0x3, 0xee1, 0xfffffff9, 0x8, 0xbd3, 0x7, 0x52ae9787, 0x1000, 0x8000, 0x80000001, 0x5, 0x7, 0x6, 0x0, 0x10, 0x7fff, 0x4, 0x6, 0x4, 0xa378, 0x3, 0x1, 0x6, 0x3, 0xec7, 0xf, 0x3, 0x7, 0x9, 0xffffff2e, 0x6, 0xcf, 0xa, 0xf4c2, 0x6, 0x7, 0x68, 0x7ff, 0x240, 0x3, 0x8, 0x32e, 0xbaf, 0x7, 0x1, 0x6, 0x5, 0xc60000, 0x7, 0x10, 0x6, 0x40, 0xd67, 0x401, 0x2, 0x80000001, 0xf, 0x8, 0xac4, 0x2, 0x0, 0x9e1, 0xf334, 0xa5493628, 0x80000000, 0x10001, 0x93bc, 0x0, 0x10, 0x0, 0x3, 0x57b1, 0x84d0, 0x6, 0x6, 0x8000, 0x1377, 0x68, 0x2, 0xb6, 0x1ff, 0x77, 0x1, 0x88, 0x4, 0x80000001, 0x7, 0x5, 0xfffffffe, 0x2, 0x0, 0x80, 0xc578, 0x40, 0x81, 0x3, 0x0, 0x1, 0x0, 0x8, 0x1, 0xe04, 0x6, 0x3, 0x3, 0xfffffffe, 0x8, 0x3, 0x6, 0x0, 0x6, 0x2, 0x9, 0x6, 0x2, 0x8001, 0x4b, 0xb581, 0xd, 0xffff, 0x3, 0x2d, 0x8, 0x1478, 0x6, 0x401, 0x3, 0x5, 0x8, 0x6, 0x42ea, 0x6360, 0x0, 0x31a, 0xfffffffc, 0x80000000, 0x80000001, 0x97, 0x98, 0x6, 0x101, 0x20f2e1fd, 0x0, 0x0, 0x6, 0x2385, 0x1, 0x100, 0x5, 0x400, 0x3, 0x2, 0x0, 0x0, 0xfffff7b4, 0x400, 0x8, 0x0, 0x1, 0x90000, 0x1, 0x2, 0x3, 0xf, 0x8, 0x1, 0xffffffff, 0x5, 0x80000001, 0x4, 0x3, 0x22, 0xcf, 0x6, 0x7f, 0x7, 0x0, 0x9, 0xb7d, 0xffff, 0x1000, 0x3, 0xfffffff8, 0x21, 0xf55, 0xe95, 0x40, 0x0, 0x800, 0x7fff, 0xfffff001, 0x0, 0x6, 0x3, 0x400, 0x200, 0x0, 0x0, 0x7ff, 0x9, 0x2, 0x7, 0x10001, 0x3, 0x4, 0x5, 0x81, 0x2, 0x0, 0xfffffffb, 0xfffffff9, 0x7ba7cac9, 0x69, 0x9, 0xf1b8, 0x2, 0x5, 0x8000, 0x2, 0x8, 0xb43, 0x5, 0xfff, 0x39, 0x509541e5, 0x2, 0x9, 0x8928, 0x6, 0x10000, 0x800, 0xd, 0x7, 0x2, 0x9, 0x7, 0xfdd, 0x97, 0x37b8, 0x3605, 0x8, 0x3, 0x4, 0x6, 0xfffffff4, 0x432f, 0xfffffff1, 0x10000, 0x4, 0x3, 0x27, 0x9, 0x5, 0xc18, 0xfff, 0x3, 0x3, 0xfb1b, 0x9, 0xfffffffa, 0x8, 0x9, 0xa, 0x1, 0x6, 0x7, 0x7, 0x1, 0xa58, 0x1, 0x7, 0x3, 0x1, 0xfffffff8, 0x10000, 0x3, 0x7f, 0x800, 0x1, 0xf, 0x9, 0xc, 0x6, 0x3, 0x7ff, 0xf, 0x3, 0x100, 0x77, 0x2, 0x3, 0x3, 0x1, 0x0, 0x1, 0x7, 0x7f, 0x0, 0x4, 0x1, 0x3ff, 0x96c, 0x200, 0x0, 0x400, 0x2, 0xff, 0x0, 0x7, 0x4, 0x5, 0x8, 0xbae, 0x5, 0x8, 0x95f1, 0x1, 0x1, 0x3, 0xd72d, 0xffffffff, 0x4, 0x7, 0x7, 0x0, 0x4, 0x0, 0xae, 0x0, 0x0, 0x400, 0x200, 0x5a5, 0x6, 0x4, 0x0, 0x4, 0x4, 0x7, 0x7, 0xe45, 0x33cc, 0x3, 0x7fffffff, 0x3, 0x9, 0x40, 0x9, 0x5c4, 0xfffffff9, 0x18eb, 0x9, 0x3ff, 0xa6, 0xfffff09b, 0xadc, 0x4, 0xc8d9, 0x5, 0x9, 0x8d2, 0x800, 0x7, 0xffffffff, 0x6, 0xfffffffd, 0x5, 0x1, 0x79, 0x8000, 0x7, 0x4a3587c, 0x0, 0xc, 0x0, 0x3, 0x9, 0x3, 0x3, 0x1, 0x6, 0x8, 0xe, 0x101, 0x4a, 0xffffffc1, 0x7, 0x0, 0x1, 0x9, 0x27, 0x3, 0x4, 0x9, 0x1, 0x8, 0x40, 0xd, 0x8, 0x26c8, 0x1ff, 0x5, 0xc2, 0x7, 0x7, 0x2, 0x80000001, 0xb2f, 0x7fffffff, 0x698b, 0xd140, 0x5, 0x0, 0x7, 0xc, 0x0, 0x1000, 0x8, 0x0, 0x9, 0x3, 0x10, 0x5, 0x8172, 0x2, 0x3, 0x7f, 0x5, 0x7, 0xff20, 0xac700000, 0xffffffff, 0x8, 0x6, 0x4, 0xfa, 0x3, 0x9, 0x4, 0x5, 0x80000001, 0x8, 0x7, 0x1, 0x0, 0x6, 0xfffffff8, 0x7, 0x7f, 0x13, 0x3, 0x3e800000, 0x100, 0x9, 0xb, 0x6, 0x2800000, 0x3, 0x4, 0xf8374e8, 0x5, 0x3, 0xffffffff, 0x8001, 0x4, 0x1, 0x1, 0x9b, 0x80000001, 0x2, 0x101, 0x40, 0xf0e, 0x3, 0x2, 0x90, 0xfffff592, 0xb2, 0x9, 0xfffffd7e, 0x200, 0x3, 0x7, 0x5000, 0x3, 0x2, 0x221, 0xf0c, 0x8, 0x4, 0x2, 0x2, 0xba, 0x6, 0x9, 0xffffff00, 0x2, 0x3, 0x2, 0x1, 0x5, 0x9, 0xffffffff, 0x9, 0x9, 0x7ff, 0x100, 0x7, 0x1, 0x0, 0x5, 0x1, 0x8, 0x6, 0x2, 0x1, 0x1, 0x80, 0x1, 0x13f6, 0x6, 0xac, 0x9, 0x5, 0x400, 0x10000, 0x81, 0x4, 0x0, 0x400, 0x4, 0x65, 0x3, 0x5, 0x6, 0xfffffffb, 0x6, 0x8, 0x5, 0x3, 0x6, 0x5, 0xfffffff7, 0x4, 0x0, 0x0, 0xa3, 0x0, 0x2, 0xfffffffe, 0x0, 0x5, 0xfffeffff, 0x0, 0x3, 0x826, 0x9, 0x7fffffff, 0xc, 0x9233, 0x3, 0x5, 0xc90, 0x7ff, 0x3, 0x2, 0x9, 0x1ff, 0x9b30d6fb, 0x6b01026f, 0x2, 0x8, 0x4, 0x7, 0x5, 0x7f, 0x6, 0x1, 0x7fffffff, 0x8, 0x40, 0x9, 0x9, 0x7c74, 0x7, 0x8000, 0x10000, 0x4, 0x81, 0x1, 0x6, 0xf, 0x3, 0x6, 0x3, 0x4, 0xcf8, 0x5, 0x5, 0x8, 0x13, 0x8, 0x1, 0x6, 0x1, 0x8, 0x7fffffff, 0x5, 0x800, 0x9, 0x6, 0x0, 0x3, 0x1, 0xfffffffe, 0x8, 0x54, 0x1, 0x5, 0x1, 0x6, 0x8000, 0xfffffff9, 0xfffffff9, 0x401, 0x5, 0x8, 0x7, 0x6, 0x6633, 0x0, 0x6, 0xffff0000, 0x1000, 0x5, 0xfffff801, 0xb4c, 0x4, 0x4, 0x0, 0x8745, 0x0, 0x9, 0xffffffff, 0x9302, 0x10, 0x4, 0x6, 0x9, 0x3, 0x3, 0x8, 0x6, 0xd21, 0x2, 0x279, 0x1, 0x2000000, 0x1, 0x8000, 0x8, 0x7, 0x100, 0x7fffffff, 0x4, 0x3, 0x3c28ce, 0x9, 0x98, 0x7, 0x2, 0x7, 0x2, 0x6, 0x0, 0x40, 0x8, 0x5, 0x3d, 0x3bbb, 0x3, 0x39, 0xf79, 0x45e, 0x4, 0x101, 0x9c, 0xfffff549, 0x6, 0x400, 0x7, 0x2, 0x5, 0xdf1, 0x380000, 0x4, 0x4, 0x7ff, 0x75, 0x38, 0x5, 0x5, 0x60000000, 0x9, 0x8001, 0xff, 0x2, 0x3, 0x2, 0x9, 0x8, 0x3, 0x9, 0x4, 0x3, 0x8, 0x8acd, 0x89, 0x10001, 0x5, 0x9, 0x4, 0x3, 0x2, 0x7, 0x4, 0x5, 0xb78, 0x7, 0x4, 0x2, 0x4, 0x68ea5b60, 0x7fff, 0x7477, 0x5, 0x1, 0x7, 0x5, 0x4, 0x3, 0xff, 0x9, 0x3, 0x89, 0xc, 0x3946, 0x543, 0x80c5, 0x5, 0x10000, 0x5, 0x3, 0x4, 0x2, 0x1, 0xabc, 0xd, 0x5, 0x1, 0x2, 0x2, 0xb, 0x2325, 0x1e, 0x9, 0x8, 0x4, 0x7, 0x2, 0x2, 0x200, 0xfdd, 0x5, 0x7fff, 0xfffffffb, 0x8, 0x5, 0x100, 0x8, 0x6, 0x6, 0x5, 0x8000, 0x40, 0x0, 0x27491183, 0x3, 0x6, 0xf1, 0x77, 0x5, 0x9, 0xc92, 0x4, 0x5, 0x9d, 0x3, 0x2, 0x2, 0xdfa5, 0x4, 0x564, 0x6, 0x8, 0x0, 0x0, 0x8, 0x8, 0x2, 0x2, 0x2, 0x4000, 0x3, 0x5, 0x40, 0x6f, 0x3, 0x84, 0x9, 0x8, 0x2, 0x2, 0x1000, 0x4, 0x3ff, 0x2, 0x2, 0x3, 0x8, 0x1, 0xfffffffa, 0x1, 0x40, 0x692e, 0xf, 0x6, 0xb, 0x3ff, 0x8, 0x101, 0xc, 0x100, 0x83, 0xffff, 0x5, 0x9, 0x5, 0xfffffffc, 0x6, 0x3, 0x40000000, 0x5, 0xfff, 0x6, 0x8001, 0xffffff21, 0x81, 0x4, 0x2, 0x8, 0x0, 0x7fffffff, 0x400, 0x4871, 0x8, 0x26db, 0x2, 0x317d8000, 0xd2, 0x80000001, 0x0, 0xffff, 0x5, 0x3, 0xfffffff5, 0x2, 0x8, 0xfffffe00, 0xb, 0x7, 0x4, 0x400, 0xa8c, 0x6, 0x9, 0x1, 0x8, 0x4, 0x7, 0x80000001, 0x8, 0x6, 0xffff, 0xfffffffa, 0x100, 0x0, 0x4, 0x9, 0x929, 0x3, 0x400, 0x2, 0x6, 0xf5, 0xc0000000, 0xa, 0x1, 0x2cd8, 0x1, 0x7c8, 0x6, 0x80000000, 0x1, 0x3, 0x1, 0x401, 0x6, 0xbdb, 0x10000, 0x3, 0x6, 0xffff, 0x6, 0x8, 0x9, 0x2, 0x2, 0x7, 0x8, 0xc0b7, 0x6, 0x4, 0x6, 0xb49, 0x0, 0x9, 0x9, 0x4b, 0x80e, 0x40, 0x9, 0x3, 0x81, 0x9, 0x9, 0x100, 0x10, 0x7fffffff, 0x4, 0x6, 0x0, 0x2b67, 0x2, 0x5f, 0x2, 0x6, 0x400, 0x44f, 0x0, 0x1000, 0x0, 0xfffffffa, 0x2, 0x8, 0x7f, 0x5, 0x4, 0xe, 0x7, 0x6, 0x20, 0x9c, 0x18, 0x1, 0xfffffffc, 0x1, 0x3, 0x1, 0x6b6d, 0x200, 0x1, 0x81, 0x7fffffff, 0x2, 0x7, 0xf, 0x10000, 0x4, 0x4, 0x400, 0x5, 0x5, 0x5, 0xd5cd, 0x4, 0x10000, 0x2, 0xb, 0x522, 0x10000, 0x100, 0x8, 0x4, 0x9, 0x2, 0x81, 0x0, 0x8, 0x1, 0x5, 0x4be, 0x8aab, 0xff, 0x0, 0x100, 0x9, 0x5, 0x4, 0x6, 0x7f0000, 0x3, 0x2, 0x2, 0x2, 0xfffffffa, 0xb, 0x6, 0x37, 0x6, 0x35ea64f0, 0x3, 0x400, 0xe4, 0x6, 0x72, 0x9, 0x1, 0xc46, 0x3b, 0x9, 0x2, 0x6, 0x8, 0x20, 0x8, 0x80200000, 0x76, 0x4, 0x6, 0x7, 0x8, 0x1ff, 0x4, 0xbc28, 0x1, 0xe863, 0x4, 0x6, 0x639e, 0x0, 0x0, 0x8, 0x2000000, 0xd5fa, 0x5, 0xffffffff, 0x1ff, 0x64, 0x8, 0x8, 0xab1, 0x6, 0x3, 0xd28f, 0x6, 0x400, 0x4, 0x7f, 0x400, 0xc, 0x0, 0x6, 0x2, 0x1f57000, 0x8001, 0xdcd2, 0x4, 0xe7c5, 0x8, 0xcc, 0x7, 0x40, 0x5, 0x85e2, 0x1, 0x0, 0x0, 0x5, 0x3, 0x8, 0x40, 0x1, 0x0, 0x4, 0x5, 0x0, 0xa, 0x0, 0xffffffff, 0x0, 0x10001, 0xfffffff0, 0xc417, 0x0, 0x8, 0x3396, 0x1, 0x0, 0x8000, 0x60, 0x9, 0x7ff, 0x0, 0x9, 0xff, 0x1, 0xfffffffc, 0xfffffffc, 0x6, 0x3ff, 0x200, 0x7, 0x2, 0x3, 0x3, 0x2, 0x1eb1983, 0xffffffad, 0x2, 0x1, 0xe, 0x9, 0x6, 0x1, 0x10, 0xfff, 0x1, 0xcc6, 0x9, 0x1, 0x3, 0xe8, 0xa62, 0xd, 0x5, 0xfff, 0x4, 0x6, 0x3, 0x0, 0x401, 0x6, 0x5, 0x9, 0x3, 0x9, 0x6, 0x3, 0x1, 0x1, 0x4, 0x8, 0x5, 0x57, 0x2, 0x6, 0x8, 0x3, 0x8, 0x10, 0xfffffff7, 0x7, 0x8710, 0x9, 0x200, 0xc, 0xb, 0x4, 0xfeaa, 0x9, 0x1, 0xec, 0x8, 0x401, 0x101, 0xfffffffa, 0x9, 0x800, 0x1, 0x8bf, 0x1, 0x5fd8, 0x4, 0x7ac, 0x2, 0x0, 0xac72, 0x7d, 0x7, 0x1, 0x1ff, 0x7, 0x10000, 0x7, 0x10000, 0x3, 0x40, 0x9, 0x6, 0x10, 0x4, 0xd, 0x9, 0xc75, 0x7, 0x401, 0x9, 0x9, 0x7, 0x6, 0x7, 0xb3, 0x7f, 0x7ff, 0x4, 0x4800, 0xcde, 0xfffffff8, 0x8, 0x6, 0xe0000000, 0x8, 0x8000, 0x8, 0x9, 0xfffffff6, 0xffff, 0x4, 0x9, 0x8, 0x4, 0x4, 0x8, 0x80000000, 0x0, 0x400, 0xf, 0xff, 0x2, 0x4, 0x5, 0xf7, 0xe7e, 0x5, 0x2, 0x4, 0x9, 0x8, 0xffffff83, 0x4, 0x2, 0xe, 0x1, 0xf, 0x1, 0x8, 0x8, 0xf, 0xdad, 0x400, 0x2, 0x80000001, 0x5, 0x476, 0x5, 0x4, 0x4, 0x8, 0x38, 0xd, 0x1, 0x400, 0x7, 0x2, 0x5, 0x2, 0x7, 0xf2, 0x0, 0x6, 0x6, 0x4, 0x7, 0x18, 0x800, 0x52, 0x0, 0x6, 0x6, 0x7, 0xc, 0x8000, 0xfffffffa, 0x0, 0x3, 0x8, 0xfffff801, 0x362, 0x86f, 0x1ff, 0x2, 0x6, 0x0, 0x5, 0x8, 0x1, 0x27, 0x3, 0xd7, 0x1, 0x6c, 0x6, 0x0, 0xa714, 0x8, 0x3, 0x3, 0x7, 0x10001, 0x6, 0x3b, 0x80000001, 0x8, 0x20, 0x6, 0x4, 0xe, 0x9, 0x4ec, 0x7, 0x100, 0x8000, 0x1, 0x4, 0x8, 0xe7, 0x1, 0x2234f12f, 0x0, 0x5, 0x3, 0x6, 0x7, 0x9, 0x3, 0x8, 0x80000001, 0x0, 0x5, 0x7, 0x60f4, 0x100, 0xbc7, 0x200, 0xf3f, 0x3ff, 0x10000, 0x3ff, 0x3, 0x0, 0x6, 0x1, 0xfffffff8, 0x5, 0x81, 0x1, 0x1000, 0x1, 0xfffffff8, 0x5, 0x7, 0x7fff, 0xb8, 0xbf2, 0x2, 0x1, 0x2, 0x4, 0x200, 0xd, 0x1000, 0x3b08, 0xfffffff7, 0x4, 0x5, 0x6, 0x2, 0x5, 0x6, 0x5, 0x60, 0x8000, 0xfffff360, 0x3, 0x5, 0x2, 0x5, 0xde, 0xfffff639, 0x5, 0x300, 0x200, 0x2, 0x8000, 0x10001, 0x10001, 0x7, 0x9, 0x8, 0x2, 0xb822, 0xfc6, 0x0, 0x9, 0x2b, 0x6, 0x9, 0x8, 0x78, 0xb3a, 0xf9, 0x1000, 0xeb5, 0x9, 0x19, 0xfffffffe, 0x9, 0x80000000, 0x68af40f9, 0x101, 0x6, 0x2, 0x80, 0x6, 0x1, 0x80, 0x10, 0x7, 0x3, 0x9, 0x7fffffff, 0x2, 0x931, 0x55, 0x4, 0x5, 0x4, 0xeaf, 0x8, 0x3, 0x44, 0x5, 0x3, 0xa, 0x25c9, 0x7, 0x1, 0xc, 0x4, 0x6, 0xe, 0x3c3, 0xe, 0x5, 0x4, 0x6, 0x7, 0x1000, 0x5b, 0x8, 0x8, 0x2, 0x10001, 0x5, 0x7, 0x5, 0x0, 0x7, 0xc0d8, 0x7ff, 0xd, 0xbd, 0x80000001, 0xa, 0x5, 0xfffffff8, 0x6, 0x9, 0xb1d2, 0x2, 0x1, 0x0, 0x3, 0x400, 0x200, 0x8, 0x0, 0x25a3, 0x3ccd, 0x8, 0x5, 0x5, 0x9, 0x33, 0x29, 0x80, 0xffffffff, 0xffffff6f, 0x4b, 0x0, 0x40, 0x200, 0x1ff, 0x4, 0x80000000, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x6, 0xe05, 0xffffffff, 0x2, 0x10000, 0x101, 0x4, 0x3, 0x7, 0x2, 0x7, 0x0, 0x9, 0x0, 0x1, 0x3ff, 0xc, 0xb, 0x1, 0xfffffffa, 0x5, 0x1b97, 0xba, 0x5a03, 0x1, 0xfb4, 0x2, 0x8b2, 0xb, 0x5, 0x9, 0x40, 0x5, 0x10, 0x8, 0xff, 0x7fffffff, 0x10001, 0x7, 0x2, 0x81, 0x3, 0x1ff, 0x3, 0x81, 0x8, 0xd, 0x0, 0x10, 0x2, 0xa, 0xdb39, 0x9, 0x0, 0x0, 0x1, 0x6, 0x4, 0x4c1, 0xf, 0x1, 0x1ad, 0x5, 0x8d0e1d0, 0x0, 0x4, 0xe19, 0x7, 0xfff, 0xffffff59, 0x0, 0x6, 0x101, 0x7, 0xfff, 0x646, 0xc8, 0xe, 0x66d, 0x5, 0x80000001, 0xfffffffc, 0x3, 0x7, 0xfffffffa, 0x7, 0x3, 0x8, 0xffff, 0x8, 0xa9, 0x4, 0x0, 0x4, 0x800, 0x10001, 0xe, 0x3, 0x5, 0x8, 0x7, 0xf, 0x81, 0xd2c1, 0x93bf, 0xfe, 0x7, 0x5, 0x4, 0x7, 0x8, 0xffff, 0x1465, 0x7fffffff, 0x7ff, 0x6, 0xd, 0xfffffffd, 0x8000, 0xb, 0x2, 0x7, 0x0, 0xfffffffc, 0x3, 0x1, 0x8, 0xc74c, 0x0, 0x3, 0x9, 0x800, 0xffff0000, 0x1, 0x4, 0x1, 0xfffffff4, 0xffffffff, 0x7, 0xfffffff9, 0x2, 0x1, 0x62, 0x3, 0x0, 0x8, 0x4, 0x4, 0x7, 0x4, 0x0, 0x31c, 0x10001, 0x100, 0x5, 0x10001, 0x9, 0x2, 0x7fffffff, 0x800, 0xf8, 0x1, 0x5, 0x901, 0x4ef, 0x516e, 0x6, 0x4, 0x1, 0x5, 0x4, 0x8, 0x7625, 0xf, 0x1, 0x1000, 0x3, 0x1, 0x2, 0x6, 0x3, 0x6b59, 0x80, 0x560, 0x4000000, 0x7, 0xffff, 0x3ff, 0xffffffff, 0x9, 0x2, 0x4, 0xd, 0x5, 0x3, 0x368, 0x1, 0xfffffb2d, 0x0, 0xd, 0x7, 0x7fffffff, 0x6, 0x8, 0x0, 0x1, 0x1, 0x10, 0x101, 0x81, 0x0, 0x6b, 0x2, 0xffff0000, 0xf, 0x6, 0x6, 0xff, 0x7, 0xff1, 0x9, 0x5, 0x6, 0x4, 0x4, 0x5, 0x2, 0x800, 0x1, 0xffff0001, 0x9881, 0x300000, 0xff, 0xd1fc, 0x3833a09f, 0x2, 0x2, 0x9, 0x0, 0x8, 0xffff, 0xffffffff, 0x7, 0x0, 0x8, 0x4, 0x1, 0x3, 0x6, 0x3, 0x3, 0xff, 0xcc, 0x7, 0xfffffffd, 0x81, 0x1e89154f, 0xd1, 0x2, 0xf3, 0x4, 0x5, 0x7bcb, 0x7, 0x9, 0x8c, 0x800, 0x2, 0x9, 0x8, 0x7fff, 0x1, 0x2, 0x80000001, 0x3, 0xa8, 0x7, 0x4, 0x1, 0x7, 0x6, 0xcc03, 0x8001, 0x7, 0x3, 0x1ff, 0x4, 0x80000000, 0x1, 0x1, 0x3e4, 0x2, 0x7, 0x5, 0x9, 0x10001, 0xfa27, 0x2, 0x7f, 0x0, 0x0, 0x8001, 0x8, 0x4, 0x6, 0xd3, 0x6, 0x1, 0x40, 0x1000, 0x5, 0x33, 0x1324000, 0x5, 0x80000000, 0x3, 0x1, 0x9, 0x1, 0x2, 0x7, 0x7fff, 0x9, 0x4, 0xfffffbff, 0x3, 0x7, 0x80000001, 0x0, 0xffff79c3, 0x5, 0x7fffffff, 0x1, 0x1, 0x9, 0x8f, 0x936, 0x81, 0x0, 0x8, 0xb1, 0x9, 0x8, 0xffff, 0x1f39, 0xfffffff8, 0x7, 0x3, 0x2, 0x8, 0x1, 0xffffffff, 0x4b5, 0x6, 0x6, 0x1, 0xcef, 0x6, 0x3, 0x9, 0xfffffc00, 0x101, 0x7, 0x4, 0x0, 0x2, 0x3, 0xd92, 0x827, 0xfff, 0x1d00, 0x923, 0x2, 0x6, 0x7, 0x1, 0x800, 0x4, 0x8, 0x8000, 0x7, 0x9, 0x4585, 0x800, 0x1, 0x4, 0x7, 0xfff, 0x1, 0x8000, 0x1, 0x860d, 0xc208, 0xc, 0x6, 0x1ff, 0x9, 0x8, 0x3ff, 0x80000001, 0x4, 0x6, 0x0, 0x21, 0x4, 0x9, 0x6, 0x0, 0x1e38, 0xfffffffd, 0x6, 0x4, 0x4, 0x8, 0x5, 0xfffffffa, 0x3f7b, 0x2, 0x359, 0x3, 0x9, 0x6, 0xb2, 0x3433, 0x8001, 0x5, 0x6, 0x7fffffff, 0x3, 0x7, 0xd246, 0x6, 0x4ec927a9, 0x6ee6, 0x8, 0x4, 0x81, 0x1, 0x401, 0x7, 0x3, 0xda, 0x80, 0x5, 0x24f, 0x0, 0x9, 0x9, 0x5, 0x8, 0x3, 0x6, 0x3, 0x3, 0x4, 0x1000, 0x6, 0x1, 0xff, 0x8, 0x4, 0x6, 0x10, 0x4, 0xff, 0x4, 0x1ff, 0x1, 0x6, 0x6, 0x7, 0x1000, 0xffffffff, 0x75a1, 0x1, 0x2d295a3a, 0xfffffffb, 0x2, 0xfffffbd4, 0x8, 0x15, 0x2, 0x10000, 0x2, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x9, 0x9, 0x2, 0x3, 0x8, 0xf, 0x0, 0x8, 0x74426786, 0x2, 0x4, 0x4be3193b, 0xd271, 0x8, 0x3, 0x4, 0x2, 0xffffffff, 0x8, 0xffff, 0x7, 0xffff, 0x390, 0x5, 0xff, 0x58a, 0xc, 0x80, 0x92e, 0x2dbf80, 0x0, 0x6ed, 0x0, 0x6, 0x4, 0xf, 0x0, 0xa, 0x4, 0x6, 0x5, 0x4, 0x9, 0x9, 0x80000000, 0x1, 0xa6a, 0x6, 0x8, 0x58cb, 0x885, 0x0, 0x7, 0xc, 0x80000000, 0x6, 0x3, 0xd9, 0xffffff7f, 0x67a, 0x8001, 0xe000000, 0x2, 0x2, 0x9, 0x1ff, 0x3, 0x0, 0x9, 0x9, 0x0, 0x3, 0x0, 0x101, 0x0, 0x80000001, 0x1bd496fe, 0x6, 0x0, 0x6, 0x2, 0x6, 0x5, 0x3, 0xb5c, 0x5, 0x9, 0x200000, 0x8, 0xc, 0xd242, 0x1, 0x7, 0x2, 0x7, 0x9, 0x4, 0x5, 0x1, 0x800, 0xcd3a, 0x0, 0x4, 0xfff, 0x8, 0xe, 0x2, 0xff, 0x7, 0xfffffffd, 0x1000, 0xffffff25, 0x5c14fe2a, 0x1, 0x6, 0x1, 0x9, 0x0, 0x2, 0x5, 0x8, 0xdd4c, 0x5, 0x0, 0x0, 0x2, 0x6, 0x2, 0x1ff, 0x2ab, 0x6, 0x7, 0xfffffff7, 0xfffffffb, 0x6, 0x7, 0x7, 0x9, 0x307, 0x8, 0x1, 0x8e, 0x0, 0x3, 0x81, 0x1000, 0x6c, 0x46a13061, 0xfffffff8, 0x8, 0x345, 0x401, 0x8, 0x7fff, 0x7, 0x1000, 0x1, 0x8, 0x2, 0x1, 0x3, 0x7, 0x9389, 0x9, 0x34, 0x5561d0c2, 0xfff, 0x0, 0x6, 0xf, 0xa, 0xd0ba, 0x6, 0x2, 0xf939, 0x5, 0x35, 0x3, 0xc, 0x401, 0x2, 0x2, 0x7, 0x3, 0xa, 0x3, 0x2, 0x2, 0x8310, 0x6, 0x10001, 0xd7, 0x1000, 0x0, 0x5, 0x6, 0x71, 0x3, 0xbca, 0xff, 0x6, 0x10, 0x644b, 0x81, 0x8, 0x2000200, 0x9, 0x2c, 0x1, 0x9dc, 0x10000, 0x400, 0x5, 0x1, 0x7ff, 0xfffffffb, 0x40, 0x7, 0x81, 0x0, 0x7, 0x8, 0x8, 0x6, 0x92, 0x9, 0x2, 0xfffffffb, 0x4, 0xd, 0x8c3, 0x34e, 0xb, 0x1, 0x3, 0x5, 0xe65, 0x7, 0x8, 0x100, 0x6, 0xa0, 0x4, 0x56f, 0xcb, 0x7f, 0x5, 0x5, 0x1, 0xc00000, 0x9, 0xf27, 0x7fffffff, 0x1, 0x96, 0x4, 0x8, 0x4, 0x3, 0xffffff80, 0x4, 0x3, 0x3, 0x8000, 0x1bc, 0x2ec, 0x3, 0x87e, 0xfffffffc, 0x0, 0x5, 0x401, 0x9, 0x1, 0x3ff, 0x32d, 0x81, 0x7, 0x5, 0x0, 0x7, 0x6, 0x8, 0x5, 0x3, 0x9, 0x3, 0x3, 0x9, 0x4, 0x35, 0x0, 0x9, 0xffff3d05, 0x7a0, 0x0, 0x7, 0xffffffff, 0x5, 0x4, 0x0, 0x8000, 0x0, 0xf1, 0x9, 0x5, 0x3, 0x9, 0x71d, 0x3, 0x9, 0x1, 0x6, 0x200, 0xe3, 0x0, 0x3, 0x5, 0xc, 0x9, 0x8, 0x0, 0x8000, 0xd, 0xfffffffd, 0x28ad, 0x6, 0x9, 0x0, 0xc48e1d, 0x0, 0x4, 0x0, 0x8, 0x4, 0x4, 0x4, 0x4, 0x10001, 0x6, 0x8000, 0x7, 0x2, 0x200, 0x3, 0x9, 0x9, 0x101, 0x6, 0x65e, 0x8, 0x4, 0x4, 0x81, 0x8, 0xffff, 0x80000001, 0xbc, 0x9, 0x3ff, 0x8, 0x1, 0x3, 0xffffffff, 0x2, 0x8001, 0x61b, 0xfb8e, 0xd5, 0x1000, 0x2, 0x10001, 0x7, 0x1, 0x6, 0xfffffffa, 0x4, 0x3, 0xfffffff8, 0x9, 0x6, 0x2, 0x4, 0x5, 0x1, 0x2, 0x4, 0x7, 0xfffffffa, 0x81, 0x10000, 0x9c, 0x4, 0xfffffc00, 0xe4fc, 0xffb, 0x3, 0xbb0f, 0x3, 0x2, 0x66a, 0x5c2, 0x7, 0x1000, 0x8, 0x101, 0x80000000, 0xc3, 0x401, 0x3ff, 0x51, 0x4, 0x3, 0xeefe, 0xd3b, 0x10001, 0x2, 0xb, 0xc63, 0x0, 0x2, 0x2, 0x9, 0x9, 0x3, 0x2, 0x6, 0x0, 0x5, 0x5, 0x7, 0x683, 0x4, 0x2dd, 0x9c1, 0x3a3, 0x401, 0x8, 0x80, 0x1ff, 0x4, 0x1, 0x1, 0x8, 0x40, 0xb, 0x0, 0x43d2, 0xe615, 0x2, 0x3, 0x8, 0xb3, 0x6, 0x4, 0x8, 0x8, 0x7, 0x7fffffff, 0x400, 0x81, 0x2, 0x1471, 0x5, 0x5, 0xfffffffd, 0x8, 0x2b3, 0x3, 0x8000, 0x6, 0x5, 0x7, 0x98, 0xfffffffc, 0x10000, 0x53, 0x9, 0x43, 0x9, 0xff, 0x101, 0x5, 0x4, 0x1, 0x5, 0x7f, 0x8, 0x8, 0x81, 0x5022, 0x5, 0x4, 0x4, 0x6, 0x5, 0x81, 0x100, 0x7, 0x100, 0x800, 0x8, 0x6, 0x7f, 0x4, 0x3, 0x3, 0x4, 0x80000000, 0x8, 0x0, 0x2, 0x9, 0x0, 0x100, 0x6, 0x3, 0x401, 0xa, 0x80000000, 0x7, 0x3, 0x5, 0x4, 0x1, 0x80, 0x7fffffff, 0x44, 0x80, 0x7f, 0x8f71, 0x8000, 0x7fffffff, 0x9, 0x80000001, 0x6, 0x3ff, 0x7f, 0x3, 0xd214, 0x9, 0x1, 0xcaf, 0x10000, 0x4, 0x9, 0x156, 0x6f91, 0x4f8, 0x2, 0xfffffff7, 0x91, 0x7ff, 0x6, 0x6, 0x2, 0x10, 0x7f66, 0x8, 0x7fff, 0x1, 0x7, 0xe, 0x0, 0xbb5, 0x2, 0x4, 0x69e, 0x3, 0x0, 0x9, 0xf67, 0x5c9, 0x10000, 0x8, 0x81, 0x5, 0x7, 0x200, 0x6, 0x8, 0xbb8, 0x4, 0x7fffffff, 0x8, 0xc00, 0x7f, 0xffffffff, 0xfff, 0x7f, 0xa004, 0x7, 0xfffffff9, 0x277b, 0xf, 0x9, 0x40, 0xcaa, 0x802000, 0x81, 0x8000, 0x0, 0x9, 0x5, 0x5, 0x9, 0x4, 0x4, 0x6, 0x8, 0x8, 0x6, 0x2, 0x6, 0x10001, 0x80000000, 0x2c, 0x7, 0x7, 0xc3, 0x4, 0x5, 0xbe5, 0x9551, 0x1, 0x6, 0xb8b3, 0xf505, 0x30, 0x10001, 0x8, 0x6, 0x81, 0x2, 0x9, 0x3bc7b937, 0x5, 0x8, 0x1, 0x8, 0xd, 0x7, 0x7ff, 0x800, 0x1, 0x7, 0x2, 0x5, 0x10, 0x72b, 0x4, 0xffffffff, 0x9, 0xd0, 0x877, 0x2, 0xac32, 0x5, 0x916, 0xfff, 0x2c, 0x0, 0x1000, 0xde, 0x10000, 0xffffffc0, 0x5, 0x7, 0x1, 0x7ff, 0x2, 0x6, 0x3, 0x0, 0x17, 0x2, 0xd8c, 0xe, 0xa, 0x7, 0x0, 0x10000, 0x7, 0x8, 0xec, 0x7, 0x4, 0x9a, 0xe, 0x8, 0xfffffffd, 0x800, 0x63af61ab, 0x2, 0x0, 0xfe, 0xfffffff7, 0x7, 0x4da, 0x9, 0xffffffff, 0xfff, 0x5, 0x4, 0x80000001, 0x7, 0x5, 0x0, 0x1b0, 0xc8, 0xfffff403, 0x2, 0x6, 0x2, 0x800, 0x4, 0x0, 0x0, 0x7, 0x8, 0x8, 0x2, 0x7, 0x81, 0x7, 0x40, 0x63, 0x761e095e, 0x4, 0xb, 0xf, 0x80000000, 0x6, 0x8, 0x0, 0x6, 0x20e, 0x5, 0x0, 0x89, 0xc, 0x0, 0x6, 0x10, 0x3, 0x5, 0x4, 0x7, 0x8, 0x7f, 0x4, 0x10000, 0x2, 0x9, 0x9, 0x27, 0x9, 0x4, 0xee4, 0x1, 0x4, 0x6, 0x7f, 0xc, 0xbc3, 0x5aea, 0x2, 0x4, 0x1, 0x7, 0x2, 0x9, 0x9, 0x1, 0xb53b, 0x6, 0x15f, 0xfffffe00, 0x7f, 0x4, 0x1, 0xf0, 0x1b59b0d9, 0x9, 0x8, 0x200, 0xffffffc1, 0x0, 0x7, 0x5, 0x4, 0x4b9d6376, 0x3, 0x7, 0x7, 0x9d, 0x2, 0x8, 0xa807, 0xffffffff, 0x9, 0xb4, 0x9, 0x8, 0x1, 0x5, 0x0, 0x67, 0x1, 0xea2, 0x0, 0x40, 0x81, 0xfffffff9, 0xff, 0x9, 0x8000, 0x10001, 0x1, 0x101, 0x401, 0x1ff, 0x3ff, 0x8, 0xb2fc, 0x2, 0x9, 0xffffffff, 0x15fd, 0x1, 0x7f, 0x80000001, 0x4, 0x33, 0x95e, 0xf4b6, 0x10000, 0x2fc, 0xffffffff, 0x9, 0x0, 0xaa, 0x1, 0x1000, 0x1, 0x6, 0x0, 0x5, 0x6, 0x400, 0x9, 0x8, 0xfff, 0x4, 0x6, 0x0, 0x3, 0x6, 0x6, 0x0, 0x68, 0x2, 0xc, 0x5, 0x812, 0x44, 0x5d4, 0x3, 0xb, 0x3, 0x2, 0xe69, 0x3, 0x2d, 0x3, 0xe, 0x2, 0xffffffff, 0x0, 0x5, 0x55d, 0x4, 0x1ff, 0x2d6, 0x3, 0x0, 0x5, 0x100, 0x5, 0x0, 0x2, 0x3, 0x9, 0x80000000, 0x9, 0x6, 0x42372b1, 0x6a2f, 0x107, 0x1, 0x8, 0x5, 0xfffffff8, 0x800, 0xb, 0x70, 0x1, 0x4, 0x81, 0x7, 0xfffffff8, 0xe, 0x1, 0x3, 0x7, 0x80, 0x4, 0x9, 0x8001, 0x0, 0x10001, 0x48000000, 0x2, 0x1964, 0x7, 0x9ac6, 0xd, 0xf47, 0x3, 0x594, 0xd, 0x8001, 0x8, 0x3, 0x6, 0x1, 0x3, 0x6, 0x90000000, 0x5, 0x6, 0x56, 0x6, 0x4, 0x6, 0x9, 0x7, 0x7ff, 0x100, 0x3, 0x2, 0xf3b, 0x8001, 0x6, 0xfff, 0x5a67, 0x6, 0x8, 0xfffffff8, 0xe, 0x3, 0x9, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8, 0xfffffffa, 0x1, 0xfff, 0x4, 0x4, 0x0, 0x5, 0x2, 0x1, 0x5, 0x8121, 0xffff25d8, 0x6, 0xe7d4, 0x1, 0x80000001, 0xc97, 0xc, 0x36, 0xfff, 0x80000001, 0x5, 0x5, 0xa84c, 0x8, 0x7, 0x2911, 0x4, 0x86f, 0x0, 0x8, 0x3, 0x3, 0xda, 0x2, 0x9, 0x400, 0x7fffffff, 0xb, 0x9, 0xfffffffa, 0x6, 0x1000, 0x1ff, 0x401, 0x101, 0x7, 0x6, 0x401, 0x8, 0x80000000, 0xfffffff9, 0x101, 0x319023f0, 0x9, 0x81, 0x3, 0x7ff, 0x77, 0xca2e, 0x9, 0x23e, 0x1, 0x5915, 