last executing test programs: 7m13.818722884s ago: executing program 2 (id=613): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0xffffffff, 0x0, 0x4, 0x800008, 0xddffffff, 0x3, 0x4000}) 7m13.618227649s ago: executing program 2 (id=616): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a4", 0x35}], 0x1}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}}, {0xa, 0x0, 0xfffffffe, @remote, 0x5}, r1}}, 0x48) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a00", 0x1e}], 0x1}, 0x0) (async) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0xe3, @tick, {0x2, 0x6}, {}, @raw32={[0x397866ff, 0x0, 0xffffffff]}}], 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x10000, @local, 0xfffffffe}, 0x1c) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710feffffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1006}, 0x4) (async) setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) writev(r8, &(0x7f0000000780)=[{&(0x7f0000001480)="a6", 0x1}], 0x1) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES16=r0], 0xc0}, 0x1, 0x0, 0x0, 0x80008c0}, 0x4040880) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 7m13.510197408s ago: executing program 2 (id=618): socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120001000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m11.859689133s ago: executing program 2 (id=630): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x300000000000000, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 7m11.590114942s ago: executing program 2 (id=633): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x3200, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 7m11.478921786s ago: executing program 2 (id=634): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async, rerun: 32) r3 = dup(r0) (rerun: 32) sendfile(r0, r3, 0x0, 0x6) (async, rerun: 64) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) (rerun: 64) sendfile(r4, r4, 0x0, 0x40008) 6m56.144333683s ago: executing program 32 (id=634): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async, rerun: 32) r3 = dup(r0) (rerun: 32) sendfile(r0, r3, 0x0, 0x6) (async, rerun: 64) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) (rerun: 64) sendfile(r4, r4, 0x0, 0x40008) 4m24.85594908s ago: executing program 4 (id=1454): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0xf0ff, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 4m24.556326664s ago: executing program 4 (id=1457): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"001000", 0xdb, 0x6, 0x3, 0x14625b, 0x3, "000000ff00070000000900", '\x00', "01030400", '\x00', ["9eee5b2e00000300", "000000000000008a982abd00", "2c55340300ffff7f00", '\x00r\f \x00']}) 4m24.47120663s ago: executing program 4 (id=1458): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x5203}}, './file0\x00'}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x11c, 0x2}, 0x8, 0x0, 0x8, 0x0, 0xfffffffc, 0x0, 0x0}) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/108) close(r0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r2, 0xc030128a, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x200, 0x8100) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000080)) 4m24.342748423s ago: executing program 4 (id=1459): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x49, [0x0, 0x3, 0x403, 0x100000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x80000007, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x200], [0xf33, 0xa82, 0x1000, 0x1, 0x2, 0x733, 0x1, 0xedc0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x9, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x28220be6, 0x401, 0x0, 0x2, 0xfffffffc, 0x6, 0xfffffffd, 0x0, 0x800200, 0x0, 0x20], [0x0, 0x0, 0x0, 0x6, 0xfffffffc, 0x2, 0x3, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0xfffffffe, 0xac, 0x0, 0x0, 0x3, 0x0, 0x400, 0x0, 0x2, 0x89, 0x0, 0x800, 0x0, 0xfffffff9, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80008003, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0xfffffffe, 0xd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xd2a, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xfffffffc, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x3ff, 0x200000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0xe6, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x8000008, 0x4, 0x1, 0x0, 0x0, 0x100000, 0xfffffffc]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0x9b, 0x8, 0x4, 0xfffb}, 0x39, [0x7fff, 0x9, 0x8000, 0x16, 0x2, 0x0, 0x1dc00000, 0x27, 0x8, 0x515, 0x9, 0x10000, 0x4, 0xffff, 0x7, 0x3, 0x100, 0x3, 0x4, 0x8, 0x7, 0xffffffc6, 0x9e2, 0x8, 0xc1d, 0xfffffff7, 0x4, 0xff, 0x2, 0x3, 0x6, 0x12, 0x9, 0x160000, 0x80, 0x9, 0x1b49, 0xe022, 0x7, 0x4, 0x4, 0x1000, 0x0, 0x71, 0x79f1, 0x5a59, 0x0, 0x8, 0xd, 0x80000000, 0x7a, 0x1, 0x8, 0xff, 0x0, 0x3, 0x1, 0x8, 0x101, 0xfffffff8, 0x1000, 0x5, 0xfffffe00, 0x6], [0x9, 0x1, 0x3, 0x0, 0x4, 0xd4a6, 0x5, 0x9, 0x9, 0x1000000, 0x4, 0x100, 0x6, 0xa, 0x8, 0x8, 0xfffffffe, 0x1, 0x4, 0xfffffffd, 0x0, 0x4, 0x7, 0x42d, 0x9, 0x25, 0x0, 0x5, 0xffffffeb, 0x949f, 0x9, 0xfffffffc, 0x9, 0x2, 0x12, 0x575a, 0x2, 0x6, 0x920a, 0x5c3e, 0x6, 0x1, 0x2, 0xc4b, 0xc, 0x681e, 0x9, 0x0, 0x40, 0x9, 0x7, 0xfffffff7, 0x4, 0xd59, 0x80, 0x9, 0x7ff, 0x8001, 0x1000, 0x4, 0xb89c, 0x3, 0x5, 0x11], [0x3, 0x6, 0xfffffffd, 0x6, 0x8, 0xfffffffe, 0x8, 0x3, 0xfffff643, 0x4, 0x0, 0x9, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x80000000, 0x5, 0x7, 0x5, 0x48000, 0xfff, 0x1, 0x2, 0xfffffffa, 0x4, 0x2, 0x4, 0xfff, 0x8, 0x4, 0x5, 0x5, 0x10001, 0xfffff801, 0x3ff, 0x10001, 0x3ff, 0x0, 0x51, 0x2, 0x80000000, 0x7, 0x4, 0x7, 0x1, 0xfffff001, 0xf98, 0x5, 0x9, 0x4, 0x5, 0xffff645f, 0x10001, 0xbe, 0xffffffff, 0x4, 0x1, 0x6, 0x800, 0x9, 0x8], [0x10, 0xffffffff, 0x4, 0x28b, 0x1, 0x1, 0x0, 0x7fffffff, 0x7, 0xffffffff, 0x7f, 0x4, 0x5, 0xfffffff9, 0x976e, 0x7, 0x0, 0x0, 0x7, 0xe, 0x0, 0x8, 0x7, 0x2, 0x8, 0x8, 0x2, 0x4, 0x80000000, 0xe9, 0x0, 0xfffffff7, 0x0, 0x5, 0x7, 0xb, 0x1, 0x7, 0xc, 0x811, 0x1a60, 0x0, 0x0, 0x2, 0x2, 0xd9, 0x2, 0x80, 0x4, 0xffffffff, 0x2, 0x1, 0x8605, 0x10001, 0x0, 0x8, 0xffffffff, 0x5, 0x5, 0xe2c, 0x4, 0x4d1, 0x81, 0x7fff]}, 0x45c) 4m24.198703681s ago: executing program 4 (id=1460): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000100)="8dbc4535cd3aaf727dc61723d0576b1f6da4d1c5bafcbab60c229136610a6d5cead14439b62c443fc3dcc9f871b394db3a8120beb92b2588ea97de2c44f63e288f23b3ff41262e4bfe7c6d24dbb2a0f62fe72635bc36f21f0de58b6d1f8c", 0x5e, 0x24004004, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @empty, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="180000801400010098d4c0b8fd27f3a45e44e813022bd729"], 0x38}], 0x1}, 0x0) 4m23.263939983s ago: executing program 4 (id=1465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xff, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_connect(0x2, 0x47, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001082f10000904df0003080662ff09050c02200006060309050710003e8fad6702af03"], 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan0\x00'}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x20000800) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="89e7ee2c78dad9b4b473fec988cad2d3d2329a70e71b7d8c54e8b8e2ab772e90c547700f5c8e4142babda13ff6bbd0b30c30d78183643aeb417e470b707cec8e2cd57677352aa4dfb42df6c1a087a1caf64372295c7e5dc90922cfc3dfd5d3bb7d4cbab8e6c9edec96271183808706cc42aac3af1e748433bde5c699f2e0c1e3ea093dacfc968fc4c6bb23f3d02dc930462a6983d396fde23193d2974e93a04648fc21cbb7befe232a58a8e98e2dc46f3f675d34e27821371bac9e6efa9b4474e0779b25b10578e8941ec7139c63ae1f29df", 0xd2}, {&(0x7f0000000000)="be34b4a6b14c4e5251427d6e6d20d375ae899ad7a2cfd64a", 0x18}], 0x2) 4m8.147480439s ago: executing program 33 (id=1465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xff, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_connect(0x2, 0x47, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001082f10000904df0003080662ff09050c02200006060309050710003e8fad6702af03"], 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan0\x00'}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x20000800) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="89e7ee2c78dad9b4b473fec988cad2d3d2329a70e71b7d8c54e8b8e2ab772e90c547700f5c8e4142babda13ff6bbd0b30c30d78183643aeb417e470b707cec8e2cd57677352aa4dfb42df6c1a087a1caf64372295c7e5dc90922cfc3dfd5d3bb7d4cbab8e6c9edec96271183808706cc42aac3af1e748433bde5c699f2e0c1e3ea093dacfc968fc4c6bb23f3d02dc930462a6983d396fde23193d2974e93a04648fc21cbb7befe232a58a8e98e2dc46f3f675d34e27821371bac9e6efa9b4474e0779b25b10578e8941ec7139c63ae1f29df", 0xd2}, {&(0x7f0000000000)="be34b4a6b14c4e5251427d6e6d20d375ae899ad7a2cfd64a", 0x18}], 0x2) 2m33.631697299s ago: executing program 0 (id=2153): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"001000", 0xdb, 0x6, 0x3, 0x14625b, 0x3, "000000ff00070000000900", '\x00', "01030400", '\x00', ["9eee5b2e00000300", "000000000000008a982abd00", "2c55340300ffff7f00", '\x00r\f \x00']}) 2m33.510841373s ago: executing program 0 (id=2154): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2m33.337604231s ago: executing program 0 (id=2156): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x6000, 0x0, 0x0, 0x1, 0x3d}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x5, 0x1, 0x7}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2m33.051579511s ago: executing program 0 (id=2158): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) shutdown(r1, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x4}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x300}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 2m32.842972085s ago: executing program 0 (id=2160): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0xb, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/212, 0xd4, 0xfffffffffffffffd, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2m32.756376237s ago: executing program 0 (id=2161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4040, 0xd) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hpfs\x00', 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2719, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4, 0x4, 0x0, 0x100, 0x4, 0x540000, r3}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x3, 0x6, 0x0, 0x100, 0x6, 0x180107, r3}) 2m17.278870877s ago: executing program 34 (id=2161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4040, 0xd) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hpfs\x00', 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2719, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4, 0x4, 0x0, 0x100, 0x4, 0x540000, r3}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x3, 0x6, 0x0, 0x100, 0x6, 0x180107, r3}) 4.862771923s ago: executing program 5 (id=3114): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x75, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "da9c1642"}]}}, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x3d}, @fd={0x70742a85}, @fda={0x66646185, 0x5, 0x1, 0x2c}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 4.345510303s ago: executing program 6 (id=3116): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0xb, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/212, 0xd4, 0xfffffffffffffffd, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x10f0}], 0x0, 0x0, 0x0}) 4.110157427s ago: executing program 6 (id=3118): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000100)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {0x0}], 0x2) 3.922104533s ago: executing program 6 (id=3120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0xb, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/212, 0xd4, 0xfffffffffffffffd, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3.423524519s ago: executing program 6 (id=3122): prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000300)="0300f198aaae5a98ca00008586dd", 0x5ea, 0x44000, &(0x7f0000000200)={0x11, 0xf6, r2, 0x1, 0xfe, 0x6, @random="7483ccb17b06"}, 0x14) 3.266135197s ago: executing program 6 (id=3125): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_connect(0x6, 0x514, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0xad, 0x5e, 0x45, 0x20, 0x18ef, 0xe00f, 0x3726, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x502, 0x3, 0x83, 0x4, 0x0, 0x1, [{{0x9, 0x4, 0x58, 0x5, 0x2, 0x99, 0x8f, 0x23, 0x6, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "016c753ae547"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xffff, 0x6, 0x8}, {0x6, 0x24, 0x1a, 0x8, 0x36}}, @generic={0x1e, 0x22, "c8ca8a8ed1653c1d2579047ad08ad5d9c49f5b4bd924fa2339d1cf89"}], [{{0x9, 0x5, 0x16, 0x0, 0x400, 0x5, 0x5, 0x7}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x7, 0x0, 0x4, [@generic={0x79, 0x2, "eeca11d6f98152aa9c520cb84a462f05996dd8cb0b07325c445d6f216e66c3e76535f4ec67a81ff25028b038a805f774b16b4d88cc7f9ca1d1fe05522ae11d9110c92cb70127e43cdaa27bd19b98b355aeb4d8ce674dafffe627dc6d4ac92e4102cf1dab031e51dc1749d6fc6570b3bfc20a85c750c88e"}]}}]}}, {{0x9, 0x4, 0xfb, 0x40, 0x2, 0xcd, 0x5, 0x38, 0x1, [@hid_hid={0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0x632}}], [{{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x9, 0x0, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x3, 0xc0, 0x0, [@generic={0xbe, 0x6, "5e44a73f38727b54ec17e5ff5b57487d48e19eff3aa4b51ab425f92f6f5a9006b2fa199fcca2beeaaf3ebf4f42bf5938eceeb3875209508001a78d135d5e600ddb657db5bc9d73e0cbb5c3344234a047e86e3221fe2dff7c719b2bb411fa5bc95437ceb0dba6326ae8625eada4908734cae36c35a6282692de96f766a84f5bcd1620060c4b1b6cd31d19cf498b5254c973c3a6e501cd9c2d813bf1e20034d5503cd2286286be3483dfffc6d42771994f69b824049d8b28825b960dc4"}, @generic={0x2d, 0x37, "4a648bb7ebc056ced765e38169df56bf84dab398beb3b4188cbaa3d0a037482907db85133903aaf2b401a5"}]}}]}}, {{0x9, 0x4, 0x33, 0xdd, 0xf, 0x2, 0xd, 0x0, 0x6, [@generic={0xf1, 0x23, "f8071cb6a274d1c19465a2c1e619cfc57a8fde548145089354b43f84c9a3a2102eb122d8036385772e2a8f4a062f29ea39192b6e5b23d2065a5d2d12f984eb589a6c923a8b25e404ecca10c758e18d7eb7b76b8f1a6be180729090c870e467430b72b60207ade280ced05ecac05bffb8ff1f14314094b8b407a61345269f7a24e778da507614a6fb74c22f37aa0c1bf6b903d6a02e420ab06d7d563446daced44601037ca097d22cc4c331864935cec9432aaa40d3e8665164a424254bdc4c867e935fcfdadf3059da06d679a58e86086b59ed2942fbcb40dcbb30379a76a3437b04e01a2570b73fbe460a241489ef"}, @uac_control={{0xa, 0x24, 0x1, 0x4}, [@selector_unit={0x6, 0x24, 0x5, 0x5, 0x2, "af"}, @processing_unit={0x9, 0x24, 0x7, 0x2, 0x5, 0xff, "971c"}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0xfff9, 0x6, "cab171"}, @selector_unit={0x6, 0x24, 0x5, 0x2, 0xf4, "d4"}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x1, 0x4, [0x8, 0x2, 0x4, 0x7], 0xe}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x7, "a144"}]}], [{{0x9, 0x5, 0x7, 0x1, 0x60, 0xfe, 0x8}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0xe, 0x1, 0xcf, [@generic={0x2e, 0xb, "663284224dca7d5fa75b2236ed95df0b422fa090198d599a2034d7c75b03a7ee4ce1518f28fe2e28b21418b5"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x9, 0x36, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x8}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0x2, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7}]}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x4, 0x80, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x2, 0x9, 0x8}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x23, 0x10, 0xbe, [@generic={0x90, 0xe, "79a614c1ae4864f77b57435ff5cd5d77e9f28217fd3c4761ea87dfb194b8e7d1201769925a3120ec0e28eb54fc9d8a40783fdb148caa5d2ee30a2bb47cbaaba3a2e3aa08a45be0c2423635683a39f2171ea4c51d9fa188c19d69dddfe101ab77bf9abe14981100072a59e51bbc0caab72f7847c717d96d3b512eda6a92824cc69b9785f7857f2d7519862b2a3e7e"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x2, 0x4}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x7, 0x3, 0x42, [@generic={0x60, 0x5, "b67d487eb1e9d1ab7a5e0ce15edc11989f2a77f22375c4bcce079abf925ed172dc8b06a40377b4dd1ec3951041c50de3035f7d6d5fd20b32f5b46a33ab3d2d01e8671bda35bb5f6a38c1ecd77904019c49953a086d484130d33f1a43238b"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x9}]}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0x7, 0x9, 0x3}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x7, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x0, 0x10, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x1, 0x3, 0x3}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x7, 0x80, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x5}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x78, 0xff, 0x9, 0x20, 0x8}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x42a}}]}) socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000c40)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx4\x00', 0x200000, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffff, 0xd, 0x42474752, 0x7, 0xc, [{0x94cc, 0x3}, {0x8001, 0x5}, {0x4, 0xb}, {0x9ef, 0x10001}, {0xa97, 0x2}, {0x455a, 0x7}, {0x6, 0x7}, {0xfff, 0x7f}], 0xf, 0xe, 0x4, 0x2, 0x5}}) syz_usb_connect$uac1(0x5, 0x11d, &(0x7f0000000f40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10b, 0x3, 0x1, 0x2, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x3}, [@selector_unit={0x5, 0x24, 0x5, 0x6}, @extension_unit={0xd, 0x24, 0x8, 0x2, 0x80, 0x4, "2c836ebda2a2"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x104, 0x5, 0x6, 0x3d}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x7, 0x2, "976696f574"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xa, 0x1, 0xcd, "15985352a5"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x3, 0x36, 0x81, "b0ff83"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x200, 0x4, 0x5, "2bf6adaf68d365"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x43, 0xc9, "d1fd72"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x7, 0x5, "12210fab9bbe660906"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x8, 0x3, {0x7, 0x25, 0x1, 0x3, 0xc5, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x4, 0x1002}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x0, 0x9, "d2716c11ef95"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, "", "546399"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf, 0x4, 0x7, 0x7, "", "9df7"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x2, 0x40, 0x31, "9f6e"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5b, 0x2, 0x0, 0x9, "2cc1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x2, 0x7, {0x7, 0x25, 0x1, 0x2, 0x81, 0x3863}}}}}}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x7, 0xb, 0x2, 0x8, 0x5}, 0x10, &(0x7f0000000080)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x4, 0x0, 0x9}]}, 0x2, [{0xae, &(0x7f0000000300)=@string={0xae, 0x3, "df47846ae84ea5b03adf902975ed41c833e0bfa1970937d6affeeab5ddc5300097feabf9af71f21a2215433d41058afdf53aef1f1378ceafe5f9f3ab6d2ba5aedbc8e8f218eae20e67c2ed66984abd974fcd01ae57a94dfc0270782eb90e6f24d97ebffa882563b3fcbe9c1c2b15ccd1a04290f4ea7f2a14e35e540ce3aac2c3e3b4417abd6d877e33219a9848b97d978d1b1c8ab707f9bd878ca28185f2d3b848ad79303ad7cce1c82fb59f"}}, {0xa3, &(0x7f00000003c0)=@string={0xa3, 0x3, "9211a5ca95ac2c652f28c698a1eb294b861ce5175240980d83f2aa4874d89d85fe63043e85ddc2e609f59a121031556dbb8d82fa739a46136193ef0b0451f6dd07115ad904819635911d8750adb301bc14838807fa7af558da77170d4e57c681a963b12ba6f0df1a868a2e79ce108bf2c01bf9458041fa69e5bcae93e998fc0f04d4ea87000ba8f63aefafe0ae91293e0c62478708a46c45b8ee1e339185f598bb"}}]}) getgroups(0x2, &(0x7f00000001c0)=[0x0, 0x0]) setresgid(r4, r4, r3) setresgid(0x0, 0x0, r4) clock_settime(0xcc80f84dcac64fc7, &(0x7f0000000680)) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000180)=0x1, 0x4) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000240)) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x10, &(0x7f0000000140)={0x20, 0x14, 0x3, "eaeeda"}, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0xee01, 0xee01}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r7, 0x600, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_MTU={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r8 = openat$rdma_cm(0xffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"22dd3fb97497021fa99774a26900a452"}}}}, 0xa0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r5) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x188, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x577, 0x9}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x13c, 0x2a, [@preq={0x82, 0x5c, {{0x1, 0x1}, 0x5, 0xe, 0xfffffffc, @device_a, 0x0, @void, 0x4, 0x5, 0x6, [{{}, @device_a, 0x3ac4}, {{0x1}, @device_a, 0x4c}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{}, @device_b, 0x2}, {{}, @device_a, 0x2}, {{0x0, 0x0, 0x1}, @device_a, 0xffffffff}]}}, @dsss={0x3, 0x1, 0xab}, @random_vendor={0xdd, 0xd5, "a41c967fcd9ed8096dbd347731de17bb607ed98a3524f4ca2dad60fbac968e66732329e89e9326984a08d2677b6b3c45de48afe226d830951c2383a0ecbf8b768df1a11db5b96af935150b4986cbde78139d14ea8e0fc032ab1498a5913ecb80801e73d37151196f38a6474bd08dbf88ef7b21353848e2b0a3d8da63daff28a03c8e25c696938ee63d2f261fb928f88f1863cb31db09ea3bd266dbd7c0d8d306f2c7dd7e6116b4a8094cdf2e14e8db614e1294da8d0bf16ca431c0de5e246d8c1ceb15438a0f123275cf7bd8a00cc40fb9a1ca1057"}]}, @NL80211_ATTR_MAC={0xa}]}, 0x188}, 0x1, 0x0, 0x0, 0x4c804}, 0x41) 2.794674137s ago: executing program 5 (id=3129): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xa) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) lstat(&(0x7f0000004080)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_clone3(&(0x7f0000005600)={0x800000, &(0x7f0000004480), &(0x7f00000044c0)=0x0, &(0x7f0000004500), {0x2f}, &(0x7f0000004540)=""/4096, 0x1000, &(0x7f0000005540)=""/91, &(0x7f00000055c0)=[0xffffffffffffffff], 0x1}, 0x58) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005680)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000005780)=0xe8) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r8, &(0x7f0000000080)={0x90, 0x0, r9, {0x0, 0x0, 0x3, 0x8d, 0x6a, 0x4, {0x6, 0x61f195fc, 0x7, 0x0, 0x1, 0x3, 0x800, 0x64, 0x5, 0xc000, 0x6, r10, r11, 0x100, 0x5}}}, 0x90) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000057c0)={'\x00', 0xfffc, 0x100, 0x6, 0x9, 0x100000001, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000005840)=0x0) r14 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r16]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000200)="52222a67722cbae1a85d1850f52d78029a905ff131a97f815d9ce6fe46b63ac5e8737e525b1ce179e4858247e605cc37e3ce3f96ff86581a11a4905e720b76d47f998db075f0689c8f707f7371497f9385f1c3935777e9b2f874175593f8b3e819d6abd6e5d86715372e3003a2991bbcee0675ed33035d1a598a7286c07917dd1062cf4174584ab9ac6907f055783d11161d698db2ed7a789d30912c35dd8c6880d4be24f94ea03721bb01b841b9d81a686d3feebc77d29111dd159af5f2a0d8b558ab72c39a32091830e689dd58400fe9c8fb54c75a4a82c92f5015171bf2331470247b1dbd9d3dd4aa97e9b14e44c6", 0xf0}, {&(0x7f0000000300)="613a7478e64fa848271a86915f02b055f736493c27db3f204e11ce2fd17f971c558d36e5706ec6c40a3065283b8622380c5f650411811787c02f29d56a386cc7644849a97a26e530f062210389ae1cbb25b8cae9df3b31e0f8d228cecd6e03a98ce08130ac6871c721074d0d2d6e", 0x6e}, {&(0x7f0000000480)="7e278aba8f13906caeb68bc1ab7f4406c87fa1609551d4b93a440668295e5ec2206159b4479dc5fcf063856c409dec6ae8d7eb9b58906d6c4c5488723fd0bfcd2f70b182de0d32961323c399d821e25576a34ccdbe2dd136f4a8d3", 0x5b}, {&(0x7f0000000780)="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", 0x1000}], 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c001000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES16=r7, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0], 0xa0, 0x4040080}}, {{&(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006b00)=[{&(0x7f0000001780)="6679fcec287da84575d2eefdf135e4157d32ac0299b0d53ced107e6946cef099e50a4df1ff8bb95244d02c659f99f15d320ae670793ec03a60266b868abbf34f06ec16d44ed3319b52d099889fc5a22072fa15531bd05be3f3cfba5aa179b2bd47cf686532b9224f1d6a6798bec0e521675e934ee9962946f5b0", 0x7a}, {&(0x7f0000001800)="eeee641c772a004e6b6025923159fb416fa7fe59b34df1550c2fe343d6eca8bc3d7d892551b4f0971ac26daeb07ade0b12dc8ad8cc5019159bffdc9e225d3c81389747c8a08d20e9a37826af0932f476c948c1c28b90caa407051a4f2a70b275730df09088a68f0fa649731523e1d354b0716d6cf328306d132f1aa8dac402abe387b68b2ada84f30b684baf1895a2bf9b0cb8280820844439e2608acaaa85d2c2ca01a0828513dbce45a74fcc42d56265f7b3e440543c324575dc56e01395673954b67eb41211495a98b06e61a07c3aabd4f6e00649df00e61269535a6b0c907321fad6769c6ed5d3b53dfd6b1cf84d682a", 0xf2}, {&(0x7f0000001900)="020dfc100a6357e4fe2ad70f553c4b932a153fb4f322003a9db552b0bf5e07265b9454b09b228b279c26bb4904821b9333fa523baa", 0x35}, {&(0x7f0000001940)="e3034bafbe3cd16da3792f70721514b1a5aee736ef17b711e46a732d3610d22775651f", 0x23}, {&(0x7f0000001980)="96a72c1201a6c867952a91fc815323f94f2147d708c9d8bb11f8083b022fce5f454b442e003ccb1232982cc598df69af0b23129927ec1ddf15bf0c5e7dc4c78274ddb028d40ca71ae5752e661b864bdf5145364fb28d1436e39f43fe49cee4cfb5211b47bb4ab28d3c97ad750b2c0343eca1228267eeb364aa88de8f8f3877a5a5f805ce10eaf1a643427f3daf5f253a6fdcf2715da82c87", 0x98}, {&(0x7f0000001a40)="5c4175899f2d8378351fab10a24d7cd562c73d02101df8270198b6634f3384499dc4c86d87473204a35300ef54496bc1287046ffc54a1efaaa67854ceef325af3cec5e6a777c31e64fcaad1e9e89477d857cfd6d060c3ad2", 0x58}, {&(0x7f0000005a40)="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", 0x1000}, {&(0x7f0000001f00)="8e96247d57ff552ff1a279cb67b34679f685834fd18e38efa6c3d6cdd2a476352a3ac9e13ecd663312d155869d6ca9244fa9cf0effbe84d0e57505ceffff96111beb9a8612f5c0eab5b9e7e0a78bd20be69dfeb0cf612192856613b02a19edd04db7de92b6a551f594c53b52c377b46c93511d6157fab552b03d8224b9380ae21b3c949b4f", 0x85}, {&(0x7f0000001fc0)="29dcef0d5a3df1bb861378ef54f1dc78bf933ba0d0cd4febd506be26cfe207c6646e82ec4c2a93a7363471340be10d491b9deab8c3c4ded3a75ab69596b6fe63087316db370ff72140137de45e2ba6cfe8f5426b61201a7ecf694e1d34bac9570cc1e192d5bdc04d588478a487fbf2228fd05facb7f68c18eadaf1b7f96ddee978f445965b834dba8a9c3abdf86cfedbb26b233b787759b1e7b08904f37766710e7fd00614d70b4566cfc72c7a6e977bd3ff6da3e55d58d8cc9bc4a49a3e57984ed56f6fb22b71e515a956d6", 0xcc}, {&(0x7f0000006a40)="4664afc6fe9795ef266b0a75fadcdc6d42c17cb6646866dac8cae1a2d078b4ee296f2f2e2c29dceeda684f636138acb4de8eff6902f23a2ec3d8f1d9185ec13e4ae9418bb18a19faed668cdff495bf7c0e003e12a85c51d0a8a6bf8cfebd5d5bcdacf68052cb86f8d7fb7e4e87f48e59ed4c706d016bc2c230ddd08947940a826a08b5ed6486c0c6bbc2b417", 0x8c}], 0xa, 0x0, 0x0, 0x10}}, {{&(0x7f0000001b40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001bc0)}, {&(0x7f0000001ac0)="530db7a710c0a77b7e62cc5a99ef26d26c28517cad9d129ce338ac1b91fda1c47880b9f4b0f93cdb48c2a979c2ac7738d77569427c5b3c273527c8bc0272fb8e97150c8f2301fe99cc4d325723186aa53064470d6be20fdb56b7a763605451b87156be74585bb12b", 0x68}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="1c00001804000d000000000002000000292aac441c83e32dbbb4b53c690509ad14ec5b33c73b406710961c63040cb1b6a17c96b6a9328c4651ca", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000800001001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000340000000000000001000a0000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x20000800}}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000003e00)="786e111484fa4602b1a3219ddf", 0xd}], 0x1, &(0x7f0000004140)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}], 0x80, 0x4b48ddb5e7be0fcd}}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f00000041c0)="294c13b05541c2081334f3bff7a64f3d17a0a0b8fd4699251fbf1c36328d0d5c1cc27d0f4f85dbeac631992c7e3467d1b56247572379f48c4b4c629cf405baf91a86a223d1368733b5deb1092febd7b19517ee89604ef9e300c4d9f822d7b74e201153f365293fac02c48b3d6798f7c49036df1339c565c1fe24194619ee5ab19e206768024a5732c05b22155f441bc5ad7c16764fd2fc449140cd6627f39ff247dd218bf1e999f98ccedbd1ba03404cfec1efdf25fac11f3f56b29e186afc3ad288e60df11fc5d7faa2", 0xca}, {&(0x7f0000001c00)="fe6682", 0x3}, {&(0x7f0000004300)="e826a36f3f162f1d156b06d34a2c2dfb62695e4739af95ae72a67106c1579c6ccd351e6fe51731eb217470029c0ab2a99f999ba764703f06f24893a5f34039ee028d0b438da8a46579f181cac47b74d66caeae03e20a17251c50aea08817ada72bc9e18fb5e7c699b57982db7e7f73de24c9bde57b42ba45cda9709ca1a97155b8a0dbbf007b40d9e3da30aee4", 0x8d}, {&(0x7f00000043c0)="7724bae89c10f7f771ef316d73019b2083b80d6425731c595f0d5925bbd7ba7610ab21827ce5ae65a012c7a45b251a65a39fe9d93140aac80d0eecde803abd3783a4d8fd513ff67f3174fcc7a5926c5c95cd9798ea", 0x55}], 0x4, &(0x7f0000001e40)=ANY=[@ANYBLOB="1000000000000000010000000100000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r11, @ANYBLOB="a461de1b435619e0a9487c24642bde8a9558ca72c904218a8e", @ANYRES32=r12, @ANYRES32=r13, @ANYRESHEX=r15, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x800}}], 0x5, 0x800) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) r17 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r18, 0x4030ae7b, &(0x7f0000000040)={0x7, 0x6, 0x1, 0xe4e, 0x9}) r19 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r19, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r19, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r19, 0x0) ioctl$NS_GET_PARENT(r19, 0xb702, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.362714497s ago: executing program 5 (id=3132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x4000000000000000, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0xf0ff, 0x0, 0x0, 0x1, 0x3d}, @fd, @fda={0x66646185, 0x5, 0x1, 0x7}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.259629422s ago: executing program 5 (id=3134): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f00000001c0)=0x5, 0x4) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8e5e840da0b29016db5010203010902120009000000000904"], 0x0) 1.138446319s ago: executing program 1 (id=3145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001811ff00000000000000007000000000000000ff86"], 0x52) 1.137750784s ago: executing program 3 (id=3146): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0xb, 0x3}, @ptr={0x73622a85, 0x0, &(0x7f0000000440)=""/212, 0xd4, 0xfffffffffffffffd, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.010820244s ago: executing program 3 (id=3147): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0xb, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/212, 0xd4, 0xfffffffffffffffd, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 956.197575ms ago: executing program 3 (id=3148): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x73682a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 944.436876ms ago: executing program 5 (id=3149): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002e000000180001801400020067656e65766530"], 0x2c}, 0x1, 0x0, 0x0, 0x3dc06331d0ffc133}, 0x0) r4 = dup3(r1, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0xb, 0x3}, @flat=@handle={0x73682a85, 0x1101}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 830.178252ms ago: executing program 3 (id=3150): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000180)={0x200, 0x20, 0x2, 0x7, 0xffffffff, 0x6a4c, 0x0, 0x10001, 0x20, 0x4, 0x2, 0x5, 0x0, 0x0, 0x0}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x40000180, &(0x7f0000000180), 0x1, 0x4000007}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000240)={0xa000005, 0x3c1c, &(0x7f0000000640)=[0x6, 0x2, 0x8e, 0x9, 0x2, 0x6, 0x509a, 0x24b2, 0x80, 0x0, 0x1f7b, 0x7fff, 0x800, 0x5, 0x0, 0x1ff, 0x8, 0x3, 0xf, 0x7fffffff, 0x7, 0xd, 0x5, 0x1ff, 0x6048, 0x0, 0xffffffdb, 0xeb5, 0x1, 0x1, 0x9, 0x18c52063, 0xf, 0x2f, 0x30c, 0x8, 0x5, 0xffffff0b, 0x401, 0x6, 0x81, 0xf, 0x8000, 0x7fffffff, 0x8, 0x5, 0x2, 0x0, 0x2, 0x40, 0x9, 0x8, 0x4, 0x9, 0x800, 0x6, 0x2, 0x100, 0x0, 0x2, 0x3, 0xf, 0x5, 0x2, 0x6, 0xb, 0xffffffff, 0xffffffff, 0x3, 0xd, 0x9, 0xfffffffc, 0x0, 0x7, 0x4, 0x4, 0x6, 0x0, 0x62, 0x0, 0x0, 0x7f, 0x779, 0x2, 0x0, 0x6, 0x4, 0x3, 0x4, 0x5, 0x71, 0xbe9, 0x0, 0x4, 0x0, 0xfffffffc, 0xe, 0x2e1, 0x0, 0xffffff8d, 0x100, 0x1, 0x7, 0xc4, 0x3, 0x9, 0x1, 0x6, 0x4, 0x4, 0x6e, 0x9, 0x4, 0x8, 0x10001, 0xf3, 0x3, 0x0, 0xffffff92, 0xffffff01, 0x3, 0x8, 0x7fff, 0xfff, 0x32, 0x800, 0x0, 0x1, 0x3, 0x6, 0x8, 0x10000, 0x80, 0x7fffffff, 0x8001, 0x2, 0xe7, 0x5, 0x4, 0x400, 0xa000, 0x8, 0x78fb6dd1, 0xfffffffb, 0xfffffffd, 0x9, 0x5, 0x5, 0x5d, 0x4, 0x7, 0x6, 0x1, 0x3ff, 0x3, 0x234, 0x2df8, 0x83f, 0x1, 0x5, 0x2, 0xa, 0x1ff, 0x8, 0x0, 0x2, 0x4, 0xb91c, 0x0, 0x3, 0x6, 0x3, 0x2, 0xe7ec, 0x2, 0x84c, 0x4, 0x5, 0x9, 0xa, 0x3, 0x5, 0x4, 0x5, 0x7, 0x2, 0x5, 0x6, 0x5, 0x5, 0x2, 0x3, 0x9, 0x7, 0x49e, 0xbb5d, 0xfffffeff, 0x9, 0xfffffffd, 0x10, 0x0, 0x0, 0xc381, 0x1000, 0x3, 0xc60, 0x8, 0x2, 0x0, 0x800, 0xd2df, 0xfffffffa, 0x3, 0xfff, 0xe, 0x3, 0x0, 0x101, 0x3, 0x704, 0xeaf, 0x9, 0x4, 0x5, 0x7f, 0x80, 0x1, 0x300000, 0x1, 0xffffffff, 0x6, 0x3, 0x5, 0x5, 0x3, 0x7, 0x0, 0x0, 0x4, 0x7fff, 0xf, 0x2, 0x1000, 0xb3, 0x68, 0x5a, 0x8001, 0xffff65e4, 0x400, 0x9a4, 0xa, 0x1, 0x2, 0xaaa0, 0x7, 0xed09, 0x7a, 0x6, 0x5, 0x0, 0xf5, 0x1, 0x4, 0x9, 0xfffffff9, 0x6, 0xfff, 