0x7, 0x9, 0x9, 0x9, 0x5c21, 0x9, 0x6, 0x5, 0x10, 0x7, 0x9, 0x1ff, 0x6, 0x4, 0x7, 0x8, 0xe161, 0x7, 0x8, 0x6, 0x6, 0x8, 0x6, 0xd, 0xffffe076, 0x8, 0x81, 0x3, 0x6, 0x7, 0xbc33, 0x0, 0x4, 0x8b6, 0x76a, 0x4, 0x8001, 0x9, 0x0, 0x2, 0x7, 0x8, 0x2, 0x1, 0x1, 0xff, 0x4, 0x9, 0x1, 0x8, 0xa83f, 0x1, 0xf, 0x4, 0x3, 0x3, 0x5, 0x0, 0x8, 0x3800000, 0xfffffffc, 0x2, 0x91400000, 0x0, 0x5, 0xfffffffa, 0x8, 0x5, 0x6, 0x400, 0xfffffffc, 0x2, 0x6, 0x6, 0x3a8b, 0x2, 0x1, 0x9, 0x9, 0x3, 0x2, 0xb, 0x2, 0x3, 0xe, 0x8422, 0x8, 0x9, 0x7, 0x9, 0xf96, 0x6, 0x67b6, 0x3, 0x6, 0x8b0e, 0x101, 0x9, 0x80000001, 0x7ff, 0x8, 0xf, 0x0, 0x1, 0x2, 0x3, 0x5, 0xf, 0xbb4d, 0x40, 0x70, 0x5, 0x4, 0xa, 0x80000001, 0xbbc, 0x5, 0x9, 0x7, 0xfffffffd, 0x101, 0x1, 0x3ff, 0xfff, 0x0, 0x1000, 0x9, 0x7, 0x6d7, 0x1, 0x7ff, 0xe, 0x9c70, 0x6, 0x7fff, 0x2, 0x7f, 0xa40, 0x2, 0x6, 0x10000, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x7a, 0x3, 0xe, 0x9, 0x8, 0x6, 0x1ff, 0x7ff, 0xa, 0x7, 0x6, 0x2, 0x77c, 0xfffffffe, 0xb, 0x81, 0x5, 0x4, 0x8, 0xffffff81, 0x0, 0x56a, 0x425ac174, 0xfffffffb, 0x3, 0xf2, 0x5, 0x0, 0xaa, 0x591, 0x8138, 0x80, 0x7fff, 0x1, 0x5, 0x0, 0x800, 0x8001, 0x9, 0x7fff, 0x5, 0x7, 0x7, 0x8, 0x2, 0x40, 0x6, 0x5e, 0x68, 0xffffffff, 0xe, 0x10, 0x80000000, 0x7, 0x8, 0x5, 0x23c, 0x8001, 0x8082, 0x0, 0x5, 0x1, 0x4, 0x15, 0x4, 0xb, 0x1, 0x0, 0xff, 0x7, 0x2, 0x0, 0x1, 0x75, 0x2, 0x1ce, 0x4, 0x4, 0xfffffff3, 0x0, 0xc1a, 0x9, 0x6, 0x0, 0xa, 0x6, 0xd30e, 0xff, 0x0, 0x2, 0xf7, 0x4, 0x6, 0x7, 0xd, 0x8, 0xfffffffe, 0x4, 0x3, 0x40, 0x800, 0x4, 0x6, 0x9, 0x6, 0x4, 0x7, 0x8, 0x1000, 0xfffffffb, 0x0, 0xae64, 0x8000, 0x8, 0x9, 0x7, 0xc1b4, 0x101, 0x6, 0x5, 0xfffffffe, 0x2, 0xab36, 0x0, 0x8000, 0xee, 0x9, 0x78, 0x100, 0x2, 0x124a, 0x7, 0x6, 0x4, 0xfffffffe, 0x9, 0x1, 0x2, 0x2, 0xa2, 0xf, 0x7ff, 0x9, 0xffffffff, 0x6, 0x38, 0xff, 0xa, 0x0, 0x1, 0x5da0, 0x8, 0x3c2a24a1, 0x8, 0x5, 0x0, 0x83e5, 0x5, 0x3, 0x800, 0x1, 0x2, 0x5d6f, 0xc4, 0x8, 0x2, 0xffffffbf, 0x8, 0x1, 0x9, 0x8, 0x9, 0x0, 0x8, 0x5, 0x38, 0xffff, 0x66c65e11, 0x5, 0x1ff, 0x200, 0x25, 0x0, 0x9, 0x8, 0x2, 0x3, 0x9, 0xe05, 0x3, 0x2, 0xfffffffc, 0x9, 0x5, 0x9, 0x4, 0x400, 0x7, 0x800, 0x9, 0x2, 0x8, 0x6, 0x80000001, 0x7, 0x3, 0x3, 0x9, 0x9, 0x1, 0x400, 0x4, 0x80000000, 0x6, 0x8, 0x4, 0xae53, 0x2, 0x10, 0x5675, 0x0, 0x800, 0xb944, 0x2, 0x1, 0x4, 0xb, 0x7, 0x0, 0x3, 0x8, 0x4, 0xb48, 0x200, 0x8, 0x4, 0x8001, 0xd, 0x7, 0x6, 0x0, 0x80000000, 0x8, 0x7, 0x6, 0x9, 0x8, 0x3, 0x8, 0x7, 0x56c, 0x5ab, 0x8, 0x6, 0x0, 0x7, 0x1, 0x2, 0x6, 0x10001, 0x5, 0xe9, 0x3, 0x3, 0x3, 0x9, 0x5, 0x5, 0xfff, 0x40, 0x1db7, 0x5, 0x3c3, 0xe4, 0x7, 0x3, 0x2fc, 0x9, 0x1, 0xfff, 0x200, 0xe, 0x7, 0x3, 0x4, 0x101, 0x8, 0x2, 0x2, 0xa599, 0x101, 0x7, 0x4, 0x7, 0x9, 0x3, 0x2, 0x9, 0x1, 0x3, 0xfffffffb, 0x6, 0x7fff, 0x2, 0xc, 0xf, 0x3, 0x9, 0x5, 0x2, 0xe, 0x4, 0xa1, 0xcf, 0xfffffff8, 0x81, 0x0, 0x23941bdc, 0x2, 0x800, 0xa, 0x512f, 0x0, 0xd4f2, 0x3, 0xff, 0x2, 0x3, 0x1, 0xffff, 0x2, 0x4, 0x7ff, 0x0, 0xca952cc9, 0x7, 0x8001, 0x4, 0xe, 0x5, 0xfffffffd, 0x401, 0x80, 0x4, 0x1000, 0x1, 0x4, 0x401, 0x9, 0xfffffff8, 0x1, 0x5, 0x3, 0x77, 0x69057d31, 0x8, 0x5, 0x3, 0x3, 0x6, 0x400, 0x9, 0xfffff800, 0x3, 0x80000001, 0x0, 0x4, 0xc4, 0x7, 0x1, 0xa, 0x3, 0x7fffffff, 0x6, 0xffffffff, 0x1, 0x95d, 0x8, 0x9, 0xfffffffc, 0x24b8c80, 0x2, 0xfff, 0xff, 0x4, 0x8, 0x800, 0x2, 0x4, 0xa, 0x7, 0x5, 0x1, 0x4d4, 0x20, 0x0, 0x5, 0x7fffffff, 0x1, 0xffff7fff, 0x1, 0x80, 0x3, 0x3, 0x4, 0x9, 0x3, 0x4, 0x3, 0x401, 0x5, 0x5, 0x7, 0x2, 0x8, 0x7, 0x9, 0x1, 0x7, 0x3, 0x3, 0xfff, 0x10001, 0xffff8000, 0x5, 0x4, 0x6, 0x5, 0x80000001, 0x5, 0x7, 0x85b, 0x7, 0x9, 0x6, 0xfdf, 0x3, 0x8, 0x6, 0x8, 0x3, 0xa43d, 0x1, 0x5, 0x7, 0xbda2, 0xfcb, 0xd84, 0xff, 0x1000, 0x10000, 0x1, 0x4, 0x205, 0xffff, 0x6, 0xffff, 0x64514ec4, 0x8001, 0x4, 0x7, 0x1, 0x7c84, 0xfff, 0xe000, 0x6, 0xe, 0x5, 0x1, 0x4000000, 0x6, 0x0, 0x55d90fcb, 0xfff, 0x5, 0x6, 0x3, 0x5, 0x5, 0x3, 0x6, 0x5, 0x3, 0x8, 0x3, 0xfffff2ae, 0x10, 0x0, 0x100, 0x1ff, 0x6, 0x3, 0x5, 0x5, 0x1, 0x7, 0x9, 0xc1e0, 0x1, 0x7fff, 0x95, 0x5, 0x8001, 0xe214, 0x8, 0x9, 0x3ff, 0xdf, 0x8001, 0x3, 0x6, 0x3, 0x101, 0x1ff, 0xe95, 0x4, 0x1, 0x0, 0x5, 0x8, 0x9, 0x1, 0x200, 0x81, 0x4, 0x6, 0x4, 0x12b9c00, 0xb, 0x120, 0x99, 0x80000001, 0x5, 0x7, 0x4, 0x0, 0x0, 0xfffffbff, 0xfffffffb, 0x4, 0x7, 0x4, 0xce31, 0x1, 0x2, 0x0, 0x1ff, 0xfbac, 0x73a7, 0x3, 0x9, 0xdb, 0x8907dfa7, 0x4e480d55, 0x0, 0x9, 0x43, 0x8, 0xfffffff6, 0x0, 0x2, 0x6, 0x6a1a0000, 0x7f, 0x2, 0xe, 0x20000, 0x7fff, 0x1, 0xb, 0x80000001, 0x8, 0xfffffff7, 0x4, 0x3, 0x5, 0x1, 0x9, 0x6, 0x70f5, 0x3, 0x5, 0xad2, 0xc, 0xfffffff9, 0xcaeb, 0x7, 0x10001, 0x10000, 0xe8600, 0xa000000, 0x6, 0x7, 0x3ee, 0x2, 0x4, 0x800, 0x1, 0xd, 0x1, 0x3, 0x100, 0x4, 0xd11, 0x3, 0x3, 0xd, 0x16d, 0x4, 0x7ff, 0x7f0, 0x0, 0xd4c6, 0x95d, 0xacde, 0x1, 0x2, 0x97, 0x80000001, 0xfffffffb, 0x5, 0x5, 0x5, 0x9, 0x8, 0x0, 0x7, 0x3, 0x0, 0x6, 0x4929fa95, 0x4, 0x8, 0x8, 0x7, 0x9, 0xb8db, 0xfffffeff, 0x3, 0x9, 0xffff, 0x80000000, 0x100, 0x5a, 0x6, 0x10000, 0xfffffff9, 0x1, 0x43f0, 0x24, 0x654d4af3, 0x6d6, 0x2, 0x6, 0x39, 0x5, 0x4, 0x9072, 0x3, 0x200, 0x9, 0x2, 0x200, 0x4, 0x7, 0x4, 0x10000, 0x6, 0xdc, 0xfcd, 0x2, 0x7, 0x9, 0x8, 0xf, 0x7, 0xe, 0x1f, 0x8764, 0x80000001, 0x9, 0x2, 0xffffff8a, 0x9, 0x6, 0x5, 0x1ff, 0x714, 0x7, 0x0, 0x5, 0x4, 0x400, 0x1, 0x7, 0x8010, 0xa, 0x7, 0x5, 0x8, 0x8, 0xc0, 0x4, 0x1, 0x8, 0x3ff, 0x80000001, 0x9, 0x8, 0x7, 0x4, 0x4, 0x7, 0x3, 0x2, 0xffffffff, 0xcddd, 0x3, 0x20b2395d, 0x1, 0xa, 0x8d01, 0x8, 0x4, 0xd2, 0x4, 0xfff, 0x3, 0x10001, 0x9, 0x1, 0x3, 0x6, 0x38, 0x400, 0x74e, 0x9, 0x1, 0x8, 0x7, 0xe, 0x2, 0x0, 0xf, 0x80, 0x200, 0x7, 0xa, 0xc227, 0x8, 0x4, 0x100, 0x8, 0x1000, 0x8b, 0x0, 0x9, 0x5f, 0x8, 0xffffffff, 0xe5b0, 0x6, 0x1, 0x8, 0x4, 0x8, 0x10001, 0xa, 0x80, 0x8, 0xb92b, 0x84, 0x8, 0x2d, 0x15b2, 0x0, 0x3, 0xffffff6b, 0xfffffffb, 0xa, 0x100, 0x4, 0x5, 0xa, 0x8, 0x8, 0x6, 0xf, 0xeb3, 0xfffffffa, 0x9dc, 0x9, 0x8, 0x10, 0x4, 0x5, 0x1, 0x8, 0x2, 0x105, 0x80000001, 0x7ff, 0xc, 0x2, 0xfff, 0x3, 0x100, 0x39, 0x2, 0x7, 0x7, 0x0, 0x3, 0x1, 0xffffffff, 0x7, 0x7, 0x1, 0xc9f, 0x9, 0x2, 0x1, 0x7ff, 0x8, 0x1ff, 0x7, 0x5, 0x6, 0x9, 0x401, 0x1412, 0x2, 0x101, 0x1, 0xfffffff9, 0x1, 0xe3d, 0x6, 0x0, 0x3, 0x1, 0x4, 0x164, 0x6, 0x3, 0x4, 0x3, 0xffffffff, 0x8, 0x5, 0x6, 0x3, 0x401, 0x8, 0x5b, 0x1, 0x5, 0x4, 0x5, 0x2, 0xff, 0x5, 0x62, 0x8, 0x8, 0x0, 0x7, 0x2, 0x80, 0x6, 0x3, 0x7, 0x87, 0x6, 0x8001, 0xeb, 0x9ea, 0xa2c, 0x0, 0xcdf3, 0xffffffff, 0x101, 0x7, 0x40, 0x1, 0x8001, 0x2, 0x7, 0x9, 0x1000, 0x5, 0x8, 0x7ff, 0xfffffffa, 0xaf, 0x2, 0x0, 0xa2a9, 0xe, 0x3, 0x5, 0x0, 0x1, 0x6, 0x1, 0x400, 0x0, 0x80000001, 0xfffff01a, 0x3, 0xfff, 0x79, 0x3, 0x6, 0x0, 0x0, 0xfffffcdf, 0x8, 0x1ff, 0x7, 0x1000, 0xc9c4, 0x2, 0x0, 0x8, 0x10000, 0x1, 0x1, 0x3, 0xfffffff9, 0x2, 0x88, 0x7f, 0x9, 0x3, 0x4, 0x1, 0x7fff, 0x4, 0x90b, 0x29f9, 0x688e7dc5, 0x1, 0x3, 0xc2d, 0x1ff, 0x2, 0xff, 0x0, 0x0, 0xf33, 0x8, 0x6, 0x82000000, 0x4, 0x8, 0x8, 0xfffffffe, 0x36, 0xfffffffa, 0x3, 0xe8b, 0x1, 0x2, 0x1, 0x9, 0x8, 0x1f5e38f6, 0x8e86, 0x5, 0x1, 0x752e1781, 0x1, 0xcd7, 0x7, 0x0, 0x0, 0xe, 0x4, 0x1, 0xc, 0x10001, 0x4, 0x1, 0x1, 0xdf, 0x8, 0x0, 0x86, 0x5, 0x7, 0x1, 0x8, 0x7, 0x0, 0x7d4b9071, 0xae, 0xb8a, 0x12a6, 0x0, 0x8, 0x9, 0x91b9, 0x0, 0x9, 0x36, 0x9, 0x0, 0xffff8000, 0x9, 0x9c09, 0x6, 0x8, 0xff, 0x10, 0x943, 0x2, 0x9, 0x6, 0x80, 0x9, 0x3ff, 0xfffff000, 0x0, 0x200, 0xf, 0x7c, 0x8001, 0x7, 0x0, 0x0, 0x9, 0x5, 0x0, 0x9, 0x4, 0x0, 0x0, 0x9, 0x4, 0xffff6132, 0x0, 0x800, 0x7, 0x80000000, 0x80, 0x0, 0x3, 0x3ff, 0x800, 0x2, 0x1, 0x0, 0x2, 0x1, 0x10001, 0x8, 0x9, 0x3, 0x10, 0x80000000, 0x7, 0x10, 0x1, 0x4, 0x6, 0x4, 0x40, 0xc9fa, 0x10001, 0x7f, 0x4, 0x6, 0xfffffff9, 0x8, 0x7, 0x4, 0xa4b0, 0x8, 0x4, 0x4, 0x800, 0x8001, 0x400, 0x3, 0x36a, 0xc, 0x7, 0x0, 0x38000, 0xfffffffa, 0xe, 0x0, 0x5, 0x2, 0x8, 0x7fffffff, 0x2, 0x1, 0x1, 0x3, 0x6, 0x9, 0xfffffff9, 0x6, 0x8000, 0x3, 0x5, 0xfffffff8, 0x7f, 0x7, 0x80000000, 0x9, 0x1ff, 0xc0ef, 0x2, 0x31, 0xfffffffd, 0x40100000, 0x8, 0x3, 0x3, 0x4, 0xe, 0x6, 0x80, 0x80000000, 0x100, 0x9, 0x7, 0xf5f0, 0xd4, 0x5, 0xfa, 0xd, 0x2, 0xffffffdd, 0x10, 0x4, 0x0, 0xfffffff7, 0xaae8, 0x7fffffff, 0x1, 0x7, 0x8, 0x8, 0x6, 0x1ff, 0x1000, 0x400, 0x47, 0x6, 0x3, 0x8, 0x0, 0x1, 0x3, 0x81, 0x1, 0x9, 0x6c0, 0x7f, 0x3, 0x1, 0x6, 0x1, 0x6, 0xbb40, 0x8, 0x5, 0x4dae0066, 0xd, 0x10, 0xa, 0x6, 0x3, 0x9, 0x92, 0x7, 0x2, 0x101, 0x5, 0x2, 0xf0d9, 0x1, 0x5, 0x8, 0x8, 0x7, 0x12, 0xc25e, 0xffffffff, 0xa, 0x9, 0xffffffff, 0x0, 0x4, 0xe, 0x5, 0x8000, 0x2, 0x1f1, 0x8, 0x40000000, 0x10001, 0x0, 0x6, 0x400, 0xd40d, 0x644, 0x2, 0x3, 0x937, 0x3, 0x7fff, 0xe, 0x1, 0x6, 0x6, 0x9, 0x0, 0xd45, 0x4, 0x3, 0x6, 0x3, 0x1, 0x8ab9, 0x8d63, 0xc83a, 0x400, 0x2, 0x8, 0x1, 0x7fff, 0xa92, 0x10000, 0x3f16, 0x2, 0x284, 0x4, 0x5, 0x8000, 0x9, 0x0, 0xffffff00, 0x3, 0x8a, 0x2, 0x5, 0x9, 0x9, 0x10, 0x81, 0x9b, 0x0, 0xffffffff, 0x3, 0x57, 0x8001, 0xdde4, 0x2, 0x40, 0xff, 0x68000000, 0xfffffff8, 0x6, 0x7fff, 0x3, 0x6, 0x8, 0xc, 0xd, 0x861, 0x86b9, 0xffff8001, 0x7, 0x1, 0xf, 0xfffff3b4, 0x0, 0x1, 0x1ffe, 0x8bf7, 0x10200, 0x7, 0x200, 0x0, 0x9, 0x4, 0x3, 0x1, 0x80, 0x4, 0x7f, 0x4, 0x7, 0x40, 0x80000000, 0x3, 0xffffc19d, 0x3, 0x1000, 0xfffffffa, 0x5, 0x10000, 0x8, 0x938a, 0x9, 0x5, 0x8, 0x342, 0x0, 0x2, 0xfca, 0x727d, 0x1, 0x0, 0x4, 0x6, 0x3, 0x2, 0x5, 0x3, 0x200, 0x9, 0x400, 0x4, 0x8, 0x7fffffff, 0x101, 0x6, 0x3, 0x3ff, 0x9, 0x8000, 0x8, 0xf1f, 0x9, 0x10, 0x7ff, 0x8, 0x7fff, 0x2, 0x7fffffff, 0x9a, 0x3, 0xc6, 0x1, 0xfffff982, 0x8, 0x7fff, 0x4, 0x7, 0x4, 0x0, 0x4, 0xffffff82, 0x30b, 0x1, 0x8, 0x1, 0x1, 0x5, 0x3, 0x10001, 0x1, 0x2, 0x9, 0x75, 0xa, 0x1000, 0xf, 0xfffff7c4, 0x80000001, 0xfffffffa, 0x9, 0x638, 0x5, 0x7f, 0x5, 0x80, 0x3, 0x860, 0x7fff, 0x0, 0x7fffffff, 0xc3, 0xa, 0xffffffff, 0x4, 0x4, 0x8, 0x2, 0x101, 0x199ed1ea, 0xdcb1, 0x401, 0xaac4, 0x0, 0xa, 0x9, 0xfffffffe, 0x9, 0x0, 0xaf4c, 0x7, 0x7fffffff, 0x8, 0x1000, 0xfffffffb, 0x80000001, 0xda1, 0x401, 0x10001, 0x0, 0x0, 0x7, 0x7, 0x3, 0x8, 0x8, 0x7, 0x3, 0xefe00, 0x3, 0x5, 0x3fc00, 0xfffffff7, 0x9, 0x7b, 0x7f, 0x7, 0x0, 0x3, 0x2, 0x8, 0xe91, 0x3, 0x2, 0x5, 0x8, 0x9, 0xc, 0x4, 0xb7, 0x1, 0x4, 0x1, 0x7fff, 0x8001, 0x7, 0x0, 0x800, 0x2d, 0x0, 0x3, 0x7, 0x0, 0xb7, 0x1000, 0xa, 0x3, 0x7ff, 0x4, 0x1, 0x3, 0x7, 0x4, 0x7, 0x10, 0x9, 0x80, 0x10001, 0x0, 0x10, 0x1000, 0x10000, 0x7, 0x6, 0x8, 0x9, 0xb1, 0x6, 0x3, 0x2, 0x963, 0x6000000, 0x400, 0x0, 0x10, 0x7, 0x4, 0x1, 0x0, 0x8, 0x6, 0xff, 0x1, 0x6, 0xf3, 0x8, 0xae, 0x6, 0x9, 0x2, 0x6, 0xff0e, 0x2, 0x8, 0x7, 0x3, 0x4, 0x5, 0x10001, 0x8, 0x2, 0x8, 0x0, 0x2, 0x1, 0x5, 0x9, 0xa, 0x8, 0x6, 0xffffffff, 0x1, 0x3ff, 0x4, 0x9, 0x9, 0x100, 0xff, 0x40, 0x7cf6, 0x5, 0x1], 0x4, 0x1}) 1.76521991s ago: executing program 6 (id=3165): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 1.636761043s ago: executing program 6 (id=3166): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xe0}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x2ee}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000031c0)=[{&(0x7f0000003240)=ANY=[], 0x404}, {&(0x7f00000010c0)={0x118, 0x31, 0x10, 0x70bd27, 0x25dfdbfe, "", [@typed={0x5, 0x43, 0x0, 0x0, @str='\x00'}, @nested={0x35, 0x4b, 0x0, 0x1, [@generic="6ce9a3840df453ee6371cb83a66f93d1a27c764c6c29222f8444530b3b1e4294d983f5a2a814549a2c8a6f222f01d11d2b"]}, @nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @u32=0x8}]}, @nested={0x8, 0x75, 0x0, 0x1, [@generic, @nested={0x4, 0x144}]}, @typed={0x11, 0x37, 0x0, 0x0, @str='/dev/urandom\x00'}, @nested={0x3f, 0x80, 0x0, 0x1, [@generic="49022c4b5cd85b3a47b21488589dacc7574c1a060d3d1b2c56e307e033c8b2d4946c0c751a795dae9929de6e8e417f7a3aaac65cb29cc4bcd69d87"]}, @generic="134ca5a96c85261c97cf8928b12a6537bc46e8454dde951dcbb39cf0127c3980221aadbfd6b45e7f152b5801568dd99ebfefd12686476a26394248b30ff4110dee5bae19891034380985f8b90cd018d573d14749c1a66c7626f942d5d2ea75"]}, 0x118}, {0x0}, {&(0x7f0000003240)={0x133c, 0x39, 0x0, 0x70bd28, 0x25dfdbfe, "", [@typed={0xe2, 0xbb, 0x0, 0x0, @binary="29b10366aabf6eb576cb6c12b15e182c726ad9d7e5daebf14eac869b7097169d4c24b77b1c51aab44054ef50f63de6f0998f4529a5ec8a4829e2042c3f71c0c1396c21576e7558c10492502814b506ec62d4d400caf02c29a4e60e446de7d8d8839f3bef4e8499f4e364ac5ca42f7771d8c34bb660de6668928178d57843a07e3a1663eb2bb66ce9128c8f278bdd096a77c14809c0d96f052fe6b9ee8e8fbe17c053b89996de5a61d893b6e1dae55fa8b0e7fe0be41ee61b15b3d83705845f0a85b4bfc6af26f6bfac655fd6e6329659edcd828576dd6ac846a7961b7212"}, @nested={0x10f, 0x6f, 0x0, 0x1, [@generic="dc1bcd4aad110c49a7dde4fa8566a6d0978db68ba44e3ed673047abc77e14f506b10a7", @nested={0xe5, 0x102, 0x0, 0x1, [@generic="498b1404103ce26086a225b63d1065b3a35827c803a8fcd51cfcaf102f4d9bf8281191de91325842969b507560a3a92d8146de4a0f8c10f01c5fbb6b2b2d9067dfcaa35726141a86b2875e6a", @typed={0x8, 0xfa, 0x0, 0x0, @fd}, @generic="b1b58bbd256232fca30c1a44f8d2bf118bfd11dc1256e6f950dccdf915f22634b8a235bd924139a7593b0b716108710bd48b4a4746b83a308e66", @generic="929b41bf4dc80a319c32854bec876cd2d5993c5d5eaa31ef400a71d25ba85e9d77719a4fb9d46f3da3d64d198b6baf6eb15da599080a8e9c7a92e51ffca055", @typed={0x8, 0xe7, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x2, 0x0, 0x0, @pid}, @nested={0x4, 0xdf}]}, @generic]}, @generic="ec6024954b2e511af35710bd3940ac00f97f9622515653cc1db03b1b20402a868a5fa1f171833dcf6819d909aa333380a7f4033cbef3d18174397005042313679e1529b67b882227d0c4a3df9750a4db7fc9e9160f4897dcaa65e757fc61b015a2e30c5a0aa157a36807472425e343ffe23fc5cddc45eccf45e55cd3aab58bb2edd50dce94ae2d1eac90033e748433461d69e7f57d21a154c423c2e015ecff3de5907e18b6a72a66936f8f0843963e722e6d", @generic="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", @typed={0xc, 0xec, 0x0, 0x0, @u64=0x80}, @nested={0xb0, 0x102, 0x0, 0x1, [@nested={0x4, 0x84}, @generic="eb24357ef15c9dc69e64c72f4fb4dc6a5df06fb16e2fd60cd65400fe2522191acccb6fe635749d4a7eaa5af794ce81cf9e93b478a089024647c639e8f9889354828f36b081badc0554a531c8aa43f9833ed15406522bebd481c539d2c96868c277a238c635614440fcfc60d020fe0f38554935848c0db7e78c7b96c66233f820d79648f4", @typed={0x8, 0x8f, 0x0, 0x0, @pid}, @nested={0x4, 0x34}, @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x40}]}, @nested={0x10, 0x3d, 0x0, 0x1, [@nested={0x4, 0x75}, @nested={0x4, 0xf4}, @typed={0x4, 0xc1}]}]}, 0x133c}, {&(0x7f0000002840)={0x28, 0x30, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x18, 0x2b, 0x0, 0x1, [@typed={0x14, 0xc9, 0x0, 0x0, @ipv6=@private1}]}]}, 0x28}, {&(0x7f0000000640)=ANY=[@ANYBLOB], 0x110}, {&(0x7f0000002ac0)={0x140, 0x1d, 0x20, 0x70bd29, 0x25dfdbfe, "", [@nested={0x15, 0xaf, 0x0, 0x1, [@typed={0x4, 0x77}, @nested={0x4, 0xeb}, @generic, @generic="4d0741a1df181bb60f"]}, @nested={0x4, 0xec}, @nested={0x114, 0x128, 0x0, 0x1, [@generic="b7fb0555c475ad685332af0145e93929e165c82fe9d3772007e4d9f0095e4eed8487da6f464ef0da9f8703e4c7d6e0faaa8f5cab6bdf0b847be56bee4fd666512dc508827b5a137b260c9b2837d871a55e91f5d17b6195c3b1dfd63c21dd96d8014e36f83100820fd09c2561f3c959f2fcaaec7918", @generic="dabbd9ed6cf1f1cfa55d2bb46e3d3f478fbd38970bfc9b4a6ed70fa1dc848aeed45140b06555f27538f5b3e72294ef402807c09479fb6936b4c0c1107fd30db1a93f4c10957eed6e209ec1ceec2afc511c649c302a26806cd59a47022a938f0d5c580fc0720faaf2f94f50a7adbcca24e2d1539a91c27ad025b503054384b9", @nested={0x4, 0x148}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x8c}]}]}, 0x140}, {&(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x150}, {&(0x7f0000003000)=ANY=[@ANYBLOB="cc0000003600000227bd7000fbdbdf2563f0372f865e46131678ef81bd2e2a1e1e4e5c580f71393f02907dcb97c7296b2b5a260430aee19d6527341faf9cd43afbe3cd337d7c8a52a85845972010795f71f5898dbbc9cfbc2a1727011dd2df533ff22a723fcc4ddfd97ee4c2e3ec4248f61a85b1bef7abfb9c27e67acca578436656a70d5602c0c144be3de7dd69061e596d32d1a57481c456eda2253de3d9cae74012f716704ec5bbd1e03a7b51aa66ff3b672c712816f5f01b00"/203], 0xcc}], 0x9, &(0x7f0000005380)=[@cred={{0x18}}, @rights={{0xc}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r6, r4]}}], 0x6c, 0xc000}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000003c0)=@fd={0x113, 0x0, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x5, 0xd2598af09f5c086f, 0x2, 0x0, 0x48, 0xf, "3076eddd"}, 0x4, 0x4, {}, 0x7ff, 0x0, r8}) sendto$inet6(r9, &(0x7f00000002c0)='E', 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000400000000", @ANYRES32=0x0, @ANYBLOB="937b010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 0s ago: executing program 6 (id=3167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000180c000b40eacea4ac0000000108000640ffffff"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x100) r3 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xe0000002}) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './cgroup.net/devices.allow\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=""/239, 0xef}, 0x9}, {{&(0x7f0000000500)=@nfc_llcp, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c00)=""/42, 0x2a}, {&(0x7f0000001c40)=""/109, 0x6d}], 0x2, &(0x7f0000000100)=""/112, 0x70}, 0x8e7}], 0x2, 0x2, 0x0) kexec_load(0x5, 0x2, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x185, 0x2, 0x6}, {&(0x7f0000000640)="ad247c300f3e0238c872e3618e2309c98313cf1275a63997cea4efe6eb2761c5ac269394b78f248e1493906cbd3c9cacac001e0295c3b9e7a9dff47bdc84aedbe2a66e6fb83ef22716b600fc02253b300333161a5c92e7165cf1f969b8520f9d40e355f6956f71dc12c0b640d9100295f62a4e6450f378c73765034d05b0d9139e3d95d126073f2d81de6d06bb671b2393ba47088112", 0x96, 0x1, 0x1}], 0x30000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setxattr$incfs_metadata(&(0x7f0000000380)='./cgroup.net/devices.allow\x00', &(0x7f00000003c0), 0x0, 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) kernel console output (not intermixed with test programs): 9][ T34] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 668.170332][ T34] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 668.206146][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.252306][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.319164][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 668.354823][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.389355][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.420405][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 668.471841][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.477938][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.485499][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 668.493144][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.497344][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.503675][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 668.508023][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.514875][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.523869][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 668.529918][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.534933][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.545543][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 668.555992][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.563078][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.582538][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 668.605054][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.609069][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.613726][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 668.661349][ T34] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 668.665488][ T34] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 668.670338][ T34] usb 5-1: Product: syz [ 668.683763][ T34] usb 5-1: Manufacturer: syz [ 668.686314][ T34] usb 5-1: SerialNumber: syz [ 668.693054][ T34] usb 5-1: config 0 descriptor?? [ 668.705101][ T34] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 668.904550][T15729] netlink: 'syz.0.2717': attribute type 4 has an invalid length. [ 668.908298][T15729] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2717'. [ 669.040137][ T5845] usb 5-1: USB disconnect, device number 17 [ 669.052403][ T5845] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 669.719217][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 671.570770][ T6048] usb 46-1: device descriptor read/8, error -110 [ 673.166855][ T859] usb 38-1: device descriptor read/8, error -110 [ 673.550802][ T859] usb usb38-port1: attempt power cycle [ 673.640103][ T6048] usb usb46-port1: attempt power cycle [ 674.031885][ T42] audit: type=1326 audit(1783444888.650:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.0.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 674.078175][ T42] audit: type=1326 audit(1783444888.680:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.0.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=314 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 674.107204][ T42] audit: type=1326 audit(1783444888.680:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.0.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 674.122865][ T42] audit: type=1326 audit(1783444888.680:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.0.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3fec code=0x7ffc0000 [ 674.249970][T15749] Cannot find map_set index 2 as target [ 674.336088][ T6048] usb usb46-port1: unable to enumerate USB device [ 674.340290][ T859] usb usb38-port1: unable to enumerate USB device [ 674.698903][ T5756] Bluetooth: hci2: Invalid handle: 0x10c4 > 0x0eff [ 674.960944][T15765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.965752][T15765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.033560][T15765] netlink: 'syz.4.2728': attribute type 4 has an invalid length. [ 675.095830][T15765] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2728'. [ 675.166180][T15770] FAULT_INJECTION: forcing a failure. [ 675.166180][T15770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.202106][T15770] CPU: 0 UID: 0 PID: 15770 Comm: syz.5.2729 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.202142][T15770] Tainted: [L]=SOFTLOCKUP [ 675.202149][T15770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 675.202161][T15770] Call Trace: [ 675.202169][T15770] [ 675.202178][T15770] dump_stack_lvl+0x100/0x190 [ 675.202207][T15770] should_fail_ex.cold+0x5/0xa [ 675.202231][T15770] _copy_to_user+0x32/0xd0 [ 675.202262][T15770] do_sock_getsockopt+0x631/0x6e0 [ 675.202428][T15770] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 675.202459][T15770] ? find_held_lock+0x2b/0x80 [ 675.202487][T15770] ? __fget_files+0x21f/0x3d0 [ 675.202553][T15770] __sys_getsockopt+0x133/0x1d0 [ 675.202584][T15770] ? __ia32_sys_getsockopt+0xbc/0x160 [ 675.202601][T15770] __ia32_sys_getsockopt+0xbc/0x160 [ 675.202651][T15770] ? __do_fast_syscall_32+0x98/0x970 [ 675.202672][T15770] ? lockdep_hardirqs_on+0x78/0x100 [ 675.202700][T15770] __do_fast_syscall_32+0xe7/0x970 [ 675.202718][T15770] ? lockdep_hardirqs_on+0x78/0x100 [ 675.202746][T15770] do_fast_syscall_32+0x32/0x70 [ 675.202763][T15770] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 675.202786][T15770] RIP: 0023:0xf70aefec [ 675.202812][T15770] Code: Unable to access opcode bytes at 0xf70aefc2. [ 675.202820][T15770] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 675.202838][T15770] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000114 [ 675.202849][T15770] RDX: 0000000000002717 RSI: 0000000000000000 RDI: 0000000080000400 [ 675.202858][T15770] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 675.202868][T15770] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 675.202878][T15770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 675.202902][T15770] [ 675.483258][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 676.331855][ T5101] Bluetooth: hci2: Invalid handle: 0x10c4 > 0x0eff [ 677.590411][T15808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.722543][T15808] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.819420][T15808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.854042][T15814] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 677.962225][T15804] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2738'. [ 678.001921][T15804] openvswitch: netlink: Message has 512 unknown bytes. [ 678.133085][T15808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.150119][T15808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.229536][T15808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 678.234877][T15808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.295902][T15808] veth1_vlan: left promiscuous mode [ 678.300416][T15808] veth0_vlan: left promiscuous mode [ 678.326207][T15808] veth0_vlan: entered promiscuous mode [ 678.352258][T15808] veth1_vlan: entered promiscuous mode [ 678.362228][T15808] veth1_macvtap: left promiscuous mode [ 678.366864][T15808] veth0_macvtap: left promiscuous mode [ 678.395778][T15808] veth0_macvtap: entered promiscuous mode [ 678.400403][T15808] veth1_macvtap: entered promiscuous mode [ 678.414947][T15808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 678.436182][T15808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 678.441863][T15808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 678.465468][T15808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 678.473319][T15808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 678.494493][ T221] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.504634][ T221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.601281][ T221] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.619305][ T221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.031911][ T5859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.383342][ T5859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.408670][ T5859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.676298][ T5859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.680556][T15804] hsr0 speed is unknown, defaulting to 1000 [ 679.735118][T15832] netlink: 212924 bytes leftover after parsing attributes in process `syz.3.2743'. [ 679.808158][ C3] IPv6: veth1_to_bond: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1e used by aa:aa:aa:aa:aa:1e detected! [ 679.996735][T15836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2745'. [ 680.003748][T15836] netlink: 'syz.0.2745': attribute type 4 has an invalid length. [ 680.009970][T15836] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2745'. [ 681.405158][T15857] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 682.269571][T15869] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 682.288871][T15869] qnx6: wrong signature (magic) in superblock #1. [ 682.299661][T15869] qnx6: unable to read the first superblock [ 682.456821][T15875] netlink: 'syz.3.2756': attribute type 1 has an invalid length. [ 682.557450][T15874] bond2: option ad_actor_sys_prio: invalid value (0) [ 682.589130][T15874] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 682.621724][T15874] bond2 (unregistering): Released all slaves [ 682.742631][T15875] 8021q: adding VLAN 0 to HW filter on device bond2 [ 683.411196][T15897] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2758'. [ 683.416789][T15897] netlink: 'syz.3.2758': attribute type 4 has an invalid length. [ 683.420448][T15897] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2758'. [ 684.796147][T15890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.802513][T15890] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.837351][T15890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.940279][T15890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.960140][T15890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.979571][T15890] veth1_vlan: left promiscuous mode [ 684.986354][T15890] veth0_vlan: left promiscuous mode [ 684.992493][T15890] veth0_vlan: entered promiscuous mode [ 684.998784][T15890] veth1_vlan: entered promiscuous mode [ 685.008650][T15890] veth1_macvtap: left promiscuous mode [ 685.013060][T15890] veth0_macvtap: left promiscuous mode [ 685.019988][T15890] veth0_macvtap: entered promiscuous mode [ 685.024977][T15890] veth1_macvtap: entered promiscuous mode [ 685.051842][T15890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 685.071926][T15890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 685.077902][T15890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 685.090006][T15890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 685.552624][T14922] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.564252][T14922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.593217][T14922] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.596461][T14922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.616010][T15918] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 685.619193][T15918] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 685.654631][T15918] vhci_hcd vhci_hcd.0: Device attached [ 685.683601][T15919] vhci_hcd: connection closed [ 685.698999][T12217] vhci_hcd vhci_hcd.0: stop threads [ 685.702894][T12217] vhci_hcd vhci_hcd.0: release socket [ 685.705107][T12217] vhci_hcd vhci_hcd.0: disconnect device [ 685.893608][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.918227][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.928343][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.938539][T13634] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 685.971508][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.007554][T15923] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2766'. [ 686.902878][T15939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2771'. [ 686.924507][T15939] netlink: 'syz.0.2771': attribute type 4 has an invalid length. [ 686.929480][T15939] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2771'. [ 687.543192][T15942] syzkaller0: entered promiscuous mode [ 687.546294][T15942] syzkaller0: entered allmulticast mode [ 687.609678][T15945] IPv6: Can't replace route, no match found [ 688.543805][T15951] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2775'. [ 688.574805][T15951] FAULT_INJECTION: forcing a failure. [ 688.574805][T15951] name failslab, interval 1, probability 0, space 0, times 0 [ 688.679631][T15951] CPU: 2 UID: 0 PID: 15951 Comm: syz.5.2775 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.679661][T15951] Tainted: [L]=SOFTLOCKUP [ 688.679666][T15951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 688.679676][T15951] Call Trace: [ 688.679683][T15951] [ 688.679690][T15951] dump_stack_lvl+0x100/0x190 [ 688.679715][T15951] should_fail_ex.cold+0x5/0xa [ 688.679734][T15951] should_failslab+0xc2/0x120 [ 688.679753][T15951] __kmalloc_cache_noprof+0x91/0x6c0 [ 688.679776][T15951] ? ppp_register_net_channel+0x52/0x680 [ 688.679832][T15951] ppp_register_net_channel+0x52/0x680 [ 688.679849][T15951] pppol2tp_connect+0x11ca/0x1c20 [ 688.679924][T15951] ? __pfx_pppol2tp_connect+0x10/0x10 [ 688.679943][T15951] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 688.679981][T15951] ? __pfx_aa_sk_perm+0x10/0x10 [ 688.680005][T15951] ? apparmor_socket_connect+0x100/0x1b0 [ 688.680028][T15951] ? __pfx_pppol2tp_connect+0x10/0x10 [ 688.680047][T15951] __sys_connect_file+0x141/0x1a0 [ 688.680066][T15951] __sys_connect+0x141/0x170 [ 688.680079][T15951] ? __pfx___sys_connect+0x10/0x10 [ 688.680092][T15951] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 688.680130][T15951] ? ksys_write+0x1ac/0x250 [ 688.680152][T15951] ? __pfx_ksys_write+0x10/0x10 [ 688.680174][T15951] __ia32_sys_connect+0x71/0xb0 [ 688.680188][T15951] ? lockdep_hardirqs_on+0x78/0x100 [ 688.680210][T15951] __do_fast_syscall_32+0xe7/0x970 [ 688.680223][T15951] ? lockdep_hardirqs_on+0x78/0x100 [ 688.680245][T15951] do_fast_syscall_32+0x32/0x70 [ 688.680260][T15951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 688.680278][T15951] RIP: 0023:0xf70aefec [ 688.680300][T15951] Code: Unable to access opcode bytes at 0xf70aefc2. [ 688.680307][T15951] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 688.680322][T15951] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 688.680332][T15951] RDX: 0000000000000032 RSI: 0000000000000000 RDI: 0000000000000000 [ 688.680340][T15951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 688.680349][T15951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.680357][T15951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 688.680378][T15951] [ 688.996215][T15961] IPv6: Can't replace route, no match found [ 689.279978][T15964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2779'. [ 689.616436][ T859] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 689.631637][ T859] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 689.649731][ T859] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 689.744017][ T859] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 689.751339][ T859] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 689.754503][ T859] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 689.757552][ T859] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 689.799664][ T859] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 689.808523][ T859] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 689.822559][ T859] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 689.923929][ T859] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [] on [ 689.968268][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 690.118777][T15981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2785'. [ 690.199459][ T5857] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 690.241999][ T5101] Bluetooth: hci2: Invalid handle: 0x10c4 > 0x0eff [ 690.247152][ T42] audit: type=1326 audit(1783444904.861:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15980 comm="syz.4.2787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 690.306041][ T42] audit: type=1326 audit(1783444904.921:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15980 comm="syz.4.2787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 690.365658][ T42] audit: type=1326 audit(1783444904.921:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15980 comm="syz.4.2787" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 690.426725][ T5857] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 690.442806][ T5857] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.447206][ T5857] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.458116][ T5857] usb 5-1: config 0 interface 0 has no altsetting 0 [ 690.462580][ T42] audit: type=1326 audit(1783444904.931:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15980 comm="syz.4.2787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 690.491283][ T5857] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.497462][ T5857] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.505484][ T5857] usb 5-1: config 0 interface 0 has no altsetting 0 [ 690.510620][ T42] audit: type=1326 audit(1783444904.941:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15980 comm="syz.4.2787" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 690.537473][ T42] audit: type=1326 audit(1783444904.941:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15980 comm="syz.4.2787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 690.549740][ T5857] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.569074][ T42] audit: type=1326 audit(1783444904.941:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15980 comm="syz.4.2787" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 690.604008][ T5857] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.609555][ T5857] usb 5-1: config 0 interface 0 has no altsetting 0 [ 690.612965][ T42] audit: type=1326 audit(1783444904.971:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15980 comm="syz.4.2787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 690.639547][ T42] audit: type=1326 audit(1783444904.981:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15980 comm="syz.4.2787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 690.648594][ T5857] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.667322][ T5857] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.672007][ T5857] usb 5-1: config 0 interface 0 has no altsetting 0 [ 690.676742][ T42] audit: type=1326 audit(1783444904.981:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15980 comm="syz.4.2787" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 690.715764][ T5857] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.720105][ T5857] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.734013][ T5857] usb 5-1: config 0 interface 0 has no altsetting 0 [ 690.738448][ T5857] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.743387][ T5857] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.765551][ T5857] usb 5-1: config 0 interface 0 has no altsetting 0 [ 690.773675][ T5857] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.774990][T15994] syzkaller0: entered promiscuous mode [ 690.783632][ T5857] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.786481][T15994] syzkaller0: entered allmulticast mode [ 690.794361][ T5857] usb 5-1: config 0 interface 0 has no altsetting 0 [ 690.814532][ T5857] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.828791][ T5857] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.861341][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.861907][ T5857] usb 5-1: config 0 interface 0 has no altsetting 0 [ 690.865522][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.912099][ T5857] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 690.933573][ T5857] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 690.937524][ T5857] usb 5-1: Product: syz [ 690.941518][ T5857] usb 5-1: Manufacturer: syz [ 690.943569][ T5857] usb 5-1: SerialNumber: syz [ 690.968365][ T5857] usb 5-1: config 0 descriptor?? [ 690.986703][ T5857] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 691.179250][T15988] syz.3.2788: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 691.229257][T15988] CPU: 0 UID: 0 PID: 15988 Comm: syz.3.2788 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.229322][T15988] Tainted: [L]=SOFTLOCKUP [ 691.229330][T15988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 691.229342][T15988] Call Trace: [ 691.229351][T15988] [ 691.229360][T15988] dump_stack_lvl+0x100/0x190 [ 691.229392][T15988] warn_alloc.cold+0x94/0xa8 [ 691.229415][T15988] ? __pfx_warn_alloc+0x10/0x10 [ 691.229440][T15988] ? kasan_save_stack+0x3f/0x50 [ 691.229465][T15988] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 691.229490][T15988] ? xskq_create+0x52/0x1d0 [ 691.229556][T15988] ? xsk_setsockopt+0x743/0xab0 [ 691.229580][T15988] ? do_sock_setsockopt+0xf3/0x1d0 [ 691.229603][T15988] ? __sys_setsockopt+0x119/0x190 [ 691.229622][T15988] ? __ia32_sys_setsockopt+0xbc/0x160 [ 691.229641][T15988] ? __do_fast_syscall_32+0xe7/0x970 [ 691.229660][T15988] ? do_fast_syscall_32+0x32/0x70 [ 691.229681][T15988] ? xskq_create+0xfb/0x1d0 [ 691.229715][T15988] __vmalloc_node_range_noprof+0x136c/0x1630 [ 691.229753][T15988] ? xskq_create+0xfb/0x1d0 [ 691.229783][T15988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 691.229813][T15988] ? kasan_save_track+0x14/0x30 [ 691.229833][T15988] ? __kasan_kmalloc+0xaa/0xb0 [ 691.229854][T15988] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 691.229882][T15988] ? xskq_create+0xfb/0x1d0 [ 691.229906][T15988] vmalloc_user_noprof+0x9e/0xe0 [ 691.229931][T15988] ? xskq_create+0xfb/0x1d0 [ 691.229956][T15988] xskq_create+0xfb/0x1d0 [ 691.229982][T15988] xsk_setsockopt+0x743/0xab0 [ 691.230005][T15988] ? __pfx_aa_sk_perm+0x10/0x10 [ 691.230031][T15988] ? __pfx_xsk_setsockopt+0x10/0x10 [ 691.230058][T15988] ? find_held_lock+0x2b/0x80 [ 691.230084][T15988] ? aa_sock_opt_perm+0xfe/0x1b0 [ 691.230112][T15988] ? __pfx_xsk_setsockopt+0x10/0x10 [ 691.230137][T15988] do_sock_setsockopt+0xf3/0x1d0 [ 691.230167][T15988] __sys_setsockopt+0x119/0x190 [ 691.230192][T15988] __ia32_sys_setsockopt+0xbc/0x160 [ 691.230212][T15988] ? __do_fast_syscall_32+0x98/0x970 [ 691.230231][T15988] ? lockdep_hardirqs_on+0x78/0x100 [ 691.230258][T15988] __do_fast_syscall_32+0xe7/0x970 [ 691.230280][T15988] do_fast_syscall_32+0x32/0x70 [ 691.230299][T15988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 691.230324][T15988] RIP: 0023:0xf7f07fec [ 691.230351][T15988] Code: Unable to access opcode bytes at 0xf7f07fc2. [ 691.230361][T15988] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 691.230418][T15988] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 000000000000011b [ 691.230433][T15988] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000029 [ 691.230446][T15988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 691.230459][T15988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.230471][T15988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 691.230497][T15988] [ 691.230747][T15988] Mem-Info: [ 691.237600][T15978] netlink: 'syz.0.2784': attribute type 4 has an invalid length. [ 691.241679][T15988] active_anon:8020 inactive_anon:452 isolated_anon:0 [ 691.241679][T15988] active_file:749 inactive_file:34923 isolated_file:0 [ 691.241679][T15988] unevictable:1768 dirty:325 writeback:0 [ 691.241679][T15988] slab_reclaimable:5977 slab_unreclaimable:61264 [ 691.241679][T15988] mapped:27689 shmem:3150 pagetables:1631 [ 691.241679][T15988] sec_pagetables:317 bounce:0 [ 691.241679][T15988] kernel_misc_reclaimable:0 [ 691.241679][T15988] free:40972 free_pcp:14981 free_cma:0 [ 691.253715][T15978] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2784'. [ 691.263369][T15988] Node 0 active_anon:552kB inactive_anon:212kB active_file:4kB inactive_file:104kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8800kB pagetables:1744kB sec_pagetables:1148kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 691.478733][T15998] create_pit_timer: 8 callbacks suppressed [ 691.478750][T15998] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 691.482851][T15988] Node 1 active_anon:33828kB inactive_anon:1596kB active_file:2992kB inactive_file:139588kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:110628kB dirty:1296kB writeback:0kB shmem:9064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5728kB pagetables:4880kB sec_pagetables:120kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 691.529983][T15998] netlink: 'syz.4.2791': attribute type 11 has an invalid length. [ 691.537469][T15988] Node 0 DMA free:2048kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:608kB local_pcp:136kB free_cma:0kB [ 691.537546][T15988] lowmem_reserve[]: 0 280 280 280 280 [ 691.537586][T15988] Node 0 DMA32 free:15832kB boost:0kB min:12776kB low:15968kB high:19160kB reserved_highatomic:0KB free_highatomic:0KB active_anon:672kB inactive_anon:212kB active_file:4kB inactive_file:104kB unevictable:3536kB writepending:4kB zspages:0kB present:1032196kB managed:287152kB mlocked:0kB bounce:0kB free_pcp:9212kB local_pcp:3528kB free_cma:0kB [ 691.537641][T15988] lowmem_reserve[]: 0 0 0 0 0 [ 691.537679][T15988] Node 1 DMA32 free:144708kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33828kB inactive_anon:1596kB active_file:2992kB inactive_file:139588kB unevictable:3536kB writepending:1296kB zspages:2432kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:48704kB local_pcp:14088kB free_cma:0kB [ 691.537922][T15988] lowmem_reserve[]: 0 0 0 0 0 [ 691.537965][T15988] Node 0 DMA: 172*4kB (UM) 32*8kB (UM) 11*16kB (UM) 3*32kB (UM) 3*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2048kB [ 691.538116][T15988] Node 0 DMA32: 478*4kB (UME) 156*8kB (UME) 76*16kB (UME) 69*32kB (UME) 41*64kB (UME) 24*128kB (UME) 10*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 15864kB [ 691.538271][T15988] Node 1 DMA32: 870*4kB (UME) 350*8kB (UME) 276*16kB (UM) 177*32kB (UME) 248*64kB (UME) 101*128kB (UME) 57*256kB (UME) 22*512kB (UME) 16*1024kB (UM) 8*2048kB (UM) 10*4096kB (UM) = 144744kB [ 691.538496][T15988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 691.538513][T15988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 691.538526][T15988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 691.538541][T15988] Node 1 hugepages_total=5 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 691.538556][T15988] 39629 total pagecache pages [ 691.538563][T15988] 1087 pages in swap cache [ 691.538572][T15988] Free swap = 117096kB [ 691.538581][T15988] Total swap = 124996kB [ 691.538590][T15988] 524155 pages RAM [ 691.538598][T15988] 0 pages HighMem/MovableOnly [ 691.538606][T15988] 211474 pages reserved [ 691.538614][T15988] 0 pages cma reserved [ 692.545877][ T10] usb 5-1: USB disconnect, device number 18 [ 692.550809][ T10] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 692.933150][T16026] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 692.984207][T16026] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 693.466127][T16035] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 693.989764][T16038] syzkaller0: entered promiscuous mode [ 693.996459][T16038] syzkaller0: entered allmulticast mode [ 694.201341][T16026] hsr0 speed is unknown, defaulting to 1000 [ 694.300704][T16043] FAULT_INJECTION: forcing a failure. [ 694.300704][T16043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.317119][T16043] CPU: 2 UID: 0 PID: 16043 Comm: syz.4.2801 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.317156][T16043] Tainted: [L]=SOFTLOCKUP [ 694.317163][T16043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 694.317175][T16043] Call Trace: [ 694.317187][T16043] [ 694.317198][T16043] dump_stack_lvl+0x100/0x190 [ 694.317230][T16043] should_fail_ex.cold+0x5/0xa [ 694.317256][T16043] _copy_to_user+0x32/0xd0 [ 694.317288][T16043] simple_read_from_buffer+0xcb/0x170 [ 694.317323][T16043] proc_fail_nth_read+0x1af/0x230 [ 694.317352][T16043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 694.317380][T16043] ? rw_verify_area+0xce/0x6d0 [ 694.317407][T16043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 694.317431][T16043] vfs_read+0x1e4/0xb40 [ 694.317463][T16043] ? __pfx_vfs_read+0x10/0x10 [ 694.317491][T16043] ? find_held_lock+0x2b/0x80 [ 694.317518][T16043] ? __fget_files+0x215/0x3d0 [ 694.317578][T16043] ? __fget_files+0x21f/0x3d0 [ 694.317811][T16043] ksys_read+0x12a/0x250 [ 694.317846][T16043] ? __pfx_ksys_read+0x10/0x10 [ 694.317887][T16043] do_int80_emulation+0x14b/0x720 [ 694.317916][T16043] asm_int80_emulation+0x1a/0x20 [ 694.317940][T16043] RIP: 0023:0xf71e71eb [ 694.317961][T16043] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 694.317983][T16043] RSP: 002b:00000000f547c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 694.318009][T16043] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f547c5d0 [ 694.318023][T16043] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 694.318036][T16043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 694.318049][T16043] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 694.318061][T16043] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 694.318092][T16043] [ 695.390926][ T5917] block nbd1: Possible stuck request ffff888027dc7000: control (read@0,4096B). Runtime 60 seconds [ 696.082767][T16057] overlay: Unknown parameter 'obj_type' [ 697.121789][T16077] syzkaller0: entered promiscuous mode [ 697.134515][T16077] syzkaller0: entered allmulticast mode [ 698.496567][T16096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2813'. [ 698.501525][T16096] netlink: 'syz.0.2813': attribute type 4 has an invalid length. [ 698.504825][T16096] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2813'. [ 698.510381][ T5756] Bluetooth: hci1: Invalid handle: 0x10c4 > 0x0eff [ 698.546872][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 699.796152][ T6030] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 699.969359][ T6030] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 699.983125][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 700.003122][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 700.020293][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 700.044906][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 700.082117][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 700.088544][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 700.118776][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 700.124095][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 700.130213][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 700.136248][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 700.141962][T16109] netlink: 'syz.4.2818': attribute type 2 has an invalid length. [ 700.144317][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 700.155472][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 700.161087][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 700.166699][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 700.173816][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 700.181166][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 700.185150][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 700.209454][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 700.215207][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 700.220702][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 700.241116][T16029] Set syz1 is full, maxelem 65536 reached [ 700.252498][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 700.278695][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 700.282956][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 700.290159][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 700.345093][ T6030] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 700.349867][ T6030] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 700.364415][ T6030] usb 5-1: Product: syz [ 700.366909][ T6030] usb 5-1: Manufacturer: syz [ 700.371621][ T6030] usb 5-1: SerialNumber: syz [ 700.401098][ T6030] usb 5-1: config 0 descriptor?? [ 700.450858][ T6030] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 700.497777][T16117] syzkaller0: entered promiscuous mode [ 700.504992][T16117] syzkaller0: entered allmulticast mode [ 700.729760][T16101] netlink: 'syz.0.2814': attribute type 4 has an invalid length. [ 700.737685][T16122] serio: Serial port ptm0 [ 700.746741][T16101] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2814'. [ 701.281006][T16130] FAULT_INJECTION: forcing a failure. [ 701.281006][T16130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.301699][T16130] CPU: 1 UID: 0 PID: 16130 Comm: syz.3.2823 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.301762][T16130] Tainted: [L]=SOFTLOCKUP [ 701.301770][T16130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 701.301780][T16130] Call Trace: [ 701.301789][T16130] [ 701.301798][T16130] dump_stack_lvl+0x100/0x190 [ 701.301830][T16130] should_fail_ex.cold+0x5/0xa [ 701.301856][T16130] _copy_from_user+0x2e/0xd0 [ 701.301884][T16130] get_compat_msghdr+0xb3/0x480 [ 701.301947][T16130] ? __pfx_get_compat_msghdr+0x10/0x10 [ 701.301987][T16130] ___sys_sendmsg+0x1b6/0x1e0 [ 701.302018][T16130] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.302059][T16130] ? find_held_lock+0x2b/0x80 [ 701.302096][T16130] __sys_sendmsg+0x160/0x210 [ 701.302117][T16130] ? __pfx___sys_sendmsg+0x10/0x10 [ 701.302144][T16130] ? __pfx_ksys_write+0x10/0x10 [ 701.302176][T16130] __do_fast_syscall_32+0xe7/0x970 [ 701.302196][T16130] ? lockdep_hardirqs_on+0x78/0x100 [ 701.302223][T16130] do_fast_syscall_32+0x32/0x70 [ 701.302273][T16130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 701.302298][T16130] RIP: 0023:0xf7f07fec [ 701.302324][T16130] Code: Unable to access opcode bytes at 0xf7f07fc2. [ 701.302334][T16130] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 701.302355][T16130] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 701.302368][T16130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 701.302380][T16130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 701.302391][T16130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.302403][T16130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 701.302429][T16130] [ 701.408619][ T5753] usb 5-1: USB disconnect, device number 19 [ 701.505543][ T5753] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 701.836488][T16140] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 701.843122][T16140] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 702.113156][T16140] hsr0 speed is unknown, defaulting to 1000 [ 702.212328][T16146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.220843][T16146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.254869][T16146] ubi: mtd0 is already attached to ubi16 [ 703.118065][T16150] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 703.145476][T16152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.181218][T16152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.264568][ T5756] Bluetooth: hci3: command 0x0406 tx timeout [ 703.298866][T16152] netlink: 'syz.5.2829': attribute type 4 has an invalid length. [ 703.304046][T16152] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2829'. [ 704.359851][ T6030] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 704.631483][ T6030] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 704.636359][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 704.645539][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 704.666699][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 704.695329][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 704.714151][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 704.722383][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 704.750180][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 704.755998][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 704.762982][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 704.770712][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 704.784223][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 704.784335][T16165] gretap1: entered promiscuous mode [ 704.801120][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 704.808781][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 704.809170][T16165] batman_adv: batadv0: Adding interface: gretap1 [ 704.850405][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 704.860041][T16167] libceph: resolve '0' (ret=-3): failed [ 704.863689][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 704.864259][T16165] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 704.864297][T16165] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 704.885429][T16167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2833'. [ 704.906623][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 704.919554][T16167] overlayfs: conflicting options: userxattr,redirect_dir=on [ 704.925734][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 704.955920][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 704.965935][T16167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2833'. [ 704.968615][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 704.987746][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 705.000847][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 705.009944][ T6030] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 705.016832][ T6030] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 705.026155][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 705.041710][ T6030] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 705.082270][ T6030] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 705.104592][ T6030] usb 5-1: Product: syz [ 705.107132][ T6030] usb 5-1: Manufacturer: syz [ 705.110646][ T6030] usb 5-1: SerialNumber: syz [ 705.146844][ T6030] usb 5-1: config 0 descriptor?? [ 705.388536][T16159] netlink: 'syz.0.2830': attribute type 4 has an invalid length. [ 705.411319][T16159] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2830'. [ 705.424977][ T6030] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 705.708067][T16173] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 705.731289][T16173] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 706.488970][ T5894] usb 5-1: USB disconnect, device number 20 [ 706.511499][ T5894] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 706.565543][T16174] hsr0 speed is unknown, defaulting to 1000 [ 706.744247][T16177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.759220][T16177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.827259][T16183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'. [ 707.979173][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880288d6400: rx timeout, send abort [ 708.136217][T16187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2839'. [ 708.151184][T16187] 9p: Bad value for 'rfdno' [ 708.498384][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888024bf5400: rx timeout, send abort [ 708.502442][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880288d6400: abort rx timeout. Force session deactivation [ 709.002170][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888024bf5400: abort rx timeout. Force session deactivation [ 711.989772][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2843'. [ 712.002915][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2843'. [ 712.621896][T16196] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 712.642030][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 712.642047][ T42] audit: type=1800 audit(1783444927.232:2283): pid=16196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2842" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 712.673512][T16196] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 712.743092][T16206] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 