0x7827b9e6, 0x2, 0x4, 0x3, 0x5, 0x6, 0x180000, 0xd, 0x0, 0x80000000, 0x5, 0x0, 0x7, 0x41ee, 0x778, 0x10, 0x9, 0x9, 0x7, 0x8, 0x4, 0x5, 0x7d85, 0x6, 0x184c, 0x1, 0x3, 0x52d1, 0x20c4, 0x3ff, 0x2, 0xb1, 0x2, 0x4, 0x1, 0x2, 0x37, 0x8174, 0x1000, 0x4, 0x80000000, 0xaa, 0x1, 0xffff27c9, 0x5, 0x741, 0x7f, 0x97, 0x70, 0x3, 0xe2, 0x18, 0xffffa708, 0x7f, 0x8, 0x3, 0xa, 0x4800, 0x7, 0x47, 0x1, 0x7ff, 0x200, 0xec, 0x4, 0x3a83, 0x0, 0x7, 0x99e, 0x3, 0x83, 0x2, 0x1, 0x1, 0x6000, 0x6, 0x400, 0x1, 0x3, 0x6, 0x1, 0x3ff, 0x2, 0x9, 0xf, 0x4, 0x3, 0x0, 0x3, 0x2, 0x8, 0x30, 0x400, 0x5, 0xf3, 0x101, 0x6, 0x6, 0x40, 0x401, 0xf, 0x3ff, 0x3, 0x4, 0x7f, 0x5, 0xfffffffb, 0x3ff, 0x6a, 0x2, 0x3, 0x0, 0x0, 0x8001, 0x7ff, 0x7fffffff, 0x3, 0x40, 0x1ff, 0xffffc99c, 0x0, 0x4, 0x1fe, 0x9, 0x7a5, 0x3, 0x7ff, 0x4, 0x101, 0x0, 0x7fffffff, 0x5, 0x8, 0xc11, 0x800, 0x4, 0x3, 0x4, 0xe00000, 0x2, 0x8f, 0xee, 0x7, 0x80000000, 0x9, 0x64a0, 0x2, 0x0, 0x1, 0x5, 0x80, 0x0, 0xffffff81, 0x9, 0xb302, 0x0, 0xffff, 0x0, 0x6, 0x0, 0x0, 0x8, 0x7ff, 0xfffffffc, 0x0, 0x401, 0x40, 0x3, 0x7673, 0x7, 0x1000, 0x6, 0x3, 0x0, 0x0, 0x8, 0x7, 0x0, 0xfffffffe, 0x7, 0x4297, 0x1, 0xdcc2, 0x6, 0x2, 0xf1, 0x9bb1, 0x1, 0x2, 0x2, 0x4, 0xfffffffd, 0x3, 0x8, 0x10, 0x7, 0xfffffc01, 0x8de, 0x3ff, 0x6, 0x2, 0x81, 0xf, 0x758b, 0xdd, 0x1, 0x7, 0x4, 0x7fffffff, 0x1, 0x6, 0x1, 0x4cb3, 0x9, 0xe500, 0x1, 0x1, 0x80, 0x7, 0x0, 0x8, 0x6, 0x0, 0x2, 0x2, 0x10001, 0x8, 0x3, 0x3, 0x8, 0x2, 0xe, 0x1, 0xc0b7, 0x2, 0x0, 0x9, 0x3d4b, 0x401, 0x1, 0x6, 0x6, 0x400, 0x13e3c7e0, 0x0, 0xcbdb, 0x3, 0x2, 0x5, 0x3, 0x3f80, 0x6, 0x51, 0x1ff, 0x2, 0x1, 0xfff, 0x6, 0x1, 0x8, 0x4, 0x8000, 0x8, 0x5, 0x3, 0x2, 0xf6, 0x6, 0x6, 0x7, 0x80000000, 0x0, 0xfffffffe, 0xfffffff8, 0xffffff01, 0x7a, 0x1, 0x3, 0x8, 0x5, 0xe357, 0xfffffff7, 0x8, 0x9, 0xb, 0x3, 0x3, 0x1, 0xb, 0x6, 0xd, 0x8, 0x4, 0x7fffffff, 0xd4, 0xea, 0xffffff81, 0x9, 0x6, 0x800, 0x1, 0x1, 0x3ff, 0xb1, 0xd8, 0x200, 0x49c, 0x7fff, 0xfffffffa, 0xb, 0x2, 0x0, 0x4, 0x400, 0x3, 0x8, 0x3, 0x2, 0x7, 0x6, 0x6, 0x80000001, 0x7d, 0x3e22, 0xffff9d0b, 0x9, 0x81, 0x7f, 0xfffffff5, 0x3, 0xea, 0x80, 0x80000000, 0x7, 0x4, 0x3, 0x227, 0x5, 0x3, 0x6, 0x8d, 0x7, 0x4, 0x8, 0x3, 0xe, 0x2, 0x8, 0xfffffffb, 0x2, 0x9, 0xffff, 0x5, 0x7, 0x40, 0x4, 0x9, 0x2, 0x48fa, 0x7fbc, 0x0, 0x4, 0x5, 0x2, 0x7, 0x3, 0x6, 0x5, 0x1, 0x1, 0x5a, 0xcd, 0xfbc1, 0xfffff5e3, 0x1, 0x80, 0x2, 0xf, 0xfff, 0x0, 0x1, 0x29ca, 0xffff7fff, 0x80000001, 0x8, 0x2, 0x3, 0xa, 0x319, 0x2, 0x8, 0x9, 0x0, 0x5eee4568, 0xffffffff, 0x8, 0x7fffffff, 0x4, 0xfffffffc, 0x1, 0x3, 0xd, 0x7ff, 0xa, 0x6, 0x5, 0x8175, 0x8, 0x10000, 0x1, 0xa38d, 0xfff, 0x1, 0x9, 0x3b29, 0x40, 0x3ff, 0x6, 0xff, 0x5, 0xa, 0x2, 0x7fff, 0x1, 0x1, 0x3, 0x5, 0x7, 0x6, 0x3, 0xc4a5, 0x6, 0x401, 0x9, 0xf, 0x7, 0x8, 0x72fa, 0x7, 0x46900, 0xc3c, 0x8, 0x9, 0x6, 0x1, 0x7, 0x4, 0x4, 0xf047, 0xfffffffd, 0x3, 0x5, 0x9, 0x3ff, 0x783, 0x3, 0x7, 0x0, 0x6, 0x4, 0x100, 0x0, 0x40, 0x80000000, 0x0, 0x400, 0x9, 0x2, 0x9, 0x1, 0x8000, 0x2, 0x7f, 0xffffff01, 0x1016b8f7, 0x3, 0x2, 0xf, 0xb89e, 0x2, 0x5, 0x9, 0x7fffffff, 0x7, 0x81, 0x7f, 0x2, 0xef5, 0x5, 0x3, 0x7ff, 0x6, 0x55, 0x9, 0x2, 0x8df, 0xcf, 0x8, 0xc74, 0x13, 0x800, 0x3, 0x6, 0x3, 0x9, 0x4, 0x1000, 0x80000000, 0xb, 0xf, 0x12646c81, 0x6, 0x8, 0x9, 0x9, 0xec5, 0x8001, 0x0, 0x4, 0xc, 0x40000, 0x9, 0x14e9, 0x10001, 0x5, 0xdd2, 0x1, 0x4, 0x6, 0x8, 0x4, 0xa, 0x1, 0x4, 0x4, 0x1, 0x27, 0x7, 0xfffff2d5, 0x7, 0x17, 0xb, 0xa, 0x4, 0x9, 0x0, 0x9, 0x10001, 0x3, 0x8, 0x3, 0x9, 0x2508, 0x5, 0x7ff, 0x9, 0x5363, 0xfff, 0x0, 0x7, 0x7c0a, 0x15, 0x0, 0x8, 0x69b9, 0x87e9, 0x4, 0x1, 0x4a18fd18, 0x7, 0x1ff, 0xffffff89, 0x3, 0xd813, 0x1, 0x9, 0x5, 0xffff8000, 0xfffffff9, 0x5, 0x400, 0x8, 0x7, 0x4, 0x200, 0x6, 0x430, 0x50c, 0x7f, 0x100, 0x2, 0x80000001, 0x6, 0x1000000, 0x7, 0x2, 0xfffffff8, 0xeec, 0x1, 0x9, 0x7, 0xfffffffc, 0x0, 0x80, 0x544, 0xfffffffa, 0x10001, 0x2, 0x0, 0xa8, 0xfff, 0x4, 0x8, 0xffffff61, 0x6, 0x8001, 0x7fff, 0x7, 0x1, 0x1, 0x80000001, 0x5, 0xa, 0x5, 0x6, 0x7, 0x4, 0x3, 0x0, 0x4, 0x22beaa10, 0x10001, 0x1, 0xffff, 0x3, 0x8000, 0xf6, 0xfffffff8, 0xff, 0x80, 0x400, 0x7, 0xb71, 0xae62, 0x4, 0x7, 0x7, 0x3, 0x3, 0x9, 0x2, 0x1000, 0xf10c, 0xd, 0x80, 0x90000000, 0x6, 0x80, 0x8000, 0x7, 0x0, 0xffff5964, 0x3, 0x5, 0x4, 0x863, 0x4, 0x5, 0xffffffff, 0x3, 0x401, 0x0, 0x6, 0x79, 0x800, 0x9, 0x6, 0x7, 0x7, 0xe000, 0x2, 0x9, 0x0, 0x5, 0xbc6, 0x9, 0x7ff, 0x3, 0xffffe791, 0x6, 0xf346a1b1, 0x6, 0x9, 0x62d, 0x8b, 0xffff4969, 0x4, 0x5000000, 0x6, 0x0, 0x8, 0xfffffffe, 0x1, 0x3f, 0xc, 0x2, 0x0, 0x7ff, 0xea9f, 0xd, 0x101, 0x8000, 0x7, 0x4, 0x4, 0x6e49ae7d, 0x5, 0x5, 0x4, 0xe202, 0x4, 0x9, 0x9, 0x7ff, 0x100, 0x10001, 0xd, 0x8, 0x5, 0xffffffff, 0x5, 0xa, 0x8001, 0x1, 0x83, 0x8, 0x6, 0x1, 0x3, 0x0, 0x4, 0x80000000, 0x4, 0x1000, 0x2, 0x0, 0xcc, 0x4, 0xc420, 0x9b, 0x1, 0x5, 0x6, 0x62e, 0x5, 0x0, 0x6, 0x6, 0x0, 0x19a, 0x9, 0x81, 0xa9, 0x7ff, 0x1, 0x2, 0xd5bb, 0x6, 0x800, 0x7, 0x80000000, 0x2, 0x6, 0x0, 0x200, 0x7, 0x31, 0x6, 0xa9, 0xd5e, 0xfffffffb, 0xffff7d4c, 0x7, 0x2fc1, 0x6, 0x7fffffff, 0x5, 0x4, 0x1, 0x4c, 0x10001, 0x10, 0x53c5, 0x7ff, 0x0, 0x2, 0x7837, 0x5, 0x3, 0x4000000, 0x4, 0x9, 0xe6a8, 0x1, 0x9, 0x200, 0x583, 0x9, 0x8, 0xffffffff, 0x10, 0x4, 0x4, 0x1, 0x9f, 0xfffffff7, 0x400, 0x2, 0xfffffff7, 0x101, 0x2, 0x3ff, 0x6, 0x1, 0x6, 0x7, 0x9, 0x8, 0x80000000, 0x1, 0x5, 0x3ff, 0x4, 0x101, 0x1, 0x0, 0xdf1, 0x7, 0x0, 0x5, 0x1, 0xfffffbff, 0x200, 0xee5, 0x3, 0x8, 0xc9dc, 0x6, 0xffffff99, 0x5, 0x6, 0x2, 0x400, 0x4, 0x2, 0x3, 0x0, 0x2, 0x1, 0x3, 0x7, 0x0, 0x3, 0x100, 0x100000, 0x6, 0xaee2, 0x3, 0x1, 0x3ff, 0xc, 0x1, 0xfffffe7b, 0x80000000, 0x10001, 0x1, 0x8001, 0x2f8, 0xfffffff7, 0x8, 0x1, 0x3, 0x8, 0x3, 0x9, 0x5, 0x80000000, 0x80000001, 0x9, 0x4cc, 0x5, 0xf656, 0x2, 0x2, 0x7ff, 0x2, 0x7, 0xd, 0xc77bd1e, 0x6, 0x5, 0x0, 0x2, 0x800, 0x6, 0xfffffffd, 0x9, 0x0, 0xb5, 0x9, 0x4, 0x2, 0x1, 0x4, 0x4, 0x8, 0xfffff549, 0x1, 0x5, 0x1, 0xa3de, 0x0, 0x1, 0x3e, 0x5, 0x0, 0x40, 0x0, 0x5f, 0x5, 0xdcf, 0x48, 0x5, 0x6, 0x1, 0x10001, 0x0, 0x0, 0x24b7, 0xb0, 0x6, 0x3, 0x9, 0x7fff, 0x2, 0x9, 0x5, 0x800, 0x7, 0x4, 0x1, 0x334, 0x9, 0x1ff, 0x7, 0x4, 0x7, 0x0, 0xfff, 0x0, 0x100, 0x0, 0x0, 0x8000, 0x7, 0xe3, 0x4, 0xffff8000, 0x400000, 0x9, 0x73, 0x4, 0x3, 0x9, 0x2, 0xd, 0x1000, 0x8, 0x0, 0x7, 0x8d, 0x30, 0x629f, 0x6, 0x9, 0x0, 0x3, 0x7, 0x0, 0x7fffffff, 0x1bcd, 0xfe, 0x1, 0x4, 0x1, 0xff, 0x1000, 0x7ff, 0x9, 0xfffffff4, 0x5, 0x1, 0x9, 0xfff, 0x81, 0xffffffff, 0xc, 0xe5, 0x5bb4, 0x7ff, 0xf34, 0xfffffff8, 0x58000, 0xc, 0x3, 0x7, 0x5cb52229, 0x7, 0x6, 0x3, 0xa, 0xffffffff, 0x5217, 0x2, 0xfff, 0x1, 0x9, 0x2e, 0xb, 0xa274, 0x8000, 0xc66, 0x61f, 0x7, 0xd, 0x2, 0x6, 0x8, 0xd22, 0xffffffff, 0xf, 0xfffffff7, 0x0, 0x7f3, 0x800, 0x1, 0x7fffffff, 0x9, 0xb, 0xffffff00, 0x3, 0x7, 0x7, 0x1, 0x8, 0xe, 0x200, 0x3, 0x4, 0xa6, 0x3, 0x5, 0x8, 0x26e, 0x3, 0x966c, 0x3, 0xfffffff1, 0x6, 0x8000, 0xd, 0x5, 0x4, 0xbc, 0x5, 0x5, 0xb, 0x5, 0xe9e, 0x6, 0x7ff, 0xb, 0x8001, 0x8, 0x92, 0x753, 0x8, 0x4, 0x5, 0xffffffff, 0x5, 0x2, 0x1, 0x5, 0x8, 0x6, 0x5c, 0x3, 0x1, 0x9, 0x9, 0x3, 0x10000, 0x9, 0xe, 0xa, 0xff, 0x7, 0x2, 0xfffffffd, 0x5, 0x628, 0x84cf, 0x4, 0x9, 0x0, 0x81, 0x3, 0x401, 0x7, 0x861b, 0x7, 0xaa, 0x99bc000, 0x9, 0xffffff32, 0x4, 0x8, 0x3, 0xf, 0x6, 0x5, 0xd, 0xfffffff8, 0x4, 0x10001, 0x1, 0x3, 0x5, 0x3, 0x0, 0x3, 0x18e, 0x9, 0x10001, 0x8, 0x10001, 0x9, 0x3, 0x10001, 0x2, 0x80000000, 0x8, 0xd5, 0x1ff, 0x3, 0x6, 0x2, 0x8, 0xe, 0x5, 0xfffffffc, 0x9, 0x10000000, 0xfffff801, 0x509, 0x81, 0x996, 0x4, 0x174a, 0x2, 0x7, 0x7ff, 0x4, 0x6, 0x0, 0x4, 0x211, 0x3, 0x9, 0x7, 0xffffffff, 0x10000, 0x2132e80, 0x3, 0x8, 0x10001, 0x9f64, 0x0, 0x3, 0x1, 0x9, 0x1, 0x8, 0x1, 0x9, 0x1e5e, 0x3, 0x9, 0x3, 0x8f6, 0x10000, 0xe4, 0xffffffc0, 0x400, 0x4339, 0x5, 0x1, 0x6, 0xd5, 0xffffffc2, 0x5, 0x5, 0x3, 0x14, 0x7fffffff, 0x9d, 0x1, 0x4, 0x4, 0x100, 0x1, 0x3ff, 0x6, 0xc, 0x7, 0x2, 0x3, 0xffff, 0x7e6, 0x8000, 0xc9bd13f, 0x6, 0x7, 0x2800000, 0x0, 0x0, 0xe, 0xdde9, 0x2, 0x3, 0x6, 0xe, 0x4, 0x8, 0xb, 0x7ff, 0xfe0, 0x1000, 0x3, 0x3ff, 0xb, 0x9, 0x7, 0x6be1, 0x8, 0x7ff, 0x0, 0xfffffffa, 0x7, 0x4, 0x2, 0xffffff81, 0xe79, 0x6, 0x7, 0xb, 0x8, 0x0, 0x9, 0x3, 0x4, 0x59a, 0xbc, 0xfffffffe, 0x7, 0x1000, 0x8, 0x5, 0x101, 0x8, 0x8, 0x600a, 0x497e3f72, 0x9fd, 0x4, 0x0, 0x4, 0x4, 0x9, 0x2, 0x8, 0x0, 0x8, 0x4, 0x5, 0x200, 0x1, 0x4, 0x277d, 0x4, 0x7, 0x5, 0x4, 0x10001, 0x5, 0x0, 0x8, 0xe0d, 0x8, 0x5, 0x1, 0x9, 0x200, 0x0, 0xfffffffb, 0x7f, 0x4, 0x7, 0x0, 0x8, 0x80, 0x3, 0x5, 0x1, 0x1, 0x5, 0xfffffffd, 0x200, 0x81, 0x10, 0x101, 0x7, 0x40, 0x2, 0x0, 0x8, 0x1, 0x7ff, 0x8, 0x4, 0x101, 0x8, 0x5, 0x401, 0x1, 0x80000000, 0x7, 0xfffffffa, 0xfffffff7, 0x7, 0x4, 0x3a, 0x4, 0x5, 0x100, 0x2, 0x6, 0x4350, 0xe9d9, 0x3, 0x4, 0x0, 0xffff0000, 0x100, 0x19e00, 0x0, 0xfffffffc, 0x4, 0xb, 0x5, 0x1ea, 0x3, 0xc, 0x7, 0x10001, 0x5, 0xfffffffe, 0xa, 0x34, 0x0, 0xa6, 0x9, 0xc, 0xffff8000, 0xcc7, 0xfff, 0xa89, 0x400, 0x400, 0x9e6, 0x8, 0x1, 0x4, 0x5144, 0x3, 0x2, 0x7, 0x7, 0x0, 0x0, 0x4, 0x0, 0x43, 0x400, 0x6, 0xc5d, 0x3103, 0xf6, 0x0, 0x0, 0x2, 0x1, 0x4, 0xfffffff7, 0x5, 0x800, 0x1, 0x8, 0x6, 0x7d31dc3b, 0x2, 0x7, 0x8, 0xfffffe55, 0x4f2, 0xf, 0xfffffff9, 0x3, 0x2, 0x3, 0x5, 0xeb5, 0x1, 0x3, 0x6, 0x8, 0x500000, 0x7, 0x3ff, 0x8, 0xe, 0x3, 0x4, 0xfffffff8, 0x2, 0x400, 0x2, 0x87, 0x9, 0x1, 0x4, 0x8, 0x1, 0x8, 0xfffffff9, 0x7, 0xffff, 0x1818cf75, 0x4, 0x5, 0x5, 0x8, 0x259c00, 0x81, 0x5, 0x9, 0x199, 0x3, 0x7ff, 0xaa, 0x5, 0x81, 0x4, 0x3, 0x1, 0x8, 0x4, 0x4, 0x114, 0x1, 0x6, 0xff, 0x6e85, 0x2, 0x3, 0x9, 0x6, 0xb0, 0x2, 0x5, 0x9, 0xb, 0xf, 0x6, 0x364064c7, 0x3ff, 0x3ff, 0x4, 0x6, 0x9, 0x5, 0x200, 0x5, 0x3, 0x9, 0x2, 0x4, 0x6, 0xf35, 0x7, 0x5, 0x7, 0x9, 0x1, 0x4, 0xf1aa, 0xe, 0x1400000, 0x8001, 0x3, 0x3, 0x7, 0xdc1, 0x5, 0x9, 0xffff, 0x3ff, 0xfffffaab, 0x0, 0x6, 0x2, 0x5, 0x8000, 0x1, 0x8e, 0x24e68eb9, 0x0, 0x6, 0x3, 0x1, 0x0, 0x7, 0x398d, 0x6, 0x7ef, 0x4, 0xffff, 0x8, 0x10001, 0x4f, 0x9, 0x8, 0xfffffffd, 0x1, 0x9, 0x800, 0x6, 0x6, 0x94ce, 0x5, 0x90ff, 0x7f, 0x8001, 0xff, 0x9, 0x8001, 0xa58, 0x3, 0x6, 0x5, 0x9, 0x6, 0xffff, 0x2, 0x8, 0x5, 0xfffffff9, 0x8, 0x6, 0x1, 0x4, 0x2, 0x1, 0x773c, 0x7, 0xfffffff6, 0x2be, 0x6, 0x5, 0x5, 0x100, 0x7ff, 0xeb, 0x6, 0x4, 0xa, 0x0, 0x9, 0x3, 0xfffffe00, 0x4a, 0x7fff, 0x4, 0x7, 0xfffffff9, 0xa4fc, 0x11b, 0x2, 0xccfc, 0x7, 0xa, 0xfd, 0xd, 0x2, 0x5, 0x455, 0x2, 0x4, 0x1000, 0x3, 0xfffffffa, 0xffffffd6, 0x8, 0x2, 0x2, 0x0, 0x2, 0x9, 0x3, 0x3, 0xf3, 0x6, 0x5, 0x0, 0x91, 0x10001, 0x8, 0x7fff, 0x1, 0x1, 0x10000, 0xc, 0x5a, 0x1, 0x4c, 0x8000, 0x101, 0x9, 0xffff23da, 0x5, 0x9, 0x4, 0x6, 0xfff, 0x0, 0x8, 0x54f, 0x2, 0x80000000, 0xd, 0xa, 0x5, 0x4, 0x401, 0x0, 0x7, 0xff, 0x1, 0x2, 0xfff, 0x0, 0x7fffffff, 0x100, 0x9, 0x8, 0x9, 0x80, 0x800, 0x7, 0x10001, 0x7e49, 0x1, 0x5, 0x6, 0x9, 0x0, 0x6a, 0xfffffffd, 0xf9, 0xa6000000, 0x8, 0x5, 0xfff, 0x7, 0x3, 0xfff, 0xe9, 0x1, 0x10001, 0x100, 0x0, 0x1, 0xff, 0x6871, 0xffe00000, 0x389d, 0x3, 0x3, 0x1, 0x5, 0x1, 0x2, 0x5f3dda7d, 0x7, 0x7, 0xeb2, 0x5, 0x1a, 0x400, 0x3, 0x91, 0x10, 0x8, 0xd, 0xfffffff1, 0x9c9, 0xfff, 0x80000000, 0x8001, 0xffffffff, 0x400, 0x81, 0x6, 0x986e, 0x0, 0x8, 0xc, 0x5, 0x8, 0x6, 0xfff, 0x39, 0x6df2, 0x0, 0x2, 0xb, 0x5, 0xb, 0x7f, 0x4, 0x4, 0x1000, 0x7ff, 0xffffffff, 0x7fff, 0x80, 0x0, 0x400, 0x2, 0xf, 0x3, 0x40, 0xffff42c6, 0x1, 0x887, 0xab, 0xc05f, 0x5, 0x5, 0x7, 0x0, 0x10f, 0x8, 0x3, 0x2, 0x5, 0x5, 0x1, 0xa, 0x0, 0x10000, 0x7fff, 0x10000, 0x2, 0xbc30, 0x590, 0xfffffffc, 0x9, 0x4, 0x2, 0x2, 0x8, 0x0, 0x8, 0x9, 0x2, 0x7, 0x4, 0x0, 0x7, 0x1000, 0xc, 0x8, 0x7, 0xb, 0x6, 0x2, 0x21, 0x7, 0x8000, 0xffff, 0x1, 0x808, 0x9, 0x0, 0xc313, 0x71, 0x4, 0x10000, 0x5f, 0x9, 0x2, 0x6, 0x5, 0x0, 0x944, 0x1e, 0xffffffff, 0x7, 0x0, 0x100, 0xffffffff, 0x1000, 0x7, 0x0, 0x1, 0x2, 0x4, 0x7, 0x8, 0x4, 0x2, 0x3, 0x600, 0x80, 0xfffffffe, 0x7, 0xc00, 0x4096, 0x7f, 0x8, 0x6, 0x1, 0x3, 0x3, 0x77a88901, 0x24d, 0x6, 0x1, 0x2, 0x10000, 0x7f, 0x10000, 0xda43, 0x0, 0xfffffffd, 0x3, 0x4, 0x2, 0x8, 0x3, 0x4, 0x1000, 0xfff, 0xeb36, 0x40, 0x51, 0x7f, 0x309, 0x101, 0x8, 0x2, 0x101, 0x1, 0x2, 0x2, 0x9, 0x1ff, 0xa47, 0x3, 0x10, 0x8001, 0x8, 0x76f4, 0x7ff, 0x542, 0x7ff, 0x101, 0x1, 0x1, 0xb, 0x6, 0x6b, 0x9, 0x147f, 0x7, 0x100, 0x7fff, 0x4, 0x5, 0x10, 0xa71, 0x200, 0x7fffffff, 0x0, 0xff, 0x6, 0x401, 0xc, 0x3, 0xe, 0x9, 0xc, 0x9, 0x9, 0x80000000, 0x4b9, 0x0, 0x52b, 0x401, 0x10001, 0x0, 0x40, 0xb17e, 0x400, 0x400, 0x8, 0x3, 0x0, 0xb3, 0x2, 0x4, 0x4, 0x8, 0x6, 0x0, 0xa, 0x8d, 0x4, 0x24, 0xfffffeff, 0x28, 0xc, 0x5, 0x7, 0x6, 0x101, 0x4, 0x7fff, 0xfff, 0xe45, 0x78, 0x3, 0x3, 0x29, 0x3ff, 0xfffffff9, 0xc6a, 0x3, 0x35, 0x8, 0xb43, 0xffff, 0x6, 0x3, 0x1, 0xffffffff, 0x8ad, 0x101, 0x5, 0x8000, 0x128, 0xfff, 0x524a, 0x400, 0x2, 0x75c, 0x1, 0x7fff, 0x25eabbb, 0x7, 0x4, 0xf7e6, 0x9, 0x55e5, 0xb, 0x6204, 0x7, 0x8, 0x1, 0x5, 0x10001, 0x7, 0xfff, 0xe, 0x0, 0x40, 0x1, 0xfffffff9, 0x40, 0x9, 0x5, 0x7ff, 0xa, 0x3ff, 0x63, 0x5, 0xf3, 0x80, 0xf, 0x6, 0x4, 0x8, 0xffffffff, 0x11612e74, 0x6, 0x2, 0x9, 0x2, 0x7, 0x2, 0x4, 0xe21, 0xbaeb, 0xd, 0x8, 0x0, 0xfffffff7, 0xfffffff7, 0xea84, 0x9, 0x8, 0xbda, 0x7, 0x5, 0x101, 0x6, 0xfffffff8, 0x3, 0x8, 0x8, 0xfb, 0x7fff, 0x7, 0x7, 0x98, 0x3, 0xf7f, 0xaef, 0x66, 0x1aae, 0x5, 0x7, 0x7, 0x6, 0x9, 0x0, 0xfffffffa, 0xffff, 0xc08, 0x314, 0x8, 0x80000001, 0x3, 0x58, 0x5, 0xfffffff2, 0x3, 0x8, 0xe0, 0x9, 0x5, 0x7, 0x0, 0x1, 0x8, 0x2, 0x0, 0x5, 0x4, 0x37800000, 0x0, 0x0, 0xc, 0x8, 0x0, 0x8, 0x5, 0x2, 0x3, 0xdb3, 0xfffffffe, 0x7, 0x2, 0x8, 0x2, 0x8, 0x5, 0xf, 0x0, 0x8001, 0x5, 0x80000000, 0x363, 0xe, 0x7fff, 0x40, 0x80000000, 0x0, 0x7f, 0x9, 0xdd8, 0x9, 0xc, 0x9, 0x1, 0x7, 0x6, 0x981, 0xd34, 0x57c, 0xfffffffb, 0x3, 0x3, 0x4c, 0x9, 0x8, 0x4, 0x8, 0x2, 0xc, 0x8, 0x3, 0x3fc000, 0x8, 0x8, 0x8000, 0x4, 0x8, 0x8, 0x0, 0x5, 0x80000001, 0x7, 0xfff, 0x7, 0x7, 0xfffffff9, 0x2, 0x10100000, 0x1, 0x3, 0x4, 0x6, 0x4, 0x9, 0x6, 0x9, 0x4, 0x369, 0x6, 0x7, 0xfffffff8, 0x1, 0xe4f, 0x4, 0x80000000, 0x3, 0xffffffff, 0x1, 0x3, 0x30, 0x81, 0xffff7fff, 0x4, 0xf9f, 0x10, 0x6, 0x0, 0xe8, 0x3, 0x0, 0xfffffffe, 0x2, 0x6, 0x509c, 0x9, 0x1, 0x8, 0x4, 0xfffffffa, 0xca2, 0x1, 0xfffff215, 0x1, 0x0, 0x64, 0xfffffff9, 0x1a8, 0x0, 0x8000, 0xa, 0xa27e, 0x11caeedf, 0x5, 0x1000, 0x0, 0x5, 0xac, 0x6, 0x1, 0x430, 0x8, 0x5, 0x8, 0x81, 0x3, 0x9, 0x7, 0x4, 0xff, 0x1, 0xfffff800, 0x2, 0x8000, 0x8, 0x2, 0x7, 0xbcc, 0x0, 0xffffffff, 0x7, 0x1, 0x7, 0x5, 0x8001, 0x933, 0x3, 0xdb06, 0x0, 0x170, 0xc503, 0x6, 0x9, 0xffffffff, 0x9, 0x8, 0x8, 0x3, 0x9, 0x5, 0xc45f, 0x8000, 0x400, 0xfffffff5, 0x2, 0x3, 0x8, 0x5f, 0x4, 0x306, 0xcf9, 0x1, 0x4, 0x42, 0xa, 0x8, 0x2, 0x7fffffff, 0xfffffff3, 0x7fff, 0x8, 0xa, 0x9b87, 0x8, 0x8, 0x1, 0x3, 0x2, 0x1, 0x9, 0x10, 0xfffffffc, 0xffffffff, 0x5, 0x1ff, 0x1, 0xffff, 0x8, 0xd, 0x4, 0x6, 0x10, 0x0, 0x80000000, 0x4, 0x1, 0x9, 0x1, 0x7, 0x0, 0x2, 0x3, 0x200, 0x3e5e, 0x3800000, 0x1, 0x8, 0xfffffffb, 0x9, 0x80, 0x1000, 0x7fff, 0x6, 0x6, 0x978, 0x4, 0x4, 0x4, 0x6, 0x3ff, 0x1, 0x8, 0x6, 0x61, 0x7fffffff, 0xffffffff, 0x76c, 0x5, 0x80, 0x3, 0x2, 0x8347, 0x9, 0x5, 0x7, 0x1, 0x8, 0x8, 0xfff, 0x801, 0x401, 0x6, 0x1, 0x100, 0x6, 0x8, 0x8000, 0x9f5, 0x3, 0x2, 0x5, 0xfffffff8, 0x9, 0xa, 0x7fffffff, 0xffffffe3, 0x0, 0x238, 0x9, 0x5, 0x10000, 0x8, 0xfffffffe, 0x6, 0x9, 0x2f6, 0x4b, 0x5, 0x8001, 0x4, 0x1, 0x8, 0xe5, 0x80, 0xa8, 0xf72, 0x68cc, 0x1, 0x800, 0xfff, 0x8, 0x1, 0x3, 0xffffffff, 0x7, 0xfffff45e, 0x6, 0x6, 0x9c, 0x10000, 0x36, 0x2, 0x10000, 0x1, 0x3f3, 0x0, 0x3, 0x1, 0xffff0001, 0x3, 0x0, 0x6, 0x4, 0x3, 0xfffffffb, 0x2a, 0x60ab, 0x9, 0x7fff, 0x8001, 0x7d4, 0x0, 0x40, 0x7, 0xd3, 0x8, 0x1, 0x8, 0xc0, 0x5, 0x9, 0x101, 0x2, 0x6, 0x101, 0x2, 0x9, 0x7, 0xff, 0x0, 0xfffffffa, 0x7f, 0xa, 0xff, 0x80, 0x6, 0x7fff, 0x7, 0x5, 0x10000, 0x1, 0xfb9, 0x1, 0x5, 0x1, 0xfffffffa, 0x5, 0xfffffecd, 0x7, 0x2, 0xf, 0xfff, 0x7, 0x6, 0x7, 0x7fffffff, 0x1, 0x5, 0xfffffff7, 0x0, 0x9, 0x2, 0x6, 0x5, 0xf, 0x80000001, 0x5000000, 0x6e82, 0x8f, 0x7, 0x30, 0x5, 0x7c80, 0x1, 0x7, 0x8001, 0x8, 0x6, 0x5, 0x3ff, 0x7, 0x0, 0x9, 0xffff474a, 0x7ff, 0x8, 0x5, 0x100, 0x8, 0x2, 0x1, 0x7fffffff, 0x9, 0x9, 0x401, 0x835, 0x9, 0xfffff0fe, 0x7, 0x0, 0x3, 0x3a, 0x5799, 0x4, 0x0, 0x4, 0x3, 0x2, 0x0, 0x7, 0x7, 0x1, 0x7, 0xb, 0x9, 0x5, 0xfff, 0x8, 0x5c6, 0x3, 0xdc6, 0x2, 0x3, 0x2, 0x4, 0x4, 0x7, 0x2, 0x8000, 0x16, 0x339d, 0x1, 0x80000000, 0x3e64, 0x2, 0xd, 0x7791183, 0x9, 0x3ff, 0xff, 0x1, 0x9cd6, 0xffff, 0x6ff, 0x4, 0x7fff, 0x80000001, 0x0, 0x3, 0x7, 0x74, 0xfffffff9, 0x8000, 0x3, 0x100, 0xffff, 0x0, 0x81, 0x10, 0x1, 0xffffff9c, 0x0, 0x2, 0x7fffffff, 0x8001, 0x3, 0x1, 0x3, 0x0, 0x2, 0xb4, 0x408bb2a5, 0xfffffffa, 0x2, 0xd, 0x8, 0x8000, 0x5, 0x2, 0x5, 0x3, 0x8bf6, 0x6, 0x98, 0x0, 0xff8d, 0x2cb, 0x6, 0x7fffffff, 0x8001, 0x2, 0x3, 0x34, 0x5, 0x81, 0xd, 0x2, 0x48000, 0x1, 0x2, 0x10001, 0x7, 0x5, 0x2, 0x6, 0x5, 0x9, 0x9, 0x4, 0x4, 0x7fff, 0x0, 0x0, 0x80000000, 0x400, 0x5, 0xd5a, 0x1, 0xdd2, 0x2, 0x80, 0x0, 0x10, 0xfffffffe, 0x9, 0x0, 0x4, 0xd, 0x1, 0x6f, 0x8, 0x9, 0x101, 0xffffffff, 0x400, 0x6, 0x8, 0x9, 0x0, 0x7f, 0xe, 0x8, 0x59, 0x8, 0x401, 0x737, 0x1, 0x2, 0x80000000, 0x8, 0x26da, 0x3, 0xfffffff7, 0x101, 0x0, 0x2, 0x1ff, 0x8, 0x6, 0x5, 0x4, 0x5, 0x2, 0x40, 0x3, 0x7, 0x3, 0x8, 0x1, 0x1, 0x1ff, 0x2a5, 0x100, 0x3, 0x4, 0x2, 0x7, 0x1, 0x6, 0x81, 0x1, 0x7, 0x1, 0x30, 0x9, 0x81, 0x10001, 0x25bb, 0x4, 0x4, 0x3ff, 0xf, 0x80, 0xb059, 0x1, 0x4, 0xa, 0x7, 0x4, 0x8, 0x2, 0x2, 0x9, 0x8, 0x5, 0x6, 0x1, 0xb34a, 0x2, 0x200, 0x5, 0x0, 0x8000, 0x2, 0xfffffffb, 0x0, 0x8, 0x0, 0x8, 0x5ee, 0x6, 0x9, 0x2, 0xc, 0xfff, 0x7ff, 0x6, 0x7, 0x7, 0x4, 0x7, 0x9, 0x1, 0x1, 0x3, 0xffff, 0x1e3, 0x3, 0x7, 0x7, 0x0, 0x4, 0x1, 0xb, 0x2, 0x9, 0x1, 0xffff8000, 0x2, 0x8000, 0x81, 0xf21, 0x4, 0x3, 0x0, 0xa, 0x6, 0x4, 0x80, 0x5, 0x1, 0x1, 0x0, 0xffffffff, 0x93, 0x3, 0x5, 0x401, 0xc, 0x7, 0x9, 0x0, 0x5, 0x88ef, 0x2, 0xc, 0x8, 0x9, 0x2, 0x8, 0xff, 0x3, 0x1, 0xfc, 0x7, 0x80, 0x6546, 0xbf, 0x3, 0x1, 0x0, 0xffffff81, 0x8, 0x8000, 0x3d6, 0x2, 0xd, 0xfffffffe, 0x1, 0x4, 0x3, 0x9, 0x6, 0x7, 0x0, 0x139, 0x8, 0x3, 0x7, 0x8, 0x2, 0x6, 0x9, 0xfffff000, 0xfd, 0x9, 0x9, 0x6, 0x0, 0x7, 0x8, 0x2d3, 0x9, 0x3, 0x9, 0x0, 0x9, 0x3, 0x40000000, 0x6, 0x7f, 0x4, 0x8, 0x7, 0xfa69, 0x200, 0x3ff, 0x40, 0x1, 0x400, 0x3, 0x1, 0x1, 0x7f, 0x8, 0x3, 0x0, 0xf, 0xe, 0x1000, 0x0, 0x5, 0xb318, 0x609, 0xc, 0x200, 0x320, 0x6, 0x6, 0xc, 0x40, 0x7eb, 0x7, 0x5, 0x1, 0x80, 0x0, 0x5, 0x3, 0x6, 0x7, 0x989, 0x1, 0x100, 0x100, 0x6, 0x13, 0x80000001, 0x4, 0xd1, 0x4, 0xe, 0x9, 0x1, 0x3, 0x3, 0x3, 0x3, 0x31a7, 0x4, 0x800, 0x0, 0x0, 0x2, 0x8, 0x4, 0x3f8, 0x8, 0x8, 0x2, 0x5c8c, 0x2, 0xfffffffe, 0x1, 0x2, 0x7, 0x8, 0x6, 0x1ff, 0xfffffffb, 0x2, 0x5, 0x7ff, 0x100, 0x5, 0x7fff, 0x10001, 0x8001, 0xf8c3, 0x5, 0x9, 0x7, 0x8, 0x11db, 0xe55c, 0x5, 0x8, 0x8, 0x7, 0xffffe186, 0x1ff, 0xfffffff8, 0x7f, 0x7, 0x200000, 0xff, 0x5, 0x400, 0x2, 0x4, 0xfffffffe, 0x4, 0x3ff, 0x6, 0x5, 0x6, 0x5, 0x0, 0x9, 0x2, 0x4, 0x4f, 0x26, 0x8, 0x8, 0x5, 0x62, 0x0, 0x5, 0x3, 0x4, 0x8000, 0x0, 0x8001, 0x5, 0x9, 0x4, 0x101, 0x4d, 0x5, 0x3, 0x1ff, 0x400, 0x5, 0x80, 0x7, 0x5, 0x80, 0x28, 0xfffffffa, 0x30, 0xa3, 0x9, 0xa000, 0x3ff, 0x8, 0x6, 0xfffff3c5, 0xa, 0x4, 0x1, 0x0, 0x1, 0x3, 0x8, 0x5, 0x4, 0x800, 0x3, 0x8, 0x4, 0xfffffff9, 0x8000, 0x4, 0x9, 0x1, 0x6, 0x28, 0xa, 0x0, 0x2, 0x7e1, 0x1, 0x8, 0x3, 0x15, 0x0, 0x0, 0x4, 0x656, 0x8, 0x2f14, 0x0, 0xfff, 0x7, 0x5, 0x4, 0xffffffff, 0x40, 0x4, 0xdf9, 0xe0, 0xc1b, 0xe, 0x5, 0x8, 0x4, 0x0, 0x3, 0xf, 0x800, 0x4, 0x9, 0x6, 0x1, 0x9, 0x1, 0x8, 0x1000, 0x8001, 0x620a, 0x1ff, 0x1c4c, 0x80000000, 0x8001, 0xd, 0xff, 0x7ff, 0x6ba, 0xdc3, 0x6, 0x5, 0x8, 0x7, 0xc, 0x2a9381ee, 0x1, 0xffff, 0xc7ca, 0x9, 0x0, 0x9, 0x3, 0x0, 0x6, 0x401, 0x0, 0x9, 0x5, 0x6, 0xfff, 0x9, 0xf, 0x3, 0x8, 0x4, 0x7, 0x9, 0x7, 0xff, 0xfffffff3, 0x6, 0x7, 0x8, 0x80, 0x80000000, 0x2, 0x0, 0x3, 0x4, 0x6, 0x11, 0x8ff8, 0x1, 0x9, 0x5, 0x7, 0xeb40, 0x5, 0x5, 0x0, 0xd4cc, 0x1, 0x7f, 0xc31ccaa, 0x9, 0x10000, 0x2, 0x9408, 0x7, 0x9d, 0x1, 0x7, 0x80000000, 0x7, 0x8, 0x8, 0x9, 0x2, 0x6, 0x7, 0xfffffff9, 0xe3f, 0x7, 0x0, 0x7, 0x80000001, 0xff, 0xffff, 0xe42, 0x1, 0x7bc, 0xd, 0x4, 0x3, 0xa, 0x2, 0x4, 0x1, 0x4, 0x4, 0x100, 0x9, 0x4, 0x8, 0x7, 0xfc1, 0x6, 0x3, 0x6, 0x1, 0x8, 0x7fffffff, 0x5, 0x3, 0x3, 0x9, 0x4, 0x9, 0x10001, 0x6, 0xfa, 0x8, 0x4, 0x3532, 0x1, 0x5bb, 0xb8ba, 0x4, 0x6bd, 0x6, 0x80000001, 0x6, 0x10001, 0x8001, 0x5, 0x49e0, 0x2, 0x6, 0x1ff, 0x784, 0x6, 0x9, 0x58, 0x7fff, 0x35f0af16, 0xc5, 0x9, 0x8, 0x7, 0xa, 0x2, 0x0, 0x20, 0x0, 0x5, 0x7b, 0x774, 0x8, 0x2, 0x64, 0xfe9b, 0x1f, 0x0, 0x5, 0x6, 0xf66a, 0x4, 0x8, 0x3, 0x200, 0x6fa, 0x7, 0x37, 0x4, 0xfffffffb, 0x0, 0x73, 0x0, 0x7fff, 0x40, 0x5, 0x6, 0x2, 0x5c8, 0xf8, 0x7, 0x800, 0x1, 0x2, 0x7cd, 0x8001, 0x5986, 0x3, 0x7, 0x7a9, 0x1, 0x15, 0x80000001, 0x3, 0x6, 0x4, 0x8001, 0x8, 0x7, 0x8, 0x0, 0x7f, 0x9, 0x80000001, 0x7, 0xfffffff9, 0x5, 0xb, 0x10000, 0x5a90e45e, 0x7, 0xffff8001, 0x4, 0x9, 0xffff, 0x8, 0x1, 0x4, 0x5, 0x6, 0x3, 0x8001, 0x4, 0x0, 0x7f, 0xfffffffa, 0x9, 0x8000, 0x1, 0x7, 0x1, 0x3, 0xc34a, 0xe60e, 0x800, 0xfff, 0x4, 0xa, 0x9, 0x7, 0xfe4, 0x5, 0x28aff36c, 0x0, 0x4, 0x81, 0xcc39, 0x0, 0x5, 0x1, 0x7, 0xfffffff8, 0xffffa7e8, 0x7, 0x6, 0x6, 0x0, 0x7, 0xfff, 0x400, 0xfffffffe, 0x7, 0x4, 0x4, 0x8, 0x7, 0xfffffffd, 0xffff5f65, 0x80000000, 0x10001, 0x8, 0x0, 0x3ff, 0x6, 0x5492, 0x0, 0x4, 0x4, 0x9, 0x8001, 0x5fdc, 0x8, 0x1, 0x8, 0x705b, 0x7, 0x3, 0xe, 0x3, 0x7f, 0xffffffff, 0x40000000, 0x1, 0x9, 0x2, 0x0, 0x2, 0xffffffcc, 0x8, 0x7fff, 0x4, 0x3, 0xfffffff9, 0x1a81, 0x4, 0x4, 0xca, 0x2, 0x0, 0x1, 0xf, 0x13da, 0xfffffff4, 0x6, 0x5, 0x101, 0x6, 0x0, 0x2, 0x9, 0x9, 0x0, 0x1, 0x6, 0x0, 0x80, 0x7, 0x7f, 0xfaa, 0x2, 0x8, 0x9, 0xd, 0x1a6f, 0x6, 0x7, 0x101, 0xe, 0x9, 0x5, 0xbe, 0x1ff, 0x200, 0x7, 0x0, 0x10001, 0x5, 0x101, 0x7, 0x4471, 0x3, 0x9, 0x7fc0, 0x9, 0x8, 0x2, 0x6, 0x4, 0x1, 0x3, 0x45, 0x6, 0x7, 0x3, 0x0, 0xfffffff9, 0x3, 0x7, 0x4, 0x6, 0x1, 0x1, 0x7, 0xff, 0x7fffffff, 0x8, 0x2714, 0xaa85, 0x9, 0x7, 0x1, 0x2, 0xffff98b6, 0x5, 0x7, 0x4, 0xfff, 0xd7, 0x6, 0x4, 0x2, 0x6, 0x10001, 0x9, 0x5, 0x1, 0x2, 0x4, 0xbd0, 0xf, 0x2f3, 0x0, 0x60, 0x4, 0x7, 0xfffffff7, 0x2, 0x7fff, 0x6, 0xff, 0x5ae0, 0xf59, 0x66d, 0x9, 0xf, 0xffffff30, 0x7, 0x80, 0x6, 0x22dc, 0x1, 0x5, 0x0, 0xfffffff9, 0x9f, 0x10001, 0x7, 0x7ff, 0x490, 0x4, 0xb5b, 0x19, 0xa, 0x8001, 0x2, 0x3, 0x4, 0x7ff, 0x659d, 0x0, 0x0, 0x3ff, 0x6b78b1bb, 0x0, 0x0, 0xe9f, 0x8676, 0x6b33, 0x8, 0x4, 0x5, 0xa, 0x3, 0x0, 0x3, 0x6, 0x4, 0x3, 0x4, 0xfffffe01, 0x2, 0x7, 0x7, 0x0, 0x3, 0x7e, 0x3, 0x7fffffff, 0x6, 0x200, 0x0, 0x100, 0x830, 0xffffedbd, 0x80000001, 0x5, 0x8, 0xfffffff8, 0x81, 0x3, 0x81, 0x2b10, 0x7f, 0x9, 0xb809, 0x6, 0x2, 0x7f, 0x1, 0x476, 0x9dba, 0x81, 0x2, 0x3, 0x7f, 0x4, 0x88, 0xfffffffb, 0x3ff, 0x2, 0x7800, 0x8c, 0x0, 0xbd0, 0x2700, 0x1, 0x1, 0x4, 0x6, 0x7, 0x1, 0x3, 0xc, 0xffffff01, 0x9, 0x401, 0x3, 0xae, 0x3, 0x5df, 0xffff7fff, 0x5, 0x675, 0x200, 0xfffffffb, 0x7, 0x9, 0x8395, 0x80000001, 0x3ff, 0x3, 0x5, 0x1, 0xff, 0x10000, 0x3, 0x92, 0x8, 0x5, 0x7, 0xe4, 0x73, 0x0, 0x6, 0x3, 0x3fe00, 0x9, 0x3, 0xc48, 0xb, 0xff, 0x6, 0x80000001, 0xb0, 0x9, 0x5, 0x180, 0x7be, 0x3, 0x4, 0xffffffff, 0x7ff, 0x400, 0x9, 0x9, 0x0, 0x2, 0x2, 0x1, 0x100, 0x5, 0x3f8000, 0x4, 0x2, 0x1ff, 0x95, 0x8, 0x4, 0xc3, 0xa, 0x0, 0x64, 0xd3, 0x0, 0x13e6ba60, 0x7f, 0x3, 0x3, 0x1000, 0x8, 0x9, 0x7ff, 0x1, 0xb, 0xfffffffd, 0x0, 0xb7, 0x2, 0x8, 0x10001, 0x1, 0x6, 0x5, 0x5, 0x6c, 0x0, 0x7, 0x6, 0xf, 0x4, 0x8000, 0x7ff, 0x0, 0x9, 0xf260, 0x8, 0x3d44, 0x0, 0x9, 0x80, 0x3, 0x8, 0x3, 0x0, 0x80, 0x0, 0x7145dd1, 0x9, 0x1, 0xf63, 0x7f, 0x60000000, 0x5, 0xfff, 0x0, 0xea63, 0x2, 0x6, 0x8, 0xf, 0x0, 0x1, 0x2, 0x7, 0x200, 0x1, 0x7, 0x40, 0x8, 0x0, 0x1, 0x80000000, 0x8, 0x6, 0xdbb6, 0x5, 0x290b, 0x9, 0x1, 0x3, 0x5, 0x9, 0x8, 0x6, 0x9, 0x2, 0x40, 0xfffff001, 0x2, 0x8, 0x7, 0x3d3, 0x9, 0x8, 0x9, 0x2, 0x7, 0x80, 0x6, 0x5, 0x7, 0x401, 0x5, 0xa819, 0x6, 0x1, 0x0, 0x1, 0x8, 0xf3, 0x3, 0xda43, 0x7, 0x9, 0x2, 0x7, 0x4a9, 0x2d, 0x1000, 0x1, 0xfffffff7, 0xffffffff, 0xa13, 0x7, 0x15, 0x6, 0x10000000, 0x10001, 0x1, 0xe, 0x2, 0xffffffff, 0x1, 0xe, 0x4, 0x964, 0x7ff, 0x9, 0x80, 0x5, 0x1, 0x8, 0x1, 0x2, 0x9, 0x2, 0x9, 0x0, 0x9, 0xffff, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x9d8a, 0x7, 0x3, 0x6, 0x5faa, 0x0, 0x80, 0x0, 0x10001, 0x5, 0x9, 0x9, 0x81, 0x93b, 0xfffffffe, 0x7fffffff, 0x6, 0x0, 0x4, 0x4, 0x3, 0x0, 0x3, 0x1f2, 0x1, 0x3, 0x5, 0x40fd, 0x8, 0xa, 0x0, 0x4, 0x325d, 0xd, 0xa61, 0x4, 0x5, 0x0, 0x2, 0x2, 0x81, 0x7, 0x6, 0x1, 0xff, 0x0, 0x9, 0x0, 0x6, 0x5be, 0x6, 0xffffff0a, 0x6, 0x7, 0x1ff, 0x4, 0x0, 0xc3a, 0x400, 0xa, 0x8, 0x9, 0x2, 0x3, 0x80, 0x3, 0x1293, 0x7f, 0x6, 0x9, 0x7, 0x9, 0x9, 0xd4, 0x10, 0xfffff51d, 0xa83, 0xc, 0x99, 0xc, 0x3ff, 0x2f, 0x6e4c, 0x5, 0x8, 0xa2, 0x0, 0x800, 0x7fff80, 0x9, 0x1, 0x10001, 0xffffffff, 0x4, 0x80000001, 0xb, 0x80000001, 0x7, 0x2, 0x6, 0x80000000, 0xffff1f6d, 0x9, 0x0, 0x3, 0xfff, 0x781, 0x69, 0x9, 0x0, 0x5, 0x101, 0x7, 0x6e, 0x88bc, 0x80000000, 0x4, 0x7, 0x8d, 0x9, 0x7, 0x8, 0x100000, 0x3, 0x800, 0x10001, 0xfffffff7, 0x5, 0x23, 0x3, 0x3, 0xffffffff, 0x1, 0x10, 0xd, 0x3, 0x2, 0x1, 0x53e0e89d, 0x5, 0x5, 0x74, 0x3, 0x3, 0x0, 0x17a0000, 0x6, 0x10001, 0xef3, 0xb, 0x0, 0x7f, 0x20e, 0xd5d1, 0x0, 0x1, 0x4, 0x8000, 0x6, 0x5, 0x5, 0x9, 0x6, 0xbb, 0x2, 0x0, 0x401, 0x99cc, 0x9, 0xffff, 0x4, 0x7, 0x800, 0x4, 0x80000001, 0x1, 0x6, 0xfffffff9, 0x10000000, 0xf, 0x8, 0x1612, 0x1, 0xffff8000, 0x0, 0x80000000, 0x7, 0x2, 0x3ff, 0x3ff, 0x9de0, 0x40, 0x7, 0x7f, 0x2, 0x5, 0x6, 0x7, 0x22d000, 0x80, 0x6, 0x81, 0x12, 0x9, 0x8, 0x80, 0xffffffff, 0x5, 0x3, 0x0, 0x2, 0x6, 0xfa, 0x3, 0x5, 0x0, 0x9106, 0xd12, 0xffff, 0xeb, 0x7, 0xfffffe4b, 0x6, 0x7, 0x2, 0x6, 0x3, 0x0, 0x2, 0x9, 0x55c0, 0x2, 0x1, 0x101, 0xef1, 0x4, 0x7, 0x21d4, 0x9, 0x5, 0x81, 0x33b, 0xffff4886, 0x6, 0x1, 0x2, 0xffff7fff, 0x8, 0x97, 0xc00, 0xfffffc01, 0x20e1, 0x80000000, 0x400, 0x5, 0x80, 0x0, 0x5, 0xd, 0x7, 0x0, 0x8, 0x1000, 0x0, 0x20000000, 0x7, 0x314, 0x2, 0x4, 0x6, 0x4, 0x0, 0x6, 0x7, 0x7, 0xfffffff8, 0x9, 0x3, 0x8000, 0x1, 0x9, 0x3, 0xaee, 0x5, 0x8, 0x5, 0x7, 0x4, 0x5, 0x2, 0xfffffffc, 0x5, 0x100, 0x7, 0x5, 0x6, 0x3383, 0x5, 0x5, 0x58, 0x2, 0x9, 0x3, 0x10001, 0x8, 0x3ff, 0xc, 0xffff, 0x80000000, 0x7, 0x81, 0x101, 0xffff8000, 0x5, 0xce4, 0x6, 0x1, 0x6, 0x4, 0x7, 0x0, 0x8, 0x0, 0x7, 0x8, 0x100, 0x7, 0x8, 0xa65, 0xe, 0x2, 0x1000, 0x5, 0x8, 0x768, 0x40, 0x7ff, 0x7, 0x102, 0x2c, 0x1, 0xb77, 0x80, 0xb5, 0x80000000, 0x3, 0x7, 0x0, 0x200800, 0xb95, 0x7, 0x1, 0x1, 0x3, 0x10001, 0x1, 0x8, 0x5, 0x2, 0x1, 0xb9, 0xffffd666, 0x10001, 0x6, 0x9, 0xe3, 0x401, 0xc, 0x0, 0x2, 0x1, 0x0, 0x8, 0x7ff, 0xfffff8de, 0x101, 0x6, 0x4, 0x7, 0x6, 0x8, 0x5, 0x1, 0xd23e, 0x7, 0x7fff, 0x6, 0xbf1, 0x7, 0x2, 0xffffff7a, 0x1669, 0xed, 0x1, 0xa574, 0x2, 0x91ea, 0x1, 0x8, 0x6, 0xf8000000, 0x2, 0x2, 0x3, 0x1, 0x81, 0xe, 0x81, 0x4, 0xc0, 0xffff0001, 0x2, 0x3, 0x6, 0x5, 0xfffffff7, 0x9, 0x10001, 0xfffffffe, 0x8, 0x8, 0xb, 0x5, 0x9, 0x5, 0xffff, 0x1, 0x6, 0xaa8, 0x1, 0x2, 0x8, 0x9, 0x4, 0x9, 0x65, 0x4, 0x9, 0x4, 0x7, 0x81, 0x3, 0x6, 0x7, 0x3, 0x0, 0x9, 0xfc0, 0x3, 0xfffffffa, 0x7, 0x9, 0x0, 0x1, 0x0, 0x0, 0xb0, 0x705, 0x6, 0x9, 0x8, 0x7, 0xa0, 0x548, 0xfffffffa, 0x0, 0x0, 0x2, 0x1, 0xac1, 0x101, 0x8, 0x8001, 0x400, 0xcc16, 0x9, 0x9, 0x5, 0x4, 0x800, 0x2, 0x4, 0x9, 0x0, 0xd, 0x1, 0xc29, 0x3ff, 0x5, 0x8, 0x1, 0x2, 0x7, 0x2, 0x4, 0x10000, 0x2, 0x7, 0xfffffc00, 0x8, 0xd3d, 0x101, 0x4, 0x101, 0xb, 0x5, 0x12a, 0x3, 0x5, 0x7ff, 0x3, 0x180, 0x9, 0x800, 0x2, 0xffff9285, 0x3, 0x0, 0xffffffff, 0xb09bcfe, 0xb9f, 0x4, 0x1, 0x2, 0x7, 0x8, 0x6, 0x5, 0x1, 0x8000, 0x7, 0x2, 0xffffffff, 0x4, 0x7e5, 0x1, 0x2, 0x5, 0x0, 0x7, 0x3, 0x6, 0x0, 0x100, 0x9, 0x6, 0x3800, 0x3, 0x0, 0xfff, 0x1, 0x2, 0x8de, 0x1, 0xa389, 0xf7, 0x9, 0x3, 0x2, 0x7, 0xfff, 0x3, 0x0, 0x80000000, 0x9, 0x9, 0xffffffff, 0x439, 0x81, 0x800, 0x6fb2, 0x7fff, 0xffff, 0x100, 0x7, 0x8, 0x6, 0x4, 0x6, 0x3, 0x9574, 0xca3, 0xa, 0x5, 0x0, 0x9, 0x0, 0x7, 0x7f, 0x8, 0x0, 0x7f, 0x0, 0x585, 0x7, 0x689b, 0x9, 0x4, 0x40800, 0x5, 0x0, 0x4, 0x1, 0x1400000, 0x4, 0x8, 0x6, 0x80, 0xfffffffe, 0x2, 0x7fff, 0x882, 0x803, 0xccdf, 0x7, 0x7, 0x18000, 0xffff, 0xf, 0x9, 0x4, 0x80000000, 0x22, 0xfffffffe, 0x7, 0x5, 0x4, 0x26ac, 0x4, 0x4, 0x99ac, 0x4, 0x8000, 0x2, 0x3, 0x9, 0x3, 0x4, 0x9, 0x8, 0x7, 0x7, 0x2, 0x4, 0x1ff, 0x6, 0x9, 0x5, 0x5, 0x2f, 0x2, 0x8001, 0x2, 0xfff, 0x0, 0x8000, 0x8, 0x40, 0x1, 0x9, 0xce, 0x5, 0x5, 0x9, 0x9, 0x5, 0x7, 0x1000, 0x4, 0x200, 0x4, 0x7, 0x6, 0x1, 0x0, 0x4bd0, 0x6, 0xfc, 0x9, 0x1, 0xd, 0xaf01, 0x9, 0x6, 0x1, 0x7, 0x7, 0x4, 0x80000001, 0x1, 0x40, 0x5, 0x6c26, 0xffffffff, 0x4, 0x12c, 0x887, 0x3bd7, 0x0, 0x7fffffff, 0xab69, 0x2, 0x915, 0xe6, 0x5, 0xb8a, 0x5, 0xffff, 0xfffffbff, 0x2, 0x9, 0x10001, 0x27f, 0x7fffffff, 0xdf5, 0x2149, 0x5, 0x8001, 0xd, 0x8, 0x0, 0xb2a, 0xfffffffc, 0x9, 0xffff, 0x7, 0x1, 0x7f, 0x4f1c, 0x1ff, 0x9, 0x9, 0x1, 0x7, 0x3, 0x10, 0x7f, 0x0, 0xfffffffb, 0x9, 0x6, 0x7, 0x40, 0x0, 0x4, 0x8, 0x4, 0x20000, 0x4, 0x3, 0x8000, 0x7, 0x0, 0x6, 0x80000000, 0xfffffffd, 0x5, 0x6, 0x7fff, 0x3, 0x100, 0xf, 0x2, 0x8001, 0x9, 0x0, 0x6, 0x12e, 0x7f, 0x3, 0x7, 0x7, 0x6, 0x0, 0x4, 0x7, 0x4, 0xa, 0xb3, 0xffffffff, 0x0, 0x8, 0x0, 0xc, 0x3, 0x8, 0x5, 0x3ff, 0x0, 0x6, 0x7, 0x8, 0x8, 0xcbc, 0x1, 0x40, 0x800, 0x8000, 0xffffff91, 0x24ad, 0x1, 0x830, 0x2de, 0x6, 0xfffeffff, 0x8, 0x0, 0xfffffffd, 0x1, 0x6, 0x9, 0x0, 0x10, 0x6, 0x5, 0x465, 0x7, 0xfffffe00, 0x3, 0x2cd5, 0x5, 0x9, 0x2, 0x2, 0x9, 0x94, 0x8001, 0x4, 0x9, 0x615a, 0x80, 0x9, 0x7, 0xfbcd, 0x8, 0x6d4c, 0x8, 0xe7, 0x80000000, 0x126, 0x400, 0xe, 0x5ef, 0xfffffffb, 0x1, 0x2, 0x17, 0x2, 0x9, 0x6, 0x55, 0x8000, 0x5, 0x6, 0xff, 0x7d, 0x2, 0xd, 0x647b, 0x1, 0x8fda, 0xc, 0x10000, 0x9, 0x2, 0x9, 0x3, 0x800, 0x7ff, 0x8, 0x3ef3, 0x9, 0x400, 0x100, 0xd, 0x4, 0x2, 0x8ab4, 0x8d, 0xe, 0x0, 0x7, 0x1, 0x400, 0x1ff, 0x2, 0x9, 0x1e, 0x3, 0x5, 0xdb, 0x200, 0x9, 0x1, 0x4, 0x2, 0x9, 0xffff8129, 0x3, 0x15, 0x3, 0xba39, 0x5, 0x1, 0x7, 0x7fffffff, 0xc5, 0x3, 0xa6f, 0x6, 0x5, 0x7, 0x62eb9e8b, 0x5, 0x0, 0xfffff37b, 0x380, 0x7, 0x8, 0x2, 0x5, 0x3, 0xfd, 0x60d8, 0x5e2, 0xe, 0x0, 0x6, 0x7786, 0x0, 0xb19, 0x7f, 0x401, 0x8f6, 0x4, 0x8, 0x5, 0x9, 0x76df, 0xff, 0x6, 0x2, 0x0, 0x80000000, 0xffffffff, 0xfffffffa, 0x5, 0x4, 0x10001, 0x0, 0x8, 0x8, 0x3, 0x8001, 0x3, 0xff, 0xf5db, 0xe, 0x1, 0x80000001, 0x8, 0xfffffb00, 0x1ae0, 0x8, 0x1, 0x10001, 0x3, 0x4, 0xd, 0x619, 0x6, 0x1, 0x3, 0xb, 0x5, 0x4, 0x4, 0x2, 0x6, 0x11, 0x4, 0x8, 0x6, 0x7, 0x4, 0x2, 0x80f, 0x80, 0xffffffff, 0xffffffff, 0x7fff, 0x0, 0x9, 0x6, 0x0, 0x6, 0x6, 0x30fd9d5c, 0x4fe, 0x7f, 0x0, 0x9, 0x0, 0x9, 0x80000000, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x27b, 0x641, 0x0, 0x3, 0x7, 0x40, 0xa, 0x9, 0x8cd9, 0xfffffff7, 0x2, 0x5, 0x9c2b, 0x4, 0x0, 0xb42b, 0x7, 0xfffffff8, 0x7190161c, 0x9, 0x1, 0x2, 0x5, 0xd, 0x81, 0x2, 0x1, 0xf11d, 0x1, 0x7fff, 0x4, 0x3, 0x8, 0x0, 0xbc, 0xfffffff7, 0x8, 0x4, 0xffffffff, 0x1000, 0x8, 0x39d, 0x4, 0x9, 0x3, 0x80000001, 0x8, 0xa, 0x3, 0x8, 0x5, 0xc, 0x1ff, 0x5, 0x5, 0x6, 0x3, 0x0, 0xcc, 0x20, 0xa9, 0x80000000, 0x0, 0x80000001, 0x7756, 0x4, 0x2f49, 0x9, 0xff, 0x2, 0x8, 0x4, 0x4, 0x3, 0x0, 0x5, 0x6, 0xbf, 0x3, 0x5, 0x80, 0xc, 0xc7, 0x10000000, 0x1, 0x1000000, 0xb0f, 0x4, 0x6, 0x8, 0x8, 0xe0000000, 0x9, 0x8, 0xb, 0x3521, 0xf, 0xfffffffa, 0x2, 0xd, 0x0, 0x5, 0x7, 0x0, 0xab6, 0x7, 0x91e0, 0x3f3, 0x2, 0x5, 0x69b, 0x1, 0x1, 0x1, 0x7, 0x4, 0x1, 0x7, 0x7, 0x9, 0x4, 0x7ff, 0x9, 0x9, 0xb, 0x9, 0x4, 0x9, 0xbb, 0x2f, 0x1, 0x2, 0xb05, 0x8, 0x1ff, 0x735, 0x4, 0x40, 0x8, 0x0, 0x6, 0x61, 0x0, 0x3, 0x10, 0x6, 0x1, 0x3, 0x7, 0x2, 0x10000, 0x9, 0x5, 0xec, 0x3ff, 0x5, 0xc, 0x7f57, 0x4, 0x3, 0x2, 0x9, 0x9, 0x755b, 0xd2, 0x10, 0x3, 0x9, 0x5b89, 0x7, 0x65fe, 0x2, 0xfffffffe, 0x401, 0x6, 0x6, 0x10, 0x3, 0x0, 0xd4d8, 0xe9d, 0x9, 0x8, 0x9, 0x1, 0x800, 0x7bb, 0xfffffff4, 0x6, 0x8, 0x7fffffff, 0x5, 0x8, 0x9, 0x4, 0xfffffffd, 0x447, 0x94d4, 0x1, 0x80000000, 0x3, 0x9, 0x7f, 0x6, 0x4, 0x4, 0x7f, 0x5, 0x764, 0x6, 0xfffffd05, 0x1000, 0x0, 0xae, 0x10, 0x9, 0x9, 0xe4, 0x6, 0x8001, 0x0, 0xa19, 0x7, 0x2ca, 0x0, 0x8, 0x3, 0x1, 0x7, 0x3, 0x4, 0x3, 0x4, 0x1612, 0x3, 0x0, 0xff, 0x8, 0x4, 0x100000, 0x7f, 0x1, 0x5, 0x6c5, 0x3, 0x0, 0x1, 0x5, 0x3, 0xe6, 0x3, 0x100, 0xff, 0x10001, 0x4, 0x5a, 0x401, 0xfff, 0x5, 0x9d, 0x3, 0x2, 0x2, 0x0, 0x0, 0x7, 0x7, 0x9, 0x6, 0x9, 0x1, 0x6, 0xfffff801, 0x8, 0x5, 0xd248, 0x8, 0x8001, 0x80000001, 0x7, 0x9, 0x8100000, 0x3, 0x80800000, 0x7ff, 0x1, 0x3, 0x8, 0x2, 0x9, 0xf78, 0x6, 0x0, 0x1, 0x5, 0x1, 0x9, 0x0, 0x3, 0x794, 0x6, 0x800, 0xfffffffb, 0x1ae79520, 0x401, 0x6, 0x2, 0x8, 0x8, 0x68, 0xfffffffe, 0x7, 0x8001, 0x1, 0x200, 0xfc, 0x5, 0x1, 0x4, 0x5, 0x8, 0x1ff, 0x5, 0xfe34, 0x5, 0x3, 0x4, 0x3, 0x4, 0x6, 0x1, 0x3, 0x7, 0x7, 0x7, 0x6, 0x2, 0x7ff, 0x7fffffff, 0x2, 0x9e1, 0x5, 0x5, 0x3, 0x1, 0x9, 0x2, 0x80000000, 0x4, 0x9, 0x0, 0x1, 0x6, 0xc4d, 0x5db, 0x5, 0xb0da, 0x7f, 0xb, 0x1c, 0x20, 0x254b60e1, 0x8001, 0x3, 0xff, 0x401, 0x5, 0x71, 0x9, 0x0, 0x1, 0xfffffff8, 0xf, 0xffff, 0x6, 0x6, 0x9, 0x80000001, 0x4, 0x5, 0x3, 0x6, 0x8, 0xcbe7cb7e, 0x2, 0x7, 0x4, 0x0, 0x8, 0x2, 0x1, 0xd44f, 0x3ff, 0x882b7979, 0x428, 0x75fe, 0x9, 0x3, 0x3e0c, 0x800, 0x0, 0x2, 0x6, 0x3ff, 0x80000000, 0xa9, 0x1, 0x8032, 0x0, 0x8, 0x587c, 0x9, 0xa49, 0x4, 0x4, 0x7, 0xffff, 0x2, 0xa, 0x7, 0x9, 0x0, 0x2, 0xa, 0x80000001, 0xfffffff9, 0x3, 0x3, 0x4, 0xc0000, 0x7, 0x4, 0x4, 0x80, 0x401, 0x5, 0x0, 0x0, 0x8, 0x1, 0x5, 0x3, 0x2, 0x3440, 0x7fff, 0x9, 0x5, 0x18dc, 0xfffffffb, 