712.746781][T16196] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 713.222342][T16196] syz.4.2842 (16196) used greatest stack depth: 19248 bytes left [ 713.775580][T16216] fuse: Unknown parameter '0x0000000000000009' [ 714.154934][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2845'. [ 714.570513][T16222] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 714.663293][ T859] hid_parser_main: 6 callbacks suppressed [ 714.663318][ T859] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3 [ 714.715585][ T859] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3 [ 714.733013][ T859] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 714.737319][ T859] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 714.758529][ T859] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 714.762482][ T859] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 714.765969][ T859] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 714.796844][ T859] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 714.811096][ T859] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 714.814807][ T859] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 714.897842][ T859] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.03 Device [syz1] on syz1 [ 715.157126][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 715.382933][T16205] ip6gre0: Master is either lo or non-ether device [ 717.774204][ T42] audit: type=1326 audit(1783444932.382:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.5.2856" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefec code=0x0 [ 717.895942][T16230] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 717.960218][T16230] netlink: 'syz.4.2851': attribute type 10 has an invalid length. [ 718.055556][T16230] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.681238][T16260] ip6t_REJECT: ECHOREPLY is not supported [ 718.817738][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2859'. [ 718.900594][T16262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.908555][T16262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.916591][T16262] netlink: 'syz.4.2860': attribute type 4 has an invalid length. [ 718.920096][T16262] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2860'. [ 719.013024][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2859'. [ 719.640215][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2861'. [ 720.319542][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2863'. [ 720.333193][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2863'. [ 720.872557][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2868'. [ 721.879374][T16297] hsr0 speed is unknown, defaulting to 1000 [ 725.063451][T16311] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 725.540996][T16321] binder: 16318:16321 ioctl 408c5333 80001300 returned -22 [ 725.909915][ T5894] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 726.065390][ T5917] block nbd1: Possible stuck request ffff888027dc7000: control (read@0,4096B). Runtime 90 seconds [ 726.163404][ T5894] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 726.168564][ T5894] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 726.176415][ T5894] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 726.190470][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.227171][T16327] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 726.276537][ T5894] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 726.492489][T16327] ubi: mtd0 is already attached to ubi16 [ 726.560401][ T6030] usb 5-1: USB disconnect, device number 21 [ 727.261794][T16340] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.270100][T16340] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.720605][T16340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.792421][T16340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.333902][T16356] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 728.339225][T16356] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 728.375958][T16356] vhci_hcd vhci_hcd.0: Device attached [ 728.418041][ T5823] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.446061][ T5823] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.451952][ T5823] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.471263][ T5823] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.596168][ T1248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.600184][T16368] FAULT_INJECTION: forcing a failure. [ 728.600184][T16368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.625907][ T1248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.627357][T16368] CPU: 2 UID: 0 PID: 16368 Comm: syz.3.2890 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.627391][T16368] Tainted: [L]=SOFTLOCKUP [ 728.627400][T16368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 728.627413][T16368] Call Trace: [ 728.627422][T16368] [ 728.627433][T16368] dump_stack_lvl+0x100/0x190 [ 728.627490][T16368] should_fail_ex.cold+0x5/0xa [ 728.627517][T16368] _copy_from_user+0x2e/0xd0 [ 728.627548][T16368] get_compat_msghdr+0xb3/0x480 [ 728.627584][T16368] ? __pfx_get_compat_msghdr+0x10/0x10 [ 728.627616][T16368] ___sys_sendmsg+0x1b6/0x1e0 [ 728.627648][T16368] ? __pfx____sys_sendmsg+0x10/0x10 [ 728.627686][T16368] ? find_held_lock+0x2b/0x80 [ 728.627729][T16368] __sys_sendmsg+0x160/0x210 [ 728.627752][T16368] ? __pfx___sys_sendmsg+0x10/0x10 [ 728.627782][T16368] ? __pfx_ksys_write+0x10/0x10 [ 728.627819][T16368] __do_fast_syscall_32+0xe7/0x970 [ 728.627840][T16368] ? lockdep_hardirqs_on+0x78/0x100 [ 728.627872][T16368] do_fast_syscall_32+0x32/0x70 [ 728.627892][T16368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 728.627918][T16368] RIP: 0023:0xf7f07fec [ 728.627945][T16368] Code: Unable to access opcode bytes at 0xf7f07fc2. [ 728.627954][T16368] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 728.627973][T16368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 728.627987][T16368] RDX: 0000000004000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 728.627998][T16368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 728.628010][T16368] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 728.628020][T16368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 728.628047][T16368] [ 728.645933][ T6048] usb 48-1: SetAddress Request (6) to port 0 [ 728.897040][T16372] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 728.912145][ T6048] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 728.915484][T16372] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 728.954764][T16370] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 728.986113][T16370] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 729.091176][T16372] hsr0 speed is unknown, defaulting to 1000 [ 729.121820][T16357] vhci_hcd: connection reset by peer [ 729.256850][T13634] vhci_hcd vhci_hcd.5: stop threads [ 729.262889][T13634] vhci_hcd vhci_hcd.5: release socket [ 729.274157][T13634] vhci_hcd vhci_hcd.5: disconnect device [ 729.978513][T16379] serio: Serial port ptm0 [ 730.202621][T16375] hsr0 speed is unknown, defaulting to 1000 [ 732.329544][T16387] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 732.566067][T16387] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 733.232006][T16388] hsr0 speed is unknown, defaulting to 1000 [ 733.868062][T16394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.873819][T16394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.965617][ T6048] usb 48-1: device descriptor read/8, error -110 [ 734.406971][ T6048] usb usb48-port1: attempt power cycle [ 734.970365][T16405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.016154][T16405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.074753][ T6048] usb usb48-port1: unable to enumerate USB device [ 736.207044][T16416] 9p: Bad value for 'wfdno' [ 736.342137][T16419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.359709][T16419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.466311][T16416] syzkaller0: entered promiscuous mode [ 736.468900][T16416] syzkaller0: entered allmulticast mode [ 736.518512][T16423] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 736.559090][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 736.736353][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 736.751645][ T10] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 736.758621][ T10] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 736.810480][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 736.816343][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.835130][ T10] usb 5-1: Product: syz [ 736.838963][ T10] usb 5-1: Manufacturer: syz [ 736.844651][ T10] usb 5-1: SerialNumber: syz [ 737.317542][ T6048] usb 5-1: USB disconnect, device number 22 [ 737.362823][T16428] syzkaller0: entered promiscuous mode [ 737.370657][T16428] syzkaller0: entered allmulticast mode [ 737.725282][T16432] smb3: Unknown parameter 'rdmaþs' [ 737.755303][ T42] audit: type=1400 audit(1783444952.373:2285): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 16 bytes leftover after parsing attributes in process `syz.4.2910'. [ 738.369810][T16444] netlink: 'syz.4.2910': attribute type 4 has an invalid length. [ 738.395369][T16444] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2910'. [ 738.434910][T16449] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 738.464554][T16449] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 741.295931][T16454] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 741.498009][T16463] FAULT_INJECTION: forcing a failure. [ 741.498009][T16463] name failslab, interval 1, probability 0, space 0, times 0 [ 741.548654][T16463] CPU: 1 UID: 0 PID: 16463 Comm: syz.4.2916 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.548688][T16463] Tainted: [L]=SOFTLOCKUP [ 741.548694][T16463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 741.548703][T16463] Call Trace: [ 741.548710][T16463] [ 741.548717][T16463] dump_stack_lvl+0x100/0x190 [ 741.548767][T16463] should_fail_ex.cold+0x5/0xa [ 741.548788][T16463] should_failslab+0xc2/0x120 [ 741.548812][T16463] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 741.548835][T16463] ? mptcp_pm_nl_add_addr_doit+0x1e5/0xc30 [ 741.548870][T16463] kmemdup_noprof+0x29/0x60 [ 741.548890][T16463] mptcp_pm_nl_add_addr_doit+0x1e5/0xc30 [ 741.548921][T16463] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 741.548946][T16463] ? rcu_is_watching+0x12/0xc0 [ 741.548965][T16463] ? trace_kmalloc+0xeb/0x110 [ 741.549013][T16463] ? __kasan_kmalloc+0xaa/0xb0 [ 741.549041][T16463] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 741.549148][T16463] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 741.549180][T16463] genl_family_rcv_msg_doit+0x214/0x300 [ 741.549209][T16463] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 741.549234][T16463] ? genl_get_cmd+0x3e7/0x760 [ 741.549265][T16463] ? bpf_lsm_capable+0x9/0x10 [ 741.549284][T16463] ? security_capable+0x80/0x260 [ 741.549317][T16463] ? ns_capable+0xd2/0xf0 [ 741.549351][T16463] genl_rcv_msg+0x560/0x800 [ 741.549372][T16463] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.549391][T16463] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 741.549424][T16463] ? __lock_acquire+0x49f/0x1a40 [ 741.549457][T16463] netlink_rcv_skb+0x159/0x420 [ 741.549488][T16463] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.549511][T16463] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 741.549552][T16463] ? netlink_deliver_tap+0x1ae/0xcc0 [ 741.549584][T16463] genl_rcv+0x28/0x40 [ 741.549613][T16463] netlink_unicast+0x585/0x850 [ 741.549646][T16463] ? __pfx_netlink_unicast+0x10/0x10 [ 741.549729][T16463] netlink_sendmsg+0x8b0/0xda0 [ 741.549760][T16463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.549789][T16463] ? apparmor_socket_sendmsg+0x15b/0x270 [ 741.549822][T16463] ____sys_sendmsg+0xa4d/0xbe0 [ 741.549850][T16463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.549881][T16463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.549923][T16463] ___sys_sendmsg+0x190/0x1e0 [ 741.549961][T16463] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.550025][T16463] ? find_held_lock+0x2b/0x80 [ 741.550074][T16463] __sys_sendmsg+0x160/0x210 [ 741.550101][T16463] ? __pfx___sys_sendmsg+0x10/0x10 [ 741.550137][T16463] ? __pfx_ksys_write+0x10/0x10 [ 741.550179][T16463] __do_fast_syscall_32+0xe7/0x970 [ 741.550203][T16463] ? lockdep_hardirqs_on+0x78/0x100 [ 741.550236][T16463] do_fast_syscall_32+0x32/0x70 [ 741.550256][T16463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 741.550283][T16463] RIP: 0023:0xf70aefec [ 741.550315][T16463] Code: Unable to access opcode bytes at 0xf70aefc2. [ 741.550325][T16463] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 741.550345][T16463] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000400 [ 741.550356][T16463] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 741.550367][T16463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 741.550377][T16463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.550387][T16463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 741.550410][T16463] [ 741.746068][ T5838] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 742.025116][ T5838] usb 5-1: device descriptor read/64, error -71 [ 742.277750][ T5838] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 742.422196][ T5838] usb 5-1: device descriptor read/64, error -71 [ 742.526380][ T5838] usb usb5-port1: attempt power cycle [ 742.685842][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2920'. [ 742.915336][ T5838] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 742.937180][ T5838] usb 5-1: device descriptor read/8, error -71 [ 743.114044][T16491] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 743.130566][T16491] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 743.186629][T16491] hsr0 speed is unknown, defaulting to 1000 [ 743.215258][T16492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2923'. [ 743.267362][T16492] netlink: 'syz.3.2923': attribute type 4 has an invalid length. [ 743.271277][T16492] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2923'. [ 743.789159][ T5838] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 743.805940][ T5838] usb 5-1: device descriptor read/8, error -71 [ 743.935807][ T5838] usb usb5-port1: unable to enumerate USB device [ 744.285977][T16502] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 744.636067][T16508] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 746.552555][T16510] slcan: can't register candev [ 746.970551][T16520] FAULT_INJECTION: forcing a failure. [ 746.970551][T16520] name failslab, interval 1, probability 0, space 0, times 0 [ 747.006447][T16520] CPU: 2 UID: 0 PID: 16520 Comm: syz.0.2930 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.006481][T16520] Tainted: [L]=SOFTLOCKUP [ 747.006488][T16520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 747.006498][T16520] Call Trace: [ 747.006505][T16520] [ 747.006513][T16520] dump_stack_lvl+0x100/0x190 [ 747.006540][T16520] should_fail_ex.cold+0x5/0xa [ 747.006562][T16520] should_failslab+0xc2/0x120 [ 747.006586][T16520] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 747.006607][T16520] ? __alloc_skb+0x5b7/0x710 [ 747.006627][T16520] ? __alloc_skb+0x140/0x710 [ 747.006648][T16520] __alloc_skb+0x140/0x710 [ 747.006665][T16520] ? __alloc_skb+0x5b7/0x710 [ 747.006682][T16520] ? __pfx___alloc_skb+0x10/0x10 [ 747.006708][T16520] alloc_skb_with_frags+0xdd/0x760 [ 747.006730][T16520] ? __might_fault+0xc5/0x140 [ 747.006759][T16520] ? __might_fault+0xc5/0x140 [ 747.006790][T16520] sock_alloc_send_pskb+0x801/0x980 [ 747.006810][T16520] ? _copy_from_iter+0x270/0x1690 [ 747.006841][T16520] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 747.006861][T16520] ? _parse_integer_limit+0x1ac/0x220 [ 747.006892][T16520] ? iov_iter_advance+0xac/0x6d0 [ 747.006918][T16520] tun_get_user+0x904/0x3c20 [ 747.006960][T16520] ? __pfx_tun_get_user+0x10/0x10 [ 747.006995][T16520] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 747.007031][T16520] ? find_held_lock+0x2b/0x80 [ 747.007053][T16520] ? tun_get+0x191/0x370 [ 747.007077][T16520] ? tun_get+0x191/0x370 [ 747.007110][T16520] tun_chr_write_iter+0xdc/0x200 [ 747.007130][T16520] vfs_write+0x6ac/0x1050 [ 747.007160][T16520] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 747.007180][T16520] ? __pfx_vfs_write+0x10/0x10 [ 747.007205][T16520] ? find_held_lock+0x2b/0x80 [ 747.007256][T16520] ksys_write+0x12a/0x250 [ 747.007284][T16520] ? __pfx_ksys_write+0x10/0x10 [ 747.007308][T16520] ? ksys_write+0x1ac/0x250 [ 747.007332][T16520] ? __pfx_ksys_write+0x10/0x10 [ 747.007364][T16520] __do_fast_syscall_32+0xe7/0x970 [ 747.007384][T16520] ? lockdep_hardirqs_on+0x78/0x100 [ 747.007412][T16520] do_fast_syscall_32+0x32/0x70 [ 747.007430][T16520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 747.007453][T16520] RIP: 0023:0xf7fd3fec [ 747.007476][T16520] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 747.007485][T16520] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 747.007503][T16520] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 747.007514][T16520] RDX: 000000000000004e RSI: 0000000000000000 RDI: 0000000000000000 [ 747.007524][T16520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 747.007534][T16520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.007545][T16520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 747.007569][T16520] [ 747.747088][T16534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2933'. [ 747.751771][T16534] netlink: 'syz.0.2933': attribute type 4 has an invalid length. [ 747.755543][T16534] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2933'. [ 748.132938][T16540] binder: BINDER_SET_CONTEXT_MGR already set [ 748.146790][T16540] binder: 16539:16540 ioctl 4018620d 800000c0 returned -16 [ 748.725983][T16550] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 748.730692][T16550] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 748.846423][T16550] hsr0 speed is unknown, defaulting to 1000 [ 749.227463][T16552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.245426][T16552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.726126][ T5756] Bluetooth: hci3: command 0x0406 tx timeout [ 750.233859][T16571] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 750.342473][T16571] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 751.531468][T16590] input: syz0 as /devices/virtual/input/input39 [ 751.551732][T16587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.573788][T16587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.681261][T16599] netlink: 'syz.4.2951': attribute type 21 has an invalid length. [ 751.718788][T16599] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2951'. [ 751.725317][T16599] netlink: 'syz.4.2951': attribute type 5 has an invalid length. [ 751.744994][T16599] netlink: 'syz.4.2951': attribute type 6 has an invalid length. [ 751.751070][T16599] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2951'. [ 751.798136][T16594] Bluetooth: hci3: command 0x0406 tx