0x0, 0x4, 0xce1, 0x1, 0x5, 0x5, 0x9, 0x2, 0x5, 0x9, 0x2be5, 0x11152d5, 0x4, 0x1ff, 0x5, 0x5, 0x7b4, 0x0, 0xb, 0x2, 0x401, 0x2, 0x695c, 0x400, 0x0, 0x6, 0x9, 0x5, 0x9, 0x81, 0x1, 0x9bd, 0x5, 0x401, 0x1, 0xbd1d, 0x3ff, 0x0, 0x8001, 0x6, 0x89, 0x5fdf, 0x8, 0x6d4, 0x4, 0x9, 0x8001, 0xfff, 0x7ff, 0x8, 0xffffff50, 0xd, 0x100, 0x2, 0xfff, 0x7, 0xfff, 0x8, 0x8, 0x7802, 0x80000001, 0x40, 0x35b6, 0x10000, 0x9, 0x3, 0x0, 0x6, 0x2c, 0x3, 0x3ff, 0x5, 0x3, 0x9, 0x4, 0x0, 0x8, 0x7fff, 0x7ff, 0x8, 0x9, 0x8, 0x2, 0xffffffff, 0xe, 0x1, 0x7f, 0x3a6, 0x456, 0x6, 0x682, 0x7, 0x2, 0xff, 0x8, 0x879, 0x1, 0x76, 0xa58, 0x3, 0x4, 0x574, 0x3, 0x2, 0xffff, 0x5, 0x5, 0x9, 0xe2a1, 0x10, 0x8, 0x3, 0x7, 0x7fffffff, 0xcac2, 0x7, 0x2, 0x101, 0x1, 0x6, 0x1, 0x100, 0x80000000, 0x8000, 0x3, 0x3, 0x9, 0x0, 0x2, 0x5, 0xcbf, 0x5, 0x5, 0x0, 0x6, 0x5, 0x81, 0x2, 0x0, 0x1, 0x9, 0x9, 0x5, 0x2, 0x0, 0x9, 0xd, 0x4, 0x4, 0x6, 0xc7, 0x5, 0x4, 0xdae, 0x7, 0x2, 0xfffffff8, 0xebe, 0x2, 0x6, 0x8, 0x2, 0x6, 0x6, 0x3, 0x3, 0x0, 0x7, 0x8, 0x6, 0x8, 0x8, 0x2, 0x1, 0x648a1001, 0x3b2a, 0x8, 0x2, 0xb784, 0xffffffff, 0x40, 0x0, 0x2, 0x8, 0xffffffff, 0x1, 0x2, 0xec26, 0x9, 0x5, 0x3ff, 0x2, 0x5, 0x622, 0x3, 0x10, 0x5, 0x40, 0x0, 0x7, 0x2, 0xffff, 0xcc, 0xf, 0x3, 0xfffffff7, 0x3, 0xfffffffd, 0xffff0000, 0x5a, 0x3, 0x3, 0x0, 0x15b, 0x800, 0x6, 0x228, 0x1, 0xe, 0x9, 0xffffffff, 0xc2, 0x80d, 0xc2c, 0x9, 0x10001, 0x101, 0x0, 0x7, 0x8, 0x7, 0x2, 0x1, 0x1ff, 0x5, 0x1, 0x40, 0x1, 0x8, 0x6, 0x40, 0x4, 0x9, 0x2, 0x0, 0x55, 0x6, 0x4, 0x3, 0x4, 0x9, 0x0, 0x8, 0x3ff, 0x100, 0x0, 0x5, 0x100, 0x2, 0x7ff, 0x3, 0x8, 0x2, 0x2, 0x3, 0x3, 0x3, 0x7fff, 0x0, 0x7, 0x800, 0x3, 0x0, 0x6, 0x7, 0x3, 0x80000001, 0xb9, 0x10001, 0xf, 0x69c27c37, 0x2, 0xb38e, 0xba0a, 0x8, 0x3, 0x8, 0x6, 0x9, 0x44, 0xfffffffc, 0xfffffff9, 0xe64, 0xfffffffd, 0x8, 0x7, 0xe, 0x3a, 0x0, 0x2ec, 0x4, 0x23000, 0x5, 0x1321b598, 0xef, 0x6, 0x7ff, 0x4, 0x2, 0x2, 0xe5, 0x9, 0x53c7638f, 0x300000, 0x4, 0x8, 0x7fffffff, 0x3, 0x5, 0x5, 0x0, 0x9, 0x4df2, 0x2, 0x80, 0x80, 0x8, 0xb, 0x3, 0x2, 0x96b, 0x1, 0x7, 0x6, 0x0, 0xfffffff3, 0x5, 0x69, 0x7, 0xde0d, 0x0, 0x7f, 0xffff, 0xffffffff, 0x8, 0xc, 0x4, 0xf2, 0x1000, 0x9, 0xfffffff8, 0x1, 0x4f, 0x7, 0x8, 0x4, 0xed11, 0x3, 0x3, 0x10, 0x0, 0x6, 0x0, 0x6, 0x8, 0x3, 0x5, 0x7, 0x8, 0x3, 0xfffffff7, 0x4, 0x985c, 0x5, 0x8, 0x91, 0x8, 0x7, 0x3ff, 0x9, 0x8, 0xff, 0x81, 0x1ff, 0x4, 0x9, 0x80, 0x8, 0x5388, 0xf, 0x8, 0x7, 0x7, 0x4, 0x10000, 0x18000, 0x0, 0x10, 0xb, 0x7, 0x5, 0x1, 0x0, 0x2, 0x3, 0xffffffff, 0x2, 0x2, 0x6, 0x7, 0x2, 0x800, 0x0, 0x42ea, 0xd9, 0x0, 0x8, 0x0, 0xce4, 0x7fff, 0x80000000, 0x1ff, 0x6ffcb40c, 0x2720b817, 0xfffffffd, 0x40, 0xc36, 0x4, 0x5, 0xfffffc01, 0x6, 0xffffffff, 0x45e, 0x548a, 0x3, 0x3, 0xe, 0x6, 0x49ef, 0xff, 0x2, 0x3, 0x2, 0x9, 0x0, 0x6, 0xffffffff, 0x10001, 0x6, 0x7, 0x4, 0x5, 0x6, 0x6, 0x7, 0x1, 0x0, 0xa, 0x5, 0x100, 0x9, 0xdffc, 0x8001, 0x5, 0x5, 0x7, 0x3, 0x0, 0x8a5, 0x3, 0x3, 0x2, 0xfffffe00, 0x4, 0x3, 0x0, 0xe7a, 0x0, 0x7, 0x401, 0x9, 0x8, 0xc00000, 0x9, 0xd7c, 0x7c, 0x8, 0x80, 0x54, 0x6, 0x3, 0x310b, 0x40, 0xffffffb7, 0x3, 0x2, 0xa, 0xc, 0x401, 0x7, 0x2, 0x4, 0x4, 0x6, 0x5, 0x3, 0xf00d, 0xa, 0x3, 0xd, 0x140000, 0x5, 0x5, 0x10001, 0x9, 0x8, 0x0, 0x3, 0xffffffff, 0x6, 0x5, 0xc5cc, 0x9, 0x2, 0xfffffffa, 0x8, 0x7, 0x7, 0x6, 0x0, 0x9, 0x132c, 0x1, 0xfffffff9, 0x8000, 0x1, 0x7, 0xffffffff, 0x1ff, 0xff, 0x7fc, 0xfffffffa, 0x5, 0x94f, 0x3, 0x0, 0x7, 0x7ff, 0x8, 0x6, 0x101, 0x7, 0x8001, 0x7, 0x7, 0x3, 0x1ff, 0xff, 0x5, 0x4, 0x72660ce, 0x1ff, 0x1, 0xc, 0xcf, 0x10001, 0x9, 0xffff2780, 0x8, 0x9, 0x0, 0x8, 0x2, 0x0, 0x3, 0x233be363, 0x0, 0x7ff, 0xffff, 0x11e, 0x5, 0x8, 0x101, 0x1, 0x5, 0x4, 0x7, 0x0, 0x3, 0x94e, 0x1, 0x1, 0x6, 0x0, 0x80000000, 0x4, 0x1, 0x2dd6, 0x8, 0x4, 0x3, 0x1, 0x341, 0x5, 0x1, 0x5, 0x0, 0x190, 0xfffffffb, 0x800, 0x1, 0x9, 0x4, 0x7cdc, 0x9, 0x7fff, 0x80000001, 0x3, 0x4, 0x2, 0x9, 0x1ff, 0x7, 0xffffc9c6, 0x9, 0x8, 0x9, 0x7fffffff, 0xfffffffd, 0x9, 0x2, 0x8, 0x6, 0x2c2b34c6, 0xfffffeff, 0xcb, 0x3, 0x1, 0x6, 0xd, 0x48d, 0x4, 0x8, 0x2, 0xfffffff8, 0xfa9, 0x0, 0x2, 0x6, 0x7, 0x374, 0x6, 0x1b9, 0x0, 0x9, 0x8, 0x5, 0x6, 0xb, 0x4, 0x2, 0x2, 0x0, 0xb, 0xe, 0x9, 0x8000, 0xdb, 0xa5c9, 0xb8b1, 0x7, 0x9, 0xfffffff7, 0xf6d9, 0xfffffff9, 0x4, 0x4, 0x3, 0x1000, 0x442b, 0x5d, 0x7ff, 0x0, 0x2f, 0xc16, 0x10, 0x7, 0x39c, 0xc0, 0x7, 0x0, 0x1, 0x1, 0x3ff, 0xfffffffb, 0x4, 0x2, 0x7, 0x13, 0x8001000, 0x4, 0x4, 0x7, 0x0, 0x80000001, 0x0, 0x56f3, 0x2, 0x0, 0x6, 0x2, 0x0, 0x6, 0xfffffff5, 0xd, 0x0, 0xfffffff8, 0x2, 0x7, 0x2, 0x7, 0x6, 0x0, 0x9, 0x3, 0x6, 0x660, 0xb, 0xfffffffd, 0x9b, 0x5, 0x4, 0x10000, 0x9, 0x3, 0x3, 0x0, 0x9, 0x6, 0x0, 0xf, 0x9, 0x2df, 0x7, 0x101, 0x3, 0xffffff00, 0x94b, 0x0, 0xffffff09, 0x7, 0x7, 0xdce3, 0x3, 0x400, 0x9, 0xf7, 0xffff, 0x6, 0xfff, 0x9, 0x9, 0x5, 0x8000, 0x4, 0x2, 0x3, 0xd83, 0x5, 0x8, 0x7fffffff, 0x0, 0x0, 0xffff, 0x1, 0x7, 0x7, 0x1, 0x7, 0x6, 0x8001, 0x9, 0x80f4, 0x2, 0x7, 0x0, 0x0, 0x8, 0xfffffffa, 0xffffffce, 0x200, 0x3, 0x5, 0x0, 0x1d, 0x66, 0xfffffff2, 0x9, 0x0, 0x7d00, 0xfffffff1, 0x0, 0x1, 0x3, 0x10000, 0x4a40afee, 0x10, 0x401, 0x80c2, 0xffffffc0, 0x6, 0x8, 0x9, 0xb, 0x7, 0x3, 0xfffffffb, 0xaba8, 0xdb0f, 0xde86, 0x4, 0x98, 0x4, 0x4, 0x1ff, 0x4, 0x1, 0x80, 0x4, 0xfff, 0xc, 0x3, 0xffffffff, 0x7, 0x6809d0a7, 0x9, 0xf0, 0x100, 0x8, 0x2, 0x7, 0x1ff, 0x0, 0x2, 0xb4, 0x54, 0x8, 0x5, 0x10001, 0x8, 0x9, 0x8, 0xa80b, 0x4, 0x5ac7966f, 0x7, 0x4, 0xa0, 0x0, 0x9, 0x101, 0x6, 0xe123, 0x8, 0x40, 0x85, 0x3, 0x3, 0x400, 0x100, 0xe, 0x3, 0x4, 0x3, 0xfff, 0xfc4, 0x4, 0x200, 0x2, 0x1ff, 0xf, 0xfffffd69, 0x3dc83a6, 0x8, 0x1, 0x9, 0xa7, 0x9, 0x1, 0xc00000, 0x80000000, 0xf, 0xe, 0x0, 0x5, 0xffffffea, 0x1, 0x3a, 0x8, 0xa, 0xffffefd5, 0x4, 0x4, 0x8, 0x1, 0x5, 0xff, 0x0, 0x2, 0x5b5, 0x3, 0x8, 0x5, 0x401, 0x6, 0x7, 0x200, 0x3, 0x2, 0x0, 0x4, 0x9, 0x4921, 0xc, 0xff, 0x1ff, 0xe, 0x800, 0x6, 0x4, 0x401, 0x80, 0x9, 0x2, 0x6, 0x8, 0x330f57b, 0x2, 0x1, 0x7e, 0x2, 0x200, 0x7, 0xd9, 0x7f, 0x7, 0x1ff, 0x9125, 0xffffffff, 0xe, 0x5, 0x1, 0x9, 0xfffffe00, 0x7, 0x200, 0x4df, 0x2, 0x7, 0x1, 0x6, 0x8, 0x800, 0x3, 0x3, 0x6, 0x7, 0x9, 0xfffffff9, 0x100dcd43, 0x4, 0x71a, 0x1, 0x7, 0x10001, 0x5, 0x5, 0x3a0f, 0x6, 0x5, 0x6, 0x9, 0xffffffff, 0xffff8001, 0x2799d93a, 0x9, 0x2, 0x7e8, 0x101, 0x6, 0x101, 0x5, 0x5, 0x1, 0xa1, 0x80000001, 0x2, 0xdc0870d, 0x8, 0x8, 0x3, 0xa130, 0x200, 0x40, 0x5, 0x0, 0x8, 0x491, 0x0, 0x3a67419d, 0x9, 0x7, 0x5, 0x257, 0xcc, 0x0, 0x9, 0x3, 0x6, 0x1, 0x74, 0xe0df, 0xb7, 0x6, 0x8000, 0x4, 0x40, 0x55063524, 0x5, 0x3, 0x80000001, 0x101, 0x80000001, 0x0, 0x15ea, 0x800, 0x2, 0x1, 0x9, 0xfffffffc, 0x6, 0x8, 0xbf, 0x6, 0x7, 0xae4b, 0x0, 0x6, 0x1, 0x400, 0x4, 0xc0000000, 0x1, 0x3, 0xf, 0x8, 0x7, 0x5, 0x6, 0x97, 0x6, 0x100000, 0x7, 0xb, 0x0, 0x9, 0xffffffff, 0x8, 0xb8, 0x29d, 0x7ff, 0x7, 0x2, 0x72, 0x10000, 0x20, 0x9, 0x401, 0xfffffffc, 0x80000000, 0x8, 0x5, 0x3, 0xe, 0x5, 0x40, 0x0, 0xa0, 0xfffffff8, 0x4, 0x80, 0x8, 0x5, 0x39, 0x5, 0x8, 0x6, 0x611, 0x0, 0x9, 0x29, 0x3, 0x5, 0x2f78, 0x9, 0x8, 0x4800000, 0x5, 0x6, 0x1, 0x3, 0x5, 0x4d4c8f5f, 0x9, 0x8, 0x8, 0xc, 0xfffffad5, 0x4, 0x195, 0x5, 0xffffffff, 0xfff, 0xfffff990, 0x0, 0x9, 0x9, 0x101, 0x0, 0xfff, 0x4, 0x20f, 0x4, 0xfffffff7, 0x4, 0x3eaf, 0x0, 0x3, 0x9, 0x7, 0x4, 0xf05c, 0x15, 0x6, 0x0, 0x3, 0x301b, 0x3, 0xb9, 0xfffff6c6, 0x2, 0xd, 0x0, 0x4, 0x467, 0x0, 0x7, 0x307, 0x9343, 0x8, 0x2, 0x8916, 0x8f4, 0x0, 0x5, 0x200, 0x9, 0xe3c, 0x8, 0x87, 0x5, 0x200, 0x0, 0x0, 0x8001, 0x10001, 0x8, 0x3, 0x6, 0x3, 0x6, 0x1, 0x3, 0x8000, 0xf5, 0x8000, 0x2, 0x9a, 0x10, 0xd3, 0x0, 0x5, 0x8, 0xe8, 0x68, 0x800, 0x0, 0x7, 0xfffffffe, 0x4, 0x5, 0x7, 0x5, 0x197, 0x4, 0x1, 0xc, 0x4, 0x4, 0x9, 0x2, 0x4f, 0xfffffff9, 0x0, 0x4, 0x0, 0x10000000, 0x8, 0x6, 0x8, 0x80000001, 0x6, 0xe59b, 0x4, 0x8, 0x1000, 0x6b942a51, 0x200, 0x8, 0x8000, 0x7f, 0x80000000, 0x0, 0x8, 0x1a83, 0x1, 0xfffffc01, 0x7f, 0x100, 0x8, 0x4a7, 0xbc0, 0x7, 0x7f, 0x8, 0x3, 0xf503, 0x9, 0x5, 0x4, 0x2390c2e5, 0x9, 0xa, 0xb, 0x1dd, 0x4, 0x3000000, 0x3, 0xfff, 0xf7, 0x0, 0x2, 0xfffffffd, 0x3, 0x3, 0x8, 0xb5c9, 0x8, 0x401, 0x0, 0x9, 0x4, 0x6, 0x7ff, 0x0, 0x80000001, 0xfffffff6, 0x80, 0x35f, 0xdc, 0xed6, 0x0, 0x7, 0x0, 0x4, 0x9, 0xfffffff6, 0x400, 0x8, 0x6, 0xad, 0x6, 0x3, 0x8001, 0x7, 0x0, 0x3, 0x1, 0x40, 0x10, 0x2, 0x0, 0x4e1, 0x60, 0xa, 0xfa92, 0x2b, 0x81, 0x10001, 0x2, 0x1, 0x4, 0x5, 0x3, 0x3, 0x7ff, 0x5, 0x1, 0x1ff00, 0x2b, 0x92e, 0x8334, 0x2, 0x2, 0x3, 0x5, 0x5, 0xfffffffa, 0x0, 0x81, 0x9, 0x7, 0x800, 0x10000, 0x7f, 0x4, 0x5, 0x10001, 0xe75e, 0x5, 0x3, 0x7, 0xe5ac, 0xfffff000, 0xb, 0x40, 0xa, 0x9, 0x553, 0x7f, 0xffffffff, 0x0, 0x7, 0x200, 0x3, 0xfffffffa, 0xc, 0x8, 0x3, 0x0, 0x1, 0x0, 0x67c, 0x4, 0x80000000, 0x617, 0x4, 0xf, 0x298, 0x2, 0x6, 0x6, 0x0, 0x3, 0xbc1, 0x9, 0x81, 0x9, 0x2, 0x0, 0x7f, 0x4bc, 0x9, 0x8, 0x3, 0x9, 0x3, 0x1, 0x1000, 0x2, 0xfffffff7, 0x3, 0x1, 0xceb, 0x6b3, 0x2cf2, 0x4, 0x80000000, 0x2, 0x3, 0x200, 0x0, 0x101, 0x101, 0x1b78, 0x3, 0x6, 0x0, 0x110b, 0xfffffff9, 0x8, 0x3, 0x5, 0x4b, 0x20000, 0x81, 0x5, 0xffffff01, 0xfffffffc, 0x7, 0x2, 0x1, 0x369e, 0xfffffffd, 0x101, 0x7e, 0x9, 0x5, 0x9, 0x1, 0x9, 0x2, 0x3, 0x0, 0x6, 0x820, 0xffe, 0x6, 0x3, 0x3d, 0x200, 0x7, 0xfffffff8, 0x9, 0x8, 0x7, 0x8, 0x2, 0x0, 0x80000000, 0x10000, 0x9, 0x4, 0x6, 0x5, 0x2, 0x2, 0xff, 0x4795, 0xe134, 0x80000000, 0x1c, 0x7, 0x4, 0xfffffff5, 0x0, 0x5ec, 0x0, 0x0, 0x1, 0x2, 0x8, 0x5a8, 0x2, 0xff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x7fff, 0x10000, 0x5, 0x101, 0x7, 0x7, 0x7, 0x4, 0x80, 0xb8c, 0x2, 0x3, 0xfffffffa, 0xb, 0x5, 0x4, 0x8a60, 0xfffffffd, 0x0, 0x1, 0x7, 0xfffffffd, 0x8000, 0x8, 0xd47f, 0x1000, 0xff, 0xff, 0xa, 0x3, 0x4, 0x10000, 0x771, 0x2, 0xd9ef, 0xa9, 0x4, 0x0, 0x1, 0x3, 0x5, 0x3, 0x3, 0x8, 0x8, 0x4634, 0x3f6, 0x7ff, 0x2, 0x40, 0x2, 0x10001, 0x6, 0x3, 0x0, 0x9, 0x7fff, 0x4ae, 0x6, 0x36000000, 0x3ff, 0x4, 0x9eb3, 0xffff, 0x10001, 0xf9b, 0x9, 0x4, 0x6, 0x2, 0x5, 0x1, 0x0, 0x457f, 0xfd, 0x6, 0x5, 0x5, 0x7fff, 0x200, 0x0, 0x4, 0x8000, 0x6, 0x710f, 0x3, 0x7, 0x7, 0x1, 0x800, 0x8, 0x7, 0x9, 0xb3f6, 0x3, 0x0, 0x1, 0x7, 0x6, 0x22, 0x1000, 0x81, 0x1, 0x8000, 0x6000, 0x1, 0x2, 0x4bdd, 0xee, 0x34, 0xafa, 0xfff, 0x8, 0x4, 0xb5, 0x7, 0x0, 0xad7, 0x4, 0x4fb, 0x1, 0x3, 0x1, 0x9, 0x9, 0x9, 0x582, 0x5a, 0xcd, 0x0, 0x9, 0x8, 0x4, 0xfffffff7, 0x2, 0x0, 0x4, 0x2, 0x0, 0x7b, 0xfffffa69, 0x5, 0x101, 0xfff, 0x2, 0x59, 0x5, 0x1c49, 0x3, 0x5, 0x8, 0x85fb, 0x4, 0x2, 0x5, 0x5, 0x4, 0x1, 0x61, 0x5, 0x10000, 0x8, 0x3, 0x81b, 0x4, 0x0, 0x7fff, 0x0, 0x5, 0x0, 0x80000000, 0x40, 0x5, 0x5, 0x8, 0x1ff, 0x56, 0x2d8, 0x456, 0x78, 0x7, 0x7, 0x400, 0x1464, 0x40, 0x1, 0x2e74, 0xf9c, 0x0, 0x2df4, 0x8, 0x7c80, 0xfffffff8, 0xfffffff7, 0x9, 0x3, 0xfff, 0x0, 0x4f58, 0xa, 0x9, 0x800, 0x4040, 0x5, 0x8, 0xe51, 0x5, 0xfffffff4, 0x9, 0x3, 0x7fff, 0x800, 0x4, 0x1, 0x1a, 0x2, 0x80000000, 0xffff, 0x1, 0x5, 0xda6, 0x8, 0x6, 0x3, 0xf10d, 0xffffffff, 0x7, 0x3, 0x1, 0x9, 0x8001, 0xffff, 0x2, 0x2, 0x4, 0x1ff, 0x0, 0xfe, 0x3, 0x3ff, 0x5, 0x0, 0x3, 0x9, 0x3, 0x9, 0x49, 0x8, 0x7, 0x8, 0x5, 0x4a0, 0x3, 0x40, 0x6, 0x0, 0xfffff001, 0x7, 0xfffffffe, 0xb6b1, 0x7, 0x4, 0x8, 0x81, 0x2, 0x7fffffff, 0x8, 0x90, 0x38800000, 0x6, 0x84b, 0x6, 0xa, 0x9, 0x1, 0x1, 0x8, 0x9, 0x95, 0x5, 0xc, 0x1, 0x5, 0x6, 0x6, 0x10001, 0xeb, 0x7fff, 0x78a, 0x800, 0xffff0001, 0x2, 0x67, 0x7, 0xd, 0x5, 0x14, 0x6, 0x7, 0x1, 0x7, 0xb1db, 0x4, 0x7, 0xff, 0xee2d, 0x800, 0x9363, 0x0, 0x7ff, 0x8, 0x7, 0xa0b7, 0x6, 0x0, 0x5, 0x4, 0x4, 0x1, 0x6, 0x8, 0xd2d7, 0x5, 0x7, 0xe, 0x3, 0x8, 0x5, 0x6, 0x400, 0x6, 0xe411, 0x1, 0x8000, 0xffffffff, 0x7, 0x6, 0x0, 0x400, 0x0, 0x7, 0x0, 0xce0, 0x8, 0xfff, 0x7, 0x8, 0x8f, 0x6, 0x3, 0x59, 0x800, 0x6, 0x1, 0x34, 0x3ff, 0x0, 0x0, 0x6, 0x2, 0x56, 0x10000, 0x5beb, 0x8, 0x10000, 0xffffff67, 0x5, 0x68b3, 0x3, 0x2, 0xf, 0x40400, 0xfffffff8, 0x2a, 0x8, 0x1000000, 0x80000000, 0x2, 0x100, 0x80000000, 0x5, 0x3, 0x1ffc0, 0x7, 0x6, 0x7, 0xe, 0x3, 0x20a, 0x718f, 0x5, 0x3, 0x2, 0x3, 0x5, 0x8, 0x1000, 0x101, 0x8, 0x81, 0x2, 0x7, 0x3, 0x6, 0x8000, 0x3, 0x3be, 0x5, 0x9, 0xfa, 0x2, 0x10001, 0x0, 0x800, 0x5, 0x3, 0x2, 0x1, 0xfffffffd, 0x7ff, 0x5, 0x2, 0x1, 0xfffffffb, 0x0, 0xc894, 0x8, 0xf9, 0xb, 0x1, 0xb0fe, 0x1000, 0x66eb, 0x7fffffff, 0x2000, 0xfffffff4, 0x6, 0x800, 0x80000000, 0xc, 0x200, 0x5, 0x6, 0x8, 0x2, 0x1, 0x7fff, 0xf, 0xa5, 0x1, 0x31, 0x1, 0x6, 0x60, 0x3, 0x0, 0xffffffff, 0x8, 0xeb, 0x2ce, 0xf4fc, 0x6, 0x80, 0x0, 0x8, 0x8000, 0x80000000, 0x8, 0x9, 0x8, 0x1, 0x7fffffff, 0xfff, 0xc, 0x3, 0x81, 0x8, 0x8000, 0x3, 0x2f, 0x7ff, 0x0, 0x91, 0x9, 0xa0b, 0x401, 0x8e1, 0x2, 0x5, 0xe7, 0x7, 0x3, 0x2, 0x2, 0x48db, 0x10001, 0x4, 0x0, 0x8001, 0xe, 0x5c, 0x87, 0x0, 0x4, 0x1, 0xffff, 0x5, 0x5, 0x8, 0x9, 0x1cab, 0x8e, 0x9bd3, 0x0, 0x4, 0x8, 0x1, 0xfffffffa, 0xb10, 0x1, 0x5, 0x2b4, 0xe, 0x6f2eb70, 0x2, 0x2, 0x1, 0x6, 0x8, 0x4, 0xd, 0x2, 0xc59, 0x9, 0xfffffffc, 0x8, 0x8, 0x6, 0x2, 0x1ff, 0x8, 0x2, 0x2, 0x0, 0x8, 0x10, 0x200, 0x5, 0x80000000, 0x2, 0x4, 0x6f8, 0x1, 0x400000, 0x8001, 0x40, 0x1, 0x7, 0x8, 0x5, 0x10, 0xc4, 0xffffffff, 0x800, 0x7, 0x5, 0x400, 0x100, 0x1, 0x80000000, 0x8000, 0x8, 0x7, 0x1fe000, 0x5a5, 0x0, 0x81, 0x6, 0x5, 0xa1, 0x3, 0x4, 0x9, 0x0, 0x1ff00000, 0xfffffffb, 0xe, 0x5, 0x2, 0x7, 0x3, 0x6, 0x40, 0x5, 0xfa97, 0x2, 0x0, 0x5, 0x4, 0x1, 0x5dd, 0xd26, 0x51, 0x7af, 0xdcc, 0x10000, 0x10, 0x200, 0x8000, 0xfff, 0xb2, 0xfffffffd, 0x4, 0x5, 0x6, 0x2, 0x800, 0x5, 0x330, 0x4, 0x9, 0x81, 0x8e38, 0x3, 0xfcd, 0x4, 0xd2, 0x2, 0x67e, 0x2, 0x5, 0x5, 0x6896f2c3, 0x3, 0x20, 0x1, 0x2, 0xfff, 0x4, 0x0, 0x1, 0x9, 0x0, 0x4, 0x165f2829, 0x3, 0x0, 0x9, 0xfffffffb, 0x40000000, 0x4, 0x6, 0x2fe, 0xfffffff8, 0xf42a, 0x5, 0x7, 0x2, 0x8, 0x7, 0x0, 0xd, 0x5, 0x2, 0x0, 0x4, 0x1, 0x8, 0x7, 0x2, 0x8, 0x40, 0x77, 0x2, 0xffff6112, 0x8, 0x2, 0x4, 0x8c2, 0x10001, 0x8d, 0x1, 0x10001, 0x0, 0x3, 0x5, 0x3, 0x1000, 0x32d, 0xfffffff7, 0x24, 0xfff, 0x7, 0x9, 0x1, 0x3, 0x9, 0x6, 0x2, 0xc425, 0x1ff, 0x476, 0x10, 0x5, 0x3, 0x6, 0x7, 0x7, 0xb7, 0xb6d4, 0x4, 0x7fffffff, 0x7, 0x3, 0x10001, 0x8, 0xe3, 0xb5, 0xc2f, 0x40, 0x7, 0x99ad, 0xfff, 0x6, 0x6, 0x6, 0x8, 0x0, 0x10001, 0x7, 0xfe9, 0x6, 0x0, 0x7, 0x0, 0x81, 0x1000, 0x0, 0x4, 0x7, 0x3, 0xb, 0x2, 0x7, 0x7, 0x6, 0xfffffff0, 0x3, 0x7c, 0x4, 0x7, 0x4, 0x7, 0x100, 0x1, 0x8, 0x276b, 0x8001, 0x2, 0x5, 0x4, 0x334, 0x1, 0x5, 0x80000001, 0x3, 0x3, 0x1, 0x200, 0x7, 0x8, 0x0, 0x7, 0x5, 0x9, 0x0, 0x6, 0x6, 0x1, 0x8, 0xffffffff, 0x81, 0xe, 0x2, 0x8001, 0x1, 0x0, 0x7, 0x9, 0x3, 0x9, 0x9, 0x1000, 0x80, 0x9, 0x4, 0x8, 0x6, 0x1, 0x3ff, 0x6, 0x1, 0x0, 0x10000, 0xe, 0x9, 0x5, 0x2, 0x4bd, 0x8, 0x2, 0x9, 0x316, 0x9, 0x55b, 0xc, 0x7dda, 0xa2d, 0x2, 0x1, 0x101, 0x6, 0x8000, 0xe2, 0x7fff, 0xced7, 0xe, 0x2, 0x2, 0xd896, 0x6, 0x1, 0x9, 0xa3f, 0xe2ec, 0xfffff801, 0x8, 0x2, 0x6, 0x5, 0x7, 0x7, 0x4, 0x101, 0x9, 0xf2, 0x1, 0x400, 0x80, 0x6, 0x0, 0x6, 0x6f5d741a, 0x100, 0x9, 0x8173, 0x5, 0x251da08a, 0x7, 0x5, 0x4, 0x3, 0x2, 0xae, 0x5, 0x8, 0xc, 0x5, 0x7, 0x9, 0x7fffffff, 0x100, 0x4, 0x4, 0x5, 0x5, 0xcbc, 0x3, 0x21fb, 0x9, 0x7ff, 0x5, 0x81, 0xc, 0x7f, 0x34e, 0x9c, 0xb, 0x100, 0x71d2, 0xb, 0x8001, 0x9, 0x3, 0x5, 0xffffffff, 0xfffffffb, 0x4, 0x0, 0x6, 0x2, 0x2, 0x102000, 0x80, 0x3, 0x3, 0x100, 0x9, 0x0, 0x8, 0x3, 0x286, 0x4e, 0x29d6, 0x80000000, 0x1, 0x6, 0x6, 0x2, 0x6, 0x9, 0x3, 0x8, 0x7, 0xa491, 0x63f8, 0x8, 0x9, 0xe71, 0x8518, 0x7, 0x2, 0x7, 0x3, 0x6, 0xc5, 0x9, 0x1000, 0x80, 0x10000, 0x5, 0x5, 0x5d83dd6b, 0xfffffffb, 0xffff, 0xa, 0x1, 0x7fff, 0x5038, 0xffffff01, 0x0, 0x95, 0x8, 0x104b, 0x4, 0xfff, 0x0, 0x8, 0x4a1, 0x4, 0x7, 0x7ff, 0x7, 0x200, 0x7fff, 0x6, 0x6, 0x9, 0x8, 0x93b, 0x3, 0x7188, 0xb20d, 0x272, 0x4, 0x40000, 0x9e2c, 0x5, 0xc, 0x3, 0x7, 0x8, 0xffff, 0x4, 0x200, 0x7, 0x5, 0x29d8c3ac, 0x6, 0x7, 0x800, 0x8, 0xffff8001, 0x9, 0x2, 0x5, 0x0, 0x93, 0x9b2, 0x400, 0x8, 0x2, 0x400, 0x7, 0x7f, 0x7fff, 0x3faa, 0x5, 0x2, 0x1ff, 0x0, 0x440, 0xfffffff7, 0x9, 0x4, 0x7, 0x1, 0x5, 0x2, 0x5, 0xfffffff8, 0x3b44, 0x6, 0x0, 0x80, 0x4, 0x3ff, 0x40000000, 0x8, 0x2, 0xa, 0x3, 0x6, 0xe6, 0x1, 0x7f, 0x1c85, 0xa42e, 0x5a1b, 0xa752, 0x7e3e, 0x7f, 0xfffffffb, 0x0, 0x810, 0x9, 0x80000000, 0x1, 0x2, 0x1, 0x2, 0x5, 0x0, 0x2, 0x10000, 0x1, 0x1, 0x8001, 0x4, 0x7, 0xd, 0x9, 0x1d600, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x1, 0x48018186, 0x6e6, 0x7, 0xfe5, 0x237, 0x7e, 0x0, 0xa, 0x9, 0x9, 0x800, 0x6, 0x2, 0x7, 0x7f, 0x5, 0x73, 0x6, 0x8, 0x3e, 0x10, 0x2, 0x8, 0x5, 0x3e6e, 0x0, 0x988, 0x7, 0x1, 0xffff, 0x7fffffff, 0x5, 0x3, 0x3, 0x605, 0x6, 0x717589b5, 0x3, 0x1000, 0x2, 0x1, 0x5, 0x2, 0x6, 0x100, 0x5, 0x7f, 0x5e25, 0x8, 0x10, 0xff, 0xfffffffa, 0x830, 0x50, 0x2, 0x3, 0x1, 0x4, 0x10001, 0x1000, 0x1, 0x7ff, 0xd, 0x4, 0xf, 0x9, 0x9, 0x10, 0x7f, 0x27, 0xa295, 0x80000001, 0x8001, 0x0, 0x5, 0x7, 0xff, 0x5, 0x80000001, 0x615, 0x0, 0x4, 0x5, 0xfffffff9, 0x8, 0x5f5, 0x0, 0x1, 0x1, 0xe, 0x6, 0x9, 0x4, 0x4, 0x200, 0x2, 0x8000000, 0xffff, 0xf6a, 0xfffffe00, 0x5, 0x4f92d252, 0x0, 0x0, 0x8000, 0x9, 0x8, 0x1, 0x8, 0xffff, 0x7fff, 0x6c5ce4eb, 0x16aa, 0x87, 0x8, 0x27bb, 0x8001, 0x2, 0x3, 0x3, 0x7, 0x8, 0x8000, 0x5, 0x4800, 0x80000001, 0x6, 0x9, 0xf, 0x9, 0x9, 0x4, 0x7, 0x9cdb, 0x8, 0xffffffff, 0x9, 0x1a6c, 0xfffffffc, 0x0, 0x10001, 0x1e90, 0x0, 0x3, 0x9, 0x8115, 0x5c6, 0x1, 0x9, 0x2, 0x5, 0x486, 0x1, 0x7, 0x7b, 0x3604, 0x3ff, 0xd, 0x7, 0x8000, 0xc, 0xfffffffd, 0x5, 0x1, 0x2, 0x3, 0xfffffffe, 0x400, 0x6, 0x0, 0x0, 0x9, 0x8, 0x0, 0xc27, 0x6, 0xa, 0x0, 0xe, 0x0, 0x0, 0x5, 0x7, 0x8, 0xf, 0x8000, 0x10001, 0x3, 0x8, 0x8, 0x8001, 0x69a, 0x7, 0x9, 0x74c, 0x3, 0x1ff, 0xffffff7f, 0x4, 0x0, 0x6, 0x6, 0x2, 0x7, 0x6, 0x629e, 0x7, 0x9c7, 0x8, 0x2, 0x37e, 0x3, 0x6, 0x6, 0x9, 0xffffffff, 0x8001, 0x0, 0x2, 0xfffffff9, 0x2, 0x100, 0x9, 0x9, 0x1, 0x9, 0x2, 0x100, 0xfffffffd, 0x4, 0xca5, 0x5, 0x10001, 0x3, 0x9, 0x6, 0xfff, 0x4, 0x8, 0x80000000, 0x21bfb3c7, 0x10000, 0x5, 0x3, 0x84, 0x7ff, 0x80000000, 0xfffff91f, 0x7a23, 0x5, 0x8, 0x4, 0x0, 0x8, 0x401, 0x1000, 0x200, 0x2, 0x1, 0x4, 0x3, 0x0, 0xb6, 0x5, 0x1, 0x2, 0x7fffffff, 0xcbd, 0x3, 0x9de, 0x4, 0x6, 0x4, 0x2, 0x0, 0xb2ab, 0xb07f, 0x3, 0x7ff, 0x2, 0x3, 0xf, 0x8, 0xd, 0x0, 0x1, 0x7d, 0xe, 0x2, 0x2, 0x6, 0x6, 0x5c, 0xc600000, 0x8, 0xfffffff8, 0xdf28, 0xfffffff8, 0x3ff, 0x7, 0xffff7fff, 0x5, 0x800, 0x1ff, 0x803, 0x7, 0x3, 0x6, 0x9, 0x7, 0x7ca4faf2, 0x9, 0xaee, 0x3, 0xfffeffff, 0x6, 0x9, 0x1, 0x9, 0x1, 0x9, 0x8, 0x1, 0x3, 0x6, 0x2, 0x2, 0x3, 0x5, 0x80, 0xfff, 0x3, 0x8, 0x0, 0xbc, 0x5, 0x8, 0xe, 0x3, 0x8001, 0x8, 0x6, 0x3, 0x6, 0x74ae, 0x401, 0x2, 0x3, 0x8, 0x9b, 0x80, 0xdc7, 0x1, 0x3, 0x8, 0x80000000, 0x7, 0x9, 0xffffffff, 0x1, 0x6, 0x8, 0x9, 0x7fffffff, 0x18f3, 0x9, 0x8001, 0x5, 0x80, 0x0, 0x0, 0x8, 0x0, 0x80, 0x80000000, 0x7fffffff, 0x3, 0x4, 0x1, 0x5, 0xe, 0x3, 0x4, 0x9caf, 0x2, 0x401, 0xda, 0x40000, 0x2, 0x1, 0x10001, 0x1ff, 0x40, 0x3ff80000, 0x1, 0x80000001, 0x8, 0x4, 0x7f, 0x80, 0x7, 0x3, 0x1ff, 0x6, 0x10001, 0x5, 0xf3, 0x1c, 0x7, 0x5, 0x4d8, 0x9, 0x2ee, 0xc, 0x9, 0x8, 0x9, 0xffffffff, 0x81, 0x2108, 0xf13, 0xfffffffe, 0x564, 0x0, 0x101, 0x5, 0x0, 0x0, 0x3, 0x800, 0x9, 0x0, 0x4, 0xfbb, 0x158, 0x717f, 0x1, 0x1, 0x3, 0x9, 0xa9e9, 0x7, 0x3, 0x2, 0xb, 0x10, 0x1, 0x9b61, 0x7, 0x80, 0x0, 0x5, 0x7d8, 0x9, 0x9, 0x8, 0x2, 0x546, 0x1, 0xe, 0xde7, 0x8, 0x7, 0x2, 0x8, 0x6, 0xe61, 0xfffffffa, 0x0, 0x0, 0x5, 0x1, 0x6, 0x40, 0x50d, 0x2, 0x27f, 0x5, 0x200000, 0x3, 0xa04, 0x81, 0x7f, 0x103, 0x80000001, 0x9, 0xe0, 0x1ff, 0x1, 0x0, 0x9, 0x80, 0xffffffff, 0xc88, 0x4, 0x2, 0x1, 0x80000000, 0x5, 0x8, 0x1, 0x3a, 0x8, 0x8000, 0x7fffffff, 0x9, 0x4, 0x7, 0xfff, 0x7, 0x4, 0xa1a, 0xeea, 0x0, 0x4, 0x3, 0x1, 0x10001, 0x0, 0x5, 0x7, 0x8000, 0xe6, 0xf8000000, 0x7, 0x2, 0x0, 0x3ff, 0x4, 0x7, 0x4, 0x2, 0x3, 0xc, 0x8, 0x49f8b9ae, 0x7, 0xfff, 0x8000, 0x0, 0x0, 0x7, 0x8c, 0x4, 0x8, 0x6, 0xffffffff, 0x1, 0x6, 0x507f, 0x5, 0x6, 0x8, 0xffffffa0, 0x5, 0x2, 0x8, 0xd, 0x3, 0x9, 0x4, 0xb1, 0xfff, 0x60f122e9, 0x8, 0x2, 0x6, 0xb582, 0xaa, 0x5, 0x7, 0x2, 0x10, 0x6, 0x39f, 0x5, 0x4587, 0x2, 0xd0, 0x3, 0x286, 0x10000, 0x7, 0x1ff, 0x9, 0x40, 0x8, 0xe, 0x1000, 0x1, 0x2e00000, 0x4364, 0x1, 0x6e8, 0x3, 0x1, 0xb, 0x8, 0x2, 0x40, 0x2, 0x1, 0x50, 0x8, 0xffffffd9, 0x0, 0x9, 0x1, 0x9, 0x3ff, 0x7, 0x4, 0x1, 0xffffffff, 0xa, 0x53489562, 0x8001, 0x0, 0xea5, 0x81, 0x4, 0xdd, 0x7, 0x6, 0x2, 0x401, 0x3, 0x401, 0x2, 0x7f, 0xc2a, 0x7, 0x3, 0x8, 0x3ff, 0x200, 0x8, 0x9, 0x3, 0xa, 0x3, 0xba13, 0xedc0, 0x2, 0xab, 0x2, 0x81, 0x9, 0xa, 0x3, 0xff, 0x7, 0x3a, 0x7, 0x101, 0x6, 0x2, 0x8, 0x10000, 0x4, 0x2, 0x7, 0x81, 0x3, 0xffff, 0xf, 0x8, 0x2, 0x5, 0xe35, 0x1ff, 0x9, 0x1, 0x7b46, 0xfe, 0x0, 0xfffff216, 0x7fffffff, 0xc, 0x8, 0xffff, 0x9, 0x7, 0x7, 0x80000000, 0x8, 0x6, 0x3, 0x7f, 0x0, 0x1, 0x5, 0x7, 0x1, 0x9, 0x4, 0x4db5, 0x8, 0x22, 0x10001, 0x9, 0xfff, 0x1cfb, 0x1, 0xe2, 0xd19, 0x7, 0x8001, 0x8, 0x0, 0x4, 0x5, 0x8, 0x5900b71d, 0x10000, 0x0, 0x2, 0x4, 0x0, 0x10001, 0xfffffe00, 0x5, 0xffffffff, 0x3, 0xfffffff7, 0x7, 0x8, 0x10000, 0x10000000, 0x8, 0x3ff, 0x9, 0x1, 0x81, 0x401, 0x1, 0x7, 0xfffffffb, 0xffff8000, 0x401, 0xffffffff, 0xf, 0x1, 0x9, 0x74f, 0x0, 0x3, 0x5, 0x5, 0x5d1f, 0xfffffff7, 0x8000, 0x4, 0x7, 0x9, 0x9, 0x10000, 0x5, 0x3c5f, 0x5, 0x9, 0x4, 0x9d91, 0x1000, 0x0, 0x6, 0xf, 0x7, 0x60000000, 0x6, 0x80000001, 0x3, 0x5, 0x8, 0xfffffffa, 0x7ff, 0x3, 0x6, 0x0, 0x8, 0x0, 0xd, 0x81, 0x800, 0x7f, 0x62cbfa, 0xfffff348, 0x8, 0x7, 0x2, 0x7, 0x6, 0xfffffff7, 0x4, 0x0, 0xe, 0x6, 0x0, 0x1, 0xe, 0x3, 0x7ff, 0x4, 0x19, 0x1, 0xc0000000, 0x3, 0xfd5f, 0x400, 0x8, 0x10001, 0x2c, 0xd, 0x5, 0x2, 0xffffffff, 0x2, 0x8, 0x0, 0x200, 0x2, 0x8, 0x3, 0x8, 0x0, 0x9, 0x9, 0x3, 0x7, 0x3, 0x9, 0xab33, 0x3, 0x6, 0x4f7b, 0x4, 0x23af, 0x80000000, 0xff, 0x8000, 0x6, 0x1, 0x6, 0xff, 0x7, 0x464039c0, 0x1, 0xffffffff, 0x63, 0x7, 0x7, 0x7, 0x4, 0x1000, 0x3, 0x5, 0x9, 0x2, 0xb39, 0xfffffff5, 0x9, 0xa286, 0x100, 0x9, 0xf, 0x7b55, 0xffffffff, 0x2, 0x0, 0x6, 0x2, 0x1, 0x4, 0x5c40, 0x3, 0x4, 0x2, 0xe, 0x1, 0xb32, 0x4, 0x5, 0x401, 0x61c1, 0x4, 0x2, 0x3, 0x6, 0x75, 0x0, 0x3, 0xc8, 0x8, 0x704f7881, 0x8001, 0x91b0, 0x2, 0x2, 0x1, 0x4, 0x8bcc, 0xff, 0x5, 0x4, 0x7fff, 0x6e5ac79a, 0x10, 0x0, 0x2, 0x0, 0x9, 0x7, 0x22f, 0x0, 0x6, 0x6, 0x7, 0x401, 0x8, 0xfffffffd, 0x4, 0x80000000, 0x101, 0x4, 0x10eccd32, 0xf, 0x9, 0x5, 0x1, 0x8, 0x8, 0xf21e, 0x5, 0xa, 0x60, 0xc, 0xffff, 0x7, 0x8, 0x14, 0x4, 0x7, 0x1, 0x7, 0x80, 0x1, 0xfb5, 0x4, 0x1052, 0x0, 0x40, 0xc6f769e, 0x1ff, 0x4, 0xf, 0x3, 0xffff6824, 0xd98, 0x0, 0xfff, 0xa, 0x0, 0xda, 0x3, 0x5f7, 0x4, 0x3, 0xfffffff9, 0xf3b, 0x5, 0x3, 0x3, 0x939, 0x7, 0x8, 0x2, 0x9, 0x0, 0x28000, 0x0, 0x5, 0x8, 0x1ff, 0x4, 0x3, 0xf1, 0x9, 0x7, 0x80000001, 0x3, 0x5, 0x9, 0x6, 0xff, 0x1, 0x5, 0xc5, 0x10, 0x8, 0x3, 0x6, 0x3, 0x7fffffff, 0xfd80, 0xc4a, 0x4, 0x4, 0x1, 0x2, 0xd726, 0x7, 0x10000, 0x3, 0x800, 0x2, 0x5, 0x0, 0x6, 0xc, 0x1a9, 0x294, 0x101, 0x0, 0x7, 0x4, 0x1, 0x95, 0x4, 0xb562, 0xb56, 0x5, 0xf9a, 0x3, 0x9, 0xfff, 0xf5b9, 0x0, 0x3f, 0x1, 0xa78, 0x9f1b, 0xab, 0x1, 0x24, 0x0, 0x9, 0x7dd, 0x401, 0xffffffff, 0x7, 0xe, 0x5, 0x8, 0x1, 0x8000, 0x8000, 0x2, 0x80000001, 0x9, 0x2, 0x3, 0x10000000, 0xa, 0x638, 0x3, 0x2, 0x1, 0x78a, 0xf2b, 0xc, 0x4, 0x8, 0x9, 0xf9, 0x5, 0x7, 0x8, 0x1, 0x36b7a001, 0x1, 0x5, 0x6, 0x8ad, 0x3, 0xa9, 0x237, 0xfff, 0x9, 0x7, 0xce, 0x37c, 0x7, 0xc0000000, 0x2, 0x7ff, 0xffff, 0x2, 0x8000, 0x5, 0x4, 0x0, 0x2, 0x4, 0x3, 0x0, 0x4, 0x2, 0x9, 0x401, 0x1000, 0x8, 0x8, 0x7, 0xfffffffc, 0x1, 0x4, 0x3863, 0xef1, 0x5, 0x4, 0x800, 0x81, 0x400, 0x5, 0x5, 0xe, 0x588, 0x6, 0x1, 0x2, 0x2, 0xc6a6, 0x9, 0x38e, 0x6, 0xdb5, 0x4, 0x5, 0x80000001, 0x3, 0x7, 0x4, 0x6, 0x4, 0x4, 0xf, 0x0, 0x0, 0x1ff, 0x72a01504, 0x6, 0xe8, 0x3, 0x8, 0x3, 0x3, 0x9, 0x7, 0x0, 0x7, 0x101, 0x3, 0x6, 0x400, 0x101, 0x2, 0x5141, 0x10, 0x7, 0x7fffffff, 0x7f, 0x96, 0x2, 0x6, 0x2, 0x800, 0x6, 0x1, 0x1, 0x5, 0xf45, 0x7, 0x500000, 0x1, 0x3ff, 0x7, 0x22, 0xc, 0x5, 0x81, 0x9, 0x2, 0x3, 0x1d, 0x5, 0x2, 0xd, 0xa, 0x7, 0x7, 0x6, 0xba1, 0xfffffff8, 0x7, 0xfff, 0x4, 0x6, 0xd0d0, 0xe000000, 0x80000000, 0x81, 0xc, 0x2, 0x5, 0x1, 0x4, 0xa015, 0xffff, 0x35, 0x4fc0000, 0x80000000, 0xfffffffd, 0x5, 0x8000, 0x7df19f72, 0x5, 0x200, 0x8, 0x7, 0x2663f8, 0xd, 0x5, 0xde20, 0x3e00, 0x34, 0x0, 0x9, 0x400, 0x1f, 0x0, 0x8, 0x1, 0x7, 0x8, 0x690f, 0xfffffff8, 0x424, 0x8, 0x10, 0xffffffff, 0x3, 0x6c6a54b1, 0x1, 0x800, 0xd, 0x6, 0x0, 0x3, 0x7, 0x7, 0x6, 0x7, 0x9, 0x4, 0x1, 0xd, 0x7, 0x3, 0x401, 0x3, 0x28, 0x141, 0xfffff800, 0x81, 0xfffffff9, 0x3, 0x6a, 0x0, 0x0, 0x2, 0x100, 0x2, 0x7, 0x6c, 0x10001, 0x2, 0x4, 0xfffffffa, 0xff, 0x4, 0x265c, 0x7, 0x4, 0x5, 0x86d6, 0x8, 0x9, 0xc000000, 0x364e, 0xfffffffd, 0x3, 0xffffffff, 0x700000, 0x0, 0x0, 0xfffff001, 0x2000000, 0x862, 0x8, 0x0, 0x3, 0x5, 0x9, 0x2, 0x6, 0xa6, 0x1, 0x1000, 0x3, 0x0, 0x4, 0x3, 0x401, 0x80000000, 0x1, 0x4, 0x2, 0x5, 0x7ff, 0x7fff, 0x59, 0x0, 0x55, 0x101, 0x4, 0xe, 0x0, 0x5, 0x4, 0x8, 0xfffffffc, 0x3, 0x0, 0x2, 0x1f, 0x1, 0x7dbe, 0x100, 0x0, 0x7, 0x29, 0x2, 0x101, 0xb02, 0x101, 0x72, 0xffffffff, 0xfffffffc, 0x81, 0x45, 0xfffffffb, 0xf8b, 0x5966, 0x0, 0x80000000, 0x3, 0x7eb, 0x3ff, 0x0, 0xa, 0x2, 0x3ff, 0x10, 0x5, 0x0, 0x7cef2b43, 0x994, 0x3, 0x2, 0x0, 0xac, 0xfffffffb, 0x24000, 0x53, 0x5, 0x987, 0x4, 0x0, 0x5, 0x5, 0x101, 0x80, 0x9, 0x7, 0x3, 0x80, 0xf, 0xcb9, 0x9, 0x0, 0xffff, 0x8, 0x9eb2, 0x3, 0x200, 0x8001, 0x8, 0x200, 0x100, 0x6, 0x3ff, 0x2, 0xb1, 0x1ff, 0xffffffff, 0xb, 0x1, 0x1, 0x4, 0x4, 0x5, 0x0, 0x5, 0x0, 0x9d16, 0xffffffff, 0x3, 0xfffffffa, 0x4, 0x9, 0x4, 0x5, 0x1, 0x9, 0x9, 0x9, 0x0, 0x1, 0x7, 0xb, 0x7, 0x1, 0xfffffffd, 0x7, 0x6, 0x3, 0x9, 0xef8, 0x2, 0xfffffff0, 0x3, 0x7, 0xfffff801, 0x400, 0x81, 0x8, 0xffffffa7, 0x5417, 0x0, 0x5, 0x6, 0x800, 0x6, 0x1, 0x0, 0x7, 0x5d, 0x2, 0x400000, 0x50b74c11, 0x4e, 0x8, 0x1000, 0x9, 0x3, 0x5, 0x7, 0x7f, 0x2, 0x6, 0x5, 0x98, 0x3, 0x0, 0x9, 0x0, 0x7, 0xa767, 0x9, 0x7, 0x4, 0xff, 0x1, 0x41f, 0xffffffff, 0x5, 0x2, 0x1, 0x7, 0x9, 0x8, 0x3, 0x1, 0x5, 0x10e5, 0x1, 0x9, 0x5ac, 0x5, 0x2, 0x2, 0x1, 0x4, 0x38ea, 0x3, 0x0, 0x0, 0x0, 0x8, 0x9, 0x40, 0x0, 0x6, 0x44f4c42e, 0x4, 0x4, 0x8b, 0x4, 0x0, 0xee8, 0x2, 0x1, 0x2d2, 0x21ad, 0x38, 0x8, 0x2, 0x6, 0x2, 0x1ff, 0x6, 0x89, 0x2, 0x1, 0x67f5, 0x4, 0x80000001, 0xfffffff7, 0x1, 0x4, 0x8, 0x7ff, 0x1, 0x9, 0x7, 0x8, 0x3, 0xb9, 0x3, 0x4, 0x401, 0x7, 0x8, 0x551, 0x0, 0x5, 0x0, 0x88, 0x400, 0x8000, 0x0, 0x4, 0x2, 0x72e, 0x6, 0x7d5, 0x7f, 0x6, 0x5, 0x0, 0x2, 0x83, 0x3, 0x4, 0x6, 0x7fffffff, 0x11, 0x2, 0x95, 0x101, 0x5, 0x8000, 0xffffff7f, 0x5, 0x8000, 0x41, 0x9, 0x0, 0x8, 0x2, 0x2, 0x6, 0xff, 0x62, 0x200, 0x0, 0x400, 0x9, 0x8, 0x0, 0x7, 0x6, 0x7, 0x8, 0xe, 0x401, 0x3, 0xa, 0xfffffffc, 0xfff, 0x2, 0x7, 0x9, 0x7, 0x5, 0x2, 0x3ff, 0x80, 0x8, 0x5, 0x2, 0x5, 0x8, 0x200, 0x200, 0x9, 0xa0, 0x9, 0x8, 0xf, 0xfff, 0x6, 0xf36, 0x9, 0x1, 0x6, 0x6, 0x6, 0xfffffff8, 0x7, 0x7, 0x1, 0x40, 0xf, 0x39, 0x0, 0x6, 0x5, 0x2, 0x5, 0x3, 0x9fa48a9, 0xef, 0x5, 0x6, 0x6, 0x0, 0xfffffffd, 0x4, 0xc, 0x2, 0x3, 0x4, 0x0, 0x7, 0x5, 0x1, 0x8001, 0x6, 0x5, 0xfffffff9, 0x6, 0x7fff, 0xd, 0x1, 0x6, 0x400, 0x3, 0x8, 0xffffffff, 0x7, 0x6, 0x0, 0x9, 0x1, 0x7, 0x6, 0xffffffff, 0x1, 0x60, 0x5, 0x7, 0xa, 0x1, 0x4, 0xec03, 0x9, 0x4, 0x7, 0x0, 0x8, 0x9, 0x9, 0x4, 0x40, 0xf8a, 0x5, 0x0, 0x401, 0xb1, 0xf, 0x7, 0x6a, 0x800, 0x7, 0x0, 0x8, 0x3, 0x1, 0xfffffffe, 0x6, 0x1, 0x200, 0x5, 0xf, 0x3ff, 0xc5, 0x0, 0x68d, 0x9, 0x9, 0x2, 0xed7d, 0x8ad, 0xf, 0x8, 0x9, 0x9, 0x7f, 0x6, 0x9, 0x0, 0x0, 0x9, 0x0, 0x4, 0x3, 0xfffff800, 0x9, 0x9, 0xfffffffd, 0x5, 0x5e5, 0x5, 0x6, 0x1, 0x2, 0x4, 0x0, 0x8, 0xc, 0x0, 0xf, 0x6c, 0x2, 0x1, 0x2, 0x8001, 0x80000001, 0x7863, 0xffff5f06, 0x6, 0x3, 0x200, 0x9, 0x0, 0x80000001, 0x0, 0x4, 0x8, 0x1, 0x4, 0x7, 0x14000000, 0x400, 0x80000000, 0x5, 0x401, 0x9, 0xfffffff9, 0x8, 0x8971, 0x1, 0xfffffff8, 0x7f, 0x1, 0x0, 0x101, 0x3, 0x2, 0x256, 0x10001, 0x8, 0x9, 0x7, 0x1, 0x9, 0x10001, 0x3, 0x2, 0x921c, 0x400, 0x5, 0x7, 0x53, 0x9, 0x101, 0x5, 0x9b, 0x1000, 0x4, 0x1000, 0x0, 0xfffffff7, 0x40, 0x4, 0x1, 0x9, 0x693, 0x201, 0x80000000, 0x8, 0x5, 0xd, 0x2, 0x0, 0x2f, 0x0, 0x2, 0xfffffffc, 0x3, 0x3, 0x1, 0x2, 0x2, 0x71, 0x2, 0x1, 0x9, 0x2, 0xd3, 0x6, 0x6, 0x401, 0xfef, 0x7ff, 0x1, 0x6, 0x100, 0x9, 0x365, 0x0, 0x121, 0xbfa3, 0xf11, 0x4, 0x8, 0x5, 0x7, 0xfcc, 0x4, 0xb99, 0x80, 0x100, 0xfffffffb, 0x7, 0x401, 0x0, 0x2, 0x8, 0x9, 0x59, 0x6, 0x0, 0x6, 0x6, 0x2e9f, 0x8, 0x8000, 0x10001, 0x2, 0x7, 0x9, 0x2, 0x1, 0x1000, 0x6, 0x4, 0xfffffff9, 0xa39, 0xfffffffd, 0x4, 0x1, 0x9, 0xc, 0x100, 0x8, 0x8, 0x2, 0x0, 0x1, 0x5, 0xfffffa2f, 0x80000001, 0x6, 0x8, 0x7, 0x81, 0x6, 0x3, 0x3ff, 0xfffffffa, 0x8, 0x1, 0x6, 0x4, 0x52fc, 0x4, 0x20e, 0x6, 0x6, 0x5, 0x800, 0x7, 0x1, 0x1000, 0x100, 0x488b, 0x7fff, 0x87, 0xa1, 0x7, 0x10001, 0x9, 0x68, 0xa, 0x7, 0xfffffff8, 0xfffffff7, 0x9, 0x4, 0x8, 0x0, 0x9, 0xffff, 0x2, 0x8001, 0xfffffff8, 0x1, 0x4, 0x3, 0x7, 0x0, 0x2, 0x5, 0x9, 0x3, 0x1, 0x6, 0x4669, 0x445, 0x9, 0x3, 0xf, 0x10001, 0x0, 0x1, 0x100, 0xd, 0x3, 0x1, 0x0, 0x1000, 0x1, 0x5, 0x7, 0x6, 0x6, 0x4, 0x7, 0x8000, 0x7, 0x81, 0x800, 0x6, 0x8, 0x9, 0x0, 0x9, 0x1, 0x4, 0x712, 0x1, 0x3, 0x9c, 0xe, 0x10001, 0x5, 0x8, 0x40, 0x7, 0x8000, 0x2, 0x80000000, 0xf, 0x4, 0x30, 0x0, 0x4, 0x4, 0x6, 0x2, 0x3, 0x4, 0x7, 0xfffffff8, 0xba, 0x5, 0x9, 0x1, 0x6aec4272, 0x6, 0x0, 0xfff, 0x0, 0xb, 0x8, 0x8e, 0x0, 0x3, 0x800, 0xff, 0x7, 0x0, 0x7, 0x0, 0x100, 0x2, 0x400000, 0x5, 0x7, 0x5, 0x1, 0x80000001, 0x1, 0x7, 0x5, 0xde, 0x8000, 0x1, 0x1, 0x5, 0x401, 0xf83c, 0x0, 0x5, 0x10000, 0x1, 0xe, 0x1, 0x0, 0x2, 0x4, 0x7ff, 0xb79a, 0x5, 0x8, 0x89a, 0x5, 0x93, 0x1, 0x9, 0xc956, 0x5, 0x3, 0x3, 0x6, 0x5, 0x8, 0x0, 0x100, 0xfffffffa, 0xffff940c, 0x9, 0x40, 0xfffff63e, 0x100, 0x3, 0x359, 0x2b, 0x200, 0x2, 0x7, 0x9, 0x9b49, 0xa7, 0x0, 0x5604, 0x635, 0x2, 0xffff, 0x7, 0x5, 0x8, 0x4, 0x6, 0x9, 0x1, 0xd, 0x7, 0x4, 0x7fff, 0x81, 0x9, 0xc3e, 0x3, 0x6, 0x1216c00, 0x8, 0x8, 0xfffffffa, 0x4, 0x0, 0xd0, 0x10001, 0x2, 0xb, 0x3, 0x80000000, 0x5, 0x20000000, 0x3, 0x9, 0xffff, 0x6, 0x6, 0x8000, 0x0, 0xec, 0x4, 0x2, 0x7, 0x2cc, 0x5, 0x400, 0x8000, 0x7, 0xfff, 0xf, 0x6, 0x8ef, 0x1, 0xfbc, 0x6, 0x5, 0x9, 0x80000001, 0x5, 0xf6, 0x200, 0x7f, 0x1, 0x6, 0x4, 0x8, 0x6, 0x7f, 0x1924, 0x1000, 0x49, 0x7fffffff, 0x7, 0x200, 0x0, 0x1, 0xf22, 0x417, 0x80, 0x80000001, 0x5, 0x1, 0x7, 0x3, 0x0, 0x9, 0x7ff, 0xc8, 0x0, 0x1f, 0x4, 0x5, 0xfffff800, 0x200, 0xdda, 0x3, 0x4, 0x0, 0x3224, 0x9ad3, 0x5b0c, 0x400, 0x8, 0x7, 0xfffffffd, 0x3, 0x0, 0x29a74dfe, 0x9808, 0x6, 0x3, 0x3, 0x2, 0x1, 0x6, 0x9, 0x6, 0xfffffffa, 0x10001, 0x6, 0x1, 0xd, 0x9, 0x800, 0xff, 0x4010000, 0xffff, 0x1, 0x5, 0x6, 0x8, 0x0, 0x401, 0x5, 0x5c, 0x18c, 0x6, 0x80000000, 0x102000, 0x6, 0x2, 0x6, 0x429, 0xa, 0x8, 0x7, 0x6, 0xffffffff, 0x5, 0x1592, 0x1, 0x37, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x800, 0x4, 0x7, 0xae3b, 0x1000, 0x3, 0x5, 0x8, 0x4, 0xe, 0x8, 0x6, 0x2, 0x40, 0x5, 0x200, 0x2f4, 0x6, 0x0, 0x1, 0x9, 0x9, 0xfffffe01, 0x43, 0x3, 0x7ff, 0x7, 0x7fff, 0x1, 0x6, 0x5, 0x9, 0x100, 0x4, 0x8, 0x3, 0x3, 0x80, 0x6, 0x8, 0x7f, 0x99d, 0x5, 0x800, 0x10000, 0x7ff, 0x2, 0xfffffffb, 0x400, 0x580, 0x80000001, 0x6, 0xfffffff9, 0xd, 0x80000001, 0xffff, 0x4, 0x6f1, 0xad, 0xfffffffc, 0x3, 0x4, 0x1, 0x3, 0x0, 0x7, 0x7f, 0x10000, 0x1, 0x8, 0x2, 0x4, 0x800, 0x6, 0x6, 0x99, 0x4, 0x2, 0x5, 0x8, 0x9, 0x8, 0x10d, 0x3, 0x1, 0xc7f, 0x2, 0x0, 0x2, 0x101, 0x0, 0x9, 0x6, 0x2, 0x2, 0x4, 0x7, 0xd4, 0xc, 0x2, 0x101, 0xfffffff8, 0x6, 0xc13, 0x2, 0x7, 0x7fff, 0x1b699ca1, 0x5394, 0x3, 0x5, 0x3, 0xfffffff4, 0x5, 0xb9c9, 0xfbd5, 0x7, 0x3, 0x9, 0xccf, 0x6, 0x0, 0xf, 0x2, 0x400, 0xf0, 0xfff, 0xc, 0x21, 0x7, 0x4, 0x7f, 0x1, 0x9, 0x8f, 0xa, 0x7fffffff, 0x6, 0xedbf, 0x9, 0x2, 0x2, 0xb15, 0x5fe34644, 0x9, 0x9, 0x7fffffff, 0x2d, 0x2, 0x9, 0x3, 0xcb, 0xfffffffc, 0x0, 0xd, 0x8, 0x7, 0x9, 0xfffffff8, 0x2, 0x2, 0x6, 0x6ca650f9, 0x5, 0xea, 0x1639, 0x3, 0xb, 0x41, 0x5, 0x8, 0x80000000, 0x2, 0x9, 0xf0, 0x61f, 0x2, 0xc0dc, 0x2, 0x2f12, 0x4, 0x0, 0x6, 0xe22, 0x9, 0x101, 0x5, 0x3, 0x8, 0x80000000, 0x8, 0x8, 0x3, 0x9, 0x8, 0x5, 0x5, 0x800, 0x2, 0x0, 0x9, 0x5, 0x0, 0x2c, 0xe0, 0x2, 0x8, 0xd, 0x0, 0x5, 0x9, 0x7, 0x7, 0x1, 0x84, 0x400, 0x0, 0x3, 0xab, 0x0, 0x3150, 0x1, 0x7, 0x4, 0x6, 0xfffffffd, 0x7, 0x1, 0x3, 0x81, 0x7, 0x1, 0x7, 0x5, 0x800, 0x100, 0x9, 0x9, 0x4, 0x1, 0x5, 0x6, 0x0, 0x4e, 0x7f, 0x9, 0x9, 0x5, 0x80, 0x6, 0x6, 0x0, 0x1, 0x2e3, 0x3, 0x8001, 0x366, 0x7, 0x6, 0x81, 0x5, 0x7fff, 0x0, 0x7a, 0x2, 0x200, 0x4, 0x3, 0x3, 0x1ff, 0x5, 0x1, 0xe7a8, 0x6, 0x8, 0x2, 0x6, 0x7, 0x7ff, 0x8fcc, 0xffff, 0xb, 0x1c0, 0xfffffffd, 0x2, 0x32, 0x2, 0x9, 0x800, 0x1f, 0x5f7, 0x80000000, 0x5, 0x8, 0x4, 0x7ff, 0x0, 0x554, 0x5, 0xb, 0x9, 0x8000, 0xda, 0x3, 0x14, 0x8, 0x9, 0x5, 0x7, 0x1, 0xc39, 0xe5, 0x8, 0x2, 0x6, 0x7, 0x1, 0x5, 0xcc, 0x8, 0x79, 0x31c, 0x1, 0xb0, 0xf, 0x100, 0x7f, 0x0, 0x7, 0xd, 0xe362, 0xfff, 0x9, 0x7f, 0x7, 0x5, 0x4, 0x3, 0x4, 0x8, 0x0, 0x795, 0x8001, 0x3, 0x4, 0x5, 0xc, 0xfffffbff, 0x3, 0x7fff, 0x7, 0x3, 0x7, 0x1, 0x1290, 0x101, 0x800, 0x3, 0x0, 0x0, 0x1, 0xd0b, 0xd8, 0x1, 0x0, 0x15, 0xffffffff, 0x6, 0x3, 0x8001, 0x3, 0x7fffffff, 0x7, 0x8, 0x1, 0x21, 0x3, 0xfffffffe, 0x5, 0xce1, 0x0, 0x164a, 0xa, 0x7, 0x6, 0x3, 0x2, 0x80000000, 0x1, 0x1, 0x8001, 0x80, 0x8, 0x4, 0x2, 0x4, 0x7, 0x8, 0xe, 0x101, 0x6, 0x9, 0x5, 0x7, 0x6, 0x81b, 0x829, 0x8001, 0x8ca5, 0x8, 0x7, 0x6, 0x40, 0x5, 0x4, 0x80000001, 0x20a, 0x8001, 0x4, 0x71, 0xffff, 0xf3, 0x5, 0x800, 0x5, 0x5291, 0x1, 0x0, 0x7fff, 0x7, 0x5, 0xfffffff2, 0x4, 0xfffffffb, 0x2, 0x9, 0xc, 0x800, 0x80000001, 0xfa6, 0x5, 0x2b56, 0x0, 0x7f, 0x0, 0x8e, 0x7fff, 0x7ff, 