timeout [ 751.964700][ T5101] Bluetooth: hci2: command 0x0c1a tx timeout [ 752.065464][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2952'. [ 752.070110][T16605] netlink: 'syz.4.2952': attribute type 10 has an invalid length. [ 752.073893][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2952'. [ 752.090672][T16605] geneve3: entered promiscuous mode [ 752.092946][T16605] geneve3: entered allmulticast mode [ 752.276550][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.279147][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.374787][ T6048] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 752.423082][T16615] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 752.428829][T16615] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 752.517397][ T6048] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 752.523601][ T6048] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 752.528774][ T6048] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 752.544187][ T6048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.563159][T16615] hsr0 speed is unknown, defaulting to 1000 [ 752.578884][T16608] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 752.591123][ T6048] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 752.885799][ T6048] usb 5-1: USB disconnect, device number 27 [ 753.569121][T16127] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 753.970050][T16626] FAULT_INJECTION: forcing a failure. [ 753.970050][T16626] name failslab, interval 1, probability 0, space 0, times 0 [ 753.981275][T16626] CPU: 3 UID: 0 PID: 16626 Comm: syz.4.2958 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.981310][T16626] Tainted: [L]=SOFTLOCKUP [ 753.981316][T16626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 753.981327][T16626] Call Trace: [ 753.981381][T16626] [ 753.981392][T16626] dump_stack_lvl+0x100/0x190 [ 753.990555][T16626] should_fail_ex.cold+0x5/0xa [ 753.990641][T16626] should_failslab+0xc2/0x120 [ 753.990727][T16626] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 753.990753][T16626] ? __alloc_skb+0x5b7/0x710 [ 753.990929][T16626] ? __alloc_skb+0x140/0x710 [ 753.990957][T16626] __alloc_skb+0x140/0x710 [ 753.990978][T16626] ? __alloc_skb+0x5b7/0x710 [ 753.991001][T16626] ? __pfx___alloc_skb+0x10/0x10 [ 753.991032][T16626] netlink_alloc_large_skb+0x69/0x150 [ 753.991149][T16626] netlink_sendmsg+0x680/0xda0 [ 753.991186][T16626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.991224][T16626] ? apparmor_socket_sendmsg+0x15b/0x270 [ 753.991355][T16626] ____sys_sendmsg+0xa4d/0xbe0 [ 753.991386][T16626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.991419][T16626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 753.991465][T16626] ___sys_sendmsg+0x190/0x1e0 [ 753.991499][T16626] ? __pfx____sys_sendmsg+0x10/0x10 [ 753.991594][T16626] ? find_held_lock+0x2b/0x80 [ 753.991670][T16626] __sys_sendmsg+0x160/0x210 [ 753.991698][T16626] ? __pfx___sys_sendmsg+0x10/0x10 [ 753.991729][T16626] ? __pfx_ksys_write+0x10/0x10 [ 753.991771][T16626] __do_fast_syscall_32+0xe7/0x970 [ 753.991986][T16626] ? lockdep_hardirqs_on+0x78/0x100 [ 753.992022][T16626] do_fast_syscall_32+0x32/0x70 [ 753.992045][T16626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 753.992075][T16626] RIP: 0023:0xf70aefec [ 753.992109][T16626] Code: Unable to access opcode bytes at 0xf70aefc2. [ 753.992183][T16626] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 753.992207][T16626] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 753.992221][T16626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 753.992234][T16626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 753.992247][T16626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.992259][T16626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 753.992289][T16626] [ 754.186675][T16127] Bluetooth: hci2: command 0x0c1a tx timeout [ 754.768938][T16638] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003 [ 755.176930][T16628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2959'. [ 756.155559][ T5917] block nbd1: Possible stuck request ffff888027dc7000: control (read@0,4096B). Runtime 120 seconds [ 756.721023][T16658] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 756.740603][T16658] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 756.813271][T16660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.830894][T16660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.204471][T16658] hsr0 speed is unknown, defaulting to 1000 [ 757.371144][T16664] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 757.412856][T16664] overlayfs: missing 'lowerdir' [ 757.472776][T16664] 9p: Unknown access argument 18446744073709551615: -34 [ 757.591443][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 757.630867][T16668] netlink: 'syz.4.2969': attribute type 1 has an invalid length. [ 757.634672][T16668] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2969'. [ 757.878755][T16668] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 757.986195][T16668] netlink: 'syz.4.2969': attribute type 2 has an invalid length. [ 760.363297][T16694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.386111][T16694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.827438][T16714] can0: slcan on ttyS3. [ 761.067037][T16713] can0 (unregistered): slcan off ttyS3. [ 761.757885][T16745] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2984'. [ 761.946312][T16749] FAULT_INJECTION: forcing a failure. [ 761.946312][T16749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.961876][T16749] CPU: 3 UID: 0 PID: 16749 Comm: syz.3.2985 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.961918][T16749] Tainted: [L]=SOFTLOCKUP [ 761.961926][T16749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 761.961939][T16749] Call Trace: [ 761.961948][T16749] [ 761.961958][T16749] dump_stack_lvl+0x100/0x190 [ 761.961988][T16749] should_fail_ex.cold+0x5/0xa [ 761.962015][T16749] _copy_from_user+0x2e/0xd0 [ 761.962049][T16749] get_compat_msghdr+0xb3/0x480 [ 761.962119][T16749] ? __pfx_get_compat_msghdr+0x10/0x10 [ 761.962150][T16749] ? _kstrtoull+0x13c/0x1f0 [ 761.962181][T16749] ? __pfx__kstrtoull+0x10/0x10 [ 761.962216][T16749] ___sys_sendmsg+0x1b6/0x1e0 [ 761.962252][T16749] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.962281][T16749] ? __lock_acquire+0x49f/0x1a40 [ 761.962346][T16749] __sys_sendmmsg+0x309/0x440 [ 761.962376][T16749] ? __pfx___sys_sendmmsg+0x10/0x10 [ 761.962399][T16749] ? find_held_lock+0x2b/0x80 [ 761.962430][T16749] ? __mutex_unlock_slowpath+0x35d/0x930 [ 761.962488][T16749] ? fput+0x79/0x100 [ 761.962513][T16749] ? ksys_write+0x1ac/0x250 [ 761.962547][T16749] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 761.962576][T16749] ? lockdep_hardirqs_on+0x78/0x100 [ 761.962609][T16749] __do_fast_syscall_32+0xe7/0x970 [ 761.962629][T16749] ? lockdep_hardirqs_on+0x78/0x100 [ 761.962663][T16749] do_fast_syscall_32+0x32/0x70 [ 761.962686][T16749] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 761.962714][T16749] RIP: 0023:0xf7f07fec [ 761.962744][T16749] Code: Unable to access opcode bytes at 0xf7f07fc2. [ 761.962754][T16749] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 761.962777][T16749] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080007fc0 [ 761.962792][T16749] RDX: 000000000800001d RSI: 000000000000001c RDI: 0000000000000000 [ 761.962806][T16749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 761.962819][T16749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.962831][T16749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 761.962861][T16749] [ 763.054579][T16765] FAULT_INJECTION: forcing a failure. [ 763.054579][T16765] name failslab, interval 1, probability 0, space 0, times 0 [ 763.060594][T16765] CPU: 0 UID: 0 PID: 16765 Comm: syz.0.2990 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.060634][T16765] Tainted: [L]=SOFTLOCKUP [ 763.060642][T16765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 763.060655][T16765] Call Trace: [ 763.060668][T16765] [ 763.060681][T16765] dump_stack_lvl+0x100/0x190 [ 763.060716][T16765] should_fail_ex.cold+0x5/0xa [ 763.060745][T16765] should_failslab+0xc2/0x120 [ 763.060776][T16765] __kmalloc_noprof+0xfc/0x820 [ 763.060803][T16765] ? tomoyo_encode2+0xfb/0x3c0 [ 763.060840][T16765] tomoyo_encode2+0xfb/0x3c0 [ 763.060874][T16765] tomoyo_encode+0x29/0x50 [ 763.060901][T16765] tomoyo_realpath_from_path+0x18c/0x690 [ 763.060939][T16765] tomoyo_path_number_perm+0x23c/0x580 [ 763.061020][T16765] ? tomoyo_path_number_perm+0x22e/0x580 [ 763.061048][T16765] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 763.061076][T16765] ? get_pid_task+0x106/0x250 [ 763.061132][T16765] ? find_held_lock+0x2b/0x80 [ 763.061169][T16765] ? __fget_files+0x215/0x3d0 [ 763.061200][T16765] ? hook_file_ioctl_common+0x140/0x440 [ 763.061225][T16765] ? __fget_files+0x215/0x3d0 [ 763.061262][T16765] ? __fget_files+0x21f/0x3d0 [ 763.061300][T16765] security_file_ioctl_compat+0xd3/0x230 [ 763.061329][T16765] __ia32_compat_sys_ioctl+0xc2/0x360 [ 763.061408][T16765] __do_fast_syscall_32+0xe7/0x970 [ 763.061433][T16765] ? lockdep_hardirqs_on+0x78/0x100 [ 763.061470][T16765] do_fast_syscall_32+0x32/0x70 [ 763.061492][T16765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 763.061524][T16765] RIP: 0023:0xf7fd3fec [ 763.061557][T16765] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 763.061568][T16765] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 763.061593][T16765] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864b0 [ 763.061607][T16765] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 763.061622][T16765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 763.061635][T16765] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 763.061648][T16765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 763.061679][T16765] [ 763.061712][T16765] ERROR: Out of memory at tomoyo_realpath_from_path. [ 763.191238][T16767] xt_TPROXY: Can be used only with -p tcp or -p udp [ 763.562555][T16769] hsr0 speed is unknown, defaulting to 1000 [ 763.813928][ T5101] Bluetooth: hci2: unexpected cc 0x0c7b length: 1 < 5 [ 763.818654][ T5101] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 763.991057][T16777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.995050][T16777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.002005][T16777] netlink: 'syz.5.2994': attribute type 4 has an invalid length. [ 764.020008][T16777] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2994'. [ 765.686515][T16782] random: crng reseeded on system resumption [ 766.195960][T16790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2998'. [ 766.324406][T16792] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2998'. [ 766.990090][T16799] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 766.997031][T16799] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 767.600769][T16799] hsr0 speed is unknown, defaulting to 1000 [ 770.054355][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 770.244224][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 770.270748][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 770.280287][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 770.306804][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 770.331264][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.348169][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 770.389881][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.624804][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 770.629992][ T9] usbtmc 5-1:16.0: can't read capabilities [ 770.712928][T16812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3003'. [ 770.722427][T16812] netlink: 'syz.3.3003': attribute type 4 has an invalid length. [ 770.746850][T16812] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3003'. [ 771.578383][ T5838] usb 5-1: USB disconnect, device number 28 [ 772.797688][ C2] hpet: Lost 1 RTC interrupts [ 772.857836][T16833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3008'. [ 772.888319][ C2] hpet: Lost 2 RTC interrupts [ 772.951021][ C2] hpet: Lost 1 RTC interrupts [ 772.960973][T16831] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 773.002002][T16831] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 773.015265][T16831] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 773.019245][T16831] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 773.129586][ C2] hpet: Lost 1 RTC interrupts [ 773.233662][ C2] hpet: Lost 1 RTC interrupts [ 773.377571][ C2] hpet: Lost 1 RTC interrupts [ 773.477662][ C2] hpet: Lost 1 RTC interrupts [ 773.895446][T16845] cgroup: No subsys list or none specified [ 773.902812][T16845] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3011'. [ 775.445801][T16881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3018'. [ 775.455569][T16881] netlink: 'syz.0.3018': attribute type 4 has an invalid length. [ 775.461776][T16881] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3018'. [ 777.090128][T16127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 777.149270][T16892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3022'. [ 777.187678][T16892] afs: Unknown parameter 'd' [ 777.268382][T16127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 777.324289][T16127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 777.368975][T16127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 777.424844][T16127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 778.720734][T16890] hsr0 speed is unknown, defaulting to 1000 [ 779.491863][ T5838] usb 9-1: USB disconnect, device number 18 [ 779.941356][T16890] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.944711][T16890] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.992558][T16890] bridge_slave_0: entered allmulticast mode [ 779.997403][T16890] bridge_slave_0: entered promiscuous mode [ 780.013339][T16890] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.044466][T16890] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.085840][T16890] bridge_slave_1: entered allmulticast mode [ 780.092611][T16890] bridge_slave_1: entered promiscuous mode [ 780.131636][T16127] Bluetooth: hci4: command tx timeout [ 780.286715][T16919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 780.337338][T16919] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3025'. [ 780.618182][T16890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.719981][T16890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.858051][T16890] team0: Port device team_slave_0 added [ 780.999909][T16922] 9p: Bad value for 'wfdno' [ 781.111631][T16890] team0: Port device team_slave_1 added [ 781.389066][T16890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.408946][T16890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.436765][T16890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.462457][T16890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.472164][T16890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.490105][T16890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.600271][T16890] hsr_slave_0: entered promiscuous mode [ 781.604729][T16890] hsr_slave_1: entered promiscuous mode [ 781.611573][T16890] debugfs: 'hsr0' already exists in 'hsr' [ 781.629815][T16890] Cannot create hsr debugfs directory [ 781.711289][T16929] xt_TPROXY: Can be used only with -p tcp or -p udp [ 781.920478][T16934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3028'. [ 781.959622][T16934] netlink: 'syz.0.3028': attribute type 4 has an invalid length. [ 781.993301][T16934] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3028'. [ 782.213919][T16127] Bluetooth: hci4: command tx timeout [ 784.285486][T16127] Bluetooth: hci4: command tx timeout [ 784.600127][T16890] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 784.828793][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 784.857734][T16890] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 785.037005][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 785.059956][T16890] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 785.124926][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 785.138620][T16890] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 785.225276][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 786.224145][T16968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.225142][T16267] block nbd1: Possible stuck request ffff888027dc7000: control (read@0,4096B). Runtime 150 seconds [ 786.358301][T16127] Bluetooth: hci4: command tx timeout [ 786.498677][T16890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.750362][T16890] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.794528][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.833542][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.959896][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.989992][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.419441][T16890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 787.463418][T16890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 787.900442][ T5753] IPVS: starting estimator thread 0... [ 788.025972][T16967] IPVS: using max 29 ests per chain, 69600 per kthread [ 789.203482][T16987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3038'. [ 789.208532][T16987] netlink: 'syz.3.3038': attribute type 4 has an invalid length. [ 789.214421][T16987] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3038'. [ 789.563699][T12217] bridge_slave_1: left allmulticast mode [ 789.571273][T12217] bridge_slave_1: left promiscuous mode [ 789.581960][T12217] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.690448][T12217] bridge_slave_0: left allmulticast mode [ 789.693261][T12217] bridge_slave_0: left promiscuous mode [ 789.696741][T12217] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.748109][T12217] pim6reg: left allmulticast mode [ 790.009768][T12217] erspan0 (unregistering): left promiscuous mode [ 790.143121][T12217] gretap0 (unregistering): left promiscuous mode [ 790.485134][T12217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.509919][T12217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.550038][T12217] bond0 (unregistering): Released all slaves [ 791.077118][ T5453] 8021q: adding VLAN 0 to HW filter on device eth10 [ 791.167656][T12217] : left promiscuous mode [ 791.198815][T17007] FAULT_INJECTION: forcing a failure. [ 791.198815][T17007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.238523][T17007] CPU: 3 UID: 0 PID: 17007 Comm: syz.3.3041 Tainted: G L syzkaller #0 PREEMPT(full) [ 791.238564][T17007] Tainted: [L]=SOFTLOCKUP [ 791.238574][T17007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 791.238588][T17007] Call Trace: [ 791.238599][T17007] [ 791.238619][T17007] dump_stack_lvl+0x100/0x190 [ 791.238655][T17007] should_fail_ex.cold+0x5/0xa [ 791.238684][T17007] _copy_from_user+0x2e/0xd0 [ 791.238720][T17007] comedi_compat_ioctl+0x30c/0xe20 [ 791.238849][T17007] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 791.243728][T17007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 