0x7fff, 0x9, 0xffffffff, 0x9, 0xc3, 0xe, 0x1, 0x7, 0x8, 0xd2, 0x9, 0x0, 0x7, 0x4, 0x1000, 0x7ff, 0xe978, 0x3, 0x5d, 0x2, 0x8, 0x3, 0x4, 0xf, 0x2, 0x6, 0x7, 0x4, 0xffff, 0xb4c, 0x3, 0xf91, 0x81, 0x0, 0x80, 0x0, 0x1, 0x8, 0x8, 0xb, 0x5e2, 0x9b1, 0x44, 0xffffff00, 0x4c, 0x101, 0x4, 0x7f, 0x2f167c54, 0x1, 0xd, 0x1, 0x2, 0x6a, 0x1, 0x15cb0be9, 0x1, 0x5, 0x3ee, 0x6, 0x0, 0x6, 0xf1ec, 0x27e5, 0x8, 0x5, 0x1000, 0x4, 0xba, 0xff, 0xffff8001, 0x4cba, 0x0, 0x4, 0x8, 0x8, 0x6, 0x6, 0xffffffff, 0x1, 0x9, 0x4, 0x9, 0x4, 0xf, 0x909a, 0x1, 0x81, 0xfffffc00, 0x200, 0x8, 0x1, 0x4, 0xb, 0x7fff, 0x368d, 0xffffff01, 0x10000, 0x3, 0x5, 0x3ff, 0x10000, 0x3, 0x9, 0x1, 0x3d6, 0x9, 0x9, 0x3, 0x7901, 0xa58, 0x100, 0xfffff801, 0x5, 0x4, 0x3, 0x0, 0xc00000, 0xffff584e, 0xfffffff8, 0x6, 0x10001, 0x8, 0x5e, 0xb, 0x5, 0x1, 0xbf6c, 0x6, 0x7, 0xb8b5, 0x5, 0x75, 0x8, 0x8, 0x2, 0x7, 0x10, 0x7ff, 0x2c, 0x7, 0x5, 0x4, 0xf0f, 0x54, 0x7fffffff, 0x6, 0x400, 0x5, 0x5, 0x4, 0x5, 0x40, 0x401, 0xd, 0x1, 0x7fff, 0x0, 0x7fff, 0x3, 0x8, 0x9, 0x5, 0x3, 0x7, 0x3, 0x1, 0x4, 0x8, 0x2, 0x200000, 0x7, 0x3, 0x10, 0xfff, 0xd8, 0x6c, 0x9, 0x7, 0x4, 0x2, 0x4, 0x9, 0x9, 0x5, 0x4, 0x6, 0x5, 0x4, 0x10001, 0x7, 0xf, 0x1, 0x1, 0x9, 0x3, 0x1, 0x3c00, 0x2, 0x3, 0x0, 0x6, 0x2, 0x5, 0xc, 0x6606, 0x9, 0x3, 0x9, 0x5, 0x4, 0x7, 0x8000, 0x0, 0x5, 0x8, 0x3c, 0x200, 0x7, 0x1, 0xbe4, 0x3, 0x4, 0x3, 0x9, 0x7cba, 0xffff, 0x6, 0x8, 0x2, 0x7fffffff, 0x0, 0x1, 0x8001, 0x8, 0x10000, 0x9, 0x5, 0x7, 0xb, 0x7f21, 0x3, 0x5, 0x45a9, 0x9, 0xc00000, 0x4cd, 0x2, 0x8, 0x2, 0x6, 0x3, 0x3ff, 0x1ff, 0x10001, 0x4, 0x4, 0x5, 0x7, 0x1, 0x1, 0x9a, 0x4, 0x1, 0x7, 0x40000, 0x0, 0xe11e, 0x2, 0x80, 0x2, 0xf49, 0x0, 0x81, 0x2, 0xe25729d, 0x4, 0x3, 0x5, 0xb, 0x32cb, 0x4c, 0x6, 0x6, 0x1, 0x1ac, 0x9, 0x6, 0xe1, 0x5d, 0x2, 0x58, 0xa3, 0x3, 0x3, 0x9, 0x2169, 0x4, 0x400, 0x81, 0x8, 0x4, 0x6, 0x9, 0x8000, 0xa0a, 0x7, 0xfa, 0x1, 0x6, 0xce, 0xffffffff, 0x101, 0x5, 0x4, 0xeaf7, 0x7, 0x3f, 0x80000001, 0x0, 0x2, 0x100, 0xab, 0x1, 0x3ff, 0x2, 0xe77, 0x5, 0x1ff, 0x4, 0xffffff80, 0x81, 0x8, 0xffffffff, 0xbe, 0x9, 0xcea, 0x7, 0x6, 0x9, 0x8, 0x0, 0xbe, 0x8, 0x31, 0xff, 0x40, 0x8, 0x0, 0x1, 0x7, 0x2, 0xffffffff, 0xdeaa, 0x3, 0x5, 0xa, 0x8a, 0x70000000, 0x0, 0xf, 0x2b8, 0x10, 0x9, 0x1ff, 0x2a9, 0x2, 0x8, 0x9, 0x9, 0x3, 0x80000001, 0x5, 0x10000000, 0x3, 0x0, 0x80000001, 0x4, 0xffffffff, 0x7ff, 0x2, 0x2, 0xfffffe00, 0x6, 0x1, 0x0, 0x10001, 0x9, 0xd811, 0x80000000, 0x5, 0x9, 0xe38, 0x7, 0x0, 0x1, 0x6b0, 0x3, 0x6, 0x101, 0x3, 0x4, 0x9, 0x3, 0x5, 0x6, 0x5, 0x10001, 0x0, 0x8, 0x8, 0x4, 0x10000, 0x4, 0x0, 0x8000, 0x8, 0x4, 0x33d4, 0x99b, 0x3, 0x4, 0x5, 0x4c07, 0x8, 0x401, 0x975, 0x2, 0x2, 0x3, 0xfffffffd, 0x1, 0x5, 0x2, 0x5, 0x3, 0xe46, 0xf, 0x8, 0x73a1, 0xfffff801, 0x4, 0xfff, 0x9, 0x7, 0x0, 0x80000001, 0x9, 0xb52, 0x2, 0x2, 0x0, 0x4, 0xde, 0x2, 0x10001, 0x0, 0x9, 0x80000001, 0x140, 0xe, 0x5, 0xfffffffc, 0x1, 0x8, 0x4c58, 0x7, 0xffffffc2, 0x7, 0x0, 0x80000000, 0x1, 0xf7b7, 0x10, 0x5, 0xfff, 0xfffffff5, 0x3, 0x2, 0x6, 0x5659, 0x7, 0x6a0a, 0x1, 0x6, 0x5, 0x7ff, 0x2, 0x4, 0x73a2, 0x4, 0x4, 0x904, 0x7, 0x13, 0x94, 0xa, 0xffff, 0x9, 0x5, 0x40, 0x0, 0x3, 0x6, 0x9721, 0x8, 0xffff, 0x80, 0x1, 0xfa, 0x3, 0x2a4, 0x8c8f, 0x5, 0x8001, 0x10000, 0x2, 0x7, 0x40, 0x5, 0x2, 0x3, 0xe, 0xabf, 0x7fffffff, 0x5, 0x8, 0x1, 0x1000, 0x5, 0x1, 0x8, 0x3, 0xfffffff9, 0x6, 0x6, 0x9, 0x100, 0x7fffffff, 0xfffffe01, 0x4, 0x8, 0x8, 0x5, 0x8, 0x1, 0x3, 0x0, 0xc385, 0x6, 0xfffffffe, 0x5, 0x0, 0x4, 0x5, 0x0, 0x7, 0x3, 0xffffffff, 0x400, 0x6, 0x8, 0x9, 0x1, 0x80, 0x1d, 0x9, 0x0, 0x8, 0xf0, 0x8, 0x102b61a8, 0x8, 0x1, 0x7f, 0xff, 0xfff, 0x6, 0xc, 0x100, 0x5, 0x7b4, 0x1000, 0x8000, 0x1, 0x1, 0x5, 0x3, 0x1, 0x9, 0x7, 0x6, 0x5, 0x5, 0x0, 0x5, 0x80000001, 0x9, 0x100, 0x26, 0x4, 0x5, 0x3, 0x80000000, 0x4d, 0x9, 0x401, 0x10, 0x9, 0x2, 0x1, 0x80, 0x2, 0x0, 0x7fff, 0x1ff, 0x1, 0x8, 0x7, 0x7f, 0x1, 0x10, 0x7, 0xa8a, 0x5, 0x2, 0x8000, 0x6, 0xf5a8, 0x5, 0x581b50ed, 0xbf, 0x1, 0x7, 0x3, 0xe, 0x415, 0x4, 0x7, 0x7fffffff, 0x5, 0x3, 0x0, 0x1, 0x4, 0x3775, 0x7, 0x9, 0x4, 0x7b, 0x1, 0x8, 0x6, 0x7f, 0x8, 0xdd2, 0x0, 0x0, 0x80, 0x9, 0xbda, 0xd, 0x4, 0x3, 0x3786, 0x5, 0x9, 0x6, 0xd9c, 0x37ce, 0x5, 0xcf, 0x0, 0x6, 0x2, 0x3, 0xc4, 0x3ff, 0x40, 0x0, 0x8, 0x4, 0x4, 0x0, 0x10001, 0x8, 0x40, 0xc, 0x0, 0x4, 0x101, 0x4, 0x1, 0x800, 0x3, 0x1ff, 0x1, 0xa2, 0x724a6104, 0x900, 0x4b8c, 0x8, 0x3, 0x129, 0x40, 0x4, 0x5, 0x4, 0xd3, 0x80000000, 0x4, 0x7, 0x4, 0x2400, 0xefe, 0x0, 0x8, 0xfff, 0x99, 0x6, 0x10001, 0xa7, 0x7, 0x7f, 0x4, 0x7fffffff, 0x34, 0x4, 0x0, 0x4, 0x63, 0x4, 0x5, 0xffffff80, 0x81, 0x6, 0xffffff0b, 0x1, 0x9, 0x2, 0x8, 0x3, 0x6, 0xae, 0x5, 0x4, 0x5, 0x80000001, 0x8, 0x80000001, 0x3fc23b94, 0x2, 0x1, 0xb, 0x7, 0x65a, 0x7fffffff, 0xa, 0x80000001, 0x80000001, 0x5, 0x3, 0x5, 0x1, 0x23, 0x0, 0x6, 0xffff, 0x7fffffff, 0x6, 0x4, 0x409, 0x9, 0x0, 0x89b6, 0x9927, 0x3, 0x5, 0x10, 0x8000, 0x6, 0x1000, 0xb, 0x9, 0x9, 0x3, 0x7, 0x5, 0x4c, 0x5, 0x5, 0x80000000, 0x81, 0x800, 0x5, 0x5, 0x7, 0x2, 0xae4e, 0x1000, 0x0, 0x7, 0x1, 0x0, 0x1, 0x80, 0x2, 0x9, 0x8, 0x6, 0xf73, 0x6, 0xe, 0x71, 0xffffffff, 0xa, 0x9, 0x7f, 0x8, 0x4, 0x3, 0x200, 0x9, 0x5, 0xffffffff, 0x6, 0x8, 0x2, 0x401, 0xffffffff, 0x9, 0x7, 0x3, 0x4, 0xd33, 0x10, 0x6, 0xba81, 0xa, 0x2, 0x1, 0x6, 0xff, 0x7, 0x9, 0x5, 0x5, 0x1, 0x0, 0x7fff, 0x6, 0x7, 0xc7, 0x3, 0x4, 0x5, 0x5, 0x6b, 0xc9, 0xb379, 0x100, 0x5c, 0xffffff81, 0x80000001, 0xfebe, 0xc1d, 0x2, 0x1, 0x200, 0x5, 0x9, 0x2, 0xf739, 0xd, 0x9, 0x5, 0x3, 0x6, 0x2cc, 0x7, 0x4, 0x8, 0x5, 0x0, 0x0, 0x2, 0x2, 0x7f, 0x0, 0x3, 0xc1a7, 0x0, 0x4, 0xa, 0xcf, 0x5, 0x4, 0x3, 0x0, 0x0, 0xbc4e, 0x7, 0x1, 0xfffffff9, 0x100, 0xfffffffa, 0x8, 0x2, 0xc9, 0x0, 0x4, 0x80000001, 0x3, 0x2, 0x100000, 0x7, 0x1, 0x5, 0x5, 0x5, 0x1, 0xffff, 0x5, 0x10000, 0x5, 0x6, 0x1396, 0x9, 0xfffffff8, 0xf, 0x4, 0x0, 0x3, 0x9, 0x2, 0x7, 0x8, 0x5f, 0x3, 0x8, 0x5, 0x4, 0x0, 0x1, 0x7, 0xffffffff, 0xf, 0x7fffffff, 0x8, 0x3, 0x80000000, 0x6, 0x7ff, 0x9, 0x6, 0x6, 0x200, 0x2, 0x4, 0x6, 0xa6, 0x1, 0x10001, 0x9, 0x8, 0x8, 0x0, 0x2, 0x2, 0xa42c, 0x8, 0x9, 0x8, 0x1, 0x10, 0x4d4, 0x400, 0x7b36, 0x8000, 0x1, 0x3ff, 0x6, 0x38000, 0x8, 0x8d13, 0xb1, 0x4, 0x3, 0x0, 0xfffffffc, 0xfd, 0x7, 0x6, 0x5, 0x7ff, 0x8, 0x69, 0x1, 0x2, 0x5, 0x2, 0x40, 0x2d11, 0x0, 0x1000000, 0x0, 0x5c9, 0x200, 0x5, 0x2, 0x19, 0xffff, 0x8, 0x4, 0x2, 0xc684, 0x5, 0x0, 0x5, 0x41, 0x7f, 0x3, 0xfffffffa, 0x10001, 0x1, 0x28, 0x5, 0x80000000, 0x200, 0x4, 0x573d, 0x3, 0x40, 0x8, 0x5, 0xc14, 0x5, 0x2, 0x7, 0x2, 0x401, 0x9, 0x3, 0x0, 0x1ff, 0xffffffff, 0x10001, 0x0, 0x5, 0xcd, 0x4, 0x1f, 0x0, 0x6, 0x4, 0x1, 0x0, 0x2, 0x80000000, 0x6, 0x100, 0x8001, 0x5, 0x4f, 0xd, 0x7f, 0x28000000, 0x8, 0x860, 0x4, 0x2, 0x723c, 0x1000, 0xffffffff, 0x9, 0xffffff18, 0x7969, 0x9, 0x695, 0x3, 0x1, 0x3, 0x59e, 0x5, 0x1, 0x800, 0x1, 0x10, 0x228c, 0x4, 0x3, 0x1, 0xade, 0x6, 0x7, 0x8f9, 0x534e, 0xc96, 0x8, 0x8, 0xfffffff9, 0x3, 0x7fff, 0xd02, 0x7ff, 0x7fffffff, 0xc, 0x2, 0x0, 0x7, 0x7fffffff, 0x6, 0xf310, 0x1, 0x0, 0x3, 0xfff, 0x8, 0x6, 0x8, 0x7, 0x6, 0x6, 0x97, 0x4, 0x5, 0xa, 0x68e, 0x8000, 0xd2, 0x6, 0x2, 0x8, 0x9, 0x3, 0x6, 0x2, 0x5, 0x20000, 0x6, 0x2, 0xff, 0x1, 0x80000001, 0x9, 0x6, 0xf8000000, 0x5, 0x0, 0x7, 0x800, 0x7, 0x80, 0x0, 0x3, 0x3, 0x7, 0x7, 0x4, 0x8001, 0x2, 0x10000, 0x401, 0x10, 0xd4e, 0x1, 0x0, 0x9, 0x3ff, 0x1, 0x0, 0xff, 0xe4b, 0x2, 0x7, 0x7d, 0x1f6, 0x6, 0x1, 0xfffffe01, 0x1, 0x8, 0x9, 0x7, 0x1, 0x3, 0x4, 0x43, 0xb, 0x0, 0x9, 0x6, 0x9, 0x7, 0x88, 0x8, 0x462, 0x2, 0x2677, 0x80000000, 0x200, 0x81, 0x5, 0x81, 0x3, 0x3, 0x9, 0x6, 0x4, 0x1, 0xbaf6, 0x8, 0x3, 0x6, 0x8, 0x1, 0x59, 0x6, 0x9, 0x2, 0x81, 0x1, 0x5, 0x4, 0xfffffff9, 0x4c, 0x4, 0x43b, 0x1, 0x3, 0x9, 0xea000, 0xffffff69, 0x400, 0x3, 0x1c000000, 0x2, 0xfffff800, 0x3ff, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0xec, 0x2, 0x6, 0x4, 0x5, 0x13, 0x7, 0x3, 0x8000, 0x3, 0x80000000, 0x6037, 0x8, 0x3779e10c, 0x8, 0x0, 0xf, 0x1, 0xd, 0x7fff, 0xe91, 0x9, 0x2, 0x4, 0x8001, 0x8, 0x7, 0x8000, 0xf8, 0x9, 0x8001, 0x6, 0x5, 0x7f, 0x10001, 0xffffffff, 0x9, 0x7195c421, 0x25c, 0x7, 0x4, 0x101, 0x5, 0x80000001, 0xba, 0x7, 0xac3, 0x9, 0x4, 0x7, 0x4, 0x7fffffff, 0x1, 0x1, 0xa4, 0xffff7fff, 0x0, 0x1, 0x5, 0x7, 0x6, 0x8, 0x5, 0x8, 0x2, 0x4, 0xffffffff, 0x0, 0x1, 0x0, 0x11a, 0xfffffff7, 0x78, 0x6, 0xa, 0xc, 0x1, 0x3, 0x6, 0x0, 0x4a, 0x3, 0x80000001, 0x401, 0x3, 0x5e19714f, 0x81, 0x0, 0x8, 0x4, 0x1ff, 0x0, 0x7, 0xffffffff, 0x10, 0x3, 0x8, 0xa0, 0x2, 0x10001, 0x3, 0x6, 0x0, 0x0, 0x7, 0x1, 0x5, 0x8, 0xffff, 0x7, 0x80, 0x6c8e, 0x6, 0x3, 0x1ff, 0x9, 0x6, 0x99, 0x0, 0x8, 0x8, 0x1, 0x80000001, 0x1, 0x8000, 0x8, 0x1, 0x6, 0x8, 0x10, 0x9e, 0xff, 0x9, 0x7fff, 0x5, 0x8, 0x5, 0x6, 0x8, 0x4be, 0x6, 0x10000, 0x8, 0x4, 0x8, 0x8001, 0x2, 0xff, 0xfffff000, 0x2, 0x7fff, 0x7fffffff, 0x6, 0x7, 0x3, 0x5, 0x7, 0xfffffffc, 0xbb, 0xfffffff5, 0x7, 0x8, 0x7fff, 0x5, 0xffff, 0x2, 0x3, 0xf, 0xffff, 0x3, 0x3ff, 0xf7b, 0x1, 0x40, 0x2, 0x16, 0x7fff, 0xffffff9e, 0x5, 0x8001, 0x1, 0x1, 0x9, 0x1, 0x81, 0x9, 0xcff0, 0x8000, 0x7, 0xb0, 0x4, 0x6, 0x9, 0x1, 0x4, 0x80000000, 0xfffffffb, 0x570, 0x0, 0xe, 0x0, 0x4, 0x8, 0x1000, 0x9, 0x80, 0x10001, 0x100, 0xffffffff, 0x3, 0x8, 0x8001, 0x1, 0x10000, 0x0, 0x36, 0xe3, 0x5, 0x5, 0x101, 0x10000, 0x5, 0x2, 0x7, 0x80, 0x8, 0x4, 0xf1, 0x2, 0x4, 0x4, 0x8, 0x30, 0x6, 0x1, 0x4, 0x5, 0x0, 0x101, 0xa, 0xfffff001, 0x7ff, 0x7, 0x1, 0x5, 0xffffffd4, 0xd31b, 0x3, 0x1, 0xff, 0x7, 0x2, 0x2, 0x3, 0xb975, 0x6, 0x1, 0xf, 0x2, 0xfff, 0xfffffff9, 0xf1eb, 0x5, 0x4, 0x7fffffff, 0x7, 0x1, 0x6, 0x4, 0x3ff, 0x10000, 0xe, 0x1, 0x712, 0x7fffffff, 0x9, 0x4, 0x40, 0x2, 0x7, 0x7, 0x1ff, 0x3, 0xffff7fff, 0x800, 0x2a, 0xb5e1, 0x48, 0x1, 0xffffffff, 0x3, 0x6, 0x400, 0x401, 0x6, 0x7ff, 0xfffffff9, 0x3, 0x6, 0x2, 0xb739, 0x5, 0x1, 0x7, 0xff, 0x1, 0xfffffff9, 0x1ff, 0x8, 0x2, 0x0, 0x9, 0x81, 0x1, 0xf, 0x10000, 0x1, 0x1, 0x0, 0x400, 0x8, 0x2, 0x3, 0xb5, 0x1, 0xcc, 0xfffffffa, 0xd07, 0x3, 0x484d, 0x6a0, 0xfffffff9, 0xfffff0e9, 0x3, 0x800, 0x3, 0xfff, 0x1, 0x6, 0x6, 0x3a6, 0x3, 0x43, 0xd4738ca, 0xfffffff3, 0x7, 0xfffffffc, 0xb3c, 0x5, 0xffff, 0x7, 0x80, 0x0, 0x9, 0x8, 0x3, 0x5, 0x85, 0xfff, 0xfffffffe, 0xf, 0x9, 0xffffff28, 0x8001, 0x8, 0x0, 0x4, 0x0, 0x6, 0x7, 0x1, 0x100, 0x6, 0x52ab, 0x7, 0x3ff, 0x9, 0x3, 0x1, 0x6, 0xffffffff, 0x7, 0xb2, 0x3, 0x6, 0xfffffff7, 0x80000000, 0x80000001, 0x1, 0x8000, 0x1, 0x9, 0x1, 0xf2, 0xffffffff, 0x2, 0x8, 0x6, 0xef00ad3, 0x9, 0x7, 0x8001, 0x7ff, 0x7, 0xffffffff, 0xffff80da, 0x2, 0xc, 0x7, 0x6, 0x8000, 0x5, 0x7, 0x5, 0x2, 0x0, 0x1cf, 0xc000, 0x10000, 0x5, 0x10001, 0x7, 0x5, 0x2, 0x0, 0x8, 0x6, 0x3, 0x9, 0xed8, 0xfffffffc, 0x1, 0x3, 0x5, 0x0, 0x9, 0x1, 0xffff, 0x2, 0x6, 0x3, 0x1, 0x9, 0xfffffff7, 0x1000, 0x7, 0x0, 0x1, 0x9d0a, 0x9, 0x7, 0x5, 0x6, 0x2, 0x755, 0x5, 0x80, 0x8, 0x3a6, 0x5, 0x5, 0x7, 0xd, 0x40, 0x9, 0xffffff2e, 0x1, 0x6, 0x401, 0x1, 0x6c, 0x0, 0x2, 0x7e94, 0x8, 0x5, 0x4, 0x0, 0x7, 0x7fffffff, 0xff, 0x3, 0x4, 0x0, 0x401, 0x8, 0x81, 0x3, 0x2, 0xe0d1, 0x1000, 0xd, 0x7, 0x6, 0xd03a, 0x39c, 0x8, 0xfffff800, 0x14bf, 0x1, 0x2, 0xfffffa05, 0x101, 0x10, 0x1, 0x0, 0xcf, 0x9, 0x1, 0x75da0000, 0x0, 0xace, 0x5, 0xffffffff, 0x0, 0x655, 0x9, 0x517, 0x712f, 0x101, 0xc92, 0x8001, 0xf5, 0x1, 0x1, 0xffff, 0x0, 0xd2, 0x3, 0x7, 0x0, 0x3, 0x8001, 0x4, 0x6, 0xfffffffd, 0x2020, 0x48, 0x8, 0x4, 0x5, 0x7, 0x81, 0xa, 0x8, 0x1, 0x1ff, 0x2, 0x8, 0x9, 0x5, 0x0, 0x6, 0x7, 0xb, 0x9, 0x101, 0x5, 0x5, 0x3, 0x24000000, 0x2, 0x2, 0x2, 0x2, 0x401, 0x6, 0x7, 0x7, 0x9, 0x0, 0x5, 0x9, 0x4f38, 0x9, 0x3, 0x800, 0x74, 0xfffffffb, 0x0, 0x4e0, 0x80, 0xfe9, 0x3, 0x9, 0x8c665ec5, 0x1, 0x3, 0xffffffff, 0xdae3, 0x7fffffff, 0x8, 0x0, 0x0, 0x66d3, 0x4, 0x3, 0x7, 0x4a35, 0x8001, 0x2, 0x5, 0x7, 0x401, 0x1, 0xffffffff, 0x775, 0xeec, 0x7, 0x6, 0x6, 0xf, 0x7, 0x8, 0x6, 0xf, 0x101, 0x6, 0x0, 0x3, 0xcc, 0x0, 0x40, 0x80, 0x6, 0x50, 0x1, 0xb, 0x7, 0x3, 0x949, 0x0, 0x5, 0x9440, 0x101, 0x4, 0x8, 0xf1, 0x7, 0x0, 0x3, 0x3, 0x0, 0x32780, 0x7, 0x4, 0x0, 0x800, 0x2, 0xc2, 0x80000001, 0x78, 0x1, 0x80000001, 0x7, 0x5, 0x1000, 0x101, 0x4b, 0x1000, 0x2, 0x4, 0x80000001, 0x3, 0x4, 0x2f2f, 0x10001, 0x1, 0x3, 0x2, 0x0, 0x0, 0x44, 0x9, 0x7, 0x38000000, 0x8, 0xfffffff3, 0x0, 0x4, 0xe3, 0x7ff, 0x4d, 0x0, 0x2, 0x0, 0xaa, 0x180, 0xf082, 0x4, 0xf8, 0x0, 0xe4aa, 0x94, 0x5, 0x800, 0x100, 0x2504, 0x9, 0x9, 0x8, 0x2, 0x6, 0x9, 0x2, 0x3ff, 0x8, 0x9, 0x100, 0x3ff, 0x4, 0xed2, 0x5, 0x7, 0x8001, 0x7, 0x1, 0x8000, 0x3, 0x10, 0x6, 0x5e1, 0x3, 0x9, 0xc, 0x2, 0x80000001, 0xfffffff9, 0x1412, 0x9, 0x8, 0x6, 0xe, 0xc0, 0x3, 0x8, 0xed4f, 0x99, 0xb7, 0x7b7, 0x0, 0x0, 0xffffffff, 0x40, 0xff, 0x405e, 0x6, 0x5, 0x4, 0xed, 0x1ff, 0x6, 0x8, 0x6, 0x2, 0xbf, 0x2, 0x9, 0x6, 0x6, 0x2, 0xfff, 0xfffffffe, 0x6, 0xf7, 0x7, 0x2, 0x4, 0x0, 0x136, 0x0, 0x6, 0xfffffffa, 0x7, 0xee7, 0x0, 0x7fffffff, 0x2, 0x4, 0x7, 0x5, 0x7, 0x2, 0x1, 0x7, 0xe3, 0xffffa337, 0x4, 0x6, 0x5, 0x3, 0x9, 0x7, 0x2, 0x10, 0x7b5, 0xc, 0xd8b00, 0x6, 0x9, 0x5, 0x5053, 0x81, 0x0, 0x5, 0xf, 0x7ff0000, 0x401, 0x4, 0x9, 0x5, 0x4, 0x0, 0x6cb, 0x8, 0xfffffff9, 0xcc8b, 0x8, 0x3, 0x31e, 0x4, 0x7, 0x5, 0x6, 0x6, 0x4, 0x6, 0x7, 0x200, 0x5, 0x7, 0x0, 0x2, 0x701c72e6, 0x3, 0x6, 0x1, 0x1ff, 0x6, 0x0, 0xfffffbff, 0x7, 0x5, 0x0, 0x32dd, 0x9a, 0x5, 0xffff, 0xdae, 0xfffffff9, 0x6, 0x5, 0xfffffffe, 0x9, 0xbc18, 0x8, 0x3, 0x7, 0x9, 0x8, 0x8, 0x6, 0x41, 0x1, 0x0, 0xe, 0x7b2a, 0xc7, 0xffffff01, 0x3, 0x3ff, 0xfd7, 0x9, 0xd, 0x6, 0xff, 0x9, 0x0, 0x8000, 0x7fffffff, 0xffffffff, 0x8000, 0xa, 0x1, 0xc974, 0x48, 0x4, 0x3, 0x3, 0x7, 0x8, 0x1e, 0x5, 0x1, 0x981, 0xc, 0x2211, 0x6, 0x79, 0x0, 0x0, 0x4, 0x8, 0x9, 0x8, 0x6, 0xfffffffb, 0x0, 0x6, 0xffff660d, 0xfffffffe, 0x9, 0x5, 0x3d, 0x72, 0x7, 0x5, 0x2000, 0x7fffffff, 0x0, 0x6, 0x8000, 0x9, 0x2, 0x1, 0x5, 0x4, 0x0, 0x400, 0x4, 0xc26, 0x8, 0x80000000, 0x9, 0x7, 0x81, 0x9, 0x7, 0x2, 0x8, 0x2, 0xd679, 0x4, 0x5d, 0x1, 0x40, 0xff, 0x0, 0x4, 0x10001, 0x40, 0xfffffffa, 0x3, 0xa1dc, 0x40, 0xd1b9, 0xd8, 0x5, 0x400, 0x8000, 0x7, 0x9, 0x7, 0x4, 0x1, 0x4, 0x10c8, 0x6, 0x0, 0x90, 0x48384f84, 0x6, 0x4, 0x8000, 0x93b, 0x4, 0x43, 0x3, 0x3, 0x2, 0x1, 0x93, 0x10000, 0x0, 0x8, 0x6, 0xff, 0x6, 0x4, 0x4, 0x3, 0xfffffffa, 0x3ff, 0x810, 0x0, 0x2, 0x3, 0xa84, 0x5, 0x4699, 0x101, 0x4, 0xe, 0x9, 0x6b16, 0x3, 0x6, 0x2, 0x4, 0xae, 0x2, 0x2, 0x3, 0x9, 0xa678, 0x8000, 0x4, 0xc, 0x7fffffff, 0x7, 0xfffffffc, 0x35, 0x0, 0x24, 0x29, 0x8, 0x6, 0x3ff, 0x1, 0xd, 0x0, 0x9dd, 0x9, 0x11, 0x3, 0x9, 0x80000001, 0x3, 0x6, 0x2000, 0x0, 0xffff, 0x200, 0xffff0c03, 0x7, 0x2, 0x2, 0x7, 0x5, 0x2, 0xfff, 0x2f2, 0x9, 0xfffffffd, 0x1, 0x98, 0x80000001, 0x1000, 0x0, 0x5, 0x8, 0x101, 0x3, 0xe, 0x1000, 0x6, 0x3e43, 0x5bf8d836, 0x4, 0x80000001, 0x4, 0xfffffff9, 0x2, 0xaf29, 0x1, 0x1, 0x8, 0xfffffff6, 0x200, 0x9, 0x0, 0x0, 0x7, 0xffffc94b, 0x1, 0x4, 0x6, 0x5, 0x4da, 0x80000001, 0xa, 0xd, 0x3, 0x4, 0x6, 0x1ff, 0x4, 0x80, 0x2, 0x3, 0x101, 0x7, 0x5, 0x7, 0x6, 0x7f, 0xe, 0xfffffff8, 0x624, 0x5, 0x1, 0x70, 0x9, 0x7, 0x9, 0x0, 0x6, 0x0, 0x0, 0x6, 0x8001, 0x0, 0x1000, 0xfffffff7, 0x6, 0x79, 0xa8, 0x6, 0xa, 0x9, 0xb4c, 0x8, 0x200, 0x5, 0x7, 0x85e9e71c, 0x0, 0x2, 0x1, 0x101, 0x9, 0x9, 0xb00, 0x2012d343, 0x600c, 0x2223, 0x4c, 0x3, 0x9, 0x81, 0x9, 0xc, 0x80, 0x21, 0x19, 0x7, 0x319, 0x20d, 0x101, 0x3, 0x0, 0x119be97e, 0x51, 0x6, 0x8, 0xc, 0x3, 0x7, 0x8, 0x81, 0x3, 0x800, 0x2526, 0xc52, 0xf12, 0x951f, 0x7fff, 0x2, 0x200, 0x7f, 0x93, 0x7, 0x3, 0x7ff, 0x400, 0x1, 0x2, 0x0, 0x0, 0x9, 0x7, 0x2, 0x6, 0xfffffff7, 0x947, 0x9, 0x7802, 0x9, 0x101, 0x2, 0x7f, 0x6, 0x2, 0x2, 0x6, 0x1, 0x2, 0x9, 0x6, 0x3ff, 0x5, 0x2, 0x4, 0x8441, 0xfffffff0, 0x7f, 0x0, 0x2, 0x7ff, 0x55, 0x6, 0x6, 0x800, 0x8, 0x4, 0x8, 0xfffffff8, 0x101, 0x669, 0xffffffff, 0x3, 0x8000, 0x6, 0xd, 0xe, 0x5, 0x0, 0x5, 0x40, 0xfffffffc, 0x4, 0x60, 0x7fffffff, 0x649, 0xffffffd8, 0x9, 0x100, 0x0, 0x9, 0xfffffe00, 0x7, 0x0, 0x4000000, 0x8, 0x9b5, 0xe94, 0x80000001, 0x6, 0x10000, 0x80000000, 0x9, 0x4, 0xa, 0x80000000, 0x5, 0x10000, 0x200, 0x9, 0xff, 0x8, 0x4, 0x3, 0x8, 0x100, 0x59, 0x10, 0x6, 0x800, 0x5, 0xfffff9b4, 0x2, 0x401, 0x865, 0x6, 0xfff, 0x5, 0x5, 0x6, 0x3, 0x1ff, 0x7, 0x7ff, 0x4, 0x1, 0xa, 0xe, 0x9, 0x6, 0x2abc, 0x6, 0x7, 0x1, 0x9, 0x8, 0x8, 0x1000, 0x6, 0x401, 0x4, 0x2, 0x9, 0x10, 0x4, 0x9, 0x7, 0x5, 0x3, 0x80, 0x100, 0x4, 0xffff, 0x1, 0x1, 0x5c9, 0x1, 0x3, 0xa, 0x400, 0xa, 0x9, 0x1, 0x0, 0x5c3, 0x94, 0x44, 0x81, 0xf27c, 0xb, 0x1, 0x9b4, 0x5, 0x7f, 0x2, 0x24, 0x4, 0x9f, 0x4, 0x9, 0x1, 0x1, 0x0, 0x1753, 0x7fff, 0x10, 0x669, 0x8000, 0x7, 0x11, 0xe219, 0x7, 0x81, 0x80a, 0x80, 0x8, 0xdf1, 0x9368, 0x3, 0x2, 0x80, 0x4, 0x800, 0x7, 0x0, 0xb0, 0xe66b, 0x7fffffff, 0xc3, 0x3ff, 0xff, 0x0, 0x3ff, 0x9, 0x9, 0x1, 0x5466, 0xd, 0x2, 0x51a, 0x3, 0x5, 0x1dfb, 0x0, 0x101, 0x80000001, 0x1000, 0x1, 0x1, 0xffffffff, 0x1, 0xf, 0x6, 0x9, 0x9, 0x2, 0x80000001, 0x1, 0x9, 0x4, 0xf2, 0xd, 0xc00000, 0x81, 0x8, 0x948e5a00, 0x9, 0x5, 0x8, 0x3, 0x2, 0x6, 0x4, 0x3, 0x4, 0x8, 0x7, 0x3, 0x101, 0x7fff, 0x101, 0xe82c, 0x800, 0xffff, 0x1, 0x4e83, 0xfffffff9, 0x6, 0x2, 0x10000, 0x8fc, 0x479, 0x1000, 0x5, 0x6, 0x6, 0x3ff, 0x8, 0x10001, 0x7f, 0x0, 0x5, 0x8, 0x5, 0x6ca4, 0x10000, 0x8, 0x0, 0x7, 0x61e8, 0x5e4, 0x0, 0x4, 0x7, 0x3, 0x1, 0x2, 0x200, 0x4, 0x5, 0x8, 0x80, 0x1, 0x8a, 0x7, 0xffff04ea, 0x0, 0x0, 0x40, 0xfffffff7, 0x2ad4f024, 0x7, 0x6, 0x7, 0xa3, 0x2, 0x3, 0x7, 0x2, 0x80000001, 0xc2db, 0x50a8, 0xffffffd6, 0x1, 0x200000, 0x0, 0x5, 0x101, 0x2, 0x3, 0x8, 0x1, 0xfffffff7, 0xa, 0x4, 0x9, 0x1, 0x0, 0x5e, 0x3, 0x1, 0x2, 0x80, 0x3, 0x7, 0x5, 0x9, 0x9, 0x3, 0x9, 0x8, 0x400790f3, 0x7, 0x4, 0x101, 0x4, 0x9, 0x9, 0x1, 0x5, 0x9, 0x400, 0x2af, 0x1ff, 0x6, 0x10001, 0x9f54, 0x4, 0x80000000, 0x4, 0xc2ea, 0x0, 0x6, 0x6, 0x44fd, 0x7f, 0xf, 0x6, 0x0, 0xff, 0x8, 0x5, 0x1, 0x2, 0x2, 0x6, 0x66, 0xfffffffd, 0x8000, 0xfff, 0x8, 0x6, 0x3, 0x8, 0x2, 0x3, 0x129, 0x7ff, 0x5, 0x9, 0x7ff, 0x0, 0x0, 0x4, 0x80, 0x1a44, 0x8, 0x100, 0x547, 0x0, 0x10000, 0x8, 0x6545, 0x0, 0x9, 0x8, 0x2, 0x6, 0x5, 0xff8000, 0x2, 0x4, 0x6, 0x5, 0x82, 0x8001, 0xd85a, 0x9, 0x80000000, 0x796, 0x8a7d, 0x5, 0xd, 0x9, 0x7, 0x5, 0x665, 0x0, 0x9, 0x7, 0x8, 0x3, 0xa, 0x5, 0x1, 0x5a9, 0xa, 0xfffff000, 0x5, 0x3, 0xffff71d5, 0xa4a6, 0xa1, 0x1, 0x9, 0x499, 0xaac, 0x8, 0x8, 0xc8e8, 0x5944, 0x1a4, 0xfffffff8, 0x0, 0x1, 0x8a, 0x7, 0xfff, 0x2, 0x7, 0xffffffff, 0xe9e6, 0x5, 0x2000, 0x3, 0xe8, 0x5, 0xfe0, 0x3, 0x3ff, 0x8, 0xffff, 0x9, 0x7, 0x800, 0x40000, 0x2, 0x3, 0x8, 0x5, 0xd1, 0x3, 0x1, 0x5, 0x6, 0xdc3, 0x6, 0x1000, 0x83d, 0xf, 0xd2, 0x467, 0x7fffffff, 0x24, 0x8, 0x7f, 0x2, 0x1, 0x0, 0x2, 0x0, 0x5, 0x5, 0x9, 0x4c6, 0x4, 0x9, 0x835, 0xfffffffb, 0xed, 0x1, 0x70, 0x1, 0x3ff, 0x7e, 0x9, 0xa, 0x8, 0x1000, 0x9, 0x7, 0x94c9, 0x1, 0xfffffff8, 0x7a, 0xde3, 0x9, 0x6, 0x0, 0x296, 0xc1, 0x80, 0x401, 0x4, 0x3, 0x8000, 0x2, 0x7, 0x0, 0x8, 0x0, 0x9, 0x8ac, 0x9, 0xffffffff, 0xa930, 0x1, 0x66, 0x6, 0x7bf7, 0x0, 0xe837, 0x1924, 0x7f, 0x0, 0x81, 0x3, 0x6, 0xb398, 0x7, 0x8, 0x5, 0x0, 0xffff, 0xc0, 0x9, 0x401, 0x2, 0x7, 0x80000000, 0x7fffffff, 0x2959, 0x9, 0xfffffff6, 0x8, 0x401, 0x8, 0x5, 0x7fff, 0x10001, 0x7, 0x2, 0x6, 0x3, 0x0, 0x3, 0x64e2, 0x4, 0x64, 0x9, 0x8, 0x9, 0x6, 0x4, 0x6, 0x4, 0x1, 0x5, 0x40, 0x2, 0x0, 0x7, 0x3, 0xfea, 0x7, 0x10, 0xfffffc0d, 0x7, 0x4, 0xfffffff4, 0x9, 0x80000000, 0x3, 0x2, 0x80000001, 0xd6, 0x59, 0x0, 0x80000000, 0xae7, 0x0, 0x3, 0x4, 0x1000, 0x80000001, 0x2, 0x6, 0xa, 0x4df0, 0x2, 0x6, 0x7f, 0x2800000, 0xe, 0x1, 0x7, 0x1, 0x6, 0x10000, 0x6, 0x0, 0x10000, 0x8, 0x8001, 0x9, 0x1, 0x0, 0xc3, 0x8, 0x5, 0x7fffffff, 0x3, 0x6, 0x0, 0x6, 0x5, 0x2, 0x7, 0x80000001, 0xfffffffc, 0x4, 0x4, 0x2, 0x5, 0x0, 0x2, 0x2, 0x5e6, 0xffffffff, 0x4, 0x4d, 0xf6d, 0x9e65, 0xd9ff, 0xf, 0x4501fa50, 0x5, 0x32, 0x101, 0xfff, 0xcc, 0x800, 0x200, 0x5, 0xbbe, 0x0, 0x3, 0x8, 0x80000000, 0x6, 0x7, 0x4, 0x6, 0x7, 0x6, 0x81, 0x400, 0x8, 0x7, 0xa, 0x49f7, 0x4, 0x15, 0x0, 0x6, 0x2, 0x200, 0x5, 0x5, 0x7, 0x9, 0x0, 0x2, 0xab6, 0x8, 0xfffff800, 0x6, 0x9, 0x7, 0x2, 0x6, 0x6, 0x100, 0x2cb, 0x2, 0x8, 0x7, 0xfda3, 0x577, 0x8, 0x3ff, 0x1e, 0xf, 0x2, 0xd0c4, 0x9, 0x10001, 0x4e, 0x10, 0x8, 0x3, 0x0, 0x5, 0x5, 0x4, 0xdc, 0x81, 0x1, 0x2, 0x1, 0x7, 0x2, 0x80000001, 0x3, 0x7, 0x100, 0x7, 0x8, 0x3, 0xfffffffb, 0x7ff, 0x3, 0x6a2, 0x81, 0x9, 0x3ff, 0x10000, 0x7, 0x6, 0x0, 0x4, 0x7ff, 0x97, 0x5, 0xd9, 0x2, 0x7fffffff, 0x2, 0xa, 0x8, 0xc3, 0x7, 0x7, 0x1, 0x4, 0x4, 0x7, 0x0, 0x1, 0x8, 0x7fff, 0x3, 0x7, 0x7, 0x6, 0x7fffffff, 0x7fffffff, 0x0, 0x647e, 0x5, 0x5, 0x8, 0x8ed, 0x6, 0x6, 0x8, 0x5e90, 0x2, 0xffff, 0x380, 0x2, 0xae1, 0x10, 0x3, 0xfffffbff, 0x4, 0xa53, 0x48, 0xfff, 0x1a6f, 0x6, 0x80, 0x52a, 0xfffffffd, 0x10, 0x5596, 0x0, 0x7f, 0x6, 0x2, 0x1ff, 0x7, 0x0, 0x3, 0x8, 0x101, 0x80000001, 0x2, 0xde7c, 0x80000001, 0x401, 0x2d2, 0xfffffffc, 0x7ff, 0x58, 0x101, 0x2, 0x2, 0x401, 0x2, 0x3000000, 0x3ff, 0x10000, 0x4, 0x2, 0x3ff, 0x0, 0x0, 0x4, 0x1, 0x28d, 0xc, 0x5, 0x0, 0x0, 0x2, 0x5, 0x1fdf7d92, 0x1, 0x8020000, 0x200, 0xffffffff, 0x4, 0x5, 0x9, 0x2, 0x8, 0xf, 0x7, 0x3f, 0x2, 0x800, 0xff, 0x3, 0x9, 0xc0eb, 0x0, 0x4, 0xffff, 0x3, 0xfff, 0x1, 0x200, 0x8, 0x1d, 0x2, 0x5, 0x7, 0x7, 0xfffffe00, 0x3, 0x46a7, 0xff, 0x7, 0xf7, 0x3, 0x80000000, 0x11, 0x5, 0x0, 0x0, 0x7f, 0x4, 0xa, 0x2, 0x1, 0x1, 0x9, 0x84, 0x7, 0x3, 0x80000000, 0x3, 0x10, 0x0, 0x200, 0xfffffff9, 0x8, 0x9, 0x7, 0xfff, 0x7e95, 0x17, 0x6e, 0xde, 0xca8, 0x5, 0x9d, 0x8, 0x6, 0x1, 0x3, 0x5, 0x0, 0x400, 0x100, 0x8, 0x1, 0x1, 0x1ff, 0x3, 0x9, 0x6, 0x878, 0x552, 0xf75, 0x7fff, 0x0, 0x49, 0x3, 0x4, 0x7fffffff, 0xffff140c, 0x7, 0x5, 0x2, 0x3ff, 0x6, 0x8, 0x7ff, 0x8, 0x2, 0x6, 0x7, 0x80000000, 0x0, 0x2, 0x5a5, 0x2, 0x2, 0x1000, 0xfffffff6, 0x0, 0x1, 0x40, 0xfff, 0x1, 0xfffff93b, 0x0, 0x42, 0x3, 0x81, 0x0, 0x82, 0xbfa, 0x0, 0x4, 0x8, 0x3, 0x81, 0xfffffff2, 0x5, 0x8, 0x8, 0xaf, 0xcba, 0x6, 0x7, 0x8000, 0x5, 0x1, 0x81, 0x9, 0xfff, 0x6d61b0a6, 0x8, 0x80, 0x3, 0x7, 0x0, 0x800, 0x10001, 0x2, 0x0, 0x8001, 0x0, 0x62f, 0x9, 0x6, 0x3, 0x1000, 0xdc, 0xfff, 0xc, 0x1, 0x0, 0x2, 0x0, 0x3, 0xe, 0x6, 0x1, 0xfffff800, 0x5, 0x8000, 0x8001, 0x9, 0x5, 0x0, 0x1ff, 0x7fffffff, 0x1ff, 0x9, 0x2, 0x6c6, 0x1, 0x7, 0x0, 0x298, 0x2, 0x4, 0xcbb, 0x7, 0x3, 0x9, 0x1000, 0x1, 0x52d, 0x0, 0xfff, 0x5, 0x7, 0x4, 0x7, 0x7fffffff, 0x7539, 0xffff, 0x7, 0x7, 0x2, 0xf, 0x1000, 0x9, 0x7, 0xfffffff2, 0x9, 0xfffff801, 0x82a, 0x1, 0x9, 0x7f, 0x3af2, 0x7f, 0x2, 0x2, 0xfffffff7, 0xb, 0x7, 0x200, 0x8, 0x6, 0x5, 0xd38, 0x9, 0xc, 0x7, 0x3, 0x7, 0x1, 0x6, 0x5, 0x3, 0x1, 0x81, 0xfffff0b2, 0x5, 0x8, 0x10001, 0x6, 0xff, 0x6d30, 0x3, 0x9, 0x8000, 0xbd, 0x8, 0x5, 0x49e78df0, 0x0, 0x5, 0xc, 0xcc23, 0x8000, 0x5, 0xc000000, 0x4, 0x1, 0xfffffffe, 0x8001, 0x855, 0x10001, 0x1ff, 0x981b, 0xe, 0xb, 0x3, 0xfffffffa, 0xbf, 0x1, 0xd, 0x3, 0xfff, 0xb663, 0x3ff, 0x6, 0x4, 0x1e, 0x4b, 0x9, 0x2, 0x2, 0x8, 0x3, 0x2, 0x800, 0x7, 0x1, 0x1, 0x5, 0x125, 0xd17, 0xc, 0x1, 0x4, 0xfffffffa, 0x6, 0x0, 0x101, 0x7, 0x8, 0x5, 0x6, 0x1c, 0x6, 0xd, 0x81, 0xcccf, 0x3, 0x5, 0x8099, 0x2e, 0xfffffffc, 0x7, 0x88c3, 0x342, 0xc, 0x6, 0x3, 0x2, 0xd09d, 0xf, 0x7, 0x7fff, 0x10000, 0x101, 0x1, 0x2, 0x7, 0x7, 0x7, 0x8, 0x3, 0x8, 0xb, 0x2, 0x9, 0x139, 0x2, 0x1, 0xd8e, 0xfffffffa, 0x0, 0xfffffff8, 0x8000, 0x488, 0x11, 0x100, 0x8, 0x9, 0x7, 0x8000, 0x6, 0xfffffff2, 0xf4, 0x9, 0x5, 0x33, 0xbf, 0x5, 0x8000, 0x80, 0x1, 0x200, 0x4, 0x3fc, 0x5, 0xa, 0x8, 0x3, 0xff, 0x6, 0x9, 0xa, 0xf, 0x8, 0x1000, 0x8, 0x6, 0x1, 0x800, 0x200, 0xa, 0x40, 0x200, 0x8, 0xf, 0x0, 0x8, 0x3, 0x248f, 0x2000000, 0x58, 0x6, 0x4, 0x8cc6, 0x3, 0x2, 0x10000, 0x7, 0x4, 0x2, 0x4, 0xfffffffe, 0xfe7, 0xa7b, 0x6, 0x7, 0x3, 0x1ff, 0x91, 0x100, 0x9, 0x3, 0xaa92, 0x5, 0xc0b1, 0x8, 0x1, 0xfffffff8, 0x7, 0x0, 0x8, 0x4d2, 0x29c, 0x40, 0xf8, 0x10001, 0x4, 0x3, 0x100, 0x4, 0x7, 0x10001, 0x6, 0x6, 0x2, 0x7, 0x7, 0xd, 0x9, 0x6, 0x0, 0x2, 0x4, 0xffff, 0x3f3, 0x3ff, 0x9, 0x0, 0xd, 0x2, 0x0, 0x1ff, 0x8, 0x3, 0x800, 0x3, 0xffff5c18, 0x100, 0x80000001, 0x6, 0x0, 0x10000, 0xfffffffb, 0x7, 0x1, 0x9, 0x7, 0x5, 0x0, 0x1, 0xfffffffb, 0x647, 0x2, 0xffffc840, 0xb, 0x4, 0x9, 0x80000001, 0x7, 0xfffffffa, 0x7, 0x8, 0x50, 0x6, 0x5, 0x101, 0x8, 0x6, 0x0, 0x7fff, 0x3, 0x7, 0x4, 0x9, 0x9, 0x4, 0x9, 0x5, 0x4, 0x1, 0x1ff, 0x8, 0x97, 0x5, 0xd, 0x0, 0x8, 0x9, 0x180, 0x7, 0xe, 0x80000001, 0x1, 0xb2, 0x401, 0x9, 0x4f, 0x5, 0x200, 0x4, 0x5, 0x8, 0x2, 0x7fffffff, 0x7, 0xff, 0x8, 0x67f6, 0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0x9, 0xf66a, 0x7, 0x8, 0x10001, 0x5, 0x7ff, 0x7, 0x9, 0x4, 0x8, 0x0, 0x1, 0x8, 0x1, 0xb0, 0x7fffffff, 0x7, 0x0, 0x0, 0x5b5, 0x8, 0x6, 0x5f4a, 0x7, 0x0, 0x3, 0xfdd, 0x0, 0x3, 0x1, 0x3, 0xff4, 0x8, 0x4c, 0x0, 0x6, 0x4, 0x6, 0x3ff, 0x8, 0x3199, 0x80000000, 0xe, 0x6, 0x80000001, 0x90b, 0x9, 0x400, 0xffffffff, 0x3, 0xc5f446ed, 0xfffeffff, 0x3, 0x9, 0x5, 0x10000, 0x10000, 0x80000001, 0x7, 0x7, 0x8, 0x5, 0x4, 0x9, 0x6, 0x101, 0x7fffffff, 0x10001, 0x9, 0x9, 0x401, 0xfffffff7, 0x4, 0xec, 0x7fffffff, 0x3, 0x8, 0x7, 0x7, 0xffffff00, 0x7, 0x3, 0x1ff, 0x0, 0xe, 0x0, 0x2, 0x8, 0x10, 0x10001000, 0x4, 0x81, 0x8, 0x9, 0x5e, 0x5, 0x8, 0x633c9381, 0x2, 0x9c, 0x3a0, 0x0, 0x193, 0x4, 0x5, 0x0, 0x3ff, 0xffff, 0x200, 0x8, 0xf8, 0x7, 0x7, 0xf, 0x4, 0xfffffffe, 0x1f, 0x7, 0x6, 0x2, 0x2, 0x10000, 0x4, 0x5, 0x57fe, 0x4, 0xa, 0x9, 0x1, 0x10000, 0xd, 0x1ff, 0x401, 0xff, 0xea, 0x1, 0x28, 0x7, 0xda0b, 0x65a, 0x35bc, 0x7412, 0x8, 0x3, 0x401, 0x4, 0x7f, 0x3, 0x6, 0x401, 0x4, 0x2, 0x40, 0xbf, 0xd057, 0x80, 0x7fff, 0x9, 0xcb, 0x1, 0x5, 0x8, 0xd8c9, 0xe2, 0x0, 0x6, 0x9a86, 0x8, 0x3, 0xf, 0xa0, 0x8, 0x0, 0x6dd, 0xffff8000, 0x34e, 0xfffffffd, 0x0, 0x3, 0x8000, 0x800, 0xde86, 0x8001, 0x7f, 0x7, 0x3, 0x4, 0x1ff, 0x80000000, 0x53, 0x80000001, 0x5, 0xffffffff, 0x57e51f2f, 0x7, 0x7f, 0x95, 0x2e, 0x46d0, 0x8, 0x6, 0x1, 0x1, 0x2800, 0x4, 0x7, 0x2, 0x243000, 0xffff0001, 0x4fbf, 0x7, 0xffffffff, 0x7ff, 0x7, 0x31b, 0x401, 0xff, 0xfffff801, 0x54b639ab, 0x3, 0x5, 0x200, 0x3, 0x7, 0xa977, 0xd7, 0x2, 0xfffffffe, 0xdf84, 0x84c8, 0x9, 0xb47, 0xff, 0x3, 0xfffffffd, 0x4, 0x8, 0x9, 0x5, 0xe, 0xffff8000, 0x0, 0x6, 0x8, 0x401, 0x3, 0x1ff, 0x7, 0x4, 0xcc2, 0x5, 0x4, 0xffffffff, 0x81, 0x8001, 0xc0000, 0x9, 0x4c3, 0xff, 0x40, 0x7, 0x0, 0x5, 0x3b79, 0xfffffffb, 0x1, 0x5, 0x0, 0x101, 0x1, 0x0, 0x2, 0x0, 0x1, 0xe, 0x10, 0x2, 0x1, 0x6, 0x81, 0x9, 0x7, 0x5, 0x8, 0x8, 0xb, 0xa9, 0x5, 0x2, 0x7fffffff, 0x3, 0x7, 0x10000, 0x3, 0x1, 0x1, 0x1, 0x6, 0x8, 0x261, 0x400, 0x163, 0x40, 0xfa, 0x2, 0x9, 0x2, 0x7, 0x3, 0x2, 0x29d, 0x0, 0x6, 0x8, 0x1, 0x2, 0x8000, 0x5, 0x4, 0x100, 0x3075, 0x5, 0x100, 0x2, 0x44, 0x1, 0xc, 0x6, 0x80000001, 0x4, 0x2, 0xd, 0x3acaee2c, 0xd, 0x0, 0x1, 0x401, 0x91, 0x0, 0x8, 0x8, 0xf, 0x4, 0xd, 0x0, 0xc, 0x1, 0x3, 0x32, 0xe96, 0xc, 0x5, 0x3deed5d, 0x3, 0x80000001, 0x5, 0x5, 0xe5, 0xffffffff, 0x2, 0xffffffd0, 0x1, 0x80000000, 0x1ff, 0x5, 0x334, 0x6, 0x7ff, 0x80000000, 0x7, 0x1, 0xc, 0x8000, 0x6, 0x9, 0x9, 0x9, 0xa, 0xffff, 0x68, 0x3, 0x9, 0xc7a9, 0x9, 0x8001, 0xb74c, 0x8, 0x4, 0x3, 0x1ff, 0x6, 0x6, 0x5, 0xe19, 0x417, 0x8, 0x0, 0x401, 0x7, 0xfffffff9, 0x200, 0x8add, 0xe3, 0x400, 0x0, 0x26c, 0x3, 0x2, 0x5, 0xb, 0xd, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x5, 0x9, 0x0, 0x4, 0x2, 0x8, 0xb, 0x800, 0x2, 0x11, 0x10001, 0x6, 0xfffffff9, 0xdf, 0x262361bc, 0x8, 0xbe2, 0x5, 0xc77, 0x5, 0x7, 0x8, 0x9, 0xff, 0x8, 0x7, 0x9, 0x5, 0x7fffffff, 0x5, 0xe, 0x6, 0x2, 0xffffffff, 0x8, 0x1, 0x2, 0x5, 0x3eba5000, 0x40, 0x5, 0x7f, 0x3, 0x8, 0x4, 0xfffffffd, 0x8, 0xba82, 0x9, 0x200, 0x1, 0x63, 0x5, 0x1, 0x9, 0x401, 0x5, 0x7, 0x0, 0x1, 0x0, 0x0, 0x4, 0x9, 0x0, 0x10000, 0x4, 0xffff, 0xa, 0x44eaa71, 0xffffffff, 0x7, 0x800, 0xfffffffe, 0xb780, 0x101, 0xff, 0x1439099e, 0x5b57, 0xc644, 0xea, 0x5, 0x9a1, 0x4, 0x7, 0x7, 0xfffffe00, 0x1ff, 0x5, 0xa, 0x5, 0x7, 0x8, 0xe1, 0xc, 0x1, 0xc4bd, 0x4, 0x12, 0x3, 0x9, 0x80, 0x419d, 0x5aa9d9bc, 0x5, 0x80000000, 0x1c21, 0x3, 0x3, 0xd05, 0x6, 0x6, 0x6, 0x7, 0x4, 0x6, 0xfd72, 0x7, 0x1, 0x6, 0xffff, 0x9, 0x4, 0x154, 0x1, 0x3, 0x5, 0xe, 0xfffffff8, 0x7f, 0xff, 0xecdd, 0x80, 0x7fff, 0xffffffff, 0x5, 0xe, 0x1, 0x400, 0x4, 0x6, 0x28, 0x6, 0x100, 0x3, 0x1, 0x6, 0x4, 0x6, 0x3, 0x5, 0x1, 0x7fffffff, 0x8001, 0x58, 0x0, 0x2, 0x7, 0xfffffff8, 0x8, 0x1, 0x5, 0x7e7, 0x255, 0x0, 0x6, 0x2, 0x8, 0xbe, 0x9, 0x5, 0x1, 0x100, 0x6, 0x5845ecec, 0xfffffbff, 0x1, 0xb, 0x2, 0x8, 0x533d, 0x4, 0x8000, 0x7, 0x3, 0x2, 0x4, 0x2, 0x2, 0x8, 0xd9, 0x1, 0x8482, 0x4, 0x9000, 0x73, 0x10000, 0x401, 0x9, 0x5, 0x7f, 0xc9, 0x1, 0x1, 0x57, 0x1ff, 0x6, 0x32b, 0xfd, 0xb, 0xa, 0x2, 0x4, 0x7, 0x2, 0x8, 0x6, 0xfe0000, 0x2, 0x3d, 0x9, 0x15f042f8, 0x7f66, 0x9, 0xffffffff, 0xc, 0x3ff, 0x8, 0xc, 0x83, 0x5, 0xa, 0x2, 0x2, 0x4, 0x3ff, 0x3, 0x2, 0x6, 0x5, 0x43fa1616, 0x3, 0x5, 0xffff98c9, 0x101, 0x7ff, 0x7f, 0x4, 0x4, 0x1, 0x1, 0xd, 0xa, 0xfffffc01, 0x6, 0x7, 0x80, 0x9, 0x9, 0x1, 0x6, 0x6, 0x7fff, 0x151, 0x5, 0xd, 0x2, 0xf, 0x4, 0x100, 0x3, 0x1, 0x6, 0x3ff, 0x4, 0x8, 0x2, 0x6, 0x2, 0x1, 0x200, 0x3, 0x6, 0x8, 0x3, 0x5, 0x7ff, 0x4, 0x7f, 0x2, 0x8000, 0x2, 0x2, 0x7, 0x8, 0xe69, 0x2, 0x5, 0x5, 0x200, 0x8, 0x80000001, 0x3ff, 0x9, 0x5, 0x6, 0x5, 0x6, 0x8, 0x2, 0x7fffffff, 0x3, 0x2, 0xa853, 0x5, 0xaa6, 0x1b, 0x200, 0x9, 0xf59, 0x0, 0x7fff, 0x2, 0x8, 0x7, 0x1, 0xfff, 0xc0, 0x7, 0x8, 0xfffffbff, 0x390], 0x7, 0x2a75}) r4 = dup3(r2, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x73682a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 734.714534ms ago: executing program 5 (id=3151): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x6, 0x6, 0x448, '\x00', 0x8}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0xa, 0x6, 0x2, 0x401, 0x2, 0xbc, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0x1, 0x1, 0x5, 0x6, 0x200, 0x80, 0x7, 0x7, 0x7, 0x8, 0x2, 0xfffffffffffffffe, 0x7, 0xfffffffffffffffd, 0x3, 0x100000001, 0x403, 0x1, 0x8, 0x101, 0x3, 0x4, 0x1, 0x0, 0x1da5, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x2, 0x9, 0x88a, 0x6, 0x6, 0xffffffffffffffff, 0x400, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x0, 0x5, 0x4, 0x4, 0x82d, 0x9, 0x6, 0x0, 0x9, 0xfffffffffffffff8, 0x3ff, 0x6, 0x2, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x7, 0x200, 0x77a, 0x6997, 0x4000000005, 0x539, 0x623a, 0x6, 0x0, 0x7, 0x9, 0x200, 0x7, 0x7ff, 0x0, 0x5, 0x93, 0x7, 0x80, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x7, 0x9, 0x80000004, 0xfffffffffffffffd, 0xfffffffffffffffa, 0x10001, 0x8, 0x8, 0x5, 0x2, 0x5, 0xc3, 0xfffffffffffff000, 0x10000, 0x7fff, 0xfffffffffffffff9, 0x6, 0x46b, 0x8, 0x5, 0x6, 0x7, 0x0, 0x7f, 0x63a]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x40043d14, &(0x7f0000000440)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000006c0)={&(0x7f00000003c0)=[{0x8, 0x5000, 0x0, 0x0}, {0x205, 0x1050, 0x0, 0x0}], 0x2}) r6 = dup3(r0, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x804, 0x0) close(r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) connect$netrom(r6, &(0x7f00000000c0)={{0x3, @bcast, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0xff, 0x7, "ea71061d0000000001000200", 0x0, 0x80}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000a40)='./bus\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201009, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000001c0)=0xa) socket$netlink(0x10, 0x3, 0x12) 734.409968ms ago: executing program 1 (id=3152): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000023, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {&(0x7f00000007c0)=""/131, 0x83}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f00000044c0)=""/4091, 0xffb}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000001c40)=""/73, 0x49}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000a00)=""/204, 0xcc}, {&(0x7f0000001dc0)=""/143, 0x8f}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0xb}, 0x40016002) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) 637.762494ms ago: executing program 3 (id=3153): prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000300)="0300f198aaae5a98ca00008586dd", 0x5ea, 0x44000, &(0x7f0000000200)={0x11, 0xf6, r2, 0x1, 0xfe, 0x6, @random="7483ccb17b06"}, 0x14) 554.712505ms ago: executing program 1 (id=3154): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) syz_open_dev$loop(&(0x7f00000006c0), 0x7, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32=r6], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x98ab}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x408c0}, 0x40000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x3800, 0x1, 0x3d}, @fd, @fda={0x66646185, 0x5, 0x1, 0x7}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 507.586939ms ago: executing program 3 (id=3155): syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0xc73ebdfa468265f4, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x5, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x7ff, 0x6, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x3, 0xea}}}}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x3, 0x0, 0x3}]}, 0x1, [{0x0, 0x0}]}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ufs\x00', 0x10008, 0x0) 360.554967ms ago: executing program 1 (id=3156): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0xfff0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x3800, 0x1, 0x3d}, @fd, @fda={0x66646185, 0x5, 0x1, 0x7}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 155.888786ms ago: executing program 1 (id=3157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x4810000000000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1060, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0xb, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/212, 0xd4, 0xfffffffffffffffd, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 153.84615ms ago: executing program 6 (id=3158): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0xffffffff, @loopback, 0xfffffffd}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001100)) shutdown(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000080)={0x6, &(0x7f0000000480)=[{}, {@fixed}, {@none}, {@fixed}, {@fixed}, {}]}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f00000000c0), 0x4) r4 = socket$inet6(0xa, 0x5, 0xa) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000180)=0x7, 0x4) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xb) openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f0000000280)={0xdb, 0x0, 0xd9}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') sendto$inet6(r0, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) close(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0xfffffffc}}, 0x18) 0s ago: executing program 1 (id=3159): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0xf0ffffffffffffff, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0xf0ff, 0x0, 0x0, 0x1, 0x3d}, @fd, @fda={0x66646185, 0x5, 0x1, 0x7}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): inder: 13953:13955 ioctl c0306201 200000000080 returned -14 [ 612.385329][T13962] binder: 13961:13962 ioctl c0306201 200000000080 returned -14 [ 612.546162][T13965] input: syz0 as /devices/virtual/input/input210 [ 612.572982][T13968] binder: 13967:13968 ioctl c0306201 200000000080 returned -14 [ 612.752396][T13971] binder: 13969:13971 ioctl c0306201 200000000080 returned -14 [ 612.771916][ T5949] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 612.909433][T13974] binder: 13973:13974 ioctl c0306201 200000000080 returned -14 [ 612.921806][ T5949] usb 6-1: device descriptor read/64, error -71 [ 612.980024][T13976] overlayfs: missing 'lowerdir' [ 613.168290][T13982] binder: 13981:13982 ioctl c0306201 200000000080 returned -14 [ 613.184162][ T5949] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 613.231713][ T6367] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 613.334249][ T5949] usb 6-1: device descriptor read/64, error -71 [ 613.412175][ T6367] usb 7-1: Using ep0 maxpacket: 16 [ 613.420547][ T6367] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 613.433096][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 613.442999][ T5949] usb usb6-port1: attempt power cycle [ 613.460257][ T6367] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.487889][ T6367] usb 7-1: config 0 has no interface number 0 [ 613.498999][ T6367] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 613.524090][ T6367] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.532786][ T6367] usb 7-1: Product: syz [ 613.537607][ T6367] usb 7-1: Manufacturer: syz [ 613.543484][ T6367] usb 7-1: SerialNumber: syz [ 613.556137][ T6367] usb 7-1: config 0 descriptor?? [ 613.583228][T13986] binder: 13985:13986 ioctl c0306201 200000000080 returned -14 [ 613.589798][ T6367] uvcvideo 7-1:0.105: probe with driver uvcvideo failed with error -22 [ 613.601550][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 613.608069][ T43] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 613.632294][ T43] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 613.665122][ T43] usb 4-1: can't read configurations, error -61 [ 613.723504][T13988] binder: 13987:13988 ioctl c0306201 200000000080 returned -14 [ 613.736357][T13988] FAULT_INJECTION: forcing a failure. [ 613.736357][T13988] name failslab, interval 1, probability 0, space 0, times 0 [ 613.750213][T13988] CPU: 1 UID: 0 PID: 13988 Comm: syz.1.2777 Not tainted syzkaller #0 PREEMPT(full) [ 613.750250][T13988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 613.750267][T13988] Call Trace: [ 613.750277][T13988] [ 613.750286][T13988] dump_stack_lvl+0x189/0x250 [ 613.750317][T13988] ? __pfx____ratelimit+0x10/0x10 [ 613.750359][T13988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 613.750388][T13988] ? __pfx__printk+0x10/0x10 [ 613.750424][T13988] ? __pfx___might_resched+0x10/0x10 [ 613.750452][T13988] ? fs_reclaim_acquire+0x7d/0x100 [ 613.750485][T13988] should_fail_ex+0x414/0x560 [ 613.750519][T13988] should_failslab+0xa8/0x100 [ 613.750548][T13988] __kmalloc_cache_noprof+0x6f/0x6f0 [ 613.750573][T13988] ? binder_transaction+0x69c/0x6450 [ 613.750595][T13988] ? do_raw_spin_unlock+0x122/0x240 [ 613.750632][T13988] binder_transaction+0x69c/0x6450 [ 613.750658][T13988] ? register_lock_class+0x51/0x320 [ 613.750703][T13988] ? process_measurement+0x3d8/0x1a40 [ 613.750731][T13988] ? ima_match_policy+0x10b/0x2150 [ 613.750768][T13988] ? __pfx_binder_transaction+0x10/0x10 [ 613.750797][T13988] ? __lock_acquire+0xab9/0xd20 [ 613.750833][T13988] ? __might_fault+0xb0/0x130 [ 613.750881][T13988] binder_ioctl_write_read+0xd6a/0xa040 [ 613.750926][T13988] ? is_bpf_text_address+0x26/0x2b0 [ 613.750969][T13988] ? is_bpf_text_address+0x26/0x2b0 [ 613.751002][T13988] ? kernel_text_address+0xa5/0xe0 [ 613.751027][T13988] ? unwind_get_return_address+0x4d/0x90 [ 613.751071][T13988] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 613.751106][T13988] ? stack_trace_save+0x9c/0xe0 [ 613.751142][T13988] ? stack_depot_save_flags+0x40/0x860 [ 613.751177][T13988] ? kasan_save_track+0x4f/0x80 [ 613.751198][T13988] ? kasan_save_track+0x3e/0x80 [ 613.751217][T13988] ? __kasan_save_free_info+0x46/0x50 [ 613.751246][T13988] ? __kasan_slab_free+0x5b/0x80 [ 613.751268][T13988] ? kfree+0x199/0x6d0 [ 613.751285][T13988] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 613.751313][T13988] ? security_file_ioctl+0xcb/0x2d0 [ 613.751337][T13988] ? __se_sys_ioctl+0x47/0x170 [ 613.751364][T13988] ? do_syscall_64+0xfa/0xfa0 [ 613.751401][T13988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.751442][T13988] ? __pfx_binder_debug+0x10/0x10 [ 613.751471][T13988] ? do_raw_spin_lock+0x121/0x290 [ 613.751517][T13988] ? _raw_spin_unlock+0x28/0x50 [ 613.751547][T13988] ? binder_get_thread+0x178/0x6d0 [ 613.751582][T13988] binder_ioctl+0x3e0/0x19c0 [ 613.751618][T13988] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 613.751649][T13988] ? do_vfs_ioctl+0xbe8/0x1430 [ 613.751671][T13988] ? __pfx_binder_ioctl+0x10/0x10 [ 613.751704][T13988] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 613.751768][T13988] ? __fget_files+0x2a/0x420 [ 613.751804][T13988] ? __fget_files+0x3a0/0x420 [ 613.751832][T13988] ? __fget_files+0x2a/0x420 [ 613.751866][T13988] ? bpf_lsm_file_ioctl+0x9/0x20 [ 613.751901][T13988] ? __pfx_binder_ioctl+0x10/0x10 [ 613.751934][T13988] __se_sys_ioctl+0xfc/0x170 [ 613.751961][T13988] do_syscall_64+0xfa/0xfa0 [ 613.751993][T13988] ? lockdep_hardirqs_on+0x9c/0x150 [ 613.752026][T13988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.752047][T13988] ? clear_bhb_loop+0x60/0xb0 [ 613.752076][T13988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.752097][T13988] RIP: 0033:0x7f202198eba9 [ 613.752119][T13988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.752139][T13988] RSP: 002b:00007f20228df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.752164][T13988] RAX: ffffffffffffffda RBX: 00007f2021bd5fa0 RCX: 00007f202198eba9 [ 613.752182][T13988] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 613.752196][T13988] RBP: 00007f20228df090 R08: 0000000000000000 R09: 0000000000000000 [ 613.752209][T13988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.752224][T13988] R13: 00007f2021bd6038 R14: 00007f2021bd5fa0 R15: 00007fff45466488 [ 613.752261][T13988] [ 613.796634][ T6367] usb 7-1: USB disconnect, device number 13 [ 613.798247][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.822790][ T5949] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 613.901860][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 614.087617][ T5949] usb 6-1: device descriptor read/8, error -71 [ 614.304675][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 614.311230][ T43] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 614.326619][ T43] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 614.336049][ T43] usb 4-1: can't read configurations, error -61 [ 614.343139][ T43] usb usb4-port1: attempt power cycle [ 614.399766][T13994] binder: 13993:13994 ioctl c0306201 200000000080 returned -14 [ 614.441693][ T5949] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 614.475840][ T5949] usb 6-1: device descriptor read/8, error -71 [ 614.489612][T13996] binder: 13995:13996 ioctl c0306201 200000000080 returned -14 [ 614.594257][ T5949] usb usb6-port1: unable to enumerate USB device [ 614.660572][T14000] input: syz1 as /devices/virtual/input/input211 [ 614.681525][ T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 614.713077][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 614.719448][ T43] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 614.743801][ T43] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 614.757114][ T43] usb 4-1: can't read configurations, error -61 [ 614.902524][ T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 614.911049][T14004] binder: 14003:14004 ioctl c0306201 200000000080 returned -14 [ 614.945416][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 614.972001][ T43] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 614.999270][ T43] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 615.015473][ T43] usb 4-1: can't read configurations, error -61 [ 615.036017][ T43] usb usb4-port1: unable to enumerate USB device [ 615.139960][T14009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.214080][T14011] binder: 14010:14011 ioctl c0306201 200000000080 returned -14 [ 615.304810][T14013] binder: 14012:14013 ioctl c0306201 200000000080 returned -14 [ 615.409923][T14015] binder: 14014:14015 ioctl c0306201 200000000080 returned -14 [ 615.428976][T14015] FAULT_INJECTION: forcing a failure. [ 615.428976][T14015] name failslab, interval 1, probability 0, space 0, times 0 [ 615.450173][T14015] CPU: 0 UID: 0 PID: 14015 Comm: syz.1.2790 Not tainted syzkaller #0 PREEMPT(full) [ 615.450216][T14015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 615.450230][T14015] Call Trace: [ 615.450240][T14015] [ 615.450253][T14015] dump_stack_lvl+0x189/0x250 [ 615.450282][T14015] ? __pfx____ratelimit+0x10/0x10 [ 615.450315][T14015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.450341][T14015] ? __pfx__printk+0x10/0x10 [ 615.450374][T14015] ? __pfx___might_resched+0x10/0x10 [ 615.450401][T14015] ? fs_reclaim_acquire+0x7d/0x100 [ 615.450434][T14015] should_fail_ex+0x414/0x560 [ 615.450467][T14015] should_failslab+0xa8/0x100 [ 615.450497][T14015] __kmalloc_cache_noprof+0x6f/0x6f0 [ 615.450523][T14015] ? binder_transaction+0x1e44/0x6450 [ 615.450545][T14015] ? do_raw_spin_unlock+0x122/0x240 [ 615.450582][T14015] binder_transaction+0x1e44/0x6450 [ 615.450636][T14015] ? ima_match_policy+0x10b/0x2150 [ 615.450672][T14015] ? __pfx_binder_transaction+0x10/0x10 [ 615.450702][T14015] ? __lock_acquire+0xab9/0xd20 [ 615.450737][T14015] ? __might_fault+0xb0/0x130 [ 615.450785][T14015] binder_ioctl_write_read+0xd6a/0xa040 [ 615.450830][T14015] ? is_bpf_text_address+0x26/0x2b0 [ 615.450864][T14015] ? is_bpf_text_address+0x26/0x2b0 [ 615.450892][T14015] ? kernel_text_address+0xa5/0xe0 [ 615.450917][T14015] ? unwind_get_return_address+0x4d/0x90 [ 615.450960][T14015] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 615.450995][T14015] ? stack_trace_save+0x9c/0xe0 [ 615.451030][T14015] ? stack_depot_save_flags+0x40/0x860 [ 615.451066][T14015] ? kasan_save_track+0x4f/0x80 [ 615.451087][T14015] ? kasan_save_track+0x3e/0x80 [ 615.451107][T14015] ? __kasan_save_free_info+0x46/0x50 [ 615.451137][T14015] ? __kasan_slab_free+0x5b/0x80 [ 615.451164][T14015] ? kfree+0x199/0x6d0 [ 615.451181][T14015] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 615.451216][T14015] ? security_file_ioctl+0xcb/0x2d0 [ 615.451241][T14015] ? __se_sys_ioctl+0x47/0x170 [ 615.451262][T14015] ? do_syscall_64+0xfa/0xfa0 [ 615.451294][T14015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.451337][T14015] ? __pfx_binder_debug+0x10/0x10 [ 615.451365][T14015] ? do_raw_spin_lock+0x121/0x290 [ 615.451413][T14015] ? _raw_spin_unlock+0x28/0x50 [ 615.451443][T14015] ? binder_get_thread+0x178/0x6d0 [ 615.451480][T14015] binder_ioctl+0x3e0/0x19c0 [ 615.451518][T14015] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 615.451551][T14015] ? do_vfs_ioctl+0xbe8/0x1430 [ 615.451573][T14015] ? __pfx_binder_ioctl+0x10/0x10 [ 615.451606][T14015] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 615.451667][T14015] ? __fget_files+0x2a/0x420 [ 615.451702][T14015] ? __fget_files+0x3a0/0x420 [ 615.451729][T14015] ? __fget_files+0x2a/0x420 [ 615.451759][T14015] ? bpf_lsm_file_ioctl+0x9/0x20 [ 615.451793][T14015] ? __pfx_binder_ioctl+0x10/0x10 [ 615.451824][T14015] __se_sys_ioctl+0xfc/0x170 [ 615.451848][T14015] do_syscall_64+0xfa/0xfa0 [ 615.451882][T14015] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.451916][T14015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.451938][T14015] ? clear_bhb_loop+0x60/0xb0 [ 615.451965][T14015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.451987][T14015] RIP: 0033:0x7f202198eba9 [ 615.452010][T14015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.452030][T14015] RSP: 002b:00007f20228df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 615.452056][T14015] RAX: ffffffffffffffda RBX: 00007f2021bd5fa0 RCX: 00007f202198eba9 [ 615.452073][T14015] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 615.452088][T14015] RBP: 00007f20228df090 R08: 0000000000000000 R09: 0000000000000000 [ 615.452103][T14015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.452117][T14015] R13: 00007f2021bd6038 R14: 00007f2021bd5fa0 R15: 00007fff45466488 [ 615.452154][T14015] [ 616.184703][T14019] netlink: 'syz.1.2792': attribute type 10 has an invalid length. [ 616.193558][T14019] bond0: (slave wlan1): Opening slave failed [ 616.428080][T14027] input: syz1 as /devices/virtual/input/input212 [ 616.450927][T14025] binder: 14024:14025 ioctl c0306201 200000000080 returned -14 [ 616.659630][T14031] binder: 14030:14031 ioctl c0306201 200000000080 returned -14 [ 616.752437][T14035] binder: 14034:14035 ioctl c0306201 200000000080 returned -14 [ 616.762209][T14033] pim6reg: entered allmulticast mode [ 616.913999][T14038] binder: 14037:14038 ioctl c0306201 200000000080 returned -14 [ 617.194298][T14044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2804'. [ 617.220731][T14044] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2804'. [ 617.253564][T14046] binder: 14045:14046 ioctl c0306201 200000000080 returned -14 [ 617.253715][T14044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2804'. [ 617.340343][T14044] comedi comedi1: comedi_config --init_data is deprecated [ 617.600592][T14056] binder: 14055:14056 ioctl c0306201 200000000080 returned -14 [ 617.628522][T14062] input: syz0 as /devices/virtual/input/input213 [ 617.765163][T14064] binder: 14063:14064 ioctl c0306201 200000000080 returned -14 [ 617.875161][T14067] binder: 14065:14067 ioctl c0306201 200000000080 returned -14 [ 618.098513][T14073] binder: 14072:14073 ioctl c0306201 200000000080 returned -14 [ 618.640061][T14088] binder: 14086:14088 ioctl c0306201 200000000080 returned -14 [ 618.671778][T14087] binder: 14084:14087 ioctl c0306201 200000000080 returned -14 [ 618.697316][T14089] binder: 14085:14089 ioctl c0306201 200000000080 returned -14 [ 618.848444][T14093] binder: 14091:14093 ioctl c0306201 200000000080 returned -14 [ 618.866956][T14093] FAULT_INJECTION: forcing a failure. [ 618.866956][T14093] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 618.896068][T14093] CPU: 0 UID: 0 PID: 14093 Comm: syz.5.2824 Not tainted syzkaller #0 PREEMPT(full) [ 618.896105][T14093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 618.896122][T14093] Call Trace: [ 618.896132][T14093] [ 618.896142][T14093] dump_stack_lvl+0x189/0x250 [ 618.896172][T14093] ? __pfx____ratelimit+0x10/0x10 [ 618.896207][T14093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.896230][T14093] ? __pfx__printk+0x10/0x10 [ 618.896265][T14093] ? fs_reclaim_acquire+0x7d/0x100 [ 618.896303][T14093] should_fail_ex+0x414/0x560 [ 618.896336][T14093] prepare_alloc_pages+0x213/0x610 [ 618.896374][T14093] __alloc_frozen_pages_noprof+0x123/0x370 [ 618.896407][T14093] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 618.896446][T14093] ? policy_nodemask+0x27c/0x720 [ 618.896472][T14093] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 618.896501][T14093] alloc_pages_mpol+0x232/0x4a0 [ 618.896535][T14093] alloc_pages_noprof+0xa9/0x190 [ 618.896564][T14093] binder_alloc_new_buf+0x1d42/0x2f30 [ 618.896627][T14093] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 618.896658][T14093] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 618.896693][T14093] binder_transaction+0x23b4/0x6450 [ 618.896747][T14093] ? ima_match_policy+0x10b/0x2150 [ 618.896787][T14093] ? __pfx_binder_transaction+0x10/0x10 [ 618.896817][T14093] ? __lock_acquire+0xab9/0xd20 [ 618.896854][T14093] ? __might_fault+0xb0/0x130 [ 618.896909][T14093] binder_ioctl_write_read+0xd6a/0xa040 [ 618.896955][T14093] ? is_bpf_text_address+0x26/0x2b0 [ 618.896988][T14093] ? is_bpf_text_address+0x26/0x2b0 [ 618.897017][T14093] ? kernel_text_address+0xa5/0xe0 [ 618.897043][T14093] ? unwind_get_return_address+0x4d/0x90 [ 618.897086][T14093] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 618.897123][T14093] ? stack_trace_save+0x9c/0xe0 [ 618.897160][T14093] ? stack_depot_save_flags+0x40/0x860 [ 618.897196][T14093] ? kasan_save_track+0x4f/0x80 [ 618.897218][T14093] ? kasan_save_track+0x3e/0x80 [ 618.897238][T14093] ? __kasan_save_free_info+0x46/0x50 [ 618.897267][T14093] ? __kasan_slab_free+0x5b/0x80 [ 618.897289][T14093] ? kfree+0x199/0x6d0 [ 618.897307][T14093] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 618.897335][T14093] ? security_file_ioctl+0xcb/0x2d0 [ 618.897360][T14093] ? __se_sys_ioctl+0x47/0x170 [ 618.897381][T14093] ? do_syscall_64+0xfa/0xfa0 [ 618.897414][T14093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.897454][T14093] ? __pfx_binder_debug+0x10/0x10 [ 618.897485][T14093] ? do_raw_spin_lock+0x121/0x290 [ 618.897535][T14093] ? _raw_spin_unlock+0x28/0x50 [ 618.897564][T14093] ? binder_get_thread+0x178/0x6d0 [ 618.897603][T14093] binder_ioctl+0x3e0/0x19c0 [ 618.897641][T14093] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 618.897674][T14093] ? do_vfs_ioctl+0xbe8/0x1430 [ 618.897698][T14093] ? __pfx_binder_ioctl+0x10/0x10 [ 618.897730][T14093] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 618.897795][T14093] ? __fget_files+0x2a/0x420 [ 618.897829][T14093] ? __fget_files+0x3a0/0x420 [ 618.897865][T14093] ? __fget_files+0x2a/0x420 [ 618.897896][T14093] ? bpf_lsm_file_ioctl+0x9/0x20 [ 618.897926][T14093] ? __pfx_binder_ioctl+0x10/0x10 [ 618.897957][T14093] __se_sys_ioctl+0xfc/0x170 [ 618.897981][T14093] do_syscall_64+0xfa/0xfa0 [ 618.898010][T14093] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.898041][T14093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.898062][T14093] ? clear_bhb_loop+0x60/0xb0 [ 618.898087][T14093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.898109][T14093] RIP: 0033:0x7f471bb8eba9 [ 618.898131][T14093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.898149][T14093] RSP: 002b:00007f471c939038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.898171][T14093] RAX: ffffffffffffffda RBX: 00007f471bdd5fa0 RCX: 00007f471bb8eba9 [ 618.898188][T14093] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 618.898201][T14093] RBP: 00007f471c939090 R08: 0000000000000000 R09: 0000000000000000 [ 618.898214][T14093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.898227][T14093] R13: 00007f471bdd6038 R14: 00007f471bdd5fa0 R15: 00007ffddc412b68 [ 618.898259][T14093] [ 619.357141][T14094] binder: 14092:14094 ioctl c0306201 200000000080 returned -14 [ 619.464044][T14098] binder: 14095:14098 ioctl c0306201 200000000080 returned -14 [ 619.476045][T14098] binder: 14095:14098 ioctl 3b88 200000000240 returned -22 [ 619.554704][T14099] input: syz0 as /devices/virtual/input/input214 [ 619.615717][T14103] binder: 14102:14103 ioctl c0306201 200000000080 returned -14 [ 619.726482][T14105] binder: 14104:14105 ioctl c0306201 200000000080 returned -14 [ 619.742860][T14105] binder: 14104:14105 ioctl c0306201 0 returned -14 [ 619.805066][T14107] binder: 14106:14107 ioctl c0306201 200000000080 returned -14 [ 619.899570][T14111] binder: 14108:14111 ioctl c0306201 200000000080 returned -14 [ 620.042765][T14114] binder: 14113:14114 ioctl c0306201 200000000080 returned -14 [ 620.066183][T14115] input: syz1 as /devices/virtual/input/input215 [ 620.094441][T14117] binder: 14116:14117 ioctl c0306201 200000000080 returned -14 [ 620.111593][ T5949] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 620.291513][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 620.314667][ T5949] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 620.341658][ T5949] usb 2-1: config 4 has no interface number 0 [ 620.360744][ T5949] usb 2-1: config 4 interface 51 has no altsetting 0 [ 620.412853][ T5949] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 620.436180][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.474966][ T5949] usb 2-1: Product: syz [ 620.480540][T14124] binder: 14122:14124 ioctl c0306201 200000000080 returned -14 [ 620.496942][ T5949] usb 2-1: Manufacturer: syz [ 620.516786][T14124] binder: 14122:14124 ioctl af01 0 returned -22 [ 620.517899][ T5949] usb 2-1: SerialNumber: syz [ 620.531957][T14127] binder: 14126:14127 ioctl 4018620d 0 returned -22 [ 620.555703][T14127] binder: 14126:14127 ioctl c0306201 200000000080 returned -14 [ 620.569997][ T5949] cdc_eem 2-1:4.51: probe with driver cdc_eem failed with error -22 [ 620.723484][T14129] binder: 14128:14129 ioctl c0306201 200000000080 returned -14 [ 620.742616][T14129] FAULT_INJECTION: forcing a failure. [ 620.742616][T14129] name failslab, interval 1, probability 0, space 0, times 0 [ 620.767377][T14132] mmap: syz.3.2843 (14132): VmData 37478400 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 620.793441][ T5949] usb 2-1: USB disconnect, device number 27 [ 620.796680][T14129] CPU: 1 UID: 0 PID: 14129 Comm: syz.5.2842 Not tainted syzkaller #0 PREEMPT(full) [ 620.796725][T14129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 620.796744][T14129] Call Trace: [ 620.796759][T14129] [ 620.796772][T14129] dump_stack_lvl+0x189/0x250 [ 620.796807][T14129] ? __pfx____ratelimit+0x10/0x10 [ 620.796847][T14129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.796872][T14129] ? __pfx__printk+0x10/0x10 [ 620.796912][T14129] ? __pfx___might_resched+0x10/0x10 [ 620.796952][T14129] ? fs_reclaim_acquire+0x7d/0x100 [ 620.796989][T14129] should_fail_ex+0x414/0x560 [ 620.797028][T14129] should_failslab+0xa8/0x100 [ 620.797062][T14129] __kmalloc_cache_noprof+0x6f/0x6f0 [ 620.797092][T14129] ? set_page_refcounted+0xa0/0x1e0 [ 620.797120][T14129] ? binder_alloc_new_buf+0x1d88/0x2f30 [ 620.797165][T14129] binder_alloc_new_buf+0x1d88/0x2f30 [ 620.797232][T14129] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 620.797266][T14129] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 620.797303][T14129] binder_transaction+0x23b4/0x6450 [ 620.797362][T14129] ? ima_match_policy+0x10b/0x2150 [ 620.797405][T14129] ? __pfx_binder_transaction+0x10/0x10 [ 620.797432][T14129] ? __lock_acquire+0xab9/0xd20 [ 620.797468][T14129] ? __might_fault+0xb0/0x130 [ 620.797521][T14129] binder_ioctl_write_read+0xd6a/0xa040 [ 620.797571][T14129] ? is_bpf_text_address+0x26/0x2b0 [ 620.797609][T14129] ? is_bpf_text_address+0x26/0x2b0 [ 620.797641][T14129] ? kernel_text_address+0xa5/0xe0 [ 620.797668][T14129] ? unwind_get_return_address+0x4d/0x90 [ 620.797717][T14129] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 620.797756][T14129] ? stack_trace_save+0x9c/0xe0 [ 620.797798][T14129] ? stack_depot_save_flags+0x40/0x860 [ 620.797837][T14129] ? kasan_save_track+0x4f/0x80 [ 620.797862][T14129] ? kasan_save_track+0x3e/0x80 [ 620.797885][T14129] ? __kasan_save_free_info+0x46/0x50 [ 620.797932][T14129] ? __kasan_slab_free+0x5b/0x80 [ 620.797958][T14129] ? kfree+0x199/0x6d0 [ 620.797978][T14129] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 620.798009][T14129] ? security_file_ioctl+0xcb/0x2d0 [ 620.798036][T14129] ? __se_sys_ioctl+0x47/0x170 [ 620.798061][T14129] ? do_syscall_64+0xfa/0xfa0 [ 620.798096][T14129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.798145][T14129] ? __pfx_binder_debug+0x10/0x10 [ 620.798178][T14129] ? do_raw_spin_lock+0x121/0x290 [ 620.798234][T14129] ? _raw_spin_unlock+0x28/0x50 [ 620.798269][T14129] ? binder_get_thread+0x178/0x6d0 [ 620.798310][T14129] binder_ioctl+0x3e0/0x19c0 [ 620.798353][T14129] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 620.798390][T14129] ? do_vfs_ioctl+0xbe8/0x1430 [ 620.798415][T14129] ? __pfx_binder_ioctl+0x10/0x10 [ 620.798452][T14129] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 620.798522][T14129] ? __fget_files+0x2a/0x420 [ 620.798560][T14129] ? __fget_files+0x3a0/0x420 [ 620.798592][T14129] ? __fget_files+0x2a/0x420 [ 620.798629][T14129] ? bpf_lsm_file_ioctl+0x9/0x20 [ 620.798665][T14129] ? __pfx_binder_ioctl+0x10/0x10 [ 620.798702][T14129] __se_sys_ioctl+0xfc/0x170 [ 620.798730][T14129] do_syscall_64+0xfa/0xfa0 [ 620.798766][T14129] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.798803][T14129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.798826][T14129] ? clear_bhb_loop+0x60/0xb0 [ 620.798858][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.798883][T14129] RIP: 0033:0x7f471bb8eba9 [ 620.798908][T14129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.798938][T14129] RSP: 002b:00007f471c939038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.798968][T14129] RAX: ffffffffffffffda RBX: 00007f471bdd5fa0 RCX: 00007f471bb8eba9 [ 620.798985][T14129] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 620.799003][T14129] RBP: 00007f471c939090 R08: 0000000000000000 R09: 0000000000000000 [ 620.799019][T14129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.799035][T14129] R13: 00007f471bdd6038 R14: 00007f471bdd5fa0 R15: 00007ffddc412b68 [ 620.799076][T14129] [ 620.803574][T14133] binder: 14130:14133 ioctl c0306201 200000000080 returned -14 [ 620.998211][T14135] binder: BINDER_SET_CONTEXT_MGR already set [ 621.245570][T14135] binder: 14130:14135 ioctl 4018620d 200000000040 returned -16 [ 621.302244][T14139] binder: 14137:14139 ioctl c0306201 200000000080 returned -14 [ 621.328559][T14138] binder: 14136:14138 ioctl c0306201 200000000080 returned -14 [ 621.335427][T14141] binder: 14140:14141 ioctl c0306201 200000000080 returned -14 [ 621.562063][T14148] binder: 14144:14148 ioctl 4018620d 0 returned -22 [ 621.567519][T14147] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2848'. [ 621.570450][T14145] binder: 14143:14145 ioctl 4018620d 0 returned -22 [ 621.591787][T14149] binder: 14146:14149 ioctl c0306201 200000000080 returned -14 [ 621.602729][T14148] binder: 14144:14148 ioctl c0306201 200000000080 returned -14 [ 621.633677][T14145] binder: 14143:14145 ioctl c0306201 200000000080 returned -14 [ 621.803360][T14157] binder: 14154:14157 ioctl c0306201 200000000080 returned -14 [ 621.823187][T14159] binder: 14155:14159 ioctl c0306201 200000000080 returned -14 [ 621.845417][T14159] FAULT_INJECTION: forcing a failure. [ 621.845417][T14159] name failslab, interval 1, probability 0, space 0, times 0 [ 621.902435][T14159] CPU: 1 UID: 0 PID: 14159 Comm: syz.5.2855 Not tainted syzkaller #0 PREEMPT(full) [ 621.902471][T14159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 621.902486][T14159] Call Trace: [ 621.902495][T14159] [ 621.902507][T14159] dump_stack_lvl+0x189/0x250 [ 621.902536][T14159] ? __pfx____ratelimit+0x10/0x10 [ 621.902570][T14159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.902590][T14159] ? __pfx__printk+0x10/0x10 [ 621.902626][T14159] ? __pfx___might_resched+0x10/0x10 [ 621.902659][T14159] should_fail_ex+0x414/0x560 [ 621.902701][T14159] should_failslab+0xa8/0x100 [ 621.902732][T14159] __kmalloc_noprof+0xcb/0x7f0 [ 621.902755][T14159] ? kfree+0x4d/0x6d0 [ 621.902773][T14159] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 621.902816][T14159] tomoyo_realpath_from_path+0xe3/0x5d0 [ 621.902854][T14159] ? tomoyo_domain+0xd9/0x130 [ 621.902881][T14159] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 621.902910][T14159] tomoyo_path_number_perm+0x1e8/0x5a0 [ 621.902942][T14159] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 621.903015][T14159] ? __fget_files+0x2a/0x420 [ 621.903051][T14159] ? __fget_files+0x3a0/0x420 [ 621.903079][T14159] ? __fget_files+0x2a/0x420 [ 621.903113][T14159] security_file_ioctl+0xcb/0x2d0 [ 621.903143][T14159] __se_sys_ioctl+0x47/0x170 [ 621.903171][T14159] do_syscall_64+0xfa/0xfa0 [ 621.903203][T14159] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.903237][T14159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.903260][T14159] ? clear_bhb_loop+0x60/0xb0 [ 621.903287][T14159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.903310][T14159] RIP: 0033:0x7f471bb8eba9 [ 621.903331][T14159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.903352][T14159] RSP: 002b:00007f471c939038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.903377][T14159] RAX: ffffffffffffffda RBX: 00007f471bdd5fa0 RCX: 00007f471bb8eba9 [ 621.903395][T14159] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 621.903410][T14159] RBP: 00007f471c939090 R08: 0000000000000000 R09: 0000000000000000 [ 621.903425][T14159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.903437][T14159] R13: 00007f471bdd6038 R14: 00007f471bdd5fa0 R15: 00007ffddc412b68 [ 621.903478][T14159] [ 621.903559][T14159] ERROR: Out of memory at tomoyo_realpath_from_path. [ 622.092442][T14166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.092899][T14166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.094734][T14165] input: syz0 as /devices/virtual/input/input216 [ 622.137977][T14168] binder: 14167:14168 ioctl c0306201 200000000080 returned -14 [ 622.322394][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 622.387697][T14171] binder: 14169:14171 ioctl c0306201 200000000080 returned -14 [ 622.506383][T14173] binder: BINDER_SET_CONTEXT_MGR already set [ 622.590732][T14173] binder: 14169:14173 ioctl 4018620d 200000000040 returned -16 [ 622.612306][ T43] usb 2-1: device descriptor read/64, error -71 [ 622.731024][T14177] binder: 14176:14177 ioctl c0306201 200000000080 returned -14 [ 622.784266][T14179] binder: 14178:14179 ioctl c0306201 200000000080 returned -14 [ 622.848257][T14181] binder: 14180:14181 ioctl 4018620d 0 returned -22 [ 622.861910][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 622.904621][T14183] binder: 14180:14183 ioctl c0306201 200000000080 returned -14 [ 622.930407][T14184] binder: BINDER_SET_CONTEXT_MGR already set [ 622.937933][T14184] binder: 14182:14184 ioctl 4018620d 200000000040 returned -16 [ 623.012029][ T43] usb 2-1: device descriptor read/64, error -71 [ 623.118624][T14188] binder: 14187:14188 ioctl c0306201 200000000080 returned -14 [ 623.133074][ T43] usb usb2-port1: attempt power cycle [ 623.151107][T14190] binder: 14189:14190 ioctl c0306201 200000000080 returned -14 [ 623.383994][T14197] binder: 14196:14197 ioctl c0306201 200000000080 returned -14 [ 623.460637][T14199] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2870'. [ 623.491619][ T43] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 623.499905][T14199] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2870'. [ 623.520346][T14201] binder: 14200:14201 ioctl c0306201 200000000080 returned -14 [ 623.532694][ T43] usb 2-1: device descriptor read/8, error -71 [ 623.593799][T14198] syzkaller1: entered promiscuous mode [ 623.602571][T14198] syzkaller1: entered allmulticast mode [ 623.710184][T14203] binder: 14202:14203 ioctl c0306201 2000000001c0 returned -22 [ 623.731820][T14205] binder: BINDER_SET_CONTEXT_MGR already set [ 623.737890][T14205] binder: 14204:14205 ioctl 4018620d 200000000040 returned -16 [ 623.791965][ T43] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 623.835112][ T43] usb 2-1: device descriptor read/8, error -71 [ 623.928355][T14207] binder: BINDER_SET_CONTEXT_MGR already set [ 623.945817][T14207] binder: 14206:14207 ioctl 4018620d 200000000040 returned -16 [ 623.962976][T14210] binder: 14209:14210 