791.243790][T17007] ? do_vfs_ioctl+0x226/0x13e0 [ 791.243812][T17007] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 791.243837][T17007] ? find_held_lock+0x2b/0x80 [ 791.243856][T17007] ? __fget_files+0x215/0x3d0 [ 791.243876][T17007] ? hook_file_ioctl_common+0x140/0x440 [ 791.243899][T17007] ? __fget_files+0x21f/0x3d0 [ 791.243925][T17007] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 791.243948][T17007] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 791.243971][T17007] __do_fast_syscall_32+0xe7/0x970 [ 791.243989][T17007] ? lockdep_hardirqs_on+0x78/0x100 [ 791.244015][T17007] do_fast_syscall_32+0x32/0x70 [ 791.244030][T17007] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 791.244050][T17007] RIP: 0023:0xf7f07fec [ 791.244076][T17007] Code: Unable to access opcode bytes at 0xf7f07fc2. [ 791.244084][T17007] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 791.244100][T17007] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008008640b [ 791.244111][T17007] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 791.244121][T17007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 791.244130][T17007] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 791.244139][T17007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 791.244160][T17007] [ 791.666998][T12217] tipc: Left network mode [ 791.710793][T16890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.746910][ T42] audit: type=1800 audit(1783445006.366:2286): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3043" name="bus" dev="tmpfs" ino=822 res=0 errno=0 [ 791.923459][ T5453] 8021q: adding VLAN 0 to HW filter on device eth11 [ 792.590098][ T5151] udevd[5151]: worker [15326] /devices/virtual/block/nbd1 is taking a long time [ 792.601912][T16890] veth0_vlan: entered promiscuous mode [ 792.736920][T16890] veth1_vlan: entered promiscuous mode [ 792.878225][ T42] audit: type=1800 audit(1783445007.497:2287): pid=17047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3050" name="file1" dev="tmpfs" ino=2842 res=0 errno=0 [ 793.049244][T17051] fuse: Unknown parameter 'fp0x0000000000000005' [ 793.191834][ T5453] 8021q: adding VLAN 0 to HW filter on device eth12 [ 793.674156][T16890] veth0_macvtap: entered promiscuous mode [ 793.720849][T16890] veth1_macvtap: entered promiscuous mode [ 793.907781][T16890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.922490][T16890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.944329][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.973435][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.120147][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.130067][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.705996][ T1248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.749750][ T1248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.872446][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.881142][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.945748][ T5453] 8021q: adding VLAN 0 to HW filter on device eth13 [ 795.050565][T17077] FAULT_INJECTION: forcing a failure. [ 795.050565][T17077] name failslab, interval 1, probability 0, space 0, times 0 [ 795.060037][T17077] CPU: 0 UID: 0 PID: 17077 Comm: syz.0.3055 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.060073][T17077] Tainted: [L]=SOFTLOCKUP [ 795.060080][T17077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 795.060093][T17077] Call Trace: [ 795.060103][T17077] [ 795.060114][T17077] dump_stack_lvl+0x100/0x190 [ 795.060156][T17077] should_fail_ex.cold+0x5/0xa [ 795.060178][T17077] ? __lock_acquire+0x49f/0x1a40 [ 795.060210][T17077] should_failslab+0xc2/0x120 [ 795.060237][T17077] kmem_cache_alloc_noprof+0x91/0x6a0 [ 795.060262][T17077] ? dst_alloc+0x99/0x1a0 [ 795.060335][T17077] dst_alloc+0x99/0x1a0 [ 795.060352][T17077] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 795.060413][T17077] rt_dst_alloc+0x35/0x3a0 [ 795.060476][T17077] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 795.060512][T17077] ip_route_output_key_hash+0x118/0x2b0 [ 795.060538][T17077] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 795.060570][T17077] ? __pfx__get_random_bytes+0x10/0x10 [ 795.060689][T17077] ip_route_output_flow+0x27/0x150 [ 795.060716][T17077] tcp_v4_connect+0x8e8/0x1b40 [ 795.060751][T17077] ? __pfx_tcp_v4_connect+0x10/0x10 [ 795.060772][T17077] ? mptcp_token_new_connect+0x1e4/0x620 [ 795.060831][T17077] mptcp_connect+0x4c6/0xaf0 [ 795.060863][T17077] __inet_stream_connect+0x208/0xfa0 [ 795.060892][T17077] ? __pfx___inet_stream_connect+0x10/0x10 [ 795.060948][T17077] ? kasan_save_track+0x14/0x30 [ 795.060972][T17077] ? __kasan_kmalloc+0xaa/0xb0 [ 795.060997][T17077] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 795.061030][T17077] ? do_raw_spin_lock+0x128/0x260 [ 795.061052][T17077] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 795.061084][T17077] tcp_sendmsg_fastopen+0x3ed/0x750 [ 795.061117][T17077] mptcp_sendmsg+0x1641/0x2210 [ 795.061163][T17077] ? aa_sk_perm+0x309/0xaa0 [ 795.061187][T17077] ? __pfx_aa_sk_perm+0x10/0x10 [ 795.061210][T17077] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 795.061242][T17077] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 795.061283][T17077] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 795.061318][T17077] inet_sendmsg+0x11c/0x140 [ 795.061343][T17077] ____sys_sendmsg+0x9c9/0xbe0 [ 795.061373][T17077] ? __pfx_inet_sendmsg+0x10/0x10 [ 795.061401][T17077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 795.061437][T17077] ? _kstrtoull+0x13c/0x1f0 [ 795.061472][T17077] ? __pfx__kstrtoull+0x10/0x10 [ 795.061509][T17077] ___sys_sendmsg+0x190/0x1e0 [ 795.061545][T17077] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.061574][T17077] ? __lock_acquire+0x49f/0x1a40 [ 795.061647][T17077] __sys_sendmmsg+0x309/0x440 [ 795.061671][T17077] ? __pfx___sys_sendmmsg+0x10/0x10 [ 795.061694][T17077] ? find_held_lock+0x2b/0x80 [ 795.061728][T17077] ? __mutex_unlock_slowpath+0x35d/0x930 [ 795.061782][T17077] ? fput+0x79/0x100 [ 795.061807][T17077] ? ksys_write+0x1ac/0x250 [ 795.061846][T17077] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 795.061876][T17077] ? lockdep_hardirqs_on+0x78/0x100 [ 795.061938][T17077] __do_fast_syscall_32+0xe7/0x970 [ 795.061961][T17077] ? lockdep_hardirqs_on+0x78/0x100 [ 795.061997][T17077] do_fast_syscall_32+0x32/0x70 [ 795.062020][T17077] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 795.062044][T17077] RIP: 0023:0xf7fd3fec [ 795.062073][T17077] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 795.062081][T17077] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 795.062102][T17077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004980 [ 795.062115][T17077] RDX: 0000000000000001 RSI: 0000000020008000 RDI: 0000000000000000 [ 795.062128][T17077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 795.062148][T17077] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 795.062161][T17077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 795.062193][T17077] [ 796.524107][T17096] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 797.649425][T17111] Bluetooth: MGMT ver 1.23 [ 797.653483][T17111] netlink: 'syz.5.3062': attribute type 2 has an invalid length. [ 797.664475][T17111] netlink: 'syz.5.3062': attribute type 1 has an invalid length. [ 797.932980][T12217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.956591][T12217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.988168][T17114] netlink: 'syz.6.3064': attribute type 5 has an invalid length. [ 798.808211][T12217] team0 (unregistering): Port device team_slave_1 removed [ 798.934661][T12217] team0 (unregistering): Port device team_slave_0 removed [ 799.549285][T17122] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 799.971727][T17136] syzkaller0: entered promiscuous mode [ 799.980815][T17136] syzkaller0: entered allmulticast mode [ 800.391335][T17145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.409076][T17145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.779110][T17149] netlink: 'syz.6.3076': attribute type 1 has an invalid length. [ 800.805787][ T42] audit: type=1804 audit(1783445015.397:2288): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3076" name="file1" dev="ramfs" ino=74413 res=1 errno=0 [ 800.885321][T17149] ipvlan2: entered allmulticast mode [ 800.893200][T17149] dummy0: entered allmulticast mode [ 801.487617][T12217] IPVS: stop unused estimator thread 0... [ 802.726069][T17176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.735792][T17176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.411565][T14069] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 803.476210][T16127] Bluetooth: hci2: command 0x0c1a tx timeout [ 803.551737][T14069] usb 11-1: Using ep0 maxpacket: 8 [ 803.556532][T14069] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 803.561186][T14069] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 803.583527][T14069] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 803.590485][T14069] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 803.615809][T14069] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 803.638868][T14069] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 803.661214][T14069] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.581834][T16127] Bluetooth: hci2: command 0x0c1a tx timeout [ 806.241914][ T6030] usb 11-1: USB disconnect, device number 2 [ 807.798809][ T5845] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 808.100742][ T5845] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 808.107667][ T5845] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 808.122445][ T5845] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 808.124069][T17232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3096'. [ 808.128026][ T5845] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.164734][T17232] netlink: 'syz.0.3096': attribute type 4 has an invalid length. [ 808.182053][T17223] raw-gadget.6 gadget.6: fail, usb_ep_enable returned -22 [ 808.185220][T17232] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3096'. [ 808.194611][ T5845] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 808.450133][T17223] ubi: mtd0 is already attached to ubi16 [ 808.522438][T14069] usb 11-1: USB disconnect, device number 3 [ 809.476870][T17249] openvswitch: netlink: IP tunnel dst address not specified [ 809.511416][T14069] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 809.682093][T14069] usb 11-1: Using ep0 maxpacket: 8 [ 809.690794][T14069] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 809.698468][T14069] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 809.750142][T14069] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 809.770433][T14069] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 809.776438][T14069] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 809.803637][T14069] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 809.829843][T14069] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.013726][T17259] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 811.104410][ T6030] hid-generic 0001:0000:10001.0007: item fetching failed at offset 0/4 [ 811.118638][ T6030] hid-generic 0001:0000:10001.0007: probe with driver hid-generic failed with error -22 [ 811.439840][ T5101] Bluetooth: hci3: unexpected event for opcode 0x202d [ 812.285134][T14069] usb 11-1: USB disconnect, device number 4 [ 812.707592][T17282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.819874][T17287] ubi: mtd0 is already attached to ubi16 [ 813.471141][ T34] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 813.566726][T17293] Invalid source name [ 813.598202][T17293] UBIFS error (pid: 17293): cannot open "./file0", error -22 [ 813.622565][ T34] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 813.641917][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.652226][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.661720][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 813.690160][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.695318][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.728786][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 813.742476][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.754688][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.760146][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 813.764887][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.770819][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.777998][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 813.781970][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.784979][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.791592][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 813.797287][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.803821][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.810831][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 813.816821][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.824490][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.833017][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 813.838646][ T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 813.844901][ T34] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 813.852073][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 813.859055][ T34] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 813.865272][ T34] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 813.886436][ T34] usb 11-1: Product: syz [ 813.889361][ T34] usb 11-1: Manufacturer: syz [ 813.892875][ T34] usb 11-1: SerialNumber: syz [ 813.897855][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.902810][ T34] usb 11-1: config 0 descriptor?? [ 813.935070][ T34] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 813.948336][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.152712][T17292] netlink: 'syz.6.3111': attribute type 4 has an invalid length. [ 814.167576][T17292] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3111'. [ 814.416837][ T5845] usb 11-1: USB disconnect, device number 5 [ 814.441595][ T5845] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 814.748424][T17298] Bluetooth: MGMT ver 1.23 [ 815.948731][T17301] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3113'. [ 816.226619][T17303] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 816.242539][T17303] overlayfs: missing 'lowerdir' [ 816.305752][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3114'. [ 816.321793][T17303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.326031][T17303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.352019][T17303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.360248][T17303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.878305][ T5101] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 816.883799][T16127] Bluetooth: hci2: command 0x0c1a tx timeout [ 816.973098][ T5917] block nbd1: Possible stuck request ffff888027dc7000: control (read@0,4096B). Runtime 180 seconds [ 817.407989][T17316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3118'. [ 817.478200][T17316] netlink: 'syz.0.3118': attribute type 4 has an invalid length. [ 817.481581][T17316] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3118'. [ 818.314527][ T6048] usb 10-1: USB disconnect, device number 4 [ 818.583741][T17325] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 818.622104][T17325] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 819.086160][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 819.165370][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 819.235898][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 819.322875][T17333] hsr0 speed is unknown, defaulting to 1000 [ 819.399494][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 819.440424][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 820.902152][T17332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3123'. [ 821.518210][T17330] hsr0 speed is unknown, defaulting to 1000 [ 821.641144][ T5101] Bluetooth: hci1: command tx timeout [ 821.856982][T17355] bond3 (unregistering): Released all slaves [ 823.716420][ T5101] Bluetooth: hci1: command tx timeout [ 825.790556][ T5101] Bluetooth: hci1: command tx timeout [ 826.578647][T17330] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.633404][T17330] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.650735][T17330] bridge_slave_0: entered allmulticast mode [ 826.725267][T17330] bridge_slave_0: entered promiscuous mode [ 826.772841][T17330] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.864100][T17330] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.867486][T17330] bridge_slave_1: entered allmulticast mode [ 826.890511][T17330] bridge_slave_1: entered promiscuous mode [ 826.890601][ T5151] udevd[5151]: worker [15326] /devices/virtual/block/nbd1 timeout; kill it [ 826.912138][ T5151] udevd[5151]: seq 18886 '/devices/virtual/block/nbd1' killed [ 827.010829][T17330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.029674][T17330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.256351][T17330] team0: Port device team_slave_0 added [ 827.264084][T17330] team0: Port device team_slave_1 added [ 827.416091][T17382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3131'. [ 827.427569][T17330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.444898][T17330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.461351][T17330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.469646][T17330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.473940][T17330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.496796][T17330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.870468][ T5101] Bluetooth: hci1: command tx timeout [ 828.140743][T17330] hsr_slave_0: entered promiscuous mode [ 828.149907][T17330] hsr_slave_1: entered promiscuous mode [ 828.167521][T17330] debugfs: 'hsr0' already exists in 'hsr' [ 828.200367][T17330] Cannot create hsr debugfs directory [ 830.779406][T17399] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 830.787409][T17390] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3132'. [ 831.211856][T17330] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 831.358830][T17330] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 831.375508][T17330] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 831.426291][T17330] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 831.435961][T17330] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 831.517993][T17330] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 831.569541][T17330] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 831.592783][ T42] audit: type=1400 audit(1783445046.219:2289): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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q: adding VLAN 0 to HW filter on device netdevsim3 [ 831.739589][T17415] serio: Serial port ptm0 [ 831.863245][ T5845] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 832.068707][ T5845] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 