ioctl c0306201 200000000080 returned -14 [ 623.992333][ T43] usb usb2-port1: unable to enumerate USB device [ 624.010068][T14210] FAULT_INJECTION: forcing a failure. [ 624.010068][T14210] name failslab, interval 1, probability 0, space 0, times 0 [ 624.030983][T14210] CPU: 1 UID: 0 PID: 14210 Comm: syz.6.2877 Not tainted syzkaller #0 PREEMPT(full) [ 624.031020][T14210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 624.031036][T14210] Call Trace: [ 624.031046][T14210] [ 624.031057][T14210] dump_stack_lvl+0x189/0x250 [ 624.031086][T14210] ? __pfx____ratelimit+0x10/0x10 [ 624.031121][T14210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.031142][T14210] ? __pfx__printk+0x10/0x10 [ 624.031180][T14210] ? __pfx___might_resched+0x10/0x10 [ 624.031206][T14210] ? fs_reclaim_acquire+0x7d/0x100 [ 624.031239][T14210] should_fail_ex+0x414/0x560 [ 624.031271][T14210] should_failslab+0xa8/0x100 [ 624.031309][T14210] __kmalloc_noprof+0xcb/0x7f0 [ 624.031333][T14210] ? tomoyo_encode+0x28b/0x550 [ 624.031375][T14210] tomoyo_encode+0x28b/0x550 [ 624.031412][T14210] tomoyo_realpath_from_path+0x58d/0x5d0 [ 624.031457][T14210] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 624.031486][T14210] tomoyo_path_number_perm+0x1e8/0x5a0 [ 624.031518][T14210] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 624.031587][T14210] ? __fget_files+0x2a/0x420 [ 624.031622][T14210] ? __fget_files+0x3a0/0x420 [ 624.031650][T14210] ? __fget_files+0x2a/0x420 [ 624.031684][T14210] security_file_ioctl+0xcb/0x2d0 [ 624.031714][T14210] __se_sys_ioctl+0x47/0x170 [ 624.031742][T14210] do_syscall_64+0xfa/0xfa0 [ 624.031776][T14210] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.031808][T14210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.031831][T14210] ? clear_bhb_loop+0x60/0xb0 [ 624.031859][T14210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.031880][T14210] RIP: 0033:0x7f1ef258eba9 [ 624.031902][T14210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.031921][T14210] RSP: 002b:00007f1ef07f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.031947][T14210] RAX: ffffffffffffffda RBX: 00007f1ef27d5fa0 RCX: 00007f1ef258eba9 [ 624.031971][T14210] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 624.031986][T14210] RBP: 00007f1ef07f6090 R08: 0000000000000000 R09: 0000000000000000 [ 624.032000][T14210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.032015][T14210] R13: 00007f1ef27d6038 R14: 00007f1ef27d5fa0 R15: 00007ffe5019a3d8 [ 624.032053][T14210] [ 624.285613][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.317002][T14210] ERROR: Out of memory at tomoyo_realpath_from_path. [ 624.354637][T14213] binder: 14212:14213 ioctl c0306201 200000000080 returned -14 [ 624.558546][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2882'. [ 624.572564][T14220] binder: 14218:14220 ioctl c0306201 200000000080 returned -14 [ 624.579671][T14221] binder: 14219:14221 ioctl c0306201 200000000080 returned -14 [ 624.681762][T14221] binder: 14219:14221 unknown command 0 [ 624.698817][T14221] binder: 14219:14221 ioctl c0306201 200000000180 returned -22 [ 624.709376][T14224] binder: 14223:14224 ioctl c0306201 200000000080 returned -14 [ 624.800621][T14226] binder: 14225:14226 ioctl c0306201 200000000080 returned -14 [ 624.939681][T14229] binder: BINDER_SET_CONTEXT_MGR already set [ 624.948680][T14230] binder: BINDER_SET_CONTEXT_MGR already set [ 624.961624][T14229] binder: 14227:14229 ioctl 4018620d 200000000040 returned -16 [ 624.974271][T14230] binder: 14228:14230 ioctl 4018620d 200000000040 returned -16 [ 625.230611][T14237] binder: 14234:14237 ioctl c0306201 200000000080 returned -14 [ 625.250024][T14241] binder: 14239:14241 ioctl c0306201 200000000080 returned -14 [ 625.272352][T14240] input: syz1 as /devices/virtual/input/input217 [ 625.451065][T14246] binder: 14245:14246 ioctl c0306201 200000000080 returned -14 [ 625.550806][T14249] binder: 14247:14249 ioctl c0306201 200000000080 returned -14 [ 625.614337][T14251] input: syz0 as /devices/virtual/input/input218 [ 625.763643][T14254] binder: BINDER_SET_CONTEXT_MGR already set [ 625.769894][T14254] binder: 14252:14254 ioctl 4018620d 200000000040 returned -16 [ 625.833728][T14257] binder: 14256:14257 ioctl c0306201 0 returned -14 [ 626.193388][T14265] binder: 14264:14265 ioctl c0306201 200000000080 returned -14 [ 626.262269][T14269] binder: 14266:14269 ioctl c0306201 200000000080 returned -14 [ 626.271147][T14270] binder: 14267:14270 ioctl c0306201 200000000080 returned -14 [ 626.280877][T14271] binder: 14268:14271 ioctl c0306201 200000000080 returned -14 [ 626.310340][T14271] FAULT_INJECTION: forcing a failure. [ 626.310340][T14271] name failslab, interval 1, probability 0, space 0, times 0 [ 626.362096][T14271] CPU: 0 UID: 0 PID: 14271 Comm: syz.1.2905 Not tainted syzkaller #0 PREEMPT(full) [ 626.362132][T14271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 626.362148][T14271] Call Trace: [ 626.362158][T14271] [ 626.362168][T14271] dump_stack_lvl+0x189/0x250 [ 626.362196][T14271] ? __pfx____ratelimit+0x10/0x10 [ 626.362231][T14271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.362253][T14271] ? __pfx__printk+0x10/0x10 [ 626.362288][T14271] ? __pfx___might_resched+0x10/0x10 [ 626.362315][T14271] ? fs_reclaim_acquire+0x7d/0x100 [ 626.362347][T14271] should_fail_ex+0x414/0x560 [ 626.362380][T14271] should_failslab+0xa8/0x100 [ 626.362411][T14271] __kmalloc_cache_noprof+0x6f/0x6f0 [ 626.362435][T14271] ? binder_alloc_new_buf+0x268/0x2f30 [ 626.362475][T14271] binder_alloc_new_buf+0x268/0x2f30 [ 626.362521][T14271] ? __pfx_binder_debug+0x10/0x10 [ 626.362563][T14271] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 626.362592][T14271] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 626.362624][T14271] binder_transaction+0x23b4/0x6450 [ 626.362674][T14271] ? ima_match_policy+0x10b/0x2150 [ 626.362711][T14271] ? __pfx_binder_transaction+0x10/0x10 [ 626.362736][T14271] ? __lock_acquire+0xab9/0xd20 [ 626.362771][T14271] ? __might_fault+0xb0/0x130 [ 626.362814][T14271] binder_ioctl_write_read+0xd6a/0xa040 [ 626.362857][T14271] ? is_bpf_text_address+0x26/0x2b0 [ 626.362891][T14271] ? is_bpf_text_address+0x26/0x2b0 [ 626.362918][T14271] ? kernel_text_address+0xa5/0xe0 [ 626.362944][T14271] ? unwind_get_return_address+0x4d/0x90 [ 626.362986][T14271] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 626.363022][T14271] ? stack_trace_save+0x9c/0xe0 [ 626.363068][T14271] ? stack_depot_save_flags+0x40/0x860 [ 626.363104][T14271] ? kasan_save_track+0x4f/0x80 [ 626.363130][T14271] ? kasan_save_track+0x3e/0x80 [ 626.363149][T14271] ? __kasan_save_free_info+0x46/0x50 [ 626.363179][T14271] ? __kasan_slab_free+0x5b/0x80 [ 626.363201][T14271] ? kfree+0x199/0x6d0 [ 626.363219][T14271] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 626.363246][T14271] ? security_file_ioctl+0xcb/0x2d0 [ 626.363269][T14271] ? __se_sys_ioctl+0x47/0x170 [ 626.363290][T14271] ? do_syscall_64+0xfa/0xfa0 [ 626.363320][T14271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.363363][T14271] ? __pfx_binder_debug+0x10/0x10 [ 626.363394][T14271] ? do_raw_spin_lock+0x121/0x290 [ 626.363443][T14271] ? _raw_spin_unlock+0x28/0x50 [ 626.363471][T14271] ? binder_get_thread+0x178/0x6d0 [ 626.363509][T14271] binder_ioctl+0x3e0/0x19c0 [ 626.363547][T14271] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 626.363580][T14271] ? do_vfs_ioctl+0xbe8/0x1430 [ 626.363604][T14271] ? __pfx_binder_ioctl+0x10/0x10 [ 626.363637][T14271] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 626.363701][T14271] ? __fget_files+0x2a/0x420 [ 626.363736][T14271] ? __fget_files+0x3a0/0x420 [ 626.363763][T14271] ? __fget_files+0x2a/0x420 [ 626.363796][T14271] ? bpf_lsm_file_ioctl+0x9/0x20 [ 626.363831][T14271] ? __pfx_binder_ioctl+0x10/0x10 [ 626.363865][T14271] __se_sys_ioctl+0xfc/0x170 [ 626.363890][T14271] do_syscall_64+0xfa/0xfa0 [ 626.363922][T14271] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.363955][T14271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.363977][T14271] ? clear_bhb_loop+0x60/0xb0 [ 626.364003][T14271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.364024][T14271] RIP: 0033:0x7f202198eba9 [ 626.364059][T14271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.364080][T14271] RSP: 002b:00007f20228df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 626.364105][T14271] RAX: ffffffffffffffda RBX: 00007f2021bd5fa0 RCX: 00007f202198eba9 [ 626.364122][T14271] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 626.364138][T14271] RBP: 00007f20228df090 R08: 0000000000000000 R09: 0000000000000000 [ 626.364152][T14271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.364166][T14271] R13: 00007f2021bd6038 R14: 00007f2021bd5fa0 R15: 00007fff45466488 [ 626.364201][T14271] [ 626.870681][T14273] binder: 14272:14273 ioctl c0306201 0 returned -14 [ 626.989883][T14277] binder: 14276:14277 ioctl c0306201 200000000080 returned -14 [ 627.021002][T14278] binder: 14275:14278 ioctl c0306201 0 returned -14 [ 627.038930][T14282] binder: 14274:14282 ioctl c0306201 0 returned -14 [ 627.225089][T14286] binder: 14285:14286 ioctl c0306201 200000000080 returned -14 [ 627.277645][T14289] binder: 14288:14289 ioctl c0306201 200000000080 returned -14 [ 627.334284][T14289] binder: BINDER_SET_CONTEXT_MGR already set [ 627.340611][T14289] binder: 14288:14289 ioctl 4018620d 200000000040 returned -16 [ 627.378529][T14292] binder: 14291:14292 ioctl c0306201 200000000080 returned -14 [ 627.693944][T14301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.729153][T14301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.752870][T14303] binder: 14302:14303 ioctl c0306201 0 returned -14 [ 627.783669][T14308] random: crng reseeded on system resumption [ 627.800986][T14306] binder: 14304:14306 ioctl 400454cd 308 returned -22 [ 627.817499][T14306] binder: 14304:14306 ioctl 4b69 200000000240 returned -22 [ 627.842795][T14307] binder: 14305:14307 ioctl c0306201 200000000080 returned -14 [ 627.892364][ T5914] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 628.011507][T14310] binder: 14309:14310 ioctl c0306201 0 returned -14 [ 628.170365][T14312] binder: 14311:14312 ioctl c0306201 200000000080 returned -14 [ 628.225573][T14321] binder: 14320:14321 ioctl c0306201 200000000080 returned -14 [ 628.326456][T14323] input: syz1 as /devices/virtual/input/input219 [ 628.515300][T14325] binder: 14324:14325 ioctl c0306201 200000000080 returned -14 [ 628.839369][T14336] binder: 14335:14336 ioctl c0306201 200000000080 returned -14 [ 628.926287][T14338] binder: 14337:14338 ioctl c0306201 0 returned -14 [ 628.981554][ T5949] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 629.076442][T14342] binder: 14341:14342 ioctl c0306201 200000000080 returned -14 [ 629.123760][T14342] binder: BINDER_SET_CONTEXT_MGR already set [ 629.130084][T14342] binder: 14341:14342 ioctl 4018620d 200000000040 returned -16 [ 629.155003][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 629.185932][ T5949] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 629.205472][ T5949] usb 4-1: config 0 has no interface number 0 [ 629.231194][ T5949] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 629.267983][ T5949] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 629.295477][ T5949] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 629.316166][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.333641][T14350] binder: 14347:14350 ioctl c0306201 200000000080 returned -14 [ 629.344247][ T5949] usb 4-1: Product: syz [ 629.348596][ T5949] usb 4-1: Manufacturer: syz [ 629.365160][T14350] binder: BINDER_SET_CONTEXT_MGR already set [ 629.371220][T14350] binder: 14347:14350 ioctl 4018620d 200000000040 returned -16 [ 629.389400][ T5949] usb 4-1: SerialNumber: syz [ 629.423923][ T5949] usb 4-1: config 0 descriptor?? [ 629.430497][T14350] FAULT_INJECTION: forcing a failure. [ 629.430497][T14350] name failslab, interval 1, probability 0, space 0, times 0 [ 629.430589][T14349] kernel profiling enabled (shift: 8) [ 629.451868][T14334] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 629.466949][T14334] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 629.486640][T14350] CPU: 0 UID: 0 PID: 14350 Comm: syz.6.2938 Not tainted syzkaller #0 PREEMPT(full) [ 629.486675][T14350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.486690][T14350] Call Trace: [ 629.486699][T14350] [ 629.486709][T14350] dump_stack_lvl+0x189/0x250 [ 629.486739][T14350] ? __pfx____ratelimit+0x10/0x10 [ 629.486774][T14350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.486796][T14350] ? __pfx__printk+0x10/0x10 [ 629.486830][T14350] ? __pfx___might_resched+0x10/0x10 [ 629.486856][T14350] ? fs_reclaim_acquire+0x7d/0x100 [ 629.486887][T14350] should_fail_ex+0x414/0x560 [ 629.486920][T14350] should_failslab+0xa8/0x100 [ 629.486949][T14350] __kmalloc_cache_noprof+0x6f/0x6f0 [ 629.487014][T14350] ? binder_transaction+0x69c/0x6450 [ 629.487035][T14350] ? do_raw_spin_unlock+0x122/0x240 [ 629.487073][T14350] binder_transaction+0x69c/0x6450 [ 629.487099][T14350] ? register_lock_class+0x51/0x320 [ 629.487143][T14350] ? process_measurement+0x3d8/0x1a40 [ 629.487170][T14350] ? ima_match_policy+0x10b/0x2150 [ 629.487206][T14350] ? __pfx_binder_transaction+0x10/0x10 [ 629.487233][T14350] ? __lock_acquire+0xab9/0xd20 [ 629.487269][T14350] ? __might_fault+0xb0/0x130 [ 629.487326][T14350] binder_ioctl_write_read+0xd6a/0xa040 [ 629.487371][T14350] ? is_bpf_text_address+0x26/0x2b0 [ 629.487405][T14350] ? is_bpf_text_address+0x26/0x2b0 [ 629.487434][T14350] ? kernel_text_address+0xa5/0xe0 [ 629.487458][T14350] ? unwind_get_return_address+0x4d/0x90 [ 629.487507][T14350] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 629.487541][T14350] ? stack_trace_save+0x9c/0xe0 [ 629.487577][T14350] ? stack_depot_save_flags+0x40/0x860 [ 629.487613][T14350] ? kasan_save_track+0x4f/0x80 [ 629.487635][T14350] ? kasan_save_track+0x3e/0x80 [ 629.487654][T14350] ? __kasan_save_free_info+0x46/0x50 [ 629.487684][T14350] ? __kasan_slab_free+0x5b/0x80 [ 629.487706][T14350] ? kfree+0x199/0x6d0 [ 629.487721][T14350] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 629.487746][T14350] ? security_file_ioctl+0xcb/0x2d0 [ 629.487768][T14350] ? __se_sys_ioctl+0x47/0x170 [ 629.487790][T14350] ? do_syscall_64+0xfa/0xfa0 [ 629.487823][T14350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.487867][T14350] ? __pfx_binder_debug+0x10/0x10 [ 629.487895][T14350] ? do_raw_spin_lock+0x121/0x290 [ 629.487946][T14350] ? _raw_spin_unlock+0x28/0x50 [ 629.487997][T14350] ? binder_get_thread+0x178/0x6d0 [ 629.488034][T14350] binder_ioctl+0x3e0/0x19c0 [ 629.488070][T14350] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 629.488104][T14350] ? do_vfs_ioctl+0xbe8/0x1430 [ 629.488126][T14350] ? __pfx_binder_ioctl+0x10/0x10 [ 629.488159][T14350] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 629.488222][T14350] ? __fget_files+0x2a/0x420 [ 629.488255][T14350] ? __fget_files+0x3a0/0x420 [ 629.488283][T14350] ? __fget_files+0x2a/0x420 [ 629.488314][T14350] ? bpf_lsm_file_ioctl+0x9/0x20 [ 629.488348][T14350] ? __pfx_binder_ioctl+0x10/0x10 [ 629.488381][T14350] __se_sys_ioctl+0xfc/0x170 [ 629.488408][T14350] do_syscall_64+0xfa/0xfa0 [ 629.488439][T14350] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.488473][T14350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.488493][T14350] ? clear_bhb_loop+0x60/0xb0 [ 629.488521][T14350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.488543][T14350] RIP: 0033:0x7f1ef258eba9 [ 629.488565][T14350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.488586][T14350] RSP: 002b:00007f1ef07f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.488611][T14350] RAX: ffffffffffffffda RBX: 00007f1ef27d5fa0 RCX: 00007f1ef258eba9 [ 629.488628][T14350] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 629.488644][T14350] RBP: 00007f1ef07f6090 R08: 0000000000000000 R09: 0000000000000000 [ 629.488658][T14350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.488672][T14350] R13: 00007f1ef27d6038 R14: 00007f1ef27d5fa0 R15: 00007ffe5019a3d8 [ 629.488708][T14350] [ 630.026505][T14356] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2942'. [ 630.036541][T14354] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2942'. [ 630.083068][T14357] binder: 14355:14357 ioctl c0306201 200000000080 returned -14 [ 630.095831][T14333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 630.108126][T14333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 630.155898][ T5949] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 630.166425][ T5949] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 630.180921][ T5949] asix 4-1:0.251: probe with driver asix failed with error -61 [ 630.195075][T14357] binder: BINDER_SET_CONTEXT_MGR already set [ 630.201135][T14357] binder: 14355:14357 ioctl 4018620d 200000000040 returned -16 [ 630.339175][T14365] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2944'. [ 630.466025][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.481533][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.509660][ T6367] usb 4-1: USB disconnect, device number 17 [ 630.591763][ T5949] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 630.608328][T14372] binder: 14371:14372 ioctl c0306201 200000000080 returned -14 [ 630.747477][T14375] binder: 14373:14375 ioctl c0306201 200000000080 returned -14 [ 630.784491][ T5949] usb 7-1: Using ep0 maxpacket: 16 [ 630.793252][T14376] binder: BINDER_SET_CONTEXT_MGR already set [ 630.799306][T14376] binder: 14374:14376 ioctl 4018620d 200000000040 returned -16 [ 630.818268][ T5949] usb 7-1: unable to get BOS descriptor or descriptor too short [ 630.828267][ T5949] usb 7-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 630.851897][ T5949] usb 7-1: config 1 interface 0 has no altsetting 0 [ 630.892774][ T5949] usb 7-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 630.921493][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.971417][ T5949] usb 7-1: Product: syz [ 630.976035][ T5949] usb 7-1: Manufacturer: syz [ 630.980729][ T5949] usb 7-1: SerialNumber: syz [ 631.048690][T14379] binder: 14378:14379 ioctl c0306201 200000000080 returned -14 [ 631.185327][T14386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2951'. [ 631.244239][T14388] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2952'. [ 631.277075][ T5949] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input220 [ 631.328684][ T5216] bcm5974 7-1:1.0: could not read from device [ 631.393887][ T5949] usb 7-1: USB disconnect, device number 14 [ 631.394714][ T5216] bcm5974 7-1:1.0: could not read from device [ 631.892494][ T6367] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 631.922180][T14394] binder: 14393:14394 ioctl c0306201 200000000080 returned -14 [ 632.071713][ T6367] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 632.089805][ T6367] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 632.093104][T14398] binder: 14395:14398 ioctl c0306201 200000000080 returned -14 [ 632.131465][ T6367] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 632.164228][ T6367] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 632.183411][ T6367] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 632.231520][ T6367] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 632.277606][ T6367] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 632.295841][ T6367] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 632.331804][ T6367] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 632.331889][T14401] netlink: 'syz.6.2959': attribute type 10 has an invalid length. [ 632.352324][T14402] binder: 14399:14402 ioctl c0306201 200000000080 returned -14 [ 632.378038][ T6367] usb 4-1: string descriptor 0 read error: -22 [ 632.388829][T14402] FAULT_INJECTION: forcing a failure. [ 632.388829][T14402] name failslab, interval 1, probability 0, space 0, times 0 [ 632.402442][ T6367] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 632.416564][T14402] CPU: 0 UID: 0 PID: 14402 Comm: syz.5.2958 Not tainted syzkaller #0 PREEMPT(full) [ 632.416601][T14402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 632.416616][T14402] Call Trace: [ 632.416625][T14402] [ 632.416636][T14402] dump_stack_lvl+0x189/0x250 [ 632.416666][T14402] ? __pfx____ratelimit+0x10/0x10 [ 632.416700][T14402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.416723][T14402] ? __pfx__printk+0x10/0x10 [ 632.416759][T14402] ? __pfx___might_resched+0x10/0x10 [ 632.416786][T14402] ? fs_reclaim_acquire+0x7d/0x100 [ 632.416819][T14402] should_fail_ex+0x414/0x560 [ 632.416852][T14402] should_failslab+0xa8/0x100 [ 632.416882][T14402] __kmalloc_cache_noprof+0x6f/0x6f0 [ 632.416908][T14402] ? binder_transaction+0x1e44/0x6450 [ 632.416931][T14402] ? do_raw_spin_unlock+0x122/0x240 [ 632.416969][T14402] binder_transaction+0x1e44/0x6450 [ 632.417024][T14402] ? ima_match_policy+0x10b/0x2150 [ 632.417063][T14402] ? __pfx_binder_transaction+0x10/0x10 [ 632.417092][T14402] ? __lock_acquire+0xab9/0xd20 [ 632.417128][T14402] ? __might_fault+0xb0/0x130 [ 632.417176][T14402] binder_ioctl_write_read+0xd6a/0xa040 [ 632.417220][T14402] ? is_bpf_text_address+0x26/0x2b0 [ 632.417254][T14402] ? is_bpf_text_address+0x26/0x2b0 [ 632.417282][T14402] ? kernel_text_address+0xa5/0xe0 [ 632.417307][T14402] ? unwind_get_return_address+0x4d/0x90 [ 632.417351][T14402] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 632.417387][T14402] ? stack_trace_save+0x9c/0xe0 [ 632.417423][T14402] ? stack_depot_save_flags+0x40/0x860 [ 632.417465][T14402] ? kasan_save_track+0x4f/0x80 [ 632.417486][T14402] ? kasan_save_track+0x3e/0x80 [ 632.417506][T14402] ? __kasan_save_free_info+0x46/0x50 [ 632.417535][T14402] ? __kasan_slab_free+0x5b/0x80 [ 632.417557][T14402] ? kfree+0x199/0x6d0 [ 632.417575][T14402] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 632.417602][T14402] ? security_file_ioctl+0xcb/0x2d0 [ 632.417627][T14402] ? __se_sys_ioctl+0x47/0x170 [ 632.417649][T14402] ? do_syscall_64+0xfa/0xfa0 [ 632.417681][T14402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.417726][T14402] ? __pfx_binder_debug+0x10/0x10 [ 632.417757][T14402] ? do_raw_spin_lock+0x121/0x290 [ 632.417807][T14402] ? _raw_spin_unlock+0x28/0x50 [ 632.417837][T14402] ? binder_get_thread+0x178/0x6d0 [ 632.417874][T14402] binder_ioctl+0x3e0/0x19c0 [ 632.417913][T14402] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 632.417946][T14402] ? do_vfs_ioctl+0xbe8/0x1430 [ 632.417968][T14402] ? __pfx_binder_ioctl+0x10/0x10 [ 632.418001][T14402] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 632.418066][T14402] ? __fget_files+0x2a/0x420 [ 632.418101][T14402] ? __fget_files+0x3a0/0x420 [ 632.418130][T14402] ? __fget_files+0x2a/0x420 [ 632.418162][T14402] ? bpf_lsm_file_ioctl+0x9/0x20 [ 632.418197][T14402] ? __pfx_binder_ioctl+0x10/0x10 [ 632.418230][T14402] __se_sys_ioctl+0xfc/0x170 [ 632.418256][T14402] do_syscall_64+0xfa/0xfa0 [ 632.418288][T14402] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.418321][T14402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.418343][T14402] ? clear_bhb_loop+0x60/0xb0 [ 632.418370][T14402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.418393][T14402] RIP: 0033:0x7f471bb8eba9 [ 632.418413][T14402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.418439][T14402] RSP: 002b:00007f471c939038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.418464][T14402] RAX: ffffffffffffffda RBX: 00007f471bdd5fa0 RCX: 00007f471bb8eba9 [ 632.418481][T14402] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 632.418496][T14402] RBP: 00007f471c939090 R08: 0000000000000000 R09: 0000000000000000 [ 632.418511][T14402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.418525][T14402] R13: 00007f471bdd6038 R14: 00007f471bdd5fa0 R15: 00007ffddc412b68 [ 632.418561][T14402] [ 632.800601][ T6367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.907734][ T6367] adutux 4-1:168.0: interrupt endpoints not found [ 632.920165][T14401] macvlan0: entered promiscuous mode [ 632.927113][T14401] macvlan0: entered allmulticast mode [ 632.970304][T14401] veth1_vlan: entered allmulticast mode [ 632.981153][T14401] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 633.085449][T14401] netlink: 'syz.6.2959': attribute type 4 has an invalid length. [ 633.102745][T14401] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2959'. [ 633.137489][ T5914] usb 4-1: USB disconnect, device number 18 [ 633.240408][T14413] binder: 14412:14413 ioctl c0306201 200000000080 returned -14 [ 633.457368][T14417] binder: 14416:14417 ioctl c0306201 200000000080 returned -14 [ 633.496225][T14419] binder: 14418:14419 ioctl c0306201 200000000080 returned -14 [ 633.527975][T14419] binder: BINDER_SET_CONTEXT_MGR already set [ 633.535928][T14419] binder: 14418:14419 ioctl 4018620d 200000000040 returned -16 [ 633.791871][T14427] serio: Serial port ptm1 [ 633.892125][ T5949] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 634.061828][ T5949] usb 7-1: Using ep0 maxpacket: 16 [ 634.086642][ T5949] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 634.108137][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.131605][ T5949] usb 7-1: Product: syz [ 634.135864][ T5949] usb 7-1: Manufacturer: syz [ 634.189227][ T5949] usb 7-1: SerialNumber: syz [ 634.226202][ T5949] usb 7-1: config 0 descriptor?? [ 634.247686][ T5949] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 634.288045][T14442] binder: 14440:14442 ioctl c0306201 200000000080 returned -14 [ 634.304595][ T5949] usb 7-1: Detected FT232H [ 634.521786][ T93] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 634.555959][T14448] binder: 14447:14448 ioctl c0306201 200000000080 returned -14 [ 634.651656][T14448] binder: 14447:14448 ioctl 5422 0 returned -22 [ 634.665125][ T5949] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 634.699155][ T5949] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 634.708868][ T93] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 634.728117][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.740415][ T5949] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 634.760531][ T93] usb 4-1: Product: syz [ 634.787318][ T93] usb 4-1: Manufacturer: syz [ 634.798812][ T5949] usb 7-1: USB disconnect, device number 15 [ 634.810339][ T93] usb 4-1: SerialNumber: syz [ 634.855774][ T93] usb 4-1: config 0 descriptor?? [ 634.862775][ T5949] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 634.902840][T14454] input: syz1 as /devices/virtual/input/input221 [ 634.918123][ T5949] ftdi_sio 7-1:0.0: device disconnected [ 635.100937][ T93] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 635.275361][T14457] netlink: 'syz.5.2978': attribute type 10 has an invalid length. [ 635.299334][T14457] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2978'. [ 635.303395][T14460] binder: 14458:14460 ioctl c0306201 200000000080 returned -14 [ 635.310104][T14461] FAULT_INJECTION: forcing a failure. [ 635.310104][T14461] name failslab, interval 1, probability 0, space 0, times 0 [ 635.345936][T14461] CPU: 1 UID: 0 PID: 14461 Comm: syz.6.2980 Not tainted syzkaller #0 PREEMPT(full) [ 635.345972][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 635.345987][T14461] Call Trace: [ 635.345996][T14461] [ 635.346006][T14461] dump_stack_lvl+0x189/0x250 [ 635.346035][T14461] ? __pfx____ratelimit+0x10/0x10 [ 635.346067][T14461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.346084][T14461] ? __pfx__printk+0x10/0x10 [ 635.346118][T14461] ? __pfx___might_resched+0x10/0x10 [ 635.346139][T14461] ? fs_reclaim_acquire+0x7d/0x100 [ 635.346166][T14461] should_fail_ex+0x414/0x560 [ 635.346204][T14461] should_failslab+0xa8/0x100 [ 635.346230][T14461] __kmalloc_noprof+0xcb/0x7f0 [ 635.346250][T14461] ? tomoyo_encode+0x28b/0x550 [ 635.346284][T14461] tomoyo_encode+0x28b/0x550 [ 635.346316][T14461] tomoyo_realpath_from_path+0x58d/0x5d0 [ 635.346354][T14461] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 635.346377][T14461] tomoyo_path_number_perm+0x1e8/0x5a0 [ 635.346406][T14461] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 635.346482][T14461] ? __fget_files+0x2a/0x420 [ 635.346517][T14461] ? __fget_files+0x3a0/0x420 [ 635.346543][T14461] ? __fget_files+0x2a/0x420 [ 635.346575][T14461] security_file_ioctl+0xcb/0x2d0 [ 635.346607][T14461] __se_sys_ioctl+0x47/0x170 [ 635.346635][T14461] do_syscall_64+0xfa/0xfa0 [ 635.346668][T14461] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.346701][T14461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.346725][T14461] ? clear_bhb_loop+0x60/0xb0 [ 635.346754][T14461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.346776][T14461] RIP: 0033:0x7f1ef258eba9 [ 635.346799][T14461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.346820][T14461] RSP: 002b:00007f1ef07f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.346846][T14461] RAX: ffffffffffffffda RBX: 00007f1ef27d5fa0 RCX: 00007f1ef258eba9 [ 635.346863][T14461] RDX: 0000200000000000 RSI: 0000000000001269 RDI: 0000000000000003 [ 635.346879][T14461] RBP: 00007f1ef07f6090 R08: 0000000000000000 R09: 0000000000000000 [ 635.346894][T14461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.346908][T14461] R13: 00007f1ef27d6038 R14: 00007f1ef27d5fa0 R15: 00007ffe5019a3d8 [ 635.346947][T14461] [ 635.346973][T14461] ERROR: Out of memory at tomoyo_realpath_from_path. [ 635.373442][T14460] binder: 14458:14460 ioctl c0306201 0 returned -14 [ 635.720311][T14465] binder: 14464:14465 ioctl c0306201 200000000080 returned -14 [ 636.025573][T14473] binder: 14472:14473 ioctl c0306201 200000000080 returned -14 [ 636.081996][ T5930] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 636.208541][T14475] overlayfs: overlapping lowerdir path [ 636.231563][ T5930] usb 7-1: device descriptor read/64, error -71 [ 636.241245][T14475] netlink: 23 bytes leftover after parsing attributes in process `syz.5.2987'. [ 636.501696][ T5930] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 636.539089][T14485] binder: 14482:14485 ioctl c0306201 200000000080 returned -14 [ 636.608377][T14443] binder: 14441:14443 ioctl c0306201 200000000080 returned -14 [ 636.623048][ T93] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 636.635325][ T5930] usb 7-1: device descriptor read/64, error -71 [ 636.683759][ T93] usb 4-1: USB disconnect, device number 19 [ 636.707257][T14488] binder: 14486:14488 ioctl c0306201 200000000080 returned -14 [ 636.750339][T14489] binder: 14487:14489 ioctl c0306201 200000000080 returned -14 [ 636.782871][ T5930] usb usb7-port1: attempt power cycle [ 636.875354][T14491] binder: 14490:14491 ioctl c0306201 200000000080 returned -14 [ 636.932802][T14493] binder: 14492:14493 ioctl c0306201 200000000080 returned -14 [ 637.051979][T14495] binder: 14494:14495 ioctl c0306201 200000000080 returned -14 [ 637.132355][ T5930] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 637.202631][ T5930] usb 7-1: device descriptor read/8, error -71 [ 637.247961][T14502] binder: 14501:14502 ioctl c0306201 200000000080 returned -14 [ 637.278262][T14502] FAULT_INJECTION: forcing a failure. [ 637.278262][T14502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.293145][T14503] binder: 14499:14503 ioctl c0306201 200000000080 returned -14 [ 637.305445][T14500] binder: 14498:14500 ioctl c0306201 200000000080 returned -14 [ 637.328502][T14502] CPU: 0 UID: 0 PID: 14502 Comm: syz.3.2999 Not tainted syzkaller #0 PREEMPT(full) [ 637.328537][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.328553][T14502] Call Trace: [ 637.328563][T14502] [ 637.328573][T14502] dump_stack_lvl+0x189/0x250 [ 637.328603][T14502] ? __pfx____ratelimit+0x10/0x10 [ 637.328637][T14502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.328658][T14502] ? __pfx__printk+0x10/0x10 [ 637.328692][T14502] ? __might_fault+0xb0/0x130 [ 637.328729][T14502] should_fail_ex+0x414/0x560 [ 637.328761][T14502] _copy_from_user+0x2d/0xb0 [ 637.328785][T14502] binder_ioctl_write_read+0xa61/0xa040 [ 637.328832][T14502] ? is_bpf_text_address+0x26/0x2b0 [ 637.328866][T14502] ? is_bpf_text_address+0x26/0x2b0 [ 637.328905][T14502] ? kernel_text_address+0xa5/0xe0 [ 637.328931][T14502] ? unwind_get_return_address+0x4d/0x90 [ 637.328975][T14502] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 637.329010][T14502] ? stack_trace_save+0x9c/0xe0 [ 637.329048][T14502] ? stack_depot_save_flags+0x40/0x860 [ 637.329085][T14502] ? kasan_save_track+0x4f/0x80 [ 637.329107][T14502] ? kasan_save_track+0x3e/0x80 [ 637.329127][T14502] ? __kasan_save_free_info+0x46/0x50 [ 637.329157][T14502] ? __kasan_slab_free+0x5b/0x80 [ 637.329178][T14502] ? kfree+0x199/0x6d0 [ 637.329197][T14502] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 637.329223][T14502] ? security_file_ioctl+0xcb/0x2d0 [ 637.329247][T14502] ? __se_sys_ioctl+0x47/0x170 [ 637.329268][T14502] ? do_syscall_64+0xfa/0xfa0 [ 637.329301][T14502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.329343][T14502] ? __pfx_binder_debug+0x10/0x10 [ 637.329373][T14502] ? do_raw_spin_lock+0x121/0x290 [ 637.329423][T14502] ? _raw_spin_unlock+0x28/0x50 [ 637.329453][T14502] ? binder_get_thread+0x178/0x6d0 [ 637.329491][T14502] binder_ioctl+0x3e0/0x19c0 [ 637.329531][T14502] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 637.329557][T14502] ? do_vfs_ioctl+0xbe8/0x1430 [ 637.329576][T14502] ? __pfx_binder_ioctl+0x10/0x10 [ 637.329603][T14502] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 637.329659][T14502] ? __fget_files+0x2a/0x420 [ 637.329691][T14502] ? __fget_files+0x3a0/0x420 [ 637.329718][T14502] ? __fget_files+0x2a/0x420 [ 637.329751][T14502] ? bpf_lsm_file_ioctl+0x9/0x20 [ 637.329786][T14502] ? __pfx_binder_ioctl+0x10/0x10 [ 637.329820][T14502] __se_sys_ioctl+0xfc/0x170 [ 637.329846][T14502] do_syscall_64+0xfa/0xfa0 [ 637.329878][T14502] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.329917][T14502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.329939][T14502] ? clear_bhb_loop+0x60/0xb0 [ 637.329966][T14502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.329988][T14502] RIP: 0033:0x7f9bc498eba9 [ 637.330009][T14502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.330036][T14502] RSP: 002b:00007f9bc58b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.330060][T14502] RAX: ffffffffffffffda RBX: 00007f9bc4bd5fa0 RCX: 00007f9bc498eba9 [ 637.330078][T14502] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 637.330092][T14502] RBP: 00007f9bc58b7090 R08: 0000000000000000 R09: 0000000000000000 [ 637.330107][T14502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.330121][T14502] R13: 00007f9bc4bd6038 R14: 00007f9bc4bd5fa0 R15: 00007ffd8d882fa8 [ 637.330155][T14502] [ 637.330253][T14502] binder: 14501:14502 ioctl c0306201 200000000180 returned -14 [ 637.636007][T14507] binder: 14506:14507 ioctl c0306201 200000000080 returned -14 [ 637.711595][ T5930] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 637.742056][T12528] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 637.743255][ T5930] usb 7-1: device descriptor read/8, error -71 [ 637.901615][T12528] usb 2-1: Using ep0 maxpacket: 16 [ 637.902268][ T5930] usb usb7-port1: unable to enumerate USB device [ 637.916636][T12528] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 637.948723][T14513] binder: 14511:14513 ioctl c0306201 200000000080 returned -14 [ 637.967661][T14514] tmpfs: Too small a size for current use [ 637.971525][T12528] usb 2-1: config 0 has no interface number 0 [ 637.977191][T14513] binder: BINDER_SET_CONTEXT_MGR already set [ 637.983982][T12528] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 637.991458][T14513] binder: 14511:14513 ioctl 4018620d 200000000040 returned -16 [ 638.011614][T12528] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.050391][T12528] usb 2-1: Product: syz [ 638.060529][T12528] usb 2-1: Manufacturer: syz [ 638.070762][T12528] usb 2-1: SerialNumber: syz [ 638.095141][T12528] usb 2-1: config 0 descriptor?? [ 638.116518][T12528] hub 2-1:0.145: bad descriptor, ignoring hub [ 638.127356][T12528] hub 2-1:0.145: probe with driver hub failed with error -5 [ 638.143368][T12528] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.145/input/input222 [ 638.214033][T14518] binder: 14517:14518 ioctl c0306201 200000000080 returned -14 [ 638.360122][T14505] binder: BINDER_SET_CONTEXT_MGR already set [ 638.368025][T14505] binder: 14499:14505 ioctl 4018620d 200000000040 returned -16 [ 638.671748][ T6367] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 638.782233][ T56] block nbd0: Possible stuck request ffff8880253e7000: control (read@0,1024B). Runtime 300 seconds [ 638.793672][ T56] block nbd0: Possible stuck request ffff8880253e71c0: control (read@1024,1024B). Runtime 300 seconds [ 638.805505][ T56] block nbd0: Possible stuck request ffff8880253e7380: control (read@2048,1024B). Runtime 300 seconds [ 638.817112][ T56] block nbd0: Possible stuck request ffff8880253e7540: control (read@3072,1024B). Runtime 300 seconds [ 638.834955][T12528] usb 2-1: USB disconnect, device number 32 [ 638.841432][ T6367] usb 4-1: Using ep0 maxpacket: 32 [ 638.856018][ T6367] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 638.876416][ T6367] usb 4-1: can't read configurations, error -61 [ 639.007050][T14522] input: syz1 as /devices/virtual/input/input223 [ 639.011616][ T6367] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 639.130763][T14524] binder: 14523:14524 ioctl c0306201 200000000080 returned -14 [ 639.150162][T14524] FAULT_INJECTION: forcing a failure. [ 639.150162][T14524] name failslab, interval 1, probability 0, space 0, times 0 [ 639.182535][ T6367] usb 4-1: Using ep0 maxpacket: 32 [ 639.187974][T14524] CPU: 0 UID: 0 PID: 14524 Comm: syz.5.3005 Not tainted syzkaller #0 PREEMPT(full) [ 639.188008][T14524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 639.188024][T14524] Call Trace: [ 639.188034][T14524] [ 639.188045][T14524] dump_stack_lvl+0x189/0x250 [ 639.188074][T14524] ? __pfx____ratelimit+0x10/0x10 [ 639.188109][T14524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.188130][T14524] ? __pfx__printk+0x10/0x10 [ 639.188169][T14524] ? __pfx___might_resched+0x10/0x10 [ 639.188195][T14524] ? fs_reclaim_acquire+0x7d/0x100 [ 639.188227][T14524] should_fail_ex+0x414/0x560 [ 639.188259][T14524] should_failslab+0xa8/0x100 [ 639.188290][T14524] __kmalloc_noprof+0xcb/0x7f0 [ 639.188314][T14524] ? tomoyo_encode+0x28b/0x550 [ 639.188355][T14524] tomoyo_encode+0x28b/0x550 [ 639.188394][T14524] tomoyo_realpath_from_path+0x58d/0x5d0 [ 639.188440][T14524] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 639.188469][T14524] tomoyo_path_number_perm+0x1e8/0x5a0 [ 639.188501][T14524] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 639.188571][T14524] ? __fget_files+0x2a/0x420 [ 639.188607][T14524] ? __fget_files+0x3a0/0x420 [ 639.188635][T14524] ? __fget_files+0x2a/0x420 [ 639.188669][T14524] security_file_ioctl+0xcb/0x2d0 [ 639.188699][T14524] __se_sys_ioctl+0x47/0x170 [ 639.188727][T14524] do_syscall_64+0xfa/0xfa0 [ 639.188760][T14524] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.188794][T14524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.188826][T14524] ? clear_bhb_loop+0x60/0xb0 [ 639.188855][T14524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.188877][T14524] RIP: 0033:0x7f471bb8eba9 [ 639.188899][T14524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.188918][T14524] RSP: 002b:00007f471c939038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.188941][T14524] RAX: ffffffffffffffda RBX: 00007f471bdd5fa0 RCX: 00007f471bb8eba9 [ 639.188958][T14524] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 639.188973][T14524] RBP: 00007f471c939090 R08: 0000000000000000 R09: 0000000000000000 [ 639.188988][T14524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.189001][T14524] R13: 00007f471bdd6038 R14: 00007f471bdd5fa0 R15: 00007ffddc412b68 [ 639.189039][T14524] [ 639.189065][T14524] ERROR: Out of memory at tomoyo_realpath_from_path. [ 639.451975][ T6367] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 639.460728][ T6367] usb 4-1: can't read configurations, error -61 [ 639.468468][ T6367] usb usb4-port1: attempt power cycle [ 639.489217][T14526] binder: 14525:14526 ioctl c0306201 200000000080 returned -14 [ 639.618024][T14531] FAULT_INJECTION: forcing a failure. [ 639.618024][T14531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.643451][T14531] CPU: 0 UID: 0 PID: 14531 Comm: syz.5.3009 Not tainted syzkaller #0 PREEMPT(full) [ 639.643488][T14531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 639.643504][T14531] Call Trace: [ 639.643514][T14531] [ 639.643524][T14531] dump_stack_lvl+0x189/0x250 [ 639.643557][T14531] ? __pfx____ratelimit+0x10/0x10 [ 639.643593][T14531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.643617][T14531] ? __pfx__printk+0x10/0x10 [ 639.643651][T14531] ? __might_fault+0xb0/0x130 [ 639.643690][T14531] should_fail_ex+0x414/0x560 [ 639.643723][T14531] _copy_from_user+0x2d/0xb0 [ 639.643747][T14531] blkpg_do_ioctl+0xd6/0x470 [ 639.643775][T14531] ? __pfx_blkpg_do_ioctl+0x10/0x10 [ 639.643822][T14531] ? __might_fault+0xb0/0x130 [ 639.643849][T14531] blkdev_ioctl+0x683/0x6d0 [ 639.643875][T14531] ? __pfx_blkdev_ioctl+0x10/0x10 [ 639.643893][T14531] ? __fget_files+0x3a0/0x420 [ 639.643931][T14531] ? __fget_files+0x2a/0x420 [ 639.643965][T14531] ? bpf_lsm_file_ioctl+0x9/0x20 [ 639.644002][T14531] ? __pfx_blkdev_ioctl+0x10/0x10 [ 639.644024][T14531] __se_sys_ioctl+0xfc/0x170 [ 639.644051][T14531] do_syscall_64+0xfa/0xfa0 [ 639.644085][T14531] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.644120][T14531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.644140][T14531] ? clear_bhb_loop+0x60/0xb0 [ 639.644166][T14531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.644187][T14531] RIP: 0033:0x7f471bb8eba9 [ 639.644206][T14531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.644226][T14531] RSP: 002b:00007f471c939038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.644250][T14531] RAX: ffffffffffffffda RBX: 00007f471bdd5fa0 RCX: 00007f471bb8eba9 [ 639.644268][T14531] RDX: 0000200000000000 RSI: 0000000000001269 RDI: 0000000000000003 [ 639.644282][T14531] RBP: 00007f471c939090 R08: 0000000000000000 R09: 0000000000000000 [ 639.644297][T14531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.644311][T14531] R13: 00007f471bdd6038 R14: 00007f471bdd5fa0 R15: 00007ffddc412b68 [ 639.644348][T14531] [ 639.960879][T14538] binder: 14537:14538 ioctl c0306201 200000000080 returned -14 [ 639.971776][ T6367] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 639.992817][ T6367] usb 4-1: Using ep0 maxpacket: 32 [ 640.000454][ T6367] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 640.008334][ T6367] usb 4-1: can't read configurations, error -61 [ 640.100357][T14542] binder: 14541:14542 ioctl c0306201 200000000080 returned -14 [ 640.141512][ T6367] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 640.174370][ T6367] usb 4-1: Using ep0 maxpacket: 32 [ 640.194759][ T6367] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 640.211559][ T6367] usb 4-1: can't read configurations, error -61 [ 640.228697][ T6367] usb usb4-port1: unable to enumerate USB device [ 640.298415][T14547] binder: 14546:14547 ioctl c0306201 200000000080 returned -14 [ 640.382513][T14549] overlay: Bad value for 'workdir' [ 640.384266][ T5914] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 640.408500][T14551] overlay: Bad value for 'workdir' [ 640.448702][T14554] input: syz0 as /devices/virtual/input/input224 [ 640.571944][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 640.597329][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.621279][T14556] binder: 14555:14556 ioctl c0306201 200000000080 returned -14 [ 640.629356][ T5914] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 640.638851][T14556] binder: 14555:14556 ioctl 4018620d 0 returned -22 [ 640.697419][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.706439][T14558] binder: 14557:14558 ioctl c0306201 200000000080 returned -14 [ 640.754979][ T5914] usb 6-1: config 0 descriptor?? [ 640.892252][T14562] binder: 14561:14562 ioctl c0306201 200000000080 returned -14 [ 640.971871][T14543] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3012'. [ 641.048259][T14564] binder: 14563:14564 ioctl c0306201 200000000080 returned -14 [ 641.223553][ T5914] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 641.269000][T14568] deleting an unspecified loop device is not supported. [ 641.610808][ T31] audit: type=1326 audit(1757541008.365:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14539 comm="syz.5.3012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f471bb8eba9 code=0x0 [ 641.795097][T14574] binder: 14571:14574 ioctl c0306201 200000000080 returned -14 [ 641.959348][T14577] binder: 14576:14577 ioctl c0306201 200000000080 returned -14 [ 642.007328][T14577] binder: 14576:14577 ioctl 4018620d 0 returned -22 [ 642.041769][ T5914] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 642.245494][ T5914] usb 7-1: Using ep0 maxpacket: 32 [ 642.264299][ T5914] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 642.286067][T14579] binder: 14578:14579 ioctl c0306201 200000000080 returned -14 [ 642.291451][ T5914] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.371435][ T5914] usb 7-1: config 0 has no interface number 0 [ 642.377675][ T5914] usb 7-1: config 0 interface 196 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 642.471427][ T5914] usb 7-1: config 0 interface 196 has no altsetting 0 [ 642.517157][ T5914] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 642.553513][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.571951][ T5914] usb 7-1: Product: syz [ 642.576235][ T5914] usb 7-1: Manufacturer: syz [ 642.580914][ T5914] usb 7-1: SerialNumber: syz [ 642.639149][ T5914] usb 7-1: config 0 descriptor?? [ 642.658934][ T5914] ipheth 7-1:0.196: Unable to find alternate settings interface [ 642.852679][ T5872] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 642.864659][ T5872] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 642.874770][ T5872] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 642.894345][ T5872] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 642.905036][ T5872] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 642.909520][ T5914] usb 7-1: USB disconnect, device number 20 [ 642.969730][T10757] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 642.970525][T14587] binder: 14586:14587 ioctl c0306201 200000000080 returned -14 [ 642.999897][T10757] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 643.010015][T10757] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 643.019721][T10757] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 643.046315][T10757] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 643.226645][ T5949] usb 6-1: USB disconnect, device number 50 [ 643.432611][T14590] binder: 14589:14590 ioctl c0306201 200000000080 returned -14 [ 643.702197][T14594] input: syz1 as /devices/virtual/input/input225 [ 643.758659][T14596] binder: 14595:14596 ioctl c0306201 200000000080 returned -14 [ 643.954032][T14599] binder: 14598:14599 ioctl c0306201 200000000080 returned -14 [ 644.182172][T14604] binder: 14603:14604 ioctl c0306201 200000000080 returned -14 [ 644.223668][T14609] FAULT_INJECTION: forcing a failure. [ 644.223668][T14609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.226802][T14584] chnl_net:caif_netlink_parms(): no params data found [ 644.251159][T14609] CPU: 0 UID: 0 PID: 14609 Comm: syz.3.3039 Not tainted syzkaller #0 PREEMPT(full) [ 644.251195][T14609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 644.251210][T14609] Call Trace: [ 644.251219][T14609] [ 644.251230][T14609] dump_stack_lvl+0x189/0x250 [ 644.251258][T14609] ? __pfx____ratelimit+0x10/0x10 [ 644.251292][T14609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.251313][T14609] ? __pfx__printk+0x10/0x10 [ 644.251360][T14609] should_fail_ex+0x414/0x560 [ 644.251393][T14609] _copy_to_user+0x31/0xb0 [ 644.251417][T14609] simple_read_from_buffer+0xe1/0x170 [ 644.251450][T14609] proc_fail_nth_read+0x1b3/0x220 [ 644.251473][T14609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.251494][T14609] ? rw_verify_area+0x2a6/0x4d0 [ 644.251518][T14609] ? __lock_acquire+0xab9/0xd20 [ 644.251541][T14609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.251573][T14609] vfs_read+0x200/0xa30 [ 644.251595][T14609] ? fdget_pos+0x247/0x320 [ 644.251627][T14609] ? __pfx___mutex_lock+0x10/0x10 [ 644.251647][T14609] ? __pfx_vfs_read+0x10/0x10 [ 644.251672][T14609] ? __fget_files+0x2a/0x420 [ 644.251705][T14609] ? __fget_files+0x3a0/0x420 [ 644.251729][T14609] ? __fget_files+0x2a/0x420 [ 644.251763][T14609] ksys_read+0x145/0x250 [ 644.251784][T14609] ? __fget_files+0x2a/0x420 [ 644.251810][T14609] ? __pfx_ksys_read+0x10/0x10 [ 644.251835][T14609] ? do_syscall_64+0xbe/0xfa0 [ 644.251868][T14609] do_syscall_64+0xfa/0xfa0 [ 644.251895][T14609] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.251924][T14609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.251944][T14609] ? clear_bhb_loop+0x60/0xb0 [ 644.251970][T14609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.251990][T14609] RIP: 0033:0x7f9bc498d5bc [ 644.252010][T14609] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 644.252028][T14609] RSP: 002b:00007f9bc58b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 644.252052][T14609] RAX: ffffffffffffffda RBX: 00007f9bc4bd5fa0 RCX: 00007f9bc498d5bc [ 644.252070][T14609] RDX: 000000000000000f RSI: 00007f9bc58b70a0 RDI: 0000000000000004 [ 644.252083][T14609] RBP: 00007f9bc58b7090 R08: 0000000000000000 R09: 0000000000000000 [ 644.252096][T14609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.252109][T14609] R13: 00007f9bc4bd6038 R14: 00007f9bc4bd5fa0 R15: 00007ffd8d882fa8 [ 644.252141][T14609] [ 644.508156][T14611] binder: 14610:14611 ioctl c0306201 200000000080 returned -14 [ 644.518405][T14611] binder: BINDER_SET_CONTEXT_MGR already set [ 644.524876][T14611] binder: 14610:14611 ioctl 4018620d 200000000040 returned -16 [ 644.742656][ T93] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 644.810993][T14620] binder: 14618:14620 ioctl c0306201 200000000080 returned -14 [ 644.903685][ T93] usb 7-1: unable to get BOS descriptor or descriptor too short [ 644.913744][ T93] usb 7-1: not running at top speed; connect to a high speed hub [ 644.925391][T14584] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.933817][ T93] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 644.946721][T14584] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.949347][ T93] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 644.965009][ T93] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.973167][ T93] usb 7-1: Product: syz [ 644.977393][ T93] usb 7-1: Manufacturer: syz [ 644.987556][ T93] usb 7-1: SerialNumber: syz [ 644.993187][T14584] bridge_slave_0: entered allmulticast mode [ 645.020410][T14584] bridge_slave_0: entered promiscuous mode [ 645.039364][T14584] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.047385][T14584] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.057495][T14584] bridge_slave_1: entered allmulticast mode [ 645.066740][T14584] bridge_slave_1: entered promiscuous mode [ 645.081712][T12528] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 645.102032][T10757] Bluetooth: hci6: command tx timeout [ 645.136910][T14584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.160663][T14584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.220677][ T93] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 645.242580][ T5949] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 645.251671][T12528] usb 6-1: Using ep0 maxpacket: 16 [ 645.259233][T12528] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.287536][T12528] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.303821][T12528] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 645.319480][T12528] usb 6-1: config 0 interface 0 has no altsetting 0 [ 645.339876][T14584] team0: Port device team_slave_0 added [ 645.359218][T12528] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 645.361834][ T93] usb 7-1: USB disconnect, device number 21 [ 645.375076][T12528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.385969][T14584] team0: Port device team_slave_1 added [ 645.418066][ T7550] udevd[7550]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.439117][T12528] usb 6-1: config 0 descriptor?? [ 645.451452][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 645.474315][ T5949] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 645.495821][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.522304][ T5949] usb 4-1: config 0 descriptor?? [ 645.549842][ T5949] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 645.583810][T14584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.597409][T14584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.636830][T14584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.668510][T14584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.681543][T14584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.709087][T14584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.750009][ T5930] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 645.763773][ T5949] usb 4-1: Detected FT232A [ 645.770417][ T5930] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 645.798223][ T5949] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 645.851832][ T5949] usb 4-1: USB disconnect, device number 24 [ 645.953594][ T5949] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 645.967724][T14584] hsr_slave_0: entered promiscuous mode [ 645.980571][T14626] binder: 14625:14626 ioctl c0306201 200000000080 returned -14 [ 646.004021][ T5949] ftdi_sio 4-1:0.0: device disconnected [ 646.013822][T14584] hsr_slave_1: entered promiscuous mode [ 646.021465][T14626] binder: 14625:14626 ioctl 4018620d 0 returned -22 [ 646.048865][T14584] debugfs: 'hsr0' already exists in 'hsr' [ 646.071470][T14584] Cannot create hsr debugfs directory [ 646.108540][T12528] usb 6-1: USB disconnect, device number 51 [ 646.306437][T14631] binder: 14627:14631 ioctl c0306201 200000000080 returned -14 [ 646.480576][T14636] binder: 14634:14636 ioctl c0306201 200000000080 returned -14 [ 646.638477][T14639] binder: 14638:14639 ioctl c0306201 200000000080 returned -14 [ 646.847378][ T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.128722][ T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.169356][T14657] binder: 14656:14657 ioctl c0306201 200000000080 returned -14 [ 647.279729][ T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.327273][T14663] binder: 14662:14663 ioctl c0306201 200000000080 returned -14 [ 647.394060][T14663] binder: 14662:14663 ioctl 4018620d 0 returned -22 [ 647.450635][T14665] binder: 14664:14665 ioctl c0306201 200000000080 returned -14 [ 647.506111][T14667] input: syz1 as /devices/virtual/input/input226 [ 647.540687][T14665] FAULT_INJECTION: forcing a failure. [ 647.540687][T14665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.555139][T14665] CPU: 1 UID: 0 PID: 14665 Comm: syz.3.3054 Not tainted syzkaller #0 PREEMPT(full) [ 647.555172][T14665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 647.555187][T14665] Call Trace: [ 647.555197][T14665] [ 647.555208][T14665] dump_stack_lvl+0x189/0x250 [ 647.555238][T14665] ? __pfx____ratelimit+0x10/0x10 [ 647.555273][T14665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.555294][T14665] ? __pfx__printk+0x10/0x10 [ 647.555327][T14665] ? __might_fault+0xb0/0x130 [ 647.555364][T14665] should_fail_ex+0x414/0x560 [ 647.555395][T14665] _copy_from_user+0x2d/0xb0 [ 647.555419][T14665] binder_ioctl_write_read+0xa61/0xa040 [ 647.555465][T14665] ? is_bpf_text_address+0x26/0x2b0 [ 647.555499][T14665] ? is_bpf_text_address+0x26/0x2b0 [ 647.555527][T14665] ? kernel_text_address+0xa5/0xe0 [ 647.555552][T14665] ? unwind_get_return_address+0x4d/0x90 [ 647.555596][T14665] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 647.555631][T14665] ? stack_trace_save+0x9c/0xe0 [ 647.555667][T14665] ? stack_depot_save_flags+0x40/0x860 [ 647.555700][T14665] ? kasan_save_track+0x4f/0x80 [ 647.555721][T14665] ? kasan_save_track+0x3e/0x80 [ 647.555740][T14665] ? __kasan_save_free_info+0x46/0x50 [ 647.555770][T14665] ? __kasan_slab_free+0x5b/0x80 [ 647.555792][T14665] ? kfree+0x199/0x6d0 [ 647.555810][T14665] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 647.555838][T14665] ? security_file_ioctl+0xcb/0x2d0 [ 647.555863][T14665] ? __se_sys_ioctl+0x47/0x170 [ 647.555884][T14665] ? do_syscall_64+0xfa/0xfa0 [ 647.555916][T14665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.555959][T14665] ? __pfx_binder_debug+0x10/0x10 [ 647.555996][T14665] ? do_raw_spin_lock+0x121/0x290 [ 647.556047][T14665] ? _raw_spin_unlock+0x28/0x50 [ 647.556076][T14665] ? binder_get_thread+0x178/0x6d0 [ 647.556114][T14665] binder_ioctl+0x3e0/0x19c0 [ 647.556151][T14665] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 647.556184][T14665] ? do_vfs_ioctl+0xbe8/0x1430 [ 647.556207][T14665] ? __pfx_binder_ioctl+0x10/0x10 [ 647.556240][T14665] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 647.556304][T14665] ? __fget_files+0x2a/0x420 [ 647.556339][T14665] ? __fget_files+0x3a0/0x420 [ 647.556368][T14665] ? __fget_files+0x2a/0x420 [ 647.556401][T14665] ? bpf_lsm_file_ioctl+0x9/0x20 [ 647.556436][T14665] ? __pfx_binder_ioctl+0x10/0x10 [ 647.556468][T14665] __se_sys_ioctl+0xfc/0x170 [ 647.556494][T14665] do_syscall_64+0xfa/0xfa0 [ 647.556526][T14665] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.556559][T14665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.556582][T14665] ? clear_bhb_loop+0x60/0xb0 [ 647.556610][T14665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.556632][T14665] RIP: 0033:0x7f9bc498eba9 [ 647.556653][T14665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.556673][T14665] RSP: 002b:00007f9bc58b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.556698][T14665] RAX: ffffffffffffffda RBX: 00007f9bc4bd5fa0 RCX: 00007f9bc498eba9 [ 647.556714][T14665] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 647.556730][T14665] RBP: 00007f9bc58b7090 R08: 0000000000000000 R09: 0000000000000000 [ 647.556744][T14665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.556758][T14665] R13: 00007f9bc4bd6038 R14: 00007f9bc4bd5fa0 R15: 00007ffd8d882fa8 [ 647.556794][T14665] [ 647.556808][T14665] binder: 14664:14665 ioctl c0306201 200000000180 returned -14 [ 647.578252][T14669] binder: 14668:14669 ioctl c0306201 200000000080 returned -14 [ 647.585738][ T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.831305][T14671] binder: 14670:14671 ioctl c0306201 200000000080 returned -14 [ 647.963153][T14675] binder: 14674:14675 ioctl c0306201 200000000080 returned -14 [ 647.974180][T14675] binder: BINDER_SET_CONTEXT_MGR already set [ 647.981969][T14675] binder: 14674:14675 ioctl 4018620d 200000000040 returned -16 [ 648.125790][T14680] binder: 14679:14680 ioctl c0306201 200000000080 returned -14 [ 648.137868][T14680] binder: 14679:14680 ioctl 4018620d 0 returned -22 [ 648.156377][T14678] binder: 14676:14678 ioctl c0306201 200000000080 returned -14 [ 648.211928][T14681] input: syz0 as /devices/virtual/input/input227 [ 648.372968][T14686] binder: 14685:14686 ioctl c0306201 200000000080 returned -14 [ 648.393516][T14686] binder: BINDER_SET_CONTEXT_MGR already set [ 648.399578][T14686] binder: 14685:14686 ioctl 4018620d 200000000040 returned -16 [ 648.490114][T14689] binder: 14687:14689 ioctl c0306201 200000000080 returned -14 [ 648.540908][T14692] binder: 14691:14692 ioctl c0306201 200000000080 returned -14 [ 648.603132][T14694] binder: 14693:14694 ioctl c0306201 200000000080 returned -14 [ 648.630949][T14694] FAULT_INJECTION: forcing a failure. [ 648.630949][T14694] name failslab, interval 1, probability 0, space 0, times 0 [ 648.672668][T14694] CPU: 1 UID: 0 PID: 14694 Comm: syz.6.3066 Not tainted syzkaller #0 PREEMPT(full) [ 648.672705][T14694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 648.672720][T14694] Call Trace: [ 648.672730][T14694] [ 648.672741][T14694] dump_stack_lvl+0x189/0x250 [ 648.672779][T14694] ? __pfx____ratelimit+0x10/0x10 [ 648.672813][T14694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.672835][T14694] ? __pfx__printk+0x10/0x10 [ 648.672871][T14694] ? __pfx___might_resched+0x10/0x10 [ 648.672898][T14694] ? fs_reclaim_acquire+0x7d/0x100 [ 648.672929][T14694] should_fail_ex+0x414/0x560 [ 648.672963][T14694] should_failslab+0xa8/0x100 [ 648.672994][T14694] __kmalloc_cache_noprof+0x6f/0x6f0 [ 648.673020][T14694] ? binder_alloc_new_buf+0x268/0x2f30 [ 648.673059][T14694] binder_alloc_new_buf+0x268/0x2f30 [ 648.673106][T14694] ? __pfx_binder_debug+0x10/0x10 [ 648.673147][T14694] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 648.673178][T14694] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 648.673211][T14694] binder_transaction+0x23b4/0x6450 [ 648.673265][T14694] ? ima_match_policy+0x10b/0x2150 [ 648.673304][T14694] ? __pfx_binder_transaction+0x10/0x10 [ 648.673332][T14694] ? __lock_acquire+0xab9/0xd20 [ 648.673369][T14694] ? __might_fault+0xb0/0x130 [ 648.673416][T14694] binder_ioctl_write_read+0xd6a/0xa040 [ 648.673460][T14694] ? is_bpf_text_address+0x26/0x2b0 [ 648.673493][T14694] ? is_bpf_text_address+0x26/0x2b0 [ 648.673522][T14694] ? kernel_text_address+0xa5/0xe0 [ 648.673548][T14694] ? unwind_get_return_address+0x4d/0x90 [ 648.673592][T14694] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 648.673628][T14694] ? stack_trace_save+0x9c/0xe0 [ 648.673664][T14694] ? stack_depot_save_flags+0x40/0x860 [ 648.673700][T14694] ? kasan_save_track+0x4f/0x80 [ 648.673721][T14694] ? kasan_save_track+0x3e/0x80 [ 648.673741][T14694] ? __kasan_save_free_info+0x46/0x50 [ 648.673778][T14694] ? __kasan_slab_free+0x5b/0x80 [ 648.673800][T14694] ? kfree+0x199/0x6d0 [ 648.673818][T14694] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 648.673846][T14694] ? security_file_ioctl+0xcb/0x2d0 [ 648.673870][T14694] ? __se_sys_ioctl+0x47/0x170 [ 648.673892][T14694] ? do_syscall_64+0xfa/0xfa0 [ 648.673925][T14694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.673967][T14694] ? __pfx_binder_debug+0x10/0x10 [ 648.673998][T14694] ? do_raw_spin_lock+0x121/0x290 [ 648.674048][T14694] ? _raw_spin_unlock+0x28/0x50 [ 648.674078][T14694] ? binder_get_thread+0x178/0x6d0 [ 648.674116][T14694] binder_ioctl+0x3e0/0x19c0 [ 648.674154][T14694] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 648.674187][T14694] ? do_vfs_ioctl+0xbe8/0x1430 [ 648.674209][T14694] ? __pfx_binder_ioctl+0x10/0x10 [ 648.674243][T14694] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 648.674308][T14694] ? __fget_files+0x2a/0x420 [ 648.674343][T14694] ? __fget_files+0x3a0/0x420 [ 648.674371][T14694] ? __fget_files+0x2a/0x420 [ 648.674404][T14694] ? bpf_lsm_file_ioctl+0x9/0x20 [ 648.674439][T14694] ? __pfx_binder_ioctl+0x10/0x10 [ 648.674472][T14694] __se_sys_ioctl+0xfc/0x170 [ 648.674499][T14694] do_syscall_64+0xfa/0xfa0 [ 648.674531][T14694] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.674564][T14694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.674587][T14694] ? clear_bhb_loop+0x60/0xb0 [ 648.674614][T14694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.674636][T14694] RIP: 0033:0x7f1ef258eba9 [ 648.674658][T14694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.674679][T14694] RSP: 002b:00007f1ef07f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.674704][T14694] RAX: ffffffffffffffda RBX: 00007f1ef27d5fa0 RCX: 00007f1ef258eba9 [ 648.674721][T14694] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 648.674736][T14694] RBP: 00007f1ef07f6090 R08: 0000000000000000 R09: 0000000000000000 [ 648.674757][T14694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.674770][T14694] R13: 00007f1ef27d6038 R14: 00007f1ef27d5fa0 R15: 00007ffe5019a3d8 [ 648.674807][T14694] [ 649.105823][T14697] binder: 14696:14697 ioctl c0306201 200000000080 returned -14 [ 649.162218][T14702] binder: BINDER_SET_CONTEXT_MGR already set [ 649.194858][T14702] binder: 14698:14702 ioctl 4018620d 200000000280 returned -16 [ 649.221313][T14702] binder: 14698:14702 ioctl c0306201 200000000080 returned -14 [ 649.237130][T14702] binder: 14698:14702 ioctl c0306201 0 returned -14 [ 649.424892][T14711] binder: 14710:14711 ioctl c0306201 200000000080 returned -14 [ 649.491955][ T5930] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 649.622824][T14717] binder: 14716:14717 ioctl c0306201 200000000080 returned -14 [ 649.667403][ T5930] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.692716][ T5930] usb 4-1: config 0 interface 0 has no altsetting 0 [ 649.714041][ T5930] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 649.729958][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.755019][ T5930] usb 4-1: config 0 descriptor?? [ 649.968471][ T30] team0: Port device geneve0 removed [ 650.184478][ T5930] elecom 0003:056E:00FD.0022: unknown main item tag 0x0 [ 650.206222][ T5930] elecom 0003:056E:00FD.0022: unknown main item tag 0x0 [ 650.214287][ T5930] elecom 0003:056E:00FD.0022: unknown main item tag 0x0 [ 650.223057][ T5930] elecom 0003:056E:00FD.0022: unknown main item tag 0x0 [ 650.230369][ T5930] elecom 0003:056E:00FD.0022: unknown main item tag 0x0 [ 650.238807][ T5930] elecom 0003:056E:00FD.0022: unknown main item tag 0x0 [ 650.248944][ T5930] elecom 0003:056E:00FD.0022: unknown main item tag 0x0 [ 650.260622][ T5930] elecom 0003:056E:00FD.0022: hidraw0: USB HID v0.03 Device [HID 056e:00fd] on usb-dummy_hcd.3-1/input0 [ 650.272788][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.297250][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.333917][ T30] bond0 (unregistering): Released all slaves [ 650.406226][T14697] tipc: Started in network mode [ 650.413548][T14697] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 650.450848][T14697] tipc: Enabled bearer , priority 2 [ 650.509214][ T5914] usb 4-1: USB disconnect, device number 25 [ 650.555378][T14727] binder: 14726:14727 ioctl c0306201 200000000080 returned -14 [ 650.722933][T14730] binder: 14729:14730 ioctl c0306201 200000000080 returned -14 [ 650.959860][T14740] binder: 14738:14740 ioctl c0306201 200000000080 returned -14 [ 650.977696][T14740] binder: 14738:14740 ioctl c0306201 0 returned -14 [ 651.188073][T14584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 651.216794][T14584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 651.249594][T14584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 651.349313][T14584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 651.471475][ T5914] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 651.487121][T14767] binder: 14764:14767 ioctl c0306201 200000000080 returned -14 [ 651.541794][ T5900] tipc: Node number set to 10070698 [ 651.622512][ T5930] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 651.625577][ T5914] usb 7-1: Using ep0 maxpacket: 16 [ 651.648062][ T5914] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.680319][ T5914] usb 7-1: config 0 interface 0 has no altsetting 0 [ 651.703973][ T5914] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 651.717703][T14584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.747794][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.789541][ T5914] usb 7-1: config 0 descriptor?? [ 651.795552][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 651.803029][T14584] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.818790][ T5930] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 651.840952][T14773] binder: 14772:14773 ioctl c0306201 200000000080 returned -14 [ 651.849600][ T5930] usb 6-1: config 0 has no interface number 0 [ 651.870893][ T5930] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 651.871978][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.880941][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.887659][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.937907][ T5930] usb 6-1: Product: syz [ 651.956187][ T5930] usb 6-1: Manufacturer: syz [ 651.956681][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.960996][ T5930] usb 6-1: SerialNumber: syz [ 651.968608][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.997775][ T30] tipc: Left network mode [ 652.016377][ T5930] usb 6-1: config 0 descriptor?? [ 652.035864][ T5930] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 652.061246][ T5930] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 652.271022][ T5914] nzxt-smart2 0003:1E71:2009.0023: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 652.310507][T14781] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.342126][T14781] qnx4: unable to read the superblock [ 652.401519][ T5900] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 652.411087][T14783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.434714][T14783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.532632][ T5930] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 652.611629][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 652.621292][ T5900] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 652.624222][T14584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.665306][ T5900] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 652.673933][ T5900] usb 4-1: can't read configurations, error -61 [ 652.694456][ T30] hsr_slave_0: left promiscuous mode [ 652.709282][ T30] hsr_slave_1: left promiscuous mode [ 652.718986][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.739100][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.758282][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.777930][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.813767][ T5900] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 652.858889][ T30] veth1_macvtap: left promiscuous mode [ 652.877240][ T30] veth0_macvtap: left promiscuous mode [ 652.886929][ T30] veth1_vlan: left promiscuous mode [ 652.896365][ T30] veth0_vlan: left promiscuous mode [ 652.981520][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 652.987522][ T5900] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 653.024650][ T5900] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 653.041803][ T5900] usb 4-1: can't read configurations, error -61 [ 653.061942][ T5900] usb usb4-port1: attempt power cycle [ 653.410187][ T5900] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 653.441235][ T30] net veth1_virt_wifi virt_wifi0 (unregistering): left allmulticast mode [ 653.454991][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 653.465988][ T5900] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 653.488358][ T5900] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 653.500915][ T5900] usb 4-1: can't read configurations, error -61 [ 653.678728][ T5900] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 653.705957][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 653.712855][ T5900] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 653.724090][ T5900] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 653.733703][ T5900] usb 4-1: can't read configurations, error -61 [ 653.740844][ T5900] usb usb4-port1: unable to enumerate USB device [ 653.981198][ T30] team0 (unregistering): Port device team_slave_1 removed [ 654.069432][ T30] team0 (unregistering): Port device team_slave_0 removed [ 654.423525][ T5930] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 654.440571][ T5930] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 654.475239][ T5930] usb 6-1: USB disconnect, device number 52 [ 654.501146][ T5930] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 654.530065][T14792] binder: 14791:14792 ioctl c0306201 200000000080 returned -14 [ 654.575098][T14792] binder: 14791:14792 ioctl c0306201 0 returned -14 [ 654.697420][T14795] binder: 14794:14795 ioctl c0306201 200000000080 returned -14 [ 655.106808][T14803] binder: 14802:14803 ioctl c0306201 200000000080 returned -14 [ 655.579558][ T43] usb 7-1: USB disconnect, device number 22 [ 655.586615][T14812] binder: 14811:14812 ioctl c0306201 200000000080 returned -14 [ 655.626910][T14584] veth0_vlan: entered promiscuous mode [ 655.704720][T14584] veth1_vlan: entered promiscuous mode [ 655.787405][T14816] binder: 14815:14816 ioctl c0306201 200000000080 returned -14 [ 655.870432][T14584] veth0_macvtap: entered promiscuous mode [ 655.907554][T14818] binder: 14817:14818 ioctl c0306201 200000000080 returned -14 [ 655.932694][T14584] veth1_macvtap: entered promiscuous mode [ 655.999451][T14584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.054762][ T30] IPVS: stop unused estimator thread 0... [ 656.073357][T14584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.075487][T14822] binder: 14821:14822 ioctl c0306201 200000000080 returned -14 [ 656.110702][T14820] binder: 14819:14820 ioctl c0306201 200000000080 returned -14 [ 656.128215][ T1112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.148520][ T1112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.160360][T14820] binder: 14819:14820 ioctl 0 200000000300 returned -22 [ 656.168482][ T1112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.202311][ T1112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.212590][T14820] binder: 14819:14820 ioctl 0 200000000540 returned -22 [ 656.223742][T14820] binder: 14819:14820 ioctl 0 200000000580 returned -22 [ 656.240748][T14820] binder_alloc: 14819: binder_alloc_buf, no vma [ 656.308896][T14828] program syz.3.3100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.493369][T14833] binder: 14832:14833 ioctl c0306201 200000000080 returned -14 [ 656.513329][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.554886][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.635358][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.668426][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.795636][T14842] binder: 14840:14842 ioctl c0306201 200000000080 returned -14 [ 656.819831][T14844] binder: 14843:14844 ioctl c0306201 200000000080 returned -14 [ 656.940915][T14848] binder: 14847:14848 ioctl c0306201 200000000080 returned -14 [ 656.958503][T14851] binder: 14849:14851 ioctl c0306201 200000000080 returned -14 [ 656.967395][T14848] binder: 14847:14848 ioctl c0306201 0 returned -14 [ 657.002751][ T6367] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 657.106755][T14859] binder: 14857:14859 ioctl c0306201 200000000080 returned -14 [ 657.181806][ T6367] usb 4-1: Using ep0 maxpacket: 16 [ 657.195000][ T6367] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.209093][T14861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.218744][ T6367] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.230228][ T6367] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 657.244342][ T6367] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 657.254607][ T6367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.278022][ T6367] usb 4-1: config 0 descriptor?? [ 657.432304][T14870] binder: 14869:14870 ioctl c0306201 200000000080 returned -14 [ 657.444898][T14870] binder: BINDER_SET_CONTEXT_MGR already set [ 657.451798][T14870] binder: 14869:14870 ioctl 4018620d 2000000000c0 returned -16 [ 657.460430][T14870] binder: 14869:14870 unknown command 0 [ 657.469272][T14870] binder: 14869:14870 ioctl c0306201 200000000080 returned -22 [ 657.479779][T14870] binder: BINDER_SET_CONTEXT_MGR already set [ 657.487001][T14870] binder: 14869:14870 ioctl 4018620d 200000000040 returned -16 [ 657.702353][ T6367] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 657.709845][ T6367] microsoft 0003:045E:07DA.0024: ignoring exceeding usage max [ 657.721047][ T6367] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 657.729082][ T6367] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 657.731855][T12528] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 657.736860][ T6367] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 657.760123][ T6367] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 657.770232][ T6367] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 657.779432][ T6367] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 657.788372][ T6367] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 657.811458][ T6367] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 657.818880][ T6367] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 657.826635][ T6367] microsoft 0003:045E:07DA.0024: unsupported Resolution Multiplier 0 [ 657.905922][ T6367] microsoft 0003:045E:07DA.0024: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 657.921534][T12528] usb 6-1: Using ep0 maxpacket: 8 [ 657.929620][T12528] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 657.940671][ T6367] microsoft 0003:045E:07DA.0024: no inputs found [ 657.966882][ T6367] microsoft 0003:045E:07DA.0024: could not initialize ff, continuing anyway [ 657.972030][T12528] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 658.000853][ T6367] usb 4-1: USB disconnect, device number 30 [ 658.041144][T12528] usb 6-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 658.065211][T14875] binder: 14874:14875 ioctl c0306201 200000000080 returned -14 [ 658.071719][T12528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.112886][T12528] usb 6-1: config 0 descriptor?? [ 658.127710][T14873] fido_id[14873]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 658.148361][T14877] binder: 14876:14877 ioctl c0306201 200000000080 returned -14 [ 658.278806][T14881] binder: 14880:14881 ioctl c0306201 200000000080 returned -14 [ 658.289964][T14881] FAULT_INJECTION: forcing a failure. [ 658.289964][T14881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 658.308194][T14881] CPU: 1 UID: 0 PID: 14881 Comm: syz.1.3119 Not tainted syzkaller #0 PREEMPT(full) [ 658.308232][T14881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 658.308246][T14881] Call Trace: [ 658.308256][T14881] [ 658.308266][T14881] dump_stack_lvl+0x189/0x250 [ 658.308295][T14881] ? __pfx____ratelimit+0x10/0x10 [ 658.308328][T14881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.308350][T14881] ? __pfx__printk+0x10/0x10 [ 658.308386][T14881] ? fs_reclaim_acquire+0x7d/0x100 [ 658.308424][T14881] should_fail_ex+0x414/0x560 [ 658.308458][T14881] prepare_alloc_pages+0x213/0x610 [ 658.308495][T14881] __alloc_frozen_pages_noprof+0x123/0x370 [ 658.308530][T14881] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 658.308579][T14881] alloc_pages_mpol+0x232/0x4a0 [ 658.308614][T14881] alloc_pages_noprof+0xa9/0x190 [ 658.308643][T14881] pte_alloc_one+0x21/0x170 [ 658.308677][T14881] __pte_alloc+0x25/0x1a0 [ 658.308705][T14881] ? walk_to_pmd+0x2b8/0x460 [ 658.308739][T14881] insert_page+0x28f/0x2c0 [ 658.308776][T14881] ? __pfx_insert_page+0x10/0x10 [ 658.308807][T14881] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 658.308831][T14881] ? vm_insert_page+0x1f1/0x390 [ 658.308869][T14881] binder_alloc_new_buf+0x1eee/0x2f30 [ 658.308933][T14881] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 658.308964][T14881] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 658.308998][T14881] binder_transaction+0x23b4/0x6450 [ 658.309059][T14881] ? ima_match_policy+0x10b/0x2150 [ 658.309099][T14881] ? __pfx_binder_transaction+0x10/0x10 [ 658.309128][T14881] ? __lock_acquire+0xab9/0xd20 [ 658.309166][T14881] ? __might_fault+0xb0/0x130 [ 658.309215][T14881] binder_ioctl_write_read+0xd6a/0xa040 [ 658.309259][T14881] ? is_bpf_text_address+0x26/0x2b0 [ 658.309294][T14881] ? is_bpf_text_address+0x26/0x2b0 [ 658.309323][T14881] ? kernel_text_address+0xa5/0xe0 [ 658.309348][T14881] ? unwind_get_return_address+0x4d/0x90 [ 658.309392][T14881] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 658.309429][T14881] ? stack_trace_save+0x9c/0xe0 [ 658.309465][T14881] ? stack_depot_save_flags+0x40/0x860 [ 658.309501][T14881] ? kasan_save_track+0x4f/0x80 [ 658.309522][T14881] ? kasan_save_track+0x3e/0x80 [ 658.309542][T14881] ? __kasan_save_free_info+0x46/0x50 [ 658.309572][T14881] ? __kasan_slab_free+0x5b/0x80 [ 658.309594][T14881] ? kfree+0x199/0x6d0 [ 658.309612][T14881] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 658.309639][T14881] ? security_file_ioctl+0xcb/0x2d0 [ 658.309664][T14881] ? __se_sys_ioctl+0x47/0x170 [ 658.309686][T14881] ? do_syscall_64+0xfa/0xfa0 [ 658.309718][T14881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.309762][T14881] ? __pfx_binder_debug+0x10/0x10 [ 658.309792][T14881] ? do_raw_spin_lock+0x121/0x290 [ 658.309836][T14881] ? _raw_spin_unlock+0x28/0x50 [ 658.309861][T14881] ? binder_get_thread+0x178/0x6d0 [ 658.309898][T14881] binder_ioctl+0x3e0/0x19c0 [ 658.309936][T14881] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 658.309969][T14881] ? do_vfs_ioctl+0xbe8/0x1430 [ 658.309992][T14881] ? __pfx_binder_ioctl+0x10/0x10 [ 658.310026][T14881] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 658.310099][T14881] ? __fget_files+0x2a/0x420 [ 658.310135][T14881] ? __fget_files+0x3a0/0x420 [ 658.310164][T14881] ? __fget_files+0x2a/0x420 [ 658.310197][T14881] ? bpf_lsm_file_ioctl+0x9/0x20 [ 658.310232][T14881] ? __pfx_binder_ioctl+0x10/0x10 [ 658.310265][T14881] __se_sys_ioctl+0xfc/0x170 [ 658.310292][T14881] do_syscall_64+0xfa/0xfa0 [ 658.310325][T14881] ? lockdep_hardirqs_on+0x9c/0x150 [ 658.310363][T14881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.310385][T14881] ? clear_bhb_loop+0x60/0xb0 [ 658.310413][T14881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.310436][T14881] RIP: 0033:0x7fae3918eba9 [ 658.310458][T14881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.310478][T14881] RSP: 002b:00007fae39f80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.310504][T14881] RAX: ffffffffffffffda RBX: 00007fae393d5fa0 RCX: 00007fae3918eba9 [ 658.310521][T14881] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 658.310537][T14881] RBP: 00007fae39f80090 R08: 0000000000000000 R09: 0000000000000000 [ 658.310551][T14881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 658.310566][T14881] R13: 00007fae393d6038 R14: 00007fae393d5fa0 R15: 00007ffef4428e68 [ 658.310603][T14881] [ 658.310687][T14881] binder_alloc: 14880: binder_install_single_page failed to insert page at offset 0 with -12 [ 658.440747][T14883] binder: 14882:14883 ioctl c0306201 200000000080 returned -14 [ 658.606826][T14886] binder: BINDER_SET_CONTEXT_MGR already set [ 658.738551][T14887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3121'. [ 658.744646][T12528] monterey 0003:0566:3004.0025: report_id 1108778202 is invalid [ 658.781200][T14887] tipc: Invalid UDP bearer configuration [ 658.787189][T14886] binder: 14882:14886 ioctl 4018620d 200000000040 returned -16 [ 658.816332][T12528] monterey 0003:0566:3004.0025: item 0 4 1 8 parsing failed [ 658.826943][T12528] monterey 0003:0566:3004.0025: probe with driver monterey failed with error -22 [ 658.852071][T14887] tipc: Enabling of bearer rejected, failed to enable media [ 658.903191][T14870] binder_alloc: 14869: binder_alloc_buf, no vma [ 658.918611][T12528] usb 6-1: USB disconnect, device number 53 [ 658.932144][ T93] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 659.029446][T14898] binder: 14897:14898 ioctl c0306201 200000000080 returned -14 [ 659.067003][T14898] binder: 14897:14898 ioctl 5404 0 returned -22 [ 659.103388][ T93] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.120420][ T93] usb 2-1: config 0 interface 0 has no altsetting 0 [ 659.128029][ T93] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 659.138165][ T93] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.152570][ T93] usb 2-1: config 0 descriptor?? [ 659.232489][T14904] binder: BINDER_SET_CONTEXT_MGR already set [ 659.238603][T14904] binder: 14903:14904 ioctl 4018620d 200000000280 returned -16 [ 659.249542][T14904] binder: 14903:14904 ioctl c0306201 200000000080 returned -14 [ 659.258911][T14904] Scaler: ================= START STATUS ================= [ 659.267015][T14904] Scaler: ================== END STATUS ================== [ 659.331676][ T5930] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 659.355949][T14906] binder: 14905:14906 ioctl c0306201 200000000080 returned -14 [ 659.389565][ T93] megaworld 0003:07B5:0312.0026: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0 [ 659.418619][ T93] megaworld 0003:07B5:0312.0026: no inputs found [ 659.491672][ T5930] usb 7-1: Using ep0 maxpacket: 32 [ 659.499265][ T5930] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 659.518684][ T5930] usb 7-1: config 0 has no interface number 0 [ 659.548059][ T5930] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 659.565221][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.582338][ T5930] usb 7-1: Product: syz [ 659.591731][ T5930] usb 7-1: Manufacturer: syz [ 659.598520][ T93] usb 2-1: USB disconnect, device number 33 [ 659.618327][ T5930] usb 7-1: SerialNumber: syz [ 659.623074][T14913] binder: 14912:14913 ioctl c0306201 200000000080 returned -14 [ 659.659440][ T5930] usb 7-1: config 0 descriptor?? [ 659.699349][ T5930] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 659.730992][ T5930] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 659.893890][T14901] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.910801][T14901] qnx4: unable to read the superblock [ 659.922849][T14901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.933567][T14901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.997152][T14920] binder: 14919:14920 ioctl c0306201 200000000080 returned -14 [ 660.008164][ T5930] radio-raremono 7-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 660.298725][T14929] binder: 14928:14929 ioctl c0306201 200000000080 returned -14 [ 660.331635][ T5914] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 660.497555][ T5914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 660.514816][ T5914] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=b5.6d [ 660.529536][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.551474][ T5914] usb 6-1: Product: syz [ 660.560754][ T5914] usb 6-1: Manufacturer: syz [ 660.576056][ T5914] usb 6-1: SerialNumber: syz [ 660.591892][ T5914] usb 6-1: config 0 descriptor?? [ 660.738254][ T5914] rtsx_usb 6-1:0.0: probe with driver rtsx_usb failed with error -22 [ 660.775647][T14939] input: syz1 as /devices/virtual/input/input228 [ 660.819640][ T5861] usb 6-1: USB disconnect, device number 54 [ 661.421870][T14957] binder: 14954:14957 ioctl c0306201 200000000080 returned -14 [ 661.449852][T14957] binder: BINDER_SET_CONTEXT_MGR already set [ 661.462488][T14957] binder: 14954:14957 ioctl 4018620d 200000000040 returned -16 [ 661.604524][T14960] binder: 14959:14960 ioctl c0306201 200000000080 returned -14 [ 661.841092][T14968] binder: 14967:14968 ioctl c0306201 200000000080 returned -14 [ 661.861840][ T5861] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 661.999347][T14972] binder: 14971:14972 ioctl c0306201 200000000080 returned -14 [ 662.023492][ T5861] usb 6-1: Using ep0 maxpacket: 8 [ 662.044012][ T5861] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 662.070578][ T5861] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 662.092854][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.121658][ T5861] usb 6-1: Product: syz [ 662.125999][ T5861] usb 6-1: Manufacturer: syz [ 662.130832][ T5861] usb 6-1: SerialNumber: syz [ 662.140599][ T5930] radio-raremono 7-1:0.35: raremono_cmd_main failed (-71) [ 662.195950][ T5930] radio-raremono 7-1:0.35: V4L2 device registered as radio48 [ 662.196431][ T5861] usb 6-1: config 0 descriptor?? [ 662.217712][T14974] binder: 14973:14974 ioctl c0306201 200000000080 returned -14 [ 662.234241][ T5861] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 662.240625][ T5930] usb 7-1: USB disconnect, device number 23 [ 662.259173][ T5930] radio-raremono 7-1:0.35: Thanko's Raremono disconnected [ 662.263081][ T5861] usb 6-1: setting power ON [ 662.275872][ T5861] dvb-usb: bulk message failed: -22 (2/0) [ 662.333123][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 662.377459][ T5861] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 662.410896][ T5861] usb 6-1: media controller created [ 662.432324][T14960] dvb-usb: bulk message failed: -22 (3/0) [ 662.450964][T14960] dvb-usb: bulk message failed: -22 (3/0) [ 662.462651][T14981] binder: 14980:14981 ioctl c0306201 200000000080 returned -14 [ 662.469404][ T32] INFO: task syz.0.2161:12309 blocked for more than 143 seconds. [ 662.493086][ T32] Not tainted syzkaller #0 [ 662.517122][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.530526][T14960] overlayfs: conflicting lowerdir path [ 662.551571][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 662.560296][ T32] task:syz.0.2161 state:D stack:28232 pid:12309 tgid:12308 ppid:5857 task_flags:0x400140 flags:0x00004004 [ 662.600006][ T32] Call Trace: [ 662.612523][ T32] [ 662.622380][ T32] __schedule+0x1798/0x4cc0 [ 662.636083][ T32] ? __lock_acquire+0xab9/0xd20 [ 662.653927][ T5861] usb 6-1: selecting invalid altsetting 6 [ 662.670494][ T32] ? __lock_acquire+0xab9/0xd20 [ 662.675949][ T5861] usb 6-1: digital interface selection failed (-22) [ 662.683180][ T32] ? __pfx___schedule+0x10/0x10 [ 662.688343][ T5861] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 662.697827][ T32] ? schedule+0x91/0x360 [ 662.703746][ T32] schedule+0x165/0x360 [ 662.708877][ T32] schedule_preempt_disabled+0x13/0x30 [ 662.715637][ T32] __mutex_lock+0x7e6/0x1350 [ 662.721138][ T5861] usb 6-1: setting power OFF [ 662.728977][ T5861] dvb-usb: bulk message failed: -22 (2/0) [ 662.737090][ T32] ? __mutex_lock+0x5bb/0x1350 [ 662.742355][ T32] ? bdev_open+0xe0/0xd30 [ 662.746867][ T5861] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 662.756730][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 662.762228][ T32] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 662.768091][ T5861] (NULL device *): no alternate interface [ 662.774841][ T32] ? alloc_file_pseudo_noaccount+0x203/0x2c0 [ 662.804727][ T32] ? disk_block_events+0xab/0x120 [ 662.821170][ T32] ? bdev_open+0xbe/0xd30 [ 662.830301][ T32] bdev_open+0xe0/0xd30 [ 662.842772][ T32] bdev_file_open_by_dev+0x1be/0x240 [ 662.856355][ T32] setup_bdev_super+0x5a/0x5b0 [ 662.861869][ T32] get_tree_bdev_flags+0x366/0x4d0 [ 662.867136][ T32] ? __pfx_hpfs_fill_super+0x10/0x10 [ 662.873064][ T32] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 662.878883][ T32] vfs_get_tree+0x8f/0x2b0 [ 662.883904][ T32] do_new_mount+0x302/0xa10 [ 662.888562][ T32] ? apparmor_capable+0x137/0x1b0 [ 662.894276][ T32] ? __pfx_do_new_mount+0x10/0x10 [ 662.899714][ T32] ? ns_capable+0x8a/0xf0 [ 662.904875][ T32] ? kmem_cache_free+0x19a/0x690 [ 662.910004][ T32] __se_sys_mount+0x313/0x410 [ 662.915367][ T32] ? __pfx___se_sys_mount+0x10/0x10 [ 662.920777][ T32] ? do_syscall_64+0xbe/0xfa0 [ 662.926205][ T32] ? __x64_sys_mount+0x20/0xc0 [ 662.931154][ T32] do_syscall_64+0xfa/0xfa0 [ 662.936242][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.949684][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.960791][ T32] ? clear_bhb_loop+0x60/0xb0 [ 662.967944][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.974114][ T32] RIP: 0033:0x7fdb8a58eba9 [ 662.978760][ T32] RSP: 002b:00007fdb8b44a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 662.987420][ T32] RAX: ffffffffffffffda RBX: 00007fdb8a7d5fa0 RCX: 00007fdb8a58eba9 [ 662.995700][ T32] RDX: 0000200000000240 RSI: 00002000000001c0 RDI: 0000200000000080 [ 663.003855][ T32] RBP: 00007fdb8a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 663.012037][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.020174][ T32] R13: 00007fdb8a7d6038 R14: 00007fdb8a7d5fa0 R15: 00007ffcf9b7f998 [ 663.028374][ T32] [ 663.031672][ T32] [ 663.031672][ T32] Showing all locks held in the system: [ 663.039302][ T5861] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 663.039590][ T32] 1 lock held by khungtaskd/32: [ 663.059383][ T32] #0: ffffffff8e53c560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 663.070941][ T32] 2 locks held by kworker/u8:4/79: [ 663.077943][ T32] 2 locks held by getty/5625: [ 663.082808][ T32] #0: ffff888033e160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 663.091158][ T5861] usb 6-1: USB disconnect, device number 55 [ 663.093300][ T32] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 663.113635][ T32] 5 locks held by kworker/1:3/5861: [ 663.119125][ T32] 1 lock held by udevd/6011: [ 663.130462][ T32] #0: ffff8880252a3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 663.139952][ T32] 2 locks held by syz.0.2161/12309: [ 663.145274][ T32] #0: ffff8880317060e0 (&type->s_umount_key#93/1){+.+.}-{4:4}, at: alloc_super+0x1bb/0x930 [ 663.155767][ T32] #1: ffff8880252a3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 663.168279][ T32] 1 lock held by syz.3.3131/14918: [ 663.176018][ T32] #0: ffffffff8e541ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 663.189498][ T32] [ 663.197738][ T32] ============================================= [ 663.197738][ T32] [ 663.213507][ T32] NMI backtrace for cpu 1 [ 663.213533][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 663.213556][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.213570][ T32] Call Trace: [ 663.213579][ T32] [ 663.213588][ T32] dump_stack_lvl+0x189/0x250 [ 663.213621][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.213649][ T32] ? __pfx__printk+0x10/0x10 [ 663.213696][ T32] nmi_cpu_backtrace+0x39e/0x3d0 [ 663.213726][ T32] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 663.213756][ T32] ? __pfx__printk+0x10/0x10 [ 663.213793][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 663.213822][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 663.213852][ T32] watchdog+0xf60/0xfa0 [ 663.213880][ T32] ? watchdog+0x1e2/0xfa0 [ 663.213909][ T32] kthread+0x711/0x8a0 [ 663.213945][ T32] ? __pfx_watchdog+0x10/0x10 [ 663.213968][ T32] ? __pfx_kthread+0x10/0x10 [ 663.214001][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 663.214032][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.214064][ T32] ? __pfx_kthread+0x10/0x10 [ 663.214098][ T32] ret_from_fork+0x47c/0x820 [ 663.214128][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 663.214163][ T32] ? __switch_to_asm+0x39/0x70 [ 663.214185][ T32] ? __switch_to_asm+0x33/0x70 [ 663.214207][ T32] ? __pfx_kthread+0x10/0x10 [ 663.214241][ T32] ret_from_fork_asm+0x1a/0x30 [ 663.214283][ T32] [ 663.214293][ T32] Sending NMI from CPU 1 to CPUs 0: [ 663.366320][ C0] NMI backtrace for cpu 0 [ 663.366349][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 663.366371][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.366384][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 663.366421][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 d8 1d 00 f3 0f 1e fa fb f4 48 e7 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 663.366438][ C0] RSP: 0018:ffffffff8e207d80 EFLAGS: 000002c6 [ 663.366456][ C0] RAX: de51a2a268adbe00 RBX: ffffffff8196c448 RCX: de51a2a268adbe00 [ 663.366472][ C0] RDX: 0000000000000001 RSI: ffffffff8dc9c297 RDI: ffffffff8c04f000 [ 663.366486][ C0] RBP: ffffffff8e207ea8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 663.366500][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fe50c30 [ 663.366516][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1c52a38 [ 663.366529][ C0] FS: 0000000000000000(0000) GS:ffff8881257b1000(0000) knlGS:0000000000000000 [ 663.366544][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 663.366558][ C0] CR2: 000000110c405d4d CR3: 00000000299e6000 CR4: 00000000003526f0 [ 663.366574][ C0] DR0: 0000000000000000 DR1: 0000000000000b5f DR2: 0000000000003706 [ 663.366587][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 663.366600][ C0] Call Trace: [ 663.366608][ C0] [ 663.366615][ C0] default_idle+0x13/0x20 [ 663.366636][ C0] default_idle_call+0x74/0xb0 [ 663.366657][ C0] do_idle+0x1e8/0x510 [ 663.366684][ C0] ? __pfx_do_idle+0x10/0x10 [ 663.366714][ C0] cpu_startup_entry+0x44/0x60 [ 663.366736][ C0] rest_init+0x2de/0x300 [ 663.366758][ C0] start_kernel+0x3a9/0x410 [ 663.366784][ C0] x86_64_start_reservations+0x24/0x30 [ 663.366814][ C0] x86_64_start_kernel+0x143/0x1c0 [ 663.366843][ C0] common_startup_64+0x13e/0x147 [ 663.366882][ C0] [ 663.367370][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 663.565477][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 663.574609][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.584765][ T32] Call Trace: [ 663.588063][ T32] [ 663.590996][ T32] dump_stack_lvl+0x99/0x250 [ 663.595598][ T32] ? __asan_memcpy+0x40/0x70 [ 663.600210][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.605426][ T32] ? __pfx__printk+0x10/0x10 [ 663.610039][ T32] vpanic+0x237/0x6d0 [ 663.614038][ T32] ? __pfx_vpanic+0x10/0x10 [ 663.618546][ T32] ? preempt_schedule_common+0x83/0xd0 [ 663.624035][ T32] panic+0xb9/0xc0 [ 663.627767][ T32] ? __pfx_panic+0x10/0x10 [ 663.632201][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 663.637585][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 663.643746][ T32] watchdog+0xf9f/0xfa0 [ 663.647925][ T32] ? watchdog+0x1e2/0xfa0 [ 663.652264][ T32] kthread+0x711/0x8a0 [ 663.656362][ T32] ? __pfx_watchdog+0x10/0x10 [ 663.661040][ T32] ? __pfx_kthread+0x10/0x10 [ 663.665648][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 663.670894][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.676187][ T32] ? __pfx_kthread+0x10/0x10 [ 663.680812][ T32] ret_from_fork+0x47c/0x820 [ 663.685420][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 663.690730][ T32] ? __switch_to_asm+0x39/0x70 [ 663.695512][ T32] ? __switch_to_asm+0x33/0x70 [ 663.700457][ T32] ? __pfx_kthread+0x10/0x10 [ 663.705338][ T32] ret_from_fork_asm+0x1a/0x30 [ 663.710123][ T32] [ 663.713543][ T32] Kernel Offset: disabled [ 663.717881][ T32] Rebooting in 86400 seconds..