832.082785][ T5845] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 832.101480][ T5845] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 832.138450][T17330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.139653][ T5845] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 832.168337][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 832.178079][ T5845] usb 5-1: Product: syz [ 832.180018][ T5845] usb 5-1: Manufacturer: syz [ 832.181763][ T5845] usb 5-1: SerialNumber: syz [ 832.205271][T17330] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.252600][ T1248] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.255492][ T1248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.301759][ T1248] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.306466][ T1248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.489254][ T5845] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 832.672993][T17412] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3137'. [ 832.814168][ T5845] usb 5-1: USB disconnect, device number 29 [ 832.842499][ T5845] usblp0: removed [ 833.799660][T17330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.506891][T17448] comedi comedi3: comedi_config --init_data is deprecated [ 834.777623][T17330] veth0_vlan: entered promiscuous mode [ 834.801724][T17330] veth1_vlan: entered promiscuous mode [ 834.890224][T17330] veth0_macvtap: entered promiscuous mode [ 834.919617][T17330] veth1_macvtap: entered promiscuous mode [ 834.966335][T17458] syzkaller0: entered promiscuous mode [ 834.985015][T17458] syzkaller0: entered allmulticast mode [ 835.024010][T17458] tc action pedit 'at' offset -999504316 out of bounds [ 835.030297][T17458] tc action pedit 'at' offset -999504316 out of bounds [ 835.034055][T17458] tc action pedit 'at' offset -999504316 out of bounds [ 835.038281][T17458] tc action pedit 'at' offset -999504316 out of bounds [ 835.056007][T17458] tc action pedit 'at' offset -999504316 out of bounds [ 835.059440][T17458] tc action pedit 'at' offset -999504316 out of bounds [ 835.062532][T17458] tc action pedit 'at' offset -999504316 out of bounds [ 835.065720][T17458] tc action pedit 'at' offset -999504316 out of bounds [ 835.069167][T17458] tc action pedit 'at' offset -999504316 out of bounds [ 835.074789][T17458] tc action pedit 'at' offset -999504316 out of bounds [ 835.079082][T17458] 0: reclassify loop, rule prio 0, protocol 800 [ 835.102772][T17330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.120680][T17458] FAULT_INJECTION: forcing a failure. [ 835.120680][T17458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.133411][T17330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.136970][T17458] CPU: 2 UID: 0 PID: 17458 Comm: syz.0.3144 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.137003][T17458] Tainted: [L]=SOFTLOCKUP [ 835.137010][T17458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 835.137023][T17458] Call Trace: [ 835.137038][T17458] [ 835.137046][T17458] dump_stack_lvl+0x100/0x190 [ 835.137071][T17458] should_fail_ex.cold+0x5/0xa [ 835.137090][T17458] _copy_to_user+0x32/0xd0 [ 835.137114][T17458] simple_read_from_buffer+0xcb/0x170 [ 835.137146][T17458] proc_fail_nth_read+0x1af/0x230 [ 835.137172][T17458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 835.137196][T17458] ? rw_verify_area+0xce/0x6d0 [ 835.137219][T17458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 835.137243][T17458] vfs_read+0x1e4/0xb40 [ 835.137273][T17458] ? __pfx_vfs_read+0x10/0x10 [ 835.137295][T17458] ? find_held_lock+0x2b/0x80 [ 835.137318][T17458] ? __fget_files+0x215/0x3d0 [ 835.137350][T17458] ? __fget_files+0x21f/0x3d0 [ 835.137386][T17458] ksys_read+0x12a/0x250 [ 835.137411][T17458] ? __pfx_ksys_read+0x10/0x10 [ 835.137445][T17458] do_int80_emulation+0x14b/0x720 [ 835.137469][T17458] asm_int80_emulation+0x1a/0x20 [ 835.137490][T17458] RIP: 0023:0xf71d71eb [ 835.137507][T17458] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 835.137525][T17458] RSP: 002b:00000000f54964bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 835.137545][T17458] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54965d0 [ 835.137556][T17458] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 835.137565][T17458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 835.137577][T17458] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 835.137588][T17458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 835.137611][T17458] [ 835.544676][ T42] audit: type=1326 audit(1783445050.149:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17442 comm="syz.6.3141" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8008 code=0x7ffc0000 [ 835.564715][ T42] audit: type=1326 audit(1783445050.149:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17442 comm="syz.6.3141" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8008 code=0x7ffc0000 [ 835.600055][ T42] audit: type=1326 audit(1783445050.149:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17442 comm="syz.6.3141" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8008 code=0x7ffc0000 [ 835.650764][ T42] audit: type=1326 audit(1783445050.149:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17442 comm="syz.6.3141" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8008 code=0x7ffc0000 [ 835.686100][ T42] audit: type=1326 audit(1783445050.149:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17442 comm="syz.6.3141" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8008 code=0x7ffc0000 [ 835.712886][ T42] audit: type=1326 audit(1783445050.149:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17442 comm="syz.6.3141" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8008 code=0x7ffc0000 [ 835.773226][ T42] audit: type=1326 audit(1783445050.149:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17442 comm="syz.6.3141" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8008 code=0x7ffc0000 [ 835.809939][ T42] audit: type=1326 audit(1783445050.149:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17442 comm="syz.6.3141" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8008 code=0x7ffc0000 [ 835.886303][ T42] audit: type=1326 audit(1783445050.149:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17442 comm="syz.6.3141" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff8008 code=0x7ffc0000 [ 835.971768][T17062] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.987969][T17062] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.170221][T17461] FAULT_INJECTION: forcing a failure. [ 836.170221][T17461] name failslab, interval 1, probability 0, space 0, times 0 [ 836.192649][T17461] CPU: 3 UID: 0 PID: 17461 Comm: syz.0.3145 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.192680][T17461] Tainted: [L]=SOFTLOCKUP [ 836.192686][T17461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 836.192696][T17461] Call Trace: [ 836.192707][T17461] [ 836.192717][T17461] dump_stack_lvl+0x100/0x190 [ 836.192744][T17461] should_fail_ex.cold+0x5/0xa [ 836.192765][T17461] should_failslab+0xc2/0x120 [ 836.192785][T17461] __kmalloc_noprof+0xfc/0x820 [ 836.192802][T17461] ? virtqueue_add_split+0x25c/0x1d30 [ 836.192825][T17461] virtqueue_add_split+0x25c/0x1d30 [ 836.192842][T17461] ? __lock_acquire+0x49f/0x1a40 [ 836.192864][T17461] ? p9pdu_vwritef+0x57f/0x1dc0 [ 836.192929][T17461] ? __pfx_virtqueue_add_split+0x10/0x10 [ 836.192944][T17461] ? lock_acquire+0x1b9/0x370 [ 836.192964][T17461] ? find_held_lock+0x2b/0x80 [ 836.192980][T17461] ? __virt_addr_valid+0x22a/0x430 [ 836.192995][T17461] ? __virt_addr_valid+0x22a/0x430 [ 836.193012][T17461] virtqueue_add_sgs+0x207/0x2b0 [ 836.193036][T17461] p9_virtio_request+0x26d/0x6d0 [ 836.193065][T17461] ? __pfx_p9_virtio_request+0x10/0x10 [ 836.193086][T17461] ? p9_client_prepare_req+0x112/0x4d0 [ 836.193102][T17461] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 836.193121][T17461] ? __lock_acquire+0x49f/0x1a40 [ 836.193145][T17461] p9_client_rpc+0x359/0xd60 [ 836.193198][T17461] ? __pfx_p9_client_rpc+0x10/0x10 [ 836.193216][T17461] ? idr_alloc_u32+0x22b/0x320 [ 836.193243][T17461] ? find_held_lock+0x2b/0x80 [ 836.193258][T17461] ? find_held_lock+0x2b/0x80 [ 836.193273][T17461] ? p9_fid_create+0x26d/0x460 [ 836.193288][T17461] ? rcu_is_watching+0x12/0xc0 [ 836.193309][T17461] p9_client_attach+0x153/0x2b0 [ 836.193328][T17461] ? __pfx_p9_client_attach+0x10/0x10 [ 836.193344][T17461] ? v9fs_fid_lookup+0x500/0xf50 [ 836.193426][T17461] v9fs_fid_lookup+0x9a4/0xf50 [ 836.193449][T17461] ? __pfx_v9fs_mapped_dotl_flags+0x10/0x10 [ 836.193473][T17461] v9fs_vfs_lookup+0x1a1/0x5c0 [ 836.193491][T17461] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 836.193516][T17461] v9fs_vfs_atomic_open_dotl+0x87e/0xd90 [ 836.193535][T17461] ? rcu_is_watching+0x12/0xc0 [ 836.193551][T17461] ? __pfx_v9fs_vfs_atomic_open_dotl+0x10/0x10 [ 836.193571][T17461] ? privileged_wrt_inode_uidgid+0xc1/0x1d0 [ 836.193589][T17461] ? capable_wrt_inode_uidgid+0xde/0x170 [ 836.193606][T17461] ? generic_permission+0xae/0x800 [ 836.193627][T17461] ? inode_permission+0x374/0x620 [ 836.193646][T17461] atomic_open+0x179/0x430 [ 836.193660][T17461] ? __pfx_v9fs_vfs_atomic_open_dotl+0x10/0x10 [ 836.193682][T17461] path_openat+0x1ce9/0x4280 [ 836.193713][T17461] ? __pfx_path_openat+0x10/0x10 [ 836.193740][T17461] do_file_open+0x20e/0x430 [ 836.193760][T17461] ? __lock_acquire+0x49f/0x1a40 [ 836.193781][T17461] ? __pfx_do_file_open+0x10/0x10 [ 836.193817][T17461] ? _raw_spin_unlock+0x28/0x50 [ 836.193837][T17461] ? alloc_fd+0x471/0x7a0 [ 836.193864][T17461] do_sys_openat2+0x10f/0x1e0 [ 836.193882][T17461] ? __pfx_do_sys_openat2+0x10/0x10 [ 836.193901][T17461] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 836.193928][T17461] __ia32_compat_sys_openat+0x12d/0x210 [ 836.193947][T17461] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 836.193965][T17461] ? fput+0x79/0x100 [ 836.193980][T17461] ? ksys_write+0x1ac/0x250 [ 836.193999][T17461] ? __pfx_ksys_write+0x10/0x10 [ 836.194024][T17461] __do_fast_syscall_32+0xe7/0x970 [ 836.194039][T17461] ? lockdep_hardirqs_on+0x78/0x100 [ 836.194061][T17461] do_fast_syscall_32+0x32/0x70 [ 836.194076][T17461] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 836.194095][T17461] RIP: 0023:0xf7fd3fec [ 836.194119][T17461] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 836.194125][T17461] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 836.194142][T17461] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000400 [ 836.194151][T17461] RDX: 0000000000000040 RSI: 0000000000000083 RDI: 0000000000000000 [ 836.194160][T17461] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 836.194169][T17461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.194177][T17461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 836.194197][T17461] [ 836.669262][T17062] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.684749][T14922] wlan1: Trigger new scan to find an IBSS to join [ 836.691773][T17062] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.106093][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.109019][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.420658][ T1248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.423650][ T1248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.954711][T17470] netlink: 'syz.0.3148': attribute type 1 has an invalid length. [ 838.197199][T17470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 838.540429][T17474] bond2: (slave dummy0): making interface the new active one [ 838.581672][T17474] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 839.202629][T17493] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 839.760444][T17500] netlink: 'syz.0.3155': attribute type 1 has an invalid length. [ 840.173422][T17502] macvtap1: entered allmulticast mode [ 840.317119][T17502] macvtap2: entered allmulticast mode [ 840.565753][T17502] bond3: (slave bridge1): making interface the new active one [ 840.783361][T17502] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 841.184576][T17507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3156'. [ 841.710100][ T1248] wlan1: Trigger new scan to find an IBSS to join [ 842.239032][T17518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3160'. [ 842.565130][T17524] serio: Serial port ptm0 [ 843.466090][T17532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3166'. [ 843.466756][T17532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3166'. [ 844.097190][ T1248] wlan1: Creating new IBSS network, BSSID b2:a8:24:7e:94:3b [ 844.631447][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3167'. [ 845.020394][ T6006] ------------[ cut here ]------------ [ 845.028217][ T6006] time_after(jiffies, timeout) [ 845.028239][ T6006] WARNING: io_uring/io_uring.c:2365 at io_ring_exit_work+0x479/0xd7a, CPU#2: kworker/u33:10/6006 [ 845.043047][ T6006] Modules linked in: [ 845.048230][ T6006] CPU: 2 UID: 0 PID: 6006 Comm: kworker/u33:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.054103][ T6006] Tainted: [L]=SOFTLOCKUP [ 845.084385][ T6006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 845.090201][ T6006] Workqueue: iou_exit io_ring_exit_work [ 845.092778][ T6006] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 845.122212][ T6006] Code: 8e e8 5b 5e 43 01 48 8b 05 f4 a4 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 62 d9 d3 00 4d 85 ff 79 12 e8 b8 de d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 a6 de d3 00 48 8b 74 24 20 [ 845.145789][ T6006] RSP: 0000:ffffc90006f6faa0 EFLAGS: 00010293 [ 845.167426][ T6006] RAX: 0000000000000000 RBX: ffff88801416a710 RCX: ffffffff81354d9e [ 845.175836][ T6006] RDX: ffff888028978000 RSI: ffffffff81354da8 RDI: ffff888028978000 [ 845.225194][ T6006] RBP: ffffc90006f6fc38 R08: 0000000000000007 R09: 0000000000000000 [ 845.231969][ T6006] R10: fffffffffffffffb R11: 0000000000000000 R12: ffff88801416a000 [ 845.252170][ T6006] R13: dffffc0000000000 R14: 000000001416a700 R15: fffffffffffffffb [ 845.256894][ T6006] FS: 0000000000000000(0000) GS:ffff888096df5000(0000) knlGS:0000000000000000 [ 845.262781][ T6006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 845.267786][ T6006] CR2: 00000000f50d67d7 CR3: 0000000051730000 CR4: 0000000000352ef0 [ 845.273575][ T6006] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 845.277400][ T6006] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 845.282273][ T6006] Call Trace: [ 845.283937][ T6006] [ 845.285207][ T6006] ? do_raw_spin_lock+0x128/0x260 [ 845.303204][ T6006] ? __pfx_io_ring_exit_work+0x10/0x10 [ 845.306321][ T6006] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 845.309913][ T6006] ? debug_object_deactivate+0x2e4/0x3b0 [ 845.314192][ T6006] ? rcu_is_watching+0x12/0xc0 [ 845.316948][ T6006] process_one_work+0xa23/0x1940 [ 845.321039][ T6006] ? __pfx_process_one_work+0x10/0x10 [ 845.331773][ T6006] ? __pfx_io_ring_exit_work+0x10/0x10 [ 845.334859][ T6006] worker_thread+0x5ef/0xe50 [ 845.339637][ T6006] ? __pfx_worker_thread+0x10/0x10 [ 845.345666][ T6006] ? kthread+0x13a/0x450 [ 845.351883][ T6006] ? __pfx_worker_thread+0x10/0x10 [ 845.361352][ T6006] kthread+0x370/0x450 [ 845.363317][ T6006] ? __pfx_kthread+0x10/0x10 [ 845.366223][ T6006] ret_from_fork+0x72b/0xd50 [ 845.371737][ T6006] ? __pfx_ret_from_fork+0x10/0x10 [ 845.381638][ T6006] ? __switch_to+0x800/0x10f0 [ 845.384866][ T6006] ? __pfx_kthread+0x10/0x10 [ 845.390471][ T6006] ret_from_fork_asm+0x1a/0x30 [ 845.407378][ T6006] [ 845.410836][ T6006] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 845.416148][ T6006] CPU: 2 UID: 0 PID: 6006 Comm: kworker/u33:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.429388][ T6006] Tainted: [L]=SOFTLOCKUP [ 845.431077][ T6006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 845.449899][ T6006] Workqueue: iou_exit io_ring_exit_work [ 845.454685][ T6006] Call Trace: [ 845.456955][ T6006] [ 845.458628][ T6006] dump_stack_lvl+0x100/0x190 [ 845.461564][ T6006] vpanic+0x552/0x970 [ 845.464552][ T6006] ? __pfx_vpanic+0x10/0x10 [ 845.467663][ T6006] panic+0xd1/0xe0 [ 845.469887][ T6006] ? __pfx_panic+0x10/0x10 [ 845.472113][ T6006] ? check_panic_on_warn+0x1f/0x90 [ 845.475117][ T6006] check_panic_on_warn.cold+0x19/0x34 [ 845.479454][ T6006] ? io_ring_exit_work+0x479/0xd7a [ 845.482456][ T6006] __warn.cold+0x191/0x318 [ 845.484682][ T6006] __report_bug+0x30f/0x440 [ 845.487241][ T6006] ? io_ring_exit_work+0x479/0xd7a [ 845.495080][ T6006] ? __pfx___report_bug+0x10/0x10 [ 845.497478][ T6006] ? rcu_is_watching+0x12/0xc0 [ 845.499126][ T6006] ? trace_contention_end+0x126/0x160 [ 845.500925][ T6006] ? __mutex_lock+0x26d/0x1bd0 [ 845.502636][ T6006] ? io_ring_exit_work+0x422/0xd7a [ 845.504841][ T6006] ? find_held_lock+0x2b/0x80 [ 845.507586][ T6006] ? io_ring_exit_work+0x434/0xd7a [ 845.510656][ T6006] ? io_ring_exit_work+0x479/0xd7a [ 845.513478][ T6006] report_bug+0xb2/0x220 [ 845.516228][ T6006] ? io_ring_exit_work+0x479/0xd7a [ 845.519560][ T6006] handle_bug+0x16a/0x2a0 [ 845.521911][ T6006] exc_invalid_op+0x17/0x50 [ 845.524244][ T6006] asm_exc_invalid_op+0x1a/0x20 [ 845.526581][ T6006] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 845.531043][ T6006] Code: 8e e8 5b 5e 43 01 48 8b 05 f4 a4 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 62 d9 d3 00 4d 85 ff 79 12 e8 b8 de d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 a6 de d3 00 48 8b 74 24 20 [ 845.554361][ T6006] RSP: 0000:ffffc90006f6faa0 EFLAGS: 00010293 [ 845.557920][ T6006] RAX: 0000000000000000 RBX: ffff88801416a710 RCX: ffffffff81354d9e [ 845.561016][ T6006] RDX: ffff888028978000 RSI: ffffffff81354da8 RDI: ffff888028978000 [ 845.563996][ T6006] RBP: ffffc90006f6fc38 R08: 0000000000000007 R09: 0000000000000000 [ 845.567001][ T6006] R10: fffffffffffffffb R11: 0000000000000000 R12: ffff88801416a000 [ 845.570347][ T6006] R13: dffffc0000000000 R14: 000000001416a700 R15: fffffffffffffffb [ 845.589641][ T6006] ? io_ring_exit_work+0x46e/0xd7a [ 845.591341][ T6006] ? io_ring_exit_work+0x478/0xd7a [ 845.593056][ T6006] ? do_raw_spin_lock+0x128/0x260 [ 845.595038][ T6006] ? __pfx_io_ring_exit_work+0x10/0x10 [ 845.598663][ T6006] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 845.617743][ T6006] ? debug_object_deactivate+0x2e4/0x3b0 [ 845.620284][ T6006] ? rcu_is_watching+0x12/0xc0 [ 845.622432][ T6006] process_one_work+0xa23/0x1940 [ 845.624756][ T6006] ? __pfx_process_one_work+0x10/0x10 [ 845.626668][ T6006] ? __pfx_io_ring_exit_work+0x10/0x10 [ 845.628619][ T6006] worker_thread+0x5ef/0xe50 [ 845.642314][ T6006] ? __pfx_worker_thread+0x10/0x10 [ 845.644761][ T6006] ? kthread+0x13a/0x450 [ 845.646877][ T6006] ? __pfx_worker_thread+0x10/0x10 [ 845.649873][ T6006] kthread+0x370/0x450 [ 845.651942][ T6006] ? __pfx_kthread+0x10/0x10 [ 845.654142][ T6006] ret_from_fork+0x72b/0xd50 [ 845.656269][ T6006] ? __pfx_ret_from_fork+0x10/0x10 [ 845.658461][ T6006] ? __switch_to+0x800/0x10f0 [ 845.676361][ T6006] ? __pfx_kthread+0x10/0x10 [ 845.679518][ T6006] ret_from_fork_asm+0x1a/0x30 [ 845.682439][ T6006] [ 845.685955][ T6006] Kernel Offset: disabled [ 845.703342][ T6006] Rebooting in 86400 seconds..